From 0eb800d9342ff70b4c74da5e06a4c51e65cbebf5 Mon Sep 17 00:00:00 2001
From: Leonardo Cecchi <leonardo.cecchi@enterprisedb.com>
Date: Tue, 29 Jul 2025 17:03:20 +0200
Subject: [PATCH] docs: publish documentation for 1.27.0-rc1

Signed-off-by: Leonardo Cecchi <leonardo.cecchi@enterprisedb.com>
---
 assets/documentation/1.27.0-rc1/404.html      |  347 +
 .../backup_barmanobjectstore/index.html       |  344 +-
 .../backup_volumesnapshot/index.html          |  291 +-
 .../appendixes/object_stores/index.html       |  678 ++
 .../1.27.0-rc1/applications/index.html        |  453 ++
 .../1.27.0-rc1/architecture/index.html        |  778 ++
 .../1.27.0-rc1/backup/index.html              |  888 +++
 .../1.27.0-rc1/backup_recovery/index.html     |  354 +
 .../1.27.0-rc1/before_you_start/index.html    |  500 ++
 .../1.27.0-rc1/benchmarking/index.html        |  517 ++
 .../1.27.0-rc1/bootstrap/index.html           | 1102 +++
 .../1.27.0-rc1/certificates/index.html        |  713 ++
 .../1.27.0-rc1/cloudnative-pg.v1/index.html   | 6589 +++++++++++++++++
 .../1.27.0-rc1/cluster_conf/index.html        |  494 ++
 .../cncf-projects/cilium/index.html           |  597 ++
 .../cncf-projects/external-secrets/index.html |  613 ++
 .../1.27.0-rc1/connection_pooling/index.html  | 1022 +++
 .../1.27.0-rc1/container_images/index.html    |  432 ++
 .../1.27.0-rc1/controller/index.html          |  472 ++
 .../css/fonts/Roboto-Slab-Bold.woff           |  Bin 0 -> 87624 bytes
 .../css/fonts/Roboto-Slab-Bold.woff2          |  Bin 0 -> 67312 bytes
 .../css/fonts/Roboto-Slab-Regular.woff        |  Bin 0 -> 86288 bytes
 .../css/fonts/Roboto-Slab-Regular.woff2       |  Bin 0 -> 66444 bytes
 .../css/fonts/fontawesome-webfont.eot         |  Bin 0 -> 165742 bytes
 .../css/fonts/fontawesome-webfont.svg         | 2671 +++++++
 .../css/fonts/fontawesome-webfont.ttf         |  Bin 0 -> 165548 bytes
 .../css/fonts/fontawesome-webfont.woff        |  Bin 0 -> 98024 bytes
 .../css/fonts/fontawesome-webfont.woff2       |  Bin 0 -> 77160 bytes
 .../css/fonts/lato-bold-italic.woff           |  Bin 0 -> 323344 bytes
 .../css/fonts/lato-bold-italic.woff2          |  Bin 0 -> 193308 bytes
 .../1.27.0-rc1/css/fonts/lato-bold.woff       |  Bin 0 -> 309728 bytes
 .../1.27.0-rc1/css/fonts/lato-bold.woff2      |  Bin 0 -> 184912 bytes
 .../css/fonts/lato-normal-italic.woff         |  Bin 0 -> 328412 bytes
 .../css/fonts/lato-normal-italic.woff2        |  Bin 0 -> 195704 bytes
 .../1.27.0-rc1/css/fonts/lato-normal.woff     |  Bin 0 -> 309192 bytes
 .../1.27.0-rc1/css/fonts/lato-normal.woff2    |  Bin 0 -> 182708 bytes
 .../documentation/1.27.0-rc1/css/override.css |    3 +
 assets/documentation/1.27.0-rc1/css/theme.css |   13 +
 .../1.27.0-rc1/css/theme_extra.css            |  197 +
 .../1.27.0-rc1/database_import/index.html     |  788 ++
 .../index.html                                |  676 ++
 .../declarative_hibernation/index.html        |  422 ++
 .../declarative_role_management/index.html    |  585 ++
 .../documentation/1.27.0-rc1/e2e/index.html   |  565 ++
 .../1.27.0-rc1/failover/index.html            |  839 +++
 .../1.27.0-rc1/failure_modes/index.html       |  440 ++
 .../documentation/1.27.0-rc1/faq/index.html   |  802 ++
 .../1.27.0-rc1/fencing/index.html             |  469 ++
 .../1.27.0-rc1/image_catalog/index.html       |  458 ++
 .../1.27.0-rc1/images/apps-in-k8s.png         |  Bin 0 -> 45106 bytes
 .../1.27.0-rc1/images/apps-outside-k8s.png    |  Bin 0 -> 54998 bytes
 .../1.27.0-rc1/images/architecture-in-k8s.png |  Bin 0 -> 116084 bytes
 .../1.27.0-rc1/images/architecture-r.png      |  Bin 0 -> 100517 bytes
 .../images/architecture-read-only.png         |  Bin 0 -> 95360 bytes
 .../1.27.0-rc1/images/architecture-rw.png     |  Bin 0 -> 84508 bytes
 .../1.27.0-rc1/images/grafana-local.png       |  Bin 0 -> 398383 bytes
 .../images/k8s-architecture-2-az.png          |  Bin 0 -> 100839 bytes
 .../images/k8s-architecture-3-az.png          |  Bin 0 -> 119593 bytes
 .../images/k8s-architecture-multi.png         |  Bin 0 -> 137762 bytes
 .../1.27.0-rc1/images/k8s-pg-architecture.png |  Bin 0 -> 256099 bytes
 .../1.27.0-rc1/images/microservice-import.png |  Bin 0 -> 66198 bytes
 .../1.27.0-rc1/images/monolith-import.png     |  Bin 0 -> 56714 bytes
 .../1.27.0-rc1/images/multi-cluster.png       |  Bin 0 -> 202406 bytes
 .../images/network-storage-architecture.png   |  Bin 0 -> 214390 bytes
 .../images/operator-capability-level.png      |  Bin 0 -> 155789 bytes
 .../1.27.0-rc1/images/pgadmin4.png            |  Bin 0 -> 126821 bytes
 .../images/pgbouncer-architecture-rw.png      |  Bin 0 -> 169722 bytes
 .../images/pgbouncer-pooler-image.png         |  Bin 0 -> 32737 bytes
 .../images/pgbouncer-pooler-template.png      |  Bin 0 -> 24875 bytes
 .../1.27.0-rc1/images/prometheus-local.png    |  Bin 0 -> 125996 bytes
 ...cloud-architecture-storage-replication.png |  Bin 0 -> 106922 bytes
 .../images/public-cloud-architecture.png      |  Bin 0 -> 162809 bytes
 .../images/shared-nothing-architecture.png    |  Bin 0 -> 156302 bytes
 .../1.27.0-rc1/images/write_bw.1-2Draw.png    |  Bin 0 -> 15555 bytes
 .../imagevolume_extensions/index.html         |  699 ++
 .../documentation/1.27.0-rc1/img/favicon.ico  |  Bin 0 -> 1150 bytes
 assets/documentation/1.27.0-rc1/index.html    |  560 ++
 .../installation_upgrade/index.html           |  744 ++
 .../1.27.0-rc1/instance_manager/index.html    |  759 ++
 .../1.27.0-rc1/js/html5shiv.min.js            |    4 +
 .../1.27.0-rc1/js/jquery-3.6.0.min.js         |    2 +
 assets/documentation/1.27.0-rc1/js/theme.js   |    2 +
 .../1.27.0-rc1/js/theme_extra.js              |    8 +
 .../1.27.0-rc1/kubectl-plugin/index.html      | 1688 +++++
 .../1.27.0-rc1/kubernetes_upgrade/index.html  |  544 ++
 .../1.27.0-rc1/labels_annotations/index.html  |  609 ++
 .../1.27.0-rc1/logging/index.html             |  570 ++
 .../1.27.0-rc1/logical_replication/index.html |  801 ++
 .../1.27.0-rc1/monitoring/index.html          | 1226 +++
 .../1.27.0-rc1/networking/index.html          |  403 +
 .../operator_capability_levels/index.html     | 1046 +++
 .../1.27.0-rc1/operator_conf/index.html       |  585 ++
 .../1.27.0-rc1/postgis/index.html             |  502 ++
 .../1.27.0-rc1/postgres_upgrades/index.html   |  575 ++
 .../1.27.0-rc1/postgresql_conf/index.html     |  962 +++
 .../1.27.0-rc1/preview_version/index.html     |  407 +
 .../1.27.0-rc1/quickstart/index.html          |  635 ++
 .../1.27.0-rc1/recovery/index.html            |  933 +++
 .../edb-cloud-native-postgresql/index.html    | 1034 +++
 .../1.27.0-rc1/release_notes/index.html       |  388 +
 .../release_notes/old/v1.15/index.html        |  576 ++
 .../release_notes/old/v1.16/index.html        |  605 ++
 .../release_notes/old/v1.17/index.html        |  553 ++
 .../release_notes/old/v1.18/index.html        |  607 ++
 .../release_notes/old/v1.19/index.html        |  676 ++
 .../release_notes/old/v1.20/index.html        |  691 ++
 .../release_notes/old/v1.21/index.html        |  794 ++
 .../release_notes/old/v1.22/index.html        |  694 ++
 .../release_notes/old/v1.23/index.html        |  690 ++
 .../release_notes/old}/v1.24/index.html       |  289 +-
 .../1.27.0-rc1/release_notes/v1.25/index.html |  747 ++
 .../1.27.0-rc1/release_notes/v1.26/index.html |  721 ++
 .../1.27.0-rc1/release_notes/v1.27/index.html |  454 ++
 .../1.27.0-rc1/replica_cluster/index.html     |  962 +++
 .../1.27.0-rc1/replication/index.html         | 1174 +++
 .../1.27.0-rc1/resource_management/index.html |  460 ++
 .../1.27.0-rc1/rolling_update/index.html      |  453 ++
 .../1.27.0-rc1/samples/backup-example.yaml    |    7 +
 .../samples/backup-with-volume-snapshot.yaml  |    8 +
 .../samples/cluster-advanced-initdb.yaml      |   25 +
 .../samples/cluster-backup-aws-inherit.yaml   |   15 +
 .../samples/cluster-backup-azure-inherit.yaml |   15 +
 .../samples/cluster-backup-retention-30d.yaml |   32 +
 .../samples/cluster-clone-basicauth.yaml      |   29 +
 .../1.27.0-rc1/samples/cluster-clone-tls.yaml |   30 +
 .../cluster-example-bis-restore-cr.yaml       |   26 +
 .../samples/cluster-example-bis-restore.yaml  |   43 +
 .../samples/cluster-example-bis.yaml          |   29 +
 .../samples/cluster-example-catalog.yaml      |   24 +
 .../samples/cluster-example-cert-manager.yaml |  120 +
 .../samples/cluster-example-custom.yaml       |   28 +
 .../samples/cluster-example-full.yaml         |  110 +
 .../samples/cluster-example-initdb-icu.yaml   |   19 +
 .../cluster-example-initdb-sql-refs.yaml      |   47 +
 .../samples/cluster-example-initdb.yaml       |   23 +
 .../cluster-example-logical-destination.yaml  |   43 +
 .../cluster-example-logical-source.yaml       |   54 +
 .../cluster-example-managed-services.yaml     |   24 +
 .../samples/cluster-example-monitoring.yaml   |  224 +
 .../samples/cluster-example-pg-hba.yaml       |   12 +
 .../cluster-example-projected-volume.yaml     |   43 +
 ...er-example-replica-from-backup-simple.yaml |   30 +
 ...-example-replica-from-volume-snapshot.yaml |   54 +
 .../cluster-example-replica-streaming.yaml    |   38 +
 .../samples/cluster-example-secret.yaml       |   38 +
 .../samples/cluster-example-sync-az.yaml      |   14 +
 ...cluster-example-syncreplicas-explicit.yaml |   14 +
 .../cluster-example-syncreplicas-legacy.yaml  |   12 +
 .../cluster-example-syncreplicas-quorum.yaml  |   16 +
 .../cluster-example-trigger-backup.yaml       |    7 +
 .../samples/cluster-example-wal-storage.yaml  |   10 +
 .../cluster-example-with-backup-scaleway.yaml |   23 +
 .../samples/cluster-example-with-backup.yaml  |   33 +
 .../samples/cluster-example-with-probes.yaml  |   16 +
 .../samples/cluster-example-with-roles.yaml   |   40 +
 ...uster-example-with-tablespaces-backup.yaml |   37 +
 .../cluster-example-with-tablespaces.yaml     |   25 +
 .../cluster-example-with-volume-snapshot.yaml |   32 +
 .../1.27.0-rc1/samples/cluster-example.yaml   |   10 +
 .../samples/cluster-expose-service.yaml       |   36 +
 .../cluster-import-schema-only-basicauth.yaml |   27 +
 .../cluster-import-snapshot-basicauth.yaml    |   30 +
 .../samples/cluster-import-snapshot-tls.yaml  |   44 +
 .../samples/cluster-pvc-template.yaml         |   25 +
 .../samples/cluster-replica-async.yaml        |   30 +
 .../samples/cluster-replica-basicauth.yaml    |   33 +
 ...r-replica-from-backup-other-namespace.yaml |   37 +
 .../samples/cluster-replica-restore.yaml      |   44 +
 .../samples/cluster-replica-tls.yaml          |   34 +
 .../cluster-restore-external-cluster.yaml     |   28 +
 .../samples/cluster-restore-pitr.yaml         |   17 +
 .../cluster-restore-snapshot-full.yaml        |   18 +
 .../cluster-restore-snapshot-pitr.yaml        |   40 +
 .../samples/cluster-restore-snapshot.yaml     |   19 +
 .../cluster-restore-with-tablespaces.yaml     |   28 +
 .../1.27.0-rc1/samples/cluster-restore.yaml   |   14 +
 .../cluster-storage-class-with-backup.yaml    |   32 +
 .../samples/cluster-storage-class.yaml        |   18 +
 .../samples/database-example-fail.yaml        |    9 +
 .../samples/database-example-icu.yaml         |   16 +
 .../1.27.0-rc1/samples/database-example.yaml  |    9 +
 .../1.27.0-rc1/samples/dc/cluster-dc-a.yaml   |   71 +
 .../1.27.0-rc1/samples/dc/cluster-dc-b.yaml   |   75 +
 .../1.27.0-rc1/samples/dc/cluster-test.yaml   |   25 +
 .../1.27.0-rc1/samples/index.html             |  575 ++
 .../1.27.0-rc1/samples/k9s/plugins.yml        |  123 +
 .../1.27.0-rc1/samples/monitoring/alerts.yaml |   66 +
 .../samples/monitoring/kube-stack-config.yaml |   78 +
 .../samples/monitoring/podmonitor.yaml        |   10 +
 .../samples/monitoring/prometheusrule.yaml    |   71 +
 .../samples/networkpolicy-example.yaml        |   22 +
 .../1.27.0-rc1/samples/pooler-basic-auth.yaml |   15 +
 .../samples/pooler-deployment-strategy.yaml   |   19 +
 .../1.27.0-rc1/samples/pooler-external.yaml   |   21 +
 .../1.27.0-rc1/samples/pooler-tls.yaml        |   14 +
 .../1.27.0-rc1/samples/postgis-example.yaml   |   27 +
 .../samples/publication-example-objects.yaml  |   16 +
 .../samples/publication-example.yaml          |   11 +
 .../samples/scheduled-backup-example.yaml     |    9 +
 .../samples/subscription-example.yaml         |   11 +
 .../1.27.0-rc1/scheduling/index.html          |  553 ++
 assets/documentation/1.27.0-rc1/search.html   |  354 +
 .../documentation/1.27.0-rc1/search/lunr.js   | 3475 +++++++++
 .../documentation/1.27.0-rc1/search/main.js   |  109 +
 .../1.27.0-rc1/search/search_index.json       |    1 +
 .../documentation/1.27.0-rc1/search/worker.js |  133 +
 .../1.27.0-rc1/security/index.html            |  904 +++
 .../1.27.0-rc1/service_management/index.html  |  489 ++
 assets/documentation/1.27.0-rc1/sitemap.xml   |    3 +
 .../documentation/1.27.0-rc1/sitemap.xml.gz   |  Bin 0 -> 127 bytes
 .../1.27.0-rc1/ssl_connections/index.html     |  526 ++
 .../1.27.0-rc1/storage/index.html             |  743 ++
 .../1.27.0-rc1/supported_releases/index.html  |  699 ++
 .../1.27.0-rc1/tablespaces/index.html         |  685 ++
 .../1.27.0-rc1/troubleshooting/index.html     | 1026 +++
 .../1.27.0-rc1/use_cases/index.html           |  400 +
 .../1.27.0-rc1/wal_archiving/index.html       |  409 +
 assets/documentation/preview/404.html         |   26 +-
 .../backup_barmanobjectstore/index.html       |  708 ++
 .../backup_volumesnapshot/index.html          |  740 ++
 .../appendixes/object_stores/index.html       |  156 +-
 .../preview/applications/index.html           |   32 +-
 .../preview/architecture/index.html           |   26 +-
 .../documentation/preview/backup/index.html   |  573 +-
 .../preview/backup_recovery/index.html        |   26 +-
 .../preview/before_you_start/index.html       |   26 +-
 .../preview/benchmarking/index.html           |   26 +-
 .../preview/bootstrap/index.html              |   34 +-
 .../preview/certificates/index.html           |   51 +-
 .../preview/cloudnative-pg.v1/index.html      |  284 +-
 .../preview/cluster_conf/index.html           |   26 +-
 .../preview/cncf-projects/cilium/index.html   |  597 ++
 .../cncf-projects/external-secrets/index.html |   38 +-
 .../preview/connection_pooling/index.html     |   26 +-
 .../preview/container_images/index.html       |   30 +-
 .../preview/controller/index.html             |   26 +-
 .../preview/database_import/index.html        |  151 +-
 .../index.html                                |   26 +-
 .../declarative_hibernation/index.html        |   26 +-
 .../declarative_role_management/index.html    |   26 +-
 assets/documentation/preview/e2e/index.html   |   26 +-
 .../documentation/preview/failover/index.html |  408 +-
 .../preview/failure_modes/index.html          |   26 +-
 assets/documentation/preview/faq/index.html   |   26 +-
 .../documentation/preview/fencing/index.html  |   26 +-
 .../preview/image_catalog/index.html          |   26 +-
 .../preview/imagevolume_extensions/index.html |  699 ++
 assets/documentation/preview/index.html       |   62 +-
 .../preview/installation_upgrade/index.html   |  128 +-
 .../preview/instance_manager/index.html       |   66 +-
 .../preview/kubectl-plugin/index.html         |   56 +-
 .../preview/kubernetes_upgrade/index.html     |   26 +-
 .../preview/labels_annotations/index.html     |   26 +-
 .../documentation/preview/logging/index.html  |   26 +-
 .../preview/logical_replication/index.html    |   46 +-
 .../preview/monitoring/index.html             |   47 +-
 .../preview/networking/index.html             |   26 +-
 .../operator_capability_levels/index.html     |  122 +-
 .../preview/operator_conf/index.html          |   26 +-
 .../documentation/preview/postgis/index.html  |   26 +-
 .../preview/postgres_upgrades/index.html      |   42 +-
 .../preview/postgresql_conf/index.html        |   59 +-
 .../preview/preview_version/index.html        |   30 +-
 .../preview/quickstart/index.html             |   26 +-
 .../documentation/preview/recovery/index.html |  406 +-
 .../edb-cloud-native-postgresql/index.html    |   26 +-
 .../preview/release_notes/index.html          |   33 +-
 .../release_notes/old/v1.15/index.html        |   26 +-
 .../release_notes/old/v1.16/index.html        |   26 +-
 .../release_notes/old/v1.17/index.html        |   26 +-
 .../release_notes/old/v1.18/index.html        |   26 +-
 .../release_notes/old/v1.19/index.html        |   26 +-
 .../release_notes/old/v1.20/index.html        |   26 +-
 .../release_notes/old/v1.21/index.html        |   26 +-
 .../release_notes/old/v1.22/index.html        |   26 +-
 .../release_notes/old/v1.23/index.html        |   26 +-
 .../release_notes/old/v1.24/index.html        |  792 ++
 .../preview/release_notes/v1.25/index.html    |  249 +-
 .../preview/release_notes/v1.26/index.html    |  349 +-
 .../preview/release_notes/v1.27/index.html    |  454 ++
 .../preview/replica_cluster/index.html        |  106 +-
 .../preview/replication/index.html            |   98 +-
 .../preview/resource_management/index.html    |   43 +-
 .../preview/rolling_update/index.html         |   26 +-
 .../cluster-example-logical-destination.yaml  |    2 +
 .../cluster-example-logical-source.yaml       |   14 +-
 .../cluster-example-syncreplicas-quorum.yaml  |   16 +
 .../preview/samples/cluster-example.yaml      |    1 -
 .../documentation/preview/samples/index.html  |   26 +-
 .../preview/scheduling/index.html             |   26 +-
 assets/documentation/preview/search.html      |   26 +-
 .../preview/search/search_index.json          |    2 +-
 .../documentation/preview/security/index.html |   26 +-
 .../preview/service_management/index.html     |   26 +-
 assets/documentation/preview/sitemap.xml.gz   |  Bin 127 -> 127 bytes
 .../preview/ssl_connections/index.html        |   26 +-
 .../documentation/preview/storage/index.html  |   26 +-
 .../preview/supported_releases/index.html     |   81 +-
 .../preview/tablespaces/index.html            |   31 +-
 .../preview/troubleshooting/index.html        |   33 +-
 .../preview/use_cases/index.html              |   26 +-
 .../preview/wal_archiving/index.html          |  141 +-
 assets/robots.txt                             |    1 +
 content/docs/1.27.md                          |    6 +
 304 files changed, 73726 insertions(+), 2162 deletions(-)
 create mode 100644 assets/documentation/1.27.0-rc1/404.html
 rename assets/documentation/{preview => 1.27.0-rc1/appendixes}/backup_barmanobjectstore/index.html (62%)
 rename assets/documentation/{preview => 1.27.0-rc1/appendixes}/backup_volumesnapshot/index.html (79%)
 create mode 100644 assets/documentation/1.27.0-rc1/appendixes/object_stores/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/applications/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/architecture/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/backup/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/backup_recovery/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/before_you_start/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/benchmarking/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/bootstrap/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/certificates/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/cloudnative-pg.v1/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/cluster_conf/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/cncf-projects/cilium/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/cncf-projects/external-secrets/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/connection_pooling/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/container_images/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/controller/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/Roboto-Slab-Bold.woff
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/Roboto-Slab-Bold.woff2
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/Roboto-Slab-Regular.woff
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/Roboto-Slab-Regular.woff2
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.eot
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.svg
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.ttf
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.woff
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.woff2
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/lato-bold-italic.woff
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/lato-bold-italic.woff2
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/lato-bold.woff
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/lato-bold.woff2
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/lato-normal-italic.woff
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/lato-normal-italic.woff2
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/lato-normal.woff
 create mode 100644 assets/documentation/1.27.0-rc1/css/fonts/lato-normal.woff2
 create mode 100644 assets/documentation/1.27.0-rc1/css/override.css
 create mode 100644 assets/documentation/1.27.0-rc1/css/theme.css
 create mode 100644 assets/documentation/1.27.0-rc1/css/theme_extra.css
 create mode 100644 assets/documentation/1.27.0-rc1/database_import/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/declarative_database_management/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/declarative_hibernation/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/declarative_role_management/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/e2e/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/failover/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/failure_modes/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/faq/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/fencing/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/image_catalog/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/images/apps-in-k8s.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/apps-outside-k8s.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/architecture-in-k8s.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/architecture-r.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/architecture-read-only.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/architecture-rw.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/grafana-local.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/k8s-architecture-2-az.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/k8s-architecture-3-az.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/k8s-architecture-multi.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/k8s-pg-architecture.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/microservice-import.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/monolith-import.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/multi-cluster.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/network-storage-architecture.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/operator-capability-level.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/pgadmin4.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/pgbouncer-architecture-rw.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/pgbouncer-pooler-image.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/pgbouncer-pooler-template.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/prometheus-local.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/public-cloud-architecture-storage-replication.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/public-cloud-architecture.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/shared-nothing-architecture.png
 create mode 100644 assets/documentation/1.27.0-rc1/images/write_bw.1-2Draw.png
 create mode 100644 assets/documentation/1.27.0-rc1/imagevolume_extensions/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/img/favicon.ico
 create mode 100644 assets/documentation/1.27.0-rc1/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/installation_upgrade/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/instance_manager/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/js/html5shiv.min.js
 create mode 100644 assets/documentation/1.27.0-rc1/js/jquery-3.6.0.min.js
 create mode 100644 assets/documentation/1.27.0-rc1/js/theme.js
 create mode 100644 assets/documentation/1.27.0-rc1/js/theme_extra.js
 create mode 100644 assets/documentation/1.27.0-rc1/kubectl-plugin/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/kubernetes_upgrade/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/labels_annotations/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/logging/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/logical_replication/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/monitoring/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/networking/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/operator_capability_levels/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/operator_conf/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/postgis/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/postgres_upgrades/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/postgresql_conf/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/preview_version/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/quickstart/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/recovery/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/edb-cloud-native-postgresql/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/old/v1.15/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/old/v1.16/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/old/v1.17/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/old/v1.18/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/old/v1.19/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/old/v1.20/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/old/v1.21/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/old/v1.22/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/old/v1.23/index.html
 rename assets/documentation/{preview/release_notes => 1.27.0-rc1/release_notes/old}/v1.24/index.html (75%)
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/v1.25/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/v1.26/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/release_notes/v1.27/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/replica_cluster/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/replication/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/resource_management/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/rolling_update/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/samples/backup-example.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/backup-with-volume-snapshot.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-advanced-initdb.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-backup-aws-inherit.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-backup-azure-inherit.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-backup-retention-30d.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-clone-basicauth.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-clone-tls.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-bis-restore-cr.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-bis-restore.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-bis.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-catalog.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-cert-manager.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-custom.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-full.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-initdb-icu.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-initdb-sql-refs.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-initdb.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-logical-destination.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-logical-source.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-managed-services.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-monitoring.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-pg-hba.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-projected-volume.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-replica-from-backup-simple.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-replica-from-volume-snapshot.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-replica-streaming.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-secret.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-sync-az.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-syncreplicas-explicit.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-syncreplicas-legacy.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-syncreplicas-quorum.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-trigger-backup.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-wal-storage.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-with-backup-scaleway.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-with-backup.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-with-probes.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-with-roles.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-with-tablespaces-backup.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-with-tablespaces.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example-with-volume-snapshot.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-example.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-expose-service.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-import-schema-only-basicauth.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-import-snapshot-basicauth.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-import-snapshot-tls.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-pvc-template.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-replica-async.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-replica-basicauth.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-replica-from-backup-other-namespace.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-replica-restore.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-replica-tls.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-restore-external-cluster.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-restore-pitr.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-restore-snapshot-full.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-restore-snapshot-pitr.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-restore-snapshot.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-restore-with-tablespaces.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-restore.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-storage-class-with-backup.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/cluster-storage-class.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/database-example-fail.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/database-example-icu.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/database-example.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/dc/cluster-dc-a.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/dc/cluster-dc-b.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/dc/cluster-test.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/samples/k9s/plugins.yml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/monitoring/alerts.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/monitoring/kube-stack-config.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/monitoring/podmonitor.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/monitoring/prometheusrule.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/networkpolicy-example.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/pooler-basic-auth.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/pooler-deployment-strategy.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/pooler-external.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/pooler-tls.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/postgis-example.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/publication-example-objects.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/publication-example.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/scheduled-backup-example.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/samples/subscription-example.yaml
 create mode 100644 assets/documentation/1.27.0-rc1/scheduling/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/search.html
 create mode 100644 assets/documentation/1.27.0-rc1/search/lunr.js
 create mode 100644 assets/documentation/1.27.0-rc1/search/main.js
 create mode 100644 assets/documentation/1.27.0-rc1/search/search_index.json
 create mode 100644 assets/documentation/1.27.0-rc1/search/worker.js
 create mode 100644 assets/documentation/1.27.0-rc1/security/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/service_management/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/sitemap.xml
 create mode 100644 assets/documentation/1.27.0-rc1/sitemap.xml.gz
 create mode 100644 assets/documentation/1.27.0-rc1/ssl_connections/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/storage/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/supported_releases/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/tablespaces/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/troubleshooting/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/use_cases/index.html
 create mode 100644 assets/documentation/1.27.0-rc1/wal_archiving/index.html
 create mode 100644 assets/documentation/preview/appendixes/backup_barmanobjectstore/index.html
 create mode 100644 assets/documentation/preview/appendixes/backup_volumesnapshot/index.html
 create mode 100644 assets/documentation/preview/cncf-projects/cilium/index.html
 create mode 100644 assets/documentation/preview/imagevolume_extensions/index.html
 create mode 100644 assets/documentation/preview/release_notes/old/v1.24/index.html
 create mode 100644 assets/documentation/preview/release_notes/v1.27/index.html
 create mode 100644 assets/documentation/preview/samples/cluster-example-syncreplicas-quorum.yaml
 create mode 100644 content/docs/1.27.md

diff --git a/assets/documentation/1.27.0-rc1/404.html b/assets/documentation/1.27.0-rc1/404.html
new file mode 100644
index 000000000..a10e10bf7
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/404.html
@@ -0,0 +1,347 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="/img/favicon.ico" />
+    <title>CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="/css/theme.css" />
+    <link rel="stylesheet" href="/css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="/css/override.css" rel="stylesheet" />
+    
+    <!--[if lt IE 9]>
+      <script src="/js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="/." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="//search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/.">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="/cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="/cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="/appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="/appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="/appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="/.">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="/." class="icon icon-home" aria-label="Docs"></a></li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+
+  <h1 id="404-page-not-found">404</h1>
+
+  <p><strong>Page not found</strong></p>
+
+
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="/js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "/";</script>
+    <script src="/js/theme_extra.js"></script>
+    <script src="/js/theme.js"></script>
+      <script src="/search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/preview/backup_barmanobjectstore/index.html b/assets/documentation/1.27.0-rc1/appendixes/backup_barmanobjectstore/index.html
similarity index 62%
rename from assets/documentation/preview/backup_barmanobjectstore/index.html
rename to assets/documentation/1.27.0-rc1/appendixes/backup_barmanobjectstore/index.html
index b5a8f8ebf..65058d5b1 100644
--- a/assets/documentation/preview/backup_barmanobjectstore/index.html
+++ b/assets/documentation/1.27.0-rc1/appendixes/backup_barmanobjectstore/index.html
@@ -4,22 +4,22 @@
     <meta charset="utf-8" />
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
-      <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Backup on object stores - CloudNativePG v1.26.0-rc3</title>
-    <link rel="stylesheet" href="../css/theme.css" />
-    <link rel="stylesheet" href="../css/theme_extra.css" />
+      <link rel="shortcut icon" href="../../img/favicon.ico" />
+    <title>Appendix B - Backup on object stores - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../css/theme.css" />
+    <link rel="stylesheet" href="../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
-        <link href="../css/override.css" rel="stylesheet" />
+        <link href="../../css/override.css" rel="stylesheet" />
     
       <script>
         // Current page data
-        var mkdocs_page_name = "Backup on object stores";
-        var mkdocs_page_input_path = "backup_barmanobjectstore.md";
+        var mkdocs_page_name = "Appendix B - Backup on object stores";
+        var mkdocs_page_input_path = "appendixes/backup_barmanobjectstore.md";
         var mkdocs_page_url = null;
       </script>
     
     <!--[if lt IE 9]>
-      <script src="../js/html5shiv.min.js"></script>
+      <script src="../../js/html5shiv.min.js"></script>
     <![endif]-->
       <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
       <script>hljs.highlightAll();</script> 
@@ -31,9 +31,9 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
-  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
   </form>
 </div>
@@ -41,257 +41,263 @@
 
       <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
-                </li>
-              </ul>
-              <ul class="current">
-                <li class="toctree-l1 current"><a class="reference internal current" href="#">Backup on object stores</a>
-    <ul class="current">
-    <li class="toctree-l2"><a class="reference internal" href="#common-object-stores">Common object stores</a>
-    </li>
-    <li class="toctree-l2"><a class="reference internal" href="#retention-policies">Retention policies</a>
-    </li>
-    <li class="toctree-l2"><a class="reference internal" href="#compression-algorithms">Compression algorithms</a>
-    </li>
-    <li class="toctree-l2"><a class="reference internal" href="#tagging-of-backup-objects">Tagging of backup objects</a>
-    </li>
-    <li class="toctree-l2"><a class="reference internal" href="#extra-options-for-the-backup-and-wal-commands">Extra options for the backup and WAL commands</a>
-    </li>
-    </ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../release_notes/">Release notes</a>
                 </li>
               </ul>
               <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
                   </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
-              <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+              <ul class="current">
+                  <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1 current"><a class="reference internal current" href="#">Appendix B - Backup on object stores</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#common-object-stores">Common object stores</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#wal-archiving">WAL archiving</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#retention-policies">Retention policies</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#compression-algorithms">Compression algorithms</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#tagging-of-backup-objects">Tagging of backup objects</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#extra-options-for-the-backup-and-wal-commands">Extra options for the backup and WAL commands</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#recovery-from-an-object-store">Recovery from an object store</a>
+    </li>
+    </ul>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -301,14 +307,15 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
         <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
   <ul class="wy-breadcrumbs">
-    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
-      <li class="breadcrumb-item active">Backup on object stores</li>
+    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+          <li class="breadcrumb-item">Appendixes</li>
+      <li class="breadcrumb-item active">Appendix B - Backup on object stores</li>
     <li class="wy-breadcrumbs-aside">
     </li>
   </ul>
@@ -317,15 +324,17 @@
           <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
             <div class="section" itemprop="articleBody">
               
-                <h1 id="backup-on-object-stores">Backup on object stores</h1>
+                <h1 id="appendix-b-backup-on-object-stores">Appendix B - Backup on object stores</h1>
 <!-- SPDX-License-Identifier: CC-BY-4.0 -->
 
 <div class="admonition warning">
 <p class="admonition-title">Warning</p>
-<p>With the deprecation of native Barman Cloud support in CloudNativePG in
-favor of the Barman Cloud Plugin, this page—and the backup and recovery
-documentation—may undergo changes before the official release of version
-1.26.0.</p>
+<p>As of CloudNativePG 1.26, <strong>native Barman Cloud support is deprecated</strong> in
+favor of the <strong>Barman Cloud Plugin</strong>. This page has been moved to the appendix
+for reference purposes. While the native integration remains functional for
+now, we strongly recommend beginning a gradual migration to the plugin-based
+interface after appropriate testing.  For guidance, see
+<a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/migration/">Migrating from Built-in CloudNativePG Backup</a>.</p>
 </div>
 <p>CloudNativePG natively supports <strong>online/hot backup</strong> of PostgreSQL
 clusters through continuous physical backup and WAL archiving on an object
@@ -352,21 +361,76 @@ <h1 id="backup-on-object-stores">Backup on object stores</h1>
 </div>
 <p>A backup is performed from a primary or a designated primary instance in a
 <code>Cluster</code> (please refer to
-<a href="../replica_cluster/">replica clusters</a>
+<a href="../../replica_cluster/">replica clusters</a>
 for more information about designated primary instances), or alternatively
-on a <a href="../backup/#backup-from-a-standby">standby</a>.</p>
+on a <a href="../../backup/#backup-from-a-standby">standby</a>.</p>
 <h2 id="common-object-stores">Common object stores</h2>
 <p>If you are looking for a specific object store such as
-<a href="../appendixes/object_stores/#aws-s3">AWS S3</a>,
-<a href="../appendixes/object_stores/#azure-blob-storage">Microsoft Azure Blob Storage</a>,
-<a href="../appendixes/object_stores/#google-cloud-storage">Google Cloud Storage</a>, or
-<a href="../appendixes/object_stores/#minio-gateway">MinIO Gateway</a>, or a compatible
-provider, please refer to <a href="../appendixes/object_stores/">Appendix A - Common object stores</a>.</p>
-<h2 id="retention-policies">Retention policies</h2>
+<a href="../object_stores/#aws-s3">AWS S3</a>,
+<a href="../object_stores/#azure-blob-storage">Microsoft Azure Blob Storage</a>,
+<a href="../object_stores/#google-cloud-storage">Google Cloud Storage</a>, or a compatible
+provider, please refer to <a href="../object_stores/">Appendix C - Common object stores for backups</a>.</p>
+<h2 id="wal-archiving">WAL archiving</h2>
+<p>WAL archiving is the process that feeds a <a href="../../backup/#wal-archive">WAL archive</a>
+in CloudNativePG.</p>
+<p>The WAL archive is defined in the <code>.spec.backup.barmanObjectStore</code> stanza of
+a <code>Cluster</code> resource.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Please refer to <a href="https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#BarmanObjectStoreConfiguration"><code>BarmanObjectStoreConfiguration</code></a>
+in the barman-cloud API for a full list of options.</p>
+</div>
+<p>If required, you can choose to compress WAL files as soon as they
+are uploaded and/or encrypt them:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      [...]
+      wal:
+        compression: gzip
+        encryption: AES256
+</code></pre>
+<p>You can configure the encryption directly in your bucket, and the operator
+will use it unless you override it in the cluster configuration.</p>
+<p>PostgreSQL implements a sequential archiving scheme, where the
+<code>archive_command</code> will be executed sequentially for every WAL
+segment to be archived.</p>
 <div class="admonition important">
 <p class="admonition-title">Important</p>
-<p>Retention policies are not currently available on volume snapshots.</p>
+<p>By default, CloudNativePG sets <code>archive_timeout</code> to <code>5min</code>, ensuring
+that WAL files, even in case of low workloads, are closed and archived
+at least every 5 minutes, providing a deterministic time-based value for
+your Recovery Point Objective (<a href="../../before_you_start/#rpo">RPO</a>). Even though you change the value
+of the <a href="https://www.postgresql.org/docs/current/runtime-config-wal.html#GUC-ARCHIVE-TIMEOUT"><code>archive_timeout</code> setting in the PostgreSQL configuration</a>,
+our experience suggests that the default value set by the operator is
+suitable for most use cases.</p>
 </div>
+<p>When the bandwidth between the PostgreSQL instance and the object
+store allows archiving more than one WAL file in parallel, you
+can use the parallel WAL archiving feature of the instance manager
+like in the following example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      [...]
+      wal:
+        compression: gzip
+        maxParallel: 8
+        encryption: AES256
+</code></pre>
+<p>In the previous example, the instance manager optimizes the WAL
+archiving process by archiving in parallel at most eight ready
+WALs, including the one requested by PostgreSQL.</p>
+<p>When PostgreSQL will request the archiving of a WAL that has
+already been archived by the instance manager as an optimization,
+that archival request will be just dismissed with a positive status.</p>
+<h2 id="retention-policies">Retention policies</h2>
 <p>CloudNativePG can manage the automated deletion of backup files from
 the backup object store, using <strong>retention policies</strong> based on the recovery
 window.</p>
@@ -503,7 +567,7 @@ <h2 id="extra-options-for-the-backup-and-wal-commands">Extra options for the bac
 <p>You can append additional options to the <code>barman-cloud-backup</code> and <code>barman-cloud-wal-archive</code> commands by using
 the <code>additionalCommandArgs</code> property in the
 <code>.spec.backup.barmanObjectStore.data</code> and <code>.spec.backup.barmanObjectStore.wal</code> sections respectively.
-This properties are lists of strings that will be appended to the
+These properties are lists of strings that will be appended to the
 <code>barman-cloud-backup</code> and <code>barman-cloud-wal-archive</code> commands.</p>
 <p>For example, you can use the <code>--read-timeout=60</code> to customize the connection
 reading timeout.</p>
@@ -539,12 +603,66 @@ <h2 id="extra-options-for-the-backup-and-wal-commands">Extra options for the bac
         - &quot;--max-concurrency=1&quot;
         - &quot;--read-timeout=60&quot;
 </code></pre>
+<h2 id="recovery-from-an-object-store">Recovery from an object store</h2>
+<p>You can recover from a backup created by Barman Cloud and stored on a supported
+object store. After you define the external cluster, including all the required
+configuration in the <code>barmanObjectStore</code> section, you need to reference it in
+the <code>.spec.recovery.source</code> option.</p>
+<p>This example defines a recovery object store in a blob container in Azure:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore
+spec:
+  [...]
+
+  superuserSecret:
+    name: superuser-secret
+
+  bootstrap:
+    recovery:
+      source: clusterBackup
+
+  externalClusters:
+    - name: clusterBackup
+      barmanObjectStore:
+        destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/
+        azureCredentials:
+          storageAccount:
+            name: recovery-object-store-secret
+            key: storage_account_name
+          storageKey:
+            name: recovery-object-store-secret
+            key: storage_account_key
+        wal:
+          maxParallel: 8
+</code></pre>
+<p>The previous example assumes that the application database and its owning user
+are named <code>app</code> by default. If the PostgreSQL cluster being restored uses
+different names, you must specify these names before exiting the recovery phase,
+as documented in <a href="../../recovery/#configure-the-application-database">"Configure the application database"</a>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>By default, the <code>recovery</code> method strictly uses the <code>name</code> of the
+cluster in the <code>externalClusters</code> section as the name of the main folder
+of the backup data within the object store. This name is normally reserved
+for the name of the server. You can specify a different folder name
+using the <code>barmanObjectStore.serverName</code> property.</p>
+</div>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>This example takes advantage of the parallel WAL restore feature,
+dedicating up to 8 jobs to concurrently fetch the required WAL files from the
+archive. This feature can appreciably reduce the recovery time. Make sure that
+you plan ahead for this scenario and correctly tune the value of this parameter
+for your environment. It will make a difference when you need it, and you will.</p>
+</div>
               
             </div>
           </div><footer>
     <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
-        <a href="../backup/" class="btn btn-neutral float-left" title="Backup"><span class="icon icon-circle-arrow-left"></span> Previous</a>
-        <a href="../wal_archiving/" class="btn btn-neutral float-right" title="WAL archiving">Next <span class="icon icon-circle-arrow-right"></span></a>
+        <a href="../backup_volumesnapshot/" class="btn btn-neutral float-left" title="Appendix A - Backup on volume snapshots"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../object_stores/" class="btn btn-neutral float-right" title="Appendix C - Common object stores for backups">Next <span class="icon icon-circle-arrow-right"></span></a>
     </div>
 
   <hr/>
@@ -568,18 +686,18 @@ <h2 id="extra-options-for-the-backup-and-wal-commands">Extra options for the bac
   <span class="rst-current-version" data-toggle="rst-current-version">
     
     
-      <span><a href="../backup/" style="color: #fcfcfc">&laquo; Previous</a></span>
+      <span><a href="../backup_volumesnapshot/" style="color: #fcfcfc">&laquo; Previous</a></span>
     
     
-      <span><a href="../wal_archiving/" style="color: #fcfcfc">Next &raquo;</a></span>
+      <span><a href="../object_stores/" style="color: #fcfcfc">Next &raquo;</a></span>
     
   </span>
 </div>
-    <script src="../js/jquery-3.6.0.min.js"></script>
-    <script>var base_url = "..";</script>
-    <script src="../js/theme_extra.js"></script>
-    <script src="../js/theme.js"></script>
-      <script src="../search/main.js"></script>
+    <script src="../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../..";</script>
+    <script src="../../js/theme_extra.js"></script>
+    <script src="../../js/theme.js"></script>
+      <script src="../../search/main.js"></script>
     <script>
         jQuery(function () {
             SphinxRtdTheme.Navigation.enable(true);
diff --git a/assets/documentation/preview/backup_volumesnapshot/index.html b/assets/documentation/1.27.0-rc1/appendixes/backup_volumesnapshot/index.html
similarity index 79%
rename from assets/documentation/preview/backup_volumesnapshot/index.html
rename to assets/documentation/1.27.0-rc1/appendixes/backup_volumesnapshot/index.html
index 2fdf9c493..0a83ac16f 100644
--- a/assets/documentation/preview/backup_volumesnapshot/index.html
+++ b/assets/documentation/1.27.0-rc1/appendixes/backup_volumesnapshot/index.html
@@ -4,22 +4,22 @@
     <meta charset="utf-8" />
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
-      <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Backup on volume snapshots - CloudNativePG v1.26.0-rc3</title>
-    <link rel="stylesheet" href="../css/theme.css" />
-    <link rel="stylesheet" href="../css/theme_extra.css" />
+      <link rel="shortcut icon" href="../../img/favicon.ico" />
+    <title>Appendix A - Backup on volume snapshots - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../css/theme.css" />
+    <link rel="stylesheet" href="../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
-        <link href="../css/override.css" rel="stylesheet" />
+        <link href="../../css/override.css" rel="stylesheet" />
     
       <script>
         // Current page data
-        var mkdocs_page_name = "Backup on volume snapshots";
-        var mkdocs_page_input_path = "backup_volumesnapshot.md";
+        var mkdocs_page_name = "Appendix A - Backup on volume snapshots";
+        var mkdocs_page_input_path = "appendixes/backup_volumesnapshot.md";
         var mkdocs_page_url = null;
       </script>
     
     <!--[if lt IE 9]>
-      <script src="../js/html5shiv.min.js"></script>
+      <script src="../../js/html5shiv.min.js"></script>
     <![endif]-->
       <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
       <script>hljs.highlightAll();</script> 
@@ -31,9 +31,9 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
-  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
   </form>
 </div>
@@ -41,273 +41,275 @@
 
       <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
-                </li>
-              </ul>
-              <ul class="current">
-                <li class="toctree-l1 current"><a class="reference internal current" href="#">Backup on volume snapshots</a>
-    <ul class="current">
-    <li class="toctree-l2"><a class="reference internal" href="#about-standard-volume-snapshots">About standard Volume Snapshots</a>
-    </li>
-    <li class="toctree-l2"><a class="reference internal" href="#requirements">Requirements</a>
-    </li>
-    <li class="toctree-l2"><a class="reference internal" href="#how-to-configure-volume-snapshot-backups">How to configure Volume Snapshot backups</a>
-    </li>
-    <li class="toctree-l2"><a class="reference internal" href="#hot-and-cold-backups">Hot and cold backups</a>
-        <ul>
-    <li class="toctree-l3"><a class="reference internal" href="#overriding-the-default-behavior">Overriding the default behavior</a>
-    </li>
-        </ul>
-    </li>
-    <li class="toctree-l2"><a class="reference internal" href="#persistence-of-volume-snapshot-objects">Persistence of volume snapshot objects</a>
-    </li>
-    <li class="toctree-l2"><a class="reference internal" href="#backup-volume-snapshot-deadlines">Backup Volume Snapshot Deadlines</a>
-        <ul>
-    <li class="toctree-l3"><a class="reference internal" href="#error-handling">Error Handling</a>
-    </li>
-    <li class="toctree-l3"><a class="reference internal" href="#retryable-errors">Retryable Errors</a>
-    </li>
-    <li class="toctree-l3"><a class="reference internal" href="#examples">Examples</a>
-    </li>
-        </ul>
-    </li>
-    <li class="toctree-l2"><a class="reference internal" href="#example-of-volume-snapshot-backup">Example of Volume Snapshot Backup</a>
-    </li>
-    </ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../release_notes/">Release notes</a>
                 </li>
               </ul>
               <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
                   </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
-              <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+              <ul class="current">
+                  <li class="toctree-l1 current"><a class="reference internal current" href="#">Appendix A - Backup on volume snapshots</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#about-standard-volume-snapshots">About standard Volume Snapshots</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#requirements">Requirements</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#how-to-configure-volume-snapshot-backups">How to configure Volume Snapshot backups</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#hot-and-cold-backups">Hot and cold backups</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#overriding-the-default-behavior">Overriding the default behavior</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#persistence-of-volume-snapshot-objects">Persistence of volume snapshot objects</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#backup-volume-snapshot-deadlines">Backup Volume Snapshot Deadlines</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#error-handling">Error Handling</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#retryable-errors">Retryable Errors</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#examples">Examples</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#example-of-volume-snapshot-backup">Example of Volume Snapshot Backup</a>
+    </li>
+    </ul>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -317,14 +319,15 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
         <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
   <ul class="wy-breadcrumbs">
-    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
-      <li class="breadcrumb-item active">Backup on volume snapshots</li>
+    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+          <li class="breadcrumb-item">Appendixes</li>
+      <li class="breadcrumb-item active">Appendix A - Backup on volume snapshots</li>
     <li class="wy-breadcrumbs-aside">
     </li>
   </ul>
@@ -333,16 +336,14 @@
           <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
             <div class="section" itemprop="articleBody">
               
-                <h1 id="backup-on-volume-snapshots">Backup on volume snapshots</h1>
+                <h1 id="appendix-a-backup-on-volume-snapshots">Appendix A - Backup on volume snapshots</h1>
 <!-- SPDX-License-Identifier: CC-BY-4.0 -->
 
-<div class="admonition warning">
-<p class="admonition-title">Warning</p>
-<p>As noted in the <a href="../backup/">backup document</a>, a cold snapshot explicitly
-set to target the primary will result in the primary being fenced for
-the duration of the backup, rendering the cluster read-only during that
-For safety, in a cluster already containing fenced instances, a cold
-snapshot is rejected.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Please refer to the official Kubernetes documentation for a list of all
+the supported <a href="https://kubernetes-csi.github.io/docs/drivers.html">Container Storage Interface (CSI) drivers</a>
+that provide snapshotting capabilities.</p>
 </div>
 <p>CloudNativePG is one of the first known cases of database operators that
 directly leverages the Kubernetes native Volume Snapshot API for both
@@ -382,17 +383,15 @@ <h2 id="requirements">Requirements</h2>
 <p class="admonition-title">Important</p>
 <p>It is your responsibility to verify with the third party vendor
 that volume snapshots are supported. CloudNativePG only interacts
-with the Kubernetes API on this matter and we cannot support issues
+with the Kubernetes API on this matter, and we cannot support issues
 at the storage level for each specific CSI driver.</p>
 </div>
 <h2 id="how-to-configure-volume-snapshot-backups">How to configure Volume Snapshot backups</h2>
-<!-- TODO: Change before 1.26.0 -->
-
 <p>CloudNativePG allows you to configure a given Postgres cluster for Volume
 Snapshot backups through the <code>backup.volumeSnapshot</code> stanza.</p>
 <div class="admonition info">
 <p class="admonition-title">Info</p>
-<p>Please refer to <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-VolumeSnapshotConfiguration"><code>VolumeSnapshotConfiguration</code></a>
+<p>Please refer to <a href="../../cloudnative-pg.v1/#postgresql-cnpg-io-v1-VolumeSnapshotConfiguration"><code>VolumeSnapshotConfiguration</code></a>
 in the API reference for a full list of options.</p>
 </div>
 <p>A generic example with volume snapshots (assuming that PGDATA and WALs share
@@ -415,17 +414,20 @@ <h2 id="how-to-configure-volume-snapshot-backups">How to configure Volume Snapsh
     # Volume snapshot backups
     volumeSnapshot:
        className: @VOLUME_SNAPSHOT_CLASS_NAME@
-    # WAL archive
-    barmanObjectStore:
-       # ...
+
+  plugins:
+  - name: barman-cloud.cloudnative-pg.io
+    isWALArchiver: true
+    parameters:
+      barmanObjectName: @OBJECTSTORE_NAME@
 </code></pre>
 <p>As you can see, the <code>backup</code> section contains both the <code>volumeSnapshot</code> stanza
 (controlling physical base backups on volume snapshots) and the
-<code>barmanObjectStore</code> one (controlling the <a href="../wal_archiving/">WAL archive</a>).</p>
+<code>plugins</code> one (controlling the <a href="../../wal_archiving/">WAL archive</a>).</p>
 <div class="admonition info">
 <p class="admonition-title">Info</p>
-<p>Once you have defined the <code>barmanObjectStore</code>, you can decide to use
-both volume snapshot and object store backup strategies simultaneously
+<p>Once you have defined the <code>plugin</code>, you can decide to use
+both volume snapshot and plugin backup strategies simultaneously
 to take physical backups.</p>
 </div>
 <p>The <code>volumeSnapshot.className</code> option allows you to reference the default
@@ -441,6 +443,14 @@ <h2 id="how-to-configure-volume-snapshot-backups">How to configure Volume Snapsh
 <p>Once a cluster is defined for volume snapshot backups, you need to define
 a <code>ScheduledBackup</code> resource that requests such backups on a periodic basis.</p>
 <h2 id="hot-and-cold-backups">Hot and cold backups</h2>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>As noted in the <a href="../../backup/">backup document</a>, a cold snapshot explicitly
+set to target the primary will result in the primary being fenced for
+the duration of the backup, making the cluster read-only during this
+period. For safety, in a cluster already containing fenced instances, a cold
+snapshot is rejected.</p>
+</div>
 <p>By default, CloudNativePG requests an online/hot backup on volume snapshots, using the
 <a href="https://www.postgresql.org/docs/current/continuous-archiving.html#BACKUP-LOWLEVEL-BASE-BACKUP">PostgreSQL defaults of the low-level API for base backups</a>:</p>
 <ul>
@@ -624,8 +634,6 @@ <h3 id="examples">Examples</h3>
   # other backup configuration...
 </code></pre>
 <h2 id="example-of-volume-snapshot-backup">Example of Volume Snapshot Backup</h2>
-<!-- TODO: Change before 1.26.0 -->
-
 <p>The following example shows how to configure volume snapshot base backups on an
 EKS cluster on AWS using the <code>ebs-sc</code> storage class and the <code>csi-aws-vsc</code>
 volume snapshot class.</p>
@@ -637,7 +645,7 @@ <h2 id="example-of-volume-snapshot-backup">Example of Volume Snapshot Backup</h2
 </div>
 <p>The following manifest creates a <code>Cluster</code> that is ready to be used for volume
 snapshots and that stores the WAL archive in a S3 bucket via IAM role for the
-Service Account (IRSA, see <a href="../appendixes/object_stores/#aws-s3">AWS S3</a>):</p>
+Service Account (IRSA, see <a href="../object_stores/#aws-s3">AWS S3</a>):</p>
 <pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
@@ -655,13 +663,12 @@ <h2 id="example-of-volume-snapshot-backup">Example of Volume Snapshot Backup</h2
   backup:
     volumeSnapshot:
        className: csi-aws-vsc
-    barmanObjectStore:
-      destinationPath: s3://@BUCKET_NAME@/
-      s3Credentials:
-        inheritFromIAMRole: true
-      wal:
-        compression: gzip
-        maxParallel: 2
+
+  plugins:
+  - name: barman-cloud.cloudnative-pg.io
+    isWALArchiver: true
+    parameters:
+      barmanObjectName: @OBJECTSTORE_NAME@
 
   serviceAccountTemplate:
     metadata:
@@ -686,8 +693,8 @@ <h2 id="example-of-volume-snapshot-backup">Example of Volume Snapshot Backup</h2
             </div>
           </div><footer>
     <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
-        <a href="../wal_archiving/" class="btn btn-neutral float-left" title="WAL archiving"><span class="icon icon-circle-arrow-left"></span> Previous</a>
-        <a href="../recovery/" class="btn btn-neutral float-right" title="Recovery">Next <span class="icon icon-circle-arrow-right"></span></a>
+        <a href="../../cncf-projects/cilium/" class="btn btn-neutral float-left" title="Cilium"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../backup_barmanobjectstore/" class="btn btn-neutral float-right" title="Appendix B - Backup on object stores">Next <span class="icon icon-circle-arrow-right"></span></a>
     </div>
 
   <hr/>
@@ -711,18 +718,18 @@ <h2 id="example-of-volume-snapshot-backup">Example of Volume Snapshot Backup</h2
   <span class="rst-current-version" data-toggle="rst-current-version">
     
     
-      <span><a href="../wal_archiving/" style="color: #fcfcfc">&laquo; Previous</a></span>
+      <span><a href="../../cncf-projects/cilium/" style="color: #fcfcfc">&laquo; Previous</a></span>
     
     
-      <span><a href="../recovery/" style="color: #fcfcfc">Next &raquo;</a></span>
+      <span><a href="../backup_barmanobjectstore/" style="color: #fcfcfc">Next &raquo;</a></span>
     
   </span>
 </div>
-    <script src="../js/jquery-3.6.0.min.js"></script>
-    <script>var base_url = "..";</script>
-    <script src="../js/theme_extra.js"></script>
-    <script src="../js/theme.js"></script>
-      <script src="../search/main.js"></script>
+    <script src="../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../..";</script>
+    <script src="../../js/theme_extra.js"></script>
+    <script src="../../js/theme.js"></script>
+      <script src="../../search/main.js"></script>
     <script>
         jQuery(function () {
             SphinxRtdTheme.Navigation.enable(true);
diff --git a/assets/documentation/1.27.0-rc1/appendixes/object_stores/index.html b/assets/documentation/1.27.0-rc1/appendixes/object_stores/index.html
new file mode 100644
index 000000000..fabd751f3
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/appendixes/object_stores/index.html
@@ -0,0 +1,678 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../img/favicon.ico" />
+    <title>Appendix C - Common object stores for backups - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../css/theme.css" />
+    <link rel="stylesheet" href="../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Appendix C - Common object stores for backups";
+        var mkdocs_page_input_path = "appendixes/object_stores.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul class="current">
+                  <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1 current"><a class="reference internal current" href="#">Appendix C - Common object stores for backups</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#aws-s3">AWS S3</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#aws-access-key">AWS Access key</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#iam-role-for-service-account-irsa">IAM Role for Service Account (IRSA)</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#s3-lifecycle-policy">S3 lifecycle policy</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#other-s3-compatible-object-storages-providers">Other S3-compatible Object Storages providers</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#using-object-storage-with-a-private-ca">Using Object Storage with a private CA</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#azure-blob-storage">Azure Blob Storage</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#other-azure-blob-storage-compatible-providers">Other Azure Blob Storage compatible providers</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#google-cloud-storage">Google Cloud Storage</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#running-inside-google-kubernetes-engine">Running inside Google Kubernetes Engine</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#using-authentication">Using authentication</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+          <li class="breadcrumb-item">Appendixes</li>
+      <li class="breadcrumb-item active">Appendix C - Common object stores for backups</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="appendix-c-common-object-stores-for-backups">Appendix C - Common object stores for backups</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>As of CloudNativePG 1.26, <strong>native Barman Cloud support is deprecated</strong> in
+favor of the <strong>Barman Cloud Plugin</strong>. While the native integration remains
+functional for now, we strongly recommend beginning a gradual migration to
+the plugin-based interface after appropriate testing. The Barman Cloud
+Plugin documentation describes
+<a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/object_stores/">how to use common object stores</a>.</p>
+</div>
+<p>You can store the <a href="../../backup/">backup</a> files in any service that is supported
+by the Barman Cloud infrastructure. That is:</p>
+<ul>
+<li><a href="#aws-s3">Amazon S3</a></li>
+<li><a href="#azure-blob-storage">Microsoft Azure Blob Storage</a></li>
+<li><a href="#google-cloud-storage">Google Cloud Storage</a></li>
+</ul>
+<p>You can also use any compatible implementation of the supported services.</p>
+<p>The required setup depends on the chosen storage provider and is
+discussed in the following sections.</p>
+<h2 id="aws-s3">AWS S3</h2>
+<p><a href="https://aws.amazon.com/s3/">AWS Simple Storage Service (S3)</a> is
+a very popular object storage service offered by Amazon.</p>
+<p>As far as CloudNativePG backup is concerned, you can define the permissions to
+store backups in S3 buckets in two ways:</p>
+<ul>
+<li>If CloudNativePG is running in EKS. you may want to use the
+  <a href="https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html">IRSA authentication method</a></li>
+<li>Alternatively, you can use the <code>ACCESS_KEY_ID</code> and <code>ACCESS_SECRET_KEY</code> credentials</li>
+</ul>
+<h3 id="aws-access-key">AWS Access key</h3>
+<p>You will need the following information about your environment:</p>
+<ul>
+<li>
+<p><code>ACCESS_KEY_ID</code>: the ID of the access key that will be used
+  to upload files into S3</p>
+</li>
+<li>
+<p><code>ACCESS_SECRET_KEY</code>: the secret part of the access key mentioned above</p>
+</li>
+<li>
+<p><code>ACCESS_SESSION_TOKEN</code>: the optional session token, in case it is required</p>
+</li>
+</ul>
+<p>The access key used must have permission to upload files into
+the bucket. Given that, you must create a Kubernetes secret with the
+credentials, and you can do that with the following command:</p>
+<pre><code class="language-sh">kubectl create secret generic aws-creds \
+  --from-literal=ACCESS_KEY_ID=&lt;access key here&gt; \
+  --from-literal=ACCESS_SECRET_KEY=&lt;secret key here&gt;
+# --from-literal=ACCESS_SESSION_TOKEN=&lt;session token here&gt; # if required
+</code></pre>
+<p>The credentials will be stored inside Kubernetes and will be encrypted
+if encryption at rest is configured in your installation.</p>
+<p>Once that secret has been created, you can configure your cluster like in
+the following example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      destinationPath: &quot;&lt;destination path here&gt;&quot;
+      s3Credentials:
+        accessKeyId:
+          name: aws-creds
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: aws-creds
+          key: ACCESS_SECRET_KEY
+</code></pre>
+<p>The destination path can be any URL pointing to a folder where
+the instance can upload the WAL files, e.g.
+<code>s3://BUCKET_NAME/path/to/folder</code>.</p>
+<h3 id="iam-role-for-service-account-irsa">IAM Role for Service Account (IRSA)</h3>
+<p>In order to use IRSA you need to set an <code>annotation</code> in the <code>ServiceAccount</code> of
+the Postgres cluster.</p>
+<p>We can configure CloudNativePG to inject them using the <code>serviceAccountTemplate</code>
+stanza:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+[...]
+spec:
+  serviceAccountTemplate:
+    metadata:
+      annotations:
+        eks.amazonaws.com/role-arn: arn:[...]
+        [...]
+</code></pre>
+<h3 id="s3-lifecycle-policy">S3 lifecycle policy</h3>
+<p>Barman Cloud writes objects to S3, then does not update them until they are
+deleted by the Barman Cloud retention policy. A recommended approach for an S3
+lifecycle policy is to expire the current version of objects a few days longer
+than the Barman retention policy, enable object versioning, and expire
+non-current versions after a number of days. Such a policy protects against
+accidental deletion, and also allows for restricting permissions to the
+CloudNativePG workload so that it may delete objects from S3 without granting
+permissions to permanently delete objects.</p>
+<h3 id="other-s3-compatible-object-storages-providers">Other S3-compatible Object Storages providers</h3>
+<p>In case you're using S3-compatible object storage, like <strong>MinIO</strong> or
+<strong>Linode Object Storage</strong>, you can specify an endpoint instead of using the
+default S3 one.</p>
+<p>In this example, it will use the <code>bucket</code> of <strong>Linode</strong> in the region
+<code>us-east1</code>.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      destinationPath: &quot;s3://bucket/&quot;
+      endpointURL: &quot;https://us-east1.linodeobjects.com&quot;
+      s3Credentials:
+        [...]
+</code></pre>
+<p>In case you're using <strong>Digital Ocean Spaces</strong>, you will have to use the Path-style syntax.
+In this example, it will use the <code>bucket</code> from <strong>Digital Ocean Spaces</strong> in the region <code>SFO3</code>.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      destinationPath: &quot;s3://[your-bucket-name]/[your-backup-folder]/&quot;
+      endpointURL: &quot;https://sfo3.digitaloceanspaces.com&quot;
+      s3Credentials:
+        [...]
+</code></pre>
+<h3 id="using-object-storage-with-a-private-ca">Using Object Storage with a private CA</h3>
+<p>Suppose you configure an Object Storage provider which uses a certificate
+signed with a private CA, for example when using MinIO via HTTPS. In that case,
+you need to set the option <code>endpointCA</code> inside <code>barmanObjectStore</code> referring
+to a secret containing the CA bundle, so that Barman can verify the certificate
+correctly.
+You can find instructions on creating a secret using your cert files in the
+<a href="../../certificates/#example">certificates</a> document.
+Once you have created the secret, you can populate the <code>endpointCA</code> as in the
+following example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  [...]
+  backup:
+    barmanObjectStore:
+      endpointURL: &lt;myEndpointURL&gt;
+      endpointCA:
+        name: my-ca-secret
+        key: ca.crt
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>If you want ConfigMaps and Secrets to be <strong>automatically</strong> reloaded by instances, you can
+add a label with key <code>cnpg.io/reload</code> to the Secrets/ConfigMaps. Otherwise, you will have to reload
+the instances using the <code>kubectl cnpg reload</code> subcommand.</p>
+</div>
+<h2 id="azure-blob-storage">Azure Blob Storage</h2>
+<p><a href="https://azure.microsoft.com/en-us/services/storage/blobs/">Azure Blob Storage</a> is the
+object storage service provided by Microsoft.</p>
+<p>In order to access your storage account for backup and recovery of
+CloudNativePG managed databases, you will need one of the following
+combinations of credentials:</p>
+<ul>
+<li><a href="https://docs.microsoft.com/en-us/azure/storage/common/storage-configure-connection-string#configure-a-connection-string-for-an-azure-storage-account">Connection String</a></li>
+<li>Storage account name and <a href="https://docs.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage">Storage account access key</a></li>
+<li>Storage account name and <a href="https://docs.microsoft.com/en-us/azure/storage/blobs/sas-service-create">Storage account SAS Token</a></li>
+<li>Storage account name and <a href="https://azure.github.io/azure-workload-identity/docs/introduction.html">Azure AD Workload Identity</a>
+properly configured.</li>
+</ul>
+<p>Using <strong>Azure AD Workload Identity</strong>, you can avoid saving the credentials into a Kubernetes Secret,
+and have a Cluster configuration adding the <code>inheritFromAzureAD</code> as follows:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      destinationPath: &quot;&lt;destination path here&gt;&quot;
+      azureCredentials:
+        inheritFromAzureAD: true
+</code></pre>
+<p>On the other side, using both <strong>Storage account access key</strong> or <strong>Storage account SAS Token</strong>,
+the credentials need to be stored inside a Kubernetes Secret, adding data entries only when
+needed. The following command performs that:</p>
+<pre><code class="language-sh">kubectl create secret generic azure-creds \
+  --from-literal=AZURE_STORAGE_ACCOUNT=&lt;storage account name&gt; \
+  --from-literal=AZURE_STORAGE_KEY=&lt;storage account key&gt; \
+  --from-literal=AZURE_STORAGE_SAS_TOKEN=&lt;SAS token&gt; \
+  --from-literal=AZURE_STORAGE_CONNECTION_STRING=&lt;connection string&gt;
+</code></pre>
+<p>The credentials will be encrypted at rest, if this feature is enabled in the used
+Kubernetes cluster.</p>
+<p>Given the previous secret, the provided credentials can be injected inside the cluster
+configuration:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      destinationPath: &quot;&lt;destination path here&gt;&quot;
+      azureCredentials:
+        connectionString:
+          name: azure-creds
+          key: AZURE_CONNECTION_STRING
+        storageAccount:
+          name: azure-creds
+          key: AZURE_STORAGE_ACCOUNT
+        storageKey:
+          name: azure-creds
+          key: AZURE_STORAGE_KEY
+        storageSasToken:
+          name: azure-creds
+          key: AZURE_STORAGE_SAS_TOKEN
+</code></pre>
+<p>When using the Azure Blob Storage, the <code>destinationPath</code> fulfills the following
+structure:</p>
+<pre><code class="language-sh">&lt;http|https&gt;://&lt;account-name&gt;.&lt;service-name&gt;.core.windows.net/&lt;resource-path&gt;
+</code></pre>
+<p>where <code>&lt;resource-path&gt;</code> is <code>&lt;container&gt;/&lt;blob&gt;</code>. The <strong>account name</strong>,
+which is also called <strong>storage account name</strong>, is included in the used host name.</p>
+<h3 id="other-azure-blob-storage-compatible-providers">Other Azure Blob Storage compatible providers</h3>
+<p>If you are using a different implementation of the Azure Blob Storage APIs,
+the <code>destinationPath</code> will have the following structure:</p>
+<pre><code class="language-sh">&lt;http|https&gt;://&lt;local-machine-address&gt;:&lt;port&gt;/&lt;account-name&gt;/&lt;resource-path&gt;
+</code></pre>
+<p>In that case, <code>&lt;account-name&gt;</code> is the first component of the path.</p>
+<p>This is required if you are testing the Azure support via the Azure Storage
+Emulator or <a href="https://github.com/Azure/Azurite">Azurite</a>.</p>
+<h2 id="google-cloud-storage">Google Cloud Storage</h2>
+<p>Currently, the CloudNativePG operator supports two authentication methods for
+<a href="https://cloud.google.com/storage/">Google Cloud Storage</a>:</p>
+<ul>
+<li>the first one assumes that the pod is running inside a Google Kubernetes Engine cluster</li>
+<li>the second one leverages the environment variable <code>GOOGLE_APPLICATION_CREDENTIALS</code></li>
+</ul>
+<h3 id="running-inside-google-kubernetes-engine">Running inside Google Kubernetes Engine</h3>
+<p>When running inside Google Kubernetes Engine you can configure your backups to
+simply rely on <a href="https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity">Workload Identity</a>,
+without having to set any credentials. In particular, you need to:</p>
+<ul>
+<li>set <code>.spec.backup.barmanObjectStore.googleCredentials.gkeEnvironment</code> to <code>true</code></li>
+<li>set the <code>iam.gke.io/gcp-service-account</code> annotation in the <code>serviceAccountTemplate</code> stanza</li>
+</ul>
+<p>Please use the following example as a reference:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  [...]
+  backup:
+    barmanObjectStore:
+      destinationPath: &quot;gs://&lt;destination path here&gt;&quot;
+      googleCredentials:
+        gkeEnvironment: true
+
+  serviceAccountTemplate:
+    metadata:
+      annotations:
+        iam.gke.io/gcp-service-account:  [...].iam.gserviceaccount.com
+        [...]
+</code></pre>
+<h3 id="using-authentication">Using authentication</h3>
+<p>Following the <a href="https://cloud.google.com/docs/authentication/getting-started">instruction from Google</a>
+you will get a JSON file that contains all the required information to authenticate.</p>
+<p>The content of the JSON file must be provided using a <code>Secret</code> that can be created
+with the following command:</p>
+<pre><code class="language-shell">kubectl create secret generic backup-creds --from-file=gcsCredentials=gcs_credentials_file.json
+</code></pre>
+<p>This will create the <code>Secret</code> with the name <code>backup-creds</code> to be used in the yaml file like this:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      destinationPath: &quot;gs://&lt;destination path here&gt;&quot;
+      googleCredentials:
+        applicationCredentials:
+          name: backup-creds
+          key: gcsCredentials
+</code></pre>
+<p>Now the operator will use the credentials to authenticate against Google Cloud Storage.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>This way of authentication will create a JSON file inside the container with all the needed
+information to access your Google Cloud Storage bucket, meaning that if someone gets access to the pod
+will also have write permissions to the bucket.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../backup_barmanobjectstore/" class="btn btn-neutral float-left" title="Appendix B - Backup on object stores"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../backup_barmanobjectstore/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+  </span>
+</div>
+    <script src="../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../..";</script>
+    <script src="../../js/theme_extra.js"></script>
+    <script src="../../js/theme.js"></script>
+      <script src="../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/applications/index.html b/assets/documentation/1.27.0-rc1/applications/index.html
new file mode 100644
index 000000000..e62d89a1e
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/applications/index.html
@@ -0,0 +1,453 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Connecting from an application - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Connecting from an application";
+        var mkdocs_page_input_path = "applications.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Connecting from an application</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#dns-resolution">DNS resolution</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#environment-variables">Environment variables</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#secrets">Secrets</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Connecting from an application</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="connecting-from-an-application">Connecting from an application</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>Applications are supposed to work with the services created by CloudNativePG
+in the same Kubernetes cluster.</p>
+<p>For more information on services and how to manage them, please refer to the
+<a href="../service_management/">"Service management"</a> section.</p>
+<div class="admonition hint">
+<p class="admonition-title">Hint</p>
+<p>It is highly recommended using those services in your applications,
+and avoiding connecting directly to a specific PostgreSQL instance, as the latter
+can change during the cluster lifetime.</p>
+</div>
+<p>You can use these services in your applications through:</p>
+<ul>
+<li>DNS resolution</li>
+<li>environment variables</li>
+</ul>
+<p>For the credentials to connect to PostgreSQL, you can
+use the secrets generated by the operator.</p>
+<div class="admonition seealso">
+<p class="admonition-title">Connection Pooling</p>
+<p>Please refer to the <a href="../connection_pooling/">"Connection Pooling" section</a> for
+information about how to take advantage of PgBouncer as a connection pooler,
+and create an access layer between your applications and the PostgreSQL clusters.</p>
+</div>
+<h3 id="dns-resolution">DNS resolution</h3>
+<p>You can use the Kubernetes DNS service to point to a given server.
+The Kubernetes DNS service is required by the operator.
+You can do that by using the name of the service if the application is
+deployed in the same namespace as the PostgreSQL cluster.
+In case the PostgreSQL cluster resides in a different namespace, you can use the
+full qualifier: <code>service-name.namespace-name</code>.</p>
+<p>DNS is the preferred and recommended discovery method.</p>
+<h3 id="environment-variables">Environment variables</h3>
+<p>If you deploy your application in the same namespace that contains the
+PostgreSQL cluster, you can also use environment variables to connect to the database.</p>
+<p>For example, suppose that your PostgreSQL cluster is called <code>pg-database</code>,
+you can use the following environment variables in your applications:</p>
+<ul>
+<li>
+<p><code>PG_DATABASE_R_SERVICE_HOST</code>: the IP address of the service
+  pointing to all the PostgreSQL instances for read-only workloads</p>
+</li>
+<li>
+<p><code>PG_DATABASE_RO_SERVICE_HOST</code>: the IP address of the
+  service pointing to all hot-standby replicas of the cluster</p>
+</li>
+<li>
+<p><code>PG_DATABASE_RW_SERVICE_HOST</code>: the IP address of the
+  service pointing to the <em>primary</em> instance of the cluster</p>
+</li>
+</ul>
+<h3 id="secrets">Secrets</h3>
+<p>The PostgreSQL operator will generate up to two <code>basic-auth</code> type secrets for
+every PostgreSQL cluster it deploys:</p>
+<ul>
+<li><code>[cluster name]-app</code> (unless you have provided an existing secret through <code>.spec.bootstrap.initdb.secret.name</code>)</li>
+<li><code>[cluster name]-superuser</code> (if <code>.spec.enableSuperuserAccess</code> is set to <code>true</code>
+  and you have not specified a different secret using <code>.spec.superuserSecret</code>)</li>
+</ul>
+<p>Each secret contain the following:</p>
+<ul>
+<li>username</li>
+<li>password</li>
+<li>hostname to the RW service</li>
+<li>port number</li>
+<li>database name</li>
+<li>a working <a href="https://www.postgresql.org/docs/current/libpq-pgpass.html"><code>.pgpass file</code></a></li>
+<li><a href="https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING">uri</a></li>
+<li><a href="https://jdbc.postgresql.org/documentation/use/#connecting-to-the-database">jdbc-uri</a></li>
+<li><a href="https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING">fqdn-uri</a></li>
+<li><a href="https://jdbc.postgresql.org/documentation/use/#connecting-to-the-database">fqdn-jdbc-uri</a></li>
+</ul>
+<p>The FQDN to be used in the URIs is calculated using the Kubernetes cluster
+domain specified in the <code>KUBERNETES_CLUSTER_DOMAIN</code> configuration parameter.
+See <a href="../operator_conf/">the operator configuration documentation</a> for more information
+about that.</p>
+<p>The <code>-app</code> credentials are the ones that should be used by applications
+connecting to the PostgreSQL cluster, and correspond to the user <em>owning</em> the
+database.</p>
+<p>The <code>-superuser</code> ones are supposed to be used only for administrative purposes,
+and correspond to the <code>postgres</code> user.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Superuser access over the network is disabled by default.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../ssl_connections/" class="btn btn-neutral float-left" title="Client TLS/SSL connections"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../connection_pooling/" class="btn btn-neutral float-right" title="Connection pooling">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../ssl_connections/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../connection_pooling/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/architecture/index.html b/assets/documentation/1.27.0-rc1/architecture/index.html
new file mode 100644
index 000000000..4bba4b196
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/architecture/index.html
@@ -0,0 +1,778 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Architecture - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Architecture";
+        var mkdocs_page_input_path = "architecture.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Architecture</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#synchronizing-the-state">Synchronizing the state</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#kubernetes-architecture">Kubernetes architecture</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#multi-availability-zone-kubernetes-clusters">Multi-availability zone Kubernetes clusters</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#single-availability-zone-kubernetes-clusters">Single availability zone Kubernetes clusters</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#reserving-nodes-for-postgresql-workloads">Reserving nodes for PostgreSQL workloads</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#proposed-node-label">Proposed node label</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#proposed-node-taint">Proposed node taint</a>
+    </li>
+        </ul>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-architecture">PostgreSQL architecture</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#read-write-workloads">Read-write workloads</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#read-only-workloads">Read-only workloads</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#deployments-across-kubernetes-clusters">Deployments across Kubernetes clusters</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Architecture</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="architecture">Architecture</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<div class="admonition hint">
+<p class="admonition-title">Hint</p>
+<p>For a deeper understanding, we recommend reading our article on the CNCF
+blog post titled <a href="https://www.cncf.io/blog/2023/09/29/recommended-architectures-for-postgresql-in-kubernetes/">"Recommended Architectures for PostgreSQL in Kubernetes"</a>,
+which provides valuable insights into best practices and design
+considerations for PostgreSQL deployments in Kubernetes.</p>
+</div>
+<p>This documentation page provides an overview of the key architectural
+considerations for implementing a robust business continuity strategy when
+deploying PostgreSQL in Kubernetes. These considerations include:</p>
+<ul>
+<li><strong><a href="#multi-availability-zone-kubernetes-clusters">Deployments in <em>stretched</em></a>
+  vs. <a href="#single-availability-zone-kubernetes-clusters"><em>non-stretched</em> clusters</a></strong>:
+  Evaluating the differences between deploying in stretched clusters (across 3
+  or more availability zones) versus non-stretched clusters (within a single
+  availability zone).</li>
+<li><a href="#reserving-nodes-for-postgresql-workloads"><strong>Reservation of <code>postgres</code> worker nodes</strong></a>: Isolating PostgreSQL workloads by
+  dedicating specific worker nodes to <code>postgres</code> tasks, ensuring optimal
+  performance and minimizing interference from other workloads.</li>
+<li><a href="#postgresql-architecture"><strong>PostgreSQL architectures within a single Kubernetes cluster</strong></a>:
+  Designing effective PostgreSQL deployments within a single Kubernetes cluster
+  to meet high availability and performance requirements.</li>
+<li><a href="#deployments-across-kubernetes-clusters"><strong>PostgreSQL architectures across Kubernetes clusters for disaster recovery</strong></a>:
+  Planning and implementing PostgreSQL architectures that span multiple
+  Kubernetes clusters to provide comprehensive disaster recovery capabilities.</li>
+</ul>
+<h2 id="synchronizing-the-state">Synchronizing the state</h2>
+<p>PostgreSQL is a database management system and, as such, it needs to be treated
+as a <strong>stateful workload</strong> in Kubernetes. While stateless applications
+mainly use traffic redirection to achieve High Availability (HA) and
+Disaster Recovery (DR), in the case of a database, state must be replicated in
+multiple locations, preferably in a continuous and instantaneous way, by
+adopting either of the following two strategies:</p>
+<ul>
+<li><em>storage-level replication</em>, normally persistent volumes</li>
+<li><em>application-level replication</em>, in this specific case PostgreSQL</li>
+</ul>
+<p>CloudNativePG relies on application-level replication, for a simple reason: the
+PostgreSQL database management system comes with robust and reliable
+built-in <strong>physical replication</strong> capabilities based on <strong>Write Ahead Log (WAL)
+shipping</strong>, which have been used in production by millions of users all over
+the world for over a decade.</p>
+<p>PostgreSQL supports both asynchronous and synchronous streaming replication
+over the network, as well as asynchronous file-based log shipping (normally
+used as a fallback option, for example, to store WAL files in an object store).
+Replicas are usually called <em>standby servers</em> and can also be used for
+read-only workloads, thanks to the <em>Hot Standby</em> feature.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p><strong>We recommend against storage-level replication with PostgreSQL</strong>, although
+CloudNativePG allows you to adopt that strategy. For more information, please refer
+to the talk given by Chris Milsted and Gabriele Bartolini at KubeCon NA 2022 entitled
+<a href="https://www.youtube.com/watch?v=99uSJXkKpeI&amp;ab_channel=CNCF%5BCloudNativeComputingFoundation%5D">"Data On Kubernetes, Deploying And Running PostgreSQL And Patterns For Databases In a Kubernetes Cluster"</a>
+where this topic was covered in detail.</p>
+</div>
+<h2 id="kubernetes-architecture">Kubernetes architecture</h2>
+<p>Kubernetes natively provides the possibility to span separate physical
+locations - also known as data centers, failure zones, or more frequently
+<strong>availability zones</strong> - connected to each other via redundant, low-latency,
+private network connectivity.</p>
+<p>Being a distributed system, the recommended minimum number of availability
+zones for a Kubernetes cluster is three (3), in order to make the control
+plane resilient to the failure of a single zone.
+For details, please refer to
+<a href="https://kubernetes.io/docs/setup/best-practices/multiple-zones/">"Running in multiple zones"</a>.
+This means that <strong>each data center is active at any time</strong> and can run workloads
+simultaneously.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Most of the public Cloud Providers' managed Kubernetes services already
+provide 3 or more availability zones in each region.</p>
+</div>
+<h3 id="multi-availability-zone-kubernetes-clusters">Multi-availability zone Kubernetes clusters</h3>
+<p>The multi-availability zone Kubernetes architecture with three (3) or more
+zones is the one that we recommend for PostgreSQL usage.
+This scenario is typical of Kubernetes services managed by Cloud Providers.</p>
+<p><img alt="Kubernetes cluster spanning over 3 independent data centers" src="../images/k8s-architecture-3-az.png" /></p>
+<p>Such an architecture enables the CloudNativePG operator to control the full
+lifecycle of a <code>Cluster</code> resource across the zones within a single Kubernetes
+cluster, by treating all the availability zones as active: this includes, among
+other operations,
+<a href="../scheduling/">scheduling</a> the workloads in a declarative manner (based on
+affinity rules, tolerations and node selectors), automated failover,
+self-healing, and updates. All will work seamlessly across the zones in a single
+Kubernetes cluster.</p>
+<p>Please refer to the <a href="#postgresql-architecture">"PostgreSQL architecture"</a>
+section below for details on how you can design your PostgreSQL clusters within
+the same Kubernetes cluster through shared-nothing deployments at the storage,
+worker node, and availability zone levels.</p>
+<p>Additionally, you can leverage <a href="#deployments-across-kubernetes-clusters">Kubernetes clusters</a>
+to deploy distributed PostgreSQL topologies hosting "passive"
+<a href="../replica_cluster/">PostgreSQL replica clusters</a> in different regions and
+managing them via declarative configuration. This setup is ideal for disaster
+recovery (DR), read-only operations, or cross-region availability.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Each operator deployment can only manage operations within its local
+Kubernetes cluster. For operations across Kubernetes clusters, such as
+controlled switchover or unexpected failover, coordination must be handled
+manually (through GitOps, for example) or by using a higher-level cluster
+management tool.</p>
+</div>
+<p><img alt="Example of a multiple Kubernetes cluster architecture distributed over 3 regions each with 3 independent data centers" src="../images/k8s-architecture-multi.png" /></p>
+<h3 id="single-availability-zone-kubernetes-clusters">Single availability zone Kubernetes clusters</h3>
+<p>If your Kubernetes cluster has only one availability zone, CloudNativePG still
+provides you with a lot of features to improve HA and DR outcomes for your
+PostgreSQL databases, pushing the single point of failure (SPoF) to the level
+of the zone as much as possible - i.e. the zone must have an outage before your
+CloudNativePG clusters suffer a failure.</p>
+<p>This scenario is typical of self-managed on-premise Kubernetes clusters, where
+only one data center is available.</p>
+<p>Single availability zone Kubernetes clusters are the only viable option when
+only <strong>two data centers</strong> are available within reach of a low-latency
+connection (typically in the same metropolitan area). Having only two zones
+prevents the creation of a multi-availability zone Kubernetes cluster, which
+requires a minimum of three zones. As a result, users must create two separate
+Kubernetes clusters in an active/passive configuration, with the second cluster
+primarily used for Disaster Recovery (see
+the <a href="../replica_cluster/">replica cluster feature</a>).</p>
+<p><img alt="Example of a Kubernetes architecture with only 2 data centers" src="../images/k8s-architecture-2-az.png" /></p>
+<div class="admonition hint">
+<p class="admonition-title">Hint</p>
+<p>If you are at an early stage of your Kubernetes journey, please share this
+document with your infrastructure team. The two data centers setup might
+be simply the result of a "lift-and-shift" transition to Kubernetes
+from a traditional bare-metal or VM based infrastructure, and the benefits
+that Kubernetes offers in a 3+ zone scenario might not have been known,
+or addressed at the time the infrastructure architecture was designed.
+Ultimately, a third physical location connected to the other two might
+represent a valid option to consider for organization, as it reduces the
+overall costs of the infrastructure by moving the day-to-day complexity
+from the application level down to the physical infrastructure level.</p>
+</div>
+<p>Please refer to the <a href="#postgresql-architecture">"PostgreSQL architecture"</a>
+section below for details on how you can design your PostgreSQL clusters within
+your single availability zone Kubernetes cluster through shared-nothing
+deployments at the storage and worker node levels only. For HA, in such a
+scenario it becomes even more important that the PostgreSQL instances be
+located on different worker nodes and do not share the same storage.</p>
+<p>For DR, you can push the SPoF above the single zone, by using additional
+<a href="#deployments-across-kubernetes-clusters">Kubernetes clusters</a> to define a
+distributed topology hosting "passive" <a href="../replica_cluster/">PostgreSQL replica clusters</a>.
+As with other Kubernetes workloads in this scenario, promotion of a Kubernetes
+cluster as primary must be done manually.</p>
+<p>Through the <a href="../replica_cluster/">replica cluster feature</a>, you can define a
+distributed PostgreSQL topology and coordinate a controlled switchover between
+data centers by first demoting the primary cluster and then promoting the
+replica cluster, without the need to re-clone the former primary. While failover
+is now fully declarative, automated failover across Kubernetes clusters is not
+within CloudNativePG's scope, as the operator can only function within a single
+Kubernetes cluster.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>CloudNativePG provides all the necessary primitives and probes to
+coordinate PostgreSQL active/passive topologies across different Kubernetes
+clusters through a higher-level operator or management tool.</p>
+</div>
+<h3 id="reserving-nodes-for-postgresql-workloads">Reserving nodes for PostgreSQL workloads</h3>
+<p>Whether you're operating in a multi-availability zone environment or, more
+critically, within a single availability zone, we strongly recommend isolating
+PostgreSQL workloads by dedicating specific worker nodes exclusively to
+<code>postgres</code> in production. A Kubernetes worker node dedicated to running
+PostgreSQL workloads is referred to as a <strong>Postgres node</strong> or <code>postgres</code> node.
+This approach ensures optimal performance and resource allocation for your
+database operations.</p>
+<div class="admonition hint">
+<p class="admonition-title">Hint</p>
+<p>As a general rule of thumb, deploy Postgres nodes in multiples of
+three—ideally with one node per availability zone. Three nodes is
+an optimal number because it ensures that a PostgreSQL cluster with three
+instances (one primary and two standby replicas) is distributed across
+different nodes, enhancing fault tolerance and availability.</p>
+</div>
+<p>In Kubernetes, this can be achieved using node labels and taints in a
+declarative manner, aligning with Infrastructure as Code (IaC) practices:
+labels ensure that a node is capable of running <code>postgres</code> workloads, while
+taints help prevent any non-<code>postgres</code> workloads from being scheduled on that
+node.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>This methodology is the most straightforward way to ensure that PostgreSQL
+workloads are isolated from other workloads in terms of both computing
+resources and, when using locally attached disks, storage. While different
+PostgreSQL clusters may share the same node, you can take this a step further
+by using labels and taints to ensure that a node is dedicated to a single
+instance of a specific <code>Cluster</code>.</p>
+</div>
+<h4 id="proposed-node-label">Proposed node label</h4>
+<p>CloudNativePG recommends using the <code>node-role.kubernetes.io/postgres</code> label.
+Since this is a reserved label (<code>*.kubernetes.io</code>), it can only be applied
+after a worker node is created.</p>
+<p>To assign the <code>postgres</code> label to a node, use the following command:</p>
+<pre><code class="language-sh">kubectl label node &lt;NODE-NAME&gt; node-role.kubernetes.io/postgres=
+</code></pre>
+<p>To ensure that a <code>Cluster</code> resource is scheduled on a <code>postgres</code> node, you must
+correctly configure the <code>.spec.affinity.nodeSelector</code> stanza in your manifests.
+Here’s an example:</p>
+<pre><code class="language-yaml">spec:
+  # &lt;snip&gt;
+  affinity:
+    # &lt;snip&gt;
+    nodeSelector:
+      node-role.kubernetes.io/postgres: &quot;&quot;
+</code></pre>
+<h4 id="proposed-node-taint">Proposed node taint</h4>
+<p>CloudNativePG recommends using the <code>node-role.kubernetes.io/postgres</code> taint.</p>
+<p>To assign the <code>postgres</code> taint to a node, use the following command:</p>
+<pre><code class="language-sh">kubectl taint node &lt;NODE-NAME&gt; node-role.kubernetes.io/postgres=:NoSchedule
+</code></pre>
+<p>To ensure that a <code>Cluster</code> resource is scheduled on a node with a <code>postgres</code> taint, you must correctly configure the <code>.spec.affinity.tolerations</code> stanza in your manifests.
+Here’s an example:</p>
+<pre><code class="language-yaml">spec:
+  # &lt;snip&gt;
+  affinity:
+    # &lt;snip&gt;
+    tolerations:
+    - key: node-role.kubernetes.io/postgres
+      operator: Exists
+      effect: NoSchedule
+</code></pre>
+<h2 id="postgresql-architecture">PostgreSQL architecture</h2>
+<p>CloudNativePG supports clusters based on asynchronous and synchronous
+streaming replication to manage multiple hot standby replicas within the same
+Kubernetes cluster, with the following specifications:</p>
+<ul>
+<li>One primary, with optional multiple hot standby replicas for HA</li>
+<li>
+<p>Available services for applications:</p>
+<ul>
+<li><code>-rw</code>: applications connect only to the primary instance of the cluster</li>
+<li><code>-ro</code>: applications connect only to hot standby replicas for
+  read-only-workloads (optional)</li>
+<li><code>-r</code>: applications connect to any of the instances for read-only
+  workloads (optional)</li>
+</ul>
+</li>
+<li>
+<p>Shared-nothing architecture recommended for better resilience of the PostgreSQL cluster:</p>
+<ul>
+<li>PostgreSQL instances should reside on different Kubernetes worker nodes
+  and share only the network - as a result, instances should not share
+  the storage and preferably use local volumes attached to the node they
+  run on</li>
+<li>PostgreSQL instances should reside in different availability zones
+  within the same Kubernetes cluster / region</li>
+</ul>
+</li>
+</ul>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>You can configure the above services through the <code>managed.services</code> section
+in the <code>Cluster</code> configuration. This can be done by reducing the number of
+services and selecting the type (default is <code>ClusterIP</code>). For more details,
+please refer to the <a href="../service_management/">"Service Management" section</a>
+below.</p>
+</div>
+<p>The below diagram provides a simplistic view of the recommended shared-nothing
+architecture for a PostgreSQL cluster spanning across 3 different availability
+zones, running on separate nodes, each with dedicated local storage for
+PostgreSQL data.</p>
+<p><img alt="Bird-eye view of the recommended shared nothing architecture for PostgreSQL in Kubernetes" src="../images/k8s-pg-architecture.png" /></p>
+<p>CloudNativePG automatically takes care of updating the above services if
+the topology of the cluster changes. For example, in case of failover, it
+automatically updates the <code>-rw</code> service to point to the promoted primary,
+making sure that traffic from the applications is seamlessly redirected.</p>
+<div class="admonition seealso">
+<p class="admonition-title">Replication</p>
+<p>Please refer to the <a href="../replication/">"Replication" section</a> for more
+information about how CloudNativePG relies on PostgreSQL replication,
+including synchronous settings.</p>
+</div>
+<div class="admonition seealso">
+<p class="admonition-title">Connecting from an application</p>
+<p>Please refer to the <a href="../applications/">"Connecting from an application" section</a> for
+information about how to connect to CloudNativePG from a stateless
+application within the same Kubernetes cluster.</p>
+</div>
+<div class="admonition seealso">
+<p class="admonition-title">Connection Pooling</p>
+<p>Please refer to the <a href="../connection_pooling/">"Connection Pooling" section</a> for
+information about how to take advantage of PgBouncer as a connection pooler,
+and create an access layer between your applications and the PostgreSQL clusters.</p>
+</div>
+<h3 id="read-write-workloads">Read-write workloads</h3>
+<p>Applications can decide to connect to the PostgreSQL instance elected as
+<em>current primary</em> by the Kubernetes operator, as depicted in the following
+diagram:</p>
+<p><img alt="Applications writing to the single primary" src="../images/architecture-rw.png" /></p>
+<p>Applications can use the <code>-rw</code> suffix service.</p>
+<p>In case of temporary or permanent unavailability of the primary, for High
+Availability purposes CloudNativePG will trigger a failover, pointing the <code>-rw</code>
+service to another instance of the cluster.</p>
+<h3 id="read-only-workloads">Read-only workloads</h3>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Applications must be aware of the limitations that
+<a href="https://www.postgresql.org/docs/current/hot-standby.html">Hot Standby</a>
+presents and familiar with the way PostgreSQL operates when dealing with
+these workloads.</p>
+</div>
+<p>Applications can access hot standby replicas through the <code>-ro</code> service made available
+by the operator. This service enables the application to offload read-only queries from the
+primary node.</p>
+<p>The following diagram shows the architecture:</p>
+<p><img alt="Applications reading from hot standby replicas in round robin" src="../images/architecture-read-only.png" /></p>
+<p>Applications can also access any PostgreSQL instance through the
+<code>-r</code> service.</p>
+<h2 id="deployments-across-kubernetes-clusters">Deployments across Kubernetes clusters</h2>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>CloudNativePG supports deploying PostgreSQL across multiple Kubernetes
+clusters through a feature that allows you to define a distributed PostgreSQL
+topology using replica clusters, as described in this section.</p>
+</div>
+<p>In a distributed PostgreSQL cluster there can only be a single PostgreSQL
+instance acting as a primary at all times. This means that applications can
+only write inside a single Kubernetes cluster, at any time.</p>
+<p>However, for business continuity objectives it is fundamental to:</p>
+<ul>
+<li>reduce global <strong>recovery point objectives</strong> (<a href="../before_you_start/#rpo">RPO</a>)
+  by storing PostgreSQL backup data in multiple locations, regions and possibly
+  using different providers (Disaster Recovery)</li>
+<li>reduce global <strong>recovery time objectives</strong> (<a href="../before_you_start/#rto">RTO</a>)
+  by taking advantage of PostgreSQL replication beyond the primary Kubernetes
+  cluster (High Availability)</li>
+</ul>
+<p>In order to address the above concerns, CloudNativePG introduces the concept of
+a PostgreSQL Topology that is distributed across different Kubernetes clusters
+and is made up of a primary PostgreSQL cluster and one or more PostgreSQL
+replica clusters.
+This feature is called <strong>distributed PostgreSQL topology with replica clusters</strong>,
+and it enables multi-cluster deployments in private, public, hybrid, and
+multi-cloud contexts.</p>
+<p>A replica cluster is a separate <code>Cluster</code> resource that is in continuous
+recovery, replicating from another source, either via WAL shipping from a WAL
+archive or via streaming replication from a primary or a standby (cascading).</p>
+<p>The diagram below depicts a PostgreSQL cluster spanning over two different
+Kubernetes clusters, where the primary cluster is in the first Kubernetes
+cluster and the replica cluster is in the second. The second Kubernetes cluster
+acts as the company's disaster recovery cluster, ready to be activated in case
+of disaster and unavailability of the first one.</p>
+<p><img alt="An example of multi-cluster deployment with a primary and a replica cluster" src="../images/multi-cluster.png" /></p>
+<p>A replica cluster can have the same architecture as the primary cluster.
+Instead of a primary instance, a replica cluster has a <strong>designated primary</strong>
+instance, which is a standby server with an arbitrary number of cascading
+standby servers in streaming replication (symmetric architecture).</p>
+<p>The designated primary can be promoted at any time, transforming the replica
+cluster into a primary cluster capable of accepting write connections.
+This is typically triggered by:</p>
+<ul>
+<li><strong>Human decision:</strong> You choose to make the other PostgreSQL cluster (or the
+  entire Kubernetes cluster) the primary. To avoid data loss and ensure that
+  the former primary can follow without being re-cloned (especially with large
+  data sets), you first demote the current primary, then promote the designated
+  primary using the API provided by CloudNativePG.</li>
+<li><strong>Unexpected failure:</strong> If the entire Kubernetes cluster fails, you might
+  experience data loss, but you need to fail over to the other Kubernetes
+  cluster by promoting the PostgreSQL replica cluster.</li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>CloudNativePG cannot perform any cross-cluster automated failover, as it
+does not have authority beyond a single Kubernetes cluster. Such operations
+must be performed manually or delegated to a multi-cluster/federated
+cluster-aware authority.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>CloudNativePG allows you to control the distributed topology via
+declarative configuration, enabling you to automate these procedures as part of
+your Infrastructure as Code (IaC) process, including GitOps.</p>
+</div>
+<p>In the example above, the designated primary receives WAL updates via streaming
+replication (<code>primary_conninfo</code>). As a fallback, it can retrieve WAL segments
+from an object store using file-based WAL shipping—for instance, with the
+Barman Cloud plugin through <code>restore_command</code> and <code>barman-cloud-wal-restore</code>.</p>
+<p>CloudNativePG allows you to define topologies with multiple replica clusters.
+You can also define replica clusters with a lower number of replicas, and then
+increase this number when the cluster is promoted to primary.</p>
+<div class="admonition seealso">
+<p class="admonition-title">Replica clusters</p>
+<p>Please refer to the <a href="../replica_cluster/">"Replica Clusters" section</a> for
+more detailed information on how physical replica clusters operate and how to
+define a distributed topology with read-only clusters across different
+Kubernetes clusters. This approach can significantly enhance your global
+disaster recovery and high availability (HA) strategy.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../use_cases/" class="btn btn-neutral float-left" title="Use cases"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../installation_upgrade/" class="btn btn-neutral float-right" title="Installation and upgrades">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../use_cases/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../installation_upgrade/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/backup/index.html b/assets/documentation/1.27.0-rc1/backup/index.html
new file mode 100644
index 000000000..03b20676f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/backup/index.html
@@ -0,0 +1,888 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Backup - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Backup";
+        var mkdocs_page_input_path = "backup.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Backup</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#main-concepts">Main Concepts</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#wal-archive">WAL archive</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#cold-and-hot-backups">Cold and Hot backups</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#comparing-available-backup-options-object-stores-vs-volume-snapshots">Comparing Available Backup Options: Object Stores vs Volume Snapshots</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#object-storebased-backups">Object Store–Based Backups</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#volume-snapshots">Volume Snapshots</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#choosing-between-the-two">Choosing Between the Two</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#comparison-summary">Comparison Summary</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#scheduled-backups">Scheduled Backups</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#cron-schedule">Cron Schedule</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#backup-frequency-and-rto">Backup Frequency and RTO</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#immediate-backup">Immediate Backup</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#pause-scheduled-backups">Pause Scheduled Backups</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#backup-owner-reference-specbackupownerreference">Backup Owner Reference (.spec.backupOwnerReference)</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#on-demand-backups">On-Demand Backups</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#example-requesting-an-on-demand-backup">Example: Requesting an On-Demand Backup</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#monitoring-backup-progress">Monitoring Backup Progress</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#backup-methods">Backup Methods</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#backup-from-a-standby">Backup from a Standby</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#how-it-works">How It Works</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#forcing-backup-on-the-primary">Forcing Backup on the Primary</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#overriding-the-cluster-wide-target">Overriding the Cluster-Wide Target</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#retention-policies">Retention Policies</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Backup</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="backup">Backup</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>This section covers <strong>physical backups</strong> in PostgreSQL.
+While PostgreSQL also supports logical backups using the <code>pg_dump</code> utility,
+these are <strong>not suitable for business continuity</strong> and are <strong>not managed</strong> by
+CloudNativePG. If you still wish to use <code>pg_dump</code>, refer to the
+<a href="../troubleshooting/#emergency-backup"><em>Troubleshooting / Emergency backup</em> section</a>
+for guidance.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Starting with version 1.26, native backup and recovery capabilities are
+being <strong>progressively phased out</strong> of the core operator and moved to official
+CNPG-I plugins. This transition aligns with CloudNativePG's shift towards a
+<strong>backup-agnostic architecture</strong>, enabled by its extensible
+interface—<strong>CNPG-I</strong>—which standardizes the management of <strong>WAL archiving</strong>,
+<strong>physical base backups</strong>, and corresponding <strong>recovery processes</strong>.</p>
+</div>
+<p>CloudNativePG currently supports <strong>physical backups of PostgreSQL clusters</strong> in
+two main ways:</p>
+<ul>
+<li>
+<p><strong>Via <a href="https://github.com/cloudnative-pg/cnpg-i/">CNPG-I</a> plugins</strong>: the
+  CloudNativePG Community officially supports the <a href="https://cloudnative-pg.io/plugin-barman-cloud/"><strong>Barman Cloud Plugin</strong></a>
+  for integration with object storage services.</p>
+</li>
+<li>
+<p><strong>Natively</strong>, with support for:</p>
+<ul>
+<li><a href="../appendixes/backup_barmanobjectstore/">Object storage via Barman Cloud</a>
+  <em>(although deprecated from 1.26 in favor of the Barman Cloud Plugin)</em></li>
+<li><a href="../appendixes/backup_volumesnapshot/">Kubernetes Volume Snapshots</a>, if
+  supported by the underlying storage class</li>
+</ul>
+</li>
+</ul>
+<p>Before selecting a backup strategy with CloudNativePG, it's important to
+familiarize yourself with the foundational concepts covered in the <a href="#main-concepts">"Main Concepts"</a>
+section. These include WAL archiving, hot and cold backups, performing backups
+from a standby, and more.</p>
+<h2 id="main-concepts">Main Concepts</h2>
+<p>PostgreSQL natively provides first class backup and recovery capabilities based
+on file system level (physical) copy. These have been successfully used for
+more than 15 years in mission critical production databases, helping
+organizations all over the world achieve their disaster recovery goals with
+Postgres.</p>
+<p>In CloudNativePG, the backup infrastructure for each PostgreSQL cluster is made
+up of the following resources:</p>
+<ul>
+<li><strong>WAL archive</strong>: a location containing the WAL files (transactional logs)
+  that are continuously written by Postgres and archived for data durability</li>
+<li><strong>Physical base backups</strong>: a copy of all the files that PostgreSQL uses to
+  store the data in the database (primarily the <code>PGDATA</code> and any tablespace)</li>
+</ul>
+<p>CNPG-I provides a generic and extensible interface for managing WAL archiving
+(both archive and restore operations), as well as the base backup and
+corresponding restore processes.</p>
+<h3 id="wal-archive">WAL archive</h3>
+<p>The WAL archive in PostgreSQL is at the heart of <strong>continuous backup</strong>, and it
+is fundamental for the following reasons:</p>
+<ul>
+<li><strong>Hot backups</strong>: the possibility to take physical base backups from any
+  instance in the Postgres cluster (either primary or standby) without shutting
+  down the server; they are also known as online backups</li>
+<li><strong>Point in Time recovery</strong> (PITR): the possibility to recover at any point in
+  time from the first available base backup in your system</li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>WAL archive alone is useless. Without a physical base backup, you cannot
+restore a PostgreSQL cluster.</p>
+</div>
+<p>In general, the presence of a WAL archive enhances the resilience of a
+PostgreSQL cluster, allowing each instance to fetch any required WAL file from
+the archive if needed (normally the WAL archive has higher retention periods
+than any Postgres instance that normally recycles those files).</p>
+<p>This use case can also be extended to <a href="../replica_cluster/">replica clusters</a>,
+as they can simply rely on the WAL archive to synchronize across long
+distances, extending disaster recovery goals across different regions.</p>
+<p>When you <a href="../wal_archiving/">configure a WAL archive</a>, CloudNativePG provides
+out-of-the-box an <a href="../before_you_start/#rpo">RPO</a> &lt;= 5 minutes for disaster
+recovery, even across regions.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Our recommendation is to always setup the WAL archive in production.
+There are known use cases — normally involving staging and development
+environments — where none of the above benefits are needed and the WAL
+archive is not necessary. RPO in this case can be any value, such as
+24 hours (daily backups) or infinite (no backup at all).</p>
+</div>
+<h3 id="cold-and-hot-backups">Cold and Hot backups</h3>
+<p>Hot backups have already been defined in the previous section. They require the
+presence of a WAL archive, and they are the norm in any modern database
+management system.</p>
+<p><strong>Cold backups</strong>, also known as offline backups, are instead physical base backups
+taken when the PostgreSQL instance (standby or primary) is shut down. They are
+consistent per definition, and they represent a snapshot of the database at the
+time it was shut down.</p>
+<p>As a result, PostgreSQL instances can be restarted from a cold backup without
+the need of a WAL archive, even though they can take advantage of it, if
+available (with all the benefits on the recovery side highlighted in the
+previous section).</p>
+<p>In those situations with a higher RPO (for example, 1 hour or 24 hours), and
+shorter retention periods, cold backups represent a viable option to be considered
+for your disaster recovery plans.</p>
+<h2 id="comparing-available-backup-options-object-stores-vs-volume-snapshots">Comparing Available Backup Options: Object Stores vs Volume Snapshots</h2>
+<p>CloudNativePG currently supports two main approaches for physical backups:</p>
+<ul>
+<li><strong>Object store–based backups</strong>, via the <a href="https://cloudnative-pg.io/plugin-barman-cloud/"><strong>Barman Cloud
+  Plugin</strong></a> or the
+  <a href="../appendixes/backup_barmanobjectstore/"><strong>deprecated native integration</strong></a></li>
+<li><a href="../appendixes/backup_volumesnapshot/"><strong>Volume Snapshots</strong></a>, using the
+  Kubernetes CSI interface and supported storage classes</li>
+</ul>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>CNPG-I is designed to enable third parties to build and integrate their own
+backup plugins. Over time, we expect the ecosystem of supported backup
+solutions to grow.</p>
+</div>
+<h3 id="object-storebased-backups">Object Store–Based Backups</h3>
+<p>Backups to an object store (e.g. AWS S3, Azure Blob, GCS):</p>
+<ul>
+<li>Always require WAL archiving</li>
+<li>Support hot backups only</li>
+<li>Do not support incremental or differential copies</li>
+<li>Support retention policies</li>
+</ul>
+<h3 id="volume-snapshots">Volume Snapshots</h3>
+<p>Native volume snapshots:</p>
+<ul>
+<li>Do not require WAL archiving, though its use is still strongly
+  recommended in production</li>
+<li>Support incremental and differential copies, depending on the
+  capabilities of the underlying storage class</li>
+<li>Support both hot and cold backups</li>
+<li>Do not support retention policies</li>
+</ul>
+<h3 id="choosing-between-the-two">Choosing Between the Two</h3>
+<p>The best approach depends on your environment and operational requirements.
+Consider the following factors:</p>
+<ul>
+<li><strong>Object store availability</strong>: Ensure your Kubernetes cluster can access a
+  reliable object storage solution, including a stable networking layer.</li>
+<li><strong>Storage class capabilities</strong>: Confirm that your storage class supports CSI
+  volume snapshots with incremental/differential features.</li>
+<li><strong>Database size</strong>: For very large databases (VLDBs), <strong>volume snapshots are
+  generally preferred</strong> as they enable faster recovery due to copy-on-write
+  technology—this significantly improves your
+  <a href="../before_you_start/#rto">Recovery Time Objective (RTO)</a>.</li>
+<li><strong>Data mobility</strong>: Object store–based backups may offer greater flexibility
+  for replicating or storing backups across regions or environments.</li>
+<li><strong>Operational familiarity</strong>: Choose the method that aligns best with your
+  team's experience and confidence in managing storage.</li>
+</ul>
+<h3 id="comparison-summary">Comparison Summary</h3>
+<table>
+<thead>
+<tr>
+<th>Feature</th>
+<th style="text-align: center;">Object Store</th>
+<th style="text-align: center;">Volume Snapshots</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td><strong>WAL archiving</strong></td>
+<td style="text-align: center;">Required</td>
+<td style="text-align: center;">Recommended<sup>1</sup></td>
+</tr>
+<tr>
+<td><strong>Cold backup</strong></td>
+<td style="text-align: center;">❌</td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td><strong>Hot backup</strong></td>
+<td style="text-align: center;">✅</td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td><strong>Incremental copy</strong></td>
+<td style="text-align: center;">❌</td>
+<td style="text-align: center;">✅<sup>2</sup></td>
+</tr>
+<tr>
+<td><strong>Differential copy</strong></td>
+<td style="text-align: center;">❌</td>
+<td style="text-align: center;">✅<sup>2</sup></td>
+</tr>
+<tr>
+<td><strong>Backup from a standby</strong></td>
+<td style="text-align: center;">✅</td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td><strong>Snapshot recovery</strong></td>
+<td style="text-align: center;">❌<sup>3</sup></td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td><strong>Retention policies</strong></td>
+<td style="text-align: center;">✅</td>
+<td style="text-align: center;">❌</td>
+</tr>
+<tr>
+<td><strong>Point-in-Time Recovery (PITR)</strong></td>
+<td style="text-align: center;">✅</td>
+<td style="text-align: center;">Requires WAL archive</td>
+</tr>
+<tr>
+<td><strong>Underlying technology</strong></td>
+<td style="text-align: center;">Barman Cloud</td>
+<td style="text-align: center;">Kubernetes API</td>
+</tr>
+</tbody>
+</table>
+<hr />
+<blockquote>
+<p><strong>Notes:</strong></p>
+<ol>
+<li>WAL archiving must currently use an object store through a plugin (or the
+   deprecated native one).</li>
+<li>Availability of incremental and differential copies depends on the
+   capabilities of the storage class used for PostgreSQL volumes.</li>
+<li>Snapshot recovery can be emulated by using the
+   <code>bootstrap.recovery.recoveryTarget.targetImmediate</code> option.</li>
+</ol>
+</blockquote>
+<h2 id="scheduled-backups">Scheduled Backups</h2>
+<p>Scheduled backups are the recommended way to implement a reliable backup
+strategy in CloudNativePG. They are defined using the <code>ScheduledBackup</code> custom
+resource.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For a complete list of configuration options, refer to the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ScheduledBackupSpec"><code>ScheduledBackupSpec</code></a>
+in the API reference.</p>
+</div>
+<h3 id="cron-schedule">Cron Schedule</h3>
+<p>The <code>schedule</code> field defines <strong>when</strong> the backup should occur, using a
+<em>six-field cron expression</em> that includes seconds. This format follows the
+<a href="https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format">Go <code>cron</code> package specification</a>.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This format differs from the traditional Unix/Linux <code>crontab</code>—it includes a
+<strong>seconds</strong> field as the first entry.</p>
+</div>
+<p>Example of a daily scheduled backup:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: ScheduledBackup
+metadata:
+  name: backup-example
+spec:
+  schedule: &quot;0 0 0 * * *&quot;  # At midnight every day
+  backupOwnerReference: self
+  cluster:
+    name: pg-backup
+  # method: plugin, volumeSnapshot, or barmanObjectStore (default)
+</code></pre>
+<p>The schedule <code>"0 0 0 * * *"</code> triggers a backup every day at midnight
+(00:00:00). In Kubernetes CronJobs, the equivalent expression would be <code>0 0 * * *</code>,
+since seconds are not supported.</p>
+<h3 id="backup-frequency-and-rto">Backup Frequency and RTO</h3>
+<div class="admonition hint">
+<p class="admonition-title">Hint</p>
+<p>The frequency of your backups directly impacts your <strong>Recovery Time Objective</strong>
+(<a href="../before_you_start/#rto">RTO</a>).</p>
+</div>
+<p>To optimize your disaster recovery strategy based on continuous backup:</p>
+<ul>
+<li>Regularly test restoring from your backups.</li>
+<li>Measure the time required for a full recovery.</li>
+<li>Account for the size of base backups and the number of WAL files that must be
+  retrieved and replayed.</li>
+</ul>
+<p>In most cases, a <strong>weekly base backup</strong> is sufficient. It is rare to schedule
+full backups more frequently than once per day.</p>
+<h3 id="immediate-backup">Immediate Backup</h3>
+<p>To trigger a backup immediately when the <code>ScheduledBackup</code> is created:</p>
+<pre><code class="language-yaml">spec:
+  immediate: true
+</code></pre>
+<h3 id="pause-scheduled-backups">Pause Scheduled Backups</h3>
+<p>To temporarily stop scheduled backups from running:</p>
+<pre><code class="language-yaml">spec:
+  suspend: true
+</code></pre>
+<h3 id="backup-owner-reference-specbackupownerreference">Backup Owner Reference (<code>.spec.backupOwnerReference</code>)</h3>
+<p>Controls which Kubernetes object is set as the owner of the backup resource:</p>
+<ul>
+<li><code>none</code>: No owner reference (legacy behavior)</li>
+<li><code>self</code>: The <code>ScheduledBackup</code> object becomes the owner</li>
+<li><code>cluster</code>: The PostgreSQL cluster becomes the owner</li>
+</ul>
+<h2 id="on-demand-backups">On-Demand Backups</h2>
+<p>On-demand backups allow you to manually trigger a backup operation at any time
+by creating a <code>Backup</code> resource.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For a full list of available options, see the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSpec"><code>BackupSpec</code></a> in the
+API reference.</p>
+</div>
+<h3 id="example-requesting-an-on-demand-backup">Example: Requesting an On-Demand Backup</h3>
+<p>To start an on-demand backup, apply a <code>Backup</code> request custom resource like the
+following:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Backup
+metadata:
+  name: backup-example
+spec:
+  method: barmanObjectStore
+  cluster:
+    name: pg-backup
+</code></pre>
+<p>In this example, the operator will orchestrate the backup process using the
+<code>barman-cloud-backup</code> tool and store the backup in the configured object store.</p>
+<h3 id="monitoring-backup-progress">Monitoring Backup Progress</h3>
+<p>You can check the status of the backup using:</p>
+<pre><code class="language-bash">kubectl describe backup backup-example
+</code></pre>
+<p>While the backup is in progress, you'll see output similar to:</p>
+<pre><code class="language-text">Name:         backup-example
+Namespace:    default
+...
+Spec:
+  Cluster:
+    Name:  pg-backup
+Status:
+  Phase:       running
+  Started At:  2020-10-26T13:57:40Z
+Events:        &lt;none&gt;
+</code></pre>
+<p>Once the backup has successfully completed, the <code>phase</code> will be set to
+<code>completed</code>, and the output will include additional metadata:</p>
+<pre><code class="language-text">Name:         backup-example
+Namespace:    default
+...
+Status:
+  Backup Id:         20201026T135740
+  Destination Path:  s3://backups/
+  Endpoint URL:      http://minio:9000
+  Phase:             completed
+  S3 Credentials:
+    Access Key Id:
+      Name:  minio
+      Key:   ACCESS_KEY_ID
+    Secret Access Key:
+      Name:  minio
+      Key:   ACCESS_SECRET_KEY
+  Server Name:       pg-backup
+  Started At:        2020-10-26T13:57:40Z
+  Stopped At:        2020-10-26T13:57:44Z
+</code></pre>
+<hr />
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>On-demand backups do <strong>not</strong> include Kubernetes secrets for the PostgreSQL
+superuser or application user. You should ensure these secrets are included in
+your broader Kubernetes cluster backup strategy.</p>
+</div>
+<h2 id="backup-methods">Backup Methods</h2>
+<p>CloudNativePG currently supports the following backup methods for scheduled
+and on-demand backups:</p>
+<ul>
+<li><code>plugin</code> – Uses a CNPG-I plugin (requires <code>.spec.pluginConfiguration</code>)</li>
+<li><code>volumeSnapshot</code> – Uses native <a href="../appendixes/backup_volumesnapshot/#how-to-configure-volume-snapshot-backups">Kubernetes volume snapshots</a></li>
+<li><code>barmanObjectStore</code> – Uses <a href="../appendixes/backup_barmanobjectstore/">Barman Cloud for object storage</a>
+  <em>(deprecated starting with v1.26 in favor of the
+  <a href="https://cloudnative-pg.io/plugin-barman-cloud/">Barman Cloud Plugin</a>,
+  but still the default for backward compatibility)</em></li>
+</ul>
+<p>Specify the method using the <code>.spec.method</code> field (defaults to
+<code>barmanObjectStore</code>).</p>
+<p>If your cluster is configured to support volume snapshots, you can enable
+scheduled snapshot backups like this:</p>
+<pre><code class="language-yaml">spec:
+  method: volumeSnapshot
+</code></pre>
+<p>To use the Barman Cloud Plugin as the backup method, set <code>method: plugin</code> and
+configure the plugin accordingly. You can find an example in the
+<a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/usage/#performing-a-base-backup">"Performing a Base Backup" section of the plugin documentation</a></p>
+<h2 id="backup-from-a-standby">Backup from a Standby</h2>
+<p>Taking a base backup involves reading the entire on-disk data set of a
+PostgreSQL instance, which can introduce I/O contention and impact the
+performance of the active workload.</p>
+<p>To reduce this impact, <strong>CloudNativePG supports taking backups from a standby
+instance</strong>, leveraging PostgreSQL’s built-in capability to perform backups from
+read-only replicas.</p>
+<p>By default, backups are performed on the <strong>most up-to-date replica</strong> in the
+cluster. If no replicas are available, the backup will fall back to the
+<strong>primary instance</strong>.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The examples in this section are focused on backup target selection and do not
+take the backup method (<code>spec.method</code>) into account, as it is not relevant to
+the scope being discussed.</p>
+</div>
+<h3 id="how-it-works">How It Works</h3>
+<p>When <code>prefer-standby</code> is the target (the default behavior), CloudNativePG will
+attempt to:</p>
+<ol>
+<li>Identify the most synchronized standby node.</li>
+<li>Run the backup process on that standby.</li>
+<li>Fall back to the primary if no standbys are available.</li>
+</ol>
+<p>This strategy minimizes interference with the primary’s workload.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Although the standby might not always be up to date with the primary,
+in the time continuum from the first available backup to the last
+archived WAL this is normally irrelevant. The base backup indeed
+represents the starting point from which to begin a recovery operation,
+including PITR. Similarly to what happens with
+<a href="https://www.postgresql.org/docs/current/app-pgbasebackup.html"><code>pg_basebackup</code></a>,
+when backing up from an online standby we do not force a switch of the WAL on the
+primary. This might produce unexpected results in the short term (before
+<code>archive_timeout</code> kicks in) in deployments with low write activity.</p>
+</div>
+<h3 id="forcing-backup-on-the-primary">Forcing Backup on the Primary</h3>
+<p>To always run backups on the primary instance, explicitly set the backup target
+to <code>primary</code> in the cluster configuration:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  [...]
+spec:
+  backup:
+    target: &quot;primary&quot;
+</code></pre>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Be cautious when using <code>primary</code> as the target for <strong>cold backups using
+volume snapshots</strong>, as this will require shutting down the primary instance
+temporarily—interrupting all write operations. The same caution applies to
+single-instance clusters, even if you haven't explicitly set the target.</p>
+</div>
+<h3 id="overriding-the-cluster-wide-target">Overriding the Cluster-Wide Target</h3>
+<p>You can override the cluster-level target on a per-backup basis, using either
+<code>Backup</code> or <code>ScheduledBackup</code> resources. Here's an example of an on-demand
+backup:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Backup
+metadata:
+  [...]
+spec:
+  cluster:
+    name: [...]
+  target: &quot;primary&quot;
+</code></pre>
+<p>In this example, even if the cluster’s default target is <code>prefer-standby</code>, the
+backup will be taken from the primary instance.</p>
+<h2 id="retention-policies">Retention Policies</h2>
+<p>CloudNativePG is evolving toward a <strong>backup-agnostic architecture</strong>, where
+backup responsibilities are delegated to external <strong>CNPG-I plugins</strong>. These
+plugins are expected to offer advanced and customizable data protection
+features, including sophisticated retention management, that go beyond the
+built-in capabilities and scope of CloudNativePG.</p>
+<p>As part of this transition, the <code>spec.backup.retentionPolicy</code> field in the
+<code>Cluster</code> resource is <strong>deprecated</strong> and will be removed in a future release.</p>
+<p>For more details on available retention features, refer to your chosen plugin’s documentation.
+For example: <a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/retention/">"Retention Policies" with Barman Cloud Plugin</a>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Users are encouraged to rely on the retention mechanisms provided by the
+backup plugin they are using. This ensures better flexibility and consistency
+with the backup method in use.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../logical_replication/" class="btn btn-neutral float-left" title="Logical Replication"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../wal_archiving/" class="btn btn-neutral float-right" title="WAL archiving">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../logical_replication/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../wal_archiving/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/backup_recovery/index.html b/assets/documentation/1.27.0-rc1/backup_recovery/index.html
new file mode 100644
index 000000000..eb5de25b4
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/backup_recovery/index.html
@@ -0,0 +1,354 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Backup and Recovery - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Backup and Recovery";
+        var mkdocs_page_input_path = "backup_recovery.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Backup and Recovery</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="backup-and-recovery">Backup and Recovery</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p><a href="../backup/">Backup</a> and <a href="../recovery/">recovery</a> are in two separate sections.</p>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/before_you_start/index.html b/assets/documentation/1.27.0-rc1/before_you_start/index.html
new file mode 100644
index 000000000..c08b46497
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/before_you_start/index.html
@@ -0,0 +1,500 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Before You Start - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Before You Start";
+        var mkdocs_page_input_path = "before_you_start.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Before You Start</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#kubernetes-terminology">Kubernetes terminology</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-terminology">PostgreSQL terminology</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#cloud-terminology">Cloud terminology</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#what-to-do-next">What to do next</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Before You Start</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="before-you-start">Before You Start</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>Before we get started, it is essential to go over some terminology that is
+specific to Kubernetes and PostgreSQL.</p>
+<h2 id="kubernetes-terminology">Kubernetes terminology</h2>
+<dl>
+<dt><a href="https://kubernetes.io/docs/concepts/architecture/nodes/">Node</a></dt>
+<dd>A <em>node</em> is a worker machine in Kubernetes, either virtual or physical, where
+  all services necessary to run pods are managed by the control plane node(s).</dd>
+<dt><a href="../architecture/#reserving-nodes-for-postgresql-workloads">Postgres Node</a></dt>
+<dd>A <em>Postgres node</em> is a Kubernetes worker node dedicated to running PostgreSQL
+  workloads. This is achieved by applying the <code>node-role.kubernetes.io</code> label and
+  taint, as <a href="../architecture/#reserving-nodes-for-postgresql-workloads">proposed by CloudNativePG</a>.
+  It is also referred to as a <code>postgres</code> node.</dd>
+<dt><a href="https://kubernetes.io/docs/concepts/workloads/pods/pod/">Pod</a></dt>
+<dd>A <em>pod</em> is the smallest computing unit that can be deployed in a Kubernetes
+  cluster and is composed of one or more containers that share network and
+  storage.</dd>
+<dt><a href="https://kubernetes.io/docs/concepts/services-networking/service/">Service</a></dt>
+<dd>A <em>service</em> is an abstraction that exposes as a network service an
+  application that runs on a group of pods and standardizes important features
+  such as service discovery across applications, load balancing, failover, and so
+  on.</dd>
+<dt><a href="https://kubernetes.io/docs/concepts/configuration/secret/">Secret</a></dt>
+<dd>A <em>secret</em> is an object that is designed to store small amounts of sensitive
+  data such as passwords, access keys, or tokens, and use them in pods.</dd>
+<dt><a href="https://kubernetes.io/docs/concepts/storage/storage-classes/">Storage Class</a></dt>
+<dd>A <em>storage class</em> allows an administrator to define the classes of storage in
+  a cluster, including provisioner (such as AWS EBS), reclaim policies, mount
+  options, volume expansion, and so on.</dd>
+<dt><a href="https://kubernetes.io/docs/concepts/storage/persistent-volumes/">Persistent Volume</a></dt>
+<dd>A <em>persistent volume</em> (PV) is a resource in a Kubernetes cluster that
+  represents storage that has been either manually provisioned by an
+  administrator or dynamically provisioned by a <em>storage class</em> controller. A PV
+  is associated with a pod using a <em>persistent volume claim</em> and its lifecycle is
+  independent of any pod that uses it. Normally, a PV is a network volume,
+  especially in the public cloud. A <a href="https://kubernetes.io/docs/concepts/storage/volumes/#local"><em>local persistent volume</em>
+  (LPV)</a> is a
+  persistent volume that exists only on the particular node where the pod that
+  uses it is running.</dd>
+<dt><a href="https://kubernetes.io/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims">Persistent Volume Claim</a></dt>
+<dd>A <em>persistent volume claim</em> (PVC) represents a request for storage, which
+  might include size, access mode, or a particular storage class. Similar to how
+  a pod consumes node resources, a PVC consumes the resources of a PV.</dd>
+<dt><a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/">Namespace</a></dt>
+<dd>A <em>namespace</em> is a logical and isolated subset of a Kubernetes cluster and
+  can be seen as a <em>virtual cluster</em> within the wider physical cluster.
+  Namespaces allow administrators to create separated environments based on
+  projects, departments, teams, and so on.</dd>
+<dt><a href="https://kubernetes.io/docs/reference/access-authn-authz/rbac/">RBAC</a></dt>
+<dd><em>Role Based Access Control</em> (RBAC), also known as <em>role-based security</em>, is a
+  method used in computer systems security to restrict access to the network and
+  resources of a system to authorized users only. Kubernetes has a native API to
+  control roles at the namespace and cluster level and associate them with
+  specific resources and individuals.</dd>
+<dt><a href="https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/">CRD</a></dt>
+<dd>A <em>custom resource definition</em> (CRD) is an extension of the Kubernetes API
+  and allows developers to create new data types and objects, <em>called custom
+  resources</em>.</dd>
+<dt><a href="https://kubernetes.io/docs/concepts/extend-kubernetes/operator/">Operator</a></dt>
+<dd>An <em>operator</em> is a custom resource that automates those steps that are
+  normally performed by a human operator when managing one or more applications
+  or given services. An operator assists Kubernetes in making sure that the
+  resource's defined state always matches the observed one.</dd>
+<dt><a href="https://kubernetes.io/docs/reference/kubectl/overview/"><code>kubectl</code></a></dt>
+<dd><code>kubectl</code> is the command-line tool used to manage a Kubernetes cluster.</dd>
+</dl>
+<p>CloudNativePG requires a Kubernetes version supported by the community. Please refer to the
+<a href="../supported_releases/">"Supported releases"</a> page for details.</p>
+<h2 id="postgresql-terminology">PostgreSQL terminology</h2>
+<dl>
+<dt>Instance</dt>
+<dd>A Postgres server process running and listening on a pair "IP address(es)"
+  and "TCP port" (usually 5432).</dd>
+<dt>Primary</dt>
+<dd>A PostgreSQL instance that can accept both read and write operations.</dd>
+<dt>Replica</dt>
+<dd>A PostgreSQL instance replicating from the only primary instance in a
+  cluster and is kept updated by reading a stream of Write-Ahead Log (WAL)
+  records. A replica is also known as <em>standby</em> or <em>secondary</em> server. PostgreSQL
+  relies on physical streaming replication (async/sync) and file-based log
+  shipping (async).</dd>
+<dt>Hot Standby</dt>
+<dd>PostgreSQL feature that allows a <em>replica</em> to accept read-only workloads.</dd>
+<dt>Cluster</dt>
+<dd>To be intended as High Availability (HA) Cluster: a set of PostgreSQL
+  instances made up by a single primary and an optional arbitrary number of
+  replicas.</dd>
+<dt>Replica Cluster</dt>
+<dd>A CloudNativePG <code>Cluster</code> that is in continuous recovery mode from a selected
+  PostgreSQL cluster, normally residing outside the Kubernetes cluster. It is a
+  feature that enables multi-cluster deployments in private, public, hybrid, and
+  multi-cloud contexts.</dd>
+<dt>Designated Primary</dt>
+<dd>A PostgreSQL standby instance in a replica cluster that is in continuous
+  recovery from another PostgreSQL cluster and that is designated to become
+  primary in case the replica cluster becomes primary.</dd>
+<dt>Superuser</dt>
+<dd>In PostgreSQL a <em>superuser</em> is any role with both <code>LOGIN</code> and <code>SUPERUSER</code>
+  privileges. For security reasons, CloudNativePG performs administrative tasks
+  by connecting to the <code>postgres</code> database as the <code>postgres</code> user via <code>peer</code>
+  authentication over the local Unix Domain Socket.</dd>
+<dt><a href="https://www.postgresql.org/docs/current/wal-intro.html">WAL</a></dt>
+<dd>Write-Ahead Logging (WAL) is a standard method for ensuring data integrity in
+  database management systems.</dd>
+<dt>PVC group</dt>
+<dd>A PVC group in CloudNativePG's terminology is a group of related PVCs
+  belonging to the same PostgreSQL instance, namely the main volume containing
+  the PGDATA (<code>storage</code>) and the volume for WALs (<code>walStorage</code>).</dd>
+<dt><a id="rto"></a>RTO</dt>
+<dd>Acronym for "recovery time objective", the amount of time a system can be
+  unavailable without adversely impacting the application.</dd>
+<dt><a id="rpo"></a>RPO</dt>
+<dd>Acronym for "recovery point objective", a calculation of the level of
+  acceptable data loss following a disaster recovery scenario.</dd>
+</dl>
+<h2 id="cloud-terminology">Cloud terminology</h2>
+<dl>
+<dt>Region</dt>
+<dd>A <em>region</em> in the Cloud is an isolated and independent geographic area
+  organized in <em>availability zones</em>. Zones within a region have very little
+  round-trip network latency.</dd>
+<dt>Zone</dt>
+<dd>An <em>availability zone</em> in the Cloud (also known as <em>zone</em>) is an area in a
+  region where resources can be deployed. Usually, an availability zone
+  corresponds to a data center or an isolated building of the same data center.</dd>
+</dl>
+<h2 id="what-to-do-next">What to do next</h2>
+<p>Now that you have familiarized with the terminology, you can decide to
+<a href="../quickstart/">test CloudNativePG on your laptop using a local cluster</a> before
+deploying the operator in your selected cloud environment.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href=".." class="btn btn-neutral float-left" title="CloudNativePG"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../use_cases/" class="btn btn-neutral float-right" title="Use cases">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href=".." style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../use_cases/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/benchmarking/index.html b/assets/documentation/1.27.0-rc1/benchmarking/index.html
new file mode 100644
index 000000000..d2bbea237
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/benchmarking/index.html
@@ -0,0 +1,517 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Benchmarking - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Benchmarking";
+        var mkdocs_page_input_path = "benchmarking.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Benchmarking</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#pgbench">pgbench</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#fio">fio</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Benchmarking</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="benchmarking">Benchmarking</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>The CNPG kubectl plugin provides an easy way for benchmarking a PostgreSQL deployment in Kubernetes using CloudNativePG.</p>
+<p>Benchmarking is focused on two aspects:</p>
+<ul>
+<li>the <strong>database</strong>, by relying on <a href="https://www.postgresql.org/docs/current/pgbench.html">pgbench</a></li>
+<li>the <strong>storage</strong>, by relying on <a href="https://fio.readthedocs.io/en/latest/fio_doc.html">fio</a></li>
+</ul>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p><code>pgbench</code> and <code>fio</code> must be run in a staging or pre-production environment.
+Do not use these plugins in a production environment, as it might have
+catastrophic consequences on your databases and the other
+workloads/applications that run in the same shared environment.</p>
+</div>
+<h3 id="pgbench">pgbench</h3>
+<p>The <code>kubectl</code> CNPG plugin command <code>pgbench</code> executes a user-defined <code>pgbench</code> job
+against an existing Postgres Cluster.</p>
+<p>Through the <code>--dry-run</code> flag you can generate the manifest of the job for later
+modification/execution.</p>
+<p>A common command structure with <code>pgbench</code> is the following:</p>
+<pre><code class="language-shell">kubectl cnpg pgbench \
+  -n &lt;namespace&gt; &lt;cluster-name&gt; \
+  --job-name &lt;pgbench-job&gt; \
+  --db-name &lt;db-name&gt; \
+  -- &lt;pgbench options&gt;
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Please refer to the <a href="https://www.postgresql.org/docs/current/pgbench.html"><code>pgbench</code> documentation</a>
+for information about the specific options to be used in your jobs.</p>
+</div>
+<p>This example creates a job called <code>pgbench-init</code> that initializes for <code>pgbench</code>
+OLTP-like purposes the <code>app</code> database in a <code>Cluster</code> named <code>cluster-example</code>,
+using a scale factor of 1000:</p>
+<pre><code class="language-shell">kubectl cnpg pgbench \
+  --job-name pgbench-init \
+  cluster-example \
+  -- --initialize --scale 1000
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>This will generate a database with 100000000 records, taking approximately 13GB
+of space on disk.</p>
+</div>
+<p>You can see the progress of the job with:</p>
+<pre><code class="language-shell">kubectl logs jobs/pgbench-run
+</code></pre>
+<p>The following example creates a job called <code>pgbench-run</code> executing <code>pgbench</code>
+against the previously initialized database for 30 seconds, using a single
+connection:</p>
+<pre><code class="language-shell">kubectl cnpg pgbench \
+  --job-name pgbench-run \
+  cluster-example \
+  -- --time 30 --client 1 --jobs 1
+</code></pre>
+<p>The next example runs <code>pgbench</code> against an existing database by using the
+<code>--db-name</code> flag and the <code>pgbench</code> namespace:</p>
+<pre><code class="language-shell">kubectl cnpg pgbench \
+  --db-name pgbench \
+  --job-name pgbench-job \
+  cluster-example \
+  -- --time 30 --client 1 --jobs 1
+</code></pre>
+<p>By default, jobs do not expire. You can enable automatic deletion with the
+<code>--ttl</code> flag. The job will be deleted after the specified duration (in seconds).</p>
+<pre><code class="language-shell">kubectl cnpg pgbench \
+  --job-name pgbench-run \
+  --ttl 600 \
+  cluster-example \
+  -- --time 30 --client 1 --jobs 1
+</code></pre>
+<p>If you want to run a <code>pgbench</code> job on a specific worker node, you can use
+the <code>--node-selector</code> option. Suppose you want to run the previous
+initialization job on a node having the <code>workload=pgbench</code> label, you can run:</p>
+<pre><code class="language-shell">kubectl cnpg pgbench \
+  --db-name pgbench \
+  --job-name pgbench-init \
+  --node-selector workload=pgbench \
+  cluster-example \
+  -- --initialize --scale 1000
+</code></pre>
+<p>The job status can be fetched by running:</p>
+<pre><code>kubectl get job/pgbench-job -n &lt;namespace&gt;
+
+NAME       COMPLETIONS   DURATION   AGE
+job-name   1/1           15s        41s
+</code></pre>
+<p>Once the job is completed the results can be gathered by executing:</p>
+<pre><code>kubectl logs job/pgbench-job -n &lt;namespace&gt;
+</code></pre>
+<h3 id="fio">fio</h3>
+<p>The kubectl CNPG plugin command <code>fio</code> executes a fio job with default values
+and read operations.
+Through the <code>--dry-run</code> flag you can generate the manifest of the job for later
+modification/execution.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The kubectl plugin command <code>fio</code> will create a deployment with predefined
+fio job values using a ConfigMap. If you want to provide custom job values, we
+recommend generating a manifest using the <code>--dry-run</code> flag and providing your
+custom job values in the generated ConfigMap.</p>
+</div>
+<p>Example of default usage:</p>
+<pre><code class="language-shell">kubectl cnpg fio &lt;fio-name&gt;
+</code></pre>
+<p>Example with custom values:</p>
+<pre><code class="language-shell">kubectl cnpg fio &lt;fio-name&gt; \
+  -n &lt;namespace&gt;  \
+  --storageClass &lt;name&gt; \
+  --pvcSize &lt;size&gt;
+</code></pre>
+<p>Example of how to run the <code>fio</code> command against a <code>StorageClass</code> named
+<code>standard</code> and <code>pvcSize: 2Gi</code> in the <code>fio</code> namespace:</p>
+<pre><code class="language-shell">kubectl cnpg fio fio-job \
+  -n fio  \
+  --storageClass standard \
+  --pvcSize 2Gi
+</code></pre>
+<p>The deployment status can be fetched by running:</p>
+<pre><code class="language-shell">kubectl get deployment/fio-job -n fio
+
+NAME          READY   UP-TO-DATE   AVAILABLE   AGE
+fio-job        1/1     1            1           14s
+
+</code></pre>
+<p>After running kubectl plugin command <code>fio</code>.</p>
+<p>It will:</p>
+<ol>
+<li>Create a PVC</li>
+<li>Create a ConfigMap representing the configuration of a fio job</li>
+<li>Create a fio deployment composed by a single Pod, which will run fio on
+   the PVC, create graphs after completing the benchmark and start serving the
+   generated files with a webserver. We use the
+   <a href="https://github.com/wallnerryan/fio-tools"><code>fio-tools</code></a> image for that.</li>
+</ol>
+<p>The Pod created by the deployment will be ready when it starts serving the
+results. You can forward the port of the pod created by the deployment</p>
+<pre><code>kubectl port-forward -n &lt;namespace&gt; deployment/&lt;fio-name&gt; 8000
+</code></pre>
+<p>and then use a browser and connect to <code>http://localhost:8000/</code> to get the data.</p>
+<p>The default 8k block size has been chosen to emulate a PostgreSQL workload.
+Disks that cap the amount of available IOPS can show very different throughput
+values when changing this parameter.</p>
+<p>Below is an example diagram of sequential writes on a local disk
+mounted on a dedicated Kubernetes node
+(1 hour benchmark):</p>
+<p><img alt="Sequential writes bandwidth" src="../images/write_bw.1-2Draw.png" /></p>
+<p>After all testing is done, fio deployment and resources can be deleted by:</p>
+<pre><code class="language-shell">kubectl cnpg fio &lt;fio-job-name&gt; --dry-run | kubectl delete -f -
+</code></pre>
+<p>make sure use the same name which was used to create the fio deployment and add namespace if applicable.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../networking/" class="btn btn-neutral float-left" title="Networking"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../faq/" class="btn btn-neutral float-right" title="Frequently Asked Questions (FAQ)">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../networking/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../faq/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/bootstrap/index.html b/assets/documentation/1.27.0-rc1/bootstrap/index.html
new file mode 100644
index 000000000..f81ee2af4
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/bootstrap/index.html
@@ -0,0 +1,1102 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Bootstrap - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Bootstrap";
+        var mkdocs_page_input_path = "bootstrap.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Bootstrap</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#the-bootstrap-section">The bootstrap section</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#the-externalclusters-section">The externalClusters section</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#password-files">Password files</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#bootstrap-an-empty-cluster-initdb">Bootstrap an empty cluster (initdb)</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#passing-options-to-initdb">Passing Options to initdb</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#executing-queries-after-initialization">Executing Queries After Initialization</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#bootstrap-from-another-cluster">Bootstrap from another cluster</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#bootstrap-from-a-backup-recovery">Bootstrap from a backup (recovery)</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#bootstrap-from-a-live-cluster-pg_basebackup">Bootstrap from a live cluster (pg_basebackup)</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#requirements">Requirements</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#about-the-replication-user">About the replication user</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#usernamepassword-authentication">Username/Password authentication</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#tls-certificate-authentication">TLS certificate authentication</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#configure-the-application-database">Configure the application database</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#current-limitations">Current limitations</a>
+    </li>
+        </ul>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Bootstrap</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="bootstrap">Bootstrap</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>This section describes the options available to create a new
+PostgreSQL cluster and the design rationale behind them.
+There are primarily two ways to bootstrap a new cluster:</p>
+<ul>
+<li>from scratch (<code>initdb</code>)</li>
+<li>from an existing PostgreSQL cluster, either directly (<code>pg_basebackup</code>)
+  or indirectly through a physical base backup (<code>recovery</code>)</li>
+</ul>
+<p>The <code>initdb</code> bootstrap also provides the option to import one or more
+databases from an existing PostgreSQL cluster, even if it's outside
+Kubernetes or running a different major version of PostgreSQL.
+For more detailed information about this feature, please refer to the
+<a href="../database_import/">"Importing Postgres databases"</a> section.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Bootstrapping from an existing cluster enables the creation of a
+<strong>replica cluster</strong>—an independent PostgreSQL cluster that remains in
+continuous recovery, stays synchronized with the source cluster, and
+accepts read-only connections.
+For more details, refer to the <a href="../replica_cluster/">Replica Cluster section</a>.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>CloudNativePG requires both the <code>postgres</code> user and database to
+always exist. Using the local Unix Domain Socket, it needs to connect
+as the <code>postgres</code> user to the <code>postgres</code> database via <code>peer</code> authentication in
+order to perform administrative tasks on the cluster.
+<strong>DO NOT DELETE</strong> the <code>postgres</code> user or the <code>postgres</code> database!!!</p>
+</div>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>CloudNativePG is gradually introducing support for
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/issues/2081">Kubernetes' native <code>VolumeSnapshot</code> API</a>
+for both incremental and differential copy in backup and recovery
+operations - if supported by the underlying storage classes.
+Please see <a href="../recovery/#recovery-from-volumesnapshot-objects">"Recovery from Volume Snapshot objects"</a>
+for details.</p>
+</div>
+<h2 id="the-bootstrap-section">The <code>bootstrap</code> section</h2>
+<p>The <em>bootstrap</em> method can be defined in the <code>bootstrap</code> section of the cluster
+specification. CloudNativePG currently supports the following bootstrap methods:</p>
+<ul>
+<li><code>initdb</code>: initialize a new PostgreSQL cluster (default)</li>
+<li><code>recovery</code>: create a PostgreSQL cluster by restoring from a base backup of an
+  existing cluster and, if needed, replaying all the available WAL files or up to
+  a given <em>point in time</em></li>
+<li><code>pg_basebackup</code>: create a PostgreSQL cluster by cloning an existing one of
+  the same major version using <code>pg_basebackup</code> through the streaming
+  replication protocol. This method is particularly useful for migrating
+  databases to CloudNativePG, although meeting all requirements can be
+  challenging. Be sure to review the warnings in the
+  <a href="#bootstrap-from-a-live-cluster-pg_basebackup"><code>pg_basebackup</code> subsection</a>
+  carefully.</li>
+</ul>
+<p>Only one bootstrap method can be specified in the manifest.
+Attempting to define multiple bootstrap methods will result in validation errors.</p>
+<p>In contrast to the <code>initdb</code> method, both <code>recovery</code> and <code>pg_basebackup</code>
+create a new cluster based on another one (either offline or online) and can be
+used to spin up replica clusters. They both rely on the definition of external
+clusters.
+Refer to the <a href="../replica_cluster/">replica cluster section</a> for more information.</p>
+<p>Given the amount of possible backup methods and combinations of backup
+storage that the CloudNativePG operator provides for <code>recovery</code>, please refer to
+the dedicated <a href="../recovery/">"Recovery" section</a> for guidance on each method.</p>
+<div class="admonition seealso">
+<p class="admonition-title">API reference</p>
+<p>Please refer to the <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-BootstrapConfiguration">"API reference for the <code>bootstrap</code> section</a>
+for more information.</p>
+</div>
+<h2 id="the-externalclusters-section">The <code>externalClusters</code> section</h2>
+<p>The <code>externalClusters</code> section of the cluster manifest can be used to configure
+access to one or more PostgreSQL clusters as <em>sources</em>.
+The primary use cases include:</p>
+<ol>
+<li><strong>Importing Databases:</strong> Specify an external source to be utilized during
+  the <a href="../database_import/">importation of databases</a> via logical backup and
+  restore, as part of the <code>initdb</code> bootstrap method.</li>
+<li><strong>Cross-Region Replication:</strong> Define a cross-region PostgreSQL cluster
+  employing physical replication, capable of extending across distinct Kubernetes
+  clusters or traditional VM/bare-metal environments.</li>
+<li><strong>Recovery from Physical Base Backup:</strong> Recover, fully or at a
+  given Point-In-Time, a PostgreSQL cluster by referencing a physical base
+  backup.</li>
+</ol>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Ongoing development will extend the functionality of <code>externalClusters</code> to
+accommodate additional use cases, such as logical replication and foreign
+servers in future releases.</p>
+</div>
+<p>As far as bootstrapping is concerned, <code>externalClusters</code> can be used
+to define the source PostgreSQL cluster for either the <code>pg_basebackup</code>
+method or the <code>recovery</code> one. An external cluster needs to have:</p>
+<ul>
+<li>a name that identifies the external cluster, to be used as a reference via the
+  <code>source</code> option</li>
+<li>
+<p>at least one of the following:</p>
+<ul>
+<li>information about streaming connection</li>
+<li>information about the <strong>recovery object store</strong>, which is a Barman Cloud
+  compatible object store that contains:<ul>
+<li>the WAL archive (required for Point In Time Recovery)</li>
+<li>the catalog of physical base backups for the Postgres cluster</li>
+</ul>
+</li>
+</ul>
+</li>
+</ul>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>A recovery object store is normally an AWS S3, Azure Blob Storage,
+or Google Cloud Storage source that is managed by Barman Cloud.</p>
+</div>
+<p>When only the streaming connection is defined, the source can be used for the
+<code>pg_basebackup</code> method. When only the recovery object store is defined, the
+source can be used for the <code>recovery</code> method. When both are defined, any of
+the two bootstrap methods can be chosen. The following table summarizes your
+options:</p>
+<table>
+<thead>
+<tr>
+<th style="text-align: left;">Content of externalClusters</th>
+<th style="text-align: center;">pg_basebackup</th>
+<th style="text-align: center;">recovery</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: left;">Only streaming</td>
+<td style="text-align: center;">✓</td>
+<td style="text-align: center;"></td>
+</tr>
+<tr>
+<td style="text-align: left;">Only object store</td>
+<td style="text-align: center;"></td>
+<td style="text-align: center;">✓</td>
+</tr>
+<tr>
+<td style="text-align: left;">Streaming and object store</td>
+<td style="text-align: center;">✓</td>
+<td style="text-align: center;">✓</td>
+</tr>
+</tbody>
+</table>
+<p>Furthermore, in case of <code>pg_basebackup</code> or full <code>recovery</code> point in time, the
+cluster is eligible for replica cluster mode. This means that the cluster is
+continuously fed from the source, either via streaming, via WAL shipping
+through the PostgreSQL's <code>restore_command</code>, or any of the two.</p>
+<div class="admonition seealso">
+<p class="admonition-title">API reference</p>
+<p>Please refer to the <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ExternalCluster">"API reference for the <code>externalClusters</code> section</a>
+for more information.</p>
+</div>
+<h3 id="password-files">Password files</h3>
+<p>Whenever a password is supplied within an <code>externalClusters</code> entry,
+CloudNativePG autonomously manages a <a href="https://www.postgresql.org/docs/current/libpq-pgpass.html">PostgreSQL password file</a>
+for it, residing at <code>/controller/external/NAME/pgpass</code> in each instance.</p>
+<p>This approach enables CloudNativePG to securely establish connections with an
+external server without exposing any passwords in the connection string.
+Instead, the connection safely references the aforementioned file through the
+<code>passfile</code> connection parameter.</p>
+<h2 id="bootstrap-an-empty-cluster-initdb">Bootstrap an empty cluster (<code>initdb</code>)</h2>
+<p>The <code>initdb</code> bootstrap method is used to create a new PostgreSQL cluster from
+scratch. It is the default one unless specified differently.</p>
+<p>The following example contains the full structure of the <code>initdb</code>
+configuration:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-initdb
+spec:
+  instances: 3
+
+  bootstrap:
+    initdb:
+      database: app
+      owner: app
+      secret:
+        name: app-secret
+
+  storage:
+    size: 1Gi
+</code></pre>
+<p>The above example of bootstrap will:</p>
+<ol>
+<li>create a new <code>PGDATA</code> folder using PostgreSQL's native <code>initdb</code> command</li>
+<li>create an <em>unprivileged</em> user named <code>app</code></li>
+<li>set the password of the latter (<code>app</code>) using the one in the <code>app-secret</code>
+   secret (make sure that <code>username</code> matches the same name of the <code>owner</code>)</li>
+<li>create a database called <code>app</code> owned by the <code>app</code> user.</li>
+</ol>
+<p>Thanks to the <em>convention over configuration paradigm</em>, you can let the
+operator choose a default database name (<code>app</code>) and a default application
+user name (same as the database name), as well as randomly generate a
+secure password for both the superuser and the application user in
+PostgreSQL.</p>
+<p>Alternatively, you can generate your password, store it as a secret,
+and use it in the PostgreSQL cluster - as described in the above example.</p>
+<p>The supplied secret must comply with the specifications of the
+<a href="https://kubernetes.io/docs/concepts/configuration/secret/#basic-authentication-secret"><code>kubernetes.io/basic-auth</code> type</a>.
+As a result, the <code>username</code> in the secret must match the one of the <code>owner</code>
+(for the application secret) and <code>postgres</code> for the superuser one.</p>
+<p>The following is an example of a <code>basic-auth</code> secret:</p>
+<pre><code class="language-yaml">apiVersion: v1
+data:
+  username: YXBw
+  password: cGFzc3dvcmQ=
+kind: Secret
+metadata:
+  name: app-secret
+type: kubernetes.io/basic-auth
+</code></pre>
+<p>The application database is the one that should be used to store application
+data. Applications should connect to the cluster with the user that owns
+the application database.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>If you need to create additional users, please refer to
+<a href="../declarative_role_management/">"Declarative database role management"</a>.</p>
+</div>
+<p>In case you don't supply any database name, the operator will proceed
+by convention and create the <code>app</code> database, and adds it to the cluster
+definition using a <em>defaulting webhook</em>.
+The user that owns the database defaults to the database name instead.</p>
+<p>The application user is not used internally by the operator, which instead
+relies on the superuser to reconcile the cluster with the desired status.</p>
+<h3 id="passing-options-to-initdb">Passing Options to <code>initdb</code></h3>
+<p>The PostgreSQL data directory is initialized using the
+<a href="https://www.postgresql.org/docs/current/app-initdb.html"><code>initdb</code> PostgreSQL command</a>.</p>
+<p>CloudNativePG enables you to customize the behavior of <code>initdb</code> to modify
+settings such as default locale configurations and data checksums.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>CloudNativePG acts only as a direct proxy to <code>initdb</code> for locale-related
+options, due to the ongoing and significant enhancements in PostgreSQL's locale
+support. It is your responsibility to ensure that the correct options are
+provided, following the PostgreSQL documentation, and to verify that the
+bootstrap process completes successfully.</p>
+</div>
+<p>To include custom options in the <code>initdb</code> command, you can use the following
+parameters:</p>
+<dl>
+<dt>builtinLocale</dt>
+<dd>When <code>builtinLocale</code> is set to a value, CloudNativePG passes it to the
+<code>--builtin-locale</code> option in <code>initdb</code>. This option controls the builtin locale, as
+defined in <a href="https://www.postgresql.org/docs/current/locale.html">"Locale Support"</a>
+from the PostgreSQL documentation (default: empty). Note that this option requires
+<code>localeProvider</code> to be set to <code>builtin</code>. Available from PostgreSQL 17.</dd>
+<dt>dataChecksums</dt>
+<dd>When <code>dataChecksums</code> is set to <code>true</code>, CloudNativePG invokes the <code>-k</code> option in
+<code>initdb</code> to enable checksums on data pages and help detect corruption by the
+I/O system - that would otherwise be silent (default: <code>false</code>).</dd>
+<dt>encoding</dt>
+<dd>When <code>encoding</code> set to a value, CloudNativePG passes it to the <code>--encoding</code>
+option in <code>initdb</code>, which selects the encoding of the template database
+(default: <code>UTF8</code>).</dd>
+<dt>icuLocale</dt>
+<dd>When <code>icuLocale</code> is set to a value, CloudNativePG passes it to the
+<code>--icu-locale</code> option in <code>initdb</code>. This option controls the ICU locale, as
+defined in <a href="https://www.postgresql.org/docs/current/locale.html">"Locale Support"</a>
+from the PostgreSQL documentation (default: empty).
+Note that this option requires <code>localeProvider</code> to be set to <code>icu</code>.
+Available from PostgreSQL 15.</dd>
+<dt>icuRules</dt>
+<dd>When <code>icuRules</code> is set to a value, CloudNativePG passes it to the
+<code>--icu-rules</code> option in <code>initdb</code>. This option controls the ICU locale, as
+defined in <a href="https://www.postgresql.org/docs/current/locale.html">"Locale
+Support"</a> from the
+PostgreSQL documentation (default: empty). Note that this option requires
+<code>localeProvider</code> to be set to <code>icu</code>. Available from PostgreSQL 16.</dd>
+<dt>locale</dt>
+<dd>When <code>locale</code> is set to a value, CloudNativePG passes it to the <code>--locale</code>
+option in <code>initdb</code>. This option controls the locale, as defined in
+<a href="https://www.postgresql.org/docs/current/locale.html">"Locale Support"</a> from
+the PostgreSQL documentation. By default, the locale parameter is empty. In
+this case, environment variables such as <code>LANG</code> are used to determine the
+locale. Be aware that these variables can vary between container images,
+potentially leading to inconsistent behavior.</dd>
+<dt>localeCollate</dt>
+<dd>When <code>localeCollate</code> is set to a value, CloudNativePG passes it to the <code>--lc-collate</code>
+option in <code>initdb</code>. This option controls the collation order (<code>LC_COLLATE</code>
+subcategory), as defined in <a href="https://www.postgresql.org/docs/current/locale.html">"Locale Support"</a>
+from the PostgreSQL documentation (default: <code>C</code>).</dd>
+<dt>localeCType</dt>
+<dd>When <code>localeCType</code> is set to a value, CloudNativePG passes it to the <code>--lc-ctype</code> option in
+<code>initdb</code>. This option controls the collation order (<code>LC_CTYPE</code> subcategory), as
+defined in <a href="https://www.postgresql.org/docs/current/locale.html">"Locale Support"</a>
+from the PostgreSQL documentation (default: <code>C</code>).</dd>
+<dt>localeProvider</dt>
+<dd>When <code>localeProvider</code> is set to a value, CloudNativePG passes it to the <code>--locale-provider</code>
+option in <code>initdb</code>. This option controls the locale provider, as defined in
+<a href="https://www.postgresql.org/docs/current/locale.html">"Locale Support"</a> from the
+PostgreSQL documentation (default: empty, which means <code>libc</code> for PostgreSQL).
+Available from PostgreSQL 15.</dd>
+<dt>walSegmentSize</dt>
+<dd>When <code>walSegmentSize</code> is set to a value, CloudNativePG passes it to the <code>--wal-segsize</code>
+option in <code>initdb</code> (default: not set - defined by PostgreSQL as 16 megabytes).</dd>
+</dl>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The only two locale options that CloudNativePG implements during
+the <code>initdb</code> bootstrap refer to the <code>LC_COLLATE</code> and <code>LC_TYPE</code> subcategories.
+The remaining locale subcategories can be configured directly in the PostgreSQL
+configuration, using the <code>lc_messages</code>, <code>lc_monetary</code>, <code>lc_numeric</code>, and
+<code>lc_time</code> parameters.</p>
+</div>
+<p>The following example enables data checksums and sets the default encoding to
+<code>LATIN1</code>:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-initdb
+spec:
+  instances: 3
+
+  bootstrap:
+    initdb:
+      database: app
+      owner: app
+      dataChecksums: true
+      encoding: 'LATIN1'
+  storage:
+    size: 1Gi
+</code></pre>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>CloudNativePG supports another way to customize the behavior of the
+<code>initdb</code> invocation, using the <code>options</code> subsection. However, given that there
+are options that can break the behavior of the operator (such as <code>--auth</code> or
+<code>-d</code>), this technique is deprecated and will be removed from future versions of
+the API.</p>
+</div>
+<h3 id="executing-queries-after-initialization">Executing Queries After Initialization</h3>
+<p>You can specify a custom list of queries that will be executed once,
+immediately after the cluster is created and configured. These queries will be
+executed as the <em>superuser</em> (<code>postgres</code>) against three different databases, in
+this specific order:</p>
+<ol>
+<li>The <code>postgres</code> database (<code>postInit</code> section)</li>
+<li>The <code>template1</code> database (<code>postInitTemplate</code> section)</li>
+<li>The application database (<code>postInitApplication</code> section)</li>
+</ol>
+<p>For each of these sections, CloudNativePG provides two ways to specify custom
+queries, executed in the following order:</p>
+<ul>
+<li>As a list of SQL queries in the cluster's definition (<code>postInitSQL</code>,
+  <code>postInitTemplateSQL</code>, and <code>postInitApplicationSQL</code> stanzas)</li>
+<li>As a list of Secrets and/or ConfigMaps, each containing a SQL script to be
+  executed (<code>postInitSQLRefs</code>, <code>postInitTemplateSQLRefs</code>, and
+  <code>postInitApplicationSQLRefs</code> stanzas). Secrets are processed before ConfigMaps.</li>
+</ul>
+<p>Objects in each list will be processed sequentially.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Use the <code>postInit</code>, <code>postInitTemplate</code>, and <code>postInitApplication</code> options
+with extreme care, as queries are run as a superuser and can disrupt the entire
+cluster. An error in any of those queries will interrupt the bootstrap phase,
+leaving the cluster incomplete and requiring manual intervention.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Ensure the existence of entries inside the ConfigMaps or Secrets specified
+in <code>postInitSQLRefs</code>, <code>postInitTemplateSQLRefs</code>, and
+<code>postInitApplicationSQLRefs</code>, otherwise the bootstrap will fail. Errors in any
+of those SQL files will prevent the bootstrap phase from completing
+successfully.</p>
+</div>
+<p>The following example runs a single SQL query as part of the <code>postInitSQL</code>
+stanza:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-initdb
+spec:
+  instances: 3
+
+  bootstrap:
+    initdb:
+      database: app
+      owner: app
+      dataChecksums: true
+      localeCollate: 'en_US'
+      localeCType: 'en_US'
+      postInitSQL:
+        - CREATE DATABASE angus
+  storage:
+    size: 1Gi
+</code></pre>
+<p>The example below relies on <code>postInitApplicationSQLRefs</code> to specify a secret
+and a ConfigMap containing the queries to run after the initialization on the
+application database:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-initdb
+spec:
+  instances: 3
+
+  bootstrap:
+    initdb:
+      database: app
+      owner: app
+      postInitApplicationSQLRefs:
+        secretRefs:
+        - name: my-secret
+          key: secret.sql
+        configMapRefs:
+        - name: my-configmap
+          key: configmap.sql
+  storage:
+    size: 1Gi
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Within SQL scripts, each SQL statement is executed in a single exec on the
+server according to the <a href="https://www.postgresql.org/docs/current/protocol-flow.html#PROTOCOL-FLOW-MULTI-STATEMENT">PostgreSQL semantics</a>.
+Comments can be included, but internal commands like <code>psql</code> cannot.</p>
+</div>
+<h2 id="bootstrap-from-another-cluster">Bootstrap from another cluster</h2>
+<p>CloudNativePG enables bootstrapping a cluster starting from
+another one of the same major version.
+This operation can be carried out either connecting directly to the source cluster via
+streaming replication (<code>pg_basebackup</code>), or indirectly via an existing
+physical <em>base backup</em> (<code>recovery</code>).</p>
+<p>The source cluster must be defined in the <code>externalClusters</code> section, identified
+by <code>name</code> (our recommendation is to use the same <code>name</code> of the origin cluster).</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>By default the <code>recovery</code> method strictly uses the <code>name</code> of the
+cluster in the <code>externalClusters</code> section to locate the main folder
+of the backup data within the object store, which is normally reserved
+for the name of the server. Backup plugins provide ways to specify a
+different one. For example, the Barman Cloud Plugin provides the <a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/parameters/"><code>serverName</code> parameter</a>
+(by default assigned to the value of <code>name</code> in the external cluster definition).</p>
+</div>
+<h3 id="bootstrap-from-a-backup-recovery">Bootstrap from a backup (<code>recovery</code>)</h3>
+<p>Given the variety of backup methods and combinations of backup storage
+options provided by the CloudNativePG operator for <code>recovery</code>, please refer
+to the dedicated <a href="../recovery/">"Recovery" section</a> for detailed guidance on
+each method.</p>
+<h3 id="bootstrap-from-a-live-cluster-pg_basebackup">Bootstrap from a live cluster (<code>pg_basebackup</code>)</h3>
+<p>The <code>pg_basebackup</code> bootstrap mode allows you to create a new cluster
+(<em>target</em>) as an exact physical copy of an existing and <strong>binary-compatible</strong>
+PostgreSQL instance (<em>source</em>) managed by CloudNativePG, using a valid
+<em>streaming replication</em> connection. The source instance can either be a primary
+or a standby PostgreSQL server. It’s crucial to thoroughly review the
+requirements section below, as the pros and cons of PostgreSQL physical
+replication fully apply.</p>
+<p>The primary use cases for this method include:</p>
+<ul>
+<li>Reporting and business intelligence clusters that need to be regenerated
+  periodically (daily, weekly)</li>
+<li>Test databases containing live data that require periodic regeneration
+  (daily, weekly, monthly) and anonymization</li>
+<li>Rapid spin-up of a standalone replica cluster</li>
+<li>Physical migrations of CloudNativePG clusters to different namespaces or
+  Kubernetes clusters</li>
+</ul>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Avoid using this method, based on physical replication, to migrate an
+existing PostgreSQL cluster outside of Kubernetes into CloudNativePG, unless you
+are completely certain that all <a href="#requirements">requirements</a> are met and
+the operation has been
+thoroughly tested. The CloudNativePG community does not endorse this approach
+for such use cases, and recommends using logical import instead. It is
+exceedingly rare that all requirements for physical replication are met in a
+way that seamlessly works with CloudNativePG.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>In its current implementation, this method clones the source PostgreSQL
+instance, thereby creating a <em>snapshot</em>. Once the cloning process has finished,
+the new cluster is immediately started.
+Refer to <a href="#current-limitations">"Current limitations"</a> for more details.</p>
+</div>
+<p>Similar to the <code>recovery</code> bootstrap method, once the cloning operation is
+complete, the operator takes full ownership of the target cluster, starting
+from the first instance. This includes overriding certain configuration
+parameters as required by CloudNativePG, resetting the superuser password,
+creating the <code>streaming_replica</code> user, managing replicas, and more. The
+resulting cluster operates independently from the source instance.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Configuring the network connection between the target and source instances
+lies outside the scope of CloudNativePG documentation, as it depends heavily on
+the specific context and environment.</p>
+</div>
+<p>The streaming replication client on the target instance, managed transparently
+by <code>pg_basebackup</code>, can authenticate on the source instance using one of the
+following methods:</p>
+<ol>
+<li><a href="#usernamepassword-authentication">Username/password</a></li>
+<li><a href="#tls-certificate-authentication">TLS client certificate</a></li>
+</ol>
+<p>Both authentication methods are detailed below.</p>
+<h4 id="requirements">Requirements</h4>
+<p>The following requirements apply to the <code>pg_basebackup</code> bootstrap method:</p>
+<ul>
+<li>target and source must have the same hardware architecture</li>
+<li>target and source must have the same major PostgreSQL version</li>
+<li>target and source must have the same tablespaces</li>
+<li>source must be configured with enough <code>max_wal_senders</code> to grant
+  access from the target for this one-off operation by providing at least
+  one <em>walsender</em> for the backup plus one for WAL streaming</li>
+<li>the network between source and target must be configured to enable the target
+  instance to connect to the PostgreSQL port on the source instance</li>
+<li>source must have a role with <code>REPLICATION LOGIN</code> privileges and must accept
+  connections from the target instance for this role in <code>pg_hba.conf</code>, preferably
+  via TLS (see <a href="#about-the-replication-user">"About the replication user"</a> below)</li>
+<li>target must be able to successfully connect to the source PostgreSQL instance
+  using a role with <code>REPLICATION LOGIN</code> privileges</li>
+</ul>
+<div class="admonition seealso">
+<p class="admonition-title">Seealso</p>
+<p>For further information, please refer to the
+<a href="https://www.postgresql.org/docs/current/warm-standby.html#STANDBY-PLANNING">"Planning" section for Warm Standby</a>,
+the
+<a href="https://www.postgresql.org/docs/current/app-pgbasebackup.html"><code>pg_basebackup</code> page</a>
+and the
+<a href="https://www.postgresql.org/docs/current/high-availability.html">"High Availability, Load Balancing, and Replication" chapter</a>
+in the PostgreSQL documentation.</p>
+</div>
+<h4 id="about-the-replication-user">About the replication user</h4>
+<p>As explained in the requirements section, you need to have a user
+with either the <code>SUPERUSER</code> or, preferably, just the <code>REPLICATION</code>
+privilege in the source instance.</p>
+<p>If the source database is created with CloudNativePG, you
+can reuse the <code>streaming_replica</code> user and take advantage of client
+TLS certificates authentication (which, by default, is the only allowed
+connection method for <code>streaming_replica</code>).</p>
+<p>For all other cases, including outside Kubernetes, please verify that
+you already have a user with the <code>REPLICATION</code> privilege, or create
+a new one by following the instructions below.</p>
+<p>As <code>postgres</code> user on the source system, please run:</p>
+<pre><code class="language-console">createuser -P --replication streaming_replica
+</code></pre>
+<p>Enter the password at the prompt and save it for later, as you
+will need to add it to a secret in the target instance.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Although the name is not important, we will use <code>streaming_replica</code>
+for the sake of simplicity. Feel free to change it as you like,
+provided you adapt the instructions in the following sections.</p>
+</div>
+<h4 id="usernamepassword-authentication">Username/Password authentication</h4>
+<p>The first authentication method supported by CloudNativePG
+with the <code>pg_basebackup</code> bootstrap is based on username and password matching.</p>
+<p>Make sure you have the following information before you start the procedure:</p>
+<ul>
+<li>location of the source instance, identified by a hostname or an IP address
+  and a TCP port</li>
+<li>replication username (<code>streaming_replica</code> for simplicity)</li>
+<li>password</li>
+</ul>
+<p>You might need to add a line similar to the following to the <code>pg_hba.conf</code>
+file on the source PostgreSQL instance:</p>
+<pre><code># A more restrictive rule for TLS and IP of origin is recommended
+host replication streaming_replica all md5
+</code></pre>
+<p>The following manifest creates a new PostgreSQL 17.5 cluster,
+called <code>target-db</code>, using the <code>pg_basebackup</code> bootstrap method
+to clone an external PostgreSQL cluster defined as <code>source-db</code>
+(in the <code>externalClusters</code> array). As you can see, the <code>source-db</code>
+definition points to the <code>source-db.foo.com</code> host and connects as
+the <code>streaming_replica</code> user, whose password is stored in the
+<code>password</code> key of the <code>source-db-replica-user</code> secret.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: target-db
+spec:
+  instances: 3
+  imageName: ghcr.io/cloudnative-pg/postgresql:17.5
+
+  bootstrap:
+    pg_basebackup:
+      source: source-db
+
+  storage:
+    size: 1Gi
+
+  externalClusters:
+  - name: source-db
+    connectionParameters:
+      host: source-db.foo.com
+      user: streaming_replica
+    password:
+      name: source-db-replica-user
+      key: password
+</code></pre>
+<p>All the requirements must be met for the clone operation to work, including
+the same PostgreSQL version (in our case 17.5).</p>
+<h4 id="tls-certificate-authentication">TLS certificate authentication</h4>
+<p>The second authentication method supported by CloudNativePG
+with the <code>pg_basebackup</code> bootstrap is based on TLS client certificates.
+This is the recommended approach from a security standpoint.</p>
+<p>The following example clones an existing PostgreSQL cluster (<code>cluster-example</code>)
+in the same Kubernetes cluster.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>This example can be easily adapted to cover an instance that resides
+outside the Kubernetes cluster.</p>
+</div>
+<p>The manifest defines a new PostgreSQL 17.5 cluster called <code>cluster-clone-tls</code>,
+which is bootstrapped using the <code>pg_basebackup</code> method from the <code>cluster-example</code>
+external cluster. The host is identified by the read/write service
+in the same cluster, while the <code>streaming_replica</code> user is authenticated
+thanks to the provided keys, certificate, and certification authority
+information (respectively in the <code>cluster-example-replication</code> and
+<code>cluster-example-ca</code> secrets).</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-clone-tls
+spec:
+  instances: 3
+  imageName: ghcr.io/cloudnative-pg/postgresql:17.5
+
+  bootstrap:
+    pg_basebackup:
+      source: cluster-example
+
+  storage:
+    size: 1Gi
+
+  externalClusters:
+  - name: cluster-example
+    connectionParameters:
+      host: cluster-example-rw.default.svc
+      user: streaming_replica
+      sslmode: verify-full
+    sslKey:
+      name: cluster-example-replication
+      key: tls.key
+    sslCert:
+      name: cluster-example-replication
+      key: tls.crt
+    sslRootCert:
+      name: cluster-example-ca
+      key: ca.crt
+</code></pre>
+<h4 id="configure-the-application-database">Configure the application database</h4>
+<p>We also support to configure the application database for cluster which bootstrap
+from a live cluster, just like the case of <code>initdb</code> and  <code>recovery</code> bootstrap method.
+If the new cluster is created as a replica cluster (with replica mode enabled), application
+database configuration will be skipped.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>While the <code>Cluster</code> is in recovery mode, no changes to the database,
+including the catalog, are permitted. This restriction includes any role
+overrides, which are deferred until the <code>Cluster</code> transitions to primary.
+During the recovery phase, roles remain as defined in the source cluster.</p>
+</div>
+<p>The example below configures the <code>app</code> database with the owner <code>app</code> and
+the password stored in the provided secret <code>app-secret</code>, following the
+bootstrap from a live cluster.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  bootstrap:
+    pg_basebackup:
+      database: app
+      owner: app
+      secret:
+        name: app-secret
+      source: cluster-example
+</code></pre>
+<p>With the above configuration, the following will happen only <strong>after recovery is
+completed</strong>:</p>
+<ol>
+<li>If the <code>app</code> database does not exist, it will be created.</li>
+<li>If the <code>app</code> user does not exist, it will be created.</li>
+<li>If the <code>app</code> user is not the owner of the <code>app</code> database, ownership will be
+   granted to the <code>app</code> user.</li>
+<li>If the <code>username</code> value matches the <code>owner</code> value in the secret, the
+   password for the application user (the <code>app</code> user in this case) will be
+   updated to the <code>password</code> value in the secret.</li>
+</ol>
+<h4 id="current-limitations">Current limitations</h4>
+<h5 id="snapshot-copy">Snapshot copy</h5>
+<p>The <code>pg_basebackup</code> method takes a snapshot of the source instance in the form of
+a PostgreSQL base backup. All transactions written from the start of
+the backup to the correct termination of the backup will be streamed to the target
+instance using a second connection (see the <code>--wal-method=stream</code> option for
+<code>pg_basebackup</code>).</p>
+<p>Once the backup is completed, the new instance will be started on a new timeline
+and diverge from the source.
+For this reason, it is advised to stop all write operations to the source database
+before migrating to the target database.</p>
+<p>Note that this limitation applies only if the target cluster is not defined as
+a replica cluster.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Before you attempt a migration, you must test both the procedure
+and the applications. In particular, it is fundamental that you run the migration
+procedure as many times as needed to systematically measure the downtime of your
+applications in production.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../image_catalog/" class="btn btn-neutral float-left" title="Image Catalog"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../database_import/" class="btn btn-neutral float-right" title="Importing Postgres databases">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../image_catalog/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../database_import/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/certificates/index.html b/assets/documentation/1.27.0-rc1/certificates/index.html
new file mode 100644
index 000000000..cfee58d39
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/certificates/index.html
@@ -0,0 +1,713 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Certificates - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Certificates";
+        var mkdocs_page_input_path = "certificates.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Certificates</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#operator-managed-mode">Operator-Managed Mode</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#server-certificates">Server certificates</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#server-ca-secret">Server CA secret</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#server-tls-secret">Server TLS secret</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#server-alternative-dns-names">Server alternative DNS names</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#client-certificates">Client certificates</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#client-ca-secret">Client CA secret</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#client-streaming_replica-certificate">Client streaming_replica certificate</a>
+    </li>
+        </ul>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#user-provided-certificates-mode">User-provided certificates mode</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#server-certificates_1">Server certificates</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#example">Example</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#cert-manager-example">Cert-manager example</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#client-certificate">Client certificate</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#customizing-the-streaming_replica-client-certificate">Customizing the streaming_replica client certificate</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#cert-manager-example_1">Cert-manager example</a>
+    </li>
+        </ul>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Certificates</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="certificates">Certificates</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG was designed to natively support TLS certificates.
+To set up a cluster, the operator requires:</p>
+<ul>
+<li>A server certification authority (CA) certificate</li>
+<li>A server TLS certificate signed by the server CA</li>
+<li>A client CA certificate</li>
+<li>A streaming replication client certificate generated by the client CA</li>
+</ul>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>You can find all the secrets used by the cluster and their expiration dates
+in the cluster's status.</p>
+</div>
+<p>CloudNativePG is very flexible when it comes to TLS certificates. It
+primarily operates in two modes:</p>
+<ol>
+<li><a href="#operator-managed-mode"><strong>Operator managed</strong></a> – Certificates are internally
+   managed by the operator in a fully automated way and signed using a CA created
+   by CloudNativePG.</li>
+<li><a href="#user-provided-certificates-mode"><strong>User provided</strong></a> – Certificates are
+   generated outside the operator and imported in the cluster definition as
+   secrets. CloudNativePG integrates itself with <a href="https://cert-manager.io/">cert-manager</a>
+   (See <a href="#cert-manager-example">Cert-manager example</a>.)</li>
+</ol>
+<p>You can also choose a hybrid approach, where only part of the certificates is
+generated outside CNPG.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The operator and instances verify server certificates against the CA only,
+disregarding the DNS name. This approach is due to the typical absence of DNS
+names in user-provided certificates for the <code>&lt;cluster&gt;-rw</code> service used for
+communication within the cluster.</p>
+</div>
+<h2 id="operator-managed-mode">Operator-Managed Mode</h2>
+<p>By default, the operator automatically generates a single Certificate Authority
+(CA) to issue both client and server certificates. These certificates are
+managed continuously by the operator, with automatic renewal 7 days before
+expiration (within a 90-day validity period).</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>You can adjust this default behavior by configuring the
+<code>CERTIFICATE_DURATION</code> and <code>EXPIRING_CHECK_THRESHOLD</code> environment variables.
+For detailed guidance, refer to the <a href="../operator_conf/">Operator Configuration</a>.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Certificate renewal does not cause any downtime for the PostgreSQL server,
+as a simple reload operation is sufficient. However, any user-managed
+certificates not controlled by CloudNativePG must be re-issued following the
+renewal process.</p>
+</div>
+<p>When generating certificates, the operator assumes that the Kubernetes
+cluster's DNS zone is set to <code>cluster.local</code> by default. This behavior can be
+customized by setting the <code>KUBERNETES_CLUSTER_DOMAIN</code> environment variable. A
+convenient alternative is to use the <a href="../operator_conf/">operator's configuration capability</a>.</p>
+<h3 id="server-certificates">Server certificates</h3>
+<h4 id="server-ca-secret">Server CA secret</h4>
+<p>The operator generates a self-signed CA and stores it in a generic secret
+containing the following keys:</p>
+<ul>
+<li><code>ca.crt</code> – CA certificate used to validate the server certificate, used as
+  <code>sslrootcert</code> in clients' connection strings.</li>
+<li><code>ca.key</code> – The key used to sign the server SSL certificate automatically.</li>
+</ul>
+<h4 id="server-tls-secret">Server TLS secret</h4>
+<p>The operator uses the generated self-signed CA to sign a server TLS
+certificate. It's stored in a secret of type <code>kubernetes.io/tls</code> and configured
+to be used as <code>ssl_cert_file</code> and <code>ssl_key_file</code> by the instances. This
+approach enables clients to verify their identity and connect securely.</p>
+<h4 id="server-alternative-dns-names">Server alternative DNS names</h4>
+<p>In addition to the default ones, you can specify DNS server alternative names
+as part of the generated server TLS secret.</p>
+<h3 id="client-certificates">Client certificates</h3>
+<h4 id="client-ca-secret">Client CA secret</h4>
+<p>By default, the same self-signed CA as the server CA is used. The public part
+is passed as <code>ssl_ca_file</code> to all the instances so it can verify client
+certificates it signed. The private key is stored in the same secret and used
+to sign client certificates generated by the <code>kubectl cnpg</code> plugin.</p>
+<h4 id="client-streaming_replica-certificate">Client <code>streaming_replica</code> certificate</h4>
+<p>The operator uses the generated self-signed CA to sign a client certificate for
+the user <code>streaming_replica</code>, storing it in a secret of type
+<code>kubernetes.io/tls</code>.  To allow secure connection to the primary instance, this
+certificate is passed as <code>sslcert</code> and <code>sslkey</code> in the replicas' connection
+strings.</p>
+<h2 id="user-provided-certificates-mode">User-provided certificates mode</h2>
+<h3 id="server-certificates_1">Server certificates</h3>
+<p>If required, you can also provide the two server certificates, generating them
+using a separate component such as <a href="https://cert-manager.io/">cert-manager</a>.
+To use a custom server TLS certificate for a cluster, you must specify
+the following parameters:</p>
+<ul>
+<li><code>serverTLSSecret</code> – The name of a secret of type <code>kubernetes.io/tls</code>
+  containing the server TLS certificate. It must contain both the standard
+  <code>tls.crt</code> and <code>tls.key</code> keys.</li>
+<li><code>serverCASecret</code> – The name of a secret containing the <code>ca.crt</code> key.</li>
+</ul>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The operator still creates and manages the two secrets related to client
+certificates.</p>
+</div>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The operator and instances verify server certificates against the CA only,
+disregarding the DNS name. This approach is due to the typical absence of DNS
+names in user-provided certificates for the <code>&lt;cluster&gt;-rw</code> service used for
+communication within the cluster.</p>
+</div>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>If you want ConfigMaps and secrets to be reloaded by instances, you can add
+a label with the key <code>cnpg.io/reload</code> to it. Otherwise you must reload the
+instances using the <code>kubectl cnpg reload</code> subcommand.</p>
+</div>
+<h4 id="example">Example</h4>
+<p>Given the following files:</p>
+<ul>
+<li><code>server-ca.crt</code> – The certificate of the CA that signed the server TLS certificate.</li>
+<li><code>server.crt</code>– The certificate of the server TLS certificate.</li>
+<li><code>server.key</code> – The private key of the server TLS certificate.</li>
+</ul>
+<p>Create a secret containing the CA certificate:</p>
+<pre><code class="language-sh">kubectl create secret generic my-postgresql-server-ca \
+  --from-file=ca.crt=./server-ca.crt
+</code></pre>
+<p>Create a secret with the TLS certificate:</p>
+<pre><code class="language-sh">kubectl create secret tls my-postgresql-server \
+  --cert=./server.crt --key=./server.key
+</code></pre>
+<p>Create a PostgreSQL cluster referencing those secrets:</p>
+<pre><code class="language-bash">kubectl apply -f - &lt;&lt;EOF
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  certificates:
+    serverCASecret: my-postgresql-server-ca
+    serverTLSSecret: my-postgresql-server
+  storage:
+    storageClass: standard
+    size: 1Gi
+EOF
+</code></pre>
+<p>The new cluster uses the provided server certificates for TLS connections.</p>
+<h4 id="cert-manager-example">Cert-manager example</h4>
+<p>This simple example shows how to use <a href="https://cert-manager.io/">cert-manager</a>
+to set up a self-signed CA and generate the needed TLS server certificate:</p>
+<pre><code class="language-yaml">---
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: selfsigned-issuer
+spec:
+  selfSigned: {}
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: my-postgres-server-cert
+  labels:
+    cnpg.io/reload: &quot;&quot;
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: my-postgres-server-cert
+spec:
+  secretName: my-postgres-server-cert
+  usages:
+    - server auth
+  dnsNames:
+    - cluster-example-lb.internal.mydomain.net
+    - cluster-example-rw
+    - cluster-example-rw.default
+    - cluster-example-rw.default.svc
+    - cluster-example-r
+    - cluster-example-r.default
+    - cluster-example-r.default.svc
+    - cluster-example-ro
+    - cluster-example-ro.default
+    - cluster-example-ro.default.svc
+  issuerRef:
+    name: selfsigned-issuer
+    kind: Issuer
+    group: cert-manager.io
+</code></pre>
+<p>Cert-manager creates a secret named <code>my-postgres-server-cert</code>. It contains all
+the needed files and can be referenced from a cluster as follows:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  certificates:
+    serverTLSSecret: my-postgres-server-cert
+    serverCASecret: my-postgres-server-cert
+  storage:
+    size: 1Gi
+</code></pre>
+<p>You can find a complete example using cert-manager to manage both server and
+client CA and certificates in the
+<a href="../samples/cluster-example-cert-manager.yaml">cluster-example-cert-manager.yaml</a>
+deployment manifest.</p>
+<h3 id="client-certificate">Client certificate</h3>
+<p>If required, you can also provide the two client certificates, generating them
+using a separate component such as <a href="https://cert-manager.io/">cert-manager</a> or
+<a href="https://www.vaultproject.io/docs/secrets/pki">HashiCorp vault</a>. To
+use a custom CA to verify client certificates for a cluster, you must specify
+the following parameters:</p>
+<ul>
+<li><code>replicationTLSSecret</code> – The name of a secret of type <code>kubernetes.io/tls</code>
+  containing the client certificate for user <code>streaming_replica</code>. It must contain
+  both the standard <code>tls.crt</code> and <code>tls.key</code> keys.</li>
+<li><code>clientCASecret</code>– The name of a secret containing the <code>ca.crt</code> key of the CA
+  to use to verify client certificate.</li>
+</ul>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The operator still creates and manages the two secrets related to server
+certificates.</p>
+</div>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>As the cluster isn't in control of the client CA secret key, you can no
+longer generate client certificates using <code>kubectl cnpg certificate</code>.</p>
+</div>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>If you want ConfigMaps and secrets to be automatically reloaded by
+instances, you can add a label with the key <code>cnpg.io/reload</code> to it. Otherwise,
+you must reload the instances using the <code>kubectl cnpg reload</code> subcommand.</p>
+</div>
+<h4 id="customizing-the-streaming_replica-client-certificate">Customizing the <code>streaming_replica</code> client certificate</h4>
+<p>In some environments, it may not be possible to generate a certificate with the
+common name <code>streaming_replica</code> due to company policies or other security
+concerns, such as a CA shared across multiple clusters. In such cases, the user
+mapping feature can be used to allow authentication as the <code>streaming_replica</code>
+user with certificates containing different common names.</p>
+<p>To configure this setup, add a <code>pg_ident.conf</code> entry for the predefined map
+named <code>cnpg_streaming_replica</code>.</p>
+<p>For example, to enable <code>streaming_replica</code> authentication using a certificate
+with the common name <code>streaming-replica.cnpg.svc.cluster.local</code>, add the
+following to your cluster definition:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  postgresql:
+    pg_ident:
+    - cnpg_streaming_replica streaming-replica.cnpg.svc.cluster.local streaming_replica
+</code></pre>
+<p>For further details on how <code>pg_ident.conf</code> is managed by the operator, see the
+<a href="../postgresql_conf/#the-pg_ident-section">"PostgreSQL Configuration" page</a> in
+the documentation.</p>
+<h4 id="cert-manager-example_1">Cert-manager example</h4>
+<p>This simple example shows how to use <a href="https://cert-manager.io/">cert-manager</a>
+to set up a self-signed CA and generate the needed TLS server certificate:</p>
+<pre><code class="language-yaml">---
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: selfsigned-issuer
+spec:
+  selfSigned: {}
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: my-postgres-client-cert
+  labels:
+    cnpg.io/reload: &quot;&quot;
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: my-postgres-client-cert
+spec:
+  secretName: my-postgres-client-cert
+  usages:
+    - client auth
+  commonName: streaming_replica
+  issuerRef:
+    name: selfsigned-issuer
+    kind: Issuer
+    group: cert-manager.io
+</code></pre>
+<p>Cert-manager creates a secret named <code>my-postgres-client-cert</code> that contains all
+the needed files. You can reference it from a cluster as follows:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  certificates:
+    clientCASecret: my-postgres-client-cert
+    replicationTLSSecret: my-postgres-client-cert
+  storage:
+    size: 1Gi
+</code></pre>
+<p>You can find a complete example using cert-manager to manage both server and
+client CA and certificates in the
+<a href="../samples/cluster-example-cert-manager.yaml">cluster-example-cert-manager.yaml</a>
+deployment manifest.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../logging/" class="btn btn-neutral float-left" title="Logging"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../ssl_connections/" class="btn btn-neutral float-right" title="Client TLS/SSL connections">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../logging/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../ssl_connections/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/cloudnative-pg.v1/index.html b/assets/documentation/1.27.0-rc1/cloudnative-pg.v1/index.html
new file mode 100644
index 000000000..c602e0ede
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/cloudnative-pg.v1/index.html
@@ -0,0 +1,6589 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>API Reference - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "API Reference";
+        var mkdocs_page_input_path = "cloudnative-pg.v1.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">API Reference</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#resource-types">Resource Types</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-Backup">Backup</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-Cluster">Cluster</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ClusterImageCatalog">ClusterImageCatalog</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-Database">Database</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-FailoverQuorum">FailoverQuorum</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ImageCatalog">ImageCatalog</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-Pooler">Pooler</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-Publication">Publication</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ScheduledBackup">ScheduledBackup</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-Subscription">Subscription</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-AffinityConfiguration">AffinityConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-AvailableArchitecture">AvailableArchitecture</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BackupConfiguration">BackupConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BackupMethod">BackupMethod</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BackupPhase">BackupPhase</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BackupPluginConfiguration">BackupPluginConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BackupSnapshotElementStatus">BackupSnapshotElementStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BackupSnapshotStatus">BackupSnapshotStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BackupSource">BackupSource</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BackupSpec">BackupSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BackupStatus">BackupStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BackupTarget">BackupTarget</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BootstrapConfiguration">BootstrapConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BootstrapInitDB">BootstrapInitDB</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BootstrapPgBaseBackup">BootstrapPgBaseBackup</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-BootstrapRecovery">BootstrapRecovery</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-CatalogImage">CatalogImage</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-CertificatesConfiguration">CertificatesConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-CertificatesStatus">CertificatesStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ClusterMonitoringTLSConfiguration">ClusterMonitoringTLSConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ConfigMapResourceVersion">ConfigMapResourceVersion</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-DataDurabilityLevel">DataDurabilityLevel</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-DataSource">DataSource</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-DatabaseObjectSpec">DatabaseObjectSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-DatabaseObjectStatus">DatabaseObjectStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-DatabaseReclaimPolicy">DatabaseReclaimPolicy</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-DatabaseRoleRef">DatabaseRoleRef</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-DatabaseSpec">DatabaseSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-DatabaseStatus">DatabaseStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-EmbeddedObjectMetadata">EmbeddedObjectMetadata</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-EnsureOption">EnsureOption</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-EphemeralVolumesSizeLimitConfiguration">EphemeralVolumesSizeLimitConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ExtensionConfiguration">ExtensionConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ExtensionSpec">ExtensionSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ExternalCluster">ExternalCluster</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-FailoverQuorumStatus">FailoverQuorumStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ImageCatalogRef">ImageCatalogRef</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ImageCatalogSpec">ImageCatalogSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ImageInfo">ImageInfo</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-Import">Import</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ImportSource">ImportSource</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-InstanceID">InstanceID</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-InstanceReportedState">InstanceReportedState</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-IsolationCheckConfiguration">IsolationCheckConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-LDAPBindAsAuth">LDAPBindAsAuth</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-LDAPBindSearchAuth">LDAPBindSearchAuth</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-LDAPConfig">LDAPConfig</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-LDAPScheme">LDAPScheme</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-LivenessProbe">LivenessProbe</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ManagedConfiguration">ManagedConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ManagedRoles">ManagedRoles</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ManagedService">ManagedService</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ManagedServices">ManagedServices</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-Metadata">Metadata</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-MonitoringConfiguration">MonitoringConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-NodeMaintenanceWindow">NodeMaintenanceWindow</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-OnlineConfiguration">OnlineConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PasswordState">PasswordState</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PgBouncerIntegrationStatus">PgBouncerIntegrationStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PgBouncerPoolMode">PgBouncerPoolMode</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PgBouncerSecrets">PgBouncerSecrets</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PgBouncerSpec">PgBouncerSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PluginConfiguration">PluginConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PluginStatus">PluginStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PodTemplateSpec">PodTemplateSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PodTopologyLabels">PodTopologyLabels</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PoolerIntegrations">PoolerIntegrations</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PoolerMonitoringConfiguration">PoolerMonitoringConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PoolerSecrets">PoolerSecrets</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PoolerSpec">PoolerSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PoolerStatus">PoolerStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PoolerType">PoolerType</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PostgresConfiguration">PostgresConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PrimaryUpdateMethod">PrimaryUpdateMethod</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PrimaryUpdateStrategy">PrimaryUpdateStrategy</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-Probe">Probe</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ProbeStrategyType">ProbeStrategyType</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ProbeWithStrategy">ProbeWithStrategy</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ProbesConfiguration">ProbesConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PublicationReclaimPolicy">PublicationReclaimPolicy</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PublicationSpec">PublicationSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PublicationStatus">PublicationStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PublicationTarget">PublicationTarget</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PublicationTargetObject">PublicationTargetObject</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-PublicationTargetTable">PublicationTargetTable</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-RecoveryTarget">RecoveryTarget</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ReplicaClusterConfiguration">ReplicaClusterConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ReplicationSlotsConfiguration">ReplicationSlotsConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ReplicationSlotsHAConfiguration">ReplicationSlotsHAConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-RoleConfiguration">RoleConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SQLRefs">SQLRefs</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ScheduledBackupSpec">ScheduledBackupSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ScheduledBackupStatus">ScheduledBackupStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SchemaSpec">SchemaSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SecretVersion">SecretVersion</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SecretsResourceVersion">SecretsResourceVersion</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ServiceAccountTemplate">ServiceAccountTemplate</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ServiceSelectorType">ServiceSelectorType</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ServiceTemplateSpec">ServiceTemplateSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ServiceUpdateStrategy">ServiceUpdateStrategy</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SnapshotOwnerReference">SnapshotOwnerReference</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SnapshotType">SnapshotType</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-StorageConfiguration">StorageConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SubscriptionReclaimPolicy">SubscriptionReclaimPolicy</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SubscriptionSpec">SubscriptionSpec</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SubscriptionStatus">SubscriptionStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SwitchReplicaClusterStatus">SwitchReplicaClusterStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SyncReplicaElectionConstraints">SyncReplicaElectionConstraints</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SynchronizeReplicasConfiguration">SynchronizeReplicasConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SynchronousReplicaConfiguration">SynchronousReplicaConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-SynchronousReplicaConfigurationMethod">SynchronousReplicaConfigurationMethod</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-TablespaceConfiguration">TablespaceConfiguration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-TablespaceState">TablespaceState</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-TablespaceStatus">TablespaceStatus</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-Topology">Topology</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-VolumeSnapshotConfiguration">VolumeSnapshotConfiguration</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">API Reference</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="api-reference">API Reference</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>Package v1 contains API Schema definitions for the postgresql v1 API group</p>
+
+<h2 id="resource-types">Resource Types</h2>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Backup">Backup</a></li>
+<li><a href="#postgresql-cnpg-io-v1-Cluster">Cluster</a></li>
+<li><a href="#postgresql-cnpg-io-v1-ClusterImageCatalog">ClusterImageCatalog</a></li>
+<li><a href="#postgresql-cnpg-io-v1-Database">Database</a></li>
+<li><a href="#postgresql-cnpg-io-v1-FailoverQuorum">FailoverQuorum</a></li>
+<li><a href="#postgresql-cnpg-io-v1-ImageCatalog">ImageCatalog</a></li>
+<li><a href="#postgresql-cnpg-io-v1-Pooler">Pooler</a></li>
+<li><a href="#postgresql-cnpg-io-v1-Publication">Publication</a></li>
+<li><a href="#postgresql-cnpg-io-v1-ScheduledBackup">ScheduledBackup</a></li>
+<li><a href="#postgresql-cnpg-io-v1-Subscription">Subscription</a></li>
+</ul>
+<h2 id="postgresql-cnpg-io-v1-Backup">Backup</h2>
+<p>A Backup resource is a request for a PostgreSQL backup by the user.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>apiVersion</code> <B>[Required]</B><br/>string</td><td><code>postgresql.cnpg.io/v1</code></td></tr>
+<tr><td><code>kind</code> <B>[Required]</B><br/>string</td><td><code>Backup</code></td></tr>
+<tr><td><code>metadata</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#objectmeta-v1-meta"><i>meta/v1.ObjectMeta</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>Refer to the Kubernetes API documentation for the fields of the <code>metadata</code> field.</td>
+</tr>
+<tr><td><code>spec</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-BackupSpec"><i>BackupSpec</i></a>
+</td>
+<td>
+   <p>Specification of the desired behavior of the backup.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+<tr><td><code>status</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupStatus"><i>BackupStatus</i></a>
+</td>
+<td>
+   <p>Most recently observed status of the backup. This data may not be up to
+date. Populated by the system. Read-only.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-Cluster">Cluster</h2>
+<p>Cluster is the Schema for the PostgreSQL API</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>apiVersion</code> <B>[Required]</B><br/>string</td><td><code>postgresql.cnpg.io/v1</code></td></tr>
+<tr><td><code>kind</code> <B>[Required]</B><br/>string</td><td><code>Cluster</code></td></tr>
+<tr><td><code>metadata</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#objectmeta-v1-meta"><i>meta/v1.ObjectMeta</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>Refer to the Kubernetes API documentation for the fields of the <code>metadata</code> field.</td>
+</tr>
+<tr><td><code>spec</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-ClusterSpec"><i>ClusterSpec</i></a>
+</td>
+<td>
+   <p>Specification of the desired behavior of the cluster.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+<tr><td><code>status</code><br/>
+<a href="#postgresql-cnpg-io-v1-ClusterStatus"><i>ClusterStatus</i></a>
+</td>
+<td>
+   <p>Most recently observed status of the cluster. This data may not be up
+to date. Populated by the system. Read-only.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ClusterImageCatalog">ClusterImageCatalog</h2>
+<p>ClusterImageCatalog is the Schema for the clusterimagecatalogs API</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>apiVersion</code> <B>[Required]</B><br/>string</td><td><code>postgresql.cnpg.io/v1</code></td></tr>
+<tr><td><code>kind</code> <B>[Required]</B><br/>string</td><td><code>ClusterImageCatalog</code></td></tr>
+<tr><td><code>metadata</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#objectmeta-v1-meta"><i>meta/v1.ObjectMeta</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>Refer to the Kubernetes API documentation for the fields of the <code>metadata</code> field.</td>
+</tr>
+<tr><td><code>spec</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-ImageCatalogSpec"><i>ImageCatalogSpec</i></a>
+</td>
+<td>
+   <p>Specification of the desired behavior of the ClusterImageCatalog.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-Database">Database</h2>
+<p>Database is the Schema for the databases API</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>apiVersion</code> <B>[Required]</B><br/>string</td><td><code>postgresql.cnpg.io/v1</code></td></tr>
+<tr><td><code>kind</code> <B>[Required]</B><br/>string</td><td><code>Database</code></td></tr>
+<tr><td><code>metadata</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#objectmeta-v1-meta"><i>meta/v1.ObjectMeta</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>Refer to the Kubernetes API documentation for the fields of the <code>metadata</code> field.</td>
+</tr>
+<tr><td><code>spec</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-DatabaseSpec"><i>DatabaseSpec</i></a>
+</td>
+<td>
+   <p>Specification of the desired Database.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+<tr><td><code>status</code><br/>
+<a href="#postgresql-cnpg-io-v1-DatabaseStatus"><i>DatabaseStatus</i></a>
+</td>
+<td>
+   <p>Most recently observed status of the Database. This data may not be up to
+date. Populated by the system. Read-only.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-FailoverQuorum">FailoverQuorum</h2>
+<p><strong>Appears in:</strong></p>
+<p>FailoverQuorum contains the information about the current failover
+quorum status of a PG cluster. It is updated by the instance manager
+of the primary node and reset to zero by the operator to trigger
+an update.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>apiVersion</code> <B>[Required]</B><br/>string</td><td><code>postgresql.cnpg.io/v1</code></td></tr>
+<tr><td><code>kind</code> <B>[Required]</B><br/>string</td><td><code>FailoverQuorum</code></td></tr>
+<tr><td><code>metadata</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#objectmeta-v1-meta"><i>meta/v1.ObjectMeta</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>Refer to the Kubernetes API documentation for the fields of the <code>metadata</code> field.</td>
+</tr>
+<tr><td><code>status</code><br/>
+<a href="#postgresql-cnpg-io-v1-FailoverQuorumStatus"><i>FailoverQuorumStatus</i></a>
+</td>
+<td>
+   <p>Most recently observed status of the failover quorum.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ImageCatalog">ImageCatalog</h2>
+<p>ImageCatalog is the Schema for the imagecatalogs API</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>apiVersion</code> <B>[Required]</B><br/>string</td><td><code>postgresql.cnpg.io/v1</code></td></tr>
+<tr><td><code>kind</code> <B>[Required]</B><br/>string</td><td><code>ImageCatalog</code></td></tr>
+<tr><td><code>metadata</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#objectmeta-v1-meta"><i>meta/v1.ObjectMeta</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>Refer to the Kubernetes API documentation for the fields of the <code>metadata</code> field.</td>
+</tr>
+<tr><td><code>spec</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-ImageCatalogSpec"><i>ImageCatalogSpec</i></a>
+</td>
+<td>
+   <p>Specification of the desired behavior of the ImageCatalog.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-Pooler">Pooler</h2>
+<p>Pooler is the Schema for the poolers API</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>apiVersion</code> <B>[Required]</B><br/>string</td><td><code>postgresql.cnpg.io/v1</code></td></tr>
+<tr><td><code>kind</code> <B>[Required]</B><br/>string</td><td><code>Pooler</code></td></tr>
+<tr><td><code>metadata</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#objectmeta-v1-meta"><i>meta/v1.ObjectMeta</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>Refer to the Kubernetes API documentation for the fields of the <code>metadata</code> field.</td>
+</tr>
+<tr><td><code>spec</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-PoolerSpec"><i>PoolerSpec</i></a>
+</td>
+<td>
+   <p>Specification of the desired behavior of the Pooler.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+<tr><td><code>status</code><br/>
+<a href="#postgresql-cnpg-io-v1-PoolerStatus"><i>PoolerStatus</i></a>
+</td>
+<td>
+   <p>Most recently observed status of the Pooler. This data may not be up to
+date. Populated by the system. Read-only.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-Publication">Publication</h2>
+<p>Publication is the Schema for the publications API</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>apiVersion</code> <B>[Required]</B><br/>string</td><td><code>postgresql.cnpg.io/v1</code></td></tr>
+<tr><td><code>kind</code> <B>[Required]</B><br/>string</td><td><code>Publication</code></td></tr>
+<tr><td><code>metadata</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#objectmeta-v1-meta"><i>meta/v1.ObjectMeta</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>Refer to the Kubernetes API documentation for the fields of the <code>metadata</code> field.</td>
+</tr>
+<tr><td><code>spec</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-PublicationSpec"><i>PublicationSpec</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span></td>
+</tr>
+<tr><td><code>status</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-PublicationStatus"><i>PublicationStatus</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span></td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ScheduledBackup">ScheduledBackup</h2>
+<p>ScheduledBackup is the Schema for the scheduledbackups API</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>apiVersion</code> <B>[Required]</B><br/>string</td><td><code>postgresql.cnpg.io/v1</code></td></tr>
+<tr><td><code>kind</code> <B>[Required]</B><br/>string</td><td><code>ScheduledBackup</code></td></tr>
+<tr><td><code>metadata</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#objectmeta-v1-meta"><i>meta/v1.ObjectMeta</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>Refer to the Kubernetes API documentation for the fields of the <code>metadata</code> field.</td>
+</tr>
+<tr><td><code>spec</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-ScheduledBackupSpec"><i>ScheduledBackupSpec</i></a>
+</td>
+<td>
+   <p>Specification of the desired behavior of the ScheduledBackup.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+<tr><td><code>status</code><br/>
+<a href="#postgresql-cnpg-io-v1-ScheduledBackupStatus"><i>ScheduledBackupStatus</i></a>
+</td>
+<td>
+   <p>Most recently observed status of the ScheduledBackup. This data may not be up
+to date. Populated by the system. Read-only.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-Subscription">Subscription</h2>
+<p>Subscription is the Schema for the subscriptions API</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>apiVersion</code> <B>[Required]</B><br/>string</td><td><code>postgresql.cnpg.io/v1</code></td></tr>
+<tr><td><code>kind</code> <B>[Required]</B><br/>string</td><td><code>Subscription</code></td></tr>
+<tr><td><code>metadata</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#objectmeta-v1-meta"><i>meta/v1.ObjectMeta</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>Refer to the Kubernetes API documentation for the fields of the <code>metadata</code> field.</td>
+</tr>
+<tr><td><code>spec</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-SubscriptionSpec"><i>SubscriptionSpec</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span></td>
+</tr>
+<tr><td><code>status</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-SubscriptionStatus"><i>SubscriptionStatus</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span></td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-AffinityConfiguration">AffinityConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>AffinityConfiguration contains the info we need to create the
+affinity rules for Pods</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>enablePodAntiAffinity</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Activates anti-affinity for the pods. The operator will define pods
+anti-affinity unless this field is explicitly set to false</p>
+</td>
+</tr>
+<tr><td><code>topologyKey</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>TopologyKey to use for anti-affinity configuration. See k8s documentation
+for more info on that</p>
+</td>
+</tr>
+<tr><td><code>nodeSelector</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>NodeSelector is map of key-value pairs used to define the nodes on which
+the pods can run.
+More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/</p>
+</td>
+</tr>
+<tr><td><code>nodeAffinity</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#nodeaffinity-v1-core"><i>core/v1.NodeAffinity</i></a>
+</td>
+<td>
+   <p>NodeAffinity describes node affinity scheduling rules for the pod.
+More info: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity</p>
+</td>
+</tr>
+<tr><td><code>tolerations</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#toleration-v1-core"><i>[]core/v1.Toleration</i></a>
+</td>
+<td>
+   <p>Tolerations is a list of Tolerations that should be set for all the pods, in order to allow them to run
+on tainted nodes.
+More info: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/</p>
+</td>
+</tr>
+<tr><td><code>podAntiAffinityType</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>PodAntiAffinityType allows the user to decide whether pod anti-affinity between cluster instance has to be
+considered a strong requirement during scheduling or not. Allowed values are: &quot;preferred&quot; (default if empty) or
+&quot;required&quot;. Setting it to &quot;required&quot;, could lead to instances remaining pending until new kubernetes nodes are
+added if all the existing nodes don't match the required pod anti-affinity rule.
+More info:
+https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity</p>
+</td>
+</tr>
+<tr><td><code>additionalPodAntiAffinity</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#podantiaffinity-v1-core"><i>core/v1.PodAntiAffinity</i></a>
+</td>
+<td>
+   <p>AdditionalPodAntiAffinity allows to specify pod anti-affinity terms to be added to the ones generated
+by the operator if EnablePodAntiAffinity is set to true (default) or to be used exclusively if set to false.</p>
+</td>
+</tr>
+<tr><td><code>additionalPodAffinity</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#podaffinity-v1-core"><i>core/v1.PodAffinity</i></a>
+</td>
+<td>
+   <p>AdditionalPodAffinity allows to specify pod affinity terms to be passed to all the cluster's pods.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-AvailableArchitecture">AvailableArchitecture</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</a></li>
+</ul>
+<p>AvailableArchitecture represents the state of a cluster's architecture</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>goArch</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>GoArch is the name of the executable architecture</p>
+</td>
+</tr>
+<tr><td><code>hash</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Hash is the hash of the executable</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-BackupConfiguration">BackupConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>BackupConfiguration defines how the backup of the cluster are taken.
+The supported backup methods are BarmanObjectStore and VolumeSnapshot.
+For details and examples refer to the Backup and Recovery section of the
+documentation</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>volumeSnapshot</code><br/>
+<a href="#postgresql-cnpg-io-v1-VolumeSnapshotConfiguration"><i>VolumeSnapshotConfiguration</i></a>
+</td>
+<td>
+   <p>VolumeSnapshot provides the configuration for the execution of volume snapshot backups.</p>
+</td>
+</tr>
+<tr><td><code>barmanObjectStore</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api/#BarmanObjectStoreConfiguration"><i>github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration</i></a>
+</td>
+<td>
+   <p>The configuration for the barman-cloud tool suite</p>
+</td>
+</tr>
+<tr><td><code>retentionPolicy</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>RetentionPolicy is the retention policy to be used for backups
+and WALs (i.e. '60d'). The retention policy is expressed in the form
+of <code>XXu</code> where <code>XX</code> is a positive integer and <code>u</code> is in <code>[dwm]</code> -
+days, weeks, months.
+It's currently only applicable when using the BarmanObjectStore method.</p>
+</td>
+</tr>
+<tr><td><code>target</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupTarget"><i>BackupTarget</i></a>
+</td>
+<td>
+   <p>The policy to decide which instance should perform backups. Available
+options are empty string, which will default to <code>prefer-standby</code> policy,
+<code>primary</code> to have backups run always on primary instances, <code>prefer-standby</code>
+to have backups run preferably on the most updated standby, if available.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-BackupMethod">BackupMethod</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-BackupSpec">BackupSpec</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-BackupStatus">BackupStatus</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ScheduledBackupSpec">ScheduledBackupSpec</a></p>
+</li>
+</ul>
+<p>BackupMethod defines the way of executing the physical base backups of
+the selected PostgreSQL instance</p>
+
+<h2 id="postgresql-cnpg-io-v1-BackupPhase">BackupPhase</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-BackupStatus">BackupStatus</a></li>
+</ul>
+<p>BackupPhase is the phase of the backup</p>
+
+<h2 id="postgresql-cnpg-io-v1-BackupPluginConfiguration">BackupPluginConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-BackupSpec">BackupSpec</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ScheduledBackupSpec">ScheduledBackupSpec</a></p>
+</li>
+</ul>
+<p>BackupPluginConfiguration contains the backup configuration used by
+the backup plugin</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name is the name of the plugin managing this backup</p>
+</td>
+</tr>
+<tr><td><code>parameters</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>Parameters are the configuration parameters passed to the backup
+plugin for this backup</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-BackupSnapshotElementStatus">BackupSnapshotElementStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-BackupSnapshotStatus">BackupSnapshotStatus</a></li>
+</ul>
+<p>BackupSnapshotElementStatus is a volume snapshot that is part of a volume snapshot method backup</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name is the snapshot resource name</p>
+</td>
+</tr>
+<tr><td><code>type</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Type is tho role of the snapshot in the cluster, such as PG_DATA, PG_WAL and PG_TABLESPACE</p>
+</td>
+</tr>
+<tr><td><code>tablespaceName</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>TablespaceName is the name of the snapshotted tablespace. Only set
+when type is PG_TABLESPACE</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-BackupSnapshotStatus">BackupSnapshotStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-BackupStatus">BackupStatus</a></li>
+</ul>
+<p>BackupSnapshotStatus the fields exclusive to the volumeSnapshot method backup</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>elements</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupSnapshotElementStatus"><i>[]BackupSnapshotElementStatus</i></a>
+</td>
+<td>
+   <p>The elements list, populated with the gathered volume snapshots</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-BackupSource">BackupSource</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-BootstrapRecovery">BootstrapRecovery</a></li>
+</ul>
+<p>BackupSource contains the backup we need to restore from, plus some
+information that could be needed to correctly restore it.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>LocalObjectReference</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#LocalObjectReference"><i>github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference</i></a>
+</td>
+<td>(Members of <code>LocalObjectReference</code> are embedded into this type.)
+   <span class="text-muted">No description provided.</span></td>
+</tr>
+<tr><td><code>endpointCA</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#SecretKeySelector"><i>github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector</i></a>
+</td>
+<td>
+   <p>EndpointCA store the CA bundle of the barman endpoint.
+Useful when using self-signed certificates to avoid
+errors with certificate issuer and barman-cloud-wal-archive.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-BackupSpec">BackupSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Backup">Backup</a></li>
+</ul>
+<p>BackupSpec defines the desired state of Backup</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>cluster</code> <B>[Required]</B><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#LocalObjectReference"><i>github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference</i></a>
+</td>
+<td>
+   <p>The cluster to backup</p>
+</td>
+</tr>
+<tr><td><code>target</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupTarget"><i>BackupTarget</i></a>
+</td>
+<td>
+   <p>The policy to decide which instance should perform this backup. If empty,
+it defaults to <code>cluster.spec.backup.target</code>.
+Available options are empty string, <code>primary</code> and <code>prefer-standby</code>.
+<code>primary</code> to have backups run always on primary instances,
+<code>prefer-standby</code> to have backups run preferably on the most updated
+standby, if available.</p>
+</td>
+</tr>
+<tr><td><code>method</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupMethod"><i>BackupMethod</i></a>
+</td>
+<td>
+   <p>The backup method to be used, possible options are <code>barmanObjectStore</code>,
+<code>volumeSnapshot</code> or <code>plugin</code>. Defaults to: <code>barmanObjectStore</code>.</p>
+</td>
+</tr>
+<tr><td><code>pluginConfiguration</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupPluginConfiguration"><i>BackupPluginConfiguration</i></a>
+</td>
+<td>
+   <p>Configuration parameters passed to the plugin managing this backup</p>
+</td>
+</tr>
+<tr><td><code>online</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether the default type of backup with volume snapshots is
+online/hot (<code>true</code>, default) or offline/cold (<code>false</code>)
+Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online'</p>
+</td>
+</tr>
+<tr><td><code>onlineConfiguration</code><br/>
+<a href="#postgresql-cnpg-io-v1-OnlineConfiguration"><i>OnlineConfiguration</i></a>
+</td>
+<td>
+   <p>Configuration parameters to control the online/hot backup with volume snapshots
+Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-BackupStatus">BackupStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Backup">Backup</a></li>
+</ul>
+<p>BackupStatus defines the observed state of Backup</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>BarmanCredentials</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api/#BarmanCredentials"><i>github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanCredentials</i></a>
+</td>
+<td>(Members of <code>BarmanCredentials</code> are embedded into this type.)
+   <p>The potential credentials for each cloud provider</p>
+</td>
+</tr>
+<tr><td><code>endpointCA</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#SecretKeySelector"><i>github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector</i></a>
+</td>
+<td>
+   <p>EndpointCA store the CA bundle of the barman endpoint.
+Useful when using self-signed certificates to avoid
+errors with certificate issuer and barman-cloud-wal-archive.</p>
+</td>
+</tr>
+<tr><td><code>endpointURL</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Endpoint to be used to upload data to the cloud,
+overriding the automatic endpoint discovery</p>
+</td>
+</tr>
+<tr><td><code>destinationPath</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The path where to store the backup (i.e. s3://bucket/path/to/folder)
+this path, with different destination folders, will be used for WALs
+and for data. This may not be populated in case of errors.</p>
+</td>
+</tr>
+<tr><td><code>serverName</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The server name on S3, the cluster name is used if this
+parameter is omitted</p>
+</td>
+</tr>
+<tr><td><code>encryption</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Encryption method required to S3 API</p>
+</td>
+</tr>
+<tr><td><code>backupId</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The ID of the Barman backup</p>
+</td>
+</tr>
+<tr><td><code>backupName</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The Name of the Barman backup</p>
+</td>
+</tr>
+<tr><td><code>phase</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupPhase"><i>BackupPhase</i></a>
+</td>
+<td>
+   <p>The last backup status</p>
+</td>
+</tr>
+<tr><td><code>startedAt</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#time-v1-meta"><i>meta/v1.Time</i></a>
+</td>
+<td>
+   <p>When the backup was started</p>
+</td>
+</tr>
+<tr><td><code>stoppedAt</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#time-v1-meta"><i>meta/v1.Time</i></a>
+</td>
+<td>
+   <p>When the backup was terminated</p>
+</td>
+</tr>
+<tr><td><code>beginWal</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The starting WAL</p>
+</td>
+</tr>
+<tr><td><code>endWal</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The ending WAL</p>
+</td>
+</tr>
+<tr><td><code>beginLSN</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The starting xlog</p>
+</td>
+</tr>
+<tr><td><code>endLSN</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The ending xlog</p>
+</td>
+</tr>
+<tr><td><code>error</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The detected error</p>
+</td>
+</tr>
+<tr><td><code>commandOutput</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Unused. Retained for compatibility with old versions.</p>
+</td>
+</tr>
+<tr><td><code>commandError</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The backup command output in case of error</p>
+</td>
+</tr>
+<tr><td><code>backupLabelFile</code><br/>
+<i>[]byte</i>
+</td>
+<td>
+   <p>Backup label file content as returned by Postgres in case of online (hot) backups</p>
+</td>
+</tr>
+<tr><td><code>tablespaceMapFile</code><br/>
+<i>[]byte</i>
+</td>
+<td>
+   <p>Tablespace map file content as returned by Postgres in case of online (hot) backups</p>
+</td>
+</tr>
+<tr><td><code>instanceID</code><br/>
+<a href="#postgresql-cnpg-io-v1-InstanceID"><i>InstanceID</i></a>
+</td>
+<td>
+   <p>Information to identify the instance where the backup has been taken from</p>
+</td>
+</tr>
+<tr><td><code>snapshotBackupStatus</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupSnapshotStatus"><i>BackupSnapshotStatus</i></a>
+</td>
+<td>
+   <p>Status of the volumeSnapshot backup</p>
+</td>
+</tr>
+<tr><td><code>method</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupMethod"><i>BackupMethod</i></a>
+</td>
+<td>
+   <p>The backup method being used</p>
+</td>
+</tr>
+<tr><td><code>online</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether the backup was online/hot (<code>true</code>) or offline/cold (<code>false</code>)</p>
+</td>
+</tr>
+<tr><td><code>pluginMetadata</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>A map containing the plugin metadata</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-BackupTarget">BackupTarget</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-BackupConfiguration">BackupConfiguration</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-BackupSpec">BackupSpec</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ScheduledBackupSpec">ScheduledBackupSpec</a></p>
+</li>
+</ul>
+<p>BackupTarget describes the preferred targets for a backup</p>
+
+<h2 id="postgresql-cnpg-io-v1-BootstrapConfiguration">BootstrapConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>BootstrapConfiguration contains information about how to create the PostgreSQL
+cluster. Only a single bootstrap method can be defined among the supported
+ones. <code>initdb</code> will be used as the bootstrap method if left
+unspecified. Refer to the Bootstrap page of the documentation for more
+information.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>initdb</code><br/>
+<a href="#postgresql-cnpg-io-v1-BootstrapInitDB"><i>BootstrapInitDB</i></a>
+</td>
+<td>
+   <p>Bootstrap the cluster via initdb</p>
+</td>
+</tr>
+<tr><td><code>recovery</code><br/>
+<a href="#postgresql-cnpg-io-v1-BootstrapRecovery"><i>BootstrapRecovery</i></a>
+</td>
+<td>
+   <p>Bootstrap the cluster from a backup</p>
+</td>
+</tr>
+<tr><td><code>pg_basebackup</code><br/>
+<a href="#postgresql-cnpg-io-v1-BootstrapPgBaseBackup"><i>BootstrapPgBaseBackup</i></a>
+</td>
+<td>
+   <p>Bootstrap the cluster taking a physical backup of another compatible
+PostgreSQL instance</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-BootstrapInitDB">BootstrapInitDB</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-BootstrapConfiguration">BootstrapConfiguration</a></li>
+</ul>
+<p>BootstrapInitDB is the configuration of the bootstrap process when
+initdb is used
+Refer to the Bootstrap page of the documentation for more information.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>database</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name of the database used by the application. Default: <code>app</code>.</p>
+</td>
+</tr>
+<tr><td><code>owner</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name of the owner of the database in the instance to be used
+by applications. Defaults to the value of the <code>database</code> key.</p>
+</td>
+</tr>
+<tr><td><code>secret</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#LocalObjectReference"><i>github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference</i></a>
+</td>
+<td>
+   <p>Name of the secret containing the initial credentials for the
+owner of the user database. If empty a new secret will be
+created from scratch</p>
+</td>
+</tr>
+<tr><td><code>options</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>The list of options that must be passed to initdb when creating the cluster.
+Deprecated: This could lead to inconsistent configurations,
+please use the explicit provided parameters instead.
+If defined, explicit values will be ignored.</p>
+</td>
+</tr>
+<tr><td><code>dataChecksums</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether the <code>-k</code> option should be passed to initdb,
+enabling checksums on data pages (default: <code>false</code>)</p>
+</td>
+</tr>
+<tr><td><code>encoding</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The value to be passed as option <code>--encoding</code> for initdb (default:<code>UTF8</code>)</p>
+</td>
+</tr>
+<tr><td><code>localeCollate</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The value to be passed as option <code>--lc-collate</code> for initdb (default:<code>C</code>)</p>
+</td>
+</tr>
+<tr><td><code>localeCType</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The value to be passed as option <code>--lc-ctype</code> for initdb (default:<code>C</code>)</p>
+</td>
+</tr>
+<tr><td><code>locale</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Sets the default collation order and character classification in the new database.</p>
+</td>
+</tr>
+<tr><td><code>localeProvider</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>This option sets the locale provider for databases created in the new cluster.
+Available from PostgreSQL 16.</p>
+</td>
+</tr>
+<tr><td><code>icuLocale</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Specifies the ICU locale when the ICU provider is used.
+This option requires <code>localeProvider</code> to be set to <code>icu</code>.
+Available from PostgreSQL 15.</p>
+</td>
+</tr>
+<tr><td><code>icuRules</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Specifies additional collation rules to customize the behavior of the default collation.
+This option requires <code>localeProvider</code> to be set to <code>icu</code>.
+Available from PostgreSQL 16.</p>
+</td>
+</tr>
+<tr><td><code>builtinLocale</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Specifies the locale name when the builtin provider is used.
+This option requires <code>localeProvider</code> to be set to <code>builtin</code>.
+Available from PostgreSQL 17.</p>
+</td>
+</tr>
+<tr><td><code>walSegmentSize</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>The value in megabytes (1 to 1024) to be passed to the <code>--wal-segsize</code>
+option for initdb (default: empty, resulting in PostgreSQL default: 16MB)</p>
+</td>
+</tr>
+<tr><td><code>postInitSQL</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of SQL queries to be executed as a superuser in the <code>postgres</code>
+database right after the cluster has been created - to be used with extreme care
+(by default empty)</p>
+</td>
+</tr>
+<tr><td><code>postInitApplicationSQL</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of SQL queries to be executed as a superuser in the application
+database right after the cluster has been created - to be used with extreme care
+(by default empty)</p>
+</td>
+</tr>
+<tr><td><code>postInitTemplateSQL</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of SQL queries to be executed as a superuser in the <code>template1</code>
+database right after the cluster has been created - to be used with extreme care
+(by default empty)</p>
+</td>
+</tr>
+<tr><td><code>import</code><br/>
+<a href="#postgresql-cnpg-io-v1-Import"><i>Import</i></a>
+</td>
+<td>
+   <p>Bootstraps the new cluster by importing data from an existing PostgreSQL
+instance using logical backup (<code>pg_dump</code> and <code>pg_restore</code>)</p>
+</td>
+</tr>
+<tr><td><code>postInitApplicationSQLRefs</code><br/>
+<a href="#postgresql-cnpg-io-v1-SQLRefs"><i>SQLRefs</i></a>
+</td>
+<td>
+   <p>List of references to ConfigMaps or Secrets containing SQL files
+to be executed as a superuser in the application database right after
+the cluster has been created. The references are processed in a specific order:
+first, all Secrets are processed, followed by all ConfigMaps.
+Within each group, the processing order follows the sequence specified
+in their respective arrays.
+(by default empty)</p>
+</td>
+</tr>
+<tr><td><code>postInitTemplateSQLRefs</code><br/>
+<a href="#postgresql-cnpg-io-v1-SQLRefs"><i>SQLRefs</i></a>
+</td>
+<td>
+   <p>List of references to ConfigMaps or Secrets containing SQL files
+to be executed as a superuser in the <code>template1</code> database right after
+the cluster has been created. The references are processed in a specific order:
+first, all Secrets are processed, followed by all ConfigMaps.
+Within each group, the processing order follows the sequence specified
+in their respective arrays.
+(by default empty)</p>
+</td>
+</tr>
+<tr><td><code>postInitSQLRefs</code><br/>
+<a href="#postgresql-cnpg-io-v1-SQLRefs"><i>SQLRefs</i></a>
+</td>
+<td>
+   <p>List of references to ConfigMaps or Secrets containing SQL files
+to be executed as a superuser in the <code>postgres</code> database right after
+the cluster has been created. The references are processed in a specific order:
+first, all Secrets are processed, followed by all ConfigMaps.
+Within each group, the processing order follows the sequence specified
+in their respective arrays.
+(by default empty)</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-BootstrapPgBaseBackup">BootstrapPgBaseBackup</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-BootstrapConfiguration">BootstrapConfiguration</a></li>
+</ul>
+<p>BootstrapPgBaseBackup contains the configuration required to take
+a physical backup of an existing PostgreSQL cluster</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>source</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the server of which we need to take a physical backup</p>
+</td>
+</tr>
+<tr><td><code>database</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name of the database used by the application. Default: <code>app</code>.</p>
+</td>
+</tr>
+<tr><td><code>owner</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name of the owner of the database in the instance to be used
+by applications. Defaults to the value of the <code>database</code> key.</p>
+</td>
+</tr>
+<tr><td><code>secret</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#LocalObjectReference"><i>github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference</i></a>
+</td>
+<td>
+   <p>Name of the secret containing the initial credentials for the
+owner of the user database. If empty a new secret will be
+created from scratch</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-BootstrapRecovery">BootstrapRecovery</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-BootstrapConfiguration">BootstrapConfiguration</a></li>
+</ul>
+<p>BootstrapRecovery contains the configuration required to restore
+from an existing cluster using 3 methodologies: external cluster,
+volume snapshots or backup objects. Full recovery and Point-In-Time
+Recovery are supported.
+The method can be also be used to create clusters in continuous recovery
+(replica clusters), also supporting cascading replication when <code>instances</code> &gt;</p>
+<ol>
+<li>Once the cluster exits recovery, the password for the superuser
+will be changed through the provided secret.
+Refer to the Bootstrap page of the documentation for more information.</li>
+</ol>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>backup</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupSource"><i>BackupSource</i></a>
+</td>
+<td>
+   <p>The backup object containing the physical base backup from which to
+initiate the recovery procedure.
+Mutually exclusive with <code>source</code> and <code>volumeSnapshots</code>.</p>
+</td>
+</tr>
+<tr><td><code>source</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The external cluster whose backup we will restore. This is also
+used as the name of the folder under which the backup is stored,
+so it must be set to the name of the source cluster
+Mutually exclusive with <code>backup</code>.</p>
+</td>
+</tr>
+<tr><td><code>volumeSnapshots</code><br/>
+<a href="#postgresql-cnpg-io-v1-DataSource"><i>DataSource</i></a>
+</td>
+<td>
+   <p>The static PVC data source(s) from which to initiate the
+recovery procedure. Currently supporting <code>VolumeSnapshot</code>
+and <code>PersistentVolumeClaim</code> resources that map an existing
+PVC group, compatible with CloudNativePG, and taken with
+a cold backup copy on a fenced Postgres instance (limitation
+which will be removed in the future when online backup
+will be implemented).
+Mutually exclusive with <code>backup</code>.</p>
+</td>
+</tr>
+<tr><td><code>recoveryTarget</code><br/>
+<a href="#postgresql-cnpg-io-v1-RecoveryTarget"><i>RecoveryTarget</i></a>
+</td>
+<td>
+   <p>By default, the recovery process applies all the available
+WAL files in the archive (full recovery). However, you can also
+end the recovery as soon as a consistent state is reached or
+recover to a point-in-time (PITR) by specifying a <code>RecoveryTarget</code> object,
+as expected by PostgreSQL (i.e., timestamp, transaction Id, LSN, ...).
+More info: https://www.postgresql.org/docs/current/runtime-config-wal.html#RUNTIME-CONFIG-WAL-RECOVERY-TARGET</p>
+</td>
+</tr>
+<tr><td><code>database</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name of the database used by the application. Default: <code>app</code>.</p>
+</td>
+</tr>
+<tr><td><code>owner</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name of the owner of the database in the instance to be used
+by applications. Defaults to the value of the <code>database</code> key.</p>
+</td>
+</tr>
+<tr><td><code>secret</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#LocalObjectReference"><i>github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference</i></a>
+</td>
+<td>
+   <p>Name of the secret containing the initial credentials for the
+owner of the user database. If empty a new secret will be
+created from scratch</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-CatalogImage">CatalogImage</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ImageCatalogSpec">ImageCatalogSpec</a></li>
+</ul>
+<p>CatalogImage defines the image and major version</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>image</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The image reference</p>
+</td>
+</tr>
+<tr><td><code>major</code> <B>[Required]</B><br/>
+<i>int</i>
+</td>
+<td>
+   <p>The PostgreSQL major version of the image. Must be unique within the catalog.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-CertificatesConfiguration">CertificatesConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-CertificatesStatus">CertificatesStatus</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></p>
+</li>
+</ul>
+<p>CertificatesConfiguration contains the needed configurations to handle server certificates.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>serverCASecret</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The secret containing the Server CA certificate. If not defined, a new secret will be created
+with a self-signed CA and will be used to generate the TLS certificate ServerTLSSecret.<!-- raw HTML omitted -->
+<!-- raw HTML omitted -->
+Contains:<!-- raw HTML omitted -->
+<!-- raw HTML omitted --></p>
+<ul>
+<li><code>ca.crt</code>: CA that should be used to validate the server certificate,
+used as <code>sslrootcert</code> in client connection strings.<!-- raw HTML omitted --></li>
+<li><code>ca.key</code>: key used to generate Server SSL certs, if ServerTLSSecret is provided,
+this can be omitted.<!-- raw HTML omitted --></li>
+</ul>
+</td>
+</tr>
+<tr><td><code>serverTLSSecret</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The secret of type kubernetes.io/tls containing the server TLS certificate and key that will be set as
+<code>ssl_cert_file</code> and <code>ssl_key_file</code> so that clients can connect to postgres securely.
+If not defined, ServerCASecret must provide also <code>ca.key</code> and a new secret will be
+created using the provided CA.</p>
+</td>
+</tr>
+<tr><td><code>replicationTLSSecret</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The secret of type kubernetes.io/tls containing the client certificate to authenticate as
+the <code>streaming_replica</code> user.
+If not defined, ClientCASecret must provide also <code>ca.key</code>, and a new secret will be
+created using the provided CA.</p>
+</td>
+</tr>
+<tr><td><code>clientCASecret</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The secret containing the Client CA certificate. If not defined, a new secret will be created
+with a self-signed CA and will be used to generate all the client certificates.<!-- raw HTML omitted -->
+<!-- raw HTML omitted -->
+Contains:<!-- raw HTML omitted -->
+<!-- raw HTML omitted --></p>
+<ul>
+<li><code>ca.crt</code>: CA that should be used to validate the client certificates,
+used as <code>ssl_ca_file</code> of all the instances.<!-- raw HTML omitted --></li>
+<li><code>ca.key</code>: key used to generate client certificates, if ReplicationTLSSecret is provided,
+this can be omitted.<!-- raw HTML omitted --></li>
+</ul>
+</td>
+</tr>
+<tr><td><code>serverAltDNSNames</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>The list of the server alternative DNS names to be added to the generated server TLS certificates, when required.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-CertificatesStatus">CertificatesStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</a></li>
+</ul>
+<p>CertificatesStatus contains configuration certificates and related expiration dates.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>CertificatesConfiguration</code><br/>
+<a href="#postgresql-cnpg-io-v1-CertificatesConfiguration"><i>CertificatesConfiguration</i></a>
+</td>
+<td>(Members of <code>CertificatesConfiguration</code> are embedded into this type.)
+   <p>Needed configurations to handle server certificates, initialized with default values, if needed.</p>
+</td>
+</tr>
+<tr><td><code>expirations</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>Expiration dates for all certificates.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ClusterMonitoringTLSConfiguration">ClusterMonitoringTLSConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-MonitoringConfiguration">MonitoringConfiguration</a></li>
+</ul>
+<p>ClusterMonitoringTLSConfiguration is the type containing the TLS configuration
+for the cluster's monitoring</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>enabled</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Enable TLS for the monitoring endpoint.
+Changing this option will force a rollout of all instances.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Cluster">Cluster</a></li>
+</ul>
+<p>ClusterSpec defines the desired state of Cluster</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>description</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Description of this PostgreSQL cluster</p>
+</td>
+</tr>
+<tr><td><code>inheritedMetadata</code><br/>
+<a href="#postgresql-cnpg-io-v1-EmbeddedObjectMetadata"><i>EmbeddedObjectMetadata</i></a>
+</td>
+<td>
+   <p>Metadata that will be inherited by all objects related to the Cluster</p>
+</td>
+</tr>
+<tr><td><code>imageName</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name of the container image, supporting both tags (<code>&lt;image&gt;:&lt;tag&gt;</code>)
+and digests for deterministic and repeatable deployments
+(<code>&lt;image&gt;:&lt;tag&gt;@sha256:&lt;digestValue&gt;</code>)</p>
+</td>
+</tr>
+<tr><td><code>imageCatalogRef</code><br/>
+<a href="#postgresql-cnpg-io-v1-ImageCatalogRef"><i>ImageCatalogRef</i></a>
+</td>
+<td>
+   <p>Defines the major PostgreSQL version we want to use within an ImageCatalog</p>
+</td>
+</tr>
+<tr><td><code>imagePullPolicy</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#pullpolicy-v1-core"><i>core/v1.PullPolicy</i></a>
+</td>
+<td>
+   <p>Image pull policy.
+One of <code>Always</code>, <code>Never</code> or <code>IfNotPresent</code>.
+If not defined, it defaults to <code>IfNotPresent</code>.
+Cannot be updated.
+More info: https://kubernetes.io/docs/concepts/containers/images#updating-images</p>
+</td>
+</tr>
+<tr><td><code>schedulerName</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>If specified, the pod will be dispatched by specified Kubernetes
+scheduler. If not specified, the pod will be dispatched by the default
+scheduler. More info:
+https://kubernetes.io/docs/concepts/scheduling-eviction/kube-scheduler/</p>
+</td>
+</tr>
+<tr><td><code>postgresUID</code><br/>
+<i>int64</i>
+</td>
+<td>
+   <p>The UID of the <code>postgres</code> user inside the image, defaults to <code>26</code></p>
+</td>
+</tr>
+<tr><td><code>postgresGID</code><br/>
+<i>int64</i>
+</td>
+<td>
+   <p>The GID of the <code>postgres</code> user inside the image, defaults to <code>26</code></p>
+</td>
+</tr>
+<tr><td><code>instances</code> <B>[Required]</B><br/>
+<i>int</i>
+</td>
+<td>
+   <p>Number of instances required in the cluster</p>
+</td>
+</tr>
+<tr><td><code>minSyncReplicas</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>Minimum number of instances required in synchronous replication with the
+primary. Undefined or 0 allow writes to complete when no standby is
+available.</p>
+</td>
+</tr>
+<tr><td><code>maxSyncReplicas</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>The target value for the synchronous replication quorum, that can be
+decreased if the number of ready standbys is lower than this.
+Undefined or 0 disable synchronous replication.</p>
+</td>
+</tr>
+<tr><td><code>postgresql</code><br/>
+<a href="#postgresql-cnpg-io-v1-PostgresConfiguration"><i>PostgresConfiguration</i></a>
+</td>
+<td>
+   <p>Configuration of the PostgreSQL server</p>
+</td>
+</tr>
+<tr><td><code>replicationSlots</code><br/>
+<a href="#postgresql-cnpg-io-v1-ReplicationSlotsConfiguration"><i>ReplicationSlotsConfiguration</i></a>
+</td>
+<td>
+   <p>Replication slots management configuration</p>
+</td>
+</tr>
+<tr><td><code>bootstrap</code><br/>
+<a href="#postgresql-cnpg-io-v1-BootstrapConfiguration"><i>BootstrapConfiguration</i></a>
+</td>
+<td>
+   <p>Instructions to bootstrap this cluster</p>
+</td>
+</tr>
+<tr><td><code>replica</code><br/>
+<a href="#postgresql-cnpg-io-v1-ReplicaClusterConfiguration"><i>ReplicaClusterConfiguration</i></a>
+</td>
+<td>
+   <p>Replica cluster configuration</p>
+</td>
+</tr>
+<tr><td><code>superuserSecret</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#LocalObjectReference"><i>github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference</i></a>
+</td>
+<td>
+   <p>The secret containing the superuser password. If not defined a new
+secret will be created with a randomly generated password</p>
+</td>
+</tr>
+<tr><td><code>enableSuperuserAccess</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>When this option is enabled, the operator will use the <code>SuperuserSecret</code>
+to update the <code>postgres</code> user password (if the secret is
+not present, the operator will automatically create one). When this
+option is disabled, the operator will ignore the <code>SuperuserSecret</code> content, delete
+it when automatically created, and then blank the password of the <code>postgres</code>
+user by setting it to <code>NULL</code>. Disabled by default.</p>
+</td>
+</tr>
+<tr><td><code>certificates</code><br/>
+<a href="#postgresql-cnpg-io-v1-CertificatesConfiguration"><i>CertificatesConfiguration</i></a>
+</td>
+<td>
+   <p>The configuration for the CA and related certificates</p>
+</td>
+</tr>
+<tr><td><code>imagePullSecrets</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#LocalObjectReference"><i>[]github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference</i></a>
+</td>
+<td>
+   <p>The list of pull secrets to be used to pull the images</p>
+</td>
+</tr>
+<tr><td><code>storage</code><br/>
+<a href="#postgresql-cnpg-io-v1-StorageConfiguration"><i>StorageConfiguration</i></a>
+</td>
+<td>
+   <p>Configuration of the storage of the instances</p>
+</td>
+</tr>
+<tr><td><code>serviceAccountTemplate</code><br/>
+<a href="#postgresql-cnpg-io-v1-ServiceAccountTemplate"><i>ServiceAccountTemplate</i></a>
+</td>
+<td>
+   <p>Configure the generation of the service account</p>
+</td>
+</tr>
+<tr><td><code>walStorage</code><br/>
+<a href="#postgresql-cnpg-io-v1-StorageConfiguration"><i>StorageConfiguration</i></a>
+</td>
+<td>
+   <p>Configuration of the storage for PostgreSQL WAL (Write-Ahead Log)</p>
+</td>
+</tr>
+<tr><td><code>ephemeralVolumeSource</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#ephemeralvolumesource-v1-core"><i>core/v1.EphemeralVolumeSource</i></a>
+</td>
+<td>
+   <p>EphemeralVolumeSource allows the user to configure the source of ephemeral volumes.</p>
+</td>
+</tr>
+<tr><td><code>startDelay</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>The time in seconds that is allowed for a PostgreSQL instance to
+successfully start up (default 3600).
+The startup probe failure threshold is derived from this value using the formula:
+ceiling(startDelay / 10).</p>
+</td>
+</tr>
+<tr><td><code>stopDelay</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>The time in seconds that is allowed for a PostgreSQL instance to
+gracefully shutdown (default 1800)</p>
+</td>
+</tr>
+<tr><td><code>smartShutdownTimeout</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>The time in seconds that controls the window of time reserved for the smart shutdown of Postgres to complete.
+Make sure you reserve enough time for the operator to request a fast shutdown of Postgres
+(that is: <code>stopDelay</code> - <code>smartShutdownTimeout</code>).</p>
+</td>
+</tr>
+<tr><td><code>switchoverDelay</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>The time in seconds that is allowed for a primary PostgreSQL instance
+to gracefully shutdown during a switchover.
+Default value is 3600 seconds (1 hour).</p>
+</td>
+</tr>
+<tr><td><code>failoverDelay</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>The amount of time (in seconds) to wait before triggering a failover
+after the primary PostgreSQL instance in the cluster was detected
+to be unhealthy</p>
+</td>
+</tr>
+<tr><td><code>livenessProbeTimeout</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>LivenessProbeTimeout is the time (in seconds) that is allowed for a PostgreSQL instance
+to successfully respond to the liveness probe (default 30).
+The Liveness probe failure threshold is derived from this value using the formula:
+ceiling(livenessProbe / 10).</p>
+</td>
+</tr>
+<tr><td><code>affinity</code><br/>
+<a href="#postgresql-cnpg-io-v1-AffinityConfiguration"><i>AffinityConfiguration</i></a>
+</td>
+<td>
+   <p>Affinity/Anti-affinity rules for Pods</p>
+</td>
+</tr>
+<tr><td><code>topologySpreadConstraints</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#topologyspreadconstraint-v1-core"><i>[]core/v1.TopologySpreadConstraint</i></a>
+</td>
+<td>
+   <p>TopologySpreadConstraints specifies how to spread matching pods among the given topology.
+More info:
+https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/</p>
+</td>
+</tr>
+<tr><td><code>resources</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#resourcerequirements-v1-core"><i>core/v1.ResourceRequirements</i></a>
+</td>
+<td>
+   <p>Resources requirements of every generated Pod. Please refer to
+https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+for more information.</p>
+</td>
+</tr>
+<tr><td><code>ephemeralVolumesSizeLimit</code><br/>
+<a href="#postgresql-cnpg-io-v1-EphemeralVolumesSizeLimitConfiguration"><i>EphemeralVolumesSizeLimitConfiguration</i></a>
+</td>
+<td>
+   <p>EphemeralVolumesSizeLimit allows the user to set the limits for the ephemeral
+volumes</p>
+</td>
+</tr>
+<tr><td><code>priorityClassName</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name of the priority class which will be used in every generated Pod, if the PriorityClass
+specified does not exist, the pod will not be able to schedule.  Please refer to
+https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass
+for more information</p>
+</td>
+</tr>
+<tr><td><code>primaryUpdateStrategy</code><br/>
+<a href="#postgresql-cnpg-io-v1-PrimaryUpdateStrategy"><i>PrimaryUpdateStrategy</i></a>
+</td>
+<td>
+   <p>Deployment strategy to follow to upgrade the primary server during a rolling
+update procedure, after all replicas have been successfully updated:
+it can be automated (<code>unsupervised</code> - default) or manual (<code>supervised</code>)</p>
+</td>
+</tr>
+<tr><td><code>primaryUpdateMethod</code><br/>
+<a href="#postgresql-cnpg-io-v1-PrimaryUpdateMethod"><i>PrimaryUpdateMethod</i></a>
+</td>
+<td>
+   <p>Method to follow to upgrade the primary server during a rolling
+update procedure, after all replicas have been successfully updated:
+it can be with a switchover (<code>switchover</code>) or in-place (<code>restart</code> - default)</p>
+</td>
+</tr>
+<tr><td><code>backup</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupConfiguration"><i>BackupConfiguration</i></a>
+</td>
+<td>
+   <p>The configuration to be used for backups</p>
+</td>
+</tr>
+<tr><td><code>nodeMaintenanceWindow</code><br/>
+<a href="#postgresql-cnpg-io-v1-NodeMaintenanceWindow"><i>NodeMaintenanceWindow</i></a>
+</td>
+<td>
+   <p>Define a maintenance window for the Kubernetes nodes</p>
+</td>
+</tr>
+<tr><td><code>monitoring</code><br/>
+<a href="#postgresql-cnpg-io-v1-MonitoringConfiguration"><i>MonitoringConfiguration</i></a>
+</td>
+<td>
+   <p>The configuration of the monitoring infrastructure of this cluster</p>
+</td>
+</tr>
+<tr><td><code>externalClusters</code><br/>
+<a href="#postgresql-cnpg-io-v1-ExternalCluster"><i>[]ExternalCluster</i></a>
+</td>
+<td>
+   <p>The list of external clusters which are used in the configuration</p>
+</td>
+</tr>
+<tr><td><code>logLevel</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The instances' log level, one of the following values: error, warning, info (default), debug, trace</p>
+</td>
+</tr>
+<tr><td><code>projectedVolumeTemplate</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#projectedvolumesource-v1-core"><i>core/v1.ProjectedVolumeSource</i></a>
+</td>
+<td>
+   <p>Template to be used to define projected volumes, projected volumes will be mounted
+under <code>/projected</code> base folder</p>
+</td>
+</tr>
+<tr><td><code>env</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#envvar-v1-core"><i>[]core/v1.EnvVar</i></a>
+</td>
+<td>
+   <p>Env follows the Env format to pass environment variables
+to the pods created in the cluster</p>
+</td>
+</tr>
+<tr><td><code>envFrom</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#envfromsource-v1-core"><i>[]core/v1.EnvFromSource</i></a>
+</td>
+<td>
+   <p>EnvFrom follows the EnvFrom format to pass environment variables
+sources to the pods to be used by Env</p>
+</td>
+</tr>
+<tr><td><code>managed</code><br/>
+<a href="#postgresql-cnpg-io-v1-ManagedConfiguration"><i>ManagedConfiguration</i></a>
+</td>
+<td>
+   <p>The configuration that is used by the portions of PostgreSQL that are managed by the instance manager</p>
+</td>
+</tr>
+<tr><td><code>seccompProfile</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#seccompprofile-v1-core"><i>core/v1.SeccompProfile</i></a>
+</td>
+<td>
+   <p>The SeccompProfile applied to every Pod and Container.
+Defaults to: <code>RuntimeDefault</code></p>
+</td>
+</tr>
+<tr><td><code>tablespaces</code><br/>
+<a href="#postgresql-cnpg-io-v1-TablespaceConfiguration"><i>[]TablespaceConfiguration</i></a>
+</td>
+<td>
+   <p>The tablespaces configuration</p>
+</td>
+</tr>
+<tr><td><code>enablePDB</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Manage the <code>PodDisruptionBudget</code> resources within the cluster. When
+configured as <code>true</code> (default setting), the pod disruption budgets
+will safeguard the primary node from being terminated. Conversely,
+setting it to <code>false</code> will result in the absence of any
+<code>PodDisruptionBudget</code> resource, permitting the shutdown of all nodes
+hosting the PostgreSQL cluster. This latter configuration is
+advisable for any PostgreSQL cluster employed for
+development/staging purposes.</p>
+</td>
+</tr>
+<tr><td><code>plugins</code><br/>
+<a href="#postgresql-cnpg-io-v1-PluginConfiguration"><i>[]PluginConfiguration</i></a>
+</td>
+<td>
+   <p>The plugins configuration, containing
+any plugin to be loaded with the corresponding configuration</p>
+</td>
+</tr>
+<tr><td><code>probes</code><br/>
+<a href="#postgresql-cnpg-io-v1-ProbesConfiguration"><i>ProbesConfiguration</i></a>
+</td>
+<td>
+   <p>The configuration of the probes to be injected
+in the PostgreSQL Pods.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Cluster">Cluster</a></li>
+</ul>
+<p>ClusterStatus defines the observed state of Cluster</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>instances</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>The total number of PVC Groups detected in the cluster. It may differ from the number of existing instance pods.</p>
+</td>
+</tr>
+<tr><td><code>readyInstances</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>The total number of ready instances in the cluster. It is equal to the number of ready instance pods.</p>
+</td>
+</tr>
+<tr><td><code>instancesStatus</code><br/>
+<i>map[PodStatus][]string</i>
+</td>
+<td>
+   <p>InstancesStatus indicates in which status the instances are</p>
+</td>
+</tr>
+<tr><td><code>instancesReportedState</code><br/>
+<a href="#postgresql-cnpg-io-v1-InstanceReportedState"><i>map[PodName]InstanceReportedState</i></a>
+</td>
+<td>
+   <p>The reported state of the instances during the last reconciliation loop</p>
+</td>
+</tr>
+<tr><td><code>managedRolesStatus</code><br/>
+<a href="#postgresql-cnpg-io-v1-ManagedRoles"><i>ManagedRoles</i></a>
+</td>
+<td>
+   <p>ManagedRolesStatus reports the state of the managed roles in the cluster</p>
+</td>
+</tr>
+<tr><td><code>tablespacesStatus</code><br/>
+<a href="#postgresql-cnpg-io-v1-TablespaceState"><i>[]TablespaceState</i></a>
+</td>
+<td>
+   <p>TablespacesStatus reports the state of the declarative tablespaces in the cluster</p>
+</td>
+</tr>
+<tr><td><code>timelineID</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>The timeline of the Postgres cluster</p>
+</td>
+</tr>
+<tr><td><code>topology</code><br/>
+<a href="#postgresql-cnpg-io-v1-Topology"><i>Topology</i></a>
+</td>
+<td>
+   <p>Instances topology.</p>
+</td>
+</tr>
+<tr><td><code>latestGeneratedNode</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>ID of the latest generated node (used to avoid node name clashing)</p>
+</td>
+</tr>
+<tr><td><code>currentPrimary</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Current primary instance</p>
+</td>
+</tr>
+<tr><td><code>targetPrimary</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Target primary instance, this is different from the previous one
+during a switchover or a failover</p>
+</td>
+</tr>
+<tr><td><code>lastPromotionToken</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>LastPromotionToken is the last verified promotion token that
+was used to promote a replica cluster</p>
+</td>
+</tr>
+<tr><td><code>pvcCount</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>How many PVCs have been created by this cluster</p>
+</td>
+</tr>
+<tr><td><code>jobCount</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>How many Jobs have been created by this cluster</p>
+</td>
+</tr>
+<tr><td><code>danglingPVC</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of all the PVCs created by this cluster and still available
+which are not attached to a Pod</p>
+</td>
+</tr>
+<tr><td><code>resizingPVC</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of all the PVCs that have ResizingPVC condition.</p>
+</td>
+</tr>
+<tr><td><code>initializingPVC</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of all the PVCs that are being initialized by this cluster</p>
+</td>
+</tr>
+<tr><td><code>healthyPVC</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of all the PVCs not dangling nor initializing</p>
+</td>
+</tr>
+<tr><td><code>unusablePVC</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of all the PVCs that are unusable because another PVC is missing</p>
+</td>
+</tr>
+<tr><td><code>writeService</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Current write pod</p>
+</td>
+</tr>
+<tr><td><code>readService</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Current list of read pods</p>
+</td>
+</tr>
+<tr><td><code>phase</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Current phase of the cluster</p>
+</td>
+</tr>
+<tr><td><code>phaseReason</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Reason for the current phase</p>
+</td>
+</tr>
+<tr><td><code>secretsResourceVersion</code><br/>
+<a href="#postgresql-cnpg-io-v1-SecretsResourceVersion"><i>SecretsResourceVersion</i></a>
+</td>
+<td>
+   <p>The list of resource versions of the secrets
+managed by the operator. Every change here is done in the
+interest of the instance manager, which will refresh the
+secret data</p>
+</td>
+</tr>
+<tr><td><code>configMapResourceVersion</code><br/>
+<a href="#postgresql-cnpg-io-v1-ConfigMapResourceVersion"><i>ConfigMapResourceVersion</i></a>
+</td>
+<td>
+   <p>The list of resource versions of the configmaps,
+managed by the operator. Every change here is done in the
+interest of the instance manager, which will refresh the
+configmap data</p>
+</td>
+</tr>
+<tr><td><code>certificates</code><br/>
+<a href="#postgresql-cnpg-io-v1-CertificatesStatus"><i>CertificatesStatus</i></a>
+</td>
+<td>
+   <p>The configuration for the CA and related certificates, initialized with defaults.</p>
+</td>
+</tr>
+<tr><td><code>firstRecoverabilityPoint</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The first recoverability point, stored as a date in RFC3339 format.
+This field is calculated from the content of FirstRecoverabilityPointByMethod.</p>
+<p>Deprecated: the field is not set for backup plugins.</p>
+</td>
+</tr>
+<tr><td><code>firstRecoverabilityPointByMethod</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#time-v1-meta"><i>map[BackupMethod]meta/v1.Time</i></a>
+</td>
+<td>
+   <p>The first recoverability point, stored as a date in RFC3339 format, per backup method type.</p>
+<p>Deprecated: the field is not set for backup plugins.</p>
+</td>
+</tr>
+<tr><td><code>lastSuccessfulBackup</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Last successful backup, stored as a date in RFC3339 format.
+This field is calculated from the content of LastSuccessfulBackupByMethod.</p>
+<p>Deprecated: the field is not set for backup plugins.</p>
+</td>
+</tr>
+<tr><td><code>lastSuccessfulBackupByMethod</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#time-v1-meta"><i>map[BackupMethod]meta/v1.Time</i></a>
+</td>
+<td>
+   <p>Last successful backup, stored as a date in RFC3339 format, per backup method type.</p>
+<p>Deprecated: the field is not set for backup plugins.</p>
+</td>
+</tr>
+<tr><td><code>lastFailedBackup</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Last failed backup, stored as a date in RFC3339 format.</p>
+<p>Deprecated: the field is not set for backup plugins.</p>
+</td>
+</tr>
+<tr><td><code>cloudNativePGCommitHash</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The commit hash number of which this operator running</p>
+</td>
+</tr>
+<tr><td><code>currentPrimaryTimestamp</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The timestamp when the last actual promotion to primary has occurred</p>
+</td>
+</tr>
+<tr><td><code>currentPrimaryFailingSinceTimestamp</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The timestamp when the primary was detected to be unhealthy
+This field is reported when <code>.spec.failoverDelay</code> is populated or during online upgrades</p>
+</td>
+</tr>
+<tr><td><code>targetPrimaryTimestamp</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The timestamp when the last request for a new primary has occurred</p>
+</td>
+</tr>
+<tr><td><code>poolerIntegrations</code><br/>
+<a href="#postgresql-cnpg-io-v1-PoolerIntegrations"><i>PoolerIntegrations</i></a>
+</td>
+<td>
+   <p>The integration needed by poolers referencing the cluster</p>
+</td>
+</tr>
+<tr><td><code>cloudNativePGOperatorHash</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The hash of the binary of the operator</p>
+</td>
+</tr>
+<tr><td><code>availableArchitectures</code><br/>
+<a href="#postgresql-cnpg-io-v1-AvailableArchitecture"><i>[]AvailableArchitecture</i></a>
+</td>
+<td>
+   <p>AvailableArchitectures reports the available architectures of a cluster</p>
+</td>
+</tr>
+<tr><td><code>conditions</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#condition-v1-meta"><i>[]meta/v1.Condition</i></a>
+</td>
+<td>
+   <p>Conditions for cluster object</p>
+</td>
+</tr>
+<tr><td><code>instanceNames</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of instance names in the cluster</p>
+</td>
+</tr>
+<tr><td><code>onlineUpdateEnabled</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>OnlineUpdateEnabled shows if the online upgrade is enabled inside the cluster</p>
+</td>
+</tr>
+<tr><td><code>image</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Image contains the image name used by the pods</p>
+</td>
+</tr>
+<tr><td><code>pgDataImageInfo</code><br/>
+<a href="#postgresql-cnpg-io-v1-ImageInfo"><i>ImageInfo</i></a>
+</td>
+<td>
+   <p>PGDataImageInfo contains the details of the latest image that has run on the current data directory.</p>
+</td>
+</tr>
+<tr><td><code>pluginStatus</code><br/>
+<a href="#postgresql-cnpg-io-v1-PluginStatus"><i>[]PluginStatus</i></a>
+</td>
+<td>
+   <p>PluginStatus is the status of the loaded plugins</p>
+</td>
+</tr>
+<tr><td><code>switchReplicaClusterStatus</code><br/>
+<a href="#postgresql-cnpg-io-v1-SwitchReplicaClusterStatus"><i>SwitchReplicaClusterStatus</i></a>
+</td>
+<td>
+   <p>SwitchReplicaClusterStatus is the status of the switch to replica cluster</p>
+</td>
+</tr>
+<tr><td><code>demotionToken</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>DemotionToken is a JSON token containing the information
+from pg_controldata such as Database system identifier, Latest checkpoint's
+TimeLineID, Latest checkpoint's REDO location, Latest checkpoint's REDO
+WAL file, and Time of latest checkpoint</p>
+</td>
+</tr>
+<tr><td><code>systemID</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>SystemID is the latest detected PostgreSQL SystemID</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ConfigMapResourceVersion">ConfigMapResourceVersion</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</a></li>
+</ul>
+<p>ConfigMapResourceVersion is the resource versions of the secrets
+managed by the operator</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>metrics</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>A map with the versions of all the config maps used to pass metrics.
+Map keys are the config map names, map values are the versions</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-DataDurabilityLevel">DataDurabilityLevel</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-SynchronousReplicaConfiguration">SynchronousReplicaConfiguration</a></li>
+</ul>
+<p>DataDurabilityLevel specifies how strictly to enforce synchronous replication
+when cluster instances are unavailable. Options are <code>required</code> or <code>preferred</code>.</p>
+
+<h2 id="postgresql-cnpg-io-v1-DataSource">DataSource</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-BootstrapRecovery">BootstrapRecovery</a></li>
+</ul>
+<p>DataSource contains the configuration required to bootstrap a
+PostgreSQL cluster from an existing storage</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>storage</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#typedlocalobjectreference-v1-core"><i>core/v1.TypedLocalObjectReference</i></a>
+</td>
+<td>
+   <p>Configuration of the storage of the instances</p>
+</td>
+</tr>
+<tr><td><code>walStorage</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#typedlocalobjectreference-v1-core"><i>core/v1.TypedLocalObjectReference</i></a>
+</td>
+<td>
+   <p>Configuration of the storage for PostgreSQL WAL (Write-Ahead Log)</p>
+</td>
+</tr>
+<tr><td><code>tablespaceStorage</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#typedlocalobjectreference-v1-core"><i>map[string]core/v1.TypedLocalObjectReference</i></a>
+</td>
+<td>
+   <p>Configuration of the storage for PostgreSQL tablespaces</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-DatabaseObjectSpec">DatabaseObjectSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ExtensionSpec">ExtensionSpec</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-SchemaSpec">SchemaSpec</a></p>
+</li>
+</ul>
+<p>DatabaseObjectSpec contains the fields which are common to every
+database object</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name of the extension/schema</p>
+</td>
+</tr>
+<tr><td><code>ensure</code><br/>
+<a href="#postgresql-cnpg-io-v1-EnsureOption"><i>EnsureOption</i></a>
+</td>
+<td>
+   <p>Specifies whether an extension/schema should be present or absent in
+the database. If set to <code>present</code>, the extension/schema will be
+created if it does not exist. If set to <code>absent</code>, the
+extension/schema will be removed if it exists.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-DatabaseObjectStatus">DatabaseObjectStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-DatabaseStatus">DatabaseStatus</a></li>
+</ul>
+<p>DatabaseObjectStatus is the status of the managed database objects</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the object</p>
+</td>
+</tr>
+<tr><td><code>applied</code> <B>[Required]</B><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>True of the object has been installed successfully in
+the database</p>
+</td>
+</tr>
+<tr><td><code>message</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Message is the object reconciliation message</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-DatabaseReclaimPolicy">DatabaseReclaimPolicy</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-DatabaseSpec">DatabaseSpec</a></li>
+</ul>
+<p>DatabaseReclaimPolicy describes a policy for end-of-life maintenance of databases.</p>
+
+<h2 id="postgresql-cnpg-io-v1-DatabaseRoleRef">DatabaseRoleRef</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-TablespaceConfiguration">TablespaceConfiguration</a></li>
+</ul>
+<p>DatabaseRoleRef is a reference an a role available inside PostgreSQL</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code><br/>
+<i>string</i>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span></td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-DatabaseSpec">DatabaseSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Database">Database</a></li>
+</ul>
+<p>DatabaseSpec is the specification of a Postgresql Database, built around the
+<code>CREATE DATABASE</code>, <code>ALTER DATABASE</code>, and <code>DROP DATABASE</code> SQL commands of
+PostgreSQL.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>cluster</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#localobjectreference-v1-core"><i>core/v1.LocalObjectReference</i></a>
+</td>
+<td>
+   <p>The name of the PostgreSQL cluster hosting the database.</p>
+</td>
+</tr>
+<tr><td><code>ensure</code><br/>
+<a href="#postgresql-cnpg-io-v1-EnsureOption"><i>EnsureOption</i></a>
+</td>
+<td>
+   <p>Ensure the PostgreSQL database is <code>present</code> or <code>absent</code> - defaults to &quot;present&quot;.</p>
+</td>
+</tr>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the database to create inside PostgreSQL. This setting cannot be changed.</p>
+</td>
+</tr>
+<tr><td><code>owner</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Maps to the <code>OWNER</code> parameter of <code>CREATE DATABASE</code>.
+Maps to the <code>OWNER TO</code> command of <code>ALTER DATABASE</code>.
+The role name of the user who owns the database inside PostgreSQL.</p>
+</td>
+</tr>
+<tr><td><code>template</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Maps to the <code>TEMPLATE</code> parameter of <code>CREATE DATABASE</code>. This setting
+cannot be changed. The name of the template from which to create
+this database.</p>
+</td>
+</tr>
+<tr><td><code>encoding</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Maps to the <code>ENCODING</code> parameter of <code>CREATE DATABASE</code>. This setting
+cannot be changed. Character set encoding to use in the database.</p>
+</td>
+</tr>
+<tr><td><code>locale</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Maps to the <code>LOCALE</code> parameter of <code>CREATE DATABASE</code>. This setting
+cannot be changed. Sets the default collation order and character
+classification in the new database.</p>
+</td>
+</tr>
+<tr><td><code>localeProvider</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Maps to the <code>LOCALE_PROVIDER</code> parameter of <code>CREATE DATABASE</code>. This
+setting cannot be changed. This option sets the locale provider for
+databases created in the new cluster. Available from PostgreSQL 16.</p>
+</td>
+</tr>
+<tr><td><code>localeCollate</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Maps to the <code>LC_COLLATE</code> parameter of <code>CREATE DATABASE</code>. This
+setting cannot be changed.</p>
+</td>
+</tr>
+<tr><td><code>localeCType</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Maps to the <code>LC_CTYPE</code> parameter of <code>CREATE DATABASE</code>. This setting
+cannot be changed.</p>
+</td>
+</tr>
+<tr><td><code>icuLocale</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Maps to the <code>ICU_LOCALE</code> parameter of <code>CREATE DATABASE</code>. This
+setting cannot be changed. Specifies the ICU locale when the ICU
+provider is used. This option requires <code>localeProvider</code> to be set to
+<code>icu</code>. Available from PostgreSQL 15.</p>
+</td>
+</tr>
+<tr><td><code>icuRules</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Maps to the <code>ICU_RULES</code> parameter of <code>CREATE DATABASE</code>. This setting
+cannot be changed. Specifies additional collation rules to customize
+the behavior of the default collation. This option requires
+<code>localeProvider</code> to be set to <code>icu</code>. Available from PostgreSQL 16.</p>
+</td>
+</tr>
+<tr><td><code>builtinLocale</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Maps to the <code>BUILTIN_LOCALE</code> parameter of <code>CREATE DATABASE</code>. This
+setting cannot be changed. Specifies the locale name when the
+builtin provider is used. This option requires <code>localeProvider</code> to
+be set to <code>builtin</code>. Available from PostgreSQL 17.</p>
+</td>
+</tr>
+<tr><td><code>collationVersion</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Maps to the <code>COLLATION_VERSION</code> parameter of <code>CREATE DATABASE</code>. This
+setting cannot be changed.</p>
+</td>
+</tr>
+<tr><td><code>isTemplate</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Maps to the <code>IS_TEMPLATE</code> parameter of <code>CREATE DATABASE</code> and <code>ALTER DATABASE</code>. If true, this database is considered a template and can
+be cloned by any user with <code>CREATEDB</code> privileges.</p>
+</td>
+</tr>
+<tr><td><code>allowConnections</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Maps to the <code>ALLOW_CONNECTIONS</code> parameter of <code>CREATE DATABASE</code> and
+<code>ALTER DATABASE</code>. If false then no one can connect to this database.</p>
+</td>
+</tr>
+<tr><td><code>connectionLimit</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>Maps to the <code>CONNECTION LIMIT</code> clause of <code>CREATE DATABASE</code> and
+<code>ALTER DATABASE</code>. How many concurrent connections can be made to
+this database. -1 (the default) means no limit.</p>
+</td>
+</tr>
+<tr><td><code>tablespace</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Maps to the <code>TABLESPACE</code> parameter of <code>CREATE DATABASE</code>.
+Maps to the <code>SET TABLESPACE</code> command of <code>ALTER DATABASE</code>.
+The name of the tablespace (in PostgreSQL) that will be associated
+with the new database. This tablespace will be the default
+tablespace used for objects created in this database.</p>
+</td>
+</tr>
+<tr><td><code>databaseReclaimPolicy</code><br/>
+<a href="#postgresql-cnpg-io-v1-DatabaseReclaimPolicy"><i>DatabaseReclaimPolicy</i></a>
+</td>
+<td>
+   <p>The policy for end-of-life maintenance of this database.</p>
+</td>
+</tr>
+<tr><td><code>schemas</code><br/>
+<a href="#postgresql-cnpg-io-v1-SchemaSpec"><i>[]SchemaSpec</i></a>
+</td>
+<td>
+   <p>The list of schemas to be managed in the database</p>
+</td>
+</tr>
+<tr><td><code>extensions</code><br/>
+<a href="#postgresql-cnpg-io-v1-ExtensionSpec"><i>[]ExtensionSpec</i></a>
+</td>
+<td>
+   <p>The list of extensions to be managed in the database</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-DatabaseStatus">DatabaseStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Database">Database</a></li>
+</ul>
+<p>DatabaseStatus defines the observed state of Database</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>observedGeneration</code><br/>
+<i>int64</i>
+</td>
+<td>
+   <p>A sequence number representing the latest
+desired state that was synchronized</p>
+</td>
+</tr>
+<tr><td><code>applied</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Applied is true if the database was reconciled correctly</p>
+</td>
+</tr>
+<tr><td><code>message</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Message is the reconciliation output message</p>
+</td>
+</tr>
+<tr><td><code>schemas</code><br/>
+<a href="#postgresql-cnpg-io-v1-DatabaseObjectStatus"><i>[]DatabaseObjectStatus</i></a>
+</td>
+<td>
+   <p>Schemas is the status of the managed schemas</p>
+</td>
+</tr>
+<tr><td><code>extensions</code><br/>
+<a href="#postgresql-cnpg-io-v1-DatabaseObjectStatus"><i>[]DatabaseObjectStatus</i></a>
+</td>
+<td>
+   <p>Extensions is the status of the managed extensions</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-EmbeddedObjectMetadata">EmbeddedObjectMetadata</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>EmbeddedObjectMetadata contains metadata to be inherited by all resources related to a Cluster</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>labels</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span></td>
+</tr>
+<tr><td><code>annotations</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span></td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-EnsureOption">EnsureOption</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-DatabaseObjectSpec">DatabaseObjectSpec</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-DatabaseSpec">DatabaseSpec</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-RoleConfiguration">RoleConfiguration</a></p>
+</li>
+</ul>
+<p>EnsureOption represents whether we should enforce the presence or absence of
+a Role in a PostgreSQL instance</p>
+
+<h2 id="postgresql-cnpg-io-v1-EphemeralVolumesSizeLimitConfiguration">EphemeralVolumesSizeLimitConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>EphemeralVolumesSizeLimitConfiguration contains the configuration of the ephemeral
+storage</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>shm</code><br/>
+<a href="https://pkg.go.dev/k8s.io/apimachinery/pkg/api/resource#Quantity"><i>k8s.io/apimachinery/pkg/api/resource.Quantity</i></a>
+</td>
+<td>
+   <p>Shm is the size limit of the shared memory volume</p>
+</td>
+</tr>
+<tr><td><code>temporaryData</code><br/>
+<a href="https://pkg.go.dev/k8s.io/apimachinery/pkg/api/resource#Quantity"><i>k8s.io/apimachinery/pkg/api/resource.Quantity</i></a>
+</td>
+<td>
+   <p>TemporaryData is the size limit of the temporary data volume</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ExtensionConfiguration">ExtensionConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PostgresConfiguration">PostgresConfiguration</a></li>
+</ul>
+<p>ExtensionConfiguration is the configuration used to add
+PostgreSQL extensions to the Cluster.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the extension, required</p>
+</td>
+</tr>
+<tr><td><code>image</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#imagevolumesource-v1-core"><i>core/v1.ImageVolumeSource</i></a>
+</td>
+<td>
+   <p>The image containing the extension, required</p>
+</td>
+</tr>
+<tr><td><code>extension_control_path</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>The list of directories inside the image which should be added to extension_control_path.
+If not defined, defaults to &quot;/share&quot;.</p>
+</td>
+</tr>
+<tr><td><code>dynamic_library_path</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>The list of directories inside the image which should be added to dynamic_library_path.
+If not defined, defaults to &quot;/lib&quot;.</p>
+</td>
+</tr>
+<tr><td><code>ld_library_path</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>The list of directories inside the image which should be added to ld_library_path.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ExtensionSpec">ExtensionSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-DatabaseSpec">DatabaseSpec</a></li>
+</ul>
+<p>ExtensionSpec configures an extension in a database</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>DatabaseObjectSpec</code><br/>
+<a href="#postgresql-cnpg-io-v1-DatabaseObjectSpec"><i>DatabaseObjectSpec</i></a>
+</td>
+<td>(Members of <code>DatabaseObjectSpec</code> are embedded into this type.)
+   <p>Common fields</p>
+</td>
+</tr>
+<tr><td><code>version</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The version of the extension to install. If empty, the operator will
+install the default version (whatever is specified in the
+extension's control file)</p>
+</td>
+</tr>
+<tr><td><code>schema</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the schema in which to install the extension's objects,
+in case the extension allows its contents to be relocated. If not
+specified (default), and the extension's control file does not
+specify a schema either, the current default object creation schema
+is used.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ExternalCluster">ExternalCluster</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>ExternalCluster represents the connection parameters to an
+external cluster which is used in the other sections of the configuration</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The server name, required</p>
+</td>
+</tr>
+<tr><td><code>connectionParameters</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>The list of connection parameters, such as dbname, host, username, etc</p>
+</td>
+</tr>
+<tr><td><code>sslCert</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#secretkeyselector-v1-core"><i>core/v1.SecretKeySelector</i></a>
+</td>
+<td>
+   <p>The reference to an SSL certificate to be used to connect to this
+instance</p>
+</td>
+</tr>
+<tr><td><code>sslKey</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#secretkeyselector-v1-core"><i>core/v1.SecretKeySelector</i></a>
+</td>
+<td>
+   <p>The reference to an SSL private key to be used to connect to this
+instance</p>
+</td>
+</tr>
+<tr><td><code>sslRootCert</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#secretkeyselector-v1-core"><i>core/v1.SecretKeySelector</i></a>
+</td>
+<td>
+   <p>The reference to an SSL CA public key to be used to connect to this
+instance</p>
+</td>
+</tr>
+<tr><td><code>password</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#secretkeyselector-v1-core"><i>core/v1.SecretKeySelector</i></a>
+</td>
+<td>
+   <p>The reference to the password to be used to connect to the server.
+If a password is provided, CloudNativePG creates a PostgreSQL
+passfile at <code>/controller/external/NAME/pass</code> (where &quot;NAME&quot; is the
+cluster's name). This passfile is automatically referenced in the
+connection string when establishing a connection to the remote
+PostgreSQL server from the current PostgreSQL <code>Cluster</code>. This ensures
+secure and efficient password management for external clusters.</p>
+</td>
+</tr>
+<tr><td><code>barmanObjectStore</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api/#BarmanObjectStoreConfiguration"><i>github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration</i></a>
+</td>
+<td>
+   <p>The configuration for the barman-cloud tool suite</p>
+</td>
+</tr>
+<tr><td><code>plugin</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-PluginConfiguration"><i>PluginConfiguration</i></a>
+</td>
+<td>
+   <p>The configuration of the plugin that is taking care
+of WAL archiving and backups for this external cluster</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-FailoverQuorumStatus">FailoverQuorumStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-FailoverQuorum">FailoverQuorum</a></li>
+</ul>
+<p>FailoverQuorumStatus is the latest observed status of the failover
+quorum of the PG cluster.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>method</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Contains the latest reported Method value.</p>
+</td>
+</tr>
+<tr><td><code>standbyNames</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>StandbyNames is the list of potentially synchronous
+instance names.</p>
+</td>
+</tr>
+<tr><td><code>standbyNumber</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>StandbyNumber is the number of synchronous standbys that transactions
+need to wait for replies from.</p>
+</td>
+</tr>
+<tr><td><code>primary</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Primary is the name of the primary instance that updated
+this object the latest time.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ImageCatalogRef">ImageCatalogRef</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>ImageCatalogRef defines the reference to a major version in an ImageCatalog</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>TypedLocalObjectReference</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#typedlocalobjectreference-v1-core"><i>core/v1.TypedLocalObjectReference</i></a>
+</td>
+<td>(Members of <code>TypedLocalObjectReference</code> are embedded into this type.)
+   <span class="text-muted">No description provided.</span></td>
+</tr>
+<tr><td><code>major</code> <B>[Required]</B><br/>
+<i>int</i>
+</td>
+<td>
+   <p>The major version of PostgreSQL we want to use from the ImageCatalog</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ImageCatalogSpec">ImageCatalogSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ClusterImageCatalog">ClusterImageCatalog</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ImageCatalog">ImageCatalog</a></p>
+</li>
+</ul>
+<p>ImageCatalogSpec defines the desired ImageCatalog</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>images</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-CatalogImage"><i>[]CatalogImage</i></a>
+</td>
+<td>
+   <p>List of CatalogImages available in the catalog</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ImageInfo">ImageInfo</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</a></li>
+</ul>
+<p>ImageInfo contains the information about a PostgreSQL image</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>image</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Image is the image name</p>
+</td>
+</tr>
+<tr><td><code>majorVersion</code> <B>[Required]</B><br/>
+<i>int</i>
+</td>
+<td>
+   <p>MajorVersion is the major version of the image</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-Import">Import</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-BootstrapInitDB">BootstrapInitDB</a></li>
+</ul>
+<p>Import contains the configuration to init a database from a logic snapshot of an externalCluster</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>source</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-ImportSource"><i>ImportSource</i></a>
+</td>
+<td>
+   <p>The source of the import</p>
+</td>
+</tr>
+<tr><td><code>type</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-SnapshotType"><i>SnapshotType</i></a>
+</td>
+<td>
+   <p>The import type. Can be <code>microservice</code> or <code>monolith</code>.</p>
+</td>
+</tr>
+<tr><td><code>databases</code> <B>[Required]</B><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>The databases to import</p>
+</td>
+</tr>
+<tr><td><code>roles</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>The roles to import</p>
+</td>
+</tr>
+<tr><td><code>postImportApplicationSQL</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of SQL queries to be executed as a superuser in the application
+database right after is imported - to be used with extreme care
+(by default empty). Only available in microservice type.</p>
+</td>
+</tr>
+<tr><td><code>schemaOnly</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>When set to true, only the <code>pre-data</code> and <code>post-data</code> sections of
+<code>pg_restore</code> are invoked, avoiding data import. Default: <code>false</code>.</p>
+</td>
+</tr>
+<tr><td><code>pgDumpExtraOptions</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of custom options to pass to the <code>pg_dump</code> command. IMPORTANT:
+Use these options with caution and at your own risk, as the operator
+does not validate their content. Be aware that certain options may
+conflict with the operator's intended functionality or design.</p>
+</td>
+</tr>
+<tr><td><code>pgRestoreExtraOptions</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of custom options to pass to the <code>pg_restore</code> command. IMPORTANT:
+Use these options with caution and at your own risk, as the operator
+does not validate their content. Be aware that certain options may
+conflict with the operator's intended functionality or design.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ImportSource">ImportSource</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Import">Import</a></li>
+</ul>
+<p>ImportSource describes the source for the logical snapshot</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>externalCluster</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the externalCluster used for import</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-InstanceID">InstanceID</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-BackupStatus">BackupStatus</a></li>
+</ul>
+<p>InstanceID contains the information to identify an instance</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>podName</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The pod name</p>
+</td>
+</tr>
+<tr><td><code>ContainerID</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The container ID</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-InstanceReportedState">InstanceReportedState</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</a></li>
+</ul>
+<p>InstanceReportedState describes the last reported state of an instance during a reconciliation loop</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>isPrimary</code> <B>[Required]</B><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>indicates if an instance is the primary one</p>
+</td>
+</tr>
+<tr><td><code>timeLineID</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>indicates on which TimelineId the instance is</p>
+</td>
+</tr>
+<tr><td><code>ip</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>IP address of the instance</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-IsolationCheckConfiguration">IsolationCheckConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-LivenessProbe">LivenessProbe</a></li>
+</ul>
+<p>IsolationCheckConfiguration contains the configuration for the isolation check
+functionality in the liveness probe</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>enabled</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether primary isolation checking is enabled for the liveness probe</p>
+</td>
+</tr>
+<tr><td><code>requestTimeout</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>Timeout in milliseconds for requests during the primary isolation check</p>
+</td>
+</tr>
+<tr><td><code>connectionTimeout</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>Timeout in milliseconds for connections during the primary isolation check</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-LDAPBindAsAuth">LDAPBindAsAuth</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-LDAPConfig">LDAPConfig</a></li>
+</ul>
+<p>LDAPBindAsAuth provides the required fields to use the
+bind authentication for LDAP</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>prefix</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Prefix for the bind authentication option</p>
+</td>
+</tr>
+<tr><td><code>suffix</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Suffix for the bind authentication option</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-LDAPBindSearchAuth">LDAPBindSearchAuth</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-LDAPConfig">LDAPConfig</a></li>
+</ul>
+<p>LDAPBindSearchAuth provides the required fields to use
+the bind+search LDAP authentication process</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>baseDN</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Root DN to begin the user search</p>
+</td>
+</tr>
+<tr><td><code>bindDN</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>DN of the user to bind to the directory</p>
+</td>
+</tr>
+<tr><td><code>bindPassword</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#secretkeyselector-v1-core"><i>core/v1.SecretKeySelector</i></a>
+</td>
+<td>
+   <p>Secret with the password for the user to bind to the directory</p>
+</td>
+</tr>
+<tr><td><code>searchAttribute</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Attribute to match against the username</p>
+</td>
+</tr>
+<tr><td><code>searchFilter</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Search filter to use when doing the search+bind authentication</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-LDAPConfig">LDAPConfig</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PostgresConfiguration">PostgresConfiguration</a></li>
+</ul>
+<p>LDAPConfig contains the parameters needed for LDAP authentication</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>server</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>LDAP hostname or IP address</p>
+</td>
+</tr>
+<tr><td><code>port</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>LDAP server port</p>
+</td>
+</tr>
+<tr><td><code>scheme</code><br/>
+<a href="#postgresql-cnpg-io-v1-LDAPScheme"><i>LDAPScheme</i></a>
+</td>
+<td>
+   <p>LDAP schema to be used, possible options are <code>ldap</code> and <code>ldaps</code></p>
+</td>
+</tr>
+<tr><td><code>bindAsAuth</code><br/>
+<a href="#postgresql-cnpg-io-v1-LDAPBindAsAuth"><i>LDAPBindAsAuth</i></a>
+</td>
+<td>
+   <p>Bind as authentication configuration</p>
+</td>
+</tr>
+<tr><td><code>bindSearchAuth</code><br/>
+<a href="#postgresql-cnpg-io-v1-LDAPBindSearchAuth"><i>LDAPBindSearchAuth</i></a>
+</td>
+<td>
+   <p>Bind+Search authentication configuration</p>
+</td>
+</tr>
+<tr><td><code>tls</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Set to 'true' to enable LDAP over TLS. 'false' is default</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-LDAPScheme">LDAPScheme</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-LDAPConfig">LDAPConfig</a></li>
+</ul>
+<p>LDAPScheme defines the possible schemes for LDAP</p>
+
+<h2 id="postgresql-cnpg-io-v1-LivenessProbe">LivenessProbe</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ProbesConfiguration">ProbesConfiguration</a></li>
+</ul>
+<p>LivenessProbe is the configuration of the liveness probe</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>Probe</code><br/>
+<a href="#postgresql-cnpg-io-v1-Probe"><i>Probe</i></a>
+</td>
+<td>(Members of <code>Probe</code> are embedded into this type.)
+   <p>Probe is the standard probe configuration</p>
+</td>
+</tr>
+<tr><td><code>isolationCheck</code><br/>
+<a href="#postgresql-cnpg-io-v1-IsolationCheckConfiguration"><i>IsolationCheckConfiguration</i></a>
+</td>
+<td>
+   <p>Configure the feature that extends the liveness probe for a primary
+instance. In addition to the basic checks, this verifies whether the
+primary is isolated from the Kubernetes API server and from its
+replicas, ensuring that it can be safely shut down if network
+partition or API unavailability is detected. Enabled by default.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ManagedConfiguration">ManagedConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>ManagedConfiguration represents the portions of PostgreSQL that are managed
+by the instance manager</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>roles</code><br/>
+<a href="#postgresql-cnpg-io-v1-RoleConfiguration"><i>[]RoleConfiguration</i></a>
+</td>
+<td>
+   <p>Database roles managed by the <code>Cluster</code></p>
+</td>
+</tr>
+<tr><td><code>services</code><br/>
+<a href="#postgresql-cnpg-io-v1-ManagedServices"><i>ManagedServices</i></a>
+</td>
+<td>
+   <p>Services roles managed by the <code>Cluster</code></p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ManagedRoles">ManagedRoles</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</a></li>
+</ul>
+<p>ManagedRoles tracks the status of a cluster's managed roles</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>byStatus</code><br/>
+<i>map[RoleStatus][]string</i>
+</td>
+<td>
+   <p>ByStatus gives the list of roles in each state</p>
+</td>
+</tr>
+<tr><td><code>cannotReconcile</code><br/>
+<i>map[string][]string</i>
+</td>
+<td>
+   <p>CannotReconcile lists roles that cannot be reconciled in PostgreSQL,
+with an explanation of the cause</p>
+</td>
+</tr>
+<tr><td><code>passwordStatus</code><br/>
+<a href="#postgresql-cnpg-io-v1-PasswordState"><i>map[string]PasswordState</i></a>
+</td>
+<td>
+   <p>PasswordStatus gives the last transaction id and password secret version for each managed role</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ManagedService">ManagedService</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ManagedServices">ManagedServices</a></li>
+</ul>
+<p>ManagedService represents a specific service managed by the cluster.
+It includes the type of service and its associated template specification.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>selectorType</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-ServiceSelectorType"><i>ServiceSelectorType</i></a>
+</td>
+<td>
+   <p>SelectorType specifies the type of selectors that the service will have.
+Valid values are &quot;rw&quot;, &quot;r&quot;, and &quot;ro&quot;, representing read-write, read, and read-only services.</p>
+</td>
+</tr>
+<tr><td><code>updateStrategy</code><br/>
+<a href="#postgresql-cnpg-io-v1-ServiceUpdateStrategy"><i>ServiceUpdateStrategy</i></a>
+</td>
+<td>
+   <p>UpdateStrategy describes how the service differences should be reconciled</p>
+</td>
+</tr>
+<tr><td><code>serviceTemplate</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-ServiceTemplateSpec"><i>ServiceTemplateSpec</i></a>
+</td>
+<td>
+   <p>ServiceTemplate is the template specification for the service.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ManagedServices">ManagedServices</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ManagedConfiguration">ManagedConfiguration</a></li>
+</ul>
+<p>ManagedServices represents the services managed by the cluster.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>disabledDefaultServices</code><br/>
+<a href="#postgresql-cnpg-io-v1-ServiceSelectorType"><i>[]ServiceSelectorType</i></a>
+</td>
+<td>
+   <p>DisabledDefaultServices is a list of service types that are disabled by default.
+Valid values are &quot;r&quot;, and &quot;ro&quot;, representing read, and read-only services.</p>
+</td>
+</tr>
+<tr><td><code>additional</code><br/>
+<a href="#postgresql-cnpg-io-v1-ManagedService"><i>[]ManagedService</i></a>
+</td>
+<td>
+   <p>Additional is a list of additional managed services specified by the user.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-Metadata">Metadata</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-PodTemplateSpec">PodTemplateSpec</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ServiceAccountTemplate">ServiceAccountTemplate</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ServiceTemplateSpec">ServiceTemplateSpec</a></p>
+</li>
+</ul>
+<p>Metadata is a structure similar to the metav1.ObjectMeta, but still
+parseable by controller-gen to create a suitable CRD for the user.
+The comment of PodTemplateSpec has an explanation of why we are
+not using the core data types.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the resource. Only supported for certain types</p>
+</td>
+</tr>
+<tr><td><code>labels</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>Map of string keys and values that can be used to organize and categorize
+(scope and select) objects. May match selectors of replication controllers
+and services.
+More info: http://kubernetes.io/docs/user-guide/labels</p>
+</td>
+</tr>
+<tr><td><code>annotations</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>Annotations is an unstructured key value map stored with a resource that may be
+set by external tools to store and retrieve arbitrary metadata. They are not
+queryable and should be preserved when modifying objects.
+More info: http://kubernetes.io/docs/user-guide/annotations</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-MonitoringConfiguration">MonitoringConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>MonitoringConfiguration is the type containing all the monitoring
+configuration for a certain cluster</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>disableDefaultQueries</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether the default queries should be injected.
+Set it to <code>true</code> if you don't want to inject default queries into the cluster.
+Default: false.</p>
+</td>
+</tr>
+<tr><td><code>customQueriesConfigMap</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#ConfigMapKeySelector"><i>[]github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector</i></a>
+</td>
+<td>
+   <p>The list of config maps containing the custom queries</p>
+</td>
+</tr>
+<tr><td><code>customQueriesSecret</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#SecretKeySelector"><i>[]github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector</i></a>
+</td>
+<td>
+   <p>The list of secrets containing the custom queries</p>
+</td>
+</tr>
+<tr><td><code>enablePodMonitor</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Enable or disable the <code>PodMonitor</code></p>
+</td>
+</tr>
+<tr><td><code>tls</code><br/>
+<a href="#postgresql-cnpg-io-v1-ClusterMonitoringTLSConfiguration"><i>ClusterMonitoringTLSConfiguration</i></a>
+</td>
+<td>
+   <p>Configure TLS communication for the metrics endpoint.
+Changing tls.enabled option will force a rollout of all instances.</p>
+</td>
+</tr>
+<tr><td><code>podMonitorMetricRelabelings</code><br/>
+<a href="https://pkg.go.dev/github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1#RelabelConfig"><i>[]github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig</i></a>
+</td>
+<td>
+   <p>The list of metric relabelings for the <code>PodMonitor</code>. Applied to samples before ingestion.</p>
+</td>
+</tr>
+<tr><td><code>podMonitorRelabelings</code><br/>
+<a href="https://pkg.go.dev/github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1#RelabelConfig"><i>[]github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig</i></a>
+</td>
+<td>
+   <p>The list of relabelings for the <code>PodMonitor</code>. Applied to samples before scraping.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-NodeMaintenanceWindow">NodeMaintenanceWindow</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>NodeMaintenanceWindow contains information that the operator
+will use while upgrading the underlying node.</p>
+<p>This option is only useful when the chosen storage prevents the Pods
+from being freely moved across nodes.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>reusePVC</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Reuse the existing PVC (wait for the node to come
+up again) or not (recreate it elsewhere - when <code>instances</code> &gt;1)</p>
+</td>
+</tr>
+<tr><td><code>inProgress</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Is there a node maintenance activity in progress?</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-OnlineConfiguration">OnlineConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-BackupSpec">BackupSpec</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ScheduledBackupSpec">ScheduledBackupSpec</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-VolumeSnapshotConfiguration">VolumeSnapshotConfiguration</a></p>
+</li>
+</ul>
+<p>OnlineConfiguration contains the configuration parameters for the online volume snapshot</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>waitForArchive</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>If false, the function will return immediately after the backup is completed,
+without waiting for WAL to be archived.
+This behavior is only useful with backup software that independently monitors WAL archiving.
+Otherwise, WAL required to make the backup consistent might be missing and make the backup useless.
+By default, or when this parameter is true, pg_backup_stop will wait for WAL to be archived when archiving is
+enabled.
+On a standby, this means that it will wait only when archive_mode = always.
+If write activity on the primary is low, it may be useful to run pg_switch_wal on the primary in order to trigger
+an immediate segment switch.</p>
+</td>
+</tr>
+<tr><td><code>immediateCheckpoint</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Control whether the I/O workload for the backup initial checkpoint will
+be limited, according to the <code>checkpoint_completion_target</code> setting on
+the PostgreSQL server. If set to true, an immediate checkpoint will be
+used, meaning PostgreSQL will complete the checkpoint as soon as
+possible. <code>false</code> by default.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PasswordState">PasswordState</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ManagedRoles">ManagedRoles</a></li>
+</ul>
+<p>PasswordState represents the state of the password of a managed RoleConfiguration</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>transactionID</code><br/>
+<i>int64</i>
+</td>
+<td>
+   <p>the last transaction ID to affect the role definition in PostgreSQL</p>
+</td>
+</tr>
+<tr><td><code>resourceVersion</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>the resource version of the password secret</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PgBouncerIntegrationStatus">PgBouncerIntegrationStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PoolerIntegrations">PoolerIntegrations</a></li>
+</ul>
+<p>PgBouncerIntegrationStatus encapsulates the needed integration for the pgbouncer poolers referencing the cluster</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>secrets</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span></td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PgBouncerPoolMode">PgBouncerPoolMode</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PgBouncerSpec">PgBouncerSpec</a></li>
+</ul>
+<p>PgBouncerPoolMode is the mode of PgBouncer</p>
+
+<h2 id="postgresql-cnpg-io-v1-PgBouncerSecrets">PgBouncerSecrets</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PoolerSecrets">PoolerSecrets</a></li>
+</ul>
+<p>PgBouncerSecrets contains the versions of the secrets used
+by pgbouncer</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>authQuery</code><br/>
+<a href="#postgresql-cnpg-io-v1-SecretVersion"><i>SecretVersion</i></a>
+</td>
+<td>
+   <p>The auth query secret version</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PgBouncerSpec">PgBouncerSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PoolerSpec">PoolerSpec</a></li>
+</ul>
+<p>PgBouncerSpec defines how to configure PgBouncer</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>poolMode</code><br/>
+<a href="#postgresql-cnpg-io-v1-PgBouncerPoolMode"><i>PgBouncerPoolMode</i></a>
+</td>
+<td>
+   <p>The pool mode. Default: <code>session</code>.</p>
+</td>
+</tr>
+<tr><td><code>authQuerySecret</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#LocalObjectReference"><i>github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference</i></a>
+</td>
+<td>
+   <p>The credentials of the user that need to be used for the authentication
+query. In case it is specified, also an AuthQuery
+(e.g. &quot;SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1&quot;)
+has to be specified and no automatic CNPG Cluster integration will be triggered.</p>
+</td>
+</tr>
+<tr><td><code>authQuery</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The query that will be used to download the hash of the password
+of a certain user. Default: &quot;SELECT usename, passwd FROM public.user_search($1)&quot;.
+In case it is specified, also an AuthQuerySecret has to be specified and
+no automatic CNPG Cluster integration will be triggered.</p>
+</td>
+</tr>
+<tr><td><code>parameters</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>Additional parameters to be passed to PgBouncer - please check
+the CNPG documentation for a list of options you can configure</p>
+</td>
+</tr>
+<tr><td><code>pg_hba</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>PostgreSQL Host Based Authentication rules (lines to be appended
+to the pg_hba.conf file)</p>
+</td>
+</tr>
+<tr><td><code>paused</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>When set to <code>true</code>, PgBouncer will disconnect from the PostgreSQL
+server, first waiting for all queries to complete, and pause all new
+client connections until this value is set to <code>false</code> (default). Internally,
+the operator calls PgBouncer's <code>PAUSE</code> and <code>RESUME</code> commands.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PluginConfiguration">PluginConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ExternalCluster">ExternalCluster</a></p>
+</li>
+</ul>
+<p>PluginConfiguration specifies a plugin that need to be loaded for this
+cluster to be reconciled</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name is the plugin name</p>
+</td>
+</tr>
+<tr><td><code>enabled</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Enabled is true if this plugin will be used</p>
+</td>
+</tr>
+<tr><td><code>isWALArchiver</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Only one plugin can be declared as WALArchiver.
+Cannot be active if &quot;.spec.backup.barmanObjectStore&quot; configuration is present.</p>
+</td>
+</tr>
+<tr><td><code>parameters</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>Parameters is the configuration of the plugin</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PluginStatus">PluginStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</a></li>
+</ul>
+<p>PluginStatus is the status of a loaded plugin</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name is the name of the plugin</p>
+</td>
+</tr>
+<tr><td><code>version</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Version is the version of the plugin loaded by the
+latest reconciliation loop</p>
+</td>
+</tr>
+<tr><td><code>capabilities</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>Capabilities are the list of capabilities of the
+plugin</p>
+</td>
+</tr>
+<tr><td><code>operatorCapabilities</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>OperatorCapabilities are the list of capabilities of the
+plugin regarding the reconciler</p>
+</td>
+</tr>
+<tr><td><code>walCapabilities</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>WALCapabilities are the list of capabilities of the
+plugin regarding the WAL management</p>
+</td>
+</tr>
+<tr><td><code>backupCapabilities</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>BackupCapabilities are the list of capabilities of the
+plugin regarding the Backup management</p>
+</td>
+</tr>
+<tr><td><code>restoreJobHookCapabilities</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>RestoreJobHookCapabilities are the list of capabilities of the
+plugin regarding the RestoreJobHook management</p>
+</td>
+</tr>
+<tr><td><code>status</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Status contain the status reported by the plugin through the SetStatusInCluster interface</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PodTemplateSpec">PodTemplateSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PoolerSpec">PoolerSpec</a></li>
+</ul>
+<p>PodTemplateSpec is a structure allowing the user to set
+a template for Pod generation.</p>
+<p>Unfortunately we can't use the corev1.PodTemplateSpec
+type because the generated CRD won't have the field for the
+metadata section.</p>
+<p>References:
+https://github.com/kubernetes-sigs/controller-tools/issues/385
+https://github.com/kubernetes-sigs/controller-tools/issues/448
+https://github.com/prometheus-operator/prometheus-operator/issues/3041</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>metadata</code><br/>
+<a href="#postgresql-cnpg-io-v1-Metadata"><i>Metadata</i></a>
+</td>
+<td>
+   <p>Standard object's metadata.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</p>
+</td>
+</tr>
+<tr><td><code>spec</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#podspec-v1-core"><i>core/v1.PodSpec</i></a>
+</td>
+<td>
+   <p>Specification of the desired behavior of the pod.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PodTopologyLabels">PodTopologyLabels</h2>
+<p>(Alias of <code>map[string]string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Topology">Topology</a></li>
+</ul>
+<p>PodTopologyLabels represent the topology of a Pod. map[labelName]labelValue</p>
+
+<h2 id="postgresql-cnpg-io-v1-PoolerIntegrations">PoolerIntegrations</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</a></li>
+</ul>
+<p>PoolerIntegrations encapsulates the needed integration for the poolers referencing the cluster</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>pgBouncerIntegration</code><br/>
+<a href="#postgresql-cnpg-io-v1-PgBouncerIntegrationStatus"><i>PgBouncerIntegrationStatus</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span></td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PoolerMonitoringConfiguration">PoolerMonitoringConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PoolerSpec">PoolerSpec</a></li>
+</ul>
+<p>PoolerMonitoringConfiguration is the type containing all the monitoring
+configuration for a certain Pooler.</p>
+<p>Mirrors the Cluster's MonitoringConfiguration but without the custom queries
+part for now.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>enablePodMonitor</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Enable or disable the <code>PodMonitor</code></p>
+</td>
+</tr>
+<tr><td><code>podMonitorMetricRelabelings</code><br/>
+<a href="https://pkg.go.dev/github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1#RelabelConfig"><i>[]github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig</i></a>
+</td>
+<td>
+   <p>The list of metric relabelings for the <code>PodMonitor</code>. Applied to samples before ingestion.</p>
+</td>
+</tr>
+<tr><td><code>podMonitorRelabelings</code><br/>
+<a href="https://pkg.go.dev/github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1#RelabelConfig"><i>[]github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig</i></a>
+</td>
+<td>
+   <p>The list of relabelings for the <code>PodMonitor</code>. Applied to samples before scraping.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PoolerSecrets">PoolerSecrets</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PoolerStatus">PoolerStatus</a></li>
+</ul>
+<p>PoolerSecrets contains the versions of all the secrets used</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>serverTLS</code><br/>
+<a href="#postgresql-cnpg-io-v1-SecretVersion"><i>SecretVersion</i></a>
+</td>
+<td>
+   <p>The server TLS secret version</p>
+</td>
+</tr>
+<tr><td><code>serverCA</code><br/>
+<a href="#postgresql-cnpg-io-v1-SecretVersion"><i>SecretVersion</i></a>
+</td>
+<td>
+   <p>The server CA secret version</p>
+</td>
+</tr>
+<tr><td><code>clientCA</code><br/>
+<a href="#postgresql-cnpg-io-v1-SecretVersion"><i>SecretVersion</i></a>
+</td>
+<td>
+   <p>The client CA secret version</p>
+</td>
+</tr>
+<tr><td><code>pgBouncerSecrets</code><br/>
+<a href="#postgresql-cnpg-io-v1-PgBouncerSecrets"><i>PgBouncerSecrets</i></a>
+</td>
+<td>
+   <p>The version of the secrets used by PgBouncer</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PoolerSpec">PoolerSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Pooler">Pooler</a></li>
+</ul>
+<p>PoolerSpec defines the desired state of Pooler</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>cluster</code> <B>[Required]</B><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#LocalObjectReference"><i>github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference</i></a>
+</td>
+<td>
+   <p>This is the cluster reference on which the Pooler will work.
+Pooler name should never match with any cluster name within the same namespace.</p>
+</td>
+</tr>
+<tr><td><code>type</code><br/>
+<a href="#postgresql-cnpg-io-v1-PoolerType"><i>PoolerType</i></a>
+</td>
+<td>
+   <p>Type of service to forward traffic to. Default: <code>rw</code>.</p>
+</td>
+</tr>
+<tr><td><code>instances</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>The number of replicas we want. Default: 1.</p>
+</td>
+</tr>
+<tr><td><code>template</code><br/>
+<a href="#postgresql-cnpg-io-v1-PodTemplateSpec"><i>PodTemplateSpec</i></a>
+</td>
+<td>
+   <p>The template of the Pod to be created</p>
+</td>
+</tr>
+<tr><td><code>pgbouncer</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-PgBouncerSpec"><i>PgBouncerSpec</i></a>
+</td>
+<td>
+   <p>The PgBouncer configuration</p>
+</td>
+</tr>
+<tr><td><code>deploymentStrategy</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#deploymentstrategy-v1-apps"><i>apps/v1.DeploymentStrategy</i></a>
+</td>
+<td>
+   <p>The deployment strategy to use for pgbouncer to replace existing pods with new ones</p>
+</td>
+</tr>
+<tr><td><code>monitoring</code><br/>
+<a href="#postgresql-cnpg-io-v1-PoolerMonitoringConfiguration"><i>PoolerMonitoringConfiguration</i></a>
+</td>
+<td>
+   <p>The configuration of the monitoring infrastructure of this pooler.</p>
+</td>
+</tr>
+<tr><td><code>serviceTemplate</code><br/>
+<a href="#postgresql-cnpg-io-v1-ServiceTemplateSpec"><i>ServiceTemplateSpec</i></a>
+</td>
+<td>
+   <p>Template for the Service to be created</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PoolerStatus">PoolerStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Pooler">Pooler</a></li>
+</ul>
+<p>PoolerStatus defines the observed state of Pooler</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>secrets</code><br/>
+<a href="#postgresql-cnpg-io-v1-PoolerSecrets"><i>PoolerSecrets</i></a>
+</td>
+<td>
+   <p>The resource version of the config object</p>
+</td>
+</tr>
+<tr><td><code>instances</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>The number of pods trying to be scheduled</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PoolerType">PoolerType</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PoolerSpec">PoolerSpec</a></li>
+</ul>
+<p>PoolerType is the type of the connection pool, meaning the service
+we are targeting. Allowed values are <code>rw</code> and <code>ro</code>.</p>
+
+<h2 id="postgresql-cnpg-io-v1-PostgresConfiguration">PostgresConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>PostgresConfiguration defines the PostgreSQL configuration</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>parameters</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>PostgreSQL configuration options (postgresql.conf)</p>
+</td>
+</tr>
+<tr><td><code>synchronous</code><br/>
+<a href="#postgresql-cnpg-io-v1-SynchronousReplicaConfiguration"><i>SynchronousReplicaConfiguration</i></a>
+</td>
+<td>
+   <p>Configuration of the PostgreSQL synchronous replication feature</p>
+</td>
+</tr>
+<tr><td><code>pg_hba</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>PostgreSQL Host Based Authentication rules (lines to be appended
+to the pg_hba.conf file)</p>
+</td>
+</tr>
+<tr><td><code>pg_ident</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>PostgreSQL User Name Maps rules (lines to be appended
+to the pg_ident.conf file)</p>
+</td>
+</tr>
+<tr><td><code>syncReplicaElectionConstraint</code><br/>
+<a href="#postgresql-cnpg-io-v1-SyncReplicaElectionConstraints"><i>SyncReplicaElectionConstraints</i></a>
+</td>
+<td>
+   <p>Requirements to be met by sync replicas. This will affect how the &quot;synchronous_standby_names&quot; parameter will be
+set up.</p>
+</td>
+</tr>
+<tr><td><code>shared_preload_libraries</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>Lists of shared preload libraries to add to the default ones</p>
+</td>
+</tr>
+<tr><td><code>ldap</code><br/>
+<a href="#postgresql-cnpg-io-v1-LDAPConfig"><i>LDAPConfig</i></a>
+</td>
+<td>
+   <p>Options to specify LDAP configuration</p>
+</td>
+</tr>
+<tr><td><code>promotionTimeout</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>Specifies the maximum number of seconds to wait when promoting an instance to primary.
+Default value is 40000000, greater than one year in seconds,
+big enough to simulate an infinite timeout</p>
+</td>
+</tr>
+<tr><td><code>enableAlterSystem</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>If this parameter is true, the user will be able to invoke <code>ALTER SYSTEM</code>
+on this CloudNativePG Cluster.
+This should only be used for debugging and troubleshooting.
+Defaults to false.</p>
+</td>
+</tr>
+<tr><td><code>extensions</code><br/>
+<a href="#postgresql-cnpg-io-v1-ExtensionConfiguration"><i>[]ExtensionConfiguration</i></a>
+</td>
+<td>
+   <p>The configuration of the extensions to be added</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PrimaryUpdateMethod">PrimaryUpdateMethod</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>PrimaryUpdateMethod contains the method to use when upgrading
+the primary server of the cluster as part of rolling updates</p>
+
+<h2 id="postgresql-cnpg-io-v1-PrimaryUpdateStrategy">PrimaryUpdateStrategy</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>PrimaryUpdateStrategy contains the strategy to follow when upgrading
+the primary server of the cluster as part of rolling updates</p>
+
+<h2 id="postgresql-cnpg-io-v1-Probe">Probe</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-LivenessProbe">LivenessProbe</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ProbeWithStrategy">ProbeWithStrategy</a></p>
+</li>
+</ul>
+<p>Probe describes a health check to be performed against a container to determine whether it is
+alive or ready to receive traffic.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>initialDelaySeconds</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>Number of seconds after the container has started before liveness probes are initiated.
+More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes</p>
+</td>
+</tr>
+<tr><td><code>timeoutSeconds</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>Number of seconds after which the probe times out.
+Defaults to 1 second. Minimum value is 1.
+More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes</p>
+</td>
+</tr>
+<tr><td><code>periodSeconds</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>How often (in seconds) to perform the probe.
+Default to 10 seconds. Minimum value is 1.</p>
+</td>
+</tr>
+<tr><td><code>successThreshold</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>Minimum consecutive successes for the probe to be considered successful after having failed.
+Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.</p>
+</td>
+</tr>
+<tr><td><code>failureThreshold</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>Minimum consecutive failures for the probe to be considered failed after having succeeded.
+Defaults to 3. Minimum value is 1.</p>
+</td>
+</tr>
+<tr><td><code>terminationGracePeriodSeconds</code><br/>
+<i>int64</i>
+</td>
+<td>
+   <p>Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
+The grace period is the duration in seconds after the processes running in the pod are sent
+a termination signal and the time when the processes are forcibly halted with a kill signal.
+Set this value longer than the expected cleanup time for your process.
+If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
+value overrides the value provided by the pod spec.
+Value must be non-negative integer. The value zero indicates stop immediately via
+the kill signal (no opportunity to shut down).
+This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
+Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ProbeStrategyType">ProbeStrategyType</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ProbeWithStrategy">ProbeWithStrategy</a></li>
+</ul>
+<p>ProbeStrategyType is the type of the strategy used to declare a PostgreSQL instance
+ready</p>
+
+<h2 id="postgresql-cnpg-io-v1-ProbeWithStrategy">ProbeWithStrategy</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ProbesConfiguration">ProbesConfiguration</a></li>
+</ul>
+<p>ProbeWithStrategy is the configuration of the startup probe</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>Probe</code><br/>
+<a href="#postgresql-cnpg-io-v1-Probe"><i>Probe</i></a>
+</td>
+<td>(Members of <code>Probe</code> are embedded into this type.)
+   <p>Probe is the standard probe configuration</p>
+</td>
+</tr>
+<tr><td><code>type</code><br/>
+<a href="#postgresql-cnpg-io-v1-ProbeStrategyType"><i>ProbeStrategyType</i></a>
+</td>
+<td>
+   <p>The probe strategy</p>
+</td>
+</tr>
+<tr><td><code>maximumLag</code><br/>
+<a href="https://pkg.go.dev/k8s.io/apimachinery/pkg/api/resource#Quantity"><i>k8s.io/apimachinery/pkg/api/resource.Quantity</i></a>
+</td>
+<td>
+   <p>Lag limit. Used only for <code>streaming</code> strategy</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ProbesConfiguration">ProbesConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>ProbesConfiguration represent the configuration for the probes
+to be injected in the PostgreSQL Pods</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>startup</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-ProbeWithStrategy"><i>ProbeWithStrategy</i></a>
+</td>
+<td>
+   <p>The startup probe configuration</p>
+</td>
+</tr>
+<tr><td><code>liveness</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-LivenessProbe"><i>LivenessProbe</i></a>
+</td>
+<td>
+   <p>The liveness probe configuration</p>
+</td>
+</tr>
+<tr><td><code>readiness</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-ProbeWithStrategy"><i>ProbeWithStrategy</i></a>
+</td>
+<td>
+   <p>The readiness probe configuration</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PublicationReclaimPolicy">PublicationReclaimPolicy</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PublicationSpec">PublicationSpec</a></li>
+</ul>
+<p>PublicationReclaimPolicy defines a policy for end-of-life maintenance of Publications.</p>
+
+<h2 id="postgresql-cnpg-io-v1-PublicationSpec">PublicationSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Publication">Publication</a></li>
+</ul>
+<p>PublicationSpec defines the desired state of Publication</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>cluster</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#localobjectreference-v1-core"><i>core/v1.LocalObjectReference</i></a>
+</td>
+<td>
+   <p>The name of the PostgreSQL cluster that identifies the &quot;publisher&quot;</p>
+</td>
+</tr>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the publication inside PostgreSQL</p>
+</td>
+</tr>
+<tr><td><code>dbname</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the database where the publication will be installed in
+the &quot;publisher&quot; cluster</p>
+</td>
+</tr>
+<tr><td><code>parameters</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>Publication parameters part of the <code>WITH</code> clause as expected by
+PostgreSQL <code>CREATE PUBLICATION</code> command</p>
+</td>
+</tr>
+<tr><td><code>target</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-PublicationTarget"><i>PublicationTarget</i></a>
+</td>
+<td>
+   <p>Target of the publication as expected by PostgreSQL <code>CREATE PUBLICATION</code> command</p>
+</td>
+</tr>
+<tr><td><code>publicationReclaimPolicy</code><br/>
+<a href="#postgresql-cnpg-io-v1-PublicationReclaimPolicy"><i>PublicationReclaimPolicy</i></a>
+</td>
+<td>
+   <p>The policy for end-of-life maintenance of this publication</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PublicationStatus">PublicationStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Publication">Publication</a></li>
+</ul>
+<p>PublicationStatus defines the observed state of Publication</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>observedGeneration</code><br/>
+<i>int64</i>
+</td>
+<td>
+   <p>A sequence number representing the latest
+desired state that was synchronized</p>
+</td>
+</tr>
+<tr><td><code>applied</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Applied is true if the publication was reconciled correctly</p>
+</td>
+</tr>
+<tr><td><code>message</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Message is the reconciliation output message</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PublicationTarget">PublicationTarget</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PublicationSpec">PublicationSpec</a></li>
+</ul>
+<p>PublicationTarget is what this publication should publish</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>allTables</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Marks the publication as one that replicates changes for all tables
+in the database, including tables created in the future.
+Corresponding to <code>FOR ALL TABLES</code> in PostgreSQL.</p>
+</td>
+</tr>
+<tr><td><code>objects</code><br/>
+<a href="#postgresql-cnpg-io-v1-PublicationTargetObject"><i>[]PublicationTargetObject</i></a>
+</td>
+<td>
+   <p>Just the following schema objects</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PublicationTargetObject">PublicationTargetObject</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PublicationTarget">PublicationTarget</a></li>
+</ul>
+<p>PublicationTargetObject is an object to publish</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>tablesInSchema</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Marks the publication as one that replicates changes for all tables
+in the specified list of schemas, including tables created in the
+future. Corresponding to <code>FOR TABLES IN SCHEMA</code> in PostgreSQL.</p>
+</td>
+</tr>
+<tr><td><code>table</code><br/>
+<a href="#postgresql-cnpg-io-v1-PublicationTargetTable"><i>PublicationTargetTable</i></a>
+</td>
+<td>
+   <p>Specifies a list of tables to add to the publication. Corresponding
+to <code>FOR TABLE</code> in PostgreSQL.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-PublicationTargetTable">PublicationTargetTable</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PublicationTargetObject">PublicationTargetObject</a></li>
+</ul>
+<p>PublicationTargetTable is a table to publish</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>only</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether to limit to the table only or include all its descendants</p>
+</td>
+</tr>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The table name</p>
+</td>
+</tr>
+<tr><td><code>schema</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The schema name</p>
+</td>
+</tr>
+<tr><td><code>columns</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>The columns to publish</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-RecoveryTarget">RecoveryTarget</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-BootstrapRecovery">BootstrapRecovery</a></li>
+</ul>
+<p>RecoveryTarget allows to configure the moment where the recovery process
+will stop. All the target options except TargetTLI are mutually exclusive.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>backupID</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The ID of the backup from which to start the recovery process.
+If empty (default) the operator will automatically detect the backup
+based on targetTime or targetLSN if specified. Otherwise use the
+latest available backup in chronological order.</p>
+</td>
+</tr>
+<tr><td><code>targetTLI</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The target timeline (&quot;latest&quot; or a positive integer)</p>
+</td>
+</tr>
+<tr><td><code>targetXID</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The target transaction ID</p>
+</td>
+</tr>
+<tr><td><code>targetName</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The target name (to be previously created
+with <code>pg_create_restore_point</code>)</p>
+</td>
+</tr>
+<tr><td><code>targetLSN</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The target LSN (Log Sequence Number)</p>
+</td>
+</tr>
+<tr><td><code>targetTime</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The target time as a timestamp in the RFC3339 standard</p>
+</td>
+</tr>
+<tr><td><code>targetImmediate</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>End recovery as soon as a consistent state is reached</p>
+</td>
+</tr>
+<tr><td><code>exclusive</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Set the target to be exclusive. If omitted, defaults to false, so that
+in Postgres, <code>recovery_target_inclusive</code> will be true</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ReplicaClusterConfiguration">ReplicaClusterConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>ReplicaClusterConfiguration encapsulates the configuration of a replica
+cluster</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>self</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Self defines the name of this cluster. It is used to determine if this is a primary
+or a replica cluster, comparing it with <code>primary</code></p>
+</td>
+</tr>
+<tr><td><code>primary</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Primary defines which Cluster is defined to be the primary in the distributed PostgreSQL cluster, based on the
+topology specified in externalClusters</p>
+</td>
+</tr>
+<tr><td><code>source</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the external cluster which is the replication origin</p>
+</td>
+</tr>
+<tr><td><code>enabled</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>If replica mode is enabled, this cluster will be a replica of an
+existing cluster. Replica cluster can be created from a recovery
+object store or via streaming through pg_basebackup.
+Refer to the Replica clusters page of the documentation for more information.</p>
+</td>
+</tr>
+<tr><td><code>promotionToken</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>A demotion token generated by an external cluster used to
+check if the promotion requirements are met.</p>
+</td>
+</tr>
+<tr><td><code>minApplyDelay</code><br/>
+<a href="https://pkg.go.dev/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><i>meta/v1.Duration</i></a>
+</td>
+<td>
+   <p>When replica mode is enabled, this parameter allows you to replay
+transactions only when the system time is at least the configured
+time past the commit time. This provides an opportunity to correct
+data loss errors. Note that when this parameter is set, a promotion
+token cannot be used.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ReplicationSlotsConfiguration">ReplicationSlotsConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>ReplicationSlotsConfiguration encapsulates the configuration
+of replication slots</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>highAvailability</code><br/>
+<a href="#postgresql-cnpg-io-v1-ReplicationSlotsHAConfiguration"><i>ReplicationSlotsHAConfiguration</i></a>
+</td>
+<td>
+   <p>Replication slots for high availability configuration</p>
+</td>
+</tr>
+<tr><td><code>updateInterval</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>Standby will update the status of the local replication slots
+every <code>updateInterval</code> seconds (default 30).</p>
+</td>
+</tr>
+<tr><td><code>synchronizeReplicas</code><br/>
+<a href="#postgresql-cnpg-io-v1-SynchronizeReplicasConfiguration"><i>SynchronizeReplicasConfiguration</i></a>
+</td>
+<td>
+   <p>Configures the synchronization of the user defined physical replication slots</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ReplicationSlotsHAConfiguration">ReplicationSlotsHAConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ReplicationSlotsConfiguration">ReplicationSlotsConfiguration</a></li>
+</ul>
+<p>ReplicationSlotsHAConfiguration encapsulates the configuration
+of the replication slots that are automatically managed by
+the operator to control the streaming replication connections
+with the standby instances for high availability (HA) purposes.
+Replication slots are a PostgreSQL feature that makes sure
+that PostgreSQL automatically keeps WAL files in the primary
+when a streaming client (in this specific case a replica that
+is part of the HA cluster) gets disconnected.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>enabled</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>If enabled (default), the operator will automatically manage replication slots
+on the primary instance and use them in streaming replication
+connections with all the standby instances that are part of the HA
+cluster. If disabled, the operator will not take advantage
+of replication slots in streaming connections with the replicas.
+This feature also controls replication slots in replica cluster,
+from the designated primary to its cascading replicas.</p>
+</td>
+</tr>
+<tr><td><code>slotPrefix</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Prefix for replication slots managed by the operator for HA.
+It may only contain lower case letters, numbers, and the underscore character.
+This can only be set at creation time. By default set to <code>_cnpg_</code>.</p>
+</td>
+</tr>
+<tr><td><code>synchronizeLogicalDecoding</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>When enabled, the operator automatically manages synchronization of logical
+decoding (replication) slots across high-availability clusters.</p>
+<p>Requires one of the following conditions:</p>
+<ul>
+<li>PostgreSQL version 17 or later</li>
+<li>PostgreSQL version &lt; 17 with pg_failover_slots extension enabled</li>
+</ul>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-RoleConfiguration">RoleConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ManagedConfiguration">ManagedConfiguration</a></li>
+</ul>
+<p>RoleConfiguration is the representation, in Kubernetes, of a PostgreSQL role
+with the additional field Ensure specifying whether to ensure the presence or
+absence of the role in the database</p>
+<p>The defaults of the CREATE ROLE command are applied
+Reference: https://www.postgresql.org/docs/current/sql-createrole.html</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name of the role</p>
+</td>
+</tr>
+<tr><td><code>comment</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Description of the role</p>
+</td>
+</tr>
+<tr><td><code>ensure</code><br/>
+<a href="#postgresql-cnpg-io-v1-EnsureOption"><i>EnsureOption</i></a>
+</td>
+<td>
+   <p>Ensure the role is <code>present</code> or <code>absent</code> - defaults to &quot;present&quot;</p>
+</td>
+</tr>
+<tr><td><code>passwordSecret</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#LocalObjectReference"><i>github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference</i></a>
+</td>
+<td>
+   <p>Secret containing the password of the role (if present)
+If null, the password will be ignored unless DisablePassword is set</p>
+</td>
+</tr>
+<tr><td><code>connectionLimit</code><br/>
+<i>int64</i>
+</td>
+<td>
+   <p>If the role can log in, this specifies how many concurrent
+connections the role can make. <code>-1</code> (the default) means no limit.</p>
+</td>
+</tr>
+<tr><td><code>validUntil</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#time-v1-meta"><i>meta/v1.Time</i></a>
+</td>
+<td>
+   <p>Date and time after which the role's password is no longer valid.
+When omitted, the password will never expire (default).</p>
+</td>
+</tr>
+<tr><td><code>inRoles</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of one or more existing roles to which this role will be
+immediately added as a new member. Default empty.</p>
+</td>
+</tr>
+<tr><td><code>inherit</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether a role &quot;inherits&quot; the privileges of roles it is a member of.
+Defaults is <code>true</code>.</p>
+</td>
+</tr>
+<tr><td><code>disablePassword</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>DisablePassword indicates that a role's password should be set to NULL in Postgres</p>
+</td>
+</tr>
+<tr><td><code>superuser</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether the role is a <code>superuser</code> who can override all access
+restrictions within the database - superuser status is dangerous and
+should be used only when really needed. You must yourself be a
+superuser to create a new superuser. Defaults is <code>false</code>.</p>
+</td>
+</tr>
+<tr><td><code>createdb</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>When set to <code>true</code>, the role being defined will be allowed to create
+new databases. Specifying <code>false</code> (default) will deny a role the
+ability to create databases.</p>
+</td>
+</tr>
+<tr><td><code>createrole</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether the role will be permitted to create, alter, drop, comment
+on, change the security label for, and grant or revoke membership in
+other roles. Default is <code>false</code>.</p>
+</td>
+</tr>
+<tr><td><code>login</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether the role is allowed to log in. A role having the <code>login</code>
+attribute can be thought of as a user. Roles without this attribute
+are useful for managing database privileges, but are not users in
+the usual sense of the word. Default is <code>false</code>.</p>
+</td>
+</tr>
+<tr><td><code>replication</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether a role is a replication role. A role must have this
+attribute (or be a superuser) in order to be able to connect to the
+server in replication mode (physical or logical replication) and in
+order to be able to create or drop replication slots. A role having
+the <code>replication</code> attribute is a very highly privileged role, and
+should only be used on roles actually used for replication. Default
+is <code>false</code>.</p>
+</td>
+</tr>
+<tr><td><code>bypassrls</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether a role bypasses every row-level security (RLS) policy.
+Default is <code>false</code>.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-SQLRefs">SQLRefs</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-BootstrapInitDB">BootstrapInitDB</a></li>
+</ul>
+<p>SQLRefs holds references to ConfigMaps or Secrets
+containing SQL files. The references are processed in a specific order:
+first, all Secrets are processed, followed by all ConfigMaps.
+Within each group, the processing order follows the sequence specified
+in their respective arrays.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>secretRefs</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#SecretKeySelector"><i>[]github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector</i></a>
+</td>
+<td>
+   <p>SecretRefs holds a list of references to Secrets</p>
+</td>
+</tr>
+<tr><td><code>configMapRefs</code><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#ConfigMapKeySelector"><i>[]github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector</i></a>
+</td>
+<td>
+   <p>ConfigMapRefs holds a list of references to ConfigMaps</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ScheduledBackupSpec">ScheduledBackupSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ScheduledBackup">ScheduledBackup</a></li>
+</ul>
+<p>ScheduledBackupSpec defines the desired state of ScheduledBackup</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>suspend</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>If this backup is suspended or not</p>
+</td>
+</tr>
+<tr><td><code>immediate</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>If the first backup has to be immediately start after creation or not</p>
+</td>
+</tr>
+<tr><td><code>schedule</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The schedule does not follow the same format used in Kubernetes CronJobs
+as it includes an additional seconds specifier,
+see https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format</p>
+</td>
+</tr>
+<tr><td><code>cluster</code> <B>[Required]</B><br/>
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/machinery/pkg/api/#LocalObjectReference"><i>github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference</i></a>
+</td>
+<td>
+   <p>The cluster to backup</p>
+</td>
+</tr>
+<tr><td><code>backupOwnerReference</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Indicates which ownerReference should be put inside the created backup resources.<!-- raw HTML omitted --></p>
+<ul>
+<li>none: no owner reference for created backup objects (same behavior as before the field was introduced)<!-- raw HTML omitted --></li>
+<li>self: sets the Scheduled backup object as owner of the backup<!-- raw HTML omitted --></li>
+<li>cluster: set the cluster as owner of the backup<!-- raw HTML omitted --></li>
+</ul>
+</td>
+</tr>
+<tr><td><code>target</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupTarget"><i>BackupTarget</i></a>
+</td>
+<td>
+   <p>The policy to decide which instance should perform this backup. If empty,
+it defaults to <code>cluster.spec.backup.target</code>.
+Available options are empty string, <code>primary</code> and <code>prefer-standby</code>.
+<code>primary</code> to have backups run always on primary instances,
+<code>prefer-standby</code> to have backups run preferably on the most updated
+standby, if available.</p>
+</td>
+</tr>
+<tr><td><code>method</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupMethod"><i>BackupMethod</i></a>
+</td>
+<td>
+   <p>The backup method to be used, possible options are <code>barmanObjectStore</code>,
+<code>volumeSnapshot</code> or <code>plugin</code>. Defaults to: <code>barmanObjectStore</code>.</p>
+</td>
+</tr>
+<tr><td><code>pluginConfiguration</code><br/>
+<a href="#postgresql-cnpg-io-v1-BackupPluginConfiguration"><i>BackupPluginConfiguration</i></a>
+</td>
+<td>
+   <p>Configuration parameters passed to the plugin managing this backup</p>
+</td>
+</tr>
+<tr><td><code>online</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether the default type of backup with volume snapshots is
+online/hot (<code>true</code>, default) or offline/cold (<code>false</code>)
+Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online'</p>
+</td>
+</tr>
+<tr><td><code>onlineConfiguration</code><br/>
+<a href="#postgresql-cnpg-io-v1-OnlineConfiguration"><i>OnlineConfiguration</i></a>
+</td>
+<td>
+   <p>Configuration parameters to control the online/hot backup with volume snapshots
+Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ScheduledBackupStatus">ScheduledBackupStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ScheduledBackup">ScheduledBackup</a></li>
+</ul>
+<p>ScheduledBackupStatus defines the observed state of ScheduledBackup</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>lastCheckTime</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#time-v1-meta"><i>meta/v1.Time</i></a>
+</td>
+<td>
+   <p>The latest time the schedule</p>
+</td>
+</tr>
+<tr><td><code>lastScheduleTime</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#time-v1-meta"><i>meta/v1.Time</i></a>
+</td>
+<td>
+   <p>Information when was the last time that backup was successfully scheduled.</p>
+</td>
+</tr>
+<tr><td><code>nextScheduleTime</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#time-v1-meta"><i>meta/v1.Time</i></a>
+</td>
+<td>
+   <p>Next time we will run a backup</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-SchemaSpec">SchemaSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-DatabaseSpec">DatabaseSpec</a></li>
+</ul>
+<p>SchemaSpec configures a schema in a database</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>DatabaseObjectSpec</code><br/>
+<a href="#postgresql-cnpg-io-v1-DatabaseObjectSpec"><i>DatabaseObjectSpec</i></a>
+</td>
+<td>(Members of <code>DatabaseObjectSpec</code> are embedded into this type.)
+   <p>Common fields</p>
+</td>
+</tr>
+<tr><td><code>owner</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The role name of the user who owns the schema inside PostgreSQL.
+It maps to the <code>AUTHORIZATION</code> parameter of <code>CREATE SCHEMA</code> and the
+<code>OWNER TO</code> command of <code>ALTER SCHEMA</code>.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-SecretVersion">SecretVersion</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-PgBouncerSecrets">PgBouncerSecrets</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-PoolerSecrets">PoolerSecrets</a></p>
+</li>
+</ul>
+<p>SecretVersion contains a secret name and its ResourceVersion</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the secret</p>
+</td>
+</tr>
+<tr><td><code>version</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The ResourceVersion of the secret</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-SecretsResourceVersion">SecretsResourceVersion</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</a></li>
+</ul>
+<p>SecretsResourceVersion is the resource versions of the secrets
+managed by the operator</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>superuserSecretVersion</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The resource version of the &quot;postgres&quot; user secret</p>
+</td>
+</tr>
+<tr><td><code>replicationSecretVersion</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The resource version of the &quot;streaming_replica&quot; user secret</p>
+</td>
+</tr>
+<tr><td><code>applicationSecretVersion</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The resource version of the &quot;app&quot; user secret</p>
+</td>
+</tr>
+<tr><td><code>managedRoleSecretVersion</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>The resource versions of the managed roles secrets</p>
+</td>
+</tr>
+<tr><td><code>caSecretVersion</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Unused. Retained for compatibility with old versions.</p>
+</td>
+</tr>
+<tr><td><code>clientCaSecretVersion</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The resource version of the PostgreSQL client-side CA secret version</p>
+</td>
+</tr>
+<tr><td><code>serverCaSecretVersion</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The resource version of the PostgreSQL server-side CA secret version</p>
+</td>
+</tr>
+<tr><td><code>serverSecretVersion</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The resource version of the PostgreSQL server-side secret version</p>
+</td>
+</tr>
+<tr><td><code>barmanEndpointCA</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The resource version of the Barman Endpoint CA if provided</p>
+</td>
+</tr>
+<tr><td><code>externalClusterSecretVersion</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>The resource versions of the external cluster secrets</p>
+</td>
+</tr>
+<tr><td><code>metrics</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>A map with the versions of all the secrets used to pass metrics.
+Map keys are the secret names, map values are the versions</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ServiceAccountTemplate">ServiceAccountTemplate</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>ServiceAccountTemplate contains the template needed to generate the service accounts</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>metadata</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-Metadata"><i>Metadata</i></a>
+</td>
+<td>
+   <p>Metadata are the metadata to be used for the generated
+service account</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ServiceSelectorType">ServiceSelectorType</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ManagedService">ManagedService</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ManagedServices">ManagedServices</a></p>
+</li>
+</ul>
+<p>ServiceSelectorType describes a valid value for generating the service selectors.
+It indicates which type of service the selector applies to, such as read-write, read, or read-only</p>
+
+<h2 id="postgresql-cnpg-io-v1-ServiceTemplateSpec">ServiceTemplateSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ManagedService">ManagedService</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-PoolerSpec">PoolerSpec</a></p>
+</li>
+</ul>
+<p>ServiceTemplateSpec is a structure allowing the user to set
+a template for Service generation.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>metadata</code><br/>
+<a href="#postgresql-cnpg-io-v1-Metadata"><i>Metadata</i></a>
+</td>
+<td>
+   <p>Standard object's metadata.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</p>
+</td>
+</tr>
+<tr><td><code>spec</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#servicespec-v1-core"><i>core/v1.ServiceSpec</i></a>
+</td>
+<td>
+   <p>Specification of the desired behavior of the service.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-ServiceUpdateStrategy">ServiceUpdateStrategy</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ManagedService">ManagedService</a></li>
+</ul>
+<p>ServiceUpdateStrategy describes how the changes to the managed service should be handled</p>
+
+<h2 id="postgresql-cnpg-io-v1-SnapshotOwnerReference">SnapshotOwnerReference</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-VolumeSnapshotConfiguration">VolumeSnapshotConfiguration</a></li>
+</ul>
+<p>SnapshotOwnerReference defines the reference type for the owner of the snapshot.
+This specifies which owner the processed resources should relate to.</p>
+
+<h2 id="postgresql-cnpg-io-v1-SnapshotType">SnapshotType</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Import">Import</a></li>
+</ul>
+<p>SnapshotType is a type of allowed import</p>
+
+<h2 id="postgresql-cnpg-io-v1-StorageConfiguration">StorageConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></p>
+</li>
+<li>
+<p><a href="#postgresql-cnpg-io-v1-TablespaceConfiguration">TablespaceConfiguration</a></p>
+</li>
+</ul>
+<p>StorageConfiguration is the configuration used to create and reconcile PVCs,
+usable for WAL volumes, PGDATA volumes, or tablespaces</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>storageClass</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>StorageClass to use for PVCs. Applied after
+evaluating the PVC template, if available.
+If not specified, the generated PVCs will use the
+default storage class</p>
+</td>
+</tr>
+<tr><td><code>size</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Size of the storage. Required if not already specified in the PVC template.
+Changes to this field are automatically reapplied to the created PVCs.
+Size cannot be decreased.</p>
+</td>
+</tr>
+<tr><td><code>resizeInUseVolumes</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Resize existent PVCs, defaults to true</p>
+</td>
+</tr>
+<tr><td><code>pvcTemplate</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#persistentvolumeclaimspec-v1-core"><i>core/v1.PersistentVolumeClaimSpec</i></a>
+</td>
+<td>
+   <p>Template to be used to generate the Persistent Volume Claim</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-SubscriptionReclaimPolicy">SubscriptionReclaimPolicy</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-SubscriptionSpec">SubscriptionSpec</a></li>
+</ul>
+<p>SubscriptionReclaimPolicy describes a policy for end-of-life maintenance of Subscriptions.</p>
+
+<h2 id="postgresql-cnpg-io-v1-SubscriptionSpec">SubscriptionSpec</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Subscription">Subscription</a></li>
+</ul>
+<p>SubscriptionSpec defines the desired state of Subscription</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>cluster</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#localobjectreference-v1-core"><i>core/v1.LocalObjectReference</i></a>
+</td>
+<td>
+   <p>The name of the PostgreSQL cluster that identifies the &quot;subscriber&quot;</p>
+</td>
+</tr>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the subscription inside PostgreSQL</p>
+</td>
+</tr>
+<tr><td><code>dbname</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the database where the publication will be installed in
+the &quot;subscriber&quot; cluster</p>
+</td>
+</tr>
+<tr><td><code>parameters</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>Subscription parameters included in the <code>WITH</code> clause of the PostgreSQL
+<code>CREATE SUBSCRIPTION</code> command. Most parameters cannot be changed
+after the subscription is created and will be ignored if modified
+later, except for a limited set documented at:
+https://www.postgresql.org/docs/current/sql-altersubscription.html#SQL-ALTERSUBSCRIPTION-PARAMS-SET</p>
+</td>
+</tr>
+<tr><td><code>publicationName</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the publication inside the PostgreSQL database in the
+&quot;publisher&quot;</p>
+</td>
+</tr>
+<tr><td><code>publicationDBName</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the database containing the publication on the external
+cluster. Defaults to the one in the external cluster definition.</p>
+</td>
+</tr>
+<tr><td><code>externalClusterName</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the external cluster with the publication (&quot;publisher&quot;)</p>
+</td>
+</tr>
+<tr><td><code>subscriptionReclaimPolicy</code><br/>
+<a href="#postgresql-cnpg-io-v1-SubscriptionReclaimPolicy"><i>SubscriptionReclaimPolicy</i></a>
+</td>
+<td>
+   <p>The policy for end-of-life maintenance of this subscription</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-SubscriptionStatus">SubscriptionStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-Subscription">Subscription</a></li>
+</ul>
+<p>SubscriptionStatus defines the observed state of Subscription</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>observedGeneration</code><br/>
+<i>int64</i>
+</td>
+<td>
+   <p>A sequence number representing the latest
+desired state that was synchronized</p>
+</td>
+</tr>
+<tr><td><code>applied</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Applied is true if the subscription was reconciled correctly</p>
+</td>
+</tr>
+<tr><td><code>message</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Message is the reconciliation output message</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-SwitchReplicaClusterStatus">SwitchReplicaClusterStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</a></li>
+</ul>
+<p>SwitchReplicaClusterStatus contains all the statuses regarding the switch of a cluster to a replica cluster</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>inProgress</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>InProgress indicates if there is an ongoing procedure of switching a cluster to a replica cluster.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-SyncReplicaElectionConstraints">SyncReplicaElectionConstraints</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PostgresConfiguration">PostgresConfiguration</a></li>
+</ul>
+<p>SyncReplicaElectionConstraints contains the constraints for sync replicas election.</p>
+<p>For anti-affinity parameters two instances are considered in the same location
+if all the labels values match.</p>
+<p>In future synchronous replica election restriction by name will be supported.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>nodeLabelsAntiAffinity</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>A list of node labels values to extract and compare to evaluate if the pods reside in the same topology or not</p>
+</td>
+</tr>
+<tr><td><code>enabled</code> <B>[Required]</B><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>This flag enables the constraints for sync replicas</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-SynchronizeReplicasConfiguration">SynchronizeReplicasConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ReplicationSlotsConfiguration">ReplicationSlotsConfiguration</a></li>
+</ul>
+<p>SynchronizeReplicasConfiguration contains the configuration for the synchronization of user defined
+physical replication slots</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>enabled</code> <B>[Required]</B><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>When set to true, every replication slot that is on the primary is synchronized on each standby</p>
+</td>
+</tr>
+<tr><td><code>excludePatterns</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>List of regular expression patterns to match the names of replication slots to be excluded (by default empty)</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-SynchronousReplicaConfiguration">SynchronousReplicaConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PostgresConfiguration">PostgresConfiguration</a></li>
+</ul>
+<p>SynchronousReplicaConfiguration contains the configuration of the
+PostgreSQL synchronous replication feature.
+Important: at this moment, also <code>.spec.minSyncReplicas</code> and <code>.spec.maxSyncReplicas</code>
+need to be considered.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>method</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-SynchronousReplicaConfigurationMethod"><i>SynchronousReplicaConfigurationMethod</i></a>
+</td>
+<td>
+   <p>Method to select synchronous replication standbys from the listed
+servers, accepting 'any' (quorum-based synchronous replication) or
+'first' (priority-based synchronous replication) as values.</p>
+</td>
+</tr>
+<tr><td><code>number</code> <B>[Required]</B><br/>
+<i>int</i>
+</td>
+<td>
+   <p>Specifies the number of synchronous standby servers that
+transactions must wait for responses from.</p>
+</td>
+</tr>
+<tr><td><code>maxStandbyNamesFromCluster</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>Specifies the maximum number of local cluster pods that can be
+automatically included in the <code>synchronous_standby_names</code> option in
+PostgreSQL.</p>
+</td>
+</tr>
+<tr><td><code>standbyNamesPre</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>A user-defined list of application names to be added to
+<code>synchronous_standby_names</code> before local cluster pods (the order is
+only useful for priority-based synchronous replication).</p>
+</td>
+</tr>
+<tr><td><code>standbyNamesPost</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>A user-defined list of application names to be added to
+<code>synchronous_standby_names</code> after local cluster pods (the order is
+only useful for priority-based synchronous replication).</p>
+</td>
+</tr>
+<tr><td><code>dataDurability</code><br/>
+<a href="#postgresql-cnpg-io-v1-DataDurabilityLevel"><i>DataDurabilityLevel</i></a>
+</td>
+<td>
+   <p>If set to &quot;required&quot;, data durability is strictly enforced. Write operations
+with synchronous commit settings (<code>on</code>, <code>remote_write</code>, or <code>remote_apply</code>) will
+block if there are insufficient healthy replicas, ensuring data persistence.
+If set to &quot;preferred&quot;, data durability is maintained when healthy replicas
+are available, but the required number of instances will adjust dynamically
+if replicas become unavailable. This setting relaxes strict durability enforcement
+to allow for operational continuity. This setting is only applicable if both
+<code>standbyNamesPre</code> and <code>standbyNamesPost</code> are unset (empty).</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-SynchronousReplicaConfigurationMethod">SynchronousReplicaConfigurationMethod</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-SynchronousReplicaConfiguration">SynchronousReplicaConfiguration</a></li>
+</ul>
+<p>SynchronousReplicaConfigurationMethod configures whether to use
+quorum based replication or a priority list</p>
+
+<h2 id="postgresql-cnpg-io-v1-TablespaceConfiguration">TablespaceConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterSpec">ClusterSpec</a></li>
+</ul>
+<p>TablespaceConfiguration is the configuration of a tablespace, and includes
+the storage specification for the tablespace</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the tablespace</p>
+</td>
+</tr>
+<tr><td><code>storage</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-StorageConfiguration"><i>StorageConfiguration</i></a>
+</td>
+<td>
+   <p>The storage configuration for the tablespace</p>
+</td>
+</tr>
+<tr><td><code>owner</code><br/>
+<a href="#postgresql-cnpg-io-v1-DatabaseRoleRef"><i>DatabaseRoleRef</i></a>
+</td>
+<td>
+   <p>Owner is the PostgreSQL user owning the tablespace</p>
+</td>
+</tr>
+<tr><td><code>temporary</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>When set to true, the tablespace will be added as a <code>temp_tablespaces</code>
+entry in PostgreSQL, and will be available to automatically house temp
+database objects, or other temporary files. Please refer to PostgreSQL
+documentation for more information on the <code>temp_tablespaces</code> GUC.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-TablespaceState">TablespaceState</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</a></li>
+</ul>
+<p>TablespaceState represents the state of a tablespace in a cluster</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Name is the name of the tablespace</p>
+</td>
+</tr>
+<tr><td><code>owner</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Owner is the PostgreSQL user owning the tablespace</p>
+</td>
+</tr>
+<tr><td><code>state</code> <B>[Required]</B><br/>
+<a href="#postgresql-cnpg-io-v1-TablespaceStatus"><i>TablespaceStatus</i></a>
+</td>
+<td>
+   <p>State is the latest reconciliation state</p>
+</td>
+</tr>
+<tr><td><code>error</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Error is the reconciliation error, if any</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-TablespaceStatus">TablespaceStatus</h2>
+<p>(Alias of <code>string</code>)</p>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-TablespaceState">TablespaceState</a></li>
+</ul>
+<p>TablespaceStatus represents the status of a tablespace in the cluster</p>
+
+<h2 id="postgresql-cnpg-io-v1-Topology">Topology</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</a></li>
+</ul>
+<p>Topology contains the cluster topology</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>instances</code><br/>
+<a href="#postgresql-cnpg-io-v1-PodTopologyLabels"><i>map[PodName]PodTopologyLabels</i></a>
+</td>
+<td>
+   <p>Instances contains the pod topology of the instances</p>
+</td>
+</tr>
+<tr><td><code>nodesUsed</code><br/>
+<i>int32</i>
+</td>
+<td>
+   <p>NodesUsed represents the count of distinct nodes accommodating the instances.
+A value of '1' suggests that all instances are hosted on a single node,
+implying the absence of High Availability (HA). Ideally, this value should
+be the same as the number of instances in the Postgres HA cluster, implying
+shared nothing architecture on the compute side.</p>
+</td>
+</tr>
+<tr><td><code>successfullyExtracted</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>SuccessfullyExtracted indicates if the topology data was extract. It is useful to enact fallback behaviors
+in synchronous replica election in case of failures</p>
+</td>
+</tr>
+</tbody>
+</table>
+
+<h2 id="postgresql-cnpg-io-v1-VolumeSnapshotConfiguration">VolumeSnapshotConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-BackupConfiguration">BackupConfiguration</a></li>
+</ul>
+<p>VolumeSnapshotConfiguration represents the configuration for the execution of snapshot backups.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>labels</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>Labels are key-value pairs that will be added to .metadata.labels snapshot resources.</p>
+</td>
+</tr>
+<tr><td><code>annotations</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>Annotations key-value pairs that will be added to .metadata.annotations snapshot resources.</p>
+</td>
+</tr>
+<tr><td><code>className</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>ClassName specifies the Snapshot Class to be used for PG_DATA PersistentVolumeClaim.
+It is the default class for the other types if no specific class is present</p>
+</td>
+</tr>
+<tr><td><code>walClassName</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>WalClassName specifies the Snapshot Class to be used for the PG_WAL PersistentVolumeClaim.</p>
+</td>
+</tr>
+<tr><td><code>tablespaceClassName</code><br/>
+<i>map[string]string</i>
+</td>
+<td>
+   <p>TablespaceClassName specifies the Snapshot Class to be used for the tablespaces.
+defaults to the PGDATA Snapshot Class, if set</p>
+</td>
+</tr>
+<tr><td><code>snapshotOwnerReference</code><br/>
+<a href="#postgresql-cnpg-io-v1-SnapshotOwnerReference"><i>SnapshotOwnerReference</i></a>
+</td>
+<td>
+   <p>SnapshotOwnerReference indicates the type of owner reference the snapshot should have</p>
+</td>
+</tr>
+<tr><td><code>online</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether the default type of backup with volume snapshots is
+online/hot (<code>true</code>, default) or offline/cold (<code>false</code>)</p>
+</td>
+</tr>
+<tr><td><code>onlineConfiguration</code><br/>
+<a href="#postgresql-cnpg-io-v1-OnlineConfiguration"><i>OnlineConfiguration</i></a>
+</td>
+<td>
+   <p>Configuration parameters to control the online/hot backup with volume snapshots</p>
+</td>
+</tr>
+</tbody>
+</table>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../faq/" class="btn btn-neutral float-left" title="Frequently Asked Questions (FAQ)"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../supported_releases/" class="btn btn-neutral float-right" title="Supported releases">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../faq/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../supported_releases/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/cluster_conf/index.html b/assets/documentation/1.27.0-rc1/cluster_conf/index.html
new file mode 100644
index 000000000..1058ab494
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/cluster_conf/index.html
@@ -0,0 +1,494 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Instance pod configuration - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Instance pod configuration";
+        var mkdocs_page_input_path = "cluster_conf.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Instance pod configuration</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#projected-volumes">Projected volumes</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#ephemeral-volumes">Ephemeral volumes</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#volume-claim-template-for-temporary-storage">Volume Claim Template for Temporary Storage</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#volume-for-shared-memory">Volume for shared memory</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#environment-variables">Environment variables</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Instance pod configuration</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="instance-pod-configuration">Instance pod configuration</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<h2 id="projected-volumes">Projected volumes</h2>
+<p>CloudNativePG supports mounting custom files inside the Postgres pods through
+<code>.spec.projectedVolumeTemplate</code>. This ability is useful for several Postgres
+features and extensions that require additional data files.
+In CloudNativePG, the <code>.spec.projectedVolumeTemplate</code> field is a
+<a href="https://kubernetes.io/docs/concepts/storage/projected-volumes/">projected volume</a>
+template in Kubernetes that allows you to mount arbitrary data under the
+<code>/projected</code> folder in Postgres pods.</p>
+<p>This simple example shows how to mount an existing TLS secret (named
+<code>sample-secret</code>) as files into Postgres pods. The values for the secret keys
+<code>tls.crt</code> and <code>tls.key</code> in <code>sample-secret</code> are mounted as files into the  paths
+<code>/projected/certificate/tls.crt</code> and <code>/projected/certificate/tls.key</code> in the
+Postgres pod.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-projected-volumes
+spec:
+  instances: 3
+  projectedVolumeTemplate:
+    sources:
+      - secret:
+          name: sample-secret
+          items:
+            - key: tls.crt
+              path: certificate/tls.crt
+            - key: tls.key
+              path: certificate/tls.key
+  storage:
+    size: 1Gi
+</code></pre>
+<p>You can find a complete example that uses a projected volume template to mount
+the secret and ConfigMap in the
+<a href="../samples/cluster-example-projected-volume.yaml">cluster-example-projected-volume.yaml</a>
+deployment manifest.</p>
+<h2 id="ephemeral-volumes">Ephemeral volumes</h2>
+<p>CloudNativePG relies on <a href="https://kubernetes.io/docs/concepts/storage/ephemeral-volumes/">ephemeral volumes</a>
+for part of the internal activities. Ephemeral volumes exist for the sole
+duration of a pod's life, without persisting across pod restarts.</p>
+<h3 id="volume-claim-template-for-temporary-storage">Volume Claim Template for Temporary Storage</h3>
+<p>The operator uses  by default an <code>emptyDir</code> volume, which can be customized by using the <code>.spec.ephemeralVolumesSizeLimit field</code>.
+This can be overridden by specifying a volume claim template in the <code>.spec.ephemeralVolumeSource</code> field.</p>
+<p>In the following example, a <code>1Gi</code> ephemeral volume is set.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-ephemeral-volume-source
+spec:
+  instances: 3
+  ephemeralVolumeSource:
+    volumeClaimTemplate:
+      spec:
+        accessModes: [&quot;ReadWriteOnce&quot;]
+        # example storageClassName, replace with one existing in your Kubernetes cluster
+        storageClassName: &quot;scratch-storage-class&quot;
+        resources:
+          requests:
+            storage: 1Gi
+</code></pre>
+<p>Both <code>.spec.emphemeralVolumeSource</code> and <code>.spec.ephemeralVolumesSizeLimit.temporaryData</code> cannot be specified simultaneously.</p>
+<h3 id="volume-for-shared-memory">Volume for shared memory</h3>
+<p>This volume is used as shared memory space for Postgres and as an ephemeral
+type but stored in memory. You can configure an upper bound on the size using
+the <code>.spec.ephemeralVolumesSizeLimit.shm</code> field in the cluster spec.
+Use this field only in case of
+<a href="../postgresql_conf/#dynamic-shared-memory-settings">PostgreSQL running with <code>posix</code> shared memory dynamic allocation</a>.</p>
+<h2 id="environment-variables">Environment variables</h2>
+<p>You can customize some system behavior using environment variables. One example
+is the <code>LDAPCONF</code> variable, which can point to a custom LDAP configuration
+file. Another example is the <code>TZ</code> environment variable, which represents the
+timezone used by the PostgreSQL container.</p>
+<p>CloudNativePG allows you to set custom environment variables using the <code>env</code>
+and the <code>envFrom</code> stanza of the cluster specification.</p>
+<p>This example defines a PostgreSQL cluster using the <code>Australia/Sydney</code>
+timezone as the default cluster-level timezone:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+
+  env:
+  - name: TZ
+    value: Australia/Sydney
+
+  storage:
+    size: 1Gi
+</code></pre>
+<p>The <code>envFrom</code> stanza can refer to ConfigMaps or secrets to use their content as
+environment variables:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+
+  envFrom:
+  - configMapRef:
+      name: config-map-name
+  - secretRef:
+      name: secret-name
+
+  storage:
+    size: 1Gi
+</code></pre>
+<p>The operator doesn't allow setting the following environment variables:</p>
+<ul>
+<li><code>POD_NAME</code></li>
+<li><code>NAMESPACE</code></li>
+<li>Any environment variable whose name starts with <code>PG</code>.</li>
+</ul>
+<p>Any change in the <code>env</code> or in the <code>envFrom</code> section triggers a rolling
+update of the PostgreSQL pods.</p>
+<p>If the <code>env</code> or the <code>envFrom</code> section refers to a secret or a ConfigMap, the
+operator doesn't detect any changes in them and doesn't trigger a rollout. The
+kubelet uses the same behavior with pods, and you must trigger the pod rollout
+manually.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../operator_conf/" class="btn btn-neutral float-left" title="Operator configuration"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../storage/" class="btn btn-neutral float-right" title="Storage">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../operator_conf/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../storage/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/cncf-projects/cilium/index.html b/assets/documentation/1.27.0-rc1/cncf-projects/cilium/index.html
new file mode 100644
index 000000000..7b97689e6
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/cncf-projects/cilium/index.html
@@ -0,0 +1,597 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../img/favicon.ico" />
+    <title>Cilium - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../css/theme.css" />
+    <link rel="stylesheet" href="../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Cilium";
+        var mkdocs_page_input_path = "cncf-projects/cilium.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul class="current">
+                  <li class="toctree-l1"><a class="reference internal" href="../external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1 current"><a class="reference internal current" href="#">Cilium</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#about">About</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#pod-to-pod-network-security-with-cloudnativepg-and-cilium">Pod-to-Pod Network Security with CloudNativePG and Cilium</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#default-deny-behavior-in-cilium">Default Deny Behavior in Cilium</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#making-cilium-network-policies-work-with-cloudnativepg-operator">Making Cilium Network Policies work with CloudNativePG Operator</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#allowing-access-between-cluster-pods">Allowing access between cluster Pods</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#restricting-access-to-postgresql-with-cilium">Restricting Access to PostgreSQL with Cilium</a>
+    </li>
+    </ul>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+          <li class="breadcrumb-item">CNCF Projects Integrations</li>
+      <li class="breadcrumb-item active">Cilium</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="cilium">Cilium</h1>
+<h2 id="about">About</h2>
+<p><a href="https://cilium.io/">Cilium</a> is a CNCF Graduated project that was accepted as
+an Incubating project in 2021 and graduated in 2023. It was originally created
+by Isovalent. It is an advanced networking, security, and observability
+solution for cloud native environments, built on top of
+<a href="https://ebpf.io/">eBPF</a> technology. Cilium manages network traffic in
+Kubernetes clusters by dynamically injecting eBPF programs into the Linux
+Kernel, enabling low-latency, high-performance communication, and enforcing
+fine-grained security policies.</p>
+<p>Key features of Cilium:</p>
+<ul>
+<li>Advanced L3-L7 security policies for fine-grained network traffic control</li>
+<li>Efficient, kernel-level traffic management via eBPF</li>
+<li>Service Mesh integration (Cilium Service Mesh)</li>
+<li>Support for both Kubernetes NetworkPolicy and CiliumNetworkPolicy</li>
+<li>Built-in observability and monitoring with Hubble</li>
+</ul>
+<p>To install Cilium in your environment, follow the instructions in the documentation:
+<a href="https://docs.cilium.io/en/stable/gettingstarted/k8s-install-default/">https://docs.cilium.io/en/stable/gettingstarted/k8s-install-default/</a></p>
+<h2 id="pod-to-pod-network-security-with-cloudnativepg-and-cilium">Pod-to-Pod Network Security with CloudNativePG and Cilium</h2>
+<p>Kubernetes’ default behavior is to allow traffic between any two Pods in the cluster network.
+Cilium provides advanced L3/L4 network security using the <code>CiliumNetworkPolicy</code> resource. This
+enables fine-grained control over network traffic between Pods within a Kubernetes cluster. It is
+especially useful for securing communication between application workloads and backend
+services.</p>
+<p>In the following examples, we demonstrate how Cilium can be used to secure a
+CloudNativePG PostgreSQL instance by restricting ingress traffic to only
+authorized Pods.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Before proceeding, ensure that the <code>cluster-example</code> Postgres cluster is up
+and running in your environment.</p>
+</div>
+<h2 id="default-deny-behavior-in-cilium">Default Deny Behavior in Cilium</h2>
+<p>By default, Cilium does <strong>not</strong> deny all traffic unless explicitly configured
+to do so. In contrast to Kubernetes NetworkPolicy, which uses a deny-by-default
+model once a policy is present in a namespace, Cilium provides more flexible
+control over default deny behavior.</p>
+<p>To enforce a default deny posture with Cilium, you need to explicitly create a
+policy that denies all traffic to a set of Pods unless otherwise allowed. This
+is commonly achieved by using an <strong>empty <code>ingress</code> section</strong> in combination
+with <code>endpointSelector</code>, or by enabling <strong><code>--enable-default-deny</code></strong> at the
+Cilium agent level for broader enforcement.</p>
+<p>A minimal example of a default deny policy:</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: default-deny
+  namespace: default
+spec:
+  description: &quot;Default deny all ingress traffic to all Pods in this namespace&quot;
+  endpointSelector: {}
+  ingress: []
+</code></pre>
+<h2 id="making-cilium-network-policies-work-with-cloudnativepg-operator">Making Cilium Network Policies work with CloudNativePG Operator</h2>
+<p>When working with a network policy, Cilium or not, the first step is to make
+sure that the operator can reach the Pods in the target namespace. This is
+important because the operator needs to be able to perform checks and actions
+on the Pods, and one of those actions requires access to the port <code>8000</code> on the
+Pods to get the current status of the PostgreSQL instance running inside.</p>
+<p>The following <code>CiliumNetworkPolicy</code> allows the operator to access the Pods in
+the target <code>default</code> namespace:</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: cnpg-operator-access
+  namespace: default
+spec:
+  description: &quot;Allow CloudNativePG operator access to any pod in the target namespace&quot;
+  endpointSelector: {}
+  ingress:
+    - fromEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: cnpg-system
+      toPorts:
+        - ports:
+            - port: &quot;8000&quot;
+              protocol: TCP
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The <code>cnpg-system</code> namespace is the default namespace for the operator when
+using the YAML manifests. If the operator was installed using a different
+process (Helm, OLM, etc.), the namespace may be different. Make sure to adjust
+the namespace properly.</p>
+</div>
+<h2 id="allowing-access-between-cluster-pods">Allowing access between cluster Pods</h2>
+<p>Since the default policy is "deny all", we need to explicitly allow access
+between the cluster Pods in the same namespace. We will improve our previous
+policy by adding the required ingress rule:</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: cnpg-cluster-internal-access
+  namespace: default
+spec:
+  description: &quot;Allow CloudNativePG operator access and connection between pods in the same namespace&quot;
+  endpointSelector: {}
+  ingress:
+    - fromEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: cnpg-system
+        - matchLabels:
+            io.kubernetes.pod.namespace: default
+            cnpg.io/cluster: cluster-example
+      toPorts:
+        - ports:
+            - port: &quot;8000&quot;
+              protocol: TCP
+            - port: &quot;5432&quot;
+              protocol: TCP
+</code></pre>
+<p>The policy allows access from <code>cnpg-system</code> Pods and from <code>default</code> namespace
+Pods that also belong to <code>cluster-example</code>. The <code>matchLabels</code> selector requires
+Pods to have the complete set of listed labels. Missing even one label means
+the Pod will not match.</p>
+<h2 id="restricting-access-to-postgresql-with-cilium">Restricting Access to PostgreSQL with Cilium</h2>
+<p>In this example, we define a <code>CiliumNetworkPolicy</code> that allows only Pods
+labeled <code>role=backend</code> in the <code>default</code> namespace to connect to a PostgreSQL
+cluster named <code>cluster-example</code>. All other ingress traffic is blocked by
+default.</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: postgres-access-backend-label
+  namespace: default
+spec:
+  description: &quot;Allow PostgreSQL access on port 5432 from Pods with role=backend&quot;
+  endpointSelector:
+    matchLabels:
+      cnpg.io/cluster: cluster-example
+  ingress:
+    - fromEndpoints:
+       - matchLabels:
+            role: backend
+      toPorts:
+        - ports:
+          - port: &quot;5432&quot;
+            protocol: TCP
+</code></pre>
+<p>This <code>CiliumNetworkPolicy</code> ensures that only Pods labeled with <code>role=backend</code>
+can access the PostgreSQL instance managed by CloudNativePG via port 5432 in
+the <code>default</code> namespace.</p>
+<p>In the following policy, we demonstrate how to allow ingress traffic to port
+5432 of a PostgreSQL cluster named <code>cluster-example</code>, only from Pods with the
+label <code>role=backend</code> in any namespace.</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: postgres-access-backend-any-ns
+  namespace: default
+spec:
+  description: &quot;Allow PostgreSQL access on port 5432 from Pods with role=backend in any namespace&quot;
+  endpointSelector:
+    matchLabels:
+      cnpg.io/cluster: cluster-example
+  ingress:
+    - fromEndpoints:
+        - labelSelector:
+            matchLabels:
+              role: backend
+            matchExpressions:
+              - key: io.kubernetes.pod.namespace
+                operator: Exists
+      toPorts:
+        - ports:
+          - port: &quot;5432&quot;
+            protocol: TCP
+</code></pre>
+<p>The following example allows ingress traffic to port 5432 of the
+<code>cluster-example</code> cluster (located in the <code>default</code> namespace) from any Pods in
+the <code>backend</code> namespace.</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: postgres-access-backend-namespace
+  namespace: default
+spec:
+  description: &quot;Allow PostgreSQL access on port 5432 from any Pods in the backend namespace&quot;
+  endpointSelector:
+    matchLabels:
+      cnpg.io/cluster: cluster-example
+  ingress:
+    - fromEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: backend
+      toPorts:
+        - ports:
+            - port: &quot;5432&quot;
+              protocol: TCP
+</code></pre>
+<p>Using Cilium’s L3/L4 policy model, we define a <code>CiliumNetworkPolicy</code> that
+explicitly allows ingress traffic to cluster Pods only from application Pods in
+the <code>backend</code> namespace. All other traffic is implicitly denied unless
+explicitly permitted by additional policies.</p>
+<p>The following example allows ingress traffic to port 5432 of the
+<code>cluster-example</code> cluster (located in the <code>default</code> namespace) from any source
+within the Kubernetes cluster.</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: postgres-access-cluster-wide
+  namespace: default
+spec:
+  description: &quot;Allow ingress traffic to port 5432 of the cluster-example from any pods within the Kubernetes cluster&quot;
+  endpointSelector:
+    matchLabels:
+      cnpg.io/cluster: cluster-example
+  ingress:
+    - fromEntities:
+        - cluster
+      toPorts:
+        - ports:
+            - port: &quot;5432&quot;
+              protocol: TCP
+</code></pre>
+<p>You may consider using <a href="https://editor.networkpolicy.io/">editor.networkpolicy.io</a>,
+a visual and interactive tool that simplifies the creation and validation of
+Cilium Network Policies. It’s especially helpful for avoiding misconfigurations
+and understanding traffic rules more clearly by presenting in a visual way.</p>
+<p>With these policies, you've established baseline access controls for
+PostgreSQL. You can layer additional egress or audit rules using Cilium's
+policy language or extend to L7 enforcement with Envoy.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../external-secrets/" class="btn btn-neutral float-left" title="External Secrets"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../../appendixes/backup_volumesnapshot/" class="btn btn-neutral float-right" title="Appendix A - Backup on volume snapshots">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../external-secrets/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../../appendixes/backup_volumesnapshot/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../..";</script>
+    <script src="../../js/theme_extra.js"></script>
+    <script src="../../js/theme.js"></script>
+      <script src="../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/cncf-projects/external-secrets/index.html b/assets/documentation/1.27.0-rc1/cncf-projects/external-secrets/index.html
new file mode 100644
index 000000000..794105eb2
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/cncf-projects/external-secrets/index.html
@@ -0,0 +1,613 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../img/favicon.ico" />
+    <title>External Secrets - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../css/theme.css" />
+    <link rel="stylesheet" href="../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "External Secrets";
+        var mkdocs_page_input_path = "cncf-projects/external-secrets.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul class="current">
+                  <li class="toctree-l1 current"><a class="reference internal current" href="#">External Secrets</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#about">About</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#integration-with-postgresql-and-cloudnativepg">Integration with PostgreSQL and CloudNativePG</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#example-automated-password-management-with-external-secrets">Example: Automated Password Management with External Secrets</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#creating-the-password-generator">Creating the Password Generator</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#creating-the-external-secret">Creating the External Secret</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#verifying-the-configuration">Verifying the Configuration</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#theres-more">There's More</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#example-integration-with-an-external-kms">Example: Integration with an External KMS</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#creating-the-secretstore">Creating the SecretStore</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#creating-the-pushsecret">Creating the PushSecret</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#verifying-the-configuration_1">Verifying the Configuration</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+          <li class="breadcrumb-item">CNCF Projects Integrations</li>
+      <li class="breadcrumb-item active">External Secrets</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="external-secrets">External Secrets</h1>
+<p><a href="https://external-secrets.io/latest/">External Secrets</a> is a CNCF Sandbox
+project, accepted in 2022 under the sponsorship of TAG Security.</p>
+<h2 id="about">About</h2>
+<p>The <strong>External Secrets Operator (ESO)</strong> is a Kubernetes operator that enhances
+secret management by decoupling the storage of secrets from Kubernetes itself.
+It enables seamless synchronization between external secret management systems
+and native Kubernetes <code>Secret</code> resources.</p>
+<p>ESO supports a wide range of backends, including:</p>
+<ul>
+<li><a href="https://www.vaultproject.io/">HashiCorp Vault</a></li>
+<li><a href="https://aws.amazon.com/secrets-manager/">AWS Secrets Manager</a></li>
+<li><a href="https://cloud.google.com/secret-manager">Google Secret Manager</a></li>
+<li><a href="https://azure.microsoft.com/en-us/services/key-vault/">Azure Key Vault</a></li>
+<li><a href="https://www.ibm.com/cloud/secrets-manager">IBM Cloud Secrets Manager</a></li>
+</ul>
+<p>…and many more. For a full and up-to-date list of supported providers, refer to
+the <a href="https://external-secrets.io/latest/">official External Secrets documentation</a>.</p>
+<h2 id="integration-with-postgresql-and-cloudnativepg">Integration with PostgreSQL and CloudNativePG</h2>
+<p>When it comes to PostgreSQL databases, External Secrets integrates seamlessly
+with <a href="https://cloudnative-pg.io/">CloudNativePG</a> in two major use cases:</p>
+<ul>
+<li>
+<p><strong>Automated password management:</strong> ESO can handle the automatic generation
+  and rotation of database user passwords stored in Kubernetes <code>Secret</code>
+  resources, ensuring that applications running inside the cluster always have
+  access to up-to-date credentials.</p>
+</li>
+<li>
+<p><strong>Cross-platform secret access:</strong> It enables transparent synchronization of
+  those passwords with an external Key Management Service (KMS) via a
+  <code>SecretStore</code> resources. This allows applications and developers outside the
+  Kubernetes cluster—who may not have access to Kubernetes secrets—to retrieve
+  the database credentials directly from the external KMS.</p>
+</li>
+</ul>
+<h2 id="example-automated-password-management-with-external-secrets">Example: Automated Password Management with External Secrets</h2>
+<p>Let’s walk through how to automatically rotate the password of the <code>app</code> user
+every 24 hours in the <code>cluster-example</code> Postgres cluster from the
+<a href="../../quickstart/#part-3-deploy-a-postgresql-cluster">quickstart guide</a>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Before proceeding, ensure that the <code>cluster-example</code> Postgres cluster is up
+and running in your environment.</p>
+</div>
+<p>By default, CloudNativePG generates and manages a Kubernetes <code>Secret</code> named
+<code>cluster-example-app</code>, which contains the credentials for the <code>app</code> user in the
+<code>cluster-example</code> cluster. You can read more about this in the
+<a href="../../applications/#secrets">“Connecting from an application” section</a>.</p>
+<p>With External Secrets, the goal is to:</p>
+<ol>
+<li>Define a <code>Password</code> generator that specifies how to generate the password.</li>
+<li>Create an <code>ExternalSecret</code> resource that keeps the <code>cluster-example-app</code>
+   secret in sync by updating only the <code>password</code> and <code>pgpass</code> fields.</li>
+</ol>
+<h3 id="creating-the-password-generator">Creating the Password Generator</h3>
+<p>The following example creates a
+<a href="https://external-secrets.io/main/api/generator/password/"><code>Password</code> generator</a>
+resource named <code>pg-password-generator</code> in the <code>default</code> namespace. You can
+customize the name and properties to suit your needs:</p>
+<pre><code class="language-yaml">apiVersion: generators.external-secrets.io/v1alpha1
+kind: Password
+metadata:
+  name: pg-password-generator
+spec:
+  length: 42
+  digits: 5
+  symbols: 5
+  symbolCharacters: &quot;-_$@&quot;
+  noUpper: false
+  allowRepeat: true
+</code></pre>
+<p>This specification defines the characteristics of the generated password,
+including its length and the inclusion of digits, symbols, and uppercase
+letters.</p>
+<h3 id="creating-the-external-secret">Creating the External Secret</h3>
+<p>The example below creates an <code>ExternalSecret</code> resource named
+<code>cluster-example-app-secret</code>, which refreshes the password every 24 hours. It
+uses a <code>Merge</code> policy to update only the specified fields (<code>password</code>, <code>pgpass</code>,
+<code>jdbc-uri</code> and <code>uri</code>) in the <code>cluster-example-app</code> secret.</p>
+<pre><code class="language-yaml">apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: cluster-example-app-secret
+spec:
+  refreshInterval: &quot;24h&quot;
+  target:
+    name: cluster-example-app
+    creationPolicy: Merge
+    template:
+      metadata:
+        labels:
+          cnpg.io/reload: &quot;true&quot;
+      data:
+        password: &quot;{{ .password }}&quot;
+        pgpass: &quot;cluster-example-rw:5432:app:app:{{ .password }}&quot;
+        jdbc-uri: &quot;jdbc:postgresql://cluster-example-rw.default:5432/app?password={{ .password }}&amp;user=app&quot;
+        uri: &quot;postgresql://app:{{ .password }}@cluster-example-rw.default:5432/app&quot;
+  dataFrom:
+    - sourceRef:
+        generatorRef:
+          apiVersion: generators.external-secrets.io/v1alpha1
+          kind: Password
+          name: pg-password-generator
+</code></pre>
+<p>The label <code>cnpg.io/reload: "true"</code> ensures that CloudNativePG triggers a reload
+of the user password in the database when the secret changes.</p>
+<h3 id="verifying-the-configuration">Verifying the Configuration</h3>
+<p>To check that the <code>ExternalSecret</code> is correctly synchronizing:</p>
+<pre><code class="language-sh">kubectl get es cluster-example-app-secret
+</code></pre>
+<p>To observe the password being refreshed in real time, temporarily reduce the
+<code>refreshInterval</code> to <code>30s</code> and run the following command repeatedly:</p>
+<pre><code class="language-sh">kubectl get secret cluster-example-app \
+  -o jsonpath=&quot;{.data.password}&quot; | base64 -d
+</code></pre>
+<p>You should see the password change every 30 seconds, confirming that the
+rotation is working correctly.</p>
+<h3 id="theres-more">There's More</h3>
+<p>While the example above focuses on the default <code>cluster-example-app</code> secret
+created by CloudNativePG, the same approach can be extended to manage any
+custom secrets or PostgreSQL users you create to regularly rotate their
+password.</p>
+<h2 id="example-integration-with-an-external-kms">Example: Integration with an External KMS</h2>
+<p>One of the most widely used Key Management Service (KMS) providers in the CNCF
+ecosystem is <a href="https://www.vaultproject.io/">HashiCorp Vault</a>. Although Vault is
+licensed under the Business Source License (BUSL), a fully compatible and
+actively maintained open source alternative is available: <a href="https://openbao.org/">OpenBao</a>.
+OpenBao supports all the same interfaces as HashiCorp Vault, making it a true
+drop-in replacement.</p>
+<p>In this example, we'll demonstrate how to integrate CloudNativePG,
+External Secrets Operator, and HashiCorp Vault to automatically rotate
+a PostgreSQL password and securely store it in Vault.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>This example assumes that HashiCorp Vault is already installed and properly
+configured in your environment, and that your team has the necessary expertise
+to operate it. There are various ways to deploy Vault, and detailing them is
+outside the scope of CloudNativePG. While it's possible to run Vault inside
+Kubernetes, it is more commonly deployed externally. For detailed instructions,
+consult the <a href="https://www.vaultproject.io/docs">HashiCorp Vault documentation</a>.</p>
+</div>
+<p>Continuing from the previous example, we will now create the necessary
+<code>SecretStore</code> and <code>PushSecret</code> resources to complete the integration with
+Vault.</p>
+<h3 id="creating-the-secretstore">Creating the <code>SecretStore</code></h3>
+<p>In this example, we assume that HashiCorp Vault is accessible from within the
+namespace at <code>http://vault.vault.svc:8200</code>, and that a Kubernetes <code>Secret</code>
+named <code>vault-token</code> exists in the same namespace, containing the token used to
+authenticate with Vault.</p>
+<pre><code class="language-yaml">apiVersion: external-secrets.io/v1beta1
+kind: SecretStore
+metadata:
+  name: vault-backend
+spec:
+  provider:
+    vault:
+      server: &quot;http://vault.vault.svc:8200&quot;
+      path: &quot;secrets&quot;
+      # Specifies the Vault KV secret engine version (&quot;v1&quot; or &quot;v2&quot;).
+      # Defaults to &quot;v2&quot; if not set.
+      version: &quot;v2&quot;
+      auth:
+        # References a Kubernetes Secret that contains the Vault token.
+        # See: https://www.vaultproject.io/docs/auth/token
+        tokenSecretRef:
+          name: &quot;vault-token&quot;
+          key: &quot;token&quot;
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vault-token
+data:
+  token: aHZzLioqKioqKio= # hvs.*******
+</code></pre>
+<p>This configuration creates a <code>SecretStore</code> resource named <code>vault-backend</code>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>This example uses basic token-based authentication, which is suitable for
+testing API, and CLI use cases. While it is the default method enabled in
+Vault, it is not recommended for production environments. For production,
+consider using more secure authentication methods.
+Refer to the <a href="https://external-secrets.io/latest/provider/hashicorp-vault/">External Secrets Operator documentation</a>
+for a full list of supported authentication mechanisms.</p>
+</div>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>HashiCorp Vault must have a KV secrets engine enabled at the <code>secrets</code> path
+with version <code>v2</code>. If your Vault instance uses a different path or
+version, be sure to update the <code>path</code> and <code>version</code> fields accordingly.</p>
+</div>
+<h3 id="creating-the-pushsecret">Creating the <code>PushSecret</code></h3>
+<p>The <code>PushSecret</code> resource is used to push a Kubernetes <code>Secret</code> to HashiCorp
+Vault. In this simplified example, we'll push the credentials for the <code>app</code>
+user of the sample cluster <code>cluster-example</code>.</p>
+<p>For more details on configuring <code>PushSecret</code>, refer to the
+<a href="https://external-secrets.io/latest/api/pushsecret/">External Secrets Operator documentation</a>.</p>
+<pre><code class="language-yaml">apiVersion: external-secrets.io/v1alpha1
+kind: PushSecret
+metadata:
+  name: pushsecret-example
+spec:
+  deletionPolicy: Delete
+  refreshInterval: 24h
+  secretStoreRefs:
+    - name: vault-backend
+      kind: SecretStore
+  selector:
+    secret:
+      name: cluster-example-app
+  data:
+    - match:
+        remoteRef:
+          remoteKey: cluster-example-app
+</code></pre>
+<p>In this example, the <code>PushSecret</code> resource instructs the External Secrets
+Operator to push the Kubernetes <code>Secret</code> named <code>cluster-example-app</code> to
+HashiCorp Vault (from the previous example). The <code>remoteKey</code> defines the name
+under which the secret will be stored in Vault, using the <code>SecretStore</code> named
+<code>vault-backend</code>.</p>
+<h3 id="verifying-the-configuration_1">Verifying the Configuration</h3>
+<p>To verify that the <code>PushSecret</code> is functioning correctly, navigate to the
+HashiCorp Vault UI. In the <code>kv</code> secrets engine at the path <code>secrets</code>, you
+should find a secret named <code>cluster-example-app</code>, corresponding to the
+<code>remoteKey</code> defined above.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../../release_notes/" class="btn btn-neutral float-left" title="Release notes"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../cilium/" class="btn btn-neutral float-right" title="Cilium">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../../release_notes/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../cilium/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../..";</script>
+    <script src="../../js/theme_extra.js"></script>
+    <script src="../../js/theme.js"></script>
+      <script src="../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/connection_pooling/index.html b/assets/documentation/1.27.0-rc1/connection_pooling/index.html
new file mode 100644
index 000000000..a01442086
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/connection_pooling/index.html
@@ -0,0 +1,1022 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Connection pooling - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Connection pooling";
+        var mkdocs_page_input_path = "connection_pooling.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Connection pooling</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#architecture">Architecture</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#quick-start">Quick start</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#pooler-resource-lifecycle">Pooler resource lifecycle</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#security">Security</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#certificates">Certificates</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#authentication">Authentication</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#pod-templates">Pod templates</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#service-template">Service Template</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#high-availability-ha">High availability (HA)</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#pgbouncer-configuration-options">PgBouncer configuration options</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#monitoring">Monitoring</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#logging">Logging</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#pausing-connections">Pausing connections</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#limitations">Limitations</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#single-postgresql-cluster">Single PostgreSQL cluster</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#controlled-configurability">Controlled configurability</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Connection pooling</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="connection-pooling">Connection pooling</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG provides native support for connection pooling with
+<a href="https://www.pgbouncer.org/">PgBouncer</a>, one of the most popular open source
+connection poolers for PostgreSQL, through the <code>Pooler</code> custom resource definition (CRD).</p>
+<p>In brief, a pooler in CloudNativePG is a deployment of PgBouncer pods that sits
+between your applications and a PostgreSQL service, for example, the <code>rw</code>
+service. It creates a separate, scalable, configurable, and highly available
+database access layer.</p>
+<h2 id="architecture">Architecture</h2>
+<p>The following diagram highlights how introducing a database access layer based
+on PgBouncer changes the architecture of CloudNativePG. Instead of directly
+connecting to the PostgreSQL primary service, applications can connect to the
+equivalent service for PgBouncer. This ability enables reuse of existing
+connections for faster performance and better resource management on the
+PostgreSQL side.</p>
+<p><img alt="Applications writing to the single primary via PgBouncer" src="../images/pgbouncer-architecture-rw.png" /></p>
+<h2 id="quick-start">Quick start</h2>
+<p>This example helps to show how CloudNativePG implements a PgBouncer
+pooler:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Pooler
+metadata:
+  name: pooler-example-rw
+spec:
+  cluster:
+    name: cluster-example
+
+  instances: 3
+  type: rw
+  pgbouncer:
+    poolMode: session
+    parameters:
+      max_client_conn: &quot;1000&quot;
+      default_pool_size: &quot;10&quot;
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The pooler name can't be the same as any cluster name in the same namespace.</p>
+</div>
+<p>This example creates a <code>Pooler</code> resource called <code>pooler-example-rw</code> 
+that's strictly associated with the Postgres <code>Cluster</code> resource called
+<code>cluster-example</code>. It points to the primary, identified by the read/write
+service (<code>rw</code>, therefore <code>cluster-example-rw</code>).</p>
+<p>The <code>Pooler</code> resource must live in the same namespace as the Postgres cluster.
+It consists of a Kubernetes deployment of 3 pods running the
+<a href="https://ghcr.io/cloudnative-pg/pgbouncer">latest stable image of PgBouncer</a>,
+configured with the <a href="https://www.pgbouncer.org/config.html#pool-mode"><code>session</code> pooling mode</a>
+and accepting up to 1000 connections each. The default pool size is 10
+user/database pairs toward PostgreSQL.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The <code>Pooler</code> resource sets only the <code>*</code> fallback database in PgBouncer. This setting means that
+that all parameters in the connection strings passed from the client are
+relayed to the PostgreSQL server. For details, see <a href="https://www.pgbouncer.org/config.html#section-databases">"Section [databases]"
+in the PgBouncer documentation</a>.</p>
+</div>
+<p>CloudNativePG also creates a secret with the same name as the pooler containing
+the configuration files used with PgBouncer.</p>
+<div class="admonition seealso">
+<p class="admonition-title">API reference</p>
+<p>For details, see <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-PgBouncerSpec"><code>PgBouncerSpec</code></a>
+in the API reference.</p>
+</div>
+<h2 id="pooler-resource-lifecycle">Pooler resource lifecycle</h2>
+<p><code>Pooler</code> resources aren't cluster-managed resources. You create poolers
+manually when they're needed. You can also deploy multiple poolers per
+PostgreSQL cluster.</p>
+<p>What's important is that the life cycles of the <code>Cluster</code> and the <code>Pooler</code>
+resources are currently independent. Deleting the cluster doesn't imply the
+deletion of the pooler, and vice versa.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Once you know how a pooler works, you have full freedom in terms of
+possible architectures. You can have clusters without poolers, clusters with
+a single pooler, or clusters with several poolers, that is, one per application.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>When the operator is upgraded, the pooler pods will undergo a rolling
+upgrade. This is necessary to ensure that the instance manager within the
+pooler pods is also upgraded.</p>
+</div>
+<h2 id="security">Security</h2>
+<p>Any PgBouncer pooler is transparently integrated with CloudNativePG support for
+in-transit encryption by way of TLS connections, both on the client
+(application) and server (PostgreSQL) side of the pool.</p>
+<p>Specifically, PgBouncer reuses the certificates of the PostgreSQL server. It
+also uses TLS client certificate authentication to connect to the PostgreSQL
+server to run the <code>auth_query</code> for clients' password authentication (see
+<a href="#authentication">Authentication</a>).</p>
+<p>Containers run as the pgbouncer system user, and access to the <code>pgbouncer</code>
+database is allowed only by way of local connections, through peer authentication.</p>
+<h3 id="certificates">Certificates</h3>
+<p>By default, a PgBouncer pooler uses the same certificates that are used by the
+cluster. However, if you provide those certificates, the pooler accepts secrets
+with the following formats:</p>
+<ol>
+<li>Basic Auth</li>
+<li>TLS</li>
+<li>Opaque</li>
+</ol>
+<p>In the Opaque case, it looks for the following specific keys that need to be used:</p>
+<ul>
+<li>tls.crt</li>
+<li>tls.key</li>
+</ul>
+<p>So you can treat this secret as a TLS secret, and start from there.</p>
+<h2 id="authentication">Authentication</h2>
+<p>Password-based authentication is the only supported method for clients of
+PgBouncer in CloudNativePG.</p>
+<p>Internally, the implementation relies on PgBouncer's <code>auth_user</code> and
+<code>auth_query</code> options. Specifically, the operator:</p>
+<ul>
+<li>Creates a standard user called <code>cnpg_pooler_pgbouncer</code> in the PostgreSQL server</li>
+<li>Creates the lookup function in the <code>postgres</code> database and grants execution
+  privileges to the cnpg_pooler_pgbouncer user (PoLA)</li>
+<li>Issues a TLS certificate for this user</li>
+<li>Sets <code>cnpg_pooler_pgbouncer</code> as the <code>auth_user</code></li>
+<li>Configures PgBouncer to use the TLS certificate to authenticate
+  <code>cnpg_pooler_pgbouncer</code> against the PostgreSQL server</li>
+<li>Removes all the above when it detects that a cluster doesn't have
+  any pooler associated to it</li>
+</ul>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>If you specify your own secrets, the operator doesn't automatically
+integrate the pooler.</p>
+</div>
+<p>To manually integrate the pooler, if you specified your own
+secrets, you must run the following queries from inside your cluster.</p>
+<p>First, you must create the role:</p>
+<pre><code class="language-sql">CREATE ROLE cnpg_pooler_pgbouncer WITH LOGIN;
+</code></pre>
+<p>Then, for each application database, grant the permission for
+<code>cnpg_pooler_pgbouncer</code> to connect to it:</p>
+<pre><code class="language-sql">GRANT CONNECT ON DATABASE { database name here } TO cnpg_pooler_pgbouncer;
+</code></pre>
+<p>Finally, as a <em>superuser</em> connect in each application database, and then create
+the authentication function inside each of the application databases:</p>
+<pre><code class="language-sql">CREATE OR REPLACE FUNCTION public.user_search(uname TEXT)
+  RETURNS TABLE (usename name, passwd text)
+  LANGUAGE sql SECURITY DEFINER AS
+  'SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1;';
+
+REVOKE ALL ON FUNCTION public.user_search(text)
+  FROM public;
+
+GRANT EXECUTE ON FUNCTION public.user_search(text)
+  TO cnpg_pooler_pgbouncer;
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Given that <code>user_search</code> is a <code>SECURITY DEFINER</code> function, you need to
+create it through a role with <code>SUPERUSER</code> privileges, such as the <code>postgres</code>
+user.</p>
+</div>
+<h2 id="pod-templates">Pod templates</h2>
+<p>You can take advantage of pod templates specification in the <code>template</code>
+section of a <code>Pooler</code> resource. For details, see 
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerSpec"><code>PoolerSpec</code></a> in the API reference.</p>
+<p>Using templates, you can configure pods as you like, including fine control
+over affinity and anti-affinity rules for pods and nodes. By default,
+containers use images from <code>ghcr.io/cloudnative-pg/pgbouncer</code>.</p>
+<p>This example shows <code>Pooler</code> specifying `PodAntiAffinity``:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Pooler
+metadata:
+  name: pooler-example-rw
+spec:
+  cluster:
+    name: cluster-example
+  instances: 3
+  type: rw
+
+  template:
+    metadata:
+      labels:
+        app: pooler
+    spec:
+      containers: []
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+          - labelSelector:
+              matchExpressions:
+              - key: app
+                operator: In
+                values:
+                - pooler
+            topologyKey: &quot;kubernetes.io/hostname&quot;
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Explicitly set <code>.spec.template.spec.containers</code> to <code>[]</code> when not modified,
+as it's a required field for a <code>PodSpec</code>. If <code>.spec.template.spec.containers</code>
+isn't set, the Kubernetes api-server returns the following error when trying to
+apply the manifest:<code>error validating "pooler.yaml": error validating data:
+ValidationError(Pooler.spec.template.spec): missing required field
+"containers"</code></p>
+</div>
+<p>This example sets resources and changes the used image:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Pooler
+metadata:
+  name: pooler-example-rw
+spec:
+  cluster:
+    name: cluster-example
+  instances: 3
+  type: rw
+
+  template:
+    metadata:
+      labels:
+        app: pooler
+    spec:
+      containers:
+        - name: pgbouncer
+          image: my-pgbouncer:latest
+          resources:
+            requests:
+              cpu: &quot;0.1&quot;
+              memory: 100Mi
+            limits:
+              cpu: &quot;0.5&quot;
+              memory: 500Mi
+</code></pre>
+<h2 id="service-template">Service Template</h2>
+<p>Sometimes, your pooler will require some different labels, annotations, or even change
+the type of the service, you can achieve that by using the <code>serviceTemplate</code> field:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Pooler
+metadata:
+  name: pooler-example-rw
+spec:
+  cluster:
+    name: cluster-example
+  instances: 3
+  type: rw
+  serviceTemplate:
+    metadata:
+      labels:
+        app: pooler
+    spec:
+      type: LoadBalancer
+  pgbouncer:
+    poolMode: session
+    parameters:
+      max_client_conn: &quot;1000&quot;
+      default_pool_size: &quot;10&quot;
+</code></pre>
+<p>The operator by default adds a <code>ServicePort</code> with the following data:</p>
+<pre><code>  ports:
+  - name: pgbouncer
+    port: 5432
+    protocol: TCP
+    targetPort: pgbouncer
+</code></pre>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Specifying a <code>ServicePort</code> with the name <code>pgbouncer</code> or the port <code>5432</code>  will prevent the default <code>ServicePort</code> from being added.
+This because <code>ServicePort</code> entries with the same <code>name</code> or <code>port</code> are not allowed on Kubernetes and result in errors.</p>
+</div>
+<h2 id="high-availability-ha">High availability (HA)</h2>
+<p>Because of Kubernetes' deployments, you can configure your pooler to run on a
+single instance or over multiple pods. The exposed service makes sure that your
+clients are randomly distributed over the available pods running PgBouncer,
+which then manages and reuses connections toward the underlying server (if
+using the <code>rw</code> service) or servers (if using the <code>ro</code> service with multiple
+replicas).</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>If your infrastructure spans multiple availability zones with high latency
+across them, be aware of network hops. Consider, for example, the case of your
+application running in zone 2, connecting to PgBouncer running in zone 3, and
+pointing to the PostgreSQL primary in zone 1. </p>
+</div>
+<h2 id="pgbouncer-configuration-options">PgBouncer configuration options</h2>
+<p>The operator manages most of the <a href="https://www.pgbouncer.org/config.html">configuration options for PgBouncer</a>,
+allowing you to modify only a subset of them.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>You are responsible for correctly setting the value of each option, as the
+operator doesn't validate them.</p>
+</div>
+<p>These are the PgBouncer options you can customize, with links to the PgBouncer
+documentation for each parameter. Unless stated otherwise, the default values
+are the ones directly set by PgBouncer.</p>
+<ul>
+<li><a href="https://www.pgbouncer.org/config.html#application_name_add_host"><code>application_name_add_host</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#autodb_idle_timeout"><code>autodb_idle_timeout</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#cancel_wait_timeout"><code>cancel_wait_timeout</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#client_idle_timeout"><code>client_idle_timeout</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#client_login_timeout"><code>client_login_timeout</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#default_pool_size"><code>default_pool_size</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#disable_pqexec"><code>disable_pqexec</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#dns_max_ttl"><code>dns_max_ttl</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#dns_nxdomain_ttl"><code>dns_nxdomain_ttl</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#idle_transaction_timeout"><code>idle_transaction_timeout</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#ignore_startup_parameters"><code>ignore_startup_parameters</code></a>:
+  to be appended to <code>extra_float_digits,options</code> - required by CloudNativePG</li>
+<li><a href="https://www.pgbouncer.org/config.html#listen_backlog"><code>listen_backlog</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#log_connections"><code>log_connections</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#log_disconnections"><code>log_disconnections</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#log_pooler_errors"><code>log_pooler_errors</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#log_stats"><code>log_stats</code></a>: by default
+  disabled (<code>0</code>), given that statistics are already collected by the Prometheus
+  export as described in the <a href="#monitoring">"Monitoring"</a> section below</li>
+<li><a href="https://www.pgbouncer.org/config.html#max_client_conn"><code>max_client_conn</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#max_db_connections"><code>max_db_connections</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#max_packet_size"><code>max_packet_size</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#max_prepared_statements"><code>max_prepared_statements</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#max_user_connections"><code>max_user_connections</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#min_pool_size"><code>min_pool_size</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#pkt_buf"><code>pkt_buf</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#query_timeout"><code>query_timeout</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#query_wait_timeout"><code>query_wait_timeout</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#reserve_pool_size"><code>reserve_pool_size</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#reserve_pool_timeout"><code>reserve_pool_timeout</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#sbuf_loopcnt"><code>sbuf_loopcnt</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#server_check_delay"><code>server_check_delay</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#server_check_query"><code>server_check_query</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#server_connect_timeout"><code>server_connect_timeout</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#server_fast_close"><code>server_fast_close</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#server_idle_timeout"><code>server_idle_timeout</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#server_lifetime"><code>server_lifetime</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#server_login_retry"><code>server_login_retry</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#server_reset_query"><code>server_reset_query</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#server_reset_query_always"><code>server_reset_query_always</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#server_round_robin"><code>server_round_robin</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#server_tls_ciphers"><code>server_tls_ciphers</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#server_tls_protocols"><code>server_tls_protocols</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#stats_period"><code>stats_period</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#suspend_timeout"><code>suspend_timeout</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#tcp_defer_accept"><code>tcp_defer_accept</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#tcp_keepalive"><code>tcp_keepalive</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#tcp_keepcnt"><code>tcp_keepcnt</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#tcp_keepidle"><code>tcp_keepidle</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#tcp_keepintvl"><code>tcp_keepintvl</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#tcp_user_timeout"><code>tcp_user_timeout</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#tcp_socket_buffer"><code>tcp_socket_buffer</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#track_extra_parameters"><code>track_extra_parameters</code></a></li>
+<li><a href="https://www.pgbouncer.org/config.html#verbose"><code>verbose</code></a></li>
+</ul>
+<p>Customizations of the PgBouncer configuration are written declaratively in the
+<code>.spec.pgbouncer.parameters</code> map.</p>
+<p>The operator reacts to the changes in the pooler specification, and every
+PgBouncer instance reloads the updated configuration without disrupting the
+service.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Every PgBouncer pod has the same configuration, aligned
+with the parameters in the specification. A mistake in these
+parameters might disrupt the operability of the whole pooler.
+The operator doesn't validate the value of any option.</p>
+</div>
+<h2 id="monitoring">Monitoring</h2>
+<p>The PgBouncer implementation of the <code>Pooler</code> comes with a default
+Prometheus exporter. It makes available several
+metrics having the <code>cnpg_pgbouncer_</code> prefix by running:</p>
+<ul>
+<li><code>SHOW LISTS</code> (prefix: <code>cnpg_pgbouncer_lists</code>)</li>
+<li><code>SHOW POOLS</code> (prefix: <code>cnpg_pgbouncer_pools</code>)</li>
+<li><code>SHOW STATS</code> (prefix: <code>cnpg_pgbouncer_stats</code>)</li>
+</ul>
+<p>Like the CloudNativePG instance, the exporter runs on port
+<code>9127</code> of each pod running PgBouncer and also provides metrics related to the
+Go runtime (with the prefix <code>go_*</code>).</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>You can inspect the exported metrics on a pod running PgBouncer. For instructions, see
+<a href="../monitoring/#how-to-inspect-the-exported-metrics">How to inspect the exported metrics</a>.
+Make sure that you use the correct IP and the <code>9127</code> port.</p>
+</div>
+<p>This example shows the output for <code>cnpg_pgbouncer</code> metrics:</p>
+<pre><code class="language-text"># HELP cnpg_pgbouncer_collection_duration_seconds Collection time duration in seconds
+# TYPE cnpg_pgbouncer_collection_duration_seconds gauge
+cnpg_pgbouncer_collection_duration_seconds{collector=&quot;Collect.up&quot;} 0.002338805
+# HELP cnpg_pgbouncer_collection_errors_total Total errors occurred accessing PostgreSQL for metrics.
+# TYPE cnpg_pgbouncer_collection_errors_total counter
+cnpg_pgbouncer_collection_errors_total{collector=&quot;sql: Scan error on column index 16, name \&quot;load_balance_hosts\&quot;: converting NULL to int is unsupported&quot;} 5
+# HELP cnpg_pgbouncer_collections_total Total number of times PostgreSQL was accessed for metrics.
+# TYPE cnpg_pgbouncer_collections_total counter
+cnpg_pgbouncer_collections_total 5
+# HELP cnpg_pgbouncer_last_collection_error 1 if the last collection ended with error, 0 otherwise.
+# TYPE cnpg_pgbouncer_last_collection_error gauge
+cnpg_pgbouncer_last_collection_error 0
+# HELP cnpg_pgbouncer_lists_databases Count of databases.
+# TYPE cnpg_pgbouncer_lists_databases gauge
+cnpg_pgbouncer_lists_databases 1
+# HELP cnpg_pgbouncer_lists_dns_names Count of DNS names in the cache.
+# TYPE cnpg_pgbouncer_lists_dns_names gauge
+cnpg_pgbouncer_lists_dns_names 0
+# HELP cnpg_pgbouncer_lists_dns_pending Not used.
+# TYPE cnpg_pgbouncer_lists_dns_pending gauge
+cnpg_pgbouncer_lists_dns_pending 0
+# HELP cnpg_pgbouncer_lists_dns_queries Count of in-flight DNS queries.
+# TYPE cnpg_pgbouncer_lists_dns_queries gauge
+cnpg_pgbouncer_lists_dns_queries 0
+# HELP cnpg_pgbouncer_lists_dns_zones Count of DNS zones in the cache.
+# TYPE cnpg_pgbouncer_lists_dns_zones gauge
+cnpg_pgbouncer_lists_dns_zones 0
+# HELP cnpg_pgbouncer_lists_free_clients Count of free clients.
+# TYPE cnpg_pgbouncer_lists_free_clients gauge
+cnpg_pgbouncer_lists_free_clients 49
+# HELP cnpg_pgbouncer_lists_free_servers Count of free servers.
+# TYPE cnpg_pgbouncer_lists_free_servers gauge
+cnpg_pgbouncer_lists_free_servers 0
+# HELP cnpg_pgbouncer_lists_login_clients Count of clients in login state.
+# TYPE cnpg_pgbouncer_lists_login_clients gauge
+cnpg_pgbouncer_lists_login_clients 0
+# HELP cnpg_pgbouncer_lists_pools Count of pools.
+# TYPE cnpg_pgbouncer_lists_pools gauge
+cnpg_pgbouncer_lists_pools 1
+# HELP cnpg_pgbouncer_lists_used_clients Count of used clients.
+# TYPE cnpg_pgbouncer_lists_used_clients gauge
+cnpg_pgbouncer_lists_used_clients 1
+# HELP cnpg_pgbouncer_lists_used_servers Count of used servers.
+# TYPE cnpg_pgbouncer_lists_used_servers gauge
+cnpg_pgbouncer_lists_used_servers 0
+# HELP cnpg_pgbouncer_lists_users Count of users.
+# TYPE cnpg_pgbouncer_lists_users gauge
+cnpg_pgbouncer_lists_users 2
+# HELP cnpg_pgbouncer_pools_cl_active Client connections that are linked to server connection and can process queries.
+# TYPE cnpg_pgbouncer_pools_cl_active gauge
+cnpg_pgbouncer_pools_cl_active{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 1
+# HELP cnpg_pgbouncer_pools_cl_active_cancel_req Client connections that have forwarded query cancellations to the server and are waiting for the server response.
+# TYPE cnpg_pgbouncer_pools_cl_active_cancel_req gauge
+cnpg_pgbouncer_pools_cl_active_cancel_req{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_pools_cl_cancel_req Client connections that have not forwarded query cancellations to the server yet.
+# TYPE cnpg_pgbouncer_pools_cl_cancel_req gauge
+cnpg_pgbouncer_pools_cl_cancel_req{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_pools_cl_waiting Client connections that have sent queries but have not yet got a server connection.
+# TYPE cnpg_pgbouncer_pools_cl_waiting gauge
+cnpg_pgbouncer_pools_cl_waiting{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_pools_cl_waiting_cancel_req Client connections that have not forwarded query cancellations to the server yet.
+# TYPE cnpg_pgbouncer_pools_cl_waiting_cancel_req gauge
+cnpg_pgbouncer_pools_cl_waiting_cancel_req{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_pools_load_balance_hosts Number of hosts not load balancing between hosts
+# TYPE cnpg_pgbouncer_pools_load_balance_hosts gauge
+cnpg_pgbouncer_pools_load_balance_hosts{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_pools_maxwait How long the first (oldest) client in the queue has waited, in seconds. If this starts increasing, then the current pool of servers does not handle requests quickly enough. The reason may be either an overloaded server or just too small of a pool_size setting.
+# TYPE cnpg_pgbouncer_pools_maxwait gauge
+cnpg_pgbouncer_pools_maxwait{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_pools_maxwait_us Microsecond part of the maximum waiting time.
+# TYPE cnpg_pgbouncer_pools_maxwait_us gauge
+cnpg_pgbouncer_pools_maxwait_us{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_pools_pool_mode The pooling mode in use. 1 for session, 2 for transaction, 3 for statement, -1 if unknown
+# TYPE cnpg_pgbouncer_pools_pool_mode gauge
+cnpg_pgbouncer_pools_pool_mode{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 3
+# HELP cnpg_pgbouncer_pools_sv_active Server connections that are linked to a client.
+# TYPE cnpg_pgbouncer_pools_sv_active gauge
+cnpg_pgbouncer_pools_sv_active{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_pools_sv_active_cancel Server connections that are currently forwarding a cancel request
+# TYPE cnpg_pgbouncer_pools_sv_active_cancel gauge
+cnpg_pgbouncer_pools_sv_active_cancel{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_pools_sv_idle Server connections that are unused and immediately usable for client queries.
+# TYPE cnpg_pgbouncer_pools_sv_idle gauge
+cnpg_pgbouncer_pools_sv_idle{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_pools_sv_login Server connections currently in the process of logging in.
+# TYPE cnpg_pgbouncer_pools_sv_login gauge
+cnpg_pgbouncer_pools_sv_login{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_pools_sv_tested Server connections that are currently running either server_reset_query or server_check_query.
+# TYPE cnpg_pgbouncer_pools_sv_tested gauge
+cnpg_pgbouncer_pools_sv_tested{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_pools_sv_used Server connections that have been idle for more than server_check_delay, so they need server_check_query to run on them before they can be used again.
+# TYPE cnpg_pgbouncer_pools_sv_used gauge
+cnpg_pgbouncer_pools_sv_used{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_pools_sv_wait_cancels Servers that normally could become idle, but are waiting to do so until all in-flight cancel requests have completed that were sent to cancel a query on this server.
+# TYPE cnpg_pgbouncer_pools_sv_wait_cancels gauge
+cnpg_pgbouncer_pools_sv_wait_cancels{database=&quot;pgbouncer&quot;,user=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_avg_bind_count Average number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer.
+# TYPE cnpg_pgbouncer_stats_avg_bind_count gauge
+cnpg_pgbouncer_stats_avg_bind_count{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_avg_client_parse_count Average number of prepared statements created by clients.
+# TYPE cnpg_pgbouncer_stats_avg_client_parse_count gauge
+cnpg_pgbouncer_stats_avg_client_parse_count{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_avg_query_count Average queries per second in last stat period.
+# TYPE cnpg_pgbouncer_stats_avg_query_count gauge
+cnpg_pgbouncer_stats_avg_query_count{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_avg_query_time Average query duration, in microseconds.
+# TYPE cnpg_pgbouncer_stats_avg_query_time gauge
+cnpg_pgbouncer_stats_avg_query_time{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_avg_recv Average received (from clients) bytes per second.
+# TYPE cnpg_pgbouncer_stats_avg_recv gauge
+cnpg_pgbouncer_stats_avg_recv{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_avg_sent Average sent (to clients) bytes per second.
+# TYPE cnpg_pgbouncer_stats_avg_sent gauge
+cnpg_pgbouncer_stats_avg_sent{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_avg_server_parse_count Average number of prepared statements created by pgbouncer on a server.
+# TYPE cnpg_pgbouncer_stats_avg_server_parse_count gauge
+cnpg_pgbouncer_stats_avg_server_parse_count{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_avg_wait_time Time spent by clients waiting for a server, in microseconds (average per second).
+# TYPE cnpg_pgbouncer_stats_avg_wait_time gauge
+cnpg_pgbouncer_stats_avg_wait_time{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_avg_xact_count Average transactions per second in last stat period.
+# TYPE cnpg_pgbouncer_stats_avg_xact_count gauge
+cnpg_pgbouncer_stats_avg_xact_count{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_avg_xact_time Average transaction duration, in microseconds.
+# TYPE cnpg_pgbouncer_stats_avg_xact_time gauge
+cnpg_pgbouncer_stats_avg_xact_time{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_total_bind_count Total number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer
+# TYPE cnpg_pgbouncer_stats_total_bind_count gauge
+cnpg_pgbouncer_stats_total_bind_count{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_total_client_parse_count Total number of prepared statements created by clients.
+# TYPE cnpg_pgbouncer_stats_total_client_parse_count gauge
+cnpg_pgbouncer_stats_total_client_parse_count{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_total_query_count Total number of SQL queries pooled by pgbouncer.
+# TYPE cnpg_pgbouncer_stats_total_query_count gauge
+cnpg_pgbouncer_stats_total_query_count{database=&quot;pgbouncer&quot;} 15
+# HELP cnpg_pgbouncer_stats_total_query_time Total number of microseconds spent by pgbouncer when actively connected to PostgreSQL, executing queries.
+# TYPE cnpg_pgbouncer_stats_total_query_time gauge
+cnpg_pgbouncer_stats_total_query_time{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_total_received Total volume in bytes of network traffic received by pgbouncer.
+# TYPE cnpg_pgbouncer_stats_total_received gauge
+cnpg_pgbouncer_stats_total_received{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_total_sent Total volume in bytes of network traffic sent by pgbouncer.
+# TYPE cnpg_pgbouncer_stats_total_sent gauge
+cnpg_pgbouncer_stats_total_sent{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_total_server_parse_count Total number of prepared statements created by pgbouncer on a server.
+# TYPE cnpg_pgbouncer_stats_total_server_parse_count gauge
+cnpg_pgbouncer_stats_total_server_parse_count{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_total_wait_time Time spent by clients waiting for a server, in microseconds.
+# TYPE cnpg_pgbouncer_stats_total_wait_time gauge
+cnpg_pgbouncer_stats_total_wait_time{database=&quot;pgbouncer&quot;} 0
+# HELP cnpg_pgbouncer_stats_total_xact_count Total number of SQL transactions pooled by pgbouncer.
+# TYPE cnpg_pgbouncer_stats_total_xact_count gauge
+cnpg_pgbouncer_stats_total_xact_count{database=&quot;pgbouncer&quot;} 15
+# HELP cnpg_pgbouncer_stats_total_xact_time Total number of microseconds spent by pgbouncer when connected to PostgreSQL in a transaction, either idle in transaction or executing queries.
+# TYPE cnpg_pgbouncer_stats_total_xact_time gauge
+cnpg_pgbouncer_stats_total_xact_time{database=&quot;pgbouncer&quot;} 0
+</code></pre>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For a better understanding of the metrics please refer to the PgBouncer documentation.</p>
+</div>
+<p>As for clusters, a specific pooler can be monitored using the
+<a href="https://github.com/prometheus-operator/prometheus-operator">Prometheus operator's</a> resource
+<a href="https://github.com/prometheus-operator/prometheus-operator/blob/v0.47.1/Documentation/api.md#podmonitor">PodMonitor</a>.
+A <code>PodMonitor</code> correctly pointing to a pooler can be created by the operator by setting
+<code>.spec.monitoring.enablePodMonitor</code> to <code>true</code> in the <code>Pooler</code> resource. The default is <code>false</code>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Any change to <code>PodMonitor</code> created automatically is overridden by the
+operator at the next reconciliation cycle. If you need to customize it, you can
+do so as shown in the following example.</p>
+</div>
+<p>To deploy a <code>PodMonitor</code> for a specific pooler manually, you can define it as
+follows and change it as needed:</p>
+<pre><code class="language-yaml">apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: &lt;POOLER_NAME&gt;
+spec:
+  selector:
+    matchLabels:
+      cnpg.io/poolerName: &lt;POOLER_NAME&gt;
+  podMetricsEndpoints:
+  - port: metrics
+</code></pre>
+<h2 id="logging">Logging</h2>
+<p>Logs are directly sent to standard output, in JSON format, like in the
+following example:</p>
+<pre><code class="language-json">{
+  &quot;level&quot;: &quot;info&quot;,
+  &quot;ts&quot;: SECONDS.MICROSECONDS,
+  &quot;msg&quot;: &quot;record&quot;,
+  &quot;pipe&quot;: &quot;stderr&quot;,
+  &quot;record&quot;: {
+    &quot;timestamp&quot;: &quot;YYYY-MM-DD HH:MM:SS.MS UTC&quot;,
+    &quot;pid&quot;: &quot;&lt;PID&gt;&quot;,
+    &quot;level&quot;: &quot;LOG&quot;,
+    &quot;msg&quot;: &quot;kernel file descriptor limit: 1048576 (hard: 1048576); max_client_conn: 100, max expected fd use: 112&quot;
+  }
+}
+</code></pre>
+<h2 id="pausing-connections">Pausing connections</h2>
+<p>The <code>Pooler</code> specification allows you to take advantage of PgBouncer's <code>PAUSE</code>
+and <code>RESUME</code> commands, using only declarative configuration. You can ado this
+using the <code>paused</code> option, which by default is set to <code>false</code>. When set to
+<code>true</code>, the operator internally invokes the <code>PAUSE</code> command in PgBouncer,
+which:</p>
+<ol>
+<li>Closes all active connections toward the PostgreSQL server, after waiting
+   for the queries to complete</li>
+<li>Pauses any new connection coming from the client</li>
+</ol>
+<p>When the <code>paused</code> option is reset to <code>false</code>, the operator invokes the
+<code>RESUME</code> command in PgBouncer, reopening the taps toward the PostgreSQL
+service defined in the <code>Pooler</code> resource.</p>
+<div class="admonition seealso">
+<p class="admonition-title">PAUSE</p>
+<p>For more information, see
+<a href="https://www.pgbouncer.org/usage.html#pause-db"><code>PAUSE</code> in the PgBouncer documentation</a>.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>In future versions, the switchover operation will be fully integrated
+with the PgBouncer pooler and take advantage of the <code>PAUSE</code>/<code>RESUME</code>
+features to reduce the perceived downtime by client applications.
+Currently, you can achieve the same results by setting the <code>paused</code>
+attribute to <code>true</code>, issuing the switchover command through the
+<a href="../kubectl-plugin/#promote"><code>cnpg</code> plugin</a>, and then restoring the <code>paused</code>
+attribute to <code>false</code>.</p>
+</div>
+<h2 id="limitations">Limitations</h2>
+<h3 id="single-postgresql-cluster">Single PostgreSQL cluster</h3>
+<p>The current implementation of the pooler is designed to work as part of a
+specific CloudNativePG cluster (a service). It isn't currently possible to
+create a pooler that spans multiple clusters.</p>
+<h3 id="controlled-configurability">Controlled configurability</h3>
+<p>CloudNativePG transparently manages several configuration options that are used
+for the PgBouncer layer to communicate with PostgreSQL. Such options aren't
+configurable from outside and include TLS certificates, authentication
+settings, the <code>databases</code> section, and the <code>users</code> section. Also, considering
+the specific use case for the single PostgreSQL cluster, the adopted criteria
+is to explicitly list the options that can be configured by users.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The adopted solution likely addresses the majority of
+use cases. It leaves room for the future implementation of a separate
+operator for PgBouncer to complete the gamma with more advanced and customized
+scenarios.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../applications/" class="btn btn-neutral float-left" title="Connecting from an application"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../replica_cluster/" class="btn btn-neutral float-right" title="Replica clusters">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../applications/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../replica_cluster/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/container_images/index.html b/assets/documentation/1.27.0-rc1/container_images/index.html
new file mode 100644
index 000000000..e586fd80f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/container_images/index.html
@@ -0,0 +1,432 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Container Image Requirements - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Container Image Requirements";
+        var mkdocs_page_input_path = "container_images.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Container Image Requirements</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#image-tag-requirements">Image Tag Requirements</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Container Image Requirements</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="container-image-requirements">Container Image Requirements</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>The CloudNativePG operator for Kubernetes is designed to work with any
+compatible PostgreSQL container image that meets the following requirements:</p>
+<ul>
+<li>PostgreSQL executables must be available in the system path:</li>
+<li><code>initdb</code></li>
+<li><code>postgres</code></li>
+<li><code>pg_ctl</code></li>
+<li><code>pg_controldata</code></li>
+<li><code>pg_basebackup</code></li>
+<li>Proper locale settings configured</li>
+</ul>
+<p>Optional Components:</p>
+<ul>
+<li><a href="https://www.pgaudit.org/">PGAudit</a> extension (only required if audit logging
+  is needed)</li>
+<li><code>du</code> (used for <code>kubectl cnpg status</code>)</li>
+</ul>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Only <a href="https://postgresql.org/">PostgreSQL versions officially supported by PGDG</a> are allowed.</p>
+</div>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Barman Cloud executables are no longer required in CloudNativePG. The
+recommended approach is to use the dedicated <a href="https://github.com/cloudnative-pg/plugin-barman-cloud">Barman Cloud Plugin</a>.</p>
+</div>
+<p>No entry point or command is required in the image definition. CloudNativePG
+automatically overrides it with its instance manager.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>CloudNativePG only supports <strong>Primary with multiple/optional Hot Standby
+Servers architecture</strong> for PostgreSQL application container images.</p>
+</div>
+<p>The CloudNativePG community provides and maintains
+<a href="https://github.com/cloudnative-pg/postgres-containers">public PostgreSQL container images</a>
+that are fully compatible with CloudNativePG. These images are published on
+<a href="https://ghcr.io/cloudnative-pg/postgresql">ghcr.io</a>.</p>
+<h2 id="image-tag-requirements">Image Tag Requirements</h2>
+<p>To ensure the operator makes informed decisions, it must accurately detect the
+PostgreSQL major version. This detection can occur in two ways:</p>
+<ol>
+<li>Utilizing the <code>major</code> field of the <code>imageCatalogRef</code>, if defined.</li>
+<li>Auto-detecting the major version from the image tag of the <code>imageName</code> if
+   not explicitly specified.</li>
+</ol>
+<p>For auto-detection to work, the image tag must adhere to a specific format. It
+should commence with a valid PostgreSQL major version number (e.g., 15.6 or
+16), optionally followed by a dot and the patch level.</p>
+<p>Following this, the tag can include any character combination valid and
+accepted in a Docker tag, preceded by a dot, an underscore, or a minus sign.</p>
+<p>Examples of accepted image tags:</p>
+<ul>
+<li><code>12.1</code></li>
+<li><code>13.3.2.1-1</code></li>
+<li><code>13.4</code></li>
+<li><code>14</code></li>
+<li><code>15.5-10</code></li>
+<li><code>16.0</code></li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p><code>latest</code> is not considered a valid tag for the image.</p>
+</div>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Image tag requirements do no apply for images defined in a catalog.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../e2e/" class="btn btn-neutral float-left" title="End-to-End Tests"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../imagevolume_extensions/" class="btn btn-neutral float-right" title="Image Volume Extensions">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../e2e/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../imagevolume_extensions/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/controller/index.html b/assets/documentation/1.27.0-rc1/controller/index.html
new file mode 100644
index 000000000..9cb71696f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/controller/index.html
@@ -0,0 +1,472 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Custom Pod Controller - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Custom Pod Controller";
+        var mkdocs_page_input_path = "controller.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Custom Pod Controller</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#pvc-resizing">PVC resizing</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#primary-instances-versus-replicas">Primary Instances versus Replicas</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#coherence-of-pvcs">Coherence of PVCs</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#local-storage-remote-storage-and-database-size">Local storage, remote storage, and database size</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Custom Pod Controller</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="custom-pod-controller">Custom Pod Controller</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>Kubernetes uses the
+<a href="https://kubernetes.io/docs/concepts/architecture/controller/">Controller pattern</a>
+to align the current cluster state with the desired one.</p>
+<p>Stateful applications are usually managed with the
+<a href="https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/"><code>StatefulSet</code></a>
+controller, which creates and reconciles a set of Pods built from the same
+specification, and assigns them a sticky identity.</p>
+<p>CloudNativePG implements its own custom controller to manage PostgreSQL
+instances, instead of relying on the <code>StatefulSet</code> controller.
+While bringing more complexity to the implementation, this design choice
+provides the operator with more flexibility on how we manage the cluster,
+while being transparent on the topology of PostgreSQL clusters.</p>
+<p>Like many choices in the design realm, different ones lead to other
+compromises. The following sections discuss a few points where we believe
+this design choice has made the implementation of CloudNativePG
+more reliable, and easier to understand.</p>
+<h2 id="pvc-resizing">PVC resizing</h2>
+<p>This is a well known limitation of <code>StatefulSet</code>: it does not support resizing
+PVCs. This is inconvenient for a database. Resizing volumes requires
+convoluted workarounds.</p>
+<p>In contrast, CloudNativePG leverages the configured storage class to
+manage the underlying PVCs directly, and can handle PVC resizing if
+the storage class supports it.</p>
+<h2 id="primary-instances-versus-replicas">Primary Instances versus Replicas</h2>
+<p>The <code>StatefulSet</code> controller is designed to create a set of Pods
+from just one template. Given that we use one <code>Pod</code> per PostgreSQL instance,
+we have two kinds of Pods:</p>
+<ol>
+<li>primary instance (only one)</li>
+<li>replicas (multiple, optional)</li>
+</ol>
+<p>This difference is relevant when deciding the correct deployment strategy to
+execute for a given operation.</p>
+<p>Some operations should be performed on the replicas first,
+and then on the primary, but only after an updated replica is promoted
+as the new primary.
+For example, when you want to apply a different PostgreSQL image version,
+or when you increase configuration parameters like <code>max_connections</code> (which are
+<a href="https://www.postgresql.org/docs/current/hot-standby.html">treated specially by PostgreSQL because CloudNativePG uses hot standby
+replicas</a>).</p>
+<p>While doing that, CloudNativePG considers the PostgreSQL instance's
+role - and not just its serial number.</p>
+<p>Sometimes the operator needs to follow the opposite process: work on the
+primary first and then on the replicas. For example, when you
+lower <code>max_connections</code>. In that case, CloudNativePG will:</p>
+<ul>
+<li>apply the new setting to the primary instance</li>
+<li>restart it</li>
+<li>apply the new setting on the replicas</li>
+</ul>
+<p>The <code>StatefulSet</code> controller, being application-independent, can't
+incorporate this behavior, which is specific to PostgreSQL's native
+replication technology.</p>
+<h2 id="coherence-of-pvcs">Coherence of PVCs</h2>
+<p>PostgreSQL instances can be configured to work with multiple PVCs: this is how
+WAL storage can be separated from <code>PGDATA</code>.</p>
+<p>The two data stores need to be coherent from the PostgreSQL point of view,
+as they're used simultaneously. If you delete the PVC corresponding to
+the WAL storage of an instance, the PVC where <code>PGDATA</code> is stored will not be
+usable anymore.</p>
+<p>This behavior is specific to PostgreSQL and is not implemented in the
+<code>StatefulSet</code> controller - the latter not being application specific.</p>
+<p>After the user dropped a PVC, a <code>StatefulSet</code> would just recreate it, leading
+to a corrupted PostgreSQL instance.</p>
+<p>CloudNativePG would instead classify the remaining PVC as unusable, and
+start creating a new pair of PVCs for another instance to join the cluster
+correctly.</p>
+<h2 id="local-storage-remote-storage-and-database-size">Local storage, remote storage, and database size</h2>
+<p>Sometimes you need to take down a Kubernetes node to do an upgrade.
+After the upgrade, depending on your upgrade strategy, the updated node
+could go up again, or a new node could replace it.</p>
+<p>Supposing the unavailable node was hosting a PostgreSQL instance,
+depending on your database size and your cloud infrastructure, you
+may prefer to choose one of the following actions:</p>
+<ol>
+<li>
+<p>drop the PVC and the Pod residing on the downed node;
+   create a new PVC cloning the data from another PVC;
+   after that, schedule a Pod for it</p>
+</li>
+<li>
+<p>drop the Pod, schedule the Pod in a different node, and mount
+   the PVC from there</p>
+</li>
+<li>
+<p>leave the Pod and the PVC as they are, and wait for the node to
+   be back up.</p>
+</li>
+</ol>
+<p>The first solution is practical when your database size permits, allowing
+you to immediately bring back the desired number of replicas.</p>
+<p>The second solution is only feasible when you're not using the storage of the
+local node, and re-mounting the PVC in another host is possible in a reasonable
+amount of time (which only you and your organization know).</p>
+<p>The third solution is appropriate when the database is big and uses local
+node storage for maximum performance and data durability.</p>
+<p>The CloudNativePG controller implements all these strategies so that the
+user can select the preferred behavior at the cluster level (read the
+<a href="../kubernetes_upgrade/">"Kubernetes upgrade"</a> section for details).</p>
+<p>Being generic, the <code>StatefulSet</code> doesn't allow this level of
+customization.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../operator_capability_levels/" class="btn btn-neutral float-left" title="Operator capability levels"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../samples/" class="btn btn-neutral float-right" title="Examples">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../operator_capability_levels/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../samples/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/css/fonts/Roboto-Slab-Bold.woff b/assets/documentation/1.27.0-rc1/css/fonts/Roboto-Slab-Bold.woff
new file mode 100644
index 0000000000000000000000000000000000000000..6cb60000181dbd348963953ac8ac54afb46c63d5
GIT binary patch
literal 87624
zcmaI71zemx*C#x<dy6~89f~^?cXx`rySo;5hvG1}ySulzyA*e~o!<BJ?!No&w>!Tp
zndIaoGr4k-bN<PRo4lA901N;CfT>9U&_Lhd8SbF`U&{aS5&tGC24eIF6>x)sAOb&v
zfVhIZGKkgz05Gxu09p-Ln#TZfWmRDSfawxMKLh|EoVkQZ`Q(-Vma{B@>M4POeg`;B
zkdcjnJpjN;2LM2A0syd<0h`_}My}4p000*vh=&mrIB6Qd!%gkYY(O+#0043i0Dy~+
zMDP?cGjIac<p=QsVE+?P&8$64K{P4=;I1D4wl@F|d}lN_F)#*zv7Ul>*g%2((WW-Z
z97F_wef<K;6NADRv~`49a~o$+zrTJ1HJ1(mpxUl*Y%5vY8G-nCw?H%yA1t>;$GNYK
zfxA5bOcYe@pSr|Q_wavg4Qxz6G!PGXCa5nlCp;7+_I6Ir05EaTdqH{!{e&2vHVd-7
zqY0?4Du@P%1cew_u&6xu6(fCPef=#1e*gtEa_Fq!$Vh2VDfAaI9A$rFawGD%3Zn{`
zgy^VfK}VWhXJU_#D|iSpz)(AE6ae79l9T`z{7Dgec+=K{^=9K?!wUkQ%eaTrpjIC>
zLC8Nb@pFsd7ck_Sk!=816dlWeVYWSNRMZzZ%}6%bZDUA)+~NZV;g9^cr|GFKyZe`}
zi<ekzIFh6#w01-1!}Cr)w8-*6fz;IS@ZY=Q(>dYTZm7dU!k6>K<5q`*>Dao<!#4$s
zUrSoOZCO@|l8<C)V|^~XGM}XUhO&>$Y2>XfSh@4lX_chMROUufP07Bu;w~|>J@*~h
z8aP=_3{}bwwX%57OdFGJj?3eh?_+r|_=znRWSa|kViSC$RK)Ok@HyQrquqh1QhUm2
zD#axlDzU|}+qJuj4PN`wdW1Q8w#UyVncX4X1;k;KqNy&nG-avs3m&sQqsS_7#K?e|
z)9F;OQ!VEQ%1Qf(Y|eN+2lxU}?rMDt1nhIO>18ni9TBcQ4`8!U*6eXw%5OuafEU=M
zwS%l$`22YQyA8YF*h3ZaT_6lZIAm*v7dFfhg1$5=H^f)z%E@iat(7w-QOoT{3(4)~
z>cHV9nMzvk=|x;0r~8FU5u%2{?xjU`UU^#WHgM&BANT1*`K1sX!83!8KiG*V82yx5
zBx8pm+K>F!(2D-b6Co81jUK2|S8E@zTp#2Ufm(hT5V@_Z#HZsaf1oaKyOv{%w0H5_
zF}kq>VThTK0kHmIOHDSb|MS6asI}pF(lz)h3>i=(L~5xZ5%ZO4hJ>e&6bqi1`$qxf
zPTr?6Vz4nNi~<%Q37jRQ@=rM?^5Z;yB?B2Iqyy+#Lx?6~f+hnP79({gynD#{T|p)o
z<ZUL$9StT9xvj6)TS_&6sx1om9oHJV^Bw-NZ4$x)(wrS~;FfF+1^*7K<u+bd0fX-j
z$8q8(T;{JL1#tb$_!%q|Mg=&tEPPrltgHn{^(?e2b%^6X307<9SL*qA^2rYEk=yLa
z)$?f=?UC9X2p02rIGhkX?RngOV!7QAKVOo6H)PtpCJ4QR5YWdKpr#0=ZQ3y?LZ^jV
zpsB1gtgoZxxu+^|G^}={<+!J=zBcT>E{8-e&8OK-0s?8KfNj9tEK4B8RC$x-Zs2hl
zAp<Y~cPjz642_{YB4g`EMj1{OFhpxBL#qt0syxhdE61}8>%2Vnc`G2)ij&Z?P;4h&
z%<3zlRmIRw#E=zlj%7Z@PCA7ZOO6$=cqgRTid)aJ*mNh^)QV8gDgbk<6Vn2X|4&Ik
zY*WE@yAd}<KX=tGOV%zAe?Lz=26JE{Hx3zh2rE+^D;L5pXQmTt*9|vOVw*n#YpZnI
zC*}62ai+@gR{Yu4Kw8$$@>X`%_M8*u61)~Lr`Cu}mS*kN&o^z+?JT)oEtJwN%`de{
zVV>CI9!cW0fy3_Tw4QBdHKB)(uvSlLu?{uzk2GPAejn44UHjTur#xN#)V|xzS;r{v
zJ<IQV@>#o#?|rTB2Nzj~0wg0)B;Y#eq$=S|I=H05;jlVrq)OouufyhCVv;G4ikyye
zt9q-1t4$@If8|ZvNPa&3zQx9AskF&!-ihX(=c0qn&$u%+orBbFAUaBYypyzpbOL_c
z*PY#7AjL9BvkGHSftjR&+ZpD8JnlJ%7|jvtVNhYUmpHpEvYE-CD(rE+XuXd|Z6hJS
zvLj?n&L%}=GSS(ko?AI{$pWil$->0!=c5EonyH#sgUWN`B;tY^#&}h{imd_c1B(QD
zL$vZnQa1XCB`RWbX7Y;dLZFM`?oO-fi%eE<8YCS1DAQN>V61MQONDas4iiV=ysO`y
zPFV|%GlZ;SC>gC<h6e_G-`9uo7Be*L!8A?>NU<VG<G6@VCf(OjxKWH*N2Y}iG)Hua
zX9W*})(kE!$ee`O17E?7GaiE`AX|y{gftp@^PwW&er6&f3KG;PApL|FOs>rg>lX8F
zy_yfLhE{;u%TviO#PqKJrbQVu4`B*EUA6-0De%W<sP{(L`6{L0v2vclwQbTnG{}RA
zpR{uJxB*K5E$jF|r5R^}SkK#$g>uSFgR)+}qiuLfrYt)hnrA~eu9CPLJY7CI>6paS
zWnopw;$U)dp^e}K+3}Y&a@*xhfM}R|{p`3LBacr-0@@jdb$DYK?&I$<DIOjhQ#!H~
zHan+JnmVHz(tC0_3^pWH=>w^NSzRrP_ObwH`u$VHUzG=(mgYH-8BkFliqhRIf0BGd
z#SQg;0fKNb#@807bm?Drgy!lpM{LR48+WFs5(5dCRWWRk+F6%u!UC!_e|G-NAr_e&
zkhjKs_ucr>s~%Vl?bq@7jQ0$36KTUBuL?@_DYrCJsOXJ$Y<%D<#UD9hAiKhziB?l{
z+@3`ziu0ITPg|%c2ncA@g=VtiSPCbJ6n%WEhX-?xw^!rQv@vT8nwRq?U+&teVHix6
z?zsBZFV{XuCaJAy)0D<mI|E)7ne3VNR^5&Q?7vR86`!%lLX-=;bNmXhxw0{;-dFE(
zr<@X~3`81qN|S8p2!r!2Bg%gc`W|FM{cue>X&{jBMtI-uo7(#+pMpP{GQ%-HqM&}N
zunOPt%jUEFRew`XR|b8$R#@!TW*RD)Lmyx8k9~^#iXhmW%OvI9{o5gwvKwbxO-Pr9
zrHL8uC0;lh1-W>*+wP)oZXv-n8PSUr9c@>~L*?3tB`{h`R5jcBC;`!sC*ay}P3YF-
zOHx+}f^xY%^qt^rl;*2M-0sVu0O`#xK|d|V2Qchx2z-oqKg=uf{9PTB-=1CMHOX}w
z5ik+PI%J9ATOLj_NS9a6sqdVXRmc$`@|{FPde3Ld@i=>DCcZ9vU4_8Pt<IaX133(w
zlUMY68?xQ>@60L=3{Ddonu+<z+fq8m7Tg$|fd#XyC{9`NY=*f}wg~;iBYZHH&l||=
z#+%-@OyRq~T$rXkc(Ira8>Kt8=A&#Vn{1Ypkd|)aXDP#76Yobb7n%}Flnxrd9qH4-
zWI~QjPwDfrhjA9no=4E%bL6QaE@56ZdTHg}5v+wEZ3?%SxQv=RuOi0^w~E>&huyhO
z<&aJvb9)GNqf>5R2$CP~*2xmZXFtOc67KBLCroJ-^HXR(Q@yh1Ym~M$BF}dXymZb;
zk>B~hz{v<q_fPOG0ka~0#P&YIVe6or(9C(mvk82g91ib^$p4<-TVQ_4jJx&&8i~pa
zA-+@gexcx!j0#^W$quJWWuP@aLz>A7M=mt7RyFZ=*!h6O412ly#z@538Xo1Q%QXY_
zis@n>*p35+Jl|D=G8Wpv4CII7V^V(+HiL=1WJu)d#D2=;A^ULM(34*W-VzRN^APY1
zkhD6f&96yS+dXkE;QJKLjtK>wH@ItlmA<xfln}<(xi;5m?!cur5pc6^&mb15&;TnK
zDQUiq@PM~X2>*cE0+Tn$X1<N|@u?w=e3B4F>zfoxOK#8Y4e!KSQ016l1FTS_y;IU~
zH0H@KQe66>d{J0yJF!U30V2p<IMcwA$Vay{%^c(g>|jjwpP~RQcZ^;^$KDSF(j~Z6
zm9$oU#i>!atd#+3?Gb6T65}nLkV@-?ZE6^KF87fk5twD`FPTW)uDAlX;VGsO6izN0
z^Zi9Jr}G(4_W~ix1M(=E*;L`Y@`9b|Z2{J5;X$4yw4?MBL<>5=7ipHZ#He$Bqkw_h
z>4)%&V#x$ZWi(mi=BQKlg!ONdCONiu3p90^w&(fiDJNQ-2N{i*E`OJRb7xXANuFPP
zVjbTG#N|@OJ2&oQu6<WuYOoK$9E%Z?NLW;c(0)ri#(=Ym8OlU`LwZbSeL=1UuG~O(
zO)U!*QIHalyF%^5&y4RsQ+3h=B6(X+OR#(z_o=YM0P`r4?DSXqL;!=p$qxBa0Qrec
zzel8ADMXN15Iil?ieH|t!0q|<YP)@5<t3|g%C0)AbGlfqG&Se*l>BsxlSt>6I9Z#v
zu$#o3+v4i?$vn9P%7?nx1O>)%-!huKh1e5e<ipn%lB^PN*;dXbSb7uM74GBDS0}&d
zF~iPpe`2XSuq^^dT=?Hm#a8`jW}~K)>i4WyQ{69$o*73?hEi4^L|PM6o3OZtv{obc
z&^9FkXsSNueb?fEWGBaqZYg-?9Qn2HM|E(mEA%4SDm-WRD+CQ*<NSy$>>BTHu_sCe
zEtvvN11~9xQ;IPTSwyAbnKP=K5s6$OK;z-+S*|Q88@U2xmolu#**gnC5nKlfGY9rV
zdxpco&ZC=Fe*_EMZh4N~d?JoQ#(VzBeWE?`x)AH5mQ+t&+GVY#cpDR*Wj)tIR^67U
z@gpgY)%J11x{_0J&>yI)?jUKBh@B%W@(Jru-XOn7F{-F=h%yW0k~4%?PM?xFNV_3@
zQBO0A%1qcBMv_GG(4vz&9`2MBS?2W3&B|N<#-pA?r2R$qY_ZR`(%eS0Df&C*ne~Mr
zCAXI>*0SuqQO#R*?R4Wkk>x9<QS;d9t({q#Yget}eS5#J+gSS^-_XUbuh{B^0hd@z
z^6nm)W8k8!A$<Mqq5GLmwT})z$>HdeV}K4-Zj$_{=(WXD)GN$W#jAL$20vwPD&q*&
zK6<N4*O%|EQR*Jq92&ja9sOPvU#r1erK(bhMq~GJpCVpWd?^t2wOZwT86x*QTZMc{
zSRD)2zHp4wJC?tWaXp4!EKSL|)`uCgElq=siDcWGa#HetO1V_>rc#Y2OZv}<?1&si
znop6d41^^F7bBW}a$^Y_P9Fx(F-Dudq>J>(0U_y@);yb6iiTJo;V=z!?!ju|Jm2_o
zeZI|odXun6**3LT8a}ZYBi?#LNzbO*)~oWrGO0CemvCPD<w(-*8MmG5T;h69?_N>Z
z<CS9kJukihi~G4ghIcw1fuQwQe6Gu$usDPBp2rchBmQnW!6Dai$G=Soi)S24OjCF`
zGQLpd@nUk%bi`pW+&`_PyRiY4gEH273S^8~Vwt0H4*dAPUpFom_f;mV$42(Imo3gr
zQ<k{j-zZ!QslCw1%8hX!og`jVuM}y?-N{5NTRK<Nb{xbme|*eQG-_ux{X7?#Z|^kF
zE9e_ClD}|#9%G&2-(96x{5opI!sj-;Y?ixzmxVW_>1(^{WXJFJ+&azKH<)Mk2kSY^
zs_$-lh>7D>*`2%tSFhX~ToY9-EVe&G0ec~2T10UPwF?%n|KQT*k>M1Ur@yL($D8Or
z)F<zY`?1E;#ML*NLZvci8je@yM{Sh#BO%5rQ`~xup|Fa*@QV*YBS#B)yJx1Q2SvW)
zS^v<lJ4#x!DfiC*CGT#YGnrlQ&~gO?*?;;JY)!Bq?1>&&Q#7w$_DuBlT{iTg?5>b6
zYI7KuM$~c#OI*9xvk7l^EQ^^VO}s~>Vp=v4zEY&#-xi|;?RGi;Uw&cd&HLDA)S{sP
zLl=9j5^<OCeAjn~B{J0`dC?>2bH^Z0$FOIYKAE;p%JVi&ebtG%nIoo|6Y?R;51!W5
z4I~R;7{UWIc#X+n?>@7NeJA#h*Ynkmm!{kFtik21{?@1+x$~ISgwU^f5GXgWP!$J8
z{M)Px*Ib#q><@;GJ4<mG!^Q78iffa((N74jx2~po(Z_Q?DL5{vFw!TCWQ;;_a;H<h
z&l=5w>AEY*9kVy>MKsQ*YWO{TclTJc(4wN8)>!f7IE>_Yv%VIyuKyAL;H1Rq5w!h1
zZ3dp0Cd~Z8wS`U4=kabMC9TDrQ8r;rZ8iB5-o;#yOs)j(4EtM1y2|z!xr0x@nFO_l
zJc9K<LX6K$2|O*4qTlL)LI_$8^vw=D1vvejYIQ$iHTp|F)y0sq#~EN~`@Sc&3oC2Q
z{P-<nLLse*=T-z%2!sB*<DBs;Mo48q_lPEIU^Giu6~w{bP=LqxN0dm+5yq_+w7Wsh
zW-dfqwa;#A_SFb`SW4{*&FV2pctLRhn#I~Ma{AZ8ou|VeZ1GmTN)+ja@1z*wt*(r6
z1bI=8F^*BYuc%n<F_rS)zhpYW)!!W|p<%VBRLY~L(>v{y7B*P}H^thk@Ac1kxpe%J
z?z4G+@&$3N#InXh@s5(_Y-?iP@G{mVb#9muk>f`e)PcufO+CCAn~ZE{Ev->nohPzA
zlx4J+d{4(6Tz^d`8ycfJq#EX&LaFt5Ce3hy`&{dh@GGeoG^PiaoHrUhiF7+SIVQ~0
zH>A>&yH#=faF(iV9xT895kg+G`^8ri?7pvWniK3zG7KE|c{-ysM&i7YaB~j>HMJ8(
ze4R)A`qw+1W!|Bzf$>**n{P1x(GhyQas0UmEpf$H<Ib!Mjg@RR7V_fUvmxUxSyj#@
zl$}T8kQdAm)G{XAtmzot&YhfpY(E5NG+q$XrFo39|5#T<o>IL07TCx{)F&2+-ZVT_
z<BIY=^V;)So7SMf&K&q;del8p-Z6z&u|>bJ&9`s^g||GWesGPnS(}}GYKk(r;UoZ)
z6}B*CNMKeQ!>V>1^_kNMYD%T7US;bviJKM*_+9+&q|}#SzPjMqMWs!pNLuyZNU#V&
zr9x#;O7*`*f{jwD<^Mz~$?z(rf+3(N27X>Kj~l4`lLiW?@Dm;sZDAxoe=FiwER$C`
z{$I&0jL(nXpnBU7bLy{~-PF{dihLS7rkY4z?-{IG-#0fb=I<J6eM{f%HXY*4wE6pS
zdPfxAHaie_W*LX-LExV=wfNp<=;IG^wBp9D+_|Y-sh-F1!Y{`3p%qzUo;T#W#MA%0
ztz0lf<I*ebJw`XTr<Lx`ey=63sN~oYxF(QN`$%r@0<YHmuQ~4PCElXxS59}|1)5zt
zbFdr(Zw6F@4t~#Y2lY(n^6w+CgvJ!ZyYCfAZyltB*FQw`9H`zPZ#1z{$o-5VQCJdp
zuj174;aeA8;>XmH;zbHxkdNjUUgMpWGnm6Db@C4DYp!#4C1!9gGMp3NT0*>ixyB&R
zBxMYWeQVdI!F;)%Ro|}{f`JXuqP|wL4sR=XI^7eNshR|^B72VTHjJc3FKW5BCy&{h
zgqL2{Khn>yGb^a(19;`vZg8ex#fI3D7dg~FoLPqk@^3kZSXUqMjjCKEi8JvJ^O~$r
zfu4C|O);X9ct+WGAAh_GGEc3%1dfh;S^NXm@JqflV~^L<e@A}EK)d%7<fkIK)5D08
zPfFY~<`U({?3OlNGAs7E_q3_4^>OT`i-$38<-)I@c6fQ!|L7jN(7}5EZUu~;6m0s|
zrqi%14?Y3i18989elP}u(YTUBcw`E%E)Lcyd||y`&hJze?Y>9!iamRw-X<=>&yOm=
z-wlQ@DZ^q^xOysESRvT^Tt}%s#A5bSlO}gNO5fP}0I?%(O7+U%pOrD<W_A~Q+WKW8
zn(<43wWBxBVv37VJZtS@dRlG+^MYPCnO{Dw&)KX1yEHUYoY0W%-hsPNg4wElwTJ(Q
z)hP)fsAr%h*ujiteF<^(1ARQ9^L|qtE-X4#@w{c&`lGkYk9>%9{)45wtwNHWt9ByY
zo#Zu}_4iV``Kb(@Jw=s0MVBiDCJ)AHe=_0#2>gu;zkG_XjolPWw(^X<GF*KaM@Lo~
zBN^iyW0rGI$S&6F=u6j#v#eYf(j)Ooz``rJ{%5p?ruq!c47@zCpAgL;jdlY688UvS
zf*1a}tA<%kjZ->nH_Ur31cU_kp_LQ2fz5B%l*`Fo_a{Vnln~e>#6}#BP93D9^)@Yw
zs_(KRF#8{kXQ0k?VWdZOhZ(ok;@p?LW?r`WB-t;y<Ln>UPuy?5@^R9xW+zwEeoz3d
z7Qf&*q3C8uyY&O+I}-wQO8P`JrdFRrny_lcy#&bd3zI~W9FmN(!Z(X%T22(7+>|RD
zc}8fBryq5>Q;W}IGMHs}{tl0fHwRzL)dcfPo9Tu|Q_Ka$StHMk=7)S8?Rvutv&4&-
z?eD3>4@-f8e?-0QA5lj>0ln<b0=uZ=xi70`*!iUG71JdZ(`*Zew)3N<a$+tl3ua|N
zV-=HB;AtKIqDC(H!r=o=QZ2u<Ds_Prj_O#cl2|eeFiEi}ipE6cFX`llT6LueRP;|Y
zrV-h$N>d<=^LeaPK`exYra?Nywd@yzl|yr5%c|Cz4gGl&=Hg!_dL#Oj(iKoa^q7eX
z11JO35!+{3*s)a|FVz})_8NO$wRx+oeV3~2W?T4PMq{eNZ1k3_;YYskJ>u@6Q_8gB
zANpPM>R-k)wck-cOjVpy@0y36X&c|Wn%}$Bx1;{asUAg1nW=Cay`3Q&^>gK*W|er#
zT1e8qqBO8xRv!Cdh@HrT6z*v|$aqGu`Ci^B*Dm1|c}tImJmUCKoe9rXMswZ=9ObUd
zsfDgXE13;W8Cn@dzLt7Hn&BrM|BpUXX{iVHNoGw@s}!Y}m1BiuIXf}r71jRl769|r
z>OZpfGGP*b1%H8|%IMCX8JtxZ>e}RLlX2Yq%TDy<(Pn0GN#AJkc(cMUvm={#w;*bB
z)clP(s-HuWW!~41nLm?@cZwJD@=K(9sF~)(O~;6mnrE!4_W&+`QJl-C+5p7Nr9Qoz
zC2_bZ*?kV>kk@ivwC>3<I4;eSo%)c2Dc`dC51~IAt>DO^!f#`=^%K}HM`PYgIBz{T
zbh0iz^YfaVr5Qy>AmG#VuG8%TzP!h2XycLB-mtJ>hWFO>%rT6T0I~%>zz7?CNE6fZ
zzI)u&`w)>Qd7UxWBdh4GPh7pl5wvRzZ-x{%6n;Jr7k2af6<NMBW#8DretyN*PK{{L
z@K($+`6$CBJ=Nq>cF%IQfB&RVWt@D~I23E1I$WZhcfCB}R>nOS&Es=nE5-K9_M6eF
zT&nEIye;MG_{Ob4+`ImhTdnl5t5oSFpH4_3XS#B!6yGN2zj)AeEuBBIo-53Wi}74C
zcN$7ZVzz~PJt}2mSE<^9Tzj0ouF@LRPK<LgLaGCo?vbgN+p@@gQm3)qviN;6**?{9
zr^p8NMS|NnTnyiTYyu;O$Wx5UcHFFkRiN+MZt8Ej#SGa|oE6yyCliEK?cY=U1W_&t
z*=Mt&t|0xgaG&?wY`#fjH`|?Uu<|r?9{=DVP!KI}>N7M_`wT*M&lsm1pq8WMDeJAh
z(*GM=yIldV)+JXTkKG$~jDG#*OCyjN;#jFeDUd4a*tuvI_kAR4jf!J*vdJ!9`>y-?
zse7BJsXlT2G;fLb!O0)~h7T=w%2NOA`$Z=2ONkXFfk@>qNe1S7^pKU4C{;byeaxoN
z<7Br*7;DCd$xQg=GD{7cvJ~g7F$G$e0S%me{C(`<ClcclD@`b@(F2{ni>mmEB2r_@
z-V!O}rU|&lgq3UIZt_gr@(wlJ6Iz&)O}ZOwTkE8EkX86r`bNo;KCCjXN}X=-$~e(9
zjZbJsh~S<e%G+O0ci^FCOzlNr1d<b{iI>+cA6lB~Odi$ymkLx%lYM*3ktvqLU%bYH
zYYNFt4tY|C!0QBsQr!W05G+<<QisAS=8h}Lp0*cbVmSb=peJjk5e~bXo=iteCkV1P
zJ{`rl<^ky(4m19mXB>%Gsju%-bEglutKx9`4ter*<0VTb3(|c=6Ruu=u-!7wkn7h8
z7c8(wqt^NsS}5_uy_Bi7#2!v`aNIJEkXhGr{x&{LVA@6oXPk)fFTYXKY9jly&)p4n
z)f*sog*|?B;@1a4{jMJCM*L|(uwykJrkg30BPZKA+YP}s9qXp)LHUGdrsf6HiH&LJ
zScTgw?}=eO1N-0HWW^+>E$gn0X~!g@`WtV%jcGFt&J@I}uUh$pWtisY%u#k$O%sap
z3FENzPhrodiWRP5lle=C_|eF<8a~J+!z2Gp&NX*VIAi6^g^kAQ38R1EuGumn102N8
zf;~AzD+wW@-8kPTtBchCrctz&Ewr4V_;weZ8Tv=eILUSv3K`ChMu>KM_dseRs3jh4
zh;Z+(%5XM4CQ32EUyO0EQllZ905Vu5oISp~Q86H>wlbuIkkG}Nls)ean*3{OJAe*L
zHQR8UbY}5p(`|1H{B%-4BhmclkTpP3CNJ#`-#)5B;hcI<g@$vxOq%UR!+?-h$>U$R
zMVs)BsQ=Rk`mLODM}2U<SNZCDZZPBSA>~##|63KF`iGZ%_s1mVy4leD(Z2@h$C2{6
zqMjF}+wgp{d?Vf%MZ@elG0!LiV$pROTepwlTaC}qnE0OGzJ*J`o7xR??j?@ZQ`RQ`
z=tjkbg{%9-Qz;J6F+{KV(f5xWis$wRU;q5|;$hng2t_--C0`4!mCjt0fS0u>Ha5TA
zTB{5E3wTEn*p&Yo3}hmc&P`JL_B4%L(cE)Idfo!MxzJw=(LRPg`rn_|9t^9WAn04>
zx+*QCy|`!68FYsBor`$*j%2_4-uSf%2tfFDUw^pL=7LF=_uzPg(jGjcV~0K0-*X@q
zWk7b5Rersd_I|zoUx2|AwK>T53|c%;yt-?z(Vkw+`Yv8VSJNgMKQJcDNaU}+e)I@j
z<1^L-r@Akn{4W51MfA3L>$%#kPnLPtJhsUzet*`+oOOL;HxyKsw8^ea;LubNN9nzo
zWvR_!1^nV%0@K-&VKHHdLsXXlk*CH<sw-bngnpqxJFjstlLK0D?dc>J3;2=DCCC_x
z{txVgC!H{BE>79Tl%$O_#J4v57G(mo%Jz6kYD`Go|Nnp@sgOm_u40--o#d*>i!c(p
zlC_e$zFAp|A^c=p8MC(EvDzblVRoO&g%;i473~e9c5kud0){rXi?Kvw^<$z$>2(t0
zag*0Y;L(oP#m!{fO@94Om)7rNZ+%(L!ID?!$tDL*l`npj?5~MbSc3nC<4-A^{84>r
zLsiV{yY;w9LFOJ;_RPBPK+_;UfYR~NoV*y5Z%p&q-B!n=Av&gsIa&NK?2+(ee8cJK
z@jIBn)!%{-{4>{N6V@1*p=guoa9sMsDpTm6Q|zV1)P7^X4?;?h4^!6`r$`7JrDAz`
zzfn#`GZ$)VQPD3j=er2UyReq%hI;y_#TggaeKCWw?m}5#a*jt1u^G6`Psn)DEDcS)
zO4n$2Xbc8-==65bD28-jj3oVg{7~qaIW}JCvwTaKq47Y#aYBw6aC*p!H>9|#Br&AV
zR=zoLh<O7>RD<aP(KQ=~^Y#nFi=1E(Ajl{gWId+__oybWEi*to79^{v^UaO+0nbd7
zgYG?x6K?$K69>~QuE$aRZ(rhSc@D7YNfc{V#z`ENUP^-jPEX#fN4jPFjQMZ2YrUGR
z1MPj6pJjK$JBW)1$;F<nt0nfOU~)d&i;8=~oYICY+=zAziSQ;=0R0H&IK5OKx;tL3
zLTQ;PH3NU!hVltXV1D{JNLF=<#0kA|&S_5Q@erh>_6PpkYENRf)e^y03{l0kRagIX
zeubVE=Zo`?#?$$`xI|*`jCGx8HwY_7DqJYBgYAT;@x{9wSfb=r8Q!=;SRRb~N8p;}
zKEDSogq717k++(ycA#drrgsT8rc{ictlGKAmMD3L>-=fDB<{SPdKDReJ1dmoo(f52
z0dT?nWKuFq`6&2{WDDACpGUq&dqPXd;e<{_#k>nXlIidd^O9nZthovvG%H2?iKxT(
z?6AbD_Q)mR%!ps`8pMbm7$9WZ>EdF$`L7rpn%Y@3oiPn8H^nn&8jRGtaXV>Ugq5#F
zG#@@hf7mPyg!}10d71XbYZ61E)qMM!K%xsaMJ0sOq0n1M+auo=D4?au#QiG*)wux6
zAg;=vU@4jk-@t*hcgG=y{14K>HyxAFmR==$1h@DfFLW3vnwW(3*1RTM?o*Ce3H#e@
z<HIm&{_>Ae!V&O;=%1y?X_6#Ws8UN6$QAR{@`ba%g?RpeC;P1*#Ws|uD=b_R9Bc~@
zxABJ=VuEfW&bLPIx!3dvX0?#WI@PyE<hfVw2&TP|=rqN*M*O)~?+E4vlu7lq7kuv3
zJc2naB+3G1gr0jvk6=<ui7JLnoGM$<77KCKQcW-C0yDr&AS|KXZG<KPc66mUTa{33
z5FPbDP5n`35M?Z&)i5=k5ueAH?Nf}lXoh=aV*=XoA?&!I0~`?p_pl+g5exNEX?lqj
z1BL1!gPh@@)6o&@zF>cnVxmgXXOao*wTFYopu*<;N-@TeM$@j}bQ;K2hj0MOP`2v_
zoCcEDA*75kXppq)7o7&GGDRzCu=p)8`z_T2IO_nxED#10=-U(EXcO?i!vi8T7El}}
zkgqCG(Boh+BqzW}D;Q_e*;q6LjO*S<3}Z%2??()fM@;0X3>c_PY^jW@O7+i6O$k9e
zeSVo~lo{!n>|4>u2SIWNA+`sRga;vd2PLX41~B!#45oQD?iP52E1{W9Xr(r3E1`V0
z%oxq-1m{c`Zt3+4hL-fj3+Sbdke2jKT9MTYJH?HV+ZYIaW(UQSkQS^$I+1w1NN)WE
zZ%8N%!;#|=JFLIOzFJ3NSB<FA*3JGnZ6MWd{qjDfU_=Fuc>INza8wt{TpesBImFe(
z#+!xT=Wq)@&I+!dc%}JeYGBI6dexOgOZ4<~XITsr*Yz!=dTPmRO@e|DeL5VLLP(4*
zKw}I(Y1V+L)bO)%sZoZ-Tv$}X*UaT8MD3*jI-cbqaIfVsd>GCx{xHrx?mo0d#Te32
z=9s)3IaX$Q`@T~djGIp-6LRd#)AmEB-WVg|kG!M|_Fxtaj=wtw$ZuFuCuwz<s~zV%
zhS+Yn7bo%7m@XW#_6Q&1w)r1=w_u^gnK%P`(GX*(P-3XyVyKY*>uDrI79zZY#UZ>|
z^6ta9p_ZRC<K_5%3BE(l7{C9ydSbDIee-h2dtAGoKFGU9hF^n%hz<j0e4v-bVMK%a
z(5g!;Ku(LfdtbZ$Ms4EaY2$S6^NqOgS01my*Yw;;Ielioef4@L4FwzRH^I+-*OZR0
zgWnG}U!!r~w~4;aJkcHay_&g7MLxy29l-Dt?~vsR^55W~L#j}heL?^6iA1Ran~g?^
zxfFdFl14SXRcAkrMkRnn6^LF7R0*L`4Qpm*1A?iRYpFolnFeyy_hxb}XCA0Ek}74M
zX&QUE1|BP6jm=luCY6fwm8#}G$0>9_uTT3!qb}F<{}lTQzFf~9F|^Moi;*E%F?zXS
zCZ$|D+fW?8P+`hf$u&t*<S|*GhoE)IOJ|9Oq?PdSmEH<xaAmG|)y@K8zOGvL%xaO~
z%$?e`@ubRYWf%cs-(On@+rL+qLe4W}qb$a1HQZ8Ql|A;6BJD2hjd_|h(h=?udz^07
zHd&QmQ3IieZ$0b$h{mo4ZK8Ixc=Np0Y|7_;(!M7kBMjg31J(>{7(eqh7(+Q5bTscY
zHQ%wPv|(RxK;LY+aYIbxar;J@<NXnm3efXtJfh6K#(UuKeY_%izb+pq^2_<Sx$p>&
zJ2dFap_C|1{8A<tlcfg*U-wN?t#kyJZTTmOc7t(P%<1n$2x!Lv3AwZpYUSA}Y@pQ{
zq(2oPe;lVGKWg>EtwjXVt<C+orJcFFS$i{;;*6Ko*g2(QDt^}Ex=m0Bi~1OyT(`J_
zR>e6PSfx1Ya@-~)!eMc&>$;xnb8n;F0N!BHevC}8UR3UN>zvy~$n;Aj)N?>07Uu*G
zgU<wLHgTKP%D*#mpQLQJi(_U0>g632*7FbA>GKRLw~J6bpYh7BUAaxC>Rk70<nGHI
z#OQVs+qE}XYW^ogyw@u%^w%4rgx{!0B%h<dkr|L#!jBK_x-V&>YNFIQLh64CnO^6(
zIpsL3`|AmpPg7y^iP>tv)J9v;X1MWegM0IQBAV+-J`Q6K^gy@ny>(0u_->dA_+(O(
z6q`Y&h)XcUg~iLGDOi6_(nwG${~47bNKaeTBt(EvChhYx;H_)z*AmOuJg#4T!dkcu
zb#V*OHguxe<0aYqzc%WQ^hKQ;9Jw{mb6?g&as(NrXIFosyoLX<W9rElK;jAS?LiIo
z{OCT>jB4O4pfhaf#g=AT(9inJv;j_mEz>Y2Q|CXb7C}u1j;TF@o&r8jXWS}Up-)~j
zCak7CfE(1P*2B#Xz^hD>#jIPFTJDq6PZd37UoryoT1N4c+94kH-_0W4DeR@D-TG?g
zU!O9~g}`OE6WA*{eu%E_U#>RAW((kuU8_U4b%JTJ3R&9)yZp7o%i?aG>|uDBWH#Vo
zJJ_+6{9qNtfqAvC(@~Fo@wD|8FW+Mpc{8|GKKL}`7KbK@KKO%LOh*%5Fi%+6gcfD*
zzC;BI2oU`NyI)5l&45?;Sv^Y-jvO{w1wBb=jHmKzJj<B7y5eUARn@zyV#{y9ssmy-
zlqbtFwVw-?vN|?%m~(Pxu=9Fn5pzNWBkJOJkatRqJI9s2#ES_J03-m?95E@<0@E*h
zByrq4#h<@%WlNcHMG9*(pfjp)zOX5?3Ng@M@6F^3Gtk?mraV|rLbWz`VErk3VD-x#
zC6ZlXOVSbl6uiBny`B@FlVYlUv!I1IiHd{H%F4Q$mzGWf@<UwpIOj#npig08HOgk;
zd%yX^QzCu;toD|jYFdZoIBgdXD5urdr7thHaf$w>zCpu`zAGrA+t5Z+PCHn;Q8cQD
z9kJUfpV%`;=~+S%W-x#}juf^Z+V9wJ(7MeuaOA-KgALlMLc^$L=zmWPcsLL`W)U5h
zGlnC~VGV^GNA8f`4La05C$xO?vCsi_(b<C2)&Fi0y%+A+GhaeL@-kVCY*KIPH2<4m
z{=Okh7hR;ZSf@b|O&_~|{JB=RlSK`vK1g$StWl|lVKrxEROzW(p*(I`w-ves2p%Zj
z_>?*4nCU5P4OY>da;K(gM}JaTx1qJ5ZPM9T(LCm9rD>OZw@|l1b5hAc7&{DxS7p;r
zj#stLw00Z1UHoCkc^7$wj><SZK5`}Xn*Tm8-M?ALt>Ll^w5ksSi`yWiFx?VZRrTjf
zU8WuFO|a5-B#=f<(a99S7tXWwS0iXY1zIhXa!wfZOp%${L+hWB$2h9+4Kb^v5OMXw
z-4#y2WZKOg1WhhZ7j%a5icJM&r+U<7!SFDydMKZD#AI_A9)8XlQ&!aWYPdfRy-#Rd
zY`p)`sD2}p6Jd}u=mf|acT!yS8+||7hw1>-fO~nMF)ED*9!tB!>7zB#_Zg$fZ6|lY
z*C3QEh5XbVIVt^I;=*Z2V7f7)4LGT}WZwwQXud)2QR3}WlIh5FE4U=w2%7NnAkybK
z2qjo;GO8mm;BmDct~!IA%2&(B+=D%Ir>7AI9*)M>kRf0>py|tETGbiJy0&J~f>rI%
z%;`+dAG7HMt&B~mQMBfq%!3>^L-1PBmd`<c0ogS?FK1K6ZuhI%qvxm1JQze<5a{zk
z-l)A{kElIiPfV6x4Mwr9PuN5v+q>TQeBON}nes~GYCJB%@?P6CmB8G)8C6qNfs4WN
zJ)rOJarGzFw>qpErHW@&MgtSgyA!<usfJ^Y&ZuOoc{?u>+I8UOos!y+YPUSSDg8Q{
zG**gjt+T-q=Kmuh`2f)~G|A3jvu3?J^Z%b{P1c@YZ9xiIZPo1z;+f-VRql*zpCh^!
zF}6y3O(QB7*rudPaTsT*qT5X|(Q)8#gIMe5JMLU7-x&5eep{>N?}0cD;w|ML5IOGW
ztyq9ZOIBTP0w(^?2%|dz*lYJhZ@G&5nllp_!j~*?E#5PAzO=0S-uIm;y8Buk(r?%9
zc=L&;?>+QQcXgBCr9G2W7D_3ZW{#ah$?jNHdgJ(gu9{E+;*VsI<l%mkI}cJ3u0+2D
zw)i`gc^sqSU!VEx83=1^g-=kwyf#mp9I&STs*Xv0Q_j_@==pk^f&=T_V%w~Py%XwZ
zV*j1e(9il|a(vJ~so=qTy8WoY{h2-~6r#cxj6{_s4(AU=X(E{AZ@i}O9{wDCeR4U@
zPrmp3^Rtt`&BD%~A3(KYaKtn70Dk1vd)uk-TvcXYL$ffPvP8jS%E8+Hqt6|E`bb#4
z?KkLPwh*iHNaXwT@4v@=sNb2>+Ohi-LYYAa>BgVr_ezF+Ga?CQ9Y1q8aiH9MWxQc0
zx?vNzX$BxP5F<40VjAXQnr>qn#ABLJo)%`;&AL+L>V7|~$V$9%6k-@NX(d(P&(KN5
zb5yn+wP~e&*z4kr3%iyeT*Uyn-|w|{#HFIsGo#ZwpfkcHP)R1xQ76z?TubSV<9X0t
z>~(s_#a>JDk7GSqZtk_e#u+gs341gEei4#wMa|CutcplBulR7U3fKfOtgLlwmfBYJ
zE1C`13B0U}>4Tap8&o+htj>t#u-w0I@#UDjXXI;59hKxUNja8Jov#&lVo~WjzQ-Q_
z0HN<|G@={o+$%2Sw6U+)u#`zqbyg95YmiclytQLLgZDCy3e7=YDm~akEVw{nQ58{<
z261u33DqNiVHrafj5306dADtCDi40jXcrftaW>L7Z5?a~3rG$KaKS8RhJYyG4L0o>
zi5nX5M<irodPC7y2#03*EchBYmT!o9^6@>Uuv;Amn=>J;;WIY&;R`DZQ;kNgEuh>8
z9B>kis{2=VqGBOFtxJ6poz6~IUzMSJ>i#be{C3?^o7FLCoAya*JDbx+SI!l{9;H!0
z4`dk_-1B8s;2xMg4j(FHBLFryG{QD5fL!Cp<Wfj~OAHLGf(E?212uoq&l#2MV`YwG
zxdL;F%Aa9-5ox5IrBv+U>xR`WR5=m}O3<kW`+kmb_@v^a>5d^fv>fA|*KxcQ@?|YF
ztz+ds%C&&4$ED9@BF7DmbF4&9eNUvg#>O1axUo@`L*<;JE)oQqcq=nk&hXh<W;2@3
zgzI8%i%z%RoddV&Xp>aMCPS==>GO03P_=zpXcgEg2INif8f+D94i9{r?_yBA(|5dE
z$_1f=(X6cwI8FK-F<a1teFgTP0(KO^r6f&Cq1hgPaR#M0?OLIoDep4a^7cnR&MbxD
zg^m7pY|^1#9Hn>6<sFMwxKe>nmQPk_R7IGVL{bQw$8pi*dw~1y4k5-~5XRi^Zq2(d
z_9vVhxWLW8Q9Ogw{dMYKXmFEF?R^gWJ#&bg2sZ+6(~+#Kbc400T}HH%K52FpQ302o
zD>F@YWXNo{rWosYLC<Ut5)h6;fi(_dcMaoQ$1SXVE&FWBv7`-St;>IL#R_WZu68fk
z^X2&rVe8D&m5V1Vd+279Cp{MdusEg{>Fu&OpQ=u)>*LE7tc+$a#W|RrFPB4Gn?<Ki
z%2h_N?}zj#UqkR3{f6{5f4coX^Zw|XD}8f@?CRAXvOZU3aoCu+95H=??0}8BYmN>}
z)aqZIrOycVDXOun7P%|nSP|hB8hCH<jnV(%5mMHm8l3b~X4K@+xxsXe+Z9A#?04cA
z@5@|N=}WXS!wxc7hAIpIXa(x>+dV&Narxx-@C$Ih0age8qhA-9b)lxXvBHMnWX$3-
zMY>@Ij%j+LwC#bWemr@~etha@HBF;zB=-HpTpQOVlUN_*PYQ7&F`Ng%${`iJii%6X
zANE6BSUQe_jrnW#;{*@9mm?U{Kd7e=synWxU~;{w^S*4pUXBxea3(3?auB{k!lKt@
z%vTO$;?(Vp><)xr<-*g<s7HW_h#A2j?}&l!jrng;WIDNdWw(3L{vw;gqv;`dZ*dV!
zBQ^DnL||z9He#X<+kT9TwiwYSG$Gp@-Yy$h$aCIy*abuAxyMW`&qsC^0X9AAF0>$B
z-Ekj^?*YGodmEGgkmP+CUnj3ps&tdijr867ZqiNQ^)`}%zWXgtHjIJK?}%0Z4-wgr
zOxp8wl)R@@DU^R7Q`^VQS^xMNWSxx{<noY}Eo!TU=?S@2v;l##Y;?AQRmmK)U?<-%
z;(~aJ42$?rs0}O<nL0utyaTBHQYr}v$$hW|QLM#Zi@YZMJQQ%oR8s1acMbMw<ezLA
zDAM-QFg}<5A|q6d|G~8{Lk>c(W2$*l#c2mw2&QRw?($m+w5nwpR<<eyTJx>tdPs!!
zX+}9vY{1bEudIyuo$fc3=C!BqA0=ujnuZ~&3mRr3HkOAuFilHpVcg3Gix_;8x~Cp2
zFZkw4$~ni>TDuZ>E58}|ZndaTSwR!^luvVutLaT<`ec&coCHC8ARp7~3oIcrKImeZ
z|Gu9XNU24?4O{F?wxi^BdB0qpOn3YLjH?MRO=}4*OlpX#$m$5pPpJC=%xDWOPHBp%
z%IONoi?59+OK%M+N^Xp<%<c>-NUV=6&ukAnED!P&9AiT4r}93h<QQqHO}7T^*2x#>
zAegU#Ybm>4JXCK_xKQP%p-WL0WWm#v<!9hpmKEec<67k7@RmK##3thI=!EhlqD>hU
zifUI3YG;va<dbVB6lnl&(hZKL%$iKN(z$YEk(j^H+BjPT!!2O{6d#ZJT`7{H@td%p
zdxn`H%1U{4Wk>PlmZcx!#JW}j;caDK1!iq_xMJvXwtj<dDe?GDxf^<}l91iSFvPW(
zdeTZbQBM|$wM-AmQm6WPKJxw6hJ{t2p9e+5|AH&;)NzVF2qgAw%4-h&g911N-B^Eh
zh9E@L7$S;bnhOL3L?&e9XNdl8$iI3)GxptYvUq&w;p0xg4wVRSrH!Hk;?GhQ_gWJ}
zB(POXRhlzoh5FiHWyYoBrrjB*JyY=PV@y-#I?gwo^<*VjM0hiMT_Z}rzUtrW-{TdF
zU4>1XlmoM)!A<_;qfT?jSUB^}a=+wslV<G3ac|7yAel0+Er*^k>gq~^QWGqGEs-rg
z(zDN;t(;@_1*6^J2kg;CuqWf3SA3gA!j~#+0ZEMsTkn)F0ZDXuaz!a%!fY$iMPqqU
z_J2I}Nab)PmRT-;St#-$OS&;oWGnRt;VH^-jeU*<HhMG4xvg6ZL~!+P+zUk^Vf_iK
z1TWLTiGD>;W>Lh2RvJtYp<u>0z3ykukSszQ2`3j-vCIvh<(JduLoImwdDV(tKBr`P
znDzU}zraBih6HOp^sG>4w_?8AeFAgdQah{S^GJ(mxWrIF>{m48un3tymPF-n72xSL
zx7vgFC)04aqsB=}Il^9BNX9e1-q=_La<rNWN38GsanvtYdaqYP0)ITir|)-Wo0yb;
zE9%I|ikcIR1?PrG6sjOZI=rR##Bw6Y__yO>At&`#!ro*xoVoWK>9F6fzw<NnHe*Q&
z79d=%e|pxHRKsQ+|4A6J++mMjLivDLqp})S8&8c)ExMjtQbNFL(Z?hoc?4wKd^+cg
z^FxYY1?}js_9?!E(o0!xHi&ATRnXH|9{vQbcxXqJ>edXFu83+!mHCWg?pj`G;M{x|
zU9|u4fmv+%Q+aQ5tM-EIS?+_?Io}nwVF}kc?+Kz3dX}5qs<j(ibaH^RMK;Y+i$<9g
zKKG6(^&=G879B_<CAw{*yBtZ0Po<<^7d*QDx&z$x7UfI@uGxjNew2!D`xLz_Y9mQc
zdzpJ%6|Pl>#iz_9TVeXLJX_jaJN~vm2p9{5aH$69``7IYg0Jf6pcFn~weNhR9C3%e
znh=i8n44#Xo*_E$NNvwj^hQM9*`nhhF!M#$CDgnfI^CX?j*oBhOW{a2=M%3SR$rYv
zU5tYd%MeXC=33c^^rKTuUn7#fyI%h?m&k{yIMr!=u3tkYV*w0n`ADM?J))N88k2J~
zqGQ4G1;Sui;9%g+wL&!FxNr-i%$6t5{QP7^KSUamY)Rjb<)BmY$FlSIaXp$ZwQ~<>
zh(3a`FA}bD0>R&boFUJKxQ1_7-LG3&Z749?LQ0D?#~kL6xUlSmh6Am5n&Hh>!GDUP
z^%DH@1BJr;C(Q{qACYrZXkGDhE&x+x|GP$U@yx~6Q$x<z$TrrnQC|<7jZQ+nuJpH5
zE?PChCqGT+`7t8_aih-Wr|a)~f~UoE@olbLsHm5YhS>c}d;3DIF6AgEm!Bz0UOqxa
zg^o3K&9Ww~IHshbCD@a$<MxZ|ZrueFQ|-`K!E2x1BU+g}IZZPS9R!;`D7uUgb|)sK
z00Irys1!;zD+;mPTndOQO%+qg-|ScK`_f!Evjsd$t>}USiQ)4(>4Fj6C<oWq2^>?{
z!amQ;OQ_jR$#zL;L?nEe%qP|b=cq72MbLzn8iaF)n(MQm%Od{nL$yKt-Mjat4Ld)K
z<Qd!0pIQo$c>q=<ig^GsF*(gJ949o*C_H5I+efp<D3fGavYM3TWVS(}iS;YR{i1g0
zF+q{1JT>2=?5lh%ViBd(QM!`nRpvmh9*&e<(hN`0?e+uCbnjB<8Rf^H9=vmdN^{Un
zaIlXL01C+V)q>GcQNQOuOyM9laaYDZ{=<YAWEf=7gDc)!MTL$)8mj;0+oFp0DfzOW
zVQgkq#L;h;dKu5<icX5!LM?Q!m5dF9iG9BdFV;}&7y4KIjk%k3C;6u-HyGFoL$&L;
z6lla95}u^q0Kg6)5TGH6#*8!Ol3B&-1*X;E+4IWbus74sX}*^r!h4Q|&e)am0f2o3
zTXG}}l`%&#$y0Cy&x;5KD3!*D$V$`IH<3kMjkzOiuW6+Ohf8W~Y-DFAr^n|UNV#yI
z&Lll0CM2l&>m4_G1rhEt3PK!DAF;jf`L(CgtupTwkzk>M=Mod$@BAVV`Hp+vTODvy
zDWX@gjJ6c;5DDGkhj3s$81^mud6h=a4h^Xg(Fp(`Sz3uWTIu`+1syVmz6%FNOFAkt
z)j<HeZw(+efYc;olEbzG00IRq{gubW!44bHsY)Q6vNXA-5GOVL2R+_9I`kbREts}s
zWE(Yj2R%0MCyyjtipJ(GFiSYnQq{GN9SWg;NR41Ma%A~lEFolOAfwapS5)J2G<i;y
zJ;Zdj9NBHM25KTuEb2r=(&BNepZodVFu&9$;%uJo)u+nfC_9)mU%ljb9Lv6Rb>1To
zT?$Nfpac9x3{DQc;WrT^<KPJLK6#3Gl=?9i{=$Phi^wQ~ag?q40bmJa>*>j7mPS&5
zR|RZQLCEf^_OvFZzD(q1ajFM&wtP`YI!=1*<nrkC58%W8svi2W&vh=YzMbf{elvjK
zw%+NXUMgR$@UhYPvK^aw(e@(w^eaUd!t3?|?RdQ;*S?bEWwFL9_1)y8E?)ZM^{}W@
zEc%$OPTj<$Iz>eKz0T!m#Kdo-t-);n(wEFjP3`{GgR|X%6QJ;C<{3vm>Euq(><=7-
z2t-?n!jHAoV&zax32XvD*6>281ds|nL8X|)=(m;9`Q(ve!tC<u^2x+V^U}Pb^gJfe
zq>P|mUs95Zm{A8a_IqOa#J(tbk@@erDy7!iqH7PMPTiDsEj`!QC)t;i;e~uMjt}Ff
zp9SAKxE)WO)N?<93n0kRe!5tK=(0+LhabATL^)gcL)~EavN|jD66bR<z5qUpKO>{A
zK34!Wu8sySJX|b}#CcgUD9K%_kF<O+bhQ+eSIFGHrRM**(jPdNdS;7ZzGkQ2gH(}3
zpfT%}(ain>C81gsgVW$FAdgBE@4f3Yzr*4f$qw!;fl@@_82ED|oCyilg-*VCoMT1#
z=hv;7@N=2kR=N$|U*)wg$n-6*>1HV~jRZSXIMK~$cKgqs%)+m1BD~~ca=O}*j+d?&
z+TSgV<nZvIIU%#40o-ZqOi*-sei5=L#i)K3#Gjp6#7~!tlIeWTLk7uL7*0hzBZ}gi
z#j7iav1(`_#COM)7ouW1$Ww6G9VKwG2m9j?HS=!w3I~E+uN*L=(SyJIfdND)ocAPw
z-zGca{^ZAM)~31x-FH)yKQ;H757;2wxeV~i$Z1PGFZcE2UkI0V$}Ptf(2e{b060L$
zzd7O)1r!hpVLfxP7a#$Ap&Z~q_(+C85eZ;5a84?La5B)WS1SEIPLD2sgYu7r@oI6O
z_)Of5)6hvfw}^Utumx8DAoLP<;vMiE#Dg`I$S5%YUzsN1`edN_Wk3ZzxbCK^b^cDM
z`5QhQS~2LZNheKA%TbUQ$r+&F3ON7)a3ml?rFw3lo}xS}?UNTHZ;)aX=ZyC(1;EEp
zWsEIkjlNpCsoZ$EM}o!2#3}S50Ji?4bvZf4!_n6Q!gN4PMDw*SF9voVC#lC5YF&W9
zm93w#UeS8v4rKx%SOtiVvRFlNf~q4q%&xZEn*-8K5GVrOXBG(EEElYo`04zI;zx|X
za2^xHsmA&#4Od@P-#|*m8SyU41z~^efL+Af;;j3rhadW@xHbIHLt)b&mjTex5^p?o
z2xVI|1g0XIGXkMlSj!&cv`O@(rMfrh(_Kza{~v!LSwFUX)8wWnpR8}rb~hQH)dheR
z$n|8wwV`%Nh=9l`88AHDZuEqZ7Z4a=9WYASWB?#lK!~wcK1M^%lX!V%DA#-yYy597
zs}3arNGn;o%WLyn90h?O#;S<Z<Ij^mVygC_%TpTAhvKn@aZ_rhUL!sv9FsmghvbgU
zB0_Lp;_2=9%dCe7PMUT5joMz+FYdnO>~rEHzD}$&)>AC^Ctt3o6ATWOCn7;7TELAO
zmvxaKAgKdx(JWkR1ON*M*$NP8m4s@v0#*f#Iazsbj=huDmfJzL0t^(j!I>Mysd^ie
zl`+=X)GNHW@Uh0LuDW8(^|JJ6XnXxUCe6L(=EdUFh1bO?PB3%sq^YxRy8bbG`HU+k
zOslKVww^wI;EJu?3!a&M;G<)Ew998)Uw6}V<v_><U?YrNw?o%ZflVjC;^R1D1jzvY
zTShXLSO!K>*KKyYnUaz$IOUE9OM@OideEc$E%eF9AKwspVq@g5$)pzZB5QDzmPXvW
z*1DUT+-uj;y)D<u&*&75FX=<8wC#b)Pz6PfR%9|J;xP^o;_5&;lWVjQDC3kh00P&L
z*C>Bhg2f{7FlI!6lavF12Ryn>`ZL$7x0BxVduT~XX^GA0Acp&V(tR-pTYPqpP6uR&
zxg9&+IPk5HBVQg6=Q+W&YpWaT8?UaawhM7N9mKAx7h$&_sc8B1EphSv9X$EU8S7^*
zy7#i6P7B0y%6~O-4HYsDGQbbRLqjMcFeI2D*%)ynXNnS7P;nd;08pi&(J(nTV!=tv
zvoaC9o=kt1-)Xld#c7a%8FAJEEJ}4*@(i%964@~2I$~LFmybDPt09k$Sve@sZ`#0R
z4<IePr*`*g@#Tq+#c3S8t@6h93mYfSxR&p2?|wJcwe4jd=p{Zo_JKH$J<*APK^!0H
zR@~*vr(St{*3Eav>N2nrBOX*;M#TQHa7I*=j7qng1x|N3RPiB%T0EsTTd7CVR}U+>
zxYd^|K1j|vyF1dFaF%g)M0_do#M5`)iTz3XxpjDh!7s|B-@MXqF7QG(=oad1rG#)C
zpjrXtqy`xK*MgTTe>&x>&})+!!QWT~Lt}eQ=g>CSjLe)m^N-@oQ>Vojx6W+1Q5-#r
zAjC~IHP>HXTXREB?Wob!6Dvp6u&y&UcPo5h)@vtDyf*v!!fu;q?0WazmS^f`&#u4f
zrkUjYgz48zteHL?WLuH=v!nYyEHv1Sa;1nY4FO$9feo-A0~HH3z<IPzslESq+n$_w
zY1@5@;wdUbg2hHT*Hv-P^OvTk+9fv%#@2*C%vx7?Tg4lnqVt_Im?~cXZp6dop0Y)Y
zhR*14ecgoXro8^_v#I_1W5Q>rus|FV7sVd&k=WPX{dT$w-zx38@u4T4ns>`a0BCK6
z8US3xdO{A%l$UvsauU!2DXk}I&uH&4cHUanw!g_A<}NVapCx<lLi7Du0Dk$-6N(Z;
z@_A5mPkbC9{eS?O9%E5fNmO*5X3Mu5JsSqndl&}`XwPaC^9#_)bqu18<4LIHQCds#
zwAaPgc-;lOR(uUc-I|XhXfr(v6fEEgxk0%Wp&F<JJ5qvG{DB($Aw@;0;tleTHn%LH
zOVl4}{wVT?k4*cG(1#wOEp6<}R)$X0$<vV+>D4XwkxcC{CW-YI#2uJy+HVg)-!%5$
z4ShmAlhGi12o$hRL&|~jhBh6Fb5;qAC9!e<HIvErWq57*7Fz+TDiy0ss_>iSSdn16
zM2v&5^5(%~ubepSYLrciB0YMx^{(st<`Hoc^YFn{%W8Z5v1(G|gt6L=H!kd6e0*rP
zE2>2OuL@(4=&ilYS3m&D;PO!AWqo^TjJ5Nl2Ki{wWTT>_9ii<Sfj~P(+Nns5tAe<=
z#Ikr~45|<ToT^({s=#7Nx0DYE^(e{p<>q?rxw$zBa){K33QiTTd9u_7RLu%dO=VoE
z4Lluy67a}tmwZJBup1Ad`E+qf&~B7BZFl^aUsT+f)_M7a)%V!bzuYo&)mX{{mQJ}h
zt&B?%N5oEXRNP~=;b1Hp`+WbrvLjQ(Oi`uV@Fd=f%W-3~XxB5;qb3(SySk-aH<RE=
zv1h`lF=M{mBe1Brghh5w9(?jitjCpNoVZ^+AR6-Bf9li?zs09<D?yPNX<ocMIEcg%
z{Mr(?69{w!;P>z_SiufOp>9cuvLS+o#HdaTxMCnckdcXs43|-J*4A~q-EPyIk_({+
zjlSsjSmZ5wsJCMy{tXN8rACo5H6-#wQ$-3%!HUPUCM)~4IoaCOWIJ%c)<o(Ef>9rP
z0C1<oV23R5!H|&Rp9%zJ)?|W2ZXUBBC5)<FQ*A{diLpe9#^FHldD~|@vK*N%XHo*#
z(Wcr;hc>K2BGmoC0O}sIG5TWsf^0{`4$~W!FBhLjBE=gvY`|PhnmMoWdU5KlS&J4g
zI>5sR_D|iEpY_tsZysxMGp9S;@{X7^b;|S`UaOllwGJ+Eq;oPy+C$G!Nqa<YLq>=i
zi70~V>jWuj07PRjb}0BUUgY!IeO`lPc>O9&h#Z4$DsCic)0hk<Iort4VlH;>gu7sQ
z^|nKAyfSXB-+f|&_-c!IU#!5H=-+}V)pYN!f+F$x>A-1mv8Z5|INNYD-i?<PVqd&>
z{!}xUm9IM+JueM<go23)ghIP`f<!SO)qU7Md)I13u%=mEwv;$o<}gW9o(0`0F-4uq
z_1Lsd_G1E06i<jBA~zVG-1)#W&pg1xVypP!8}Yq(%Jkp47X6*A-)(sZP~l-ONjwgv
zF-Rt%Nk&E}O3!gw7kC{IK-G~g0K@{-icVIV1Pzgn0ZNmos?R=E{1mbD=!)w`fq8VV
zUp_!T6n1<s>2&iFiHTk~n<Tp87i5X3`>VLo1SD?wt5^>Z#j{=F(Uo^7QCdzi0^>{~
zLP81F0R_d;s(}!w1jAVd8@H=A;ZQlDY)4HyJ!($qv0(%IKWWy7LXeG-$A2?=-8pf+
zoEi|i$@uxo&>;GS`XnJmDQ8i}0f8x&O*tjJ5jdlqH2|eCzQ7n<Zt?}E3Zoop-uJth
z(f=u?f)X10YOwhFs5l|k;0(;$ikXv-cg$ZtcKbU=_e_}4{wV(N$e<f=CH5)8!Fd0S
zTJiqwoQ~q-4~tKWpWKe0QVvD^q{T@;Wh*~rCnv>O7=<{5tjsi*!=7S|qsn6nJ+g_!
zh$)W7ZrSb5fL)hB?Lm*zqI-;u3dk#?jL7@uZ4Xkjk&M~65xpBXN|#BNE&p%e5DvS=
zBz(**Z<{|;OdHoJ7b=%3T%`bHy~LFO?L%2|nAf<83kR56WsY$=(GBx4qot(AFv21B
zvBt*%f?Mv(Y90nB$Z5-NBgl}(BSAIJCCYIw4UiHU6$~jg(k8YanW1#`6h+ebFV9tn
z5{wH+j@`#)Ta-9{KlrEsVyicbFW!>#EGL+CZEfWZ8*w|A@LJw}`=`^#wVSS4ID>X^
zht0j<_eqRd&?{7$oX}3`7Z!vRWSEhj>a-zPD5L*rH&X5PSkxLG37~O{W?4sXG=NFf
zor^JT9O?g{xF6TAk8GbPK7I7gh?&u9Q|9A6iQ#aj$cgMsZ)!@!$Hfd8*|D5jZ1kAo
zP+_}xMi~KuMwZ9Y8z7p|%!CC1R<P>!pma|lSQ?8FBe{DRl|@FzhU7Cb>&@ataZS{g
zrCQo@Lushkm71KyL3$%QD?KeSA<hy9lqf0ygo4}_LX;nfLGqlkh@`5PhJN&-#cob}
zhG7igrBDg-=QS~Jk655($$(Kv7UE4B&L$Zf)qNJk=GRyeMwWi$ZZg3&A7O>Dp!x{f
z=8g-xggQyFIyp&U(+DO4!2ygCg$vPu1pqEc^*Qa)IPstXB!<k`G%aqUI2CzLivr3e
zBeZC&G`s0L*z#)(N=s*?T!st~HIwk^|Fh=eF$;>i@fDLx<-```)5UsmT$Yl%a2onC
zAFmUqUVZ7M=U;sB<yXidu|rJ8M=+F%m*Hb#lGsJgV}|(j!?cgZCz$?mtRE>~=#ZhJ
zS2lbGii8+5IZ#kxQUi*iaRi9X<p>#R4x5a04mzf2YJ>#U<-Nc81}`=EFMdUjIP>d|
zG57p9Z{fmuKgy=mdh|^p{vLBqr2nl~Uvs<Z8ykN>`o<0(=ordV4cwH1`u!(2<tsNi
zh=p5xlK%Z?XWc#@OAd=i{iFQ<$z|Kbz9~C5eHPd5fAHG`>9-sxfB~U?9oiFvwlQ~h
zMtU+gNR!Fi+Hj^AdqXJb=<~`-ovK?Q2R#<$zZh3ihYT*KQsJfd{QuUW`+mlZ**7k|
zA+K}pJ!@y)aP?O)&%QQq-p#X*@bHBL*FI8|_w@2%-GiKm@1IvS?Pe;LTypfH#`^kM
zfQIh3iSL1qiZgXY<PIdPEoWj#SsTvOMg!^OwRdXEnPO)nMj7?%0eNl0_2<f=Ik!}?
zrxow#<*gqxclqs`zxhQR|Mn^IkJ|I?JKs|~cj277L`3|EoiA)g$7FiuKw9q9(Zj9?
zmVNN--;Q5<C3ZiO+pT`g<qchiAAa`fbF^VBAmjt^UPes|gt{AThJegn1SAM`%F(=1
z$#k)ZjTJP>5~NUv20JiatF#2(>ujR<eq-dZjpB#IGcq(6JlZS_f00M=761gl%-1i}
znV6~>X)dcQ^917nje3D-C>7-LO9D|Qr2Cw)-tt>dQFl~e294@LmTlbdf46VkAe*1~
zyZBW!i|uL`RpE%lty{b14)U|xxc)&pr`-?go~fAw@C`=J=7)S%*=`Utg#?VnlSZ}r
z*t%tNu^Wee=n9lZJBvr%l9KC?*fbsKwZt(`REc-Qn7PEk!O?Qh=n6XB5e}y`r?9V6
zOq<yNmb;Cb**VnF>5wG?G^EldQlJQp(*LT-5;TjsQ~KE`=E|BEJ*H*53j<hcm)DlN
z=gJKHM*N_OALPxkIVA1YCpFZMp<R38R^sAdZMM>#E&bRx)^OO>avtf&Eg4ANuBcw@
z0pJUa{U`|K8;6dzlw{-ZfDuShv4GK(Gu)6WW0Tp{xD-WVZ`))kl{cRGxK!Lek93=J
z?))rLI8WS;w=a$Co_X=JS&_p{X~ae1)5GB;u>q$hg~REQpCT8HK6|}bmuU9cTmU}G
z;3|couJ$<2jD68ltnyStBS8M`21&8SW^9l>5XBUYOJkFU&pEH1pH2J=#7xDH#Qgch
z&p{VCcv=sK9TA5(WN@$n<dh?<Fbo5bIUR;1=o{*VNO>F@mKjCL>Hq<7GEjOcIRMC*
zOBs>`N$QZ;rZU8dve#2j5M_SY*_=ozHm99VZQe=ti9*+zR32X6yellOzn7JU@s8+O
zmI#wR+J>k~LcusO1|-Bd+fXVA{-%=1Gc9$>Li(&;Ek@zfeD^PVk6S)7J}0qtIbC(>
z>;eImn3EVi=dgRwlZYKiojA+Gzr3wppCH2c_e*vGC;?gx1d)scLa<VKJ!aRgw3&eJ
zO~7YF#oD#nhM%3swcaNFF60Cqug)OUSrkxI_!|iVTw|V{*kaHzfL`kNTF~(c7QBN6
zpFAF?S;z@;EYcAl$jJdfnAAFmUIh3r=Q~_!L>F6bq-$Pz#k3z{uaZ7|A27A<n0_VK
zZIdroR!gO~J{MmTEMc!A(~Nm?n5^ObSp|5ZD~t+_a3NuS)GRrafT_A5q1Xrr77Z;m
zv8mT3RToWzsyI%}7McstDL=QXuPb=LD-Y{)eeE0to;*`;F$B**R5r4BOG}JHRo!S*
zJ~h*r^`Cs5Xye6q)yZS;&+nQzp{OFw{sE3YGVfqB((1@F1ODK?tF~@%X3y+C!=Ae9
z-Y2G2jB};T{JLb=-WNpw^v;gNrrkXY9v|Pg^fCa_dQq-xtd^!YfZ`=`M5ZJO8O_Wf
zoM{MLiQObw^&~^)bd?!>7BNZ*ymotzA>JCQk;Q9_goe1Sd(4ICW{YBDkH2xns_xE~
z4Y;k_^09}Hi&M4Nmru^jykg)D6S4JMaeCD7Tlp~AHk<kn5(h=(!IygmMQKs-ru6`*
zcpUvv`roa-DPcoSIRdJD<H#8{MiY+nC`b)|YZD0RYE(;(SEHL7-4;`l^|(@{&q20-
zP$HK-)?k%~dsj@xILgG|zZJh?(l5)84rE_+PYrck&@lP+ni1M#r?BX2_g7e4F<6}0
zVo!f=jr)$L0it}9Jt+N|3b{%{G=!Zb<mk>Oj63W=fyF$^xxuldM-}a(rbpFuYmT?3
zVjN5{Bsg=*SHhFg<VtlDD`^d^tUhq+^ufwyg>q2HT_xs-F<1N{G}-O0?Ki#tmf;nc
z`?V7RdkyZ7x46T<KJRYA)-{h77vk&1J-6L=2{Zkfjgpw#D~@GHN*oB3#Dx253o;hN
zs`#L0Voh_YIoQ=ct-UTwZ=43Hm@4%sZaUQ^&o`VNi`sodEu`w$!=sKj23{1OV*Hu+
zzm3czaf@eMxn#tsvUeY-oSZ<hVZ0MNf0F+V_CWFTxlP*i75+}o1&7dO3#Rgn+Uv~x
z?F~Q^wJwke!B9~mQj(sAz%)=qni|Y0wTz?6YletcrFJH1Qn!%uldQR^=D}t_CEKL~
z8K*PgG&ta>)ek@X);8bBuIXuA+=GW6JGMHqtI16sIyCo%y$S73Fs)+f+(VH%Iq?yw
z6vJ7LjLB>$P*JI&2EJUvH5W3TqEtO3ln;>B&3rLZ#}vcLVnEZ0%psLUITDxM+-o`d
zIau_7An@DSf#-KSUwP(W&5A;&5Z`?^=B0{~L8~gJPwT$y^8IHpx9$&RwOLuU{ijbM
z4z=}_!*6T;_`TLH{zGo>vYCVXhS2xbnnw$};d_N8G6WDh0I;8A%x0@uk`jUj<&fVo
zvgyf52(lzlr79#V)X^|tX1jO#oL&ca#H65T!7}@*nf>Zcx7Bh?3*0&J&pTH|-da>W
zp>Iw5MUl58>02nX{odhK=ROm|jqdv5qH8+mM_w?-Y4iJ0<R*zL9+K32V$rAp4RAp0
z_(DPgkQ*EmYaPrU!(xcEK~IUay<=5mH$E*sz+AbLo8)--CwCL?`#z}pcSa1y&!r6=
zoX|bg#hPrPNR$mDm<$b08X?3mV(1#_AT2q4Ida+Dp|#m3WtK{l`1xzkb}Y+HPVJi6
zyT7!qDa-lWj>N^E(X^^@^iFpe`H86CUy-&mlopl&gn;DN6iEUyOiyz<^pqqEW$com
z0RSeJwxWg}m6-HEsX=RKlxlgSgMA0w-hcBI#Ia;I>eq?HK2I!^zF*B7!!2{ako+oJ
zs+Ch+O-=1E@n?gGF9ZM+8=0YeZ=Uw3(rJ2LVKDt|kE%<0%+L;*E9#R~l~JD*<FjLA
zjs#RS48*JQ2StTlyL9&DdOBpOH6|+sO*0NB2oklO7EX-iIelq9r#$+Nb15?}Bf4Dw
zCdM59bU%708@DDFKX7&9oq0tM{o$dPS4ZAlG<wu!HJM~~<eS-}NB6GIR-T|M!fPwW
zPO2SWf9kxr%m~BX^Xp0r?U~6!Gw;rw(xqeMC3Q_UL3H0#FUnRCqfrSK+9rz;IcCaR
z|9zsk{!^l?+JIY=N*=6#>?N5g3nx_fn$&)F<fIw38>%K9{y=mzAiX!ErdvVeRU=W%
zbIU%gBBpV~Mt0XFb=!$Cjl*u7KswEX=b-0z-#_bz)~~)stN7;2Z^Sp4+c@)vYo^_J
zV<Yi@i$U?mch2v{Aq;$f=d;iK$+_-@7uK0M+ELW8yQFOw_~5coZx;p1puL-LmV$)K
zX+dX{$Pi{M<`LlB?98g1=(OCICneoz5W7s~;56ApjG+IHM|8x^$=&~0eem?@{bO(G
zwmPzVHTg@!H3MohGi%GIO_95~XwV3;uN9nMix2ws75mj>$1W3_@7q>VB=Wj;e`1Z<
z^Ca$#61Nk)Dl#?Xkex*sw<2Z9Nm9HcRHBYi9ivCn%hfTja;k1rZG-u=DcUC5e^;!_
zP9L0bTcInW@}v9GF$Ydzu58kiva@SslQxTV#gJvcey^}%NuR#5X|H{}TUR{Sy?Fcm
zW<CxApo0`%^^Fb{a|G-*9f4Cq1|%YcfRIZbHnYd;y;Kfk$wU3oNE>TJTHf4Iu7KWt
zZs_vVRgpbrm_2y;WD6HR(xR@BZ&iGm`UO47M*NTZh3kLPFO0(JZ=+wR<9-w4Gke;*
zYf48>9Jln~uI57v->jr><Y!DQtgfBBX#4K7M;4t6k$wM{)?r|AVgK~}4Y#d-d1(1}
zt5cn!((Z#Y{rBB++urh^>9fwQpOM473|vZ&RXhO)SWp9P8bdWAaMM|Ym>Ww?4bo-M
z1U*hd))gl(H_~PDbHy8U{Bqm2;?C|aS?Ps!J??pQ(<WXfemWF6(XWJSZ(FTTJV){m
zVLTvsWM00;dO@a|<sEigoP`rv*nxuFGpeYGDV8&nPD#5)SMiy)Ov-1PzeN9Naq)fi
zTX)TwgSn$B22Sm;WC`Xj7YlD6G3NbGaJy`$H_X1eOD8heY;u6m9)R7zdi_@o!}`w}
zhFxkH_O=>EyN0!P&AGY}KbtIeihqb5lkqdU!Y;BJ8t{TtFsv=N()rdfpz7J$Kxxkf
zC85CY^$XR*8Z~69LNpjP-Wt;}?7E>C+0@CFg?f!&Q$Gk8zw%leIOF{H2epIWU6_Fv
zZ)(t9+w+DtbtYb<E0SAoA-6;p&;`liaH`PB^O2$WwbCzQwR(lb^WXIg>wnTOT%~RG
z3%^C)beM{H;=`%<$&|+)o{Imd7Z=gjAoMAlw~m)mRtjE)<Mi;B#G^+Ow}f@^XR$G*
zX>;Pq_Y*c7crqks+$8a2D@K!<A>n|AB+eil6#t25q^0_DO;Jf}Lo_6~sLJC~j$xao
ziW|E<@Sv}M=bU7B!q5t*M{Jo&Y&YL&)wa$fHoC&vd|}pui3#r#HaIwj&QFnoh8SIe
z*y=DfrwIV`eTgYa@xLUbT>B4N25@d|D`m(XGr!5{GY=!t_`Z-6cVXAW|L5#G;G#OZ
zx97~vy?2+sEK3(ymSquah=5{S6?;Xn02b`nHI~?GOt+<|38a`_Owczm%^1^TG^W3)
z8jWeDnqHJ0zB%{aEf`|n@2@{#(Jg2CnRA}!IVT%eQzrfhKgA}Wk^s9sbk9~;c(49>
z9<hrqSG$um;_+rB=vdsCXbRpmJj?Wt8?NK3@VWhM@pviE&el(<LjAPTm!l&jj!S#J
zaQB$%>M?h}(0O#<D*31HXtAsK#|Mv2nfL14X-6MCTYO9UZA*{V?rz(D_w=JnZ%a4k
z#%1DXD8Tr~1#tia7K&itf`$h1v-%9iKBUd#&}Q8e)sZ3cZb#5&=t<Dr;e-%8Z3*<p
zX-1>-5{e9K4dZe2(Aok=reS<|MZa+qCXDM>(fRp%MpsvlzUTQPx|O%LZM%CWT6s(H
z*$0nKoBQg#DMugtvDmPADy-nour4GC<D*FgZ|f1%@K%Aa;e-+(6#N)<M*2%^ho0Op
zc3fi*_82>@c`<)x-xZ^_4eL0hO{W2`K6F+2&cXRZ@(Kpg-*<o9vtOH>>HU-Mc)w5Y
zww~I7cy4YGSHr!$1Ti`-;)oEi><>Me&|bJ#d<<^=>uUDo?*Q125l!KoDcK|oqbZ4w
zSZ3Vl!!48&7J98$fJ`S$&j?qmfcxceynbSoi_pG6(q$qb&W_nOk_B18yS+gkpt9#<
z4R%5E8~y-!!?!Ya<krJazjFA%;n{n-HM`+&dne(mZ?nMlX4+A3<$UpR*x>G=H+>*o
z2;t*p?j#Elf=QrRpf}Mhibbm-zzKmGD<}vU1cg@;i$yIbsv6gaL9;ku7RhpDX4>T;
zgDLe03BE~?^TJq51#<Fu<Z+{qRgfBy;B-*NyLE<>a)qUYwQtYwth4-d<o)kC6`zgk
z*MCG9Or=9c4cpd5F1k|@cUMmS^u4!#Jo&g<Q@wQddx&qQWMtD9N-6(IN9lRJ-IEhz
zV>kn6N;G;snHCi@Dy(;sje^&u8A}pj9T?T}=Yra`$;pn7%j7ZUY30#824Jt)Q*8Pg
z#R<4PbtV9W;52#1p-)bo_Qc@zo3F?(=v=sM^Oiw-C)NCC@b)b?6m%|Vf6bQ0WoI9J
z;OyB49y~j{d+%P|FWYw2kVhs@dvf^o+qM^X>)!c>?K_7(K6TQ*!JD_!l}|K@Cm$Dr
zfR69Me5i{I^A2`q$V4bn!>pJ-;2b^jFe|Z!ky;B7O-H|0sX!HAvcZ+%V6{f{F_2uY
z%=EOBWSemu*<x`>G>`#Q{OiZX8h^omKFOa-<vrrNU&Yf<DxSX9x4%w21m*H8Tzq#A
zO)Py*eXf)yDkR?5c=zhN%F%%@ziai~l*eP3TP6-8_Zq(R<#Io|M&FM#;_~9j1wdew
ze~m@poY7Q;6GoU#iOI7|5CP)nF9$`OmtQ}#l*TXEVfs6vWRxi2H^})}K>CtJURySB
z#arBpao`ASW@c93Wh}HBf}KI96GidEna!b2A_&s<FUN~K4Rif%a&tUcaz5v%u|YIv
zbD*wC_rdRohHlRIabq0Re4L=;=lBg3!%O>$uf9Jcjwlq8x6he<>GJ!3`=(+<-@cIY
z{jU(KQ1RvRIhQP)zxR)Cd<Sw$)3e?4_GR{UdGc1l$JJNn6>Ofg@9--hsW59?d7nOI
z9lZzkjJ>*T$IX-Xy!FXpb?l-seFhKh;5`r%79Sozs6*MvPGNEQpnnyiWE=mSZ8gUu
z-fIt%yzq<&f)Mop^H%Yj9PbGH&Od+cwbuw?7&BJhQ(nZgo)nTX-ij!o3=lXRK)Qs1
z33c%=F;0leNj1?l9k!<f%dHi}YIRuU=y&Rf3okQ6zGW-71XZ}gWd=cyW8x8GY!oh|
zM@=-b+h7prbOL51YxVDZAmw{+x&7e5+i%&&=?zs?6Q)j`P*v%RhB3eW3S-3mzy2;B
zSOK>}4tU@;Q6oN*>F>$3Lfv`GyA78<^xkbZsuM<Cy>Qv0tIBIOi9f|om<blpbP~s3
z&=vNI5#l8YP#p&U(dYIA`Y1gw=VJ!RL*`L@90i&MipuZ`)7t_H`eO<iLnsX*>WyHN
zTAJx3#N&46W#-A(XJpH$xm9+33sG~2$CDihnumtW2U)_HbN;YPH{5^6Rb9LE9&k6P
z4_tfsEfG=Tih?<|D+iUA(B~cPliPP+F>C&^f*!p(wU1OMZ`g9Vc)4I~?uKrz8Qykz
zZ4npC$znE{U5~g}zL;dgk`GRR21{T{(+TuuWEfQ8pnKR1^lSvv?-~>^A7PKR$LauE
zAeX>Wwx79)Lb@A#iFn<Kn0R42CB^H|StS?#d*!2Y0<u_iQ*iq2KkVDY`oL1)58__J
z19LB&B#@4zE1t5Mpjlc2*Ys$MMm0`ri9)Ov#ac})VW4qKGj3Zjc959ZwM$_^V#mb%
zR!(~s!bCAv8JtV@kU0i6X^<R%pmXMMna-QXpI9Gs;j~&2I_co)oshKi;gZfJg<4ph
zmG>EP>y`Z{51X`se%O3oLAML$-9w^*jl6PA$(Z!Cxq~{l?&XMal;sxnFTK25=K&=I
z$aP8to2%^m2Y(N{ajwrzKUN~{HumFL>@Iq_@)Gu8Fs>5d#$g~15Wa52RZIdLqGm%*
zyIHp{n0M<f^B3NB{lHG0`t>j9G>|{C;Ep>MTyo2;3k&=AD=Hc^$oMS0Aibxg$<K-=
zxn55wZ;DV&p_N3_)G{NI?WcTN5}Hw{umyB0^cPPy5%CBN1p>K^&#>O?kuzdFtUUv>
z&wchePNs>pj((`TLXt6-5Cv2xuyUOhz!9XxaRQABa9f}hX*V%S9QKhrK)jLORDkrC
z;G`e=w#(3kt9^cP=U1t^?}lx+%w9E@LKUs6YwXykwWqLKdv(^14NFI^o-tlEeA$t7
zEB#jH;d04H@9=P-5C<A*bs^sd!I3KADjyrdw$U_FZo$BeRtluG$K{mAc2cyA+h_{O
zg<LBlJz6l-A9;|F(;)Mv5VrT|+PQN<=fhOpd-=|N{k!)c{K!q)pH}JNp4~c^_UpZX
zFUoJ1UC<_7owoAQdBxR9i4#i~tXjQL&28VIO~;~5dRzF@bVMMhX!^pK%QWUz0=OUv
z3aR++8|7tHH0tdy7Bz~SmylG%R!GajtO}#aNwTq+eBs7z5GS2tfVOqUp<TvxF!1De
zyll=30tH5#U}Kwwr3Is1;shcKE31Y~O_eeD&0=b4o3@U4F-VD!v4R_JoLyW<JDRZq
zN{R^Kopj7>EY1uYUXLTffp8<IPN1AK8qBCiM@Pp-$J(<pCH%r&Y{P(JCt_x)99kiK
zSYQ6N@B#Z8F0J$3O{?o<;Ib>Qx848+DP#!0cwO&@?X)xOXWcHw(ZlJzALHoqsT}{k
zTol3wL?zJ}*8rdlK`D$N`WQ($rdMLZQQ~azXrnp&9>WtUhN0o!(U0G!6?F3sOIN#u
zj~p?3-R{=8t)0piV}4GjH^Jj_{VOEV+=b2bI+X+K-+qxJ2amtK7Ru;Nbm?sggp#@R
z5teCU&Qc_D67Od)Ca`@lGZ=eOqVU|OZ@u;4)3@Aquwm?|kz*^%E5`7pHyk){!;%}H
zeDcOoGiHohQeInIZg4%kWGB0yJw{wS1s{`aSo#+M4VJ=ILNE>^*M-Wcekv)9GrfoL
zLGWa<SO6?hmMA&g8fbB9N}hb*C4?x5Tass;eCUD0B#-WrKQAR86Wnu;(#r`UBfLYc
z05l9Vhy$V}Cs72Va;Aa8RXJ@mrV&<a0j7e1C-(Otu41Lk02SNN-FC<?tIOb@OeaLy
zV|=!Jh@bf(vFJ9W(p{jztMq+B$WZSf+$K4wkOT^$peX=MQ+h{&2E7Q<PjL6(NHZhV
z%|4lx8DUb~+wik3nR)oR0|`;9lvnU`2kM^-kLaI!l=ULmr$?I3(K@ohyOx1wb#iLa
zav@SJ03IF%VLZ-GNf-sdPXbGCV$oF1QbWQcIS;QPVT6Z`2;tvpnzdYdc5*w5j8w~`
zKvfg^L;&ah8)8Cy&+c6$KPbPw+m(^tDka{V;59lbIwOxz(pD^GpYW0(Uj+vki7KG5
zU`pIzsYC~WQ#Sf{zKW`IQ;aP{-krJORUwCk$peNyLCY>3Fltiu!08N9C>6ffPm3EC
zcJolk79Y|2%^Sy+Trsk$cJwIq(9zQ`to~qd+liy#*7L@>Mznk6o{~gbAzvjGfF?*J
z4pB5Eh%{HjEQ+cF&ckqmgb|ApW@!#Q*G5`F(;~G}ls>SVCtz%NB8KX847yz!YR9W{
zC`ZH7`$~Eb`|D)5*bxK2h<F>Uj`-yK=hvxXWO;?}LphT=CMXSY{Clx=Gg5(SH;Ziz
zsXOnEYM}jSE+99Xyup6qn@PCj5m}K(WCth)NC40Px<jEj`XF?G4iAc>Q23x^wY&+7
zpeuB}OB{isyQHV`(p^v_ju`xp0ZqG=1<DVyFWe-bO!CIW+o?j+fh$&(67Ij0r5I2g
zMKL({aRxrXkG4)X{ugtfCJU|kGb$g?ZDaS~384d8bx=kz#zEvSdY(dyk9D}^{^tRV
z|HNXdA|U|`@Vv4BVXhPI>pyYZHFK6AZnJz>Y42^bR$MMlbZDoFwAM3wJ^7R`J=3Ma
zhn{hrp4e}IU)#31^Xyc}*{1_J-L8fEr-@geq6?nx0gW%YvLuvq>iu1TwMjs5r-?Zr
zgr7qUmoaxO8lxPDJr+})6laEtH%?`o9*f|#+L#BpVlhUW7T*d<p;?-lQA5nMLuc1=
zm!9|pn|ZqTsh1hp`uY<BQpM-ugoGZ#vnN){KYm2D_s_$x{#lXMz@8Jm)=r$b!Nee{
zs++XNxP1bnjK@=oN3x&57;hZQX7D=Ko$E&L$f+muOs<zBjyRfShdasB(eIJKm!el4
z(3AVWp9OheemL|-cTv{tZbL?kcjpc7H)MjOS+6_&`=PyaUMTG>zPR?_(`m^k<DEl#
z^@qqURfh-nA9KYLeLf9r`c}P<4<qeJ7t)(7^v+8Kro;nh-GTCsd2VLW+AvBiiZmQs
zQ4^tW(-x{#M~73!lyVg?UlV1e77HndNCTwQwWLFPAU%7O^zPcbu%LaH4qaM%vRoNy
z$ucD!8xt9>DWn~=i$S1A3pX&gCp(a*Z4LklxsQP#3&Q_e|7xFZN3VJIE%D3#k%P*{
zA^W-M-Rbvr?SAK!cYpRRrF_+@ajS+6?eSh?UCA2vBa`Qrv&@MTGzzmuIm(8VR_?#$
zwmn^kR}bzSt8RO`xKpQM@#pDV)dib!T0hZY;OpIU_m1t^wJ&{i<xC}Y!hB=yb(49S
zRm%4ygS5rdQF<5@oPg6V1EW7EtU|)TOMoDDzd8g0jd<d$Y%U#=c-c1n!ehdRinEOv
z7>+l_zL-DTg=5cl%v&a2`t}F$E<}7a_{xqvZdl=0!=7;sbdMWVU;5_IvzhD1F5h(3
zB}=YS=o0bL!66c?`4A+%c^YhOJbdtm!gUL0+S4OHa`ekzywF#W)9Kdr^KX9tUV~G1
z7w^U&(_<9jnByRZ6I6-Yzk=*Zg>z-7c?>8#RDGe)={7l(yxaLk&c$~0u<(m^|Lmc!
z&;RhXv2P7&TEqwPL&m;^SOu#}RU$Vps!&s?f~$(k6{LT$**f5bn0S|9A~4bJF;FgM
zhZPtXL}K8^FeHS#k_+_tV(dzGqZ5b7#B|$=)_v}nJZ-MbP8ZhX4Z35_gvs=yIJ+v&
z#kNgeI8zLYj8c3tnKm<D9T|Srs{?-8fjR4#=$$79e7)V#V|JGBYpeCq>x;*w1La(m
zDQrqIMGfDgCSv{?;}Qvk;`z+s!W6b*A|L!fsEektZU3Ie&V)nlH;np+EVjf@`1X1G
zUYN#KQyY&oOJfsCvI$Wn#-GUD3eVR}Cj#RUF|8pxN#}x4J^qQrP*xdXrO2`mS19^^
z7L|rz6bNaZ<H?rqBr$z5{)yir6A@UA*r*FwONgJ+1EBIZyng6$u;1%ft_)I`R;;KC
zP@5XBp(A|{qsM>kE?;ygn~DCk>)JH@clq77Wt~6QO|Ro6En!chTgIOB(=k4X<!HP<
zh||bLe2sjcL|o;PYr&`jBnmjhJ7Rz+7jlJyuo_#uJ;-otj;sNfLq{}S2m2@9QA6!(
z--F2c;%V_E!fK2Rx)}GB4y^e>%uZ;4mn5tvgd5~QTkNqCtQ@7_ZHhzyi$v8Yszba9
z^6pqDUKm-`@p=-_R_xFMtUs+#w~bz3fBZNSgw8)%clFh>!xfSyc6nd$iq?`SB)fTs
z=LHWujevF_NrceZh;>38fM`<$#;_vF(42uNQwbnR&$<;GY@p!B!H3sfhaiTvYvrlR
zuF8KQUugPh-jw@7E_Ir?`BE`hjl)<xB0^j^B_%@*<JJ+J*n#m_Ktx$Gh8zG0F=FpJ
zB(B1M#3jlLl1+)j0R|)YEe&aQnihiJvQl`K4pt?e|4`kLM_c!HM<wK^bn*K3t91s?
ztuYUniZkro?+C#<p=wnlbJ%;(_@~K!12RkuMhuIAU{Ud;B+_cYJu?oNVh74DM6g7L
zBKRDL;KTXS9Np8*;1HD0c!|AuAgb`zNq0UWfnuc+DAqBxq(@nqcXCDmg|Vxw`rXfb
zz0l%QiZ*&AeP;2b_PM?T`aOL{)3@3-<t0?D!pKPmSd?^NKrsU)mrH<4iXvlHQW*{w
zi*eM)^@+gS39B&KXRT7RGE-Z(YK<9>Sa&8K43UWeZmGfWu^E1&$@7E&s0Bl;>eB|{
zv~l#f^?k(8q5+0ORNpPb*?k80v@xt?QRl9Uy4-NjeI^YxEF6Y_6*|bTArV%cj_R9j
zwX$C<;RpAN*B^TZ&zo`5ulY@mM<(e&x}esW3L0?$qp9(fBNow0D6`VaFbmZ*KR`zX
z#(22`I@P#ieo<k5myTWB?ktI|lmSar<svP+C4RR1g>a~Vk1|dkKZ_3Z@$Q==5v$83
zVs+l6b%RIresANFgME4*SlkRO#qN_ZRthu5=%>)oe*K4p!dQn47%(IhLIwRySSye=
zgwQi;TVltxX#tSoR3HX9%#3D8r_+RzWwBVCYR&MgII-GXt0PwvQ(LF@A5!PrFa5|b
z5ViWgqLvM8Ou>Dq>3cDlX=+;o^^^>%Vg*VpfJ7?4npwP_rsQRa`i&06fs+6MDhQ6z
z<Bl%YY<jl@sHI2VfFqCQ^vQ~LbWG{e^Y+`{KI9(UAt|AKtNsJuU~?O12i7CIF%({_
zpKJZ44}QOziRUuLqL3*Z2b@s@JKdZa?B}Po)=`<EJU)HE3k!_M-vuPK`Js%y4JSvp
z&v{|=*v{Slk=HkNM9PNR>tE?G?vs@l(A3c0VbZ7E%Xj<jMVO1Unfv`C(@Gsb?RSaX
z(qOa~XJ)9OEu-^>$ys>GlYKlH4P_PS&K5y>L;AK_FlOCDx!&tXv;fuvk}22K=gPap
zg*XpqMq)y&P1XEjW4*8$3ZdgvjxoMaIU9$&&?S#7>AQh$B_`KH`BeqYxL3+hb=~lT
zls$1$JRKlgx$Ej~MhX@@%WnpH<6X)ZKUjRf2l-Z^Of0lj*Q%S(cabd8)!RAKnGx@>
zg2tK5=Q6-vMW=j%YJiB)DXX9c=TFb7yIgKpyhCT#_`4O?ho@y=6)#tN<vzIKW{IP+
zUx=>aC95EO`mB2&aro{^YiI#xMT|8C=X8u!me(1IAifYcEaxYSZ2>h5=U#oZwYg5b
zGESRw=ym_fxIym^D)+?ixQ&nSWAx*I5j>ahGl;^eQfUJ7agGJx`VROfj6N73P!BQ;
zoW=TzMIklRqwzQ~VHW)jB#J*iIq?&{95MQn*A0?8-mN3XM=()0nvW3ge3kQyI0~T2
z-EG!2IjtWp9N4&e<#Z)^!aRNas$}l8n~Zf>kmI8=yp`xsD@tbL3Z|v8u{MmK%ILf%
zBd7(e+lO^GzYEFt^YaPUU6=f$9{ZK=(L?z)_#UPn3(Q7$EsFTxqqxAKxS+5Ap1<r*
zapti2>My1CT3Zv47!xzYuV#tJVZ`y#fKr_D6nk~75zq!RPAs7qN-QQ+o8<_YjVcFj
zy-nr=UM?Njzf{?)uHC(Rty(f<u*qk-iXVlil&AkWuLMttHz1!M{mJmzFX1C;qVgW*
zm0FGu|4UNol9g3smoFb%y<$=4+}52swa)FV#Fj5ySY9z_PK7)e^4fInqT7`t#=?iB
z8?j^dDh#mq>{e-|*F-9T4ROJ!X%`6oCHU|2#W1U|qq9@0)UeAM+kNge<0cml%1_CQ
zu-t4<S~zX!HAMu-9R511RQ@7%#6c5aG)$lMcA#D>AZ!Hu;VDxiN%o1nat7f@K`fHq
z&y|-}_uJPgE5Gj2s?LWxxeAomYOWa5t8MOtYsPrn6ROXthvl47NEqhh1DRD41#&9H
z8u|DHaCw+Bfw}12ph-;3NAw2Z^v4s*52|QXKv9Gqmux3$;O3@#aSU*FnQS(MxR^cT
zAB2Q|7=(7Sh7GB$9Wrdz!kqNf?CjL^9MONmg#P`;jqlsa<7t)Q@#tePj6VcVD_>%-
z58i8)(Y^2x*~t_m^&4|x&LgGSvnneeF%fC30G{4=@GJS2UGRD1`G4Su@?CSC!YDBL
zdj-t(`Im<tR=$(h$fm|I{Pm_%<uA+;G?nt#K_j=H|CSIOIRHk(^^uDM>J7Wd$hk0i
z4P-6<k#cntiAD@s6fj(se%u+(;^FwJGEB#?z9t_y&L$U@-D4yVi_NUz_0a>pLwajZ
zzBHyM@E@;YX-;>>rrK)n0BbKJMkvSop5S;l6WNWm#Tp{JNY|4+BRP9R=r`gs3JG-3
zw?9&d<zFknRe8cF3Su0^E?D1m<-h1a!g}#Ov=+O5G;|>O@9>#A*?bK?eW*Ds1p1mJ
zN#;5R@o#TaCyN`f)#Ng1^WEwJBOZeqizqHcxKh~+JrWGUNWV#uU-(As?jL^e9sA*j
zrI57udL2Xp;o?A3lRrO(V~3BKN|qARVmoX!)zsgTJ;=8sKNY<ZUEd`<Ouy>}qwc}*
zx_Rrh1@Yp3-gYmk=rTfbwyT3`E?c)DWgEvQf)M2Z;$s3#RE(0=62Gv{Nd2xJgvx-N
zLg1q1kVm_pD}&4FUE)zy*?VrpDYlg03Xx}it@4t5WFzUA*9*k3O!8q|XhaDwU4cNB
zauMwYwpv^UtKi#<C^$?zwd`Lt9Dul`HFx1Tg0=+}r2Lb=HdHwZb)&dFL^ldt_|v@_
z9)di0XtnQ;$>Lj8d_BeYM?(z%>3nodLxY_?+&I#Xn0tm2r~Co=SsE%<p=J<f&nyZ@
zF)1qmsUa3(B^E2{s%m9nplQvdf-Dw{F<7E4(eh@81Avf?f&~3uhopQ2>SD&E=gDxo
zBjV)w8+o5o5xxh)Pkk=gF;~NaZ4y1G;8;s-Ki}>T19M8XDSHi7Nn~SjDz7Qn5kM@c
ztfWt==Dpwu&Z$5!!9TN<H|wOXWS#F}|Ktja(omdZW-N#=mY*4e3_AumjVa>*pfG0Y
zO`8&<!4D7B4kbjsG{%OL+Yk-~V{#k3Yg<2gH2357lM!<8XUeH@DB|QU+Lw0QDVr|S
zMIv&mt_{jiZ%2^<ERsxIqz&FlBO@#t2iiI(Bb}=n>d$b6Fhu=W06D<ptPsdMQtB5^
z%FB(jJ0#5B6&DjGZ`#>Xw1E^CnhA_})b`K}m?5B4vdyEaiVTWsHtELF$$yGt(CH71
zbkzL@1>)Fm*n8rat;-c<`Bv6-^D;%bbPF)`+|f7X_ugsu-=Ef76HRX%ZB)Cb-FIIa
zwai)$6yBzE-Msm0DHZJ~tT42MRLs%kVEovf<w96`oQzPR^a6=Nw}DX_R29l;o#ZhB
zQs`XUboW1on06Ot6PxK^V*~IJ-*&CKXc=Tl0{W-FqsiyQiEFO~*Sf{3{IORdX})V9
z`msCUgjCo0Ni>Qh$^XGgAhSuuV1a14=eTZtJeJbM=G|ZjA^aD)Pq+|^9YrWLVuR)u
z!2v;1iYee0pKVLXMzlmxta+2dZ2?Vnnn|$?f`M8M^PKNbU%Y+8x~)rQ2@8--cf%mC
z$iGAH-Uy1&e#?Z&U)sO=_B)5$|0aHQ{`Oflw0p2EB<s+lFWc@B?~eP-@b4zeyWkE!
zjHHsbcza0!m3e@uQ5FhBzh<*?4P_h>43=s+1>IFAQm(|Ajyks(wXnz@Zbm-wG$RBT
zn?&I3PK9PXhC5wZYB*0y?~+};E~CR$;|_oF$&rfn?c>FiiL<+nN`=&ll39~^7hlHU
zZj`<i9bQ&GqQXxP9@>Ac@8zv`cgnZequ{<yoh9vvk~Ly3UncuGj^tvdT?Lh;gQ7+Q
z=#V{zVy>zoTBG?TP>p+sNs@|p7~q`LWJhj%uG}iZNgTvkLuFXv{2-Q2S@r;8#}*$1
z=g?7a1FIRe>WZ^(47{$pI1aYwCyX6GYWP&ooIcZ*Etp=Ty!8H~lXmClJ+<+TFWlLp
zSh@YVKYTl8P8mM$(wfHeY3a)+%vt-o$-S7!2k^cmg{<*LB_&1@4pgC(1T>3NjH3}L
zO@uNs-Gtx}V$*%Kh<|uWg8wNOeS^x%$KvALS$2$2Xdqk60@p4aP(SB}52zOJi{sx!
z<mFhCSwd2E*363Z-C=6vnz`^Tl3lJ7W$+>WC?}1<2}^{x#`i<_?r_>+Vu(xSJ#nDw
zB2LnttoMei03=<b9Ly%7KLQLmtM!MKqC!Iw*vOWi6yNMg7k?9MXndPIJrrYa77{{W
zZ>&GMfp-jf@w5km93J_MXHOp<w4<y|(T3iGNA;@y_IvT&_dkm7_HN{rlkZ))VD7?I
zljkkspY3=cFXu^zv#70mfODky{LQ!@#GBCi>$tmq%?xjIh40#J2M%nDoA<2a$*YZX
zYmDp@4<9OLak+OyD^OI#se}Vi_BZuC3!wa7wO`Fyjx2yl5Bo=;Ss=}4ASbf^0pMIv
z;Gn%~X4H<KFcXrgBF;Q}LVPiE>e$I(J^mah3Kd^XA6{8GZp;BV;_X{Jd{D7^$DW3r
zRqLEt%LnYZ`;qNxk#|tX;+_ZfHVqc5*kROJ#yc&T92!Fz9m=TTWf}s?8R<+K=>P*+
zEuqz#DVkm+F#u?1Y_Yua7qY`**W7WEIZ%HkY#)0=yLM2}W6=J)F1zL!^))JccZ*T$
z53Q*j6`$B{@`4dBbe)?&HpA5+#@>G4j+-FyfuEIAdS5pQF^QL>P6J}v<c>!`b~r&a
zn}4UnP^}q2w=uLajikBka>v8-*$k6=nsI%d{^0pN68e^yl$O1sd(EY`qFX23^|&}b
zazwAm87#bQmZH8Kms(a{R`uprQktxA@s##?jo<5M_a$;a9<1ZB;!VHO02QF`^mmyn
zm)#T?Y_7o$PIHvOY3@>daC04YF&9<X#ay@^71>)-V;6r^pb|T@9fq>(`ZziyN3kIo
zJ5m`+O9S!8jtGGYBamanj-WXm5o1UHZPUJ0W@cLZisD=Dm020+)vKcx{&rmSgALSU
z<bAZJANV-s9C0GsBMg9ADOFI?SZ?Eq`gM;g6i{}NQH4!6_bxrq%1wS=R$*2r^tGK%
z@HE@D^mJ`U{}IJp8uSt`!<znaz1qYkN2_U*TGy`0ggYJW-Qm#|8ef#T;#$u`Y6Q=?
zwQW0~Z(74gm7hOTPy{C!pScJ=?S}Tw5KB48@#=sY(j9dDT_7Hvwjgtx6!|C==$OEf
zk8~8LysXRa$qp_y;{i^1hpL<FF(!O)c_P`gZuIEFxpU_&-nsRbJ2%dsbmLaoHulC2
zZGjf_$ok`l`s-&d1orWSD+ckW95Ew$52!e^VeQm~N%5{(my|u<ZC=MwS=nu)!t!5u
z``YK)XJ0vC@3F)rQ~y}j7U8@rNkO&QFjNoM0R}2J60aKdb5F|^z}-c^658=bW0ij4
z--)M)@^vBagy&v$Rmg~ov*P$p+5w*BCGYt@2@ZW)V?CSt9_VMn5>dlT<(iBp>FAFj
zLL><cbr*)v5QSmt-rT@Vffo`)oT6-NsK^VhM-mixacBj8iI>vjuZ-H*K^%wh&%Zb?
zj!&LBaXdiExYF5^ph@PjyO;O``}AAL6t9S;n-4v44KxuWlP$YMa>In4^BLp~XMoqL
zcn5`^#(@;8s~b%ulo~=Q33v+G2vC?E`fruq2q1E2<|Gp`Il37^;*?1%G4?)_i6WhE
zT6*|rPQ@Q%%jZwJbklv8DVxXcYTvd~r>{Q&l@B|4NF6orv1`*dT<K{)adFuT-R2jR
zXL;I2cKzf1v>%|*jQb<MG=`+%ZJ&do4{acK1LS*`JKMld2c!EsRu-Ct`1#dBjF>9^
z{1QX^(PwFo#sEk_x4$#Bi)T)rGHc;XHn#WvDUK83qzvjizJb=h5A@Lf6%RakxiR0|
zlB0bOFEL_qctH%)#XF5mj$&kT079ho?Zl4LO|{Fj!Fl0iD`xkIqoK3x1K=emeP0IW
zSNuuib7N)utNBnvK`;dvKySaI69<4G?9jNe>j@9D)!EeJl>R^r#m{WE@jKv?(k@e%
zv%+=|U*J7|{?$)iS@xvFwCt7LFIf${7fw6AbuG}1wZeCkI4_?1=o6S{?*EII5=tsX
zrt&fGPm+n-&<&xKq$EZWj(61Hq#^p8aXFKd>^6BsDp^FHh1drgUR^M~mO<oTDK@8`
z_AnK9Boa>izH<6uZy&n+YW1-Vz#v)tB90?$M!kA9T{tDv5#fTtKh!~3*{;3^CTxE$
zh0-po9ukK>JSkqx5FO|tn)v93s~cRcLiouE$R2T^Oi_fvO^)~*H#sgoF33$*AcUC=
zCNDWld^rs=A!cWgm;9MHeyhPtu7N7sUJ#cZ)_KVfin^EvxZ+);CF?pJB2z7r>#sG&
z^jyG5W}-vm3T7AraUHy1b6uiCj-@9d(P4~b0^aD29`fJ>*SpM?Eu%5b$Ml<(b5z+!
zTQ<@z`4HV@fZV#?6UTkxJ6Be0Or|lobnq=w0*;k6-ba&Oyne~g8>jrf{TJ~_n&<%U
zW<m}`z1YUhEwA7}8+K2VIjvE$|8mgZNC!@WQhAyhpqTRtGcinvd}dCT+aWhKr1+~;
zGbW?7_`+G~zjE2+tf00Y{n^0s{$rtF%z%-Dc>f*}1XzCT%)EQr=ifc&>tiEJdC3ML
z*4=vSsvRf{z2mB5x2^-WUZ0}Bi05a|m@ylALc~pYHz0@+m$9yJ<t4;ap|WrqqlD{A
zhXdoa!Ac2uL-em&tS*53^>8amf+SU^x)#e2f?0jZ7GtF3+_EKhV+tEn_W8Bf^XEm=
z`+FWdES?d6iQmP3=v4PZ)iAZSC$HeYd+VdVduYa!Cq6vr^U3A(A`JLTB7S}Sb{(QW
zm0x0^FuYgqK3*gK#eY@~6Bp|4C8-pMEy}=vDL_Fn!~_gw?Km@8EiXKAhBH+Zaud+6
zKk&Ef4=e1xb3;Z)M-p>IxI4#+({fdvv3Jgj$YKd`9i1C@bh|NDwev@AT4f3U1bC-B
zUyX3VcXWGRCk~&4TbAw;Ypbe^d(ap;FHXpL5l`BnN>mttiVR(%5>2gD7$wAnMPsG4
zz!hB1ia47i%dH>6uK4)o)1atWp1^>!9QO!g=Qh1U^~Acw)K^X~eki}-p-Vn{B_-)n
z^>T3?Yn9Y^C^?n(88&PZbeuSRXkWH);4PzYLd=^rYaULB(YFkE)z>)m))B*R9d_Gm
zSM4}<Y{ylv={ngz>9MvfGSJ(PgF@4i5*b%oB}XyDEm=$fPBZ&gtpR|wjF?1LR<0UO
zMV5^6IkIBoTsA%2gh5^GZZ6lT+vCC69x9mQLiWBACd0j-^<CciPsnT{;s*t`O@nny
z`&`;>o$uMY7s5~Sk9p5+VslLF*T>~C&giiXGZw6g2p5Blz@1(U1c*)Ext@`H7#GGa
zT>x4<s6435sH3k?be|HYP==%cy&!>}(AUY*4i&Y~r2Qt|z;rtkoH}-+McMdgblLd(
zUyWhZ<~z%xU%9ts`S_QmeEcW-)zj(|r&^GYr=%SrmY%xiWftaIlM*R#y^aaN95m78
z{gg6`F6^l4xmGjWnVL#SYF4V0=$EfecDig?uCO>=npEB(@Z3i)P8#bfl=j>7IJ+OG
ztUOb9?i}QZ56<~ci#0L~_HACyj=A-G`neUGHmyM9oOnz8@#fp&PyU7&B&x-=r~ZK6
z@T$y3XNsunW=%KsczQ|OuQT;>hj<6tVhovV3nLlnSf51Y8t&*;uqezjjsQ_KP)w<8
z+5cS59D@k$a^<;lGwl*(U0{z3OYp~VgF@!PMwubqAn3YRoeupgLzUIKx^w4cyWT(N
z>tE+<kda=c)47$GT^7J!iy3f}{_~I!$6gnW5=>SnrlmE|XGPZ4)2Cd8H3tY$A4EJE
zjs^#=%UmZQy3vXV3oW=7P;01K1prGKu~-7)-_o;20VedV1B)PoJIsh>r@yTM{*w#{
z|K4?32MC93j99MQ++k&B1e84`=l?;R{|Bw%-~9YL8vgs{dEr)(8Jzt_tX%BE^=n`c
z5kndo0mQ<Y#4k`zOkBupv`=5LWTamS#qKuL^#Lt1xP1n~-Ryd&YLij($Hm9KTkG^t
zFfB7+e;7FzyP!5G70#)lf$b$k$&j|hk`(MgJsSjs@(>0F(?AdAHRD|9A&^Lpxr`Kh
za%PrOT4rgc`)@+-gCp-X^F<TS`5;?-aNgGkUO2aM(`Bmy$s_UdAFsdFL?0Dxu9`V@
zjXq~{#m&kOx_wD_isQg?jUy=$LGCy!jZz3Y+ylzYtWumkK0t!RZej&RvWk^o+g+ua
z{5Rzt@kirE@k{)IVT;33w(xK2_B7sN9n+6?5u3!#FkReC`}F}QB*K-cdY92vC&bZN
z?5v?vLWrf0@(k%gMtMhi(pn`YMyo*EYt+iRck9ww5_1#^VZ_R?q(nqGwGw8n(g59T
zl~YWghFPdz-Mk0s(Y2(wDBi8d7qWF|Ei*#>7X$(e{KH*f4?Q%4%5LUVr9U0-?E7dt
zR6UvBFE`#9m*=W3oO9WL(>o=Cq`rRVCw(uQ+o>vBVvOSQ`n7)wM(*^zQ}O|>z<OFC
zriV8)IA}TK_V1)AA19<vTrMt!O{T#8Rm&%)CVZ@Do%)Nneft~@4dHOJSgr#-uh8p&
ze#_TN-z5+GB?5q5SSO9t`U|C5;9`~10L4%<<;IkZnmqD(d5{-M-PGh_EV^jbv_e|5
zWWi;dMsJk+{3wXI=TFF3HgnlJapbR$#j{vY;F`HBx2;*dk5$Z>G-_T!?tZXOUG>4?
zsrR(cduY|GpTBoZ9kqB#^`hAy>-kecR0qb?&|^S`l+<yNvQ3DT)nwz4pGtHcYFr;d
zypfZnCptQt8q^6;*u2hz2SOC~>FxC@9c<vC<aSc0`u5{^AVgYMqn<!%d08+GMz5p3
zJzl?_xL;FWxn0i5EX1nD;MT4%k_Zau$ZsGT$58-+<e91fO9js<b1CBljML&n>mal=
z%R=iRYy{hw%jXx2b?0X!#I+k%{5f2IlkZTu`0>H!brG&wF+olnO_9^)u<wvA+I$mE
z8??KFwEJ2AerSu4E1c^@Fpjtbbk6<EJOI4T`&UgONpxh}TzE@ml)79fi-L<hq=V@U
zu6+O30MC`<xN;L;ZdB3G56Q7&>#6W>p%1(onpq?UHb(m2v#_oQ+GFZ4F=_>1=voC8
zeL0v``D<EWz`BzX7ZhdkTp-G1D1yw|A|`qF+@91khK3hK4IiEoFDBH{gn{oQsIQKp
zu?n#_dbZxo=t)ZZ^)F`Q9DDahiQ=KuZo_eAvX0&ZYByEIcqPdvE4?wXHrZz&k3Jw=
zA^vbamf0lAL<SIU4P&abX`BT#j>o#5cZ|Y7iIXTqnSHV6RC*Izw{~W<&TrkJO|HkC
zk>kw4gFh=XLT1h+X(t0|F3tk~)OHv*W2cUVx0?Yso6~;?P+Pqw(eDqy7_ezZWfKNA
z7%T1-KQcKwH{QH=@68&xl$-YMy=h3=An^S9C*%)HyW@_uVdAYne--Z!O1pz^di?&o
z9;W~C4cm9;{rk-`b+_7E*=y*zVTKYR4Hm+z785^DV32X5@(`UJyS>n_k!~ws{`0h;
z*@606wD|6PrmpQDa-jNr&%?wEk5dDytDHg~3vrZbt>i8d9TjG^Qr)%9NC!O6nT{~y
zl#F8l;Fp(i6iP%gO1$Yhff-qa{?u;}jp(1*Y*SsIyS!4J^J9HGU$>>ly}gZkAbPeO
zrpDOL{PG7{_Q#evwitNRKgS6%_cBWg)(64)ot)$+gD@I_ctD&(Kznma{mFV|q>-SO
zHEX2L=f|=KJL$p-Hhqy-C+(@Pr&V>Z%dB7XXKrYBHT#K{p<Ut*O9}QJdLrp*xbkpj
zV@(hiW(|&`MN=4#q{?YC$)rq@VRzw(+O6@p;kG!W1wnHyDfI{9#7}><lh)zj0{(o)
zv{=y%l%qVMWwQ-Vyn4#4*@bLlN*RfYq*MvfN3(#cfU5Jv$~4?<{V)}@8H;uq1-p>+
z5fP>$2f~i099rvlpv?LR0Y8epP+#wNq59Q}_2DPkX5EiMlf@(GLg8Mv6&Coo=}B?i
zW3?HGPtk8KIhgJ8WaB0)u?mDHCE|in0WBw1X);mAg=x&fO>_cOaN|gGyYU|5&T;1$
zcbSxAxz?jeRF*T`mIomwV+TVBv?FLe(*J)9*e|=Bd+Y0s+Cz<>>+P6Ouk7`GVYCCg
z{#;WC0L1Sd(ndof0BcK{K5R5eB&o>MN=c54;DjPZfnkd@;EeEb7DZ)xgBXJf!&6L3
ziisg4DK#lICNU<#ZZq0qZJ{lp_EQ#WKV-FNwU0M96z}cd@i&y0jC(Hul|+JWpQb9R
zrqmM3QF97~S2$I8rJpMo7aA_sZ@qS-mbi3(%pzpLdLM|<4WM>4SNlqcc>uByzal<)
zK>S$wVOsXqv3EWbO$7rVjeh37>W#T+AM!7!tq`-tv-#pVF=yFy$apTV<B2Df)5?>d
zbj*7W{cwBJH`)f}MdX!WrYHqFR3(xM#N?eZ*+G#~4}@#Lt8}{qx5hvcL;AInM`AY>
zdvSip8UPDDG!^h%p&35QE+@t{4wwoK$N>YD|ChKUYr9^kYOf!oWmLo(AltbV(OL02
zUaJhE#ASwmBre2jG19x~52Z-o13e@US1$#s@&o`Sw{<kfdXAU?CcqS^)V)#*aIQ}s
zf;IP<?u6vz5R#LZlb4<4a>{o~l`(Ti7zWLa`<aV1mu56FOHR;FL^(cCSnN=W>gq(V
zXRj=}ZFa#JS9V;hxV-+JOLp#n)bsF{&%SEefB(CDCA6(q{L|khUR<;~IpMgb<oEfh
z%ZoeTKO+hktcLfOpMRhs?U;UNs+2zXXw^YdNiH%u>_DilynxP>UQ&>-YQJ#5KZTgq
z3hM{9%1z6SwOLdm5h0q11UFL>v833K?^pF2wFyBXDHLvB@HtTN)7c-zPXKWzCyhVN
z_*17AY_jv>>x&lF)-IA<1SZ5+CmmmkQ;_}THF8Whw23L~rar&MWxsl*lHcRg`jyd_
z-?Mv@V`aUuuB!>*PxF%hpPGo#|4U88P`wxb@^+ZZ+fz_vR`@ya!B5l1uUz}Zd%h~&
z3IA&7p#CGi+BbB-$nxF1WY>-%OVblKRo+x@kg|MNebJ?J=WfqHr-H7<1V}eR*pIx#
zz*y?igouS}31b-@#8@IK5Iw|TWt{ix*rSg}h}SXDz~;zH^2R#f5}edH&iUeL?$i4x
z8FP1GR)up-ufRir;@#MMf7PNe0KcdOA;~gAf;k?{DrQ?HO}<D@PXE1<85d@heUNr+
zo!XDno7hwJ^|!={AAK9d*(BP*Qra0N9Y0<B>QlGr?2N^}<EU;&v*Fv_zl@~|h*29z
zv-82E3r3neNIZ>EDQj<`gcld(t2hq{L$N8ug>zD60nB%5iVl4Ww^Dro@g7~!5$j0E
zTd}UVhYlx`{bFyPX-@DnP78{gU05_bdP}-1O1G?D`=*$4!xw83d#5>KQ}R6{3Z`D!
zb(_p9q^()9t>nsS9Y^Hkr^d#m_fA;z*^Oe(8ynX6PB)|-7PA}TVeO0VHi~v6F?HgE
zA795tzy9NdiK&T4G^LIEMX^4<0d733b2)oAeaAlV<4G>2TlBZvZ-RdNt<Z13|1MnQ
zG^q3!x%|cs>epvT|1n6K|MRIge;PZiYNGJH^`!Vi#k^}p*@zM4_4M){T{;c$7OC4G
zxohXZ<*tmi<90o~=MJ^=pkZD5^?Hf`8HF{T<Qz-Fd^@t=V^B8{`LYldxba4Z+<24Z
ztt?P=DFK?@cFk}V-F>YJHRy3kBHFd8xLrsO0JGF`6Ymc6Iyt2#=>dh8z&F=eUU+`u
zexPV_PG#b*mKn(zQ5bQ60;uVjptN|qjSk#yZFsx2A<6vWGX;&Trlp&v-qHQ?sU1gn
z^3$T@()uJ`d;WSc|GNd7d{5W2tAi83!rQrC6W1gf69A1heC&aQa9sb1m~)M@M@MnO
z5b|c^841x>qq$p|zLi6Q=wpowfD@AoE>AJ;t-%W|y|G?2zVv-No-wssJ^RY^_USd>
z%Jc4>FX67!O*k{L?})#@)SGyTQM*Bk&_}9@N&st9>fG<pYDkKnkL8T&eyQ6bS&&A_
z_htjgTr9Nm9$TzJJj}ykd}p3|{>9(a`M$Stubc@L^vl2~J`TQ>bUBDo_?t19#=Ppx
zOaAxTnb9rR&U84N$5iCM83vA`-Pgd>)vJwL(F?0Z{Tkm3#?YNPgZ*S!_x}6ls0HWx
zzhjuA{|5~7DCyXKA$#V9HR2}u$@m$;Po>x3E^gN9<nlQA*BWZk|5!uK6%w81yH7<t
ziNT}&vJ`uX*m|As68+=0TxZ0d85tyMlsYw$WRp&$H>viH&2mwqWCB%5x32Bla!qwa
zQP2efI0dD57${1VS*eKY3^EI78fG<uP)<U;JxYo@cF1cj-xd@3hW2E0r2{jd{<q3C
z&7}{TYvZ#Gt@?VNdHbz{p1$dL0;ZK_J@e*Uhupo=<V`%OYC>#UWK??W#4(M3luwFI
zi;ij)T{Buu6v>g%etCqbi1)GA-;0R!qgkUOAYK-vY`p1N&U~{OyJySRyD6hP8GEKq
zuc3WNN!N3O$wqz$dqVDagjuwZ8>p%&9M^AXFd-p9c29CbvV5%rZ=p7Mw8B5$K@0h+
zJLToGu}F6=Hf@6G^6S|;Ueb8C?-cY3%$LRVTK&8+YV|9z(zXn&E0)$u--s!y$;SgD
z81vxBoj2)9;}lK-LZ(dyNtf%|jp4G;paM?Y;LsRR2Re84gaz(_*=uNzdMwE29-4Vp
z_+&<bmo%hZF?*!N0tLaze6>Y;?d>aYIvZ<9>x<_FVw;jMwV`la*SM;KafRsSaRrxj
zM4ZNoHo6G^HVfp9!Z-(bAPYQt$fN$R7+lNPKdh?p9_%ADC%BeJibL86)ON@HB`LAR
zc#xqp-#m<fYV(DDwfPnX&$LYIUH^a_y>o7T^a7^QYIZgHLnng+7&Opdw??^{mtejH
zv$v{3IY_sb={Ikxa!gfW%z&!ZNYymT=bMCEbNeF%Q!epw@;zd+WY?kIDQ2d0nIpeb
z8w?jftkhYbUw`!YU*|sdEs?j?qg7+aRI{;LV8PzBtuNhm-)p!ZiT{ZImh~>JAcW(&
zp@r#tQWD7|*`&-n%$=1aH$s(A9LIl%6ht?R6u4Z;$%MGFUD?T*$<9_O7|UrEDF}7H
zm4I4D^LuuR-)b2pe8tf5Xnan$zkR*j-|jT6$BquDdx%?&me3BkYW(+z1H9yaj1NTr
z&+&oK7W|{#kkz8SzBfay1k&5AVU~$XEjEN-f(B_oG-e7k(OQD>BSXPKqkyDdv!({R
zl4^yK7YBkV6NeqcNt$Y)-K>ZPxgap0r;muKv7>vAAf``NnfM-JsddK8HpAnb-?5$_
zul)m}#JQgjHc5l5<BndnP-#$RZAy;a0a1NMir3Dj{U}~PahE!z+Ti7@+hrS)hzDZ?
zvIT@<c3;0)6UtPhT#<?~0!{P#XVUIqjKGC40+~rn2<WR6Wd-ca@}Pfq0WfYf7IC^U
z4b-=d`ZOPkKa#GK6NOFo^WRP7mGLkCWLBy<|K`{7A{`qfz$1s65Pn?W_tVi^inURN
zT7d94yQ=HV<1i4ssZ{#ocL66rhPpdr5IJx;G1Sh3(OUm~pKjm0_Z{)vWgDi<I{z-5
z(B0n;$Ba1i)X1uaw1>r}hPX3rZk~MWtHw@7k9IDHl(7VweiDN@)>~?ebE9<*)hrY^
zpd5KC1%-&1VpJ2eBDsiwMyiO#(p-<IxhP57Hd4PwS0*u_AC8Nwl7x!-6wte0kmb7W
zf6kC6NkH|6%CX(XrLFe8bM3KX@{D+aZ#gkY*6s3*HZ>e7%jupqGxI#YM{$9&=dS6S
zR^O!W(K1e<=yQIocNEs`O97Q<0B8yj;3)L3DqO9_77;+9R}JL51q=CEnicYsy^$JH
z%n#@NMT`0Q;UaX<KNR$vSF2EPiIY^TX{oT^7F-Im*Ahy)6QX{i`?A@jzqeG+U@0^;
z#jL#`hXt5cjhGNxrcWHzkA=b@Qd$}zY1wIRXF4i(XSv)?0~n&;01ARPfEG7*+VS19
z?Ra|C*gE!FUER@-&Yk<nx1<i-N2|t+sbXWl6)%c6K700vele(j>5jWz()aqE;_R@V
z-3Aas_4B$LFZn-ULZbg26Vlv44>rK`(gUrKzH*4S{@TZX$yQu%c<j9YYuFV3Y5LAP
z`2Cg_^_G11U0MU2^|u9@nv7a?hFTZa5~oq1DN?Qn8F)afs-|=BxW1sPj0l*f1vXJ#
zKUv3uNJ?O=73CxS(;ln+IR3GM-NA#>CpmGVg(`OJwz@uY>p5HZbjy|OfQ**-hOVg7
zX<$Jx6QijXCeK-gbK`UZGCQF63nLBk8s=i$Cd2hY6i9I6sS+ndIwC=2$4+0fM!yP)
zbObjvb1#FJMj&gXeh}6o&p>@cO|SZ`sdz6m05hb*sP1Vvlo^Ou$Z{cA(kx4;`;bAv
zWblDz5kGxA|B)_T_s{!C`~vP7)itvrd-nJVwaVT`+v#6N3>!A$w@=yGM%$_t%U1_~
zqD^b%xl+SR{%%wBzu6Sv#$~r;lUno3;VHLtD%w5e6)Bf8WWdO=;2u6=&`@6DTYmhz
ze)7+E$LSTm<x4NQWGVi<bRqsUuvB9S;ZLYZ0nH6NC2CZp9t~H3aHEa{p>o}5)PkHL
zeXjYPxP*j+^n|obxeI4GCHyYIK=lXKM{wQ+)_GD>lU&{BKa{Jx9;H%_R*oH8$-jS8
zeE31bK3N5h&3SZ!6l+cr4^13AU=lI#08QU%`4VSWAoWBi6y&-YSo5+dfk;r8D~)m`
zGd-TET=^UFE)1v!h`p;K0M_zA5e&850=k!x-@a{|)-s-Ng76{|FABo*$M%EZuvi_G
zr{(LQya!*6V(^WyQ_HIl2SIsf#Fm&XegH&${q`i71F->!-ltEf2b7n8^+WWQLTk}G
zts#Inm<p|6%F1bmU!`Jg-u7g&cVZijGROnUVt`NwXiBcT6;rj=+0>${Sa*Ri#HVPA
zs%kYH$<&HQbomsJodBSR=qwdsV6iwXrS03wk`^vkte%m{)H|V|=z=3g4l8y>@D%d6
zLLnb?n**$$2Tq(>wHp27PpV9s?mv=F3K6#z-ClGg>9V&#F;Ab%XDN>=^DZ~eCFR{e
zg0U4!I+@&iJ4rAQ6+t$-334SW2MQ{!(&1bRqb3<&ueF7DpCC6~4xaqW49#3urv-2b
z+Q8Ebgjzki>bK#e#|f1dL*i9xLp1;Sd{lHpgAFv%1zr(<*&66JxXsiKe@OSg9hjYu
zM6N5^!c{J9q2R~cV(&tk-<nuyiXX&f*dVPjtbziM$EC5b9?ulb7Oz&oNNG}8g*YPW
z4ti76ROlg|$FGJcwz_d+R0Di-;F3!SB{o7VPD2k7?=+cC3OpR}oHIgVVLGB6<u1aB
zTmuB}hm^3Y2&=AoWKlW0Pz(`G42mJzoPX;zj8!{Bh8#PQ&Z&o!kbGf3E*LLn`X@XC
z>{A{0)4<X%?AL~9u>9qp?v1BFk2zAT=cd_YKc|r_%$B4i({R03XpEwUwoEgia#lU$
z7pB)s3N+0n5m#xc*eaY1`kZ#!^)|7<7!)^ak3JN#IqOfEgD}?|m3;ARVB+pH#^oD2
z0>>jbJ{vCa&s*PKV~k2<8)hndQC}Ccq>fl>VYxspo@^W^j9UVUKzE#*LQ15XSS&^j
zoIaXjP93}3AwzSHOlzW{KCcGwoLO$O0DpXZ2*y+2pup~=Z>*WWei4@bga|C0^RTkA
zK{Wo-xLKa+i`R`><NFlsM}&+?!{X^1uR+_d`T0W%FDA(P_@b-jqi>9V+c;fZD^-IB
zz-5MB86j#<UV@oMtn?y*@fx*9P@-nLGo4s>PO>^wy-`Hfh^CTSZlUP)!gQi(rqAeK
z7C`cHTj!wWZc1`Yw8Du8JSNi=TjNN`E-Gev6PcuQ78hb0v4v)1iwo>7x_jzaF?pq`
zy!`BK`}iGuZ-4w*uC5f5Dkn$C7OvT@uJXZ_nw5_<q{Y%Buf;;F-n{P}$6jK#w1!7k
z);x!;eC|8o#=OfR#QK38v(BU|qW+@7(SuaONf&_dqQds=@^YoQ={OUC#BfD-!mJuK
zG@Qf3Ntux>4zs9C_a(cQbS~~BcTRm2?O6LN2r&M~(JO2|&Qhz~9Mc>fUBD)a#=noI
zf3)Kh#AR~nsjYEv{f9^?ywKvfhK_!}#T~>ofuSapBoJcRCC9px?2Xah@(3$q;e-N&
zqqb<r{5Ep%Fk2C)7wC+^3cg_g7L{V0JJ=b~eXN?obXTEsv2*|m<dI@`CEIPm&agQz
zGRoK!`U9K|hOaHhJsYpe^vJC(jJd;{5%ze2muF>#oCD^)ITxZ^9)Ep?XpmRi?iG1k
zT>)G_dxV!~Yb&v?40;`1iVB!TGjO1)oZvF}%X<=w#xx77wPJvPXtWYHA&evia$!2?
zB$x}s34v1gc{#28XwZ((G2EXI^O$JRqGo7NgX4+$9h8v@<i+d(MX)~>&Y3x9z><u_
z_lA6b-Pd4SHgD4w@!gkQx)xP*8+qG(@bvvXXRW&SiYs38D~GY_+OZ>NDCtSNK^;Be
z)n}I8+cx*XRYyK6XxnX2@`G82HgCIr_UL&FzGgT06~++1Jd7Pue0qOO@zz|lKbm)g
zKR=|Ep}Kw4|Di_;i<;Fo`S%`qa$IHggbvk7Nw4=ly84r*38UvO@x7bhr~BZ-ksI%U
zhi>jXeaWSl%&PPE2c0{lXHjoRv0eXX|DiYESh3peTvoB`e!V+x$vv=o<EGLseM<K+
zZgz*EbN{Wfz|Xfv&$(4HRd}3@Qlq9kVpfAS<>UIO5G*X0m=GOh=+)U{qvE6EB?`ut
z2hG%dK#z0D_S(_=!f=<e;6iO5->mx{kD$H+8n*wQdmjm>^can}P|y)!B))IIeO^(X
z|CZaoKBOqme52bx4Ef@Gm|;J9S7!aeO247aHTGJzxp}2!@SDo~#t&;&ZCOm7VWDt4
zwa%PaGs8;7Bx<>^@G?|iF-KA6T;ZFrah{^g+erKvb!D9L0&$>riya8l#qEgh)YO`p
zN9<#NVA*L3P$1t5<AVvBoH70~ubrkg#;Ue=3Ln^<BZZ{8M~l7Uzhdla8i{b#Tg!&g
zulC#r-+4Qqzk{E(?KSXDgz)tk57f2tBY^N04M+$W;0`sQIr7*rqRYHRHZ^8khx^t`
zDp(@VjLhyHaYlSCK3ze>*wqe^Hg+s5z2i<x_z7TL^L(7Gh(S{bCw-chDYMnqs7IyO
zbuRIuvJF!S@*6ZZfl$urL__7+)H>Bm3Hg^C2FrrpXn|dR!Nqi?y1e)zec=V#;h%-2
z_!M~gui@|}Z2DJuDc$}}+{+*J+mCn;g41k*UPJ|3p{m#lMWGYXY(t>}n^Ga0;!rMZ
z0Fz(tixm8(TX*hMckJ*z^$&%=&%=}F-h!8p|8xCsMi$Du*SA_eX-B-IAF1_D>(_@8
zYwuq12!ajQm12m>6|O3^B!YxRMTAvHLu5EuNu;%!L`6mQLC}=}`IgQdC`y2g*S>w<
z()Ql=J$oS6qM&03bQWSASu!LdJ=WqP?r0v5=#-U^fTdOc76OoswL9cf^aInSlO=fp
zc#1u8OXTXi5Gj8CaL&Gxu6t);)FR@)YISWbMlRxKO{%J`t(upxUcA&gzi89)1^uAY
zeBml9fyb2lC~y2q@H35r2MrqBcm^83YUK384I2dCxPJL+IS00{UcP=KG;Y`c-(0?|
zpdi*gcg`|VUOeae^?JXJl6&OO%6n$N&GpVI?IruIPw&uvlc3_TC~K|1|3dmLEG(j&
zL`1}ebY8-Ro!77LMLJKqR-u6t*(un0L9mz8|DeUrQ#9;7o~6FpboROG>+?HaSM~f4
z;)pt;YEbXK!@)7EU$4Q{!;dAb6EC*zP^@=c;e7Gjts}d_W4t$G-+y%M;~xg}??2#&
zkB@!yJ!2m(UVLoH;zdjDzkkW1#Y>JYUJSnl`s|y>isx=J{4PCirD;SXIT*)uf`x+~
zJDU}bXnmNahx=qsg!!3ymI|wJkGEI|vE*2C5Gp1kg>kwTk$fk)S|VffK;GP)vUQ3r
z&L2k#KH#z+^l-VHV^n2JLG0L1FRz_2ezy2%c1`sR@i9bxG;e>`E|1Lr7^2mk3l^+h
z`&FZD_3{;~*xBIEPk+Pk*RQ8_ZV@%&UCO?TwMC(`jJ8DoU)lmKwFSr2ANq%{SZ7r<
zJW5lC4jM6Bd^~pKfFa`ePp?ebUDWB8DTjYidSOe%Ul<!(cxh;iEEqR4>tu=R_+vVk
zd9^nzLPx$K!_CmUY(*$TT3&5)&1SPyu&IEV9C(shd(Qt{R+@70cR;lvi8wXO)7i3V
zA?meckbv$3HoAaSh!gMp37rH`Naa*~zI@|`Yp>n#w73o?JE8Oka6&kY6u$4(%~!sC
zpEz;<JGyR=*v`3rwpBK77fMp38dlZ#jY??Ntf0{?{{MwGW7?vbRt4H@6(^p31GMj7
z{zY2+d)4p-H8l$litR8Z1G3*q`yPrue@ZQ1Ak`_hK4NMy5W+hvJ%}B(1W^CaQ25tW
zG(5&H^gPQ{_>V))OGR@txib_i`d0yyzf%Iv0pi5|hEK)G{@^|$J{btEC--~~?jhn7
zJhx}v1L8T@^5D7$q4vQI4?;gN`@yvj=%0Tzzk`ied_+SHb6p8^qA4O{()J<{nP^T`
z9X;kLc6t&V&~+csOxUMntbrfqz;S%94N3xAr8<ZWt0DUP5Z{VYqaI!a=7VCQBExmH
z1RK~SAKu;(MO|>8!hYn^@7=W!x(!^o`pS|HdE(%PMCF!cbLP5Z3ksH9jyf|+5=>BM
z5{1~jSdD>jT|a4(4Pqorp+HN}W;_EWWy<l*x6LgjK<3KlPYpbug8%t;e7=639FjZS
zK_#hl?rob<wOG8U?N=If-Iez8sl#P|%qMHf*WNERKn0t!1RGb>8IwFtZVkJ1VR1f>
zjOyQu+G3U78I0=UhP>7-Z+4oZs1{YR)Mlq7Wri!(u!t~gL~WK`KGilm4tP9Z7OgrF
zEXg28JghnuBGN$e)}pHAz{{Bs8z|l!(Z`eC$`!3d%0HzG<eVBY!t3qOAtM8m;0x9+
zSi5@V@?}dF)y%J%KX>-b+G$fpOdK(Be0Am6QRUv@-r++B4;;|9PluizdUo%MCrd{A
zjP`BwTFcESCOt-S1!M%kZb~WV$PxBrH!Dhe;qUf~|Np=L{x9#xVyLoUQq4k6Yx6sH
zY!6>jWnoRtC7jOeP|&em8UCjKr~IwGc)QuJzA?>S>Ki5hH~6dgve}cnH+x_Hi#mM9
zjNxitNlBjgRvlI=AGhfuA6tWueSd}g`{(M2>C;EZ$6eYe$^O^=^Ye*5x29<0^m>z4
z5=HDJiKG!1$svQh{WG2MjL{rdT2g}C1dzQL775Ig-71w6(7CG2B-?Qa7HwCMNM=>!
zc0oAdv1&}7k|4JR=8?Ms6e|w5+!|1I#GRljpeY_V^RQw&B-k~^)5BNP^ec&w-)LGS
z3>EjBUmPhOfhtx{p;xI}G&TN0#j|}OJI{7Qua{Yk?Z)0Ob&C=Y!6bf16pWPMP+P>R
z$^E<HH+VSarqYCcjazIt^*u~Kr_isj_;2H9R2=9Jd4?a*2DMSua{YF;$Qu!wmobi$
zETR&kPG~7f6U@(~cwIy#>a2@DtI`|u|DVVS`}EV-%tX#pPs!BWYnaGUO81M6W+LbL
z{W6nr{$wDL!}PuTG-~N$MKsK9+G8mvNH^lRkAp%1k*@%~2t#l=pzfl%6Poxhg{P$^
zN-A2ol{=I;H5w_3#SA(6+!d0Y0e?_{zc)<`npSxZoZ{rU-(_e_=fC~FV)g13ztfm;
zaB4gp5>0QuCB#909NO1w(~Ox{Nqd`q6*as@o{bFIB6!D7(YRhWg;B2XI8;c`GqMV!
zp|w+5E}P^)V1+ameV2bPoy2?36zgXAI>CKW9WJl@hZ0Ju<KU%gcwq0EenT!Sqr`iN
z`+{YZ3>-h-tYwf$yu<2%AuNky6yG3>%pxYR-rvy<yCG<dlt+KJI$6UfzWE5Gt7rYS
z3}3@}(Tum-g%EZ|Ngz=&Vi<*dH)a4q!S7Eb7$pt#&%y)KkLpYD#`}$E{vVaPNO%;9
zv>S(Mai}>3RHVEiVvJM+FF7H4As97)v!;IT0_Km9Nvx?<VF5la;R;oFjS7Yq9UvaV
z1T$L<K!ce)&=nP&PFw+gO#la`(GwI`VKLnydhOa}k{jNAS5jc){CeeP2-hhNf82Zy
z4KjG0k8q*vHRe6SlMRNVrp5wSSWu&Ys2WNXpqw@z6QWe0*M+o8nG;>0AR$zs0LfFR
zby6t(UYzsIG_CK1c<3w6$t`-v47h#QouL}nVu^T1e0EM+Mqht@*Aq{Pc}6b3i+GJM
z#{3K7GiCM#6pVRutV|LSj&Z(#76tOWFv_QwIE^+5pl*Af(@5!KSD^?+Jk?BD^w6v!
z`~I;AajX;w6wzlNTQPO|_VuO4V6sGdu<rfy-)<5=cRSc_<D@m0y%~zRMxNXU$}=R7
z4D$|lAmLL{NGs5wbxt~}5nGJNJZKiss&q;XH?|Oq#Y{qk86b(gTu-(Q@$_<>v-CQf
z0a=2=0!K^I1mKd6m)^sA(Z$W1%kOm_>wD$APE}d?4rg4OzWEP8uQjq`f9i5?`DWiE
zLFRa4V?c7CV1W3<cc;C9R-8ED=Z;qpqD<q14fM*twuuspN-dRvw*7mH9N40kxdPZC
z9F_`1SS(#SXGP}fPFGJaD03rYAftQI;y2cb#do(`F=wgos4)ojX{Yz>`Eh(rO5#xq
z&uRU#SRW^O1G{z|PpiYWxCqgb<@k88Ey&;JkO(TxcI*6oO;Hit%PH5V5JE&NtrqH+
zn85&vU)9<}JO-KHX$wm*z@Y{I!sf@FG*U82huv^-N`D=H9f6}4qx8$M1ASk^yw@N(
zHg5Dhg6+X%P_lCI)<lQ2#!cLI+l8(97Xk<5%eKUCx)_NA0kHo}<G2Rv%n+hIA@`ni
zv_CaP+6XEGJi20SlCi)QYGMXz2q6k5I_(5dz!AW&s(=lUz%DaUZ1R$w{yiv27zknl
zuEe@{JYH@>HwFvl;pwZ>d&j|Dau3?J^}GmF$_pMPhRrJHCI2Uzqc38!w9l~F735h2
zZJveTEtY>W;_e{T0@K*ML}y!|!M??zbPH)N?(O?5g{WhNdwZ6_D0O8TWi~Aej|3gg
zuJh4(wXQr$#}HLDw{~-aNGnmqDo87BX<HBJ<6cr(erog0eQH2yzRqBh*5LmBm-vsl
zzngtb{l~U}FF&Ip7T=B9^E#4%DH-Vod&Pn$xAYaLuDDAHApP5<aRdu0n)rb{m!``=
z1vh-dY{%cHhEiOY3t`};&+cD2Wd_t=lN+Fy;O74@_V(-NzPlWE|F)at?*F|pm75*!
z20v8sNiJ_L>4N8b6fo*ZqFiG@u<W76IMaBo1rRW*=v9VQJ(Os|tg_=0J%ut}i08Xm
z=G6#;hlUA@^~go6;jgKPfk8FEf}%ixS@A7=y=urq6T~sG7FvC(PFnEBf8;RM&j0?I
z*L>9#x#J6bH&%{Py#p%B1`dmLxw71F1!Nxv4aO<-^gDMSIeeb7Nx*i!`Yn`*$3^4g
zoByn_T50&QSG?U1E`0aFx?AcAB@>#?aMTXXF{;H$;;2Hqw5F=!PM}=H7W3Xjp(<5$
zR18)5bY{qQhqSn;uwC06c{P@8)?x#tZ3#9|wprENtfPMQ7-+1+-(uNR&6SP+Z8V*W
zsSge8cI5z{c;Wj4YL{MDFHrJ39=!Rsm;3c{4a*g;7PeM%JGF1Cwk=3ZPEJgMu0M`H
z1`(Wos%@Atar0g)E4qFBjgNjW&b_>K>fTaKgT>pcF6Deq`Az+o<++yjCqPogZmk>E
zB0vO)QHOv@hgqdGs0*i1WsnBwGlp5IA&Eh$I+ExoAt6}%TSo$6z92l&BpEqvp$t(!
z-)Q`)@MTgH1LYn}os2ibPbzY~Z)uFx)e?eA86fvtV~<J{htw{pYl$NwO#l{ayQqcH
z7h0G=5_Ah~%`J3ZU>^JHx$uqfinI=?Hs}9acUkyJq(yD@UCF8>v}TdXw7F(0EF?6b
z-N8sUS?W#Abf%`*W96m^4C_&<KzWu+;anx$yh~;vWrIq4IiZBpai(M!?xcpPsIQ_w
zMXmkE=Tv&FDE%R$?^?W(TlyaaK-%7W@7RlIfPjns+PLfDLLj;xoRTTWfsrh-9@~q0
zMyev)8wnJWL7|5KO1OCsaS>n?-EE?9#Sj=IR2gT8X&PRvY;qPpivg{@*wZS#QJnKE
z?vk9OY?+mkmpsf${VOx6@!osa{sTGbEY+a&-}p&|(x|VMy?zcA1+EvqA-bTG&Zq*a
zbEqf~T8-jE{(>bYhsxphbEqz&6o-~>tLuHY7e(Um6kop?hX<W>kV;1lX`(*L{`Jqs
z$ZVc#j}jg5A$RCCJoB2qmieC-5l@aaJe}cG1rAJ=vyi12JC;fqS6QV6f@R)uM)~V4
z;HH(H2E-+$Q`55(<K@6cT9Aj_N<xJc+^ywiRUmhzSdxGe49;MQFP5n$80ELQ%uC*1
zckjzRdH|F+f(^17Z`=FAg8vN6FL?jMZS|bdqKyeq39Y&$9)GxeemsQ1SP<8X7j|Ur
z{cm>ar>RB!%$v6;={G$^Xwxq;Z@x>fd*MbFLl~&QfT>BqS+db2P*5qQ_HRu~Xx1v!
zDadrTa;Lcy(4&dabgcqxmBd!+jcTcmC-c|qq+fh4zSfqkd|VzV=bx4}J6B)@yGiSY
z4Da*bTV#1o2GhqlAnj!K3){MmO+D~wXoXI;!K}z>)Un;COjY(8y6H|Ua*=_AgQCL;
zxvInh(;Gz;)u>d@I2&W&ob+XnchW>#fRBvMxsGd!^~-PKgz_K$rL?+kIxK>9_lh@9
zHtCKF?5Mqcr#O#O%J5lM)3UwEqC7)<c>YiHT#iZ4<$&KiH1Po9eSRC_sF4#Vd(NzR
z%m6!;WA#)=99~mF8VhV3TI*k~_VzY=oDvsA^%vL;?9qiTi>JO`s)CLE0VZGn*d342
zLyxVPG97Ndb{^iJP0ac0P`@`(eBJI;!)4;nt_Rz!o3MHXlIKkwr@^{5q8rZ!Ta2Mg
zWWkw?%ppb27d0`oYpa5N+Q(lCDoMu@U~yM1K2)oy#cIKUibJ@IVnu5CQ&uK5xh>vi
z1&Gl5zMxz%-6R(HZLbi6l_Fm9|7UyjzuWHjz6<_td*J>ltL03&7WUQEnYQOkUXHj$
zI<{u7o22K)IRR1*y!O6%4)ksMM#)lM!k8)YSM>Ukk(A=8r?9^lk&OGFibxvDE^gdw
zoW(_dFCsY|M#3C%i=51Fhy(0V#$NpIrB4sdFFyI>)_bhfcgb$$C9z$+b%!`Et^$}1
zJ$9&1eeFs4G`0AA!fU&g^qZg5`@Fl{R|e_vp~2n(fITb?SHeLLi7K3NrG_xza$OUk
z9O!g}v6rDfo18R3XpvEBLf-vl>J6y_3DB~t0_fGTcpiuw4jvO9e*cDe50wO$Oqwrq
zhF8D{Cbpvg^SGFi{>>p>LvZw>CDmIuJO(q=fc|G!v4ju6IFZg%0YcL(R0SI-M$vIq
zCp&SXa%n6Ew5Ah6%m9o@e!}P|nrgG*24WcH{3n~~TU1;tIiOF1*mdA&(CDQ#X!Mn=
zT#@e26QVZb+h<<+;{Bs)#iAvZTQ{Ptnq<^mDyH&pP?L+NTuMkb*;6UM!`nZ`g9guo
zr|G}Q-9qp%!N4WA@D$MG#8EYz<y1juK_T3t@XBCN&I%@CHxlD>x}vX5#fw~~J=2|~
zyLFDR%sf5zJy~qzy>uNF8*$=i1+`QxJQ*~Wbg|EhZuzsYBBV3cDL)IZxUm>jXm%mT
zs&UM5K~eFX5GfY;!`Fu%Z1ebCvVw7xqho4LTQ*lJtX@`U+;X99o$q|ZeUDkJCsnma
zw*~_Puf)oJw2@@e)7vd7QZ@i6mSy3zw|~dg6E7<GgZGg{8VV#fIX1~*m+5{5Q<+kh
z$C*hmDO?bwNV{!jX$v~`y!a42=g*`3D=G_}U%7GPO0c~BCaBQS@BN*Evzw>Sx{eTv
zv1j#OWv`#RX4(b42?qtR^aBuufnu0uQ7O`GG(T|-OyXKXye(R{uN5A}LHo@8wm_Z_
zMY{gGrgB%%)@r}4Xl&o=DI7AShvLklT%0)~cK+S;CYU*4@IAw)?C5{&ct{%tG<~fu
z(Rp7*sN{s0O2rAl3$iIu<A4&JA6(^tnxiOZ5G>)N=@dc+X61wY_PIIoZL-{`0<Y8e
z)%XzWDRHS6)Y`%}qFO=7#W%Z<YtXBB@*LToG-#FSqFkJQ=d#Dz7hFI2l}|o-b?}M~
z_4R3^i)T-sIHy}x8k2k0`Ei5B!Gk*|9i6fE$!hVt_?(WJIA*+GvY=aMSRir!zSeD@
zxyiBR&US5V?s)wk)pSNpSDq%FB(@?v7AS9xltX`_s|{gPr3^hPpejr^3npT+S8u$I
zvDGSwra83Ilz)ACT<Fs!=E0qiCl4tn3Xy@n%@q6-7T00)q5MBjVXznJbMq&>v19X^
zIhPDv=1hEV=-C_o0?W0VwyuG;o~o&e#X1wJGBW|Y?%pRYux85g&uZsRn8~s;c7r;8
z>c?*_z9-*x&#KZ6J>Y>|on{wB?Y;bwD(pIT=RP7!iZq>8Ch=jU6VB=s;H+a71!@Hq
zbV9X;;(QvW1*a2AK&4O}<Wmz>^(%VHM#g42-EM3pPG1#G*IhG@+1{WQPfN{JQZnUq
z{&DXU`@^~viY9u~gzD11y~m2*sPfYzZ+%`-Ryz*TvwIKZTv-5>^z`)W`oI4byJW-Q
zj-3w=@7HYr^y{MTeBptcDpq-tE*+KMHXp8Bk=Dx@jXWR83*N=IDUT5k$;Z<#3V<bm
zLehZC*lL?Rbmjb#yF>#;B}yp3T2*-&F~fcN9psy2x55Fn$jV$78B6J2JDhTgV;_K7
zFs0CWYX9cd%?5Jg>Pu&4=7_g*5|+-Rzb-1@=E((>Rv1H=o~#3?KYnY$-5pv#w03#7
z%hTgCZs@yY&I;fA(?1_Ltly2}KEid)#WG&W2a;^k0i&6CDUAo*WUzgCxq<f8{H=Kj
z&70SuJqnYw!lA_G;m|dgQM!2RzNL>38``&TuSz*=>d%k9@#W<4S1z^1iFabH6DsKq
zX6xXJ!y~-ihW6{M?s%c$<}vHCleWzt>Kq>%Wvgj7cu1MJEZ8&xq+Qb)Z4uU0L|+_b
zGB{zaz$lo29v7`OMS{%m3{<G50%L+(GKBS5fy@@s5WRRj3R+xh>{GE(mP;#ay>eb1
zuc@oU&1p8bSa5|Io717U!}x2Wlek1|`OF6ya9Z~juhTcBg4xAUd(CZ$J!5DUoKcta
zk`UV!w4I>sj4*`+Y>)m&+g&=pxmZ^?YT0(xuw8xal`{i*>#Cu3>|yDg59~RloNL-_
zsKkXO8V|kvQ5YNbm3Usf`7`W2D$sCYk%r%RS-YD2sJ$!qjQ(BxW!POR`}{N6=k0J$
zXcrxYnOtJwBpFnYe8wEv44vi=gaaOYDg)JjzhF$Mz=*R0BhIoN^8SMn=a8GlKlguO
z;2wu@GCIs)G#W>Q#Tp!iXWkC;{U>;%!^=i+7;uXV8HTR|S34jTay)*Q<B^N8=v+PM
z$FN-zd6OmEL|bfA^o4Dbx%Qwqqcqnzyn_c|a7+TR{|YIS1@lq2#vB-sL5I}9z=VtK
zGSgD0>$Ds{9x^i3&rJ%9OP5ooXbX@U>C1m9?;%;Ju^j^xY`|$IFpi@_8RZ6OJXn>@
zze&60A0<xTp^d5!SV$pQThJC4GAeveb{uf=)+zCgxC_QX{KEf~_UN;H)J=~*deg!c
zTv4Y$C5ydh_TZD>!FY%S6(V3l+cs}FU8n96f8KivR?N*Fo*TIrF@VzEMAR=p9)RE8
zjC9(P!3m)TJAwu~)Sxy&z+i`AFfI({i;Uu5K6zf8fW)82Z*AAE{j$E7EMC33Z!sGV
zV`);i+IA1_gObm3PeX|-{dj8Hfz`R|o`SC36T<bJZ|kNr%5|8-!bm^LL_lv92rxj%
zI0Z(hD*&LCS&S;dlp26{GY6DzlXD#<X5x()Ys>T72n9Eu3jf~RS*$al(wXJoS-uND
zh2?@bH{KVV$SV$xGbb_|yV-v)Dv+^yoX6?tA<IbpMU9RA-;Kq7)O$K;>?NndUx5KV
zd-dZm8y3Xals_Jo8_8NTJS<YBr6Y&flOiJ<hAk{Q@QSn(KHuuMvs{k*aXC+Ok?qz}
z%}A{_Q1<!4s*!r2j+OuaRE^9CR*iK2t!m^=+qd7f_0pRm1r+h0&t*7x|CJjSt%o8A
z{~Ssb5MNw3d-JvpSHDb`&t6o$Wbr8V*n6M9y6U04_V-LZ{K2RD)sZvjS4^7ov3}RP
zn^yAEtUJ~c$H&kQuKJpk7kDpLPaI!&53N*An6JCXc-<i~efqz?Zk*`Fz99tfmg5NV
zU_4r!2Ni$nb@v&;F|Q;+AR5N|jXLu+>?gQa?M$pB+8co)gkD5jCL-Fh6NdZ{kzO-%
z*tVS3zw`f0Io@BMyyKt4yEl6q)~kucia1StT~8e-Q;M$)ocIN>e%26qsQ;!^PCe0Y
zc;6c*9MbU<;vifN>A}zJ>Hkc3@Re8Tul&8wloS2%v_B!+StdVor<#cUqd)EsGvRGQ
zo&_&4(4_$@k|4$Gn`!JP>Qg)8Yw$72hFXPy2DLC63$%Hq45Pw1@d8K_l9B>_I*`3h
zKQlfHAIsOxjKbH=gvq$~cw>#%^#m|J(0C=qw$YFEw%PIBqar!OXX)>rNNpi4RQ}dh
z7;!<HkNY1GLJZw99wqmnaFXdw*KZya&_PfP#1gs&Ayw~<x+eN}9wm0m_|H911z9kW
zjck0FjXVQOg;~3`uc+af$a6>SJc1D&q&z5Pc&6dapD}|?8EF<Pl!!<356a#+{U2n0
zm;*mBQ-0vb;$Eo4FL1*|v0HxC!0o5#veWp<r+ruIpS=ver4>AkM3Pu<w7=ACv~+PY
zsm&~HYtkqRm#v>OZ~gkYbJw%%sq5BGtD3fI)iiyq5G=O|2#ys#CfOv$g0$Zl_!R5v
zdhHAV%q9fpzVSL`^o6e@9^-ZRdiEd8;&~GkM)3_erRF=}A2lP7sHBV3h8U*f@;#)G
z^dV(r6vpK%Ae@hauy7SLQVyy%(oU(W^d@0MAz?~206~!<R4ok;H}^A?grMc-6?*v4
z0sVUQbmJd+iOxj+c&A{w*5<?#Xx2;3Rh^V(zcv3qy9W|j)I(bbE%LY*58C$7o~?tI
zxU&}z*#3|&@2;!1@7c5U>bu#FzMXq@_IB;o6JGH@IzQUmt;E}_YquUhZlSMifoW?W
z>YSh7`JuH#*X=2mbxQZFW9!yF{Ls3gYxnF~+jy)?+2Ec-yOaP&K)An^br~9XM87N<
zKD=aTNm*IR`Tq{)mkcJR=KoG;VviA(q<d32BMjm67w&s@8)EA1E+~Woi2m__I0K0X
zXtr1gm)qfT6ECxqChPB$?R6;>^!K5lzY&GNI}w7|R6CO!7C69VXFwrQoH=mzEPG6>
zu!|KS3zgzC9b_(>rQ{+w?h#5LC$Cuc+@09=xu)@y<kJqULe7IQ5`{{oNYb<DHD*<X
z5~gEcF`8yn*`cN3;o(u?QL(s$v^WI2A_~gsfdXdpF#6@ZdB;T_hj%|cu71WYd*Fcw
zR?+#sLy$|wyT}2cn^_m-DPz6jTgQN3RkK{-fpP=>U%+3A(q-3+eE3WLx=isM`2Y$s
zvK9_nd*y$<J@fn6-cuf4>FvMc7NNq^)5hjz``%|x?1w>w@P)FCZOC|URV%QD$<eWf
zX<^nH0vx5K!a<7wRngSSNKmBX!2x54VPTeXVzI<Yqnec&XhS568x<h%=*Ap*9DX5p
z3a^n)#99{WKnHm>^WYcG^B{o(1ybY}P0Y%I$0ANPri689ckk`|wwu^bN8bOQQ}Nlj
ze*H&qm?m~}sDUGNz@oO>#I{qBS4thNrF&+-{o~2U)tc(1vuDfS^cZO`$rpOsj4gIV
zo*gzJ+=D?<g=(~SB!m-A!jW%6K=Z?cBfyBos;W|kDxbQZ6Rog-0WD1dlF~7yV}1w8
z-*26jiRxO(iE**vMi??C%1{T7BQ3&*-M0Tn-B$oqnRE?5XP%(Do9mU3khlV(bg85l
zu@D56M#WCVZZXzC7rPtm+E#Y$cEc`g-PM)dSLF`>%=6sKa((sh|Np*^j_1ytbLN~g
zXU?4X_b#<G4ipW-;D{gMzAIJBXn;^)-x0%ykLb&u`{tW=KF+?5b^*EVt2V4z!`I@b
zvsdwZd_p|rSUcCK5@+<wo;(fzeNOdTWH2vWF)`V^A9<bwJxx#D=j>gv?@(G)vNP!F
zxPYLmE9xr*Tns@|A84jrZv)_1kP5l!>Pmg(T6RB`R@O}}b=;K-U|6+4gb|lj{M0tt
zW%Qk0i8E%7=}@My3LO{GfG>YR-oW>5*l^O_V`%$PGhrvrfSpjUJ8iz1*#i?(Fn*}J
zV%Z9#SKwr7Qg3RpdXCA8Wi;QD>SsQm;NwIv3T46>qbU9GjzMibT=iMblgNU#IyX-%
zr9lGpBUP%<QnOTfqREI`F}HHn%6ap?<j|4efWV+&g?|vpw=G+`dCRh;TYrcQ>lhUh
z(?0&U`Kr+QoTpG)wS98R<eke03T+~lL;<EncsBkqdB^rCDU)~XoFppA$RuSb`%}_~
z`I25~+w_t>PT+T7JQ>{sZZ0MWd3qBGBiHzZj6w8<Ujr8s@BCRcxMH_Zq~e>fDj-i0
zobP+8X4$tlzRevG)yCP)Q;6?kjM!IKSzX;@dU{ZG>D94SUJLQb0qw?*WtBbwVLdbO
zT?pOSgVK<&hVD1~cZBQBXjMN-L%FMirICObN<*^mYi~gcExNH{xrvtbj-`GUx>Hq0
zQG#m5SF2Zl{ne^9U)S{Np5Ci>w~U^5R^nT#{emW34<!raE)f<iL8(iQ9a}PT>5(H#
zyB8LAAK9&_s2fBQceXQo6&l|+*KzRymKXbqB(saTG_jwB4WXU2xh|z0NY$5Vd<c0r
zlS?&m$N}-ZP~2s(FnP^rVa%74vEihJ6)>OM1-Kr(0RMuV@G>Y-J%If<74{a3Ym-L$
zP$Y7xG@F2oZ*MJ*?<R4#Iwe?UCf%I_)w43<;AYSD{3_=<J`b^{E`Y0w38_rUIocC1
zOswpH9E0cf4e1D7p4^8teEP8;J{%Mp7QuQ&hvMhp+%BBjIs=*-ghBjXYU>XmwhEkN
z?9dGIeKeR;n*}bgv}gCOC>uQhqz@d}8zWv<muh8T1zzpbc4s&p+A5D0eWAg<qQ_6u
z9ZC?I(>F-C%KzlkR^;jb*<pK=u=>{I&C8b-_mz87ymFcvba?(didPQB>ojAEmWX(r
zk?;~rm^nnbwgq7Q3=slNL$pW*(l_!21AQORHPBHb7^Ph#UJnFA;EV(=i`Z}a21fcV
zd!^A5n#N*wFEPf%t;$GOME(DG94j);|2ZgxT&)oF&Fa-7y=!t}LR^RTEjzmD3gC^r
zP3+a@mOMhoAijpuF^|&mETfC&Q#vA6q9f-*z8gik$N`wvfIt8NnFG(Y^CV<!MaU>?
zLB<GU&=EL6hbE2kJlB^-80#RRj~?)bz#8#vOC&U@0@_6UKOBXU@c$GHLO=(AZpxIT
zPVv!^9Yg(m!4+J|y)UWyYi=SF`LBe?)t3_8N+{jVGj0;yAWhAGv@p%yC`W2*nE^+3
zGa^?eAn?YbTmgBD{!b=cmR3}_5ED%NEQNx=STZuAryQ&VhU!613@i|Jm3RY3JR=?!
zRBdbe`@<y&g=}2+{4u_X?{%H;$GYCycd>M_d}`+KQ4<9r1P9`cBbyj}4D2pG08?L2
ze#=?!4+qaJ@8=z|YRZrmQm-Ceevf!&753>PAoEh)D<hxuR%cK3W7U+$)%+BmaenX4
zpLrj|Uzc(${P3UL8S*+)@;VcJ@D!6dzzQU@5P&!!x7{&RHNsu&jM^C9{*Z@4RX=g#
zNZ(LZl}xo@K3-IX&Z6U0WUNJ~H+zK*|Hpn8@1?Iae#6F~-VgsdTlZAMDRA@|Qab|_
zAZN+mfQ-F_R^ak0?)&uX+fV_dw;E^tzALh(FJ_ruBxn9Dm#RJk>K_X5k~^9pmW&}*
z1@_Q#O-l8GWs>P_rB$t6O?jQS_`$0c_Y#xuRlUOX;P7I_z2wCEU%mh*d~;OUq)o;~
zTP6${{eH)YVdYzm%{ERf8;Rf<zFIqHZVmW63w{c1cg~ox6JLHhXXn#&=k9N}RaS0$
z+uga_lbzCeziBN_LPrH(#*yG^O4o${s9<ey3xmuIcAeVq8S7?Z6KEG2b@>~&B!4@5
zFQ-n)p5LBV$L?^~57rsz|H2E(E+5<pzl~&`aj_grJB<>4Q@Gn15`Lq}EWy?`)-7yV
z5@)7Euf{(6pNW3u(Fxf-60>5X%Ki2I%cEkm5_@DPM3?(ne)d1?ptw|U^>TMfiN6+~
z;^OY*3aN3wed2G@x{qi2vmdz4j0K^Exh`FI1qpbQkxviWi8@3^K5f{<J@~>9Sf{!>
zWoXtZ=sW~>M(qa=W$)IXu74J{nSA{*j_8oCOlx*8S3z}1*VarSu?no2yHQN&m!Jc)
zo9?L25Na6c>2Roxx2UTJk>{^+bLsPg=<}`&&oq4Qc|zCLghy$=Ii4{g|1r{KMLCuM
z&}w+Jke>zR*~MT3L-9iV6fZ<|2P_23eFw=GzE<U-YJ+}(ALHV12i!4EjlZ(V5JrP3
zqet-9Wx=zh3vP7xXyW&~w!HX8=hRM>+0*Ist!VrO;T;)`xuItQePB>?z&?$0(s=5v
zV|8_C5|NT^**-+<<teiuZ*FqxVYVO#04;vA`Z$@R)w*~0Q<vv?bs3$KpHHGeRr@RP
z5|Y}qk{xs|@$4-Zr$^SdS-lh0Wy{y9a;5L;x;@zhRyh+L6+!nqn*SsA=ws<|Su6&{
zFk&o=wRFLzl=^q*syk$u%f+IEwEP{Yp(E$97L}aawWg3O)PG@jh761xI_!@>D0H)C
zf$*xw*0P<IsvjzOA4B6IgZ$2EfIH{++jAGE_cukGHHRU5Qh|r*n(@0CBeC05M<$wh
zF;a*#ESu@a<TJ&DSB4U~s$ixtGnhHdeC7*g8SN0ibn&7Em2+p$oIZ8(#PU(Yhm{R3
zEh#J*&_AbdW`;72q>;yjhjj>Ycd;|pL)L^@w9YrYc*@jd#+i9owm1t}@zQT{9YInG
zav*0>A{zv2g&CO1h{wV$h-M{%LR}Rr2!e>*s6Si&Y@yEMmGkN&AEljJi=Wx7$pr<I
zCKcsR0@tkKV1G}aviz^sBu2(0CPqaiu}4EZ1A{Y=P~1mZlJ)My&=b7pPi6la1VJbG
z7Z6<5c%AoC1O-+=Dp;%ffR!o>ERp^{KYx`S9vapmyYcl<@lB^ynfQj{a>tL)9nyd7
z*#5t!CHp2AnM8ObC8=)w8lRdPKO`<KEw0)p*te~aqRdKzaUas4<LRM8Pvbhl1)N4~
z+cp9}*w%OuwRQLO-o_@55Z~Ulm!{zQxO#YcE^DlK-)Qx&Li$Fe)<|_tXO?b%hGm?^
zegIz7|J}yJjrczdImGau-g+!gyzbJ1(D-3RbLBCCI6UN53YPGn_<4%`wlTUfjx(|M
z?A&+T;#pf*_6O+b9o$jjmDcg}>C;IZhd541ZwzP*U@yE53b*%|nmVa!$`nD-E;1-E
z#W5taSD)>wWKO@5)9981TqWZoo-^HD4MpAZ&yD^+_xW<GfA>?M8NW0Y<(202!QXjW
z_ekGYt=hF@$r5P2y?a*QZri!aZ#Lx4^LANK6lqptQ52}`nsH5(gEu7GxuI)(bdTox
zhnydQ!Gy6SFpvV|0uuGHdPeFW3z7l3B-UYPZP_9wbzL(@;UHI?1`EL$-hN*|hb^c^
zU$Lq}$VV2^e)l)dfjvy5sN;Fje@8IV+VY4LsQUC?FgUW0yp^?|bC8>VU}U?wN%=$V
z&A-$&^mg#;q+o!VimPA?v%aMrVJ3qu_$IW*RmecZp^*ELwH59Y9OMKCxgE=(W;a7f
zi27t~K_?d_QSxcgzp-W@99_Nom<~GFMVXc~CnvuBTn{JrvDuxxmwGvP@U=qTq)B-~
zKv=jxm?oCS1-6!T85A4Pn#@_monc*c^vIm9WKKI%eQ{1L`StK{BXaH$L;^@dq(#+1
zxhbjXNr#ZmSL@au6#%E0b_(bDgczO8wHXn>*ZPNr`3nQe%LfQfgGhj~;9y(WH6gIQ
z5X>;*oTpd^VOaB8eG*R(TKbH&1mW1~HOF+|V3IN|c}N}FzMNn)prT@c5D*y|@B@FC
z_6^{kv);lfT6KYp=V-12bUYoo2l;SQgnWu%-sq>*Ykoptw|ZZ4N5849Y#s9xJGxc2
zvUcHK3xv^c{SwhP+RMo?A~&k7Gozm4rSJop!;Z{ht|!4P=gF=~K0H1mkQK7ug?~ps
zty%pO>S+`a#BmX!I+e@11o77%3iIX(<43Tzc7n4*S<jS^aGekaHC^W(vM+=RGQJTR
z-%w8*2VTyGDA*V1LRHmy1lAky>@By^UG5nL^<fU^^HNS3_na#grfbGf!>Hh;Q9xnC
z%3<&Zu#tvg{qCVVTL?gO5Lm+Fza%{8uySGl|6pxMTPzvti1_c<Z~RU`Cz4W<6HOnU
zX2FOo&ct==CJI4uaY5c!1j$aA&2@!pfn|8Y`y2qV=PXE;iG233wXI)qO~Bzdn?(41
z8S;oI!xogrrUF8qEvg`s2wSm;CM)+<!Z-+nvE6V)f)^g`)d@$!GgY}zW5ix+^f#_q
zZ#rg->3aAB`ieF-v4FTLu2S8@Q2&tJ$;#4zVO!{^Pc;$oXjV{FzrHTYoiK%TAxsl9
zD&HtObyB|Bm7byOzKg5eu%_FTR<;ZKZ`h*NO8xQgk<p#I9E}W%4;S$t(DXYO%B^CY
z=sAW3N>A;G1DRIvA{T^&55Lsor(je6+Xn&RM~0cbiiZp>%266ZrEu~hSU=zN5*#l6
zDCB0ZnZ0?&s-BWhiQ>7O;Aza*68f2%(6gGRf20OI-b~|OLyPW#JHCET^`(f^mi&r}
ze6A9|y?pr!{!2pTj>><*kSk>iq`Y-bLB_V!=s|@v9*x+QF7D{*DwYhzX52NvN8t<(
zf=&i^q=E3t=}pWL{B$~Ar5>v@8Ow~GAvo}CSrCA_aHR}&j=y7wH^E)(O0>0lm<3<p
z7gvb4j%lXr7(!Q9GL9ai_Gb&SavzhG7z{FQOl-sP-|;n&KYR#a2)N#`uz&IRX~TQ=
zcfJmIT~Z;~-8*_0?2qpk(vw%0ADgho*6P6b>b(7>T&1{%W+D%3_gwxcBR7_myM-&X
z?(#}8K??iQEr-2D<8PjWn8=_qrW=k*CGBR6GzVHu=Ah?Doqy(N9<jPwGluk9^hVPw
z{Uw)3UT39Q8_*;vGzXzm`f`cY?~Y&jmw>>rZ<m-JwA)`L8S1-3H%=TD(v|(vQIvFk
zruAE{aFx;-?;kkC#_3j?l=bE`Zy%%>(Q9WcG8_39*p#SVgl#Svp*p9=^>1)As3kcu
zwYZy2O^rU7V-4VHKCltxU7M#UJvHnkg=u*k-lne-$>#C}UdU)(FHDx!L|p&>QLDTx
z0d%08F36ctVyiq-6oAe!2D-EDn~BPSsx3MW*g#`uXy)SQleuijT&zgr&$y=f`77~F
z+(FP(5r-cI5?W0u-58B7Aj~vdFYORCioWJNvVIc@9~&_aL~d<N^$?QI{~BIqtlYGW
zZ*C&K`SdBi0j-}tAu@ckVqn?$^0I*w;E#HIA6y>pd;re){sWk}e%+*9lQwRgB-u!r
zP2SvgGLMDm%W<+c;ibKv6w)G+^ZD6E=Ja^>HGb(7>iEx`w<ZoO8&^JfU<Ld!@qGOH
zMQ1tT<B2D45GMx49`9urv$3K-MqnsE$+YvsW%l5#oeqxgv$5I<;B*ZLon!=l4>FFU
zE{I1Gns26kw@2bfTjXGfHX6b?6Y9^uyK?g{o@mo<eS0f2D}T9+|GN1MzY!4FqoD)x
zav&zSv!l<Nb&G%aajVcdHAc}P&dFze^~$e*+$m%vM63Ngo7DWOL-6?b)_<Gs8h%4t
z{~aZ*|0-$gKNoSe@6pzOz&JI%<h|5#Wuf7rX89C3R|GpqO6c#sa`ccPBZ!z*RN#j%
zUg8I&gNR%d+1rIB#YL!<C=R#JKCC}Of0kszg}|s%>sCWTBTXe&D!Q67vi7+rbp@R>
zx$t2)UXM@Ub;IBTd&@#K*j<LIENW{_8x`z1(^^f<Iw4r%dyNl{l@Y;GSH8ATi0|ZQ
zAvp69et1CGgCEpq!uv7V!hzR&g}$TVJ$uWj(I0J9^<pm?ks{WrztKfi5aMh^UE@UH
zJxa!Rpfusdy}&{m+9pI&Hx|<7PxpSOId5LggZF_`rujqTyjQR1U_mi+h5~an)-V&s
z+0<^(zj{@FL#+*-fyY|ctk=JFOMksY7aOt1qogB^1c@$cg$C*)f=C;yggL_8PJrj*
zUulvFzC9l>d&?M~1`;t>Yo)q$RxF`_T3bo<Nh9MLl5veRysZcVF%w8~H>RO5OtP`r
zC93Zs%kcI%wjE)Gk&Qp9br@nw$sX4J-(_E71L`8+G}5T%6s|pf``b<Y7W8jk2P1s5
zI5V@jIIDLNRG)bA<OK9Q{^ZGV$SNz#!dr97%5v0wP|-m$hv=t~XiQGdZj^Des&~U>
zDMRhlBUz)r*grRgVb}xYdCI3IYMg>U5v{FbLs9Gt+oEH`qm$BUm)kezfBda-!+Hcd
zc1Lc*h`3V!j_KK*h0VWyvtz>1DOExR-YBg{=ceD;8)ObIGKZZJc>XW7)wM|KlpG(Q
zK__fDeCbVYMs6YgaOn_!&l6$JN$HZA-t8>fA0HEx8W}7sKe%&k*Xi!9<_uVOsCJtW
zoYbv@GT}Hq+dae!;5@UEG12IBw~zCU&bP=eTG=w0s2PX1+;v7qUhkqO@)QlzrI3p-
zyJ=vi?piksLM#@(v2!noIC$ali_`cug*Lxi&t6%|_;fS;z7z7YxZ}gtys>fwbb9~Z
z%Ujk9rX3Udb?chb#?c5ZO~KbBp2;UXV?t<W&$ttwadogzpSLw-SZvfMe@;~CrVOpa
ztvRcrij;}reu{#K(y1)#H6``%Y5d{hIs7kZb10_29V+RO*t09Q%FgzhrA1{G@8MUs
zZO<*>ZZ82Fkg3M|xK)&AcS`Fe;ZLh?jiUA@l_}BhEg&me1m8SF6ajYBj)nN<jdJ`g
z$$V?a?!JNVHy%0i4yKKv`jBPP2_D7-4;x0#_z}C@$KBQ5QkUB0EtXyrcS%uFyP!m}
zvMqmpUeu?g95<Y~gr83uoI9}T#Mgi0rlKU}kfF+?LU~45Y*uz`ST{DS`!o;F1=;Hl
z9a^8Y(9>gD_Z3^WstO{N%E-vHG~^Q$9UT;skRa9HB5QkDq_GE~vCP4O`k~z@Q%Io{
zR5Te)g=4}m7SzJjfCMknhkBKS*4+c){PzI(&8ei#iT>fE3PUpN3sO3D?|E)mkN8&d
zOSPNtH8Cgg_eWpa+g`FThgq#%y5v-pbW#>F>X;d*W_=i5V;{-nRBoaA@<dRgQEP0Z
z{=(=QdB&dFYT`4pAh%{=m1_wrx~5tL!C`X0fROg5kg#XT!d0c^gAim^HwMPG@dyg@
z6H1m%8I?YvFk29HTT=si!uotlM&;Tvs&zV)k~HT>bZp;V(f%Y7YG+jK=@i~6Y2S)P
zUkT`BWLW#SgqR`lTR>ZPg^!DnKYsM!kUn;{IdMbECkz$5{QP|agQqi69}?D%l@WW`
zl&k^CZsU+=i+CsMLn8hhv_C)p3NA2$Emv^%MS;M%YVO<$WR0*60HU$4SxpVBK*n*Q
zd@7wk$uXmathz^{mZCbo9g^c^W)4Zd)2p`bTzp)BQ(eNNqhs2IMjAsVDUr6`)Edy-
z@e`K}AIckew+#yp?c``B$>tz3mksNq;hT?T(@NdJtl3>kWz$MCIXnp&5ZKB?>7Uro
zEiY{5yl<)&|M2rfpIA#}XjoJ<>tk+OWo+6rsg0BCj1l8k?3wq~f*KraYiZW0Pgr13
z7^99%L)8RVLxQV;B$HBMXmffUfvP7KUtZZ04@EuD^yS~}o;YzA7^JQwvY1QYwq|`k
zFN+l5ma@oxMi!AOIVvgh`^76xWu?WZ9$hed-;tEy@bvVEkR<zXpTO9-K<{wWwL>2V
z#{rQ;CQKL-k>_Zi)uDL!a2({_zP-1%LID+S-d^tRer?4bUxWu6Sf9_!p(c3blXCb)
zc!sOeYySF!3l`U%SspY@(b_8`)i=U4xqWbC^um<zwoXn<CJd|IH}}evjb>)c&5Xg&
z(bhR3yK`W0{6Fg%K<3xppS8T*9$MBi8*pOvn&UsLSzUJ}B{n7{IW9IC6kqJz`Nh#i
zyLT^wq+Y#}j-__*p2`3-6D?)qSpSdi7UO7ID_UAD)o&lqWuPO%VOrCcaU$ztZ)vQ{
zioOel4Nv?!6a<X`w%}nnf)ReV8_gWqBV+jRj2<J0Dm>f*0^B?l!eQYj{!wa4Nov=E
z!ZeS701pp^Lc(<zSB6gWzo_qsjP*F6xLPQzSh-tsKsU@PyYeUtKg&$%<|W_7&4O?%
z{C%HZ^E@(Kv!i;dY4)5`@^v54OuR3qSs_Gmntf!`DDm6+NBB=LcvKI@_-09desM`b
zUNH*6ckneJbb)Aa1z&sx-*w)-b}i}CS-W<vbk|Fh@c3FS+eRkYHk+!63ob}BZrFS0
z+kJ4-_zj{MhKu0qv~;GHfy1bi?Z8IHMKn6YF9kgY^vN&A4-pSW5AOji+JaRG<$Vk9
zMy`v`8aaEIPzPquj!(OD0N3+U4Fy7j4rC6hJME3>+G-`dQN!-D1`f>GNG@Xfrw^e9
z4w#>L2&Q98#!bT4>(Ag@JOYO?S%sto@J2RcP`_R!xv9dA+rOU7+2QZKcht%HUrq=a
zgNEb|FO~Sm2PcYgMt)2<lS23>Av!eB%ZBogoVw;U75c?YhCuBtSNf{Hr;>dX|EqbG
z8fGqWnv)B$BxD^N3=Cqz=N>+Tuf2JIah}rFwqsy!39wgvyL-S0Roej>%Kih=yY=sG
z>uq7@G_YXol$a!TtyjNb>s6OI!N|$X%XQ_#nfKR@=sv;SCc-l+r**)(e%2e#8tCB#
z(S7<vTgUe59i#GPIkPbL_DS8_wQVo*9PM+_gYbdA#JdK1n!SRCm3x5N^}l!HMtoCM
zV~n!ELsbcBf(>%Mk552Y4O`bZ7?~qax^{iZ+WC>OwD${^?iZvq2>N&1t~`VFRUP;A
z92S51k?Pe+e4j^PH>h`EzoLSS-WF&&>-`MZI(q<%8=qXp&u)Cj8}}QuXk^9mh#(4k
zF_|xmulwAdVWTdlVyO`ztvv(nNuQh0F1jdg`Z|FPSl0LWZT#xDNBA}*9#al;nNXBD
zXfR*r;{3C<?N7D5q62>Z%T0VALct0g!5Pw3e(ikw?K-+?<k)2*9eWU1N(jH0i}wMJ
zR-){>X{B2e*RO>Pw89S9w4ilm7wYRT4O|su3ovjvZo+0cr33Qxbn^R`^xv47qsgPr
z&D^ZIuX+eg3pQ<@96o3Nw_i#!8A)PCuXCyYb7y-|+iA}B-}bHe_W1L<3k^KN_36rl
z^d6H>{qW)3uO9>ihHPn1We@Q3PjK*9F>T)QAC?Hw>GACXqU}7ZXMJ(x=3Jp?YLtj~
zBEh?>m`CPI@b-|~Qr`%1AbK=!GYU29yQxhdGXf0B`lm#YKtq2Rn)B_J=B_!`@O){v
zuAS5HW2A%6AAbXEk!nNCK<A}>b2>YOI)x?fS-PgCM{1Awa1dtyRCf?Z+j(0W)f^A?
z-j@{{93#@BD}jgQQbpgEu?~2C+(q}Ja`dQkYBuPxT+>&7;t#;TKG{HP(q}10<m71e
z%_Sx2Gs^bQcV4uI0a}BOtK;iLK6kJb<78M(ww_k=NGX?(v*GG)#kvnmURJYtY2t)d
zF~5pUBH!V|kOX==z&w*(2>P-%*EZo>Td%q~tMIp^Eo3_AgADW_gS3KF&v}c?DQouG
zYRy2pHfljY)5f@4vG~<x+<<qJd33gcWv0ysrE78gqP;s76pWW$goa(oqac~g;Saiy
zGI#(!|JcFx!UlYP(?z-6BeQdKUK+==hRmzQU#(k<+Ku~+??|$3#*JQzRroImc<~y1
zssCu^xRH}*Z+-m^|N7=7UQPA!n)zcUKzT-iZ_@dF`yMnM6Y?h%DHC&oVsGv{_G`l}
zVanM4nwo#MpV${=YW!V4-WPdWyc@s9Z*VQ7ff1NM2EMg@*^*70moD3iy5m3b2Ivch
zAb<f)lEDpV`}OPF@xOLmzrIUD>nmiwmiG=VCL<1VEn0IIkP&`_vACj9zz~8uTOj<<
zaPoqwU#_1sW1J!UF8q#P|Ffj{b%U^EDP8X^*A^^gTCT6_C)U@M`*=z-?d44XhM;L_
zh44$uDbr?b6xa7C+|gQJ{Hri#s%CY8F*~B^v&7c(wJq#kgjkXYU@qFdZ2h&Bt|s`V
zvFq7Asy^&D+y(p!yWzd$o;e!X-MhzVVzIbfzV3hSJWBcIbLUYma%}OKx%k1O$N2u7
zv8AIy@3-H;0ON|hyz%1-^U7Nl_U@gRpV>Q~YddIL+rR@OPyhDY>5&Hm{I(AI;o7yv
zz5Pdx>Yq1!1iIg=v^cX*X({2I1Ogka5A<m}7>OD|r1B^2;Kt#L0%oS3c?y=-?tnEu
z^*VW7e5>e*6FU!-4ax0QmVai)n$8hXpm+Z|$nZJ*3~$AM<BKlNSL|%yS+MVnwVOAN
zDqo?lRl*$-{fqVl4qJ2SzL**_+^28%&)x<j{O9ef8h`lJ?9zc*SGmf2HMMuwHv7WA
zE9l&%M2tb@=CHPWt(aFue-?;;hLP?K+t9o#^&1k%deP^n0!D|>9r`@|nLKa8{C9I6
zX<R(R@QGrsh6{~EGBqKi(GrL}iqQd<1H{veM?qk^=}L*`v~Q1;A}6*ucd)jkH3`K^
zOJ-oE*Ia2yMzNP_ZG*h|qK*87>cIdq@n+nh8d`n)cr{x3^Y^Rv?p^i$&wMT3fg4`q
zw|G~LGn}o4-6RVADeiQ2$DiA-;{5-D@B)qb=dJ#~_W)0+ymW~K`=2`XsUF~qtJ9oo
z@q_Bx&-DQJBrta%G`6AfUdAL7nB!PzE`})(8WTz*+7=H$PpPlz#%#oCN?{UUTb9C<
znQ29PnNf!r-+>eqetY2py%0Qo8aEiyDxKvU@Z4%_EJF0A8b)q_X%rsR^c<b%V;L7(
zPrwv-4q^;IpV2ST0VGJE=!)rRdYTGxnkHj351X#Km^?!vqWLo-;pnGUK9DAj#tdG4
z^UbA8Ez*BZogxW9u_V*yzqR)k0CpWmqG(m0hI7t^nL9Igm>I+@S+=f5mTg&%V_Bxr
z$g)hzSb9;iUvV7fEQS-4Mz*A6qc~{2WyrF#kSv6mnd6Xyy7RkEAG$qfW@Nwk?T6=p
z>D;2O?yjmXxPSJ?ajDNwX73MbeQ4i}0f>9mIOQLX0UL$^08}uEoA5T+TG>nzlxXH1
z3*aF5OgQ&=3OF$2X6$j)*0F)ar~h#KCt}$B7VKmADcrvhY)R17dBfgl!9I=+xQjZ*
zb+ncp>Bbn?B)HPmGN(ZlF|sTq4GjhhWlbmYnX>Slg74!&nm=1c&+S2}x)EfIjZcoE
zTZz%Qpros&$+ZPfPG_MV9@M=&3}Rm+j`0>Oyfg5(cq3_chU|jA><g|;X9uZJj3LF_
z-4>1q@oxM(>gtibKAtPRY2pc7mC1{)a2w3x<@2?8@FRFX4#RzwTndj#hhGO$>19%`
z(re{$&j>LGZZ1LSd9c^V6xxo;rtF{j>7V(2(+>LWo;1Z%m6D$RIW{yf80lDkfOKqK
zbuIsrcpuTdj_4i=<Z~B(cCHE!Rf@fcq7gmTk1lsY(zgPjgW$}BJr;m@9y<UoSKK`a
zh~Y3qI(JOJg}9Sio75~^IREF!yhG>rd*Y+7uWwb~s-{xg&;Xqpxqy#NG+*EB@lC|X
zh}q-t1-y+a{PH;_IrRoc7WQ1AHnT|ODxSvdxl^D3n1ZRO5m3-`*SXph8??8PVhz#%
z(R#=D`Yn9A<tFZ50-p;WcfBWuZ=;3pIQ%8<f_;_iJKLHa*H5rIli<7lVGmvI9<~Tr
z46(j|+Z#gEBw0vs7cAT}a68^e9W55-HAl6xOG~$_v!lJOHRd=U?%lZ`0kAiyF~SRk
zcfzdc+#lhsFjg7P=X{NeqZ>?zcYpzz7NqlF&bg*?1MfDlU?Tu~v+5&Q8xvT^;A)(n
z4~r2rXCYW~Uk70Ssy0}39iMv@UPhJ5jr9eG@f1Wx-Cg)$2N|%#X`s64Y=h{TAejFO
z!2U($EtoTNn{YoYuZ-8wN7p;r+-kvT8mU-6S~KaYsd&v+nKK=S@F1;O8!9<~T=XO3
z+F78%P9Ak1%>(0;%TQK80+qi`g96SJpLQKa1vqGW3m}e<jtuo`ZNXM-(NB?HSBQ6q
z_8X6wHQPaWSBH1)I=yD2l_3ydilx(id7`G84UIH(RI?Dn>9gP*!;j%~0EdG>F3uOu
z1`Ez{Eb6sdS6MyK+vRYHG*^_SH*w^Lvq3gA5lq#Wz`VhNc?!ObH_;6GE>v;^xfn*|
z&g3dfn5c!BiK1_)Z-{WX{Rxh|g<}T(3is1wA%#NX!jhyTK7lo&VSUe>jUxnWW4I<y
z!`onUWkXvl)e1Pw1;oi{fus`*r2uMoXeyl%`}BfiC$<ljhm~3H2zI{(`xtX^|9seH
z(H<x4jTY?VxE*(qoXy&$FtGG8sthE$!-Ouu57D??iEIiMjv4qK-bh`AYUodd?q&cV
z)J{WhPs|1F2n~M_Ks?pRXOQ4u5bE*2;C`CP+vEikHvr9qMM+K3%-A0`6N$?~#AsYp
zLrJ^Kjk1?u2XVmd;_C$aa)P}hyz^$E7d}?0YemLKQK|vXKsw<F%{6rEGAHQmr6j6p
za9wW?cwUh(gk3IkNDi7W7(h9mtGO!vWq4!85ElB~6F^2~eQm=-i0js_UZu^ImBTA>
zP>Z&4U~o9EPfAGm{=CKaG29BR)Um<h+onOIclT&Q@(a>%e)xY}gI~h&I|bZPIixG&
z9oMg+f!YbUKKETdGmjYGPs<`7(2+~gL1Ww3thOjA^d##q%N8A{_H@GYE6-VlIe!bf
z-e%-(4K;Fd2l|x^srY*hHLjc63%OicK81j;e2T8^dKxg1W>HqGmC?Uhw9WLj(Ny~-
zR>((ElN@^9;xug3VVkwO<HVvg$UT;xJP1FB=hI3pM1>C?_r2*@GGT#j^P;p|a&hIN
zEt{5*hn%gY1wR76p8E>?cID-omRy<^&-Go;pMiXV^ZY?zIVVTsVUZfnr#2JpEe15~
zfI=ZyzMvjBB(g3bvX~;0s;Y_14CSsTLh0VAu5}*cSH}0w&d?v&F;|5@uM`_mI1&N-
z&}ET7a3OGk!n6w%2#0(m@8bZtOfmOh)Pb5dndb$^rR5M@l<|83-l6jZFjeX9?PW;A
zLsu-PW*qH$2t}#RcQwc!){}3a2<;N*=i(bNUzY~@IQiT@xT^A$CUjUC!7<G=9T7yR
z)SjSn&O^>q9r-A1MdEC0Wx;jQ)!EwH*4v;DZ%<(hYw<O@1m72G@X;C74sF>OiK9K#
zl<Em!jPd=%;_vug3HvKkBZGa8bR(S3q(bSUD{&@9?z+VtzJ=FI@Q#h@7AO5S=3EW0
z@3(NzKs#Jl**l+87fHBY&_FO};q()n)K-P=R2yqP;8&4vAihaB72*7Sv!4IbPu9He
z(c(*E%d?=fXix%K7hCg<WX%)pmjJLo7hfbemn3kGJ+0k_6AwDggfsUm0QNcYQ-T8t
zoa3hzS(&9`&S5-;#wHzP95^-F<-C@%hH_)z5)jPK0kF@C57fXUpWrFbK|Vo>I*yE)
z{%AGykx$T=_yoNG{4sN1^b)+QLc8@P&`F)rd(c&5DC8)DP~34G(0&<>cwy)<M@+6k
zRiS;c*Hn}W5gdzovv7z2(Xc8qWd|rITK32{r}t96)vVPv!n-H7Q~HC6%$x^v4U4e_
z+d@ZeG%z5x<^f_@U$kJ+-QOO-62kbG=MU?rHL&O&SFo|NF7gZnatV^d3`n^Ug|Tx0
z30&D?!9BI7n`SH}-T_43fe>=9fzEj#-E8Vp9zvS_4_J6+`Z{1mWkSZS?Xsa+K0=>{
z^?tKPeFW?JaE;yz{nWL$+|=l~lmps^j)pNwH17#$4yNxBT)2j#@s%i;OX5i2e$j$^
z3~z+?Ot?}8x{yCVxIeYv9*28CQ52e1PpDex&ZI=4Pzh?YsWK^VXdo1UfMXmVNaG;+
zPIgda*QQ({iG<F!4BAQ9hWaSx+FsqwPl^u_>~?}Z9m?ej$Wb?2Jt3pH5hXGY$*)P&
z+Cj#G?H%-nZ6m3)HV+MvN~hqyHw~9)UY#dz%z~Oy5gV?dm>|3TNqkd2X2nsD!hhk;
zClEs~C2{W9R{SH&Ry?`}m$v3(k799aKEq1P_auC&X^XEDSjKnKJ>A*NT$Kv3`yNxS
zs}7_B-x6H8Ka0t7xja~=?kk4Z+(68$Y_WJf@tmi@Z&i+NT+MvXavf}ji#ZnfPp)eW
zz6Gt)RjY{eWV*V=e_hCb^#-ZLS&RRZd<6ha6&*FaD`ed$u?Ll2f-<#$S@?lrM|4M&
zl%B|3v(D8U_*s5sns>s*J^=tvtK1ebzGKw@=O8zu3tP~0#XJ#YuQZ9o+Y6po@`5!d
z|0H|O*XcF*k{YvO-pBCY@m4xJOw60>)wUzm5|of?DvnXdvM+PGT7q!2+aKGTkBQG)
zcJwj45L#hR<;uv8W|Jx77w|x01tw;%i%FP)X-@ijYb{)l%&>&7i!8p5qrj_Z&V{i8
zBkr8|xk$*vHlvvgHZ&OygCi{A@yBT%>Hd7SpnW?$(5taUd>Wh6aiue3F-(?c!mC%q
z>*xp>ytUl=?Wr}~Z1MU4p2Qa}zJ>~@abxxxma^9H`!)O#j(S+L=o-ep!$NB~(7(hQ
zUTyI;3%|evv>#~=l}xRnl0qsm6NbNMT$BKggsCN$Fyc=tYyD;qH^Ow~23kKQ<Mks<
zj#SP}*a9<QO@lV~Uh(`^FOE-(WomaEpB@hRJcZZO`$=zCyCZlZ&m5p3>cQR31*dmS
zao9z&XH+z<KFS}cuV+Z{z0QvMw))n_lBcka6}{O16VH~dhF6X462gaXaOQ-fiEQKb
zbq=zzA`{rt&A2Exp+i&V=+H05Neba;IR{OAi)2amNc{dJAG6*_j>5BX=WpQssjbz1
z4>CU2A6q`x(R#MHKf9=RIXJMOKWq3?(-wax;Jx@xxUF(?R}1sK^z)PcYtQ$+0~WKs
zX4ZH2FUo9lbMsI$H4Et;jF>JA#6GTUwRk>p-3(DM+Rt1SySOpqd5;A<QA*>jEaY+a
z^^pYVVR6N>@v-4STMmU9Ijphd@Br?`XFrMS{DU;lgb%(4YoB=JVxg5L{;Icdnqghb
z-${HC_;e}+{EapH9(S+@U8fg4m)o2!%whVD9_$~sd9A*|`8j{8#p_88YYY5crHOc5
z*H?DH8Ak~ds3Z@A+G7#(nJlLbk}#G%oJb3lRM#&cs*dxAOo8im679<6qr(}ZO>}3s
zCEHneH(npT;d*X*6Zz<R?qTq__rLsxYxa(7?VZ_6o1*xTlBvz3BuW*BhxVD%{Rzj1
zR_Z(L2j&fKCE*?meYIcXWw5t$)!6U=<*}fH`uW7+0ueZmtrL`oi3o=YO%8ViKctaI
zFJ7FJyArx?<=}1$`)uyfeo(*h5BCtxUB)&!qDYI^u3GLWO{0Y2Atq!ia#2Eu*CTV}
zq>IV}Pr;0Nryv6pO{+>F%tcD<2mOEB*v0GD1<t=lJwRHV;&-3L?+KX0caUW?KFC~U
zu^T%UHm@#7B>y6d=YfHNH3Mt3gJC!imOAELwpqNNIC=-g-q)>Qp1T0+IiCgQm{P$e
z%`eIQ^5x67F5kLkQ{!+bgM6(FR$DT70Pn#&VOQmnTK1hun{5RW$x6#&yHqm#y8UT>
z#iKR+5-tJj=uFOJR#0EG;2mh`H7+$8?jqe<dG0v>fp}jnZ}<lM<LYZ@?v%~j$S{-J
zYz8IBBbnT_5pyP(l&s~wwY=dU;yApCX8o>O&Rn&?YJvh6lsmN)d!)cIdr9uVhWMNs
z5B-Q6@G`PNhx&UQ>2{lWNa!MTb+(a_SMNI9sYya3_K}Apk%VbBM-k3OJr1@(V+&)F
zKT}8InB?UK7yLH9kY<z-E(%661ceT!1Cm@bDAZwzWD){Ek$5uaQxu1!LxIAO#-5-1
zC;<Bhb%T{-acXV`Zz7+efP%LmbD9xYD&K-n_9CwU2b#|_9ZuVtPBJejEH@lvUJ#CN
z0kDtDmYSF?;dr5$-kH-l${I%#0t@4}grS=-I8LxO!Fym}yVt~W2}=^oo%;;c$;+Qw
zyd0g|g%_VsZcHhi&+;e$`+)e98kz~#0dN+Grq@tLG3FT7j{(@*)IN)@6LYV{chCgw
zrlJ;NLY$c!;Bf97h~}NAh%6KeorO+4wzS-!qIWbGfW6n8ZEg~0Kk<imP!y^muc61}
z8rV+qzM7_*CKI&h+BNV-0&a4Isy8?&&RRJ_Cvg;jqG!Dk-5x?SGHgMIIg<s7hQve@
zu4v%u&{!g47^&XCzARhgJcHdKY!85Ruip)nTp_d~$F^X!YaKz(c)y_2BG8YLFaee_
zX$8?A<V&r#=zjo)@Xp7p6R=VDdc7`^1w^oxv3~=A!<E+Fp1NY5U^&p7la7|UVi;!#
zwgWj&&Os?y0G@NahD9li9pKPr;xiflcB)d)fAkmn`Wwg0q8r)m<}Zn42a)WqU~dAT
zJ=NW1gy+(-2rLIvh!v9HTqMa!OhhL{kW<*k%{4;Oi{lyH`p)`<T1$AkNq)=1b8i-R
z>KFCKuJ#s(%ce$$addoS7_mDLrJXqZa5(W^nWq@W!egDr+*@DK#C!WQN^e9Y7q+bx
zo3Y&ANNFmxul}UEo82S65$~(}!kn{xbHAWGlD6hX#}V~)u7;`tf1RTvDA|6-ysTK!
zU1KhVdb8==8F7Eg=3gG(XOC2mlYDgo3<+2vl#pXbyN)3<RCLz&_tDKJ9eE`4sBdd*
zY}RLe{4Uaa?m_-nvNb;IpAzDEVf77kZ+0MK;47(F$RkHez;7rOH6nci_t=O4z;G2I
z>m+2Q20|9u+AmgpF;6SPe80<an*9BoFF2<SU_7<Zs^%boi+E2sS4#sMvE0;9!g{PP
zHEvK{;l0J~S2xGJTp7aOg|jeH84M30E1R%rzZ;V5-^O2@lKqNMCeN$R&ZE<eTaSr#
z_>qLtPztEU7SbsVo#)=do}QBVl?Faks`pYJU5ZW`pr(N%JCabUrP|;S9Fk`io$LyJ
zlFr6*6HzK{iE><=!1!I#nTTkFm`3~)p`fp#4Gp3)JhvFy!~wuU^uYtV)!sK_If{fj
zPSnwAGr{*|tanr6{PlKjv}h#wZ#nl5^zP^*bAYJi^hyv;A~Q;AU6QeV)o<ly9%J<;
zXU@vUG<kE3^5(1@Og&+xEzG}EDOqxgJJ-JP9>XKhN;l;EcirU8E$bz>p+p80ZDFIU
z(oM;DRj32JI-5y%S0||}2Yy6Yl=t_AbSFA+?ya2iPGY*_eQ-aWZ&`E?^fR#y1QSQ*
z)7?g7)4iC;d$%R;S-cRhr#!-*&NfGIi+UCZ9GN(*Eb{w$$;S>^&<Aw<wyrF>&%%As
zNOcB*%`E0~;b`d#5E5pTnKW&4V%xCq3Gg%%9!SY)?nWU=P6G&{U!&pk&{)uIImNlV
z@~2kL=~4IqUc6-PZYg?MkKd*L#Cn%Ly2eRf`xkzdo|n73&!Xo9mhc@kopP|7Nr98p
zeOpR#03>jfe19f+U0q$vx|Zqdl%RWksrPf)X3=@#Id@RzX9_w=j`QG+KAY+c@DS5~
zxkdkJY&1E%61l>REaoJl5xvjHw0ah;r=J(R^(&<JVS3KBGZd}~=(Au^?EQw+`LixO
zBW5*SS5|iS^)dkp8P|g*+v@}c->sUZX%NDMz~aYFhO1YtSiWqWBByOF4fQy{`YH4t
z=GZuwq;hPoG5Fx)&<<NF8w+8+2?KpbG87IWO!7Dwi*y!@16e8$7?m~m=V@_+I9tOD
zog3e(-n{@Xt5*fK1j-{d+^AY^HmtAZ#f^A5_crGeer1{$!Ux;T8Cc5)jnaZjM|*G#
z(sga~(nhQZ<J&~*vfEmhS@>7H9;PbS1yL(Gk0U<mqA3ajb-0Elua+fBBwe|pmMx#y
ziq}YbHGD~!b;@J`lI1J-{B@$pF9$AQ#^|2SAL$)&sLbq<o2jnd*km^oj`gA5-G$S^
zBw|ESM#j@`b{rj^_3p}fG=Qt2aeSb0+`QQt9L}f3mtq{(hB%s_gE(0jNBr;_VQE<i
z3naX3uy{ERXYn$6YhAr!!jW!-E&Hw2AkJp0p~>KjeG|jiV>Nt9IQ|ruUIA=u^wug|
zDQ0Y3u3OCH&q7G}bY0j<@rcFWU3mXo6%JIU4K9x_3-Um1G~Dxeoc|f~=VzvGPE1T}
znb@MMxeWeXf?xO8xT1z%!aw*#@wYrq{O68a{F`&-xz*Q@&5-EP$`y2+*b2+!k<5kd
zFj(}4FgPq84G#XeakOOPi1qYxYaM6d5AiyR<&own8DXk<PbMEd>pht;T{B;6A{~{!
zrK7Xko9QH83R8*|fapOv;mXD}dhRV$15LO_3D<^Dc5kcROSd<LIyeI)mq~8pVQF+A
zGdd6B#5gj7Qa*`xAYGFqvh3UgRMSlGml6Ey419Qh_4VXW6womSuG;3BSf_H-5gt@I
z3v&Q6=3HZD8in?5Yf$9e;PnRdS1+*WH~RfAAn7eApx=WAbQzl@@;xHoXtZI#Ck9MP
z^d4d(t<$9vVyU;JgV6d(swHNP(q97Js_Sju2shAd<<k|vfIe$S&tYMBV?)kx$k6xc
z9n*0g?_iqMJo>)jbw@NKu}$fS$HwG`$o!e}{w2MnwIQ~Rw&@&TDym6@R|w;urUqVJ
zZpm*JK9AQ?ETN^T<R}?x0gG=)p$<p7V5I2Ps6kt6vrfN_<>g26(t7<$x!cGKVqIWG
zaRKRq)&h{E5R8;s9X1N_ICR0(AWc~{NT;yN)as?{$x`)5JhQYct1@ZDGMdQQ*ORJD
zf;hiXwpjU%r~a>Qn(W(!t{OohHC9oZ>nJqh%uL{nyhq9ePUk%uUgcvJuScPZJ0Djq
zTB_1Y)$k+!#Ny}ZUT3ik*34|pIMXztSxs9spTLXpopiDVo<dC-nrFEr^B1M73z1xg
zas6=G-y1UG6C?4uw59nVd~iS9L2n`&pOSWJtLHK)gS7}&#pWvQ0}Teu`TY|KZ+Ba~
zJ&2Fs-;up!*Y7FG)imiGN|C8+YgaFy7#Uhf*Y?)%M0ncZg)mv!X0J~807&Vb!L87o
z!H*vPmZ4i}x5dk8yd<NRFLA!IxEL9xG&{SN&+y<`Je-DE$jk_)E6iLp3*;Kd8Noz*
z^*ZrAan_>!B!jssWsRq3U)80d3?pYFC@4e8B0v2)fJhrZ*(St8^#-w-Z?Skd=^O+|
zt%F9Qxe)pT6flBP@JXA49Z}kPN$OXKn*GuRpzbksn_Yxsa~MbeCGMj0lHx7WZ7vrJ
zK1y_wz7>w7z&JPvGlDaUjEAGl$&DyC>RlPi3PA1@KaFKI6~ccSD0=TD_^zLVPt|vh
z?^5oXL&0P6R>0wKD5!T+^hi_}p`ul9AXN0f+(4>^bE8$mc^m<EMcxsY^D8->bUA8N
z)R`*gB(|uUQ}xy4Zhynd2|o_6ocjgIjbcb#*5q(IL3sj`oXv#E`19lZl*Fx3#C#Mi
zK4#!uW`8VJi<*?arWv3F6XGEBy=ZRsNi`7X_ihb+uiNlOdh=)K2oD3O+(CyQH0hGD
zcjq`_k8AGZWPUbcV?%u%7O_}rAO(ng<r@H;&zP9P4TNidh^rIY$(Jl@Tq*-s;^h%G
z5TY)POm9iTQmWx+t;Np+xDoGKgr7LWG@Boi?t=V0YVq>``~cQv@?)i%X7f|Z;^zvB
zpILZ4-at2gxuMQcGUCcf8%?!H36(dWu@>FBsZ<}crmd%lFX`3rC1G|~nQl&lG2$)p
z32M+8Phf%dYBUU*b72xdoiXu+Ny7DFqZ7^*I1L9YH+CU1n%;*(2`xut4#R^WeOJhX
zkb^wr@_NyL`wk6r2UqwmMdqS8t3s%&sc5aBE*_w%w7O@7#%?;!nEb?Ddan9Irsi)K
z;eUm}&u)e`cyZ+gU7F7p<jzIN_}XQ|j;oe)rqR%nGR<xtnUBh4Y8r~g!X79T@;gd7
zrWxNWksPCXk5S1d)|mwVtrzG}7G8Gg&WkJCF4(bk$A)#QwyfSVJ~}km*VECaE!k2r
z?@C<BRyLUYv&-gAi)R}7Tt@W0G_FOThG$jkTbh_)y~u^H81UqA69JFVCS|lqg<yN>
zlxZ@lu+ih@Nc@#UUj^^g^eI?hPE~vzN?E2~-NRVq6?4b<F7X+n=?bFhcS4$aA<z&_
ziUds<3s%ep7pZ1W3dzZHWX=(A-CzfVxk?abxuoMZt%NPK5$399?obpz$A<_Xet7P#
zxjS?hz0UShy+UW~aer&(ZJ2LY)3<+azJ-^}JxH^uN-i?$31{X;iEq(&%jvtfhILkt
z!GMO@suxW;24?i_m#lA(;l0qYz_*WC-yVk#f=jeE&-+%kTHl_6cR`Q-cC>pw+<&k6
zR>I5+I%zt3M_Wrk1lJ$OaIdl8K8SnaMfCO9Kvzrjb&8G$Yrn^j;PrD~r-^|p^$!e_
z!oa_^x-OVaMKi(a`?rNY^O3o^U}k)d2QoJEpNx!m(06YSW&B7mtFEnCV*0x;S>GMQ
z+o2=lyT`2Wj)PuVnoZME``y2%zav>)-Wh01tA^(U-xX<glA*6i-@V(^uKp)cS6^@$
zGqNXm>~CZGqVJ9!?XUoPK!v})V*u={hCY^jcl;ruuBjM*H}_Ql_7y`PnD0zI=`}zU
zHkRr%OeeuDUX$cn;~#}O@}JP7p)Tv^hG#Pm$k2EjefP(qtp6*}(cZ4sk{|1m`Sw%R
zx5x0A(73?2-?zR!4qB%A+rjR6-^zOH+f(pLXwl!U8lDgLk@UB;M%OlxhU%PiA|ljh
zGXqC_JF;W(FGAja3WL<wvb%|75P$b&>$_uk4|HaH_cQCe<62f;pue@>{YUycqVf4%
z#Cd<OhUd_CW=@Q`Z(8WP_l9`)26O+~TZ$@u=KQI(FOR~jfoq5@^Uo34Zhd<KJ_3j5
zpE=r>cm{v9_3cUL9soK=`cmJTxpLwg*4`yrX}(jx*}L&~zqY<R4zGe@Ft4-ryPsL#
zJ%D7@YMIx<ll9hjvsCj;b1NfwW*(i1T~0)2y@c77&6<<$4s+5cd;CwWJ$`hWYiP8?
z<GoAY$@ZG>NRFrBaK_p4L+iT-a1*RgAkuf$gEZ65`tBsI3eKRh{u+4Fx4xT&H$Zcs
z6XADe9$iY#?+oR93W@}8z;{yL$zJQb6Yv&zCh2T{&39%!;_rx$Ex~#WCf}W#r8#)D
z-{BkZ_Udc(cjH6hcV>oN>dbwYp$~h(4fLRa(RU_y@pI;!g5>Nw^$I$rdYhB8?`Ht)
z!?bSkcP7X2cA%A`lh5F-17QDT)~zmqcjBFg?Xy|u3Krt^h~S;XbpV99Ere(0<i+b7
z!Fyo)`WUN$M|1IBBz_XbGx0qkzmp*Km))&q-6$@7lIGn-v0HpNl;6{<ZzQ?&l@h$X
zMSLR0d)C|?x0mQnD5dmN=Uud<_&96e!DH3?Nl%;7dX@2=?ic@prN4s*m^gP4*+B+#
zbiar%S@+8^{LA3(?QG-Gcjr#hEW4WTh~G~H{PuP7G(72B@Mhubf!=qu*WOp}vCjXa
zhtBDJZVrDZ`A#;}d`Ei!F1RK8u9D39_B6Z)f?H*Hz<eIrJ!S^6IkyMt`};!PuZ1=Z
zd-?cCUjZZ7gL-{vUUB+c;{Uqp{rcNA%WJ+RxYD)Y&ce%}Nq@UyBK57APba<@%j?hL
z`qXy1-^aQ<BQNvaPiwxT8c(IaS~X5zMf+hL&AYSU-G#dY+iYbmJn32RW)GM3SIblI
zR%^a(dz$#(AL^yCr$f72x;5Vs&u<K7!j>D{^qnf(th@IVyfc^`uzIBS?)@|CyQBL4
z5wx#s?{e8;eRl#r3`geQ`SM!py9e=VcrmS?Zrj~t)+GKmXMKAbJ_>a6j|>vj_}l9B
zG@sA<_9UJN<h^=4#BXNenRBIqzWb~2T$ut%{IusBma-*&V%ZXO@0#<csM6oPzvep$
zGn?8qg<aYoC@P1(GqdK5em#}G`<qa|RtEajP^XZkzI)XA?g3=5PJdUb{Z4x6??`X<
zmxIZ_^i{0a?&~5wgisIh&-gQfb9v`#qlZyHgIj9q-X*-f5$1I>P+Wywdxca>bTcq_
z%?$veQ{HCo8W@I=+lZ&PS3dy^&KR#cpDq;asMO`r<2jUGSok$%zFK3q4&~B)N>uyh
zVOH^1M`i8&exq`UexsCkZIvDpA2$NX{~>RU`4|uR_$(mBJ!$9;SI}KY$(gFA2!y1C
zB(1Ep;8K$*03mS&c=iLZ$5Qf|2=ROd80ATEWDc0*brUXT;2?7{Qr9)CZ|XOI7t32>
zSgV@?SaVMUpuAkr!1z-HE}FtdG+hTE{#f1=!?_@&>0@)}DEF+%qx3)&jDbi8d?{Tp
zY~2S|>%LOlx{u($4?w6CoqrnANiDJ0R94oZhD?{g1M(>f0fM4}rXXz(_lQ{Unukj*
zBaz<yrS8N1X?b^?8~C?CFyAq^e(uvmbA6q1fVqeeysx;9a;IoXOy*cV%n=7LNn=K>
zgCzNyKG9LH2uH$zp*5@bN9Hb}Jrd__QQ!3_Z_AN%chNgXLy5ARsD!C5sQL!3Fs!=~
zuvgk8-{msH;lbYSa#y*twYiwbCf4Y-$Mx7L_#*(6Q?YP;?xOo6+8J8XQ5@C4zMNoh
z1)$oNh2p^!xs>z6rE#EC^`v{Yrf41qpqI<+N-H**xw*{N(o&A<LBbjif=6h2DxI};
zAju{wH_+69aBc2S(XkwW^7Iz216Y6(O8!r+x0*`9TnRv3mReitiV~&6y7hw-W#76$
zJKSNw9GD?(CwMG)nknl=XeI^9lGQ2z>WMWk2bo)`yJ6C<sOeX0YWa2$oYer(UFpb7
zBBkRYmBTI4_}3U2X|?4*8-g<=J^-16(?I}KAV72$Fzje6H`0&;Y+xnX9{K<PaZU)q
z+yFrRgyUS6+SCPEle!QmEvTO4&C0+UBv=;!!0O71#ol<*hZP-FaV=0EfOvs{)km<l
z0Ki0LlyXaSTv4k9<>xzCPc$N$EpMRcKM2Z`(BJsUe#^Q=zxCc@-m7mR_{N@nJKjC_
zL(1pwMCpto$U2W9IPq}`QaXD*&ZsX2tvBvv7@Vbux&zV5W#j$5*o9p~gF}OUAQ!lP
z?z?=%#7wUzJbxA9d7kcmeN$zBHwsxsP<ce=EZ9lhM>@KuHTJMC4j@JeCk$6oUhe21
zy;-!^7jwQVae_@yaW=)ct2gt#hEE{;?+x*v(R^w-YW@H<5y0X*oyUApTN5D)J50G7
z25n8S2YUt@HGiJb!?M1U9ya!GIlPm|&U(?0DQ~&vMsk2NdU>&LA-aJ?PhiXHHJLW|
zTLZ!R=K$6_R(_hSkxq0FH53GNsCFBC;rUbPu3Vg6u+#7SS}qe|7qs#~_|`j4GoH=+
z_&DkM9{|9H%39jdjzFkGjxEh4hQdDg>f&>+q&G#mrpKJg7v4tj_L%b}GmAWZzHF=>
z6hlNucy>R_oCPh-<(w}Z*3qtz(^1LIi!Xr_=2;%GgcmpJwA;q0zKiB;|CWK(L$GcD
zpnU%NoU4L8f;C4#UAQ3{8=IPpP4!QD4gXPmz_Kf5=GH<7bvI0};!^fRnX&}pwIrA|
zYdN#LgR+2X*K*M{jMtBhlsHfRTB|?c+wtjhKPH|d!)&SA14EyI6Vpd<o~z;Lb+EKe
zfJ7mu=2K^A3-h0E*YAVZ8kn~e%=a6Z?6n%E-fO+c0Vksji0DZ1WSpMBuMrsZ@j=v@
zJC0*GHmIRD4*Rsu|80HxVLJeSy{RYIPI%uH`g*tGezITa3I>fFxr6b$YrGKg18bDs
z-&iuc2Tks(cm&2sC&my(lbyM}U;=fJDq1hg6G%hatZ`{0rL`^5jA=7hZ6ghg`~A-h
z55M8+=e#_em-g=Jw{HA$&$4@Oe9jBQscOr<@(?y1aK7-bt%J8;6^%?gdNZ#2ufdhK
zTx~|G{m(Bshpv61w%3zzPf|_ms|_99M8`4!(B59EiZx2}Yz<3S`TWw=wy0i}&#za_
zA%>Nz#-@twNBPZ~dQ#GdFJnL1;0xN3ahXYW<A9Q}D2)w1s_nMJYC6vU{7jgW*N*R`
zT!!IZrlM3Chxv$(hk!gtlT%6_h+E1j5KM{v#?l1Dh_RlYo)tYSC|OQVAzJSf&i^<0
zKW0xF_}evn+LLtSX6{9M57G`a_t2B;N9_cVWwVAmX$?OauHj*PCv^@UA7oPWbd%51
zqVv+~wPEinsX1susLinilVeF7FeB`N0Yqw!vP$Q^jt*l#_O_Nc`(00hFY+Y#ZBNiA
zp*5GK)SCZKv*xtfID>`~DJnykDpZptH`+<~%TJ<jLw)VyIYR_<$n;dO`}8f|g3vUt
zBdPz!{iWZ4k7Ig!hW#xG#ts0=M_jmrsnyNW!(c96s&A>)ztZnXdV=w%#`<xo$=#ga
z3rtxZn`F|l$?nw@)wf+sGBt7XYiUn@FWi$kxPy8g_IENVv`EUO`amY!VMVhWtuo1A
zJJv<pv7-aAW4uFWI}Z-@c4IrXl})<y|B{V7rr$*G=2yn&@znqn=V~Rh0D60v;3Z^2
zuU`WXYSlQ8tJ8#tvSm%Hj$v(>hL<LqzK9xbH)Y;6pm0Q1m&dpPqQq3{FtoMkqpIjB
z?m#zotGbL~xXI*LnudG9l?Tvuc=d07RQ)9ue(~}T?&RNF)m#~S!Jz{+<8ZIMwEBg&
zH@2C9xJkaKvFqE3|7if~^I>)QotG0z385syxL*AC4UArbv2O{zue0_3zp4NGRsiQw
zlTWafaDFR(zv`p2iXmg>tV-W=rl>S5RNMopIz>wNjqYZ$JL9@6lF7B^tXjBsFfLuP
zEzsnw8UbL(!X73BbGKP5)462fPW759b1Xjz{ov=mP~DB+H8cUybOivcsw_{sh|nqT
zL?W}aDDlfl?}RdMJ<~+j_rtY#FSL_QGf)&9g%dPq>F?|AY86}rzBB#feQ^SxQ2^sg
zOQdm?)F-2)J3)rMqKv*v-^!0Z0ly3T2#>b;q_EPX=ap~UyCE_3Xj|yg?KppZ+{#~{
zWW9JB#RB5Y@)~DNI!aDiY3n7EwQl0`QQrDDt-SR~)USAS(xl;9iR$s(94lMBtFsj4
zs?(!QOnbjY`!V(pxPKwqP15Fh(f-96+6nFoXkUu<c;3$W(O$4<pTRSDBlR|zPrI21
znIZY!9*Q-TW7rY>AF$}3!A9tyT<%5aPo~k>9Q2ZL+7WY+AE=2<j$5(GNgT%8mYn%y
zN}d*;`DAJYK4tBJNq8qTX7r7Zn=LHaH~tTtNAYUeO0$XSuN?^<0JK)hh$cV;xCao6
zdgBMKD*fhFypEkRzoEZ&$Px$Ws<dnT^dpA!D+j}$m7<<EcL6x}7+XvK<uGq29(X(c
zieADh13dVd2qd78=59!gL$vfq^xpNx>TdQb@k^^G((K%oAfuj0+)4LDGKtn~h7QIh
zdLmumd>CJ9c%#2|B;El4rAkq72HOBYv($zi6R|&$>Zh<W+#9EHKg}^++^>i-t84v>
zh9=`-1gu7T<7)BwcyBy4#PJqrCH-CJbL3nb7dqHGJfttppm!2^8_D*Q^u=CA80tuq
zgPU*jrl#^x>ri=cpn-NuWLJrM=k<htGd>DHxEAqu<JqaPXA#$RmXtj;)yzez9_8Du
zp74aL2t}IFw1n*(&pyrUfxiQMKkf*>^o*vt%YyzV4-+jA_v^rqRzD7(B)f8?mm%*$
zfoyU(=m?0Mx(^~l!Dcd@v$oV=5Yj0CH!qhHeEpZha9IHVjqH~ILC5q0bJz%?bKzFq
zuYcX@RqbsI^Aem%52;%tId086g1&3CL43s>3O5#VjHXaidEZ4{7hSMr;|9`#iLrr(
z#-PZwvEInq;J>*RKa9X-gdY`LDSiS#eI_P1j}^GXwpT9Px?z2HS4ah$^aCo29wRdH
zN;pJC&NWoj6$};IGzFVB(pat)%SMJujW!McyXUl;7{hpNjDhZ4yp8te0^x;Nv!`TD
zSiw{VhT#NLcly77wv_SF#5XM;Z4y^NKfOcS?iq0tkJynlewpbt7y4r{KN|t$nN;lZ
zPmE8X&2hS3%KF-(QbepL$PQyk>~VCgZ8SXNyQ=+igW1<z1moY#`|Kb(FwoZQ3c*Ms
zVb}V=9Op=sv5SXBT3VY$PhvNV{R*Oc8=C`O-v(>3fo$?73Kj(SlZFQl^(#;)P=-Bq
zI3hO1k>v($=JyRY#XU8e0QgH~kzh9w?3Q5N-u9th$^mLEFyv{_$umT8M-05B2KZ12
zoP65qZm%QqX(4)tnC34qxdNLu>P^}u9T-9`NDvO}QIZ6ZIJ>E4h2*o1#G`*qzTIyB
z(kMnmc`gRNcnE;>I)X0^{N!{}C}mxIMlFtGef4hsVuNEn>Dea;2hQRpb5(e2rC308
zno&UyO5seJ#@g$EAt0kC5haz7GvIRf2zhl%fSLxxFp-5~9Z^`Pqq2G4&!p$c0}K5a
zqRG&ldId0CrEfi&ZQa+~)j>Y1D{&cHmWz7ZOjcj(e3CyUt_%Ba$cLEwIi0(CWLQQ8
z-2oqll7mEuK78gOH&Ggco$j`hyXXt6iG67~+B3EZ|DS0&zRt+aPXb{b(cdV>Ca285
z9-lXfgr^&fC}b=V=1TixrW8A1{REUsMChjmUj({!w>1OM(A%Zy{l|)*%)JPSv&UaB
zjVO+eD3>MSkq-0Jurl=vMHPOa6j(nb3ge$uR#`Iwm--2{V{cw?(8g~#Kcc;Q6Tgh_
zjN>qW0RS(m6x-X1$dO4pJtA3km{0_*4OxGO!slCn5*XoRf6@|tvKRo(^Pe>}=`$!e
zJfHX*6rH*54z(}#l|F9#Z1zli2RyrS?9%P5SQw?=BJ~p4DwlcAMHg<_ykY$sdTIfW
zPnPOfL6<NdfFk5sF~47+Q=elVINm;mh-|Oqj0yvN*I2ui3S#A{m8U*s_pZx!?!axh
zZR-V_Hj?MBwQ{(rVIa<rQH`=Ke)IW`p$k6@cfirgk;$!wu8#JSWX>v&0pGN7jbf(7
zvPAA9AcuYRn!18M!}Iy#UMLoItP-hdFImJiWYS}SG%mQ{g3B+s{IW|f-ch-Tm|M42
zlhdfl(f;1R6PEA)nK>2nU$FR}fxpEY>F&z#FN~kR&@?gagO^ISU-92Rf7a9^8~xBY
zB-JC++vH+($mdsoTvL0TOKOkJnZ1i}y#jz%_xx*)>(Z6R#jw)2kghads>-;&y~f7>
zKeJ+X&V5@9%CAMf2VNZN`Acy<`B`OjpsC21(-Cy6PU$!U!I_wfaW*BClyRxxxLJe!
zI<Kt6uOi(0NgwVH`+E>hB-^_Ni43L#C<{r}8&M3~)RFEd+1_vVmg=N<|9lMTcz?`N
z%j01wzLWCSoixMRa6iqCTjV;TM(Twk=2;;>wbVs~c<CiOFWxb^y)y3-qC-ErgTx1{
zJ7@-<4;|EFV1et$NnJmhlzd^2rm3*N&7-kzyXeBL7g)DWeW2It^||(9m9MqQVFoTU
za;UY*ZL8Yk`8e8(&Sx0ai9ybg&b4f-nv|Q)wz=;*pA_#;+tj23ziKBc7PF{B%+@Iz
zTi0NWYeNMQk!@QO6%hOP@-fT5KZ=96^9lL)q=UA9Z~W~)vHb0$@IG*s@VE2x{B2E-
z?Qa_%RKen51{?84$~9e(2b0K3T(}k&<1`05;l$IJVm>}#@i7B`0v!~?&)_3HA=I@v
zp~h?}ZU{%*^EPkwyq$r+GCgk%$qRK6wr0})Cg<ByZ10)I2fGX$iB0A_?CxNKYr~A0
z_>9AZV_wY-X=Hyzv{4Htb2c?K*0t2PXvkq4{7OydZgcluNwCW%XB3=Z*vnK5#5!RY
zf@f$|Ueu=pn?f1B7pKU6NYiXC4H}gbQJ+hw_buvcPS_Z0zH=ht!NjnxB%Ea<>+X%z
zP0w(WKFNzQaQh@*0?$f)cl?*i$Fp<38uE4#?x!3@L<vPihb6sW7-g?G;n@Wg0W@vf
zr=o@*fd)nRmraoFml_93bZjT{h$e$sj{g>)SHCv={h$qIDz`VFLnTbugP@XE0#I~R
z1?GriI8}3AIZpWEn@6CQ7gCm`KClQmF;7QkbCY%<bFO9s2iQPp6PUa;`Iwcrb`(B}
zJE_Ohyp*++bt*wHDW>M7s+CGXj+*L=-$=z7YyR)i$)7&H*P&AUIuz&H6)c)(;GghD
z$^~1PW)qHEi0Y7TdfR>S<`x^;cU!cd#?B>a*YI7GOh}vduy>nH`!Cb96At)&$f7=J
z)}7t2E2iG`o&*qIRE4-#=jTJ&{}^witoNR7eKXY8<tVYsL12CKM!~_EOb0>%ID`FR
z_<|nRO)B<!eLBXm(A5B<!N`9#;dv~?^IFJL-cL_=a4|T{1DbmS6b0r%UwHtEZ|qMe
zX?vU{Y2=9EUDS_#*gHgdKivsV^)!_?IAIvR@_l-bnBX5XxbelfA8xPQGS=UxgVg%w
z12#G`IFQc;Re<I^V00cp0l5QwzbuM8r=_Cv;2LEvs`hs3hHC7HiSgl~-k$cZ_O4P}
zskMnZebx>3*L50tXx)@=?AmFf=T|`V{62q9L=SWlJtF}%5*R(Sh1A3}q)&;Ep1KTr
zh#ER91_u_Qr|;ZP;+!;ElPyFC{-g7rx!b7^<h&dm2}3B@AbAsEjv7UK+0{YDPCWao
zk%yfihXyH!$2EJr_uNn7JRrig&){P3Jx^S9=Z}kQ1pc6Gjq}$ofuQO(NO>)yHGvft
z9KcHHfN{S5DlMzOH?mqq^nW^()sHm&x?gldsgUP9aJ#v}ew5IMLQ?B=&e<La_qTyu
z*g-d3^w%I|aMU*ny>y7}W9{1G>*>NaY%33!f-)W;|69xNQNAVa{q=(of4|00UQtth
z9S5hSnITt9<41!Z0D`2Sy5vcru*22p&0kyS3Hi`qnR=>veNhhFeHm}H5240SZ{Ul)
z)l#apymo;?X7e_C#(JAIunSP69>q(&&3fQ^?zK-~EPE0odY{GD8T=AfC`LAbo=k<v
zQlT*=U5#7%=z;X67LJjXni}TE$X;ggdIm3^I|t9KJpCffxeEo!eDGY~n+CUtIqv4B
zVgW1}B-^}c<Ayb>=LgAR{@+>4KfW0|aF}8T?Wp`T|5Q0HeNBt<e09i01)hRKnd#`@
zdAKJO1&vGAH%=^wBzE>KIa3=u!#BU^D>|zE{PpPNZAs+yLg&31AE_RVADX8Lxg6{*
z#6#NCLA7EanL<h@F5J3h^TrM9){<r{C>KlL@ibhGYe+7wD7~~?^uqYAHv?KYo;;*b
zf-e`6i|<=<X{eRU-0K1zc{<^SL@uZQ><4gH<ymXd&CQdGpFd0q3VzO=@sOff8N%`X
zB?Y4OWc|7<MS;{_`LZRGQ`m&PaJcfcfqv%s%iCE#*)a}jOx~0EnOGD#@V%U`cWnXl
z%FD+)#|^Cg^#1AY?q1Qof-d#mo>+N`B&1MxZj&c1-8psF=iqlLuej(!mdjtZo)v5N
zlF;jvE9Ttd3=|-rE99qX_d4h~@m?xnv6$Pd6{#sDtNK7zb)l>_ZzgGN-nDrb#cwXy
zlBq-uwKDsmC9{)Q#!-r!c4Iy_ik?4$uGfmvjU^{0S7WXMt|vWL&X7WRq)@gL^FTXd
zI_vmZspA=XSZ;5uUxk{OwS12yyOYoP8oajhs?As|?7&=p68)UkHNQrJYVry!RH)A_
z>DWxHW1%>q2syu)o3?c>Q;sCX%XL@D%0(Amkg0bil3{%JsEuhE!U!D42HX|hL1a62
zw3eNe1X<09P<to(pii=zOR2Bd-iz_wBz~Nh6%51iJ4Jj$J*)Ct8`iFJEJ^Xnc~Xj{
zLLESJ*HTm9MK>fx<`&+Nv2OjXrCSeT39leq#D3qQuyfAMDL2`SKID|2n+jigrn7G`
z8oC_6_QZ-5>(TQpJ$mq2E<C4lXXblP9tvK*FcpT}r{~{b;5go%`Wz#(wl0uJvF0|r
zc*pk2g3mssv|QX>mR#O~t#~)pI%mnncU^UG!G|y3&+UO+u3^X0f{Ep#ge8}^Jbw?o
zu=2c2xuo`ySIEbwQT@X2VNXanv21o)vUvb=xRq{~@iFG-)}itTx|mFaq)C*@RWcEg
zUsou4TuDFGswS7q?}dE6fe5ZW%7?T+Hne_dJ-H(z!z8nThA=~~J}on5$?SonzkvHH
zckjHI<qJ<mFMrV{=GF>NPJ*j<vU?DG&i$m`t_X#Eu@GxmV_idzdtN|ab4rY*K#cXF
z7%LSc$jVift1jPl*`<@)Nt|2hh_{pZnrd{d+mh!AY}E36UgfSKEaX?BpId>-uhly-
zxe4=?VxW6|YERPX;OF%jS^!@a{OQH_Cfz;yZD^!M4eM(5=VvULo_O{z;7yg+SFo;l
zIpzzyv{>isq?+7|#Y!y2I>>u<`ROJ0Z9}kcEtwjL?s@8!SLg=9lMAY6V^8d7*l*S_
zV&1Hyvz{iaXYJud->!4u=lpAHg*Q5~!2YeCvEQ*_nBKADGyesZ=bq1dHtpv^{@Ta6
zjdx6*#~HV&`ev$^wB9}+!u!Fee#T4JO@?k$=4+?bqsiof-AA=xHSe5+Z#w|Zp~}cU
zG;ZG_sfSsQaDMIE?)xnM&fxE2g<e(%G3O>cIyR57tCSC2rKR6?>5ZWw>uvYt7SCs}
zf38Ze`zz6tsmI;eCCsCT<PwI0Sn_d~Vz~qTS&zH19HuNeoPxXYARMX8G-J;1Mc3;=
zo|1={97DgdfJ}1W@|-)ps7OY1T4-0tK)M1ymPfPo)_rPa7iGotq32GZRO5)TRK(;u
zbSsHQD0go(2;U6;U#u=`&8n5l^#wbS{Z31@qs!GhYvqD(hJVCiI8?c{1HF8WerUtz
zFt~a5Fyy`bVe%lo!;hn&m^!i37}QcqLm-MV{foS#Rwnr7{a+=IXc(2B(hyH-oW7(>
zbH+u5QsJRcIQxR4p}ZxHTp|tqL^?i7%hH#jC^U1P^u+k9kjUfo+%Itr$)gS3T#Y=)
zWuznVa3C3S8r{b$51LKdV98_dXrLoUV>*mHPQU3<lE)xQFC`D()#yD}x?bSnpeti}
zOo8hzDG##0GB-}VZ@z5l$0_)0?4{_!-~h|zS9GvqYS-}CJ+uT7c{jN_EPA<Oe46-3
z$9k50sM>2~&q|6&_x0B3O?^slCgmwhZ%$qNd3agn#d;2#=WiZn`FJPs*pYTo<uR`?
z_5mXes>6If*i}tCinVgPreNeYK2DMw-!i_1p52#CWb0FXN`61I<aZL@i=*($%FBAN
zSQx`xeiZ#&8@hfXMLD?!3l;FSTKOg#k)vpYB~i;?Tujwg>7}MIIW_7Qm^jIq^sptz
zlh=Kn<T#FbZOnT9T6DcZlx`$VIe8)GDhj1bIyc{&PU~RN(!oNagZh5nK$9-B^{|fQ
zXzppXF)c^(UEwcrS9D)ftiQ9Z*-1;$?2g6vrEw!OW!B%9wLRl|T>K<0FY;&i%IG$y
zyb9d{)RAtoQ)5ZRk}>Wx9p;N|(&ft**`$!<HmXNVZe!es<P7Y?ZItuSfr6#-9O*3)
zOrHuSQ2-O^mL!Ejp|jAb+me`({$}1N!I!Uy=Z#V=tAsPpm<uYmH1xQdH4}DR(wfWV
z+H>t1c4Gp2WAzUyFSCYr2@gFtPaS}2vok4)mR&o)lccFVsJ=O_*(Er;4V)RDx_+c9
zcLi|4uU(*kmr8iUz7ExUsIP;S8}Sf+YpzPYDPu5;_ok%Uf_tc5z9uh%;Owb^vv`Z6
zBv<1Ri=H$1Iow9|P7|m&PR0Y~I9-igO)WBCxzyA&f4=f7EIKKsKDPjTAov+{XTvA@
zU#8wsOFzCDTX2Zr_oHw%e8p*gjmr;%E8L)9OB~MRp&^=*9M^CJaqz=6^iv%CYm_aM
zhVE*4yJAKnNgfWFU7x{*g~Gf~(;5Wl<Y>afX}A(s6A!(}6`Ft<m}xv*nTb-_JWw4<
zQ-~mrS#Ooki0}P9Va)o6#6udol3Xf2qhW*OaA?6<*A|LIkG^EB!zrxC9(wzl7-z~|
z-_LwbTUq&v(=14El}FZY4t=5gDQU)^XYn*VJiK9e!>X0##!z_q)cV{ePh0DA>aH)4
zCz^#-Bk{o(5Tn<~{h&IrDSK{qHtK}uM=hRDVhKlrT0Zo>RjAyRD3zA7<dd7xtAJEo
z$w0`Y`-fsF_&~<zbSC>0Y3v&aWgf>r&E7g|@qY3--yq(zv1_c7)^^55yYO0P;x^})
z+K}Si#C?l+S#+M!9iiKvJ6vMT6f_r<s}?xoY`rq)ocL*qM-$^!(P>8+GZB`Uy9kGr
z#Z0DZ5fPqC^;*7NbrYUT3D29t{skYz8>o*@5gjZeCm%ZO^G0vdane!Ed?T$TV{wl=
z%Bealz7XY9!QCO;NoXVaDCAH?(-BC53`+5(Nyv#o26uNd%xFkMC*Y8xd)T6T5?A6u
zi*7Tp@$u394U6tcI1PO^-2w#B9nR7$J|4RN!J_*NeiFCROyc$Eiimb+G90Hi4Z=g0
z33m}DMn*<9jBKDwf_U-!V_xLTEnd#x<#Sc4HziyVKTbShss<+#&MdZKbi^H@OL)81
z;_VcC4fn&<m8XuNt5&0stB}P!ipedgDltwM1armof^5=ERl=C)ui>#d%_I5$*LTs2
zXo3-AP7TI*^)e>8W-)9K6R(7rc&(lgZ<qZRuMgozfKxxMTK$va+J#vv#p)OEQ++Kz
z%TL$vLvW|(en!1r()tH@ID^z3(MBo>0&SEpvgz*0n6vp1>zJ$3p0Vf8k|DL^_*pYo
z^FIE5Ypy2I>;q8dojn^gl*r<vXOo$x@3ZJV!|Jg@@kFwrQZ%!aIprC1ZQ<Fol$6!e
zojH5<6&4?7@b<Ym$^@N2SJ<Ox=j|4otHeBPh)2&7u6|v!@>MgBuAgw-6P}O1#A(Xi
z?$?nxZPhDU3Pix|puk1tP7yBx*nY_kYhnFgnaXhWbH;$atm8Xmxt8BE#D}68MR0G3
z;~9`6esrj_rP*hSJ0wCRodV@Ja4?w^>6)G&z&T!%O0XUo#vvTk+%z|PJ!yW%EPf_&
z3UAHk#|4G1dIJ1>%Hn4d{u3G(;ztrcQPKJ1=jRcNpEHc%HnQv1qOTI3nBl3$utVi9
z!kj)!)(x#&vAn4vWRi@lm`8c1#p4;gYwl69t=6F@Z9XXx(IY;SaBt3J0QvLT9Uev;
zUOybXdX0|6Z0CvXgzp<HzE5Et-bDC^(DzoNa#tXx_~(ZIP3Tq9_7#$SwV(*-nW%3d
zWItE4#?rO;KLxLVI(SQ^e;7S?6-u=dVV)d>w)EVJsWn{@E`1c=ZA!&=Go;cn?+3-j
ze=tSOVaP(H5NIsLoO#deuih)aDn4q-@FCVbH%C_6{Jjv$D74<@i>j2`3M8ZIaq$d(
zpCzM*a0D1!QrVHU4>W5B!q<<?Juo(!u?GgLZ>Bn7tC!D1_#yD=E?T0O4_zM%&VYdS
zb04SvZC2j!L+r(K7ung`VqPD&9Z@&4MjmEsTfNcWXVH8H{|hT*^9-Tl^XYaHx^0g?
z%|S~`%W%uEKFNs@a>V1lTz6W0oWX169;Nz~<r<&Wma7H@BNW+fxip@zEmy+Vl*QL6
z_^g?e--1f^As4-f8T^UKag-H{$9QahnnjvfA9aF<gg@8HO+R&W9lX5K)1$GDX{@8j
zYPl3T;3~tdI1~-b4y>MdLc7ItNAg{9k?*KrpJ+_-#DN8I>rcv7=z<B#*KKTI4lkgG
zLxarqs4N{^P7Q-4GIZEJ)6&iJq5vUPdn$8RkBtmaH!E$2^!u$7LsFkHZ2kKB25MZm
zeqjCD^&{*1N^8plrIvCZHc=bpjV05~kj<_AgQ<W0+~@yo&&yVS<Rd5W@BjIqUsb)U
zdi72JqjI3T`^IfYZh6J-D{=7AG6HV7bo-gv9o=WEKbZaX&D{^<+-u&lZZ&>j-R8f&
zKlCx*NBqS7EhtBL1V4;#!cU-r?Q=hydoksK*4HtWkuz+j$M1_%P!~)gUcOATYVwHv
z0TUO#H=cbF_b$d+=Z64vu4MNvR-9DYq5cZMRovPYlyde&LvNDq#U|HW<57HfP0u{S
za}z*z&pcN+L9~f*2p7e^q+K2@A5|2X)c%^DdBl%&Q~Zn@Jp3lp$2Y4-t>SDkZmbbL
zR9B{X*~GWRb!9&cd3oLA#8I~hj!}&x>h(%EHW(aigXwn?^n6ue&sT+TFz5_HyE>l1
ztrXi6l_cmch^4p#te3=%@8ze7k1%fhV}k>KaDF)I&Id=I=EKhECs}>e^dO#>XD@<k
zLdK6EhE?Du$KG5f`VSfA?`zua{C$$om(K@o-NJB}X?nkC=#A@7NPji~Py{iv{zTGc
zBDgpL3_!-EC+0=OD5<GF3H`m*8b^bnJ+3_=nH&b7vn;drL^_0nX&eBKqym(%=tRn7
z#7?^E#O+>;ABR2p{IIQ00zcdJx>KL;xc9!n1wS!8o0ERu!t_BELGOKsAF1gq;Ov3u
zlqw~&E4Eheb*QGHrpGGI(pgp8V|5|ebv3YSdaRCA?{#;Gzpbt3##uQFKsg)>)^is;
zdL)PZ5rGc1r6|~?+)yaMo}`{TvzD7)Db1Op8u{+pT5g=BHK6*2%v$aO5Pr-bF$LWP
z4*SwY+=L$YM3vn0tGMGl=?SePKN63`^JXs!b>u++xTSJaf1XLC>$(HE(}{F>19x1P
z(=(%@LF*2e&XkYIkafi1B7kc=bG7yMFf=7bJtMs%VOwGsyIFUx-MkI_xcVT!k6#(j
zMBQd+z`q4Wd8#>-$kCDQ$ej)h?o||0pq$C3fyTkm)f(d0H!_+On(pDA;a1&+xvt<U
z>|$L8zv(^vGuayV9=_b1RrIa~3LVsKF7%Iz485?@EQubq?BM3GD(e9l<)Gn>L+^Z|
zSMP;p=z#%>B=+|;HFA)}0&^72CIODf0QUj&(N)Zy)(a)2x!U#`E$!`XY3Uv49cbxk
z>F(D?&|qJwKHoBdYc-m+Yd8&%=v%+B6xl%~Geu&+DXaC&`P$chc@BrGpZwLiOHTaB
zpJ)T<m(PFYD_(Hm1b@x!fuH^7hvpvcc7|uK={|doSC{?X9k;!R{rYV8e**l!n|6f0
zaMnPXs<@P7oHaJkwH{3M;mDnX0#VYM!W1O+RzWM1ppA*XAl;UUjR9#TB5hzKHZix)
z{`Fta@~gg>uTFpd^C!-|_2F*(*et$PTaK@NUG?Z}b)x%WqCo+OcWW93sY9jKHM*=7
zvQ~5j*-!0APOUTPAaVqOunz>dO1M)JiI}jliq7S0Htk#+wC%ewmQ`7m10iDY*N81;
zEl3RLyJGf>Uz}xo-}IM%`C@Fnj%|OidK};IhI4<nulmimyy@J#wb*)R_jR8=+r4l0
zb$D<7?AeZL|G9r?d-&lzzP0*vO+4x@WWfKE_5tjzT*Vy*SSl7APA$NAUvFSDX=XU}
zQ>7#X0nR?)pd>w(BI->+wug&B|3v@|rk`xhK(4vg2`6Q;uiY3h;1~v+fpYNYlKaUM
z_;>&KkJ}%*i8a0CpRn|dYJTgP7ryA+hhNQSW-ryE{?2T5^m~P~XS=FDsovi5@WVdl
zf8PDD=503UUr@b8P1MeDfDtpt0TmR*@wxw`D(h&T1GO@U8yVEQ(Am~l&rvVV#tjU&
z`O#bl7Z6;WiRL?a)_e!b!=E?dA=hQ>(OcwIwLR=%#PqNydidXIdh{I=^|CM3n~n!L
z7s_>chbUROLQ@h^;M+Z<y?MRu*R7q`-CmPo@<DG=U6%b#GI^DzL2GK-Hf}A~bICi~
zno8V}&ZKs`oNXXE9kP_U%B4LsqSF}2ajcm5zS6S8iQm6@;<)M-z(sty&q(pL(%_Px
z*SNILpY*(KE4UhHS9{*$pfL>&Q2ShmN#;meTPER9ZR^`k)A=^ErKYv~9wwebKk3mB
zPq)FNZ-}Cj60og_@IY%><6(v)M)#RSAUq5uJ0y_qNHU4&=4jJaRJpGd;#s9-_i?L!
zl-6md#-rci)Agei>+J5*Y{;Z|RA5{^3c)0_s6JFh^`RQRwCY1?ZSK_Y^_`cl4@E}s
zNde>HP&2TU8-;750#IW}Vcf^AgI?y^Xn8>b(zVIClf<GZu^p+8!akKM1J`#1{g)13
zRE=vJ&FN+i-teZN6OZk_>&x=X&t@YpsQ%@vKdjH-6aV@L)xUT?8xc^d_T%SEXU{gB
zyLYzwH98WoW0u{~L}R~`zIbq^Qt0XIsOMZTM2MQ<jQ|%?a9STnNav73bC5X>T+K+7
zW|*02jF<g+OV;P-3z(V&<{I_;-GF`)uJ?4XV?dSqh-)VZXsD458-j5SEo(O#**I&R
zSN{vEe)fa!cqBhD>a{y9ZPSByT+?&fmxUKS9ltaE<2RON^(y?cS$4~4w}YQ^^Ob|=
zzJK9`_~r81v&D1kqWhA3Kr^YJyMuhQCdGxeq+KN)MFLXD9n&s|5+mYckB)Wyzj|7*
zf$$J_!pmrVcsn&l%gDQ5fKx9$_fOCI_IK_)_n*(lt6%;6>ieI^R^IicFW<>lKd<`!
zBkY0dL~s*5v--OH!w<LO$7k{3wzFpo)mgk<ANOrlN-KzGL<|wVebn=%y+zYo%n`vn
zgWmXTY|>3I^#2UKsxhE+MA4tLKsCi1M*><~%(bLi);bSA-TB&~YU$R8-g$ks`}VIn
zcOGRQxgEc8>mQ!J9lv$U2c4(kr$zPK^$$Ok|MX{a4?SFu&0<!}mCn9B|G^LD-+s0<
zCjjEPil*o1_25XFt4O!&qVp7$yXYLn`CW*-_ISSD-<h+chxYbpU`Ky=?!M~1)MF;_
z!Kk>M3z_tLbAT&{Plb<XwT<2i!gyk(QXDTj!=}XNoC~QRIsG+Wg1`57aOhA4prz6T
z2!KxkL;``Zvs7Z8VO;Po0G!pdIiP5!O4P?a$oGh16_ozU8z-=@6#NHgtDnU|`X4^#
z{M9e7LV}t6q5epq*m>~c)d2rD_fU4Q0C?JCU}Rtb;mzL<vBdM+d}ZL~U;u$59|ZM4
z^x6HPIe)_c&f;?CNCK+kWMBe`0svFq3>E+Y0C?JCU}Rw6Ncww~fr0be{{{a~aozxm
zpa2$W0J)F{rg+*klw*{n$r6U2FEcW~8rx>Id&kq->8fgvtsb_q*4Q{>&)T+a+qP|c
z>&DfOIFWqMd7p^P;1>YUtO2$yJLMXpGM!QG5X0mjGK2fsVXkJbd5i+PpMg@ru;5p6
zZ8jTCOV*pOlAp_dme_3^Da~Zc97f6p21}97moZ<phRJ*qauVZ$N0}cyOmF)Wxl+YS
z38}ZQ(=TkxaCa}Mu7a^Hn~`p#=H85z?=_c`?PH8Jk26Ltqp!P7*RNx2xQ($sOZP7$
z;W9N}u6dpAy}=T<gcRS3sJn}S;Z5{$=P<yX%wTzf3KM6CokeStLo0hCnNmWfIhsPL
zp+e41ej#H>$Xyx<66O!`)Z0|omHy@+Q8PRFuDq|~UGxu+Q{B$=msO0D*GN^*3A>OI
z>B|!H7a7WKfb5~4Z&aR_(qA=uN)~g>Zlb|eY%)7&<<hA(t=XWgrpW2!xYL;CmXm4%
zw#b{zl#so?FBP_mh4ywt*&qL(`FHF$pVKJqiQ6$OvN5KaO?o$>jOrL|QrQ>$#B|f0
zTCLep_Gt>;W=?X~Q|qfJx7U*yCW%W11#TH-uBWm~CF*~pT<#}dj#7?iFhSm7pzp^}
zbB+4?g*4?qR=xM|M^NMplftK{3#Ti;@5!)zl3%+QDAjY5{5K4A3&=D_CBK$MRN58H
zvyBwn2KAf4Hf3;p@FFSp7Mkso%nR-%%d}^bX~6<}^Ix+~HEZoFB!WAYmtnnhR9@;y
z9wp{(qP1J5e(q$5yv;ZtCnjf5;yz@If0!|@kO^`xOXXVD$XsQ<i6WWKYzY`I?<D_`
z^ElqzPZy~oltSuU4|3%+PLgb<%Ii$BZ>sJsbo6bRD_S?dnm+y<YFsTx$v+J7zcSm$
z$=2F;h^!<l@(3~i3?p?d=H^i7qohS@iOR!_^2HQ8?N|2;N4T}5_$3_am+JWrWJKZ=
zN2XKkA7^xUQ1_>hke|p7@1&DkLR=0q*9FX%Lh@Y^!@^urWGHdBjhSvZ^WA95{YRR&
z>Ri|4P4)f~6|PC&(jq;t>)~Oh={t^w161b|jnTyYtCYF{RJv}-@0H86uq6dylWKHL
zCRJxvSjifH4Qo|zPPmM*zL~gtnUV4Vqa(fP5YC}rxPx5fQrhAdQX=otO&S?#KO@a)
zFDbK0ZiD*2NEzvyl=URSERORj%>0k`MXLQSwUWwgnLtPT65FLE8-nMl3!dYs@Bw;<
zE9ouIli?=OQGQSUBoC1<<H-3Bi*#agCOJMN;Vx!IxPn1`7p0NbWcnO3Bg=?|HB3|X
zb6tXk>b<wWmhQfz>Mc_C1GO$gNO$q%kJ?K`@-$JOP0ZCW!!4s&Hd7$m$a8HtMUG>s
zo4{!QG&%lu%6ui=-Bro&<TPcs4GC`|%RfjwGLWJ$Pw$5;mJ((wuT(dM5zaF`a9~=(
z|1;MB8-Upm^aFMR^}t8~aFtx_^SDH2Q5n3);^0;Cf`3SuR!p@qYHS(hHcz>hGfa-9
z*xbu9`z71l&1?(TlVftpFol%b<LP1#GR)qne6Od%|D@ca<hldo*mtyV|DuJw$^_ZT
zWM4y-|BgkW{zrZbjdB;G-DhOW_Zo}XCmR^1{W`}yk~~kY;Ut;FO8Ylcq$NkG=HTFa
zrn(#kx?My8BKueq?xT(N++dkUO7La!SJQ`$b|rOoE%kPl#vUqVfJRC34T&+=>fAW>
zkwvDwNV;sKO1{^uJtSK-UZTo9r5v8o@j_A@WJm=Ge<uldyRJP;wY<zc`z}4@7@fbz
zFc+tfYezq?eJ1bHM}2jZIws3$G@1J-mv&5)0hF1-<VTW6nd;RjueeNOnv5Xd^rpg&
zWWF8GWZOutT}q{`=P2_A#daBs?IPyb3pmQ&%~o@vG8w_~a=p&`D7WPlDz})dAwxFn
z{3sU64*u17Il$TxMN#yAqqc3^Hp1Fb&A4XlDrVhAKd5aZ`ax~m?(JDGZ@1I?GgXqE
z{Wx>xVxM)VS`EV)qx7oQH)gqkWPgUUwc5_|=8}#36nm}r6<j@g{*m^-zUjAJ2lA6X
zP4CTE>zXFi+U3yitmmZCL*qnWrKd)fdfLCDubSU8ol-vyMK6ttUP`}=6+N`qud*JJ
zMITAc^Pf#u)jLDcH>09&BA$V3ht6|xzgUMQ2AjhZz5eX*20cH{VG(%1#w*{R<DvOw
z^B3l??fJ49PgnsrMrfD**wuqutQT&h7r+nj3k(tUv|34@YCVT}C|%GqO8Y$KgK-KS
z_JKb_hlgO2KY4NuHI8~(ZP%FjW*+|5;VqblHNw1!yI`NtVGx)j(Kq0Ym;M`K?~(&?
zA{)qsh{%PaCOkFug1@6o2t_7DMJ9yTj!GF6iah!$Ws`qldT%upGZo0HsHhKxb&{D9
zIVLI7kZKP_&hb3TIVt;^-G>ZV>PKd7^yAW+_^}!L{DX{3et5=Ee?0ZD-!1-TA22^+
zZq{tb+N=%c6|N>Xcnx#GSuhrS1w+A%tWCHS7Pk8w<#Rs6;VSM2*Rc+{AJ-G-!%V7+
z-|$<Qih8Jzdf+Z<V!u-tHIWPKWw=Oup5*$9Fdg5)60CdnDtQFk!&Ur7YdCbRY0gBP
zmD1k1IkvA?)1#@0Gr^Bs+T#0Xw{o4bm$^==TQ$L{aAlH{O6Rn9-Et?mUN9q!r|jZ>
zFf8K&Q^J6}4l_{uNErslz}-my)3vFC8sy3kv6~zgg%_Cvo;h?FHo=+381N<Io;>ID
zf_LH5pw7Vk3cdet|6`{6{PbRaR^0cDB|S-*9h0qi{q%)?Mcnr~_x#DjtkgN_Pp)+r
zy6u@>h`qwvWlwM(U>|TE(41(l<m@HZzt)C$n7(G*+6dWiYFMUarN8wbv{rO|);ebo
z&9m02?ne$-ZdQY1-A&`%&u)%$-vQRBauNUl0C?I&!2@s`0002MHn!a~wr$&<ZSOGK
zwr$(CZQHhLo%dh#pQvbf(fi`o#ZQYX05U*Jz;wW2z(c@qAPmR?wgrv{eh1}1GeN(>
z&B4>b-ysD^U&vg@cF0}Gcc=&Y6vl#$gx!TR;T_>C;T4Dgq9@`w5`zpN=OZ7Yn5fRE
zgJ=eNAbKad45Pse#GJ;0us&>O>~QRA>_zNrYz?j}?kFCI?~XrBfDpP9_7gr5MZ~_u
zg(LteMw&=^OLmY4lkZa~l%|xKl!sIfwL5h+^*yzQ=An(Gt)+wL?dew;Dn@}(RzfLR
z$}D0Em<8r@W?8ACw0-G%7K$Ze^=55mon@7=3G5iVKYK6xCnv;N$f@A6xNEt;c_H3w
zeuO`m|4|ST>=xV?GKH;$vxT2UKGANmLflroSAvqXmh6=xqz>s^>3->B8A8UBHI|K+
z9hbe8)8rv}OZjN|e)&^*nF6P<DGG}5itUOzr9nAdc~DuS>aIGiCaC+XpKCIj$J&5)
zruMN;qHC_(ttaW5>$e(UhJ<0F;kHp?>}kAc5}1aY?wSqex#r)NjODPEWNmKUY%Q~m
zwtcsI>`U!$9R|m7C%{>7u5?zoQm&(JoV&OCz9-<>=!JMK-tj(wue)!jAL5Vr=lfp<
z7=c{ibx;!=9XuZ*ggS<<hFRf};pY)WWMQNx+B|wP#)!3#ZH<-1Bk{|LKw@g*X3~>f
zokFFCrUB{E8AN7w=65!dotV9zQ{^V+1^MFzL1A*Cfi8G}tt$Wk0N5;?ZQBcG+s3zT
zKijiy+qP}h4r<$o-MdQJ8rd${16ii5QQkwbNbycNPAMpJRsB>})irgLdY$^2W{_r!
zCR@8edqi8Q+ob!ZU!XsrPd6wH|BS<oyNs2lb*6LXD6`i5%+k%`wp_Dzu&S*uY}0I?
z?9=R596cO><BxNe^Nh3FwZe7ARqi&nm~bC)KXU(b7kk=yMtBx@^qw7_C!R`gFYhF;
z+*|J(<Xh%b`}X*L_-FZF1x5s<z?a~#;HKcNU~TABct-e2I5W~JGAc47qKw>$qytj`
zEdT&JfJeYDa2SYz803YXLG|z`conRNkHG)nT4WreMJVJ9@(oEv+n_5@3cZ2;Lo2ay
zm>$Ehb66}^iI2n8_%8e#UPw$J)({MFg@`BHk<&;exs5zWMpHegDO8wxM8(p>XgiJ2
zm*`BU4Kt5nm=jDkJBpRFPWBZ0j;-dpaErJtTs=R8SMz81WIkEwCs>6;!XL4nxJH!3
zH)6dsK=Mj=q~?a;0F<!?008hMEnSjS>rav-ElJnXwf=NTT7O!Sw65#Aq;+XYmn2D&
z1kB7ZGxN;M%*@++Z_nGz%xuieJi{<E&+yF5%&b2xN&o+Sfu2}TqBo<L+iUI1>f`jG
zeK-B-{pJ0g{YZasplm=nKnzj`YX${_*r1<B;T7??JU$QM`G?Ymiihfk1Vh%LI6sFk
z<@<+oh8u^W;a5S0024$<@<%u$z=(AuC`=bJgv~;U&?1bC=8Q5&n?`|A_vpu1!5Dk2
zd(1laHeNQ~I&K<|ifE!*5g>9;e4Z$s=$ODJg5qp3TPzm)CNm~0Ci^B6lCP3x2`Gt7
z6;3ryDW?3=3@J<6B{fLH)7jJI)7)vvv}5`epaGS@7~q(p&Xmuz&VVz7EJ;R}v1Q#d
zrR-GpK3g#ReYR&7oejz}<^RYV<N~=x9-E`imCQBI$>)5E6a`b!s!%J4dFp)SJbxZn
zep1qv^-4gAD?b)W7JvnhDp^&kYE!9Hp2gI~vc;A~)uLBTQU9%OP)pUGrIaPcQvDLJ
z<knC$3{8_pr3o!Fmb;dX%kJgi@*9{A=7S|*HCPXJf?`kuT0jpN0^hai+B_{oTdA$n
zwrcrWh1RHbYe{VaN`-QuVyFVDg<7Bi2!IgC4*8%coCH(h0{9zT4gZGQU_LB|G1v(c
za2%l^nMe^*hOiMX(t!vOC1ONyghbwT89JKoo32{-Ti2%J>*P92=hP9pIGTcHqjZ#s
z{y-biE>wi7Q8OA@saok?QLo@D9~ce$j&)!l=GUj_zvx-|7CoT1>Ip-Np~z5UXfXf=
zd^KscY_(}syy{$y8`F%%#u{UXQEkMHi8b09XHBpcHGMYGO${c%<TZV)7p+&Xcdnb(
zNpq^1W@edN%rdjx9NNg*sMzS<kZrguIhHaD#{yVfme<X{HcK}-o8nE^X2M!vWn25K
zm^EU{v@vb9wsxD$hTF(3>K1FOYs;~f*k)|EZ6n*HJ<HCrH`;}Ei#@uNy;HS=?)>Xu
zIm`}n_scG8SG*h8eRmc++nt~@wwJ%xum|qNTt%**E|JT(pSk~QUtK+QP#a3~!QE+~
z5TLjg3+_(w;!@m7DehXJ6u06Kq=r)hK|*mT?hgp=7FwXV>zDU_zi;N7_s`AU&g{<Z
z-QMo)&F*dcVOP2*_E;~LSadp0InGEV9AkfN)M5?ldHI7(G%&|=Kx$vg2UN@;kg|}H
zq1v^%v{_;I09#H++61!DAF8e3UG{`Pyv%~}^Hs+1$IZqGE#n&(2!d9}=XW+vYxqzZ
zLG0&bRDo1W1V>B<kGt-tl6+u3TE0=ts4^A_T%vV0a${5DV&gEVz43vZUO4?4rajt*
z#O=*a!&=augkQRMck`PLdAFa9fsGA~t*<s+KaM=(9?&LdRP@jFH}r3nH0BqcqsDx%
zdim*q;86T>BUpz+wueMqk%8n4XDsqp*YOc>jKnymrMu5#OW+c=3)`GHxgz6C@=-C+
z$zUH#7leSem4qj*z<;i1>yG9h?r4US?&I1z5Ut^S_W3lWkDutOZ%I0&IO+jt001Tk
zkPQF=tN}Oxbihl11;7oZ@Ne)^0hj=^fCbGlM$#^8>i+fB+fcA$cjC7%q(I==6z<6q
zUeMwFS&?e~kI(FF-1cn}2MjZXR{*f2EufRqp4pL065VSaT=Ee^Z^kP!tpGH+$t0TV
zoz1LJ=%tz0n9sk)?9V~iq~R8oKO=L$z<$dh1yt%Bx~LVXP2YE#*SerI8bkvJ4-$=y
z4Kh;rXXd#qD<;1PVe2QnSJF1QDqdP&^Zl&xn_Ijp^rk`QLeix@O1C#{kDoMOCwFN3
zi#;xTcK=8~79-4=ZkUz(>~b-yO;h-Nmz(dPK{9xovb03Ttc@4cA?j#>1jS4oWveBE
z?^+B7x%C|_96UK&e$4c`E_N)5EEs?WIS4lgJqCaM{Jo^^TEHnJ#&D=0&M+uOsVhMz
zZKHdV7`4secuarKn1G?m3=F0xG`TwzGsB<IGcQ39ar+rLT&v7eh*Vle>_cT<j3Rw)
zd^hVWs5hH@lgitF2~|U+HeEBfvn*0ihs}zA+zffk=u-^Wct9;NyWVwV5BaOv&C1XF
zigabCRIk3fy*K)tzLNSS9wgvU<iQ=l=_O1zm{ubEr2U3oJhH3^q^rrOEL3DQz&b~q
z_gl0A|Cn3wsFoX?fT|@)Vtp*WAp6<G`Nb_2*pbB#H{s3u>+NFyhW5y+aM*b))^E!l
zyM-?rlldwv_a8bn)%AOHV#zYaUa!;@vR^#h(#xJrbQ!CxtZsrj%^n{e=ytezn&Mjw
zoH^{S661Rd<o{qd7E^2yW|-e&1hO`psSR3R2n)SR+4JBk+bNV*U14<pc>CTgUNcGz
zhkFY64jD{sfhARvZGge}=UXLsJkI@2OEXQuN76)#0N*;;Jq^Li6ZcNzt-<hc&K#PF
zj6(OT8<h^vc;Zvaxa`Yx)VrKZm!d5lfD+IdC=36CKwWB)75!zd-<|!Zp}TJpa5C3)
z0(%v7r&Y&FZ5Cq+JUlhMBK34$#S)%*udSi<YPl~=z3LfU`cQ>pu4!jPg?_dCH{Rym
zk{0@)-Qq@>o88h5G;A9C8pdcE#~)-WG!FFweKfCI@z@~twVWjo$L6Pw5C^z867sqo
z3utB!W6d&iY<gm3=FlKKWA?g@NMvEFw!klNzuw(XazDJzt=Tq=Wq$nw+bFTPojXhL
zW{0=io9VBktg83kBks56N8Qp?_i>au%+ojw%+Dv6{n!P~6GjH&_XpyZ22MwU`Pxnv
zB*)v5?l@w9a>Q?N#7%M}oRq~5mBsIt#VwR2+&IOm>`3Ci$H73=XaHCbKmYrl#=BRi
zrPSNQ%2Hh9V86Y^9P$2ZT5Ws<q&d1I3!V%uY>)Vo3X3bxZHg++Y)GmqXp8)oUYAgr
z*Ai2j-I!ASDeMKQ6ty@?Aplx<Zpu&urQcG>zPrDsBBdk;l0Biw{+N-Lm71Au{L(<r
zNY_w*_AkWb%*6DRD8G=Ph=4G-v8KKj4r{3M_we!Z^Yrz;JUTnMxE9nT!L|j+0XliV
z&BBu!|M5nKh>!cN9`CZB>89Cp>J_VHGwNr#h<j}h8h?J7YRjsg$!YvWFVk7rdAfY|
zvu?WMbF+pwvtRVH-K2w<W%19HJu{TPJ#Zv`b&9{$WzZp1QV~-1MJN@^D@G?#3p*|;
zwF<o%s()H{EZpATI2TtGz#z-ay3*5sMd^V2I@5}kkj3)~<~-U=lm~ZNguNYa$B0P=
zNqX+0Vz;xQ<}FPG$gF1pQkAHM;0Wr-L(SNt(tgpc@T>!?RzQ(NvDF*F@hwSUMr>1y
ze}W}lOJG`PYLtJ9r*2eWR_gS5&0kCj&tV9`;i{TRuF5LdjKrR6%>-MXD{NY1@lVYZ
zZ_6LptjsN)$4BlM5ZhYpw`9*z=F27i!HiAK(-A@vspBz%>Q;eaQHBt&VNlrJ(XbRF
z(9}BaNtUVadtnii*Xhsw<{Y!7FT}UPnYG1`iTYzr&qgdhJPY9W0N?@uexD{*;8hFo
z7Vo4UsPru{NCLmI#&5r;ysl;*Z_MI{&-OynEB^!OfU~W6jhyIQWA~NNtF!IJ6sxcY
z<^PeNCzP2Ph6d9JVWEb4U!U_cBEqD^M$9gZw7(6>=YofK|L<8Qkuw?Oc#ttE#{nr&
zmC0;-vHH8>0`SOL)v}ljAwEw99R{<QjSEAt@SkuRk^68OmY6Gh(BzjJ6q_ZP`R)ok
zA&N{Bj9eFde<6xrrC5gE5K#-+&&BH6^=ah@IV>cadLy5k)Z5R;8@`=!ovU|POtuKV
zpcC`inv2ta{V#qJ{>zN4{84zg9BK!@yUoL0Zy(3i7um0{Wf^VIn7-O>kf-TQ3f6j^
z;K!>EaaB0)(m>1>B$|V6u%lJ_*h(Ccz$~K~5xCz4akBOpFVyXTzR)u4{n~mbigCak
zvt7a8LR<$Icc##SG&oI{Sj1>sG@t*PE?o`(uLyon(=Qp#5q`b$URfin%A~<@Ia=!#
z{Lfs&>(vNF)#L&(U*uAhhB0*chwsixq^eF~TfjMTIY!5-{r>8F$4c(y3lk*+O>+f3
zbu$$sZA*DwHB)6nEsMx!0dlA<22h*0&ch1}|2a%Z3$!RoT}`~=3|(!kOaomlq6UPn
z4n~sDgeE~%{e(77fzN~%N!!`PI3SWxU<CJDqQDqtx~9M=Vcm$pIC=sPYy`jZJ8TR)
z&jmJ0+_DcFM~eY@j^LH%dyZjcn|qEDH7<FMW28tOkD%o8cns%L$nhvi$K6xw&+=cf
zX>H4FqG@f4bX92WzI*oNS$|by%d@R`Q<7&>V(OS@2Mt7XM?R)YQ4W%Q=tQ8m9ILXB
z#4d^-@XpfzdJn}4!q1u8G0yR$YJxr6MwTVix3z@|5`L!WKL=94Ca4M6gib0V>LuWK
z0zt9S^<pVT*7ZZ)^`_Di+Pa>ZhlYOMrlki5bmiZdNzPV!SJJeOk|2t8n9ba6h68!d
zYW-5s;^0N9glLV(!Z3sNfxuBxwvmj=M$A-#AeNWer08YfGb}`2H+r`uZc;=S6;a`f
zwltz=g`l`nP5h8OIS~`N`GwcWP-Yi!VDbqAL2O{{2#(suywIx7Eo&-><TPX{xk8=t
zmx{$Imzk=<cmR@%*y%RAlxM6V0+XK<qcdxS6asxrre~-5W^}E>2A9=%!IN*kbazL~
zOh7A%Lv^o{8<kWLnVygrlbsT@J<v1qvu~`cceGpMniW<9^Y-xaJUu$meW&#|)>%82
ziX+fS#E)2;*Nxs%2C_&2Cg7$LCE;V(PU`#{cc`yxa9H&k%r971bMkTwKauCV%RUJ4
zn#u@;LJtWRB#^xC2#L4}1zvs<#$@|nV(%W3)@LadtnF<bZ5-@&*0wf8pCY^Re-QT^
z=Tcrf&C2!@MORL7M%Q;AMv1vr*is(#nn-2W>pb$@Q?+{NUsZjtN^285XpFZnndCu~
zLza819`RkrV){?gAo8V(GGQTAtfn?8sb|lU^*D{V!1oAlJy%0>{KIC8jZ4VTi4&){
zaOH2Ma;NqIs?m^CuC%(o(6b*|d8SXrOm#jq?{5hTv1c8N?0)-|DoSITtb(!eGCyoE
zYrVp+Isu`6*qtpDzsVt_s`LHewC_fNKFa-2Ga_%Z+#yC~B9XsIyjLblmj*a|Ya;DV
zC}T7`5MQ~@vD6Ot#5ttRB>CQFup?;v_4O%Ls5O8Pjf5J_ZVguqTRU8Tjqr*{6Toma
zyWz?+)ucX}mS@&OnNB4KFh@7;6!ySaGDBDzR#cs-u;VK{eBkzNSvGPxaV^g+h;ar=
zD^9NfNdLG3cGQ$)==NGo#Ead#Y0R@HX<b4&JKvVu<<rnz36Y!Aum<p8ZCT*kRMhQj
zmox~eBmFv@!MVzMva00My=pL_Y59Rq9$3?+#~u&Led2BkV3i0JL9C6mP<;Vsob<JQ
zO?#`_@5@ifaU;<9u}i|;j|>UJVOUuNZ$67K+cqV#Jisbv%&ME)u8%C|Xya{6Yez_c
z4ih+3NOr!k-8QXz-zKsGdP^ocy!b+2Ru-v?vsUwL9M$(p^1eHwKh@!>%YG?yeBh6L
z^CLfxIik^{VyK6{9*p`V;}k<hzHaK;W8ss~XDZu`oa7uLC*DvjBXgvqN5yG{l5=8|
zSrhCQ36<>ELHbBCj^xxp`<G*S$z&$7D@7gtA+=QZZ}MxNg>f|n4owAFV|Y6HEB63L
z!B8sq-!|g536XVzNAl(mv3UCwb2>jlfBs>w(W%LgGylz_bME{F^htf@^O0^X-03=j
zDR;Quq_1}16(prc+_p3}bj+?)>H^j4q%_J^wi`0yS)89szD>VMm}9<pzI;e$Yi!;b
zNQ^m$`1upB>?b-U8W#@_F~+G22#9Qa;$ryfD3#(bB$f4Myu(A!7A;$cLG2Ia<!a#h
z;x1#ra;)}vw<6aQqyBN*+~?2UvTa7F_Me|%1yu%~R3U!N+r`=2p<RbotH-eYL0`Z6
zRrT00&)6LEWYrYrHAVBm8Q2T^K$3!WYJ&P1VeXYXx7;SR-^bkLW9afRe7R_-X&uZU
zbGm*A+^ti%cMU^3CF5u4a-;8pFKZPq7L~-~`50)vl<n;a4}6{U1cK021830scdNSv
zNhKTi1{$9m=xupUsFV4(wg}o~J@?g@yy|?#>5}5-Iw5JJQIO7-qwfqEprEVs8l++S
zdZLYI_3LAf^ldP_qRO$EX_<K>`cetvz`c7~f6w(NrS&*<S^RXUg>JM~I<K~%@E~Ij
z;wCLKHMHN|Yo*PXGZkJX(jWvWn}ja9MdQOEPjg{y0pm2(yi5Bl$D)h=QWDf6wYyeA
z#;iAP(8*#=NB`sI%p6hHTf?&7>voBB83hE!Z~GxdUXo1uRM=?x&|3}Rn8}zjgVmck
zA17wenISJ-yobjt;)`KioWASza`URKl|x&1JuynV$B-|VeD>=vbMCvCoaw={hfcQA
z(BTT=-o2N55=>f?JLspVe6$=EP}0%W0)k<mRT;dY>#vyy;Zy6%R&vk!Afw#W!+T77
zEP0G`%<d_7CfBI7PukMs-ec8+=K10*mbqq%t+|Id_0DIp=lqIl0;2;S#|zV7xpzmk
z=2nl|ck*{?AW~^hhrG4`bf^c5tSJIIqhT3rrm=w?&(|rap7^fhr&pNsu6W{hZR_YU
zxuC)fUC0lQHmE8n;*ZEg!`&w=NfmO|_vjpu`*S(b=a@z(mmSgNPuV5TztVCPx1REZ
zt&jA-!G!M7Izb~+qcW3L8(<A@4?#;(vrnmW1EAdef&!=O!#{_{P^!OIYq=oj`pCg%
zyB}pmP{TF~>Rc26HB=+`LRu{#@JQoNlBhWna#dS%V)u`hM>Zw@Z8~E32)Jec&$8@}
z{~J*KZ@}Td0iQYt{-FR5dwgtX^e>&WsGNCo5SN?2CqWJ-*z+YG+vEH$5ru>Wia}Rf
zfo*;8K&aKuU#|P+OChFb=$q#*^s_4~v)^bGZl0!Cs;SY`#ASU-%{4{`xbEK<{~ecc
zy5hmaVav>HXSJnGj7=PEA4QZn#7mo#Ngxv2!o?BbzD97i(g_4TfpsYbMXJ~<KopFf
zda&81dx#RDgQ#Crb22PMJi)bZTsLem$eHAryeJZ|OW%GRW}_$et4eZ7<fS#FmPBV3
m5%W<B4|IOELJY*l6(z^@<9~2p?wo8%&FsPgoS1L}0sjF$g(@-t

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/Roboto-Slab-Bold.woff2 b/assets/documentation/1.27.0-rc1/css/fonts/Roboto-Slab-Bold.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..7059e23142aae3d8bad6067fc734a6cffec779c9
GIT binary patch
literal 67312
zcmZ6xV~{ApvaUV0ZQHhO+qTU$wr$(CZQHi3H8XeZeZDW^-1}BURdq+_pN`C|r?Sdj
zUW^F<5C8xG5bPcR@!trP>G5wK^WS&>9{*oq31A1bu;7HcfEfV9TS0I@CLtn1K!r_+
zgx<hI$8!MyvH_6*=i7l0fJVWAkBh+sz-ez8CBp8p$L`)PgDXRfY-i6l*p}eVC9qT)
zk`H3If1w3tHIfityDzNz`3P*B77K$Osi_JA1Tla8{*PKFh(=eh@uqJb11Tt>1hpzl
zQhj|_-|{JM@f7O?WEf<+iyc&y(OJ#X*%6l#-RZJ844WwSXGwX6(HI+0t5~_DrWF11
zLJ@C<N-4~=6PCqKOMNe!cY5{Q!TAV4<tvo<Gv!!~DtOahZOXG@Gld_B<ig?9r{~i+
z?jnKG)Dw5(v}jH@A<<*nmn2e#MH!bMi~_-u&I!}lYiljE#&QR(V^komfLW1Mw62;Y
zB3}5)r$rO)ocljOzuXzqdeL;vyuay8-jP|rP&qR}d2*?r-wojH*Ho=kjo-EQE=vFC
zeadIx{Jg4@`B;X!U$gd^=p2+gmOP^Mj*BM$iPs)v3eSjR4wR<Tfjc+cJ7Dfvu2AkV
zoQ?0%*b|{A*4nFh`(%1bYMnf4dc_s0>CnWBigwGmv)f$S7e|)i7pBD{4|mk~{i3ax
zYII4~OUt%Hj`U2JZCn1HR!9YjA^rYX+Ydwp3#>nvyC{Mt_c6}2H2_267ts_&|NZ(|
z11?umN<5sV@WSW?QLLpg2#WKs$<_l!g$iBOj58!=wlpQCw8VscGOcpSc`fL59hklk
zziMSnHd0=z7AmzGaj0DLZ&>)j=R0l<G|z49E-!1UsQWm|_u9<`I&ANN2o0~GX%LMn
z!aeco6}kT={ax{8^gNUr539f(F^R=L_3>s_^3P6=S0U*A(DzZ?0yWW$Jqf((8&=?<
zTSAzw(QaTgz_!L<719C$vjqxdAQD9=S|?edf5F!(b_xbeuY<sdk!_KPxlCw`!C+ty
z4TrFJ@dY?lLpE7t#aIav9V7x$8wuPT^;aa7sxl~mB?D)Edamwep6j-t-|WNh@5p(|
ztBm7&$+LSf$+ZZoBu*^IZ=NStlG;dCP!!|>5hNNR8x|7H^K<Qe<9(YIBnZcWB*we~
zPR*B&BRgzABI`)qlhR+hWH6t~G@Z&cjQZWvszGYo^2?IH&clG8jAYCnO!i`R5DUhf
z`&O3s>)H#>*78p$e`W)iAC#U6CC=whVPq*YaaSK$s_uV)>&d#?zP_s1qAFF1R+0fG
z(TG4o>Lb~1t!n}NJX=Q-=s)D%BN-!TT;dbJFieXs2c86U<IS%Ns(gLC+SqslCbUi-
zArf9i%P#S8`Sg-1`$X-N^p}iSeS{F{RDN*NH_r!{0o7{FP6^CzGW|sIGi2Ux`)isI
z(lJ6qmasaYEU0t$!f8+NN2_>IFo}1)?!t<!A4vnLE;6l<+xjyG6TM-A?Mj57zqC&E
zuMEYEl8I!(@*hE|KoZ=<YS?UKjI@VHQSx)(V;}AxKj+WAp2VEyHz~I#Y>ZM|I=1Fq
z&c@^65rYFj@>n*>z1sT(#(P6n<`QMesK-$MN~HH|gg(I=lUxAPbf`9WG7Mpk>CjYR
zo?c%o>wH}@i2eAi-_r;{LNWo61qetpaKr@r)e2>C?N+*`^=_9+Y&hlV-WhNr|Hcg!
z6tc=O&~3@(2@5yc`a5scuUo#0-Y^mg074~7?OY5=UMsSyzl8HAfCGgMMg`+DMqk<h
z1OP;WxBDP}`u4IwX@dZ?`vIlyfA2Q?K$is=$*<5XN(Jysljm3{&G0TJ>0PonGYT16
zI{!>>xE~B~am0=rNm%?47MJ!GUcedI(uoOc#f&zp^s>P0-u53<1OuX8x9z!ex0?!4
z6%r=YC;|I0%3i|9<?ZcZE9q8FRSA6pjRi#=92kX%wyZoU+dL-TiFnJO*z$ltnw<*O
z%)`wChD!7N_9`8o5(50@&;FHX0;|TL=$Ff0N?BN1Za`>J|H1-c2Ik<IpKL|5Z+4{&
z=~G_8okB&G;3`A`9R`tziann^8OHD1vjT#Exqto^%rigjyX^`DgwYfLJ{F8EW?P9r
zESzkRax$aj1i>o+$7yyhXTCEDD{c=b1e5j>C<8ePl76yR4r?&J!rrblz4{}h#t7>y
zdeh7h%+Z&MvW=@+$Ft$t4VYV&s=DZ7O}#;DkYp2P3rq&>X*)Bm_d}aO_Yo^N#&)9J
z3qPSnfmpr2=JY4O9zrSH&=3%0nE&qXt>VsxRapm=*gw{tG}_Noh*cj=Ly712x5R4i
zRo5Q{aPx)?$MP3)F>W#LahO(8@rN*E=h*h3*XyNHuK=JPDqq0An9@IyR;iU#p^!qM
zRiPXR)IXk2bb`0}`j)tBsA1(6Q|j^AaZETc5qRaYwLG?wdt>iOxa_^@CeP$eo{-M`
z(Qfwo*NC?(V}vTWeZA(FCe@i$_QLYV&1}!_Y;!~j`URwZ5s|CLWsjtTf-8;w7Pmyj
zBrF3Aw7*`Ut$q<wG^78C#r1V^(=op-28rfu@$I+I*iM{EMbY>)k%6=YEP??dBmpk>
z_or9y=7&2eS00*Y*#MqH0MX}evC8Vxm3dpmIMh%Haz8o)@CdI@p4FBUA3CErU!*L0
zc1=aD0EsJ&J7@6f1n}%Nc!)|zK?06&1q4NaYoYqSwR23a-ua|3M&#K$XZASt4--U5
zlH5m}R<JN6gw5CxV)r`+SQj*hEDikd;m1h;c)&wfU4R)&5G4F5zg!lsCu-!-N1g%f
zUq@@!l4{a3g^?4v69tM01hjV@G5e=V1GW!rm_dl8@KQu02LrnH`9EiG-@lruX1_9f
zV^y|AqSlCrh@?`<N?Og|55Atewgo3z?KHxpQNq0=f4<Ie*L7(woeC8Jee-au+6ixs
z%lXYexL4;3f4{6>odK`Hr>>Q*ppYab+!6(>(0#Aoo`c`eHY$I|Vsfhg-g)b*8-R5S
z1V|;4(c%;?Q9&7|%?cipZe*>?Osuvqz4!gC@M)^G9De%!)C~lbp0|wzsmuqfG@dSg
zxAyevwUfPv<FMfACmZ-)BLxI!t~`(N7Ff(O@k3t6Nm^RGymsNHpRkjXT)Yf>7u4h8
zP>}Z`Nb3Sxg3gx^kZ-*8`kE>Lc#&<Z!-yD|=00rWOPU7EU<(l5Ef4k#4|9;AZ-|GM
zvV_odr@zJGm(#pb8QuK0b<`Q)T=f~S$Pmg@Bt&tog<`&jUDQ9jYwZzD6tmcn9=zae
z>W4<2#u!-sILQMId~1i`Rw|_09%7Ch!oj~YkqdUTRC-Q~vmW?9iIW_M%^3gwtM#l=
zB=wg1S$q9ai8ZOTbyHb_6*9_7B;Ed!(5tE1`9<T$>o<&FANM@vUGlZHiQL0SK^a1c
zH^BjKX+&ntHCpjP-G;A4e6ZO;V0|J>i8p+R_lGb9hm?-VfD3rCdDo~Fp`lvL9%iNu
z+hzW*w}bpkDNEJzAflu#Vaps|yR1r&LXIG!5#|fuGKZJ38mQz|W6fCA?E|`*?aNW?
ztcwc&c?lX38Iy|Yo`mlu3HmELm)U(cU5M6CSHWje=OpjUVv8F!@uo(*MeZz159l1!
zzP#LdM4-3M*LxplQ}ZUuq-yBv!ouJ}cMjJvWG&okIjjlUmu3n!n)&^z7z98U$Y05Q
z|KR3{R~LRQgHWcQ36WI@oApHZbYRff;*^fZ{6T8Pv#izqu{}C=WLnTYOKN4wG3YuB
z4`))bUDDCYMVLHa!$a>)nHH{7t)<mX#~apnzxQy%BAl44V;iivEYYa$8l?LMyCFuR
zt-npd7~GA~Q0plIRL1T`5;(IYKn;nB)2*S~v8js0ynBDZ0E1+t^b=TGgRO2m3tH%5
zI9!#-l!D3075PvBV}XkLtmvC^Qi9i==0$iY_-BTHQHx5-%Yi};byFyC?y7_m-W6CQ
zN5`xbA}ce~>RJb(SXFcyMy04%mM7J$Y73!gRaHw`GOe0b)pK64tmYM!Wx2F<)AC%`
zY>Q`X*|g+&M>qFWj&QGOk#Vg$Cu*;8m2oXgFJf7@WXLnETdOkdYpu2X*Dla9?mAPo
z&r8)bE^^d9c4)|;1O~2uz9Up-qj1%MHi{VPd24_g&=U?{J41uNSu`8$z-XwodD{S1
z2r{!r8IM_GNc%i}Ky9m37Fj_(>XZea`FKtAt3q$PvKhV=kfmr_3RbjX#!}sZn^2kT
zw6e2yvOQS)^pBSAzH`Ub+K3fzto0YU<^zh|%Y`S-b<z?y_P%lDK2FH{2BDPaU+jwO
z!StsQ8kvQpoS3E1C^IfhQ{ZN!7mI|MtzAhrKnrJH?G&y?yQX7+2{=K5Y|^b*&2%-S
zYf3qCq3VwqWzgJ^`o#dDT>NtYCgay59znwQd^P9Mx?w_cNaO>%$$=0Npr|GZ!-{Dj
z{WE3jNn=ILx(M*0M^2)jg(s4rj)^L8swK)J>tetaQ2d#WmPHikVils90J%(VFgFBA
zKvT!fXeOK_%P~biIO5~m%rii`f&Cx}i%6#OSeWbUp&9r|J{+X-)<-(_oxLX|;KB*p
zfb@Oww#n-Q1+$!gavgC^q(^uDE?+Z3msNakCoWqB5hr?T?1wpAWE>^KWjf78x)m?+
z>yHgpr0jOmg%#&FW~UEU>8b0Xe#PrH8Jr-W_>My*B;$iKFjQ7gzab-e+Ph3AJ6lCN
z0n+}3lLn1*atZ*yCzYwQY-{w3R)BNjiQECiM*hOY(;vtCpwG0D=7~}TtQ^1Yr5M~u
zM;R_LT54eO>iGn8aJjz%q;3g>p3MJV+M+9z>Kle{et$R#$WFo_1*ZIXQISNIor0yi
z8zWd&m28pK&{<>_tp)JS0h8YCX;;1L{6?tVpFyp`s;=pKX&MP5n7v_8PXxm;3PY4B
zXqFNvX}1i&2Us4iApQUYfGSt_hXOXu2QS2S58xbCRM&!FA<?yf@<0#_l36GkRC8&`
zJ~#&g@Tc?V3|AqtMLh;XgjQz(mn=f6O01Mj`Z4JrX#oRZi#5XR#w|BUwz?ibpqPhF
zFUG&7(_TE6H6w{)G)d>dGje*6^-rcX#ByDy^npe!BR|I-4Qx1}bm+$ukg=kUcNW00
z&RyXE50523_V^q)GldpBMDRz<0>c^?2!PT>2;&&;qdpp3Z&0H@<6xCkyIVcKhN>2&
z6~$fv%k<@X_;uhb21Jbc;AYx|temRc8Nm)cN<y-QeSw=J$ugW(Tg)*_zs3r&406nC
zNFvm)SXWm8aE&F#;974gaTG^RC5>szcc0fA%u&ocnGOOyn4VOWtU9d9U9r<7wGo(a
zk?k3td0xbDR$6ehvK)jN<o53dn&N~Xc^QmhEPkD9fn?BWXp<S9S%lfeHkQAeg;#D!
zSRGPm2G&nh)kIlg#@90FHK-zs{qbd)!eJOhNNgU(yn6mzh$kzW%<$4=vHUW*NmVa5
zATJ*B{o-j}Blb3^v5L^bur&>*<>U0fyx-G{g{uYj;Rapn0c&O#`@+^nlW;jUAb;#^
zW?$aOX>8|(1eLVbGT73}aiXm0aPMM{&_tKM;H>#RpSq$xr@o|S*C>!FhU%?OVx`8q
zW6z)*1Tv{M-A9%)J}8J5e;eQsg^n8>eAlGQ_9xrW8g~n)k8sAT`7Z4+=$@*AH<2wh
z$F!0W2>!)2P5JIaZ5#&t!iXd-b2Q`hTH`RuRrF)BHG-7xQeVY=>{WN5HVOH<eVOOQ
z>ws?6pe;9**t#31dp{OjhWgzZY6!d%?9~Qc`v!B7kG{3<w#ly`hIc=#qT4~%TFKcv
zx|Moo<D`W?ZB<s@mCxGi;$|ACev=Zlgej6?lSo5@Ss5D`D=%Us*@p@1V(6GE_E_rX
zQP~!L^-+VV#jfZ&JDA)-0rR~<;$xG)eoKMcae{uI(Qgxt0yc69e3NP1y@AQoGYyT#
zGBtzhT>5rK6V2Qa>4womql#0Whi}+jTj?U>IXsu<C~Ls)<&h^GR%59A9SDUQ<`n<~
z27q*X_?+zwUvphARQu(#Xg)WNC(Lz#g#=L&QHUoLh5?HwM_+ItC<AB&h>rq2J|y(U
zP{c)8K~&6$=LJ<nGdUyRhTjk!9}xxvWH@URa{~o0VB8c>yIaV^Jmv`&po>Wizbq^@
zHP~!H%y;D20ymB}KTNjFn9yP80k1n${&T09X{x>vh2sJ%xZh_$P;LX9O*Gt4;QkYK
z9)FoX9@9w#uZ5B?(t#;79L*VZTFz1Cann6E@{~C5u#qy#Pejmcwi7x-#zYnfLV_|8
zidr_35F#!hVr3#qS$;gOELbKL<F%yVfG(>gt1XwKyi?>=x+33&xy}p|GXqEKjZ9&%
zj}WggfFTD8gd|liBs|tXJUEI8HPTta2Yb4IjP*Ssh;20#TQn-GWouR4wtW!gH}-q?
zq)O|-E`@TI%#c_uAT6bYxgq6=94~N$k}BjO>?R0|z0HFffmKVCBeq(WSRVc-PLOd`
zB`SpW1sT>cy@@qK>oDS3O8?W8Ajr})bkBq(+I&+{f0z4%QX(W0g<7#vrUNRaQl(0<
zO0EYiCX>Z_fos$6yxETT69$8csoK$av{JB!>jjI&YOz|hitUEW<+Eane#h(iaw(1*
z3>9m%+%c(ihAmeII&~J3(8IqU*rWEaO85vFL95BG$VScef|;TaE1J!|VDN<6WeRsh
zYUgd<SUx%Bk=qfUB31;f0xJ0^e-krSEH$IxY{|MkeMSSx9+KCcZDK=P0JeYdj%k>?
zIuUq`;Z42F#HfPJeAftF?(qWu1Wkb-$vU3~sKy-gn^>E9$P&$)v20>}#v>8oU|H`!
zrtqOZ>CMWk!;?6tv~CBUTtCzn#nPaRsw|X?ChwBTG^(A`iMm^+`7qz&%2OE(0Q1Jg
zb*GYw_0TbwZ>)XEcKb-eZNJ-h-u~X}-w>p>ALlzqIc4m5Wg<d_t;f5Coo1{xJi@x7
zkEGK&^VEF2^+K!nau#-6rVrY?HQ_QlnJu%C0Ml(HIX6;s=N9bP)F~V9j}Q70oqI!g
zFV*Nh*Q)k|Jy*gfR4dlY)vDZ!WxX^wX>0gza^TB1u4gsPh~`PQtt)@fbzQX;EB;oy
zLL`!)LP2*)R5ct9OUIYPzyLvk{l}M}u)x#~mJ10CRTUWPEfxoj`<sE`I1kg2<v5SB
z!SOz-dAcswp}_v9LfRj4zujorUkU&MIWPz*M#XNW^Ik6LxK*!sL?)ZX`n$U__}>pv
znCJExk6q(3qS`a{xPSpBr{O@*nBlt@V6sgsViz?|V`wEDAUld%L%B%%#EfTRot+u!
z)$urWhr|+5EIrUB7qKM}|18G-3F5<GpV9v7ij52zgUqhyqq3gLuS$YKwQMo2m@g8-
zCp;<x3W-=*`?qc(siZ#u+<ro7hsk6(9a7nBTC?6{BkQf!wY;*jwDJ<>e;YAZR#sI0
z)6WA408u?$##KJdk>-OX`*~-<i0l9FeYYbr<gV;5h6r-9fV#tc@vIm&LmhNJ%@GrW
z$GE9T#lchu$5azyy@T6O?kLo*d%|(NilyB%n0C8H+U`4oW6psPyB{S9WcRi_BkEyx
z=yOB`bX|+@y}W=0tXFK4W~ym?K}3}U7EfqYI=w<|+ltl8zVN)SBAS$Y2d3#;{aHu?
zqOw!X)#>20AxSbE%qDjBeV{ZOEob>Et$?30aon=fo2gJJXl#~El}#0j+Lv^g)G^5P
zf<{x1S+wGIQ%f`Urb-wfC@|Sj|56SM3{5uMwfl0rWR+}>Rvr3^?1(LCjXzTbNC!Cf
zKmt@)<^hw3)n9_hOA-7aV?`V3q*M=v_ygV|j5!v#V}w|a(_rOUj<W!9KH=|v+n`EV
zY*xF)=8aM26(P+{Lx}0H{<M?L{0)c14$}(!W0uJU4L+7u5J)=0v}Fb7|7Nu;E=eV&
zcrxMC>|DRxLYsv|qh!=8RBjG-bo|K_ak;hn1QJm#Y!&PE|0addHPe8`W{F3$kxy6M
zm5=~`%T<*34gaCf5ov(5mnlNZXdnk|XBIR98^J*7adtNYVNpRYl?p}sP5*_D*RH0s
zW(Ck8-G7C!_7=J}t7eLm!)+tLDl^z~KDQZ61@u}Tr|j(0kftwBw*H+KjF3YoVM#7>
z(qiAKSbEl{Wyv5i+D#Xq7;G8+5nLVtbd^-M_|drNs^Th9yR@#Bo<Q9sWwuh`+QbVN
zt{l0tr3;tOv#af})TwZ0^|UjOjH&IoLfM;q;yzSM5AU8U_TyEZfpyMVH>@ww5R#f=
ziA^P19?kJYJrzE-;0v&`H9<s@T;Wm!-7*$5a8z?MN!W;fl678eWim?1&x!<I_DPl@
zTQru`+Xm2oe^h;yt=V*?U?dWQ-msxPw~wB!Z9b-F2Yq(QWJxKOFfqbdcT8{P+Nq(N
zgIUMr42x%!a?aID--f}4+#+}1vUaj1p<E|1F&d>}QLNKsqbGahbCCGSBwz%nNd!5v
z*^W4CsTcJthzr-rG-gbG$Ol-*JqV5XLDi%*-$n#n(2r3I`cg~)A_?*}qIM}ANRqjJ
zoXi|llvGtbc4~y>ybfbS-Q3~<Bbq-<7RP8!mLt_Z`aj{$i9~Ftq6su47Qc^X-SB`k
zc;OAm3c&49I%rNVn=2(vIGQ?v_k<<g$iE)C0gt{nj*9o-1cXuM!@9~T_@tvsguse~
zDkXL)!LGcTdu?|NnU!U>i`E1+fS|SA*~B@O8tK8cPM4AZxgP7yj_WrV#gGSbW;c&S
z@)JJIlI(gue@;Itx~Mso&lins(t%Fv1Xoqey>To-h?1g$%SngsI<MTwKRchus78}0
zi-SRvhqDz3k`~WwH0(+xjqPCwjkIk<%cv*B@vXK0f!0?h_i5~!Kqg;Of?_;n66YC1
zI>lq+H@a#lXXd?_)O6HB-al6Mmoe4#PkL{j+%Tu&0#b@pYUlJIq4XyFQiXBrNGny2
zf!M@W$({rc;@3}tM9nxx>(O4eD547nE)s7vbq&?BDTKsO6Bf0knw+4b<VwPklOnjU
zsAA5650-J3XyXN(4ON$ARb^5?DqA2(n?_hn+Wb=&<sup__|U;Lu5{h1&8*QB-E1T}
zBte<xMm3>1sidT!RwGU>jY&lHDuj{xxx-<^y^;yk>nul5qXdn3DfT1{7sY3kBZoyb
z;&PZ`;Pt4A#N+_k&IFk_l$wf?>v6lzvY`A#>YRdGG-{N|60V0-G)I*aD}xOPBwj<~
zXjrhr=YN(@xa`~e+u{jj%ZlN3rj4u)i&Wz}tuNFqh^20%ehyR5>dbu2z%L!yH6%hs
zV#Si<c&^2h$;~8M&J6D)PwnYSA_E9h?K>M2=S<ojB>DLPKHNrKD^am}+}~50JjD5M
zg;=*|Y#RljiTvRY1?Jcb53}wrJ}g0`cVvz9Es7YZ1fSO-E?6g&;B;)PVX;&U)<?kr
zB^Y<J28C_1?m_av{}0C!kp+Q}B9H0BqN}8j&Y8mtFqjQTV|`=$CBqrgw5o$2kg&wJ
z1CyNy3mu2^P!aH9TdhhAgVdX=cp1$YNQ`c~ac3w`Y)%7*xFBUYB5ET<{}vKWq?6pC
z#QtBrLTSI^v{JcNu36=l)9G@xvUfV1)#gE+tWXlZsJ6k!6+4=;k~b8!1gj!k2)c34
z4<_(3nrsOl(Z(dU$|T&P>A|?#lfGecZPrZ^to%PwgLJU5vKU^F3VF&=LaIg<uH%Z-
zMMBKF(aXjMkdAuL)!56wKe|2(+`9h-D<rwOU|&z!P+o2sCJ3gSyLmrv#9@g~f~ilw
zO4~GTQXA#|kyFCgHJj_?aH#$<T#y26jd{%JM8Yi0C#T(=h#{$zNGeKYBAj6yQX@fi
z!O*21gTK|M!Y?rO4sFp;>Uc;hVPjyI>4M3mood^P(?KiG{EJ+&+{ikg{Xf_WPzD4@
zi6V3}F9Z&Z42><WTXn|f;NTQvxV6Aww`iqo+;bY+`<thAUq#WxF`L{ky$D20DLEqm
z0)_dER~@KKB>>B=R8da#ZKa{SK%Pm;Rsu=ObHN+Kr`N|M0LDCJ9ZHS~dt|(L<T4A0
z<21}jp6xW+QJ+=0S0QOzsaz*mL^h+<Y_(J?eD>+g%661y$LqDUb}@z<^avaFUv{zO
zF{ah%M9|!LwdY*1uP67n&kD)e=XK}tuJV_!@}C8f^xJj<oc;8{;}hx-1YomJd-OF8
z9jV3czCREbu$bwLY4l{lV63te!w1v1j+;}Q7cHwWfKIK41+RNA04;xw9ROk8U8$%?
zNLE0StF29duyB&l&3>@PbVBYvV}bj7`oH;>Qvd9hi5abq<|*i2=b36S+w|)kzyJ+h
z*NuzzXT~MygQi{HPs$vA(rg|Id5!J^hr4lZc79P4A@x7m6{!)OIWKxAT3m>u1ziES
z{(jBwRRK$RXvEwZ6~1h6voDsKw|*wUQ#<-zmd&++)cY@f2{=W}G)yv#1!S-wgQA@A
z<1s2&#L9ftoJ-r1-n0vo8?zqLU`3BVmOm~B^FPl^j3dl}G}9olIH8i{A;+wksGTr&
zK*_vfjvIm4OL@5gXs6qf9m_i*RDjBGQ)u;vkqKm7aNS`@2p6KADOA8O8l17i%0f>9
z38~UABXpY<l;NPfS{nFi_wBsK)&c*)N(MV`VoC{@MImMjAI@;Fq7TRN55b2SNjJ!t
z;z8@WXTkLoqUVx)W`G0l&uoyS*X%%%K>VK-h|R*Fo)S*gG+;eY${}Vr`(&Nkg5TyS
z#2=03T#HBor7=;t2FXNNw40ygs)R^*%;|+;co-y*V0`$W{*4fU1jxw9|9XhPG6a|c
zCrm+=*1Q71cHezhn*YFt#7qcvKhNuEHw--n2ijo<DF<!;%OiKwdoOWfY#V(?k4yP^
zJl;PP`HiJ%NB*Qcph~Ml+f10Eu+%ge6RJi#=3s}us?${?FV&}Df7I4fDKks#oX?kx
zV#C#M8ou?_LfasZ4j>FFcDDs^X!j3|<qU>#{Iep3-Y#E_^M`2v$R<J~SHga^69AyU
zLBkOXk4PjEsb>@hocUiE{uPt2udDMZG9MwJ%mPJ2P+)MN`nPYKXQ+4R{p5Tz`;H1@
zV@6;)hQqbdtMlJOGdpB1>eK^1;)CR_nH2;!c>mK1_k*J){&-|&GplCGy@7dp-MaP%
zza~oP-~9=Gp1DP4fc3X}p`XGjq`!AjZ%*>|%ubQY)R$Wg+mdn$rN#MynW+=On0+^!
z*q$EuzK#^U4weZ1kOEpt0fU2di&oVf4@e|bz(M|j0m=dX!GWOxsvIp85*nx~Ff^IX
z_ZS#SVoS}gDY<9=3pwvsg0L65qHHgwas>j+Mk7l8ygxY|mdchL+b;}f;+mH=kV+=3
zGVjVfw4&9cDBf(LJdAXqk4wMB0D8s<s#tvF_BrSy0?eavAcPkoI`m&_Yr>L-2^A<%
zpg@Jxo+k|k5Y+4l)83>|thbn`aIz6;`DR_jQ*ZeT5WFE`z<>n}7%-%B>MKTfa-;YI
z&-3dM0K~P6!^W%L4yA3uH{CY9yPbA^wOOIxm071giHG6rN16~BwUZxtX5yAkTRNr?
z9kV0)h}oLv+Be7Iw;0<ZdsTO4Q^l2Bd9uDNa-NOn-e`Vljm8K6+^$2&%D2s(={NOf
zv^3Q|ZLPVE@l~AqrnnzVcUe!hItUjEVVhN-ZuUI>@%W6Z;BHkFs_iuoX6w6sS7I({
zfPcrWLr$5JA-la)&+@@TPx>1F@DWez(a*dclD!$a7>PVl*Qd{U7*;Odc`qnA?do3*
zB}cn$E96!eSrY_nkRm&$|MtGPin94UR5_BRw8zina6&l%B^pd9lhW@Ii<7~UMf~h~
z`#99Z>%zNxcx@;it+RdYVXa@-$^k`_$_<}$x>W0Q)XKMj>Rq|HX^l?T%)RL`dZ2oH
zhm{1>TkazOUj2yo`o^K9!*Kd_Yh&du^i7&2?+NDTqrGX83J=|c@>0HznuCLf9j#?i
zrTI3m`m;((%+4b!=d%Xvwth71cB3m&s}8JYc?y$a{ecKdYv;j01|3qisWM#VEFRtT
z&1lZ*Y+w>if8(`L`Rtf`zn*JUqB`+=)3`+T8YHpRefB5iTA_305#8lwRkLfZ^J(ky
z>z5-zg}`IS6U#yWtq9VNqNsjwaL+<KmiG%qx$yE_smmujlnGUSkM~)1<L1jb=;5(-
zOdjJRcht*~5r&C<dXPf;sCv3_v<ZEW54-M;yzxXphH$0()V-aU(OHi!Z_PP|I>zS^
z;)AYl?&M%kB~nc0J%5Y$Qc|A!O7lcjW#dWjxl!Hs%A3Ek)@<dEUUBV}Rt>euJbc`!
ze7zUY4<raVLaxCL3frURAMRWbQkY1Z&U7Pb7@bY2y_|_?bdU;~6BXqsgo;cn^{pSK
zn~lKEs5>#po$JTi+sxX#&><9yQ(R--E6qCDj89-Afc5|bFxlV&7eQEZTM$WN@=XeF
zffzvM)Z_>f86sOIOyzxz!E`WdE=@KFn}l`3M)6Y)N}Y}Z2l11D;i&E+3!jOHqW-+>
zBa|HxC9n%ShB&^Ysu9X$i3$+ibZ-C8=;Ap+UqE|=WkrRt3XC!%w8=G;`vjYO<bo|P
zxk_nYJNY7cBLFKSL9!eHI!^&9J_6=yVAXsHF{h|b<02I99H(>>J=MHVwF(MwHj>A-
zUrLXkh;-=Off+~0Lets;tvKFg?K3z6mekR}bn=ZvKUUP_KufannZk~I*0@vQ+7N((
z5djJi2-8v}!(uWOhUH*rW!8j29oc4^lH``n6R8_*wS$8z03k%gD+Hy4gef%B6QYAc
ztUmHvVUd4QK@%>R4>cnJQf-o|M^DS?30$sql?c7`hD|*9%vFAT6zXF55d0I54}!W3
z#wz_Rd5DSVJ6VX8q-*J9C1hthUZwg-J=LRCl<$Pn3NjVynVSAM(jq7mVw8bsmZZT3
z-6Tq*9rAIH7=DAK;v)$I=5Q(i4KcOXza7dt&UH1fX-`~Z+;0O!oF%jgW9Alzm4&?Z
zUHfWwn(B?0^#zmB<D+C)cO%}=8$#tRzOlPx(1&<U9OC<xEF($PYtk&#pWG0XIN%YW
zOyD2^lnFQljyAxU;#@_rzoC#}p@X5Lp~IoFUE-O@z9$R<&lnLb7g{w;L4YbaCOM}f
zYbIE&!bZj|2`ft5#+3+`jeHiGnTw?L`d3T4z~X3i>KQW?TkTz=0+TJqLQK{;({TxF
zBzX(WE_7?!_N3LByMxn?y)A8P&UcvBDZ*O#MhN^8rBk8JK!{g}{u23f!Ji>KG}w@Z
zD4i57BBcTII(lf|L<fxhh|vQxZ(t4tMv%-T99s$QD76{b4pF60QfY!rv?O=hucKs2
zfy?a&C&Tbee)dQBo1QRP@*Kv6L^jSuVj`E~Tf4UKucPL!@fg*PZ!U_dP=~AOs#>{?
zO32b35Idwv1&~}w5gdmv5lk^C$5YTM98HKX{QNQ@+kST-1D?a5N0|cIK$eVPN)wq7
z^B1I*ov<D_Kv+E60Mp-PL4WE#l20#(K@h#$KWf*{2G}8Gh@OD8ag*Q<!b)rbTQKdA
zOnweqWRm_A{YB)1AB%u<fet$)lZmh%c)?i+CxCh!CEJxS_ih{~2)7v=DSE(s{^zv&
z!uCVFr^EuopU;f<jw|6-06tbyo}$qE((}6k_jKWJ0Qy-L`0t?atImI|51jYK5H$4d
z`r}wia9M%hX(Kz%3~WuFWcK6G6lr9m@&Af7K)r(#0YV*6m+#fo4TZ|~CsAP6*9kTV
z!??ou2!I+$eWR*D;1Xa!ka73_(C-x;10zDuGFcHl6!=gu;UPN;jf%UR%8rtY@Q@xg
zy}6hj#7X3Ki8c*Gx3{~|A1D<&W2&!KAra~!Bd(?O+T~ZEZFR=QVM#SzLGo?*M$Q>T
zp1oVWvG#%u6ZY!vVS@PdvAh8KZG5AOGt8;~-5iH9XX5$#;kT%h6R62>It#P*n~bBs
zEc@H}J2qau(ITirkK<3>fugj%*cyROzJTK2Pvq+FzD`ne16(7z)I7S@T^XFpG9Z*i
zR2oic6xj~#g&0{th=yP!5DrKP7L38rq=b*4Td(lEXsw7jLerF*ta{yOt;zY;kpi6T
zt5Gni2J9v~fC7T3fe--tKvvy}mk-bOXdAToI<m45due0t+EUfIrOPW@xtp7Pj)l4;
zgUv}6n4V}1#z;O^2;62N#X_2iBpXpGqCCo$>hg{zoxbUkDQ7R&Pzlm-0BvNmCE^nY
zbN4GEfbPwIHB5NDabTQ{w2BKQ)M3k$4C>ghT$JE?MCtA1gqg2x3>c`(6Q3@UKb{z1
zmKG?fyXt$dxvzJ-uW$lOcz31`bcmV)X832ZF&BNA0=H+qnVh_^?*alDW_ZFtX5mE|
zkNgu@Moz}S(a7C^LHqH^J}`v9aJQ@>4UPjlRP#)EMXH_pa^>51MvH*4E&&s7xLszd
zxnqOFwDp*PmeC+e8aS$`E4X?D6~?j@I8kvktKeJCA^!@@?#>`|=s5^%+@LJmG&FGe
z_+Lwq-DjZG1l7BXERA7+)x4VG8u3blT@7*8M?(z|AW4)kVG0o{S+sEB3K}qJ)UaU-
z8#>uddWG}p6(B&_eR_p6df;{9rcsw53_(%)PnY^i<Th=D)|5U%W2U&mFdj5W5?BZ#
ziV;!3kt8rd7fGBlF%^BryB~B$eBW?}d|z?KeBW^feQ)ZgU|wXCO#5NDZ_e=v`gd}{
z-lWexJckYLCorb(;m7c3Z}tk;N&0&RSWr*FKNba2%B5IFp@3Kw$x3(Q-rn4@8*af@
zmsjwilKyWdn7E^~9x&OD{oaf<_uor18QHpP`InECH|Qm=mp7f)Dpk(9!k{a*cF3Cv
zY&asKq_01Ef<+xF^RaTR1<XLdOHmvHb{hISw=Uk_0}d>?GUiVsceQITW?ftOvG~_0
zSThTIOv*MNd%;Iue-OkR6U{so)m)d{z8U168pX2he}Wu(hu~MNmMhot6_d<pwOTCK
zF3RZoT&_G9xqUw!VKG=t*25KzM`hDlOgE!7ojp!zHJVK}BKOoDAUmCr5oWQfhepr8
zmI;Hf;%pVJbaoDrfrNb)!c@IM_|As}n9Pp)tEMbtnV9|{4<820fZRspVz80@xouoI
zp+g4VB3D8<o|+O$5a8Mvl)SJ$Xlx4z;(-y6Zzk+p%*lN&<==)eA#2Jgs^!L>v!$aa
zO@LW=B)-v`S!CyfwfAEfW6F()HeuO$VgRxlFaV{}s(w_(q-yK2BIx^+@gs{G*w7|c
z89*0C{p-C)#R?#87)>~N5+sA`hGmla3rV$#{)_*YT=i4$w+kzYoVRoB*N^r(`{VLQ
z@b)JJpvg4f(7`3$01DTA`(sU+%koFQ&MIOmAg?1xt6ouI9>~YFs&@eY9og@|{`Y;&
z?`KT89$~{mgxUKrBMDMQgeWN`QN@h&5PLg)rlBIU(=vTPlNJOlNOG{Ap@odKM3dIi
zbni_XdvkNvt!@;ndZ+U?19q#*+gQ8JTwL8j5TQNl-Ya4;D|z7Fx!LayM{J(}5Fi^!
z4%|G5(0~F1cr<|0fV~}?hkBmmUI2k|JQXb~H8(X!ExT0m4N(Y^5wf9_ytJ$sy_k8?
z_2RVpivLeIOu${V!5%;={d^Wx@^+V#{)#2LZ3YJil4PSK9VKbvxzP)V6;N)QCRKF*
z5g5P}qnCR(uyARc6SQj`?;*f3=1RQPCQW)wld)Zv`gGIN(Z|f+F`${22Z0NuTyFV?
zr>-;p&M4rNqIbUBGjMv2fw6tPtFjljDY!dM|NdR|i%f1@Xn-U0gIIOKSU!R?;Bihs
zCpG_UOoA=|PDBE7d}IN)A4f+F-u~BBcY)nMCclEK-;q>R<?Y?EKu5htVEsQp_4p62
zuWY|R!2vz+K;CyCuX^CuJwWTHE$4qL#<$weCg$WS<Fb9yvwVb{_s`#|%${>PE1Ndq
zLL$vzbrs8>qrww@0r)?_{ygTh+Om>C9OCfM?gWcl9w>;%Rbr$`#CkPv1AYc32TAw_
z<KO!Ry%NK6mz2Fv+_c}#MQszpJ!}`!UvN{?UyM&JC+Y+6V$1@j`Oo#cLvf?U>DLQZ
z>p!64M!wnh`XS0Xt3PUkAezx$Z6IX4g*eAP>Fg7wIn<snI)zl}7{i}Y*D5m#I{s(#
zyi=_G9#A5gM%bizao>0{p0Z{nu5>6z;z&}KUtD<W&rOTV3rvjc9A^4tW@u{M*2ku+
zWv5`p`mciJ>iJ=Qnm_HS-5H%Ty4bP+YWnIG;Z-bERif6vwC}fk<S825Ms*@iEa<7o
zAgNFgyGAAIO?Q8YIu@8V@{pvTLfadRBu&+kth7<>V`<~s@>dF671eJ=<t}ktLru`t
z@z?61ZS!xIe%kK}u|&ATO9TR}w7{2!f*5l+Vx6SyL+z=d<VrLPW+N*&+lFd>dA^IE
zwqh-7%I(d=?UB^6CbN<6utWlFfyFDQtBN$Hj6C)NP2tHgs+YYAv79EFTYMbPJDfa0
z;_I+IYYQ5;_ag8veGL=A-3IrMP}?sOL+Ro<jG2DZv$%CbBdrr=+5B1zXxA@t!{MXb
zTpyI%m08=0N|b;5eTm38^lQYo-`3DOjP8$0=F_s4_Kj<P;fubJ{ghGMfdKbh_*4c9
zuT$TsB5{r0U#KU^?`wVQ<KwKJ3CU)dcpd0<ojHZIU58hX5hF{=%D^-gl@&d9SJ=jT
zh;WH<ihqaXMT+?n5lpBqmCNNz^-=#0Xf6$8?e!Y70(d(Ssm>b7WHK1Rr#fnGTIT+M
z<G7qhz#EipU~>dc>cALEBrf3bcs`s0%lR8;_D#S#3`&;y7d;Q6T!Xyzk*I)0B7>!%
zk}5T8JRFipB-21jM5<W!FPcuq(_XdvROtzmXVId7j$X(&2-PngL8*<3M#`1m%aF`@
z`k8n#CEjX_>AI{~J0gj2&~gklCf#HZtSv&M>Nlz-qqpgjwNxkr&bkwSpq61HWyG?S
zcuMmT5Pnd<E|2B#HzErTZ%_qifCj140qD-M@9j*r>l7Fj*mc~*_NBB}Sp<>oi8diW
zSwLFi>2f(6{E$jZ$sY43Tuz_-uD6`7L6GR&6a$qcytl<{`iRuzY1!|d^w6rU#qnv;
z$MTevE=o@uwO}J!B@@IDp(0oG9`8xWCfm=p<*P|&IJlxWUsA>oPE(Ga`-d+8RK=cs
z^#n>l3%%Hp&~)q=HTbUtKJf+Gh7diSvQnk4<=0}rME4wiLzXpO9np(O#(3!Qm)Wk}
zjII{mSnag*IQ#@Suf~cnR}H4Zd!H9%4N_~6te68$hv51}gIHlEszqci6vGX0Nj$*>
z+mOeC8;<Z@OG0mKS(4;IR&ljMtx?fdAW`VS%;<9r)*4|}>~}q1JB*u4ayYf9-Ln}G
z3cc;4m1{YsKC6d3IEU)Ky4A}}B88xa?~pES{?WF%9@Dk}=AI32@+;Hb%5vr4_qe04
zspxmXE1!M(Yk;1Q7!d415esuJ;V=+<xW(FnuoHYqxYxd^b3?KFO0gBsEiS>Z5Q0_K
zs}o3NX*!56tUE^IubBmo%yE&R@*>lwVo-eBMqaL=`VzhVy=VpzDmTufgbmpny7cm)
zkJ`L|6zKv4dci9L78jo+KCxkZeCX)(0@C4$)ZzW89})IbmJcnTelJ8|51+I^Z1PBv
z!7GLqm$ZUx@<h_;?Q{x!Maz1s{=GB`S+kPebLrfvyimzUPn)ME@DA)(0U@Q82$v^&
zRVtIgpC`eAPfbjyOE(HMU^K&Ts1F}?>BEJbpyz}X14T%f0w8q4TVi-X?!(*jqn$;C
zILluiE*X=mB@bX({KFYp)w`-fGFuJitbvoELg?Y5-9iG`l%7fbVP+w{T7lc1>q~_8
z3Bu|3At)-<4^-*5U?n-Df*<QVSWK4Is#R=UnN_ApOCZ7SxEgk9yVJ}+zIs9X7Q|Af
zZgjp9^s4fY?A8nMC4Mk!z^8<lVMvz76&kS#-xn7+ktVEzSe07jm9lu7T$N|*&xnTU
zlVx})k-;*1!i!sjN4kP%0>$H*cObubcc!_Y5;VBfOiUJ%M`&S5sx!16&D4$C>TBtM
zB#R1Pvd={r!_CA7eYL9?@0j?qsAwve{?axZneMn+Y?{puu~1EiM)R~dRH_tT3DWz)
z)R03pnxgoQj_jz(R!jRk!>3_I*0fS5Bjn8Se>X~ij&4Uvh`ZUc?sS&vNU;gcWD4jO
zTfxp#%ob{;P+7|yFj-@jySqAM>b9FujuX5tWwEoJbT1t8IT2nSQXzR^IoczSQldj;
z7JTd)z3yXPmaytqH<z`zYJ+mPN4zWFB)1%gxZFXYp~<wMHMK1TZzM@eVh@ao`M&rQ
z2Ly!u!#w|lFcTaAoS|W1CR>sIX<;UKfLFr<LQOUzgA+ncaDcG-hj<%o#C&fF4*&<C
zL17|n#QHPB4R`>!{eEGmfA+-i^xSBes8LBda8NyOD3Qn0!Jz&~oN*?I5sGP~U7giG
zWC2K?*b_D5U7a|d`f0@YmrlpV!nr<`Q%Q5Ko{uGT_}`VBTYLf=JA80+S!$&~furwb
zNHI^2y*bbypXz&{d%r}r-rfMSPKf@*^1$yOXJlGOdAt*d<;l?dD?o7x_=Z?W-f{|a
zH>CUB`li8JD#F1+Iv^g=lZhbG(GMv=@sCr~RE&lQY($_D4N9Wu>Gd_@21fR9Fd#(q
zHRfSOKqDT@^YNK=YA%2f+?C9VZpY8CAP5o&{Ward<BB?60X<cy`=3FrgdD|oy<TD2
z_q8Y9T~RL5AVh+jIs>JegRhCC4m82g-`6M|ea1=_+L|uDJr<NiLiR@kh?rPurLn&U
zArG!Hx>t8e?T2HKkNLV8Qd5_PY6{Ocjfg7;T7&AO(~gDN(i;E>jNhV_r)-kcr)&}a
z<s(Hc_aeqtPVC@xUfe1~vE4K-cHHW&AtK>0%UIr+Qj`_YNH92BPZ%Opl*Jr%@gy&*
zrv38(Tdj{!JX{0}@(pHokkiqxLNAmCEfP^++YIO~e~_1w0W8v~Hw-TaYrM&$;`OO3
zOm=i6MbM^qtw*-kRU}*yFRKb-h~BG7xwOA%=sPv(P6flaebzL)Ob*Z3YG>!L^rnoo
zxwR~6;#_$C>db26iWOR6qRFR1rq;VLA$UEA9KzqB&nSiM-$Y16R9wWGz)nKa#w5G+
zfM{9RmsJ#xY2V!$jpfh%<{sYMA>&bG3L!UHv=4i(#VlQxFQCZE9ub$d_yUwzzNjf7
z;S?ZA@`fHfKDywK+4f1yHMR~0T0$)^@!WVz4iVJH0^MvZEmd$bnwztuZ!yK9gQeD|
ziJ6TZ_+$J`D!O9o-L*;+C~cJI^BlnFII{aLdDu>OOHpO0nPX&2-nVdUBve1v@0zJ4
zltrUZRy99)1iA+jNRn~4_=?rYwWy30xq1&+*(90N$%A}eE{U;PUuZWx*c>a$rEx?*
zT_8XsOXU%hJErzv&4m$=2At8hmS~^i&P&rghYH=wi070fGYRG7%uwb5Cg-#2eLQk<
zlQ9zGG>L>#W;S9W?|@?v<`G2;fDdAJWa1HW8#qs20}Q|{`U>d{BP3MKOwsSv^G!$z
zDG7oMXENlpHIKHrN@{LQ#9FxM<>b2gy*N%?zRd5r<vo<>J5MJI>Gi$Sb7nvQdM9FM
zeoy@D#>u(WlIp1pK0K?xmu}fOY)Y|RmL_P`2||*hT2*Kh&);MtzHC4k*A&Z*H|;UI
z>`^`znuDjZV8TMS#vSP-+#d@8Nk{i^Vpj>On%feY@O9}f#D;+D>ERdcE)%R3p>liQ
zO)w*nAQTLZd-2X2zR2%ZK9i<8LlOr-(S~T$s4S%g^9$JVZQm?W>pytaOB!nM&T<?3
zdu^Vs5wTACzTFTBJ8d{CL|U!UM@+&>$+sG<DfZ40mN-;H5<WKqLb8v*<VaStf0=X8
zg`S7#4=Tmq*2j^XzyWV$H7y~Wle`+l!~tGHwd6qvt&dQ(Sa=!xr+JzRxuSjKD2JKd
zSy$z0DQ&;b<NkT8i@QEKL&niRSoPL^c8Z_9;sFeqrE<<`ty>$%zxaee>=cd4hUSf7
zY2m}(P>;BU_D`7Be=Id-ggl?8^jNS4Cwvo6?ay`8+wRbG*eX^Z>@Sd>TqG5I1#lOd
z+87Xw03nhu56pLQQfw~g9W@Z4p=~r{fM$zNOrUrkVICb+6AB63Dvm_ESeT-{MOE|W
zw!cmsl^T%RVeI0{H}piUJXw@>ejNrZg05828lTom=*#6jN*2I*2@cnSv3Leo>uRRu
zjIyDA?chZEEVbl=eHI!KKq@Qy=o{Qe*k<n~U`e@-8VIv86p)b9%h(6i{Ec(Kkq#<&
z%@}M|3@rvnricnA+7(np5NmoRlVAU6tPQ}@<K+|4Muh@Ko%6KKbhL9no3Av#nomuf
z5wkL~9N3RghtRyk^TMzgyC6MJDVSEC&F_vit1V3<_TC%`^vJ^EFTg*M)_7d5xp*Jl
zY|0h$E*?pT{e<cGm`|q_gO^9<SU5WdpThZ&YbCT-1ZV9eRXi9#k{_?ik@4+h3Xz{O
zyqgizBmdg3wTvHm(@RqfM<=%kT8?|JZB)|yDDD&<%R0FShD1my<Mb-Rfa4aQ=ODWf
z5`rUC+kGA*24GN#7igAaIq*36iVA_z(Rk;Q-H3=Gf&Duu5>9N907YaZQVbMan12;5
z)Z<C3sqOH_@-4s;nkcvo>efMj1Ec(Y2PVibRIx55KOQ$!p(AhQBAk-XQ$=Pdt&fi;
zjNp?Y07eE?l1ySiQDnR^YKiQLe?XP^QAMDt{7X^RXLcb^yMyi72=4_NK!)VD04(L8
zzSe&m9;>HXiYv3*%5dG7{G3F~+Py7JK&de!uDrX9?3N*VgPWf=k5z-Ppy{f2rpiY?
zaOnzPGhAbQGwTqoS<lPDnDU!xBEEVPye>n<N33N?*%9n3k4rOffmtCd{-Q|DOdyc&
zk>xV(%*0PiJQ5sa2lj>V_;{6PCDP`k{TEqQr=}<pD`gpv5EwpiAsOB>T=_L`?OZf)
zzEXGV-Z?roUiwg=ocrJ9hn+zU^2$l-C2B}Q;6##SxE;4P%hp(=;AFW^g#-NzT|}Ra
zTD|3vLa3IkR!+aziTgVUN~r$E0pvNQ{SUvgyn(;co{lBqF|LBJ0P)-3Tt*m#jz)8O
ztq+r;;%_s#Ii+a70_f~~eBK*qHGtYVIrJlGGgmiwvWbYPtN1j$)eiSH`Gv1vtLH%-
zmwr$#M=avi0e2A$qY2MCRN^zC>+>qLSK{lRRyos&^a44C>kp5Sui$sq$2BJf&MY-{
zvN7UgS#b=?mPz>Ae^3j$e}q$WyR_tfqQ#mlFGE_`z%jN}mD>Ki&c0|j@Oq3sBsp}U
zAhinIqkcoCLl$b$yP9G}QwVJoz`{;)#t}AuD%Sx+hnf;p>dtuSu3eDc#9p-eGSaaN
zl?s(bc8a|pB4rw1s({xWTSbel*S@0<fH7BEf&pWo__7LYL!;W1qIMo)q__@^w|-|w
zdJ}TFkxdKa9<X%LEwi?~=nLHJ2KdnE4$9J(a74m6Yn85Rxrw%%wP1d)X}l4kZo5p$
zXn3M}&IbM<>DW;%Lrdz@Q$2o*yaXbGf|5YU$L>IGIssQ=)p=-X_O+V2^JnhY#2q^i
z^F)>%woAX7xrmYxiseYa8%66x&7dbk@*`hTJxdYeV3@2E$_nB5|Hi>Dkn@80hF9NL
zpv&Bj@k~Js(svC}!aF4g$A%p!_(I~2p>&{N;HZMT_6!|%EsLt*sj2=S05(9$zsQR-
z`0e1g^1OR_(X;CXr&B&?&v-@upAQ>@ll~H^!<j390a=&WXXFVNPPC&kw`j3#=&g*A
zT~d3<ffd|}AOU5aT7}Iv<2|zD76Jt&<Jzn)3<%YHD=Di=bLR)LhOounF>Fv1*^)9t
z;z6{q1*{f%l`T-;i}pDveduxFdAj1Mf6D)kIjJ2wc(tJ`DJA8QAsLfV?SV-R_MDQp
z^Sw%Rmm}RXz6>0*PE(_%JDt$<_G&^tmbC1d7nD%*HB{%rRy-sK<rdeokcvc2LmCW3
z87Hw$Be=#eGP4>(RB6N$6cPQipK*7mp=1ZzdU>_8vk1ptqWuw5x?t&Wo?&N%ye6v?
z$dN0`qB3W1g836NUys-`-!nLKat?*aO=rF5<Xr0owibbgu5BR>0=N1IU4!z$XgXba
z^*FhEvAj9Zjkzr&-*fFLVox55$V%UGA(S7-$058{_^pupj1gualw7;D$C<<fd!M`C
zZ1v~-%ginTB<9>D$0TGFv8XkUtZFrg$XQD#dxUBt*FKancxX?~>12wAw;*q&ZhIQQ
zfgCMeH9{_G$^HqSeF@!mFQ`RZQK2Ae#M`RYcvlZk^u{XQE@~;Rr?ghyVo%=3j{J%3
z@R>Sq)}WvHS?lmkemVmt@Duo((jR;n*^UZ9E!(PsDiX%1gPC+EP(_2F1Twu)W<#Bi
zy=1s!Bx69v6buHuskpLl!n1f_LnZ}PbIkR=%$X^xrxNz+-wmY_SHtoDyKi4Kl)71b
zHOI`3ER4*VP`gVNhaW2d0G_znxr**p>=y4X>OvvYYW>3dGIHkRrjDQIn&|fvVOp|p
zsYQpF{$8$(wLH1nBWDqmvmn^QeHgZaNk83Atfz9IAdD{@`4Za_O71-RhQY=Id*3<?
zMC!W_nqtKpvLy6dvv+lgSx3%64Z`#(!EX@PNm>|H+cj*&=usM-7$z!mpySYE7vn6e
zbb%3nW5RPXT2xrEgV5s!k1q$Pgc>coIKqo_H_Z_Y?G$;B95H(_&iE%aQdbHkBZNcd
zLR@~nY{TGDXS7>tU#{d*{l(XKuCvVIaxETCgo%r)pZ@dJ+->wf+}Lj2b(ZC(1ZP_>
zRQ83Yp2`JCN4=s`db4utYlh@p9z^?k<Dk+<iD*h#JtyPXcp#-gZ_368jqvH$f(W@t
zhr!D+7U|iN)gyb&@+|phKd%p*bV!F_tyAOrL$LHiPQ)Xh)^ezWnb^!M@QRY+Se}xT
z-bs)WkI)k^ENo-HB5qndTK*^htb6F8+!jOj%-=Mh^EqT3P$XX>q2NQ#39>Q6dc(sU
zH@OA|bCqv@(ld`)800Jzg$ip>*Jkq>@>3D|&KuFqsm%K%i@69!>t3%yN++<}e^1ho
z=F-%s##NPz)4&xv@FK%n{LVW-q)#N^l7!A7&PHg!oEZ+l69UKqSN+_w2o+`U8+CK7
zxeP%Ss<>7p)Y{nz7#-3A7)%wq%o%Y15>7z!ZtS$KDQ4;+CB2mOnQ;8ty_P3MWp_py
z81JcWDY#syhSrz((-)o;%8Vt+{&w)J52&5xT;7@$S}S9GVp*lS&Uk^Tr~v1Om){G7
zDnR^W(Ep%Snd-%TA;uX2n22{{4bv}|nLhTSdcc90xYXyt^yBc_l$jO<RU1p~!8Yjn
zH)@))MW7goTPL1QjD(OwmUAbIx^M^U0U5?ZKZ9k%GFbsD_G}9hLarT=&ITzJA7I95
zPubwfo~K||-dYVLL`@-ExN_u338B#Pv3FyUFei40t>~T1vG5rRudRwF#w4If7CLf*
zPPsZ}MA2OZG^mi*p%(0{BJ8?db9f%Ucp|<SZyZ^;YCuNp$(3B{eEQiyQ_2_QQ#m1)
z!J;mxC;v_OfpdCpgoG#mgs3ZTws=><h4wM0%}2nNakIs}u>PGB-&ddKqZeSH5>_zI
zCSPfJv6`U`5+o^&*N}$%UvY(BWp~+HGF}0NbE5$&Qz;BpFQ<BXJrBDErQUf${d`&G
zNw-iqI7r32E_D%Yw8#O2>?O@ifpV;82vlb58rxq@tCFUMwc}5ge~RM_rBqj{tO7RM
z!%5WyTLIO^<r~zFF09;o!~@-&5qKcN6Kc)KiAiI6Y-SW(a?{F#*V5g`0BvrfsH{LT
zNSs^a2=ORafT42%DO~j411(l^fs$h`8?4Wn|7wb{7gwx>$;>vi8hf$w;cAkcr)tjz
zs#?FK4OG=9WcXXu<{^j`G>sg`yaI_`4!ChMc4V-P<6r?n?Cg-Wt+QMPllL%VjH;Z~
z!MUhm#b|Dr%Q}yxMCI1;!s}Elsy8h>NYf;}F&1;3c{-RFs*`~kuI;Q`$(cf87dx^6
z5*w7xA2K_~GY`zs+ceFTvZmYoYX_(Ab9k^Wwh8zHM$iIcF+?!^n;@IScooE}Gaebg
zm@<LRe|u(a)!W*tbn4Mc!>m#}YispqFL@=UY*@`WJzd*`=AhifO<!vz&z}sww_#gr
zziGI7{_DDFSiFXXr_gj=BZ`Ti?fjVp&Xt~nXyNWHOWv_if%QqoN+wzu(9$8|@7th!
z+JR_t-N+bK{J(8(gD@u&8gnY-D9rLLX`}>{pPpc3AR9x}4guj!YO4zY3V^8k1I+*^
zE~uUZ2|7epq!>)5d-}%uSSZ3x!56!tS}IXSztYe+tA;U7EIFR9q?Rs!28<GaEt?R&
zVo{irlR)zPCP05CS1+tx%K0nHfe#t);{{E_`*up!zTEo3xgNA`bt*^Cel}R=*BFsv
zyb#Y4Cq)Pv>H7%BBv&7J!>5u$&ch__WX(=BkRgs+<vA&?*MplP9|?UHtw@i*^GTp$
zEY)Nt@27YJyb||+-FKpZR{mjjl?Y}5kGZQIARb7O1p+cQ)RhCK6ldDk6`Za-joxD{
z`SD4@NS6(*obp0}fK<SaZwRA*-KE-G)~)-<6YWLPCLva@dT@aLy{b}<0%6m%y$ItK
zXhHuRF^+QJs%H}xZ%VF=zt4!P;A1jW7`n_%0?M<$Uzp(gH}SQh36Ck-cTX%ln#vnY
z-uQ^Rbzye#l}hj+12<2Zx~F(7mZ|xB;{?#$cPe`?CvE&^T@_wcx84A@rN0d7#S~xU
z{7x$)E43x%xk<S0!G_Z}_e$&uaR?_GN5rA^I)V0&;Qn4o<f@z4w98#tVYE;-dWhxm
z+2BvySm}Q5@*^>;%*+Y%@iP4#;%FZEh?ULW76Cbu@4v(=wHVHAiWJR;(z7#eF$5DQ
z<X08?l5&f~wlyWn-br5Fd*asbhE3tcS{jM%5qdc)YlQ!O6QBZ}1eKpAw%_`HtMmGY
z<-;Q7IaDj({IAx-6UnVlcI(u|9{UcoDQmb4z5J1ZP}yBxk=4{EjdcnlSJP4PER3KQ
z(+6}B*Vj~{dz)5l+#RG~a=Jc!C*TnAuQ<iH47~5s<iArozTvIXyCN#EGHcsGa=bi=
z5Z?wuv#)%n3rC<14|rynOc5AUul7Pxx~j&muVYqIYLo?qT<44f>IPN8HCbyJ$WASZ
zFYJG?U%V2r{8Im)wWXh<Y09eCW@PiaSW*|Uf0}%hi%vf8Gto9|C6xxSe*u>d4~ny#
zwBTJPm<#|@CRR#_O9=8j#dJWv^3pg*;;cY~uY55jDHa6r>&`JreM)<X**o2Qc*>qZ
z84Z!Kj!-*=u}i$(-cmbp!;(qEmXg-mU};dk^7jF80f!h~3vdDPWHXD7gjpk$k{zF+
zZw|Ut;ko(Hn;O{Bu<3(*^g@GANaabg97zMoz)*#37DK6l4B<-)!T~>X)DL33rXhcV
zygtf!KG;SYgMO<ORGI%ZJRc16alMM^T+Azc*E_uWN|UV<0$yRDp~_P}#vyqG*hSaz
zw*j!%?4v%XW%YYb52sf!UfOs*;HINOZFn^@Lu$i>%;~>MYiuv7O*`NJ0B<svR{R--
zKFbwjMcK$ps)nQ2P$1=6v{7M~aLwBH*eu#bAk8)#)TpuN%|BJINm{6gNAf3RYuaa=
z0-;u$dfaeS*DeyAlvgf=sbw`ABw;BZW@#HY16&x)0ds&VUIk^<rt-IdT|VX3AwpIc
z5okwgDJ9+jLV2Xh34}~MG&1A_(}{RN3w3?y4JNS9p>n9UoeoSv?UaLmlG`;&pKJf{
zI#J%dh;)z1x`EBR7m*e8G$X9Q@caS6-*KMMGc7C?wqp~p4m7R;Jw3qckNKzT$U0DU
z%Dd`aZ_FCxAD+K8rgidf_@_)jdjYUtGkP$cKIlHVKwX-XD*~FGguYgxt%$>^C>bmD
zeWjN8o8`?*Je<cajAP$8)Lf4pr)JR@ULy#>nTX-(d|)B~lopmY%hjyiAK+!CSw}Sx
zoq0ZJi0T@UtI8N%b_w+&XZevAjofBg{a%*Epv-+-oF~o4xNWm};t#NIp6!XUIhbGN
z)&1NEaRySGej%#SZkUR3zi8X8<=*)R<0tR4_kJ5!&^2){;PLzC<>nox++H3Osdt-j
zWrL~)^^$F73@J4^OYieVxKw!64T_eR7P~B7W#|!v=hm$PS6>55oZnCU57zW0SOD+0
z*Ujrw{Lq%G`>nwJ6`)1sN2`={&A7Gez68;d?mV-V;053)x6~`Esw={{yydXAW`u#p
z9Z-4B8=LmSK_a-nNsU)eOQfo|ub1{eP~~q+NXIP<jPC$WE$}KaDY91<>J3wUW%2@l
z0C|Nji)XX?kZ(ZdyS(fXOHWv>9Y7kIx~Uy@=4SHUMwrU4HzzT;g7>1L#=uZSEgkSh
ze3mhxG7FjlKiMZIfJk<cw51q3>w!`%Z{>mu0Tu7KIh{AHEHD=q9UXR^Rkqx4zQIvC
z&K&JwN`_UdLRblu79Bb4T}s_KQdAZ)To<UXEy1j?r;bwy%7cQHWnHTgtzDc@uH)iY
zqsyvxx0(gc-$PU3o+|2GNsZ&D;-p4uvtQAYGx}lqUuKAsoW>-Vy)xWz{Oc~>w!q{C
zziLAoS06LldcISS+r;y>^UuVamj4@l$DB#$`7Qsv?)M2omDy47!s^jTSM&067wby(
zT07U+G2}dsw^`pUmPrgEUX`x7___U~;l~e`=ek)(s)u`6zm37TXx`<qjT)s+NApFO
zCf{!>Drsy@G4GvgDJpJiNghzY%)_O-!f-JJ0Tx>!z@!?XJxvWCsQ7+svU#7cxpgKr
zJpqb{WZ}7Jd`EEqcM|&RpQ(<8Zr2!#QaBXRyD!a^tR$`DfArZ*SM|tH)^+`M2~I_f
zB4Tq!ES}!g{Yqbc=Nr+MQzbzhQucXDG4T;$;+GgG;Zj(VsVJ7$xd0E6CBzlGq{zl>
zc2OCFizQNJ)R?RweePb-QBFtxiV~r7RzSu4lxqhL*(8b&98B?qjidUkO43$xMWDN}
zg%>P=N;yf_4jmyT3XU94Fu=!9{g&9Gu7nuh5h+KMS2QL<aXRX1dJFQ9oZ}Vhyr6}&
z2b?8-$pyZWJ|6<_#8mlzxR?}!pAhzTy|rOXaI>j-Q?5@@*f;+aM-@3{u`n#_`MAe|
z-bIgDb$1{I{l$0pX><gMV1LQIU0OYXbkIjW+YCnY)`eJa^;VO?yw%G`Soj^&|N9Z`
z+S~7n6-)xg=RW;){txLks><M2nyo8b$uUcZ=yCfy6tjbAd0R~#aBg&4Q0^wFKJJ0-
ztkqbnuQJ-Sq6RH5DaNmrWn*%ezGv)8%RXy~C%@}J^Hrh!y-A^E#1DW+(o(B3yBl<k
zF1urvj&Y^T4K(JKV?gJ{8BDHCNDh8+SXd-uwPlEPbTKT`l%QXcYdPl3rU352Cn;wZ
z{*o5QFl&e}XpWF;LACN~{VI2tWt~M_Ri3$o8L2Bl;|TNNmu-eq^g(405By@OeVbmw
zp5oxeYHlBIpjXyeFi+kIs>T463}k2ST05cNU;C)zgjG>H+tgY&%_f`fd|+u^#aV<D
z;1~)72`@PZwkgo*+o67VLS}JY<8D)NBV@2E{5s2<jZM}!6A=T4!yx8j=kB_T|GL`e
z{&yv@JcFxAscdL6m>OJarK2(JwWG?;7gSjlO1WLgSJ+E_Yy5NKU<W&6I)Qidke0WB
z7Js+}$j9Q6VCY|&#VNWV@O_>5&e+a-#<ht5-6{^5(^b{aw+$F(SScV`7Vz=}v(mkg
zx0oe39C-QhpQOp8!fqx(h#O@z&0rc@|F-+j_l8iET_qsXs@J2Up(TT2mCmAIRaXKe
z$uT~C@X5LDi?JVxQ=f$}ZsXm>ODcuWcUjk#EurrFqVdJTSsBMG5cUbH#@2pe9pwDC
zVAyhV1ZoS<@RQdBx{1*;8;74zJ!HBjJA7Hzx;NB|#X#FoW_LJ;0LogelXqL%V|4z6
zxss)I6&9aL-Y2B{(L|{B5l{+P2GxfOs(a-96=z7}dE49tpHQC8QwiF@sSgG`2G2#{
zue`ZD>KU<k%%rv02|yW1{9Xy+A073wZ!zce@uWP7zQ?xwueqWe18l@VWLDk6S%#a@
zCS#4o;Yh!>5Z<X(nY*-ISB-d4msc_UttoO&XK%7?Dr`;yJ@(_J{-6u10uJVI&)%%?
z=?b~>#&tO@OfilobYYV>$jLV7gkEkFluLL9?DkQA<)g*6Z!OauSE_1}dVZ)`rhm4X
zlT?}5%iVt8WFhzmJ><evq-SqgZ}Ts9b~1`EpbLukzVt9Pj5H?_I*gO2*KWve;|^4-
zvL1^Lg!bjyoqNEwuedo&UF}#4di%2t+wy%s>=q1i@y=ixY-VRLPzAQ)DF8g`qPOyF
zFk;Ioly5i+FJA|wG9E$i_e|;m>yOR}nn6Slz}r}7RSO**bw$1x>T_c6<s^F7U~VPG
zt+fk+w7r|Ty<X&N<#U4Ci}E0jhWY}%79?U&vI$(<3xtyyy0=OcT_kWpya{oMQ?E>r
z)b&NK)X9yHgOvg~JWCUqVJFiEDpv>LV7pk{$4gegx&n73{22NrB4vN@7NKr?u84g*
zA-2M{Ge@+3XNAy`-RE3SpLTNWbH3~5eDdrW=Q}>>N6@(dn41^)w<)wCGds5TN6fzi
z7F)-Pwm&S*x24_;wHO2Z{B)J;w?4c85v)Ho#U#z%zqrQ6f}6HGOMCDnZ@&pdau^1c
z<c4i%6Wbl0YM-MdT3=O?Ct_MH27|}ld`E||^W|IosKcrZ8&97}z*?c%4Ld%x&VBh@
zWaac3IY_00yy2VaD3*5fbm&ErX7f}b+=OPj<B`PnF8nc@ms)}r&w10f=}PJ0MHtX^
zaRvjYlPcXxQxMHk+YG-l3Uku$khAlDi3zzJEGIZ5i9#Hp`Hm`l?Mr2t0rgSg8MX*M
zkl8#OT2mM0MMKeH+)KxL^6!rS#zJV(Rx_X_l=bG%*zk^iRC>o}!WW)IU?5H?jh!}(
zPY@CH<qC_!msWuud;{zdha`9*Ca#A)!athRD+5IYZ+pJ>bO%FnP;`8=e+H1m30?xj
zf<A<N8{!TE<s~wYz#_t5Z=gmu!o$5HP;Au5Ck0ph?~^(M&tsyzB69R5?`p|Htv{5C
zO(6GjsiY_J4m-F7<XysE9?XWJtg_!cf>H4v3BraU0b!t&KqR1>{1`^Xd;BIBhO){P
zWP5xlzPu#9eArMC3cSW!v8^YkCx-)j>BVOz7)d$u{RgTUcFI_{_2h%1(r=CPMgBaw
zw5p67+a1~X9JXW$zir%h?Y#O;9~T|gF$grjs8fS_+F0bKm6aoD<$S8}|2osBu8i<X
zSkVK2VbHN01oc`M6Z)vq+bhbH*eciK4vHEzJ6`J!r8?zXR;#ODw@@oM{&>pzf9s!4
zk)_8<OZ3LSW82IrG+%))GR-!BY5!|JG|rdr<|Y3ZYh*Iam0w-Q9+SX^+PHNu4MG^0
z!9W!_7}6;d1m1agk#k~4EkO;vJGtnJ!q@1}Y|zw;{+2`HE721aaudcqLB6iO4N&<f
ztgO>_XS4Hohe)u8h5?Hy*6Q{^Ph54PT2@cuEsSDnYNu<Xj@}#U#hV4La=r<>%xB2p
zGCiM7uhe8=KrJOf6kt<r+-0Qz!ipZc;O?g1`Q&k|&^#M{Qy(-UWKm=5b<;mY@3+0O
zi95pOT-i}eRzc1#L#}XQjp57&-QtBTOuWCoV!mapH6q2n^V^@gGBKbu7!Nv@P-U$u
zR}_3@()rP$0&jxqj#ojYQ@X?xQ=a(@C-$94@AyoIn9ed)hE2OiJQ@U%Z0h{|f`qHD
z;$(f0Ea+T@_U`Z9gCR7On0%2AR~{U@cm}?2q>KMWPzA+|$Ja@phasF~!Gl)_v}Exv
z)JB)1V7^IWv93{OsY+#A^|jlMukQ|&qcWh}#mBLHEx$s6*v7^kdLEuPF@fP%kK!8y
z*s8*-Mno^K)|6hzJRh?h1GUkYE7@#T8fK48udj&qRV@zmX;7s?j!_nWtJeft6qc>X
z{sjX&I>tc1k@%RhuP2zYGxZ#wgKnqw&>A4m?}*D~IWoxyFSrXeGsMeK2ifv#8)`7%
zcu;NBuD{~5S{4Sn1Z82g_B(7apRtit@a=04T}vo-!`!%*PLzYp<~YQK&|`c5!Ju>{
zXbmX;8)a?dKrfSey8CP`L0NojXVw{tuhE~~sA<dgf3K><6I;~$xa_5TG?8!uu~Z$J
zi2*gGvFV=-@!ei=PDOI%6j-U0&=Wr<(qEo&@BC>?{9Pjf+2?dhGpoocx>T;hBOz*P
zXX07mfzq^$t)bb3SGvDhD1D(D&^z5Lav5Hja;b}Rf$=1xYDryVr)c$bHI1SIVI|ab
zz0k1#!rEb91jrkiIT69D=21<Bf7?fbyh*sAJ`k8HDX{adSLFB}s}~UMHTuRU%KHg&
z3uXIuof7RE>lO-q67>`h*M=~v#r;+viyBM)#t4n84S_yFH)6~`q8d7fCc9CdM`5wv
zkIMWDo?&>8B&jLfd)RV4sD8F))-$N(19UAsMw)3fhk-}U*Mpi?Ti5IZn|CFQe@!|U
z%DIn`c5m8Tg(n2{2rkVp(j76UQNY5O#&%N}#0o`4tpOR$t@iyFP4KdcUD%SQ%iSXN
z&%@hjXw$Ys4ZD#9%SGjeqqa#8S)KBli>%gsqpjiVfU?RayA;Zn<{Q59ZSq2Sv3y(g
zjR?vXX-ZC62na)c23cvxi7C{|<&|62h3Z1(Hk<S=<<hRVoqpxUuWgfF(pu#;7ipdG
zMqA@izp@zn&5x4GwRF3Q3Ug`_JEssvH`A|j)je3gLtIN@5ra*I3!qF3vuIa%)(QL%
z4G5l(9*BOJ2H@ej;|rDShhv|fV@HJM_$Eh%dPEM!-uef$nVcSyYVdtbDQzvV6HzZ^
zeDnBXo0cct;N*L){xzBE^}_K|<I3kv$~OQ;r&Q4B{HB_K*PgFU$>16e?zpzee2l=t
z^`vIy-p-IUEjxJKj6AMrF|qpnF0%8C5sMnvbO&%I$jJh^i-KZ#bL3G^eVJF<WOx)a
zs;0yq|MBAKldu2YzfHa;PhXP<yr%(;0GsbwqirW;mLeVjfu@TaF+}mKxKlhA#75Z&
zK%9_n@T*!BNnU!s<ys7e@F01{kV0gJG4Yv;c!-xzE~AX<55$jtd9O5r=mWR_{*%hu
znr0E1>=EoKJ=;Iq^T1KOl3z$ErHmTp6X(91$qpjw0PZS}tJdX^k=gZ}#gZR2e~_ma
z7Ofletz9M)BCHd7p<I-xd~-e%LT{HhqJEo@YNlJAlxn6U>#df=_!ff|l{GIG!N`wJ
zzpkl-swfMALU*}Dp)sy>dK!%@G>R&b?tL7}-uHLD56hp*$NM*-_k~uVMkOdJvIW%8
z-1<mZbn_zz=7pPE@)(0Pc`d!I_J%zzJ60-aVF+jv9a=I=k3^hq>CL)bk$qcTA;@7h
zsuvo7_3_DIiSWe*oAh(A!se@p>uuz6=3|_bMPpn252RBf;W|;mx`*ir7__WwGc1sW
z$^#M#!^vrsR^kXciOktNm|>{Lq8MDXzK@T1M9*z}%Zh5~AZ^`Fs^7ew<l3|;#JOej
zJrbNjgTbg&1cJtd!Whhy++SbXe{I+e=;nTHUIU11#OS=!$$wlPG6VnfTvaD8=bfBN
zd&xBb=?6_0=2av|i0mEh)wQY^MR7uOW5qUUVHXP8o_ZBPdV+1s*Fh2WNSflRK^#j%
zaU5*lu<Ci79|^cB{#8?zTvAv@g_9hEqKN4cB_PW8BdaQea>`Lifl8yZj$&a*=@-g1
z0;j9&3XTzRSpF&%4H`vXg~FTm=j<BdZ{X05SvY()@@=_)i^)0yLFJek=}r~gQXB`z
zuld~0T~Kqhdk?Ti;i<UTduKRbwrF?hLPYmgL2Nv5DPrnWPgT{6p2G0yQ%@_aUpy@W
z?JBFKqO^3AxXL1y$lgto5CU%BF)~G#RbR7`j+QJJDRdSk(=7F|<%wC+3!j+T{Wtm}
ze$8hj*6D0_>5@v}KfA1n3qx$;rXPM^8m3M04-5J>KF3@VAC$F8N?y$8K^C{$%!)%m
zkrMr~*gS#+=YnCRd0)MZl4SF?DWC(~mH_%#?z;;O3N$+=?|uz1x^oUd-cuv4%hXLL
zIwoz0TTO$A9w7>n%&85llniX2Zw3+k*52_<+aqoTS|jPLOn|}S)HTuqfH$F6xPL>!
ziwoLXeM3s_40^%Sf7eU)?eE)&ZR^r%+j`q^U-p6Jn510_!Pe`~y-=X-q8=(garEWE
z^HuXHkTLvoC4VrEBV`lm1;IJabyrO3JQ<CnUfxv5pNvT!vm&vv<m-+j=jS>rtN*pF
zc3D{p6)d5Wg-VQw@yoq<-sQa;Q9oFx?D6mf`KIbFKp7G{(4lJ2;pTFVy?kwi5ZqRe
z$1%N!uGd!Lu_8)Y`r#|;HlQ!so~)77JJDvJpqnk2GiE{RHs5`f;Jmv_hdVSKDqx33
zvADgIFB7?rGuCuQ3P<_GHhM;%47n4=ar`*Nk)+_*I<Pr8WW|OXO)EZaQr5kA39*L=
zeUSM9#|le=?fj1+MGU^Hvtq}!tDf}Q_jxej6qK%nwHvS95%AoNuKzlJ6|EIz&j2FH
zoL9MVL9K2TdY4VY2iUKGEIRmxz6{6vde2$@l&mMc9x@E2ApWuPkEFiV926WlD|UVR
z&jI1OlWX~Hqrm4>md)sTIEsqMCF&7LmU`R;V~BMKhGdca7qhG3%Jwg>1Ve04Lh>UP
z`oiGYMZJVeaBBwTJUD=i@qKoA@JnBze<KVRH)4wK2oFNMXkbGGXw98`*+Ce;!B}5e
zLf*#^Y0IV$kI;wt0bIvxD<DmY_CdI3FeLi(_)Mpm_A(=ebuS=~8eT5SEjBG%`OEY*
zUZKJ<bGI^-C|Ye+=yx7l-0K64pu2!A+t_4Gxm0x4Ezk)G`r^OsuuZR4%|%N7lC`=7
zB+=?JTA2pO(pZ>=>SqU8P&WtXCwck$H0FkX)VD{M1Jw!}Uv$ZLH@&n`PU9S5Cpjc4
zp5|rOB5iLv)PHZl%Htm*!X6p+H=Sma=tTNSwj1iD)RPUMcq7^}j8?Fai8+Ab3*=bt
zyv1wC7BIgk$AG3;g*$`pzz9X7u$-vQGF8TP{a8|wp58WH1Kk(*;Y|X6pX2cb<|giF
z+W!(9e~(Jpbdd7D6-oB}xWMichZ3X``y!UqTGHmj`rh=$aW;uko7zyh*kd&>&ihH=
zo)u*M&Xu-(SZ>w5#G-KaB^ti}<jW=%TA&+jCh%nFGUZoBK|s2YS1S52OoxCFDCT9~
zzdQMH8QK-<?LBJ-9^6jjx8|3z=}xiU6TFx**T=>Q{N^^tA^DZ)Hxz6GHh3&Sd`9~v
z4A&XDbC|hP@$bw=0eh)ds<t36oH<b=ts_A%{h{=g=a=O#adZ9D!poaw?H~EYLiw+r
z`v3kZ7{+)3L_*KDs_N%8$OPaMbzL@-PG(^<lV&I7P7LwO@T}rChoZ{k5KBBYRm#>H
zm$;xgKMzq*h|J6PB-tsY%+jPlMc(~B=^Nx7;>+uX9cHd_SPxHuPfuNKUaq8hWw1;L
zp=hI+d-JdYb=Dr1QBnfQm;Oja;`Loa7a$PCBg7!P)c@?+Y97a;rqe7+4$r1?P(aP8
z$ubaFmYmw0oOJ2oqZg`&gi!s@?|RkRS!Dwhk1;EZeEtb)uv1CEv}Z#;N`j33HS9o9
z=A{qlkGzxs2Q%Q)5rW7X+vAh>UYioUd_DGFz+{}d<lWb)ukw?ptA_`2fqHAe90cAc
z+sgThF1-<MDt;_3&VqX-u#X_;_h5Ld0X-N26jZtI)$uCs+ekKMYf;=nTp0J#iEff^
z3k7MwYmpJ+1t3e<f+2E|MpUceC2e{!v`p7f;NAv>J$E|nt$Xv62uerNZU6xE8yR0|
zj=^oZ^cG56e?spBwuCM8C0%-*?>8*|zkHF(*&>nkK0lFVznj_>;6IS0a!^YjxuqPV
z^P5B&Y<5!q4<Aupj%jw@vk^m2buq`|0TAzNdzR!RLcPHaqg^daUSG*(z*sbm=?6QF
z2^Y9RBfEBN;Ig4C3==|0>36vo9azw#-+(H@pD7swWnnj}5|1`U2;EO_Z;-_D*?D?n
z@Hd%;y!n)*oP{x&?|(@73H-i34&t0=i`t~PnbrQ(Oz*^^`38v;7r(vV+J~aiuS^Rv
zfwgj+cfZ~hcIg(Ric0t^#Hy<sQo#RzX~MRLQ%sBL+Jw$^pRK`3pk69A#^w$p5@Xk&
z-Kc?=US5EAcV5$OlR(<@mp@CL{klJEyee~e90x-d_cQ<a#@19?jeJ#|ly7X-`2_`}
zkj*U~O>IM0weGe#rGMBtgtZ`eF?039>XV0}H1`D9pQk$q;rzt-6z#T%3e;5m>%eI5
zr-Wd{c=1lln8|d$RZhWi+g`8^TLLf2BG47!Z>_)QnL~eNllkG8p!E&90sNLiSFbA2
zFW(h5={V`AbDW$+2e+ToN7uWK4<{3@U9HAbkrtj>V`U-}W0ux(w7uHkZZC1Rb{oN!
z8F~+6t$)LMKjH-<58y(W@qBp|vka-Ms62Ish#Q1zefHJ%D9?7u*%C<%H*Q8M{TiS_
zFnQ4dvnKGalmpmDX3IG8uyj3CT$ajlw`J;t2;autr<1~FM7ak+!^GC4a$U0^Tm%<v
zmg{Ga&K@e`;BKKoK-3riLolWsOn>zH7uZHV*4~pWut<h1NOXxnJWzs(O$6QBBZjI}
z-fsm(eA*uj;<Pbw?*t4s;|N8Ck&`>fwl`M;#e6#@X`)0}Jn0KO9aA{Px{Wx!ZN!@G
zntz4*NI)O%v5S_5DFxN?NsKzNd)?Q$m37I9ranh~ye?)+D96tQ5KLTfz)l7Itmowm
zNWM_}v1egmA&dO#p0sb4V@TumnR@HKJkB`2gfxq}vwTOWQ(uMoSWKCwb)U*oypq==
z{vT+yQM*3eZ)oPuCtCXc!MQmESAOlRO{+RK0;2%UE+v#2-Q2haj>5ZoG6ee!(AYWD
zi5qlBM)^`Ah6aS2q*L9OhFOnZbil3)ej{m<nS;Z9t-kT2N9ik)VZzv1<zuOBJZy}4
zL8bD}h2)av7`2YH<oZNiiQlGwEYq*=wL7i*mJ6txFfWz3+xk_GT@<h>yHOKLHla<P
zXSwhM#U)ZH?D7`8PZ{!DU(_(Nx*1%Qkr_1*4!TTiODcDDG&biA(g_I#n0zJ21bA6p
zDY>jiI=RFx-*f&Bw>7%s$b1SV7vaeky%jd~E)ILvdSzVPp+1T`qy=L-36#ecT!_7r
zARi_OW4c~^<r<J=ng%e~<&}%y-zXv<Og6VI)WivenN`BE_>{o{ikqrG?}=ejy-xo<
zbCsEy2fB+}`b#I|gbqpKG9!PbD1Oqlf3Gb{i^i1q8Z3cFRxxf8>6I(iIzts}Wh)pW
z=FKX~L<65oN$ffnkxv=J)TQ^qbN1qDNcF6}_M0g!`Z8-DT_5O$rNq^Xl;nN}AU^at
z@#*@5w$V2)DUk;?meD#I{{7CFqNlXH_sg;8F(-GKwIwl^m{U+jBA}p>L%7o7*gh}^
zEB=K5HW(k42->=V`^=Fi9+nxbAQ1aPog=NkC>*=4Fp0$p$m&#D_aL+<&M0Y<UC79#
z-JA1u5L=mTzRvY_M2p^@dlRQ&%Qasepw1W0<lW3^Nlf4+ZKg1<Cf%^$=~k?rmY*(m
zU%}^6ZYWvJ;<xG2F=3RjC>GRT^qKY1|KQ=;u$y_Fy%s=2cV{!XIjE;Q5wu7!>_-`-
zP2UQAX3Ty&5|R1Vy7%e^(<?m78y0-%laZ~axJ;6w{31|$5M}<^)I`lKh)|vLwWV}7
zGKK*KuSAOj|2Wh@#z5YmpKe}@TjgIpFcCxYEffML%d9tm77uPl?SDj?km(sw%JXLx
zCP}uQ@inigm~?*q{Cez4Z)5+8SPnlL|B^19R=2q&P?iq=;Z(R&bC#q0NR6x;gTw?z
zZQ@iD-qV})XGr=Ofcv__*qUWEL<mG*Ln*j593YqB{qFr<tA4(%A#Cjsxe$H&-m!Fk
zJ#K}cslT&>q%N%v@Q$wz0rVYQQX@EkgL^2O2l`mWSHuHl`40bedl=P*{wWsv-jiDv
zvzQI$p`Ap>^JHmMXnrhEQT(Z}a}vC^Uqko2&M3JBqcCuLaBh`sWaxSNHFYp~k}UVB
zUTky$6<SO?QDn_q8x2Z<<tt@iI)!+vNVm)OwGD5m(M$X524#I^exSpvY_`U**!zF+
z_l$YA%vp<D^1J6dt|{&P=I(!uXa;zt!;N+A6K-W=r@iyQGrN30T5?sLHA^G}iZNhg
zrrulW6cgf9l$4Y!rJ_zHl{v${bx_>^txTdpp8hyTEapNHw6`kv2<y{QA4n9$l;4*A
zLr{_JzC-yM(e#=0x5J1?I<3n`%0q~;QVbNGBzud6E8EWjvRS!)?c1NzR#wBcdjk2q
z);iSEf|^K^C1$8LMnfEsQOLp=yBTnd)jr(IsvORq0huggwafl(-Dgk4G7B=Ot^!+8
zN5)wAvN#m~#rM?;_cd9#7cK#|w>E;^Ee+tqa;nGJ$H+1es&4^1%VL+omXuSBd(qm@
z<6QYayI?56(j9q{!s?j`!MMY3Yg07W&$P&z@rwJ*+F^6W`5-!xlrWr@(Om&2>*96c
zrSQmLR=f^?NbVZ>Yr>ziT?%s#0t3dl1ozOyir!0F2M71w8!^{L@nOtvCy_R1i-fxW
zS1)hQP4$C#a<D49_53J)^9baW(u<uBbg2Jbda^S_F#NGev43*C?(}`m-uarsqFXb4
zrwFBZ`<nDtrbtIK_zC8f^LVM_&NJ(bZ_)q8wuzXhFE^T9`bx_&uU7SzD8cH^ewvBK
z8k=HZs$d7M!>Qb?GD7m>bZy_tB^R%22x7BWH~$6Hhkcc<q2$`qQ3I7FWM@579zsjd
zAlW46`#kfa!IBl8!#^AIjimMt&!d&s(QTf{hxUszm}&DI--~?+bqjdMsC;yc$$FOw
z^N8x*l(-t^s)&1or|f?g|57L<a^MbY3{1DWT<KM)Wu`ssw$EIn)4FXCh_%h&Bo3>;
zIp*Y<nVM87ZE;-#@(u6E%lAQY?BqeK5Q_NX(42`vp=emamoFcg0q9UDR)`R9XM}_W
zZUjM{@yCM7<ugI+eA44P9v13V%J&pir5LDZTK@%{Rmp}8r*u&w;<HM=r7G6_#q6lw
z@mwRjJq~m=@lIhOSODxNbbfr3SdbDEy-Rl7ho1yB4QVjyiJxxVjsto5pm@;j@QI()
z+=evfGJaAE<XSfxok}b)b$+~?Fckw9&J?DM#e)|4%pwL&sO4xFiO!+R@Q9=szr3H1
zKg=E9;}}<Zxasm#O_yrD&%^m=)NROGB#)|+DG~CyXd0g&-gJ_fAC2*5Vg{|Wt29+q
zhsf&U2N{m9KCg(^=qnjy$6ZLzJAj$--2RiM+n~l&#!s?9uC45$`A9{sksIfKWW|B`
zp9)D=%O<FIPeQY>eOOQ?;uGPL<QHkmgX42nJ9qyV0dzPnqFOVq0YMTaK;R&_!Fi;>
zAkZ<Zf8wgo{&Cx1pZH<Za94gvKjK~QB`6;BwddDypldku@vSa_aiGsUKa01Rvs=}6
zA-{f59)2J#Cr5lnzB-CDD;nc`MVI+3#~#j~(?y%V9STKd$A3Ac7b?;_&jDSnUG1fa
zUdX2vr<1+>RyP>eI~ywG%&GO^2_bLU&BI?`!9qlt(>YD#gMp%jUDhkIxpA6Yn^}F>
z{BFs@0MjYEGczvqOX@B=qxi$LCk8MAdkad#WO<LClF+SJ(&qwnvLC90aiF09wa}5p
zSmvP68Ee9VawNLOT|*8~=m_4lkiJI5rQz#+S~Wz(Ia84{YPwk7WC#FI$7=bT8N;RR
zTG<4`wB5XbMhiSJiwi0uqbe|ao7Av0Tkhoguj>2FzbCnwwcm-ESo4A#&XocZMJ84<
z(+;b<ea0%9s!8(7SW^^E&J;F_ODsth){jhzmC5zS(f?oL1^o&?5-w_y747fmJzy*3
zC6t1vKf`7A={&XW{!<2e#CMD+J^i$^4!?(|F>_H!q_NE{>x(eM$mNA3VD>8YCTH8d
z4_(@~a(bk!(m|Nq^)j_X3o-b`RJP>9>jkzAhAsb$b!{y7SL^YFs=Y{XE~&>xUWv??
zjDNf#Z@fmN*n58aQ!4{zu6s#E$tv-D#5D`2%>UG^Lu<b+W@7rMGpF@8f-3s{5AK=i
z>6bs$GPab2&R7&g1O2abRb^yUeW$r7dn8S{%kNxy?)v{i7E_(tuwruUcXeq)O7v%f
zZ^y~R`9|DumT~bo8C^lwbh;`oc;NY9uyX3{uOG#uL5mB??>)cQ{VVmHKe0^Rr*qiH
z^h@$fT@89hST@KTFJj6$`ta@E8P%`BaSGNa<GmevOgbY8+we8Bqf8p~9_=!&z70Fb
zM{zOS!~FWE^!%MA{83zWt5Rq8bp9m#SYmHgYb>u#N$;iV>FcMwdXG(1C>2iKMm1hJ
z<_)Cd(j(YThN#lnJd~9l$#V!;oNoR?!Kp9*Uy;b;wckAzkIq;7R51{^>2QU+0QN!-
zi8q`oHEc$uPEKl!!ncoh|J7}VxA>3Gzo4mx$G(;Saq#%irZCZ*UO0rk7+R6f$y;NH
zM7_^iza%m*dX5@CF>9xL(J~11L;v||9Ssk<I#@l+!?!5lgvH#Sn}WLjx325Zg^*C5
zv)_8OOQ&HN@Er6Dmjazfzt_1+fiBF8=gR4v8C57{+3i|d6=$`S?d8ZtVhDikER2cj
z6o-Jyp5MH@+`}CT<OzjkUq%<V%K9ZsJ%2?92g5>LsY-qiC@C8SE`ONy=7;1h%Q7bh
zme+M-*<^yN#ht~LH6E35yFDJ{Zs>KH`$rP>_aXC??lA%a|M8F=a_|D6c6Q34Q{=y^
zbD3F7X5*36FmsR8-G9aLvp^ZwQVaC9jd@mT+YfC4V?dF@rQ^eseJoWh5Ia-{f$Y_+
z-RQn4%4(a4Hqc^qM{JeW5ZwQm3Z5Rqg}hIw>y-Z-G#6mbQ~TnI??9uK!478`#56W^
zG>wXBSks|SyDTH}R4-3dGIk^a3?OHjl}V&UU4KPkNrxS6E&NT^Ub#`}tg%#ytkpG3
zjc%s=MJZlJIoW;hw)z|9vEGQ5U3G;6V%e>6*V%U8scDFcaAM{O;l3@{re0W9-t&7c
zm;KxAvigyRp`j1-KMKXu-&{|>t5sF8@dyP`4S+Z&_Hf>t`E~H{b+gXTFA8#P)g98z
zTClrCvi?JJmz?fJDNPoWDcsa2*4P7!>z_|6SM_$2(d1^b%YGoB15xGmoIUEZ@9PAM
z(9PW+>As<-(KP*?A8F6A?SA~8_Vepu(7k;2L5I8V;%{Vc`<<y?zAON}4NV>3yIiwf
zSKa3ygx-p#3i9bgV5tCOWZ2;K2mz4U{Qf(|ww9)B(vnZS5_b*(gu6uIz)@Vdmq7x%
z=5A25>ov0jkm;yPQ_1$Gx?}+kR@`%0))3)|p2I&B*<Y_+4TESU6{b8cjSRtdJsO-F
zlu6@Azm2NroR_>Wfq9jz9Vym-wrk{p)v%)O5k8=l79DQQ$cR>hy(}~n!(3$9pVEuo
zZ%s>ymSFCyE|%WDzo~&e=IrZrLu^B*&7)UXdiwvS1okTGzPZhjtR9(HDuPB1;)6Uj
z4jQzj;rRnA1iA*Wx;xpIL?MZ;!goIRPrv>8rQc;W9YQOmt)eR~e);ltdhOqQ1KeZP
zO5W(c70zrVQF*SWy)iA}To;YVYHYf7Q_;x3d3J-6q!F11F;q@quaSyxD!Z%^m|DO<
zcM!OGoue7hVDCQCJ^1BOyv3tY+gm$+5`HYPdvwa`f6v7q?a=erLJ#vXTom^pzu_6<
z>h6+RN)yq6@(Z!<KHQxIOpo9=SpuG;Whg5>qS7g1u$|3And$4tygH9<R5%q%-9$BB
zJ>?Cgo56|o8HW1;KW!ET=@hL0gC@Z#=K<casG<Ip%=u<)OXfn#i+ISYkPPFw)EWFD
z-xrk0myy$P*n5DM=+wY>XpfBY<z6}HJR|?Vxz=XboxZnI3*62YXf^20+&Au%w$G?H
zz4fX7{M$lYt7%v2UJ<q<0tsFK?28aAzzbN%)7+{I#kMe=9W`}XD_9j)%Sw=1`r>bk
zqr%s-dtp^-fdX<w(049(GNu-=<z+UD+|q9V+#;k}uX9xUS^(C90D1XuBo5HPQgf0;
zr*ppZC)*1DGB$c5VfBYx2r~(Lk^*MFW}art5VJmD_O%@0FE9VKr1%kTp3H*O$hcf3
zf@a~m@8bvU_twv%MLMd^x1sK3v`|OYf_|JdYd6SgjPn|AKlRWT+W86V$z&S9E4z3j
z9KT+Vl66IVk0M*2K)Ecg?2Dl&)FaX^iJO4u^j>%E#NTwE0|Px>Jvz{`SCDu!`zG1Q
zHH4d#M_ziWs?Hwx{AStC7MyHVc3<*V+-Ny&HB<-lr^=A^s-u_8T^-G^u;iUO_w(7l
z<4h;!sou_h?YYs?@=`k5b@|V(!liRMl-_nSSdP(3uPivTo?WjH^bdlA_O+fV_Pzz<
zJgt6KT7R#!A3AEq{g>Tz<q9i$0Qfl%64%Gjr4fDFSY+<gcTM&u>)mZ|73ZZ?JSHmM
z0Jn%A9&HIWXXtr`H1#lf5(4s64~UkeltJiw(+H~0$i+-XqS}k54dT!!1~li17r@f5
z=S6I40=)^GZ<|k#`$@rdrM4O>NTfrquk4`(u4IH=o=NDATFh!FlrD`~U;8{9G^1n|
z{&0pib&JHCl4f!iH)1Hv*rKZLdxFIdlC?ypNp34Y^!#VbPI^U`7U07KmCH=BXVn9-
zKU+D{OS-hiEC%@3m@EZgaVE3Ib3#7x-w5tR&&lKyt07GlyD`DhcfC06<=^v=_&$bC
zjhNGh!s-FQ)vlTTOz|(Yj@R@r+IC&-UDnWBLQd)IjCq_pwCA?)7?py{D}?**wTAnR
z6Js;yFNlIZK3D5~O2<EaR_mSm>i~a}?fj?b$@MCK1^>V($4_kWz`ur7&WCNpjY1}O
z(<Uv;SDc>n2}TLW(m9R(XKndDpye~&2TJRm+k{?=c5EdW;;)00t9F|{{Ni(Y^)RwF
z*OR(PAZK%d;>wMy6tL!gV1Yt_cmut-<vQxSd^nv(eFTwS(WXZI$VnlulrLDB6mzpy
zlYyU754}K}mKt@%nI`JlL8OpC|KA>_(dKN0(#q~(o6edLslII1^HKA^i;t+96378(
zI#~<}31)vRF{FW&5QKk!DqPOZsZoJr0aoo0E<pXB{Hsd@LL5O>1wwD+xc|0&gjinx
z2qx*_@Gp?DwdHHCWqQG-LDGRNqa?^HiDe~*!uNUPS;|{D<<t!+&ureI_t`PP&6`<m
z7xSKI2vrtjoIKyII)0m!EY)YCPGTb_)!QZL@!sc>ncw8U*d<zDXiLFv7W>>P4fK>C
zWndg9WK$<(KOcx0#~;Yoy{kF8*lVS_wm^#1UaBtj=+lM*b2mWUxuJEm{;F|Y3D^w=
z+nBotXnn+h6^7{ekdn~g855yh{)sFob8hnZI#WD4;iZL%b>N6HdDG*w%iwK;mTkUl
zQ&V5E19!dI5B9#Ey<%-A9{z0b{p-k6*=C85R{@_ZGa+Vk8z-rY(K-C(HBSvmN4&7^
zfc2;OrattI3-5iI6;lo`C3Cy<4ZSrcMv}AAyDh7;oHFw)c2Sf#+KsE6{RH5N&$^TR
z6CZm=h4*(fEh8E)lr*_?L_SYSRz{b8Rb+qAMiAH;ce^#RF4MVx=zSu;lt6&Z-CYf$
zh+<WL*Sxv6G(pFze|I4l=7f=d{unh^kwBkj@7B?u>oKF=_P$lIcx5z0ru<-1=sN=p
zR$n(5D|L?70t7Z>Oj8(8PI0`Q@XhpK(+SP-voK?V5~&B&?DH*#T}{1?@dl-Jr5~qo
zrle8id5}ucWnZi*ldV=6u53WQ2TWVBe}>NoDBsu>BJte<Ag73v7d;bDjOCt>H`aSJ
zclL_2<1KZX8mrUCI5I0tbblb3u0MKA{Y~|B{^rPBnrx0x{9FemY+A$#VBEX3M3Kt>
zmNf)&P8$?_40Fo)UHm@$X&n_5FFg20&?{pVg#qRA(L3k~yfZW)*|cm(iGrf8%w55w
z;mC9ffK*9E2LXuU<AIm+do5+Q;&wr{C0^MqEe+ll)&?+!e53h%3514F$cg@v__ixM
zu4HGV1e{~{quUP)Qr~P`Npr4szPlBdHkc4w+#S0{zp1vVwf<Kvr?g)_oIc*B7=2>F
z;S+Ea4wYC%MFj!KqLYDFvj^?v4*G6Y)(~g-L<2W1TvZw>#q57Yn$1xQ<ZIe#EYMLa
z`eyvioX?@r@V8>Ibstp5$}!N@SJ?=DUBI4Epz@FCn!N4H(F>n{Ni(e~Yn0wR)Ebd_
zZ|r-L<i}aOaZ%Wb_KWF$_yx8ylz28kH07Hrjk<Ex9s)U~wPoz5u%rA=3H&k)@5|ba
z(1%?!A9S|C!a~R8OEr30CP?)1><5c;{}SC#SDATnJ><DEt}1Va4-Mv=avpOvc|J%x
ztrqg?ZYkkwZM81zV^;hen?Hc%yD9x?o83hff|B-ki*+6-)Ga8#tplDEvfFTItAV<y
zW2=k=Xl?Zk6kclKWC(_w;Q0GolMI2<zO4t)vp+%>Z^d^x)P4y_OW%}w`zaDcbv2&s
z%<qXi(MbW=3*&f!kRyVB847(xoASl6mi2a0J-rjSHRCjeOZU#=_&sgPc4!4X6Vu+5
zHoAWw=t?{RKo$C$viUPyqz6f1=FASn(w-k9uR7G+PrR#qmBFu%S~cn4sNCtEXxY#x
zP4YuDn?Ks8cibC~8=6lRzfs)N=y_FXg>FJ^8}SOsW3$RyGd2+{(f8I2fAZEYE-o2}
zc;R7vW=@;n=1_B|+%EjU#shMb?YSv+f|pInn{q$*JIhTS<6mqjsV}zo8Nn9w?<B6=
z?N=_sfwwkVQKm@owR3Z3vo<|lyDh86>6Md5{>G^}t6BTzibo4wmMZMo(_LHN(`8ne
zd)n*jdfLsAv5An^UfuKaxh5{8j?jo?P0l|^<o4`u%QbZ)h{8q$W7T|Hk`%G0d*?@Y
z^4lIHnRl-r`rU@MM6?m=zB>6QW`AFowc|@`SRbyuCk&zM<~mXmia*ME&T)(FYyES6
z=8U61HvgLQHCMPUFnR-^w8udGzW9cC-ujyI`eN|ww}gD*8wuGc_yT_n-a%t^4^3B|
zzpnDaSK>=ad46Kcf(mih;0{<9?kIfxJ+&p3K=f&PP(vABJzoa*hmgNqzW!eGTHo-i
z^XlvXLqNR0N6-Zim|EgNUbtJ&U_k%Hlg2*GSRvQt?sg68)vg}*;$GfOvp9IgeAO--
zJfKdyogIa#4+lrT$%zir`mQgtPn}hEuQ<KsF?^Ne{muGvm@XrF-_j9@YF@tiF4Kdu
z2gMI8bE9)(eEmz;W@cBkB%Alnv}I+Ll~4u%C&b)K%U}Ww7X#-(A>7<ZXn1dPYjIIy
zONx2#uG>9nYD*eW(-PpYcmbM=N3cjJO4k!oFxq~<2O9F1fp`J+Sy-Y(o~2TFuI%YQ
zRx&^K1uX9EsT9v!Q|Y}9Yu9?*ODWwYOGo(dIWh@YKtVBf%KS6rat)?vtz3NZwfbDk
zn(m)b44V57t*nX6x;#N%FQz)e28{IE2ul9e5%oClae{5!Uvth~hB&2u<*A&}*Sk8r
zYqR`HU&+9XOrt1s?Fp=Xd7Q7f$tYoc3~!2f7)Sl^KVNVu3_DO&S#`^`34qc2?hwm)
zckdtewbfYRA&!67`s8DA283h4>YJt4^81vX8=E%uk-FCVy8wW43=G+S2tza_Byy<s
ze`G_BU;xUoP{aN&1jLqa+G|o?Q1)iXrgf^5sskl4z)SLS(mNd>LxC8G5(HV!$i3Wn
z?}rz_=6(V&QD@0VUWp&ewn5{S?BQ4KC11HEzE%FfE%klbcAM!SbMSRr`Db3KZ*X_R
z_c!#+zGraf3%0%gYkYX~o-sQCU@UBpt7G@C3=+O@(ax_D8{GScX&)dEi6}8T+bcFf
ze+t<|_+?XfVNnpj9`+Q4Tn*YyZs!uI09C3qkC~-RArsm;C6s_A8NGH6fviknW=Zo@
zsZ;>5om)(fdYtf{`773MKRS>LxmJ51ko<u}R?b~JFnU}3^guP}@{B-gl$?^6gY-D$
zQ;x4WhdYN^b%AWU2QPOGeZQamBT8(Nrv&;0H;0xx>NfZY1yu{WRcmtd*T9&?x)hJ(
zyf2Jmn&Y@;lTyx_6ri%r7Dq8Pf!n5q(Z!kji`2(lmJFx~xg6?js4IEjvV8RT8Pgdu
ztH`;p_PbMpljmVbb$IVTy{{1A7xi>KZPnG?Z90dc+ha9%dkm?cxmtOgA~^L!#HSq7
zdY1WgR@I6=lZz)Yxl{**$s-V0JPLLjS<)-FOjRt2@iX%kD1|m9zfEPl^hhK0`cSB-
z2M~H?A_UutNCm;&ms;G<x7<X48upfXu>5wUgmYPCU3;VVOx&^VId_bE)*bBz?-~n@
zb<R0soU_hoXV8#~x_m-J^q9IE<bB?y50@gG|6JmQ{(b2(xU1nqSgQR`7%$}SFhks0
z8|<%b^S9!`S;G4jlUvdBY;_;6XHRiK#{Fb?GJXJlPeOS?NxqCT!$V-?Ro9%aw@#QG
zT8e;!H?k23I9AJZ?6Zqc_pVw-jQREy&A1h>2wx<)Vk~7sfmAFy^r(CaoLGZ7#Y+ek
zVrg6Llzb{tEfw$cS4}=^`qtz<qW#ZZ?}CVpn$Ib*O6%FYg!iepwEUn|!))`oqaLqF
zNK4z`@ExBLE2*S}774uXn;C>d$pKy@^6azjEn9jLfgZq7IU}r)&%!}gGMTvBsi<My
z9FQ>617@mf=>=0d`AND=e_<pfYlh{CSXjt00CoL&`}S?mV*RcoAM-K=8u$$B15Nbf
zNI>uVi<Y!9G4c@-WvK7<L!RmB+_JSN9(WzuEoV|8<g+VE8!il^Tb`6s%Xgjtb(P6g
z$)f=0^Qy<oTBd4jNgp9S{shJ|se-A+W{qAJiv59)TCnl;L*_kTv?{YQa}=;|3l3W_
zL;)|YsiA_ir|r2&29AdG*Bbf=%oZmXC(i)D+xiI2?iVz~ZEEtt>w5ORqqXFJ&KX5-
z(mbM;8;0?|_p6$^hQ7DeOG+kWE{92m|1;6BfM=ja<@^s-gJo#^iqdPh3g)Pv*W_3;
zXA=Sr)ai$bMXt<?q=nV>e>nPgJpf3peRJ&bap_&6rB|EQ5!ai0edoLT%a1@Z=2Y+g
zE?CKO>VCL_$e=NVKfixwBd)+v1vu$Pfx6aXG04&Lww?oa;Jd~z?A%|hp0^=t0PdhG
zPO2(f!<LozZ<97zwE|g?FG>tOwu7fzSXji<?0C~1xjEP5)j95X5OV4@`|BQ?(bn{e
zHqHQW<JlyK;cfkv2T-T|PzxElMVILk{c3UhywAKofQCuiby&Y$_;Do8`MPIYi0j=x
z>^t2{BoCdnH``!q+uU)gvwurir9SRq*INID#8TspX>sTQ5(I@*<8+kW^Y7>OAT&;s
zs2lI$!hgCb4P&w}!m+>Bek}g{fp`n>iqrxoNvabOBvA<z^hfi(SAfDm0gi1+I)M-i
zbTi?1SMt1H>>?U`*2v=j-xbA01tzS9OhkTRI}&vHn<Su8za5Y{4AoJZd6d9#&{C`O
zj_R}TZomKeCrhy|3h20>J!JLahG(n+rRB8J!;{t@rgwLPGCWzHRKtAp0mt|5!QL(L
z9*>cqlCZ?i?X?YU+j<@*#qMmV?bz8vZD{>I^29AW$~Uzy@>nMaZ}BE3LeK@R%OuC{
zsITpOvK04pQzS-j1$?M~+NK(MN76fq>8jd-U;RJVzt_MY0o)7`S0fh?p%^)NG<jKK
zzLs1;^J4uYLk;pNz`cY>q8d#a0?@>E3<mJH-krvso+J=o*vJ|}mS&s7(P*`%w{jxE
z+nMFw<k|cDg?E2a$h`XIk^vN~-?$QaB|jW^b)xu6r1uYWISkmF)&zcSxfBNdK^Z+>
zI0ZAFo#X9nLP1R!M&g`PFmw+69jo$3y_!9F-iQjIj9|wssO0uLz{!n;=#iHh>gAFb
zQx|{V+k#k956b%+i2!(Br+s_<*1A~TUsM|Lg?`8#CDdIdgAnKfN=1tl-yDZ0Rs^w5
z%8!lW$7Fo0C>xl+6*|?F@vG(WQ#?X9d1i=idUZYB^^n8IG}G&A^wWb_n5(s3q3F6)
zRa%};ZmHM$yR>h_jJLm=7no!C<p*@%Yz`xkNp=VpCnU0kDn?R_U*pM2>&TmzZSkWg
z>XK`V0V>Y;6DlBUhbfIhg0s0)s<;AC^D|7zS=YPylc&X2+5vHvHm!Q4ar@Hl`6oya
z(F|}SG%PMtF2V?fRPoJ0R0~;p@Kqnhvj=jXc%4tW+eI-m-ud|5{O1YAhlpB$D@?<a
zDz2>5i3LiHkSfd#LP{Sl%xC4iln@7s>{pt1#b1$L!g@tk)bx$Qi*d!t(iX?B4YfQ%
ztj|qT!G;PsM8QYXbo2!S6!CuTGL}q5=kqK5RXi5<t>t3=zE^+tdo4D$g*XWQ<p2X}
zb+}3`{fcZ`PW!leM_~8lJi5EiwR@s2N1I*KFWvB8Q}xRqO`z<ukAN*~5a96+o{(M5
zOD}+n2{^Kn07t5*WSoc^_-V?<;gnHV+0xOMx96by$nBYan7BUZVfZ|5I+tJ^S8{hC
zJfeCCNzB+{tTlIX=@J`VD694-+rC{(;A>aDCp|Fx&HTR;0XsyzHk(HtWR}y%-;aSW
z*8Q4;xDQfabAo<?E%y)K4w}TAPopTl8{55m&4Yr08-66j7_F{RQ8|%-MWBf^82Y;<
zlv1jsiXkF3ZEcVsOx8pvW9M;<skoucTQ}R!tS>3(hq7MezHU!AU8oZWji3t@XxzU>
zCIqa1d0N6c>$!!*`-vaT(At|%Y_bRbwX|d_{&A$q4S2`-xHTKb;v5x9BQJ@Pz*S;w
zCtMRNAKy5BUBV2BC>J6N3WQ}9NLE=wXV!H|c~V|>Ho3U0;1+FW?j<6py!eBgLjHJd
zLA>k8#@vFT$C-;M6ZNG^q2b_+b$P@Pb2_QFKa~!%RVYLSy$nI1_$#nLR}Z#TRS&e?
z>&fqbSY0*rFn<B&#Hl2cIF;;EJhp^FW=nYfiaOJ0$S+Ym#ZNB)iIH~n?E?$9O(t>K
zcmkJMB6C+ecsbylEP#lJ4_+iakTWeK8211;&~lAYRLMs;*&^}QbXP*<NB;V($h08w
zgLm{$_{D*e?+zGpGC&J{Tg_&xKOpJmt2WK)rEX|1$Lz4oC@Q=?FZW7oHyn@$7TCPs
zd7365XT9yLy}DLkWwseY0r~ftmi6qjm9*w}e?t8Jf#1^d|C-$P##x|V{kF7mzN?7X
z&4~Fq!GgvI4_L&BspTV2C&+o};yb6~kh?df#tuPNb7w9AqlwZ&Y}@p)JK>W{QnrD<
zH}8>%28BeZR}f>#hDwoGUqzDK=d8mfO$w{lu&P^oC9q;5k{zfalrp>9pozl?L)!6!
z!y+Qk)s~S$i+^mIpRPpFx0gito&JUhCkedJqMK~;S4+Bq5<r-t8KI8|F_t*W;I<KD
z1%IL<HTN$%IfW@aS<7GX_&&pFo2KE;zN~No`)c!no3t=_+#E#!#+9_>>xElLEu(SH
zKj{+cj^`o6d<u21n2Y|*Ssw?6XV1RDvjHBWFic7lTKJ#Vn{zHA3807j_;V|TQamtR
z#wkEW)o1OzB72@lDq!#^<?#RjmGN(+b@1frgV17qf<f1LI*QyiN-}~@^f#QaP+6O2
zQ`TRsSA9dkiUtwJC-r<yYL=}_z0j?3Fu#}XUZ5Fq@`X--RcJ0}?ZQ$cwz+Y!$fP3^
zMEuZu5dHF-!ZJhaKtUQ4Vn7>9jNAk?pL?joj%d11=WZGxOKoDdtc5K|Zip@Y*KO*Y
zrA%FQV5VNav2`}ryDi=S-7NF;cL`)|TsW2Q4jr<)pHK95;3olY^YV_irXGth6w7Q2
zr+<S#2YC9bqQ>R*0JKh#hFH6XF}k`1qoiEiLzq0>gM=trTULt;8&+GXA2zNQ6*sLu
zq&7QQBGG^4VuY9Vhu38yAV86k^^BwtRFG7dn_9Nih;6D}x_di%JgBhxr>}1Y2qF9<
z_5f^AExmndx9gwgh4nE%+d}QLy|ctZUgI|p4KXz%Kj8)^wB5MVi_$&om-Fng7PXWP
zcP{3A^X?FHvGA2gq9FF-=J%oQT3w}G(%ED(wY_(%%VKI@Qf-&ZjeRD&LY@{B_-EqE
z<i2X7klU9nZoH=+TVoS=M3z(qD9il(g7iRX_X+V`v0dL7)xd*qzxl4%+1z1T?=Lx&
zy-7a;LiAgkOEo;#V<U9=p_|>zVAj}F52+<6(o(NU4{d6YJlI~2fy9V$pFRtm^t9?H
zFYCw4<t&V13g*f4mJ*F;2s2I|hp=Hv5S_K*v*cOfcJQ>ZXd*nAj-l<r;(%rI<oR#v
zq=B>XqVY17(wl*<CXQA~q_5v&$yZ48@}Nc1+*}x?5RInbv5(wr?MB=3V^#u{EH4jM
zRF$8PWE7)NWE>ogQwy9N3t7ljr{y?GK7lVVncke0=M*ZjQf*}NSt1UbOwG$H$Dzr2
zc4|A8$|B?ta?xpod^8S?rO>gt`4#xWVjhNvmQ%@8u0W%qP&hn1L9v}hkV?=f9-B(S
z;}|3YpGv?p$uf(Cr|Wj}0%=ibx==<2i_*}F{iXa+jyb;%wy>Ak?@G)Kt?%m>=2Vo$
zpC~gZ<)~B)vM2=uEiEX*)3x|wDk24%3q$8Z@lsUiqwlY!7Rf1+GDa~)hD4<lW6;n7
zK1rBT;bG_9I<G*6LFW}g7z_j%LB=w%@OV%*HiF1x+A7p?K2cC!P=v;n6X(>E7v&OC
zo9j~rPNGrbG@0ZinMG%@5X<T0!eSCa!jf7Ea0;4&rV7nwHXEmrVHE<0yi49<A979z
z-5QU!vt@nTl(K`zH5qH_tL<v$uD-z(FH1Q#w=5^8f>bh=lPT58assM+HV$7TM`BQL
z9*fw0gUi(Fodg;N&ZkTJy#fvFdO%*(<@aw5%LsX-Ixx_TrUDv+LLm~7NHSYLN({!R
zFldlq*!ThYz#U~jAbgnIY0IeM-@~pni;L#Qt6o1RKW{`f4BXo!Z@#`Abl}+QR|vc!
zZ#!FY+<NB|Gtcroi)Awb1HLnl4KL|u1Q;L>yb1X82$P9cBa=y|S0Fu2ZAP<>%`EV&
zvv{tOGYzflZ^f5TcY#p=!gbG)TL-UMJw9@fbI9pr_I>R)m2p)M!&-d<fH85xN7>|9
z_<|oSDS!3?FqohFLo(k1zGf1jXBZ9#*ECZfeg7gf&HZ@iLOl>8CdF<1j{AUfi473%
zIt{3w0HnTik`0^z_dP&1XpH^|4M-qvZMTrVECPi0Gl*8ZC(UX4&fs#iH^#9+Z8Z+y
zd;`t@1(|)Bu${m~U^iFkc0J9s;6gR$zR~5d6BOyA2}B{Nb6@LcUh9k;T5@9|0t2s)
z|5H?}@7Q*}T|W@q|3zRMWLC8bh<$nF^2wZ`?8X3`k^6rkXBj=8oa0|9M|@DH(6aKk
z@I3E<cj#f%{Nd{^+yOI%)9;dl!1n*foYF^kpYDeqTkZoNNmkeS>1Q=smmWW|ByuEp
zXtW)AUP}yqnwyE3jdm91H4^N~#nyDNgL0F(kzAMGok)P&-kB<~`u=sePEmZr{DiIa
zCRDFZ>YL1|I5=>dhUCS3Gw?T)r-499$VM(@@e;jv*%;n$I>kv_1;VdAwg17nd3Zv>
z0$m|GJ0F{iy{s4fTmaBBpw?ZN3W}JB(|HmVXTnODoU<4m=ldKtrkSGjt)LIGA;O42
zV+Bsh^Wj4;HCr1Pc2H1{!x#ha9kdN|9*A^PH6Hh9Xz0>BqD<*BBc&1A{!p!1?&&`X
z9;`GhKM2f)F$Q_$Fh)O&Rj{17Xr*T214M5|AxlgY*7Z-}Otizi<XhkbLTQzk<O<4>
zO_x$cCD=MRP`g%``y*ai?%E0=|75u$R@1ucB8YozjT*5%up{znAp4tFs0Y)7wA4<7
z9OYPaU5POA$)hex8mUjKKB};(?|A(vw9Kn-g^FNgjt1Vi-6M(uGAG^HYpBK!)AA5Z
zBj18)B?v%+&mS#JRW4SLx&oGw2PuW3%fRLRv)UX|lqW1YxAYu$1=>O#YbZDmgg6_3
z?9Z|f3bf)`8bIPfS0**#B{y%*QfwD02Q|euLDH(O73KkmmmQ@#@e+raVMKOlBPZ5Y
z&fbME`_ZoB;iq&!58&|c(Dl>*1*t>I8U5viIL7?p(1aX)RaMBcH(*&&h-sF1nFYoh
z7bgMQj!T89(mp+N7<W0mA`ziTJ2kfAP)xm}BU$FINX`=HNtV3_+m2G4aESv*j1PxF
z*QaB9?rU@~;>Zc5PFqPF!IzF<nHz~$?~mPJMT<D;*kG2@7Z(iUP^@6MgGr~!NJqU%
zqSsAYOBzQM0HSw_iKZfa5Yb2zV(=D*_gdaAaNDv@!BgsW`e4Y>FZ1c`;WvJ><n`Hn
zd1zY*?;Ku^-)52DZHMHz3hxqHM>3P5dF_~O5%RFqfh`C3)ok8+3$W9<P~nh>@^ODg
z@N)hBDEuCqqj0Cbss~i#g4R5a_}d)0c4rlo;=)`am1!s+p^3a@BVYkqb621#6s2wl
z=Yb{UG8u%$VGMfEB)BAOMD=p=5L%-V<C4w{Q1D)ZxwD&m%xHbs=5C5&KO2*!>`;9w
z*H$(r;DvQ>Qt{=MDC5{W6b)L6ZB)i+ZDsE2sJB`=ZE(;)nQqheThZGzXdr}xhW7o~
zBggR4WJumLt89`bWaG0$<2ExK22RNp5{JYo<^ZWkLpcbj+**veX?{yRB4H}*H{|Z4
zl)wdcVwV+M7iQV$WxvEb6ku=axoOBjLx>CiflFc#HJ2zt<Kn{p-=^_&6#y4mv`x<a
zrawk4A4n)lSPERm|Hb0RhImyfTMgbCr76Zjd_0s4`4ldS3TfdYOBi-2GmdL38&@X1
zV3v`^@0mDJ!YbqFp6bb=bTZmWLy0k;fDsrZ!jSAaO7#9XIsBlSWA}&}cc5VIu%HO3
zaXRbJIHMiPcFHJst?(bF5SV6&B394`sT}XH8SPF_NzM2V=Jz&6)s7Toc2LkAhjA0p
zRnWTr(fh3WQW?djzQ_9{#WB|3^jZh0L*KL&!2Cg!tzBcwA3~@NE#`C_2%PahU^($9
z()#fFL~#Ci@sNNzaXM=$SVkL3DKvbjBKrL4tdN-8n7RU~;K8<jx+t?s#cp)2)GT`7
zj1(9yiZHBBgf|`vZjn7Rv*?`UVYY&s!Xs^qN-8!kiYiRFII=)}9Lhq5-`^?~R}g32
z6V60Yht=2U`gm>AH$SgSr9jOF#Fgb9_iP#rFYrcN!nS>DPXcZKHbnr3QFLh&NPeMO
zL&t2k$zoG?25qxTujuD*FB|0vO9{7So84PeoIi!A$bT;}3peYWK!a4I6$j;;rYa;J
z3huBy3AR<{jF`w~xebC}U$G@67b}k2{|6i?y&Qu`Cy(Cxrsad&@TQS((IaBJpf|T^
zlBP;Ma&<vL*%dR{<vgWATp$I4vpNNF&De<K5?vH8#i?i(o&Ka8$jME<o65;p^kH}*
zc}&D-7M1{36gb8UAJNVBGaxz|dUy_55Wc>m^{8k+fWGGKdYiYm7-)!f?o5Hiy3J(D
zZo{J=9DzV=b!T*V@#|f-y$(P7;Pzpnzp)`~l@Ihs_cw!3ZcaZlL!mu-SaSp(J<5y*
zYmR{#3&~7`V5Y%GQ|nfTSLJK45xq%UQ#4jE??1$&m~jfkRptE@^w8(ty77qB7dol-
z^%b|DlPe6FE08g(p_x7KHaE2#e-0@`D;V<6PFrd1Y)#OptFej3wrNb7Tf3x%5tVi6
z7^50gJ(Gp!iiW#euI9e{Ch1Pyb6qoWU#)Ope8Zh0D)RYpFZtIB<q3wu_=fvLgUIXw
z0&;M|ZO$!c78aE@;)Ng`T84>$Sp%2ZTJWGP_3Kb1PtK|<=*4=nSzm}BT6#50&;nOx
z8En5;CUly-zwfec^1Cl^s$gR3QW>L~!s%X!%F-={yr7?5Rp{~)1={R&sbmvVYws&h
z5gtqqBu~dwlEZ<NnW-V4v^M6%)Sa>``Ii$lt=ESOiH!YL)BSmBk)|=&>h>;(+XL6o
zPSgcy*8UtzJYs|gz;Fe9xb4=vKLHRqSU2<>xXUgFIll`lmfz|hTAb9C9U7}!y-$iT
zRVjulH1i-hdQC^Lo5ZGv87GpuH%VNv(c!Q1`!fKM`<1P8hfI5*G>nsFPZ8bF^9F@6
zxRJv2^VCNE|DRQEjveV9J5Ug&O1a^h`KU>#h@$S)mXv*vJZ}zZVIuu{ufz4}tp3@g
zFiV<q3hP4`UZ2%5<+ll?{3tp~g;T)XMverjwP=&vtL-;|sAQ6;-Hkzut~;bSl0u9A
zFE6I9Aen?JovuI)SPJJSil~3u_X_Q4tp1_o3nj3X+ILrse@us>#6%o@u_{hi5>rfX
zJ$r)L653BBH1~C7w&wpVXDvDUx~iT}LcwJO2|wxk5%nX>Br=llN_<h04YD69WLBYi
zA>Ecvx(7DK|1|TLb>~NnzT6$v&kHt0&hJQ?qs~%T?!a;dJwGjs^WaOrxZl&xlFR~(
z`2KYB3oO4xlwKipJIfIu2r<A*;nM7cz@*U|{|-s}!$Y#yRu(;C{GBE|QuZihB_B|`
zT+jquCd)l=uqzHga&b`npvf(}59hVLZaCxNw60?*%QeG7IHBhKP;c%)ILUO@frq+x
zMWLhV30cuSHnMHlo@*blWmm<nq7zXwhY4Mhcy`%C6qiLCu+wCOAeb%mqkt|aH&=D8
z?arzA&c!hB-6f1Myx9a`G@m^-js5)dK$#o^A05V+zy44{j=riY92DPRO3?SdmJz{^
zt}DR{G^4wWU+_=W?ew1F1VKA{u=GPy9xb{PS}*M^ABHa*S-X^RwLvx<+|*6~hoHql
zvY@~uq}cFImz2it(^?rpi<zWCF+H3hXt9tSD5j<%ke^r7^r|$4>=?x;C)K%|DvbNw
zI7A|s!l{%H9jBC_+iBheCzx$g({?7K>RRD$sQ9w8EP@M#T*l8;eO6W;Ny(xGxU|fK
zkf!k(|KX4FQk{R|55;pR)IbWHiabV6X+_}D!f6(lCUP8eE=;tObK+pRtnA0)t}G&e
z`h6?QJhXsm;?RmqGaCYz#&#TA&OmfBu(?}fe-I!dd_?YNDl1)c#!q`6WJBR}a%+;9
zuB=k2gLp>8tRzz&Bx9OX8JbyDrB++lJX&&4(5~|rT9Z^A6yM;V@&Xe)sU{3lmf$04
zW*1oW*n+`Ib{HdB0w|b}ilkM9gy7#!FXWwf#*#aHV)rjX1#dB<)nV%Shz>2u{EXvY
zQt8SGNXnz1G6u<d1h!cotUaAi(o!_vL1Fe5^KF~Q;q_Y2L)-TIZuD|$*Zo*>mV?0`
zEr(aKZaw2*z;zpiKa(fPT_1`a`K7P7V@u@w@88Fhr2k(K@hrGE=lu69RD%mT^OG%G
zpZouxH!c>IyQ#KQSjtk(Dy)8~`|W6*o;SRu`KRm0+U50RE|q@du{ZX!*H1i_!JoaH
z)z%!iwmLtYQf+JH`>(1jb$-W7^%R)mKLAe#7M~BmZ68cfURZr_kjqDGJvd4M9Xy!w
zRG2J5k6(n7C1~j-+al?Q8VKk|lb`)Q`3?&d7S8GHpbBPi3}hhp>q8=IJny82UYOsV
z&M!~}vuc@9I;mNwO|wgnKGv>3(>V)uC!Mm-irU;5d!mCb4WNT5_|`}h8x~FnRKaYc
z456^No>+N?gP8&h@l{h2c!R9_lSSAnOh2AQtr@N7kYEeW3KQyjYRQa({Wc@}V-H5K
z!Gj0VgfGm(0y4^3PrLxz{JSWJGtK$PHQED=fZ*yTu65#WI)bVZm<oFcUL3{wV<{)B
zZ;;Eols8cMTtrU6D7P~bW;4J(_y!j6m3u^`8d2M#cc!JkN*%4Kkc*%ri1SZh$unX{
zxMwhxxcB6<<W3W%7SiXI&eYVJqMGl-{bad9Lt@AH70T3vB@*&4!1=*z7qCd7-_Cb@
z+TEorX}_sp%XU*<ZPk8se(LwDsvK>71zFxD#g-l`l_ptcsPuSz&T5>9%6a(vo-<z8
zvO6!+^zWeyQi=cW@S*2I<k4H0Xu+NC>K+l<aIZt$<D&|bt`*?*kT}KpKcd`JP|*V<
z>0R-wPL*nS_kevi!b&Pm=TV%WEEhQXG@~r|o~m?lI;`mbN{p$*ugN@@EABK=N$W1$
zJ^DVQ{)`4NWkOtqDAiElV^)0S1cFZGjz3T|>APpkK;-Xsx5fssR$@)C;9$w+_&UvY
zaBLRhQi7<^<kc1UhjM^i@B}9&iR*)@Jam0+@zimJO`e9FRaosJ2+d|KoThFW<wEnR
zS?HL!83AKh=FH|wGS_V$9-YNN9($qm${nt6jlInr33nHTIsc{ZNvidLDIE)_nT1g<
zG__PfbLfSy-?6!hv)Ze~3bS!O{DK|$Q9Y$K?wzY-KQoG*z)d7O&e%RnTB)|4Oys2j
zeSA?A*PLoxhjsE1cH!sq)A|Z?Nrqd7*G&F|^>x@w#iyDa0{-%!lVuj<#uVLp&_$x$
zm=oNq=4GGxv^n{IN>C70p;G-H8IPN(B{xDXum?-szjkL{Ys>#A>EO$hB96YcLV7Y0
z;gi3+{H!rd$qF-HBb4LoJ8?&xt0_87a|vi(Zi?S8gc1t#>kQ-fK*>8!6opZyXFIU(
zxQg+sq>0i{Wj(M|>w(L4T&^I}Ez1LTj1Kpx^M-X!uckR0O@?Y3O*BX^KjD9g)&pwJ
z+>CeIdL}rW*$mxXp`M#tSc7|Za|#vKbKLvn$j-F!vL|OF$lB7)`W~<Q>mjUEYD|a}
z&>G~~k&nI=C2KHCsVkVcId(-g%}NabMKwc0p4A|lFUh}(*Wfd(Zg2wR)zkcw(5&tL
z-`#jtwTGp;qTV`>h<|ep73L4mQZu)D7PLKO4QbvJxzw?->ABz2B&D3fb0v{&f4rF&
z@-f!VnWx$lZwW0WoZ92+&XBzCi|5Y~&CTaZ%S$6oTya8-*eV-fku6<<am2ZiJ%i$T
z($7-mYE`*<CV>uep;{=3T91~LiWefu{%JXf+P?ZRiJX6>)abU}9P!MT$}TL(<tHUh
z{93f;(it;Hsz%6+rqK-@O-6~nXRP$crql<lj=n0j%dVA|%4ILRQ?mI)75hY6s(*8g
zaK4QP_F|gTbK?eE`^`E>S4b3gq}Q|WaGH5r#&Ja46Y3T2mVHkvtPhuPtGX&LFBX>L
z2XJ)r99_(X>-3|kENA(%PmSp25_xTHZmxQtvq*(em4Tj<OLj}wp2XqVNuP+z?AV+i
zsh3c$vv6<meA=sPZ|hl)Nafzo#iM;G{{*Y|fb%3|pVe+MRf|iHXHrxHMAq%*lhm6=
zE=+%L5Ok6}hTci9p7FM<bdtkUW4z?_Tu7YcQ<)Ze5^bf)dj{juSJER69v<b%KovMC
z7UaS*(siqa1yB1)o4}K1Z$&R(;QROzAJBPTNcM<3r5ZVT#d19Rz4?;3ci$k*Wmv;4
z#3Y`UXUjSkE0=KvA&IeubG;j`<Ob!X#hJ;h!e@Rh{&ghCLx3GXxsoZjRKlM|U)HzO
zWA`kDnlKe`EYE&yUG%SQ3w32La#dHkP%D_=kD+|1#jsWg0a#0%naP=FE>tV*+ZspP
z`_fet(gFv+Sd+4uBu&v0;nmKRjx{m&gt#qUBwghyAcP^Q)+kX}a<rBy1W;*lrY-rd
zX#amo#><r%CfEhj{F`hncr!9?1y&U|cl?zQ(Vnp;pGMD9Ld|d-zfQ=+(J3<yOUDtk
zp^sO~{t3Peh0DQo;TCRt`GhUig6QkkT&;b)#`Mns$GYp7jly=AUahm1W0jhnN#uOh
zKuN2x*!-!JsP?NGeoDXx{{jz5Aj1ezKRV-yK`ls4;@2_})7K`SOD;8pXDWC^|IX09
zZIk@xawkKrx!b)yy62*@*W*?>x-~^3R2LBb8%AvZRFDyWx{2kBglyH;Gq+yt%ZaT{
z-bw1GYro4o63D>=SP#f4K35Llo%{ySB^yhiVQVtS=ld!5Sf{3l+4&YZ;pdY4{vVa!
z0zCWrF9pV`^VUO#gc+%~n7=ww2_GoA=m!+?xB)VRcGxVw!(nSW>~GJqTV&&3{1)0o
z@F&>*fY<M_^Z|k{?hq=ycC=vwR86sDY;Y{YWBGK#OL+5JBr{hSZ#r<5k72i=LP0-H
zQJaA@IT!BRh3WHU`Fvk4`l4lX2u^;>Inb0K)5#?9(LO7mnuwDDaQpsqjv4)6Q-OaN
z%Jupx<@I>fcdgPyOmHgF0-tY4=Qq+ZD82+RQs5Sc)-d!pt)f0MNH#Sv|D7JptkZeE
zFVH{vNaJsnwP7R<)@q5*6M_$MM{&$$Fo(rW=VH=eveuz9w16xkaKZ(<GG^gSIx=aT
zxCW^p?sb@k-+wdz{0ArpaBz>z{2It?pvcY{Uq!?uKKG4Az|`&hb-sdlfVO()rRMwK
z?6*EbToQPShYgUR_PDYl4?uCCb`)(xn<WshEnf!5b-|P7X8Lqm5(i4&wQv_TL@hVV
z$LHAX{gormUsuaJ!5Q5&Bn?E{ldwoT&>rSD6e1Zrpm@#H_#C+~uk)ojfKFO-ZWc5e
z;+x;bcL=9A>g9Thxeu`DA>UENMgY|mbI7ppr9I9qp;xDN-|Zz9bxWM^Oj<Wt1M-s&
zP-a+@vE1275Tg6OCo~F?f&+#uv_qb2*I=Fwvc9sT3ej-VA3|Iq@Ig5U=MIOFkUdAv
z&dMv<t|&KTmT!f@5cMW~N98C<r()=?H<6h-^SyUR|EoXnz27Ph084CX$-dC0H8d~i
zW!|Yy%F5w;r&%y?FDzhjV^K97zD7Rr&md6sIZr+3rb95C`o{n1+gI=3;doD^4YYb$
ze}L#+y}YE&w{3i$xMSl0wOx@q@u}nZ_zsxw#u}s1m?gRUt({dSgQOImbcB^35u)o7
zXmLIS%|rzZg6kXmD%PIKd^Qzj15#;|+k@;1WFdPgHd@e)AoS)k_M#JQDYFs}7!sd8
z){gtAGysfn&kIG9&X6b;I24aaEE-2@;kC51l%elLc>}sc#n7T}zyCU#J#@E%g^npF
zIs5oKgs0NGCZh(Nm9d8)wPyfR*pk$|7+b&xwy(5JOjrY=FD5mYuMm=22M?ENk|{~U
zvxaV=u!ap95X9&@Lhw6}o5A>O-@6(hg82)lg((i$E&PTy7ym<YT!=|teaRNq=XEPL
zG~)55Dh0A4S?h=?L%;OGTM@HaBgz+qCLat>iY~+Az!eLI9;g{VE-0MVQJevjVv|X}
zfT~mBB-yvp>6<p{FiEWde*9U``HXfq_|3@6zS300J(MTClAKVP8@CrJM4@(QQ#Thx
z6S1y|L*@vD+POduvw8VOX=Alic^xn{pKR+YEn791JcA$$hd`pD%b&?)S!Km(Q3|}S
z1*L{KhB$<zdZv>h`K4N22Z=>J?_?Q8BZnW+04)hYz_=TRO#}q#d0aT@1W$?z%;_vr
zuvRZ$t*Sc3?>VG`Y4o`q`O{rf=Qd+rYRj3g&hNs<ht*wMDJbYAYwT@s{7ehjiMMbY
zI5`6KHPoGSS%Wn7FGT=~*bm59i-<uflaWLK&o`%7l|?h^#RiV4kGu-VTzHwmjUIzs
zC>=~eNh0&<ly2&9QL0UkD6szv6{N_j4oTxc8H_l@tYsMUCicA~0_Z%zOL3ONmb44^
zx^B4fp=DllP)ZKAFf_0G5uC4zYSgEoF0kB<$cNel7L9q1C!_hE0=TA4A+(?H)jLTp
zF+r(G9-Msy5kE$Xu(8-c1VI7tu5N+(mm*ognn|jO;sqt9OOCL*O%5LLA1&$aW4BO?
z`7kopTXy7mfv~^B>!oG*6+*(L3Y9EohqV=ancY^ToiiJUo<?)CH)q%G7HebU^W7V9
zmT5w_M{8=H<beTdy1b|-wpP=U1xJ^7N+TM&T#zPaK~S}u1;cr`#2t4{c%(;37mjVA
znP=OWe9ENfy5*K$*o48SJF2lL9f8+vIkF&p^11=dtbDnH0EuV;nGi_NR$b~=At`R2
zN=rOXIaVVS)u<(oxO%l&yD3b^9U)H)R@-_?9Ze6k1%jCQ<1e{MejWj>1|D4f1|B8e
zT&d*>jeCgCD2svQ_)t~Jo-jOBXC0fMA*pe>U#LdghkQx-XkBy2Yoe3c0F<56*8b4F
z?r%6*sm1QhAr{r^=^hvYB2yEBLCo({V3yr1nldUE?GtsAWE!IY6I^)uq_j(^ua4U|
zEOZ%0jp#h?qyUzMxx0XFpoeX4Kmuk~IdXSKx~=-mJ0`7{XgX`*mv3&@i#7AqRV#9T
zs0-{#dg^>ii@xPdwzAS_aNu1{Ulz)sAR?SpaFv~M!k8(JwD5u~6}!K1r*z32&-T>(
z9vnwC2T$a~ja7y?6fWqjjhfqIS*6uId|53YfhSw4F{Al((swTNVN>YsT7e6)Oi}a6
zW~)R<Lr4e@M3Sa34d1{S)VC0WHnpC)VoiTLR-&WJFNlLm<ZVD=9jlH}oeEh$soxfI
z6NHxq2m*N+As%;*KpKVxFT({ZxCGl!M_iizwq|W8#OLsXaG2v}io-J(5EOyWALH=W
zrt4zcrV0J4-t>F2!J<x|lr_0-6E%ZH8h;gPHS4LsN$|1hk`Ot(D41vW4&(IV`OdT1
z*FUN<%Ph0lfH0)@d%|6W%>>Z|kuLBb{fpApCdJw@xUsP|=W>L72f;8ohb)VKT&>Ys
zN4f(!^BL>sMaf+oe2`I-V1{@|5H~b#?b-=t;X89o)+3?6x$tb))Z7tgIr}vq7CbJI
zXdIXpt@e}y?2`y7gYxjVY|9PF#dODS*0}1!Wm!;zz|p?+eqX(&;>;7i*c91iFB6AD
zHq1bAb_vFG&_vs91Nqy?w=RcOiN))<#;iW|UF~?^!4u&``AdM?q3dxlC{p01P|#eq
zExK-ePRE8`mT_ns(5)b2N3L0OC?LV_M^cR2{7S|d4uj3Z&TpxeXq<iAyGkEZG?*Qt
zM$_EWOs8&KTjyfxveip^U}Nq!4}$Ndex43{v-l5wNrodU8PDgP>`^k(L!n13yKr^Q
zAs}+>m<l2(D^at%;B?FM0Po)_@dTF188r?ITAiHz7UhL+evRenA#5;FE(Csn;x=U0
zb8n;Ld3NYN%;)9oELv{b*y!XpIxSl`Er2z^E9T&0dY9<PW4AYX)<(}S{fa+Ap;X^;
zd{M!VPGbEl1Lh8Xo0BBk2ecf-cW$X%2aK*ow_|&jH)+mh=;t|AKYYEtRL|8@Kcfko
z$Gxu7QtZyAqME1~7Dd&UaT3{)pbBl7$~6v9m`E!4q;g2+)Lks`_!a^Je9sn{93oQ(
z+p&KI!=lY67~D=9c>4dIe(<NTF+dw1E_}G_c^ulhsQa!0-|#JMnK%TIG&>ntNfGBT
zo%B9AOhd4Yw6}WX7-S)F%_y~YO#;lUZ#)V)nw~~%Lef>;2lYPRy3#DW0izBu1Txa$
zGc=oau;tF^Msks>d)cf93D!MhexB~_iVlO~50etHPJ5`56<wMZTP7yA8-3%?8(1gX
zG&YY%tOs}zz5KR#LG>&ypgQTPpwX=uo&$)jU<YGKF@U!QRUV5qCm`xYm8J=z{ipQw
z4&_W9V-PDys~EP5pD+rsCr(6SR}nGv?NkS_s%W_N<d<Kh)x8L~)i>1nD|9qv?~9UB
zFA}8K2DY-=o;PtH?YZ#&|0KnidaB!Sy2TXxCb`+kTulgfd;DS@)n9)4`gnVNx?4Ss
zeXF*@HW;f|q%9watX40>P`mOHnT3BaFDz~4-~?JV$dku;%*tT;7AdcI`a`&A(KneT
zx4tG-llsi;Q^5sIGfAvpBf;&3B^6TBGc>vs-1vqtniX?!=#=^rFs?(dejx*4{Jaw9
zP1b+UFSuXkvshu6oOn<ezsamL*j8NmrIc&ePC8qNHIjqs<<%w=oV$e5EvAkP(+w76
z)E$8*%jj!1(sjP@?{Ok=gxX(V|E0HXs&6f$1qcD@8_lfURJ;9>S!@KT+ZG*a4I8%&
z*S?}Y|9;#Fo&Nm(oAWpA<^J{fI_{00hNhB&v#hMZPx-YfzW-K$QRWLo8Xg@V#!Viw
zQ}B#}jN0)O$T#$v)$47Hch)M|3IGLdD?J`xbYNn5V&JH5<VqZsltYn+EM=sJ5NO#Q
z^)Wc-;Zjj4-4|RFQNh6hVRV9TBM1YhZ7u<LazoCH$^b<}@oJPm@<_WTtGDfDh$l~$
zBD*lvswl$D;4$u3=cD!#;R|n*XZOIRwfpX<q`8@bn9_MvGeRMYH8=uZI2i>wu%Zb!
z5o6k9ETj6Y$^iDXNe(DX3uWTsWD&iQ9|=t(JONJ6Vd+t(qx*l~x}?Z(j2#aUzYm)Y
zw?z5L0q_r{opl#*60jhJLqe7~UY+MhFnoc;1K8+~d}rMTCSCWb#;QhAJVPjG2%RGM
z9q9n3!?tKmi<659F=BDM-~e;(I<s`g{)oo{+%A5Wy=uKjg(afL4OO#&16ikS?y3r@
zMm;j~O(ZOz%6m`mZ%<#(U)CC{(JaZ$Z)6B!zH(ha=5&naNu8R|x6EZV#G|9oD8{jP
zo_+*j&0sAWL}nm@9Aj`4OtObZMtJ=KHHi{-2AE5K#xamyC;4zRM|_QheN&v(rY*Jf
zd`)$ps*-~r={)$9Z34QI?0#*@n(WEGY2>h$<~5gjQZhohO-H@4rXjF~Yav&3BUu+-
zUX+1(bia60NfTCH7X}IiP07hFBehf@h~NPo>}Cj8Y}phX0_RxvZi%e&N|bzoK^z<i
zcTiJ(ZXDd<V;@0{_An2~kY(2cNMxP;F!&z^F^C@mFH7x!<(!ZMf3dJQ9LpLbGMwE7
z8!_huFdNczVCvOyM<e001g8T12a83iW2Bz!T#=E%x!7G`h)a5m^&`8ms%A}3|Nr0U
zpZ@@y+6{GFTrr8E%6ox*t(QMjt^SO(yFk1nxM^>0(%!UM%wdj`OT3Wpwv}B62K(E%
zo;|OiJd?858oOmCNp=mymo~@2_ntN3C;}c^V#D2tQ$<Zc-@25p@sIk)8}qRPGqIAy
zypuFLOfVgYC)IsbvIyhPn1tzB@YNTD+>r>ARO91Qc1Wh-6{`{<Ok7Y4-+Smt>{)bZ
z-4@gM*V&$kGOc@nOxU&=t01v2xeAHD8*pL1s<DY^AZ2j;MVG&l;Lcd&%A91F{Qzgt
zZGMj}%LZDh%SQ-b=Ig~bt(^KWPNU})-FeZT!G-}FD_K_wV(p}&VGDWvBv7J2Em(Z_
z8*h!4Thanp5h+*-_aF`>ic)1>Io5kwravdijWUIs_sE?QW0UW#Rw&n*%$B&lgL2vk
zke#%RW^u;wkYVFlmn`5P^O&wjdw<OE<hSXgv}ah(ND8}&A;U6;14?I^ep8sZ*g?{#
zdAdfP)CpKtV!`>3t<lRaBd5ai!v-Nt^H6lV0y5l$Pbnzhy4CRKi&pOM&RH-2cwr5i
z{yTsxiDxl8>s^*`ltyPxtSs{xShHh})=d#5VC~(-<?N{j)&#MnM+Y8}vRJFxc=7CD
z<6SWs(G?->tP}3c!l_x%{px227P^k3TfTESPXeD{&=6)C9X*2{v(4=RwAXY&hk9%<
z=p472L+nkeVd+=&ZGTD{R3w@ps3x)O*j@~(lY%QGY&hA^v_eesHk-oaNu$o*2wY{x
zyqQ;fF-PM;$Ux#9M`YgC2M!1>rGC(Ql(C|-5i$&E#}G%jJSG{IdK;BotVoq;8U-38
zUvw8{*bqA=6+<j73xnBg0$Dt!1S)^t1#J>eG-K-zlHzos=;`=X|Bp~H6w&I3mRi`2
zcjuE@0Rmlx<0V_re*8^%IO@Qp1J0(Wv|R~~XqrI1Pe;oLsxD3}?ovsXIt@toCEF{B
zkV6CvEgB=4+#bi}lH?dA;Zc{98%N$ropaV@ZfXP_GHIDi3RP@z+v9U?l&B?YB6!)!
zKm*QjuYuN652=T2eO~ruC2PK!JQ79J(y!G!iw747v^LPFFIOuy+A!unIJgWS6!8gu
zI0&=$0iX!n&4S`~R+4edBci-btM-|gXW`U(Qw%;`J|qDZ?L)UUVp$J#V=#r;qajgw
zh)Doh$AfgtUebjyC_oy!jOH8O3q9>CSL4Y#7xH3QYM24LtL+rotzl2QZ6o>^y=ttM
zh6@Yv?S&LU9pN5xrJ>L<!VeG@vMt5^D-;%!Y)&pC$#-i&9KBUgR}`**0Cd$6txUz*
zVzIiQO6CF=a_$`3UOPSZ&P&ge2BS~ilN8&rFwhLo4@ZPVvV_N_JGQWPMInl@YhhES
zd?N&5Dbzgc(}HO93yQcSDG$CAL6k&Nba=f))v}D6d?%!JZrcHYF*b}h$*WW-0qoXU
zMKrfjUu^*Mi@O)9%1(TZb;Qx`G0_8<b2CC7*Hjl>7<cMCifB$8fo#-bvzS?-z6rUt
z9bPuegW+F8ln=vD^dILM2=xk7Oy&K#<%Yhl3a5S+b7z0~{`L9x`m|&A=xm5=JW>bi
zF4g8uN*0*xg}M${jQ*+r-@ZTIl{K{bN}Uh5MbP%nb>eW@YjY7U8a=Q~W7oudf-UKf
zd{3jY=FlIUQ56eLh`TDI7Yn>`Mo4)<P1Z?sCqGfE=`f8Tk$H%bCFmnm?!<5g=PV5_
zF{V%)MoI)%=_Heu?wpq8(c!&LcLonvBMh<%ays4X6|~PwvLsZOsZ;wkf~ok<;IY^R
zQM8MMdU;)!<dBwI!=G#kdBE%6H_|a6{Bgih*IO3z%9ImP*pa8MzSS%CI_}O3SwZo5
zoTuZ{@o_or?R1zA+TLuI^ddU=4dL}R4c0XYnp*eo(h$#)K;ArjPIc(3QWZ_#b=vS3
ze|{k34jTp$2v_Ky#a#xbH*3uRdzGe^XOgCIfQSPn><v*sHx^&9W@385pqovBvXw+Q
zI@5_`Sl_iUZ7u9}UCD|&4V<-<x~)wZT_5W7F3K>SND=cJ(wM;%z<SndWf957wObI{
z^M<TVPSvO50jEWnTyyJU$j+(;9d~LolVu(qDKn5)xmk0}+|7%iljdU0R&*GnY`SJ_
z8!4O?)7Ph@=h_k0WR*jsUbJ%Nis=TwvXXZ8wdtIj=bEu-zm1!)ij@c@Kr}RrRbs-s
zU)ssYiUV|W*#W~9z7^xjD!)yQa0rhsn_k=G$tI2)Dy898(%>fwUi8Zcx%uP(rEgi0
zD-+?ifaxuzuRwhBDAWRm9S1=R?#@eX%mvk*NlmtO?%gW~hem%muSU<#r1zjf#wWj7
zNJtz#t~<JCu@|;Gf}%h-^S(cx_-(vD4JQtv<1z2JJ><C3Zcrj59Sn0MpDmn+4>jW)
z?sd?L2(2$GGE90HDfydV7dv7g1b5~dxi7(Sm=6&1*?yKV{C6Lpd>{!Mg!cp;mqxOU
z7BZBAhdPbc+I)FFeAA6~O=(uWjwls2z1~&*g_~cZAsbt)NWx!c;?(H2bkSZU?+M$;
zS~4{#SYo<%&*ko^!Fj*~M{5c!8iyU#1m{_h(%59N%``CCS#yIz)NG!4B)GGZO24)P
zU=Rmq=OO9#OtVNSXLcmBO;=2)-j;KJ^sXJVlRVR!QoMu{fBts6dXdYF$!u?=Vhnko
zG2O+b2j;E$Srr+0SX&$X{_6YV`EfovpM;+=(MwSlmN9+NHCQVPs#YdmKC|>SkEKKH
zx@?@QF0TS~RJDm}K(5$<M+h8;;T=-)Sv6n9to(juA2knBTDNGnYfNN@s~fL*X1@*h
z-WmYs>(}baFR|kyc8iaPM(W>23?GY}^A)I7&Nk`TLt{@wWlC6!Sw@V_uIUh#s-c84
zXt-*Cxc1UZ#?&mUgj(yy%(tF3Uv$$%FSnT0EX~}vUTaLgT>`V?Y*IwRSbPeVrH(e$
zfg!-ZCrjjJ*|8wp?y=|sb(<~#D<NI5WJ4L$LE7xOC`9tqeD{kj_j!4;b859tA!+tK
zx)DT8l>;?3!WU(5Y7)0$0FJFs<!ht=Ny|?ZQDY+<Xf)BeJHzaEDWI6d(Yc47R1z#)
zvMm-=I2tkd<^=&05|ofEb4U}jN4d{I1wqF(@C!*uy|gXU1;wl_B(e1~S{miU5?TA`
zeQt0~=<x=iGrD8ZYG>?buxTK1Y$OBUkG&rp+TR8{kIty^s_i^cSs7P5da9zPtax>v
z<#>aHx~wG%e`gbyNP+hQidLW#l{J9C*T|6_p|Y7CwmbDfc`3L93B>qSQHMNP$Vx~p
zA%H$h2Z)C>35w$a4N5P0u}lZ{X>^!uC1z@%2Px%rB7F2ma753MVaHZ#JCf54)1a>_
z%ds3VfMy2PBKQ2Qa<VSEk5@{ZFznTyYP>us7nNg-I*_Tjgv)rhfeYc*GK;Idd%s?e
zEAq)I-d$g3?-~IcKf-no(vpa8hTir1aHA=6fCdu|Ok~zRK*uP=R^TE<=i_$%c9FHV
zOpdp&hrQ97vo>*A;<Q6iKJ#(CNdyWbEjxN+(gN4?nwQndl8D3sPhaJ!0W>JQPEJ}F
z$A39Xa;ESR2ci7v)O%@2jYn{VLxwBu5Wy}t!|-&IR^1GzNJ}Au1FWGXSoAt<=X63k
z0oBvpSkHJf&L-=!Oykhez^2gp*9>!<Ci@0%?`|c-hx*lsF=0b6Q(b`_+bogdTAGzW
zD@{_$Wl+zzPvu;CuwdldVVSXn=m<wCyjY}Ai9_fD3%p_K0_NSC<-*6O<H4|AqitAW
zj(2>%3M9Aax^!pC5&i&1zx{B(wFE_sH6A2%FR-((yDLEm`rim^kvWrl+C@C-^Y71(
z*B7Zvsv|CLVLN1)jUaL~rSq3>F6YxxY|;fnRNRBzW@T)tbsj@$%A^*y?EB>7{Y^zn
z<cw|*$fj?t_ZK(Sc>EL{He42}r%Gkj?2r@yNI<v0gwi$x?q_^2D;dHU1gnaek>2y6
zAC+JDOa9HPe^0#-OUA*OwZ?nwk|}*N=ppF+i<~m38^`l`1TDmxBrtMj(c~h}ukJc5
zp~jw}9gS@~2YsbuhCv<)nbA?l;5QDUCl;r0453+K-z1dj_@1m`RcEsehayWTcD60M
zhVJ^&pwEoY6y&9}3O>-3%hWWT>gv}xCCu8G>5IVFu+di(;9~b>m~P&dxA}e{;O3qg
z$sQC@5cfs@D#b7c11Tn5jaiW)a|flAmJnaRg|!JoP$DKy2e*_ymK^qqqU2;e9Kg#+
z!}A4y7WV6jfZL{srHZf=W<}+b+ZD05U^exx&DoFHoq7ec4)WHpL$z|~@b`P&T9Z_%
z4ZG<b-(a^U0-(Lro^La*W9r79=SqUq7a~8w=G@?ZzvOBw(58qccoh!3Xl0FZ!wO@J
zKxC*p0x0apU|2z(OpO+c$c(xhsSjyzLVM1D)Rn?N%v;VnGHpGZHy4?POPe)uS<m7a
zvPaj`4avs$1`?)n6gJ{zodfZ3PEHsdch1fV`L0Ya%c{0d_vt4zaZSNjvIR2qgCA!(
z^h`cDUrvYa<IobZ5WoHy)?+OH|F;;$a(Q%*`ZC_EMV%w~yU4a>)RQ4Zih;&EMW>Ms
zEGBH@Esgq8{71vjAO;`1InV-xNxCK23QD%pK~F8`5}CZUwY$}_Vj+jx17=Hd=yU=B
zfdGMk!9shK)IBZN+1~1DYSc9>S65@RnvDYOa%!c#N-8Gsm*cXT3@RCdH_NeoI|?qr
zazzDsxwYi7nvI+FZCyzOIKW}P5jiVY^!_r`C2~-K&ecz7?{0nP5mmK@sU}I_knjy+
z0m3dew}Kz!e$@F55wGNdcX+hpKy=M*aWM;rphnePi@cp*&kB+p*<h66RIO`;4<M6a
zAfqnD?(FU6iTUZaQbjZBd>NkKWP&zOq*9m5P8qR+<K1bq*zibQ7<F-r?5lvqtur$t
z+9Ws=sI)O;lXq@m87cs3Xmae^#%!DFTb@$Eqs+RpKf~lfzaQoVt}ux*PD+Tn_d++R
zb2<WRn9*~JaYV9a0rl%4NlmA#ypM)y3X;g0PiuJi5BdTMt;~#u3nKx!W!Y^*5rPVZ
z&zqa|u;%8Cw7G1jxI$2FrGLTmEb^PPoZ|KcMc@g+593HEvT-{bu^Q{ra+}`xHhwCU
zryR|%pZ2RzkEA4;<oaD4qb-S+YFmbGcPQ)s<D3t1y&bv&OGzQn)L&q}cAL74N%XG9
z;1S(-eOCMHv*Ucphz$yL*P_|&TF$=UppPYV;B8}?Y3!$Hvt%>`KSA>zNQXR3Q2*OY
zj<=fu9W;v7PvGdvq<ynkM5}mZi->JY6`D^dgD{fNcY5wY{Xnt@@m4ZNJjiZXI+!#x
zT4)uE@C?b6De3nw6S#Az%tu?Yse*pi-XF=yVS3k7EwigW#+Y0A!I)_iLA_XgZf7{^
zB~k6)xHOl+yuHMpLVtKrk2fvV%uamJO2t@dz0z+607m|7tB>Ap*Ta77jV~BN11wCJ
zEvq9XGJ&e@J^x;B>pY|fX_Ar-I}-q(>9`B|E0I(rSo4(A?&l2JoSoC^Ru8WfzRX>V
zJg*z=1Z7hG`m$3`_)S{Wq*<WN1;KS?P~>)rs1K4~-n%?3Bqd&SGJ_Uaa4ir`Y8@Ha
zW<v1<)3t#TV1u$O#{m`!9Wg=Z$_&n~5a{f}T+Cg^k<_u!?EX5~2Ps!z;YFpGqHu(l
z4ig_$FjA>K^V))%Hx7l8Rf=cU_64o#2`8PFC#XFd0Jj&Ir)>@PySq3$)ae2r212jS
z!#b{&LSEFZ@Pu)6m)t<y)S4}i37t?gD|AJb4^+!n>`)hx{qoe?!Il@NRh2#h(xf*>
z>hJ(D!pmip=W!o#KZFu%zKps3;K`>5Z`iR4RN`y2G!k@d8uJj2jm=Dgs>Kv>ag|AF
z;pljusr_SjFU7QNr1@W+50-I^=EHnTE{o&tz2bPhg4U^E#)v_?o!$qKCYP*Xy@xOq
z>B?8;_$J>WhAl?qA?};qJoYr*ctgpl8|1lGnZ6FZ8-^YtxdgHAb*S0jR!<X7&M^$P
zp3*_hznX7Q$l*O;ohL0ObIfc3oEC9VU<e2bKLp<V5n(5I`9LYeJ%+dNFA+~<7UtyK
zfe1Eau8vTbXjyY3NXU4jl7rz%(zp7Auw$0(acUdYSxHK^s)RVl&Fii?g~jT14SffN
zMs}@*NR~%xoY4I>uO+5l5Bz;>^wW;!fEe^}DeN}JLD*&9iwl*2){{)Bpr8?YayE#m
zl3<>A0sL1tO1Xg1tf8LHJeYwa4`8N0sb;Ogq851b>U3~E>cfDx5fNhUPdkGB!-mpw
z4M&u++$>b`2KUJ=;bq5@=miAJ;^MYi%&`LKwLNPzv(EGweT=C6@=BqONohPObx-dt
zE8UQ6*kPR%<A2Watht%3r7`~)MO$Hbilz;3oX=|oIdL$=j6_IhCL}}6WWRaseAcI3
zd7|MNVsry1M;4yYdHn0A%KLd6tEFDQaz5!}9T%FpX1&9nfJO>HP|R_mF^==h3+Y-)
z>+ycVvUtLS4=`AueY14GRW!W$d}xjnoIiO!9z3%a?FQk#x+aZzy~3He;7mNr4`NIE
zg0n8((}mG^jz5gncxFo9rV~;NiKKRy5#}7#OT>#_ER&nf&j&w+nza<(prp9o=LfoI
zwOTX@N84d?SgkQ)?@5Qm3~Ox=V%&Q#s30eq#W~tiBYDc*qEXuR&&J(iJv-|FdM>>8
zE>>dW4CZ!sEK;&K;$v3ky@`b%Yd8y|{>V}pJ}+rhi_^y!Z<@)A+T5&joH^c{>%2ng
zzu^?)$onP9ymphfO%?6+>NUdjdMpZ0JfH%{tedj)XfaKwI#bQH)FMk|jU@&%KTsXS
z;RN`0ddJVpLVM={yVt68VJAA)6QUNl^!dw!yV>6?|K80}vaoTrzK)bL1}*}9>>PBg
zMD2K^(}kLhxHh-W?7tV|VHnu=L2E9l$oXt~0s}dm95RwVL+zL^S>A$pWl<X_LO!sa
z|CQpbCz^6l(w0Dj6lR$iqmXC`eJ(+rGDW}pg0qlc?7W8w{nAa$Kp^EegOE{FY9m>4
zB}neCJbm?@J^JyA8Z)DEyA`vkWx92HOX$L+<5~Z;j@k<xxG260@kwJ^e92~w-r@gW
z3YCVf5ga2w&|pa^yc^WPr(&I7bu=AxUl>Ked@Z3zZ`<dm$NhFbnnjyv3mpX69P<iE
z^$c(AWZf6hha`K3XKV{Mf{rcQu#+|ftz7Qlh~QvZBXuIs?%UgKKgHtj{qJ@xSnn79
znCD|FG8Y1hhtl<oM#Z**D{PMQB;#nU+t$!B9-V@P%QT}o#E!_z!hLmBQXV8VUJ?w;
zF`=1RF97xwXIw39eYM+u_Ok^C<vY&lJ6cSBLfL;y8dZfW0Hn)zqa?@lN%|EZ`q8A{
zIZ}IenJM;01H_uNrtDZ2u-vibz~(<1lH&UR^KrYLPltW`6BoH$OMW!p-SY>tstNEK
zW-@gj^Iwm&n7pLyUv$bSKS!l!`NRA!3BQKOQtpx%(<Wh6VqB_2m+UYGu-sv(S$DiR
z7{TV>#cVVPgCD-`SF*4KJWTLnWgpItr8&wMHMKTl#<WNOqr@RU4QjuTv;N*npY-1U
z8hf4_i`+=@`(dj;pH8|f*xr4NO05^YtaWPga5qho%Jtz}Dl=o`4+nFLZYh`bgd{Zb
zn9Gop^22#<iokjRD2f6ntq9OZBK)C+sx%7Qr1sI&aA!f|i_#-k9+X(hhAuQ@OR5o<
zw+y<Arwj6Pvor6c-%3qR>}YOuHPqMGE!9SYR-=#z`Ai0tRF1>I*`n)M=UGSNc|$($
zR?lOqLcI6CuTx68rjg~|tW`U@C-b|m-RFC17Dvl}UexgbXY%OGG}WgpN%~jM@hQN3
z&i+&PQY6&Pjq$J_D;$NH%=^+9`9>fR@CfA>kJjDFT~xA&)4eK;jn{AN!p49`bo{BY
z0nmuMGcvI;uzn4nZ7eYBZ0B{&F-maJ)S{zjgJ$E)IyEAcH8Pi`O<)-@@p~1U-i6!O
z&+SNf1x!lR2Wmu~49$6R7ObF`nN6PTgZwM4=TkXZ=?cS4jh$p&lKFkFt8Qw{HQtKu
zWKo>pE5x34S>4`>$FFjAAB0bIOVTqaB?+QgPK61u3Shush7^^-L88T>QxAk9N5zot
zcnUin&ZGOjs4jJ*5;89!j_lM?lEdOK6(kZ)UNA@!a}Gt1{#Gfof%RgYR7}js%%&68
zz86F=J*2`ae)nW(Qifw0cN?PAYOuT^7;f1_mOEEu%N|xq*IQ<y{>^sl0gF>|q!8nL
zfuhEp?{g%#XLvn@lFb%Ayh761+xO(6vek}*M3*~?>t8Z<)=P-T^J_(o9PZl0cWz4{
zbrt=?K-aR{RR!Qk;|sigG)A|C<wx8LR2{FpWm?_h&by}VH$oe+n)Y<qWV;*CH#1GE
zK7ISel+A9>I=F(=(>>&ba^igHey8XIhzDf7BzgL%=mwaLvfK1svtN1J2fxJrEKhK`
z?28;<Pv5+>PXnsESzr~_Ij9d#38;hEc0i)FIeh7k!DyE{Xx=r~L1}w#Ygk_!h-v*r
zx9Gfe)1B~Ixv8f}?3=0E`rD*=yY-%X<$d2aoGBz#Zc8c3bgalm%RbzBSs_iaX^BG>
zyizG{c%|ELw};$><lYoZa5=7#>1AY@$m0?{49RZ?f^OGQF4?!6%SE<$n=E4)*pxqL
zef~1<wnQRdq45&-qgt5Z_0FN?yB_l44dQ16;TbyyuJWCEr(KBi&A7MI(6{8yZIB`w
zZCU#bPGznGF&koeFz0oQqX;T0Nlr&ky{k!-51Q+r0;k``H@R5&g7q;A2@?4ZjkmyU
zc&8CS=k$RmJ4<YZ8`ARzM)ED5>q@euURMI8WePN_)V{I=oP8{v7ssI|Z=Qo(gE1BB
zjG{>>?2!DlWon)A^sw2R>oSkS62fvf=e)X(XZytK%Q8g91w<)RL|WV!h^DdotX1k^
z^IhA~zzBRjkC(WB{XJf<0!A9PsB$;htF_H?lT3NoS1(+j8Q>@^XW}<3mf2mFvCavn
zI}0hTmf+X#o*w6;y{~ujfe+qho7Qx$bgfZg>aj*-cC~az+)_Sx^?WjnlI&5*a_A&p
z$d8NJO{59l;8M*45sH(IM|;RWe9sUnH$Z$Hp7J`Z*tC#AgJSZQG!f};s!j8Tw6yfS
zyZddih2~J$8C~m{f~N;@%|+0s*wM=4HuMx+&4vrG7w+;=rs>ts><;_k{o{VUYzFkV
z(xsS$SZZ4K-hKe5l{zz@S9$+S!P`O|J)hAor78nfxHqh2i9LV1bQ&<g?>LnACC8X0
z!51WnAeFojnu!b(AfOVrB+y_`QizP_XEg)cVz)>JD$_)P5HoLA)gOlYnh}bkh4Y!2
z7tijXi!2c>gCFC69{}rpP0v#p<T^{u6}`D-_gyvB6L)Dk?BdGYW~_L~!(Bcm!!Mkf
zU2hEU%m$T>EqS1gb{>^7(-!FvKa8u@%M#|}?5b&+n(N7UQmJfPWR#=s!RX4uLT7z%
zjZgo|jNbq(6pMrKoXD0P$V-#QrGaX<cerps&X#c|b(p_JMGIJ`*`B}k;sOs<lIjDN
z@1ZC+Gd$ij;Etr&S=EsD#95#4Zu0)u2?sCA=q(6Gl|qh(1UK1(wbbtDQ<=Xfr8@9e
zF$=1%C<v?ci7$FCARPyiY1?is28*cQk(-#7JYOy{wv#EVBwuXf;+J+pC9O$;0)bqf
z^h6*HkMph_3?ysq2+<#Hur?(F5AH#Ll9|NnPTUNd9mNVB>dx_Qi}N$0+oolzGd>kg
z8Dl}^2%GvC-L5Sa5~n(X2UeqnO)GaaFv8YmB|V0%bPGqA6-J2Vn6e65)FO!oMx7J^
zAN{Z1PP@PrO~p#M-8@vS)in#?=_XoUVW>{QG?FzfBkD``gMM#3(W1k)ZBOi$dP)_r
zY0MRv?>w$~`oo2eP{bxY;-m(j;(X?NMoheLmz)spb%x9*ENdk%`W!uf#}Iw?|3JbY
z$t|#VaS&5Iz{Z-V)s5tg6X<{i;Ot!{9aM0D9KFm~4X*;Q)R&XDqaOl3dbwEpcL?6=
z%REi1kcOtymV#BpSV|DZy1>D{3vX1EHT=rz$@PYxJPHycW=9mq!h9TCznJguQ*40<
zW-coZpC$-rSn0}133u?(zB+p*kB{UA3KX+D$o_f;VH4Yu^PJC$r0EbNCQE_yu%ZfJ
zV7p>kZZ+q%zH!YbV;R)MX<z%8diX6y+!`}%)Ll{f1*2FT&eOH5W)(sdoM~F%THc8j
zLVd_MESwH%EGy#6VlTy6^fM0rJDA1v5$DQ1Y1r=Z$KdtlARma5799kizOJuu{f$<C
ziC2Gxr+NsgWfaAS4Ze^K`@k<W719kxjk;3xFh;q!A@0nl`HIZDL%dy1$JIoz{5zzK
zFY&2<MlJfGF~pyro{{W1xw#W8TaSC4>$0Nh$sX_5C+U)XgX1HS&QJ&ocspZj8y&)3
zrpj|F^`DZgA9hhs6`2O2Tq&Q;&t4o>#^n4+xh1mZ|LWaxyo1nXsLJnh5(xP$MZ3fo
zM}DT)!m6bcFM`JBhr!h#;XaiBi}f!i!Q%2v`@<&Xan-tm_YH3cYWWb2IpX(V%fVEK
zu5jSc6yuY|`tX&=Mte>o9;Xf@8k!1GP5>49Mmh-SjO|7jt)KPtB;$;5o4i+VG`Ejb
znHu|;P4k@_W39d!)E{}x_b0BnLs~jS+tGO&PKQ8ebYm6p#KZV=6h%nFDQl|8N{v^%
zKvZ#r(*a*zsh=W7GXC9LXg=Wtao8*QN>gD5xf%^+i~0J9O>8q^meKY0R1b3#HsZ<F
z|Id_AoazBMI)uX|D_TntJRQ#%m!Jm|Q8X??bA4c<ZpFmv?C1#FINqp%{D%(W!dI{z
zLE_b4%!fy!XQ;<*r=VK0<J#kLFSNqZBUtznwgsdGHOBVbqe*GSDH5eWl*Khq0HIi6
zMSXST9JCtO*Mu$dx!lgzkRo%p>+Ku)NvqqSKIRS2xR*SbcLpq;@@(X<5@TW7AEuU|
zo^bG(7d!PSL((OWVAGdGS8b7>zA+U==RLL@^R*g~VPG+fcxdrhbzbb_II&2mpcpn}
zPUjN4PL^R-aT<$e{G&TH9L?R_`VwV>kD}}d+-)yKz{1Kk+FZr|@#J8BICrfe9yWQo
zT+etc$L^@o=ZUoCjxa9K(3RZ+Cb>>==3CdvF&!eXNZ8pQZKiKZS94Li?6lrz43jbt
zW2<S#QBRF!^e@<<;3vu?O#*szR9%rPmorKwHZ*I6u7uSR>qQt#y4gZ;(+3>xzSsmp
zUkYlJt;wylxyCJFT}Xkn4bStS^yJ<0?pfDo2arPcLwzHR@EqtX!(-o(e#qDQ@HnR6
z&V87EJ`0{omX{Ra-Wlw!B$*BAJeQJnQrlTp97so(<GYNfoPO@Ol&~QKESv@1O2Z#B
z#r*DVQH-DTNAO!RsDmBcIhDFQs%P@KV^WvmS}}8TZGyzRD@Aklv`M{G8TKXd<#A^3
zZM@4;`pAoN2p2<!^{_sQsbRBbvG-7wbSbASbE}hGvbpBTwyC9>5R7ASAZ-jV2cDw@
z`i0<-p?TLe&w&(v7o+&g(*gVynu{+BwbM^Vai`BGd=3sRtai0){?Lf#fkc(`Q@jx5
z8qFC(y+3|B@m}Y&fdnFPP%k4#!g0LIGBu%ix#qcW3OuHB0g93(*H_Ndb;<tZ@IBr!
z1NGowO_3Sb1kUuU#MQf?UO2hndZ#a1Te_=aY6{lH10CWXhTy}CLhpQ9m~&}`RIZ2U
zYvImFuD{^Fq%Os>si7!e3#%8-S-GZ>%}Hx3%kh5k`gXmX=9AI7lr-7Rw%m^!8OuE(
zEM!`WFd5&pu!lbhL90nP<6yn}=rMt|s12Ruw;v9WRL~!fO6(b&_2#u9R`@99lW#Zc
z$7Mw2M5Nybqv!*$eYTNMI6BGwh7HU_G$roAylTLQI6QD@ET`&`9DY)U_|q2&V(AEx
zu?3y|;Yz?rhAN}@{8NeAwHiL{+|I7IWbCZKVjc7%;7x{#i-ZtJkSO#;KUrGsTZLYw
zlFI(A=(1n}{pvawS=x1<oMEHa&*$&+x06%;a7ZqpRY}+|2Y&lT{j`CvUwQWy>Zd1Q
zu-@OEm6&{-6=~;I5^vkt$BHg?YL-quB5{aa>8@dgOEOc7lDJ|$ei~e8fn?i~p!H*g
zmcXcqhjYJ|!N$<;I8A17Psv!_`37YZs(z1}c(mxJtk-q8PjdJH9jk3Q@@7#YSht$g
zs6a43!ZZ#RP&rnR5@=Yj6S7&_i0KJ#39?`G?YU92ZjYq4f&7UKF2zs&l)f3Uo;Fl}
zI3us=@|xgyjOKn-+R4i|WSfr)0^G=|kEk~!QNXxoc`E%ajyolh=M!Shn@!3_5NZjr
zx`nZ+fwHZVR=z6I_^z+zsFalc>GS!h)RYg8%!VMT-eLI`gw*i*V|Yhm>?lD*U@&Id
zT_5rJ!L6iqMdKD#pOF}L-L6WBR&gi`$(aOK-{}xvCJZ1x#4$b4Nb&1n>dGtuS{6>g
zX&2ofCE_v1UI|J-8CXw1$NKp*{_4&3ytfsD3Sq1(ly5TMRStNl*N|5mt=&9=$}w~E
z-AxW=S6r)T9dMYE2OBqn=san1=^)#hKi^TtTU75bVMw8yjay(kos?b5f)eQX`OXm2
z-kuKp4iEQKjLoBLf?u_)Ekt<Kz0aE@%{`NR>;`l6PLGA4H-RAL_kP6Gqc#~aVuhR=
zQz+o!7|YY(ZjPxuI23UU9CQMSF#tMvwMUGCUdQ6#Vq<qr;k#~16+~VYj__XmK&aYP
zN#qKSwg?6A7*RNk;Vp~KtuiOc&=O2V^RGXH^Ppe_rkpZXE13@qpe!m8PMA4+YPK4`
zRt<PC*{3`BIJuv5S&lQbtiv}sUPvW2Wj10s_@5ppA%q?eB+pL}hi2(1h~?1|_QV(k
z;i9BMc*d5Tc|#BwHy)RG?p*3&jM2Dw51wem6P3FG@zQ}AfA8=kK_phF{T23KJ+E%6
zp9F3%9}fTNWX(4jpH~N%^~t*Z`{9cpo*oqc{CUs^!4H3T|E|A2zMsBN2W#fBt(8Ow
z4rD3*%=|8zhny@0H9be8FZZEd3Ogpql^f9r_X{w$?nE;HIx64g`Q+wMQ({&5#XN+D
zMjYPb+k~#pPBJqfZkXnjLguIc>>6MJ?89cm?+783^;Z%%2V#|-l80ewgRc9sGVfnH
zKQDbbfc&#}A&aTs?U?*4!VhZYqe%9p+kRc8{AQLVy#gtbPyC5cWR|sF77rhv`U+yP
zWu+P9V_n*y=hIl3^PM&GAYLhwcBG32mMOEOwJGy>S1G?d%;xt+n0TEEF^{Mxg2AEH
z=Ps4FnSF6wWK-7aSYo>rVDMx;Dixd-Cl$huLP=D1gL-PHd^AbTU<B~6izq@&>$=*D
z=MLh&QE|^Pqt3>+%e48=>uEn{s2qI0Zj!gND|+kY*hlf>v=H|rUQZqii7=KN>Ynyu
z$7CcT+jdze5$(-!UeMrFY7!CGGux)Vt;;;l*6|`jC<L<TpGf(Qe>tqCysUlLb)_hf
zy}b+>G)nl7*0;olosXEE&^WaIqGEUL&05d)<+8`*d_8?rw(G1+qTr#B&cLIM(BbsL
zQ<uV7;x;TK(D^%7#ffgbSnojwsftY09429ueLXK|M=AdjF$W)>BO<2<Lqd=x$OUEV
z71}~W^|cFJrao7QA-^aWfI3{o9{pyA6%msC2$WrdVLoMU9vK(%-zHBpAxU5w?JiRM
zo@fH-Fa9(@eXQ@f1x=FT?R6StFS|<R6&L2jZ8O5wHTEIOFiK&3n`&W%!3u<v1Q3j`
z32WU48bf87t#CUuar&;(kP0~`DvN>;glbiJAekoDCdfuFYHu$A^cNe~-3j6jlO1;M
zAfUa;&kAf0ML^PfWa4W1vL)}EK6(ndI*Qph%PMC^4?)!}>e=>U-~}<$`Q1!)BNQ&4
z_iWtf%9Boc)7G>dOUA#bK2F@;Lpke2*y~447>t*^ahi^qlbp+GnaId!Q6?Hs)bYBa
zpL<KF#-waZW3|0E$)xu){(51X7cjpwx5xsYVo={`^BURmS$8UlX)-f=jueKhFOvos
zq-;Tj2NfJp#7-z&j(aJ5798}^^;=cy!k!D)ymh^tb;ot7=^~Ui_)W)xn9;dvfWmP&
zeS(|=7~!q^o1R=MnG|7qv<?v3fxLR~HfBjGF=P*2Y*MgQPBB9-UZ|+9Koz;K8eT0B
zg_#MY82M8rxfTxHNJefGW*0iEEuVZhDjj*e<il|e=O@qS6Zy(lKaRg2*Ld0P8qw?p
z+PzA#;`5mmmk$LHU`K@k<bHS`%f2NXS8LeOJ5P$E>H_Sl4JR2UjB}oBVhyfzslAq+
zXmCK5H}#}-1ZCJ=R+ZOU>W4lERb08`Qy+qQV`SSk3-$8$cPu>-k-A7R?yr9zNN=J(
z`gWqBin_n)s!C}xMKft`TlTSl_^4jkd@rUinn1ztJBr8caz3nNW9j5qJW>HWgqkUe
zAP`db8gSu$-lTgcI^6zZl;nf1tGbV2kX%n{@E5vc?8u1n`O1^x_lm?<$P`+s0kIw^
z$QB)P5vs%%REC8lYe{z0BMce~818G`G;L{iH39m$$oYC3ee@K~!|I@AfINBB9Q&fi
zOVg=(OM#HAd_LF15PQ+)<FQ@s@Bo)eSpKZLP<3{~(uQrgzb)534jL3vx3~8_Oq0Po
zow(*i+1YfIf>XPfZLesz53$O3?gLuFS8@zjL>f(XxZ-xd#Av;v45-|kVL0*|yL+{}
zaL%2BBg0q|SDlMH4!};-gCAd5`^DkL#~<tjzG#goVg@@ALvpg*$|yo`qRO(iI||Aq
z*owG<f{EU{4lWQoX3AKhI|TSze)q5flbOkJC~ov|?D59pRXYURHuwUO{<yzH{&+}>
zu+qTfn2zAIagr%mxrfPfWZ#FBGQ0k=kMJ2O2gjnk|Ii}}x;g+^C6;sYn9j69KcX6U
z8i>z~%Y&0W)t&H1a)qB>U_`f?xXN;(nrf_c$FJVrZ&ybRdaoi%M|IvYoOgoN^XaE}
z*LfqmCd!yeB-@6@$89TU3~6V+PKVr}k@FVJHB;>Nn`?@)Z7{d9pD6qZMh!1%tY1OD
z6>i?0NtTj%)$=v4Y{sT{z)|;HkEW&=Cu~R#6TqyaNmCkIL^?OOSy5`cWFbtw3)auQ
zziuq|{_|1uAjX=I>Ej+F>zJwO(>LCa?{7n&>^T~8ayN8NBP|ThEd9*=Hum+;9?iCU
ze!5-u7VztDFH1?)_=G91|J}AikTMxIBSazi+sZ^jWt(g<_^RWrT<8^9VVlt@5TyCl
znqdOHOru<Ue1=h>A11r!g&~4hy$Wr|0zyq*H`WD(>$0RtF+a(|PR!B`ICo?w#CUZJ
ztIC*=zkpvgJ-@H@s?N@3e}23?-+N#1CQvEav$kGy&#AC{rFo=s!h0ReuphHN`IB(f
zlg!!k;4b!Y&@E|41fJnxMo%lM-sca4^>&wC&`)@A-gn=uIJYWYm)9}FF}q<R&>za8
z`1z~b)v}p1X8IP28Nr3$njiD(uAyb_J7b@!On=Lt*mv#qJmH7Qg)M>R9O3>ah|v1K
zDvRr>%Uqkzdh*4}pkn)n2V#}3e?BEPmGd%a3vmmGWn6GAv8Is|%~PJb&dm5~Y5Uit
zG&@gPh!xEF*JPV)W2LB{;~K*%@~f7|nx9M1e>~-IDlK%7Cr<2U7Ed;h>&C~4O5W4E
z`&l(lpgT)BuI}vCtNCo4sGI=%rq5h1C4UD6%oY14VATr&VZXr<=*jFFxQn~n&2kYA
zLX$34cg=bGz+)9%k#N;n+JV2e7$+(GQt#gUJ>O$4=hA{%c?+dj>+f8>8PqptG49vP
zagTQAbmIH`iP410|KHthIqX>bk$?M}imG0yPEx!YiCu*RvMW_z{O+lk;z&_SBmbbl
z*S0SwGf=@)=Jdt2Y<Vrk?tI59ErN>U4Cweoiwy|L9oMI__-;GLg5z|_%~osb-Ef8C
z^C%ZIm+f=ECdsq?=;7^pIiHRf5Y?y$vzFC}f@XPGBi!_4&sK9f9`?KKrWXTV!9>aw
zBt~Sx160-9emX3NFR1eo^6fU&o4rSH-Zz5f@Bz+b3CWK&#r_d@{30mqw(TRYl&hmW
zSQdo>RH8_Bu)rS==@k&{=8Y;*gzDq@SU|dX)0ks#o9cOtuM{cxY3U>xwQ%L<=9`$V
zu~}~UDz$WQb4RK0k*sF{R36?!+Y01hPY-e-Iu^FRprpjLLoulwrU)3J1jWH#9su{@
zamZdm46#cNYEZyumbY>6m~b`x0{iR2T|bouhhos<@UVm7D@nZwOEx>jfSa^=tz0g{
z;$t<kSV(|SNOmQG3ay@S$#o7?L%&L5hHM7uCSq4S><}AZ?lTVdLBDSo;sH5TF2S}D
z&{6xDA5x@hW!E<}yorZaA-MG#q4!WVGiS%}RuFmWOA#NO;#DiXgIYljYZ>SD_5dkt
z67ez)mZAr7zZDN)9c#WMgRImvv>NqFsaVJaE=&L`r%GLN$Mv`v<Pah*k0qGrIwJ|s
z=7PK4M(&rJJMF+fNw@5lg(GZTqKA5`!InBlLzp~?$ctmZ6SZ|>mcfc@JTiaz&WFkj
zSw?mOwh3;FCSigqT;^NujbwvcsfbU;wo;hBC+oP@skLM-ky=NKXD1Z2&s6+=V<}%$
zSNb^9J)Ju$mT&_R)&mD0mv)LH+98bn!F|1toQ&UJaDfZ0xK!X(%a~6YfzX~2;vJV9
z!$UP|68hve5HV%PfJmefNcqDKcuD%6u_g!Q2vwsPrYK<FtN7l^-bz&_7|8GP_uu;~
za6A<@u-_F0hrQ&_$4?-1d4Re-l#X_TwI14%3aTfycwFQ`k|(#Ak4JC|nTsU2cSL@w
zg7>f_mNX(vzzIg016Keu4)cLV#5C#n`HO6yfi2gF$#^WNKQ*}@)xlM&@HSi9v(4eW
zp)GUP?d^KCm>a=$%+qJG5qT*R7UB+$`E4~y7(pU@R3a_p7ww*aG%5Bwk3CzI#*Ad0
zc}1fli{fmd8Q~#VRD)QKU9y%Ys+uB3Ovyu3VSRa(4mhJF-r{tkL2T_#T?uNR&1N{H
z@+O1ABQW6aNbT`uDs7O2rAUiX$<AP!t!venRmc@&`Y6R3bjvAkcztbNUtOcuUlHdf
zd)};T59I0AS75pamR%6f!70W(p*e>RfH*S6aU%j3&cA8U&YT@eY<Jr0wtdy8)hgs4
zt5HkIEvhvrdJ$%~4>2{*kq4%?c{%h!0kykpSJTeLXYd?9ef+o`_q$DPgV=RES0J|(
zVBvvpvh`Z4-IY#b;u{&L>3i4y@-e-&si@>vf!$0=6Mb(kph@&I=c*kY8YHuGuOPqT
zrp*m9TmH=07^mwW2LM&Y!=>|XY{s>DU-^{XZ%;=i7Km|G1-f-Ylzw2tJ#R&H2&xm8
z&lR@WS{q^hyj9s_&W(MsPQ%@9k?18P*(_7cq3}V65X$?yeW`O{pQ5Z`kVYC5g_yvl
zKwl%achaNIB2rmq7!>zhB^B_;V0y41%de2_&XOqSBt8^kVfq2Ydr^VgqCmEiYj@}*
zo5*_R%xxCjy%F`j*x*<S(ZTDO^?p4c=TljT?GRLH44`k=;v?HB1~@5D=R-qt4K^tC
zUM8)XSXxXwUvQ9$Xw}&F-MHIsg&hFcH_R%~t;<ui`~=xL!xpJ|i!vzwUz-|?YwKEk
z-GsN_y7ycgzWVz<Zr5|m0IhOWt1pWEd<Y7n^8WbIHN$qd^1M7#X0UAUKRz~Xvy*Ji
zLq;1GZ9#JdEJm1)xs}rWJt&<DqQ;5AdMomXJe@KLs!mVj_`!)*Vt`5kiaQ`TV2`Q+
z57}x$Wevou@OimSLbDGU<ma|mAg|P&&=T%-%0;D|e5W;aFdZVM17LxMh2|1ykPBs(
z$=(8Q-Rqc{7ltN0_vkCQg|P@W=mRCCCNg@aG`8Objd|iKRA0GNCK~4pS^^}==E%Q;
z#9{ZEW5R?n;mEcp)yb-4A1$>1q}OR%5H4IxSd`D~fE3AEe1gUAg&JcoOjs0dpp?TO
z@erB$cS3y^i<p)}rwT1c#TA8_D|LeAc2Cj%Cq*i4uEbNZ_FQm6ZcDAPu$C9e6dY<C
zi-yW>>L4QLWA}Qk$$;NU_n=QK*8{Rn81eM_c7(~$5}uXD%hYJrAwP+!OX!*JvU$+H
zMi15zx#N4$?KCCuN7GkT@;=n|AUY4fT1Sk{1>^yUlFEVw)VVS^Y3sh8Q)m5NAZ+%!
z26j5#ZJ1sH%S8}x!H34M*xZH={Af6k?Y8=FtF*}Jo2%vAXp@UJ0BlzqoQg5x*Eyei
z+NgKvoijNIVI(^CJFeUF$N0E=ARb+IOHAIunDNjqCWpymYi{%0T*xcTnwU<`@d`r_
zGE`<PUP`p0@5|acur#2PYQ9&6RcvV*^iPVg^~Ry7@4hn$CvHYYXmGrtUfbh&AcXUs
z0LKp}XkLi5b&S_-Kg4g@Xc}@=h5IsQ%gq<<W#CSUeBs)GZY4Z$<B-H2e~B{@Eu1GZ
z?}o%(`%e>aWp}m$%++ylM&BlI(~hw{eyyE!qS1bHriFK`!RpI<2VJD*+A$;cQT<jd
zt~ev3z7*7VUh}w1%oC*Jo>SaTM2|j@bWn`m-?+2gJm+NZ-IXOp_j98C46o;C`tT{q
zXQaF`@69Zyg1&h%=8nI^8|T3BSyu!kRh$#%4r2<Y=&pnvk{#FfkcZZitEpGW)<Bg#
z*EKAjOAj{odpFT?7?*oUW~<m-?j_l5c%>?!9d>~F=`@KX4yH7nLrXRrUNNRELuPnr
ztRWBx?);`WxN@SA6qyo}jj%j-cerCyw1=xN2lbt?XFw!;@h0Z!D2RXs8k#*lpd&u{
zNd=jLZ^dm_zrgb6FnU|W@EM7-<ZjDFsKxG<e6sVGT&E?+&j^rYz$(qrik363m?)kp
zR8Z?pqIQ1YqShO3gO3hRUB{e<ckymg*m9RdEBk$$U508A-#A^^KJv#7(g9r_QDQc6
z9N>T>iKI9c?jEk-0uWsIVWXvy2l4TZ(*Zv*Xsou~m36GaRp(~jRccyYs+biPO9n00
zC3|~D<rbnf*FKOaO+NA=OzZ1c(Tv7la*JXsZ^X2p#{_P+Q%F&$)XO$L0bSyxE<t_e
zHMgtaxIucrt4ea>2j)%ra+-_)<7704zO)j&{jhS!Rvq@}Lh8FRx7+=UXg>vL*SYq|
z?^U)@1n3fTWHw2PVU6&JlPk&X=Xm`L!hVw&J|*c)4>a5=Z8mpqxo|2<<^JQ9n2L1`
z2~KgiIORo$q_Wp>l%laQ%OQ_twdJg^7bN4FDdYV8QGFP9%2-h&QLFFUQ7gxmIV#_+
zTSw~Q>C71to?QzoNZr~pR*ykl*#co<4Wa|}n<V^VzZ>LcE7$oT_&3<LKq6nD@f=`w
z$T7S|{0uv0%8`9=_k4=Y22u6vbtoUucn{-;4*v}AdSS*KUg^S3USVuY`fu7hMP+Zy
zUeTVoPvZ=y;uCg!bET<!v~~o|hscsP#r^Wm(=FG0+v+s+>R#`I=|Z$ieBed0;1bCz
z#tw~3HlkYzz4hj0WI-{#h&!%}Q%<uSiX+lP<?&lJ*6~QyEqB%mgoJhj6rLm+xzQ`w
z=4*eeI&Sz-GelAI!Et`ZOuT(g_w|hHt3qMOdQD+P7@r6^o@*ULRNTlbGpnqEIP?(I
zw^n}V7!x3XgP#a|N)<Osd))ZIeGlYOu*V$)B4Cf5Uk^*86=nRf7hFb_PeV2VJ`B_&
zA<tBg&0P<Ke;1jP62s6yT|jVC;T)c=keD^9NebH|!tR7xJMOLSJxmuSIs7obiwrtn
zapFezX0dOAwa+;Y#fncbS<jE-yEsg2u5(dxC)WU7CvYz0ukt%G<z&$E5o(X2<^!_U
ze9xfnm||7R6twV+cjiUve;g^`QftQjwAU0LXnbm>2Zi?e3dU=T)6jC3ZmftDGReM&
zfjTAFNp7Y2#Eiai)hF_}f9D{I4u9Aaau(<@^sMU>WyrJ|M;|A?(WEC$3J=o1ZR8}Z
zz@h6cF8qb#x6^GOF^M9!xX0pz=&0I^@r70MNAN5*yr_qypbEWvHQE)qMyqIBF$Sik
z(0tXXWK?HzZ(84{xjD~j^LRk`i{oiIC-CyY!#&eA0lUQh&1@-NyTUUP7ej&0+Ddr@
zw1mQ6%yD3dhhB<%2|ezSd1y9#{7!K?Gs`i2K{OuBbF`f%|MRynB;ofM3=+wq>`}wg
zRVLm4_DzvmF>9|^PM8dn|N31RlCt6DN|L#l=l-}C;7QWPB(m7uJPDI}8utjDgMT@K
zbu24#C4EiiS^F$`+LLvf9dq+lQ{tSk2qwYJ<IJIRfck4;4d#&v9#@_K9@Zhv3E=@E
z3GV^K)D0zJeGUrnl{rvCv{6lS-%~n`QY0!t9VV?5s2~KbRErXvfYa2(h(58HgY^8{
zY1i-2g~$ICcS~^2AaKc{u43HN8ROJDi{Ecs=4pr|tsUXW)@~Dvv>UZ^?{9{$yqK8Y
zoAaP6T#e0Gkzq~pxDwA}(m7GQq%pKsh4muPn6Q@=HLGFeSR^j*qw?be54>O!Y}qVh
ze(gl9JjC8Y$;n$kLvryNB<dS~jeS-;i~c=$8WfP~!PU9(o-5Bcn1i~`O|cPwlevr}
ziq*9e`IQ|EZ$MP0W>NER&G7fX>|FE$`tpBM00ck)=J0=#=U3~0QFJ?iPyD5H4)Dbf
zPyO=2;Vb{M|8)id4S)h50RKiZeSmPqukqKbaA*BvdZvATVCQ%2KSL&r7b+)06m=1m
z3(D#DoX;$Fy_D|pV?sSY#U<lD(e847AIP$<L}>ykIEs)$Ku?+|Hl9>mF#eP|qwG_|
ztut{vTnA}SeZ0fyg!=?+Lbr^FQ(3}G=VY<5P_$?1aT?7$etIHMbnf7b^fGS7tPd?D
z>Mevd>po2i9nmlNrxWKYK1UFkQ0_yXw~uD%g*CzMN5O#8p|YG;=Jw_=!>BT``4>`e
zN^sAV$@nfLw!?5n@tuvIP@K_t;$(OuKnkW43Mg6cEixB;<nqR!NE4nHTu58!G~#*S
z0h2W$&T6Zr-IJ|J3dCG$+E)dd!Xt52Kzb7;Wu3L6_p0Gnaqjrvo0q-gtOIaNnOW6A
z(;a8pHZ**UwwSlYH`7!*%5qXIvW|Dr&+X(aOV26uzoyWWa+H$gF>4d^i^Vrdg6NbR
zV~9WezU+1dgobFQcea7Z${A{Wn(dA!r&q|rOm?RtLgQKFw;QE{CUcUbYnF6TUTj;f
z=PA>iJ3mS4cBCdt=ZoQHHr|q!_4;>ZpL1K?*!gIoq3#Or0kyqV9mB6QBOWB{j|SP0
zi4KE81&`A*Of$h4Uu;m}7RR_qlf%<I5MMF03u>I}Z+h@h2fvhE%ZXF!A_k`DGcK+{
zx^;%pB9HKi$EC`)FF47L!TdCzLqbODxUq)s2qUc`(P7wEHkyX6H<4k{=*#;Z-9L;t
zk(6uFxz30z`Rd4DPx&+$okAnF!r%+db6vj1B*&s5Yz|0Tk2>lkgqcoMu@T#*tW2<-
zpc3CbT$-1Z9pr?sQ0Me7oXIooT;d3_nPOwgOpl`J98;!2G(Bjk2~aV469~%O9Cs__
zZo{=O|Iic2^e+*1jb2_I<H$Ri;)z%M2}yTLAO0eGZ^%(fJTmSWA`L=r!HC9Yx3kew
zDGT>sSHpJDHV;#$mOK;Mz3Q-g+MS&5+!M>qJlPgH`8_^El3W(!;a}Gh42r};h53Qm
zx#o*xD_&_z)F?NKG3QOk&Z2Fs44pfm{;-mLg%MTJ;03KS!<}-p5F^9zd9(gUo_Hzl
zNSMK8F4-{CXr{&TOex3p`@xne-3oV9Bj0B@gUqWcH&$kiw8mlc{v}{5VWZ3(1QZRs
z&pZ4cLvHAgGI^Tco#1@Lzqc*N{TM4h$%k`BteqZ-bAh##DIK&e2bQcbj!+@V_ZL^h
z^VF|BooKOECpSS+m-VQSst(WeTseFOn&K`H)28A3R|EXp#z--d^ER_=b#!gzh6AdM
z`n?b*LR|4yG1RMLp=(z|xr?~Cu5FW`okWvxPE6T?-`T_hJDF}xrWW|G2so3@r~Pb<
z`+eQ6BJJs4drId(=Wuul4q7~(KqEZ$ZVHQnq}pVKku4Yr7+oymW~^J6KS44KXT!vo
zj~#x$&)#N>UzRk?MF{^UAE8<YXC~g5>0}GX3w`*QAm3qsWr6iIbfrEp1}h~TZR;fy
z57QV+Hm|Z6Y&n_GMR8r{h~;GW%j+L&I%z?rPU@4#yyv=%o#VNaQWPRumKX*RWNrx&
zWQAn=RGBL<E6EV7jIBun+}LIo={IU$i@!FOBhq5w%|L;1G413Ni^g_aE;0P~g`x(l
zYxQ5$J}VKH+RYn~_xMhcF}Qa-V^$gkHd=tdc~t}U`GF0lx?G(r3{JE&Xq!=Bna{D|
z1E77%Mt6FmRyD#$tlQue7Ktui1G}$8_z>{|?c-bO^3AI8wz2HK9jNCLp8(yOP#T|z
zo+a;~b=d&k;Sk6|i~Fds&QC`02^zW4YZ(O`MG4=7_lOc+2tQJbOg`^q3<$@l8NrJX
zUJJhifcISZp6HJMz;6KY8W$_u`J1^#11b@^Aes<Ju-;08IeM~vJ%~aOpoo_>D(X)W
zszm`om-csz`#GSkM5hWE@%w0t=w+Z)AsCzlO)Dcbj$Q&RwC)f#|G!C^Zyqc_`kUjb
z&A5N|_L{A~?V0yx1{jU^+h6#p&qfxE6i<z2@WF54vG7-TEBq6F5n19%@xj??XoJM;
zcq(e)>5w2qDev*|OV*NHlZKy?R(iC>b8YG08EA=iM1PzOo+x;8_4FGqKgT&f0?9L{
zXc4|1PsO#DZ`fmU=03zd=~fF}?vP!!XWHRD5H#uf<2hVoiJKh0W#0}S6;Ej%X<_$I
zRp!qVzlgsJx<xJL1Sj}O{2!mF{)HJb{ldfGx%u1Y__DMh^=%K@VZO~1J`}GA|MVN(
z@vq`BFAAyN63*?8v%$PB-ZZpWzMt&E@l{Y$&j%LiXzQ-vQS8X{I`B}kJE^l>xUxG>
zEsE=<-H~dMms}J%YuMk+39@A#xC<}?0vm@Pli!&mr0-=Byzo_aysZTPZuU=oo>B+@
z=ho$7rI9)Jjxb`AsIMg&aIxYDls)XrTt<QX-{0$t|Kq?xb_x<(B|s?Pe+OiOBXCld
zFDT-~{)mcRN*Zd?$!@a-JBxL^t?F8B4DikY^1gDAvXc(h&VoaX48Wm=ruaR)m3qWF
zvi`t6IhXb&QWcPnS&J2OCt+j`lX~ZkoUCwpJ-biAl3rC(o!Y8sKc%P|IF+56Z4>dV
zn+~^oX`_{vZA4pOg1Gp?IFRCFMM#d`L5!p-8h>9|VJe<?QX{TL-j`fj`m?0cPXwV&
zSab{JTDoPL_E+Z@ncz7o<!O}c+;c*i)Gi)O{fDdD=B-tKb1${qQTtAPvu4@Qf>za>
z)TbBX_C0Egg%0h=W9GTFwPzn)yfikZFz&Tv9z*(??M$ipG>UuJ=;7=YoQ-_2yqKU`
z?VWKAR>~rEw8z%XF$;t-%A;ch8ht#WajlZ#!ua363AcCi>W(w1X>e-zqt*Ld=jWMr
z<U$M3cnOT{);5#Hk)u@sQu<!J7;&|{?%1SP^D}K{ewK-7U!%9}ENHWuHrMpf%zL=)
zE61;v*hiBZJYiL=htM9^U3f6x4gTQLleODVSN*MaUDEEsQS<#9=9I<$GJ?{&8T6-9
zuM3Z<g+(aa^}t^Zx2`%|M}=l=S)1>Tn|8v|hM#@$6aQuUq0lMRgOg8&r-?gBF<-1Q
za(IpuT5{IvO=EXg+w||PSVP;;$*8-$GokuWC>?GJjs@(LiSWPf{FCu`AE)YY8BL!a
zd`4Cv1Ht9AD;$sM2pe`>c(S7p3+j(Adfdf1RK@?v8Khw1$E3yn>*Tb1;>7zT&x{+=
zB)jc@_a%iA7s&S8s#F{|gTN6h?s!6gPpDLeWtkQvDmLex5{vP}CjsJw@hqbv?)5x0
zNJC2%s#1+Ss^e3mxCRUw(Puadzm&9$%k~FNQArsFN2sW(sUt70hQ?rdwpjGSJqvBJ
zjxNf!pT&mQVo0!kD?vg=K}AEyz{JAF!NtQTAS5CtAth6(ikyOyikgO&j-G*$>6n9s
zm5p7EQ+Dop4IG?Y8oB$uoE9Ff+O+G?sY|yW(b5cXBpQn+lBskio6Fza-rYYuK0Uv@
zzP%TUrE;ZOt2dg^WJ#OVyV&`1J=$`twXMCQv#YzOx37O-P_E-c?TMj?QkP+{0mPTU
zh*_T(-$Y{(Ume&UjPdDs!d1C4M=bYLXp*Z?k!L?vlQH!d%Xs6QVyRpKAp6R04c>d4
zeQx9{7=+q<fNvhZ*M{#MB}S|`@o3xgk|cA4Zyv$-tFe3q3Kc0<0-{tIC>S^dBos7E
zI~smu9-Bvyc^WvhoZ%7hG-;_ZZUJ6Ce#<Nh3TX|rEFx-!Pge00AV{F#!VsZIuNHm~
z@2n9bMTrqDR=hZg5+p^>lTz;xG72ghdWak_v9P-bTs(XNLLy=kQZkjQ$ji$4Td)Gi
zUmNlFq&0GD(yWC?t2XUAbn4>$BKNm9Rvh^EjU-W$WGPZ}T4~a&XI+pfOST-j@^IuU
zP^ic)x7~5q0gP1VPv1@4t(g}&12B#NfC&Xa0ssI20000;?52no{LO4J#AIg93r-0V
zM^<oEdW1(*sakEQP|n97E<PbKsYXpoa86o!M&?HO_;arG@(bL+W)#Z4Kf1=Gv1!~N
zw*|kTlNTpRnykvIlBY<SDs`H)hG5N5%9Pm%+-=P!0-mS3>TAf6GgpngeSghd1DsRm
zl8G+edX)PcK%lVvi2r#&p)pt--p1C>-oeqy*~Qh(oj@d!DO4Jr!DO*HTpnK_6p1BL
znOvb%sWn=i-e5GDEmor}##q_dIXJnvd3gEw1q6j4!Xlzjn3%YPq?B=KI0A`6V`Q+h
zI6Q$!B2%aUp^OX9mr5H8=x_WV5Ew|2CPS7Sc?uLMQKmu_fP)Amijs<&hL(<=fssi+
z@hn2DFX2(F{V^fF3FnKQ{LMBp@<AgF<?D(TGfdcs{m_pMa|T$=+7n{7Mx$2&iCrea
zmlt^yeQ;Zw{V!2BC*7`l|DSgbxx5^}@p^^peY@UE(xFg!*V%Q3?T0#WZo{`II(nEw
z^2x4VL(9>Miivd4$Lz?VY)J%o9M5!&w>68Blu<~slg<iq_SD%>QP6rMwjnLsh*pe0
zqz+y+SfXp<X%ezMudf^I#9w;B=0ajgaLRQIMnXAHl+DC~m{`B>*D5P??^0csU}xgB
zIt5?X3qF;#xTn#t<aw|_b6W@y5mM!fNEr8Is>FnGPe`SW&6N>h!nh}uHn|EB#yugG
zHa1r!BBa`_UJU?ZLK*jjRNB~FoiL$NX=8JJ01+mXdBWIS10W_;XPN*BW!y`&gnB~i
zOq&Vc!5HX5u$S{%C;-BQGVTefw6VD}gi8W|2ouV<CnTL!Yz*(_3ylP)Opy)VC~acV
z-xMm&8$@oc%a6t7(*}H`3&B&Yp%f!^j#dk+Z7d##yvly@<20Z+E6aOaR%0Ttk8R(7
z#S=Yr0dob6`V)Ch%1LDmu9}ozt&mXW^Z2ogbKakiM8*@+FUa)|h+L>~-igb#VSO(n
z-d^O-J2=*w!g!!=gXveo@#iMp+r?U#dwqTdD^JF2t1>R`dF_(;m^HA~Vb6p1RK~>#
z^Xk$_zP`n7WdAQM!Q(x`at$9V0Nf$K8X+RYNN|r7&}Ack1k$p)S&j%r#js3)u*D90
z9Ne+5Mg=I(u3gT`EXv2Dfi|@)7mP`I>IdEGwFJGy`1&L^pqML0$qgiQ_bcbS7^s|=
zL)Yw_GeJJjIfLfB(VS~=E|1K!fW$e}Wk!n{?NHKHbJawD)YM){CF2hwok1TN7z}v%
zOmsRPHVc$}6^=IydMK|_xK5w{R}VM@p?{3&@xyD>@DZTcfGzj)U0|wWtOop~z<CK9
zjg38xi{;IwdQEtdFIdr6+Bm6b;pNYDS!+-BTH~iEy%&&C;#CPAo(P!O+~e^ob=*sw
zWavA6hV@pcj;!Ht&ANnDO_&DFx{`o=(E_;kMuWy~UQ+A!sgi&y+6aJ{YjX^E2zC`g
z@f-gHKA4+sC&zVTLP`h+f)ePuk|EaxML49IDMHX%hphkUgposgj9MW5iiugGLkUTT
zlrXMWOoHN%stPwg=1F5WKAs|^O~Jg>V@MtAVl9t!sh#`nw<#qQx8Q(||I349pK4n6
zaiD$k_+EsZE@m(HX5?;;P&9BN$3k1ngi%jyd_@sOy4tdgj`=Gw4`n_?28Ak6p@5v4
z3)C;>Lj79xkffffBr^O+`32pjk6U^m&k>F?yO&HKJ%GGK4|r(At!7?8G0@s<DOYdT
zV7m!q(^tJ-@)Eu0B-=8wLKb?gSOqIbVbAy8yU9WWhvaqOfet_yeq9zkq~<ATi2@1)
zyAN^<o6s;A2ErueH%Hi<LISO#DWnf`L<vPp5f1^B9MDE)K-H77GO&e0>Jtw6BNI#w
zNmjZgs}%!i5Re4n)M|aBsl%v3D9AD3)B>r%LbTFm!L@`<16$ZhSsCa;d9+mrUo%&V
z!FY(lQO|6XH00{5fN1W~L=UHFs!b0PxEK$5T9xJm!#T-wEIOGM;yZpZD&~waT+%W{
zn)VPu10Bee`!E`r@TE+Jc0Yy(XAd06F$qGKl^c@`-EPO5k)|RWh7o?1BzJ_O0XJe~
z=hy|Z<V1yhb!p(#%A{$EYPxD_c)Nx!{Smd_XtIQN#|V~j3GNbkjsysf`RF3X-!D1$
z%1M<Zzah(sWhH)RU#4X~X-$aN2u>>L1dU~A)h=omQ6s(KRDeS<Fc6cxZF<!@m{U)O
zDI-j!;IiEeS4S(=z>k;h+uK*=2UuXrxTmv4K$r?`Y;I|H08z9IRAegvakPq<GVbZ`
z{oFwR^7Zq{Js;2eZ$GE*w_ktr^3`ii`D#1fx~4Dcxc>kC_i_CF{r|uJ{PzN6I*up0
zY4MCJ$-2lDV2-~h^FDZDINW3enO6na-y{M9fpL*{6p3akn`;9^xeh>t31wUgrH$RC
zv)uqDlyOf;rH#$?03uANC-j&!xa(On-MGSQLJAQklyOf;rH#$C03u8%<DQU88=Gqb
zM3_*<Jt37gHrD}&FrkclLMm-+t_u)hLK*jjRNB~F4<Mn8d*AUjZ$Y;A6Zb>OYh=0~
zTF_w7nHFIdZ&!L;>P95uwKj1(@Ggw*0_^^tyWG<pkw|0dp63CuA2RIz9&m6%03}SN
zKl<P3yWd~p8vl3Og8YfUcG$5KX!9ucoyS#L<JQd@*1L}_xm7|hY4TCK^AAjY_5sA^
zd&beyJ4a9O;NHYu-Md(K=X>Y)SSeQai;r(R&$Qn5_B?^^zbYnL47L8^KZg2UEa(9M
DnuPx&

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/Roboto-Slab-Regular.woff b/assets/documentation/1.27.0-rc1/css/fonts/Roboto-Slab-Regular.woff
new file mode 100644
index 0000000000000000000000000000000000000000..f815f63f99da80ad2be69e4021023ec2981eaea0
GIT binary patch
literal 86288
zcmagF18^rn_bwdlW@B$`+qP}nw#|(;wzaWsCmY)~ezEO*zkUDjy>+W@-TJ2H)XY57
zXS!zQoYPNtpLUlQ69WMS0RaJ3L<B(s9>J0<fY<+!|7#N$5fuX#3;^EX0*U|(9}K^^
zg1j;i>jVLzJ^=wyjYx2sbQV`u6#@aFEd}C7ARyo_oPtEW^2+o~ARzQ{Ks^<p7_=`@
zWg6QWIsmZ)5RmWNARv%df!jW<#%?YIARw#*z%q0|;h=m5eK&J3w*_MNARym>Wuf9D
zVY~#*4V{6yTr0pbkpC4#a~n@HAhrVna(4p)y5B3c1xIONYG?uiO1A(k!vYkxXSKRi
z3m^yrO8-xf04O9#BrrcMY+XEn7zOZg?jRtDc1<T}vo`j|z;f(=fEX@Nxb{fR9&HUh
z96&(%dx3fc|K$54^s$|xttk-O0e-v!;JcJL*kBJi*gLy`fC>eJfWUnMs}RH1W`cKc
zG6m`?05OnApu|9eM&)^|85@`w80;7ZfRI7Jht3O(jFk44LXZ$+DhHU58k5FV8dv^E
zh>nUDaH86GA@B^jfd(fA8R~$H0s-+@OG*H*1SlYee!Vr9O`V*qHQTN?+uAquF-`qD
zg<Wd46`5vkImvjrMQ1MQC;HYa=5-)iYW2`AYbXRB(8^IuzEG06oNIHvJ%SD@5G1w2
zwK#&DiX=6Ig~h2BIhEhQrzj-Bs92qv_;7M*<X-oF&eqHxn!6Nv@G3-J^iJayQ7`3;
zutr}*jy9hB>a?i7UH)3$eVeagvz-!O-VtRIn?WmB_vdN};k4wT;nno^VbT8d3T{)v
z+JsFD>ms^(OgV>fQP;+Xy_#xrfkNBZy>4Yxb8_LF^(<p@GUiZ$d=96kJ(GI!!>G<w
zTeB)cP1K7@)?Mh=?bE@8RWphtBNlgjzH`9hDwfS;Q;N2A)yI-D^_rTSVn^fVjGgUM
zQ_0xFqgA;J??ae<o~F#BBl?e-wt#8AOTiQ0VJZBa5p*Ib3HrFS<Nk)?2L2J<%2$Y&
zU$oD)<Z-9c`ueaY+h$owG76Z)V@kg9o%Eqj@{b(^)WJ!K7pc26(LuD_l$${jEe;Gi
z{v?+58Mq6CZnx@<tD}9MjI)wuESDKi_*<V+VeLOnF{du<1E>$DK4SVaGe-34t;;()
zIMQIfF`J$AagyuBAdI+k-{=)5_`|(-b$U>CuQ-_yrz79gHec-bxi9*a8&>6TM81g$
z6N5xT5+Wf5(u{<E8;K?|p^mAS_(fG3u}~VAArZMI;<X@dY$BjcM6HFqI)h~!hg%Sy
zl_q@f*UP4uLc0$4du<{`)TRj1IeEk$0el`t3^J($PKg4td3ZfXtTsg$w+QV<Kls=q
zq`U&c^fffxP0H_*G(1?KHxdNkS^;hA|J<J%gsJw4`3j)Bce%^=$^8n*B=g{dm?%ye
zzX|{0BW9+;V&GKHXPjrE&0yr6FW`)<!_cb5%q$?)u4mP9#wy9fMR#UgbH+@~16OzW
z&gDeAoQJ~hgwpOn?OuS5f5-TGORArbzkQ4QdI!#LK)_GQ1VLGDWDvebg``H&HfNm8
zL`B?8-N0lVR!>FkM%7Vooa$7L=vL7<wpTh<!6R3iPqkM_Rly`zR$ji>XjKX^RhnY8
zTX|XvKUJ1<y4#6W3QAWRkF}ehQ3_61mdLf+-ChcVSDM+rn+IV<fM;0?v0oQzMUi9C
z8oFO5W<`=?*(kQ(He^MkXVE#dUqog_q-R-Aw%=521+it3VzwJ}XaUc6S`sMVOuQ3D
z%*`as(O$q@Xv{?>%o(%K(74YH+RqWM%$POLfm^^G)WDR|!2JV-BlV6c9;O2_u`Ml<
zF+{rcn{s>7I8!opE7g2ks5L{RbsJhkd(IhiW@amtb8GrKa|w4FGfYQ?cWvpLH;A;?
z@37j&Fi+TVk9_jF`Vvq4iq`;y+FXPep0~I58s|#;7qsD*m@9`){byS8=OBKE4E`6C
zlDEhnhtQrEZu3`p0w=dWUmW}jaRPm<1PY}Bd955XUtBuK6heO>b+Bp=?0F!QKlyeO
zdfo)+1TioOk)S-0KwZBW)!+pZNCh#bGBDQ7*B>|5)L^H8*3sQ$dmqiaY`uPZVrlJq
z*-5`uDU6M>SVQ%4l&i{_5G3o)+iRa)Xvis#y=n?=zBy@MaEbKjF(?`Rx@syB<TY5`
z3GPaGQH;kT*as7hKe;M#vEmVbxoCN)^^i%#B6e;fw{Kc36#`Khn5e5XX>gCyG$ph2
zCw*$G7*x6VO}4EtQ%aJV^%;Z6w$ZO-4=~eoj+XA>n!&sv7`i=a+dh6j*Hp}&<GWxA
z?aHc&E=jZ$S-TbJ3Sy1F#4UsUfI(BYVyW3^P=`F}wAUKGPb3zAL90<ovd@L#Y;cy0
zL#-Tm$zuEBri8G>UAtum{esr7o|W~tMwr;*F^#WMXsT>rq>hR8jBn2*aaL3e{U&RG
zn0ocKR;!`?c!+CrvTSwj0-3(!Ij9n%%nW}~<Tv79E|NNlC&JCx;C7cD1DMk;h7WYd
z>Y^MlHKZdBXJ{T+Gg&j)5{S%Kfn~U2Y8N)$TrycL`LN}9d#a_5NlcgWmcq2|N|fW3
z-E+fmDXP_elM=cqM+-aAeSvoDGVn5C*mR+U-<=6mY6|OU_a8H{3|%*uK;t<htt-yb
zB~4b3kIy8RG-F5@tvsQ@uFyG?4SB883Ro1YJS7QLp4lOWIIjqI_W2l<_}dvrQ)pNy
zSV(B3iW{XG`ov|lN)iL<J^PIoXVJoX!J6=n;KmSLaPQkH)TS+s&_H8-&`No57hJVb
zoDHi6{t&jnQNuNIHtyA{1!Xg)$P|mJ+WmyE;|ZuLZj7{?S0)iD7oP7oU-;LqW8xo}
zozdm&%98};FF96gOziD9uP^``%6J;df#uOo4Wh`#wkA0yJi)ym-dye>>ok%cMdKY@
zQdB!VaxK!t-DfULy!tln72qs)by9?W+InLI<sIsC;ip0k!KHZl?Y~cvg&$FEw9Pfp
znmg(y``l2P*=*PiJD}EOJHt`yTL4{~(&Xz_J87dVZ`USc5aTkA*RE%Bjm!fzX8`+6
zLd9YU8v74avVPL`Nu8nSu8h0rO0Wk+XXa<?34tv?LJPT6=SE5B2lJH|4L`zZ9;&7j
zsxo2g<&YmG0om`7qx=!e+qn|<8EjeW33({zPjjiV_){Tk=sx<2(|*Rr$!B2g$a&P`
zGC!MHWp=+2g~;;EF&}R?`FP)5RN(O}Yus@{qS5mi`hY#p`1(Bd?{=tgXg`hVn7Cfo
z$20_uL2IJaRSi+y5EuiVJw{RZI9z>x9FaTYYU6WMo&^4I*2TIpY~F7{yd-jB_I-uJ
zfjJnpXzR>FPwZ&%Dcl|@;ev=U+iR1cdcZAP6fY9wC;i)Rf;S55^$YtkpJvIsmpzcq
z^tW{8$$~|Gk4VWD_^M9(L-YGMUwO@ZU5nr=UHXq8H|A{b+$p$XXZs)@yiIJlBm2G=
z1rC4cDedFEM3sB+iOD~i_H&c4<!@UIvu)Zx7dXac4!N^Ujgu`|KMbJj%G)#<|7eN~
z{mGKywJsy4VI9$a>rUj-S=db))Tm6fvAPcM2KQhKFon}t3L1n*OFbEsJ|!+Y(D!HP
zIa*;iaJ0IvDT#!)HEP-0@ux?RcXJ3*a}0WSabi(a8%=ijO6Gad&+bI>)!vF$>;Euy
z*hZ;*3VP6PosL^8#lD<Q7%D}X&@~ZcA&AWX8r?f4YsCk7a@?s7e7oF>7Te_un~3f6
z<=Qyv^#$7~>Gws0gxT=}UiSHdZj=OFL$zMXb(Q_Gv0f7+UeLC07Z-N$huheOc^Y-V
z|8ZJTmc0yi3!$(kXhQr3!K4;vNQbGGXh^7dQaq@`teApqO1UL{4d0gqbGX5<Y{Zxf
z^5nUf%#&s{G!7MGw&K*gWXCCw{9;-!QC=O_>{6EL)z*ex6i2TtmUB?toj2avRbW^P
z3USugtTZ;GKC>!yh>@5&<=r}ZW;j17TaC(n^nIyvgC^2*aC-ix&mgOGzPDvU#@yaG
z`Od9EV-X9P_=u@5SbagvFCrVu-E(8%dE@zSa4K@{j=kZY9piBVz^F~DI`ItPre|P(
zLL4G9(ouG6cG?<(WtZraNZ-bIlJLcE{s^k8ntTlBv+WHoC0j^}+Q$b$jVwXPL|23o
z`gxCHwz@<<I+JetK?QazB2o@o8Cyp^xHYb&R0$fCxAqf9qJbpO#Gz;V?{GusC)(Mt
z|CR3}CFj$Y^W*ApX`5`lN;M>|QlQHk13{xCoDrnxsd}henNeFVm6cE!%LlTo(Af&1
ziNk5^&)s_sw0h3BVRm7J)x@nwuW)J~|K(s%SQ7?f%*mpu1=Fc94ztsqIMKD#G1K~m
z+r{QCG2bd5z4ge~Zqnt3*;}T!6&ugCN@r4NmYWOvPh-*iY@3>#6Xj{8OA+%2x_au(
zB=2Cia2)^-zz0C+L}A<*o$Mchi>#d1ms{4b>4nA7D+uqHHl&eaBcvR&?~xIY$1iK<
z0A_0;&Am2Hs7A&-nopd~5uV5yqRbgRzyEoF`5wbO8sjhPc2tQ^onXE`#d)janZu+1
zSi22VxvYE$q>n8V$)5EALa$Cp=<~6kDF|`k00K@8_;_K{_|ErX_Qb^G5(@d``2!bD
z;i=onjDDR%&Y>3?1HwqnF{j~9sV}i%Ok+)|2V>FlA{%UK<#b2?@`7`muM955whAY9
z&!JfR;`#?}{hpkIXR*ha++ru%=@NvHr4#D6al@#^udDkum9Lw%nmM<oPO%RyGKy4-
z%=~SYkK)mjTdoUs2V&-j4$-NE1^|v{MV5INu;%nvr?cwXODWHmPVp`3tHh`A9|!y+
zs<-sFf-iAC8hk|f$+4ru0F+xvpl!ul1C$?cV5e`u=x?BFZXnKZmm%5|?Go(A-48l$
zd0)EU1yV*Qog&{AQpT%pi8TpZMlYPgHYnXkH*ZmL`^<g%)X#UZ9~Dn<RFtKIws$0V
z7oJ5lCbgCu4i^;V!GCa!5W)|WCzw0JAI)OqN)(Nl(I}@4IjK1zJl%j)c*KQyCJlQg
zus*KS-n-R|Fw>31s^-bRlO&a;V%NAk_+Am-8H?7tzLRiDPZ`pU8>!Z-tVcXcQpL$(
zI~j>u2~<k`v&gmTDE*QMfM0oO9-&&{2|m~A8<)4f`SjDu9hbLW>ahUA?LL=xH~D`a
zQgnmo-9`RWq6Ci9QMX(|k23Oq6ssFbyoJO#)^*9)mq;?_f2B0;Ioa*IUGB)C)sZX}
zPVE@;HC^_`nNd$(S3rSdj2MVD{5Iv8)~+m>N@kf!w>w}A&WkGIFd>mj8zCVJi!%Aq
z^DI+;EJ0335Vm!oC_w1j_B--q7zBbbm}tAU`Cu-r`<>9FFqAps=2V?I@T@fuJAINV
zXAd)H|GVDaPrZG(W~Dwiw>NEi*biTS2!^=6C^MvSkDL|_`RrNMKg^pW#*o68XWol}
z|Ib=_{!>fTkrkN(F3?gMG>4RV`kgy_r91yxclN1KtxVbZOPgVwl&-I@OJ+?_W{p|O
z7-BKsUrMOowuNY~_L6Pw^70ul<JZqGWnwW;u$iT0KcoEfwx$<0?Hud%NlQU#El184
zM{aiq@<<J%O!I5TTrGB_3CLhXIrvDFVREYk{Gz2oIIFexlcO!G^J}^ND{UFe8`tq8
z?VjvU|Mi@O%cV#3rtOv8MtE=LVfPmnXQ`#kY`=3KrPM9moQvC&@ZqrFs!GVSzw^84
z*ES4C*lfYFyV=)v40Dk9ArZB_=dih9HT^lY>^>-;SdU@l3MdoTp+UP6L?rE`kHILy
z8LK&FI)|fHI72SsG7-@S(*J(X@YUw5zl58)=R4tIy3i{#EVFpoZqy#t1M(qb?spX>
z*(%?Iu=$T%Sp+Yp#1I-&xJ+C@l(l$K^7ffzouQdyiHw<~eU2Qn`#<DeBSrk+m=g+Q
z%*iK}L|o-5S@QC90IX_LvWB#NFSc8@t6M%(o4l;pl_7Yyk9qwzc9Z#_oCy;`Y0ZAK
z{dclP;z&7{JnFWnJjP2|wmiyVN1n-JL3yuuX@3Z&v^*Izs(DS(C~sw2&fFZGF;<;%
z88gPP2b%-iEr9RXiV!D$T{Q0bE&IJ2`v({5fRlS-m0{DZR<q}t<)xmQI4>N|4nY_P
zPLEsaY6g#VPQPbTdCi~MF6x1*vLu;Q%sQS$F|&#%B|0U%3LP5qa(Ts^A=xo$jq1(>
z@7CBK8iPSR69qg|iIs*u7b=SVeHuAvwZIMywcv7GUs+C`TEkL<yz?h&2U#&g5WjLs
zRSpEaL!2;93_i*99?nz&qhFj<{G>)PLo}fB0Pk`iRPBZU;f^Bqj>H;g*rjJpHxKiJ
zw*|p~AP6)1MYZQJwx0v7jJ`l+{q9!O)_(NCW<kw7lqAk_tGeM_3{MziOe11aGKnEx
zQYNNjgT7nVEJ0M9%h9V+HmC23Bk}y%v7Q@UBSqN$mf}xbx6Z)ey)j4-h7i)7jWHjL
z#)wf$J&)fx-d$Clhi!SoZFoI)+uEx_X;sZReb`M{D>ZADV$`x<a&raXn^aOw;y;&3
zFR=w`7Js5nU*phUBiCGG+1DmRH#cO;<Bb3B;Afe+xbTYO<P(7qY^H<Na~Ez4xlf_$
zr)U?o{i4Fg@rLj}F=6;e*2z_Z`8D?x3AY{4_;PN2&}!obX-qvgc5Hl8Pif?nHYrpt
zrx`vG@g?BQQPs;*8Dd{(c2GX}_hGt?5VmV$rN%4DTqn9yb8a$k)@Rowruzy2riau+
zH{<c^k*7VlT}|xXshC>t>jfNlvZOL5$ce(^{;sI*2}f=J)99Vg5Upl^EkVXoHZw+J
z(jd^r#5{9(O&wQms2-Ldjq}wjXzQ=)!}s%OT5%L$)O=9c4vPhoj`iUD+%m#$08}~U
znBHmj`kNKD_Hku;ggre6O!|z_i^p>>x{ph(R~550UZ3dNkvZ@r*Kv8WKRNkV%IS`f
z*qKp=8M$f+@mpgEMwQG_?Al!d{D=c#(g!AK01EGXw0ZjM+fVHU*3pUk1&(2j%~w9U
zOqrK7M|SSV-fdsUX$5quzpIL0#|?Evp@tus<UN5urCg7)q71OIWq&*F&CXKL@}`#a
zG7aYK{srB?pU3b^Q3vgb>+c$aT=z)D+Son4dFE%w2O!sLzDeG@$ZxSe)E?MbFFOMH
zVR<0IlO!?M*U=;6{)Bg#$a(s5i_H1k$ob?yA8@}z{3>~KFRyS`q@Eik>0kIT8@xTh
zIaDgYa`N4fRt|JwdVjDrdGi?2+{ombFG=0kTb1_CX$FIC(m%#}@CNwZtJBv{F<AQX
z|1+?<^H?2Bekom3%{o3(C!>2xjW06KhWDP=cYnKv8qbt%x}$OK129kXccP}1ThiB#
zYWyw)b*q|$#d@)&G5q_olD-?fg{Qdgu&Ot9Bc204-6Q2HS?j!w2$%P&q2{jrGd|H=
z0(zxlJv@E)Lu(XX6F;9#%qm$o^OReh!+M_fhBy>``JZE-u=`X}X~RBf3X-f%EGvF7
zU6&8puVkpt#SihR9r>x2)aIGZn>p6}u2mH-Ay)=N%Mw%Z=MR|viCLsa45>;FKW{Qs
z2(n?f57};IriVDEr0E}EbOR$BbtM^5nq=qP5<4}wimxs<`m+6wq#NlMyY;uJtSoA)
zg4Pf$`75Wl_w=)sdy<}YGd@CA%`%w(p2Tou;@uB$7sZL=+Z&pd)0<FMJm?ZHk1>t2
zQ`;-jsc(^f7ztI`TrZLBzI23Fcsj4jxy_`Ia?gfT-_N8_-vJ;$hA5Ut{}&AuQ$HqS
z0dT~WU{>v$k2dg}<@S5t&nzYC9n9qh!kSSerjNOp4NfOIr%9JxR2n2dimiuFY5dMD
zQp&l~rYfOsA=LixdB`~!m{t~D8?x$9`H*_BK4?O<&dvA5VqP?7{LvG$AoOuLr#JS0
z@tMk&=;+SLj!t<@ZHgn}=DHx=b9Wrog`Eb@R~YLg|3vY<BTGy|;)`$Zw!1jF-7O~7
zf!{HlLzo_D>-dt!ZP(l=uVVP0Mb3PFZIj+&BAxj{Z*ygC|M$BO$ppH@=#?C#S3h!g
z$9645F4QCqI^}nUuhaBob8F=LsaMKhv~)&bVO5@K#iNb<ez0slf#TSFi=FrVsy`8w
z*8%(mfndV8BI<_}^Lk^Iidk|i>zwdTcARLO5<;`or%D}F8egX1uX)est10g(>dc8A
z%cNZ=uPEEq?%wx4y)R3JyP@9=;E^B}?-YcohLv0;@r$<*e`_6XvKA+jZbQkYy&~$E
zljRiO{zulOlYTIYcmnBqZ1UGUcBOS$9;09Ue<}KG-y(S;4cA<_on!9oLe9Zx*59(M
zp_8@g9rr9rw~hGom^<rW0H*5y4;9Zc!2gf8Hpx5UC<9nHb*JL)Xfmh4(CX8QXxwco
z?!&v6X)VuAm-#NGP3IUd9XGe*|I5I;`FKYc>E(I#y#vn+^h)jZU%VfHE{i{e0g$d@
z-m2%P(l5HO0$4Zdj(-Cn+b)k{x5j@}Y=4;-16o#wX*jjtfYkey=i{g$AmoO=Z19z?
z;hi#Pms4+tRBxAc%b@FlUBka%gJe79YQ!Djee3%YNRyZeKzqrfN!70Uim!}YKX7Xk
zzHIbK-KhEu-+zvxe~#ew>F1-uwPtO4|Dz{gV9YNR^){z96X8<-&h{0?E&D3}Bo8fg
zHX~lW)SSWupj{gSu(d^Q4prp77A<LQ?M%g8<8^X&_YGfGTw+zBxUQXA?tuK@9N3M^
zvANK8P2mZ<dtT&C`^ge|uX4RyY|=gfS*2`ykUliAx)!q)+w^m^?o@ruh|DT8pD#Ky
z$$tLp9}zZpG<1<)@<T6rr7<Uca==HZjrif2ChnO<uG#--(J2B4htrtd-@J~oIShzD
z*2B{(F?A4<kawQg)iHmrP}r&TtiTydYN1FSw{=4A(Dk?C4J19@wRPqr-orCLwKhMh
z_)l2vCd#NH%!c*0A=dqo6<?$D&%z_qOMOsUG~Kw}Yehcjq<BNlmrMQ`xHrS4B#eoJ
z&_=FV$F7O^XA!acf>R_->iPklAJ^%a$S=H`aS=Y^7`&U*QO=2I{bHsV+-xU$K={T$
zO^g)qNnPqzGt*hBS_DBTMy4Y!sL4~C2zfFo;@<t*d`CxN2Q-{vZ9vN85C&a1ABv+*
zn=p9(uVN$948T?l0=p7!9|fKJwwLN<fl`~+(lzb&4etYxaz*1Xw#z2;lfp8!UkrVd
zO8f2TRnF^)>X7GscxB2zbS+M1*^&NL@&2Vbq4a=n!W))U;OI`|m$@X=OvJnNX(iXj
z7qvgAkvnprpQ~Ig?`Gb{?O_gmGR@$}T2iU^m*=n{K&rf~DYkKDr_G2k8t2A_?Qprl
zIEuxcO$#scr#G;hFkP2k`*;)NZ%uZtpZ&l!+PU>VzUA*eWF6sJ!bt4r;1XI<a4uEt
z)O}9;#*|Z$-b-&@V>fHw+^PC$ZdT29+!F5Y5sR=g5%%t+W?k}XcXTXg-ll3XL~8ZX
z#fj4^0Kv>;2U7sxpT41>-}ls0(WkfG*E09gC5roPoqb`;KY3T`P8>@JYf3Yir<xxe
zE@R|mku2k0%)}AM)>wplaf8O3E{TSFG9c-weQP4Ot0K3*f-|$a#F={6Ca{g;l_(Ax
zat|P)E5--M7(k3jGxDBK>yy6|Jo9l{_sc*?=>A@&WBW4ZYm(=-{yvzcP_f`3cH{mU
z({g^?8J8sxeyegZ-zN6~VRwMGo=Iz;+>?Pnr-rp$taj`V<R<)Iz4{)%#XX|PfgRSI
z`YmRjVVKSV>dql-o7!C2&VFy7UNb(E3cybrbKtwbL~@cYPd4p7=jOb<r|>)#p{*I0
z*(8bU2+Gw~_W0BG14C-sER7N7^c~t+8JuRG9NPeRIHJ~?ky`$L$?J-NUflnyv*zq(
zJ6eR`i#fe0v%_V#BWBjXfG0tlSVTzukmM73<Pn(a5wh$NRHagzy~(2WB*C*&X@Z+c
zeHV#Mu3xCswluH$YkMN~!zku_-QP53;%B!0WPDkN{D)W0#8Ldtx2J+b!pW=l^leMV
z|HMh(DSrcwg8NzKrLz+*c_@_hfrDeMDF?9==C#b9)Ad=W@N4V8iKpKkKz)rwDO~XN
zt9)rqQ!wL0o!Tay3gqk!sG_f;WO(2J%tGtAdt(ErX4mGxcA+E?9OnQrEOx61IGQr*
z%n_?8#`dp$HKo=#k=(_*ESSaR9*9tpVq@i#P@iHjvLtS30$}vrE72?ASNIh<)!mA4
ziuz))Q_}C!6&wOisoTQdJOWgCM*4Zi_IXCJ9@o`=evNQ)_P!#0bM&yv6tw;Bx=?DU
zpT(kvy$GBXfwx|7t}@S@_04WcHTzoeex<wXn4Fq$Vw0|tIHDq~DlTOuZ7!}BEMNAd
zWEDNNw@D$*F6{cvV$7OZ$Z76bS_L+Q)X!S;Z8u#73wcp#M&`E2CL`Tq(LsWs?+HS<
z(phh_gQC-n-dr*nTBuV6Bf%z9COO3<a_~{S52l(aH^j{SFQ_GvEGLod1M^IF+MFNV
zOp5bCZFt!EfXC{X3f5e(c0PlSl_aj11nvjymQHB$Bl8mWAjsBiYH}1><n`jGZXD9g
zSF&+=#RoH6#wiyH7uV|%W>>$nSp>u2_yO^+u2nQ-km<tkQ+CCC>Tr!KGOmh?l9^+L
zGDMyv0g6WE+pQY$v!WpN{8z<`u;@Q6`qKlqat}>a3Uftu`;}WiviWat)HX>c3)3&V
z+x&`H^6@_<i*FNZ4je)_n&-)POj+Qo1k|oaub!SJ@eAB9IviD+isDy8z;h~!ocep*
zQ%avJ9#lJ_vJiJu*03JS?VvU}+l&~HR73xko5ZPaRgklHiYj{GCXlO!;zSHc8u(Xh
z#Z)1aKc?gxy%_n)jzo{GB6ZVa8`{s!uy~oNag+~EVb7p!T!m&yJ%n9E|A^UIw2J+l
zp0aLgh$)R%tq^{z=egLWERi7FtWGxH3()sL0e7ZSJ^Lzc{(;d31_IfCx0PdCIo)i#
z)V#OWY+Rstp<KCUtFrDEw3eM+`;r)*9nOye^X1%6I3a@3KmcWVEkp)Q$QuR8lK1__
z!g#LV!2mJzFC}jl1#ebx9Y(Cl$u5ga0m4cB-&KwYCx-;U9x@#<g1RQCU9Hf@UtQEu
z=+s?8>S1HGz>-Sj8qJ?u^;SMctj|+cHz+*{<cu2xj2k438#Ig?M2s7Bj2rSstvv(R
zAQ8Ko7#0)EhsMF@R}`z;jEy~NQOU2m(hu5!lXG3#h2HK`PnYqRo79^f^6l<DE?1x@
zTS0SOx^rEdb6vc1U0riszH?n+Mc%OzPk70fykwi+I_*!vE?1H#Tgr1?B}LxT5>Gk6
z8|0hbIqmM)bQ1S^@yA^Nq%MztasiZmpqv5a2&wCN2PmgVU8uc38$06w56OUsQ~+EY
z04@mtmkfwb0Yt|GqKg38)&tTv#S%Bgk~e0OH-{28hf+5w5;rN5H*zU^*+hff+7a$C
zs8>3aTb@dt(uE$WQa5yod%ARk9ZC`IRj5~7lv~kCotcFm?ENfMyMs8_=J3G`<bTsp
zMkfTI?}Vrt2%<fSQ8XFiCx6BDzsHY*#fAB#Q5c}1)(a#t;V0D*BsCbQ)H0~lBdXLX
zs5CgR)Jd>3STxpBe2|FohXdpxoWp84U`=OVqf~Rlhc(QA!w0c96V+cL1(`4Tshaos
z9$ge_^bt#uI$rT*=pj33%#N8a`|!+;siMc~#eSxz>U1AtMfxu%>TDlWT0Ktt<j(u(
zkxLyLUa6Tq5n@?_^g#y1Dfp2`!%T>_CRpj$to6_A{2!D0{&&mU?<DuQLoCKvSx&F;
z#%TD*3*gyae?$@PUxwp(3D{8s6j48&?e+dm<r^zh<-4gXyXQWnv$r}&aJ=MCs2@_-
zr(aFzlR%paOQ|5L<w@mh6j4PpC6|$vt5mF&s%2vpsM%UYay3<OpR)exvzVz3eaTgf
zuHVNpCuc#@l(k9_mbHw?Sz_TW!1PjUxX(H~_MDuD(So#=l#aL199OLPSv6CkRkYkF
zR%4yLH3QLAChH}wec#-C0*)K(QrcfSA0K1!%@8SA6cJ5O<6HQiO587%I3YsFNCKK)
zwd7n-Cn_b1CCu5gM_eWJE`s`}5#39!8tm=iUYn;W-SfD<HQuj+2rLky1q{Cj3DAOw
z$YG5be-HklK!d2m7%)PN6r=&3paL)k+#$Udj9HE)<?kDE3WVsr!p*u)ll|tgKdRkd
zh4JrOx`}6F{e)lV^;dR(Gnr>cN1>3%a~$cYa7@1tqNj;B!{~~jcW|5|r;5Z&>tb=H
zwng=)lx)YTv=SXivCv4fRswf<RvQMaIo!+N1KDY5Vd1=lPwngxn@4<dMcW^WCxQr0
za-lo}U$FaTzcP&pV+%@VQ80M`Wg}i|^YM2wueuYJ<^^NUD_W6NFj-6a=mkU4dJ$Ii
z-keySd&w5J<?1iFtTm#1pO@Efx>vWWsL%}*6PMn((vCaepI#$JuC!mU>46Xd0*E3v
zpS4OL-&IwSi=ZhK-1#?y`r0#ny)iZt;z}vYNHEjq0S9h06opJ>0G2XWI?9jriqcMP
z<?+>-k(s&E)mhD}lLt%;5`4^}jI_#$2`@UD)3NfSq2i;dyqs3my}jG_N!#tPVM$s4
zhrxxt{X01DKDzj4W)lPsWD!shk;H|Y<)M{k+cz;~LBMz0r{!3lQ}Ud9=IPfUgrmFB
zlDn7vY18kJD~N>Hghs{#Hot;p<Lfb**u<yMC{~b3weyTBRCL#|SeF~*blEMA$z(V4
zi`E-m!(uMy7J0qe<@FITjtPZ%jS7dO9)iPjm|VY}c^afs?A{`hwY$u!*lq4ps<!Ip
zy&qqD1@SpgQOJD{E9rIalPkI%=lO7}<i)4Oa$}YhsbZJ22^&O!NoHUgD_{H(VmeDp
zI~zob(WD7kqfU7v$yD0h58BoxJ@sy<(YQ5Eu%Yc;I=;_0eDMzfrs{~IhR^&h6|bu;
zcc?(;$~1-|Lo|l3v!xw;bh6>*uCCz;><Z_?Da__9IAx)rQnt1{Afgi*5Y<gunf4)l
zPOn)@t}%f;$CM-T$QO_y8ju9F9F33nG9e|G4KzzAX%m3CX)I)&5%VjdZ%lo4`NKRT
z%A@<eJ-nnt0D*E=dG9_!%S$?e54oVm<b<5^RXPw9_Is#g`YsqThUkbzAS3eUN!30E
zf{a1_<yQmem<lD6tWYt`L>v|KcQeUftH=!E2Gt9U@?eM3A>V1h&?3#DqytU&H0cPb
zHJ~byr>&qgiEGu6D~-Wx6>n{jr_DwiLb7}5pjK&X#lary@jqRD1>u0lIRA=E1S=uw
zvz!7kC!ONF$wJ@%)hinA98TS<I_eaS-7CvzCmFiF0eUHw;mrerClxOa7F!fU4kqs@
z7Jszo(MKK8iRM8}XkRqKUAD`MPjMSB-)l~JE4ovG`ZDCsK*$2;`l}Z#Ld{t2Yl~;g
zinh4pmCsXJL-1)v=)EQe`D0Nrp@&P#fRy^A$HufaLe-B!6QMJuNDwtteR0e#cc|$K
zcRlCN=CbiRN|Wt+6!WY1e!9Vohw|)A=Bw2e$6MYH<2Y`FK}24h{t0oTV7zF>L*tu5
zm0y~O^25yc4L6lu`)wXMeuR1kcY^{@H%grYQ{#0JFQ*!lz)YADM+9EX#CsK)22PZk
zxtc-i2oK(^!tIEbg@N@Owvwv>b(!uM`vsKkp%xaixeccI`d%3pvwZd;Gs-xWE?U1l
z|7iWip#0DLuNePD#R#iC|M$XMWo5q%Wk0Lr+}E3VkTJ{&q_Ro*yW4Ib1sG|?^w<O9
zQwr&aBjXp0=+a~ITPQ5`*;Xmp%!&*)bynMIt2Lb>A5Q(^*`LwX7A~R%)L6Q+#}Q)c
zEbaOKpyQ@CHQDNM*L#ncc@$1T`9l)kWaWDoxp`(z;pxLSB}r=v{sASchNLx`A~tDO
z(=yNSA`2Q(V@fRPS?!xdC-=)CRqq6Hqsz&z`|b_#tLcyXKpp}7iJ<#D9ufSh{`+_y
zA!B+QcbZtq@ZMt-&tF4^_hmey1&ouU%${N}D2cO2w>Z%g$1t9OL+1BIogxJ+uTpw>
zby&W%HM76r^tVQ^mD;LQ?Z%z7D>jxi?XV>_#P->+T4r0LKl%LQZin9$Wj~X?=Dq;_
zrz2nSSyE22lGOkQsly_8mE{=^xoi(R!sy)<n>_a9Ev=%KqN0DtOBZsz-N{0dBfO`X
zuFF9^-^+qJTtBR9km&0qyjw)xb3?ZoypjUEqG5-eF;8ItPx4*LGa<jqnzs<uI;$V_
zdYR2~(gj-5MM}!W>$sb)-z<H3OE7y)@bWrYC(W*F>UF!6N0;92Ppo^Xnv~8V>jmw@
zai(pbSnn*(+X8Z4$$frcd}o1HsX$FD>TUCztYIGh#e!Bi{>yLOzM?>6MW4v#J%>L@
zDp>b(1;61goIhDAEK(}$g#P_|iT<nfW6$lfl4qUeol!++8bCA|Jv9ZrV?6Q}!d^kV
ztZqBAGkhrK9__pom<{Ld@gthR@>^LE>4@FcgWur~AAv5u<Dh#&{QUT$j06A={)6Ic
zTCC%RBYsI8*<GTBvgstL=_JciVI5gCt7WC6{=F!V%V?^J{-f!rx{qj==}eL7jGaFF
zw9)o8T*#G+27-i<s3NMU{cEStI)<l>H}ouQhNE^-?WAf?D<7Wpn^raD;aS@y&Dw&d
z-60vZN_X~prSgm2WxW>Qt!+9Z8UK)wTHP;exKjVcGN(QQaO63qm7;%0O0DIWy<BPi
zV!Kt}ZtAMNxOgG5KwF`$)>3Jwx%m$oKTTQuKLEhf%Ru`Q+?f`8rM2dAeYL6XczcQ~
z?U~k6)Bgq<(gAG~nx=eropImwCWz=w!}*VxsSUpTC)Gbw?6)cmMc;_|%lR|XQX3|y
zHOt1V)I4deJ9AvOMj-6X5?ksA*H;g-&#&#=G*y=k)E9Xb7c0v(RU66=x69ja>A$SF
z)-s;zhoL)Oo#KMZs~g1Ir*bA7W2`C2Im-@MN_<k7m$p@P{pH<1c;_CTOwKHQRjYa)
zyldJ#YvJl|4|mxnh;0k28)w<Hs;qDN*tUv&vn`ofU7@^EwfBL^!X9hcbKo`@3aH;_
zytmJr9nt@#+ci%bm~pIEM=v(m7985_7u#hW9-L9W5(Mm(hW<1NljDW>Ljeue+v86G
z7Qle2P>2X!FcMXkIGjHer3qu6zxAHJfAnYc{l)b(Kl#z?_)iyKyQO^q9|*;o;R*NL
z6WED&-+h<DYjv4JE!EO+$_g2`89Q@F#9t5O=@TLK_StN_`$F`t6Jh<=*<4^s1)@G<
zS_j5og;2&Uq$m?q`Gb;Szl=!Sd8eQ3&g=+xEcAD5_;;-QcP$_=jRY{w`)EdaXlA=;
zhVf{o<mZLi_496Ixw`rnm05{*PJ(n}rfo#(fDD~fY$s*AQQJ1^r-N>uxUgFZymb^$
zs_BEa&bU-$T1I4QM`U`a1PaLn8p;GJ%UdbEacocOtAj3|xY%1szH#&ytL=l1_c&vQ
zBq7g6kQqGUov6h*5bGjB;HVhZO#!O_inWby?MnN)L1l{}8?LuaF>O#wRii40rS%1Y
z9J+`84sVX>XGXr()JaJmgOpRn)a6ET7dnNm(`W2y#2qO9EfW46W$q29a@rUR1|)gX
z_j>E_zZ>7AmU-&N{sbRnoD^E%?5Fo)3^8Gq3yG?T3O9<2!%nE41PI9(F`<;<isaq5
zx2rt)D<fT90sphHfmz!CM_^!bV4y2n1tU0k0Z*`5_ek8(KmaTr1H%V`fx>SHrk?`u
zzsB;7AbvoEe))4IeCnAR>_`~RsTmk#T}_Yl_8JYggI2~sfou#SN_ebA#e$=5N}-BQ
zXQ!*L%aFhH{I5*j4&74Q^)YGNj!9{I+w&$jjx~@2a^t|>Z)KoRuh-ST4nQ3+c@e)g
zfj|a_hTEkDk^<*CS3>$*V}3v?Xh6$5Qt}o3nN!I=Rc1exE3hD|`V)2#o<`JFO2PJf
z)2ODEB1a-Y2_n@H;O`WNLnJ<$?i8X!%|70B8^=Q?U)D<1HdYZ)p;g{?TKZZheA?)=
zz>NR$_k{?{#Dx77D>jOJsDeY(RRUKNdu{H<1v*>Hd`{B^Z&S>D+4<h5Yv4W|X_BJY
zbci`IeUZlSd);3xq)LnwL(*nw4c5wb$0y$HPqFVj(+@m5$_1f=(add*n9T<4F*^`=
ze+wK?1NRicq$EvCAy}VhID%4~_pOmGl=tcEc>1HC=T^e7!$xPFnsq3bM`@jMdB&m@
zZd9O?<&zbfRACk+;S|CaF<muzpP=+Tz{S`K!WjEKY<K`-$G^GCm$>NIi{~(VSf&n#
z2De$&J{K@PGl#hFvBI&porudyx0ri7WJJ4Yljhf96|mSiGt*>8hRpYCi_vEbdgpuL
z%Av><nB&0rH&8Bh+`~FHvM;8bO4?C2x&xNitiKOE)Ey*yy}e$*>|9v6adL-c58Z8Z
zr{}_eERX3$`nWDHrm9ox`ued3D<e5baSUeX%jHnlWznb;ahBl%{NbMEYjNMBKj1zV
z&v!rPKA+ukrSC4_-Ml+OHW#WbkD3x!!>6y{9WfC1Es!Dc+X8B`4Cp~oqnf(w;JX7)
z6=B{X${#I7=mVafzsVZbfDxf)MokV~8cx@`-+=#()hCGYxz0tDzD6oD>LiAwt409<
zMxbv0{mZjf;EeCn49MjcXgyd&zb-uUQf+Zlr7iB+nB`BhbfXMRv-Cu1yF*Qbc+wO=
zeCkg%P2+4hHb7#ot=o!etS>yOLY#06$6>H?NF|S=;!1gh!w@IBj?-XM{)WRi?i0`T
z2+DK><rGX!=griQTp!9jlI{2Far`fiBqc0%y!UUA$n_bERl{hQ^#>#S10m?S&{T8k
z;h@4|#?YsGV!-t-0Xt-w&hFmX9p2P4#8cQ*y||yPt^#R9W`2<{bnPM|rs|L#r&vhK
z;q8JGvMs+mWPcTMU$!50|G@J)V5F4iCB6s;ogVcNT#~Nod<@0$gx<oskI8>Z^0|($
zmscrOx=ZJR)AxCpbmxD+k0hh*`N)$EqvQ2IVKz9%CmxbXd!3Gw_mV389`Ki;{p;?c
ze|+Oxy{-4R)gfy;#5PN_Gg9klLtJIq=xhb+k_ASAF5Ve}f_SnF%Xn18Mka|&9l;Qu
z0mObOm4t-kzmNq{%*8B4-V^?w3YcRmDfP+wh5#!07dtw#w1YI1pQSUzc&hOcoB$b8
zD%JEc)jX-<w8JbIv$O{f`JDu6)v^q0JCy>h#kLAPI6Q|m<DBoT<)dHTSs9CaJs$`y
z8!!4_C2A>}Mj@(88s@^bR!2EMnpf1qxK<69QFtYF&pnyma4eLRb51F>_9d{_X6bnE
zwI~pofsT64tGUD3{2?=aHc4wi2%|lakLFDRi3g7ZY~um|{$jvJE&5~Fa&NK&A-CJ-
z?dEK{C*V(9?eEgG*5JaV#;D4y&R_Wn^%3P6?V-gf%`w$E-GO=Wb>U^{Z6QU;P0>}^
zT|otj4UrX@9brcmL0$r546ywaK9}U|Bh7W`Ho&f#e1Q&(#Riy`vfI^D&F+LNMSdEx
z6lFmcG*wxC29{M>K@J3#Wj-cP+3Q?vBG#TxD0d>#lyRY`cIBXU7O6%)sdhq<M)_U3
z;mMSFvngjfXO1i!qX@OFi)Ap>62>3#@u=A<;S`Noyne1ZM%*ZC<@L2a#kYH=e(*D!
zItiGMHGs;Gjrrlqq3ijEEt-|Y(+A}qh=nRVHdmt%w_?gkYoSCvSvcl0Jvb|!n%Bk1
z&wE=YX8wL|1dV_z&b)J{DcT^Q*|REdIQ9?nW8(Ip|7$Y@eu!h51u~pLKtQlTp;1GG
z`a|JJ`q$LseSBrerVd_xo%wGO@PWWiAtL|d5?QL^-Wy`DxOR%EN()BJ-&q>1%{g`4
zwY%c9=L%kZO{mJ;#(9UcUaSR*@b2bsYei`{*8}<jdc9*YsxhdOa(?V-aFM?Fs#87C
z7tVb$J+3(4rJ1<1KbmkmN~SDo%ONL>y17vy)CP;+N@R<V^a2>Om2=EVP&ynVAWyb}
zz33Ob<J&D0NUAaTB{e4Od{RgPlW6kfic&y@Sl6P9#`2;Zj=l7V<gg@GnXYFn6?x$$
z-Ra1(mHLCQ73Da`e#VwJ`OwR`Z`$yObM|dL3P!=9ABR<em1$r`zr!dqDPln=4JHVa
zG2)or_A_Qk79oxNCKXk&%KbghC#TJeSn%=ZrVXQFLCNYUYxX3dz)|%FA^K+MMWN1q
z<zkP=1lppNc2?!jkyg>)5<>;CEJ*NS;WEco_!Ur<VCl8@+JiV}(@<EWCP_*;Lf$)Y
zCUbs180ZCZ)S3w=%%6O5ly5hB?>B<{$6mjuANS^)8I)%gb!22kE%3*JbAN{ys=!1#
zex&!ta=^$0bYP>yC-qf9-eomjc=Q|Vu-$Kd^3nCRpi2rAz+7*lzUoS<VK9&X!3$sQ
z1TNJfe}b)5Sr4m=r-Y{z-OMd1!DY7m%OD?lQcl19a>*O#4;RktM^Ll=SMe>BR?2F-
zQB?Dyl9tNq=ui2Yr*>4SZtY;{ny7YEneRB-zSWfm=G~X^RmZXKkLA|msz=*<wKsUL
z3SacD#qO{zE2yqTFCdENRbhIs)?s4V#SX?A**s4v8f9Ae+Bc@u4^wDYbSMp%=)R5Y
zdLku0m6Cp2@a#780P@gRlr!~f!~Qq(SE=}}Z_(SbHk|adw}p>&;YLkZe9Bz1HJTsO
ztCj7o)2zc`;Mgy4*BTImfO>!c*t(7mLg5Q~$DRoJhzI1&giv(G!Xh)o9R8taYDbo$
z4=nuN4h=i5xgWePp630~`R=@Qe0;Ni3VXT*uXxq4`uf88avXG6hG@bm=h{}JKaFDg
z2EO#e?Iy`WA}^ZaRF}=AK`pV2WqDZZR~nV*38ggWn4G&Y4HLRw`44nUOcbnzHt;4)
zS1tjB`HJMZKd9EULqs9TR<!--jyfgBR$Zsho6)?fT?gex$Rj8K;omA};C!9%8S<>K
z8#qQa{kl~(M*Q=wMAUE#jA4$6ORLUEm=KER89uC)eCG&SZ^3U72xJz2sLn8W@m-=q
z>x*A=LC}N&`WnT>b5}brjX5ll?aX1Lex8_HU3hxk=^v?_)M|Jy{+cd}W5)dA#$7Eh
zxB3SH=fw;0?QWcih}TX=82u{;0Kqob3WT%kpJXL(U!kIcr<%IvS(Dc6Q_>I;Y)Q9q
zfa3al4}ru~d*pSnx|h%JHU=*avrHpLf#xr=Zey7JiAgCC{>EEGG9}wJg;*|51=zLb
z%Bf@#hxNz5X|5dE{9dKjG{L_Jpz}Fsf??gs2RAoyol;oCe$FjQsM$}+c1vl5Cw!SM
zCe{b%s4#pFrwT1K{LK|=VZeke3p@K4(H3^L?|`HoBR`Dr6~iciQVN!F08%)Lao}5G
za+=X^%+NIB-yz!~UoD=a43cHZYEo8{*@lItHt%GQ%i5u*xJ6#_l)TTf@A9#*MdVT^
z=}KNVnFG0cm{RshbKFJuyHA+YeJfoT<X^|V*q4S?|5?NO^#y_e<i1+pJyg`u_>RUh
zpFPM#B*+sb19njQm`VD6B?>^vk+yPEViI^blB+<;g?M!=tk-(1winRCT+k_nO_*N!
z(g(Q!*5jh?F8yOaj^5n^dgaUrnVUEa5aA_1J>b6~-a&#H*hl<kR4{1LteVIPB#T`%
z-#~4|{lqXE!^U&W4i2}z1rEZ}fvk@`34@UccW>jPNLrv02B1p)RhZAeokR*|+~VF4
z;b1=!CpKb1BUzS}lKEYOaungpb?!vDKWr2}F2Me<!mDZbF)i+UI(;(x#j{}Rp6G5T
zR3qEvC!pLXD|6gXHZA+&eyr2C-1D^7h?loRW>7>iI0oRbAmt+rE$c}(dUH~gnsY!L
z!4Jk`&z#F`63-(%cyTWH3k6E=l#(DrQQ{d8jATL_==j%z5(M!Z6Cy`ZC%J>1chI{=
z7^=BZ1hJm8nSq&>mzI{AnVVe7G$!`hy-BgB5=#m35@{|6OX7TDa!N|#zVpCqhWR{M
zpsToCXWLz!ZcP`z`QH6W13tIg^+04S&jTy5y<IkoJ?j(>qQ%zZ$`&qp_O=hU`^$C0
zrm1o0^u$!f*4+Z*o3{NbANMFV^%w|;OV0~9{%8fEmR2|4fq=Eek^N@-Pr^o1nEZ5!
z949Jb4n&MJ7Bei!Bq1aaj$6Tb4<v`ngYSC#<fIeHhSL*|tg)_ABRNTpG~jk>DRr3d
z_*XYBF0R|%CaaGZ(kYi3>mAmqTfWdR-tlCoWnP-yDl5`mBzwd0Ju$|a;L|+3E#5n2
zC14@MQXOveIIQKhhaNA?@;|&Ld{4{Tbj72N*9sgCM*eQ!t{(XOQSi9?@mRD`qU}{d
z>T-X?-lP!0Gl^|(3X2lYaKbbttSw9;iV77zwH#NsHeA@7I7h@?lvk2BjHy3uqV7GZ
z$fw+)#K&al=9VJQ=a9~GlCfbzWuKEBL?-(ZFQtAs^7L?lR;{sBu<rea$IW3iz(G^J
z?cpE$cX`C!*Sm}R7RC{!=e)Bsdqu?_xMJ<_{M?lG4B=|FgP$(_W9-jc%j4?Z*tqkR
z_F_{i#_VU^=g$&pxw|>GwrzLoB@BHDDv#2a!lrwhrKDeZmZYn;VKPj6F67cfV7&7C
z?{Wgkg@2q-qfncWts&+V>~2%`yx)bt{1Zi)>t(z_Dh(cnMI6EWKwb(7plC7OU=CV!
zu<E#I+1l1wYUPI9rmeP$#Np}htfnK}CFOO*un>mIj750sh_!6cA4+0yWw3VpUz>;l
zO}wv7XV1oqO+P8V;n>nB4p$3k3al}%n@!fo-Q(!fXoQP*-bEei`keQB>Rn(?km3$D
z?uZ8s$NXjH;J~^XY}g-$hxel>KC?cE&vS{Xq-2acu0cV;{fUW$XEsM6_*?A(BL7b>
zVau;A968^GvpqMIq7x1+pDoxkQ69{|t>V3YcPhQLo&Y~BB~H+{@QZzXN~Gmb!}?Z^
zm0DYLjq!}yR6^v=Pt+X&5BE?3Bq#$Y2RSeB-NGQnRF#a5Y`co#(<vuy-vdV-S~9gr
zsMg|)j9he0k9*GzQ=Mf}cw_5lh`)X3u|`S90l-<4Ry|Dp6Q-DYpOx3{d??urHTUkT
zdAX2mb~Jm4U@2sIs*y;6K7cz2n1Q=M@YZPtZY7$jY8zV_B3-A%9`!@h5{Lmm2N<f2
zpYugYQ8@H{YzMDXp5Nl4IINCC!!N73;vsWTLs$Z_yc^BbAHE%K@rK+-7SRE{H0jQc
zO-)7B{GgD1L;@}cVOGCUQ~(l+-wX+JP>Ezs?pRwi=c5x0SfRf~zI`;v*L;1Rm@ikP
zs!eFu+vp7%B@og@OxJ=A8HK-(Bj)~=hTHNut6~?~X5aFBlNCsV5U`WV+I5KKA1x$g
z_%^XGgJ2Xq`{yofo=oxRKtonjuVVZp$MukV!<&nvgC`!)P%pSlPnuGJ;0|Vh))p(G
zid}#N8n2xHH#tymm(o-iBmfnZ@b%IIAC5Ej@H<ExWVl-DaEhIi$#Xq}3P@JYJxeJq
z_Oa8^b7lWcW*hiX%v$3u+~0UVeP72x9mZHhyVa(&6}5{?emh|R^o48iRZiy3w5bur
zHt7~va16WuA9K=Xh?&)GLTD(i*>A3j%CI7calH~dWRn9;@gN3!1k@Zvv<U<c&{Gis
zjO5f3vUTj&D@s@KKXHm??So(!*#?DV)L4RkMag?OOep`{$ID;^7>2*Z_KR0XVXHIB
zZE$!=EI7QrM$~gskEim8`u?0hoY3b{TzA}U=z;ghlN_o@{POy2P;a7?PNC7^VITMa
zzvpQZcJ@cfOa_S*3chBT!Vt_Dwl_yLR($!hY*aC6$F3xm(5~!7Pfb3a9m40LJumAr
zx!bSWr(f|aar8a0ukE@0uva>no;)R$yqhObugX$1=l=sKK-Rw|S<1JAr2RgXYrCO`
zzbi$Kb(09?W@MD+g`o)$Ov8Y3#;J5P0;k9a0)W;VR8u11=uUSM<!Lv#9ny}e9&31P
z2By1dc6Ls-&FLVL?d~*NicDa;+bWw9(Y;BdNri_m{BY*AUpRSw>DW2T9xj_YDsFo*
zMYej97?IM55b^7ouf(rM-q)rt*uQ1P3mrRKX|gz7n_n5y_wkSpUHzRYswgKIDLW-n
z7p3iF2$)dyAIj%Yq@m7joa^p)(t^YU1dlr*Ju%&BH%EtQ5RdU;<_v5e>oTS3I9=J&
z|Hc+TmSM2V*PNk^kj;hbnx-|G*m=uK8f&p_$a{bP?ZhYI@7VOI2UmLc%$>D(4X;j#
zU*}4?aFJ!U71usEE6!myCccjYaCC4&?}BMZzdXKq^<R`9x&g3MJqA=AMa1?-_znX^
z)hbbGY@;Yy9S&76fKZbs$7Zv;O|qP_RPp<3^)1zw2G>3eK4IQXKj%(yP$Y<5k3Ne1
zr8USdMS4{Eo0+A}T;PEw(8S-+ObOwbr%E^FM7BBX--}eL{Ao~6h1wm7kaY+7Q{AhE
zVeWc-VeYu{P2!IaKNU6W%f~(Rk9Xhx>5<1~&EB%9ysWbR;t`|f%^y8-0n41cuR+7t
z%Z_~V$&s?x8#dTC`R%{`t)_Bj<(63wtyoEu#;#mCX~LpKpmL>H;wQI#UKbf>lpu>k
zKo?SAdD7#c0ztN#ytX1K$Nwjv$3)%oxmPwSddotxGG$!?S&Bi1ZF){@tX;m971|Wu
zT)Bg?daDO~@++ENKaVDH;ZnE9bL+MZOdPl7o^>n6ZCbwYi>o}pGn)Q+9zEimEYyF9
zed6V$x*L+};He>9D&Kkk*b|Swar36ZJFFFWSb};CX<z|Ble(o7YZ*iLy*d9*R+2xg
zZif8-S&}15<o{1$30WZRVF9EQQG=MepyrYAFhX*H02veNcFeM|uv%$S27nQBW9UQl
z7YGOKg)olwGSK97aVKV>6TA2AOPbW2q)kb_O|zdrjAa{e_F>R{unsrTPv}=b!31u9
zT~O9VC;=+rc9(D!=Tn{YEh<tK*ULZpNzI!yPyNxH?ZMZ#8yM!mz4T*xM#sQVVz8^#
zv%EQ3>2v74HG4?E;$m9&J+WwmSor=wt(wEAmvpus19hRTzf}w(=*<%aq$4$?94Ifn
zgO508y@9c4Rsf&|CWwc4kFB1`mVv55{fA;N8&<pG{gK$D^#0;WqXq_Er}XbHR)4u-
zYL-hoejF>;P8c+;ykzv``-f>yzI*t^d7n<q?l(}Bo>cb97p=9|_$Kf{KJ@b!*^rWU
z8etLXs6jn6X|gU+5<zIhNFWfwNQ4U2up$Txi^>m2#-Iohz^UlTR0Jkd9aBM`zeRSc
zH#OB`PfbmUl;fSIimD#4X|f3TRK@a9P32sU4czwtCE%8iUGfw6fL(tHjknXXbL@I?
z({_h{`%RZIuI8(U&RJ%2eYbs7pgYri;cb0o>%y$!E%BT<DwdgT*b7_rf3aP9!3Xz=
z1!9=pj>m8+mf?mQ*CX=^bH_A9Bu(O5CeK-bzkVu?7Ip2_<LdiJv1Mj93%)YG=-jhd
zj{8J&u|g~nT{Apm8Z^P5a6j%MHW3vJuGr8#H!9vj;-g}|G~z1<fbW*I&}{Hwbd)4Q
z(2(d=iUC(G2M}arfNEm%sWA&%t#-TJra5IlgFe*xkh-b7SEF#wSPbsLpT~$H<A()b
zyMMeGiXY*Lvs$^Cd#-<DE-$xZl=#_RPV$Hv8mQj$d?zv3ArZWa8?C4?P!@woXr2YR
z83}0*%!HIMsywI&M&U8~JROt6f#CHdCpi)w2`*=JB-qiW6AZiEQb?TE^ems<>NeQX
z>oy|NO{&i$mOWUpS=4+REU2ogs>b5Q8|KUtE3wPyiuKFICBDD9diWM^;*mv%K9W6K
zSz@5(M)2~&*>l%c(wU>DPgA{{te5*`t|UWCe|9ng+K{N;4Ui(xkw6JjQVNLrDC<z*
zLoJclWA}RW2E&uC0*1)J)utjyHft)ZbV78?$Yc8-_BLHU{M^r%KfZrkL+``6H9N(5
zu^vk?WoJz;y?UZa8}Ule6%;SEYji>cdk1hkwsWE%tLF6rAj;O<t#e<T>M)~_LO3EJ
zd67sXl$ALuE@FSSuGx%Wjx)P#7Fot)Fj|wAm8hH&RjpB7R>|IS!X_TF2a|B1*dfjZ
zA5*5he&piCBYeMjQe670EYVel`L^Czh!H0bpTLMv-@9LrfnNUZ3<)5bILV_(2y*Fr
zWl0<c8sl6W1{9b^SqTuLDz!q&xv7urp-j;x)g9TvZq<LBvODtW_~ay%E^DJx{z;p5
zs;Xi`_E>`Nkw(FfNEgd)1C!YHo~XYy_}hD;sut5z5|b6$_*+sWV2(jxoXNmNf+0)_
z4F5A2*^cW794bfdUS4L2TK&P@mf!*63m&fu{&IWqh^-=44gv@{GL}v#4MD9Pjf5rv
zVbUN#s78rwur=UJ<B|wysE1%I)I(V9DxOkIu^HaGg2!4LT+(fNa4B5ug#Y>>@wHfm
z<FLuLUy7GCZT9f+A8-El#f;63FXM|l@@HTrc8bF;xcR{%@%!O=nc@v`GhW;fZ#J)s
zxe<y?4O{Uqq^**mg+D7PCOXW-D1;#-Cd9cMc8fWTGGmIN$OaHSx>Te^(*nEQDHBrK
z$)4qQnyhXKsx^@h^r|AC8uy(@WEFW=22)j)G+0%zox0`C0)a#kj=v?!`x^^Y$Bh?-
zOWm_F16M}?(p%z+gk*oB9LhCr;KDq^RmNzhWC>$=W3`TQwa@~_g^dd$w3dE(Kwi%Y
znf_*W8$pIN90{t;Q9_Z7WJsx=I#6tQL%(&T*u7kmpj^VC-Pxn-K6s$&x9Sgn=j4s0
zbH**J!jXJ`AhD+Wz3)Cbsx4l)u8hu44Ak0qgj_ojTKRKgA|sT(U_!7U!}vO}P8))W
zGWy@F9Ba4Vjz$T?hx$Dl<r_V<fhl*s2{(<y6H7%te!o<tOc2BOhGJBi+l9Zy1Ojz}
zp9go<DKC#9T!hPr4dw7K#U&~RBElJE1Q4mT4KbQ*KqSLLcBg%q0Sy4mV7A(`xXs8_
z!~aH_>K@1IW+Op$Z>V83w4NzLu2&aw{F$!Um}m~tB1wsL;-VtMOkqHYB7Yzhq*Dk{
zwjg?2=d@bAv5LMh9X)8W8(vpM%!fX_9R~bUF6vi^`rIK6AfeRYNew^1C-m50EAhr8
zc@um=3`i_D;N2L`9={cdJMYX37c}xWkiv0Hw8Ewli~@prj1q+lQHKQpE{OFy?X`g-
zq1}m0cO3tssybMp8F;G6>soEJT$f=<YFgX^@+hGP69Wdv_msM8|NmDT0k=^v)LnWe
z(W%H#N_c;<PJAoA7f;|YjK>rlSN+pxCoWt#@#PhAT)Zm=8C262cZvbxJtDBZcr)m_
z3F0mEBO2VpPU`hEUU82Z8K{1PsqBeCCL@HZnu-JUQpOP=G=C$+$2n{=;yGB+q8Y5N
z`24ng?6s8cCg(3A6~T+*XswYjYyG-)>%~#N|H}IZ|0()}Y!qz%_^esmbo;pZcxfLy
zxS_s3O_8-B-{k%`Q`J+Zau5?YsRH}o4Yqn7rY{yRH6NYxU(EKdc>BJSGk>(${tw&n
zbp9-)K!#G3??JswV|A0_>%?%?B_$)r_O-p*9UW4rV?)TO@Ab%P9BVa03c5|oh9R*<
zDgQ2~(#fR-|Fco0;iiwDF)Ag!>F6oLmrWJ#hm1>iY+SubT;$Jw^zP{GP15(zo0jj_
zw0TcVo-|{%u+-YRJUG34)|5qnx{eT#wyv*wr1}WxKz3J;#E`N(d!*Z{M+1+&!JR#l
zreKFA<aDb~J~p(1^fWmzr>Z`kJ-ET!Xyg5l?%wy-_m{<)zwZ_|`m9fD`PldkPj7tl
zf~diizi+wGjggaS%@>Xt8fe<`+wJ>59bbaxzcp!7KK6mdjdMQTw(s1iu13A_0<cqh
zee?O7>Qq8N<}d;hgkj3iytmTgLQxwkY_b!Of*eZr4VhNy2<+5uvv@<9QM?|rN47_A
z?g}xDt{)(@k$HPWol~jWQ76t~mTC)z0qS)FQCBHQ@hwS6&RSk?h-7Y)i%&i?L<Hqg
z(y8k8%54W_)u^fxM}NO6KCP<K+2-vX`}Xdn{=|TK{EuMpAL_BO?<N3zjh?sl{9d!9
z9Ry9G0Da?Rq}q9C&yr;9`XL;;d^xoY<5Bl0+r5r%&5a!@@aQxVw@1WH#bdmgv!=(C
zDf9(LAYi$Ein}efYbJnH4^=;*cs9Wj9fhDV#oC78FcOdg(o&6(J4sGTG!9#=DORp;
zce!%Vr%>2$q40#TTwH%3K}*M|XE3^+mh{R7{9u}RZ@)MluhkJ>KP%pwh9`J4SIxIC
z<16&ln$8Cf&=gl7V7~q>y;f0C6T?%?ijOk@cyHZ58UA|u!Jy3&qYM9xfJMay)~29t
znphdD%&tbJTD#m$!0Ile0v{7&EAaDa5@^~q{Hj8X#YY#2`cuS*;&0PLT6rufByD2@
zfoRbcUy2R{VuSAmUydy=kH)u!Kic47HPdyLxEzq?_t-3Eg~`P9vj~)+2;S~|BqS;W
z<`$OP_*BnG#-rE_n>~U*mx*3V-xU34<IlXAJ@^diV-E!EHD^VoPIS|#*{<v{2!Kg4
zf@sCZ(MY+51c-DQMaqT&0^krOSoa3bjo|H5E3aB@#)*Yjk-j?%b)C(LEy)ba?i)YT
z@ZhU4d+3=;$^2_sh0Kl>`aT~Ohe(n(w^kXUpr7CZ5~80&C}jk1D<dAOPxbyJ>A(Ro
z7w7Wt{wUvSdR4zpsyt_Cck7%10mrBwrS?q1?n6)NU&ye(@cn;$6gn?Cgqv@z3qT3b
z5+I1AI}oDOAA+HE?MjdFSv@YCCjzg(uFd_u^HyzsZT~{PpegFyK%E%@MTLK)^3EvZ
zoWoXo2@gsPR7P*`Wz1NF4PM@9(JbT(@>#GxR(0&CUu(wAQf3ACA7?RK>O#y~Q%Wl<
zD~<Jw*#Z1f)?)Uj^A(%=xLh&Ehd)042mM}tjA=k%q^#XZtOt0YG4%9zb0J~rlxU_D
z1dXaz3kg-32__9q14GlTOX@6|21Q|<81$J6(4bywV{c>dfX8F^q<SM98SXSgVbMiS
zU#)U&@?>S}GLcm$D6bL+jk-@0!Xrq_eZ%+c|Kp3JGshH8@;EmaepvSEc_h7p@7%Y|
z^Wm%&{Tp`lbQ!*5W96>$p%c>FlRs?T>GfxWzd7qUBFk3~$$NfcuTHA4lbgTGedTCz
zI{&x!w}=QQltd$=3Gsx>ep=I+m5>-kM!K}=%GU`Nv9=%Z*zGC0Vyg>9CXYVv>1wvs
zW9-Cga1+ZpQ$6~TOxs>re|?)CJaqctlH~*Ec)fvv4==`_FNrg~dp^wP$kt?A=WgO{
zapS<H{)Hl?YyX2)$~^<*`N2P>{p&)3zr76^=Lo3siz8>c;W<KSNOO1TQf!Dk5$dQp
zEJhUqsEc(?x(u5oNmEh-k-V?#TCNbYN)waZ`!+mBxClP=;~&?5nEydR_@fz~@g24<
zT(EFfe{J~}n0c|m1<dN#^~&Cq2B)?)*!c|rQ5e~3Y0FqhRg<eZh9HU7k2>s>aiu6S
zmS-4~bG^568IvnDjHw1!uQH};tQ0Vd4ovTWRdGU{*mA4}Oxiqa%Yz3`ojNpZU8b58
z#Ph*#7A@~TGd*o~-xZ7J6?VhqOHSnI@05?PB?hj~Pb|lus}A<+g1;8@x^%$6OV3N2
z#v0!Ru}2e190-(zRQeJVGG+iZnn29}8s}2Ott&Y$*=m+8y#}!uE9EAh0@9eE4l<l>
zlk~bF3{rKz;a2Auoz9A1(Ej?DXM%Z@ZeIGprkw7r-r9cuatpzq9&%!%D-AE8PyGIM
z8Gqz(%jR=ibf<@QmGk(ikKCSTKhqjPf{N5|B>Lp1YZ9SeH8$U*5yqgmvZ&b*BaHSS
z!LEb>YnU3fea2ye%T()cpVJeXefPYyEu}+)IGZow-r}=oRf9rzuU-1|8<7zknKt6S
zrE6=hsj^RFbbpJk^e1V*B*;+q(@+C%D&d+78Mh#1W|T(E15Gp1Mb8{V^itN;qq7c?
zDWsA}2^Mz4-#I>GOis@+5+}=u2H#!YA8`I~X=SEu=cUhkyxhT;v$4~HvaI#P{(8Q8
z*@_Ys0{vDjC*jKby}B*A@$rXOGrU`p($+5>QP2_Zxmb0ucOhQu(EG>Nbi1|#U_Wbd
zM!!J`L6G0|u~}oHHG~L5#e*0Hxi%D-!Rbz~)8pWdkj7(Ft6D=EnXjI-tCIQNV%z=C
zysfM`WpeL@8OB6?PNw?W9{o;!9{gFEl*BBW+dVH>rq9y^O61K05>q%ttGUGZI)SDr
zJakwg5$Qe-iLwr64?$76B4zawwX|FeM^;x$pK&Q$4ofWOJrB#e_mk*~yXEz*;M7m2
zRIX}9NugAi@#Xai(XX$I8FfG|;`FA-4fDI)qgJGHHQfEwmU}W2qhqqI?Yql`wd(4U
zT`z@)Z{?=`_tW1K16ZdTZrOXATst0e{cYlb5Rm;eMG}b&>%=)7R!g*rGImSM000Bb
zoq~q7RyMNw?0?oWbPu${k>wZe$La;*91biKxetmn^K@BfOQ2>Z)|Ks3ym(4<iBs*<
zNU=+AzR%slN4hB68>c&}Y8sYTI1GE+YgMD$iy7C}%Zza)gysOI5}6-O4Gob&<3<g=
zsqTA{l`Iye5d^DJ#xztlkRVa+G;yMD(dm`{Qaz3^SFKZBdVIP5OO)O9q`CBaadhVP
zv17NU`*u&<DI@Ras_|n-%!yDSCyf~}HCa9|B4S1N;s+iWH1^ziVOPNM@)HZ!j1T@`
zJl?#bFh4j;*Cg8juq%45H}yB7NN=SGL5L(&4;v%R&Hp(+{u}Z(5^PaScGbvd-`3Gh
z?OTz43*D3bh93Vkcv;Vn=v6cObP6t%XhK|*!g_>sjnIhhx}{q?F{EqQRY?X(Yv4(N
zKYbf)0J2l3k&BvBXGBf)npMl!u3fouHA%mMIpWCG*lXe#W?g;i^y#N!_ntkw7YMW$
z!&tdo*9BgsV`!8xNUlpLXLcmq=};j{Wau&$vPS55R4;l~Dp}6y^*B`U-nNU)>NNTX
zJ$3JD8`?|zbhBk|Ej@hdboB$9vZQV3jMXcPXL`Le?p?lGoJwTd69Wqhdx&?$b*F42
z^7F*Qi2=IjwI93X1+V6JIaa0HOX6NAaXZ1IqESN*Nr{AUvpQ;tmVzCj5_PDv(RrB`
zOTbQLP^(_0jYj8okv2T}AB*#;LqpeRTJ|c3X094|@Kp7p<$b24r%&y<VzE(`I~B~h
z{*IbAaZKBGlBl;I?VLxF+jhQu08rIFdXJ8^u|LB}ff7(Matx=0<b@;nfsk9)HL}Iy
zu_{mBN)uE1?Zha-B75V-_qv)z$4~4rI!PzB1A#}2hM3qZT9>@wI-SwDk^9qSPw*1!
z5z;7-JCLyds!_Q9FO5R4mg#qD6lt{#OgF5*Cv{whQKbWx9Y1vO^|JT7<9ct(w6>#W
z+`p{)(3uy@-fvI7pPy2HP<wx2Qo~Jw)z7!g{%uWiV&4w!i<2|fmoNB>zomh@{mmc9
zex3_1#bHrM3Fetl18p=zH41RUScDi(rH0<<(t85c6rfc#0frM@MlWuaHQkEO9Y3C%
z8Q(rOA#rT>%$580@mz6ZZE!-jcHw-n&9!DLS+f>7AT*WvxP`TX1Ze25ALp>!!c1Ty
zSO-D+j3T1GIutRZgOcm&RN^((GFm)i`CIKC9qM~>)c%7HJycyfcGObOnl;rAiI1MR
zcgWexsJL_P)ARfGAd?JI({0cIfOVA^{+Cu^{<BtLzf&cU_jqjnDVt{hyaKnChz%RW
zniAYb4>*FGd-Nb99a0FWDW*@E18Tjt0NTBBy(AT<hEAccM-Y%9u#t+iQL&bOC~kM!
z9a5w)#fDb(-MKbRH<_q`;ERV=xU|I2ANwL%OIlctj|>r)AOEnC*5JhB;_^^@gdT_u
zepgXJ_6K{dT}u+AAP`eiMAp5GF9pZZr(*)QICh4__P_NB^MBJP?01nWrK*vcin-$G
zRNQ^vk)y+L-&AoF+f5Vwhkg9<aM7>ag)4EM)JdX54f4o9z$F4=va7s25-s9Nq~RZr
z=*k8wdnt_|AzngKn!P2QAPqyn+hZidKXo2<N31thh6|cdGkT9SJyr~rNm*0jWrK%{
z2kKYOcNIDuT2W+fkEAAI>;3rB>;tLVnKFEl9x&f{X56+&z7@4`ohH(amO#J}ytIrw
z;n4j#5r7_*`2HUa!~Fkf7z6MxmR&VFNEb2Hyqjh!4PzN~?8Ll9x;=8mdh)o|7V1K}
zKh=dQbS!3qQdc05t1s76*`P?*3#_qfFi$gN+AN*H^i*};q2rPn@9iiZJ-T$qd-cW-
zF7Dg6c<^|!KIh8b;}hqsE1Ps;-{qWXo|hJ!81+P>#!rqozTkyaqjqc**U%TzKtkVP
z327ioJVD>1kBV#Bn@XFLn9CGqy(>l47RlZb6lTl?1-B;vC<X@Xq{5DvGhEpQS_6D~
zj)B(aOfkSGj2$vyi2NN}@7*1xW5$&3c=y-T7Zw~J^F&7dC&ryv@RDa*&gFe4CY7z5
zGx7M|D>(+{S-6H>q#mfF>!YA1%_yReZUj{I8weDD_N?s-D0E8ors{_rMm09-bGlK5
zYv=Qe&(1Gd*SF1m&GLt?*tekn#=fnG`tpX8^GlE96*g@;x~px;I~_Xu8c*)7_;jUM
zhDEHE`fkpD{05Qwa`7GVlPacIR4sqRGWsD}PN+SMyctPrcp9WaAAe7$jc^)QJJ?5t
z5d!Srrh5vUQ9e*ZRZ4rxJ5WLwkPZmR@-V<*R|jv9imA6JeB%rK`jBsY;s5SAzx#a~
zo+s>s4b{)T_S*B+BX_sDYtSz{7We%>(lF&vgKA8v_ubb~z5TZbepH86te96rno@)k
zFf1JNAS_%957Q)K4)8D5z5_g}q6>S@%-nl-(>I$<56NcJNPqw#giZ*(m(YV$fzXQ}
z)dU0t0Ra(|BA^6Bih@{?`YA!N_kz8A_TH83<exKl?`}4Ne$W5^@Fdy5mMLdu&YbhU
z?}4!)pofK04KP`4w=0lMOlOX9TQ-PT3BW9pCB5QQr#ydD+B{ssZsMd}$hG7uFk}Qx
znoqVIKc;5OFno*!r(9r%_0$xa9d!VprdddSQ@v_e$cLw%ewWkJmE$MO3xO&+dF#lk
zwg(RE*b#ny^46UY@!Xd$AJMO$yLFZLX(!I(=-U5k1Ne^$rB__sJ~2KziZgI0MWRQP
zZqqTV!b%bx6pB5DxhxUNfe|h%C)A`-PF8G8I*;<5X4yuz3D_&jF7mk}MRB-96<{A?
zq7f^hl102@-xCujKGyffwQHLfwr;t3?Z#dYjvaTr_vZDtw`g71bi?|Z>wY|P=*J%q
z9r<y3hmuYmR;^v%=iv#HPW9WmZgWxl4z0GX-`?-U#PJXI*|?4_IVFAv`>DslCjP)&
zH6dD&T+`{KYjH^$@>ddwLF^b0=9qM`0WlQRb)*i61D3rV5dwBQVomX|N_QtEIuPn3
zzeOVu%0NUp{<R>m=HEKuY^`XWco15N<xnZqRZH9q3*=XkcyJv&J`9o|X(*h~n#Fjl
zmmFAp1ih{!iw`WJZCvtH_5M!nk-nTI?nfB^$F=1tP9uZ^5Ex>uu`tYd7`ny@Bg~;m
zj(}WW4!Ou~$K~}Ci?8{DJxzZz-)pFF@P*Pw3rJU--z?x-aZw86z!AjE0!s`>fleY6
zUo^~$qs3@l8s+9>XQZb)bM)vSSY}5W6Xed}lw;zF8%AA9O(w=ReUIZ5;D|3AJG@&r
z3ATM-ysFVt|5?3e_onB*|M;3=T{=VPM_+)(*{MD2HgCP@)n7jFe$ccuqi2uRueRuu
z-gCfhaCG$goPssuk39MOyE@&tdO=y)#Eu;wf1vD^hRxTFyXWEu&*<0hUQjk+LYuA+
zmxd)qIIrzGaZ=l;xUiUOyOd2+<FSo@!Fu?{Hn!LqAW?<Y*{=!<G+b{zE?pA2moD)y
zo__jiAEs6NTsu!vNJCOch7}Kvz|$Ih&=iePtvm#quklI#Wx@&OZpw&ZDBzvKg4+kn
z&A?@sv)H0JE}rx>`Iae}>C!0-m1n%%v{X7Wc)9z~z?o5anNy%q!py|0`p!pEestGe
zr%&It>lmk-%SMiwG-=Gpk=`&E{@X7wT-^K1Z{psCup4q98+MCv;*xkvjHiS3J9fQx
zbisXZ?B1%68FtIuh4a@B9luKaF1EmQu!8|p#U0`gXbZ>008uT@i+*rijpJ1M5Ywbx
zrI9>bVX-k3Xa;CH1EL|KTSGrfla@qj00eKwk94`X2+7WL=cVV#*QaI4D7ak?`xT<#
zuI%hAe-OM*2%HYJg)sN*z6)-=ckkM^Z94a?0{zhXRlC9>#F~QX(Kq)V+?GD!YMPke
zVe!<N3tM#T(z02&KK{lHH;D@c!*g$Fn=!MbN#mwOVq4pg`K&YBjM&yT^GO!W|Lr|6
zU_NxIeGk178Qs)4D6f`*$}BK-pP+!b1!uG~T0&&a^LPO}$&i`SzW1?^0mF-9l`}A=
zerhDC*rl=!_5XduL(=##9i=!c>}0if1uKCCpzp_Z%>A|(O5#X!(iTsgbTDiUfg37<
zVo-zAa-t!a-(E&+Az*M@5Q{7j7l@B<+q$qIzIlAJ6t^=2fu0z94A_#hj*S75Xo8aE
zE|1R%%Puehgq~6L&1zv?ql431A%5GDk`5(pjgakj-ns9dZJkE;8^40S9c)+7uAbf9
zC+=s1R#dbflbSfScdLe-Tv4upxh;Eixe+?H>e<%xgLY^Q*tDzqZa9?Fy!rHHt-)q<
zKU~Vr(nVS|j-x+r5}=}CkPQ%qZpKZN>6wtFI;4W7cT6eYy0v`j?Kk!;Y|*`Yi^87#
z+|->rr%vCxb$U^c9z{jHdz+utn`rC<{<Hk7NRnHeU6-#!sG-pj#4r@WAzbfbQ7Ub5
zLDVJe0bK->#E#=)B`iG--D*xtdmX+*On_ZGVCUuNo#r^qp*!g_+EXMEqnQyv)in%Z
zCHS2xBrD-$h@X=JU63mirN!VN!IiMdGG<So@g9RFUGrMW6?Qk(@4aR9wh{BTQ<y?`
z-Uxcz-g(VC6gSr=tY0>7!0aijb!^8Jx{-dWT_Cw+aPh!Upb!HFNx3plMkie7!|Kpv
z3`3^MF#KY40n#wr<4$dmln^PSGloWTA=i$$jjK>*^m^P6Pa)jfxwuEyR^9ee{b1#-
z_jd2lz4t?#D<9FJO5*uTd-Pnz=d^CosCCmEee{9_GmFX+<HvNFwRGMry-Dk~O*^)#
zFvoQaKLxe2KRh@;>dO-r#DNFmKBMC2+q4V1s4-ttBF6HMcpH+8ScwGLIEj~FG*KrE
z9dzI24h>H;;nx5Tkhf!*544g$7zy(P2L;SnD_hxUS!s{yIp?dY&d;1QVR0%(xW$nf
z#U*Z!Xr^_<nEL6pJ-gGjb>ag32w}g<H4=sQbi0ibP;L<3?HHJs6$qe>!o%cfM?n;q
zqn%DLpA!Iu(KcTR0qjdSsbFB#2JGb*LG#1DW~$HILubQ8*5#kLad;h=c;Nz_{Tcx>
zS@eZH7|cgb3feA(5{5sf2Cl#spd^+{s+@1evrYG-2x7uI4c&d4(PLPTVQDQw2MriI
zcSf^jO|y*EzB#1ZVZB`Q8gUgzYn(!{#ef`VUGY4HnXvx;N@z^C(~UR9nd^5EeULTs
zVaJk+;|ax`dYFI9U{-+jpQyNtPVU})>g29Hr;ZFCRyusd;K3vK^;=G!+%kXbi4$9g
zPnkMw{@`iTu#566nnJd*8`#6h)4<0h3$BkPV8Hb-ixASXxFB2^k~)nv#+e#fd=NO1
zY&HN}ge@X06bvw8^d#hOJW7c6v34Hc7ax;sc$y5S+vLv$5Jzlaz_avmLXg=O0=i5=
zP)clo_)5-r3Fann#B>}no$7>^8-ACW=(@#uz!-odPDazxt<U@==rb2U2C-S64F+6f
zxrC5j#oak*kN}9@(m4Rtc}Y0v&?&^u)aPpQbGh0p%8AAhgiOkauG4|0!QwXNbhr$6
zo*KhNgy?&;r|>*qWPa+4>QkR(3kZ(oGbD=cB+H6#NMqDyaM0xu8m>179x4H?B!nu~
zAq7L;<P6=wn_Or(4-e(#B!uvg{&g5~hG8$2ew^I4!o&5_2+;Mo&SAj0)v#Dshjy)6
zwkT-YBqKewL2{z2V{At?My|-TJY`>P#Pw_*ZyVs3;KU-Y1T<DRrL9Id(vNs@(7*Fb
zbloIB7x-?yrW=Kv6QttPKD6n?i34X%9l87zqhCIF;jMM^3*#lfgx<AzcG<$E!=}yg
z@k=USpIbO|6zqH%+gCt{@xI(Q5=aW}=E(pwF4h@MG(@NSQRy}dl^%jX@DO6tLu~cY
z>2?#HjuHYsa5`S9Fx;lF;qodgzf|a`DBEqAT#D?1TUY{nN&>}r4DIKAES82u9k~4d
zoi^`liw237bU2(z)hc4N1`<3bn(XxcB%@0eN!71JRLBv!KnX@-K4Ne2MI@By584@W
zegF__1YiL4hwkD;1$2Y%72+}IQ6Wx<$6*ZggMJm_LFii{j*H_J&__H(6tbj$?Our^
z{Z@`eCTT{x7k7zuQk~|3rl;B|*K|<1eNE>&(nj!{FjJJeuDpsMh`J}XkuzImd=YZ0
zP!mNMqL9C+%z_acEkiRhWDXdaiFUZ9*Hr)}HNpg<j=a0;xUHKe%|uk?usz*-ZoPii
zlIoK7y7#4~*LS`2L(TG{LfN?H^GaU$+=Qn#X;k&gM992P!7TG~mOM2{y!rrL{$@|8
z>7S8_ILjq3c4r4t-4c3<c80ljeviU>H^6*}&0v%RaYn2B4$i)g*G6rWiVtvFX3jN+
zG%%LhAT|a0nHh#J`-MO}m)nP1#S1i8ER=4Tqm^Ibp92>)pNpSWz81naZ`rchf<3SO
z=Jc7b_as-aAH5&nIcM%3;^PRM)19Ot#@pkVY(p$n@h^*57-1f<)Pxu3X69z1v!e(b
zmS5+JA+DfQZVP$bS^fp=7Tc@7dhD)emchuEjt_nyGcR{#yBQP3J?kfyOsSL!le<3n
z>&SuY-)%iee7f$yp@t3iBsU%1e=wwO9`IhD(bMkPZraVb+OPF0-j6gPtw{+PUpyu`
zHb%C#d0r;thTaHa>ymy#?VuY}FN+AFjPX(p5IPiYqv#Mpn28-~+oowgkd7VNl(a1=
zEXZ%&v~|Pm3{P4E4B3Q-8X9Q=O(GG5an)-SUcl>vGwNKbz`|*0F{@uHY4zcrLnr?G
z?tdqbpS<`K)jm6O-Tlprk4}2yb8j08yLOhZ?AN8}R85~g`}00oc+<6P)ZDe96ub*v
z<3{wKcK;o_?;A38(ae6)`r3yF_U&CNYCc_{?YU4?u(omE9Yb5cJ$qoUYgm(mtF+X`
zJIu4TpPbK@a($(drg+lHbD2U0FiJ6alaz?UBP2u}+>`;e?lo5UDI-g|1rQr;B{^FV
z6?Kv~N)2OCa(*!eB^jfIR$>aLo0XMcCq8`hlK2v0UN7C+g2xPQD}LzvYewJPcD>iM
z`?BwUz;pNf6?gAjzv`f-FA@(uJ^oj55#nF`6q1WuXydCo?3}bdE;DLhY`6SXlWP95
zrQ6yJcxmg(i=W=F=Drtsh&ScORjeTt^APe81x81pPo!a<Pvczc>)YWqURS-K(4C3-
zC;7#j)+Dme#GDKA4;^yqjc04<v!-p0tX;&@`H8@uWY?)i<i<n|>Jxd;HLmIC{TmuL
zCJ{#2G)sLW4*hK_cjt-q#N(c%ghfb!ZySm=$J5-P(6h1jA>HMc`;!OEWrIoNqKWxE
zmzNJ8D>KP0M(6fiK5@*%>g;SC`XrZR$b@nSk6RayCA4v`->j0$vCb{8^!j20CYYn6
zw!F~eyDcMbZ%Xfqa(sMf;D)B&^6;<^k0`rHkiPU#Js$JT7-xth6i;9dGUu%ED4?3m
zqBuCCnh%{2z$?{HJ7>wXvxS+cpL51tAvo=v0Of^ujDPxr52~--R;Ya4*Eek#B9qPw
zWzt#V9K46R^zdh#JBzirPw6+-tUvKh-_G7&JNL${Gq%48A=)|Zm~4GRJVVpnh+0P^
zvw<mH#nn*gfe@r>vJqi+Y8YXiLp6#%olU28@C1Z3%*oD@?<662GBAnXFjVX^5Wo~n
z8A7`$RFO&f8(t&OptN&UD^>&uM0ej^W$}t?7SSiX9S{nA@z$CT>QafA`__xtwTtq*
zcjhkBpB_mFoygl<2_F)9Wqim;DEFnEYsQ+{W<L%_zE3=^cu9s}R0D!!h*(z?5UoC+
zCjftO#5(=#vS0*^2RtU|Xa|g`s2K_8SIPxDe95<B?s5xMQ6YvwY8b*_4vIeU74Wk-
zP>;joLXMG?Il`2?f)0lP3sb4Ea3IKiV;I{fjMWA5BI7w$WmFwSJ_Zl=+%O4vbWqiI
z-yxOf^5<1McF2L(nk9>lefIb9evNKRGQ8Pre>12}uB?l{iN^a-q)$-AY)OQv-vSXn
zmVQH(6)W;z&<u+(bI;bTIO3Z&$?0WNTJLY|eM8Ob2Sxjf=os^Jx{2P}Te80yh~!9j
zr$t7{$yEL2Bn}vl1<F`S0}LYo5MqYL6?AQ|30;fN%q$EbT)<CX3Wl$NYMeUgk+XxO
zrXxF2TS%f@7f1UpCZWg2+_{&slW1;#ZARqO?V4@!$Ps)vt?7ao9K_r43Gyt>#Q7n>
zCECs-PX}hGoq(}=sFU!zC_7hXrnUSnC{A!QgTX{2p)|bZUDw|KpZm6_6(-A;Mz`-W
zcm9yYSw1t~I$*@}Z`9OaEAP^b(Zd<pxUf@OZ@JI7DVbaQwJ}Po#{4rGQas2FJPi!m
zi7?a=7)xxrVc5nJ4c%vbM5uyUQb4jzcnF^QgTw6Rsox-(kgSa4yasuA3H7<onduSn
zd2T%Am3{zj*TED|d8*@_WLfeq?8&kfo&S_eq43YH8~d{jb=jYnyA@6^Y*5&IZ2rM>
zPlSX*AFxAH`PC=PUWXETlOZi|iCr^3d0o8l#;5B1DVKdDaz4^YQ_>pGA06yQvMZ7?
z8Velf!%ir((-9%)$ymr59egeha(|mQYgyQ=b@SGlnHdrUDI<~U{JFBLViD2nW0?GY
zOF6I)ZoF7r{NxN1VS2|}M3}Zcy?W(y#l=r8`%ogBHf_9R^KBb$*~H_0s8e+s&73fP
zRseR|y3f>c<EGZdJ;8b(3>9QQ2|cejCQe+NHUJqW1)^A7zEm}d?M!^|uM8HAOCtzu
ziuTpIN})^>oQ)EOm6^uh5Fw_wYWj@vm)}HNul0)F^fkS)iB?JkU9$rvHpL0I^uS^}
zV+4Q?M38QzKfap)2rfZji;5+B>RGwx@90;0{dpg9v2%3Wu7?gi<cGkPo@e)7uJtcP
z4t1fh>U=}JFYU128qa5pE`<ZLSWSp?z9K_6v!Q}f*5%u&`7SIlV|n$6WTkbPcMD!B
z9oXymb+bG7xElYiU-!t>*WLbP*0>*U`WuzZhvVPRAF$f1BM%Q4xBMkvD;3<?@{KZO
zgR#A6m_ZG_BBHKbIzy8Vb?nq=_sDBKSyuwqbt{gVQ@-YKTFLHV^#OL~`5Gbb44d?D
zl8*bF4jj@_<6@&7#30yCLa0V)nK}dzI;pPM7OcsISmJ00UM;bq7z(J%fN}@1qxfI?
z(rXV>_T;OI4fVR*p{H03DgFt-?OU{$KQg>GS&S%?DRp>1K34b*IrrD_O(ery`x>Oj
zVv64FqLidXgfN|k0@Jk;6~n=H>$2SjDDa4`vr-N|@S1G1Y&4o{T&%CrxK6UK2##{|
zM*8H|H&M3gh{QvM2V<mQD0_^;xW(GOJ(_n|a>W(kQfiEAYea8&Kw+gairtYB2D9M5
z^+CVVR$25FAiwZHokb%DY=nQAAl6r{jmfp&upfDU3tt}tj7W?<H9;C0r`iY~s2&Z@
z54Cr})$sLTqBygW8sIL%<*O9RoG2;d#;h3s2*Sj-C*S>$o|e1c%@c2z`1&*VjFUT^
zh*-+|i&wsH^o4i<K!0zEw)2^`&6c<7ThnTPrIs*%r@~|KPwDg8*TjaL9G$7#3c{o)
znTD&Gc8QL5V2Vn{-X%MwsDM6y_ieY{_1gmOP1v#}@mte3l<)Ck-S_Zmroc3G;Ub9j
z9unK2dE~^x=GzX5+6CTwv|(GKfBiWI-(w-)M_)v)A<m5f6q6ag#I#BN179>a-RaSy
z(P)CA|MVi|dv9L5SEILg?bV~3c1)kQdGkEIQ)y`@bA4^&pTnH1<9%eK=Dhtj|NJ6;
z;#xkEW@{f~zUay^;D1RLtz9&1$ijs~hAo=hAuqRGyWB?YwdBEb=L{J-efrS6_H7$C
z?$ANCsihbI=Sgeg#H>^Z;HWw6gefUNYhTaIqz*jxT^3H!3iHAIZv7h<BsEENXAEmM
zdeNfF7GqlGHjNBj;!K!1VZf$V1V|<Sh_%puCQigJBSI)dS-TTxu^kZB0al#KCt)PV
z!=334K!yT%A$4_bv0!BP9R;~<r_C>Gb#IG??X*`%-*`=@CW+VFJi1dpp=e92ul60$
zNC@WH{aI5I0n!AbG0(2DC)unZj(O;$PnmfAFdgzL{b85(oi1uL&@^$`JY#x@6;M%o
z80P@3%Evk@vrasRKVuhnl}YGPR?>0gh~kp65jn|;Sy_q6IbU}gGNe=Sph3ln*;z>q
zvUAiN4C9Z(T0J({E+YJP!3tpQieo3_lScWlvhv{}Jua9#7vbm5G0!iLoLZ>IiK^P#
znw$7XwQaSZF&<vqR<2Wn+*M-`g0lg@XsDWv7@)-=|1cXKOf~~q%`d?j{dy9K*slm+
zL@f^>i26dy?2oS+$bk{o)t5Gjama<@%r^6UMZN^z4(QWqcz0v-?qS8iFYVx|63Q`s
z^3ZNQ?cGi6h@8W=fjJBkoQ-xw`vhm@QdWF9+Jqh!ud`1<?D~Pe%D>cr>*6=iG&NQO
z#ZkzsUGQ%?p*#t>IQldJvWEW#TlA&A=i^iR`euYcSN{N?f9dEo`ckpjjECGIu^l7z
zo6UF&>Jbu-LO$AvV3dayWU+7_Me>c<$O{()yKrI2rHTy-@A0<y9rFoRE(_-kA2Xd?
zPskPf;GoH--W9f#&p<9HstPfnBs4@_W9w<B1VZG#TdgBNVX^qqeWhAT+QCRc{C6ZD
zRT}3fl@M(<?qhxyC`Lfbi6vh%$l}I0%;g5sgup{rAEd>99R(ZfDrW22vA+iF;E6bX
zeys#X93&Mn#8#Zj;{L@1qACgz@9_t#w13b}U}psbFKoZMg2HV(#{Rp80+1GjX!G%0
zz_ta{nk?fludC988cp0;N23Wm__M_nkna4)Q^n|6VyiB;%obw;(oCFQ7S0OOmP!cW
z<K<@=s1AjkLmjwg)A(2lC>liM6^_`6&5qim#=sCT44<%vIhi&a#t&?fwn%wh!wEo$
zMM0d33LqIC0kW9&D7iP19+zp254r1Lq_-^c;A?c2_g3h1Kt=@=EnX6Sy|?c4+m-f_
zcFa_((ix@l@`1wu#D*$H2Bm0SXjZ`^;R@K5KTu#<m$t>!lxgQTuz=``X=e)2$_L2L
zjm9ih2xu(YjxjhJP+|edEOfA`x6FbW&WLMNiX#x`!v}+D;ReuJQNrkuNO{eG4}_b&
zBuC*r250EA-q*DQ;>>NdEA4ul90$$&s%fL9%_C-*G*uX^aJ!9zQa<6D%4kEFJ(TGN
z=%Z|4@DNHggWzFdi4*1Iq@@DMX_}Lt*Dxz1H9IX^#+O~v(+V*(q=$w}@TeI>E+{m8
zW|xG+ptEnuUota<Tp)3GzB7i-|3+MZHs9D(Iz#^k+KDH>)^TKQhfX|p*j8=3_wmQ?
zeH~Ih`~XtB;vjbwpM3D4_^2%obz3&>+`j#%=>>0_v-_*g`grVmvFv9yX;$1s#yJo!
z9^*h61V$kWh|)n|0Wv$LSV>mHgm|9@0($=r<?a*1*Xk_dcctS@N4iy&zUe*$5PbX<
zHuY2SorD$aTccYlJbzH<EB8^S6uw#Wt9Ud1d2H(o@sRT?ER-Jgw})Pd0cMzYfoqhG
zSvBz>E;@oxYQ_V7+Xe>&I%z%uwb(32Toxi7TAG?!rs5Yi((Oxwr4bCy8ghZqkM6kl
z`3E0-_Q-Y-1x~3C)Jfq3I#=Bc2_mvO0o<2c|BR`lpIg_658|tLjDmiT6hQ{e7MsMo
zMURN%qjp&LzNNe$NhY~?qfP>yWq2sjBWx7Vit#>TaEjDnL}i%K7#EIfPL?|r#bq%<
zVUycv5KAOGh^bptkD>c#PKM2)$2Vw~*?p9&aA!HPb+6rC=<vRC)B0fxvU3&;zGXFU
zQ}f;6V#aQXiReA3Uw@0V+rQT;@8kQQ88sN5D;@LQDRmxi6w7(B9OD?-hrY$VbkJEU
zXnG`og4{8pYfLu<WDHA!RC!1ii7D1)!fIqPIyW{~ZXTf|24d`W<xpZQ@JWjdrypzM
zhz-DM=zu4`nJ{d@O7Am+wzsJU`$LQ8-7sU?t&MIOzI^M7SsS(LckeIT)}+z-<u8BR
zsEKH&9lPf{?;VS#j#<BPYR!KN+T68l_K}?gNQ@ZEvw1g?q%bn^;e-R#%nY7+J|fqM
zP(~)9?ZkC95#=#4nHf%#2O*mX{woj;zC|YC*+a#tYVlEo+ieeP5S`FJwMUQSmt^Sg
z;%a2FMAU2)8SpA=oE=BCt)Y>vhInrpJeW>)nRm8vwcqeuJ(;*kzS?C0NUA}(qM8E(
z&dRMgPek1qL2RQu71MAA#a84(3*@BGQJ0rCr$1VdEuZn;GY|IOJ)lwR&D~1JjH`I<
zRTVF|d}1vhJFVB|4eM{+Q*p~}{Fj^eG|65So7uBn{+PU8;>+h;Ux+uM;TNvMHR+*Q
z8@v<tz4qEZ*NXQN-rP$R2CMd4_5<%@X%z#-c4s0uGcdL~M+voZpPHNn=QcUY3a9Qe
zx=5X3cZNj%+Twx~*y{j%3kqDm2Yx<%)|5#ThK~K>nMeQB=;Q0IowsQEb+5d#aM8`z
z&%X6>s)^qod*(7UD_fT4S={rEs-x@lZsW&v?lt80A;WrJJG+m*_waq@S$CaS&QSlw
zjdwt>xFMvYassL8$(d5XX{k&aunSC-F%r&nWfM5U3Yr{U1ljIF_KY~Rd`_o+tG3Ui
zb2^qcYusbN$iu7GZGtfBl>#qIMA`OFZXGwlk=3~C^d9%M7}~nDp{KwV*LdHah0y6B
zG}U(c;s)b*Bh(>4o>>H9sZtDz=MMMp8W`gAMV}oE8`*#~@Hpk}fy&grFmrYgo7H0l
zpD*O3#}tG&YFJ)4=-P;udnP<^x_a)sAxpAYVe3Yb`Yp+61BUh=_T-0`AK~3L-q5*S
z&2#EZtdx6O1BFwH_4#d7RYRyNkf&*W^nnxg@pM-`EpW|kg;U+W`Q!~OJ#cRpb)h6U
zb$P$Onk@LZbxIff(kc`NH|H=_a`NT`Vk|l%)Bqq>jD-*wY{omx7z+f`?=Z%)rbXj~
zrp`u9hPPa>R0gLYtXEM)*s9dn4ZG<Y^W5>&e$U&;JBk}uYX~A#C`C^@9!N*Ou~X_3
zvEn8gAfwRJ1<?Qn9x!9%9^ZVZgl2PVZ)b+#y#%W!#1=HPr`W;KCvn`kWH=F>mmcOY
zq!5>D{FMB!^ah-M-?9<CmD~CaxqNrC9J+(s`c~56Fb~@|USfQXXit)+h|6rMv}1u}
zE9kw<1JaJlbEU)lM<wR7<)Y(qII@Bl*_Dmk!rdd8a%P9=EjMr7v2WwXQ%~%eJ7?2E
zI;VJYQFgb%t=@ls|CaeH!S-?ITk<u{;hffQ@^w3R-@WAa#Q5|+GkY8=99rDDFgGtc
zyx{!Hw>_PoyM4^vkHkh{`+G~<+9T&M4x^<Q?=}VhG)8^m+>s`7mV?>{9S#+F#`t4>
zIwfLSJ#u><xv$QoiaphpJd*A9&J4`#>YDLv_nm~2o8%dhB-dILX@H*|51i?MF;Hvc
z^~q<D0E#kGo)0Rv97BEQm?=o%@C2P?Jn5b4aodWjft>sF$Lf{qmn=gv@p|~>Yw>Zr
zHr`tHA^Z-p;z{wx>2E(@FJ3lT#5f)k#9H<-<~%T;&j7C<u`UW|Yk*NQQ_Ld{fs}Sb
z<0Ku@5l9&f<PV-llbuA{pZb#1<BPAmdHsDycUIE59VfTU?lR<uUu${4myhe^H+{A<
zclBfWc>`v4Khk1oahDc(xy}~AUe5glS`$j9$az{J=P8P$;?0*^@+S&uYQ+@`J(*c1
z<Tnt#Rsc^3gs?rj?&2%N*P|!OjEGE`0Q-QpsyS>XPT-b}Y<G{>Zj60Jyei|?v0p%*
z_e~YOzWWV${cg-%O8)SJyp0)W!i!RfvKKQ`p_!Qq0PEN^<w`MMp*!Us?yhe#h3rAG
zx3F=1Q)lBQBMPOt+|S!=_fG5CDl&9s8rsU*?F2}I?E4ToCvHSpCjo;*Q^W*2&H=!J
z&RN%170p*&j+WH0?1EUIc6?#b=Inw)<s)y}%}R=1C@B8z%X2U1c;w#PICn~m@#S!M
z`z@f~TLG|Ust`N>5Xav8FRW>kr}pUCO9&-%M7lO#jzc2JM1+z7lqAJRpqGPieNr5-
z7mUzI0ERm;!Re4EnU+DMHQ*2!%1_557cU>0!{bD!-rN=FYVn<@sa!U#v>)GlP~WrQ
z35XRxiT_qt>kr(=H&x~|j7oq`U)>AFur<A&nz8fyI7+J~-6@{=^kZ=`PBf=;S?qte
z-1%`~ZXK>{95NnUsFV|C@?^vQ#*>YSjS28%H7Kf+c=vH+3&rd6K!cbk6i4<sXg~jV
z@s5uoyAsyLRf1Sps|d0y#f-QL*lyBe@ocRXS=veDp5vWIz9C7EcNtu>)D;GDpgtD2
z^;k}4c3iv*r&A490p5H3bBbf;$dXZs;A!2kZ@pfvKYEOHY9(h@{3zb5{#pECp1e6z
z3dfbxLC?M8qU`RPG8*&Ko*RJNG_{s&|52QFiB|Aj5;TE?k9_CxtR)1<JejYFljE0z
zzHBO(DS8$9E;n?Fq(}-#74+pi36amt$;foca~P@TIyHPb8DEwoV3dIy26{0UOZw1>
zGsn-naNUHNlX#!v7uxkc_rijG4IA#C|KizR?RlFuqPFtP_j`{*Bk|hNz2Baz1a{L@
zQM02~Jhouobqk?K?M~oR2=Uc4cvP!K>=0H}YG5iT>YC0qWRU>Tpez7hH0lW3qpW>O
zGV-ZIk!_g(2|ihSsXXW_(PL6a9F8K{AE#->rqyoPe}>A)+UeVOJtAKE^IP#&^~0as
zzFhCwt)$QTZ(p)qKG)&C7oK@Q=;AB!0E_}V-9o)npRQpQ3wLu0!>7-fG2M&<@!i@<
z;vtKR!xEH^NCc%CEisuli9`bmn#p$$$T_3=CiOlRcI9WpSkL&Umya0nsJwv0nBG&%
zI-dSjt|P2j!IFXL%@gBvS9p3$hj{(GcrCi6JHo}|;+uO0E@^RGGVS@BOUpwdwlSFw
z@h<V6q9t^7wnt;zB0|cSim6@DT+IDlZy{|gmNX)T09rt$zs1c%KsTU-7(^$AUan4K
zA4(Xjc=>Oy(!ydKu8hnmd%Qf5V`GC&s%4QpkCAre)^(o=N{Xy{ptraw#eLt21^aRu
z?z{fPeQ6D5Y0rwES+=L<6;BQ=9ifbHSSi~*@R5nqx)#oxw-9=YiH{7t)BDGWN3I$D
z$Z)j7zy3P9_dE04>{a`__P)ZJ^epbiL8A>4;u+Uc5+fMmd~7};Nnc{D%m4uUK;q+L
zvQphl6=uk&nJXhYMg|^3ut(V@lnYhP^C>Qzx)=_RDp>KJjGk^8ct_!H5bga=qkGrU
zyYK3-z1t>XtNJ<eUVa;&c|a7zHu&l7w?1a{mTj9h-jU$){#Zwgl9CqkPPj|EKp630
zB+vtt#agUCU=+&za`9HYlrfX*i;dSyiLSeJQ|8=a_#nLRpT*8uAMXRSKMedQ$#WSv
zt^P;RbBek(wn1{-6Nv}ahT@5;!Vw25R7fyDMwDEgPnb|wSx8^xFexd?la!wBa(f&Z
z>GoKJHdz>6hnrC<qXF^=bt(ZQ3(u?VtAfd202Sg3?`y&a@aE+fIk&HbD*m+mkK5!Q
zL_S^n`-Ka?X)f=#VwTvr15%(jb;^iRzW3z8C5!IGG4CrIw@Eu@X}+chRJGk{80*uy
zp<;b@8`TWZM)`yt4TG2Jrrd<b<H_^nW;!JfS!!&D#06_?`@2#XH3wEN`XVy!ys5uD
z`AeX}`-Qie86=fpUYLxcx~2ek7F<fkp9P<uI{md&=`p;2nzrNJ=KW*KoY}V#Agu_|
zcgVhYaHr+KDRv+Z(SLSC9vA`JN9~+49RO?tiOuHM_LNRFiU~QQ?3U4ARRzhc((<e{
z`h$ITm;dl5ws_t45%-j$29o$Q;-G2q{bOQY`$oKgO@-$Bmc=@~uLewB#hS%-6>E-1
z3<6>-QQgDFSqP)(frnDcp_9saVH?#dC4+omYw6IL>hFN9GP!IP3S5o9Tl+{xo%d9G
zH=F2hdfr6DVZd2zhsl9JH2x&Sv}28^7<3XwHKG7GDpb&tNPq~Xl5Y*70lG$Y#7C$d
zG0ZB&V+v<Elbng^t_-(ahc0t019pHd^P2!4CC4xXCVvGW#FyS|OvHEx$*JGGc?*tU
z_s`B(f9n%dc6i^uYw`7WsG1UT+}^<$y{YcyhyrG4$i*|D69XX7lNg3J&<1L?aY~5A
z7a;@-EXo(E`if3_jEdvR+!WrNSV7BZrAdO`f^4()NY&FZ4_yB2-jo~qEYst6@JMeP
z`=kN%oQTzq;lK%iiDEm2;V=N)@L*D<_rdSP?Q{4N)88{*)lSNvhl^9P8>A$}N9sWH
z4QglY+qG_0*rJ(6A%xhO??6q{fQ5xpJ7M;b2B7z@bEVxKVly?x@mRh3^I`(e`}emR
zF#-v)vS}UKwkc{Eo2jA|SqOBs1kQqwStzg!t04G9uCIqizZS3d7tJ@rO7UBEm;Bf~
zS4vv1W~G(gAbo>e<W&+en%=cyNYh?vDXu(M(=OTKOQ_f^3i?S`3Kd}KV&Mp{sBqCq
zaBtfJov(Gp4VWXc;8(T$L*de#0dcOiTrX%V`g^NfD696pNK*^!LtlN2(ONahL+i}~
z<Ww<>f^UJeeIojV69#6f59<`6G!VV<$K>E@)xrw#fu$m99+138#mpO4i8p_ES&{CK
zt=sePzPtAA+p*=qq466UXRYl}bI<n>!?Pyd(=_+~8=n5;jpy~byS6S|wfxQ%*Uj13
zzRB}I2P}WfmxDqbXg7KxNJ5etCsOSQQL2XQ6onXHZUVPs3RZ5yO;Y1st*qPx6b98f
z$OczH>YWa+(&;IGu>;-P#izEdG7={!{dQC!N5vXZZ*;LGYEJxh0#2Hk)+m$>)EJ2e
z4HWVkh`}|5Dn|0kNIyfwJor$f$cZKwW5indvVXQKvu3~^=s9p<|NKrFDM<}u@;l{;
zr{GgnJm9)hfvlRck=X;|V%KR#^LC<-_YhVPfbY;oOkAOMx6;Z-<<PKD#;GfsA}AmV
zc&vj0?W9@cGL`eeKtn(|Kh7mjX}m)Rj%8=vbe{}}InRFGB4_oi$oM<?Sv9ok{GBAW
z?EohXp)pCp<sJ}|BJ;s9s6&nTY`<QS9j+u-q}pUveULtXi(t8;*m`nB_&|%9D>}Aa
zw=JQwT@NX7bZ?)XEk;}q7Z<<RQwK*SysR~ITz+xIa-D6ZwEMtPb~IWlFMGc{MPEU^
zA|`8eJ)nJ~)yno|k$kecSS3R_P&7)e5$itSAsQjtn5!oSBhc+f>b^GZAD=X$I6XT%
zwE>Xq{Ol&VIhmdYS*cl4gER(}r3{UvKuU1#@PA7k-t85~U|>xOno?p7l#2Um5^;V~
zPCx(r>6Gf^$6tK$@%y3Rryro@w3Ld9lxgC*AAS<gj>pI2*|9ese)KgKTl3W$k3RG|
z@txgwYc*&~Sc?L)hKN6~5rzp{B_L;>+`Y_`n?oQ~>vR_SQnk|V{pWUDTIbw8^W^0i
zT#j{5ZDGKe`e(LJgXMAAjx^Mhl6baQ7b@-9sZt|rkOJs4Foo>ml#KEzspB$47^4df
zD6_~Bhz7fi00_|HB(wXg#vEV#!yh<yYqyu5o1id^($|sO?tfAeU-=H2skQgw{>tPe
z+Q8a5{P}d_QOqTykCT{S5i%GJ1CmUr2DBszC_pDpsg+RI2AN4@S+_-cmdHT}_H61^
zap~)$w|!GZL#p5_b6fl4_MpMCeg?Nq+-*FK`z-p5$bdp0OrD$&Mp%fQ;zX)Bv>6&>
z%yK2nX*4(7G<k9sq9YM&ITFFsiGyf8FdnUXDCX#&J#b=GYw<+H<|=36CZPw<Z?JEM
z{)9fotYL+^6o^=LDBsKg9&P$&oO1NdY^HC9SVsk}3Ubb3VhAw{SYc2wLtZlM5?6=*
zY(cQQ?k{2WYs5kNHn!F0q&2ImHXSt0bq{o^Ob$3{-XoTaMmQNph|x~rNRmhf$w3rB
zb`~;Q!^3QZCPalWkd2Rbgfa|@5Ig7^(MN?C%*K5v0vOEAqb)NtIhl~moXni$jAU7W
zD=ASf_DB+u;SP1=L9lOG009U_z|UkZqY%#4>4J1Li||;%J-TLt*`M=rBD_Ze9_L>#
z)PZWy|CoKF-&ZE@#C@@w&sUBl@gy1V+ewMxVVuwq0H%svVXu(fP53CArZd$k#$d1s
zB}hn!iXtQ-IUzYJJ}S=XF#BWwdw-lkeYiiU57k$0xYrTXRv@MFZhf!94fHAQNx;yP
zKr>>2qIZuvqK2;NhE`4}N4~kbX;Y0O@7x4n)(vk<1ugUz6^Tur*}f88=~-5NjA#jy
zMc^zoJ)_e0H3uLKhKPOQ^8+>Q*JkGJz4nQBLaFx+nny!EdS(3j{LHod*Z#}JSaHTB
z&WbV11^|1ZaR*5GSlgj}3Ju!jzkv3iU;DW+U;7VM_Quu95a^u5Dd>qVYVd?u$_!J?
z*8o0JwcLMOWu+RZsG9U~C9T8hz_y!i2iDTV9^emVd9e_Ltjd>G@<t?F1L26LQuwMr
z#eulD)am}d1+P*URj(IvVHE<aTncJ62hv2k@22|f-*EDbw5t6>OH^ln7Rf~$iUb`D
zU|PeR6qzhU<WCf`^ofR$Z-x_M=}6#}1~2PsE6UE!&dtu1(GG_z2V)36Przwrt<1%M
z(FD^^z@WVREnSDgBG+I?lA~e!<QMMT2hl&$>t)T3JH*@XG^^;HTa*k<_HBm<@$;Q~
z;ohqIG_7f4xVGT=+h6+3w<Ow#8AC=&-pi#GRkY*nmzP&0`*@~Pr61m0cOVV~Rm7b@
zXd*B|OEger_XsPq<nArA!jme~lakvYS7Ow4k_^eJfJ`8<A4Q5Rti7&ExyA+bno#z9
z-U~m7nh!CT683S$oNbgHIeGJcVtLyK+uyQD<yBaX`1Z}%FU4Ds^W}OdhNX?;ihJtE
zW~RmM-=lRLu;bjO*s9lFtBT!p&g2vm!tda1f@=mw0oQb&=y(JG)k^+eGcfYsYX$~E
zLH=Gd(7IyK```Fx)ZmG8-+RhCQ?2&gnX_ll6mNWXLuF;fe|ej&Tl*|XO}KgZwmVHB
zWA9z!OliNqgYW3oyKg^S_dN(<CuJWZ6#^E49;P%KRZ%t0=vWo<2eZ|tZ;sR_#8}`a
zS`erx^K}&~O<NWr6t|J>Nv@>g>m@ZcXx!$Umxw3$Q);{t%^C+9=Z30YLxJLboD5Xd
zMct+`UlrVN7Pyb&=Q^|GeO%6RQIR_A1NU;!b-a(?Q93*_WEY!MRkbPR0dL#`PIxVJ
zU@`nxoZB(><+r@(Ti09`InY5o0dG<JLt+^HQJwSIgy=W&zN8IS@XSn#3+F(yl4HX-
zgT@-QGrW%HGo9FZ$(66pasI0_A@W_?6yasXcWrj4Yct+fSa58*z&ia4oI#fxhL@Yb
zm3fBvLcFpA5*|+J)X)`{mz>!yzxNHzPcBeS&GM7YZs^;jeMVAVcua0d(n)Y_7q5uV
zSK=(dv!bvf7WP6^UQ=q^6dyOTRJ;sLlq>cM<d=?&kGsjBP4ndYPl~OO&wf!|l$-f#
zb4dKkA;hmBbMButgltf+*mhjqV%z`kB0@B>e8i;kYbs7s{kvml-WcA$Z0wh3AMk4Q
z<jV4C*H4~tiZ1NmyUXbD-Sl-wtM2Hz*ppT{YTJ>+d-XoEC-fRN;4bVBu2;<|?Jof_
z0LWxF%hK2wg$Vy`IkL`eIf2BxT$%pcazR0ztFkXnMW<Ei@Sb%^79O!3{UF{(?)1AT
zBWP|or1V<qCFT+&R$KTPX>aMM1{lt8k)=m)1`JVW7+Q_fxW@l}Lyq*{kR51U$S`si
z{;LIzlLu7!$L;6$Y|<_(S=vcv_oSC$$U1pSZC>VMQkoVqWO!V>w1}3OG95QIL0LqA
zC)||~{*1*Fc0`4Ra;}6(I9`wax8lh9x8is?ikarESOUg9o}!{aRVeE?{rTYYtysgU
zrB&=sb12zv@q#!fUb`1w_!SD!V9kMK+&_N$1WUtLO2CKfnoa-(?M*H>p?<k#O{JbW
zqv{~cbjd5aSw=m0LW3*avGF>L``wz>ht`Puef91HP}a&ntwX3ck^%MZ#NX8H2JGyA
zuR|I6zt^F(W)o!O_JV8<Mw3$mQ}`6L4vZBv7cW?|SGQeGL~&q9hSx(bTbSj@{{gc+
zPWs2k)$oW0ex3ZlEaATI)4bySc$<H%R~C8IdS#wEX(Zn7VB{AHA}doyZN!;_H7d%_
zjDt{O;>F9vSPkn{WRe2X3H5BHn?^J@x`J)nG;YKVJtmxjfsry!K|`te2w!m^uJ~VA
zz!ftu0kmev_7Y)_H{r~5Om<yKv!H&Rn0ngz?qE1->+}KnGNy1ce^5I1C9P+}lg~YS
zCZ|W5+|FTQ#f=S`yJ8B`mfuiw<8{lEo5sZCC*3%YH;Hsehw)F>H{z412=Nn+HH3sk
zK*~2RFrY(381$6H?H^BlXSdb-Xc*7zKk&3+uxQ=(%^9U5BhK<a<UF`Y0_Jhz<8TDz
z-ba|Bq7gQKG{UAE8fPprC?F9VOGs=&Yywsh#jJt@!{T`O)=w$mX;#RGta2W!$@ks4
zKUO~_zILq0giZlNF@O3n^>{b^gtsMWh;46>qBdp<b^@`$2*yr063cy*qfr{C0Ch|z
zjikzTovFYpzIy#ZCR=DmFEA8D`&7-ES+cOL?`BukW?|>^?<3K&ZAJ3F8y81L!m@xJ
ze-Rn+!ZZ8OlC3@GdptjI|4YDBjK*<Y$Hh<$FtX>5QA7sEC_K_}apS7C#z}(jgEzo&
zYNVD{!wqW8s{Wjd3tElRT{UBamX^um86wW=-=VHL?lB4R{@9Y;7Kllx8Xl3sAqlyz
zRBQ?3*7buCfrjayRNWtQ^siiWDXn(VP^k$}QzJ40a~NnHv3M}Kyv_eb{2}sxjz73e
z5zOHD!y7XGAfrtXcJ7Tg&wAHOH#ltC#7R@x9u<9f`^h_ZJ%ddaw}_c@h74Lv2v>8t
zUhPW>B%NfThm)Cskq4d7IA7!;_R5im$e_rB$CH>yh$qXFm6)FBPDx6LuNQg1<_1R|
z{vLO@Xf<69IJ?1DF2~!$?8X$icEozC6H-sGi@$~rZDjU{M&LrS?j+N&U;lH=A@YBY
zIRsrruG;?UE4SMFQ*cuWkTQu;`%z)|MidWq0LQ>6XJ9}BAb3+pW(A6=Vq(@H<%G%~
z6fmprD|&%mr<K+Rl9np*^cXt~F?190XEy;cX0*YVhbi(28pKd5T|>h*t>RS7hK<y=
z`sQvkJ-NF>I={H$tIL0VeV?e&>G3VA&TW!`hMOMBO+WNQ@1f$^&vU;N&%M1~AHGQ0
zeOHMISt9$9K(f)BlRY350HY^5k0X@nX4FB)sDoixew=J}AnM@3sDmR=Wyj%e867AV
zW8SbJh~M57tpw~bwa=S%V_vN#QQ{A*%2Hsl+|7X(MX!O~Dk9@}M?5Lb#!-jqPSxIf
zT47pJF#_uVjYcEO3J8yJ>Pr3&XM+&nWQ4^$^ZN*HkE<2Nsxe6HMz`2$0@SVD%^ypk
z$E(DzwM6{B;l$)w@BarbD(^~Mm@ppVMa{IC(qRb^qbgj`B=fE*n@^Y<9{sk*Bp5%<
z#4(HBe4rjr8k2#={Tk*_!{$ksisDp9-4TWb`cWnk3|-mFNMf@E3lRk?ku+{3g?p47
ziHTux{i_;@rRL)(piAFSrL+$3kg6n+Qa`0#7ptOH)e}$1iFt$H`ID-t1pzub_zG)b
zu!qi>EobIewGL3DgzMHiz>!Y^ou>g98W6yd*K`e47s0@#fO@S4=*EaZkv&^bkv$Yy
z4;0!{>)@XX?V)IglJ}s)u2^jEmem@C>0%4jZn{Fzy_0L@%DCk*;<F=tx6)h9L?r@@
z;&Y8AB~r7T7s?4UqYP8-zKenm0DdrdN(vz<nJF1*4UpxN;gN~7keK>c25C}PIso9$
z<1gU-;hHKQ5p)bpoiuTpx=K7DUfB(oem1WXwdBNYTh5}JDkh8DX7}wm+2ouMVnoaK
zyUj=&lDyDMwgG97gz$mXM8dei>cd?kgWxXd>FK%Y4bu_sA`_S)YC#7Spxgz)JqSJv
zq)%<S_7FJD)|vi2k2E`D9lc&JeiyZmsgA%bajRS_n$;N~&CFVICaTcTDah^4jdl7W
zfQ0BKW{0b#J<^P`8HRsTRYJ%L=psir+K&2=ejzLTd({ea$ByBi6efPTLY+DG!_MK!
zl|S$N@G7O|6h{9}Ee5f=Ce{V*$Ixwz#&e2?SDZ%G=>=q(U%M9unPfK117-Ty#KA6U
z;0DFgs)Z5oN%77u!o;0$ZLmv<Kh3+#Cb_SV!n~P64x6=%bi7BJfFP^*rs;sDVW=m=
zgJ>4t7NX<#0GKrJKp*w_$r*?83m%yB&^y($%BHV+Zt=Af7Hh{Yzj^W1VMB)wd-Wo3
zc=^qWl`AUEpDQbPLscI|=7G=fHdcEGv)U8+|JEMu%qs^+Z_dl#Ic{%t_3&OJXJ435
zI#3FWd9xll+oOB;9%mn+m%LfiXU(1#_-X2D6Fx`P*-XVdMU0aYJsg-ct_XzL;IUzr
zb|BOaHiOy_$*N4va`ock;!@)pq|1#Mkw77)=5}Cx1a@5iLVpoDiL?F{e)g;~IP^F8
zYdgg8=lAb_9VH=m9F+c18_{FwH6vG<w$-}!8~vhoffSH&#iMgGDcB40G8lny(3qz|
zEaO^wD%H8>j~Xc5GmV#r0L5@SWg`iIy)@LSO`(_CKsg@G@*6j5D6<A0mG+1Vi?`}-
zQQyWI1S_;M2$o$IL@Sh`eo^5IpZ`9Z(NxL2)xUk#k2CyE+!3Z0ld{<-lVCK2O3)$u
z2_c6+y{_-nz7{W9pu=_0)cbRCg&*wD7?PoU`2aNr!=*hpl;=!7nNU2o5irOzC}mMV
zs0$1&H#3FlM#C&>({+sf5{B_TL(?^hY~@He(F~%QT&7R}P!T>`X$aVCE?bxU#yQz?
z$BR~}pL8_}1ud_5%mgTEG}}`r;sWR1jQHcd;A5v;Y?H^%2J2jU@At?zeFH(uUj?V{
z2wEqPp!JWLXH(>B;<-R9hAOW5FqIRHGox01wz>t{B{~NRIvuIV+8U!)Axo?}g7>5V
zcU?}N{L4&TTu+N~xO6YPTrNh>nX>czhUs&}7<e6)p3nnKc4#FeTwFZute`V!nh!t6
z=PUo*g-oe%q`hKWxXx8u@K;?i{UiNtiIxqqH0jM2cnZxndBBY|nOWA<^K<6C*$tK*
zgd2OjC9)x-B3h4zEO80HD#F>(nt|aJ@E>Sp;h1v>F_xNoi0DnFyD9KckS=tR8A3Db
zjiMYzD3NP`;9ZguHZshvs=nKF&gzRHVj}}$hz|GPMh$&Kcbyr>L8Jv$@IExIH;(0V
z#WmJM@5Uj;{I_=mE2%%M6_L<hykyyX&1pHv6zi|)JLMQRAQ`wXNe3iU)$@$f^sDsB
zjv>N8r#$ItQYjkygJz(N+3byn`NzM=T?Z^>P6KR)EkM;2EHEdeqd07JW4Lcl{zDhx
zTm<H3$2!Yiy{iNBQ$&c-T+UBp(hT)BV;t1Z8aK+5V~ul!fwTy~unniCUJ@xIcDs-B
zZ)m37G?TF-#cpt=p@)mN2D8mdlGax-M=nw8Uop~dxw=Kzr!FhD-;C}5{fA8P>Lx8?
zqj)v;dj(}(yM0~){u~zq$=);cwu-%PV=vzR>Sg#&meFyE=$F4T|7CAQu4smjKvuH<
zT=h+MQ4?~0vPmv_C$eugmIKtL==Gr?6i5hi!8!Q5X0w@9t^8e+&~ujzPC7mIc)WLH
zW8Zu|D`Ki+EY|E-pjY5@)6^=h{i^H5*`=>PU%i1hy`{SPrKRHRf|X4}WpBWCOx!IS
znrgqHYHvld?c<jW=&gG5aL6m~*^(>v?yYbNS(B8GfsTYCp4g7H=G&5vWMuKMh)|vJ
zFw(kJ^JYyNXJ=(fB}a6)fJAdmsX~N7r%*=0ZctOQIV{YS;z87<&Xo7qu|xZI2)J}*
zsF`zO5h{Q5)&0*?mK`*~MW$;hr?HjtD%le8+7+kJ;hSWM`YMq>wTIM{`VWvq`1Yz3
znq*D;s7-}Jm%`9Z<P1|1O^6NS%q>U}?k!<<MtLYH1PE>3EH5`5vl~gMU>$)NKn8&U
z2@N#|Br-4{MX21K@61s1?T87B_g|2&HqF*Z1doH$9j$~fYtH{|+AWjF$WWV(mWx(k
zUY$MA^Gfqy$3{kNEEI3~EP~+PBf78$jk#DG22a`6Een{<KzykSbZOJ7*p?j(n=zHx
zm~E<+M+*T$FvjH1pDB0?A8h5%+O}yWJJT#bFDE6@hjMEU%|rb;v_NQsyZmreA6wNh
z@8kYln$xfOb$G|-O>6ot$O_*LonO51WeB@*?(((b_t%>B>3U5`|5<lFcz44ax9;1$
z@h6`)7;9ZQxBQldo<l$O9`gPpllL`hc&zg2PudoC8`7XMf8VU-%eF39b<<9^-&7DY
zV}f!##_CBp9vEXY$D=WDohhYIdAlPW{SyDCEOVJf)=+^qV<3vwN7RKiwrvybRQTJr
zt#DuSCk+Gr&92*D^FcNak&j;t)(Eg(Q$|gl^WziEdUqRLGGNwDkUgGVv1#pw4J((;
zo7;7UC*n@%SiSW0cVe(L1iaVMO!tzZx9_jh?b4nD2kk8D)A<@mP1tg&q}MU{#T)`l
z%g5q`o4XyODTx&K1YaS&5jyzb0LbtP2sFmWMMjwNbI$09*vMFksF8uVAcY@5FB73O
z3{f@cY-+>n>-%`;Jn^ZWvY9mGyJs(c9YJfh((sSz^M6<R=_Ee-MAJTj)XP)A@qwnj
zFTS(%MR`-+&+G%n=Vc!#1FTMuu-*~=HY4NSU*71-%?~bu3@SP&r_YK0AqMHn>lQ+W
z|1R5Lqu$r4v2l6DEuoY)q@f$@6-5^FPHfh+%_mrs2iIxZx(9t2-WJ+<;zDk)69`kn
zbwnNY<pdkZ0ms_nBDgIr3skO<1`=mTOR~zaem)O!-MZV`Y{m5E5Z1h1vRHUf6ikBq
zwPrCj;}$JqnRl*&gB=H4p0A}xR{C=pLwR44pfvHrfbc6eAkN<aOH2c~YC&mSs}Ubx
ze?~IYwl-WjD7|??tQH%d);3(cwN*Sk8SYj^Vf*%_ag_^0BJW^Yi`<$MW@T7HxU|3P
zwBdT8(x!3|k5cR<I@8Hm!VH6rCX{nJMu}KjdZwxXkhS$-d@SI5A{Mm({z+r13D%aR
zxmVSg;>TdspB-QWJooQPQ`r9U+O^X59<kbwxDf)J!)QVbW?(OL9ebf^bPP5d5eIRq
zD}!ZMT-p^o@DGK!=?3h8_tF*XakDNk_pjGr4m7$-U2aC!$U9a)V>oF-ib*#zt+>2f
zXG-iPonjGW8)|BQ$h=!fggv1B5k^8H!a~X-Aza=rNw~etrWO=at^w+F`gw%;`CYr@
z7w32Efb@`p=1tMLi*{wm$cNkqB~8N>eARE!GA<6QoBr*_FZ=3r$@sTACq0TS%B4eC
zlwIKBXY~8ueec1!N1GQMlktg5NA<E<7^Aqba(db9*=3XSSBTeho3~!QbZ!sGoFlpq
zXalFT1C)Pu$$Rdd&xgoApT9$kFMY=8=53q2=We}YMI{y&t5|u*t+aU4Hh60Jl9nx^
zGp5g6DteV%w|)s>82{9^Yd`wNY)0|aE}i6<buRIZ8EAhWv%px9kdUxa=}JX(4vbo4
z{ZZ@I_5Xg<kc#;aqox@+Y`mGitNOy;Yj-xz-#LD7_4!?Tui+R;sh(NZbL7aL_nV{E
z<|f~$eX}2jjkjg|m8Zme7hmZi|GaV$JWsvC+2$2Di1#XQoIUNUucpshQ30MCR={)q
zLHpr?95h1B*c2jeNDd-4-M}^6Vt`CV7n8zN71fie5N6Q{ZG-LRRo!MI#Fk^rLC_hZ
z=9T`CK@7P{!X?y2>T<hf?=&?iSbjV3K#hYH8HZO`Ar%iDr|TC_xOVY#tEQLDs($C8
zIS&-%ADVIUbA8*485I>@nBgl7V^yv&e+EKa=pUFdE$x9oKWw~yKQubk>__DPO+VmY
z`*9m9Wa7c&wDH7&r4ug99@%Snb@kqHJM;54k3RT{)@8<wWy{2G-mGb}XHBP<0zU(>
zF%`oX%lYHT<3`SWm=Zi8+``cD@*n|bt1hp^nVOZ~kR4yB1jLC?o`Op2i<T&q=<{!i
z%TV<D@8IF|^n?5MpFh7}eiY13fkD3kgK!ul{(M{Ceq8)kEiOMLepC9fVmbSa_xrcD
z#9gf|R)!#`=4AoBulnI<Yu|a~J5G<^JmKc`Yu8Pa4Vjw?dC#Ku#fMe;`1Mj7W6!4+
zo{sm{IuIvn8K4HAsh)4>*qA5+;1haQq5p&!)Sc9fOeR-mk*2;1nEahO!QDf=_waom
zi4VF#=Ck7c9^iTW(5H~uM|=opkKAxboP!OAmmY@chbs<4FEQot(nIR=@8tW~G_8gh
zs1L5xILD|J!GSRo@{Y(tpSdW6mpo^)<6O}DD0Rb8ExiK1o(^xT_qth&W6O0HaiFe+
zHG23~l$y2U!Z7U;6%ih))EXS%kfJos<|qb(`vi_5mwxEOb0DMVoEvUx+e`}e+}K3h
zzI5jFjOZ3Em)=N#RA?@^P9H`z;wZ*y2ZWQ3sxTTvN!UPv5oc7Kgth~<cbBZ6SMs;#
zQ?Q=z#OJGx`~|f$yGrKCJ=R7ViStIac9cYtRFW^B+Fy>xEK*6nEdI;@RK6J)=ir(?
zd0e)e+d~%2DQd>UBf58@66slzhAWX%;N_X}DrIPzZqqeec~(+FdZ=a(2@A1@m1j8R
zQytS{fX4!6tIFcRmI!jjL&}mNtN}<~T11(gcxegIewC}R&e^Fco=7cR{^>G%_Smrl
z1{4=JZJL&bN$A;?vny{{vS{J_>&DI+J8Q<YDdiI<3>Y(D%r#{rh7Tz%?qA%$Z||Nx
zx^`~bv1!NlZE<H$%TLR1oYzop2vMm~sVWuk^vM(F$QjPg3R2Cg|GTsP|NlS!UjO}A
z8r5cx8#{;7@@CDO=fh`In=^LoTu!GnEok0kApWNQQ~s7OUJ3fuJ1pp>-XZdT1HX#T
zf}Y$y=zaOmdjH9j`|Eja+T;o8nv~1Ojatjc_P}HBpLPEIQ+>dsNdx5L){V48>$O*Z
zJ|Q;JOiVE5sM?Hn5<#3Kfixf<l7ltn(%rF)(Hu{MggChgAUiQ699VW%N-{_08m29L
zR5}iUg5??##q65gE(j+)T93-p;^fxAvgNJ-MVc#9ZVjk<k{PFKU})KyESnWMA<k(q
z-Xe7I*lumY<Tu(N9QulTF3$@W55h=xCxuR3GDU68&s3c23R!uMEuAi~v5u`J)$Jn0
zeK3yijetSoF5w7UI=*{b{08?&ZSNBIK+Oin_O4IUPbqZkDqgSogo=~hL21lVwa-n{
z=i<!>bB6VEAVeobAMMY7n4MHx#{XLy<RWB<cOm@T>u;Ws8N&D8!!$_v)QOWM{b#55
zO*0L`m+Z_=skr>1=yAg+nFe91t_pIZ8CDZR{;Lx>VU#jX02pr3pi$r@(W+o6BS0CL
zGKN|m@ePePNRE${04+OrX)$^vUYv@UkB}0G?mB%<b@O+w6Km()_$4sm{Zc&Zi-$rX
za`(lvbWl0mUJg(HaQ?z~VvrTc^)}zLXwhE0dv+3Id4)X7n8oS{F({XQI}%DYL|0HP
zAs(YgjPl^RBf({d5W(k(N0fqWtqH@4tB>TXhuY(l=ZT~9ym>Ni)F-;-&Pf+P_^|rg
zJFo~5Td--v;Dwo}Rkg`81+Jgs?Uu~<C0DNO)z4pxs6?zwu4D&KeAB1I`(r@23giEy
zbV0%qZyyT4u%e8rTM+^Pov_POi4Xj4jkwF{6ApF+#@Efx?DqChgUKfALd0EO6`<dm
z+;Vo8#z=(3vqvCbjbY4KeUM2Kk5h-@X!TimC`S5)S7NP31pmi~;!q{49qu#_%%Zx@
zDWHF3FBd+DEN^pB>@<P@7B<Y{8DJg;8Nr55HRi_-qe`B}$Le6}(g8vnd;wpZ2@ddu
z;+67(+l}i1$G~4}B~FtOd0HyAZQowSu3Hu^ZiIC4ewElJ=kEO-kS#-bUoH`sc8F8h
zD3jOsA-@SZhq!7PPzlaOVvvsT3l^*o&4_NGo+nCJ^I>)5qE#(Lr<6f)J1ppq)hHxA
zMNvx&#S<hUy$F(_-Or!s^o|?p(-#-jRg@Nu#Pi}u3CsS1(+$s^edblK@YO`>AU@@p
znEORF1DVkP4Ko_5gua|z-jVpVE0CX6Mgq86UscddXP(=k1mUoKc>mQY@(@(}0`n*t
z9qa)laV+~7Qs@(B3zpBON7gShCzc*dW1c1Ai(2yTI`M^Pt7qqRx9t-rtcj)s6z6TF
zc9P^FAI60wP7MjU1~kk`1)}LTGvW(|4UCaQ)BM6dHk%I=5@O;H@^Z7Y9Efq3^PUkJ
zAK-T)WA`d(cj;`YuK0=>j@#AgyVgrbH0|Y<QUbBfI=a7tk!!{4;*k-%#sw3?L&dLf
zX?`Ci9MG)2=<D4VQ$ZKM^A3{2{k66<o%faf8c^KVWiY0ZSgaVP)$JRv+c!#VI<<}P
z_wj$}nY?TMbI(SaJsZ6%{y_72y?to@hD9lRA%3CwLHyik*XTN6Z1Kvgulh0ljhjfj
zDvgnt{<CMri&np42+?1b^OcRaFXZWShzFf!Wh$P&f$<7IYLg&nbA;VSEo~YzIuWj!
zs>j(TY2S?+FD6{`-_;<Vjl7p>RsX`=uTnJ9e`4-iWO*Qi2+@J}HThUkI_2OnDB;*A
zEK-%IX*&Oh9!1vaQ6|ZBI{ZBX)uVqST7X?bQ6I1RXR^ia{m|*3=@wk|r70l>^0wV*
za}C0E;0*j60*oK0L}&<@>||!^#}Yy`P83-LB=e5~`1KS_=?9rHlQw5Dk=@pAl^q1^
zxAY&{Vof^EWZl<xdZJaX&aVI=?C`tXvd-SaIi5U$N_DuV5TESJ@ui_s6YA_Zqjk_s
zwt>dYT6+X^+_H4SsLn>JEel8AUuaMArZK5(hVHUG!Ho<iP;25~<i`Or1R^CAMS_l{
zf9|iT31&ki`<W7i_|5|31xpi4u|_@VX0c1z)Nqxj$lz30_;{`XFH?%hbQsZf^C+;4
zMz$73u>$1L`o}<U5Bf^c_f|oNK`Xxoe3fF0UhzDzB;oxwKSVn1$g9i5>NYBq&$P5u
z(^71B;>(;WRf@fofNVUojs|~0Ltp+r&toXHn=2j<LFVDsjH&@&Lk^x0%jVEWZXe)h
zf*^!>Iuf8HsjT+hwc>Nn*7RL-Z`&^(Gfg|-7??cJkF_n@6C{_kM!z5e7|l+g++aYk
z?4ZFoGkCcT5VxrTr7_B){ZOZ@nD`uw<)L4I6<00kuIN-6ko2+w8VdD`2o%5qnl1e?
zUv0~*r-pXhHAH+b4qvX;VZpjj&bT|KE?)8JqmO<%XL7;Zj@}jXXX&FRT{mIe{05ns
zX>QmEjqe5rOws5z@#_m!--wqDV;saEeE(Z$E1vu1=iTDxF%jXk)%I_?bpGs?-|m0&
zy?f33!faLdsz0(`$(-UC>~GsVYGc@G8+Mxe)H2+}Ci`yV<%YlSae=-o6`y~5j*Fnv
z7U!xzM5f$mG)6fsek`ij7W&Jl;}|hHIEE(+pI{Ca-#_y1Zf#cfd`Eou#CE;M;Jenu
z<;7ex{>W{&9xZ8?J-pfPor?6<9eQ=w8#ND0PI0?oKyB;iAylJx9KE^ish>2x|67%l
z&wMMMm@@0h-k~9|dHT{lnznJ_v`KrLH``ujYAxu0V4Z8+yF+ahm=km=9UKFxhm>~m
ztJ7&z>tz6Xs3CT0if2%&4<dNJn#8>X^cEF@BQ)Nm5&3l?FbCi#6d4C2cPjx6Q&8iJ
zh=Z!!LqJ`@($qL$h9wKcS?yEQ=tSjrlwb(~0uInAlh-B+S8ZZs{U*kdIMqZ)a1&Jn
zS)hUJ(!G%fD3OQ$s+glSj;iM(5ArtR?17rU*j<QJ^igW`19*2J)UWlyNCsJ2oSc@L
zlo;)h6f|H7z(EJf)7={9I^lj*7GOw3D<_2NR5qLwN;n;5ijtVkO)Aa^ewJQ-rKgQ3
zwkw*H&&`x4<-f{?G}yg+(^Zs1pdCG3v+AGaLl7H6xR<xZ{+c)@<TdG<>~A<wNCb_V
zezNSZU)PCfTr(vO3Drg^X;8~e=A376kK__%DPgiq*$MWqjG~&|yKlcTspw-`1nK|E
zD{4cCb^_0Nllw%0t12}_i8?7J6i~%|qCjYwrfSWxx{^+=OpE(;bwxV!Q14bX_JPGF
z{$t&?Dd)!HktvCU+OY~*1~n=9)o;a%*h*-&Z&^x`_Y-`~efV5T+Sh)mJ*GX0+U98e
za#?D?LGI+hnNpEa8DWkp1c7qv=u=sx5O7BVl9eHWF>+EIk#-wNg;Ys)*KpI$GC99-
zGO?&MBiz32J5JZZ6h)^l_PKaZoY=jW)7u9OhSvWD8@OuLzV!O^9X*>hKj(d(KCt(Z
zyB~{#5s)}3=KK!rn#D03B4NDPB`(ew`>Ob>N!GfIj%;Mw3%`q>FA_>Z<bFJv_d|UJ
zljW>qm-NIK%2|@xC(v{a5SvFB*Vzag_(BVDLH$BKB2PLh5yi(!8<eC^)FHCVzTs}G
zsy1J#m?pD|X3}Rq7QarJy33uODfXCkGq>H0bu-(X-RG;3>4L^TIMNSRwjG}I$R~k1
znXUS=r~P#?yNUO-0<<M$qPS5QRs+mCDrg_qwP;|fPejwrs_~4oVH61QEn>XS#yjfr
zia|QP5KCMEKgRL{x=CxVq;~HPG3Pgk`~{tu74+$6#2*3wr6HYLnItme#H)Y#yqIUt
zJ@bm7KJNu<$qK#%{Y2!kg&Df9_Amoemx!?vR}5ZnfiMni6s@a6kneB?s@|%my0NLT
z^<9^d3IH`2MuEOX)Sh~m{^v{!>9jns^FYvD2`<W7#MQ|koLnV-O}{<u)@hs81@1|G
zMQ_wwGZBRurWZ?Wpgcu6tS;bsOx>X!85q;fR@tTmmFv%xfCC)eV6mcL)`{OkRH}?m
zVDn|EUR40s(XOkvLtuc>4G%8VOW(B|abni$)xyv>#CB&!gj?;#%aCk$EO6cRw{}Nf
zvE82f?Jl@_!$)Gn;Ul$|--j)a4DT$93}1<=YzwqJ)AG>$wdgg_s!1$qfRR5{w-K&b
zwlU^!WgDgU-XOj~aM?yv#zi@Za>Y@9*~aK1Rkd*@w1jKK{lAEp#FOm1&%T(uw|}!1
z&wO&^d86j73tF|<C|;|QsD?E#4qDA@DPc1Cnd>~A{yGQFSKTlDN&wr-qcNt0>=y&I
zwSb{-U@F})0%I+?1cWna%qSy-nBnibY6((SFaxzG@!FHEbVTFe%KC!zCn|~~4zh_L
zCcXQk`1aj%;%kkb-nMA%U3>T3rbTJeX;~;-;h#L^R}$R5afh<!K4LzPQW)9Z#XSJH
z9#1LLLQNq=jWe!|RqBT@i2&t5Cm|?npaF==veGvW;;X9RaLP7kBh}z)Ej2sB-UTu5
z^{;{(dY4quWnyTA^lKIhXVk~%FMRsuv-<2^Td&`-VF#Sj?tzlpT2d^ganuM)=Sjtc
zWRWAi<ac=GzK&qP6VSBw6*9bd2nR|q*2!%=5p-ng_~LjP#jz(`8vlqu0M8CSTxmGQ
z@)YFEq2nbk-I<=5p?ot}NIC}knf&~lc(lT8JBbH*TBcS?2(@bwp_JQ`z_4*lvFeQC
zl~%Ls+K4*RDIs9DD;?Bu40S0zNrxe+t}&h%PiBVcsYat8SWi?1C5oM{dWF0@Nu?F{
zav9}R8XwENm2`R3-5XPyr$s~*JDay=dr~T>_-1j97p3W7$xiP}58ru6RmdLH?_qOo
zVf`+f9M33{fVW1UVqc_66h~nE-`a7Nb?RVc0m89x9}q`^BR(ct;Si%BO6u^q(=(Ki
zkl#njbhu54J=*$9Q48cNn5?`bu}y5>a_g;Ie!EcpJ?ytUxgE6ao`p*e`rD?DGi!_C
zO2TsJTp{*3Xn?xtKr{xL*)$uvZ)C7xwk<UkNNRR!R(e`|Ty#{pSxGF#9%!ExHb4!T
zmRVBXJ=V~5&y^aBA%wwGuj7!~;EX$i@}G{0&;Qo+l>oO?^gYo3+B<qYcPY>bDz#I-
z)F&zaRZEO2AnsFhgU+*JsFG|1o#;Ty(V2+wFMg~(i%dQSzN!q(@^f?KTV!OSO1+}o
z>#+r@<!B5BB_6$A=_}lpQD-3NX2&kkvc9Wt!>*jgu841*Te!Dj;occo2y5i}7FAW*
z*Y(?Q)2dqr&(CH|kH6e$%zSv|#JFcC!Q#`S#BbtLI^>#RBdnTO9ooXZGDj2Nw)0mf
zUHhtgc8+vMt9VuI7up+g-df<SMFXP^0rVtGqEe>}ohYC>O!5hIV<MQBTH?UQV6)s&
zW?UYkJ5fFiEC6RP#?=yvahaomHCPI9CMm`7ps(M2-PzR#Zo6S+>5UB|c0;$f*S_=h
z{8`tR!+_3Hujk=mBY#a#2mbT%yN=pm?)A6sykW)S)h4y~^^3FjH_JJ;tV^FU@Y<st
zS9S@nyy?M_;&<^0+jUs&n`yP5XpMLuvyVx@S#zL9hFK4sGlOxXoEVfDbP}NibP8pD
zx-w3)1!0ZL!=g@^nb=2Vg4l4iRc4#LHB42Ut96!tmYzYi&+c8fR-ZEdRr=Wc>&D2~
z#3`zO^61Iu$6qsXBxE%mH-(4T$NoY;p0v69o1d|{%X@e4zvJ5e14qNe!TQ=K4{j^1
z%uZf1qEBvPy8Y(dkxe2h2_;G5KRjByAM4%W$q)e);s6&B*I7xUJaok@=^tW%rW36$
zWLekEJ&vR8HpNPKDL9ojX}MRQMGP>wJkm_@zaa(>Wkg+pw&ot3!{xc=9KQRNoWm)p
zna?(K-8_%>8(%srziBmHxTA8#A~}19B_#RPi*wZMt?4p7J;Af0`^xKY^*%lRjqbgA
z+&*|4p~NMQvpeP7Ws#=XH@qOm0%j+$Z+W@@)VH|czBSF4Z<3kfiB^4c2G7~Qcg>ox
zd8cv09)IE5(UV7}q(7S(Gj%-tZgvbF-G1$Wfuku-)%io)N|$G)tQ<eC@z7Xj+=PNL
z1Iol=f5((v7S(=XOp<G_A?nsT!YN@XfTb9s!zfYeaFl4YTot4xR=@-X>pu0w?95EJ
zSuIHBh<w7e4l65B*X{zl4tI&1H~%VZxMfupml1pzi5pCK_{dgg%pK<0Lyy}uS*J?O
z74jHQgKpHN+`TSpYbjpYIlRK!T-XEWOx$ek7kV-BLeSg8P%$SgS@oiR`+Wjx*nH)t
z26_^g>GJoaK6AL<ZlSB)g2@o;@#kB!+-YT1oK-<tpQ-bBSlGy4)Smyq!N+ZEH+qEP
z#e3nkAI&&~_i@>Yll$5&Y9C&)@aWKA#9w9?@ct#|;k2BGCWwA;M439KHcpZOcpgxu
zHzHJHicSxN1D<6%1KqkVFs2R0V6qE?$#Poc>hUKQ18(<KC&l5elm4P-@TZ!YEplc?
zv^;}*hWPe5*(Yy_l>iG|B7)~;=}BvDAQvwbc$bj#^Q4@gT)a#8+0mS2W505+U+jwg
zimcx+m+V&{VOqaifrFW<UC|x5!@)OJm!{6g)9iFQPSSDNArVvOE{7#R>&#Qxf5t62
z;+v)G@QUH%-0#q;Ne1d?M*#%~aGDN`V;3l++y~SqKA^aN<Ia?Sv>0>O=6IKIm~|qI
zEI({7uuG54jRG#depb|qGf)CB`*@cQoi`0R`r?a6<(!0s4EdEsR}by?)@MpPQim`Y
z-8gTx+arFHC9f`s-(bhh1+&_Qn|TVv;j`y>Kazn=Mt_^#^h%A6yGo;7{_t-ghlSfz
zpwaAs@Cg3g{?Fv8_wF?t@*C$b?y`2>)~#duF$z6?r3qcGE8M*gT7R1RF|_fd-j<a5
z`HtM(|Ao@Qam^D#E7e_D`T_HiH;oZ}RAm4xwFC?hu1$f_Ng4nc18rutUP>*nxk+4h
zNW+)8QOr`IAAD6)$MEg*GNJyOT(hgU;@(qqCf%dF8#IUyBkxtA+^bkMJ7tzwFzuR4
zIVqBgF^Gt(x0e`3WZmXsjkP$BKR;Esp>F@7Zk9h`|2-IapETRyW4XrWfg>&v_`7$@
zW*(9W&~@~WgWktvD;G^qZkrZa(Qj#+$1lhx(jF*l1xhRPC9V4ZrjBIHztoY;kV>-u
zSVuA~W9o+0i*AC303Skg4Ng6I%kc;AIriwI4?lYG_^zi;Q7%q>EQELhZm+m6x9L3-
zpL*-vWBQa0n`U3P;?Cu(7H-`&SAYJEPgD)>yXhMK0rOxDZ+r~h;O4hUX+iNn)$zvH
z?Wb$B_k6G0Z@%s*nKbENU$<D4^B6+#&bSy8)SU>crJ$2ej9~qGAKhpK2>{P97;n~g
zAIoZBrJhIZB(gXRg#n8ZT^SEiYUtv0M1YSSJ9u`}{Azw=!W-Rs_S`xIxhIX;M}Qh7
zcEn}k>pGgX=<$_xe4ByeN@vScUK@Mu8(n*K-#YXpw%sFMgzn_ez-M-}J~K1$%I>Cr
z&~N;k-Fo%dI^=%Y&s_PL{q%SoAN9C9Oo1hYoP%OwqDlR&NPr}BY_Nay89fhQgO5oT
zmhA=u%Ap$;gDaNOh#Kca(J;m(B>2a)4f}}RX?_+ymam%<j<1^ny>YK8jy7M{5y1RF
z^OY3)Mi;BTIq}^i!Z}mV!gr6SjygTm{?=D0sMqJi)&sSEv2#2{?l++%y*O3fCMckz
zpqc0;<roC2&6{;ll++bZ5woks0=T&vHnH8R+#y^q)~fmiVl2-<-Z<*k5nT^c^a3kE
zZ3o6os$#gW;Gsk}`u?DrjNAGU-v=R@k7wYAErd1rB|lKimS1Dxt{sf4Prb9Ih5%Vj
z<7lQF*Kn)eKHi22Zs`QNXQpGleSew`6A-Isj~+8;&ge0-S;Fwyvxm1EF=NIEoTtr%
zFb8=C=LsK^EP}<V4f$P~8i_4-G63*(!Eg8G>-a<UUq`ad*Wv5gXhKM0ah%2|z5%Dy
z_YU|+Ps<}Z=~Mf)F-~FOvq>T8EEm@h%*_lLOhZC-Fi7bjsvAzAh{OmX8VS+L00;{A
zpnzy-sJaryC?OL6UATYW9^E>1%)~$PHk^)>>=t!Ox4P;wI3Q?*f@PDmpx=W3&zTKz
ztmD2lz2;|T&hK^e{(WnDU!R#dujkr*-tc{E*6!Q4=H~ru)xh4p1`O)eYXCewuy@Y^
z1LdR3UFD;J_;2sdpij+^5`Oo0Y}vBoeU<%|9cf=w)c(jaw!HHG`<C^sJaVM6=DFUJ
zC-?5xtGv8dKmQ~8S+B{HdiU)$WlFEhZ*=B!J1e{HLbgFIdzk1XwK$nG!VorJf4_4&
z5IgVmKp_+Wsof&phU_ggOU#8;PFSVhr<81?5$b)iiai<y^*$8T8&UAT6Cp$=x|7K*
z4qPDNwx2_`czcTw>|wFQDVD$n*r?twm&|0NH4g&g9;5_v@`~iZ-GN=7>1#VBooQ3n
zU)n$ji9{Bj%!Lzf126@inUV#;NSs+3h<0&ATg$V+g<vOlHZqqT*#>=l>((QpHHYfs
zqC14^;cUwC#~vF?Z}9GeMUbf4b30wfVztN3wTf>Y1(up+smA>!1FT=bDtGB|DpAt<
z)qmv!XpovQv)kg;4|VTU*u(jdc6ecN_dD(s9Nw8!)-vCFk)<j9GQ|GMJ~l#4krW6C
z1!>Qrw$Kn;IRT9j7#jw*a4>Y6F(Lx=s7R^-Mg>Dd?WM$SkLj!y4;y6Z9LqOql$VQo
z3Z_`D33<eC(%MnqSkhJt40j=V8S;vjjbFi)piyE&e!)|;K@!c5Isj19ETmCBKe$id
zy-oY@)YI>Bdb)D_gn1g=BgSg56Hb)g-txeK9XrDAo3wM|&dtw#`SKC{`ng+IZI-`b
z+_SIb84Z;Cpo1im=44j!^hn^L;WlbOHuAa+W=0FcA(U_u%FzJ<!-5Tmff;7ib!}jX
z2}U#wI@ks#(liN3QuCzd&6?&n$!nOAj=EKeR#edeQ4z>)=8DK%2Ucu_lrtR#uKJ~I
z5f(}ZeSu}@zu4u&0qweN%a+@Av0cwU-?2qvr`V+A=`9y-IDA+;_Gk4|zl+HjA?1rx
zD!i!&7B4xJD=u&L&g#>_uC0!ayLBhMbu-Q*G3y4g=g|j4ELIBGj0T|FY?PXXcu{st
zmp$ZidP6a4uB6heKyOUlQmblyO-^ETrpMHlF!Vq-NTKY7`f5Syy6A5F%Wf9QlpnsW
z_3VO}R!iD{E<V{T|3K2`ZReN76wYb2`7nGfT<|p|+QH`?j$M&a;QnRlJvT)D0-mVI
zJyFgVjyP_(hY+rK$wOs-Qb-<YP1=+2;*j=j3!7x8g)p8Y*F>zD-VQb|pJN!jYZe6U
zwz!AVg_Pf3v3$q&Wfj{vUE8%&r*7R#I(CJK{cBh6+rQ@KeYXwh)ob8@o_z*<KEvC3
z22azc+<K(4Z{_`4ChM*HP3hIQ*W>{$YkpsL<jAsqmG|9OsrJe~lP33O7dv0xVD2xS
zq&9Ug+5RMwLu?OcrbbellcyQFY_lB2Ld@1%?V>7w&wR~Ql}YJ-{izq4O)Mz7w#lA#
zi|>5y=(zc5jU``4A5s=h`S-7eg@rv79u99m@XV1-xx2;v6U%Ph%wBHPr{9d}Vh0pI
zKZD>HW)Wh0P&-E$agbC}gk$JQONt5CDZw!SazKs0lxKhNNfgX9W%9ZktT}AL(rt6R
zFVlSQ#*@2upE|i~&#5CLhL(;PIe74hU#hCTU35!N<dlw>|0%c91zS#@+%kXbi4$9g
zO`SSy{^04;2SZ1h5&W88OKVzLki5&gD7)apVvlEc@G@1GB2JE7Y_tu>4ziht84g5k
z$iK2>9<xp~^Xj)3?9{KBcb8r@bF}xrn@4YgW&9f|4#GqbchUs07;f@@4o`{J@YEoG
z?fy}`AF>SO`zOY#_s=wq+ef{1JIo9?;C}0t0c-Zbuv23$i5H;r#TOyXONwskJLd6W
zVpFeM+R)^d>qZx~g`Qu04E@D3pXZCm3R}19z;Zja7GFby7VXjBnO^&=K1e%`zW#JV
zvf*hGPH&Pw7l5Js+7}u6rw<h;gkW9b2+9o`Xxsp*$+fF%42n%SOb!8tv@{)^5!}sm
zg4l0^aLwRlid7IOVfsHm-zA^_Kfg8BUJJ>Pe{%C>5)kuGvVSvV|Gw1DVgF`e|DGY7
zZc+U^<LlqY@@GMDT9YtJA>Y(=A`QT<bu6GE;f*0Qq!HLc4Ik>KM;!royP?_3iJgRT
zdsrFK2@lt0bHe3O79QdcfGScrDUDDX$?^oVmCD^M+@^-%|J(by<oo@9YZ?w?I)%}r
zh7TPypii%EUD~wD&B;hdl~7dBu<4LT^CA=Th&8@Oymr(-zR%Ux&<$#Qe>2CIJLFI4
zhh=yu1s!x64R+olM~-c}99y>>TirLdT_eEIxo+@s!tFY@V<td1s9uI0Vb~FkuyBpl
z?TAGw2p-t~KW~Pk`v0d<IHXAcr33r+?%uUi$F{BW8$%kTVZz$uh>mpo#&Vjp)w$+a
zPQ$T$frR<SvZc>fQP1;eae|D{a&Wt-W{U(AG(x3RKpKoWkXeKqSnLu7fDm4<!tsH8
zxy7Esk@_E>?UK*_AKw=H8md-dV@Hh3?#c6G5_n7PdlEz3a&Jp==>+#qP8_D1fG@5l
zV=LKC-0HJ@ffe`~Y|vSJ_~s??<zJV^9B9d6zdgET)xnG-m1|b-)4nej<>K|%e-#%Y
z{>3jLu1yQ=Ki{^v+~(8!mv<g@@y?YOP3}-_W9<cX&($9cp^$?L&Z_!_Dhc+2JRUk!
zS81DNDX_odwJ-3?)T8eze&$E8W~Y2zsE)6LI5*OF3IR+6xB+Z|_cWzvBk#SuosRSF
z;Ry#Ly&Ea*LOXc}Y4?b;o9RXR;%zdVrg?ked+wlX*n2E+2T;cyd#~m+>rB`9^nKeC
z!Vmk}t8+lNq5yTvP(RB}bE0)8Y`o}wXX_uQpa%>tE#;&B8bBqAi4cY{FXJ@t=et9O
zJlZVRlN?Eze2==NlhtrruqrJ^)fOtuqB!Pm1sF42N`9}<IQ@U9dkTQ4vaa8~FA$U*
z0cj8k5pxKOP76f&1O!P76_GH3!2+ZV3`9&21;qSpvBALBRqWoi)?Qr&=JMbB<_+QE
z{#`>o-n=>I+;h&Yb5GP=+ValV?_Kfb@82$Me(&e|VatWO@9_&#Gk?+3znLkS&z@VD
zlzmfQ?`BrYLQww%U8`NYwifh!;`$i$zFoNH4!ZovwfrK`o?;b^Wwdqc74&+tRSbH4
zsf@3gz6A||60SR?kK3w7WW)ZDN47=GfTlVKt|&0HF;r1;)fnKhuc)(!m5#_-Cm=Ye
z$rpyz-+r{c(lVBdiL850L24dQV|p{hvsH}sPHe8z0b26amF%>%wOTBKajrcDa>Vx2
zcd~mXyLdQ{8|CWioZL&PSF*FK>!@+g9xll}JIdY(a&~EcC)&Xsze7)Q_W_;ySnCY)
z*x@lu$GT4^;Nvdk@Ac?3%yTEXXQK^#JY;fTPL<F%nJ1J8^FpH?k-HeXypimG7NpX(
zJ#lH!rj^g32RUG;^lN&+xD!Ax2L(a6EReppxnc9Cf&1}qzzvj*Co3sP-)6jsO@drg
z6DUI}fI8qz^;-iJKxSjTbPnc;a(hJ%b|p59B@{*fCVQS-<L8aB?w@b*{4D-?7UJh+
zxz_04v7WM&D!Jc|rXZmi08?NBNP0b9Z>v{=JQTkYO@+TVQaF>_cR;CgB3xF>LfRG9
zLdwPlQ3!~|G9I`#LJ&fIrW7#`+R?zWr3o)2Xhdw!o|UQNuVdTa@=-G>VmG8HW-Hbo
z6O!$XY$=og1)H4sNlcpDvajXVPJskf`SF=9S_OERi15qIl$g#%WCLN>Y6J0u7k~G%
zTSr|Njxw>G<uqdgjOP9KL&$HsG;jL;bH)Z6H4P_Dncfi2yJV>}e3JboKF}1!)L~jX
zQ!dVq5RlB<#K#y=?P#*?=Cd^kiMh382aSHLEWw^o<$`31B*Ct-<ZS|dV$G&X4^6a-
z$sPE<xc?l-tfcySLfz7(Z?29ijSZ5WU)89nC#U-4$%)JJIe*{Sux=ai+S8(zp!jy3
z*&UR!tjZMSLU~ccsFBndDuNnEMN=_U95tPiQ1hvDDvMf7<x#6h#)Os2mo3T7&df+#
zFfTQEMnZh-)X9@3jE{;83mxt6=ZizmT^$DYw>3A?QBj0iSW#N-jaXT-DLdIFRo$Xv
zi+z+PEBnt>fs+jirT}kZao@o06_cXZ*z{pW24rl?5i(lY0+MrA_-T2K_rbC!SYf+J
zxMtSknvR(_e*E0I6UWU3#v##my)3O`$5n0^?BqIlu(R_J`mnuaA3J}@MF;y$3i)0Y
zSH)VMjr|q_Y^&Jcfn99FUACv#wvPn(04-@S(3FONj!>!jx^j#|zk&V7G<=NXUkaUL
z`4@B#Pf7}(7CC!%<Za)f-94369W90ok>0!Q;p5{m&E416z0lgOdk=1yUx+W5Q|}7~
z)WpTrplZ$t7$laJC8B3#4f|mabIWdJ^x#DP^}VkQ1ruy+VQIOlK~mSC`CTIWL$Q>p
z^rpi4c99fK8S;7jt%&WstA!c1pmbm$#aeb#q*-jSw-cNXw6(=ez6TsOn3!scX{>qt
z&m;PHgG+-uqpEA^9a^@0(N>y11qO7p8z8pw9Z*wKGlXFv!*C-SdN=f@uY9z1(6w0L
zGdF+!d`@iRWZP$$zWwOH;Bx6uMk$vO>LD;2nOw@4>Waq|3ln92T#-8m7(lGsGS`4M
z<EG(~OHZQ0Ck98M*B!8v2f8bdoNhO3THH+Zjmh0x6eO`QTpB&YKwY98X_Gj5EIPvX
z1Dt4C`g>?#NVIIt;z?1ACZ<D$(!g}6t15GlACu*^P>HdPR<{83h|{O}0Hk9qbiP>4
zp#pGRmYp&?3BHx~0aXz7rvRmnqQF_ojUV4x-u|bh)yhSU^nkC?6Vu1Jhg+B!+IM!a
z^Bmx2vt(%0R2@-Ld(~c6y#soXGZu`%jGEG74MCDKnN?Tg`!^^^&1LSw>)drpl`_S2
zo9fUMY%)zWxfhBEV!j8;Y+>XctbyFd%tf0N;0m`vUY;w$y!$10HR%x$>fJrV%D6X+
za~dTk26Hwpu42%B$fO}QT{H*94iTI2I3L6F3Jk_+jB(-`lswK>{no<54EJvfTRU@8
zdzmm5U@v!1Z;z!=VM9jxIu4?8;60FK{X7*G7mRcQ?5;k}&V9I`xVRurLqcooa{78B
zeOztr709s+!TAV2;<7Q$ju@v%t<82?khEm57IK@jayKi$e2<~to*`@ChDq!$E+{@e
zh!Z<GiSMx|FubYEb9yLu3$JeVF+6<@1wi28<ahYnOl;o<!|0)~th%Zc0;{a!5w13I
z=0-NYVQyWM%?<6C*W9{w+`AW!VP3s-MGj*<y6X{|V=#`d+%=4&6VWL}8O^3-ro`VC
z!T{LBAE#>c8J1O5m&1PmH~S%uoFr>#U%<XWjojhG+`=?Q*SNEBXy9N6X9Wkslg0q%
z8tu!aVfY;|{Pv11+W^EY?y$5kJiB%483>Hmqm1Pjt~0fSPyhk|2~C;BJZIv#)lHul
z=JX~Av?(Z94@?M%vye8wad9~zhKH~NHOTr+5L1FxbN1iM1w*qJ!|#wiSh)5e2UiA$
zg#?AIzXI=Jxg_M}C2%eyMz}C%Ijrv+nH(^O)23Lg?+n2Djx#aRnx-3PM`%{F#($#5
zEE!%k++Q~{xy08L<JC~(AjaFAg%~f_g$%@Meqh}pu+|UFp4<yDy{4d9AOobI<RmH#
zsBct}NHmg@H6&mQ_>AGw{CH%C;fnZZ2c-jD3^hBpr)bN+tu<(Yiwz318T7sRHY{L5
z;)7~wHa`+6$HY#W&>nsMWkyoc{Bun1h7BVZnCPquFWM>$Ldj@JXrTXCIu{0w9OX&Y
zInx^7Gv>@X%7E-)Xdve&pH8j~QzK&pnQv$AqGv$=-i1FHcr0y3dPPP0jD;YDJ9+{1
z0ZOJo12|kb!p)xZ?rfLizs^bKdC0eQG#T@F{Zvzx?bC#;Z$cBb)#c_mIN=5`Mvreu
z50Z90mh9RkVRF&uYuB%%FS4c-G;BVceIt_`f)UvCM-00oZbJu--}|VO{geP!NJ~J6
zAxp4Ft+b&BhDrCtjtV~DHq=1rW$3sJCazzF4hrx-V|eOh@4x^e>(<!~G);^!h+i;>
zq2Mku$76IefWkGXge-Ri-VVXMHO6ohA&}eLa0}aDEgtr5O_(7)KJ9&h9s{jAFAxV0
zugzGnbyr?=rV)~YGwWPpK%YND{s6Y;*Ky;fKHoNG$1^Lvx;2!*1J<0$<>jc3b@}fr
zmKkB+9cb57u}oS+rWr<sxa#DAsl4w|DIcTjhjz+lFaZbbigA$rqe2soCXh-P)>j^i
z@M$_wI1k2r&=KS#Vr2W|)-?qQdl{YLr@Kx+<zVHE$$>M9p%SB_FP&C?eor|!Zrtoh
zxRj4$HpF@~5yRs5b<H#g*^_?^XE%hPz#r&@fejPUJ`g(_xsE|kqY9*rLSr|8Y09ao
zdT280uPc!#gJ`rxPPm{4)qKAf=2dZXm^0BYBO$IiU9FUtKWX?DtWCmaITJx1ME3t$
zc{^hcM1F0vyd6zv$r%clz=oT&1C)lzmlaL2cg480F)o^)w|`>FW?hS`q<fl7);=65
zjhKs}tI)wv>LLf)Py*pG!8RR&WfzNeSeeqp{Z?B|k+)5&QB8VGX<D=%A!5;^moL#n
zVEpnWFs<I1pI@;fKYu&y)<~f$;LvD?NU=`@svbV9vOn|i;TcN6(~U{NctpG%$3RP!
z<>z^*z$%bl^K)$T69Byoz0kMQYYS;9LSD-xml>{Y%*0Oc7+$4aC^cdeA-to1h!G!s
zy;Vf`b=u{J5O7|{c|NIQ`YkXVeSVK^Lw5MB4{V70sccYhj>n*fCKo@t@W<tAzmwvb
zGbNJvJ-075-noF@ao}k2j0H<UFRwt${wr54-*LE<3rQF=c#vPW{%e=5DJ?(9O&J?1
z?EgXpJypPM_-mQIkWy7dr2Y*@b>xyVeKIv4E%RsU*!Z6Hz@OJ8_5r#6G<Qt$4~ZZl
z|A?VcaoM8GQc|`Zy?Xc%y(}&!8YEqtl#`td$Lgn&>(lq|pC;F`d=|`oVJz){`68rs
z6}qb|o9c-e&|aI<2JK@&#WXbW5SkbZDi{@!w8x0y@E1{Ps#*i2ky@%eKL&;2>5%@<
z^6*5O_98L)CBURjX#s9pK6r580a%#^wgn-y{|WbOACd+U*xFKcnxz*sB+)E<tDTyv
zT;E6sG?Xzw?%QXK=^lge=#ept<>vq(BU&VCIn>ZJ{$nfw-O>FNP(0*t<seWZK@Whn
z1ceT&t{RMjC7R$6sL;YV&^=&=hZ`;AkGwP`k`AC3y4s;R?+3F=K8FeI5)cW3<eO9z
z^!#}s*q4b)dHcZjOt7C(Av4(?)zs9E(v6K2KWr<)fR3agytfK{8^cv5wnm1`L4u``
z4`k8=j^HVt5@*7BC=h$T4PT9iuNkxi>qWe*U(RZLPuKmW{|lKLdF7V(NI_%hx<Aj?
zeEV8+{(E(1Vq!*SV!|R&SpDKfH3&HU^5toev}#onDox4HPm$9H$7A@sT}H-dbp=~9
z(&pgeogh&*x4OfPCiPNz>|YRWQv$P&p9557<1(;oqjaqTZ&e)+R*m-v2^be&3Ax8d
zcAlTU{u>Pf)Jj)_Rgv)y{&5K-xuxe1mc|rp{LbOl6Zp8z#TdR7hHt^^>`&|9;)~XJ
z>80WS2%q@jMCm6M9-bXOMG`x;v~*(R)M)>NBanMqdi){n=eN+@G%IS;eq0WB*wmO2
zkzuRC{D)2q_u_JPRFE<07gPWes1=l|d^|V%G2kenMRd`M*0Dqa{acxblnMU4ks_g=
zCQiIU1Ds$J{UqQ{gn6U@W|^49_uY5#`n^5xS#UHdYDWCDu@j=Sw|YWltx_}k6{^uO
zgLKWIJ=Zs_<5WgYNS-=5rJt=bT<P~krYAEo&RWbfUCILMiHV*_*jqQ5yM$f7pg3Jb
z7`LXJ5a{E&+|9Uu{NP!Iy_W<YKKJ3+kw1ZYQQ&O-v<cC3<C%5(+ABI~6{k$H>3`;*
z+irfV0`{lBNq0Nh^+?&89yxI)@dv;<LDmH-xXsG^8iRxCnx;4k$DY@8dg9T|)h`w!
zFRbMz^dB$KarE}kA<zM=Drl-z8i?C)4!1!Y?{9nJ^|-aUv2Mq9bZhzB3Z9z0uw|m>
zo6+jJWL&`b*<TNxYD}6GJn_}uZO@9bBchirn;em8I&;LBq?9ourqdw-3(YK+h8FGL
zUlh8`+-zY$L20RUlz(ije?UwO96LBN)Mr>!6ydEGrfWk>-V$508BqjIMv+h`jS+N2
zL{^h>a=?Qr%eqUvPe1r@^w6h9>XiEmH=}{mLjsa@(xS%Cou08`YGNPpm7QCjd_RrK
z_Wh>YX{D|vC?0HQpS(3MWPCc&r!f30hqk6z`8vpioJ5;}oE@p4J6w{kjh~6bgx1j3
z{2ZdjKV$OKP6=zIyFd?*ZhiZ^4cY{`(%g*IL5T$rM9&A@fFa%bIO5HDRL<PQ;nSis
zI1D?w@e6#8VUzx-qYNznJ%y@4shhL6M_<n($d#ooEA?{p8nQPpbw3A+am2|;??Gvx
zwx5l4zh0JH=**c@?SpkYg}KKjC&qF;`VHvi)K^0IAAps^k~X1~czZNSv<EF)IYx<z
zV^q0BQjWsffs!34>NBSdbmy;LJsz4$zXLm<#rMlN+>S38juFvOe(fqEM);rh&1E)_
zMJsd+e61F)+OQ=P6J0dI-Dl`9Hy1ZmFdCdqJEX1y;Ig@MmQJ0-DfP1RaCP<TY$zYM
zztA*o{cr1!Sc6*iNAS>gN;gA`5#o`Px{PyLxMJVZ+(VaAokyw!xO<HpOk0c8Qq@#L
zeOx=6=ggVDygcJpMj0AqZLZ`KF?gVpCne|%tiWyUAfI;tCri?-L5>?>MS5&SVIYct
z!{GY$7xt&7?gLu>3veHthUr$It^f0V5WXMeG$`OuPTq;YVYmXoqWKlegPlDi!o6LB
zbcfhE3?DJjb_g6kAXra7%4u41@-(Nh`ntgbq7xEOPqCY;jg5l?Sl->%rbmx{{RlrN
zVA;LFbp3rF#N@Tv2lKtdjQo2nE7`Xs^T4S*acm!hZvI{ad{qLl#D>oFck?zeS(+4I
zSdsoFWu1mvs=5l$?rEw!G-{;1%kXA-8esfw&BFrn)+=M$;PC3zM-Jz&uB;gC;}aO<
zJ1hw3En2@J<4yX;jp<<Ms8K_I_Zc<Hhnx?=MRdo%oE>%~VXVU0Ax*7e9N-jg8pYt1
zvOboJj!0R7=4}<k4yM3UAoRZ$Dhw))!P_$zjQ92$JJxH^xBzjN&b@ng?jq)<al3DO
zhlP22hlF^W_U_fiOe~hQGn$Eo7uZ_i>_<hB0i>NGu_kS5*5v37vf{2jAA=r+1`e~b
z*u%^RZkp)i$We=X4(J)}>C3~(#^=H#*y^_SE$Xt&&g!k#EzAfcef$X31DYh7KeIe1
zJ8wmH&NA2yy+XCX3TS~Kpb4zeP4wF8=<ySk=pRQ<o;W7YAqmMjaLY9eD_g^yE=IS&
zd%TEAF<?e9i|y)O8>Gnd*I|F=>YtC7lrXFTZS1MsFdRIX8=M-QzvL*%@$p;LtK3vH
z55md}sIjCpFlJ?84p#}NUw6-ZpNYa)3_k(4-xR|qW2UYOzyEA|&}<_*9IUQbJR^NU
zLN-QLckV`ge0*jcdVk|As%PoS+@$n^MR^spc>au(`5Du=k{7jSNB^^Dw}bI#pVuDb
z5*95=%a|+E867m3(PDh~{Kmtu&J1$xE4I=mI%BHU!bO-UEKd&8vTHYIK+-k=^5+B!
zTRXflTKW2hpDVi#HPzO2AF%CQExP&f{`UwUeSH_(k-;C2TMp|25~OLJEHru!$Vx9b
z8Zis)Nt-w>Ep5Vtg>;EkxQ$l+RV5{nxU;o+-f~Ipro_<;EVTw&ctx4_UK6CX_CkBb
z`VWxN9^Ky~WTv~9JKXA*ob0FNKWmmh1^F8MI5zsPa|7>iE;!B7tIwaWmd3;R*Q9g7
z5l#eNuR*)O@L2j|Lw|S#^u+Qi!SXW3a9Ym|{JKp;mJwADk$iHf^oMt(mwNVy8+`u7
zn<t09vT#pkOiETxQsP7%xQsU1i6(UJ4k7yb<R1E3Q^n0(u&W?vuctSrIS=D<XRH5y
zZXj5N&eD3VwtL9(o?UxS_FjA3d2`t5mw#Tmg<b;tl5va8%ID5bU&>Z@*3H*3synY`
z?}R>Gd5WF^JD>}+Kqn9)jrH@GasKY5)k_caes7qLFsvUMylr1!lkcNut-`0VK~^M)
z+g@<qpi}J*Ejsh~(fPCkcE*)c5-Oz&GjifnJL{y!=Pr6SJ5?SPoihEQ^r`eY_+#^h
zU-p=kK6=mF3P)nU(R~=_zjdEZ*v_xI;fJWK>T^%_9(}~Z%9)YT<40#*I`^vb$~z8L
zvU!owGl7wdzfrdpl7)v)WpiF}Aui5?4XpE1m+rZq!$n8@gMxhB76ZPnY<F`0WZH??
zI83l>O4Ae~{-KAeV?uD~K54v+ELu-d3HI9-QM$Xn_QI^mkts)@!l$DLp945tdNQ)e
z^!lvDLDrt8gCe%CF5EdeEH=`On^9G{Q~IZ-WykiCrJ=6Xv;4gMh1j(Q#)r30sVD%;
zHVV?VG*H4}Eo;#p`^dmOIg<<17PhKDi&M@=Wj`vi+VY^ej&3Pi&Fi#YNB%s?qB$zB
zsR(0dA!d)!W=hxhvtAIq|87-D$m*{BvK$+>d_y(B6;Ks`bES{Hv-gtc)pzXCh%Wlg
z1!I7UEbach;Y~O%Vw@&THrG~Bfg(ad^Qg~T#h8mWsPQ7IM-{*uFl7zCV10k91tABY
zJ>QkQzVkcq&y&N`fe%mw*7(O~as+x_XV#<c1iF5z-qi}2DlOypu^8`MjJLI3@i`9q
zP_6Z<^@vL!UU~clk^=3A?|~jxt+MsY*Oedt?E`xJ@-EtqZ(Lrzayy6}o6*DmR#EwL
zRJWa*yFP7lSZc3+4>#|+_4^qvCr`)+Me26YZOnNl!ki~mhiT%!ElZ<)=vyN?37i^1
zJ20gB_Wtb`FK$0j3rC?Ze6bi(pj-(=q7CQ^JO`*o>Kv-CX`~u2$a%dV<7;ttz_plQ
z@w%Xuw3)q7gkHZT61D&HBhV1Rqn$RbClwSnZ0rQCb2reZW^tm%N8F}zxwOkRx0J2%
zkFq7`7>w@kMC(xh1$5AbmAXZnwp?mcvLDWJ3)eTvwTmJzSG=62udusXtYaahalpKW
zhKMYZu6!;xQ>#|Bcyv;#M(<`dQ8m&-rR&y#Kxhb{uy#tubO*52KVQ=lefYPmX_=ns
z@e9_WclRElj|B_k=YP9!9<42(w_tNo#=?@WdDG%^auec~FgEeqthygbs=0ZyCi#eU
z*NXTP*RD0JnORscJ2`hTZ7^kVW?XD~x=d#xFl}m>wzk)`kT<&W9Byk}3ze7d=)Gd}
zjc=e`<#V8bp8h&?gOkC))VP>D<K?+At8>%t*1CHS2JEl*KqvGJy+I}T_f-SKd?Oto
z4ILyoUUf2m6`2bfzu|e*gtrswVmdl$C^etWw|yEPQ}g<D4f>3iRz*ccXMpnbS+k}i
zd}?#Gq~r?v+H~x`TQWLieq$p(f7}eQ9ElGSxu!Xa__gupe!P#8@PZsg^FB^%pe|eh
z_mbzyHO=Aq{cqzNF)y(hfpy|zGmJ<+12w==iU6?CRh17$fG!GvW&mVKj3dWUBiqSh
z%t>V&Sx_8bD_l>jBd*V-%qL1x2kMGViIPkNUmVN_axmXV!<HmX!dLJtFaW`Xx6<{+
zXU-JE(64nhuU^&EePwa!JoNf3dWDK5`aoI;o?+|$3q%8@tLHBRC1mjbmu{Keo7MPl
zsHshM_CLwn7gBujBKGtD@S&}W+Aj;kv15PX?Y1jw1578ykep@O#7|2_SxJ#$Xy7W(
zP{{$v0-AxOej5OaeoFGn#>$L5KP9HMWqwK%^;SMwvIy))*wlaYx8De9w{D?IA%7;C
zS}5JaQ{+<!@?^O)8&TsMxQlh7j7Y{IHNY~!wLMUxlqM+v$jL})2Z*98%Co%5i+E8K
zWkh67BCbsdMI8u5gl}yH0m*!z!0t<zE?;gD^z-f=4*PM!5kC70(eb7jAK+5BFAuP!
z586`{TdH6}{Fd$ig}t``kn1?sg{%5>_kp3E*_maY1xYJL3v7>8GD)^2S(5G5%CVB0
z*y~lIfWl0V!kk!=Z8=~oaDx|u&c!&%Wxmc0yj+HW!}iP7?%#F#oIYoI&#Yv>!2kd6
z1&n8^>Z_*e>H=WnPzOL4rtnrgN}24WL5WfCVCl|*1UUx+I0zor!$cl75jMpcE2Kd6
zABy2m=nq)*PqHq&*`_aDMcM`TanRpp(LaSpabMU6x2xtz&v0Q=;7L#E{(>+n70t)5
zr}-ST_?*RdJO(#44%N{222r{L2-0xlQ_Ik67&abIRvZPNOYr4P7TfVrRg*+B4isa<
zH*fKsg&*Kin&D~vMSQ|q>{9WX&f?J5OH;{kNMU=u#p7<g7e5G}YUENp_I}h?QRk~;
zRs_V8egegH!>IX=U1^rRI<kGG{VP%kcy6X5dLJVbid-+Kgu2msCbqN9*zhm#W4IO$
zHuf)`e;&<0pZj{ma^U3>&b|)^159yUyPDD~>hYw^>oL1({tEt4@%zN{D&jdtJmGox
z{e?$pt_&d{)%064!d$9i0q7t&vr*XvV4laQMMcz?kP5cx;tQr=TesXjJUqO1cx}0R
ztWKLlFrxVa@Q=D9hVO)4%kU$-1)k8D5y*g{D;RYdcIeCj-}C3d18*+w`yjax@|dou
zkS-esLcM(i7<PX^?C$EQVHK-70lFhcNf3trpvC_rei)})@b`Sh+6Vt<$$z`W{}g;5
z_rvXtC(~Zw1+f%PB1PZ@b3R_Q8gj81Ds{8Fvm+%)emFG_1xt=u_#bK<p47NCLk~@C
zbLa=?f$vSX5Fj55(AV43-PPHoi$bJ}Hmb7d4v`FPB*Ubh3k#pc8Olx0Qz09{kq$;G
zROZY912(65MBS!q6+S?CD3+3)bo+_cl?knr@NB$kF)ijOG7dN`Xbl6f|LSffTEhvg
zQwyKM>nW4Dy{+Ido}$R8$_t-!&=yaXl&y$CqPg&|0PJ0Ej%Y$cb9Q0B!n&%lqDejx
znpr?*RzgfEPDx0K{P8>z54nfT_^plh`T{<Y>g9H$E9=O`2r{m0XKL`|Q^lh^Fg~>s
zWdkHoR&1E&##}z*IgIjbq7vqaE0#@+4Jl&|yRcI|JNo^aukM?x&*FW=cU^QAZ^ffw
z7dFAg9B|}w%~g7$&bgI#YWqnb5?TWmt&{kDyg8)Bg(4$RTs*C97Ohjb8TY})#=81Y
zzr!VMpj^%gY%O4=N>tt9Nkj9XMe{6t8;^zE6VR0t$i+CK+9KClN=2pAOcujq!(+t5
z8%cQNEgrM*M|hOF)Ve4nauj?zlNRmi39TK9)|d6z>>yfOqOm!GN2xz+PdC-Qa+n8*
zQ^`O{Cu~Ro0PK)Xi9{S$LyvvfJ2p1%s*yLe2Q1nrSv%gmh_)HH$3%OZMf()qg!@R(
zdhAjhSb7-U3>K;og-X<qn0Wn(Zt@n7S@;efrOrJ~@+V67GKi0=%f-;3!Ql5B8|dnk
z4Y@s<%U@UeS>ITrx@DBq8utWO6bpJo<Bl2t;ByR9TZYQN?Vv4#Xoh}5@in43OEh;y
zXXV?W3vOu~=|aYraVFh50+k%{eC~UE77$#CuBqV|R-Ez=0No;TNcXltFx{kK3~}Rz
zb!#V=kF6PBgQE&sdwp~~PwW%^U$OX~#Ot97#~QcT{1tO0LTDo}2NO9wPoXoyT&xI&
z|Bo&Hr{FD+gF70xZQiif@q#8PDBs@;c;ID-5d_7Q82M0)TuKaT<i38LB}k!37qZkO
zi-fb+^udc7&tHqVU>kb=R^(ojJaTFm28~6c_<nFu%j0>ugOJOm6;uc%%cmsUsXFA6
zaF%Sv=5hL>CEM)sF6wk|kCG)zfS%_c$f55qEyEV&ZrPwpLM$nRyv7=<yWwx(b{eZz
zQUu`hz@IUiiBeiSmXzhn-Hpq(U2*|^$Xl9a!M}iiS@<?QzwsO;OD-*oHt+&}4p`2~
zF{-beqx#ALP*=oQwxf{GhiS}_Sfx;`VoI#N*Icpd@=LdF$(YY=;e0-#dhUORUr%x!
zA-S%IZ0-#UKY=GVREtn9Bm%A;W^P!vRG`om`vk&mK7!}L6F`Wl@Fk6$-j&iu_s|eS
z>bFVNEOaq{+H`P`4d!}68I-^OAH~;<3|FQ0ltYaJ)gp6P4Z)#3)<st;{sNdI!aEJs
z4B<Rg$BtY;1i!nBg_~}FU)NCgP=&e)x!B1%gA~uNSUmMUV)0ZArE7SSo9Tax=Z{l7
z&E7$K=fvo+BR#{}nQ~Ej=*bjo&nxZ<EY^O)dik>PvHFP3Tqzj<4F4~t`Rg@Fx2rVb
zh#h&N+yg$6l5-Z<AmK_iO6UNx`Q~H3T>$JU;;Y2Bi}=1K<U93yon%b}KFtLg*}#fD
z%<B5E03~Avx04yHF#xa^iH8gZP3z=~+ihA7BXU&ZuqCbK0PGFoM?`CRLhICT2V|X<
zi#dmJLy;VIi~}d}I4?Gltkl{o(fPRWFaSF%9yB&J(IlJtX6PiFIwc`T#;ER?1(s~;
z_Qa;99*_^qlCcr?NA})lppUAU52EKTM<JIXD7p@)n+-KJAp<1G95J;X-3CbM9@LqZ
zLWEmcUXLLnK-}1gOu#z%94UQW&lNtBT9XH&HF-aD5f0!&F{HW+A|eJ<Q6V-6YnV2L
z!O;7PMeigYgDTM@VqAo}eJu2TY|%Rf?}Z#}X>5#bYk^#XBtfMtwjgZGYeQF-(sb!e
zo#~@`iivd%v2`tkJg8}N9%?yT{IrFglK+bqpV{qQu(~lRP5HQNYL<<?R?)gsudlU4
z>!xU|J^`I%2Y1)1?Y@UDwYULB%UhxpNGj0|8C|9S5J!F8Ait^6ho=3IMf)T^71}dt
zOF@Pz&5Mhr{UeL^DflP^<n^U76mByIXG)@Q(IxR|MrW|7REP(uCgJg5ng{9ms!pnX
zY)elXmj^s-R?I<7nUt=@kA0i<`MvxWt(!X0o{4nxWN0TJYG1EvT8h$P<$$5%BcMb2
zVM4OR5+ps*3JjNjScA1YR8zHMY|I@_^La4MhcH~;Np;0DxkS{{cx)yFN3-#peSVJR
z&pZJS<3Z9^hR+mSXz4L68;^5hH-Fx;2TzQbGHwkS*1EncENQaamY_D-6I^>OTxaka
zJPrFA*Y<TV&rP|y1D}yMGv$Al;AQ)rYqi>FjY^tms5zxcW9zvV)-x}=37*=xW6L@g
z_|^ph0`Pd?8MDs1CKYqc_luU%xppmqP8yn9&`X1n|9yVH_=)(ah5a7B0f4%AF4MSO
zWCJL15M8DI8dX(k?d0DTpC{d_{Qh{;7|-wLPvzIAaT70g4uJfK2K27AbqC~D^k5tM
zo>)BInWIb>ldu+Ew;zr--9IwNo9eGAKjKEqk9-opjVGvLLhMIovFlp6bG9?txRGO7
zYMf4>&};0Cr0l8hq|US}B0jf572etiV%wQTwSLxt(ynx!S#3ohi;U=S8%|7U4*`-o
zQ0tq2gR>X@(R8DODSZqNHJjRgPf9oYE!~{Lb@&wO)1__DSVN9^_7U>pR8*;I9r^Vp
z9sStS(J6Qj<jA)@ULR8YVohn2*YV_Hykz+%c>NS!GC;}ZZiX8uxC!223-4X{IeaFa
zG09x8;kh6M?QB^v%c+@QFg|EuybISrC*083m&}93gBTWyZZ(n&>myminBdxD;W~|*
z@z!`8U73udhZi^14=p{84_g>d!#NOev@uQN=*naq&9p@h9AP#As2J!Ysi;Ts&;>>@
z@+%L!n+(?Ri1&AJ5BZgc`g<Jez3M;^_SVRwlcNrh61C3{#GHp@MY(Zj`ZzYAt&Jgh
z<@$Qty4$+i%f5>xR`gT%C9zU=Y0Qf2mBbg{;{2%?qmF4S+DZ<x<wYiNaG>gNQA0*e
z;OG!3nh=Dj^P8h>h+a}_XaJe_4sN}7oPhs|he)RvdhY-q?AMOWS0C%8BR8DfML%!d
z1?fCi)ps-Qf@ZERb@k1<1=2z^Sg*CPo`G-R8F)tHY3d9P{KZd9g&ZR%h=n@<59qX9
z@|CAnLktgR<=XA(O5rai_@!&%S7$W&r<RQ{&rMy#$pk<$0V20U-e+Wdwzv}y50ftF
zopJTb70bs*ZH*LYekD4|TROQ5Uy4V6LF4~m6Mo`70G&Vc8DQ|vPxFt8k6L)|!D;Ye
zw(%6gyR60>R}7%%4x;bzR>+q?Y|MnRudvsL`+62*pMQ<>kNkQI`#tzSVH?aeZVs_;
z9IiRwtUw8q=t^$1kcr)xL}fSB!kSgf#+O_Nn=BoihM(Y`_^s9V7B7SV&6DrX=B-ta
z|HGCJPQyDv#J(t3CQHEff*sL2_~Z9QZBggfAE)9^mPdBTCfrB!Z~1uLaeeBqFn}zq
zXyv>9oQE#DbGmVwoQ+<#sB>EU3dMQ+3N^W+Qi+b~z?@<8dz~MoY>{g;Pxv*+(YS9|
zyGrqNQNs8b6S51rD5JyMQ1P2mtd;WVb%soFkW#x(I!WEyEFcYpCwDj7y=i0UR8Z`R
zdxCebh4&1O;AuG0xM{^G^Su<@T)=3+4OAao^xc^yA=m5m_4V~@SGSKwz$vW4;Fhk1
z`wZL*H&Hd}jjI*!7O;siD8?j@cVXPCR;}8xYR9%q+Q&6|Ekc4nXW_pKe;a4$u56&Q
zDTCPq7d>}+NzCPPgw;=DP3>#fM0^_1Nq4<Wn1bq%c?ZZbc0q)Sokr$I<9hy1{>S3?
zn{nY=@V)czq}zE4*Tgt;FE`*^aE~vEtUCfmHl`WFr#0ik_u_82k!;MhtC;7u8bg;<
z=}lh<nwhc$EqTx1YWAuX(Hea^UQc(&v5`SXdIQvQPe%!;*8OC?wNaz-rhqYWmm!b(
z771P0jl8DqwGHhR?Qgscfd5eM2bU4AJ(?H1759<njd%%{9x9EClVL!XZD`X<Br6X9
ziUcUyk+frz973UAGrXfNd>4Sd*S*1tc{sc947@e$ZHR(*B6B(rSStR3PYoe&00-)u
zGZS@~nn@xd$h|kNBOw%zpHP0GEH?RoiO2Jym+qfA#iOQpR1sL@4<-%+#KCdGaS2}q
zL$kceH%wd--|)h}0I*NG%))YF;X1qlmN&+&SQS_ly%9y107QEEE%88;%tY%j6p2>a
zvrcYnu)WsRc0-He(%EzL-DDt<>&(J^c#8Z;>Qv!QQ>cm*EP8onz?<}1C=~h%eX3z-
zt>V&q71{pmB~lXY@x*6;=EFC_w#Jr9UQtfD>|=sN-)ZvM=W@B8T#usL9?`vWem^@a
zK5E74+yh?)fUS+qL$SO*LPyx=&SB0}fjlKfS{k#s2kzMNM7J=lXn#WABc_S=-iWr+
zInB8dFPzveLKkxEMxj<ui6}>!PD@TZL^v<Hg?7Hw<dBIqI^YJD{CB}_Jo4D)0?|@+
z{Qp<13y5j0Wbe@O4h@!yd7|Y&M@~9Q<1Rz)5LpfmpOu1zgsIgU!+01+3d1Aq%fn&R
zI@!ywiFE?8POfG50#JPBK)+UshfqV>JzXSacu3lin5aXD@Xp#z9hOw9Fw%&*vu;;s
z&g<MY#A7?@WM#B}eI9pHEO~!Vr^98n-C-P^02w+ahQr}=aR+!;KhQ81H^@Sy3uAW|
zc3^F!okBTi{rsn@>G~4!L$iL~rQec1>W5zPj&{cpZ6!|;bi@0x;wUI+eHOx=p0@v&
zwyb&*S9SjV;`Wr?yec|lPR-v>`-uwTAZ57-W#rh~qx``PUD|_3hMBw^q$7`KZo%E{
z?Hy_lc84QAm!1C*f4A&1d+>D;pZ)V6pbmAt$QV!`H)MI_NWtuta#1l-yW^nE2mmy$
zm{}h&D_7i9%;7P&+hAH9#m1e)gJcin0>L>M!4A^P8!ZNNnFj`l>{vW|og1X)fT)_l
zm$41o%I%vej0g0&!j8B{4W{cOJ~Q|ZdtXaO;1#XsLM^k>&#}}vtd8{aR;3>m6SP=n
z-HtpGmplA;B6Fk_RBDVQmi?3A7`&U&x=6`OJm8A?v#_i&mXfzrWK0o9c046-Uwg$N
zI$FQtV~b>cls^EMHn!EOB&}?cHWHNM(n5mK>o;OK!N`fP5@RsjP(}es8tpd>Z2^<}
zudPqA)xLWEi$<TKSwbGFQUGUyPiM@4YI}MHL~{PEB`5K?{rqoIJYRs!0g{xH=RfN5
zr6;d-uo-)3(28$7$tpNatK5odG%;sP%t<Sfk#1#C6r&Q;yz`2$Sns?i@wcE#v0#he
zcEh(e5YoKC+7G&wGMPQJx}&)(9!lwYZ8Tm#ng0NtZ;NE_@1v>9scDTR`^a!4xtR+)
z&fm`;=GQmLPPAV?|31=7mhANrCN3w{9A7MWH_1)sTB7q!md;P(4DO*hGT7Jc2yRKw
zrX(8GyO#LF6hYb(K~S5w(fz}g?oXo+f^7KE&J~MMIA#P~-I+O!#5O(YjQCaJqvs-|
z^t5nXjFFz|2x5e@3^q1(TTdot)3IVUPr#S)Anh9<V2Oy$_-Wm|OMl*amp*YxNk_kO
zaiH~+zoBE~*=xyj2J3j5_Mg!KCIwDWb!sUnJBFid5u4iI-@medr8;SexIdhJ|CerB
zPNENQhMQ9Ki7+U_#7Efg|A(~H+4Qyido20y#h2+ASc%*X8;oaalm<TaK2Nf4lhTs)
zUidbIul+Q8_yKzJZyBLrsF{6eBDD`~jP{EAaGGM5hEafvjH|X#JtaXN@gWqrGnFT#
z-}I=B2psg%c^M4XtzErp<qC3IcB`i7SZ5=C4`HCXRzu=z#)dtldBXRglk^=Rhz^bp
z1G)f~1X;(;F&&J>(--vpuUf0ulQ<XJpC-gdnlRBG@~!y~(EYXrrgdvWy94F%CQNQK
zrp=q05qZ%Y%JlgUIYa#VG$!H++oC-&jfdWa5gNTc;kHOexecg~@K6{~YK%5nV{{t6
zi+jkw7W$f`jf!hj9%c`f-wcaFL)WZshNgY3X1spTgiXTfZ5~;SWcdodc+9vNGd&w^
zjC5%yl+l^;0yVE+rsIoWKs+`@^YCqWGjUmgfHmYT-dPo6o_>7dJbw17w6CbE|0VCN
z&!xHudhR`!_#BS-Y=cg+6;~kA(+dwn^@McAY<v@m$#;e|<`2-LX-h^1&o&FsDfnC5
zM{jEDR!=(8i&5EcqZfu%scLq9y$RQ&X<T$?cxjRPhG}jwHvKXxJSk>vUgVcEKwC2;
zeDk~c%f#<n_@0OVec>k*0T?6Ox>Cn_T70<YaVx)Saj56y<m9%=ZRKuaZ1Ss~JAVb$
zwP?agd@t8|T^gguFNSaDW8wRP^Y60o>OEz4{vBjHB=d94YT8CDzLLq~nFHCYnW#lT
z*v{W+VbeSY=if;@%-p;%kIrl!W?pWz#_cqG4X=skr7M$p>EXpKw?j+M%O5mhB7Uy|
z53X<Q)%?uNyuhl{Z@o*-%dzwCrrcxVH%9z6M>_oP^JmHSCD#RKfK#=qQX!90l0)6m
zUT6a4$S6wPRn%qE)4qnC=ig1a#6*85(Z5mChrd$v)jMth9c}QsmwVb@={oLl9%dH{
zz4<Zb9MUa;BKx;1OfIhYp{+AEf1M@2p5NyH=zThpf3U(_k4?q$2k0@EdG4&n;2R9#
zv_7P#b-9dK9x4w}x|%_ii_e&y^Viw9h%fv|^DUsyCVH5sCU~H6G4y?QERBqU>@_rc
zH;co1y1Nm(mvt|rq>=<|K02#)uDHA2!h0INjaQMMptD+bTp6Ke>FF3_w;{7AH?h59
zKn4VoFsivYC9l>P!HgaLvp7t?C^c#zX#h1Ja3$!#z>6KeB-iJlm4|Z{i+GImn9iw6
z<>c_p^s21voYgC-W##Z-Dmw>EY@#e$v59AI?<Fga`bJKmkcz8lj#Cthab{F+M$95b
z^_rN)1gm3VJpuoL2g&BK^0D-#L1th|WgEFoc*Fx1o)f!^)GK{)6sn*TIXlwQgo&nP
z-fPKx26y9W+W$gZzbO^VPhTst#-zU=k*xj|>XC9}D8dmmkBdy>AbxO{ntj(au2lS7
zX@{kP3j$p+<9kd>J1#YSjTsH0(Fv8p_IeB3-FOB+2=8eWQn2DI@=@U6O74<P81>Cr
z3^2+aA2Hub5U8eU#+MgGkn+Ua5jU(`H90ZXG?R_KuD0}bx7vqpqv{unM&1R9uB5Qe
z@SNz#m;tJnTGqVXW9jK$Je!d#mt4-WR->wXR3|4u76xHqxECIU%t&E6)bznq%#fa{
zAjHy>?DJQPFN=>_vfqObEIdMQTPfMs_A4sm$k_x6iX^hcPka9nX;Vp-AYoAPm;cJQ
zSs3ndMgf|}L9yv^)CVYF0;S+nHUipGV#{i5ylE}=0=P3eSG<>aY}Gb0E8~7z8{{i-
z{l0Rsz)*5v=G|W3We~#XHwVzUO){49MNf>YORoA~wbE(c>n{b6H|hBBONrOC=7sk`
zKz4r<FF+Q)(WCF;EJHw!!1ZH&s73NaQ@Ik&sHXT-s>CSCliX(INuI(H+()lUecc_7
zBkXKR+QA$#M{Xe}oi0g(ukt13P&#(|M^=pZDL4lK*;4vlb8!qe598dKD^j82`dC~1
zR1gMndn0Kqc?-)dd<u_JR*Q`yTr2_|;Lda!1cizy6x#kg3QCpQ-*A*@?uhPRuf}OQ
zgNvvjAcLlR9(T|QLtFu$0FD#8jR4pU5c$T+)W|!Ip?n5_^9MSX{u#vMXvE`69ZPR`
z7;Cec1Dzu=n^G$_V6fyZEO+4{T^A(9Cr#f(gJvNqr&%OezF=Xw3p=1AtuLF0iLbJO
z*jy4En=Bls;g4_+y=~PhCC8O9C%O|nrlD!qy!?7<Y`$yZISp?FPIK7el|4fG7GNRE
zU`PBm0JvY*brUuaznAH`;Hd0tssquF$f(mD3W|+`Ts}7kdB`V$QC=Jv6;NPQ0G<py
zJ3z|U0aA6<<CUsGC<%0Zmx7joYLChHXn*_@NrqQz8QA}TDx7RQqrbD}FlWQcan4=2
z3c*#d3wfR|@Yx(PA9cIbd_KRcEnxJhFEC8d^cc0D#iEYk-?3deu<+`uuGrnUeEY5)
zyEboJyKUXJ70bp(hX;F=OvSt>aSdBj?umT7?^Zs^A>)&Lg_a5b43AJvmd+}ZY$Xag
z6fiDaq*zp4m&J3uIS`Ud3g|~ba=M4XJmHnBDeR=uUhi1hK4Icpjx4;ODR1k)MLZ8c
z6{Z_E1}+nz7&Di)dJjDxiGvqLHw!MLV#r;=-P=Iv>$ncF5hC_+x^8?fZ`rIE*Sm<b
z+5h`>UmoJ!Psi0c;*Ed4@S24et4ei!J>@nRo#m5{^;^@EBAQ?Ln*b>B&+mAYIyaR)
zWcoYZTS<H)t_6bci}I>|3wjjIu3CH9b)2SeziNGZ5?=rvExvuk`t}rj4hke|$D(g#
zIsGl&5uQDuzFamCeQ9WZ+4^qwP!Dw)@9pjk1>lOPp}E)Me>XC?gT7u~@9&JiPRVd<
z^Y{1{SXuZkb<kVAY@|;E6q^1s=C7i@P4Rw#_eb~Pr!D-iu>X3FGm=^NM$-Bnr0?Eu
z^46%%UUx^qO@H@Q>pRLp>&W=-5$ik3Co53jmd@tyzTEU3<%IQwGo?$>3w65iP3kG6
z<pcWeS9RX%>q)w{g2$qHLiE_~lzjTTlUH;!f4A^`0Cp3}*F^8sYe>3kG5PLO0PGHu
zFZCVekPZV$*j_Fvnoh!7Ov$q0{c)2YO8wMVj&RhN!(KV!Yw>x3pNMq*Md(sAhx)t9
zfthpq+pk#Pp2Sx`wZ*qTw!S?DzYn>vYuKW1WhwnF&E*$U&F;11(U*qi7p?DRk9N`Q
zRLvSmfM_o3{xITy(zjLm_LCYH24S7i!M=9FZ@&AQ_1#JQUFgjC?osQzQ|LmG`U>_p
zfA<I0ce8Le^eQwe=v+~ZaO?gl;_uA2pN)7w3u=1)N|su~ziqAI69>wQVrR`->(aN@
z?-}?2OfTMR)SW<8p0vKb$5{hFJIHYATitI>e9Kz5Cvg_Wm7F7H-G<*u&-(5Zd<gp0
zcjH4%--(B;@9x4&!XB5y7CmNtcN#txj!oUr3;VQ*@0+=PF8c0Ha21w;UbDxWHU8Vy
z8b7hStSHh7XX)>xpL}QT`qLSE%a^S0?!q0=olvCj=5MBcZ`ODBphBX)TRzfE@B7ww
zr{UMZRp0fPy(;X}meTbHBVB(I`iWjWaMIs(Ti>05_rV>s=Z-Xeml~4~MmTndV=|h2
zcm53Zhim>0--1WxPpR)#j78t+-fpQq_d}6<--1Fo7b-0LZsE5mCQz2GJ?-qm&TyX^
z>hPlP)H-7SL;SY&-HC+(pph%--870<yi)qscV`x!2h(QP)#I_BJwG)b`n!AJ*8qrb
zxA`vI>%U~};dj-#4Ocy1s9)TawuLXJ?>?;Y;&Xt9XG~RSdIRUrQ7^bS1`<CK>2J;a
zeWaJ+a>Cd7{nR}Ds6IQc{VAOZWr=2<p8o*#du#fR=;h|m(LAk6Owr?SSoGa<ozwPr
z7Ck)=Zaz=*pj~s0&zIEM_Hh%JLZ@3_cXYmxeAMTy={w^4zEHm5KHfy{`xZTlwQxy)
zJ<aFU=dCl~#B@om^ud1XtdMTgcQo%m4mV|=RZ?2t-it*DPnPj|__?urbWh$C_IE|t
z_k}jy>d9pzMRbz!q5i#1-xB^?=g+BcH>@__8oJ-N=$?jmh5Oi=mGo^|=5p#R{*6e6
zUx6x}@5}rBL|<j`W9z$9a6jbKcWYOe@8++fUU1fT&%?u^ZMMdu_ptTdX|=}-_1!8%
zZ^QZbTeh^uebxN^;d~3N>DcBL-)s7g=zS2R`mR>-(&wtISm)|lcmM`TzOm->_jj!C
zPAH1hx0p`fG`+z3?hO18jx0X+<+av#cjL7%N7l)T(ShhZH{bf!xA)@y@a$JEo%Gp1
zzlZwQS>N7+C$zqo8U6qg#3SarPe=R8T)2;p^p(j*Ft)@`EL-9f{08K;job9ym(t&n
z4Ru|2Y~xCYzSBL}^c>$u-+eBcU-fW(S4w%oQr~^a`tC0HL3sX^t?$0y^qqv$Pj$nt
zxb&5o*WN4Rc?i+`!r$P}4EN<L*6H~b<?hQDH|4KOc>j}NQAGlmySnPBE2MjYiUiuu
zej9+O%9rXh1jb?F$%N_s3wdC0rcqg(f2W=58>|d0514mdoQLIOW)@y=V<P~3K!d-a
z-~1~dJ^up9d*pP_%->shBY?a#CHsm<b{81=dQDb_o6gE$Q=}dw^<>2Zm#aD>Bi7Gr
z0NAg~mlz(C5f27PF;El(&K(FJ`jDbL7&yqB#bM<%j=u8WKUI&TPqfxm!*P5Cgwbgn
zgu}(s(P>(yX9I{2$>$oGwriQ@zopg_)xlJtL(jAJb2=^(Xb0%|+j4M5MeTHbb^a*H
z7Sa6ms>b<z0HRq!##{_l$4GSmVU&M0bjIQVVJ26{c)4>TiuL<5RloXe@<}Gv?*Sm1
zA6VG7@DSB+ZY#MCFb^^GXoBas-ZYJZjswd_5#a!FkXktO6yV-eS2?ch;7D2*RMRh`
zMo0EapmiXJl3472ief{F)+hk^^(tX>lEX`3R&^Og8)a1kcQML>5pYo2Db=+a!|~Cf
zfm(m9udAb&$0}?0dQx>}Q+y@>DAL7RXBV68>BT9IskPxJ{%XzVDDl|=KsAAEzw1&i
zQ0<UR$DpR<UI9Qan%S98Y$|hY>6N7j#<?0%eg)AZb7Qd4*PNq~Ox0S2^%*&CPsy<g
zfZius$N#sGgo6H4WA9F;Xs*$^>gp^NCA~<f<mqmTto6WQrl=N8e4@v~nA%#oJl4_P
zLRV`6sJ_#p_+oB_<wgOyqN%2<j@{Wubk+gDK%+NvhoJo-6{F4nG{t{CK)BwJ1Fa3t
zkXi?D+zAfNGMov0pCVL{9(sno-L-aV6@V31meJfD128cjM0c~^8%%6Ub7+HX3T-e!
z4enr4mov3?x6`iEs4sq-NpDzcyK;0+1I-r^&7Vp7{WbuqCmhx^ZZ8uJ-xChDkz5$X
z43a2Bqk|9p>}&u2oZg+Nj?Rna(@Z@XZG*laU$^i*dN=Ju>5PpskR_iXIA$LODV>8p
zXH;#11{M!83^!54H7dAu`NYT&_GACp=-6lwo=tZweA{_gKArg7L3}<P@ws*32jo{T
zATm1X#!*OTO7Bh1ENxDl!tp%tAvwq?hB@|b3lT<W)ZE=`R#)nk(cw{*0TtAve4!`u
zm4q$Q|7RnfA5hp-Op<~GIN&h>$(hX!7Ag}WM1j^onPOU~Ob8C*V7*;o@(06vmO6i)
zDW4kOG2j7hH_bjw5y$D%hva6oyV@rXoi-w*)vd<ius+MWiPjfFS|2$2P*~*(9qiSG
z0(=OBA55pJPU&n+j)<l7BfJ`g$*6=`t)4UapYP^T{--11wE(cWv4NJXBM@lGc6O8*
z3VUBGnSHISCO_?KNql&e<4^Ps==~!zzB;{sOwAwT-_&wU(eIwE*SXqMYq>x=tk*?{
zz(x<TL{8`@bHp<4Zdc*4?RC8u(mBERYFaCZ*3A%FJ8e17Whlc4n{d-$v*rQ5z|{U+
zt%f$!!h>oIpC=x)Y>3%~HPA_GDm{u9vK?ylf^Wu>Xf}=I?14@?Ns_U=@EDr$OVtZZ
z<tHDA=JRvZe2y$UAPaBFya6-Up4ucI(RuB{!-P3C+XP4yaynbONH&f6+3GE?Q`3Al
z(fqQe$zH5zs@Rbs42Oco6=62sMSRH|r?iWv7(XO1EQ^DvChiJcj>|_C@%Hgx=>Ii!
z>#qagPt$Mo*O3e#itcf5$7wqMX#dXV7;>FU#nSn7ku)i$I@Y_~UXIoippHRR=kaoi
z5?hXdRUO%V5rNNPuxFdB=@x5NtFejlhECl%I_XK)(aE3k_OVs(_?5fPeem=D{N4F)
z{_DB<pWg7c@vV2Cc>Axu<AHyf|4$tG*E@fDEoXl^zCLL;c48V!f3{}FOP{Lyk$vzV
z?$`?ekKf+<nV*rAkNRXS$99rqB>>IoR0b-WiqlT{;<VE!;Z&JOu`THKH06ZSc>f0;
zqFs3jo6zJIWT)kqwS5@JOKetlSXI~U*-U)?E{eUAc!ti#@ge3)6TT8)9KGUujQAw6
zD<GIFX0+i5h%u_c!NJvot0^k3+OctrqT>F)dAHH)PxHBs_<TsqoU!h*R~xN0KJW{@
zCy~tJ8}7Ac&-mMDY>(p^ihETxNu(GYpu0_{3LR@x2E6A=?yxFCQ;a3(7)#<9<$Krb
zh`Jcb%E@KpID$i6wXGCi`Ln-s{Os>%kNfUH`ut{U4tz|{0hcodl`>6Vh8|M%pu=b;
z&^V=LF3C{)Ip1S+-8jM)(H+zE4eUC2OPBf6wc$wnKhwL>&**MrdYRI_foSXkpxQ5X
zmC=?}Cw&Y%$)#$GT6HFa!K8*#%Er7(*GI^xo#k3}l4MdR$*zz@8w$lA0f=@fP5jZf
zqqR8<HxibSJ|+d30{UL%bB7fXm`Ql_b;4t~DogRI?CnMDUD2z8o=59L1K5MzwHie|
z|L@q#JC(isQvJJ~^t&7MJaswaFf`~mf>)7=jv7NA=9h79GRlO|7D9B58LKNJ)z}-P
zTdGSxKv^^u<U(XtP&8!)WvXr>LU*UyuZq6Q9T>m?x0KOAwzE@PBf5p`<>?l(ul$qU
z{#}#x6Ia+xWN+O2@CQa#gk5A!Y^S#G>x6wq?_*0<<XsfM83u1gen`3lJuh_!I&y)z
zU$W=^FR{k^)d0?C#D5UqtBLQwMfS*(V2o^RLJu@mIcKTNbt?P9j+y-C0~(d?D_9Bp
z3AR(<vCc^{c~+#G!+PH``Bkkf(N5bEP3>FL0PM+84HBZc7l3L)=*lChS~phh7$ub6
zrhg9g-WPr_zZcJGnSf-v768^XR<@NGGFLAFy6GuUi^_(WD|@tm@CU?0X8-t3G#+1t
zcG^FRWM4wPBph@)P~gb$K!2Cuf=_|xg6l!J!Z?Z}Nl9~k+m@(Dr>gGTWA(6nlUWN=
zT5-;2;O%fDWwRJN(GGLAEyO5)!d@p$hT<3*iY69)#EM0qVpY6_d?+Rg9SM{-2Nw)N
zuau(@bOp-9pMTYgKcB+)>zrp3d5#ojiC#MJoB|!Kz;i`hhn?#@J0t&~CI3nGM>uWE
zufsUOdmQpV)FeOAe-gCY@+;w8FD<|8Uab5DOa56rhqutKos!>@nyMM1tC&tV%TIeu
zImVDnVR+EOFpHN$C+R4K!N~3-RdWk)@eoAxH4LI3`z?npzvUE;;n5a7lDNZlnV9Sz
zNhaq1tJYeWf)7Gx%ewGFGMNtcm-51O;qT*vxLbBnA7J`xM}iLkU5y%|b}j)P0K}r&
z8R$wI{icmQ-~6V{A$tL!ztJO+X)V&P9E^Tej{DEO5y07^dlb`O!#M9DRJ;fOL3^)x
z_(Oq|utGJH*a4{zrzo<T0@tHDNv{^)vFaq9{&gp=lf<1=og~sWb2yu&339<YNvoW1
z;sK3~{@Rgv2LO~CMZp<d4gd;LH}+1NJ4mXA!kTDpd=956r>w<Y#Fb3CY}PavkrEE*
zE6J|r`$?s$Zzv`wU_F34t>ZY>6Tf{Czpq1;YUy$0pq$g=W6G0DSCs-4|0svI72gBT
zhiFGZvY!}+R-G$YxN0_UqDn7gwb6Pl&~tkJRpQ*Dn(yz%?*mYd&Jy=%(=#+x?cMX@
z(xzE`LTBe+#rv(A@5HMYfO;%lu(Cg>#g&`M?yR&6f*>m8dNDng7RKn_Cf`T0fT`Jm
ze>wkI_+zrmCWaXD{?N-Zj=Z58%?XxutLskp1R?*C`!c!8)I+;Er2AI(w*c^z#*@Ya
z#&80GUAjXR;@`M#ExB9rRK?9lBJPpvW>;G=Uy_1zI1spwL*rM-F(C><CnH|gf7$kJ
zTU2A`HLEGFE9?~4*G^evm9n1ST8>AX<$wven(2G{_2Q#i=Uc}EN@zx4I~$koAexpy
zMURn0<wCBlS)x)tk?3+IPyZ$TA)v)FRY;~^dhb-@!x*uA7*qHPyoK&!E!-ET*C41V
zkoH_e`GJwgf-+lwIsK{h{ZD+=y8lh#7Jcs7S3g3OZpkCl7r&@vU3B4d`=fJDHc~z|
ziicd+SglS-I-Y73N=a0d+lVsl!O2mFh|6$dd3SgGR=cn;KQ2DQuQxX9mo%+WbfDhd
z;R(S=HDup&WKlwP{MT&v*hFVnhpC&g6+mosD@1Fn!i^mv?)%}jI7;?@m7Egc*`{cM
zGfR0*C{RYRBb>Zk#(%Bsi1y*p#9rA6z;BeLIA0z+!?Wl9v0;iO>MAhgY0}9PNO6}T
z-q}QajEI}Mv))(Y`!mGvA2a+V094QTlJ#r)xdU4^FxOdysF({JLoTTFtkN!>DWo4y
zl1`GlcDlYH9sLuuD;Yfd=Jy6H_ES+zjpixd2S7D*F4?j{ag||y5<Ol5G2}^UezWlr
z#**3oS~Jx(yx+v1km}L=H^dW9<6WwT$c>GIVLmB3ybzXCG$}xlQyZA?vnK!t2ep$m
zJXzF$`M!1t(`i%ocCTGiskbN3rNsBp{F|H)@X%Lzi1>ah;(N93Q<q1EHFRM>@mG8q
z0y0_(u5<-eiuQf^1iH?;0^Auu)LsK(93qVwv+#vj^`@q@u%5P}I-Dd<vPs>ij<8$(
zsYwQwS28HOuC))1xo)~OwZa^8m9i|;?IfbP^hT>EpT>IK!jH-4-m;&Bhl+B#9iPds
ziWp@#l=zv%Bvh3jXo6p<;|(1NpN!s3yNk$?Nm@}Xc{_K=e7cQHrm#pz8Fp8zYBA9+
z@c7?r$baJgg}cYpPW)?q2W2yO3jVDza@9^&EG!!w=;>~g$kuwycP_hh+t$sS*3;7k
z_&n;<vZh>Og<@e2ijZf;{ER@SEysLt{39+RvV)R`u`7WW+Ip00pTFpzRg<4RRz{SA
zKip^_Hug34UAOm|tFPFFm*eF-wqLS^ZsKYRjaMu2-Y@|mU#aio6Qqm((7M16!j16U
z#>rimDqW2Cbrm_X2^BTU9b7GyLP#BJxddNKWk^Nx7K*!4!gU(qcI-ghv3JMbYg9Jl
z&dYH-DzP?hhy|;VV2^Wb|8Ebc5PROjJ_|q4Im;RLyid3JmYuo!ddY;c?D$`PzgC_1
ztLMfBnj0?zAp6S7_kA2$zUd5K8sIp;SMRY;Bwnuuptt&ryxt_Ax0p`lEkvoj`E)Ap
z(rLUU69;McLixYFP_9>ZH*`Ic;d-*oc1LskUc8y+Kn)$JhG%PPYBLa=iD|>HYNVi7
z3Su02t%v%0y9T=l({5|Refz?<RIb)O;(0sGfjjm44e?TdiCGg18J5m>Ef(4DH=4Hi
zLrt5F6Kz^glYQie&)|^u!y7=IHlPdp;q@7qv(CU-CU6G+tkJ*3@#jRx--;3zikN4G
z{Pabhd`thrI`l4{Je_y_h*w>C#qM2GI~$A6x^mN5CmyuUx>-C7oiNw9eW_!PPo;!V
zV&w}5lzfGJ_8Esrf?R&tr8^d#ZzN3ozWM|=-)tYlEF8q6lrO)ueXJvaT#5u*Y$G!k
zdnafUO_|81$HpNQ$M^y9<+P1VbB_0rS72!iIj?PFYcEgiWGUmfUxvgz+f1g_Z0_XT
zx|5&43Lc{Ks`Z^*pI+1Ujhv=@>P8M=?#B;U_u~`rMJSSQJM(_b#evMrv63fsIR;2D
z6f6w0Si@VWCU8p(x=%l$@GKN7sQq<<#8;dQjt4Cqv+xJdNqbQSj&yTa&q6{4+frzV
zhpA<ow`$qW!XN2cwp!#?)q$;Evp>tewN{)3R&|{sW%D^~pjS78aX@fKOiMJPxtMB_
z($!YdTVb`m)Y;alDECboduDAC1AsLEniq;TbHbVCFyTxaTJ(Ty#B4=2(Pb{yB~~L{
zei3KroJz~CPb#F7Dnbz?C~_8xrj6aO&G${lSj4}?wi(v6&JS)O&w_<0IY;PBHs}Hi
zT}yU^@!-O@cw}!Lq%r=-2;<A~DAle-1*s2(+lh=9DPAh6_`<lunKPS2G@4TFQihU*
zGb<Kk<s_|%a(lf@duY-tXhzv1-_vt!hWP)d#@pTnPixFokUPHO%+bX`1ecpP0&r2w
z$pBr3)2XeDxJJ*xw9|#Pt!i{1o{U!I@KAqmhYAoX<UEB1>#R<DnTdbnR{Yxu_*Fa<
zzCYQaZz=0of?!fiFN%2!+wN|pR~++J^nlgd_r#7Ot^TDV33UCu?9RTaXQBi{!NM>L
zAJy-4tubi#S}PP04ti_+#q}uGSoT_2?!_lv2n#V%T$qqH7G1B+#v(-;3-N&O!3EJI
zb>XsWbtPyh9uz=)+AWy=Bwvrtn3BRmRhs+M?q5=etFPD~u)zUF3)-1VJ3Rq7gQE^2
z=5^de6z;7agqr-G{~#VTbwYov`M@dN>u+#C=gKi3sILu>_m_ut=K;uXb2L3fK4(d&
zI%0IDjo>g2jZrkwK*aMV0C$JpC)Hn$!#|YitzweLw%NltLsrT1kzwVTRwpR1iP4-x
zX@tw_dB?$>dJkc=hd=?j1N^8giacjbN2DKe^`Y0(Lq$@xMKZZ!d~9g2r@yDa++FUf
zQZ>=i=t!wAu^Hs+qO+D{`YDi1ui+DsOwWQ&l4&B8NCF!h(GrahhY}e%(i=-8Qz=6x
zl8E+~(fSfHP0mXb??z*@jby>!alXFrG@5IRVt*uzA{Q)*eREMtc0(8iWO{nF^QhM3
z*eJyXc|+PaHZM(V5%D<^@!=Q2r}P;3kbUqb*=6F$u7ogCH;i8?qSYxCS~p5ncD2a~
z*s64Nuh!94lKm@McD`E4eynkex&%3#sQ_mehr$${GV;!f;<wX7&e;KoR=cKM*hPn9
z{MR65crLUHQ}lMMKF~)cVr#YGC_m^5rMoX{-CaTazZ>c9CdFU%?yHmwdCo%@1$S{c
z6v1#VU6`|)E{HwLd(`!Kuphfo^>rZ5asTd*WW42`V^sipF<<H}*QHSJ!z~h^_1o=7
zGTv^_;iUkC>q2k0l=kEuejF{?6Q9->EL``oLEKNV&UN%<%AJ?;<GIpPyk&qsNPoJu
zL$6$|7>Azm=e^RxdLJH!JUpxM^vf{kSq?peHvr!Y{FxYc5p%hy-mbyk(yzDmk}aFp
zuUpcu_lag5;JY!vUb-vxpc|xhAbs`Mfs)7d1NSx$sWBtmmKh2UzK;hYb<mYS9Xv)E
ziNEh-@)^zkK74oMZ{ekl7i~g6Z)+p320QQ1D!p^h=eI4I4Y?c~Ea+!@OE<+(H-*%^
z*s*=v)-9ViZlKv=YsTp1!<Js|#U5Nvdg(&xr}d%+C-D4PP|ES;Z7xa(WGlS{fu)y9
zvtAbN59i5o;th#j?%n^-@Vv&eH=vhWq?aH+M?nlh&YSg-T)-L134#kMM9q{<8?&cM
zGFSe=(#cuu#tOwCtn6WV**sbDzRb@WE#x5ZbAej41<bpC-Ygt1yeXuY&%nUIs)1E>
ztPc&Ec~eZ!n=9m5Yu=pQ_b2em#>=kS#EOfSk(Vpxyy7erAfGGbXK3L%=sVM~qr8m8
zV(y@tKh>0q+CmkTA{A}jN=n*#_13G&{jz;q=G>{I=FX2SJ>7%-I0(;doEX4-ZW;Q)
z1bTiKO3$cFOs&IQ13X{)o}8sg<kKXw)t3ia1)1*%Ym`T1Ox2S#bE?qfTbCcVbav0d
zufiJ}uiJ{n!Y<6^r!dH=`4u#&&z-s!3k@H=faaBn4vTdOMaTuk+)U;?vz16H+@oqu
zHZHq#d*)m#o4H13j=L?bLzsY5cog@=XAjwp)T=n9L6&a$X|F!oL<8R(M%nAnoJr!x
zX<ZR-cnjpr+4StjGdFKo>sY$tQ;YOu^pdA4p@)@vijR94nz{8gYi`|*JMjkU*WH0l
zPf!r#0<|-^xw(AiW7N^?vy1vBH$6xdQs>v5)*QO~c|~|Z<GJf_@pDwZp!TJLUzm#?
zrjE9Fm}<*0vSUl3GKx(H*zR3B8!aEFXto%g{GFwf_uy`P5}a+c(Ysvw5YsN^%|<PO
ztK{=!@Pvy|PH$tA^~2zzlset0T|lqzwDkI(7Y@Le8&!JevkyXzprKWp_X96~>~UyV
zVcBU&`1xS=anMk>#x820%-r>^wZ=)+eZ#BiJ$S`(7UVXf8`M!IlbBOLljq7~M$18|
zQ1rPggH(l`TrPhQ^7#s#`yEY3iMoZ>#x{*@qMOjfIBCCLi2?}QXu-$&cRfr0cfF9q
zI~#AiVmHed_MxA@487(FE~mg#iu082IS-y-7JLy3`C`Fri0!3Hj{ANnUq@=`mqR_a
zMS5&Bv>F@x8~gWMbM;kIJ4u;4=$Nr%4XaJ(vDazo^9){xSI~+a!$N)y2D#NrrA_;S
zn7Rb>jUvrpFK|6`K+_f#<a0Ar0@f`AGfTf%)A^^~(<YiGbgB8g`HQqpNj7*DAiTBl
zrUsUZdoW+PMk#jD&f!iS#A3tfu>^U)l%Ki4<8~#Sot9R$P7mz6{#q3gFx7H;wkwUA
zGiR@L=7jJ2`pnUH68oJ$e}Q-Y9PPq~o0Uf{3wtLpXOH#f599O>8lOC5176hIe}T5&
z!&z&%n7PyLn!3PF8^vCIlJY{WcjI&TN8nTc`issF)fczyK+CLhQ#vN;Bb4iA#Xz3J
zIh{|Nky#YoKbMGp%zDTSn%>ACw6NZXzm5mUj;mwNv!BRqyyoKO6)*>0Zu;UL$p`w$
z!Popq4gltz{FRmt^d0iH#;>eFU#1?)&0RIpM;?7YbUf!T{8&z2>H0|KW4Y1IAxk%B
z;r;kTcz)wKHOvKr==lQ(Mn}TvXc-2L7JAB2IQE5N2@t7&hU#D1*<6Ld=%-}G5uClI
z51!t5>M;7=BuaM$VxlE6wGq8WGGpBEVjY$y4+FoK%t>3ncFihvsMlM)g%f{Kc7Lr|
zPxx*)i+xnXy$Ah##vICdxjFFi9v#j3Il8X+7Z<8rh!sSZZC|eyuw0DRk-2vp9Yy!<
z<Bi#Ibc6H^@}*)ONIGt3J#<mJc$-lcO{Bb~om`?F@;xq_paA2RF&Az)kHVgdZla%i
z;iI^M^wWi2E<-<b;nlV+Y05_ryvLy*>VRvnGJXH1Ih5SLuZr*Aq@Pigeo8;u0Q5cS
z`QeofJ(<#v=Uq@gWD{mDv(!5KM{E9^g^yr6{MW{-)SbJSu?d+AZ<9{Ul`YqXML$<G
zn^AytC|Ig0X;lpjASRdbMN_IgY--)mo!pvJ>P}9+oJ+=8KD8|w&wz(+9`i27cUu$C
zQ^I^cTzu7CMN54Jt-cj2NP#Q1uGmTrzLk^N)2yv$(&+HVmJaWMPv8)|rSZlAR3Vv|
z%THjCQ}Zo|)hUfS*I}UnftqRo`B!Lzg4-<BTDM_q`dK<fj4$eoreK@VC(Xf+Tl%E?
z`l}i*Ux9gLDEq+%^n5iRJ)>GVbt&c=E=rH);bNCTdS13rEU8sl0Gp|;XZGAI^`vb9
zcY8{&`kwrK+#lNn<kzG-I%(COq_lLFUc36r{Fs-pu@%IR6a86tc(NI08&8=S9d@Lb
znwmy;MpxQvKu5ykUCO53p8NYc=G4@2xes21`zR)$7X?ejpHf&g=qeygq5vk+C0z=I
zLSLazm366w6$><80QMC53WN7G5&c&|j_7wQ`X&!Jp)N5>fNx3%&gF7FxgJHoJ)wW)
z{3j`9){_4mybgS-t<)SlOQF^5aApn8X+<Z_cP2V}BRY41Pq~iiyk`Mi@WU<ApUdT>
ze&D|O`zeOQiY+;Z=T&d3iN>fQv{YeFJ!kHt`U6(|sB`$jg`cG8EL}b-iO=|gCC`2M
zDDJ1a1e54;oH9-OIGw88onE5xbh%nJjiF7Qt5;fb-iNnCp5g(T>63FcyaBWbhp{;r
z`9IMlKiMq*h`l8L2nvtVfjMO|dwdQ&;mt`DDCV+t9QTg)>xuloo3cL+X#3-azomGC
zG<8qu+Y_@AN%L@9OAr<d;<1-7X#f4*1jD`XLtIW6hLF3corSs>5%Ckqk+;C0I8+S-
z>W@KVkg^dphI^m%&x9dO-IZLrd{)s0$rT1EvoTmKl6mwG);OGnA7F)ipBqP5Km*O)
zz~#X#_&{NMGvMYh5N<Fn!w7&(IOF5vo5qz(q}m?o&BVRX*xV$~T4QteiGM<wH5Nz3
zAb>!CVXYVkI#e*b&3P7EgY!og&U@e|I7qQR;~4mB(e>7#bd_c$pW2Fk1C&->87h|M
z`)vk(0A#CX_i-n`>To^Mb1sc}M1I`De9u$9N;leU?ux6V@tn2UwjSS1-g@tHx23Ra
zKlf(b7w=)Tf2*?a4wtm5xs2zjM;ZBtFJiiyy)AVf9?*Q?y^xFdINCd6J_cXRMatrZ
zr>)|%M~&qNbwBPs#OG~M&4=&f&4i<fPTY@MFsj_dkkMhwSkXjfS-qgfmg~ZSiC^h`
z;w#2K^7e@S9Z;njA1>7<LS1EAppfY*EqOyXJie0-++&JG$ic`zY{@@`Tk)tRzhv~p
zz>tZ@F8|jo`KREc&}GRlBuXNUAW`od7cc)8Qu3R#hjP3(ArmnMXDVtbHv_^)4}~|~
z8pp)M#O8_3bW9K&s(le*k*~C{+=tJAJnc`L&=WBp#fuC*gxQ#<k5TK*7O)IMLPrb%
z5_|_Od}ra?c#QH5C(v`(p^$4+IK|X9bQ=b%2ZDKGrX^JBS4%vj#ba=m(m2Vd@Z>&v
z2~IeoK^t*I0fG=`bji(vtQiwpVoX@)KPf&aw^~@wu{`*cOP-#KAf!0l8d5o#g@i}#
z1@Ge@v&QWl^<XEusX2&%a}n`OiOWrMZ-?5;>>i^e@A`#Ds1};t*O!c`rQ7<No}wS&
zcUnC~N#0EWu&J@$?u!};ymU+7q@U{-EP3x^J-DCziDXBmWM(Oo&DSPd>!!XGkTy7w
zZt83LyS~E0aUY(99Iees^n~5gH)FNfxDq3=Lhz!sSyZ`2Z_>3Hi^S_4(LVVtU7OKG
zj>AJ;o$VELfwQ={3wm<|MgXG()#9$Gn5z(R@9GML_0`q!9j}ecl@4za55>J`;GGel
z6VOhp!$pC03g{Cf9gM+nDd$L*M@NcOt3KhOxQ+Nq;!DfJ#jro4l+Gcp%d)IkUar*@
zXT@6Qiy4gl7RD*ufH!Ai)CG9ZeS8?dYGIs$Ux&^MVN?KpFU07lG5Y>v!}vQE#{2LG
zcrEc>kAd5a)0t{A1W_4+OTwi##~VgBtXf&EM6k&gOmNeDP2ncq&w(6eAa2B**Aly&
z0?dgV3KP2&gU_4TrIZQ|Y84m@an;I7tcpTCna}$yJ)DJq!J`y^H;RG38eMM{qNNWp
zwFUh~+Dt<-)0R}prVZ=Y4%Z`fC{xYoqL|hNodI|B!gCtW8pm9)7CnCrVrz|fQ(Hr~
zw@1@`HZ>K3gE}a{^TH66EVYpBxN5SlRia0TbTWUxe3L9#IyuM0!XtDGvFE?RtWCOX
z=;id}C*1SDCT`(xvgW`!@^R7`ztr4EfpZ3?e(za~Z22;K&eJ>Gr%WEWsfR?iFa%VG
zEUO+8INUkhs<%dczKv?+S+UgT*z$!ZlFhYrggc5oI*3|gW^}u$-}D7b-uv*Ma6iR^
zk1E<(otuF>g3o~Cq69}yTS@I>9b;-o*Fmi&9{d#+hWqe1<S3hO6?$Un(q{HK(yF|f
zVj7h<OJO@`VLJ;C;W60LxT*uC7(#~+A}qqlr<S8=7@P_uNM|MmlMJ4^uCxzeFcz)&
z{j<0B!mW*?gXp=6o?M131F4)^k8Z=D&9Jy^xFPdYTtBez9{6F|1^qBd{fpZxjFRMh
z92@O%Jiiwhcww%dM8%aI(e>|qKlTWE9vpP_iM)KGu5x{;OwCBpH900_So5(htogX9
zzG=gziA}?`4Yhi?vo?%XDm}fWtP4Rp>o?u`lrMba8(%#3){Q^?>3eYYw}1OR^B+I|
zwg39Mo1Z^1{=&nr|8K9@b1e@3dkqCPuG;nB>6`jq_WjfUS?YT!{_s6t*nbWFc=!H)
z|4e-6`xnAv>VZ%k^aTDno?;G4*xB(4igHy^(QZamwC<08BwDvi1WB)2setN8>A=+I
zxYP6qF?FHww4w^F>q5J9a!E%X2L$e#(zxKd&Vjf$kX0A@iSu{z2l#dA`hvvAxf6iw
zsqFfKo*;DGB|fwhA4%#8(hyPsd!53NDlQmddMJfyMTF_s0BDV8)%kTfTMCiY?MUMh
z?R=ZT^SubqcOD~;(h@wzl+NNhxx{0$=D~gifbt^4dbw^?FV{slM%Ucqx@fM4LWJV8
z199qwa^#dv^;~~2&ZAa5uGcuOCmuhDc&xlQ9;J)nF{yNA=Pb~8tkm^S7v&O&@R(ry
zIAZjY5akjueN=SFI7i{mj2wm2&J7nsx73>Mb|vqpN#0bR4axg<o$sBQXCuK0YeXFf
z1|X9Z8!7n#(34bW*+l2iP9^(4@a;`GHYEE40JNWF=GaJwcre8Sz>$<_6D8MBvPC=u
z>FgSBU@1J#^*?_+?DWq8&vl9y)lN_KE+AgG0idaOfk@R*7xZMs9e%v&g~~Yq@orU4
zdVyR$f2Z>qzOAV?Ezw`Cb5oMqw32SH%#l=+mUNY>Nt;%bDNL*9tos+@GwFPLqAgDW
zz#lD<Z(m6A?WuYFae)q%2r1aP@K7kg0W05rsb5sBUpxl#lyBdSn3-!|GP(Bicgk1t
z>(aUQgjd`GKy{c}=h_#1KDC4>oz0>kW@g!!bWPCtw~0@R-;Ha6;$_kNuPpqO?6HE!
z1S&3~AGtGt(UGbS9RUs(&UC8pJ<U!J=|uJQiK-tHCsY~6-flIg+X5el*ifKzL4)~s
z@Z0qpRX}_%*L<0~aGtEBJW66Kduxn4eVQ){DNxR8{!;Om&U6qz{B<_-9vWn*^Th@y
zh9;sC)*cS9fn1NN5B)>gW$Huk(fuRH<O5aWq`guqx(owdfeI3LROc?Pcg33OT2dp!
z+@b!E0@Rx8fI+B}Eiy7(ZRa2h=%`lyMRakeK;VcB@CYy}OTg44gU_VY$LK-5(uRgQ
zJBR8+_0IpNx@&-z91EgV4@v*&uS}Y=8T9v_v1bm}wr$%+XKZ^WYumPM+qT_rwkqk)
z*ZOettyi~#s!HY8y?wKN8eE4c38-n4?T^FBQel{4k&nX2(N4MUa-2e_^wB8O_DH<q
z!w+%)PY{jyxHR<K=bxvF3-@2NV8NpM&Q%M7;Dh__|GenQU4x09Uvf$>pLNo4OU0MI
z7r_4>Kf>U$UPPKZ|EyBz_T(x8#9CIw>aS4AJv5?)U?c1Z?UQWbBY4-LjgoRA+kbQj
z&tZ6ttp%rC+HQI-Rj;bw#dQX#mMwi>^h6@SmptFxaiM7oN<Vo;#?cI*PbM5q%nX`w
zdvbwbqsU=GbIsNZ$y`EG*hPh)5q4tzSDV_^7BZMJ!A?`7OPM*W5_;q!KvA7-r+G&X
z$MAE+Y?^i^hWK_q_vM$*70GkoeRnA?JrtjqZq~*RrkjSt&7PNpaOLj7c+dB}@xkNx
zW3BJ!OD~l!%omHbLYpcAkI)LBZs6;IS<#dffKF|VRN6&b75asB8abnwvW#+})F5{P
z1zZ5_2#8@(&6mGr)mZBQ&@v5N<A(b+nd|R%xK$YLc5{Hwiq<FSkbm(-@x#6G{z>Lt
z-1%g)`o8Av@r3_eH6_@^^M4FX5A0Lp`@PI%X2V>uSc3<c3%w$__ZdXFZ?bh>XAKT$
zjWjq|b6y{~@;2CijeROw985V86He48z{|V!3h4li9wl(~9%W6A1Rzl7D;5LjqRqjB
z4&Br_l4U*$Gg-gXS$6<hBi#YUqfRG0d#<rtMSsAlkC-Wv2}svfOGYwy5FzObp+}@g
zP}NP3V8rlliUi46CxrIR8C~jr-Y0t#20B|i*5tW#y|R>-PdQ3ja;?S&Ay+569B=t4
zj<UMyeRxq}Ug<|ies`_^+28+etFF7P*f0C54t@=eY+2WnEt<t`=N``2Bxupzy{fAe
zkfo+ZrZJYn64K&5D=gTrGwrY!u@1AP$S1q4gHK<T_uuD{9m*KBwq*h4Q)~xvX|f|C
zj|As73xVwjw8VZIIaewv!bFm%>MdPx%67)maoVrTd@kGRPj=|uDW1;-6z#LQy*+Zq
z!Z@sHjOSz_WHPDD;M(OG+{t=w*BM->Rojpasu4TR;If%My*sX6*LC&AhVq;(uMPkh
z^B=Cls&jce%&9g4=hPZ41uLwfLLpJ?WMN0y9yjH<X*<&&ZH%HErw*F~M3gr8o1*{e
zI24DThTolRE}ij)eQxQ8b6=WdE;|Xo(?i|T6=Eyb_ubOWpw_J5*nr0b;#k)Qz?fID
zz+U!QrB|I&I^=q_wBmy!wI%oC)*crVQo>e(eXOX_(G$Ezif8pzx&FG*X=FSy>~+|!
zqegK<#LW&L?UrH7!{538m0MQU77A6>eR}3M@4LYU-cyd1et0ULvz>Y6z8Z5VE)2vo
zty!TLC+o&+Tbi=XHe&y@@7MnJHUP%jEd|z+>l12~rEH~Z=yuJvq>aG3a!Mkg0@{mO
z$1#b+F1^)LHp9j!$i}gDWSl)JIKQ5chfXr99&Mg6PakVqCgNe2onbDSh%X(Bjo5N5
zzB<udJV~r5{gUB$dzV?GrdZ4fE5HvjzF%WD#_K5{XABdV$C?|>jF}Q1)lpf(T$^Oj
z>JKo-(JMuKA@mkuwj;DsMxa{>^=KL5b)(%Yv%}@GB@*SaW`{kVdu~s&-7zR-Fh_oN
z3|_R?BaiNhmmc$(oQ7{`b6d7pOk%zHDp@RMaUC6KY{~k5wfPNo()Y9G6%7Ct-O7j)
z^+1po>sGQZ=3nbo{-sW3MWiy(P|<9^tjx#9*IZjz?>@8gEaP)8NudCq>sQ+9qHRSc
zY^ioEH$FT6BW8^b@6Kq8dr9YuY5H~9$h__RIj)D(uY~>fTZ6!@kpcw3O#zXYKv>st
zgjenv&Si~5!Y9FIt(pqoeRyqFdKi56E4M#V4iB%!ZSJQH-;mGzvc+S(Ui)TWqfxKB
z$2vm+eg`;J!utRK0C?JCU}Rtb;R#kNF30oRd}ZL~U;u$59|ZM4^x6HPg@4-q&fsF=
zNCI*>8JIw#07`xf*Ld1vU}Rw6Ncww~fq}E_fB64-oEbn76u=@40GuTTQFz)klw-6d
z+YW`ls+Co>uWht#+sAC%-Qyj#ZQHi(zP4@Kw(b39>qkbiQmay#Gcy(Z3jp%S2>)fD
zy+<qSN}j)kTz?i>!87a&*D)$w#yRdj+S)`igEd^?u47a1Eh}APuoX;nIgGUu(yb$D
zwp%rt(Ay?3(F(~?zPHVybFiD0!2ue$Kb0$BwUuY8yOUP&b+q&E(8#wT-B*z<mR+q{
zf6AB8D5^lZdPuYFH1kK4KTdi)lJw|GJ>N^dzf69ge6gOr&qQxjh&;{xebkD_agCos
zHNSvH_6WVh7HoByln*NlLx0lM`}i=8&g!$!b|wF?_Vl!8Wx4bW-_SSb)6-X_Ww?_b
zVYB4V_O9Z&w2YTi*H@&uP1W5uXk)YK>GJ7emohH=PUm;1ZR4pLZKZ`BprtLMoHb`e
zcrUGjhgm0ojryG!e8@8Et8Z^6#otO_<(dUQu+CnjtNVZrQ8RkGX%xHtG_`?DJaIN-
zQ}`=WtPI(%86#aTMPWDk`Er_1Tk=9<d+-_sVLAG_qngbjiu`VF_fK$pv`OblG)>f|
zp4B8@+~nK8r1=DmV#fg6Po7O7>jW<Gf0h58n&A$`UkZbGKY=~ELcDxW&-g}0#l;kc
z@6jYoCja%%k)=9?(aoIix6>+Ym;A?iQQ(?W=&FdH6effhvLQUqqTo#$x?7m;won+{
zM@EpOTkt32+@^o#X-4yv?;6aegEY3l{mA+gnCt;*as#FOWc7WB`r@o@RGD1cs`LHi
zM>D0NEc)0T;&TnlttFS*5@E`uNLWYP9qMNh)5EQlvf-3--!RYzWZN9(Sqg)s{UZ09
za6Tg3?=bSj+@dPUWVD<yzNNJMJoTdm6iJU+-l(70N%O>;<VG*jII5)H@@XEG6_0<a
z#$(cFMdhSd{{>Badm2Wq=^Qmx?l+pnzmgmOqj#T?mL}58=aD9kJH<~?%NNqvmQifK
ztM__j_$!6;0V>&*boOJE`+)(zJgLz=@}p%Za=XYA2fe)Z&u7ynZqI<Y16}+QN=1+8
zx$asUdPSd+>My5_znD_e-Kgj<-Tj|xRHcp|%fRSkRz#`N-z{Xv=h7q^Mt8qjT;EJ{
zX})sw0afDy8VO6vS@UR|Si;429aY`Ur{<zQ3bnIM#Cw|)yD1!n(Q_>D|1j!g?Q2#0
zXGU3B3T+gX-1ls;i&-emPYb?gTKo;w<0I6uV^lh^*Y+)K>~@-49dRlyv}?IGnU?-O
z;p|S&=x;7n&5rTE)Q;-XC6O;)$I>P8;_p93#8;84In<MmoB0gk4`>=WTKH0&?N^EO
z|5W1|a!=IqlcfE@vLbTqLt0x$TKhEVYQOA3&8{@HwMV6`E7!Orm&Ff>heNbUTtr%2
zOFQzNaMck0r&O=1>YcA1E`>xDIOD@RWoJXs8*IAb+KP7pFUkNvft^t<du=h3l<zOA
z5$vQ~@H17zFX$isK-2Iw%Bjy*Hd_05vv%bGt9)Bl#Yf2rJCGvl<YsFo%W3D1i0_+)
z`!?}bT3XyhzT2suf1;v&!9eZwfM_T~Vi+1XU}&_Mk`w=c=p1qWI;l3EP4+S^5)CL0
z4<z^59%kAlthTFJYqhmw*U%_T&{lVAh^u-4iJMp+->n{BrIff#3+r%Eu!{a}H#5$d
zoy#!0fT4ClvYY$_w}&3#S?sX;xKJ7@WvdurFUyaVWyoG;gzA?HGZi-x_LW@klG1h?
z>29EMPt)5zrnkFTJ&shoUNi5d{r^$=xKw_T=5|=VjWjut31NTn@EJYq3VqinU$N^I
z*J8Z8k96VcZk5GtP5QasjC3UwxixfilNC=<uNNslhY@ZF1#Yj-yICFH&ZZOpVSA6o
zE*5vwq=$oywx(QV+r{Hn&2$_8@4T#`qzZy4+9SIo3GVKYpfT=l39b<#lAtl}5aI5m
zOtul5Vma>aPE$8{%ilWZW5GLbd|Iks-QJn64U0mc9>R2b4%uIo3(KmOSnb@h99wOV
z^*kHe=WkffAF#8#Dt;nA>C^Pys?%W@vYH-1zstUeKj@*U>P1hjCwgi_`l_i@c5i&7
ze(FUpO^RO1*i%IhomgMiLt2{fUfDzOm3pTaeKRTgCSnf!ws+>m|D`%CvDh4*nD}Rh
zH|Y6k4vWA8wq7r79v{sgn!mI)Y;SYx&U(TMxSgj_HiwyT3%!tD06(aYCOy{%H(wYA
zu@9_|_p0vkJo~{qd53-A5AX00O!6nEhTxW@=d4e#-|WNRI=lt*P$TS{xC{324uilP
zFbH$7Gu{qycFBQMkqzWRoydiFn`|(DW2z_<yvT&4$OQk}NhyQ8$fI9UHpLp#CDTjB
z;<G9##)tek$xMkHlay&lWA`HGn2&N!D&DbqlL71E?&=M3TlP!bSXBw7s%LRU)w~e0
z`{PydH|K!;5pz?sp0%kB_7$!sH+T$l!C5dCd<8?njO;613Jcr+)bcv7;cylI2iH-D
z{2#w3&WD*aE<VF&VJgPM_!tlT$Cx<pjEgam3!G)RNPJEfP>(Pj@4*t(J!h3Xg6-id
zKBF3z`<muX#9b+OIc(!x)1w&^cY?ZHIv%?fE{0LoH%DpQ8WWrfSBjHLg)pn!CrpMJ
zVLW9Q{|CdeE-)nw$YY;@I!DSdI0o)U`ksE9aWDqC@<Z$<hehE<_JBEihhgDN*cHBH
z-C0}iPVg>#>c;6jp49XI_CIHOAwMymOnaZTq$eq}Q?eBwpI;j*Y47Xa^C$ONse96&
zTy^I?|1``(oE2)9Gr@g;bHIH-d!oIPbC#%o)rNSOzGnB3rpP|ir>e$&=XL0zTG8)Q
z>)buG&#F`XA30!m#{qCGtdqGLwuSH$z+Q?w0C?I&!2^sN0002Mer?;fZQGh{+qP}n
zwr$(C?WWP<zXQ~g0)_)#*3_-JUGp8t1?GVxfm?wWfv<s85FV5T^#+{;i@`0y$01Tk
zL&!lWAL@rThYp6WgdT>WVVhxJ;YIjr_;-X8(I0Ug$wr2eBat^zNK|9gQq)Vd7CjvO
z8WY3}#2m#`uu1G(>`fdJr^Q8a9dXlf8*wM`TKq`-ZGxIGnsAw@Ck`ZTB)%uvNsUP-
z$w+dPypmj@SSd3pH>qT5n!1qsnr5bTrfsL4r6cJ{dT07&hL*9AQDJhKYni86N!C`@
zO*W7{mA#hzm_y{$<s9YQ=kmGrx!t+Txre#Gd3;_&-dx^izMH?8e^THSOcXp7_7pxA
zp+!SQPsMR@XYp=vMWU9BmOPZErDvs8Syr}IR*|RW8|9A`W<^~^f5m#mQN>TCP}xv9
zT)A6$S@}{0SGiR!RRdMCRYz6#)o8U@Jz9NG1J?L8V>MN6QM*zH)^*hF)zkF@^=A!u
zLu12K!&9TzIM{gBL^RbkO*cI>>&?B**DXrRcq`D_(t6y+wGFgAw>#}4?ROn=$4h6_
zIoJ8q<#tVW)7_2To847U-m~6I_jdJO_c?uQ{cwLr|8oD=K>xt=pfor<cs4{1H4iNe
z-3&JkZ;b#V(a7}3+h{SmK8B8UjvbGy<J05c6Lk~Y6P2VtIX?L`)jahuEljsf-_BSw
ztF!Rz>>M$-Fwe{n&fhMO3k?egi^SsQQna+OjQvj+JiuBN0002Zwrj|?ZClUw^~bfX
zY}**JIb^#r+qPzQj>qF!=(*|n>22p7=8gHL`^)(g{)2%=0bgKc;Bl~DaBlE-2o7Bh
z_XsZxzl@BDY>hUGZjTj<O^Th3w~4Fq=ZQ&)t%={sP;!5&N-CE+n);p2rFUm)WoBoK
zW%2CY+_>C!pc<e8kHG=peDEdI2U`8#hoRfhXSf>N0UiVAU>#lwpNBsqoe&>_BlFQ7
zXaqIUh3I*#48~)>^KyA7^ULIC^5^GYEa+G8x^O;T3?G0;a2sEY?<Fb`{fPO*Vd6UR
zlB`9xBTe!)d7C;**P$b{NpGh2)9;x!jEAwAz06JKE8BqW!Y0_Y>`kr&*M^(G+1!5a
zI`^ILz>niiekcD}Xe101OkurnRroHp6LaERai@4+{3*4OP-(h!QZ6O8kV$#Bd{X|X
zbWsAzOy#2TT<xaP>Uwpr`dq7|4bfuSOzpBhNYClZ^}9yBe*?x!<FZ-K9A>)aar3Ly
z$?{lht;cpPyP4h29$~L{iZ}shwe!|(;7)K&_qh9hN@B{=DL1Fqn(F)85WIjg-T(jq
zmo7<?mg<ruNz$dYzOE%*(j{qqE$NaZNzx_hT3V9yrE4+FFf+54nVIeX+WY;m&CE74
zGsDat%r?VFT9@?Q?>EDk3C-ru*3EXzj?XG)L*#t&7jiFonv9SmbEvtNx#2nSTxK3K
zKQ(VzC|u}Vpe=YQMU-~RZ;F`Wqr5NHEcPvu7NNxuwUqjmIzXjTt<;yL+NJI#(vp4Y
zWBL2?__AU7Wd*k~y<%N?qoHX-GyyHPidx05l2*NR6dg~Wp?lVf*YInUH7BEx(aIn(
zbd1;ay7m5b`nqfVgNb2wF(;W~W^kim1G~|?LD{fu<XE+=ZWe`QWu@5_>}K{To65Gb
z)11$oHqID_&k1mgxL9rvcZv&fBfJ7$18;~&=lM4CHk&tpZ3;Fo_$Yom|2N;lf8DCx
z>fNGk*|**V7{Q2uF9>X-wsG6z+k)+|uuM266bgeo1v`y9!#lj4fasH`Ni-;;i(I0Q
zUG(nYE^9X;t``r8d195=BaVr4k`hUc1S|PhGANmpP$dG1M&gmgByT_wPzn44v;n;U
z0hj?;fDCW|As`DDfaPEV_#Ny9N5KC;8YluypdU<v?@%dJ17RT?)CUnD62ycc$O;9a
z44em-!F6yGjE4tcB20!kuncy>F*t{mAT<aU!6AJJ0U;qw1VXGx5P6h-l75zckv2;^
zr9;vQDMiYc`ebNXzl<ak%L4K|Ia>ZhJ|j2C6N(Z=y`obwq2MTVilnkc*`UNLiAtU_
zpej{0s|Hncl}Qy+=c}vLI5kntRNK{W8mwkWW7ovAMOw6WK+DovwK-j-u0uDkQ|Q9F
zKl&;?PCuq+>J9oALzSV+KrnC&FUE3XlaXi?8hyrBQ-!J7L^L6$m>FemG5<32&3^NT
z1!KWkhAd=@#^T*8-21ji*wgGKto2rcRc1}ts%&`Mn2l+3+H!V`eb_Fvr}r!OyY`9u
ztbL86*+F&)9g&0DgRTR{f!A5${NbcKeTR96O^1rZcUPlp(gnF9?lO0)d)Q5No7@>s
zt*6(+^4uJi9km`2kHkk|FUs5Mo$@-5%Z}TQCyoWj315w`!$<KsPEaTK6V^${U*{k8
z>rM+!drz6C=|Ek85b&S1oh_ebgWrPm;Kh0U`OrD%Jblq{F@9mWEWYfxWM0NXUqjQO
z@D=)M^2&bo7OoAqhY4YNSQpM*S6t(+C$E9)NTfW{8Cj0_q6N{$=+7u4>Wu!0p<_Q|
z{8%Jj9LL57;*_`}{&9o38NK1(#BQr@2X6(p*+g}sCo!FnB@%blcU^b%WL~l<IhqtC
zgQ=oaQ)(o|NZC`lbVIr?O-tL;ulK|Ez<oMXpTTFKhth}62jsErvFDNZ7<?*uYIz!a
z5<Ug9HQDj3{~7b#|4e&E{`Nmd{s(NzCxrk20003100bNWmjD(3U;qaI0sv3|T>x$X
z008<4kpKh$0eIR>&LIo|VHn5Z-}`;%Zs*R8V?+XijZHE|Hk+nV^r%<87gdvFGktot
zNs1yf`-f{!e1MMaF#w<qvXRi19T5ZB(_$<K)S1gAR;=ZaoRb{U<0{95JmrKkFFB>o
zN3JlkSk4&OM6MP-wZbR=A3PSsz|6L?(X@l?$m}e8Ms||}`u3Jf99>He>AH&?v2YJL
zCiO!(q2Z@;O5ZQ#3LC$ZGgkgCR|}t7;gj<_d<&zFWk+Ek*q<`x%SNKJec7CIJj);(
z>S5#(!r||?SLWqZQ<~h}O!3ClPIBdxWM*@)<*IP<)|geLC5@B*53?}N$j?eGe&|(O
zDSI5wE(~T@7Ny(#qis`~T9Pn{<8;)Y3m55~TdLNXqNMV}Z5&PqVHyWXHXb~ZppuCM
zR+3bLx7?2<*h?~yU?;tv1b>e*|5buc<)U!eh!SU2uGh+*h*@^0gvZbonOVOqY}vR{
z)k3(ot}*qeGShXVb7|{bTXBV!=NpwVbd#rYdQck1g>#!(6zz7qQ2DLU*i}>=H=F3w
z`<Ji3{Cpj76K`Np!$FWkF)C&mdm9{JQDTL{Pv5d<SXI!hQp8Bm#}D=ve2!1>lT*d|
z2Q)WZU)f8@*)53KJ&baN^A9wAgVKM!5E=5tv=k$<%um0u%N=b=Wb1hgl-<n_u|-Vm
z6a#u95D=4L%=!_8RYgDXne{rU&);_Zv9I=iGVuA1zDHw@zn88#y(PGO%dHoeyib@5
zCzdfMYV8px5biFo{FU%hb$OD(5c`ssThHt06>3PQuGx3&8}>eNmO(RX=yUG0%yYjZ
z+$xv}o?`=rtg9|#o<gqup%fuvZadlrGeoo<XzZ&CTp{-@R-9HBIr$>0yyp$C@dZEW
zgCplZ0QvzY0C?JL!9!vl02Bbgc|W%8)V6Kg=Bmf2ZLDf{)voGm)V2|AlM7@<0%+f6
zt4<_W6A1}PQlv_gE<>g)*>dE{ldnLbBE?FSDpRgPr7G2G)T&djL8C6Z>ZZFMdg`UO
zKKkmXzX1jsWUwKI8fLf=MjB<bF~%Baya^_nWU?uynr6BgW}0QTIp&&Yz6BOqWU(cd
zT4uQwR$67XHP%{Zy$v?n<g%T1dF-@rc025Vvu?U#e<a!AgeJ`nIb&}md*i=zZfVt`
z%_T?ubIfo1T=2s^7yXG8Pb1X_A0sVY9S2Yo%93K}O-krRdat2(q)6{odJ~Z@T@X;|
z1f)X{P?QdlP=YjRp$GvU5SkE_7JPs}ASfv1$M@&Y{CP7sH+MU;JGZxcySH<9dvoYW
zAz9~4<aoxxc>3D-De{R_-^pjynLhBPaN3Y?#-?!koN(qzUD`xl#$H|e=eo>aerfu<
zs$|bdiBs^a+kH}^4Zr7?+;2109YF~2SHJV|-r43$dRCR!n$ZC1PN^w^XG1GKCcVjp
zrPr5sC07@AfSb$vp1;j+%WN#`Nv$pJ%z0m#aF0%nMfs1#=n?-_hbO51h(Yt|)de#h
zBR%jo6GQRKg1n;K!hCxR8!J0YTkEC2P;-m33-gN7AXx<&dAZJ(_EtEoqb({VJS;La
z;_=U8+{up%Srb|kPXaB10m-*ZaB$~8vB?AtcFgVOvY5v*&s)T*+OYVJby0wF*v=>W
z*A}^+0!D=*_HV2T{pI}^>X%+y=KD%Gbv#^pV_h7i9?Pdmfzt~u(0zL?oK@wQ@!OKy
zoJv<8WDtSUt=7Jq0%no-UDNFaJ)CG~ZNtic9P3<8e;3WI$tSRm7&~Y5!Bj2w0y2xl
z@5B73x~a?H0jsb_GardlvpG~l_mEwb#Zc#-E=o)hPqbPiej<cp`^)enc4_op4XVKP
z16pP7(%$WTj1qnemRVHVGL@d?&o`A>0L@QH&x^NB$t<azO0@jNn<)W9$xb%6%!xKO
z!xmNc16yVV%K~8w3aj5+<|TW+!<ICDbB4SWOXU#!n)Wt3bc*lin)IiFEt69u6|EX}
zn(}?G%%mcBT-YQ>!sYR#+8v;ydpc8*W5hFg1&0Uu5|PWk#p*wlw-foylrUM=(_K7B
zmlr(I(jf$71O$<lv+MBY&+wkdU<6eCHw}jhMPp0k0iwRGWrcj&<wN++XYl=~L-lCf
z_KI;yN~wMDdi*(VXEnzy;aczi^oNPDu)x-40VNOWXpaa#!%<U#vpR1L66gJKD6h+}
zpZ<w3@dZrJYf}<(n^!L#$Pfqk;yD5s8%&QTrx!3R;<bf@v&#B>D&n)RhyzeCiP+JH
zi`dpU>xHnrs<)|j0y{<Q$@`(+IcC}gevbHts=lA&8vl!$1?0V)X6ZF*S_1O<oaOi!
zBjM2Qy^>-3XfbfP-Dfr1<;f3DrSR?Lbn6HI;wSTe%xG#KCnjp)CD;_S0uTIsGh?(W
zbWWmq$Agf!%5#%G&uUJ#HSB~U!)QXZ!GDhp;`CXiJN6ezivFlzjV}gRWVfgQkNiQC
zZ8j|l4Lania7}pjbz=a}IKeWXSNR{t+u+Ln45p9{zl9o?R5O?Evu_KvUlRYPf-elM
zYo<!%AFMyqGcIa&=)h<8F})A}zTENPOVV9~>~f_D%v!RsJrw;RVt4&H{)4r?=rasD
z)!gml)%n@3o0i2r2VENz{4uPNlfIpqtG1<~qn@p)%X6M+Exd>cSR4XZ;1w1B2ms?k
zn9OKtLS9{9X$B~?u{5RbKv|j-gF&+<l+Eq4W~Alev!=9txY-$k=TtICvbR|>)3@?X
zWTvRvkTNqwnc^@cMPn0enxrfMHbv8O0GlC9<p@QR*S-p!1{6DoPEmKRh0YM?s9}+K
zy~IwFR>oncX!|c&-Ct{0k+6H#d8Dv=ytCA2_i73qEpx9j6fE;>cvw^BQRC=a<^_!*
z4948#t1*7M{bB$`)PptPr%hW`K9pSI`t}S8h@~i5-nB1@WbT6T>|p9L+xz<BWvN~>
zjGX})V6!Zgf}oRzq;?fJxlC+YO1n~yoqPMl<90`N6*J4w!Xw+r$Bwm!hn)3IXj<I*
z$a<dXF&J{U?N+x~pY3>=zu}k~wED>^b7qS1^NIwUjq#W%IzePXW9O}0%2<AjVmhKa
zIUE30HcT|EN(N3EWTvjT*Oy1lQ^Ap5YeEsXuchFiwetA^CY~=qE++egn=&n?6-jEi
zxdOsxl@-Y4pgoOS%Wg1Y{HE{nMbybaXC@jWiobVRTq{1^k#tL%j(DI5Ne6-6WOE6z
zy|ug07ldmX-xGi3ymooX&PU0vO3Hj?UYZOpf1aONmRg(>yEBeJ4vkI^j!X?3UkJcj
zV2?w>LQjuRET5YG!NPq6==%cg6e4NNB!jqIH6W`Da+G4sinLPPJK%voxD%s;pC%11
z<fLWWT23scDYC?y0uDG(518%nC|r;yvXrV<{c%aZ;(<Ra<!=f8Ke4CR;Eg3l9d~a}
zUk@Lz-LKo5imaHyS088)*iyy|za`Bv>XgQLk(Bn~qhzJP22aN05eK#6cJmwYE9Tx1
z>+|NO=Da@H!_ExvnmKV)Jp?_{d_xg9ojP`s2hpy*tC0}bEa2#olZ)fYwi2-umAgWT
zSq0iUQyg`>Z2p8yocM`6mT&x9x8CpLIP+9ou4rD{XguyiQJEvFlB4;H?t^VvkWdj;
zVejp?Ttzm=Y<=QQi&qJsiZ&V|-)EwXj)sdt8C$|21M{ZC)6ri#T*<*lCP`&m^**Wk
zvsuzz$|D-dmTbVu-wx`*R2p_m;~9+`!fPMlp`=Ibg|tnhHoLO+RS!;?<J}3U2x(ae
zy}ptuk(eb~f2BI7HX-0XU)l^5pYJl7$}4k1Fy=FB5jYds56FiQuQ{PyZ5x_#`a%>s
z*Du5(deC+OCxP{)<*EKa^}7q}1a#j633d&2H8}Ts9h9qshuNHq=hy?{MFt+#d%a@g
zJO|M`vk63t1GZf#JQ~^#%xXG7MwrNcf4NdUD@_CXg%Lv-XhD0tG6b;Thz+^c8&wX{
zk<(Aomj!I*#aqkxljeUtF!6S4Z9+5AlO+*Klhh;zAKOwT!T?2-4__<rd3I&-U&HWk
z_TP8+T^zeEvuAiXwjybPKC`6E7$K>Iy*|^ch_2h^T&}#F<QWwa0{m(}aJ|mOqz2Ex
z+7Y{oLq_mibY#x5l-$eF732_BIE5%Vm1Uypa4I~Tv>K{VwPooIprGX{)bm1~;8Rk~
zK4d^+O4L)Pl-WVqC8>G>nO>_@y51Wc)|lJE*|{;^7SmSQw;eRs-}OhuwK88leAU8}
zAlel(F(2zr9O@gThX78=L79X9_E7fBeBLH|tnGZAMt;DsZ2lpB=(|vhdCRMG=fB0x
z&-~wTR2nV5KDKOy`(0%6mQJ=ijJD#xM9D!Yd)B7KPkYs>{lK>d80|{+ye90#S67y^
zf9IcPF7y46Kp$~>+B*-#(A-)^4Godk4G}RCii(TV5T6Ec05P3R0k-##a~b}^FuQMM
z_*^5l*#-M;T0iKa-viH9_wGca)68au?}{?njm>zLO7J`q+)6SSJ39fyHpZMZqrR<p
zrF(l3Uc|pQN)`N0v~m8e`KEv6PIoHP7e`pwJlhL@;0WvmZ4ThnK{{Ay`F^mN))q_T
z%ThEJipIjx?<Tr7<hV6XH;#aNZ8}$h352J&rMU-#xCY^9)9TfCH5ugLHYOIDBZ$P9
z2Vf=$%F<A-fIVv1C@5Af+kPa*{>;W|J9O6Qc2sYVtXGjlgthAVz<rT`oXEggRS)Cx
ze8CcHf5<okXIt1OHo>YBGjg|YFH6*aKY=$i`*!o9`H(3;bs;`td#CMJqTh3RvAJmF
z(}^C=saEx}*7AzOf@MgMy2kv(!SINinN-PqVzWXA2vRo(T@6a1fJ0bIVSUjvY%G#%
z2kThH)hIO;7KPS5H;}!+uOR4LwTW*Ow!5%IQQ)_2-QOEtS)2vsl=hFtAn(Fdd99gA
z2(6*NjpgwXZk^4SU(4Zsd>lAiNzROrkoz=0Cdo)gFE;9(o441GJcF&27`<-d-u#sE
z-moaS8szool3P0R^HhgUHqeahTkNawn$GPKovu1+l<;$akIz4&xDN#M<Tfp%Ov)fq
zhJ(er!9_1L^tup|Saz%`mJ}-#s)f_)G(Di}K?Eb*5QL%kaA|xk^Mc(7n%v9qRm9mj
z^DJ>cJY5oI%zqV(ubtg)%r3Pr4LRu4Lw(BnqKTj({F;s^=%TUf6DQ+Mk_@Q<S);6{
zHA7(u{(H(<JFUG_SbABVMb5YnA$?E-j->AjvmKX}09Ac@foDX*kgGE-MTuK>CqMgB
z>RE+U&Z^jjt9wty6E=`z4{t&D+5MnNxygm#FCDOsM@JlMYD=svrO{9^X<3=mjme>j
zX}swlF-4b`Tpas&?2O^P2)^6Lz*33_;Jb#DZ|L63$lS0+(Po(-<IY=KPQ3oH@|dpd
zKdvKHic(DTzn*1p=HGz#{{|fW8&Ekg{tpFs!p+UcJ5jaEE{%&157SHY_f_cSDEA|1
zruRjfRFW~U7$xYJUSQuSJO=8v`&ZzB^IDuEj%e#FfNN=eed#Tm&M(#+S3^U#mh_^^
z+){fYg202T>Oc22PS-<tg+2NByxg|UXh>*MypyT3CM4NQ3Mm!RdPIezgTGSZ)(3zb
zOt3-S*ysA*IuIRuKLm;30)jdV`f0+Dy`;cJAylsQVc@0*F+HyqZx}-+N$sPTlY(3{
yk<H+MEJ=1-7F8lX1*LG^#29~`bs8WEnIb(|r1W(#dSI?6w{Q?ZaN-~aB=`?`VC%a8

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/Roboto-Slab-Regular.woff2 b/assets/documentation/1.27.0-rc1/css/fonts/Roboto-Slab-Regular.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..f2c76e5bda18a9842e24cd60d8787257da215ca7
GIT binary patch
literal 66444
zcmZ6x1CS=cwl4a&ZQI7QZB5&@ZQHh|ZQHhOyL;NUac7@>-;49!s){H?R%S%jst>i&
zO-_sn00aO4fIy-FNdJz&$>#sgDgWo*zsvuBU<=>`R6^s1I)m#2;w>RLppuY~AfdxX
z1wyYBVdA*}Ky1LIAbGZ+gkVur5MyGn0q|M~x`{9=BQ3%zJH#aKxVBzGL}NcGYM@xH
ztGx8}R+u2UM-|H(6!wmEzIdLtHq{RTWH;+S|BZzrqO+xO-|Q=b&xugj0dsX5VJf<z
zt$m4+#yx5mC3$&hN3qTACLf)`Mr_bum<jJ$CMCh?B>)xM`s4(S>Pg9Lwz172S6Q-(
zSSVZDtH2$)bzdL-z|8qJr3k2j6)s$#nuPtX%(1q`yF)g+`|F*o+2YI178=n+4|!(O
zL<aY$t@pLq@zfSMOk=r%%G;1NS!qQ4D<v+7B_OLxiCC|GqP7Hw_Gp~?5FGXjM(*Gs
zAGUFLRbC!Xyn7G~ad(d+t4oYut}cczOp6H|-YzY|Osz#859U-0R*x?T6-^kDVV}&O
zise9@6SbCjBW3tE>T?z*zIHWUe(WfEi(oJAUqJ6ob_KR3!#|Xna9LS-d1OCKUY&J#
z2@0pXYX}C_1zYRQDZIn$z88|XR|~%%5VDPNw)Xj@n0q6d`%@%%Kh&a(c|1&7c=Q~t
zaQIZt1K2%d9j29mBI949M{%-lwfnCZ>O4(ZeUx3WVITVE)A(L2g);VL0rOOQnUYSM
zvOZx_E*bt>&&AnaY~=%TpOo(kybiS+N`%;9t1#=5v~(>_HJEop$XBu!xo=XGr$3)P
z9Z6XiV96m7FQSg2CnqafpFo@H^@hr^V~qNPLSnI$5@=II3>)T>sG9MZtcXAk1J<;U
zvI9eul1PPP=<Fh>0!u|#-#}}o28^YcAu5<5KqFbQT%rSkY><KqRA@8`W^@kuHCaw)
zD;=Bf1&*y9Ti<b!8*zR;ReUEtr1}1+$efz`QUjOJ!nnQ~m~8m3@ZR6H9D!8exOt#I
z*EUe3aJw}>y?&xMkk|MCy%ljdBzJY0MTl}un98>x$Q$CKEiA`IVp9>KabP4C@-$fN
zB$alx^4`ngiEE?1v8<cf%N++p(-&EF&_Dda$}Fx5S69eIutIX5X5F;07V%3&ol%TL
z_GP}1fVQNhjwMH3xx{G+Nq~|$u<PA3L8_zw3h;C{2|VAq1W=ZC+Lw?0Bz4}GZZ`cS
z{O9wh0d?aqbwqo-@rGK4VP%=4KB5~EG-q|ou)>82Axe%B1RG=0iM&6`CcS(jDQYe~
z90`pHeg3RAd}@UF@pDF{<h*qZmi)C&yhAMV%(u!5!Km*_hwR~GaL6-?Q-ke<1vn%R
z)$DNW+urilC{m1=J0B2qfv_th2LqCtRz@B5-oCR69}jWq+nvBvk_=7qOkKCAS71#P
z0o%rIb@_+Hp}c7B3nf6*h^U7FUv}TSJG%su&dvNB+x0cJ9DCTX6rYMVF{Xo}-bSIO
zk@$t9;In?XKeZRzS>3a6XL1Y&>4d(lDA4lFf59pQnx9Q)05ey&dxS){3Hix{R0^dX
zNB8rIJ{&2D)t@3%boz*qg6ZbWtZEy%9b9?IamYQ0SEfM_uyKT+av>E8Xcf>gRag6(
zZ0oeJWNJd<5#q0lF6SXtpC9EP<+f2i>hW80tVKEnwnd-z=(iGepZOjk_$?UVcs#d2
zCL#BuE7V2r)qXCO6!b=YFqiaMZ{6QLbn+S$smI5#hBrhl$g~%!f=PC)WTN8|YJJ&z
zHuN%lyi@Eht{7U5)>Qiz?wBnL4K(tw3J5MwwPaqa{)GwBgmvA0H?c|9{*_Fk=`G#_
z_#3eFS__-H$}}aQx*{Wz;Xn2JVO}!InUQN5g4X?r!|@nGI7ZP&jA$w$<pP79#H?w{
zy`xUeK;WQ|=>7m6Ih${<>u|v|h~PA&`)Om9d6Pd+!liZ-NmEb`xDBuc5vKP0f4GY2
zoI*_|dxl$|ClAXm-&;Y`FP+)!s7ZS!UxC|&k0ymS?r)VGJvjYhOE@Ap&_R)K*%*Oo
zCt%JiR;24hnkfAG*Is_OettT=ia7ruuR&r#*oRY4=<oXorw-HqiJuJnl>>eL)BiB6
zy}Jvtj#OtMkQgvmHdyr7(0uvbW|dL_1K~paMsZ&n=6m+CaCSr54|WN+31Q+-4A$6a
z5qm_)c~Ps>!Is#Fi_(}6#Nv7fXAZ@9w@c9TdHkIylnF2q>JLKi-?*EGkStW?K}8T6
z4tM(QQERsI`V|PNXvt3b_ELJ3yOeaAQxsu^SoA3jJvlxZ=5*upvcD77_kvFe4KRU1
zL=&J6V4(_1jKL5fn$ImTZl&GCTRPWEz0@O{cMPLUXn4=Gb&2N+uFFj3wi1Gz)UY<a
zf$Hqan)YOi(x?K@G3Q^jt%*h+eT7syNn(cq+T&I^?hQbe+&qU?Td#Cf-JQ5*j4?F=
zSt)R#m?>yn$oiPs-u=-PB{J{8W|@mV3uT0yrYe~qd*aZ~PSQG=ao^mA<r1I(W6(8?
zX__f$UeGYwdGW(EBIvyt;nj8HA@K7lcd43m1%eqZ*>?T$c}YS5H}Yspb$|s2A%y}!
zAh~{u;b|ja>VFE;edPLl+)z+syO82H4^+=Vh9oc#mA^+?3aRl*K#pSv!xDY}$m*$W
zPY#MP*|yQ>$XaQsD!v;R$8BACr8&~`=mfb_?Y`4D*MMJ&D0Yx%|9O-tTJn%grJLi|
zmNDD8wjuC|0jBPRucM@gp)G-Y_$Z-Du|4T!muM>AE-t`i(4$OL>r`{wDso9mS%7g0
zoS}sTcU7kb+xOTEKmZ@P>49e{ghhsDiiOOU{`Db@s0*LZGH$NpprYQCm8!_PFh#er
zJtME_iA1f#uK;t-CrKt|ye{`9Ee@=z5Faaw1myGA_9w<<hAAQ2`KCFw0g@z|K?rt0
zE$6KZI9F}f??w5Jz=%!Gn~_*Esx5Q))mGj6XL#GoG_KMs0+tMwikMhX2$C#$pm*^_
z)KjU&xzyDtkWol`>dk~{q6C%YdYd@YMO1IfKX5i3w~5Rm38!oNBlG)Lv}~D9HAk|5
zNCaZX%<Rn1w#1H>w@PnCb2ho`rdy}c`dxfgy?6u&AyDkAr{Bwurs@q&j82L=?+fP>
zt-~N|Mz|0tkV(>j&ERd62JPJ~K5%@5fw2cUND1;nvmj>tQs4&dw5jO$vof;&mC7lo
z*DT<yj0xE4i@t{-9t_HVblf1R2kRGTgFnFyiufMjV9ya&naB1EzRwVZ2#BlJXa@*F
z)z-fr(<P7eO~rYbfrxqa_w>n&ilL<n94|Banr*@>+m}q&aCvP<Ohu(?ztmyOF!tEO
zHIV*p1RY#BX`W_fHNKi#_aZ@N*?DDz*f?dYDa3QjPV*hku32qc?Ms;G1o7R$MG(=h
z@(`f#p3gsy4svi`L+JThkoQ_cx+#l|UFb630kn*k(2n-BB77mahflX1)&qj5r#1q$
zK31k{G*=r5ej53=F0^X$j97tKb)OuLXJ0D^`&+9vqc|p*sqeduly@G!zWsodL*AM(
zCp(a7@i^m)_MKS56iA+kIvW)xcbaz+EL>4dK8jTIgtgmd11efP+McjQtVs_DX4EtV
zULqe5O@Z++IN@g1-{R^wEzADfX>c-C>$UF3E~l_qqk`2xzF)NKUD>6zFo4Fk7F*UL
zAzQM{3nB-vKH&iM!9A$q3_Hu-5SRv5r8%v1?V{Z0&<Q)@8d{_>Y~j}ayt8_Y=DS~Q
zRk;PlHcP-9r9?mreS|ed<)Q?@AgO)^jfMKm5U{dYR8AqvNBv>g{2RbZzv~b?WEa(*
zagu_Q11f8nT^fz@Q;NOD7mk5weoC8Nb*!CBv(?_KAI|t|q6CGteI9~3^+G+cm`8S-
zG_+{dQH|Ft;<b%inq{bhkBXfKV31<)ipS%(O(szV+nFecg+M<POOQ2uVhS>=m94`%
z32Tb6hg%hsf@R54*3xS>ci*nL*WAAB3-qvE8}7(S*_V@-OvQ+7SeVOlGny^17mvlw
zETn8_Cseo6o2%QowKg5?w7J{(U*=t=y`<$%xLeE~2v#4!qEChcDdxK8BD%I(R6LsN
zmfgGYP`ny-k~}+kt?q3jm@zlLn_oMEte$MjrJj7wq+X1$CU2e0Tt{k6=q7KDXh(C8
z=w^4(s`_rB)y$1gTxU)t$(dRrRnjz<E2Qn-fb%%PAt8!I5`Z__BlWc_Kv!Za#yZtd
zvM8_x=R}xMo9D1iY>x8EvvKB9A=D~nAd4>|l|#KBnV$M-M)d=sVaY1y7@E=A!@3N?
zoUd3EoYcjx_FW{$Wonh$FaBhPNr=8>KGo@MAKJvao*kd7*fs+-ue?^xYx<>EGn-T>
zGMiE}o6#qLMWuYOW7Z0jd&8$->kXC+-`JnsvMY+StZ9Hzb|TaUq>ci=iHIU@8&o7&
z_*3@+i395r{7Qr+Bo$CZ5kMAHz?4V?DEJmS%aajC5|1M@obw@qty3Pm1I!Ena7fCb
zU`P>&*faee(l_Qn^nw%ZXb~z<%}{_6Q2kgzT25(F)MW<Fy*NY^M+w`=oP_bn+XfK^
zZ^}dl)IB4A^J4XZ_&G@vy<t&ID9;K9=D+k_AdHI|e_^<*C-Z_|uN=Wy4p`CKa?Asd
zCj!?sWTpx12Bw<mRpvMfhh>LP1y?1@=411wSE{)9L?T6wtWnm1*yW9|BdZy>_1UP&
z)xb3aGySD>(#dqle3Rsf=KZaC>wuDjUTV8Q<bmgv$sxH&&e~8{%6K;G!HeuUuq49<
z4!F5#Wie^z;*TZ<_>j{HO$1sd1W=OHN?n5unW{7cZ<4degV?IeeTP-<#4Fd9w?bv_
zj*$0x1^huVR9cX2{SlK<!3lthui<V_P1?F(zD1hvsj%w&Thh_ET=tj_J9PmMSyke6
zYuM_+CI5^k&Qc*<gt~@lU^WI!J3y-b7OEP`qf$U!#3y2FA<U?bOI}gMvDvY($^vS(
z8L%`X3=09;35v}DgoED&h4u=y5__d1N}a^g9GoyPnRkxDEPLmE0E(g+ZC4Tm-cHIV
z6QOy9en^a+IEuQ6#N@Ot(n)>-_C}aESO-2fK7`BrYlT}r@6Q~NSU3b1C1C)#NgKd~
z(vNUbdyXY+)iDw4x3a}`dJXj=mFmK$=S@@64$W)O$ruY-2zVR%vKD#se8_g2Atj>P
znWkIZt8^q->P+dlSZGL1;d|M8aRREcI*=rkenG%C((Z4Wxbd_~w~}-Q#-}u#UDIkx
zdnr&OO6BpI#IhYSP2Zd+=n#79V^Ao?`92!P%4up7f3G_KHCn>;qs7RVOO*SACFJ-B
zwKjQj&|Z`b(LQe4HsZm#i9!ybqHN;SdB>qb+=9w877K*@IzsQo`m6apVqtN8wXC}|
zRlSP_$=dGsEM!z9CaEcXs3<Zxkt-(4G>5-3r^C+iDWty>TElDtUyk)>-i%88RQ{%I
zC=Ul8T!Oa*t7x*cnrLk>Fx&U&comoqSx4c_V^v!XCan}_U(P>DE3Rm=&L%D9xOKQ)
zfd!LlI_aQ6i=_672bx8(2u#mYP>kI}#ivIFDpdScM&TbZt-$rC0%ydh#!(7~aTb#!
zEgH}WY4ifRr}*nEhp0Y$@PQ$Y{ika5ky}-W3(V|tTyk@$PH1nIqcOd?M(Pj6)4O7B
zPoOGHyN0y~)QjXb-8o9(hraiZ%q83+LRDUttw(O-iTjP~6r$hOVeTepjV<*KYGf<h
zt?F6?`u2K5>xR9OzIrELTnEwd_G=ll^(u2xj@-p|;RREF)k((KA|}r}s656YD&tkY
zdrg3}I!78QmZlFGRStR>W?EiQzvT$N>F{MFNiqf-t10OiRpL=suZT*4yM$Y^CX}W8
zLh=w*3cmdW7F6}~>A`%|GKGmb6Lf)4-~f~#o`7_IB~dxZ)j^r;xr#L86LIDs;f?zZ
zatJc=QlJtZ_a*}nRDjq#pbn_1#XM4BL$YR>obTmJ8wH=gHxe*Th?J&Wj=ell>0cLk
zo{|@U8#@4=PKQiysXR6)xXoFVl2-%!1Ptl_I|DC)-mK=1cOd?k;Io=oN&U7A7bGx7
z8Dy9y!p#{j{4s;4`&bsO2P@9{@dMTl*2vxdPzd|(p#Q_4zK6_s&Nt^Iz5Z%qPPK6s
zdj3P!N_3ZpDwkD~WqcP|C-#OvZg%n0SrBa@LN9YaKSsvC&w|jS=V`!`6+@|;*Kr+J
ztk;e++7ou$?LSw0gk>-f$fl-()~h%l&}lU@jvfd>MMG)Z`@?3D5fdm03t?FaElyDx
z%NFw_qMlDd%jkLE2Vq0O|AhYZ<|>$*TPtNjDVa`g1)<v+LZQ=GuUHQ-a$ndO&l2%C
z91f+!sM)^KxSJJ5F)*Uj$bL%3d=_bq7)P2;rrcB!e=AIAU34DhTa_Yigz+lJ7er9O
zlkue#WMB)souuKIYK+j)+?#xic}}2jT|QUKb#0~mw9q*Lp-S$XaWBp6;IGpV?~6&-
zqpK}cgE%ut?ub*VEJ(^lO40q5(I6@{RC|{7Ks#FuR4RwoZN_dsU$UAjlW0V*-e|hG
z6)&w>c8Xat0||}BWHzuws^LUpw3_Jxi%O-{sy{C`TdCTtvzTnbo4wj-?A6s3?jFfE
zvg>{@kgbKw?)+RvBLs2DYj%aw_N^#3K<#<Eo<QLLs@R3Ya1B%cvH(pcloAw5E|-U@
z70U*f(QG;^o8cdTx2$Jfn_GJiy~w`y?b;tKdz|ud>a-lPDe-01VTyI?oKF0eIuGPt
z#4D9lc$3v0dP88~4D8|;gUNl&_Vx@cX5B|V)6RAZzVlc%HTfLXwrP5<wwRER=$rhX
zr-lPxNok?()x@IloK9R9<Pez}hBDCMK%{i*m>Ukql;lIQYXaW82Fo#t+V}4`91jN6
z0-S6;i@Hrc{gGMOwA=3p1i>hTipnDSJj%LQoFg$&i3B5IHSSTVl#0cI(D6J?<_g^6
zfR7jh5fMkG4gjt0B#KR#<B?CN%=%;Dj3_16YYj>t+*Kf57fAoR`wl{Nhs5IFy|kII
zn2ZJ^LV>7Q4Tn^UC6Y1VbX<=Ud7?M?U=z4)cj#1_(Z<7`k5~-GLupV-Y}V`LUyZL2
zF)vtH#VVzON$560^=P|PiY7F}RCpaccT+IGx@&fr<@bcJg<9j}y~(y<utH-n84ZWR
zkx0a%F&Tkz-U#9VK?qQJMUCU<AKjf9b|<5+Vg!6O-wwQSze}tA3T`8I`Oc1&@cEx!
znU^1`L^G7Q%2RHfHWa_5Hy^{IYn}BHIz(;%-c*wM=jTT+sjO<R9tXhd<hWOC;@ot-
zDAfMy`PeVj^Zl?IO0#H0uL9Q}ehPv%P9w%B0nM=>GSj?Bk44V{HLHLWiL5wHVhmyq
zqP~)fz{7vJ<52oTksGWf!jwR_S~rjVGm|<)A??p<My1h1JpI%FK~!iYUow%QN7st@
zp9xEAG#<u|L&2~u7!Fs`vcgNnk^*wwAknCBj=aFaOi$BLUk8ZnxP<+$U&F7wYY~G;
z+J7C3ML!U*H`t9<vOHkWt<Iv_u1faRVhl18bC~`~dC&&oJ_Nyp0aDeFS$<$L#c||(
zWGVOrp=9J@Vr8UCl~Ub8a^&fUmoA&3HQKB{K|w=c9rl7~0rOl?^lDNFydSZaLU+ha
zPNwKi$8_pd#VhfQi<;MnX`fKT)MSeJk?Pf4PuQ#p$`7$^9xkZ4SdN2A_J>0uH#$un
zz;uvAV6L*`TiW@{Bv)Kk#}@#Is}`BFizWTR6r3NVG`j!E$Ak)T;nHwMu7-}sQ-npK
zAoZ<5;7mC9|G}9660@4uB&tk0wVuXE>#-LpI>j{C`57t|>U3<4Tn7?v%^UZ0?!iIY
z**&FG8F%h2T{MM6+*87Z37$zY+Y|d@tG4~r&FhYvfYzOlGQV$9cJncI{?B_e{1$U(
zY<_>V`%6MM%si4gPNJ0Lm1?EV`5N-NM#u<MR?%Ih-=+WHka@8k+=N)m_Kl;`oTmGx
zAX`b2x}2&r65?fjP&UUK`bLycsb!1L24^VV&iD05ZV)qjL`~va|A&`WNxt&|{Z40%
z>?b4diobQB@5)aK={F1rha}b4Dc6!HYalt@1~c;%?Du<{*AOjg4BAft3+yx7@J4B}
zWzFp*`qn!AR5SiBH-xyydssdi&|dT${W{1WAjlKc`X<@4(8ejRb)uJFt`RPm7l{-(
z9{a_setU!$SMQ_tX;#XMuRvA$boq<7JB}$zPdzRLxT-94*YI9bsw)4Dr%@V9Fl>0#
z#8LU#ySx283zlpXaFAlB_MHi%=3NHdu*kct&X6c~SD|#3mcyD-R@%ati}mr<u*g|B
z$E}8L{l9SVl`e2{KkgB;HiS}j(&8(UFEbsj-3kO8m#g>bdvb%BVvUTM3>Fhr9x$n;
z%U^r7C7w7j+3kPoJzE+$&8C6bqY$YqBYmxtS}ng#8nEYfsDTp-j+K9vOsdm8ZY!>c
zsqr+=zQER&yvjw$=;26dY&UTJ?X#^)+LY&{)YY?Ld%?xG{Wmvn+nW=R52_rMU>FIb
zV^GP>WBakQ+0hPSTF1(%CX)%=_u(^&`>OMn{cu*z`(hf^ZFkn5wrnF=f6!ggwLDiN
zTbeh|_O|d``AQPmKP|WUYmhgA0v3}nmbY(qI54kx9=5DK#7nCBXO_CpOzde{Q$9FT
zgDwvuy!Mfalv=b0#bWH7Hd_ZGrws@D7513|U7T|ta8eO|-LxJu&(_&4o#m%DHu6SP
zW|w;{PTG_C&^&M=-Uj7~ExbI@8J#t1RIe0A#npi-98#UTn<J%OPSsS!GvB{L+eN-t
ziWyr^)zgg`N<Fj`%;M9I|LI72lw2?u6%PxeI;J&i`DG2hN-^H;jq2i2+MZhFbzbbL
zva@vJqJeFedC}Ql1K)HU2F`hom5o^hyF6u(P3K|r$|~F_X!JjfXqt`@NGzPXh2IK3
zniq;_I>mBqI3CH0U)t6u(}d}e<k^!(ZzMUBXTq}V*cx5etdy54wDdhN@EbTuBb8BI
zFx>ARLq2UI{mLN_$DlrWOG@;;1M|p^x<|zj8b-H7h^!0S1)IfUzC`#0u?B8Bqt$%9
z!feH6<9TbxyX)8`6wHY2ad_)ZvnF+MqRG<*I5@M6fD8=Z=n|)4HaFE&mv-Byi>q<x
zup;VdS?4D`)^p<1n{reC#0A^7RqNd2jHocNC#Aj@@QD(m>0CyT6@_*=3Ej(pTr{Sl
z#l@V0=BRq*F7IuM!Afj2-JOY!e=#7|c5^M;b1V5)RIe)Aw9>M{_h&x2Ql3=}#8Qk-
zMMt$Z1B*^F*3*`v!@bKnMC(wKy(DMJVU9GJULcZFhS@QTH5}$PfG@P%dZ4J>)U@#-
z%jX|7=BN^2t2YMe!D*t9I7u0ZF=K5ra!~7_VJH-%Ta9wzSkG`elCj@+-Vt=-*&vJ@
zn+QSv<6lSSl$20eq`&eq^4SVO|M1`}p8oN4RvHD)*Id@zfma7P3XRQ*%|YL+JLb}f
zaA$~-g2QQl;%bbYS5O^MrOAxQNV+~8MUT8;QuH50ij_w+KeV8K)P+G?qY`brprt2!
z%N8%`7n-uAXZ~IY%_>-uzBucYHldPxYl^Blb-fvPx;eS~TVdk>%Zr)l))P*P&1k?r
z{2OXfyh}BObiCNOygS-PgUIYq=jJ!6{GD>#|HI&|!Bz@GRw|7a{~ujNz+UqX(_+1O
z*R?&K^L6J~B4^G3`*s|r_dPX89)oR%-DtG#TRCM_X%Fl1x?99eTy}iB!ny9#7Ik#b
z+1hvUJdt@vl*RYO|7GB9iiuzsO8~nk4C1Z4qF8&JVkb5|@gI^aEw0>OsR~VJl>V9X
zCCInd>bat~hfla=CfX9kem9^$ju?jK|DmS^B1Tc9#j9{2pZb>uzVV~UcB65&Xjb%4
zeksW1@}gC$*`6^O;w%I|p2c8Bade+S13FUDlW~rk-CO`KlqRIs&df(uX+tG@%r=(o
zBNe+#VV|vMnCPgWVQbmx=MUZJwyT+?#<Q`qB0CdrHpGRwsRCgiBJ`By1cY}(E)lb9
zlaMTE6~;o5%bP98kqj?(x-0~NweZF3B0WJ8HmFjAMDnv23kl-!W{t$pjOaPcb~X_|
zQklg+OIxOz90Z^PtO|kXAIxo@9sHy06cSFztt(OsLjS-c$_IdNQCIYe___%>($c<p
zU4%1rpL`cM3#r;>=7&vRIFgYkA)U@@*MHySiO*AKos;!au}&j&h}s-C0B%;Lv;heF
ztZOc79CXH|$W~c$W|N9yt<Huwa+|uoFa7%!=D;-aYGe@2IPyxuID%;uZHHCFY4c{_
zp(*3JFZ~xI`lxF*%03#*kQCNP5EG%_S2{V~9-*tspe!sH`=6G(>Xleaxz(x9I3Nhq
zqB5<}6t1=o=`4`X303pM)J|clT`K>K60YQ8a|!vsw1sGH)BUd%jz@evtA``sR#hJe
zE~f+54&?4<w>!ihZ&~(a8`3Qqtm-Znm?+Ob8H79Puxk6-Oic72A45R3_^+PcB=B!!
zvpYF4!vWeT9a^KteuMvfHJtW`Q)qtZ#74vX5rKO?&iQLI@5VUnxkG{k(6L$^w&|A?
zNKpM=^01?A5+Hy;Ke72aR%*ry*duBcHI$joynfL?+I%gLVE@rxM8Swc0RL|whXuK9
z5fbBC@0;Ys>Df`WjMQ~iqi)r$AuF;YND6vyG>(&!-y5UukEY)2CvJPX3<CU;<^7>F
zt>b?D)Yx32u;}V**7j=}b|hZ#xSUSeuOCtYtTj(US9NNMAn=knZ@%24+Q?tJXV|uF
zM=hP#UVGIqeCKv=+bt7kA~~bRH&k-O4HpA#z6?M0WtT61>*G|D<CMR(%0+UMhkucr
z3ku^4U9Za#{u5YKp1BaS<0p(TM*m(X3=c&vi1&jT+(2bB=^88>an?y{Wxwp+eKq=d
zPn;U4T?4}6%SU+r)4GBV)S!0MRU?~0_@6qydZta>e;CI@kM$TNCOjhjo7#wr=@>c2
zq*1(1X!)uERozPHP@p>GmKD;F)G#M#*m(Kw4Z}2$I7NQ=Kt5z@c*vJpMg;Bum5b&%
zKhJZAy#&2seoHq5-q{1*e_Uf<(GTx>Z?xOK{mvAl?CDyJE6cf=e^RTO_dhJJUaV}0
zrF~!&0<dLXpnk&|+(<Uc-4!`5aX->MM-Ln=J|MK(a5L+_ye4+LtoHcxymB}0u#aaO
zbv9sS7H?5)$|8GsjUQ?rCio1)wLEm1nVH!<eQq`-_IJc=!gYFV^DFWLdpwiHnYFop
zbtUcg!*%-VYJ1Ar%)h%`t8(GD*MIL>)7ktOO5G;<<N`*i+J8kYCQZ<GNNiYKCLFcg
zu59&!tYH(WP!WtHb|W5$u893Tc8H5xJ-Aqu3sXbN=FL2-F+SRHLUdf{)-=hLH#%5Y
zi@}*01w~?fq6ylO-N6URq)JXH$8S?Hl0!J?gi-e{*68H1z<EBDarki}?XdTl`P&Yi
z8<1Jw8a*knDGm=&BPuf5r)hSWef-Xx@OSNt6Z578L$kw%!%Bxg4sN-y(Q~f-03y$0
z(8=i2J9<|PF(WQ@yX`4uYa9oowcid76(XV0y4i5saY!mDCP|4kWy#Qu7YK&HN!~Ku
zp~h6c@wclU%xr5mPC^=)JXVPa<cZ-g_+F9tQc2~Zk}x;Nclk`+k~346aha<Rlas(S
zKNbm^LHj*KL|v=-pdtU^1ACHv1zawLeT|CZ^`>KCi<@&si~L@4ZLyCLn1MK%uKSGg
zR=s0BXBb}UNz-m%9ARsp!8?dm25#mRjjo=Z1~i=1kQ-aJ^(mk@X7<mvA4`1J;*;KI
z8bU!M#ID=S!*$>mxB69?)-BgjotLebKH)f?=OHB|1x68VAw@}SRznseFB|XlRsLG7
z9<+?@o#vM-qYn=%;M5jD{g_p@O^>@{3Q&&xMYNti8VTrsX{}z5POcrT?r?zTJZA8l
zwthg;s>%mz&k|FYTDk1rMP);e!I^MAMBo<@EM}k)XcQx-G;$0Tv;7oNoqqsa2rDhy
zVZCTyKoCqEUcodfN8TQhlh9EHOHS9Ed*OrNei%`Ffxe^=C3Nv63p5l~29bI3=?*@f
zU?XL*>TReNP?oOaW58nX?};VaSLV{a^5Rr$Nd?(+9O3N=I>`n_y>kTsFZE#xK_sK#
zIDn~wC1G0AaXi~tPf@{wAn82vTU9viJ^!&7`{1YWQEoE+y_FRaBo4%Fz=AOAnznA{
z*sJfOr;9S0i^z`R{H0Pbv!gjb&H@D03>4KAI3!)r;8>u8e5?`lUllC}ExrckzAC`k
zC*BMu7zfDFNWK+5J~OZb&VLK{oDHa*Y{>@P(W=Y|;<{$;n6v)~iO2nR&mai~kLwZ5
z6QpfaFcZ*5amo5zZ7Z!ghy({I7t(`?m;>+QK*;0t*Wl|vCSJKr-e52k4u|a$%>c#y
z=C^~%o)6-|gn};EkV-)pb$F$i2Td->z267K^({ax1PtIQt`7th{0_1QfhB|v$r+4G
zIR_aHPb)x(U~MlD3_%YnD*|fKA+lzEtmXu=@QEAY`WbvZC>tk~D;XX_6fwUUFJV|Y
z2n!6umdaBXUd2(b@N#;Xc4&dh5XnKNn|!7`=FUN9%eD2`hGp-t8`g?_bT$afH-+R2
zt4e7Vs85+Z6C%tp6BX8tNkEUp!7oBuN~sHs#8@V;44VANrsE9Z7x!V$H6;~DIGk)L
zxmZ-m)F!Qh{-=6kA38g-D_M!7BC?{yvfQ&G!LmfN-1Qu3S=6PFrbE|RW;M?C6nvg;
zo1vo`N7T*b?`e-MGVh!W$`8s_ApBxg-XzN}cSB879%eci-85COUox|xwKAPJ2r?s`
zFWfIO^n+XJlay}zOy9vjySUodAzN7NS?JxLf2ziT=D@(afI-9%`|QU2Q8n=71mAX{
zVT|D+j5kz_)XLS<!&gz%fXokpoLW%!V<P9mVKM;43FaWlGLSm&05mpoyMPiNMvxL4
zK|FaWLUn-4Tz!6h=m0pnmZLqQ{kYK|=#_d1bI}B0;0=4BW7xU<c<B`wc5i*O$La}f
z`gPgAR>r;nAIf#$IfPIF`#=DA0VEIw3swskR2?yq;vtYVghITr85-~<xC6WfV_(mZ
zyd<zam;`fpDrrIokUhpao&SgJVEYw)Ux4cm;~vu07#F~uhtb&s=$41&mtYt0U)H|K
zh~w%PK<y0*I>$2*E;RV807O^q5aTI(pPKpiHOK`j3F#iUk@*P9crX>qBA}NzQ<T{)
zRDVZEhgK6fPoW9^RZj3>7CU|&;1LK!^+RS(gbG2K4;oKg3{>{BT*NQ|Cy$>H;GSr`
z2BroCq$mhL11=gMEQJ*p1yY8MkMx6fJZA#gJ2GjqoM@P_iUOmfsgLsnE_x?4>zpmj
zzx-V}H%Rm;e7Me|O`PKv9gWNX?(u@De~$EVYD4(69#&6w_Lg>7b|rI%_$M(UZR+?T
z&Dr0ygdpO})%)ga7}M^3Sx-v{cnR(CG9JJM79#mw<Zj5LK3?JPHrY}2)V~(kxqwlG
zCFn3hI1L)foE<NoazN$`r6crb4%l`q7`9U2@V{FhaU4Yarce$_{HAaYOgy(x4o*Dx
z%~Qq4E1-c-%Y!HhB)S9i4<Y4xo^cQ#^@WBNSXbYi8)h-yI&bU@PwX^P>@1h;6r1ez
zp}6k7xW+^Rw0SMKJDhnfm^+?%ErdG=r5)&BnY=En=vM!GRfZk#iOqg@2+AAKzdCtc
zIMFYJC*3H7TKD})aztX#jEZZIs&|%v+@(zczGkvmzgN@+)n^0&?KgE*>DOp~kk<z)
z`F=!1z>%zH4A9<Y#3~1%&BZy)MgA53m`Y%)AHdL%55kNEqK-JxHzAfHZBwhZ{1@Wj
z3I1YWX>hI+9b^TL38B83TTe`Nu}|mCk+j(wuHrKo!#T4*HK@Pa7)=(y9Rg!7-zEdl
z|9yWwL}RC~f5wKJnn4Zz@S&tnR2NP1@mZm?2^4xIb%{9Qvm2{(<r^OP=TcnA&8DBK
zLSK7Kd7VRBU7b7<%6+PXe?y-OoE}qPF9#&W!K6Hoh1?`Don#VHM?!6(Sp;A9EfDxN
zEhu-pk}8y{p7Kt<g8GDwY%L0vHjH{tvIx3*WXK&(K`N*8JQzdd=>S}!@Ufsu!dHSw
zgX9Xj;+S=9V*D?!F%gW$m=JnHd`Obc?p{6a<bQVu6T6;My2gkd=FL-*2i&KLcX|E?
zp~vy#M)SF2821ftuwR)sdo~X!-qyZBH(LVR3C^T=!qT*_2Cv}Xp){3mP=;=`$Lz9`
zfoP@6Sf_Z{a0E6)q6I(;fM|JOahPa%5OIX)En}#J-{QS{;R9Gii|Nkcv{eY7YCr4?
zFl1<HIY0KnGT+xb_WF+?28t|ouLh4Z>iQ3Zpv+DydZA$OgUG8^=(_2){UWyl;qijK
z(L&$@k5{Y@BWkVJur$|p9klk_c6l(%tMWz|R_BU|^sCxZ3pLKoR&Z|J3%0J6E4FT>
zo!b|_j|Nhmbsh1ZZ|w7RBbmqZqxgOY<E1&i$Ll9Ke*43JbbU=eVzWE{nObA7PrF{U
zEKnU@9}p5F6eVUS7%3VYEdWwaYNYAs>(fc@5g=g<l{#hyAOI;QPYz=M{J7yuPfhv|
z6}C54I1Hb+EG{Mvh9lKsUR*4E3FA#`ZE9ooTMS=rCQwbT=~P1^wF}ioO0PL=b%-^e
z!0}J`fPPms90ZtZCu(cSVY-Ju(4fbvLvxl>lkSBu!9{uPH~9N@?sp(akO-8(o2bG@
zPIKwxs&&JMj2z*5+{viVg_j<-B_b>;S6Y?z$lqMbY{0_F*ZHW`>X^_Hj}b8Ox8vWo
zpunO2->CpJzYki&U+c_$jU5Dm5WmiIAySdWc)!dJQ2N9OKVRDLesUocf72I&))^6?
z1BP(OizE=e8S6{GiNmtVu;~Z*esnOfn!#V!Bq&`0m>w*+6yy%;AlbU_7TS&O`)7qg
z_@=L_*~C^YxXYwA1*}of7sRLZdaI%}zVK<9trzps>oXNZE}I~7_Ds-T93}fPe0MBX
zS~nePSsX70N4gpYO3F8nR*H+7m)H7Bqu~sk9PMo$;)kFvEQE|jjLt4R-Ctle8uOQy
z@CyZ1T~L$PcS}1HKk|O6KiO!2Xr6PHh~>7bbzvRdH<N)3$8b`evq^2=<s$1`8STj&
zsX}3j$0@M*)L$>uT{C)WHQcL%7iUi$+&6#*?Je4CcV^r1>h8^(?~kKxC%^6!{C*V9
zsQmX5!%3V`9RA9dj(35tbh7(DlnMoxJFHSH{tqvn7SDNLP7R%azFwP+Y4`7lLkd5h
zmk0aI84$T<UX=&saV0Rhalg_?5M`#Vp33hZc8b+KXox<OzigH#M>|gsy&tVVS6<w^
zsjc$%%@_#&POy8?R=j$DRF8o;x(PXWi8!`tIJW8Ax}+nHT9yCu{v6Hnc~C9B`4By{
zr%&=2oHhdSy@&H&*@mgM=p@-#9RB&)?+g0@^o8+Pi;J4$cm&oyid(VVLU0Pu&Ib<;
zf(|Z*_(Hkc5i@k5-&i8(+H~zITec}1J;KfZnqO-Q1cUpsD6~q4_bnSd&yfQ%6H+mU
zmK(@CLK%|!GEjK+y-O_w(|b;S(?E^FSdea<X5AHvl6`a*r@-YLE|>jVbeNyLFKxz&
zL!}tz29F}s5I9~Wk(;qxZ6IT%k*UN~Vx)7Su`4ah?kmHwSTqF|%ikZ2QmwesQtioF
zneCn^L6Jmf=2epBSg{<VSKWTEZCH}-+QB-mW^e2o@m6kf>8vEv$}$l?LpE~aW{4-H
zlM$5xpl|<n%fVGUB?%}0?#sF1!F$UO!k`R<YRaDdOm3HlkuP^liJz-jW;kcCHhX5+
zCnhU=yh`)hkQ~$h8m+X}X&>-;1BZ^3giBE|#KnqhKkVzO&=exB6}JFL2kMhznKU>9
zru$iBmAO$@uq@Ti$T@x!$IH*P%jeBf8#t9plcgXj)a@O}=ZlIaBK`@sowF#J;(TXd
z)Q^K@$Cd`x&oVx4Ka*yRvM%XZpvz*+B%{ScIyU7|Mf+x{)lz|p9&kRMh1BAp*NBb6
zy9hi?g$wwtw`2v0<oHcwNZ^^*^wr9x-ND0bIbR{ejpDRs|7}<8V&)X7uQ)%Jzh~&F
z9F@|<{Wc)<x6TaDrhz!%Rf0Ns5hxD>Mu0CD4uZf0u391BW#Hb=i8u<^oIyVU0s<eH
z7#YkMRrx=)ykttHe90ItxQr(A#eAtaKJxz-J}06%VN%tr>NFY+qJk!8xGrq!=E<Mg
zocjKbMKEL3Y~8j$?2SjU|63CJx=AdMN7yeEykVJnH30ZpH=L}7KVvcD47;1L085f)
zTXtToG7n9uHb$$|oW@pdEorVc(Ya8ceUC&k3d?>jNg`Eg3g;q4WH}E$Y#3rw?b$}Y
zxN^q&rrG2R+lnV2bl5MzR#uOlB*v3P$k)rvrG10m$nFZoRw{9<2*hfu0!g>3DISlE
zZ0_w?!g_D?n{EOBaAVkH1c}Q6wjaQnapp=F849LWu5c8Hu{@F`i9^ap3|<=*U;M4x
zQAIM$g2&D?V&puyy0QN<o05bO2$v-B8zj1~H`>8xlw+6T*Uqw&z26Czk^JweV3z|O
z)<lz`SRL3`5eR55d-N}t0nn$H0H04(M<JXEs@il$7WAoe!&t;5+TbO2d}nU4K4MHS
zED47F3CMJHW6ODuT9%|(^n+m|<8j)8CMlFF)*ssRGB~{-LTmlgC&D8<wP%(HO|nZ0
zVZ0N3rnE;RhQHn5ys3`fVW39R0&~kDZ@<$WE=Z{QrUMFb7Y+%3G3?FC!h#Wng3PK{
zO)EtoChZA8yoS`m1SvCBV|>BDB_XE5CXtWSA{wj!NNbiIw^7hjx*!nxdSY4ode!lN
zPI;D(sY0++Zlhtu9idkc5>2>PE}W&_G6;2=Ggn>+glAr?>l=gmO)G_Sb)grfNjQ@Q
z#PDMr_lz@$^PaM?nMtJ5>qp-=1sWnU{_yTp?`8`p(6mwT;TdX^lgwmM{*=`S!X0+~
zTbN|O99>cI!~+{@1HXWZ@F8DqRnohi8d--)L(yq)dy<2~|5F`kbGwCfMVV?oi-?CQ
z`g>$9!ok@TSSL+Htt1aeDHq@ElSU8&fA5wQ(2ZHZUTCfl8xvg^0mZ@`fnJh_p!DD}
z{3{$Aa=W$}9>S~x>i9@!=0cWP)ha#Z$r;C!&a;}g={Yi~4i>K`R<Q)^i8LG2RhLEy
zuj3Ow<ZAj7zu_0Rs0+W&C2)>I;x+gw*eU~2ou!ihJ&f<x)&Na<3;or#>m?9yY6JpG
z8Cqi}#@CU(&9a**H(c1T@P|P{^0vS)jX;g5#L6c(nbcxJIPF<g)tvUHa#xINS6o0o
z!*hr-&AFn7o%RPTq>CYq;hfNJPv07Gup`EckNI$2rmt9OsqFS_S<c4lTIFbb*>rqR
z1IwSWPormj>;ifu#<<{A6VUqB{sVF2+L&d^WuiT-3fdG43K4q7dz${F@v#v9wyub(
zmi-|qf7g1FzI5lQ>>Pr>+3v%tbFsn=LkY%-(4l0~wQpgqD0IioWPq(ab53Heh6r)y
zumPoWq@m7We(K-nD9gjV3u@K0xx({oPWUAX25iZg#i>P-qP|>f6Q6}EVWWf>gzvWt
zx{~lqI~&d)JDQ{Jx!L3>@z*B=e#p3x!5hjg)(n<|77Q16=R;S5(d&)X^sF{;Z51;G
z{|t(ZbRm-|V%g2jDa*^>hGIa_oE!m;@y46%r2CQ3RAi;(Y38Im7Ncytyj|kMXie)D
zj{C^7x9z2c)WFGr56HArPIv8<p~tG9$r(nns9;?22G8=4&s&dFH9OnvpOg<c((p=!
zmE*b)|H(deG|-GT_~>a|U|SF)HAM40J_dLvNO#z1CBeLelfJer;l9egHhM^wCvpbc
z6U1A3hHDsLI3LL9QBF{A=*u^44KAg-Z<7;O9hT`zWIMNTOLPr^g#HjTCTk5bIxkEL
zQF091{-&d}X55EVBgP_)77JCI442Fv+vt&(ARsEgs_n16zi+cD{y;ERpFo7Vpn&ox
zpl_(Mmlwbz7XYmnLZIdZn9swa%Jq2JK!DKSXRz@W0@z((m60zfOW@N!pU^vx0k(F7
zy|0Ls6__(U-d;<v$VoC7jR;oh1#_PRNzF9{vMpvCcSRQ^{1*Z6*iP)ex9#tVMm!)I
zo^}@U_`OY05q~7t@=EI5_9{l;K?Y<J?Yt3_0I9Cn0A9-!jvm*mRfLCzdkD$PC^Vq}
zQ_fgGba1r|s<l4S){Hga5X7U8nPTm=lf1O{IQ%pyTwDY?pc)NRg#529@a>NSQI)An
z(>KjH<+nfK_na-f5zeclhQCLYTseH)<+tHLmgz+M7B*n2WY>wcRRh1uh8ZLcoq+gO
z#K^WQvyjdU3%HSF7G}HHsh-;*a7Z9qX;yd`%_X5QK-fx`#Az>a(hHI56=T^yA82KA
zoxU#&q@Y=;qS^*(MYE~%946e<cD|2oCDqwa)&dz2(;UE_*1=PwMFEq<4*}m*RYOc1
z(7a=1LPw}cB=P)+kwFUe=|I?#<HeV<J@vuEkdUb-+%J{z(JnLiwX)`<QiG|bd8$n?
zPVmh$Wfh)4DLr^8K`RJ(5=)YACP(^xYh;(oCH4!)DWd#L^YhrKkwtrcabZzfi(3ZG
zr^`KjhvAe$yZ2}4<i+hCJSmouX(Chx)6T;cdvRRkH%p9M)=Hug+QK=C5)v*E!wLT2
z<E{PnvBmbY_pc0ps6`&dqCtcz$xuN;Ft{eP+*~y$#+QqSo|?rroVtEb+t+&z+<5Ar
zQ_9P`FRV`3DZ#`<*>v6kRUYA87F`_XUs+E14$b}8LS@4k76rKY2gQh@Il%&m#b7(~
zQ`6%z^EsXo0qaf<DJ!ho5!Li$Z_?Y><=C6Fo0}uBE-)5_>Dt$#uXl4KdVg4AADUYa
zKpUqMjQrB+qF;y{MfcDqUCxd@KziQq#c_wXI&&R%SjvUXADXugmjx^|Wp;o_AcmL+
zK+ugj1PM9S<p3k*)5RkK0vse3w{_FFjg<=YL6Drq)=2nT;d58$N1dzPhuMjU!~h`i
zFde&^1Ml4=wQ)JOqQcR0A*&BPrGYzzTm(J)#a?giB$isd?4ne;;UHlXyy;lWAA7mO
z6S4h-<30)qIkrKu%uKB}&&lRYU0O`hjlAV9R`7c#u|uDr6=X-*0Y^&Df)qZcV|9-l
z1)X}IH^d3})<|5%k$!O+v2wns^j|kC4SkY(?jG@ib{R4zEJkL#e#qc~xQei81-Ek}
zPy7+=)9mWU&?Alqb)e=V%+!*xj0d_qcr`wQ9?&lG^6pKYGD!fh#p@r(eag>Uzih4r
zwEaB%WqJs8i>UW`Rj+Hfa<_mItvTD)mnDM%2nAN};MEI>EWX9opih=)c>(l#<Pa%n
zbcUgB{~ms|>f?;EPvkt&F($OQG!O1^1k*y}$}XPbsxAU#U^NPiUC&+EmivRL%E2cD
ziXUu#cXu<V)m;p$7lcPpQb-I=OxUX?5ANN*nnYY~A3dUB`R6fF<C|)k$!S}XL%m*j
zIZ(oC>7F#`DszA2l$KIKnpJlM_#}b9&OP#s^Mv^3(-2a$RQKf*gfXx?m?dVFxQc?P
zlaaGf)lYl34UAXw(58FJ&slv_d+1pLr=bF|SrW9?Xz^qO2QBi_Jer<!JVRfMFt#Vj
z@X<QdkU_BJb!-}{1Pf&yju}VXFzElpt-C_SuOl&%eY-;jC~^Ba)}03k%};&o;)A3r
zwpV1D#=)5A5Vo!3&Vx?&Lm#1ip^wiS1|9)s4CyU#9zeiXs=Cwny2ze<2r&uUF}BKK
z%s}Kwf-1IJ>K?B-q&|2QjU#+P3!O0b_8#PNhP_7M45~2Z<qWo01^(8xZi?_qxuDHN
z$DDw*hUhgD>h30p5SW@yD;mAHwLyHyig{mY+0{6jk12RFj&^%CdKZvq$#`1aFy4OG
zZu0NHqts!Q@A%zGw*F%cB)ZLIz(T3HD+yc?HzB~QvQ-!~(mb^37fd7ih4Sb8!0e<w
zq_Y;Z6rSKpJiJgGfM_cJrpU&n$=+avS0uJ6^|62<9yfeW_&xz!V=^msrvQvB_R;-9
z?cW(O(m@<fBVvw;EuOTHmy}>xfQdxJd+-XMpcs3dUMo@VtRXg;Yv-Wlt8{YF9pm+b
zSmFdusCRZCoe?O`%iE1>p7G}VdK~>NTJ1w)DQw;wR6MRoSlB8mR)kdqlWWYcVqMiy
zI||U@n(wxUPga@Fz%sQ5MDGaQ5h{-GfPy=&Kbuno&NUK@L{<(ghL0j5a4ikSi)OWl
zxGSGQxUBZ;J1TlElk4Z-u0~Q{rkzlS@shSA+HwNH(g5oE6}dXmC|{%OY%t&mN#%{E
zPkCT)XhcWFxZsC33uqGufCmUlUKIM_iRXOx<2{WJ?tEb|E71#-C#&%Bqh)D6vz*__
zATzE>K)^QfJxug>y!GtwGRbW#jXAxXY(Jsp!x363plx0w#XiiKFrEmYx~+CR7;xW3
zDZiCGFk|z4gTv-lWO_2xMr}?|5N4|Qz&r{(k}dF&@0`*-XDxSx*%LsQXw^rk1~;QK
zim@I<@}L^t`-K6w3+f|jd!8M&b;0}Wa_?KYuL^<2o(v~p;o~RyMcBkC>kQr*Dvg!e
zik=$Ba|LC+=B}RXUluT1{5ziCB5$b7(h}@dy@%_eI|4fB&q|ki3)Ud?=vS7iv8{O|
z8oKzdkR?QaEOipu{k$@Yh&8|lY#Tn3@;)l8kBWeZHVIOSKi1pU3<MbW(Q)ao<pRh>
z*#k#MoFv{t>!$^X#E0EOG}C(wITrevm%0;ms@>i<^H*m(d0V$x#|f>&VPjg*4q@-u
zz`pfuynJ4<2kJC&a~)|3KyWKmUzj-R$Z>=f5$E}=7)U{C9y|P|M1tTWAPR*%LszuH
z0?s*X2?i4VDzuY0xrb#$k3}pb4dv-$vPYsjF8I2n`|G5v#2wskMOg50$OTfo*r3``
z4>!(;7nCp!vcmT;;~nV9-R*yD#asm>Hri|bj>_l7Ce(zN)x9U6IHF8`>l;B4k@QUn
zg)%8%nx<`FyaP8wJx#2gHgQX5LGKZB`vq-;1ddAkhE(pQTdH%B`8QI^N};32M8b+1
zQPp$D6dN&FcoW-zH>6Ot0mKJsSyc1N*)m>Id^LLRee^=%36oEaXQ<HK>J7YiS|lm8
zJoE(V(+);L*ziiF)$_1L5;HZ&B&UIp7TA_uV%u?+kjkf@Ty;Q?u<53hTGX<;4sfGe
z?WkY~D(Lgsv>C9O8o>#vn!nh29)p6Bc3UA1@eK5#U@s1vsnp2xOz>DRGz;lAFlqd@
z3*ToB5_{Y7#UgvdUX(F(+IEgLlkOem@mLj%+MfM3Bw-rKbd4tL2l72AR5onwYXLt?
zcN~i!cefRe3S(J5%Z`j27183b8*uS@M|v)C=4lu9HR%8gkUF{=<9O8!WV;aM?9JWs
zY^9-o`U%4xPfNRQt>{LyuwIsaF_(a+c}IeyG?Ho9Q@j!`e0IwUD#6U@MuwyXE~?|5
zEk>grToz@`W=Nd?RzFA$21V@FFrQt~Z+*ED&U0QiZGrqP*8D-f?s9SX1Fc$L-!r;N
zhj1L~g~Cl5?XJ0RAiOdm5^69vjhA|ZV@(8dKDH9uVr=FU;WiV~palO}+_4)%2%Qi3
zG&xyOR7t|TyaDmv9AXN?`-X1DALy~^U-BA8EL3;6Z+>R4@%)(sL8nr57)nT5u_O}z
z2PHt-zx>k+J^2W_I9xnczn0F6{My`Dp0!$a@^Ne3n$~zFW;q9*3q`k>Y)X_6F8MTt
zZbXT{!aoL~i2xUe>M4?&=ZxwAahsP7^~WGhc|kC@HL!pD?gnR?`GkBq2K4}LhtvNJ
zzq9~G1xcNVX9=XY@Stc-L_u<_7GU6$H+sP)5MqKzs>P+V3}(@S%g)xbps<b|G8JlT
zUbFhlTg2rSTA}S_M`RX(ISKsCo}l6o{j(5ml+fCecn#au-SuBn#cXdUqImc5NkrT?
z6fJKzPCpcT#Rsww%FZm-7MZnV9Wv~3<c<1*gk{Nc-M5WeQlcZu%H&8dp}0A1F)SIU
zz{ovQG0WeICbUzoV~<PAz{H6p;U|w{h|@^daB7D)%GIA!PJTl)lu#&DMMTCz#-or6
zdBsFerY@8kt5}+wq%Tvn%5!twIWl7^l$FhXx5LI@8?O{|+CQ=|ay{170yje%qi>tb
zho-xyoYE80!VSjp&b@!1mQEEOyN`6yj--A8wj52=Wi|F2sgqI0Yg}ck4%&}25w637
zYQ^1Vws}FqrMtTYR-`X$Rn-t@f;Psqm3*&)>r|K$pQZod-A#_BAu%f0NpLCKpF<q!
zOiVVHS7uR<4scqKjTY3J9G!65Rd9Gx!^#m@PGD9j3eRcI@pe|~DQJ*-zNpaVBmThv
z5$if~MM_#7_UZdRhy3!eqZDaF3MMwqF?!pR9T}ssv6;XS1IV%c0MnKf7$m1uu&~OI
zD><75gAVwTph|60&?S!*V5fsZ+Tk!~9ZP{KgCYJvQbp~-6v)QreAi&;w;v}xx%lB<
znaa4Y)y3A=*)Wc{=dZf=nmxX2W1kXt_r*%!qS|0eX=4;6c3cxqmwK+FG7)tsn!-QT
zChGwE?XfK7?VwRL+JpSiN|RQ<Fc$zD4)Rk=<&Z%F<ddMEK-JBc7yOGraK645Ux;;G
zKpc*IZ>{8(h{Yb~i%Wu|r3|&c*iC3a!h%{D4LYN;v|LylEPU6ICxgOHmVAM3n=eLP
zrW2SL_0e`lGFu`DxOfb;R8g-EK*6cE`IpqQ{S+u7mD~f(qi7p54Tb}e-J~cw=0DwK
z=Y~MbX*PR1;6HpXXwx(pI@pNy&PaEc1=b^ufSYskj{-!T65_3SWJJNoIU7v%1ceAD
zzNH!=(sYpxpTr@zouTV4RG-G`CajMaCh_G9(q{I#FlLO<r&Mv~%DgZ*)t`@%=;*qb
zqw0ciC%kdIEy>acH6D_sTILZ}TWio-fk-vMCjVf)AAZ2|v8yw~o8*NF@2aCU`$>_e
zhz<S0B77-J+m;juJ<!~q3^LGQ;usU`D)sH)npC@rlY)U;>KDrbF`@?ucOkbO7SWvr
zKVZzz?^f=N!2NVD==ufH>`ZCPf!REHmS*R>{H{UAnB6&4%53~i1N5APjBr0)25n{K
zH()dPMJIQRKm;6Yp)ZEOb+=-;dad$Z*;$d$hv74EOhh=a3i6tIyUy+}ic2C>sx)SL
zU;<CGSUpjsxajEtpcx2{0G>6CzJL);U*S}f6}`;SYAhR^+fJH`(C&FZReibLbA<dk
zq%lWWCVLLp)?mF^1h`>QraRDU5f)bf1hFSO)Ahk~8GY0$9Z<I-L;u=XciTOJmE5HI
z>6LvlmgzG=MTwKQ?4&hkqj@pCvlT{MI1>^{An9Es7@Lq9r}?Z<&&ZMaU5?LhxXmVY
zHp9k02Duq8Bj7RfImmH%+XSL8gcY4h$S!v>1YpW(S!i=o3wl5LI?-CucAA~Jw%Mp?
z)-9r~eBz2)lRBe%hnr^`8?ZU7ZsLYCw(=LxhL^AVt<_(&L#z0C%e56>L=-G{ES#a+
z4()g*9Gm-vP|iMKl`dR7y&{2?DJh{+W;7vOA~Y}g1E7!1*9k-PSTJp#5|4`LT;i5s
zHm8!a0Eg;SiJO7(a#68nc*KGK+Euzawo5?xptP+@9*PW5Dmdc>-~(Lo>`Oo|Ioz%R
znK360I(aHn|5?17fH01zIP&5?pU~YDqE=nU2d-Af9FD`<cNwYbX-HIfY@$bY8e7X<
zRBO1oLKsXb(R*kv@#rMp#2Ik>sR*ag^{xYsgJ2Y=|I_rGjkoKE^YlIoxE#GhKqK{n
z65t&%Z<)f${aIqc!9a58m7<snhbg{SF}F5GJP~l7F*l<y5-hu?Xz^(0;E2T`VPrlf
ziF64FQ_4La`EnlP!UV3r#(f6YJ@GJK^Nk9{k`uc6wkggS09z(AO*48t8Osej0b9xg
z+xG#JND?~8bc+gC2njXiU-0nQ$Rf8Z>%qqp$h*FHTk>1kzsAvtx?n%WYz1P}Y0UN!
z=$h2-W_~j^PBTBKy0hSe$vH!`i>9E@8J30Vnf@M!(|nugDUT^SSL;#igl^9**FO=<
zCg8wbFda%n2eF;-!6#Dcg)gL!y1%qJIdFNnwf=+`+8fjWP1%tEdOg~gx|n{|s#7XI
z8ASpwcl1WZM2F->r-}g_+ZtarC<}^#@X6>TyaIjmNtNo9ne=!ojVdZtUb(ELq6w+0
zPDgMCKME^tx~97}yO}ZOZ4e^ysxFZxyNk~qoY3`FgIIZKl1zk8DTOHFXKVJPFHM~h
zlT54B^3Of?kKNX*BNuYtOfurFw!U<12%&9BRCYw!r3kJ1<7vQ@Y*3Uw&(FN`tC@ZC
zVB_eV#sal9Zv4=9^v)Ds^0gLiW1po5UFx($Lh|b_MQHqhcdV{o4)k`GBDHtHy@-<j
zG{7Ghf=^LA%Ht-mjHgHnaC?+qVVY{jTCSGAJH4@#{DTJIbQh76kPYBHIPWwNO?WUX
z{4hUVof2w#4I73+`j`}ZkQiMd6!8qKY`d3&)NQp>!Jf6=q;^$N%q{M4MCbghSdPjq
z!`rz<^_9lC`e*`emFcg^{l|O3-k>qKxD}p}xNvM3lr-%1C~_fWbo>4#ToM<9zv8@~
zP~ai0)@9?Up*kMOltcPHE=*89F;gai7uy75eT@>s6om^iG9TNZHBIIio=s@TkUJQC
z{O^S@7-u1MJ`mbqFze*Pr*>#JYyXA*)NK8k|GG@n3@IK9It64UJd)cBWkImzPNnDy
zk{Q$}!XP)KE*E^ED|;tLek?eLLor_I$pYzPC2AUK28Jfw7^{)CKp<!p;gFx3!+3`2
zM=YfOz(p`E3LlSOObq2VUcv_XHnkXzii7M|rssFq8sD?UYe?R`XHLM&3^Y>JS$}6k
z4(8@vpTw3MTkiLHS=YNcJ}fN(*t7Vu<@C)S=@4w96H@JHp)L7U9gF*NebdjUGk8nj
zwCRsZ*yg$Btf+>2)Ag-^mDe#t%bTEXjYG~2@8?rID2H8<>+^b$R_}cep;*ToXl@jZ
zQ1VGlAXdciCgbCb`?gK=ZJaqcClwNZ*iC1!khXg5P+nT*IWa2fiXLL#2(fGIn-1nn
zHA`+KpL!Qf8f)K@KS`9nE#RUj6lXGd@0zn0PcWGHOAZ`vv|%i3`vtU?FD6m31gfV-
zKQt^;^~CP&z1Vc*YVZtsHW>EjYG~+85T67t>T?p37jV27ai?+)gG9Tj&=4-5v3s;5
z8t&L{5<Bp|`EG6<TLsKIIHtJc#J}M0yW~|t;f=X>&V6t841cFd^A#@5ue0TLy~ZQI
zmIZdAAN6nQWQ`q+Z!4<O+adLT8sU)<Q?T=FMdVGCyKclc={cOpp>I1*rJvN*W|n7m
zC-v*kV-d`6h)yR1;~wGAU>H+kp7iI3A@YqLJmAZYx!d|v0DLfv*}n8!j=YF^75S(i
z))vD{9g9q6`eFb`${r}orY`d(uq<~Sh9+%dO8=`gPE9E)m-{RN>nFCfxSh54L-bgO
zvcU&attDqB?AUZZoJqC3_VRN(oD}94KeCIP>~e<&1Ljfh*SM&^TaygZ2lC8B*;Yi=
z4%sN9yu3m=*a4iwd5wd~cjA&j&d0~?$t4bAQ}4SR`L}%)9tucIJeh|&D}GI~l{kwO
zoJsC+sLIZ7=38u^C7_a-FhsrPWT{Oh<z;P^X6=zuKRXh14o|6X?}NF2afklDzlhXK
zyQ7%u`$!n`x3wU3FG=iC(@WK1qaPCk5#KPbHrYX_gt&z8D_qp5{1U7MzC26!R?OZj
z3F@)A%}e(a5Mak+>%4CbQGC7Tm-Wy`&YRMnH-xlJC|vK4sgt&~p<XeNN?z3w->FDc
zjcJyUAN9iVS(sPTzL=@r%0l;tkbgtMaKrZNN8;ULs%o}jUx!nuU+0rF+IBsyS>rw>
zTxh#28LC&%`r)wRuW%$@l4{YJeYzatSzfy6oo11#+y9rVWV*k!6R#iT`JCfV<<qR6
zCAp9vBIi0_v&6H5c2=uHd_i$#sjYG1X(Q?-{#6s>@RJ2X+JmDZEzRxqwQa_|(o1L}
zp|zuYN%zrB?U`z)-QR{jMNQ6EB!+h8#-iLe%fQ7)X&Ln$@rJg=_O$edcF>{6kduiF
z8JS9ADoG@|l9cem^0=;*-p~QkI(!*Hi7(Ixyn)e2Lr`Go{M}W6TBf0i{{w0lu`hOb
zFw>qYCeNEKKN)Pt69?kml%rmx20D9IKs9S`#cGn_7rHhVUZdVxc+z*?Q1<x<@}pN@
zXXx%rpWX)obg?N<H<AyT{wggUmX98A>JhLhD0Qi%F?m{CFm^`?v+F;2dMIsB=}xDJ
z0nzvS-QBULa+u#v4~NtPI~__hGXr=uhm=JgiGY0my*~F39I33=4&wtM^}t6CyRtIE
z8S3A^ZId&X613g2mfW7NF?%7)<~miP^EyWtI7t+h_7$Jso3}(<%J0o@Ci2T`i)-IA
z(^3<m`0Q!UERiOW`9sAAMystwB3+aD=q<#Zra*L;FyjyXkK4ZlskY$13_k4q5~30W
zC;BIo5*|)Yv`?f@CnTj#O>)FozGPMZ7K&-L2SC)<tk_;I*S;6D;HceEn?~D|?@V@i
z_5=VMBfZu>-oNRI9zF-tu?J9an)+t+E^r^L!yeETX)$%)*AJ$KTmfJWKTj4GFSqCH
z0@ebcUFiYm!`^@$FU>=@VMF}m`r(Hd%gDo&hjF(44xJqV9~UYX2J2X{Uf4R;!O`H<
z#Luq;ptIwTOyPNwQh9+PXGF_xgoqGb=1ES-5BEQkAC7!mfXx8CE&WLWmVvJF?2KNF
zL5U5;FW!W!bGmRDrS)v-6>$I3Is1Ju8)2^h1pZz!{Gg)Kt#?#UkFMCdw-}|_2zFws
zV|kt<CJ=P<{g&PM`@PF$d3huHC~U|!x#4dGZ2T&TG?jwZ&)8p+xKKB>sC~$<906~#
ztpuc5GInoZ?jbhUx1pPhn8LBRjD|GRO4#+YXHTZTJR_g+irHI!zkRmszIk^R)-;z*
zTF4&Io9(UYNDI|;ruZrCDPsTAavPqLeq!mVjcE(s`;HiUgWwte7Qx0yX30eS*#OUW
z&R+BY%cS`{FwZfTF#ot<COdHVQcYFnxPDBu0g4j<w4j3?FG!MLiX};67Z6J3g{VVn
z7^oY+ZG&S*I<$TIk9^an<+=GypgBFzyBtzr5+oCf4Qva)PODQ1t>T)?{G>JS9`_S>
z=lc_~w!(w4V6M=keC64Sl3(W)^8HJxm%4r|Fe#TlW>{?*_(c1Nf%J`RgUSk{<iijW
zI-Y@wESSl0MAmsT4zXgK-~5m|jMhkBm$x}1w0_GEo%Tr7&Ak5$T}xooecA}q)K^tE
zH;QcZlwMg~?p1GcHBn~V2xpvq*Gk4x@5{Nx+ZwBxSm%qa!!`z1duzLS2hv#&uA^5E
zLl6=omaA_d?H#VMvmTJH$kMy1^U(EI<5(vv#>omUQkuhQE&7U*V>=#9B!tfCs$3JJ
z>slrwh8c{=ZlANXSN>;mUBCIN^N(?LOmEY@R%slvk_lBdd4+9a^Iud3RAo+{rdRRn
zjd!FMud>@!f!|=X6Ge+r>kuk1|1Q2Kf3~oS%NLckPw7@wEz>+v+PQ<vBG<jIX>nxW
zEK{qjYN=8*uO!Q1AM04L-iiiaHma!o6E)8lGN&CzY?u+Nd+A}$^2`vMC(Dp@{q?^Z
z2@Cvc({6OB_)C=w^89{9Sfsek8?0mf@&6CfA!7ZDV$k@o^YRZ*KCGKDMed$3e7TB=
z#bH<D;u3FNy&<mu*n}+t6MbpPag757n67y_sD!iUZjtLlX~|Up6}SqfF^#9ZwYj8Y
zKgS07;9+e)Q2FIW<VolFm%6?MT~sL@RgE@`B?Wwo1W}IE^4`7hzwF3r1lzZ2F*Ex#
z6*^A8C<sI$3KKj`@6>iB5qHzuEPaDyal2NO0~UE$oEMb=CFjE|JOPK52qgcfHtwvR
zp#L#~pBq>AE>%c4L^W4GkX{mINzXq>cj7T7tVkC*@b}vswMEj(`aS7Mu1b7u^5fKK
z(l4C80fk6EF9bzAPhI?5f8rOp7zk}iR-Q_TM90ehNZ6;Z*&n7e4&+9ZJSBy&H_UWs
zV{u%Yek`SwQ47a$E#`YlEEad)+nnrQy@I_e_Ez@dWkWZ|*83J%plO9)5&yHCDutlw
zj<^Qtbn3*N6B+1MT|4*D`|{sD`lKDyKf3LgsGHQgFb(6=)T#!9M5@h1_3&6*MIEuV
zNmWa9@o2u^r2Z~UGFL|R7w>Qm<R%BB+}F6mfJ>fW_L)R_@IDyf$B`1>%9mKUAGj>Q
zQJh-{zR}0SGQdba=RY&td2?g<_9&2T)H|GK3Jg95BYf$%c)A0jUldb-Oo@T&&%0v%
z2w!kjN+_-is3J}(+PdI}U<8P#KdD~^_d&p^ekIWkU_Zcyf$mH}r}Wlh_k?){aw`Mx
zn&vPU=)jj?Y+xjm!z-Yxkr8&k`%vJPO}WvpsRa!xxLah`5prk0%D%_F^>z$`N*Tk&
zLu6Xxxk)v<M{gnSj0TcK#U~_60&cvJbDaBc&!EtDs^IouV;zkqVrgPS`p-*cGjb5d
zs((UtPUu)Ow`<ZB>8!ZaE_XGQRQzn}UBWsW)%7H8QXDFDc3oHgEiKH2<FPJsfQ;VQ
z3#&XPKIoW$TwA}N70kf%NOZLB<;MdKq94u#Mhh5Rfk4MJJ`<|)@VoV8cV4T&XU86X
z$g(%{AjHr4^sGGLP%5!rK{;7G6;p8<fMt?C?>PG@`A6v8FR9_gRZDe}=Vg^pYkXiD
zb|Lvyolukgg@$BY0$g`iUv~Qy$43DEN@d=qKnsSt=nXOiIxepXSX#o1^XbGa8zViL
z@F)M~Had4C^~0E=R`AypBA<+Y(MgPdd_eXBGs#DaE1ggG*e&ZyvCT{xc&X33XExEq
zp<XZ&O$+Mo?kxqa>5uxy>v%N0${CA;_*t#la`C`X!4b8KT|KB3Y(3%MR2IC-jbY?~
zz9S;*A3i-d8W7Te<dro{^J{m<PNsXq(UY1rZya-eAl9c7vu%xxWa4vvhc-s}NapE?
zdZ`8Iv3dql7g7&eN={BaeNKtlBsI*|#OyXmNA?_rq-^RKI6W{M0YeIXYk?@(TyeC$
zznn{U7*w%oMT?~HB!5@S9!x|xZZYWFa!}ci{hr+o1QNj{W;S!dx!6$a4Xg)<!@JX#
zM)+6-hUm?6u$Wz(OsO1DmZZU=c|*gzd$J@?c+_8eWa{Y6xdKqO%bLLM0EKy+JP>G=
z>9Q<j*k7P0#-RFwc0d6~cD7HAw58KYd1`8Tn-(quRc?sU!0j?k#`)~Ich@%gDT4j_
z04DvJI)$)&eF&BM+|iNuIyWo-bq7P+#9>ZO?qM5;YMc=opj=9TJzsa;P=5E7G6MMc
znuF+3q6SAc56b1=3tt||J<YK&k|9VxKD8DCZ#Z|UUfI^uQaI<r_0fJ&Z4hX~0G{wK
z87;N9qzjhVkg}L%)`U++#y05j^pVtyF-3Uc7|0IXlV#TH$O{F|Fb`@xjC=`E$VLHv
zbAgM>nSEcxnUEWhidD&kNCclaz_u(rR|1Z|?-|G3k~PQ&%oS<p#Y9Aw`nGVeNHKeW
zgCI0li0wWY>BrnsQ7ziR3aG$W3RdzBev@KR^|WB=J?#%Jh#ASl<+m5K!=<D@i7l)S
zII32OhnL3~R-1V%{*h;AfU4gjfvOv41t*9#m`H0@Cfm$d0{ts*S}Ksv@B{Bede8}0
z_%iezFJ|~E3G@Z)1lS8VFd@Sc42eM2#1Fdg&$~GCfo%EREO8;WJz%8|E&ZeYYXu?$
zjI{NK1=Ufo$|qO6s8XCByek_XuLs+fz*_GG=pxL80&E8bi(YBA0c>5uR(oyGc#M}K
zwoO>`oiP_*W`dbO!(445qpp_}eFcN%abtsFLlh3G0ke0z`GEsqThOHt-gMwWb!?Dr
z{hsaI=+*DfOyMA3VQ`jjV~ZNRw=k;yrcA@{Z7U(3=DJBgS-b90d&9*OncESK38MAn
zRbTV{7MYwZ_5tsQ$qs9Qi766PRS;BL6&=g>NZ!h|<Q0G0{f_CCsr>zckCGkN{S#6m
zZpbt|X<rTXY_Fg6mzlK>+Zrw(%Lp1d-lTUfB-%RA9O5<C>|FIK6?vF8ZDl&yW?F-T
zbvk9i)M|9pELQW@I`JlPmB?WbrasBn0BG#$QW4_`@w|tBIDTG;ILzIX@|O6*`$n_L
z{^9Bum|2^bN0D8O^WJTmrsif6NZHE@iZihpZ+KBXu8N%M`Rn)N^ZU=B?Z8BfRVS9{
zr&7qN&f|>HPXi1}FCb;I^Qx56&hGT|^h|Mm__{=1w2^N(QIwvMldoH_R^n27T1l^P
zVk$GUxJ=Tp=z>fPU(41X$;r%+UB`@nLQ2{`A@7ZTB5UgSM7GhqId?F~ptuNQI|{bj
zj@$50unuFp@o2QEkg{Vi7`z0Q`?4Teke1Zoh~_jE6On12ctzyZ?(A}^9<ols=3)EX
zj*~w*d?m6B+Xu#6a;H-trd34=g<~G~l`oVJM|$i<!&a&2T-2cJ5sLZ4_pn#c1^)4t
zeN~wSMNvXYkK5aFUmafcbD6y|V=mPR#7nTUUeCAXRrJA;Ize;^M(FTEz`K9ko8Q}-
zJKsFTpy{*-aVzPptg0E`=!!luzExAzRRt{q3aSO=f@;}tSZlLv$XUSWieDtlS^NL_
zEx>;}S%B}$s{kM4HifEF0=KJ9DJbGk-x8=gZOy$AQ7uRvtVA_--mg<1jdo^8smQAr
zqY3%Bbs#tt-kOk=Qkk79FL}dyH~ImrzBnjoK%b3-W_4jxcJ>&z5OIxarNR$Uo?P@!
zqQ6^RHe*ejh0PvI#FiqfK1VYb`;v>&5UNEt%e$c_LIpY~G<9D>nJOSixk#5<EVdgL
zoQ+v4Sfe8&O#78o_$sF={2Hc;eCno)68sAZ_<Xn)zOYb>1kcwY#iSHg$mhNG_EtTZ
zf3VPt@_3?-Q%}EJVbXO6t|6bUmys7&j3$)j)rP>`nlrN>mVyRGg+{NOO$B_jBa(IK
zzom?{i?Bu5?9{ptxMNF{ZK63!U5FEWq{T?8!f4K59N^h-k05xxs9q6*z$(sB(JmzR
zU^xNJw@&~{Xd#`fYU4E!$tKjtH9aOkpbgjtj{^lw1P*vf+6XbYK?C*rb6`8jK9Z2W
zeo6}aGlpm@DhMjo+}@mJMD-!OEKM0TdqXD?0XpS5xp%db%7L7zNtv^qxnQpd13*?3
zH8nbl$B&H`MNW?nS5=P<7kAk3lsq<1#cSqN)N%e%c4UDLsY8E1NxoRHR3J4nOuTxv
zwocIDn>mxzynoy`yQ2>dZbpP+Lb)Q3ij}o4O(JfXUc5MF4m76!rGIUN(+TmRP(no~
zSQl8x2qH0WnNndFt#4k9A)+m4RXD2eWU*i=ILgJ2r{bw?I5L(D#N30~9k`>BQR6Jm
z{p#t_2swe0M`*oINGpZVJ{@^G$g@53^d?CH`h7(mMxtBK*GN7rU@ib+3LZ&m0eSk4
za)igBuyj~k)3xwm)QlNE@1Um>lhBXvsH)BVZ-PnBIOGcoaiL9<_yR?|!s=wL`QpQ`
zVevwHbCm59IWvCb(9x%@y%wtihUxnjlEf4PrImCJKgPirdST!stwX7-hs#Aw5g~n#
zUC<SUv@iUs+lC*N;@@<<cx&k=Zxt)r8fhD}04)7&|77?HlUzy}>7<$b{S)Y$=vfq`
zs)C5~vCA0dp$7ss40a;s4Gvi@?H<RZ1T#qzQT{E_uz?neWYj;k!^Szc{Ifvsm?rWa
zx9^<nojnG|r*G(4x6F%FB&FzG+0I8a6$Y}GnQQ~d{+;!tkUs3y_sIq_5Iq73lV#S>
zo9#7Ei<9f;vr<})J7v^eEl<Wza<*odX8#AjFiIHYo=3>nI)w?|Z&~YB|B!<hnxq^9
z_J1aMJap2Q{#Hb6NuSmL^{c1Q{t(<?rfixp;)if5&BAfxiOkwA#pR%~9FE?tExv;w
z;1w!ejA}sz8VD-oj=2FxI9VDg5R~^kBPpUO^6)C2{6bQG61PX$#$7v6yKr@M;mHCf
zHIWT-JgItO0k0oh6du?>*>T?(;N`5?>SgRJjv#N4046cZSn<xphFX8i{({Y7GW`7F
zeeChMe&Zqn?xPTXEVfgAw-M=e4V~p#+*MPujSvv3GWI%GrV&KvIv4WGQb)$7jp>FX
zS{?)vHn;azaLUe86%*9SXqD9E0{(G&xdf`*#v<9EB5C9OHqw*R%iFN#j{b5koeNae
zl^lX@z{(0hUYxO++lCO#_T+<1e#VYGkwX2KjNA6R<Wl<oXy)87Lgsk)7Zv$Hs<b~)
zdlRD*Tn!X!y>_%EvHkei(mVMnoc%g+K2SwmR(mrj5Ss5%GM|yWG_K#5yyUA=<C|~$
z#vkB9l*?u#2V|ca-I;~mH_$G!I9UZZCQNydfpBX<gE+0N8}Q$DUm}oz=69%gQ;m#H
zK|?NZX)9<;f7A!|f%Rwzik5kv^@mpUV?#3>!&f&oe61wxW-vdh2LCkGBMystOX-JI
zuU5_9RcVAnl>5?bSKMP0&`EoF_;zzdjSn50U;sOdi`r47&z>BtBVwJ^*#_Nw9ol(q
zjpY=hZVj8t0XAXny(rT9WPCfU6%L+yP&H_L^yT<foBq2!hpRCpPJ{l{jXRej@9D%x
z0Rw~ZmzW7Y(u$IWbkAvd7fMIzgn^g)ylZ9y4HorWG08Nqp84)S<{C#~USSQ(_mOC}
zaDHn?VH+J}=D^=C<oYO);#B||UYnnu5q|T6g#){h7#4|uWg#J<sCT;yyL8A#Hj7pr
zk89L&%Z>G1UTeLaoAIfz&}i13iFA<_)<`UjR#lMxRFd^o1y^idd02^4YomnGI)*Kb
zk<@(0DXP;BKj#2Tmsf?>g;yH-?Te09!qXH~vvY2FK6%401Z_uIxNo2?VO0#;Kcnq9
zs4_kWiKt*APy%K}SwvJ+gk@xmRYX*DR9M5Mq%Ql5bTnFw=QbQ#19Qk5_8?_$ZmJx~
zx2==#K>va&uX0>D;ctlJorE_ZQ0?hZ{x|=~D=%TF4F(~TkLULoDYYKF*_q-Pn&0r_
z?ELKCIX-yo^SwA^4i}@rN?a=rwM^Xvv4o$AB?KZ@TlwJKmi_>lGR<&z76iA#m%`PG
z)w1nmPO5-poYI$rpSLYgU((M&9SH7sMNkQ(!CEVTMl4Y`^;)!e9Fn_Qqpz_)M6236
zLBR{bn3kM{j{wkL{>?UN{y&`%;<F@dV=jfSG`v*!?9#%#d=r^U5$~SKu^qgY<2XZV
z3M2Sr)dZd?u)RJ|<TynrR8ph@BsF|xc&edsXuKUcOPocvj7&Dxhj@!Mx<_@UAx(4X
zI^KFjf9d)$f3WL+U|hLs?bTyO+S}g`LW(r{w#BuF^d{Th-=K28B$O~U$NjOLeh%&H
zTZDeKUAd%Q7E1h7p^z?g8lJnyr>b!!wGW0A4mu6{?ZfAv32rDVrn9g?JV|{Rhu@jt
z*A|k3nQ-d7k&-(2e+(XFMsT8kH$?Mr%0iZPi!hn};I>&y6=x*%d|Z(qPMkU2@3a@s
zSY@?j*l#7Q{XJVWD-*8TBtjr*6Y{*zr(NG#S8W~&tRK(uD_a|uv*|3Vjt}W-4<5rA
zqVyY<J}7nFr^F4~uf`t`+~hr*v_*qPzMMMv!bpq9_iwU+DDyjBsVLAXNwxVc{RzHL
zfA1aR<c#E=d_FC96`>^CrOJ~2j_x|cGVmTM@cIxY@E&Nt@F!hE-Z`mmM0Za^{zgt#
z-bMqEwC_b6(}-icPQoWgD6@%Uxe3*6#F=+>i$gy<kr}`!ZqQX~Xstq%>N)ziOV(pz
zI6Pv%dy95Fm~sh#)snXjFaGXuE;+o4;U0=F3;8<V6(OejcPEu)24Wgqv_p;`ds}*n
zn589Z=h1`t;FZkO#p;+r)v=ZvVyNH+zFBEGOhT|IQ8;VJJ2u};Lie$hrtPzmoF0F2
zphwio4K*9M?I<A}j{Z85(z5FU3_Y}<_<@win=u6*dh5w#G5<3(O#a*&D2O(V;M3|@
zK^5eGeM}avZWorqY2=T|A^8Y>G8WewY9uFes@nf(0wt}hNBMCx;HIQNtv^|tMC<bk
z-ol^x(-jm<`Oy?}VTW>Yx#N$kYB6)gq2b!lvG{1R+C@8L`J0!eCK;8Vu9?mbFn=cT
za%QctVXja#BF#SQe2{G5NIeU<6w_S9HxxAKe0=D-kBA5N(1@Z>e>>e{C%Tp@__`1e
zNPeunhi^V9$`U7%&ayDJ@3X|{2$WeNqP&|%<L{qAdw^bLTTl2v=3AW5!{bApq7~^_
zy4po6^w_bNWpy$do}r$`3H)918~nA<@qbxE9oW7QN4)f%M22-Tkr#&W(A3|gLa$||
z&C(3w$Z8#1IV4$-+;_EH3R3drRnxlotg!zEMoC}T0Qqg5ZW(5CcUxD=y@&03tKco9
zacBTL<B^1KnG5dcch3*g&tAMulaEad7A1;gE%?O3-4q&AdaoZX6IAtM3l<1k)%BSX
zskfm4xY~;r2Gd2aeYohGfb^RqDj61rRU#qOY!&GEwg`&LJp={1(?vLhYIst5#(M4$
zg^U~jchxXViDTJce5LQpzMai{P`{UnGCfFaG(AV(^{g8HK=nWC^kxnFU)dzJJx}mF
zarq02%pK-KS>sH~-<DhzYEy1hQ8Btt9{@W(>G34UO@FXUWLBiB>7ct>_UkkhtM96k
z@<_p#<W_ObI6aE4k4n|2HXVv?emtrDU%88$q7Q6jsBz+q<mq!V<kCasN0(Phss<K%
zelwUF{d0cXetQvtq-4JT549z>b-F4ZYHHI!XuzS!4Gkz*@QwtgUBOHUuL75{Fg`qH
zK%r#JrkZds*eu>xLjqiC2~RX_SHMiCi)qz?bn5LA^uAO!len|8|0GTqqZgx7^r`yA
z=$4BeI{)|NJR5DI+2gPZ!OFk`Z=FqWfF?MmoOQ9DG<#y(q1}GZ{+@6i>o;k`cY|7~
zn*tu10K225uZWYq&;K5tlcGto>M~06NOEdQYLv^uG=u$eS+RfXb^1b=zm=NQh2JbR
zo;PM}#&lvB0XBEO94Zw*l3aDpl6?Oy0)Z$$0SV-P2>Bx=N-eRoL0svbk>H)WXPVxV
z1ud91M{}VHY%8|1a*wcwJ9SsQKad=cPmq3m{}daoBqNX!_JzLoL3$Sz6ozUY1w~qv
z^=@UgKCK_LH^}Gd&$nk1=VX&;7zF2R4+Ca_SsbK<*~WmcnN+I^$+ck{)hf2UgREXu
zgFz!WS<>7rG3(XH-k%{q+KD7*A9l|u9CzZ$ZSSf4>e!Zvk|G_UZ1sYQx<mi}%I*lo
z5*y^0KF>z?;9~5ZV*&k$2FP<yU%K`>=A+8T`yx+_D6y;9d{mNbd$S)pFPote9X0S$
zmm$~OO2=yBKg#)Drvxfm5d1ER#;*}#p>uPH;Frp0(1(G$>UnkGRf}i>g?)%M1PNbs
z9Web<;h<fk`<AEWaA3AMt@}jW9f6}yYa&~)WnjGNRApv$e^E?NeSA$rWkW?_Vz}-|
zPMh0^;tKzA2C0(qtN8j$`W+p91N-E)nHy&g@h_i9=A`GUVWb|?L9KCouXg^(B-qHH
zXCuJ*Y#E1AQDUmO$BO#Cv5ar+lXX6R@PSk2;|Cb&=*q8p{~}e9`cNI{Yrz<VivX{I
ziApG8Vsmx=Q7Ccw#KHJ7W;KsQcu_vug;u)+m&{0JMd(jO2H5U`_X9s=(AhxTT*K1a
z-jb;~@y}S|`GlABYn4bR8z%DXZ2l3ieI%bw`AEHH>^K~Qo6AP`#PZg_(DKFvI|Gq{
zZS>LBQ2*-Y=tDQ?xcY0x`AojUP83=BgSBjro!Cx?$3Fe>`a)dlOyZ3L*g2nTtZor8
z*V!H!!k~LsO1v#Gzf!L?{Crr&wzeFAaE^TB^ul7->3_9sukV16=3AX;(R-Ax=4T1`
zG`6BYsyd8SGEYymX>O5EY8?58)Gu>4U8dfgx8^^>Jkvd%$1OrL7i*6Z$BX!`-N_Oz
zYF%zb52^2V9<SmXxGeUog&>6on44dLigdROzLkzzC6AkXY!rtmp^6L?`SAh!x?85g
z1>Z`Bf$R4ku7z$>3p#XDU8hpu%5_6Bn-Fm9^H(nL;48nDo^PF+`EghSt>Dw~6?dFO
z{ezNcv~NF0Nils@#VLCQcP%V@a=PR!-SJ*heO)=V3RPuoF-x+|>SV1Trl4Q1UefI_
ze1P6QIDp>%kfrL4ITVQlYs-kU0BKiy;3dv9@N@%!hj*?Sm&}diPUSJwk8R{;=Wo<A
z<T<7kgx<(+pB5Dx2wT`O(lA}W&Fl-@T)|6Ow{D7ZR!diFSTw4JtxntheH@lZrdoaC
zJ0t48>JKyy=E?=c`^3h%3s>lF$(&g=?@j6*^1l@fP;SaA4W388)1&-BxhHUE14(hs
z<bNt#zWc1I&~T4&Q4~7|Fx9TpEUJp70X;`pQ}E}+^v(QS)+Nzs=rih|XhIacYnIu1
zD)bE*mXsrpQ9|hKl}n7M@>u{24O>hWCp(42t$d?>DrjVktWsHNsl{yo@Qm}$?#ZpX
zQe9pfEkO`lZ57SFZ=dS<+lH(K#whk+Wqq@l#FNt-FV|QmuNQ+(R(Iy7*8z?_7zK}y
zz+gqRDzbs}V+J-C_4!Iv(ZawZLeKFc`5BI1EC0}&)E3nlOxSIKi}5!fD7Y#o44<dE
zB)lR^+8po4diY(kHWJ)}{0)G~$Z(S)sPwWwN-|h7$xqWLyd<Wc2cC{t^8X(3h}@xE
z);J3fpcN8_5;Yggx_sc&V~vV*1e<0N)%aFkZJD~|J=t_zWN)ZjTGU{$A}EKkfA+)!
zB{JY_nQbiF)Q_FoqspQ9<4h$ucAxDGAX`+LOx5=J<1z$Xuwahgc-(J^98B7NGPk%A
z%y%2HN5kGoV7p?Iq~Eb7>VKIu!*Yrb^w8~fqu&xhRI<C|2;Q|S4hPv(7z`S^g4)z5
zqi<(?zo56ldwjHyI^pHYV#9}|ES0{Y{S!T?A=bp9BWI*9ArxXVL9h)uB&?HuzYASi
z1JGPA#1;u}St|GH0f$kU?NUx}J*lkPUYLr2ediFu3Ml<Ov|N^~t&ScwRUA=8va{UV
z82=pdL_@;RlF~=0esJ5IEP<-ll|%GS&P$$x=A!cEb5Ud|seS2MjcM_Mt^3F?)$|@&
zCVl)Z^-Ji(FUjFY(C6?>ptoW&hL8CWbmP0^^c(+?FFr5SZd~7j-$N>~^WY^VXx~%`
zsh-}oT@*Lg_RC?jQNvkY5cPgv$IIcz3y!xPa%VbjGI5yL-9NCdIE7HT{pAzc179C*
z>aXC^xj_A987TI2`D~VSRf6<M=#!A?<LbR_YV~>cNJmmfVd<!V`G8>etdt?!*vWko
z$~{@DvZPh<exi@Q_7%aG4h+FQ+!`({+MZP6Ffc+{Ajr>CLnTV(^>|AMZ{^?6zlXa!
zfkYgt50R1JuY$Qdlj;|ED+{qS@kv_VZNu!-^n$XS^5E0w=S)q)#e?Ya%aZw!admtt
zzk91&aN%TqEO6Nh%FW}hTItsJ))xecf>^cPzM(r2OnV@RZL@nw+U(f0O#5%;_XgJ{
zTb(Af({WJTymqaVFgdtK+zYT)lLQ(~{l~LUhnt$slnyGw_U#?I0!;%=Z!I@AZf~k0
zQFE<gs#P(XGSuy1N`DVir9js0hijPpf@|N=hZj_|oBW)(L_YY(v%5>^c0)R!!5d=J
zRJMul#M&D(EUb<SZ_N9W)L!%cfNK2*-KSZr$w2wc`=HG3In%uU%PVT!+a0MAS-82o
zq($M&-k8`D4e)w1G=|zhW#PhI!a|OJp;k}qX263BoCp~S*W|k7&0C@Rqz|x~ASP&6
zD-&-Q9)x}Ve3~z=FhCthtDcuA4J@9j=FjOi)GG2}R~|J~aWSV$5y4~i@;5NepDrSa
zDf7fp{I_~k<#O&&gO^yx+%O9cj+#s=Pm6Qz9?iY`@#@(pexvhT6v#pVPUN7T9SoO0
zpM88<zb-v)E@I&6_d2g!1}Ioh)HGu(FwvYkr9I8&#X7Xr6zO@i`E(gU(91@FIksUG
zL61QGbnPV)!)ir3>!K{(ck4o~e&%G`x|E$!h1m4*a)J^5wccJRTCH)oH733K`-h0V
zI<!Sg>;g2&<MP?x8J%YIhHbpYfp-*MpL+27vss<<DP?D7#F-rx6WAu@SXP>0ODYT0
ziib?t>pikaT)Xjd(7UrfG@~Om{S<fyd9*2RfGN(`5^<2xG^-lAuo&Fg3mz0qoGOa$
zsZYV@;%Imq`O`^}z!%;1d`v=!Do)#8zWY<d|Kj@C;(V=24l<f<RYT_&A;OD4UqdV`
zB6G}iFb9{D3<@Y{y+{Y(1;nIM6;?ue*P}OeA6z-_YX4eppWMW;Pn8_R&0`Ma5h^Hn
z`_VZEWq;|y$D35IQ2xQ7mxr`!iad=UcYn`}&mJbrM+u`4`8mT#dQt3fFGU7Q5Ji!Z
z)2qZ0nX3;9tl!TS1LTVF+u*;8>q-vr2Q*?OCL@i*x`$fXws<^!!A@Zg-m&JOD~bRL
zkj`L=K>%xyW+jB@gp{B-K3w&8>5}l%sJ`P~zF@70#G7tn3K4?(pO`}wTp~)}Q{@GY
zHHcwE2xLSICGrcWnoO>O{&&r$C!qUp_f+>^ob-jAw8-V;aZXw2*7r{KRrhw^c0x@H
z?A0@QsuMxGHQUr)o$bcjlLCaA-TA8H!87*q+X-Sx>9Of~DR8=nkN{I-69Hn<T^KM%
z?q~vJ-NV$QgLj(kffCl{co&FkbsqEDnRqCEUR&%WtS#`)&8$^I%?k8*U2%yvUZ*zH
z|C#tPAW$tN^1HB!mh*Dm6HAq&;<>303i`c)_)s7)I=QSd-zC7nx`rKkr+BN}r6~^t
z!S2KWq563)ZwW5!t@nqnTIF$}+-0lAjg$2SL4)vojmCV}0K<;ncoFhFe-90lEmk*t
zJli>fH3AZ^B8Yo~gvmPBd2J{z9XFv}wY)YtxMv_94{nBRv%yTSpz>^|zkX<<pgq9E
zTyIZ9;|w_wJ~u<&7?yk7x)s*Xu_&}eXJzakJbw+X1A4{%neG(WG^rjq&h*a>oQ!M7
zn-iATRUUnr&DDlAL00bhbFbhn2`d+MSB^{g+Q_EZ<rLIF0`??iSOXH-3F+0jVObuU
zXd>#&jSZ0AK&i%DVIfSHXkt3q+ZUKINERoYfeZk>1&on9^n*Y0fIQe&3eqT8UR$G;
zyBPt>jO`K<AB5kc0GMHjqNYaoo4Z$K{%vWoD{S&-!&#)ja7uR&1=kX3Hx8E7+GK9V
zNuClC??r?LBKYKtLTc%gxkOMr;#=qZpsreSqK#F9t#NCpo4C)sZ?Zc2$&vv^%*PR~
zE4;ZZcHHRXRGn2v;{Z~#jj)?#Wf)A-8$!n<g_;P=mXHjTouo(uiQ5#?i<(~L!$Ab8
zrZ?@VWim1^<}=*O+jUV`W!wcHKM%90d&~4CQrFCy6wTA&iq5&TQH>5xo2Xa*|5-RA
z-W^HOdZB7NzyFW_GmI(!4N>G|Cl}wEPw@N~W}Z^4*vik#E6Q)rdiu}~P%Jh%p&~(J
zP`oXR+>3IgrTlk?*mg?LkWJCPLQP4sOB0r+NEYVS7w(f5ab1NVUN`O&5Z3WE+x0+Y
zJZ79skSOZl37!vkDQK_Hir235QM*aGRD$${zlYzbx`965m5nfw`8h<eJF!y^gZKgE
zhhAIZ06jK?*v9{)YTxyZ;%#KRZw`E5QKxsRHkg{A;ud-y*_%od40u?JVC*oS4&)D7
z6q(vP<@D*Tm<i<oK;77a_NeD)$oRdLqWDklqiSeHU#fTBI$%b;XIB%bUo1Ct3w0yG
zyzqfX7cahv^Vh#xaScZ>Z_JAhd9O`!!Ek~NA*WN`l${cg<wH@PFA*Zc;G&u^nf!7a
zG5|||%rrkWws`HHuqPd8C@~@Ud3>!uTLaL1M2zM(pCtqvyC=>vfHQihHsH5_05gS@
z92lfntv@>wos2&@x$n}&*!ubTvHZ~aW65vRRk0v1rz{;v<w4<`;g=wFpuL*xyX>pZ
z`1jpi4WG6s>oGufHLRLZ<906HPiT$*vwiWHq6}tQs>42+t}wp;a~iE7-+@;90qA|T
z{j4y*^WPKSVB}2&y*l1@@vDL;Gh&|yFj*<5wO&p<sFe%s7B3U(5Y6$q0G^=g0kT*0
zM}D&tt@Kbada0;3BOqdd=?YJw-|IsE&Q`=S^;<JEHTNq;{1rSo^a!!_a`fQOA^skI
zn%fJFGa<57?(CkOSym%sfB(6DZqP6Y&iY<sbB&1Z0-()hzc{O;91@zSRS_ZIOJ92n
zT8=8Iq_?qy+-YoFzeA$j3L9H$-gye&3Mjv$la!MYG_{LY((W|ZYVFlv%@E~+;X>B#
zdn{29uUZ24DsWjxKnDJIRGq-vXqntU^bUv&{Rft_<b3j-0VncXW?I&4iHp+*tSut{
zHzJlM_1=u$LU;!O7BWLPcO&;-jgcfzQ%rD67TaRA<NhwW-5I#%g+gUzd8u;osk?W2
z#V$G*I7N+apRN~*+Xs{j!aEbupAC|;5w%|}A){N;3c7T(Zhc3TanNQiCYTyu-nDZn
zQa_P7e#`MbtX9+rl9Q3Qph_*RdVHA<u`a;<jQCAWEa@g{T3`yw00+uH?o)pHIyX;u
z^kN#tAUjVq%~akWtS)h`HmAC<Lc4TR9&#Y_Y?J20Az_y8xWT#&Tb!jGchr1sc1=-*
z=LTP!Ph+bZxgt2I+R27xyK<uvK=-k3Ozh_;*xrdtpb;C`Q`4Hu&h%5hdh?3jLe`Xa
z)^^8Fkl9Y+HU0B$q$y>^oPxa2Jba94yroF}IIk-{t`FFN2uOSuG!DY&I1+7imCHSG
zw~ID(>GN(k({&fIcIlC@DHkU@1GN`&_BC`E62@_l-Sa9${ZQg%7kenV0_$=#Nv%by
z2wr~BrZMQ7u*+1EZ>i_Eg!g`7DB5VshcTd`n~-f`AS9!padf)xhDP=0g<r!xY%X|U
zk2Uuun|BH(__X37<2=0&Ei?8%ZZ3pG916;5PEnkS*8sQ~SD{saqz&kx3T4s_bz2bl
zojX0g7Z3zRPAOmAPuf{Y)}~Dpf6eWgIN_oN+kX4DC4)3Q)FWOWucV3JAt@h@Y?9EK
zRh42uc!ZR58GxrBJsBEXZYeXbwThCZk^FW(WxK=O8W*23XqphYZML%y_)QxYU6IyQ
zfVJOmTup~yzE2xW+_6Q*ix2Ayp-A~bkfsq+j|{(`h)TqFNA>4LPz&#QOX#l;l9b(^
zVOU*U!<j2JGee^*tx1v&$0T_a-@fCWmlb6h611d6FNRe!R08pzDOGG1nj7*Vkn?`%
zZ)s6lQ8%Ynh%*wjRxRUzZMM_%da8nwDAjC1SlKI&<uA38j&zevDN4-XCGRTr<gCb%
zHs|>Z-ubLqz-`o8fNgdLiVBc03awYX5i@QJ!hYjAka*I?68d!#y3%rKK+P<B79+H|
znKr)eIfcju$=EfHBwktrBPX#gUmO;iT%kSml)wu4Gx;)DtyirAB#uJsA;BEi*<G%1
z$0i=Df7Vrhc%*7(YH7LA2@+^5A@0x})Y~Nzw1W=<yUEcdq(?+Oy)+dSH<n;|YL$Ej
zIlD^Ul?o{=gQiK62US>r!0*yrI%Z0BsxWD{s-^nI6Qt}Lp`(9t1CH4|7a|2e-{-&#
zW}H+A;iujdI|1CyT+JB+klGaBcNzYB<|8aJK1^rsg%k}mz1LAlAcd!p#<{|Qv0b~&
z{yq?Gd8E^?E#(2W$GG{kk+Su^SX!`QxM@4|_CB$8Bk8QLr88?t)^{2^(vd0{lihRJ
z^9_L=k^}L5SQmWU_hxo>Z*Ojh{%~UVQ036TV0=o<oub~V*~+lX0CZV>>xfk8NQW_$
z4FQw5SHEYjsUc(&pi|s4L>d5ak=DFtrlBE1aoJPl8$?<ys<`%jGfla|+vwzjrKJac
zJsF9%{fOw%@8I+BM0|Q>del}_9uHsM0b)&BMH(!vGVNngm3go{Nn|*4g+^0Vt<_YN
z@U;#1bWH<46wD&|dG{>2!LHUb?80KhLXtadntpQ$4yP|6y2U<tG06mn+6Q06hC9nj
zZy0{b5@#_UJbCTJ_I9}sLCC2#nfag2znr35$wAASDNgF}f%ohG%U;dVEouDu*D+AI
zUNxOiJlrun2X!Vq=pDBAxo>h;nD%WuM|4>u4%gmWQu(*P-%Cq?%*W?L@Abz?&JL59
zu}>dHoxiKbL_6F(TX7BW96YWJmXAE&T3CJ)t_GHa!?`9Ub^i$c*)a#b`dwAt#|yEy
zciTn6K~-U4Q><ySwXjO=nUM9uG!B+^0KSu<Ep5w%a>4#_^p)0jKc#nUT;I+fbu<;k
zIcUByG~X#i_@Sxk@pNrqQNhYe2kmLxY1666?d~`L>QkJD?JRExskYfi@z|L{s24D}
zLxYM$VwEH+2`5LDVdw?^$K>%1?HLd2+vAOFhdR>I>pQ^7)lF9WY8r(uBL+M!_YGg@
z#2<lt8YoR?p(_^~ls9(WknAsX2ff(s!7pUSF0|(f;qRMvdI%?6CL&#-uSE<psSucW
zK!cpYDHA*hL_VbT&7Q~(!6e_Fb%m;&U18zZV|5x|DBJB_&wW%j&rFN0VDnOjv@+bV
zKLt^j5)@t)al2s7X)e#K1F7_Bn^nO^vGd2`IzJw%8Qp!#Dg90i;_NXjYgm0z!KySA
zDx^28It#FIm=7u<`>$VF(`<<u_?=8eZAN$tcw5GYUkrWDO>*Xtkm<9tPDyf&SyXM|
z1YWgc_O|}i`O4(_d8ETz@tTHy6GPz1TLKL;i36al!;q*GsHuTRn!@37$7QvU`3N&p
zLxa(05lZW6>I>??+vWi*Ae~v*%g_ZL%hlo^;p3G$K+M{o!(XB=n$EY4a3%}q+x4qI
zMTgW5e%yW0aIs@jVKjI7ylLr|_@K{$T3g~0n7+Zl;-4Pr^Dbk$wR5%Ep###8x{Ar%
z1X%sjBLdz9GA#DxRth`BqMbwbIn^xmg9kv$C{I`9(;Y@2ulYgICMpsGnBOJN%|M2s
z5GG1CX8R*C4HE@{iZS5a>+zQZWD|x8MF+ixi&td*wJE<p?Do!mm9X3DMPfYfZtTxD
z@Mga1s-sBxY^5MQJKew<UEiAPNb}&<3P7Z+vgK-V{`2hZ;{5Hi>;Dgm{^yz!rHQo1
z$}8S7)ld_mIH;rCco{+Zwxyso^4!+kgqoexGAgbbV~j3~k}DdTRbLWbLEQj5K*Ya5
zy_PjE;`o&>R^9jCmC<gp(OwlSpDvtNkY{xF<Nh<NX3n5!J^=E+`)vU&^R|XdN32|K
zYp>CYZLLa~tyLWRfrAf?l9jLd8ar`YUrmx-=Er}asY@+G5vf=$hDbvoNHomO0}CRa
zsd)}iPKbwr4@1aQ3F+-3$!3p2=siNHSqCI;ZZTM)tss_NI%2cc>3VBKL3Hr4ggeRO
z@Xjp(y*%qO>R2xVY&aYdVmK5LY=}E@CzL^VI5b3eC^T5-O|W+?9ZL}yDt63yS{(N}
z6s!9;^fdHWXjq(8^Ew!-`8W79_*bxa>6MSdi<iHy!!u7+KYg~UXu~I0b{TcFloX~l
zC6FfYKOwCbmg&rwkT6&<Dk!$CxNEoAwy4(!gCT)IjynvA*Z-FD;-Ih2R&1$GRzwTN
zd|RT${#Nig4_7IJKq(O?W3}hE`KsaY$e7^D3XxW6^h8>5Pu;4Rc}x8F+)R{vtje#;
zgcX9R*B0`-y$?(=Y9Q$elwqpF#BuE(2l13Tr{`*xpFr?=ZEX+{B8{g2xLtMlKw3>W
z&<>b_t09PZED|>9rSGI7>@bni;y3uLf{B%CLRK#+J&u$g$qVn6P%py~FlBjpAqX3M
zNMCAYh=&cp4FDX|b{*6O>YGI1fMz*mhNyg2!S~ci<H%J2Zc`sRm|Y(Vv;k&d8oMY2
z>@Jx7#}z32H9t=&!bhNWvvQ`g1rR*Xm^@K-sY1cExa3$B7NfvYCkZ;ugh`HZi1g(B
zK1`&9P%hpYA&j&E7IsLQy_+vrf?n({xFdGJnp8?IYXKoy-#!9!O_fcRvj8Wg>R|cg
zB6J<eT>J~33sP3p93bI(a$^Zvh!iVc1z=%A`MAn(LxqO{(?}k(T2#SAR=MF<XMuer
z1*9JHrz;AO*@2)rX5z!VNixDrATgoBKE&1qWMf{79jOnn_NO+cPJcnjYJbale}=C%
zuj;ajlZWZ2U7RnPh>_-6ofPU57{oUyj!GhTy@Ac%j3kM*VVAdKyXGm-pW^_x@gIw`
zdu-wqymYLJ`%7OJp`*ZLTlf8z-uCl3zNuqxQlsqm&A?j`BO9EQYwPQr6dO8tx4F#W
zOKjIj=0<wgDArT@3#lizm!_o!{dOf4`z(2#UY!pS9C1hV-CWb}`EkXbz13U>2#4;f
zJF3qD`rmPi{|NmCuy)`5n}=5dqq2p-zNDt(cE^)lM+Lt9f**fFMY9N!8Qj(8%Af-E
z2i&u5_B1VEiZ(C-igMBGNJbY?V|jTihx6SthduCCU|iNLt*>Zq6_0;S1y`f*lRyHN
zvAS}?G*uw58dOA(rh>L&n5|c_A`rWeL@>*Wb-_Y8|MD-uB)eW&4+)eYfug9q8GkYZ
z-fu`QGx(NpS_rR_>B0V^{zv%njnq7=FYSEC_NLcPQ{s_u^^scv)cPU})Vc59b1Po6
z|EaB`ygW+(+ac}EFH1|?UlQ)kKI)n}Ud|$0-oqL@Ny4;T^YY@t9`;#ALO*8sdGy=w
zC|zgP5mJxuYMXe@+ppvni%JT=KI&dO9f36iV<LN)(P|Nqh&sk;p&hv;Tz<v>=H4aR
zR*xb0M1a%1#h&X3)Ffo9Em61px05E_?r*BbRy82^H$hE2OiP(*>CG7rq^c$d^W9?D
zfAxxSe<tT5f(=F;Md!7~U<za~_S$%++Kz)7Kjx(WkAz?l%}gqF(ilpfKw<K4lZNoR
zp8|yyoh37X$G{5EO+J!AYI<uRwWamhn^Gh;lwb#fGtLs6Ih@#T4zVqQB+v-o7(@pI
zHiDLrg!YVKOR&|6C3q9WX2f*8v5g3}245TM<DTOlYhQ2x?5DS`1_&UNn_0bUz;g(t
z(yvXd8Hh>^!Y*CkUq*~3pi1om@#<t@@y7|#dglAP#f6{mW(bfYX~hwS-eOFJrN1OX
z-&YdnX&2{Y)i_B~6CUSg?~}8qthm^-7NaZW2(>(!u8DmafakuRAM2VQY6&#VR#pG_
zsT1H(<;X!zO{?t|N!1C80r!KK1Jf;^;ek`Wbc|A48*3UY4J@&`O1)Il;!|72p)@K~
zoTh601^~}IeAF`avK<jtsArh|2*#wJxTJM-5ZyZI(!xmZ+S-2aMGdSHK2BvGE0?tB
zOzL`#S*j2hNsmx!7Eu8vOMKr@+Hb1V9IR^K*ut665K`-WU0j`8j-1V<IbvV?<>utr
z)sOajGdF+KcvQ6RItz{KZt_;ydfb${7EhU^m*YR{Rf8^WjZmHxXP1qvwx192KzVZ!
zPinV<$dX&foSfeWZa?`yQ0vq_?wcflDD2jA@0<JEkD6;+Ee3;XRpUV%-grQLZGS+5
zgw#^Ys%)>MQO)8?mO<?GA~j&VFvxHtPJ(dj#cEg6<-x?r=bw+P2d>pujY4L%(3ql&
z5y3*IwTaks??HEyyWBS6AUE_Nv+U<iGh)#t@DT!R-VXky2W(}=c424R%4*3x8+bbR
zAilD_wvc(Yu-ovIfUpbKjhM#mB*l60vHNnH(gy-PeBrg^cTMv#G%^N-qA<`%RQzuU
z_G1xg|G-nxSPj!x(p*(ZL*+`7%91BDW1H6t^0J3pA8tQfZow|AvNGPIFtVz_;910y
zGF_}^dsRwR(7i$MIC!=Kux9U1G6Y^2D-Z-f>#&xK%d{6T!v#|qZ5dBOiA07I1v^!z
z!uk{2!yL~f?NA6@4H6D_E+HT*O2P}W^xy?b#xSU;X;F!^UXfQx6rqZZCVXkm1<gN{
zi)mV~$W0$?Pd$x$Tv;F)6cEdXJz(ym#jw)|`ZkL}xfq3FunLi6x~KRWYud%Cva(V9
z!_(A}>e8~Y>eO}!-<C_G@wk*<jcmAdY6X|(DX!L^fJ;EI%!W(?JKfP;J35|K1iYk*
zK#&OWM5(YGpBTr-L&L{U%EQM)!PL+df_f7;R(6bIl~;~fLn+1kl6`RWHKZm_1|zA!
z!E2ZxgKdbb@aqGZ5Cc(g!ZDeZnLjn&K2bQGnUyy+iG1>)j?F5~E$2cS0#WOt;=B>s
z-ONN_-7Tjg3qjd;+XXglm~kL;60Bo1vNOuklaRzp<oI<mzwx_v=vpYWKRragdAtF<
zu=JKqzlWfs1A%rwTsp$;3<sA!e>yIxzg^JH!6Txcw6p!rc77o?{r%4`e%2%kYPt+l
z&Tib+Mu@Sj9KoC|c+b<tDFFj7+3=Kge<s(U@8xZau><zK<>OHpd=0vldc?FFqm*@H
zm|#wKv_fHz=6J~^@E=7@h$hTO@LGRt%mnH=mIqho{HRM(-<!AC@B0}069cVTnSJ9?
zV8if0VSuP#!2Lm>#M6(1uxIku0>jn$_0F6}+>7lyU}0dAu|HIeX}Q}9J)6!QLEiiH
zO*-ZRwtx1udhv_ILdxKSd_(MK<Nnc2k(W&`8cr={g<0R>?uln=?s*lK{qSN8dC9>C
z@TQn}^%#}`jN@ChVln~4r{`<%OkmvIC*MUZ-GEdbCQIENWw_s+AD8@Z-V|bUEqVh$
zM1G!`h~Cs&>oM8UOhN_Q(*U0op8PZo+aejt@V8#ij?hb*#LJ!!CTa=K?V4|AoWqP#
zcG3S#mXgUUu<56Cs4rB0lM_G!#iQv!gXzbT#(?zaaC5`$BIMeJ?yZ0PjA{T%RXcta
zrQC72aP(_h^vUt>?xTCr;fd$u`F#k5T8(rnb@I-M4Cz)~8^iIdOBOgx0*rUGRN)IN
zll`lg8DZcOaT@Izox+H~`0z@8nd~^wM55eV&)M_(o$cOG^m^C-WFr@E0?GW&^`*;8
z*WoOl^-kW}{=bCON52iwNto)qs$^Qa<}(qHK6ixH9B9RdPp-PUg|WW=Z@;49tM8a`
z=2>7oJn3LnZPRjOgPbETUB&N|DbB@j`K<jaiPV+1tUqU;Cizr;1)=s$D!!*JG_5PM
z@)G7A?dJY#>dnOmWur;Lp{bq6!mj^#wzTk%?W$Jvaz#Q?{jCmWJxp$JOk{^N4UJ$p
zC0sX}LP439_h@%V<1T(uSMbgc*pGcO#^Ck<`{-z~w^p{2tJT`qf%#R|YnwGQU0RYg
zg1ohvz4+m2W8;U_MJkH3zFf;{vwSdsPNET2WVA&fGImD#AW<}tNam*azfRmNHOUht
zeZzdUO5gPO`h9$*|7$^eOD^$#8Mo}B?0DK<eJY=L4m0!8`LsDsa3@ATZ#8-!w_QN%
z6R3zc@nt;u8(cZJN#&H-G*(V;sGWW?b6rO@>w77n+no)QNfxgp5*$n^3N)Bbe{nrp
zT#U=*PA!$<@H&nQ9-$~eMXuV(t)rRqnArx3nRdl&7xtreVcwc`3a#b<<=kTA0Vf_;
zWeLQA6)H}E;xMMYg9*iu6zD3kgr=p4vR0Hjj)OA!S`ETX)-WrT094A7nDM{a8&uEs
zk(}iKvOt&}9+w(V2-#ITmqU)x^M&`l_ghEqyIR~o=0ElR;<+)iVH?F*R%fz#L3}F<
z_#2)5oWwb=WD<yf!^SvydBhq+orLM5y|*}rN=%l?R|N45qf2Zu2Xb$8ZlC|kAd@vi
zisNLiY-*+kO$I%C{aJaMiTs5yS#&|!q-jYl6su!Y`pmxlw-LFuH7XDHqcW)d-6t$8
z%>^mK*2;y>#stuXu2WbnTvzQkm1Z7P6W_`=%DO_wObw#81B+3m_b2U)LYhwAs?pc$
z>wB?|q%dV^ser`o+py`T4s=kcc3PUL8JZCliVZ;!)7c0$P@}Q#pMnBuz*^AbBTD>O
zh9%qkQ};gsJ(HwFx?g&s2tvye1Q2>%UHw`0^*E$OyeW8x>kbdtPdL7Z+e*r-*WaHW
zpNwB6u!s)iW8CBC(1_NaW!y3nAWAOe+nhhb?IxH#p8AAuaK|ewXIfp-h*aFFLorX&
zUl+KGE3%<C;+eU3Es==FV|GzpZNM=M;$8*b*F=1XOEx#eZy7S|Px4<2iG_Q((f?~U
zl<y>v>qF-ryQ!=~S1}Rb!L9Wsz$OBL9vwKm<#$wEZ!D|tlI7(RJ}==TRj0IhlVJ5=
zS9QLHg&e+9ehwULIGvER*0o-3?@06g)bXYRK-d5Fd53Dqpmi%z08kDAP|DsQHl60J
zR0oiR`C+l?0l^g`*l<pZy`=xBV{8s{J~dh+l-k<=91P8A07kfFYbSdwaI@-xLXj=q
z|1-NoI0W%ZTxfghGC-yL3trgAj%U{aAn`Q9${VwUH{Vb)i2v_urFE+pdjZ*BQ1i_x
zNAf;Ex!(N2yOPnvnT3pGlQlb?V*~#Rd|$q?_%F=te*}BJMH=Zs&yGzH0lsL{CCF}Y
z4ds+76YyY7O4#)ps|5BOA5P(1Lzx!0BA&cvLgf4`T&IcMB_AZYGPt%m$S0#)CGWK>
zw*mINaJeO%vhgXTce_`^UpGEKE6Y`X`Zp0Lt?7nU1q)ZCp-KOC4xGJI1-SJVY=09M
zH=O1FKhyJo{Bm_9PwLd?2k%1{iVDCH2%VdvF=8n2`C2{T<<N5Iq^z^AI?<d;SeODS
zQK8W(aS95v3ruSfRn>IqVS1%2nPEFe=lp@5pFeW+D0{PQr4l+>5G68|*B*g0ZI~lB
zOzm^85NxXq+Y;kpNoCkRxAPc+RtS!l=o>TtfxJdwH)D<ycF65CWrAkU1scE>Bxo8H
zXs8$1*s-?RCjie3f&>~6Akej7tVf31n))2aJDcn5okLGlLNw&4$XS@W2=RN1d^1t-
zqB=yCkM=%HulRLFaiHNzVm~bWp2j$}B@hS%MMx7^pr1*5?Ei+gFGY~>^9rE~f#@&M
zF0mAXKs0FV<8|C!%5{u)o8bo6J6z*>hwB{gFN;6_P8xS!kJU{;ZQC`pl1iw7LPSIg
z&8hWn8kRO8hd?TnFyPI_b*>Yd$alIn;q&oCRpin_w~Alt7pcB20bF`(EYpVBgnmmX
z3np7NGKUgnuHBT#c^Im)`^8a}nL?w=V{7{Z<r+as_jY5sHUK(4K|8Nkk8~Wp8KG18
z$x+5uU{DnXtB6rVw6f!gxU{K4dsEc~k&9OM1&7;*d4W#*OF;87%<-<XlBeqe*Cpxc
zgJub+3N-?#%Kj^asB9zJW@u-151X&k=^SiH#-O!4M!T`8afPigPd%R%pV+EbnoHY3
zN}Q<hxW{4y{%}LZ(5X1}iQIBLu}OdE&8Aar0KfspEx~w6I#bCZ0TzLMMk_wH2(0Gs
zAU4X4I=!n0Ipn4Kwf&FFBQnOL+%I}K4C7wz_j))+j>!WF5@H(<Oog<YqmMzMAW1)s
z_pk@67w@*kAX@4p9p<F6f&U+4*!KSaWec87SfGM*m~|n1-I&!+=UWqwE^Rpv2Wv&k
z3yH)C<bYflgA>`VST(Qqx~KUnZ+ML`lBEc1x!zDv@}_D!k?4GlQS@dFtJC~Q_c%cL
z-DMKZWx<G~1Y2=RAtv9rU`xdO>r%hL1;*;cV5&fztNfc4OVVoxJq650h<-8KH*E6I
zFVN*wS@`3v+n*9VY=TaGHB~6oikAD73saCv7Rwqo^3&qP7HZ4DdlC+}F}(yJPM+B^
z+*@umCjh#>?dKzZ7gi?@r{QL76MwrfgAy9fcT?dza4aQo5NOycZFy5wRdgv@W!4^+
z9Eb%Pwna2h)wP|4PW7b?z`~AgM>L|mu!$2?C#oLWh0ci5l&AM#dYMM;VAX9L?Aqns
z^2g~a^rym6AgVIIMA6EqP#N$-pvxc+5^FgpItkZ&0XRaXwKsr_-BfbBw+hCAZbr@o
z6m6;TAJWSwb4P)-;8r7=|L*$+bC?T0(Do36sD#>3qaydo*F}hbRE#DHK2e9L3Qoks
z^h%^);&junBthd@g5ukC(W4GC${t3j&={2m0~r}F=kgN!-v|}ACA^cmKPCEA3+>m3
zHO_zkDo_;$FV!`8ETsl?3N)ZYkN|#OUNM|6KptPMKb03siAv}e8YM~w+_XT|G54OW
z31xEKgdZhFD>Mn>H3d_Fu4GfvEh!NR6{<2DnCHt~K_k<Mb!BAoi;clM<dpy_OA=L?
z9g5NFXvlJPxX~kXsaa?(NmPXkB8bWyFt5|jf*-cQNNP<SA*DL;*+ex_!lR0~ui_l&
zOAxJg9XK3O`Rq=ynbX`6l>~{!OiN?yO#iRXrNaNx2bK%Xuw(xJ?f0hpuLbVi3;cgs
z2k}j#)Wk?H)DjXuG)_k7HsNRS3lgnxRRCMdejM~lru4)x-7O7oSEVmiYHl7ImMo@w
z6B?w{ss!8;%$AdYbd}Fcom{abO}0x=i&!VtMvW+;awMw4j9{uNzI{|pUX&iFPI#7_
zI}eE3M_%1~hnujhJFO2YVmIf0T|$Xa5v?>$@n}T(560_)pVHksE<8LOaq(-#3ILwo
zHySC&4;FZG4Z<?6VE_k)X<N;oRVnl<ihI`sK1=?MXRSU6G~8-)rs;52Zp%YNIym6}
z!rDp?2M^nQQU=&IY&dL;u&FY`Zo}qK7FbrXv7X{$CE!$riZ|tLaJ+M~bFu6*i4)A7
zGT45m5%*r+#KGdw)`;f6^W!&I5IPS>G<{)I*i>cVK;?}sRU%d#4s6+Ni-VG4#VNr@
zX%`jU2qXzZmqFH<z}f1lzoV7$Ep~AvbqP%uG^y%AW{vj1NUpp3Xz)vZSzVZZ=lqRP
zIxHOQGDadIY02~)hsa8yJcEJM3SSwv_;0+9fQq8Y#$$N%w7{w7Jk4kuRt>gH6I&=B
zEDa&O=|gaJM2hXrpP}s$)457{h^QAqv=Grv1)~{hnBSZkt26p(#27d1IahXNpzIf{
zt#$S-qj9K&JuHYyn3#fH&{D0Hf=WwPZ>4=nC9R#dcM0t-Wo7-X269OT1Q(g*snp7w
z!TNY1eJcxKc9;K!=KQhoHFTjgL7K{Ruq$0)P1n=*IdWv$t+pvHl@fyH*Xh-VNOypQ
z&g->nJq4^M$vHm0(&N!;^&N~zJx*So)sei&P;*S-V42i)L_J9x@Ro?$X^@q6)}jPj
zBijDFl7T9EA0_0rEEAJ5|MH{54dcfnI#gwpfW6HKfpd?ebo^m)pv$wmpE>QuJY!mI
zLV~XRgM8ZyX&#eicoE@Jf&bA)<Z`c8eWQ}qs;N$7BmRT5k0wfnt_yOgAJi0>jjN!_
zU>qktYtl=UdyNX_p+US#z?C`Zs(oJ);!2b52szaW3zVO9>VzJ{aVS9{+WPYX&(QA8
zs&7wNiGAgP@t*Sb4lWfrf7}<0ABck1$E~woFZa7TiG$S2m!C;Dml&SQWp^qz;Tv#_
zpB0d{_2#9BE;a4ovKRAVBlCGc$`4z(b4s+L9{}^;p1$<k4DXrcPkT*Ad=4yIlX>gq
zO-Is7by{$))5F*26D<W3TmrIZI?6F?u&4U`+azm4YTUa5%7h+i92vl9wywz8Eb6Bw
zFQPtw*g17Fv<lZnI{B72zv-NaA!dkfCqD9d-SHGfs?+WGhhL~WmWtG{$+3^WJ0N+h
zUfJt_<jrMO&s>>0+NM~xqd%4HMV-naako=HTP!`ocqT%(BR?CD9L_x~mp>&HteaTL
zs*#mb8+nyzQ?#)c<hUHak3-aVBX5~?0THo_h3gyX;%iQwBu-fbfhkJwF47D_PQ^OZ
zaV;stC??{VYpH7p82pr>av((-zwfqay55mHIVW>vz0?xUY@=*)w@+L`Wr=o18(Tep
z4BO!|&!OsD%!{aRFYKH;>3d3BBKjX2HFk2%hi4X0dBfMFPK>5$K?3-yFk&>#3lhLL
z1qpy%)oTp5PWOx*hl-wb2$^%GMTN|f=O6`8_N3@CLIDF}1;r;K0v0xWqxgz84vQRj
z0H-Cs*PIaxXl!Z)V4VeqKqE+i!EC0u`{397u$d_-ZE6aMvJa*}%H9pMXnoW18RL`A
zjEem#bT&f#-NN5+rvM2wY<ocNpK5Fsx~_4|(3eBi_aiT=zDSseSZ`t67<~DL#{&No
z$=)OyLJ^yulYCEWIdt1!pt$s|G9hEY314?7)fkplY=1kktC=P+5`#|wcM)6*e8g#J
z4xAHcJWJcFTps?)v5S)USz>$jXJRI9dk!6Xj0j-(kG4V+U+dc!Df|uTzBU}6Ojy1C
zj&Z%t`y@Gj|50MXx#u<G&w&P8{P+<WKXYMJ0i_&e`qJo*nrJ4z6UU@Ws3g#}RPSs;
z+v*P1GWxegUnjoV&nk~WCckXR!A|#h4m|Oclp@u!>!dfFEqmzy@NFeZTGFyDyxDiM
ztpHHpyBMp7Ck1U<j-(5HIi9a(ypCOGM?2y{kgsV6%pldYtJC%RiJ{}>>l0Jcm)&n1
zG+ZRNB7I64pTRd;U54^0t-W#r$l$4H#G~}*q4CGl8a@a$eN>cgLm;9*$>Qtv$A7c!
zldC3n`;&)GLr<46OUD=5RwUxzak47V&vANQX@9(o)bq<wFU@!)J+31KX<QB36NV}{
z@C6n*$BJ>sLz)g2=+%T8xLf6=kD>RfLwyOWqP*|a+TQP#(#3GTn%?!p|ArH|8h|P|
z@ZE+*wV%QQs^Hib+s>aN<vc2RN!X*SP#Vy@uI{6b#B=c2c#v}5-}4FR!<@NiyB)YY
z14Q&4NiTC>Zf4IqDoz*bj3<ic=4jS1ggv@y?rob_S(Rk~=*8^qU9{)M)=w7FH3LEP
zAX7QHamhxVSLP#4eG5_Jfztt`%c{oGNASWNG|&atXkwfo8Y_K1MrE3<AV(n&i1@lP
zgf+GJf;iII%fz&@L7=SqzGs5<*6!u(JvUD~kejXyVNCC{uZ$!eq0tih6<f5xGt0Sg
z0qfT1=C?jcarZ^py6{hZ57VZ!FKJyFK7Ony=)77SDFIinl@3WZLZAH&&k}8O!=>fv
zqsU&<TS?zc$PA}<F?+AmPeScTR>D@Xh0_e)(7hcJ!gklT%cfkJ8O)V5?y)_1HR;T!
z?`Ud{lwU&_k3CqG6L(T#LSGF*K&EnX(<M``C8vlQNA;GIa7OBRc}6Nu7e9$ZtY`O@
zzdCf}(uq~Is5#%@+8mr{k<WqC!N=qANM7m2SLOiLho<SgS_UJ<=BbuugOYPkv0wqO
z#T2))uk&hq-&F|3B|_-5k((|GIdFz+1o1g@r2lwc{2q=X!GtWASI_~O)ez5FwI+QV
zOA=VHYNiExmfkPGq7znI$JN|2pI3#<+?-Ei`Cn}USG{{k3mz^JICyflxF!yb(|6Tn
z5CgOjO3d+8-0<z~rq2o8sX_=enZYj@z{1w2H&l?h$8_MEVg~TFGb7BWug1Pa(r=uY
zd?NJGTvGhrJeGYZynMkYEJn}n6Sz42E#tpPZq#`(JvsavFLH)ZWRBeqDV=w4rds#^
zrBJyPJ>d(~lhd6#Qn^)@NYT`qeHGZz+!5XUJXQntm3Xb?nf#{>9mkqe<PX*wLuM8*
z&)a8Q>1#xAMyI2N3$Mu?IZy6p!I{`+U~e(@kf~Am2b-=;7uA~=a}&hcVj+&aMw~q-
zhpEaR{KWEIBvdj*CX+5n{wG4~@*_Du*D2heEocz4FdLcQwm!ihR8Iz)DQo52mok-B
zbGk>bC`}|6dwGCf7iHeU8$Bk0xkT;7iH}RV9{^s=6RN$|jxOqsqh_Sqm-w+^DOnww
zgXU2UW~A@k=8xeX(KO~k;;)EkMhuw5&T;F8yt&t4D@-i%nU6MF_&4f_#@xy!9HU$#
z=+$wJQc%RdJFFyMI~)zY#~ATl7(*#;`GnjCuZw%@fpjU!v{nzydm3dvJv4DIgz)W-
zUNu`wU@3`RJ#E;#4E3ibufd4OQI-d!gBj#_8VSOo4DrzrOV6ZZM4YH+P(4p<n=T8Y
zP(;s|jUNZmLPcaG_<-t#P+*7dW?0)}oVY+Q*j0M^rr+SkRAcGn={64&iqc$Y%0Lb^
z^g>>`W+xh&3?K&Xw6?!!l)iNn9x>o`bJpp$=4@KV?yIa9Z%geQLsT7_AjP3eg`SlJ
z7^gF;o?d{8bE3wC7n!$ZBTi|0LNXd7FIu@wZ;bTT?lBp|@97eRwRG6*mg2q1;Mey_
z<8A!ICA$6c*|wqXqML@FW2v$cd7hI?c6#=Op*LF6NAy+a?Yc4wI;E&j&Yq8Xb?$A6
z^{k0>;qmZjT2NOEY@eR}Mm#y5TPDxX3SgKQe7bFm)%_cFQ=X0@fgC|%G7rk9=Da%d
zwp@zPQr>Kg@->So&pTbe5n4u}kSCe+5dxdBv?WlXi}VM7Q;0{9J9{%L@VENtUAw)}
z%D%I|Wjz!$!X=+c_KN({xjy;L?;mLuc`cHtwYX7A=V+0ru2okWo0rYkum^wjZ5OX%
znLX-zYbVRmxxy!uOMjx$<jL2IBwFZ3EpjuSJ6x;Bp4>uRp(zl*yoTQ!;`X~<x^a8$
z78pn*H~yZH%iR?yl|3t2Zi@5F-Ht2KrQJ=2rc9!3Ve9PjsC*5X)VI~6X@O28s%uvt
zHCAh0Hs9?%_^WSKK*fk>4Sa9yWI6kC#Z@j{1*;3`OVGe4>eNkvZ-nP-<=XPqpPDNu
zInTJQg)-|Y(Ycf?Rih?<8JKpiYA%Ng2I&7LS3D8n_}?F{Jm2-ZCLejXwV>1<L36G4
zQD<m!f^UtW#S!lp%~}_}GOP5-*-YEGr&+yDQ5bo8xAqG`5<Cc5J*&Z%2_C>5U?2Fm
z;Ues|AYXux?{X3Cv~P2laf>Ep+<C7kt$8Hz-%s|A$Cb>vbokOo=95!O&lSX#?@<+L
z)o^y%3Crpumu2=KKbO1)tCohZX`ChA=;V6xeW`c7a77?T1(3By&hfcU0i5If1n`zk
zCD5=9GN)I0$vxI_C}MFnLeBU(7XM*~-hbP<=f|sYmX(L6wXPE0;r{wSHEe`((f3ry
z;|`z*?TA_YF9}=YupbV2D|x*=&rj{gC#C)Qi$-Zgpo=>Sm0mk+*Z{^0)EOHROLrY^
z&X)A9^V6MdY-PMRB{;_C&}}5qU<gthO`2Uf?%QO2?)&#wc~ss+)T?`(pNNQpD7i?E
zg`@ji@Co4pP|NEzyAMF!P>BBfGHI?s{(9U`Cqr+QCSr#34OG%`gRzieq4;kDMhe`L
z&>Dq)P$E%5bGDjVNdM06q>6MF_usfb=7{5mdP5?RKWJfu&m)98d4Qa<7A8vEEIC?K
zCv~DQD$QMp@PlxIqpiY4OSng~sxB2Y(0~k+fMG{B#?AbDjy9q&PL=rLM9ktdU?nS6
zD7Lt#`RQkgOA@C<*oX)Uds11Edw>tr4$?N*x)iy2`O;aBJ?<6L<4x{y3RHYbqPK7t
zshd@uy?lB_I&oE<B913`6A?V!QH=%NYzzuS-Qw^t-$R5kb^y1=&ZCqIBP}fnboa8)
zv_!4Izv#(aMi5SMGRSp`yN{^oA>Tn_;{f9YN{q^1+Uu$z@}_H+b`hBNE%B5`ur>TD
zAuqK+Z-s_6nl_j(qBu9mhr%FHDL4|yLOaR};pn9OD(JYE4J_P5e}Zs@!bi_RICmsE
ziST!%tnHd~4UXbw2Q3ckRxTHG1~t${Sfq1N(1T~7g>TLyvfuMhFZgkOHbekTY_Vkj
zjm@oDlQZX7Q{}K#jX`+L>u;d#9Sd08IaF%G*ObqkNU(`n3t3p}>K-QIvV`g%9)0*g
z;3JtnVhyrkk1)6fkx?tOZF&{CV<UjhwNRBlb>gotf&8J3)(W+j;cb47qfVNUl+q)P
zaPv(<blm{TD;@geTA>q}g`wg|kTjo@vhfUGP`adwCO7&GPJzn&lSn-f+FsW<Bl2z-
zI^Oc85OIsg9I^`WK!lH=pY?(mVKXh7?jQr5I6|TJjp1Ry6LIsEv^5N!l*WP$<PFP3
zni{g9{QM0TPm*hzd4V}+xj4A-E=nLPdTA0vz`(}5r9C2VmxZVK771&xz4b(W394rG
z8PG}_{)Ol#NV%4<m=hkZQ4w(wB+&u_25Gs4Z_k3FkHlVx^3aGZO}VELp0UN|{<oAH
zwN}BfbT9a>3cI9l<%UK)Z_0vWmKO6N3z>PNGyz(voZ07Aiw6R|N%&3EGuoIOSz^J@
zr<R;*M&Yzh@o^)QQG0`E)xtFs<ZpW1&*{y9{xu}U?NDhd;sE2*Di@4MncMyP9Fc1R
zX5HKrA)~IsL?@^+m9sCV0Z@C9jK!gTIhfz(NgvQlzG$m5YFjm!JOZH%dqbim)ss<Y
zn*4kwgtySkIa;ZhEFn%Ij;81|Lu{b>UQ?MEfi)SCl9s@+dW4VB@)hSL24&pM)lLgg
z(JM%LT5=XP6*y!kfa9zUnEh$%{1(17=eAg$<$k)WtHhTa+GcpUNNvlFE!CAJ{q$l~
z+mtz^@|xLSX87{Mk1*sBZnFj2MF{NWL{8!|TMQ@zw>22CHhrvTd{VLqVE>lwRb`g8
zgV?~a4Uzi+>e|qZEoEVh)C@8SWr;jZQo5o2R;{+sYK}v&XWC?O*V5^rO8!gPLj&#3
zWr<ZfWn{2?amWr@%dsp0B?T7_`jC)uB4w|i6uHo-29a(RAkZaFi<P=6VoKNo_n}6x
zND3M$qxmfa<U6)lljvgNi&<W)7=U#^x>F1hv5V{=AewIQAyC5Uy+8}rBT`|B-%PPk
z7tQJ>?G@lZ=p&oMZn((>CHb3`wpHjKY-YVi(pC<lAWrD1WHH5irPY#>iA`vd%TL;9
zaq+Cr=4|!S52&;WPV-Y<RhedVdsb6-8=a75rMX-YBW$h~S;a!+yPy!|@Ko9*EP~*u
z=7KS^dl1Ck#I6DXSA{bx=|tCwWU>l4WsvWQO0p3(gFrLTwm1?6$O3hT6YL~I<w32G
zGLyGg1LcUOBgBM1Mz-EIu+rTH#%!x<S15*ZfV7*m#4#63R+K|X>k$*6uIFnUFNrR9
ztTiC(ej@$GQtNR8yqZ6RxWv1WdakfIKz%`3jC76@88T`Ep&eud(1|ga(IbZ7txs)=
zcve>ol0J#Sq8e1^vL5JBc|Wi-Lh;Rsbrz_LlynsVp*d-zYV;X0gHhFUYD^nMiB+wZ
zh&4d-QmurMRbF1NEhY2}qbAcGPfEcdi#t3IxY}k86oA6K2rXJ7EmN@aw{c~z#4qlT
zMo;5l@5-VOarh`5<jE>(e9kw$9qf$HYQ+KduAvPZo}!4!7N!+T^E@_5Ockf5Z~`s4
z?!RtN<v80@4Sx({nGtc5k2_YG3PZ_^9d>B1!yt?@`giaUc+rXll)BGs=q~edWytAr
z!PjV+lMW}EEtK+pZi@-F{w;69q%pz;QjN6N#-JQrQ2Qao_l-V))k@PfOdP#L-W!@k
zw^dtGt908|%Bc{O?aJMfBl8j^o*>ew$9)S0b+dM2Z6G2Z)qb=^u+LohN;=_tS9F$X
zf#r0Y+eg6|D*UK<3*Xf0ug`L(gOIdFQ2#Ati1vmy%Z;wh0t{eb(p&%fLpn>yi;XCp
zivaS!kk|mhzt)9@W<CbD119Tx4TXG#ix7JdA`GNJ@LxM?(5=xGmh#&%6^upj*<J(s
ze|KdX|9Ui9bX|QOTr=}=_XCnrw<ijD+oVa_`SD;Q++rt13ID5_(fUy62T5nUy5hm0
z%G$Sl@d0izO6SP->@D{&0J%+aI#CenhEK21)V-ovfc^sFTka$$qo)BCaL^ozZy%~r
zmn?IXubQ;F>~#=u$i}&%xaj?%1xEr5n2M(ky?VFKIhW3^H=GusQ>rYFZuH|$AIcb@
zNP#zwg66Vq();wvC7W>Qni>G(7{HvTd$$Bbf<KPqzmHRW20p`KutRq@KaGi4T-@8)
zMxRo&5kx|oB0%A*iMzQYcfEYOE?P=lw}<&zCavnGQ)67g@|mE=fT9rlWFj(t*JWUj
z5D?5Mmyi@o_G?aGhAX)JG7$e>$<bQN+DJ4iJk3uB%_#I1Pb0#{Aj*ZnS0u6maXY#4
z=6BZOoS6>tVC`f#DQ*1Y{G`{dm0YT(hC&Q&Ybe`voBF@0&M^P?ck_S008|j-p8zMf
zydpTo@lfg4zYEAf*v4CuY@e_a?q6l)+7q7SHTNAmu)OhRHqE`lto-_Td6f6^)=j9L
z;Fg#5R*zj6CKZ+za4rme14m=cgetUUic;A+%g@vxn497thE$ex`U5#}uXn-VNB+lP
zWsU~34R@Y0_-Ftx&fD<xuf@MSQ`iK+)L$iiI;m;sn=0*xUV)$RUAP67{$_<ql?xu!
zG(Gji6a`asmd#~B-I3%WYnv-&ZpOkQaFv7vq$NhP%DMR}n@uZlz|Pr%PeBeuK^*nJ
z>+jVna~=i@ry^W(EqTE$>i=GKTTK*FUuPs`n_zPu^@506(H6G{@|k})AOzXwzGpgN
zePBo4bAI}1$&->2ji#cTkFkf<>dWa)3GKZO*h(ieBWm^+6=`oVAIu^uc!EJpCzU>q
zBrnsnYH-M!viM#tM|faIr`AJ8CVe-8aA*A=>TfNZt(@6D(dTcl$>WsDAQGflBU@Q5
z_dGM7O?=OV5C6*uzQ<F2!|6v0^v!Zp$y_a2?l-!jN&d(0_tzhf>sia8Z)@?V{7?PJ
ziFD$oLLhKbCoxRHv**;pd&7s0+|*Jh9B5S_vn-{;sgzaCH!Sj^<<N>i1a6%?F~yqw
z=^JJC>>jFV=%;v|h4e_m`H4x-@V!(MzzXAuH+G)nx9f`|E_jF%q{#^&01e4tYG5<I
znT(uk*BD}M02^fcyyHQ`+C6RQZtbFVY?)N%4+Q2|p;7vx@nrFSqF(WW+qB=z#<t3z
zA!TDhomt9VwPfZS%bm*RLLV(T`|E!6{dysC{`>PU+F!!!<>UIXTeKQ`8+W~NTY+Ej
zQ?mW(b*?f>zC|VbWi)j_!nD$I0hWfTJZ|d@J+G*Dw<8*&X$t{MY>9jP_sq@@C*hyg
zOLYZ~HD!t8FLijN(z;58*BzEU#23(XXbLwL`a+eX4O%bkRAmrG*FM`*_X8NmIRi%(
zh@N{^&IlP#KFFTPj`Ao`G!)b&9FI@&tN*?Zwk@ZsrdLH1iFN40@RtS`&dY2K(rbhT
z9u|&ou0`KmIbYXi3WCd7<Z+%62?DDlBjtyJq#59FLL3yQv?(ymj(`PRYe1tB1KONL
zuDLQ~5;LLK>GQZshI4A%xKI>#(E4diH>B)$&9OrL7@Cb6jF$p{C&VudT%(zM@nDvh
zL>%u%H4eR<ldzDPe?l(`Y*5EW{)0ZZv6rMSv4`6&n^o<WAY0_N@Qslw@o32{LB936
zoJ(w4i__R1`h%0p7W6hFliQ5EnZ2IpshW<16j$d!*0oKcs!y4?MFOPnAvd32Uv3}w
z55#(#mf@AJKn5TVH$<GFl$1m?VeXsI5MddmCJ~)NqpH>LnbI&L0x)Y&r!ioFPQZnU
z1!A>#_9GZu2JC@56Pp<>?(Uwx2S;<#m&;K3(zwMIA8N@4OH1(Op~x9n9_LR4Dxlr8
zgAYseqUvCY&ch#Mz%X(*9(-L`8u2Qp#LKv`)P$BXS{kSXr|CH%ck8r`;R^!OVle2~
z{&un{^X8qLoNQ<0z|8~|6ptgS_tOxr*m5Aoba~4Gl@~hX!>D@-gE$HZ4@h%;Zc?xh
zheHHW;8PT!LQ!b@5M*Mwn9_#{LWFa_)@pOWYwpkdqlvBDr+c@d7%l*lZ4Bn32}2Rn
zFb-F1;YEaV5!w<KKGLR;+ncGPL>bFMdogv!#xc4sxf3RIsMgIJ8k|=lGWrX&0OOzF
z@jz2pIYXfr!-ftC!PwDd{J%%&wPCOy0M#in*tifd#F}ESBq6Sh5dYoY4EVd(PKZIk
zW9yD^qv2LjSkadlhekRl!}nmU1_4Z&Dq=ZDu5^lE+7rnMd{K)OW5F1u=sV&|EC#eS
zDJHnZ$EaZ+)PfyUb^UgnM+?7I&`I2~=xBWlPCD0#MIj^`BZRImdfT?}>=h1$mx{5c
z5)L=F3lpuR(Pwp(_mI~p#r|6A3So~zF?yrm6>=salZcYq3&eeF;uZYp%^CSH9f#xZ
zF{gcES<G)i`5;7LhZJ%8fX<)Cfyl?F^>WzFdRWG#sS5#VH&pPaI4X>cR*Z<jfxe$$
z;sLU)Ga|eaa86E_suZemHWtZ>vRN>qe6@rP8@{lZp_rdtX-L@HflAJs2pjcM)>qNG
zI7ZEgSXNy)KTShO9dv!#JDO$JacO6GE=ZSjk|Dz~#)3VWd-7Ig%B)H53$4)BVxR9J
zi(4FVdUNEYDr0dfz#Nf7;KQy28SV^ewGbhtab`5?YBZieocVNWdIODa)Z8>w+P!CT
zcQ7;uz@X0A{|-;P0R$IEJ!8M+yo8(<z<g-S(~LgVla{zD=_G`aiSxB6)rw=m`fbO-
z-rAmNT$Fv`Qv_0G6v2Qpvwpcldj)J{GvEYxHphrcPO$|TZ%HTy9?b38Nc=%*P>~1&
zA(O<4gT^aRE7AzNX2^L*Gg355HwgLm<GcEsIe3bI=ZFt%h_R^R>qzdRzRD0F*WHtr
z&Vk1J0f<oKh%L%pK#LG*8e2sXquuFVevguvCE;vV7~`M9t5wuGqcPjDp&1I3oTAYt
zAEskaWAJEyuU_GJ&C*FYP!)BPRl`@jGnlzYVyHIc&_s$Yuw{i{!@|aZFvONY7;lL3
zX}AH(LMA~Miz_jT6)L+vglA<UJ$=mR;G&sJ0<u2$U0oqaf<fmo5xwI*qfgh33x2iH
zKoqY_;aV`@qiaLduKKN9pNCUXiu&`D0|BPQWEb|ni#CLP#$02xLjmXI{Ah#`h6uK-
zeUP%0ksjPk4-w>UT74ol19nE&lC~9Lb;Akw!pwd!``cnFG^L9sUx=j`G%=6%lYVK-
z;sETbvFA%C|9bzQH<}Cmv&~k>;>aLTxtBTS1VfS-S5zNhuMG#GP3GU`XAl)StxDVC
zMV+YmhDJ;odOBj~k$nxJn754sX6fT#?;$kf3bH^?u_<WB+#cc(_sJRD>{&Ld6snk<
z8#<R>dIY1La(Zc{)0k5%kbpsui0835rF7_x86<7#4p5DhV%poIrGJ^{l9>g@tD}io
zx3xN~H$^eN?I$ti8%M!wy}OZv+8acz9tgp8ep(LPK8eC{6CE4Z`O&z8n|$X`8`>7W
zg^&}(UnGpDkUU1<{`WMu!P=MBSY$abA^5N(qnN=LH+-bkCa>ZiegXK5M#YTt91r!j
z8x=E@JCLhT8*fMyY6)zxmO@XEiLj<$3q&gzJXFhT1pl3>SO-J6vkKr>43Hw2vs&4F
z8qhz@PvX>fRhb6$OP}5T{`2Gg<;QJ94(KM(E3{nLbfOOHH=eRET}?^IrO+0{+T%G9
zM>Ur7tiRp^MBu4B{qgzsnj1wgXSdk!S;{d(W2w2%&+<RUDHt<+RI!^U*^4TRm7VRo
zWE3rD!F<~-m0=P`C;~P}vEoJcvMt5Cp>0Bu6T|QXr_Wy`Ql3pY4dIL%vIWGJhJ1u>
zy5PlotR&sUT+5USHJ)L|ib9u``y#-FD0QCVQ8vxRq_*@Sj{zOGbJH>Pcm5v)<;Aw3
zms=f&ZbH-<0`{L!Ow3gfA|E;8;RN*S4WE{wC-UKOIqz4a`gxe^D(6{}L~`2;-jNV+
z8bIq}gEh_}5cA-Ftc=Y@5d-w%V`Y5X6uAgGnq6_X8K*lU?l6z*4o3K<(Xa=&pHlRA
zt5jDc%zI{<63;~iH7+4}X|gb`6<+}7aQBK%=$i?PsDg#uD{93ldb$MC$SGljnXRMX
zmrAggomTj=Ll?1indRYP{ua+4tu^vMBOWPU+xI)hnMLAR$ZAWYn!pdB7~Dixej4Jg
zK_{C)85(CQ)ZitE%s_ri!<xhAJg<$&zE6W`TZ`dr)>gM_=$cw^D`Wn)3-_P}W@g+u
zG?12?24yYh=?4E6TG}RLlWcnCRhFgat)G;YS%FXr_MdG9vGN&S$IxdCD?iI*WW^r2
zxy&FS0W(eAT^lILwF6){;pyOa$rdG^Ib=S~Y5GY)wIcDj$hBOT7j0u1<ZZ)*3=M>b
zm4m!w(c;s&W3VAo|7Hd+2@FAwtI+^Zg<v+wC+(cm_B>%S3dCwuddr%Ko^n-<7Lw+$
zU4n?(ZV<$4z8kuIzh~eDp7ZjzsfT+Hu*md?Cov}#W3kD3(h!j$@+W0vk;_{YMBow=
zdlKo>H>oYfaIZ8dB+&m#lVCIIA}pzO-pt<NwhQO$x@4LnHtKzwM`rxF%WjVs<6;N8
zkLtQ(brrxvdHDJIxT|U(%;6j<S}4dgj$C=$ivgER6QSabQge+RnbUJ2LzrS^BT|^*
zb!<jk;=~E*Vq^R9j_gwyfXY?|<gf~b^MPyYsEgk`lUZ(-;OmOT5ecS$P(~PoWf1sn
z&J;bQhuq1D3#dI?vY#yaR;ihL_Nq@GEqhOw8^Gdv4^&SjUWrQl_511QWFAFina(3!
zjFH4V|4JI>ttY7pY3}Tnp8YaLsc6GU^q6&P+bbswy}`;PbcEfZS9srdaloXom{h)C
zbuxxe0%SI)?mH={6gzl~!q5nZJZ3~!_?xZu?9s%XY>g1cq>2i(8Q~+X7-AxxKhsh2
z3kLw4?h>lfmd)$UJSc?JcLB?iyn7J6t6|v0MfS{$JCwoI049AGJ^fJEhxC)0Ygte9
zAXa5@CoB%SDPq>9UdG}nG3Zq$b6LYbj2G9{5Pbv`MnYbOfPJ~7mxs0%Ry;pc`nNdj
zF>I7U+MCJgD^Zpf!k25ND5=Z~-_QlTBq`#`<3p{|kMtG@qG3}2acmhnzFv0h2l0+Y
zmfm;IG~1hg=sOxA3PVG?Pw+9S?9S<K*cLLf2Q9{~+#z7(g7{D3rV00WM)*rmB$>Q|
z66Z}6irCXAW^MBe`zA?x2+uK8$47Y3XUs#-YMfb#JBwC3SAZ0t<6s{!ORRSmYt!km
z=d((q5|hf5%m;-eVH!2#wDB$$dsbW8%lxap`9%-C+{>L@r;u0pA?i&(B_56^z>q$g
z^nowkAkCk-1ds#;;#`da0(*r13|BTpPe3qpQ<vMj1P_S;7QZlh0O)kXu3B9`KTLE*
zOPx2K*-12k*x9PQR^EBHz&2sAgj>;6az?APYE&RXG%u$Db+%F?5lE-hMXXI-`B3x{
z0lhXDmGDc?ytn<gv$lmZhP~P6w#DlM4G%*>qI)+IzE4!NkljG`O_B6N{Ax4U&b;w>
zI__p<3RDee(M>+Uw*ktZ`jj0YT9WY-)7ep<CR#G#1j4(4Jrfy~djp+O$m>Uiq&;4_
zZIafO!Fug}U9?iHbOYrB7)O=A=1hb^qmM-1p|RB#ZQ+q<!m@ExM4Y|O)59VNTb^1J
zs7Yd$N_bCplYPRMhqke&G<|f5hu{SJ1lo6kU^nH==00ucZZTFUOD)D+tfp<==Of8B
zQBFFdh(%f7k3-*<0R13cU(%^4TJ7g|hjp2o1$Nb#)0A0Nv8%n<aXL+I`PQl8jVI12
zsO@45ZhB@0wAe@3sBOqgzYhk&M&tU`+d3APX)+}c1u9>z>lWT=KE<EE?zi)4nT?#r
zr8Y+7k>e~snocf?*h?t|);o<3fzxfKE!)Dg-+%b_w@slNW*{$C-e;%DC-^;>{O0+v
zm*7b>ISRSChaTYNt$8L9S=`Iz&@M>YX#$tWNy^8=F7+z3_b6av-%~peQLXM-YxfvY
zBwK)jV?#9kwuE0l?O(sYzrFmpT@Gtk`<u7@hTm@VbNL(n9805YU%jDno}9wc43axe
z%3NH9P;hLRd(p*5-x)FnLtpO`R8qaD>0q+FLbT=gMS$goJ<Y#flWs17EV(2XBfY&`
zQ_X<VI1-q`wrA5=GEe{Va^YA<6S06}7|IBBP5D@K#IT?~g#yCeZPeP&>sSTM4M~Et
z#4WC}@5o*MjPR;~Xp+FC4mcPtbulg}i@5VU@K)D$WriZ)WW15967co0OZT#SeigXk
z)W;WSg@sA<;dlEDeVF$f;l(hY4!dkNVaKfR!bnLit`Irq^ycuj$G?Zdb^Pa#tX1}L
zzpkl+n9v5Y{)lfpJDmE}%iDY}jH>egI=I7h!#kZ{eTbUBZ~yRbWYxxkBM{sdMHKHX
z+s<;8v6=aH9rb8M2q1h6zH$42G9mGwZG}2?W_+mTdn|ry=>E=In4@*LV+ig+F5vrA
z0lda_PmfFH{p9{vf{r%Y?yhY(xC0lDeAz@&(1w2w$PUAd1_5`JwG?lX+->0HjC7Y0
zV4dPY+)rW#*+cfPP=ah03w}o~u45m!h`#pI^Z$tY`lG5G&;R!?*Ex0g|Nl$RPCx(G
z7vZ;b^WV<q-OzuI3|ld|9@#S5{?t@5^gc|7KHVQR-KX%s3U*9{=Wa%MO4Hl0ThX1e
znN8<A{-seFi<jNAygGO2RO&OgbdfFZ_x*l8Z<-W^VSqV3v<@5HUSD3E9`|<}ZB~o<
zWR&l1)M+*9m6Dm;C=>dg11Q7L6fsL<By5By<1xB8qq2dZ_5`LH;B}=1+2ywC<Iq<H
zGN3fCJ<Mnyrml5_Hd<yRBQiXf`T*Mi+kH<f_#z*9yZITwnrSrPzC)U-Ec-c>$Yuq<
zjKL&xkR}=zpCS6#ybf&zTTk0EPdAh9OZW8VpWN0e<#^L?RS~`tr8p@!#&{)zuiQJl
z0qs@FIgRNRe7m4=f2XgSlB4U`y@2Vzn3x$SQ(ik>wK>E0Ey!(Z5wA(1CE0%){uN}#
zsW5vi(^E7*6h<Nd&_~MOI+06Bgpb#FLDmby7&^plAVs0`d1F+14NdJXP9rPYeBQvr
zzh*6v#KrGuN5&_~V=kqprU=YK63VBQTYfI#4k+gBpaNJr>6pR81fk2q1_^Q!u8bEX
zKb;36kqrYJ#A*O~K!v}on~}$?GTWRDJt6v@OSj7`ax2h-I=p>pJH%HD90xQ-Wqo|Q
z&{Az%smEurBIth~=MzHjjc_ds_p${xJGU_uRw8zU-S3n?C+FCDImLyR+7vuG4}HR`
zg6y<(y%`7Uk&9n4$e`gqyG9grBc~Jc*uIWktY3ogiMIgjV55p$hXG;Po)FF3w;BbJ
zLf8?jab#Nr<Fg^W$+D1~Mbx(|?FM_EahUD(3j`)MSO$!%^`=kJEPC!Uq*OdQOd6)-
zLEr7iO<(E%wFw_A;LITy2&G5>%tIEmYr<PHZ?jm^xqt}VVG}2w`pDq8JVg7K)?%1G
zRMg6dbjHxw#^w9KOq-l^G!EPyE1a@&HM?YGh{~0vzs|JS<-V5iV8>f%OE9<QdtXW9
z3XSHpeA(z^A<uu$Z}#48G9lVyLK@2<9zk6OQneW0e~jBYO~p6DQi8xzZgOO<@GcG5
zh;>j04_{@6gludeONzQ!H<f7+O89YT>ifsugGM{Sn3TWnHs*=(=%z#v%YjPaHo+Jn
z@hwzIDm}&WN}qAu+;4Ngf)t}iHA8k!cKco#jW!$SQ(S6hGyFbnkZ?W1%?SFpFg?>U
zOPK0!osSV>4r~&3FGt~dSrYL&!u6TdJMu?Mq)kO^(9t?8H}9ThogE4~EuLc*J0idv
zdsT>^l5H^00befZ{Wy*F9f32`+Hl4gY?*A4)ojbB8RfvUaz+MoztoVAYy<n#xGD`I
zWX795HdayQ$kM*m4u`#s&NoBkCJeWBuM_czS0P%Fx!-p%x33BvZqVdb3Doqcu+Gc{
zwv5p+WW_F{c5e~#W4@_4!TLu)Zn?C+$f0rVzZNHAiRIC4>u&1f_r}T-w?Q+(nB4d~
zV$=#iHO2rRM_=}z14>#+oUPeJAO9gdtBbzu4KEQJ+=22i$S{R4@OCqZ37ZAbkJEqA
z<b|36z?GIEo=+@VOk&F)W!yY&G2M6v<<uSJx%M&_yG$*qOGsrUE+QMht`k5I6TJCT
zf-s|&8V6Wtt#QOQ6Z!UHX03@!Y8-m%Rg>N{dSMTXU?Ke`9(0XCJ?0a6e?~T+LRcBZ
zZQ$?RJOs93UA~4BF_{qGcIdBTrzxIqw4GQ2Ocd{25Y809wjSs%))Qh&m`C;zIjn##
z03BdI=jCtu5XXHCdhof>2O{j_d0cxxv^^|$b{b|mmIcdVcpu##M4$_};dn*(`-}>0
zgoz~fLByDp4J>6s4{B=RQsBnpezgWU8gLI72Cm|jP<;aVY_c3B9HyX9N!(#nxcfL!
zETAIrw(PJyjQWKXSMV^*ego?*K>NKcEA!ejveF#_Q{1Vrp>nGBKsg9FIn$Ues|+Tt
zXkwYAjhE;BlW95rgupWrQSHi832r=D=j61jPTD(>SRPf;v56OQzR#C#qpW&ef3!|A
z1X#JEV!~c*lVfAECZ<Y}podOyyO@9_*Ic{t;bhDNViVRyN6}%=GdgBr=1uZ|D8zZ@
zZ`vAx7Su=|YJQWze+n&sCMwJc6!syF*%K9PaeeXOTN-A;+Ji{Bit4Q6Lk_-={ae(G
zg^w>i+Ys^)(`(dIeuqqMcJ7P7HJU0K`q9)p#c?|t_P-LE;lSW{Z`6oeP8np2taSkM
z!ejq6(>zxwG>Zc8`}{WJj2hHu0jNWxP#1f%3;7(-*d0dg?OUn3We*>8a`GZVsnv0j
zgc-JS6+Xx0XA$SmZyuiWBsML392a6X=2cO8=}UYLzd|2xD8#)ReHbq3UN#SSL)ltQ
zD}=4H8ZACH5tmavka_`aM8{RE5+jsmHP;#rnpP~IUvB8>9*%EgZYoq=)wf1WRtRxu
zJ3Z_E`YOC8$-?GmxYuK+y&K~qFvL!vvl6xAne<%p$YjEM!t!ssWnf$8S<D(Tx*&WV
z9fg4$*AI0mDpD@_BU1^HQp2SI4*A&L%|9vZ-M*Ag+zZ}Fi15pjU}_+E=fU@f4lqUE
zwXqd^qkfVk;&iP-^)_Aznh8hlq)mqAf_<%0o3XOhwvq>lGq(9moC#e->9Sm&_ZokS
z9-u>Lconmy@A7<N*=F#ATH7i+)0K}*;Fu`6wt}UV@Ru;DosV@I3{RTUbujGT-4J>9
z;wx^~%lWX=aw^V7qJ!fr?g&bq60J!HVK5iwav*=wc)^WkM|Ns%I0EC6`ctK;#f&-U
zok{=wcsVa)p#E|G)eI^1apm`V9UC5p(48|+xvj4A_vBe$!T2<$S7Ufl;YLaa0=Pr$
zNl}SvdQZY~+Q6fnsf=S+XCo<I&W>CF{K+(RntpLv-Kg~tQT!#8sP39I&R=OW`#J6K
zGs>jKF!f733F`k6^*sku@6#O(pQZ2kFid8{&K}uU6&L84*qxiR)~x47UU>Q3s1|g~
z^^g|6|8aM7K5o~6r+)2MEluNK@Ytv&e`<Z7JU%RZRFq7n9#Q>wXWGnO(+;mFlkBPr
zA6DsEc9K0ky_<s7C)5iY42;msCfLQP%W68>lJN5A=D}CcZ;XM>kKJbB+t!bd%ZW^$
zk_8U4bmkACt}<$Tl~ZpEX3S~nqaZI=i(nC2J!lTG$|rK`scNjiRGh5gwI{^O*^miU
zmziDvojCy){%8KR5nIv6`DY+ry29+D=-m1}e!uNio6_P?MwQm}kGYBr<~=HlCq4D)
z?dp)(ET>M-jHh!1+BFbT)tqc$Y(T#yITT^nJ)yn8#~`w%1%L+V7;;3jS0+<u48Ku-
z>|z7TOvZa9mFZPz?{mvE@%6DFFDL6vMtW-UiKA!7N4xE6Ih&4#y>7Ey$oZaQYpR^4
zVCSJqs*cZxXZHJK)HFmU#Cz%2Ws0SbD?r+(5nr1(z*GEHRW_fivf#K5Gkbl@Tv*`$
zTod+S$RydH4i#==*_P$M>t66sFn0yEK1%~K3ZyG@q#scikS>=PV+9|Xw?SRn=GGUP
z&q9}{uG6(eSL=1T$TCax{mr*AaWnJ9=Fk;l*6+!*_!qxz48CCf)SxBfp_zP~$C`V}
z;fNXQ%B-#`hCkkkxPh$$2)O}+qV^&c#%btDy3^61KQrn?*6ZITzwQgyZqU@(3W@~6
zHdTqKE2&Jwak3gG2#B+u>~1Yt5ORB;RMSQ4jAem9C(-#`IUMepQ(?lhW&(}?2IQoG
z9MPc435B0XGZhY>8*+|1mPVRfPItM{_M?hShCa4Y%24$pJm%u9g97dx3j>CGPnive
ztyo88lWO)Y0JiNQ?oW^&M?xz<lf;a?fwS&u<UPfw*{Jwb=q(w;UHKC;sOc_N3OibM
zq^E4N-Fw9=jy??epI%o8wVmy+QzY}5=Hq$Fg#=@9ixtjeJ&B%f630)YnN*B}2D4dA
z1~Gy>ZlZGQg;q@+q>ju?{q#Hi-!EX42UOssmOW;~JLtGNFMWA7Y&ysQ4Z(0N|NdMS
z0B5^!?&nh7>K4Z}>T7Ge_wy_!XcL*|Jsq1wo^k!*R#8%IWD#wizsW6xkD>jtr|HJw
zx?ip7JG~@P!O<}@7wAOWJMGFARE|sFPk4+GM9+$h-`@DA^?MfWo~SjDmJugqF35?~
z{WE|(oO2FuZ$HTgU3|9X50xSR2z!;eZMcuBzp6Ozi?*(cJjPLful5|jN(y~oLvLHL
zs${(8wnpGM*IBo?P@NpHhg)`!p!>`WA9Z@coZ;8PGX1EAoqwXUSmnQrw8)a*Ym(Ec
z;Lv95+mp6W#~_016Jj>BomM>8$$W#wYv{*0pQM-FQsoH9$IHY8w=NkXVKoN!*Xt2K
zIWK1HyN2Aj8o~WHT;lb&9`_Xeo~U)O(ORgYHLe23qY5KY`E(dN+j2ideu9={BjsVp
zo&ToU1eqVOcn{ph>n*`_Pv5;alftIAKrmnLNIJu}$>6|NMOLmW^<hkiT7!2$b4TcU
z3GwRKcjU#hKjrMc)A1Ejv(W98Qk}X%9n{J{yxY4`PD3AKuTd|$s=2L#7=Am*J~f2c
z&yF>qVfBHNMW1c`*w0(=dnHV(+`$%lrH2~yj}Eim@TmS_ZTH@M1hP4Q$^y-wPff<w
zl?}n~UT@dK&RpgT`GPN4Rl~EpqW`8_CC5x`ZvIZz3J#RKlv(mGyytel+TapEh4OgF
zG2_D@DtSLPQUEl#(Eaup$6xxv1Li3}le}2eqHA%96&~&&`ACETImT|AUp`U`3-iD4
za-9O4Gz(jOj>Q1{)}RB(Zw>O(<2SSL<KBh7#FIBwhhC<uV$?Bp`(=-w^y;$wUhnO|
zNs+=%U09`$twhslJ~4DKN@}5iNF{m?R-PXp>0hs{4cGpEKi+l`%-gWcd@oyGy^i27
zI+`*z$n!;L4d0>kusX>hW<S>#c1H@R6)4{51aME&!naxD%|lN<RbrZ!F7bEoVkP%<
zyl|NVnnDLo-ayFBOWFsNcWpUVBLi$KvbeIYtNec3B(q>(F#BTq12;}~v|L}ajb1jk
z41c9<^Q#mQ7y0Qt8zp0W({NQ;mJ^IJ0747xk5)t^&}JS-tNP-#?6ORSm?;9&Req6F
zK1pMAO18m*?0c7{PgT;IJTYO_&pKT8t>trmMh{^1L(pSjvsHune!Q;hCZ#^%`4I`H
z;dxVoAY%3^oXBFlNnTv%VBY-dItVV*zQCOWBQ+t$7c+Ze0^!&@!@F|*^0PJk;s)#R
z`2LkA`BQtyGLZ6r^v=2MX@nn?aT2*nX_hz6L&5el{N}zlq2eW>{TyFe366eYiHrhk
zVv-r$?-^D6y}@gvQ8853E!~C=Mt*-10(8#;Ua1LVc(zyt!+W6p=mv^|8$mj%0<}F&
zu7mHu27c27p1W`lKVKP1m=0H@b>g@?QbO|`Yk-p(VEBea7-;R~z*5>O;+z3|lLVlZ
zvLbzC46dpAQ`?2?aH9wqvEi94_}+i}a^5Xo&{CiA`84&($XDN5f`?VN);U89{xGd(
zDEutyYw4LboyfS2i^k_DCpu}k+S1MDi=%P<DXvo8bxLq*tvV>9`rGl8;2D`Vc7T`s
z2b;B&dBfDb9iRQJxVk>rl7FV)FVq$t?G9q;0lYC!!T?AVH%K~b>7-WYIBK<wVl{f@
zjJ;%ffmY2C96lAFmSy{;I&mA47u&<Jw^J;yv;Y49xsP6#Ujb_2?J$iqIu7;qOsO_3
zWy~NPHQ%h1NAR9ZePoBxj@Cdr>mqZh<`3OAk4(W535&V|ns`+Q+TW>C@GjzTuUviI
z`Vj}0jw8wgp4v|_-?umYcgcJZf}zps8hrQPC6mMX=x}0REux5pgFf%LO}hS2&aGW-
zyU%DCNZDAj38hQt^AACWLw`-Zo1VhihGGS`Lfd3jRwDSxh2{;vA>%enmHHGjc(&)Z
z#S*s;C+I}+C9@fIPWOD0N6f)>RdV8x;IP%6N)v=N(W&2ux5KvY@q&&ntfO;|w)()E
z0<4Kq1AC{~<pfyxv18xWCGt2q?^~y*rAS!7=9ntMP0XvdH77TXeHR1sZjtBXemCm`
zNB{Zk`pbSEBYe!MR-CFQaz<^AvS(EJWRDIFp@q%~Y5(0)zw3l8_7eg>-J<2_y9az`
zLWdCiEWf;8XU2Z~UTWK%@Hmeyu+`6Z$#h&-={Hzo_Jc$A-AUQm=eEaA;T>$`RDb1*
zb#EtY^wKS37#TR<H+naJI@#HaiT8$jKEdJ;)rPxdjzM+w!X7fCCaWvvoi}PdZV<9P
z?`?0SwV|0UmRgykc<~R4y>_T-z0>YIdOf2?7)KZ7g@2&6g^(o%lr+b7(XKe{n@2z2
zaYh?QDYwGh`WV?zL2Q4EDy5=zj9PCihr*iD>s1?KnOY-+{YY>Bxryfa51RHLekJB1
znS&pHa!*U4g%j%dfZF!{U7M_8#q@(6?NkYu@}jL5tz#QF+F%oKx!XL0buVZX5iB2{
zFWuS{U&-dgfiQwO-Efvkcl$l?`9nTm0VaT)@Rg~!`64d)@8RPPyP!<Bi5wxd<Cl|9
zMSX^+cQV44(2fv&lEcHk4QOFjUHuTELj64F8Bl0sIrOK-xH9g4J^Rrw2%8czj>52#
zCDLd@f)Urmf_<pq4betUd(H>;xCrKs$GW97s%A#0|NU&&WOmaEr#<D^AwLd@$I?)j
z#}dW&RoOT~Uf!W4R5^QVxHKsT$lys<7V!k*3HGnLGrCw-BBEQoK__I5asP?#D+8@V
zx|#l`6%5BWVQxc-ZvP+o9^bnrO{IddqMZ|d9nFDV-rRRpMGY;9$rPxf5kx~y#CL?F
z6GcgJ42<wi-kT*+7q;b*w&}EiqOs_asRvP-dZ&Sgpzmf>CAo0!kyC%5T;*tM*mz-C
z^r)hGEEGV9y11DlgI}s~OU#gk-70>lV3*Yvq=2uujfalLxj4&*H&M<V5E9D^WeW@n
z(#>0`srAB6NOt<TJLKTaZIxU_g5@&P&8%=2<jT;mInnFv)G*-wW{73Rfb7^Qe0ATi
zhh31?QBi1N7e#lbuu@*8%pZbPHuJQ);%y{j=4<N|vkJ5oh3t1$&3W86+0O$p3dlE-
zP3&t6Dmk-8G>N;<xrQ^BHv8^Jx{O;vh9ZcTR3;P6o|S!CX(kH=xo`^0CJJP94-*4o
zw}sAnBn&SEKiv3@3XnTMbFoxo-S*bG4E(`D=5=?)+kWLz-%~%YaEpf@IS=9eSe)H#
zE8D$PFe1xq9L<YY!p}q<VNZJVo*UmaWi<y*SN;6vx={6&2O{y>amfK5^xS|mWyE63
zvU>X!xSnki@}NQ;dm6z}8t)C0aZkgU+o#&vX-CdVoFDuy{tPKFAcLmC-1T3(T*kT{
zyms)oHH7guIU5(c)bKSkxAi=*|Ig5=T|!a5<5Z@uLj60gz+-nB+9y;fzkWKOj{6l{
zx+-J>`B+Q%Fj77PaqPeZqu|14Lpvkf+40<9lW9T|v~xhlyzzunF>MgVFYt%=D-N27
zXux6fA}*Ho8-&cc8e(-J;#oreH%(*$u7HR3i4sAmxxnR|;FWOZ!sEENQ-_oObGsR-
zhyXLZR;Pz>iShnwcGju@BosDwdmxt3xwc3~5>(my<1WBG<uG+UeK^?Bkg>7rYQ6!$
zjY49V5krawC{Wn5VZibl*eZF2lKJPmO-RQawBiO=IdT_4YL}e$$%=w3Dd<<oJ>cTO
zowKU5pXfQSJ<vFZSKP`6(3c^R``}Px`u<n!{=7^(2eAg|?;3Anz@dh5#sY7>DRiQ@
z-~xBn4#m0AL{cZD*#UcQYm5^XB?RV;Iw&pJJetq*;N$B|#_GXgC0kVGEeSJ!N}P-S
zUC&aQP2=H7Q>oRy_>M@Pb>RAdS`i!`JxEY-gm8$?<y{|YT5NhEZ~?J*-Nx}Ep*Mbb
z6rCI}uLw@g9;8yLDv6`ri)se8W>sxa|EU#rL^L5Owav&-!$BSptrikpIcU&2#BH<G
zW;Ru%YGs?&E|=u0c2oGp-C?J;Qw`#DnCEr)faiM<qP>TY@w$lDRm=y#p;43tQi+IG
z?p`eggx#jX=As~MgOFXxYepyoyZll^q%d4NLYWMLIJ93gazp?Jiwx*J%@mQ|#vq>5
zE`~BAPH{+GA(({fbI7QYt10@N5t+ok0vEKHylRsCf6%X(Zui<V1KHHqUIxE?J{=bG
z<eOM^^a-U%0VZ?Y<kITe(N#U?zIqjr<vR3?50j|MCimsCoeYx}oqC$h14gA)LA_t>
zlE2zf;ytDh_%?;pZ`;SeAzlDJ;_NN(H}zM$+7`XX@qq{*0mi?&=qNk+*b@P%{uZ-8
zS4l6XL#$H_&(_li&rM9ej3QtT+A|4(p<q9Iac_y2@JsE^cu5Y_A+O-DSgEaYTSK7^
z>2-<4y<xCOaVQ7UQQxr0Tm<aWr38@pMm?Fh+`vp(1O!dfY3XEe#A6(B+eTcp9vg^^
z!XQjNgaSQQqw9A?k%UrX{BaKUJEg%`4g*?5nD&%hB<YGmWZf2cn2So(WI&6lOC(LT
zG7}s5P<wYsj41Kon2me8Fp`1aJmpk+C4hEX>BRozoBA`I-1B03Z;2ALP=Z1<+{jlt
z{>VR<pNOrnX}`Uj9jp8~Qa18UeLC~Kd&gnk>C|v$<uRBK-0Ob)<94O^w|Bk=tRH{X
z7xC@-dHdY2_Kgcoh2WV+FaFZ{S=Dd#Sj}kYXL!C`(W5k?a3hYh;R4fYbWEnF(oK3O
zOfiR8<($UW`S2@l#GRE#SXdn#JqE5v?tS1FY=FGx-`g587xt+o)(8EH;6X{c6!61c
zwOiW!d22uROn+8IrSSQ;eGgqRp8Y+`wjqjxel<gAy8W~&kF&EY2>E!KVC%`^qN;2)
zPqzP#kOH>#N9o|gV^>0;HoZmn&%4fJ&-AMsD&xL$?a(4$u2$Xl-{sgRy0Rq#v?}E9
zz@_W7@T(MNFpo<!?StZMTi@t&OewD1`a8L_E&>(kz{sVmy}e1Ov>4qz<{lVHmBeMw
zP_?^)Z&u9{v^i`sq2ifAu&S+`!PJ65SF1QYh&tDP4dbQ1pAV}{P`T}KUN<ktSoHRB
z*ZG6%eqt{Ba7tKkyn$fZs*AzlzLPk6*mbXaB=bfdX9}m*qq2pqBP|Y$HcPuOu=FvT
z|2tB43vyIXl;P?wFStIs$buFn0Xe0(n$5+u`xa{dEv!9$BqkqTUikx2`YY4f`t~|d
zWUjwc)^=B)LSp)}-G8h)3(1}X5L6&1A1xsoh&3LTviOa}h(VYKmv3yMJ$KTEF6d)c
zbZvhiI?d%wMn5!3aw=9C%ahAGsbaYtgIjKsra_H_whXaB<0wB4O`Tk#(Js>kIhYua
zhT1)B>BjAZOSt?CRB!6Rb#*z#`*G|=C)zSkIv!a^Mp=v9h^l?te^sa+1=w$krytx2
z4|0VXwHCys-aS?6X4{Di!yF-;(pQ_3;Kw~vy4?dHcpbnZsY!4y3>@*AyhrKA?PO!1
zyFo_q%kjn=bSr1T8yFb`2A<25XO+MMs=fHg+ItT%>5^K!GTAIX_OaW7B7AM{M@&NY
zTXuGWDRmHP9gc52G096XcZOYAvrl&S_Hn}Ajni|{McAuH_Vu@lmLo4Ie)(`Z?iM+c
zw+|Uz84UCDm_toHt>2sE;kG_K+hiQM_Q1ZvyWsQJV<c7JX}|ymv^idkOiGdIE0B@V
z`C?f6V?!UKK%q#@w^#%)2uxWMT^!{zM(2eNhUmjqt=NO>z|pJs$Af~mA(Z5;m=Cn|
z7KB(i$EwA#HF-<iec<3DSWK*sztO@bP0xII5<sTx4a_Di<<;v8$qy9R+NY+;Ru^mD
zI;oXvY#rV**e5d%MlBmg_0xX17(p^}n=`vYg^tyamJ`(x+$vg7Tt@u-?yx7{@~suc
z|KsOiI_8<uOzBa<YlF6|z1ZrNjlsMZ*LFHtj(5yHtGI<rA$UKtP)4X6;7z;k+`%`3
z+-DK1Q85q)(~j(sW^yNn28Ov9%7NX1S%>B9PEOl8?aaWW>*4ti^Pf1y&|*9myo><2
z{%__CG{%f`Z=?}td&`khoO8vTHMb!TJwh0%e%M?J?&t>sNxHB9$HO|4g{c%D!F$F(
zN`y;IOMk`KHwll_mnpiFI-yXUMgJ-bYC(#M<Fn{%70_+7OlHg;0nxbK2~xWULj1Uj
z)8PpmB!Dbxt*7__=~G9!Qyi3S$(BZ7NJ_25JMEei+U5^LGT?$4G?fkG*{wI$*=L7x
z^5C9}`BKBuxxD6^94`;Hh97yz@W3g2$N{W-^v_JxjOVM?=mX7(n@#^l$<NJ$j6z3G
zpnpzwm--E};s=4VBR`|ju|y>tE=-*zuXxD2ptCA--p@<~@9He>Z+vP7o0L>}Sj4Hp
zYi!|4GrURMXvg+a_0sCz^et4w-ufPNuZsgdtI1-bh$>IZmn(<eVd3IiO^$=YK7;v9
z$`Cvt{`$7sJz=I%SL~<M4TlSJWExxeBW;^z8g<3KtzgD2#W)J^%eGkU`#u$EI~51=
z_lsbm)i!`3o`k}27-{fA;axd>TPHPVX<7LIuKEkYW&WcY=4m%%%*@Y#??>mt2<HeS
zgxtelcsPY2;r5u6^9O8m(<|>r!*bXM?5~Ws$cTPdGj8(^I?!X_rq#6dnhXH(0}`n#
zf)5tf)IgIf(!gr67?7H=igNt&;p7quXoDGXns{g%dmSNxvFhrd)X3d;_zH{Q({4ca
zalJpBFtF*IcGC4TmoH{jNbumn{J`h}-Qnm;O@;_2@~4r)U(nn;PS}NhkmEKHK6Ueb
z&If$3D~g;Exx*G$+Iui^V?^mtSeeI5A?_9#?pUW`)@r%YmU9FmD%XB{`DGVX)eo8`
zFC>0-g&B-1eW6T&ilZc5J~w{;C#Mp!RVexyicx#;UGj;aORjtGD(F%OX3t@LMeP70
zm}_Lgu+hIvtj*|N>^|pADl|6;Bt+X``UZDrO5cnu!ftUi8SR2vG8?eRGx-|POYkFK
z8`b7NzcELmcvIz``z%24*~^O=g-tIIRZ8l%b++zRXcS`>zR2`FsFY$4s(1-#uBPj|
z3YZUiFTY$mNAbs3n)Y*`_c-5S5hG(V+>)}h%5aL%CT9=0R4lIv1Tzlu=i`3qwp)(C
zz!J!*&UbC{*9=fgEnYT{xyegKf-|7`%+CAcsds(1_P+jfTm#N|4Tr&c{gEkTh|T5Q
z_sK<f@A*BsB!(<W1yzuWgXdy`72mY!e!@INRffh!psA4P`nT`T9oTU&Fwe(#zTL^P
z@NztNR#>ZO@>C~qD$VzdN5?lKhvXwC|80lw?Bk)Yt85GXDqy#N{QCTOeYtN{1G+<!
ze<F=l%GrE&&ks}0r#s6IJPw$hM<R}9wGfa5dQAHYLR@m)EA-FbKfm7JTwRAbQ`i5i
zYgn7v`?gGs`mifvGycM3w`M-Ms}txk76*tZ-1^F?_5qK768!D|exudG_iT&bcYeM7
zc$A1)4ITfVYtslv*9hWsU!PKwlT62~OLEwyIB*#KwRR7kxY|YyDjWX|k{sWja6(WV
zO}SO$!|qDPpCU7mBU`&KW^9{ssD?;_{N@__7vzmk)8guJJ6nNQs?W4GXqT8ugErht
zKu<BJnoYM@wC4XEab)|Cwc<{Vkk|QN-};{G*x-tx?JuXy`99`;NM$;mt+QzWQ$v&h
zmTaAIC5AcNP!)8W0+)ARG5{A;6Banygf9{$Nnyu0?tTxLO2+Qg1&-P=32lxcn{Myl
z{k>_elEezPUjKae(_LF$$;^OZ0QQ8sFyQ55zdv9z2h}VjRR1Bb1omq;5;^;(rryX_
z&Zz3Naq|l&38k;+WjLnSO<|Px!tZa+ygXQcDw<(3OcjZU6fMK?g*`tUHQOV@Cm=HA
za>OFiwPg0U_#ve7IbJL1bKftjw*0(%fkEALNU&MXObYyM{!Iz9PPwyq<~@M@RpJhq
z>a(5%j3_@Hd^@JGYaHWNw#wie>l3XIowvm}nLvy;U^$D!%vx=P5$Rjc%xSKQ@4}FZ
zsN1!RC#ykE35y{(`bNHLKqF>i^C=V=a24~~!KSM24Diiit3$NT{%%GzLT7slci6Z>
zc0CCSGzBaY643TLsN|KU?uRj~<n8B!uyspAJS#*-;4Fm-Gm{aOpy5OLqT5e>+a!I1
zK8&H#G@c(KHC_&OpDc{d%&^<tm^ufh$U|f->K!>0zxN#Wvq{&Tr}oqiAv?Bj`}8H|
z7hDl2*SzajpE{ngZQQd$`diS;8SGZApt-kAa(7SOVj*Fe@Ro&qUs5v-6q(1)(GA1s
zEtCi3O<CM2St^?h^X4?8RQnlO2@7@k=R(w(>sZs|OEsFWV2!O(3S9<2YsA&$$NuK_
z&Nn}Hk2bA0s&8|-n51;Xt-lziJGEbQlCQGoxo+wrw5ZchFTU5ThmPE>+(6sj0yZpF
z(SrWAPNXvD67Y!=2A&5SPc-X2)_n}q&{?Pb8?a;uQeGrK1UNfK%n#$mu7NfZ883>W
z?(0WIUeVj@{RU@kY0+Hy!Q$(0J->sRID17IP{XVG!d@WFK}~@2h_i`Dzv7WA)FlE!
zrFTZUkE6ei+i>Jq*G{$a<AM&Z+h*RM9|Br#U4x(2pr{u_j5NqfFV<@&1upoWqzLva
zC!T?1rJsEGau$3iXl}W`*BYDRZgLr55j!?5n)DeVMXFXl?UUbF_zE~iGd|iRQZKeK
zr`0*_#DKFmk3)aq<lHCxtF}Y07wiRn`5d*=tHHd_K4dQ#8O1`@8+DE>@e_hMWAYiN
zCj$>39mjuv_8De3E9?>JfZPtK0{atFlEpzBPM!+S4wG}kjhw;d&ZxOh|Ms{yN{)Sr
z<G)$iPu4A&t&3*KF#59>*^Apef(~uo4%=Xl*b|Yf{^iZ*@Op2q`>y=HUww?>{`0W9
zA!IC?V?6hvdVj`g1wSZ9A}7;#l0Pe`2D0!gEb}M0<x|;e1GomgVs_RVjvr?Kk?_cj
ze!|dw^4JD)?JH<dgV`L;Y<WoupACZ`um~fV@efkBCSm?{3n||=>{Qia_0Zh8LmtV6
zRKEn7=NLs<^>pc$bSMwH-nY+P)w1dFUvpA^k6scNGVSEQzJ%41N=9gIrp6G8r&VK?
z-gnV!)^(oZEaiO}rtO`?!bP?#718R`j`re#&NG&|>uyy{;q1#(<T~1MduHk!7+t8|
zBFKdIpf~2*_hs517w_KuiN*Op{Us{frWM{#3>H{H+8`bFeOVL+zNK11d{2kX?tuA$
z`=^Zd)8jt-J5`=6PLSXS&pzY~->>lcYGUFD4tEW_YnX&z{<z;QV+p5U{(Rx-H_dSy
zX6g$!trw5Dq47`6J<6P3vABIj4cZkP-e3oNS>n5nH7GDP4dBvmiV9<$CMUH$-nzUv
zb5CU0i<x9vo(%M8p8op&EG^zIf%2A|IGr7Xn*F&k3VF7F_6f%r5gmx-wCS4w#t5J<
zc;Sk`I@l>Vd*>deA)}>PJ&KBmb1_F{hXY&VxJm*_y05t&P#vdk9m$z=pisY<c|b?F
z{f4nK9kgy%hdBQ0iW)-frm`-c22S}dj)2fO)gqMiJ|E*F?=p7A(7}x8agBn<iETlJ
zN-*RT5X9-fHu}j7imq~2<G=`<edyujEWwQCXLk^bK0)xMa`uiglV;}CdP6jg5LlN}
zUB!+K^O-+e0|?OLjOsw(Hk)Si!cC^y;ipX~B6If`ks^_$CmT$I?;pSnsJg+ENZqvP
zV#FzOdt*3JI^92(#J_$9o1mO(8OXg%U5`8;1I~Sk;XFqkGnzEwE024jOpRtH;-acz
zj_Qd0kxFb_z!_buINkO1u&zFV<KgMz!p-FMSl5BI9Z3atxjNFFgG_LS4E=l>0ldbJ
z^tzXxUzJl=3eLTcvztA+A~FJb7*GoqM5ff@EDlygT-GGE0pZdr917FV_g4*79tH)@
z|LVjzC}Z^f?2h<3?sk>JRwFQF9i`!ZHizr0Auf%f-2Cb5tYkp3P1Y(dVmoogzHRrU
z^E#r%)M#jICxzyW;ZBA6`>|oHI!wGtY3D~7V$~#Qg8nZx9EIgj%i*Qz+Dy_p>gExJ
zO&_V(*5us_fb%9s%9uQ|@{KbTm$VzSo_I6H)qu;J-?PyS-D0{oEe7QGp#K3|N`*q<
z@jX33c;F5J`{Nt5Be8;2F+1Rc+^h99qgF9X*#|JI%CQlgyWqP4Ozn@C_Iyv9_Pg<_
zp?uhL(5kl`GvN?5Y#ra;y&BrdX)io_Idg0bj+$I%2CcDwz!1naCW%43>Ta6QJ;x93
zfu-rcBHJ&CdWofv52zP(d1Z}zSWdO##>L#+dWSNs^D~obJ`UTs%a~iram>+MySilC
zQnjilR{eX9KlW{N!)A~A*rV;7Ki8dV4Ab5hj^bjrsO0|q$VQ`Mx<@eXgMZE)=<tIa
z$Ddw#lx#FQhDYt?hFghqrv|tD1K`W=XXn0^0HbVVR3FV(;f{1RM%$LJopahN!{h*H
zgo0(?UZ4aj$a=A%5iGx$JhB#>&Zz#5A%W0=J8%6O&tD-pEyjoB1(FwY5o)muvwJgL
zXdl<z+)_Z3L4kol)y+Ve`wcRMh(H7X{GK2p<HyR>)lV*xA0>F7&b_R<`iV6cbfPJ=
zsXs=Yv5WT~v6(e&-_?sxpnFU}KsbNs;hd{JB|^91;fxMnj8aS|8mJm%`ReE|;XaaZ
z?H0lGdMazU(L}QG5Kln&n=R>lU39-n+Q5`+*+GGVozR*Lh$=s=gV!S$FYxtnEcl?t
zcG6%z7a(TL-k?wa{+@o0n;A`^hs?H|Vb)Md?dY@zkDiX4RTf82>}#I3RT!nR6^aQL
zYN;sKmEi0HH=pOWo{p>rI39eaE&j!+ehzA~CB}Py<k@B;%o>^kev4%$)eIbleqrB$
z!>=g)m!LVhHa=h&h&Dokdp8T1uC;<CaO>%yYJ{VvV9;=c*>dJy?S^{940LbzHk|R7
zT&i^Jh4V;hIoOl*_%OF0O|{HHSNq5_{zJY2Id_$hIK9u+;N0IVxP|X<F=4rt($<V0
z0nS9_Pxxv`i9>NN7{}AWIQUlK%f3K~c!~NMg5ESAFW?s_p1)y8+l558B{Psw_hcEd
z6_Jz)98s4!$>jzWTrx+9+}N_5QuP@--;K3h`ZG~za6v1{t=?Habox*&v@PIs7fx#4
zOgb(|^W3{a!h#*B^p1&}-N!2mA#>&KE=QEbffv_(T%4^RSJk{$6KgNBZewLfiHq{q
zdOb9@S&TyaGQRfu)Gcj0ahx^Ph0`R>TK0iuX}W6%t4Y!520~_P&ccjEpF3}3zqZty
zvS`jDRit~E?~p%8lu39}hdOXQ)|O@<xix?>;Vco42Lw~l*=PR4p29xVdMR*Fa{U6(
ziDY8vCBWIJ4Y$FUu=k&hn%IavaM)(a#JSSB7RR!+-%-~o4%Rr?GMH!^_!IjRZeQ&c
zLLD)ykP_1e%WN2$&fv{w@y)RIYDpaJXtrd7hwAR|X`Bx59nZX$5nS;{?!alBUh^s!
z3I;7+V0Oxp@kHujPF+S21|rppl@=qX=GrCYSy1`Xnv5@nr>xBJ!uc$xX3v+^MP#$t
zb$yp@vdi7EJ5Zq8V9D@|KcLijY7O>S&8K%@<o!1fGQ<Y<^u)-HqqDrvz%X1)U7u-s
zcii--zHK3VIC@UyRc`ojJx+UC4TT+lH?Y&~)?yMxY{8`QIp7g(odHY~0#vj9b81mf
zC^4JqP_^o1WK;&NqHP@sW)vF7;Yu=;q8r`9$7s0{598iE9+N&3?`sP;%0~r5mj&#G
zaJjgJJaNKqp)Ovnc#wn64*`heXS^y9@#x(+2;_N%nS*BIy$_1>6~D^#1<|-?zHsJQ
zS@>^1VjL!4I5d=@QTe1{nRF(-^V)-Bu6p9sh#nXI-D`})hTtTrST1wIpI00l%>{3k
z^jw^8(~I0gcyhGptMJ9)&Qkizb)G}{WvjS&+KW1>j<M%BP~pqtLRbKI*5vvsApTNV
zjY(#LC)rImp5(e}f>=V55a$q6cXJ(<^N?OIfFm_e5(=exo^?y*+<S;D4fz#k7#b71
zeKe49%x0G{>cV={BQB}1=GC2>tt~>%?y4haaiZbnbmNc+m5>99C2I-oPB~u2Jh)if
z!`dS4&YN$^%bVfL454~5ZWLQAy4>?yjdRyxwp2<~TQ&N5Ac-5*YN*4m%OQ~s#cbia
z#qPH}%om5;?~b%g>{&36`aA^n-uKDnHow&W;*KPm)AYfEBrQ`$dQ;`?KqLO=#AQbB
zb1}QpTw5v_AA@$cyKM8nQA2<)|Iv-#3@o2MJAeoPC;<Qc{S<oF?tfX#699O(GWr1E
zlfjvlQ*X;Z{P_i72_gXiC;<Oo$@<Gv7jRWa;Be1wWu=#Y$XoIh@tRrBXAD+?xeiB8
zOFehf#b!HK65?+@4r#6;d1iM|qt<N$oKH310+Bd;AkJfuBXN+5K-*HgIZ34GuCD9V
zsLsF6()Zd#+e_cZEW5@GAcMw*Dab+$j>TXi#SOnf7eiF@q~k#?!Ht6(dY4?lhmuf_
z_FY35qy|Ypa8xE$Y?PurU`-kl0;$(IwhLVg$g>NMd`s=98v%vdTd)_A7a;fF>AD9Z
zgBSyJ*Akk0)Bc3+6!hk*&Mg#iM0&8K675NVY_Z3%45%cUWvX~-L6bp?qUpYmsTn(c
zUs3$1HRKoDD3oi;4TIUoQ=b&`TCcy@8!pMmjk<vwH|lUnARY9qqiAR~*NokTJHSx1
z_^=mjq|^G~S!)^cWvZKmbKXN9dl(Vbhq=GIY7oWeD4tc0kwq?)OoJdtwe*y_NHIT{
zbWKJ6phr&n{+rV<LW~plirL*q>Caq!9bUS%M3yqwq(Z+it$r&G@yvD<Gl_Pv+yr~w
z;#>8qcfZ%Jpj4Yctr2R`ev4ig^*Wzjp|?_X)Tl3>RMJSNJcLt<2nL@fwcz+hAEpwY
z2lz=wM$Z7P6pE~}UN%`|T!b+(N9(OP)9bE85KQYcBY|lp%_kf@;<K>ltcRc=FU-)0
z9>H6iRr6U-<)zw56CNEcL8|>~QQs~+uQ}&798c8nAorK`%;H8Djs%zATrp8Us=9{*
zXAXD2bKe#2^BleR^~D3?kFI^HB0ikt7-e2KmI9&k%|k|*bSII_gz#wd&pmPy$mLGg
z3g&@Oe4w~t*NeQ~dXkM80-0TjY!aHE{Gnn)Lf~X}mL9ZcD#SolB8|*9Ys0g{b*+o#
znjrltR7)RfbD8FVWxbK3s_E|(=a(fDb{6-UNgiq`iR2;+n+qM~9%#CK$%^>8pgd92
z;?blK&*)1>kbJEP$7|TD9bwxJRdh10v;m`7ZlMr&T}c6YV2)H=CZPlpXBm0ebnYs%
zk<jyb!keULAfx;fyNdAWs>u)B=m-srd!W4Gln8x=_$PRj;5uD$Sdd*&H$odj8t|zV
zNBlHg+5hPtb(N`ChLs{;Q`;xVX~TX*XibTXnZ=lrr*I62!5M`N7EG{lyv-5KRVe2Z
z9L>0@jpDcM7sDKMKJKo`vT_rKJ^k!eOIu$V^n1fSfz#Wxcwh*}^);W}Xe0JE_OiD2
z*3{m*oXX-{jh5Kqn$X;YQO8AucMbNNqRV?Dw2&v-_yTxdD-)AtZ2hmdgF&&w&jAO#
z<^80McH`Aoowq31gkc*qt0*BG$;U_bXsHnZi>p@mE-hOKe4#d%Q3Zy5-W${bYZAN(
z?)v4m>^efrIipQFb#K%H)4WX~RG@>)Ivqz#>(-USkgwF&!9l~t&50!v-@2G|^%aM4
ziJI8U<}>o3(vhKz_PS_1hb(tk9{(gjBQ$icqRLD&wd6J&X8O^`wTU5znsKDCi}d-3
z86UN5q9Lc5c9dtnVA<zw_ALi?7v{6?mO+6fa?u<d1yu7>>6$7VbQuu<ChM}B{M#r&
zm`#LPzTk5Ni}(56aHVW|@#dP$;akv7EE?P0&PBf82hM7&Zo4n;pM9=GML|1FB1=A<
z6f))A`)#E$V512D+Fp%{Ue=k!`4-F9&6vA4VVg0+G7|uR_Ng1)=n0b6TFp(?f$TJl
ztHd2@{2~txhA0K@F1hg*-@H=4%=mt#2N(*73D`4h1u;M%3v*D}QvEbTljVq&OgJN;
zH&M?-<1UYa9z{3U13jV+h2Y3qZsYSE*7lo$Q8R*#IMjkW80N_Zd!hw?zzs~tK6tC-
zg508j)f_GCiF0<ob#F*Zev0aC9mEVv7#98A;6Xo23>77;8OOS*hxt~__!3Pe>`2^V
zEuzcdC@f+0#3^m5tK!P-hB@2*zLN6)FW4*UGnc2OTbA1rp#Ls0+W;%?HN6dk(RgnE
zED~l9kn|&k)F^{{xCOD`6|{m+aFLNhQW%`M9lS1{Qy>+!ARQ6J`7KX;xa3;W_xT*0
z(pGlsKtFA##B2#u{TO#h6liX|h$5Whbr?b9$tfy=^^l79eSAZS#hLvf_LCOww3=z=
zGwrZH5R~+%3#T((&}Rj;>^F!CDLs*%`I903o8q~symQ*37JQ{Aa1#D;AJt#Tkkc20
zf!tj9@A%)P1+DK&P={licNhv4=|BHBTHq_hgssq$o@-yt3e<(Bp~dCp+iQ5dd0SWK
zChnK6;XV4O^T_Es^kGRct-p4+-*fvsYk6FkZXana_mPX*f>YuJIU%;>LH7ktBI*4&
z{Fr<pM?~MpB2YO0ZZ|NJeQ|+l6}hSBGrgFE-zMhlcZ3nUi27QpfWab5!v1#wP~WTy
zPynoKSGgKi9Eb$%8qlNwhjM{v5CH%Wm3o9Cb#L#bKoTH?AP!hWAWv0dkfneGbSoqc
zGIcKl^!hDJ5DWgw8YF^$vH@B8FI(U!a@he(-Fx?@mGs-<UH#uhfe7SVfTwbGi2%7(
zEs-D<_LoEfN6knyFw|#>0e4N4SfJ}Ei32VDO%gyd;-e&iY|BY9FxXI1faC;81>G*D
zFW${O9SY0|k}g`LM^lKR9-GvDBp8&YrPf0`th62s<GjySyepslkX);bja=&YJWmre
zMKL_9V9Q(vCnwV=vibY@Vtazc&L~3S2!_Jxk-)_<e2s}TJHluN@@{L68gdtJhMS#Z
z@87FZjRg4~JV7*>ezzJuPDF;4<+MaBY)%Z@ypiTOF1;=%$GdH6aJ>;VPjf4Q#)j_%
zSL$Nfb8JzydQ$HY#W%%p2#wF1Qk0cN?F7^R$K`ln{1zO=5K5$Om+)KRx}E8pVjU7M
z!d`+(PEbtrAj<Ar3ueq&@_}{)iHp7OD@wQ>4LrTuUP*a0zUk9&#Gi$uHctID-4dOS
zmmtD;s(vUn38|S}Yk|!Y*Pi}L6EWR$sGp>n3dY3mPJR2w%T3r~F%hT6dgo5o@lGan
zNuw@(n={1kHfQl_oV5F9Q~x0Au;9RMO`3Tmz=^y(gYnI|Jslx|dK76Q><qU{_oKyW
zB-&!^31r0NM;Qw{Pe<EK5NDboyCZ}{OFA>iRf!T(em>oqq(a%b+pcmaiO{atMqd#A
z&P`&$?EFz82cyz(z~Wu$3qm*<i^J4A2c}Jg>!c=XXS}_I(I~w%AxYo0_*`tp<G~k?
zF_~~yzjByp7jlRHzh@u=2l35FWdC0h?z}YV?ko1&DY>##x~NWO2vQZAGA&1m(;@k6
zQk5pNX3VLTZ$g1lXNdjPs>WClA4Bogw`7!x)Rp9@53LMkDofdvogPE_4fy1XUW31>
ze}F;8?LRlAO0CiA^ai7eOjL_z%$i#$onWuU#nsK-aJ$2YPq!@uV%tASYychPdVUZ_
znQSg!D3;2VYOUUAw%VO;uRj=$#<R?9zF4kUv&(OH`@^H-lm27Q`Niec_08?w{X=p}
zYFhfKjMHZ_wb$wP`h%fiTDIeQegGiCgfcFqaw#jKF8&-lp3Zsl=F4B8V4=cAiWVzg
zBCcd9=bZ2DlFR&MTyRmqJYI|YIxeUOqpP3jSd@3riv4udYs4qmVw<f@2d%TiVXJMh
zQG0(Z;h1oZsr9%b6plo_$RRpLoW9q{>e-XFxVGBsTc!22S$$_jqN{7h+i$|+-0WK=
z_WetEZ~x%%==kLH>^xs6mdcf?6G<JYHM@zIk<h7r+$SEE2AYp1;|Xq%ja2&dVB5L;
z5U0cV@)syT&{VKcAy*6D#GkEEqQ!`HA4Z%9Kv?l}vDzx_gRm2Ijh%CUFm%Pt?A-jq
z;?nZU>e~7S7c5}M98ADA5%3K^e)9C$^A|5)y?*odod$Sn@|3C5e83;#(=#(?&7Naf
zFL$2r{DupjUAXAE#Y>hhD_Xu{<*L<e;K-ia-Lrn$0iFSvR{+4g10Vqa0000003_DZ
zWr^^!IXE1q5l#sbTZM4dFF4U?wgN;we-pS)x7QyG<-rw#D9PWK)2Zz<Op6(8K;C|*
z8~2Nc#WN&skt^1Xm&%oDt=?$1+MRBX92_5RZag6c=jRJR@CuvlZhv@mOy2K2<9OhT
z+q?S*`ThZ#Uc1i5|37H8JKbJ?Ff>fdc3jU707RHj#)VX26enqx7iBdXPo}f^V!2vx
zw!8h|cshH$K7Sw>3P+-`c!Eo&(wS^7UnrK!m1?ct-~~~V6;;y>01+nCw1@?2-y^GM
zZ`;i_ITSPwNI)=1VUdB6LjV{EN03ucQc=^;($O<8>OV#bEUR9pUq1_o?<&iw@4_5E
z8H5sL6cA0+K`RrV<35P}r`9;IRG=Sf2m)d~Xyyz;^-~At-j6;<Fdn{Q|Fhk5m%WGH
z|4*6@H`Y-jJZ@#TF6-MTYAQ|dTHSvpuHpRNERiSlCBkI7ehzx76MPgh<zPtnhc@*~
zz?W@%A!(7;1C^@Nm?Sq`RO0Q)%Lqz(w4yTgQki{0$_@?cw!wt4jjtaz!!5t3={x;z
zgc^$p$*?A)EWBW<c#*oR9_`5d{a9$KkY9~!Hmq)Hj&~vUJ`UzuKg1nTJr6F=IOw!X
zfQXPPS46_NCsQRRjC(>VZEUWL2ouIVskF&eh%oL6skE`VDiI;om~8_9F`<lmLMm-+
zu1=UxskE`VK7a@l$~<9gt^p7esxwW1gfi|WT0%V`b*9aP53mMwA=t~aE(JiCP{utW
zl{Pl_M0gVbM3_*<Jt23OyeNy{?U*cjlFn8|6C^g0i<l%|ofpD)!R4o8S?Lyip-J%7
znTJvn-ELWRXGz*DHS(hUVlL^dHM)+dr2NTIi|4k(GyT!l<!DW6oNT16>AaLrRtD4A
z+v#Vu+;P3#Qj#+`bHQTv{gZcWYGj(}g}D1pNh04VFFPhZk*4XOwe<60D_rx^)D3n`
zEmNql`2_Z6mg1<5RFZGjUXvcX7O&NDm%-O>EvhEwX7$=czEe}bh|Q7lUf^~?oIC>h
zC7%KcDWaGX+EGeE<q{_Ct5LU+qrkGlSGR;zQ$u??sN)q`u!*$E<Bo51owugvQPFj^
zPT%7$$=ly`SMRi?Lp$GY)CMf#wkCW<19Iz)A`3-ZFfIDsP60+ePXVw6Yg<r*LRavt
zKx2bxQOINygh@@+uzkcd)%qh?$@rer0d@rdIKcEi7-zCsEKv8YaI69LP@knxr=a7b
ze}H!OEvd^cKDnTdIQdl8#LmsfmG4w#kUC&C7MLQ(Ok>l5#xu*CH|{y%>AavvPs*ZI
zE0eDN#M7c<vM)NhDGa-UER3Ax$j}rhvCT6R<4vm{BeNdjPTxb_Hlr%b@E0x5pw|ha
zZodcy@M9oQ!!-wezj(=_8#ciJRT>HeY-;EwpNHd)fnfPA{`)@I%i~Tj1+6Ek9K%46
zBQ1gnxdu__NiztE7G22td%ZC7=tL2LNvCxjvo!gfV`7jTFN<}Yz|>!?D%9n6o%H>p
zFXsZ&wxsLQI!&q4Evhxi;gmkE56{{NabZX(^Iw5bYxj_8Z5vsa!0Z)R(4~7_QFo_8
z-3u&RDBDY=w%%qtwOZj@B9N+fEsa+Bs}TFC@Ytc`fN+G${bh~;`^7Q1zx4nmP28Em
zj$b>!z$QMoc!2jQ9%XL-7w+f*@PEp{Ls#;W^^t^aWPWbZ(AzoKj$nE&Y_Ip?gxDoX
z+YC)m#EcbHWaSW?hwQbRPdIRRaS<`V0QAJWy5g0zk3a|k!I7s>QrHGVGc>}G@>`N<
zj{<}$szQRu86x6d<iWsjfLn7w<w>6jXhIM<W{a<RFcp-~xCO7qKm#B|!>MX*(PS7U
zu>6vIPBoA^*hyw=X9hlO3TUE}J`>=CJZd&YS1m}<j8`-`^30f|BG<wWh;olAyq(5W
zn~4Cin+82r#R8*UKv7a@WGvlx(sEsnGeWz<Dx#(n1YEj-jNIF}=HZJ>S<R2}!P$)i
z978m8sa#BEFdKJ#X{D=*CXD1~N&b$|DZ?8vzH{rtRB~rSGXeDh3jTX$aec|e+lV!f
zop`&(r^AG{-)K4k_Ks0=duHHWqSmni3yt`Hh~+Sdw{u?V4E~p@P`#>Ttog5ss~3l8
z*U`zzZQ-O0$<P~mw9emf`i8^BnSoPdNc)r4U+X%1+OaVEqGmNV>PTGQ@a63>ZV`Y>
zOd0odwg?DQp^eRb>;Mo&%Roi80uV>5h$-Wq-qLaz!zR!d_$+*LIabdF+o*fNKGy{v
zYWerfrYM%jNWEHX|HocjleQ|FD-f^!E2PGrlomN|OUzq34WO_(nQ^dZ(Nr?32Qo`P
zr-$DjWL)GuBGF7`b8Ubq*8zwyp^QtRw6ViG_7<2>#yugGHa6D-h%lj^&{G){90%5+
z_pY!Le26fijC(>VZEUUu5Me?Y_k>j1*jyVR!h|yJ38}QPxeh>t31!?9QfXszU4RG^
z%D5+_(#Ga`010K>`^VQ0LB9IL*_Z4{fA%eCvCx?oVHR&!dY$i9cw*OjZV2yX^b299
z&RxzjS9sD`I_tbZ%s#_T9dNLCKMLHL>1;iB3G<uqb^b4s8U54$D996NY=PFkusnfv
z`ulaJkM9yk4%qRYC;!QJ{{OLVJYZxCO?1?nj?Pdr8g22#>D*gry1LRV)v>kc$8KWy
acK#XDw(MUlp`gy}pZTvb{<TDw0RR9;WK|yk

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.eot b/assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.eot
new file mode 100644
index 0000000000000000000000000000000000000000..e9f60ca953f93e35eab4108bd414bc02ddcf3928
GIT binary patch
literal 165742
zcmd443w)Ht)jvM-T=tf|Uz5#kH`z;W1W0z103j^*Tev7F2#5hiQ9w~aka}5_DkxP1
zRJ3Y?7YePlysh?CD|XvjdsAv#YOS?>W2@EHO9NV8h3u2x_sp}KECIB>@9+Qn{FBV{
zJTr4<=FH5QnRCvZnOu5{#2&j@Vw_3r#2?PKa|-F4dtx{Ptp0P(#$Rn88poKQO<|X@
zOW8U$o^4<&*p=|D!J9EVI}`7V*m|~_En`<8B*M-{$Q6LOSfmND1Z!lia3ffVHQ_mu
zwE*t)c_Na~v9UCh+1x2p=FeL7+|;L;bTeUAHg(eEDN-*};9m=WXwJOhO<S5arI2VL
z{9Wg-S+>^lgVEPBX5Gh_bo8QSSFY{vM^4hsD-mzHX!X?>-tpg$&tfe27?V1mUAbb}
z1<tK+4MW`Pa4jnl;E*j(B0n$uk(F!KZJc~{@t5I$iZM&?>dVewCjIN7C5$=lXROG%
zX4%HIa)VTc_%^_YE?u@}#b58a4S8RL@|2s`UUucWZ{P9NJxp5Fi!#@Xx+(mZ+kdt3
zobw#*|6)Z(BxCGw^Gi+ncRvs|a|3xz=tRA9@HDV~1eqD)`^`KTPEg`UdXhq<A4?@H
zt_R?$L#2eDG1+i2-_BIvwM}V8*v<M|x)Ol5=3q|wT6^^sSF#if{VRuqK`&g#OivMF
zTuw9U6DFO7{4$JD&HfE{F4feK9)zWDazK<BbKeE|T&<?rrFj@iOL6o@IHe1U{3txl
zngm=fJ|CWcQ#vIr(x(VcX1brgDX)CKIUFp655?tiA{Yf>18})-@}JTHp30^)`L{?*
z;c)alkYAc@67|W!7RDPu6Tsy@xJCK8{2T9-fJw6?@=A(w^}KCVjwlOd=JTO=3Zr+<
zIdd?1zo-M^76}Jf!cpLfH`+2q=}d5id5XLcPw#xVocH5RVG7;@@%R>Sxpy8{(H9JH
zY1V)?J1-AIeIxKhoG1%;AWq7C50ok3DSe?!Gatbry_zpS*VoS6`$~lK9E?(!mcrm1
z^cLZ1fm<p3RQ^CYW`aW;^)ops%~EhwkAbiO8bCayMIJSjZ{Epi9S70Y2+zY)zU1<4
zl!H&@!zizTIFu{m0grrA6h{tu4TG~OX*P?TlxD-=2K@Ol5J!D1(hwdwTtq&U??4#h
za(L*lxitBF5Jz~V0B=Lsuv}URcuJH9)h+k#0v-%*xdGK62Y4>x5Ds`-ethCvMtDTz
zMd=G1)gR$jic|1SaTLaL-{ePJOFkUs%j634IMp}dnR5yGMtsXmA$+JDyxRuSq*)bk
zt3tSN2(J<@ooh3|!(R%VsE#5%U{m-mB7fcy&h(8kC(#>yA(JCmQ6|O1<=_U=0+$AY
zC)@~M`UboR6Xm2?$e8Z$r#u8)TEP0~`viw@@+){#874R?kHRP|IU4&!?+9Cy52v^I
zPV4Xd{9yc;)#l?0VS#6g@<rW5y(qtdH2J(3b5d9?JVfcKZn?5Wd4+kO<~yFpIfs7;
zZx4Ov@Dc3{d`2P6O=aca2J(l$1M$U$`R8GVyi4G}0C4Bz@UEkH_|1673GY)mz}m^>
z`#y))03Laq@^6Z#Z*uvzpl{$<L~n}EyFx#G=luiUX~4qe{2oe|&y#RRo)U%OO?l?$
zTZzUf(in1a628T_AUH~wt9L$~@aM~<H>JzFJgn&xHlNBS|Eb!E@}~Z$^m!a9k34KX
zT|VETZ;B_E$Ai8J#t5#kATCAUlqbr&P~-s)k^FfWyz}iK@`B$FI6L0u1uz5fgfqgU
zRBmB>F8s_qp1HWm1!aXOEbpf`U?X|>{F`8Md500U3i;Mh9Kvbd(CeuC>077ww4g^h
zKgM(A48W`XEDE~N*Th^NqP#S7&^w2Vpq+df2#@A*&4u~I+>t)9&GYcop9OtUo=;2d
zGSq?IMBAYZffMC1v^|Z|AWdQ38UdJS4(H(nFI<|%=>0iAn3lvcSjIR(^7r7QuQI0a
zm+@Z9QXmf!efG1**%Ryq_G-AQs-mi^*WO#v+tE9_cWLjXz1Q{L-uqzh<GtVMJ=FW>
z-Vb`UBlaT|M;ecG9GQJ&>5)s1TzBO5BM%;V{K#`h4juXPkq?e&N9{)|j&>ZKeRS#3
zOOIZ6^!B3<9)0}ib4L#y{qxZe{ss8}C5PC)Atkb2XK%PS)jPMht9Na0x_5hTckhAT
zOz+FRJ-xk0*b(QE(2)^GQb*<<={mCZNczb3Bi%<19LXGc`AE-^-lOcO^Jw^J>ge2~
zT}Rg*O&{HUwEO6RqnV>GAMK$M`~TX%q<>-my#5LOBmex)pWgq|V@{jX>a;k`PLtE<
zG&ohK;*_0|<6n-C93MK4I*vGc9shKE;CSEhp5tA|KOBE|yyJM=@i)g?jyD~Db^OKg
zhNH*vXUCr$uRH$ec+K$#$E%LtJ6>`8&T-iBTicKH)<!M=AO4U)COR2qa!?Q>SNMZS
zB8UG!{1{Y=QL&oLMgLzR(}0Y>sN0TqgG|kLqv_VcVSLD)aJ?AC^D!bLa6K5Ut1)YA
zghRXq;YBrYhrzOK23vXorq6v~v*CBb?*bYw$l-3J@c<vstBiTmaD9yVwqv?YFcxrP
zNk+Qj7a1#A3mJSG+%B+K5e!p=mm^&TrihAlj8&qn&^EYU#=_lT%|<X*9l}%!m`D#}
zu}N5--^8?uGHd5ER)=(T&!Q<%M#D#7ol$;c3J&k#U2upS;e~sIv5~tNYue6O^9770
z5^(S*k#{l;_Y_!8e77utLz-6L*t!pFqZJPMv^@c~qZ1DA(JSHJV{A-@vG%o$jfLxI
zhXY>Y5H}8Gr;t8{e8!J}L*5e>!hOQnM3g=8eoXDiYZBlmBW?=(Qvo;ib;hP4-|5>J
zo6*MD%*UW90?aI=ncV;fJZB$fY|a73<^rd=!0(I%TsLE9TH#hRHV<&~b~82~@n<2=
z1-*<dM81nmj4e*VZDVXnI~;I17jR2!;84bS$fIj5W6P0#`A1-l6u9>oTQL{zWh}4H
zGj<X3ya;7p+zFRq?2<`X!mMz>X>}SbW{R;(k^VBouiebp<&Q9S1<Jm1BV+5Fa7eoz
zX}*Mfu3>P`GIlM(uLaz7TNt~37h`FJ-B1j-jj@}iF}B$Yhy1^cv|oM`3X|20-GXwq
z0QapK#%@FUZ9ik|D}cWpad#li_7EK6?wrrq4l5kOc5H@2*p5ENc6Pxb%`OEl1=q{i
zU1`Sdjxcu562^8fWbEEDi1(A=o?`5)DC_=i#vVX^4<hctPZ;~!{fu=Ze$QOS9%_Jl
zgt3R);Px^0$OVi&ihTBMXY89M#vVgnkG;p(x8VQQJB&S!vc6pmcYv`2)8Kj-`;U!q
zFEaL>5ZpSrpE35`g>WA+_QYDo!1%Byk?;4A*Y^%H_McC{^)mJp(mf6Mr$1rr8Klp<
z@9$&m+0Bd{OfmMH!q^XxU*>tneq@E)#@LU6-}5Nz`DYpXi4*QA#$MRP*w045^)U8x
zl=XAu_Y36n%QPIqUi^r$mjH7JWgdEmv0oiv>}BNj>jt<jjQz$0hxc!-a0vhHd(f)2
zG4?ye|L%UqUg?5Ey5Fy6?A2*-PcZfeg#7_{y*3{XIQ+2~4rRQag8La`e*)~EP|rVa
zX6(NZ_g{}O)&rd1K=@zQGWORH+?$NOnP%)Q!2d17*xP`6`#r|qLHOTaW$Yht@4~%z
zn6dX?X6%F48T%*Vjw+0O_z`0tA??2sjD75c1D^kl^q(w*LtdXo7(0ftj-$-J8n~wz
z%Ua>O;GSSiGr=LO--M;f3$4%-kcdA5=kp1;?w1)iU%<G<3AdZ^qGHCa3fv=%+Zq_R
zV=8uRVcdmpS2yGC7a8}o!M%xTdOPF38aTlE7sB;19>_3WyqWQmjf@AcVZ3xc<7I~#
zFHgbYU4b-}3LN4>NEZft6=17@TlH$jBZ!NjjQC2%Yu;hJu9NWw<k5)t$aQcZG2Ya}
zc=HIj1B@s3F`h(t3t(C!P_J4UA2p5f(N4Ht#>Z@DynQp=tBj8Wjw$e9<5A{>pD{iW
zZqogXPX_!HxT$LypN98z;4>ox_a@^r4>R7`&G@Wh#%HG(p9^;e{AczsK5r7^^FxfE
z1>DZ=f&=UVl(8@Y2be_)+!n?cUjPUAC8+bcuQI+Aab3F@Uxu=lJ<IrV;CVjMUGNy=
zE7mc7;Y!9YdY$o=PcVM*62>pt$oQq38DE=X{7U3=m6P!eKVy6&>UK5q-?WYKFCon}
zcwbuv_Xy+HBi;48;XYwJy_)eGknfFvzbOHS_{~WF<pYf0jPEUo+lsWewlRJiIpBAD
zC)_^9@0ic{c9eIgm+_rQzYFiX6u3Ud??&GD0QTN%7{3qs-4D12OmMF<{vg7>Rt)zJ
z<K53Q{*aaNhZBrHvXSveQSRO}<6lP^`^w;u@4oj2-TsA)f1`%+Z-(GrWc;zm82{Ej
z#vh0O@hyyh8|8l+{sSpE_`mlo<NvuDs`nnoG0*U45dX|B#=jqddxY_4O>ijpU?=0x
zkwe%IkXL3J<39wBKYX6?A1iQgGX8uw<3E|t_zN{~?=k)}E8{<h`vuDRCE{NEgz-bb
z`B%vQ<<*S;`U1v(^E%_doePJ!-)(066_oY+wQzlmzxom5uRX^2ACc$laDPHxm@D|7
zk>7uHGX6%I@xLJ5o5hU3g}A@9GyXR4dV3$^??m7ZGyeD0jQ;~={sZ6d0>}3fa8JQ~
z#Q6Kj>z^jLM;Px_;9g|>2<mne_<V?TAHKu*zmV_84R9I8{~NgdcMs#A0KZQWb`1XG
z>lp6?Oy32JW8UD|ZH#LugXW9=mzl&9Ov2uUBsVZgS;-{zFeKKwOfn<ff^TaNlWe_A
zauhSki7?ljO!Bld$qRTN9QZ3KFoH?NZA>bOFe$i&Nu~HMe}YLB^Wk1(Qs^2cg^_pF
zV@!&4GARo9*fb`^0bBDClWMmysSaUvuQREB7n2(BZbV*<?=fiv+{n#LYD&TNF{$|}
zCMDJ}DT(+Nq#YGv(rBa~eV9pOtZ>M)y$0@8CXG!nX&m5FyO}f|^_bYrq)EtQ3jEW$
z;E;a$iwt`}|2xOlf`@fNIFLzjYz@1@vMcQB;TbKpR_b1>hK{W@uw#sVI6JqW86H;C
ztQ;P%k-Nf8ey^cATop^SG>2V0mP~Z;=5SL5H#}UQ-NIABSS;9=rYBEjx70^!0%|%?
z6H%vBBRb1si5UK{xwWyrI#6mdl~NhlB{DFSQ4f#HYnQ4Tr9_9++!S!BCwdbtt-PhV
z2|9^MD=%7f(aK494ZC<j_C#;2LQYwoHEn9>cz4t6dY`X;_62ywrIPovV+sT0pH?<o
zI8)k4G6D{1;9z87)Z58I<T$EY73X+FVv^I{5(z1Ow-3$WSJK+2+U?q>+{mwxjh%^>
zh_?T`uiv2^KX}<?2f4~CxO(uiYxshw1ORT-fwgp^Gse%pW)R}CgWB;sUjMGPKT5s9
z`qM_z%>>z4HVY!Y%V1QDcBvi>!sD@MEbj99(bg@lcBxTD9~gYzfIm>7jFFl;<kptf
z4&Lh0J16O)?m<JPLs9Lc2b)uCMsPl2O{)1p?W1VOV^cFW4_6IV)3KDzv-5{98%9^P
zHhMYtHnvucHoW}9mUGifCmc&nSh{qAnwhXPB(q4xq0RLpMvfd&zxhx_B+G0bk5VJK
z%`THg_1N~U+x@6IG8lEcqrs8tqr2<x>^hEgOD8Clhu+6jw>0z&OhJ=2DoJ42R3QaA
zWOOLCseE6;o!xG!?ra~f^>o~D+1yBE?qxT0^k{Eo?@YU;MW)Dk7u-Ja^-t=jry`Nm
z^!iU;|I=I9eR|&CLf`eUDtM5Q2iZ}-MO8dOpsgMv)7Ge`r77T1(I!FduCuw%>+xyh
zv~lQApLDjitE7#8{D!C9^9KL8O}^S6)E?BVMw_qP`rdoia-YG@KjO<veNppt{?po8
zZPawq=?J>f%Qh4Bnt8Mcoi9h#JRYY<L%EzcX^RdX)E4ok>3kEvn*UVbReO50BrmV+
z;MZw4c4)uX7XS38vL%mZ(`R5ww4GL|?R_+gqd5vmpyB<Y)}{)XISrwhvn8amYZvx?
zW8t-~#;NN&Z{n+O>Rdmy(bdo1(0=sB8@yxdn)~lxbJjigu9=)pPhNBHJ@OCr@Hfy7
zMKpelG=3bck_~6$*c^5qw$ra?cd)OqZ$smlOvLJWm7$z_{bM*t_;dW+m52!n&yhSI
z0)LYKbKpO(yrBb!r(;1ei=F17uvjq5XquDp?1L{4s1~Hu@I46id3j>UeJTcx0fQ!$
z&o9RBJJn}4D52n3P@|_Z2y%SzQ!WJ22E$LC;WNiX*{T?@;Pj!}DC|#~nZ>-HpIS<2
za>P22_kUiz%sLYqOLTT7B=H>lmeZ$;kr+*xoe54)>BRz1U!muO7@@$$G=552gn*!9
zJ(lYeq-%(OX#D?e|IqRz)>flsYTDXrc#58b-%`5Jmp#FEV%&+o&w?z>k%vUF^x&@!
zd}aqf<-yN_(1OoX0~BNi5+XV}sW1Mo_rky5sw&#MPqeg*Iv+ow^-qi|g!>=1)d@|(
zIJ=tJ4Yw%YfhiFbenxIIR1N1mmKeveFq!eF<c3?yvJG3x=9X>I?k+2%4<3`YlV3hM
zS45R<;g^uVtW5iZbSGet@1^}8sBUEktA@_c>)?i}IE-<ScP!CrJ~4m4*J$RdTjZ?0
zroE=;#AEo%mBwSa++RbeDCcysdJ4)#=Uw#qq8jVqB&@?2SM~a%DmIp59i|aC2Gcek
zP5yF@wV&s>EQTR@N-j%b9$Syc1{S3U?8e~d3B1?L<mq@Xspq7Wl*!);7_uiXnRyz9
ztgucF7Ql|kP^$g+@XuxlbqSb!5v)a}|7}clJ|u0R;a1C%#05zPB?O)|nQ*tZ_yc}}
z(T>ij0H27USiF&gR}A>wG-vBGIPuh*4ry;{Khxekv}w<d`im<=j=JTm&bam9%Li{g
zW7YCHN2v0Wx*dD6>CTm%_><E26Xd2tyzKt(@d;}}_WHVuLo;5vdL_V-YUS0h%m`gv
zS8ork(VmlLWW_u#(UYbGFu8))E#wziRM1SGQkwixU<aN-tT040L;Zw(Vf;yc=C)_-
zZt>vhFZSJ)Pw2iv6Q4YVoQ`J2w?yCkiavVTWeVa)j|q=T9@J0pTtcQX!VHnIM6Al-
z^*7Og!1y$xN4)5fYK&2X5x-Om4A;1k20|=O+$wl^1T}IRHkcq<^P$a{C0fAii(ypB
z{ef1n(U1a&g|>5}zY?N{!tOqN_uYr3yPejjJ>KeR7IW!#ztw(g!*Hj~SpH|bkC%<C
z{ffn5FS;&nG&!cZOYQ$@b2^Kjv6s|Lw3vf;`fauofp0fEY}Okh0yyXZu;ix_?&fR$
zZ1qcJEzzch)}SSNyLolMv8AcZWqZo$TV*b~qQzpf7Wo#JG>t5kd^Q2w*f{D8tJPwQ
z++kT&2yEHVY_jXXBg!P7SUbSC;y1@rj$sqoMWF2=y$%ua1S%Nn_dvGwR*;O^!Fd?1
z8#WkKL1{>+GcdW?sX2^RC#k8D;~{~1M4#fpPxGDbOWPf?oRS^(Y!}arFj}-9Ta5B$
zZhP0#34P$Fx`;w}a*AU%t?#oPQ+U$umO}+(WIxS!wnBcQuM;%yiYhbKn<dG77ZB;|
zoOkv5dGb>NwXa7LiRjmf+(2(ZG}wiz%sgWJi>jgGIsPnZ=KfX?8mJ2^L!4-hBx#UR
zZa((80+3k2t!n9h@La(dm&Qrs_<wbnY_iRi?aX#stu|AKNwP@43M~wMBnHzTEs_+{
zLI6$^qsx1^!ue}jOd3DKEE%Qo*&mp=WS(IuHAxGC!54o_ZK19F9?AS9>teRTeB}Y=
zShqm6zJdPGS+juA6^_Mu3_1sz1Hvx#*|M6pnqz`jk<&F@Wt;g%i&gunm7lM5)wE@q
zvbn6Q=6IU;C_@UMWs|fm<yJn*dd#h0rRUv3sUhTSF*dy{#2R#pB0|ttC`isU*)V4#
z581i1f`?j|Q^ITt1pwrK854;<BlL();N3fpX|EpJvEvx8ImWLzq<u|Ws(tOyA-;@1
z#FxoE+5im^Eo3!70am1t&MO2xbV&4L6Zoasm>ylAcBqr(MowarQT7@9BsXzyH534G
z1e0`Rlnqb_RAIW{M7dQoxd<?tIRNMnKvS`xn0sx{*u1=$yR9Et-O|U6*_6%Ay$IHN
z5$@$~TQ=1g<a<mJFQ11H2SWA&!~qaK&l@rEJwd5V;aJ5yHZ7xAolZ!=9vf#A(2wWz
zmJY@1Df8Ge)XNzgK99fG!E$m0`q_w49EDzkMRIdt{_Q!T+XMclaWwk4-$;B6k70TX
z=ad;fD4$eagTzUT6ie&{IiRD_wZFb)^!=l^@Rw`awC}qrwUoQXt)(hmt~$;@nUIk<
ztJ^DdPr3$*hXy(AEp2UE+9X$Pxt8*Hc&5BI&ND)^O6fWoK`X^9B6tAsZ8^NgKt>g$
z;&VZRA?1jrgF9nN0lg?)7VU>c#YI}iVKVtMV&I^SUL2sA9Xn2<8mY@_)qZF;^OV!$
z<wQ4jt=la%6;Rs2lSt<jxME&J<LXPKt_dMdlb;^fr3DyT_&A`=Q;y$!CaSx<S~nrc
zyWDoGm5(!<wTzR0`WdKVZKTN^G;R|kKMduT9G0<og#%$)<8xAFt4E)W10KKJ&)d1o
z4`<sC<Hg(0<0+{t7CeTDs^kMpGAO5lNy`T%Qc5n8c(3NfEAx<6L7m9|(lJ)5DXFR|
z$-X+app6`?l*NGv^(QU55Mx_g&^D(T_DXjs+v9LKouN>;QVM<MpqCz<;np%{lP4;r
zqaL?M%lz`QMm;B9NYEH8+^NG*|9EU1k5yOMCGc#`O|;%)uC9Q@pbV%Yo0}A@{b21t
z;99EA<*K}O*U$6J*M`H>jZTMUtC^eDXuo)DkX75sJ*#d6g{w?U1!Fbwid(nlSiF_z
zStRqVrV`8MJBg{|ZM^Kzrps2`fI(Eq&qUZ%VCjWLQn)GthGkFz0LcT(tUy)_i~PWb
ze1obC@Hu0-n}r4LO@8%lp3+uoAMDWnx#|WFhG&pQo@eXSCzjp(&Xl4$kfY60LiIx^
zs+SA=sm(K<-^V>WxOdf!NXC0qN&86q?xh#r;L)>)B|KXvOuO+4*98HO?4jfcxpk`^
zU^8+npM|P<VnmAAkvxTrO1i6@6q8>Wn*7Nj9O_U%@pt)^gcu2m|17^}h}J6KWCJ>t
zv@Qsc2z0711@V0%PDVqW?i)a)=GC>nC+Kx~*FeS}p5iNes=&dpY_lv9^<|K`GOJMG
zE5^7&yqgjFK*qz6I-su3QFo4`PbRSbk|gNIa3+>jPUVH}5I6C)+!U&5lUe4HyYIe4
z>&a$lqL(n;XP)9F?USc6ZA6!;oE+i8ksYGTfe8;xbPFg9e&VVdrRpkO9Zch#cxJH7
z%@Bt~=_%2;shO9|R5K-|zrSznwM%ZBp3!<;&S0$4H~PJ&S3PrGtf}StbLZKDF_le=
z9k)|^Do10}k~3$n&#EP*_H_-3h8^ZuQ2JXaU@zY|dW@$oQAY%Z@s0V8+F~YQ=#aqp
z=je#~nV5}oI1J`wLIQ^&`Mj01oDZ;O`V>BvWCRJd%56g!((T@-{aY6fa;a0Vs+v@O
z0IK2dXum&DKB?-ese^F~xB8#<w%^>t6TFirdTy3(-MedKc;2cI&D}ztv4^I%ThCj*
ziyQ90UpuyI`FYm%sUlWqP(!Qcg-7n%dk-&uY15{cw0HD+g<v$^10GJyTUf4h{AP0)
z3yojKTJ6!ks~r>buz}CQP*u8*(+KCYFiz80m1pT=kmx0(q(xrCPMsUH1k{mefDSp)
zD5G^q?m1N%Jbl&_iz65-uBs{~7YjNpQ%+H^=H7i%nHnwimHSGDPZ(Z;cWG1wcZw|v
z%*juq&!(bo!`O7T>Wkon<v)k1*pq?0Erd6LZ$TU+JP@MWDIuEncfM$i_*viBX0w*Y
z;%(j;^XAR)w#8#Xn{6BahW1+<$TV)OG&V-QbnC5OiZtR=ME>^QZ-rLvkd_^z#)5Hg
zxufObryg!`lzZc#{xRRv6592P5fce0Hl-xEm^*nBcP<W=z#E7FWHE!q2ZVg0dD>$v
z0`KR64y6=xK{a*<n#EZ4RVO`gVK@#+g?{PH@xgQ9klm8iu4-4<*PNtq`sHc-$Z3dP
zBzBO40V|&UESpx+2uQ;t-q~~(7-U6|%n+9D<NSIq(r|=l(^6U!;iP9qDhVJmqhNAW
z1t&d({_^B{#G&cZ>oNxW9jv+9)$I9SxN-Oig_c%UK7hZDj_WEb$BDlO#*M?@b>eU7
zxN!%UE+w#W<J9!A8`SInM~?bMU(@eW-^I6)_Jsy?6giFv5=4F(0$ap0m>g$bqFfc#
zeDOpwnoY)%(93rx(=q9nQKg6?XKJZrRP#oo(u>h_l6NOMld)_IF<GDj)_<3ARjw>(
zs6M+iRmTC+ALc}C7V>JEuRjk9o)*YO8Y}oKQNl2t?D;qFLv4U`StSyoFzFYuq>i@C
zEa1!N?B0BK0gjTwsL04McVmu=$6B!!-4bi<kVsKOAEZ$`@dHtYfDz(LQ$C&1fHeo=
z8$|E8UnSA4iF7+LWSJA?3jBtPYW&*!o-4=qt(bL3S+U>1u_j7ZpCQm-l2u7AlYMmx
zH!4a*@eEhENs{b-gUMy{c*AjMjcwAWGv@lW4<b{~?fYtJQIVy1qx{wK787qUO0nbb
zD^|PIWh+s9_{etSW93O9O4X=oeOILxteQQsU1_wNN)1KcQcG-A%u-`2sxm~@R+$@B
zTeTWoA2U^(P2Ql%8V$!w{M;a$*Usp>YQtoQvvf*jQ2wL8+EGF4rQjAc;uiEzG%4uf
z9<euxePP}NB?M^!gc=Nr3h?DR5n{bowgr6Qcs%SW8BwiG)uu*<>wX{X3(U5*s$>6M
z)n+q=_&#l6nEa|4ez8YOb9q{<zcS_}FKdUARG&<Q-Y1+VMcM)sDr=o%qoqbH&pGLn
z_-`TUam+q_aNSTjq?NQTh(fWf^DaF$&*gK#$4K2!Q0y+NNzJ*OV}9c4wwms&E_<f5
zE}I9b5dsmqd(P!jh?Et(p}gp4my5BIHl~Hl9ELs@Mz}D!fWZZrghCz37$P~Mu1d~?
zwE}a>(?8h1|AYN<53x+g()8?U_N+)sEV;tdoV{pJ^DTD)ZvO|;^t&(V6L2z~TSiWu
zI&#bLG#NGMHVY^mJXXH_jBGA?Np1q;)EYzS3U=1VKn3aXyU}xGihu`L8($R|e#HpJ
zzo`QozgXO&25>bM*l>oHk|GV&2I+U-2>)u7C$^yP7gAuth~}8}eO^2>X_8+G@2GX0
zUG8;wZgm*=I4#ww{Ufg2!~-Uu*`{`!$+eE)in1}WPMJ%i|32CjmFLR8);bg^+jrF*
zW0A!Zuas6whwVl!G+Vp(ysAHq9%glv8)6>Sr8w=pzPe1s`fRb9oO^yGOQW^-OZ=5?
zNNaJk+iSAxa}{PtjC&tu_+{8J_cw=JiFhMqFC!}FHB@j}@Q$b&*h-^U)Y&U$fDWad
zC!K&D&RZgww6M(~`@DA92;#vDM1_`->Ss*g8*57^PdIP-=;>u#;wD4g#4|T7ZytTY
zx(Q8lO+5Ri<k%K578z71a3aaZW>s0v-@GZXC@|&A*DPrZ51ZeSyziwc>%X>dNyCAL
zOSDTJAwK7d2@UOGmtsjCPM9{#I9Gbb7#z25{*;Tyl-Zho(Oh~-u(5CLQl;2ot%#Nl
z_cf{VEA=LuSylKv$-{%A=U+QBv0&8bP;vDOcU|zc3n!Nu{9=5j6^6DL&6tm-J4|~)
z9#1w(@m3N|G3n9Xf)O<|NO+P)+F(TgqN3E#F8`eIrDZn0=@MQ%cDBb8e*D_eBUXH+
zOtn|s5j9y2W~uaQm*j{3fV=j|wxar?@^xjmPHKMYy0eTPkG*<=QA$Wf)g`tfRlZ0v
ztEyRwH(8<%&+zbQ+pg>z^Ucf8Jj>x$N*h{buawh;61^S+&ZX>H^j?#nw!}!~35^Z#
zqU|=INy-tBD+E^RCJdtvC_M2+Bx*2%C6nTfGS!1b*MJvhKZZPkBfkjIFf@kLBCdo)
zszai4sxmBgklbZ>Iqddc=N%2_4$qxi==t>5E!Ll+-y(NJc+^l)<g=UV6t5zw@$!;#
z*=gejtH)R_xz2Bz9Wrx8RV_99BC1@~sl7QKJt@1+SzYWga7mGi?g?-7dMd)fI(s@A
zd?<*&sKWAJeN5>uMgMZH+KM<|+cUS^t~AUy&z{UpW?AA~QO;;xntfuA^Rj7SU%j)&
zVs~)K>u%=e(ooP|$In{9cdb}2l?KYZinZ8o+i;N-baM#CG$-JMDcX1$y9-L(TsuaT
zfPY9MCb3xN8WGxNDB@4sjvZ10JTUS1Snvy5l9QPbZJ1#AG@_xCVXxndg&0Cz99x`Z
zKvV%^1YbB2L)tU+ww(e6EZYzc6gI5g;!?*}TsL=hotb0Mow8kxW*HVdXfdVep4yL`
zdfTcM*7nwv5)3M-)^@ASp~`(sR<R{ABvheL^?J0q1YLNjpvh-V;WmRLDe4)myA!Q1
zJT&dpP3~Ox?OPs`jpZiejA>`IsMgXV>xPx0&5!lR8(L&vn@?_Oi2EXy)sj?Q8S$Mm
zP{=PsbQ)rJtxy*+R9EqNek1fupF(7d1z|uHBZdEQMm`l!QnDTsJ_DX2E=_R?o*D5)
z4}Rh2eEvVeTQ^UXfsDXgAf@6dtaXG>!t?(&-a~B^KF@z*dl$BLVOt|yVElz!`rm5n
z&%<$O{7{?+>7|f%3ctTlD}Sc0Zs_hY;YO-&eOIT+Kh%FJdM|_@8b7qIL;aj#^MhF1
z(>x4_KPKYTl+AOj0Q$t3La4&;o`HP%m8bgb`*0vs83ZT@J#{j%7e8dKm;){k%rMw*
zG9eKbw_mh1PHLUB$7VNcJ=oL;nV~#W;r|rv;ISD5+Q-FH5g~=&gD`RrnNm>lGJ1GE
zw`K+PW!P*uxsEyAzhLvBOEUkj>)1sV6q-RhP*nGS(JD%Z$|wijTm)a5S+oj03MzBz
zPjp$XjyM!3`cFtv`8wrA`EpL(8Soof9J(X7wr2l^Y-+>){TrmrhW&h}yVPonlai>;
zrF!_zz4@5^8y@95z(7+GLY@+~o<>}!RDp|<u!}<SNlO#Nsw784LY{@BBIH{X919RJ
z4X6gOSC(Gey>@N4vi4Y-r@AF@6Q7ET8d9j~&O$3l#Yuo`voKB12v8pK*p3sJO+k{-
zak5sNppfOFju-S9tC#^&UI}&^S-3TB^fmi<0$e%==MK3AqBrn!K@ZCzuah-}pRZc{
z?&7p`mEU5_{>6x=RAFr4-F+FYOMN%GSL@mvX-UT3jRI;_TJH7}l*La_ztFn+GQ3;r
zNk;eb?nh&>e?Z$I<R!r~8=><$LDON!e1tJ26yLILq`~hFYrCA|rj2uGJHxzz@8b<}
z&bETBnbLPG9E*iz!<03Ld4q;C140%fzRO5j*Ql#XY*C-ELCtp24zs*#$X0ZhlF~Qj
zq$4Nq9U@=qSTzHghxD(IcI0@hO0e}l7_PKLX|J5jQe+67(8W~90a!?QdAYyLs6f^$
zgAUsZ6%aIOhqZ;;;WG@EpL1!Mxhc_XD!cTY%MEAnbR^8{!>s|QGte5Y=ivx6=T9Ei
zP_M&x-e`XKwm+O(fpg~P{^7QV&DZPW)$j@GX#kClVjXN6u+n=I$K0{Y-O4?f;0vgV
zY+%5cgK;dNK1}{#_x-Zyaw9sN`r9jST(^5&m&8IY?IBml#h0G3e?uSWfByzKHLe8)
z9oCU{cfd~u97`w2ATe{wQPagk*)FX|S+YdySpplm-DSKB*|c>@nSp$=zj{v3WyAgw
zqtk_K3<lj0Wa)(KY{<nay@Z_%WF?g?;h`mE$OR&`pc&dDfXrXd7KzbYP_>c5J|0pC
zSpww86>3JZSitYm_b*{%7cv?=elhCFy1v6m)^<eVP@H+ybiRtL-{uL<YO@&D=4<CJ
z3pzc%_qDVb{oUHZD>n?211803vG_;TRU3WPV`g7=>ywvsW6B76c-kXXYuS7~J+@Lc
zSf%7^`HIJ4D|VX9{B<pj`Jyg!(^l<3ph&XWt1jx=+%|H4*W7vIN5}nQf&oY(U-#?L
z*TaS7;E9t(u3Kq~_T-MGnGE$8>lBG~IV;M->JId%#U?}jR@kQ&o5A3HyYDx}6N<Gn
zi;FMCn;WHD@Vc~ETB`jhUq!tuEz&?&YUoOfY~qKJwwOOI5)^BnA}M7;{mC&-F+|ay
z6X6p!17JkLWGEm!w6Kym8U_vLS6SKy3X_0JORnfN5>c^pMjj0Jeun)M=&7-NLZ9@2
z)j60}@#z8oft^qhO`qgPG;Gf4Q@Zbq!Fx_DP1GkX<}_%EF`!5fg*xCsir}$yMH#85
zT3Y4bdV)bucC=X;w24>D>XjaA@K`En^++$6E!jmvauA$rc9F%b=P&f^I7M+{{--HM
z0JXFl21+}*Oz8zr@T8JQp9Td0TZ7rr0+&rWePPKdaG}l-^)$@O*ON;2pkAjf4ZSg#
zy{PLo>h<boIyC_;r{F)t7+rbn<v=(bP)7u$W!VawH>hTUUK_q5L{o!vKb^7AIkbXB
zm3BG{rbFE>fKfZsL4iKVYubQMO_AvYWH<3F_@;7*b}<uSJUUJ;g{%z*;ZMkCFs%V;
z(RP7>ss*4!r5a-5Mr{qoVbpXW1cja+YCd!nQ3xt*CEBq_FNhDc93rhj=>>F59=AN5
zoRmKmL))oDox0VF;gltwNSdcF9cb*OX3{Gx?X{Q-krC~b9}_3yG8Bn{`W6m}6YD#q
zAk<adqiDb>Ezk)zB|ZA2Ao`dW^gC77j#kXk7>zOYg~2Y0NyG9@9L)X=yRL!=`tj7;
z^S=K3l)dWTz%eni<kzjob*^75mCDZS`;y1w*-JeU1eN~{AA3E@Z?o@b-xr^H5W)#Y
z&vOy-yfBxiu6iplL<bot^N<x~<B>ebMP!Z)q@7d(l_cR;2OvPv7I~Va{X>R@4XXh-
zOMOMef=}m)U?`>^E`qUO(+Ng<N+uTU2jzm?spixQ!b6S0Q$rXfDFv{6Go6@**AHQx
z3dbb+NXILW&B-_voCP{%sXBR_R7&C4uNQl#iQ$~g1)$Wdu5t)v8CV~(8!(EezZq6^
zq?5y<SjZbH*Lt3O(&Jg=DGky`uoRyshwz(*v<QFjv%qs1@I$9<n}D$MB5c8igRK;}
zVm=^t9QJa9#+9n#UW|U%R{jOg#W1VBgm9E9-F-talB>$xKwZ1|FQ|>X41&zvAf`(9
zj3GGCzGHqa8_lMGV+Q3A(d5seacFHJ92meB0vj+?SfQ~dL#3UE!1{}wjz|HPWCEHI
zW{zYTeA(UwAEq6F%|@%!oD5ebM$D`kG45gkQ6COfjjk-==^@y6=Tp0-#~0px=I@H#
z7Z|LQii;EBSfjse{lo}m?iuTG`$i6*F?L9m*kGMV_JUqsuT##HNJkrNL~cklwZK&3
zgesq4oycISoHuCg>Jo;0K(3&I(n-j7+uaf)NPK7+@p8+z!=r!xa45cmV`Mna1hT=i
zAkgv-=xDHofR+dHn7FZvghtoxVqmi^U=Tk5i*(?UbiEGt9|mBN4tXfwT0<jzO=!<*
zF`QQK2@MV4SH^;OMBm*b;`h88y@L`A36S&|;uNU|vf~YyC{B|+mmkfCgZ)Kw*BG>b
zIQSzTbod84Y<){2C!IJja=k65vqPM|!xFS?-HOK!3%&6=!T(Z$<>g6+rTpioPBf57
z$!8fVo=}&Z?KB-UB4$>vfxffiJ*^StPHhnl@7Fw@3-N|6BAyp|HhmV#(r=Ll2Y3af
zNJ44J*!nZfs0Z5o%Qy|_7UzOtMt~9CA*sTy5=4c0Q9mP-JJ+p-7G&*PyD$6sj<fqp
zqz`X-6k@a*f~nJAaVF-kWb}k7p^cZnB;B;<=B(qK1v`HEtaNnoj=o(FVUzL&?Jwdm
zOa&j!%jpZ<4BNCM_^6pI1P`dUI*hdsbDz+wk<B(H8xlv2WbkZY;}h8wkH%s%$qXU8
z9%dA`(SFFxSWNq)lu3+-bxLxk_F80hq!V%52uiv&7Ml^f1OQ}OhPf`OW^&~buSMre
zNSXk*K%)g#S)!waM5tz>+4b>6a~%2eXf~A?KRzL4v_GQ!SRxsdZi`B(7Jx*fGf@DK
z&P<|o9z*F!kX>I*<s~t<&Qwz@3{Spd1FV<6@aL+D$=)y%Ini0I*F;vLBFIX*t-7@Z
zRgFr?&%lLnrLjb1K8Z5Z`Lo{n#svLQwFVf#T-%~hswM1I)}y89gU31(IEBPx)P6Ig
zQU-DBs69!?Gcy|1UPD{s$SL|FhPtCvYS%P)&J3Lu$jNd^Ot5yGA_<7SU$Rq>;y78=
z>JB#p1zld#NFeK3{?&UgU*1uzsxF7qYP34!>yr;jKktE5CNZ3N_W+965o=}3S?jx3
zv`#Wqn;l-4If#|AeD6<h<~xZK0aPIm5Fj3iFu_DI!1IHY#PB1{E&4srchU5Mo`=%y
zLyPvrb`+MghTYCPF>_oY2Y||U?Fss}Sa>HvkP$9_KPcb_jB*Jc;M0XIE+qhbP$U2d
z&;h?{>;H=Sp?W2>Uc{rF29ML>EiCy?fyim_mQtrgMA~^uv<W}-W6maxh*ylq0b(5(
zAp-=27E@ufp>?&@WN@gUOPn(379I}U4Vg~Qo)jwJb7e_Pg^`Gmp+s5vF{tNzJVhBQ
z$VB8M@`XJsXC!-){6wetDsTY94&#XdG*yFsbY~cLNXLP73aA74Mq6M9f^&YV`isWW
zU@CY~qxP|&bnWBDi{LM9<Q9DDQQV>r0!uDR`<VX?DK16yz1mCS#C7w%NOCFS@4GJ_
z!<#8adubr1aBU+Q1)4)xal)ceKP^Mta3QZHdlGR90FUa?8Fgtm9g;aTz#d88abx?$
z>&3$@xh)p^>voF;SAaZi_ozepkmLV+&hGKrp0jy9{6cAs)nGCitl6Cw2c%Z0GVz1C
zH-$3>en`tRh)Z(8))4y=esC5oyjkopd;K_uLM(K16Uoowyo4@9gTv5u=A_uBd0McB
zG~8g=+O1_GWtp;w*7oD;g7xT0>D9KH`rx%cs^JH~P_@+@N5^&vZtAIXZ@TH+Rb$iX
zv8(8dKV^46(Z&yFGFn4hNolFPVozn;+&27G?m@2LsJe7YgGEHj?!M`nn`S-w=q$Y4
zB>(63Fnnw_J_&IJT0ztZtSecc!QccI&<3XK0KsV4VV(j@25^A-xlh_$hgq6}Ke~GZ
zhiQV3X|Mlv6UKb8uXL$*D>r^GD8;;u+Pi;zrDxZzjvWE#@cNGO`q~o7B+DH$I?5#T
zf_t7@)B41BzjIgI68Bcci{s-$P8pU>=kLG8SB$x;c&X=_mE3UN@*eF+YgP|eXQVn)
z)pd&9U^7<FY8mZOCRv)3SN`T}8zOFpY>r1QaaX{+Wb-<z9`TA8H_)3oU?s}voE~+D
zzIwq<+$$#Cct9vPRm|Xlc!ffHNrO9U{cPl%uC6&FCn|i=wyld=b>9S8_jQZC19~W)
z*_+RuH*MPD=B_m7we#2A@YwQv$kH2gA%qk7H)?k!jWbzcHWK497Ke<$ggzW+IYI2A
zFQ_A$Ae4bxFvl4XPu2-7cn1vW-EWQ6?|>Qm*6uI!JNaRLXZFc5@3r48t0~)bwpU*5
z-KNE}N45AiuXh{&18l_quuV$6w|?c-PtzqcPhY)q{d+Hc_@OkartG`dddteZXK&Je
zGpYJ-+PmEUR`sOnx42*X$6KT~@9ze#J>YvvaN24jI}4QG3M;w<>~!2i@r)9lI!6N1
z0GN((xJjHUB^|#9vJgy=07qv}Kw>zE+6qQns-L}JIqLFtY3pDu_$~YrZOO$WEpF>3
zXTu#w7J9w+@)x-6oW(5`w;GI8gk@*+!5ew8iD$g=DR*n@|2*R`zxe7azdr7~Z;$%<
zSH@*lQ9U(Hx^%Fb|1?Smv({(NaZW+DGsnNWwX(DFUG8)(b6Rn>MzUxlZhNbVe>`mS
zl&aJjk3F~9{lT-}y>e~pI}kOf@0^%Vdj&m(iK4LTf6kmF!_0HQ$`f-eBnmdTsf$_3
zR`hz2EjKIKWL6z@jj1}us>ZmY)iQInPifzSiOFN92j9$pX*CuV8SPrD#b%Qa97~TI
zS6)?BPUgFnkqG8{{HUwd)%ZsvurI~=Jr8YSkhUA!RANJ;o|D->9S9QB5DxT<?|_OS
zuXZ)0I`?#|uC&pr$PR<{cP*P#ZCz%&<S-xX!(k{3z75ikxU4C5St?4~ozlJCof)+&
zk?Gu%o#wH38MtiYeOmTME_;_*D(X9EblR-T%sh#cRsj=E1*dK5*Sb4Xw35*sNodQH
zZK27co2;Pc;NPgQKv=irjt+T4yDcodMfia7CO01=E)U;2B#zd<yk@iD27&N^;0LKM
zjRSo>ybH&PGFtc0Z>dLwr|Ah}aX`XwTtE&UssYSEILtNijh)8)WWjMm$uT;+p1|=L
z><4lEg%APBLn+FRr&2tGd)7icqrVX<g?NZ|E43ax`@SVWfM^I11HrS7Gs;@Uvy1j*
zy7Xr!)7MvwXSD}XOe<_daap3VQNbFT6Mt!@A##BiJAsXccuQ-A(o8Kw+^~BfGK{4F
zL)eZLZXhX{uE9ik09v}QeU`tXxp`(o53O81$5aE(^3i^F=#sWYiO!}8iP5EFav*df
zI)B`cK>FE;+3j`3p~mvsiDMU>yK$19$B@8$Dy4GClfzo4)s_o2NuM3t-WhCrXE>LQ
z_CQtR*!a0mh<GfBI6f(F$OBZgk8A8$Ghxxjxo0<rMdA}eba1pA#ue?qU^*n$6buPQ
zltIND7K<liEiqaI)mFM5p@U=5RE(@wyWpcKGhfh-jU4YPRb-W0B&%c`;j1mKD0<+@
z+k1KE_deqH%Z=J2+8@4Y`u0S-2}X-taViekE}4>nw#I2S=WxT_H@^Saif`)uhLNJC
zq4{bSCwYBd!4>6KGH5y~WZc@7_X~RqtaSN(`jfT!KhgGR)3iN50ecR$!|?Vq8|xa+
zY#*+B=>j4;wypc<a-u<>lu7?wd+y06`GlVf2vBXzuPA;JgpfkIa1gXG88sZ*aS`(w
z_9`LL4@aT0p!4H7sWP`mwUZRKCu@UWdNi-yebkfmNN+*QU+N*lf6BAJ$FNs^SLmDz
z^algGcLq`f>-uKOd_Ws4y^1_2ucQaL>xyaQjy!eVD6OQi>km;_zvHS=ZpZZrw4)}Z
zPz(rC?a`hZiQV9o^s>b?f-~ljm1*4IE<3plqCV}_shIiuQl=uKB4vUx2T$RCFr0{u
z1v660Y3?>kX@{19i6;*CA}pJsFpo{n<WpdbD;9&x;N{)C8$1>culW61+66XAOBZD<
z{H|h`mJS5C2;ymL##}U*MC%fL0R97OSQ@lUXQ-j?i{z{=l-!$64H{LlTLo{Ln<|OV
zBWq*5LP`KJl74fC{GzzP<Hd0C@%L=S@@^uUJ{F8Qou$%$yeLSBIZNzT#mJTa2*wiP
zwh#Tz4>_Z;;;6i--QpZUrtHC@+RBlt+=_3TyV4gk=4b{TBJAx!GehYbTby(&-R337
zQ%g2)Uc&K|x|eL0yR*VCXDBqZ89C(obOFYYht(k`^q0OaQ*Y{)@7xE~KQ7XN)hGlZ
zl5$1<#s!tyf%>mbIG(9WR`R*{Qc_h(ZGT^8>7lXOw^g1iIE2EdRaR^3nx_UUDy#W6
zy!q(v^QLL*42nxBK!$WVOv)I9Z4InlKtv#qJOzoZTxx86<5tQ*v528nxJ^sm+_tRp
zT7oVNE7-NgcoqA#NPr*AT|8xEa)x&K#QaWEb{M34!cH-0Ro63!ec@APIJoOuP&|13
z9CFAVMAe@*(L6<Kx(ytzkNOPuG30#Mu-3oelhSAbIF)_EK#aPF4p2$>g{3h&p2m!K
zEG?(A$c(3tr<FAIA!wKKAHh<{*<i$$tr3C?nB@T2O?t(k1%}Z$W@zx0^ny6k0g)x%
zGL(35LDTq2CF3WLU9#Xy>J5LHQ@(h3@`CB*ep}GDYSOwpgT=cZU;F&F6(b=V*TLLD
z*fq(p>yRHTG1ttB*(Q8xLAl4cZdp^?6=QjcG;_V(q>MY0FOru|-SE}@^WElQTpCQZ
zAMJy_$l;GISf1ZmbTzkD(^S!#q?(lDIA?SIrj2H$hs*|^{b|Kp!zXPTcjcCcfA+KN
zdlV!rFo2RY@10$^a_d*-?j7HJC;KhfoB%@<h4x2TVsDe~8!E-h5r=-i12H7&6-XB?
zxpB|K$uM)qLI$TlMBj24WMV8lLNA7d-0ikcSn4iwx7FB>;*{;(hx_iP`#qI(?qa{b
zH|YEvx~cE^RQ4J}dS>z%gK-XYm&uvZcgoyLClEhS(`FJ^zV!Vl&2c{U4N9z_|1($J
znob`V2~>KDKA&dTi9YwyS#e-5dYkH?3rN(#;$}@K&5Yu}2s&MGF*w{xhbAzS@z(qi
z&k99O!34}xTQ`?X!RRgjc)80Qud0{3UN4(nS5uZ<cHrQ{FFnVbx*vY&CVqaG+*lP_
z?y^}7bLXEkN<IJ+vblA&9wZiTjk%VGsv0SAP2KD=>1#K=^l&$CdhVr%4<67S=#uNP
z$hnqV471K$Gy&){4ElZt?A?0NLoW2o_3R)!o~sw#>7&;Vq954STsM(+32Z#w^MksO
zsrqpE@Js9$)|uQzKbXiMwttapenf8iB|j(wIa2-@GqE@(2P#M09Rvvhd<D2WTKL2f
z=K$sk95sWv4B&wk)FA)!#By3tk$g8+1(<y4Pc3aXf3?V0)n+sXHh79GS4L}!tj54I
zMQ$Fbs=dl+E3#}iS~{Eo>u!sE0Mx&cK&$EtK}}WywYEC~MF5r3cUj%d$|lLwY4>`)
z_D++uNojUl@4Cz8YF3nvwp>JWtwGtSG`nnfeNp(_RYv`S2?qhgb_(1$KD6ymTRgnD
zx^~3GBD2+4vB9{=V_iMG*kQTX;ycG^`f{n+VxR4Ah!t~JQ6Z?Q;ws}Jw|#YE0jR0S
z+36oq6_8xno^4J?Y02d!iad3xPm+8~r^*Vvr4A<|$^#UEbKvJ9YHF=Ch2jF`4!QS#
zl8We8%)x>ejzT^IH%ymE#EBe<Zg6A*lB6P31a!YG2Bxt>2~-$}ZXtz&vZ_NgVk4kc
zOv-dk(6ie2e{lAqYwn9Q$weL<BatOlhM_{lS?;r3bNjP=GQW;bmfCN>#^Nh?MpPUK
z#Cb)4d96*6`>t7Zwsz#_qbv6CnswLS9Jt|b`8Mqz?`?H1tT99K#4#d+VwAy}#eC74
z;%UFxaNB!Zw`R9){Pncrny4>k;D}TV2BU0ua-+Fsp>wmcX#SGkn`h0O`pN*`jUj8q
zIlnc7x6NRbR)=wP1g`-}2unC>O6ow=s{=NV6pfEo3=tY8<P5lc7mbh?KbynYA{NJ>
z=*$TKFk8Wv0K8B_**m*Q>+VW*1&gD#{#GSc(h#YQ<Gv7Ew0wAAg!<c?uFj|x)$XL%
z5vos*G{?Z5KK7N!xn1A?(mKD^LlZ7{M^=m;SsaMf$D8NhJY~dzmAm&+)-fsFJZtnX
z$1GnOyz0yKfk|ppC|MnGXVV6w!{m~te?3^?oIWGeG`VD~i!X_sGb0?CHPPo^G3&NH
z!|H2hCZ%+8X7NoklO<Pgu8WSpb^W>L?*<(ZUx~>L^RyAG3}j0&Q|mJtT7ec|Y7cr~
z+A`Wz!Sqz9bk0u-kftk^q{FPl4N+T(>4(fl@jEEVfNE$b*XSE)(t-A>4>`O^cXfrj
zd_nrA-@@u?czM(o3OVDok%p3(((12`76;LwysK$;diTl$BdV)!p5Gj=swpb=j2N>b
zqJ1D5E#zO9e(vJ6+rGuy<(PS-B6=gHvFat<HMV4OQ)MhV-B}Sl>&)qr%j7T`vT1ju
zIvHwGCk5)id{uDi@-e?0J*(-W-RGZs)uhSeqv7TA&h|CUx(R0ysoiQC8XnxL&RXI3
zO`H`8Pe&^ePw*`{rIJhzUg@MuhUL`IONG^*V?R0h5@BRDFgEF4<Wa~C7aIsk9UDsc
zz{x?9i9nA+QX!=$<of)b$%b_O#I7YPH?Ejg?Cx+EPg}8Z<&v(6_1~8!OOu{W<I-gJ
zY3@^&A3Nik>5b0jSrg0r{<4X)nw^c)uQ_Ai_p>ic!=K$pmnyqYb=`6fUo40ru#Gh=
zMRJxOD(1n?Mjz_|IWyJK5^fh3*n>eI0MmEKq%=-oIdGd4F-LT>RL)Bp5FWxb<T6+k
zx!aTNA+yJn5KJ<(Z5HZMLcX9)H(7@rIC+*%$U-e6DaInH34&t}ZDNIVVVH-&dS`ob
zcI$%PWyn!c+F@yJc2#5M6RWnqD?nBhRmSFIwO__g9*DQO>4aNLNXB^o?YBSXQ`SwN
zI*N~(CQW~P$HpzwrMG4IZKI>TVI4nQ$a-#)zV}LE(xgQ5<jH+s=eOVY;QAF4vfKFP
zn7ex91Jad++$PP_Oi5!r7LiRo_A-f`fJqbG`UM3TZb-s7jLX!HpaWM<xFd<rg;}Tv
z93K88$eG%_X31scrD~_PIv9K4d|J=M)r*PqACS5^v?MV3Na3kH4nefs>MG@L#e!e@
ziNtg{Ph&qpX9FLaMlqMh>3)Nu%sAO<pz8+=lJhp81P69!KuwU}e;l+xmIMOSVY+p-
zeveujeS09gPTz-=wjDqhlHsD%rBjFu)>#1NEsbe=#4Vqx0Y;<~+mV!xwj%}Z=xZn=
zSqjxSH4T~v>Xd*=2wmHPN?@+9!}aQz-9(UIITZ==EB9}pgY1H4xu^-WdOFSK!ocZc
zd-qhN$eZcN#Q^0>8J%)XI$4W(IW6R810*ucIM7Q#`twI|?$L<V3FnA~E)UBOmStfx
zLqkw#lEkcx`L{8rSRz8nOU3*bGy2&<<;VSO##aue=Y8d+%j=S{^05<Vu6Nt}&?W0<
zP8?evOV(Zf(pTo;Mzzq=2@)#CLp5#ES04Ix*X(^Ccm4XI@_mQWQ@5|1qqfvm&1!C$
zv3N3dgFQ8Q@r;({Syi<y>YR1kr>3#{B{Z4X(xm&Cb21d^F9MKi<Jd`WVmGimQMZ<O
zjIKq{pRFzNoIlWlWdz{?-CsdRIJ~VC(!vug#C%>D=wk_r+a=nyK!s^$<T!yYE})|R
zYsKAh*b@ck+kxYww4B>zdXglCdshbfKBqa5aMwN#LmSNj6+DPhH4K-GxRl;#@=IJc
zm{h}JsmQFrHCioWCBGzjr5p9L4$t4`c5#Cz(NJ#+R7q-)Tx2)6>#WZDhLGJD964iJ
zJXu`snOYJYy=`<+b*HDiI9XPo8XK$TF86)Ub5=NC@VN#f$~GDsjk01g$;wDY!KqOh
zC$x={(PT7CH7c?ZPH{RNz}Tel$>M0p;je4|O2|%Yq8@sCb7gRhgR4a*qf+WGD>E8~
z`wb<@^QX)i-7&*Z>U6qXMt_B2M#tzmqZTA1PNgzcvs|(|<peL1ZYi9Tu#YNqPZ>-E
z4t*ZT-`kgepLl0g1>H!{(h8b`Ko=fR+|!L_Iji>5-Qf34-}z%X8+*Qwe^XrIS4Re$
zWUblH=yEfj!IgeIQ>m}+`V(4u?6c;s&Ym_6+pt|V`IQ1!oAC@R1XC3tL4BQ7`!TnU
zWaoqG=nh<He~ExdE(Ifu%~IH9;p{f312jTI3lxPX)&O@a?$Z@wmJTZtViN8U$KeGO
z!3xsC>I@e7dV7)8VzO8ivuC!q{hcxO7fo#2I=<`rktP0OfAO-CQE!ZT@}e7lw;{c)
z@2l7RV$@&S5H@{<za%m}efI48ezd9m?a`i2?-?_&0$OqJr1V0=ZKV}u!-9du{-~Rq
zM+A!fEhDG@{hv3~bk_zJG?e=*Bg1~ry|+E8egAlCLwWgS(~B1dYWCD#_Payh8$V|3
z>=Bj~^Kp5At=Jq=Y92rXP@{-D4j>U=-a^gM2s-nIZA;u=fbm2BP=Zca5W81_cA>Tr
z)x+r@{pu_la2Q(wm`Zqyd@GhNDNT&4oNHb_>w4{jIU}m&iXykMxvi;WL8;y7t}cp&
z9CEpR)WlI1qmOq!zg4QTmzv#eP3>NLd7V-+YKmuyLFP533rd>WnvL$F3b}g39PYk;
z)^hXQ%5jO(B}-TMio7@t<(V?7M5!ycd)u4Z+~!hym9+KwPVO^Wkhi^Dc7$R@)o$oh
z^mRbgQ@5EvalJa}V4Bi3cs^w5pYtbXXz5W|e%+z-K;8M%Lf~BlZRvNI7=)cG6lbjg
z?)l8iOw!mU`uaKN@UL4>d#edM9^-ePb(VICy6Cg-H^Ew$n_s801w`A83W!_Z{D+1G
z(<9A>WB@>)D%cxw7c?Xv7N}6gg?&TkLX|0@k&VL)YMI~SsE^dzj2^3BKL7SM$!0Lt
zj;ytKWw|(58n6_NNH$JVRh!W*wewMr7)H2jOCruuJAIIfPMFpf6j=hL!D3nVT9Dpo
zut}|VoG<%v&w;HrQtz<%%T&X##*z5{D!!egoRN}R_Xxuy+E3dhx6!7mlNyuqsKR-P
zlP#8EKGt{Ij~8kXY?&*%q)PkPG;rziWPd>HefyPwV49!>f&Q_@Fn{8Cyz{HCXuo+(
zJMu<#{Tl}^-dh<itFK$TbJFYyvm37Fi(fDuym?#Kny%=@=PE0gPqvrcsAWI+&oy@{
zw@TM8Q;P!sv0jPE4Y$u*IP<RWT4Ir#4_@dSb>%n<XpXb<`qT0cz&8o~H>M0IrDa@V
zMHgAog4`tk;DNK-c{HwRhx%Fn%ir3mex!XeZQ4QY)vQ_iZ(j4-GcO?@6Z-Y*f?u7_
zmf!}WRoGkI#BO9;5C<z8SRi0KOP|9!FkETngwhEn){S5f0$AlLWL(7|jvO}f;b3wr
zptloF9tUfA%vSLjj`X=b152*H2<uC3e&rQ!EW51<W0lX_+SH2W+TSAShCA9H-zg39
z#Hhu~#@Eh?4lBDP9y|AibDha6%7#Vf)TWj#9u>FvMobtV@Qm?#eNKbbX!O@xEVhnm
z6LFnWu=E}6kB82ZEf!g}n5&IuivccTHk-_5cazDAe+O!_j+dQ~aUBy~PM34E<a8<_
zVF~o><Jx7j)MB^1bL_HVhT@hvH=VU%!Q#u!HO0ljU{Pq8`SQgJHk@_i+?HZPWTM4V
zUmL1XWV79lJ0IEtf!J^x?!JhvP~64pEPm(lU-M;s*Bez?#nKy8i_8YK$PzPJZAKU^
zn2M}sIA@Wn_+f5ilZtGTuSk-M(Ld;G{0Lqx3J;b$Qt%NINu5qh!oUhhjF>q0X-LOl
zjunFnO<4Nq|BL`!xwvyj&g9Q0(A_<mwwi)l51*zhc~BgP9(v+5)-nfdJV;AikFtl9
z<r7o~CKj>*xLT~l{^nM&k<D<19^%dPe>GzB7+^hP^L&bD7iVdXe3wobJXVX~o*tX$
zI5xthE?gAl!4+v~+ASbN2nYIqNn_#3>!fi2k=g*Hg_%caA#p<x<{Gy;5F@e3V4M|J
z4sNa=2$t4L9(VaIB@xN5egCZzSZf8<ZXUV(id!Tbt|ckEBN*k@@4z7U+TWK{d)+~q
z8~A@c^Zi%2Q=Agkep2T3g-hPzll@Yp<d$-`%XZ5Zmus&-RO<Csm;9dJ#LK^9<I$2k
zASl^h`TjFnnA#HkM=#=UDskHqB%OR+^80HzRs^A7P}0F@Zq%<|E|@n9ZmU(CxJ_{Q
z1P+J4uN59xKHj9<|A10#?>lNQR+RtHTiW>(*OFG*-nzu~6DMCrX>xzP`3sj}D!||8
zf3dk-w(NCUMu^C%k|t?sa>9gU_Ms-R2Hhm~4jNfPPy<PYa4c%a9BAiQrtQ!>H!3Zy
zV0QFf=MWK%>|(eV$pB5qOkC)uou{oIJwb_i4epV{W95%N)`+uOrLx7fNtD^czsq4B
znAWb+Zsk|YX}a?b+sS-!*t2w1JUqU6Ol`&Jrqa5=4eeLWzr1DX1fWW`6MYf+8SOW<
z+EMJ|fp${RJ7q9G7J+`pLof$#kBJP^i@%wNnG3fnK?&k>3IUVo3dbs9Nt)x_q|wIB
zlBAi#1Xv-<+nr<13SBfkdzI?dJ|3~?-e>MzG(yRsA}I_oEd{HEGZ&7H|Km9mEbL6r
z{Ubhh;h6_QXN_?>r(eWJ@CM1-yn6Y#am!aXXW!EfCpu}=btdYT?EJ>j+jeuc%;P2g
z5*J%*$9La$^cy>u0DqjO#J%*IdaaPnAX#A6rRQ+sAHhY@o32==Ct3IF&sM14!2`FD
zA))>ZKsccTyp$U0)vjABEY_N5lh(@e+Gj>sYOTgf?=82K)zw-?JX2d<X-z&`W3^P=
zIs~e={FYnFYfprc(nFF-eo9tUJD7Q0*@;=#TCA0~-BwX#IRQqOMFm|Mp)XlERG%uW
z3hDTa{;MkpG4EkD8qlYbI6(8FzE|N#0~M-MaX}dInJ`DBP9?EH*QTn_re-r0k&1Js
z;&`pCX4=$>$x}n2Y0v%SjDtBXDxV2TyyxQmN?2%8zkKkKF*!AA$P$1#qrF%fUu~<Y
z8a^&|?ZbY4RiQG~J1RM^e&X2M8hoiU&L|m`O{Y?YO4QEe#k)I3=^E6@V{}EJ+2bm6
zl*uz%eP?#0s&C#jsU1pGu{ST;Cy7}QI@BmMO5$E3>URt`tp3C_(>^tkcbHhO0Hh0A
zpTVQR{DjsD=y-Bsl#nuTVKRxYbjpSJg|K+SEP+^Y*z3S9p(_-s9^YP5Zc?Vz*o(Qx
z?f03co`dGfW}0T>UdEZaW>s0XVEzlw@s&bc+B-9;^^AGsx$AE~!1-7?tn9z|p4}_?
zRsM&sjg1>#Rb#6jFBRKMeZ>I_4<%=&rF3yqUD&Lik@7<@2*(0rC)UqPj`Gfe8L&{S
zhGtB67KhF{GnLZCF}gN0IrIPU_9lQ)mFNEOyl0tx-!qeCCX<;7*??>lNC*Q7`xe43
z2$7wD3MhiII4W*v6;Y775v{FSYqhp+|6)6BZR@Rdz4}#KZR4%=+E%T%_gX8-9KPT4
zo|$Aa1ohtUet#uro3p&@^FHhEX`OcGjq==$UeAQ~<6AZzZ|l75nn<#}+mo0rqWv5$
z1N<|1yMgX<Jv|>+Qmz?53v|%P=^&74bwqfH?xIC`L()W{|G`j^>kbs7q<$hb6fL@S
za#nHyi$$TJ7*i!6estChR}QriMs#yy!@Po#AYde<sLQD;qjdSE;el}uSIvuU`Q!0y
zgLdgx7@b2yc|`j(!j7>WL<h_}cLLzLADVAgNgY8#1Fh|}$YYy;vM@nsz|vAPj<`XW
zXwGRVeu@T^gKq(%OY=@kT00t1XhxFalF7^$^m^TdY4y2Ihq?}y2^PzCcJmbK?B>~*
zUR%)FT#4Q~O-N!O&it}b8zFOmbe=egH*Ka<9jT?dFCMAcagAo<>tKrW%w?P_A_gd&
zXwHTn>a>WEWRzimu7EJ*$3~Jfv|@bLg}6iH4mgJB!<DQThd6ka{evPxhuqWwEe5xB
zf#O7;g?|$6p!;#Fatu%5;Mv$0#&GhoX;1`k>o60eP#_N!xYrQoMf4&rGLau~D9ila
zYGD*3*M<KhTU6G&l35CiwgI=I^x48t+-tU=xLYX*&>NN?v*n6op+dQM!Kkr@qH1|^
zh7skG&aC;+$C$OSR2!ke>7|B6JDpjV%$Jo5hI14PGyx1I=Diw7>h@vzL?PLTzC;`;
z?}nkmP%J6$BG!9mxz?+Np<W(k3}{Xl6f8SG)p2HGZwh`~$&Y)0CW(L%$yC_vL#CB>
zIHbVy&<#H&Ekz1(ksSJ_NDQ+XH<JJceP;vzNe4O2<E7<+egftoEGifzw4A`fitfZ8
z%yW3H5b@&OiDoF>yg-!YcW8YvE5v*jFQ->F;|Q-IB@Mw6YP~v=jY$~9n@~8MVO{1g
z@g=-I$aXs1BH&>hK(~|d>Y9n*;xRm&07=pLuqVYV-bwyCUIKgMdLSrovEs2f3{<EC
z{Td;l7^sLu+7e}I#;X$QZ$1d(Uc@kK<6!qdqET2X3|a~Bq2L~XG()AKLenoq?)g>b
z<++d|UX&}*7)y8){Ntc{RL*udOS8r%JV4EZ64fUF85n7%NAWejYbLV}NB|lS>SnYN
z?PFpysSR*OodDcNK;OVKsSbKS^g;|bSdogA=};1?3rYq|Nc_tR!b2ln>=bNTL59uS
zZjF^Y1RoS7qF^>LEqt<#Mu0ZjpiUNLtsc5%t*8}5lW4OWwFXfqGn-q~H)5}2mSRZ^
zKpfQxOe+KC(M5V`tz1zQ)@pTTQ2?NgStmwpvPCi&U9wd)m<^I-w&{(`Vb?Q*4ApV5
z(G}DMfgox!S_C+OTa5UkEbB#G$SC<8vLrDPPT_Uq5N~7`%Js5Ut3!o!f@HJm?b;(N
zbbv90V6J7=E&)E`b|}N4n`VOOuvo$<xzmhK>IEMx`%EkX8mpug0yY80enF3?M57gI
zQ((b(;dv_v7PDKFgL<RcA=`>|6)q^sb%Gp_aU)<?%bd`03z9(q%&}XLy|QRQI|<C7
z6--bPF*5m=>wp^uX96>jGEsOmBhyuDZ8}+y{bG?UqGqyDfYMtJ{6@xXI>fVC9g+uG
zbQzl4fY>P6VAkv8GEpapl2>quqSIoui)Mr95Nuw@voGBux<n^@3=DQrFiIw^j=D-<
z9-C}70E|_@WRgXj!75n<^c@^ip^SG01t{a;7BMsk)b&C6Idd?hnd$Uet==Vg8HR<I
z*)14S0-E077iH8$r<ILH_)wr-VK~xC@F~_x2E8B~B(1?EYOS))VbR+qy+_OK0B9Rq
zkqpfUkXsp&PicMBu{N`0ll^E*BL!DD@c|46=EJxvVm7^%nQdq@odIak%qRidQUKhj
zTqFVO5+%^17-()=07Wn`t4_8XBvGq1Yeg$svg;-tV|G-*#EKmf`pk-MWTCjk%(bFe
z2~29zmqfJMVkCXC(ldg)sz{POuu%Y?+GF<$+MvgvuYm4Ei;PhYQ9@nIC6}IAoF-B0
z)Jn46FNh_!FoWg?Q7V$&FB$}lVvGQAxClo;30$HL5lDihud*A%4!dB3LkV;^7>%Mq
zYqG!&A9RXvoI%gZRwI->g2SYPB1tbg0U9UkC70cRFPTKU0L{E!2e?|as;p-wNwA;>
zm}yKfYURNzE545Jz^T+srPZUGX{3qx0H&3ol`)Eow3xXj!2lx+DkB=}EoF`(n^)2W
z_26hljpwvSdw}akJQN9;WAQnnHTN=3Ko19hR`Qqt#60*^1acxN84Oi8W-4nXd^@w0
zVpMzKqWw_(cHwQ`*uQ>F4F;Ncc?}XU{q867ZF>zihsu1j_i%f38%41S53RkO-5Bq<
z<^ffy6fQNDn;z=lDz2OXjU+MMr0ziZ)HseHI3+}-N8v$8UWEK_n5pL6VPUS<!gEPO
zyuXr?;0P)}hXg2na8qB7{+PnO^luOv0oC&uTlW6hPDu8aA$#wIzJ~l%fvfJ|?r(@d
zZ$d6|gy<nd)L!I&a&dG!c*ZI&N&+Qos-(A&-w6;V9N13d3b6OtN63SNrhtu$+JpBT
z`CX#NMz#SNU&*Qkh%FEB?VwCkm3h2rAc~M{HE_=~5;SL&Gn-8C3@W}JnDaHC!*IY5
z5lD$kSkKhevIhRKN=Q|w^iiez&;<RI$pCf*(l+$1rg{$R^nuGlYJ#kwL)rw241%Dj
zN<E}ZFkp4&zJDq=PdWty*EVEXd;Y5|DtEJWhf!%TIXq#|VdZY+?!(kTWHp1u>@YH^
z-F?^<Fq<n;1z>bJ%5Vt}@l0B2B$XfpF!7J0KUW$rc!~hPD3+Ms%)ia=pl{0nuS0_)
zMk9rt16uqE&;%{gtVGqhUs{u$%()O~zzC_11`vYVVXfdfEU}YwTDn~JYTSiTDRNih
z4#ap?$m%48h4*c`rhEH7?VLTW9aCi~b>z~)W0xM$c|y(8H%u~4?Yic=Yr3WyCvBMC
z9P;P}Ra`!CY1TVd3~%qgX48EO<*6O5d**2Osm_lAM&ZKw?7XUKU$o?gjCIcqH|%NJ
zuxtIAj>_t$YW%D0ShIfD2DzU5%qnHsRN0vm^B3-wcim7D^;K7~Uj8EuKZ;X3tlbVD
z(=eh%wxAVAWPvDL3Mmg=TPKpMGzTdG=aT&qTw(TFBIg<;`kFOrB)&>#;&>KE1kb>+
z2B2dhdAN+pj}^ZH_t#P}WOC_RDs4ppbD0<}eknMnviR2G%#`AniYwzKw-y(_5*$-_
zmw5S-TNmxQbkR$TmM>p=*`CF(EG{@lszbazB$k;2MYhTooy&w{`02hJ3>+yIKEOe7
z@JMkSHwDW^-jsRwlSM}sEqQs-p1n(#FUOllp3=O)Tup&?1<^)a@`nk7JGz35N>n$}
zBOy~(>fI9qX^_jCE*5|=cn@Q((|dZ4jk)4MmOAk+0xA#wuDRF-%lTtBwIA!9Gr9Ct
z$c`7mj%LBTedq<CzVjKD-~lA6kW3>C%Rm_T=dk5?<j-2B^$w(Zr?s%pFn?5k6)5+W
z50y`Z=ao;~spTs!zkG#Q#BNq;w6dd9S;QVGi?W-Q9Z_Bt4dXuFM1bbQ%G0aaqq#<N
zBYw(a{saG=^oumRF~`B2g9oJ(o^b-TC9hs^t#pal*JhAFGCYDlK)aajbezcGb7Q2a
z!%74D6L@Jlv*JFuVgqdjFQGT%AD)WCl1dCd%tb6gUlqT_<#D!+4HS!VY06@ESTpl4
z&`aQn*DgAE%XLf7G3nNJA3U<C(_p#mGK-;e(UF7QYjyIN>Lu6Ta&XaF9q!a$AUtk$
z*e$72Su7q{Rad`o)%w|Sbyv5rzAip{{VH|GtUY1tf`Dk1!6*HuN9YH|>@$Gpvq}N6
zCzbi<_XLxmE|LLdr@JCzPlDyUYO2J>kDK?krp5CY@11*7)8aCVVb&~zrEGE2O><kf
z#TP7YylLLJ@l2Y^uF~t0_DF^MP}RYP)(YBWS{n{lRq&0_H_=q#){hN{cCbb4&mke1
zR2J^&(F+p7y#h))$&Mcqv1nis0{tQ~Rt7YRDB`@3S%Ps@N|rXO1RCi+U`OXVmgWXv
zeE^HnMT-cHUcQzLooG4zCyP*~pE5!)N(n(|1D$Ot<qcMiB^KM~Seud}qya%wDZZ&5
zO1Pjx3b0T%_XHlsJCvs@-%#EV9#-B^?ne&2J_;{KMjTCL&)`3$lzN8I#()%mP~Io+
zBl`zMPhq&JT1Pc#il3`0ID%0jBFmGyL7B;esz%%|@4IK$wd)5z+wt~^doB{rHBPcy
zjG6luZ0tQUSJY4LPA;CD`C*{EBv!=kfJ3<1sBE0P6Iyy<+WOmf-LqcQUv$@r-|xuW
zXEfU<8HF|Tj`ePtJNVh;#mVl;!Zd%ZBotIO;<t7qy93(%op{+=TEnw8a1nENyk?r3
z<AcG64}hzX0EZYFWa!DMyoOZ?Y7A;&%$<+8w3MhpJWDF&HY)#a9A{H4aw#;oh;9Oa
z<q+I6Wns_eChbG&59TkfBt}R~S;re$k<pzC>>tojkD`+_dDb1*Ao``HQpP(gi<J+G
zdw8GZ>SRL)4OKuTMcNVOb@(m7M?noGc?geUJ;8t6u0>WYa5RLDJ>(^Zu~>-DTzEbb
z=Pw6=C#Q(ao#I<MPV*z$u=hth<ZFByyk=6P+SlTUVns|yE`rUOvl<qZF1NNrS^kBk
z&e{zrE@XS3{7Js0?UZU#9C<PShF7@FkR9f`Odp*2)V>t|Sa^jEBWtV8YNL5Ce+KO1
zHqBg6?QNQUAP0QbaOG=Lqb?5ZLlZP3JdqXFBbSG?_!QPegco`UzEDBCfy7n?l|<N8
zQ$r(hn_68Q9;$`E7j_lffBwSWsT0OeD5>5O(2uWh*{9fh*}OFkZGv)4J9g^Su_Z-y
zktO~$6KAdO?4HIhm;a)+gVRbF%BNDw_qH-YUp3>pUiriPU-DaPao4J;%WF%Dllm58
z#~3FQnvO5O$UIv}o~Up(EN-l>@f8Ipwl+*yG^2h|U81N>`H9+~R;Nq6WZk+k_l_|;
zqH`}-wki9Eekf?yVOxp~wx$i7mS&wyRfA;|YZ$pD0iFQM7=^Of;Mb5{*g%Q+MV}ZZ
z4uCY|_@8q>JQ{}h=B5NG!svf6mRKr5#bVli@?ZR%doi+~75m0rb2XFdcTK&}XtK)Y
z#n$?!<(KX3?3g<BjcJ=FMn7bC>c;rSMQ3)+>e{<=;f)h)dXgJA+DdJ5q_(=fbyjlD
zyxOq~%LPEFsh*KmXEIW|_M9hDm%Gdrv97&s&LCvUqb)02CoZ4W(b4X%EB2q(#G5YM
z&@wJkH_qwtRocyZt7Y4`(pa=cD4!kEPl#4{yum=*q|U{&O2DV&=)yXRws%3})r>`7
zty6tM=kuW2FpR*(!{^GYty*Jp1woSmG%(Qs4H^#!;!Q>OdkH@{*K(vzM1v#qO$_R{
z7+Jto9d&*4xTs#V1lt-9mM`tTxU{8|32n(X<T7GbZEa-I@)etxwN#IDR5(038)R-*
zdG&g$u=vHfdm!uA#%F15qTZ_YAVc5mIa|*^^1!a$ZIirqN0GeLX&p|ZE{6qSIYTT6
zWPEGVU?{R)Vu@@2q<pY%ertGau`^sz+%j?2T?^LUy0o>!6M-UNsS#R?m__F|Gn3X9
z&{djT%C$c`e{S8Bi4#KMy0LTS?(Vvq%{y6Caq7xk-@t{Re0DV4heM^6gkrEpL-{{%
z)|>$4EU3Gq;JmPH{<qHyzc<p~60#>E@zsRX+#@>gc;qk2i2FwVHuCI??#%xdiMweM
zWaT78*EG!|+OV634wd0UaR@TenRhksaP%AUUdHC<XBegBEqMCQEFOgm@<0T73?O_!
z@MRU;-<t#<ayl(zQ6EtX7zxg@m%hcKTY<7x<veu?c7tCyowAnpr(RgQwzL#~Y~ORw
zwYA|-{C)OH=AP_<_(T5e8_o1A9&M&)oxiw+KUca|8RXBkJ(pRXy&{xm4>0VcZ2nT>
z|Lq#TX5O&2h!GYviFiX{IRHYEViDCLf^Wf)se&K4oOU>MQK$_!7!L(|E5Bx`dn|^Z
z8D!P9pUu^~tYLFpB<~24WRqgt9Jadj5ce6JRV}}8O%6hRA!!0JH5LHs91WhgWWLJ-
z!KL(|#^$p^amdJ5g8rZ$Ggy6?%`B;J_Kppf<0XMKcmmW9@>-TJn~gIShXI5aI(xEx
zlSd-_6cOeEGR2J$MBqWpK*2%7D7_wEFG0(EP;?Sr1EpZsk|pld3%9nq47KjwNtga;
z^X`AUY0HzBudMExSE>hYgVxdT>O;3bbp6&zv#t6lVjtU=7OitgFDbdK><hU?Cv@(N
z^6$kbT>r_jozEYb*t7qdj?MRk%pu)4==CR^bNgHOU-j*emraW7T2WR%b?1^<<CWFZ
zx2|OS{tRz1O4dGHHz0Kk@%_2lIo0G~*~-yX*bu&;a@;hFx~uWSnd&7zLyc!k+Y^79
zzW2%A%}?w<r+UFWi$^lbT1WlM4;+2q+TJ#*oVRKGq$U2fe#cY!F~*lIFMl-N!s7q7
z`0h(*P3YNs_0)}bg=C|(#^H0dFF*FieOEmA;j*^!UCYYGPua0(=6Gf8`a6aKk@-5z
zZK#wXo3iRQ#^E@|lb2EF_!2P;JUiB#<|qPXn!w{A$3jCPhbkV`D#zXugX5Moue<Ta
zb*m<A-gdOFzrXLBFR&HopML@VW6pdRQDJu=cF^D09J%TFn_4%lC+*8?yXm$IgsVqz
zx3vC!!=RDR#f&Fi9e_24lVXQ_I+V@|bPXC|Vgd?HZxjVYF`F8i8a(pd-&KC}%2DN$
z=PthZIc7h~N?-itu1EL2df8>K?p<`lIUQwM$W=cui|bx}?bTOb6E1v3`QcM^BdcQe
z=PpkFc*njs2H)6MH*NX+$l&D3bkD1=@_CF6^b#6m7%YZwDoKJobt%*>6l7EZ=V>@G
zzzY{zEr!q?#B%Vk9VD%4E~MxbJ)hcn+q^0Z=@qNy9XNJiUX{8Ns(OzNq-fqrsbhbE
ziWT!T7SLhKQavnveOJ`2^uK@O;eGSx?>nsSlq%#_#sdo9iphZ#Jwo|{FhMbfSrS>R
zQiwFss8KQy?9j`|&<*8j64q^OVgV#e63^ksE_l^9($wb9f`EyHv4&?kqn<@TAOMm<
ze1YGL4dcENbcWZd&n7h~Atmwe(#RoslRpeyDguG<QT0PoGXFh1Suo0sXOrr)Ly<ik
z4M9lqGQ%+ePgD3!uJAxmOlt6-I<`}C3af{OvYrAn8j`p-iY+v}g+0*+pGTxII3MX?
zd*J$*zurlyfj%JPNIe57m-OPW!{lntpQV8dPVE9M)yP(b#6x1(P&@JR4i~ea*?ybX
z5~H-C<}|*8>F}j}$MRo9?SM8!=4Q2wU($EzceOopeaHDv$UhoQfY3;W=e^g5xM87H
z;I{8*GeL)G;HH8ITBt8$<nx(boOIBMlcKz40_(kY!i-BA7;Cs>#)NOPnG>ql&Qh*h
zWt>ty34rm;*F33uigBg#?eg{u7R{5>Q`U$R2j3@_Lkx_M{bOC#*zx1XR_*<LoGo2&
zxIr06>c*B-IGq(GV|B@o{8hJ3p1*lD@AJn%&$i*n1|9(=hKoMs|KsjeFu0HwhG-gj
z6NR02xQ2KllvU2l&Q+ddYuKj6LihSj-&!x-tUR@F>EtCIlkybUel`o1t{IyqKm3Y#
z^I%x~1FN64cI~X$=bbnBPUd;Rxn=jXhSG-2Z`jT3lX2q?hsL#({W072*)<WKnphJl
z9J>OlJJQjT){R0dcw$MIV@Im_3E)riYBiU=q`Y_6ca&e9uVeb_jW)Y(*6X`BKYM85
z!b8t)Ui*XT*XL>UuiVO9x8B8yUlNM}WBcAqm)&yESfoE>5R7X!<MvnZ)QqWz@-+8X
zY`75MwNMbjhV@tZP4a0A=dfK#`hq?XKpj|-VF}G@eGom4WdVV~*<oF$#eJl!=ei;2
z2(gyKH;b@uxuk-&|7&zBfw3w_W7VfM2dtHF_k?l{Hfu3x3OEB6C_y$C8w_5AfRx6J
zc83udI)c^8R*iNmG+k%jdVp!FNlUdg+7#UujWV)~RWp3c3bO#-XE(<1Zj;wwAT?X1
z1z$A<@qO4EC69p5;9F<jic*bo>w(jnYSbl8TpaivJ~v3;LD^f$vOykiS%0kDp1GRq
zVCg_iC;5ATIf&(~gt<F%9&yZ$_M`YIM=tX_Bfr}@z09QUKHH!T*4ODaw5_(gyY4vT
zw$})2`7fCl_)f^)cf;3QkyF=1TwfzJE9i3PesUAzH_Q=CYWn6A>_DK_8Vo2`%JbUh
z9jfe_*S6Eje-d8cyItyiX=UK|B_;1L?UVG9n?6x~K;xR|0vZ5x!At8OJYq-&B}jT5
z#x}{P70vb-p^szS5EvI&o&q#3;_jrm%4X&6S8u*@S<qj1d~fxHX_J1<*1h^FTbPH@
zCENUGfOLJr?qVOXyQCBl1Gc{~yS``T!pYlWTKx?lGUtcC90u<4I7Y$k`Yww<{BU-C
z;B|0=wyn>v#ZVm@V<@Hf3s4l;7vm>@w-r|)yZS%w?(I1*QeIrsG=I+5nepzsGxrc~
z!pSc|SCA)uB~*o*q}1leH+COyX<6)cl^Ly@AOH2^A6)<8mq0BH{PW9E7WVFW74(6f
z)`<JCj)p-`VTZ*O2YpYtC>kEd2^SPxr15s^#3*QkxXWqEyk{wqj1GtNbEQ|(J1tK6
zUnIYs&2$CihuMv=&x^lu`v>+G339PrtlYp%HorK*>MU~Tjmr477+hGhviLYl@>d-K
zU!uT<e8u}&uMua{lw-BIN}g;w9vty-4V?xW^E7E<dlU`V$c}o3XlnIW7`o_Q0nj11
zJ3kyTozA_9?kPBHoQq%8XX*WLS5LPL^CoHFT`kb8Q0tgoqA-!j!?U?w)iRRU#2u5=
zW=G2xobttt>PY~kv}%w^h<Okkge4dNwyEQ<9EVM6{`&dhb}{U-n9SpsPwd=Nt@B7G
zhtni^bk)1B+s#j%4t~0)bK>&xW}uU?TFq&;<VQC$OaC{+ETgHasluCt=Q1ZZA3wgC
zc+2|v^Xr99Q_SKr*452!GgfFF4sC_8ZFc@~U7gWok%gz2<GQX}|9D6cURx^&Yl$f(
zT|Vdt>?(Rl#6glkWN>Gw4B#URl`pWSWHsaPj-^{T?+Rl%;){@`StD{A2dwJ|V96v&
z$16bph~Zles|b2KXKVo$Gy2J6qqP8xDY~bRh4}rn$()b-mt@e#Fwd)MdNQq8Y*-I^
zKqOSY68uyOQhX&e!epDI){mhNNM=IwXQLY2+&brLfPWf!2x1u(hS5ey?BxMlyyvL*
z=no!g*pcWU2>q^rYg;4Lqki3-zG)X;d+6E=r*#^~7*m$_EGg_eQ=4jA+oZ8YMYWd6
zb?&a!UGBQcmfE7Cu~J)W?WPsCJoTfeZdoCs5nPtKdb}+(w{hma1+}#c_RZX|z*J-U
z`YpG79lHe^?%Xkc?nU**&Cy^m+F0WA*VWfFHrCYF`F$mgbgj9#{-U|#cig$|;T=<^
z?0A^d|2~dA8{jc0T&>LodGPkA2Ce<%xn1wIlX?a%!@Eq4Md6Y$Pjh8C)#tL9&B{-Z
zDl*AaMfM==qY6ZMs*j2-_o&#DtOvEgKO^o#a!G8V!FLJa99SgR=R+3-1WD>6kPt4T
zQEnn&KOhDe*4&&kDJBfJWl@4anq%Se(e27Iv}pbO#r>3wvWJpUt}zNZYx9klkhS?P
zCbrI418eh@4+uTT5z<4YR!}Wu!0bb{)|g-CHs~wgPLx_;gZ}Pe*r4aOmyr#+pp0lb
zHFY6iYKHu9A$fn1?OWE+XV41w8uJSK1!e3*<MkMDzu61`>OLwh>v1U`ou!Z{BA27G
z@n6d|J;N3qwe4uQiV3KTDcpf57p!m?0p3so1Ax@X#2IiaA}2>9&SUXL^1&>Xh8#Oo
zQ?C?L-8M|oiJLpU6Q{%GGh;&0K{owhQSY%3!h1qcSn>U|R_L;f`cCNUO-efJ#sSbh
zkg5Hb9y)Ys=YeAvt+X|EzTjRz37BGClh(UmXfNBmxvV{Ttan9870vRhk`;uSF?`m!
zyWBXXtg*^vTY1s31F*aP^xb!Xf`+yrz9*G!3+V51{2PK^bPhMbp(nxq$mtS*2*~V%
z(N&JbY2FYBI?V#24?IeNyZFFOpZ~&zB|@M?sbh`bnlV9zkG}tH<X<*A+9DLM6)ro;
z^e4;0bR21O7`1`e+xOF@2{X_-gvpJ6$@aA#W!H&!-#u~A{pMi~sZm-1zR#&#z_oWr
zoH(f{72p)4IsB&kAisEnXKg#0hSTB{_@NYfoTS+(<_%OTG6&V<v=*{cLsqOSVOb1y
z)JOG*Qu;WmqtrL30ZAnnC_!^@RT38^L=g_)Sj6!Fc*Z_XTKfmns}9PVgJ{#_P>dLK
zx+5aQXm)byO7#8<qr$}GR}2LEN`YT|%<GciZ;7`r=RM6Mo*0TlLOlj7cnS45yAWwp
z+q;s<uFpTwLHjbG={=@PzI!5ha226lk`m^GIIeHIlFFpf>XHFtDn$5~LO*5aqH%?m
z$2wT6nTmGDI)?$JimeWHNO7Kra|S#r4ugug1UgoGf)+&L0<x>3keV@p1OHE$p^lBA
zt*GJGLDNniq=XZ4I+Mb*82pqbfoQ@+p_JGdB0aQaeTB!Lr#Z$97FjWL@MMe@Z^D+s
z&IK)jih;Wbb%1MocDc@#$)|IKVWN*g2&aNVGFMmdoaL`cE`T^;1?Tcf@^i>q-czu=
zA7p!sX62V=__ATa&S(g9I0rd{)J6Sdr^qB}JA4(U(1Y-`7)a4D)MA`g7I!Mwm6+KC
z^C_nUK7sX}(ukntS*u>(uyyY=UeDi#4Mlus`)o8@(xaLmYhKp;LGw3oP&Rni)G|cQ
z7Ur#P!U!VO1g(pNoJAP;`R9fA(}??`-wW?AJpaG_{Fi;Nu)eT^;QuU%IRlFc*+_>_
zx`&U5+e^|ih7FuRhmOU(<NWJqJO2OUe&H--7+Ge*Po=tXU@T};2QVp-uMyk+T*X}f
zIdn8s!Mtmk;h(?w=zr@*Wwg%>m+aK71UlNUGH`jW!KA(Xf;sb)=69M;|L@O||H&xL
zl74Wt!{fDxvzf&5M8E`Lo>IUfK@P&dqXA1j9Ysfw#32a=jPn2f=>Dps?=)zh0y=nF
zlN*J67GXr@2Az6He%|WXWJyrTG^F6<|JoS+k`Xm{tCR{6!43_i__z|&s!LT*4`;a3
zwB^UO!_$ZGtWdT77?_S^7Dqv~y|xiDP)-YnK8%pxr7p+Lxp?<w`w+dUIzzN#oaA~F
zOgUekRo;YeRqhTws@i6UmSJ#Qb9$8*V4Jn-e}*U+4ZrXLxOHwq@27QU=nxUnfppGZ
zn<6q0aQ(uS4D_j19RBDWGSdpWpP7xBN4Sm-S%s|5k?)~b3Uy@uAr_DRu>4~wPvULd
zUmZLLn47GQg>WUt!yAzB$G%F{zY<r-rKeG<2>S~B=am%aex&q3x^I|U4B;Xp?}AZk
z^YIrlk>Jo6{xrIjl;V~Ot%d0#DhpmMHo+{Xi^Rz)*c5L{kRh`PE-|>;1QQ0h^lDfo
zd@>|=U5Y91Dt-M)<#*Gl`Fr}3$-Z<?D3nU4Q=w2#n$COZmuW1T>}Nfx!+IeZ!v7G%
ztcDQl>kp+vdVk8V$G)HSg>V(Daj1A4`JRB+&HA5cq3-~n7Y2oBATKb2YG`uA6X8S{
zY?6>Vt(nsVyAxRF6YnNNtUn~CLrIFaIITfuxMVt=e)j}2Or%oj&|p93A5+|pOZ*pd
z#pmb`Sv&G65piAWD5e2SoNSIcgY-cWl#06J$28$_X(YT)8umd{pHg7Zo=kQW0->a_
z7yr))>upwE8ZMWr(itk!ke5-mNGO~-u?owjq}8&~H}EaBRQUYJk_kzaMJ-j~1H#0S
z1rxw$&lCSsY5*5Eh9p`{{~@y^&(mjM(r6cji;VSvEmZ0dZ}u7v>WxNaH@lu48ujuc
z{04p_HtH?AmEG!dXI$pv!-8`CYpz_XJ(2siAQuczyy!!@pi$wT{)yp>!Xhe@`nl`z
z1^zAe8p<`=WnrFL1*!@PPZ=huBJ={PS>a{s$9bBsNe$AX5$!cHKZH|luaOs}hA*pi
zw$Rj=>@_5!LqS+x4X9Y`l2I@7_L`@81m(I&E!VL96$Z9khIpPCg?Db=MU?BT)g7f3
z1oR}eOn#rEov2`=TqatC@g-cu`;n}|1~nUG-Vnn;qJfhg6hp5T(E`dSLj-kY;GX6Q
zi-z9$l?TDudYiv<9<xXdBK0fE$!Eb=>p*t?+4_WO=CNA5llp|}o}F1=q4CAqvoxnl
z-+26xjr)Osgn&kH{tC8-tSujYAX&ByDk<0rhH0A)eE8>_MbIX>Z9mf=3Xu{d5DSGe
z{bXd;!bUBGMEs02AatuZk6h5A3ny8K=vdpjVylr_0=J@48tARLevxvQQ6xQRF2uMT
zDdlo6=qryT!$n?JVgWh91v4nu1G=%?-N5?j)BLSd2l{{#%0EAV&&xf1Dr{4qxZQ5=
zL(D1c=mH9)qTh-=!wPQK;G!Plb9%5!QL&)AKmk+G<LD6G0z+kv&!JV}%vKvNb~es}
zeJk4n7HSPRLJZ^NZRA>}epRD9NQD(&9O0<P+eIYSg1*hY(a-jEfj2=b8_5xa4}OJX
zB56)TjjEyE5U@>C6ZElh(DA_jLN=MkxobFd(kG<j&+7Zdd7)5fkl!HDHh=vwp*$K*
z$ja=cEQCbV+&CGk0N^4leBy1&o0MagXPP}Dldja4m$dfTGXMghyUDKU6wie<eP~^6
z7f7fl?FKEu<WS3n{4cvf)NJokQeE50#E(S|QAWMTS}Oaywu{g(jrxO-q|4j8gfzJZ
z@a6GXFPLBT_ED}=k<To*RX{m&$_NN8oOKu))lf5i@eQKpj1q6}VknrHI?E4II+H9c
zF+H%o>nzu)+<NfxNo^YXCIg}g2^EdzUu!njfY>M~#d1*vxjpI7N&Q;y&0Q(nt9Ov@
z0UAx~93%#q(<@Bk9CzjhzLPRMRY32Y!M4>0SFb)OeWL#Q0u->@`-CeGuA;1us}BAQ
zc@mIQK>2shoeQcVJ#!PiaLyd@Kj_ibnQy2+9_9fE%1-skgH%88v00xH6V6~l&y7;<
z3z<LsMAf%3>*+Y;rwAP`&tJ>jA`DJcZ`7&@iupQ%b%(G56`bmS<#9BG;0CU_T(luy
zt=;C3<w*P59bdn5Z9h3?X^?<PLy2vLf4Q%T^?ghEqpmz)aJX%Th_*Aap>Nlc<}xz{
z@bcSeLnyAw`PUGAL>*F~12pf(YnG!XZdkkO7$`Hc?ByN%$Z$rECfLDLP%2`Mw2Lkn
z%iuczcuO)T(Vwa}C$&16nxS+qnzVRQ5p9I84;?;p=#nva%=pfX<JFfOO0GR}P4|P{
z*Bn`!?4K07_ST;qTQxuRz@h7U!|m4v8@AoQ_161tJGkZktqsBJ*ygUqot=wEZuaeY
z&|@-r9^AA1syVe*Ywet?nEvH`^R~A|3|iNi_VrWtzVgwD?&TM6T(CG2>Yl&x;$;i_
zP|dt~<s;<EEY+oH^@Y@zTg$W%#WP7RwWeuHNn=xm36%N;{u{rILkbEX6lPT7Yk+PS
z)&K`qfN2<1jYRpe7JJ;ZV8Zf+7;s*oyn?~0SjKvdQ1!gElb4HI%za+%r%eOt%9R1-
zx6UTmP*)YPm~-F;kqXU=L>6wqbsm-{)G2ROAL$rK4<&wrWS4F}$7>VLjZ~K@NB#Cl
zO&Qzj{Xrj9Q?1IwthH&{H`*sEN1LX>TEL$T9bDBnzAi-V%H>rqOSs{8i9DPnOQEm?
zKnSNAa;HMY+M##OP3;`0pT=G%gsg(SQ~>24N?A+(Cl^G2rTi+Y_Xmo`>Wi*@@Y*8%
zxO%^0<nvm9+>U>2&c=s7QU*VIcq8^q`sm^J3$P#9i<jPZ+ogB`UemR1U01*lud<i<
z^yV*^lTqj~dOZ6Ykn7dTiI?)`?dWy$au`1>9SGJWj|-YQ|Bbro{q^IrwHjL#@aw6r
zO5(p)w}zsz_FT2}`msf*s$lq^*3AS90U;2;%8zQ$AmjS~uU@58ERcbWhv?f>K#BeL
zYN8qi*%SY*!e{wB?9^3;*7vWVA<6l3<rGR4b`9)+5s+enfC$%%Nhn5~)|Ax=T}R%b
zkjxIb>`r<8_4JXqkECB$U^#wWOuf$1XFNlXZ{n58dU(CAELUC!&Oi-&kb(YyL&bkw
zFG94K{HSTIT!grnt(x7Mt9azgH#FZz%{*?b|DaQ#z(AfKI!4Z}p<~>Ge#1Se1*{80
z*9-3X((C!(%0GrhVCY#e9J%8rDwB&WM#Ib#hh$(WdygIeQucm3{$<Z#PaXurDE8Ph
zL%;LehHoEnn!BuM)VBd(O8s3!uiZ}X|2(CGM&@%M#UWW1wro4U<CDB?CjUe|R`M@p
zPqI6v{$%Gbuq%C3i%;wne>#|=Kl+eJTk1Z-(L@12&%MZxw-kLv=48+WES(PWIT1Ks
z0C<=YX2Yy?Fc%$1$a>sE6N@S(ydbyNTznjed+MR<yC<)IaP=eae|j=;-nvAhxMsqh
zf%7BC+?ljGOClJQaynwv{r2|d(~FbSw@=)te7eTwwA({vk!4@If7bS&ZjUuwcG7Do
zD=TAv6*jL7jZa*jd1!|%S`@T;#T}7}jsYu;cj@nriDcB?m6794S-Lo44VM-#pJ>p#
zqQd(Tx2JkitUck{ZkFv%h>+T$y361us*p`!x@ITML#@u!?BZJ-!@DqEXFzk1cNoI{
zJl=+S{D?*ZKK1{XW)YK5yzt`pzw`QU#6SP_sM{sCSn6GMftpB-*B5YYd}6E1T{V8s
zBM)6)8@_GeJO87$68vfVhG%-%V?Wnl^6Z65%hMOv_5&oUSnJohv?fUse?PIwpgrjj
zbkDBTKUc**{+~4@<S3F;xc;DmVyDhfB6;1Iidh*|waf~$xR#_)CnMD&jReMo(<*|1
z31dhHQm8aC29#QU3vJXfTzmRf-6H8D=mjb$0}jtInq@_^IybKyphO7Y!eR$zgdnU(
zEvB%AzIKM@MVO}CAo<Mg7K_AosRzQ>My<g0R3la8l-0m+or@Gc^(h{9NIr{fQV%kl
zN3UE~w#1zLA@FHhIrSu7JIh-WZY4nVe8^&sG*`GBOE@uIK_*As<iV%F%5nr7mE8tp
zi*k|6rL~k-Hx+C3@E<J_s*fh$xOe0|?9P)9v0qFlbQNOJu^~tBY06HD;+Qw__Wk=?
z%nqgxu*2V+vA{A=aG!Fj_$QB0p9sLWeFXSL{fLaLL>+3;_M*cli^%=z;`psm^74d}
zCj*Zab%E6QT+owC_c5m2HMR6aD{F5vvrm<yOJ%Rm;Zr6nld<#4OO@L~&RX`5cikn$
zo_CS5+bMLMYBaX7se_Zs9%SpLvL@vo#T<^BKm5=f4YU7ZYeNa$EcVMWW0VQAbi^U3
z*t;Y{c=>4M^bRUw2oc1;q9jPZaA_vxsFaP~U?%O27@cleW3dOF$d>Vq0Zl}ZBVHjH
ztf_?4md<5`q8EHId=*llqXPIzIAX%~1B?b5_S~HV>kar}&i$g+Smv7ZlTat1QzXxJ
z$_Fac3X5RMSd@80O63eVgMA|`7viFSV3ZmRpY_8pOoLm0i@%=q@I7J=7Vq5YX9ffA
z{>R`WG+DU(#C;6O|HMaL<vBfyGwWTR<1xth2vQzc#1c#wRD_Fr3Gx~t@{bExA>g9l
zl)V7Zh_060KjCS9biA=f=<m2LwWy{MvTS2bcGtW<F=cL5+`&)%{3+>azMILnJ&h}h
zly@(WRadr83lyzrB*7h*#Kz%c#TEcwR<x>ZLH44Gb)Vv~oEAv$QE>6AfHr(F(C#@+
zLJlGHE;Y1|WL2(ysP_V;dWc_?Nl(dVTAaYOpjag5{{*~1y#T?AsgabJdOGqoA-oeB
zE0oxN_!V3X&c0eE1?A93*;A)ACcg=udm8GzJ~h))e_kxCET|AT%Htl--<TuV9Rzfa
z^071GVO@(exBpG~TNX}-IdM&SEQ^@K=6i&j@?MkqyZUN&`-l%R!)Xm42?)i+fN01I
z_wDCNpZfL?Y7SfAi8z&ygG>e2VXnV<@TsN3YA17M0e6&-Kk=YQOE2LMDBtsJQIke#
z@?QDP5g#LZ(1S@bh&gBDacz8F<R$`ib41O^&yN&Ze0o48Au$pHJkd2yxShzVEC^{o
zxEVj+u(q=JjGFkE1kP-pE9bY?pF3$vb!4W+X|~*Nk@e8)b=`MmH}mHn@C!4WSGTqW
zy}rdoj<Tq$cG0bo;KZ?2$&#XT?E3x2QVTP-Z@!(=FWS(2E~PwL<nKbmM4h<g4n;>`
zRpD-jIg8-ap`Ym@6rNlM3=JFCvr)2b9N_9ODp{J#8`v;h=Es?IOxl<xDTFrEW^1u2
zMHxsJOkDJckGK%`L1l`IF<uffstv!sw3x-|G|q}ylq|DR7V4*W(?-%}G;}P|mQySZ
zu*kP!&LF}Tk&YDIA0ZWw4UT#ZE-}&+=8y*s&65R$HHj`57P&hy;MCPVibGIFLm<D4
z1T+fqihrK)18EP~kj!YiQ&Cbsf985*mJvL-DC&!DWNiP_zZU+IQADY6{yFm-TgNoi
zS-o2V(M4M>xNiKM<#Q9_2M;_jSY<GaI)mW$pL&2rnEk=`q!=(N%~kI`sC=rtDLn8}
zu-KXG?La#BaBO_s6kHW8nX-Fb%j(vN)otM}^dQxZe8|KrQ8!qjze?TYv)4`h>UH}t
zqe$Y&x^->4;JRt+*3Xu{ylQW~6s%=u)@<sQj)|Rdsu+M@AbVYo`6PmhYode*<Rvu>
z9}!qmL7OlT#T4rTQru(OPi>~6!BlKwMiZNC$FYcG5yvTlmyw#v=M)cWYQ~gfFJVt>
zq~`S7oR)6J2?icV&xW6Z&I8CNu=}8Y!-3V5*oU(pJV!{pyvacr8HA5P0nDoEQ%(JY
zi_HlS4K2djpeQwr8f|LDf-$pdJEIqbnAcQ(`R2Mwiz8zq+ZHaqq%>Mu7wuYe%n&tL
zfGjDLMa5%lx}tTse#w%qZMbXkq~r%<8NgEgk(yfXgz;U~-7DFX3+bnQ@#AqBY=^OF
zLbS7X)|dq=R(4l+ji2DHt%>*r30Rp-(iA+JEy;u?keU%+qc(@`QA$BS9Orf!N}fVd
zAL_Iua?ljh5MAJ^c}*yLOiMzDF9{(p(30MIi+m$<`Ua+XOL>c2D0t=$9GupiRQ`FA
z{BOl%>K)}7|3O^Dzk_}@<DC>em{Rc@>6mR)GzU+fJP3!_lP56}Ebt+|2<0=uUVxPy
z3)N6@44izF$8~7*yh5H)fjBg#!<YwNcNFgJ&FCX$+dv^2(iY|RlLr&cJ?CvhDiK^b
zqdxmD0JgNT8)>VE4emB7mt}4}d2r)5g#{ZnU8q)|NhnorPaQnz>S+LontCn2s+La0
zh$jQ|3fkihRKrX7xJMtz8qh?orW`ed<POS%kXt~UVzouoVAelIN-D|StN)trSa<!!
z2b%2WVza&Jz{S_E>rfqDgrtxfxOwvIr^UxInxzk2wXb_tKnHl(z^v|lS3R^;C5-qU
z@k^Q^e256y0(|hy8uo+8d0&n6hRC-)<uiJi3S_C_T2Cx4r!f779Y00Q@G&L4IF%xc
z6zpU$4l;FzD=A5nW+4)h6tI6zYu@qv0dAs_vF#y)UXQwkxe8-fM7yQrevJ-jLqq=M
zC?}t{QSfkK&q&8wc(VXjAv>)pyDz3Z=lgVFfaOs{79<SSvt0a^8ThZFk~CRQYc9M+
zUHta13$<>aG081CD(x1Z!z{a6rfg{`f{nt;>Z~S~76JTgmet|iqonNy9qSRCrj5SG
zE*k8okuHXMA1b|YZ0qc>KB6<%`;DPFQ>HnqYN&4EGLuv20mv@Zt>Scu^WHjG$A{{M
zn0_!1B4y#@2tE)shK{KGiRKDSUb&Ams?2};;|q5pJXA^P3}#c(A}>+?UHMSdS`A5u
zx!-7KdwaT0vc*icx+RrkWvS1Vqu=l9QLeTd`z1pXyttbcEn$YF%gs^<``o$khc~%U
z9?(+A$FHjL21BG2Kpc=@FYF5APed6YZ)jh=UwQm-OL4H}p<gSH|62Js+J0Rc-0;2D
zwklyDBa6wFP<U{L_zeBA84G94`Z2wh)1<8KI)rrqF!hkIa#-~wCwlAiO+Dh*HX;Q3
zMb_YQZ6t|qB0}VU;c67FDbPLRHiW-7;J!xONcZuZh2In?m<zv;PlGom$PvmqOQ`fC
zzc0Lq&#AA&YgvQxA}@$Iz3}@~Dk_><%olMV739mlk7y|VeJq6h({N-N`F)AkKU*9A
zZncuEumPCb0)>TTg$*!DALN=JPBdym6qG@%J)>S~Clne0KH`mlb{f%P!tPP}AjxA#
z93;`Q1V$D?)kIu!LsQfhjw9EQ9F=<QgEx*9)_Z^coaIq3>y_B1`piC?(juo)nIC0-
zDn9&Z<}dFxHQlKEWj$Lbgq~n;oLYO|eW)MPm|++FFVI|Qe8Ff4uCPwVdtGoTV=nn!
z<sXA@XQt0!V@lY!*!!IWGbc*V#0F-9yuF}&%1mtit@qx`7O^ojU}?PAbs*lLLx{l4
z>9Mg!5}_H(v@l9y2_n5lmXZ?=E&S(lJU6Imo&ZWZIn@mAKqMS=Au89C=0ru@=+;YS
z)498q9ZI9JWB0j$+}686F?+mvy={HRr$^I7WzrL;!!dIDMD^t8ryc8UdcBwRSe?@Q
zeCZwRQ~JDm!Eo-)4?J-5xd4^sKe}D^^(*(gg=;zY{*Cfo)5#lh`mXYC@C%ts-TPOr
zx4Ya<b^dd{A%gZJkwN7csDcQ{QZtcq!3W$l`JPB2vR!ctTxBTB83d9%-Pf>5jAH>O
zc|Naas2cQjC5<M9{sC(wrwOWz&$*SHEkt9Fg@C&fg1sR7cQzB23SrB<+1Mv`o|>qX
ztN*_<Y;zjbbS3;ng{(af(M|Ncu$XKIs^uVa;7hGmT%Q8gJteBL4<WSV$%eFq7JB#>
zp0iX-C5(oALou489mBshd&ltac}LWi(CgsaDL(eO*GXYH2uLp{vr@SV&-2TX_wJ$c
zu;DVWH;0OocbL`LWcxFSsKaT)I-4jmq{X-c2t|aJQkL}QXiTVMz=F`J*S(Tc{UO0!
zi%CAn@koN|GR(ehQJ(p;)$Op{@wSOMEh&o|_<kF|_h;qZJFEty)ADP!>Qx>8!DwP-
z`FJ}oaQjgCpV<rxbK^lLGrfI>#o@Nx!OH&py^S(Mo<6#&dsVsr*A}PIAih}WFPR&w
zCRp$^BQjucQVv0ZvdTb~5Y%*mLkorYIJsDrg^}#t?y#MKoS(VfIorvSE~hJ+Nkv_H
z1NyT0bd&Z4`Byk{k++vY9$qbIp;T4E&6tF`tlp*!>j)C5KxYI&p)K>A@*LYD^nxH$
z?vczftYFCQBHl2#E4np$pk;es%l>Foya6Zs>Eu9EYEz!e5Y{R^h4l>CRPYp*(qm5H
z=D~}jc&KkX?%Ns_4@L11PWDH)q8*0URaN#UIU9C%a`k~+cScW=kFDx3OHQ<-c(1A|
zhLPT?d~EY|Lya>!Q^W8jeqE%Xq@>T#)`R;Q;n0=BC`ofPQDBM+{rFksZ55a(iGAa)
zU*eU+_dJAYMzc*kC0`CJJP^FOO9?7Xpo<{uSO7rZNrA__;wfikngXyqdcC>NU}wp6
zrPBc|2Xff6WKjHOlr*OB8%+b_HySNtDX$lf;WU+r55_k%G}>I?y}14c>;mc66GV=~
zB>p6tL*)LIuB-?uX}lCp$PRoG3NBNh#Q-2Qmv!*o*&zk*WvQ}QR7jc9RyUZv;eI1q
z1myA@D>js9##>)#Y7`z3u*P$CtoC0yo8w|Q6F271w2yF)%8KD0_2xTV;x+lRX_)S7
zLESy7mmECL$tj(~EAaM1nhN5QP)RT+`Em;B3)pSP8(VtVYgUKyj>BSg0P|KE5JF0S
zre930DlR@=+*Q0v=*uq{`_A#ko)-3hEcA%gLXTvULWp5*D*ZywDm-z#xOi1heo6D&
zsfhffDTW$dt<wT6I?K6nu#Yoo7L9Zz#6jgVe^DDk@E&#s&6aq<u<v30z?vUZav1mV
zmcxAjlNYM;OETPFQHtj#))@nVNN2efONy$*hzrn0!poA*3Oi5yi1mOT^a1^5_fM}n
zuO)1Jz+?qPwpi0!_u!3{W^+J@jcBg#<9<+r9x|)+#V4=nxokt*6Mrxxl?Pk9yK!tE
zEGj}ezlf^Np3{E;jFS@@NwTLfn5^M{0`ZS~9*#&uMS&a?bfaj*P@aq784ifB`lr}}
z%)gz6no)U&J1L&x4vWH?0v;1HGs{yD;uWMUKA_Y|gMs5JpcI9zBwgzCDQVYKmy-55
z9hE|=@;H1!ljLAYKA$6dPCPeKrX+(wB<hYtGNBPpq4^DSW|>I)HAE!7yiAVDOsdl1
z^kJ2l>S9UXuCtekeIpWyAb)r;s3gmj-+uKnaX)3%EDkWLFD+A&-j7eww|<vz3mw@+
z!o7J-i5e*B%!gz#%|0Q%l;2JabWbDxCwQ11P$bynZOG38kCFJ0B`TK7=h@1d0fA4t
zUfe_GQkg(N2rHK?BVnyiJtW0*DPc@WAk99n_)0`HBeku?<qx6*Tz^sSo4khlcB&wD
zP@&d#u=Dyiu0n<sv0C(6B+2G33YJ+9JYUaVw;PP2Uk)lr>&#xTfkW^^2cYa9_rm4Q
zin3x4(yLf3=0BY<dnio{QV${T43pn+S$0@l6UI5MJFU*wn8t_iTTYO97Aj|CUP)~S
z3c=1mw9{<1Z8zC=U5^wiGG2gWNVEn}dkmsICKKgRnemaDeXg_NhCtL?r$q`U9;*ck
zNzw*Eu4gql;vky569C1Q^VU#J*L?QlXO2Nc*o53VM!Bk|cFAToo|-~=ncd^G-UlVY
z&B`rw=P?ZX%UzbMtj<3?{QLd-BID&ICK%-6iq&&}<FsC7aVb|nfd^4krfCFD&TEjF
z*5U+aw;`63ycp2~$m}tW`ix_$*NO2uJxZ4t(lr4|h`Nue0nbNrg#^T!R($Q3C!E%6
zEv~71yE=<xhi#M2ZZilwu8c+(?k$aWH8#g<=Z~E_rmo2G+}$qAwN~eZtsQMnt;4)f
zZ?jrNU!r|k)tWtys_2}$u}v*KiD@u1toiyofk&w|9yQd|Hu&+aYmxuPB&-YQmo6x-
zFCXLc*qxDJ&6o+Tv&S5IrSu0Dm(%)~wme*A*E-!tY{>T{IwK{%rJaGAcrfB}x_x6~
z?NgR#`|L{eSv%T*Hvmwtyp-4g+;<#Yu-bvpE@#a&$atCK%V}j(r9`g}0;71P)B2$A
z^>07GDy&Am=Vx|<@=_YGAKMS!>s6Le->|zU{Oc`LG~#QV)<2JRJPc{DYNOS8_y_LC
zl{@TCr<q;&YlG!-i)(4O(~2K<xGY!Gy*Qk-h-5x!4#m?bFSzwEsmm!eoyrI;arOuZ
z6P)FM<=g9n`066vAkf+<xJ(^pDy9%0aBi)z@;ew5{WO>W62$lakMd)^-st?P%lI2t
z)Hp`>W4-6c4x>S@{PH(^%>AB~t9w+1&30NhSzJq;*3A}|Fx76iJC$XzW&Y(3cE8JR
zb!47(SvFgpOI(&s!0&j{;v!y#gh|u^kVZJ9B^rTLKq!cWhf6jz7>B3{VIyUy6St8`
zt}7v#!kob_%sj7rhkZ`%r086h2XZFre!9|+So+}e;-=^KDM@y(a^Sx%DRgARg`+6@
zF2u-VGLQ-ZWzz#K(++!YiRJ=~3|GVj`!3)x5$zUkh)3uGfML}Os*EV|5hF(UJ{A{;
zN;^ys#azEYS4VvUT}QTW$g@cuN;(_~!om}CfZ=y>M0q>J?!6&0ot>C}-$GouFs%Hh
zTmXOk#{D|~3BT@JuRegi$szQ;LUnyKd=u@?UxB<`_Ui-kIc(E;I{yK`ZY?|iTsd&P
z-Ds3oUP!mxQvQ9=j3s~$dYyr~$?Q9b+{-|eMivJd_6zn%Diy*g%^dgph0WMnjlyQm
zYvbd%&X(IOX1{WrZT72MGXRGk%-(<@szG$F^a0wjK{JzM4tXi@39NXYNK<*-69LR<
zHA_JJax@?fIF6fq^$B30HaB2{+{uk~5)kSg_1^k+EuCO#z)8DSy4iVj*ToiH!~Bac
z@4lm}>JH~j*Yjl;)*~sL(K7eK*OTEpx-0KkaM|Wbua?%#Xj@*tK(C(|>l{C&ZhWb0
zMo~pu{jBOKI=QucYE5gb!YQVnoLhYCh8f$YkM&BY2iPFc51wjZM;I&Xyq~eb&xB70
zb!DyRW$vzMsVFjQ1?9U8snP5KICcCp+z|F5YaW9djR7^>S60XQbPOU4qinn+8ToxO
zNmqH=nTD{Wfv@awt2Of=f=NR|5D_7WgKt``%4VxKRM|4nPih20e86-edqM8Km6$g(
zF)F>V8F&FIKjPI0<Dq!qe6g+&rn~T5K8bHudaa%LMQM3{G$@LESPD9pDy&{Aa^|_=
z(o%wu3=JMtHe*8&6wbUu(m#}=PW#bTM#wZ%HQlID1LTLMhz^SpQjlexCb;;d8aTLA
z1w(2RL)0>*Fu<I{fC_sUm=6!#*o0&TO_-p%2HLwCT+##In`x$0cv9vQfGrs<X5j9S
zCJurg%8!3yXXa_P13C1NG|lY%V2_YcZr0jNR)goCuPOa=#{TEnIm)}!-@osDY4dN#
z+9fwDHxHENK%k(BlY6M9r}~^%|M?uj;WPk$TD<5_D>5JJohBIjc8gc^_8vam+bbN)
z^b&a)S?@-wcXYVk<j_uf%B<L!S8s~C&99mGh3)Va>V5Z!+PTi!3PaWYx6x{?3=UUM
zy8MhLFoOTujq!`V*3tMSxoiS#=D?7Pp0%n(Q89qC3)`8F5QUBrh37*5=v^&^@-+(>
z0htu_oq#P)lq8+7G(S15;V0Pkj8^Mm@ObujJiy12bM!;%^Wpm2hU;Hg%d@u!H?ron
zhpV7{3eP3fX1D@MX!O<)`U>hiqBVv!FrlFe?i{Tt*v_Hf&)NWd%*!uj=XwWu1V=%m
zC=E2Y%d?O9C>(f5K@*3!6y2GKU?CtUfo5X3XhJ~Qjcg?3QbPGi<f+SB8{21f)=$se
zbCybf9BAp<HLbnQ?~L2*(b(b*cEPi-ruUk|=kLA0RH=S|A?c*Ey*s`450iUm@0{Db
zbhJ7r+IOGdJ>IU@?a)b<UCVsMH*eT-<XK_t&YkQronN+_EzXHcpULbTn(sq(PjGMO
z;kth@ohzuG>x-J>E7bj!{QCXu3mQVoR({~yqt$+}u$pqisO>>~0Lk}B@ByTU1@@rY
z>u~r$XBHw_V;CUK2l9wfE-|f+u$d`;80<3WWT;92N!SjR2{H~6qAwgjz)%Q~BE5t{
z5sXHIfmk23I8e_Z=spyPNqq^MSm$uq;)aRIt1IR@rrxz|-rh(cR#D{NJiasR3>XYL
zQ?c6>sGBu5Y=Z}>%ZU`B67$U8nWmTEokDOZfCCqnPOb^fozyaELUjAIxk6bm033#B
zK)9kPDhNB1%fimKXjQzX&F%7()mOHa`eSoz%C&yCm5&2z3k}+W{3v)^aQ~O=ST2;{
zqh1e}hLNfmPB0wKxK4n)$lD{=B-9?QB4!5iAyd1#&(;uI5^TqO<*$<7Dnfn947Tvt
zS#<%IyV#^N7y{04=lIS3qKa4`vUlFHyQVtkR$QH&Xo%Y!jyh4ywM6DmD$Evdk4Gmh
zpTE=U_G_b+^J4zew#xc4kIUUw6R(Q4Im646I|U(HBwPXSFjgH1mI-sGZI4bs!_5s5
z3VlxJW8l7`)tX5d8S9bL<VMXsn#VOi#VBcNB+qyZk^}(U%02L}LQ=a(6R_QyvPQgy
ztoq)8fxr!WxP{n9(lXE$)z}Alfjhwh6a|4~^@+yjM#^bK0U`BB9YEtN9HP{6<TnIU
z2T%ZMoPoX9#VK<%-qk>fPC=@;-9uH}`2fVh;~5}+A$u3Um=pMOMiBA#5(f+jB~MSC
zn)!Lx?D_0_9r0+`pq+|DG;S}OtTT^^ggZJy6=Tf00YNken;J_z?vjl`&(-CAEmN*Y
zCIyenIJNpZr0o0Xx|%6Qw;Ryo*9)=h0Xy!_Sk9T#&@^8c(nn0QS=duDz9H!G1RKVe
zc%JC!;BeL*S`*&RKFe1V{`u~DM2I|G-q7&DbY%s5VEO^&mde^<N0gN-fA<TvGUmVV
zNTa7}Oa=Ss-pVS^lZFzj*I5}0wqDU1jKxYO%$?E@U}ld=Y`LqU;jYGv_`O9nt+LG~
zx7I9s<gvxoZFJmLy%<rEl|TELZ<TLT;$QY$Ik5!KPUO2_8{4V;smw0;8Pdc?op4Cg
z=WCVt>;UG{pRiU8kB^nWzuB+3UUR4BQ7)%rO`tFm8O&c}Ju*E2W7p9T9;I7yo!5lX
z(M02^IocHA0|sI3XLKxj9>WcSSUt~xtJ8+~5J5C2jfxN-A*?|}r&Io+23KzE5u-v>
z$p^6hGe@ZSLfq%|`r@qnoO1>zZdIP&vYv%jtSCiNV75YUt{d0P9x(tvw|d2j+HuYB
z@9tg+vR3!~V7#L<UR)BNHWPx1km*~xRCqaHT|V*YOyKE>D=YyVw>~Aj&yNQK8!ugN
z9UCp~oxz?gj&*j#ii=|%ov~uJU}aN%okhQriOygttN7OrFRS%-*41?$TfI8-OZKsH
zO_fIsv2Dtw<NeV|tA9Q#(9--?X3MxlBDl!XV62$7Y}0~hLql}IBiJ<sg9h=ZuT7iw
z+Vsq_zg*nfrS*8UU9H<cremGkt;4Zog<<?Zm~Hl<O^cP!r$4$7Psh3*?V^`-E0#oi
z)Zf4kDYt|LZ#CObI(s#5?mu8Xi=%guznC;E30FN_P>H7}(~ORJa!MK2%;=)9#Q0e-
z_BW5)m|^T*v&rE5TV+7}mC2O(gmsyWM(^LM{K_LvffdF7!z*rZDzod#Dcu7mwar$`
z*4sUU=djGz-40u=a6w4CiClcL>lMlWR2F#kgGfL)<rV}F(!6-_;RNGX;JnSxn&S-O
z2>E^!$C{h|!XpPfWluYi?|c7qNc3!frpzTKbdDdEx|9tNx80$qoyY*K46?85f0sW&
z!7aa2ZZbRGWXiX!R!fDr&>YFc1tlDTfX&`!!oS+D8#!ILKE()Z+kfC_7D`;pT=h~J
zBhY)eOM-}%pyjLp^|L}=3dbtO3hGJ%;x`FW2IZS?*ETc@zhv(z#m_v*Cd`@z?SI%G
zDz$1|ag-7Xu5}ewtF<)b4}(GsDA&ELygY7vMMZRq|I9nAAvVB{pUSXJ24sg9wMM(o
zrY%~PNZvB0^154YNvyzv?6VoQqUfS5)sk!s6`k=rvd$y_Iq}U&@DFME5PHT1kJKP}
zEE^;b^Tc&c&>7%g!ecN)VE<V8w&Im*6ffj)->qyZlqJhD3)xb|seD(iW8I2Rd5A4z
ze^$P$IK@fI%gP_wWaYhW%I|O^7V&L8tQdZqg7Tj9rt(MS6=qfbuKb7c6ILP~P=2EP
zosEO=Vgg<I6m&_472K9B58*#Y;4T=6CS)C@B&9zje>afln`{`kuTQ?GZ?HQo+QOOT
z9l{$Ong7}-Y~1)3dncttGLMU)9@dYzj8x6t-@Ho*98n&*MR;;==JZ~1Z|3qI;fhoD
zo;ZPVIc$SdeJ>VhHsNXxx8JS}#q7<YT;{@x@)-Cc;*LZ(k*Z^$RD_QmaZiZK1^6nV
z*rNaIklUB9ekz@_50g15>!uNUUwQid_t{L=-8{Fsd9E_Udc(|1mz31cb(?I^6JaRZ
zOzye$B}*=ydBfR%5-yO9@4d2IX<q)ydq$ZbvtQA%;N=b-?0)qt@AHo|r@rEAM}ASc
z;LP{)Z;hDO6rF-G#76qdH00Vc7qz0MI#OpEyJO#D`}RF1JjQo2*`S9qS`I!)KV|>r
z(+>fwmj~Z*h2;hVYe<AgxXWq&MY%v|Uad4KO{+HxMm8|ye!$LS_p$TDBg#wt!uK=t
z`WR9>of&)GC0`+b19}sRuI!+(055HHC{*^C?{$<c7ZV@7=|VqO$QTXeI1O&mWu<rs
z@YG0p5}(Y#?!ZUTrRBH_NMQ)YKYpQ{8HozSM**aKtbSKhyrei*F)MMQ^%rX=&k?0t
zSFOD4J@?F-@ya{ON7Z#nXX&a$+k0<MZd$ceZ?n`?EPeUso9bqCC*4IMt@95;qTi#n
zKM`0W*HniGl{@}<#OATcI>8X}1Po$Hc}qp<{*!Dk8*^uyoeAHZJU8U%?shoMt&Xib
zYl<(OwlbyH9~UkQMhyC~<8{XJKyk#ND=F6NBZJPshK^b8abrb?-d)}l>3Pm>xa~G=
zd5ie;1B$=2vDk4S7Tj(w853+Y)IY!XJ2L~drKL7goin<uZmzqXlo46mqn=ayiO@-G
zK}$BmP78jzIl;r(d8ob%Er|9ND05~rsH&?GIg7y@*r0;L|J1N>zKq9^I6`gfQW4iB
zl2x2%Fos>-71gXdzIe8N`N3XMNYqZh`AK(2yynh_YGNH8OI>;CFJ22*)VG*q+r7%>
z`^<8{Humn%zh7QzyVl^S-u|WnM2=W>gQWLXXqjH?v~2l46QA&xl}Y1RW&YR{?x?Qw
zy0<uysb=a0=2aczm%Gcl*+fr3E4!g#D{{O1IvC<)T~S8V#fzlgUak3#mW9E(b*?GB
z!Y`Y=iSXp0x!mR+SK4{wuPWq5ce$y{UA)rbj(OmJS3f)p9>NsUFij`?*r{2|!NL28
zsjd^jAOi;(BavJnJkV5@q6Njrx_pnV*!;-$`QZm=?(7`rmYGiaFE&qk+!E>-H~;02
zBJE6QS+!@+L?QH>z_N2MTvjXVl;wk&Q>BefNa&bv=T|ex#<8>^A^`R?a_9izLs%{U
zRyz#ZBUff=dwWf5MPreXAx*?dJ(G)?HgsNDz3k3))2?Or<+tCQr@YKpImX9s`YD@k
ztXaBwY0)>8)e|o6og%Pt(%Ag!lmACj$e`|sn$To(P86!}giq}j<vyduYE<sF=nd|E
zHJT1Wn_WpEzB6TaxukwlCJlsmdx|iiXXG@!GwZiPj1h-TRs#x|SI7*#$78p!)%13@
z&LX*710i~o)E~1myj)4y@k;bjl8HKvnBni_S|n_sYy^u-CRYxgq0>+a3JN9kL(9`Y
z{Ef9%UIYG44HLEL>^n)PM^>{TZ54Di;NP@qDndc2gsadLfSJs%0vZVKL>I%ad<WVy
z#-kpy;v7j~k#Z5CA1b#^{5+TV@H=!0VA^qj|3L>q*nDoUyd%E&iq!a(OQ%d)xUk{)
z(OY-yczEWP&E>UgH_q6-y0LLVWXd7s-ICJD&CSscan9_=7?KCFDf{<77Yc>TaU%cy
zy(5Q9OUuirR3tkZR`1yN3+b{+bLLELcAB(Dw{0CG+Tm`l`qF8*ueg}y4qyR}!j*y$
z0Mxzk?aWg8)20S@k!zRW%<Ni?sLX%QoG&zGb`O5MUpOjWF!;W3H|kHc30$ar0B^Iw
zZz%yhyOp?JPhMnNx0Kxjf112LRkjoG1Edb8Q)tAfZ*iTBPfZRAv?T9(I59Mrk*^b|
z7zQcL4E0%P)7U#9pD*NPCqrIu$Tv7p)z-SStxZ~xtew-gwCzw^byXXiU6&NTyEQeq
zF12lj&TP@mT=V*xnL3ME$BxnOZB^B6Qi+e=qyBrjtxD;xZfmP%->qtMWj59&|43(l
zRJX}G;SP2*@$+4~exA6>qSKlWR#hD|Yju{)(cDwjt*ux`iSPOxO`=Czlrud<fhgRo
zXR-glfQFVtOK3YjZA^zsu^7=E9XNF;N5nQ@cQ?j~;Q{RizXMuLKN9D|SGpL;IGxbK
ziC?^MU~0kwh#ZR%WI&2jVtU+;l@!10IBts%VMTZaF;`e(LFMrkS`uIfS3ew&sVf4O
zPYNEflEx-RqthyIl8DdH6}%7c!E@?AEf#1`GgcT-O1u-FQ%lMXxXrW%HMB$EpaOZk
zzIvS&vM*H$=m@A&a~#Pkb>(#EbK_y0L1SShwjawriLP+%D;20XRBpcdlLLkoHhta{
z^Z{xF;tp98FCrCAgdqm6q(YM3jowOiLFwCZj(R6>PGxJRo2b$0UM!pZ&2S<>8&R`n
zUrgV^M@nVkc9Q|AcjZ-*&4_qD<xWTeqNp<(5Xp{cEI4E=Ng%ndDCiJQZ=4<RhnIy-
z@iH4T89Yvlg;~psyprTL#ci!xz1CY4EjF5*;3^zNUi(%jGmI$`S$T1=L|_Jo&Zw14
zItOEJzr)R#*PxFx3(`$`jY03&gisX>$p(`w8qDrlhMGW8GnNH=QI#WB9u9gff}qu!
zbQZCAL9^FW<rP_JiN)z#fV|3Dy(c6gJ(?^C6?Jl@<bKd#7t2cZRo1$=WYIFwZLHgK
zb&bzt7Vu52NAwATL-5)vSjYU#y`o8L5a5#_nnd;u!Qjx!23aeJ)+(pL^aG<=)B;2S
zPUS+gY!Pkn3ls%r6eOtc^vrG*5^k@c^ZTNKm_D|q*s(F@^cl-bYnHm^x@%@sG!&QI
zpL8WFs{OLDoWWC;8LdklrG8ISsG;0oaSCR5tdxslx%-NUfBh6+b+zbp8!sK#S!<F&
z{G6paWbTZ)FR+>=p|LAIrKz`K!ZhG)m9I;zuz}q$8H2&*a%a$KunOLo)9!W|Th6I$
zoiwXyoGBg(hea#1+5+~Vw1K&p){Ik|XtHRPZl(uZm)?Z-H6oK4I$TihaQbaUL3@d@
zTvsiRyTI+9eBZ^Df>e81UA(Ofz7Xx*r4?S!lybd@%#`(wOq^QeLacmJF0J$!MEwC9
z1W4TksMIEu*=ouJ(PUsHE^jHTs*r3}vyWK=vfgKd1B`>24GzQqOWS*Z$5EYa!+WM|
z@4c_KuX<grx>m)KB}*=Hmz!{J;EH=$7dkdzzy@rv=rM+bVv4~K1p*-uz`UjeUW!S8
z03o3UjIAAi_nDP!;gG<4{nzg@J9DO=Iprz$b3a-so`jY9I1>j66mTJ=@l)$fIt8a-
zfa8&};F79ws#SG91uJvZ7d3mNzp6COmD?@8dbisIw|K)Gbrxs4M4>B)vAXKw0(-Mu
zFK2j#tW2*P9+68698FNSO)Il33nn{_;Vc!KV{kIS-w>VoX*u#mvr4!&8GV8y#^Wl3
zoNyfBTrAIg#z^Iij%YMePQ$|jqGkzq@_DtxX0-zLY~)PsF1^gC@L183@s-?J4nk@)
zXxVCm$~IA@FA9egYEEek1ls&&p4I4bq;|DcrEAt26jFy=nx$o>d1Vbz!&7DL0fk*}
z_0V+QbIY5}SCuV&u6up1g?L;!`<rL1Ubdk6=)~gI7{dg@sCBtX?cu}Pafz0V4XwPt
zIOxD@IaI3lR<*Cx>r&}3Di6xhT1ghHCIw(Tse_keCZxa!8>CMEC@gPmB+B{eEN#oA
z1IAc_fg+2Kz<3QQEg&oBsg)HQoGB8eXNjW;IHZ6pDjz~C$4PQ#GK{|bx=oh`b&q|v
zz1ET?{889VCXFt+_VV?SFlU^%X2a!uS)_n{=YRe%F?-2%{a;~HXGR@9(J^Y<iec+o
zYjhv7yNJTvG-Bg02em?kI$N4+;<;WWvKQ_js&9qpnNmyV#GRe0-ORPcb<<?p4IfON
zymxxDRzvtVUca;9>pfr8_`djf#7FG;gj{on>7Lh|!^&$cLg14JiQ18@Y;(tRcsrUG
z3+;eso*#O7N`aS=bwnIyon$&@w6X#g2swm6!^;6&2#s}x&kI=yAv+`PiDpH|v|Rwd
z7_Chj>zYZtg~AX`Lo5c=K`Me|#9587g<HAnqg9hSi|2dYIY!;pxy`Xqp0luW>AgM8
zsU=O3_6aq+x~*BG8%oC%=ahI#O20kOcJY!%vgm{TTjzJST_v1)a*2NQzy{&z26?Mw
zY<ZqtWtYkHdZ(e&?hn|L`H9H|zWOC?wNq-s+K^Rijzvqe^7FH5@~3VKw_JGj{trg$
zmpn=MtJ*r}Z_R87r|1UifR*GycX$zVd=TilX4C?*4pImM#2d=20<#<DnM~QBSGYVO
zRbr;$aF|RAIp9oak5$H&I|=(qn0H&!6*ixg1Z`gb7gjH8*Kj_I@HVwZlWt?+V_jz*
zCzV=VC4S*64e(9Vt!?T=M;E(hM$&o<SJ%mneA*TWm`^=~8}vAJ9^KYj3(n2)gkAq^
z6E+HeFjy^lR<lwexEwNtwS(W9n6YqS|7QkLNw(p&hS(Dau<++{nhqe8&tZlg5X#`%
zV&KUYL`j}NGY~ztXSU$%I+>z=Djv%|PD17Ve!3((nH1d+{kg36>_HLwOjNdpL5V*u
z=6|HfKUmY*pv6QRmWYl&qh+8mnc_e+Q7Mrs2td3+mLH7y0U=4O)brQ;?-hu4YAon2
zXoRmw@qPYZJ*BY<5Wu$0BdK|9;HDCKwmrUW+v5bdkX$l;yD&#*1abG51&xgbAU1Ux
zb!6{$;b3k>%ws31MT>-#o$a9~Y|A_=ctwsQ&Yq%!2ZUWXT|}Yx++VnbQD=kChukQm
zE0T><5$KBlSO>8v$U24N;?uB6nt}y+0ebqEicfM>D5AgY)k3dW-V1sV^3vJoNQr&a
zBJpEfLz9H)gYk>jT>&+=S#6;qV-(Ai>2UrO#wOI-Lp9YQd+mhm0yu=YN#_hOpOLq$
z?L9sx<ds;=9Ux9$PrG&JPmB?H@EyJe(g7W{@k%lY+b|#?pKTb!3XOA%Qhp+YtV2GF
z8(_=<gp<md2{bu~lRSh#9|=RQv=|_p0=Ws+o4zS~U;pg&y;CwjWC^Di-qGl^!aIkQ
zS;|AgJ6fGacn45f#i2tm=ITiZJ4xt}BA_?~kfTmRLIXP))!ED7YH=OkBfJc>nRNOI
zjpoF3Dd1?Nq=(lT)F)18^w>*EGJDnP%wFMT?A2>doKTD3JjFkScnu?3s3c6sH9D+G
z#SsvhI>TaCS~25#c}SF$Da8i`4r2pcKmRPRctm*N(ELB1MmX8lt1(|jrVAGx-$zr-
zu6ULhZ_G0o{S&6_I(gly3$lG$*{67$@<;matPy_w=2j3Nu7BpmZ`Qp`-1}}Mwm)r@
zGTGU_k*}<{?&PjgqfZ+{pU&8%Gd}HH`ZdI%3S+VV-*Eir`nb8|5H<~F?$92LJtrl!
zJ4>--?h<1JiKIVCi$pIhx$7(s2YNCi$vWLD?SXxuk)pxS>T{t0Bc@1f1{fD%mj=B;
z;XosWnIF(9N?{074C0VzbMT{43=jkn=!aQWX%Cn@nvTK|UT%DjHzyls7Ntt(v{h?$
zkDA?f&?g&Ss5(v`==gmmFs|OmcH9TPRnvXPokB}G^#oBq!5}5`!PT!K7QtkCme*%z
zAwPG2$`y@jw66f98#n)Tc`w2!NhEV(<}$+DjO3yxo<IjbjraoDMy^$I5jLPZK!c&C
zOR8BgQ1y6e1al*7n4HZF$OrPY!t6s!pk|50IS^Us97&g6wglnjP&t4p6FUOhK6Dzu
z1~AUyqFw?mhN>p;e=xQ%bQsx2+kN)znAayW6$Ci4qlA^o<T>C@uqVxC@94?~JFB#t
zbTC$N#^8$9-OHxg9m?S1`8#T)ET_vMMzxja^>TBWPVXttjkz_9)TmJM3<5VCH5#Md
z8h^YiZgy#93<P?qK`S=~a_Yi0g&ah3Mru})tZ0dpJ(2u4D_)vY>B@mf%WUiBbrG+F
z<IQTdWx}vR7_98UVYxbolsB<lc0-fhu8i&MCDI*wD=#%c*5p`~rDT!YQ!}a9%@cX3
zYJOX+QKJqh7^_L;WQdwK`21C6lOw9SK%q~;aL(K*b@SIMb(C0z1(;o@fYm{A`X1@`
z{0P{X>4;Z|sM-ba&`ZK+bYeOii|R4-PiVHNXH+FB6*2!InG{fP0yA<503J#ROk-<}
z*re(pQVIiHP7%pk8i5N!42ldDFHjEc5*Nj#@f}fyYvLvaXu%m3ow*%!j)9RDtFd{^
zN;wiMdSnK#*86b&UzRKyQ&{-w!X-1HBlZfXcfBwCuU64Z$gcNcD~PmT{W~Eod@OwX
z`qnE_2gv01hI~${)k&pSyit&!&+uBMx^ims%5e^pJlBQ?Gf%3w=Wx8!UPH!DER8Bk
z%AIm|sIKnbiS8n`&%OTZ{y>XP>+}bPWx4ihTs+9vd|F;LeQr-EaCpYFsV>jMH9gn0
zXl?)4mHFA(eATx3bxo@uUA%&DsRI|cC$G_}(F&OA+WHk5ElBf>RSTFI)7Mwv?s$g!
z9u4kp&*n9wdeSRgPGgCy>rnHsxKZk>D3m%u!f{r%SPlz`iRO!^Gz3wo@Q~UKASs|p
znM26XjDgaCXie_?gU|l{;N{N*g3kzh(|>vxFm*2e@SoBTk<i_N>C-2kxccf7e68T>
z7tWjYCb2(3hP{!_5k7fy7TMoVKJvaHpnJl8NM(n0kkb%NNVF^!RizS`MlkbYEY>ox
zo`BJov6a(xp04vSIK>Ni=>41)8V-i1I?O*>+L5Jnm0y=NY5M$G(?`|l4a<c6M@>i}
zb05i_8yY@+(##2C{mY-fWO=<K?vz<un`d-QNajmhHqV?;Tk5y+AbN1MR+MQYrETZe
zgm|eL{#K|*+QRZlGqyA{(b|#Y$8}U247L)feZ=V1D|eCyMz5^RVzpj}Qu(3q193(i
z<n<$3qg<2MzG-ZsIXJQ-Z(A>68P?#bXkXFdHkh)j>+6ek`gLtm^RV`%%XTz7+D3Oz
z8rxE?({WRsGFyGT%E#D7Ztkk}8qs~&YcG}AstY1av4oRYfPwxyTz3>nZWiOKL<tL4
zL29CdNzOq3hXG^D2rk^;SB$9?`qN*GS;4(=DrfNjiZSfSF)N6xar|oG8=_e~zLB(?
z22go87FRYkja$8Xh@43o$}nq+@j)2ve{6__RzR%(A-Ic64J0xhOtP6tWP0Gg1$r?%
ze<Gjh!T%QUHKg6rT&Lo*((xG3e^Cz2&?|~)ct~=_|M;vlXDNNav#D5VCexwB_x~1^
z1`9SqFOhPU)YHtUnT)K$>Hqq)>>1s5FqT!cnZjT$io>v){#=BbB;qt1GGS*1GmWAB
z&%t19AH`Ow2g1hGk^bj?K|B~zMNog{pv-Ih4;cdn{JA;*EpNa;bUhgw+xPG312QtX
zbQ)xGi=-T*fK3#~AfXu(m<PaK1eKJ8ZQ^LeqNP(52jU!Is)nb*1Sb%U_A;@j=T-?v
zpV%jSzxUO94C{7*v1ilk7c#D@(_lo58NLu=_AuMS$h8y78>i224wJiu1$y#_nBhY*
z?N1NAx0fjPJxp@yww1qs5r~VnzUy3`LjI(8{dQJmaFo_hZya`>On5()3JPHE%*d3Y
z{4VAjBJkF+(2p_2V93OblQHR1l^OFE#d9IPn|^6L{ve`*S1S+xZA@Ndyo$Rrm>bn(
zdAC+Ca4mL~b*L&!bTzu>o}2&j&dH(vBX;YbrE=jLQ%~hP2g?8Wq*^x3-eYendnob0
ziHBgAc9G5fXZ*<UpkZu<BO%47ME%#ya2YjBR57T|3&i`-^$arH1CgFaj>ve+;EJJ~
zrU!<`Y~@l<3P*n1t2Mp}7=}V)`*iTvs6`=Jt#jIt(<SqBgm7Xh)Aw89$dkZC&uS#V
zZlrAT)@f(fPExJ%;g!6Zmam;QxFR?ZrvDW7(Qyd#5PgSCUd@5nZ&YRGWyFDx4t63(
z1@&H_m!FG$Jh$d)JUH#`NtytdJ^|?wH%QOVMu-2~@#2;KTeNt_my?pGFm6X7_tZ<k
zi$=X~RCb0If{Xw#dy5quM{7a6A|x0Qib`Y&Ol~$B>Fbxm8m|M=kARQ|rmvt0%^yj>
zxl-OAVHRI-ODd@`$*MX#s}Qb~Ox<z;H#ujEe)78f{B@J{TXLlF_?YJAQ{&n1-}<6*
zsml#W>*V~NX`Y*J_Dt(3m;`Vur!6dL3z6sh6)Q<^GFj-iI~arAz&Pyw!emlrWp$-_
zp}bNZYnAnfmWI4V*A)qGL~@D{tON0#93{ueQ3{piG=7I=baJ47K*L2e0<hU=I~I^u
z4w#xSQ}bt6X&a>PUk^v(nN_Hq_^KsVXqabL;TRA*y^fdwtP8U||3%%{Y4=vh##I+~
z>Jq{W3Hi91!VX>HMvtX-Od@aJf_+YFO;;lC=6GfYfL`VD@$}&MZ5C_I_?o<%7u;d*
z?<eI8gcq0-V`|UySKn=MR!=C;zjNUob{k!}J+2sCi;KodWx0F|y?lJX-BvTcJim8A
zFFhoYcWXjAsye?-S1$a%LN1(KK&mM<!jL(XV)UV9(^?oh2!O*H0|s8Y5}|>jGlQl|
zhSFC)I0?YGN!x?8q>fL7>&Q?L2@6Vzz_an0jg2!4pDI-6C@W%YGFFku?(d6L)P@Tm
zj<Rm8+hn(xEp`*uSfUEn{}^j>>Nq(RG+Q@?h7HSFn<bCPg$@`hm^s;16|wLrN7iyD
zV}g~N0&MVOVt#EKMc)e_bs+YFM{91CjFFrtSq7E@%wQ2lWXNPi*H1*3v1w4<$#kYD
z5DAutU`e!z=0-1kJUqe*siaBJMi`k1_DRrdV5){UBnt*ey|G-96)MMe1Q`pY*tTwN
zB1?Y%PhQUJ<Swp5_^cquq&1md8nIbzkRp@E=rz9*J{c&JWhobsvCmygR11`ec8*g^
zjcCpFf)so(o3<=nz^<Qh^f!O6?!S#JCLLey-1((&NVrZoMAs0_)=g?Zy7bbIglB}i
zglFg)le&F(zi9?p2|ISQ#@($!#A_AI?S2nY!ndS0nzTeNJSNE5<X~y<6AOFBB-D13
zOXpRG_(jLkYo&Z%7T5LbXI>Td&t>j9uqcNq`_YX%#E1Fe(MvxfwdXto>Yv)%Qey0j
zk+MS&10M;|?h;B^q@2af*$l)Kh9@n~*|<94%MXPs-}ob$_SRd%rzHLvdtW&H&9$p<
zC6+(Y6s0Ni9qC<Het(Da-pKK*Zur>Cj|PMBy5(bAJooxH476d1n0HDI&v_AL9<T%l
z<}t7}ARjh7(r5nDm_sUiRueIiu_%VJeQaMU+kH~$&Q1{tkzkSeSMARJ0XwRtSUG_e
zsYFOYTmb{fX$e^1hy2gbllEZ`_7A+jLV`I#BgzZlX{HS&Vd6o7BFd?OXc+wp%}Ivj
zE_9}Vx^6-hQRCGB(Jhhw)5zT`ydm5nym2pQWa_MCR&KQQR4=FI(kpW-r1e!*j8dWN
z(<zipRaJv(qVSN_%JpD3*TWnUem`v0F#IDm56fhXzCbQOH+(s;cTT8nSVS15RpF18
zJP;Yy7I|g;e0hPK^Z-ZLi}ybtI0R&erI;3Cioii(0<$UgXF$y|!j+MrtHoN3h3phf
zU2b+#6BAC~Kdq`Huc>~=?{dP|bgwBak5^Q=lfjY7T})HDR;6N|8AhHZu`6`CCI7&a
z)qZ;IOB1!)=&Y)X4JU9L+Ftk%#5q(#{Ir)LzB<#hLZw+Y8J<EUXMmi=Cj6{~d0qX8
z@SC@9hJ9=8TG*{_CV6kZy8h8E|C>tv@0N+XrnmT|LI?BDrrNiJgMIV>QbpV^ul?g6
zS8sh^IPw10qTy4!!kD(tj1x5OH6R%&dL!^bvZ(b0`Z~3*m53liw3!k(9jMw@VogwD
zn@H3IxCMnJpo$<*fgcZRqPqtR4puvWt?OVfJUdEYbg*)*dVQVn&pJKgw53IB*Az>Q
z!m+aUc)XqbHr`%_wNov#Lt7uNf1VbG%bo9<q{9wv36_<#gkjgWKl>c9%e)~n_b2)z
zS*F+3)#>z7X>qaiHCzmBsXI)sS=LqD66%%`SAMuG-X1S0<}JeWvhHw8aj;6~^6Y%!
zg`HUrUF8#JMwUzm#~4G$Q(8|MTd)rG6coo((N;y9Ev+Y7O<~bMO{+(&Ct6{&qEI=J
zXabW2{5n5fRj6f34-Jpl(5VMf5_?diiGLo~Xm~xJ^KuTa7leYkg8XDY>B{`R2?&O7
z*-hmKNxqNzU5YGE8n~L9mU#1WYqFgDmj~|oQtI%L(xD<M*@KJXno?;_j&!%Lpg=rx
z;I}oW#y67tCYqIpyX5BZM&Vm&XI4#)w?yNxt-J5Obq>3xn0z=?h&`(>c`^FbpfQ6l
zKqMbK14|KK5aJ(X0}tWj13;BpA_Lbv8qkkmk~6zk_O5hCTzgh@jalI`n_T3w-Snrs
zX60=w$e43%>C9nQ-KeEYMhPF8T`u#QbzRGsjV72(-KO&Q*KIPp+@|$T_xjNYUb^pG
z13Mj~Z<nR`Y0%O!YQkDI@X%D&!H_wayk2~086dw@S;Zb(BD0H&)Qqd?f8fDWWH?sR
zzq!Bv8FCdFe(J#o`nNrU61HL$g~z1#{pQ4}2Z>TR31CYuv-sfG-`;y^)vdyJ51#tr
zexk0e628u<uFe@4Gev!c@}eLo6C&iPGYmgJ5jWMBP6}DmwlRI=__S@wq2ITc9B2Br
zO%t-x$!(lx=$8_C%_UB`g!>pRT7j{d<|gw%BhSYB(<#F5K+H9`;|;8(G;YFn9Dfnt
zV8AqTc76Dt(w~#z>&cBTz4THSV@dy=3>O}w1vfEf>}eIiD!HEfxIddYjD5?5t8h#!
zbC`Jl1UAb4uG_or$P}Jg9n!z3T`P$1kwmYf6)whn3|Z6D{v^d;Ln4l5#faO%%*MIh
zhqHFXb6xJ7xbUxm6=u`@8_gzLV&aBlrHvc!eqdvJ)8oeywHsO6&>Cc#Q{9LyHjpu?
zDfBm8Ow>=YBdcae)7!IOHZcpZ8R~xwtK`Iw>sKksKCO_wgt=p@<cQ=2$;*;=B!89s
zP4cPaACfOn$K_rYs)J3-$Uuiek)&Q3OxM_q&{w6?Umb&yl&Yu@HsL+b$lY{G#JDeN
z)Kp=`{2<jaQn6c!tjLKd9YC-L0RRat2sH|1a8c#pGBCF#yi7f@z&uwcuZR5&(=KjE
zY4}-sK|B$?H%ZuJRJy~g2E;4KbTJ%3B`!s2+@d4(4ENlK%Vy1M$n{UD8CJA*UnsA}
z6)l+62B?ifnkVz|Miyc5L?$<|!R=X5KMbAK3G~F!o?6G8rEaN3@cQ(2gO+?OS6NIh
zp0i1HPTB1WgTtVEgpfO}g;y6Q3YE>dd{<pwBFAh|+SMg&EI&wUd4o(VRmv2cOy@Kf
zYBx>M$C~Rst#Wl%mQ`*2euFzN+Y!(PRk?B*lRc{ckhUVvz~+7*JzTDEd29}5?fTlJ
z@I%r0ZRA!qSXo*DLV{5ZZeduDRGF_f9rG!(*|h`+B*M&K3tLv7H@sqDqSl+J*N6Ar
zcjWr>82G~Yu*{?OI>J`Jvp%~6Z9=K{wOcinwHC%1pSI~nGv{1t)$45RLakM!1VV^t
zvJ7FXL1$%Sdgr6P#i0Oew(E_iyf$Z+o<)#{FX?u~VvI`n25*t;q!8d4Fr4Rl{muf{
zScM|rO-KisF~bsy+VTyRrVgDVKH<*ia#@8^VJerY`o}qQedPree7=eesUIj3j>1Ku
zQ^6LR%V=cGN;A+e=?!Dm(qiE1>6J4&t`XzQKY;@+mrO%eB?*8S8EXjIi3lG@8-ag>
zT1PUyOoY^do`PyPu*(Cd0QMT30+cUpM-<FP!3ZKMPDFf}2j+TEdh-df$tDK$Bkn5R
z<XzsrB?&x`PDbQ`MKepXC+5o3c_y<hUTF6eJGBafjn#oCSFbgxTtSsw$t!K7TWQPp
z`cqp&uC`H=mL^u*!7v@3rk2XxtJY;XM>e#YgN0dcPkh5s;qSsx;p5j+(dw=dU4<rX
zd$86U%9C%Y%)2+&5*pt$HW4i`X{~``Xc%T?mYZccze}dxUZ~Y6)p>TaTxMo8oD!HI
zMyJ&oq@0=*TJ!VWW5<zLRaK0Ty>ph9nGFq{NkVGd>IfSs$X@gE9m3y!yLiPPh`V?4
z-5ZvTNP3j=usLRTPad;3;u-1E*oO^Ywdo*6GqAV}$Pix4lHHOu7!P!Ca7F1Spvpla
z0tMS91Kq8)q@HDMkg0(C^szET?+_Rva0t4-t(@ix!WmI&PEX)iFtD)+AN8mJybq8!
zWo3#2)(BQMHd@cr5t}%0a0R`4ybbq_*Dq}wzh?3<Ye9p0k18Av&kuX|-1?OI26cFT
zd)RYB@19%tc$@QFE!}IzcdSs4JIKykGroPfcES_Qsy*T{-Wz)H*OM%?bj)Gqb~p=~
z)Y#FE>!A478$3;qO;D{EIera!rS}GJvcS^Py>|TYrTPiKZcyK#3eS&(>4A)q-m!fF
zy(9j5n+{LZ;lb9<Y&RF4x_<oH>8<X(X7P~Bb?K$<8?Rcy**aIM#y{FL@VuF4@iyf<
zN6cND$=d<t7vt|R<a3;Y{9*GX3lT$jJL;NNmk9l&vj?hOY_D*gpbs#pbULZfhL3R%
zItayHqAyUt5N+o&G<5ufX$40G=}`%|v~XMrj~KtOfhRULiecAAcmqCR6h~3x*MMC_
zJQp$^?OcEcQ`>2@3=<o@Pr|^L<e?K;49rfTm(6*(vSzNSX^frovC<C97OkO~k<XP!
z;W8t<(`Gj+IU)_KstRW_%0`vK!Ep@haI=oGq<SN0vtD6k>WJ6tv}rlQ`prcllYx1v
z{)$s4m`Bp>+*@-Wp8e;!`NxC;rdBw4OL=VTt}6eyQD4=|m2%GQ=i2UTopJSeoiD5;
z*Y}^)rVC^mklrKS2kLJD14XwQR2VO?hz~P+_&76f<P06S@3~3#M_k^^6ePf?<P>+O
z1UD9EkQx{%tJepaAP{f>-C3BDO1@-_TUy4DVsc!kvFX&TP3J^6<lq?F_1B#Ajh}Gx
zPt)Z-<{Dr66W;|5Z1rPg!%2gtw{fgPJ+eTiz|di2!o{AD%m76?b?T4bNxuP^KUWUE
zO+KV0spl?OWD%x|@y2jyq8;eOn7&rYM6`s}l1n6eBzH?5mGq%KWGp=y8zp)cG6wy~
z@&oak=614Bxey15e3=xIM2S@X+xGw8$D1<r#qc9#QTEFeUGT?2JiM^Kw{beCWqM;h
zph=9Svqa9L|F|HM|F}!s@pJoofS5_AI8b$-&8~cVVAZg+WZ`b4s+PnmVt9<6*r`;C
z+HdKCh|6<Vg`X@Pa_r9@Kz0(ql6nP5j8vcHQ{s20Q6lw{Q5XZ3z>9sAWIy7Fe=B)K
z@;)T7(+G|90VGg=rX8Fy`$I0GF`k2|g{5HO{XcE9Khr*buKk?5pSCAFoY?+EyW{`I
z>;GTd=ef^w?lzyK2BA|Dx+HxW`k%AxKmTbh^-B*tdmMuXJ0va8f4cJ76T~&zjFYqh
z{vQ@nIPiWD?OakUh2v*V6~6wt)d$ZUFogH$XID>ATA~b}40HBDfA+Ng|HH9EE(TeI
z0iH?E_3=IMBO?A<K{Y3;+YW;3sIPMnECh7XV3a9$hw#n-woZ7*?e>gve@K>o2wGOR
z(3=6+y(7HS|GWsTO9?3vT310r^Z@sVAJP*(%3$j<_LLOtT{`HWrHE%7gPw?~mg+r_
z9jRUd_&&s(0kH>Z)Jix2Tg7}aFfs)LG-*tD$kEtG!c;RF5T_uYsUwqWJ2uo{*}1+(
zxMy5v$F>%6K`viKjE@EC8*`h#sBcWSKf3hpqhxsPq)5&BPP*JcW_ONj+15c9T&!l%
z$QAqA=yGrR*yvSD_O*{*z2xS?XM|5z6x4cD-II4sIQHvR$3`xyY2Uj7%eH+h=C2;z
zzHiB@(d{=cfo(5|n65sINi;ST@)?Ywbk<3jGOvm^W%`!S$Y(-G))Zp$XDlDT`<~t7
z*)OkoHr)Rr?N)3&{OmQUZ*IQ%8+<y^XCXNgcLYB$5A$*~pJ?buL?jk;Ib4|1r-%&4
zkXlkqDxFF)kEdJGE&R!lFP(HZy3<Kt2$+RFYaRfnk%DPt8nfZkWr83uX-TlgfXFQb
zkr`@&tR&W`B@($D<U)<~{uC!9k<&4DFz$&)X=4`;IS9|eQ+bH~MhCa)bMbgC02BvS
z1|ASFMVNbGKNBZkEWkF4c9SI635$ir{A)ut@-pj(g;t@J{~_WRl8&T9NOCO053GWu
zF-RW7|2`X{&-#M7<iSu*PamneW9fbO-Iv}mxVGj_qP%12lTSXGt`&Mhb^7C4?Qw8+
zG4xko7b3lpr2cVoHI{u!WuHD75tcr#PiA~7f?UEQ{|Rg-KG@m|Bn|kY@NTn|*)+mJ
z!YgI`0l3BC52p&Y%x|`a{Uu;Ff$@ae_=0|HiYbohZtxuWWfcN~68pQCO34kzyXsdN
z-kmKRej`ozmoI;54wJrM#i?=<d+86t{}9K>DNhOg!rz&$iI-kjfA8{@#bcMJTGBUj
z_iYgVXF>Nf=|__Z(9+4@JW5QLzIU0yyJT(2-G`oP>%96+chjaR4|iqVwRXh%aaGQN
zZ-_4__CGJ|KY4hQRx!`dIsPwd0}_psc=!Sa*}EXAng@P(j2M2DLs!h8(kW9DTVg{b
zCyPoM>Ipk0>>!&i?7eDHw0&IX{kN|^@9>iw7-jQtvX@-HC3VLw7r#_@xvH&rnM&YV
z79vRhcR%)m3D@-hW5u#ta>|xgj><6zPe0Z@U3lQFW%IK-hAGY4AGmkxC3pNb5F;0?
zt7s(3PQ0I}Yl)nWGWcJjkOR)3B`9(;K;?O=1Hi~aHCV*|4!%Qq!Ym2W2(tjx1p^O_
z%O(=pN~8r>y>Qi4FQj+un(uPW?`-h-Zs@RdnX^{4&S#H4v}yB04{hG`&~D*hM}!gT
zr?;<t-0?BFXw-C#m2wQIo;X5OoR6M=)v2eB?vm#C_H=Y6eR99Nrj31n(?dA_!3Q@#
zDSRjVZp(u=tei^jySa!Vd!B%!>R)*DA-ba+@6&|HK#D*WtGz@tjzwsk8`KFrG#+`-
z5LQc-7OHrJ={KbBC}Zi{(|$)$)6f=07#CmzZ!hm%wyamsuk5Or?kFp$S>v#m)^=IV
zU2K2GG<L7~+8Oh2Qj*ELj~&~6-TyEjC`=>jgf|bYX8Tqj_<rZ}J9f;TvxCj<UABDG
z=w-t5cde)@GMjOYnl*Mm&z#>c!X9oMHg(OF^ZJinzx&v$*9lLN@M`iJsNIF$**kVT
zzjKEKY~!aVNWTE)Sp%zVKJ?@fltBt^XFv?`wV*&*UC@|W(7P7Utcr;!uwM}7prNrQ
zS_7aG2}e!PdA&T%4k|+cTm&TvHk_cqHNG5Dy_Id&F~U^zeU(h72rwh_4qaP+UXhRG
zo<ag!d2rN~($o=kvB}tao&4itvU~ngnT{5|Ej(lTz&tu;FAf&ji<mvH8C6zIEL7`n
zQ3d`+DmUzWN0_!J&^4^aU?A7~%GIhUSt49*^{|y;S4Dehs!YvP2^UQre$9e$NO?HN
zSz|EPZ=8_+Ot{e#L_`yR2U$WE-lw-(*$3-|E1yu4**-VNn5}t^a^YFw`tZo0IbgLa
zjqGr;_?dr<6|OK(n0(W;CWOYZE}gD6(?*gQpHdj1sa>~eppC$ejr2eTG{K)#HpqEE
z@fK$SNBuA-QrH+ZL!f0;6VxAV9ySVLAjgqrY5Ml9?1{;YU6Gb3><rI}MS@Y=gH)XT
z5-fVO#%<Hw3v9Q|WF<3ivn_B>+eS9g^QHrKFh_1O$<vO^CR~VsaL_cIsmv1Cjuei*
zefs9j(}ii<#I}wABg`+Q$XPp#w)Hc*+Q5VU)B|UDmhseLMl73YFm9HdeRt}Afkj0I
zyZKK(I)qZn1el^P@WaW><IW!P-ke`7V^XlL<0X>xC6bxt*_Sv@CAs7DRfH_Dn#k5n
z1@u25ZbBZ&f{t=rd_M^!E6RV3_YxHlOox8-$OQcqXO@^B0ind_8d&nj0plnk%8*0o
zbA*&cC~-ziWY<UH@>#k}QCj$vDdK#V?85RRvI_`p!;Xj}7<5E-7=Yp?*PdCVz&Vc-
zBEtFNV#ruyk>moGM6oafY*=FK5rueA$6$E^r8Ev_ury07HK8;l+7k!M0VKfTb!14a
z1UJw7JK>_6a$HtEYx|PF90WGN-4pzW@W&f>7X=+M@479-_Nra$2riCo5+1z&PrWu@
zwom1`=-2y6{ydAxll#&+ejw74Wm*wX<eEKl*F2T$^O$8vj;7QRl>0Ymg2Yg0Ya3B0
z3wwPz@^EvlI(y1F&LBc<b0UucSh5ua9IJjAD}#<5#ahCY@N*L3RXec>eBMs4aEuh%
z;i*4`b&}7$ntt3ToaYt3@RCBN)l2q!iNTA$XTbj}6%uZxM2i`gX0)#XW`7)F<Yobj
zv01W1ay7Wm?v?aOUW2zML3=0$bod7_Vq+84Nb6R{n!#<Bam2={bua*<UwH|v^-{>d
z(F7vK2uy{5NYnCC0Q}GH$gCqE92{t+NJ(NsY%e{|ge`00+^x(m(Z+~SCYJ7|b0Byx
z=twZQh1fi+NmeZGV@z>OIkYt(hcp_nDAmydiH+U?#veV=C>5X)A{vF2<fzmdgiazc
zDnenkNMC#Eb2HMUF$M#po#b>fa)r&NkQ3(-heM@gEEYzonr^c(YK_IBQTJe5D^-}y
z3aOTC5#G00lrlYIG%|Xba=OW+l4A|qa@9<fnN8RL-GZ82_MA?qgG!*)>dd-XTCLuy
zCu%j(TXnB%jZPzxO4Wc6z-|u6`rNxN?Ek06=pNtm4DlM`l^5Q1$5)I>snsge|N2U)
zDLclr>*WY%)l1V)lD`wBOr?-%$l}x{g<?}m(elcR3grv0D9|(i{;z+iRR8#wn(zNs
zqxrU9<NNG8WTgA<GpRzbGUp51zmutq-;oVQ)hHqFTe-^gEqTqP$`YhsTP$Cblc0M~
z8<@`o<_o1xtNMZnD$p<q=Fe4nz3OxFxmvFm<bTr`jhf{bG8+&oEaT<I^mP~B$rv^4
zHbeyrKlEAeLffM<5JpjqGaASYlz~+OkWK<a4TWOVBBtxVZgCW1IB;lLIb$MklYOgS
zMndc!;g*+IlYKw4eVFu;nJ*6>|1v9?Fz%iV9^;;I{r3#nAUQ)exEvgl${dFuG0rse
z4kn2ce!=PJJ1fz5F2R_DQ4^DxIBX7xGd7vQPxC1g3bv*$TsYXo=848Dv!H!b{R0k+
zOmGOb^8(^VZLl=vpqfEDhItpSjRhnNEuuhe804@&635@D88L=96vkhecM-U11vsLN
zKjMa^>m&eO0C%NedfQIcDAmFr)MOToHA_pt<5gN+b*&dc+(g<?baDN=2XCCL)7S~G
z<P_7#YZXjcqB&&OXjDE6v8jy;8Vs*a2(Gg6rEO#j0<NIcQHBaN*>K7AjFs;wbyawo
z)%KMgMOu#AE}Gcr-6?5w%-t+p>QR$Q^+_W_;bNrsq=Xsc^va5@P_94{AM@L*g_ANh
z;grtUynKa@Va6}LbW_*fl9<j?h<J3~yMEXmg3Eq!Y!bUJr&|_gV~AJAxmMIidO^7h
zLUGgi6P8q{>~K+`NeyXdnQt`imwg+Pg;F)6_T!}(@*rxML`pvv&Wj+TU*o7~HYmz=
zLDV=~8vogvUeI#K{*;Ub@iXDs)c!kKgx9)f@eBig0U~9tUVb&hBlenM_*vb*pxW5f
zqVyv2k=d!2+t~o3J(=qfrr2(FT4)|&K1;#))9)*MAj5N-$s<4$p6zd$dKml5>Vbv=
z1mPK|rrux#`v&PYo2d+_D5wp%5eh+E2);uT`?Hk*Dmcf8dAyRxOLIt4!7l0`!REea
znuJf==W%L;pAb%}TG%1H*Zkzuzn~gETe$F6nMuw`IXGZ%UAT}Kh;z}R{W25B;yUX6
zsFN>+k7zp(u|(o{lX?FNDuMozUMkiA6ifKGp`^g|NSPghL!c82rS<&zcg`ZM(=O}C
zX&TjDU(_XBJ(cjQ*Od7x>U_WK1@G3`Qe9)#xJ--EuM;~Eg8r__KHX2fQx4+Xf6+T(
z2#UiS#8LGM;dVd!3S6pR(npOSqkES^oc;yRO^`yWkDijk@k@IlwwxL72kkOJFoh+M
zhr0{U4A2dLH=coC%g=w8ASGD`Op#&@Fq&c*G=Zic(>gOCMl-1taDwzdTk~JXz!Z`P
zF*_E?uX*npxn)*rlr?Zf%=N}0{lJ+&<mU#mR0>1ctHSLr$Jq1FAM0?{lTKg_1t$Uv
zBW3hkVWJzD?=tPL64_~||H7|DLBCXPLZ(Zq2vHpf-fn=p^iVp{3vE`t$hs0m5v7o&
zB{%^(_s@P=0wIUyj=T%$S&)q7E<HKqGi}+TFE?9w!|d7MvNb;GGEbanERTR=tjxri
z%)j94vjuW%`Z!G`dADdczFU`WweKf4?6*h_hPY+D@br31T(7&%JgtA4i3!EcmDg38
z<3=izp4(5U_4Svv>2qvD{9vt#Y?xrD`Pr#Z%t9=POLj4>7Og_~o+yw^^Ow9b@)&2%
zCAb1oXQun;`x9k1QKIet+xJhvb};1^zF8fO9mQB{qrP*5BO-jo4@v<sZxPH42v3Bq
z0a7jm1?a}~Sh_R%vu{j#<W5zoij_a|h@8cWQ~nn%URJC9%em#kDvgf0oUv-^2Y!E1
zjo``=T<M!{aODW@K=KiSYZ8u~Tb`EU$}GJ!=odBpzrzaj(CFzs{9EWYG@=LMk(7a4
z1AZYTv>vOI%1#Lya7{&d48vLyz?3}H+{eE)=e&kL-c~re%iXYG_KKc~F5+@dTDxx4
zfmJ(iJ9_BBr>bO*rs@Wxuc{=T{GZ$Em}j4}T`GKit24jI5MO@P2jI=T;FY(9J;E2y
z^&I%ea1uM*_pf7p`!^F#9nG3IW@7iODUZK7;L{g<xh%f1655mzmUIW@1~9>!&L@zi
zI6P=@hVEwI!;n$XpEH^GVA04J!mWR1rU(xT5C86WY$?{h5gzO$dQ4tlUO`5t@8n+k
zo$xTxr0--)1N|>q@+|!?1p;g-R!{&-&IM%N`=Kpc`rjeD4!wWzBab{X?R_#2^pjs~
zAx!8H*(KbVn|?3bmVQs8VFI>n2KkAY03`YMC^;O(gVPt`*Fc7ym}!$#6~k1Q%Rttl
z*blLyZ6fX-ehw+k&R9aFO?sHP&&!K2(FnC(X1)n_WwL6?mt6Mw-JFg+)rwHwdp^Hl
zs``!#XLODr(TDCL_S?zHKmBUMW%Km)>ZZ;_XJ<TbOhZH4m}L!X@BY>Lt7cAX>?j-E
zUYR?pp|P!NN&UKenErx4th?h=qWs&P7d&1b&0TR@)lElk6+XXRY8Sp-w{w=cP212^
z9&gTR?&@mJxoY*=o#!o1HkMWn%M|ROuPTnk1O9i)y-A~L5-2|>Xdsk@S1GY20KzCs
zM5V|hi)A1xGiH^Gxn+5fz#z@MnR(&gq5n*uu>IiEUH5c7ed?>H-R`HmnMSf9Q}6=G
zq>5!{Ki%E^G*Ih5ffUwahnt>CuW(S<o_<O!AdwF;C(EBcn7JJKNfvT~ALrkc`0?e=
z0-TH#%rBt~Em?Kc<R6VA;#PY6vcCy^La)&Gx67U;qhEekco&2OVwPIr-FIImqn~C{
z_tTx1{f#8=f1RxO()VG$(EBmvAfU_zACsQ^4}D(>s6~VgVm|vPs&W=udbu%CQjA{6
ziC_{jfE}X|4TFc?Ps2B;>6ZrM>A+I~7!h5e3>AoY7lYjkIA}ek)?%;RW*oqlo8*6f
z7Qy1NWQCt^8(uQM6OinvTjv6uV0M0vRx>|3(rhAt=-%4vkFuO~l-oToughfe1<Zy1
z$zxirmYOy@mz7hTt<`8{%2@uW;^y2Ua3-<u2^X9`EFAj#Ma=HE2y8iwymapB8?L{r
zwIr(d8T6&wme2Nj9L0X8RJy{@;&c@)$?`q=aKW;GKiq0Ctk4ekcq;ZDPUic}euF-~
zVfBWk^TyU13>t8UHkOQTpF4kRD`LB6e|+5u(v^{W#I~k}o*RR`YMNxRWGzrXH)680
zL_$$O(C`mR9q5H*5q-i2YcZ@=G>TCM3kHxtwsIED45bvhV?z@}Y=#UVAKEPGUMx#+
z0bB+H<-lRl@(`GGv0KDm;)Db}MLdf(1%R5*1j9h#rol01f@LTSo?UoUxMg9LC$HhU
zcMJ{bzl^oIDre5D^qRVYyu50maLdt(2E#koHRP@PRIB~O*L1kDyQpkxSy6Z8;U?cF
zTJ5L)#>3T<it-lc6-}x>+$iKURM5jC!ODfChttojbXmuSf?XzWrL{5`p*N{$coiWI
znoB+ueveq0-+y??B_EO+#IDqQ_|Q*ukhzW0SMCiImsI{LZ-SaJxNFM%hsaHb{1p}M
z*-OtCJ_+3W3W)916Y_plS;9;ioiib4^wiGVnv7p5m0uZ~ZtI*X7ESB8t=agcQu(E^
z`L+%w(#WVL<Q%BTsqo+XO8THM_mID=#y#)+rL)}?75<1HI}YSbP%*f5S|UCfp7HF{
zGW&lDolpIdDbbfDL(Fw0EXE5YD=4}#45JujRAL8yt%<lah~bkOENvDn#f6tCg@cX)
z!zlU|i)gv2l-j`)K`P(yI0vZ%Fb9^#gS3pM6`;d!sRb~0O4bDDQN|Hder^g>re)fq
znR7$!ot>e`T_Y<?Y9_3z&WmI(i#2!T9`70HDlYEqR)$+IW0=cWa?*=oUJ+C*V6WtA
zLWI>rdo%hfB1z%-qT$6QEyc|2p%~>48|#zg`tjqsOT!yIp5+rt=IdBPbKK5`=jJyB
z^+%eLTHa^Rlj|-RWk<mFd9DQ6R$#Lg32RCeYb{+LFc)^2?Y_bbLH_VoxV$=IXWj;{
zN;niRADeO2P`A#3%vj!xap(xfAzHuGhPfC>DrEHt255c-whUEDS7^_m$^s+>R19y?
z`@uwlI)&{73vrf%Mpr_D<*3|fDWyLOL+SvlRUAD1m<t24IHl*uo>B`<6=uLiGtMn>
z{$s}8dCR?fs%xq@Y*<Y+p<Mm04Y6o`>x2od`NH+X)?Lu>NK^gr8Bbl=(>0Sk@*c;%
z$1&4d=hbzWc;ukYlUgD@(!WX%>MFJ4C)TFF99da4dQ^3lb@u!@?9|$>Yc3%#y`Wa+
zW^aDTCXYmY$S&y3A6qFLbyO~Dzq5wR9)G@@vmY39#o@yKr}8H==S>gzr=<5ze&F}f
zSWVBQYBB?C9#3_Y2eUUk#R=DL<FqR$POPe)gbKvmKhQqKywnN;awQpT8-Upl`st|G
zMfAsI6XnvI?dF`lYlv(P1LxY=Z^4+!H)slZQ%Qwj5{|H!pWSr;_oxK#z#s69JR(;R
z6)vc)i+aGQ*((AlZbrr^;b4ZxPDrwFl0n9(V=}}-)W}R}qVctW|1RO!_T{5$O6%g^
z=M$HO$1JC{L|U3-wXOPPz2u+!gl}$1Hd$;uAF`BIp7&s?qa*d;)A%V<Y9iUn<g|T%
zUUdu6aOU1+!KP8d4#95qGcNO{Z+`pm)|&1S!JN^{3ed5?-KXWlxHG32I2}LdEuU|W
znYE_%J6HdC-_(7W2aN;s-~vpFR2BkIHbJRH(44$T^Gh2Y<pQ!~{3rqNd`6HRi1J@k
z>?XyKz=DJY_3EOv;R3MzL6eK4un;VCI7+OfxSnX`R^TYKhc{kv_@ax7yJ|`TKC_x6
zj4anVF&a`>3>K9h)-b-h%{(?C2Q)nS&-jWlNu6AqlxN@96>MHLuEFe6Rhu~^t1Mch
z;W@dnEgNPhkU_p}@|&yl);jeSB)6t9VJWW~*)nT%6+gB~Tc##FPnQ32aqe=RIm_aM
zk>;jh=5Rp{XP2I5w3>Jru}D7n2c6~NSk%K<L755a!zb%lb9NJlRKo>?ruP)(t~$t>
zPm4U^e#ppeB8M#PqjcC4N2|fra^|Ot2@d8!yhP&y3fQPD5u&Ujlv$3VS8P-w4S{=J
zEMb~UvU3|7bF*1TY0Q<M?~0XvUYsdm?k$Vbl4zOmoiBPo`0#dH(C;j&b9E`w!-e;r
zA)U|OPb!ZwOD?-G@rT{b^nlxm`@pTleUMXjm6U=?PMG1&%Xhi+^T-$H7Tm+#B>b>%
zWIM|$IRmr#?H7?vp15z{{%N}Y!q+E0e13Sx*Tnnvjve2i{ZPBWY4i<vWxy{4dn(=_
z8m1Iybks-k4a%GaC84xL`k`M6=bTGxP-%qfuZ=#9!enE6P8}0246{r?n$lrL_?JC)
zQsRLt;IQzPjRVGmOyh$6vu@L7$4qP=RYk=<k9+dp!)l%Nqq~ZU-soKi?g_$79^lm>
z_f3B#ykYcc6(*|?3$tuc3O<7u-#s~(jAmyDfwOmiQ#fo9@BaJWX|tndw$E}>%jfn#
zdl|F2|E~kjkeL_D#4&-&ANX<^UAB};h69}+?Ew^0s1(s^4nq%wN%7-Sc41nWF^Gts
zVNl^pK$!U9zI%li&IgMBGNn#0YkO_={3kCTGv@Lq=g&OUav4oWEdUi5i+Z;%BBpEi
zA@VSNauB?CT!iAWZsB>#&2`Oor9*zXf>F+xkJFFhDy@x|BLOzW64K1vTjnfT_wo&y
zENw~f7xci0@}qatLFSW4vb2m|l*2(D@}p?7twMiBvKB?~xd+KL=Qs{|3B>N92MLe<
zn{TiV<M-2iit<wd^MdLURkAunO2ny~4pjt49sG1&79$b%{pg4&>J1}O0U1!^&<D}b
zFlJHIIT9#g4EEEp2!2yKUDAE$9wA;=x-0L2{Ji_~?9M=5mEKQ?CY+uY(IAh7K3NiT
z*b5IA<ld8GbNI5$b=ZqBO0HGtY6?Pjd%@v?oC7%yM<BOC7sQE9<_WMjkf3o)sl$Ow
z=H8p@a0K(Kurr{qDGb?DGFi66=jD`2%W86oMagkWi?Cy-6`3zRK4+dxmSgvNk#E$t
zrjpHP3tT0Es9mb$+~U4Gr`N?um6j`nKI9AnF%?N(ffZYXo`{`pcs^{G_m5c(4<6(3
zI`i=Th{O*6tAIMjmgo&fm7;n?lmhkTP+%ej&BetmJXE59=O7!tNKOdbOE{;L4LKG&
zLRSTyi=Dx1XKrdtPMWlK2`M4(J3@R@n<q)64psbA$`J}VxTjCm(O>eVy0B{Pg*)$B
zvno3r67>k$Uns6^Fz*OO5H|rCC80KIiY^@LaUv))!AeSh*>m@uvrV%W(KMB$N9bkx
zD5!6M*R8j|_xN$CB%O8qY#|HO>EHoO^7!%oUTP*CEFluGIbfTSq+m2orMMsM5rADi
zOBpwCm^cPz#)2^Fx5P@bhoBBA&mKl{%%fpCuV$efV<Hbth%e{*z|JOo_XH!{Fm)4F
zFWNMf%x5Uw8(kG{fFoi4R7OG%dEz3q_0R;mYr-L`I&&J<>?r(EUkyv*5(%<xK+=oC
zjGCYgJtI7e0nTD#KqzOJr_Lal1|=h2vT@S5+OHVqtJ-msHg3Fs6Z2KwSgcGMTlW=$
z`pCwiqEh<)O;v03TK$?Tg!^rrB-5{{+<5=S$~Ah~q>b$Hp>mUmWfXNs11uDEuozE5
zR<ad%YSHW~T6jgr1gya}%Cm=<J;Y|8Rpd~0B2d<Zii3iUW(f~G(gssE{h6)uOxvYa
z<r1jVFsIWI6<&35A`(gL;Oa0l!^}mF#dqZ?%?^z!#~9c$&cQxb@NKinl$^ZeN#T_6
z7fQ=2(y2ajYtj@qHJ?(dHOeUph0>|)R=%UMtGbm+g-bC-kp+AUH8=NYe{FOd@o&!*
zdZ-eIIguCrrV_I<@2<s;A|)Riw<Vw=_Z588j0+}jeMF>wrT2i16TGjJlO|I$$s0Hk
zS9X1&pi6~V@`QNp-ho>gjl%}-k0;9DRK>dGfXm01hn0@?Gv}Cq2!Qr71d>OhHa?t?
z$^c7171<KJNrs^6s42{x2jhnCeBoyP-)%tL`Pa|=vi{=TU&MtEgb(6h?7pP#%emKk
zNy`;0FZ}Mpl~<4!=IGI*!u?$8CluUM!(TkbPCibW)Gv2z*uQ^6$IEKr$>WpRQ!j3h
z32zLGMu(A{7+M0T{;BGNu_?m`Rgc+}W(}bhhTD+4?g$+nGG90|Q3CmJ&Ndy<=;-yI
z_J`>%KMo51+>t-O-ybjIIg#U`j)R@S%OQZ_M>nV2nOU8}_4{Zu!D7fNll;lz^waJL
z!$e%n>7U&FAI>7Fv><F1wx$I`>F6B~0i|3=)Q5JAE;XFJO2j3kToIaVB2zXbyQnZE
z(dgOLT@lxoEv`uV|8NSqT%(-NkU2_?p{!#>XH_^{)j0wVg^6eHIu4h_h3V%OeI#Pr
zr7Ug~y#w@wsI8ru005!^HVDDenc9payEPyOfNEis&uDY}nKb~coxp5i;Qm2oXFh?d
zhEbYsVkG~SUDp2=r8+_aE|C2Wu5o>7>`(X6nE;661-5jO>Fb9lO)N+P6fUum#PQ>_
z&cvlS#-p8zIw0g+*uOEpa8ZH@Dq@615NL3*5Wmv@4Tps#yL)dJst*ghA0`Vo6yDyu
z8<^*X?O|c*XXKj5LasWp0LW(?Q@BAq<S==b9&=5&eG$(6j9iVG1n=QEt(N``_oSJR
zst{vE5$>X-BeEcff)W*J&hkBZdB{HiUf^%J4OnQziArTgI@?1AXGOO^WKk$=5m16h
z$|*KrKs&Y=66IEQ!R7}y;~)8MQ}^V}n<sZ~`XD*#)UU=?=T2#zQaaf^o@sVTIcHF|
zgs-<XM_NnUYTKV%durUG#tY|<oWK#eUq-lzqvl`Ouwd+|wT_%9%;wXZxKEp=TcSCv
zd+h4fW5=ypHE!TnIKk|l*w#EXJ;N5TB5IW*ZYk?<PNA&%tW>49`Rv!v6aIQ=Sum@x
zbQx)ZrIQH1US3j|6<U6XxaM6SE^{$TmU(3O+_}Tk?K&4cm7HWY<jH-gGwP?Md=h9`
zVmdK{DM4fKEeH}Mei?PYn%LAejPIIj(x)bnmbV}@j}#sUOU&}~xsk$1@*w@6mJ6)w
z)ZgBEi@T>^C5*)H#l)X!!;?=F{vJM!j8VCeV@68m(2)vKr%Z~PMQw{(FsuMxco}qr
z6XO~q*v4c;U0kpq(+|PoD<tR#!<Rt*I~36*H=y;jS&ck4L2;g-7lcG6LTYdrsE~Pe
zwET2X!x5gV*+Z&z#SXh`H(R_$_=h2AQUkJ-6VyD}nm5koU@K(@O2ba=J%w82`Ya-=
zUK}ZRr@Q&;stVy^xhtD=R>c%-gxSk_bi#8@K;ac=y<XD3u|(kx7wwk5wHXA)S#rhn
z9Gyk2RklCWVp1uTkq;BP=p-iKDCu~(nd$Tx0S*+7l)qutT9m}nX(_Sf0^Qf>l3AHC
zbIpcH%!HsTcbZNaG^T&|eAKM$(8)p1YAuYBIR_i1CWGx=il3r+YN#J4C4RfJ8R3GE
zTPyG#@%2P0j}8n}+8g?x%CHF5rMwOZ3>Zr3;Ew}dNIm&9DO@_mOW-db@*hGToZM3Q
zzg0ZqK~hUc{{ZAHK|>N!ry&5c67f8&4fx~5-~J@q*Po=L1(!V4=l4apw@-;!RW6yr
zsW}pj><zpJjbx~#(Kn%iUTZNYU@!@Y2zZEy6z?Yzfq|iiA`}s`Ko3L%KvD#1c`<>v
z0P9qg`B6D%j_ummwQ)Yvv3cv}5v*~Ka^&Y9e?C&VM{-)FzVwqD#vj}~yNWUFRst|Z
zQe@3`<!(WxdPvwTR0x|NQmG7kKrGBLPKJ9zxkq!YIV&$O%e<ike|8%+%FaoXI+YsZ
zZlaejn3Y#om$%!fR&L+5Yr9g7LY?B~{rhiL&;uX;)1Mxv2T~LqwF5v37JJ=UuT(w!
z#AD%OStMDH&M6{<ttEpw;Rf;2zx0=KL&DM`e(Aw;&gF~L58UHi&O4GCL2(h}Me#?-
z{IDp&zk#ivEM!M?%<sTIVetIHa6BH9g?RRh9c3p)uRD)rTm)Z;<s-<8;)am<8QA*C
z!Zg}vS;v3}o;fX^hRmAcbR_B<!kuCnD>*5l$4TiD%~%0*$``2fDD3jo`oj339Rs}&
zqnj86MGcdHK2dc}96-?60JOsp1xRZYN+7H>us~3+yNF1KQ2K?@I#CGZIU+olVECxx
zl*P^}g2s@7k8HbW-fx!9joVcOF~y^9EExUXvMai~XB(NZL?yfhEdD2azK59**j%(|
z8M|)W8ll<mGzoX<oPMvR;`q|{E5eK|x?skhmU=08k*gnCwB^&T7+`Zf^7MB~kk9_s
z6LFfd@1SFNbbwz?32(FmUMFZ(Hi-$e7m@N(SeO_<1&t;nEm06XsGr3he)J_HIqWwP
zWslIf`AfCY%-&JlG3tRBckF||liZ+Cn=MGV`E#0tcN}9llb+181o;(gj}wlMx#Tb@
z(+7pUe|Q?{P~Go-DBMe~5{{%z!ZPMYHk$4eCJ7suA_gD;;?g^uW?>#$I&9A(4;Rg&
zWJgx1I#GI+zzPovY&Z;g1cdlyTv$vCWGV%9p(#j{a^MSKz^9@jG#Qz-6rmLq_(DY+
z*oVSU;n>mytVpHjwqn_%mut(AAd6L>+*+kd3g0rwj;XuN;9NEQlHU+MeAoQDm>Y(T
zUcV1S%|(%#=!6!lt$oSXo0%(%^NI_=u}k_=4c6~|9ej<~-2{8`39&iJu|#r`oeGfD
zC)NOmpcyq)XrJ7&+9NQ`mh>iOtKPM0`rP5Rkj0zjS6v+-Yi2KOb_6U|KXJ(SmZuN(
zSlijBPl*@f#kOfbQ#UkPA{WsHNoe|$FcQoIK6{;HpX4#gA0!`1en8$k2kI25u*f82
zExZEX8WogD&H?2x!Wh9*kBoapaD*8d)D>*%G+HVc0BSD?XGS#>56Yrgi`z;QtOdN1
z)x=U7Ehz<<2=-^hVU)&8L!#+Ntnd(Gs5q)1id*FaYXMsziXoN`vKW4gOX5^-w-(zh
zR*TF{VDJt~k*pV<tbh!UC!=?!-Y<kh&>xGflx7H{UzVDI>k00ROHuummRZcA9Ua;~
zeg1M=R4RJC;z3-7z5-k^i2)08g6@mbJC&Zj3$9|N*TqgeBz+a}y64{XM<)#I9DE>I
zAc#gM`sHX|Zd{A9yTdXD6I+zl6L7tQvUWzm=4PaBocH9VW5!&1Wd4n*ZPRDmzG>=|
z&6}r8owjwx^lhmd=O3Z_o}70hGe>5Su^x_>N_iw&;^ho75rGs%`~z?(OHNs>CZpAA
zG?6=N_!e@B74nVAc+wWK*+Q34%p?qIqRkzkN_rNGP9A{|J4>ha*>zs8-|O*v@A7yI
zPMT=Mt$VOgYjfDlY7oYF3pIA1!>n=mJ^rn7jmA_|<aN6XEpt4PsMl}R8Z80YoX|F#
z+Uo^(h(ckE`aLGC(O|UMj3&L-?DoHm9F{Im6gfGy7unPv4?Rr2+2hewM3F06I}#5A
zZvZ4xKwp7x#g_Pl^r`0!?LgeY@u;eKv|7e50-Hn4*jd6c;k8+_NFK>wzX%kH&n%=z
z%%6uN`rl$%q#@FnbsCLOiOf|<{fb)9@Ocrt!)UTk%<^Sc93cnY_Fyl43f!LFoq}$$
zjxBCH_Sx-b{Uswpp%L_dbCcd2tBaZK0V%^Nbt=2oZuZkvgVtt1)Q8Mk>&nh{)t2mx
z`Ld!WtIn^^isJl^Am`?AqTa3{_K00=*IzMssda<9uV`M^YR<07Hlscmu}0`ah|feh
zzVY?218?%t(4j!&i^z<VO2lo@jKht<>C6Oo$TH+0zg%(?`aEVO^jzBK!e()Wr$i7y
zsX{nL7IJJ2jE`r!6y`EfL>lZ>qAwYpj`of??RBC<2AoK0hKE2nC@+M?O!TG%29Nl_
ze^M$UujuXK|K>F$l_3wJ&T8Eu>6b~9x&DW-vq#OC(Vk!9ZD=6L?1abSvUu!)?8>~F
zP(fI3a$AdRIeD$6Nn#CW7uVMp<VIq#_IY#LbGYvt_QNZ8Krjn})bEV+-?wo0!iBpD
zb9HO?<kp=>A6va*#p=h%C8HN~)K#3<pdkLv#0fbtMG4u7L?`ooso(jI%cm)uv%Gzp
z@KB_5GU@yzmS<KPwR(#yFPw-4v-KLO+G=*?#getzo#BR(qNYfvdCsmm=|>q|Y|^eR
zR~AK>-_x5el#>a^j|=xGD!MD$D}{%y)Q>DI6CS#V37t|`j2v0PeTyX($KekcnBy4a
zXx2gxbpvG;fi^k{zOR=hf58aOgZMK99L!80X-dI$MF(SyYhhd5Rz`>4l5pmSWPbQk
z#4ZQpvS8E_j0R<(@--Ps0aG$-Iav2mhR`6tErHW4fGLXuWDxnO2S+DNj5cwshxnhs
z0PK%@nexFxL(qb|M>8WdoqNSC*%=*I+<|e@Z$ay#|7Btf5-y0AMkfl9!IQ31!a-2}
z0FZ#O7{^k?wCJJ}%iwij#X_Vn6!#52CiD=JX}~xQqCVOqrX%XZx0ZVeFim3P#y+Ik
zIJ*yF<c7iO2*k^9Mj)aEm8lg-S+REFt0(6(4ec$r@7zghXFVAkH#VF2bGpXl3ZKy>
zd2w=HzqN6C<@D{2OB^jLdoEZwzLU8@WpLZ0_H4zb(PNPXgd5%U%K5^(Z@qQHb=UE)
zW!lyfN5b*8X_=YvAg!IvmdqZna8x+{8hGT8<FM_AVX=Gd#px?^bDy&w7@28?Yf8Nj
zBy7U(eHE|Tnm;Qq5pE|F6J^IN)xKZL<s4(E^!=(Poo}}~j1Bg{u!ft8s)WBgEKWlM
zn6lJ1V@vYJV(2A*{_~#et`q*z$b3I{)20A$FoCkz*43e4adGeqdvfDOzayL*cEn>_
zR)wlYT{m^zcIU;85nC>*m*wbuptyB~JX6m*f7Wt#!s7JBqec}c%12)CR*ipH%u`Fg
z_S8fc7Ybj!hCekmL<c^4^4MeP*UVlssJqCN?rx%+Jh{Ju=qhnu`qhsTqedl|yJ~9-
z3JMEn5$yyUBAA%k+NvtDE)RdK_;cQQd3g_!OX!j5ZdyS9R8<KVS65Hg%$>!_C)(|&
zY%zr*;3?1dTV@fR7nUb%`@L~RP-j)jW&$wgNw36RD{xolfbbR3rB_a<a_E&ZV5o8`
z9eVgF!`eB)Du)K{YE{@v3(cVWZ4|zK@x_{&i!QIm=&Ce$Op(~@_?nU<FpWykCkOkd
z3OoTp^vki53*bxJFZs3Pu;h<)WQ9PH85S|LN`o@05tKmEA6hPw?#Ngv+8czII!5%8
z@uqS#d{N%Xc(;)s%won77)ntN8Z7#QBG@D{I}#-PORq#h1-O(cjxhn!u1utXNx&#F
z@PNnzFxcTU;t2C;Y1k7i3A@9r0m`a@Q5mgHJDE`$@`PyV$zOHW^_rLlByjF9Ge*Q2
z=&kI8nIxV~OSG)3dH9@RRqh%irx|7<Ps{mEm26=iZy3SLL8s8A!6t}nHg(qRH;WhP
zQgi=)5$7;^5zGhlBJXP2RpOzICgz7WJ_jQSqcX)pvgJd?0%ldXILjR_^{>hCl0_=c
zav)S9Zttv)n}qpNrRf4WY*^?0h450PKeo87y2Wl*EA(K&Qz-ZC)+=~s`F3upT%#mQ
zD+W%{to-*=h#u*r?j>54(1Y}eCSnR&aXTA%|3_0XwXqD0=St`-CBPd^#5lefabH(R
z_Gac`OsG`)<%4uFFz*gXoRA<zMsAukCL#*6aNQ(=aUHO{nJ~&YT3anxNa+NO!53tg
zxQa=f!Qsn=YifW^GI3@?&V;|>!W1u)5q~4m((-dPA8D<{<hL0;?n?5=1=5nzA3kqv
z4rN8E8jVd|odrb=O;KNwr^{y?-ZQ4CltfKETZ{#Uy1YnRR$-Pphg_!9WECov+jcuE
z^o6^3GZ*B?T9a}4_T8bZv8A;_UO{6)K_h#AQOWe4CH0AgbE@@~t+{3!e}eh3mb7+Q
zIH)-8oiOv$>IR3#ij*}=vm()!ss_8(ruR9F%d*4&kGb~_jH*ie$LHKKHPc(_WG2bX
zg!DF<1V}Oo5K1V45Qx;!JA__D7&;0lMG!$SE24;s;@U-w?%I`AS6p>1aaUd4RoB;D
zT}U#Q@8`LbgrK<YyTA93A7O4U=bU@abDsKnda=|++w4o!v;H_b&81tRDtJC_2k&;3
zNU*3TOAoL=e6*&ts3bRXZQL!ol1lbldULMyx5X8q%}c_4gXy!9t=3!vclwGC$14nw
ziNAxaPve}Bl`Kful<FaUuwN{IyBNke%`(Ug4JQn^tCCl}52?Z_jRcK<5_mA7K~oL1
zaYxzL&^Ck)yuBY`W+qdgdiN}$P|dU#9@HkNM`PnjYr&|7GXG!Cs*&bRz4mN?-GMXQ
zebQ|&6%CzxVE^0)-1U7-ropq6A#H-@;z>29ZNvq?a;IcW*mv@~9S511Xthz~oXu+4
zFp<r}1w^lqRIj@p4)76RGK9;8FVw*8R+j!uM7N@~3j+KjXrbtVU#yrAt;*oYzxV|i
zk8GKE>$p6jrK_U*x$o~PTU5sSQT_gXMIY>}9Qzx0p<#K&)cJ){SPDfezTqimnj+mM
zoIrj5vx-x_$>tH3^EgE9TtV_2qTGct357-r#1Pucf4|Q>5Y{|Ec>yy-9(-saeD)}0
z8Bs~-6G@Mg%&;Iprx4jMu;>ZX)N?!1%3AVNTIn}h6~74f%t=)pEme~m=`I$iHV#i`
zq4eR#Y8Eh9nz<G_9FZUSGu!+(%Mo9x*^g^FhSsfKUdKN!zy5AuM0@X+b6Iry>Sf8E
zj^v9#kVD9>L69yyLSoSxFyj&NKv#yS+-1|_e$EF)ST}g->eAPxubJu9l)71?N=z$E
zn+EMX{n(BDcWRU?mD-M;?kDg9|A~(ZJGY=<cqYcp?_OmlO+v3h*$Ygj>dgGd_TKV*
zUPiS_qv11u$&00@AEE)04PyFH2U23766Kg{;f_L%E%<z$s$UDpqQgmAB7AuG2k~-+
zF<MOu4{n6N4T(PZlnyBC=$>x4as~g|yh#;nrk2f{(%4+j6%Dy|XN}UTnw*;`7TrGS
zSEo1sY0KE{J}9a*;tFI4;8uxo?!?{=Re3;q|Dekg{?pTlY3T(#LG8@;Epi?|IX@p%
zFekW+^VgKkziUd<nk_Gy7u`3tkYj+?scLxU)DfmVJTPP}QO4**UF1+~tUsP<{ADYK
zgZrP*)kM2BoGw2mMz5(GM~`GB@K0JJk*g;3mCzB(HnddI=_!Eeict-#KiTssBZ%k+
zKM(|8LAnW;`h!3o^fSA%|Cvdj%+_k(f_Z&T<hVER>Lo=e?B&MKi5{E%@x+ejxll`_
zMX5L={cGaKvvJ{DTKQVQ9VuQ7$k)opW`8oNEhJyt5-pEX0!=l^7|k+;RCMXup#~(+
ze}@8odR%~fk&*mPIih+_w)F6pDXZ5#GJ#vyr{hWgwmK$A-~Zv-vrBuc`j?a&dl}*?
z;Y6=gOsuYGi0rs_{1fZLqq%;??LQ2i?-+Pq`sc(uURxm+_*1-96Z@o5ASBU-XuD*0
zqv^>A)#y4jq`|Erc$GR5B3Y^1$XP1oGqi2BlMiMTI~I}lG&5gyha?&Beq;pe{EJF7
z^3;KzciE=+(;b!Kq9VK2m*~n&jZJqrlG18(vTM^^cBel!HPe;os~s0TnIi9GcV3g7
zQ=69LaHP{UKfOghiw6ScgYqIo|6oLER}3l%)L0W!60N>*+|TZW$*7Z<5S!pIn5=Q}
ziAiyBQ0O>tAW=RlZ?RBI^lV~$^z4r=jE_rjw7}fcB89qsO}uGXT}>b<E7qOd+jsNO
zpWTuBPgu5BiNuF{kb0~T{*E5})QSrV7(<xiVwkmXA#ApV1w}`gL*I+ED9AdA`9O&d
zi#tuQAp#deb|6G{kF-L#vLX+N#|%(5BqK<fD}8nZnKI6uV^iLIiWgVSzcZqElTA6t
zZH;_1e-)0hJFpi~9Fabo%iX~%;DmQY*??jeEgMZ4G}36e`Q;IYv4(l0z#*4crSO|p
zN48<`d?_`yaD!=sy|LP4wzFRYxJ9l*t2E4Rmapo%D0+<_iUNjup&tul6^+D65^gbM
zSdhIOr9X!UJp{cc9uF}eN`!e}?t%zRJ(`lBfY?K=3yUZ^DH%gk;b5%t`2#c;AXAjq
zRg~ss1Af21&z#{y3rb!2I(MIjRiheD%{+hP^vIHg(Z(dUNxHP}`|V@*yf|m<?pg2;
z&*&ZBc>TzwzKT&}8-|qV_y-mZug_yK4wtYYKG8WOznTvzQ<Hinz{}@<_CD(^o?N?r
z#MZ=-a~jeYJ=ECz_sJE3gDGk3;8Ez(=e%;u1Yh~o>06iXEq-ZAZAM>rvNOBSoNAMK
z;hpe4&d?=fi_`L<rKmy^5S>G7!Tv|MsD$s5!}%%dUe-;eI-tCjt$oDv($L1l=b*`f
z!p#u-YLC+XVAoV3&lE1;ME`^*77zY4H7#8uaQSJ)P&-&B`n8?`g|%xr)0F8+=>-X_
zuFsTeXQ_X{h;ZGEN9Xdw#8V5NoM_Ya%~*2H(t~%-Zd#V3PIdH33ziJcn0Ih?PcJX_
z>HSq&y*H85>$tRBqcLq@u{O!Jv{q$mY)DcY6MMyry{mWU?w`4GP=3?n)7kt-7cWeR
zT~Isd)bcqe=B>0(?mfP=zdvCI_gPPmFuC8$HeSMxO@>uKaYg3cG*aw)DD@3&xaG_O
zSO>5;Ih+Z-1ki3w2zUCiMpwM-6)UY<xnsvlwh>;kZ&H+3MA0?N@wCOolH=<Y_l+DU
z{Zo2P`scWjHy{hzl|HP|@7GyILd#dgLLjEMbDgDOLbqE#L|=NN{2n>NOn$fU&=qfF
zQm1=tmnZC=D+(jie{%7_G(gdpv9NX%Di?+a7<lx46O9djA=rHQEjXNl49ZWj2h?X|
zzQGL=;-(yB0PMmvO6&rTkjw_!PK=@51C^M(MSyDn_HUD3NKcJDQ#ok!nKPT0K6va&
zODS8-+>(3R9J?r<+1$76lu_$2+EXp3CZ1tx)>pbH-6&lgQC%tBZt*<t>^OlOamX;Y
zWXAQaWCe$f`PcOy$y*AKjp@eEc!Gti-R;R|qzh;E{Jp;7W)|K&YyWSV`b@0U;Vd%f
zpwXVZaq}4_KNnA$a(~5CDKq}g4-mMz1ew1cgH;}GnMJ-tsR?eY@*FASACOl^GAv3p
z)OTPGhS|T%o@^zU9|GcnCIeqgcEQIkh>iz7kCYgr%N2~)sfa>?<&(n2oK{DteOQQE
zgp&q|sm_kM&Qx)b=yM4^m+vo$wn*5Pm}uj|Hg+EwgChzo!f~@Sr;&MX3`;nznd4--
z9`;`@hJ~F;Nlq#3%E{ptrY9z*Cq~9cj)wy^HGyz+$&GJX#9kP_qHo_7!=>Ic<#}N{
z=9CMV7jg(&fMRse73eEM8ut^!Puqk7C5I7!c+09$2U5b6Bl{G-KMu&==nDGixVjJ7
zqAcWfu5e<?7auD~i&Ui*6r^!y)0o=XkwM%1&IalI`%g>1f56GVLkBvRH8B7Eo4-3X
zn=LI!+hpGKf%Ln(e~{))dz#K}#y-nG@jcr=?Mzw$_vh-u!s@~?V@4OGrWM?D;sNRH
z(_P!M9{3-&Iklj^{%+}aA8umW_X^VFJ(mCBCh3Rw3Mj5Z2dAy?F&EOeO+f!&E@O)G
zP76RCQ{-6b98?WXVFgZDR8y3^oSd4BS2V9+H)_&C+AxYnLDP_;!X*R?a08@WnT5vO
zW5;3O%OLcOW+gOA5GDk9;-QDCE(Z#eY8Gk>hqD}E!MK_yCvlF(mEXtlPb^t}+*c~?
zbn)Jln2c2E_1n#EW8c*^c~;wqS({S~PPg7yT9srgJQ~;M;*mceJ_tFWM0$CtHzp>t
z|Ja66NhVdS$tWcDFLQ^k@$$m;8nuTTSv=|<Pmy|9NlelMNtwk<>L(?xDNE{gY}D{g
z&mnd^r&qu75#E8LZZ8|*GfX<!ad1)7{`ZBg(&Kjan|>u7O||NbI8LSFw@j6;fiY?F
z2dN$3r`@$P-Vi(7T{|^YEFI}pvFFZ{_b@IqZ>S|dpc7pwMTu4*wpguciSdruob3aW
zm%3sA*mRCl83KcE8=2w>#mqLxq<nNuaK_sBA+GW@Ms{va?TpA%W~FKU!aXwvO&vU6
zsy3ESnix7Db(~$8QOe*3LNY$)KbbFzNAx@4#3TO+HJ;pc!M~<rn97Pn%>CY<JyQ&2
zBF&sWj~i?)gdluDu)9u&;Bgb!dpWa$kLAt3Gu*TBjwhbndGiVVt72JUX@xev*gu(j
z=bYh0*YVec@&Y;@@aG5Fg5+$aF_9Y+ITE?4UW_v<vt6!irNybtV%wONn>tpEHH$f}
zmJ15bbo7xgUV83tr<z06tC!~u>X)|T#|MT!`n#9P)G-#WqCzn0)qP)l^NknF)CPm-
zaaRI~K-2dH{?#`0aQX+n0EDa&d_fZM%4Cm6$h#2WAuM{pnsx5bNQZxz*@h;g;ocb<
zf?PFVkvezyRynt1bCdL~ya9pzjcuQ9Vc{*GZj<szQg4RXZ)$?)BR2Tml1Ucozin!6
z57U+i8GXyAY;ebJ++{KFEwXU0Xl~-0u!UmE-%#dZjPPn84<0#kfQr~9lZ&!p1o~kd
zBmiv)vR$XHw&%s=M4aKiBVQ?NJbtX@6O$8SUx`gj#3Dg*R0g*6PfYB;F;Hm-GG*MP
z*hG7=BQbUgc>bWB8&(yNE(EHunOyNqplaRr#`ZTFw{LG0@*1~uk1nC7&_ZepR2CIg
z2HG5s&*|9b-Rl*H0+p2kX{O!&a7HC}<nrCyyZCeB;oxN>dl7mPn1}vkIOnbpgHPq)
z_et;X`;rBvGtwaG4E!<Hb8}Cw=m@Pid2$8cvf?Crj`Mfi0`6bIdUJPOK7NwAgOg-G
z8IN%oGJ;Q0%vLN=EJ5~)^@`2#fZn4x08fc##ht*_KM92O#}!X0&MKZ&yo#>@^At~n
zEV=|`@*uL>(@EDb5rVqO%i<uA2eCu>--v*E5Nz$i2JTf^$q9v)s8}k)8Jas(RwQBa
zL)qqWdhtwn3HVj1K^~gJpw+{Q#X?9pP6zLS;|aVUR1PSwaFf#<G&>RShtxrSr8iY{
z+BKZlZx&UBfS=0c&}(>~U&94>YpRv0Dv<gOWzsQcv04#td!3K7J<B8Krb%it7n!BS
z=6Gj{@T@J4KWB?eu)WAq-V{=tK$P2QDmJkjEp+yGPPghQYg~t)ZIMpiB%NflEg2o-
z8TW?q%u{+3cS2fwmP5L2Qx^9C6GCQ}qeFVPf~_=FO7(1*x}!;CW27AdM#<ig^y-mk
zkDY+~>b<U8S+9>j7G8fw$*(j;_MMmhfbW?expq7IJfog@zuC+)hx%PnE!D8%j+SHi
zCzR!FO#dCn-@9R$$ZfDE3({>GjSZ^@)M{sn#b&d4V%0Hhgph30XxMZy*@kPNXAxMM
zk<HVpV?B2K^TaA+q(jW(&>N&PLUPCJY^rqB#3u?!J}DhkzR1Qur{-A8OD~z)M=Qnt
zBjzCG)$1W?cOom6?h%Z*`m|DHtEyP#T^~MuTFnPwo;T@FGrdlF`3UR%)kkXS!jPA_
znAT4+fp_{WD>UwsKK(F@ZExq$5O%Z|`~(FlAIYVD_*nY9<9g{cmhk64SF<_Dh+#wv
z+%^i5DD_nt|DQ1L6tYpZTMLPA-95e?g^z9G0JiYhrjCDZdQ5oZ!BCErm=mhZ<{LIW
z!)CTsZ9aQ;bK1k~9>Oq}Y&rd+^kx(2&2_L)P-gF5=;4BbM<=1+NaQ!C9SE7sqVPs{
zL_&%yR=~g6!6P}Pl(N$HI%|Am6q`PApmc5I`9%}Uo48`>*iz)on3iskK9E8yXYs##
z_SCk+3)qm??6sBR+|^Q&^z1cb-(XW-zoBy6;>feowS&g7ja={czHB;YTQOnQDybZa
z?`;K@qn)p_nuP~9KhQ}Vkmu`PvhOcZa&prI(?LH_aceO=)r$+=3{xGkEAnxk1YKuw
z5aG#mNX`!BEOx499Nx6<rDy+i^UZ&H_NDMz@o+2SzC3j3OU6n6v*Fy4wf8>Xdf-6o
z^Y^Zuv--htuiSUvcfsG^eDI?Oo0qJ8bNQRc?|Vg9)vhibfAh`bON9&T=gw`vtF)4j
z4BxeDcn6=El{$ZZ3co|R<#1I;U17n@d0?W6k3NpMdA!U;Qv?=djbG9`|Kj;5j|%$I
z6KO@JEig2G;Id7$x#WfPsmnHlwy}_K{A%0c_OI@0PrK`@b#t`8T0C=jHp_T=f5$$<
zw)>8AAKG0mdnA<}03atUBVW^!-A_xYPTrm?Zy&(&uDiba>aJzaBYbZ0ulhaq*L@xP
zt4ch71kLrM4a#L%LI7>2JZ*${lLQ13%GH*QZ0`Yh?Un(xdjS0ThQWWg9x*8sL7iv8
zk983um{!7@bv>-C*8^vCk77TtFpewEV?>bZhg^^~P?_2(dd>OcAD~5@J${susOJx^
z0=V<%e{{ak9{iaroB=wEK>wfo5CbDqf0{5D!p)1Zfhi-k+n)|5qiALTI2{Ial%%{?
zDmpGi)Z%SzFLC?1V{I>uL^`ABzY60VV={g&c|F@WVvcdnD*RS=t~)B1FxygQU&?IQ
zxV+u|xOXYi3|@Ks+u=*Qp6m5Swr_a+@eLavdrW%I-?x8Xf76tBKDpoIq+m&Euy#bS
zSGqlAuo2vNn#N^_cf=$G10JZQc1x$&s7n55$5iQkG5zJ2rFWJty}8H#n^JN;hLoHX
z`sqD6DJeOg+(|hpIrN*Di;(s=(|+_%x^KkND-SIlk#@y1@%+@sHbzU!u1o8s0V1|N
zzpx@h>&QyZ$yG5O@(u&TtT!|AI$p^k&lb)1Jo?^JjK5uwbxiORzfy(;hx?P@JUQB^
zSY|XP-`;xkXe%!rZN2^WR@PdPec|2gii&LZKvszRE|kR{$gW`9>D*Deuxas8p``6h
zRz*dY*q@fa`W2RVBk`f>pkMD{Jr2|hxoTyBC`To8<s=bB70sB|NhwLZ1Q}?$A(GHN
zs5=ouhkg>3q)1Oqd_b{yfC)Fh_5RWNLu;1Ip0#Av!Ma1gdE@r!@79a%M76=*cZT%+
z`YoSqV+rS0oj<x~%hu!LW^UOq*)_{-OE&-E_TKZ#3e-k>T%QLgJtGOF{1dM|zxT+S
z!3nE2Z&@`V_}HySo~$VolB{+^Y@lKOvUj$=&P-!>+<jul*lTA@4trfT%W&K6Z+Nr3
zcB3_+-{AJM-XvouFB=BwOMpHn6IwZHbvWXX`T!0-q#=OI4aE--76~M7lD7+l&NcC<
zDpAfW0B)~~)Ik{!(K9NSy96iB2#7->g+-XuAkmG;=TH&U%;jH|SFgI`+P`8dF_u3_
zmvq3r+u`L-zZO-SnBt5&0YNaQ<9+;<Poc*}dODW#Es`SE%db%-#cEA?xY!qODC{rr
zK-BT+Ey)hA%7-fUsCU#KzfP_<95*mi6CVx?WTZo5hy-N+ZJk90kgkDt?b`<?(+W@}
zfL|*j`~K@%TlX?AHHY-ay;eN=lEO;QOX;Ch`48((zS+@O5)N~o20n-sYlddAYIu*|
z>H)y0*Tc&Uy*Fwymos|=p&j!Syv;3=-ezC2iIM8-Uz6ITRz89wPj@`WoqSFDhFiqO
zNv%>FyM~2fsp|+?dRsa|Ca4F(7LO42@QTPR?$(YDUI+tnGTiYO?pAq&g=b0%ORl*?
zVY3MebFPI0egUGPVf*<S0^(p~&uYd5O@=R(UxuRo_luxYj)(o(g;z$i?!3qh*ZB%^
zaP(k)@c;r88WR<dm@nDP_8+{G*}Z_c#LX%zK5}?mU7e-aQdfuVpIy*J|L%NUTXyH8
z=&I0LW}EADm?`KleA;C*zeR77AMuN?V<BiD!(j>iMJ}6_?z`$wF4R@e)UBp_M*)Lt
zRET+5@AxupZ<dK5@33^fx3(-^dO`Z51t)RAzj=s&B;E9{Yy8RlGR30xQ>;)ZJXV-q
ztVTvqFvKiI`9`p?vLQeN6&?@an2e3(YA871UDHi(_#kw^keTR5XFzTV>ws<~y6aFC
zs$4u5YHXy22sbhX$7#n@Pf;bRrc{psUJCx{@Sl$n^*Xpe>(g?qTD>ktr`K9@()3OX
zKsm%1o-Tny?;U$rcN|!~SCf=8GBEBP2lw1t<^gH$EZ6+L^Ici)v;pR~o>L{fGpgd6
z3=<*>LKGqu3UdVlr?zsO70@jf4UaT+9(BChrb5Q>xYQINB%~stUX03ygB}68Dow|+
z)i>O*x@^hy3#Y_?5DLY>U!*jne0PSoyxg0yyF8<`Bz@$FPdw|JZ=!h<I{64__)u`H
zO_;Ti*cDb33ZH|agyt_#D(RRy72l+k0CA?q<eZ*D(uAVbuuE2DtYrM{Oo*RoKX_gs
zF#uxhC>=S}?dc2vdH6a#b?oX$O#h8f&HB~XrkD{U1~xAACR|bs=vIRd9U6P>BO#gY
z58pa1D~VGqt^de{7#d$}#AB;oVojJqCx5+k)9#yIx$ySV2c6OjsWyvwUv3r@@M0Kh
z@hf%i?4Prq**;XI`?Pt{iv#D?e!4Ni-=!H($X*C~n^2JC2xq&TuEaS@kc0qp&V3aL
z@$W_2_bf_wCqtqm#XB_jSE}2i{D%U5D6QaeN6<{@fp3DFd{LoMgJ%%T3I;*tf{B9<
z%D@_EHCU)f%)8R#gfvmalyIH1q!_;T_3x#&?_a;RYT2rR@mYeH9N)XKG#$}Mc~dt&
z^Y$|vr{?j@m|oi0J3d(yvf>A>T2>{6k=i~Asesn22{0(d8|7SA6*J0`lgnmQ<c}y$
zjlrYvKy5;-(<JDUQ(ZQjD=j%jFvL0&w0IJp7n52%f*&EF8R$p$2>L<K&Q3&gVv+0`
zmgCG5WbY{tLHNNEif~Im^lHHb82gFuL7EfzqI=M@pfuLO8;Pt59^!Vu0C7l9k6|Y&
zSU&K@`N$qiktMQQG_l2wRI&Q3GR0v}QSL24sLCwqrbX&hYqoB~Z<VQ8DdIBenpsk7
z`G!TcX=$~KHk7wYoI<JLg~$m2>W||r33e72nPH0u+Vy8msqDTzhd(siII)*BiaTYC
zPq0gQhxdGNA#-pjEiE)S^8)d39CYSku|tlnfi_5?A_rwcm4{z)RF?=7N0+wFoWr0n
z#TOPVX=E$HPY6rzz1K>5Kj;#n4vcOd_{WAA-HuPToMaiNps<o{F=YGUTRxPYfa#{k
zrBT-+!E}mQ4sZQ@uhF_!`m2SkMA5rsKC{yfN(hw-3_3#ih-x`W(PZFY+LH~yP6kCM
zDGv*yWmA~MmUy510%_yA@rTd<_59)SSS^3`HnvV`mz9;X$V?P9ONsc}QX?H@N@>Gw
zuP%>XO*gG$>*U9@g)i5INQtb=5W<*u%c8M!fCW{k;P(BqO&IXO!Uk75P#n+?kPY+}
znUbiKU4`b$_nbzf$|Y%(UmM+gPkQh4p5qk=bRA$<XSICQlBG^6Gh3AvkvlI}Lip_<
z>2G&aD{t;`tGu~6mJR&yZe}0Uc-oX;o4ax2Tw8+abbF_%jM^aDALO~F3YgTeIm?5y
ztG$5&f%g7|`cW5wJ_SSo0cgHJSEU36MbCGAjdfS6-~NAWj4?6yt1CWeP+Zz-utc_9
zu9k>?g|CC9#jy3#(U-4YL3ASX;n!HE(@<57%s1_gJ-?Rxt>oC!d4wMF-_(u19n_fJ
zki(rLq>G3}hm8}ot`n)a*nMRqh`-zj_{i&uW@zHId0M8K19!R*Rh)1KEQT#}$8??;
zS9+A~J^Ej^5_N-@j|LWLnL10Ipk3O8w(jw9=1uB6F|B0Xx}UTn>3%>nloDdrOQ6%Q
zfpw8AGY$^v-hbNfJwHQ4sE1(IbRgZj381okfy|I#x&%#Ozz@R1;2~~;*A#U*q)V1!
zHvHp&{Q0AF20ZYU<OY%Aub;d3-gB=rf5$$sE-g!E9Xd2?scc~8E?&QK<@H?X2^#88
z$S3%}AC|s3Wx9eC^>{ps5~OngYql?4Y6o0%<dscq{-#X`^8BIn_@7$uE{zfmxDN@&
z5hILJ2Utg$&XwNX`lsUvL>Cn7l2S#qp&EFnli(eFl|BddSqWdUG*}>I!WtblG7ZD5
z*mK~)0x1tD_<<0k;w)!g7_u;>D1bnWc0+SP67|ai)Wwun^t7QBj%4Y($KH~T^;`bN
zzFM{BhCgjv@yBcA{?p^jOMOxv-76nNfa@La<9|o^qvJd?yc+m$8yb>tK?C9dLJ0yN
z3XMHS<m7L{k4hc!N$)?SoOSG@mD~Qh-xwW(p`KR_nXFlg9wjx~d~t1e%Zn2o&Lr1c
ztiro$uXM3P1rt7wBqqNlJ&Pk~LuIF3V+h)C0_++;--hTj|CaD}5hmzV3p$%p?t3z;
z7X;)idS7>+Goj0cdo~T4&@KJzk&mBTz5^A9munB|didgX&N!xjvh~Tmr(W(Hl?rr0
z#AB<TSU%&>p&84c;7g;OPu{(fnxX9;mO2tr)($uRlxCZsU@3Pz#f(WQYp2Mg@h_d-
z5O~*^BunpREq9l8bay=|bT?rj$b5=yck2U*;mSEP3Xw!o9SyA>vuE(K$K=n>qvv;O
zG&vwbJBMF6pANq-di=ig|9)P5XQwtE576uyapn9v{J!Y%`_9Yl`qO!qyClf-Y^j{j
z(E&_n4uEYi>spF~fo=vRAj`U4j-Oplp_jV_7xi&5apCuv|CIF3$t|Dk&=F;6rf=Fj
zAzFx6ATYiXt<Qw$iHnzKB7SYG^u&jEOMl&KHSYa<>tSX&Wr}{b;}fFyyll0;9DUG)
z<8p1<J3o&+#p2t*Dyj+#>!2O3B+4nHpc52T1?xdBm7slTo!l0*sbC$W@`k7LD>=Jn
zR@DNa$-fV{r);hE3F&?Ljhlb2jLi3hR-28B+e4SD#38E~9uYn9L@PB#E9Rk7ETg-9
zq6eRdzNO>qpUkWBw;}ydl!xr%&uGF#9FU9aDy+;d%0<KrIytgPH+x7VhGzE2ZBzzs
zI?Ys_Tv+7QAH5R<HY|i85ySRLjHvwU?#|@prHE2!`MzzJxj*o8u+VpNeO#cED~zsC
z0pjuHv6I$4a$s05M1Ts|AwcCqx`Vn8$`6bZdFmJMO)V%$l~%v#`YgBqnu?{{kG=F#
z#6!o#a6xL@$<zX_?u(mCO4#o-&3o_tB62@Yj7f#dO7vZ#0&~PrvV@UbAkd&BouJ<U
z3<lYe5$vKYIp9pxp`F4pXs(2J3Y<ceP{HT$HJk5yVb)P*I_Vp=;=Wn^w<c-RbS_6m
zffopand4OM*|lZ;8^(o#lPdBP^nZNtCF!4WNpUU*XDl3%>EQ33|ICfEi?&G3jgOz)
zFf3H!-<LTpbJXAhQF|nL!e?xpt8#YT-jU^1ZRHhp1!HC}pObt4vr^>6tWkNHn#6Iu
zan!s8s1C{3m)4-|wnCmLC&Us3j8`Z&SSBhYsuPT+BXfXN0P`zX2s0c0fKuG;5Qpha
z6?9m-V90Q*NQPcZG5=cpJtAi|EzB+5GIjURL5v?5o2ZOcS&eFS!2mI(f63$+t+8qS
zmnWuAKk=o6)v6KS9R*ou&R15gdPVy3*590zCU2j=>J_e_K_hBCnf^d|_THv>W7XsP
zIe5L@wq0c(tW~K8hXQ#jX+-Bkuv-7>@h^wX7H85!q;t}judJH1mF<7%_qXE7<aURD
zvRoL&3$n^OVn12|5=#)uGNhXEborSf*0g)u(&>9fJ}Bf<O}{W1`RS*0BWk9kwk@{D
z4)*c?;6=PG`U9d2W}1U^v_x=sZE^BtB@s8dHv_1qd)aMw6lv^aQsj)n4SYf13NmmU
z#KQLQBI%k3JYC)+l=8r1$0ek?C%2|f2?iUa^#}UtbDt18KNn(+daG40HCy#9daKk-
zJFHROiMWRrF-8Abq#9D$-Nn^2%HZ;J%R{$}uvs_Pe+&?ba3{dObo)>5jy^ZiQZ)3N
zf*V!`W-OmRxnH`u4FAlHLn+A&^}(>}Uvm8l6@+fsRX^&92osReGUO%dP$3U71PV}E
zK2nFt7z-+qT)&cW?d6I(+;kdn#ps=v>-oq<jb^(>Z_r%4s4?iVNgF>p60twx_14*)
zS5){A8*<2IO-xFR_jcDe^6}3<<nm)5@fHWXb^PVZuUUg&)*Mf<w^P3b79Ad-@d~0}
zG8Y;3)Q`>}_O5Q|AsXT#4L(ySAtzr_v_aV|D}gwKbR9VGwm9aK+asZPABUsxY{yvv
z*J0a1XAgvK{{-7%G%)5goRn>$4%y2EfqWhnG{kUY4|x2ZKq2YKk=!s<sc31Dz6r9y
z(hTV^{${YjLFt>87HDhxu{Erpq?rG%QXz#}!Yv&wJgpc&)_4V`D|!!o+vs~}u1Q7x
z3It-3!PCf}ssgGOkmR&NOJ@Qk8czc8{p}B*H<=vmtqzmv{KM_w%f6M9IN`~l^-pc-
z2yc8`e8rfaZhS?2d?O#;@>E-koU@6&K`>AB4~=@oyXCR{bMNm;z(nuw&T{&*W%*My
zXK5$`tDL;aLXnoADONPqD|?QL73sM{Wdvt&=?2iD75M%XV^5ejXdVzy<mQ#<D#}yp
z)NnY6W2El^Fg1EL<hS~`ShGpWwI|uE1{b@;hd4*%ufn{<Jf}2}i;G;!lGd>P=2Sxr
zmm~<|+vg#1=a<@Cr?AYHXuPE0XLTH9TCTeNPjSim5BSgcj%NmPYdB+~Qu+>BCX@^9
zj4?@gT!>QWiLVatyB}eyBa76PNb17LsP|i}V)P}Y`cC8?j>akHD*D5+-ocd20`FNb
z=zL!`kd0)MfJ3>G{hB?;-h%-~;^0sy5>gteU7(sk7V~H(X1`Avl($KA@+qU&V6MeA
z49F>+;5z>3tP31eh+3+04!T|kcxOlSiGtTaX^#<)0C+XHW<-~Oe<AtS8R(q$$QBAV
zj;1=O-SIMi5gr!3uh`*4mI9}P9)ZAW{6S}$hVSGE7MAlA-9-~51#qc=-%oe~cn$KH
zmqXh~XXu176-LwOJM9j7GmHUH`_qzYhI{BVy;7-4@jIM|pYVxzA1aR9@f0*nKE;*M
z9YJs&0Yp<!JGm%$DCkpwP>^XeP{jLG0a&Ev<36z*n$Lg|I&(VWrEFU=#2jo9Du>`K
zPD67Pl>^7bF27lcdgCSPR3-95qs&S`(a;eR_#J#PAq)CY8md-tkP0H-1+ItU*OaPM
zl*uUol^Z+qJ*oBrFI7ubjNFg-Lw)2&i2z%tRw0jG6rX*h_F3Wr92=E@N)@Sm);PE}
z)g?F_rTVcc*+aJFrRTOS(T|C4=5Q~wUa1Kw#lE6Mv1tS{2)9oA$J&HN*R2@IeW$jn
z*!Xa9UV|etGV)vJ*nD8>a-vnOj58#tG`hqjm)@C}8gH@bRDlNMPc;tbQhbS`KF7dw
z+Fn|t(b=DsFHUsZ)utiN-hjA4TIq!Ryn^&Kxn(o=TyM)L@|4E_3o9_SZ+#jQRltg2
zd~fGq3uem1MSTax0`@#Z1NB6fUQG0*a3c&FbxcD*t70}wd}^Z8;E7MrY1N5(r}VvM
zluJlRw7G|;#_9XH^detUXdL1)Wa#V;lk4JH*C>t0nwXHD)L$Q$>NOSy1<jL&KGwAC
zocK8YJ++zV_2%>}7Av)Wao1g6+*LehE>mffHY95VQTk2|n3lIWL8;WGY?Th0dX*Y2
zfO!`OJjZ)CGv{6RG5cW;fM(29#`uy#XzEp3PN`AFAh)blm|H5uxJ*E4{B<l>oSPM+
zHfwq(v60A);qSG&K}_9PTsTJW6n^vk)Z<f>PA*v!lclu+oy%I!*|-_fsiC!Mb!F&{
zHvkdSEW{d+%*JTUFldrFQ_O3>et~Ng8&+lb2AFy6n8M<XJ4{}cCeG@p5`{v0kL`wp
zN{t@*a2JSTeM*mQp~|SvPDm}tbXteZnRD};_ZMXM>pNJPzM$;`U9!_$vbdV#askxc
zE05z3*EuZ7I<3Z$l%&xbY=$ItOd>v+aWJPH5b$M|d(2*KoJB-t0-&4dl<B}V;ylS|
zO(p9BCT9|hH^mxw1DBI1SaNy?2J6*u{Wb9Gq<@XRL2Km=u||U-G1gqPuCyuD?Lk(s
zULr6ZkT(-gj8*&0?uztYfoctxA8SM>N{rDYnk;&aHqm8Q^A7;_Xu9{>B&)C@V@q$n
z+h7RIFd4OM=~}-3*8J)2xFm~UO}chRvZ42u45iUDz0zE{c9DR#yk;Kn_wBM;RBGF%
zz8tsd__F24k1t;)`Opy)R$x%+_(A=i6dD@P?6%RPL?ic7pOtZHrNwk}61UN*-}OQ;
z|G8WBcEC3g#*m7Q%fOIS>+?l5fSvFVrm>l=I>4=&ODi<$9KAj%4b2kSY%mR6p^FL3
zD-P6hT;C5WN*0$DZJ&a~2>|Z0I(2$oUB8sq?e=~7sScjEC-x1q+~O*qhYcHw{u67n
z2*~4bc2b|6#q$C&x|P)?Lq3X+#Ms0$^wR(+8T_u1Jf@M)`wGtt=0dx|E+Y_0Qk9E2
zSf%Bt#D6w!pE6~8Wa*Ucjg8wQ<4WgkyZ$%OF0#^hcl`dADcO9+!1-&3JuxF`^2Ek!
zU(AR@(&-b@2Om7WacTelp4?2j3AfWy%<p?mO<}sz08n*zZpomLGv-$w8CSS$^30L7
zeG8KTJ!f(i6%Oe$I!F?e>~kQ;w?-pW2>WmrWpjbCMTx*ZM`xxYLUg1Ur*5EYYXMjx
z*hMhU7YgJ>1BF<Z35T3-0PBp)aW@`f1u=&{L5_@;x&E#_pIiB3EJUG~bV_>d<IS5t
zW<_iiE26E)f}bKiFEN?i$R>U5+?v!RS;S9D9Vy2YcEkC<B_D=mPF|mrJ~+oW!h<DD
zOeF!Ti!GZ!Mnu(>Z~N_4aG@i^O%lDU)fB1;r1my1A$`FTbMMpuU(@|ICPy?%-!#(6
z#)+FYO^j~sJ$J6-MtDsSCreATEc!@i>=Yn-Wh)bSH3qzip5CZ1@C9UUibU=%*<Y5K
z3LL8N#jpxGKa1f)3%yPiqImh5z@(}Rh=re2r3zI|3e*S+;$<T(P!+rBst#NQJx8+y
z8)GwF#>*EsQ&7?sWlHESQ&cHTK}bD|V2`6XBwv)BmjjjH<Iljda&ml7&r<xTh$xPN
zYpDtRs0fk9E6d2-{}<)qA=*;Z(*Iw|1E-$<yY>N(+u4VlkgFk?L^BcmCtpha?@Ph|
zN8bkm(j`&27P_QFyd4Zvst2wI(Nviv^g@+{P&H!qg#~i@kBu*DZLz20@^sHgFInSb
zV$#!NViGLuYozv&(r~y2r`d0DPBdqTtr=#~s-Sl$cyRLYaaAz4oq)B>HV>9=ztRJ@
zQ8#cT0)^%xdD~fxGki#DfsP^+3Q6BKA<!fgVj=j#v|w#&YGS647;cps!;#k3@ZP=Q
zR?Zz}&GKfnIq^O@uAwX214&&$Q1ME<pKxIyU&;Z~0A~i0mq!Hp7W|R|<^YhxP!QP%
z7NvyKksSdC@*k~9F7w#c7_m~gT_J@@ivoju7+Ad*aZrh0dvq<~C@{Uld>8`-Dt!SZ
zlERb=IC__W^PT_Na0hZdU`aV2Xe)vi!w3s=G|K1(R7y*2s8OH|NrH{)hzj9NKshYn
zNzt=bSJn-ohn+QKJ!=U~q!$u)S5+x{FtSq<MS$8V+CY%T0~!<wZe;l3f3)a)7)8f8
zr&>o8;WiXm#IGH7MHTSl6!L+tTlg^5C3-L2$kF}sK336IXvY@)<M4~%kN&}jsOz27
z0GDM!Gon->pY|Z7h)zmTIz7~DRZw~%IeSUEh@9z^rajEAGZs8vFbeUdjnShe=^c$F
zgGS*XWJ<JimyD^zJWsj-B!Pos$BQqGzoKHI-IQ>#C*c%VT}X;~B1Za-x!cjPOV~^4
ziH{>)dxxUy)l6|giz|-s=n%}EUcxuyTq7<*CU+`Y30_Sfvl9<VhdTMuJ4Yi&g#!MN
z-GGEhFwwc~D0BcsJ1UkVA67DRdjmKJKO;yt5P@I{FmTZ9BGntD(m*uhHZbi_i=PH>
zt8Pzrs<pS?s#QDnE+-$eV+S(KI@{-bI<(*X)q(B3GT0#Qm1#5PuURvH#<aZIiHYkU
zo0^q1^|AFc_`zeUN<*Wnz)nh~>~BLRUkOnJuoaQp$%zjXqzG&S6Ixl3^jh!1eVU9&
zuH{)=q*70Pa;jQY*c5~O^vd+w#$}DQ=}O_o;sGMB?w1p+;vshr=8LbuA0iz}SjM^~
ztb=&Orj}C=FhH${=v%+Jm=XiYNEry&a0^Th<d!2;Edtzx5SdEN)}zDl<K}MO%uU^l
zr03(0NZ;MQ^1UMykKh}ZGXs~n=<$DSl79c7^xgw7Wt?K!8@_*h5o_oPtHu1>BfXyf
z>(lt(D>9@PdsBK&`VLQcZ{_XGaO8+IbjSC1HQph;^W?qKA5YG>=PO=$MRnvpr|9O@
zz*~wxnuUKHnMR)Xm*;62(=Td603V?YTlMWwmRj{fNN){Ks%n?H0RgN7#$4CAW|>i-
zgN<}q=V4*k<%=h=@@84zN)N+h=vpM%rar1rhp{4G)&M+K>JcRdT?}dI&}1rfuTK4M
zO4N(S1AiY16^@#t%Q2&ogR-n57P|CnQHu+7!N7=yGFTvx8bUhhKA>y??NnR@ncx-d
z5ko~f*GNoHTZ_#4G^SS=Bs*=gzuBj*ooZ))qn$`aRc>xouCROJjr%t5yK!RmlIgPr
z%TS9jd-{^<cE#0>3L(nA5DD>NJhJV3nZuM9q7E;Ww@L>NER{D*cy?}8$CSa#syv>m
zWrKA)-+c5*mB*uc^3gYU>aKdUr;allIwu7Kx`4yd<?=v%G8(pMg0+Ub45rlCUaXuC
zcrd1+j{qGo@OBTnHncxQ#bWq;bMyIVn}n$DjotgA+(wZbhV5Qj-Jz&nx_g+_>9o?G
z(6uLqk#lCz+_};ssr_=5Atmm?h}gr#%f}*plh!}<-R8~TJ+wYa<w^IbuH22%PjnLW
zk8B_+z{CH4Rl`i?u^}K3q0^i{74`eYYPEJKH2gQ3{)=}G{e0-o#r^;DnpBmSwe{Qh
z_tWc>lh>dA`$nR_MEft7onoo}H(#f-?1*zj(cxMDOJ4*<ujj|qmli)Z>+@NU;S2t!
z-{9Os4|N!Jy_}Kp@~$iU)4=~_iBqraPfC@Cut5Hc&UF1e?##UF(XIaTO8lfF74F$n
zNImL`?_h*=dobwXk4Q=o4#_!czsI0fA<MD#M`y_|0;EA622=U?l-~KZMb~6yW@cSe
zRGZ&BC7u^Lu6A_l<-0-_Lzwok2nA=4X$aM1R|3h|RheBAY8W#+c(r5XE7Nro>d?iX
zC@_o9#dnddy+pL-V29`iXdqPPkfAXtkqjNQ(vmKLWf+%`TXy%RpThV+J86L%RRp#X
zoy1s_v=%@m47R+Ohj8Q$<>ge#i&R$ZM_w6-#oGB=`DlUPpux$?0#QA>vb3tt?34ue
z^qu+z%BI>#c=UYfwV}JF=|ts@$wfJXgfPG%Cg$}+WMrM|K3cctrb_SnD@g2(>y^eH
zPV4mp9d=)rUa97)a>8p0hlwm)kW!qlx@r0kg{9Ka*xcHt<)c~p;F+z{cCpDD?E`46
zQTr&Aji3|xKw?*rVpx`wv5tfKmYRtghgt^B0+~aO5+U)l>&ou7K>Qf;Z17Q*%uo0d
zB%Y8<Ftx_f303Z@2~~%Dp+F6};)b{fQ;JnXMI58!?uWN8O}09x?V59odZ^*Lk&)WI
z3(}-;;eols3wBL&T9d_aRZgUdGf{YG<l9S%*9&U`nJJQ@Fe`=acPFs#<hapqyDs2%
z=R7yCOxQKetlT+AGNflp^GD1M=5mVuW9A-6VGm8)C6rP9WgbSh^}@RWUXoKOk1;TJ
z{P>upW`Ps9>@to48Lba+qh(Q0B`SI1KdIXk1j!&HcNvu^WAxIYa>je34d`$pGf@<C
zBuGX|ILP5FH73xADfm4aWdzH*Y@<+#LjLJv70&X(qSQY3z=64ovxba6FgGWgTZWn7
z!2B`N{S$6Fe9V<rl>^`4QTY`tL|f8FiIz;0siMG!tc|X;FCr^q9f6u`FK39z5-I2W
zGH22JQG;1sW-(L*uWe7Gb}ua&kmHkH3Gd1eh_2-Wd|KE7&54_8=N>Ts{lMJF^oAYw
zdMEedz#)d9C#On#NLyQQNr8>cdUd?r>nI3mnhinTd_i3kNUt)y6hfHK+!rb`XLcy8
z^|}FB+--rHb)J0b-JJ63oHyR6&QgyIWDGKcVs`dDSsqN2@$t};Fbq3+!ZPOVW>)AU
z&<8<Rf;tObOID2##w>;!Bt^NC!dKgaF-b;YxeH>%$|KqdyGQ3{v9P{uVH($WMN_SW
zgf7ybA|KT@-LsP2nGqQ^eV@9rsaDxCG4dOKsG|}AS0=NzFqsc^v|w93D4Pq9PcIQe
zTHtjKsG5YaoNv;zvREXjU>Ma(MM-|gKW=|XIsywr?dhAEYTYaE32&P=VwStM>0%3;
zc4R%TFY?8^Q*&&|J~vV`8nSwqq#KPbN#03S?s%W-s6Hp*d0Bxak4f3rumBjWpjkdY
z1wG3Pvd0klNdQw!YdN5n?}Q{le7-W3C-3xBOn=d_YwfX#218sw#xg>hWYVVsUPC;L
zT~RuS+c3n7eC*X>tF1Hi;xg6RiRMjX>o(fzX4y8@U9-h7VU_AyZP1aIk{>tcKxu&_
z_OH+Pm1*u=zeiK%%M0<F<ELrLeYsWqGL@j7t}gO$k7lH>_L7<+4As{|gLom7>o3zR
zi$B0uTvAM~VS7povmNZi1lPpv+WPskMoM?G`$o=MI#zqb#Mo3xp~^J5bh?}8lsEaL
z&4tQvo-Z<n8|TZb$~EdEAF_kq!m1oYjFghN%q1;y_ljrNX7(!@9RK;B1s227^%h-j
z|2&`M;+hPGy#Df7SI9oYg)#yO<(;4z;cAqQCIFm~`TH*7ADsm-YW+m|WwJ)3t!pCq
zDdDq%lzKXUq`SMNS5?uFDDgXo=zs~a@au?95krbGSqv$jx8I?iHYB%b@xX+nNgER<
zm}XZ+3ZjH?|D1t+4*b>4-1J|>d>|>L@GHebsbv*~h!tpRocdm`z9s2pG!KNv1xM5b
z8oA!V5#hu0KHvt}$EvnXdT-eRX?JL3lnl<fC6!B^djQUP;O4u2ooz&XqgO#$Y^Nx|
zk`WrEJl9357(n1y)P*UTh$7KLY6PHJ8f7R#xf3~&xJaHHK_2C)1O3Y8wA#r(KG-#V
zM0+WdF8~+>9*@3`Xn+9jA>v4Ji5SG9x^M0-XT5z#LuC5g1AjLkm|MFk(F{VBU>~sj
zNl(x)WMHtM7PP7A0f*NfuhwtYR^{MuvnJGDslG5Xv*HC%rJB%7hN^VvZ4<Kw=<2Pz
z%!4ulBh^{eZ@iIHU7jPoo9|gy6W~`nD~_F>G(oz5%=`mjy18Z9Idcz;ACk402(i>I
z4i2WdjvcPZXQOQKIaS+Crc6ts^bu{Rxmcsc2CVE^j@ZbG0gH0J<ea1*g~G_-&8}(t
zTX80<8$4>f^olQMKv5~pdTHCG*8;MB7-JsBf`?)9kAvn&##OnR=MDl*tWXA0yo6sz
zxLzq($%%cS5Cm`)MIjJG5yNCn9)|oi@Y;FDqTdFuoj>TUKy``JTLr@~rqSxR##mU+
z(`x%Fo90Y5v&3xEYc<2MzR{-nK&$2T!iO5$F1>|sU9Puuye;3HWzjD;SghKP3cXHi
zj^Tz%V-bvbZ{(pEvsP>1pN%nFBNt*5RH+&SeVM6Bs8A=4r3R7By`ymm1QHHes~AO<
z>*D80ff5Y@0gVSzLUbN<z{qihkpv2bZUYG!Oax0`&**FKs2WuCIudkP58Bkv9Y#n2
z@r=wDF0Y?jKUkS9y)AwF{PN|`GZV6InB=YZuVRJZD;qo(=`TaxlXjR5CNo<g-9gVG
z7@XMT+h$JKm!{>5mp?Ck`=jScHSi*T_}d$A{FV*vGNbgYcQ$B^oau_eN)K(2--ihb
z97gvLas)}S<<Ehtgsk$EoA^Jt>?ck0Bl{6I@z&V}9WabcIzcen5?o&E(5a0>yaP-o
zozbKY=#9K7D=;ei=HEWY$KX<Jw%Ys)m+pK1IscC;k7h-@%6vAI>MuRq-4eO8EtXMw
zfzu-|k<k#Nnm%mkv_ykJ$GDi`Hmd+sY}>QD_dY{c!Ib_BR|)x7X?AA6;)T(sC!Qj7
zsa4e?x@Dgdg+_3y{2CV2@cy7v1Lsi{<64Q>MH;#06ODr;H*0-X`j~6xnj?+aXRVU^
zS>|b!!dxpUR_TO%868fhi#ji(+dgSzVd~?uyejLB$dAPj(up@Y;fv!8`ZZ$E9|U48
zBKxoGy4>r?L-1uoOQZB9bEc17FZJfL*b7o`WC3vED050*rjO-^UZs+cB1+BK@C+`Y
z8^gGzioJka{|AqI29Lvy4S>-5X{RJz^#{<`rJ-%Cuq#BfYz_dD(|83cLe7F+y|T-y
z3aoeHTMLSz&_nmc7Uc_&4XzGcBX1!(o<cjI_5*KGz<eIJ3O>SixC(c9@>)F*#KD=7
zHjq3zAes}YPlIBKd_p{O@^fwn9BG1ZTMr5wgTsTt;T`_P&5QA0*s!>E#FE9$9RrRn
zU3Tow&yNWkk1bnz3_BekOaJrCb#Jd-`}TFu@b^j*;tZtaZ{Iq8?EZ7yNa;IdK}AXh
zwoYK{v&uCK4@nmeZ~3A&ca*N)UHj#h!_tLA3pM3gY{7nZ+n-w54O~L>^+Ar_UOb83
zxp*;?%g`df_!#^A*s;%#N$G4IGp;?~c7Cm(TeNWep|_VWee>WXcs}DWJ_BAW2!-nl
zZ+Y@I>B6l|(@L&&toBY@d@EDm_T()%K7DZ$`pir?;2pv|tHHN`zp%m$?`kX%k|mP?
za?XKA5aldafi0F1k>M001GOU0F?k*3AmthPA-Mqa2NFUKM0{UqyYvIo0=Y*k9e8}x
zrpGt2EWMyl&-O2UX)x2dTrtUGlKZ_ReV;rAo5@T!=+!0u>~vhBP0I^;L|fIMrqc0u
zd3~NxUK+O?8K%$RNk5!<iXGlGal)oe6DCIPPRLH{<%t_?A0$6T?{f8r|FO%Zca5Rv
z*$2mYdZlG2*jxrnykJO;cOd6^yv5*>=Yp{8H>LsxT)FJ6+G)LqtOZ3HoNIFBE%H1<
zE>)G1l4M~<#V(e}-Nh0A%b9#`gygz^qCUQT;^v7HH?u-*TAyUCZ|%kv2?@!4(zK5B
zeswn$-k9%jXdGpZXO;}ZQsZzuQ?zSzzx07;rGK71i-bUHdP1GTa}Q6N82P~#E5@l~
z)6*=LI5F0i-6tzxD7rDP^8rhTMjv^$$Pmct1FyB1v-C9fMMr4mJ@>5STd>5JC4N4v
zd|V8}kB@x#WC2n}V+4RVq(DeDmpO8cjPEH6-O8lOaoazWo_*j!>DkY>PY7|(=BBcn
zy#w+g`#&u`otl$BAdT(!h~e>-k&6#XEuU}O_BjhZ$f-gT+TZmMz+(OYkMs&F_6*1`
zOp(@-PKTi^2SEd7QJ)hLSp-uBq8Jf;kqSgGkKF()Jq0qWLG6j&77*=G2QIi}`H(?8
z007oP90I<W#mS%?42blZ6e{r@>Ag7V`$`rVB^@7QAHOV%aRdD$i%jwCy6oil9oBb}
ze8)J}x1ZfJ-@ULRw*O=nI=|0azQl80|Cx$CVHnsap1sD{j`GNNo>|;u`H@Ro;BfLR
zZ+oR+=@`+cF5nV-r}pXCJ-v(_&hWEO0|U4MmdoYjRR6vIJNtwAoGMMpSUy)?AXR&i
z`k24y%QwKElgkozwTEh=e638QwXo?d0av@X2gM`F6Cuv5T=3ddXbL1vfNQWy)_;)S
zaEhN2%n^+v+9k_NMpAGD36>WUQ!WNyki6b8bAuJ8)F;pYK-_|KZ*x>&V467c@aW0R
zT*1ijk9gwZeJKUt4JK)pZ{0DOmyW4cZQePFyJ0q;7$@la4Eb=A34DW+nFbAc@qQL-
z)nkxwi;pG`(CWngh6S7_LD0w9Y{ObN8#z6$GY+hH?E!y`&b#Q=<Pxn;C^gite@A*(
zdQy7#o%QSAVd+SooBqznSD9eAP4PY|j;D?rpkA<c<9KD{jB4Svo5uHj`6OpC>a{6N
zN8J7J$o|GToYy7jlhXN`Pc|C?BY@Wq>UZvb<}k%5tuZl8hg`T$tkN$i(da`pA8m}`
zs0#W)f018~Vq7i|x8W*NmP|8P=iKU0q!2m|Bg>lChtE}<reO{t$onvpn7l{@2#Vol
z#hgElFj+85@z;I(`!7~S;+v&^7D``**+K}7BL^|Zq0irz?s`%A+ur>2b2oi1{gdr)
z(9Mua+D@NtJFQf3Yqoyl*WA6Aow)seX?|qRO*bb=WuA*{{Rd1JJRm(IeHf|RV&E2S
zVihZtxZ`vijVr`aLXY&aY)x=0fC&o08i-!Ri_;i_M<`J^mD8_;F|eF$2Z*Z2Jm`0^
za##n^uh3smc0plva0Vvu+oaE=0rPuXst?Z6>6Yj-zFt<mNflR9Sg$tf;zZ}T65|ew
zy|A`d;iSRdvQiDiCr7XNzV}==<aG1?c?p^7e%WKECm8o!&p=WHuKtd9r7tfjSoVcY
zY&09dGABxZG4SS*OStUc^;LsMWa7wFl`~KKbid4DCGdVM^m9V*G)`sFtNF<zb!C~!
zgJ%ZDzk15&s~dQdjaxKKnkPNK{*vN@`=)i$IMg5WSt>003L;_x`E0@@3UE#g1_BKN
z3@gEV19lb(NCgH!a~fL3Ky>B&G;EOG`26wb4ohFnthq)IuBn;HY=@sazFK<yo+QHq
z(r-WAN<8+X{0WxN?mV=8_KNFQ9D4DELo2tfoVV>3F>&GE^%L86W$bF3xPI@#`Ky@v
z=5JX4(~lBw%2sw<Xp!z+S24PTP5t!GY-(v;<#p11C^yL`CVaPV;pGv4ourzmg33cm
zJpe%9GoXMdB>7qdEnX#WQ9wEY`kV~?<KT%ag3^whb8(04;L1EXq<R5SY~S$5o2T7h
z!0s;jOgeYsse3-X>+5Xugcq6Z@qbhxwP>8nsJQe{Xm)*G&5Y`~qv!8k{px_ii!V$W
zv-FlVkL65d7r1xDcW>JL2X1Uh-rnaYj=ue$Tk4iE)zap^_psSNj6iw|3!BWA#|NiY
zEj#%rd$4Y5b?!ZjwzaPvGqG;aM_XU#hTM4eEUFlte^g=2KSn~={;@|`)T(LkG6r^Q
z-2&K>XD6IdDXjX7FhGLpz)T4<WW>!HNj&O+cm!dqG2$kVCnb!N%+1RecHlxQ|9S@w
z!AmJbmtlch`4-uNN#$~2Ui>S{<s{3owUBIS)L-Pk&bK2$j;s^RWW~G)m4cGu1akmD
ziE&koQRVgB@O*Vi8a#4iEmnambd^q)zRm03U-*I*VU_pL+a@WKvt<kmUOUvCQI?Ww
z*II1#eY1y^79uU%+ptuH>PuE^nRjIJHCD|x<L{l_KTnLM8{59f>;D#;HY0mTb$(2I
zRYL!>$Bw-;+}A6lkI^}E^WD=QpthBB*NCfSeMz<AUd8j6Rf%z-&K~`P8#lbmqm@Dz
zAz6=hAR&-f4+U<@OUxz|y%NMYpwJa~Hd9hw0}1;03#5`GI$X}poe@`LbigZu#T1;5
zzDhYe2|UJbMn9y<D!L0%lUl3uGuoh1fS)<N10?`nC#YmsQR!xS9-YL?S1T9qJ#_5&
z!J8K?F3*S&iV8($Ni3K-HN1KEO<TfKlv-nqJx#J#RoD~FMy;m2O4J%noJCz#WpY{c
zN>yd0#g)Kb%*h^E`_6ao)Q-wDGEGr|*4vly)8^c~?~OP2_AX8|njjPUbhCF48aR92
zz|g|YjSp=dyldx+FYOG(a%$xNwI|!n`~sJ&<2*}Wo3mie>UU~KX6Gbpbh>!GMm2Xv
z_~tDe5-cEn`i=M8dGLCja&dVmRMFJ5ch;ChwK|dU;|8pqIkmW?B#06Vyw%H%l1r>D
zs}fC|(V)^+R+*A4VpXNtl`v$*!Z{;rCrqdvHQS>~Fq;ym^=Eb5_QqM~_U?Pbq$?;?
z^Stt=Su?5!)(&crru7@V^})$6?Ap0AkisGTxmt7@xf4d`LMbU@v^8f!?Z`Pz><zWe
zq>opP&nU^)=EmtwLTRWs^_e8tTs}dcNkG3}MjAG6F#<;oAT~La7Py=kUbw~=dogF=
zk6>!R?E_ZLz-MrnDde~Z!t4Vql<Z;x2YlH~FT%b+UmgR+D+eF~q#9~Bs2GB<X&HE>
z(daPh%QxKm@rsq-JbZk5ids-=^<v9>wuK!!%a9$=mQrZ8XzaOWm@MM6teH${P-|f8
zfd8*@Zb8mkX>)?tXVCvSeYn-CGx%0+-@R#ec}c@{t9DK+u&0bw+WQvuwMg%0jazqm
z=JY$JRK`UbtE&c&b{YE2UQpRrsZ6q(f+PFomycgQv6sdOggjw+{)1!E-!je1uj^&d
zTC;C;s5Cr)iK5A3InI=)RK>7+lB)_bbh=jWFq=*1=rcB5nOAqy_|ZEj4(^qx;nr8W
z1DwM<DwxoB#r#qE1%oG!NQoRBlbhv;o0?s62WQI#szH<ol=Z)<po8S0H4oG<N?y9$
zQ2LNYvokigd&>(YB>C537(sJ|+!H_AXVCJJHXb@sXt6LfNtIPb%1p9ZbU)Irl#?Mx
z6N7^g60wY~F2QKoMIj?SwuNvT94%UjcDBk_^w<;?LyIo^uQU?*ZR}h|ku{=TsXeya
zEEIakg?{`b`Jq>|j}bB{wGnx+b(%M2>kDQA2FIme#QyBz*VA45C}v@_Y0*|f7>*$=
zR5LDw+)xS;RRvgDcQf#c%i9djOjl{OaM4iKjGLnuM&1$>EkCKVL9YMst2Y#hK$!m(
zoqfU&&PDDM-pe3s6vurzlAe&!NEAngqW`mY7)ufOXU;@p%%6Tb8g<^af98y)!~Nei
z%`FJbzslp}fPZ?t)cXIey=;)9(t#QRtXO#U6KE2eiW*2>{NFW@=#&)5IwQ44Tjm26
zZL0Rh|E^iMzLEl<%kF4<<7x6^BfbBN#voZb%JU|5(h(B=z^!zyFhzH<P^<-km$7DN
z*U}e%F-*35C4w<Kwy^sR@LrFu+M~y@jOrBunnC%1<g6o#f?&6voa+QX@XD5wZk16n
zJG;4D4*ML<POvPfYa67uIRy=pz2_{6mU~!>F|wFm&D|vAM^8g7eqt!jo!d*7tt6EN
z-tEP>_@g{Wc`42!s)FjSkf)nCf*;0M=v3cdrlwF~Q-3HVmtN(YTJ5gH^tKlHy`gAS
zsv<qH;|xRnQB^)fXWClQ6L-m1atfvp{(!H(D-q^ZMZ8ZwA4+WhK=$#E=UbuxVYr;G
zX=#!9c*1sU$DA7V#6^k8mJE}q-z&<@5^+JWd^$yMv1k^}Ui>kvRi7q0ERk?*Y~*0%
zpw?hDW0%7&H=CR7Zja?c?Tt{jw?<mU?`@v8u+6PPz@qMlA4HuEx)<y+c~^g^UHiH4
zgT7t+p729kMEK#ob|_pg>xRvssDZBeh77ebca8FZsFLHv6-T-Z;WVtM*qlOdHA`-l
z8Y|YS627=%xBY}#$tf&Wy;=z*9jg+|dRxe*hJw+Gx!tBlWB&9Ae@UUWwt-3K88$@l
z?DXA99&$q-qR15^_;PZH?bHExWmM@}L!&KAM<Q`3U>(a<kbel9+bwXE3#Dc*i(;I1
zufCP0|8wDt`=z#`lo%T?#EM>n#~5!gihJ+=mfgm_V7GDdeYo}Vf0lzJb?@D4xxYjU
z@EV=bA$knn_`JM+{&A6;PBH(z_folKI^Lt)IW%|u7{OHN)Hags1bP`TPe2O?)G}D+
zG{E~oAnmFU>8S(0Vjm>)auK>PctA4L%f+r*voEFD(vdfB+Bh~LHs|2AnWY2DUSreV
ze3Ol&3Rl;>AhqRJipE%h7ZFq&!>RJ@y<%OuBad7*8F7#FsByIREWG2Z>ziI3QqVYl
zWW{`+QoZ9VX8B6maSDy0exRR04LT#31S8l&b--DYGbsHUraZ9m>-%QRxbJKEJ8A@l
z_%HN8CA`%2M5Td2ZDw&uBY`ys@e3woc}d$qF7-!FOYib4Bd1xqaFn*W5z>2f6fMaV
zqb{{5?-xUI9J-Q0;m`YcXv$Q65-5Vj4yT3Mkv4JAB07}!Yo)W&uRptSYF5Lbddq@g
zu_tnFtDn5gndJyp7S5WX)~_iItzvcUeA`#j6lo+=HM1(F96Hs0OZp9J&4wM)Cu1)D
z>R0tU;@R~&HGSi#9#sK(kte@<as+3*)q@TUyk~___Th(-tsj2K$}lk~*l}(p>m~gm
za=r8h-AnyCs(S`w0bj8C&ii4faRy<hL4tB1U&Fyo6(l!h+2jwT8KNLY28Vk{o#e3t
z+>jLFq+#4(I0o)6VD><g>%5N2!S9TzNsgO0FD|(zW^%wCkPf)x*s0X2LHS!YHx9LF
z^@CZ<ex-=exo3QTQ3?VdlfbPgR*9VSwX@C{W2mO$3oV|yC2^&taZBnvjg80Lx%Oa<
z*Rb@uL1DGD(GbH_4Py)lm=uuKWm8zG<ZBZWl5`!v83R#>k5O{!84i_Ay3wHFG=NN?
zx=)vNGr92N8wqO<*?OV|8N`ptMi`KD@@4SChU^rf<c%uO0?0(;q&W@hjm~)nT6kat
zcM7JE84;ArK`ZPd5fp-l(xy`MDTp~Q?Urh#J?C|W<;&{o`@YY5E#qSiY_VlfW_d%y
z+Og6@vsu<3d)L=3YrA9Y+J=VmvIZXPz1F4c)!f|NOXt$+beXqIYM6A3W9`_6vhoJ*
zq280@atdIyxfOPl!@0R}Q+khDUU5*%Y4j$3q&FK+8CyO?O4r;{wp{v){E`N#QRmWW
zwHfK@8CtD2S(jO$(G*;umyKPEKEV_NE^*4IFvsPQ_Mx1IUPmBL2agMiyP#Pa1J(~}
za0?W8Do=5akP8WF05jF^Im_71e_;z3&2B%;=A8KbA6_0jLHb&{W7pH)bNr{j&+BXA
zu2s9sM~v$4aBREy!XfUnb$@wv|Cryu@YJO<i;j(Q$M-9gwgrc9#e-SnZ@*)sr}o`6
zY1q19CGmit6h~~lrK`WnzV%Tw`UHgnJq^8)W?<@&aC-`1wvBStg&GB-upm!R5C?^+
zC?N^_3&-4CW270P0ZXCS4FS?dYikwU$D{L-T=!(u9`m~wsz`{RAmEggz=3>pX;9%s
z71kh+VDS{59tlUCd@6#4pa+BZfimy?A>Z%XcVTz^o);Hx`f}(W7D~6j@+;~6x7V$E
zoB4iqo-LL_+#}0iDF5csE=&2NNOp1jy4(GY+uhkQ+Uy?|t-4|Ng}n=3+*7}L{&n}X
ztb1E}AJhYnc!#T&nj;b{_Fd+6>H9CGWz7shBqizS+ivhFt@wt7)zXPa5cDv=8KD?v
zAUZQ~U*ymPer($#j|;ck_C>y86Qr1qd)Rb<>TbNH<D+H#xJX>%<c_=82yT7HM;w|$
zp0kx<=mg20dmTE8oRJ*T9i$hetbueF-4^jhqK=SQ<6IJg3_I6>?lmlQg=RALW16?A
z>@=F7uPMaEvi%gq(q2&P;&AWfd+;noWBots-UB?2>gpTcduL{QlXkVMu2oz0w%T14
z+p?PFZp*z}bycit6*r0n#x`K8u^pO?3B83-LJh<~0)&JTLJK6s7*a?=38`Rf{Qb_%
z$d(Psn|$x{J^$x#YiI7<xoz$}_uO;OJw<uuW6owL{&1M8-N(mZ%VM0OPyHmT!O487
z`Ki7Ff6RPm)Kr7BAt8FUD?7lP2CH-`9hKue>OB27?qt;@uqGejpF5p{d=MAqr#Fzo
z?`}uB*XQ%5JEEZL?tI;0b69aK116lB$mtxvY7i#=08co^1YX{Nz5*jdCAX%rRGdvp
z$_5ZJ9SV*l=%tNup#*+LI{2$tXbJOxvjwhIS(SbYm>+mlx+V*J3=vB-(VAW(+9w||
z8chc0iQ6*^olz;?6kk*`c#p~sP(EUhZuV8?7ba#!yS$0{1+ntAo=aDf(9X(BJzcQ{
z`H5avbXH<vex<J`rnQPbx~es%Ckjp*Q=*)Onc`}nlfP&58;?k$IeM(JCo`kUm*H$C
zl9&pID8D-)?4OsF6RMb<wzL=0N4-naW><uAvgY~23GRxS7?qh7&J15wMrKdt7;FYm
zx16T`4DczDiWs7lF>!P-Crlb$6gpEfKs<k8`S^G_<B#r;7d||GA>aKCXEZ|9-~wio
z|G~t^U@y+by1(J@gz)|^FfLh;NvOoRL<>d-!fV7;1n-cHT)?{~f>;W$p;hfptB&!)
zW!m0_jAsBV>Tp`&1wT^D=FIXdEUFCWsVHJQDO7;IuRdgO8ggQ-)|5oEciZdd>^c_i
zZS>?<d*^o3aEP9T1K0idisOH{>+=`)SFx(+{>avNN3Q#-#hVig#l`5EGo!7+>Cr7r
zx67O3b;aAFdwZj8@$psB?2#!=F$G1jiGsNzdFHHheztAz*2D$g>U_`K{cr3aSa8LQ
zpWSucN1n$%lArrs+>=}Hzbe%hH9fwI@viu)3|ssa^>XYBX}0L9_*<WS?%VOxqoS<|
zpeZuozvh>~A0}Nt$Vj3PmAMLZh(kbpaUo<Rs|48JR>X5thz%5kMGrcDrx!qhctbY6
z(sNm%sAzoQoDjym1aGoY`sMi#Z{Pm#`5zD8kh=HdzQ@jKh3R5bV!@IPi}MqV-o)Ol
z?BN5^1>yDUW+ysEuIS9kS+nbfZChTvV6{IvFPtC6^{)6}Mq#4cu`)BWzAe}6uRnjq
zyz|!0E>3fqxoy?<?W<OA-~I!~{hQ`gFUYN1zI1V^-Bnamnvq^KCCi>xl#t9>$Kv>c
ze1D)I&1NWDJ#@+X1y}88sR%CK&|O+MJ1@y>j`oLFgq<$NsupC%`oqOjlHw}D)nyIg
z**Gj9_*Lm9RexP~_UQrff-tKUDQ3)aMdwRVN~dkWk!W~!r@6y$WoJH(ou%5%nu!rK
znJJ`&*-3f5>giV1Kc7U)sq!{BZ-O@cDQ$S2uZlSf!3knc5BWI3_KCPoM4}P;IpdiZ
zovG8#4zcX7_U`>keg{|fDYZwL`zohO2})--{P=hFeswC>0+pZj_0K>XPt&jD(eP_M
z2|S>x^P}g)>d7UrBmb_izScjd$4rw)`d7VEruN1u<os`Yqn|oM9isoD3-H;KaG(V;
zM-aQuB)LC~1vZT?1_B-^KNb5iQocBK4|u?JrOBwRuv!?V&Gf%Y7hJBSFUOK_zLc(C
zxBSbc%Y}?MDClpPt9a~Wy0{E^2MnSEN8?K7$HwFr5<M|7o<vq5%sla>V2DjsWa2fC
zo2fUS1e1YS4TPa4!Z&^Jfewg4(^-ze{=Ep4(rnVR13VEPpHOxn3x6cW0XDr*2#QD%
zv!<D$&Wk|!jIaxby;xsyeh)%`LFk&~Hj$myNLmUNk?lMp4+vZdKPzo@3>#+^9@iDl
zG7dXPu9QXM)47l51nHU?#}4CL@dw=s_1^4*Oh*phrN>Kgna9sxcTvQ3+3Gt~dG$M1
zU*?Kjw9Yc401;##{f>ee0`=hdhQg^+3;6*APaNeCsXiQ^F6O|Lc3fID!ssNqS?Q|N
z;TXi{i0Skqho_0}%I)m&l>?M$V5K~h-I!la;c~!#DsaiKK_>{XGY=10=>i>o!Q}={
zoXC`0sz97`f{OH0A%YTxkK{TXqWO%|Goe%wa-|TJApE*ot`_8S1I%SsvoeR-ES5|0
z^5csPu}7U|ldwQW=mQ*9A@pOqAtjqxO<^S^o4LpkcT|0UDn#X&h#iHa^M4+VJ*l(W
z?MGwf$FRIPS^2~r4@YB}`i{+_ck+u9cdM1=fT-)iI<p_(MEaUhm<KvYheUbd@j!?Y
zNLG+x{wvy+FzBIJ*%W5)+rNL`4)&V-3Jb`^C)crR`N%rmN&af}z}?UM{h7N5swV>M
z!+raO%l7X((ZXJ10sMb${GjgSI*2O#02$aI5a<g(KDVUg+#j<FAiN4Stj^7B*Z_c)
zHmzN{%(5(a>vIvOfCMLT<4f<uKObu!|Bd{1FB_3B>t#7SVdK5`vi^JT9sjd@<M>DX
z1^Jy`Hp)hO!8Lec{3Cqh#JZvKk#eA4q&vkq(l|;wr(Ut<=OXSGota=O$`oWRYHx7J
z(KT;g*EoLo6X$)PS|q%{cKoQz2MDx@KIJ~%tiAaurJE-x$>+%_69x>AxTC)si}%O7
zqb1y))S}S=l1?}|Q$H>}j+t(TyrLIAzu*rBQfOta90(K<dI|>^Y%gGpN+|5@5@Ju>
z2%{ho_6px8KQjLL^K#&MV?Zj77;unrqY$e+8ilG8Ccep*7sG-lO!_tBH}ZDx_)ht!
zF?qJ}OND>n$*aJH%5OW0IYFl`=p}3f(wU+|o&~b2EI?NGa2Sl;1GrNl-_n$wS_b+G
z{YBiiXf}5EurQ-*&+adq*~)+JyFkuXY#WTVt&+zd+xAMOYo4p}m2Hp7<Ez>}X9wAD
z*}>2Gk)z{ptj*x8X>N043uEUUJ@Vvj9orAS-@THtmEG?j+}?59ljKkyD-Xem>C|{m
z?6X|p{^w~r-_VmF&t|kQJ@o_j%Y#dK0}+^5dp$%Pu(DJMf0I^XLV8>{0na#J$oH^i
zB$hkgEM!@YK6%&cugkl9Myu5*zGK9e?QwYn-}5V6jxDb`o?W$kd6oE1)pEXZY)p4@
z`*xYEAL!KZiCZbhN!>m7U``s3XQK>p{ec4q+^4gVB}rP3v1tVCr_icIqS^Fck0W(R
z>p-lM&P^$XvqFhy`K*WsCqN$qznC!e#D%f0@;$GmWvnu1WmQF1hVo5fe&fjSHFK|n
z`;buL{GZB;=WSdvrLu5t7N*fNEcEfEi<2e0&Bp4w<llMrbltoE3I5s-7r!*(ipq8-
zr{qO0TE8^Pxb)JyFC6vN>V>q7m`cq2^QT^T@Y-KK&jJ_E8hqf+-`xG-=A}!$aLSm(
zW8tO)AENO-@f~DMgX~Up;_C{TLG<CMRyj+ybKqA{`K2UASyl?xCxSRthPWj}Z$RT~
zGg3TjF9OP8vdo(Q?7fQAZY_w1!tC$m<M9R7g!pIsctU)l$?S<U+4G&oa8zzo*yzl+
zo8mlXQ(}Aq?|U|0epF#_@;w7jA?Gpq_)`M|PeI8UZULVHkKjf5qgS?Vdxa&ka+aus
zUi_y0&$3{GzN$)}5G>FaS`WRyYGzDav02P<@7c0tk2^;+7stiST=o7TYoY!Yg|)iz
zteU9K-fgeQADva9T>K3?DWYNOfxn4YM14F9{fkv+VjtzA$!W+^IbgV#0qpgVQBjQj
zQU5zwCS+TQ1>lCLr?RU6PXPf?J<_@LQocAXM=#`82<car?Ym^n%UAE}xMa(%%((x1
zsVgfb-)Hgl$?W$T)~LLf*>KLjuC9IEC*Iw#de7dc_8s3lvS;ec{O=7#<G;u)XF^>*
zyU)0B`#U#Y64`b2D{C(uN?`dbZcdhJS0=sbHAKt5i7BcJ{NBy(>Y`%4dV1QPk-cB-
z`~JQ?EBmf~8DB+v#tC|#By?9}UYt76RtaeaqX3X(QxCh9BW{=rQ0!We3<>QBNr+bw
zGT}Zr!%F79DyU`B`gV%G6$UjI#fQnVQu4Gszc0zFM8zbOrX+>(R|Lzml1fcZi?P=%
z8n%6S!F!*|CqB8SqvM`Wn5f*@)n^mMjVMelmK_T;Rwl<p!<eOy;_B0<WTZQ7aTzJO
zQxe?Mt@_1=c=M5mSRIO+T&(=)Sz8VCN7hL}T7_{pK~`g-t{Htq>y*OH0f`2Q>_W(x
z182D4#S{OPeRTp!_b77?n?ynJQO@YNfow2h>XGCRq&U+3S#TW-$e{;6^N?szh<#^l
z?b@+5?6RqKcKK?^ga`)9Hg<DeoWm9fCB+H+IcZrsI23M!!Icta5et9rT|L*w?lgd5
zW03pu*2KnU=q*L*RoP@~?OfrS6v1S1>xbl@2#{Z~h(BIaQ@v(Qb<KEsARSV#k5~;{
zFxvLWhvc#&x$*k=INQ{OD87mvzV-ds3|RT)g4G@C;4F`wmzF*L54eM3w%a!zEiYT=
zYe?`|eJ-boHOcpt7$q)Qa?JO_LMN;onuuX<z^wVuq!SZ?X)U0hOJMsf0w0-J;RGla
zs5(H*H6bpMO0*zcGSQ(S<O7__6YbXU2$&NL>0~}L2nm_eWFh50i1D(2-ou2Ik>+r4
zP4D=#%w>Pa?vj61W{#Hs7UQz<d{Z==XLk!zj=vy(VRyUj%=#j`mN^oq<(2v?;$azu
z+2hOoc{x={QT%blSDlWJn}~-thLXNqO+OLOcrr8HzG8!X?ht!v+)AZaEplW;@xR&K
z&&%ik5_9OUcDLMa$>?d>oL8{9drd-uF=@@(9aD<7bgqhz|1aZ}c?%Al^aV7m)?$YO
znIZ|y9TJxFV*w_{4J-k|OBgJBV2?q_pQKR1v#0lvy94afhMB~|=)bZ$xPY^WNra4`
zd%)P!dq9mN3Jf46296b!2yD1fjuM4!xPf=agR(HfUS@`OeQcUdZ<dTKGm{x5v)+~#
zyWX4OFqw>uXT-1Yxv{UPSU5c?MK6^2{UzlI(?<lMIxWuaTX9po-<6q3KL6&<jd?5#
zKWl@7^mO3BE%dOurDZie_Kl46U1wRp#UvIa80{8|6yr(~$6(b7E+Hk0#coU}5KUXw
zTRhXO#^|V`Wo30%L(jYN7w`6L%UYAcShUePO}GQ<b71Xek;}rlZ_IUlkNnIHv8h88
zaX?;q;6;j9^9QE;!y1a}!;<$?`S;igf}=+l;~4feDy^FWejBY4)3FwlKdmOL#{;nW
zw_UeecO^Xf5kaMD)dVxNJJ;@K$DjRtDjjWy(ccp%nrEMMPCWll_kWe2an*A1x0Ty^
z<;v9urryTScv4e*=~JvM^Fie%tG6?sBsFqey=hP1m{QBfn$@zED_^hNWc8+AwYW1L
zPS_QD&`L7~*;QYEIIhMC>P>t4ri5w{D*da|pTIgmV@wv|=fNseH+=qH22wy9jj(oy
zGjj&*C}o7y)e<a1%t4HpBC4rPJsoNL5Q{_gsxUDY(6FL7nzq_&Fg+AWKqCLacO)aY
z5YZ&rK#~ESh*0<azg2esOPFpocC7a)5By_qFe5!B$?y08Q_3H|;efX^BP}~CLv^Wu
zG!woX#+CG}0XJy-T!h;zEaMe+sY1`WQVsPt!qRP2Fy>K~X^M%nSo580U-lTB&S1<R
zZ&#QO*Q>0Df|I({Ot)Ko&`oJuS(KCRud2;~jd5^gHdM4ME6yqmwv?$}RH#jwV~F>Z
zEY%c4CLZYy1CLh{Y3Ff0IEsqUfJ=5Nq~51D;1RWJa=4IZFpgt<NY0{D_g#gaSGe0`
z`W^TTRBmPvQYq+G;5v}^BsL3Pje`H^Kn7TkdX$t;feQ1m9e^AdI#}_N>4Hj37@l~L
zRbg{0f|<yK#NcM(j2P~G)#1Qv_#a0`jFl2rndUTPK&pg_)fc4-3m&W=XmCk{lttr|
zxTvbk(A*4jT5)DoR2(0k2u;!6$jhVVrB}@=Ef#FT+Jo6q2^rBbG0_<bQP~IA>YdO-
z{><*kjyi0ydw#YrYX8=hg#klKL(w@`WltBS;_Rh!3q!-58S%mcr&7eH7bL~0X+&d2
z+2mBw|E4NtPh{y-7q8~9i9I(|o@z|VN()`6-MJFWqSND}QleP<l8m`gCR5bhj3w=y
zCu}jKvubaNZ8Njnz@pmY3{?x_r_5Lyg%+Zn<^ppddhWUM5lSKd?FRX?c29bWnt~N)
zoJx`LFUkgPB^p-U*STO(d;v+QDd*RiQ$C`&iGvUNjl)l|_N2^2Z0%s`h~_CBf>0uw
zr(p6IGH_?e#SZD+VHtG5>pV!cfas$M0=uWUUG&&RUF35FK}>%5Bgx3hPRl6u9@s!I
zeA5RGe^N?%M$o(FhVf^QjXz~gv)*a7>Z@`2IDTgB1#4clrST&gxbM}#pM6N~?dU<B
zCuJ?c!mQ$DEfpISw&qPawN?J~oT8O&Q!snRFQZ~nYMNEA$JO?6+|28`*Sreu(`kON
z8#Z3Ls5b!M^hdymzEDU4IvVnW6o5PjsXBqeN9U9Vu;?RYdK#T|V11++r5QcJ5xFY*
zK?39Gud}VA39U8|grExDmdap5eWEupiv4zhEylKHHy292h|OQWf6mR<#4*uhpIeX{
zla%Z+#Lh@buZZhhv3T#Q7`;mpESvg@7cxOIJ$8n2-grV?;KhIi7OC5+SKjNlr^*%f
zb0p(@?m1TTu|DeR?>Fr|q~~c%f~`fdMZP#pPJ<_@esS8$-VJ*jJ*zxc{nTh?;*Jw%
zsOf=9h0L4uF6`0AflkF)83}?I^ymjt^YQ>12ni5h7GxE@QF@Vhzvvt~we*5YRXPn+
z7Jw~R73m@{3YYreyV2mKWI!4G_fVShW@UBvMrF(>5)-X%Gj~=yUHl7&QSWK2PPyYT
zhu)lI^se9WVDs*qvQ~usx3bj2LLUxz8$)>>$pCo<_Tg7E&UvaIrVuyHlZ41E%RMQs
zZQ`r3NhuC*rTmXe@|P?qf;@rMJfDT;uNl9?U}J*Qw9e?t*pss6fos>_adBv@yDpJ=
zvjVgHsoB%lZEDUnae@8qSnsiCFL#;bYg^@SX9yKlHp349Lk#Ea+aX^!4L;&_qjyLY
z7Jsx0M#&l=k<AuBMQH);0Ew+F!7>g-1iX@0Irvuhh6ZmD2d7*;GfV*%25AW<8#Yo7
zM%wQRo;CpUl3)?^mz29pdv>7*DN(o#1`ekC65gLyvNzi@OJC#zGxD%0t0L@YqFkL*
z0n5`_?1}Mz<OKBkicB;6K)%^utk;Lr^>%jT7mz^kI^0jB+v5^qo_JTv_>>7O*5XT<
zlW+ysGheiDn?rOITgx`^oV}sy_tSDqGyfQ8PfML23ys*XVq!AW=eqxVu_Goeb3xQI
z5o2;Jlt{~SvdV>~=zZB0cNb2T+kAOqxvxAM@`k>tIaxtgEmh~F7ffAmo}QUez?(B!
zq3t~HqE!D&=Vfv~{2oXwWkH<Rl6Vc1ctJ0_L;m~hIqywL3|AH1JuP>iH<Oj8F7kSu
zKKU?vA-&NR9h)YvWsA}mM7iMPwB?5m$?ZIvGnFa+>U1ZQArIGz(OQT7z#vXtXu*Lh
zNw7+fr4V<T_9@tH`E*3vV+@qND7NpMVFmNVW8<$ZX;}5hMHhy+2+JI)JGtDM-V7IX
z|A;rBBQ$}m3SI>U$;|RXmO@;9TSW{6lni!#G=Gd)`=dsz(dKj4wnI7j)oa}DH7CD?
zD2vN{Zna!*sLT=m`Kie^r2_o>th`uuuEl<dxZ!Ai8uuB#D+Ehe)B_L8AJ@%VFZU<9
zmv2kVPJHlum_9NY9_AI_U7MU`ay#8tkI^d}A9~*AGFLl)<B~u5eagI)D}G)5yv=Pw
z#AYFAi1kWxSe_+d&ub87CuZl3*NNtQ{g2qeP)NwP%8#2n)(k+cDrT_yuC*JU;#0B{
zw=H)kCc4jmFiJEKnNMrWw?tX$2G6hv@|<*zq4tu71iX3!`hb=hAMKpr_#n#-<{LCf
z;pQpJlNIBKo}UX^Zy*!U<;X=LAX4gl=$pk~v+uXR-+Rr)UtH6?+-Inrf5(R(u*FAx
zwG}x(z3C=<QtFcJvkDwSS=sEJEBnTm%zt;5i|0Pqlb#k|I51^>!kk#&M)sYzZ@T&B
zo8G?WAA3`(suTZy=iQ%ta`&qFwv5)fN90%9ndH0t&e!i>Gb8QrxA|Mgrks=?pSxvy
zrfdDxap5VMOXKsCoy#h__w`Mi5ABFaeEfJ_4!FJbpn8EBvj7qk#3|-BTu<Pep^_aI
z5RJ{GX9|P$K!P`TXh34+FdZLBK&FynXYqi=_{5xi&-K5*;l|-mf#{uDbN#EYvf!%^
za&t;xMMX@E`8~hbSh<#6P@1!3Mq})pok`;5^})*01(1TAJ$Z3ppDmaXX9`r0-g3+6
z@LjIF{Fq<JFTL?58;>oTzUAuS7LTxpIY;^$AI-Wkr(@P~uWLq4c4kz2O>nb6I46|*
z`PbHj34Yi@MQ%>{CK_tmI^&x`+|e-8vPinV#M+~1)t47m2#TZC15=G|ifk2bV2@2^
zhlwXWbsb5DtfH(;w>8@$8l|X=UCUmW7X?`qYqmKi9d8WPyF8b0qr+(}wWn9-&&<i2
zl~<i^FSR-CMt%unXLG|Y@<@)A)h@lmV@>k7;+(w6wJ?3birdl`x|+Bn)*X{%^*Hpd
zOOqr|p-0MfnUd3!@n>{rOCEOoY(5y%Ilvd(h&}Eaj6aYvfh!HAGWCg808%E#0YNbq
zM|8r3J`?o^NtO}nQ9&I&M%qf07bG!7!&X}3t~V<ZOm=&8ZFEw2`rPT(%pD68gNg6K
zb%EEt)RP(Ks|r`G4hL6F3s<GYXT~mxigOzc?;**8of+2Y^QH%r9JTIfyD6di9chg1
zIj3@K(N%_oj6`3)D=X2FxcK5!t3{vGkZLK<v`JEWPIf{<c22q^IWj9PsSQbbi`94O
zA|%Xm=cOcM#v86E-d1_ZHq3$3=k^P+mnZ1g@aX><2F|u%An8;%C<Gi>vaJdn>|Fl*
z{Ah4cKuftncqnjiDL2}kwo+SqjS2@f>9(NF;V`mGneL3q03fihtRbms4G5+O7i0hk
z{PX?uxHC=#0*jr1pooCLtO9|_l_z)v%UN@Q5pP(rbxl~$E~(@XfII^t;8hIVZZMZ5
zW&b4TiI#-$Rv}~xf}tRWIa-G)AbHEGL=e>`-HgH7kjEpKOTCVUnnq($mwb=>>$N{G
zTHtidd~C_ic~5}mHd*xgXC1z=V|!)Y#fx_}=31Hl(vOd@z8_1jicmv&(B8rQr88TC
zwdZcG)$0n^Hq6c~(no(%m^9s=uTOc=esAb}XR^VNFxQu9OY!5x-6G$SWQbkGSz=*Y
z6!?4kGS&|-LncRB!R*2Z#QDwVTvfAp^PE)mOhvJu+5nn)J?uY|Y#W&T!0(fOX<20k
zSS>mIBd$Jh`=lSxBi!Ge@e6XuR??gyl#mhaQslCsi$I62%0<eR{&dup_0|LV(+_q|
zTe#5fpXawPm{Z$%a7xL8Z)LfTej-Vqen1Hdryc67n+@ci<yTW2npXJ0o0&04k$h18
z%c0Hh99+Bh;5(ZSG26k};{)RZ{A&Kg@u}ler5}##$bSJJD@d^~m|fp_Xj;*OZ)bWw
z`dqL7^q4FA?FaK}4t33#wa}gm$tL^4*>znvQ3_Q4C%yiY4_w)AJy<mDrmm`m3+yR{
zhnWM0mfzj7`CYQu?BL1cT)u#9=Q7*=<xkj+LK%a1uoFKP*1%+WH9G=Z<ww+giB8eI
za${`?qkrLMOg${bh9ZVYN^pNOOPO77AhlQESyt+TvK=(Dak`jQ2G>nX_(SpIo&5*5
zuJg_<xa@@&gkS$dPWGmkh2|~kt-7Vc?Uq0M=t*JuiQi-z`R#3uagp;R|Exp(C&ruh
zyQEn!UM2{az4-1|UrbvzFmF*wDt|8i#$YHM<i8q!lznmhuCi#+zU;E3y0nLY22@+`
z%6XvyJik;})~x_G?ALA4U8VaS-fJ8mY?C1Of#VTEkF*c?hKI>7z=a^?c*2NfST3Ty
zz>Dfnxxv(EbQW#MfJD_4gfzpdeL5n#uusA2qbxPb8wDd{K1!rtFG6~qwzPC?tlX$q
zDS#zAi;`p0M_W5(5y!HGy^2DuQyXY0=OFh8(<=?~2ust-)6&W>%$b^<la!ouZ}!xj
zoaCgO@8sY<b>haXOXYX&Kj+P>7RPj5xFva7d9tqzzkXkGd18re@WLx*MI|?dk0md8
zaPL5yO>U@et)AXKosZ7_R_pw$%8J)?gjQuh_*I;{jCt#(R?45Q5vSy71(czXqVm<f
zo7RPc8)x{kR?R(992;Fw(_1^m<MML1V2+P<uK4oe^n@uZmQ+Yq8^FcyJeVDqUQo7L
z{C#CnQDxCrONWy4@{)&=^Yd}}HzEGg;TJmZIl5)#^84TZw){q<BB1<BiCfQH56#uP
z{<3`2_I(F_)lkeI3@lt2C|$TvKH7YHZ^M+E`noo_^yR^Lcl~oi1M(khs}IJrp}cA}
ze_e5XBXgxR8w!sMm3LKKa^v|+gE-iMqCuhGJ#dj&T_G8yD2I#bV_`(&($AAi8Yl1J
z;~+aiQUbv&xJICzxx!V1yf$FKi4nzw38lkj06YoAlujlxg#CK?z%Q)lHMU)LS=+j)
zUA_AcA3b{bwx6(7eSQ7-$D+?7A^7Ihl#AxAy7Kuer$pLGzT)-Gl&+s`I-5E`a}<3s
zI!n*O1Js!SV?c5SSU)70a^<*8uSh?GP5{^uka_gFlJDF)TmEp_t*;!OK5y)iv3b*<
zzOJp!{#<bWO3S70ct7-2A1}5CrxeTIkygeH)~^{GTT?$6SD)|TInkV)z0leBBFMN>
zr~>{W*Xs7^bnq95Nhd+b*g%>|I9Ds=XpaNl7$9mbK)DJnAfIGt22BE}FF><Coy^i9
z5vep_F$;qY2$F`V8rVlidFo;f3Rd~cvSW*z#YjR+Iie!bWz1JxlHv0p;JLQZ=WF!o
zP3DUDKzgC)yd}pQD_G?Np32O5mbJBqZjgM|1bd8;<qQulD5@BUniF#SI9!<4rx-43
zUU#sz^Nv*&KTAx=+m-)J9QLlxMt4$=1)esQVwn+QSPK&R8&aFfa?h)sdeJ!p#qtO8
z^~5V;x7llxrsPho&KPZ5ytwU-^y-pudT9bk@3wddhrxA+-Zm$#IydOOY`xe#<H7n@
zEHKMfduaS9B)jz%qx{Q(B6oR(J`i2zHRo0@jODtA=hgisb!loT54`IYN>f}bV>9+R
zYUiLRxWa%uP0bQ>ah)|(A*NZf>WdiUZ1~}Lzr8*&=uNbgms_JU;zKDlP7IeqOX(CG
znyKuaPHzJs{0+hYRI(Qx=wTTc8{!p!ys!&Ej^K0q!5knV1}Rw#R0#&CH+%(^2aB;P
zrlDcmZT(VHabsm;V6DFYwrvd!F;zy(_)nQ(u|<GTcf93ygVOpEyf0ZVJ#o+yk2t}y
z7%tEn0}JNQnZKxbu`qO^kd&x}*BvH9SyW|c-PT5NR%&KuT7%TMbzP`3s?1;-zw-yv
zjB%DA3cYKQKyOoL3A;v6R?re>oc06b)U*PRr^q**)(hghsoz=xf9KeN1C;PJI6N2f
z$gI9<$wKo8m@G_z9t|(c0LQ}>g^$fFq*Rm|XxyL)&`jd7VF!W!LMG}lSZ$J?%`yt+
zygSYpvvL>C$z&{Z&VqcuwB?R0G&a+iU|Ii$G(UevEMu`V@?jjBms#SUUp-@u{Fcy|
z+d$C`xsAfxKdubf4Wu@xnE9X%&N+uY4;NbV=Tez-=ND$=9Xqx%hYytEi_<P>5q!RY
z*BeMp5!YRitn`g&nth8{m6Dd0QYAj0ZxqJ;!r>+5bAHQflhf0aYx(Url?1GY6U}5F
z<h~QlN~a$#_YbiaDLK6)Hnt=^Ipf|(78AJO+&Bh2xjzE0OvoL@>ylvy$dA2fK(`58
z4KJ8nnOPF^3Rx@@8g_Vg6GI*_Bng?U4A#>qx-1Jv@{q$QbMPz!SyL+_iFRlz_(NHK
z0V0O}tchz`Cb(6e7?+~x9pfb%8)c-+N~ShwBa6&z&P!?UfKd=_feP)X9~S=&MC3F(
z*fN(l@lMz-Sg_16J{@jx<&VV<$8Y)g2W-?OuM)0zALCcypa7@C54l}4jp82+hE{_p
zzbA6zM`9T_Oj{2RAI9}Nc{4Y$2PA<_)4TPX&X=UEl76Wmy`q=?CUS>c{DGdm^`|%G
z(s%#%Hrw?koB7l6V{b8-VY{XAvxUrI5`qnSe&|K^v-^%e^oLtN=Nq48kKc0Q$&at-
zZW5)<Yu_LHD79o%5}uT#B{xgLAK=IB3z0<`#LVS-)?|<h+KudWv#^_82j_q#24UJV
zu0LmvD3<r@h4Terx2PZ5ElB)2U|j{q6&fxHm>*hobU>eO7s-$XtWXd)6mnm%lcTUi
zK&*foQA{K#vaRajK9rcS7^w0jBmjFlBtBqCDQ+x<ThG#>!lKgTGJR=daf)T>G+sSz
z>3!F|bshfrxlql3dksJ;yki`JCk>MLXg+mixfSh^nFV61GuCX5b*731Gb8O4vs+sD
z4ZYW1+uL*PwerFv_UNOOT|#!KNGU?!W7<_aPf)(m1c|p*IQ7F$KslqsvIdML5`{$z
z0qCeH@IM!*f^8%E$}_%2`zkHz<S&moTc%zV)lVxfoL%H|8Wz@$AE{jkt${@$$q<Ms
zNXqf&Bo)L2_(LvRGtHuj>lwXZbDe}9@bPMTFJd+e=i*a)@X7LHY13w}nwL}8*;!Y-
zX2blTm}2po@Xu>WVIroz;-*=>PVN;djL-t96631*$$`%G82II>ph;?=TR4h2OMLSQ
z2;d3;a80}nlz<;SHDQ`N9Q8jut4l5tVPQt5)YGAfWfy`Xy6Bw73Vm@xer|4VenPRn
zqA@3W4m762OLl&L=g#koX_H0iV;tizI$~lRyxb8pIi6uPkq;}DBs2pY@?nAnJs^TD
z8|!JS5EC74lgaH!6f4?##+LEvRQOK$x77r0bYambGsZy|W;q?ZfFQGZ5=^R43MD)+
z6i<$Qt^anS2UQ>elc`i$>dK&I$F<#sLe2x&ChT#9G~oMJ&o1ngsLNFmOi*H=P&BPU
zE%f!18&NkWEbGE^zTUBW{);XJ1bwMMA8S@RNVDicF2Bdt*M5m!(Yp7|v1MQDVfLib
zz2nWNI`Y#~z5BOQaVG)<*(#Jz?qZkt@@afP>W-7vV$y2Q#<~IOO|h;-EJ;N!4Tpo^
zU@8)hpk4hC!wy5Z)+7DJvtx7J<F7nkw|R$W1DgXQpK~tJq>cFpS9~Tv{OBpIM#U2D
zk8XI`IcLd|InI}FIB@^{{6VN6P;wTAVBz=ve3qTy(=>t;n$`JeDcSLbsnk>E0m)Rm
zW;_r~w&+rLE)V!M3z+;R)%Nb?WP5k7{P1TeUF_R`TC8z@?dLmK?~c#!(i*JSku2pS
z--8<Fl~??k%~i4=pZW4vH>$Fh@<%s*^)j0|Hg>bt>QjBE@Ipwk1==?343tL<JVjs~
zrc0GBgfbDGp7JccFN;pkJf-3TMa$OJ=D&FPiMua<F~4@*vZ95HE`92?r!HM2-=xW6
z=dC>N;5Apv7hZkM!Shz~&+WynJAc08`uE<ue#g&uwiesZyQT}Nk*Vt%?$SQys}HX1
z_zXOm?b{9VpFZojlG>`A{YtbCi2_ziC%N89v&j=UV=9qCt+GB%BC8;6h8AOLkTMEk
zmx-ycsJ!u=#_~lu7w>+0_wJ|J&2VsFBTHw1WwLR$zLvoJ2*eqifiaekEnhy?+g>qu
zZUvMf6i_~XSZe<2FrZa>nW!ptu~C5*5DIxY4HuAXNgnh}=7P5nA$+QwLt^``9#_+H
z`mfOG+2|DlO&aD@zvygqs~}VbIiMpZi`#jGF-KZ`QT1chMfGWp>G|yL{OMzgD2xcf
z&2eS^aeS+cMN(CcBrQxb--Af)ayk_`(~P!%i4=x2Cw_f+-HJeUbzsH1aM}F%>=s2%
zM?Q*#8b&>34M=@f(d_9+*56D?Cr|Z%*N>-GX<n)T0{>SyHS;W-Dk(&ZigO8Ro{e)|
z{{oOe9gI!SmzU>HpVXWG_x(8bB|uKEg4`tZS&zOeJJplyEu|O751;DAFHVI{_uT2Y
z6Ay~b#|bRYM44Q%QFaXTC?4xNd0<LU<5A9NY@EqZIfR@++`#N%sfSb_v6rF!zGmD}
zRf#0d5x5cJ?_U4l{nuW5e@=xbEgYJiQ<z%Pea}UA)YY+Fqu8#@zI^S>&1-8@TY3-3
zAO33h?)O>J{;hv};kxBFUs|-Ta#}6_1WHvE^7Ha@@(<-7N99dz$V+mztm%#Hmv<&K
z_OGe&&w<si5%~DN>u#3!(#WjKp8E2Vr{y2@G|Zkmfe#|!58R;hVaITt?gwBL01ilO
z3ZFxoXLNL_9Mm{*e31+Tuo^8#Vy7NKITuBG1;>E_=_lK;$bl%VrP|4lA`n66UO>>;
zpAzE?H7L6DBr}1{9C5%&p}?Iip-(U^m1ib7u@_Ve$B7W}G$G9eeN%KUjA3F2^CMpj
zvrcdO;LWT-zsonhwPf=-f#p2T?lwu&)02+B5bsY<5-Z~UZ`Z}G%5qu^PJba{q69~t
zw^lIQDm{`Y`26svo|_baJZrQ*Ve_>mGaE|ck`i1wfvGuDvl5*~y<jxMfWJ2}+ni84
zYa0LgrLM{aOMTAd%7vy!bApxK++%TBj6PSx`K`@X9*Id69Opqk|6;Zbn#|n^u7v3w
zi(mLk{@v@#RtoXXIM2CB@O6YApS`QizsPO2>P@+UWrg#?xstWW=82!@sC2}|#8tq6
z1uss{tST(5%51I5b4wBzoR++2wv}z|>)jj-<rF(jR(F!Cv~*5&F^mkQ#&|4=-ngai
zhIxl~%b)(n*SKz43eF3bSbob2cD&ZJxlf3(dZXMXSL$6m<d5#noy>0_YgN!Z4Eqh(
z#6fa_%rF{Q1v5Y;0ydA&QhX3^yT+8|J8?KE#u@u7&SESEi`)VT={;J_d%r;+;Wzwy
z`F^YXkR>tBFoVH5i)5BB`N-3CTL!=3n-mH#v0$Eu)+w8El3a>)m8>vm`-(DXhJ*72
zfB;Ys@uq;74|>^vV{n17eegk})k9i06F*LvrJ-`HvSF-#DuPq%pM?4DF;&QKObL%2
zQT~zg`_%RrVb6)tnD(jjcNGXaiW=7y?3%yx$tQO{E`P}kk3X`5zd%pp6+76as&b8@
zU_*`m|Ge#d&-nju+s^jL|4-T;DkW>X|8HSt&z}Dqh|&C2D)4Sn=$j%~7X&3a0q<B#
z{`+<V#{UyYU$}AO!v7k^odn~CF@QR8n#fvx10)HT<0P;HCqA2W=j(RquFxIO9m3iO
z;TcUl5R7IR=BM+2vJ9de_Iq(wPR=wrX$*r`FDg>O9yeGA>hr{%c;twgFkKCw@86vM
zU*w<2r`PgL+@<Tx=J6|FCT+3VoIlG|KBr^Dfs;BSq&GZ0bNwre^YJQG71Uj=+-_H{
z<LV9e+31nM1{eYpk&_e3?@r1kYq^w6el?kTg~VDswFAwFH|MYUecQ|f8;*l#PgMQl
zIax_H`DU|xhmvpg*RDaO3RS-O>u=xvT6$`$KR7uhb^|n?gu0S&eo_F*ooTumu!(V=
zZl~^Y-G1Fc-EF%2bl=lGMHYOq$2OcI`G_3II`xEo_ry70SQ(#iz^~oa@jCrH5kGmy
zJ_W2ETHF<&An7^cLxTBu8f*fdiSj4%Pu%}i`De#ZJnPAUJ!rq_HRHOP=`LF}_A0y@
zcK)Ih7c197<+^uLSd9@EtJFHUXa_d*&MWN7@mMUd&Llst+&mekM4U0rm5xH)b?j@o
zU;no;YHjSuk-J8pCE9(H$I~C>^+r80de;&59co*2;iRil))_J5r?v-tY{P*CF1zo{
z#ubhP(#hu%%uP%xM=f*lzl~ArQudG}>!_1ttj*QX_1g%DP)J0dO3L||o7^TqmPPqb
z=F2lc$0-yW(U8RE2lYqdqG7P}v7et1?FU;>Igx^jJ4xB%bOYQ6I?|w14k+s==dU<;
z5{^Zs#Cqfto>+)aAK}UJU*9nzr65A9=B8&Jkzf4YxyNp9V(f=EL6S{iM$R0@eaE&M
z4V!+zgez}lMepqxKepqE9Xp<2xAd$tg0}G*%$2pH&u`p$#AdFmF&knf?ld;_aN(l&
zFTCoXSF@GN2i|U7y}I@7{uOsJ-RJVT%LS{cINAqZ@*);^>|s`Lr`gbZ-|x<QOn!Bt
zV2X(~6<JMIvGUif<c=$u^vpJsdE;yHdzn<{j+44=Z_d;k&B1K5IlOoAz!NQ2#}9X|
zy>qJBoD(z|^>f}mZ^yAq^oCu3R%L4-r#J=<4Ooig-dkn*oo4Vcpo!xc5B0c5-8YXx
z9<_P$zK>ykW1Gpy#<}k7{oBM*k(&4D5!!vz1!Jx7UlbpNg3bzDughUkIULxV_62H7
z&e$4jd|Sm4Jm@!a1&{r{fX0m<o?ry<X4S|!N9iZ=hU<typz;$1)Jq%!s#}pOQofyR
z?LzY&4o<KQASDGHL&C}$okgYqKr}BXaDsAn--zGZYc_xUvDv&AXchN(1kQNo!;`!1
z?SGX_%O<)e_bK%a`V?bBp6!Y6^B>#A)izODZ;2mMy?5QEHV=2Dxs#qx*uFl*>@IxD
zH>5q4SAJR4odE;XpDK=5V2K=Ie~qj!WP$M^`4y@88)$ge!Gkz5eC?a)b>h|P3>@nR
zOyQ$H3SmF`hq^b=Cw`dw@Icyv>?c9K4I4K%+<qw90;D7WB=08S3+0{1ovBQ7#cK~{
zJS>6W6p%q!19G?!yjT2)z|)GK&;jrWc$9ufXrw99RU~#s+9!Ivp!ekG66gjP#Z3p<
zWrf^OC6;;=IT?@oUh;VTS#}W!29oPYf&h@xSz8^+;>fmI>_Mlz+UPYHjRvpLa46lH
zZu48M>TN4U8H^q$+mm)p*k35lnP2Va9)nA77bL;(oZ$7P>9bePaOGO99DY~?A+KC-
z-mr9PZ(_0`qco*pxjk{J(-z2b720ezb3uuX;|we_InI+FNlRV*h?Bv*SWI4S4un}v
zz9?^bY)Xs`PKC2KNG#E26O$p??%<|$?upBF*=??Z=O0a3zA2%or)zrF-!YI6VZ<I%
zJh06NLv#M;Vn$R{c65}K@rKc8^w1}H7N^^6ep{L?-D=IUrf;HnqtWSEU7hDooZq_K
zot(jA^fBfbhsPZ&N4t~kZu87Cr_I7xL4i952S<woOLv+Lr6r~9bHWa>y1aKN#^Q>N
zho*lbG9`&ZV$+_G-Q(;lDolHHrqg1Lj;r)Uxuzv^y@^Q<39iR-GD983og+!Pdc7f#
zGkr>3ZE`q1HaYCi_gUf|WTxie_VRVhmI$0}{U#995sm{M1Psmu+(nVTFiG8&3NFY6
z0#d-lBW`Auh&UWFA}T#q3emX3@)?<l55ajY<NzQCfk)!|aee0luq#y%mD*`HbS62b
zhF8e{Sh1Q#(o3cl1#+X;t<slDd;eIFKYp2f@%FkBhJ$WiRKJ~V;ZN`Rquwb>>wGE8
z8^(W`=#XZQZ^VJCzzb$w0n2^QY_AV6<M<m3=8BfMtg761GUdh7;QGbd5oaqd<2%^i
zzf3E%#dcT|>c`iuJ$LIU2sGt9MDY(51x|P|XznE%2NWz97{`x-sjWl?W*k(jiGvfG
zDiDdSL_&N6#`n?<{w!D}jB=H_Aa-0RrKP7q%Q#T#ff)y|RTQm_5E7I@=;Q19D%Uf{
zC8OPB!tNcuieO*U0@L@RAnGN(5ofW--`}>4J-FefM7Q-&Pr<xAc9$eLqkS<sQ87kw
zjXUG6a@fq9COXoR3R6b=4ar3T-@}uS<oJh=h#sTUU=&!08wIE2Y1_)YMhApMZs2Bv
zMNbX}^cKnfDSHP##@_kWzS+2y!<5W)d!5%A=d?-!B1&(lx@l*UFWr%Ly_}t#F-?e`
zjI^<?NV?*a+&EYICswo=@b8vD>r^L!vqV<QJdi>lSbzYxi?9i!!v#fD(@+Ji>SV#-
zhrj^|6jX77FNHXf^jV~GO~?b8NYf39?)r3}PJo~<{Mq1@w@`q%2GVhCca;BtyKn|<
zXhe&f^^&dd{GQR2s6(}EvApiiIG-Rc&6Kv~rR66}htK`F{QgbX$ba3C?3jA{w|3`b
zr)HZ(;ryT6vaLaMl&78Z<-=EJW_r@$Of2-8JihypoJ%i0FDvWHEzf;A#~$DC>sO1@
zX06G{ByTx$pz^MdO3wuHD4f|7ND{bIkzEVtS4P+LTdKKbNzU%XkR#1^2o^jl4*c@i
zkC<RgZtuHig^>29{1%^*IPcMLXz>*_ytsO4p+`P+Gs}46yzb`8j?$VKy(qAx%uKT-
zrgr|+jE#S()aTUJ$Hh8LuDF)imQ1(UeDk^*i`DCIW9Kr{?)k6De;iJ=#KUOuYS`xs
zoY%c3KHl2kzvRjtxw$;X5g(h7U^S;qHTw2n{?aYOZHZ})IaB=$hUEr~U*<`x{vGMB
zIH@WI1-e49IE7__@IR<U68JDcb&-o1L}gY9W%_vdy9KFfaC3<4fgP(H$S|o8roACE
z%e{VHB~msfgmqb%I%UbCUBG}#(~@Q`uiPDpw!+e5N@YUE^t{YiH=KL2jlpOB1Q&W=
zeg1H##2jY7SlR_krL38)9&z)(EV}snuYLdGMe2<W*8C3UPk$o6C(DmCCYMO_u6XK$
z&;EYwmAR>vQ?2sb|1@$Qf8OgCH^+F}um0fT-Y0Kv<)7!@Q<0VAPVkx~L3EgHnVH!c
zsj)UT{*&!bw8WO~IKsTQ=B&usVtY;ACCk@aZ@x7F?j%!Qdzub`o>p)AYhG(JE_&ea
z@~to2%nJVc`nMuE-etEA2d<DW_$ymkFQMeM`=0vQtKZ+diYK@4eHBv!@+6>X6dX$S
z?24eHO)}jB(9OOQdfE5G_7CJv$wDR0Q^|5=>Hqebte64SYEojbq#NTV`3J?vEy+FL
zEa89kd}PpB?8F}|a{k-9_}%jC6GzBqs!*L>4#Mbv&Y~0vmY>t<^x^lPh7Ny)3d*x3
zs_eLta-xLK|A#w`4bv52eOrX}?JA-*0j;27Ag1Gi5TB44g=ctmEu!r-9mU|CVqzsq
zf(9D4&=aD5m?c%PVO#);3<ncrghh!-!2*e0w@Zpr9>D-sq!N=zI}Liha5PM|k0Bvc
zhE$6D5LJg|Cey|;!$_e|zT*k6&1MgHpD42hX4*RBKfmVWv8g%EL9iPJojIwo-1(aP
z=MLM<fUWEaZvcjVyieSb6mQCfvuMRJ<V&I{Ax(@=pn~Fq9<3ba_=a+r<E(NL;>ENC
zlPJHW__Pcs<(lHzEvY@WQZE{{;jq8doXPTUlwbHXIyc2-j2?T7WC7nAi#EDaa-%<G
z6*tOnWSUF;hc}>A-cnmns=lx&RbO@RAPk%5=Soykq1~<)B)@SZtN7-E<QHya`DYd+
z<>qHFDoCGNR7m4^nhuYq9Tg)YmlhQ)6kbmT-1T^(v4)5SiTP=d47`;gJ!5Fx``YNp
zd$)BP5c=8Z4a|Knn<?M2Wvkipi2TMQC*s%|CCmyQxr1NNn>PL8=7_<t;L2A=m5}LT
z-AQqpeCw$E((RARFTN0W5nD6D%5Hy*mA??@SxH2bwl^^A?63gtLCZ+u+?8%&>8`9Y
zuK~nM0Zg)GW#R`jNPe9CPd0sY>O7ug0)&TeDZT%ml7|+=d>$juV8s{8ud#PO@BEBy
z|H0y?`7~P4<Y(pge}3+{KWAwG$F!gS>6`W&C*()jdimRIQ))>^fOn&m3paOu*0Flg
z(~H(Cxsd;KNqqA+P=(mDo@9pA&{<unYt{9_%ESfmLiMQbS>4OJcXS`=KE*de6w41m
zS8OY=Wq>RtCWKzuVnB~s-D?OjdSwft>=M9@P`DCd5(W=@1Il_&s}49BSbvbCiZKu7
zoMHu5XIJ?an5Gno35N*;4|X6BD2bW@l8)grnwKcj<An$=2n;>bN>ei^<xx<HR*RWP
zfq6L*q!d|{QSp)_g~g&^fgsJBBiTC(lEEJ_2nNYOHqb3bi$$NDk-(g$7^@|moU_5}
z3}ohc7BwX2L>sP>^eOfPJ#S_D(gwG<q)`u57?E!`SOX<d^>YI!YV=NrJx&muiF}3C
zkd|Y$;4&VQF&&F|bTqD#=(3jA_^k<vH5bhY^{(!7UvOxem397gW<Xf7IoDs6A%-^8
z`*z**z|2_}Z(UiW4>rX3jt|*QZdZv-x!x;ArzOHEl`|?)ybUsBt~6te+nqYz>vSY0
zOmjLN;VS->=yW)!8EDM+9dKG2PB!O<SYfQ2#l{ys{y<iQ!<0XV=BgmVkFsQjrzV^#
zdYQw3JywD(x-d8K@^i0ZGulNSpK4>HMvL9x@JIi};?MN@jd$K;N@9Me{AFUOJ=SCs
zQtnJvD~s35??&as8l&hUgu_->bai}!HQF`K66^fd@>;jc%BwfZU(TB@G_IH6;do|2
z*X%X+jaS}WIrZY9C8lNPS9r@}3^h%=XFC@+ck)4Zi5*|9T+zTJxCh5)i>?z>+-ag1
zlbt4sUSUJRbbNL~VpW=Re5oT&6r${oczpaZPuS@&=ZAf;`mc*+e%c8s|B7_YS{Ob!
zba!fDj-A90wXgur@8?=r)LB@(7M66d{iB8Th~KP*4Z1}<OA8xyR(_2ZHtEd#5iJav
zRQ`z;w(F9G8t{3T2n%^Q9UzVpg&8o+Ra%$><2<Z|1<0=cR11qb4<jBCrI&OW_%1c9
zM|_hOHt4?1c4%RvE|zcA!X}-YAJ)PaT`qq{3)^*51p&N?0mvI~g`d-I*uv<7k1-!K
zH(PLS5kY7sLjBNa+KO-h6lMu9VIjgbz#qN1pUyR`JVkWF$Ty_qZbwR8-N4}1q3+JE
z5np}FrigE5OMm-TU!b@oT<ELm?e!_IhJ8bk;mFXYNINn#pgsL)MGf#1l{Ns1HiGDZ
z{*ju^k>P<pJS;{`C*)mv(Yhf#Mmk4(TM%dfg|+}%r}L1z7Iv%`BHRGp{YuDGFGMcr
zqc$vDuykHcZRNtH4Kr3YE?i7e|3Qt*m9H8`A5rUkx*)!-48LN8C;COVJTf%gJ<#t9
z7M2wjD<Aov72b#siQrSH>!?d3I5?tC^r0IDlxvsr=9`9!^0Xn{M8i6eL(Qq?p=at&
zDr*RJv?G0=(rrD6Ye6i<cVj^qMQEawe&nL3Hl!Y=VQlP;v<ycuP92dU-^hS(q$}b(
zJ+#A-wh{X9jsd*Hn+^<?Z)B*YJ<``Q)Z=Rz85!zs9aWO_4~%rTMTWJ39zrbyOlJ-C
z(1`EUSbq~N>Q2LwP662wfN&*9^dj_}`n@e@lv${JnXYSOWDt5i)VvlImI}KE{+kkt
zFj8u-^edxPgv{SmW>GIbvVS;&_X>?ew}17IKZiFAl#qZ^!acf6amI9&?rPWy+N-;g
z5xR!ERY;K=m=WGt&CG&bnhoTpgE^rB7|mSF&0?_Vd08y{wZyXoNLwU<Oif`vFg4S#
zd(B{(%n$vOY?i}vVXP*fk;#Q3Rt%G+0anU_ECiyn3^o*@bpksK5KqVQJDpXt8hBZ$
zWA$(W+rVbBS!^~$8t1~d!hE)XEo6;s5nIfbV5hf?EoUp(O8A9Y&DOBBY#m$Any~+C
zVXeStpXqF@jkU7~>tLO%i*>UNtOv}uKIl^putByFHc*Dy2u#9mVw>TOd@I|=&cVj`
zJcv(jXJhOFb|KrrE`r;^U2HcbNiKov>K=9(yPRFYu4GrStJz+54co`|vjgl~Fv@lv
zyPn+uA3+CUq5CFwnBC02&2C}0vfJ40><)Okx{KY-?qT<```CBb{p`E!0rnt!h&{}{
z#~xvivd7?V^$GSQ`#yV$J<Wc=j=&n{v+OzcL-r%~JbQt?$bQUTVn2Zg>X+Fo>{S@i
z{TX|m{hYnQ-ehmFx7j=F7wld39{VNx6?>oknjK{yuw(2)_7VFHtf~GEo{K(ae_(%P
ze`24oPuXYebM|NU1^Wy8EBhP!JNpOwC;O6p#g4NRY@EsLB-e4qITyIdB@S*1H|o;3
ziJQ3v-hpf!h6A~iNAYOx;%*+pJ>1J<c^r@D2|SS}aqwGU)j5@?@pPWSVL5_l@ob*M
zb9o-m=LH-(x4f8_@BlC6K_22^UdGFL1+U~&_*6cPgR#S_c@3}Sb-bR>;0=5xpT%eM
zIeadk$LI3}d?9b-i}+%`ME5#h%9ruwd<9?0SMk++4PVRG@%6lkH}e+W%G-E5kMIsC
zJ#_JIzJd4fUf#$1`2Zi}8~G3)<|BNRZ{nNz7QU5l<LB^m`FZ?&zMYTp3;2b62fv8#
z<h%H8elfp<U&{CJ%lPH|3VtQO3Yw~W`89kW-_H;5Z}DsSb)fri;5YJv{1Cs1ALcjn
zZ}VIDt^78AJHLb9$?xKK^LzNc{6792en0;%e}F&8AL0-5@9{_Yqx>=cIDdja$-mE^
z;!pD*@FV;g{w#lv|B(NPKhIy_FY+Jrm-tWkPx;II75*xJjsJ|l&VSC|;BWG`_}ly)
z{tNyte~<r?|BAoQf6b5b5BM?uA^(W~hX0oTj{ly2%>Tgu$p6GY;h*x)_~-o3{0sgU
z{#X7t{&)Tl{!jiT|B4^yCpdIt`AI<snhl3{pxY!t4|5boSb{bS7QqVJPIkc|IAIq$
zT5t(&AqKkGULjV96XJygAyG&Yz>E`oLaLA^qzf5Brr;N{glr*4$QAO0e4#)9FHR^H
zN`!z=Dg<GHGAxt{<wAu}DNGTj3e$utVY*N))Cjdgolq~#5E_J;!YpC7Fh`gx%oFAd
z3xtJ2qp(O=EG!Y03d@A$!U|!fuu51htP$1<>xA_}lh7=*2(3b!&@M!T4xv-%61s&A
zLXXfZ^a=gKfG{X*6o!OhVMG`eHVK=BEy7k|n{bYBu5ccdNVW@O!Ue*G!VcjgVW+T5
z*ezTvTq0a5>=7;#E*Gv4t`x2kt`_zR*9iNB{lWp^Tf()%b;9++4Z@AWLE(^alW<tL
zS@^bai*T!On{c~uhj6EGmvFamk8rPWpYR>we&M^q1G;@uXK%~!u+%p?+})-hj<gK5
zbr~c5n<BjfgAu6<&m-dSNXw9!E=`fX!I7=vD5w^(qr11yIMUSw3Zyf_N4g9Y?j9cD
z13mhoNZ-Jwh+*5nKwndLzfrjljE)Ec9Uc1N?#}*}UZHKEQ^Ha?+$DB_wlSi#NK;Gi
zh&a;S7ZHaBTH3Ac1DpGM5uj+}#Djixkm987{?>slmcibZtxav+Lv6hg)HxVw88Kj~
z236H%q^2kZ_71f5h#kExoo0MY`(W2Ve`MIaX`pwsFVckeShOHjVA8^)gZhm_Z3FEQ
zLo2!icVVQZQ^aprY#kWrG17%rcxiB`yMILA*3uUlY7uF9#rxiNefLNU7DCHNWXniX
zSA?iQvl8Ci-9FM~#=Fk`rrt=$h*b?@$sCCcS=0xGGPJ4T4Wq*&-5py+`W8!fe>>8t
z`LwW-*51+57NK5i+SJ`1888fXw~dSrMf8J_{<iL3b6?9~6SXxmq;F}b0@1^0XQaJ*
zL>lgD8Hz}4T@myU4VZ0sBr@34+S1muxn-!`*3p74oOm)$1Vrj|X|M%A0Kga+G=Tb{
z<W?p5#Dh|j_8>(zfKalco=rmo>X+Ll9+Xco4fc)>HxXc%`?~wJphX2DCE761qugy9
zM<eJG6hetj-TfT{YPR9Fp$G_%u7MGomQ95U6EdnHb8AcgM6hLOXkfF_lNL3ow8E%{
zM+ePnK!FIQiwKU;oZ;?mk*1E(-d?K~9`0-D?R7@BwDq?1wVY~}*xB7NB7$)2z#JKh
z7$aK&Xc!F>1=@NCh9g$=SATbZr_y!_{n;Newzc#|`rBKE^h4Mx4D=b=2KxFi-uk|l
z&i=@Vd7{5Y2T%1QwGZGvvN;kNvEkDP2dT(5Ojv6NpfEC|R%X#2s0j|O;hQ2uAV*tz
zqqOI)fuZhgL>=~;0P#(2fQu39$mZ@5z@^&p1Y`vE%9B-v_$E|7G$8auwu+d|!$z&i
z!?uyG(Z1H<rqMy_IEVH`&826Pf=IerdOIu%c2RMPfd&*P!q(f}-vi)ON7yhpI^2cN
zvSB7ghJZGJVfuR%6w=+VN9BWETP>a4sG(Jb0~I?^HBv8dP`{+icZ&kzYDM;m$*Vq^
zl>|y=gZ9D3iEq`bCF@6lhT3{805MD&>fm-^Xn0uYYHv5T0vgbH{bFmRx7X4}-P(bU
z9f_E`FpNzqbSpuc?*=6_I%rbv)FDwSa5kNW$mla-lmZ-QM2!xfnTd)44j*WZ=r<2x
z&UZ;8EyF#-dSF!anW=TCJJQjHO^lf!SDhzP=g`3DAka#Gj|6}mZP&L(T7V&hw$Tv`
z<=|HHV9THaKiz}kF!rxz8l9$A0BR2)ZeR$&#YcPjKrb-HP<KycqzeUhc9}+jqlQpy
z1Z`;TjYt6A?lz$L(Y78Fh7s+-^tGP~Dc$bu92n>X@;`+GER!N6jA3M}8GRlZX`(O1
zJfR>asT!bewWvX*uP|?b+53mZ;ejE58ZJsUgA&5znONBfM6gDvuqLA20|1y#z<)cI
zq}Bn9u|)%CN@<+{ZF(RaKLU6i!7gvm2uL5o*tY;90_T~5+q-}?M|)e1zzZ1X&WK&<
zVx<|hbXnC$6;chfls5IXTab68YhW0iA2AM(c8}1A840MUMtvI=sz?MY%mA=5t(3}g
zLZ8q&+TDxU(rHBIL0WfAEq$oHrN1qr?~AnebdOj%s7a`0Lj+BaU>)dE`d#cO?ubOS
z4~$}<n$S*MsWYR`h*9D1j3~h08P7B-=F|BtYEa2&RKtW(mGUX6p*=F(gJnbC+cHQu
z1yDw;eFLrZUCL~<YVfYWn|b5tz=+y3iyBnN8DHDqkB?E)N?84Sx0*FnfR1raMuF6a
zj!9^cp3RXhgEU1E#OPuG2Zt2`L>lfxL!=I@5dA`5q|4BW)qSv~-3T<Nz=e@$3Cd<y
z0t#vYT(=w1$5_2udNG6ABPOLmNY?8(h3_;31Z1Kv7Rsa-+knMPl%)yFWe*`6K&99e
zD66ncT3IZ^qnMGHzTJZW>(N#<gk<HV*1^$j+o<olBW)2Zpj04HIrh^*B6Re_UEPu1
zcKgIaqqZiBmZ&D6SHRF{_iz__bO^{ULJQB9wss&WZPivVfC3<A#HavrMie2a$(a-c
z)iu)B8xq@whfDQ<O`uG(idCs26)ZZ8)zJlb?;afP9&S3lAVr;un^?5Orqbe4kPIOG
zs8M>XWN0tGc7k%CGBuR1L>hY|AZH0@r~w6H(Zn`&H8Uw_or*%qB>}U#<kK@P!kE^y
zvZ(-a8d3ndl)6laj1CE%t%JhoaJ$gmKO}4z+$s!>whBE%n}ybqHX@TFrc-m)so<g3
zt!Uz4S4%5qWK(INBKlOU#xaTvd%hk;pJkhfR&a3C8Bg>c#gzu>60&Z^YC75)QI|ID
zLEM62Hqk|iK9z<#)6fpM0Z|Q<4gzojd4a~lbLUV?pS}Y$ZO@R<(%vt2l$4d&Tf0YE
zf!KkK)nNc8>>aX<C^sd_(K~>OP7_nMNzbE$liw0tIVZhUr}$=&xdWSr4Vb1w1KsTs
zCdTL%G_$*v)|TO(t%F$921bX5H;!Ua0673q8PInCE%!!5y3hhX(mf~)kJ8YF!v@;i
zbZ?3Xt)rcMQ;)Pc(%m|MjYB{Fkf1DJSH2z7LB-q@7mQIqU}6pKRY`Dq6}GnzfF4k`
zA6n;^m0LG~6bDtRv<a!oi*4%4rbILiP*i{}rF5aODi6^mOqVjcl+&fcFxubUP*PKj
zzHTW&Oa*1CD5XcrR6&_4C{qPxs-R326=GAcSjo{!A>;@aqncoGP%W(%1qF+dDOik5
z!D3_z7E`8@V!F`V63SFUnMzPiumsfvODIPP<tU*XC0g6+iq%r<C|`i`1t?#D@&za#
zG}~~Yd;!WApqfglrc%lQYtFb(j#908^;&`TC2GO-N(#zas#OWUiAuNBhqXHu9;7mY
zRBMoG4N|Q^<ppI8YFTGc#UZLVM8$?EQ;0H!C{u_sg(y>qGQmzuQ!q?9!juDcjB%kH
zVXdhR$~(#wF2j&?DDNm!8NDc@Ol6d*j9!#cHDy!{B%P7CjY3pS8RaOa9OaaQ;37zH
z5hS<>5?llcE`kIXL4u25IpwIJ92Jy<fFcN>z$GYl1e9R}P#~ndpd17gApiv~$Ppr-
z2oX?(icv?X7<GgQB0>ZaA%cidafP%g0$hq9fkcSP3K2+z2qZ!T5+MSK5P?L9Kq6E^
zl?14g0OcTH2oW%Z2pB>H3?TxB5CKDofFVS{5F%g*5io=Z7(xULAwpjvn6|=&a+Fez
zQp!<EIf9fUNI8O(gN8mtLm#4{hqMA+C`XWT1Sv;|a?rSkXxu|I?jaiY5RH3?#yv#i
z9-?s%(YS|b+(R_(AsY7(jXUg}(S>q^DF+4}7s?T?KyM=lE|dd<ju7RbK@ZWOhcM{4
zP!1aO5Dj{W20cWB9-=`H(V&ND&_gunAsX}$4SI+MJw$^ZqCpSQpoeJCLp10i3_329
zgD^peFhK~Ipd(NgQRYXWT%Az?swqrEAEu!XYxp2gu1==_)fXlJ2onH=2_=LHmclgt
zVH*E1jenTNKTP8vrtuHc_=joy!!-V38vihjf0)KUOyeJ>@ekAZhiUx7H2z^4|8PK^
zmVp|rg*ED&57Y$Ime-VOcXh%AYP6=-s53uMQ>MKy*X|SL)o9PP+PzM@*K79~>b+L0
zw^pmSR;#yGtG8CGw^pmSR;#yGtG8CGw^pmSR;#yGtG8CGw^pmSR;yP-nt?j4-a4(`
zI<4M1t=>AV-a4(`I<4M1t=>AV-a4(`I<4M1t=>AV-a4&b4Yvj~+#0CY>aEx6t=H<+
zFl<1>uz`B5-g>Rxdad4it=@XA-g>Rxdad4it=<`0KhO9-gZkGMYOgEQURS8Su2BEF
zLjCIsN-365OI@Lsx<V~=g<9$gwbT`AsjDkwvWfBkf8e|lBap)f#1ddZ5TB9h5Re3(
de*jv40|X!y3}<W?od?mU{cQ|D^cBO5od6617EJ&E

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.svg b/assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.svg
new file mode 100644
index 000000000..855c845e5
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.svg
@@ -0,0 +1,2671 @@
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" >
+<svg>
+<metadata>
+Created by FontForge 20120731 at Mon Oct 24 17:37:40 2016
+ By ,,,
+Copyright Dave Gandy 2016. All rights reserved.
+</metadata>
+<defs>
+<font id="FontAwesome" horiz-adv-x="1536" >
+  <font-face 
+    font-family="FontAwesome"
+    font-weight="400"
+    font-stretch="normal"
+    units-per-em="1792"
+    panose-1="0 0 0 0 0 0 0 0 0 0"
+    ascent="1536"
+    descent="-256"
+    bbox="-1.02083 -256.962 2304.6 1537.02"
+    underline-thickness="0"
+    underline-position="0"
+    unicode-range="U+0020-F500"
+  />
+<missing-glyph horiz-adv-x="896" 
+d="M224 112h448v1312h-448v-1312zM112 0v1536h672v-1536h-672z" />
+    <glyph glyph-name=".notdef" horiz-adv-x="896" 
+d="M224 112h448v1312h-448v-1312zM112 0v1536h672v-1536h-672z" />
+    <glyph glyph-name=".null" horiz-adv-x="0" 
+ />
+    <glyph glyph-name="nonmarkingreturn" horiz-adv-x="597" 
+ />
+    <glyph glyph-name="space" unicode=" " horiz-adv-x="448" 
+ />
+    <glyph glyph-name="dieresis" unicode="&#xa8;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="copyright" unicode="&#xa9;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="registered" unicode="&#xae;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="acute" unicode="&#xb4;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="AE" unicode="&#xc6;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="Oslash" unicode="&#xd8;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="trademark" unicode="&#x2122;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="infinity" unicode="&#x221e;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="notequal" unicode="&#x2260;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="glass" unicode="&#xf000;" horiz-adv-x="1792" 
+d="M1699 1350q0 -35 -43 -78l-632 -632v-768h320q26 0 45 -19t19 -45t-19 -45t-45 -19h-896q-26 0 -45 19t-19 45t19 45t45 19h320v768l-632 632q-43 43 -43 78q0 23 18 36.5t38 17.5t43 4h1408q23 0 43 -4t38 -17.5t18 -36.5z" />
+    <glyph glyph-name="music" unicode="&#xf001;" 
+d="M1536 1312v-1120q0 -50 -34 -89t-86 -60.5t-103.5 -32t-96.5 -10.5t-96.5 10.5t-103.5 32t-86 60.5t-34 89t34 89t86 60.5t103.5 32t96.5 10.5q105 0 192 -39v537l-768 -237v-709q0 -50 -34 -89t-86 -60.5t-103.5 -32t-96.5 -10.5t-96.5 10.5t-103.5 32t-86 60.5t-34 89
+t34 89t86 60.5t103.5 32t96.5 10.5q105 0 192 -39v967q0 31 19 56.5t49 35.5l832 256q12 4 28 4q40 0 68 -28t28 -68z" />
+    <glyph glyph-name="search" unicode="&#xf002;" horiz-adv-x="1664" 
+d="M1152 704q0 185 -131.5 316.5t-316.5 131.5t-316.5 -131.5t-131.5 -316.5t131.5 -316.5t316.5 -131.5t316.5 131.5t131.5 316.5zM1664 -128q0 -52 -38 -90t-90 -38q-54 0 -90 38l-343 342q-179 -124 -399 -124q-143 0 -273.5 55.5t-225 150t-150 225t-55.5 273.5
+t55.5 273.5t150 225t225 150t273.5 55.5t273.5 -55.5t225 -150t150 -225t55.5 -273.5q0 -220 -124 -399l343 -343q37 -37 37 -90z" />
+    <glyph glyph-name="envelope" unicode="&#xf003;" horiz-adv-x="1792" 
+d="M1664 32v768q-32 -36 -69 -66q-268 -206 -426 -338q-51 -43 -83 -67t-86.5 -48.5t-102.5 -24.5h-1h-1q-48 0 -102.5 24.5t-86.5 48.5t-83 67q-158 132 -426 338q-37 30 -69 66v-768q0 -13 9.5 -22.5t22.5 -9.5h1472q13 0 22.5 9.5t9.5 22.5zM1664 1083v11v13.5t-0.5 13
+t-3 12.5t-5.5 9t-9 7.5t-14 2.5h-1472q-13 0 -22.5 -9.5t-9.5 -22.5q0 -168 147 -284q193 -152 401 -317q6 -5 35 -29.5t46 -37.5t44.5 -31.5t50.5 -27.5t43 -9h1h1q20 0 43 9t50.5 27.5t44.5 31.5t46 37.5t35 29.5q208 165 401 317q54 43 100.5 115.5t46.5 131.5z
+M1792 1120v-1088q0 -66 -47 -113t-113 -47h-1472q-66 0 -113 47t-47 113v1088q0 66 47 113t113 47h1472q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="heart" unicode="&#xf004;" horiz-adv-x="1792" 
+d="M896 -128q-26 0 -44 18l-624 602q-10 8 -27.5 26t-55.5 65.5t-68 97.5t-53.5 121t-23.5 138q0 220 127 344t351 124q62 0 126.5 -21.5t120 -58t95.5 -68.5t76 -68q36 36 76 68t95.5 68.5t120 58t126.5 21.5q224 0 351 -124t127 -344q0 -221 -229 -450l-623 -600
+q-18 -18 -44 -18z" />
+    <glyph glyph-name="star" unicode="&#xf005;" horiz-adv-x="1664" 
+d="M1664 889q0 -22 -26 -48l-363 -354l86 -500q1 -7 1 -20q0 -21 -10.5 -35.5t-30.5 -14.5q-19 0 -40 12l-449 236l-449 -236q-22 -12 -40 -12q-21 0 -31.5 14.5t-10.5 35.5q0 6 2 20l86 500l-364 354q-25 27 -25 48q0 37 56 46l502 73l225 455q19 41 49 41t49 -41l225 -455
+l502 -73q56 -9 56 -46z" />
+    <glyph glyph-name="star_empty" unicode="&#xf006;" horiz-adv-x="1664" 
+d="M1137 532l306 297l-422 62l-189 382l-189 -382l-422 -62l306 -297l-73 -421l378 199l377 -199zM1664 889q0 -22 -26 -48l-363 -354l86 -500q1 -7 1 -20q0 -50 -41 -50q-19 0 -40 12l-449 236l-449 -236q-22 -12 -40 -12q-21 0 -31.5 14.5t-10.5 35.5q0 6 2 20l86 500
+l-364 354q-25 27 -25 48q0 37 56 46l502 73l225 455q19 41 49 41t49 -41l225 -455l502 -73q56 -9 56 -46z" />
+    <glyph glyph-name="user" unicode="&#xf007;" horiz-adv-x="1280" 
+d="M1280 137q0 -109 -62.5 -187t-150.5 -78h-854q-88 0 -150.5 78t-62.5 187q0 85 8.5 160.5t31.5 152t58.5 131t94 89t134.5 34.5q131 -128 313 -128t313 128q76 0 134.5 -34.5t94 -89t58.5 -131t31.5 -152t8.5 -160.5zM1024 1024q0 -159 -112.5 -271.5t-271.5 -112.5
+t-271.5 112.5t-112.5 271.5t112.5 271.5t271.5 112.5t271.5 -112.5t112.5 -271.5z" />
+    <glyph glyph-name="film" unicode="&#xf008;" horiz-adv-x="1920" 
+d="M384 -64v128q0 26 -19 45t-45 19h-128q-26 0 -45 -19t-19 -45v-128q0 -26 19 -45t45 -19h128q26 0 45 19t19 45zM384 320v128q0 26 -19 45t-45 19h-128q-26 0 -45 -19t-19 -45v-128q0 -26 19 -45t45 -19h128q26 0 45 19t19 45zM384 704v128q0 26 -19 45t-45 19h-128
+q-26 0 -45 -19t-19 -45v-128q0 -26 19 -45t45 -19h128q26 0 45 19t19 45zM1408 -64v512q0 26 -19 45t-45 19h-768q-26 0 -45 -19t-19 -45v-512q0 -26 19 -45t45 -19h768q26 0 45 19t19 45zM384 1088v128q0 26 -19 45t-45 19h-128q-26 0 -45 -19t-19 -45v-128q0 -26 19 -45
+t45 -19h128q26 0 45 19t19 45zM1792 -64v128q0 26 -19 45t-45 19h-128q-26 0 -45 -19t-19 -45v-128q0 -26 19 -45t45 -19h128q26 0 45 19t19 45zM1408 704v512q0 26 -19 45t-45 19h-768q-26 0 -45 -19t-19 -45v-512q0 -26 19 -45t45 -19h768q26 0 45 19t19 45zM1792 320v128
+q0 26 -19 45t-45 19h-128q-26 0 -45 -19t-19 -45v-128q0 -26 19 -45t45 -19h128q26 0 45 19t19 45zM1792 704v128q0 26 -19 45t-45 19h-128q-26 0 -45 -19t-19 -45v-128q0 -26 19 -45t45 -19h128q26 0 45 19t19 45zM1792 1088v128q0 26 -19 45t-45 19h-128q-26 0 -45 -19
+t-19 -45v-128q0 -26 19 -45t45 -19h128q26 0 45 19t19 45zM1920 1248v-1344q0 -66 -47 -113t-113 -47h-1600q-66 0 -113 47t-47 113v1344q0 66 47 113t113 47h1600q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="th_large" unicode="&#xf009;" horiz-adv-x="1664" 
+d="M768 512v-384q0 -52 -38 -90t-90 -38h-512q-52 0 -90 38t-38 90v384q0 52 38 90t90 38h512q52 0 90 -38t38 -90zM768 1280v-384q0 -52 -38 -90t-90 -38h-512q-52 0 -90 38t-38 90v384q0 52 38 90t90 38h512q52 0 90 -38t38 -90zM1664 512v-384q0 -52 -38 -90t-90 -38
+h-512q-52 0 -90 38t-38 90v384q0 52 38 90t90 38h512q52 0 90 -38t38 -90zM1664 1280v-384q0 -52 -38 -90t-90 -38h-512q-52 0 -90 38t-38 90v384q0 52 38 90t90 38h512q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="th" unicode="&#xf00a;" horiz-adv-x="1792" 
+d="M512 288v-192q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h320q40 0 68 -28t28 -68zM512 800v-192q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h320q40 0 68 -28t28 -68zM1152 288v-192q0 -40 -28 -68t-68 -28h-320
+q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h320q40 0 68 -28t28 -68zM512 1312v-192q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h320q40 0 68 -28t28 -68zM1152 800v-192q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v192q0 40 28 68t68 28
+h320q40 0 68 -28t28 -68zM1792 288v-192q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h320q40 0 68 -28t28 -68zM1152 1312v-192q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h320q40 0 68 -28t28 -68zM1792 800v-192
+q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h320q40 0 68 -28t28 -68zM1792 1312v-192q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h320q40 0 68 -28t28 -68z" />
+    <glyph glyph-name="th_list" unicode="&#xf00b;" horiz-adv-x="1792" 
+d="M512 288v-192q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h320q40 0 68 -28t28 -68zM512 800v-192q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h320q40 0 68 -28t28 -68zM1792 288v-192q0 -40 -28 -68t-68 -28h-960
+q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h960q40 0 68 -28t28 -68zM512 1312v-192q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h320q40 0 68 -28t28 -68zM1792 800v-192q0 -40 -28 -68t-68 -28h-960q-40 0 -68 28t-28 68v192q0 40 28 68t68 28
+h960q40 0 68 -28t28 -68zM1792 1312v-192q0 -40 -28 -68t-68 -28h-960q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h960q40 0 68 -28t28 -68z" />
+    <glyph glyph-name="ok" unicode="&#xf00c;" horiz-adv-x="1792" 
+d="M1671 970q0 -40 -28 -68l-724 -724l-136 -136q-28 -28 -68 -28t-68 28l-136 136l-362 362q-28 28 -28 68t28 68l136 136q28 28 68 28t68 -28l294 -295l656 657q28 28 68 28t68 -28l136 -136q28 -28 28 -68z" />
+    <glyph glyph-name="remove" unicode="&#xf00d;" horiz-adv-x="1408" 
+d="M1298 214q0 -40 -28 -68l-136 -136q-28 -28 -68 -28t-68 28l-294 294l-294 -294q-28 -28 -68 -28t-68 28l-136 136q-28 28 -28 68t28 68l294 294l-294 294q-28 28 -28 68t28 68l136 136q28 28 68 28t68 -28l294 -294l294 294q28 28 68 28t68 -28l136 -136q28 -28 28 -68
+t-28 -68l-294 -294l294 -294q28 -28 28 -68z" />
+    <glyph glyph-name="zoom_in" unicode="&#xf00e;" horiz-adv-x="1664" 
+d="M1024 736v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-224v-224q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v224h-224q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h224v224q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5v-224h224
+q13 0 22.5 -9.5t9.5 -22.5zM1152 704q0 185 -131.5 316.5t-316.5 131.5t-316.5 -131.5t-131.5 -316.5t131.5 -316.5t316.5 -131.5t316.5 131.5t131.5 316.5zM1664 -128q0 -53 -37.5 -90.5t-90.5 -37.5q-54 0 -90 38l-343 342q-179 -124 -399 -124q-143 0 -273.5 55.5
+t-225 150t-150 225t-55.5 273.5t55.5 273.5t150 225t225 150t273.5 55.5t273.5 -55.5t225 -150t150 -225t55.5 -273.5q0 -220 -124 -399l343 -343q37 -37 37 -90z" />
+    <glyph glyph-name="zoom_out" unicode="&#xf010;" horiz-adv-x="1664" 
+d="M1024 736v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-576q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h576q13 0 22.5 -9.5t9.5 -22.5zM1152 704q0 185 -131.5 316.5t-316.5 131.5t-316.5 -131.5t-131.5 -316.5t131.5 -316.5t316.5 -131.5t316.5 131.5t131.5 316.5z
+M1664 -128q0 -53 -37.5 -90.5t-90.5 -37.5q-54 0 -90 38l-343 342q-179 -124 -399 -124q-143 0 -273.5 55.5t-225 150t-150 225t-55.5 273.5t55.5 273.5t150 225t225 150t273.5 55.5t273.5 -55.5t225 -150t150 -225t55.5 -273.5q0 -220 -124 -399l343 -343q37 -37 37 -90z
+" />
+    <glyph glyph-name="off" unicode="&#xf011;" 
+d="M1536 640q0 -156 -61 -298t-164 -245t-245 -164t-298 -61t-298 61t-245 164t-164 245t-61 298q0 182 80.5 343t226.5 270q43 32 95.5 25t83.5 -50q32 -42 24.5 -94.5t-49.5 -84.5q-98 -74 -151.5 -181t-53.5 -228q0 -104 40.5 -198.5t109.5 -163.5t163.5 -109.5
+t198.5 -40.5t198.5 40.5t163.5 109.5t109.5 163.5t40.5 198.5q0 121 -53.5 228t-151.5 181q-42 32 -49.5 84.5t24.5 94.5q31 43 84 50t95 -25q146 -109 226.5 -270t80.5 -343zM896 1408v-640q0 -52 -38 -90t-90 -38t-90 38t-38 90v640q0 52 38 90t90 38t90 -38t38 -90z" />
+    <glyph glyph-name="signal" unicode="&#xf012;" horiz-adv-x="1792" 
+d="M256 96v-192q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h192q14 0 23 -9t9 -23zM640 224v-320q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v320q0 14 9 23t23 9h192q14 0 23 -9t9 -23zM1024 480v-576q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23
+v576q0 14 9 23t23 9h192q14 0 23 -9t9 -23zM1408 864v-960q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v960q0 14 9 23t23 9h192q14 0 23 -9t9 -23zM1792 1376v-1472q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v1472q0 14 9 23t23 9h192q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="cog" unicode="&#xf013;" 
+d="M1024 640q0 106 -75 181t-181 75t-181 -75t-75 -181t75 -181t181 -75t181 75t75 181zM1536 749v-222q0 -12 -8 -23t-20 -13l-185 -28q-19 -54 -39 -91q35 -50 107 -138q10 -12 10 -25t-9 -23q-27 -37 -99 -108t-94 -71q-12 0 -26 9l-138 108q-44 -23 -91 -38
+q-16 -136 -29 -186q-7 -28 -36 -28h-222q-14 0 -24.5 8.5t-11.5 21.5l-28 184q-49 16 -90 37l-141 -107q-10 -9 -25 -9q-14 0 -25 11q-126 114 -165 168q-7 10 -7 23q0 12 8 23q15 21 51 66.5t54 70.5q-27 50 -41 99l-183 27q-13 2 -21 12.5t-8 23.5v222q0 12 8 23t19 13
+l186 28q14 46 39 92q-40 57 -107 138q-10 12 -10 24q0 10 9 23q26 36 98.5 107.5t94.5 71.5q13 0 26 -10l138 -107q44 23 91 38q16 136 29 186q7 28 36 28h222q14 0 24.5 -8.5t11.5 -21.5l28 -184q49 -16 90 -37l142 107q9 9 24 9q13 0 25 -10q129 -119 165 -170q7 -8 7 -22
+q0 -12 -8 -23q-15 -21 -51 -66.5t-54 -70.5q26 -50 41 -98l183 -28q13 -2 21 -12.5t8 -23.5z" />
+    <glyph glyph-name="trash" unicode="&#xf014;" horiz-adv-x="1408" 
+d="M512 800v-576q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v576q0 14 9 23t23 9h64q14 0 23 -9t9 -23zM768 800v-576q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v576q0 14 9 23t23 9h64q14 0 23 -9t9 -23zM1024 800v-576q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v576
+q0 14 9 23t23 9h64q14 0 23 -9t9 -23zM1152 76v948h-896v-948q0 -22 7 -40.5t14.5 -27t10.5 -8.5h832q3 0 10.5 8.5t14.5 27t7 40.5zM480 1152h448l-48 117q-7 9 -17 11h-317q-10 -2 -17 -11zM1408 1120v-64q0 -14 -9 -23t-23 -9h-96v-948q0 -83 -47 -143.5t-113 -60.5h-832
+q-66 0 -113 58.5t-47 141.5v952h-96q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h309l70 167q15 37 54 63t79 26h320q40 0 79 -26t54 -63l70 -167h309q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="home" unicode="&#xf015;" horiz-adv-x="1664" 
+d="M1408 544v-480q0 -26 -19 -45t-45 -19h-384v384h-256v-384h-384q-26 0 -45 19t-19 45v480q0 1 0.5 3t0.5 3l575 474l575 -474q1 -2 1 -6zM1631 613l-62 -74q-8 -9 -21 -11h-3q-13 0 -21 7l-692 577l-692 -577q-12 -8 -24 -7q-13 2 -21 11l-62 74q-8 10 -7 23.5t11 21.5
+l719 599q32 26 76 26t76 -26l244 -204v195q0 14 9 23t23 9h192q14 0 23 -9t9 -23v-408l219 -182q10 -8 11 -21.5t-7 -23.5z" />
+    <glyph glyph-name="file_alt" unicode="&#xf016;" 
+d="M1468 1156q28 -28 48 -76t20 -88v-1152q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1600q0 40 28 68t68 28h896q40 0 88 -20t76 -48zM1024 1400v-376h376q-10 29 -22 41l-313 313q-12 12 -41 22zM1408 -128v1024h-416q-40 0 -68 28t-28 68v416h-768v-1536h1280z
+" />
+    <glyph glyph-name="time" unicode="&#xf017;" 
+d="M896 992v-448q0 -14 -9 -23t-23 -9h-320q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h224v352q0 14 9 23t23 9h64q14 0 23 -9t9 -23zM1312 640q0 148 -73 273t-198 198t-273 73t-273 -73t-198 -198t-73 -273t73 -273t198 -198t273 -73t273 73t198 198t73 273zM1536 640
+q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="road" unicode="&#xf018;" horiz-adv-x="1920" 
+d="M1111 540v4l-24 320q-1 13 -11 22.5t-23 9.5h-186q-13 0 -23 -9.5t-11 -22.5l-24 -320v-4q-1 -12 8 -20t21 -8h244q12 0 21 8t8 20zM1870 73q0 -73 -46 -73h-704q13 0 22 9.5t8 22.5l-20 256q-1 13 -11 22.5t-23 9.5h-272q-13 0 -23 -9.5t-11 -22.5l-20 -256
+q-1 -13 8 -22.5t22 -9.5h-704q-46 0 -46 73q0 54 26 116l417 1044q8 19 26 33t38 14h339q-13 0 -23 -9.5t-11 -22.5l-15 -192q-1 -14 8 -23t22 -9h166q13 0 22 9t8 23l-15 192q-1 13 -11 22.5t-23 9.5h339q20 0 38 -14t26 -33l417 -1044q26 -62 26 -116z" />
+    <glyph glyph-name="download_alt" unicode="&#xf019;" horiz-adv-x="1664" 
+d="M1280 192q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1536 192q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1664 416v-320q0 -40 -28 -68t-68 -28h-1472q-40 0 -68 28t-28 68v320q0 40 28 68t68 28h465l135 -136
+q58 -56 136 -56t136 56l136 136h464q40 0 68 -28t28 -68zM1339 985q17 -41 -14 -70l-448 -448q-18 -19 -45 -19t-45 19l-448 448q-31 29 -14 70q17 39 59 39h256v448q0 26 19 45t45 19h256q26 0 45 -19t19 -45v-448h256q42 0 59 -39z" />
+    <glyph glyph-name="download" unicode="&#xf01a;" 
+d="M1120 608q0 -12 -10 -24l-319 -319q-11 -9 -23 -9t-23 9l-320 320q-15 16 -7 35q8 20 30 20h192v352q0 14 9 23t23 9h192q14 0 23 -9t9 -23v-352h192q14 0 23 -9t9 -23zM768 1184q-148 0 -273 -73t-198 -198t-73 -273t73 -273t198 -198t273 -73t273 73t198 198t73 273
+t-73 273t-198 198t-273 73zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="upload" unicode="&#xf01b;" 
+d="M1118 660q-8 -20 -30 -20h-192v-352q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v352h-192q-14 0 -23 9t-9 23q0 12 10 24l319 319q11 9 23 9t23 -9l320 -320q15 -16 7 -35zM768 1184q-148 0 -273 -73t-198 -198t-73 -273t73 -273t198 -198t273 -73t273 73t198 198
+t73 273t-73 273t-198 198t-273 73zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="inbox" unicode="&#xf01c;" 
+d="M1023 576h316q-1 3 -2.5 8.5t-2.5 7.5l-212 496h-708l-212 -496q-1 -3 -2.5 -8.5t-2.5 -7.5h316l95 -192h320zM1536 546v-482q0 -26 -19 -45t-45 -19h-1408q-26 0 -45 19t-19 45v482q0 62 25 123l238 552q10 25 36.5 42t52.5 17h832q26 0 52.5 -17t36.5 -42l238 -552
+q25 -61 25 -123z" />
+    <glyph glyph-name="play_circle" unicode="&#xf01d;" 
+d="M1184 640q0 -37 -32 -55l-544 -320q-15 -9 -32 -9q-16 0 -32 8q-32 19 -32 56v640q0 37 32 56q33 18 64 -1l544 -320q32 -18 32 -55zM1312 640q0 148 -73 273t-198 198t-273 73t-273 -73t-198 -198t-73 -273t73 -273t198 -198t273 -73t273 73t198 198t73 273zM1536 640
+q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="repeat" unicode="&#xf01e;" 
+d="M1536 1280v-448q0 -26 -19 -45t-45 -19h-448q-42 0 -59 40q-17 39 14 69l138 138q-148 137 -349 137q-104 0 -198.5 -40.5t-163.5 -109.5t-109.5 -163.5t-40.5 -198.5t40.5 -198.5t109.5 -163.5t163.5 -109.5t198.5 -40.5q119 0 225 52t179 147q7 10 23 12q15 0 25 -9
+l137 -138q9 -8 9.5 -20.5t-7.5 -22.5q-109 -132 -264 -204.5t-327 -72.5q-156 0 -298 61t-245 164t-164 245t-61 298t61 298t164 245t245 164t298 61q147 0 284.5 -55.5t244.5 -156.5l130 129q29 31 70 14q39 -17 39 -59z" />
+    <glyph glyph-name="refresh" unicode="&#xf021;" 
+d="M1511 480q0 -5 -1 -7q-64 -268 -268 -434.5t-478 -166.5q-146 0 -282.5 55t-243.5 157l-129 -129q-19 -19 -45 -19t-45 19t-19 45v448q0 26 19 45t45 19h448q26 0 45 -19t19 -45t-19 -45l-137 -137q71 -66 161 -102t187 -36q134 0 250 65t186 179q11 17 53 117
+q8 23 30 23h192q13 0 22.5 -9.5t9.5 -22.5zM1536 1280v-448q0 -26 -19 -45t-45 -19h-448q-26 0 -45 19t-19 45t19 45l138 138q-148 137 -349 137q-134 0 -250 -65t-186 -179q-11 -17 -53 -117q-8 -23 -30 -23h-199q-13 0 -22.5 9.5t-9.5 22.5v7q65 268 270 434.5t480 166.5
+q146 0 284 -55.5t245 -156.5l130 129q19 19 45 19t45 -19t19 -45z" />
+    <glyph glyph-name="list_alt" unicode="&#xf022;" horiz-adv-x="1792" 
+d="M384 352v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM384 608v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M384 864v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM1536 352v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-960q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h960q13 0 22.5 -9.5t9.5 -22.5z
+M1536 608v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-960q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h960q13 0 22.5 -9.5t9.5 -22.5zM1536 864v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-960q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h960q13 0 22.5 -9.5
+t9.5 -22.5zM1664 160v832q0 13 -9.5 22.5t-22.5 9.5h-1472q-13 0 -22.5 -9.5t-9.5 -22.5v-832q0 -13 9.5 -22.5t22.5 -9.5h1472q13 0 22.5 9.5t9.5 22.5zM1792 1248v-1088q0 -66 -47 -113t-113 -47h-1472q-66 0 -113 47t-47 113v1088q0 66 47 113t113 47h1472q66 0 113 -47
+t47 -113z" />
+    <glyph glyph-name="lock" unicode="&#xf023;" horiz-adv-x="1152" 
+d="M320 768h512v192q0 106 -75 181t-181 75t-181 -75t-75 -181v-192zM1152 672v-576q0 -40 -28 -68t-68 -28h-960q-40 0 -68 28t-28 68v576q0 40 28 68t68 28h32v192q0 184 132 316t316 132t316 -132t132 -316v-192h32q40 0 68 -28t28 -68z" />
+    <glyph glyph-name="flag" unicode="&#xf024;" horiz-adv-x="1792" 
+d="M320 1280q0 -72 -64 -110v-1266q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v1266q-64 38 -64 110q0 53 37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1792 1216v-763q0 -25 -12.5 -38.5t-39.5 -27.5q-215 -116 -369 -116q-61 0 -123.5 22t-108.5 48
+t-115.5 48t-142.5 22q-192 0 -464 -146q-17 -9 -33 -9q-26 0 -45 19t-19 45v742q0 32 31 55q21 14 79 43q236 120 421 120q107 0 200 -29t219 -88q38 -19 88 -19q54 0 117.5 21t110 47t88 47t54.5 21q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="headphones" unicode="&#xf025;" horiz-adv-x="1664" 
+d="M1664 650q0 -166 -60 -314l-20 -49l-185 -33q-22 -83 -90.5 -136.5t-156.5 -53.5v-32q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v576q0 14 9 23t23 9h64q14 0 23 -9t9 -23v-32q71 0 130 -35.5t93 -95.5l68 12q29 95 29 193q0 148 -88 279t-236.5 209t-315.5 78
+t-315.5 -78t-236.5 -209t-88 -279q0 -98 29 -193l68 -12q34 60 93 95.5t130 35.5v32q0 14 9 23t23 9h64q14 0 23 -9t9 -23v-576q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v32q-88 0 -156.5 53.5t-90.5 136.5l-185 33l-20 49q-60 148 -60 314q0 151 67 291t179 242.5
+t266 163.5t320 61t320 -61t266 -163.5t179 -242.5t67 -291z" />
+    <glyph glyph-name="volume_off" unicode="&#xf026;" horiz-adv-x="768" 
+d="M768 1184v-1088q0 -26 -19 -45t-45 -19t-45 19l-333 333h-262q-26 0 -45 19t-19 45v384q0 26 19 45t45 19h262l333 333q19 19 45 19t45 -19t19 -45z" />
+    <glyph glyph-name="volume_down" unicode="&#xf027;" horiz-adv-x="1152" 
+d="M768 1184v-1088q0 -26 -19 -45t-45 -19t-45 19l-333 333h-262q-26 0 -45 19t-19 45v384q0 26 19 45t45 19h262l333 333q19 19 45 19t45 -19t19 -45zM1152 640q0 -76 -42.5 -141.5t-112.5 -93.5q-10 -5 -25 -5q-26 0 -45 18.5t-19 45.5q0 21 12 35.5t29 25t34 23t29 36
+t12 56.5t-12 56.5t-29 36t-34 23t-29 25t-12 35.5q0 27 19 45.5t45 18.5q15 0 25 -5q70 -27 112.5 -93t42.5 -142z" />
+    <glyph glyph-name="volume_up" unicode="&#xf028;" horiz-adv-x="1664" 
+d="M768 1184v-1088q0 -26 -19 -45t-45 -19t-45 19l-333 333h-262q-26 0 -45 19t-19 45v384q0 26 19 45t45 19h262l333 333q19 19 45 19t45 -19t19 -45zM1152 640q0 -76 -42.5 -141.5t-112.5 -93.5q-10 -5 -25 -5q-26 0 -45 18.5t-19 45.5q0 21 12 35.5t29 25t34 23t29 36
+t12 56.5t-12 56.5t-29 36t-34 23t-29 25t-12 35.5q0 27 19 45.5t45 18.5q15 0 25 -5q70 -27 112.5 -93t42.5 -142zM1408 640q0 -153 -85 -282.5t-225 -188.5q-13 -5 -25 -5q-27 0 -46 19t-19 45q0 39 39 59q56 29 76 44q74 54 115.5 135.5t41.5 173.5t-41.5 173.5
+t-115.5 135.5q-20 15 -76 44q-39 20 -39 59q0 26 19 45t45 19q13 0 26 -5q140 -59 225 -188.5t85 -282.5zM1664 640q0 -230 -127 -422.5t-338 -283.5q-13 -5 -26 -5q-26 0 -45 19t-19 45q0 36 39 59q7 4 22.5 10.5t22.5 10.5q46 25 82 51q123 91 192 227t69 289t-69 289
+t-192 227q-36 26 -82 51q-7 4 -22.5 10.5t-22.5 10.5q-39 23 -39 59q0 26 19 45t45 19q13 0 26 -5q211 -91 338 -283.5t127 -422.5z" />
+    <glyph glyph-name="qrcode" unicode="&#xf029;" horiz-adv-x="1408" 
+d="M384 384v-128h-128v128h128zM384 1152v-128h-128v128h128zM1152 1152v-128h-128v128h128zM128 129h384v383h-384v-383zM128 896h384v384h-384v-384zM896 896h384v384h-384v-384zM640 640v-640h-640v640h640zM1152 128v-128h-128v128h128zM1408 128v-128h-128v128h128z
+M1408 640v-384h-384v128h-128v-384h-128v640h384v-128h128v128h128zM640 1408v-640h-640v640h640zM1408 1408v-640h-640v640h640z" />
+    <glyph glyph-name="barcode" unicode="&#xf02a;" horiz-adv-x="1792" 
+d="M63 0h-63v1408h63v-1408zM126 1h-32v1407h32v-1407zM220 1h-31v1407h31v-1407zM377 1h-31v1407h31v-1407zM534 1h-62v1407h62v-1407zM660 1h-31v1407h31v-1407zM723 1h-31v1407h31v-1407zM786 1h-31v1407h31v-1407zM943 1h-63v1407h63v-1407zM1100 1h-63v1407h63v-1407z
+M1226 1h-63v1407h63v-1407zM1352 1h-63v1407h63v-1407zM1446 1h-63v1407h63v-1407zM1635 1h-94v1407h94v-1407zM1698 1h-32v1407h32v-1407zM1792 0h-63v1408h63v-1408z" />
+    <glyph glyph-name="tag" unicode="&#xf02b;" 
+d="M448 1088q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1515 512q0 -53 -37 -90l-491 -492q-39 -37 -91 -37q-53 0 -90 37l-715 716q-38 37 -64.5 101t-26.5 117v416q0 52 38 90t90 38h416q53 0 117 -26.5t102 -64.5
+l715 -714q37 -39 37 -91z" />
+    <glyph glyph-name="tags" unicode="&#xf02c;" horiz-adv-x="1920" 
+d="M448 1088q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1515 512q0 -53 -37 -90l-491 -492q-39 -37 -91 -37q-53 0 -90 37l-715 716q-38 37 -64.5 101t-26.5 117v416q0 52 38 90t90 38h416q53 0 117 -26.5t102 -64.5
+l715 -714q37 -39 37 -91zM1899 512q0 -53 -37 -90l-491 -492q-39 -37 -91 -37q-36 0 -59 14t-53 45l470 470q37 37 37 90q0 52 -37 91l-715 714q-38 38 -102 64.5t-117 26.5h224q53 0 117 -26.5t102 -64.5l715 -714q37 -39 37 -91z" />
+    <glyph glyph-name="book" unicode="&#xf02d;" horiz-adv-x="1664" 
+d="M1639 1058q40 -57 18 -129l-275 -906q-19 -64 -76.5 -107.5t-122.5 -43.5h-923q-77 0 -148.5 53.5t-99.5 131.5q-24 67 -2 127q0 4 3 27t4 37q1 8 -3 21.5t-3 19.5q2 11 8 21t16.5 23.5t16.5 23.5q23 38 45 91.5t30 91.5q3 10 0.5 30t-0.5 28q3 11 17 28t17 23
+q21 36 42 92t25 90q1 9 -2.5 32t0.5 28q4 13 22 30.5t22 22.5q19 26 42.5 84.5t27.5 96.5q1 8 -3 25.5t-2 26.5q2 8 9 18t18 23t17 21q8 12 16.5 30.5t15 35t16 36t19.5 32t26.5 23.5t36 11.5t47.5 -5.5l-1 -3q38 9 51 9h761q74 0 114 -56t18 -130l-274 -906
+q-36 -119 -71.5 -153.5t-128.5 -34.5h-869q-27 0 -38 -15q-11 -16 -1 -43q24 -70 144 -70h923q29 0 56 15.5t35 41.5l300 987q7 22 5 57q38 -15 59 -43zM575 1056q-4 -13 2 -22.5t20 -9.5h608q13 0 25.5 9.5t16.5 22.5l21 64q4 13 -2 22.5t-20 9.5h-608q-13 0 -25.5 -9.5
+t-16.5 -22.5zM492 800q-4 -13 2 -22.5t20 -9.5h608q13 0 25.5 9.5t16.5 22.5l21 64q4 13 -2 22.5t-20 9.5h-608q-13 0 -25.5 -9.5t-16.5 -22.5z" />
+    <glyph glyph-name="bookmark" unicode="&#xf02e;" horiz-adv-x="1280" 
+d="M1164 1408q23 0 44 -9q33 -13 52.5 -41t19.5 -62v-1289q0 -34 -19.5 -62t-52.5 -41q-19 -8 -44 -8q-48 0 -83 32l-441 424l-441 -424q-36 -33 -83 -33q-23 0 -44 9q-33 13 -52.5 41t-19.5 62v1289q0 34 19.5 62t52.5 41q21 9 44 9h1048z" />
+    <glyph glyph-name="print" unicode="&#xf02f;" horiz-adv-x="1664" 
+d="M384 0h896v256h-896v-256zM384 640h896v384h-160q-40 0 -68 28t-28 68v160h-640v-640zM1536 576q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1664 576v-416q0 -13 -9.5 -22.5t-22.5 -9.5h-224v-160q0 -40 -28 -68t-68 -28h-960q-40 0 -68 28t-28 68
+v160h-224q-13 0 -22.5 9.5t-9.5 22.5v416q0 79 56.5 135.5t135.5 56.5h64v544q0 40 28 68t68 28h672q40 0 88 -20t76 -48l152 -152q28 -28 48 -76t20 -88v-256h64q79 0 135.5 -56.5t56.5 -135.5z" />
+    <glyph glyph-name="camera" unicode="&#xf030;" horiz-adv-x="1920" 
+d="M960 864q119 0 203.5 -84.5t84.5 -203.5t-84.5 -203.5t-203.5 -84.5t-203.5 84.5t-84.5 203.5t84.5 203.5t203.5 84.5zM1664 1280q106 0 181 -75t75 -181v-896q0 -106 -75 -181t-181 -75h-1408q-106 0 -181 75t-75 181v896q0 106 75 181t181 75h224l51 136
+q19 49 69.5 84.5t103.5 35.5h512q53 0 103.5 -35.5t69.5 -84.5l51 -136h224zM960 128q185 0 316.5 131.5t131.5 316.5t-131.5 316.5t-316.5 131.5t-316.5 -131.5t-131.5 -316.5t131.5 -316.5t316.5 -131.5z" />
+    <glyph glyph-name="font" unicode="&#xf031;" horiz-adv-x="1664" 
+d="M725 977l-170 -450q33 0 136.5 -2t160.5 -2q19 0 57 2q-87 253 -184 452zM0 -128l2 79q23 7 56 12.5t57 10.5t49.5 14.5t44.5 29t31 50.5l237 616l280 724h75h53q8 -14 11 -21l205 -480q33 -78 106 -257.5t114 -274.5q15 -34 58 -144.5t72 -168.5q20 -45 35 -57
+q19 -15 88 -29.5t84 -20.5q6 -38 6 -57q0 -5 -0.5 -13.5t-0.5 -12.5q-63 0 -190 8t-191 8q-76 0 -215 -7t-178 -8q0 43 4 78l131 28q1 0 12.5 2.5t15.5 3.5t14.5 4.5t15 6.5t11 8t9 11t2.5 14q0 16 -31 96.5t-72 177.5t-42 100l-450 2q-26 -58 -76.5 -195.5t-50.5 -162.5
+q0 -22 14 -37.5t43.5 -24.5t48.5 -13.5t57 -8.5t41 -4q1 -19 1 -58q0 -9 -2 -27q-58 0 -174.5 10t-174.5 10q-8 0 -26.5 -4t-21.5 -4q-80 -14 -188 -14z" />
+    <glyph glyph-name="bold" unicode="&#xf032;" horiz-adv-x="1408" 
+d="M555 15q74 -32 140 -32q376 0 376 335q0 114 -41 180q-27 44 -61.5 74t-67.5 46.5t-80.5 25t-84 10.5t-94.5 2q-73 0 -101 -10q0 -53 -0.5 -159t-0.5 -158q0 -8 -1 -67.5t-0.5 -96.5t4.5 -83.5t12 -66.5zM541 761q42 -7 109 -7q82 0 143 13t110 44.5t74.5 89.5t25.5 142
+q0 70 -29 122.5t-79 82t-108 43.5t-124 14q-50 0 -130 -13q0 -50 4 -151t4 -152q0 -27 -0.5 -80t-0.5 -79q0 -46 1 -69zM0 -128l2 94q15 4 85 16t106 27q7 12 12.5 27t8.5 33.5t5.5 32.5t3 37.5t0.5 34v35.5v30q0 982 -22 1025q-4 8 -22 14.5t-44.5 11t-49.5 7t-48.5 4.5
+t-30.5 3l-4 83q98 2 340 11.5t373 9.5q23 0 68 -0.5t68 -0.5q70 0 136.5 -13t128.5 -42t108 -71t74 -104.5t28 -137.5q0 -52 -16.5 -95.5t-39 -72t-64.5 -57.5t-73 -45t-84 -40q154 -35 256.5 -134t102.5 -248q0 -100 -35 -179.5t-93.5 -130.5t-138 -85.5t-163.5 -48.5
+t-176 -14q-44 0 -132 3t-132 3q-106 0 -307 -11t-231 -12z" />
+    <glyph glyph-name="italic" unicode="&#xf033;" horiz-adv-x="1024" 
+d="M0 -126l17 85q22 7 61.5 16.5t72 19t59.5 23.5q28 35 41 101q1 7 62 289t114 543.5t52 296.5v25q-24 13 -54.5 18.5t-69.5 8t-58 5.5l19 103q33 -2 120 -6.5t149.5 -7t120.5 -2.5q48 0 98.5 2.5t121 7t98.5 6.5q-5 -39 -19 -89q-30 -10 -101.5 -28.5t-108.5 -33.5
+q-8 -19 -14 -42.5t-9 -40t-7.5 -45.5t-6.5 -42q-27 -148 -87.5 -419.5t-77.5 -355.5q-2 -9 -13 -58t-20 -90t-16 -83.5t-6 -57.5l1 -18q17 -4 185 -31q-3 -44 -16 -99q-11 0 -32.5 -1.5t-32.5 -1.5q-29 0 -87 10t-86 10q-138 2 -206 2q-51 0 -143 -9t-121 -11z" />
+    <glyph glyph-name="text_height" unicode="&#xf034;" horiz-adv-x="1792" 
+d="M1744 128q33 0 42 -18.5t-11 -44.5l-126 -162q-20 -26 -49 -26t-49 26l-126 162q-20 26 -11 44.5t42 18.5h80v1024h-80q-33 0 -42 18.5t11 44.5l126 162q20 26 49 26t49 -26l126 -162q20 -26 11 -44.5t-42 -18.5h-80v-1024h80zM81 1407l54 -27q12 -5 211 -5q44 0 132 2
+t132 2q36 0 107.5 -0.5t107.5 -0.5h293q6 0 21 -0.5t20.5 0t16 3t17.5 9t15 17.5l42 1q4 0 14 -0.5t14 -0.5q2 -112 2 -336q0 -80 -5 -109q-39 -14 -68 -18q-25 44 -54 128q-3 9 -11 48t-14.5 73.5t-7.5 35.5q-6 8 -12 12.5t-15.5 6t-13 2.5t-18 0.5t-16.5 -0.5
+q-17 0 -66.5 0.5t-74.5 0.5t-64 -2t-71 -6q-9 -81 -8 -136q0 -94 2 -388t2 -455q0 -16 -2.5 -71.5t0 -91.5t12.5 -69q40 -21 124 -42.5t120 -37.5q5 -40 5 -50q0 -14 -3 -29l-34 -1q-76 -2 -218 8t-207 10q-50 0 -151 -9t-152 -9q-3 51 -3 52v9q17 27 61.5 43t98.5 29t78 27
+q19 42 19 383q0 101 -3 303t-3 303v117q0 2 0.5 15.5t0.5 25t-1 25.5t-3 24t-5 14q-11 12 -162 12q-33 0 -93 -12t-80 -26q-19 -13 -34 -72.5t-31.5 -111t-42.5 -53.5q-42 26 -56 44v383z" />
+    <glyph glyph-name="text_width" unicode="&#xf035;" 
+d="M81 1407l54 -27q12 -5 211 -5q44 0 132 2t132 2q70 0 246.5 1t304.5 0.5t247 -4.5q33 -1 56 31l42 1q4 0 14 -0.5t14 -0.5q2 -112 2 -336q0 -80 -5 -109q-39 -14 -68 -18q-25 44 -54 128q-3 9 -11 47.5t-15 73.5t-7 36q-10 13 -27 19q-5 2 -66 2q-30 0 -93 1t-103 1
+t-94 -2t-96 -7q-9 -81 -8 -136l1 -152v52q0 -55 1 -154t1.5 -180t0.5 -153q0 -16 -2.5 -71.5t0 -91.5t12.5 -69q40 -21 124 -42.5t120 -37.5q5 -40 5 -50q0 -14 -3 -29l-34 -1q-76 -2 -218 8t-207 10q-50 0 -151 -9t-152 -9q-3 51 -3 52v9q17 27 61.5 43t98.5 29t78 27
+q7 16 11.5 74t6 145.5t1.5 155t-0.5 153.5t-0.5 89q0 7 -2.5 21.5t-2.5 22.5q0 7 0.5 44t1 73t0 76.5t-3 67.5t-6.5 32q-11 12 -162 12q-41 0 -163 -13.5t-138 -24.5q-19 -12 -34 -71.5t-31.5 -111.5t-42.5 -54q-42 26 -56 44v383zM1310 125q12 0 42 -19.5t57.5 -41.5
+t59.5 -49t36 -30q26 -21 26 -49t-26 -49q-4 -3 -36 -30t-59.5 -49t-57.5 -41.5t-42 -19.5q-13 0 -20.5 10.5t-10 28.5t-2.5 33.5t1.5 33t1.5 19.5h-1024q0 -2 1.5 -19.5t1.5 -33t-2.5 -33.5t-10 -28.5t-20.5 -10.5q-12 0 -42 19.5t-57.5 41.5t-59.5 49t-36 30q-26 21 -26 49
+t26 49q4 3 36 30t59.5 49t57.5 41.5t42 19.5q13 0 20.5 -10.5t10 -28.5t2.5 -33.5t-1.5 -33t-1.5 -19.5h1024q0 2 -1.5 19.5t-1.5 33t2.5 33.5t10 28.5t20.5 10.5z" />
+    <glyph glyph-name="align_left" unicode="&#xf036;" horiz-adv-x="1792" 
+d="M1792 192v-128q0 -26 -19 -45t-45 -19h-1664q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1664q26 0 45 -19t19 -45zM1408 576v-128q0 -26 -19 -45t-45 -19h-1280q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1280q26 0 45 -19t19 -45zM1664 960v-128q0 -26 -19 -45
+t-45 -19h-1536q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1536q26 0 45 -19t19 -45zM1280 1344v-128q0 -26 -19 -45t-45 -19h-1152q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1152q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="align_center" unicode="&#xf037;" horiz-adv-x="1792" 
+d="M1792 192v-128q0 -26 -19 -45t-45 -19h-1664q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1664q26 0 45 -19t19 -45zM1408 576v-128q0 -26 -19 -45t-45 -19h-896q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h896q26 0 45 -19t19 -45zM1664 960v-128q0 -26 -19 -45t-45 -19
+h-1408q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1408q26 0 45 -19t19 -45zM1280 1344v-128q0 -26 -19 -45t-45 -19h-640q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h640q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="align_right" unicode="&#xf038;" horiz-adv-x="1792" 
+d="M1792 192v-128q0 -26 -19 -45t-45 -19h-1664q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1664q26 0 45 -19t19 -45zM1792 576v-128q0 -26 -19 -45t-45 -19h-1280q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1280q26 0 45 -19t19 -45zM1792 960v-128q0 -26 -19 -45
+t-45 -19h-1536q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1536q26 0 45 -19t19 -45zM1792 1344v-128q0 -26 -19 -45t-45 -19h-1152q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1152q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="align_justify" unicode="&#xf039;" horiz-adv-x="1792" 
+d="M1792 192v-128q0 -26 -19 -45t-45 -19h-1664q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1664q26 0 45 -19t19 -45zM1792 576v-128q0 -26 -19 -45t-45 -19h-1664q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1664q26 0 45 -19t19 -45zM1792 960v-128q0 -26 -19 -45
+t-45 -19h-1664q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1664q26 0 45 -19t19 -45zM1792 1344v-128q0 -26 -19 -45t-45 -19h-1664q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1664q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="list" unicode="&#xf03a;" horiz-adv-x="1792" 
+d="M256 224v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-192q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h192q13 0 22.5 -9.5t9.5 -22.5zM256 608v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-192q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h192q13 0 22.5 -9.5
+t9.5 -22.5zM256 992v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-192q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h192q13 0 22.5 -9.5t9.5 -22.5zM1792 224v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1344q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1344
+q13 0 22.5 -9.5t9.5 -22.5zM256 1376v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-192q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h192q13 0 22.5 -9.5t9.5 -22.5zM1792 608v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1344q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5
+t22.5 9.5h1344q13 0 22.5 -9.5t9.5 -22.5zM1792 992v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1344q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1344q13 0 22.5 -9.5t9.5 -22.5zM1792 1376v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1344q-13 0 -22.5 9.5t-9.5 22.5v192
+q0 13 9.5 22.5t22.5 9.5h1344q13 0 22.5 -9.5t9.5 -22.5z" />
+    <glyph glyph-name="indent_left" unicode="&#xf03b;" horiz-adv-x="1792" 
+d="M384 992v-576q0 -13 -9.5 -22.5t-22.5 -9.5q-14 0 -23 9l-288 288q-9 9 -9 23t9 23l288 288q9 9 23 9q13 0 22.5 -9.5t9.5 -22.5zM1792 224v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1728q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1728q13 0 22.5 -9.5
+t9.5 -22.5zM1792 608v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1088q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1088q13 0 22.5 -9.5t9.5 -22.5zM1792 992v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1088q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1088
+q13 0 22.5 -9.5t9.5 -22.5zM1792 1376v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1728q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1728q13 0 22.5 -9.5t9.5 -22.5z" />
+    <glyph glyph-name="indent_right" unicode="&#xf03c;" horiz-adv-x="1792" 
+d="M352 704q0 -14 -9 -23l-288 -288q-9 -9 -23 -9q-13 0 -22.5 9.5t-9.5 22.5v576q0 13 9.5 22.5t22.5 9.5q14 0 23 -9l288 -288q9 -9 9 -23zM1792 224v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1728q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1728q13 0 22.5 -9.5
+t9.5 -22.5zM1792 608v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1088q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1088q13 0 22.5 -9.5t9.5 -22.5zM1792 992v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1088q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1088
+q13 0 22.5 -9.5t9.5 -22.5zM1792 1376v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1728q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1728q13 0 22.5 -9.5t9.5 -22.5z" />
+    <glyph glyph-name="facetime_video" unicode="&#xf03d;" horiz-adv-x="1792" 
+d="M1792 1184v-1088q0 -42 -39 -59q-13 -5 -25 -5q-27 0 -45 19l-403 403v-166q0 -119 -84.5 -203.5t-203.5 -84.5h-704q-119 0 -203.5 84.5t-84.5 203.5v704q0 119 84.5 203.5t203.5 84.5h704q119 0 203.5 -84.5t84.5 -203.5v-165l403 402q18 19 45 19q12 0 25 -5
+q39 -17 39 -59z" />
+    <glyph glyph-name="picture" unicode="&#xf03e;" horiz-adv-x="1920" 
+d="M640 960q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM1664 576v-448h-1408v192l320 320l160 -160l512 512zM1760 1280h-1600q-13 0 -22.5 -9.5t-9.5 -22.5v-1216q0 -13 9.5 -22.5t22.5 -9.5h1600q13 0 22.5 9.5t9.5 22.5v1216
+q0 13 -9.5 22.5t-22.5 9.5zM1920 1248v-1216q0 -66 -47 -113t-113 -47h-1600q-66 0 -113 47t-47 113v1216q0 66 47 113t113 47h1600q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="pencil" unicode="&#xf040;" 
+d="M363 0l91 91l-235 235l-91 -91v-107h128v-128h107zM886 928q0 22 -22 22q-10 0 -17 -7l-542 -542q-7 -7 -7 -17q0 -22 22 -22q10 0 17 7l542 542q7 7 7 17zM832 1120l416 -416l-832 -832h-416v416zM1515 1024q0 -53 -37 -90l-166 -166l-416 416l166 165q36 38 90 38
+q53 0 91 -38l235 -234q37 -39 37 -91z" />
+    <glyph glyph-name="map_marker" unicode="&#xf041;" horiz-adv-x="1024" 
+d="M768 896q0 106 -75 181t-181 75t-181 -75t-75 -181t75 -181t181 -75t181 75t75 181zM1024 896q0 -109 -33 -179l-364 -774q-16 -33 -47.5 -52t-67.5 -19t-67.5 19t-46.5 52l-365 774q-33 70 -33 179q0 212 150 362t362 150t362 -150t150 -362z" />
+    <glyph glyph-name="adjust" unicode="&#xf042;" 
+d="M768 96v1088q-148 0 -273 -73t-198 -198t-73 -273t73 -273t198 -198t273 -73zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="tint" unicode="&#xf043;" horiz-adv-x="1024" 
+d="M512 384q0 36 -20 69q-1 1 -15.5 22.5t-25.5 38t-25 44t-21 50.5q-4 16 -21 16t-21 -16q-7 -23 -21 -50.5t-25 -44t-25.5 -38t-15.5 -22.5q-20 -33 -20 -69q0 -53 37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1024 512q0 -212 -150 -362t-362 -150t-362 150t-150 362
+q0 145 81 275q6 9 62.5 90.5t101 151t99.5 178t83 201.5q9 30 34 47t51 17t51.5 -17t33.5 -47q28 -93 83 -201.5t99.5 -178t101 -151t62.5 -90.5q81 -127 81 -275z" />
+    <glyph glyph-name="edit" unicode="&#xf044;" horiz-adv-x="1792" 
+d="M888 352l116 116l-152 152l-116 -116v-56h96v-96h56zM1328 1072q-16 16 -33 -1l-350 -350q-17 -17 -1 -33t33 1l350 350q17 17 1 33zM1408 478v-190q0 -119 -84.5 -203.5t-203.5 -84.5h-832q-119 0 -203.5 84.5t-84.5 203.5v832q0 119 84.5 203.5t203.5 84.5h832
+q63 0 117 -25q15 -7 18 -23q3 -17 -9 -29l-49 -49q-14 -14 -32 -8q-23 6 -45 6h-832q-66 0 -113 -47t-47 -113v-832q0 -66 47 -113t113 -47h832q66 0 113 47t47 113v126q0 13 9 22l64 64q15 15 35 7t20 -29zM1312 1216l288 -288l-672 -672h-288v288zM1756 1084l-92 -92
+l-288 288l92 92q28 28 68 28t68 -28l152 -152q28 -28 28 -68t-28 -68z" />
+    <glyph glyph-name="share" unicode="&#xf045;" horiz-adv-x="1664" 
+d="M1408 547v-259q0 -119 -84.5 -203.5t-203.5 -84.5h-832q-119 0 -203.5 84.5t-84.5 203.5v832q0 119 84.5 203.5t203.5 84.5h255v0q13 0 22.5 -9.5t9.5 -22.5q0 -27 -26 -32q-77 -26 -133 -60q-10 -4 -16 -4h-112q-66 0 -113 -47t-47 -113v-832q0 -66 47 -113t113 -47h832
+q66 0 113 47t47 113v214q0 19 18 29q28 13 54 37q16 16 35 8q21 -9 21 -29zM1645 1043l-384 -384q-18 -19 -45 -19q-12 0 -25 5q-39 17 -39 59v192h-160q-323 0 -438 -131q-119 -137 -74 -473q3 -23 -20 -34q-8 -2 -12 -2q-16 0 -26 13q-10 14 -21 31t-39.5 68.5t-49.5 99.5
+t-38.5 114t-17.5 122q0 49 3.5 91t14 90t28 88t47 81.5t68.5 74t94.5 61.5t124.5 48.5t159.5 30.5t196.5 11h160v192q0 42 39 59q13 5 25 5q26 0 45 -19l384 -384q19 -19 19 -45t-19 -45z" />
+    <glyph glyph-name="check" unicode="&#xf046;" horiz-adv-x="1664" 
+d="M1408 606v-318q0 -119 -84.5 -203.5t-203.5 -84.5h-832q-119 0 -203.5 84.5t-84.5 203.5v832q0 119 84.5 203.5t203.5 84.5h832q63 0 117 -25q15 -7 18 -23q3 -17 -9 -29l-49 -49q-10 -10 -23 -10q-3 0 -9 2q-23 6 -45 6h-832q-66 0 -113 -47t-47 -113v-832
+q0 -66 47 -113t113 -47h832q66 0 113 47t47 113v254q0 13 9 22l64 64q10 10 23 10q6 0 12 -3q20 -8 20 -29zM1639 1095l-814 -814q-24 -24 -57 -24t-57 24l-430 430q-24 24 -24 57t24 57l110 110q24 24 57 24t57 -24l263 -263l647 647q24 24 57 24t57 -24l110 -110
+q24 -24 24 -57t-24 -57z" />
+    <glyph glyph-name="move" unicode="&#xf047;" horiz-adv-x="1792" 
+d="M1792 640q0 -26 -19 -45l-256 -256q-19 -19 -45 -19t-45 19t-19 45v128h-384v-384h128q26 0 45 -19t19 -45t-19 -45l-256 -256q-19 -19 -45 -19t-45 19l-256 256q-19 19 -19 45t19 45t45 19h128v384h-384v-128q0 -26 -19 -45t-45 -19t-45 19l-256 256q-19 19 -19 45
+t19 45l256 256q19 19 45 19t45 -19t19 -45v-128h384v384h-128q-26 0 -45 19t-19 45t19 45l256 256q19 19 45 19t45 -19l256 -256q19 -19 19 -45t-19 -45t-45 -19h-128v-384h384v128q0 26 19 45t45 19t45 -19l256 -256q19 -19 19 -45z" />
+    <glyph glyph-name="step_backward" unicode="&#xf048;" horiz-adv-x="1024" 
+d="M979 1395q19 19 32 13t13 -32v-1472q0 -26 -13 -32t-32 13l-710 710q-9 9 -13 19v-678q0 -26 -19 -45t-45 -19h-128q-26 0 -45 19t-19 45v1408q0 26 19 45t45 19h128q26 0 45 -19t19 -45v-678q4 10 13 19z" />
+    <glyph glyph-name="fast_backward" unicode="&#xf049;" horiz-adv-x="1792" 
+d="M1747 1395q19 19 32 13t13 -32v-1472q0 -26 -13 -32t-32 13l-710 710q-9 9 -13 19v-710q0 -26 -13 -32t-32 13l-710 710q-9 9 -13 19v-678q0 -26 -19 -45t-45 -19h-128q-26 0 -45 19t-19 45v1408q0 26 19 45t45 19h128q26 0 45 -19t19 -45v-678q4 10 13 19l710 710
+q19 19 32 13t13 -32v-710q4 10 13 19z" />
+    <glyph glyph-name="backward" unicode="&#xf04a;" horiz-adv-x="1664" 
+d="M1619 1395q19 19 32 13t13 -32v-1472q0 -26 -13 -32t-32 13l-710 710q-9 9 -13 19v-710q0 -26 -13 -32t-32 13l-710 710q-19 19 -19 45t19 45l710 710q19 19 32 13t13 -32v-710q4 10 13 19z" />
+    <glyph glyph-name="play" unicode="&#xf04b;" horiz-adv-x="1408" 
+d="M1384 609l-1328 -738q-23 -13 -39.5 -3t-16.5 36v1472q0 26 16.5 36t39.5 -3l1328 -738q23 -13 23 -31t-23 -31z" />
+    <glyph glyph-name="pause" unicode="&#xf04c;" 
+d="M1536 1344v-1408q0 -26 -19 -45t-45 -19h-512q-26 0 -45 19t-19 45v1408q0 26 19 45t45 19h512q26 0 45 -19t19 -45zM640 1344v-1408q0 -26 -19 -45t-45 -19h-512q-26 0 -45 19t-19 45v1408q0 26 19 45t45 19h512q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="stop" unicode="&#xf04d;" 
+d="M1536 1344v-1408q0 -26 -19 -45t-45 -19h-1408q-26 0 -45 19t-19 45v1408q0 26 19 45t45 19h1408q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="forward" unicode="&#xf04e;" horiz-adv-x="1664" 
+d="M45 -115q-19 -19 -32 -13t-13 32v1472q0 26 13 32t32 -13l710 -710q9 -9 13 -19v710q0 26 13 32t32 -13l710 -710q19 -19 19 -45t-19 -45l-710 -710q-19 -19 -32 -13t-13 32v710q-4 -10 -13 -19z" />
+    <glyph glyph-name="fast_forward" unicode="&#xf050;" horiz-adv-x="1792" 
+d="M45 -115q-19 -19 -32 -13t-13 32v1472q0 26 13 32t32 -13l710 -710q9 -9 13 -19v710q0 26 13 32t32 -13l710 -710q9 -9 13 -19v678q0 26 19 45t45 19h128q26 0 45 -19t19 -45v-1408q0 -26 -19 -45t-45 -19h-128q-26 0 -45 19t-19 45v678q-4 -10 -13 -19l-710 -710
+q-19 -19 -32 -13t-13 32v710q-4 -10 -13 -19z" />
+    <glyph glyph-name="step_forward" unicode="&#xf051;" horiz-adv-x="1024" 
+d="M45 -115q-19 -19 -32 -13t-13 32v1472q0 26 13 32t32 -13l710 -710q9 -9 13 -19v678q0 26 19 45t45 19h128q26 0 45 -19t19 -45v-1408q0 -26 -19 -45t-45 -19h-128q-26 0 -45 19t-19 45v678q-4 -10 -13 -19z" />
+    <glyph glyph-name="eject" unicode="&#xf052;" horiz-adv-x="1538" 
+d="M14 557l710 710q19 19 45 19t45 -19l710 -710q19 -19 13 -32t-32 -13h-1472q-26 0 -32 13t13 32zM1473 0h-1408q-26 0 -45 19t-19 45v256q0 26 19 45t45 19h1408q26 0 45 -19t19 -45v-256q0 -26 -19 -45t-45 -19z" />
+    <glyph glyph-name="chevron_left" unicode="&#xf053;" horiz-adv-x="1280" 
+d="M1171 1235l-531 -531l531 -531q19 -19 19 -45t-19 -45l-166 -166q-19 -19 -45 -19t-45 19l-742 742q-19 19 -19 45t19 45l742 742q19 19 45 19t45 -19l166 -166q19 -19 19 -45t-19 -45z" />
+    <glyph glyph-name="chevron_right" unicode="&#xf054;" horiz-adv-x="1280" 
+d="M1107 659l-742 -742q-19 -19 -45 -19t-45 19l-166 166q-19 19 -19 45t19 45l531 531l-531 531q-19 19 -19 45t19 45l166 166q19 19 45 19t45 -19l742 -742q19 -19 19 -45t-19 -45z" />
+    <glyph glyph-name="plus_sign" unicode="&#xf055;" 
+d="M1216 576v128q0 26 -19 45t-45 19h-256v256q0 26 -19 45t-45 19h-128q-26 0 -45 -19t-19 -45v-256h-256q-26 0 -45 -19t-19 -45v-128q0 -26 19 -45t45 -19h256v-256q0 -26 19 -45t45 -19h128q26 0 45 19t19 45v256h256q26 0 45 19t19 45zM1536 640q0 -209 -103 -385.5
+t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="minus_sign" unicode="&#xf056;" 
+d="M1216 576v128q0 26 -19 45t-45 19h-768q-26 0 -45 -19t-19 -45v-128q0 -26 19 -45t45 -19h768q26 0 45 19t19 45zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5
+t103 -385.5z" />
+    <glyph glyph-name="remove_sign" unicode="&#xf057;" 
+d="M1149 414q0 26 -19 45l-181 181l181 181q19 19 19 45q0 27 -19 46l-90 90q-19 19 -46 19q-26 0 -45 -19l-181 -181l-181 181q-19 19 -45 19q-27 0 -46 -19l-90 -90q-19 -19 -19 -46q0 -26 19 -45l181 -181l-181 -181q-19 -19 -19 -45q0 -27 19 -46l90 -90q19 -19 46 -19
+q26 0 45 19l181 181l181 -181q19 -19 45 -19q27 0 46 19l90 90q19 19 19 46zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="ok_sign" unicode="&#xf058;" 
+d="M1284 802q0 28 -18 46l-91 90q-19 19 -45 19t-45 -19l-408 -407l-226 226q-19 19 -45 19t-45 -19l-91 -90q-18 -18 -18 -46q0 -27 18 -45l362 -362q19 -19 45 -19q27 0 46 19l543 543q18 18 18 45zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103
+t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="question_sign" unicode="&#xf059;" 
+d="M896 160v192q0 14 -9 23t-23 9h-192q-14 0 -23 -9t-9 -23v-192q0 -14 9 -23t23 -9h192q14 0 23 9t9 23zM1152 832q0 88 -55.5 163t-138.5 116t-170 41q-243 0 -371 -213q-15 -24 8 -42l132 -100q7 -6 19 -6q16 0 25 12q53 68 86 92q34 24 86 24q48 0 85.5 -26t37.5 -59
+q0 -38 -20 -61t-68 -45q-63 -28 -115.5 -86.5t-52.5 -125.5v-36q0 -14 9 -23t23 -9h192q14 0 23 9t9 23q0 19 21.5 49.5t54.5 49.5q32 18 49 28.5t46 35t44.5 48t28 60.5t12.5 81zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5
+t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="info_sign" unicode="&#xf05a;" 
+d="M1024 160v160q0 14 -9 23t-23 9h-96v512q0 14 -9 23t-23 9h-320q-14 0 -23 -9t-9 -23v-160q0 -14 9 -23t23 -9h96v-320h-96q-14 0 -23 -9t-9 -23v-160q0 -14 9 -23t23 -9h448q14 0 23 9t9 23zM896 1056v160q0 14 -9 23t-23 9h-192q-14 0 -23 -9t-9 -23v-160q0 -14 9 -23
+t23 -9h192q14 0 23 9t9 23zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="screenshot" unicode="&#xf05b;" 
+d="M1197 512h-109q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h109q-32 108 -112.5 188.5t-188.5 112.5v-109q0 -26 -19 -45t-45 -19h-128q-26 0 -45 19t-19 45v109q-108 -32 -188.5 -112.5t-112.5 -188.5h109q26 0 45 -19t19 -45v-128q0 -26 -19 -45t-45 -19h-109
+q32 -108 112.5 -188.5t188.5 -112.5v109q0 26 19 45t45 19h128q26 0 45 -19t19 -45v-109q108 32 188.5 112.5t112.5 188.5zM1536 704v-128q0 -26 -19 -45t-45 -19h-143q-37 -161 -154.5 -278.5t-278.5 -154.5v-143q0 -26 -19 -45t-45 -19h-128q-26 0 -45 19t-19 45v143
+q-161 37 -278.5 154.5t-154.5 278.5h-143q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h143q37 161 154.5 278.5t278.5 154.5v143q0 26 19 45t45 19h128q26 0 45 -19t19 -45v-143q161 -37 278.5 -154.5t154.5 -278.5h143q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="remove_circle" unicode="&#xf05c;" 
+d="M1097 457l-146 -146q-10 -10 -23 -10t-23 10l-137 137l-137 -137q-10 -10 -23 -10t-23 10l-146 146q-10 10 -10 23t10 23l137 137l-137 137q-10 10 -10 23t10 23l146 146q10 10 23 10t23 -10l137 -137l137 137q10 10 23 10t23 -10l146 -146q10 -10 10 -23t-10 -23
+l-137 -137l137 -137q10 -10 10 -23t-10 -23zM1312 640q0 148 -73 273t-198 198t-273 73t-273 -73t-198 -198t-73 -273t73 -273t198 -198t273 -73t273 73t198 198t73 273zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5
+t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="ok_circle" unicode="&#xf05d;" 
+d="M1171 723l-422 -422q-19 -19 -45 -19t-45 19l-294 294q-19 19 -19 45t19 45l102 102q19 19 45 19t45 -19l147 -147l275 275q19 19 45 19t45 -19l102 -102q19 -19 19 -45t-19 -45zM1312 640q0 148 -73 273t-198 198t-273 73t-273 -73t-198 -198t-73 -273t73 -273t198 -198
+t273 -73t273 73t198 198t73 273zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="ban_circle" unicode="&#xf05e;" 
+d="M1312 643q0 161 -87 295l-754 -753q137 -89 297 -89q111 0 211.5 43.5t173.5 116.5t116 174.5t43 212.5zM313 344l755 754q-135 91 -300 91q-148 0 -273 -73t-198 -199t-73 -274q0 -162 89 -299zM1536 643q0 -157 -61 -300t-163.5 -246t-245 -164t-298.5 -61t-298.5 61
+t-245 164t-163.5 246t-61 300t61 299.5t163.5 245.5t245 164t298.5 61t298.5 -61t245 -164t163.5 -245.5t61 -299.5z" />
+    <glyph glyph-name="arrow_left" unicode="&#xf060;" 
+d="M1536 640v-128q0 -53 -32.5 -90.5t-84.5 -37.5h-704l293 -294q38 -36 38 -90t-38 -90l-75 -76q-37 -37 -90 -37q-52 0 -91 37l-651 652q-37 37 -37 90q0 52 37 91l651 650q38 38 91 38q52 0 90 -38l75 -74q38 -38 38 -91t-38 -91l-293 -293h704q52 0 84.5 -37.5
+t32.5 -90.5z" />
+    <glyph glyph-name="arrow_right" unicode="&#xf061;" 
+d="M1472 576q0 -54 -37 -91l-651 -651q-39 -37 -91 -37q-51 0 -90 37l-75 75q-38 38 -38 91t38 91l293 293h-704q-52 0 -84.5 37.5t-32.5 90.5v128q0 53 32.5 90.5t84.5 37.5h704l-293 294q-38 36 -38 90t38 90l75 75q38 38 90 38q53 0 91 -38l651 -651q37 -35 37 -90z" />
+    <glyph glyph-name="arrow_up" unicode="&#xf062;" horiz-adv-x="1664" 
+d="M1611 565q0 -51 -37 -90l-75 -75q-38 -38 -91 -38q-54 0 -90 38l-294 293v-704q0 -52 -37.5 -84.5t-90.5 -32.5h-128q-53 0 -90.5 32.5t-37.5 84.5v704l-294 -293q-36 -38 -90 -38t-90 38l-75 75q-38 38 -38 90q0 53 38 91l651 651q35 37 90 37q54 0 91 -37l651 -651
+q37 -39 37 -91z" />
+    <glyph glyph-name="arrow_down" unicode="&#xf063;" horiz-adv-x="1664" 
+d="M1611 704q0 -53 -37 -90l-651 -652q-39 -37 -91 -37q-53 0 -90 37l-651 652q-38 36 -38 90q0 53 38 91l74 75q39 37 91 37q53 0 90 -37l294 -294v704q0 52 38 90t90 38h128q52 0 90 -38t38 -90v-704l294 294q37 37 90 37q52 0 91 -37l75 -75q37 -39 37 -91z" />
+    <glyph glyph-name="share_alt" unicode="&#xf064;" horiz-adv-x="1792" 
+d="M1792 896q0 -26 -19 -45l-512 -512q-19 -19 -45 -19t-45 19t-19 45v256h-224q-98 0 -175.5 -6t-154 -21.5t-133 -42.5t-105.5 -69.5t-80 -101t-48.5 -138.5t-17.5 -181q0 -55 5 -123q0 -6 2.5 -23.5t2.5 -26.5q0 -15 -8.5 -25t-23.5 -10q-16 0 -28 17q-7 9 -13 22
+t-13.5 30t-10.5 24q-127 285 -127 451q0 199 53 333q162 403 875 403h224v256q0 26 19 45t45 19t45 -19l512 -512q19 -19 19 -45z" />
+    <glyph glyph-name="resize_full" unicode="&#xf065;" 
+d="M755 480q0 -13 -10 -23l-332 -332l144 -144q19 -19 19 -45t-19 -45t-45 -19h-448q-26 0 -45 19t-19 45v448q0 26 19 45t45 19t45 -19l144 -144l332 332q10 10 23 10t23 -10l114 -114q10 -10 10 -23zM1536 1344v-448q0 -26 -19 -45t-45 -19t-45 19l-144 144l-332 -332
+q-10 -10 -23 -10t-23 10l-114 114q-10 10 -10 23t10 23l332 332l-144 144q-19 19 -19 45t19 45t45 19h448q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="resize_small" unicode="&#xf066;" 
+d="M768 576v-448q0 -26 -19 -45t-45 -19t-45 19l-144 144l-332 -332q-10 -10 -23 -10t-23 10l-114 114q-10 10 -10 23t10 23l332 332l-144 144q-19 19 -19 45t19 45t45 19h448q26 0 45 -19t19 -45zM1523 1248q0 -13 -10 -23l-332 -332l144 -144q19 -19 19 -45t-19 -45
+t-45 -19h-448q-26 0 -45 19t-19 45v448q0 26 19 45t45 19t45 -19l144 -144l332 332q10 10 23 10t23 -10l114 -114q10 -10 10 -23z" />
+    <glyph glyph-name="plus" unicode="&#xf067;" horiz-adv-x="1408" 
+d="M1408 800v-192q0 -40 -28 -68t-68 -28h-416v-416q0 -40 -28 -68t-68 -28h-192q-40 0 -68 28t-28 68v416h-416q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h416v416q0 40 28 68t68 28h192q40 0 68 -28t28 -68v-416h416q40 0 68 -28t28 -68z" />
+    <glyph glyph-name="minus" unicode="&#xf068;" horiz-adv-x="1408" 
+d="M1408 800v-192q0 -40 -28 -68t-68 -28h-1216q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h1216q40 0 68 -28t28 -68z" />
+    <glyph glyph-name="asterisk" unicode="&#xf069;" horiz-adv-x="1664" 
+d="M1482 486q46 -26 59.5 -77.5t-12.5 -97.5l-64 -110q-26 -46 -77.5 -59.5t-97.5 12.5l-266 153v-307q0 -52 -38 -90t-90 -38h-128q-52 0 -90 38t-38 90v307l-266 -153q-46 -26 -97.5 -12.5t-77.5 59.5l-64 110q-26 46 -12.5 97.5t59.5 77.5l266 154l-266 154
+q-46 26 -59.5 77.5t12.5 97.5l64 110q26 46 77.5 59.5t97.5 -12.5l266 -153v307q0 52 38 90t90 38h128q52 0 90 -38t38 -90v-307l266 153q46 26 97.5 12.5t77.5 -59.5l64 -110q26 -46 12.5 -97.5t-59.5 -77.5l-266 -154z" />
+    <glyph glyph-name="exclamation_sign" unicode="&#xf06a;" 
+d="M768 1408q209 0 385.5 -103t279.5 -279.5t103 -385.5t-103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103zM896 161v190q0 14 -9 23.5t-22 9.5h-192q-13 0 -23 -10t-10 -23v-190q0 -13 10 -23t23 -10h192
+q13 0 22 9.5t9 23.5zM894 505l18 621q0 12 -10 18q-10 8 -24 8h-220q-14 0 -24 -8q-10 -6 -10 -18l17 -621q0 -10 10 -17.5t24 -7.5h185q14 0 23.5 7.5t10.5 17.5z" />
+    <glyph glyph-name="gift" unicode="&#xf06b;" 
+d="M928 180v56v468v192h-320v-192v-468v-56q0 -25 18 -38.5t46 -13.5h192q28 0 46 13.5t18 38.5zM472 1024h195l-126 161q-26 31 -69 31q-40 0 -68 -28t-28 -68t28 -68t68 -28zM1160 1120q0 40 -28 68t-68 28q-43 0 -69 -31l-125 -161h194q40 0 68 28t28 68zM1536 864v-320
+q0 -14 -9 -23t-23 -9h-96v-416q0 -40 -28 -68t-68 -28h-1088q-40 0 -68 28t-28 68v416h-96q-14 0 -23 9t-9 23v320q0 14 9 23t23 9h440q-93 0 -158.5 65.5t-65.5 158.5t65.5 158.5t158.5 65.5q107 0 168 -77l128 -165l128 165q61 77 168 77q93 0 158.5 -65.5t65.5 -158.5
+t-65.5 -158.5t-158.5 -65.5h440q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="leaf" unicode="&#xf06c;" horiz-adv-x="1792" 
+d="M1280 832q0 26 -19 45t-45 19q-172 0 -318 -49.5t-259.5 -134t-235.5 -219.5q-19 -21 -19 -45q0 -26 19 -45t45 -19q24 0 45 19q27 24 74 71t67 66q137 124 268.5 176t313.5 52q26 0 45 19t19 45zM1792 1030q0 -95 -20 -193q-46 -224 -184.5 -383t-357.5 -268
+q-214 -108 -438 -108q-148 0 -286 47q-15 5 -88 42t-96 37q-16 0 -39.5 -32t-45 -70t-52.5 -70t-60 -32q-43 0 -63.5 17.5t-45.5 59.5q-2 4 -6 11t-5.5 10t-3 9.5t-1.5 13.5q0 35 31 73.5t68 65.5t68 56t31 48q0 4 -14 38t-16 44q-9 51 -9 104q0 115 43.5 220t119 184.5
+t170.5 139t204 95.5q55 18 145 25.5t179.5 9t178.5 6t163.5 24t113.5 56.5l29.5 29.5t29.5 28t27 20t36.5 16t43.5 4.5q39 0 70.5 -46t47.5 -112t24 -124t8 -96z" />
+    <glyph glyph-name="fire" unicode="&#xf06d;" horiz-adv-x="1408" 
+d="M1408 -160v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-1344q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h1344q13 0 22.5 -9.5t9.5 -22.5zM1152 896q0 -78 -24.5 -144t-64 -112.5t-87.5 -88t-96 -77.5t-87.5 -72t-64 -81.5t-24.5 -96.5q0 -96 67 -224l-4 1l1 -1
+q-90 41 -160 83t-138.5 100t-113.5 122.5t-72.5 150.5t-27.5 184q0 78 24.5 144t64 112.5t87.5 88t96 77.5t87.5 72t64 81.5t24.5 96.5q0 94 -66 224l3 -1l-1 1q90 -41 160 -83t138.5 -100t113.5 -122.5t72.5 -150.5t27.5 -184z" />
+    <glyph glyph-name="eye_open" unicode="&#xf06e;" horiz-adv-x="1792" 
+d="M1664 576q-152 236 -381 353q61 -104 61 -225q0 -185 -131.5 -316.5t-316.5 -131.5t-316.5 131.5t-131.5 316.5q0 121 61 225q-229 -117 -381 -353q133 -205 333.5 -326.5t434.5 -121.5t434.5 121.5t333.5 326.5zM944 960q0 20 -14 34t-34 14q-125 0 -214.5 -89.5
+t-89.5 -214.5q0 -20 14 -34t34 -14t34 14t14 34q0 86 61 147t147 61q20 0 34 14t14 34zM1792 576q0 -34 -20 -69q-140 -230 -376.5 -368.5t-499.5 -138.5t-499.5 139t-376.5 368q-20 35 -20 69t20 69q140 229 376.5 368t499.5 139t499.5 -139t376.5 -368q20 -35 20 -69z" />
+    <glyph glyph-name="eye_close" unicode="&#xf070;" horiz-adv-x="1792" 
+d="M555 201l78 141q-87 63 -136 159t-49 203q0 121 61 225q-229 -117 -381 -353q167 -258 427 -375zM944 960q0 20 -14 34t-34 14q-125 0 -214.5 -89.5t-89.5 -214.5q0 -20 14 -34t34 -14t34 14t14 34q0 86 61 147t147 61q20 0 34 14t14 34zM1307 1151q0 -7 -1 -9
+q-106 -189 -316 -567t-315 -566l-49 -89q-10 -16 -28 -16q-12 0 -134 70q-16 10 -16 28q0 12 44 87q-143 65 -263.5 173t-208.5 245q-20 31 -20 69t20 69q153 235 380 371t496 136q89 0 180 -17l54 97q10 16 28 16q5 0 18 -6t31 -15.5t33 -18.5t31.5 -18.5t19.5 -11.5
+q16 -10 16 -27zM1344 704q0 -139 -79 -253.5t-209 -164.5l280 502q8 -45 8 -84zM1792 576q0 -35 -20 -69q-39 -64 -109 -145q-150 -172 -347.5 -267t-419.5 -95l74 132q212 18 392.5 137t301.5 307q-115 179 -282 294l63 112q95 -64 182.5 -153t144.5 -184q20 -34 20 -69z
+" />
+    <glyph glyph-name="warning_sign" unicode="&#xf071;" horiz-adv-x="1792" 
+d="M1024 161v190q0 14 -9.5 23.5t-22.5 9.5h-192q-13 0 -22.5 -9.5t-9.5 -23.5v-190q0 -14 9.5 -23.5t22.5 -9.5h192q13 0 22.5 9.5t9.5 23.5zM1022 535l18 459q0 12 -10 19q-13 11 -24 11h-220q-11 0 -24 -11q-10 -7 -10 -21l17 -457q0 -10 10 -16.5t24 -6.5h185
+q14 0 23.5 6.5t10.5 16.5zM1008 1469l768 -1408q35 -63 -2 -126q-17 -29 -46.5 -46t-63.5 -17h-1536q-34 0 -63.5 17t-46.5 46q-37 63 -2 126l768 1408q17 31 47 49t65 18t65 -18t47 -49z" />
+    <glyph glyph-name="plane" unicode="&#xf072;" horiz-adv-x="1408" 
+d="M1376 1376q44 -52 12 -148t-108 -172l-161 -161l160 -696q5 -19 -12 -33l-128 -96q-7 -6 -19 -6q-4 0 -7 1q-15 3 -21 16l-279 508l-259 -259l53 -194q5 -17 -8 -31l-96 -96q-9 -9 -23 -9h-2q-15 2 -24 13l-189 252l-252 189q-11 7 -13 23q-1 13 9 25l96 97q9 9 23 9
+q6 0 8 -1l194 -53l259 259l-508 279q-14 8 -17 24q-2 16 9 27l128 128q14 13 30 8l665 -159l160 160q76 76 172 108t148 -12z" />
+    <glyph glyph-name="calendar" unicode="&#xf073;" horiz-adv-x="1664" 
+d="M128 -128h288v288h-288v-288zM480 -128h320v288h-320v-288zM128 224h288v320h-288v-320zM480 224h320v320h-320v-320zM128 608h288v288h-288v-288zM864 -128h320v288h-320v-288zM480 608h320v288h-320v-288zM1248 -128h288v288h-288v-288zM864 224h320v320h-320v-320z
+M512 1088v288q0 13 -9.5 22.5t-22.5 9.5h-64q-13 0 -22.5 -9.5t-9.5 -22.5v-288q0 -13 9.5 -22.5t22.5 -9.5h64q13 0 22.5 9.5t9.5 22.5zM1248 224h288v320h-288v-320zM864 608h320v288h-320v-288zM1248 608h288v288h-288v-288zM1280 1088v288q0 13 -9.5 22.5t-22.5 9.5h-64
+q-13 0 -22.5 -9.5t-9.5 -22.5v-288q0 -13 9.5 -22.5t22.5 -9.5h64q13 0 22.5 9.5t9.5 22.5zM1664 1152v-1280q0 -52 -38 -90t-90 -38h-1408q-52 0 -90 38t-38 90v1280q0 52 38 90t90 38h128v96q0 66 47 113t113 47h64q66 0 113 -47t47 -113v-96h384v96q0 66 47 113t113 47
+h64q66 0 113 -47t47 -113v-96h128q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="random" unicode="&#xf074;" horiz-adv-x="1792" 
+d="M666 1055q-60 -92 -137 -273q-22 45 -37 72.5t-40.5 63.5t-51 56.5t-63 35t-81.5 14.5h-224q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h224q250 0 410 -225zM1792 256q0 -14 -9 -23l-320 -320q-9 -9 -23 -9q-13 0 -22.5 9.5t-9.5 22.5v192q-32 0 -85 -0.5t-81 -1t-73 1
+t-71 5t-64 10.5t-63 18.5t-58 28.5t-59 40t-55 53.5t-56 69.5q59 93 136 273q22 -45 37 -72.5t40.5 -63.5t51 -56.5t63 -35t81.5 -14.5h256v192q0 14 9 23t23 9q12 0 24 -10l319 -319q9 -9 9 -23zM1792 1152q0 -14 -9 -23l-320 -320q-9 -9 -23 -9q-13 0 -22.5 9.5t-9.5 22.5
+v192h-256q-48 0 -87 -15t-69 -45t-51 -61.5t-45 -77.5q-32 -62 -78 -171q-29 -66 -49.5 -111t-54 -105t-64 -100t-74 -83t-90 -68.5t-106.5 -42t-128 -16.5h-224q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h224q48 0 87 15t69 45t51 61.5t45 77.5q32 62 78 171q29 66 49.5 111
+t54 105t64 100t74 83t90 68.5t106.5 42t128 16.5h256v192q0 14 9 23t23 9q12 0 24 -10l319 -319q9 -9 9 -23z" />
+    <glyph glyph-name="comment" unicode="&#xf075;" horiz-adv-x="1792" 
+d="M1792 640q0 -174 -120 -321.5t-326 -233t-450 -85.5q-70 0 -145 8q-198 -175 -460 -242q-49 -14 -114 -22q-17 -2 -30.5 9t-17.5 29v1q-3 4 -0.5 12t2 10t4.5 9.5l6 9t7 8.5t8 9q7 8 31 34.5t34.5 38t31 39.5t32.5 51t27 59t26 76q-157 89 -247.5 220t-90.5 281
+q0 130 71 248.5t191 204.5t286 136.5t348 50.5q244 0 450 -85.5t326 -233t120 -321.5z" />
+    <glyph glyph-name="magnet" unicode="&#xf076;" 
+d="M1536 704v-128q0 -201 -98.5 -362t-274 -251.5t-395.5 -90.5t-395.5 90.5t-274 251.5t-98.5 362v128q0 26 19 45t45 19h384q26 0 45 -19t19 -45v-128q0 -52 23.5 -90t53.5 -57t71 -30t64 -13t44 -2t44 2t64 13t71 30t53.5 57t23.5 90v128q0 26 19 45t45 19h384
+q26 0 45 -19t19 -45zM512 1344v-384q0 -26 -19 -45t-45 -19h-384q-26 0 -45 19t-19 45v384q0 26 19 45t45 19h384q26 0 45 -19t19 -45zM1536 1344v-384q0 -26 -19 -45t-45 -19h-384q-26 0 -45 19t-19 45v384q0 26 19 45t45 19h384q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="chevron_up" unicode="&#xf077;" horiz-adv-x="1792" 
+d="M1683 205l-166 -165q-19 -19 -45 -19t-45 19l-531 531l-531 -531q-19 -19 -45 -19t-45 19l-166 165q-19 19 -19 45.5t19 45.5l742 741q19 19 45 19t45 -19l742 -741q19 -19 19 -45.5t-19 -45.5z" />
+    <glyph glyph-name="chevron_down" unicode="&#xf078;" horiz-adv-x="1792" 
+d="M1683 728l-742 -741q-19 -19 -45 -19t-45 19l-742 741q-19 19 -19 45.5t19 45.5l166 165q19 19 45 19t45 -19l531 -531l531 531q19 19 45 19t45 -19l166 -165q19 -19 19 -45.5t-19 -45.5z" />
+    <glyph glyph-name="retweet" unicode="&#xf079;" horiz-adv-x="1920" 
+d="M1280 32q0 -13 -9.5 -22.5t-22.5 -9.5h-960q-8 0 -13.5 2t-9 7t-5.5 8t-3 11.5t-1 11.5v13v11v160v416h-192q-26 0 -45 19t-19 45q0 24 15 41l320 384q19 22 49 22t49 -22l320 -384q15 -17 15 -41q0 -26 -19 -45t-45 -19h-192v-384h576q16 0 25 -11l160 -192q7 -10 7 -21
+zM1920 448q0 -24 -15 -41l-320 -384q-20 -23 -49 -23t-49 23l-320 384q-15 17 -15 41q0 26 19 45t45 19h192v384h-576q-16 0 -25 12l-160 192q-7 9 -7 20q0 13 9.5 22.5t22.5 9.5h960q8 0 13.5 -2t9 -7t5.5 -8t3 -11.5t1 -11.5v-13v-11v-160v-416h192q26 0 45 -19t19 -45z
+" />
+    <glyph glyph-name="shopping_cart" unicode="&#xf07a;" horiz-adv-x="1664" 
+d="M640 0q0 -52 -38 -90t-90 -38t-90 38t-38 90t38 90t90 38t90 -38t38 -90zM1536 0q0 -52 -38 -90t-90 -38t-90 38t-38 90t38 90t90 38t90 -38t38 -90zM1664 1088v-512q0 -24 -16.5 -42.5t-40.5 -21.5l-1044 -122q13 -60 13 -70q0 -16 -24 -64h920q26 0 45 -19t19 -45
+t-19 -45t-45 -19h-1024q-26 0 -45 19t-19 45q0 11 8 31.5t16 36t21.5 40t15.5 29.5l-177 823h-204q-26 0 -45 19t-19 45t19 45t45 19h256q16 0 28.5 -6.5t19.5 -15.5t13 -24.5t8 -26t5.5 -29.5t4.5 -26h1201q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="folder_close" unicode="&#xf07b;" horiz-adv-x="1664" 
+d="M1664 928v-704q0 -92 -66 -158t-158 -66h-1216q-92 0 -158 66t-66 158v960q0 92 66 158t158 66h320q92 0 158 -66t66 -158v-32h672q92 0 158 -66t66 -158z" />
+    <glyph glyph-name="folder_open" unicode="&#xf07c;" horiz-adv-x="1920" 
+d="M1879 584q0 -31 -31 -66l-336 -396q-43 -51 -120.5 -86.5t-143.5 -35.5h-1088q-34 0 -60.5 13t-26.5 43q0 31 31 66l336 396q43 51 120.5 86.5t143.5 35.5h1088q34 0 60.5 -13t26.5 -43zM1536 928v-160h-832q-94 0 -197 -47.5t-164 -119.5l-337 -396l-5 -6q0 4 -0.5 12.5
+t-0.5 12.5v960q0 92 66 158t158 66h320q92 0 158 -66t66 -158v-32h544q92 0 158 -66t66 -158z" />
+    <glyph glyph-name="resize_vertical" unicode="&#xf07d;" horiz-adv-x="768" 
+d="M704 1216q0 -26 -19 -45t-45 -19h-128v-1024h128q26 0 45 -19t19 -45t-19 -45l-256 -256q-19 -19 -45 -19t-45 19l-256 256q-19 19 -19 45t19 45t45 19h128v1024h-128q-26 0 -45 19t-19 45t19 45l256 256q19 19 45 19t45 -19l256 -256q19 -19 19 -45z" />
+    <glyph glyph-name="resize_horizontal" unicode="&#xf07e;" horiz-adv-x="1792" 
+d="M1792 640q0 -26 -19 -45l-256 -256q-19 -19 -45 -19t-45 19t-19 45v128h-1024v-128q0 -26 -19 -45t-45 -19t-45 19l-256 256q-19 19 -19 45t19 45l256 256q19 19 45 19t45 -19t19 -45v-128h1024v128q0 26 19 45t45 19t45 -19l256 -256q19 -19 19 -45z" />
+    <glyph glyph-name="bar_chart" unicode="&#xf080;" horiz-adv-x="2048" 
+d="M640 640v-512h-256v512h256zM1024 1152v-1024h-256v1024h256zM2048 0v-128h-2048v1536h128v-1408h1920zM1408 896v-768h-256v768h256zM1792 1280v-1152h-256v1152h256z" />
+    <glyph glyph-name="twitter_sign" unicode="&#xf081;" 
+d="M1280 926q-56 -25 -121 -34q68 40 93 117q-65 -38 -134 -51q-61 66 -153 66q-87 0 -148.5 -61.5t-61.5 -148.5q0 -29 5 -48q-129 7 -242 65t-192 155q-29 -50 -29 -106q0 -114 91 -175q-47 1 -100 26v-2q0 -75 50 -133.5t123 -72.5q-29 -8 -51 -8q-13 0 -39 4
+q21 -63 74.5 -104t121.5 -42q-116 -90 -261 -90q-26 0 -50 3q148 -94 322 -94q112 0 210 35.5t168 95t120.5 137t75 162t24.5 168.5q0 18 -1 27q63 45 105 109zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5
+t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="facebook_sign" unicode="&#xf082;" 
+d="M1248 1408q119 0 203.5 -84.5t84.5 -203.5v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-188v595h199l30 232h-229v148q0 56 23.5 84t91.5 28l122 1v207q-63 9 -178 9q-136 0 -217.5 -80t-81.5 -226v-171h-200v-232h200v-595h-532q-119 0 -203.5 84.5t-84.5 203.5v960
+q0 119 84.5 203.5t203.5 84.5h960z" />
+    <glyph glyph-name="camera_retro" unicode="&#xf083;" horiz-adv-x="1792" 
+d="M928 704q0 14 -9 23t-23 9q-66 0 -113 -47t-47 -113q0 -14 9 -23t23 -9t23 9t9 23q0 40 28 68t68 28q14 0 23 9t9 23zM1152 574q0 -106 -75 -181t-181 -75t-181 75t-75 181t75 181t181 75t181 -75t75 -181zM128 0h1536v128h-1536v-128zM1280 574q0 159 -112.5 271.5
+t-271.5 112.5t-271.5 -112.5t-112.5 -271.5t112.5 -271.5t271.5 -112.5t271.5 112.5t112.5 271.5zM256 1216h384v128h-384v-128zM128 1024h1536v118v138h-828l-64 -128h-644v-128zM1792 1280v-1280q0 -53 -37.5 -90.5t-90.5 -37.5h-1536q-53 0 -90.5 37.5t-37.5 90.5v1280
+q0 53 37.5 90.5t90.5 37.5h1536q53 0 90.5 -37.5t37.5 -90.5z" />
+    <glyph glyph-name="key" unicode="&#xf084;" horiz-adv-x="1792" 
+d="M832 1024q0 80 -56 136t-136 56t-136 -56t-56 -136q0 -42 19 -83q-41 19 -83 19q-80 0 -136 -56t-56 -136t56 -136t136 -56t136 56t56 136q0 42 -19 83q41 -19 83 -19q80 0 136 56t56 136zM1683 320q0 -17 -49 -66t-66 -49q-9 0 -28.5 16t-36.5 33t-38.5 40t-24.5 26
+l-96 -96l220 -220q28 -28 28 -68q0 -42 -39 -81t-81 -39q-40 0 -68 28l-671 671q-176 -131 -365 -131q-163 0 -265.5 102.5t-102.5 265.5q0 160 95 313t248 248t313 95q163 0 265.5 -102.5t102.5 -265.5q0 -189 -131 -365l355 -355l96 96q-3 3 -26 24.5t-40 38.5t-33 36.5
+t-16 28.5q0 17 49 66t66 49q13 0 23 -10q6 -6 46 -44.5t82 -79.5t86.5 -86t73 -78t28.5 -41z" />
+    <glyph glyph-name="cogs" unicode="&#xf085;" horiz-adv-x="1920" 
+d="M896 640q0 106 -75 181t-181 75t-181 -75t-75 -181t75 -181t181 -75t181 75t75 181zM1664 128q0 52 -38 90t-90 38t-90 -38t-38 -90q0 -53 37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1664 1152q0 52 -38 90t-90 38t-90 -38t-38 -90q0 -53 37.5 -90.5t90.5 -37.5
+t90.5 37.5t37.5 90.5zM1280 731v-185q0 -10 -7 -19.5t-16 -10.5l-155 -24q-11 -35 -32 -76q34 -48 90 -115q7 -11 7 -20q0 -12 -7 -19q-23 -30 -82.5 -89.5t-78.5 -59.5q-11 0 -21 7l-115 90q-37 -19 -77 -31q-11 -108 -23 -155q-7 -24 -30 -24h-186q-11 0 -20 7.5t-10 17.5
+l-23 153q-34 10 -75 31l-118 -89q-7 -7 -20 -7q-11 0 -21 8q-144 133 -144 160q0 9 7 19q10 14 41 53t47 61q-23 44 -35 82l-152 24q-10 1 -17 9.5t-7 19.5v185q0 10 7 19.5t16 10.5l155 24q11 35 32 76q-34 48 -90 115q-7 11 -7 20q0 12 7 20q22 30 82 89t79 59q11 0 21 -7
+l115 -90q34 18 77 32q11 108 23 154q7 24 30 24h186q11 0 20 -7.5t10 -17.5l23 -153q34 -10 75 -31l118 89q8 7 20 7q11 0 21 -8q144 -133 144 -160q0 -8 -7 -19q-12 -16 -42 -54t-45 -60q23 -48 34 -82l152 -23q10 -2 17 -10.5t7 -19.5zM1920 198v-140q0 -16 -149 -31
+q-12 -27 -30 -52q51 -113 51 -138q0 -4 -4 -7q-122 -71 -124 -71q-8 0 -46 47t-52 68q-20 -2 -30 -2t-30 2q-14 -21 -52 -68t-46 -47q-2 0 -124 71q-4 3 -4 7q0 25 51 138q-18 25 -30 52q-149 15 -149 31v140q0 16 149 31q13 29 30 52q-51 113 -51 138q0 4 4 7q4 2 35 20
+t59 34t30 16q8 0 46 -46.5t52 -67.5q20 2 30 2t30 -2q51 71 92 112l6 2q4 0 124 -70q4 -3 4 -7q0 -25 -51 -138q17 -23 30 -52q149 -15 149 -31zM1920 1222v-140q0 -16 -149 -31q-12 -27 -30 -52q51 -113 51 -138q0 -4 -4 -7q-122 -71 -124 -71q-8 0 -46 47t-52 68
+q-20 -2 -30 -2t-30 2q-14 -21 -52 -68t-46 -47q-2 0 -124 71q-4 3 -4 7q0 25 51 138q-18 25 -30 52q-149 15 -149 31v140q0 16 149 31q13 29 30 52q-51 113 -51 138q0 4 4 7q4 2 35 20t59 34t30 16q8 0 46 -46.5t52 -67.5q20 2 30 2t30 -2q51 71 92 112l6 2q4 0 124 -70
+q4 -3 4 -7q0 -25 -51 -138q17 -23 30 -52q149 -15 149 -31z" />
+    <glyph glyph-name="comments" unicode="&#xf086;" horiz-adv-x="1792" 
+d="M1408 768q0 -139 -94 -257t-256.5 -186.5t-353.5 -68.5q-86 0 -176 16q-124 -88 -278 -128q-36 -9 -86 -16h-3q-11 0 -20.5 8t-11.5 21q-1 3 -1 6.5t0.5 6.5t2 6l2.5 5t3.5 5.5t4 5t4.5 5t4 4.5q5 6 23 25t26 29.5t22.5 29t25 38.5t20.5 44q-124 72 -195 177t-71 224
+q0 139 94 257t256.5 186.5t353.5 68.5t353.5 -68.5t256.5 -186.5t94 -257zM1792 512q0 -120 -71 -224.5t-195 -176.5q10 -24 20.5 -44t25 -38.5t22.5 -29t26 -29.5t23 -25q1 -1 4 -4.5t4.5 -5t4 -5t3.5 -5.5l2.5 -5t2 -6t0.5 -6.5t-1 -6.5q-3 -14 -13 -22t-22 -7
+q-50 7 -86 16q-154 40 -278 128q-90 -16 -176 -16q-271 0 -472 132q58 -4 88 -4q161 0 309 45t264 129q125 92 192 212t67 254q0 77 -23 152q129 -71 204 -178t75 -230z" />
+    <glyph glyph-name="thumbs_up_alt" unicode="&#xf087;" 
+d="M256 192q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1408 768q0 51 -39 89.5t-89 38.5h-352q0 58 48 159.5t48 160.5q0 98 -32 145t-128 47q-26 -26 -38 -85t-30.5 -125.5t-59.5 -109.5q-22 -23 -77 -91q-4 -5 -23 -30t-31.5 -41t-34.5 -42.5
+t-40 -44t-38.5 -35.5t-40 -27t-35.5 -9h-32v-640h32q13 0 31.5 -3t33 -6.5t38 -11t35 -11.5t35.5 -12.5t29 -10.5q211 -73 342 -73h121q192 0 192 167q0 26 -5 56q30 16 47.5 52.5t17.5 73.5t-18 69q53 50 53 119q0 25 -10 55.5t-25 47.5q32 1 53.5 47t21.5 81zM1536 769
+q0 -89 -49 -163q9 -33 9 -69q0 -77 -38 -144q3 -21 3 -43q0 -101 -60 -178q1 -139 -85 -219.5t-227 -80.5h-36h-93q-96 0 -189.5 22.5t-216.5 65.5q-116 40 -138 40h-288q-53 0 -90.5 37.5t-37.5 90.5v640q0 53 37.5 90.5t90.5 37.5h274q36 24 137 155q58 75 107 128
+q24 25 35.5 85.5t30.5 126.5t62 108q39 37 90 37q84 0 151 -32.5t102 -101.5t35 -186q0 -93 -48 -192h176q104 0 180 -76t76 -179z" />
+    <glyph glyph-name="thumbs_down_alt" unicode="&#xf088;" 
+d="M256 1088q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1408 512q0 35 -21.5 81t-53.5 47q15 17 25 47.5t10 55.5q0 69 -53 119q18 31 18 69q0 37 -17.5 73.5t-47.5 52.5q5 30 5 56q0 85 -49 126t-136 41h-128q-131 0 -342 -73q-5 -2 -29 -10.5
+t-35.5 -12.5t-35 -11.5t-38 -11t-33 -6.5t-31.5 -3h-32v-640h32q16 0 35.5 -9t40 -27t38.5 -35.5t40 -44t34.5 -42.5t31.5 -41t23 -30q55 -68 77 -91q41 -43 59.5 -109.5t30.5 -125.5t38 -85q96 0 128 47t32 145q0 59 -48 160.5t-48 159.5h352q50 0 89 38.5t39 89.5z
+M1536 511q0 -103 -76 -179t-180 -76h-176q48 -99 48 -192q0 -118 -35 -186q-35 -69 -102 -101.5t-151 -32.5q-51 0 -90 37q-34 33 -54 82t-25.5 90.5t-17.5 84.5t-31 64q-48 50 -107 127q-101 131 -137 155h-274q-53 0 -90.5 37.5t-37.5 90.5v640q0 53 37.5 90.5t90.5 37.5
+h288q22 0 138 40q128 44 223 66t200 22h112q140 0 226.5 -79t85.5 -216v-5q60 -77 60 -178q0 -22 -3 -43q38 -67 38 -144q0 -36 -9 -69q49 -73 49 -163z" />
+    <glyph glyph-name="star_half" unicode="&#xf089;" horiz-adv-x="896" 
+d="M832 1504v-1339l-449 -236q-22 -12 -40 -12q-21 0 -31.5 14.5t-10.5 35.5q0 6 2 20l86 500l-364 354q-25 27 -25 48q0 37 56 46l502 73l225 455q19 41 49 41z" />
+    <glyph glyph-name="heart_empty" unicode="&#xf08a;" horiz-adv-x="1792" 
+d="M1664 940q0 81 -21.5 143t-55 98.5t-81.5 59.5t-94 31t-98 8t-112 -25.5t-110.5 -64t-86.5 -72t-60 -61.5q-18 -22 -49 -22t-49 22q-24 28 -60 61.5t-86.5 72t-110.5 64t-112 25.5t-98 -8t-94 -31t-81.5 -59.5t-55 -98.5t-21.5 -143q0 -168 187 -355l581 -560l580 559
+q188 188 188 356zM1792 940q0 -221 -229 -450l-623 -600q-18 -18 -44 -18t-44 18l-624 602q-10 8 -27.5 26t-55.5 65.5t-68 97.5t-53.5 121t-23.5 138q0 220 127 344t351 124q62 0 126.5 -21.5t120 -58t95.5 -68.5t76 -68q36 36 76 68t95.5 68.5t120 58t126.5 21.5
+q224 0 351 -124t127 -344z" />
+    <glyph glyph-name="signout" unicode="&#xf08b;" horiz-adv-x="1664" 
+d="M640 96q0 -4 1 -20t0.5 -26.5t-3 -23.5t-10 -19.5t-20.5 -6.5h-320q-119 0 -203.5 84.5t-84.5 203.5v704q0 119 84.5 203.5t203.5 84.5h320q13 0 22.5 -9.5t9.5 -22.5q0 -4 1 -20t0.5 -26.5t-3 -23.5t-10 -19.5t-20.5 -6.5h-320q-66 0 -113 -47t-47 -113v-704
+q0 -66 47 -113t113 -47h288h11h13t11.5 -1t11.5 -3t8 -5.5t7 -9t2 -13.5zM1568 640q0 -26 -19 -45l-544 -544q-19 -19 -45 -19t-45 19t-19 45v288h-448q-26 0 -45 19t-19 45v384q0 26 19 45t45 19h448v288q0 26 19 45t45 19t45 -19l544 -544q19 -19 19 -45z" />
+    <glyph glyph-name="linkedin_sign" unicode="&#xf08c;" 
+d="M237 122h231v694h-231v-694zM483 1030q-1 52 -36 86t-93 34t-94.5 -34t-36.5 -86q0 -51 35.5 -85.5t92.5 -34.5h1q59 0 95 34.5t36 85.5zM1068 122h231v398q0 154 -73 233t-193 79q-136 0 -209 -117h2v101h-231q3 -66 0 -694h231v388q0 38 7 56q15 35 45 59.5t74 24.5
+q116 0 116 -157v-371zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="pushpin" unicode="&#xf08d;" horiz-adv-x="1152" 
+d="M480 672v448q0 14 -9 23t-23 9t-23 -9t-9 -23v-448q0 -14 9 -23t23 -9t23 9t9 23zM1152 320q0 -26 -19 -45t-45 -19h-429l-51 -483q-2 -12 -10.5 -20.5t-20.5 -8.5h-1q-27 0 -32 27l-76 485h-404q-26 0 -45 19t-19 45q0 123 78.5 221.5t177.5 98.5v512q-52 0 -90 38
+t-38 90t38 90t90 38h640q52 0 90 -38t38 -90t-38 -90t-90 -38v-512q99 0 177.5 -98.5t78.5 -221.5z" />
+    <glyph glyph-name="external_link" unicode="&#xf08e;" horiz-adv-x="1792" 
+d="M1408 608v-320q0 -119 -84.5 -203.5t-203.5 -84.5h-832q-119 0 -203.5 84.5t-84.5 203.5v832q0 119 84.5 203.5t203.5 84.5h704q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-704q-66 0 -113 -47t-47 -113v-832q0 -66 47 -113t113 -47h832q66 0 113 47t47 113v320
+q0 14 9 23t23 9h64q14 0 23 -9t9 -23zM1792 1472v-512q0 -26 -19 -45t-45 -19t-45 19l-176 176l-652 -652q-10 -10 -23 -10t-23 10l-114 114q-10 10 -10 23t10 23l652 652l-176 176q-19 19 -19 45t19 45t45 19h512q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="signin" unicode="&#xf090;" 
+d="M1184 640q0 -26 -19 -45l-544 -544q-19 -19 -45 -19t-45 19t-19 45v288h-448q-26 0 -45 19t-19 45v384q0 26 19 45t45 19h448v288q0 26 19 45t45 19t45 -19l544 -544q19 -19 19 -45zM1536 992v-704q0 -119 -84.5 -203.5t-203.5 -84.5h-320q-13 0 -22.5 9.5t-9.5 22.5
+q0 4 -1 20t-0.5 26.5t3 23.5t10 19.5t20.5 6.5h320q66 0 113 47t47 113v704q0 66 -47 113t-113 47h-288h-11h-13t-11.5 1t-11.5 3t-8 5.5t-7 9t-2 13.5q0 4 -1 20t-0.5 26.5t3 23.5t10 19.5t20.5 6.5h320q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="trophy" unicode="&#xf091;" horiz-adv-x="1664" 
+d="M458 653q-74 162 -74 371h-256v-96q0 -78 94.5 -162t235.5 -113zM1536 928v96h-256q0 -209 -74 -371q141 29 235.5 113t94.5 162zM1664 1056v-128q0 -71 -41.5 -143t-112 -130t-173 -97.5t-215.5 -44.5q-42 -54 -95 -95q-38 -34 -52.5 -72.5t-14.5 -89.5q0 -54 30.5 -91
+t97.5 -37q75 0 133.5 -45.5t58.5 -114.5v-64q0 -14 -9 -23t-23 -9h-832q-14 0 -23 9t-9 23v64q0 69 58.5 114.5t133.5 45.5q67 0 97.5 37t30.5 91q0 51 -14.5 89.5t-52.5 72.5q-53 41 -95 95q-113 5 -215.5 44.5t-173 97.5t-112 130t-41.5 143v128q0 40 28 68t68 28h288v96
+q0 66 47 113t113 47h576q66 0 113 -47t47 -113v-96h288q40 0 68 -28t28 -68z" />
+    <glyph glyph-name="github_sign" unicode="&#xf092;" 
+d="M519 336q4 6 -3 13q-9 7 -14 2q-4 -6 3 -13q9 -7 14 -2zM491 377q-5 7 -12 4q-6 -4 0 -12q7 -8 12 -5q6 4 0 13zM450 417q2 4 -5 8q-7 2 -8 -2q-3 -5 4 -8q8 -2 9 2zM471 394q2 1 1.5 4.5t-3.5 5.5q-6 7 -10 3t1 -11q6 -6 11 -2zM557 319q2 7 -9 11q-9 3 -13 -4
+q-2 -7 9 -11q9 -3 13 4zM599 316q0 8 -12 8q-10 0 -10 -8t11 -8t11 8zM638 323q-2 7 -13 5t-9 -9q2 -8 12 -6t10 10zM1280 640q0 212 -150 362t-362 150t-362 -150t-150 -362q0 -167 98 -300.5t252 -185.5q18 -3 26.5 5t8.5 20q0 52 -1 95q-6 -1 -15.5 -2.5t-35.5 -2t-48 4
+t-43.5 20t-29.5 41.5q-23 59 -57 74q-2 1 -4.5 3.5l-8 8t-7 9.5t4 7.5t19.5 3.5q6 0 15 -2t30 -15.5t33 -35.5q16 -28 37.5 -42t43.5 -14t38 3.5t30 9.5q7 47 33 69q-49 6 -86 18.5t-73 39t-55.5 76t-19.5 119.5q0 79 53 137q-24 62 5 136q19 6 54.5 -7.5t60.5 -29.5l26 -16
+q58 17 128 17t128 -17q11 7 28.5 18t55.5 26t57 9q29 -74 5 -136q53 -58 53 -137q0 -57 -14 -100.5t-35.5 -70t-53.5 -44.5t-62.5 -26t-68.5 -12q35 -31 35 -95q0 -40 -0.5 -89t-0.5 -51q0 -12 8.5 -20t26.5 -5q154 52 252 185.5t98 300.5zM1536 1120v-960
+q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="upload_alt" unicode="&#xf093;" horiz-adv-x="1664" 
+d="M1280 64q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1536 64q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1664 288v-320q0 -40 -28 -68t-68 -28h-1472q-40 0 -68 28t-28 68v320q0 40 28 68t68 28h427q21 -56 70.5 -92
+t110.5 -36h256q61 0 110.5 36t70.5 92h427q40 0 68 -28t28 -68zM1339 936q-17 -40 -59 -40h-256v-448q0 -26 -19 -45t-45 -19h-256q-26 0 -45 19t-19 45v448h-256q-42 0 -59 40q-17 39 14 69l448 448q18 19 45 19t45 -19l448 -448q31 -30 14 -69z" />
+    <glyph glyph-name="lemon" unicode="&#xf094;" 
+d="M1407 710q0 44 -7 113.5t-18 96.5q-12 30 -17 44t-9 36.5t-4 48.5q0 23 5 68.5t5 67.5q0 37 -10 55q-4 1 -13 1q-19 0 -58 -4.5t-59 -4.5q-60 0 -176 24t-175 24q-43 0 -94.5 -11.5t-85 -23.5t-89.5 -34q-137 -54 -202 -103q-96 -73 -159.5 -189.5t-88 -236t-24.5 -248.5
+q0 -40 12.5 -120t12.5 -121q0 -23 -11 -66.5t-11 -65.5t12 -36.5t34 -14.5q24 0 72.5 11t73.5 11q57 0 169.5 -15.5t169.5 -15.5q181 0 284 36q129 45 235.5 152.5t166 245.5t59.5 275zM1535 712q0 -165 -70 -327.5t-196 -288t-281 -180.5q-124 -44 -326 -44
+q-57 0 -170 14.5t-169 14.5q-24 0 -72.5 -14.5t-73.5 -14.5q-73 0 -123.5 55.5t-50.5 128.5q0 24 11 68t11 67q0 40 -12.5 120.5t-12.5 121.5q0 111 18 217.5t54.5 209.5t100.5 194t150 156q78 59 232 120q194 78 316 78q60 0 175.5 -24t173.5 -24q19 0 57 5t58 5
+q81 0 118 -50.5t37 -134.5q0 -23 -5 -68t-5 -68q0 -13 2 -25t3.5 -16.5t7.5 -20.5t8 -20q16 -40 25 -118.5t9 -136.5z" />
+    <glyph glyph-name="phone" unicode="&#xf095;" horiz-adv-x="1408" 
+d="M1408 296q0 -27 -10 -70.5t-21 -68.5q-21 -50 -122 -106q-94 -51 -186 -51q-27 0 -53 3.5t-57.5 12.5t-47 14.5t-55.5 20.5t-49 18q-98 35 -175 83q-127 79 -264 216t-216 264q-48 77 -83 175q-3 9 -18 49t-20.5 55.5t-14.5 47t-12.5 57.5t-3.5 53q0 92 51 186
+q56 101 106 122q25 11 68.5 21t70.5 10q14 0 21 -3q18 -6 53 -76q11 -19 30 -54t35 -63.5t31 -53.5q3 -4 17.5 -25t21.5 -35.5t7 -28.5q0 -20 -28.5 -50t-62 -55t-62 -53t-28.5 -46q0 -9 5 -22.5t8.5 -20.5t14 -24t11.5 -19q76 -137 174 -235t235 -174q2 -1 19 -11.5t24 -14
+t20.5 -8.5t22.5 -5q18 0 46 28.5t53 62t55 62t50 28.5q14 0 28.5 -7t35.5 -21.5t25 -17.5q25 -15 53.5 -31t63.5 -35t54 -30q70 -35 76 -53q3 -7 3 -21z" />
+    <glyph glyph-name="check_empty" unicode="&#xf096;" horiz-adv-x="1408" 
+d="M1120 1280h-832q-66 0 -113 -47t-47 -113v-832q0 -66 47 -113t113 -47h832q66 0 113 47t47 113v832q0 66 -47 113t-113 47zM1408 1120v-832q0 -119 -84.5 -203.5t-203.5 -84.5h-832q-119 0 -203.5 84.5t-84.5 203.5v832q0 119 84.5 203.5t203.5 84.5h832
+q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="bookmark_empty" unicode="&#xf097;" horiz-adv-x="1280" 
+d="M1152 1280h-1024v-1242l423 406l89 85l89 -85l423 -406v1242zM1164 1408q23 0 44 -9q33 -13 52.5 -41t19.5 -62v-1289q0 -34 -19.5 -62t-52.5 -41q-19 -8 -44 -8q-48 0 -83 32l-441 424l-441 -424q-36 -33 -83 -33q-23 0 -44 9q-33 13 -52.5 41t-19.5 62v1289
+q0 34 19.5 62t52.5 41q21 9 44 9h1048z" />
+    <glyph glyph-name="phone_sign" unicode="&#xf098;" 
+d="M1280 343q0 11 -2 16t-18 16.5t-40.5 25t-47.5 26.5t-45.5 25t-28.5 15q-5 3 -19 13t-25 15t-21 5q-15 0 -36.5 -20.5t-39.5 -45t-38.5 -45t-33.5 -20.5q-7 0 -16.5 3.5t-15.5 6.5t-17 9.5t-14 8.5q-99 55 -170 126.5t-127 170.5q-2 3 -8.5 14t-9.5 17t-6.5 15.5
+t-3.5 16.5q0 13 20.5 33.5t45 38.5t45 39.5t20.5 36.5q0 10 -5 21t-15 25t-13 19q-3 6 -15 28.5t-25 45.5t-26.5 47.5t-25 40.5t-16.5 18t-16 2q-48 0 -101 -22q-46 -21 -80 -94.5t-34 -130.5q0 -16 2.5 -34t5 -30.5t9 -33t10 -29.5t12.5 -33t11 -30q60 -164 216.5 -320.5
+t320.5 -216.5q6 -2 30 -11t33 -12.5t29.5 -10t33 -9t30.5 -5t34 -2.5q57 0 130.5 34t94.5 80q22 53 22 101zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z
+" />
+    <glyph glyph-name="twitter" unicode="&#xf099;" horiz-adv-x="1664" 
+d="M1620 1128q-67 -98 -162 -167q1 -14 1 -42q0 -130 -38 -259.5t-115.5 -248.5t-184.5 -210.5t-258 -146t-323 -54.5q-271 0 -496 145q35 -4 78 -4q225 0 401 138q-105 2 -188 64.5t-114 159.5q33 -5 61 -5q43 0 85 11q-112 23 -185.5 111.5t-73.5 205.5v4q68 -38 146 -41
+q-66 44 -105 115t-39 154q0 88 44 163q121 -149 294.5 -238.5t371.5 -99.5q-8 38 -8 74q0 134 94.5 228.5t228.5 94.5q140 0 236 -102q109 21 205 78q-37 -115 -142 -178q93 10 186 50z" />
+    <glyph glyph-name="facebook" unicode="&#xf09a;" horiz-adv-x="1024" 
+d="M959 1524v-264h-157q-86 0 -116 -36t-30 -108v-189h293l-39 -296h-254v-759h-306v759h-255v296h255v218q0 186 104 288.5t277 102.5q147 0 228 -12z" />
+    <glyph glyph-name="github" unicode="&#xf09b;" 
+d="M768 1408q209 0 385.5 -103t279.5 -279.5t103 -385.5q0 -251 -146.5 -451.5t-378.5 -277.5q-27 -5 -40 7t-13 30q0 3 0.5 76.5t0.5 134.5q0 97 -52 142q57 6 102.5 18t94 39t81 66.5t53 105t20.5 150.5q0 119 -79 206q37 91 -8 204q-28 9 -81 -11t-92 -44l-38 -24
+q-93 26 -192 26t-192 -26q-16 11 -42.5 27t-83.5 38.5t-85 13.5q-45 -113 -8 -204q-79 -87 -79 -206q0 -85 20.5 -150t52.5 -105t80.5 -67t94 -39t102.5 -18q-39 -36 -49 -103q-21 -10 -45 -15t-57 -5t-65.5 21.5t-55.5 62.5q-19 32 -48.5 52t-49.5 24l-20 3q-21 0 -29 -4.5
+t-5 -11.5t9 -14t13 -12l7 -5q22 -10 43.5 -38t31.5 -51l10 -23q13 -38 44 -61.5t67 -30t69.5 -7t55.5 3.5l23 4q0 -38 0.5 -88.5t0.5 -54.5q0 -18 -13 -30t-40 -7q-232 77 -378.5 277.5t-146.5 451.5q0 209 103 385.5t279.5 279.5t385.5 103zM291 305q3 7 -7 12
+q-10 3 -13 -2q-3 -7 7 -12q9 -6 13 2zM322 271q7 5 -2 16q-10 9 -16 3q-7 -5 2 -16q10 -10 16 -3zM352 226q9 7 0 19q-8 13 -17 6q-9 -5 0 -18t17 -7zM394 184q8 8 -4 19q-12 12 -20 3q-9 -8 4 -19q12 -12 20 -3zM451 159q3 11 -13 16q-15 4 -19 -7t13 -15q15 -6 19 6z
+M514 154q0 13 -17 11q-16 0 -16 -11q0 -13 17 -11q16 0 16 11zM572 164q-2 11 -18 9q-16 -3 -14 -15t18 -8t14 14z" />
+    <glyph glyph-name="unlock" unicode="&#xf09c;" horiz-adv-x="1664" 
+d="M1664 960v-256q0 -26 -19 -45t-45 -19h-64q-26 0 -45 19t-19 45v256q0 106 -75 181t-181 75t-181 -75t-75 -181v-192h96q40 0 68 -28t28 -68v-576q0 -40 -28 -68t-68 -28h-960q-40 0 -68 28t-28 68v576q0 40 28 68t68 28h672v192q0 185 131.5 316.5t316.5 131.5
+t316.5 -131.5t131.5 -316.5z" />
+    <glyph glyph-name="credit_card" unicode="&#xf09d;" horiz-adv-x="1920" 
+d="M1760 1408q66 0 113 -47t47 -113v-1216q0 -66 -47 -113t-113 -47h-1600q-66 0 -113 47t-47 113v1216q0 66 47 113t113 47h1600zM160 1280q-13 0 -22.5 -9.5t-9.5 -22.5v-224h1664v224q0 13 -9.5 22.5t-22.5 9.5h-1600zM1760 0q13 0 22.5 9.5t9.5 22.5v608h-1664v-608
+q0 -13 9.5 -22.5t22.5 -9.5h1600zM256 128v128h256v-128h-256zM640 128v128h384v-128h-384z" />
+    <glyph glyph-name="rss" unicode="&#xf09e;" horiz-adv-x="1408" 
+d="M384 192q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM896 69q2 -28 -17 -48q-18 -21 -47 -21h-135q-25 0 -43 16.5t-20 41.5q-22 229 -184.5 391.5t-391.5 184.5q-25 2 -41.5 20t-16.5 43v135q0 29 21 47q17 17 43 17h5q160 -13 306 -80.5
+t259 -181.5q114 -113 181.5 -259t80.5 -306zM1408 67q2 -27 -18 -47q-18 -20 -46 -20h-143q-26 0 -44.5 17.5t-19.5 42.5q-12 215 -101 408.5t-231.5 336t-336 231.5t-408.5 102q-25 1 -42.5 19.5t-17.5 43.5v143q0 28 20 46q18 18 44 18h3q262 -13 501.5 -120t425.5 -294
+q187 -186 294 -425.5t120 -501.5z" />
+    <glyph glyph-name="hdd" unicode="&#xf0a0;" 
+d="M1040 320q0 -33 -23.5 -56.5t-56.5 -23.5t-56.5 23.5t-23.5 56.5t23.5 56.5t56.5 23.5t56.5 -23.5t23.5 -56.5zM1296 320q0 -33 -23.5 -56.5t-56.5 -23.5t-56.5 23.5t-23.5 56.5t23.5 56.5t56.5 23.5t56.5 -23.5t23.5 -56.5zM1408 160v320q0 13 -9.5 22.5t-22.5 9.5
+h-1216q-13 0 -22.5 -9.5t-9.5 -22.5v-320q0 -13 9.5 -22.5t22.5 -9.5h1216q13 0 22.5 9.5t9.5 22.5zM178 640h1180l-157 482q-4 13 -16 21.5t-26 8.5h-782q-14 0 -26 -8.5t-16 -21.5zM1536 480v-320q0 -66 -47 -113t-113 -47h-1216q-66 0 -113 47t-47 113v320q0 25 16 75
+l197 606q17 53 63 86t101 33h782q55 0 101 -33t63 -86l197 -606q16 -50 16 -75z" />
+    <glyph glyph-name="bullhorn" unicode="&#xf0a1;" horiz-adv-x="1792" 
+d="M1664 896q53 0 90.5 -37.5t37.5 -90.5t-37.5 -90.5t-90.5 -37.5v-384q0 -52 -38 -90t-90 -38q-417 347 -812 380q-58 -19 -91 -66t-31 -100.5t40 -92.5q-20 -33 -23 -65.5t6 -58t33.5 -55t48 -50t61.5 -50.5q-29 -58 -111.5 -83t-168.5 -11.5t-132 55.5q-7 23 -29.5 87.5
+t-32 94.5t-23 89t-15 101t3.5 98.5t22 110.5h-122q-66 0 -113 47t-47 113v192q0 66 47 113t113 47h480q435 0 896 384q52 0 90 -38t38 -90v-384zM1536 292v954q-394 -302 -768 -343v-270q377 -42 768 -341z" />
+    <glyph glyph-name="bell" unicode="&#xf0a2;" horiz-adv-x="1792" 
+d="M912 -160q0 16 -16 16q-59 0 -101.5 42.5t-42.5 101.5q0 16 -16 16t-16 -16q0 -73 51.5 -124.5t124.5 -51.5q16 0 16 16zM246 128h1300q-266 300 -266 832q0 51 -24 105t-69 103t-121.5 80.5t-169.5 31.5t-169.5 -31.5t-121.5 -80.5t-69 -103t-24 -105q0 -532 -266 -832z
+M1728 128q0 -52 -38 -90t-90 -38h-448q0 -106 -75 -181t-181 -75t-181 75t-75 181h-448q-52 0 -90 38t-38 90q50 42 91 88t85 119.5t74.5 158.5t50 206t19.5 260q0 152 117 282.5t307 158.5q-8 19 -8 39q0 40 28 68t68 28t68 -28t28 -68q0 -20 -8 -39q190 -28 307 -158.5
+t117 -282.5q0 -139 19.5 -260t50 -206t74.5 -158.5t85 -119.5t91 -88z" />
+    <glyph glyph-name="certificate" unicode="&#xf0a3;" 
+d="M1376 640l138 -135q30 -28 20 -70q-12 -41 -52 -51l-188 -48l53 -186q12 -41 -19 -70q-29 -31 -70 -19l-186 53l-48 -188q-10 -40 -51 -52q-12 -2 -19 -2q-31 0 -51 22l-135 138l-135 -138q-28 -30 -70 -20q-41 11 -51 52l-48 188l-186 -53q-41 -12 -70 19q-31 29 -19 70
+l53 186l-188 48q-40 10 -52 51q-10 42 20 70l138 135l-138 135q-30 28 -20 70q12 41 52 51l188 48l-53 186q-12 41 19 70q29 31 70 19l186 -53l48 188q10 41 51 51q41 12 70 -19l135 -139l135 139q29 30 70 19q41 -10 51 -51l48 -188l186 53q41 12 70 -19q31 -29 19 -70
+l-53 -186l188 -48q40 -10 52 -51q10 -42 -20 -70z" />
+    <glyph glyph-name="hand_right" unicode="&#xf0a4;" horiz-adv-x="1792" 
+d="M256 192q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1664 768q0 51 -39 89.5t-89 38.5h-576q0 20 15 48.5t33 55t33 68t15 84.5q0 67 -44.5 97.5t-115.5 30.5q-24 0 -90 -139q-24 -44 -37 -65q-40 -64 -112 -145q-71 -81 -101 -106
+q-69 -57 -140 -57h-32v-640h32q72 0 167 -32t193.5 -64t179.5 -32q189 0 189 167q0 26 -5 56q30 16 47.5 52.5t17.5 73.5t-18 69q53 50 53 119q0 25 -10 55.5t-25 47.5h331q52 0 90 38t38 90zM1792 769q0 -105 -75.5 -181t-180.5 -76h-169q-4 -62 -37 -119q3 -21 3 -43
+q0 -101 -60 -178q1 -139 -85 -219.5t-227 -80.5q-133 0 -322 69q-164 59 -223 59h-288q-53 0 -90.5 37.5t-37.5 90.5v640q0 53 37.5 90.5t90.5 37.5h288q10 0 21.5 4.5t23.5 14t22.5 18t24 22.5t20.5 21.5t19 21.5t14 17q65 74 100 129q13 21 33 62t37 72t40.5 63t55 49.5
+t69.5 17.5q125 0 206.5 -67t81.5 -189q0 -68 -22 -128h374q104 0 180 -76t76 -179z" />
+    <glyph glyph-name="hand_left" unicode="&#xf0a5;" horiz-adv-x="1792" 
+d="M1376 128h32v640h-32q-35 0 -67.5 12t-62.5 37t-50 46t-49 54q-8 9 -12 14q-72 81 -112 145q-14 22 -38 68q-1 3 -10.5 22.5t-18.5 36t-20 35.5t-21.5 30.5t-18.5 11.5q-71 0 -115.5 -30.5t-44.5 -97.5q0 -43 15 -84.5t33 -68t33 -55t15 -48.5h-576q-50 0 -89 -38.5
+t-39 -89.5q0 -52 38 -90t90 -38h331q-15 -17 -25 -47.5t-10 -55.5q0 -69 53 -119q-18 -32 -18 -69t17.5 -73.5t47.5 -52.5q-4 -24 -4 -56q0 -85 48.5 -126t135.5 -41q84 0 183 32t194 64t167 32zM1664 192q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45z
+M1792 768v-640q0 -53 -37.5 -90.5t-90.5 -37.5h-288q-59 0 -223 -59q-190 -69 -317 -69q-142 0 -230 77.5t-87 217.5l1 5q-61 76 -61 178q0 22 3 43q-33 57 -37 119h-169q-105 0 -180.5 76t-75.5 181q0 103 76 179t180 76h374q-22 60 -22 128q0 122 81.5 189t206.5 67
+q38 0 69.5 -17.5t55 -49.5t40.5 -63t37 -72t33 -62q35 -55 100 -129q2 -3 14 -17t19 -21.5t20.5 -21.5t24 -22.5t22.5 -18t23.5 -14t21.5 -4.5h288q53 0 90.5 -37.5t37.5 -90.5z" />
+    <glyph glyph-name="hand_up" unicode="&#xf0a6;" 
+d="M1280 -64q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1408 700q0 189 -167 189q-26 0 -56 -5q-16 30 -52.5 47.5t-73.5 17.5t-69 -18q-50 53 -119 53q-25 0 -55.5 -10t-47.5 -25v331q0 52 -38 90t-90 38q-51 0 -89.5 -39t-38.5 -89v-576
+q-20 0 -48.5 15t-55 33t-68 33t-84.5 15q-67 0 -97.5 -44.5t-30.5 -115.5q0 -24 139 -90q44 -24 65 -37q64 -40 145 -112q81 -71 106 -101q57 -69 57 -140v-32h640v32q0 72 32 167t64 193.5t32 179.5zM1536 705q0 -133 -69 -322q-59 -164 -59 -223v-288q0 -53 -37.5 -90.5
+t-90.5 -37.5h-640q-53 0 -90.5 37.5t-37.5 90.5v288q0 10 -4.5 21.5t-14 23.5t-18 22.5t-22.5 24t-21.5 20.5t-21.5 19t-17 14q-74 65 -129 100q-21 13 -62 33t-72 37t-63 40.5t-49.5 55t-17.5 69.5q0 125 67 206.5t189 81.5q68 0 128 -22v374q0 104 76 180t179 76
+q105 0 181 -75.5t76 -180.5v-169q62 -4 119 -37q21 3 43 3q101 0 178 -60q139 1 219.5 -85t80.5 -227z" />
+    <glyph glyph-name="hand_down" unicode="&#xf0a7;" 
+d="M1408 576q0 84 -32 183t-64 194t-32 167v32h-640v-32q0 -35 -12 -67.5t-37 -62.5t-46 -50t-54 -49q-9 -8 -14 -12q-81 -72 -145 -112q-22 -14 -68 -38q-3 -1 -22.5 -10.5t-36 -18.5t-35.5 -20t-30.5 -21.5t-11.5 -18.5q0 -71 30.5 -115.5t97.5 -44.5q43 0 84.5 15t68 33
+t55 33t48.5 15v-576q0 -50 38.5 -89t89.5 -39q52 0 90 38t38 90v331q46 -35 103 -35q69 0 119 53q32 -18 69 -18t73.5 17.5t52.5 47.5q24 -4 56 -4q85 0 126 48.5t41 135.5zM1280 1344q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1536 580
+q0 -142 -77.5 -230t-217.5 -87l-5 1q-76 -61 -178 -61q-22 0 -43 3q-54 -30 -119 -37v-169q0 -105 -76 -180.5t-181 -75.5q-103 0 -179 76t-76 180v374q-54 -22 -128 -22q-121 0 -188.5 81.5t-67.5 206.5q0 38 17.5 69.5t49.5 55t63 40.5t72 37t62 33q55 35 129 100
+q3 2 17 14t21.5 19t21.5 20.5t22.5 24t18 22.5t14 23.5t4.5 21.5v288q0 53 37.5 90.5t90.5 37.5h640q53 0 90.5 -37.5t37.5 -90.5v-288q0 -59 59 -223q69 -190 69 -317z" />
+    <glyph glyph-name="circle_arrow_left" unicode="&#xf0a8;" 
+d="M1280 576v128q0 26 -19 45t-45 19h-502l189 189q19 19 19 45t-19 45l-91 91q-18 18 -45 18t-45 -18l-362 -362l-91 -91q-18 -18 -18 -45t18 -45l91 -91l362 -362q18 -18 45 -18t45 18l91 91q18 18 18 45t-18 45l-189 189h502q26 0 45 19t19 45zM1536 640
+q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="circle_arrow_right" unicode="&#xf0a9;" 
+d="M1285 640q0 27 -18 45l-91 91l-362 362q-18 18 -45 18t-45 -18l-91 -91q-18 -18 -18 -45t18 -45l189 -189h-502q-26 0 -45 -19t-19 -45v-128q0 -26 19 -45t45 -19h502l-189 -189q-19 -19 -19 -45t19 -45l91 -91q18 -18 45 -18t45 18l362 362l91 91q18 18 18 45zM1536 640
+q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="circle_arrow_up" unicode="&#xf0aa;" 
+d="M1284 641q0 27 -18 45l-362 362l-91 91q-18 18 -45 18t-45 -18l-91 -91l-362 -362q-18 -18 -18 -45t18 -45l91 -91q18 -18 45 -18t45 18l189 189v-502q0 -26 19 -45t45 -19h128q26 0 45 19t19 45v502l189 -189q19 -19 45 -19t45 19l91 91q18 18 18 45zM1536 640
+q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="circle_arrow_down" unicode="&#xf0ab;" 
+d="M1284 639q0 27 -18 45l-91 91q-18 18 -45 18t-45 -18l-189 -189v502q0 26 -19 45t-45 19h-128q-26 0 -45 -19t-19 -45v-502l-189 189q-19 19 -45 19t-45 -19l-91 -91q-18 -18 -18 -45t18 -45l362 -362l91 -91q18 -18 45 -18t45 18l91 91l362 362q18 18 18 45zM1536 640
+q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="globe" unicode="&#xf0ac;" 
+d="M768 1408q209 0 385.5 -103t279.5 -279.5t103 -385.5t-103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103zM1042 887q-2 -1 -9.5 -9.5t-13.5 -9.5q2 0 4.5 5t5 11t3.5 7q6 7 22 15q14 6 52 12q34 8 51 -11
+q-2 2 9.5 13t14.5 12q3 2 15 4.5t15 7.5l2 22q-12 -1 -17.5 7t-6.5 21q0 -2 -6 -8q0 7 -4.5 8t-11.5 -1t-9 -1q-10 3 -15 7.5t-8 16.5t-4 15q-2 5 -9.5 11t-9.5 10q-1 2 -2.5 5.5t-3 6.5t-4 5.5t-5.5 2.5t-7 -5t-7.5 -10t-4.5 -5q-3 2 -6 1.5t-4.5 -1t-4.5 -3t-5 -3.5
+q-3 -2 -8.5 -3t-8.5 -2q15 5 -1 11q-10 4 -16 3q9 4 7.5 12t-8.5 14h5q-1 4 -8.5 8.5t-17.5 8.5t-13 6q-8 5 -34 9.5t-33 0.5q-5 -6 -4.5 -10.5t4 -14t3.5 -12.5q1 -6 -5.5 -13t-6.5 -12q0 -7 14 -15.5t10 -21.5q-3 -8 -16 -16t-16 -12q-5 -8 -1.5 -18.5t10.5 -16.5
+q2 -2 1.5 -4t-3.5 -4.5t-5.5 -4t-6.5 -3.5l-3 -2q-11 -5 -20.5 6t-13.5 26q-7 25 -16 30q-23 8 -29 -1q-5 13 -41 26q-25 9 -58 4q6 1 0 15q-7 15 -19 12q3 6 4 17.5t1 13.5q3 13 12 23q1 1 7 8.5t9.5 13.5t0.5 6q35 -4 50 11q5 5 11.5 17t10.5 17q9 6 14 5.5t14.5 -5.5
+t14.5 -5q14 -1 15.5 11t-7.5 20q12 -1 3 17q-4 7 -8 9q-12 4 -27 -5q-8 -4 2 -8q-1 1 -9.5 -10.5t-16.5 -17.5t-16 5q-1 1 -5.5 13.5t-9.5 13.5q-8 0 -16 -15q3 8 -11 15t-24 8q19 12 -8 27q-7 4 -20.5 5t-19.5 -4q-5 -7 -5.5 -11.5t5 -8t10.5 -5.5t11.5 -4t8.5 -3
+q14 -10 8 -14q-2 -1 -8.5 -3.5t-11.5 -4.5t-6 -4q-3 -4 0 -14t-2 -14q-5 5 -9 17.5t-7 16.5q7 -9 -25 -6l-10 1q-4 0 -16 -2t-20.5 -1t-13.5 8q-4 8 0 20q1 4 4 2q-4 3 -11 9.5t-10 8.5q-46 -15 -94 -41q6 -1 12 1q5 2 13 6.5t10 5.5q34 14 42 7l5 5q14 -16 20 -25
+q-7 4 -30 1q-20 -6 -22 -12q7 -12 5 -18q-4 3 -11.5 10t-14.5 11t-15 5q-16 0 -22 -1q-146 -80 -235 -222q7 -7 12 -8q4 -1 5 -9t2.5 -11t11.5 3q9 -8 3 -19q1 1 44 -27q19 -17 21 -21q3 -11 -10 -18q-1 2 -9 9t-9 4q-3 -5 0.5 -18.5t10.5 -12.5q-7 0 -9.5 -16t-2.5 -35.5
+t-1 -23.5l2 -1q-3 -12 5.5 -34.5t21.5 -19.5q-13 -3 20 -43q6 -8 8 -9q3 -2 12 -7.5t15 -10t10 -10.5q4 -5 10 -22.5t14 -23.5q-2 -6 9.5 -20t10.5 -23q-1 0 -2.5 -1t-2.5 -1q3 -7 15.5 -14t15.5 -13q1 -3 2 -10t3 -11t8 -2q2 20 -24 62q-15 25 -17 29q-3 5 -5.5 15.5
+t-4.5 14.5q2 0 6 -1.5t8.5 -3.5t7.5 -4t2 -3q-3 -7 2 -17.5t12 -18.5t17 -19t12 -13q6 -6 14 -19.5t0 -13.5q9 0 20 -10.5t17 -19.5q5 -8 8 -26t5 -24q2 -7 8.5 -13.5t12.5 -9.5l16 -8t13 -7q5 -2 18.5 -10.5t21.5 -11.5q10 -4 16 -4t14.5 2.5t13.5 3.5q15 2 29 -15t21 -21
+q36 -19 55 -11q-2 -1 0.5 -7.5t8 -15.5t9 -14.5t5.5 -8.5q5 -6 18 -15t18 -15q6 4 7 9q-3 -8 7 -20t18 -10q14 3 14 32q-31 -15 -49 18q0 1 -2.5 5.5t-4 8.5t-2.5 8.5t0 7.5t5 3q9 0 10 3.5t-2 12.5t-4 13q-1 8 -11 20t-12 15q-5 -9 -16 -8t-16 9q0 -1 -1.5 -5.5t-1.5 -6.5
+q-13 0 -15 1q1 3 2.5 17.5t3.5 22.5q1 4 5.5 12t7.5 14.5t4 12.5t-4.5 9.5t-17.5 2.5q-19 -1 -26 -20q-1 -3 -3 -10.5t-5 -11.5t-9 -7q-7 -3 -24 -2t-24 5q-13 8 -22.5 29t-9.5 37q0 10 2.5 26.5t3 25t-5.5 24.5q3 2 9 9.5t10 10.5q2 1 4.5 1.5t4.5 0t4 1.5t3 6q-1 1 -4 3
+q-3 3 -4 3q7 -3 28.5 1.5t27.5 -1.5q15 -11 22 2q0 1 -2.5 9.5t-0.5 13.5q5 -27 29 -9q3 -3 15.5 -5t17.5 -5q3 -2 7 -5.5t5.5 -4.5t5 0.5t8.5 6.5q10 -14 12 -24q11 -40 19 -44q7 -3 11 -2t4.5 9.5t0 14t-1.5 12.5l-1 8v18l-1 8q-15 3 -18.5 12t1.5 18.5t15 18.5q1 1 8 3.5
+t15.5 6.5t12.5 8q21 19 15 35q7 0 11 9q-1 0 -5 3t-7.5 5t-4.5 2q9 5 2 16q5 3 7.5 11t7.5 10q9 -12 21 -2q8 8 1 16q5 7 20.5 10.5t18.5 9.5q7 -2 8 2t1 12t3 12q4 5 15 9t13 5l17 11q3 4 0 4q18 -2 31 11q10 11 -6 20q3 6 -3 9.5t-15 5.5q3 1 11.5 0.5t10.5 1.5
+q15 10 -7 16q-17 5 -43 -12zM879 10q206 36 351 189q-3 3 -12.5 4.5t-12.5 3.5q-18 7 -24 8q1 7 -2.5 13t-8 9t-12.5 8t-11 7q-2 2 -7 6t-7 5.5t-7.5 4.5t-8.5 2t-10 -1l-3 -1q-3 -1 -5.5 -2.5t-5.5 -3t-4 -3t0 -2.5q-21 17 -36 22q-5 1 -11 5.5t-10.5 7t-10 1.5t-11.5 -7
+q-5 -5 -6 -15t-2 -13q-7 5 0 17.5t2 18.5q-3 6 -10.5 4.5t-12 -4.5t-11.5 -8.5t-9 -6.5t-8.5 -5.5t-8.5 -7.5q-3 -4 -6 -12t-5 -11q-2 4 -11.5 6.5t-9.5 5.5q2 -10 4 -35t5 -38q7 -31 -12 -48q-27 -25 -29 -40q-4 -22 12 -26q0 -7 -8 -20.5t-7 -21.5q0 -6 2 -16z" />
+    <glyph glyph-name="wrench" unicode="&#xf0ad;" horiz-adv-x="1664" 
+d="M384 64q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1028 484l-682 -682q-37 -37 -90 -37q-52 0 -91 37l-106 108q-38 36 -38 90q0 53 38 91l681 681q39 -98 114.5 -173.5t173.5 -114.5zM1662 919q0 -39 -23 -106q-47 -134 -164.5 -217.5
+t-258.5 -83.5q-185 0 -316.5 131.5t-131.5 316.5t131.5 316.5t316.5 131.5q58 0 121.5 -16.5t107.5 -46.5q16 -11 16 -28t-16 -28l-293 -169v-224l193 -107q5 3 79 48.5t135.5 81t70.5 35.5q15 0 23.5 -10t8.5 -25z" />
+    <glyph glyph-name="tasks" unicode="&#xf0ae;" horiz-adv-x="1792" 
+d="M1024 128h640v128h-640v-128zM640 640h1024v128h-1024v-128zM1280 1152h384v128h-384v-128zM1792 320v-256q0 -26 -19 -45t-45 -19h-1664q-26 0 -45 19t-19 45v256q0 26 19 45t45 19h1664q26 0 45 -19t19 -45zM1792 832v-256q0 -26 -19 -45t-45 -19h-1664q-26 0 -45 19
+t-19 45v256q0 26 19 45t45 19h1664q26 0 45 -19t19 -45zM1792 1344v-256q0 -26 -19 -45t-45 -19h-1664q-26 0 -45 19t-19 45v256q0 26 19 45t45 19h1664q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="filter" unicode="&#xf0b0;" horiz-adv-x="1408" 
+d="M1403 1241q17 -41 -14 -70l-493 -493v-742q0 -42 -39 -59q-13 -5 -25 -5q-27 0 -45 19l-256 256q-19 19 -19 45v486l-493 493q-31 29 -14 70q17 39 59 39h1280q42 0 59 -39z" />
+    <glyph glyph-name="briefcase" unicode="&#xf0b1;" horiz-adv-x="1792" 
+d="M640 1280h512v128h-512v-128zM1792 640v-480q0 -66 -47 -113t-113 -47h-1472q-66 0 -113 47t-47 113v480h672v-160q0 -26 19 -45t45 -19h320q26 0 45 19t19 45v160h672zM1024 640v-128h-256v128h256zM1792 1120v-384h-1792v384q0 66 47 113t113 47h352v160q0 40 28 68
+t68 28h576q40 0 68 -28t28 -68v-160h352q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="fullscreen" unicode="&#xf0b2;" 
+d="M1283 995l-355 -355l355 -355l144 144q29 31 70 14q39 -17 39 -59v-448q0 -26 -19 -45t-45 -19h-448q-42 0 -59 40q-17 39 14 69l144 144l-355 355l-355 -355l144 -144q31 -30 14 -69q-17 -40 -59 -40h-448q-26 0 -45 19t-19 45v448q0 42 40 59q39 17 69 -14l144 -144
+l355 355l-355 355l-144 -144q-19 -19 -45 -19q-12 0 -24 5q-40 17 -40 59v448q0 26 19 45t45 19h448q42 0 59 -40q17 -39 -14 -69l-144 -144l355 -355l355 355l-144 144q-31 30 -14 69q17 40 59 40h448q26 0 45 -19t19 -45v-448q0 -42 -39 -59q-13 -5 -25 -5q-26 0 -45 19z
+" />
+    <glyph glyph-name="group" unicode="&#xf0c0;" horiz-adv-x="1920" 
+d="M593 640q-162 -5 -265 -128h-134q-82 0 -138 40.5t-56 118.5q0 353 124 353q6 0 43.5 -21t97.5 -42.5t119 -21.5q67 0 133 23q-5 -37 -5 -66q0 -139 81 -256zM1664 3q0 -120 -73 -189.5t-194 -69.5h-874q-121 0 -194 69.5t-73 189.5q0 53 3.5 103.5t14 109t26.5 108.5
+t43 97.5t62 81t85.5 53.5t111.5 20q10 0 43 -21.5t73 -48t107 -48t135 -21.5t135 21.5t107 48t73 48t43 21.5q61 0 111.5 -20t85.5 -53.5t62 -81t43 -97.5t26.5 -108.5t14 -109t3.5 -103.5zM640 1280q0 -106 -75 -181t-181 -75t-181 75t-75 181t75 181t181 75t181 -75
+t75 -181zM1344 896q0 -159 -112.5 -271.5t-271.5 -112.5t-271.5 112.5t-112.5 271.5t112.5 271.5t271.5 112.5t271.5 -112.5t112.5 -271.5zM1920 671q0 -78 -56 -118.5t-138 -40.5h-134q-103 123 -265 128q81 117 81 256q0 29 -5 66q66 -23 133 -23q59 0 119 21.5t97.5 42.5
+t43.5 21q124 0 124 -353zM1792 1280q0 -106 -75 -181t-181 -75t-181 75t-75 181t75 181t181 75t181 -75t75 -181z" />
+    <glyph glyph-name="link" unicode="&#xf0c1;" horiz-adv-x="1664" 
+d="M1456 320q0 40 -28 68l-208 208q-28 28 -68 28q-42 0 -72 -32q3 -3 19 -18.5t21.5 -21.5t15 -19t13 -25.5t3.5 -27.5q0 -40 -28 -68t-68 -28q-15 0 -27.5 3.5t-25.5 13t-19 15t-21.5 21.5t-18.5 19q-33 -31 -33 -73q0 -40 28 -68l206 -207q27 -27 68 -27q40 0 68 26
+l147 146q28 28 28 67zM753 1025q0 40 -28 68l-206 207q-28 28 -68 28q-39 0 -68 -27l-147 -146q-28 -28 -28 -67q0 -40 28 -68l208 -208q27 -27 68 -27q42 0 72 31q-3 3 -19 18.5t-21.5 21.5t-15 19t-13 25.5t-3.5 27.5q0 40 28 68t68 28q15 0 27.5 -3.5t25.5 -13t19 -15
+t21.5 -21.5t18.5 -19q33 31 33 73zM1648 320q0 -120 -85 -203l-147 -146q-83 -83 -203 -83q-121 0 -204 85l-206 207q-83 83 -83 203q0 123 88 209l-88 88q-86 -88 -208 -88q-120 0 -204 84l-208 208q-84 84 -84 204t85 203l147 146q83 83 203 83q121 0 204 -85l206 -207
+q83 -83 83 -203q0 -123 -88 -209l88 -88q86 88 208 88q120 0 204 -84l208 -208q84 -84 84 -204z" />
+    <glyph glyph-name="cloud" unicode="&#xf0c2;" horiz-adv-x="1920" 
+d="M1920 384q0 -159 -112.5 -271.5t-271.5 -112.5h-1088q-185 0 -316.5 131.5t-131.5 316.5q0 132 71 241.5t187 163.5q-2 28 -2 43q0 212 150 362t362 150q158 0 286.5 -88t187.5 -230q70 62 166 62q106 0 181 -75t75 -181q0 -75 -41 -138q129 -30 213 -134.5t84 -239.5z
+" />
+    <glyph glyph-name="beaker" unicode="&#xf0c3;" horiz-adv-x="1664" 
+d="M1527 88q56 -89 21.5 -152.5t-140.5 -63.5h-1152q-106 0 -140.5 63.5t21.5 152.5l503 793v399h-64q-26 0 -45 19t-19 45t19 45t45 19h512q26 0 45 -19t19 -45t-19 -45t-45 -19h-64v-399zM748 813l-272 -429h712l-272 429l-20 31v37v399h-128v-399v-37z" />
+    <glyph glyph-name="cut" unicode="&#xf0c4;" horiz-adv-x="1792" 
+d="M960 640q26 0 45 -19t19 -45t-19 -45t-45 -19t-45 19t-19 45t19 45t45 19zM1260 576l507 -398q28 -20 25 -56q-5 -35 -35 -51l-128 -64q-13 -7 -29 -7q-17 0 -31 8l-690 387l-110 -66q-8 -4 -12 -5q14 -49 10 -97q-7 -77 -56 -147.5t-132 -123.5q-132 -84 -277 -84
+q-136 0 -222 78q-90 84 -79 207q7 76 56 147t131 124q132 84 278 84q83 0 151 -31q9 13 22 22l122 73l-122 73q-13 9 -22 22q-68 -31 -151 -31q-146 0 -278 84q-82 53 -131 124t-56 147q-5 59 15.5 113t63.5 93q85 79 222 79q145 0 277 -84q83 -52 132 -123t56 -148
+q4 -48 -10 -97q4 -1 12 -5l110 -66l690 387q14 8 31 8q16 0 29 -7l128 -64q30 -16 35 -51q3 -36 -25 -56zM579 836q46 42 21 108t-106 117q-92 59 -192 59q-74 0 -113 -36q-46 -42 -21 -108t106 -117q92 -59 192 -59q74 0 113 36zM494 91q81 51 106 117t-21 108
+q-39 36 -113 36q-100 0 -192 -59q-81 -51 -106 -117t21 -108q39 -36 113 -36q100 0 192 59zM672 704l96 -58v11q0 36 33 56l14 8l-79 47l-26 -26q-3 -3 -10 -11t-12 -12q-2 -2 -4 -3.5t-3 -2.5zM896 480l96 -32l736 576l-128 64l-768 -431v-113l-160 -96l9 -8q2 -2 7 -6
+q4 -4 11 -12t11 -12l26 -26zM1600 64l128 64l-520 408l-177 -138q-2 -3 -13 -7z" />
+    <glyph glyph-name="copy" unicode="&#xf0c5;" horiz-adv-x="1792" 
+d="M1696 1152q40 0 68 -28t28 -68v-1216q0 -40 -28 -68t-68 -28h-960q-40 0 -68 28t-28 68v288h-544q-40 0 -68 28t-28 68v672q0 40 20 88t48 76l408 408q28 28 76 48t88 20h416q40 0 68 -28t28 -68v-328q68 40 128 40h416zM1152 939l-299 -299h299v299zM512 1323l-299 -299
+h299v299zM708 676l316 316v416h-384v-416q0 -40 -28 -68t-68 -28h-416v-640h512v256q0 40 20 88t48 76zM1664 -128v1152h-384v-416q0 -40 -28 -68t-68 -28h-416v-640h896z" />
+    <glyph glyph-name="paper_clip" unicode="&#xf0c6;" horiz-adv-x="1408" 
+d="M1404 151q0 -117 -79 -196t-196 -79q-135 0 -235 100l-777 776q-113 115 -113 271q0 159 110 270t269 111q158 0 273 -113l605 -606q10 -10 10 -22q0 -16 -30.5 -46.5t-46.5 -30.5q-13 0 -23 10l-606 607q-79 77 -181 77q-106 0 -179 -75t-73 -181q0 -105 76 -181
+l776 -777q63 -63 145 -63q64 0 106 42t42 106q0 82 -63 145l-581 581q-26 24 -60 24q-29 0 -48 -19t-19 -48q0 -32 25 -59l410 -410q10 -10 10 -22q0 -16 -31 -47t-47 -31q-12 0 -22 10l-410 410q-63 61 -63 149q0 82 57 139t139 57q88 0 149 -63l581 -581q100 -98 100 -235
+z" />
+    <glyph glyph-name="save" unicode="&#xf0c7;" 
+d="M384 0h768v384h-768v-384zM1280 0h128v896q0 14 -10 38.5t-20 34.5l-281 281q-10 10 -34 20t-39 10v-416q0 -40 -28 -68t-68 -28h-576q-40 0 -68 28t-28 68v416h-128v-1280h128v416q0 40 28 68t68 28h832q40 0 68 -28t28 -68v-416zM896 928v320q0 13 -9.5 22.5t-22.5 9.5
+h-192q-13 0 -22.5 -9.5t-9.5 -22.5v-320q0 -13 9.5 -22.5t22.5 -9.5h192q13 0 22.5 9.5t9.5 22.5zM1536 896v-928q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1344q0 40 28 68t68 28h928q40 0 88 -20t76 -48l280 -280q28 -28 48 -76t20 -88z" />
+    <glyph glyph-name="sign_blank" unicode="&#xf0c8;" 
+d="M1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="reorder" unicode="&#xf0c9;" 
+d="M1536 192v-128q0 -26 -19 -45t-45 -19h-1408q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1408q26 0 45 -19t19 -45zM1536 704v-128q0 -26 -19 -45t-45 -19h-1408q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1408q26 0 45 -19t19 -45zM1536 1216v-128q0 -26 -19 -45
+t-45 -19h-1408q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h1408q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="ul" unicode="&#xf0ca;" horiz-adv-x="1792" 
+d="M384 128q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM384 640q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM1792 224v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1216q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5
+t22.5 9.5h1216q13 0 22.5 -9.5t9.5 -22.5zM384 1152q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM1792 736v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1216q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1216q13 0 22.5 -9.5t9.5 -22.5z
+M1792 1248v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1216q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1216q13 0 22.5 -9.5t9.5 -22.5z" />
+    <glyph glyph-name="ol" unicode="&#xf0cb;" horiz-adv-x="1792" 
+d="M381 -84q0 -80 -54.5 -126t-135.5 -46q-106 0 -172 66l57 88q49 -45 106 -45q29 0 50.5 14.5t21.5 42.5q0 64 -105 56l-26 56q8 10 32.5 43.5t42.5 54t37 38.5v1q-16 0 -48.5 -1t-48.5 -1v-53h-106v152h333v-88l-95 -115q51 -12 81 -49t30 -88zM383 543v-159h-362
+q-6 36 -6 54q0 51 23.5 93t56.5 68t66 47.5t56.5 43.5t23.5 45q0 25 -14.5 38.5t-39.5 13.5q-46 0 -81 -58l-85 59q24 51 71.5 79.5t105.5 28.5q73 0 123 -41.5t50 -112.5q0 -50 -34 -91.5t-75 -64.5t-75.5 -50.5t-35.5 -52.5h127v60h105zM1792 224v-192q0 -13 -9.5 -22.5
+t-22.5 -9.5h-1216q-13 0 -22.5 9.5t-9.5 22.5v192q0 14 9 23t23 9h1216q13 0 22.5 -9.5t9.5 -22.5zM384 1123v-99h-335v99h107q0 41 0.5 121.5t0.5 121.5v12h-2q-8 -17 -50 -54l-71 76l136 127h106v-404h108zM1792 736v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1216
+q-13 0 -22.5 9.5t-9.5 22.5v192q0 14 9 23t23 9h1216q13 0 22.5 -9.5t9.5 -22.5zM1792 1248v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1216q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1216q13 0 22.5 -9.5t9.5 -22.5z" />
+    <glyph glyph-name="strikethrough" unicode="&#xf0cc;" horiz-adv-x="1792" 
+d="M1760 640q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-1728q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h1728zM483 704q-28 35 -51 80q-48 98 -48 188q0 181 134 309q133 127 393 127q50 0 167 -19q66 -12 177 -48q10 -38 21 -118q14 -123 14 -183q0 -18 -5 -45l-12 -3l-84 6
+l-14 2q-50 149 -103 205q-88 91 -210 91q-114 0 -182 -59q-67 -58 -67 -146q0 -73 66 -140t279 -129q69 -20 173 -66q58 -28 95 -52h-743zM990 448h411q7 -39 7 -92q0 -111 -41 -212q-23 -56 -71 -104q-37 -35 -109 -81q-80 -48 -153 -66q-80 -21 -203 -21q-114 0 -195 23
+l-140 40q-57 16 -72 28q-8 8 -8 22v13q0 108 -2 156q-1 30 0 68l2 37v44l102 2q15 -34 30 -71t22.5 -56t12.5 -27q35 -57 80 -94q43 -36 105 -57q59 -22 132 -22q64 0 139 27q77 26 122 86q47 61 47 129q0 84 -81 157q-34 29 -137 71z" />
+    <glyph glyph-name="underline" unicode="&#xf0cd;" 
+d="M48 1313q-37 2 -45 4l-3 88q13 1 40 1q60 0 112 -4q132 -7 166 -7q86 0 168 3q116 4 146 5q56 0 86 2l-1 -14l2 -64v-9q-60 -9 -124 -9q-60 0 -79 -25q-13 -14 -13 -132q0 -13 0.5 -32.5t0.5 -25.5l1 -229l14 -280q6 -124 51 -202q35 -59 96 -92q88 -47 177 -47
+q104 0 191 28q56 18 99 51q48 36 65 64q36 56 53 114q21 73 21 229q0 79 -3.5 128t-11 122.5t-13.5 159.5l-4 59q-5 67 -24 88q-34 35 -77 34l-100 -2l-14 3l2 86h84l205 -10q76 -3 196 10l18 -2q6 -38 6 -51q0 -7 -4 -31q-45 -12 -84 -13q-73 -11 -79 -17q-15 -15 -15 -41
+q0 -7 1.5 -27t1.5 -31q8 -19 22 -396q6 -195 -15 -304q-15 -76 -41 -122q-38 -65 -112 -123q-75 -57 -182 -89q-109 -33 -255 -33q-167 0 -284 46q-119 47 -179 122q-61 76 -83 195q-16 80 -16 237v333q0 188 -17 213q-25 36 -147 39zM1536 -96v64q0 14 -9 23t-23 9h-1472
+q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h1472q14 0 23 9t9 23z" />
+    <glyph glyph-name="table" unicode="&#xf0ce;" horiz-adv-x="1664" 
+d="M512 160v192q0 14 -9 23t-23 9h-320q-14 0 -23 -9t-9 -23v-192q0 -14 9 -23t23 -9h320q14 0 23 9t9 23zM512 544v192q0 14 -9 23t-23 9h-320q-14 0 -23 -9t-9 -23v-192q0 -14 9 -23t23 -9h320q14 0 23 9t9 23zM1024 160v192q0 14 -9 23t-23 9h-320q-14 0 -23 -9t-9 -23
+v-192q0 -14 9 -23t23 -9h320q14 0 23 9t9 23zM512 928v192q0 14 -9 23t-23 9h-320q-14 0 -23 -9t-9 -23v-192q0 -14 9 -23t23 -9h320q14 0 23 9t9 23zM1024 544v192q0 14 -9 23t-23 9h-320q-14 0 -23 -9t-9 -23v-192q0 -14 9 -23t23 -9h320q14 0 23 9t9 23zM1536 160v192
+q0 14 -9 23t-23 9h-320q-14 0 -23 -9t-9 -23v-192q0 -14 9 -23t23 -9h320q14 0 23 9t9 23zM1024 928v192q0 14 -9 23t-23 9h-320q-14 0 -23 -9t-9 -23v-192q0 -14 9 -23t23 -9h320q14 0 23 9t9 23zM1536 544v192q0 14 -9 23t-23 9h-320q-14 0 -23 -9t-9 -23v-192
+q0 -14 9 -23t23 -9h320q14 0 23 9t9 23zM1536 928v192q0 14 -9 23t-23 9h-320q-14 0 -23 -9t-9 -23v-192q0 -14 9 -23t23 -9h320q14 0 23 9t9 23zM1664 1248v-1088q0 -66 -47 -113t-113 -47h-1344q-66 0 -113 47t-47 113v1088q0 66 47 113t113 47h1344q66 0 113 -47t47 -113
+z" />
+    <glyph glyph-name="magic" unicode="&#xf0d0;" horiz-adv-x="1664" 
+d="M1190 955l293 293l-107 107l-293 -293zM1637 1248q0 -27 -18 -45l-1286 -1286q-18 -18 -45 -18t-45 18l-198 198q-18 18 -18 45t18 45l1286 1286q18 18 45 18t45 -18l198 -198q18 -18 18 -45zM286 1438l98 -30l-98 -30l-30 -98l-30 98l-98 30l98 30l30 98zM636 1276
+l196 -60l-196 -60l-60 -196l-60 196l-196 60l196 60l60 196zM1566 798l98 -30l-98 -30l-30 -98l-30 98l-98 30l98 30l30 98zM926 1438l98 -30l-98 -30l-30 -98l-30 98l-98 30l98 30l30 98z" />
+    <glyph glyph-name="truck" unicode="&#xf0d1;" horiz-adv-x="1792" 
+d="M640 128q0 52 -38 90t-90 38t-90 -38t-38 -90t38 -90t90 -38t90 38t38 90zM256 640h384v256h-158q-13 0 -22 -9l-195 -195q-9 -9 -9 -22v-30zM1536 128q0 52 -38 90t-90 38t-90 -38t-38 -90t38 -90t90 -38t90 38t38 90zM1792 1216v-1024q0 -15 -4 -26.5t-13.5 -18.5
+t-16.5 -11.5t-23.5 -6t-22.5 -2t-25.5 0t-22.5 0.5q0 -106 -75 -181t-181 -75t-181 75t-75 181h-384q0 -106 -75 -181t-181 -75t-181 75t-75 181h-64q-3 0 -22.5 -0.5t-25.5 0t-22.5 2t-23.5 6t-16.5 11.5t-13.5 18.5t-4 26.5q0 26 19 45t45 19v320q0 8 -0.5 35t0 38
+t2.5 34.5t6.5 37t14 30.5t22.5 30l198 198q19 19 50.5 32t58.5 13h160v192q0 26 19 45t45 19h1024q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="pinterest" unicode="&#xf0d2;" 
+d="M1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103q-111 0 -218 32q59 93 78 164q9 34 54 211q20 -39 73 -67.5t114 -28.5q121 0 216 68.5t147 188.5t52 270q0 114 -59.5 214t-172.5 163t-255 63q-105 0 -196 -29t-154.5 -77t-109 -110.5t-67 -129.5t-21.5 -134
+q0 -104 40 -183t117 -111q30 -12 38 20q2 7 8 31t8 30q6 23 -11 43q-51 61 -51 151q0 151 104.5 259.5t273.5 108.5q151 0 235.5 -82t84.5 -213q0 -170 -68.5 -289t-175.5 -119q-61 0 -98 43.5t-23 104.5q8 35 26.5 93.5t30 103t11.5 75.5q0 50 -27 83t-77 33
+q-62 0 -105 -57t-43 -142q0 -73 25 -122l-99 -418q-17 -70 -13 -177q-206 91 -333 281t-127 423q0 209 103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="pinterest_sign" unicode="&#xf0d3;" 
+d="M1248 1408q119 0 203.5 -84.5t84.5 -203.5v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-725q85 122 108 210q9 34 53 209q21 -39 73.5 -67t112.5 -28q181 0 295.5 147.5t114.5 373.5q0 84 -35 162.5t-96.5 139t-152.5 97t-197 36.5q-104 0 -194.5 -28.5t-153 -76.5
+t-107.5 -109.5t-66.5 -128t-21.5 -132.5q0 -102 39.5 -180t116.5 -110q13 -5 23.5 0t14.5 19q10 44 15 61q6 23 -11 42q-50 62 -50 150q0 150 103.5 256.5t270.5 106.5q149 0 232.5 -81t83.5 -210q0 -168 -67.5 -286t-173.5 -118q-60 0 -97 43.5t-23 103.5q8 34 26.5 92.5
+t29.5 102t11 74.5q0 49 -26.5 81.5t-75.5 32.5q-61 0 -103.5 -56.5t-42.5 -139.5q0 -72 24 -121l-98 -414q-24 -100 -7 -254h-183q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960z" />
+    <glyph glyph-name="google_plus_sign" unicode="&#xf0d4;" 
+d="M917 631q0 26 -6 64h-362v-132h217q-3 -24 -16.5 -50t-37.5 -53t-66.5 -44.5t-96.5 -17.5q-99 0 -169 71t-70 171t70 171t169 71q92 0 153 -59l104 101q-108 100 -257 100q-160 0 -272 -112.5t-112 -271.5t112 -271.5t272 -112.5q165 0 266.5 105t101.5 270zM1262 585
+h109v110h-109v110h-110v-110h-110v-110h110v-110h110v110zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="google_plus" unicode="&#xf0d5;" horiz-adv-x="2304" 
+d="M1437 623q0 -208 -87 -370.5t-248 -254t-369 -91.5q-149 0 -285 58t-234 156t-156 234t-58 285t58 285t156 234t234 156t285 58q286 0 491 -192l-199 -191q-117 113 -292 113q-123 0 -227.5 -62t-165.5 -168.5t-61 -232.5t61 -232.5t165.5 -168.5t227.5 -62
+q83 0 152.5 23t114.5 57.5t78.5 78.5t49 83t21.5 74h-416v252h692q12 -63 12 -122zM2304 745v-210h-209v-209h-210v209h-209v210h209v209h210v-209h209z" />
+    <glyph glyph-name="money" unicode="&#xf0d6;" horiz-adv-x="1920" 
+d="M768 384h384v96h-128v448h-114l-148 -137l77 -80q42 37 55 57h2v-288h-128v-96zM1280 640q0 -70 -21 -142t-59.5 -134t-101.5 -101t-138 -39t-138 39t-101.5 101t-59.5 134t-21 142t21 142t59.5 134t101.5 101t138 39t138 -39t101.5 -101t59.5 -134t21 -142zM1792 384
+v512q-106 0 -181 75t-75 181h-1152q0 -106 -75 -181t-181 -75v-512q106 0 181 -75t75 -181h1152q0 106 75 181t181 75zM1920 1216v-1152q0 -26 -19 -45t-45 -19h-1792q-26 0 -45 19t-19 45v1152q0 26 19 45t45 19h1792q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="caret_down" unicode="&#xf0d7;" horiz-adv-x="1024" 
+d="M1024 832q0 -26 -19 -45l-448 -448q-19 -19 -45 -19t-45 19l-448 448q-19 19 -19 45t19 45t45 19h896q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="caret_up" unicode="&#xf0d8;" horiz-adv-x="1024" 
+d="M1024 320q0 -26 -19 -45t-45 -19h-896q-26 0 -45 19t-19 45t19 45l448 448q19 19 45 19t45 -19l448 -448q19 -19 19 -45z" />
+    <glyph glyph-name="caret_left" unicode="&#xf0d9;" horiz-adv-x="640" 
+d="M640 1088v-896q0 -26 -19 -45t-45 -19t-45 19l-448 448q-19 19 -19 45t19 45l448 448q19 19 45 19t45 -19t19 -45z" />
+    <glyph glyph-name="caret_right" unicode="&#xf0da;" horiz-adv-x="640" 
+d="M576 640q0 -26 -19 -45l-448 -448q-19 -19 -45 -19t-45 19t-19 45v896q0 26 19 45t45 19t45 -19l448 -448q19 -19 19 -45z" />
+    <glyph glyph-name="columns" unicode="&#xf0db;" horiz-adv-x="1664" 
+d="M160 0h608v1152h-640v-1120q0 -13 9.5 -22.5t22.5 -9.5zM1536 32v1120h-640v-1152h608q13 0 22.5 9.5t9.5 22.5zM1664 1248v-1216q0 -66 -47 -113t-113 -47h-1344q-66 0 -113 47t-47 113v1216q0 66 47 113t113 47h1344q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="sort" unicode="&#xf0dc;" horiz-adv-x="1024" 
+d="M1024 448q0 -26 -19 -45l-448 -448q-19 -19 -45 -19t-45 19l-448 448q-19 19 -19 45t19 45t45 19h896q26 0 45 -19t19 -45zM1024 832q0 -26 -19 -45t-45 -19h-896q-26 0 -45 19t-19 45t19 45l448 448q19 19 45 19t45 -19l448 -448q19 -19 19 -45z" />
+    <glyph glyph-name="sort_down" unicode="&#xf0dd;" horiz-adv-x="1024" 
+d="M1024 448q0 -26 -19 -45l-448 -448q-19 -19 -45 -19t-45 19l-448 448q-19 19 -19 45t19 45t45 19h896q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="sort_up" unicode="&#xf0de;" horiz-adv-x="1024" 
+d="M1024 832q0 -26 -19 -45t-45 -19h-896q-26 0 -45 19t-19 45t19 45l448 448q19 19 45 19t45 -19l448 -448q19 -19 19 -45z" />
+    <glyph glyph-name="envelope_alt" unicode="&#xf0e0;" horiz-adv-x="1792" 
+d="M1792 826v-794q0 -66 -47 -113t-113 -47h-1472q-66 0 -113 47t-47 113v794q44 -49 101 -87q362 -246 497 -345q57 -42 92.5 -65.5t94.5 -48t110 -24.5h1h1q51 0 110 24.5t94.5 48t92.5 65.5q170 123 498 345q57 39 100 87zM1792 1120q0 -79 -49 -151t-122 -123
+q-376 -261 -468 -325q-10 -7 -42.5 -30.5t-54 -38t-52 -32.5t-57.5 -27t-50 -9h-1h-1q-23 0 -50 9t-57.5 27t-52 32.5t-54 38t-42.5 30.5q-91 64 -262 182.5t-205 142.5q-62 42 -117 115.5t-55 136.5q0 78 41.5 130t118.5 52h1472q65 0 112.5 -47t47.5 -113z" />
+    <glyph glyph-name="linkedin" unicode="&#xf0e1;" 
+d="M349 911v-991h-330v991h330zM370 1217q1 -73 -50.5 -122t-135.5 -49h-2q-82 0 -132 49t-50 122q0 74 51.5 122.5t134.5 48.5t133 -48.5t51 -122.5zM1536 488v-568h-329v530q0 105 -40.5 164.5t-126.5 59.5q-63 0 -105.5 -34.5t-63.5 -85.5q-11 -30 -11 -81v-553h-329
+q2 399 2 647t-1 296l-1 48h329v-144h-2q20 32 41 56t56.5 52t87 43.5t114.5 15.5q171 0 275 -113.5t104 -332.5z" />
+    <glyph glyph-name="undo" unicode="&#xf0e2;" 
+d="M1536 640q0 -156 -61 -298t-164 -245t-245 -164t-298 -61q-172 0 -327 72.5t-264 204.5q-7 10 -6.5 22.5t8.5 20.5l137 138q10 9 25 9q16 -2 23 -12q73 -95 179 -147t225 -52q104 0 198.5 40.5t163.5 109.5t109.5 163.5t40.5 198.5t-40.5 198.5t-109.5 163.5
+t-163.5 109.5t-198.5 40.5q-98 0 -188 -35.5t-160 -101.5l137 -138q31 -30 14 -69q-17 -40 -59 -40h-448q-26 0 -45 19t-19 45v448q0 42 40 59q39 17 69 -14l130 -129q107 101 244.5 156.5t284.5 55.5q156 0 298 -61t245 -164t164 -245t61 -298z" />
+    <glyph glyph-name="legal" unicode="&#xf0e3;" horiz-adv-x="1792" 
+d="M1771 0q0 -53 -37 -90l-107 -108q-39 -37 -91 -37q-53 0 -90 37l-363 364q-38 36 -38 90q0 53 43 96l-256 256l-126 -126q-14 -14 -34 -14t-34 14q2 -2 12.5 -12t12.5 -13t10 -11.5t10 -13.5t6 -13.5t5.5 -16.5t1.5 -18q0 -38 -28 -68q-3 -3 -16.5 -18t-19 -20.5
+t-18.5 -16.5t-22 -15.5t-22 -9t-26 -4.5q-40 0 -68 28l-408 408q-28 28 -28 68q0 13 4.5 26t9 22t15.5 22t16.5 18.5t20.5 19t18 16.5q30 28 68 28q10 0 18 -1.5t16.5 -5.5t13.5 -6t13.5 -10t11.5 -10t13 -12.5t12 -12.5q-14 14 -14 34t14 34l348 348q14 14 34 14t34 -14
+q-2 2 -12.5 12t-12.5 13t-10 11.5t-10 13.5t-6 13.5t-5.5 16.5t-1.5 18q0 38 28 68q3 3 16.5 18t19 20.5t18.5 16.5t22 15.5t22 9t26 4.5q40 0 68 -28l408 -408q28 -28 28 -68q0 -13 -4.5 -26t-9 -22t-15.5 -22t-16.5 -18.5t-20.5 -19t-18 -16.5q-30 -28 -68 -28
+q-10 0 -18 1.5t-16.5 5.5t-13.5 6t-13.5 10t-11.5 10t-13 12.5t-12 12.5q14 -14 14 -34t-14 -34l-126 -126l256 -256q43 43 96 43q52 0 91 -37l363 -363q37 -39 37 -91z" />
+    <glyph glyph-name="dashboard" unicode="&#xf0e4;" horiz-adv-x="1792" 
+d="M384 384q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM576 832q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1004 351l101 382q6 26 -7.5 48.5t-38.5 29.5
+t-48 -6.5t-30 -39.5l-101 -382q-60 -5 -107 -43.5t-63 -98.5q-20 -77 20 -146t117 -89t146 20t89 117q16 60 -6 117t-72 91zM1664 384q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1024 1024q0 53 -37.5 90.5
+t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1472 832q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1792 384q0 -261 -141 -483q-19 -29 -54 -29h-1402q-35 0 -54 29
+q-141 221 -141 483q0 182 71 348t191 286t286 191t348 71t348 -71t286 -191t191 -286t71 -348z" />
+    <glyph glyph-name="comment_alt" unicode="&#xf0e5;" horiz-adv-x="1792" 
+d="M896 1152q-204 0 -381.5 -69.5t-282 -187.5t-104.5 -255q0 -112 71.5 -213.5t201.5 -175.5l87 -50l-27 -96q-24 -91 -70 -172q152 63 275 171l43 38l57 -6q69 -8 130 -8q204 0 381.5 69.5t282 187.5t104.5 255t-104.5 255t-282 187.5t-381.5 69.5zM1792 640
+q0 -174 -120 -321.5t-326 -233t-450 -85.5q-70 0 -145 8q-198 -175 -460 -242q-49 -14 -114 -22h-5q-15 0 -27 10.5t-16 27.5v1q-3 4 -0.5 12t2 10t4.5 9.5l6 9t7 8.5t8 9q7 8 31 34.5t34.5 38t31 39.5t32.5 51t27 59t26 76q-157 89 -247.5 220t-90.5 281q0 174 120 321.5
+t326 233t450 85.5t450 -85.5t326 -233t120 -321.5z" />
+    <glyph glyph-name="comments_alt" unicode="&#xf0e6;" horiz-adv-x="1792" 
+d="M704 1152q-153 0 -286 -52t-211.5 -141t-78.5 -191q0 -82 53 -158t149 -132l97 -56l-35 -84q34 20 62 39l44 31l53 -10q78 -14 153 -14q153 0 286 52t211.5 141t78.5 191t-78.5 191t-211.5 141t-286 52zM704 1280q191 0 353.5 -68.5t256.5 -186.5t94 -257t-94 -257
+t-256.5 -186.5t-353.5 -68.5q-86 0 -176 16q-124 -88 -278 -128q-36 -9 -86 -16h-3q-11 0 -20.5 8t-11.5 21q-1 3 -1 6.5t0.5 6.5t2 6l2.5 5t3.5 5.5t4 5t4.5 5t4 4.5q5 6 23 25t26 29.5t22.5 29t25 38.5t20.5 44q-124 72 -195 177t-71 224q0 139 94 257t256.5 186.5
+t353.5 68.5zM1526 111q10 -24 20.5 -44t25 -38.5t22.5 -29t26 -29.5t23 -25q1 -1 4 -4.5t4.5 -5t4 -5t3.5 -5.5l2.5 -5t2 -6t0.5 -6.5t-1 -6.5q-3 -14 -13 -22t-22 -7q-50 7 -86 16q-154 40 -278 128q-90 -16 -176 -16q-271 0 -472 132q58 -4 88 -4q161 0 309 45t264 129
+q125 92 192 212t67 254q0 77 -23 152q129 -71 204 -178t75 -230q0 -120 -71 -224.5t-195 -176.5z" />
+    <glyph glyph-name="bolt" unicode="&#xf0e7;" horiz-adv-x="896" 
+d="M885 970q18 -20 7 -44l-540 -1157q-13 -25 -42 -25q-4 0 -14 2q-17 5 -25.5 19t-4.5 30l197 808l-406 -101q-4 -1 -12 -1q-18 0 -31 11q-18 15 -13 39l201 825q4 14 16 23t28 9h328q19 0 32 -12.5t13 -29.5q0 -8 -5 -18l-171 -463l396 98q8 2 12 2q19 0 34 -15z" />
+    <glyph glyph-name="sitemap" unicode="&#xf0e8;" horiz-adv-x="1792" 
+d="M1792 288v-320q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v320q0 40 28 68t68 28h96v192h-512v-192h96q40 0 68 -28t28 -68v-320q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v320q0 40 28 68t68 28h96v192h-512v-192h96q40 0 68 -28t28 -68v-320
+q0 -40 -28 -68t-68 -28h-320q-40 0 -68 28t-28 68v320q0 40 28 68t68 28h96v192q0 52 38 90t90 38h512v192h-96q-40 0 -68 28t-28 68v320q0 40 28 68t68 28h320q40 0 68 -28t28 -68v-320q0 -40 -28 -68t-68 -28h-96v-192h512q52 0 90 -38t38 -90v-192h96q40 0 68 -28t28 -68
+z" />
+    <glyph glyph-name="umbrella" unicode="&#xf0e9;" horiz-adv-x="1664" 
+d="M896 708v-580q0 -104 -76 -180t-180 -76t-180 76t-76 180q0 26 19 45t45 19t45 -19t19 -45q0 -50 39 -89t89 -39t89 39t39 89v580q33 11 64 11t64 -11zM1664 681q0 -13 -9.5 -22.5t-22.5 -9.5q-11 0 -23 10q-49 46 -93 69t-102 23q-68 0 -128 -37t-103 -97
+q-7 -10 -17.5 -28t-14.5 -24q-11 -17 -28 -17q-18 0 -29 17q-4 6 -14.5 24t-17.5 28q-43 60 -102.5 97t-127.5 37t-127.5 -37t-102.5 -97q-7 -10 -17.5 -28t-14.5 -24q-11 -17 -29 -17q-17 0 -28 17q-4 6 -14.5 24t-17.5 28q-43 60 -103 97t-128 37q-58 0 -102 -23t-93 -69
+q-12 -10 -23 -10q-13 0 -22.5 9.5t-9.5 22.5q0 5 1 7q45 183 172.5 319.5t298 204.5t360.5 68q140 0 274.5 -40t246.5 -113.5t194.5 -187t115.5 -251.5q1 -2 1 -7zM896 1408v-98q-42 2 -64 2t-64 -2v98q0 26 19 45t45 19t45 -19t19 -45z" />
+    <glyph glyph-name="paste" unicode="&#xf0ea;" horiz-adv-x="1792" 
+d="M768 -128h896v640h-416q-40 0 -68 28t-28 68v416h-384v-1152zM1024 1312v64q0 13 -9.5 22.5t-22.5 9.5h-704q-13 0 -22.5 -9.5t-9.5 -22.5v-64q0 -13 9.5 -22.5t22.5 -9.5h704q13 0 22.5 9.5t9.5 22.5zM1280 640h299l-299 299v-299zM1792 512v-672q0 -40 -28 -68t-68 -28
+h-960q-40 0 -68 28t-28 68v160h-544q-40 0 -68 28t-28 68v1344q0 40 28 68t68 28h1088q40 0 68 -28t28 -68v-328q21 -13 36 -28l408 -408q28 -28 48 -76t20 -88z" />
+    <glyph glyph-name="light_bulb" unicode="&#xf0eb;" horiz-adv-x="1024" 
+d="M736 960q0 -13 -9.5 -22.5t-22.5 -9.5t-22.5 9.5t-9.5 22.5q0 46 -54 71t-106 25q-13 0 -22.5 9.5t-9.5 22.5t9.5 22.5t22.5 9.5q50 0 99.5 -16t87 -54t37.5 -90zM896 960q0 72 -34.5 134t-90 101.5t-123 62t-136.5 22.5t-136.5 -22.5t-123 -62t-90 -101.5t-34.5 -134
+q0 -101 68 -180q10 -11 30.5 -33t30.5 -33q128 -153 141 -298h228q13 145 141 298q10 11 30.5 33t30.5 33q68 79 68 180zM1024 960q0 -155 -103 -268q-45 -49 -74.5 -87t-59.5 -95.5t-34 -107.5q47 -28 47 -82q0 -37 -25 -64q25 -27 25 -64q0 -52 -45 -81q13 -23 13 -47
+q0 -46 -31.5 -71t-77.5 -25q-20 -44 -60 -70t-87 -26t-87 26t-60 70q-46 0 -77.5 25t-31.5 71q0 24 13 47q-45 29 -45 81q0 37 25 64q-25 27 -25 64q0 54 47 82q-4 50 -34 107.5t-59.5 95.5t-74.5 87q-103 113 -103 268q0 99 44.5 184.5t117 142t164 89t186.5 32.5
+t186.5 -32.5t164 -89t117 -142t44.5 -184.5z" />
+    <glyph glyph-name="exchange" unicode="&#xf0ec;" horiz-adv-x="1792" 
+d="M1792 352v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-1376v-192q0 -13 -9.5 -22.5t-22.5 -9.5q-12 0 -24 10l-319 320q-9 9 -9 22q0 14 9 23l320 320q9 9 23 9q13 0 22.5 -9.5t9.5 -22.5v-192h1376q13 0 22.5 -9.5t9.5 -22.5zM1792 896q0 -14 -9 -23l-320 -320q-9 -9 -23 -9
+q-13 0 -22.5 9.5t-9.5 22.5v192h-1376q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h1376v192q0 14 9 23t23 9q12 0 24 -10l319 -319q9 -9 9 -23z" />
+    <glyph glyph-name="cloud_download" unicode="&#xf0ed;" horiz-adv-x="1920" 
+d="M1280 608q0 14 -9 23t-23 9h-224v352q0 13 -9.5 22.5t-22.5 9.5h-192q-13 0 -22.5 -9.5t-9.5 -22.5v-352h-224q-13 0 -22.5 -9.5t-9.5 -22.5q0 -14 9 -23l352 -352q9 -9 23 -9t23 9l351 351q10 12 10 24zM1920 384q0 -159 -112.5 -271.5t-271.5 -112.5h-1088
+q-185 0 -316.5 131.5t-131.5 316.5q0 130 70 240t188 165q-2 30 -2 43q0 212 150 362t362 150q156 0 285.5 -87t188.5 -231q71 62 166 62q106 0 181 -75t75 -181q0 -76 -41 -138q130 -31 213.5 -135.5t83.5 -238.5z" />
+    <glyph glyph-name="cloud_upload" unicode="&#xf0ee;" horiz-adv-x="1920" 
+d="M1280 672q0 14 -9 23l-352 352q-9 9 -23 9t-23 -9l-351 -351q-10 -12 -10 -24q0 -14 9 -23t23 -9h224v-352q0 -13 9.5 -22.5t22.5 -9.5h192q13 0 22.5 9.5t9.5 22.5v352h224q13 0 22.5 9.5t9.5 22.5zM1920 384q0 -159 -112.5 -271.5t-271.5 -112.5h-1088
+q-185 0 -316.5 131.5t-131.5 316.5q0 130 70 240t188 165q-2 30 -2 43q0 212 150 362t362 150q156 0 285.5 -87t188.5 -231q71 62 166 62q106 0 181 -75t75 -181q0 -76 -41 -138q130 -31 213.5 -135.5t83.5 -238.5z" />
+    <glyph glyph-name="user_md" unicode="&#xf0f0;" horiz-adv-x="1408" 
+d="M384 192q0 -26 -19 -45t-45 -19t-45 19t-19 45t19 45t45 19t45 -19t19 -45zM1408 131q0 -121 -73 -190t-194 -69h-874q-121 0 -194 69t-73 190q0 68 5.5 131t24 138t47.5 132.5t81 103t120 60.5q-22 -52 -22 -120v-203q-58 -20 -93 -70t-35 -111q0 -80 56 -136t136 -56
+t136 56t56 136q0 61 -35.5 111t-92.5 70v203q0 62 25 93q132 -104 295 -104t295 104q25 -31 25 -93v-64q-106 0 -181 -75t-75 -181v-89q-32 -29 -32 -71q0 -40 28 -68t68 -28t68 28t28 68q0 42 -32 71v89q0 52 38 90t90 38t90 -38t38 -90v-89q-32 -29 -32 -71q0 -40 28 -68
+t68 -28t68 28t28 68q0 42 -32 71v89q0 68 -34.5 127.5t-93.5 93.5q0 10 0.5 42.5t0 48t-2.5 41.5t-7 47t-13 40q68 -15 120 -60.5t81 -103t47.5 -132.5t24 -138t5.5 -131zM1088 1024q0 -159 -112.5 -271.5t-271.5 -112.5t-271.5 112.5t-112.5 271.5t112.5 271.5t271.5 112.5
+t271.5 -112.5t112.5 -271.5z" />
+    <glyph glyph-name="stethoscope" unicode="&#xf0f1;" horiz-adv-x="1408" 
+d="M1280 832q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1408 832q0 -62 -35.5 -111t-92.5 -70v-395q0 -159 -131.5 -271.5t-316.5 -112.5t-316.5 112.5t-131.5 271.5v132q-164 20 -274 128t-110 252v512q0 26 19 45t45 19q6 0 16 -2q17 30 47 48
+t65 18q53 0 90.5 -37.5t37.5 -90.5t-37.5 -90.5t-90.5 -37.5q-33 0 -64 18v-402q0 -106 94 -181t226 -75t226 75t94 181v402q-31 -18 -64 -18q-53 0 -90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5q35 0 65 -18t47 -48q10 2 16 2q26 0 45 -19t19 -45v-512q0 -144 -110 -252
+t-274 -128v-132q0 -106 94 -181t226 -75t226 75t94 181v395q-57 21 -92.5 70t-35.5 111q0 80 56 136t136 56t136 -56t56 -136z" />
+    <glyph glyph-name="suitcase" unicode="&#xf0f2;" horiz-adv-x="1792" 
+d="M640 1152h512v128h-512v-128zM288 1152v-1280h-64q-92 0 -158 66t-66 158v832q0 92 66 158t158 66h64zM1408 1152v-1280h-1024v1280h128v160q0 40 28 68t68 28h576q40 0 68 -28t28 -68v-160h128zM1792 928v-832q0 -92 -66 -158t-158 -66h-64v1280h64q92 0 158 -66
+t66 -158z" />
+    <glyph glyph-name="bell_alt" unicode="&#xf0f3;" horiz-adv-x="1792" 
+d="M912 -160q0 16 -16 16q-59 0 -101.5 42.5t-42.5 101.5q0 16 -16 16t-16 -16q0 -73 51.5 -124.5t124.5 -51.5q16 0 16 16zM1728 128q0 -52 -38 -90t-90 -38h-448q0 -106 -75 -181t-181 -75t-181 75t-75 181h-448q-52 0 -90 38t-38 90q50 42 91 88t85 119.5t74.5 158.5
+t50 206t19.5 260q0 152 117 282.5t307 158.5q-8 19 -8 39q0 40 28 68t68 28t68 -28t28 -68q0 -20 -8 -39q190 -28 307 -158.5t117 -282.5q0 -139 19.5 -260t50 -206t74.5 -158.5t85 -119.5t91 -88z" />
+    <glyph glyph-name="coffee" unicode="&#xf0f4;" horiz-adv-x="1920" 
+d="M1664 896q0 80 -56 136t-136 56h-64v-384h64q80 0 136 56t56 136zM0 128h1792q0 -106 -75 -181t-181 -75h-1280q-106 0 -181 75t-75 181zM1856 896q0 -159 -112.5 -271.5t-271.5 -112.5h-64v-32q0 -92 -66 -158t-158 -66h-704q-92 0 -158 66t-66 158v736q0 26 19 45
+t45 19h1152q159 0 271.5 -112.5t112.5 -271.5z" />
+    <glyph glyph-name="food" unicode="&#xf0f5;" horiz-adv-x="1408" 
+d="M640 1472v-640q0 -61 -35.5 -111t-92.5 -70v-779q0 -52 -38 -90t-90 -38h-128q-52 0 -90 38t-38 90v779q-57 20 -92.5 70t-35.5 111v640q0 26 19 45t45 19t45 -19t19 -45v-416q0 -26 19 -45t45 -19t45 19t19 45v416q0 26 19 45t45 19t45 -19t19 -45v-416q0 -26 19 -45
+t45 -19t45 19t19 45v416q0 26 19 45t45 19t45 -19t19 -45zM1408 1472v-1600q0 -52 -38 -90t-90 -38h-128q-52 0 -90 38t-38 90v512h-224q-13 0 -22.5 9.5t-9.5 22.5v800q0 132 94 226t226 94h256q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="file_text_alt" unicode="&#xf0f6;" 
+d="M1468 1156q28 -28 48 -76t20 -88v-1152q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1600q0 40 28 68t68 28h896q40 0 88 -20t76 -48zM1024 1400v-376h376q-10 29 -22 41l-313 313q-12 12 -41 22zM1408 -128v1024h-416q-40 0 -68 28t-28 68v416h-768v-1536h1280z
+M384 736q0 14 9 23t23 9h704q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-704q-14 0 -23 9t-9 23v64zM1120 512q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-704q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h704zM1120 256q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-704
+q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h704z" />
+    <glyph glyph-name="building" unicode="&#xf0f7;" horiz-adv-x="1408" 
+d="M384 224v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM384 480v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M640 480v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM384 736v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M1152 224v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM896 480v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M640 736v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM384 992v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M1152 480v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM896 736v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M640 992v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM384 1248v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M1152 736v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM896 992v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M640 1248v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM1152 992v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M896 1248v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM1152 1248v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M896 -128h384v1536h-1152v-1536h384v224q0 13 9.5 22.5t22.5 9.5h320q13 0 22.5 -9.5t9.5 -22.5v-224zM1408 1472v-1664q0 -26 -19 -45t-45 -19h-1280q-26 0 -45 19t-19 45v1664q0 26 19 45t45 19h1280q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="hospital" unicode="&#xf0f8;" horiz-adv-x="1408" 
+d="M384 224v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM384 480v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M640 480v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM384 736v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M1152 224v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM896 480v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M640 736v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM1152 480v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M896 736v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5zM1152 736v-64q0 -13 -9.5 -22.5t-22.5 -9.5h-64q-13 0 -22.5 9.5t-9.5 22.5v64q0 13 9.5 22.5t22.5 9.5h64q13 0 22.5 -9.5t9.5 -22.5z
+M896 -128h384v1152h-256v-32q0 -40 -28 -68t-68 -28h-448q-40 0 -68 28t-28 68v32h-256v-1152h384v224q0 13 9.5 22.5t22.5 9.5h320q13 0 22.5 -9.5t9.5 -22.5v-224zM896 1056v320q0 13 -9.5 22.5t-22.5 9.5h-64q-13 0 -22.5 -9.5t-9.5 -22.5v-96h-128v96q0 13 -9.5 22.5
+t-22.5 9.5h-64q-13 0 -22.5 -9.5t-9.5 -22.5v-320q0 -13 9.5 -22.5t22.5 -9.5h64q13 0 22.5 9.5t9.5 22.5v96h128v-96q0 -13 9.5 -22.5t22.5 -9.5h64q13 0 22.5 9.5t9.5 22.5zM1408 1088v-1280q0 -26 -19 -45t-45 -19h-1280q-26 0 -45 19t-19 45v1280q0 26 19 45t45 19h320
+v288q0 40 28 68t68 28h448q40 0 68 -28t28 -68v-288h320q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="ambulance" unicode="&#xf0f9;" horiz-adv-x="1920" 
+d="M640 128q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM256 640h384v256h-158q-14 -2 -22 -9l-195 -195q-7 -12 -9 -22v-30zM1536 128q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5
+t90.5 37.5t37.5 90.5zM1664 800v192q0 14 -9 23t-23 9h-224v224q0 14 -9 23t-23 9h-192q-14 0 -23 -9t-9 -23v-224h-224q-14 0 -23 -9t-9 -23v-192q0 -14 9 -23t23 -9h224v-224q0 -14 9 -23t23 -9h192q14 0 23 9t9 23v224h224q14 0 23 9t9 23zM1920 1344v-1152
+q0 -26 -19 -45t-45 -19h-192q0 -106 -75 -181t-181 -75t-181 75t-75 181h-384q0 -106 -75 -181t-181 -75t-181 75t-75 181h-128q-26 0 -45 19t-19 45t19 45t45 19v416q0 26 13 58t32 51l198 198q19 19 51 32t58 13h160v320q0 26 19 45t45 19h1152q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="medkit" unicode="&#xf0fa;" horiz-adv-x="1792" 
+d="M1280 416v192q0 14 -9 23t-23 9h-224v224q0 14 -9 23t-23 9h-192q-14 0 -23 -9t-9 -23v-224h-224q-14 0 -23 -9t-9 -23v-192q0 -14 9 -23t23 -9h224v-224q0 -14 9 -23t23 -9h192q14 0 23 9t9 23v224h224q14 0 23 9t9 23zM640 1152h512v128h-512v-128zM256 1152v-1280h-32
+q-92 0 -158 66t-66 158v832q0 92 66 158t158 66h32zM1440 1152v-1280h-1088v1280h160v160q0 40 28 68t68 28h576q40 0 68 -28t28 -68v-160h160zM1792 928v-832q0 -92 -66 -158t-158 -66h-32v1280h32q92 0 158 -66t66 -158z" />
+    <glyph glyph-name="fighter_jet" unicode="&#xf0fb;" horiz-adv-x="1920" 
+d="M1920 576q-1 -32 -288 -96l-352 -32l-224 -64h-64l-293 -352h69q26 0 45 -4.5t19 -11.5t-19 -11.5t-45 -4.5h-96h-160h-64v32h64v416h-160l-192 -224h-96l-32 32v192h32v32h128v8l-192 24v128l192 24v8h-128v32h-32v192l32 32h96l192 -224h160v416h-64v32h64h160h96
+q26 0 45 -4.5t19 -11.5t-19 -11.5t-45 -4.5h-69l293 -352h64l224 -64l352 -32q128 -28 200 -52t80 -34z" />
+    <glyph glyph-name="beer" unicode="&#xf0fc;" horiz-adv-x="1664" 
+d="M640 640v384h-256v-256q0 -53 37.5 -90.5t90.5 -37.5h128zM1664 192v-192h-1152v192l128 192h-128q-159 0 -271.5 112.5t-112.5 271.5v320l-64 64l32 128h480l32 128h960l32 -192l-64 -32v-800z" />
+    <glyph glyph-name="h_sign" unicode="&#xf0fd;" 
+d="M1280 192v896q0 26 -19 45t-45 19h-128q-26 0 -45 -19t-19 -45v-320h-512v320q0 26 -19 45t-45 19h-128q-26 0 -45 -19t-19 -45v-896q0 -26 19 -45t45 -19h128q26 0 45 19t19 45v320h512v-320q0 -26 19 -45t45 -19h128q26 0 45 19t19 45zM1536 1120v-960
+q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="f0fe" unicode="&#xf0fe;" 
+d="M1280 576v128q0 26 -19 45t-45 19h-320v320q0 26 -19 45t-45 19h-128q-26 0 -45 -19t-19 -45v-320h-320q-26 0 -45 -19t-19 -45v-128q0 -26 19 -45t45 -19h320v-320q0 -26 19 -45t45 -19h128q26 0 45 19t19 45v320h320q26 0 45 19t19 45zM1536 1120v-960
+q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="double_angle_left" unicode="&#xf100;" horiz-adv-x="1024" 
+d="M627 160q0 -13 -10 -23l-50 -50q-10 -10 -23 -10t-23 10l-466 466q-10 10 -10 23t10 23l466 466q10 10 23 10t23 -10l50 -50q10 -10 10 -23t-10 -23l-393 -393l393 -393q10 -10 10 -23zM1011 160q0 -13 -10 -23l-50 -50q-10 -10 -23 -10t-23 10l-466 466q-10 10 -10 23
+t10 23l466 466q10 10 23 10t23 -10l50 -50q10 -10 10 -23t-10 -23l-393 -393l393 -393q10 -10 10 -23z" />
+    <glyph glyph-name="double_angle_right" unicode="&#xf101;" horiz-adv-x="1024" 
+d="M595 576q0 -13 -10 -23l-466 -466q-10 -10 -23 -10t-23 10l-50 50q-10 10 -10 23t10 23l393 393l-393 393q-10 10 -10 23t10 23l50 50q10 10 23 10t23 -10l466 -466q10 -10 10 -23zM979 576q0 -13 -10 -23l-466 -466q-10 -10 -23 -10t-23 10l-50 50q-10 10 -10 23t10 23
+l393 393l-393 393q-10 10 -10 23t10 23l50 50q10 10 23 10t23 -10l466 -466q10 -10 10 -23z" />
+    <glyph glyph-name="double_angle_up" unicode="&#xf102;" horiz-adv-x="1152" 
+d="M1075 224q0 -13 -10 -23l-50 -50q-10 -10 -23 -10t-23 10l-393 393l-393 -393q-10 -10 -23 -10t-23 10l-50 50q-10 10 -10 23t10 23l466 466q10 10 23 10t23 -10l466 -466q10 -10 10 -23zM1075 608q0 -13 -10 -23l-50 -50q-10 -10 -23 -10t-23 10l-393 393l-393 -393
+q-10 -10 -23 -10t-23 10l-50 50q-10 10 -10 23t10 23l466 466q10 10 23 10t23 -10l466 -466q10 -10 10 -23z" />
+    <glyph glyph-name="double_angle_down" unicode="&#xf103;" horiz-adv-x="1152" 
+d="M1075 672q0 -13 -10 -23l-466 -466q-10 -10 -23 -10t-23 10l-466 466q-10 10 -10 23t10 23l50 50q10 10 23 10t23 -10l393 -393l393 393q10 10 23 10t23 -10l50 -50q10 -10 10 -23zM1075 1056q0 -13 -10 -23l-466 -466q-10 -10 -23 -10t-23 10l-466 466q-10 10 -10 23
+t10 23l50 50q10 10 23 10t23 -10l393 -393l393 393q10 10 23 10t23 -10l50 -50q10 -10 10 -23z" />
+    <glyph glyph-name="angle_left" unicode="&#xf104;" horiz-adv-x="640" 
+d="M627 992q0 -13 -10 -23l-393 -393l393 -393q10 -10 10 -23t-10 -23l-50 -50q-10 -10 -23 -10t-23 10l-466 466q-10 10 -10 23t10 23l466 466q10 10 23 10t23 -10l50 -50q10 -10 10 -23z" />
+    <glyph glyph-name="angle_right" unicode="&#xf105;" horiz-adv-x="640" 
+d="M595 576q0 -13 -10 -23l-466 -466q-10 -10 -23 -10t-23 10l-50 50q-10 10 -10 23t10 23l393 393l-393 393q-10 10 -10 23t10 23l50 50q10 10 23 10t23 -10l466 -466q10 -10 10 -23z" />
+    <glyph glyph-name="angle_up" unicode="&#xf106;" horiz-adv-x="1152" 
+d="M1075 352q0 -13 -10 -23l-50 -50q-10 -10 -23 -10t-23 10l-393 393l-393 -393q-10 -10 -23 -10t-23 10l-50 50q-10 10 -10 23t10 23l466 466q10 10 23 10t23 -10l466 -466q10 -10 10 -23z" />
+    <glyph glyph-name="angle_down" unicode="&#xf107;" horiz-adv-x="1152" 
+d="M1075 800q0 -13 -10 -23l-466 -466q-10 -10 -23 -10t-23 10l-466 466q-10 10 -10 23t10 23l50 50q10 10 23 10t23 -10l393 -393l393 393q10 10 23 10t23 -10l50 -50q10 -10 10 -23z" />
+    <glyph glyph-name="desktop" unicode="&#xf108;" horiz-adv-x="1920" 
+d="M1792 544v832q0 13 -9.5 22.5t-22.5 9.5h-1600q-13 0 -22.5 -9.5t-9.5 -22.5v-832q0 -13 9.5 -22.5t22.5 -9.5h1600q13 0 22.5 9.5t9.5 22.5zM1920 1376v-1088q0 -66 -47 -113t-113 -47h-544q0 -37 16 -77.5t32 -71t16 -43.5q0 -26 -19 -45t-45 -19h-512q-26 0 -45 19
+t-19 45q0 14 16 44t32 70t16 78h-544q-66 0 -113 47t-47 113v1088q0 66 47 113t113 47h1600q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="laptop" unicode="&#xf109;" horiz-adv-x="1920" 
+d="M416 256q-66 0 -113 47t-47 113v704q0 66 47 113t113 47h1088q66 0 113 -47t47 -113v-704q0 -66 -47 -113t-113 -47h-1088zM384 1120v-704q0 -13 9.5 -22.5t22.5 -9.5h1088q13 0 22.5 9.5t9.5 22.5v704q0 13 -9.5 22.5t-22.5 9.5h-1088q-13 0 -22.5 -9.5t-9.5 -22.5z
+M1760 192h160v-96q0 -40 -47 -68t-113 -28h-1600q-66 0 -113 28t-47 68v96h160h1600zM1040 96q16 0 16 16t-16 16h-160q-16 0 -16 -16t16 -16h160z" />
+    <glyph glyph-name="tablet" unicode="&#xf10a;" horiz-adv-x="1152" 
+d="M640 128q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1024 288v960q0 13 -9.5 22.5t-22.5 9.5h-832q-13 0 -22.5 -9.5t-9.5 -22.5v-960q0 -13 9.5 -22.5t22.5 -9.5h832q13 0 22.5 9.5t9.5 22.5zM1152 1248v-1088q0 -66 -47 -113t-113 -47h-832
+q-66 0 -113 47t-47 113v1088q0 66 47 113t113 47h832q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="mobile_phone" unicode="&#xf10b;" horiz-adv-x="768" 
+d="M464 128q0 33 -23.5 56.5t-56.5 23.5t-56.5 -23.5t-23.5 -56.5t23.5 -56.5t56.5 -23.5t56.5 23.5t23.5 56.5zM672 288v704q0 13 -9.5 22.5t-22.5 9.5h-512q-13 0 -22.5 -9.5t-9.5 -22.5v-704q0 -13 9.5 -22.5t22.5 -9.5h512q13 0 22.5 9.5t9.5 22.5zM480 1136
+q0 16 -16 16h-160q-16 0 -16 -16t16 -16h160q16 0 16 16zM768 1152v-1024q0 -52 -38 -90t-90 -38h-512q-52 0 -90 38t-38 90v1024q0 52 38 90t90 38h512q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="circle_blank" unicode="&#xf10c;" 
+d="M768 1184q-148 0 -273 -73t-198 -198t-73 -273t73 -273t198 -198t273 -73t273 73t198 198t73 273t-73 273t-198 198t-273 73zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103
+t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="quote_left" unicode="&#xf10d;" horiz-adv-x="1664" 
+d="M768 576v-384q0 -80 -56 -136t-136 -56h-384q-80 0 -136 56t-56 136v704q0 104 40.5 198.5t109.5 163.5t163.5 109.5t198.5 40.5h64q26 0 45 -19t19 -45v-128q0 -26 -19 -45t-45 -19h-64q-106 0 -181 -75t-75 -181v-32q0 -40 28 -68t68 -28h224q80 0 136 -56t56 -136z
+M1664 576v-384q0 -80 -56 -136t-136 -56h-384q-80 0 -136 56t-56 136v704q0 104 40.5 198.5t109.5 163.5t163.5 109.5t198.5 40.5h64q26 0 45 -19t19 -45v-128q0 -26 -19 -45t-45 -19h-64q-106 0 -181 -75t-75 -181v-32q0 -40 28 -68t68 -28h224q80 0 136 -56t56 -136z" />
+    <glyph glyph-name="quote_right" unicode="&#xf10e;" horiz-adv-x="1664" 
+d="M768 1216v-704q0 -104 -40.5 -198.5t-109.5 -163.5t-163.5 -109.5t-198.5 -40.5h-64q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h64q106 0 181 75t75 181v32q0 40 -28 68t-68 28h-224q-80 0 -136 56t-56 136v384q0 80 56 136t136 56h384q80 0 136 -56t56 -136zM1664 1216
+v-704q0 -104 -40.5 -198.5t-109.5 -163.5t-163.5 -109.5t-198.5 -40.5h-64q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h64q106 0 181 75t75 181v32q0 40 -28 68t-68 28h-224q-80 0 -136 56t-56 136v384q0 80 56 136t136 56h384q80 0 136 -56t56 -136z" />
+    <glyph glyph-name="spinner" unicode="&#xf110;" horiz-adv-x="1792" 
+d="M526 142q0 -53 -37.5 -90.5t-90.5 -37.5q-52 0 -90 38t-38 90q0 53 37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1024 -64q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM320 640q0 -53 -37.5 -90.5t-90.5 -37.5
+t-90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1522 142q0 -52 -38 -90t-90 -38q-53 0 -90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM558 1138q0 -66 -47 -113t-113 -47t-113 47t-47 113t47 113t113 47t113 -47t47 -113z
+M1728 640q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1088 1344q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM1618 1138q0 -93 -66 -158.5t-158 -65.5q-93 0 -158.5 65.5t-65.5 158.5
+q0 92 65.5 158t158.5 66q92 0 158 -66t66 -158z" />
+    <glyph glyph-name="circle" unicode="&#xf111;" 
+d="M1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="reply" unicode="&#xf112;" horiz-adv-x="1792" 
+d="M1792 416q0 -166 -127 -451q-3 -7 -10.5 -24t-13.5 -30t-13 -22q-12 -17 -28 -17q-15 0 -23.5 10t-8.5 25q0 9 2.5 26.5t2.5 23.5q5 68 5 123q0 101 -17.5 181t-48.5 138.5t-80 101t-105.5 69.5t-133 42.5t-154 21.5t-175.5 6h-224v-256q0 -26 -19 -45t-45 -19t-45 19
+l-512 512q-19 19 -19 45t19 45l512 512q19 19 45 19t45 -19t19 -45v-256h224q713 0 875 -403q53 -134 53 -333z" />
+    <glyph glyph-name="github_alt" unicode="&#xf113;" horiz-adv-x="1664" 
+d="M640 320q0 -40 -12.5 -82t-43 -76t-72.5 -34t-72.5 34t-43 76t-12.5 82t12.5 82t43 76t72.5 34t72.5 -34t43 -76t12.5 -82zM1280 320q0 -40 -12.5 -82t-43 -76t-72.5 -34t-72.5 34t-43 76t-12.5 82t12.5 82t43 76t72.5 34t72.5 -34t43 -76t12.5 -82zM1440 320
+q0 120 -69 204t-187 84q-41 0 -195 -21q-71 -11 -157 -11t-157 11q-152 21 -195 21q-118 0 -187 -84t-69 -204q0 -88 32 -153.5t81 -103t122 -60t140 -29.5t149 -7h168q82 0 149 7t140 29.5t122 60t81 103t32 153.5zM1664 496q0 -207 -61 -331q-38 -77 -105.5 -133t-141 -86
+t-170 -47.5t-171.5 -22t-167 -4.5q-78 0 -142 3t-147.5 12.5t-152.5 30t-137 51.5t-121 81t-86 115q-62 123 -62 331q0 237 136 396q-27 82 -27 170q0 116 51 218q108 0 190 -39.5t189 -123.5q147 35 309 35q148 0 280 -32q105 82 187 121t189 39q51 -102 51 -218
+q0 -87 -27 -168q136 -160 136 -398z" />
+    <glyph glyph-name="folder_close_alt" unicode="&#xf114;" horiz-adv-x="1664" 
+d="M1536 224v704q0 40 -28 68t-68 28h-704q-40 0 -68 28t-28 68v64q0 40 -28 68t-68 28h-320q-40 0 -68 -28t-28 -68v-960q0 -40 28 -68t68 -28h1216q40 0 68 28t28 68zM1664 928v-704q0 -92 -66 -158t-158 -66h-1216q-92 0 -158 66t-66 158v960q0 92 66 158t158 66h320
+q92 0 158 -66t66 -158v-32h672q92 0 158 -66t66 -158z" />
+    <glyph glyph-name="folder_open_alt" unicode="&#xf115;" horiz-adv-x="1920" 
+d="M1781 605q0 35 -53 35h-1088q-40 0 -85.5 -21.5t-71.5 -52.5l-294 -363q-18 -24 -18 -40q0 -35 53 -35h1088q40 0 86 22t71 53l294 363q18 22 18 39zM640 768h768v160q0 40 -28 68t-68 28h-576q-40 0 -68 28t-28 68v64q0 40 -28 68t-68 28h-320q-40 0 -68 -28t-28 -68
+v-853l256 315q44 53 116 87.5t140 34.5zM1909 605q0 -62 -46 -120l-295 -363q-43 -53 -116 -87.5t-140 -34.5h-1088q-92 0 -158 66t-66 158v960q0 92 66 158t158 66h320q92 0 158 -66t66 -158v-32h544q92 0 158 -66t66 -158v-160h192q54 0 99 -24.5t67 -70.5q15 -32 15 -68z
+" />
+    <glyph glyph-name="expand_alt" unicode="&#xf116;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="collapse_alt" unicode="&#xf117;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="smile" unicode="&#xf118;" 
+d="M1134 461q-37 -121 -138 -195t-228 -74t-228 74t-138 195q-8 25 4 48.5t38 31.5q25 8 48.5 -4t31.5 -38q25 -80 92.5 -129.5t151.5 -49.5t151.5 49.5t92.5 129.5q8 26 32 38t49 4t37 -31.5t4 -48.5zM640 896q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5t-37.5 90.5
+t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1152 896q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1408 640q0 130 -51 248.5t-136.5 204t-204 136.5t-248.5 51t-248.5 -51t-204 -136.5t-136.5 -204t-51 -248.5
+t51 -248.5t136.5 -204t204 -136.5t248.5 -51t248.5 51t204 136.5t136.5 204t51 248.5zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="frown" unicode="&#xf119;" 
+d="M1134 307q8 -25 -4 -48.5t-37 -31.5t-49 4t-32 38q-25 80 -92.5 129.5t-151.5 49.5t-151.5 -49.5t-92.5 -129.5q-8 -26 -31.5 -38t-48.5 -4q-26 8 -38 31.5t-4 48.5q37 121 138 195t228 74t228 -74t138 -195zM640 896q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5
+t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1152 896q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1408 640q0 130 -51 248.5t-136.5 204t-204 136.5t-248.5 51t-248.5 -51t-204 -136.5t-136.5 -204
+t-51 -248.5t51 -248.5t136.5 -204t204 -136.5t248.5 -51t248.5 51t204 136.5t136.5 204t51 248.5zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="meh" unicode="&#xf11a;" 
+d="M1152 448q0 -26 -19 -45t-45 -19h-640q-26 0 -45 19t-19 45t19 45t45 19h640q26 0 45 -19t19 -45zM640 896q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1152 896q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5
+t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1408 640q0 130 -51 248.5t-136.5 204t-204 136.5t-248.5 51t-248.5 -51t-204 -136.5t-136.5 -204t-51 -248.5t51 -248.5t136.5 -204t204 -136.5t248.5 -51t248.5 51t204 136.5t136.5 204t51 248.5zM1536 640
+q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="gamepad" unicode="&#xf11b;" horiz-adv-x="1920" 
+d="M832 448v128q0 14 -9 23t-23 9h-192v192q0 14 -9 23t-23 9h-128q-14 0 -23 -9t-9 -23v-192h-192q-14 0 -23 -9t-9 -23v-128q0 -14 9 -23t23 -9h192v-192q0 -14 9 -23t23 -9h128q14 0 23 9t9 23v192h192q14 0 23 9t9 23zM1408 384q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5
+t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1664 640q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1920 512q0 -212 -150 -362t-362 -150q-192 0 -338 128h-220q-146 -128 -338 -128q-212 0 -362 150
+t-150 362t150 362t362 150h896q212 0 362 -150t150 -362z" />
+    <glyph glyph-name="keyboard" unicode="&#xf11c;" horiz-adv-x="1920" 
+d="M384 368v-96q0 -16 -16 -16h-96q-16 0 -16 16v96q0 16 16 16h96q16 0 16 -16zM512 624v-96q0 -16 -16 -16h-224q-16 0 -16 16v96q0 16 16 16h224q16 0 16 -16zM384 880v-96q0 -16 -16 -16h-96q-16 0 -16 16v96q0 16 16 16h96q16 0 16 -16zM1408 368v-96q0 -16 -16 -16
+h-864q-16 0 -16 16v96q0 16 16 16h864q16 0 16 -16zM768 624v-96q0 -16 -16 -16h-96q-16 0 -16 16v96q0 16 16 16h96q16 0 16 -16zM640 880v-96q0 -16 -16 -16h-96q-16 0 -16 16v96q0 16 16 16h96q16 0 16 -16zM1024 624v-96q0 -16 -16 -16h-96q-16 0 -16 16v96q0 16 16 16
+h96q16 0 16 -16zM896 880v-96q0 -16 -16 -16h-96q-16 0 -16 16v96q0 16 16 16h96q16 0 16 -16zM1280 624v-96q0 -16 -16 -16h-96q-16 0 -16 16v96q0 16 16 16h96q16 0 16 -16zM1664 368v-96q0 -16 -16 -16h-96q-16 0 -16 16v96q0 16 16 16h96q16 0 16 -16zM1152 880v-96
+q0 -16 -16 -16h-96q-16 0 -16 16v96q0 16 16 16h96q16 0 16 -16zM1408 880v-96q0 -16 -16 -16h-96q-16 0 -16 16v96q0 16 16 16h96q16 0 16 -16zM1664 880v-352q0 -16 -16 -16h-224q-16 0 -16 16v96q0 16 16 16h112v240q0 16 16 16h96q16 0 16 -16zM1792 128v896h-1664v-896
+h1664zM1920 1024v-896q0 -53 -37.5 -90.5t-90.5 -37.5h-1664q-53 0 -90.5 37.5t-37.5 90.5v896q0 53 37.5 90.5t90.5 37.5h1664q53 0 90.5 -37.5t37.5 -90.5z" />
+    <glyph glyph-name="flag_alt" unicode="&#xf11d;" horiz-adv-x="1792" 
+d="M1664 491v616q-169 -91 -306 -91q-82 0 -145 32q-100 49 -184 76.5t-178 27.5q-173 0 -403 -127v-599q245 113 433 113q55 0 103.5 -7.5t98 -26t77 -31t82.5 -39.5l28 -14q44 -22 101 -22q120 0 293 92zM320 1280q0 -35 -17.5 -64t-46.5 -46v-1266q0 -14 -9 -23t-23 -9
+h-64q-14 0 -23 9t-9 23v1266q-29 17 -46.5 46t-17.5 64q0 53 37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1792 1216v-763q0 -39 -35 -57q-10 -5 -17 -9q-218 -116 -369 -116q-88 0 -158 35l-28 14q-64 33 -99 48t-91 29t-114 14q-102 0 -235.5 -44t-228.5 -102
+q-15 -9 -33 -9q-16 0 -32 8q-32 19 -32 56v742q0 35 31 55q35 21 78.5 42.5t114 52t152.5 49.5t155 19q112 0 209 -31t209 -86q38 -19 89 -19q122 0 310 112q22 12 31 17q31 16 62 -2q31 -20 31 -55z" />
+    <glyph glyph-name="flag_checkered" unicode="&#xf11e;" horiz-adv-x="1792" 
+d="M832 536v192q-181 -16 -384 -117v-185q205 96 384 110zM832 954v197q-172 -8 -384 -126v-189q215 111 384 118zM1664 491v184q-235 -116 -384 -71v224q-20 6 -39 15q-5 3 -33 17t-34.5 17t-31.5 15t-34.5 15.5t-32.5 13t-36 12.5t-35 8.5t-39.5 7.5t-39.5 4t-44 2
+q-23 0 -49 -3v-222h19q102 0 192.5 -29t197.5 -82q19 -9 39 -15v-188q42 -17 91 -17q120 0 293 92zM1664 918v189q-169 -91 -306 -91q-45 0 -78 8v-196q148 -42 384 90zM320 1280q0 -35 -17.5 -64t-46.5 -46v-1266q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v1266
+q-29 17 -46.5 46t-17.5 64q0 53 37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1792 1216v-763q0 -39 -35 -57q-10 -5 -17 -9q-218 -116 -369 -116q-88 0 -158 35l-28 14q-64 33 -99 48t-91 29t-114 14q-102 0 -235.5 -44t-228.5 -102q-15 -9 -33 -9q-16 0 -32 8
+q-32 19 -32 56v742q0 35 31 55q35 21 78.5 42.5t114 52t152.5 49.5t155 19q112 0 209 -31t209 -86q38 -19 89 -19q122 0 310 112q22 12 31 17q31 16 62 -2q31 -20 31 -55z" />
+    <glyph glyph-name="terminal" unicode="&#xf120;" horiz-adv-x="1664" 
+d="M585 553l-466 -466q-10 -10 -23 -10t-23 10l-50 50q-10 10 -10 23t10 23l393 393l-393 393q-10 10 -10 23t10 23l50 50q10 10 23 10t23 -10l466 -466q10 -10 10 -23t-10 -23zM1664 96v-64q0 -14 -9 -23t-23 -9h-960q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h960q14 0 23 -9
+t9 -23z" />
+    <glyph glyph-name="code" unicode="&#xf121;" horiz-adv-x="1920" 
+d="M617 137l-50 -50q-10 -10 -23 -10t-23 10l-466 466q-10 10 -10 23t10 23l466 466q10 10 23 10t23 -10l50 -50q10 -10 10 -23t-10 -23l-393 -393l393 -393q10 -10 10 -23t-10 -23zM1208 1204l-373 -1291q-4 -13 -15.5 -19.5t-23.5 -2.5l-62 17q-13 4 -19.5 15.5t-2.5 24.5
+l373 1291q4 13 15.5 19.5t23.5 2.5l62 -17q13 -4 19.5 -15.5t2.5 -24.5zM1865 553l-466 -466q-10 -10 -23 -10t-23 10l-50 50q-10 10 -10 23t10 23l393 393l-393 393q-10 10 -10 23t10 23l50 50q10 10 23 10t23 -10l466 -466q10 -10 10 -23t-10 -23z" />
+    <glyph glyph-name="reply_all" unicode="&#xf122;" horiz-adv-x="1792" 
+d="M640 454v-70q0 -42 -39 -59q-13 -5 -25 -5q-27 0 -45 19l-512 512q-19 19 -19 45t19 45l512 512q29 31 70 14q39 -17 39 -59v-69l-397 -398q-19 -19 -19 -45t19 -45zM1792 416q0 -58 -17 -133.5t-38.5 -138t-48 -125t-40.5 -90.5l-20 -40q-8 -17 -28 -17q-6 0 -9 1
+q-25 8 -23 34q43 400 -106 565q-64 71 -170.5 110.5t-267.5 52.5v-251q0 -42 -39 -59q-13 -5 -25 -5q-27 0 -45 19l-512 512q-19 19 -19 45t19 45l512 512q29 31 70 14q39 -17 39 -59v-262q411 -28 599 -221q169 -173 169 -509z" />
+    <glyph glyph-name="star_half_empty" unicode="&#xf123;" horiz-adv-x="1664" 
+d="M1186 579l257 250l-356 52l-66 10l-30 60l-159 322v-963l59 -31l318 -168l-60 355l-12 66zM1638 841l-363 -354l86 -500q5 -33 -6 -51.5t-34 -18.5q-17 0 -40 12l-449 236l-449 -236q-23 -12 -40 -12q-23 0 -34 18.5t-6 51.5l86 500l-364 354q-32 32 -23 59.5t54 34.5
+l502 73l225 455q20 41 49 41q28 0 49 -41l225 -455l502 -73q45 -7 54 -34.5t-24 -59.5z" />
+    <glyph glyph-name="location_arrow" unicode="&#xf124;" horiz-adv-x="1408" 
+d="M1401 1187l-640 -1280q-17 -35 -57 -35q-5 0 -15 2q-22 5 -35.5 22.5t-13.5 39.5v576h-576q-22 0 -39.5 13.5t-22.5 35.5t4 42t29 30l1280 640q13 7 29 7q27 0 45 -19q15 -14 18.5 -34.5t-6.5 -39.5z" />
+    <glyph glyph-name="crop" unicode="&#xf125;" horiz-adv-x="1664" 
+d="M557 256h595v595zM512 301l595 595h-595v-595zM1664 224v-192q0 -14 -9 -23t-23 -9h-224v-224q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v224h-864q-14 0 -23 9t-9 23v864h-224q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h224v224q0 14 9 23t23 9h192q14 0 23 -9t9 -23
+v-224h851l246 247q10 9 23 9t23 -9q9 -10 9 -23t-9 -23l-247 -246v-851h224q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="code_fork" unicode="&#xf126;" horiz-adv-x="1024" 
+d="M288 64q0 40 -28 68t-68 28t-68 -28t-28 -68t28 -68t68 -28t68 28t28 68zM288 1216q0 40 -28 68t-68 28t-68 -28t-28 -68t28 -68t68 -28t68 28t28 68zM928 1088q0 40 -28 68t-68 28t-68 -28t-28 -68t28 -68t68 -28t68 28t28 68zM1024 1088q0 -52 -26 -96.5t-70 -69.5
+q-2 -287 -226 -414q-67 -38 -203 -81q-128 -40 -169.5 -71t-41.5 -100v-26q44 -25 70 -69.5t26 -96.5q0 -80 -56 -136t-136 -56t-136 56t-56 136q0 52 26 96.5t70 69.5v820q-44 25 -70 69.5t-26 96.5q0 80 56 136t136 56t136 -56t56 -136q0 -52 -26 -96.5t-70 -69.5v-497
+q54 26 154 57q55 17 87.5 29.5t70.5 31t59 39.5t40.5 51t28 69.5t8.5 91.5q-44 25 -70 69.5t-26 96.5q0 80 56 136t136 56t136 -56t56 -136z" />
+    <glyph glyph-name="unlink" unicode="&#xf127;" horiz-adv-x="1664" 
+d="M439 265l-256 -256q-11 -9 -23 -9t-23 9q-9 10 -9 23t9 23l256 256q10 9 23 9t23 -9q9 -10 9 -23t-9 -23zM608 224v-320q0 -14 -9 -23t-23 -9t-23 9t-9 23v320q0 14 9 23t23 9t23 -9t9 -23zM384 448q0 -14 -9 -23t-23 -9h-320q-14 0 -23 9t-9 23t9 23t23 9h320
+q14 0 23 -9t9 -23zM1648 320q0 -120 -85 -203l-147 -146q-83 -83 -203 -83q-121 0 -204 85l-334 335q-21 21 -42 56l239 18l273 -274q27 -27 68 -27.5t68 26.5l147 146q28 28 28 67q0 40 -28 68l-274 275l18 239q35 -21 56 -42l336 -336q84 -86 84 -204zM1031 1044l-239 -18
+l-273 274q-28 28 -68 28q-39 0 -68 -27l-147 -146q-28 -28 -28 -67q0 -40 28 -68l274 -274l-18 -240q-35 21 -56 42l-336 336q-84 86 -84 204q0 120 85 203l147 146q83 83 203 83q121 0 204 -85l334 -335q21 -21 42 -56zM1664 960q0 -14 -9 -23t-23 -9h-320q-14 0 -23 9
+t-9 23t9 23t23 9h320q14 0 23 -9t9 -23zM1120 1504v-320q0 -14 -9 -23t-23 -9t-23 9t-9 23v320q0 14 9 23t23 9t23 -9t9 -23zM1527 1353l-256 -256q-11 -9 -23 -9t-23 9q-9 10 -9 23t9 23l256 256q10 9 23 9t23 -9q9 -10 9 -23t-9 -23z" />
+    <glyph glyph-name="question" unicode="&#xf128;" horiz-adv-x="1024" 
+d="M704 280v-240q0 -16 -12 -28t-28 -12h-240q-16 0 -28 12t-12 28v240q0 16 12 28t28 12h240q16 0 28 -12t12 -28zM1020 880q0 -54 -15.5 -101t-35 -76.5t-55 -59.5t-57.5 -43.5t-61 -35.5q-41 -23 -68.5 -65t-27.5 -67q0 -17 -12 -32.5t-28 -15.5h-240q-15 0 -25.5 18.5
+t-10.5 37.5v45q0 83 65 156.5t143 108.5q59 27 84 56t25 76q0 42 -46.5 74t-107.5 32q-65 0 -108 -29q-35 -25 -107 -115q-13 -16 -31 -16q-12 0 -25 8l-164 125q-13 10 -15.5 25t5.5 28q160 266 464 266q80 0 161 -31t146 -83t106 -127.5t41 -158.5z" />
+    <glyph glyph-name="_279" unicode="&#xf129;" horiz-adv-x="640" 
+d="M640 192v-128q0 -26 -19 -45t-45 -19h-512q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h64v384h-64q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h384q26 0 45 -19t19 -45v-576h64q26 0 45 -19t19 -45zM512 1344v-192q0 -26 -19 -45t-45 -19h-256q-26 0 -45 19t-19 45v192
+q0 26 19 45t45 19h256q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="exclamation" unicode="&#xf12a;" horiz-adv-x="640" 
+d="M512 288v-224q0 -26 -19 -45t-45 -19h-256q-26 0 -45 19t-19 45v224q0 26 19 45t45 19h256q26 0 45 -19t19 -45zM542 1344l-28 -768q-1 -26 -20.5 -45t-45.5 -19h-256q-26 0 -45.5 19t-20.5 45l-28 768q-1 26 17.5 45t44.5 19h320q26 0 44.5 -19t17.5 -45z" />
+    <glyph glyph-name="superscript" unicode="&#xf12b;" 
+d="M897 167v-167h-248l-159 252l-24 42q-8 9 -11 21h-3q-1 -3 -2.5 -6.5t-3.5 -8t-3 -6.5q-10 -20 -25 -44l-155 -250h-258v167h128l197 291l-185 272h-137v168h276l139 -228q2 -4 23 -42q8 -9 11 -21h3q3 9 11 21l25 42l140 228h257v-168h-125l-184 -267l204 -296h109z
+M1534 846v-206h-514l-3 27q-4 28 -4 46q0 64 26 117t65 86.5t84 65t84 54.5t65 54t26 64q0 38 -29.5 62.5t-70.5 24.5q-51 0 -97 -39q-14 -11 -36 -38l-105 92q26 37 63 66q83 65 188 65q110 0 178 -59.5t68 -158.5q0 -56 -24.5 -103t-62 -76.5t-81.5 -58.5t-82 -50.5
+t-65.5 -51.5t-30.5 -63h232v80h126z" />
+    <glyph glyph-name="subscript" unicode="&#xf12c;" 
+d="M897 167v-167h-248l-159 252l-24 42q-8 9 -11 21h-3q-1 -3 -2.5 -6.5t-3.5 -8t-3 -6.5q-10 -20 -25 -44l-155 -250h-258v167h128l197 291l-185 272h-137v168h276l139 -228q2 -4 23 -42q8 -9 11 -21h3q3 9 11 21l25 42l140 228h257v-168h-125l-184 -267l204 -296h109z
+M1536 -50v-206h-514l-4 27q-3 45 -3 46q0 64 26 117t65 86.5t84 65t84 54.5t65 54t26 64q0 38 -29.5 62.5t-70.5 24.5q-51 0 -97 -39q-14 -11 -36 -38l-105 92q26 37 63 66q80 65 188 65q110 0 178 -59.5t68 -158.5q0 -66 -34.5 -118.5t-84 -86t-99.5 -62.5t-87 -63t-41 -73
+h232v80h126z" />
+    <glyph glyph-name="_283" unicode="&#xf12d;" horiz-adv-x="1920" 
+d="M896 128l336 384h-768l-336 -384h768zM1909 1205q15 -34 9.5 -71.5t-30.5 -65.5l-896 -1024q-38 -44 -96 -44h-768q-38 0 -69.5 20.5t-47.5 54.5q-15 34 -9.5 71.5t30.5 65.5l896 1024q38 44 96 44h768q38 0 69.5 -20.5t47.5 -54.5z" />
+    <glyph glyph-name="puzzle_piece" unicode="&#xf12e;" horiz-adv-x="1664" 
+d="M1664 438q0 -81 -44.5 -135t-123.5 -54q-41 0 -77.5 17.5t-59 38t-56.5 38t-71 17.5q-110 0 -110 -124q0 -39 16 -115t15 -115v-5q-22 0 -33 -1q-34 -3 -97.5 -11.5t-115.5 -13.5t-98 -5q-61 0 -103 26.5t-42 83.5q0 37 17.5 71t38 56.5t38 59t17.5 77.5q0 79 -54 123.5
+t-135 44.5q-84 0 -143 -45.5t-59 -127.5q0 -43 15 -83t33.5 -64.5t33.5 -53t15 -50.5q0 -45 -46 -89q-37 -35 -117 -35q-95 0 -245 24q-9 2 -27.5 4t-27.5 4l-13 2q-1 0 -3 1q-2 0 -2 1v1024q2 -1 17.5 -3.5t34 -5t21.5 -3.5q150 -24 245 -24q80 0 117 35q46 44 46 89
+q0 22 -15 50.5t-33.5 53t-33.5 64.5t-15 83q0 82 59 127.5t144 45.5q80 0 134 -44.5t54 -123.5q0 -41 -17.5 -77.5t-38 -59t-38 -56.5t-17.5 -71q0 -57 42 -83.5t103 -26.5q64 0 180 15t163 17v-2q-1 -2 -3.5 -17.5t-5 -34t-3.5 -21.5q-24 -150 -24 -245q0 -80 35 -117
+q44 -46 89 -46q22 0 50.5 15t53 33.5t64.5 33.5t83 15q82 0 127.5 -59t45.5 -143z" />
+    <glyph glyph-name="microphone" unicode="&#xf130;" horiz-adv-x="1152" 
+d="M1152 832v-128q0 -221 -147.5 -384.5t-364.5 -187.5v-132h256q26 0 45 -19t19 -45t-19 -45t-45 -19h-640q-26 0 -45 19t-19 45t19 45t45 19h256v132q-217 24 -364.5 187.5t-147.5 384.5v128q0 26 19 45t45 19t45 -19t19 -45v-128q0 -185 131.5 -316.5t316.5 -131.5
+t316.5 131.5t131.5 316.5v128q0 26 19 45t45 19t45 -19t19 -45zM896 1216v-512q0 -132 -94 -226t-226 -94t-226 94t-94 226v512q0 132 94 226t226 94t226 -94t94 -226z" />
+    <glyph glyph-name="microphone_off" unicode="&#xf131;" horiz-adv-x="1408" 
+d="M271 591l-101 -101q-42 103 -42 214v128q0 26 19 45t45 19t45 -19t19 -45v-128q0 -53 15 -113zM1385 1193l-361 -361v-128q0 -132 -94 -226t-226 -94q-55 0 -109 19l-96 -96q97 -51 205 -51q185 0 316.5 131.5t131.5 316.5v128q0 26 19 45t45 19t45 -19t19 -45v-128
+q0 -221 -147.5 -384.5t-364.5 -187.5v-132h256q26 0 45 -19t19 -45t-19 -45t-45 -19h-640q-26 0 -45 19t-19 45t19 45t45 19h256v132q-125 13 -235 81l-254 -254q-10 -10 -23 -10t-23 10l-82 82q-10 10 -10 23t10 23l1234 1234q10 10 23 10t23 -10l82 -82q10 -10 10 -23
+t-10 -23zM1005 1325l-621 -621v512q0 132 94 226t226 94q102 0 184.5 -59t116.5 -152z" />
+    <glyph glyph-name="shield" unicode="&#xf132;" horiz-adv-x="1280" 
+d="M1088 576v640h-448v-1137q119 63 213 137q235 184 235 360zM1280 1344v-768q0 -86 -33.5 -170.5t-83 -150t-118 -127.5t-126.5 -103t-121 -77.5t-89.5 -49.5t-42.5 -20q-12 -6 -26 -6t-26 6q-16 7 -42.5 20t-89.5 49.5t-121 77.5t-126.5 103t-118 127.5t-83 150
+t-33.5 170.5v768q0 26 19 45t45 19h1152q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="calendar_empty" unicode="&#xf133;" horiz-adv-x="1664" 
+d="M128 -128h1408v1024h-1408v-1024zM512 1088v288q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-288q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM1280 1088v288q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-288q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM1664 1152v-1280
+q0 -52 -38 -90t-90 -38h-1408q-52 0 -90 38t-38 90v1280q0 52 38 90t90 38h128v96q0 66 47 113t113 47h64q66 0 113 -47t47 -113v-96h384v96q0 66 47 113t113 47h64q66 0 113 -47t47 -113v-96h128q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="fire_extinguisher" unicode="&#xf134;" horiz-adv-x="1408" 
+d="M512 1344q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1408 1376v-320q0 -16 -12 -25q-8 -7 -20 -7q-4 0 -7 1l-448 96q-11 2 -18 11t-7 20h-256v-102q111 -23 183.5 -111t72.5 -203v-800q0 -26 -19 -45t-45 -19h-512q-26 0 -45 19t-19 45v800
+q0 106 62.5 190.5t161.5 114.5v111h-32q-59 0 -115 -23.5t-91.5 -53t-66 -66.5t-40.5 -53.5t-14 -24.5q-17 -35 -57 -35q-16 0 -29 7q-23 12 -31.5 37t3.5 49q5 10 14.5 26t37.5 53.5t60.5 70t85 67t108.5 52.5q-25 42 -25 86q0 66 47 113t113 47t113 -47t47 -113
+q0 -33 -14 -64h302q0 11 7 20t18 11l448 96q3 1 7 1q12 0 20 -7q12 -9 12 -25z" />
+    <glyph glyph-name="rocket" unicode="&#xf135;" horiz-adv-x="1664" 
+d="M1440 1088q0 40 -28 68t-68 28t-68 -28t-28 -68t28 -68t68 -28t68 28t28 68zM1664 1376q0 -249 -75.5 -430.5t-253.5 -360.5q-81 -80 -195 -176l-20 -379q-2 -16 -16 -26l-384 -224q-7 -4 -16 -4q-12 0 -23 9l-64 64q-13 14 -8 32l85 276l-281 281l-276 -85q-3 -1 -9 -1
+q-14 0 -23 9l-64 64q-17 19 -5 39l224 384q10 14 26 16l379 20q96 114 176 195q188 187 358 258t431 71q14 0 24 -9.5t10 -22.5z" />
+    <glyph glyph-name="maxcdn" unicode="&#xf136;" horiz-adv-x="1792" 
+d="M1745 763l-164 -763h-334l178 832q13 56 -15 88q-27 33 -83 33h-169l-204 -953h-334l204 953h-286l-204 -953h-334l204 953l-153 327h1276q101 0 189.5 -40.5t147.5 -113.5q60 -73 81 -168.5t0 -194.5z" />
+    <glyph glyph-name="chevron_sign_left" unicode="&#xf137;" 
+d="M909 141l102 102q19 19 19 45t-19 45l-307 307l307 307q19 19 19 45t-19 45l-102 102q-19 19 -45 19t-45 -19l-454 -454q-19 -19 -19 -45t19 -45l454 -454q19 -19 45 -19t45 19zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5
+t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="chevron_sign_right" unicode="&#xf138;" 
+d="M717 141l454 454q19 19 19 45t-19 45l-454 454q-19 19 -45 19t-45 -19l-102 -102q-19 -19 -19 -45t19 -45l307 -307l-307 -307q-19 -19 -19 -45t19 -45l102 -102q19 -19 45 -19t45 19zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5
+t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="chevron_sign_up" unicode="&#xf139;" 
+d="M1165 397l102 102q19 19 19 45t-19 45l-454 454q-19 19 -45 19t-45 -19l-454 -454q-19 -19 -19 -45t19 -45l102 -102q19 -19 45 -19t45 19l307 307l307 -307q19 -19 45 -19t45 19zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5
+t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="chevron_sign_down" unicode="&#xf13a;" 
+d="M813 237l454 454q19 19 19 45t-19 45l-102 102q-19 19 -45 19t-45 -19l-307 -307l-307 307q-19 19 -45 19t-45 -19l-102 -102q-19 -19 -19 -45t19 -45l454 -454q19 -19 45 -19t45 19zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5
+t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="html5" unicode="&#xf13b;" horiz-adv-x="1408" 
+d="M1130 939l16 175h-884l47 -534h612l-22 -228l-197 -53l-196 53l-13 140h-175l22 -278l362 -100h4v1l359 99l50 544h-644l-15 181h674zM0 1408h1408l-128 -1438l-578 -162l-574 162z" />
+    <glyph glyph-name="css3" unicode="&#xf13c;" horiz-adv-x="1792" 
+d="M275 1408h1505l-266 -1333l-804 -267l-698 267l71 356h297l-29 -147l422 -161l486 161l68 339h-1208l58 297h1209l38 191h-1208z" />
+    <glyph glyph-name="anchor" unicode="&#xf13d;" horiz-adv-x="1792" 
+d="M960 1280q0 26 -19 45t-45 19t-45 -19t-19 -45t19 -45t45 -19t45 19t19 45zM1792 352v-352q0 -22 -20 -30q-8 -2 -12 -2q-12 0 -23 9l-93 93q-119 -143 -318.5 -226.5t-429.5 -83.5t-429.5 83.5t-318.5 226.5l-93 -93q-9 -9 -23 -9q-4 0 -12 2q-20 8 -20 30v352
+q0 14 9 23t23 9h352q22 0 30 -20q8 -19 -7 -35l-100 -100q67 -91 189.5 -153.5t271.5 -82.5v647h-192q-26 0 -45 19t-19 45v128q0 26 19 45t45 19h192v163q-58 34 -93 92.5t-35 128.5q0 106 75 181t181 75t181 -75t75 -181q0 -70 -35 -128.5t-93 -92.5v-163h192q26 0 45 -19
+t19 -45v-128q0 -26 -19 -45t-45 -19h-192v-647q149 20 271.5 82.5t189.5 153.5l-100 100q-15 16 -7 35q8 20 30 20h352q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="unlock_alt" unicode="&#xf13e;" horiz-adv-x="1152" 
+d="M1056 768q40 0 68 -28t28 -68v-576q0 -40 -28 -68t-68 -28h-960q-40 0 -68 28t-28 68v576q0 40 28 68t68 28h32v320q0 185 131.5 316.5t316.5 131.5t316.5 -131.5t131.5 -316.5q0 -26 -19 -45t-45 -19h-64q-26 0 -45 19t-19 45q0 106 -75 181t-181 75t-181 -75t-75 -181
+v-320h736z" />
+    <glyph glyph-name="bullseye" unicode="&#xf140;" 
+d="M1024 640q0 -106 -75 -181t-181 -75t-181 75t-75 181t75 181t181 75t181 -75t75 -181zM1152 640q0 159 -112.5 271.5t-271.5 112.5t-271.5 -112.5t-112.5 -271.5t112.5 -271.5t271.5 -112.5t271.5 112.5t112.5 271.5zM1280 640q0 -212 -150 -362t-362 -150t-362 150
+t-150 362t150 362t362 150t362 -150t150 -362zM1408 640q0 130 -51 248.5t-136.5 204t-204 136.5t-248.5 51t-248.5 -51t-204 -136.5t-136.5 -204t-51 -248.5t51 -248.5t136.5 -204t204 -136.5t248.5 -51t248.5 51t204 136.5t136.5 204t51 248.5zM1536 640
+q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="ellipsis_horizontal" unicode="&#xf141;" horiz-adv-x="1408" 
+d="M384 800v-192q0 -40 -28 -68t-68 -28h-192q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h192q40 0 68 -28t28 -68zM896 800v-192q0 -40 -28 -68t-68 -28h-192q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h192q40 0 68 -28t28 -68zM1408 800v-192q0 -40 -28 -68t-68 -28h-192
+q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h192q40 0 68 -28t28 -68z" />
+    <glyph glyph-name="ellipsis_vertical" unicode="&#xf142;" horiz-adv-x="384" 
+d="M384 288v-192q0 -40 -28 -68t-68 -28h-192q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h192q40 0 68 -28t28 -68zM384 800v-192q0 -40 -28 -68t-68 -28h-192q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h192q40 0 68 -28t28 -68zM384 1312v-192q0 -40 -28 -68t-68 -28h-192
+q-40 0 -68 28t-28 68v192q0 40 28 68t68 28h192q40 0 68 -28t28 -68z" />
+    <glyph glyph-name="_303" unicode="&#xf143;" 
+d="M512 256q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM863 162q-13 233 -176.5 396.5t-396.5 176.5q-14 1 -24 -9t-10 -23v-128q0 -13 8.5 -22t21.5 -10q154 -11 264 -121t121 -264q1 -13 10 -21.5t22 -8.5h128
+q13 0 23 10t9 24zM1247 161q-5 154 -56 297.5t-139.5 260t-205 205t-260 139.5t-297.5 56q-14 1 -23 -9q-10 -10 -10 -23v-128q0 -13 9 -22t22 -10q204 -7 378 -111.5t278.5 -278.5t111.5 -378q1 -13 10 -22t22 -9h128q13 0 23 10q11 9 9 23zM1536 1120v-960
+q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="play_sign" unicode="&#xf144;" 
+d="M768 1408q209 0 385.5 -103t279.5 -279.5t103 -385.5t-103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103zM1152 585q32 18 32 55t-32 55l-544 320q-31 19 -64 1q-32 -19 -32 -56v-640q0 -37 32 -56
+q16 -8 32 -8q17 0 32 9z" />
+    <glyph glyph-name="ticket" unicode="&#xf145;" horiz-adv-x="1792" 
+d="M1024 1084l316 -316l-572 -572l-316 316zM813 105l618 618q19 19 19 45t-19 45l-362 362q-18 18 -45 18t-45 -18l-618 -618q-19 -19 -19 -45t19 -45l362 -362q18 -18 45 -18t45 18zM1702 742l-907 -908q-37 -37 -90.5 -37t-90.5 37l-126 126q56 56 56 136t-56 136
+t-136 56t-136 -56l-125 126q-37 37 -37 90.5t37 90.5l907 906q37 37 90.5 37t90.5 -37l125 -125q-56 -56 -56 -136t56 -136t136 -56t136 56l126 -125q37 -37 37 -90.5t-37 -90.5z" />
+    <glyph glyph-name="minus_sign_alt" unicode="&#xf146;" 
+d="M1280 576v128q0 26 -19 45t-45 19h-896q-26 0 -45 -19t-19 -45v-128q0 -26 19 -45t45 -19h896q26 0 45 19t19 45zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5
+t84.5 -203.5z" />
+    <glyph glyph-name="check_minus" unicode="&#xf147;" horiz-adv-x="1408" 
+d="M1152 736v-64q0 -14 -9 -23t-23 -9h-832q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h832q14 0 23 -9t9 -23zM1280 288v832q0 66 -47 113t-113 47h-832q-66 0 -113 -47t-47 -113v-832q0 -66 47 -113t113 -47h832q66 0 113 47t47 113zM1408 1120v-832q0 -119 -84.5 -203.5
+t-203.5 -84.5h-832q-119 0 -203.5 84.5t-84.5 203.5v832q0 119 84.5 203.5t203.5 84.5h832q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="level_up" unicode="&#xf148;" horiz-adv-x="1024" 
+d="M1018 933q-18 -37 -58 -37h-192v-864q0 -14 -9 -23t-23 -9h-704q-21 0 -29 18q-8 20 4 35l160 192q9 11 25 11h320v640h-192q-40 0 -58 37q-17 37 9 68l320 384q18 22 49 22t49 -22l320 -384q27 -32 9 -68z" />
+    <glyph glyph-name="level_down" unicode="&#xf149;" horiz-adv-x="1024" 
+d="M32 1280h704q13 0 22.5 -9.5t9.5 -23.5v-863h192q40 0 58 -37t-9 -69l-320 -384q-18 -22 -49 -22t-49 22l-320 384q-26 31 -9 69q18 37 58 37h192v640h-320q-14 0 -25 11l-160 192q-13 14 -4 34q9 19 29 19z" />
+    <glyph glyph-name="check_sign" unicode="&#xf14a;" 
+d="M685 237l614 614q19 19 19 45t-19 45l-102 102q-19 19 -45 19t-45 -19l-467 -467l-211 211q-19 19 -45 19t-45 -19l-102 -102q-19 -19 -19 -45t19 -45l358 -358q19 -19 45 -19t45 19zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5
+t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="edit_sign" unicode="&#xf14b;" 
+d="M404 428l152 -152l-52 -52h-56v96h-96v56zM818 818q14 -13 -3 -30l-291 -291q-17 -17 -30 -3q-14 13 3 30l291 291q17 17 30 3zM544 128l544 544l-288 288l-544 -544v-288h288zM1152 736l92 92q28 28 28 68t-28 68l-152 152q-28 28 -68 28t-68 -28l-92 -92zM1536 1120
+v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="_312" unicode="&#xf14c;" 
+d="M1280 608v480q0 26 -19 45t-45 19h-480q-42 0 -59 -39q-17 -41 14 -70l144 -144l-534 -534q-19 -19 -19 -45t19 -45l102 -102q19 -19 45 -19t45 19l534 534l144 -144q18 -19 45 -19q12 0 25 5q39 17 39 59zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960
+q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="share_sign" unicode="&#xf14d;" 
+d="M1005 435l352 352q19 19 19 45t-19 45l-352 352q-30 31 -69 14q-40 -17 -40 -59v-160q-119 0 -216 -19.5t-162.5 -51t-114 -79t-76.5 -95.5t-44.5 -109t-21.5 -111.5t-5 -110.5q0 -181 167 -404q11 -12 25 -12q7 0 13 3q22 9 19 33q-44 354 62 473q46 52 130 75.5
+t224 23.5v-160q0 -42 40 -59q12 -5 24 -5q26 0 45 19zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="compass" unicode="&#xf14e;" 
+d="M640 448l256 128l-256 128v-256zM1024 1039v-542l-512 -256v542zM1312 640q0 148 -73 273t-198 198t-273 73t-273 -73t-198 -198t-73 -273t73 -273t198 -198t273 -73t273 73t198 198t73 273zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103
+t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="collapse" unicode="&#xf150;" 
+d="M1145 861q18 -35 -5 -66l-320 -448q-19 -27 -52 -27t-52 27l-320 448q-23 31 -5 66q17 35 57 35h640q40 0 57 -35zM1280 160v960q0 13 -9.5 22.5t-22.5 9.5h-960q-13 0 -22.5 -9.5t-9.5 -22.5v-960q0 -13 9.5 -22.5t22.5 -9.5h960q13 0 22.5 9.5t9.5 22.5zM1536 1120
+v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="collapse_top" unicode="&#xf151;" 
+d="M1145 419q-17 -35 -57 -35h-640q-40 0 -57 35q-18 35 5 66l320 448q19 27 52 27t52 -27l320 -448q23 -31 5 -66zM1280 160v960q0 13 -9.5 22.5t-22.5 9.5h-960q-13 0 -22.5 -9.5t-9.5 -22.5v-960q0 -13 9.5 -22.5t22.5 -9.5h960q13 0 22.5 9.5t9.5 22.5zM1536 1120v-960
+q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="_317" unicode="&#xf152;" 
+d="M1088 640q0 -33 -27 -52l-448 -320q-31 -23 -66 -5q-35 17 -35 57v640q0 40 35 57q35 18 66 -5l448 -320q27 -19 27 -52zM1280 160v960q0 14 -9 23t-23 9h-960q-14 0 -23 -9t-9 -23v-960q0 -14 9 -23t23 -9h960q14 0 23 9t9 23zM1536 1120v-960q0 -119 -84.5 -203.5
+t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="eur" unicode="&#xf153;" horiz-adv-x="1024" 
+d="M976 229l35 -159q3 -12 -3 -22.5t-17 -14.5l-5 -1q-4 -2 -10.5 -3.5t-16 -4.5t-21.5 -5.5t-25.5 -5t-30 -5t-33.5 -4.5t-36.5 -3t-38.5 -1q-234 0 -409 130.5t-238 351.5h-95q-13 0 -22.5 9.5t-9.5 22.5v113q0 13 9.5 22.5t22.5 9.5h66q-2 57 1 105h-67q-14 0 -23 9
+t-9 23v114q0 14 9 23t23 9h98q67 210 243.5 338t400.5 128q102 0 194 -23q11 -3 20 -15q6 -11 3 -24l-43 -159q-3 -13 -14 -19.5t-24 -2.5l-4 1q-4 1 -11.5 2.5l-17.5 3.5t-22.5 3.5t-26 3t-29 2.5t-29.5 1q-126 0 -226 -64t-150 -176h468q16 0 25 -12q10 -12 7 -26
+l-24 -114q-5 -26 -32 -26h-488q-3 -37 0 -105h459q15 0 25 -12q9 -12 6 -27l-24 -112q-2 -11 -11 -18.5t-20 -7.5h-387q48 -117 149.5 -185.5t228.5 -68.5q18 0 36 1.5t33.5 3.5t29.5 4.5t24.5 5t18.5 4.5l12 3l5 2q13 5 26 -2q12 -7 15 -21z" />
+    <glyph glyph-name="gbp" unicode="&#xf154;" horiz-adv-x="1024" 
+d="M1020 399v-367q0 -14 -9 -23t-23 -9h-956q-14 0 -23 9t-9 23v150q0 13 9.5 22.5t22.5 9.5h97v383h-95q-14 0 -23 9.5t-9 22.5v131q0 14 9 23t23 9h95v223q0 171 123.5 282t314.5 111q185 0 335 -125q9 -8 10 -20.5t-7 -22.5l-103 -127q-9 -11 -22 -12q-13 -2 -23 7
+q-5 5 -26 19t-69 32t-93 18q-85 0 -137 -47t-52 -123v-215h305q13 0 22.5 -9t9.5 -23v-131q0 -13 -9.5 -22.5t-22.5 -9.5h-305v-379h414v181q0 13 9 22.5t23 9.5h162q14 0 23 -9.5t9 -22.5z" />
+    <glyph glyph-name="usd" unicode="&#xf155;" horiz-adv-x="1024" 
+d="M978 351q0 -153 -99.5 -263.5t-258.5 -136.5v-175q0 -14 -9 -23t-23 -9h-135q-13 0 -22.5 9.5t-9.5 22.5v175q-66 9 -127.5 31t-101.5 44.5t-74 48t-46.5 37.5t-17.5 18q-17 21 -2 41l103 135q7 10 23 12q15 2 24 -9l2 -2q113 -99 243 -125q37 -8 74 -8q81 0 142.5 43
+t61.5 122q0 28 -15 53t-33.5 42t-58.5 37.5t-66 32t-80 32.5q-39 16 -61.5 25t-61.5 26.5t-62.5 31t-56.5 35.5t-53.5 42.5t-43.5 49t-35.5 58t-21 66.5t-8.5 78q0 138 98 242t255 134v180q0 13 9.5 22.5t22.5 9.5h135q14 0 23 -9t9 -23v-176q57 -6 110.5 -23t87 -33.5
+t63.5 -37.5t39 -29t15 -14q17 -18 5 -38l-81 -146q-8 -15 -23 -16q-14 -3 -27 7q-3 3 -14.5 12t-39 26.5t-58.5 32t-74.5 26t-85.5 11.5q-95 0 -155 -43t-60 -111q0 -26 8.5 -48t29.5 -41.5t39.5 -33t56 -31t60.5 -27t70 -27.5q53 -20 81 -31.5t76 -35t75.5 -42.5t62 -50
+t53 -63.5t31.5 -76.5t13 -94z" />
+    <glyph glyph-name="inr" unicode="&#xf156;" horiz-adv-x="898" 
+d="M898 1066v-102q0 -14 -9 -23t-23 -9h-168q-23 -144 -129 -234t-276 -110q167 -178 459 -536q14 -16 4 -34q-8 -18 -29 -18h-195q-16 0 -25 12q-306 367 -498 571q-9 9 -9 22v127q0 13 9.5 22.5t22.5 9.5h112q132 0 212.5 43t102.5 125h-427q-14 0 -23 9t-9 23v102
+q0 14 9 23t23 9h413q-57 113 -268 113h-145q-13 0 -22.5 9.5t-9.5 22.5v133q0 14 9 23t23 9h832q14 0 23 -9t9 -23v-102q0 -14 -9 -23t-23 -9h-233q47 -61 64 -144h171q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="jpy" unicode="&#xf157;" horiz-adv-x="1027" 
+d="M603 0h-172q-13 0 -22.5 9t-9.5 23v330h-288q-13 0 -22.5 9t-9.5 23v103q0 13 9.5 22.5t22.5 9.5h288v85h-288q-13 0 -22.5 9t-9.5 23v104q0 13 9.5 22.5t22.5 9.5h214l-321 578q-8 16 0 32q10 16 28 16h194q19 0 29 -18l215 -425q19 -38 56 -125q10 24 30.5 68t27.5 61
+l191 420q8 19 29 19h191q17 0 27 -16q9 -14 1 -31l-313 -579h215q13 0 22.5 -9.5t9.5 -22.5v-104q0 -14 -9.5 -23t-22.5 -9h-290v-85h290q13 0 22.5 -9.5t9.5 -22.5v-103q0 -14 -9.5 -23t-22.5 -9h-290v-330q0 -13 -9.5 -22.5t-22.5 -9.5z" />
+    <glyph glyph-name="rub" unicode="&#xf158;" horiz-adv-x="1280" 
+d="M1043 971q0 100 -65 162t-171 62h-320v-448h320q106 0 171 62t65 162zM1280 971q0 -193 -126.5 -315t-326.5 -122h-340v-118h505q14 0 23 -9t9 -23v-128q0 -14 -9 -23t-23 -9h-505v-192q0 -14 -9.5 -23t-22.5 -9h-167q-14 0 -23 9t-9 23v192h-224q-14 0 -23 9t-9 23v128
+q0 14 9 23t23 9h224v118h-224q-14 0 -23 9t-9 23v149q0 13 9 22.5t23 9.5h224v629q0 14 9 23t23 9h539q200 0 326.5 -122t126.5 -315z" />
+    <glyph glyph-name="krw" unicode="&#xf159;" horiz-adv-x="1792" 
+d="M514 341l81 299h-159l75 -300q1 -1 1 -3t1 -3q0 1 0.5 3.5t0.5 3.5zM630 768l35 128h-292l32 -128h225zM822 768h139l-35 128h-70zM1271 340l78 300h-162l81 -299q0 -1 0.5 -3.5t1.5 -3.5q0 1 0.5 3t0.5 3zM1382 768l33 128h-297l34 -128h230zM1792 736v-64q0 -14 -9 -23
+t-23 -9h-213l-164 -616q-7 -24 -31 -24h-159q-24 0 -31 24l-166 616h-209l-167 -616q-7 -24 -31 -24h-159q-11 0 -19.5 7t-10.5 17l-160 616h-208q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h175l-33 128h-142q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h109l-89 344q-5 15 5 28
+q10 12 26 12h137q26 0 31 -24l90 -360h359l97 360q7 24 31 24h126q24 0 31 -24l98 -360h365l93 360q5 24 31 24h137q16 0 26 -12q10 -13 5 -28l-91 -344h111q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-145l-34 -128h179q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="btc" unicode="&#xf15a;" horiz-adv-x="1280" 
+d="M1167 896q18 -182 -131 -258q117 -28 175 -103t45 -214q-7 -71 -32.5 -125t-64.5 -89t-97 -58.5t-121.5 -34.5t-145.5 -15v-255h-154v251q-80 0 -122 1v-252h-154v255q-18 0 -54 0.5t-55 0.5h-200l31 183h111q50 0 58 51v402h16q-6 1 -16 1v287q-13 68 -89 68h-111v164
+l212 -1q64 0 97 1v252h154v-247q82 2 122 2v245h154v-252q79 -7 140 -22.5t113 -45t82.5 -78t36.5 -114.5zM952 351q0 36 -15 64t-37 46t-57.5 30.5t-65.5 18.5t-74 9t-69 3t-64.5 -1t-47.5 -1v-338q8 0 37 -0.5t48 -0.5t53 1.5t58.5 4t57 8.5t55.5 14t47.5 21t39.5 30
+t24.5 40t9.5 51zM881 827q0 33 -12.5 58.5t-30.5 42t-48 28t-55 16.5t-61.5 8t-58 2.5t-54 -1t-39.5 -0.5v-307q5 0 34.5 -0.5t46.5 0t50 2t55 5.5t51.5 11t48.5 18.5t37 27t27 38.5t9 51z" />
+    <glyph glyph-name="file" unicode="&#xf15b;" 
+d="M1024 1024v472q22 -14 36 -28l408 -408q14 -14 28 -36h-472zM896 992q0 -40 28 -68t68 -28h544v-1056q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1600q0 40 28 68t68 28h800v-544z" />
+    <glyph glyph-name="file_text" unicode="&#xf15c;" 
+d="M1468 1060q14 -14 28 -36h-472v472q22 -14 36 -28zM992 896h544v-1056q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1600q0 40 28 68t68 28h800v-544q0 -40 28 -68t68 -28zM1152 160v64q0 14 -9 23t-23 9h-704q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h704
+q14 0 23 9t9 23zM1152 416v64q0 14 -9 23t-23 9h-704q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h704q14 0 23 9t9 23zM1152 672v64q0 14 -9 23t-23 9h-704q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h704q14 0 23 9t9 23z" />
+    <glyph glyph-name="sort_by_alphabet" unicode="&#xf15d;" horiz-adv-x="1664" 
+d="M1191 1128h177l-72 218l-12 47q-2 16 -2 20h-4l-3 -20q0 -1 -3.5 -18t-7.5 -29zM736 96q0 -12 -10 -24l-319 -319q-10 -9 -23 -9q-12 0 -23 9l-320 320q-15 16 -7 35q8 20 30 20h192v1376q0 14 9 23t23 9h192q14 0 23 -9t9 -23v-1376h192q14 0 23 -9t9 -23zM1572 -23
+v-233h-584v90l369 529q12 18 21 27l11 9v3q-2 0 -6.5 -0.5t-7.5 -0.5q-12 -3 -30 -3h-232v-115h-120v229h567v-89l-369 -530q-6 -8 -21 -26l-11 -11v-2l14 2q9 2 30 2h248v119h121zM1661 874v-106h-288v106h75l-47 144h-243l-47 -144h75v-106h-287v106h70l230 662h162
+l230 -662h70z" />
+    <glyph glyph-name="_329" unicode="&#xf15e;" horiz-adv-x="1664" 
+d="M1191 104h177l-72 218l-12 47q-2 16 -2 20h-4l-3 -20q0 -1 -3.5 -18t-7.5 -29zM736 96q0 -12 -10 -24l-319 -319q-10 -9 -23 -9q-12 0 -23 9l-320 320q-15 16 -7 35q8 20 30 20h192v1376q0 14 9 23t23 9h192q14 0 23 -9t9 -23v-1376h192q14 0 23 -9t9 -23zM1661 -150
+v-106h-288v106h75l-47 144h-243l-47 -144h75v-106h-287v106h70l230 662h162l230 -662h70zM1572 1001v-233h-584v90l369 529q12 18 21 27l11 9v3q-2 0 -6.5 -0.5t-7.5 -0.5q-12 -3 -30 -3h-232v-115h-120v229h567v-89l-369 -530q-6 -8 -21 -26l-11 -10v-3l14 3q9 1 30 1h248
+v119h121z" />
+    <glyph glyph-name="sort_by_attributes" unicode="&#xf160;" horiz-adv-x="1792" 
+d="M736 96q0 -12 -10 -24l-319 -319q-10 -9 -23 -9q-12 0 -23 9l-320 320q-15 16 -7 35q8 20 30 20h192v1376q0 14 9 23t23 9h192q14 0 23 -9t9 -23v-1376h192q14 0 23 -9t9 -23zM1792 -32v-192q0 -14 -9 -23t-23 -9h-832q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h832
+q14 0 23 -9t9 -23zM1600 480v-192q0 -14 -9 -23t-23 -9h-640q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h640q14 0 23 -9t9 -23zM1408 992v-192q0 -14 -9 -23t-23 -9h-448q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h448q14 0 23 -9t9 -23zM1216 1504v-192q0 -14 -9 -23t-23 -9h-256
+q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h256q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="sort_by_attributes_alt" unicode="&#xf161;" horiz-adv-x="1792" 
+d="M1216 -32v-192q0 -14 -9 -23t-23 -9h-256q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h256q14 0 23 -9t9 -23zM736 96q0 -12 -10 -24l-319 -319q-10 -9 -23 -9q-12 0 -23 9l-320 320q-15 16 -7 35q8 20 30 20h192v1376q0 14 9 23t23 9h192q14 0 23 -9t9 -23v-1376h192
+q14 0 23 -9t9 -23zM1408 480v-192q0 -14 -9 -23t-23 -9h-448q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h448q14 0 23 -9t9 -23zM1600 992v-192q0 -14 -9 -23t-23 -9h-640q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h640q14 0 23 -9t9 -23zM1792 1504v-192q0 -14 -9 -23t-23 -9h-832
+q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h832q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="sort_by_order" unicode="&#xf162;" 
+d="M1346 223q0 63 -44 116t-103 53q-52 0 -83 -37t-31 -94t36.5 -95t104.5 -38q50 0 85 27t35 68zM736 96q0 -12 -10 -24l-319 -319q-10 -9 -23 -9q-12 0 -23 9l-320 320q-15 16 -7 35q8 20 30 20h192v1376q0 14 9 23t23 9h192q14 0 23 -9t9 -23v-1376h192q14 0 23 -9t9 -23
+zM1486 165q0 -62 -13 -121.5t-41 -114t-68 -95.5t-98.5 -65.5t-127.5 -24.5q-62 0 -108 16q-24 8 -42 15l39 113q15 -7 31 -11q37 -13 75 -13q84 0 134.5 58.5t66.5 145.5h-2q-21 -23 -61.5 -37t-84.5 -14q-106 0 -173 71.5t-67 172.5q0 105 72 178t181 73q123 0 205 -94.5
+t82 -252.5zM1456 882v-114h-469v114h167v432q0 7 0.5 19t0.5 17v16h-2l-7 -12q-8 -13 -26 -31l-62 -58l-82 86l192 185h123v-654h165z" />
+    <glyph glyph-name="sort_by_order_alt" unicode="&#xf163;" 
+d="M1346 1247q0 63 -44 116t-103 53q-52 0 -83 -37t-31 -94t36.5 -95t104.5 -38q50 0 85 27t35 68zM736 96q0 -12 -10 -24l-319 -319q-10 -9 -23 -9q-12 0 -23 9l-320 320q-15 16 -7 35q8 20 30 20h192v1376q0 14 9 23t23 9h192q14 0 23 -9t9 -23v-1376h192q14 0 23 -9
+t9 -23zM1456 -142v-114h-469v114h167v432q0 7 0.5 19t0.5 17v16h-2l-7 -12q-8 -13 -26 -31l-62 -58l-82 86l192 185h123v-654h165zM1486 1189q0 -62 -13 -121.5t-41 -114t-68 -95.5t-98.5 -65.5t-127.5 -24.5q-62 0 -108 16q-24 8 -42 15l39 113q15 -7 31 -11q37 -13 75 -13
+q84 0 134.5 58.5t66.5 145.5h-2q-21 -23 -61.5 -37t-84.5 -14q-106 0 -173 71.5t-67 172.5q0 105 72 178t181 73q123 0 205 -94.5t82 -252.5z" />
+    <glyph glyph-name="_334" unicode="&#xf164;" horiz-adv-x="1664" 
+d="M256 192q0 26 -19 45t-45 19q-27 0 -45.5 -19t-18.5 -45q0 -27 18.5 -45.5t45.5 -18.5q26 0 45 18.5t19 45.5zM416 704v-640q0 -26 -19 -45t-45 -19h-288q-26 0 -45 19t-19 45v640q0 26 19 45t45 19h288q26 0 45 -19t19 -45zM1600 704q0 -86 -55 -149q15 -44 15 -76
+q3 -76 -43 -137q17 -56 0 -117q-15 -57 -54 -94q9 -112 -49 -181q-64 -76 -197 -78h-36h-76h-17q-66 0 -144 15.5t-121.5 29t-120.5 39.5q-123 43 -158 44q-26 1 -45 19.5t-19 44.5v641q0 25 18 43.5t43 20.5q24 2 76 59t101 121q68 87 101 120q18 18 31 48t17.5 48.5
+t13.5 60.5q7 39 12.5 61t19.5 52t34 50q19 19 45 19q46 0 82.5 -10.5t60 -26t40 -40.5t24 -45t12 -50t5 -45t0.5 -39q0 -38 -9.5 -76t-19 -60t-27.5 -56q-3 -6 -10 -18t-11 -22t-8 -24h277q78 0 135 -57t57 -135z" />
+    <glyph glyph-name="_335" unicode="&#xf165;" horiz-adv-x="1664" 
+d="M256 960q0 -26 -19 -45t-45 -19q-27 0 -45.5 19t-18.5 45q0 27 18.5 45.5t45.5 18.5q26 0 45 -18.5t19 -45.5zM416 448v640q0 26 -19 45t-45 19h-288q-26 0 -45 -19t-19 -45v-640q0 -26 19 -45t45 -19h288q26 0 45 19t19 45zM1545 597q55 -61 55 -149q-1 -78 -57.5 -135
+t-134.5 -57h-277q4 -14 8 -24t11 -22t10 -18q18 -37 27 -57t19 -58.5t10 -76.5q0 -24 -0.5 -39t-5 -45t-12 -50t-24 -45t-40 -40.5t-60 -26t-82.5 -10.5q-26 0 -45 19q-20 20 -34 50t-19.5 52t-12.5 61q-9 42 -13.5 60.5t-17.5 48.5t-31 48q-33 33 -101 120q-49 64 -101 121
+t-76 59q-25 2 -43 20.5t-18 43.5v641q0 26 19 44.5t45 19.5q35 1 158 44q77 26 120.5 39.5t121.5 29t144 15.5h17h76h36q133 -2 197 -78q58 -69 49 -181q39 -37 54 -94q17 -61 0 -117q46 -61 43 -137q0 -32 -15 -76z" />
+    <glyph glyph-name="youtube_sign" unicode="&#xf166;" 
+d="M919 233v157q0 50 -29 50q-17 0 -33 -16v-224q16 -16 33 -16q29 0 29 49zM1103 355h66v34q0 51 -33 51t-33 -51v-34zM532 621v-70h-80v-423h-74v423h-78v70h232zM733 495v-367h-67v40q-39 -45 -76 -45q-33 0 -42 28q-6 17 -6 54v290h66v-270q0 -24 1 -26q1 -15 15 -15
+q20 0 42 31v280h67zM985 384v-146q0 -52 -7 -73q-12 -42 -53 -42q-35 0 -68 41v-36h-67v493h67v-161q32 40 68 40q41 0 53 -42q7 -21 7 -74zM1236 255v-9q0 -29 -2 -43q-3 -22 -15 -40q-27 -40 -80 -40q-52 0 -81 38q-21 27 -21 86v129q0 59 20 86q29 38 80 38t78 -38
+q21 -29 21 -86v-76h-133v-65q0 -51 34 -51q24 0 30 26q0 1 0.5 7t0.5 16.5v21.5h68zM785 1079v-156q0 -51 -32 -51t-32 51v156q0 52 32 52t32 -52zM1318 366q0 177 -19 260q-10 44 -43 73.5t-76 34.5q-136 15 -412 15q-275 0 -411 -15q-44 -5 -76.5 -34.5t-42.5 -73.5
+q-20 -87 -20 -260q0 -176 20 -260q10 -43 42.5 -73t75.5 -35q137 -15 412 -15t412 15q43 5 75.5 35t42.5 73q20 84 20 260zM563 1017l90 296h-75l-51 -195l-53 195h-78q7 -23 23 -69l24 -69q35 -103 46 -158v-201h74v201zM852 936v130q0 58 -21 87q-29 38 -78 38
+q-51 0 -78 -38q-21 -29 -21 -87v-130q0 -58 21 -87q27 -38 78 -38q49 0 78 38q21 27 21 87zM1033 816h67v370h-67v-283q-22 -31 -42 -31q-15 0 -16 16q-1 2 -1 26v272h-67v-293q0 -37 6 -55q11 -27 43 -27q36 0 77 45v-40zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5
+h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="youtube" unicode="&#xf167;" 
+d="M971 292v-211q0 -67 -39 -67q-23 0 -45 22v301q22 22 45 22q39 0 39 -67zM1309 291v-46h-90v46q0 68 45 68t45 -68zM343 509h107v94h-312v-94h105v-569h100v569zM631 -60h89v494h-89v-378q-30 -42 -57 -42q-18 0 -21 21q-1 3 -1 35v364h-89v-391q0 -49 8 -73
+q12 -37 58 -37q48 0 102 61v-54zM1060 88v197q0 73 -9 99q-17 56 -71 56q-50 0 -93 -54v217h-89v-663h89v48q45 -55 93 -55q54 0 71 55q9 27 9 100zM1398 98v13h-91q0 -51 -2 -61q-7 -36 -40 -36q-46 0 -46 69v87h179v103q0 79 -27 116q-39 51 -106 51q-68 0 -107 -51
+q-28 -37 -28 -116v-173q0 -79 29 -116q39 -51 108 -51q72 0 108 53q18 27 21 54q2 9 2 58zM790 1011v210q0 69 -43 69t-43 -69v-210q0 -70 43 -70t43 70zM1509 260q0 -234 -26 -350q-14 -59 -58 -99t-102 -46q-184 -21 -555 -21t-555 21q-58 6 -102.5 46t-57.5 99
+q-26 112 -26 350q0 234 26 350q14 59 58 99t103 47q183 20 554 20t555 -20q58 -7 102.5 -47t57.5 -99q26 -112 26 -350zM511 1536h102l-121 -399v-271h-100v271q-14 74 -61 212q-37 103 -65 187h106l71 -263zM881 1203v-175q0 -81 -28 -118q-38 -51 -106 -51q-67 0 -105 51
+q-28 38 -28 118v175q0 80 28 117q38 51 105 51q68 0 106 -51q28 -37 28 -117zM1216 1365v-499h-91v55q-53 -62 -103 -62q-46 0 -59 37q-8 24 -8 75v394h91v-367q0 -33 1 -35q3 -22 21 -22q27 0 57 43v381h91z" />
+    <glyph glyph-name="xing" unicode="&#xf168;" horiz-adv-x="1408" 
+d="M597 869q-10 -18 -257 -456q-27 -46 -65 -46h-239q-21 0 -31 17t0 36l253 448q1 0 0 1l-161 279q-12 22 -1 37q9 15 32 15h239q40 0 66 -45zM1403 1511q11 -16 0 -37l-528 -934v-1l336 -615q11 -20 1 -37q-10 -15 -32 -15h-239q-42 0 -66 45l-339 622q18 32 531 942
+q25 45 64 45h241q22 0 31 -15z" />
+    <glyph glyph-name="xing_sign" unicode="&#xf169;" 
+d="M685 771q0 1 -126 222q-21 34 -52 34h-184q-18 0 -26 -11q-7 -12 1 -29l125 -216v-1l-196 -346q-9 -14 0 -28q8 -13 24 -13h185q31 0 50 36zM1309 1268q-7 12 -24 12h-187q-30 0 -49 -35l-411 -729q1 -2 262 -481q20 -35 52 -35h184q18 0 25 12q8 13 -1 28l-260 476v1
+l409 723q8 16 0 28zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="youtube_play" unicode="&#xf16a;" horiz-adv-x="1792" 
+d="M711 408l484 250l-484 253v-503zM896 1270q168 0 324.5 -4.5t229.5 -9.5l73 -4q1 0 17 -1.5t23 -3t23.5 -4.5t28.5 -8t28 -13t31 -19.5t29 -26.5q6 -6 15.5 -18.5t29 -58.5t26.5 -101q8 -64 12.5 -136.5t5.5 -113.5v-40v-136q1 -145 -18 -290q-7 -55 -25 -99.5t-32 -61.5
+l-14 -17q-14 -15 -29 -26.5t-31 -19t-28 -12.5t-28.5 -8t-24 -4.5t-23 -3t-16.5 -1.5q-251 -19 -627 -19q-207 2 -359.5 6.5t-200.5 7.5l-49 4l-36 4q-36 5 -54.5 10t-51 21t-56.5 41q-6 6 -15.5 18.5t-29 58.5t-26.5 101q-8 64 -12.5 136.5t-5.5 113.5v40v136
+q-1 145 18 290q7 55 25 99.5t32 61.5l14 17q14 15 29 26.5t31 19.5t28 13t28.5 8t23.5 4.5t23 3t17 1.5q251 18 627 18z" />
+    <glyph glyph-name="dropbox" unicode="&#xf16b;" horiz-adv-x="1792" 
+d="M402 829l494 -305l-342 -285l-490 319zM1388 274v-108l-490 -293v-1l-1 1l-1 -1v1l-489 293v108l147 -96l342 284v2l1 -1l1 1v-2l343 -284zM554 1418l342 -285l-494 -304l-338 270zM1390 829l338 -271l-489 -319l-343 285zM1239 1418l489 -319l-338 -270l-494 304z" />
+    <glyph glyph-name="stackexchange" unicode="&#xf16c;" 
+d="M1289 -96h-1118v480h-160v-640h1438v640h-160v-480zM347 428l33 157l783 -165l-33 -156zM450 802l67 146l725 -339l-67 -145zM651 1158l102 123l614 -513l-102 -123zM1048 1536l477 -641l-128 -96l-477 641zM330 65v159h800v-159h-800z" />
+    <glyph glyph-name="instagram" unicode="&#xf16d;" 
+d="M1024 640q0 106 -75 181t-181 75t-181 -75t-75 -181t75 -181t181 -75t181 75t75 181zM1162 640q0 -164 -115 -279t-279 -115t-279 115t-115 279t115 279t279 115t279 -115t115 -279zM1270 1050q0 -38 -27 -65t-65 -27t-65 27t-27 65t27 65t65 27t65 -27t27 -65zM768 1270
+q-7 0 -76.5 0.5t-105.5 0t-96.5 -3t-103 -10t-71.5 -18.5q-50 -20 -88 -58t-58 -88q-11 -29 -18.5 -71.5t-10 -103t-3 -96.5t0 -105.5t0.5 -76.5t-0.5 -76.5t0 -105.5t3 -96.5t10 -103t18.5 -71.5q20 -50 58 -88t88 -58q29 -11 71.5 -18.5t103 -10t96.5 -3t105.5 0t76.5 0.5
+t76.5 -0.5t105.5 0t96.5 3t103 10t71.5 18.5q50 20 88 58t58 88q11 29 18.5 71.5t10 103t3 96.5t0 105.5t-0.5 76.5t0.5 76.5t0 105.5t-3 96.5t-10 103t-18.5 71.5q-20 50 -58 88t-88 58q-29 11 -71.5 18.5t-103 10t-96.5 3t-105.5 0t-76.5 -0.5zM1536 640q0 -229 -5 -317
+q-10 -208 -124 -322t-322 -124q-88 -5 -317 -5t-317 5q-208 10 -322 124t-124 322q-5 88 -5 317t5 317q10 208 124 322t322 124q88 5 317 5t317 -5q208 -10 322 -124t124 -322q5 -88 5 -317z" />
+    <glyph glyph-name="flickr" unicode="&#xf16e;" 
+d="M1248 1408q119 0 203.5 -84.5t84.5 -203.5v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960zM698 640q0 88 -62 150t-150 62t-150 -62t-62 -150t62 -150t150 -62t150 62t62 150zM1262 640q0 88 -62 150
+t-150 62t-150 -62t-62 -150t62 -150t150 -62t150 62t62 150z" />
+    <glyph glyph-name="adn" unicode="&#xf170;" 
+d="M768 914l201 -306h-402zM1133 384h94l-459 691l-459 -691h94l104 160h522zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="f171" unicode="&#xf171;" horiz-adv-x="1408" 
+d="M815 677q8 -63 -50.5 -101t-111.5 -6q-39 17 -53.5 58t-0.5 82t52 58q36 18 72.5 12t64 -35.5t27.5 -67.5zM926 698q-14 107 -113 164t-197 13q-63 -28 -100.5 -88.5t-34.5 -129.5q4 -91 77.5 -155t165.5 -56q91 8 152 84t50 168zM1165 1240q-20 27 -56 44.5t-58 22
+t-71 12.5q-291 47 -566 -2q-43 -7 -66 -12t-55 -22t-50 -43q30 -28 76 -45.5t73.5 -22t87.5 -11.5q228 -29 448 -1q63 8 89.5 12t72.5 21.5t75 46.5zM1222 205q-8 -26 -15.5 -76.5t-14 -84t-28.5 -70t-58 -56.5q-86 -48 -189.5 -71.5t-202 -22t-201.5 18.5q-46 8 -81.5 18
+t-76.5 27t-73 43.5t-52 61.5q-25 96 -57 292l6 16l18 9q223 -148 506.5 -148t507.5 148q21 -6 24 -23t-5 -45t-8 -37zM1403 1166q-26 -167 -111 -655q-5 -30 -27 -56t-43.5 -40t-54.5 -31q-252 -126 -610 -88q-248 27 -394 139q-15 12 -25.5 26.5t-17 35t-9 34t-6 39.5
+t-5.5 35q-9 50 -26.5 150t-28 161.5t-23.5 147.5t-22 158q3 26 17.5 48.5t31.5 37.5t45 30t46 22.5t48 18.5q125 46 313 64q379 37 676 -50q155 -46 215 -122q16 -20 16.5 -51t-5.5 -54z" />
+    <glyph glyph-name="bitbucket_sign" unicode="&#xf172;" 
+d="M848 666q0 43 -41 66t-77 1q-43 -20 -42.5 -72.5t43.5 -70.5q39 -23 81 4t36 72zM928 682q8 -66 -36 -121t-110 -61t-119 40t-56 113q-2 49 25.5 93t72.5 64q70 31 141.5 -10t81.5 -118zM1100 1073q-20 -21 -53.5 -34t-53 -16t-63.5 -8q-155 -20 -324 0q-44 6 -63 9.5
+t-52.5 16t-54.5 32.5q13 19 36 31t40 15.5t47 8.5q198 35 408 1q33 -5 51 -8.5t43 -16t39 -31.5zM1142 327q0 7 5.5 26.5t3 32t-17.5 16.5q-161 -106 -365 -106t-366 106l-12 -6l-5 -12q26 -154 41 -210q47 -81 204 -108q249 -46 428 53q34 19 49 51.5t22.5 85.5t12.5 71z
+M1272 1020q9 53 -8 75q-43 55 -155 88q-216 63 -487 36q-132 -12 -226 -46q-38 -15 -59.5 -25t-47 -34t-29.5 -54q8 -68 19 -138t29 -171t24 -137q1 -5 5 -31t7 -36t12 -27t22 -28q105 -80 284 -100q259 -28 440 63q24 13 39.5 23t31 29t19.5 40q48 267 80 473zM1536 1120
+v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="tumblr" unicode="&#xf173;" horiz-adv-x="1024" 
+d="M944 207l80 -237q-23 -35 -111 -66t-177 -32q-104 -2 -190.5 26t-142.5 74t-95 106t-55.5 120t-16.5 118v544h-168v215q72 26 129 69.5t91 90t58 102t34 99t15 88.5q1 5 4.5 8.5t7.5 3.5h244v-424h333v-252h-334v-518q0 -30 6.5 -56t22.5 -52.5t49.5 -41.5t81.5 -14
+q78 2 134 29z" />
+    <glyph glyph-name="tumblr_sign" unicode="&#xf174;" 
+d="M1136 75l-62 183q-44 -22 -103 -22q-36 -1 -62 10.5t-38.5 31.5t-17.5 40.5t-5 43.5v398h257v194h-256v326h-188q-8 0 -9 -10q-5 -44 -17.5 -87t-39 -95t-77 -95t-118.5 -68v-165h130v-418q0 -57 21.5 -115t65 -111t121 -85.5t176.5 -30.5q69 1 136.5 25t85.5 50z
+M1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="long_arrow_down" unicode="&#xf175;" horiz-adv-x="768" 
+d="M765 237q8 -19 -5 -35l-350 -384q-10 -10 -23 -10q-14 0 -24 10l-355 384q-13 16 -5 35q9 19 29 19h224v1248q0 14 9 23t23 9h192q14 0 23 -9t9 -23v-1248h224q21 0 29 -19z" />
+    <glyph glyph-name="long_arrow_up" unicode="&#xf176;" horiz-adv-x="768" 
+d="M765 1043q-9 -19 -29 -19h-224v-1248q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v1248h-224q-21 0 -29 19t5 35l350 384q10 10 23 10q14 0 24 -10l355 -384q13 -16 5 -35z" />
+    <glyph glyph-name="long_arrow_left" unicode="&#xf177;" horiz-adv-x="1792" 
+d="M1792 736v-192q0 -14 -9 -23t-23 -9h-1248v-224q0 -21 -19 -29t-35 5l-384 350q-10 10 -10 23q0 14 10 24l384 354q16 14 35 6q19 -9 19 -29v-224h1248q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="long_arrow_right" unicode="&#xf178;" horiz-adv-x="1792" 
+d="M1728 643q0 -14 -10 -24l-384 -354q-16 -14 -35 -6q-19 9 -19 29v224h-1248q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h1248v224q0 21 19 29t35 -5l384 -350q10 -10 10 -23z" />
+    <glyph glyph-name="apple" unicode="&#xf179;" horiz-adv-x="1408" 
+d="M1393 321q-39 -125 -123 -250q-129 -196 -257 -196q-49 0 -140 32q-86 32 -151 32q-61 0 -142 -33q-81 -34 -132 -34q-152 0 -301 259q-147 261 -147 503q0 228 113 374q113 144 284 144q72 0 177 -30q104 -30 138 -30q45 0 143 34q102 34 173 34q119 0 213 -65
+q52 -36 104 -100q-79 -67 -114 -118q-65 -94 -65 -207q0 -124 69 -223t158 -126zM1017 1494q0 -61 -29 -136q-30 -75 -93 -138q-54 -54 -108 -72q-37 -11 -104 -17q3 149 78 257q74 107 250 148q1 -3 2.5 -11t2.5 -11q0 -4 0.5 -10t0.5 -10z" />
+    <glyph glyph-name="windows" unicode="&#xf17a;" horiz-adv-x="1664" 
+d="M682 530v-651l-682 94v557h682zM682 1273v-659h-682v565zM1664 530v-786l-907 125v661h907zM1664 1408v-794h-907v669z" />
+    <glyph glyph-name="android" unicode="&#xf17b;" horiz-adv-x="1408" 
+d="M493 1053q16 0 27.5 11.5t11.5 27.5t-11.5 27.5t-27.5 11.5t-27 -11.5t-11 -27.5t11 -27.5t27 -11.5zM915 1053q16 0 27 11.5t11 27.5t-11 27.5t-27 11.5t-27.5 -11.5t-11.5 -27.5t11.5 -27.5t27.5 -11.5zM103 869q42 0 72 -30t30 -72v-430q0 -43 -29.5 -73t-72.5 -30
+t-73 30t-30 73v430q0 42 30 72t73 30zM1163 850v-666q0 -46 -32 -78t-77 -32h-75v-227q0 -43 -30 -73t-73 -30t-73 30t-30 73v227h-138v-227q0 -43 -30 -73t-73 -30q-42 0 -72 30t-30 73l-1 227h-74q-46 0 -78 32t-32 78v666h918zM931 1255q107 -55 171 -153.5t64 -215.5
+h-925q0 117 64 215.5t172 153.5l-71 131q-7 13 5 20q13 6 20 -6l72 -132q95 42 201 42t201 -42l72 132q7 12 20 6q12 -7 5 -20zM1408 767v-430q0 -43 -30 -73t-73 -30q-42 0 -72 30t-30 73v430q0 43 30 72.5t72 29.5q43 0 73 -29.5t30 -72.5z" />
+    <glyph glyph-name="linux" unicode="&#xf17c;" 
+d="M663 1125q-11 -1 -15.5 -10.5t-8.5 -9.5q-5 -1 -5 5q0 12 19 15h10zM750 1111q-4 -1 -11.5 6.5t-17.5 4.5q24 11 32 -2q3 -6 -3 -9zM399 684q-4 1 -6 -3t-4.5 -12.5t-5.5 -13.5t-10 -13q-10 -11 -1 -12q4 -1 12.5 7t12.5 18q1 3 2 7t2 6t1.5 4.5t0.5 4v3t-1 2.5t-3 2z
+M1254 325q0 18 -55 42q4 15 7.5 27.5t5 26t3 21.5t0.5 22.5t-1 19.5t-3.5 22t-4 20.5t-5 25t-5.5 26.5q-10 48 -47 103t-72 75q24 -20 57 -83q87 -162 54 -278q-11 -40 -50 -42q-31 -4 -38.5 18.5t-8 83.5t-11.5 107q-9 39 -19.5 69t-19.5 45.5t-15.5 24.5t-13 15t-7.5 7
+q-14 62 -31 103t-29.5 56t-23.5 33t-15 40q-4 21 6 53.5t4.5 49.5t-44.5 25q-15 3 -44.5 18t-35.5 16q-8 1 -11 26t8 51t36 27q37 3 51 -30t4 -58q-11 -19 -2 -26.5t30 -0.5q13 4 13 36v37q-5 30 -13.5 50t-21 30.5t-23.5 15t-27 7.5q-107 -8 -89 -134q0 -15 -1 -15
+q-9 9 -29.5 10.5t-33 -0.5t-15.5 5q1 57 -16 90t-45 34q-27 1 -41.5 -27.5t-16.5 -59.5q-1 -15 3.5 -37t13 -37.5t15.5 -13.5q10 3 16 14q4 9 -7 8q-7 0 -15.5 14.5t-9.5 33.5q-1 22 9 37t34 14q17 0 27 -21t9.5 -39t-1.5 -22q-22 -15 -31 -29q-8 -12 -27.5 -23.5
+t-20.5 -12.5q-13 -14 -15.5 -27t7.5 -18q14 -8 25 -19.5t16 -19t18.5 -13t35.5 -6.5q47 -2 102 15q2 1 23 7t34.5 10.5t29.5 13t21 17.5q9 14 20 8q5 -3 6.5 -8.5t-3 -12t-16.5 -9.5q-20 -6 -56.5 -21.5t-45.5 -19.5q-44 -19 -70 -23q-25 -5 -79 2q-10 2 -9 -2t17 -19
+q25 -23 67 -22q17 1 36 7t36 14t33.5 17.5t30 17t24.5 12t17.5 2.5t8.5 -11q0 -2 -1 -4.5t-4 -5t-6 -4.5t-8.5 -5t-9 -4.5t-10 -5t-9.5 -4.5q-28 -14 -67.5 -44t-66.5 -43t-49 -1q-21 11 -63 73q-22 31 -25 22q-1 -3 -1 -10q0 -25 -15 -56.5t-29.5 -55.5t-21 -58t11.5 -63
+q-23 -6 -62.5 -90t-47.5 -141q-2 -18 -1.5 -69t-5.5 -59q-8 -24 -29 -3q-32 31 -36 94q-2 28 4 56q4 19 -1 18q-2 -1 -4 -5q-36 -65 10 -166q5 -12 25 -28t24 -20q20 -23 104 -90.5t93 -76.5q16 -15 17.5 -38t-14 -43t-45.5 -23q8 -15 29 -44.5t28 -54t7 -70.5q46 24 7 92
+q-4 8 -10.5 16t-9.5 12t-2 6q3 5 13 9.5t20 -2.5q46 -52 166 -36q133 15 177 87q23 38 34 30q12 -6 10 -52q-1 -25 -23 -92q-9 -23 -6 -37.5t24 -15.5q3 19 14.5 77t13.5 90q2 21 -6.5 73.5t-7.5 97t23 70.5q15 18 51 18q1 37 34.5 53t72.5 10.5t60 -22.5zM626 1152
+q3 17 -2.5 30t-11.5 15q-9 2 -9 -7q2 -5 5 -6q10 0 7 -15q-3 -20 8 -20q3 0 3 3zM1045 955q-2 8 -6.5 11.5t-13 5t-14.5 5.5q-5 3 -9.5 8t-7 8t-5.5 6.5t-4 4t-4 -1.5q-14 -16 7 -43.5t39 -31.5q9 -1 14.5 8t3.5 20zM867 1168q0 11 -5 19.5t-11 12.5t-9 3q-6 0 -8 -2t0 -4
+t5 -3q14 -4 18 -31q0 -3 8 2q2 2 2 3zM921 1401q0 2 -2.5 5t-9 7t-9.5 6q-15 15 -24 15q-9 -1 -11.5 -7.5t-1 -13t-0.5 -12.5q-1 -4 -6 -10.5t-6 -9t3 -8.5q4 -3 8 0t11 9t15 9q1 1 9 1t15 2t9 7zM1486 60q20 -12 31 -24.5t12 -24t-2.5 -22.5t-15.5 -22t-23.5 -19.5
+t-30 -18.5t-31.5 -16.5t-32 -15.5t-27 -13q-38 -19 -85.5 -56t-75.5 -64q-17 -16 -68 -19.5t-89 14.5q-18 9 -29.5 23.5t-16.5 25.5t-22 19.5t-47 9.5q-44 1 -130 1q-19 0 -57 -1.5t-58 -2.5q-44 -1 -79.5 -15t-53.5 -30t-43.5 -28.5t-53.5 -11.5q-29 1 -111 31t-146 43
+q-19 4 -51 9.5t-50 9t-39.5 9.5t-33.5 14.5t-17 19.5q-10 23 7 66.5t18 54.5q1 16 -4 40t-10 42.5t-4.5 36.5t10.5 27q14 12 57 14t60 12q30 18 42 35t12 51q21 -73 -32 -106q-32 -20 -83 -15q-34 3 -43 -10q-13 -15 5 -57q2 -6 8 -18t8.5 -18t4.5 -17t1 -22q0 -15 -17 -49
+t-14 -48q3 -17 37 -26q20 -6 84.5 -18.5t99.5 -20.5q24 -6 74 -22t82.5 -23t55.5 -4q43 6 64.5 28t23 48t-7.5 58.5t-19 52t-20 36.5q-121 190 -169 242q-68 74 -113 40q-11 -9 -15 15q-3 16 -2 38q1 29 10 52t24 47t22 42q8 21 26.5 72t29.5 78t30 61t39 54
+q110 143 124 195q-12 112 -16 310q-2 90 24 151.5t106 104.5q39 21 104 21q53 1 106 -13.5t89 -41.5q57 -42 91.5 -121.5t29.5 -147.5q-5 -95 30 -214q34 -113 133 -218q55 -59 99.5 -163t59.5 -191q8 -49 5 -84.5t-12 -55.5t-20 -22q-10 -2 -23.5 -19t-27 -35.5
+t-40.5 -33.5t-61 -14q-18 1 -31.5 5t-22.5 13.5t-13.5 15.5t-11.5 20.5t-9 19.5q-22 37 -41 30t-28 -49t7 -97q20 -70 1 -195q-10 -65 18 -100.5t73 -33t85 35.5q59 49 89.5 66.5t103.5 42.5q53 18 77 36.5t18.5 34.5t-25 28.5t-51.5 23.5q-33 11 -49.5 48t-15 72.5
+t15.5 47.5q1 -31 8 -56.5t14.5 -40.5t20.5 -28.5t21 -19t21.5 -13t16.5 -9.5z" />
+    <glyph glyph-name="dribble" unicode="&#xf17d;" 
+d="M1024 36q-42 241 -140 498h-2l-2 -1q-16 -6 -43 -16.5t-101 -49t-137 -82t-131 -114.5t-103 -148l-15 11q184 -150 418 -150q132 0 256 52zM839 643q-21 49 -53 111q-311 -93 -673 -93q-1 -7 -1 -21q0 -124 44 -236.5t124 -201.5q50 89 123.5 166.5t142.5 124.5t130.5 81
+t99.5 48l37 13q4 1 13 3.5t13 4.5zM732 855q-120 213 -244 378q-138 -65 -234 -186t-128 -272q302 0 606 80zM1416 536q-210 60 -409 29q87 -239 128 -469q111 75 185 189.5t96 250.5zM611 1277q-1 0 -2 -1q1 1 2 1zM1201 1132q-185 164 -433 164q-76 0 -155 -19
+q131 -170 246 -382q69 26 130 60.5t96.5 61.5t65.5 57t37.5 40.5zM1424 647q-3 232 -149 410l-1 -1q-9 -12 -19 -24.5t-43.5 -44.5t-71 -60.5t-100 -65t-131.5 -64.5q25 -53 44 -95q2 -5 6.5 -17t7.5 -17q36 5 74.5 7t73.5 2t69 -1.5t64 -4t56.5 -5.5t48 -6.5t36.5 -6
+t25 -4.5zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="skype" unicode="&#xf17e;" 
+d="M1173 473q0 50 -19.5 91.5t-48.5 68.5t-73 49t-82.5 34t-87.5 23l-104 24q-30 7 -44 10.5t-35 11.5t-30 16t-16.5 21t-7.5 30q0 77 144 77q43 0 77 -12t54 -28.5t38 -33.5t40 -29t48 -12q47 0 75.5 32t28.5 77q0 55 -56 99.5t-142 67.5t-182 23q-68 0 -132 -15.5
+t-119.5 -47t-89 -87t-33.5 -128.5q0 -61 19 -106.5t56 -75.5t80 -48.5t103 -32.5l146 -36q90 -22 112 -36q32 -20 32 -60q0 -39 -40 -64.5t-105 -25.5q-51 0 -91.5 16t-65 38.5t-45.5 45t-46 38.5t-54 16q-50 0 -75.5 -30t-25.5 -75q0 -92 122 -157.5t291 -65.5
+q73 0 140 18.5t122.5 53.5t88.5 93.5t33 131.5zM1536 256q0 -159 -112.5 -271.5t-271.5 -112.5q-130 0 -234 80q-77 -16 -150 -16q-143 0 -273.5 55.5t-225 150t-150 225t-55.5 273.5q0 73 16 150q-80 104 -80 234q0 159 112.5 271.5t271.5 112.5q130 0 234 -80
+q77 16 150 16q143 0 273.5 -55.5t225 -150t150 -225t55.5 -273.5q0 -73 -16 -150q80 -104 80 -234z" />
+    <glyph glyph-name="foursquare" unicode="&#xf180;" horiz-adv-x="1280" 
+d="M1000 1102l37 194q5 23 -9 40t-35 17h-712q-23 0 -38.5 -17t-15.5 -37v-1101q0 -7 6 -1l291 352q23 26 38 33.5t48 7.5h239q22 0 37 14.5t18 29.5q24 130 37 191q4 21 -11.5 40t-36.5 19h-294q-29 0 -48 19t-19 48v42q0 29 19 47.5t48 18.5h346q18 0 35 13.5t20 29.5z
+M1227 1324q-15 -73 -53.5 -266.5t-69.5 -350t-35 -173.5q-6 -22 -9 -32.5t-14 -32.5t-24.5 -33t-38.5 -21t-58 -10h-271q-13 0 -22 -10q-8 -9 -426 -494q-22 -25 -58.5 -28.5t-48.5 5.5q-55 22 -55 98v1410q0 55 38 102.5t120 47.5h888q95 0 127 -53t10 -159zM1227 1324
+l-158 -790q4 17 35 173.5t69.5 350t53.5 266.5z" />
+    <glyph glyph-name="trello" unicode="&#xf181;" 
+d="M704 192v1024q0 14 -9 23t-23 9h-480q-14 0 -23 -9t-9 -23v-1024q0 -14 9 -23t23 -9h480q14 0 23 9t9 23zM1376 576v640q0 14 -9 23t-23 9h-480q-14 0 -23 -9t-9 -23v-640q0 -14 9 -23t23 -9h480q14 0 23 9t9 23zM1536 1344v-1408q0 -26 -19 -45t-45 -19h-1408
+q-26 0 -45 19t-19 45v1408q0 26 19 45t45 19h1408q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="female" unicode="&#xf182;" horiz-adv-x="1280" 
+d="M1280 480q0 -40 -28 -68t-68 -28q-51 0 -80 43l-227 341h-45v-132l247 -411q9 -15 9 -33q0 -26 -19 -45t-45 -19h-192v-272q0 -46 -33 -79t-79 -33h-160q-46 0 -79 33t-33 79v272h-192q-26 0 -45 19t-19 45q0 18 9 33l247 411v132h-45l-227 -341q-29 -43 -80 -43
+q-40 0 -68 28t-28 68q0 29 16 53l256 384q73 107 176 107h384q103 0 176 -107l256 -384q16 -24 16 -53zM864 1280q0 -93 -65.5 -158.5t-158.5 -65.5t-158.5 65.5t-65.5 158.5t65.5 158.5t158.5 65.5t158.5 -65.5t65.5 -158.5z" />
+    <glyph glyph-name="male" unicode="&#xf183;" horiz-adv-x="1024" 
+d="M1024 832v-416q0 -40 -28 -68t-68 -28t-68 28t-28 68v352h-64v-912q0 -46 -33 -79t-79 -33t-79 33t-33 79v464h-64v-464q0 -46 -33 -79t-79 -33t-79 33t-33 79v912h-64v-352q0 -40 -28 -68t-68 -28t-68 28t-28 68v416q0 80 56 136t136 56h640q80 0 136 -56t56 -136z
+M736 1280q0 -93 -65.5 -158.5t-158.5 -65.5t-158.5 65.5t-65.5 158.5t65.5 158.5t158.5 65.5t158.5 -65.5t65.5 -158.5z" />
+    <glyph glyph-name="gittip" unicode="&#xf184;" 
+d="M773 234l350 473q16 22 24.5 59t-6 85t-61.5 79q-40 26 -83 25.5t-73.5 -17.5t-54.5 -45q-36 -40 -96 -40q-59 0 -95 40q-24 28 -54.5 45t-73.5 17.5t-84 -25.5q-46 -31 -60.5 -79t-6 -85t24.5 -59zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103
+t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="sun" unicode="&#xf185;" horiz-adv-x="1792" 
+d="M1472 640q0 117 -45.5 223.5t-123 184t-184 123t-223.5 45.5t-223.5 -45.5t-184 -123t-123 -184t-45.5 -223.5t45.5 -223.5t123 -184t184 -123t223.5 -45.5t223.5 45.5t184 123t123 184t45.5 223.5zM1748 363q-4 -15 -20 -20l-292 -96v-306q0 -16 -13 -26q-15 -10 -29 -4
+l-292 94l-180 -248q-10 -13 -26 -13t-26 13l-180 248l-292 -94q-14 -6 -29 4q-13 10 -13 26v306l-292 96q-16 5 -20 20q-5 17 4 29l180 248l-180 248q-9 13 -4 29q4 15 20 20l292 96v306q0 16 13 26q15 10 29 4l292 -94l180 248q9 12 26 12t26 -12l180 -248l292 94
+q14 6 29 -4q13 -10 13 -26v-306l292 -96q16 -5 20 -20q5 -16 -4 -29l-180 -248l180 -248q9 -12 4 -29z" />
+    <glyph glyph-name="_366" unicode="&#xf186;" 
+d="M1262 233q-54 -9 -110 -9q-182 0 -337 90t-245 245t-90 337q0 192 104 357q-201 -60 -328.5 -229t-127.5 -384q0 -130 51 -248.5t136.5 -204t204 -136.5t248.5 -51q144 0 273.5 61.5t220.5 171.5zM1465 318q-94 -203 -283.5 -324.5t-413.5 -121.5q-156 0 -298 61
+t-245 164t-164 245t-61 298q0 153 57.5 292.5t156 241.5t235.5 164.5t290 68.5q44 2 61 -39q18 -41 -15 -72q-86 -78 -131.5 -181.5t-45.5 -218.5q0 -148 73 -273t198 -198t273 -73q118 0 228 51q41 18 72 -13q14 -14 17.5 -34t-4.5 -38z" />
+    <glyph glyph-name="archive" unicode="&#xf187;" horiz-adv-x="1792" 
+d="M1088 704q0 26 -19 45t-45 19h-256q-26 0 -45 -19t-19 -45t19 -45t45 -19h256q26 0 45 19t19 45zM1664 896v-960q0 -26 -19 -45t-45 -19h-1408q-26 0 -45 19t-19 45v960q0 26 19 45t45 19h1408q26 0 45 -19t19 -45zM1728 1344v-256q0 -26 -19 -45t-45 -19h-1536
+q-26 0 -45 19t-19 45v256q0 26 19 45t45 19h1536q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="bug" unicode="&#xf188;" horiz-adv-x="1664" 
+d="M1632 576q0 -26 -19 -45t-45 -19h-224q0 -171 -67 -290l208 -209q19 -19 19 -45t-19 -45q-18 -19 -45 -19t-45 19l-198 197q-5 -5 -15 -13t-42 -28.5t-65 -36.5t-82 -29t-97 -13v896h-128v-896q-51 0 -101.5 13.5t-87 33t-66 39t-43.5 32.5l-15 14l-183 -207
+q-20 -21 -48 -21q-24 0 -43 16q-19 18 -20.5 44.5t15.5 46.5l202 227q-58 114 -58 274h-224q-26 0 -45 19t-19 45t19 45t45 19h224v294l-173 173q-19 19 -19 45t19 45t45 19t45 -19l173 -173h844l173 173q19 19 45 19t45 -19t19 -45t-19 -45l-173 -173v-294h224q26 0 45 -19
+t19 -45zM1152 1152h-640q0 133 93.5 226.5t226.5 93.5t226.5 -93.5t93.5 -226.5z" />
+    <glyph glyph-name="vk" unicode="&#xf189;" horiz-adv-x="1920" 
+d="M1917 1016q23 -64 -150 -294q-24 -32 -65 -85q-40 -51 -55 -72t-30.5 -49.5t-12 -42t13 -34.5t32.5 -43t57 -53q4 -2 5 -4q141 -131 191 -221q3 -5 6.5 -12.5t7 -26.5t-0.5 -34t-25 -27.5t-59 -12.5l-256 -4q-24 -5 -56 5t-52 22l-20 12q-30 21 -70 64t-68.5 77.5t-61 58
+t-56.5 15.5q-3 -1 -8 -3.5t-17 -14.5t-21.5 -29.5t-17 -52t-6.5 -77.5q0 -15 -3.5 -27.5t-7.5 -18.5l-4 -5q-18 -19 -53 -22h-115q-71 -4 -146 16.5t-131.5 53t-103 66t-70.5 57.5l-25 24q-10 10 -27.5 30t-71.5 91t-106 151t-122.5 211t-130.5 272q-6 16 -6 27t3 16l4 6
+q15 19 57 19l274 2q12 -2 23 -6.5t16 -8.5l5 -3q16 -11 24 -32q20 -50 46 -103.5t41 -81.5l16 -29q29 -60 56 -104t48.5 -68.5t41.5 -38.5t34 -14t27 5q2 1 5 5t12 22t13.5 47t9.5 81t0 125q-2 40 -9 73t-14 46l-6 12q-25 34 -85 43q-13 2 5 24q16 19 38 30q53 26 239 24
+q82 -1 135 -13q20 -5 33.5 -13.5t20.5 -24t10.5 -32t3.5 -45.5t-1 -55t-2.5 -70.5t-1.5 -82.5q0 -11 -1 -42t-0.5 -48t3.5 -40.5t11.5 -39t22.5 -24.5q8 -2 17 -4t26 11t38 34.5t52 67t68 107.5q60 104 107 225q4 10 10 17.5t11 10.5l4 3l5 2.5t13 3t20 0.5l288 2
+q39 5 64 -2.5t31 -16.5z" />
+    <glyph glyph-name="weibo" unicode="&#xf18a;" horiz-adv-x="1792" 
+d="M675 252q21 34 11 69t-45 50q-34 14 -73 1t-60 -46q-22 -34 -13 -68.5t43 -50.5t74.5 -2.5t62.5 47.5zM769 373q8 13 3.5 26.5t-17.5 18.5q-14 5 -28.5 -0.5t-21.5 -18.5q-17 -31 13 -45q14 -5 29 0.5t22 18.5zM943 266q-45 -102 -158 -150t-224 -12
+q-107 34 -147.5 126.5t6.5 187.5q47 93 151.5 139t210.5 19q111 -29 158.5 -119.5t2.5 -190.5zM1255 426q-9 96 -89 170t-208.5 109t-274.5 21q-223 -23 -369.5 -141.5t-132.5 -264.5q9 -96 89 -170t208.5 -109t274.5 -21q223 23 369.5 141.5t132.5 264.5zM1563 422
+q0 -68 -37 -139.5t-109 -137t-168.5 -117.5t-226 -83t-270.5 -31t-275 33.5t-240.5 93t-171.5 151t-65 199.5q0 115 69.5 245t197.5 258q169 169 341.5 236t246.5 -7q65 -64 20 -209q-4 -14 -1 -20t10 -7t14.5 0.5t13.5 3.5l6 2q139 59 246 59t153 -61q45 -63 0 -178
+q-2 -13 -4.5 -20t4.5 -12.5t12 -7.5t17 -6q57 -18 103 -47t80 -81.5t34 -116.5zM1489 1046q42 -47 54.5 -108.5t-6.5 -117.5q-8 -23 -29.5 -34t-44.5 -4q-23 8 -34 29.5t-4 44.5q20 63 -24 111t-107 35q-24 -5 -45 8t-25 37q-5 24 8 44.5t37 25.5q60 13 119 -5.5t101 -65.5z
+M1670 1209q87 -96 112.5 -222.5t-13.5 -241.5q-9 -27 -34 -40t-52 -4t-40 34t-5 52q28 82 10 172t-80 158q-62 69 -148 95.5t-173 8.5q-28 -6 -52 9.5t-30 43.5t9.5 51.5t43.5 29.5q123 26 244 -11.5t208 -134.5z" />
+    <glyph glyph-name="renren" unicode="&#xf18b;" 
+d="M1133 -34q-171 -94 -368 -94q-196 0 -367 94q138 87 235.5 211t131.5 268q35 -144 132.5 -268t235.5 -211zM638 1394v-485q0 -252 -126.5 -459.5t-330.5 -306.5q-181 215 -181 495q0 187 83.5 349.5t229.5 269.5t325 137zM1536 638q0 -280 -181 -495
+q-204 99 -330.5 306.5t-126.5 459.5v485q179 -30 325 -137t229.5 -269.5t83.5 -349.5z" />
+    <glyph glyph-name="_372" unicode="&#xf18c;" horiz-adv-x="1408" 
+d="M1402 433q-32 -80 -76 -138t-91 -88.5t-99 -46.5t-101.5 -14.5t-96.5 8.5t-86.5 22t-69.5 27.5t-46 22.5l-17 10q-113 -228 -289.5 -359.5t-384.5 -132.5q-19 0 -32 13t-13 32t13 31.5t32 12.5q173 1 322.5 107.5t251.5 294.5q-36 -14 -72 -23t-83 -13t-91 2.5t-93 28.5
+t-92 59t-84.5 100t-74.5 146q114 47 214 57t167.5 -7.5t124.5 -56.5t88.5 -77t56.5 -82q53 131 79 291q-7 -1 -18 -2.5t-46.5 -2.5t-69.5 0.5t-81.5 10t-88.5 23t-84 42.5t-75 65t-54.5 94.5t-28.5 127.5q70 28 133.5 36.5t112.5 -1t92 -30t73.5 -50t56 -61t42 -63t27.5 -56
+t16 -39.5l4 -16q12 122 12 195q-8 6 -21.5 16t-49 44.5t-63.5 71.5t-54 93t-33 112.5t12 127t70 138.5q73 -25 127.5 -61.5t84.5 -76.5t48 -85t20.5 -89t-0.5 -85.5t-13 -76.5t-19 -62t-17 -42l-7 -15q1 -4 1 -50t-1 -72q3 7 10 18.5t30.5 43t50.5 58t71 55.5t91.5 44.5
+t112 14.5t132.5 -24q-2 -78 -21.5 -141.5t-50 -104.5t-69.5 -71.5t-81.5 -45.5t-84.5 -24t-80 -9.5t-67.5 1t-46.5 4.5l-17 3q-23 -147 -73 -283q6 7 18 18.5t49.5 41t77.5 52.5t99.5 42t117.5 20t129 -23.5t137 -77.5z" />
+    <glyph glyph-name="stack_exchange" unicode="&#xf18d;" horiz-adv-x="1280" 
+d="M1259 283v-66q0 -85 -57.5 -144.5t-138.5 -59.5h-57l-260 -269v269h-529q-81 0 -138.5 59.5t-57.5 144.5v66h1238zM1259 609v-255h-1238v255h1238zM1259 937v-255h-1238v255h1238zM1259 1077v-67h-1238v67q0 84 57.5 143.5t138.5 59.5h846q81 0 138.5 -59.5t57.5 -143.5z
+" />
+    <glyph glyph-name="_374" unicode="&#xf18e;" 
+d="M1152 640q0 -14 -9 -23l-320 -320q-9 -9 -23 -9q-13 0 -22.5 9.5t-9.5 22.5v192h-352q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h352v192q0 14 9 23t23 9q12 0 24 -10l319 -319q9 -9 9 -23zM1312 640q0 148 -73 273t-198 198t-273 73t-273 -73t-198 -198
+t-73 -273t73 -273t198 -198t273 -73t273 73t198 198t73 273zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="arrow_circle_alt_left" unicode="&#xf190;" 
+d="M1152 736v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-352v-192q0 -14 -9 -23t-23 -9q-12 0 -24 10l-319 319q-9 9 -9 23t9 23l320 320q9 9 23 9q13 0 22.5 -9.5t9.5 -22.5v-192h352q13 0 22.5 -9.5t9.5 -22.5zM1312 640q0 148 -73 273t-198 198t-273 73t-273 -73t-198 -198
+t-73 -273t73 -273t198 -198t273 -73t273 73t198 198t73 273zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="_376" unicode="&#xf191;" 
+d="M1024 960v-640q0 -26 -19 -45t-45 -19q-20 0 -37 12l-448 320q-27 19 -27 52t27 52l448 320q17 12 37 12q26 0 45 -19t19 -45zM1280 160v960q0 13 -9.5 22.5t-22.5 9.5h-960q-13 0 -22.5 -9.5t-9.5 -22.5v-960q0 -13 9.5 -22.5t22.5 -9.5h960q13 0 22.5 9.5t9.5 22.5z
+M1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="dot_circle_alt" unicode="&#xf192;" 
+d="M1024 640q0 -106 -75 -181t-181 -75t-181 75t-75 181t75 181t181 75t181 -75t75 -181zM768 1184q-148 0 -273 -73t-198 -198t-73 -273t73 -273t198 -198t273 -73t273 73t198 198t73 273t-73 273t-198 198t-273 73zM1536 640q0 -209 -103 -385.5t-279.5 -279.5
+t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="_378" unicode="&#xf193;" horiz-adv-x="1664" 
+d="M1023 349l102 -204q-58 -179 -210 -290t-339 -111q-156 0 -288.5 77.5t-210 210t-77.5 288.5q0 181 104.5 330t274.5 211l17 -131q-122 -54 -195 -165.5t-73 -244.5q0 -185 131.5 -316.5t316.5 -131.5q126 0 232.5 65t165 175.5t49.5 236.5zM1571 249l58 -114l-256 -128
+q-13 -7 -29 -7q-40 0 -57 35l-239 477h-472q-24 0 -42.5 16.5t-21.5 40.5l-96 779q-2 17 6 42q14 51 57 82.5t97 31.5q66 0 113 -47t47 -113q0 -69 -52 -117.5t-120 -41.5l37 -289h423v-128h-407l16 -128h455q40 0 57 -35l228 -455z" />
+    <glyph glyph-name="vimeo_square" unicode="&#xf194;" 
+d="M1292 898q10 216 -161 222q-231 8 -312 -261q44 19 82 19q85 0 74 -96q-4 -57 -74 -167t-105 -110q-43 0 -82 169q-13 54 -45 255q-30 189 -160 177q-59 -7 -164 -100l-81 -72l-81 -72l52 -67q76 52 87 52q57 0 107 -179q15 -55 45 -164.5t45 -164.5q68 -179 164 -179
+q157 0 383 294q220 283 226 444zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="_380" unicode="&#xf195;" horiz-adv-x="1152" 
+d="M1152 704q0 -191 -94.5 -353t-256.5 -256.5t-353 -94.5h-160q-14 0 -23 9t-9 23v611l-215 -66q-3 -1 -9 -1q-10 0 -19 6q-13 10 -13 26v128q0 23 23 31l233 71v93l-215 -66q-3 -1 -9 -1q-10 0 -19 6q-13 10 -13 26v128q0 23 23 31l233 71v250q0 14 9 23t23 9h160
+q14 0 23 -9t9 -23v-181l375 116q15 5 28 -5t13 -26v-128q0 -23 -23 -31l-393 -121v-93l375 116q15 5 28 -5t13 -26v-128q0 -23 -23 -31l-393 -121v-487q188 13 318 151t130 328q0 14 9 23t23 9h160q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="plus_square_o" unicode="&#xf196;" horiz-adv-x="1408" 
+d="M1152 736v-64q0 -14 -9 -23t-23 -9h-352v-352q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v352h-352q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h352v352q0 14 9 23t23 9h64q14 0 23 -9t9 -23v-352h352q14 0 23 -9t9 -23zM1280 288v832q0 66 -47 113t-113 47h-832
+q-66 0 -113 -47t-47 -113v-832q0 -66 47 -113t113 -47h832q66 0 113 47t47 113zM1408 1120v-832q0 -119 -84.5 -203.5t-203.5 -84.5h-832q-119 0 -203.5 84.5t-84.5 203.5v832q0 119 84.5 203.5t203.5 84.5h832q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="_382" unicode="&#xf197;" horiz-adv-x="2176" 
+d="M620 416q-110 -64 -268 -64h-128v64h-64q-13 0 -22.5 23.5t-9.5 56.5q0 24 7 49q-58 2 -96.5 10.5t-38.5 20.5t38.5 20.5t96.5 10.5q-7 25 -7 49q0 33 9.5 56.5t22.5 23.5h64v64h128q158 0 268 -64h1113q42 -7 106.5 -18t80.5 -14q89 -15 150 -40.5t83.5 -47.5t22.5 -40
+t-22.5 -40t-83.5 -47.5t-150 -40.5q-16 -3 -80.5 -14t-106.5 -18h-1113zM1739 668q53 -36 53 -92t-53 -92l81 -30q68 48 68 122t-68 122zM625 400h1015q-217 -38 -456 -80q-57 0 -113 -24t-83 -48l-28 -24l-288 -288q-26 -26 -70.5 -45t-89.5 -19h-96l-93 464h29
+q157 0 273 64zM352 816h-29l93 464h96q46 0 90 -19t70 -45l288 -288q4 -4 11 -10.5t30.5 -23t48.5 -29t61.5 -23t72.5 -10.5l456 -80h-1015q-116 64 -273 64z" />
+    <glyph glyph-name="_383" unicode="&#xf198;" horiz-adv-x="1664" 
+d="M1519 760q62 0 103.5 -40.5t41.5 -101.5q0 -97 -93 -130l-172 -59l56 -167q7 -21 7 -47q0 -59 -42 -102t-101 -43q-47 0 -85.5 27t-53.5 72l-55 165l-310 -106l55 -164q8 -24 8 -47q0 -59 -42 -102t-102 -43q-47 0 -85 27t-53 72l-55 163l-153 -53q-29 -9 -50 -9
+q-61 0 -101.5 40t-40.5 101q0 47 27.5 85t71.5 53l156 53l-105 313l-156 -54q-26 -8 -48 -8q-60 0 -101 40.5t-41 100.5q0 47 27.5 85t71.5 53l157 53l-53 159q-8 24 -8 47q0 60 42 102.5t102 42.5q47 0 85 -27t53 -72l54 -160l310 105l-54 160q-8 24 -8 47q0 59 42.5 102
+t101.5 43q47 0 85.5 -27.5t53.5 -71.5l53 -161l162 55q21 6 43 6q60 0 102.5 -39.5t42.5 -98.5q0 -45 -30 -81.5t-74 -51.5l-157 -54l105 -316l164 56q24 8 46 8zM725 498l310 105l-105 315l-310 -107z" />
+    <glyph glyph-name="_384" unicode="&#xf199;" 
+d="M1248 1408q119 0 203.5 -84.5t84.5 -203.5v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960zM1280 352v436q-31 -35 -64 -55q-34 -22 -132.5 -85t-151.5 -99q-98 -69 -164 -69v0v0q-66 0 -164 69
+q-47 32 -142 92.5t-142 92.5q-12 8 -33 27t-31 27v-436q0 -40 28 -68t68 -28h832q40 0 68 28t28 68zM1280 925q0 41 -27.5 70t-68.5 29h-832q-40 0 -68 -28t-28 -68q0 -37 30.5 -76.5t67.5 -64.5q47 -32 137.5 -89t129.5 -83q3 -2 17 -11.5t21 -14t21 -13t23.5 -13
+t21.5 -9.5t22.5 -7.5t20.5 -2.5t20.5 2.5t22.5 7.5t21.5 9.5t23.5 13t21 13t21 14t17 11.5l267 174q35 23 66.5 62.5t31.5 73.5z" />
+    <glyph glyph-name="_385" unicode="&#xf19a;" horiz-adv-x="1792" 
+d="M127 640q0 163 67 313l367 -1005q-196 95 -315 281t-119 411zM1415 679q0 -19 -2.5 -38.5t-10 -49.5t-11.5 -44t-17.5 -59t-17.5 -58l-76 -256l-278 826q46 3 88 8q19 2 26 18.5t-2.5 31t-28.5 13.5l-205 -10q-75 1 -202 10q-12 1 -20.5 -5t-11.5 -15t-1.5 -18.5t9 -16.5
+t19.5 -8l80 -8l120 -328l-168 -504l-280 832q46 3 88 8q19 2 26 18.5t-2.5 31t-28.5 13.5l-205 -10q-7 0 -23 0.5t-26 0.5q105 160 274.5 253.5t367.5 93.5q147 0 280.5 -53t238.5 -149h-10q-55 0 -92 -40.5t-37 -95.5q0 -12 2 -24t4 -21.5t8 -23t9 -21t12 -22.5t12.5 -21
+t14.5 -24t14 -23q63 -107 63 -212zM909 573l237 -647q1 -6 5 -11q-126 -44 -255 -44q-112 0 -217 32zM1570 1009q95 -174 95 -369q0 -209 -104 -385.5t-279 -278.5l235 678q59 169 59 276q0 42 -6 79zM896 1536q182 0 348 -71t286 -191t191 -286t71 -348t-71 -348t-191 -286
+t-286 -191t-348 -71t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71zM896 -215q173 0 331.5 68t273 182.5t182.5 273t68 331.5t-68 331.5t-182.5 273t-273 182.5t-331.5 68t-331.5 -68t-273 -182.5t-182.5 -273t-68 -331.5t68 -331.5t182.5 -273
+t273 -182.5t331.5 -68z" />
+    <glyph glyph-name="_386" unicode="&#xf19b;" horiz-adv-x="1792" 
+d="M1086 1536v-1536l-272 -128q-228 20 -414 102t-293 208.5t-107 272.5q0 140 100.5 263.5t275 205.5t391.5 108v-172q-217 -38 -356.5 -150t-139.5 -255q0 -152 154.5 -267t388.5 -145v1360zM1755 954l37 -390l-525 114l147 83q-119 70 -280 99v172q277 -33 481 -157z" />
+    <glyph glyph-name="_387" unicode="&#xf19c;" horiz-adv-x="2048" 
+d="M960 1536l960 -384v-128h-128q0 -26 -20.5 -45t-48.5 -19h-1526q-28 0 -48.5 19t-20.5 45h-128v128zM256 896h256v-768h128v768h256v-768h128v768h256v-768h128v768h256v-768h59q28 0 48.5 -19t20.5 -45v-64h-1664v64q0 26 20.5 45t48.5 19h59v768zM1851 -64
+q28 0 48.5 -19t20.5 -45v-128h-1920v128q0 26 20.5 45t48.5 19h1782z" />
+    <glyph glyph-name="_388" unicode="&#xf19d;" horiz-adv-x="2304" 
+d="M1774 700l18 -316q4 -69 -82 -128t-235 -93.5t-323 -34.5t-323 34.5t-235 93.5t-82 128l18 316l574 -181q22 -7 48 -7t48 7zM2304 1024q0 -23 -22 -31l-1120 -352q-4 -1 -10 -1t-10 1l-652 206q-43 -34 -71 -111.5t-34 -178.5q63 -36 63 -109q0 -69 -58 -107l58 -433
+q2 -14 -8 -25q-9 -11 -24 -11h-192q-15 0 -24 11q-10 11 -8 25l58 433q-58 38 -58 107q0 73 65 111q11 207 98 330l-333 104q-22 8 -22 31t22 31l1120 352q4 1 10 1t10 -1l1120 -352q22 -8 22 -31z" />
+    <glyph glyph-name="_389" unicode="&#xf19e;" 
+d="M859 579l13 -707q-62 11 -105 11q-41 0 -105 -11l13 707q-40 69 -168.5 295.5t-216.5 374.5t-181 287q58 -15 108 -15q44 0 111 15q63 -111 133.5 -229.5t167 -276.5t138.5 -227q37 61 109.5 177.5t117.5 190t105 176t107 189.5q54 -14 107 -14q56 0 114 14v0
+q-28 -39 -60 -88.5t-49.5 -78.5t-56.5 -96t-49 -84q-146 -248 -353 -610z" />
+    <glyph glyph-name="uniF1A0" unicode="&#xf1a0;" 
+d="M768 750h725q12 -67 12 -128q0 -217 -91 -387.5t-259.5 -266.5t-386.5 -96q-157 0 -299 60.5t-245 163.5t-163.5 245t-60.5 299t60.5 299t163.5 245t245 163.5t299 60.5q300 0 515 -201l-209 -201q-123 119 -306 119q-129 0 -238.5 -65t-173.5 -176.5t-64 -243.5
+t64 -243.5t173.5 -176.5t238.5 -65q87 0 160 24t120 60t82 82t51.5 87t22.5 78h-436v264z" />
+    <glyph glyph-name="f1a1" unicode="&#xf1a1;" horiz-adv-x="1792" 
+d="M1095 369q16 -16 0 -31q-62 -62 -199 -62t-199 62q-16 15 0 31q6 6 15 6t15 -6q48 -49 169 -49q120 0 169 49q6 6 15 6t15 -6zM788 550q0 -37 -26 -63t-63 -26t-63.5 26t-26.5 63q0 38 26.5 64t63.5 26t63 -26.5t26 -63.5zM1183 550q0 -37 -26.5 -63t-63.5 -26t-63 26
+t-26 63t26 63.5t63 26.5t63.5 -26t26.5 -64zM1434 670q0 49 -35 84t-85 35t-86 -36q-130 90 -311 96l63 283l200 -45q0 -37 26 -63t63 -26t63.5 26.5t26.5 63.5t-26.5 63.5t-63.5 26.5q-54 0 -80 -50l-221 49q-19 5 -25 -16l-69 -312q-180 -7 -309 -97q-35 37 -87 37
+q-50 0 -85 -35t-35 -84q0 -35 18.5 -64t49.5 -44q-6 -27 -6 -56q0 -142 140 -243t337 -101q198 0 338 101t140 243q0 32 -7 57q30 15 48 43.5t18 63.5zM1792 640q0 -182 -71 -348t-191 -286t-286 -191t-348 -71t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191
+t348 71t348 -71t286 -191t191 -286t71 -348z" />
+    <glyph glyph-name="_392" unicode="&#xf1a2;" 
+d="M939 407q13 -13 0 -26q-53 -53 -171 -53t-171 53q-13 13 0 26q5 6 13 6t13 -6q42 -42 145 -42t145 42q5 6 13 6t13 -6zM676 563q0 -31 -23 -54t-54 -23t-54 23t-23 54q0 32 22.5 54.5t54.5 22.5t54.5 -22.5t22.5 -54.5zM1014 563q0 -31 -23 -54t-54 -23t-54 23t-23 54
+q0 32 22.5 54.5t54.5 22.5t54.5 -22.5t22.5 -54.5zM1229 666q0 42 -30 72t-73 30q-42 0 -73 -31q-113 78 -267 82l54 243l171 -39q1 -32 23.5 -54t53.5 -22q32 0 54.5 22.5t22.5 54.5t-22.5 54.5t-54.5 22.5q-48 0 -69 -43l-189 42q-17 5 -21 -13l-60 -268q-154 -6 -265 -83
+q-30 32 -74 32q-43 0 -73 -30t-30 -72q0 -30 16 -55t42 -38q-5 -25 -5 -48q0 -122 120 -208.5t289 -86.5q170 0 290 86.5t120 208.5q0 25 -6 49q25 13 40.5 37.5t15.5 54.5zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960
+q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="_393" unicode="&#xf1a3;" 
+d="M866 697l90 27v62q0 79 -58 135t-138 56t-138 -55.5t-58 -134.5v-283q0 -20 -14 -33.5t-33 -13.5t-32.5 13.5t-13.5 33.5v120h-151v-122q0 -82 57.5 -139t139.5 -57q81 0 138.5 56.5t57.5 136.5v280q0 19 13.5 33t33.5 14q19 0 32.5 -14t13.5 -33v-54zM1199 502v122h-150
+v-126q0 -20 -13.5 -33.5t-33.5 -13.5q-19 0 -32.5 14t-13.5 33v123l-90 -26l-60 28v-123q0 -80 58 -137t139 -57t138.5 57t57.5 139zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103
+t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="f1a4" unicode="&#xf1a4;" horiz-adv-x="1920" 
+d="M1062 824v118q0 42 -30 72t-72 30t-72 -30t-30 -72v-612q0 -175 -126 -299t-303 -124q-178 0 -303.5 125.5t-125.5 303.5v266h328v-262q0 -43 30 -72.5t72 -29.5t72 29.5t30 72.5v620q0 171 126.5 292t301.5 121q176 0 302 -122t126 -294v-136l-195 -58zM1592 602h328
+v-266q0 -178 -125.5 -303.5t-303.5 -125.5q-177 0 -303 124.5t-126 300.5v268l131 -61l195 58v-270q0 -42 30 -71.5t72 -29.5t72 29.5t30 71.5v275z" />
+    <glyph glyph-name="_395" unicode="&#xf1a5;" 
+d="M1472 160v480h-704v704h-480q-93 0 -158.5 -65.5t-65.5 -158.5v-480h704v-704h480q93 0 158.5 65.5t65.5 158.5zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5
+t84.5 -203.5z" />
+    <glyph glyph-name="_396" unicode="&#xf1a6;" horiz-adv-x="2048" 
+d="M328 1254h204v-983h-532v697h328v286zM328 435v369h-123v-369h123zM614 968v-697h205v697h-205zM614 1254v-204h205v204h-205zM901 968h533v-942h-533v163h328v82h-328v697zM1229 435v369h-123v-369h123zM1516 968h532v-942h-532v163h327v82h-327v697zM1843 435v369h-123
+v-369h123z" />
+    <glyph glyph-name="_397" unicode="&#xf1a7;" 
+d="M1046 516q0 -64 -38 -109t-91 -45q-43 0 -70 15v277q28 17 70 17q53 0 91 -45.5t38 -109.5zM703 944q0 -64 -38 -109.5t-91 -45.5q-43 0 -70 15v277q28 17 70 17q53 0 91 -45t38 -109zM1265 513q0 134 -88 229t-213 95q-20 0 -39 -3q-23 -78 -78 -136q-87 -95 -211 -101
+v-636l211 41v206q51 -19 117 -19q125 0 213 95t88 229zM922 940q0 134 -88.5 229t-213.5 95q-74 0 -141 -36h-186v-840l211 41v206q55 -19 116 -19q125 0 213.5 95t88.5 229zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960
+q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="_398" unicode="&#xf1a8;" horiz-adv-x="2038" 
+d="M1222 607q75 3 143.5 -20.5t118 -58.5t101 -94.5t84 -108t75.5 -120.5q33 -56 78.5 -109t75.5 -80.5t99 -88.5q-48 -30 -108.5 -57.5t-138.5 -59t-114 -47.5q-44 37 -74 115t-43.5 164.5t-33 180.5t-42.5 168.5t-72.5 123t-122.5 48.5l-10 -2l-6 -4q4 -5 13 -14
+q6 -5 28 -23.5t25.5 -22t19 -18t18 -20.5t11.5 -21t10.5 -27.5t4.5 -31t4 -40.5l1 -33q1 -26 -2.5 -57.5t-7.5 -52t-12.5 -58.5t-11.5 -53q-35 1 -101 -9.5t-98 -10.5q-39 0 -72 10q-2 16 -2 47q0 74 3 96q2 13 31.5 41.5t57 59t26.5 51.5q-24 2 -43 -24
+q-36 -53 -111.5 -99.5t-136.5 -46.5q-25 0 -75.5 63t-106.5 139.5t-84 96.5q-6 4 -27 30q-482 -112 -513 -112q-16 0 -28 11t-12 27q0 15 8.5 26.5t22.5 14.5l486 106q-8 14 -8 25t5.5 17.5t16 11.5t20 7t23 4.5t18.5 4.5q4 1 15.5 7.5t17.5 6.5q15 0 28 -16t20 -33
+q163 37 172 37q17 0 29.5 -11t12.5 -28q0 -15 -8.5 -26t-23.5 -14l-182 -40l-1 -16q-1 -26 81.5 -117.5t104.5 -91.5q47 0 119 80t72 129q0 36 -23.5 53t-51 18.5t-51 11.5t-23.5 34q0 16 10 34l-68 19q43 44 43 117q0 26 -5 58q82 16 144 16q44 0 71.5 -1.5t48.5 -8.5
+t31 -13.5t20.5 -24.5t15.5 -33.5t17 -47.5t24 -60l50 25q-3 -40 -23 -60t-42.5 -21t-40 -6.5t-16.5 -20.5zM1282 842q-5 5 -13.5 15.5t-12 14.5t-10.5 11.5t-10 10.5l-8 8t-8.5 7.5t-8 5t-8.5 4.5q-7 3 -14.5 5t-20.5 2.5t-22 0.5h-32.5h-37.5q-126 0 -217 -43
+q16 30 36 46.5t54 29.5t65.5 36t46 36.5t50 55t43.5 50.5q12 -9 28 -31.5t32 -36.5t38 -13l12 1v-76l22 -1q247 95 371 190q28 21 50 39t42.5 37.5t33 31t29.5 34t24 31t24.5 37t23 38t27 47.5t29.5 53l7 9q-2 -53 -43 -139q-79 -165 -205 -264t-306 -142q-14 -3 -42 -7.5
+t-50 -9.5t-39 -14q3 -19 24.5 -46t21.5 -34q0 -11 -26 -30zM1061 -79q39 26 131.5 47.5t146.5 21.5q9 0 22.5 -15.5t28 -42.5t26 -50t24 -51t14.5 -33q-121 -45 -244 -45q-61 0 -125 11zM822 568l48 12l109 -177l-73 -48zM1323 51q3 -15 3 -16q0 -7 -17.5 -14.5t-46 -13
+t-54 -9.5t-53.5 -7.5t-32 -4.5l-7 43q21 2 60.5 8.5t72 10t60.5 3.5h14zM866 679l-96 -20l-6 17q10 1 32.5 7t34.5 6q19 0 35 -10zM1061 45h31l10 -83l-41 -12v95zM1950 1535v1v-1zM1950 1535l-1 -5l-2 -2l1 3zM1950 1535l1 1z" />
+    <glyph glyph-name="_399" unicode="&#xf1a9;" 
+d="M1167 -50q-5 19 -24 5q-30 -22 -87 -39t-131 -17q-129 0 -193 49q-5 4 -13 4q-11 0 -26 -12q-7 -6 -7.5 -16t7.5 -20q34 -32 87.5 -46t102.5 -12.5t99 4.5q41 4 84.5 20.5t65 30t28.5 20.5q12 12 7 29zM1128 65q-19 47 -39 61q-23 15 -76 15q-47 0 -71 -10
+q-29 -12 -78 -56q-26 -24 -12 -44q9 -8 17.5 -4.5t31.5 23.5q3 2 10.5 8.5t10.5 8.5t10 7t11.5 7t12.5 5t15 4.5t16.5 2.5t20.5 1q27 0 44.5 -7.5t23 -14.5t13.5 -22q10 -17 12.5 -20t12.5 1q23 12 14 34zM1483 346q0 22 -5 44.5t-16.5 45t-34 36.5t-52.5 14
+q-33 0 -97 -41.5t-129 -83.5t-101 -42q-27 -1 -63.5 19t-76 49t-83.5 58t-100 49t-111 19q-115 -1 -197 -78.5t-84 -178.5q-2 -112 74 -164q29 -20 62.5 -28.5t103.5 -8.5q57 0 132 32.5t134 71t120 70.5t93 31q26 -1 65 -31.5t71.5 -67t68 -67.5t55.5 -32q35 -3 58.5 14
+t55.5 63q28 41 42.5 101t14.5 106zM1536 506q0 -164 -62 -304.5t-166 -236t-242.5 -149.5t-290.5 -54t-293 57.5t-247.5 157t-170.5 241.5t-64 302q0 89 19.5 172.5t49 145.5t70.5 118.5t78.5 94t78.5 69.5t64.5 46.5t42.5 24.5q14 8 51 26.5t54.5 28.5t48 30t60.5 44
+q36 28 58 72.5t30 125.5q129 -155 186 -193q44 -29 130 -68t129 -66q21 -13 39 -25t60.5 -46.5t76 -70.5t75 -95t69 -122t47 -148.5t19.5 -177.5z" />
+    <glyph glyph-name="_400" unicode="&#xf1aa;" 
+d="M1070 463l-160 -160l-151 -152l-30 -30q-65 -64 -151.5 -87t-171.5 -2q-16 -70 -72 -115t-129 -45q-85 0 -145 60.5t-60 145.5q0 72 44.5 128t113.5 72q-22 86 1 173t88 152l12 12l151 -152l-11 -11q-37 -37 -37 -89t37 -90q37 -37 89 -37t89 37l30 30l151 152l161 160z
+M729 1145l12 -12l-152 -152l-12 12q-37 37 -89 37t-89 -37t-37 -89.5t37 -89.5l29 -29l152 -152l160 -160l-151 -152l-161 160l-151 152l-30 30q-68 67 -90 159.5t5 179.5q-70 15 -115 71t-45 129q0 85 60 145.5t145 60.5q76 0 133.5 -49t69.5 -123q84 20 169.5 -3.5
+t149.5 -87.5zM1536 78q0 -85 -60 -145.5t-145 -60.5q-74 0 -131 47t-71 118q-86 -28 -179.5 -6t-161.5 90l-11 12l151 152l12 -12q37 -37 89 -37t89 37t37 89t-37 89l-30 30l-152 152l-160 160l152 152l160 -160l152 -152l29 -30q64 -64 87.5 -150.5t2.5 -171.5
+q76 -11 126.5 -68.5t50.5 -134.5zM1534 1202q0 -77 -51 -135t-127 -69q26 -85 3 -176.5t-90 -158.5l-12 -12l-151 152l12 12q37 37 37 89t-37 89t-89 37t-89 -37l-30 -30l-152 -152l-160 -160l-152 152l161 160l152 152l29 30q67 67 159 89.5t178 -3.5q11 75 68.5 126
+t135.5 51q85 0 145 -60.5t60 -145.5z" />
+    <glyph glyph-name="f1ab" unicode="&#xf1ab;" 
+d="M654 458q-1 -3 -12.5 0.5t-31.5 11.5l-20 9q-44 20 -87 49q-7 5 -41 31.5t-38 28.5q-67 -103 -134 -181q-81 -95 -105 -110q-4 -2 -19.5 -4t-18.5 0q6 4 82 92q21 24 85.5 115t78.5 118q17 30 51 98.5t36 77.5q-8 1 -110 -33q-8 -2 -27.5 -7.5t-34.5 -9.5t-17 -5
+q-2 -2 -2 -10.5t-1 -9.5q-5 -10 -31 -15q-23 -7 -47 0q-18 4 -28 21q-4 6 -5 23q6 2 24.5 5t29.5 6q58 16 105 32q100 35 102 35q10 2 43 19.5t44 21.5q9 3 21.5 8t14.5 5.5t6 -0.5q2 -12 -1 -33q0 -2 -12.5 -27t-26.5 -53.5t-17 -33.5q-25 -50 -77 -131l64 -28
+q12 -6 74.5 -32t67.5 -28q4 -1 10.5 -25.5t4.5 -30.5zM449 944q3 -15 -4 -28q-12 -23 -50 -38q-30 -12 -60 -12q-26 3 -49 26q-14 15 -18 41l1 3q3 -3 19.5 -5t26.5 0t58 16q36 12 55 14q17 0 21 -17zM1147 815l63 -227l-139 42zM39 15l694 232v1032l-694 -233v-1031z
+M1280 332l102 -31l-181 657l-100 31l-216 -536l102 -31l45 110l211 -65zM777 1294l573 -184v380zM1088 -29l158 -13l-54 -160l-40 66q-130 -83 -276 -108q-58 -12 -91 -12h-84q-79 0 -199.5 39t-183.5 85q-8 7 -8 16q0 8 5 13.5t13 5.5q4 0 18 -7.5t30.5 -16.5t20.5 -11
+q73 -37 159.5 -61.5t157.5 -24.5q95 0 167 14.5t157 50.5q15 7 30.5 15.5t34 19t28.5 16.5zM1536 1050v-1079l-774 246q-14 -6 -375 -127.5t-368 -121.5q-13 0 -18 13q0 1 -1 3v1078q3 9 4 10q5 6 20 11q107 36 149 50v384l558 -198q2 0 160.5 55t316 108.5t161.5 53.5
+q20 0 20 -21v-418z" />
+    <glyph glyph-name="_402" unicode="&#xf1ac;" horiz-adv-x="1792" 
+d="M288 1152q66 0 113 -47t47 -113v-1088q0 -66 -47 -113t-113 -47h-128q-66 0 -113 47t-47 113v1088q0 66 47 113t113 47h128zM1664 989q58 -34 93 -93t35 -128v-768q0 -106 -75 -181t-181 -75h-864q-66 0 -113 47t-47 113v1536q0 40 28 68t68 28h672q40 0 88 -20t76 -48
+l152 -152q28 -28 48 -76t20 -88v-163zM928 0v128q0 14 -9 23t-23 9h-128q-14 0 -23 -9t-9 -23v-128q0 -14 9 -23t23 -9h128q14 0 23 9t9 23zM928 256v128q0 14 -9 23t-23 9h-128q-14 0 -23 -9t-9 -23v-128q0 -14 9 -23t23 -9h128q14 0 23 9t9 23zM928 512v128q0 14 -9 23
+t-23 9h-128q-14 0 -23 -9t-9 -23v-128q0 -14 9 -23t23 -9h128q14 0 23 9t9 23zM1184 0v128q0 14 -9 23t-23 9h-128q-14 0 -23 -9t-9 -23v-128q0 -14 9 -23t23 -9h128q14 0 23 9t9 23zM1184 256v128q0 14 -9 23t-23 9h-128q-14 0 -23 -9t-9 -23v-128q0 -14 9 -23t23 -9h128
+q14 0 23 9t9 23zM1184 512v128q0 14 -9 23t-23 9h-128q-14 0 -23 -9t-9 -23v-128q0 -14 9 -23t23 -9h128q14 0 23 9t9 23zM1440 0v128q0 14 -9 23t-23 9h-128q-14 0 -23 -9t-9 -23v-128q0 -14 9 -23t23 -9h128q14 0 23 9t9 23zM1440 256v128q0 14 -9 23t-23 9h-128
+q-14 0 -23 -9t-9 -23v-128q0 -14 9 -23t23 -9h128q14 0 23 9t9 23zM1440 512v128q0 14 -9 23t-23 9h-128q-14 0 -23 -9t-9 -23v-128q0 -14 9 -23t23 -9h128q14 0 23 9t9 23zM1536 896v256h-160q-40 0 -68 28t-28 68v160h-640v-512h896z" />
+    <glyph glyph-name="_403" unicode="&#xf1ad;" 
+d="M1344 1536q26 0 45 -19t19 -45v-1664q0 -26 -19 -45t-45 -19h-1280q-26 0 -45 19t-19 45v1664q0 26 19 45t45 19h1280zM512 1248v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23zM512 992v-64q0 -14 9 -23t23 -9h64q14 0 23 9
+t9 23v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23zM512 736v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23zM512 480v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23zM384 160v64
+q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM384 416v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM384 672v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h64
+q14 0 23 9t9 23zM384 928v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM384 1184v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM896 -96v192q0 14 -9 23t-23 9h-320q-14 0 -23 -9
+t-9 -23v-192q0 -14 9 -23t23 -9h320q14 0 23 9t9 23zM896 416v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM896 672v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM896 928v64
+q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM896 1184v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM1152 160v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h64
+q14 0 23 9t9 23zM1152 416v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM1152 672v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM1152 928v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9
+t-9 -23v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM1152 1184v64q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h64q14 0 23 9t9 23z" />
+    <glyph glyph-name="_404" unicode="&#xf1ae;" horiz-adv-x="1280" 
+d="M1188 988l-292 -292v-824q0 -46 -33 -79t-79 -33t-79 33t-33 79v384h-64v-384q0 -46 -33 -79t-79 -33t-79 33t-33 79v824l-292 292q-28 28 -28 68t28 68q29 28 68.5 28t67.5 -28l228 -228h368l228 228q28 28 68 28t68 -28q28 -29 28 -68.5t-28 -67.5zM864 1152
+q0 -93 -65.5 -158.5t-158.5 -65.5t-158.5 65.5t-65.5 158.5t65.5 158.5t158.5 65.5t158.5 -65.5t65.5 -158.5z" />
+    <glyph glyph-name="uniF1B1" unicode="&#xf1b0;" horiz-adv-x="1664" 
+d="M780 1064q0 -60 -19 -113.5t-63 -92.5t-105 -39q-76 0 -138 57.5t-92 135.5t-30 151q0 60 19 113.5t63 92.5t105 39q77 0 138.5 -57.5t91.5 -135t30 -151.5zM438 581q0 -80 -42 -139t-119 -59q-76 0 -141.5 55.5t-100.5 133.5t-35 152q0 80 42 139.5t119 59.5
+q76 0 141.5 -55.5t100.5 -134t35 -152.5zM832 608q118 0 255 -97.5t229 -237t92 -254.5q0 -46 -17 -76.5t-48.5 -45t-64.5 -20t-76 -5.5q-68 0 -187.5 45t-182.5 45q-66 0 -192.5 -44.5t-200.5 -44.5q-183 0 -183 146q0 86 56 191.5t139.5 192.5t187.5 146t193 59zM1071 819
+q-61 0 -105 39t-63 92.5t-19 113.5q0 74 30 151.5t91.5 135t138.5 57.5q61 0 105 -39t63 -92.5t19 -113.5q0 -73 -30 -151t-92 -135.5t-138 -57.5zM1503 923q77 0 119 -59.5t42 -139.5q0 -74 -35 -152t-100.5 -133.5t-141.5 -55.5q-77 0 -119 59t-42 139q0 74 35 152.5
+t100.5 134t141.5 55.5z" />
+    <glyph glyph-name="_406" unicode="&#xf1b1;" horiz-adv-x="768" 
+d="M704 1008q0 -145 -57 -243.5t-152 -135.5l45 -821q2 -26 -16 -45t-44 -19h-192q-26 0 -44 19t-16 45l45 821q-95 37 -152 135.5t-57 243.5q0 128 42.5 249.5t117.5 200t160 78.5t160 -78.5t117.5 -200t42.5 -249.5z" />
+    <glyph glyph-name="_407" unicode="&#xf1b2;" horiz-adv-x="1792" 
+d="M896 -93l640 349v636l-640 -233v-752zM832 772l698 254l-698 254l-698 -254zM1664 1024v-768q0 -35 -18 -65t-49 -47l-704 -384q-28 -16 -61 -16t-61 16l-704 384q-31 17 -49 47t-18 65v768q0 40 23 73t61 47l704 256q22 8 44 8t44 -8l704 -256q38 -14 61 -47t23 -73z
+" />
+    <glyph glyph-name="_408" unicode="&#xf1b3;" horiz-adv-x="2304" 
+d="M640 -96l384 192v314l-384 -164v-342zM576 358l404 173l-404 173l-404 -173zM1664 -96l384 192v314l-384 -164v-342zM1600 358l404 173l-404 173l-404 -173zM1152 651l384 165v266l-384 -164v-267zM1088 1030l441 189l-441 189l-441 -189zM2176 512v-416q0 -36 -19 -67
+t-52 -47l-448 -224q-25 -14 -57 -14t-57 14l-448 224q-4 2 -7 4q-2 -2 -7 -4l-448 -224q-25 -14 -57 -14t-57 14l-448 224q-33 16 -52 47t-19 67v416q0 38 21.5 70t56.5 48l434 186v400q0 38 21.5 70t56.5 48l448 192q23 10 50 10t50 -10l448 -192q35 -16 56.5 -48t21.5 -70
+v-400l434 -186q36 -16 57 -48t21 -70z" />
+    <glyph glyph-name="_409" unicode="&#xf1b4;" horiz-adv-x="2048" 
+d="M1848 1197h-511v-124h511v124zM1596 771q-90 0 -146 -52.5t-62 -142.5h408q-18 195 -200 195zM1612 186q63 0 122 32t76 87h221q-100 -307 -427 -307q-214 0 -340.5 132t-126.5 347q0 208 130.5 345.5t336.5 137.5q138 0 240.5 -68t153 -179t50.5 -248q0 -17 -2 -47h-658
+q0 -111 57.5 -171.5t166.5 -60.5zM277 236h296q205 0 205 167q0 180 -199 180h-302v-347zM277 773h281q78 0 123.5 36.5t45.5 113.5q0 144 -190 144h-260v-294zM0 1282h594q87 0 155 -14t126.5 -47.5t90 -96.5t31.5 -154q0 -181 -172 -263q114 -32 172 -115t58 -204
+q0 -75 -24.5 -136.5t-66 -103.5t-98.5 -71t-121 -42t-134 -13h-611v1260z" />
+    <glyph glyph-name="_410" unicode="&#xf1b5;" 
+d="M1248 1408q119 0 203.5 -84.5t84.5 -203.5v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960zM499 1041h-371v-787h382q117 0 197 57.5t80 170.5q0 158 -143 200q107 52 107 164q0 57 -19.5 96.5
+t-56.5 60.5t-79 29.5t-97 8.5zM477 723h-176v184h163q119 0 119 -90q0 -94 -106 -94zM486 388h-185v217h189q124 0 124 -113q0 -104 -128 -104zM1136 356q-68 0 -104 38t-36 107h411q1 10 1 30q0 132 -74.5 220.5t-203.5 88.5q-128 0 -210 -86t-82 -216q0 -135 79 -217
+t213 -82q205 0 267 191h-138q-11 -34 -47.5 -54t-75.5 -20zM1126 722q113 0 124 -122h-254q4 56 39 89t91 33zM964 988h319v-77h-319v77z" />
+    <glyph glyph-name="_411" unicode="&#xf1b6;" horiz-adv-x="1792" 
+d="M1582 954q0 -101 -71.5 -172.5t-172.5 -71.5t-172.5 71.5t-71.5 172.5t71.5 172.5t172.5 71.5t172.5 -71.5t71.5 -172.5zM812 212q0 104 -73 177t-177 73q-27 0 -54 -6l104 -42q77 -31 109.5 -106.5t1.5 -151.5q-31 -77 -107 -109t-152 -1q-21 8 -62 24.5t-61 24.5
+q32 -60 91 -96.5t130 -36.5q104 0 177 73t73 177zM1642 953q0 126 -89.5 215.5t-215.5 89.5q-127 0 -216.5 -89.5t-89.5 -215.5q0 -127 89.5 -216t216.5 -89q126 0 215.5 89t89.5 216zM1792 953q0 -189 -133.5 -322t-321.5 -133l-437 -319q-12 -129 -109 -218t-229 -89
+q-121 0 -214 76t-118 192l-230 92v429l389 -157q79 48 173 48q13 0 35 -2l284 407q2 187 135.5 319t320.5 132q188 0 321.5 -133.5t133.5 -321.5z" />
+    <glyph glyph-name="_412" unicode="&#xf1b7;" 
+d="M1242 889q0 80 -57 136.5t-137 56.5t-136.5 -57t-56.5 -136q0 -80 56.5 -136.5t136.5 -56.5t137 56.5t57 136.5zM632 301q0 -83 -58 -140.5t-140 -57.5q-56 0 -103 29t-72 77q52 -20 98 -40q60 -24 120 1.5t85 86.5q24 60 -1.5 120t-86.5 84l-82 33q22 5 42 5
+q82 0 140 -57.5t58 -140.5zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v153l172 -69q20 -92 93.5 -152t168.5 -60q104 0 181 70t87 173l345 252q150 0 255.5 105.5t105.5 254.5q0 150 -105.5 255.5t-255.5 105.5
+q-148 0 -253 -104.5t-107 -252.5l-225 -322q-9 1 -28 1q-75 0 -137 -37l-297 119v468q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5zM1289 887q0 -100 -71 -170.5t-171 -70.5t-170.5 70.5t-70.5 170.5t70.5 171t170.5 71q101 0 171.5 -70.5t70.5 -171.5z
+" />
+    <glyph glyph-name="_413" unicode="&#xf1b8;" horiz-adv-x="1792" 
+d="M836 367l-15 -368l-2 -22l-420 29q-36 3 -67 31.5t-47 65.5q-11 27 -14.5 55t4 65t12 55t21.5 64t19 53q78 -12 509 -28zM449 953l180 -379l-147 92q-63 -72 -111.5 -144.5t-72.5 -125t-39.5 -94.5t-18.5 -63l-4 -21l-190 357q-17 26 -18 56t6 47l8 18q35 63 114 188
+l-140 86zM1680 436l-188 -359q-12 -29 -36.5 -46.5t-43.5 -20.5l-18 -4q-71 -7 -219 -12l8 -164l-230 367l211 362l7 -173q170 -16 283 -5t170 33zM895 1360q-47 -63 -265 -435l-317 187l-19 12l225 356q20 31 60 45t80 10q24 -2 48.5 -12t42 -21t41.5 -33t36 -34.5
+t36 -39.5t32 -35zM1550 1053l212 -363q18 -37 12.5 -76t-27.5 -74q-13 -20 -33 -37t-38 -28t-48.5 -22t-47 -16t-51.5 -14t-46 -12q-34 72 -265 436l313 195zM1407 1279l142 83l-220 -373l-419 20l151 86q-34 89 -75 166t-75.5 123.5t-64.5 80t-47 46.5l-17 13l405 -1
+q31 3 58 -10.5t39 -28.5l11 -15q39 -61 112 -190z" />
+    <glyph glyph-name="_414" unicode="&#xf1b9;" horiz-adv-x="2048" 
+d="M480 448q0 66 -47 113t-113 47t-113 -47t-47 -113t47 -113t113 -47t113 47t47 113zM516 768h1016l-89 357q-2 8 -14 17.5t-21 9.5h-768q-9 0 -21 -9.5t-14 -17.5zM1888 448q0 66 -47 113t-113 47t-113 -47t-47 -113t47 -113t113 -47t113 47t47 113zM2048 544v-384
+q0 -14 -9 -23t-23 -9h-96v-128q0 -80 -56 -136t-136 -56t-136 56t-56 136v128h-1024v-128q0 -80 -56 -136t-136 -56t-136 56t-56 136v128h-96q-14 0 -23 9t-9 23v384q0 93 65.5 158.5t158.5 65.5h28l105 419q23 94 104 157.5t179 63.5h768q98 0 179 -63.5t104 -157.5
+l105 -419h28q93 0 158.5 -65.5t65.5 -158.5z" />
+    <glyph glyph-name="_415" unicode="&#xf1ba;" horiz-adv-x="2048" 
+d="M1824 640q93 0 158.5 -65.5t65.5 -158.5v-384q0 -14 -9 -23t-23 -9h-96v-64q0 -80 -56 -136t-136 -56t-136 56t-56 136v64h-1024v-64q0 -80 -56 -136t-136 -56t-136 56t-56 136v64h-96q-14 0 -23 9t-9 23v384q0 93 65.5 158.5t158.5 65.5h28l105 419q23 94 104 157.5
+t179 63.5h128v224q0 14 9 23t23 9h448q14 0 23 -9t9 -23v-224h128q98 0 179 -63.5t104 -157.5l105 -419h28zM320 160q66 0 113 47t47 113t-47 113t-113 47t-113 -47t-47 -113t47 -113t113 -47zM516 640h1016l-89 357q-2 8 -14 17.5t-21 9.5h-768q-9 0 -21 -9.5t-14 -17.5z
+M1728 160q66 0 113 47t47 113t-47 113t-113 47t-113 -47t-47 -113t47 -113t113 -47z" />
+    <glyph glyph-name="_416" unicode="&#xf1bb;" 
+d="M1504 64q0 -26 -19 -45t-45 -19h-462q1 -17 6 -87.5t5 -108.5q0 -25 -18 -42.5t-43 -17.5h-320q-25 0 -43 17.5t-18 42.5q0 38 5 108.5t6 87.5h-462q-26 0 -45 19t-19 45t19 45l402 403h-229q-26 0 -45 19t-19 45t19 45l402 403h-197q-26 0 -45 19t-19 45t19 45l384 384
+q19 19 45 19t45 -19l384 -384q19 -19 19 -45t-19 -45t-45 -19h-197l402 -403q19 -19 19 -45t-19 -45t-45 -19h-229l402 -403q19 -19 19 -45z" />
+    <glyph glyph-name="_417" unicode="&#xf1bc;" 
+d="M1127 326q0 32 -30 51q-193 115 -447 115q-133 0 -287 -34q-42 -9 -42 -52q0 -20 13.5 -34.5t35.5 -14.5q5 0 37 8q132 27 243 27q226 0 397 -103q19 -11 33 -11q19 0 33 13.5t14 34.5zM1223 541q0 40 -35 61q-237 141 -548 141q-153 0 -303 -42q-48 -13 -48 -64
+q0 -25 17.5 -42.5t42.5 -17.5q7 0 37 8q122 33 251 33q279 0 488 -124q24 -13 38 -13q25 0 42.5 17.5t17.5 42.5zM1331 789q0 47 -40 70q-126 73 -293 110.5t-343 37.5q-204 0 -364 -47q-23 -7 -38.5 -25.5t-15.5 -48.5q0 -31 20.5 -52t51.5 -21q11 0 40 8q133 37 307 37
+q159 0 309.5 -34t253.5 -95q21 -12 40 -12q29 0 50.5 20.5t21.5 51.5zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="_418" unicode="&#xf1bd;" horiz-adv-x="1024" 
+d="M1024 1233l-303 -582l24 -31h279v-415h-507l-44 -30l-142 -273l-30 -30h-301v303l303 583l-24 30h-279v415h507l44 30l142 273l30 30h301v-303z" />
+    <glyph glyph-name="_419" unicode="&#xf1be;" horiz-adv-x="2304" 
+d="M784 164l16 241l-16 523q-1 10 -7.5 17t-16.5 7q-9 0 -16 -7t-7 -17l-14 -523l14 -241q1 -10 7.5 -16.5t15.5 -6.5q22 0 24 23zM1080 193l11 211l-12 586q0 16 -13 24q-8 5 -16 5t-16 -5q-13 -8 -13 -24l-1 -6l-10 -579q0 -1 11 -236v-1q0 -10 6 -17q9 -11 23 -11
+q11 0 20 9q9 7 9 20zM35 533l20 -128l-20 -126q-2 -9 -9 -9t-9 9l-17 126l17 128q2 9 9 9t9 -9zM121 612l26 -207l-26 -203q-2 -9 -10 -9q-9 0 -9 10l-23 202l23 207q0 9 9 9q8 0 10 -9zM401 159zM213 650l25 -245l-25 -237q0 -11 -11 -11q-10 0 -12 11l-21 237l21 245
+q2 12 12 12q11 0 11 -12zM307 657l23 -252l-23 -244q-2 -13 -14 -13q-13 0 -13 13l-21 244l21 252q0 13 13 13q12 0 14 -13zM401 639l21 -234l-21 -246q-2 -16 -16 -16q-6 0 -10.5 4.5t-4.5 11.5l-20 246l20 234q0 6 4.5 10.5t10.5 4.5q14 0 16 -15zM784 164zM495 785
+l21 -380l-21 -246q0 -7 -5 -12.5t-12 -5.5q-16 0 -18 18l-18 246l18 380q2 18 18 18q7 0 12 -5.5t5 -12.5zM589 871l19 -468l-19 -244q0 -8 -5.5 -13.5t-13.5 -5.5q-18 0 -20 19l-16 244l16 468q2 19 20 19q8 0 13.5 -5.5t5.5 -13.5zM687 911l18 -506l-18 -242
+q-2 -21 -22 -21q-19 0 -21 21l-16 242l16 506q0 9 6.5 15.5t14.5 6.5q9 0 15 -6.5t7 -15.5zM1079 169v0v0v0zM881 915l15 -510l-15 -239q0 -10 -7.5 -17.5t-17.5 -7.5t-17 7t-8 18l-14 239l14 510q0 11 7.5 18t17.5 7t17.5 -7t7.5 -18zM980 896l14 -492l-14 -236
+q0 -11 -8 -19t-19 -8t-19 8t-9 19l-12 236l12 492q1 12 9 20t19 8t18.5 -8t8.5 -20zM1192 404l-14 -231v0q0 -13 -9 -22t-22 -9t-22 9t-10 22l-6 114l-6 117l12 636v3q2 15 12 24q9 7 20 7q8 0 15 -5q14 -8 16 -26zM2304 423q0 -117 -83 -199.5t-200 -82.5h-786
+q-13 2 -22 11t-9 22v899q0 23 28 33q85 34 181 34q195 0 338 -131.5t160 -323.5q53 22 110 22q117 0 200 -83t83 -201z" />
+    <glyph glyph-name="uniF1C0" unicode="&#xf1c0;" 
+d="M768 768q237 0 443 43t325 127v-170q0 -69 -103 -128t-280 -93.5t-385 -34.5t-385 34.5t-280 93.5t-103 128v170q119 -84 325 -127t443 -43zM768 0q237 0 443 43t325 127v-170q0 -69 -103 -128t-280 -93.5t-385 -34.5t-385 34.5t-280 93.5t-103 128v170q119 -84 325 -127
+t443 -43zM768 384q237 0 443 43t325 127v-170q0 -69 -103 -128t-280 -93.5t-385 -34.5t-385 34.5t-280 93.5t-103 128v170q119 -84 325 -127t443 -43zM768 1536q208 0 385 -34.5t280 -93.5t103 -128v-128q0 -69 -103 -128t-280 -93.5t-385 -34.5t-385 34.5t-280 93.5
+t-103 128v128q0 69 103 128t280 93.5t385 34.5z" />
+    <glyph glyph-name="uniF1C1" unicode="&#xf1c1;" 
+d="M1468 1156q28 -28 48 -76t20 -88v-1152q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1600q0 40 28 68t68 28h896q40 0 88 -20t76 -48zM1024 1400v-376h376q-10 29 -22 41l-313 313q-12 12 -41 22zM1408 -128v1024h-416q-40 0 -68 28t-28 68v416h-768v-1536h1280z
+M894 465q33 -26 84 -56q59 7 117 7q147 0 177 -49q16 -22 2 -52q0 -1 -1 -2l-2 -2v-1q-6 -38 -71 -38q-48 0 -115 20t-130 53q-221 -24 -392 -83q-153 -262 -242 -262q-15 0 -28 7l-24 12q-1 1 -6 5q-10 10 -6 36q9 40 56 91.5t132 96.5q14 9 23 -6q2 -2 2 -4q52 85 107 197
+q68 136 104 262q-24 82 -30.5 159.5t6.5 127.5q11 40 42 40h21h1q23 0 35 -15q18 -21 9 -68q-2 -6 -4 -8q1 -3 1 -8v-30q-2 -123 -14 -192q55 -164 146 -238zM318 54q52 24 137 158q-51 -40 -87.5 -84t-49.5 -74zM716 974q-15 -42 -2 -132q1 7 7 44q0 3 7 43q1 4 4 8
+q-1 1 -1 2q-1 2 -1 3q-1 22 -13 36q0 -1 -1 -2v-2zM592 313q135 54 284 81q-2 1 -13 9.5t-16 13.5q-76 67 -127 176q-27 -86 -83 -197q-30 -56 -45 -83zM1238 329q-24 24 -140 24q76 -28 124 -28q14 0 18 1q0 1 -2 3z" />
+    <glyph glyph-name="_422" unicode="&#xf1c2;" 
+d="M1468 1156q28 -28 48 -76t20 -88v-1152q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1600q0 40 28 68t68 28h896q40 0 88 -20t76 -48zM1024 1400v-376h376q-10 29 -22 41l-313 313q-12 12 -41 22zM1408 -128v1024h-416q-40 0 -68 28t-28 68v416h-768v-1536h1280z
+M233 768v-107h70l164 -661h159l128 485q7 20 10 46q2 16 2 24h4l3 -24q1 -3 3.5 -20t5.5 -26l128 -485h159l164 661h70v107h-300v-107h90l-99 -438q-5 -20 -7 -46l-2 -21h-4q0 3 -0.5 6.5t-1.5 8t-1 6.5q-1 5 -4 21t-5 25l-144 545h-114l-144 -545q-2 -9 -4.5 -24.5
+t-3.5 -21.5l-4 -21h-4l-2 21q-2 26 -7 46l-99 438h90v107h-300z" />
+    <glyph glyph-name="_423" unicode="&#xf1c3;" 
+d="M1468 1156q28 -28 48 -76t20 -88v-1152q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1600q0 40 28 68t68 28h896q40 0 88 -20t76 -48zM1024 1400v-376h376q-10 29 -22 41l-313 313q-12 12 -41 22zM1408 -128v1024h-416q-40 0 -68 28t-28 68v416h-768v-1536h1280z
+M429 106v-106h281v106h-75l103 161q5 7 10 16.5t7.5 13.5t3.5 4h2q1 -4 5 -10q2 -4 4.5 -7.5t6 -8t6.5 -8.5l107 -161h-76v-106h291v106h-68l-192 273l195 282h67v107h-279v-107h74l-103 -159q-4 -7 -10 -16.5t-9 -13.5l-2 -3h-2q-1 4 -5 10q-6 11 -17 23l-106 159h76v107
+h-290v-107h68l189 -272l-194 -283h-68z" />
+    <glyph glyph-name="_424" unicode="&#xf1c4;" 
+d="M1468 1156q28 -28 48 -76t20 -88v-1152q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1600q0 40 28 68t68 28h896q40 0 88 -20t76 -48zM1024 1400v-376h376q-10 29 -22 41l-313 313q-12 12 -41 22zM1408 -128v1024h-416q-40 0 -68 28t-28 68v416h-768v-1536h1280z
+M416 106v-106h327v106h-93v167h137q76 0 118 15q67 23 106.5 87t39.5 146q0 81 -37 141t-100 87q-48 19 -130 19h-368v-107h92v-555h-92zM769 386h-119v268h120q52 0 83 -18q56 -33 56 -115q0 -89 -62 -120q-31 -15 -78 -15z" />
+    <glyph glyph-name="_425" unicode="&#xf1c5;" 
+d="M1468 1156q28 -28 48 -76t20 -88v-1152q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1600q0 40 28 68t68 28h896q40 0 88 -20t76 -48zM1024 1400v-376h376q-10 29 -22 41l-313 313q-12 12 -41 22zM1408 -128v1024h-416q-40 0 -68 28t-28 68v416h-768v-1536h1280z
+M1280 320v-320h-1024v192l192 192l128 -128l384 384zM448 512q-80 0 -136 56t-56 136t56 136t136 56t136 -56t56 -136t-56 -136t-136 -56z" />
+    <glyph glyph-name="_426" unicode="&#xf1c6;" 
+d="M640 1152v128h-128v-128h128zM768 1024v128h-128v-128h128zM640 896v128h-128v-128h128zM768 768v128h-128v-128h128zM1468 1156q28 -28 48 -76t20 -88v-1152q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1600q0 40 28 68t68 28h896q40 0 88 -20t76 -48zM1024 1400
+v-376h376q-10 29 -22 41l-313 313q-12 12 -41 22zM1408 -128v1024h-416q-40 0 -68 28t-28 68v416h-128v-128h-128v128h-512v-1536h1280zM781 593l107 -349q8 -27 8 -52q0 -83 -72.5 -137.5t-183.5 -54.5t-183.5 54.5t-72.5 137.5q0 25 8 52q21 63 120 396v128h128v-128h79
+q22 0 39 -13t23 -34zM640 128q53 0 90.5 19t37.5 45t-37.5 45t-90.5 19t-90.5 -19t-37.5 -45t37.5 -45t90.5 -19z" />
+    <glyph glyph-name="_427" unicode="&#xf1c7;" 
+d="M1468 1156q28 -28 48 -76t20 -88v-1152q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1600q0 40 28 68t68 28h896q40 0 88 -20t76 -48zM1024 1400v-376h376q-10 29 -22 41l-313 313q-12 12 -41 22zM1408 -128v1024h-416q-40 0 -68 28t-28 68v416h-768v-1536h1280z
+M620 686q20 -8 20 -30v-544q0 -22 -20 -30q-8 -2 -12 -2q-12 0 -23 9l-166 167h-131q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h131l166 167q16 15 35 7zM1037 -3q31 0 50 24q129 159 129 363t-129 363q-16 21 -43 24t-47 -14q-21 -17 -23.5 -43.5t14.5 -47.5
+q100 -123 100 -282t-100 -282q-17 -21 -14.5 -47.5t23.5 -42.5q18 -15 40 -15zM826 145q27 0 47 20q87 93 87 219t-87 219q-18 19 -45 20t-46 -17t-20 -44.5t18 -46.5q52 -57 52 -131t-52 -131q-19 -20 -18 -46.5t20 -44.5q20 -17 44 -17z" />
+    <glyph glyph-name="_428" unicode="&#xf1c8;" 
+d="M1468 1156q28 -28 48 -76t20 -88v-1152q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1600q0 40 28 68t68 28h896q40 0 88 -20t76 -48zM1024 1400v-376h376q-10 29 -22 41l-313 313q-12 12 -41 22zM1408 -128v1024h-416q-40 0 -68 28t-28 68v416h-768v-1536h1280z
+M768 768q52 0 90 -38t38 -90v-384q0 -52 -38 -90t-90 -38h-384q-52 0 -90 38t-38 90v384q0 52 38 90t90 38h384zM1260 766q20 -8 20 -30v-576q0 -22 -20 -30q-8 -2 -12 -2q-14 0 -23 9l-265 266v90l265 266q9 9 23 9q4 0 12 -2z" />
+    <glyph glyph-name="_429" unicode="&#xf1c9;" 
+d="M1468 1156q28 -28 48 -76t20 -88v-1152q0 -40 -28 -68t-68 -28h-1344q-40 0 -68 28t-28 68v1600q0 40 28 68t68 28h896q40 0 88 -20t76 -48zM1024 1400v-376h376q-10 29 -22 41l-313 313q-12 12 -41 22zM1408 -128v1024h-416q-40 0 -68 28t-28 68v416h-768v-1536h1280z
+M480 768q8 11 21 12.5t24 -6.5l51 -38q11 -8 12.5 -21t-6.5 -24l-182 -243l182 -243q8 -11 6.5 -24t-12.5 -21l-51 -38q-11 -8 -24 -6.5t-21 12.5l-226 301q-14 19 0 38zM1282 467q14 -19 0 -38l-226 -301q-8 -11 -21 -12.5t-24 6.5l-51 38q-11 8 -12.5 21t6.5 24l182 243
+l-182 243q-8 11 -6.5 24t12.5 21l51 38q11 8 24 6.5t21 -12.5zM662 6q-13 2 -20.5 13t-5.5 24l138 831q2 13 13 20.5t24 5.5l63 -10q13 -2 20.5 -13t5.5 -24l-138 -831q-2 -13 -13 -20.5t-24 -5.5z" />
+    <glyph glyph-name="_430" unicode="&#xf1ca;" 
+d="M1497 709v-198q-101 -23 -198 -23q-65 -136 -165.5 -271t-181.5 -215.5t-128 -106.5q-80 -45 -162 3q-28 17 -60.5 43.5t-85 83.5t-102.5 128.5t-107.5 184t-105.5 244t-91.5 314.5t-70.5 390h283q26 -218 70 -398.5t104.5 -317t121.5 -235.5t140 -195q169 169 287 406
+q-142 72 -223 220t-81 333q0 192 104 314.5t284 122.5q178 0 273 -105.5t95 -297.5q0 -159 -58 -286q-7 -1 -19.5 -3t-46 -2t-63 6t-62 25.5t-50.5 51.5q31 103 31 184q0 87 -29 132t-79 45q-53 0 -85 -49.5t-32 -140.5q0 -186 105 -293.5t267 -107.5q62 0 121 14z" />
+    <glyph glyph-name="_431" unicode="&#xf1cb;" horiz-adv-x="1792" 
+d="M216 367l603 -402v359l-334 223zM154 511l193 129l-193 129v-258zM973 -35l603 402l-269 180l-334 -223v-359zM896 458l272 182l-272 182l-272 -182zM485 733l334 223v359l-603 -402zM1445 640l193 -129v258zM1307 733l269 180l-603 402v-359zM1792 913v-546
+q0 -41 -34 -64l-819 -546q-21 -13 -43 -13t-43 13l-819 546q-34 23 -34 64v546q0 41 34 64l819 546q21 13 43 13t43 -13l819 -546q34 -23 34 -64z" />
+    <glyph glyph-name="_432" unicode="&#xf1cc;" horiz-adv-x="2048" 
+d="M1800 764q111 -46 179.5 -145.5t68.5 -221.5q0 -164 -118 -280.5t-285 -116.5q-4 0 -11.5 0.5t-10.5 0.5h-1209h-1h-2h-5q-170 10 -288 125.5t-118 280.5q0 110 55 203t147 147q-12 39 -12 82q0 115 82 196t199 81q95 0 172 -58q75 154 222.5 248t326.5 94
+q166 0 306 -80.5t221.5 -218.5t81.5 -301q0 -6 -0.5 -18t-0.5 -18zM468 498q0 -122 84 -193t208 -71q137 0 240 99q-16 20 -47.5 56.5t-43.5 50.5q-67 -65 -144 -65q-55 0 -93.5 33.5t-38.5 87.5q0 53 38.5 87t91.5 34q44 0 84.5 -21t73 -55t65 -75t69 -82t77 -75t97 -55
+t121.5 -21q121 0 204.5 71.5t83.5 190.5q0 121 -84 192t-207 71q-143 0 -241 -97l93 -108q66 64 142 64q52 0 92 -33t40 -84q0 -57 -37 -91.5t-94 -34.5q-43 0 -82.5 21t-72 55t-65.5 75t-69.5 82t-77.5 75t-96.5 55t-118.5 21q-122 0 -207 -70.5t-85 -189.5z" />
+    <glyph glyph-name="_433" unicode="&#xf1cd;" horiz-adv-x="1792" 
+d="M896 1536q182 0 348 -71t286 -191t191 -286t71 -348t-71 -348t-191 -286t-286 -191t-348 -71t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71zM896 1408q-190 0 -361 -90l194 -194q82 28 167 28t167 -28l194 194q-171 90 -361 90zM218 279l194 194
+q-28 82 -28 167t28 167l-194 194q-90 -171 -90 -361t90 -361zM896 -128q190 0 361 90l-194 194q-82 -28 -167 -28t-167 28l-194 -194q171 -90 361 -90zM896 256q159 0 271.5 112.5t112.5 271.5t-112.5 271.5t-271.5 112.5t-271.5 -112.5t-112.5 -271.5t112.5 -271.5
+t271.5 -112.5zM1380 473l194 -194q90 171 90 361t-90 361l-194 -194q28 -82 28 -167t-28 -167z" />
+    <glyph glyph-name="_434" unicode="&#xf1ce;" horiz-adv-x="1792" 
+d="M1760 640q0 -176 -68.5 -336t-184 -275.5t-275.5 -184t-336 -68.5t-336 68.5t-275.5 184t-184 275.5t-68.5 336q0 213 97 398.5t265 305.5t374 151v-228q-221 -45 -366.5 -221t-145.5 -406q0 -130 51 -248.5t136.5 -204t204 -136.5t248.5 -51t248.5 51t204 136.5
+t136.5 204t51 248.5q0 230 -145.5 406t-366.5 221v228q206 -31 374 -151t265 -305.5t97 -398.5z" />
+    <glyph glyph-name="uniF1D0" unicode="&#xf1d0;" horiz-adv-x="1792" 
+d="M19 662q8 217 116 406t305 318h5q0 -1 -1 -3q-8 -8 -28 -33.5t-52 -76.5t-60 -110.5t-44.5 -135.5t-14 -150.5t39 -157.5t108.5 -154q50 -50 102 -69.5t90.5 -11.5t69.5 23.5t47 32.5l16 16q39 51 53 116.5t6.5 122.5t-21 107t-26.5 80l-14 29q-10 25 -30.5 49.5t-43 41
+t-43.5 29.5t-35 19l-13 6l104 115q39 -17 78 -52t59 -61l19 -27q1 48 -18.5 103.5t-40.5 87.5l-20 31l161 183l160 -181q-33 -46 -52.5 -102.5t-22.5 -90.5l-4 -33q22 37 61.5 72.5t67.5 52.5l28 17l103 -115q-44 -14 -85 -50t-60 -65l-19 -29q-31 -56 -48 -133.5t-7 -170
+t57 -156.5q33 -45 77.5 -60.5t85 -5.5t76 26.5t57.5 33.5l21 16q60 53 96.5 115t48.5 121.5t10 121.5t-18 118t-37 107.5t-45.5 93t-45 72t-34.5 47.5l-13 17q-14 13 -7 13l10 -3q40 -29 62.5 -46t62 -50t64 -58t58.5 -65t55.5 -77t45.5 -88t38 -103t23.5 -117t10.5 -136
+q3 -259 -108 -465t-312 -321t-456 -115q-185 0 -351 74t-283.5 198t-184 293t-60.5 353z" />
+    <glyph glyph-name="uniF1D1" unicode="&#xf1d1;" horiz-adv-x="1792" 
+d="M874 -102v-66q-208 6 -385 109.5t-283 275.5l58 34q29 -49 73 -99l65 57q148 -168 368 -212l-17 -86q65 -12 121 -13zM276 428l-83 -28q22 -60 49 -112l-57 -33q-98 180 -98 385t98 385l57 -33q-30 -56 -49 -112l82 -28q-35 -100 -35 -212q0 -109 36 -212zM1528 251
+l58 -34q-106 -172 -283 -275.5t-385 -109.5v66q56 1 121 13l-17 86q220 44 368 212l65 -57q44 50 73 99zM1377 805l-233 -80q14 -42 14 -85t-14 -85l232 -80q-31 -92 -98 -169l-185 162q-57 -67 -147 -85l48 -241q-52 -10 -98 -10t-98 10l48 241q-90 18 -147 85l-185 -162
+q-67 77 -98 169l232 80q-14 42 -14 85t14 85l-233 80q33 93 99 169l185 -162q59 68 147 86l-48 240q44 10 98 10t98 -10l-48 -240q88 -18 147 -86l185 162q66 -76 99 -169zM874 1448v-66q-65 -2 -121 -13l17 -86q-220 -42 -368 -211l-65 56q-38 -42 -73 -98l-57 33
+q106 172 282 275.5t385 109.5zM1705 640q0 -205 -98 -385l-57 33q27 52 49 112l-83 28q36 103 36 212q0 112 -35 212l82 28q-19 56 -49 112l57 33q98 -180 98 -385zM1585 1063l-57 -33q-35 56 -73 98l-65 -56q-148 169 -368 211l17 86q-56 11 -121 13v66q209 -6 385 -109.5
+t282 -275.5zM1748 640q0 173 -67.5 331t-181.5 272t-272 181.5t-331 67.5t-331 -67.5t-272 -181.5t-181.5 -272t-67.5 -331t67.5 -331t181.5 -272t272 -181.5t331 -67.5t331 67.5t272 181.5t181.5 272t67.5 331zM1792 640q0 -182 -71 -348t-191 -286t-286 -191t-348 -71
+t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71t348 -71t286 -191t191 -286t71 -348z" />
+    <glyph glyph-name="uniF1D2" unicode="&#xf1d2;" 
+d="M582 228q0 -66 -93 -66q-107 0 -107 63q0 64 98 64q102 0 102 -61zM546 694q0 -85 -74 -85q-77 0 -77 84q0 90 77 90q36 0 55 -25.5t19 -63.5zM712 769v125q-78 -29 -135 -29q-50 29 -110 29q-86 0 -145 -57t-59 -143q0 -50 29.5 -102t73.5 -67v-3q-38 -17 -38 -85
+q0 -53 41 -77v-3q-113 -37 -113 -139q0 -45 20 -78.5t54 -51t72 -25.5t81 -8q224 0 224 188q0 67 -48 99t-126 46q-27 5 -51.5 20.5t-24.5 39.5q0 44 49 52q77 15 122 70t45 134q0 24 -10 52q37 9 49 13zM771 350h137q-2 27 -2 82v387q0 46 2 69h-137q3 -23 3 -71v-392
+q0 -50 -3 -75zM1280 366v121q-30 -21 -68 -21q-53 0 -53 82v225h52q9 0 26.5 -1t26.5 -1v117h-105q0 82 3 102h-140q4 -24 4 -55v-47h-60v-117q36 3 37 3q3 0 11 -0.5t12 -0.5v-2h-2v-217q0 -37 2.5 -64t11.5 -56.5t24.5 -48.5t43.5 -31t66 -12q64 0 108 24zM924 1072
+q0 36 -24 63.5t-60 27.5t-60.5 -27t-24.5 -64q0 -36 25 -62.5t60 -26.5t59.5 27t24.5 62zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="_438" unicode="&#xf1d3;" horiz-adv-x="1792" 
+d="M595 22q0 100 -165 100q-158 0 -158 -104q0 -101 172 -101q151 0 151 105zM536 777q0 61 -30 102t-89 41q-124 0 -124 -145q0 -135 124 -135q119 0 119 137zM805 1101v-202q-36 -12 -79 -22q16 -43 16 -84q0 -127 -73 -216.5t-197 -112.5q-40 -8 -59.5 -27t-19.5 -58
+q0 -31 22.5 -51.5t58 -32t78.5 -22t86 -25.5t78.5 -37.5t58 -64t22.5 -98.5q0 -304 -363 -304q-69 0 -130 12.5t-116 41t-87.5 82t-32.5 127.5q0 165 182 225v4q-67 41 -67 126q0 109 63 137v4q-72 24 -119.5 108.5t-47.5 165.5q0 139 95 231.5t235 92.5q96 0 178 -47
+q98 0 218 47zM1123 220h-222q4 45 4 134v609q0 94 -4 128h222q-4 -33 -4 -124v-613q0 -89 4 -134zM1724 442v-196q-71 -39 -174 -39q-62 0 -107 20t-70 50t-39.5 78t-18.5 92t-4 103v351h2v4q-7 0 -19 1t-18 1q-21 0 -59 -6v190h96v76q0 54 -6 89h227q-6 -41 -6 -165h171
+v-190q-15 0 -43.5 2t-42.5 2h-85v-365q0 -131 87 -131q61 0 109 33zM1148 1389q0 -58 -39 -101.5t-96 -43.5q-58 0 -98 43.5t-40 101.5q0 59 39.5 103t98.5 44q58 0 96.5 -44.5t38.5 -102.5z" />
+    <glyph glyph-name="_439" unicode="&#xf1d4;" 
+d="M809 532l266 499h-112l-157 -312q-24 -48 -44 -92l-42 92l-155 312h-120l263 -493v-324h101v318zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="uniF1D5" unicode="&#xf1d5;" horiz-adv-x="1280" 
+d="M842 964q0 -80 -57 -136.5t-136 -56.5q-60 0 -111 35q-62 -67 -115 -146q-247 -371 -202 -859q1 -22 -12.5 -38.5t-34.5 -18.5h-5q-20 0 -35 13.5t-17 33.5q-14 126 -3.5 247.5t29.5 217t54 186t69 155.5t74 125q61 90 132 165q-16 35 -16 77q0 80 56.5 136.5t136.5 56.5
+t136.5 -56.5t56.5 -136.5zM1223 953q0 -158 -78 -292t-212.5 -212t-292.5 -78q-64 0 -131 14q-21 5 -32.5 23.5t-6.5 39.5q5 20 23 31.5t39 7.5q51 -13 108 -13q97 0 186 38t153 102t102 153t38 186t-38 186t-102 153t-153 102t-186 38t-186 -38t-153 -102t-102 -153
+t-38 -186q0 -114 52 -218q10 -20 3.5 -40t-25.5 -30t-39.5 -3t-30.5 26q-64 123 -64 265q0 119 46.5 227t124.5 186t186 124t226 46q158 0 292.5 -78t212.5 -212.5t78 -292.5z" />
+    <glyph glyph-name="uniF1D6" unicode="&#xf1d6;" horiz-adv-x="1792" 
+d="M270 730q-8 19 -8 52q0 20 11 49t24 45q-1 22 7.5 53t22.5 43q0 139 92.5 288.5t217.5 209.5q139 66 324 66q133 0 266 -55q49 -21 90 -48t71 -56t55 -68t42 -74t32.5 -84.5t25.5 -89.5t22 -98l1 -5q55 -83 55 -150q0 -14 -9 -40t-9 -38q0 -1 1.5 -3.5t3.5 -5t2 -3.5
+q77 -114 120.5 -214.5t43.5 -208.5q0 -43 -19.5 -100t-55.5 -57q-9 0 -19.5 7.5t-19 17.5t-19 26t-16 26.5t-13.5 26t-9 17.5q-1 1 -3 1l-5 -4q-59 -154 -132 -223q20 -20 61.5 -38.5t69 -41.5t35.5 -65q-2 -4 -4 -16t-7 -18q-64 -97 -302 -97q-53 0 -110.5 9t-98 20
+t-104.5 30q-15 5 -23 7q-14 4 -46 4.5t-40 1.5q-41 -45 -127.5 -65t-168.5 -20q-35 0 -69 1.5t-93 9t-101 20.5t-74.5 40t-32.5 64q0 40 10 59.5t41 48.5q11 2 40.5 13t49.5 12q4 0 14 2q2 2 2 4l-2 3q-48 11 -108 105.5t-73 156.5l-5 3q-4 0 -12 -20q-18 -41 -54.5 -74.5
+t-77.5 -37.5h-1q-4 0 -6 4.5t-5 5.5q-23 54 -23 100q0 275 252 466z" />
+    <glyph glyph-name="uniF1D7" unicode="&#xf1d7;" horiz-adv-x="2048" 
+d="M580 1075q0 41 -25 66t-66 25q-43 0 -76 -25.5t-33 -65.5q0 -39 33 -64.5t76 -25.5q41 0 66 24.5t25 65.5zM1323 568q0 28 -25.5 50t-65.5 22q-27 0 -49.5 -22.5t-22.5 -49.5q0 -28 22.5 -50.5t49.5 -22.5q40 0 65.5 22t25.5 51zM1087 1075q0 41 -24.5 66t-65.5 25
+q-43 0 -76 -25.5t-33 -65.5q0 -39 33 -64.5t76 -25.5q41 0 65.5 24.5t24.5 65.5zM1722 568q0 28 -26 50t-65 22q-27 0 -49.5 -22.5t-22.5 -49.5q0 -28 22.5 -50.5t49.5 -22.5q39 0 65 22t26 51zM1456 965q-31 4 -70 4q-169 0 -311 -77t-223.5 -208.5t-81.5 -287.5
+q0 -78 23 -152q-35 -3 -68 -3q-26 0 -50 1.5t-55 6.5t-44.5 7t-54.5 10.5t-50 10.5l-253 -127l72 218q-290 203 -290 490q0 169 97.5 311t264 223.5t363.5 81.5q176 0 332.5 -66t262 -182.5t136.5 -260.5zM2048 404q0 -117 -68.5 -223.5t-185.5 -193.5l55 -181l-199 109
+q-150 -37 -218 -37q-169 0 -311 70.5t-223.5 191.5t-81.5 264t81.5 264t223.5 191.5t311 70.5q161 0 303 -70.5t227.5 -192t85.5 -263.5z" />
+    <glyph glyph-name="_443" unicode="&#xf1d8;" horiz-adv-x="1792" 
+d="M1764 1525q33 -24 27 -64l-256 -1536q-5 -29 -32 -45q-14 -8 -31 -8q-11 0 -24 5l-453 185l-242 -295q-18 -23 -49 -23q-13 0 -22 4q-19 7 -30.5 23.5t-11.5 36.5v349l864 1059l-1069 -925l-395 162q-37 14 -40 55q-2 40 32 59l1664 960q15 9 32 9q20 0 36 -11z" />
+    <glyph glyph-name="_444" unicode="&#xf1d9;" horiz-adv-x="1792" 
+d="M1764 1525q33 -24 27 -64l-256 -1536q-5 -29 -32 -45q-14 -8 -31 -8q-11 0 -24 5l-527 215l-298 -327q-18 -21 -47 -21q-14 0 -23 4q-19 7 -30 23.5t-11 36.5v452l-472 193q-37 14 -40 55q-3 39 32 59l1664 960q35 21 68 -2zM1422 26l221 1323l-1434 -827l336 -137
+l863 639l-478 -797z" />
+    <glyph glyph-name="_445" unicode="&#xf1da;" 
+d="M1536 640q0 -156 -61 -298t-164 -245t-245 -164t-298 -61q-172 0 -327 72.5t-264 204.5q-7 10 -6.5 22.5t8.5 20.5l137 138q10 9 25 9q16 -2 23 -12q73 -95 179 -147t225 -52q104 0 198.5 40.5t163.5 109.5t109.5 163.5t40.5 198.5t-40.5 198.5t-109.5 163.5
+t-163.5 109.5t-198.5 40.5q-98 0 -188 -35.5t-160 -101.5l137 -138q31 -30 14 -69q-17 -40 -59 -40h-448q-26 0 -45 19t-19 45v448q0 42 40 59q39 17 69 -14l130 -129q107 101 244.5 156.5t284.5 55.5q156 0 298 -61t245 -164t164 -245t61 -298zM896 928v-448q0 -14 -9 -23
+t-23 -9h-320q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h224v352q0 14 9 23t23 9h64q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="_446" unicode="&#xf1db;" 
+d="M768 1280q-130 0 -248.5 -51t-204 -136.5t-136.5 -204t-51 -248.5t51 -248.5t136.5 -204t204 -136.5t248.5 -51t248.5 51t204 136.5t136.5 204t51 248.5t-51 248.5t-136.5 204t-204 136.5t-248.5 51zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103
+t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="_447" unicode="&#xf1dc;" horiz-adv-x="1792" 
+d="M1682 -128q-44 0 -132.5 3.5t-133.5 3.5q-44 0 -132 -3.5t-132 -3.5q-24 0 -37 20.5t-13 45.5q0 31 17 46t39 17t51 7t45 15q33 21 33 140l-1 391q0 21 -1 31q-13 4 -50 4h-675q-38 0 -51 -4q-1 -10 -1 -31l-1 -371q0 -142 37 -164q16 -10 48 -13t57 -3.5t45 -15
+t20 -45.5q0 -26 -12.5 -48t-36.5 -22q-47 0 -139.5 3.5t-138.5 3.5q-43 0 -128 -3.5t-127 -3.5q-23 0 -35.5 21t-12.5 45q0 30 15.5 45t36 17.5t47.5 7.5t42 15q33 23 33 143l-1 57v813q0 3 0.5 26t0 36.5t-1.5 38.5t-3.5 42t-6.5 36.5t-11 31.5t-16 18q-15 10 -45 12t-53 2
+t-41 14t-18 45q0 26 12 48t36 22q46 0 138.5 -3.5t138.5 -3.5q42 0 126.5 3.5t126.5 3.5q25 0 37.5 -22t12.5 -48q0 -30 -17 -43.5t-38.5 -14.5t-49.5 -4t-43 -13q-35 -21 -35 -160l1 -320q0 -21 1 -32q13 -3 39 -3h699q25 0 38 3q1 11 1 32l1 320q0 139 -35 160
+q-18 11 -58.5 12.5t-66 13t-25.5 49.5q0 26 12.5 48t37.5 22q44 0 132 -3.5t132 -3.5q43 0 129 3.5t129 3.5q25 0 37.5 -22t12.5 -48q0 -30 -17.5 -44t-40 -14.5t-51.5 -3t-44 -12.5q-35 -23 -35 -161l1 -943q0 -119 34 -140q16 -10 46 -13.5t53.5 -4.5t41.5 -15.5t18 -44.5
+q0 -26 -12 -48t-36 -22z" />
+    <glyph glyph-name="_448" unicode="&#xf1dd;" horiz-adv-x="1280" 
+d="M1278 1347v-73q0 -29 -18.5 -61t-42.5 -32q-50 0 -54 -1q-26 -6 -32 -31q-3 -11 -3 -64v-1152q0 -25 -18 -43t-43 -18h-108q-25 0 -43 18t-18 43v1218h-143v-1218q0 -25 -17.5 -43t-43.5 -18h-108q-26 0 -43.5 18t-17.5 43v496q-147 12 -245 59q-126 58 -192 179
+q-64 117 -64 259q0 166 88 286q88 118 209 159q111 37 417 37h479q25 0 43 -18t18 -43z" />
+    <glyph glyph-name="_449" unicode="&#xf1de;" 
+d="M352 128v-128h-352v128h352zM704 256q26 0 45 -19t19 -45v-256q0 -26 -19 -45t-45 -19h-256q-26 0 -45 19t-19 45v256q0 26 19 45t45 19h256zM864 640v-128h-864v128h864zM224 1152v-128h-224v128h224zM1536 128v-128h-736v128h736zM576 1280q26 0 45 -19t19 -45v-256
+q0 -26 -19 -45t-45 -19h-256q-26 0 -45 19t-19 45v256q0 26 19 45t45 19h256zM1216 768q26 0 45 -19t19 -45v-256q0 -26 -19 -45t-45 -19h-256q-26 0 -45 19t-19 45v256q0 26 19 45t45 19h256zM1536 640v-128h-224v128h224zM1536 1152v-128h-864v128h864z" />
+    <glyph glyph-name="uniF1E0" unicode="&#xf1e0;" 
+d="M1216 512q133 0 226.5 -93.5t93.5 -226.5t-93.5 -226.5t-226.5 -93.5t-226.5 93.5t-93.5 226.5q0 12 2 34l-360 180q-92 -86 -218 -86q-133 0 -226.5 93.5t-93.5 226.5t93.5 226.5t226.5 93.5q126 0 218 -86l360 180q-2 22 -2 34q0 133 93.5 226.5t226.5 93.5
+t226.5 -93.5t93.5 -226.5t-93.5 -226.5t-226.5 -93.5q-126 0 -218 86l-360 -180q2 -22 2 -34t-2 -34l360 -180q92 86 218 86z" />
+    <glyph glyph-name="_451" unicode="&#xf1e1;" 
+d="M1280 341q0 88 -62.5 151t-150.5 63q-84 0 -145 -58l-241 120q2 16 2 23t-2 23l241 120q61 -58 145 -58q88 0 150.5 63t62.5 151t-62.5 150.5t-150.5 62.5t-151 -62.5t-63 -150.5q0 -7 2 -23l-241 -120q-62 57 -145 57q-88 0 -150.5 -62.5t-62.5 -150.5t62.5 -150.5
+t150.5 -62.5q83 0 145 57l241 -120q-2 -16 -2 -23q0 -88 63 -150.5t151 -62.5t150.5 62.5t62.5 150.5zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="_452" unicode="&#xf1e2;" horiz-adv-x="1792" 
+d="M571 947q-10 25 -34 35t-49 0q-108 -44 -191 -127t-127 -191q-10 -25 0 -49t35 -34q13 -5 24 -5q42 0 60 40q34 84 98.5 148.5t148.5 98.5q25 11 35 35t0 49zM1513 1303l46 -46l-244 -243l68 -68q19 -19 19 -45.5t-19 -45.5l-64 -64q89 -161 89 -343q0 -143 -55.5 -273.5
+t-150 -225t-225 -150t-273.5 -55.5t-273.5 55.5t-225 150t-150 225t-55.5 273.5t55.5 273.5t150 225t225 150t273.5 55.5q182 0 343 -89l64 64q19 19 45.5 19t45.5 -19l68 -68zM1521 1359q-10 -10 -22 -10q-13 0 -23 10l-91 90q-9 10 -9 23t9 23q10 9 23 9t23 -9l90 -91
+q10 -9 10 -22.5t-10 -22.5zM1751 1129q-11 -9 -23 -9t-23 9l-90 91q-10 9 -10 22.5t10 22.5q9 10 22.5 10t22.5 -10l91 -90q9 -10 9 -23t-9 -23zM1792 1312q0 -14 -9 -23t-23 -9h-96q-14 0 -23 9t-9 23t9 23t23 9h96q14 0 23 -9t9 -23zM1600 1504v-96q0 -14 -9 -23t-23 -9
+t-23 9t-9 23v96q0 14 9 23t23 9t23 -9t9 -23zM1751 1449l-91 -90q-10 -10 -22 -10q-13 0 -23 10q-10 9 -10 22.5t10 22.5l90 91q10 9 23 9t23 -9q9 -10 9 -23t-9 -23z" />
+    <glyph glyph-name="_453" unicode="&#xf1e3;" horiz-adv-x="1792" 
+d="M609 720l287 208l287 -208l-109 -336h-355zM896 1536q182 0 348 -71t286 -191t191 -286t71 -348t-71 -348t-191 -286t-286 -191t-348 -71t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71zM1515 186q149 203 149 454v3l-102 -89l-240 224l63 323
+l134 -12q-150 206 -389 282l53 -124l-287 -159l-287 159l53 124q-239 -76 -389 -282l135 12l62 -323l-240 -224l-102 89v-3q0 -251 149 -454l30 132l326 -40l139 -298l-116 -69q117 -39 240 -39t240 39l-116 69l139 298l326 40z" />
+    <glyph glyph-name="_454" unicode="&#xf1e4;" horiz-adv-x="1792" 
+d="M448 224v-192q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h192q14 0 23 -9t9 -23zM256 608v-192q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h192q14 0 23 -9t9 -23zM832 224v-192q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23
+v192q0 14 9 23t23 9h192q14 0 23 -9t9 -23zM640 608v-192q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h192q14 0 23 -9t9 -23zM66 768q-28 0 -47 19t-19 46v129h514v-129q0 -27 -19 -46t-46 -19h-383zM1216 224v-192q0 -14 -9 -23t-23 -9h-192
+q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h192q14 0 23 -9t9 -23zM1024 608v-192q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h192q14 0 23 -9t9 -23zM1600 224v-192q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h192q14 0 23 -9t9 -23
+zM1408 608v-192q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h192q14 0 23 -9t9 -23zM1792 1016v-13h-514v10q0 104 -382 102q-382 -1 -382 -102v-10h-514v13q0 17 8.5 43t34 64t65.5 75.5t110.5 76t160 67.5t224 47.5t293.5 18.5t293 -18.5t224 -47.5
+t160.5 -67.5t110.5 -76t65.5 -75.5t34 -64t8.5 -43zM1792 608v-192q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v192q0 14 9 23t23 9h192q14 0 23 -9t9 -23zM1792 962v-129q0 -27 -19 -46t-46 -19h-384q-27 0 -46 19t-19 46v129h514z" />
+    <glyph glyph-name="_455" unicode="&#xf1e5;" horiz-adv-x="1792" 
+d="M704 1216v-768q0 -26 -19 -45t-45 -19v-576q0 -26 -19 -45t-45 -19h-512q-26 0 -45 19t-19 45v512l249 873q7 23 31 23h424zM1024 1216v-704h-256v704h256zM1792 320v-512q0 -26 -19 -45t-45 -19h-512q-26 0 -45 19t-19 45v576q-26 0 -45 19t-19 45v768h424q24 0 31 -23z
+M736 1504v-224h-352v224q0 14 9 23t23 9h288q14 0 23 -9t9 -23zM1408 1504v-224h-352v224q0 14 9 23t23 9h288q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="_456" unicode="&#xf1e6;" horiz-adv-x="1792" 
+d="M1755 1083q37 -38 37 -90.5t-37 -90.5l-401 -400l150 -150l-160 -160q-163 -163 -389.5 -186.5t-411.5 100.5l-362 -362h-181v181l362 362q-124 185 -100.5 411.5t186.5 389.5l160 160l150 -150l400 401q38 37 91 37t90 -37t37 -90.5t-37 -90.5l-400 -401l234 -234
+l401 400q38 37 91 37t90 -37z" />
+    <glyph glyph-name="_457" unicode="&#xf1e7;" horiz-adv-x="1792" 
+d="M873 796q0 -83 -63.5 -142.5t-152.5 -59.5t-152.5 59.5t-63.5 142.5q0 84 63.5 143t152.5 59t152.5 -59t63.5 -143zM1375 796q0 -83 -63 -142.5t-153 -59.5q-89 0 -152.5 59.5t-63.5 142.5q0 84 63.5 143t152.5 59q90 0 153 -59t63 -143zM1600 616v667q0 87 -32 123.5
+t-111 36.5h-1112q-83 0 -112.5 -34t-29.5 -126v-673q43 -23 88.5 -40t81 -28t81 -18.5t71 -11t70 -4t58.5 -0.5t56.5 2t44.5 2q68 1 95 -27q6 -6 10 -9q26 -25 61 -51q7 91 118 87q5 0 36.5 -1.5t43 -2t45.5 -1t53 1t54.5 4.5t61 8.5t62 13.5t67 19.5t67.5 27t72 34.5z
+M1763 621q-121 -149 -372 -252q84 -285 -23 -465q-66 -113 -183 -148q-104 -32 -182 15q-86 51 -82 164l-1 326v1q-8 2 -24.5 6t-23.5 5l-1 -338q4 -114 -83 -164q-79 -47 -183 -15q-117 36 -182 150q-105 180 -22 463q-251 103 -372 252q-25 37 -4 63t60 -1q4 -2 11.5 -7
+t10.5 -8v694q0 72 47 123t114 51h1257q67 0 114 -51t47 -123v-694l21 15q39 27 60 1t-4 -63z" />
+    <glyph glyph-name="_458" unicode="&#xf1e8;" horiz-adv-x="1792" 
+d="M896 1102v-434h-145v434h145zM1294 1102v-434h-145v434h145zM1294 342l253 254v795h-1194v-1049h326v-217l217 217h398zM1692 1536v-1013l-434 -434h-326l-217 -217h-217v217h-398v1158l109 289h1483z" />
+    <glyph glyph-name="_459" unicode="&#xf1e9;" 
+d="M773 217v-127q-1 -292 -6 -305q-12 -32 -51 -40q-54 -9 -181.5 38t-162.5 89q-13 15 -17 36q-1 12 4 26q4 10 34 47t181 216q1 0 60 70q15 19 39.5 24.5t49.5 -3.5q24 -10 37.5 -29t12.5 -42zM624 468q-3 -55 -52 -70l-120 -39q-275 -88 -292 -88q-35 2 -54 36
+q-12 25 -17 75q-8 76 1 166.5t30 124.5t56 32q13 0 202 -77q71 -29 115 -47l84 -34q23 -9 35.5 -30.5t11.5 -48.5zM1450 171q-7 -54 -91.5 -161t-135.5 -127q-37 -14 -63 7q-14 10 -184 287l-47 77q-14 21 -11.5 46t19.5 46q35 43 83 26q1 -1 119 -40q203 -66 242 -79.5
+t47 -20.5q28 -22 22 -61zM778 803q5 -102 -54 -122q-58 -17 -114 71l-378 598q-8 35 19 62q41 43 207.5 89.5t224.5 31.5q40 -10 49 -45q3 -18 22 -305.5t24 -379.5zM1440 695q3 -39 -26 -59q-15 -10 -329 -86q-67 -15 -91 -23l1 2q-23 -6 -46 4t-37 32q-30 47 0 87
+q1 1 75 102q125 171 150 204t34 39q28 19 65 2q48 -23 123 -133.5t81 -167.5v-3z" />
+    <glyph glyph-name="_460" unicode="&#xf1ea;" horiz-adv-x="2048" 
+d="M1024 1024h-384v-384h384v384zM1152 384v-128h-640v128h640zM1152 1152v-640h-640v640h640zM1792 384v-128h-512v128h512zM1792 640v-128h-512v128h512zM1792 896v-128h-512v128h512zM1792 1152v-128h-512v128h512zM256 192v960h-128v-960q0 -26 19 -45t45 -19t45 19
+t19 45zM1920 192v1088h-1536v-1088q0 -33 -11 -64h1483q26 0 45 19t19 45zM2048 1408v-1216q0 -80 -56 -136t-136 -56h-1664q-80 0 -136 56t-56 136v1088h256v128h1792z" />
+    <glyph glyph-name="_461" unicode="&#xf1eb;" horiz-adv-x="2048" 
+d="M1024 13q-20 0 -93 73.5t-73 93.5q0 32 62.5 54t103.5 22t103.5 -22t62.5 -54q0 -20 -73 -93.5t-93 -73.5zM1294 284q-2 0 -40 25t-101.5 50t-128.5 25t-128.5 -25t-101 -50t-40.5 -25q-18 0 -93.5 75t-75.5 93q0 13 10 23q78 77 196 121t233 44t233 -44t196 -121
+q10 -10 10 -23q0 -18 -75.5 -93t-93.5 -75zM1567 556q-11 0 -23 8q-136 105 -252 154.5t-268 49.5q-85 0 -170.5 -22t-149 -53t-113.5 -62t-79 -53t-31 -22q-17 0 -92 75t-75 93q0 12 10 22q132 132 320 205t380 73t380 -73t320 -205q10 -10 10 -22q0 -18 -75 -93t-92 -75z
+M1838 827q-11 0 -22 9q-179 157 -371.5 236.5t-420.5 79.5t-420.5 -79.5t-371.5 -236.5q-11 -9 -22 -9q-17 0 -92.5 75t-75.5 93q0 13 10 23q187 186 445 288t527 102t527 -102t445 -288q10 -10 10 -23q0 -18 -75.5 -93t-92.5 -75z" />
+    <glyph glyph-name="_462" unicode="&#xf1ec;" horiz-adv-x="1792" 
+d="M384 0q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM768 0q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM384 384q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5
+t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1152 0q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM768 384q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5
+t37.5 90.5zM384 768q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1152 384q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM768 768q0 53 -37.5 90.5t-90.5 37.5
+t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1536 0v384q0 52 -38 90t-90 38t-90 -38t-38 -90v-384q0 -52 38 -90t90 -38t90 38t38 90zM1152 768q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5z
+M1536 1088v256q0 26 -19 45t-45 19h-1280q-26 0 -45 -19t-19 -45v-256q0 -26 19 -45t45 -19h1280q26 0 45 19t19 45zM1536 768q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1664 1408v-1536q0 -52 -38 -90t-90 -38
+h-1408q-52 0 -90 38t-38 90v1536q0 52 38 90t90 38h1408q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="_463" unicode="&#xf1ed;" 
+d="M1519 890q18 -84 -4 -204q-87 -444 -565 -444h-44q-25 0 -44 -16.5t-24 -42.5l-4 -19l-55 -346l-2 -15q-5 -26 -24.5 -42.5t-44.5 -16.5h-251q-21 0 -33 15t-9 36q9 56 26.5 168t26.5 168t27 167.5t27 167.5q5 37 43 37h131q133 -2 236 21q175 39 287 144q102 95 155 246
+q24 70 35 133q1 6 2.5 7.5t3.5 1t6 -3.5q79 -59 98 -162zM1347 1172q0 -107 -46 -236q-80 -233 -302 -315q-113 -40 -252 -42q0 -1 -90 -1l-90 1q-100 0 -118 -96q-2 -8 -85 -530q-1 -10 -12 -10h-295q-22 0 -36.5 16.5t-11.5 38.5l232 1471q5 29 27.5 48t51.5 19h598
+q34 0 97.5 -13t111.5 -32q107 -41 163.5 -123t56.5 -196z" />
+    <glyph glyph-name="_464" unicode="&#xf1ee;" horiz-adv-x="1792" 
+d="M441 864q33 0 52 -26q266 -364 362 -774h-446q-127 441 -367 749q-12 16 -3 33.5t29 17.5h373zM1000 507q-49 -199 -125 -393q-79 310 -256 594q40 221 44 449q211 -340 337 -650zM1099 1216q235 -324 384.5 -698.5t184.5 -773.5h-451q-41 665 -553 1472h435zM1792 640
+q0 -424 -101 -812q-67 560 -359 1083q-25 301 -106 584q-4 16 5.5 28.5t25.5 12.5h359q21 0 38.5 -13t22.5 -33q115 -409 115 -850z" />
+    <glyph glyph-name="uniF1F0" unicode="&#xf1f0;" horiz-adv-x="2304" 
+d="M1975 546h-138q14 37 66 179l3 9q4 10 10 26t9 26l12 -55zM531 611l-58 295q-11 54 -75 54h-268l-2 -13q311 -79 403 -336zM710 960l-162 -438l-17 89q-26 70 -85 129.5t-131 88.5l135 -510h175l261 641h-176zM849 318h166l104 642h-166zM1617 944q-69 27 -149 27
+q-123 0 -201 -59t-79 -153q-1 -102 145 -174q48 -23 67 -41t19 -39q0 -30 -30 -46t-69 -16q-86 0 -156 33l-22 11l-23 -144q74 -34 185 -34q130 -1 208.5 59t80.5 160q0 106 -140 174q-49 25 -71 42t-22 38q0 22 24.5 38.5t70.5 16.5q70 1 124 -24l15 -8zM2042 960h-128
+q-65 0 -87 -54l-246 -588h174l35 96h212q5 -22 20 -96h154zM2304 1280v-1280q0 -52 -38 -90t-90 -38h-2048q-52 0 -90 38t-38 90v1280q0 52 38 90t90 38h2048q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="_466" unicode="&#xf1f1;" horiz-adv-x="2304" 
+d="M1119 1195q-128 85 -281 85q-103 0 -197.5 -40.5t-162.5 -108.5t-108.5 -162t-40.5 -197q0 -104 40.5 -198t108.5 -162t162 -108.5t198 -40.5q153 0 281 85q-131 107 -178 265.5t0.5 316.5t177.5 265zM1152 1171q-126 -99 -172 -249.5t-0.5 -300.5t172.5 -249
+q127 99 172.5 249t-0.5 300.5t-172 249.5zM1185 1195q130 -107 177.5 -265.5t0.5 -317t-178 -264.5q128 -85 281 -85q104 0 198 40.5t162 108.5t108.5 162t40.5 198q0 103 -40.5 197t-108.5 162t-162.5 108.5t-197.5 40.5q-153 0 -281 -85zM1926 473h7v3h-17v-3h7v-17h3v17z
+M1955 456h4v20h-5l-6 -13l-6 13h-5v-20h3v15l6 -13h4l5 13v-15zM1947 16v-2h-2h-3v3h3h2v-1zM1947 7h3l-4 5h2l1 1q1 1 1 3t-1 3l-1 1h-3h-6v-13h3v5h1zM685 75q0 19 11 31t30 12q18 0 29 -12.5t11 -30.5q0 -19 -11 -31t-29 -12q-19 0 -30 12t-11 31zM1158 119q30 0 35 -32
+h-70q5 32 35 32zM1514 75q0 19 11 31t29 12t29.5 -12.5t11.5 -30.5q0 -19 -11 -31t-30 -12q-18 0 -29 12t-11 31zM1786 75q0 18 11.5 30.5t29.5 12.5t29.5 -12.5t11.5 -30.5q0 -19 -11.5 -31t-29.5 -12t-29.5 12.5t-11.5 30.5zM1944 3q-2 0 -4 1q-1 0 -3 2t-2 3q-1 2 -1 4
+q0 3 1 4q0 2 2 4l1 1q2 0 2 1q2 1 4 1q3 0 4 -1l4 -2l2 -4v-1q1 -2 1 -3l-1 -1v-3t-1 -1l-1 -2q-2 -2 -4 -2q-1 -1 -4 -1zM599 7h30v85q0 24 -14.5 38.5t-39.5 15.5q-32 0 -47 -24q-14 24 -45 24q-24 0 -39 -20v16h-30v-135h30v75q0 36 33 36q30 0 30 -36v-75h29v75
+q0 36 33 36q30 0 30 -36v-75zM765 7h29v68v67h-29v-16q-17 20 -43 20q-29 0 -48 -20t-19 -51t19 -51t48 -20q28 0 43 20v-17zM943 48q0 34 -47 40l-14 2q-23 4 -23 14q0 15 25 15q23 0 43 -11l12 24q-22 14 -55 14q-26 0 -41 -12t-15 -32q0 -33 47 -39l13 -2q24 -4 24 -14
+q0 -17 -31 -17q-25 0 -45 14l-13 -23q25 -17 58 -17q29 0 45.5 12t16.5 32zM1073 14l-8 25q-13 -7 -26 -7q-19 0 -19 22v61h48v27h-48v41h-30v-41h-28v-27h28v-61q0 -50 47 -50q21 0 36 10zM1159 146q-29 0 -48 -20t-19 -51q0 -32 19.5 -51.5t49.5 -19.5q33 0 55 19l-14 22
+q-18 -15 -39 -15q-34 0 -41 33h101v12q0 32 -18 51.5t-46 19.5zM1318 146q-23 0 -35 -20v16h-30v-135h30v76q0 35 29 35q10 0 18 -4l9 28q-9 4 -21 4zM1348 75q0 -31 19.5 -51t52.5 -20q29 0 48 16l-14 24q-18 -13 -35 -12q-18 0 -29.5 12t-11.5 31t11.5 31t29.5 12
+q19 0 35 -12l14 24q-20 16 -48 16q-33 0 -52.5 -20t-19.5 -51zM1593 7h30v68v67h-30v-16q-15 20 -42 20q-29 0 -48.5 -20t-19.5 -51t19.5 -51t48.5 -20q28 0 42 20v-17zM1726 146q-23 0 -35 -20v16h-29v-135h29v76q0 35 29 35q10 0 18 -4l9 28q-8 4 -21 4zM1866 7h29v68v122
+h-29v-71q-15 20 -43 20t-47.5 -20.5t-19.5 -50.5t19.5 -50.5t47.5 -20.5q29 0 43 20v-17zM1944 27l-2 -1h-3q-2 -1 -4 -3q-3 -1 -3 -4q-1 -2 -1 -6q0 -3 1 -5q0 -2 3 -4q2 -2 4 -3t5 -1q4 0 6 1q0 1 2 2l2 1q1 1 3 4q1 2 1 5q0 4 -1 6q-1 1 -3 4q0 1 -2 2l-2 1q-1 0 -3 0.5
+t-3 0.5zM2304 1280v-1280q0 -52 -38 -90t-90 -38h-2048q-52 0 -90 38t-38 90v1280q0 52 38 90t90 38h2048q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="_467" unicode="&#xf1f2;" horiz-adv-x="2304" 
+d="M313 759q0 -51 -36 -84q-29 -26 -89 -26h-17v220h17q61 0 89 -27q36 -31 36 -83zM2089 824q0 -52 -64 -52h-19v101h20q63 0 63 -49zM380 759q0 74 -50 120.5t-129 46.5h-95v-333h95q74 0 119 38q60 51 60 128zM410 593h65v333h-65v-333zM730 694q0 40 -20.5 62t-75.5 42
+q-29 10 -39.5 19t-10.5 23q0 16 13.5 26.5t34.5 10.5q29 0 53 -27l34 44q-41 37 -98 37q-44 0 -74 -27.5t-30 -67.5q0 -35 18 -55.5t64 -36.5q37 -13 45 -19q19 -12 19 -34q0 -20 -14 -33.5t-36 -13.5q-48 0 -71 44l-42 -40q44 -64 115 -64q51 0 83 30.5t32 79.5zM1008 604
+v77q-37 -37 -78 -37q-49 0 -80.5 32.5t-31.5 82.5q0 48 31.5 81.5t77.5 33.5q43 0 81 -38v77q-40 20 -80 20q-74 0 -125.5 -50.5t-51.5 -123.5t51 -123.5t125 -50.5q42 0 81 19zM2240 0v527q-65 -40 -144.5 -84t-237.5 -117t-329.5 -137.5t-417.5 -134.5t-504 -118h1569
+q26 0 45 19t19 45zM1389 757q0 75 -53 128t-128 53t-128 -53t-53 -128t53 -128t128 -53t128 53t53 128zM1541 584l144 342h-71l-90 -224l-89 224h-71l142 -342h35zM1714 593h184v56h-119v90h115v56h-115v74h119v57h-184v-333zM2105 593h80l-105 140q76 16 76 94q0 47 -31 73
+t-87 26h-97v-333h65v133h9zM2304 1274v-1268q0 -56 -38.5 -95t-93.5 -39h-2040q-55 0 -93.5 39t-38.5 95v1268q0 56 38.5 95t93.5 39h2040q55 0 93.5 -39t38.5 -95z" />
+    <glyph glyph-name="f1f3" unicode="&#xf1f3;" horiz-adv-x="2304" 
+d="M119 854h89l-45 108zM740 328l74 79l-70 79h-163v-49h142v-55h-142v-54h159zM898 406l99 -110v217zM1186 453q0 33 -40 33h-84v-69h83q41 0 41 36zM1475 457q0 29 -42 29h-82v-61h81q43 0 43 32zM1197 923q0 29 -42 29h-82v-60h81q43 0 43 31zM1656 854h89l-44 108z
+M699 1009v-271h-66v212l-94 -212h-57l-94 212v-212h-132l-25 60h-135l-25 -60h-70l116 271h96l110 -257v257h106l85 -184l77 184h108zM1255 453q0 -20 -5.5 -35t-14 -25t-22.5 -16.5t-26 -10t-31.5 -4.5t-31.5 -1t-32.5 0.5t-29.5 0.5v-91h-126l-80 90l-83 -90h-256v271h260
+l80 -89l82 89h207q109 0 109 -89zM964 794v-56h-217v271h217v-57h-152v-49h148v-55h-148v-54h152zM2304 235v-229q0 -55 -38.5 -94.5t-93.5 -39.5h-2040q-55 0 -93.5 39.5t-38.5 94.5v678h111l25 61h55l25 -61h218v46l19 -46h113l20 47v-47h541v99l10 1q10 0 10 -14v-86h279
+v23q23 -12 55 -18t52.5 -6.5t63 0.5t51.5 1l25 61h56l25 -61h227v58l34 -58h182v378h-180v-44l-25 44h-185v-44l-23 44h-249q-69 0 -109 -22v22h-172v-22q-24 22 -73 22h-628l-43 -97l-43 97h-198v-44l-22 44h-169l-78 -179v391q0 55 38.5 94.5t93.5 39.5h2040
+q55 0 93.5 -39.5t38.5 -94.5v-678h-120q-51 0 -81 -22v22h-177q-55 0 -78 -22v22h-316v-22q-31 22 -87 22h-209v-22q-23 22 -91 22h-234l-54 -58l-50 58h-349v-378h343l55 59l52 -59h211v89h21q59 0 90 13v-102h174v99h8q8 0 10 -2t2 -10v-87h529q57 0 88 24v-24h168
+q60 0 95 17zM1546 469q0 -23 -12 -43t-34 -29q25 -9 34 -26t9 -46v-54h-65v45q0 33 -12 43.5t-46 10.5h-69v-99h-65v271h154q48 0 77 -15t29 -58zM1269 936q0 -24 -12.5 -44t-33.5 -29q26 -9 34.5 -25.5t8.5 -46.5v-53h-65q0 9 0.5 26.5t0 25t-3 18.5t-8.5 16t-17.5 8.5
+t-29.5 3.5h-70v-98h-64v271l153 -1q49 0 78 -14.5t29 -57.5zM1798 327v-56h-216v271h216v-56h-151v-49h148v-55h-148v-54zM1372 1009v-271h-66v271h66zM2065 357q0 -86 -102 -86h-126v58h126q34 0 34 25q0 16 -17 21t-41.5 5t-49.5 3.5t-42 22.5t-17 55q0 39 26 60t66 21
+h130v-57h-119q-36 0 -36 -25q0 -16 17.5 -20.5t42 -4t49 -2.5t42 -21.5t17.5 -54.5zM2304 407v-101q-24 -35 -88 -35h-125v58h125q33 0 33 25q0 13 -12.5 19t-31 5.5t-40 2t-40 8t-31 24t-12.5 48.5q0 39 26.5 60t66.5 21h129v-57h-118q-36 0 -36 -25q0 -20 29 -22t68.5 -5
+t56.5 -26zM2139 1008v-270h-92l-122 203v-203h-132l-26 60h-134l-25 -60h-75q-129 0 -129 133q0 138 133 138h63v-59q-7 0 -28 1t-28.5 0.5t-23 -2t-21.5 -6.5t-14.5 -13.5t-11.5 -23t-3 -33.5q0 -38 13.5 -58t49.5 -20h29l92 213h97l109 -256v256h99l114 -188v188h66z" />
+    <glyph glyph-name="_469" unicode="&#xf1f4;" horiz-adv-x="2304" 
+d="M745 630q0 -37 -25.5 -61.5t-62.5 -24.5q-29 0 -46.5 16t-17.5 44q0 37 25 62.5t62 25.5q28 0 46.5 -16.5t18.5 -45.5zM1530 779q0 -42 -22 -57t-66 -15l-32 -1l17 107q2 11 13 11h18q22 0 35 -2t25 -12.5t12 -30.5zM1881 630q0 -36 -25.5 -61t-61.5 -25q-29 0 -47 16
+t-18 44q0 37 25 62.5t62 25.5q28 0 46.5 -16.5t18.5 -45.5zM513 801q0 59 -38.5 85.5t-100.5 26.5h-160q-19 0 -21 -19l-65 -408q-1 -6 3 -11t10 -5h76q20 0 22 19l18 110q1 8 7 13t15 6.5t17 1.5t19 -1t14 -1q86 0 135 48.5t49 134.5zM822 489l41 261q1 6 -3 11t-10 5h-76
+q-14 0 -17 -33q-27 40 -95 40q-72 0 -122.5 -54t-50.5 -127q0 -59 34.5 -94t92.5 -35q28 0 58 12t48 32q-4 -12 -4 -21q0 -16 13 -16h69q19 0 22 19zM1269 752q0 5 -4 9.5t-9 4.5h-77q-11 0 -18 -10l-106 -156l-44 150q-5 16 -22 16h-75q-5 0 -9 -4.5t-4 -9.5q0 -2 19.5 -59
+t42 -123t23.5 -70q-82 -112 -82 -120q0 -13 13 -13h77q11 0 18 10l255 368q2 2 2 7zM1649 801q0 59 -38.5 85.5t-100.5 26.5h-159q-20 0 -22 -19l-65 -408q-1 -6 3 -11t10 -5h82q12 0 16 13l18 116q1 8 7 13t15 6.5t17 1.5t19 -1t14 -1q86 0 135 48.5t49 134.5zM1958 489
+l41 261q1 6 -3 11t-10 5h-76q-14 0 -17 -33q-26 40 -95 40q-72 0 -122.5 -54t-50.5 -127q0 -59 34.5 -94t92.5 -35q29 0 59 12t47 32q0 -1 -2 -9t-2 -12q0 -16 13 -16h69q19 0 22 19zM2176 898v1q0 14 -13 14h-74q-11 0 -13 -11l-65 -416l-1 -2q0 -5 4 -9.5t10 -4.5h66
+q19 0 21 19zM392 764q-5 -35 -26 -46t-60 -11l-33 -1l17 107q2 11 13 11h19q40 0 58 -11.5t12 -48.5zM2304 1280v-1280q0 -52 -38 -90t-90 -38h-2048q-52 0 -90 38t-38 90v1280q0 52 38 90t90 38h2048q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="_470" unicode="&#xf1f5;" horiz-adv-x="2304" 
+d="M1597 633q0 -69 -21 -106q-19 -35 -52 -35q-23 0 -41 9v224q29 30 57 30q57 0 57 -122zM2035 669h-110q6 98 56 98q51 0 54 -98zM476 534q0 59 -33 91.5t-101 57.5q-36 13 -52 24t-16 25q0 26 38 26q58 0 124 -33l18 112q-67 32 -149 32q-77 0 -123 -38q-48 -39 -48 -109
+q0 -58 32.5 -90.5t99.5 -56.5q39 -14 54.5 -25.5t15.5 -27.5q0 -31 -48 -31q-29 0 -70 12.5t-72 30.5l-18 -113q72 -41 168 -41q81 0 129 37q51 41 51 117zM771 749l19 111h-96v135l-129 -21l-18 -114l-46 -8l-17 -103h62v-219q0 -84 44 -120q38 -30 111 -30q32 0 79 11v118
+q-32 -7 -44 -7q-42 0 -42 50v197h77zM1087 724v139q-15 3 -28 3q-32 0 -55.5 -16t-33.5 -46l-10 56h-131v-471h150v306q26 31 82 31q16 0 26 -2zM1124 389h150v471h-150v-471zM1746 638q0 122 -45 179q-40 52 -111 52q-64 0 -117 -56l-8 47h-132v-645l150 25v151
+q36 -11 68 -11q83 0 134 56q61 65 61 202zM1278 986q0 33 -23 56t-56 23t-56 -23t-23 -56t23 -56.5t56 -23.5t56 23.5t23 56.5zM2176 629q0 113 -48 176q-50 64 -144 64q-96 0 -151.5 -66t-55.5 -180q0 -128 63 -188q55 -55 161 -55q101 0 160 40l-16 103q-57 -31 -128 -31
+q-43 0 -63 19q-23 19 -28 66h248q2 14 2 52zM2304 1280v-1280q0 -52 -38 -90t-90 -38h-2048q-52 0 -90 38t-38 90v1280q0 52 38 90t90 38h2048q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="_471" unicode="&#xf1f6;" horiz-adv-x="2048" 
+d="M1558 684q61 -356 298 -556q0 -52 -38 -90t-90 -38h-448q0 -106 -75 -181t-181 -75t-180.5 74.5t-75.5 180.5zM1024 -176q16 0 16 16t-16 16q-59 0 -101.5 42.5t-42.5 101.5q0 16 -16 16t-16 -16q0 -73 51.5 -124.5t124.5 -51.5zM2026 1424q8 -10 7.5 -23.5t-10.5 -22.5
+l-1872 -1622q-10 -8 -23.5 -7t-21.5 11l-84 96q-8 10 -7.5 23.5t10.5 21.5l186 161q-19 32 -19 66q50 42 91 88t85 119.5t74.5 158.5t50 206t19.5 260q0 152 117 282.5t307 158.5q-8 19 -8 39q0 40 28 68t68 28t68 -28t28 -68q0 -20 -8 -39q124 -18 219 -82.5t148 -157.5
+l418 363q10 8 23.5 7t21.5 -11z" />
+    <glyph glyph-name="_472" unicode="&#xf1f7;" horiz-adv-x="2048" 
+d="M1040 -160q0 16 -16 16q-59 0 -101.5 42.5t-42.5 101.5q0 16 -16 16t-16 -16q0 -73 51.5 -124.5t124.5 -51.5q16 0 16 16zM503 315l877 760q-42 88 -132.5 146.5t-223.5 58.5q-93 0 -169.5 -31.5t-121.5 -80.5t-69 -103t-24 -105q0 -384 -137 -645zM1856 128
+q0 -52 -38 -90t-90 -38h-448q0 -106 -75 -181t-181 -75t-180.5 74.5t-75.5 180.5l149 129h757q-166 187 -227 459l111 97q61 -356 298 -556zM1942 1520l84 -96q8 -10 7.5 -23.5t-10.5 -22.5l-1872 -1622q-10 -8 -23.5 -7t-21.5 11l-84 96q-8 10 -7.5 23.5t10.5 21.5l186 161
+q-19 32 -19 66q50 42 91 88t85 119.5t74.5 158.5t50 206t19.5 260q0 152 117 282.5t307 158.5q-8 19 -8 39q0 40 28 68t68 28t68 -28t28 -68q0 -20 -8 -39q124 -18 219 -82.5t148 -157.5l418 363q10 8 23.5 7t21.5 -11z" />
+    <glyph glyph-name="_473" unicode="&#xf1f8;" horiz-adv-x="1408" 
+d="M512 160v704q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-704q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM768 160v704q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-704q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM1024 160v704q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-704
+q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM480 1152h448l-48 117q-7 9 -17 11h-317q-10 -2 -17 -11zM1408 1120v-64q0 -14 -9 -23t-23 -9h-96v-948q0 -83 -47 -143.5t-113 -60.5h-832q-66 0 -113 58.5t-47 141.5v952h-96q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h309l70 167
+q15 37 54 63t79 26h320q40 0 79 -26t54 -63l70 -167h309q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="_474" unicode="&#xf1f9;" 
+d="M1150 462v-109q0 -50 -36.5 -89t-94 -60.5t-118 -32.5t-117.5 -11q-205 0 -342.5 139t-137.5 346q0 203 136 339t339 136q34 0 75.5 -4.5t93 -18t92.5 -34t69 -56.5t28 -81v-109q0 -16 -16 -16h-118q-16 0 -16 16v70q0 43 -65.5 67.5t-137.5 24.5q-140 0 -228.5 -91.5
+t-88.5 -237.5q0 -151 91.5 -249.5t233.5 -98.5q68 0 138 24t70 66v70q0 7 4.5 11.5t10.5 4.5h119q6 0 11 -4.5t5 -11.5zM768 1280q-130 0 -248.5 -51t-204 -136.5t-136.5 -204t-51 -248.5t51 -248.5t136.5 -204t204 -136.5t248.5 -51t248.5 51t204 136.5t136.5 204t51 248.5
+t-51 248.5t-136.5 204t-204 136.5t-248.5 51zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="_475" unicode="&#xf1fa;" 
+d="M972 761q0 108 -53.5 169t-147.5 61q-63 0 -124 -30.5t-110 -84.5t-79.5 -137t-30.5 -180q0 -112 53.5 -173t150.5 -61q96 0 176 66.5t122.5 166t42.5 203.5zM1536 640q0 -111 -37 -197t-98.5 -135t-131.5 -74.5t-145 -27.5q-6 0 -15.5 -0.5t-16.5 -0.5q-95 0 -142 53
+q-28 33 -33 83q-52 -66 -131.5 -110t-173.5 -44q-161 0 -249.5 95.5t-88.5 269.5q0 157 66 290t179 210.5t246 77.5q87 0 155 -35.5t106 -99.5l2 19l11 56q1 6 5.5 12t9.5 6h118q5 0 13 -11q5 -5 3 -16l-120 -614q-5 -24 -5 -48q0 -39 12.5 -52t44.5 -13q28 1 57 5.5t73 24
+t77 50t57 89.5t24 137q0 292 -174 466t-466 174q-130 0 -248.5 -51t-204 -136.5t-136.5 -204t-51 -248.5t51 -248.5t136.5 -204t204 -136.5t248.5 -51q228 0 405 144q11 9 24 8t21 -12l41 -49q8 -12 7 -24q-2 -13 -12 -22q-102 -83 -227.5 -128t-258.5 -45q-156 0 -298 61
+t-245 164t-164 245t-61 298t61 298t164 245t245 164t298 61q344 0 556 -212t212 -556z" />
+    <glyph glyph-name="_476" unicode="&#xf1fb;" horiz-adv-x="1792" 
+d="M1698 1442q94 -94 94 -226.5t-94 -225.5l-225 -223l104 -104q10 -10 10 -23t-10 -23l-210 -210q-10 -10 -23 -10t-23 10l-105 105l-603 -603q-37 -37 -90 -37h-203l-256 -128l-64 64l128 256v203q0 53 37 90l603 603l-105 105q-10 10 -10 23t10 23l210 210q10 10 23 10
+t23 -10l104 -104l223 225q93 94 225.5 94t226.5 -94zM512 64l576 576l-192 192l-576 -576v-192h192z" />
+    <glyph glyph-name="f1fc" unicode="&#xf1fc;" horiz-adv-x="1792" 
+d="M1615 1536q70 0 122.5 -46.5t52.5 -116.5q0 -63 -45 -151q-332 -629 -465 -752q-97 -91 -218 -91q-126 0 -216.5 92.5t-90.5 219.5q0 128 92 212l638 579q59 54 130 54zM706 502q39 -76 106.5 -130t150.5 -76l1 -71q4 -213 -129.5 -347t-348.5 -134q-123 0 -218 46.5
+t-152.5 127.5t-86.5 183t-29 220q7 -5 41 -30t62 -44.5t59 -36.5t46 -17q41 0 55 37q25 66 57.5 112.5t69.5 76t88 47.5t103 25.5t125 10.5z" />
+    <glyph glyph-name="_478" unicode="&#xf1fd;" horiz-adv-x="1792" 
+d="M1792 128v-384h-1792v384q45 0 85 14t59 27.5t47 37.5q30 27 51.5 38t56.5 11q24 0 44 -7t31 -15t33 -27q29 -25 47 -38t58 -27t86 -14q45 0 85 14.5t58 27t48 37.5q21 19 32.5 27t31 15t43.5 7q35 0 56.5 -11t51.5 -38q28 -24 47 -37.5t59 -27.5t85 -14t85 14t59 27.5
+t47 37.5q30 27 51.5 38t56.5 11q34 0 55.5 -11t51.5 -38q28 -24 47 -37.5t59 -27.5t85 -14zM1792 448v-192q-24 0 -44 7t-31 15t-33 27q-29 25 -47 38t-58 27t-85 14q-46 0 -86 -14t-58 -27t-47 -38q-22 -19 -33 -27t-31 -15t-44 -7q-35 0 -56.5 11t-51.5 38q-29 25 -47 38
+t-58 27t-86 14q-45 0 -85 -14.5t-58 -27t-48 -37.5q-21 -19 -32.5 -27t-31 -15t-43.5 -7q-35 0 -56.5 11t-51.5 38q-28 24 -47 37.5t-59 27.5t-85 14q-46 0 -86 -14t-58 -27t-47 -38q-30 -27 -51.5 -38t-56.5 -11v192q0 80 56 136t136 56h64v448h256v-448h256v448h256v-448
+h256v448h256v-448h64q80 0 136 -56t56 -136zM512 1312q0 -77 -36 -118.5t-92 -41.5q-53 0 -90.5 37.5t-37.5 90.5q0 29 9.5 51t23.5 34t31 28t31 31.5t23.5 44.5t9.5 67q38 0 83 -74t45 -150zM1024 1312q0 -77 -36 -118.5t-92 -41.5q-53 0 -90.5 37.5t-37.5 90.5
+q0 29 9.5 51t23.5 34t31 28t31 31.5t23.5 44.5t9.5 67q38 0 83 -74t45 -150zM1536 1312q0 -77 -36 -118.5t-92 -41.5q-53 0 -90.5 37.5t-37.5 90.5q0 29 9.5 51t23.5 34t31 28t31 31.5t23.5 44.5t9.5 67q38 0 83 -74t45 -150z" />
+    <glyph glyph-name="_479" unicode="&#xf1fe;" horiz-adv-x="2048" 
+d="M2048 0v-128h-2048v1536h128v-1408h1920zM1664 1024l256 -896h-1664v576l448 576l576 -576z" />
+    <glyph glyph-name="_480" unicode="&#xf200;" horiz-adv-x="1792" 
+d="M768 646l546 -546q-106 -108 -247.5 -168t-298.5 -60q-209 0 -385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103v-762zM955 640h773q0 -157 -60 -298.5t-168 -247.5zM1664 768h-768v768q209 0 385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="_481" unicode="&#xf201;" horiz-adv-x="2048" 
+d="M2048 0v-128h-2048v1536h128v-1408h1920zM1920 1248v-435q0 -21 -19.5 -29.5t-35.5 7.5l-121 121l-633 -633q-10 -10 -23 -10t-23 10l-233 233l-416 -416l-192 192l585 585q10 10 23 10t23 -10l233 -233l464 464l-121 121q-16 16 -7.5 35.5t29.5 19.5h435q14 0 23 -9
+t9 -23z" />
+    <glyph glyph-name="_482" unicode="&#xf202;" horiz-adv-x="1792" 
+d="M1292 832q0 -6 10 -41q10 -29 25 -49.5t41 -34t44 -20t55 -16.5q325 -91 325 -332q0 -146 -105.5 -242.5t-254.5 -96.5q-59 0 -111.5 18.5t-91.5 45.5t-77 74.5t-63 87.5t-53.5 103.5t-43.5 103t-39.5 106.5t-35.5 95q-32 81 -61.5 133.5t-73.5 96.5t-104 64t-142 20
+q-96 0 -183 -55.5t-138 -144.5t-51 -185q0 -160 106.5 -279.5t263.5 -119.5q177 0 258 95q56 63 83 116l84 -152q-15 -34 -44 -70l1 -1q-131 -152 -388 -152q-147 0 -269.5 79t-190.5 207.5t-68 274.5q0 105 43.5 206t116 176.5t172 121.5t204.5 46q87 0 159 -19t123.5 -50
+t95 -80t72.5 -99t58.5 -117t50.5 -124.5t50 -130.5t55 -127q96 -200 233 -200q81 0 138.5 48.5t57.5 128.5q0 42 -19 72t-50.5 46t-72.5 31.5t-84.5 27t-87.5 34t-81 52t-65 82t-39 122.5q-3 16 -3 33q0 110 87.5 192t198.5 78q78 -3 120.5 -14.5t90.5 -53.5h-1
+q12 -11 23 -24.5t26 -36t19 -27.5l-129 -99q-26 49 -54 70v1q-23 21 -97 21q-49 0 -84 -33t-35 -83z" />
+    <glyph glyph-name="_483" unicode="&#xf203;" 
+d="M1432 484q0 173 -234 239q-35 10 -53 16.5t-38 25t-29 46.5q0 2 -2 8.5t-3 12t-1 7.5q0 36 24.5 59.5t60.5 23.5q54 0 71 -15h-1q20 -15 39 -51l93 71q-39 54 -49 64q-33 29 -67.5 39t-85.5 10q-80 0 -142 -57.5t-62 -137.5q0 -7 2 -23q16 -96 64.5 -140t148.5 -73
+q29 -8 49 -15.5t45 -21.5t38.5 -34.5t13.5 -46.5v-5q1 -58 -40.5 -93t-100.5 -35q-97 0 -167 144q-23 47 -51.5 121.5t-48 125.5t-54 110.5t-74 95.5t-103.5 60.5t-147 24.5q-101 0 -192 -56t-144 -148t-50 -192v-1q4 -108 50.5 -199t133.5 -147.5t196 -56.5q186 0 279 110
+q20 27 31 51l-60 109q-42 -80 -99 -116t-146 -36q-115 0 -191 87t-76 204q0 105 82 189t186 84q112 0 170 -53.5t104 -172.5q8 -21 25.5 -68.5t28.5 -76.5t31.5 -74.5t38.5 -74t45.5 -62.5t55.5 -53.5t66 -33t80 -13.5q107 0 183 69.5t76 174.5zM1536 1120v-960
+q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="_484" unicode="&#xf204;" horiz-adv-x="2048" 
+d="M1152 640q0 104 -40.5 198.5t-109.5 163.5t-163.5 109.5t-198.5 40.5t-198.5 -40.5t-163.5 -109.5t-109.5 -163.5t-40.5 -198.5t40.5 -198.5t109.5 -163.5t163.5 -109.5t198.5 -40.5t198.5 40.5t163.5 109.5t109.5 163.5t40.5 198.5zM1920 640q0 104 -40.5 198.5
+t-109.5 163.5t-163.5 109.5t-198.5 40.5h-386q119 -90 188.5 -224t69.5 -288t-69.5 -288t-188.5 -224h386q104 0 198.5 40.5t163.5 109.5t109.5 163.5t40.5 198.5zM2048 640q0 -130 -51 -248.5t-136.5 -204t-204 -136.5t-248.5 -51h-768q-130 0 -248.5 51t-204 136.5
+t-136.5 204t-51 248.5t51 248.5t136.5 204t204 136.5t248.5 51h768q130 0 248.5 -51t204 -136.5t136.5 -204t51 -248.5z" />
+    <glyph glyph-name="_485" unicode="&#xf205;" horiz-adv-x="2048" 
+d="M0 640q0 130 51 248.5t136.5 204t204 136.5t248.5 51h768q130 0 248.5 -51t204 -136.5t136.5 -204t51 -248.5t-51 -248.5t-136.5 -204t-204 -136.5t-248.5 -51h-768q-130 0 -248.5 51t-204 136.5t-136.5 204t-51 248.5zM1408 128q104 0 198.5 40.5t163.5 109.5
+t109.5 163.5t40.5 198.5t-40.5 198.5t-109.5 163.5t-163.5 109.5t-198.5 40.5t-198.5 -40.5t-163.5 -109.5t-109.5 -163.5t-40.5 -198.5t40.5 -198.5t109.5 -163.5t163.5 -109.5t198.5 -40.5z" />
+    <glyph glyph-name="_486" unicode="&#xf206;" horiz-adv-x="2304" 
+d="M762 384h-314q-40 0 -57.5 35t6.5 67l188 251q-65 31 -137 31q-132 0 -226 -94t-94 -226t94 -226t226 -94q115 0 203 72.5t111 183.5zM576 512h186q-18 85 -75 148zM1056 512l288 384h-480l-99 -132q105 -103 126 -252h165zM2176 448q0 132 -94 226t-226 94
+q-60 0 -121 -24l174 -260q15 -23 10 -49t-27 -40q-15 -11 -36 -11q-35 0 -53 29l-174 260q-93 -95 -93 -225q0 -132 94 -226t226 -94t226 94t94 226zM2304 448q0 -185 -131.5 -316.5t-316.5 -131.5t-316.5 131.5t-131.5 316.5q0 97 39.5 183.5t109.5 149.5l-65 98l-353 -469
+q-18 -26 -51 -26h-197q-23 -164 -149 -274t-294 -110q-185 0 -316.5 131.5t-131.5 316.5t131.5 316.5t316.5 131.5q114 0 215 -55l137 183h-224q-26 0 -45 19t-19 45t19 45t45 19h384v-128h435l-85 128h-222q-26 0 -45 19t-19 45t19 45t45 19h256q33 0 53 -28l267 -400
+q91 44 192 44q185 0 316.5 -131.5t131.5 -316.5z" />
+    <glyph glyph-name="_487" unicode="&#xf207;" 
+d="M384 320q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1408 320q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1362 716l-72 384q-5 23 -22.5 37.5t-40.5 14.5
+h-918q-23 0 -40.5 -14.5t-22.5 -37.5l-72 -384q-5 -30 14 -53t49 -23h1062q30 0 49 23t14 53zM1136 1328q0 20 -14 34t-34 14h-640q-20 0 -34 -14t-14 -34t14 -34t34 -14h640q20 0 34 14t14 34zM1536 603v-603h-128v-128q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5
+t-37.5 90.5v128h-768v-128q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5t-37.5 90.5v128h-128v603q0 112 25 223l103 454q9 78 97.5 137t230 89t312.5 30t312.5 -30t230 -89t97.5 -137l105 -454q23 -102 23 -223z" />
+    <glyph glyph-name="_488" unicode="&#xf208;" horiz-adv-x="2048" 
+d="M1463 704q0 -35 -25 -60.5t-61 -25.5h-702q-36 0 -61 25.5t-25 60.5t25 60.5t61 25.5h702q36 0 61 -25.5t25 -60.5zM1677 704q0 86 -23 170h-982q-36 0 -61 25t-25 60q0 36 25 61t61 25h908q-88 143 -235 227t-320 84q-177 0 -327.5 -87.5t-238 -237.5t-87.5 -327
+q0 -86 23 -170h982q36 0 61 -25t25 -60q0 -36 -25 -61t-61 -25h-908q88 -143 235.5 -227t320.5 -84q132 0 253 51.5t208 139t139 208t52 253.5zM2048 959q0 -35 -25 -60t-61 -25h-131q17 -85 17 -170q0 -167 -65.5 -319.5t-175.5 -263t-262.5 -176t-319.5 -65.5
+q-246 0 -448.5 133t-301.5 350h-189q-36 0 -61 25t-25 61q0 35 25 60t61 25h132q-17 85 -17 170q0 167 65.5 319.5t175.5 263t262.5 176t320.5 65.5q245 0 447.5 -133t301.5 -350h188q36 0 61 -25t25 -61z" />
+    <glyph glyph-name="_489" unicode="&#xf209;" horiz-adv-x="1280" 
+d="M953 1158l-114 -328l117 -21q165 451 165 518q0 56 -38 56q-57 0 -130 -225zM654 471l33 -88q37 42 71 67l-33 5.5t-38.5 7t-32.5 8.5zM362 1367q0 -98 159 -521q17 10 49 10q15 0 75 -5l-121 351q-75 220 -123 220q-19 0 -29 -17.5t-10 -37.5zM283 608q0 -36 51.5 -119
+t117.5 -153t100 -70q14 0 25.5 13t11.5 27q0 24 -32 102q-13 32 -32 72t-47.5 89t-61.5 81t-62 32q-20 0 -45.5 -27t-25.5 -47zM125 273q0 -41 25 -104q59 -145 183.5 -227t281.5 -82q227 0 382 170q152 169 152 427q0 43 -1 67t-11.5 62t-30.5 56q-56 49 -211.5 75.5
+t-270.5 26.5q-37 0 -49 -11q-12 -5 -12 -35q0 -34 21.5 -60t55.5 -40t77.5 -23.5t87.5 -11.5t85 -4t70 0h23q24 0 40 -19q15 -19 19 -55q-28 -28 -96 -54q-61 -22 -93 -46q-64 -46 -108.5 -114t-44.5 -137q0 -31 18.5 -88.5t18.5 -87.5l-3 -12q-4 -12 -4 -14
+q-137 10 -146 216q-8 -2 -41 -2q2 -7 2 -21q0 -53 -40.5 -89.5t-94.5 -36.5q-82 0 -166.5 78t-84.5 159q0 34 33 67q52 -64 60 -76q77 -104 133 -104q12 0 26.5 8.5t14.5 20.5q0 34 -87.5 145t-116.5 111q-43 0 -70 -44.5t-27 -90.5zM11 264q0 101 42.5 163t136.5 88
+q-28 74 -28 104q0 62 61 123t122 61q29 0 70 -15q-163 462 -163 567q0 80 41 130.5t119 50.5q131 0 325 -581q6 -17 8 -23q6 16 29 79.5t43.5 118.5t54 127.5t64.5 123t70.5 86.5t76.5 36q71 0 112 -49t41 -122q0 -108 -159 -550q61 -15 100.5 -46t58.5 -78t26 -93.5
+t7 -110.5q0 -150 -47 -280t-132 -225t-211 -150t-278 -55q-111 0 -223 42q-149 57 -258 191.5t-109 286.5z" />
+    <glyph glyph-name="_490" unicode="&#xf20a;" horiz-adv-x="2048" 
+d="M785 528h207q-14 -158 -98.5 -248.5t-214.5 -90.5q-162 0 -254.5 116t-92.5 316q0 194 93 311.5t233 117.5q148 0 232 -87t97 -247h-203q-5 64 -35.5 99t-81.5 35q-57 0 -88.5 -60.5t-31.5 -177.5q0 -48 5 -84t18 -69.5t40 -51.5t66 -18q95 0 109 139zM1497 528h206
+q-14 -158 -98 -248.5t-214 -90.5q-162 0 -254.5 116t-92.5 316q0 194 93 311.5t233 117.5q148 0 232 -87t97 -247h-204q-4 64 -35 99t-81 35q-57 0 -88.5 -60.5t-31.5 -177.5q0 -48 5 -84t18 -69.5t39.5 -51.5t65.5 -18q49 0 76.5 38t33.5 101zM1856 647q0 207 -15.5 307
+t-60.5 161q-6 8 -13.5 14t-21.5 15t-16 11q-86 63 -697 63q-625 0 -710 -63q-5 -4 -17.5 -11.5t-21 -14t-14.5 -14.5q-45 -60 -60 -159.5t-15 -308.5q0 -208 15 -307.5t60 -160.5q6 -8 15 -15t20.5 -14t17.5 -12q44 -33 239.5 -49t470.5 -16q610 0 697 65q5 4 17 11t20.5 14
+t13.5 16q46 60 61 159t15 309zM2048 1408v-1536h-2048v1536h2048z" />
+    <glyph glyph-name="_491" unicode="&#xf20b;" 
+d="M992 912v-496q0 -14 -9 -23t-23 -9h-160q-14 0 -23 9t-9 23v496q0 112 -80 192t-192 80h-272v-1152q0 -14 -9 -23t-23 -9h-160q-14 0 -23 9t-9 23v1344q0 14 9 23t23 9h464q135 0 249 -66.5t180.5 -180.5t66.5 -249zM1376 1376v-880q0 -135 -66.5 -249t-180.5 -180.5
+t-249 -66.5h-464q-14 0 -23 9t-9 23v960q0 14 9 23t23 9h160q14 0 23 -9t9 -23v-768h272q112 0 192 80t80 192v880q0 14 9 23t23 9h160q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="_492" unicode="&#xf20c;" 
+d="M1311 694v-114q0 -24 -13.5 -38t-37.5 -14h-202q-24 0 -38 14t-14 38v114q0 24 14 38t38 14h202q24 0 37.5 -14t13.5 -38zM821 464v250q0 53 -32.5 85.5t-85.5 32.5h-133q-68 0 -96 -52q-28 52 -96 52h-130q-53 0 -85.5 -32.5t-32.5 -85.5v-250q0 -22 21 -22h55
+q22 0 22 22v230q0 24 13.5 38t38.5 14h94q24 0 38 -14t14 -38v-230q0 -22 21 -22h54q22 0 22 22v230q0 24 14 38t38 14h97q24 0 37.5 -14t13.5 -38v-230q0 -22 22 -22h55q21 0 21 22zM1410 560v154q0 53 -33 85.5t-86 32.5h-264q-53 0 -86 -32.5t-33 -85.5v-410
+q0 -21 22 -21h55q21 0 21 21v180q31 -42 94 -42h191q53 0 86 32.5t33 85.5zM1536 1176v-1072q0 -96 -68 -164t-164 -68h-1072q-96 0 -164 68t-68 164v1072q0 96 68 164t164 68h1072q96 0 164 -68t68 -164z" />
+    <glyph glyph-name="_493" unicode="&#xf20d;" 
+d="M915 450h-294l147 551zM1001 128h311l-324 1024h-440l-324 -1024h311l383 314zM1536 1120v-960q0 -118 -85 -203t-203 -85h-960q-118 0 -203 85t-85 203v960q0 118 85 203t203 85h960q118 0 203 -85t85 -203z" />
+    <glyph glyph-name="_494" unicode="&#xf20e;" horiz-adv-x="2048" 
+d="M2048 641q0 -21 -13 -36.5t-33 -19.5l-205 -356q3 -9 3 -18q0 -20 -12.5 -35.5t-32.5 -19.5l-193 -337q3 -8 3 -16q0 -23 -16.5 -40t-40.5 -17q-25 0 -41 18h-400q-17 -20 -43 -20t-43 20h-399q-17 -20 -43 -20q-23 0 -40 16.5t-17 40.5q0 8 4 20l-193 335
+q-20 4 -32.5 19.5t-12.5 35.5q0 9 3 18l-206 356q-20 5 -32.5 20.5t-12.5 35.5q0 21 13.5 36.5t33.5 19.5l199 344q0 1 -0.5 3t-0.5 3q0 36 34 51l209 363q-4 10 -4 18q0 24 17 40.5t40 16.5q26 0 44 -21h396q16 21 43 21t43 -21h398q18 21 44 21q23 0 40 -16.5t17 -40.5
+q0 -6 -4 -18l207 -358q23 -1 39 -17.5t16 -38.5q0 -13 -7 -27l187 -324q19 -4 31.5 -19.5t12.5 -35.5zM1063 -158h389l-342 354h-143l-342 -354h360q18 16 39 16t39 -16zM112 654q1 -4 1 -13q0 -10 -2 -15l208 -360l15 -6l188 199v347l-187 194q-13 -8 -29 -10zM986 1438
+h-388l190 -200l554 200h-280q-16 -16 -38 -16t-38 16zM1689 226q1 6 5 11l-64 68l-17 -79h76zM1583 226l22 105l-252 266l-296 -307l63 -64h463zM1495 -142l16 28l65 310h-427l333 -343q8 4 13 5zM578 -158h5l342 354h-373v-335l4 -6q14 -5 22 -13zM552 226h402l64 66
+l-309 321l-157 -166v-221zM359 226h163v189l-168 -177q4 -8 5 -12zM358 1051q0 -1 0.5 -2t0.5 -2q0 -16 -8 -29l171 -177v269zM552 1121v-311l153 -157l297 314l-223 236zM556 1425l-4 -8v-264l205 74l-191 201q-6 -2 -10 -3zM1447 1438h-16l-621 -224l213 -225zM1023 946
+l-297 -315l311 -319l296 307zM688 634l-136 141v-284zM1038 270l-42 -44h85zM1374 618l238 -251l132 624l-3 5l-1 1zM1718 1018q-8 13 -8 29v2l-216 376q-5 1 -13 5l-437 -463l310 -327zM522 1142v223l-163 -282zM522 196h-163l163 -283v283zM1607 196l-48 -227l130 227h-82
+zM1729 266l207 361q-2 10 -2 14q0 1 3 16l-171 296l-129 -612l77 -82q5 3 15 7z" />
+    <glyph glyph-name="f210" unicode="&#xf210;" 
+d="M0 856q0 131 91.5 226.5t222.5 95.5h742l352 358v-1470q0 -132 -91.5 -227t-222.5 -95h-780q-131 0 -222.5 95t-91.5 227v790zM1232 102l-176 180v425q0 46 -32 79t-78 33h-484q-46 0 -78 -33t-32 -79v-492q0 -46 32.5 -79.5t77.5 -33.5h770z" />
+    <glyph glyph-name="_496" unicode="&#xf211;" 
+d="M934 1386q-317 -121 -556 -362.5t-358 -560.5q-20 89 -20 176q0 208 102.5 384.5t278.5 279t384 102.5q82 0 169 -19zM1203 1267q93 -65 164 -155q-389 -113 -674.5 -400.5t-396.5 -676.5q-93 72 -155 162q112 386 395 671t667 399zM470 -67q115 356 379.5 622t619.5 384
+q40 -92 54 -195q-292 -120 -516 -345t-343 -518q-103 14 -194 52zM1536 -125q-193 50 -367 115q-135 -84 -290 -107q109 205 274 370.5t369 275.5q-21 -152 -101 -284q65 -175 115 -370z" />
+    <glyph glyph-name="f212" unicode="&#xf212;" horiz-adv-x="2048" 
+d="M1893 1144l155 -1272q-131 0 -257 57q-200 91 -393 91q-226 0 -374 -148q-148 148 -374 148q-193 0 -393 -91q-128 -57 -252 -57h-5l155 1272q224 127 482 127q233 0 387 -106q154 106 387 106q258 0 482 -127zM1398 157q129 0 232 -28.5t260 -93.5l-124 1021
+q-171 78 -368 78q-224 0 -374 -141q-150 141 -374 141q-197 0 -368 -78l-124 -1021q105 43 165.5 65t148.5 39.5t178 17.5q202 0 374 -108q172 108 374 108zM1438 191l-55 907q-211 -4 -359 -155q-152 155 -374 155q-176 0 -336 -66l-114 -941q124 51 228.5 76t221.5 25
+q209 0 374 -102q172 107 374 102z" />
+    <glyph glyph-name="_498" unicode="&#xf213;" horiz-adv-x="2048" 
+d="M1500 165v733q0 21 -15 36t-35 15h-93q-20 0 -35 -15t-15 -36v-733q0 -20 15 -35t35 -15h93q20 0 35 15t15 35zM1216 165v531q0 20 -15 35t-35 15h-101q-20 0 -35 -15t-15 -35v-531q0 -20 15 -35t35 -15h101q20 0 35 15t15 35zM924 165v429q0 20 -15 35t-35 15h-101
+q-20 0 -35 -15t-15 -35v-429q0 -20 15 -35t35 -15h101q20 0 35 15t15 35zM632 165v362q0 20 -15 35t-35 15h-101q-20 0 -35 -15t-15 -35v-362q0 -20 15 -35t35 -15h101q20 0 35 15t15 35zM2048 311q0 -166 -118 -284t-284 -118h-1244q-166 0 -284 118t-118 284
+q0 116 63 214.5t168 148.5q-10 34 -10 73q0 113 80.5 193.5t193.5 80.5q102 0 180 -67q45 183 194 300t338 117q149 0 275 -73.5t199.5 -199.5t73.5 -275q0 -66 -14 -122q135 -33 221 -142.5t86 -247.5z" />
+    <glyph glyph-name="_499" unicode="&#xf214;" 
+d="M0 1536h1536v-1392l-776 -338l-760 338v1392zM1436 209v926h-1336v-926l661 -294zM1436 1235v201h-1336v-201h1336zM181 937v-115h-37v115h37zM181 789v-115h-37v115h37zM181 641v-115h-37v115h37zM181 493v-115h-37v115h37zM181 345v-115h-37v115h37zM207 202l15 34
+l105 -47l-15 -33zM343 142l15 34l105 -46l-15 -34zM478 82l15 34l105 -46l-15 -34zM614 23l15 33l104 -46l-15 -34zM797 10l105 46l15 -33l-105 -47zM932 70l105 46l15 -34l-105 -46zM1068 130l105 46l15 -34l-105 -46zM1203 189l105 47l15 -34l-105 -46zM259 1389v-36h-114
+v36h114zM421 1389v-36h-115v36h115zM583 1389v-36h-115v36h115zM744 1389v-36h-114v36h114zM906 1389v-36h-114v36h114zM1068 1389v-36h-115v36h115zM1230 1389v-36h-115v36h115zM1391 1389v-36h-114v36h114zM181 1049v-79h-37v115h115v-36h-78zM421 1085v-36h-115v36h115z
+M583 1085v-36h-115v36h115zM744 1085v-36h-114v36h114zM906 1085v-36h-114v36h114zM1068 1085v-36h-115v36h115zM1230 1085v-36h-115v36h115zM1355 970v79h-78v36h115v-115h-37zM1355 822v115h37v-115h-37zM1355 674v115h37v-115h-37zM1355 526v115h37v-115h-37zM1355 378
+v115h37v-115h-37zM1355 230v115h37v-115h-37zM760 265q-129 0 -221 91.5t-92 221.5q0 129 92 221t221 92q130 0 221.5 -92t91.5 -221q0 -130 -91.5 -221.5t-221.5 -91.5zM595 646q0 -36 19.5 -56.5t49.5 -25t64 -7t64 -2t49.5 -9t19.5 -30.5q0 -49 -112 -49q-97 0 -123 51
+h-3l-31 -63q67 -42 162 -42q29 0 56.5 5t55.5 16t45.5 33t17.5 53q0 46 -27.5 69.5t-67.5 27t-79.5 3t-67 5t-27.5 25.5q0 21 20.5 33t40.5 15t41 3q34 0 70.5 -11t51.5 -34h3l30 58q-3 1 -21 8.5t-22.5 9t-19.5 7t-22 7t-20 4.5t-24 4t-23 1q-29 0 -56.5 -5t-54 -16.5
+t-43 -34t-16.5 -53.5z" />
+    <glyph glyph-name="_500" unicode="&#xf215;" horiz-adv-x="2048" 
+d="M863 504q0 112 -79.5 191.5t-191.5 79.5t-191 -79.5t-79 -191.5t79 -191t191 -79t191.5 79t79.5 191zM1726 505q0 112 -79 191t-191 79t-191.5 -79t-79.5 -191q0 -113 79.5 -192t191.5 -79t191 79.5t79 191.5zM2048 1314v-1348q0 -44 -31.5 -75.5t-76.5 -31.5h-1832
+q-45 0 -76.5 31.5t-31.5 75.5v1348q0 44 31.5 75.5t76.5 31.5h431q44 0 76 -31.5t32 -75.5v-161h754v161q0 44 32 75.5t76 31.5h431q45 0 76.5 -31.5t31.5 -75.5z" />
+    <glyph glyph-name="_501" unicode="&#xf216;" horiz-adv-x="2048" 
+d="M1430 953zM1690 749q148 0 253 -98.5t105 -244.5q0 -157 -109 -261.5t-267 -104.5q-85 0 -162 27.5t-138 73.5t-118 106t-109 126t-103.5 132.5t-108.5 126.5t-117 106t-136 73.5t-159 27.5q-154 0 -251.5 -91.5t-97.5 -244.5q0 -157 104 -250t263 -93q100 0 208 37.5
+t193 98.5q5 4 21 18.5t30 24t22 9.5q14 0 24.5 -10.5t10.5 -24.5q0 -24 -60 -77q-101 -88 -234.5 -142t-260.5 -54q-133 0 -245.5 58t-180 165t-67.5 241q0 205 141.5 341t347.5 136q120 0 226.5 -43.5t185.5 -113t151.5 -153t139 -167.5t133.5 -153.5t149.5 -113
+t172.5 -43.5q102 0 168.5 61.5t66.5 162.5q0 95 -64.5 159t-159.5 64q-30 0 -81.5 -18.5t-68.5 -18.5q-20 0 -35.5 15t-15.5 35q0 18 8.5 57t8.5 59q0 159 -107.5 263t-266.5 104q-58 0 -111.5 -18.5t-84 -40.5t-55.5 -40.5t-33 -18.5q-15 0 -25.5 10.5t-10.5 25.5
+q0 19 25 46q59 67 147 103.5t182 36.5q191 0 318 -125.5t127 -315.5q0 -37 -4 -66q57 15 115 15z" />
+    <glyph glyph-name="_502" unicode="&#xf217;" horiz-adv-x="1664" 
+d="M1216 832q0 26 -19 45t-45 19h-128v128q0 26 -19 45t-45 19t-45 -19t-19 -45v-128h-128q-26 0 -45 -19t-19 -45t19 -45t45 -19h128v-128q0 -26 19 -45t45 -19t45 19t19 45v128h128q26 0 45 19t19 45zM640 0q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5t-37.5 90.5
+t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1536 0q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1664 1088v-512q0 -24 -16 -42.5t-41 -21.5l-1044 -122q1 -7 4.5 -21.5t6 -26.5t2.5 -22q0 -16 -24 -64h920
+q26 0 45 -19t19 -45t-19 -45t-45 -19h-1024q-26 0 -45 19t-19 45q0 14 11 39.5t29.5 59.5t20.5 38l-177 823h-204q-26 0 -45 19t-19 45t19 45t45 19h256q16 0 28.5 -6.5t20 -15.5t13 -24.5t7.5 -26.5t5.5 -29.5t4.5 -25.5h1201q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="_503" unicode="&#xf218;" horiz-adv-x="1664" 
+d="M1280 832q0 26 -19 45t-45 19t-45 -19l-147 -146v293q0 26 -19 45t-45 19t-45 -19t-19 -45v-293l-147 146q-19 19 -45 19t-45 -19t-19 -45t19 -45l256 -256q19 -19 45 -19t45 19l256 256q19 19 19 45zM640 0q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5t-37.5 90.5
+t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1536 0q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1664 1088v-512q0 -24 -16 -42.5t-41 -21.5l-1044 -122q1 -7 4.5 -21.5t6 -26.5t2.5 -22q0 -16 -24 -64h920
+q26 0 45 -19t19 -45t-19 -45t-45 -19h-1024q-26 0 -45 19t-19 45q0 14 11 39.5t29.5 59.5t20.5 38l-177 823h-204q-26 0 -45 19t-19 45t19 45t45 19h256q16 0 28.5 -6.5t20 -15.5t13 -24.5t7.5 -26.5t5.5 -29.5t4.5 -25.5h1201q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="_504" unicode="&#xf219;" horiz-adv-x="2048" 
+d="M212 768l623 -665l-300 665h-323zM1024 -4l349 772h-698zM538 896l204 384h-262l-288 -384h346zM1213 103l623 665h-323zM683 896h682l-204 384h-274zM1510 896h346l-288 384h-262zM1651 1382l384 -512q14 -18 13 -41.5t-17 -40.5l-960 -1024q-18 -20 -47 -20t-47 20
+l-960 1024q-16 17 -17 40.5t13 41.5l384 512q18 26 51 26h1152q33 0 51 -26z" />
+    <glyph glyph-name="_505" unicode="&#xf21a;" horiz-adv-x="2048" 
+d="M1811 -19q19 19 45 19t45 -19l128 -128l-90 -90l-83 83l-83 -83q-18 -19 -45 -19t-45 19l-83 83l-83 -83q-19 -19 -45 -19t-45 19l-83 83l-83 -83q-19 -19 -45 -19t-45 19l-83 83l-83 -83q-19 -19 -45 -19t-45 19l-83 83l-83 -83q-19 -19 -45 -19t-45 19l-83 83l-83 -83
+q-19 -19 -45 -19t-45 19l-83 83l-83 -83q-19 -19 -45 -19t-45 19l-128 128l90 90l83 -83l83 83q19 19 45 19t45 -19l83 -83l83 83q19 19 45 19t45 -19l83 -83l83 83q19 19 45 19t45 -19l83 -83l83 83q19 19 45 19t45 -19l83 -83l83 83q19 19 45 19t45 -19l83 -83l83 83
+q19 19 45 19t45 -19l83 -83zM237 19q-19 -19 -45 -19t-45 19l-128 128l90 90l83 -82l83 82q19 19 45 19t45 -19l83 -82l64 64v293l-210 314q-17 26 -7 56.5t40 40.5l177 58v299h128v128h256v128h256v-128h256v-128h128v-299l177 -58q30 -10 40 -40.5t-7 -56.5l-210 -314
+v-293l19 18q19 19 45 19t45 -19l83 -82l83 82q19 19 45 19t45 -19l128 -128l-90 -90l-83 83l-83 -83q-18 -19 -45 -19t-45 19l-83 83l-83 -83q-19 -19 -45 -19t-45 19l-83 83l-83 -83q-19 -19 -45 -19t-45 19l-83 83l-83 -83q-19 -19 -45 -19t-45 19l-83 83l-83 -83
+q-19 -19 -45 -19t-45 19l-83 83l-83 -83q-19 -19 -45 -19t-45 19l-83 83zM640 1152v-128l384 128l384 -128v128h-128v128h-512v-128h-128z" />
+    <glyph glyph-name="_506" unicode="&#xf21b;" 
+d="M576 0l96 448l-96 128l-128 64zM832 0l128 640l-128 -64l-96 -128zM992 1010q-2 4 -4 6q-10 8 -96 8q-70 0 -167 -19q-7 -2 -21 -2t-21 2q-97 19 -167 19q-86 0 -96 -8q-2 -2 -4 -6q2 -18 4 -27q2 -3 7.5 -6.5t7.5 -10.5q2 -4 7.5 -20.5t7 -20.5t7.5 -17t8.5 -17t9 -14
+t12 -13.5t14 -9.5t17.5 -8t20.5 -4t24.5 -2q36 0 59 12.5t32.5 30t14.5 34.5t11.5 29.5t17.5 12.5h12q11 0 17.5 -12.5t11.5 -29.5t14.5 -34.5t32.5 -30t59 -12.5q13 0 24.5 2t20.5 4t17.5 8t14 9.5t12 13.5t9 14t8.5 17t7.5 17t7 20.5t7.5 20.5q2 7 7.5 10.5t7.5 6.5
+q2 9 4 27zM1408 131q0 -121 -73 -190t-194 -69h-874q-121 0 -194 69t-73 190q0 61 4.5 118t19 125.5t37.5 123.5t63.5 103.5t93.5 74.5l-90 220h214q-22 64 -22 128q0 12 2 32q-194 40 -194 96q0 57 210 99q17 62 51.5 134t70.5 114q32 37 76 37q30 0 84 -31t84 -31t84 31
+t84 31q44 0 76 -37q36 -42 70.5 -114t51.5 -134q210 -42 210 -99q0 -56 -194 -96q7 -81 -20 -160h214l-82 -225q63 -33 107.5 -96.5t65.5 -143.5t29 -151.5t8 -148.5z" />
+    <glyph glyph-name="_507" unicode="&#xf21c;" horiz-adv-x="2304" 
+d="M2301 500q12 -103 -22 -198.5t-99 -163.5t-158.5 -106t-196.5 -31q-161 11 -279.5 125t-134.5 274q-12 111 27.5 210.5t118.5 170.5l-71 107q-96 -80 -151 -194t-55 -244q0 -27 -18.5 -46.5t-45.5 -19.5h-256h-69q-23 -164 -149 -274t-294 -110q-185 0 -316.5 131.5
+t-131.5 316.5t131.5 316.5t316.5 131.5q76 0 152 -27l24 45q-123 110 -304 110h-64q-26 0 -45 19t-19 45t19 45t45 19h128q78 0 145 -13.5t116.5 -38.5t71.5 -39.5t51 -36.5h512h115l-85 128h-222q-30 0 -49 22.5t-14 52.5q4 23 23 38t43 15h253q33 0 53 -28l70 -105
+l114 114q19 19 46 19h101q26 0 45 -19t19 -45v-128q0 -26 -19 -45t-45 -19h-179l115 -172q131 63 275 36q143 -26 244 -134.5t118 -253.5zM448 128q115 0 203 72.5t111 183.5h-314q-35 0 -55 31q-18 32 -1 63l147 277q-47 13 -91 13q-132 0 -226 -94t-94 -226t94 -226
+t226 -94zM1856 128q132 0 226 94t94 226t-94 226t-226 94q-60 0 -121 -24l174 -260q15 -23 10 -49t-27 -40q-15 -11 -36 -11q-35 0 -53 29l-174 260q-93 -95 -93 -225q0 -132 94 -226t226 -94z" />
+    <glyph glyph-name="_508" unicode="&#xf21d;" 
+d="M1408 0q0 -63 -61.5 -113.5t-164 -81t-225 -46t-253.5 -15.5t-253.5 15.5t-225 46t-164 81t-61.5 113.5q0 49 33 88.5t91 66.5t118 44.5t131 29.5q26 5 48 -10.5t26 -41.5q5 -26 -10.5 -48t-41.5 -26q-58 -10 -106 -23.5t-76.5 -25.5t-48.5 -23.5t-27.5 -19.5t-8.5 -12
+q3 -11 27 -26.5t73 -33t114 -32.5t160.5 -25t201.5 -10t201.5 10t160.5 25t114 33t73 33.5t27 27.5q-1 4 -8.5 11t-27.5 19t-48.5 23.5t-76.5 25t-106 23.5q-26 4 -41.5 26t-10.5 48q4 26 26 41.5t48 10.5q71 -12 131 -29.5t118 -44.5t91 -66.5t33 -88.5zM1024 896v-384
+q0 -26 -19 -45t-45 -19h-64v-384q0 -26 -19 -45t-45 -19h-256q-26 0 -45 19t-19 45v384h-64q-26 0 -45 19t-19 45v384q0 53 37.5 90.5t90.5 37.5h384q53 0 90.5 -37.5t37.5 -90.5zM928 1280q0 -93 -65.5 -158.5t-158.5 -65.5t-158.5 65.5t-65.5 158.5t65.5 158.5t158.5 65.5
+t158.5 -65.5t65.5 -158.5z" />
+    <glyph glyph-name="_509" unicode="&#xf21e;" horiz-adv-x="1792" 
+d="M1280 512h305q-5 -6 -10 -10.5t-9 -7.5l-3 -4l-623 -600q-18 -18 -44 -18t-44 18l-624 602q-5 2 -21 20h369q22 0 39.5 13.5t22.5 34.5l70 281l190 -667q6 -20 23 -33t39 -13q21 0 38 13t23 33l146 485l56 -112q18 -35 57 -35zM1792 940q0 -145 -103 -300h-369l-111 221
+q-8 17 -25.5 27t-36.5 8q-45 -5 -56 -46l-129 -430l-196 686q-6 20 -23.5 33t-39.5 13t-39 -13.5t-22 -34.5l-116 -464h-423q-103 155 -103 300q0 220 127 344t351 124q62 0 126.5 -21.5t120 -58t95.5 -68.5t76 -68q36 36 76 68t95.5 68.5t120 58t126.5 21.5q224 0 351 -124
+t127 -344z" />
+    <glyph glyph-name="venus" unicode="&#xf221;" horiz-adv-x="1280" 
+d="M1152 960q0 -221 -147.5 -384.5t-364.5 -187.5v-260h224q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-224v-224q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v224h-224q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h224v260q-150 16 -271.5 103t-186 224t-52.5 292
+q11 134 80.5 249t182 188t245.5 88q170 19 319 -54t236 -212t87 -306zM128 960q0 -185 131.5 -316.5t316.5 -131.5t316.5 131.5t131.5 316.5t-131.5 316.5t-316.5 131.5t-316.5 -131.5t-131.5 -316.5z" />
+    <glyph glyph-name="_511" unicode="&#xf222;" 
+d="M1472 1408q26 0 45 -19t19 -45v-416q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v262l-382 -383q126 -156 126 -359q0 -117 -45.5 -223.5t-123 -184t-184 -123t-223.5 -45.5t-223.5 45.5t-184 123t-123 184t-45.5 223.5t45.5 223.5t123 184t184 123t223.5 45.5
+q203 0 359 -126l382 382h-261q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h416zM576 0q185 0 316.5 131.5t131.5 316.5t-131.5 316.5t-316.5 131.5t-316.5 -131.5t-131.5 -316.5t131.5 -316.5t316.5 -131.5z" />
+    <glyph glyph-name="_512" unicode="&#xf223;" horiz-adv-x="1280" 
+d="M830 1220q145 -72 233.5 -210.5t88.5 -305.5q0 -221 -147.5 -384.5t-364.5 -187.5v-132h96q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-96v-96q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v96h-96q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h96v132q-217 24 -364.5 187.5
+t-147.5 384.5q0 167 88.5 305.5t233.5 210.5q-165 96 -228 273q-6 16 3.5 29.5t26.5 13.5h69q21 0 29 -20q44 -106 140 -171t214 -65t214 65t140 171q8 20 37 20h61q17 0 26.5 -13.5t3.5 -29.5q-63 -177 -228 -273zM576 256q185 0 316.5 131.5t131.5 316.5t-131.5 316.5
+t-316.5 131.5t-316.5 -131.5t-131.5 -316.5t131.5 -316.5t316.5 -131.5z" />
+    <glyph glyph-name="_513" unicode="&#xf224;" 
+d="M1024 1504q0 14 9 23t23 9h288q26 0 45 -19t19 -45v-288q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v134l-254 -255q126 -158 126 -359q0 -221 -147.5 -384.5t-364.5 -187.5v-132h96q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-96v-96q0 -14 -9 -23t-23 -9h-64
+q-14 0 -23 9t-9 23v96h-96q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h96v132q-149 16 -270.5 103t-186.5 223.5t-53 291.5q16 204 160 353.5t347 172.5q118 14 228 -19t198 -103l255 254h-134q-14 0 -23 9t-9 23v64zM576 256q185 0 316.5 131.5t131.5 316.5t-131.5 316.5
+t-316.5 131.5t-316.5 -131.5t-131.5 -316.5t131.5 -316.5t316.5 -131.5z" />
+    <glyph glyph-name="_514" unicode="&#xf225;" horiz-adv-x="1792" 
+d="M1280 1504q0 14 9 23t23 9h288q26 0 45 -19t19 -45v-288q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v134l-254 -255q126 -158 126 -359q0 -221 -147.5 -384.5t-364.5 -187.5v-132h96q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-96v-96q0 -14 -9 -23t-23 -9h-64
+q-14 0 -23 9t-9 23v96h-96q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h96v132q-217 24 -364.5 187.5t-147.5 384.5q0 201 126 359l-52 53l-101 -111q-9 -10 -22 -10.5t-23 7.5l-48 44q-10 8 -10.5 21.5t8.5 23.5l105 115l-111 112v-134q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9
+t-9 23v288q0 26 19 45t45 19h288q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-133l106 -107l86 94q9 10 22 10.5t23 -7.5l48 -44q10 -8 10.5 -21.5t-8.5 -23.5l-90 -99l57 -56q158 126 359 126t359 -126l255 254h-134q-14 0 -23 9t-9 23v64zM832 256q185 0 316.5 131.5
+t131.5 316.5t-131.5 316.5t-316.5 131.5t-316.5 -131.5t-131.5 -316.5t131.5 -316.5t316.5 -131.5z" />
+    <glyph glyph-name="_515" unicode="&#xf226;" horiz-adv-x="1792" 
+d="M1790 1007q12 -155 -52.5 -292t-186 -224t-271.5 -103v-260h224q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-224v-224q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v224h-512v-224q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v224h-224q-14 0 -23 9t-9 23v64q0 14 9 23
+t23 9h224v260q-150 16 -271.5 103t-186 224t-52.5 292q17 206 164.5 356.5t352.5 169.5q206 21 377 -94q171 115 377 94q205 -19 352.5 -169.5t164.5 -356.5zM896 647q128 131 128 313t-128 313q-128 -131 -128 -313t128 -313zM576 512q115 0 218 57q-154 165 -154 391
+q0 224 154 391q-103 57 -218 57q-185 0 -316.5 -131.5t-131.5 -316.5t131.5 -316.5t316.5 -131.5zM1152 128v260q-137 15 -256 94q-119 -79 -256 -94v-260h512zM1216 512q185 0 316.5 131.5t131.5 316.5t-131.5 316.5t-316.5 131.5q-115 0 -218 -57q154 -167 154 -391
+q0 -226 -154 -391q103 -57 218 -57z" />
+    <glyph glyph-name="_516" unicode="&#xf227;" horiz-adv-x="1920" 
+d="M1536 1120q0 14 9 23t23 9h288q26 0 45 -19t19 -45v-288q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v134l-254 -255q76 -95 107.5 -214t9.5 -247q-31 -182 -166 -312t-318 -156q-210 -29 -384.5 80t-241.5 300q-117 6 -221 57.5t-177.5 133t-113.5 192.5t-32 230
+q9 135 78 252t182 191.5t248 89.5q118 14 227.5 -19t198.5 -103l255 254h-134q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h288q26 0 45 -19t19 -45v-288q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v134l-254 -255q59 -74 93 -169q182 -9 328 -124l255 254h-134q-14 0 -23 9
+t-9 23v64zM1024 704q0 20 -4 58q-162 -25 -271 -150t-109 -292q0 -20 4 -58q162 25 271 150t109 292zM128 704q0 -168 111 -294t276 -149q-3 29 -3 59q0 210 135 369.5t338 196.5q-53 120 -163.5 193t-245.5 73q-185 0 -316.5 -131.5t-131.5 -316.5zM1088 -128
+q185 0 316.5 131.5t131.5 316.5q0 168 -111 294t-276 149q3 -28 3 -59q0 -210 -135 -369.5t-338 -196.5q53 -120 163.5 -193t245.5 -73z" />
+    <glyph glyph-name="_517" unicode="&#xf228;" horiz-adv-x="2048" 
+d="M1664 1504q0 14 9 23t23 9h288q26 0 45 -19t19 -45v-288q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v134l-254 -255q76 -95 107.5 -214t9.5 -247q-32 -180 -164.5 -310t-313.5 -157q-223 -34 -409 90q-117 -78 -256 -93v-132h96q14 0 23 -9t9 -23v-64q0 -14 -9 -23
+t-23 -9h-96v-96q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v96h-96q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h96v132q-155 17 -279.5 109.5t-187 237.5t-39.5 307q25 187 159.5 322.5t320.5 164.5q224 34 410 -90q146 97 320 97q201 0 359 -126l255 254h-134q-14 0 -23 9
+t-9 23v64zM896 391q128 131 128 313t-128 313q-128 -131 -128 -313t128 -313zM128 704q0 -185 131.5 -316.5t316.5 -131.5q117 0 218 57q-154 167 -154 391t154 391q-101 57 -218 57q-185 0 -316.5 -131.5t-131.5 -316.5zM1216 256q185 0 316.5 131.5t131.5 316.5
+t-131.5 316.5t-316.5 131.5q-117 0 -218 -57q154 -167 154 -391t-154 -391q101 -57 218 -57z" />
+    <glyph glyph-name="_518" unicode="&#xf229;" 
+d="M1472 1408q26 0 45 -19t19 -45v-416q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v262l-213 -214l140 -140q9 -10 9 -23t-9 -22l-46 -46q-9 -9 -22 -9t-23 9l-140 141l-78 -79q126 -156 126 -359q0 -117 -45.5 -223.5t-123 -184t-184 -123t-223.5 -45.5t-223.5 45.5
+t-184 123t-123 184t-45.5 223.5t45.5 223.5t123 184t184 123t223.5 45.5q203 0 359 -126l78 78l-172 172q-9 10 -9 23t9 22l46 46q9 9 22 9t23 -9l172 -172l213 213h-261q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h416zM576 0q185 0 316.5 131.5t131.5 316.5t-131.5 316.5
+t-316.5 131.5t-316.5 -131.5t-131.5 -316.5t131.5 -316.5t316.5 -131.5z" />
+    <glyph glyph-name="_519" unicode="&#xf22a;" horiz-adv-x="1280" 
+d="M640 892q217 -24 364.5 -187.5t147.5 -384.5q0 -167 -87 -306t-236 -212t-319 -54q-133 15 -245.5 88t-182 188t-80.5 249q-12 155 52.5 292t186 224t271.5 103v132h-160q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h160v165l-92 -92q-10 -9 -23 -9t-22 9l-46 46q-9 9 -9 22
+t9 23l202 201q19 19 45 19t45 -19l202 -201q9 -10 9 -23t-9 -22l-46 -46q-9 -9 -22 -9t-23 9l-92 92v-165h160q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-160v-132zM576 -128q185 0 316.5 131.5t131.5 316.5t-131.5 316.5t-316.5 131.5t-316.5 -131.5t-131.5 -316.5
+t131.5 -316.5t316.5 -131.5z" />
+    <glyph glyph-name="_520" unicode="&#xf22b;" horiz-adv-x="2048" 
+d="M1901 621q19 -19 19 -45t-19 -45l-294 -294q-9 -10 -22.5 -10t-22.5 10l-45 45q-10 9 -10 22.5t10 22.5l185 185h-294v-224q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v224h-132q-24 -217 -187.5 -364.5t-384.5 -147.5q-167 0 -306 87t-212 236t-54 319q15 133 88 245.5
+t188 182t249 80.5q155 12 292 -52.5t224 -186t103 -271.5h132v224q0 14 9 23t23 9h64q14 0 23 -9t9 -23v-224h294l-185 185q-10 9 -10 22.5t10 22.5l45 45q9 10 22.5 10t22.5 -10zM576 128q185 0 316.5 131.5t131.5 316.5t-131.5 316.5t-316.5 131.5t-316.5 -131.5
+t-131.5 -316.5t131.5 -316.5t316.5 -131.5z" />
+    <glyph glyph-name="_521" unicode="&#xf22c;" horiz-adv-x="1280" 
+d="M1152 960q0 -221 -147.5 -384.5t-364.5 -187.5v-612q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v612q-217 24 -364.5 187.5t-147.5 384.5q0 117 45.5 223.5t123 184t184 123t223.5 45.5t223.5 -45.5t184 -123t123 -184t45.5 -223.5zM576 512q185 0 316.5 131.5
+t131.5 316.5t-131.5 316.5t-316.5 131.5t-316.5 -131.5t-131.5 -316.5t131.5 -316.5t316.5 -131.5z" />
+    <glyph glyph-name="_522" unicode="&#xf22d;" horiz-adv-x="1280" 
+d="M1024 576q0 185 -131.5 316.5t-316.5 131.5t-316.5 -131.5t-131.5 -316.5t131.5 -316.5t316.5 -131.5t316.5 131.5t131.5 316.5zM1152 576q0 -117 -45.5 -223.5t-123 -184t-184 -123t-223.5 -45.5t-223.5 45.5t-184 123t-123 184t-45.5 223.5t45.5 223.5t123 184t184 123
+t223.5 45.5t223.5 -45.5t184 -123t123 -184t45.5 -223.5z" />
+    <glyph glyph-name="_523" unicode="&#xf22e;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="_524" unicode="&#xf22f;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="_525" unicode="&#xf230;" 
+d="M1451 1408q35 0 60 -25t25 -60v-1366q0 -35 -25 -60t-60 -25h-391v595h199l30 232h-229v148q0 56 23.5 84t91.5 28l122 1v207q-63 9 -178 9q-136 0 -217.5 -80t-81.5 -226v-171h-200v-232h200v-595h-735q-35 0 -60 25t-25 60v1366q0 35 25 60t60 25h1366z" />
+    <glyph glyph-name="_526" unicode="&#xf231;" horiz-adv-x="1280" 
+d="M0 939q0 108 37.5 203.5t103.5 166.5t152 123t185 78t202 26q158 0 294 -66.5t221 -193.5t85 -287q0 -96 -19 -188t-60 -177t-100 -149.5t-145 -103t-189 -38.5q-68 0 -135 32t-96 88q-10 -39 -28 -112.5t-23.5 -95t-20.5 -71t-26 -71t-32 -62.5t-46 -77.5t-62 -86.5
+l-14 -5l-9 10q-15 157 -15 188q0 92 21.5 206.5t66.5 287.5t52 203q-32 65 -32 169q0 83 52 156t132 73q61 0 95 -40.5t34 -102.5q0 -66 -44 -191t-44 -187q0 -63 45 -104.5t109 -41.5q55 0 102 25t78.5 68t56 95t38 110.5t20 111t6.5 99.5q0 173 -109.5 269.5t-285.5 96.5
+q-200 0 -334 -129.5t-134 -328.5q0 -44 12.5 -85t27 -65t27 -45.5t12.5 -30.5q0 -28 -15 -73t-37 -45q-2 0 -17 3q-51 15 -90.5 56t-61 94.5t-32.5 108t-11 106.5z" />
+    <glyph glyph-name="_527" unicode="&#xf232;" 
+d="M985 562q13 0 97.5 -44t89.5 -53q2 -5 2 -15q0 -33 -17 -76q-16 -39 -71 -65.5t-102 -26.5q-57 0 -190 62q-98 45 -170 118t-148 185q-72 107 -71 194v8q3 91 74 158q24 22 52 22q6 0 18 -1.5t19 -1.5q19 0 26.5 -6.5t15.5 -27.5q8 -20 33 -88t25 -75q0 -21 -34.5 -57.5
+t-34.5 -46.5q0 -7 5 -15q34 -73 102 -137q56 -53 151 -101q12 -7 22 -7q15 0 54 48.5t52 48.5zM782 32q127 0 243.5 50t200.5 134t134 200.5t50 243.5t-50 243.5t-134 200.5t-200.5 134t-243.5 50t-243.5 -50t-200.5 -134t-134 -200.5t-50 -243.5q0 -203 120 -368l-79 -233
+l242 77q158 -104 345 -104zM782 1414q153 0 292.5 -60t240.5 -161t161 -240.5t60 -292.5t-60 -292.5t-161 -240.5t-240.5 -161t-292.5 -60q-195 0 -365 94l-417 -134l136 405q-108 178 -108 389q0 153 60 292.5t161 240.5t240.5 161t292.5 60z" />
+    <glyph glyph-name="_528" unicode="&#xf233;" horiz-adv-x="1792" 
+d="M128 128h1024v128h-1024v-128zM128 640h1024v128h-1024v-128zM1696 192q0 40 -28 68t-68 28t-68 -28t-28 -68t28 -68t68 -28t68 28t28 68zM128 1152h1024v128h-1024v-128zM1696 704q0 40 -28 68t-68 28t-68 -28t-28 -68t28 -68t68 -28t68 28t28 68zM1696 1216
+q0 40 -28 68t-68 28t-68 -28t-28 -68t28 -68t68 -28t68 28t28 68zM1792 384v-384h-1792v384h1792zM1792 896v-384h-1792v384h1792zM1792 1408v-384h-1792v384h1792z" />
+    <glyph glyph-name="_529" unicode="&#xf234;" horiz-adv-x="2048" 
+d="M704 640q-159 0 -271.5 112.5t-112.5 271.5t112.5 271.5t271.5 112.5t271.5 -112.5t112.5 -271.5t-112.5 -271.5t-271.5 -112.5zM1664 512h352q13 0 22.5 -9.5t9.5 -22.5v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-352v-352q0 -13 -9.5 -22.5t-22.5 -9.5h-192q-13 0 -22.5 9.5
+t-9.5 22.5v352h-352q-13 0 -22.5 9.5t-9.5 22.5v192q0 13 9.5 22.5t22.5 9.5h352v352q0 13 9.5 22.5t22.5 9.5h192q13 0 22.5 -9.5t9.5 -22.5v-352zM928 288q0 -52 38 -90t90 -38h256v-238q-68 -50 -171 -50h-874q-121 0 -194 69t-73 190q0 53 3.5 103.5t14 109t26.5 108.5
+t43 97.5t62 81t85.5 53.5t111.5 20q19 0 39 -17q79 -61 154.5 -91.5t164.5 -30.5t164.5 30.5t154.5 91.5q20 17 39 17q132 0 217 -96h-223q-52 0 -90 -38t-38 -90v-192z" />
+    <glyph glyph-name="_530" unicode="&#xf235;" horiz-adv-x="2048" 
+d="M704 640q-159 0 -271.5 112.5t-112.5 271.5t112.5 271.5t271.5 112.5t271.5 -112.5t112.5 -271.5t-112.5 -271.5t-271.5 -112.5zM1781 320l249 -249q9 -9 9 -23q0 -13 -9 -22l-136 -136q-9 -9 -22 -9q-14 0 -23 9l-249 249l-249 -249q-9 -9 -23 -9q-13 0 -22 9l-136 136
+q-9 9 -9 22q0 14 9 23l249 249l-249 249q-9 9 -9 23q0 13 9 22l136 136q9 9 22 9q14 0 23 -9l249 -249l249 249q9 9 23 9q13 0 22 -9l136 -136q9 -9 9 -22q0 -14 -9 -23zM1283 320l-181 -181q-37 -37 -37 -91q0 -53 37 -90l83 -83q-21 -3 -44 -3h-874q-121 0 -194 69
+t-73 190q0 53 3.5 103.5t14 109t26.5 108.5t43 97.5t62 81t85.5 53.5t111.5 20q19 0 39 -17q154 -122 319 -122t319 122q20 17 39 17q28 0 57 -6q-28 -27 -41 -50t-13 -56q0 -54 37 -91z" />
+    <glyph glyph-name="_531" unicode="&#xf236;" horiz-adv-x="2048" 
+d="M256 512h1728q26 0 45 -19t19 -45v-448h-256v256h-1536v-256h-256v1216q0 26 19 45t45 19h128q26 0 45 -19t19 -45v-704zM832 832q0 106 -75 181t-181 75t-181 -75t-75 -181t75 -181t181 -75t181 75t75 181zM2048 576v64q0 159 -112.5 271.5t-271.5 112.5h-704
+q-26 0 -45 -19t-19 -45v-384h1152z" />
+    <glyph glyph-name="_532" unicode="&#xf237;" 
+d="M1536 1536l-192 -448h192v-192h-274l-55 -128h329v-192h-411l-357 -832l-357 832h-411v192h329l-55 128h-274v192h192l-192 448h256l323 -768h378l323 768h256zM768 320l108 256h-216z" />
+    <glyph glyph-name="_533" unicode="&#xf238;" 
+d="M1088 1536q185 0 316.5 -93.5t131.5 -226.5v-896q0 -130 -125.5 -222t-305.5 -97l213 -202q16 -15 8 -35t-30 -20h-1056q-22 0 -30 20t8 35l213 202q-180 5 -305.5 97t-125.5 222v896q0 133 131.5 226.5t316.5 93.5h640zM768 192q80 0 136 56t56 136t-56 136t-136 56
+t-136 -56t-56 -136t56 -136t136 -56zM1344 768v512h-1152v-512h1152z" />
+    <glyph glyph-name="_534" unicode="&#xf239;" 
+d="M1088 1536q185 0 316.5 -93.5t131.5 -226.5v-896q0 -130 -125.5 -222t-305.5 -97l213 -202q16 -15 8 -35t-30 -20h-1056q-22 0 -30 20t8 35l213 202q-180 5 -305.5 97t-125.5 222v896q0 133 131.5 226.5t316.5 93.5h640zM288 224q66 0 113 47t47 113t-47 113t-113 47
+t-113 -47t-47 -113t47 -113t113 -47zM704 768v512h-544v-512h544zM1248 224q66 0 113 47t47 113t-47 113t-113 47t-113 -47t-47 -113t47 -113t113 -47zM1408 768v512h-576v-512h576z" />
+    <glyph glyph-name="_535" unicode="&#xf23a;" horiz-adv-x="1792" 
+d="M597 1115v-1173q0 -25 -12.5 -42.5t-36.5 -17.5q-17 0 -33 8l-465 233q-21 10 -35.5 33.5t-14.5 46.5v1140q0 20 10 34t29 14q14 0 44 -15l511 -256q3 -3 3 -5zM661 1014l534 -866l-534 266v600zM1792 996v-1054q0 -25 -14 -40.5t-38 -15.5t-47 13l-441 220zM1789 1116
+q0 -3 -256.5 -419.5t-300.5 -487.5l-390 634l324 527q17 28 52 28q14 0 26 -6l541 -270q4 -2 4 -6z" />
+    <glyph glyph-name="_536" unicode="&#xf23b;" 
+d="M809 532l266 499h-112l-157 -312q-24 -48 -44 -92l-42 92l-155 312h-120l263 -493v-324h101v318zM1536 1408v-1536h-1536v1536h1536z" />
+    <glyph glyph-name="_537" unicode="&#xf23c;" horiz-adv-x="2296" 
+d="M478 -139q-8 -16 -27 -34.5t-37 -25.5q-25 -9 -51.5 3.5t-28.5 31.5q-1 22 40 55t68 38q23 4 34 -21.5t2 -46.5zM1819 -139q7 -16 26 -34.5t38 -25.5q25 -9 51.5 3.5t27.5 31.5q2 22 -39.5 55t-68.5 38q-22 4 -33 -21.5t-2 -46.5zM1867 -30q13 -27 56.5 -59.5t77.5 -41.5
+q45 -13 82 4.5t37 50.5q0 46 -67.5 100.5t-115.5 59.5q-40 5 -63.5 -37.5t-6.5 -76.5zM428 -30q-13 -27 -56 -59.5t-77 -41.5q-45 -13 -82 4.5t-37 50.5q0 46 67.5 100.5t115.5 59.5q40 5 63 -37.5t6 -76.5zM1158 1094h1q-41 0 -76 -15q27 -8 44 -30.5t17 -49.5
+q0 -35 -27 -60t-65 -25q-52 0 -80 43q-5 -23 -5 -42q0 -74 56 -126.5t135 -52.5q80 0 136 52.5t56 126.5t-56 126.5t-136 52.5zM1462 1312q-99 109 -220.5 131.5t-245.5 -44.5q27 60 82.5 96.5t118 39.5t121.5 -17t99.5 -74.5t44.5 -131.5zM2212 73q8 -11 -11 -42
+q7 -23 7 -40q1 -56 -44.5 -112.5t-109.5 -91.5t-118 -37q-48 -2 -92 21.5t-66 65.5q-687 -25 -1259 0q-23 -41 -66.5 -65t-92.5 -22q-86 3 -179.5 80.5t-92.5 160.5q2 22 7 40q-19 31 -11 42q6 10 31 1q14 22 41 51q-7 29 2 38q11 10 39 -4q29 20 59 34q0 29 13 37
+q23 12 51 -16q35 5 61 -2q18 -4 38 -19v73q-11 0 -18 2q-53 10 -97 44.5t-55 87.5q-9 38 0 81q15 62 93 95q2 17 19 35.5t36 23.5t33 -7.5t19 -30.5h13q46 -5 60 -23q3 -3 5 -7q10 1 30.5 3.5t30.5 3.5q-15 11 -30 17q-23 40 -91 43q0 6 1 10q-62 2 -118.5 18.5t-84.5 47.5
+q-32 36 -42.5 92t-2.5 112q16 126 90 179q23 16 52 4.5t32 -40.5q0 -1 1.5 -14t2.5 -21t3 -20t5.5 -19t8.5 -10q27 -14 76 -12q48 46 98 74q-40 4 -162 -14l47 46q61 58 163 111q145 73 282 86q-20 8 -41 15.5t-47 14t-42.5 10.5t-47.5 11t-43 10q595 126 904 -139
+q98 -84 158 -222q85 -10 121 9h1q5 3 8.5 10t5.5 19t3 19.5t3 21.5l1 14q3 28 32 40t52 -5q73 -52 91 -178q7 -57 -3.5 -113t-42.5 -91q-28 -32 -83.5 -48.5t-115.5 -18.5v-10q-71 -2 -95 -43q-14 -5 -31 -17q11 -1 32 -3.5t30 -3.5q1 5 5 8q16 18 60 23h13q5 18 19 30t33 8
+t36 -23t19 -36q79 -32 93 -95q9 -40 1 -81q-12 -53 -56 -88t-97 -44q-10 -2 -17 -2q0 -49 -1 -73q20 15 38 19q26 7 61 2q28 28 51 16q14 -9 14 -37q33 -16 59 -34q27 13 38 4q10 -10 2 -38q28 -30 41 -51q23 8 31 -1zM1937 1025q0 -29 -9 -54q82 -32 112 -132
+q4 37 -9.5 98.5t-41.5 90.5q-20 19 -36 17t-16 -20zM1859 925q35 -42 47.5 -108.5t-0.5 -124.5q67 13 97 45q13 14 18 28q-3 64 -31 114.5t-79 66.5q-15 -15 -52 -21zM1822 921q-30 0 -44 1q42 -115 53 -239q21 0 43 3q16 68 1 135t-53 100zM258 839q30 100 112 132
+q-9 25 -9 54q0 18 -16.5 20t-35.5 -17q-28 -29 -41.5 -90.5t-9.5 -98.5zM294 737q29 -31 97 -45q-13 58 -0.5 124.5t47.5 108.5v0q-37 6 -52 21q-51 -16 -78.5 -66t-31.5 -115q9 -17 18 -28zM471 683q14 124 73 235q-19 -4 -55 -18l-45 -19v1q-46 -89 -20 -196q25 -3 47 -3z
+M1434 644q8 -38 16.5 -108.5t11.5 -89.5q3 -18 9.5 -21.5t23.5 4.5q40 20 62 85.5t23 125.5q-24 2 -146 4zM1152 1285q-116 0 -199 -82.5t-83 -198.5q0 -117 83 -199.5t199 -82.5t199 82.5t83 199.5q0 116 -83 198.5t-199 82.5zM1380 646q-105 2 -211 0v1q-1 -27 2.5 -86
+t13.5 -66q29 -14 93.5 -14.5t95.5 10.5q9 3 11 39t-0.5 69.5t-4.5 46.5zM1112 447q8 4 9.5 48t-0.5 88t-4 63v1q-212 -3 -214 -3q-4 -20 -7 -62t0 -83t14 -46q34 -15 101 -16t101 10zM718 636q-16 -59 4.5 -118.5t77.5 -84.5q15 -8 24 -5t12 21q3 16 8 90t10 103
+q-69 -2 -136 -6zM591 510q3 -23 -34 -36q132 -141 271.5 -240t305.5 -154q172 49 310.5 146t293.5 250q-33 13 -30 34q0 2 0.5 3.5t1.5 3t1 2.5v1v-1q-17 2 -50 5.5t-48 4.5q-26 -90 -82 -132q-51 -38 -82 1q-5 6 -9 14q-7 13 -17 62q-2 -5 -5 -9t-7.5 -7t-8 -5.5t-9.5 -4
+l-10 -2.5t-12 -2l-12 -1.5t-13.5 -1t-13.5 -0.5q-106 -9 -163 11q-4 -17 -10 -26.5t-21 -15t-23 -7t-36 -3.5q-6 -1 -9 -1q-179 -17 -203 40q-2 -63 -56 -54q-47 8 -91 54q-12 13 -20 26q-17 29 -26 65q-58 -6 -87 -10q1 -2 4 -10zM507 -118q3 14 3 30q-17 71 -51 130
+t-73 70q-41 12 -101.5 -14.5t-104.5 -80t-39 -107.5q35 -53 100 -93t119 -42q51 -2 94 28t53 79zM510 53q23 -63 27 -119q195 113 392 174q-98 52 -180.5 120t-179.5 165q-6 -4 -29 -13q0 -1 -1 -4t-1 -5q31 -18 22 -37q-12 -23 -56 -34q-10 -13 -29 -24h-1q-2 -83 1 -150
+q19 -34 35 -73zM579 -113q532 -21 1145 0q-254 147 -428 196q-76 -35 -156 -57q-8 -3 -16 0q-65 21 -129 49q-208 -60 -416 -188h-1v-1q1 0 1 1zM1763 -67q4 54 28 120q14 38 33 71l-1 -1q3 77 3 153q-15 8 -30 25q-42 9 -56 33q-9 20 22 38q-2 4 -2 9q-16 4 -28 12
+q-204 -190 -383 -284q198 -59 414 -176zM2155 -90q5 54 -39 107.5t-104 80t-102 14.5q-38 -11 -72.5 -70.5t-51.5 -129.5q0 -16 3 -30q10 -49 53 -79t94 -28q54 2 119 42t100 93z" />
+    <glyph glyph-name="_538" unicode="&#xf23d;" horiz-adv-x="2304" 
+d="M1524 -25q0 -68 -48 -116t-116 -48t-116.5 48t-48.5 116t48.5 116.5t116.5 48.5t116 -48.5t48 -116.5zM775 -25q0 -68 -48.5 -116t-116.5 -48t-116 48t-48 116t48 116.5t116 48.5t116.5 -48.5t48.5 -116.5zM0 1469q57 -60 110.5 -104.5t121 -82t136 -63t166 -45.5
+t200 -31.5t250 -18.5t304 -9.5t372.5 -2.5q139 0 244.5 -5t181 -16.5t124 -27.5t71 -39.5t24 -51.5t-19.5 -64t-56.5 -76.5t-89.5 -91t-116 -104.5t-139 -119q-185 -157 -286 -247q29 51 76.5 109t94 105.5t94.5 98.5t83 91.5t54 80.5t13 70t-45.5 55.5t-116.5 41t-204 23.5
+t-304 5q-168 -2 -314 6t-256 23t-204.5 41t-159.5 51.5t-122.5 62.5t-91.5 66.5t-68 71.5t-50.5 69.5t-40 68t-36.5 59.5z" />
+    <glyph glyph-name="_539" unicode="&#xf23e;" horiz-adv-x="1792" 
+d="M896 1472q-169 0 -323 -66t-265.5 -177.5t-177.5 -265.5t-66 -323t66 -323t177.5 -265.5t265.5 -177.5t323 -66t323 66t265.5 177.5t177.5 265.5t66 323t-66 323t-177.5 265.5t-265.5 177.5t-323 66zM896 1536q182 0 348 -71t286 -191t191 -286t71 -348t-71 -348
+t-191 -286t-286 -191t-348 -71t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71zM496 704q16 0 16 -16v-480q0 -16 -16 -16h-32q-16 0 -16 16v480q0 16 16 16h32zM896 640q53 0 90.5 -37.5t37.5 -90.5q0 -35 -17.5 -64t-46.5 -46v-114q0 -14 -9 -23
+t-23 -9h-64q-14 0 -23 9t-9 23v114q-29 17 -46.5 46t-17.5 64q0 53 37.5 90.5t90.5 37.5zM896 1408q209 0 385.5 -103t279.5 -279.5t103 -385.5t-103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103zM544 928v-96
+q0 -14 9 -23t23 -9h64q14 0 23 9t9 23v96q0 93 65.5 158.5t158.5 65.5t158.5 -65.5t65.5 -158.5v-96q0 -14 9 -23t23 -9h64q14 0 23 9t9 23v96q0 146 -103 249t-249 103t-249 -103t-103 -249zM1408 192v512q0 26 -19 45t-45 19h-896q-26 0 -45 -19t-19 -45v-512
+q0 -26 19 -45t45 -19h896q26 0 45 19t19 45z" />
+    <glyph glyph-name="_540" unicode="&#xf240;" horiz-adv-x="2304" 
+d="M1920 1024v-768h-1664v768h1664zM2048 448h128v384h-128v288q0 14 -9 23t-23 9h-1856q-14 0 -23 -9t-9 -23v-960q0 -14 9 -23t23 -9h1856q14 0 23 9t9 23v288zM2304 832v-384q0 -53 -37.5 -90.5t-90.5 -37.5v-160q0 -66 -47 -113t-113 -47h-1856q-66 0 -113 47t-47 113
+v960q0 66 47 113t113 47h1856q66 0 113 -47t47 -113v-160q53 0 90.5 -37.5t37.5 -90.5z" />
+    <glyph glyph-name="_541" unicode="&#xf241;" horiz-adv-x="2304" 
+d="M256 256v768h1280v-768h-1280zM2176 960q53 0 90.5 -37.5t37.5 -90.5v-384q0 -53 -37.5 -90.5t-90.5 -37.5v-160q0 -66 -47 -113t-113 -47h-1856q-66 0 -113 47t-47 113v960q0 66 47 113t113 47h1856q66 0 113 -47t47 -113v-160zM2176 448v384h-128v288q0 14 -9 23t-23 9
+h-1856q-14 0 -23 -9t-9 -23v-960q0 -14 9 -23t23 -9h1856q14 0 23 9t9 23v288h128z" />
+    <glyph glyph-name="_542" unicode="&#xf242;" horiz-adv-x="2304" 
+d="M256 256v768h896v-768h-896zM2176 960q53 0 90.5 -37.5t37.5 -90.5v-384q0 -53 -37.5 -90.5t-90.5 -37.5v-160q0 -66 -47 -113t-113 -47h-1856q-66 0 -113 47t-47 113v960q0 66 47 113t113 47h1856q66 0 113 -47t47 -113v-160zM2176 448v384h-128v288q0 14 -9 23t-23 9
+h-1856q-14 0 -23 -9t-9 -23v-960q0 -14 9 -23t23 -9h1856q14 0 23 9t9 23v288h128z" />
+    <glyph glyph-name="_543" unicode="&#xf243;" horiz-adv-x="2304" 
+d="M256 256v768h512v-768h-512zM2176 960q53 0 90.5 -37.5t37.5 -90.5v-384q0 -53 -37.5 -90.5t-90.5 -37.5v-160q0 -66 -47 -113t-113 -47h-1856q-66 0 -113 47t-47 113v960q0 66 47 113t113 47h1856q66 0 113 -47t47 -113v-160zM2176 448v384h-128v288q0 14 -9 23t-23 9
+h-1856q-14 0 -23 -9t-9 -23v-960q0 -14 9 -23t23 -9h1856q14 0 23 9t9 23v288h128z" />
+    <glyph glyph-name="_544" unicode="&#xf244;" horiz-adv-x="2304" 
+d="M2176 960q53 0 90.5 -37.5t37.5 -90.5v-384q0 -53 -37.5 -90.5t-90.5 -37.5v-160q0 -66 -47 -113t-113 -47h-1856q-66 0 -113 47t-47 113v960q0 66 47 113t113 47h1856q66 0 113 -47t47 -113v-160zM2176 448v384h-128v288q0 14 -9 23t-23 9h-1856q-14 0 -23 -9t-9 -23
+v-960q0 -14 9 -23t23 -9h1856q14 0 23 9t9 23v288h128z" />
+    <glyph glyph-name="_545" unicode="&#xf245;" horiz-adv-x="1280" 
+d="M1133 493q31 -30 14 -69q-17 -40 -59 -40h-382l201 -476q10 -25 0 -49t-34 -35l-177 -75q-25 -10 -49 0t-35 34l-191 452l-312 -312q-19 -19 -45 -19q-12 0 -24 5q-40 17 -40 59v1504q0 42 40 59q12 5 24 5q27 0 45 -19z" />
+    <glyph glyph-name="_546" unicode="&#xf246;" horiz-adv-x="1024" 
+d="M832 1408q-320 0 -320 -224v-416h128v-128h-128v-544q0 -224 320 -224h64v-128h-64q-272 0 -384 146q-112 -146 -384 -146h-64v128h64q320 0 320 224v544h-128v128h128v416q0 224 -320 224h-64v128h64q272 0 384 -146q112 146 384 146h64v-128h-64z" />
+    <glyph glyph-name="_547" unicode="&#xf247;" horiz-adv-x="2048" 
+d="M2048 1152h-128v-1024h128v-384h-384v128h-1280v-128h-384v384h128v1024h-128v384h384v-128h1280v128h384v-384zM1792 1408v-128h128v128h-128zM128 1408v-128h128v128h-128zM256 -128v128h-128v-128h128zM1664 0v128h128v1024h-128v128h-1280v-128h-128v-1024h128v-128
+h1280zM1920 -128v128h-128v-128h128zM1280 896h384v-768h-896v256h-384v768h896v-256zM512 512h640v512h-640v-512zM1536 256v512h-256v-384h-384v-128h640z" />
+    <glyph glyph-name="_548" unicode="&#xf248;" horiz-adv-x="2304" 
+d="M2304 768h-128v-640h128v-384h-384v128h-896v-128h-384v384h128v128h-384v-128h-384v384h128v640h-128v384h384v-128h896v128h384v-384h-128v-128h384v128h384v-384zM2048 1024v-128h128v128h-128zM1408 1408v-128h128v128h-128zM128 1408v-128h128v128h-128zM256 256
+v128h-128v-128h128zM1536 384h-128v-128h128v128zM384 384h896v128h128v640h-128v128h-896v-128h-128v-640h128v-128zM896 -128v128h-128v-128h128zM2176 -128v128h-128v-128h128zM2048 128v640h-128v128h-384v-384h128v-384h-384v128h-384v-128h128v-128h896v128h128z" />
+    <glyph glyph-name="_549" unicode="&#xf249;" 
+d="M1024 288v-416h-928q-40 0 -68 28t-28 68v1344q0 40 28 68t68 28h1344q40 0 68 -28t28 -68v-928h-416q-40 0 -68 -28t-28 -68zM1152 256h381q-15 -82 -65 -132l-184 -184q-50 -50 -132 -65v381z" />
+    <glyph glyph-name="_550" unicode="&#xf24a;" 
+d="M1400 256h-248v-248q29 10 41 22l185 185q12 12 22 41zM1120 384h288v896h-1280v-1280h896v288q0 40 28 68t68 28zM1536 1312v-1024q0 -40 -20 -88t-48 -76l-184 -184q-28 -28 -76 -48t-88 -20h-1024q-40 0 -68 28t-28 68v1344q0 40 28 68t68 28h1344q40 0 68 -28t28 -68
+z" />
+    <glyph glyph-name="_551" unicode="&#xf24b;" horiz-adv-x="2304" 
+d="M1951 538q0 -26 -15.5 -44.5t-38.5 -23.5q-8 -2 -18 -2h-153v140h153q10 0 18 -2q23 -5 38.5 -23.5t15.5 -44.5zM1933 751q0 -25 -15 -42t-38 -21q-3 -1 -15 -1h-139v129h139q3 0 8.5 -0.5t6.5 -0.5q23 -4 38 -21.5t15 -42.5zM728 587v308h-228v-308q0 -58 -38 -94.5
+t-105 -36.5q-108 0 -229 59v-112q53 -15 121 -23t109 -9l42 -1q328 0 328 217zM1442 403v113q-99 -52 -200 -59q-108 -8 -169 41t-61 142t61 142t169 41q101 -7 200 -58v112q-48 12 -100 19.5t-80 9.5l-28 2q-127 6 -218.5 -14t-140.5 -60t-71 -88t-22 -106t22 -106t71 -88
+t140.5 -60t218.5 -14q101 4 208 31zM2176 518q0 54 -43 88.5t-109 39.5v3q57 8 89 41.5t32 79.5q0 55 -41 88t-107 36q-3 0 -12 0.5t-14 0.5h-455v-510h491q74 0 121.5 36.5t47.5 96.5zM2304 1280v-1280q0 -52 -38 -90t-90 -38h-2048q-52 0 -90 38t-38 90v1280q0 52 38 90
+t90 38h2048q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="_552" unicode="&#xf24c;" horiz-adv-x="2304" 
+d="M858 295v693q-106 -41 -172 -135.5t-66 -211.5t66 -211.5t172 -134.5zM1362 641q0 117 -66 211.5t-172 135.5v-694q106 41 172 135.5t66 211.5zM1577 641q0 -159 -78.5 -294t-213.5 -213.5t-294 -78.5q-119 0 -227.5 46.5t-187 125t-125 187t-46.5 227.5q0 159 78.5 294
+t213.5 213.5t294 78.5t294 -78.5t213.5 -213.5t78.5 -294zM1960 634q0 139 -55.5 261.5t-147.5 205.5t-213.5 131t-252.5 48h-301q-176 0 -323.5 -81t-235 -230t-87.5 -335q0 -171 87 -317.5t236 -231.5t323 -85h301q129 0 251.5 50.5t214.5 135t147.5 202.5t55.5 246z
+M2304 1280v-1280q0 -52 -38 -90t-90 -38h-2048q-52 0 -90 38t-38 90v1280q0 52 38 90t90 38h2048q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="_553" unicode="&#xf24d;" horiz-adv-x="1792" 
+d="M1664 -96v1088q0 13 -9.5 22.5t-22.5 9.5h-1088q-13 0 -22.5 -9.5t-9.5 -22.5v-1088q0 -13 9.5 -22.5t22.5 -9.5h1088q13 0 22.5 9.5t9.5 22.5zM1792 992v-1088q0 -66 -47 -113t-113 -47h-1088q-66 0 -113 47t-47 113v1088q0 66 47 113t113 47h1088q66 0 113 -47t47 -113
+zM1408 1376v-160h-128v160q0 13 -9.5 22.5t-22.5 9.5h-1088q-13 0 -22.5 -9.5t-9.5 -22.5v-1088q0 -13 9.5 -22.5t22.5 -9.5h160v-128h-160q-66 0 -113 47t-47 113v1088q0 66 47 113t113 47h1088q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="_554" unicode="&#xf24e;" horiz-adv-x="2304" 
+d="M1728 1088l-384 -704h768zM448 1088l-384 -704h768zM1269 1280q-14 -40 -45.5 -71.5t-71.5 -45.5v-1291h608q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-1344q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h608v1291q-40 14 -71.5 45.5t-45.5 71.5h-491q-14 0 -23 9t-9 23v64
+q0 14 9 23t23 9h491q21 57 70 92.5t111 35.5t111 -35.5t70 -92.5h491q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-491zM1088 1264q33 0 56.5 23.5t23.5 56.5t-23.5 56.5t-56.5 23.5t-56.5 -23.5t-23.5 -56.5t23.5 -56.5t56.5 -23.5zM2176 384q0 -73 -46.5 -131t-117.5 -91
+t-144.5 -49.5t-139.5 -16.5t-139.5 16.5t-144.5 49.5t-117.5 91t-46.5 131q0 11 35 81t92 174.5t107 195.5t102 184t56 100q18 33 56 33t56 -33q4 -7 56 -100t102 -184t107 -195.5t92 -174.5t35 -81zM896 384q0 -73 -46.5 -131t-117.5 -91t-144.5 -49.5t-139.5 -16.5
+t-139.5 16.5t-144.5 49.5t-117.5 91t-46.5 131q0 11 35 81t92 174.5t107 195.5t102 184t56 100q18 33 56 33t56 -33q4 -7 56 -100t102 -184t107 -195.5t92 -174.5t35 -81z" />
+    <glyph glyph-name="_555" unicode="&#xf250;" 
+d="M1408 1408q0 -261 -106.5 -461.5t-266.5 -306.5q160 -106 266.5 -306.5t106.5 -461.5h96q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-1472q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h96q0 261 106.5 461.5t266.5 306.5q-160 106 -266.5 306.5t-106.5 461.5h-96q-14 0 -23 9
+t-9 23v64q0 14 9 23t23 9h1472q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-96zM874 700q77 29 149 92.5t129.5 152.5t92.5 210t35 253h-1024q0 -132 35 -253t92.5 -210t129.5 -152.5t149 -92.5q19 -7 30.5 -23.5t11.5 -36.5t-11.5 -36.5t-30.5 -23.5q-77 -29 -149 -92.5
+t-129.5 -152.5t-92.5 -210t-35 -253h1024q0 132 -35 253t-92.5 210t-129.5 152.5t-149 92.5q-19 7 -30.5 23.5t-11.5 36.5t11.5 36.5t30.5 23.5z" />
+    <glyph glyph-name="_556" unicode="&#xf251;" 
+d="M1408 1408q0 -261 -106.5 -461.5t-266.5 -306.5q160 -106 266.5 -306.5t106.5 -461.5h96q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-1472q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h96q0 261 106.5 461.5t266.5 306.5q-160 106 -266.5 306.5t-106.5 461.5h-96q-14 0 -23 9
+t-9 23v64q0 14 9 23t23 9h1472q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-96zM1280 1408h-1024q0 -66 9 -128h1006q9 61 9 128zM1280 -128q0 130 -34 249.5t-90.5 208t-126.5 152t-146 94.5h-230q-76 -31 -146 -94.5t-126.5 -152t-90.5 -208t-34 -249.5h1024z" />
+    <glyph glyph-name="_557" unicode="&#xf252;" 
+d="M1408 1408q0 -261 -106.5 -461.5t-266.5 -306.5q160 -106 266.5 -306.5t106.5 -461.5h96q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-1472q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h96q0 261 106.5 461.5t266.5 306.5q-160 106 -266.5 306.5t-106.5 461.5h-96q-14 0 -23 9
+t-9 23v64q0 14 9 23t23 9h1472q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-96zM1280 1408h-1024q0 -206 85 -384h854q85 178 85 384zM1223 192q-54 141 -145.5 241.5t-194.5 142.5h-230q-103 -42 -194.5 -142.5t-145.5 -241.5h910z" />
+    <glyph glyph-name="_558" unicode="&#xf253;" 
+d="M1408 1408q0 -261 -106.5 -461.5t-266.5 -306.5q160 -106 266.5 -306.5t106.5 -461.5h96q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-1472q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h96q0 261 106.5 461.5t266.5 306.5q-160 106 -266.5 306.5t-106.5 461.5h-96q-14 0 -23 9
+t-9 23v64q0 14 9 23t23 9h1472q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-96zM874 700q77 29 149 92.5t129.5 152.5t92.5 210t35 253h-1024q0 -132 35 -253t92.5 -210t129.5 -152.5t149 -92.5q19 -7 30.5 -23.5t11.5 -36.5t-11.5 -36.5t-30.5 -23.5q-137 -51 -244 -196
+h700q-107 145 -244 196q-19 7 -30.5 23.5t-11.5 36.5t11.5 36.5t30.5 23.5z" />
+    <glyph glyph-name="_559" unicode="&#xf254;" 
+d="M1504 -64q14 0 23 -9t9 -23v-128q0 -14 -9 -23t-23 -9h-1472q-14 0 -23 9t-9 23v128q0 14 9 23t23 9h1472zM130 0q3 55 16 107t30 95t46 87t53.5 76t64.5 69.5t66 60t70.5 55t66.5 47.5t65 43q-43 28 -65 43t-66.5 47.5t-70.5 55t-66 60t-64.5 69.5t-53.5 76t-46 87
+t-30 95t-16 107h1276q-3 -55 -16 -107t-30 -95t-46 -87t-53.5 -76t-64.5 -69.5t-66 -60t-70.5 -55t-66.5 -47.5t-65 -43q43 -28 65 -43t66.5 -47.5t70.5 -55t66 -60t64.5 -69.5t53.5 -76t46 -87t30 -95t16 -107h-1276zM1504 1536q14 0 23 -9t9 -23v-128q0 -14 -9 -23t-23 -9
+h-1472q-14 0 -23 9t-9 23v128q0 14 9 23t23 9h1472z" />
+    <glyph glyph-name="_560" unicode="&#xf255;" 
+d="M768 1152q-53 0 -90.5 -37.5t-37.5 -90.5v-128h-32v93q0 48 -32 81.5t-80 33.5q-46 0 -79 -33t-33 -79v-429l-32 30v172q0 48 -32 81.5t-80 33.5q-46 0 -79 -33t-33 -79v-224q0 -47 35 -82l310 -296q39 -39 39 -102q0 -26 19 -45t45 -19h640q26 0 45 19t19 45v25
+q0 41 10 77l108 436q10 36 10 77v246q0 48 -32 81.5t-80 33.5q-46 0 -79 -33t-33 -79v-32h-32v125q0 40 -25 72.5t-64 40.5q-14 2 -23 2q-46 0 -79 -33t-33 -79v-128h-32v122q0 51 -32.5 89.5t-82.5 43.5q-5 1 -13 1zM768 1280q84 0 149 -50q57 34 123 34q59 0 111 -27
+t86 -76q27 7 59 7q100 0 170 -71.5t70 -171.5v-246q0 -51 -13 -108l-109 -436q-6 -24 -6 -71q0 -80 -56 -136t-136 -56h-640q-84 0 -138 58.5t-54 142.5l-308 296q-76 73 -76 175v224q0 99 70.5 169.5t169.5 70.5q11 0 16 -1q6 95 75.5 160t164.5 65q52 0 98 -21
+q72 69 174 69z" />
+    <glyph glyph-name="_561" unicode="&#xf256;" horiz-adv-x="1792" 
+d="M880 1408q-46 0 -79 -33t-33 -79v-656h-32v528q0 46 -33 79t-79 33t-79 -33t-33 -79v-528v-256l-154 205q-38 51 -102 51q-53 0 -90.5 -37.5t-37.5 -90.5q0 -43 26 -77l384 -512q38 -51 102 -51h688q34 0 61 22t34 56l76 405q5 32 5 59v498q0 46 -33 79t-79 33t-79 -33
+t-33 -79v-272h-32v528q0 46 -33 79t-79 33t-79 -33t-33 -79v-528h-32v656q0 46 -33 79t-79 33zM880 1536q68 0 125.5 -35.5t88.5 -96.5q19 4 42 4q99 0 169.5 -70.5t70.5 -169.5v-17q105 6 180.5 -64t75.5 -175v-498q0 -40 -8 -83l-76 -404q-14 -79 -76.5 -131t-143.5 -52
+h-688q-60 0 -114.5 27.5t-90.5 74.5l-384 512q-51 68 -51 154q0 106 75 181t181 75q78 0 128 -34v434q0 99 70.5 169.5t169.5 70.5q23 0 42 -4q31 61 88.5 96.5t125.5 35.5z" />
+    <glyph glyph-name="_562" unicode="&#xf257;" horiz-adv-x="1792" 
+d="M1073 -128h-177q-163 0 -226 141q-23 49 -23 102v5q-62 30 -98.5 88.5t-36.5 127.5q0 38 5 48h-261q-106 0 -181 75t-75 181t75 181t181 75h113l-44 17q-74 28 -119.5 93.5t-45.5 145.5q0 106 75 181t181 75q46 0 91 -17l628 -239h401q106 0 181 -75t75 -181v-668
+q0 -88 -54 -157.5t-140 -90.5l-339 -85q-92 -23 -186 -23zM1024 583l-155 -71l-163 -74q-30 -14 -48 -41.5t-18 -60.5q0 -46 33 -79t79 -33q26 0 46 10l338 154q-49 10 -80.5 50t-31.5 90v55zM1344 272q0 46 -33 79t-79 33q-26 0 -46 -10l-290 -132q-28 -13 -37 -17
+t-30.5 -17t-29.5 -23.5t-16 -29t-8 -40.5q0 -50 31.5 -82t81.5 -32q20 0 38 9l352 160q30 14 48 41.5t18 60.5zM1112 1024l-650 248q-24 8 -46 8q-53 0 -90.5 -37.5t-37.5 -90.5q0 -40 22.5 -73t59.5 -47l526 -200v-64h-640q-53 0 -90.5 -37.5t-37.5 -90.5t37.5 -90.5
+t90.5 -37.5h535l233 106v198q0 63 46 106l111 102h-69zM1073 0q82 0 155 19l339 85q43 11 70 45.5t27 78.5v668q0 53 -37.5 90.5t-90.5 37.5h-308l-136 -126q-36 -33 -36 -82v-296q0 -46 33 -77t79 -31t79 35t33 81v208h32v-208q0 -70 -57 -114q52 -8 86.5 -48.5t34.5 -93.5
+q0 -42 -23 -78t-61 -53l-310 -141h91z" />
+    <glyph glyph-name="_563" unicode="&#xf258;" horiz-adv-x="2048" 
+d="M1151 1536q61 0 116 -28t91 -77l572 -781q118 -159 118 -359v-355q0 -80 -56 -136t-136 -56h-384q-80 0 -136 56t-56 136v177l-286 143h-546q-80 0 -136 56t-56 136v32q0 119 84.5 203.5t203.5 84.5h420l42 128h-686q-100 0 -173.5 67.5t-81.5 166.5q-65 79 -65 182v32
+q0 80 56 136t136 56h959zM1920 -64v355q0 157 -93 284l-573 781q-39 52 -103 52h-959q-26 0 -45 -19t-19 -45q0 -32 1.5 -49.5t9.5 -40.5t25 -43q10 31 35.5 50t56.5 19h832v-32h-832q-26 0 -45 -19t-19 -45q0 -44 3 -58q8 -44 44 -73t81 -29h640h91q40 0 68 -28t28 -68
+q0 -15 -5 -30l-64 -192q-10 -29 -35 -47.5t-56 -18.5h-443q-66 0 -113 -47t-47 -113v-32q0 -26 19 -45t45 -19h561q16 0 29 -7l317 -158q24 -13 38.5 -36t14.5 -50v-197q0 -26 19 -45t45 -19h384q26 0 45 19t19 45z" />
+    <glyph glyph-name="_564" unicode="&#xf259;" horiz-adv-x="2048" 
+d="M459 -256q-77 0 -137.5 47.5t-79.5 122.5l-101 401q-13 57 -13 108q0 45 -5 67l-116 477q-7 27 -7 57q0 93 62 161t155 78q17 85 82.5 139t152.5 54q83 0 148 -51.5t85 -132.5l83 -348l103 428q20 81 85 132.5t148 51.5q89 0 155.5 -57.5t80.5 -144.5q92 -10 152 -79
+t60 -162q0 -24 -7 -59l-123 -512q10 7 37.5 28.5t38.5 29.5t35 23t41 20.5t41.5 11t49.5 5.5q105 0 180 -74t75 -179q0 -62 -28.5 -118t-78.5 -94l-507 -380q-68 -51 -153 -51h-694zM1104 1408q-38 0 -68.5 -24t-39.5 -62l-164 -682h-127l-145 602q-9 38 -39.5 62t-68.5 24
+q-48 0 -80 -33t-32 -80q0 -15 3 -28l132 -547h-26l-99 408q-9 37 -40 62.5t-69 25.5q-47 0 -80 -33t-33 -79q0 -14 3 -26l116 -478q7 -28 9 -86t10 -88l100 -401q8 -32 34 -52.5t59 -20.5h694q42 0 76 26l507 379q56 43 56 110q0 52 -37.5 88.5t-89.5 36.5q-43 0 -77 -26
+l-307 -230v227q0 4 32 138t68 282t39 161q4 18 4 29q0 47 -32 81t-79 34q-39 0 -69.5 -24t-39.5 -62l-116 -482h-26l150 624q3 14 3 28q0 48 -31.5 82t-79.5 34z" />
+    <glyph glyph-name="_565" unicode="&#xf25a;" horiz-adv-x="1792" 
+d="M640 1408q-53 0 -90.5 -37.5t-37.5 -90.5v-512v-384l-151 202q-41 54 -107 54q-52 0 -89 -38t-37 -90q0 -43 26 -77l384 -512q38 -51 102 -51h718q22 0 39.5 13.5t22.5 34.5l92 368q24 96 24 194v217q0 41 -28 71t-68 30t-68 -28t-28 -68h-32v61q0 48 -32 81.5t-80 33.5
+q-46 0 -79 -33t-33 -79v-64h-32v90q0 55 -37 94.5t-91 39.5q-53 0 -90.5 -37.5t-37.5 -90.5v-96h-32v570q0 55 -37 94.5t-91 39.5zM640 1536q107 0 181.5 -77.5t74.5 -184.5v-220q22 2 32 2q99 0 173 -69q47 21 99 21q113 0 184 -87q27 7 56 7q94 0 159 -67.5t65 -161.5
+v-217q0 -116 -28 -225l-92 -368q-16 -64 -68 -104.5t-118 -40.5h-718q-60 0 -114.5 27.5t-90.5 74.5l-384 512q-51 68 -51 154q0 105 74.5 180.5t179.5 75.5q71 0 130 -35v547q0 106 75 181t181 75zM768 128v384h-32v-384h32zM1024 128v384h-32v-384h32zM1280 128v384h-32
+v-384h32z" />
+    <glyph glyph-name="_566" unicode="&#xf25b;" 
+d="M1288 889q60 0 107 -23q141 -63 141 -226v-177q0 -94 -23 -186l-85 -339q-21 -86 -90.5 -140t-157.5 -54h-668q-106 0 -181 75t-75 181v401l-239 628q-17 45 -17 91q0 106 75 181t181 75q80 0 145.5 -45.5t93.5 -119.5l17 -44v113q0 106 75 181t181 75t181 -75t75 -181
+v-261q27 5 48 5q69 0 127.5 -36.5t88.5 -98.5zM1072 896q-33 0 -60.5 -18t-41.5 -48l-74 -163l-71 -155h55q50 0 90 -31.5t50 -80.5l154 338q10 20 10 46q0 46 -33 79t-79 33zM1293 761q-22 0 -40.5 -8t-29 -16t-23.5 -29.5t-17 -30.5t-17 -37l-132 -290q-10 -20 -10 -46
+q0 -46 33 -79t79 -33q33 0 60.5 18t41.5 48l160 352q9 18 9 38q0 50 -32 81.5t-82 31.5zM128 1120q0 -22 8 -46l248 -650v-69l102 111q43 46 106 46h198l106 233v535q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5v-640h-64l-200 526q-14 37 -47 59.5t-73 22.5
+q-53 0 -90.5 -37.5t-37.5 -90.5zM1180 -128q44 0 78.5 27t45.5 70l85 339q19 73 19 155v91l-141 -310q-17 -38 -53 -61t-78 -23q-53 0 -93.5 34.5t-48.5 86.5q-44 -57 -114 -57h-208v32h208q46 0 81 33t35 79t-31 79t-77 33h-296q-49 0 -82 -36l-126 -136v-308
+q0 -53 37.5 -90.5t90.5 -37.5h668z" />
+    <glyph glyph-name="_567" unicode="&#xf25c;" horiz-adv-x="1973" 
+d="M857 992v-117q0 -13 -9.5 -22t-22.5 -9h-298v-812q0 -13 -9 -22.5t-22 -9.5h-135q-13 0 -22.5 9t-9.5 23v812h-297q-13 0 -22.5 9t-9.5 22v117q0 14 9 23t23 9h793q13 0 22.5 -9.5t9.5 -22.5zM1895 995l77 -961q1 -13 -8 -24q-10 -10 -23 -10h-134q-12 0 -21 8.5
+t-10 20.5l-46 588l-189 -425q-8 -19 -29 -19h-120q-20 0 -29 19l-188 427l-45 -590q-1 -12 -10 -20.5t-21 -8.5h-135q-13 0 -23 10q-9 10 -9 24l78 961q1 12 10 20.5t21 8.5h142q20 0 29 -19l220 -520q10 -24 20 -51q3 7 9.5 24.5t10.5 26.5l221 520q9 19 29 19h141
+q13 0 22 -8.5t10 -20.5z" />
+    <glyph glyph-name="_568" unicode="&#xf25d;" horiz-adv-x="1792" 
+d="M1042 833q0 88 -60 121q-33 18 -117 18h-123v-281h162q66 0 102 37t36 105zM1094 548l205 -373q8 -17 -1 -31q-8 -16 -27 -16h-152q-20 0 -28 17l-194 365h-155v-350q0 -14 -9 -23t-23 -9h-134q-14 0 -23 9t-9 23v960q0 14 9 23t23 9h294q128 0 190 -24q85 -31 134 -109
+t49 -180q0 -92 -42.5 -165.5t-115.5 -109.5q6 -10 9 -16zM896 1376q-150 0 -286 -58.5t-234.5 -157t-157 -234.5t-58.5 -286t58.5 -286t157 -234.5t234.5 -157t286 -58.5t286 58.5t234.5 157t157 234.5t58.5 286t-58.5 286t-157 234.5t-234.5 157t-286 58.5zM1792 640
+q0 -182 -71 -348t-191 -286t-286 -191t-348 -71t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71t348 -71t286 -191t191 -286t71 -348z" />
+    <glyph glyph-name="_569" unicode="&#xf25e;" horiz-adv-x="1792" 
+d="M605 303q153 0 257 104q14 18 3 36l-45 82q-6 13 -24 17q-16 2 -27 -11l-4 -3q-4 -4 -11.5 -10t-17.5 -13.5t-23.5 -14.5t-28.5 -13t-33.5 -9.5t-37.5 -3.5q-76 0 -125 50t-49 127q0 76 48 125.5t122 49.5q37 0 71.5 -14t50.5 -28l16 -14q11 -11 26 -10q16 2 24 14l53 78
+q13 20 -2 39q-3 4 -11 12t-30 23.5t-48.5 28t-67.5 22.5t-86 10q-148 0 -246 -96.5t-98 -240.5q0 -146 97 -241.5t247 -95.5zM1235 303q153 0 257 104q14 18 4 36l-45 82q-8 14 -25 17q-16 2 -27 -11l-4 -3q-4 -4 -11.5 -10t-17.5 -13.5t-23.5 -14.5t-28.5 -13t-33.5 -9.5
+t-37.5 -3.5q-76 0 -125 50t-49 127q0 76 48 125.5t122 49.5q37 0 71.5 -14t50.5 -28l16 -14q11 -11 26 -10q16 2 24 14l53 78q13 20 -2 39q-3 4 -11 12t-30 23.5t-48.5 28t-67.5 22.5t-86 10q-147 0 -245.5 -96.5t-98.5 -240.5q0 -146 97 -241.5t247 -95.5zM896 1376
+q-150 0 -286 -58.5t-234.5 -157t-157 -234.5t-58.5 -286t58.5 -286t157 -234.5t234.5 -157t286 -58.5t286 58.5t234.5 157t157 234.5t58.5 286t-58.5 286t-157 234.5t-234.5 157t-286 58.5zM896 1536q182 0 348 -71t286 -191t191 -286t71 -348t-71 -348t-191 -286t-286 -191
+t-348 -71t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71z" />
+    <glyph glyph-name="f260" unicode="&#xf260;" horiz-adv-x="2048" 
+d="M736 736l384 -384l-384 -384l-672 672l672 672l168 -168l-96 -96l-72 72l-480 -480l480 -480l193 193l-289 287zM1312 1312l672 -672l-672 -672l-168 168l96 96l72 -72l480 480l-480 480l-193 -193l289 -287l-96 -96l-384 384z" />
+    <glyph glyph-name="f261" unicode="&#xf261;" horiz-adv-x="1792" 
+d="M717 182l271 271l-279 279l-88 -88l192 -191l-96 -96l-279 279l279 279l40 -40l87 87l-127 128l-454 -454zM1075 190l454 454l-454 454l-271 -271l279 -279l88 88l-192 191l96 96l279 -279l-279 -279l-40 40l-87 -88zM1792 640q0 -182 -71 -348t-191 -286t-286 -191
+t-348 -71t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71t348 -71t286 -191t191 -286t71 -348z" />
+    <glyph glyph-name="_572" unicode="&#xf262;" horiz-adv-x="2304" 
+d="M651 539q0 -39 -27.5 -66.5t-65.5 -27.5q-39 0 -66.5 27.5t-27.5 66.5q0 38 27.5 65.5t66.5 27.5q38 0 65.5 -27.5t27.5 -65.5zM1805 540q0 -39 -27.5 -66.5t-66.5 -27.5t-66.5 27.5t-27.5 66.5t27.5 66t66.5 27t66.5 -27t27.5 -66zM765 539q0 79 -56.5 136t-136.5 57
+t-136.5 -56.5t-56.5 -136.5t56.5 -136.5t136.5 -56.5t136.5 56.5t56.5 136.5zM1918 540q0 80 -56.5 136.5t-136.5 56.5q-79 0 -136 -56.5t-57 -136.5t56.5 -136.5t136.5 -56.5t136.5 56.5t56.5 136.5zM850 539q0 -116 -81.5 -197.5t-196.5 -81.5q-116 0 -197.5 82t-81.5 197
+t82 196.5t197 81.5t196.5 -81.5t81.5 -196.5zM2004 540q0 -115 -81.5 -196.5t-197.5 -81.5q-115 0 -196.5 81.5t-81.5 196.5t81.5 196.5t196.5 81.5q116 0 197.5 -81.5t81.5 -196.5zM1040 537q0 191 -135.5 326.5t-326.5 135.5q-125 0 -231 -62t-168 -168.5t-62 -231.5
+t62 -231.5t168 -168.5t231 -62q191 0 326.5 135.5t135.5 326.5zM1708 1110q-254 111 -556 111q-319 0 -573 -110q117 0 223 -45.5t182.5 -122.5t122 -183t45.5 -223q0 115 43.5 219.5t118 180.5t177.5 123t217 50zM2187 537q0 191 -135 326.5t-326 135.5t-326.5 -135.5
+t-135.5 -326.5t135.5 -326.5t326.5 -135.5t326 135.5t135 326.5zM1921 1103h383q-44 -51 -75 -114.5t-40 -114.5q110 -151 110 -337q0 -156 -77 -288t-209 -208.5t-287 -76.5q-133 0 -249 56t-196 155q-47 -56 -129 -179q-11 22 -53.5 82.5t-74.5 97.5
+q-80 -99 -196.5 -155.5t-249.5 -56.5q-155 0 -287 76.5t-209 208.5t-77 288q0 186 110 337q-9 51 -40 114.5t-75 114.5h365q149 100 355 156.5t432 56.5q224 0 421 -56t348 -157z" />
+    <glyph glyph-name="f263" unicode="&#xf263;" horiz-adv-x="1280" 
+d="M640 629q-188 0 -321 133t-133 320q0 188 133 321t321 133t321 -133t133 -321q0 -187 -133 -320t-321 -133zM640 1306q-92 0 -157.5 -65.5t-65.5 -158.5q0 -92 65.5 -157.5t157.5 -65.5t157.5 65.5t65.5 157.5q0 93 -65.5 158.5t-157.5 65.5zM1163 574q13 -27 15 -49.5
+t-4.5 -40.5t-26.5 -38.5t-42.5 -37t-61.5 -41.5q-115 -73 -315 -94l73 -72l267 -267q30 -31 30 -74t-30 -73l-12 -13q-31 -30 -74 -30t-74 30q-67 68 -267 268l-267 -268q-31 -30 -74 -30t-73 30l-12 13q-31 30 -31 73t31 74l267 267l72 72q-203 21 -317 94
+q-39 25 -61.5 41.5t-42.5 37t-26.5 38.5t-4.5 40.5t15 49.5q10 20 28 35t42 22t56 -2t65 -35q5 -4 15 -11t43 -24.5t69 -30.5t92 -24t113 -11q91 0 174 25.5t120 50.5l38 25q33 26 65 35t56 2t42 -22t28 -35z" />
+    <glyph glyph-name="_574" unicode="&#xf264;" 
+d="M927 956q0 -66 -46.5 -112.5t-112.5 -46.5t-112.5 46.5t-46.5 112.5t46.5 112.5t112.5 46.5t112.5 -46.5t46.5 -112.5zM1141 593q-10 20 -28 32t-47.5 9.5t-60.5 -27.5q-10 -8 -29 -20t-81 -32t-127 -20t-124 18t-86 36l-27 18q-31 25 -60.5 27.5t-47.5 -9.5t-28 -32
+q-22 -45 -2 -74.5t87 -73.5q83 -53 226 -67l-51 -52q-142 -142 -191 -190q-22 -22 -22 -52.5t22 -52.5l9 -9q22 -22 52.5 -22t52.5 22l191 191q114 -115 191 -191q22 -22 52.5 -22t52.5 22l9 9q22 22 22 52.5t-22 52.5l-191 190l-52 52q141 14 225 67q67 44 87 73.5t-2 74.5
+zM1092 956q0 134 -95 229t-229 95t-229 -95t-95 -229t95 -229t229 -95t229 95t95 229zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="_575" unicode="&#xf265;" horiz-adv-x="1720" 
+d="M1565 1408q65 0 110 -45.5t45 -110.5v-519q0 -176 -68 -336t-182.5 -275t-274 -182.5t-334.5 -67.5q-176 0 -335.5 67.5t-274.5 182.5t-183 275t-68 336v519q0 64 46 110t110 46h1409zM861 344q47 0 82 33l404 388q37 35 37 85q0 49 -34.5 83.5t-83.5 34.5q-47 0 -82 -33
+l-323 -310l-323 310q-35 33 -81 33q-49 0 -83.5 -34.5t-34.5 -83.5q0 -51 36 -85l405 -388q33 -33 81 -33z" />
+    <glyph glyph-name="_576" unicode="&#xf266;" horiz-adv-x="2304" 
+d="M1494 -103l-295 695q-25 -49 -158.5 -305.5t-198.5 -389.5q-1 -1 -27.5 -0.5t-26.5 1.5q-82 193 -255.5 587t-259.5 596q-21 50 -66.5 107.5t-103.5 100.5t-102 43q0 5 -0.5 24t-0.5 27h583v-50q-39 -2 -79.5 -16t-66.5 -43t-10 -64q26 -59 216.5 -499t235.5 -540
+q31 61 140 266.5t131 247.5q-19 39 -126 281t-136 295q-38 69 -201 71v50l513 -1v-47q-60 -2 -93.5 -25t-12.5 -69q33 -70 87 -189.5t86 -187.5q110 214 173 363q24 55 -10 79.5t-129 26.5q1 7 1 25v24q64 0 170.5 0.5t180 1t92.5 0.5v-49q-62 -2 -119 -33t-90 -81
+l-213 -442q13 -33 127.5 -290t121.5 -274l441 1017q-14 38 -49.5 62.5t-65 31.5t-55.5 8v50l460 -4l1 -2l-1 -44q-139 -4 -201 -145q-526 -1216 -559 -1291h-49z" />
+    <glyph glyph-name="_577" unicode="&#xf267;" horiz-adv-x="1792" 
+d="M949 643q0 -26 -16.5 -45t-41.5 -19q-26 0 -45 16.5t-19 41.5q0 26 17 45t42 19t44 -16.5t19 -41.5zM964 585l350 581q-9 -8 -67.5 -62.5t-125.5 -116.5t-136.5 -127t-117 -110.5t-50.5 -51.5l-349 -580q7 7 67 62t126 116.5t136 127t117 111t50 50.5zM1611 640
+q0 -201 -104 -371q-3 2 -17 11t-26.5 16.5t-16.5 7.5q-13 0 -13 -13q0 -10 59 -44q-74 -112 -184.5 -190.5t-241.5 -110.5l-16 67q-1 10 -15 10q-5 0 -8 -5.5t-2 -9.5l16 -68q-72 -15 -146 -15q-199 0 -372 105q1 2 13 20.5t21.5 33.5t9.5 19q0 13 -13 13q-6 0 -17 -14.5
+t-22.5 -34.5t-13.5 -23q-113 75 -192 187.5t-110 244.5l69 15q10 3 10 15q0 5 -5.5 8t-10.5 2l-68 -15q-14 72 -14 139q0 206 109 379q2 -1 18.5 -12t30 -19t17.5 -8q13 0 13 12q0 6 -12.5 15.5t-32.5 21.5l-20 12q77 112 189 189t244 107l15 -67q2 -10 15 -10q5 0 8 5.5
+t2 10.5l-15 66q71 13 134 13q204 0 379 -109q-39 -56 -39 -65q0 -13 12 -13q11 0 48 64q111 -75 187.5 -186t107.5 -241l-56 -12q-10 -2 -10 -16q0 -5 5.5 -8t9.5 -2l57 13q14 -72 14 -140zM1696 640q0 163 -63.5 311t-170.5 255t-255 170.5t-311 63.5t-311 -63.5
+t-255 -170.5t-170.5 -255t-63.5 -311t63.5 -311t170.5 -255t255 -170.5t311 -63.5t311 63.5t255 170.5t170.5 255t63.5 311zM1792 640q0 -182 -71 -348t-191 -286t-286 -191t-348 -71t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71t348 -71t286 -191
+t191 -286t71 -348z" />
+    <glyph glyph-name="_578" unicode="&#xf268;" horiz-adv-x="1792" 
+d="M893 1536q240 2 451 -120q232 -134 352 -372l-742 39q-160 9 -294 -74.5t-185 -229.5l-276 424q128 159 311 245.5t383 87.5zM146 1131l337 -663q72 -143 211 -217t293 -45l-230 -451q-212 33 -385 157.5t-272.5 316t-99.5 411.5q0 267 146 491zM1732 962
+q58 -150 59.5 -310.5t-48.5 -306t-153 -272t-246 -209.5q-230 -133 -498 -119l405 623q88 131 82.5 290.5t-106.5 277.5zM896 942q125 0 213.5 -88.5t88.5 -213.5t-88.5 -213.5t-213.5 -88.5t-213.5 88.5t-88.5 213.5t88.5 213.5t213.5 88.5z" />
+    <glyph glyph-name="_579" unicode="&#xf269;" horiz-adv-x="1792" 
+d="M903 -256q-283 0 -504.5 150.5t-329.5 398.5q-58 131 -67 301t26 332.5t111 312t179 242.5l-11 -281q11 14 68 15.5t70 -15.5q42 81 160.5 138t234.5 59q-54 -45 -119.5 -148.5t-58.5 -163.5q25 -8 62.5 -13.5t63 -7.5t68 -4t50.5 -3q15 -5 9.5 -45.5t-30.5 -75.5
+q-5 -7 -16.5 -18.5t-56.5 -35.5t-101 -34l15 -189l-139 67q-18 -43 -7.5 -81.5t36 -66.5t65.5 -41.5t81 -6.5q51 9 98 34.5t83.5 45t73.5 17.5q61 -4 89.5 -33t19.5 -65q-1 -2 -2.5 -5.5t-8.5 -12.5t-18 -15.5t-31.5 -10.5t-46.5 -1q-60 -95 -144.5 -135.5t-209.5 -29.5
+q74 -61 162.5 -82.5t168.5 -6t154.5 52t128 87.5t80.5 104q43 91 39 192.5t-37.5 188.5t-78.5 125q87 -38 137 -79.5t77 -112.5q15 170 -57.5 343t-209.5 284q265 -77 412 -279.5t151 -517.5q2 -127 -40.5 -255t-123.5 -238t-189 -196t-247.5 -135.5t-288.5 -49.5z" />
+    <glyph glyph-name="_580" unicode="&#xf26a;" horiz-adv-x="1792" 
+d="M1493 1308q-165 110 -359 110q-155 0 -293 -73t-240 -200q-75 -93 -119.5 -218t-48.5 -266v-42q4 -141 48.5 -266t119.5 -218q102 -127 240 -200t293 -73q194 0 359 110q-121 -108 -274.5 -168t-322.5 -60q-29 0 -43 1q-175 8 -333 82t-272 193t-181 281t-67 339
+q0 182 71 348t191 286t286 191t348 71h3q168 -1 320.5 -60.5t273.5 -167.5zM1792 640q0 -192 -77 -362.5t-213 -296.5q-104 -63 -222 -63q-137 0 -255 84q154 56 253.5 233t99.5 405q0 227 -99 404t-253 234q119 83 254 83q119 0 226 -65q135 -125 210.5 -295t75.5 -361z
+" />
+    <glyph glyph-name="_581" unicode="&#xf26b;" horiz-adv-x="1792" 
+d="M1792 599q0 -56 -7 -104h-1151q0 -146 109.5 -244.5t257.5 -98.5q99 0 185.5 46.5t136.5 130.5h423q-56 -159 -170.5 -281t-267.5 -188.5t-321 -66.5q-187 0 -356 83q-228 -116 -394 -116q-237 0 -237 263q0 115 45 275q17 60 109 229q199 360 475 606
+q-184 -79 -427 -354q63 274 283.5 449.5t501.5 175.5q30 0 45 -1q255 117 433 117q64 0 116 -13t94.5 -40.5t66.5 -76.5t24 -115q0 -116 -75 -286q101 -182 101 -390zM1722 1239q0 83 -53 132t-137 49q-108 0 -254 -70q121 -47 222.5 -131.5t170.5 -195.5q51 135 51 216z
+M128 2q0 -86 48.5 -132.5t134.5 -46.5q115 0 266 83q-122 72 -213.5 183t-137.5 245q-98 -205 -98 -332zM632 715h728q-5 142 -113 237t-251 95q-144 0 -251.5 -95t-112.5 -237z" />
+    <glyph glyph-name="_582" unicode="&#xf26c;" horiz-adv-x="2048" 
+d="M1792 288v960q0 13 -9.5 22.5t-22.5 9.5h-1600q-13 0 -22.5 -9.5t-9.5 -22.5v-960q0 -13 9.5 -22.5t22.5 -9.5h1600q13 0 22.5 9.5t9.5 22.5zM1920 1248v-960q0 -66 -47 -113t-113 -47h-736v-128h352q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-832q-14 0 -23 9t-9 23
+v64q0 14 9 23t23 9h352v128h-736q-66 0 -113 47t-47 113v960q0 66 47 113t113 47h1600q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="_583" unicode="&#xf26d;" horiz-adv-x="1792" 
+d="M138 1408h197q-70 -64 -126 -149q-36 -56 -59 -115t-30 -125.5t-8.5 -120t10.5 -132t21 -126t28 -136.5q4 -19 6 -28q51 -238 81 -329q57 -171 152 -275h-272q-48 0 -82 34t-34 82v1304q0 48 34 82t82 34zM1346 1408h308q48 0 82 -34t34 -82v-1304q0 -48 -34 -82t-82 -34
+h-178q212 210 196 565l-469 -101q-2 -45 -12 -82t-31 -72t-59.5 -59.5t-93.5 -36.5q-123 -26 -199 40q-32 27 -53 61t-51.5 129t-64.5 258q-35 163 -45.5 263t-5.5 139t23 77q20 41 62.5 73t102.5 45q45 12 83.5 6.5t67 -17t54 -35t43 -48t34.5 -56.5l468 100
+q-68 175 -180 287z" />
+    <glyph glyph-name="_584" unicode="&#xf26e;" 
+d="M1401 -11l-6 -6q-113 -113 -259 -175q-154 -64 -317 -64q-165 0 -317 64q-148 63 -259 175q-113 112 -175 258q-42 103 -54 189q-4 28 48 36q51 8 56 -20q1 -1 1 -4q18 -90 46 -159q50 -124 152 -226q98 -98 226 -152q132 -56 276 -56q143 0 276 56q128 55 225 152l6 6
+q10 10 25 6q12 -3 33 -22q36 -37 17 -58zM929 604l-66 -66l63 -63q21 -21 -7 -49q-17 -17 -32 -17q-10 0 -19 10l-62 61l-66 -66q-5 -5 -15 -5q-15 0 -31 16l-2 2q-18 15 -18 29q0 7 8 17l66 65l-66 66q-16 16 14 45q18 18 31 18q6 0 13 -5l65 -66l65 65q18 17 48 -13
+q27 -27 11 -44zM1400 547q0 -118 -46 -228q-45 -105 -126 -186q-80 -80 -187 -126t-228 -46t-228 46t-187 126q-82 82 -125 186q-15 33 -15 40h-1q-9 27 43 44q50 16 60 -12q37 -99 97 -167h1v339v2q3 136 102 232q105 103 253 103q147 0 251 -103t104 -249
+q0 -147 -104.5 -251t-250.5 -104q-58 0 -112 16q-28 11 -13 61q16 51 44 43l14 -3q14 -3 33 -6t30 -3q104 0 176 71.5t72 174.5q0 101 -72 171q-71 71 -175 71q-107 0 -178 -80q-64 -72 -64 -160v-413q110 -67 242 -67q96 0 185 36.5t156 103.5t103.5 155t36.5 183
+q0 198 -141 339q-140 140 -339 140q-200 0 -340 -140q-53 -53 -77 -87l-2 -2q-8 -11 -13 -15.5t-21.5 -9.5t-38.5 3q-21 5 -36.5 16.5t-15.5 26.5v680q0 15 10.5 26.5t27.5 11.5h877q30 0 30 -55t-30 -55h-811v-483h1q40 42 102 84t108 61q109 46 231 46q121 0 228 -46
+t187 -126q81 -81 126 -186q46 -112 46 -229zM1369 1128q9 -8 9 -18t-5.5 -18t-16.5 -21q-26 -26 -39 -26q-9 0 -16 7q-106 91 -207 133q-128 56 -276 56q-133 0 -262 -49q-27 -10 -45 37q-9 25 -8 38q3 16 16 20q130 57 299 57q164 0 316 -64q137 -58 235 -152z" />
+    <glyph glyph-name="_585" unicode="&#xf270;" horiz-adv-x="1792" 
+d="M1551 60q15 6 26 3t11 -17.5t-15 -33.5q-13 -16 -44 -43.5t-95.5 -68t-141 -74t-188 -58t-229.5 -24.5q-119 0 -238 31t-209 76.5t-172.5 104t-132.5 105t-84 87.5q-8 9 -10 16.5t1 12t8 7t11.5 2t11.5 -4.5q192 -117 300 -166q389 -176 799 -90q190 40 391 135z
+M1758 175q11 -16 2.5 -69.5t-28.5 -102.5q-34 -83 -85 -124q-17 -14 -26 -9t0 24q21 45 44.5 121.5t6.5 98.5q-5 7 -15.5 11.5t-27 6t-29.5 2.5t-35 0t-31.5 -2t-31 -3t-22.5 -2q-6 -1 -13 -1.5t-11 -1t-8.5 -1t-7 -0.5h-5.5h-4.5t-3 0.5t-2 1.5l-1.5 3q-6 16 47 40t103 30
+q46 7 108 1t76 -24zM1364 618q0 -31 13.5 -64t32 -58t37.5 -46t33 -32l13 -11l-227 -224q-40 37 -79 75.5t-58 58.5l-19 20q-11 11 -25 33q-38 -59 -97.5 -102.5t-127.5 -63.5t-140 -23t-137.5 21t-117.5 65.5t-83 113t-31 162.5q0 84 28 154t72 116.5t106.5 83t122.5 57
+t130 34.5t119.5 18.5t99.5 6.5v127q0 65 -21 97q-34 53 -121 53q-6 0 -16.5 -1t-40.5 -12t-56 -29.5t-56 -59.5t-48 -96l-294 27q0 60 22 119t67 113t108 95t151.5 65.5t190.5 24.5q100 0 181 -25t129.5 -61.5t81 -83t45 -86t12.5 -73.5v-589zM692 597q0 -86 70 -133
+q66 -44 139 -22q84 25 114 123q14 45 14 101v162q-59 -2 -111 -12t-106.5 -33.5t-87 -71t-32.5 -114.5z" />
+    <glyph glyph-name="_586" unicode="&#xf271;" horiz-adv-x="1792" 
+d="M1536 1280q52 0 90 -38t38 -90v-1280q0 -52 -38 -90t-90 -38h-1408q-52 0 -90 38t-38 90v1280q0 52 38 90t90 38h128v96q0 66 47 113t113 47h64q66 0 113 -47t47 -113v-96h384v96q0 66 47 113t113 47h64q66 0 113 -47t47 -113v-96h128zM1152 1376v-288q0 -14 9 -23t23 -9
+h64q14 0 23 9t9 23v288q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23zM384 1376v-288q0 -14 9 -23t23 -9h64q14 0 23 9t9 23v288q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23zM1536 -128v1024h-1408v-1024h1408zM896 448h224q14 0 23 -9t9 -23v-64q0 -14 -9 -23t-23 -9h-224
+v-224q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v224h-224q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h224v224q0 14 9 23t23 9h64q14 0 23 -9t9 -23v-224z" />
+    <glyph glyph-name="_587" unicode="&#xf272;" horiz-adv-x="1792" 
+d="M1152 416v-64q0 -14 -9 -23t-23 -9h-576q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h576q14 0 23 -9t9 -23zM128 -128h1408v1024h-1408v-1024zM512 1088v288q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-288q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM1280 1088v288q0 14 -9 23
+t-23 9h-64q-14 0 -23 -9t-9 -23v-288q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM1664 1152v-1280q0 -52 -38 -90t-90 -38h-1408q-52 0 -90 38t-38 90v1280q0 52 38 90t90 38h128v96q0 66 47 113t113 47h64q66 0 113 -47t47 -113v-96h384v96q0 66 47 113t113 47h64q66 0 113 -47
+t47 -113v-96h128q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="_588" unicode="&#xf273;" horiz-adv-x="1792" 
+d="M1111 151l-46 -46q-9 -9 -22 -9t-23 9l-188 189l-188 -189q-10 -9 -23 -9t-22 9l-46 46q-9 9 -9 22t9 23l189 188l-189 188q-9 10 -9 23t9 22l46 46q9 9 22 9t23 -9l188 -188l188 188q10 9 23 9t22 -9l46 -46q9 -9 9 -22t-9 -23l-188 -188l188 -188q9 -10 9 -23t-9 -22z
+M128 -128h1408v1024h-1408v-1024zM512 1088v288q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-288q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM1280 1088v288q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-288q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM1664 1152v-1280
+q0 -52 -38 -90t-90 -38h-1408q-52 0 -90 38t-38 90v1280q0 52 38 90t90 38h128v96q0 66 47 113t113 47h64q66 0 113 -47t47 -113v-96h384v96q0 66 47 113t113 47h64q66 0 113 -47t47 -113v-96h128q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="_589" unicode="&#xf274;" horiz-adv-x="1792" 
+d="M1303 572l-512 -512q-10 -9 -23 -9t-23 9l-288 288q-9 10 -9 23t9 22l46 46q9 9 22 9t23 -9l220 -220l444 444q10 9 23 9t22 -9l46 -46q9 -9 9 -22t-9 -23zM128 -128h1408v1024h-1408v-1024zM512 1088v288q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-288q0 -14 9 -23
+t23 -9h64q14 0 23 9t9 23zM1280 1088v288q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-288q0 -14 9 -23t23 -9h64q14 0 23 9t9 23zM1664 1152v-1280q0 -52 -38 -90t-90 -38h-1408q-52 0 -90 38t-38 90v1280q0 52 38 90t90 38h128v96q0 66 47 113t113 47h64q66 0 113 -47
+t47 -113v-96h384v96q0 66 47 113t113 47h64q66 0 113 -47t47 -113v-96h128q52 0 90 -38t38 -90z" />
+    <glyph glyph-name="_590" unicode="&#xf275;" horiz-adv-x="1792" 
+d="M448 1536q26 0 45 -19t19 -45v-891l536 429q17 14 40 14q26 0 45 -19t19 -45v-379l536 429q17 14 40 14q26 0 45 -19t19 -45v-1152q0 -26 -19 -45t-45 -19h-1664q-26 0 -45 19t-19 45v1664q0 26 19 45t45 19h384z" />
+    <glyph glyph-name="_591" unicode="&#xf276;" horiz-adv-x="1024" 
+d="M512 448q66 0 128 15v-655q0 -26 -19 -45t-45 -19h-128q-26 0 -45 19t-19 45v655q62 -15 128 -15zM512 1536q212 0 362 -150t150 -362t-150 -362t-362 -150t-362 150t-150 362t150 362t362 150zM512 1312q14 0 23 9t9 23t-9 23t-23 9q-146 0 -249 -103t-103 -249
+q0 -14 9 -23t23 -9t23 9t9 23q0 119 84.5 203.5t203.5 84.5z" />
+    <glyph glyph-name="_592" unicode="&#xf277;" horiz-adv-x="1792" 
+d="M1745 1239q10 -10 10 -23t-10 -23l-141 -141q-28 -28 -68 -28h-1344q-26 0 -45 19t-19 45v256q0 26 19 45t45 19h576v64q0 26 19 45t45 19h128q26 0 45 -19t19 -45v-64h512q40 0 68 -28zM768 320h256v-512q0 -26 -19 -45t-45 -19h-128q-26 0 -45 19t-19 45v512zM1600 768
+q26 0 45 -19t19 -45v-256q0 -26 -19 -45t-45 -19h-1344q-40 0 -68 28l-141 141q-10 10 -10 23t10 23l141 141q28 28 68 28h512v192h256v-192h576z" />
+    <glyph glyph-name="_593" unicode="&#xf278;" horiz-adv-x="2048" 
+d="M2020 1525q28 -20 28 -53v-1408q0 -20 -11 -36t-29 -23l-640 -256q-24 -11 -48 0l-616 246l-616 -246q-10 -5 -24 -5q-19 0 -36 11q-28 20 -28 53v1408q0 20 11 36t29 23l640 256q24 11 48 0l616 -246l616 246q32 13 60 -6zM736 1390v-1270l576 -230v1270zM128 1173
+v-1270l544 217v1270zM1920 107v1270l-544 -217v-1270z" />
+    <glyph glyph-name="_594" unicode="&#xf279;" horiz-adv-x="1792" 
+d="M512 1536q13 0 22.5 -9.5t9.5 -22.5v-1472q0 -20 -17 -28l-480 -256q-7 -4 -15 -4q-13 0 -22.5 9.5t-9.5 22.5v1472q0 20 17 28l480 256q7 4 15 4zM1760 1536q13 0 22.5 -9.5t9.5 -22.5v-1472q0 -20 -17 -28l-480 -256q-7 -4 -15 -4q-13 0 -22.5 9.5t-9.5 22.5v1472
+q0 20 17 28l480 256q7 4 15 4zM640 1536q8 0 14 -3l512 -256q18 -10 18 -29v-1472q0 -13 -9.5 -22.5t-22.5 -9.5q-8 0 -14 3l-512 256q-18 10 -18 29v1472q0 13 9.5 22.5t22.5 9.5z" />
+    <glyph glyph-name="_595" unicode="&#xf27a;" horiz-adv-x="1792" 
+d="M640 640q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1024 640q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1408 640q0 53 -37.5 90.5t-90.5 37.5
+t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5zM1792 640q0 -174 -120 -321.5t-326 -233t-450 -85.5q-110 0 -211 18q-173 -173 -435 -229q-52 -10 -86 -13q-12 -1 -22 6t-13 18q-4 15 20 37q5 5 23.5 21.5t25.5 23.5t23.5 25.5t24 31.5t20.5 37
+t20 48t14.5 57.5t12.5 72.5q-146 90 -229.5 216.5t-83.5 269.5q0 174 120 321.5t326 233t450 85.5t450 -85.5t326 -233t120 -321.5z" />
+    <glyph glyph-name="_596" unicode="&#xf27b;" horiz-adv-x="1792" 
+d="M640 640q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1024 640q0 -53 -37.5 -90.5t-90.5 -37.5t-90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM1408 640q0 -53 -37.5 -90.5t-90.5 -37.5
+t-90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5t90.5 -37.5t37.5 -90.5zM896 1152q-204 0 -381.5 -69.5t-282 -187.5t-104.5 -255q0 -112 71.5 -213.5t201.5 -175.5l87 -50l-27 -96q-24 -91 -70 -172q152 63 275 171l43 38l57 -6q69 -8 130 -8q204 0 381.5 69.5t282 187.5
+t104.5 255t-104.5 255t-282 187.5t-381.5 69.5zM1792 640q0 -174 -120 -321.5t-326 -233t-450 -85.5q-70 0 -145 8q-198 -175 -460 -242q-49 -14 -114 -22h-5q-15 0 -27 10.5t-16 27.5v1q-3 4 -0.5 12t2 10t4.5 9.5l6 9t7 8.5t8 9q7 8 31 34.5t34.5 38t31 39.5t32.5 51
+t27 59t26 76q-157 89 -247.5 220t-90.5 281q0 130 71 248.5t191 204.5t286 136.5t348 50.5t348 -50.5t286 -136.5t191 -204.5t71 -248.5z" />
+    <glyph glyph-name="_597" unicode="&#xf27c;" horiz-adv-x="1024" 
+d="M512 345l512 295v-591l-512 -296v592zM0 640v-591l512 296zM512 1527v-591l-512 -296v591zM512 936l512 295v-591z" />
+    <glyph glyph-name="_598" unicode="&#xf27d;" horiz-adv-x="1792" 
+d="M1709 1018q-10 -236 -332 -651q-333 -431 -562 -431q-142 0 -240 263q-44 160 -132 482q-72 262 -157 262q-18 0 -127 -76l-77 98q24 21 108 96.5t130 115.5q156 138 241 146q95 9 153 -55.5t81 -203.5q44 -287 66 -373q55 -249 120 -249q51 0 154 161q101 161 109 246
+q13 139 -109 139q-57 0 -121 -26q120 393 459 382q251 -8 236 -326z" />
+    <glyph glyph-name="f27e" unicode="&#xf27e;" 
+d="M0 1408h1536v-1536h-1536v1536zM1085 293l-221 631l221 297h-634l221 -297l-221 -631l317 -304z" />
+    <glyph glyph-name="uniF280" unicode="&#xf280;" 
+d="M0 1408h1536v-1536h-1536v1536zM908 1088l-12 -33l75 -83l-31 -114l25 -25l107 57l107 -57l25 25l-31 114l75 83l-12 33h-95l-53 96h-32l-53 -96h-95zM641 925q32 0 44.5 -16t11.5 -63l174 21q0 55 -17.5 92.5t-50.5 56t-69 25.5t-85 7q-133 0 -199 -57.5t-66 -182.5v-72
+h-96v-128h76q20 0 20 -8v-382q0 -14 -5 -20t-18 -7l-73 -7v-88h448v86l-149 14q-6 1 -8.5 1.5t-3.5 2.5t-0.5 4t1 7t0.5 10v387h191l38 128h-231q-6 0 -2 6t4 9v80q0 27 1.5 40.5t7.5 28t19.5 20t36.5 5.5zM1248 96v86l-54 9q-7 1 -9.5 2.5t-2.5 3t1 7.5t1 12v520h-275
+l-23 -101l83 -22q23 -7 23 -27v-370q0 -14 -6 -18.5t-20 -6.5l-70 -9v-86h352z" />
+    <glyph glyph-name="uniF281" unicode="&#xf281;" horiz-adv-x="1792" 
+d="M1792 690q0 -58 -29.5 -105.5t-79.5 -72.5q12 -46 12 -96q0 -155 -106.5 -287t-290.5 -208.5t-400 -76.5t-399.5 76.5t-290 208.5t-106.5 287q0 47 11 94q-51 25 -82 73.5t-31 106.5q0 82 58 140.5t141 58.5q85 0 145 -63q218 152 515 162l116 521q3 13 15 21t26 5
+l369 -81q18 37 54 59.5t79 22.5q62 0 106 -43.5t44 -105.5t-44 -106t-106 -44t-105.5 43.5t-43.5 105.5l-334 74l-104 -472q300 -9 519 -160q58 61 143 61q83 0 141 -58.5t58 -140.5zM418 491q0 -62 43.5 -106t105.5 -44t106 44t44 106t-44 105.5t-106 43.5q-61 0 -105 -44
+t-44 -105zM1228 136q11 11 11 26t-11 26q-10 10 -25 10t-26 -10q-41 -42 -121 -62t-160 -20t-160 20t-121 62q-11 10 -26 10t-25 -10q-11 -10 -11 -25.5t11 -26.5q43 -43 118.5 -68t122.5 -29.5t91 -4.5t91 4.5t122.5 29.5t118.5 68zM1225 341q62 0 105.5 44t43.5 106
+q0 61 -44 105t-105 44q-62 0 -106 -43.5t-44 -105.5t44 -106t106 -44z" />
+    <glyph glyph-name="_602" unicode="&#xf282;" horiz-adv-x="1792" 
+d="M69 741h1q16 126 58.5 241.5t115 217t167.5 176t223.5 117.5t276.5 43q231 0 414 -105.5t294 -303.5q104 -187 104 -442v-188h-1125q1 -111 53.5 -192.5t136.5 -122.5t189.5 -57t213 -3t208 46.5t173.5 84.5v-377q-92 -55 -229.5 -92t-312.5 -38t-316 53
+q-189 73 -311.5 249t-124.5 372q-3 242 111 412t325 268q-48 -60 -78 -125.5t-46 -159.5h635q8 77 -8 140t-47 101.5t-70.5 66.5t-80.5 41t-75 20.5t-56 8.5l-22 1q-135 -5 -259.5 -44.5t-223.5 -104.5t-176 -140.5t-138 -163.5z" />
+    <glyph glyph-name="_603" unicode="&#xf283;" horiz-adv-x="2304" 
+d="M0 32v608h2304v-608q0 -66 -47 -113t-113 -47h-1984q-66 0 -113 47t-47 113zM640 256v-128h384v128h-384zM256 256v-128h256v128h-256zM2144 1408q66 0 113 -47t47 -113v-224h-2304v224q0 66 47 113t113 47h1984z" />
+    <glyph glyph-name="_604" unicode="&#xf284;" horiz-adv-x="1792" 
+d="M1584 246l-218 111q-74 -120 -196.5 -189t-263.5 -69q-147 0 -271 72t-196 196t-72 270q0 110 42.5 209.5t115 172t172 115t209.5 42.5q131 0 247.5 -60.5t192.5 -168.5l215 125q-110 169 -286.5 265t-378.5 96q-161 0 -308 -63t-253 -169t-169 -253t-63 -308t63 -308
+t169 -253t253 -169t308 -63q213 0 397.5 107t290.5 292zM1030 643l693 -352q-116 -253 -334.5 -400t-492.5 -147q-182 0 -348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71q260 0 470.5 -133.5t335.5 -366.5zM1543 640h-39v-160h-96v352h136q32 0 54.5 -20
+t28.5 -48t1 -56t-27.5 -48t-57.5 -20z" />
+    <glyph glyph-name="uniF285" unicode="&#xf285;" horiz-adv-x="1792" 
+d="M1427 827l-614 386l92 151h855zM405 562l-184 116v858l1183 -743zM1424 697l147 -95v-858l-532 335zM1387 718l-500 -802h-855l356 571z" />
+    <glyph glyph-name="uniF286" unicode="&#xf286;" horiz-adv-x="1792" 
+d="M640 528v224q0 16 -16 16h-96q-16 0 -16 -16v-224q0 -16 16 -16h96q16 0 16 16zM1152 528v224q0 16 -16 16h-96q-16 0 -16 -16v-224q0 -16 16 -16h96q16 0 16 16zM1664 496v-752h-640v320q0 80 -56 136t-136 56t-136 -56t-56 -136v-320h-640v752q0 16 16 16h96
+q16 0 16 -16v-112h128v624q0 16 16 16h96q16 0 16 -16v-112h128v112q0 16 16 16h96q16 0 16 -16v-112h128v112q0 6 2.5 9.5t8.5 5t9.5 2t11.5 0t9 -0.5v391q-32 15 -32 50q0 23 16.5 39t38.5 16t38.5 -16t16.5 -39q0 -35 -32 -50v-17q45 10 83 10q21 0 59.5 -7.5t54.5 -7.5
+q17 0 47 7.5t37 7.5q16 0 16 -16v-210q0 -15 -35 -21.5t-62 -6.5q-18 0 -54.5 7.5t-55.5 7.5q-40 0 -90 -12v-133q1 0 9 0.5t11.5 0t9.5 -2t8.5 -5t2.5 -9.5v-112h128v112q0 16 16 16h96q16 0 16 -16v-112h128v112q0 16 16 16h96q16 0 16 -16v-624h128v112q0 16 16 16h96
+q16 0 16 -16z" />
+    <glyph glyph-name="_607" unicode="&#xf287;" horiz-adv-x="2304" 
+d="M2288 731q16 -8 16 -27t-16 -27l-320 -192q-8 -5 -16 -5q-9 0 -16 4q-16 10 -16 28v128h-858q37 -58 83 -165q16 -37 24.5 -55t24 -49t27 -47t27 -34t31.5 -26t33 -8h96v96q0 14 9 23t23 9h320q14 0 23 -9t9 -23v-320q0 -14 -9 -23t-23 -9h-320q-14 0 -23 9t-9 23v96h-96
+q-32 0 -61 10t-51 23.5t-45 40.5t-37 46t-33.5 57t-28.5 57.5t-28 60.5q-23 53 -37 81.5t-36 65t-44.5 53.5t-46.5 17h-360q-22 -84 -91 -138t-157 -54q-106 0 -181 75t-75 181t75 181t181 75q88 0 157 -54t91 -138h104q24 0 46.5 17t44.5 53.5t36 65t37 81.5q19 41 28 60.5
+t28.5 57.5t33.5 57t37 46t45 40.5t51 23.5t61 10h107q21 57 70 92.5t111 35.5q80 0 136 -56t56 -136t-56 -136t-136 -56q-62 0 -111 35.5t-70 92.5h-107q-17 0 -33 -8t-31.5 -26t-27 -34t-27 -47t-24 -49t-24.5 -55q-46 -107 -83 -165h1114v128q0 18 16 28t32 -1z" />
+    <glyph glyph-name="_608" unicode="&#xf288;" horiz-adv-x="1792" 
+d="M1150 774q0 -56 -39.5 -95t-95.5 -39h-253v269h253q56 0 95.5 -39.5t39.5 -95.5zM1329 774q0 130 -91.5 222t-222.5 92h-433v-896h180v269h253q130 0 222 91.5t92 221.5zM1792 640q0 -182 -71 -348t-191 -286t-286 -191t-348 -71t-348 71t-286 191t-191 286t-71 348
+t71 348t191 286t286 191t348 71t348 -71t286 -191t191 -286t71 -348z" />
+    <glyph glyph-name="_609" unicode="&#xf289;" horiz-adv-x="2304" 
+d="M1645 438q0 59 -34 106.5t-87 68.5q-7 -45 -23 -92q-7 -24 -27.5 -38t-44.5 -14q-12 0 -24 3q-31 10 -45 38.5t-4 58.5q23 71 23 143q0 123 -61 227.5t-166 165.5t-228 61q-134 0 -247 -73t-167 -194q108 -28 188 -106q22 -23 22 -55t-22 -54t-54 -22t-55 22
+q-75 75 -180 75q-106 0 -181 -74.5t-75 -180.5t75 -180.5t181 -74.5h1046q79 0 134.5 55.5t55.5 133.5zM1798 438q0 -142 -100.5 -242t-242.5 -100h-1046q-169 0 -289 119.5t-120 288.5q0 153 100 267t249 136q62 184 221 298t354 114q235 0 408.5 -158.5t196.5 -389.5
+q116 -25 192.5 -118.5t76.5 -214.5zM2048 438q0 -175 -97 -319q-23 -33 -64 -33q-24 0 -43 13q-26 17 -32 48.5t12 57.5q71 104 71 233t-71 233q-18 26 -12 57t32 49t57.5 11.5t49.5 -32.5q97 -142 97 -318zM2304 438q0 -244 -134 -443q-23 -34 -64 -34q-23 0 -42 13
+q-26 18 -32.5 49t11.5 57q108 164 108 358q0 195 -108 357q-18 26 -11.5 57.5t32.5 48.5q26 18 57 12t49 -33q134 -198 134 -442z" />
+    <glyph glyph-name="_610" unicode="&#xf28a;" 
+d="M1500 -13q0 -89 -63 -152.5t-153 -63.5t-153.5 63.5t-63.5 152.5q0 90 63.5 153.5t153.5 63.5t153 -63.5t63 -153.5zM1267 268q-115 -15 -192.5 -102.5t-77.5 -205.5q0 -74 33 -138q-146 -78 -379 -78q-109 0 -201 21t-153.5 54.5t-110.5 76.5t-76 85t-44.5 83
+t-23.5 66.5t-6 39.5q0 19 4.5 42.5t18.5 56t36.5 58t64 43.5t94.5 18t94 -17.5t63 -41t35.5 -53t17.5 -49t4 -33.5q0 -34 -23 -81q28 -27 82 -42t93 -17l40 -1q115 0 190 51t75 133q0 26 -9 48.5t-31.5 44.5t-49.5 41t-74 44t-93.5 47.5t-119.5 56.5q-28 13 -43 20
+q-116 55 -187 100t-122.5 102t-72 125.5t-20.5 162.5q0 78 20.5 150t66 137.5t112.5 114t166.5 77t221.5 28.5q120 0 220 -26t164.5 -67t109.5 -94t64 -105.5t19 -103.5q0 -46 -15 -82.5t-36.5 -58t-48.5 -36t-49 -19.5t-39 -5h-8h-32t-39 5t-44 14t-41 28t-37 46t-24 70.5
+t-10 97.5q-15 16 -59 25.5t-81 10.5l-37 1q-68 0 -117.5 -31t-70.5 -70t-21 -76q0 -24 5 -43t24 -46t53 -51t97 -53.5t150 -58.5q76 -25 138.5 -53.5t109 -55.5t83 -59t60.5 -59.5t41 -62.5t26.5 -62t14.5 -63.5t6 -62t1 -62.5z" />
+    <glyph glyph-name="_611" unicode="&#xf28b;" 
+d="M704 352v576q0 14 -9 23t-23 9h-256q-14 0 -23 -9t-9 -23v-576q0 -14 9 -23t23 -9h256q14 0 23 9t9 23zM1152 352v576q0 14 -9 23t-23 9h-256q-14 0 -23 -9t-9 -23v-576q0 -14 9 -23t23 -9h256q14 0 23 9t9 23zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103
+t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="_612" unicode="&#xf28c;" 
+d="M768 1408q209 0 385.5 -103t279.5 -279.5t103 -385.5t-103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103zM768 96q148 0 273 73t198 198t73 273t-73 273t-198 198t-273 73t-273 -73t-198 -198t-73 -273
+t73 -273t198 -198t273 -73zM864 320q-14 0 -23 9t-9 23v576q0 14 9 23t23 9h192q14 0 23 -9t9 -23v-576q0 -14 -9 -23t-23 -9h-192zM480 320q-14 0 -23 9t-9 23v576q0 14 9 23t23 9h192q14 0 23 -9t9 -23v-576q0 -14 -9 -23t-23 -9h-192z" />
+    <glyph glyph-name="_613" unicode="&#xf28d;" 
+d="M1088 352v576q0 14 -9 23t-23 9h-576q-14 0 -23 -9t-9 -23v-576q0 -14 9 -23t23 -9h576q14 0 23 9t9 23zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5
+t103 -385.5z" />
+    <glyph glyph-name="_614" unicode="&#xf28e;" 
+d="M768 1408q209 0 385.5 -103t279.5 -279.5t103 -385.5t-103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103zM768 96q148 0 273 73t198 198t73 273t-73 273t-198 198t-273 73t-273 -73t-198 -198t-73 -273
+t73 -273t198 -198t273 -73zM480 320q-14 0 -23 9t-9 23v576q0 14 9 23t23 9h576q14 0 23 -9t9 -23v-576q0 -14 -9 -23t-23 -9h-576z" />
+    <glyph glyph-name="_615" unicode="&#xf290;" horiz-adv-x="1792" 
+d="M1757 128l35 -313q3 -28 -16 -50q-19 -21 -48 -21h-1664q-29 0 -48 21q-19 22 -16 50l35 313h1722zM1664 967l86 -775h-1708l86 775q3 24 21 40.5t43 16.5h256v-128q0 -53 37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5v128h384v-128q0 -53 37.5 -90.5t90.5 -37.5
+t90.5 37.5t37.5 90.5v128h256q25 0 43 -16.5t21 -40.5zM1280 1152v-256q0 -26 -19 -45t-45 -19t-45 19t-19 45v256q0 106 -75 181t-181 75t-181 -75t-75 -181v-256q0 -26 -19 -45t-45 -19t-45 19t-19 45v256q0 159 112.5 271.5t271.5 112.5t271.5 -112.5t112.5 -271.5z" />
+    <glyph glyph-name="_616" unicode="&#xf291;" horiz-adv-x="2048" 
+d="M1920 768q53 0 90.5 -37.5t37.5 -90.5t-37.5 -90.5t-90.5 -37.5h-15l-115 -662q-8 -46 -44 -76t-82 -30h-1280q-46 0 -82 30t-44 76l-115 662h-15q-53 0 -90.5 37.5t-37.5 90.5t37.5 90.5t90.5 37.5h1792zM485 -32q26 2 43.5 22.5t15.5 46.5l-32 416q-2 26 -22.5 43.5
+t-46.5 15.5t-43.5 -22.5t-15.5 -46.5l32 -416q2 -25 20.5 -42t43.5 -17h5zM896 32v416q0 26 -19 45t-45 19t-45 -19t-19 -45v-416q0 -26 19 -45t45 -19t45 19t19 45zM1280 32v416q0 26 -19 45t-45 19t-45 -19t-19 -45v-416q0 -26 19 -45t45 -19t45 19t19 45zM1632 27l32 416
+q2 26 -15.5 46.5t-43.5 22.5t-46.5 -15.5t-22.5 -43.5l-32 -416q-2 -26 15.5 -46.5t43.5 -22.5h5q25 0 43.5 17t20.5 42zM476 1244l-93 -412h-132l101 441q19 88 89 143.5t160 55.5h167q0 26 19 45t45 19h384q26 0 45 -19t19 -45h167q90 0 160 -55.5t89 -143.5l101 -441
+h-132l-93 412q-11 44 -45.5 72t-79.5 28h-167q0 -26 -19 -45t-45 -19h-384q-26 0 -45 19t-19 45h-167q-45 0 -79.5 -28t-45.5 -72z" />
+    <glyph glyph-name="_617" unicode="&#xf292;" horiz-adv-x="1792" 
+d="M991 512l64 256h-254l-64 -256h254zM1759 1016l-56 -224q-7 -24 -31 -24h-327l-64 -256h311q15 0 25 -12q10 -14 6 -28l-56 -224q-5 -24 -31 -24h-327l-81 -328q-7 -24 -31 -24h-224q-16 0 -26 12q-9 12 -6 28l78 312h-254l-81 -328q-7 -24 -31 -24h-225q-15 0 -25 12
+q-9 12 -6 28l78 312h-311q-15 0 -25 12q-9 12 -6 28l56 224q7 24 31 24h327l64 256h-311q-15 0 -25 12q-10 14 -6 28l56 224q5 24 31 24h327l81 328q7 24 32 24h224q15 0 25 -12q9 -12 6 -28l-78 -312h254l81 328q7 24 32 24h224q15 0 25 -12q9 -12 6 -28l-78 -312h311
+q15 0 25 -12q9 -12 6 -28z" />
+    <glyph glyph-name="_618" unicode="&#xf293;" 
+d="M841 483l148 -148l-149 -149zM840 1094l149 -149l-148 -148zM710 -130l464 464l-306 306l306 306l-464 464v-611l-255 255l-93 -93l320 -321l-320 -321l93 -93l255 255v-611zM1429 640q0 -209 -32 -365.5t-87.5 -257t-140.5 -162.5t-181.5 -86.5t-219.5 -24.5
+t-219.5 24.5t-181.5 86.5t-140.5 162.5t-87.5 257t-32 365.5t32 365.5t87.5 257t140.5 162.5t181.5 86.5t219.5 24.5t219.5 -24.5t181.5 -86.5t140.5 -162.5t87.5 -257t32 -365.5z" />
+    <glyph glyph-name="_619" unicode="&#xf294;" horiz-adv-x="1024" 
+d="M596 113l173 172l-173 172v-344zM596 823l173 172l-173 172v-344zM628 640l356 -356l-539 -540v711l-297 -296l-108 108l372 373l-372 373l108 108l297 -296v711l539 -540z" />
+    <glyph glyph-name="_620" unicode="&#xf295;" 
+d="M1280 256q0 52 -38 90t-90 38t-90 -38t-38 -90t38 -90t90 -38t90 38t38 90zM512 1024q0 52 -38 90t-90 38t-90 -38t-38 -90t38 -90t90 -38t90 38t38 90zM1536 256q0 -159 -112.5 -271.5t-271.5 -112.5t-271.5 112.5t-112.5 271.5t112.5 271.5t271.5 112.5t271.5 -112.5
+t112.5 -271.5zM1440 1344q0 -20 -13 -38l-1056 -1408q-19 -26 -51 -26h-160q-26 0 -45 19t-19 45q0 20 13 38l1056 1408q19 26 51 26h160q26 0 45 -19t19 -45zM768 1024q0 -159 -112.5 -271.5t-271.5 -112.5t-271.5 112.5t-112.5 271.5t112.5 271.5t271.5 112.5
+t271.5 -112.5t112.5 -271.5z" />
+    <glyph glyph-name="_621" unicode="&#xf296;" horiz-adv-x="1792" 
+d="M104 830l792 -1015l-868 630q-18 13 -25 34.5t0 42.5l101 308v0zM566 830h660l-330 -1015v0zM368 1442l198 -612h-462l198 612q8 23 33 23t33 -23zM1688 830l101 -308q7 -21 0 -42.5t-25 -34.5l-868 -630l792 1015v0zM1688 830h-462l198 612q8 23 33 23t33 -23z" />
+    <glyph glyph-name="_622" unicode="&#xf297;" horiz-adv-x="1792" 
+d="M384 704h160v224h-160v-224zM1221 372v92q-104 -36 -243 -38q-135 -1 -259.5 46.5t-220.5 122.5l1 -96q88 -80 212 -128.5t272 -47.5q129 0 238 49zM640 704h640v224h-640v-224zM1792 736q0 -187 -99 -352q89 -102 89 -229q0 -157 -129.5 -268t-313.5 -111
+q-122 0 -225 52.5t-161 140.5q-19 -1 -57 -1t-57 1q-58 -88 -161 -140.5t-225 -52.5q-184 0 -313.5 111t-129.5 268q0 127 89 229q-99 165 -99 352q0 209 120 385.5t326.5 279.5t449.5 103t449.5 -103t326.5 -279.5t120 -385.5z" />
+    <glyph glyph-name="_623" unicode="&#xf298;" 
+d="M515 625v-128h-252v128h252zM515 880v-127h-252v127h252zM1273 369v-128h-341v128h341zM1273 625v-128h-672v128h672zM1273 880v-127h-672v127h672zM1408 20v1240q0 8 -6 14t-14 6h-32l-378 -256l-210 171l-210 -171l-378 256h-32q-8 0 -14 -6t-6 -14v-1240q0 -8 6 -14
+t14 -6h1240q8 0 14 6t6 14zM553 1130l185 150h-406zM983 1130l221 150h-406zM1536 1260v-1240q0 -62 -43 -105t-105 -43h-1240q-62 0 -105 43t-43 105v1240q0 62 43 105t105 43h1240q62 0 105 -43t43 -105z" />
+    <glyph glyph-name="_624" unicode="&#xf299;" horiz-adv-x="1792" 
+d="M896 720q-104 196 -160 278q-139 202 -347 318q-34 19 -70 36q-89 40 -94 32t34 -38l39 -31q62 -43 112.5 -93.5t94.5 -116.5t70.5 -113t70.5 -131q9 -17 13 -25q44 -84 84 -153t98 -154t115.5 -150t131 -123.5t148.5 -90.5q153 -66 154 -60q1 3 -49 37q-53 36 -81 57
+q-77 58 -179 211t-185 310zM549 177q-76 60 -132.5 125t-98 143.5t-71 154.5t-58.5 186t-52 209t-60.5 252t-76.5 289q273 0 497.5 -36t379 -92t271 -144.5t185.5 -172.5t110 -198.5t56 -199.5t12.5 -198.5t-9.5 -173t-20 -143.5t-13 -107l323 -327h-104l-281 285
+q-22 -2 -91.5 -14t-121.5 -19t-138 -6t-160.5 17t-167.5 59t-179 111z" />
+    <glyph glyph-name="_625" unicode="&#xf29a;" horiz-adv-x="1792" 
+d="M1374 879q-6 26 -28.5 39.5t-48.5 7.5q-261 -62 -401 -62t-401 62q-26 6 -48.5 -7.5t-28.5 -39.5t7.5 -48.5t39.5 -28.5q194 -46 303 -58q-2 -158 -15.5 -269t-26.5 -155.5t-41 -115.5l-9 -21q-10 -25 1 -49t36 -34q9 -4 23 -4q44 0 60 41l8 20q54 139 71 259h42
+q17 -120 71 -259l8 -20q16 -41 60 -41q14 0 23 4q25 10 36 34t1 49l-9 21q-28 71 -41 115.5t-26.5 155.5t-15.5 269q109 12 303 58q26 6 39.5 28.5t7.5 48.5zM1024 1024q0 53 -37.5 90.5t-90.5 37.5t-90.5 -37.5t-37.5 -90.5t37.5 -90.5t90.5 -37.5t90.5 37.5t37.5 90.5z
+M1600 640q0 -143 -55.5 -273.5t-150 -225t-225 -150t-273.5 -55.5t-273.5 55.5t-225 150t-150 225t-55.5 273.5t55.5 273.5t150 225t225 150t273.5 55.5t273.5 -55.5t225 -150t150 -225t55.5 -273.5zM896 1408q-156 0 -298 -61t-245 -164t-164 -245t-61 -298t61 -298
+t164 -245t245 -164t298 -61t298 61t245 164t164 245t61 298t-61 298t-164 245t-245 164t-298 61zM1792 640q0 -182 -71 -348t-191 -286t-286 -191t-348 -71t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71t348 -71t286 -191t191 -286t71 -348z" />
+    <glyph glyph-name="_626" unicode="&#xf29b;" 
+d="M1438 723q34 -35 29 -82l-44 -551q-4 -42 -34.5 -70t-71.5 -28q-6 0 -9 1q-44 3 -72.5 36.5t-25.5 77.5l35 429l-143 -8q55 -113 55 -240q0 -216 -148 -372l-137 137q91 101 91 235q0 145 -102.5 248t-247.5 103q-134 0 -236 -92l-137 138q120 114 284 141l264 300
+l-149 87l-181 -161q-33 -30 -77 -27.5t-73 35.5t-26.5 77t34.5 73l239 213q26 23 60 26.5t64 -14.5l488 -283q36 -21 48 -68q17 -67 -26 -117l-205 -232l371 20q49 3 83 -32zM1240 1180q-74 0 -126 52t-52 126t52 126t126 52t126.5 -52t52.5 -126t-52.5 -126t-126.5 -52z
+M613 -62q106 0 196 61l139 -139q-146 -116 -335 -116q-148 0 -273.5 73t-198.5 198t-73 273q0 188 116 336l139 -139q-60 -88 -60 -197q0 -145 102.5 -247.5t247.5 -102.5z" />
+    <glyph glyph-name="_627" unicode="&#xf29c;" 
+d="M880 336v-160q0 -14 -9 -23t-23 -9h-160q-14 0 -23 9t-9 23v160q0 14 9 23t23 9h160q14 0 23 -9t9 -23zM1136 832q0 -50 -15 -90t-45.5 -69t-52 -44t-59.5 -36q-32 -18 -46.5 -28t-26 -24t-11.5 -29v-32q0 -14 -9 -23t-23 -9h-160q-14 0 -23 9t-9 23v68q0 35 10.5 64.5
+t24 47.5t39 35.5t41 25.5t44.5 21q53 25 75 43t22 49q0 42 -43.5 71.5t-95.5 29.5q-56 0 -95 -27q-29 -20 -80 -83q-9 -12 -25 -12q-11 0 -19 6l-108 82q-10 7 -12 20t5 23q122 192 349 192q129 0 238.5 -89.5t109.5 -214.5zM768 1280q-130 0 -248.5 -51t-204 -136.5
+t-136.5 -204t-51 -248.5t51 -248.5t136.5 -204t204 -136.5t248.5 -51t248.5 51t204 136.5t136.5 204t51 248.5t-51 248.5t-136.5 204t-204 136.5t-248.5 51zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5
+t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="_628" unicode="&#xf29d;" horiz-adv-x="1408" 
+d="M366 1225q-64 0 -110 45.5t-46 110.5q0 64 46 109.5t110 45.5t109.5 -45.5t45.5 -109.5q0 -65 -45.5 -110.5t-109.5 -45.5zM917 583q0 -50 -30 -67.5t-63.5 -6.5t-47.5 34l-367 438q-7 12 -14 15.5t-11 1.5l-3 -3q-7 -8 4 -21l122 -139l1 -354l-161 -457
+q-67 -192 -92 -234q-15 -26 -28 -32q-50 -26 -103 -1q-29 13 -41.5 43t-9.5 57q2 17 197 618l5 416l-85 -164l35 -222q4 -24 -1 -42t-14 -27.5t-19 -16t-17 -7.5l-7 -2q-19 -3 -34.5 3t-24 16t-14 22t-7.5 19.5t-2 9.5l-46 299l211 381q23 34 113 34q75 0 107 -40l424 -521
+q7 -5 14 -17l3 -3l-1 -1q7 -13 7 -29zM514 433q43 -113 88.5 -225t69.5 -168l24 -55q36 -93 42 -125q11 -70 -36 -97q-35 -22 -66 -16t-51 22t-29 35h-1q-6 16 -8 25l-124 351zM1338 -159q31 -49 31 -57q0 -5 -3 -7q-9 -5 -14.5 0.5t-15.5 26t-16 30.5q-114 172 -423 661
+q3 -1 7 1t7 4l3 2q11 9 11 17z" />
+    <glyph glyph-name="_629" unicode="&#xf29e;" horiz-adv-x="2304" 
+d="M504 542h171l-1 265zM1530 641q0 87 -50.5 140t-146.5 53h-54v-388h52q91 0 145 57t54 138zM956 1018l1 -756q0 -14 -9.5 -24t-23.5 -10h-216q-14 0 -23.5 10t-9.5 24v62h-291l-55 -81q-10 -15 -28 -15h-267q-21 0 -30.5 18t3.5 35l556 757q9 14 27 14h332q14 0 24 -10
+t10 -24zM1783 641q0 -193 -125.5 -303t-324.5 -110h-270q-14 0 -24 10t-10 24v756q0 14 10 24t24 10h268q200 0 326 -109t126 -302zM1939 640q0 -11 -0.5 -29t-8 -71.5t-21.5 -102t-44.5 -108t-73.5 -102.5h-51q38 45 66.5 104.5t41.5 112t21 98t9 72.5l1 27q0 8 -0.5 22.5
+t-7.5 60t-20 91.5t-41 111.5t-66 124.5h43q41 -47 72 -107t45.5 -111.5t23 -96t10.5 -70.5zM2123 640q0 -11 -0.5 -29t-8 -71.5t-21.5 -102t-45 -108t-74 -102.5h-51q38 45 66.5 104.5t41.5 112t21 98t9 72.5l1 27q0 8 -0.5 22.5t-7.5 60t-19.5 91.5t-40.5 111.5t-66 124.5
+h43q41 -47 72 -107t45.5 -111.5t23 -96t10.5 -70.5zM2304 640q0 -11 -0.5 -29t-8 -71.5t-21.5 -102t-44.5 -108t-73.5 -102.5h-51q38 45 66 104.5t41 112t21 98t9 72.5l1 27q0 8 -0.5 22.5t-7.5 60t-19.5 91.5t-40.5 111.5t-66 124.5h43q41 -47 72 -107t45.5 -111.5t23 -96
+t9.5 -70.5z" />
+    <glyph glyph-name="uniF2A0" unicode="&#xf2a0;" horiz-adv-x="1408" 
+d="M617 -153q0 11 -13 58t-31 107t-20 69q-1 4 -5 26.5t-8.5 36t-13.5 21.5q-15 14 -51 14q-23 0 -70 -5.5t-71 -5.5q-34 0 -47 11q-6 5 -11 15.5t-7.5 20t-6.5 24t-5 18.5q-37 128 -37 255t37 255q1 4 5 18.5t6.5 24t7.5 20t11 15.5q13 11 47 11q24 0 71 -5.5t70 -5.5
+q36 0 51 14q9 8 13.5 21.5t8.5 36t5 26.5q2 9 20 69t31 107t13 58q0 22 -43.5 52.5t-75.5 42.5q-20 8 -45 8q-34 0 -98 -18q-57 -17 -96.5 -40.5t-71 -66t-46 -70t-45.5 -94.5q-6 -12 -9 -19q-49 -107 -68 -216t-19 -244t19 -244t68 -216q56 -122 83 -161q63 -91 179 -127
+l6 -2q64 -18 98 -18q25 0 45 8q32 12 75.5 42.5t43.5 52.5zM776 760q-26 0 -45 19t-19 45.5t19 45.5q37 37 37 90q0 52 -37 91q-19 19 -19 45t19 45t45 19t45 -19q75 -75 75 -181t-75 -181q-21 -19 -45 -19zM957 579q-27 0 -45 19q-19 19 -19 45t19 45q112 114 112 272
+t-112 272q-19 19 -19 45t19 45t45 19t45 -19q150 -150 150 -362t-150 -362q-18 -19 -45 -19zM1138 398q-27 0 -45 19q-19 19 -19 45t19 45q90 91 138.5 208t48.5 245t-48.5 245t-138.5 208q-19 19 -19 45t19 45t45 19t45 -19q109 -109 167 -249t58 -294t-58 -294t-167 -249
+q-18 -19 -45 -19z" />
+    <glyph glyph-name="uniF2A1" unicode="&#xf2a1;" horiz-adv-x="2176" 
+d="M192 352q-66 0 -113 -47t-47 -113t47 -113t113 -47t113 47t47 113t-47 113t-113 47zM704 352q-66 0 -113 -47t-47 -113t47 -113t113 -47t113 47t47 113t-47 113t-113 47zM704 864q-66 0 -113 -47t-47 -113t47 -113t113 -47t113 47t47 113t-47 113t-113 47zM1472 352
+q-66 0 -113 -47t-47 -113t47 -113t113 -47t113 47t47 113t-47 113t-113 47zM1984 352q-66 0 -113 -47t-47 -113t47 -113t113 -47t113 47t47 113t-47 113t-113 47zM1472 864q-66 0 -113 -47t-47 -113t47 -113t113 -47t113 47t47 113t-47 113t-113 47zM1984 864
+q-66 0 -113 -47t-47 -113t47 -113t113 -47t113 47t47 113t-47 113t-113 47zM1984 1376q-66 0 -113 -47t-47 -113t47 -113t113 -47t113 47t47 113t-47 113t-113 47zM384 192q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM896 192q0 -80 -56 -136
+t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM384 704q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM896 704q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM384 1216q0 -80 -56 -136t-136 -56
+t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM1664 192q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM896 1216q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM2176 192q0 -80 -56 -136t-136 -56t-136 56
+t-56 136t56 136t136 56t136 -56t56 -136zM1664 704q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM2176 704q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136zM1664 1216q0 -80 -56 -136t-136 -56t-136 56t-56 136
+t56 136t136 56t136 -56t56 -136zM2176 1216q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136z" />
+    <glyph glyph-name="uniF2A2" unicode="&#xf2a2;" horiz-adv-x="1792" 
+d="M128 -192q0 -26 -19 -45t-45 -19t-45 19t-19 45t19 45t45 19t45 -19t19 -45zM320 0q0 -26 -19 -45t-45 -19t-45 19t-19 45t19 45t45 19t45 -19t19 -45zM365 365l256 -256l-90 -90l-256 256zM704 384q0 -26 -19 -45t-45 -19t-45 19t-19 45t19 45t45 19t45 -19t19 -45z
+M1411 704q0 -59 -11.5 -108.5t-37.5 -93.5t-44 -67.5t-53 -64.5q-31 -35 -45.5 -54t-33.5 -50t-26.5 -64t-7.5 -74q0 -159 -112.5 -271.5t-271.5 -112.5q-26 0 -45 19t-19 45t19 45t45 19q106 0 181 75t75 181q0 57 11.5 105.5t37 91t43.5 66.5t52 63q40 46 59.5 72
+t37.5 74.5t18 103.5q0 185 -131.5 316.5t-316.5 131.5t-316.5 -131.5t-131.5 -316.5q0 -26 -19 -45t-45 -19t-45 19t-19 45q0 117 45.5 223.5t123 184t184 123t223.5 45.5t223.5 -45.5t184 -123t123 -184t45.5 -223.5zM896 576q0 -26 -19 -45t-45 -19t-45 19t-19 45t19 45
+t45 19t45 -19t19 -45zM1184 704q0 -26 -19 -45t-45 -19t-45 19t-19 45q0 93 -65.5 158.5t-158.5 65.5q-92 0 -158 -65.5t-66 -158.5q0 -26 -19 -45t-45 -19t-45 19t-19 45q0 146 103 249t249 103t249 -103t103 -249zM1578 993q10 -25 -1 -49t-36 -34q-9 -4 -23 -4
+q-19 0 -35.5 11t-23.5 30q-68 178 -224 295q-21 16 -25 42t12 47q17 21 43 25t47 -12q183 -137 266 -351zM1788 1074q9 -25 -1.5 -49t-35.5 -34q-11 -4 -23 -4q-44 0 -60 41q-92 238 -297 393q-22 16 -25.5 42t12.5 47q16 22 42 25.5t47 -12.5q235 -175 341 -449z" />
+    <glyph glyph-name="uniF2A3" unicode="&#xf2a3;" horiz-adv-x="2304" 
+d="M1032 576q-59 2 -84 55q-17 34 -48 53.5t-68 19.5q-53 0 -90.5 -37.5t-37.5 -90.5q0 -56 36 -89l10 -8q34 -31 82 -31q37 0 68 19.5t48 53.5q25 53 84 55zM1600 704q0 56 -36 89l-10 8q-34 31 -82 31q-37 0 -68 -19.5t-48 -53.5q-25 -53 -84 -55q59 -2 84 -55
+q17 -34 48 -53.5t68 -19.5q53 0 90.5 37.5t37.5 90.5zM1174 925q-17 -35 -55 -48t-73 4q-62 31 -134 31q-51 0 -99 -17q3 0 9.5 0.5t9.5 0.5q92 0 170.5 -50t118.5 -133q17 -36 3.5 -73.5t-49.5 -54.5q-18 -9 -39 -9q21 0 39 -9q36 -17 49.5 -54.5t-3.5 -73.5
+q-40 -83 -118.5 -133t-170.5 -50h-6q-16 2 -44 4l-290 27l-239 -120q-14 -7 -29 -7q-40 0 -57 35l-160 320q-11 23 -4 47.5t29 37.5l209 119l148 267q17 155 91.5 291.5t195.5 236.5q31 25 70.5 21.5t64.5 -34.5t21.5 -70t-34.5 -65q-70 -59 -117 -128q123 84 267 101
+q40 5 71.5 -19t35.5 -64q5 -40 -19 -71.5t-64 -35.5q-84 -10 -159 -55q46 10 99 10q115 0 218 -50q36 -18 49 -55.5t-5 -73.5zM2137 1085l160 -320q11 -23 4 -47.5t-29 -37.5l-209 -119l-148 -267q-17 -155 -91.5 -291.5t-195.5 -236.5q-26 -22 -61 -22q-45 0 -74 35
+q-25 31 -21.5 70t34.5 65q70 59 117 128q-123 -84 -267 -101q-4 -1 -12 -1q-36 0 -63.5 24t-31.5 60q-5 40 19 71.5t64 35.5q84 10 159 55q-46 -10 -99 -10q-115 0 -218 50q-36 18 -49 55.5t5 73.5q17 35 55 48t73 -4q62 -31 134 -31q51 0 99 17q-3 0 -9.5 -0.5t-9.5 -0.5
+q-92 0 -170.5 50t-118.5 133q-17 36 -3.5 73.5t49.5 54.5q18 9 39 9q-21 0 -39 9q-36 17 -49.5 54.5t3.5 73.5q40 83 118.5 133t170.5 50h6h1q14 -2 42 -4l291 -27l239 120q14 7 29 7q40 0 57 -35z" />
+    <glyph glyph-name="uniF2A4" unicode="&#xf2a4;" horiz-adv-x="1792" 
+d="M1056 704q0 -26 19 -45t45 -19t45 19t19 45q0 146 -103 249t-249 103t-249 -103t-103 -249q0 -26 19 -45t45 -19t45 19t19 45q0 93 66 158.5t158 65.5t158 -65.5t66 -158.5zM835 1280q-117 0 -223.5 -45.5t-184 -123t-123 -184t-45.5 -223.5q0 -26 19 -45t45 -19t45 19
+t19 45q0 185 131.5 316.5t316.5 131.5t316.5 -131.5t131.5 -316.5q0 -55 -18 -103.5t-37.5 -74.5t-59.5 -72q-34 -39 -52 -63t-43.5 -66.5t-37 -91t-11.5 -105.5q0 -106 -75 -181t-181 -75q-26 0 -45 -19t-19 -45t19 -45t45 -19q159 0 271.5 112.5t112.5 271.5q0 41 7.5 74
+t26.5 64t33.5 50t45.5 54q35 41 53 64.5t44 67.5t37.5 93.5t11.5 108.5q0 117 -45.5 223.5t-123 184t-184 123t-223.5 45.5zM591 561l226 -226l-579 -579q-12 -12 -29 -12t-29 12l-168 168q-12 12 -12 29t12 29zM1612 1524l168 -168q12 -12 12 -29t-12 -30l-233 -233
+l-26 -25l-71 -71q-66 153 -195 258l91 91l207 207q13 12 30 12t29 -12z" />
+    <glyph glyph-name="uniF2A5" unicode="&#xf2a5;" 
+d="M866 1021q0 -27 -13 -94q-11 -50 -31.5 -150t-30.5 -150q-2 -11 -4.5 -12.5t-13.5 -2.5q-20 -2 -31 -2q-58 0 -84 49.5t-26 113.5q0 88 35 174t103 124q28 14 51 14q28 0 36.5 -16.5t8.5 -47.5zM1352 597q0 14 -39 75.5t-52 66.5q-21 8 -34 8q-91 0 -226 -77l-2 2
+q3 22 27.5 135t24.5 178q0 233 -242 233q-24 0 -68 -6q-94 -17 -168.5 -89.5t-111.5 -166.5t-37 -189q0 -146 80.5 -225t227.5 -79q25 0 25 -3t-1 -5q-4 -34 -26 -117q-14 -52 -51.5 -101t-82.5 -49q-42 0 -42 47q0 24 10.5 47.5t25 39.5t29.5 28.5t26 20t11 8.5q0 3 -7 10
+q-24 22 -58.5 36.5t-65.5 14.5q-35 0 -63.5 -34t-41 -75t-12.5 -75q0 -88 51.5 -142t138.5 -54q82 0 155 53t117.5 126t65.5 153q6 22 15.5 66.5t14.5 66.5q3 12 14 18q118 60 227 60q48 0 127 -18q1 -1 4 -1q5 0 9.5 4.5t4.5 8.5zM1536 1120v-960q0 -119 -84.5 -203.5
+t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="uniF2A6" unicode="&#xf2a6;" horiz-adv-x="1535" 
+d="M744 1231q0 24 -2 38.5t-8.5 30t-21 23t-37.5 7.5q-39 0 -78 -23q-105 -58 -159 -190.5t-54 -269.5q0 -44 8.5 -85.5t26.5 -80.5t52.5 -62.5t81.5 -23.5q4 0 18 -0.5t20 0t16 3t15 8.5t7 16q16 77 48 231.5t48 231.5q19 91 19 146zM1498 575q0 -7 -7.5 -13.5t-15.5 -6.5
+l-6 1q-22 3 -62 11t-72 12.5t-63 4.5q-167 0 -351 -93q-15 -8 -21 -27q-10 -36 -24.5 -105.5t-22.5 -100.5q-23 -91 -70 -179.5t-112.5 -164.5t-154.5 -123t-185 -47q-135 0 -214.5 83.5t-79.5 219.5q0 53 19.5 117t63 116.5t97.5 52.5q38 0 120 -33.5t83 -61.5
+q0 -1 -16.5 -12.5t-39.5 -31t-46 -44.5t-39 -61t-16 -74q0 -33 16.5 -53t48.5 -20q45 0 85 31.5t66.5 78t48 105.5t32.5 107t16 90v9q0 2 -3.5 3.5t-8.5 1.5h-10t-10 -0.5t-6 -0.5q-227 0 -352 122.5t-125 348.5q0 108 34.5 221t96 210t156 167.5t204.5 89.5q52 9 106 9
+q374 0 374 -360q0 -98 -38 -273t-43 -211l3 -3q101 57 182.5 88t167.5 31q22 0 53 -13q19 -7 80 -102.5t61 -116.5z" />
+    <glyph glyph-name="uniF2A7" unicode="&#xf2a7;" horiz-adv-x="1664" 
+d="M831 863q32 0 59 -18l222 -148q61 -40 110 -97l146 -170q40 -46 29 -106l-72 -413q-6 -32 -29.5 -53.5t-55.5 -25.5l-527 -56l-352 -32h-9q-39 0 -67.5 28t-28.5 68q0 37 27 64t65 32l260 32h-448q-41 0 -69.5 30t-26.5 71q2 39 32 65t69 26l442 1l-521 64q-41 5 -66 37
+t-19 73q6 35 34.5 57.5t65.5 22.5h10l481 -60l-351 94q-38 10 -62 41.5t-18 68.5q6 36 33 58.5t62 22.5q6 0 20 -2l448 -96l217 -37q1 0 3 -0.5t3 -0.5q23 0 30.5 23t-12.5 36l-186 125q-35 23 -42 63.5t18 73.5q27 38 76 38zM761 661l186 -125l-218 37l-5 2l-36 38
+l-238 262q-1 1 -2.5 3.5t-2.5 3.5q-24 31 -18.5 70t37.5 64q31 23 68 17.5t64 -33.5l142 -147q-2 -1 -5 -3.5t-4 -4.5q-32 -45 -23 -99t55 -85zM1648 1115l15 -266q4 -73 -11 -147l-48 -219q-12 -59 -67 -87l-106 -54q2 62 -39 109l-146 170q-53 61 -117 103l-222 148
+q-34 23 -76 23q-51 0 -88 -37l-235 312q-25 33 -18 73.5t41 63.5q33 22 71.5 14t62.5 -40l266 -352l-262 455q-21 35 -10.5 75t47.5 59q35 18 72.5 6t57.5 -46l241 -420l-136 337q-15 35 -4.5 74t44.5 56q37 19 76 6t56 -51l193 -415l101 -196q8 -15 23 -17.5t27 7.5t11 26
+l-12 224q-2 41 26 71t69 31q39 0 67 -28.5t30 -67.5z" />
+    <glyph glyph-name="uniF2A8" unicode="&#xf2a8;" horiz-adv-x="1792" 
+d="M335 180q-2 0 -6 2q-86 57 -168.5 145t-139.5 180q-21 30 -21 69q0 9 2 19t4 18t7 18t8.5 16t10.5 17t10 15t12 15.5t11 14.5q184 251 452 365q-110 198 -110 211q0 19 17 29q116 64 128 64q18 0 28 -16l124 -229q92 19 192 19q266 0 497.5 -137.5t378.5 -369.5
+q20 -31 20 -69t-20 -69q-91 -142 -218.5 -253.5t-278.5 -175.5q110 -198 110 -211q0 -20 -17 -29q-116 -64 -127 -64q-19 0 -29 16l-124 229l-64 119l-444 820l7 7q-58 -24 -99 -47q3 -5 127 -234t243 -449t119 -223q0 -7 -9 -9q-13 -3 -72 -3q-57 0 -60 7l-456 841
+q-39 -28 -82 -68q24 -43 214 -393.5t190 -354.5q0 -10 -11 -10q-14 0 -82.5 22t-72.5 28l-106 197l-224 413q-44 -53 -78 -106q2 -3 18 -25t23 -34l176 -327q0 -10 -10 -10zM1165 282l49 -91q273 111 450 385q-180 277 -459 389q67 -64 103 -148.5t36 -176.5
+q0 -106 -47 -200.5t-132 -157.5zM848 896q0 -20 14 -34t34 -14q86 0 147 -61t61 -147q0 -20 14 -34t34 -14t34 14t14 34q0 126 -89 215t-215 89q-20 0 -34 -14t-14 -34zM1214 961l-9 4l7 -7z" />
+    <glyph glyph-name="uniF2A9" unicode="&#xf2a9;" horiz-adv-x="1280" 
+d="M1050 430q0 -215 -147 -374q-148 -161 -378 -161q-232 0 -378 161q-147 159 -147 374q0 147 68 270.5t189 196.5t268 73q96 0 182 -31q-32 -62 -39 -126q-66 28 -143 28q-167 0 -280.5 -123t-113.5 -291q0 -170 112.5 -288.5t281.5 -118.5t281 118.5t112 288.5
+q0 89 -32 166q66 13 123 49q41 -98 41 -212zM846 619q0 -192 -79.5 -345t-238.5 -253l-14 -1q-29 0 -62 5q83 32 146.5 102.5t99.5 154.5t58.5 189t30 192.5t7.5 178.5q0 69 -3 103q55 -160 55 -326zM791 947v-2q-73 214 -206 440q88 -59 142.5 -186.5t63.5 -251.5z
+M1035 744q-83 0 -160 75q218 120 290 247q19 37 21 56q-42 -94 -139.5 -166.5t-204.5 -97.5q-35 54 -35 113q0 37 17 79t43 68q46 44 157 74q59 16 106 58.5t74 100.5q74 -105 74 -253q0 -109 -24 -170q-32 -77 -88.5 -130.5t-130.5 -53.5z" />
+    <glyph glyph-name="uniF2AA" unicode="&#xf2aa;" 
+d="M1050 495q0 78 -28 147q-41 -25 -85 -34q22 -50 22 -114q0 -117 -77 -198.5t-193 -81.5t-193.5 81.5t-77.5 198.5q0 115 78 199.5t193 84.5q53 0 98 -19q4 43 27 87q-60 21 -125 21q-154 0 -257.5 -108.5t-103.5 -263.5t103.5 -261t257.5 -106t257.5 106.5t103.5 260.5z
+M872 850q2 -24 2 -71q0 -63 -5 -123t-20.5 -132.5t-40.5 -130t-68.5 -106t-100.5 -70.5q21 -3 42 -3h10q219 139 219 411q0 116 -38 225zM872 850q-4 80 -44 171.5t-98 130.5q92 -156 142 -302zM1207 955q0 102 -51 174q-41 -86 -124 -109q-69 -19 -109 -53.5t-40 -99.5
+q0 -40 24 -77q74 17 140.5 67t95.5 115q-4 -52 -74.5 -111.5t-138.5 -97.5q52 -52 110 -52q51 0 90 37t60 90q17 42 17 117zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960q119 0 203.5 -84.5
+t84.5 -203.5z" />
+    <glyph glyph-name="uniF2AB" unicode="&#xf2ab;" 
+d="M1279 388q0 22 -22 27q-67 15 -118 59t-80 108q-7 19 -7 25q0 15 19.5 26t43 17t43 20.5t19.5 36.5q0 19 -18.5 31.5t-38.5 12.5q-12 0 -32 -8t-31 -8q-4 0 -12 2q5 95 5 114q0 79 -17 114q-36 78 -103 121.5t-152 43.5q-199 0 -275 -165q-17 -35 -17 -114q0 -19 5 -114
+q-4 -2 -14 -2q-12 0 -32 7.5t-30 7.5q-21 0 -38.5 -12t-17.5 -32q0 -21 19.5 -35.5t43 -20.5t43 -17t19.5 -26q0 -6 -7 -25q-64 -138 -198 -167q-22 -5 -22 -27q0 -46 137 -68q2 -5 6 -26t11.5 -30.5t23.5 -9.5q12 0 37.5 4.5t39.5 4.5q35 0 67 -15t54 -32.5t57.5 -32.5
+t76.5 -15q43 0 79 15t57.5 32.5t53.5 32.5t67 15q14 0 39.5 -4t38.5 -4q16 0 23 10t11 30t6 25q137 22 137 68zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5
+t103 -385.5z" />
+    <glyph glyph-name="uniF2AC" unicode="&#xf2ac;" horiz-adv-x="1664" 
+d="M848 1408q134 1 240.5 -68.5t163.5 -192.5q27 -58 27 -179q0 -47 -9 -191q14 -7 28 -7q18 0 51 13.5t51 13.5q29 0 56 -18t27 -46q0 -32 -31.5 -54t-69 -31.5t-69 -29t-31.5 -47.5q0 -15 12 -43q37 -82 102.5 -150t144.5 -101q28 -12 80 -23q28 -6 28 -35
+q0 -70 -219 -103q-7 -11 -11 -39t-14 -46.5t-33 -18.5q-20 0 -62 6.5t-64 6.5q-37 0 -62 -5q-32 -5 -63 -22.5t-58 -38t-58 -40.5t-76 -33.5t-99 -13.5q-52 0 -96.5 13.5t-75 33.5t-57.5 40.5t-58 38t-62 22.5q-26 5 -63 5q-24 0 -65.5 -7.5t-58.5 -7.5q-25 0 -35 18.5
+t-14 47.5t-11 40q-219 33 -219 103q0 29 28 35q52 11 80 23q78 32 144.5 101t102.5 150q12 28 12 43q0 28 -31.5 47.5t-69.5 29.5t-69.5 31.5t-31.5 52.5q0 27 26 45.5t55 18.5q15 0 48 -13t53 -13q18 0 32 7q-9 142 -9 190q0 122 27 180q64 137 172 198t264 63z" />
+    <glyph glyph-name="uniF2AD" unicode="&#xf2ad;" 
+d="M1280 388q0 22 -22 27q-67 14 -118 58t-80 109q-7 14 -7 25q0 15 19.5 26t42.5 17t42.5 20.5t19.5 36.5q0 19 -18.5 31.5t-38.5 12.5q-11 0 -31 -8t-32 -8q-4 0 -12 2q5 63 5 115q0 78 -17 114q-36 78 -102.5 121.5t-152.5 43.5q-198 0 -275 -165q-18 -38 -18 -115
+q0 -38 6 -114q-10 -2 -15 -2q-11 0 -31.5 8t-30.5 8q-20 0 -37.5 -12.5t-17.5 -32.5q0 -21 19.5 -35.5t42.5 -20.5t42.5 -17t19.5 -26q0 -11 -7 -25q-64 -138 -198 -167q-22 -5 -22 -27q0 -47 138 -69q2 -5 6 -26t11 -30.5t23 -9.5q13 0 38.5 5t38.5 5q35 0 67.5 -15
+t54.5 -32.5t57.5 -32.5t76.5 -15q43 0 79 15t57.5 32.5t54 32.5t67.5 15q13 0 39 -4.5t39 -4.5q15 0 22.5 9.5t11.5 31t5 24.5q138 22 138 69zM1536 1120v-960q0 -119 -84.5 -203.5t-203.5 -84.5h-960q-119 0 -203.5 84.5t-84.5 203.5v960q0 119 84.5 203.5t203.5 84.5h960
+q119 0 203.5 -84.5t84.5 -203.5z" />
+    <glyph glyph-name="uniF2AE" unicode="&#xf2ae;" horiz-adv-x="2304" 
+d="M2304 1536q-69 -46 -125 -92t-89 -81t-59.5 -71.5t-37.5 -57.5t-22 -44.5t-14 -29.5q-10 -18 -35.5 -136.5t-48.5 -164.5q-15 -29 -50 -60.5t-67.5 -50.5t-72.5 -41t-48 -28q-47 -31 -151 -231q-341 14 -630 -158q-92 -53 -303 -179q47 16 86 31t55 22l15 7
+q71 27 163 64.5t133.5 53.5t108 34.5t142.5 31.5q186 31 465 -7q1 0 10 -3q11 -6 14 -17t-3 -22l-194 -345q-15 -29 -47 -22q-128 24 -354 24q-146 0 -402 -44.5t-392 -46.5q-82 -1 -149 13t-107 37t-61 40t-33 34l-1 1v2q0 6 6 6q138 0 371 55q192 366 374.5 524t383.5 158
+q5 0 14.5 -0.5t38 -5t55 -12t61.5 -24.5t63 -39.5t54 -59t40 -82.5l102 177q2 4 21 42.5t44.5 86.5t61 109.5t84 133.5t100.5 137q66 82 128 141.5t121.5 96.5t92.5 53.5t88 39.5z" />
+    <glyph glyph-name="uniF2B0" unicode="&#xf2b0;" 
+d="M1322 640q0 -45 -5 -76l-236 14l224 -78q-19 -73 -58 -141l-214 103l177 -158q-44 -61 -107 -108l-157 178l103 -215q-61 -37 -140 -59l-79 228l14 -240q-38 -6 -76 -6t-76 6l14 238l-78 -226q-74 19 -140 59l103 215l-157 -178q-59 43 -108 108l178 158l-214 -104
+q-39 69 -58 141l224 79l-237 -14q-5 42 -5 76q0 35 5 77l238 -14l-225 79q19 73 58 140l214 -104l-177 159q46 61 107 108l158 -178l-103 215q67 39 140 58l77 -224l-13 236q36 6 75 6q38 0 76 -6l-14 -237l78 225q74 -19 140 -59l-103 -214l158 178q61 -47 107 -108
+l-177 -159l213 104q37 -62 58 -141l-224 -78l237 14q5 -31 5 -77zM1352 640q0 160 -78.5 295.5t-213 214t-292.5 78.5q-119 0 -227 -46.5t-186.5 -125t-124.5 -187.5t-46 -229q0 -119 46 -228t124.5 -187.5t186.5 -125t227 -46.5q158 0 292.5 78.5t213 214t78.5 294.5z
+M1425 1023v-766l-657 -383l-657 383v766l657 383zM768 -183l708 412v823l-708 411l-708 -411v-823zM1536 1088v-896l-768 -448l-768 448v896l768 448z" />
+    <glyph glyph-name="uniF2B1" unicode="&#xf2b1;" horiz-adv-x="1664" 
+d="M339 1318h691l-26 -72h-665q-110 0 -188.5 -79t-78.5 -189v-771q0 -95 60.5 -169.5t153.5 -93.5q23 -5 98 -5v-72h-45q-140 0 -239.5 100t-99.5 240v771q0 140 99.5 240t239.5 100zM1190 1536h247l-482 -1294q-23 -61 -40.5 -103.5t-45 -98t-54 -93.5t-64.5 -78.5
+t-79.5 -65t-95.5 -41t-116 -18.5v195q163 26 220 182q20 52 20 105q0 54 -20 106l-285 733h228l187 -585zM1664 978v-1111h-795q37 55 45 73h678v1038q0 85 -49.5 155t-129.5 99l25 67q101 -34 163.5 -123.5t62.5 -197.5z" />
+    <glyph glyph-name="uniF2B2" unicode="&#xf2b2;" horiz-adv-x="1792" 
+d="M852 1227q0 -29 -17 -52.5t-45 -23.5t-45 23.5t-17 52.5t17 52.5t45 23.5t45 -23.5t17 -52.5zM688 -149v114q0 30 -20.5 51.5t-50.5 21.5t-50 -21.5t-20 -51.5v-114q0 -30 20.5 -52t49.5 -22q30 0 50.5 22t20.5 52zM860 -149v114q0 30 -20 51.5t-50 21.5t-50.5 -21.5
+t-20.5 -51.5v-114q0 -30 20.5 -52t50.5 -22q29 0 49.5 22t20.5 52zM1034 -149v114q0 30 -20.5 51.5t-50.5 21.5t-50.5 -21.5t-20.5 -51.5v-114q0 -30 20.5 -52t50.5 -22t50.5 22t20.5 52zM1208 -149v114q0 30 -20.5 51.5t-50.5 21.5t-50.5 -21.5t-20.5 -51.5v-114
+q0 -30 20.5 -52t50.5 -22t50.5 22t20.5 52zM1476 535q-84 -160 -232 -259.5t-323 -99.5q-123 0 -229.5 51.5t-178.5 137t-113 197.5t-41 232q0 88 21 174q-104 -175 -104 -390q0 -162 65 -312t185 -251q30 57 91 57q56 0 86 -50q32 50 87 50q56 0 86 -50q32 50 87 50t87 -50
+q30 50 86 50q28 0 52.5 -15.5t37.5 -40.5q112 94 177 231.5t73 287.5zM1326 564q0 75 -72 75q-17 0 -47 -6q-95 -19 -149 -19q-226 0 -226 243q0 86 30 204q-83 -127 -83 -275q0 -150 89 -260.5t235 -110.5q111 0 210 70q13 48 13 79zM884 1223q0 50 -32 89.5t-81 39.5
+t-81 -39.5t-32 -89.5q0 -51 31.5 -90.5t81.5 -39.5t81.5 39.5t31.5 90.5zM1513 884q0 96 -37.5 179t-113 137t-173.5 54q-77 0 -149 -35t-127 -94q-48 -159 -48 -268q0 -104 45.5 -157t147.5 -53q53 0 142 19q36 6 53 6q51 0 77.5 -28t26.5 -80q0 -26 -4 -46
+q75 68 117.5 165.5t42.5 200.5zM1792 667q0 -111 -33.5 -249.5t-93.5 -204.5q-58 -64 -195 -142.5t-228 -104.5l-4 -1v-114q0 -43 -29.5 -75t-72.5 -32q-56 0 -86 50q-32 -50 -87 -50t-87 50q-30 -50 -86 -50q-55 0 -87 50q-30 -50 -86 -50q-47 0 -75 33.5t-28 81.5
+q-90 -68 -198 -68q-118 0 -211 80q54 1 106 20q-113 31 -182 127q32 -7 71 -7q89 0 164 46q-192 192 -240 306q-24 56 -24 160q0 57 9 125.5t31.5 146.5t55 141t86.5 105t120 42q59 0 81 -52q19 29 42 54q2 3 12 13t13 16q10 15 23 38t25 42t28 39q87 111 211.5 177
+t260.5 66q35 0 62 -4q59 64 146 64q83 0 140 -57q5 -5 5 -12q0 -5 -6 -13.5t-12.5 -16t-16 -17l-10.5 -10.5q17 -6 36 -18t19 -24q0 -6 -16 -25q157 -138 197 -378q25 30 60 30q45 0 100 -49q90 -80 90 -279z" />
+    <glyph glyph-name="uniF2B3" unicode="&#xf2b3;" 
+d="M917 631q0 33 -6 64h-362v-132h217q-12 -76 -74.5 -120.5t-142.5 -44.5q-99 0 -169 71.5t-70 170.5t70 170.5t169 71.5q93 0 153 -59l104 101q-108 100 -257 100q-160 0 -272 -112.5t-112 -271.5t112 -271.5t272 -112.5q165 0 266.5 105t101.5 270zM1262 585h109v110
+h-109v110h-110v-110h-110v-110h110v-110h110v110zM1536 640q0 -209 -103 -385.5t-279.5 -279.5t-385.5 -103t-385.5 103t-279.5 279.5t-103 385.5t103 385.5t279.5 279.5t385.5 103t385.5 -103t279.5 -279.5t103 -385.5z" />
+    <glyph glyph-name="uniF2B4" unicode="&#xf2b4;" 
+d="M1536 1024v-839q0 -48 -49 -62q-174 -52 -338 -52q-73 0 -215.5 29.5t-227.5 29.5q-164 0 -370 -48v-338h-160v1368q-63 25 -101 81t-38 124q0 91 64 155t155 64t155 -64t64 -155q0 -68 -38 -124t-101 -81v-68q190 44 343 44q99 0 198 -15q14 -2 111.5 -22.5t149.5 -20.5
+q77 0 165 18q11 2 80 21t89 19q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="uniF2B5" unicode="&#xf2b5;" horiz-adv-x="2304" 
+d="M192 384q40 0 56 32t0 64t-56 32t-56 -32t0 -64t56 -32zM1665 442q-10 13 -38.5 50t-41.5 54t-38 49t-42.5 53t-40.5 47t-45 49l-125 -140q-83 -94 -208.5 -92t-205.5 98q-57 69 -56.5 158t58.5 157l177 206q-22 11 -51 16.5t-47.5 6t-56.5 -0.5t-49 -1q-92 0 -158 -66
+l-158 -158h-155v-544q5 0 21 0.5t22 0t19.5 -2t20.5 -4.5t17.5 -8.5t18.5 -13.5l297 -292q115 -111 227 -111q78 0 125 47q57 -20 112.5 8t72.5 85q74 -6 127 44q20 18 36 45.5t14 50.5q10 -10 43 -10q43 0 77 21t49.5 53t12 71.5t-30.5 73.5zM1824 384h96v512h-93l-157 180
+q-66 76 -169 76h-167q-89 0 -146 -67l-209 -243q-28 -33 -28 -75t27 -75q43 -51 110 -52t111 49l193 218q25 23 53.5 21.5t47 -27t8.5 -56.5q16 -19 56 -63t60 -68q29 -36 82.5 -105.5t64.5 -84.5q52 -66 60 -140zM2112 384q40 0 56 32t0 64t-56 32t-56 -32t0 -64t56 -32z
+M2304 960v-640q0 -26 -19 -45t-45 -19h-434q-27 -65 -82 -106.5t-125 -51.5q-33 -48 -80.5 -81.5t-102.5 -45.5q-42 -53 -104.5 -81.5t-128.5 -24.5q-60 -34 -126 -39.5t-127.5 14t-117 53.5t-103.5 81l-287 282h-358q-26 0 -45 19t-19 45v672q0 26 19 45t45 19h421
+q14 14 47 48t47.5 48t44 40t50.5 37.5t51 25.5t62 19.5t68 5.5h117q99 0 181 -56q82 56 181 56h167q35 0 67 -6t56.5 -14.5t51.5 -26.5t44.5 -31t43 -39.5t39 -42t41 -48t41.5 -48.5h355q26 0 45 -19t19 -45z" />
+    <glyph glyph-name="uniF2B6" unicode="&#xf2b6;" horiz-adv-x="1792" 
+d="M1792 882v-978q0 -66 -47 -113t-113 -47h-1472q-66 0 -113 47t-47 113v978q0 15 11 24q8 7 39 34.5t41.5 36t45.5 37.5t70 55.5t96 73t143.5 107t192.5 140.5q5 4 52.5 40t71.5 52.5t64 35t69 18.5t69 -18.5t65 -35.5t71 -52t52 -40q110 -80 192.5 -140.5t143.5 -107
+t96 -73t70 -55.5t45.5 -37.5t41.5 -36t39 -34.5q11 -9 11 -24zM1228 297q263 191 345 252q11 8 12.5 20.5t-6.5 23.5l-38 52q-8 11 -21 12.5t-24 -6.5q-231 -169 -343 -250q-5 -3 -52 -39t-71.5 -52.5t-64.5 -35t-69 -18.5t-69 18.5t-64.5 35t-71.5 52.5t-52 39
+q-186 134 -343 250q-11 8 -24 6.5t-21 -12.5l-38 -52q-8 -11 -6.5 -23.5t12.5 -20.5q82 -61 345 -252q10 -8 50 -38t65 -47t64 -39.5t77.5 -33.5t75.5 -11t75.5 11t79 34.5t64.5 39.5t65 47.5t48 36.5z" />
+    <glyph glyph-name="uniF2B7" unicode="&#xf2b7;" horiz-adv-x="1792" 
+d="M1474 623l39 -51q8 -11 6.5 -23.5t-11.5 -20.5q-43 -34 -126.5 -98.5t-146.5 -113t-67 -51.5q-39 -32 -60 -48t-60.5 -41t-76.5 -36.5t-74 -11.5h-1h-1q-37 0 -74 11.5t-76 36.5t-61 41.5t-60 47.5q-5 4 -65 50.5t-143.5 111t-122.5 94.5q-11 8 -12.5 20.5t6.5 23.5
+l37 52q8 11 21.5 13t24.5 -7q94 -73 306 -236q5 -4 43.5 -35t60.5 -46.5t56.5 -32.5t58.5 -17h1h1q24 0 58.5 17t56.5 32.5t60.5 46.5t43.5 35q258 198 313 242q11 8 24 6.5t21 -12.5zM1664 -96v928q-90 83 -159 139q-91 74 -389 304q-3 2 -43 35t-61 48t-56 32.5t-59 17.5
+h-1h-1q-24 0 -59 -17.5t-56 -32.5t-61 -48t-43 -35q-215 -166 -315.5 -245.5t-129.5 -104t-82 -74.5q-14 -12 -21 -19v-928q0 -13 9.5 -22.5t22.5 -9.5h1472q13 0 22.5 9.5t9.5 22.5zM1792 832v-928q0 -66 -47 -113t-113 -47h-1472q-66 0 -113 47t-47 113v928q0 56 41 94
+q123 114 350 290.5t233 181.5q36 30 59 47.5t61.5 42t76 36.5t74.5 12h1h1q37 0 74.5 -12t76 -36.5t61.5 -42t59 -47.5q43 -36 156 -122t226 -177t201 -173q41 -38 41 -94z" />
+    <glyph glyph-name="uniF2B8" unicode="&#xf2b8;" 
+d="M330 1l202 -214l-34 236l-216 213zM556 -225l274 218l-11 245l-300 -215zM245 413l227 -213l-48 327l-245 204zM495 189l317 214l-14 324l-352 -200zM843 178l95 -80l-2 239l-103 79q0 -1 1 -8.5t0 -12t-5 -7.5l-78 -52l85 -70q7 -6 7 -88zM138 930l256 -200l-68 465
+l-279 173zM1173 267l15 234l-230 -164l2 -240zM417 722l373 194l-19 441l-423 -163zM1270 357l20 233l-226 142l-2 -105l144 -95q6 -4 4 -9l-7 -119zM1461 496l30 222l-179 -128l-20 -228zM1273 329l-71 49l-8 -117q0 -5 -4 -8l-234 -187q-7 -5 -14 0l-98 83l7 -161
+q0 -5 -4 -8l-293 -234q-4 -2 -6 -2q-8 2 -8 3l-228 242q-4 4 -59 277q-2 7 5 11l61 37q-94 86 -95 92l-72 351q-2 7 6 12l94 45q-133 100 -135 108l-96 466q-2 10 7 13l433 135q5 0 8 -1l317 -153q6 -4 6 -9l20 -463q0 -7 -6 -10l-118 -61l126 -85q5 -2 5 -8l5 -123l121 74
+q5 4 11 0l84 -56l3 110q0 6 5 9l206 126q6 3 11 0l245 -135q4 -4 5 -7t-6.5 -60t-17.5 -124.5t-10 -70.5q0 -5 -4 -7l-191 -153q-6 -5 -13 0z" />
+    <glyph glyph-name="uniF2B9" unicode="&#xf2b9;" horiz-adv-x="1664" 
+d="M1201 298q0 57 -5.5 107t-21 100.5t-39.5 86t-64 58t-91 22.5q-6 -4 -33.5 -20.5t-42.5 -24.5t-40.5 -20t-49 -17t-46.5 -5t-46.5 5t-49 17t-40.5 20t-42.5 24.5t-33.5 20.5q-51 0 -91 -22.5t-64 -58t-39.5 -86t-21 -100.5t-5.5 -107q0 -73 42 -121.5t103 -48.5h576
+q61 0 103 48.5t42 121.5zM1028 892q0 108 -76.5 184t-183.5 76t-183.5 -76t-76.5 -184q0 -107 76.5 -183t183.5 -76t183.5 76t76.5 183zM1664 352v-192q0 -14 -9 -23t-23 -9h-96v-224q0 -66 -47 -113t-113 -47h-1216q-66 0 -113 47t-47 113v1472q0 66 47 113t113 47h1216
+q66 0 113 -47t47 -113v-224h96q14 0 23 -9t9 -23v-192q0 -14 -9 -23t-23 -9h-96v-128h96q14 0 23 -9t9 -23v-192q0 -14 -9 -23t-23 -9h-96v-128h96q14 0 23 -9t9 -23z" />
+    <glyph glyph-name="uniF2BA" unicode="&#xf2ba;" horiz-adv-x="1664" 
+d="M1028 892q0 -107 -76.5 -183t-183.5 -76t-183.5 76t-76.5 183q0 108 76.5 184t183.5 76t183.5 -76t76.5 -184zM980 672q46 0 82.5 -17t60 -47.5t39.5 -67t24 -81t11.5 -82.5t3.5 -79q0 -67 -39.5 -118.5t-105.5 -51.5h-576q-66 0 -105.5 51.5t-39.5 118.5q0 48 4.5 93.5
+t18.5 98.5t36.5 91.5t63 64.5t93.5 26h5q7 -4 32 -19.5t35.5 -21t33 -17t37 -16t35 -9t39.5 -4.5t39.5 4.5t35 9t37 16t33 17t35.5 21t32 19.5zM1664 928q0 -13 -9.5 -22.5t-22.5 -9.5h-96v-128h96q13 0 22.5 -9.5t9.5 -22.5v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-96v-128h96
+q13 0 22.5 -9.5t9.5 -22.5v-192q0 -13 -9.5 -22.5t-22.5 -9.5h-96v-224q0 -66 -47 -113t-113 -47h-1216q-66 0 -113 47t-47 113v1472q0 66 47 113t113 47h1216q66 0 113 -47t47 -113v-224h96q13 0 22.5 -9.5t9.5 -22.5v-192zM1408 -96v1472q0 13 -9.5 22.5t-22.5 9.5h-1216
+q-13 0 -22.5 -9.5t-9.5 -22.5v-1472q0 -13 9.5 -22.5t22.5 -9.5h1216q13 0 22.5 9.5t9.5 22.5z" />
+    <glyph glyph-name="uniF2BB" unicode="&#xf2bb;" horiz-adv-x="2048" 
+d="M1024 405q0 64 -9 117.5t-29.5 103t-60.5 78t-97 28.5q-6 -4 -30 -18t-37.5 -21.5t-35.5 -17.5t-43 -14.5t-42 -4.5t-42 4.5t-43 14.5t-35.5 17.5t-37.5 21.5t-30 18q-57 0 -97 -28.5t-60.5 -78t-29.5 -103t-9 -117.5t37 -106.5t91 -42.5h512q54 0 91 42.5t37 106.5z
+M867 925q0 94 -66.5 160.5t-160.5 66.5t-160.5 -66.5t-66.5 -160.5t66.5 -160.5t160.5 -66.5t160.5 66.5t66.5 160.5zM1792 416v64q0 14 -9 23t-23 9h-576q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h576q14 0 23 9t9 23zM1792 676v56q0 15 -10.5 25.5t-25.5 10.5h-568
+q-15 0 -25.5 -10.5t-10.5 -25.5v-56q0 -15 10.5 -25.5t25.5 -10.5h568q15 0 25.5 10.5t10.5 25.5zM1792 928v64q0 14 -9 23t-23 9h-576q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h576q14 0 23 9t9 23zM2048 1248v-1216q0 -66 -47 -113t-113 -47h-352v96q0 14 -9 23t-23 9
+h-64q-14 0 -23 -9t-9 -23v-96h-768v96q0 14 -9 23t-23 9h-64q-14 0 -23 -9t-9 -23v-96h-352q-66 0 -113 47t-47 113v1216q0 66 47 113t113 47h1728q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="uniF2BC" unicode="&#xf2bc;" horiz-adv-x="2048" 
+d="M1024 405q0 -64 -37 -106.5t-91 -42.5h-512q-54 0 -91 42.5t-37 106.5t9 117.5t29.5 103t60.5 78t97 28.5q6 -4 30 -18t37.5 -21.5t35.5 -17.5t43 -14.5t42 -4.5t42 4.5t43 14.5t35.5 17.5t37.5 21.5t30 18q57 0 97 -28.5t60.5 -78t29.5 -103t9 -117.5zM867 925
+q0 -94 -66.5 -160.5t-160.5 -66.5t-160.5 66.5t-66.5 160.5t66.5 160.5t160.5 66.5t160.5 -66.5t66.5 -160.5zM1792 480v-64q0 -14 -9 -23t-23 -9h-576q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h576q14 0 23 -9t9 -23zM1792 732v-56q0 -15 -10.5 -25.5t-25.5 -10.5h-568
+q-15 0 -25.5 10.5t-10.5 25.5v56q0 15 10.5 25.5t25.5 10.5h568q15 0 25.5 -10.5t10.5 -25.5zM1792 992v-64q0 -14 -9 -23t-23 -9h-576q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h576q14 0 23 -9t9 -23zM1920 32v1216q0 13 -9.5 22.5t-22.5 9.5h-1728q-13 0 -22.5 -9.5
+t-9.5 -22.5v-1216q0 -13 9.5 -22.5t22.5 -9.5h352v96q0 14 9 23t23 9h64q14 0 23 -9t9 -23v-96h768v96q0 14 9 23t23 9h64q14 0 23 -9t9 -23v-96h352q13 0 22.5 9.5t9.5 22.5zM2048 1248v-1216q0 -66 -47 -113t-113 -47h-1728q-66 0 -113 47t-47 113v1216q0 66 47 113
+t113 47h1728q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="uniF2BD" unicode="&#xf2bd;" horiz-adv-x="1792" 
+d="M1523 197q-22 155 -87.5 257.5t-184.5 118.5q-67 -74 -159.5 -115.5t-195.5 -41.5t-195.5 41.5t-159.5 115.5q-119 -16 -184.5 -118.5t-87.5 -257.5q106 -150 271 -237.5t356 -87.5t356 87.5t271 237.5zM1280 896q0 159 -112.5 271.5t-271.5 112.5t-271.5 -112.5
+t-112.5 -271.5t112.5 -271.5t271.5 -112.5t271.5 112.5t112.5 271.5zM1792 640q0 -182 -71 -347.5t-190.5 -286t-285.5 -191.5t-349 -71q-182 0 -348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71t348 -71t286 -191t191 -286t71 -348z" />
+    <glyph glyph-name="uniF2BE" unicode="&#xf2be;" horiz-adv-x="1792" 
+d="M896 1536q182 0 348 -71t286 -191t191 -286t71 -348q0 -181 -70.5 -347t-190.5 -286t-286 -191.5t-349 -71.5t-349 71t-285.5 191.5t-190.5 286t-71 347.5t71 348t191 286t286 191t348 71zM1515 185q149 205 149 455q0 156 -61 298t-164 245t-245 164t-298 61t-298 -61
+t-245 -164t-164 -245t-61 -298q0 -250 149 -455q66 327 306 327q131 -128 313 -128t313 128q240 0 306 -327zM1280 832q0 159 -112.5 271.5t-271.5 112.5t-271.5 -112.5t-112.5 -271.5t112.5 -271.5t271.5 -112.5t271.5 112.5t112.5 271.5z" />
+    <glyph glyph-name="uniF2C0" unicode="&#xf2c0;" 
+d="M1201 752q47 -14 89.5 -38t89 -73t79.5 -115.5t55 -172t22 -236.5q0 -154 -100 -263.5t-241 -109.5h-854q-141 0 -241 109.5t-100 263.5q0 131 22 236.5t55 172t79.5 115.5t89 73t89.5 38q-79 125 -79 272q0 104 40.5 198.5t109.5 163.5t163.5 109.5t198.5 40.5
+t198.5 -40.5t163.5 -109.5t109.5 -163.5t40.5 -198.5q0 -147 -79 -272zM768 1408q-159 0 -271.5 -112.5t-112.5 -271.5t112.5 -271.5t271.5 -112.5t271.5 112.5t112.5 271.5t-112.5 271.5t-271.5 112.5zM1195 -128q88 0 150.5 71.5t62.5 173.5q0 239 -78.5 377t-225.5 145
+q-145 -127 -336 -127t-336 127q-147 -7 -225.5 -145t-78.5 -377q0 -102 62.5 -173.5t150.5 -71.5h854z" />
+    <glyph glyph-name="uniF2C1" unicode="&#xf2c1;" horiz-adv-x="1280" 
+d="M1024 278q0 -64 -37 -107t-91 -43h-512q-54 0 -91 43t-37 107t9 118t29.5 104t61 78.5t96.5 28.5q80 -75 188 -75t188 75q56 0 96.5 -28.5t61 -78.5t29.5 -104t9 -118zM870 797q0 -94 -67.5 -160.5t-162.5 -66.5t-162.5 66.5t-67.5 160.5t67.5 160.5t162.5 66.5
+t162.5 -66.5t67.5 -160.5zM1152 -96v1376h-1024v-1376q0 -13 9.5 -22.5t22.5 -9.5h960q13 0 22.5 9.5t9.5 22.5zM1280 1376v-1472q0 -66 -47 -113t-113 -47h-960q-66 0 -113 47t-47 113v1472q0 66 47 113t113 47h352v-96q0 -14 9 -23t23 -9h192q14 0 23 9t9 23v96h352
+q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="uniF2C2" unicode="&#xf2c2;" horiz-adv-x="2048" 
+d="M896 324q0 54 -7.5 100.5t-24.5 90t-51 68.5t-81 25q-64 -64 -156 -64t-156 64q-47 0 -81 -25t-51 -68.5t-24.5 -90t-7.5 -100.5q0 -55 31.5 -93.5t75.5 -38.5h426q44 0 75.5 38.5t31.5 93.5zM768 768q0 80 -56 136t-136 56t-136 -56t-56 -136t56 -136t136 -56t136 56
+t56 136zM1792 288v64q0 14 -9 23t-23 9h-704q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h704q14 0 23 9t9 23zM1408 544v64q0 14 -9 23t-23 9h-320q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h320q14 0 23 9t9 23zM1792 544v64q0 14 -9 23t-23 9h-192q-14 0 -23 -9t-9 -23
+v-64q0 -14 9 -23t23 -9h192q14 0 23 9t9 23zM1792 800v64q0 14 -9 23t-23 9h-704q-14 0 -23 -9t-9 -23v-64q0 -14 9 -23t23 -9h704q14 0 23 9t9 23zM128 1152h1792v96q0 14 -9 23t-23 9h-1728q-14 0 -23 -9t-9 -23v-96zM2048 1248v-1216q0 -66 -47 -113t-113 -47h-1728
+q-66 0 -113 47t-47 113v1216q0 66 47 113t113 47h1728q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="uniF2C3" unicode="&#xf2c3;" horiz-adv-x="2048" 
+d="M896 324q0 -55 -31.5 -93.5t-75.5 -38.5h-426q-44 0 -75.5 38.5t-31.5 93.5q0 54 7.5 100.5t24.5 90t51 68.5t81 25q64 -64 156 -64t156 64q47 0 81 -25t51 -68.5t24.5 -90t7.5 -100.5zM768 768q0 -80 -56 -136t-136 -56t-136 56t-56 136t56 136t136 56t136 -56t56 -136z
+M1792 352v-64q0 -14 -9 -23t-23 -9h-704q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h704q14 0 23 -9t9 -23zM1408 608v-64q0 -14 -9 -23t-23 -9h-320q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h320q14 0 23 -9t9 -23zM1792 608v-64q0 -14 -9 -23t-23 -9h-192q-14 0 -23 9t-9 23v64
+q0 14 9 23t23 9h192q14 0 23 -9t9 -23zM1792 864v-64q0 -14 -9 -23t-23 -9h-704q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h704q14 0 23 -9t9 -23zM1920 32v1120h-1792v-1120q0 -13 9.5 -22.5t22.5 -9.5h1728q13 0 22.5 9.5t9.5 22.5zM2048 1248v-1216q0 -66 -47 -113t-113 -47
+h-1728q-66 0 -113 47t-47 113v1216q0 66 47 113t113 47h1728q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="uniF2C4" unicode="&#xf2c4;" horiz-adv-x="1792" 
+d="M1255 749q0 318 -105 474.5t-330 156.5q-222 0 -326 -157t-104 -474q0 -316 104 -471.5t326 -155.5q74 0 131 17q-22 43 -39 73t-44 65t-53.5 56.5t-63 36t-77.5 14.5q-46 0 -79 -16l-49 97q105 91 276 91q132 0 215.5 -54t150.5 -155q67 149 67 402zM1645 117h117
+q3 -27 -2 -67t-26.5 -95t-58 -100.5t-107 -78t-162.5 -32.5q-71 0 -130.5 19t-105.5 56t-79 78t-66 96q-97 -27 -205 -27q-150 0 -292.5 58t-253 158.5t-178 249t-67.5 317.5q0 170 67.5 319.5t178.5 250.5t253.5 159t291.5 58q121 0 238.5 -36t217 -106t176 -164.5
+t119.5 -219t43 -261.5q0 -190 -80.5 -347.5t-218.5 -264.5q47 -70 93.5 -106.5t104.5 -36.5q61 0 94 37.5t38 85.5z" />
+    <glyph glyph-name="uniF2C5" unicode="&#xf2c5;" horiz-adv-x="2304" 
+d="M453 -101q0 -21 -16 -37.5t-37 -16.5q-1 0 -13 3q-63 15 -162 140q-225 284 -225 676q0 341 213 614q39 51 95 103.5t94 52.5q19 0 35 -13.5t16 -32.5q0 -27 -63 -90q-98 -102 -147 -184q-119 -199 -119 -449q0 -281 123 -491q50 -85 136 -173q2 -3 14.5 -16t19.5 -21
+t17 -20.5t14.5 -23.5t4.5 -21zM1796 33q0 -29 -17.5 -48.5t-46.5 -19.5h-1081q-26 0 -45 19t-19 45q0 29 17.5 48.5t46.5 19.5h1081q26 0 45 -19t19 -45zM1581 644q0 -134 -67 -233q-25 -38 -69.5 -78.5t-83.5 -60.5q-16 -10 -27 -10q-7 0 -15 6t-8 12q0 9 19 30t42 46
+t42 67.5t19 88.5q0 76 -35 130q-29 42 -46 42q-3 0 -3 -5q0 -12 7.5 -35.5t7.5 -36.5q0 -22 -21.5 -35t-44.5 -13q-66 0 -66 76q0 15 1.5 44t1.5 44q0 25 -10 46q-13 25 -42 53.5t-51 28.5q-5 0 -7 -0.5t-3.5 -2.5t-1.5 -6q0 -2 16 -26t16 -54q0 -37 -19 -68t-46 -54
+t-53.5 -46t-45.5 -54t-19 -68q0 -98 42 -160q29 -43 79 -63q16 -5 17 -10q1 -2 1 -5q0 -16 -18 -16q-6 0 -33 11q-119 43 -195 139.5t-76 218.5q0 55 24.5 115.5t60 115t70.5 108.5t59.5 113.5t24.5 111.5q0 53 -25 94q-29 48 -56 64q-19 9 -19 21q0 20 41 20q50 0 110 -29
+q41 -19 71 -44.5t49.5 -51t33.5 -62.5t22 -69t16 -80q0 -1 3 -17.5t4.5 -25t5.5 -25t9 -27t11 -21.5t14.5 -16.5t18.5 -5.5q23 0 37 14t14 37q0 25 -20 67t-20 52t10 10q27 0 93 -70q72 -76 102.5 -156t30.5 -186zM2304 615q0 -274 -138 -503q-19 -32 -48 -72t-68 -86.5
+t-81 -77t-74 -30.5q-16 0 -31 15.5t-15 31.5q0 15 29 50.5t68.5 77t48.5 52.5q183 230 183 531q0 131 -20.5 235t-72.5 211q-58 119 -163 228q-2 3 -13 13.5t-16.5 16.5t-15 17.5t-15 20t-9.5 18.5t-4 19q0 19 16 35.5t35 16.5q70 0 196 -169q98 -131 146 -273t60 -314
+q2 -42 2 -64z" />
+    <glyph glyph-name="uniF2C6" unicode="&#xf2c6;" horiz-adv-x="1792" 
+d="M1189 229l147 693q9 44 -10.5 63t-51.5 7l-864 -333q-29 -11 -39.5 -25t-2.5 -26.5t32 -19.5l221 -69l513 323q21 14 32 6q7 -5 -4 -15l-415 -375v0v0l-16 -228q23 0 45 22l108 104l224 -165q64 -36 81 38zM1792 640q0 -182 -71 -348t-191 -286t-286 -191t-348 -71
+t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71t348 -71t286 -191t191 -286t71 -348z" />
+    <glyph glyph-name="uniF2C7" unicode="&#xf2c7;" horiz-adv-x="1024" 
+d="M640 192q0 -80 -56 -136t-136 -56t-136 56t-56 136q0 60 35 110t93 71v907h128v-907q58 -21 93 -71t35 -110zM768 192q0 77 -34 144t-94 112v768q0 80 -56 136t-136 56t-136 -56t-56 -136v-768q-60 -45 -94 -112t-34 -144q0 -133 93.5 -226.5t226.5 -93.5t226.5 93.5
+t93.5 226.5zM896 192q0 -185 -131.5 -316.5t-316.5 -131.5t-316.5 131.5t-131.5 316.5q0 182 128 313v711q0 133 93.5 226.5t226.5 93.5t226.5 -93.5t93.5 -226.5v-711q128 -131 128 -313zM1024 768v-128h-192v128h192zM1024 1024v-128h-192v128h192zM1024 1280v-128h-192
+v128h192z" />
+    <glyph glyph-name="uniF2C8" unicode="&#xf2c8;" horiz-adv-x="1024" 
+d="M640 192q0 -80 -56 -136t-136 -56t-136 56t-56 136q0 60 35 110t93 71v651h128v-651q58 -21 93 -71t35 -110zM768 192q0 77 -34 144t-94 112v768q0 80 -56 136t-136 56t-136 -56t-56 -136v-768q-60 -45 -94 -112t-34 -144q0 -133 93.5 -226.5t226.5 -93.5t226.5 93.5
+t93.5 226.5zM896 192q0 -185 -131.5 -316.5t-316.5 -131.5t-316.5 131.5t-131.5 316.5q0 182 128 313v711q0 133 93.5 226.5t226.5 93.5t226.5 -93.5t93.5 -226.5v-711q128 -131 128 -313zM1024 768v-128h-192v128h192zM1024 1024v-128h-192v128h192zM1024 1280v-128h-192
+v128h192z" />
+    <glyph glyph-name="uniF2C9" unicode="&#xf2c9;" horiz-adv-x="1024" 
+d="M640 192q0 -80 -56 -136t-136 -56t-136 56t-56 136q0 60 35 110t93 71v395h128v-395q58 -21 93 -71t35 -110zM768 192q0 77 -34 144t-94 112v768q0 80 -56 136t-136 56t-136 -56t-56 -136v-768q-60 -45 -94 -112t-34 -144q0 -133 93.5 -226.5t226.5 -93.5t226.5 93.5
+t93.5 226.5zM896 192q0 -185 -131.5 -316.5t-316.5 -131.5t-316.5 131.5t-131.5 316.5q0 182 128 313v711q0 133 93.5 226.5t226.5 93.5t226.5 -93.5t93.5 -226.5v-711q128 -131 128 -313zM1024 768v-128h-192v128h192zM1024 1024v-128h-192v128h192zM1024 1280v-128h-192
+v128h192z" />
+    <glyph glyph-name="uniF2CA" unicode="&#xf2ca;" horiz-adv-x="1024" 
+d="M640 192q0 -80 -56 -136t-136 -56t-136 56t-56 136q0 60 35 110t93 71v139h128v-139q58 -21 93 -71t35 -110zM768 192q0 77 -34 144t-94 112v768q0 80 -56 136t-136 56t-136 -56t-56 -136v-768q-60 -45 -94 -112t-34 -144q0 -133 93.5 -226.5t226.5 -93.5t226.5 93.5
+t93.5 226.5zM896 192q0 -185 -131.5 -316.5t-316.5 -131.5t-316.5 131.5t-131.5 316.5q0 182 128 313v711q0 133 93.5 226.5t226.5 93.5t226.5 -93.5t93.5 -226.5v-711q128 -131 128 -313zM1024 768v-128h-192v128h192zM1024 1024v-128h-192v128h192zM1024 1280v-128h-192
+v128h192z" />
+    <glyph glyph-name="uniF2CB" unicode="&#xf2cb;" horiz-adv-x="1024" 
+d="M640 192q0 -80 -56 -136t-136 -56t-136 56t-56 136q0 79 56 135.5t136 56.5t136 -56.5t56 -135.5zM768 192q0 77 -34 144t-94 112v768q0 80 -56 136t-136 56t-136 -56t-56 -136v-768q-60 -45 -94 -112t-34 -144q0 -133 93.5 -226.5t226.5 -93.5t226.5 93.5t93.5 226.5z
+M896 192q0 -185 -131.5 -316.5t-316.5 -131.5t-316.5 131.5t-131.5 316.5q0 182 128 313v711q0 133 93.5 226.5t226.5 93.5t226.5 -93.5t93.5 -226.5v-711q128 -131 128 -313zM1024 768v-128h-192v128h192zM1024 1024v-128h-192v128h192zM1024 1280v-128h-192v128h192z" />
+    <glyph glyph-name="uniF2CC" unicode="&#xf2cc;" horiz-adv-x="1920" 
+d="M1433 1287q10 -10 10 -23t-10 -23l-626 -626q-10 -10 -23 -10t-23 10l-82 82q-10 10 -10 23t10 23l44 44q-72 91 -81.5 207t46.5 215q-74 71 -176 71q-106 0 -181 -75t-75 -181v-1280h-256v1280q0 104 40.5 198.5t109.5 163.5t163.5 109.5t198.5 40.5q106 0 201 -41
+t166 -115q94 39 197 24.5t185 -79.5l44 44q10 10 23 10t23 -10zM1344 1024q26 0 45 -19t19 -45t-19 -45t-45 -19t-45 19t-19 45t19 45t45 19zM1600 896q-26 0 -45 19t-19 45t19 45t45 19t45 -19t19 -45t-19 -45t-45 -19zM1856 1024q26 0 45 -19t19 -45t-19 -45t-45 -19
+t-45 19t-19 45t19 45t45 19zM1216 896q26 0 45 -19t19 -45t-19 -45t-45 -19t-45 19t-19 45t19 45t45 19zM1408 832q0 26 19 45t45 19t45 -19t19 -45t-19 -45t-45 -19t-45 19t-19 45zM1728 896q26 0 45 -19t19 -45t-19 -45t-45 -19t-45 19t-19 45t19 45t45 19zM1088 768
+q26 0 45 -19t19 -45t-19 -45t-45 -19t-45 19t-19 45t19 45t45 19zM1344 640q-26 0 -45 19t-19 45t19 45t45 19t45 -19t19 -45t-19 -45t-45 -19zM1600 768q26 0 45 -19t19 -45t-19 -45t-45 -19t-45 19t-19 45t19 45t45 19zM1216 512q-26 0 -45 19t-19 45t19 45t45 19t45 -19
+t19 -45t-19 -45t-45 -19zM1472 640q26 0 45 -19t19 -45t-19 -45t-45 -19t-45 19t-19 45t19 45t45 19zM1088 512q26 0 45 -19t19 -45t-19 -45t-45 -19t-45 19t-19 45t19 45t45 19zM1344 512q26 0 45 -19t19 -45t-19 -45t-45 -19t-45 19t-19 45t19 45t45 19zM1216 384
+q26 0 45 -19t19 -45t-19 -45t-45 -19t-45 19t-19 45t19 45t45 19zM1088 256q26 0 45 -19t19 -45t-19 -45t-45 -19t-45 19t-19 45t19 45t45 19z" />
+    <glyph glyph-name="uniF2CD" unicode="&#xf2cd;" horiz-adv-x="1792" 
+d="M1664 448v-192q0 -169 -128 -286v-194q0 -14 -9 -23t-23 -9h-64q-14 0 -23 9t-9 23v118q-63 -22 -128 -22h-768q-65 0 -128 22v-110q0 -17 -9.5 -28.5t-22.5 -11.5h-64q-13 0 -22.5 11.5t-9.5 28.5v186q-128 117 -128 286v192h1536zM704 864q0 -14 -9 -23t-23 -9t-23 9
+t-9 23t9 23t23 9t23 -9t9 -23zM768 928q0 -14 -9 -23t-23 -9t-23 9t-9 23t9 23t23 9t23 -9t9 -23zM704 992q0 -14 -9 -23t-23 -9t-23 9t-9 23t9 23t23 9t23 -9t9 -23zM832 992q0 -14 -9 -23t-23 -9t-23 9t-9 23t9 23t23 9t23 -9t9 -23zM768 1056q0 -14 -9 -23t-23 -9t-23 9
+t-9 23t9 23t23 9t23 -9t9 -23zM704 1120q0 -14 -9 -23t-23 -9t-23 9t-9 23t9 23t23 9t23 -9t9 -23zM1792 608v-64q0 -14 -9 -23t-23 -9h-1728q-14 0 -23 9t-9 23v64q0 14 9 23t23 9h96v640q0 106 75 181t181 75q108 0 184 -78q46 19 98 12t93 -39l22 22q11 11 22 0l42 -42
+q11 -11 0 -22l-314 -314q-11 -11 -22 0l-42 42q-11 11 0 22l22 22q-36 46 -40.5 104t23.5 108q-37 35 -88 35q-53 0 -90.5 -37.5t-37.5 -90.5v-640h1504q14 0 23 -9t9 -23zM896 1056q0 -14 -9 -23t-23 -9t-23 9t-9 23t9 23t23 9t23 -9t9 -23zM832 1120q0 -14 -9 -23t-23 -9
+t-23 9t-9 23t9 23t23 9t23 -9t9 -23zM768 1184q0 -14 -9 -23t-23 -9t-23 9t-9 23t9 23t23 9t23 -9t9 -23zM960 1120q0 -14 -9 -23t-23 -9t-23 9t-9 23t9 23t23 9t23 -9t9 -23zM896 1184q0 -14 -9 -23t-23 -9t-23 9t-9 23t9 23t23 9t23 -9t9 -23zM832 1248q0 -14 -9 -23
+t-23 -9t-23 9t-9 23t9 23t23 9t23 -9t9 -23zM1024 1184q0 -14 -9 -23t-23 -9t-23 9t-9 23t9 23t23 9t23 -9t9 -23zM960 1248q0 -14 -9 -23t-23 -9t-23 9t-9 23t9 23t23 9t23 -9t9 -23zM1088 1248q0 -14 -9 -23t-23 -9t-23 9t-9 23t9 23t23 9t23 -9t9 -23z" />
+    <glyph glyph-name="uniF2CE" unicode="&#xf2ce;" 
+d="M994 344q0 -86 -17 -197q-31 -215 -55 -313q-22 -90 -152 -90t-152 90q-24 98 -55 313q-17 110 -17 197q0 168 224 168t224 -168zM1536 768q0 -240 -134 -434t-350 -280q-8 -3 -15 3t-6 15q7 48 10 66q4 32 6 47q1 9 9 12q159 81 255.5 234t96.5 337q0 180 -91 330.5
+t-247 234.5t-337 74q-124 -7 -237 -61t-193.5 -140.5t-128 -202t-46.5 -240.5q1 -184 99 -336.5t257 -231.5q7 -3 9 -12q3 -21 6 -45q1 -9 5 -32.5t6 -35.5q1 -9 -6.5 -15t-15.5 -2q-148 58 -261 169.5t-173.5 264t-52.5 319.5q7 143 66 273.5t154.5 227t225 157.5t272.5 70
+q164 10 315.5 -46.5t261 -160.5t175 -250.5t65.5 -308.5zM994 800q0 -93 -65.5 -158.5t-158.5 -65.5t-158.5 65.5t-65.5 158.5t65.5 158.5t158.5 65.5t158.5 -65.5t65.5 -158.5zM1282 768q0 -122 -53.5 -228.5t-146.5 -177.5q-8 -6 -16 -2t-10 14q-6 52 -29 92q-7 10 3 20
+q58 54 91 127t33 155q0 111 -58.5 204t-157.5 141.5t-212 36.5q-133 -15 -229 -113t-109 -231q-10 -92 23.5 -176t98.5 -144q10 -10 3 -20q-24 -41 -29 -93q-2 -9 -10 -13t-16 2q-95 74 -148.5 183t-51.5 234q3 131 69 244t177 181.5t241 74.5q144 7 268 -60t196.5 -187.5
+t72.5 -263.5z" />
+    <glyph glyph-name="uniF2D0" unicode="&#xf2d0;" horiz-adv-x="1792" 
+d="M256 128h1280v768h-1280v-768zM1792 1248v-1216q0 -66 -47 -113t-113 -47h-1472q-66 0 -113 47t-47 113v1216q0 66 47 113t113 47h1472q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="uniF2D1" unicode="&#xf2d1;" horiz-adv-x="1792" 
+d="M1792 224v-192q0 -66 -47 -113t-113 -47h-1472q-66 0 -113 47t-47 113v192q0 66 47 113t113 47h1472q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="uniF2D2" unicode="&#xf2d2;" horiz-adv-x="2048" 
+d="M256 0h768v512h-768v-512zM1280 512h512v768h-768v-256h96q66 0 113 -47t47 -113v-352zM2048 1376v-960q0 -66 -47 -113t-113 -47h-608v-352q0 -66 -47 -113t-113 -47h-960q-66 0 -113 47t-47 113v960q0 66 47 113t113 47h608v352q0 66 47 113t113 47h960q66 0 113 -47
+t47 -113z" />
+    <glyph glyph-name="uniF2D3" unicode="&#xf2d3;" horiz-adv-x="1792" 
+d="M1175 215l146 146q10 10 10 23t-10 23l-233 233l233 233q10 10 10 23t-10 23l-146 146q-10 10 -23 10t-23 -10l-233 -233l-233 233q-10 10 -23 10t-23 -10l-146 -146q-10 -10 -10 -23t10 -23l233 -233l-233 -233q-10 -10 -10 -23t10 -23l146 -146q10 -10 23 -10t23 10
+l233 233l233 -233q10 -10 23 -10t23 10zM1792 1248v-1216q0 -66 -47 -113t-113 -47h-1472q-66 0 -113 47t-47 113v1216q0 66 47 113t113 47h1472q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="uniF2D4" unicode="&#xf2d4;" horiz-adv-x="1792" 
+d="M1257 425l-146 -146q-10 -10 -23 -10t-23 10l-169 169l-169 -169q-10 -10 -23 -10t-23 10l-146 146q-10 10 -10 23t10 23l169 169l-169 169q-10 10 -10 23t10 23l146 146q10 10 23 10t23 -10l169 -169l169 169q10 10 23 10t23 -10l146 -146q10 -10 10 -23t-10 -23
+l-169 -169l169 -169q10 -10 10 -23t-10 -23zM256 128h1280v1024h-1280v-1024zM1792 1248v-1216q0 -66 -47 -113t-113 -47h-1472q-66 0 -113 47t-47 113v1216q0 66 47 113t113 47h1472q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="uniF2D5" unicode="&#xf2d5;" horiz-adv-x="1792" 
+d="M1070 358l306 564h-654l-306 -564h654zM1792 640q0 -182 -71 -348t-191 -286t-286 -191t-348 -71t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71t348 -71t286 -191t191 -286t71 -348z" />
+    <glyph glyph-name="uniF2D6" unicode="&#xf2d6;" horiz-adv-x="1794" 
+d="M1291 1060q-15 17 -35 8.5t-26 -28.5t5 -38q14 -17 40 -14.5t34 20.5t-18 52zM895 814q-8 -8 -19.5 -8t-18.5 8q-8 8 -8 19t8 18q7 8 18.5 8t19.5 -8q7 -7 7 -18t-7 -19zM1060 740l-35 -35q-12 -13 -29.5 -13t-30.5 13l-38 38q-12 13 -12 30t12 30l35 35q12 12 29.5 12
+t30.5 -12l38 -39q12 -12 12 -29.5t-12 -29.5zM951 870q-7 -8 -18.5 -8t-19.5 8q-7 8 -7 19t7 19q8 8 19 8t19 -8t8 -19t-8 -19zM1354 968q-34 -64 -107.5 -85.5t-127.5 16.5q-38 28 -61 66.5t-21 87.5t39 92t75.5 53t70.5 -5t70 -51q2 -2 13 -12.5t14.5 -13.5t13 -13.5
+t12.5 -15.5t10 -15.5t8.5 -18t4 -18.5t1 -21t-5 -22t-9.5 -24zM1555 486q3 20 -8.5 34.5t-27.5 21.5t-33 17t-23 20q-40 71 -84 98.5t-113 11.5q19 13 40 18.5t33 4.5l12 -1q2 45 -34 90q6 20 6.5 40.5t-2.5 30.5l-3 10q43 24 71 65t34 91q10 84 -43 150.5t-137 76.5
+q-60 7 -114 -18.5t-82 -74.5q-30 -51 -33.5 -101t14.5 -87t43.5 -64t56.5 -42q-45 4 -88 36t-57 88q-28 108 32 222q-16 21 -29 32q-50 0 -89 -19q19 24 42 37t36 14l13 1q0 50 -13 78q-10 21 -32.5 28.5t-47 -3.5t-37.5 -40q2 4 4 7q-7 -28 -6.5 -75.5t19 -117t48.5 -122.5
+q-25 -14 -47 -36q-35 -16 -85.5 -70.5t-84.5 -101.5l-33 -46q-90 -34 -181 -125.5t-75 -162.5q1 -16 11 -27q-15 -12 -30 -30q-21 -25 -21 -54t21.5 -40t63.5 6q41 19 77 49.5t55 60.5q-2 2 -6.5 5t-20.5 7.5t-33 3.5q23 5 51 12.5t40 10t27.5 6t26 4t23.5 0.5q14 -7 22 34
+q7 37 7 90q0 102 -40 150q106 -103 101 -219q-1 -29 -15 -50t-27 -27l-13 -6q-4 -7 -19 -32t-26 -45.5t-26.5 -52t-25 -61t-17 -63t-6.5 -66.5t10 -63q-35 54 -37 80q-22 -24 -34.5 -39t-33.5 -42t-30.5 -46t-16.5 -41t-0.5 -38t25.5 -27q45 -25 144 64t190.5 221.5
+t122.5 228.5q86 52 145 115.5t86 119.5q47 -93 154 -178q104 -83 167 -80q39 2 46 43zM1794 640q0 -182 -71 -348t-191 -286t-286.5 -191t-348.5 -71t-348.5 71t-286.5 191t-191 286t-71 348t71 348t191 286t286.5 191t348.5 71t348.5 -71t286.5 -191t191 -286t71 -348z" />
+    <glyph glyph-name="uniF2D7" unicode="&#xf2d7;" 
+d="M518 1353v-655q103 -1 191.5 1.5t125.5 5.5l37 3q68 2 90.5 24.5t39.5 94.5l33 142h103l-14 -322l7 -319h-103l-29 127q-15 68 -45 93t-84 26q-87 8 -352 8v-556q0 -78 43.5 -115.5t133.5 -37.5h357q35 0 59.5 2t55 7.5t54 18t48.5 32t46 50.5t39 73l93 216h89
+q-6 -37 -31.5 -252t-30.5 -276q-146 5 -263.5 8t-162.5 4h-44h-628l-376 -12v102l127 25q67 13 91.5 37t25.5 79l8 643q3 402 -8 645q-2 61 -25.5 84t-91.5 36l-127 24v102l376 -12h702q139 0 374 27q-6 -68 -14 -194.5t-12 -219.5l-5 -92h-93l-32 124q-31 121 -74 179.5
+t-113 58.5h-548q-28 0 -35.5 -8.5t-7.5 -30.5z" />
+    <glyph glyph-name="uniF2D8" unicode="&#xf2d8;" 
+d="M922 739v-182q0 -4 0.5 -15t0 -15l-1.5 -12t-3.5 -11.5t-6.5 -7.5t-11 -5.5t-16 -1.5v309q9 0 16 -1t11 -5t6.5 -5.5t3.5 -9.5t1 -10.5v-13.5v-14zM1238 643v-121q0 -1 0.5 -12.5t0 -15.5t-2.5 -11.5t-7.5 -10.5t-13.5 -3q-9 0 -14 9q-4 10 -4 165v7v8.5v9t1.5 8.5l3.5 7
+t5 5.5t8 1.5q6 0 10 -1.5t6.5 -4.5t4 -6t2 -8.5t0.5 -8v-9.5v-9zM180 407h122v472h-122v-472zM614 407h106v472h-159l-28 -221q-20 148 -32 221h-158v-472h107v312l45 -312h76l43 319v-319zM1039 712q0 67 -5 90q-3 16 -11 28.5t-17 20.5t-25 14t-26.5 8.5t-31 4t-29 1.5
+h-29.5h-12h-91v-472h56q169 -1 197 24.5t25 180.5q-1 62 -1 100zM1356 515v133q0 29 -2 45t-9.5 33.5t-24.5 25t-46 7.5q-46 0 -77 -34v154h-117v-472h110l7 30q30 -36 77 -36q50 0 66 30.5t16 83.5zM1536 1248v-1216q0 -66 -47 -113t-113 -47h-1216q-66 0 -113 47t-47 113
+v1216q0 66 47 113t113 47h1216q66 0 113 -47t47 -113z" />
+    <glyph glyph-name="uniF2D9" unicode="&#xf2d9;" horiz-adv-x="2176" 
+d="M1143 -197q-6 1 -11 4q-13 8 -36 23t-86 65t-116.5 104.5t-112 140t-89.5 172.5q-17 3 -175 37q66 -213 235 -362t391 -184zM502 409l168 -28q-25 76 -41 167.5t-19 145.5l-4 53q-84 -82 -121 -224q5 -65 17 -114zM612 1018q-43 -64 -77 -148q44 46 74 68zM2049 584
+q0 161 -62 307t-167.5 252t-250.5 168.5t-304 62.5q-147 0 -281 -52.5t-240 -148.5q-30 -58 -45 -160q60 51 143 83.5t158.5 43t143 13.5t108.5 -1l40 -3q33 -1 53 -15.5t24.5 -33t6.5 -37t-1 -28.5q-126 11 -227.5 0.5t-183 -43.5t-142.5 -71.5t-131 -98.5
+q4 -36 11.5 -92.5t35.5 -178t62 -179.5q123 -6 247.5 14.5t214.5 53.5t162.5 67t109.5 59l37 24q22 16 39.5 20.5t30.5 -5t17 -34.5q14 -97 -39 -121q-208 -97 -467 -134q-135 -20 -317 -16q41 -96 110 -176.5t137 -127t130.5 -79t101.5 -43.5l39 -12q143 -23 263 15
+q195 99 314 289t119 418zM2123 621q-14 -135 -40 -212q-70 -208 -181.5 -346.5t-318.5 -253.5q-48 -33 -82 -44q-72 -26 -163 -16q-36 -3 -73 -3q-283 0 -504.5 173t-295.5 442q-1 0 -4 0.5t-5 0.5q-6 -50 2.5 -112.5t26 -115t36 -98t31.5 -71.5l14 -26q8 -12 54 -82
+q-71 38 -124.5 106.5t-78.5 140t-39.5 137t-17.5 107.5l-2 42q-5 2 -33.5 12.5t-48.5 18t-53 20.5t-57.5 25t-50 25.5t-42.5 27t-25 25.5q19 -10 50.5 -25.5t113 -45.5t145.5 -38l2 32q11 149 94 290q41 202 176 365q28 115 81 214q15 28 32 45t49 32q158 74 303.5 104
+t302 11t306.5 -97q220 -115 333 -336t87 -474z" />
+    <glyph glyph-name="uniF2DA" unicode="&#xf2da;" horiz-adv-x="1792" 
+d="M1341 752q29 44 -6.5 129.5t-121.5 142.5q-58 39 -125.5 53.5t-118 4.5t-68.5 -37q-12 -23 -4.5 -28t42.5 -10q23 -3 38.5 -5t44.5 -9.5t56 -17.5q36 -13 67.5 -31.5t53 -37t40 -38.5t30.5 -38t22 -34.5t16.5 -28.5t12 -18.5t10.5 -6t11 9.5zM1704 178
+q-52 -127 -148.5 -220t-214.5 -141.5t-253 -60.5t-266 13.5t-251 91t-210 161.5t-141.5 235.5t-46.5 303.5q1 41 8.5 84.5t12.5 64t24 80.5t23 73q-51 -208 1 -397t173 -318t291 -206t346 -83t349 74.5t289 244.5q20 27 18 14q0 -4 -4 -14zM1465 627q0 -104 -40.5 -199
+t-108.5 -164t-162 -109.5t-198 -40.5t-198 40.5t-162 109.5t-108.5 164t-40.5 199t40.5 199t108.5 164t162 109.5t198 40.5t198 -40.5t162 -109.5t108.5 -164t40.5 -199zM1752 915q-65 147 -180.5 251t-253 153.5t-292 53.5t-301 -36.5t-275.5 -129t-220 -211.5t-131 -297
+t-10 -373q-49 161 -51.5 311.5t35.5 272.5t109 227t165.5 180.5t207 126t232 71t242.5 9t236 -54t216 -124.5t178 -197q33 -50 62 -121t31 -112zM1690 573q12 244 -136.5 416t-396.5 240q-8 0 -10 5t24 8q125 -4 230 -50t173 -120t116 -168.5t58.5 -199t-1 -208
+t-61.5 -197.5t-122.5 -167t-185 -117.5t-248.5 -46.5q108 30 201.5 80t174 123t129.5 176.5t55 225.5z" />
+    <glyph glyph-name="uniF2DB" unicode="&#xf2db;" 
+d="M192 256v-128h-112q-16 0 -16 16v16h-48q-16 0 -16 16v32q0 16 16 16h48v16q0 16 16 16h112zM192 512v-128h-112q-16 0 -16 16v16h-48q-16 0 -16 16v32q0 16 16 16h48v16q0 16 16 16h112zM192 768v-128h-112q-16 0 -16 16v16h-48q-16 0 -16 16v32q0 16 16 16h48v16
+q0 16 16 16h112zM192 1024v-128h-112q-16 0 -16 16v16h-48q-16 0 -16 16v32q0 16 16 16h48v16q0 16 16 16h112zM192 1280v-128h-112q-16 0 -16 16v16h-48q-16 0 -16 16v32q0 16 16 16h48v16q0 16 16 16h112zM1280 1440v-1472q0 -40 -28 -68t-68 -28h-832q-40 0 -68 28
+t-28 68v1472q0 40 28 68t68 28h832q40 0 68 -28t28 -68zM1536 208v-32q0 -16 -16 -16h-48v-16q0 -16 -16 -16h-112v128h112q16 0 16 -16v-16h48q16 0 16 -16zM1536 464v-32q0 -16 -16 -16h-48v-16q0 -16 -16 -16h-112v128h112q16 0 16 -16v-16h48q16 0 16 -16zM1536 720v-32
+q0 -16 -16 -16h-48v-16q0 -16 -16 -16h-112v128h112q16 0 16 -16v-16h48q16 0 16 -16zM1536 976v-32q0 -16 -16 -16h-48v-16q0 -16 -16 -16h-112v128h112q16 0 16 -16v-16h48q16 0 16 -16zM1536 1232v-32q0 -16 -16 -16h-48v-16q0 -16 -16 -16h-112v128h112q16 0 16 -16v-16
+h48q16 0 16 -16z" />
+    <glyph glyph-name="uniF2DC" unicode="&#xf2dc;" horiz-adv-x="1664" 
+d="M1566 419l-167 -33l186 -107q23 -13 29.5 -38.5t-6.5 -48.5q-14 -23 -39 -29.5t-48 6.5l-186 106l55 -160q13 -38 -12 -63.5t-60.5 -20.5t-48.5 42l-102 300l-271 156v-313l208 -238q16 -18 17 -39t-11 -36.5t-28.5 -25t-37 -5.5t-36.5 22l-112 128v-214q0 -26 -19 -45
+t-45 -19t-45 19t-19 45v214l-112 -128q-16 -18 -36.5 -22t-37 5.5t-28.5 25t-11 36.5t17 39l208 238v313l-271 -156l-102 -300q-13 -37 -48.5 -42t-60.5 20.5t-12 63.5l55 160l-186 -106q-23 -13 -48 -6.5t-39 29.5q-13 23 -6.5 48.5t29.5 38.5l186 107l-167 33
+q-29 6 -42 29t-8.5 46.5t25.5 40t50 10.5l310 -62l271 157l-271 157l-310 -62q-4 -1 -13 -1q-27 0 -44 18t-19 40t11 43t40 26l167 33l-186 107q-23 13 -29.5 38.5t6.5 48.5t39 30t48 -7l186 -106l-55 160q-13 38 12 63.5t60.5 20.5t48.5 -42l102 -300l271 -156v313
+l-208 238q-16 18 -17 39t11 36.5t28.5 25t37 5.5t36.5 -22l112 -128v214q0 26 19 45t45 19t45 -19t19 -45v-214l112 128q16 18 36.5 22t37 -5.5t28.5 -25t11 -36.5t-17 -39l-208 -238v-313l271 156l102 300q13 37 48.5 42t60.5 -20.5t12 -63.5l-55 -160l186 106
+q23 13 48 6.5t39 -29.5q13 -23 6.5 -48.5t-29.5 -38.5l-186 -107l167 -33q27 -5 40 -26t11 -43t-19 -40t-44 -18q-9 0 -13 1l-310 62l-271 -157l271 -157l310 62q29 6 50 -10.5t25.5 -40t-8.5 -46.5t-42 -29z" />
+    <glyph glyph-name="uniF2DD" unicode="&#xf2dd;" horiz-adv-x="1792" 
+d="M1473 607q7 118 -33 226.5t-113 189t-177 131t-221 57.5q-116 7 -225.5 -32t-192 -110.5t-135 -175t-59.5 -220.5q-7 -118 33 -226.5t113 -189t177.5 -131t221.5 -57.5q155 -9 293 59t224 195.5t94 283.5zM1792 1536l-349 -348q120 -117 180.5 -272t50.5 -321
+q-11 -183 -102 -339t-241 -255.5t-332 -124.5l-999 -132l347 347q-120 116 -180.5 271.5t-50.5 321.5q11 184 102 340t241.5 255.5t332.5 124.5q167 22 500 66t500 66z" />
+    <glyph glyph-name="uniF2DE" unicode="&#xf2de;" horiz-adv-x="1792" 
+d="M948 508l163 -329h-51l-175 350l-171 -350h-49l179 374l-78 33l21 49l240 -102l-21 -50zM563 1100l304 -130l-130 -304l-304 130zM907 915l240 -103l-103 -239l-239 102zM1188 765l191 -81l-82 -190l-190 81zM1680 640q0 159 -62 304t-167.5 250.5t-250.5 167.5t-304 62
+t-304 -62t-250.5 -167.5t-167.5 -250.5t-62 -304t62 -304t167.5 -250.5t250.5 -167.5t304 -62t304 62t250.5 167.5t167.5 250.5t62 304zM1792 640q0 -182 -71 -348t-191 -286t-286 -191t-348 -71t-348 71t-286 191t-191 286t-71 348t71 348t191 286t286 191t348 71t348 -71
+t286 -191t191 -286t71 -348z" />
+    <glyph glyph-name="uniF2E0" unicode="&#xf2e0;" horiz-adv-x="1920" 
+d="M1334 302q-4 24 -27.5 34t-49.5 10.5t-48.5 12.5t-25.5 38q-5 47 33 139.5t75 181t32 127.5q-14 101 -117 103q-45 1 -75 -16l-3 -2l-5 -2.5t-4.5 -2t-5 -2t-5 -0.5t-6 1.5t-6 3.5t-6.5 5q-3 2 -9 8.5t-9 9t-8.5 7.5t-9.5 7.5t-9.5 5.5t-11 4.5t-11.5 2.5q-30 5 -48 -3
+t-45 -31q-1 -1 -9 -8.5t-12.5 -11t-15 -10t-16.5 -5.5t-17 3q-54 27 -84 40q-41 18 -94 -5t-76 -65q-16 -28 -41 -98.5t-43.5 -132.5t-40 -134t-21.5 -73q-22 -69 18.5 -119t110.5 -46q30 2 50.5 15t38.5 46q7 13 79 199.5t77 194.5q6 11 21.5 18t29.5 0q27 -15 21 -53
+q-2 -18 -51 -139.5t-50 -132.5q-6 -38 19.5 -56.5t60.5 -7t55 49.5q4 8 45.5 92t81.5 163.5t46 88.5q20 29 41 28q29 0 25 -38q-2 -16 -65.5 -147.5t-70.5 -159.5q-12 -53 13 -103t74 -74q17 -9 51 -15.5t71.5 -8t62.5 14t20 48.5zM383 86q3 -15 -5 -27.5t-23 -15.5
+q-14 -3 -26.5 5t-15.5 23q-3 14 5 27t22 16t27 -5t16 -23zM953 -177q12 -17 8.5 -37.5t-20.5 -32.5t-37.5 -8t-32.5 21q-11 17 -7.5 37.5t20.5 32.5t37.5 8t31.5 -21zM177 635q-18 -27 -49.5 -33t-57.5 13q-26 18 -32 50t12 58q18 27 49.5 33t57.5 -12q26 -19 32 -50.5
+t-12 -58.5zM1467 -42q19 -28 13 -61.5t-34 -52.5t-60.5 -13t-51.5 34t-13 61t33 53q28 19 60.5 13t52.5 -34zM1579 562q69 -113 42.5 -244.5t-134.5 -207.5q-90 -63 -199 -60q-20 -80 -84.5 -127t-143.5 -44.5t-140 57.5q-12 -9 -13 -10q-103 -71 -225 -48.5t-193 126.5
+q-50 73 -53 164q-83 14 -142.5 70.5t-80.5 128t-2 152t81 138.5q-36 60 -38 128t24.5 125t79.5 98.5t121 50.5q32 85 99 148t146.5 91.5t168 17t159.5 -66.5q72 21 140 17.5t128.5 -36t104.5 -80t67.5 -115t17.5 -140.5q52 -16 87 -57t45.5 -89t-5.5 -99.5t-58 -87.5z
+M455 1222q14 -20 9.5 -44.5t-24.5 -38.5q-19 -14 -43.5 -9.5t-37.5 24.5q-14 20 -9.5 44.5t24.5 38.5q19 14 43.5 9.5t37.5 -24.5zM614 1503q4 -16 -5 -30.5t-26 -18.5t-31 5.5t-18 26.5q-3 17 6.5 31t25.5 18q17 4 31 -5.5t17 -26.5zM1800 555q4 -20 -6.5 -37t-30.5 -21
+q-19 -4 -36 6.5t-21 30.5t6.5 37t30.5 22q20 4 36.5 -7.5t20.5 -30.5zM1136 1448q16 -27 8.5 -58.5t-35.5 -47.5q-27 -16 -57.5 -8.5t-46.5 34.5q-16 28 -8.5 59t34.5 48t58 9t47 -36zM1882 792q4 -15 -4 -27.5t-23 -16.5q-15 -3 -27.5 5.5t-15.5 22.5q-3 15 5 28t23 16
+q14 3 26.5 -5t15.5 -23zM1691 1033q15 -22 10.5 -49t-26.5 -43q-22 -15 -49 -10t-42 27t-10 49t27 43t48.5 11t41.5 -28z" />
+    <glyph glyph-name="uniF2E1" unicode="&#xf2e1;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="uniF2E2" unicode="&#xf2e2;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="uniF2E3" unicode="&#xf2e3;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="uniF2E4" unicode="&#xf2e4;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="uniF2E5" unicode="&#xf2e5;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="uniF2E6" unicode="&#xf2e6;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="uniF2E7" unicode="&#xf2e7;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="_698" unicode="&#xf2e8;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="uniF2E9" unicode="&#xf2e9;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="uniF2EA" unicode="&#xf2ea;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="uniF2EB" unicode="&#xf2eb;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="uniF2EC" unicode="&#xf2ec;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="uniF2ED" unicode="&#xf2ed;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="uniF2EE" unicode="&#xf2ee;" horiz-adv-x="1792" 
+ />
+    <glyph glyph-name="lessequal" unicode="&#xf500;" horiz-adv-x="1792" 
+ />
+  </font>
+</defs></svg>
diff --git a/assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.ttf b/assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..35acda2fa1196aad98c2adf4378a7611dd713aa3
GIT binary patch
literal 165548
zcmd4434D~*)jxjkv&@#+*JQHIB(r2Agk&ZO5W=u;0Z~v85Ce*$fTDsRbs2>!AXP+E
zv})s8XszXKwXa&S)7IKescosX*7l99R$G?_w7v?NC%^Bx&rC7|(E7f=|L^lpa-Zk9
z`?>d?d+s^so_oVMW6Z|VOlEVZPMtq{)pOIHX3~v25n48F@|3AkA5-983xDXec_W**
zHg8HX#uvihecqa7Yb`$*a~)&Wy^KjmE?joS+JOO-B;B|Y@umw`Uv<H)|NZ!E#)6MA
zsq5L5E0&$_-1gQ8#JvvJx)K2n+43aH^THolxn|wQDOVML8UCjjv-GXL^t@%#zaCt|
znB!i?ikxefZCooiNM(p`NBYnu%hs&;>s>da><dw!a^u=duUPl(Tfh1MlUDVi&h?Di
zrtn|x{ME*@&vkVCixn9Wz}TUdmzwkM0RU{~2J)JiByym5#tdu#L1u>d0W;5qQ!4Qz
zJxL+bkEIe8*8}j>Q>BETG1+ht-^o+}utRA<*p2#Ix&jHe=hB??wf3sZuV5(_`d1DH
zgI+ncCI1s*Tuw6@6DFOB@-mE3%l-{_4z<*f9!g8!<Nzo$=DrKcxk^p5OY&(bFU8Rt
z;gl~Z%A@c!YZmEp@%ixloAN1Xkv~Q0WTyM+o65?Un}fkZ@K9VHCQ73qY%pE!oBStr
zNKbWBp8Q+nrEoa<9xN}-Hi`D+(iX-WfD?e_9=JvMw)`9Klt`0iNtBfo_3CBYs2))l
z>dcoz@f1eyoO9;V<o%)zh+8Ba(h`gUPQ1~VDavPpD=br#g?M`B!{xjmZwgcJ9*oDg
zNSAx(VHIP+5SL~R=(BV4X=rQ&oQM;30S?4Tx$nU`MS99#=+ewb>5yN|*Pk0}XYPFk
z!g(%@Qka**;2iW8;b{R|Dg0FbU_E9^hd3H%a#EV5;HVvgVS_k;c*=`1YN*`2lhZm3
zqOTF2Pfz8N%lA<(eJUSDWevumUJ;M<C?`d6<WSZKIGd7Yv&l(mHUe(YpRWUPG{zzi
z!I6VSltbkXh9NEohn_Z<CtnWY2#yre+YmM)msbLu5|u%1%e}h+2ZLK~Kr_f8Jr{8Z
zM|xX+e&Sn3ctn&%`3oGiAK_MtQ}9i36vlJk<VRd<J{<MS<O<6;**C$Na|!tde9KHB
zc&Hw{+XwTcSruTbLbz}UuM#eu>ocT>zZ5W08%2JkP2szU{CP(((>LmzOmB>ZOpelu
zIw>A5mu@gGU}>QA1RKFi-$*aQL_KL1GNuOxs0@)VEz<hv`#6Vi@+){#9VR%ckHRP~
zIhy-~?+9Cy52v^IPV4VHeK3B^YV&c0X#r=7%0=5myQsXuJo&O1b5d9?JVg1aZMnKd
zeT8M8;ya#)IR}3TZx4Ov;1T@{ct#`4O?Bnc4VDjoC*q3>%g?77_AY_{e55-&2X`IC
z!*9krPH>;hA+4QUe(ZB_4Z@L!DgUN;`X-m}3;G6(Mf9flyest6ciunvokm)?oZmzF
z@?{e2C{v;^ys6AQy_IN=B99>#C*fPn3ra`%a_!FN6aIXi^rn1ymrrZ@gw3bA$$zqb
zqOxiHDSsYDDkGmZpD$nT@HfSi%fmt6l*S0Iupll)-&7{*yFioy4w3x%G<fIxL6il*
zAL;CPmlvcNOiwT)JWBNz#^=J%$itb7n^I6$h{E!IdLwNlpFaPlG`X_F2wR16YbXxk
zL^t#{>VEpx@jWf@QO?itTs?#7)d3a-Ug&FLt_)FMnmOp5gGJy@z7B*(^RVW^e1dkQ
zkMHw*dK%Ayu_({yrG6RifN!GjP=|nt${60CMrjDAK)0HZCYpnJB&8QF&0_TaoF9-S
zu?&_mPAU0&@X=Qpc>I^~UdvKIk0usk``F{`3HAbeHC$CyQPtgN@2lwR?3>fKwC|F>
zYx{2LyT9-8zVGxM?E7=y2YuRM`{9bijfXoA&pEvG@Fj<@J$%dI`wu^U__@Oe5C8e_
z2ZyyI_9GQXI*-gbvh>I$N3K0`%aQw!JbvW4BL|QC`N#+Vf_#9QLu~J`8d;ySFWi^v
zo7>mjx3(|cx3jOOZ+~B=@8!PUzP`iku=8-}aMR(`;kk#q53fC(KD_gA&*A-tGlyS3
z+<Un12s`3D5<ZeTGWSULk+nzCM|K|RIkNvq=E%!Oda1^NzYZ)JSU50mVB)~2Kfm**
z_y6>m)8@1~El#u3<TN@BPSvS6WvAr$m*XSHhmIqT!;U`3KOG-9-gms`c-Qd{$KM_A
zINo;r&GDAwO~+pye{sCw=ym+r@h8XYjz2nHbNs>as^j;LR~)}{9CG~D_9MNw(aQga
zKO~TeK}MY%7{tgG{veXj;r|am2GwFztR{2O|5v~?px`g+cB0=PQ}aFOx^-}vA95F5
zA7=4<%*Y5_FJ|j%P>qdnh_@iTs0Qv3Shg)-OV0=S+zU1vekc4cfZ>81?nWLD;PJf5
zm^TgA&zNr~$ZdkLfD=nH@)f_xSjk$*;M3uDgT;zqnj*X$`6@snD%LSpiMm2N;QAN~
z_kcBPVyrp@Qi?Q@UdCdRu{^&CvWYrt=QCD^e09&FD^N$nM_`>%e`5*`?~&bbh->n~
zJ<Qms-HbKwWUS?U#u5oQ_>(9*nTC4`EGNEOm%t%U8(?hP3%1b;hjQAV0Nc?8hxeG3
zaPKiTHp5uQTE@n~b#}l3uJMQ)kGfOHpF%kkn&43O#D#F5Fg6KwPr4VR9c4{M`YDK;
z3jZ{uoAx?m(^2k>9gNLvXKdDEjCCQ+Y~-2K00%hd9AfOW{fx~8OmhL>=?S<V#?G+9
zt!8W<(#_k$*nGsFi82@TF}4upE;2E;I0d(Zu_YaFfaM&dTUrB$I?hEI-D??Jj{M6%
z0&Aqey~o&!xo|IId3~O-3sL5UsPm#OxC~<#PsS2vg#%2h(_k@Ej9r5Kmm+@c7RD}n
zn6b-I_Z1r%TjzvB-u1}yC6seDgL{^-YY=`7(p|fivFmm-mPXk1#c(?q+dQ4IEnYa3
z|7GO;@|#eYtY+*c)Uy?^Z_6-tGxG2F8Dn2T`dbipEAs3N!6ELp`Hbzd!Xa$e7C40M
z>SyfsZaC!Gt-z(=`WU+-&Dfn0#_n3e*q()q-CYLpelpxsjC~b#-P^<1eJJmK#NGc1
zV_&<Mu^z-fFqg3h8{i&h?4fqJy^KA4K4XudoV`04`=*Jp$57T|?=ki*_`mfIV~?Y*
zZx_SuXKep;xL(HoV<X&)jD05rw+`-SjD2?@+((Q(v6e9~KI}=9`#qHPy+e%s=M!*!
zj6H>XPb2-)pD^|e^5@<6_cHeE7RC;w7<*1(><1_>^E_ievcm0P?8kubdDQj%vyA=3
z3HKCZFYIRQXH9UujQt#S{T$`}0_FTN4TrE7KVs}9q&bK>55B|Lul6(cGRpdO1Kd`|
zeq(~e`?pp&g#Y$EXw}*o`yJwccQ0eFbi*Ov?^iSS>U6j#82bal{s6dMn-2#V{#Xo$
zI$lq~{fx0cA?=^g&OdKq?7tBAUym`?3z*+P_+QpC_SX>Hn~c4gX6!Ab|67K!w~_Ac
z_ZWKz;eUUXv46n53-{h3#@>IKu@7En?4O7`qA>R1M~r=hy#Got_OTNVaQ-*)f3gq`
zWqlf9>?rCwhC2Ie;GSYEYlZ8Edx9~|1c$Hz6P6|~v_elnBK`=R&nMuzUuN8VKI0ZA
z+#be@iW#>ma1S$XYhc_CQta5uxC`H|9>(1-GVW=IdlO`OC*!^vIHdJ2gzINKkYT)d
z3*#jl84q5~c<Fq`%MLMKo`S=>0(mMGIK+jJFO2k6NLvlqs#h}}L0klN#8)z2^A6*6
zU5q!Nj7Gdit%LiB@#bE}TbkhZGoIMXcoN~QNYfU9dezGK=;@4)al-X6K6WSL9b4dD
zWqdqfOo0cRfI27sjPXfulka7G3er!7o3@tm>3GioJTpUZZ!$jX5aV4vjL$A+d`^n-
zxp1e$e?~9k^CmMsKg9T%fbFbqIHX;GIu<72kY<qrx0Uh5=fffW614f8R~cW5xbEGI
zFGF3+o@IPF;5-lc&VP*Y73&zkU?t-hzRvi{Cm6qI3F8-UWc-pXjIT{Geg(?8(#iOS
zpE14>ZMzEPZ`#55myqXbyss&PdzkU-kng%ZaGx-qUd{ORDE9`W-<*I${1)W@@_xo|
z#P?RjZA0Ge?Tp_{4)ER51-F;+Tjw*r6ZPHZW&C#J-;MVj3S2+qccSdOkoNAY8NUbR
z-HUYhnc!Y!{C<Retr+ed#(SP;{6Q<@4<#6Xcq8MFpx#H*jDH<<>@9;sxqIIma{CrC
z{*4;OzZrsik@3eKWBglt8Gju9$G0;6ZPfp5`1hya;Q!vUjQ{6qsNQ=S2c6;1ApV)%
zjDJ4@_b}tnn&43HfiA|MBZsgbpsdVv#(xMHfA~D(KUU!0Wc>La#(y%O@fT{~-ede{
zR>pr0_Y2hXOT@kS3F8L=^RH0;%c~jx_4$nd=5@w@I~NXdzuUt2E2!)DYvKACfAu5A
zUwe%4KcdXn;r@iOKr8s4QQm)bG5$uH@xLJ7o5hU3g}A?UF#a~+dV4S9??m7ZG5+_}
zjQ<05{sZ6d0><|ea8JQ~#Q6It>z^jLhZ*lv;9g|>Fxqwm@O+4TAHKu*zfkVS4R9I8
z{~NIVcQ50g0KQKVb`<_&>lp7xn*Q?{2i@S=9gJ(JgXqP;%S_@4CSmVFk{g($tYngU
z2omdDCYcd#!MC-SNwz*FIf|L&M40PMCV4uT<VAWP9QZ3K(8Q$Tb|#fXm=xT~q*8pB
zKf$Dm`EV~XDRecH!YI4yF(yU2m=s0&*mNevk+$X|Ce`j>QXRtTUT0GMZYDM0-H5Up
z-(yk}+^8)~YEHrRGpXe%CMDJ}DT(-2<Q*Mi(ir3)bBIY}t#Bx_qXzC(CXGulX*|-W
z_AqGz+A*nzNt02=RQRWN!y*5S7a8_|{&$Y81rO_la3GW5*cNt$WmnkM%QISPt<<wt
z4IN!;U`HAKaCXiBGd!fGSvfpjBX@<H{a!<LxGI)tZ3(-0ESc!!E#c-0Zg{9ZyOpPc
zu~@J_O;4W6Zmo~h1k`k(CZbNQMs$|N5;6Q?b8BOLb)eK_Dy2HGOJrcEqaGfY*Dh5x
zN{LRXr8(eIkM|~8+jwhBGjtM@S6;a2!j+Tp8gbEr?D5`Mg`BcFYueS&v7Y8R^*&$y
zob&ODOC|4T#})?2Kdo%BaHh1AWCR$}fWgSZXt$Gv$Z<5aD$enU#3ZM?H4;+%ZXdeA
zucWn4wOh1LxshKk8@m#%5pCahU%yp5cHq)W4{()NaP`2YSMvo?2?@ASPpqXAT`_*v
z)k7&RJ)j-C_4V&+`=T@&Y#?nU-As^;W3wURy9`FfXqW2IAv_+7#^NroAAQ~G>W~^`
zjDf-D4fq2U%2=tnQ*LW*>*Q@NeQ=U48Xk01IuzADy1ym0rit^WHK~^SwU449k4??k
zJX|$cO-EBU&+R{a*)XQ6t<lT5x3R5ijN#=Uww{w-I`L>~;?kuP)y%}DA(=%g4sNM$
z8a1k^e#^m%NS4_=9;HTdn_VW0>ap!zx91UcR50pxM}wo(NA}d;)_n~5mQGZt41J8L
zZE5Hkn1U{CRFZ(Oxk3tb${0}UQ~92RJG;|T-PJKt>+QV$(z%hy+)J<T?A6}N-j;St
zi%gMo&%b5T>z~xmNJS#48TFsM{-?LHd-bxvg|X{pRq&u74~nC4i>i16LEAiprfpGA
zYjeP(qECX_9cOW$*W=U1YvVDXKItrNcS$?{_zh2o=MDaGyL^>DsNJtwjW%Do^}YA3
z<vxR*f5exU`l99;{HL|G+UOai(-C;1*KH>3HS=f@249Y<c{olDhH@Ei))pN&pe^Ff
zGx#Qc75}M#tM=4jNnT#t$*<LJ=+u6%E&l0GWlJ8+=FfnVa67G1-}`75M{^jGK*#$-
zZOs)ja~eW1XKP4h*DUP+#=>h{jnme5ZRV>tcdeh+=o(;eXg_-64c@tJ&As=oIrFZ&
z*Gx&Lr>wdAF8POg_#5blBAP!&nm-O!$wspA>@;>RyOdqWZe?F%--gC9nTXZ%DnmK<
z`p0sh@aOosD-jbIo<n&)Ed2@o&q@Dz^$njmJRJ)PDt3y8!eYTJBQhuB*$-bnp<0kr
z!}n0C&npvC?o%;o445>je0ec`&&fWsK?xPdf*L)Qp(MwKKIOtB+EDn(3w-9Ns9O~i
z7MwnG8-?RZlv&XIJZUK*;)r!1@Bh4bnRO*JmgwqANa8v4EvHWvBQYYGT?tN4>BRz1
zf1&5N7@@!g89ym5LO{@=9>;Y8=^ExA9{+#aKfFGPwby8wn)db@o}%Z_x0EjQWsmb6
zA9uX(vr-n8$U~x9dhk~VKeI!h^3Z2NXu;>n6BHB%6e2u2VJ!ZykHWv-t19}tU-Yz$
zHXl2#_m7V&O!q(RtK+(Yads868*Wm*!~EzJtW!oq)kw}`iSZl@lNpanZn&u|+px84
zZrN7t&ayK4;4x_@`Q;;XMO4{VelhvW%CtX7w;>J6y=346)vfGe)zJBQ9o$eAhcOPy
zjwRa6$CvN-8qHjFi;}h1wAb{Kcnn{;+ITEi`fCUk^_(hJ&q1Z=yo*jRs<94E#yX67
zRj)s)V&gd0VVZGcLALQ|_Lp<4{XEBIF-*yma#;%V*m^xSuqeG?H-<is<Gp4jPsMvl
zy(i?PLjG33kUe?vtWz*#g>7=M0Cq%%W9`2Oe>Ov)OMv8yKrI^mZ$ql{A!!3mw_27Y
zE=V#cA@HopguAWPAMhKDb__-Z_(TN7;*A`<V!-bvnypiC;;A<s)ZWy7roDM^(*wKe
zFRBbV>XxrMefxoz4{Seu)$%$=sPf{vT@Pf_T`RlrC#CPDl$#FnvU|VBC$0(E>+3EG
z&3xsml}L_UE3bNGX6T~2dV6S%_M9{`E9kgHPa+9mas{tj$S<&{z?nRzH2b4~4m^Wc
zVF+o4`w9BO_!IohZO_=<;=$8j?7KUk(S5llK6wfy9m$GsiN5*e{q(ZS6vU4l6&{s5
zXrJJ@giK>(m%yKhRT;egW||O~pGJ&`7b8-QIchNCms)}88aL8Jh{cIp1uu`FMo!ZP
z1fne;+5#%k3SM7Kqe|`%w1JI=6hJJrog4j?5Iq!j=b=0AJS5%ev_9?eR!_H>OLzLM
z_U#QLoi=0npY1+gHmde37Kgp)+PKl=nC>pM|EJCAEPBRXQZvb74&LUs*^W<qi`ikb
zULO&OgAOE?{8Yo8e9fP&eyOZA+Pu&jv_x+)uMRl2HkY|<PdR<7%te>CT5Q%L-{O+y
zQKgd4Cek)Gjy~OLwb&xJT2>V%wrprI+4aOtWs*;<9pGE>o8u|RvPtYh;P$XlhlqF_
z77X`$AlrH?NJj1CJdEBA8;q*JG-T8nm>hL#38U9ZYO3UTNWdO3rg-pEe5d=<c84sd
zWQRT5%`;6#i}quSQNGk|?_N5wAN*7|VF*u7b<CmleU4))Puksbr~r-Zr})lR$WQcl
z0q0#&W#)RbB$@93ApKqQu3A4&eoBD$^=Kjy{W_r=@GXcAyFithN6dfGG&DTNpC!%Q
z-v&ejc41|R6RwdY4OGg}W1lMki51+cmL34l6^wCdyfmKwSEtD)+f3Q6Y?sw)Gj*CI
zi}b6|!q7)zGX2paNg*wS#A#x5c`sKue@%-?6K0wvqckD=0~43bGcBbiX+bdf;*Y5>
zw3Xi@nV)1`P%F?Y4<N_71+4WAj)%^g1&pq6EY4%lIS>s9yVPgPYT9d#3SLD{*L0U{
z;TtVh?Wb0Lp4MH{o@L6GvhJE=Y2u>{DI_hMtZgl~^3m3#ZUrkn?-5E3A!m!Z>183-
zpkovvg1$mQawcNKoQ*tW=gtZqYGqCd)D#K;$p113iB1uE#USvWT}QQ7kM7!al-C^P
zmmk!=rY+UJcJLry#vkO%<X&wMhX@z48d4#x$RV9unDpR5F^<jPm*#*xx`6FaC(DhT
z#3rNcGx$kv;@)Z~0OANH>BuM>pb)46x!{DkRYY7wGNK$v=np_sv7nfHZO_=eyqLSK
zA6ebf$Bo&P&CR_C*7^|c<!)Ox)fnUtm?B<24<QbOJc=X^B;oVC5fgtPD3vK3tC+{8
zWfZH^2?^L^<BS3Z@SM@wsdznQ9$SV+Ib*};vG+PzPL9Ah8!?Nc&}*<rjuz(Mp5ul+
z;BOvJvyc0Y#K-U$$Xht4%<w_^r0N<ZPFkc`;!&Uj1{y>A>zl^hJ7z0?xu#wFzN=D8
zxm(>@s?z1E;|!Py8HuyHM}_W5*Ff>m5U0Jhy?txD<f<*#QXUV_l-I_2Mu=7^T_+=O
zrI<wo4*<R`2iI80r~*}dE@&{M9I|wBXG|%;7p2>x{jjLGNXs}(CVxgu9Q4tPgE+Hm
z*9ll7bz80456xzta(cX+@W!t7xTWR-OgnG_>YM~t&_#5vzC`Mp5aKlXsbO7O0HKAC
z2iQF2_|0d6y4$Pu5P-bfZMRzac(Yl{IQgfa0V>u;BJRL(o0$1wD7WOWjKwP)2-6y$
zlPcRhIyDY>{PF<r;4(jy?Kp%N?>LvIr0!VoC<s-_2bN?|P6d;e4@#tzTqN;6&52j$
zL9K!Yk^iN0oK#a%RaKIGbzDIoIan!+0}vWdT67`CwzZ;fPBHD3o=~>e;c_}dp>U-X
z`pii$Ju=g+Wy~f|R7yuZZjYAv<!8-$PP~x7F<7|MfT8{I*mxeRuChzu*;<-uy$7wX
zfW)8-sv=vO6|DVW?SSA~s?O!A+`jwgdFE@wp&3S}!?MlHO>4AYJT}Ct-OfF$ZUBa>
zOiKl0HSvn=+j1=4%5yD}dAq5^vgI~n>UcXZJGkl671v`D74kC?HVsgEVUZNBihyAm
zQUE~mz%na<71JU=u_51}DT92@IPPX)0eiDweVeDWmD&fpw12L;-h=5Gq?za0HtmUJ
zH@-8qs1E38^OR8g5Q^sI0)J}rOyKu$&o1s=bpx{TURBaQ(!P7i1=oA@B4P>8wu#ek
zxZHJqz$1GoJ3_W^(*tZqZsoJlG*66B5j&D6kx@x^m6KxfD?_tCIgCRc?kD~(zmgCm
zLGhpE_YBio<-2T9r;^qM0TO{u_N5@cU&P7is8f9-5vh4~t?zMqUEV!d@P{Y)%APE6
zC@k9|i%k6)6t2uJRQQTHt`P5Lgg%h*Fr*Hst8>_$<LHwKtiL1)`Z1k}WtCHTp*zG)
zd@VPHYT9L%x%kdIFV=dq86xx&$bIH1Zqhz^D$`DQnaar#F4iXSa**JGiEagk!B1Ru
zqf}j`tAlBt6VD8mxdq~os68b*H#O_xS!$-F^!N9SyJpGFGcsDA%NdMS`o_HX^r~mB
zjWxGkcg{RpFs8EUv14}XPvuB#dUDpR^;xx~)V{7E(Xh)L3rc?r1?=S;$BgyVCF%&l
zFuy_Xs4r#_gboRee-4jmoQc^ehr?t}CM0kelFwU7%lRN{rjzh-BqK;@Rc;%?knZq4
z?ccU=h)bPzW!2>J{ZI{mNBjN$^2t?KP8*6_xXu5xx8ufMp5R?P(R-t`{n6c{!t+*z
zh;|Ek#vYp1VLf;GZf>~uUhU}a<>y*ErioacK@F{%7aq0y(Ytu@OPe;mq`jlJD+HtQ
zUhr^&Zeh93@tZASEHr)@YqdxFu69(=VFRCysjBoGqZ!U;W1gn5D$myEAmK|$NsF>Z
zoV+w>31}eE0iAN9QAY2O+;g%zc>2t#7Dq5vTvb&}E*5lHrk<o?&An%HnHnwimHSFY
zP8?Z+cWG1wcZw|v(B!8vX4BBN5o`uq^+jO9@}GlL?8!jh7Q&l=w;&D@9uU#(ln_n(
zJ72U#{LF9cuvtrE@pkXbdGls^+vBmI&9;MoL;I}_Xc{+G8XF^D+P?iukw$!q$lw0^
zz0jr|)UspMSTOD_ceFnA)I+U~a&H{iKlXcCLc4A;Vj=;>rj!I1b0=@+&c(qJcmok6
zS<GPZ0U@7op7t1v!25ZiLn#F<sK)L<i<qmv>ZAuQ496j<&@a6?K6ox1vRks+RqYD<
zT9On_zdVf}IStW^#13*WV8wHQWz$L;0cm)|JDbh|f~*LV8N$;2oL|R99**#AT1smo
zob=4dB_WB-D3}~I!ATFHzdW%WacH{qwv5Go2WzQzwRrv)ZajWMp{13T_u;Rz^V-VF
z@#62k@#FD#t@v9ye*A%@ODWm-@oM_$_3Cy1BS+(+ujzNF@8a7?`$B^{iX2A-2_nA?
zfi2=05XV^;D_2G}Up$eFW|Ofb^zuE)bWHkXR4Jm!Sz0O?)x6QD^kOuf<UNV5WGvfC
zOct<!4cuW|m8%OHs?V-X)nS122bze@LS9Yu`tzXRX#rfMv4X!6B?!~W-hTr=v<5(z
zRU#8AlYS9P>R`*v0=|sS?#*ZCvvr^VkV!zhLF3}FHf%+=#@ae1Qq<4~Y1EGYK$Ib1
zg!s~&&u27X&4Ks^(L3%}Npx!_-A)We=0v#yzv03fzxKZ8iV6KIX5U&?>^E?%iIUZ4
z2sD^vRg%kOU!B5@iV{&gBNc9vB)i{Wa@joIa2#4=oAl|-xqj_~$h33%zgk*UWGUV#
zf3>{T#2buK?AZH?)h>10N)#VHvOV}%c|wR%HF|pgm8k`*=1l5P8ttZ1Ly@=C5?d9s
z)R>B@43V`}=0??4tp?Y}Ox0$SH)yg(!|@V7H^}C-GyAXHFva04omv@`|LCuFRM2`U
zxCM>41^p9U3cR>W>`h`{m^VWSL0SNz27{ske7TN<Sg(~G0be*C4|__Qs<mm_w8%)^
z?}L4T+16fl^uMdxZKe?4t1S$ZUp2!o_GpQgr^Wg!gD!bl2b82bF%f#7a2^$D3s9)6
zb&ide8nHa*q)+0%g`~$pefr^gpmInnX<ZP7Vp->1dTpM|P6Hn!^*}+fr>rJ*+GQN{
ziKp9Zda}CgnbNv#9^^&{MChK=E|Wr}tk?tP#Q?iZ%$2k;Eo9~}^tmv?g~<gBF2E!d
z>PW^C$`N)|awe=5m{Xqd!M=ST?2~(mWjdOsXK#yVMN(qP6`q#tg+rQexf|*BeIU)a
z^WuJyPR4WVsA<ziZ9SGIqXyk(0hNQt%J-j<&BZ9m&0w6`VyIog&iYuWAU%FJMvhDo
z@BnM$s{+HX7{T~AcVgogi(AwHuBHMT&d^d)q@mg%{q7s#Uyb&}7WDr@3QTNjiCN$0
z#j}zo`K9o#TE|)CUWaG9!@$RDsV?mwab+_Pn0#iN+Ia@oI)f|9#>Tp2E{*y77*kZ9
zEB{*SRHSVGm8ThtES`9!v{E``H)^3d+TG_?{b|eytE1cy^QbPxY3KFTWh&NZi`C?O
z;777FMti@+U+IRl7B{=SCc93nKp`>jeW38muw(9T3AqySM#x@9G|p?N;IiNy(KN7?
zMz3hIS5SaXrGqD(NIR0ZMnJT%%^~}|cG(Ez!3#)*o{{QjPUIVFOQ%dccgC0*WnAJW
zL*1k^HZ5-%bN;%C&2vpW`=;dB5iu4SR48yF$;K8{S<c_w99R^X`sJ&aw1-E`?@ZqF
z($w`|+q<M;f5XMvC5{k3?ed8Y9buPZNghg=Hq1Ondc_zVzi$52i^i7Ont#z!dU3F^
zf9+DG*kP@RmW}i^tMV)LCYxDR_&mwOgJb4jGb^!R^q5d_^$T~L|FsLIlo|YDex?<M
zz8J%pkH{U!UXaI=jZ(agL{ktw+FLN9g$4;v(nuSO7+*A$#@XdRZ9-|8jc>Y`7mu6c
z@q{10W=zwHuav3wid&;5tHCUlUgeVf&>wKuUfEVuUsS%XZ2RPvr>;HI=<(RACmN-M
zR8(DJD^lePC9|rUrFgR?>hO#VkFo8}zA@jt{ERalZl$!LP4-GTT`1w}QNUcvuEFRv
z`)NyzRG!e-04~~Y1DK>70lGq9rD4J}>V(1*UxcCtBUmyi-Y8Q$NOTQ&VfJIlBRI;7
z5Dr6QNIl|8NTfO>Jf|kZVh7n>hL^)`@3r1BaPIKjxrLrjf8A>RDaI{wYlKG)6-7R~
zsZQ}Kk{T~BDVLo#Zm@cc<&x{X<~boVS5(zfvp1s3RbASf6EKpp>+IFV9s`#Yx#+I&
zMz5zL9IUgaqrnG*_=_qm|JBcwfl`bw=c=uU^R>Nm%k4_TeDj<s++>y|&K2eKwx!u8
z9&lbdJ?yJ@)>!NgE_vN8+*}$8+Uxk4EBNje>!s2_nOCtE+ie>zl!9&!!I)?QPMD&P
zm$5sb#Le|%L<#tZbz%~WWv&yUZH6NLl>OK#CBOp{e~$&fuqQd03DJfLrcWa}IvMu*
zy;z7L)WxyINd`m}Fh=l&6EWmHUGLkeP{6Vc;Xq->+AS`1T*b9>SJ#<2Cf!N<)o7Ms
z!Gj)CiteiY$f@_OT4C*IODVyil4|R)+8nCf&tw%_BEv!z3RSN|pG(k%hYGrU_Ec^&
zNRpzS-nJ*v_QHeHPu}Iub>F_}G1*vdGR~ZSdaG(JEwXM{Df;~AK)j(<_O<)u)`qw*
zQduoY)s+$7NdtxaGEAo-cGn7Z5yN#ApXWD1&-5uowpb7bR54QcA7kWG@gybdQQ<S-
zDdN%;r{I|pU-aM?e9q_pBe-?*L>a&cxCKxup2Av3_#{04Z^J#@M&a}P$M<((Zx{A8
z!Ue=%xTpWEzWzKIhsO_xc?e$$ai{S63-$76>gtB?9usV&`qp=Kn*GE5C&Tx`^uyza
zw{^ImGi-hkYkP`^0r5vgoSL$EjuxaoKBh2L;dk#~x%`TgefEDi7^(~<C<r}yHnA5!
zj8>cmE)UEw*l#i+5f-;!v^P%ZowUbhH*3Av)CifOJX7KS6#d|_83fqJ#8VL=h2KMI
z<X$qRpzLMz@O*B|3fjxC*>GYTbGm=Q=0lfc{$IDTn;IxIgLZ(Z?)#!mln$0r3A(um
zzBIGw6?zmj=H#CkvRoT+C{T=_kfQQ!%8T;loQ5;tH?lZ%M{aG+z75&bhJE`sNSO`$
z`0eget1V7SqB@uA;kQ4UkJ-235xxryG*uzwDPikrWOi1;8WASslh$U4RY{JHgggsL
zMaZ|PI2Ise8dMEpuPnW`XYJY^W$n>4PxVOPCO#DnHKfqe+Y7BA6(=QJn}un5MkM7S
zkL?&Gvnj|DI!4xt6BV*t)Zv0YV-+(%$}7QcBMZ01jlLEiPk>A3;M^g%K=cNDF6d!7
z<aM&9@bguR-(8%RuJl`s*}oX^lq!s^yr(~-b*t}2AJw`ajkG3X??#boRa)-xQ!0y}
zQvE{f?$7WZsW%yYl=nOmi~R%I4k0fIp4kYU*KwK-JLnPSlu&%jx{(IIGpy})j-Ni>
zq1_(l4SX+ekaM;bY|YgEqv2RAEE}e-Im8<@oEZ?Z81Y?3(z-@nRbq?!xD9Hyn|7Gx
z-NUw`yOor_DJLC1aqkf2(!i=2$ULNfg|s8bV^xB!_rY+bHA;KsWR@aB=!7n&LJq(}
z!pqD3Wkv<EUKw=QUZ{YeNjs!1)DE3)xa{mp%FNA)7E{?JXJ2MGou?yVULS4?IGusE
za6J!4pgDi?kcM_0y6pz@LpT57oC=&XKj#lOKV-g6pRa~b&`twzY&7d+(*cz}nmFc;
zUG6sS0f8^TDzbqAV-Ci#0Q*4v!S4HIG2})JIE}Yg-neehx^9VuT-t-Kkc%%pecy(D
z;Qzi2a%y}l3_7f%?CyY{3^<lfl!0RAl%uAbhqB#Tud-x`*1H5Ya(l{nH;QTRmNJ9o
zWPkOXUdo1jB}S(U#TX2_A;{8+*V<5uQ+f$I87N9BTf#$2%1{bKYJoGfM*x|>o-Goy
zx1edGgnc}u5V8cw&nvWyWU+wXqwinB#x7(uc>H44lXZQkk*w_q#i2O!s_A?a*?`Rx
zoZW6Qtj)L1T^4kDeD7;%G5dS816OPqAqPx~(_-<DuB$fss>jZ`bo-MR_kd&sJv{A^
zs<mvsogQ1M8mv<Ct$f8}u@yT_X8yXC2EC}uY~H5r4-`o@d)0;ATiQp>@18qv!kD;U
z5Evv$<lBB7#(Jc%96X*_<c5{DXipqiqGV{lSf@y=%UMwtHg|ADEjAhIx56>C*bD~m
z+x@>Oo>;7%QCxfp-rOkNgx4j-(o*e5`6lW^X^{qpQo~SMWD`Gxyv6)+k)c@o6j`Yd
z8c&XSiYbcmoCKe+82}>^CPM+?p@o&i(J*j0zsk}!P?!W%T5`ppk%)?&GxA`%4>0VX
zKu?YB6Z)hFtj@u-icb&t5A1}BX!;~SqG5ARpVB>FEWPLW+C+QOf~G-Jj0r`0D6|0w
zQUs5sE6PYc)!HWi))NeRvSZB3kWIW|R<H0_gGW<At4DglY{@PXl7rw}vx_Wdy?mi(
z$0>^A%RfamB2jCbVX(Fn>y%#b1W%}W%qc)XVrwuvM!>Qur!Ooy2`n@?qMe3$`F2vx
z9<=L}wP7@diWhCYTD?x)LZ>F6<rMsfn4>F?z8naL18P%1T9&P_d4p;u=(XW1LO3-<
z`{|5@&Y=}7s<hKtKn``g07m^x2L<{euW5rmHASWqkln<y;G60p+yy1Vd~}>x3t1Zs
zr9ZBmp}Yp<Mc)Mmn-+i$m0AeGjn*2BBdF_u2nszt)O{Ez!VomrO1NW@UJxJXIYe56
z(hC@vJZyP9IiY;2hPG1)J9VoU!%1sA9yL#0JHU99x=C-a^r*#L2#n~b{G2!*mf=7Q
zwzqIf9N*qy6``%-9z_FAX#r2LDe2LPf*507Fz(b?J9;sPV>HLq7lwu?CXL8<aWMNg
z?79jh7{F8S&wB>$Q65$Q29AlDCBJSxu5<ljsZ?&yzAt$^o=0gUg23{>;p0({^4skD
z+4se#9)xg8qnEh|WnPdgQ&+te7@`9WlzAwMit$Julp+d80n+VM1JxwqS5H6*MPKA`
zlJ*Z77B;K~;4JkO5eq(@D}tezez*w6g3ZSn?J1d9Z~&MKbf=b6F9;8H22TxRl%y1r
z<-6(lJiLAw>r^-=F-AIEd1y|Aq2MggNo&>7<AhoY=YGA|J57w_WG(=uW_6WAD9gb5
zkllb$JpC=Oq9dIg7R5r|P`SqQ<dYuHB2Q_MK7ytAJTZiC9@ZoL{?AIDD}Wz7W#0sZ
zofkn1HXLlFfEDzB*m2m)4H;LeihD7}U0eAVJQu^P`eK4ns&w}cgGjC_a|3kkqQ9Uu
z?lK56cLJFz-7|;5K>Ln)S~iAF1;-4`A*9KlL*vleLO3vhEd(@RsIWp~O@>N4p91SI
zb~+*jP?8B~MwmI0W$>ksF8DC*2y8K0o#te?D$z8nrfK{|B1L^TR5hlugr|o=-;>Yn
zmL6Yt=NZ2%cAsysPA)D^gkz2Vvh|Z9RJdoH$L$+6a^|>UO=3fBBH0UidA&_JQz9K~
zuo1Z_(cB7CiQ}4loOL3DsdC<+wYysw@&UMl21+LY-(z=6j8fu5%ZQg-z6Bor^M}LX
z9hxH}aVC%rodtoGcTh)zEd=yDfCu5mE)qIjw~K+zwn&5c!L-N+E=kwxVE<t-E%KoZ
z<y&iLhOY@duv$!~)enS*2k<Lm!CRy6J|N;BcsF`0Wf&G9=@jB5xd)5m4ImV!$et^Y
z=;6?K5$zg_9uNnA#Dfn1K!>ewN#vvx2WGCf^;C9<Gj>^mmTlYc*kz$NUdQ=gDzLmf
z!LXG7{N$Mi3n}?5L&f9TlCzzrgGR*6>MhWBR=lS)qP$&OMAQ2<kLLosVT*|81)fcx
z1+w&8<iP=6ky2!#yku<s8D`Xjeg0*f26T&a!7wAh4DXawVOI&H0$tS4$mGs-tDyy1
z`?j7-f4=Li{u1fKn;wA}t%hLg^jDmT`70Scfh4r^@|UE|58Rk_oV{SzFQ1i;EZ)_>
z`$23{zM%a@9EPdjV|Y1zVVGf?mINO)i-q6;_Ev|n_JQ^Zy&BnUgV>NbY9xba1DlY@
zrg$_Kn?+^_+4V4^xS94tX2oLKAEiuU0<2S#v$WSDt0P^A+d-+M?XlR**u_Xdre&aY
zNi~zJk9aLQUqaFZxCNRmu*wnxB_u*M6V0xVCtBhtpGUK)#Dob6DWm-n^~Vy)m~?Yg
zO0^<MG&&0v@aU{0YUeT3jttrL)l^>+v~`x6Vqtjl4I5;=^o2jyOb~m+ER;lNwO$iN
ziH4vk>E`OTRx~v#B|ifef|ceH)%hgqOy|#f=Q|VlN6i{!0CRndN~x8wS6Ppqq7NSH
zO5hX{k5T{4ib@&8t)u=V9nY+2RC^75jU%TRix}FDTB%>t;5jpNRv;(KB|%{AI7Jc=
zd%t9-AjNUAs?8m40SLOhrjbC_yZoznU$(rnT2);Rr`2e6$k!zwlz!d|sZ3%x@$Nw?
zVn?i%t!J+9S<yDxP;GX2UFING%JN5ldLzG`I1!{O<N*T20}&)36oWiJP)STb(%fR)
z^L!VP7mPfVZXa5-Cw8K;oHguD-UZ5Wxf}o}JGCe1+hXBel!A<K`TIeUe$XhF(j)l{
zVT(%{kUl6fAPK+$ziJ!!iu$2?1+-qoqn!edQ^74P`A!1JDd3h;Cj~^h{iI+Md>F@^
zO&TGun2&?VIygfH5ePk|!e&G3Zm-GUP(imiWzZu$9JU)Wot`}*RHV<<B{3C7B0`1|
zb>-)vUhc6J6{w&PQIaSZ_N<(d>`C$yo#Ly&0Sr5gCkDY(4f@fY5!fLe57sH54#FF4
zg&hda`KjtJ8cTzz;DwFa#{$!}j~g$9zqFBC@To^}i#`b~xhU;p{x{^f1krbEFNqV^
zEq5c!C5XT0o_q{%p&0F@!I;9ejbs#P4q?R!i$?vl3~|GSyq4@q#3=wgsz+zkrIB<<
z=HMWEBz?z??GvvT54YsDSnRLcEf!n>^0eKf4(CIT{qs4y$7_4e=JoIkq%~H9$z-r*
zZ?`xgwL+DNAJE<u&KUS1Ezcw_$pu?O>`VB;S+w#NvBT{3;}{CD&@Ig*Ka2Acx)2Qx
zL)V#$n@%vf1Zzms4Th~fS|(DKDT`?BKfX3tkCBvKZLg^hUh|_Gz8?%#d(ANnY`5U1
zo;qjq=5tn!OQ*-JqA&iG-Tg#6Ka|O64eceRrSgggD%<C_<FE1olnRcjTgNn5M5OHQ
z&ChI}{m3J;@p6;=pWDOmu{ro8z!hi((IT*}WPJvM6IkXOn63i^qh*JA3M?7G0qW;I
zX>%QBX$t=6?hPEK2|lL1{?|>I^Toc>rQU7a_`RSM^EPVl{_&OG-P;|z0?v{3o#pkl
zC6Y;&J7;#5N#+H2J-4RqiSK^rj<_Z6t%?`N$A_FUESt{TcayIew5oWi=jxT*aPIP6
z?MG`?k5p%-x>D73irru{R?lu7<54DCT9Q}%=4%@wZij4+M=fzzz`SJ3I%*#AikLUh
zn>k=5%IKUP4TrvZ!A{&Oh;BR}6r3t3cpzS(&|cEe&e{MQby|1#X`?17e9?|=i`sPG
zL|OOsh`j@PD4sc6&Y3rT`r?-EH0QPR*IobE@_fkB8*(886ZkjkcO{K8Sz$H`^D-8P
zjKG9G9A`O!>|!ivAeteRVIcyIGa#O<6I$^O7}9&*8mHd@Gw!WDU*@;*L;SYvlV#p(
zzFSsPw&^UdyxO}%i)W8$@f}|84*mz&i2q@SlzMOd%B!BHOJ<(FYUTR(Ui$DuX>?85
zcdzl5m3hzFr2S@c_20C2x&N)|$<=RhzxI!}NN+yS16X^(_mtqY)g*Q%Fux5}bP3q$
zxQD|TB{+4C1gL>zI>g~-ajKMb{2s_cFhN2(I(q^X!$H(GFxpc6oCV9#maj|OhFZaI
z;umX6E*fQVTQ@lyZauuv>%E)5z-?zQZne18V5A}}JEQmCz>7^h<Bd<fQ(OP%nTPmA
zS6%V-@#lVf^v}OCKC_D2scF(BL(TlBQ96*dK6|!vDvF&o;ni)GU6t>0r)!zhinBG6
zMQghGt!Do5h%HmAQl~%m+!pr-&wlrcwW;qw)S$6*f}ZvXd<qjrVb%W}nk2)_bI{5Y
zG!_yC8`{(bRk9VmUS!KrC7aBuqpq=4M_JWaSF~DYu8yf44}dUv?DXJU_%E%-q9UVR
zYqQvF^8Tag@#D*@s>;cHw=xm|y~mHbT3yX>?hoYKfy--h<AH4|v7u4V$?TsF1POK#
z2l~Z#K*f|-yBktn5A>+6w9%@_4ukf0Et^zr-DbPwFdyj0VJHi}4bqRetSNR`DoWd(
z(%n5>8MQl+>3SeL-DB@IaM{NDwd{{v_HMIO)PKO}v{{##c@ihB0w$aaPTSP4^>n3Z
zC8Il%(3dCLLX$-|SwWx1u7KVztXpzNhrOZQ78c$jd{B9lqsNHLr*9h;N9$i+vsrM1
zKzLB_gVdMCfxceejpIZat!MbR)GNZ%^n|fEQo?Xtq#Qa_gEWKTFxSL4b{g}<g5!pg
zqjYvXf#WmS590a@AtEIYrKmWbO7RfxSqt%u{zj-2;vw3t)Ozvk|CUGsKto6|7(DwJ
zqoP$jyJ=6RTYq*jeSO7zR(m1Ew81tMmn9k-6|A8-@s}tK@%iv#C$P~FZ*8kkTBv7;
z8+H#yhOrc23fr;54Q3_NHJB(5rk3vMnC-7<X_?i~ODk9JQPqI6e6*h(y10E&qN{mg
zVod4SToO7Foj>kJNd{QcoQ}HUP-A)Rq;U(***IA*V_0B5mr}Xp$q{YSYs-b2q~DHh
z?+muRGn~std!VXuT>P9TL_8Km9G{do<P%hMjBo5*GjY+zxo5S6Mdsr|^yKI_%q!Y|
z0XZbr6buPibb|^S7K<litua~z)i$~wp_60LRE(@oJO87pvtH1Sj+)>qRb-W0B&%d>
z^3@hs6y5jaEq%P}dmr(8<wosc?GN8HeS4DK1fxZ+I2DI%mrTh(d*k$)v$^5U8{U6x
z#W(eF!%R`r(0sLsle|8!;EM7q88jUgGH&h4`-Qy)R=WH?{fXNApJ)$g)3pbF0`?qg
zhmjp;G}bkq(J@l@(gj3xY+Luy<wQe1DU<%W_S}<C@`*neDS)*xzoPg_5JC>=f}x~^
z*{I{tkBgYk@Td|Z{csd23pziZlPYt2RJW7D_C#&)OONEWyN`I19_cM;`Aa=y_)ldH
z^co(O-xWIN0{y|@?wx@Y!MeVg3Ln%4ORu5~Dl6$h>AGSXrK3!pH%cpM?D|6#*6+A#
zlsj;J0_~^?DHIceRC~0iMq)SJ&?R&if{fsdIb>y;H@M4AE`z8~dvz)(e}BqUWK^U~
zFy`PX+z*Bmv9VxAN;%CvMk(#kGBEMP;a-GgGZf~r$(ei(%yGqHa2dS3hxdTT!r>La
zUrW2dCTZ!SjD_D(?9$SK02e_#ZOxdAhO%hgVhq54U=2$Hm+1^O^nH<>wS|&<)2TtD
zN_MN@O>?A@_&l;U)*GY*5F_a~cgQb_3p`#77ax1iRxIx!r0HkDnA2G*{l|*}g_yI%
zZdHt2`Hx^MA#VH7@BEN68Y_;<n>sAcCNgCY7S&dcQsp*$+uW7Dm@$Vl7!YA^51bi}
z*Vy8uTj{neIhI<oWy=zdr_{4#i`<hHemO&-p)DvOH>L|PhditfC1Jeub(uy}w|wV5
zsQz)04y;BY2$7U4$~P{k)b`hZb>gv1RkD)L#g~$*N^1N1GfNMS)4r|pT*V<&KE1M9
zTh}rzSW#Kcci_#(^qf0gTW3&QN&zsW%VAQ+AZ%-3?E)kMdgL)kY~@mC>l?RH28u;Y
zt-@_u^5(W>mDdt<VOYVgE#|A(uSEv@fOheek;xg_<rDOsNOl;gd)!Vja8=hch<)Lc
z7C5x)TTnfC{Ty&89Y{5hHW8hoHQfdd*GFRp`xtUQY*_1G@JVU(0G!G`VL(RRLkFlN
z{KC?h9ZQ4a9Zk#WEDGc4V`(K#V+h=(@|#!+B^!*`vNb|*0ka$cyGgGYw7@VL2ZaV-
zNiT>qoe){#t;3NA7c@<nTry$GxFrj|q+b7*)5;f*OrAfZ+;0o|R!v@aTd;Wd<7=Pa
zv0@Zt<2sl-2)ia3b{+ElCFYvhG26s1EhzUG*DY&qzkD1ok!G#8o0Rcq@I~^{X&b(}
zZ@$|+f=ffW_Mv|;7CHE_1<Uh0i>{WoY9bYFNoq+sj&ru;Z`x>4ddY0y*`HRtHFEN%
z@mFkp=x0C6zDGgA0s|mP^WNEwE4O}S?%DOtce3At%?ThxRp@`zCH6MyzM)dA9C7IP
zI}t;YUV(Jcnw$4LoD4H(EM#!{L-Z|&fhNYnBlKcQ$UScR#HH>scYBTf2u|7Fd8q$R
zy5Cbt=Pvf^e}m4?VVL@#Pi3z*q-Q0MG8pGTcbS|eeW%R5bRzKsHSH#G<xBsM(j4bg
z-=NG2#y@lA_H_D~$e_|wjQMoK?HF?(ofQZ4Vzj9Zx`0FjEN<3>(#$9hj9}0O7lXsC
zbZ7#UjJM^FcvdKK3MOEl+Pb-93Px}F$ID&jcvZdJ{d(D)x|*`=vi%1hdg(dd-1E>&
zoB4U&a${9!xyxoT%$<MsXn8+O$mZ77dXQPXHRf6#s%oUnHFa~!q_1s$>7gFp{M<_q
z9oVnk*Dcp$k#jA#7-pZbXd=L8nDhe<*t_*%gj^Vx>(~KyEY~i&(?@R~L_e^txnUyh
z64-dU=Lc;eQ}vPX;g{GitTVZben7||wttapene^dB|oSGB~tmAGqE^`1Jxt$4uXUL
zz5?7GEqvmLa{#mgN6la^gY<w3YLNeVW;rdeNWK%R0!+U2r<S&xzgpz0YBw4K8$3mp
zE21?;R%76qA~z3I)m~||6<Kx~EuGGQb&th9nAE?Kl2+9hCN)_pskOrqC_+*xeTUWE
zqHK~(U3Rb6Ywt2io0Jx}^^QAit`<e<Y|lls)EbnHN{h>O#}`eXyUJ)lFyTO8*iL~P
z$A`A_X^V#!SJyU8Dl%J*6&s9;Jl54CiyfA`ExxmjrZ1P8E%rJ7hFCFo6%{5mRa|LY
z<hHMFEJ$i9a(4NfssfTL+q=W*C@s0HM3JX0^+}R%=`>k^x76W8M0tQBa1Q(&L`|!e
zrczv>+#&b<PjV6d3K}eU;V9%YaKm(oM4Zr(@CHXFAW14hML_r4VqzLAlt6`n@RklP
z#|_mXnz0e!Du^;&6ZEY1{U4mQ=<0hS&2o_k$4F#Jm0_q5ahCfmSKsn1pTe)@Q>2bt
zuD1Bfoe>oW0&!ju$-LI)$URptI!inJ^Dz|<@S1hk+!(n2PWfi-AMb5*F03&_^29MB
zgJP7yn#Fw4n&Rod*>LlF+qPx5ZT$80;+m*0X5ffa3<jfYcXFe-W}$P7vS|L2z8h!H
zn)b>d-;F72#5un;L$}RfmR5&xbOf(KNeD|gT1x6bw5t;~j}(oMHcSzkCgcpbd>5UN
z7e8CV*di9kpy<pA5`bF4mH@m^LV0vfv)0p{>JAo1YyE9XtfV1Q8^?ViwrKgtK$H60
z%~xgAifVV#>j>4SN10>bP9OV9<ecvBe`%dx>m`EA-H{bzMimEQ_3@VZH%@KZzjDu`
zRCG*Ax6B^%%dyLs2Cw{bePFWM97<M4+}X6j=rFmY8D9@pIA_cZHBTuS=i*BuXU_~r
zW>50@SIoZoff4mJvyxIeIjeZ{tYpbmTk4_{wy!_uygk4J;wwSiK&OpZWguG$O082g
z^a3rw)F1Q!*)rNy!Sqz9bk0u-kftk^q{FPl4N+eS@<V2$_#KjDfHky}YxE6v>0p1=
zhaBFdyShSMz97B%x3GE|Sst~8Le6+?q@g6HwE1hJ#X)o^?{1!x-m`LlQ+4%?^IPIo
zHATgqrm-s`+6SW3LjHB>=Pp{i<6FE#j+sX(Vl-kJt6sug<4UG9SH_|<oE5<{&zK>(
zOb(+Vn|4R4lc8pHa-japR|c0ZAN$KOvzss6bKW^uPM$I$8eTr{EMN2N%{Yrl{Z`Y^
zaQ`-S_6omm((Fih26~Bjf^W$wm1J`8N+(=0ET@KFDy;S%{mF@!2&1UMxk>jTk49;@
z*g#0?*iga;P7abx1bh^d3MoAy*XQp{Hl*t(buU@DamDmvcc;5}`ihM!mvm36|GqRu
zn*3}UmnOSUai6mM*y&f#XmqyBo>b=dmra`8;%uC8_33-RpM6;x`Rrc0RM~y9>y~ry
zVnGanZLDD_lC%6!F%Jzk##j%?nW>JEaJ#U89t`?mGJS_kO5+5U1Gh;Lb3`{w<-DW;
z;USPAm%*aQJ)UeYnLVb2V3MJ2vrxAZ@&#?W$vW)7$+L7~7HSzuF&0V95FC4H6Dy<(
z!#o7mJKLMHTNn5)Lyn5l4oh2$s~VI~tlIjn09jE~8C#Ooei=J?K;D+-<8Cb>8RPx8
z-~O0ST{mOeXg+qjG~?}E8@JAo-j?OJjgF3nb^K5v>$yq#-Ybd8lM^jdru2WE-*V6W
z>sL(7?%-Qu?&?wZNmmqdn?$FXlE!>2BAa^bWfD69lP0?L3kopYkc4>{m#H6t2d<oO
zM-rb4RHzpm9{wcAncBP-$z|oGYL~V;7`yL0TF=DQi;45@lX^I`Bry3%;i)|iLA2cJ
zD&=p*f?xWH#B@1NV?V)Q10EuyprvuT-(Wa1PPQ5t`ay%_ybUO&1G_V*CdltU4p|^e
z0stB?-MU)8M=g!9-Je~j??XyE_G1Xia8c^kF+>LIEE47|jcI$tEuWzwjmRgqBPkzk
zM+(?6)=);W6q<2z95fHMDFKxbhPD-r0IjdX_3EH*BFL|t3<dcW`!>))c7d~8v;<l`
z9cOc4;PkP*doonyEp+5!5ObxBj=3fstp#093;Edqi3}76dI?B>{wU5p8nHUz9I?>l
zVfn$bENo_I3JOh<pvs`XjXA{<Axd5<=D(OZzz!%s9$+)Sav(kLD=%GEmyDH<n>1^^
z+un~MSwCyixbj%C?y{G@G7mSZg_cf~&@djVX_vn8;IF&q?ESd=*AJHOJ(!-hbKPlb
zYi-r+me!ezr_eCiQ&SetY;BocRokkbwr=ONG<Ls)CKFqlbRTn0h9dn%08(unJL%2r
zdUhMy)*6q|wFvsNtu>zW2U@X=AUvS^E9eM^w~aztd4h$Q&kF;6EJ1O*M7tJfFi}R1
z6X@asDjL5w+#QEKQE<MUI6g|txm~6wNm96XWpM0snga=U?c*@C(Hv00gBVrANXdvx
z>5V48#ASm?H7u5j%nDqi)iO@<OOjW*K|ky8{5@_LH+T{a^`=0Tq!!6Vc7wal>a1@F
z*^R+bGpEOs#pRx9CBZQ}#uQa|dCH5EW%a3Xv1;ye-}5|Yh4g~YH5gI1(b#B|6_ZI;
zMkxwTjmkKoZIp~AqhXp+k&SSQ)9C=jCWTKCM?(&MUHex;c3Knl(A%3UgJT_BEixIE
zQh!;Q(J<0)C`q0-^|UdaGYzFqr^{vZR~Tk?jyY}gf@H+0RHkZ{OID|x;6>6+g)|BK
zs6zLY0U>bcbRd6kU;cgkomCZdBSC8$a1H`pcu;XqH=5<F+D~<Z-#2~djpJ<Gc|QJ4
zafx3Y8ElfZ<^ZG1&3Fb^`teMqzPjsAXz8)fn!7rC`gCl=cGu)r3S4c*Gq4a$RR9I`
zbygh!Z5_qV1J=<UxX}I*0+Cz_Mi`r=u*<^PZD0p*gr*iS3Qw#7?l#<~E5s~4t;h%>
z+$oO3i&T_WpcYnVu*lchi>wxt#iE!!bG#kzjIF<LQv0?E-PesO@fZ7xmz9iuWAu|3
zUjMrd=^g!Fz4{lU|I&`I87urHks0Z;=G^n6O&xEK@pO4lpNSRFihC!e7aDFZttcB2
z3@r9X-Q3(1DE7CGn(_C4USHEw8(7d#?yroD_&xXD{D}7bV{HxP<(JMVUKpr(p!U+=
z9sJ&evE$}6Sys%)<pH*0b4aPV4;?_ABJMbVL;$*lmZKAN<_+7HxW54NhyI}iov<Kw
zuLAu-eIuHO(?9yvSv27=w*oMg@D}-2EL~EX7+*QpynOa`+6SjKRm&AcZevS(bIF2I
zyU|@;6bm`za{K5>qb)`s?|OclRAnzUyW5*Py!P@srDXI}&s2lVYf2ZCG`F`H-9;60
zb<=6weckNk=DC&Q6QxU*uJ9FkaT>}qb##eRS8n%qG`G9WrS>Xm+w)!AXSASfd%5fg
z#fqxk(5L9@fM};~Gk^Sgb;7|krF-an$kIROPt4HLqq6+EL+62d@~4Hsy9nIU?=Ue4
zJ69;q+5+73nU|TQu}$>#v(M&Vx1RD=6Lu`d?>zHN?P7J&XWwsvwJt|rr?CZu+l>m4
zTi^VLh6Uu2s392u(5DLaM%)Dr$%h3hRB>V7a9XG`B{ZsWgh4IyTO9R~TAR^h^~>ko
z(k|Hy#@bP}7OyN92TKE%qNZfyWL32p-BJf1{jj0QU0V`yj=tRospvSewxGxoC=C|N
zve$zAMuSaiyY)QTk9!VmwUK&<#b2fxMl_DX|5x$dKH3>6sdYCQ9@c)^A-Rn<Rh`_J
zlt&lRB~G?jhWS|EX+K`5L9k`6=#nb!W7EW?%ai>9vG?s)0)lCR76kgoR>S;B=kl(v
zzM}o+G41dh)%9=ezv$7*a9Mrb+S@13nK-B6D!%vy(}5dzbg$`-UUZJKa`_Z{*$rCu
zga2G}o3dTHW|>+P_>c8UOm4Vk-ojaTeAg0-+<4#u-{>pGTYz(%ojZ`0e*nHo=)XZS
zpp=$zi4|RBMGJDX{Db?>>fq71rX3t$122E;cJ(9elj+kBXs>3?(tq=s*PeL^<(M$8
zUl;u9e6|EP5Us-A>Lzvr+ln|?*}wt;+gUmd>%?@Wl@m%Qm{>Q0JqTcxtB`ROhd6TB
z$VY<7t$^N6IC(s*<w33DF&yc0dj^+WeG%4|-2BQb-dJ|q62>Z@x2?Gi%eB8%(hYaC
zKfY5M<cZOXmrbZWEjps?;&|+w7tV1eFE1MrJ*_siZ1L#0#n&`(LclZD>-9MeR-@5h
zZ?V`qr%%FlPQlW5v_Bp^Q?^)S*<!9Xnk@#nh}mp1o88SOEB+m*%{oDLLdJDWayebj
zF_P1%goGu~ua9Y$&Q^=v^6lf6jW86qp0@eS4GR`uX09nN4hD-tBg~gAUa;ZJ8|Jna
z8zPe|mipRIjUt=vcHH^U9tgxn+Hm(pY=z=3R%i3uj{TZ1>%Y#Z$|{!Lpju=$s702T
z(P}foXu(uuHN!cJRK*W-8=F*QlYB*zT#WI-SmQ_VYEgKw+>wHhm`ECQS`r3VKw`wi
zxlcnn26L<!RA|D|NB?I8;L63FJ8~v}K7sD;$+XuL+<N#lUCD#$fb`H4r?HkfVB<kr
z;(F9QtS+CxIxw-24Zzi6CHA+pfsJf|GxQQ~rvIxEo5uj_8Jp)*Ji9qdbCkPu;?S{L
z1o!sZJjbvRCUxVYC=aekOVe%v0YWg)|4SMNPhKaD1BlcIKrK)np@qZ^L7+8mbudO^
zk)b#%tQ_22KM*Xfl|1h9n@S>*U;F-BC9u{Csy#e%+2uD$He5?mc55)ot>1w`?lr$J
zsrI^qGB@!5dglADaHlvWto@|S>kF5>#i#hCNXbp*ZkO$*%P-Sjf3Vc+tuFaJ-^|Ou
zW8=}1TOlafUitnrTA2D0<3}&zZz^%y5+t2`Tk`vBI93FqU`W!zY;M%AUoN1V1-I2I
zPTVFqaw3Pr-`5HcEFWuD?!8Ybw)Y>g7c0tt=soTHiEBxlY;RlQ`iYY-qdd94zWjyD
zFcskM^S{_!E?f3mEh9waR7tb6G&yl%GW%e&Sc5i;y@N)U5ZFLcAsma^K?Cg^%d{PO
z=SHQq4a|<d>l`AakzEY;A{n6Rn1u`7v~#ufV<svwufaWPWUTy=#~N`~t5mkQHi<fW
z`FA<Y1Jl}-+ID`GoTfY9u${~ohdoPI#lsU?#@1GhX)dh`T;Fl!{L5OGP6ViAJJBDJ
zpV59(s~y2U9&jfGy;BDCu?YA(0fISrdk`{^7k>*6GZ$`Ef)d2%6apsU6^>QJl0@U&
zq|wIBlBAgf0j!YaozAgmhAy0uy;AjRA2%(!`<c5JH7OZ1B!vm4rC_yi#=>#&e>`V`
zg`MfSf5gWvJY#?8%&|`Aj0<@aZ;-q#tCx=-zkGE|_C4)TqKjr-SE6po?cX?Z^B%62
zdA!75;$my<*q)n@eB<^dfFGwRaWB25UL#~PNEV>F^c+e2Be*Df(-rIVB<p_t*#`AH
zc;HqtB-Eb)2q$!amvSS&+P%HPVy$^LX{{`;eWuA$Yc*DSZ@Q_huGZ4@Ol^6kHTi6f
z)l#v2SgP9cn{FzvJwA<;9+pk=Q?{bop~CCRjxV~_Vy(RS=87WAacOi}RN$2n`jVBy
z^{K+DkdDvjzq*1DbPuc1pgxtv0iuigUWFeWRH#nH1!2Tz!W@wXmBa>Jo2o*an$1*1
zD$bsU<F&S$>C-BvObdmkKlhW<59G9{d=@bAu8a05VWCO=@_~oP=G3SmO91AK_F`#5
zwXLRV<oMV%5Bd3(h00X#=;XZmN#kyA@TE>ay<~JYok|rdQM-~C?dcq?Yfz_*)fIte
zkE_g4CeLj1oza=9zH!s!4k%H@-n{6aB&Z;Cs8MK?#Jxl`?wD>^{fTL&eQHAQFtJ_%
zNEfs|gGYh+39S{-@#MrPA!XpgWD;NLlne0-Vey1n0<q$-*MVI^cPLanp`)hUq)e}|
z7juu>?=ww18{L)7G|$1kjI(sjs<Lds{1=|%D}}i9=&YpHJNDt{uDfMF=i}tCvhSk1
z_N?Sr`X9O`HhyGPjjeiuRBSKx6$dOll$@28(#6enVY7OA$`8RH91Dz_R6j2{+B+L&
zz(TPanmNN+96IxiR7w}e=-SNWtg%zRx<l={!0#K~x#yw__jF9&bYpd@^9*0xOd0*>
z@|a<tA^Ht;SLo>lUMcx*04*>=BWHv_W-t=rCAy0q6&*<vg?_<Mk?9T;qojT!H54tn
zjcQJE0gFXPL4i}{Ab#X)g(-*L3C9g{qGk3lO!z;%y$4`h<+(qs_YCcQv@Cf@mL)k}
zNxbC5j-$lRUd~QPNKAGdMiK}KWFR1{Kp_MOlodm1fl>;kW&ImkwWTe$lzHJRZJ{-{
zl-mK6+j}V`wobm^^B&2Tl?1r=yWbz;v-F<#y!(CT?-4K(($wWtmD6<j=8=JM78lKn
z9fjlZOoMjWml&PHLwQvDG((TE9g7Z#cWwm0Wj{3E?2<NugeKbCX_Ln>31MN9?trDG
zMI7;9U7|UsC;urLP%eH1h%U`LJxT3oM4=gpi%X@lpVR9N6Q(uhJ00RWXeL-Z*V(O8
zsIyyVUvf=RXLBKX`!peifjIMvMs1YT0n$0*B;K^yZf&HN8$N%e=EgOejqihLPBT|<
zs)z`nNU}BOdT7wYLy}R10eXUksn9o)jG<NYa|-+p5j)^0ybo8gK3wABIrb0o2pu+4
z2ecT>)&=qteGc|XNI~h5R6UBfaPeIHbA32@*>orZsCB4`Q79}A<ha)q;YIYpFEUx^
zaVX0?Z>=z@najfekt-_eTg7a}Mcas^D1ELl<oB8@C{n9M4tgW}W3F5YY*Z*0FBmn}
zuvaY)&M>N6(y28c{ur|tmueFvIDOQxXs1)_lKrA`L2-^^VNC#miFvO%l6w5uK2b<E
zsxRS3%DZ8>Fyu?hyNLCjTCNRRVW^i+GX``giwc&TpV~OHu(yN&o)r2$K$1kjh@>iP
z^&`?sCk#?xdFX+ilAb(;I7<$BQ#6j*jKsu%LEhQKe=>ki^ZICepr3#_2#pE`32i4Z
zu%eXsgL)3x3Q-^OPPRhm<^!TEPoek6?O^j+qLQ*~#TBw4Aq~M2>U{>{jfojVPADAi
zurKpW{7Ii5yqy6_1iXw3$aa!GLn|$~cnvQnv7{LMIFn!&d6K=3kH8+e90<Z&?075z
z1r_Q*zeWit1|lMnj<hnhBCDkKn;(q04?fKL1js!s(I_kx2CW46P*4v*nxWEAq3IV|
z?)g*Z<FSyUK9noj98da^{Nq^lsGOZJmS)W@c!8P+C2C9pGBDaoui|U`)Jkd{ECFad
zh?~(ybdHOyBsRbubpmi70eu6@qz1_S&<k-Sup<;JGoU0?7nBT`kocElgoj7E*ey8p
zf()Iv(;lyM34RDlM8Rrdde~%}%>Zq5K%6YfdLv}ZdQmTk7SZ7}>rJ9TW)6>NY{uEZ
zY^9PI1UqUFm|h0Vqe60Ny<Ali(d!LXQ2?Ng)gVS4vQ09X71=JDtR_jaI*exKavGUQ
zhUmD|tb`09Ac$JbHUUQ9HZ#5`%SO=<HcJ7QEJ;j+QFy~R_!~KeN~3Jo8&DyGAUW(t
zr~b%F17HlnnCn@sBEUx631K*7(@YRuHd_QGcU$pEqu_^TpNS<vW0mwm&>=wCFBtKb
zXtqOa3M?2OEN=zDX7z}2$Y{2@WJjr?N`au<Ajm-(2?4uW;f9P`kW2z#jy;0xlSLca
zNnj?uV1bZ`k;=c)0NgMb6Ig+iiNd29nW0wiFvx-&5KCkcHIvN(gx*HrH!|ihz@N?T
zlDvqb%h22=_(sVltI;4=hz3EFe1c09-8QpRw3<Yh;PAPgd--Nj5#6vcFgZoRELrph
z>MDVG9kSH~FjfJRNfsR@yJQp4cQ8zaFkT4>5XQqSVt5c}`-A#Z=3-_mGZ^)Hqayei
zhJ}wgZ5UDln%)!;Wz@u=m(6C_P@r9*IMPe7Db`CSqad3ky-5-EcG=*v8J&{RtLJ(E
zw2h-ghGYcDtqj4Z^nU7ChgEXO0kox=oGaY;0EPqeW89T6htbZg4z!uU1hi;omVj+3
z0B%$+k$`oH5*SeoG`Ay&BAA%nAUjQxsMlNdq8%;SbEAPVC#qm!r7j75W=A)&a6)3%
zdQq$fCN;@RqI!KPf<D>l9l=vmBFSFpD1cAxb@~K-$ZIlIL3W}?#3+|2p{|vZVq`YA
zMbx|Xl57kJVwoetAo+opiewCkCIO=uBLEaG+!0U$MRdReNsx>+PIJWN6dW)pfeZ(u
zQ8ei-Ht69)ZV`qv=vmorhOkF)Squ;)8AUfh<7A_xI8FGHMRW>~%o`1Wt3|8IMrM%&
z8)|@=#ssro9=f9HtN0F#O085{Bf6PJnurfzS_yg?qqszmnQIYDP{N=xqPfvl;VN<X
zBtysuidNKlPkQwSxNO8ro{)JGpCejxE8`^OaIj}3iwQu?gHDAbCxVheQH5)!kygSt
zv&+awwGSrR4<~LH-u93E>sK^qpoy2&App~Fe<a_!*W_?%#5a2n$z$h|7pw5_y4%?e
ziLR?3)Pzcra!aM<;el=9su_?-646cK4wO&x;|PILf>(MB7KCI)$p1!&YEB&%$9gTk
zmvlt?t7!>_paNt_fYJvw^~LCqX{4opLy!n)md7}<_s?`gytfSAdoScQWTy&Tbr&~(
zg9myGVv)l|4-umFBL0)Y(d}Rvt11)(O4ij#zeao~K$vh~JDn0_@3RjP2M0|79T&9+
z?>Vx&M30Sb15&<{RtpeYUf|n7n5GHyc+-FtA=7H$p6Mh=&M0O!so)tze7#WT>pp|x
zfWae>0++DfscU2%>|@oiCQj+6O827)1}KsN^a><x=wCzi9Fge*mxaUxIYx)13FH|B
zMp5H>NSI*4?#ylfG-{q?3MMXX$dUH^S6Ni=Ve1d0(janpz@WqGJ?cG&sewpq294Qa
zL{huwuoARdt5F4Dbh#?<2ruzSS{VeDAOtY+52t^xJW=!(0f3P&G3Cs^%~Q~~Wq{YA
z!QrEk#>oXK{sc&Z7VB1_>fA1^#YyU1Ff<^9G(!V0!JW`n@EDdj$$2SVK6*7$!BvXP
zmAC;h-W75(Nnzpro3CE9eV=~Lp7yS(vXnk@$<WbDju^b**6AB3nWy$#eeKmfQ_Yh$
zPHzo+4MQ3(pSUb%9V<q*FS>g3{R`!(UG013==W*Hj{-*F!ujl+np%IX?E0*I&-K^u
zY1z1I!`iOu+Ll`UtL|F6Vb?~vk=x9w6}eE^*<<q;?v;04Ul#M%*04VQBMm?DQ#-8R
z4ja=5yhXO66^La4D_jmP4_(_JlBqNYDFNk@`w>)O?pZQ#8YKE#b($x>w$3E*F0Kfk
zfnyCo#zOpX1(P2yeHG@f<zm>P7}}~GB|&S27%6=@G^V=rmeTB$(w9rC6J@uQmcAMq
zQ=Ce?Z0RkF_gu30<;5#jEW32il2?}$-6PZ?au16Y)?kUFy3L?ia1A@%S3<!frNW<Z
zQ5rf@nn0pZ#pp!YcRyZyWbx8h7Vp`+Y{d%XJo=XA1?FlRYgY(u#5sScFu0*BmQji7
zMsg%X%1Xa`Y%qi6^2Un<APnBiSo`$ezN2F<e~6`zy$grRgTHMpbwG3e_>G-M`{qn8
ze+|6jh0vqfkhdSb0MvIr!;;*AL}QX^gkc+q0RJ4i9IyOo+qAyHbl<c#_9^C%X0HO_
zzWRasvG9WWu_wJ^<z<(x6ie7m+8V9y=vEiAM=N6NCUr-QS4GFT%{MJT^P%PG)9uk+
zt-Ap~<uLz&|4#Bnn%$V=AkIO9(hZL|f!dN)FQ`^}MC5BLmOxTGVts&gG1uw1kwNFi
zNl=HK2Kpz^(sXA>I+$VuZ3UT7&iIG7640a)fe&>NOVU@xZ*YE`oy!JGMY%j}bGq!=
z`R5xY(8TK&AH4b6WoKCo>lPh6vbfu1yYy0<seAE}gNxP~<T15Nue<r+;&le3G@dU!
zVRt!g>2g^t9bDbexN!A`*$M5`u&}WqF?+*m?ZoW85&MFmXqQ1J{i;_Oz>3*#0?lWa
zf?{tv`_JzP7D3x2gX&ICRn(aR$#>;ciH#pO?<*}!<}cYh_r{hb6*kkXSteV>l9n6i
zwx63=u%!9MdE>@2X)3$YXh=DuRh~mN2b<cf=#Xu1I#^T14?_P$OO?ksHYhql7O_8v
zg;YvixTDu7NO1QGs+knK<B*6=1Dg=mFIvVbfJPC6pBExaFfK~Tt<Bm3jc^~(qjMQc
zYZI_OfJLd$CPJf^?<K=GdcOXXMkqT#5g{0bgdntm?vAwjCac93i{taGLroLXfS{`u
z-_kB6JkTHoSU4AZ0xu&E^_l87)i;Gl)Hl@!5JRt@+{+OWM_1iD^iL_R-C?vbAjKb)
z_sRQ6|3ThU7;c)>QFEH&_nHWfU{q+4<w4yb%;Zj0qteU!?%j3GhM`Y)ynXE63x%`I
zlbkkl_WlK%`i{&MjguFpmQ2omKUi57FJX7WAlzzJH%;CNDZMal!|l87-5?q-y!+Vi
zc4Y52Tb+~4!rFO9`?k&<`gHP=)S}74v_QNp98x#ow@x#=6Vm*h$ZQ?$;W-_+h`Bpn
zH%*K2!C=D&z*TU7!vqZ?^yEceBccS&2esJe&QDZYTGYXxC7t$|)qgjSb7&g5G@4sP
zHvzzM819*(u;*fv_9OHM3zSw9Ata{l<ISwZ?8!U!59+8#(Mh@j?T#{perc<gk!N+O
z`lr%f-Y5AwInY7F70{L<{V4T1>=t07pt+Jfj90Or;6JX{BCQrE8bZe&wi3fwEXHRp
zz8{VAmxsWU)3nT;;77X7@GCm7_fL1p_xKEG&6G~luO;Bc3ZIa?2b(*uH7qJ!es71c
z{Buj4(;Jds$o78u<3df_2~DLq`e9*$SGmrR9p<NOKaBabz7+pZ{Dh4lYirHwpm{HU
z3hd(!-CV5N=j!%hIpDK~3twBB4GBmeS|AzWfvm6}DPEG|lUoxlypTiijSA8Y1hy)w
zB;2lAnwp8))Eg48P%ZwwxU1Oy^A`3^oiKhvS?$)KaeS5HoZ{?b^VT+X2<lP&*r`*;
zmX$O_mj>2OoVB5Q(KL3M{1>eq+;+lHK9N?xvyBPHni<#j$sZK{QrKEcdR9+eQD0V?
zGPaq!#<-c#a>t4bt+R#Hu_|}dlIGeve@SR!d((u)Ga45+BuhHfA88G0cPrw>>(`ID
zZ;aIyn|qmhuDXBthoW{J(WN+`Yud=y(wvd0rm&1*4<oZAz!P8_BUcs&>>6?#8&)Fz
z&@V=a0w4)F{^!&W_l6<5xg|-0F!~>aCALbeVsZTd*)M*^tr*!)O8w)mzKThWyQW@X
zw%BFs5_@CIic5EPcTJu8=CmynV;``)3}gJ`Vl#VY_3Yib@P-KvBk_%!9OVu<T3_4Q
zJ}Wh6Uj5jGl>#8tG|Nc4I~A>8ch-~X%M@!>yk~ERI|QEcwzgI66IaaY>gx0~lm<@f
z5-k^OY#SGC80Yr-tDRP(-FEJ{@_4LHsGJ=)PKZ@`eW75-r0ylN%0Q>&*M;@uZLdJ$
z)rw7Dt5ajr;P;~1P>jID!><(7R;w|Yf}qI&8klT?1dTfc@us5mKEe;qw;YKR(cp-D
z6NmUMP8x7cM%~ytE@l*Mp^oN*mCF`gRNhw3gpO1PVi_^JzCJo>#mX(q+iJ(Ts$5=!
z13b4<S-Zh5EO}|}9`O40iCKDwXte9Sh|o8C&bIT8Jh*Fj$0VQARU$8Q+egBv%Mn3X
z!Qcx59^alanM&*z+Y<Ues(;!yzdbUx)E%iRZJRjj?gi^^S=Qd=jY1Hx%nT_;+-3+^
znMLmi8mcXddd*MHo7*sD;)HOdVeFi_yL;|o^NyEPowy?3H!$HRn;jju;n3DfLNQpY
zqxhdU>5gILEULS!=)SmZ{<rUozc<?661*oo@wI@|+#<T*dh{>qsC1)$8-4eADGR?v
z>~4k_SvdvPHAC}=4(!I^OLgQ@9EMDE7d$PvJbi+K%-H<G2&1&Ug-+g;!=q5Z4@4oy
z0Kx|tUslEKy@~N5qtgl&^V3QJCBYfa(l=Oa8&KA2+$T;zZ}2m>Th`P0#Ea|Jm6zj>
z?R)<Djt=~Zzso(z-kZA+zt7)&vz6Y(tF82|`)4=v_sZ9)L;Sst=d){aPlWQ^1%{oJ
zi(g9gzf%{`%^Q&xF~Wi-7H`-s2S7+tJgON)@FNH^jqwAO(+Q(4a<$<K<6&oS^_MJt
zug&xmldPHcv$;ma9<e4wvW_55HYFyk5xZgpyU$>(YWtZoIRx>AqzlG1UjT@6ba>yE
z{Wf<5moh^-hu;ptAtPG}`h$4PWcOn>vy`#bH#Ss>OoAEE1gIbQwH#eG8+RHG0~TJ$
z>`C`c7KyM^gqsVNDXxT|1s;nTR&cCg6kd<-msrdE5Ofk=1BGDMlP2!93%0c@rg~4`
zq)UFVW%s|`xb>;aR@L^*D>nkSLGNmM?cv)WzHZy3*>+<LzK@;DO4hrim(_e!_Jv%d
z6Fz%J<#!SjuKW1t&KC|$?A?EL*Oq(3*05n5<oc7&y8YJ=T=~t9mQRZAT3OLJb?4Gq
z<JC3Ox2<CP{tRm|3f4YSHz0Kk)BX9{xwYV6xysQ~=ny`qa$Gfwx@-Q!+1jOkQ=NBf
z$CH1YzW1rVEl=)0t9HRWn^!W+dROBs58n3RHGLgaIbX~8NlOFk0<NbEeT*+%QTbS+
zjV1nV$vv0Mn$WxVs;Qgq4$EeHoy)Iut~mPU{g*%V!SasEUCS%RPua0}=6H48hC7EH
zk@-H%b*K~}o1*GACtx_ngO^d~_>*xAJSX;>))*XRT0r9<#zIpug(}{rSC9T$42@gb
zy8eb6)~}wl<=or)2L}4T{vum>-g)QaKjtnp5fyd^;|BxHt<f7_xUqfX29mzKzMGPr
zFI+W>x~2W^YbKq1HfB7@>Hw@U5)?b^H=uNOpli?w6O#~V`eG;`irLcC(&Uxz`L_Cl
zS8r24e*U71o@dV6Soupo-}Ttu*Dk&EwY`h4KdY-k55DSqR&o7nufO)%>%s-Es^5Q_
z60#cReEy=$4|nW)bLh=|4bxW4j}A?qOle+wjn88oAeYb~!eA+EQ;8Ggp-UldAt$3M
z7*E590amz>YB9L(z?Xx&?I37XYw?Os-t+05x6Z4vkzBE6-hrbB=GAB?p{DQXV4CKg
zls@_wh*&XC<3R(CEZxg8*Y(6a>cIOq9Nss7{=UQ7Nv%O_WxSyBqnH{@(<>A&2on@z
zn57W4Dh*E)o#rJ2#tyxV2;C5#rl8%%As$4qB=IbMt-z|jnWi>>7Ymq37;AW!6Y4nx
z1Ogx#!WVdA92mEipgUxzy_?ddg|x)KOCyK)P5v@usc;0sN3{=0slt4CuwaxK@20eO
zhdp~Z8iJ7GWrkq_-X`~(eBpthn9|`tZEUCIG<FXgMLh*(G&pfz3`a<Ki+iFUHjfBn
za2~?J_QLeBaKDq%gZ)6pk$MNyiuBTm!Q>iFpJjjxPVE9I)#z3Q$3tw`a69qxjuf+~
z*?v>d5~pcH-AQ~0)8PyIjumD^?SM8!<YujmU(k2xcdb41eaGof@IN|TkkCj*=Dp7k
zzhR+W;JWWvD?x|pV5R~OT8J;>Wb>KZoD7hOlc2nA0_(eG!i<ZX7;CzC#)NOOnG<T)
z%~G#jZJts)34rm;-#V#wig}g#&C1U67tfP3Q`U+Thu$ZWLky0O|6_g4*zx1X*6jUV
zf-PHcxJeyM8OD}Xx!qM|V-2Yf12wlyp1)-c@AJp8o}G&;2WSM87$*7@|BstjLE%DD
z7+TZFnkeFS!ZgGirKoZ~cDDKyTgx^t5f*LO{EZFLP3qGNmrY*kwWv>n>}Ru}>6)>5
z@*}T`Hw{I^-?PS9>(<Shea<;U?_^&P+*@}~YbtNb{)*kiJ{~vjaClr>#UFBQpW72*
zsfj(2+_9@5x+57aN!`e`f(Mp_I(D>}p8)<OpI&$A%j$b~e@p$vc?M>@&g^g+X1%d{
z%X5boE<E(ymUZ8oeqDh?|B7u)x#ezF`m$IG7~A(=zVzmU<`Ux}lVD!E1<7B<TQjB}
zDv;b?zVQNp*Fr!99oApvx5%a~lE-!>?hEoj0CiwTh9)#8^?~;|wgor_=Z1BI9_dI{
z&t*f95n?ZgZ5CnQa!v(p|JT?y0%KKgi`Smi9k5r!+!Mkz=&Z$%CFl;?AOzV`YBKrY
z0#Y6~J6&dA=m>T@TYb8ukaV4z^Z?V<l9Xy&tR;4CEXGJPR?F}$JJbTm&uNY$Z;Q`l
zA~9RF4PUi{@O|hTC9i<b;9I9AMX64c^uS47E$WgWDh~7xpBp6apy;in*&vIzoIO_l
z%#_v!Xgc82N%kHf4&r$&VLnCPB91xHe&j#p%13@@WOqBKk6E<SryKR5#s<U2jx|nC
z&z*-n&N^Wo|0Vk(KMA>X*MCKcp13-ye1*`gAj_Tm@r{fpm?K!U@Xg2AfndEo6jZN}
z=XK0GRNXVLW2c?}B)rH^yR>u}b?|p(W$!TkQ<TY#AFJP^aZT$28UX8pkM=)U#1Ick
zkn{$OZQ@U>TAgu1AIG>MFfNchMQB_^-AQxRE$Th5-E_tBP@v(Cy|ojjP5LEU|JrM8
zVF5;$><F9!()BUBoBfI1Ev11Nu>Hl^jlHWDPChrTH(vh%bARyj5#TPb>omAs-)4zN
z9?9(wybd0$Z5s+}F<gh{I7;dJ925oi`S=N-ZN-&{uKtgE`g+faR+iSa%%AgBX1?d1
z?7f7WaQq9<737Iu3RU4oDZS;1O^fbmYg^(`D$MpRPyF(UKVA317eFlx{_~4b7WVFW
z4eJ9tsT22MAB|u=g&r1D9P4{hA#ZpnClm;{NaF1=h%u}U;x4x(`<|^#GP_*TPt`uj
z=(f4#e~|)CHd6`8kFXn{pBI1O2@LKn5#&;*SiO;19075H-Cg1`n$_{^Fu1U1<?wNq
z7VbI(zC?}<g@X4pJ|oJeB~NN|kv!>iytv}-8U`IC<{6U2_NqEAkv;7lys5Qcq3EKt
z0-!^Xy3idllgZ~qX^QTe=i*oGUCJNk>Y26?+9U(Ks|C81S{-v+6ebc`c(yibQbuB%
zxM7mk>}dI-TfUi5Jqdu6b`4SqF)y5humuCaHhssdcR(jKf5ZGprx;Oe7VG#G6TA1+
z8oZLl<+ey(L+$Qsck^4fi{I|)p15MX73gHFUU!l${lN{)Ht_Wb%j#<CYLJugeD?U3
zJMP#*v}NP``He!iC2mv94Gpt9%vE}qOJ8N~m|b|?&|p?<vhXx>UE6cZ9}Wq^>+1wz
z9TBA@%f~tby^0YWafmn&8Ppjn1Ng{d;S01WImtMzV<`!zU7;+8e-Xko>qM^OfOZ`Y
zEZG#vcm>EGF??&G6+v(3l`X(xMn8ESv=@LdMfdcxFi%g1?0HDPG>blldR`OLlWN80
zz<$t+MM9%1K~JT@#aBZjOu9*G{W$u7cqTM|&a1)0wR8R^*r$<&AhuCq1Z{-aUhc5P
zdyaaK{$P=Y6R{40FrWmLbDOCijqB(1PrKlnL)Tm|t=l}toVLAZOXJ*~-dx|_A&o65
zskcpT@bs+d@ia`f)t8ivl{(t%H?O?;=^s3O^GXqopx7E3kz06f^UQq<>gyNmo4Ij;
zrOxuzn{WOqP75~PwPXC;3mZ#YW1&#2xy&DEXsl~)u4`-v_{*B<S!-$Ig>%R6xNH3*
zJElz8@d#i4`#JV(ko%x;u{LMqLEEDmwD*(ccB9Wp;u*9I?=sC7g>%L{%$4m#zhbjm
z)gK{LWQvE1>_yl|4T$nYKNVZ<)vza7FKU5*W~4)KNgN@;SA<9&ERxIfA&UZnB=r%N
z5YD4fY$9Mkzy}!G+`KU<CJfhQQGh_2W0A_!>y>3l(FS<N0~Cz1mx58QH4Axd^9>i1
zw)t)*w$E4#ZSxfm3cZLC(o3aQQ7uHk>_@fMTHoM0=quh%mfN6%{`O($pyzg0kPf=2
zjA%M7bRl4BhV5{{d4HbnTh`HM&<gjN3kv%=W$Z`e^_r00Y6SpwKb4mCD(Z)4C?tx=
z`KX-#*9u+lh(<?iI~uNH65?WVcc7IES~!dVUpR>YKw@N~47e7NFGr*9<B4Xn!7P`C
z4LdYduN2qJHY~A;Te^J{r$gs6V?xP6HvM2p-_bDKd%_S{@$<BH$g<4FZpiB`Y9?pK
z0nj}xQ~NJDbm)@q14l1h<!J7H(X(L^FvWT%ZScI<S+QkHMQ7@0-^#KYn&mZRD+x7Y
z<gR;nrFlw4bB*Fyb>Yzi(7XQl-FJb4hPEKOC!K2x$nWy>8=PJYE)T$=Cqe(n*ChZE
zklF{Ms}h0Jd|@o;Gz(~b;9d&c#0O^j{1?tF5dtMj9dG`|j0qZi^aF1r{<7KC5hZ`E
zNX2nxJYEr@>u86|tPjTDet;fLn1R+IOm6&3b*}TOyN<p4?y-ZOw+?eijq)nceQx!9
zF1<VA#!XeZ0HYw?;kP^o`NQkI>pIaid@W9c9!jIfiJOgK-aw=xb5Kpb)`E9x%CU82
zEQg_v`e+tWYClJHl=_EsSW?LZO3)o#ox(#2UW9|V7I8fYnz5fRtph`u)dywWL9}UV
z*hdU9-BBK5G&}j~O6&dSdWDIpFX;&Or5wNbm^Y+A-x6(K$$Of6JTVl9n0gFY&=T5p
zZX?pCxA&w{J)eDSfb?Zh*LT#AdiPlB;A%p<Bq7W(aa{j)HJ#0%)g=?gRG9EDg#n7r
zMdJ!BkA1LSHx=!UeGUUkV_RL?km58Crwq7P90nCp33RRX1Z{{!1>|-`Aw6RP2mYTh
zLmL~zM^VS0V@*4LkOEG~nQR)<V(1f^1fm5Kg+gLui1gBt^%q}%mf;vP*kr}<!Q*k-
zya`(hCk0Xh4Fh*E>HyRB+;*KWli%QqKt&%16HWyMXRhtwdCgyoTm*5#itgp(Wap66
zyr-dgKgjl&t?JLMuw}!Boz)TOa2|37p^FAcPmxX0apWmfp$B1WF_@-dsK+?1F6~yY
zEwi!-))Q_CbOP%?p%bx|=d^nLBig-_$e!nh19^Ps`s{SNq{nnW)V-qnz3y+Ipd7HS
zsb}z<Esk5=f)PZb3ECG4Ig2px3-625(}?@L-;2{1-~Zo!|BJp?Twmxx@PBTJIR%Re
z(MX3;x<{^v+Dp+kh69X1hp)wg>%!+}y8izoy>Nyyj4m_br&8TGFcze#gP4?v*NEdl
zzGBLM4qpvdu;5vC<mb=7`rk^Zp6)XvB|C8ofsPJn1YCh>Fi9^zXU;sW`>pPi|NFD#
ze=<sQOFyXEk?~r>$xI@7q9B4WPsw4CAO~UJ(S)s@u41E>#9<Bwg!2FX=>D>!?<Ced
z73<(hU49huS%eXpA9UI!*?DVYlclgqX21of{@2Fn7mTQ(TcmWD7VPj~nvW|nqnT9o
z_Hu$dLq~pHKQes?&k9u=h=b@z<!}@<-D?LS1LdV~=))-4T^jP_oWi>=*N5m$%^0E`
z<0RjkAj<jntkEX?s8M(5QB5~HybXimn$xGg2;HpR_!D@+==g&dL9KHY`T*@S!<X=g
z4rcQD+B7W#LFH#kD%h`SarmoqNKGpkequFeALTMSL>02TN9RLX3Js+GArg=Nu>E5z
zPa!vMuMV06#7$1dLbwv+VGT(5V_&A~Uy3T^+|y~Q2>lA|=hZZ)ex%G`rhkN54C5gq
z>w?qN=A+LgB0-@s{OJs7Da|z%dK)uDH4?m5Y=K(N5KWL)uqDxwBt>QmOk(h~1u6_s
z>9x>G_+@bJhBQ;(Rr?20>Tjn}^Y`|rQvI3Ua5$aGq{HFf4BhwAFVk2oHNbk)hmAri
zjQ_!g*-c^AKM>A@je&H)i1PsJ5929F<8bLXvONK<o3lUBL*4;8FM<`KiLAf~s-eY|
zNJf$okV!)Nq;5_N^iCk1kG-1;vw^Uf38%>4;-n6d;Zm7Q=G|k6Fp*AY!b1a`eoS*c
zF413z6`x;!NZV1k5)sv<jba+WM9JofGjJc|L8)pdeoYe|k4D4$WS}2J^(h1fok?X!
zE)Z%4XYv1x(%$CyrIB)JBAwwP4O<!IiiE;x6RWsfYDOy?eFNXpN`=plE}4)*S+r6W
zzaUH;T`&Q3_B`=Fr6y2uV~C^0^dDAB@;H4aCY|n~aG|*ou!U*^{LNm+MWflQ?q=7q
zL#KWGC{Mr>;-Dqjt?t&|JLNGSA2yWhU-RYC^oiWI1+idw;6*>m1&Io`^iPgF6c$sN
zw9j3KFYs@%*HNz1Jr?F^RiLV%@DyQ^Dnc1h&59pWKhD#AMQV~3k7}>c@gdw=dyRf5
zHGNU7bA_hHWUnI-9SXt<YCy$e7oYYqZ?Ac}M^UZ|wQ`N<U!h>jM~LT<QF!MTJVd$9
zSl!dKf`Fc+mMQFWv=bHVG>>U5!uS#{<o!rmVUrdOvS5f|Ako0d4T|BcMYMo=njwO^
zGEh(RgvG;oe(6DQrrzdx&SN&INu+*7Ir%L3avjLdJ5!%9-8@#0JgHBp?zx%uB^qC>
zKSOhB>l^nUa&S8kEFoAUIDG}(Lr#|uJCGb%29Xr>1S4yk0d)9hoJ7#4xNbi?5Dt?N
zBp45evje1L)<Z`vghl*}Fd&pvoJS^Tv4xXtwCLD7dg5ykS^`N?DIMh2T)s%L%gB=+
zYcANh{8GyKUaYU&lMD}eS&0PX3oeL3xe?Hfm7XTnPoL(wP95wAN+|#QAU-em_G_?B
z{o;0~vmZXE(4z||kcNIM_Kpa+m7&GGMCbHkm!e`pc7Xz>A;&Smy9J8MJe@<k!l|t`
zQtX_c1^Y&>1#HwBFoYPv$=k%GOaq!kd58)tzBI~EkGG3Rqy>GOTce-p>jH0rb~c(K
z1|9q=$3)Vdgcwyvy&>S3p(f~O;~?XK{)Kch&2!gs=%kNH#-Ee-i}S+a@DNWR(Xnv<
zv7kIUUD(c?<t&Uq)Lc0kt^(j9G<@Q%>RS|JmPeXBC6cbxUl6qRxl;fFAiK%!>EzFa
zJ$-mz?G%WqC+P-l!DLX&nfxzGAnLaFsOg^Vq~gaW2QQ<(qixj#J=;Y{m`?kHkfO)i
zdxQ*`2Jr3iXdj4QE%|AlQ;|<Cw_QLv^TG%)Eu3^19@P*teSQK_cS?!3_b?PpOrPNg
zDU(eVmzZAI-gAcMRBj_^`IJ5bd6Nm=goKJl^RGSUYd~ZagkpKGg8Z3e=p=q^^yQxv
zpS2Vudw@jKJ_msT=JW}ZIK`d4o}Z*F4;9ciXQ*S%!8L0RN*`;#z6b&A_I}}tgR3d(
z<LZMyL7W7{6j1-2Q|E%FNYCC#8P1s_{s+CfCi^w*$HUwKLEWjnd64P{IyPrBV!<6$
z==o8~Z6OPXpQzb3<}4kD?Gz!y<?(BoM})$O>Wx~pKrr7xu<l@1AcE8Eue`3NFwDSp
zmx&I<t93eDvK;MPx8tjKts5Z2EFA(c=_s(R@Gtkbu>NnTe=t-AO)iha6xDYpH}>yZ
z+FD^H2VS0x4us;Wo_95^kElZ$>j2HW@wyeLi3i%Q28NXxQT7V1{iHY}Llc~!Dkv8*
zM><6X$}-pv0N#?+N%W`5%}K0Is%8kCOC~LuR6+;gtHYPi9=dqUoin~Q<Br;k52e-}
zxq8t<i>^MhE;TSIe$6dEI=Xs(`oTlj_C-3c4K<znz_wfNzxCkO2evhZu4P+#mUMS7
z8GYEd=OM4f;(ch(iYw>T+wJvpu4Kkn_RZVg5jE+RF`XNx?0xmaV~bW?v}wVTXn4{5
zO&2X+*pF%!%qu@3SLRk-npU5?`f_cV9;|pa#ktlD9VuvRx;TK+fWUv_$vC8-@TcO4
zN_-D6?7|-4!VWMEgQ}TUe(c3w4{eyxe8C5t7pS0MFe;X@U&B?sVDIGR;u>?mPyb2F
zV5WLiQ2mX&1v=E#B`oe9yk4Y2^CFRk8*rV6<p~YyuWOHV4Q7S|KY_E$w4UX22xmuY
zE7aQp&S+f)+vfXTKUGt!$|J13W!l#|C#tu#OoO(7zZ*Wdx_^8_nA(-|tDKkc!0r-p
zIEj}+VF`c`Mm1zkg^G1T?wp_6c~C!{vq1>k1!uW{m47&7E!m%(ANz&+i<mJGEE#Jo
zx#pp3N{r(g1FD(NYXN*a{;@fm9{Erm`tXrWI5X+PN8T^Oeqb+Ma_g;^AOmF6vwnR~
zFaWEvSNQbi8O+J5^cuaM%LdE!8ui%A1@rdwb@Oo;KWrUv)+CDynmYfDx)}qF<8rkc
zTM`Tysjh1BzgM@WlCjQwwT#BGC8(-k`k&U#0u2En5J1b1YS19#^8YVirF1-)1&;^s
z+jLNk|MzO5DFxY+|E<F3=scXXU557eFCihx+jHdwN>xrB^ng(;#RLHnX%tfsjJWM-
zyBo5Of=eNl8*;gm`o<fXBX1wcyrDvK{Dzo*gJn*6hhE>zE0weGdP7~Iz5$$pI`$C5
z`U46T|8cnpt;J+VO?%~H_`Ph??bcn%Jzu`2`z~tc^<e+UI)xP&$n(S3h}kuKjWp;t
zq(Lp9T^N2|l;#Vc7k;bo8XAG&cR_IEuUn{03Tcc+h$jxoz|ziMC;p|K15W(Q-9eu`
z1cFiQb!LZu=gCHrkGjo2R&`o#0GQH#*HO0HDgV#X21sN+15zA<W#P!S^AsN!9J7Tt
z+O=BvD0h=PG3_TO&%mknQ!PGrlK<&Yn*QiRA|0vw2uBkIz<TaOe7t4oD^e$8O~BUa
zBAXL|;{||*8KpMNX$SM(afGbLEi|#IQosu`d(HdDVR27CeBGkS8y;Ho==+}>PoA?r
znJlfFuxIeRC?a>J?C!EC2Bn;dnhn3XeZ}<B)b#BWH>sbjb-10*a7A?aS00$P{m0wm
zO_v_`nJOwO*k6S$tHR@xmt`N`;fR%l>^^ZvbfRm}PUBtryK5pTwRdIZgj<#_irORP
zr7I?yj7m&+KkD(;PKtLXmF-s9=>`j_AFjI$YN7_w1g7hD(md1~ysZj9;u_Y4i3Ssz
zgRH~g_UH9AHR4A!67Z@2zch=Odh*4WzWc2=ekK0-ueW&=xy{z7Gz9CSbv}Pk+4ST#
z#ZxnW&!Z1tS0A}`@LT_*wh{sv=f-Dy+2cPoUi{nzYTGjx)eit9s#G5^D0+(|iNBlJ
zV$vUX35MrZ8K19VAN|i75_}Z#DO`R~MZQy~2$6gqOvN0Js%d70SzJm|ER&Jy5k>-I
z!fh9^fC*zr22w0EG6&Uqo`eqC7_L8gi(#?!A>;y86ak0F7|oHQIhmW!15hHkZ(*|o
zF+vd5r!A(imA-b0<VBdKUN8Broi>}qc4-&FS58}j>!?PW$SEg*;W8H~a^e%b?2`O8
z*`i%!x17FmIo=X;^83K2Y3Hja(b_rMns6%ts^>=(bA-9V<9O1I>564?R3a}v1yYtH
z*l6T7AY0T66-95WtZgaP8(}|MBGlfNdh@=~Y1m!IA7($BPUtE`qT@h@;M3Hd<i#;>
z;_dtQw^?1x7-WaPK4XDxuqd5+qVz|PQlALGw|x}&MFa4RtVSK`(e|RtFN=u%s&M?)
z7+HD3$diG_iYZuX{0ijc(*2C7cTX)p*3LRRtn3r@wq>%<@A9jY)yX*d<YnruVRt?I
z$Ge`gQt!J6+3gm(PBfc4*wmp(6%VoXQ(238uWF6NtRH+}jYZghv3233VHW%Om@(>v
zSq7pIH0)jCA$)wa^7RfPVlWXzzoH}vzHmu4?W&f|zEC#fi<;dYS!Z*G+=!O(wLx7}
zkfS~!6{@R-(Uw86L(mJl7`6&&tfK<xNf=^6_XCUu8ur|r1N#l=VNU&`*4XA+3xiN6
zAyXvFc8Uio)C-HD%2=FzR7&R+I79uTG#BFHe_)iFOrH+GE=-4{zrkN`W+aW+i_JTK
z`>Dx<)c+WIlqL)3pSX=7*`N5ysyr`8ap$bd^E3w89)ZgPiCBi|f{Ji<FG*G-wEW`%
zb_kg0x8xoGG@_?1|4(>^U)|AMCk%95n_gVk3|_XmE_Z6(keo8NCgI|@0sfZs3_s1}
z$KK|ZCF;AE#cQiOrv*z^HWTBHM`H8Hwdx20FDq8lu^{(Q!@5s%Urrmi_ZX=7)j%7*
z2x#|wO+pMI^e#2DpLkU+erWUorFxiNlu1s>XIg^5wIEm|<NqYAKz#tgiff*fn0f}X
zH6gqc8Y>joek2Rd2IsPtNkBRLQTFsnoh4v_<(`f@uV0I_G*I9RD+?L~j{1bx`#0ta
zEeZiTNBzhh^|GEN+1vl7{w)Wm!`yhLKAuC&Ve`GhjRo0c|E^`tZXfkQW;&_kBLS|M
z7!XYb?!E&&=u`h5Ld{_dyivFMQHW{aI!yVS7oS=ttZ_4U4sb{P=wmO6wCrO3g8Cir
zRxN0ht{}^=kNOy`2fdgiLzr_8?$^fWMSdbcHb<)&+4+$`i%$>mB*aF7fv0tiFWhcK
zRThLy0Mtx?A6Q34Vn$tJOcHkv?-ldg8_%9Jr8YX#=C;}%u*pWq^?L5VVi61EUkC^@
zTi3LAgna%bC9aB?Qos0?XlUZtnp9cISx)1AbGeO~JGb1<*DpHId@iRrT4e7+!$h07
zWDZ4FAXQ;*hdB%9)8U`#Aq1XW1`G)sm$Ol@ZCv2#2r5~I^BXuYJm%NgOkCQOAufat
z)Mo2&C`TDc7EDz1sE;V{`=Bx<#5gYrDb+@@FE3>Yx=pZB79-7UjD-g%Z#qc&td6cl
zI`S1u2Q2b!m^1LOg{LEV_eV*@<A9-FlOjf2A{_Fdsdcgdw<b}6Vv(B@15RD*qXZab
zGz8+iNI;_yFaPJU0Fd^84av-oyHqv((`T<kWEsJWhoZ6M2FCV3^Go3`Syhyp=btsd
zxqVDigWb0^7+bvc{A<V0Sur;${^`L7hiXh#(O?ohffEn1D04pao)ia0rM2e0htyBh
zw}b~@4wbr7eO(CW9*K`nSVF5~Wm9&qZ(Gwov9=@9gC3;1kqw!61?mPZ^p~ldeCE1|
zU%qZ1WK~HVUALZd&%bus`VF(CFRt3JUk=r?Q)@PLYuCi?1XT>cFW|i{!+a94itA#8
z2;?I%3?C8LQn5B+Ac|?$1Ejde^`AH_B}3`>#H=np*@<fr*CMXd1TQ1CRL&_K($$Tr
z#96|b_DJ2yxA|JS1veOY96cL$3I;DApFr+o{Tp$trocX&{NOP{5|u43!pI<e402%B
zM4wvdA3SVLdTD48)&_a0Vbti;D;JEJRo@*uKg@iV%FDJiOj;5h6Fqm~l8eh@<qff(
zwMR`clMTp{LPbnGy0$0Qfae!4?Ku~zmP|_hX)FU+Y9Lxy@0&2br*_dQ_S8c9X<y=w
zgbcF7+%h57T|aBgf|aWl)%J{^;H$5T1_TLMnM~3Zy_ze@gcd9{qrOIM4%wrWhI}}|
z^)eJZg}gqrX-UgLOI%0m0vFBe!nteO62g2-2>XDR^y^=fZDd~Fz;wS>e@!M7JaPvv
zPU?=U|2$6iw_+;&j{0oiARgl1!2p}_PMTg!Yxs?H%{HmJgU62_ghA}_;}{7x*brZc
z@>!rSz|M}1YPdKizI;?B3~2O%LY`8A1SF;-m<K*j4Cd{v=p*LXNG=-ER`vGd2a~P6
z=bVdBB6x60efFOZY-#f%gsmbnc#&DXG<(bOgPXoCEZDgD0<8iqLb-Z-`rvV;w+SF>
z+Oxu{+PYOU-V9O}bVd$T!;AU2M<2*KtciMEC29!H9V-u9ZUJ$M-4<ShIr|tXrKWbT
z`D><Y{dE@|XmMIgt<IJM7hSi$OEY*8QbKz0rpdFP5g*U$mOXsszD2Ww2EfAxXD!-y
z<-^Ogg%RH)dPz5o4-q9@fFG7wBX$sZ>#Nb$5QVy@LP8HyfiyK->WR(e1g77J;isq@
zxu$>@C(@*mf}RY@L8hJXBrWMOEKDqt3i8iwFSwpR$W>G_j=iMN>(!1>S7GdmXt%UH
zpfdn%XxP3S<>d1=1{yBn9c@?(YZkyN<fb)6_r;Xwbe|ytusrg}0*9elmW$u80{>N1
zQx^M4-32#mo8SKR;r8t_CV3=RwbSNzS!Jbd%GS0L=qT*0!ERw05x~DzSsUKHYQ||Y
zuwKD!+2nux!l3~g>0-F=;qnW{w$F|jqXuhZz#N`4WtzLDj_MYvu(*X@fb3G;s!oPE
z?QMW|e7J7#=?C#3QWQRp-~(1;_=?J(Y^}oNmHRoN$^y4Pv2Z8cL)EmwWVNJh@>2ER
z)el6y-IQ`!2h2{kx3}jwTf$_!N75)(mi|n=?Ylj_>QzqjfMiO67Wc4{rOcF4JS+{j
z&z%duf1`r(U@ZlI{F=sZFnCG<!~p^JB1!~*BFX@ML;u<X>Jv}cN<(cA|5AP8m+HUK
z@vG9%#_zOu)ChxFSxmKsBSSO9XX%g4SU79e4=G!|Cgo(;VeA8dsRxIZ$Eqhj(brh0
z>Jh)P2`<<#u_i^?L>%2jxXAxZX%?<7l073C+~1p!t{Dj_9ZxL$sz|_G{C#{Hv@t=B
zP}EsMr62u$;U#=d%MRJHCiNv=5OI3(_o-A=G_9B~AsrRui@pzUDE@tHg#6PmWEuT^
ziPt|@8=kjTNmkqdOlyJS!m{E9I87hqn;%9rT0<0-L99QeURoy<D*!&^jevF<)nUT!
z)AT`#`;NGXqh(2qEP|?uDsodxOo=2AYe<esea@j9#tIvJKYiZzn2+^IY;$9FpF?ev
z)9LIFvOg9dc`W;v_gY$RQ2(-ltrx;ivNunxyZ?UFkLj$?i~bkZTu6LDXb4KgAR}J|
zCS^>K-&OxH^mcao3^t~WeS^K<Jveis^lW@^CYHAs)lZm(ZMfyW``BVOh6XH+7pDP>
zH`XC|VCLo6*duA78O!ugN@5Elxkhd!CmdSX&*f=utfmDFD9PkBHMk3&aFB&)R8NL4
zD&i)OQL<Xj-mUIXo7Ek=&j#eS(SsGU*Jm_3HgtV*TZUGd%*5$1jGR7EySeR?t_=>O
z(Z_o2Zs~o#^$zu`{XU~$I{T&vAH3;ofJ*ZpJ&JR~s{J0}8cw}`t#a3NvWA?#tMY67
zLG}{Q{#6^CipQ<Ze@-_<(SF1-XcPlg5Dr;dBvQ`!fSM-T6Ddr(E3Sd74(BL?V2X$P
z8c~UHEZ`K6=k+XAgTAh2(4>$*V2|W$g2v->Y9+4=(K+K`;I4$BFUb9!Nrk0B*fL+v
z_lcdO1uEs@|8I@xoKCB{68@q=)}90JCVF33Lb?M@bC5mog<2~vPXXzk7B$|75Lya&
zL)t=%E&Pk`S-PznN<)4iAI;NU!@f0_V&wOND{4!~b@1&pAN$<uq_`Xeq?hMesa(bP
zh2<#7d$>Goqzvq>;o=lr=43Xx{tUtEaN3B>CWZ)Uac%%Y9--wFCA~Ek7aAC_APm}b
zpXAnlNOIF+;t%pPlAxIkvv1neXa8*XxNLX6ZDDR(+U5bi-=^>US$+3TyUFaf{gSPI
z&A@*!TUbRQ-p-3$KUDc=Hp9j|c+t%)Z{KNid2DyGia&p6lgtpOkDeM{Qy=)H&22V`
zFBRKM=Etf98a&;o2pD`R2ctkyWxz`aTDZXBjY52aOspy*2=?xDIZi>&&))8y?Pe*(
zt;DkFm|`@cFI!Kx=wFn7fh&cqy-f1RZb2KRCK7JNBsApYHWk=M5J&|wBQOdb+2_^g
z*;b(s3o^wX$sWZHhUhNh^+UU2+hPaWw)eN~kHy66akHOp4#cDm_4zDet<qcA&k#)o
zZ(%Dv>K1Mqx+sR1`nMz9wwQP*hL>=&Kei3+FtV>|yg%{T(6f`N5BR!MdXj8xHG^3)
zqCJiEswQF>ZLP}3Hs3ciKciD63}0Z^MFL6+`V473sGm^=U1^Mx3`Y|Mrl>H0pEcT6
zg^H5MH*WeRUNMs9VN5fcZQ=>}GHBs};LS}+P-y~P#IlYJ0P8ym@R(0L;jYe*1D4ll
zwDy~vES0HtyCCI2411OeiC>SA#1wX;8DRXzVihdy^T9BjrZUmN_=b)~n*!R4%Wps~
zkbFH!%W;I*pJZ#8%)c_#RUtKlOksrV!Y3i%vh>?b076sjL-)-NtH_t7E8;OBZOPa@
zAofQ3jdT&<%k!kzaG)7qW3j4HcvQe1&&jd+f8}J3!f+>UDx7H_B8^6hA&r*!PDQ-B
za5jys`+BVIUd>7lmgi)Y&fyh!`yosPQAwyIh?7D-h2#b7);pTpdfDrCm->#&W_JPe
zRvi?=>OgitOs_62y`!|JbhXf5STOdjJDPjj*#EK7D|Q>bl1&L=hPkN@2)(QE#vP@l
zt9uJeTG&n{WG78N)aYu19%#`y%8i44oVsSwNLRxgR6hF`tsw;8VRy)COB4<JUN!)%
z`7vdOk&d?<(g93fs3|PTNPor1pPNW$3<O#_EA7})G$BSpfHV?TmULI#dE$qx7wbVk
z&~JAC_{wwIBIXAzc0go{b$tyF-B4|{28H;j=K3zuV<qS%wMu_t^4i`@H+DSvdn-bD
zuywne$M!>`B4i4SsLAa4`Y(WRazi3X`V<D0HSABo{&CC0QDLaak%OFWRGk<uFflyE
z01;aMG+U7Ux04Vvs_$?k#S`3MQCM3<V`66JXbM8S0++=Hls0KFaFn8zqPUf$OWb}n
zqfAxQjNk357Sh#sz!o$`29{*=IlAY>v!fMiDilJX?r1a{9%U3-*f6J-iKJh{i^La~
z$yJ?ASG(MP>=IKImh$g9bD7xJqR}YghlfIHszUwEmoF2yQ`Xet0HgZCGNmYge2TvH
z+d^IF=q3{GD`-m8K+R-7AdPA64e{l|c4AofbmD)4hUvwM1bw^%@mXLok{H%R#q;qz
z+gU3h@JZH-G^8$-2?T_&a!E51(fhSa5<Hg^#*~Dm+3yoyjfz%;wzVmN5IR8li+ca$
zwbZv$1+j|?wXTbuGq7njBBY45qR%Et4o^v_!hYa|M)ro&WEKN*NJUs@_M!t6LI5%V
zb^o{*FLPH_lzI_f#b&eq@tD<1VOkJ+2ytha{ElMVVN)iIbK7^?-LEs9AK$kfBlRpq
z&WOB{-VPLkoxxbQ)#})8aqPMdAy#B$fM7_p2T*$qp*<$k%A*nEqb2)XX2TVMsJB6n
z5Ki1z3o9gX8w9zYljMj)X!33V6x+^OOEq2l=?|Yh3Kn5AV(XaYn%?@QTiAGN3iTCs
zuiJh<gakLKH&e=^81|Pbwkz%K-#_xZ{l*gWWfmrw<kG4&bARQwUujd+tDeM*C@Rx6
z11INo@J#D)1GU>Q$w^j>=mA9b7)O1^G1VKyM1v8fOAgDLfFwlSN7aDkBbh=1Vofi;
z{_|sQ`!zOY>fWC264~Y0Y;ZbE!j3Cqv4wlfV?E8SiTe3tr;ceTaXo*JV!Oufp0KT}
z!>xB&7aARQo9It=F0Wa;$5j)X(=fKBtv5LhYKFC6eJA)BwZ>zny85O7zI6@a-&ln8
zLF2LorHz$i{9dO!8mb#Jp?&t4L$8*9&!)KTkLxQVHBP<TbHssoPog_o=3mwwtV@KV
zireEK8}FR5BG+eEpwBwd2D|})dgY_Q2B5wZpn|mygmgKlra{EZJY7yZo5m&j{9qWx
zE8O;n{BL~oK~`lq8@)eqn$(vwfc@Bh@IIfql=_C<GvQxvrlJvD<F@~Ktm_eQgEgD%
z?!({nJfYs{bi1wWf?t|!m)VqMi`;hnutTw3MQL$4X)*D9kQ|C9QC?8%5fYb^YdVz?
zQsUed5GFXu0nNA15B60d*&xu`$hk}#W*VjtA8;PMu<BbF6azGv020K{|Bw1ZqtWdC
zv10y}5;Ko6{LtwAq04MCsz3h~A9KHBmD(9qVYA)#%{FDJ+rGu72veO-r(0bfUmjTD
zVh<=zyDR&gV%uVOFI8-tf#30zO(9x_m`T(DkVd$qEgFtgKq!btMoKn37>8FA!bZwX
zC$1xtlq<lQLY=`b$iAR{i+x7zq#6|4gLxJ806iIiFMa3*aq|oN)D*i<J@8)_7aOwS
z!EGq}F8Ih}GLQ%XWitXT(+PcVneKdy3?-^SzY91_c)LZK5>a{pU|8*e#v_V+#E4OT
zjwi(7(vGZ$V!mG>tD`=FtRvSqWZ9$*B?GPmVd1ek!0@{$s=gg&_gx>I&W_E$e<7Y+
z5K(_sDS$qH^8rKPSita&*B->#;u88_rMf;Axsguitwh`|=XF8(EVlU^L*PKbu#TN~
zwj8|9X*SENE}$egSAG|3#!^5By}_`$$?RM3+{=QMMid7b`V01GIvvI+&E63R2wQNp
zn}sc$*2c&2oUL%!tO4~7wk4n)tpFT)D3<_3R0r=|=}&0KCf!VqIpm|jC(z<~qb-#Q
zZxk@2wJZtt%hiN1;J9w_Hzt9B+S-HzVkb8@NI<A}HToJm^>l-+0XLm`=_dDWyDqXB
zn&w}0*`hmpYVLH;R9>jKpb<gg%(l4~ypf9Bxv2Wi1($A_^jdk{jE)tJ3yj8z@$T_c
z8pf9^GfJvD8fVo`G05$eQ|sE}Rc<l;)ZEge*Uvb2`dFWIa*z!H{ov^)c7(Bt?gtnf
z`c(L2$WYOKPWGOvwyF}VUQoZy5E{)Hgi*&oBTW%MqUJG((HKy}{S^(IPRAg^Fv|H$
zl9Jyq6L(c0ooR|lI@rqIVYg==f-`A&7$PDJcJM8`UEN~$g{#{J2S|)Sh!2=9q%X+l
zTa9@$6Qj}xoq-Ra@}shb8xQ#d7qWH5Fx|!X@^O5#+Gp=BEK1u8r-Py>gr%Tssmku7
zB4?i;DJ=yE$<pA_cr!K(LE$dAB>6)n>a-tiWd=_(RksK=Y6Abz5;b5mLI|>)(FA9o
zGzACes-Q@1Vend}5C)iY7*G)}1M%Udge?eW(1HnSXri;yq(~2bXQq`x;Yrz#0k&ke
zS%JGlk~lDWC_ny*-Pvc@4#dzy&@`+2PkV%<dXwH^v75aAd|e%wGxk5n&Qaf;{{H>%
zOIv<3)+u>drFF184*~^AoZL$_J<;#J>d$8hF1HEz)8d7HT$%mI=(a%Fw_CitukY~T
zzCPh-wvU#V(e-YoddEiUO$O~Gr_8a91@$Jc+rpZOpW6;!qTct6s-1GiRv51Kzn!ku
z>d;8_q{~ie0yF5Z-59^<YXgm6;>#vLXATUx*cq!zD=G$XZeu&u5Te*HqWE4IIDJ=3
z;X=s*MnE=AeJ9|E8#P5YEW>Y3>i7+gy{D`72zWgEJ6_;p$$k1u>hqEMJ4WhXT+1`J
z2UoHdw1-mEKE?MEYBN#+HGKNk5c-SiJgPNDBrxIO3hq2zQ?Q-Gzn`%I_?VYp&dv2M
zvIvf0jiNBnpf1lm=3_A6ApuPS)>4!*8O26GMgpxwaM6T-up7}x$fShgk;qe5v^RIo
z>TaB#z4r{2{wUbivuj#sL%^MIIAif88=Zo8VO`(VhtJ#lK)G7`AVbhecjuza-rrB|
zo4s>x>$20;IoY}UyhY=kM#Bz+WZSjeUwYHVtw){{#_rt79ybJJr`6`3xa`^N&f)n!
zT=yimh90T==dW``)l)vNIle^QUoEWPPd=w1q+I0(zj?aa4;5EaZaQsy5FJ4LeF}5{
z$zg##sP#GwKG2!Ph}IYe2=jqBViZeEZy;=DiXR5O3_2O25<n7mLS%x7gM{b{!w(P?
z0=P&Yp-_Zku~0DH4=E1BGjO^O2jfzI(jhjuT#kfkV(O}@xvr^qFQ2zJ8jM$!1h$Ot
zj<|y+lfhEzQGyM##zq{lAXVH55h^k7{GA!f1bGUfVFwO8ST?yXJa<ytqzSR@)8+~l
zp&)P=VnN~Zl9(XuOf8SNJ7P77x(<)xt!S+7C=bNv)>Y~Q9y=cg)D}9l1=&&Xw&3<J
zxv^Z#!N+`F&J80}F^ph1oN<Eyev!9FzDcM(+C|I^#6zZb^PH(6wkFw*`RZRKqg{mf
zl9?Qlv9lV2il@|KFqwkxNcZ?Hfs(3tFuHf%^1G+H=2l&mnrKQmT&@OD%(q1Lj~dJt
zZ;!_&t(d>l?g{8))$`(k@{a1p3a{ens7utuI^2=vshxrlD-kY-br`D+hAM=))3(PZ
zpyB3*357l{^D%K-(OTUkjEoJ4X>x<^UfmPAA7hlXG?QgK21ybCZk1lxS0Sifv<291
zEjcA#Q%-#E!a(4PJtQIWk)#atL{s*GU*JZt07Zc#S!1%fwV7fXkwZu$LI=?Jii9b&
z9N7&))d3Vh8fPHy4GD@Ijl7yD&?%NGuJ_OccYXkIaDN7{Ux?ntALbeUyb?sbz03s#
zLfJD@r)GcJGkZS!PFErpG3low5RJ#jCL63{qLHqyaMc*AVNejQp_b+{ucvHN$a_^~
zK+n|6Qz^l#n5WiWi;#UEURyWC?C}74{5m0i9bm^jS=(82np)-?!p5j&Hj8-6#y5q$
z-cZx{GVhaJT^!E3OK(B$?9)Oq;h*nmgonr@l}$~5ny#*74^BUz-dtT@>WZ;S_3r_}
zQNaQi9BKB}jHzND-dA1Yeacj3_qnU%q4vw$L-Baogt=3ig3Ri*h;4T_HQn8u6~D8%
zu3dIG<o3Gdk3PPnwu7!aYL~z(vic`K@vru8PX5cDD<+oV-HH4Z>R>z7KUO$}07IDA
zm>ULZ#zLtQpB=zl`Xly=k@2w#_&57?*Xi!kJ;wQT><Q#XB7^vAZbYO9VC=e@BB$w=
zeCM@bbhOZTYK^r-`GA32`zalZp2u(lBi6_x;2QK{K1ATnNuwgnM+j>Y(diU_s7c9>
zJt9<SRq_L@|I`sGzL@a)eEtMmbk<oz6St`^Y~8@ZD_52yC@@=Tv^I=uWsjPGpIf_f
zW&OBT*mo~lg=MYbyP-r^ccQc`F>NLo6(QTdY?<&%(7s~gGuhxX6Ia@TxNd)1c%NSn
z1vg!?!9F%t+BbteRT}T^ikFtgySn40Y{9CQ#s-^l6%*Z|a#r=PT|QRt>uzZ1KDuU2
z_UG&)_39e07-r|Hmy8d@CawADtYBN~ud`dnC6l4WwkC7cwB?%@#G0C73m(O(B@{A=
zKYo4MwAZI+m;dFW_8z_0tM6&w{t;apJRSqCB|8-3|G^xy4{cteem4EFg?KyO^H>jM
zvPiWhJ7a++c1XQBBKT_Aev;X1adZCx?O6i7i}=MPVM!{DFhM1no>Vgi=FJObSSzE4
z!cz06q4?jt9&?tl`>Ym||8Lbn@fQ|L_G8v#F`IpVs|l!&x&>B}_z$1B(XGyIsHAWY
znA8qOJ=@^)4xPoaU-h^g^}_jK@kTQ7$?aFf|5I6D)sIC2%qiC(coF8shYu$ie*)ue
ze%G2{U`NRIn<&=&^cNmI;H`MZjd<VtpGTl)=d%@xm^8S)U#_Sd!ESrP&$tl*S{-6v
zHU746f`VFpr_y3|y~WgT*zL9|aiKMuO$cfv3I?0K&4hn-UORfaaCwRu*tY+`)hv{_
zo+*t|1tZXVm`h?2D?`iK0qSQ5zZ8jAjTN+=1dHD!a2XVDzEj`SD*T+ir<OkZ5SuV-
z7Nq}?K)BqlR}v^C0$dxa>~?#3I1s@KF{obqiu%g9@l{o^DS=Z{*u!j)-EktzHk%L~
zUeueNeuutfbuxAHnCfe9zB#!P8?xVF){CM-QK}``94<NKcSM~>{Bxq4Q=lI*@*(t$
z0*llTSuC3*FY_i0Esz=DU(#!`f?@wi{if=Z>r@~3asMrB8H6RvvkTcW)vbP8ZeWX4
zzxps+&i<@^TXl<*)K}C$u*vFs=c>O&LTuva_OepgZ3^mp(p%~u)K{5Z{k!@f>W^5N
zctHJ;`gb-C%!>u<(kED#4A{XPx$+SHa}?%+(O6P8P)JhxL-2PKS-#1p!TbB=d;5nL
zMMOs=yP`{Yvn%^wn}ki9e$C!VtI_NeVz`$Lz%L_RchA@F7J^6AM{gFM+M7MOSKOPu
ztXH`F#C^w(VO);r;56Hd1-i|6n#b*T>ceqoYd9adu&Oc+x`?PF5k{oi7$_HEV@K2z
zymA4)N+`DI{|3bN<-4D@&N)YxIVoqR5q@8N=Kc5COtz?XZfomYb%y==nU^drYn<z`
zI3Op&P<B{6a~sQ+UNZCgGyf!<FPq<cb%olx;??)eGQVcOpliX$4LaBZ+E?D^A8Ad0
z$!te|Q9b|E{Q0*=&1>>b!5Ctr?PZ$sZJGC4(Lx<*GmYK3@9};69v2?xCz*86!x1fq
z9-^Oe{|eU+0lSwM-%%oRlZiDYBcsgabpN8BFSM>vThx{{TLd#395z2-=dk<PIpPuZ
z<pJTl*?Ij8p`A|kz3!1Om%j$N33*p`(O7_$HaZj{d(8I+3YLqBkKR<!&s8!;0~t<(
zT2$=h4*{AQK~EBs8OR;j2r7DxyMPde5d7m8ikXqDf`1f1%EuaawIs?)<5jbg7ubKc
zZt@&ax@GmMOW*U%tQ)VsqkdT1kaCx=PIkQa_T-k;%Zv_NUDdKze!96~#-fy`B&>J;
zUPumj_0A`QOXa%S$dG#HKaV)PHrXJUqTZlMEURp*D&K#c?PX)`>TojQ>yzh(U5ggE
z+}3v2ww-mQmrPrgHX82`E)7LZ#<AlK=E`7c)MO|tH5#Ks?%>9*S)OrYMVHZ2*%Ix2
z-f6n^R()lg_{@W9puD-%bs!$vZY>)VYBn{#u=iUtgZ1U*4oibOw!C4kr;~&cIo+d?
zul5rmlh}%uY=)i|^mJ>IyR&mweFZIu_7x~{W-C@zr5Q1cK^!<Bg2VsRurR(%#1S|`
zYwL0m&n4nj+@}zRJ&USpS#4s;Y~zZ9eWH-8pMKL*o~}gQT@TmAyS%oB%JQGR9;s?<
zv&fG7)Gha0<)CBiJ)eEIvfOcv$yK}kEft6y@!BTI=&RB*quy=X`dubI8K|g`#<A+c
zu_@eH+u-wTbt6*E)bp*YyT-5ZR4if>y+OU~frPEZqXZ04#L0$|tY}D-NPT^J>z!>2
zLk;VdDSg7vTYSmL<dC(};Tc!neZw!R<YrH$rN>jc%I1lCVSm>+G7BEY6w@(XH|*G{
zSt~)o`-!M-5J4aV2N@%gOd!0FRF<O!#m9U6kFVVF==S-Mhi2~V9_NvnLHaK?Pkq7`
z?ix4$l@FtxOlVuZXU{|-{Hx&dvoBa)FB{YqL)jDM%`FJ%Sg7aMBFHANwZS6*`ZF@<
zz`_T&TK=t0D6~iK%+mJGy7sE(5;H@Xh~q{km$Yo`zM^*dUF)Y^!|pF^zd29)n7?|A
zpWXOlHr-seY|FBeud8b&T+}y3VB@5*h1DnfkCc!_-QhK%%f*~17U2n>IBn|vW}Drt
z-eWVGJOi3H9hf$!nudR8+Nmhg011-@!@NC3DA2QVhVsnWtq@_vVUsn7Lgo{)!})lf
zHnxUxXX|Z}q6~&9Cutz=WXN1iJCP;&D8)pBPR#N=xfBTp2pd7-lFF5XXBc!;f}%nR
z1Ca6zjC^CAo!5Zpsbiu(lgpE2dZaZQmR3Pl1Nu#$p&}HOO1KhD0hr0cDxiUoC%PDR
z<vY-xaqjh)W9Ntqi&lzo{m`gwqUSlshu<Mn0MU*M{Eu}I3!C5LlXoPRT%I1kYT1-Y
z3l}!saoa6Bc04k3>z2y;b(?1FUenyXAUfrc`fgeI<kr?$mpEtk;|#$A*_8eJpAUy4
zmAH}r{@#(p<>i%?Q>s#3O>1`S`<Zm<q&agYx4JF*+s@rKMs&j5T(hOqaa(aQM;$-|
z9D^wZApmG+;hWiI^rue`?IP1I!JXZ;240!}o;^=!$?hKdXuoiqc>d7)!ab-ztxcdp
z<papg0lTFn@a$IMc_Ueo={-{J4E$-b`qaoyzz>i(oNgfzqrSy+Qa-h~$kCFl>tV#u
zT0yo>Sj8|%X=Z5eLYl_j3H$wFA3GlQ`NIC8!J3ZtWgQ*Tf>iySj%6K(I%;b=*zAUs
z@a=8sq4nu=XBezD!_2jBtet7FSq<zc{oYYi+aZ<tDIe|MD;+iJqS}s*TK4Ul4kf#(
zA@v8k`-65&H3)aI+mb)swd<$JD{Th7^<YiSL95<i%iflMtG2xz`zX;}pP@;NXp2f_
z1S=4OdG##z9~jV(lIRI-$FGkYP$?Ftb;kfo9l{Z@1K8co2_kr~c7xu*T1`I^<->Qn
zIF@m`p^X#2_+Y@)f(;Nc7NdxOl%T-$NRFKpzZ*Diiyv-9$byI~Y_VA7@fF$<pa<7J
zoQP{X0=7?b9<h_eCQhT%F7PE0pP?tn5BcCd?VlbSw6_&I3|30yiO*>z<qF(Z+Jl-p
z!EjK4ygq-UK@Z-SsswZd)TuRrV3meSy7YVSGVUO;uoKyjZJ$_InD&(mR2(Wd-~Gt|
z!w#K3ZwmSVH3CtGtc4em3MWDlgDk0#BzL1+sV*peC+<=2B<`tft(1rwozi04<T=BL
z0BuCgn#-8Jg^!fW!tE9lLhs6}C5IXQeCl1`0z}bZHo=n}-dHfmSeis|T~RQ=o!&e<
z8i*{9SP~TuW-)o)HXE~7miQ#eV@WvL^+vs~Bvxv+xItC8N_@_3Ze|)&BC^WTP?^9?
zE`wPwSqv`5JOP)7F`vnpU^axC^qE7xu}PsO6qZdESu|NavrKitl2&XB&XO8eyfPB<
z*#tqaw-{_<>4H|Dx5g*3@-my-zW{NS^+s=4LU=S;5ULvFYRU7E$thNp8*A(h3CX5s
zqQ~5@=c+ot#VX*Ndavjg1ef4*RI#r4+51F`-Xy>#L9~eMYl6w8mrb%>5bZT?ljVD6
ztEdNv0*uOqR@o*xU>7I~%q&O{-x-<HE+joZ!4UArf^lPfZK-Qh-0e44me(y)=6dR8
zR5g{BJ&;mTRkZ=xT*+W5%gpv=uJVAlCEQeLvbhB-ELJK-vC?ySG_YZczqVF%d(4-N
z>#ny*Sp3}O21M?Rd(O98C84<|F{P!iYQi+&Y*nsLu5^Ihu$V)k)=GECZL$l#xZCMb
z%xz~?w@;eYGR~3+M<Sw~*&RV=NZQC0rnlnOAzEyDbrCZHuFGga`<fBS3>_}0ce(?P
zl902^TxqD4$DQx-Ouql3YC)>Mv?0+^0b7X9MdejK@03cTh{%+U%}ktHqQF-^C6`xw
zO``FD0}P~L0z_&PDjancf@m?ZGR0TUYN{lM-RfudpltLzU;yJ{R+GzQ*P|q&zCuzY
zP@pguLKr`*Q*oFilK?v&y$CF+j-b`jSz!_lC6mW>m+2px;ND~mcq=BCmMTz-PuXY<
zOa5z2j)rQ{(LTN*&~0=Yh5whf_W+NhI=_eaPTAgjUu|FYx>|LuiX}^yT;wh{;oiU%
z_p&Z@Y`}m`F<A5%LqajdV2A>N5C~v?rUXJU2@qOB4H#QH{+~N5*}@@#Jm2%V%+B2D
zcW!yhdC$u$WMz8Y@Q7Sm;An!nZCaUSSuojY3}>m>9D|bq{)XtxPsx!lnpMKJ$><Xt
zF&<MH<b>l0=VE#0Q${LhbVQ?(avB~M5H(A<6VIs~Hmen|XCr57cj;wDg~y7PjIZR*
zau8CZLCaPfRJMsKeNi~1P;*LSAkgMF^Q=afBekooDqXYIppZJ`(kv}2%`0n&8lEg`
z4=C(<tB0oZo?G5*zM^dDv)$`+EyUx>+1ET{^|A%kM<y1x#uz3LMy<<DY7ZaQj!U#`
zY-r{E#X$#N%b`-Wx2k=mUYAOTQF%~~)=IKqH7Nk&Ngcc#Ga&^=*dTTKM`3wmBT>#z
zXK7m|9Wcfc3=~;>1jcJfX#rU|Ppz!j;7pMyJxd%-z##=(QTY&BIZl!@lVSAb*KE2t
zsC)F&?X{LH;g7;@GHG<l)t9c1ggN89H5)GN%OVBr+yD26iP=l8>Hi9oIy36f@s3g3
zRt#I$TBG}b-9;4UrV$&5Ij9vP)Y;Np6VLT3k-c!=P<<;z&y-p^C+_T2?PjhnuA3&)
zZg_w4<Qu0qYc+&_{k1z9zTWdijqi((MtsPgOUPBXo9=$qIjp?KA_P8ufT$hG$~JdA
zhqt47vCs~9=DDGlrxbV@Sx3ZS)=8#gMk^~|fsjK8G`t+Zh0s`6_`HyX5VAAko@iEd
zOxp$Ui_zMov96iKTPO_CG{j;+9i$>iMx50MTey|GHd-~Qvv|JOonzEpncEx-<v9y0
zm)_IUoLbTpX`fKDtJ|72x}kJTaZZV+r1abUZ5J+SB#YkPw{?DJ+ZDpeCzj|(4{Q*g
zZjd)i#+K*VRd$(7uXh?c?f!s0nV*<k;HzKKRy(C8tPNSU=2)~eD?dN0CV%R-aLf5u
z?t6c<e#sMrzoM;k{?^QfaFTAI4p>PZbcYu(#|MF)Yep>~>mY?NK)j*MDlofYp2?IA
zdWFjqQYB^@4u{F4kONMK_E=?Xxs$LThk3UpU19S{Nzmr?e_{2qb`9sV2yanqH0d@5
zKGJp8aZ;((RpJ-E(g5Ey-P)#3bab(6W+bgQb9J5E$fs<9fcfNuxIvFo=h1Dgwcy+w
zPuTU(HesXi2ZPm;XEiGog3BROSUdQwi5UwQ_J3+1m1G-UYluB@01JOMr|AGf`7CDG
z0ig`8Ee4)kL6qbPGy~CNdwL7bt`jNhr{b~f<0Mqx@25+$lS$DH(Vxp|&m0t?&qQTw
z7?k*9V*W>p{DU=}4O&dJVTtJY(^>`^lPL~F6O|IFf&j!DWck6E9}tqnN<Dwe|6YM;
zr^bTbf=2j?6yN9n%~Kky00C^<Jd&E%25u^$XWL`jwmn9G3&|zpw+nN0Mi6&@S<u*6
z0Af?8QAcjvE*!|Mh<WTJwP=x$va>z(gl(B;1+U04#Mx7H@PM!jr;8}`p8X5AFzRgZ
z`H&lBbVagpDgs^cAL}3%1zD$XOne$PNmH;OFF;TKQt?TS2u1Xly;A5E%X>i&LS8)c
z94WDnS|omqYiN=XeK3B}x+|c@HmfZ(WQ<~YG9AvJ!q|jbd#I*5WUrl&T>ys=H|eYa
z=2P;fwY|sZguD`qxdX)M>uI;{{E0Cl55B`!K{}wLHeN|4VH*Yn<g*Q9SfO!lQOZw*
zkafssaRZDwfN)YdGl3=tagv7+=p$jsl@<eJQy@3Ndeb-M#@9Z5?ZzpYAF_ng3vX+5
zTH)=3$}HtU;ccx>BfJf$tm5E77<2U`gq<XGP!UiZ1jtdRA)$etjOxr~aJ9IO?-5=C
z+DtnAxJGk)x)g9UQqsfg4C>>@HG1qNC7Hcyb!M;d687pf$B(PUZ=T|xM7)L(EmRVw
z;~E{-q~ZvOOr2pdE3KGuy*wmJ%9P@R0*A2yuAhIFS3E2{e{lXEPa&La>y?-<Bh!To
zj_su>W>-8zjMwKGjQ$BzcAdCp)p^-It?U!LP5Hxpchm^Keq$?$57$5a!Z+()BJRD{
z6WgCQN}23z-^iC&TytVqsnMs6p-*RQ(ixw2F8vzfP=&GB|8F?{vwhrLatNCSGk0hY
z#-0-r+MT6XGIxqGf<)4vq(!0^mfU%UhXXyCkz}3fmG;0s&`8l>X!W^JfDuz9HUo@{
zuuFqpp>Uv)!psk76{RqQDF$&!v^n_EC<X|E2=v1&tF#A99!*E!2roB2%bSypGmBEC
zbK0u4x<|}zJLr=Q&sQCz4|MEa6Bt+TWjpQ#->T`}V@{zZoqC)oA7_w~`M~N|5Q|_k
zJ;Up>vyh*=Kjn%>HQJW}(v6${w!9Z%lq8ZlF>@K=Ek<&|<By|*pF(_rY$Mkyxd0o`
z9iYKb(<Rj`7^r%@G=jMiHcZZD2IK>IT4DB~B~Y_O;v9%9bdID;FI$4}a;O}@l!+Yy
zZ67)fU;`NEa8WOT7DH7N_&*q17&?q>qwQXMcFgOOnF<0N*-^sEWbzzvC)kr_vv+i5
zgPm2{O*$B>IAd@{>+WUK><(pc@%$Y%QkK)@5Tn}4^Ln|tOsDsh=f>O`Mru?jc?N+S
zjv9?oZ;e0J6*s%IG6n*@)S#6c137i!nnDgDIU_YINmjH(${tUCloc<{sdVK)q-C~s
z^SX%F!SQCb+A?8SAq-ab;ILesL&}?2F1w-0Zdb;3_7dq1y_J`mAZv20%2Kk(?Wvhm
z?B<C)R5iaX)~Hbj6pYoRaxz5C8+`t%vdIxuU7*mXU^r*)l)CwAl{!kS!UD{$Q^4vV
zId!-6dwv9L%yh&nL{#kpc<3eJ(>gJojYahs`X@A7)HA9Qm5P}EkW30FIDr{C1ON{u
z1g5dIMr=}b5GjQLE~kiOEsekhAqGW;iWew{c8QDP()f-j!!>b}0<_?aiq6~yI>*3B
zi`CdXW~Cg76+JS8SL=N!|F26HjVUaAW#N(;&=GruQ@h?1{-Ra%60++(*a{-;SN={&
z3m*yJzP9zU)P6F#y&<2IYIRcSWv>_H=QF%ksji&bymFkwB+s?s!OWBD?KvFpwAYaF
z6HB9tl5(fq9jdFlXQI1E?Q^gHx<AmO(>ncuVOg#lH7*|HYd$Tnnm)HD6gV_v+Ekb4
zp_-m+TC}!*?8^M?Y`$XK{JN&qk1Sq6xYYg&+mlym)o2Awb#46$jTWSN#;OI(jOptu
zaCbaIeUAorw`cR3Q9bDuE~l}?)pf9WSllS}RTN5{AmKP8TP%l##6<JOQyPLORCq}3
z29Olcq|6~?XvRQkK(r=z?ty21f8f%m1Hq?-8`FP!2rzXn{?MP&50cPbf$7sH9>4O+
z<9w~)>KD$L^#-v&PKLdn&JjL-V;0%hPd@a%E}(nDen@49b&%5#O-QsX6;-7Ym_{)3
zVl37&u%3X?ma&!7b)K&CFgV2vc<B9{78(wQr#j3(TH2ANbd_J1HEH_%S<^?==ncz+
zeMd}4A#*Ruof{fHebUScWBtpYyJ&g6Bkq)0TbpNeO-SZTTQ<*}P+RJ^@*sL}wN{jA
zBc*NU)`WPe8U9wNN7};jNi()IGtt_S<HvPW8w|D*seQ!g)hl<B`$w;=&0@7)hf?{0
z@B?v19OSjbTBBT(*S=|Np*c9RBX3(TVHwuosc2u(;x?GFtLy8Fb^3K}QuDC(rOS3S
zJK9EfPa4}&uG4W-oibZ}yvoPeMsDt^^%~KA*sCv=*{Ta7OtFNMSb%~446ZwhBsYuk
zRicCis~|Pe!6av(|HFW>Wds-QvlU}1h5qyxV^(mlpUfHjzhVqKa?A?iY8<~>_=ad!
zk8dO`rvOwQj>Y9oP2*Ot9wKK_hBC~WVtf!r`yU%(p%oD8e+cg4QUi%h2a{}O5}EG*
zZ-HLS&Y#F<df>kWd<|*0G}o#4taLmE^k0-iGxUlg8Xl6I@jpH*%~?tx@JuRJn#pu1
z@%_I=rNM%Y&`YFTCG|8jY9=GAaO%H4EqhwG9gJlaZKg1oi{db>rau><CW$!BhD_L*
z!AxUl|8p=H+efig>VdE^b)^5<Ul0$5R1wslIVkfQ|3k)r0e^1Jf6E&%5M57(#`gVt
z`hbi~E}aIM+#)H*C}0!CF-T~}1m*#-7eOT@VVgJ_v1sWO#eq0Sn5yAvFu@5#qrFV*
zskv3ck;nH6-{1Jk-G+6$z}U0tweuNQ)hRF{#tdHwF?*QpVdUBg<&D$lH;2hx!U8?{
zL(K32nf9j#-@TD2_C7>%>b8}?cL9itw!Y(Bo<jblcl>r%WpI?%Pj4J{j!bwjl?n=A
z?##%PqWmuA8zS)5vCxk(#bC(9jFU0xQk5C=7R7TRzMFn&JpLe}gI6mL{C!MbWW0*I
zJeV8RWO=t%FK{h(m362pOLR55=AN7W`u2&T{v&qlpQUo)8&gl^+xyG^_=H+E&E8{g
zDtj>Tm&AiGOuNYD{?mSBc+fDm!jX{TQ=<NBX1I(RCaM@z=LO<@=z0bj?tw^8BS&Ps
zWpKq%PSXQJW43asCxpYl?bRCJ01QK+v3)Z5Yt*8UtkyYg$mx>#IZQaQl<E7eaQF#e
zqGvS{U^h}WdF!;(YbU5y`Or$<Ov~3!8(a|_2-ANO`{+1?d5FG4Ca>l|>^G`1^D^SV
zM+ZBRqk?)b(96%pKAv6kG#;Gx_9RUJOrL=Ch#REmXQRXa?RfD@|1DZP<I73OQy90S
zkbCMS;6<a}H!3?r3qeKzn7zdcj-$08UJ(+E2t_5b1SU5djr8?PVU5=T=|@1w1JhT~
zgyxT=-&`s0k1&hRyE&EAm}FI*omB`|N~Uf;kDHvcML&66e*U`2`Yk!qczjHA^U3k-
z_iuhtxzyzbq;+zB&os|XH+iP@6ifoRmD3iMw1voX{fd>OH<>K-+Z~L-ZeSdCe_=8y
zv$DF<yii`Lj<w4ALrX*6qHBtT*CRPa2-bo4PL7ac<OqezavHzGGCDcXKcL|v8UfgB
zv>gjbD+f$Xn5p?QtF#T$_pgT|@$@QGPJGo8D>TeAt8fg6onA*w0M><Bp8uk5?6i9-
zWaFv}J9P=+`GkC2O<{*FalOY<J0_90cfnq#wWcePcT+sG13<5G`FMJ8{8o##W_(TF
zO$%<f_xF?X1;X>p@iDdM_^a=-IIAa==ijmLcDs$P+!j}iuEj;;q_SK-hF(6t&u*(3
zU!LE)pqCz!$h##W9aWv*rYjeIUm+JxEFjgC8ezyBN-_G-vS}?09R$E(jR6BMU5U^@
z(V0P0B}3^eADjeW+@$S6T2jX+!gXXQh=c{DMBthD%*Mu<g-;f$bCeY^HW{l(WcT;Q
zDr&=p4@FtG)@`y|%oe)|Yb;R(>wk<jIeCm644SQ*Lc@k-t<920<U$7w70jIMs)|^6
zlp|}olQF@{O#wFeF)_ckjiT>`k2(;0!J{>|O2$aekt_pC0cNlWBQj*NqU$H3%h)ui
z?qoV$6o>@NL$D;;M02ATJ{}%ng;dfcXd{fw1p6fDH854f8<GVBq~2IA$qJQYJA#Y_
zQfyl{H<2a3|0gf!b#fQiA$(epW73*TFOJx(Hb{}lWAvI|2_FxX$+DCS$k=DECaML>
zL_5c+rAD;odO-?4m`z)jE@0QsIP#m%s{3yxi%G|qJ9mC592Bk*4$?J5vvrf&4==v>
zL*Z%RPT^^~#-wiB-EW#fR>F=Qt#Nm25b;_CbGzR|l<+O7jV3LT3y%tNHaS?@`}o41
zF$uNZ<kET7A%4-(^jayOm&JAc`sr7MeRG*R_b<v}%6@d?4)I}rc;w;_N$pwBfcmHQ
zwv-tAVx;U4#K1>Fw7Y~77Aa>jb2bAph2cqyb2hF{`0@kc^4I@JroH*5@Ck{3%HA7J
ze{=QfTZrXPG(~C3e0zG=<=@}#yeD$(it9e|@}t3Eyl(l}7SBEY4FhdhBIcb^!*gCl
znFlPvfq4vU4akQLkM!yPH0F@Xp4CK5WGsrIY#-Z~%66Yny0cS6LL^vZ{#CoPf547v
zDOQeSMJf?e5Ldtea!LXg_#yu@^rU^*gZ%^VuaIC)(1`K^c$#TLNtk$0pons6AR0!$
zLUWQKxeJ{spst%xMbvmTKy*u_|1@&<2(Jsb3$Ne98JRk3nUx!DJ=x2tx%A513Tb^+
z6{A$>`g95<Q&rWVnkYPIwQ@b!&Gj&ch2IZbH4Ohq%|kL7qc4yP&<$S-+&CxHHY_5H
z(yH)BOYV;hYm2<Re!jdwPI`bN?8W<^3mgKn!%|EOF-72@FoD^W`ZJ(r8R5!E(A8os
z#zJ<ArY<)-sfh`v?weLslGjwf<99jXtGd?|md7iq+{xfb<u0ZvU8_<tPY)x{kl1B9
z-I9Oc$!b5j`o)P_ZFE-Eg@)s}4Q(&{`{EobA%5D+5MQ0?S)tM_n+#7Ok~2WgViSH=
z!n~$_SoqCbH^IKOb}j5yH<7$IURnRhmcOJ@f7vo|*Yp;@ROn#-*;M<caG;MKK&puQ
zrL}+j<La&N3CG{tS~PrWR~Xaw>2ZR_y#^#BMQ;Q?NEWr8Kwqc!wGt6zh&EFKrvp{{
zN~{S=Y!iu^0Jos91XK~^De&WAO?3BQ!NF<=uyq~mg=a<yj1E?=Rj;oT{#mC-oVK)R
z?V4h#Q8-%G9*?(^-^Sa^uy(R#c4+HE_0Q45aJlmxlXTd@Ey1#qmN4x4_Gg|Yc9}Os
z=Ke%~B+K-=x;mX+DlIOSzKV;XEp><KHOsn+TSDDZ;>r(~#oOa0#k@s$PSzc6DGpZY
zT%MiJKfg1}p{soS^vIIw;22}*cuMOjV++=yo`T|dD%z@Ov!(S!t0^oRsA=_x^+YR-
zRun2H5=~%|fM4gQs|vMD>7n5f8#?tsN@5RaH1W^l8V#@Kb6(2f^@31PSCF5~CtaD}
zHvqx#ExV!o0Lk}Jze|zj2?JMi!xC>^ZcUbx|8oD`UrHT5QaV&bC3|pDTvIB|$&v2%
z6%>eP4*a&})c8hn-$b+WaF^U1-Y9%4?aZpl@s?;DwsrU3yUt<P6q65z3bAMOB`-#w
z8Z>6`1&HKhr(r4L3qt&ZY~Ue$d;q9YOJv}hM+5p1Omb%T%HEakh-=S^t}!cIW|NCt
zvYY;N*Q~sC1sQXeEuA^!svEU*$tdANv&&^(v#x9Tve5*SsoPZk-nva@m)o@7>0Un?
z!Atj^ZD6Nk^lh>fKMh(sMon0&1|FKqIv6qslh=z6Ed%72Dy!IIOJsI&k(zNe{r5j`
zk_^X6`ZxFWKTWP6!%seNfB&|pQNmWNqVSmX-rpQQ`2bN0Cje~8WfmX!`rCUhuDV6|
z?tzm(+(*>4Rl?Uf)zvuzW2UIDP+k<|WI}{Ib%x>RC*r31(n%p}+BT+-9GkW+IrRJX
zl4DHYwrN6EI=PMW4E<6fuero2mvA4UMJq5i)7)epXyn;=e>z3@9f-LGcf5hMl*Uci
zj^i)l8w{96&a4mrQ~Gl<d_B4T#TQ@fVl3&;$Z+9NT5tnn#-3IItdi@wkNUHjL)f=W
zxB|ztGKYxwPhg|$@4Bt)_DtdF)gk?h+O>lC9!c~%TH#{M$B;EW?N3ttH6-F_R*bkE
z%xs+9eK>1JJlEyUi3|T4SYbBZx6y2}B_?h-TH3hruKPE(H$8SVQM-|~4Xr_@In|BW
zVgnhInnHim#YFuiJF;qqG`&6hB@?p%o1y+ku}Y5rxPFzA>{ANai<mpMN)Ah&m%Jo-
zTk<!_-zA?&{vr7SbzJUcp*q;Kj0|)r6iMop!E}wy2z^yL{narTNvVnoVH4i-jNDD9
zM2!2QMokq~%nwo>BNe-q$cmhZ(g6f}5CD+Sf>5JC1{YNhE(3F0!pqbX3(RwM@_N|c
zFzw=ol!l+B7sM0Mdy|AsMx{H<YCyb#Oc%ouRN_*U#w|Kh&v4I<xMbG6hFt%Ynqft2
z_lELnT+xDAZGhS+q<JzQZ)6b`Ph@ff8{D21^~2Cvoj^|v?WuLlS?ZQr1g}qTH)zR6
za+Ss8;yIgC=ak*1FgOglhY7jET6kq)qEOkK%Xih~C34IbrCnXZ#`1%tmN&?>Ql(76
z$#hO*p?1?0eXP0O(<)bIWm(nM?>D&fvK;|!P?al}G1;T~4{9s&3~cWA(L?15m&fK{
z)~>Hj3O^K`+eU6-gO#NfAS4*o;1-7UNR|0&(@~!?n_WwQKqAZxwy<UOIm0U!CThKj
zdVP5By@#(ohk-AQ56e7iuOn>rJL|JM&?c06U%ORPS!-dO@oAf`H*?OVR=v)~F4S5z
zN+5)YCd&}E8gy1RrguKlTO10oX1m^K%4>6G=~)DM_>yi%EXJsGuk#kUP6`2@0mFH&
z*Y7NFja4Y}-Gp?I88a-Qs4d@6Y3k4^;uG$8HkVZ>6{d2Ts(+j_*H>Op!RM>kkox{2
z;Rsw5Iu&f8xr|1}tTY4tlHM>@EiDGFo?bbl;~Fu({1Z6Pa>+DgRgwURk+FuLorv&p
zv=R76sC6XM%S1>W=qad%1G_wM3Sh6nDM0zsc0|E!6pSFE;zY!kd0?&wr8l1tn`~l0
zKjN<7P2T10Tav&7>10G6STwUFdt$Ckoo6!J;)Qlku~Vxs*jOESa`jr1$`w?}mAukM
zx|OzkuRpal<Z2r=X=!4`?F`f5X=<t5y=q;Sb7VuSIarwG_QW?F5k3=+2p_$cidJ`x
z=qfa6+k>^<P@a5CW!^oxmeBa7v59DjNox%hL&GpDv)nAp`CT&g_Cl>rsm`;T<uWs)
z;grAxF*>czAm!Ag(3+p`9y^Z2s;Xjy+&E`xnc2|LnIxpPt&XsPg6uUf-7ft7w~JT&
zfw+4o-?d@ch@?j;51V6l_vA4*Mm!^38vC%}t2Q0LXa*LS0U5%JS+ZNQ2IGMa4z4Ku
z1XMXlM4({XWT3mXmejMX4KfvQpFUQG=p6zh1P(#hx0TaeK{z8y&FKjo3kEhe;iDcE
zfcF9NrmRd+z#75I#zyOzI${$C4z8egkGJ98@%p80<JU|cW-Vw??@@)r;rU_jo?D(&
zU#AYwZx4H}>)mt99&dA=tEGF*_>L9oaR=CWYsR-P*G_o6S+z$z#(P~a{(6#ymX0~h
z+zw|!lNvkPaUB%ja-FB?(Fv**Bgd~HFZW*OO%_;My4Q{$zEnTq*A43HRN?uNFg=hl
z(mS><pm)SyZ_}ZPIy~6gneFDnlh=-4JH6GN*DM~Axh}obz2j9YI9umR)%Zu62A((b
zEZ(Mk=ZLv$GkH6p{9^nahJ21wkUwmmWFcY*Z$n+v>Jp)!boM~Ci|rMz6Z8QFl};xW
z+VC;%K?kAOOY{Zm7ozQ4hK7!RFs<OIAU!GpmllpI;Su8(Ht@v8MltN#2yehAjN&M2
z{2H)}i04Aaqn!)TU}`&!mSJL}_emJ|l00-Gi-Fk*^s+fGSJuomHI1=zK33Xc*`hTx
zGxE9eC|qWQciQYmB}b%TRaN0^M%k!RI5>`B9d6c9mQ-&9ZPv@IOdauhoi;5;SiiX_
zWHK;M)?aq=IP-A2oqKccL$m)pH~*+mz|;ySZZ3~)-BsluH|nc;xl+!#{ao9<tuwA1
zuk(eK<l6od+H`?T1JZlM`#}9IV4&z$g9_t$7V%+b4<Bddjhvwa_dPes{;<n?iGl<e
zm7L=4l;FnV3{nFlW%c?X69fVdpgRjwQpuN$aZAe>QcRBNG&Y@@wdtJbh8!GYyZ)Aw
zzW!rQ{z<yr$6V!0f9yN2fvtX&Y&c=i^fr!ls7Dsa6c{>;Ot{z+k{O^#r%wLyJLxwd
z^XJOJx5<aJB=zihi!8!)G2R#sO|%1@7}M7(nTVFKT5^$OkK``NBa%L}hm55sW1~dR
zLdKvUS$-gX)7(xLDi`7)kuQ@%k|>eNf7|~5`*>4^z8HR_EXsbFq6_{Qh=&*U_cl%k
zwM=iU2Q-PXbe70@^dA>Q@*j7JJAQ6|4-hly6bGu#Guf4I3#=NJmMq+jRMnDLMGTM8
z6FZqoQTr`j5OI0-s_>JgLyrB~1ISJSSW>S5iIM8Fd`kT8G)kmiG74kB5_qw%knBSo
z@oyzBOWuPdb_$`9K7a)3Pq%~9W`D><G{$o<wXhT{y#LcS`!nt1=i1NN`)PZ^!-?%r
zv^)NPy#D{%KF@xhv$y#qH3*%Q&?V{1(Epra|M^dAsb6~Fnd2BV*db|w{?nDuoFJ~z
zW}KuA@PAlH;lTSrv~x+Z6po!fRrvbnRv$Qhz!2V}pItpkX^Ap?GR&C={n^v{|A%9T
zTnw@Z13Z(S>*IUiM@0O!f@)4ww;cr6QD5gESP1B%!6;MicH!*-Y@P77+wB?U{(vm~
z0JN-bp*I7tds}$B|2Yv_ml9GUw621L=mG8zKA<Ojn8DU%>?tYOyL8Y$OA*gF20al|
zE!BG<J5s#_@O_9m17Z)-sFiR4wu<>;U}OpgXwsPQkfX7WgsEmUAWlI(Q%5G%c5JA@
zvU7cnaQC>*j%_XCf?T?a7#|JPH|92fQQw$ue`M)hN67HnNs*fMopiZ@%<df5vaN$I
zxLD1ikt_DL(dCWlqoY?X+1oyP^^%(kpB6q@QBdnqbx+<k;pned9UZx-rv1hhShnq5
zF@N>w_PtA1jc&hb32b{w#B}vxOro)&kk4QYrL#`LlzCOWDbu%nMm`flvZfG|KV$j$
z-FNRE&whE;GvWRhXt!eH;b*Q&eRI=I-{8}UJ`2g|xFh(1d6<`@`9woMA|kP%%i+S5
zK1F0WhSZW`Qt4EZc`V(MZsAXaeCedS(Vb5ELclEaS@QrmjTB5H)0hpPEE5EQNlSt?
z21ITlh|EwEWF@giEs@COAQx(+_op}^iJXqHgK<wZN*lX)$U%4xp2|b?H#)dYpNq$H
z0iZarGVp+aDZ<<f`<XcTVga^Uw3{TkMp!H?=3gDMk(XINB(w^x{0|YokaQ#+LXu+{
zeqa?OjY0AN{`c7sebyJuB@cvhdiqG!?Mv^y_ull5!L>Da5asPlpLpVlbgj@6s?#6S
zYL9`li=n^zx)AA&B=wJxE3xcTD*N=wh_LiAeKO-y5#$mc`A=Xw@xj(!AZfrCg?F2!
z%%%|*5?(3e55O%Be>hdJWqz|Y>@NYc35+My#uxNsQ%rG0cZ281FRKs`l-S?BR7$Qh
z-dVrO@Xl=E(CcZ!zjWz~bC~pbD^8Y^*o%J<{*O3DPI*%37d~UUCSH7g{XNT97LQ$?
zYDwS3-Mc~fzXjb-ryofsKuafo;|MWb{O%<N?~=78cO87Pt@Fw^+)bONJk*tS=h_kL
z$5lB8z9GJ#*#Eq+|K#CKTE#p+XZgRV4M;Rj;^7MzWbcBcY99FEF=F^p4qY*WN~cUs
zY>5q#oGdD3s3+{Gu!C$mzxRqo(e`nj_uaPooI_7+V3f_n$&KXNEvegYzVOAmOI2;f
z%Txl_vJgS~zx%NlOt`B5A1jvKoKv>6a#W5%c<Rya>B9YQE}Ng#F-&RRe*ZmNFS`A=
zffzY&T}2~NcH;d+T}$M2l)?WJg&c4iEkTi+0V>Z^9RNlas=*@uckms`6J|+}MwkVl
zE*N-dTsD!&Rw6C9;`uACcs{*j*L;_2erJQvcU_02%bc~Ubv}FK!A+YVd~oxo2X_nq
zIxLJ(Kec`BV~&r=1*4{GtdwIw_4r|;;(YY{D^5OnWS2C@x2K~s>682AHEryBn;yjZ
z4?M8>3E?~8cUvB~Zsk;R?@dJv+4DFYRsX`H578avc%LRj22up7SnVaEaV$dP+@Mb2
zq4CIrhOk<yv{1z(Our$0M;S}sp7uM6nufM0!ngn%cx!p@vSq!3eq~q1bVpf1%^HWj
zw6@D??qd5hrm=g>SI?M#gOW_%ee~$=YyOXUUtt<iC%mzLHQTp(|Mxqe+p%NzoE>a-
z@3Q5iMlTbdyK_ZVk=cxE)U2`ldFI@H5%zHXu&HY<pVxo%+TBNAxkh-BgjbVSLG3Q|
z&fc-(xt%*CU>iR*LHY$S&l*@|^Pwk?pbS!QI|E{fuLT9l>Vn41g5I@&W>ri?f&GFo
z2Mvui(Ha1iNH}VO&g<oAc2F4t;36nVu;By+uJPrN>aA?EjuED!@2g}wMSvNZckt@^
zbBcT{_aqY7%7ddWm!=M@i%rJXYvdmtmEHZ<%5=2wE#Ya?`{vOxdvUPHUc~Hq)u^&+
zVxd}piz@JUQn_L0+rqRxfv#aS1_Qa)SFTn?$r9m8tB0)&yDHj4Q)OzVO1NO^@T(S#
zL(0QB&KiTUe&dAnr^5A~AR?Oh+sP8L@Ls*u%05spT>iM4%=WoC#%#@Vlnc)Y*M>(1
z%>k=bX=I0!#ZUiZtZ<om!sHvKH6b*Pb?J1qnKqKd_>{s3P3^i(18oF$Y@`P&pb7q@
zvO&%Rinll&IO>Nvk;2BP83HY%nxOt@^RQ6}1388?OVhV+Wsgs0?25ERVP|+&EE0^`
z9;D*zmtfJOHEx^cUSPX*CM%hFt8IaM+BUL@o;Mw^gE?}ONuG9OHsL}9goCExOl6k9
zcBF9hZPPbzo-Rz=Cbo417-4=XMb6q`w5^}k)dn8)rye-Nvy7(}Gh*3HgK@Lu%)3+n
z3oI%!*v)_P(IJ#lCcqSZfges}9(VST_vZX!8Iyu_9WRljFOkeF&%DGjD#;zAuOeiL
z)kL;tDxm*yaTD@D7Ic(j;`>P;SyBFLyqBneU^?`pM<(c}IK9OD2nZ!U*T9lL1{g;P
zQHC5spChCsLWwhCBD+2mm(S2;iqgWTOcCcZWEYknl3hS(8+Jq-!Js3u!vGXFx%%`X
z1<rY#5E0H57emGxizFAgB#MO@V8aq)k0`{0ItI%VD5Y^YgQZzwsR^Ya(VjS14j=&z
zuOmZZCAfLs-w7AokmIuQS=*QV^#HH|?w;U3gg;)tyC~?8dDm?rwpZ+0M{sd$lkmWO
zf9kdQvVAJg1;5@$^5<Dhp4=DD@&l2UEYpgBBG>GZyXL7}pT{gaax|rmpxnPf6C{R0
zTib|2S=j5#k%yaW)!9?dat0A<n-h5qz>=*X;8^v`SQ&KeDAp3DgrAcLuh@xA;PZBR
zg`=d<4p03_tdo51mGomi;T*5<g_jgEtzNRvOAKE0Jp=w<u8?pmC0fj|G^2eDF#F>W
zBR30JjLniAk}JV|c8{b_@+!PN3ED$3pu<0a5gVJRMq0Nr)(md5j3YKqt%Cs={mM&V
zt(QUujwTQ>MqnxgM4FbD0^omUM`j%X;ov|kMM@GAVteUvCTv*~XK!V8i8e-rGO=_w
zoddypK}UkYEyU(oO|oKfA7hGR%Au_RIi%5mMX8P!NNn^DF#hO?MyUXe5YZ^CBuAyz
zAaoLmQ4tEOMf%#4pPP{;jWHM)?Ifp@kt=LAg`7AKI~*z{W3ezw)pVPUQEMy~jk*Wh
zTB*WpR!FsEi}0SsqLk?wqmj|el+#Tnl^ko>maAr>%xuC2=oZxEl4o@~9aI9XR%h1D
z(rWcqJyENP-l}^|YjhfkRH_Dq0Csag*5}@Ne*Zr;M)&xhr-|1PuRQ<G+rMH|O08Cz
z{?}JZP1#YVT`xyCt6rLZf_z4lGL=H6A&XO+6pBqLMa#=CD3s5?tU%BF>|g&-ss8aV
zHQ)cOM)PgI#`o!W$Vm6yr&5JrWzH40e<xEJzatxrs!>ATw{n%~Tk@(&l_f~OwphL<
zCqVa}HZY$G%oj?XR`mrDRG?uJ%%7|Dde!ITbG2SC$p5Y}8a2z$XEq>ISjNkZ>1)ov
zgE4B@ZHNjMe(1B_iMB^&AdI3IXEcx*C<ChmAe{t;8VbdzMNHR!-Qp<3aNy9ga>hj7
zB70ZAgoM~V!p$$OCVPKo`w;0RGhZ4!{v}p2VcgvrJjUJQ`tKgHL2`y{a5*?8l{pSS
zVw`E_9ZV7@{DRZbcUGeBT!b+Rqb4RXao8LXXKXTqpXO606l_ghxNxwE%@d7RW<mR=
z`Ue~sncxs==LN)#+F)tSK{bPR4D&8t8w*GlT10``FvwwlB#ysPGhz&JD2%@_?;>#3
z3UEXjf7lI6*9ic+0Pae`^tPR>QL2SMsL3oEYnGOP$E&ou>S`~7xQVo(=)(GU4qQK3
zr?C@W$tk9f*D9E@M03cl(WrbDVpAIxG#Fl;5L{*BOWVj61YAL>qYM>lvf-j@87tpW
z>Z<TEtL-a0inJWJT{N-LyHnEWn7diH*rO(u>JvtU!o^7M2?;aC>6H~*p<IC^KIXSq
z3nyf1!YQ4xdHD(*!;D{g@usdDOJX`pA>z?_@A_f43oiSGu}SQ@oNif|jUiqc=UP!8
z=>_F32*pk3PFPZ*vcpA%CN-p;Wxmn4U-oTG7E0BO+K-oF$b+b15-I&yI4^>TevPA|
z*`O%f1ySQ{Y5ZqvdO^$W`%*F%#Lt9hQ~Pdj5nk<{#WM`}1&EZna`}}EkJxL5;b(RK
zf@)(^i_(k8hi0c<Zf66C_GGR_m}0xxX`y+9`78zFPrs+|feg=SCJzHmc&5K)>S63J
zs|Oki5QJx-ntFo~>>H%pY^E}xqM$b5MkoYvA@~kW?9WyLsNftU=J84%FU=uI1-qz&
z1e^PwZW2CepU0^YenL2@YGH@)Zu1jQ{eo)vbm78VWF|Q$<=}w5W#K|%AkIaL_Q^~f
zi|eTOp-#ROKBVnH#1e_)P3HY8s08{;dZ}0gP%Po!hLQr;BV~334uMWAl-Bd--#Lr4
zPP?Qdr)gAseNmTi<y6A2UQ_0)sPp}@7raYnOLdJ|<1#Huzeemp2>QDw`*c6`PC1Bk
z|3&YFAt(-S5J%N3gxme>D{!fPNgp+SjP6|uarzfLH$e)iK6*+D$1m-L*m8QjAGFH^
z!4#H29_}tYGe9>0-gpLnEkFNVf|O((Fhz<rz-WqL&;*)(OzX^m7|o<ozzNd-Y|Vci
z15-#I#Ozokzv|tq<d#{fQP#j=G1nW1^aH2=ke?gKQYj2&uL!rf9AnQtcdWxzPdb4$
z6r2bwjFi!Dg^6xpzRR?~N@S;<{tLer1^rUF37IabB1Cl{c)J1W(nIM)FSJ?pBI`;N
zMU+C8mf!^F+&}we34|P)JMvDXXF)QSJN4wC&$MNWzT9l#4YOy1%hvdW%RF(Su{;8f
zu`&~5GXH|F&lbq7>0>mN<XxiO_%2<#)xM8hx6dLq7~+=o!c*%lalP&u^R)hHCMFa&
zS6)+TjvJ{=dUijh*4JOwrq8ks@q@J{vSEUq=4YouF$=LEF4@JjTC@t`d!j%x&0q4$
z$YY#2m*5IWotf^V?@yH7M2WWlZ{I%w+rgAy_-1u9b`)c+jrz_Jj)?FTKPUynyhSiG
zAUqMa21vOO6rdZ^W9iQ5&%QC~kvmnTDpvmR!*UiYPWfN8cv-FXuV<GFt28?1QpT#O
zANc)6HG(TgaHVg)!IdMp1Ib4Su1Pq0c6nNgE3@>{pkLJV{|+nAL!+nm@Nc5q(1;$0
zM^XlI4futW(0Z&+Dmx`;z%>=+F$`--08{c%b07caoO2rfcx&P4E_cI%*(-V`x`@j;
zY3;gE`&aF}^~k{oo~)8NnyMR&zN(UV^8aqFW1e}|cCqmFEzbNRLwxxa?}In<yqDh+
z_6T1*+q3^4!%6H=-@lIb?b}Q^bu??<n2Fu9rabn>fKOla<+Aw3N@!C?SkfJo8^8o_
zI-fw6;_#rs8M>Q+4?{*lf6ip$gGD1_2)F*3nIb$OJoLNYv87o1MtGo;=rMVHc^Mg*
zzJq)5cfvzNlfHv34fMZg$+Pso7znVXSU~|SIp>ji?}fH(>3^H-I{4m&4?q0ywD-t7
z&`*A`g)pImWS4M#Zu;G9Tl!s%h6&iR8RREo0+8h2rQ~oF4^Cf%UjrF-Vx~<}RSZ*I
zE(2MIVn4)+wu!iV_&KCBJ7WozHtAvFJ})oAL?hICnfWHzmC33lUvkOkcX2xQWGg~>
z@BaL}sp{L$pV2vjL?679*l!~z{`9L2m(0`GtD8C#ot^Q#F%1oEW0p0nz3W%&ub4Tl
zv7>Bsdu8sZhQ_w8CH3p>X8H^Mu<rIxi1P1uocCCHG<U_VRW}^IMfm(Ssa^PT-OgF&
zHf=*wdAvENxvQ%==Ze*9cb>C2*;raREK{(9zN$DD5BT3H_a=?1Nud0!pn*^pUZupA
z00^Tj5tSm3ES7<&%$QX!=9c9_0)sU3X6E^ShyF8t!uA7Cb=}?d)XA@&a=V}EW*W(c
zOu_RclPZ>-{Zx1NQ$Vf%1X5Uw9d3Fmy}|)ud-_SSfJENUoGgFpK<0AjCt1h|evE%Z
z;>VXe18_1@Fu#N{v}Dy$lYcahh+FBgOa3nO3B5w!-!FNJjDG1I;T;eXh*@fdciwr4
zjDCtq-A8v`@^_NF?=`aGOWz0iLhnbEgMcy@d_;QkKk$7ipcWA}i23ZFsLEMr>E*^m
zNiljMCxS`D0CtQ<Gz=bkKMmiYre7M2rvpy~U_^9<GE^YqT?}?F;Gp%CT8q7Mn{fbJ
zZj%4`83c>Rk`;cwZFtH2PC&AwZk-Esg4y{wTFw0ENVACmqI*lPKgx2}QEvCVye^Z;
z7cdw4Cy!~hT58(tTvkqTwpOE+DP#Ggikowbz?sCpE1Y-gkZ|y`3z*$+64-JWdFkBM
z*Ij#OYe`h^Gw4gVEuZc6IEwvFsdR;*#px<qlI45kp@L-rf4J3PSfL&6@l@P+D4Fjw
z`wjZ|hSeLE&Kp~6FlfLX+E_BWeeV3Nt%&WO{n0hYNmoYh5!;#?dTtE%s%etNlC?nn
zT#w1l5(z~CLBl^Nb)XlLMf3?9ti`Ze(I`e4EEqrn*~(coGn7*3jtxx^u^BRed}y<z
zd$BCR1#lS*lmmxF%R^w&#cmOMi4zj^6!9$D6aZ>I9Sj47n+C_64wj)Xcy{3t;pT-^
zp1g)@-ZnI(|2o#{s+>8q(rfAp^75*M!p%o28Vqk=(~!6B6Rq}RU(=z=?xM1(WkubU
zhnjpJYqg*F8xK`aD#}}&S2U^mP@|C3P(crm1S=Pk9!@{A(q$bR3U-;imDb8&gx;j0
z;T429XfFCd_&s7}e*eKm7kxl#5W7<I!Gk~1LFP6}U%n?$TvGX~ya{T?;I1k2A0#&%
z^jB24XD>Zh_&9LS%OJK_PssaKWeGE7bk2mF(NjBbZ8CnPRDNY_y0vqvSTwEU)@I|E
zO68Zv=36_MNF$?~kh8xcr^0{F%jpBc+=KqI8uz?&m(F%qRQMx)?AV_(LB-(KX^Hq`
zc*ZkN%k29pbUyV*rbJ(s3^CW0uoy3ptf1(|FpOf9QHdS+wI<@yAcjwBu(VmQ6c=8m
z6b?EH45R2<ETZM6QfdcJ1gU((;~b<8z#Lc_57IK4R)7w_r53>0DOnSoM;S*<`PnH@
znU-mbX3h<@cXoy%caE$qshO~<IxmvFEY{qSd#q=qtGKwcTN!S>gkdgW$q6rpc|}mM
zfW4fn2@zHg?ak<`h$MyQiiQ`Lv=lS5hhmgJXsl0?YsZi4E)8$=c$QBnnXh9F&2c*$
zo}1qk)E{n2YI&bMPp&&}lpO)v=eQDNTY=41B&;b>thIE#&z#?7w)+at2l>OB;qvN;
zop}qqD&bJPd~C*5L)|+2Gh=x(#-YO)hiLs$8|GplsgTtp7@+wT*fLZpU7<aLDhrSl
zP%*qk?*|hJ>J+vUEW}w38eItqmZNf`rIh|C45<UGR&nt3V=fHH;*_2rdrB=dRhR)6
z%{aHj`HvZU$IbWbsjjKsuwgaPgmU$}HpHU&trI4+<_p&jTX$Z=!%g+WXFPd%PuEQH
z@VgxMF2_u3ombag;*o<oPil$uNdG21psUo5pIDpza%5%I=uy>G*4gvtuv2ThuDXc4
z_`F(~o4xr#n>-TrA-kYAe{7|2#8J7Z{f-(gd;Ga>&c1)lWrqs;pUj`koHIS(pOU_D
z^8LS$#%g*dRg)QD^LVnOJea-VNlv(W8>d}4abi{VBvc^g{(<%>=A~8;kSobx+W^dd
z&`(FbE}}m!n<$swWH;yBxQ58)FmSG&`4)_se1oQtH<eTfCgCu9>6u;oagR#y4*UV%
z$RlzEQQ?Bxx~K<?n!O@`;$~!w5)Ni~?1Ur>CmCdnIwnIbM2*apCK_K0`0o;qZC^gB
zrnD~peLitnc+7HIOQfYaR@<sy)=U1mSNP`UWRu0l^C3%V<v9<eIyzDhJcXY!r6!WC
zOitVT=T$co4QK9M7Hk?N>=5i$KjSiQ`sTL}ZLR4Z5zHCAtN<PR+r3&oj5~9hfz$DG
z&hq)@m|1IDzjO7U_fFl5dC)j84=%u@NM#`aWfPQI1kK5dG{3abQ7#}$#*Y#J&u0YL
zfhhkq#comz2`orhP_Hgp8!iCbA2hi*3JbwPhoi(witCA1ZUv4)duZcjhc39FxT~fl
z;4`a9!pL%+6Qd!8#b8nCVGZM}+stDVazMkA|BSB~lhnzzNqP3YUBTv6;~LC9RkfKz
zvdW@08lICI+p=MH0vY66Ccn8#Z>>{bMsjN!6PEI-ku9@ESMg(;v}J0-^JMuS7w0b5
znX@cD7-?=8W)2tRaCYfAMyrX35sT!5f6!STjzv9;6_lBvK768%HD@<*NHttQXnIdk
z?y7^F`IN{L?uU%rCUVHqK1zo@akLs-EoXkZnBZUz#7i_Tpn#3a5+TYeLYd_#dc{U1
z(h#`k#S*5uBs;gUF*loal*U~7`L0;$=f#;4=AN=BEs2&1-}$2Zg%57C1^v#VI#-t>
zJzRMAY0~-3eWdazv*eQV6Mxv<Ob@t?xcA>e+y^*iS4k<T<b)aSynL5CKaYHIcER1;
z4Z;t5N4B%9k~1)y-+BSr<ca&X?VqIU&wp*=L+6Hfd`-Mx@7VDT+7Go0oI>A#R|fn-
zu&3e;qG3vLMn`=l-=NG{P!dW@q#yXDaL&2329-vr{@Uo%C`>lC=j2i0{4mP|q$wR{
zgn!v%CnO%Y0uBjp+Bjf5$TTk4KkHU)cFe@~QB_pz^SCGfJ*?JQKf0@!=#AcW;GQ7N
z<N;nCa^Lh<!s|wlR$;OVu`tU9rQkDo;hht6$!K<l5IA%9H-tkL@$SF>oi;maX8SBB
zw0v&=GnX)%`~NoZ44HYcOdJ!a{DCi*(Pc}iWH`|I(H=k{g-Q{v<}ma?m=r%QWf!J}
z8H0%E83q-u1cZqn?7c^L{#>B=FH!3BvbI-O&wt|5F=H-$V*bp7Etk-A)B;d}v8Z?J
zB4WCFFCq`qCkDZL$3!R|>lU7)++0^}S32aEDj4OA`8fRuuF~3gDH32)EFsOzy=Bgl
zbuV3)$<mete?bq7C_j2P9b`U<BumTaML8VgAwP;H+bZ;DBx_LwpL>8@b(Z6hmq6?u
zdXVtQzxf91Fn&M9rzk%aFfXVsQ6;NGq(q#$=}<**)WJ{ZWib+A-;a)nqTVnf6_5cn
z4t)>}4PzEXog;w~#$Z1ki{Lk<(<R+^_7UQBrMvR(&(FIr&+ZK5Rq6eNXu|1f5e@QK
z=#wQehrRGnLGIl-His{}T!+0FqvTqJuBISlw-+2L$l0Ica0GHIbU~cxWF7~50|^?(
zlsX)^WbQq=4o5J*3OfV(n!=DhC6i@4d|pnew5%o<S(F^7v<N$PT9NtE<8$W8WI1-P
z7x_kQYbx1%w!l>qh}xw}&MofCb9!BjRB5?P=tIsR5L1!lWmvIA=!w|rhUdd}Y5$nj
z@Zd2XuQLzdk4WtBzY3^hY>D1*R4J-QL@7{T4h1Gs&|F;1!b2qrcn-4Ri{yl`y@Yd0
z*^pzgBXmX3x!4)Jdgi9a<fKV!myi<jo+HFJwRw_6>QKc`rW~P=gL~>^9sMO=stc>u
zp1<?XHLJ42AyJQ@{e|M%2J?<k1aT9PQ4(sSrs%?<9w&k_6Rf24mpyymS=%&g5lvG`
zdW2r4kAnIJc-?yYdygHHO43=!&J?mhoemzrB##~I@1<ta!4e_?n*+8PNeV{eREqo2
z9s$_ZGn8=yhlyigW-JJ!eoL%0dkE@~^6X(G$2=OQ^J*5#F(&fRg!po<5A1BhcaJl|
zbyGKC^@2@P$$W;=z0p<SIye&MPh}+ZkjF1jTMtg4yCxj8sxzly&5pt!_0_N>E|DPH
z1|+>G%%}<4&@;lb7~m`>2842kdFnKRX;3oaB^xJ=tNn^$zN#HJY2(KGHZfn-jm65O
zv2|Y|sE=$MDk`P#+f=niuhp-qLb%_?NizMK%8mDJtX!j)P1?vF8!9)6SVmEIG{8bp
z2aE9}WF=dHrxwk=qJ>v<Ou!m!qda?v*+Xph8AT3NCjw<ns5mItXqNE6BW*Bs)1Tfd
z&$L}?RW5-#4RbmjQQ=h=CnAx=4z3O}Gt6A%SbS%m((KTva*Tm3;~eax1>ZKCOv%Yh
zo)At7f2FjnBAx2Pw<Jw*Q}aosTBDqzP$-?sZspr5yQ*8MRJasV6j{KxP;+yS_SZ(Y
z5&!l~p@%AQm=k%?ZzwS<^X^>iC{psVaa#f^a&N&m&A4FlmWM^^S9%ZFIKlfmIcYLA
zle~cwab?#R3c6H?C69~O?j5+5(Ku}I{&=DcPF1X14!C@Ld06RKKXaA|hyZ9WLm+u1
zYU9HRsSL0LRFN&gn`8*8j+(;EIWTVc&J}Lr|J??}oqO%vFY7Pd{Y6}OUwA+M#qNvh
zzMOllm$Y2A^8D}4UwIj6VU8R*BHYKNenP=LIsAo_?BrvlN&QmChJE`sbiAY%o;Ws{
zJ^8}+nDF|rXml9KiJ>Kc>Yu7U7@IPDQ1zHiY1R;GVYn5!>kiY=A@hYZ6D5!jXKm9F
zjgDUbX@8jR^5dZ3&mH;m`~C4Uo)bA9>NwaLyc_};espuXotf1sT)&St6D)?TGRdDT
zPCw<2Figb7ochV#|KTi>N(;hPVQX42l#br<AW+J6M163_=u*R(t3+Hv$`zr>CNgD1
zvWp5s5{;f&-4$_d+2V?%|A$k^r5fdYhRjiF3}qc7I;+Crs?HH`C`>$a*KxQcE=)hS
z=pzx^E@g3}=pCRZL~ZT#1ON~Xut5lx&eUcc*{uON08|U3d`6q&Pp<)B?F42E1NRRy
zJM%GAHH^}96C?Sr?6UqhDb*1YaDnW1aE<FrV}H7j&ICXlFR-PPOkY1dX<|VVpm2$e
zB#s@UbtW#wF&^zy)Bz#q!v2l%g^LnQP!S_6f<S|dh4_{JB^(x(?C!lys6Hg@euymG
zP<UJKZeX4lwugnKpOUL03%TmZ0wAApOyLIckVE7dddyYf_C+}NQ*tF{61<1wlv?_C
z+>>TLszQtvMYxNSj>v)_3QAO@Im7ql<stt7c!9s=HejI<Cn}X0>1+=foE6>vkVT=e
zML-E2DW}+g0qxjgNR(UI1)Cq(jDO_2P2H0>Z=T$}>HXxWlfN2Uojav<O6g?xc&6DU
z<(xs;629Kn9BD0Wt8IUF?a6VA8qc3Uaso%>ei`8=j+%dd!-BCV*E({dFq=<r;y!7b
zZi(iw?y;*^j~%ya)wqFQ;W%^S#J1+C=^3_w6;Z1kaZ6c;a|&h6XQe8=&1b)Mp76JW
z%Ys>jrOQYQES*I7_41O!tkCj<#5M2QaG8ryvdqK7=gu9TZr8csspKTHAy4i_ol!q6
z<&!|m64QwpObHr;Z$XeC@yn?D)x@T*VtiL!l|DIvw7dzSd8F_dSYno+%Z(I9k_YJj
zv|M0aC;$HDo7~;~Dq$pkFC_j<8=icM@OSfRWQ@v%95YffhmKT`I%QJSENWZSf?);l
z!poo|oEX;_!8Rr%>f(a^n0^QrUm-z17`_DZ-=T;mxdE-G&1&Sa35xRsy&xnq5mJN0
zK!wb!qvfZ98jkQ>%^p&%D|XmjyV>G3!aoc_lNykvoS^23*1T~x2U{uIUmA95?=I9L
z*Jlw~^}<NGJKfD!S5*iX%3ax{vnr-wBg~DgM<+bn1QcF@*6Sth8%q@KaM5n*o0~yk
zoF!LG&(T@bT4no#Ehd#h8TlZgi%wz!j*^atnwd_I5#T`KaQW+Itwl*Jot6?yF3^3A
zE}4}XGuLdG#7qdfa;NE(L1X%N&qdA34xJqItk%L9nRB2~YBJc~q4+79r-u4*QsTEe
zlMyZmxwQh{5noS~^60=orM;p5sSJx?UCQf#z<{BY4*odch18QzlftD_yafL8A^#!d
z!O1O!|69c)9wfDN^bbJJ5;P<sbqWF?D-qAb+JHY^{OwP&ef>!~T5!peeSTkrd+Vf#
zRppW?oSGxi$X>^L&`5?#8hsNQ=(QGe0tS<Sh=7NPNb!Cm5f~VHC_)i23-mxV03=1A
zmKPIv3$RW_nIDyN=Gd-{T^r{!9h<jq9>E&-C`W$&(dQ$TdnBh+>We?VZv27Gv#S`x
zZY2OyBt_P2SMC;6st1M5LWQvTL6yp|2gJf0<7BwUm3uT-o3rxrvdkMw@MpJCqwJhC
zsZ*&j?k0Nqf?0WWb$PpuYUTD_yS6LUDAXx#+PCi}1wHVwKmF-3dLTu?Q9A&nV6oSo
z@k-UhPdpYrmPL~F=$s-#*jh4}6K)VM{Y!r-HzX`A;+Gyg=WM=6{lGoW=DZ`R5fm3e
zUJ!qT%nyqa{2SQ%$wGES$NUcb69&&849DX!S%_!9&{1|m^t$s{#zpXjSU!ThAZ`em
zpMkBPEKH+)mURqx;F(k6X~?W8PDi4?A>1LBv62%KdYqIl(To)^r+k4rkHRibtuKrp
z+A+}kFuI9BP}DF9=o3}v!~q124L~~#QGm2Yp#;K80}BN8x{HW(2&G>btrLYno+H9@
z35Jh4PFn1&B4`XL_{g>k=KW^r+_+su5K}zr`hwB#F1xI|d$y4oOH{&}z~X<*=X;n5
zfz3sWma*%`tr432PLpt_&gu7BDvm9EuOiIYq6=p1X{ncj7rFYuMO!}UiUBs)BTs*)
z1o`Z5JrSoV`*u2pM+f-Tl<-D7;B|slWs{gddl4xwg@uU$RM2QL(h>#HgZf$A;YVLG
zl0$wIQT7Opo4-^W&Ft;P9i#4#aYx_(jN}G|+H66>&7adGyzLmnne=3yCCIN}dz^55
z%q53NnLa4o_=l&E4%Pk62f{t%3gK|tBrIdDXQSypVUn<cDPjNuATGVbX%^<8rNj0t
z@^H~SN_J$GsuQJG39Rs-z=p$+M?i>Q#)ZYSK&Dbq7n*`JDF?m)27D?iLX(kMOA%T@
zfiG0Ffqf_p6^<=Uz=~9Qb}N=Wa;dfq39?xAiLF(tr0^|+?3lV+4bD}=FZvDP!*|ZV
zleuo#==FO+)Lay)iB4#-+S-?Fy@|QJIIp+>9J{11)nNVZ*TGkL-3_oO9~YaG97`l8
z*{J|YePRu82%1q-h4#rUt33k4Y)Nlow(4E0rq3O23t7Bbe$|x$vS#+eW=Ftc^%IBu
z#`5&R9&0=M)JgGTyx2DFr|X7BOXMQjAPG%>5=Me~z-O<M?3Fw!`Ge#`$q&eT=Rlnz
z6&9I<tc921Tcd(9$vL1LMi?V_>XC8J2#zo#gSvuEokmLq13>Ks;moLJ;z3yyYjIm?
zg0+BGvYJ>*qa~#P6T$wBIE>PGX-G8vh!q|}3>8NeL~*NpU@c$^L@~tDK^DVraY>x&
z?bc$O#cGkc2@KvrDU$WVlNFHR@nrPQ)cb{S2>N5OmC_7h^vhB+a6Q4DaVe_5(lU!#
zw4+1&r_Wz*i%LbWS3HQz&{u#fCNW?^PSAZ(dZ*GecfnPx^t#xIhor9}Uia*q{^*2(
zor4b~3k1>VM86!(%Z+PMc6V6DU}B5XdIGL@P}a@}*xZcN_4A&%c+8lK56{0owQc&0
z+cr&|vU&5AsnfR3n7%D_{rtmp-xKq$XXeNZGS<WKQYnu_OT3&xCL)lch<^YMWywja
z)nv3<jV5wO4c|g8vO>Nw8Bf?kHe2W-ikXB#O|-cKR7uZ5(TT(GVQ1;IKD*BA^?N;j
z@0}ix!ATR1xOEQ{YHbdiSq;J%Z=uHSbC@*_zsJ8-uF;r^io9-jp=FLI67~A6TB9W(
zn-kh*Q+vJO4pAtKQNPEeH5!aIo6)4#n%(}Fki*jDi6SSb_5z#Q<DrMiH+wv~iYRhL
zYe(W?;0=I83g|2Ft=JNukUsUip&f`jFdkJkk5<e0MPPHN89PfjD!e*t7Re*|>lcAS
z@#%&1i23tyME{#Ci!?+UvreNCDv`Mgsb5hG8a^*#cNk6fiCMnPiX-Hp+aBztPl4Oh
zyHn6D*0IHn$3DB=tiNbPC^UlpZ*J0?V|6jJJs@Q`rA}qn+Rc8tYS7vYi29IOYhBsd
zuG*5FF<(~HWYziASy7zd5#-z)PSo2q#2&G$?fT0GFSTxP_hrrNTFu!t*=E!SBi0Cg
z2=SRH$2YzncHm7u96A(;d=Z&(Qi-??nsK-hIGvf`4q1jA<d;frK%d8~gq}<LT-YqG
z@RSGwC{+l@$U=^-f${Nlm%>~oib#XKO7tb8)6w1$r@c;e$bb_`&F~Ni2jzvZn2Fw$
zz~B)d_)khj<Q2VL{NKEWq%!0|)LE@NB>ggJGS~kwcJ`<lGurcOybTQ`nVs-hTo#W#
zkX@Nq6DkPHO>S$EEhn$FG)b)C?Be?Rg4{?f);@1;dk*(~!#;TB_6ue~koujG{(Beh
zUbt{KVXkcLp4__g$fK)QtXTahxoGr)j=G9-8WhCenK&*7rYIphp6F!0FZDa$cKI}A
zbC$PH6CR9|P9~in$MVcdqgHQm<%JWmV76W(Ra?!jyjZd}yEEKSQq&abG|$;JC;bSc
zi%r_K<?^Bk^Lu*Jg>o|C*fHU5MMZZ-d!_K;<@%9@Wx|6OFrky`ijgBLxNotf;yC;P
z19KdM9L-wjp>Ck8BG5)h!T0r&<gXaPc@TewfP<L{Buy!}uIONlaV>0%+sf$hTN2Lv
zkjxKXirD2~To#O4g3+K1RK6xdDPT%wEeGp9$`Bglw<U0z1u$iCfD9r(_2B4)iP0vG
z^$`CP7=Zn8FH=5PXb4(x_h@E>rgN{jB|EL-iaRh)`YmW(^uJ7uLBa*m(&$7XGI-Ke
zN;nA09{>_C7UNiom=;}hVi~*+tXPQjh2p-!$Alh2G7T7~LDWZk#B@Y`_||eS0j5c8
z+}MXS8)x<*jNC9-9f5cm&Im-bpfa@rDJ#}aeD&mfrlGy%ww*gk?W`wa<Hlwae@@q!
zT;Wr?Bri<P>$f&eubjT!agn2CWzTsF$9FQ<sSIv=)Sj)_G<qzufN-O`UOrcN=gl{-
zyXG4H)lA!3;z&5&GA%PR9;CIi*^=4g6^;tW-vSRGbR4q%Ff4YDy*Pb&Ztk<z{UbBY
za80TA{)A2Vy|3aGTl1&oCBkiFVxsJ*rP}vvxtwDRmA+rqr1R}ohq1vP7}jt@QI+tS
z!{RhFfGJCDGqxnJFNR+7=Rfbc<{IH2jm-CRH*E?42NNiZZCxD-78eJ<uqQWe^gF`2
zVMjc+WmTwZ)HPGrZFgSi7_sGodRdOn2Z~!)$TRhvb7w7QCoE21IBHaJqI~3eZ`SyS
z#XPm-YfnvNaiQ?ltN2q>Lv-MyCyzdwe%0(XgSv}M>Fy@F$&>plh^`XnrC<3lF=|wT
zxwE#mprEjD7ST?yA%cmit*xpe>+<l&ia+O^lb81(xriQ_?xqFwPgRw0VRiLn&D>d>
ze4^cc(iT%F0-o}GzhxHDd0~0Nw%;391a(%WY$gC>p7cuGwE}l#_6uJTU3%q&Du-Sv
z1BNQ6(xHc+GOV2wta51Ju2zM;w9pK?-$vo<7hb5Tx!}@jjIK(9#}tXZhOa3(4AZCt
zeR8mWs=yNvM86y>IS;<HeUe{G4oUt<M^*?FnPCw_t28L18bJvp{h{R|>5hz*qP;<Q
zsbfSh8E+~_!x!b9jCULP!7OGRfuR)TpuwU)D1uEQvm-&mzw}BJRDesF;usSk?aD+N
zm;{U>0}qHi0D~PqBaSeil!iUQlCV3>8lbEi7?siLw38X7Ay0^wp7>Q~U9X90Kmz9u
zGh;-Yf!@kam`UQ<v_#9gnupIBR^_fSa++Z#@|2wKRLK_R@rDt+9CQj@8f=2NW>aU~
zKC^g{E;aY>7jX`w7r}f$FY=D2T_qmcXkvb7<8v^QFe+0lBwIdIEMQiJi?iI}QvaG9
zFIlAGEc-(x;`Yw!xJj5VRhrI|!-jRvUkNW&`eTdRs$1-4wL%XTJcV-aZoPtMmT%{l
z$~8)|v|`{C&B}j2h3Jt^>K>w12|Y-kXd<Sd6}PjI_kJ`LQya^`c&>!bQUbiuM2zE$
z5%+bO<i^ZAj0u%WzkHA`2Ik!Xi4zi}$jD8T#zaJ67OtB_Fs=iZHxot~M{BDE3n`s|
zG5CV)5?3*aGdO&?a7_)cNhVHD$eHk0T$tizGU9I}T3UX#<|D1OnEW=Q$6ZMtK2KUw
z`orgq&7rJFRim+~tFxe}p(*Ms@^tx(!+XXQm6E8bXN$4GP?r~J%PP!L=a5Tunyf;l
za@%fag}!k2ZsxrFSZgva-@ZGPHMX=?$SY_pC}?EwD=L}Zv!p(;a89+pvNhLi<Bu~x
z){@o^3kMa)yc1@AQr+OtSdp@3X;viKQq^GB+Vnn$aandan*^6!WLYks_m^=YuWFU7
z<Qd0hY?ik|fJfCQ{D!>o?z+mdio*1I#~xKh1Nl9@bD{9rvijuq<*AxPY@W|#D%3Lf
z|LDW95-oJ%uc7PzKjz*$Fsdr;AD?r})J$)wlbIwl6Vlsc5+KPWKp=z?2qjWO?+|(s
zVdyBJ6hQ>RtcW5iifb1!x@%WfU2)a5#9eiDS6yFsbs@=IzMtn#5`yBo@BZFDewoaj
z+wVE&p7WfiejXa<gsfyi!lqOY>4W`Z0o=tf#%Y#8W@tEJz+IKR>U~HRPH7}){FA_g
z2@RTRpp84qzJ|6Tbl~m%2s1O8`iyqZ5(?E!d*MNCf_fBIp0pN>Y$)^p^{g6c-qdT)
z2G|`q!rdp`_EOQ1xd-;oeZW1skI7UsOBvE8XfB>qbJ|9n@GEyp#)N$*zuR$;iHTMl
zMb6o*mJJixJe)xE3Q6_4>)`+&0VYGZT=+r_+-_y*&qQ=9TDu^?KY|vD9{9zI3DK(5
zME=Du$arMS#9PPZ2`ya}-Oqi0SJ|R6){pA<?<@LXXXV)6xC;%-E2hpbl)_RdTJa4}
zG1C<3HsJ*7`=3>u>P<F}u$;#sYUc`)=Md#Clu0NwS|EndUjF-S=7F&00m=)QA@blu
z3*og#A<KwLLZ3)_oMeUt0Xl`qet|_#n5LfVkyh4{r_xHl(W>}GuxC!H>S(E&)JRvc
zK(%pLIt!%_Ggh;J!P3mN(C&zQ%b!{2zgdp>O3i+p(=nue_40cDaryCg10&jdx17tO
z(^oG`_H-m)1cDqwb`64b;Smyx)_@t0hzGhdMCC4<9`|!TD8jm$rK?L{m%e7ES5xX|
zjVv*(Fl`#N^Ymjk_TQ;du2gC}db*#$3;ZWOD(u{Xf?=5$H@|z8nKTK#24ycWnW{7M
zAKQD&^LZK7DvgHE{3S1zo_>f1NH&P+M;%Csfl8EPu7x`aIkw>Sb*g?XAd3zsX^HUS
z;UC1y6~<^aDLl9k{x&4~;8i-HtfOnX;mQ^KYx5>mteILiZ%SkHXs&4RwL5E-R@LO(
zM6u}hNxwS1`A=KMZudb^r4d&kLjbo*jB_XUZm7xw()$Npp75WZModdD;0bDHwr`R1
z_{sVCpn^HUU7WwBZ2nzSn$~Q2(Y)xssf8Q^yiQfaGpCL)?csqTYl$*OC+Z@HVq^XB
zOye(GF$~=Qgsvvqt>JX}F)?~g{W!WMD}jH~8i`yrp|6CFShk_1l1@(nOjnF*SpCVK
zPZ>c(Klp(l_zKcZz|<cE@}QsDmHp35`ee3N`xeaWb0WvRfmbgnLSZjAeol1X?2jjQ
zJkNz%A}vbA8R=gWKc0;f-_pwG0`5rhYCt|$-Z%S`No^td+?Hs0loDvFNyccFDWsxH
z*A6uxdHy>T@YCZ0<co~tcgo?_bF!s}w@g{R?vV-Hx;`CG`nT0HLHhm=*PdP4Th+g$
z+}O(yR|zM2rD9@rMMGrAwd0>yA0EZ^D{lW`$b84Z^U^;j-tpQBvB00=t(w>;jRGNw
zHbmPcyBkeUMyN*Dp&<=!4Z*9_kr2sB-A2w*DIcMAtDSr>qu8;Cw5OT*sv9K9fcGOK
zSm!4y(a2K=dfsK5;!ihJii?WuI$xqIGc`8d;YdoW%gL@wbJ?B#*wjo{qOWdT^k9m-
zk==Ptc1~SdlEaZs=lt{%`6zA(m=DT}5dFZ2(yka(5~#H%rX*T@<G7#Q2$NAKF(Ed=
zVK7<a;uDkN;-JuRU`L|7S6*YGmgv#M_~_9eofsdN;Anxlr$q{NeVcgG(E8dyQdX=x
zxwr4;AwRnz_n)wAuM&w5_aOCHA^aUZ_^K5b6flM`#l<jd;X+t#3k!;lFo(VuX;F}M
z67zu)9Tr!bU_%5hhU`Fy>>g=_aAidv5RVz4Y)D3sGFSTS2r^}yJIAKH`4lg%ntx|R
z@g|#cj@ugfX#OhfWp`jJqBtUbHkZ4DSHKDHin0O4ELt|2GH9gHaP!L}3}X%RMu9^v
zuS(%Jt&VKN;Q3N&Y~gBXg}t%bWVW+k1Gq)5L#s5@ZkEsLIw^XNABqBodZ8Z+V-=0W
zNfK@`WLS{B9Hl>p2R#J6Cms(mA4-IIVD5qlOg);Cpn%vztqY4NIw=`LQ{iB&^7#Wa
z7a&uV)>V||WdnY{zt5auLkdb=`8s!>hE*dQPt81k<n)M=gi*#Mwn@6Q@B8gz_q;e~
z?Cx3c56|cw-+29qrM`-hV;csS==cW~4I7=uVjM1ELwurhaDFu(Ql=*LN`RNo|LlF%
zTRgdL{qU`cBjz-uFM6o4`R|h}0tZvl*ukUFrO$cgmI=P{snfSE-CO+9l)8+*?qp|n
zpE=bg^TIpfeVn07$QGyNLrYPGCLlV8)`I<ya8U{0C5Q7<)V-{mN_9YaD_i@B=cS>I
ziO)fk1BII*_SGJx{lTuOLY^sHz={3|Pb?n%Yie4$M&R<(ilKI}PV{R%0}AWba;7QM
zlhO+kSbd)<)y`7?fZ^f#8IR88g^8yYJUP*(>zlFUnxzNtoZYl6N1f{El@=@+k}>b#
z?4Dj;?9=<Jw0dtMr`K_5xkh8!z+!EZZE2m#)Yy=uHYWCp7kgLl&fPzA<)Hkg$EUOT
zk1k%A5WApm(5dBfPRv_rpWJ(VX@7sh4(_v_9$|97mu<X+9h(fRfZ~eGyJ@7@_fYB^
z*l^341+WfaadJ2ldI_N2m=NytV~zgsvRACMZsm?0E7?YP$-YTZUJ*stEXUIt7fX(>
zS6nw@ob*rWHR+$@M%;ibXjl5MM&Dm&83`?45etEsp3Zfah6&wn{SbZWiSl#g2s8QF
z!b4X)kx8BIv0a|9d#)&qO#jKn1JeLSU&g}PO{iQL9$?_n`%N@9{Doli;kV#$3Nk1^
z#U4<fk@*HUNQj$qlmV~{(<reE*h4ZKXge{6b`Mly@)`lI0ocDydLcbE_DtoV&1cSR
zUi#p%CoQFHF>_1qX>;tNcxH3ovQtK_!)Q;noSJxssaap?qI9Elad>s5bi2j#ytCs3
za>OCS+>#mBw~`ecHs)WC{zzU^cx+5Je#R3lT<va8J|kT?v*+)lD{f}t&9nCZmZ{Ig
zN*&H3gAN+)$s0GHVe)-(rz!VWOqDX@@B9FPt4omi>oHj6;g(tCOO%@6wkpq&GX4R1
zbtJ>0R7-sa=3topyX?tUg83mJE@(3F#$*?KY=Y=`;PXg{F}hsA=r<KnNU(fTxR}%G
z=(G<DQHyZWATib1G1r+Y4ibGX!RPY*CD9fM+Y%FPT-e6$BV%wxfkilOmgY1v&y8UT
zr!{k&OxMHy%f+y;Gbza_g<Uy0+`{z4#Pr0-_{i~aptd#;jxM?JO^etI!&da|yJDEs
zd!{@uY{#5(0rNr*VGB@<4!Q!pMM&d*V)$vDP@v>60uXOmHR?c0m~v#F!u!V#*&AI!
zFCAz1AzPG%yv`L)O!?wt1!<A0w1R>(?ra)UJ3BIHo!{9Yy?_5{>Guyf`FChX$Fc_I
zzkl<0r)IOI1!<ein?8_!clQs{ylGF<(aqRq`6s?-`=^~rE8zZIU07IMIA+YKg4DEv
zn@&6+y?wfCebxj2!#1ZDj2?Zr^t%r?G3|Q=Y4R4!|8SG^!+Ql3SD}N`*7ukT>D?xv
z|1Xy@#d)U%ppGeWtaJ{l2B)wBCoHNdN?uM*O~xylSFjm1X(4SGMWdi;NKxSuf(5t$
z(yq)xWA3qIH}GW;dPcJn8YKu5f;{oiO;wizg-JCFwS~i3j<8^y&6ATjN8`%x<M=0*
zEI;lmm3F##Z%Rx?s`UEpX1B5L>e@W3ZTPIsDF&xo?<=iJvK1bU>vQqQpAR2|98e;?
zywn>Lli7c4!^k9)D%NBa68o3AL)UnD;d+hQ!;L5&d5@<^J+vey>4Buo;w7UeC9Ww;
z>UC`7uuab)c08w7zw+VUfg^7(8}2hqI@xh>QPckSg{{)#cJ`ZoB^^z5>Wnx}rQ)|t
zm9Bv?Y4QiD9p9(jwKLujJIq}-HB>Ae=~c1k&Xe~rE;Db4B|o4OT`5J0Rv@-mt!atz
zj@X>-1Cp1zVgT55j#C)|HMfmO@q}V#n`2Twx+XYdZTw(Y`5GfTH>Yk!<SDb#w0_~9
z8H1+Q%$KT-<&!3c4oDqm7iN?)xPg$2kNHpLi{cUePB`(%e?pBXcU|zWsTiiR;t+Gc
z_h*k3Lzzf3r_bXCTMHowZxHOR(;;}=1omFetl(pL^Y0AzY`o)%CwJa_LjS5*R#;l0
zjW703=H5AHIMKELHKDwK_6Pj=LAD?{TWL(>#zc-pZW=AdnU&ctSGLmPRA#Yl%*st2
zE5@3|99PQ)1!p??$QLg?_qS8cq3YGk^9J=x+wtQaLmvIzOJ(X93s+Gg81?GDFTVN4
zi)CtqLG-vQfkdF``vU)J8+thXfiD0dYXo1A1iUiY;}P;M1b7IG9<XMe8#L14A7-|p
z$!NHDhK3+l4Opbk4Zc;*E!o^8eJig(V1HxVr(0Nf%ct9<Jd)I#A@-Y^;Q5FZez#<j
zh5B!sn%l#)CPGHv@+qt7*o~_!2EIiW?iI~Vd=u7CO!*zkJd6=u4dlTiM-EUCyJT`v
zHjF?&jGY9a4MDc+(ABoQIGu<y+;`+NWsS#=wR~c7LhLKCiHTSwNRG<Dmi~!}{Wk_G
z?LelCn-rU9FLorxP65v!v~xqN0@8&*6;_igo(WW~+uqpzM&tJFjY3}IcJ9$7bQfAk
zZGp<7qRK#<!|^%o`@H*i#i2lDWk8x~w?CXw$sM_T_4Y3QoOn2R*~ngmo&@Hhj|}JB
z^<wa<9Q;1%{e54upmatWB%Ogj#(Hk<$rT-;6(>)w;9FLlWY2N_j$6R}D_C#tuFLyR
zQg?8Y>?h+f4n;=rDT>*O1&SreUa?-W86MDk6bIlb(X6-=xcVo7u>QE>DaBdEvx-;o
zHejCOiI7E?piCY_R(m?>8YV(eH+fkc1o9v@DE}J~P!EEwJy^lDDl0jm&=M6(WjI1}
zhsug1OnxZaJWem}2`>S^DmBPMa~QOGSg}|L3CHQ+J#ajM_k+p-<rOY+nuBI10{)OX
z$glLKicY(R^ZL!Asu1u~xg2^8@AGT80B=pTGF1gqzoASz<}6k#;%%?<akgi9<lHn#
zP39uAwAdW)Oc9>7#qsBCaS65;S<0J2iW7)(J59wVcB6%k{?6%EJ!OsS@Utz_$(y8;
zY_=t%V?5*DFrIlzZ{ki!YtM2>w{6Pe9$-Sq>~eHS?^dvtrb=lv8>;ST64@AOhk#MC
zHzd7!<k@2<;J$jV>sHq5<Bx^cpHcEFO_6=)r9a?(rbn*b&OXl=&Ai`i=9xqNuBeu3
zS#d|pG5iT-c^lJz$MN@W7%Flb?8$<3n?_^9&jV_;GsR-F**vl87&cr;wrMnMx|nRk
zInc8REX~N~Y1OeFJN`Ve${6Vo^EmVd>5P!v@j9C-9X0WZ0+LTk2bC|f@z1F_*7DLz
zruI=vvH$QnNO|>oNZOsqiluu5BhEgp6xpgOR(aQlPoGxv0hs4a`qNCWlU_c;dVlqi
zTDma!WiF=mlT6^9KFbP?yQEJ)%wpTyIW&YF?FBzULCQyRsUJR;KJU0*`iv#~`OnpC
z4l-gG(E_)Pgd|FRRmT4(%sYi_RPEM6;$3%-Z%5%{n>c_iJhrLhpPL>N-gq#SBPHg9
zDzo{9P0z5IZB?7kp52`GFuR8^%q3e+zbL)g1bTBFEEJU4yBB)6py1I-C^!=N&1nNd
zCbKBK(G8K1;))gUZ+7rVPAR3Vw7t$6-x$fJPaG&+8+m@w#PTMtSUR>8IWwlE8>A1U
z(8^i-@18xi?eGFN_%(Z7r8sxBlq5ZS&Db~Cl-F;l9Je^~taR<5acm>kyS*=)&e>K>
zn6*kON8)>1LFFjt>#TO+!OahJ(gx)D`j_ncOO%}4G{JPx7gXF@3{UmqLN~)yN9>Bc
zpC>`rSsX-oGVPMHLph6`su_njt$XR&Kiz!upPqdwyjDEi%D68N9r}`S(*JBYcVz9o
z&$k{p(E9wnYv-(faNH~R-S=Ja_ctH>=)vYCYu{Y{=JESp5mvRUOUK`Q^Y~KX!uq*$
z+wUr^<Rim&?Hbm>XJ)0&pP$0-5N<hK)lpwqFmoQ5XyT)fV{RTVbI}xm1zF>l^v=I{
zJj$bjzVt*|k!cGIjUTvd6KyVeA${ty&7gHGB<#Q1y14zTyV}$4`fA-A?XMQk9G1;8
zp5EWF&#>*j<J^aKm&+bWr5gaq3CqaWv}E_wQmU8N=gR8`u)OQ8ufDo#+4BgWTl}kj
zkNtID$Ns7k&mTc^{b+-7S(Xq$+bK^QA>JebfrN6kWh2{r0A9OgK<yp?f4-sc-yMyZ
zl!>6uv*5?N2oX#x;mx`pR@Uo*GrC8yA6OX273VP`NcBT5$Qr0j?G(M{{P7piqRt*)
zN=el73s(VL`SV{oUT6>g%o)xA9Yvu3PritOk*PmT7!2X&#aO|Vk=pG~2a{1WGXR_p
zgE>l4UMm$H7b0r$wzikJ{oJv(mqs9+QS`6EILDZbuS@=&Z5%$wIA;~Ut2=)?Dwi<Z
zQf6PuY*@Lx-u}3EDbfsHx&PZ?OS|st^+vXDc>M7V8y|a2de7gte_wyolz2Y5-{hoV
zNoufec(7NxJ*CD7ZahunGQ>M#l7ayb)Ka^pQ*2}<f3#z&^uCz>^2^dYOPAi<<Nv0V
zT#q3oCxyOxPfkiojwg3gPD&1aC*~rg{mrx={Ym!?UwY-PrNh&%xF_zP`q;*3Y1wsY
zy);0?w&xdCWM~~($vL?yrbFIgV3_r0MqbA&Ipo=*`JPALTZ-|w3$l(0e&Scku;6fi
z5}YST8x_lp#^l>uj~;F1rK7F4-`>hvE3z-Vn_W?n%^t`Kao>fq*aO)WY&#u0N+&ig
zJ}Q*7oyn@G$P)Y0@>jpY5>F&PG#&KoJ^YRX^+K*%Ss=<$$y_-}L{UXErgc(E5-&jp
znr?_BbPwuI#L%IiL?tQGQxhLhEFNIO&2PPbbo8M$OJ>hnvg%;{q2Ii5`}B85i|$0V
z!QOX<^!@rRpKN0Z=T@CRx@XJQ<Kt#-*)Z8P%WO+F|KaxD^U4a;MtfYJ2PZuv38nlK
zuRXu_$eY0lt2S?0H6i%etw)}$EfbQgc0+8SVg9mrw!Y3xV|UzrV#nBPXG{)zT{g=w
z+wE_7v%GerHKAWk`&n<2v6Gh#gY+dppOXo#9JM+eaY%gt2OrW9z~zSG2MCJ<5;w`)
z1w!X9@u(_M&MN?JuZz?{84uAjDwn$iCyoe+Ln4JmnA9NAmB{B%5!BA*UzLAeb;q@T
z#Z+P}e~?b;fP1&Y%bk8Lsx~pj8Fd1JU{1&T_$%*1w~O?2EazJ!MXZ-!qe_a^n(}b6
zFWyktU*LhL<I`J`9bT0WRqRpks6T$aTyHpTV5TNM92m$*hsF>I$o|_piwYoJ1MS+k
z4@{;Nph^J0Rz&vw*R{6pWnO9y>5qG@xbr22mF}0)L#gr~)}4H_qp>6$<~$925GmFS
z&0^K?9>3KCfKji9ml=9*)MPGa_6R~d<|%laTO_^BzGM?4)z`l!wMngf1bd$Dc#b>y
zn)D5~h>eq4r8agA3&T>^5wi5Qbc9S$4}>iqA?)E5ky+fW9UZ(72IOS8<1gH;@(K&j
zloXa+bBDra6BOoL3kUoHL_@>&^ECv-8f4FE#sp1<FO^@0qW<@bpi_>A{n>?AMziib
z$qd)|3UYAtV1Drc0u&k(6_1!N+06DIJd)YHfVjlPDl1-ccwBwGrPxwmkM*Bj&`JO9
zczs)T=dI|h&|7Ak>vWhY=o3EevYFqaC&{<?#mBJ_G?3x2g#IFz%}Uo@^(z<Zsz>Tq
z)3qak!8J0(ysUS8nYK5}M38q_I^SDc7B9UZ{n3JhIN{&iL_m^m`s*5hGQUi*X#Er`
z6bg?OrWdP`5fltDi&4H2EUat@&_IR9LpUa5W4Rg%4tUpe(;Ger9WZ1j`qB}QTf#b^
z3yJPJRD~)R&xINrsUgCROu=#5G1XI4iK;2pV}O@}KOO%07*Vf-`?EeR$EwxqVsv_~
zH78B)v;dStjN$1NIP~7JcXh{s)q6EbIU@q&-f?ixy=5Md=FW1>?>pa><xU%5e(O0^
z!aE}?uE{VVq98;eQlT(cAaH6c$5{d0V$twOQ|D2~t8FS|43A4q0YXA566(dMY}n}$
zpsUh!99w<E4XewRT)%Ki{0E^>4E#k(Gs<^oc+1PZ8N16fN=wp54FANlzWFAaH=&b{
zfQAnN$J&Hh3yED}MWOIH7)ogV@}!cEsZ;SyN(m5WYD~`QDI`rOS`C|IRmP8uznuy3
z6YU4j3nT_Wj2)#Thq^tT0U!@=r>Blx9f|3`@u^wA`q~sTeE7h|h2DfqiUHkf@F7ED
zuYDvW)BRyvr)4E^ilw7Jav_Gs7aQ@|s+U+3X3)W3FWt2JrdKY!z4Sq+^g^o5V&0dV
z1qHkqhFbheojd#ItY@|lQRzNyUi9L?d3B#|Oz?MU#uKs^g5D++Bss#_E~hJT&JrXc
zz?^emMMC_0k@h`{lHJLW=t%Jn&Ha_?_9*|MfFDXLc--MM6MEpA;3i*GXw={t1haxc
zP`O~@;Da)-23idkDiZUq^f)0+6fq@S=PW6PuYLV{sqOpMudQ0PYG8bpASTE6ZY)hl
zG*aHwjnBOO%*LsCJTs=3HujEB7KN<%fvc8PNnxb6k3uS-^=bnQO7TWH*Hy)gvgG8l
z85Q}%i&JB8E8I|<5bHDvy5v-s&E`r=ju8y8&IB#)g!{#$77yo#OK1lAl0AaH(6h4>
z(VSQ$yN2aB^90#@%0m!-u!JJq(ht2_FagGX;(L(h1it7V^eiZib?`<aYl4Tk9WX!~
z($izui3*kvd~rUq$5Ld8>=sRIu_INiKC4V|*i)2yOAx9uOS);1I@Ox3+wfauYF3K4
zOuA;4)LOn_QC(VE-J%WUtrDkDYIq@X0)YDCI7@<^#YJY=;(>PkSyL*zZ_nWm%{ET#
zC5_}x+2RxIQr_V`A6&?+38kflYBDbn563}g9u_;~*cxbq6e@C1CRBO&B}a9MFmZHg
z>&!U}3RApc!IDO{B7B9g^xk`|r1yg^5$eF`>Vbc3h|%r%WXnmGaS946*%m{#AHL;7
z=?R!_dYl?{EfP$pnC0-+&-WUwd!@fx$VwEwO6D^=?VyBEslcEkgpa6}lN3z`4yHZX
z0PJK?bdvJ0Fj_W+No<Mt$q$e=t{Z>&{9n%>9*>{puinPiN$s+-au%71qGl-(Z(C}l
zy-X=>xb4;D(X;8Ib!?q{o3`-fx)3Rmbs0h!^KMx*b`G$h3KiVGf3^t&K3Le`N(YJq
z`T??m-Xc>Hm9neQeEFW!XjHi*jq+ootM5tgo!)c20)egr?CPwRuUfLyNo8iMvLbTl
z<w^*@9VGqjZffPtJua13H^;JpAKuOEgBnkp5^QrfZk%gNFr9AiG?h^sMEiq0*Hi(M
z8a8KnaCWsfP$1CWzfeEwBG9LR2p|B>7wD>#prGjauD7x7YW3UykBu=V=6-d>2Mvl#
zTMd@Tw#(HL(Xa4!u(TMqUOM{n)hmcjWIp^F%XAv5s*(Aoy|L%plHZjaTRM->L;jn(
z(Yu2hvm0`_bA)sevFNaIg4T5+6&Jg&Yy|O_8v!qQUC|6pyf#nEG;`oi7ov(2?tsOx
zW$u{H1LI1Mvb{(D%T}Up@bb~XA}v#AsS~tIo6y!hUe3Hpod>3stXub!RwUgIXogZk
z%z6oQ`n9kwl4ZuhA>I2=`@QF9hzRu%%$g3QTQ>nzmM@SQ5=@t%DGc~QxEVaeP4Jqc
zE{Al<Qp|>b9FSjsl+J($zLMM^QvCIE_uhN%b>{Eb2iB!!>8wMCW-XNs%-qH6SFXIC
z3q3(Y{R#O1|M$bvH>XTjkfI*9XHkN54q(mprAzIAYmU6KiOt`%2|=Delpg<6>)oYM
zq5=0I!8m-lQR)EeDAT#pyIcQs9D(S9f?ZOoh&EIM?{pHpqp#BEz&<PCE0zWeq)b?&
zqeiA-m=${tJXj#*0R=x0VpN>v%nL&nrW6Gbh|z9nE=Zz&d4Rf@@`|1|q{5LbefQW~
z(y@Na-`H2D*4*%?Z7cqGjog2Fym_fl%A<Sbod|Hf<9+;hgg-jYGsCNa54WKq`4%)F
zb|91>@S)Jyb3{)5Cj6+>5ufz_Gs;=VK3ci$ultSBF&OH3*5JvSrRY&ov&|RRcDKAZ
z(cw&Ty~QfLtM*D4J5(^?V^3o8Thg=GgEmxl+BF8F4JW{^@$+qnKJ#x0Zx>;LPPL%3
zDdoN=vwA^5&Z75q_c;@~T)1b`pb6d5zaIJc$>lpxad^4*pst56UgwNs`X^hT+<WTf
z&QYmA7eqX^>WSqu4jr1Y{0Y7^+WF+oE2$aU?qR7TA!Y3_<4<X}`3aVC$5YIhl(Ke;
zJR1Mf*$shrjY+cfZq{;lX-9Y0lR|eB27=6|$ac3rkQlC<GouhmB-PQ->M?r;FMCY>
z>^ypYr$&<lBD8bZmGkMa`=a~rJOA(J)pvGk<8cGcuHjeCufy((?!WK6+^#>JXSqv)
zJkOTO`5Ya<bmjoq2D7fEI2h<=Py({7+vWJ#<rI3kTX0by7ZVqLkNHnY@0{H7$qpS+
zmS%dV%@d-9cm)FEE7AH)h#t6jc_!l5#!63oc(?S|y;kGi&$k|CmQ$waYdbz6dd<sL
z>&wv_O*k&sroHp^$Wtud4XmQ7u&@r=;Yy;MG736DQB|-W<WdRRm)6N`L7NKJF)D9(
zI^UABYi3m~0Gj;!fP2c;YM+qam!G)#=gP=@PiVE-IJrG^xk?<eis2T~15dP4Q?z0p
zI>j=&+b6p7iRe>0zW&L)D!&`j4@G&%F8+)rOvC}XxURy=?4n#mJfM>!i*&PxL}F-W
zkK9IO;HJ||)yaiLUj5NCL14o|7!omTpTvmD-|p^AUS5hQg_f_|cA5JFKL-naH`m7n
zI=RB=4=O-BzC3o)x<?KS>xBqV0Xqb!Tu66N_d)rAQ6f+M;=QQ_1*y{N7hRv__Fq%6
zbo;TFUW#~VpBOGkZ9AD-z}0_ob4dyNou+y3y<bG`$AK}aa9N2yOH^Qv7($jXk_!YH
zl%x~%8-T$eJ2HY@lqCloi8{1XI0ns?@J@kKh!QIJ9KLq*eJ{*9%1kGHBUjuvtN+#{
zZJN&I$SCjvVK8%?%00WTtbfC}P;gR3euDmw556S*GcGC4<=~8k!!sTHz4M>Bady!b
zsk!m-lN*MHO8omWr)7?;DG;?sk|%t|#<?nI*Y6!sUe#7!QC~1-_VPKo_dhE|Ud$Sq
zm#Ik{#~Vk^TY&12e0^yR+HNc4iE=_LQNVbGVuNL(LZUjsXgV?nSOqY@a)mIn;RBT7
zZihHbZ>pff(gj0?OGPsDT8jDC;_neTvuR;&>6WRxhYVu;z}Q4(tjcOss|yB*Dg8?(
z$7qdB>%TlPefo(nCH$-!{@qcKb>@6!)v8ydFK_+LNon%-`Kw;x3K}$`)|2TElxOd4
znm1NGzMq5F+ilxb_8P59T@woAsifhZH^I;PSC4-=bhbE?ZX%tNzI<iXq^)fKL%+Wj
zcP6(x{K;}*6fejs>xlhm1xPGGD9ey)#?$3zhFH_?bxWu38Tp`)Pc?nRWaOu>(v7H@
zlDf9o9vj%k|G|rRTJ#G<8O$^XX>W<(?povI(@G+4a&HDuP4}|f?kLjO$)v~`g&X*S
zz!hZRIEaPq;YHFl4|uw~M=0fi$Bt7-bx&?hoe~UINb3*u)8{@Rbbc<x8ueDIUTU`L
zTl7|`nKoFXyb*B^DPoHLvq&|hvb&3`XOzL^>6V9X8E&&~9{n*uB*L8l|I+P0y*hf|
zNK4U>ZwhW$9hk9v`s9A;<}&=58;4Mm8R~;!)xYHW6)Fhbu&aL56A>mLqh-iT)S*Hi
zVh9wVw0xuvlQ9-lBDsDg<J`*?b-3v;;EK^ZFW2*tiyF;#jozTScu`}}W0h8Zv?pSJ
z#OtlMJFlqlAvXAs&6=2$81L<_Z{*{jzscp>KH@D7c<cGgm0z<4!K^u+VsEE@3oJT3
zK;soezho{l>Zu={LF`@K&_guDLmGUhP(n_=q-cY(TUG*b2<bX-;B9ftC$~pJ@jecF
z;n|L(0?xy_gN_~u-Tn#I!)Rd4X*ej`LLIV~3j+B(Drkt|#vbtaJ%K{fkt4Zbs#4L?
zB7GBNHPQ^}Fg`O_O;Gx#r3KpBeryfvCn@H?t5is#mT*f)3r{}`AZxq=(-l33-fi?b
zG}ok}egy(C$>3?^S5*O33rKQWp`|kc5{)N;`2O~X&znq+_Ev|<bpGLX@MYi1Nt|$J
z(E6vgbc8oPF1}(+PdC0IKE9C;Z+WV%Mb6p8-XNGK`a`2$@oaf)|J?Jt5-`#8yR)4B
zY+3#k%~=|Xz$z!NvQVVuXNna~^~#>3VnupxP#M8lT)F{tXa(Ls#n=<(4Vni86uEij
zxr*|XIyD@2Vjt;y08EWu4f$<!T&&q7<=T^MR)dRO;zOJx@>gMAVxChP$i+o2Wl3vT
ze{-rKhD#EJ@$K`FxbsVGu2WcMOEg|m@UuFOGA&o#{-?NP{RjMKe8)2bxiy?IQ7L@~
zEfdOxcE*?_JT62j^u$+(_uY>$)saQ&N+fmRWYqgDRx#?5Qhg_K4@cvaa~1tzS?^#<
zW`Xyt7j(Wa8^}hmNx-38$$rhAWADKLBXMvj6bUJf)Gkm>Ad7i46SLo^49e>yI{B2*
zb1>K990uf+PH-K6bk+q9Dnu<+IR{;@1H7{%dPl))ptQ$`M*zGUTr;9ez`u}u>kM>G
zdt?g*8%I+e)b4ngzX&&rURUgJB1?hOLAO9)H9pXprr|v~f`#QgMR(BzNda6c;P(@r
z03L%p=H<{f(h)kKOoh=j`b@ino(y9E)c&-jn&BEcOpjEmQv41l;wO9}o`;I#a@++C
zlTUGFbVU%HM*z_j)J`r69t!#tAQWWU3>5J`RR9)gdB0CAhvqY&gwCAycq!YK3^4~=
zgvuc}i__2?MdiRTvCB_ZqTYCjI#r4M&?vJKP&BlM1bzo!Ovr*hl!mHR9HfHCSApxH
z_%)>}6=iY?K;_1Ud`+soz)RIq6(jc}KB$j;D-mGp)GFlBi{i77)ILjGfMX*QP^lu7
z&l(5Uruqbjqf|dOC42C;y!70*CHgVZ)g10+)+;q3rPx=LC^ij82I1Ce|5%%_=(-gn
zxbM_f6&oKe&TDW)Mnrz=9GeeJT~4&Bm2rjyl}4AC<kCA6Q{yc*ohs0P{HexaT#7GI
z)aMv@PTNasG&=jU^2Ld6yV^9^*&7fyNGqL?pI4B+Cbw+np6hKHMV|5)U||KO_8pzZ
zL=~`N7~k7jW5G<BxTx>ISiqiVXrP|R(u;|{6mGadqmF3^XjRN+iBC;*8a(j{I;}cU
z@07mRjC2VJi8lAJ)Hr=VmtN#c3XOwZh76tEVRBtO>l&%?SQ8V{lltr9QoY8)prCou
z(8rpVof99&zo$0yyxyFi#bTw_FYdbQi@S>F%w;NV(uQP>AWGk<0n_p}Cn%M=l&#W1
zQ?F8^1u*a8faiGcX6C%>K4w4c0nm)O${1f#2u;08%PBRg8040<3Uf<^7?%ksjlYiN
zigUAK)MicZBsK!MG5oz&H;Abliwno-ox*RPpL%?X(#a)jVzRVWpmSMAb2e^<bZSVQ
zT3s1>;|)N>Gz+l?B(pIZGYpz!&J^?7uV3IA#fDWGz5!-lJEpLB;|`NorHQjTszjmC
z-ebKXp;DtqKHLSOI69@rx=>|QXD6f<WIC;b=ghfz&if0p`}M6+rY~swK$q+^mn^R4
zxLg2r_sZk=!}ShJvQDdUBqeFI2Ad&C9g~PxW~||~0|LIxa*x@ojkAczOaOEfoiZJ`
zMw}-(t*K;Pz~oF~@upY<Z{Ttg1xrrvK#g7v*Ixs_PWsoV8?;v55Nk9T5@XFp>q?ta
z-5z8G>m>ry0eLfV$5^$`?5;@f6{yy5`LRZHqQn?YqRFDyXcJv_HU9u$kEVOCO|l9r
zGPd;AyA6iW43kmImagUdZ_S_Xj!Uu#)}(89BpZ5f$xs?i(<{xDYZnP<%WLNGe%~&u
zMWwcF>dSGPjxSq&{P^-^k`Em*VFd=2jvv(TNui+u&2AetQZ#Ze^;sFGR$5FqCvh8{
z`du#s^Pjs_ZwGu6VGOC*xC{(QwLV`|1K0^SVH%s+ssr4bxwJx~&e7|W($FlC%?8uJ
z6}p(fyy8F|$MyZ7qGWMd(e^1woB-f1t5c`f)%Qzz-EQBPpX%Uwdt%=(%Pp?*dDze)
z=s&SGi-0^1XD9X9Sv)Tgqgz>RGUTK9NQ_N9Lq83GlELp9$zvM%ysz-gU@o*P>@ot8
zBvrYXgP*h<mH5xb?Ng>~k1U<Cy|Hn7WL)XIZP)(>+C^6S?vCHzG9{bO7&w3J&?jaj
zO`h0T?TZ<HNIHE&`rw17H!khp-;<k37vXYRiurx7sVz)*8UU*9&Mg@<V#fT+BjXB}
zO`bWTu5V#7pyy1kqQb#_Mg>V?l6?;3_||BI3Sl44qHHcOwkQ$U=jhB-M2L<Q<J1jw
zZ7l#R1iJ|4`9gubXrK`5GU1T(4Pc#dI<Ce|tRUvlC&-b}GS}a=<#Q{4jD;xll1@pl
zeY|<|$E=8rWJR<VS@2V&=OreS8`-3<om-olB#Zb-sUzf=!frVKx8&Wh%*ns!qz}&V
zjqqRz6H`fm>SD|0j}cLI<<ow96<p}ZFq1^jYBhyw1F5~uOGsa^#N0bIz}I#^jmZ&>
z(l?ECuyNw1O%tPQd(WNgxDj3x#L3bUEsH+V89N2YUfIe7UX1~7qNg`14158Zn<A0B
zOZJy#rUHj5d@-zo&d*}F&_a(>g(zOWHZZB`0%GAORjEQ%lLEDZf_T|T3sl8!I;#U`
zLC?`F!N%B3r}6U1%@mY$MVS)1%M?`#QxH<mBG}_74#^i~=jA{p`1muhtehMl)Uy;n
zDk6%b;96<}KPp0`@yaqX_y0wCc!;(Xwe<g&^1!L*|E_(&<97BTC**2KCecg;|H+$D
z|NBz#|Izz_fOJU|u7xfs5l;uhl<I-&K{Qn+3B6DyAykc+ePMx|{$u0IT3hVtxIEo6
z(o5F(n3(kRn3x0$`x>b|q%`cV#bNea923nMVrzz3v?}Ns3Lcz1d|VaGZ6{zYv(1C0
z+pqM%ZPX1Mi9n&bNM3gq;|L#;TA-r{g+kJ|O$amzg;)r_FfI5sH8n9)NDQ}1jp0aZ
zYk2S8a4Y8yvu1fU+MIZv9M{m5?SZ7OAgFjHo=><ikT2zcX@D~W$;%@GeG7g`0doMz
zVJL{~1B+6^>Bx?N1NlS0B$s*YYK&MZ+^&$qq(y;2J`Akhi`c2ew>|nRVJ|Sf!+aP6
z1uA_3C6dCF3pjd}fa9HiZMXut9<ZdG5409Ri(!O?IT~ej0V<`XHq<E4h9tp8bwq{m
zCZHS^@TBNjt1Ih<(8JCevYxesCejNDyQ`{{Js8=ki6TJl6m1|#;{gqd1UE8#@gFTZ
zA4btJ&Z*WBMYs(`7V&LIT~P&mIfcBV>k>Xpb%|a}7jksHyp5k|E3{*c{y2Oi_|PAG
zh`OFh4RBc&G$TqC@@WrJis+;irPD*bRt2ROlCzhji^!QyY1+f=I%C1(1tSq(+8Eti
zlHSo+GH4`rLZ(DJcgdJa%=4rhKoU48cD#7g_!Jcr?WTl_Jqf3{>OxY?6EV_v%-xQT
zUBX^UPkbEd+B+0ok7kMsTAXo&M~7hU^b)=q#~N`GGPzUHO7LiUnVon@I@HOJ-Z=_6
zDirXC>;@!6f{D&`N1+2C+EK9_`LL3i+Z(_!_!&XEfd~XsfPsT%7pdMLl?I|2w}EMg
zTKqJ4TXlP~Q?0%AR;}8pcRBf(9XpU=*4aMi(;@xluMTYQmB9vauS}aUf6bctGp6Ou
zPE1_?*wn17sgJFn!PktbDh-XS0y`;{vcC<Ud?iE?z*a<VCnr8okRq@ROlW0A(rdkI
z`ZO7lT+6e#NTr_o<W#k)uqg)l>6PhqjmsMA(v`xE#REiM-7hCt#Y66{;ft@pA0iz}
zSjM^~tb=&Orj}C=FhH${=v%+Jm=XiYNEry&a0^Th<d!2;Edtzx5SdEN)}zDl<K}MO
z%uU^lr03(0NZ;MQ^1UMykKi4bGXs~n=<$DSl79c7^xgw7Wt?K!8@_*h5o_oPtHu1>
zBfXyf>(lt}6&c)%y(v8>eTO@|xAJyoIC4Z9vg7-^8t;(adGcQAk0)o`^A)eWqB?S)
zQ*`rc;4Q@;&B8y9Oe4?x%k#91=@+#jfR9jyt@?H-ORah#q_>7ARkh39fB@D3W3KC1
zv&<;a&PF<|bGI<`^2w7}d9$o<rJLb4bS{!?Qy*2R!}uXz)&M+KMk7iLx){>Zp~+O}
zUY+{il&BYt2mU@3DjYROmt#gF2W44BEOhDDq81nEf`JhYWw1aXHH381y+hdo+Nrn*
zGQlg@BZi7}u929YwicQ7X-uy$NOoFff3r_rJJrtqMjMfes@&YFTw(Xb8~1JAcjLtB
zCDUgMmLV2l_Vgvy?TV}I6+)DKArj)lxMkb-GKVQIL>(R~uayoQSSqiWaPQozjwv<E
zsyv>mWi`5;Z$A2@%HvTz`RJQFbywZnQ^%PNos)tAUBF@Ka(SRW84X)B!CJ#z22<*6
zFILV6JQ&l^M}Q6(c)JH(8`__uVljNax%qswO+r-n#_nxVZllNzLw7H&?od=O-96Om
zbXsXk=-Lv)$T_oU?p$e+)PA|jkP`P`MC@VW<$aO9N$Vf_Zu92v9$KHI@}zrIS8hh>
zCproGM>Y@@;Nkzjs$nMc*boqi&}q(}iu(OxwOTtA8vYwi|HV6pd_H97;{N}6O{&Vv
z+WKw$`|0(`$?H%5eIwCdqWzc4PO((~o43<hcEmZN=<uxnr8k12kLJgWE-ij+*5|Vx
z!yEih-@&<u9_ldcdO0KG<y}|yr-A>=5~p6-pOh*OVS)S?o$2~{+?jdTqg(ywmH0_V
zD%`WDkb2Y=@4*P`b`9v^k4Q=o4#_!czsI0fA<MD#M@Pvo0;EA622=U?l-~JuMb~6y
zW@cSeRF~g7C7u^LuC{mT<*Py#LzuR(2nA=4X$aM3R|3h|RheBIY8W#+c(r}xE7Nrm
z>d?iXC@_o9#e0#hy+pL-V29`mXdqPPkfAXtkqjNQ(vnVrWf-TBTXy%VpThV+J86Ln
zRRp#Xoy1s_v=%@m47R+Ohj8Q$<>ge#i&R$ZM_w6-#oGB=d2fN=puxe)0#QAxvb3tt
z?34ue^qu+z%BH$Vc+`C9wIREv=|ts@$wfJXgfPG%Cg$}+WMsYTKKgCVO_kpDSCH5n
z*DH-ZoYw0H+U>qBy;99p<%HK14i#CrAf-58b<^}83QMISvAK0k%SW;FnwhQBcCpDD
z?E`46QTr&Aji3|xKw?*rVpx`w@f!#AEj1H04z&!L1u};mB|_q9*O}dIf%q}x+2Err
znV;|_NIW5zU}}w{6RO-*6RHmRLV;Rx#SL)}rWC7&h}cK_-4AbHnrwAW+coDF^$^2#
zBO-Nu7o<ty!UJ=M73`Ykv?hz;s+>p@XQJ@X$hVgiuNT$^GE*c)VO9#;?@nOf$#J9K
zcAdcO&UtQNnXqe`S-EqLWJu4H<`178%;gmQ$ILyD!XBEoODLoI%RG#1>xFj%yd<Ym
z9%Eqc`0+AH%>pNI*<~C9GFl(tM$4k0N>uX1e^R$82$DfY?lLM-#^|M8<&5`68_?lI
zW}+zONRW(_aFD}MYD}OJQ}BB<$_SQq*+!ufh5XaUDxBptqSQY3z=64ovj&epFgGWg
zTZWn7!2B`N{S$6Fe9V<rl>^`4k@*!YL~GJViIz;0siMG!tc|X;FCr^q9f8_xFK39z
z5-I2WGH22Jku|J7vluFZ*S4ooyO$OX$ni<9gm>i!MAz~GJ}qp4=EO~Pa}SvReqe57
zdczL;XeamLz`=%~C#On#NLyEMNr9EkdUd?r>nI3mnhinTd_i3sNUt)y6hfHK+!rb`
zXLcy8qjdwaxZ47?>pc0=yE*06Id8mCouwWT$QWb>#q8{RvOJh3<Kv+xVHkGugk{Xz
z&8*N%pcjI!1a%g=maG~fj9CmdNQ!bNg|D^;W0H)*au>vil}EG_c8|{0VqtyR!Zfb$
zil#aV30<T=MLw!)x@RT3Gb1u``aX4KQ=PJ9V&pgeP)8*Ku1scaVKN`;Xu-OAP&OAH
zpI#z{w7}~eP&El-Ip3sbWwA(5!7!?oijw?}f873(bOaWLy3;o`)wx&R6W%s$_$+r_
z)5R7x?Z|pwU*wB-r{>s_eQu;?G-UNINjDl>lDw0u-0?ouQGHIr^Rfa<9+R@KVF55$
zL9={*3VN0oWRD^8lK`fee&v8#z7vuJ@%hSBp1jjjG5tlyuC>Q18Vqs$7|RH0l1ZNm
zcn$F|c17tRF2fKn^08NkuC~t5i_27NCz>~nt>0*?pJm%vf6W%dgjK3*wLwQ-N`Bm&
z1EmF$*nf1suS|32`aPO5UtWmc96wD{?#r#>m#GBxbaj!3do&}3wU^WuVW_?y8pI2s
zTz{EnS^NRM;*w%=E!$ICnC)O6Cb%YU*N&b)YlL(syKls-rDL@>OpHyH6sk;<OQ*Ye
zPI;40+FYm%=lLRIxN*L`s$8Q!@*z9uEv(8h#7HTL%UseTcdvMMZDzlsn)uKEEU*}s
zuD9rN`{(&27uRGk<n@=wx<d9DE|d{SDDMQ#2v?(YGy&j<%-?qr|L81$QR^qtFOxMQ
zZCw+=PYItDq}0>-CEeXEy{d`^M~UA#L<dZWg<nT>iWpps$zpKvy!{UCw86PWiw7no
zP1=|^!8E%nQV=DC`{xYobKtLT=B9rU^MRz0!mkt$p_Ww?B37WOaq4@$`j(`Z(L4|u
z7aU$2XykeahldZ(`+yr@AFJ9n>AhtOq}`zrQ8GB^mQ*fv?g2RGft&C8cD51mja~(1
zv7Mp-OGapv@?00KVgP|-Q5U9UB8o&0sS$u?X_TP|<xb>8;v#u+1bLLF4)iOV(`qOG
z_+Z!c5$&Z+J^^45xIOwhq5%T9hKM7@C1MbZ>b|+VoTKeK8Y0u@9{9WYz}&h`iDnS0
z1p9#HPkMre!2^Q@b)ZdE4>-K`c(s1Bwkij^n>C^KO7(@AnH4X9D%FNwGE}8QZ=0Ak
zKsVaD%RDF}FhZSG{l*(P)#W+TyZN4VwE=#$v*Ot4NfV^|$IL$frkh)qoiq2q_`z9=
zi4aTeVofm3b?k6OJ{xI^&#BsGGG$s4rH^Pm&BYomHehAXa>Pbf3|N%&CFdmlC=^Bp
zZ+30l--<I?ea*=6(ks540Y#-W>!od%UJJ<jVT^eg3m%5aKMtBB8CT_Mo;wIMu|gS0
z@e+O=;d-UuM^5Ymg&=^dC<=ifiWnwq@-XDDf!EGE7X3DO?fgM+1*%J&-YOV|GL2Th
zHO9hno>tpe*)(UenI&eMUaJ{~-y3b3542idFMO!6?b2KL*5!Ij$J_G7Sr+|rgT<=t
zsL<=Q<``~>G#0^__eLIyF>AF3{@EC_HF6;~L6xdO(3hF2gbH=ySZWa2+&dbFKp^3e
zwTe+xxh{U56e!Uk5YTuaB}C^z2aFt77)hW|=r)j$!9=k1^^Cgqj;cXLuOmT+^`K4t
z++l<i5YNbb;quW_N7pE`rMIPTpI^TGd1gY^4U@d~{#C3Hd}V{jBK>9Xd(sZG!DMC&
zq&w(71cMWseA~<k`_i<0@$%=TZ+~<@sTN-34}W{(jo-2%U1pS?_09&ZkuzN}Sm~h+
z^7}ABfy3w?LXIFQw){Czm5^1Qaufdtr~Ra9eq=x5Cf+*RpaX`HNhb(KTY}4L9Wu3X
zuy=sTq%)e-0lkqoWd%lN-~8L>_!yk3%~qR#;naQ4Kj;5Z<<YE&SDDX-Q2nKcyIUf6
zw#711FK~L~B{CXfRMUqJnU-iU=ol9>%w`pUifwy#_ugmdESS=N;VdElD$UO9S3EG<
z^u$wyF14y!M7QiyqR<FVm0!bx8r~mtYT!JoVq7Z`yGSF~e4=rX<YukUN*{C0Tyvxm
z+pJY`Kg&FgQkZKc#VQ?;Pov$*bW-POblE43EKGe|mRDuH5&5zBK|1jyCwy_7LBB=}
z`h!5MMP&b#U6*?uc?iC2XlazbWX|-l>!sd&7JEVJjVu68>}5{r%k;7QkgHVkQADXZ
z8=k=_bYU2mRIwLu>Hpw%&){~rumKQyKkbyHtNsA`x-_(n6?TPamdyb`avHBdMaWsO
zt5<eeRe|+Rd}~256nf~MSfhLavcc7XbL2Hd$5Utr)PCSC3YgF1R>4Qu4p-qWPhP7B
zf;c!c(gu=82Sjrs^=VKnkxz(6PJYhqfFn&1ZtFo|V{lk7IIP3JxOp-Dg$;}AhA&y%
z+%e$T(q+f){QQ`(@z}DZ$FR}yvGhOBT=(|cwQpbd41cdAA<jTr{`Rfo$L>GJjgY=W
z7F48EVCw|7KC4`_@Q`%j@Rl#?a!2Y$yX(H(a#*@>XrZP&i!IpCZu?U!yMarHK0e6N
z(~Bq3GZ!yrav56W2OndfA3OH>F)5v`W5%`T+s>~Qbc+^_KlJwUrEeab1kY#e#%sW1
z1)*?#;Vn<zCSAC-X<Es(j@902i*IG>+n&4y`=>8%LZ6ul2fRa=XEk^i@E2CN;a!ad
zLb7BsK+ZYv2%?<jDzL>eA~Kv}WS~~$IVP{89HcxWKO`4m{y;*=fr#%bZI^yvS|Imm
zr2~&|+VuD)mZcZ;>Dm6JFV!%e%N3J6Cb{2B()Y<@u$s(tgI-<Y&rZiF+O)ioN3>N9
zYAPLnm)GYB<)v}Ukzx7_?)1Z%r`X|56DMriG+|=o?u6{LUY@ub`ylx)dY7v|{EuBO
zy=x5J&t4Pf>6Mn9U~?HP@q!^W-hrIw@fL$io(saV-<S#*aOJYMYNz!cvKAC+aIVRf
z*U0k-xl~n3N|J>c6`NQhcNa(eFK6<(5t8fviTe2ViJK=*+{_BKX?>ElzO@@yBqSvF
zNz*#g`_<o6cw@f9p>dQso>?*!OO3<vOwq1U{n7`XmHv75ED{2(=?QfT&pq5}V&n%~
ztQe<`O;58};>1{6cAu<(q3FiE&KoQp620ZwB10gn54_f5&eGl37agIM_uR9RZ^068
zmiYOw@^LW?KR)u|lLbf_jS&FekOCpqT;|9%GQOuQbSsl8$8G;idiH?_rDs3iJ|V<C
zo14mR_72F0?Ekd%bZSoifHbz>BZkLUMlL=mwS2y9+vhCwAg2mVXn)s30E_tpJkl$y
z*fSu%FhyERIvs|x90U!RMSV_0WD!gih+;(WMJf=%Jaz-H^c2Xf2DK-8TR^l&9k}3@
z<wFMX003AEu?zTO7AJ#pFd))vQmDjtr1#>a?<-kgq;!0Yef+X4#trn3C^E&f>#~#I
zcUa#^@*U$?-+p$_eD}hN*#47Q==?rw`4Z20{bwrngkfNxc=j4&JIW*9d1i5s<wq`U
zfy2qOyzP~OrDH^&x`0dUo!X~k_w+J$IK$6A4GiE4ST2{7Q~me;@9YoebE-5YWBFWp
zfmH25>SO+*FW&%vPA*H>)gG#i^0hLJ*21Q<1YGUj9u$uxPlPzLa=~j;p(&6w0j|L+
zS^q(P!zq4BFh?|wXqPN68A-trBv@WZOt~0*LGpUX%neqUQlCHr0C5Y_z0Fa9fobB%
z!=ooNa|I*AKjMjt_oWnoH<+YZzIDfBUOJ{)wRz_x?uOZXVw|AwGx)<zCh!ePW*Rj3
z#rs*TRgXc!Ek2q&K&un`8y0Y$1VJBXvkh(CY~=Jf&p5E+wFmq$I`5)elS{NZq0}&X
z{X5dT(v#A=@2p?{4ogS!-1K)ozRCo{ZHo6%aXj_h0QG{k8^<dnXH*NX-88=M%O^RD
zQLjyDI^yn!TlP23;k+(EpOntmezMsJ7y&$XP``8cGlwZgX^n|#I^@E6VwHYDiAEo)
z{b*whM^(@d`iuN<6ytJ%xD8jCvSgaUI_Fl0B8AX#7+Kc5KD@5tG!1hILEeX%#N<UP
zKu`=XE9U%Zgvo+giofpL-+!?x65lNSvrzgf%oaju95IMF4t@T%bk~c@-}dIGpS$UE
z>7Q(WgKmaY(sufE+i9hOTeI~Wzvk|}?8NQ&OY<XhZn`;1D)U@q>px(+-~s6w>BC6<
z76Z3v6RTLE#1*I8Xj~zV5_+VUWov?40ZdQ`)<E<kUYy1dJVJ@WshoZ#jDh83J3v%D
z=0U%UmBTuSeue&mvI`2UgEKIJ-zI$~4Vd5CQhjiiPPas#@%6IeO{%!s!qIA@E>3ig
zD>3e{*bD1=6;7)0mX&HCJ~?{D_r2%3!Ka(|&r8Tu_sbqTJ;Au=dIpjraHH>dSNigj
zf@NRW#740JEOVmt7Xxn|v4qS1U0*eLL?(_%RXOvtPxs3lS_1FKLO&<;PUBP-y_%mq
zLRXfVTr)E;{?$`HU;V(7Y}}%u(md(;^_LVM+&8V0#-aY0&r)I0R}c{s$Y&EKQGjz|
zFc4@EU|0#>8?duTKq@c*n$yrK2BItHr(uKi#^;YecUbyrX6-eCa82z@W;^`c@zv7n
z_aqq}kbe8=R^qWA<xjADcITn(vsYZd;?RpP99p?;<-BdTh=~jLuAkVpD`QvN#Pxd@
z&R@mUH-E$WpMI2hQ?|0>LW^|ox{6UHZ0e_fW>ZV+E3cF8L%B&lG2y*^3onlV>?GAh
z6;vKl>Hz=(uK@)_A<5SwXz?m}ivrRK(C1|69|uod5tMf1oQo@D2Uq6FA=L|rV*7?a
z-aPI80(N)FXVSS7Pu=tBU0-LLC%njPkN=|rsYT;lM#ZIvLbFHb)y}A%J8J&k)vpdH
zy!gVDF-vb*^H|PQc7c0WeD|i^f8fTJ<n4Wa;;7sIxut#?Q!Q=odk>ra!*Haxu&~K&
zd3<nc)v}Y1vIpy@R_ETcXj}W*F%#<teYEv;Zt#s~&!URa`9~GT{9`0^?H_xDMXj3l
zE@NP~)-8ZFd3M4PmBOmO2m>Uj4$PD=Lq^=Jk;J18h({2%8Y6D<cv8YR$=tkrVh2vN
z@~?Mb7rc~0bQ%`8ly8wOm{cwY=Ec9FTu!naTMNmSM*T(pbUqyka%7!gCM)Jes1%eG
zCzt~ON{p*wj4H41hUcqG(%_LBYq1Jkp{sPV^le`M{=yfm2tRoby={^*Ia|ii;I%{C
z8D%M{cCE!Wx^MQ-(n6$VdmEOj(CCsCTjm{^e2rD}&G>s~_s<h!>B6=z^7_BUrp?G6
zT%8{iUzO1R?6G4n4fFL1>0@-x+<f=+2dHi3+%@8ASzl7ExL5H!W>sQbsIx~uaN~w|
zd9+gKA|&h41|$UX>Y>0*d5PJCqE~_#2Nb#j&t^)>Yal@%pFk=(qQm9f+!=92Mh841
zSWLm`=&O{olfYx_X7odvtfHF`HL0~aU!x5w1^AiMGf)EHb%IKE6_qZg`_Vx>e6@1%
z-b2TZAG~?d;_{3bp{P(~mc)XYQ^T8g-?Sw>MX5E$*wZ9?RfRp#Y}9JXt3<8Q#97o;
zRVJ53uT)i5T3iY2#hmOBb?<!lPTj~%BhwTWXuW+IKW)y<``&nSZ|~wnqX{yhPd9t_
zpn<dJ4Gb;Z-1yMenq50zd}(JOmQy4DuRYmr<`=kJ9p_p4+MESzR=-m>B0DEpqtnIf
zHLAHY!Z&Z(kYEAn({H@z&V$$Ml#9zlp^B!ay|cz7s?~{%A2(p_%&EmCB|(%};H_S6
zq+DWcS(Rwwj0TmqvdWZX5vwZAu7trW7S0(_H(^5E$k`rMg4vWftv{>hwl~f?w|Czg
zCS5_Hn&*`_&6-g?ux?O;G_7CF)(0oQuxsbeKnjQS=W5Yu<W3l!3#FutQP!LZbtC39
zu{YE<lRjQGKBFXGn;WM$38kUl)Mt`lbNK{)CIS6^8EM$O#RwcVfY{_vTHtbGc;Omf
z?8Tgc55d%c+Xt+gfzRMDQ^;`-gxLpJDA~mX4*0T}UW9#t-aH11R}Me~NHx@MP%#8y
z(=zZ%qtRj1mv6ZB;}t8vdHDGB6t$q#>cy7%YzsSdmLWT!Ev3+G(b#j%Fj>TBSu>f^
zpw__F0smj++=867(&hxO&!GQv`Y@|iXYj4uzI)T`@{)$@R_&ZtU{4vVwD&FQYmwg1
z8n^EB%;|Sbsf>#>R#(-GavA!}UQpRrsZ6q(f+PCnmycgQv6sdOggjw+{)1!E-!je1
zukU5hTC;C;s5Cr)iK5A3InI=)RK>7+lB)_bbh=jWP@7HX=rcB5nOA?)_)$A2*7Qo$
zaO*4G0nXta8BFNAV*bedf|`lLQzA#l<YqbIre>Gi!P#<wY7pfCW&Lj|=pcD$%>y-z
zl9w(wls=@<?2OIrUh_f;N&dAMM$lX#_r#C38MM5ljfajDS}Y7rQe~BqGLvi;-M6$W
z<z&dw#NZ%=L@c8}mteH)qL7gu>q58<jux#%J6q*5daR0yAw`${R~m`@Hg+zf$Qn_v
z)E?_?779J&LO;HfeA6r1#|W8}+K4>ZI?bE1^#wBlgX7XKVt@AV>*=n26tghev}h|K
z49Acbsu>qTZYYI_ssb#nyBT=J<#h&UrmM7CxM&D##>LSSBX0?cmY>wwAlHA`)f<XL
zAk6=Y&OYG>=OXtB?`4oRisQZ<Nl(aVB#I+L(f?UHjHL+tGiRbP=1)HzjXLkzK66IX
z;r{QM<`x9zU*&dkz(3tyYW@G#UN*>4=|BwuRxG^w2{Z{!MGYh`{_h${bV>?josn9j
zE%O13HdTA$f7dKrUr7PbWp}i_aX0z4k>3ABV~{Kz<$04j=?Dpb;8r?+FhzH<P^<-k
zm$7DN*U}e%F-*35C4w<Kwy^sR@LrGpv`6=28PzKSG=uU1$yrAf1;K7TIoAn(;FT>U
z-72GEc6M{Q9QHYionTo|*EUFRa|#+Hd(T-CE%&e%V`MQsn!8EJj~<3v{KOC(JGYlk
zTS+PlJll(L@ke=%@=}~dR0Y*tAx}4P1V4<i(5b$^OiiJ}rv6Y!F1^Y(wc1^Y>1{3Y
zb3@UnR7HAX#~FtDqpEy}j<mI;C+?EZ<P=OH`~h!$S0c=-ig=%VJe1h}f$ZZS&$mPY
z!f-mB)6ydI@r3QzjyW~ziHj1GEg2?JzgLu*CE|i$`E-ijV$m#`z4$Qvsy<D0SR&!r
z*vP@iL9M}R#wLeNZZ<dD-5$$@+8d#4Z;iBy-`hNGVVhfpfJNO8KZrUTbT8Os@}~Y!
zyY_S82YtKtJ>iG8i15RE?NGR0)(x9MQ3GA`4H;@>?i%F*Q6<NTEB165!f9Ahu{nj_
zYL?t8HGWvDO8DZ6&Gr*&C8w}h^=c)MbgW7+>un*M8VW`$=60JJjrr3({3V6f+6E?_
zXIK%zv(tMgdB_cUh$2^v;LFJ&wo?b(l~JYZ7aDC@IueOP0qa<<g8W0++-`xRTqw13
zSrp^6`{!F}`ac)WxL;~3N{O-YLagXDc#QD|qqz6(Z`p0^3w9ePUx!OC|Faw<seA8U
z%l#!<fY<1Z4$))q#^>er^N)+%bc*@!y_d=@)A1hV&Y`*M#|WlEr?!!7C(z4)c>-EE
zpq9Zhrvcs%0%=!;NKYN`75gBWmy6Ja!2^<^UM_akntdtFmX5r6)5ft0u{j5?%`6>I
z_8Ob^=9_E;Rk*tL1*t8+QZ&X2yojLM7*3UE?-lFP9eL!k$%uQTM~$PkXW<=RUElQT
z;DW~SBP!<ml<FN{G0Rudj#Fq1^#lD3YS0<MBpAUKssqlFoI&Z=Fy(=bU*9)l#(iJQ
z?@=Qt#DAd&D&eKBCn^mLYBP&N8VUSz5WiqTmY1{+<Whg+wDc~&GIE-w3rA_48!o*^
zd(o0iG4fK2@_sQS$Du136#l%Aho(&BCxIeZ>~LDB9cdLiEuuqtzg9Xc{ra;Tr)D(_
z8f{rHH1<T!ZKEeIb7nb$m4&lrsP$_~L#tSQJKy$|G({T0RL!i4DThq8-;#cVTC-t?
z^vRfuzxvha9r5gXotoZpRFA5FyvUQ^Jvo9i-s(XI2HvwmDEsik$kq=(WM!Bb6zn*+
zlJ%1Q5V>A@gRZ519o0R9v4Ahw=+5h5r*Q^hr$K^pAYa45O%)_JW!dBpq#2?hMh1s_
zNS)-d1Kf}l;-q2RVAu!lE@1XRlIuK=%E9l9sZEZXH!m)^HfD0b9gq&V<JhUxszLc%
zHa8BjY4tU%WxrBH=-e~DzbFNPk4fNG6str|`r29Vj4@PG@r4#o{gSxS(zqq{p2o&w
z?p%AY)@xXL-Jq~q+GvPjs)jKJ1WXD@>#`}VRPuER2}!z+-;9AM#K$N(^$dr~Cf#Vz
za2h}+P~E4?x|v+~@r{7BhipAjgAC%wWFrj7Ir%bpVMBI`Q1V6<XaQuRanhUy^+xAB
z11&r-f;$CM$czZe<)9Vzkq8RGLupef`V_>Rmv&2a(w_6W!t!PHqx-(kdM)E)4Q#Px
zP-b~U!`iXZL$g`dAA66kU)FZV*tHD}<z)>#*n6!@*Q>d?xtGqR)#);Cnba`p7RTDL
z4Q1sG+(W%5$K@2jXmcy<D2H=%<EHc;xxC__mec4>{0MJ0?lQJ~u#~R3rEIzM7x^I#
zQlrkL(`qx)(=)VMZL%)2K%*(RKo1+c7JY&#23+ElPhpPBBke;u550~+o(>)t6n8<h
zG6t+4)Zi8<@Km1S93dAH)Bt80z2_`rH~)n#Tr|7=Fq?DY_kVb~W`gv!bjPlzzvuW*
zf1lUa#9ga)mk%G=-{IJH@r6U&XY2m*>i#jmf8nW1XBHhB>5lJLC~XT4=89`r<8QxX
zqo(%VG->F%p(XKvpA?60yrrwZ%D(kcH2MUE0zD1Ak!E1(kZ^knV785N)rA@bqOc%O
zP!I=&sVE@{{0sZsTw|meq5(^x*bM>FMr&&o+{dHyl3e#>)E@J@7ph2zpCI6rl)!;}
zbZJoGMHSW{k6`f>o*oHDoqQ^Sg`fw6_kl9+{lVYw+IM01=shnk-1Oy;KP;4Pf8|%w
z`){vX_crtW>O5O4g}6tS!BGCqqg|HrN0IE}_;t7Y8@Ic&W3<^nELwHL?hAVtzPM-f
z>iO5*)3WYu>3vWS+~OUsT566+u-JE**QM{jl$JF!1d)`aqi?&xr?lc75>`tm9zoE<
z{APq=n1Sfb#C?%N6Zo-hk325iZrd06icOGWI__c90jj(4mX42>@#7+Kjgvd>V#B%h
z9UpOM3VF^}hM^NAd+v4UC~`(}NOzE4kg^8SU36W<8;LqX;upt~5M<c-8|eOpg|5&{
z#(qrmHkF-56ZAEOI9axzf>_!Mid`J8y?hPsg=j2!n+uy7P56f~wevR;29`yHc6Wcp
z7?p{+Jy{-iw$DD)WbUgnRVP?#tmy^Jq>2%{&!hX8T1}V#BPJFihc&5%`_^P?;+n9K
zze*Ja{BAR*{=e$p13ZrE>KosCXJ&hocD1XnRa^D8+FcdfvYO>?%e`AxSrw~V#f@Tt
zu?;rW*bdEw&|3&4)Iba*Ku9Pdv_L|PA%!HAkP5cO-|x(fY}t^!$@f0r^MC%fcIM8V
z+veVL&pr3tQ@lQ(H{B5hU3cf}4x7V@V;L~v)I?6_*wq6t@dtRqF(&Zxdh`_-87jFo
zg{9(bQc^a6km*oxBtb82j0+|3Gt$9d#X?J%2b?W%t;(wOlfeAIqtZ25;A4nbqKVe@
z8qq%asL^OLI8WZ5S?G*P@uv8q)`9n^>;UDX_ULuK%KXB_tZ0`vF~1;IzRt6IISK77
z-|gv)Eyz#wx}viZ3-c>|-7zgy^wCu<G2Kyc+L#jMEX)*F`keedqu+Q`63x-0mED;c
zRlW@8IwFawaES7|6T<#ESvjGKnQ4oAAbr%cIBjM{C?{)<Kb+vMn2u4IUg6B}Rb^y$
zSB}DF0Cme5`p*EL5~+wGN*NPJ2Xn%t(M6%NB?H6@=a-L-l{5b6c6t88V;A#X-*84F
zR1M5yHu)b+d<^#DY^>`W4o?X0{{rKZ1(}3OoJ%xgbRfJ&Tt)B>$;bt~Ya)oH02^A>
z?zHL{FI=YWUC4L_u%Zs96<+WowQSBTzrv!*aGs7Lwv$2y=zHr!2B#q>)@n^jG<&zc
ze%{XG;hsiMezkXY7Y&E#ncsi?kFPxOhr2$1aeo!7dhU;Gm3R31ubRC%u~1x$o<2R=
z8k`#4%yc`wIbK)1ExM;C+7=&Q70n)*)D%-t6q_iRE0U+rIPYg$_ijm?=dI57%-;XT
z{{DGazWCW)*MH=B>?8TP-^D$-<^HQvZBbL>I~nhcugb8+Us*55zK~{%u8P0)+2_6;
zKQ$`angE(21O97%3H)Kw^?{5e3Q?J>K!-R4#1|JrMzTtP{cS}&H-*?hL0I&l<9B)i
z6o@xu<10Ov6^e?+7tRS`%uDbl8>L@f`0%!E4`2B4(2c2kKkj|(ycU=)HYFA;TE8$q
z!RSrw$;uu&5M2;nyJlvhWBAIBoSaoVU)Z|&#fw(@lk>v)QC#ne4`vi5x*f|iGwWM(
z&Hnlem(96g&CKF7mzmpEY}>YC<+g1<aNNIfR`tBxx}}R3mfBrKHKiHpMU%4ZX+;Ui
zoV72EFUa=?3es$bvXz6Et(|xE_U4M<!u4IHg){S#%;so+cv;x#VytRjW~@J4JSi!z
zB3xb85T1#{0)k(aZc_Evb?2TQ5HAR`T9IPLELU{C6s2_91{{rsXLp)A3|Dsc)95*>
z-E18(f+jMBv@km*uT?$Ws`}>>XgO8h2Io!Cra!F>uk%$gXCXL2%;_N?C)hp_*NI3p
zLO*9c^P;nL+SwtN{ng&RU&-&_%08v`D05%sR4GB}+=id{&fc$1=bESTv%dZrXyY0B
zl{^}LttWv8RCRvzoLD`v1a|b__0`w<=ggRC@<{)xcgob>IE|eDZEy5ZXQ)H;UvvRJ
zdjbx$K;{Ty_n9R3hq1t>(ZxW(1Ldb;KSs(Ir|$s|xUMuAwG~zi!?c<HSLuSwmGtFk
z63&;>^=p=Xxp=9N5eEhR^|KX^olF;(A#aC4bl_-Q$^6);{6eB9CdQM<Dun4LzZ49y
zsftXz=5aIi=2KuY5UYVO)Oh&t2OsEw7&M*b80_DRKq<{6Jv+b?;qh^02eR--VjN)8
z3x%MF6ftX>8S1<UgwG1QaM+9W73cRL1Q>*_Np2I_X^o_%P!ZYABl3X2mGHCDR>zQW
zM&Suv;SA%DgXBtCBtD({cutV6nQ`n0z7>Datx)gle30qL!MpT$DK7KGg=;Q}xGrCL
zhbpgr$I8oHkxSNCrWGK9?4#dNFioHy99v&Fd2%5?fZ)kv93s_6;?u<(n9`0*t40`|
zB(GDt>P$EW@i}5Ty~yEd;=6Jidwh96CF)-;PiHsfms7YL@Sh4?@@vou0_@DgLsq&#
zhhK2HffFY(<(4WC=bWG-{d9<+MByX3&V*<_<Md1@RfJqAL?sBnu9m9>x!eGAnboY!
zVK$59QoQ{50z>REr`aUTlM(s=hgAsum~KePrdLx~Ny(-!FvJ~G-=7XqIVNI9;pqII
z$6`<EtakgcSotw5Z%$S|e#gVHSf;*XGw7ZC;`rTar8yw#y0Ome2RM<wW)$Xu4$>h}
zUU)nZq6Cr^WSIYowj~UDC{{Lwnfvzd-?yE;CcnZ0a`CA(tXe+0Mt6$8THSy5Gk<^P
z?*8iW0Q+#?e&O={`%X5q*H{4mUmH89JGBO)3O_&wHUI?r!jI1{DLMbgtO5wHLJg~P
zGaEJlV5LoKmoBp`3*P!%#3>-bN!<A2`|!`l+Qxn(zum)z<;#0m4o}!{@4c+=-h0RX
zEZ;Qt5r08`r-zNOksfdjUKslb-#ET*sC=Xx=ojfubB;8QlFq4DtogZ!`$cCa*ora*
zS&P~m9CCEdnbSFjAO6HSAE*`yFS4CD=JEjoZK6-PkFC?*{FKto5tQU}<dks(hDY7e
zUya85<K58`Zcl2_=m1G4oSLp5lOD%RH$z_03!h)`2LmazGFJ`+iU>W00}QqoFh(U5
z_I3)fCvSpLkO+H)?~@-H`}}!1@Vqe~6-Nv>$hb*}RUVB()kzcIXv>RX!ILKas<E4R
zn|Ex7{L`2`+t_a5A9(UAaG~<sj$uyFsSA1u8-aAD=#XcD>?#Y8)jb>rWA^~=6v($U
zWv7;bzCwQyw=J5D9yuaR>)f;J%XMt|KlfcEXDhZ1Mq5|NV~=fprP4LWRr$)+$K<gU
zt)H`l?6>UT=ltlgu{Ty{aMm<?U1Kw27aTkK<ZbQS4!+;DoU!Fy?;qUOe%q7eP#!A}
z!HMbgc#iM0T;TraX*%D~lOWG#v@bpV1NO^<OL+qkm{@x~L>#cPR0)3*R$@YWTsR5O
zIA6&3uq7mxJGM^9vKoEz&eva;clwN0t5JN%h%MXW@_N4KSGXKsT6H43YU$D{@tvxr
ze8cFd?$owzGFd;+so|5iQjSx)d+x!UG@i&t8RFUl2M)N;WFt$Gv>s#A2-r`dRf$Bi
z>AxOF>X6ofSS6jCQVeH>63_Bk5f4s)J_dd<Vd#kqqn+h@UQ5eZVb02`iYyQ1o5cLa
z;h}41Uk~>op~SgAl^4$0uxL_c;p{9-qi0y?<J}9BCA-bW>N@4$dG>VPyZ;IP+7B1L
zH0+AXb|$CfMJ`#pILf$q_uUtd_-ge+T1HGIX8whfFFttPFP~?DOJ@u`aOZFC{&3Uc
z#a=jNOyaR{(}54sc%S$VvZg_HCpz$Th0GxOa8#?DCEGdhE2#WZ5~D0D1?v+*oGL@y
z5~4St@wFK#p0gJL<uFlZ&42D*MQXDa#6w~B_wtGO0&7D2v%NeaKG9_M#F^~*PGdMK
zH!5s&=G#qi9<wPiK7sc>8!tbqFgW?1{-==hxP0QN{{E++<P5ifPk~49qWsY-TerT#
z5?MJ*R6;L))Ba~kFhO5crB4VJ=nJif-d{02Ca%~l=D7E4-n_@1BbtljVy3Tn|B$s%
ze~ZFe-EdA#RA<lDSLBb*sZcKdhMg4AF!jLS#4Dmco`L?wsx!Wia?#{8WT_l5+{*y=
zddR3K#{Q`P9V`>Ft;7OwL)25*Re+~}0H_}6{CX*0oRXs#@+*Y&tIGCWw(8|;cD7%(
z`BrA!|Gm`Zm6GqX`1)k_`wVMT-pgz#XJ2RMzOIw+u3x!l?^F9u>>b`S`DOn1hN7`w
z<d!p`E}z|J+_3GPn=Xs&yylhFy9X0k{<52srP}35Z+Z>U@^4~_>H@!av%5N}n6I9m
zvS)bjSNp!dZ_o1HYhK1z(VlUf-X{s&m6#W&542T6n!zXlB-zx%Zsmv@<^mME79>ML
zJ3<oTRfJ5q56-ZXxvvUpnY6y0rf-D-%|-DMvaFOmCC~3m@+wg=38g7Xq5NgR@~os%
zlhb1CF^h(+A71p{r}D{9?rCqo=MyF>cXrLWL~$buQ;TKC1C5o*G0`w)>7%&%^hp`%
zPFq|?O75ft_f)HXp&{OU^dVM<;wBa=KYGqq1O1V8N|07y+)a?xn6F!hKB9F>;pTuu
zgG6>AWXypxT=3$F|H{5PfuwtsIfqT6p!g_fblgBT7%}xo@&{5J>HaLZjs@h<gP(aw
zG$_QrGrD^9=qh&k<T|^24P-(DgJmnbxh~FO3xty51pb_~Bpn<Ix53~_iL!`=KliSj
z?PGTuz_2mMy?Lu*V>9%YqV%e4vbA=;aBYfUvbgnw@=pZFuUNz%ud1nDwW_*iEIp78
zsn<uW1}+$Fd*nlM+0op1eSDm4azYee!H(SeeryJ;{BptSj&*RB$1X_A9{UH}K{4Cy
z8;+Hit?@M^c&t8`)5MzO`$~)wmn=EvdtspyRt`<Xus2}Vd}z{%iNLfLP|qc>eHMX_
zOssGM6bn=xAm$numq;aA5H6YM&=B$gPUVSqYj_0A35IkspBaRNOlh)^@*l)_*+1`L
z!t%(vaBx-6*t5)Kf5+~Ue^q9Vmj4#xvhjRVG@E003zJT~Ab(+ZyY0;SBD;<`5~t*q
z`YYmL8HL&7%l&ydRY_6&al}`hiH{qPhc<?izFbW|9?y6(Gu^&yy?p*4duhx{rB^L*
zWJK}5+1<~}7yc4+=&yFS+-Aw>Zr+qvu&HZRLV_`A)#~k&iZ*wwh>!m-<CS>}4xID_
zG^|!*hXR=*3CtZ5mh)o)CdLgc0m4fdEPG&&LCBw^P{FgO_mH~-?9zsr#KP#mvO2hc
zvxrHAjG%kK*wcGJjUx&SASDKl6_f~UxKWN0g>ATjcg2IUFv4DDhIegjnoVz(j4U&g
z86~scmKM9#o8d5-jErZ*FY~#vuc(+mH7P|el=%H6<q1=V1)(}E&h1-vINtBd%p{+G
zvuDRV7KWd-fdP6taNrhtSlQgXk{)}9hkLKLtlex93lfZWi$#iYC5fZ3>I9dNlEq>-
zCKQOK&1)^5DOO{2RMC>MI;)}kUHOZ5ySHYo%3v(oXq_V50rfescC*N3;p{hNyS_($
z<_6j1L5esaFF)`iMXdS*)BRx;MfGCI`>FhUYz4v5ql<AA`x=$jO##1+R*9)ti^-o>
z6V~H?*!<h3+oih-9{q@*QnhM=8QPs|_jBXVeLkIzw!`S}@e|E+Pddk+|EK%E%FnoJ
zx%k`4ZLM<U>H|}6V`n|7DZcb6R+jmIa+B5D*-w%hIi}vUr*BND<zwsAvXv`etK4Mu
zre3wUvmQ>`6?@Q1GX~hzUw=5E#tG_8d-|q?Y7r{^tJ9yvIzVGg7UAc>DpVJI{$37J
zKpTy)c84=_2JI+igw)j%EJDmdjF=*-sZBi{Y5Ne1L-ndKJ{HihqBxqi+G{X96iGlL
z|G{@8Be)RJB-ucc0UeJ}_x-<BcK?f*ZY6fC_bCtjV{b4cJtfKS_yAMNAHV*9w=^Ry
zJ1awVsem-&z8l7r^sE6lX!~4(+bb;N6}DTU=Ul0V`kP?sHYynND9bd(#96HQ&ebn_
z3{Gb-=8v~4Ootm()<eN5-Abn0r9S8;wJtBpN%vRP=D@}{xH9W2nwJ!36$YEjR4*#j
zCe1O#drFpSiXjt^bccb*tBADoxE>rqMQFffI}}py(;M-K+BG>`$TJwnFg_$_(V_dU
zLeDGQZ8H51d<H5vGYF{^bSrQj$a@l-1+PZIe{>)NtVcac%BMhudDsp>4h$Wvc*%4@
zB_<3{JjklBxfQ`oWI|$avv5WXcfRUy;5Gb@BO}I239C$V8ZsbNLdEKfQiTN%)(<qe
zBtpufaZ+4VRc2^*hB>V`vnnc%4~>T=X>a7EQFGF(W|S5SHevO_?5Ko{=$M%3jD)D{
zgRAvU=plb*cVtH$vDiI7+ZVNeOUnF!A*G?{ysNXPic)d*;@O3vp^l7r;epdB;?oO~
z;?y*vF{5l^s_1`H6|*O@bgGM2bJ)b59V$;XrevjsF4pc`iDl90@lh#JtZh-o>?o5d
zYIeq=HqH|^8`4>|x5T!IS#D%eZE=RGdGV8`EsjD9(N1%LIS@VjeEBG)kpFh0{8^hP
zJw;8yiZf29$oLm!1Gf?ltM2PuuqZx{B-E7iYs@JhQQXAA2mQw3r&xPZW+JwBFm*)p
zlny~C5zSLD`3o7iGvs22^zN_>I^cC4q*_4q(FB3rQ`|0j?2=CMIf5W2Km3toWM!vi
zlzI=WCm25bfy1AalAaOtuDWsT+2dnRS<|d{TCMtOTt1GUUVG81S8Zwhs0QwPHSlL2
zl6yOPQ0GZmbFeV0cu8}`dWEfdIH$JCpPo~+ymb<0&)DTuEJ{tY>h-wVK8~Ayeb=g2
z!F@Wz4|c=GODFXP0G$2^7||CBNkB(Kevkr?=O9%lQ26Ma(f}5Hq)bnvvkt6}G@~@5
zCpaQkML$Sj9Q}2!bu^*H27(Y&q1#d!Y^YE4CPuN}&a=hXR_)?K$rrKtYxmE(`Pw)p
zdhD|ca$}N`J%-q6Dd`n)9m^K(T@j;qNrGi#Z}EI4NT$cmQqCJos0+Lpu)rd9YxVMb
z{q|J3!hW7)oXb7OYd+RTUGx2>y@&KXZBekLD7MHKhskO1B-JlWTi&yNZ=+|0$Eu$k
z%}m^J@+>tyP^pl4lir0r`Z&<3I4dJT5Q855Kx$qdKm#EG;>&`pqBlw}67LtCL#LKr
zP^n6%fyx4~<*FiG1V-UfAAC0&yp#+mgZ~~%Q{JqsuAZojX+>h9)otd^YNv~T;V|kw
zjnyf4Jm%1wlZ@WA+aFxF>u}bxu>V$;T3G1A0dHd{&m$Qi&%i$XYT9{E^}!V4#yOG@
zxn-#*#kEy@H8v^5;jNVaaasPNc}0*Xu$t$x(A-sHcNlC;aGKT_T^V~)Ry}at+B+@{
zjds-~GH+I3hCelX>Y9z~a!p)de>>iD{Mjp9Ci%J+`P&&nMU~C)1Hcf&Ir}!q*G++s
zxLxQS5{1Pd?SfIV21sPH1yE61Ks!KUYfG?<LlFV5<W&y7)xDv?Tg1UBSI-PnfQ3O?
zg2{%Bl!KA>yMm_;z`P__1pOuD?$VxJ=s`*pE`x!CslJ5wr<Cl?w#?8M`M``kV#=xr
z`<W<L=TyM*bQXJJ>>oJ+y}lyT%s!BB_805*;dH&79sLC)5WEie6Y2K2gqSDZl`=kM
z0*kfyQf4Jw$@R<^E!^f19mUqN^*m>9sQUf1+|tZH#@W+S=f*-K_N$nf%=FprKVRyI
zNz0rU^-RQ=91A7V@|>)4p(%P_cE#O=ljT-lo>=ZH&xX9AZ*opnkX1|7Iq3zH*P5qh
zW)$#snXJ%ufp<Zw|D_8uxgUNHB$hHS&TC1$mPx#zhutCnedet9CMAZeite70yU&}+
z%2OA3Jx-r|guRg7=!%X_lUK6^>GPsoaB|xGLx<#c9?O}`6n}NPQ^}BrYr$x(!G2%>
zr!KVMK$Rp|rN>f;J5Bo(?6!P5qU|vT%3c)Pch0badE&A0SC%xadgP)DLtKPqj?|r8
z?o4ln3%Y;A8_*G&Kvo5>0)u2`c_B+7F1@WH1_DY3yFQvf#;ko&!`5i?`K#NYoc!vw
zZuhEF-$IndWj?=Jt~XTX2><-lWSdk0{(V+nEIZ#~zf4?zEI*C=4Br)kB`oTJhvkp!
zW~`O_65UI;CT1r-cp*$5nG6r}itnyY&N8{3ZmY-W6;2F3Z*!TeoxgF(pZq>$PRf<P
zu72L;HX&k@5H!SkB{?k55U}Sp2s0D2^Tz5#bH4sZ>|iJ)<Xh#(&F!oDp;i?$P<_|x
z^-u9h*@;`1x)T%K7d{vz8i>rNwdGr)EOmirSOj@aI>%6ZNkal&y#akd%Z!h9PH=pX
z<p%Q&8l-UZl;z2a@k7tg1+6!b3Fva<q7V=%bw2dX;;-HJ+u!fK_R=q|UANR{sGWPq
zhaa$o$9%OFIX^vo*q)TSXxoeehfr2FbI0=Du|;#=o#EoS&vmD##TWKZTAMH{*0+Iu
z=k3Ec-+cJ(YyYt~rK&pd?|0t)$tQQOm}|>unSE4#rHx6xEAD*#{#Db`j(nTHb$rq(
z`SIDCw`IE4UK1Cdl({%QKiRpYvTI-Ol)2E3n83%6*X4lQTMw!im@x|=F;1LfZo~Bi
zz8NanVFA(DOnN3USPvw4gNFtrRu0qgkpyHaDRvGISd351$@kpw`x|c>3KfXn$u&2;
z`YH>)`XD!_1eR6A#F*dni;b15*+r!}i>5Wk&f1YAUQr*cES(1_$e9xt2lm;#X>q1N
z^~f!^j11l7%FB=Wh5XVRZ?du2qN$s&8EW<jdzf>$xAD=en{wJ`EcLpk)nsQzwbcYS
z`Gd1Uxu1V+O&I5g%~#~+ly9P;rmZu+8N?k8GcAjx>r1RXidKDjVTGVLT0Jn;=%&b4
z;Rg2DM0S{X%2U^#WXLMY%5+<^EuvA1%GkN&g*j1>MX_d^W76@)P`%T088<qd)>3<V
zb^i36ycv1b>Go2a({ALKF?KFD>=KXUSYGYYJ3Q7Tk1Ni}n_TnL=PkP}eZH%SJ7V22
zNmh?T@7kRtc?vyJuFI61o{T@EJ6rOw6X){5n9c#d;0Ek*S7H2tlnGpED3z&Cv;vSa
zF%Afdu{fd=#`T$~KS;8SP>%}g=rPh(qP!r9DH^uY8h5@~kzlghqids+!c%8YwPtRg
zpBPMh53UQm?!}(WIA2w`YGpXMVoJCwB|bBDQB<7UXm}4v=IzL^PMtF~nB=H+N83#a
z)$d57Y|nX>TZ*nWBxEG|@?BYpj>LtRrdlofq=r;Wd8SR0(sQyC60&pBCCQOlX-REJ
z(p#*)-3yQ~%bk~!kQr~dvUqFdWm_=^&YauN$6lVGU&EvSYZy4!f`Oz{;h+$3V9B;B
zaIj<P^K+xYK>;o02H~N=!ESD}J8h-5^cocoYSL{%o5NvbyP58+$p9d*FRvk~X$=Ub
z2Ipk}2>f&XbGS231p<qmfS`zgz^np+$(1K~1j{*dfe~+5v2{&Y&n~It4}d%aBH&dF
z+-@+JBxV03=!uqu@KzyY3WA{^hB;b?DIj^vszeagCf&4w+K|U1m`lBmhMGoWQKx*5
z{Oi>}FPi6cOn+?AjyX?&<~CXM`ez-!(c^n%-K7h6Hs)HHe)q>mS?`Y}S4F6yJZNv{
z{?h5q!P@gT)#`PHs~cwK7U`ouDNLH`&)28CXumgfp)=WFNSN)*w59lQ;%<@eNHWB(
z;4HB)EeiZSeHrV6mm!lQtzc&11LE9u=UrX1aMP?*^-M*vpV|PLc`fWelWZH9{J`%M
zerZ`{23RdQ^CPZ4aQlQG&?DU6o%IWH$X3#vA(W62?Na2jp^HF=uF6HqmHu?hmG#yG
z`BM*eOqoC5?w{kg&zn`-ad1+}gKuTIj(s9YpMF3I3a1?EsGAAop5<3l9GX)2z?+#d
zNRfO{{>!0F?;Kpc`rtd84l&!onPdH9{rnpK!?DR@lcgVy>BxTpA1z3+&zo7_acD}>
zgKuYgKKfj*|Ma*k`|StwY7TWyn=#*>3&|$?{F!x~hbaXr|C3(-$p^0Nw;n8-a=5c<
z{yck1;SuJ5q2+fsZ+e$3HamFo7?&?%+qlfOefbl1lTgOs9qi<fg;g+FUd@ieR{2qN
zU!qfVuiRK$!suVP8B-4nv7v||k`mnC%u;688%XUHc$SsAplk=tY@9A;mBDq>BK}bP
zSV!N%Eo;293od`*1>x8KkdwXXWuZBXda7=zaJ%IXKYCJFdh$1!Mt*y1V_f6{$v@*z
z-^sD2{Vr+7i<b++<uAVb)fZEi^v_vPlFFZpzbP0B2l=nY9%WygxT`E$v@f|lsV?my
zpaIp^yK-J=0M9QKmUSzD4f}MPbyw?thxZ!C2iqjbec*V6&?D^wzTsiw3veMwIi4_L
z8J3G^FYu!JQ*JOd8l6QOG9Xbk1tHC_YM+jXF6>jV`Y20{@<zePn2!?a*Nc!|r!6fV
z8!I>JRSICq&Z6Yl^wHK%S;Vm{VXvZ4>(mBX$~nkA!t_dmJi_9%^0c(_i*qJt=OiWP
z+?zc)Cnq^6=Q}yLPaeN9>tgwx`_Fsx>V+|#7jI6UQl9K9!>`YmT%K5B8@Tw&8Bxhi
z;p54R9^BjCYLgqPTdJqFP30rAztuAL>ayZh?V%MJ5PlVBFJa!g$(8b_tHeopS^;G!
zq^Nvl&&D<3;D%|wtQE757RN>x)b!L&^0>U*EtunDoy)$wG(BO`vPBh=)dq0!I}c{Z
zr5BW~6n|e?R8(2?)#AbAyu9SW<otYG{!NI#bmWDOdyZ{hzV!aLzb(HJsR$_lQsUM!
z*F&@QuD>kZxNYBoUo{l-2Ltox2TJG9myfNxy{BQ);oi>mE`510-d+FPV88sw+UkSx
zY%s4{&0kks-^g4k>kNfQ2g^GvF1zW%#X%hGK+&Mk@9w`utges@Qk28R^sz9avHSDn
zlE#U9_&CUpkd#0$3$77pXRdG+A+HS>aAHI;VM6I}830cLF{KlU3}L@sKJW|c1&ytj
zU*5WAa%a!}Bgc*%x$P%xMQ?8({;}wDNC>_uHRX~yE3SI}s!5SHlCOAu6Q%288_%T<
z&>TfyjLy=t@Bnotz!;F60oD&mrd&BL(<{=?pc4Rg1Y{n)uH-wn&Xhk~a_cKcrp_6C
zWOUBdr>}2qwLce}yWFzd9q)&}>f^=s;G|;tJJRyFf%;XWqpRu%;_CAqJSUoyvllx1
zUH}<a3RS>A<Z9hMoeus2G3g`-85>A53Fm5s9PM$y8v{hG1t?dc1>}<q&7esD^#y3w
zr;}MaBqEgtEM{S_0YTCbRRjCzC{JCiLBT42S$1r3vlvNeDMwT!x{UdXOEP>O1U%O@
z`h1N(y~$h=A4o6sT(IawV+E^xz*Cty$FjQi(2bJMnqZGHvYerTc|{fdQL{pBABPLm
z`V_+@>((5s?YLt_#m^EG@^<Dw6NkO4v(cT@ZGopvrC4T!7}mUmzJ}DMvfK-5Ctq@2
zf3f_5d;{@{*lqUOq)EAxt20Jg7cOkQBfYvLoL-s$(z`Vt!eMaTp|{OStIiF2FJCLJ
zoAzM+D;Ah#t35P!43gb?i&6e%f04VqLLZ1O^O|$3=f`s0!*lBXlDasxln37R3Z*Ho
z<*^xi9JRAh6kK6Io~CAzxwy_6su0sGS@lH>ayI-(yx(4*81yDu%FC@$8S$Z%8YhNJ
zp`~;R4$V~dPG`0O5dH>X04mvw4)m}Lj1BP$Kwj7dAV=`I{a_A|5QCH~2C4)D)EmBn
z%7evN71PkL^|n5#skpJSF|b<SciYy6hL|d&W$dTSu+Snvs5{>By8&r!3Er2im7X|g
ziAS7ZSqK+sje&V{XU$zuyigcCSx8FM!s`x`p)9I0v}Q}AI3qPPGp#{t+_ENA8C7O5
zjotZ!DaJTU5QW~gK%lp&GlZSPC@W}*Gfw$|adKLL$5Z5+O6vvj-PCU_fxmO?zyV75
z8XTSrd1O{!wPc}r1WXntL63%)Wq{-1io(Zc7E&ro4K!}h1ZXDk*sy~@e<2g~7_2r)
z&t@3~bKV^nidnhyXJs;$Icr|NU)p>}78;vrOt7qdLz<gEEtav^Y56b?&C4wD&##=e
zN`6ad%x$3PhTKNs?H^Z$>;_UBRLp!(2j`r}o`(yqxwEOv*>ejs@{S*0p2Pb~@x^Hu
zH48pp!0Qd9rig1UN>=(tG|jw4tV&5sOQ{l{&o>HVe&NWX@>##-waMw}$+i6U!zBT$
z;p9594|3nhbxNlnDfbVuW+^$nBsR7rJvrmvM-~#e;M_O{Jh?vtuZ+tb#p{w`2gr}T
zXh63STn#UnT$x!C^9ork6B>4Sb`wJ$FeC|?tPIxED7q{QNAi%vD0A>E16flmB8hfr
zD)>WLegPte{;ct9Sthtuo*0*+=pExF8yjV$%Sxs;Xd{cvY}QL@?|@MdZGj5yrymyo
z4MgM=JJ>Q;H1Q7DE||B(Fg6u#apjN2cE@k|*avLHC9e=}a3AMa<DdYi!w<P#(~aUE
z42BkiD8DCi<40l{H%wUz4<E+0JNP<oVh>0Ho1%B?H(n@7TO|ErL3%|m{Y~T!xA+4+
zd+Sec%BAoA?QOR6O*Z|fW5?fOFvE6B<7e}k!z2V7^!(6^>}U6#c<2wee$F>M%O1bw
z<dYv?+0`UUn^wO+`cZ1hh$K8INsDflgg?NK+ZQ5>GKiT=^{mMt6|@=I>t<mWyB^K~
zOANx4C0u{rEKw})(+d|0!Y)xixJ!`u^}xCcj4L!;5->ls>ga$z-7b<L3s|8bZYbow
zU?)dmiGWxEHKLeEP-I)x!+j_*VKGqUNk{<pOh|mdl2Y7Q3b&r6MTJGB$z}S|#^Myq
z;wij(%HsR3f9rbu@$;dY0rwh!RCvcY3Qrm&@v-jomE~5nMWz>ssm@rlIo6pf7EF({
zRm^N|<~R0ScU@2Sb=S%BkJ_V;QFaO0p(3RSeUEBa?L0yGMiV67R^ZeRI|1d44$B%a
zmPiy9Ed-#WCc*z)pbEB)=qu0q7VWFFq!Yh9=3JS2QB*&zxNv5X&uN%nJ9e~oKC}iF
zgd{^CrXVTDpOaJ&6W|ZIZ0l$ijbG2|1)J*>^ng!P(|ZxKSvVh`+Ko?^A4{7ubH$vT
zx{i*z;#KSC2E`PM*MxswO9~S)?G-o8>UCnTP+^1?NR=2@%})+=u1CQyPX$d<1Kq+A
z%vs`_k3#@g0Dx=aWuOH7=&5nj+~KJI;aOdBkq8SjGNqmgjW4?p6wyWJG*;+~6Y_I&
zbMq65^%add(X*g29bUBK`#W}gUrd`QN+07Gd(jaS<KX3vn2GTWtBHI>u_U1x;E<0H
zEa(9dY{_VMYlWETaGOkSN1|BK+C932Po=_l$iJ;7aH9*0Mwu}Vx-iR`*m(q*>n6aY
z3Z+oO14HrD=-2vh2YOHi5-^!cm8Gr>YIa=PT`1%{fNk6!M@R#{fA#FbPKml)6~P20
z1`0*f8q`8xKe-Wgv%<12JnQQnyXU{?Qb5p`3iPpcN(X5cJ;>$v=-S#Z(JNZ_zB#(&
zYdy@KRJwO;-RX|}^mOn3?R4D907142<rBNuCBA$HACS7^gteHo+Ox54fO=D`D-lal
zkxRqjAUK$cgd=EIKg6)Z5U%w|fAMVJRQLERkJoM5?pe=f!N}*V%QR_Y{=t=>$qzqz
zTB}j9g!`i#Uv|z~v}l&|<r@#&e?NZ^>IamZg&|n@y+5C0C-@AF;Dly%K3Yn4d|@i}
zw0S@>)vg&21d}bg6rRfie$4_Ve@V5ydj;9v-77!*8A=y>_n#4K++X|ocGk1~^SiVL
z>vbec`N;R6hI!SMe`d3l>?fwb{MAjWtfl<XO<%ptrjL%^thM@d-zmHhl5Byt4Lb|v
z5d%*VScmCSr3;}<M5m`bOYh5~(=$)0_(0K;HMRLKUUBm7D_+d6U9+TU{({|4z4p}Z
z1@d7{7CUeG1qZLaM!xu(YY$$qoPTaFZrSnk?Kiyl-VNJ-zN4kse!;b!NR3RL*K(Kk
zF<*UfRr_b)$!yzZkpJ{q`&HCd<?L6YeMl6rQaZ`?PMA%ez*$p?6l#_AX#!aVX*0AK
zQ-hRI2)m3=g$3n}?=+S#$hmaa)4O&(&2EN+0~=X711yt`v$eGZ=0_pUxDFU&>FCm>
zqdjdEvu9U88A1W&6Gx<VUmXFoN-q;tr7kuq&;mjsFQ?%Gk}b)Dp2=+R79xaCm2*gJ
z-__%4T2B8JIz1P?LZC^*oaz^yi*6N!svrk+#6)pBk1*;;t1qg4th%T^%`r8f-JL&m
zR1t*{A-FlF%s-BAm9a>w%8{gnN#=VHsa?*bB4?V>_AimbaQ4Kn53gAksICqyTN5su
zJD1&}$mz((kWj;@r>z00&nlWd6UqA4QPPQ1{onQD=~bGSDuBTM6;91O2d7F3(W2s9
zLYn8|T-Uz<Bv1#VQ}gAe`BNwK=Kp;^j(!P{)2kpi0e#k^@5)a1BzsHg#jzu&d-03Y
zp));qChp{e;<^(AmS>|(uGlC$j(HT1b)7sgrKj;IXEZj>WT+fM&LD1J_OR4Ls*l*q
z(0*St?x?Cn66Xlq2=RBXfAIcmuf0F3!jl#b&CDrGE$O=Fk~`|^*v=7bS7u(Zditi-
zwW-ZL2jmZbwQJY=ENTCiKfZAN(wlb|t*M++%RhlqRfYV#{G9wl`NvUtlN<7qoXx9x
zBKzeX35|WLYW%Zc^=lYDzVEu5<-IgK<MOAzyzFWDN8JrGXOH892>1gx>U`KST(A29
z7zKa>5}U&3kmea3T`C7PP8?q(!vL&C%aPcrM^Mg1kzT=ZU_koGHY{==3Tvr$@}meu
z(76{7H1?;&I71DJE<MRiU^7P?a8f96CrjuPOiSgNNlxqq)xvQiL_AGMb3xw}oeN`_
z*unhB7sISmTR(U+YryaFO>HUJbY5U7kF&c?($w^%6EDR3)04!Cc>mjVaVxT%7K77Y
zh?pqBk>{-y%(hC8Bnm!1{Hf<A1t8BFtxwo=UCH!@lDMP<S59DZ&g85_r%^8$%`o8a
zP0ThY)Xtc~f4<vQId8GgnOr&F^k`17vWt5xE{oCUYPhgvos~yoQU%8akk7xAErBL;
zSAr{HYWu<$zLJ0U`jX{Byfe;oeiD2g;m2q0Z1pd2o2`0NZeU5_oN%sWEwXvy=Qt`I
zaWQcfFkr!plQXLd3#&3)s`A{D#094%@0qP-TY7so1w%Q-PLtK0<SH$lRb31tL#Z(y
zOQJV!vAbc;kzMkqzwtG$nUaF@f<>0!vV!feb#LkwVyxaMx5<@y*LL}%dvho98^~G}
zG!Mgm12%DxTp%-y23ElgP>F!e<8u@r#M`blW%*7XNs4jC{))30i@_o{144R^Rr8*2
z&`0<U|6ab|DnDdNj5ADQu+Acx<;y<ubl#T1Z~P{O0!%EJ=b?4Vrko^~VqGOG4BEb;
z44UEKJOLm86hyo!Am)Q!HsBasU~C_J&}j9L*3I~j6J}|s9Ib2^t)GnG<oYLJzI#*^
z@*7pcqeqp0r2Ia)Ek@XLawMj0^4y&Tf{vobbOk%-?s)Ra9goXjGQ;DKZ09e~(^$oJ
zwp&%MQ50;b(f^;fo$nd@|83jZ9{K-C+e4*fZTJ5z%<S3oe*-a^ze)w(O$vQe1nYvJ
zB*)<$Ysr7#Zov3|0_pQNY?%LF!?=@R+%O7ICr%Stt8aiL;ZmFgw&TQSqwYf8PTiHd
z1G+<48zDTSi3ftw48#0%{!f-cl*4{6&dSM|CMS(y@ajcHD%j%&>p*=TzY~ufG2^DI
z;q(2Q)BlV7<N5SjzVW+sz1ci=CCsEPG@J8hxXNd>uRm}~M}+kHr>C!dWnn&ErK*Cu
zE0x>r%5_Y=!9E*3GS~n^U_5eSLiybZxnwPulF6?oQ?HO%i>G#=8S&=)RljeYeqj9x
z@a&1IUpOl(sV3iSmhVvVt^C?Gs8pfKH-G)@yI)IBZS@Byro?W5#*<K263$NwAh|O|
zHw`v1F3|1JU7_2rJE*%&cc1Qix~Is3FZS4m(<C2}16ik^u<sr}=L;+26At*byE<NH
zp2y=S?${@R)kBNB0u&@YM|?;yAJ2eIz%yR{c>eMGzbgOS`0-~wIj{%qH??L=S2NXR
ztHxf1SHsR<bmBtgTBuz2P6(?p;zE^L2N&(Y`kpz3ojD$h1=gA5=ari$!<2|KrrFXl
zsJo7SE%)pHHb$+D9X)#2$g@PdZ}fQjqP*UyCr0i%%DzKwi!PjSRmwUmX6*F#fRC;}
zFwbT8o!z*?;Xpe1T!OiY3FW9|F8sGKYF)}6l4Koql8m*v8oGWP01*m_=u=5KA9Iu2
z1jw=||H*uL2Ix42Vj~)o*!-aWNL(}wc0Ts=<D&gw3o0j4P;n<ITbyoy`#?t;bjkr`
z9p(HL2T#KBsFYZbe9{vO@#&*HS^n!gMx+!(Xw@8k<`MbD@11}A<|f8|co>pw0yA>v
zFz!3P#c0_0114N`D=T_$``GdAPi)`*1iPhsjS;ks*I=%!9eIAkj-xhnU5(igD{-f>
zshbOzynpf4|Gb7RU)uk6%gU84Z}%;`lj%N}&tEE7O~uhZ@RAp>z+(@yf;-KIp8I}x
z!DI5P^955(tf|OqvWk_zW+iuA#iVDpn#>zsli$mvI=7$FZGCgP-e?YHo6X_93;UmF
zwmN>eWA&Yr&E}k-$*7<8?giVAU#2(g{Ie=s13AS}aA?3%B=_Db)9(y}j{!}bz<8*~
zJ?g%B6!NI+Chq$f<~O#PjBK3i&fUL_9~G&2j~%7mH(fB+3jam%K`7{~!1cNu7L~(+
zy=h;dw&bj>vBtMm9KnNrBUkX)?+a+$*pYEY0AHsXIp-+-6y9(hF$h$CqJVmdLqK&a
zaz)CwldWB7-owEOwgIH1fMZBlS);Sa6aa|k1qDt}&g~oVTYJssk3Tk>_X4fr9*@9T
z&wOZNx4r$Zl4;pQ*Tg=hzCoX2Y{;`c@qPYdySUmWO6x80W2*PAyVU04t~7VT^GVy+
zhnU@kPx*$lr}N4$i@LL5fcjI#@d_-FBkZq{^@S`jHYmR$t@{QVp0)EJjtpP>CVHKC
zwK@aG`T<k;=#N6!kN%<V4fKg0<~}@-wjldSkZ;4r%?-C7inahL2>{8vN%%r}=W%B$
z(_Hb|gBcG?AUFkN5Y~VkE(GrtKO*q7;wN+fJOUo29}*gAigXo;osss59xv!U`MCtT
z0Y-7tL3UXoH&ltG9z{;ZqrR6sUVoNd1cHI&I+7p&q;$?!N3uAwtrmOGDX%no4MwBE
zYcw26x2D_tR;zm3LQw{z$I14jT^sfninHcc`?<&9(%S_|Fgz!CeQEma<<nfbRx5`e
z7D31>*PGWbp4^j|Y{)20DOhSxob0p(vRs8Wo6THMV&gai%S?{*q({<HS3croFfSI9
zmzx7&R+BHvTOOMdV}n!S?DY~$wAsXDNVYq;DV=-ba$R<ttKj)ZQ<iQ_DC+K<n)P=K
z<U<&-hZGNNbHUJ@`?;7A6_p(wC1t!}G#WkhNuGu2Hk;p;W=pqPv#jYGDc)#wdRA8F
z`4i{1EOjSm@ECoJImY2}$I8*}B)i)@z07H|Fji3D&cVUa!ocDkW<zO7Y1^!@L#!_E
z8H};GV&kFdpNLFJqLA3MCuH|Hdy5Lw9-Z#ASfk@AJyEVH$y{$@l0$;)v7F3MdvV8b
zQm$Ta2;@wiR9BlEj*m?a`}2L4xCfbOU2t3Znk9<_&bE9L2<iyO0S^KOrvvVyNMD$w
z?n(t0<N^UHVB!%svr0r94jB=Zo+^cC++q2Q%*2P_ycTi*kb}S@@%^~I;{n)}Du_z$
zup2s(9FxP#<bNz%$s*|`Q;Gt)(Q8)dOQpSkEXW_bT)uQ$T?xZMH!rH+#y0b(_xw@s
z6s0x3l%)-0zf5#UGsiaIz*XP{Gp>Z?zGt@82bgi}jd`<0OI%h}?mL<C!YOe5Vr`GJ
z6_@etZ0}#D6xw3jtqJvGYgV7XWdsD8avq}ihl&Cxycjh1B8>wImJ5vIN5RxqA_FrH
zs@2572~8G=#8x69z5(NV=>~rmtP)1KN?i~;E|k*J)1YM>DD}XM1K28x)<y^k${_Ud
zb$yi^7~_)BZZcu_4qrvEuW5nldr=VelHQ23*c0z>-O3(Ze>l-?J=9$=Cy(7F3C?I=
zOiomcQC#KDxT_pC^QMT7w4}n6kv>CmQNZ``#3MQW;Ul8Q=rkAw7UD+1DS2AAFt5=8
zA(0!o*<jI=g8{uovVY3nfse6wezk8VZsjl~Gu2+_b;dcZl7NWP8><fQNb;pS(r%Em
zlQX6W(G!t2))h%te2N=qOaH`*76bm>B50lJByg6<YMBR82m}id;C2x<VRX2lh-w<D
zpjDkL82k`8Ac2A^PVl7=Cz3vkRIUkmAQNf2LD5~G?$Zen^o2hgyz&+b5Z6FDj_r=}
zA8;4WfDMgkag$!M6<*jqk`i^OmMxUm+!^N+#KoD?*1WX*Wa-HHKbPM>e69S~^~sLO
zw|{F_PIhXxNfa*p$t_zOL`Qkrd0#$!O=hMi9nQo;ugPP(9?98#=>=I?S8aao(^>ZT
zhF`y0oHk=sMkaa7nFW=1eN=iTkVoP4?m&{jrHbrYIKMKwrruJ`EsJt?C59YnzC*C!
zQE}jx$A82GV{%*XJ<Ei&H|4kZq{KOohC>Ultl`DgiwiySp_^I88y9q~t86c=iP4J!
zOUleNTViVGPR`iymr8w3ZGBv<)8vY4j&06#i|cM)Q)97u{jKbLX4*CPHTjQ2sg`&c
zEnW%xe1QwPR>j9#8~m4DwLLeN$2j6+6B4ZEl*vZl{wrR(WvDeV%`t1Tf8LPXfbq*b
zW!1kU{S_xw#h^f!DHf-&ED-(&wMYUV2B<D_F@vbgDxpjt4}Z5HH4SbKkv*_ul>-?j
z6~eSPWM;Y7&#Oer#)Pmg3sa{oS+olnaA``?^re-%BGFb@dQ7QI$e5a!8S92~PqrcW
z%%9*w@2k%r?vR+n>=#QrVX2g@V=IT<{4WbG{r+p;zjT3mV*@q6gZa~+$nVMWBaO)=
z(wr-w`rxy_AAe<bYUO0B{PsVMoX21A`lah)ylvNfaB0tzH@EQ5^Y5w1N^&Q7&5|HG
z%(l$T?2Ob{8yow{wkMinOSd0o-dl5)<!rXSChwHx8>~0qngDl_DX%?Ehd@uOH~qD*
zwHg;Z@OSyv7j9++e|`O1ksR-mTZaNy$`}2WEw7hQ^6Gt0{p{86?_I%@+xEVSsR4Ns
z&@>7TC3|*7(9tHD?tbWIUj@DF`(gVBa;IdW66dL8xw7<s`%G5MfNC`<F<8=#ag+Rm
z;^UU&9&ncMzj{78;4F6H4;DH9?OptCdG^VpWHVK$&MpUG^gm}&iUiBg>2&(=`%gnh
zzCs1%*%DQD!bmw$!sq|PoyLagim<*d!1{JI(VBo(P%#kG@j!@A$c(}>yt)?AcAAc2
z@J=zY5+y+c4O{4OQ9sO*D%dbC07Zs_2{OW>#H3(>#ID;VMJbP904q|7Nu-?yy<RvP
zCfmo55Gq3|MSh5?!!na;W0_&3&?n#Vgx6-X2fR;|*#gsT?ed>rbMn~K9OnSo4Fk@c
z)L8C(P5yJcZF;~~_JlV8LqFap?nsI^<-%FC;u!KJ(Ug!T#wSog@j;JP4s(1%Im~fR
zISKJ%T7pTGUs8NphLdtl@$8n=Zd<7rjaq-iUuw=|`8UZgd>Wmb;xa~$zD2TtZ;eJ9
zT`9TIpR$UZ<To<SrT!!9(JF7Ltvgj;Sd^--I(QI<&GU05Dyh(JR|}HgxQSJKb3yV8
zH?jP)3zBm4GZ+=5Pc15>aXdqZN7Igq5s^!a3Kj~lCj;(!JkeM~M1#cqv_}Ts%8;Hh
zH12(EWca<?x(o>YY~)7fzL!mxZ`r)XY<Wa}<B^kbY?Tsb1&`dpZ{STEe{plfV3>E+
zt0PLtbgAx?I7Pm7M1JY^N97k^h`WTX8fIm;KgP;mi1REbqDk8un00no0QaC}BysLa
zx3F|qR+-lT;-vs4*|IY6gBc`0&i*HwK019KPci|*!?%>)e^1Fn^I|@ak*BfZi{;nY
zyPtP_#<u-n;nREyEokzy^7}tO|NNh`G=O8;&;RsI`;C+Gqin7GZMHGBq&>j9P|C%d
zIzDS(x!~yqYn5Ecf2Jh9=^Lm*>{(AS!%FC^F4wi_dSGSZB6y*CRQIgzW!*cvk942n
z8zGA2hoCFA71%OBmJ$;}uWT`($E@x(gc!ZDg-~`0;6^B1i7*L+hrI!1y{A<NoD8f#
z$Wg_Z2Xjub0;{vDd<#rdio}G&1cC=U5D1h+%>YTqa2d@@6zTCo1Q!H`o@u428I<xU
zs6?y9jHkf791l{8EXt^ONs_{1QLsRe=FF1p9R<nYj~E1lWFQ;p7Nf<YPtHhSPE(B4
z5>C!p?{x+;^E?Y0l5?UBS4;X7dxD;~Fnwu*TU^wrhboN7w;8N~lBoLGfs-|Qr^6m6
z2+l;l%xXx>v088$i^-UZMLaqhS4nhP%WM4Bgv6RlriFS|_PQ@RG{wp~{yIG%EZUUo
zugVZZ>+5|x4?i${#-&@97wLlyF}@Rnc9YvxVpFd7iqUC_a7yKjN)&H{44Es<7~^)Q
zj`cVli3wAjPDi+ke<eB{4r&G(^L+=LmWGqf`5{&q>t?a>MUOv_72z=D&!M?0i14E<
znc=Akr;1+YFkp|BV2duyO}yg#tJ$<Rk;kXn*oe_$H#q#!f3f&8y?*1JhfPV$@07nx
z47J6YY(mPN$!cZsdimX`oLFNNU4(Gh>WZ$8Pq0S2##myV-&$Vlc3FA#2Kmc5Q-#L0
z5<DDFFX)`P%D&;Mn=2<@I=INR<iZMXS&X5kY1d5W!gU>dz+Ga;S1VUEFbVF#@!6v5
z<Ro{RD8^)`NupO+pD-1losd|S<{Vq>h!ce<yCWVSf7}yxI?VZDAFTfCVws<ILdw4)
z-8wA{9~`<nwJ^s{;)hyT0O$8}EiCFREM5ysI@tcv!g|DS(!vJa0-mLXjXEp8RtuYS
zX8wp4hD<8|L<`$>$wCeIJWPazJe&>?M~T7=80Km%%z<$p*1`g0SAVL7MV*HckBHJs
zx(s}m8rCDeNedfv-)7sjuu&Jww`gIL&drZ#VT&%8Kcj{1y2*k7-b6p-jkmzhX%}o^
zbi&7&51O0JIJbx(G##NnXf$m>H~<Q>1emZ8;TqtN9^B958d9Djx*_BnRC2c=rLL}j
zV9Q`vN9VAwzIkKBH@&&9ZHq5ZToNwy)%5iElvhK(!N^c#aATwm85+=@KD43+_=!sE
z2Spn}bbsG)&8Emue=i;uBBlfKE<I@7ARZ$fBR$OsG=M^z2d&dN$XyFN*7Ff=0PlV|
zWUA*Q7xYmZ=FeL^r>3@Y{^Evd%Nyq}q^SR(#-++v4WW;ybv|7X-&TfSF~Z~hqFWjn
z9O~-t^92jb3X7GG{Lcz+#D_%iDb#h;r4bw)Q78J)4gJcsQ+e}ELq&O7k#4+U?Z~0#
zRP)d?btjcIh&tMkzE|nCZp1Ysmg2jxAdDb1UP>Qw(Nil@5796-_C%V8A{eLk$e?ey
z-#6SD@tqmkp-Ag6eRz96UgAwV2Fo`**xVNBZ656QH4hIDcD0NsN&5PSyILbd+CUGY
z76PVohI(+=cY3V92^Mu{U`eNd>@YyM5+r&NdQSb`=CjHyRK85tIXpZ7y&h^_vkFUv
zUH$(}2}KwwwO9I-(JDgbZz{8>2Orrt6v2Ci#-ZE4`p2Kc8wN^9z$xJ#-EN#QU9GzY
zwu1KRu406);cgXD<OXJhcUCjAV3%eCx#?g|r~pPY7jv^1EP7rR3x6%~ECJFMNgz{G
zm=8?NH0)k8SSIsB|0J8`uv{3c$!BD8p@<d3WNCnvvLFkA=q!T`MQEMC4g<u~vHVVD
z)vN|yR_a(iT);N4>1+m@36aLx@U1YH&13UfBU`{0vPIbGEn!R9GPWFkVOFwLY&BcM
z*0Lt-|C(6~@Y!cN8*624EW+AZ2kT^AY(47+^Q{;9l>KagZGa7wAvO$?up8MXcq8A!
zwzBiEF}?ueliS!RyNF%PwzEs%c5o-#1xb?2pt`z;UCypxSF)?v)$AI!mtD*DvHk1-
z`xcC{UC(Y{H^N8IL0ITM%#N^|*|*s(>{fOgyPe$uPgi%byV*VLUUnb*4!fUymp#B9
zWDl{2+4tBZ>{0d@+^s&ro@C!=PqC-j57<#y<9wDq$9~9u#GYp_uou~n*-Pvv@Id`C
zdxgCUBf39hud|=CH`tr(E%r8hhy8-R%id$ZWWQqXvtP4g>;rb3eaJpyzkxN?-@$Xy
z$LtU6kL*wE6ZR?ljD61j%)VfMVSi<RV}ED=VE<%avai?)c9M-TnVsS~&N$}+7rDg2
zP2ome8aHt>x4=7)jl*ytck(D6&0XBhW4MQVc`T3P@jQVi@+1y^3#>Y)@-&{#GdL_q
z@GPFqb9gS#<N3URL+6$k^AaB5r98+(Jj}~@Ij`WAd=j6`r*JTKcr~x#wY-kk^J%<+
zPv<lEOg@Xx=5zR5K9A4mjeG%L$QS8e=ZpCgzLYQH%lQhvlCR>c`5L~KH}Q46nYZv(
z-o_)m9ZC<Kyo;~r-MokQ@;=_r2lxg)$cOkaAK@GMCcc?(;amB6{Cs`^zmRX^qx>R%
zG2hNF;XC+FzKdVVFXOxU9)3B$f?vt6;#WgcbuYh`@8kRV0sbw19lsuQ|Bd`6evlvH
zhxrkHGygWfh2P3=<G1rW_?`SNemB2|-^=gg-{JT3@A3!ugZv@>F#jHZgg?q3<B#(v
z_>=tm{3-r4{{cVBpW)B)=lBo#kNETa1^y!cF@K5wg#VPk%wOTJ^4Iv!`0M=V{0;sl
ze~Z7(-{HUD@ACKfFZr+d`~27Z82^AD=O6Nq_;2`c`S1Ae`N#YZ{Ez%k{1g5u|BQdm
z|IEMOf8l@Sf8&4W|KR`RU-GZ`34W48H<q6gbfDRAcn7*o67(=fVT2`UvtSXdu<c|Q
z9D);ep`!(t;1*(_i|rL+g*YKzNDvZ*BmvAg!6&2&X+pY?A!G`EAxp>>a)ewVPskSv
z1n}a7VxdF`2&F<07AV6)nNTiN2$jMlVX`nqs1l|M)k2L>E7S?~!Ze{lm@do^W(u=}
z*}@!Qt}suSFEk1ZgoVN)VX?48SSl<NmJ2I{mBK1vwXjB5D>Mn~gl3^dXcgLoh|n%{
z2%SQguwLjEdW2q~Pv{p0gbl)=FeD5MBf>^uldxIXB5W1T6V4YdfD*|zVN|$CxLDXO
zTq5icb_%<MONGmX-NGK>a^VW$O5rNuYT+7TuW+rfPuMRU5WXc`CtNSwAlxY2BpehD
z35SIv!p*|Bg<FJMh1-PNg*${hg}a2ig?og1h5Ll>2=@!$6&}#-lRA2uhlZryk)f_u
z{ZOQNu(i_|>Dw6T=^uzlop>G=hlZO6&2(vs^bQPf5l29^i0xfHy~g3rCQu+95kA~$
zpm5jFFz@fy4@P?XH%1Iw`}=#Fy84XDy?<m_=x=Y=4|R3)HTMXu{T&jP%AroN6SR#H
zrA3;Wdxpi~uHJ|^*x%e{ZR_9E*Mk5>8^<5?BLfsCb@jFMZ?+8dG;e8Y?HX+DiJ;Db
zNb|4(OEsvfP9rr%DX^!%wOefOY3?xNW7-Bf`}-n8=8gS5BfXI(w8x?asREN09vRSY
z7;Notix^ta9k>g_%^f0sLt;yRf47k?w8BdRgI#^Y`qt*&$Y8Tb%PZdZwCTHso3RjD
zh9jGYn>r&z1)7!crmnW(PBY$h^fmQF+J~)b5KHE8WYD5MD3qa14X+;=8t!V}BGR{5
zy87CXPR*x<m9+Nu=GF-HTGPg^wn)EWpsRIwWH6#1i1f8~^_Y8`2b!p@kwJZP8x@Ei
zMmr;IUBl8)XY*i0YVC}mhiJfTL&K4Qrk3W`?oG{uZMODibm91uaXcVWr%MCP00IC;
z|9}D14<)xM$;Tg*lC%dYvL1wz74>W!>{q|sHvXV|f@z><WT=S%!`$1|rv)u45Gm1y
z{%+-N+b|MAm!J?zZ0hQ3?^m-8wGKu=cy#s;+q7&dRG5%a4Vhb-`^JOKgM<B>l%BMx
zL8TQ&H9Rt4Rs#w|C|yKwgysx&ZH+XwkM#6dweV1Hb5D;mvbnXVxwrXrv&4?B_F)l(
zV>{-^V8j^N0zkuPm?+TN(?1lkqQCmO`Z|=hOX$zOh_SV~C(_r}Jg6VUR-wPw(AwYI
zi}BX?Hh1(zhRx&sH8OCzAE|u+_u);E$gmBcJ}^K<wqn9s+X01<LA5fA_CQT=Xbs;O
z83Z}n+!LieclHl<Z6)fk#{`IPY6V;jTZcDw4FfLKjwc`^uvea}D#SOT^1*(gJF-Q@
zY#uUdO&+ohcaHS73^k1mP{%p6Cu%M|n-oOS+1%4^QLu}OQw%hqKoPc{uD)&nr#ixh
zfsvt3e3lI}DKZGO0SwdEt)P&uK0PWQ=-guI=t2!GDjcZTfvS;ufP?xZWxiV!5LYX*
zk569p(X1p;G8?oHHjaO*UM*Qa0yNaxZ2^d3(ohGt34=pJLT6i>u?5h8&g&CfB0W8p
zR_fMvbnI}%+=*dqQlVQ3(tI~4p^*WTa;FZ7Qh~GS3`9ns6{8g3I4f#o;OtCP3~+dV
zOGLkE5Ocm$8g3ry9?}D&qR&h%gI$sKR%~L-1i9)wkvazZM+Sga`nn|m<Vc&oCDIHG
zA+(MRV<-o<m<O5%6!_^H5QngTHPh%cwE$4N0df6<04_e#!~1)HF$TN3Bg362u%pv7
z0vt7nVk2lnOHV`s@OHHV&5yKpn=p)M52mmEbV%uTXGed32ax}19AKFcAz=(7Tg>S5
z$Z!*VDdq_UF-g?`b*n`UDt(1{1I*qxBo6ft0@QF(vKf>RCeQfFMj(PULWMOE?d}J_
zbO8R_uq3tgV~i~tI8#dNIB3%Y;rL;|>o9hC14cmlAjZBK7!f$n4BXxcq&d>lVgz2m
zICn(sN*625pry;IKB|yvpry2_x6OjQ!=3#@==_LrXrybHM$AY+MK$VMu~0=KSYi5s
zm1(6^mJ|AfmXWR=%$5!#G7r$YV`}b2?ah6y5q)o@t-EX3(oRi6E$bs_dIal0r_%3Y
zdvSXts;z$n1J#6f;!2$veO8PLe`iGj{?2-)Q8Ay%Z&8CvMxz=gjH;ARNeyk0p>8Z2
z`kv+ix+#D%Z0+rDq3=>=qg8`<1>VdXM*4@<rdiaWI?njozCL`6npVQ<-?PQ6p#pS_
zb0P|)K6Fe#gY;~UY#yK~iXcW812{0G5FpY}FB&4XV}<AwdLx~N4y^72&22`YIR!3^
zL`zUMyAn`P3*frVh(5;Z)!c&_)D|%*4MMUW$7y`0As`?Vb+J$;z1RvYW}+-jST4H>
z*#IiVra)PRWx~p085+Ti#PsbN09cQ-s39aPFSQPgY~4zI*A;1vU;(89iOR8`2@;{B
zAL{Ii^t9Q>7aFxSQM5!g0lfl-M!JSN(W8Svb`e^5Hn+9`L20YDf&ml&IV(m5kh7u)
zK~2o0AgIpa-ky-yIy6+O2W$dmnpLby9jRc^A*_xrz<bxgP}fk?nFT58blmu&B{r27
zmx5#f=|_#yV<kg-@wMZW1C^<vd?nJ@69G9(I71C65Q`?Zs;ikvLF-f$N-hbQ)g_;v
zX%WV>rj<<vkTZ}1(52L6LS$r6=x7-bMuysiuD(HG{lFGsaHK`(9^53f47U=Q95J1q
zvrYvMwQNBX2RfTuFe95v0~OJyV>OOZWXSXNDEchhc(j6pqt1Gw_b9G3NSBax3s%#S
zmWaBvX%FIN46}(YO7!V8)R~4hzzv9MpmY#`<H!p%7M?o>n|t-`plQ1Yh32+CvAv|M
z#NN_1+ycZ7Y^)9gFk#Q2Wmvf>QI4K|RCI=zvQ2m%8JPH%;L17Stvbawfz0jSG-SXu
z9qjLFlQ1zxHlvwcEwr`_b#EEKqSik$IJ98|ivq|2fJ(o<9cZ~HBGQEx@ZqijVQ7Sg
zHXJt4=B8_7L}(f5;2XQ8O_8paerz22@P`Ct0lV_;m<}rDrnq2?`T^r>aF0rY)2pz(
ztsnG&vi;CHzpUK45u`Y%Ql(8uRbFgUS2iW0sh^?(bSb3^ja7MwE@8Tq(WRU&6^4<%
zu7;ADV)S)$31TWJQ$;B~Ql<*ZR6&_4C{qPxs;Cf~g2hUX778Ipuo%?@i-T%uwJ0c9
zj7-5|WC|7|Q?Qsal@!y3-j-0N63SG9YJw%GCRjo_N+?GO<tWkGR#&W+T1WW;lrKQ}
z0+cU6`JmZ`3*`$?z5vx!N;Q>I4p?)>g>sZ?&8yc6tS?auu2)h})>5rX_)S#0r9Q0P
zsqi3`5u{p!RBMoG4Jt1vYf#HNjVcaN#UUy-M43XADMXn<lqp1+LX-)1TAG4k$`Pg<
zuw#r1<p^s{ZBX7(rf?aCq+NMOnab!z8D%P?Ol9<<jH)T4Y9Q&1#H|#fYRV`_Iprv)
z90V6Zf{P%*MUdbkNN^D(xCjzl1j{K$1?8xq90U|W00k~Vu|1#+BY*-S<pt#+pa=md
za6yg`0Y!*_B2<hzLdB>fL=X`ohzJoxgo-PqjS=8d1PLTUR91*UB19k&B9I6XNQ4L^
zLIe__5~?IXl>{gU0Yiv@Aw<9sB47v+FoXygLIeyU0)`L)Lx_MOM8FUtU<eWV3c<7$
zE|jB`a+FezQpype96`zvq#QK#AsYG+4Lzh4=t4Pylp{zvLX?BXJw)RkqHzz=xQA%m
zLp1Io8ut*5dx*w8MB^T!aSzeBhiKek?~E>#BTP9k=(tdha0PlBIdGvI7<7av2Mv0N
z20es9$AxmxpoeJCLp10i8uSnidWZ%+M1vlpK@ZWOhiK44H0U83^biethz31GgC3$m
z4`I-8p&Wz>LWBuIzy$4qvWPN20_EzA3Q$d98u~B|eOSW>fpT>^1*pC-0YI1lAWSGB
zOt2KD@ekAZhiUx7H2z^4|1gbzn8rU$;~%E+57YREY5c=9{$U#bFpYnh#y?EsAExmS
z)A)x2>a+~hXf3Q!=X{_hptiiGRJ*GaE>NR2wML!!ftoVyeYtiYFRw;>uGQ{!+Pz-8
zPgC!;TD`Sey|r4swOYNkTD`Sey|r4swOYNkTD`Sey|r4swOYNkTD`Sey|r4s8qy5Z
zY4z4=_10<i)@k+DY4z4=_10<i)@k+DY4z4=_10<i)@k+DY4z4=^=h~^pyAd)y;g6%
zR&TvluZCd*8iozjYxUM^_10_k)@$|FYxUM^_10_k)@$`n)B1Uu_Px`zdZ%giPSfh0
zrhV@;?R%#Yq*Q2?PSYx#rd2vkt8|)H=`^j<Y17ohCU)u+&XpJ*?D)khk@U>?v$(?k
d0m<LsAEnU!bjr71rTb6jPcEkW8zr5O{~!CE|H}XX

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.woff b/assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.woff
new file mode 100644
index 0000000000000000000000000000000000000000..400014a4b06eee3d0c0d54402a47ab2601b2862b
GIT binary patch
literal 98024
zcmZTubC4&$(_Y)Q?OXfSHg9d)wr$(CZSQ{8wr%e%e)p|<|9eyQq|;BjCzE7qGMTiS
zyqFjeFc1(Bu<scV{67g2S`7pS1o^M@|B{%PitIl_rhgT9|G}zPyhB_>RO}xo^G_%I
z2O^L=ATW7lM&^H<^*^2eAN0eSJq3(x4DA1L)&F4euaO6sK5joV1E+r+DAqq4sQ>Wu
z0|aVj?P2<lBLV`}^8f;o>5hA?l{GgpFa`oP%>HM?@(=7t5y$lA|Hyyb+&}%lcF7Py
zVOq>>oZbI%cmJ;c1Ox<gC+dL}Vr^&i&(7os2nZ4b2nZGl<hfAW#=zbF-|c<=pDz(8
z9SEMSfsF|eu+6`IfrtPBfrTEXMOE9|IXMFX+vx)VA%*|};keYrWflDM`ERs<ruhnI
z|C3YlyiEVerC;V9?%78A#`^kupoY*8Ncx8V%EsJaWE%av5I}J4K(9dm)tgQkXZQC{
z_V+Ig8BX{2&p{MqL}FuMbz$B42Tm3mLO?=<)WKQ9{RDWkLx{yQktU*mLx=&*O+ncL
z{qvtm+?6_TKpHtUvotw*=kF)E02S%+ALsXn@>&!PmnY&6cmq2?4Nt?RBbj#@*S#u%
z($dm;AKJG3Yv)w@yrS19dscW!&dp@T$utcaiktwRu?l%Fgn7##v*Q%&IaI$|O!P}5
zE!tXI-Ss#N&%~+2xwep6)=D=@bER^nrNZX=A{Jq3H3E=sm}xcLG|pUA-88}8wRPyv
zPnoSTxscjcm{McuVx_s+*=h#*Xv3UB1T}&E{uxPi!CD1QZy{>6F_-GvT;_v+@h3%S
z3~p6JKLUMaO+O0%W$iTHs4{|UN^?L;ts#@G+64bnV>gujTO1A$SfkJKhUN{&{#iBu
zbrz-NBAI4CWjjIN*&fwVu4RubbB`IvgcJ!WV;{$}bpWy2K1lw(2Xe|eWcN9U#V^J=
z0v&sgD$Y5Kh^J4utKJ8w`)YkScnEwZDG=2~oYvdtqau)|6HAhwqW$r>MKydMdi-xf
z|IPEi=Mls`ySoS4Uu8Lk>GP(?uENKw#l^+NO;vrl>caNS*3!n4J~PMG6%1?`Lo`8D
zP!I`IikK!Gm+D~0Tx5dT2;-4lEPJvvNz@R<kiGAHgN!1hJv!-#1G$r6x8qe+Rh<L=
zZ2FVXxySAGdCO~->oxn4bK2&F(-3ukKoTzvdLw9<pc%2CJ99f4k^?qCIZN~gP5g)W
zCXprkEjs?tvi~qSo)627XGEc1SF#jUkVi>r!ZsOd)GFakMtPqh`I$P>j#E63N~^t!
z8t)N`OP-Ey8cNVPKsgcS6B*&w9LA&4rPERq64J$9K^)cnN)EQxZgj#nJKXDP(A<tW
zNAO%^i{5c@MW^MU(q(av?f$|fWL~!<)mXOmPZkm<A6DM#kt5qo7l^K+_Oow65wm}{
zS{f5ktlc4#l`z5vk%Qn_TMX<RVPNfwI5O`bOe@#IKG3aeyFS*Ix7^pC9`!FQ$un+}
zXUau`=QZ`6PI*3`&kd_MQs8Bh{kIm5A`@gd==frCHKz$*aQYq(vXPdt<;B;YXY}Vk
z!2k$13Q7l%vG;ZcTZS>wtHNPvj4d!y|3WE|h>aXutjp#eR1Va1(D~!1cD@#G$XK@|
z8ScdxW>*_WC0A}fCWQ_Gk+039h^tbyU`-AaRQXE3C@|xuc#bIvB-u`7jVA9qExYjR
z=L}OyA;5`@PuJUM+d|rr+H3CQORerU?U9!{Bot;XUqe}i%R=!=DIcZf5IBHt${UX7
z$u&nXerDE=@3Wd|0@Hz$q*rpVDJ+Wsi!-OJ!$UKaeXQAz3oz@z3unQS7l<)x)linz
zAH493JdOfC<S%@|Hvq$>{BNrjX7CVfZBLDtgiqO>03bm9Y%opN;dZI*d!CgC7s1So
z<Lj{I=Syziqvncna0}ky87F#D0WYU597rB$E?Q=Q6*XbeA&#y;{cR~Ml_X8swSvzQ
zQKlT0QI)XTQkbxZ-fhyZC~jjs#y0Px*fMdt7H84xHp5c85c~_irovV9scGH{9{%EJ
z-LsS5zQdL;M3*lT%fM1ngsSCmYi6%4zrFL|&A|mca#oCIKIV*Vr8d-w1C~con4?p*
zr$_56r1PO=HN0SH`prXAax)$EY_02zCKipD3>x$n!T6vhxG4g7BozT_i+(EXciSh1
z*W<L!SJ(XL_SdE<`{t~@UDdAdUz?>Kx5dLayUw$Hadz3+<5D}%BZCKe`cE4yNK&2O
zC_2B@YGbYTJ=@>6O14_I7;gA)sBiMP<Rr*bC{!3%h|0P^fuZ#J<E|t_1l^I3=GWfj
zGronMV{|yF%HGx(Tw@_;se3`h`M`3Awj`nz5|n3DOFI=Z>W}zMqr`$mljy|@#K)X4
zywlOE7bt(D_<9aY(j=81rYh}wpQBZ2>BFX$_0y{XD7Q1jV-(PFSPU`4DYgBSjuXGW
zB&TypZ4-Ia;ZDv{*YiZ4BK%bLvA^d#3^`kw)^(lO=^V#PS}I{JY8vD2<6?gDUgByH
zoos%w5n5SA70~&_wmZ}=sE_CH+$5D%I~M^tEkJ&ltZQI7BsvH)rso$j0Tno$9{71<
z@V}SCAhApjLIvlX0Pxk%zZqkf%M1LSF2n#NI}?5xPC<wONXcqDK?%thB2MI|yK>=!
zobSQlu20xcw~DY&-wOel-n@?qJ&by)A02bP=f7VUb$6h9A&zxij{$poi1x&>usk&q
z)o~Zd^jeapPeoI1Jmh>Rc-6+ws~2@GiSZz{hBgw^soz#me0J4++L57M=6^+@00R~q
za2yth-1NjYw%qz!q2gOQL3>x?qI6L_n5iR9jUE#0ppndAXQSaxXgAAg+?Y2ZVSq`=
z9KUjbab4|QH-zBoMtL>BP)ja&OJ4O?2yYF#*>9aH4X@u0(otsJ5@}kXX@!4~Fy4Wh
zDN>w`7i{CSlIi9?H2YDBB_h~K`_cJqA-9`a@G}pVc;w6b)PGdJz9MqO5m<F}FzeZC
z*X!+f?>S;`wb~72i`W#}dhh!aglheCet+(79kLz+P{)7XRuyhb{YxtDFZ#1N?6e^#
zh*vvtce7F3I~yiY){1)rPtn#OV%8zxe}b9$IU5=66PVl01yCBSd^dXUKhK1G0R|IV
zcvk_Ac>q2IN6uR13{;c-_cRbEqYJTB_{Fr4IijaD<!Mrd*>P_s&jXx0$`sG}^H^o5
zz-Q`#Xift$p?Wb<=<h|fA;%agwD@EyQB>fxuzXVyNKg#>QnXBe)ocjuyk{hgW=c?V
zRs~?RkX9n-Kuh2ogdASyGctZ-79U~PP*d!u<<~CRR3B7LYtxF8T{?!Nye0d%0n1-I
zI4RC68nKpBKg^rfqiJ-i4HXbQx4>=dyxjLao>lA4TIu938pOX`7jX~@WPeN@jr_P#
z^lTrnNnS5FJgePCzFZ$yZEE2?4_z#R){UKOsw3qqM;Tb8H@A2_3MP!1!fsit%Vn(B
za_2OfhiiPV49y_-YDhUHAURUHq=tlP%rx5l^&mD@G^8z-Y=Z-tIt3L`u!>WVQxz;^
z&9LZUjm7~;VIecrymMSz9sAiMQWB|u=tF>$?NZ<_+~80;Rt&KJZ1cdqEdhb%EWus!
zdJaxE0R*U{g1~6{#~l&e3R1mY+6nb{2=-5{7mcd@paR4GV(zxv{CelE`s$Ei#`XXd
z)c6s?t)+nM8@GOItmYqze$tkR-@pNBhUdU3!dN9ILMYJOj4^aUvZMFQFK=P@cL1r6
z@U=sJ<=N(Bq`QQC3-wJHuee;+1OIT=^WJf^vichJbLK-(8A>DTum-ya`_|C7PvY^V
z-X#zAoguBv{!+QTW6rx3-!1S_UiFDt_}ti$D*F?fI@AHKaETKn;7R7C5HXlh^h{!o
zsrxdvVOX}7A?4Tr{6o+@q_3pMQZTg)Ea1)Q8|O#l$}N5<%GqV~ZE>N)M!~x7JUKA5
z9t(l39F)9Tiu!T`O`2ZQdW$v?+Qe4m558`xNHnv~bX8j4G6ay*PnvTLCWgm@K+IP1
z^SI~_P^NN)(Qy;<k<zK*cR2v-gyV~0AQiU6wxyy&Q;~4VPY2c0%y=4xW{-2|PdgcS
zF^4oiRfuFIl`54OCbx8sWdU1~MGK^EAw@<m&+%NtLJHaP?ChvFc0Prg|0QDUn}NwS
z!<dmX9)(xhmx1?IbRx8JB_Ic-_B+^~(lH%&-IS2K5SC}&5UN3FTv5U>gv`8wrCM0r
zdu^7~mAS%W$G8dDhB^z`1T=lN-^sNz%Wcwkz4|)K)IQg@u1iEb91XhJ5xEwYDfvM6
zkLOfT>Goml>)dkK7RrcGd}4t$1w4`Vi@x?8r-Xz-T@erhoTTvYj;62sm##V72KMKy
z7jCvo37#eEob8=(e^%k-w*#CwiWcoBL~yaY-mZ;3#7$hwrE0n&Z&_iqW9;qZ8h>;~
zOjAz(rmb4$^7bp}HHOIkg&1oXJz&O9f5ETRc`KDiwH!c>87$<tuS#eJC?p^dhgYAu
zVt3(EafN~hd+X1VAY`n%z{Y)(fLV5{rB`+<wj~`@By^!un~RGmEPOd+W=!KsUT#|j
zBKNXj>jXR}9R=#e{N-{typMNosUZX^8aPu^3Zb=_A_|$kJ2>CKI25a~u?@$|xUD0E
z3rV0H2Dkhmtcz}Bqr1R;PGC&s1*q_(cw=w!eh^JIxmYy6ip|~R@0t~6h9kSKF8k`r
z-rmZ)soKb2jgHIODnmo-1=6%KLu=Va>yJSJgYnC@P2eB{+<2U~g=4b-hjNb|x!65z
z5!Z3c@32#?=kl#m5f8>l8a@f=Wi6&X>j+N1+ruaQG?CtDV~PXb>@WWf2Q($z>z7U+
zMBlz(Z=2s-T8$d;Ue6M3l3xRuVhSxm5<B)h0`2`38hI#DD>s{3BKIpgmi-?-oisza
zkmgcLp`Vnlx?L~qe?(H=WYV)H)PPR{pA7{5h`m_l^X{d`q$MOR49YduCf{c>9PI^G
zU)!twAe$_^TtGrD{jAw%Wfw1k)5`DgJXWP`-<M&JiUEl?X^Z}aEST#t+_N(Efbm3|
zfQ)w<x{im3hyL@G^^sy#+bz2isgU@vv!l_bXVy1Jike{>7XNQ20MryLW6t0#t42k2
z0hnOio5PA`bpihQ)A=v&;|;YU&l?F@fC_Npa}OspB^Vr!zTb{NLwi)Hy`}19z@fr?
zU3Jh7xd)*wL=El;v+()ck_u(iI_w^muPd_R6?OAcCyxtX2(<rJlA42`$|$TR(<12v
zl?Y=e)gf9DYybQZ4qK@b25;3f3J3V%pD+1&^X-c5Giw!-UTKF8n0O2YT{F}e1ff;g
zjuv>vAWE-tjbs3u$PJ&jfGp*j;7`8P+@e0HF88@NU#6<M%>t?jH*EMz0L$My9PHiB
zRVebeoyHC8Wl&pm$IT(G**{Utw9Bh)HAE_^TCH*ta-8|<-fxJ&aV4hWUSV75)+$)r
zdIu%X^B9`Hh`wv*IW6Ho^#zL)v08Di99QNKyQ4Ex^x@3G;Cg6K(hX}D-{D_(j!D<f
zrg1OImb>%6g}xd;qA)E>mv@<*$ZX$rUpcaK+~5kxF2pAac<y?O5anPPc95_H`9WED
zWYcOrkRsxK*XDZK&y<t`G6Il`S?diP>=%N>3B`6+-EO>fzLHkzfcD>r`}fy+!N&}-
zUH9`HP&unio@p<rTM?to8R%4f?^t#A%^89fSe<HHA*j2--tcIx4&F)}Hbj_5T^cj$
zFF|M9UGld?S>V+24r=ON7xE68a7?3>8!kAzHyK4Lb=YbvQ+HBn+||W{Eg?GVcYQ!l
ztSPK!t!;<OEKu<(Mig8rL7&)3cSc8nLm>Un>i4P0$ET?I9pdIh^EU0+RcYthPqRm&
zPB}LVBWJC5;`qzHr{VN*QZ9;5?qvVIY@^viP)2>OQxb+mdkWDzLq#%PR5z67y??M+
zSjDiw%<bN@u~pn?LjN*Av^%NtrcHn!Nw6uYgXzv?BGZ`2z)Fxe$ldvcV_=rTg_zy$
zVt>%q&n3QENt>Lwj~Ps8*c{0xvFm@csrU=eyiH}Cpb=6h0&O92O%dTc0WV%R`6~bS
z;QT3eZTz7V7f#K|S{Kj{_}e_u;Joz^)V0uvH!H@e3WnVKG*Y;R5RQx=UKb=?4!qeb
z=_DKa-vz<<!-#l3;vWuQzB@*wKRW8KV4p5-yPE2&L*Kb)=K+0M>$?}ZxrbHii^hC>
zLN`k`gS9^kaeye-(%)p=Q!i(kFa)B=q#!VbG7-calS3zKZMl8Kg`I^HD#h_iN?($!
z>66rNVaPiYq<@#JX$rYXkw1$h7(yVDzNky$V^i%H!;0ZYI+ZXhW#@zfK7#lXMnh2Y
z^3kcr0*7W=&Ss!urb<Hj1^*_}&FMjA<THPQl9#Y$*+cYu*aovR?$_?Mf((Pm8WuQX
z(w)kntkfo+k6L5XK5?x8D;A0y>d>4di6HWv0K><1f+uu%DQIF7AJcpusQzmE==J_e
z-fwZbee~KU31mUe(k?U$jD<>ni>OKvN0|-t=m-(#j;6O&G~<{8=r6^gv3$D&K-xY8
z-A~Ae;#6^CAZ`&J{>W;EQAqsZ`r@~1+yiz(zXcIDK*GBO!0caA&f@eEcUcd0SLAp%
ziK^4%<Sav&1Q~{(M?V|7JN5KxFol8bvWsFaTxRp<P@_bvbtFhUWu3z9*86lWtML^9
z#C;DDG_0n~qcRzJTDmsFLJoSEBE47{fQ*99v9-<hflt}`b`N31iUd0<*@^)wW}#ZF
zeN&`IPbaM(%6@frESDf>9xfj7AK-j%&m}#)l$Krz(B|KAu~u{JsH3mYsRF-@7#pkE
z;OJGjbEEV%#{Qt8>G*G(Vfh9<)rQPk1eaSAEZC<JH+7rv@BMOTV&D6H6=!m4Cy2N0
zv|$(o9`iC?32N#QZ^#lPAcP3m4FpZra9I0|#4}_=Jqc{i>J)F~PoR(h+g}tl-VX($
zYO0R@KF7}dH^^v=pHnQ9YSNiTJWm+f!v@BwqQ$Y$ei`a_1{_|I<o%WKWtavx$ZQwI
zOg7hf?IM>-ss`3Ry;b`bNIE$R<S=!Sz_quS7=Ad4IYK%YO{6~+p_215=-{lh|Jzts
zhzbfqTR7AoS$atY2J#p*VUq9n)4<=kbhJ~Ue*SztHP9nZ{0}cB&PUIC0T7o9IAy9k
zX6TA>nb+z+c*ky}aexvI*zKtJjccvTTZIqk!Rw!$+NgN&BT7q-IM^YM>9lAFF3qsj
z{Ui)Y_-SRrj^=N_HhESJD-ltQtL~Y=Od(%jfPRpq8P9`F;O6pc)s_oF{z{=|n6er5
z!u-{h;{bvm_L%5agg+m)4aA0YAb@K`Qv~Y<N@s{Q`gwf<!<S<>LWx~sGmt6*V!|?F
z%7PdL2(eqp+Sq<ETerEWz|-@#q-oRaFR~bSgTqB(jupzay7hGo<6ObuZG(&7ALd99
z$H#pYC!xL7{N3A^>bvQ;>6xmHK-4tnG6El;(blqDJ+}Q2=*wlRYGBr%&K>9+K^{Aa
z9GQ#O*$%Ki>UYmph71RnuwA?#!9vfTIuG|p%N;AWWwB5C+IE2*>xGPGkT?t@?Dvhd
zt%Wpg_71*1_@0kBba@@FZN^TvjpVY+rkq1<XZfI(GvRp^mRM6N3mBbJH&~P>h2gtm
zJPXCjvMjf7K+`s#pH$0kv}>*SPOV2H-e;NChSuuNAtqhRtEe-DVqBG7vr*enVEmVd
zAv-&^RqMyAthD#nN)(w!Yp^GI_VB1e$~skiRlP3K6DJObNVTJM{r0E+{x$grTNFbh
z_uB<D_Q7y0vO6ERP3?(oz<N|y&4vw@&eU8j!8JuRvp7--FcrN(nj!~;y9)~vI=R4v
zeRIZ~?_AH?p>sc88W7$jtTI-pPGD>}Uj((F_<lBWCkEX5^#QJ6*rS>m&nMmhI4lhx
z;SZUOC;SP$w;q=0ux8Ozq190iFGeAoD%-HBSfOO9W&PK~Tem;KeV~3gA0dW>Pv6I1
zYNn)N-+Qq-I+AJB!=V9uxeoR-tL7t;-ZGy%%>9l;tMtQJm7z}(vh)}z8v;!QqkT%c
z`Pr;kXU{<7gZGe(<&Zjp1|1&SGt0&iI1JiBIdPElDo}oD(oS=FPy1_j?dy9UkEB(@
z9bfbpt~myqXy`*o?NPpA2S*3Iq3$t0QzT^=d^GlO7pmjpsXe^IwU{J-P?mtkdD4jT
zbfg}pfa66t&>R@<Z8=Xb5anVZ0@*VilInharGReOmWG@F2H~xj{4z&<dWfz$Rj<py
zm>5s6DBCTElqWD~=VAB5A$Y$g3nSX4Ol}s9ozugn47sFrns|d)D7D8mh1^h>F8%3W
z2a5TI<EH=tQ)DCEKj~cA)7>9W)%Rgrt<QP4pCAdA&I{QZu#15e8|E9mu`%xzEc4J7
z2bN9=Pr>E1+L(i!DwwV@xZ@VytBSnvu3ay?9Y$%KBd@=bFp#4X>B};lBl^>;B5%<i
zBeZ|TmK^P85F)d8Jb(ax#IIL|Q6+2FY)??77PzOwe*DZ||6qr}zKgeYIX2Udef04z
z{K#*38@!fTKYF;k7}>>LW8TF<a-2r>DeNLsW?@@;#fCxMm!*pX9lfHt)uuajgiV$d
zT#h**{Ipyhjltvp#_fvwZ6(9T&)Rb;VTsa~=gJDe$;q~EJzFO3Apn2EXrlA~F<KE$
zU^`~@dRT9`NnkY&k5rnw^8IMHpQYj9vL%e__KV3ACO7`>^1;i;H_jG>WmV*SvFHky
zf3twjY=>%B`6@dr95pk37;>@x#zI%UP>yJ?6%2RCAY-s(SLIof9c#sG+>FEDjD6gU
zD+r3UOyZKt5Q%XW6oZUQHH@|K!@vgu>y(j~#NpH5x9l+GPE6*P91EzHBE}krNo7~5
zb|0;8aj<>dJDCakJW=LK#vk^V^`8D9UP$2lLk&K$X+Ag;(w#ZeR7?dFGzJkJMi;Oc
zoicM8#T@0|)<<i-CzAhA*$y=Z&Z0PxVqZX}e-5SKoUi5o6#BA`Ohg#o7yyhaf~(fs
z#T;g5k6S!wNA7;0NgV?b_ITlcXM0r6ZO@u5M|~?sv>b|u?YyW0!6Ew$>Y~pX2XU`J
z<A?^&Uq$5?i*YZnoAh-Ted7EF>DYoQ`d*fm7~YwxoZtL1W7$X*5n>+fi8oUqvJri&
z6nm&FFcO9AAX=7k9_;yussklMDtxu6t5OkjY3tvL7s1PUqGstoYssPT_ItLMXX))Z
zJ03DK>_IPJgIKX7x8Rw<+?!kIc9MEA5hw)}5-iqzE8VFOr%mr5VC50inCtJ#tAQL}
z1%tXg16rH5cZ?pPJcaYO6~hh*gGh%x5*s)RLDozXG<$(Q=kn_7fh78e%R|8C^X%4F
zm9*vMr4{4*^7ibRo5iK-C*+ed7*^J_i&Im+>V~x=%ybD)(9wLptciZLN_)YB5O^v@
z{$Ja{Qtd!!GiH0^v6Ue$NG8nsD)~)N*JjWChU+1?Ny%198}eb+iG#cLFl;OopkF>K
zIJg1<gZ|vZb($pzH4ltHj`;8bzidD`^%%<T4%M5LS_!KXtzD_a(AWgymwVbW3(#<V
zb?|8f6xaG-z}4OhlEIJf&0ddWw;~%FTaylOxMkzYCUX@vrw>zG{!THV!AKNdnO5aW
zt-47+g@#B%3Z{i<S43@LH(h0Inj&$ed7j?=wQjuhVH;EX$@l#HxJHc-AKQe3cs&}8
zKZ0?Y?sDCYx`Z^Cx|^s^I*iw(dRAsvhwb(3U7F%B30k*WJfGLHM0klB{ddN50ZTy2
zu60p|v$n`?G0`75qP$UL+d3eSXk2mIrC+O+ew6RiZBe4b>t%Q@M`87PUsQr8-l>(V
z7?crSbh@OEA$m#}=67-ZTp889W3?AU=1tjMdw;Ne(Izfm0-RQ+6jH&8gwGA_(Q}sf
z2cqudmvKpmxhIPXLGEOm41F$3^s>mhI5{xLs3uHjw&8hlNfyhYWJ>LMMzm7Au8{{4
z-78CWHW(hd0`W;PqChl|g^3)t!&RZbm@=i00BhlV_)wg0=hMU42F)9g3L@3ao5I}H
z8I}fZ8eb0a?<61oj=9=X+T!Eq!RN*aH=0Y9i8s}rg8IT>C(zNJ!Th>8L<=0PZ>~y%
zhz0Bh?ag(U19g*K4YsztBIx+FBiiPs)+@S)uF6ph=|=6xgUL*jcixtPvskp*56`B0
z={4aNiYE!<Z9^;P?FtUwfqZfE=e;SI7Sl5M@xR%o_93*!yiuIf8V_%Sf0hYrsorOs
zfkK^9_=$Oho>i0tq@Z1;pR-k?I3o>lQ~?sYinu)T9ag!9h~z6;ikT8&2oT|A@)-z(
zaQOIKXY~=W6~KLycubCWOz(G95I!BBDB0Pny<_|zlgVmqx-mrqM_VmHhiBtJ`$Z5w
zCPrd45%V_Ko8gYvDbKOB4l<(Fy#)}+&?NnmY-1A}rTwO$s?$(4W6U5%XfMI)w58zk
zbnp#zcaX9eQujFlW$d|exgN>CX+D9ODCFX{GoRcYei!0W`_<p^r<%M|<v<e(yc702
zsGRtzx%b`iJ6Q_e<y$l}s|#ePV@&Z%BjsRpVnr@IOe(<8;=%MoTEI_({<MIx?o+Lm
zy@uf}-#~+3XTroy5iC8qqX>4DPA4@ELI0BSq?GTP9{qy5{Jp>{!$ilU=1r*;&BcRg
z$*q-IA(UIbR;y$MuoVtrm}_sru-Iv6QF-Z$*v_HQLPEzhFGyrl8>MSf`fNpzygHW~
z_QJA574ufXwN23TR!mhNU*^BKQw@5&LTdJs*_=x{mDYt5qy%uW6HuIrYQdUw=BHHG
z5Nt@%wEdaq4{)mv_E2B_!pNn?M`+Gf3%JA^GCHQY{6Z+#==o?<Xc<Bbo+i#H&0;Bq
zPkGS2-h%5-AG?Sl&q79mB*ASe)Q8HRNCZz&>VMBVKN&I-5tw2=+-ea|`(iVDzDkf`
z_o4ZdXMG*j@}fOMk`);6@zP0?jJx<T&}h%~U3MIX@wIi?F2pMP=$Rx~vVOhG&L&fI
z%&@+nxx`#%MaLBV6tSRtUBbUEE)aL$F(n`|>g<s`On6!kmkg!}$!cL@ukMVLxBMmu
zb!1M*xy0+mHQp06f;84P+Uf>|pqYLnuYp;NEjq=E37d$523+{9c|=_m;Y=FC2zr0q
z9ABp`#xa?^D8x?{^m9Pb8P5(LYi&GbahTA*2ISmx(8c(0gM7mGV0*-m^P2+5>2y*D
zK>!ty(}TsN$-pvPyv8MaFTTJ&O7I6s@>;4;BIl36G56wWqHwlP{~pWLHf$Uy#0Puy
zeV;G?gvis^Jxj`$>M5o?zm}_}UVzVP!9jt89Pwn(1x#nRAN`d2;9sJ`tk0AOz$1+E
zH{8RxgaNe%M&|1hrS+*9C*P^Q=fDJ&p_?m6QWaQ!V5kK*vuF%HaecM^I*<GHD<U0!
z?Vw-JqXtn?NIzh8dAH)H@;erWZy<Fp)KYh>D{f1%Ubp+IA5m}APs2n1ZJ<ms?xXTU
zi^4!7YC{p;W!{O&ivrx{EGU8I0-<4j`OT6#reRd25lOhZlnhn_O);6DCRAY!BVw=X
z+(#m>u)J^J{Rl04s^nuyFN`DfFR|@!RJFA-DyQV<_<Z>xaV4SNKY62@hT@DgkLAq~
zhG+%xacHfgNfA`ZaU>zuj+4n`fU3TLj}&960XK1bcKm{wvmh9SVn*;5QgF*KxDXp>
z;Zr51Q6HgH%jqJevB^Jiu6LMSlE`WNR1ubZUzzA5+#sU+UBVg8!D?yT@>=FvY+EEQ
zC!*yn>I=^d@TLt~CR<gUtqRoFCNQ~7N=pIB-^L8<acJDWKFHZ&?KRH4)Ny5uD2jgY
zM%%mcr$Pa};^OuI-jG)kdhz25dJsHAKw+&1ORV8p6=`~X+8JAll7g@mftT@A=1n}&
zS`B-Wabu!RMcMspnE&J;9&n{hi81DZjLUgcD}3#Y463ka)ne`IfTV`gQwz_WU}S^<
zjqQ@hMq$hFA;ADZdMa+Bq9q??N3;zy=KMuH=wtb>iEKJXWgp@5P+?!Jd%4yZjSDVZ
z`OkMD7`^B2*g{%}qlKpgf7Zmo0$lvg7&BQ)Aza@3G~b|J$Ysk*P8I&CB}bAMZW-~Z
zIR_wi6Up0t%hZXSOGa=}k*;=(xjt200^6TTRMf=`GX0xknXv$dY&r<S$cBtbmr7c%
z8dg|Gq^Mx@F2bUtEF+yZk1<t631!(_Ug~#Ax?D6mLho7lP8N}6B@gO8+*Lr+ENSv4
zuB5UJlOjqmA*=e|#@?#T<v6V3Dnd3r@b3##W1upO5V#EzCbXiZxH&?iH=J-^5ucn2
zB}#&TJ1e5^d2#7qR0GXTdW>T#xsb_X8RNyA_$By$)d>6vNs2f?oR!rfdl)uT3^wm?
zQwUBwSI&b&0r(I>$MjJH`fi%N1_>bz?&Ie_?js~TGj-`X%$+E9%n{r<<}`S$e`-p)
z=*`trS)6S1Q%@D>CURjquWCtl()2l|<=i+Y;!j1i7jdhWpckp=OwWUJ0MIi}l3TJ6
z%ie2wuVKrrw_6uhff+-6)=_Nlw(qWRJwWbgGK?~1p|U<-iQ8R_>vJhnE;jiLPcBi1
zRW@hF{B?5XRh6|AR&h%$^yWc*ouol%@U#QTr4H?XOSYZzd|Vm2@o@5F7Ops_jl7Q)
z_!ybL>GEq;&gio9wM`Qi-TlKa5EY2IY0@jteHNx%WR6`sJuJP1f$&aYFSPnLp{u4Y
zEC0QDql)X^>kq8ecE4t_gb{C=2=3N2Gdry^aVqO$<8QdOeXI3e?r5`^^}Z(42qSR{
z0UzZY8>scj<Q3Y!S8{2XYT0fr-jCd5x}ByHUoWLG^n=;fe(X!*S|UwonOU}J?-rpV
z7aw{2Eqqt?C_b!);TwD(s$Q+B?s#*;2|+GN{>$7ip(7LQ+vQ=uIKkHj_~tcpcgSP5
zl5+MbW(cv;e_PPRsa@@MkrcgqMx5Z%N!L9-bn~Ur<+53s7!rjk3?<gI`54Gj8$Vx<
z#FH=xj^&gwp9tEbR7;b?boGuRVv=(J@npfqC<2Pzxwv70W2GpI_pgzi!gkLW!0I}8
zxIVF;fVd+FsJhSGb{^3Eru&>KlB}I?)Qdv;%ICl2PJN$ftp)ow;+k%4wA>Ck$|vtQ
zY_;32dscrw)Oop1ekSSV`gS{<%RUw@3VxU0lDzU1SQNO$YkfWP$ke$i6f&=S)<#|)
zlsaMpADLw$TU8oa^N=>@h~Cf?=Nn=+j|^}w(v<M}Vw)2monZgX2utG5RxHF8Xm(ia
zHnGZQoZass?GbP*e7>lxqQu54&1r>x{W^6ldqjSsVb<$rwy}rmwYQ01Baz>U?dDE)
z6Enk8YWv#EPCC25t@EorUGU5O{POaAz%~D^imu19F!K|CcOQ6u9A(3jzt&6Lx23hJ
z_sY<?&e)V;92O04dAWT%JTH#=I$b`?@Ht59g-6)^nR3Zt*5_Tp?#8~B$8UUxR*b}!
z`px4dPclxQQo@VebG1i%V`-qyjJwO68P%1TVP6p5Q}m6dzH1N{3}tqkJ?{a=PO&aT
zXpZ<%AjynF9+mkkedZ`cxg$3>^Wy`DrdJCS0duxEW>Bp16>_r;eS+N9O(hQNv<q6X
z!LJf&xRsc1VT%AbwVR2Fc+<~Vq5hN%Rld6L<JOXxJRR~0!+M#JkloN2s4cuNCVWy0
ziv5I+{c~L3PZvw#<Zm3B=|n0pGBOK}8tiVX7R1vUr?+-vhHTooBFw)Ck9F(OYz=qI
z`rp#>jVv4ZBkPTG<kV;HThDl>)KZS(quq)nebe34H)H7M%ti+!MZpA9N4oWcss21+
zAQwnD0vc>}2(d1Q#3z7x%6;?j6E#S26$>I+F1&^X5Yhyy)jZx2)-|Upucn@=gqJ|1
znjL{ulPOb0eXL1wk8Ah>PJa-YixeC}tZx!&A(kWBz|&k)2zfAfgt^NQ;Olk0Vk3P%
zSYd$?<92$LGI`4r+F>*)w>2H8@J!QRnSiB-i2PD1f4t*yB0TW=VEPmk1ex?YExNMN
zI9GtnDg}xUYG}IWCAHvEm4{~@{-51el6Asc*;aKov?K-kv&2q9S;tVToYnO+c-B=`
znQKkgiC7CwY$Fiqj<-%#M!D%}%W?y{P=lzvRFF$pViFDB=NX-O>E6kM3WCB9`o^B*
z{MM$j4lm`~NPO5-ia@%@awPiq@h@2GFf=ysU@*00s(yk}5oIaOg0TGff)nIUWYyxN
zcEn}cZ}y^F)#s&R>KDsgsBwSUKb9_R?p87K-R`$x<v&(_!f{Ea&rKI~{B?g%D=_d~
zd64W5YlZ_|sO7aDtJg*(c%A?L)%)}JeV)}X(Bh#p8;+JH$GHAyDbbySI?o#O=)_N+
zuMnUV=PkduWqz)`w6)e<-X!{{1S&#fM5ILcdot{?<F=}<`;Fw{t9R5;=7rWa*G*X{
z{2{CkPf|0ZW}HxWpkuhm+yB9lRH?)yVF7<xa1@6>3itD)iTviK$x&+bcHFT*Q!eFg
zNcceU!8YQz_sVsSd;ERa>;c4~o)C6(H5wX?RrI-;Mgfj(au5r*P)ju{uKG+ds!M@l
zW?klvU;Oq*8pDCohHSQ24f7DeFk&%(PZcU>rFa>O6fcD4U}U3XS#+b?NZOc2maoDf
zS5>B4E6*}7JnfMM)^Z2!u|FFCSETDqB*+}eo{nd-W7`sNQ!;2e+6~Ni)KbM22iZWB
z%yRrZnm~6U0RBToY0kZLy)+s{VKacat74^qa)$4)&Ph1*?@Ov-g?MMEm?8Zb;eqt!
zLvhaQgRdzKuk?`*j<s|~EvD~@G-lqWsxjRi`d;sWTGI4d_%EqP%A?pgKrW~zC9?5v
zG`vd^SmM7(5XDoa;styK#oZZ?moG*5LzknMYVI7J7PDCzFnQi~OGIosrr#5bX8Q8)
za@v{@$K%>XV%Juuj*{CsQsj!V&}8J|X^iw$%6jIW)vwOI{HkFX{!z0lWlKgw@5_{(
zOMVy%4F^D<rpqBqH4z!T8=XiSh;~c-?&owaRpXoQk)sN_2w{&TNj3XeNHIN=_#N#d
z9)FCDYAtAMHQx0o&pm6}LykKhN~+j>sc0R@>XubIc?i6ec|UaBw?M>gea5yPFzj5S
zT>m(ee^IdLw=-~?{o7xKpf^)qkrM(2p!((az6XGrED0(FM33D<0}i-zg79zA=DNXS
zEsb+Zs~m#O<|j?o&r=|HRfL83{B0M~P{4zigdGU_Y0sk`&i#!eN@q9FI$Eh0D@$c=
zHCwJI_FH!WbsFo5orbP4n^#UY>8;Ped9MS08=u=>R+PXtTkh6>nUbtX-mk~TlT<&}
zv`4nQ78`LiHas=DuR9r3LjJaDID5~MGzV7ac6>D$N#lJ)K*b$#vtKZ<$~-Garg^@I
zP>8fe%19Y_zr@ojHZ~{hg_(b+=~elZnQQ=ZFK<0h^nP0I2;dD#pcOcEKg%FDH|FA=
zgCO~T$_6o8I$2SShA9w6s>(w(SXOn4pJ?h|oFzAC(qSCg$%!_$fG;Qnflw=yLUdWW
zA)3k1AMBe)===<r#fQSmedPJoS+6)g*_XqEY!Uo8wAwYMpG)K%Dtdd9q2xbJ`ixu{
z`KF9)xG7RuKd<pBg}3b%r+KISzC(RFwk%Qw^X1u3n}&m;<#IHV{R$VS$89#ixd)~j
zO<7{4a!EjClZK_a2Su&oGZMK?=;a%;AUUSsV_?}acaM0iu0G6tP_f;oe%JjvVbp#Z
zyf@SJ10R9R^YG#5^!8_6g<M&ifp8c|jG|1!gy68#om(TaW9U@{^ilwYff~oM0Ui&_
zT>HMKi6Z+RK3K-|6!Nf$WbMb-SFwgWqST%&t-)@hRVSed2jSKYbX^_BIu^IWwbNF9
zpJnu1Rn|Wqa>o_q$=jWj4UQukG7HKuhoijLbIp1FaSe$CRlFxs!%%g2>DL85wjvj(
zy86kPCL7BS#|tDau=B}#QE|ffG7?kw$s+S;oe~>*PDr08^U!7HjxX!ohnTQt-D1S<
zv>{kD2r9{5>ItH#v8$A+WSK86m8%+ql61HsP9hz+9q#mvT0C!ly1bL)-)G``ieJy&
zd%tNl6e$!ua=U}>dM}XA>NTG{gA*PE_J3EIFWC8k4~p(C2wkZV>yfP7W~hmm#ntLo
z8zO~R9Z9@lS@sMv$@L065Op;&QPR1FUw{cSF>(@B%9&rewXJ#8_cAc=o6*#1DT$<H
zQSV}Mt;v;izf;q)K~g*{K<3122P-sX-@|4FC>xOzeycmC9E)Kw;29{@u_qV|P2(ZS
zxS}xa+vYYvo$*1@$w1$QXeJ2ZsA|VX769oq82C&5=~|MRo4VlmF*%RSB7`4{P#pDd
zHVO!rfZDXw4$Zpt!Il+oD?D$1+{uEk#nJjBK(eeJY%HhD`*}7)n_Btv{`Im!O4a(D
z%EQ}+PvTbP=WADI;~|5XOqn2(kOqamX)kKHqw#y&_tnem731aRZGz5@?m$TdETNl9
zYS>UXk-v4THB7I;csa~%`a0{~6#Le+(<x`G6xoU;d?%J-@yWMW26_M)fv<#&;;9OE
zAVAo|xSk}(+N3^jE%=-$=BmtDQE4*bB3l522B#*Yc>mw=byX1PI&dDx!XDsGYB|_m
zcnJe4os^9}S8d;{%WfLBg;;#j0-p7l;vBtSuFqcnEiu4ur+K*sVg3u1YtU+w(t}S*
znYH047Q2SAnx}fb`rn$h^+M=ct#RG8&mx;^A;cRG6M`R-O{L-D%KMi~ug2yjTfo~>
zH4VQ8Mvs>gE0<^aSeNJZh7>i+(1$u(`q{(nwWQK^YY{7>(QcDGjqqfWJw2Vyf}@0<
z*0q@`%Zi=ABF2bB1I%U^tnxIB&zV$RNhKpCH@w6qHX=p|SL^r?GC$PTAhC+K`1sxu
z=1&f_c)8l2Cc3u2W<phEB@~7TVAk`Ycfm9vv+cMfx`c34IN`HX_`0t`R#eVoi6YJX
zrcaYK_*O#~kk)e`H#HsVwL9HEQRPWgACldr#ubhQs^dGVY<#+9BBq;`KA7~GG1uHx
zWEhUI_EhNMu#3F1c^w07p0Z<zo2R37+}`ix95Pw_<S5!r?iIBBZf)wgZEL~M@;B%w
zwJu$y0C-3<Oou?mM7p90V0G@PPR5DYmK|ESoR6LL6A#)|ie<kX89VAM=%S@_ffX$%
zyet7!lSuaytgH#cT8oSRN*A6Lzyo(D{*H!~TeTJ&Q_FdlJ9qAj<4w*WXspwkGKJnB
z_s1(!EyEj?zRl}AZVm&hT%X6m(>@J%(6;VRUbf0Btl2F`Y)VYf`m|vxeoTi>`gW96
zdvwr9$IR>Y)MUHq$%$rM=IkMf`b<@d5=nY#^q%C`fbwITF7v&Kd~K}4z;F$*^rQ0@
z4Sj#ac5hQzCLMN`*^3>aRyVd2a?)5z3k(T7strykphhh$nsZ>Qc7_&FaAzY51H=Kq
zn4HbEn!l9dl5~X1xNQFng5l~P)~B!E-}j`fMweF^Ns421yno{$UANe9e-h$<ORWH)
zwdN<JmYgWRH?k%y784`R7sK*|U->_dT3dQTzRcqepkzHk^z<TZn0GjuG7O8EpCyDT
zui*0X;fXLTVd$i=z?0?HqK5HH-mdCl;ekUT{jkntTpU0)Wy>|s)HyzqDH#~EbY*nE
z!3acTnuFHKm4Be2=5dmGaC(Z~Y(EH2Sh?kod(}((&UA6`XTR-YOn2Lq=K8Ed9J;;w
zkQ210aTLZ=kK-~tSZUlpgbb=&zrtSoh^z`D-34aSz#KFN6OkBL#w9Qm3&c|6wm}xW
zpST@|N0Y+_&$;v!^lp@ufMv?cYmi{r4I{lR1#NwKkwjJrH|5aRv8PE^P+iKQnnsxV
zp9t{@(G&~gYy7pdSBcci0$eh7${KG?ZP|P5B!Hh!V~Ydjpyepjlz9e_y56W~f?UN1
zT}>?Ii^u;+sVa<|K{^5K$KG$V_fNK*c-!7`SKC-ilQU~8d^Yh?4bl^Be3ZK^lT{8=
zS8p}8Foc24u}xec3~k<W%lw#`Zr|e|d>@==9w{AJZg;u$Bsi94Ws6U%vuicdGkP86
zxPP_v64Oubdj3pnSIZt6EKDi*gaANFtS^9aDeN6?*l&Po^l(+nHNdVjB*mkA<#9R(
zcBb{DRXMY<aT3K;yatb*{ZRo_u%&Gna|W&?!a}D0kpMlhi8&s{^i$g_hsCBbAu?H2
zTpGvd5Hq^_L|y+paUeVqlwk}y$#4m74l$7>=mRP1rN=ufcI?i2TqDX}okf?on<4}r
zl;fjdikvb6STV!q@K~{=8VjL*l6Q)k40Kr!tD_9n-j}cIQH4J3L)rJNMja`rb^JJA
zOox=e;F?5I3T<R;(!s0eP`@Kie=#D_kwQyzOJ-Bwiv$wdHE9%#a1+RyRT5L?DgX45
zHDn~ph7<YZ)D1;~70De`ZTt3-wYHB`E*-O+w7Jb9SJ|+4={T-NI(2TI%Il`WY`%3`
zTf?)jOQ2xi=cITkO}Gl>&fsrC0_^(Yus3APsM;-FFE!Cx%+-tsa;5@zPj%AVh-)t$
zF+X@&4pt>X7%PsBv14&KggqdqHG1W^!jSt~HJUay?gXlvWsLkQPE0grR#Im*_Tl>X
z$Zi}x0nE$Bk%)~}`lYFe!RX7JuD=ox%p`whlQ6|bqgsXfHaF81jT$YIL9{f(HSak?
zpn0T?m@}WjLFh8hI=OyV6rERA*m#w}U1h2qzjXGbsml6#Jw&N*zdT-dd=15Ie+EtT
z*#y<ETWzcEuXmI@5`4V?0KZ$Oz5pRkdtj^vS)hH~`!^SwKO%W%B|HZLA8K){Ik~KV
zcYh9B*YtzT)`M}}bleXZ;~#I#mhEx@GUXK=uB~nzl&;158+mze8_BV?9yOsY(!8|1
zrgi-NW4YzYA^DxYa$;E^e1Le4SO&^o^X~BV)DoXT=S^zYS!HR~MUAD1iqOz_CmbCs
z^}0&AmnHhSx{NOAFMVID@Fg64r9yh$mg)@>E+H{;eR8(c31v!LGR%vg8(nR?iWQ!X
zgB&?&SyDYVk5FD=GAgy6YMPzYc)U?f6w91AysneldB*ZfNwqr7o)r^k6yycj+5=oG
zIsm{uOIXjQV$7>=Gfq1Zc(Qc~$x7f?D4x<e9PMWOF+*|sC}Q+kSoL=sGJ4|m7+9_I
z&0PCH0@U@^igkK;CZ90Rq<g%#t`S9t0Ro@f{m2>DB3DhOeHps*Sz*-D^I+uTCI|L@
z!^~0YFTBJ!r7pCmhdi8L0w%yf7id5|2Cex45Bt0=AS`Qc>_st%GM2eiFurXA8)&vn
z(v1_c41I0zS)vsNN<jmX;j8M`zp%8FXBNQ*=(y}DGe0#Nmgg1FTV?sr9OKqkQnBH4
zE%VZl%77oF3$e{^y0Y748;xzDI5gmG`-tSMbJ6y;YlD((_A4R8tKKx8TjZ|drvsU4
zxI`(`Z=}N~4I`xYyz_?JBkN!4!S8WOq;4Bp)G-~s*0$TSUeT_t6u*r$wV9ul{zblK
zUC8(4f1hp^l(y-$f0*mc?Jl*y?=^e$JW_0htMyj$_>O%C$bu$RG48L{WZ2&C)?)C#
z>17e@z3yu<pho91+8m-Y@9&IE{U!K_6olS&_>@{by7YpJ=5K$JiT#A#la2nF;S3f;
zDSR=#+R(v$PoqqAEtF7EmCxP>bl;Bz4el=aO=r4jf0+oz{lpsf`JTJPo^$7U#Lirz
z*rL0Ew*_?NZcc0iwo4?}+q1LDEVUGyv&xom@Y2<247cIV0>W%XhlS_CXn+GXfhKB1
zlkLEMF9fYoKw9yoIFBEbwmtAoO2?fPtK2%89$@3BqiiYqJ(gJ#O3CSZtS5)QCq#Td
zD;_7RGd7geKFUW=+l}kCIyx@xSzhNHB=BU*rOC2NCU#BeGr7%XUc3<LJ?Aa$X19l9
z!3ASI5lh-3?PIQ7x_I`G*0N+cdp23XGyum~<yf|@+gz`i9)ilCoKco7Tb;t_LUOIS
ztc%QN<@Wt8yq;3CogeGg&6~waFW+r+Tz`qO)r)_L+^>KTRu(22MeP|OfeK}h6Sw$9
znybF@fKbPT$!GsTdDghElPCbj>FE=w$Ot1AM3OO`xCeU~O~LnREf(PRSZF*d#^Q?o
z>;6J)+eJi7qg3szm{M%>vS1BMpTSV>egNC$?5H3hAr1~m4Pbo}?=89Nzi~9tHbPTP
z;2V^AM16l1wX0b{vq4OIUpnQ|fwiRQ8kTb|JSWSTROq@C$lwruW0aX#qk-YnxK8H>
zHw!#`jFjBf=_XQx5f~Oa{a_)-ei$&AuTgrk;Fu{BoqrAlS)sby2vM(P<hWoI?7&71
ziK>>jNt|rNgh>#=@{8vwQ;2CN+C+RNN7dj;t?yk<b<X4!I*6+KxRa*=n+N~<uQ#&s
zN8<<2bE=+7NHzkYAj!vXMxRI7VhiZ1-A5jsfl9YIXAT7QZH>eFtlMtesE?J!WjV9*
z3rus4%J)WW(aIZ8p^48E4n3tHQ9k8b_cpaLHU+paT&KQ&zhG@L^d~+YM|w33YEs);
zo?4rq3Nc<hE0ql1owNNup?9pXzoSN`9`zQ)HeUGtR>CzHtF8B$38y_<uAl9Okq1qw
zEdTX+(rVhaW!TarOK4Jc=;mJD%%b7NH#6(E9Thh}Nrc0pQib}>U>LwR7r2++O5|Bv
z#$sZ13Jk+K41jjkomNzn@>A+j*<RV1qLrKfRUum8@d7)uAkvYEb;YBRBYZ}C_H67Y
z*CV(cW=qC3`YQWUlp^Ty9BOVaRajKe%BQ=1)=~2qO0Km~<y8?gukGi^DWj|8w~_x{
zl5n5XXvUeaQ-TfbTLxs1Ys{(2S7N3R-$a=O{Hvb<m(+R<66OqPkq?kCU+t;Ho)~0n
zf8?t*CK^y>ifN0KeIZ^$OW<*yfL`NGz?~QZUTT{3buT*ARp{p{y4spA`#PCdq%(!t
zgVbI=WSZrJZYhdd&(h!^D?ghV6EWy@F=6~$$K`8cR2A~~Yg!i~=>Q|o`GeD>@AK1s
z*Uv*oP}N%In7?%8Abm7D=%i3{BPIHITKaU$uuS!$8KP0af*C~(-(~u;_{URw3*`*_
zdq{v!3xx93adJg%>3)ftaFArB(~d`3U&FxMhmx>t4)wF+v~l@12ZgHeOpe<MYqVUD
zlTo7q$Bd~p*2Kygp^kIVfQsAec8l0hIqR`q;=D`l!Ai_=8FPhDB|j;;9S2nq(o2t&
zuVsWN6$W;tsO%0(?L55#Z_=u*PoRlyrM<ImcYGcEsxI&1<|W&h=}dJFKMPX&^W-ZA
z0i&a$BB8*+kUHUEP;}Bq#$nzyRih#(MBJ*X&HVv2u~T(#iFn5`Hb-YcV#Y;ww&oUV
z%jFGp?bTq2Y7%URb!%e8MqcNK{i|_I5O<HT5!i)E*X{+S6LYQT_WB$?PniqB3C$=a
zc-J0AY!um5rVhzVUM8FoYe1AwHM}cgq^F07=k7%Lt1WA2w4sU^;sS#qs}d>lk^&}8
z>}dr$wl6ypRB);DsHO8~b^1t@aoA=_md7tRbz;K2)jSa&9J7=@>-9u+J;6&>r7Fe}
z1Q+j@6rI;ze+5kFhp}4Uw>xg<puZVf$+@W?>0GSfUi8Zhbz}Y@6}@->kHZ+jo_eNB
zh(V%q_s&vwdO2BFfGpWxY$G-%v(_2hc5_AcDm2Jepu?qKUkzVEKPk4WM>j+2dM@ow
z8vq`m^&8RJX*`fav$SU)?UJt_67BmEgZxsQOvV2JJV3+0J-Z{8?Apzzotf{|zIMm{
zv!jhM>cxsvuURNkE@|ysfs8o<_zT7QN@VBJQPZ3}3lcCuLXJ*(Vf-n-Y6LJ=XrD6d
ztc1sN0qxRH0G(w}9yLBmu9JSRk?N^2Appkvq5mzs20=JsXT)mCPH|p0tTyVyWvdgg
zFNy5FhuyPMb=0E4S|<Hfp+!omxNNp?o>_06JTmFIA{Aep?DP~m+37hq-Z^Hn+1lxt
zj<W!Wvn~X+Aq{9r7aQ8bG!0T~rSn5-5w1tmLUjx)V)~ewbW!zC5}kDj(Ju_pkTLq1
zR2W({9GB&l^xFZ4RyrIj(Ry%#<2d?=YJ`rbv3XomRHW%4sd@-<f#dl3bvRkuxFr4f
z6V-);MwN9&Srgsy49Zk$90~#}TWgGJU>M>@#ipY5E0K9@)7GY0>x+%?jWiTetLN0y
zEVe7E>1ZOYDLtsHRm(ok5FV|sc~;NMl_AU6R$a+j>o`YW3Kwcu3mdMoaHyt8>hvJi
ztWh>ls2=G!J$JBCIlEm~jLh;lFu<KTpB|hM{Ste*(RvRSB*iuB&Tzgfl#SAZL?!B!
zl8P8Dk>vFj6jER{Lt;v4rIl!cMM*%Xx!m-4piw}Fxh>dAv%`Oh{%GoMl%m&=Avcrz
zha=aWj=EV2(W6)pt)ZS4nWhCY?9WY&>4|QM(#Dh+q|(i4CW0erg?KV<k3xk4fPRe9
zBc1YnGHxl&uoK!YcLuf;$pde($P_~0p~fB=A1IU73|Yr(p&}L=in}##5wrJ484XZW
zMvJ3_xI2?hiBUlJDC3&trK2Re>ggqHH&GZrj>>FO8onE`P~>Jp5+Qe*(xghpone*3
zu1DM1jR5gVrXYiMOB;=6>H$|z)2x)cOke3Fn~-#fv72Fx=vyIaCjK5x7wtYu7UH2y
zLT24kfdm$wx}YVs4BMkNA>nVV1`C;nts)i#B-$)Wy&Zc9@e*t@B2jO_27`#O6(d3f
zQ70iH5)l(4vDyrxo=5_+I*Bd`ZwZ<GJn;cJDq$oFJTc0YFD(k;s-P%JCW46`nIsaj
z3T9q!kOd3ToAf+yvg!=TZqp&Xpwkh*L9UjnMFANNW^56$*#I>Pf{sW51Mjs9JdX%(
zA<eC#DA;hlPOyj)bV$Oy)uOYB2QHQb9s^-6q9z#=GqNEfNzgh>>}GQiTJA7Gl{)M}
zh#*o$5avbfvtlA(tb<&{U~yv6rqjDcLB!Z>auT6hXE50Xt6vJsSTIUh@ClI6sk78M
z1cEWI$09;bEVu<?hH=73FJhxfmJq%2ub0d+6(%t8m^L1U5lKy=RT8k^B~=1}o(TqQ
z)JZx-|5+u20a@(4OO$v7!>yMDLC~9Yl2At^On5i86XGx%Y{aA|c5HRqkDqve$iyKc
zNpB<Az#B!0P8CKjt6<U_MFGQN5{OlA;msK44$GJ)l3a~>n+=_%prn2e*^$A7B%LVg
zWb8%&7H(uS14v;QdcBtj&=W}%3<iu4j4MWh$Rpk+@_HQ>^t`B-iD(fdyIE)BbuN+J
z1Hjl=s|20iY}O0NVkM%7POR0$TLmwSrGY9}IG_Rm2jl^`t3p<t1(~ccW|CflKm(6p
zUU?@kRPlO(panW;1`M~=2Tjl;izL|eJP}2cNGvdt3+|N=vOyP&$ZzLi&MYvEC=lh5
zX(Ayp9m14f5)wtf9yT+Y2Rj?9c)`UJs7-R&+*qu3>2+aIGK&TbgU&-=>v>s+%nl<F
z9U?F2yqMHjgGdi>BRP1Tm*_D-F+c#|3O2I|S|Agvju6c28f}K4-G;3MQTwF;jYKaR
z&B!iPI|xqze2HK&#K2`YN;<t>M;x*q2|8Z3>7gbgv0;-zr;{WR!>9^6WaP0KdH^d8
zVS^|P-yVJh>H%cIL|dzaX{L}ypaNJ{SQG$?t3+72Myw~i4LU;%adVx$%IfB&Y8}&#
zaGi09w=$Z^MKvKyD89a^kxS)QYXQue!~|#K*taO0lHl@apQF%FEBv{_QmUi6UQzI|
z=)?FePs_XaXv#qCyC&Fd>TkX!Jb07dYA@b}{2r1=Hc~BCd~D6bXn%C-9nWb@rC_bG
z-gs<i16euK$yI)nQ`6(9hSRkJD3@R=h)TZ;e9LvLpXVs<ujY7e7+h4E5Pu>|kjzX!
z{0(PIY%gm5;t%KYP}*An+WRJfV{)o)schzsDjc(KMa6}i>~*TltlOR8WL2ggffBez
z{#Ok(s$B3f!*-nPLw`W;*ECS2V!nLOO_<ze3;SM4#TW!#C7V+rSCD;&VC>Z@re6@?
z_~N%!=oLKu5c<FwDEnh>buSvwSa@ilceTLf3Y;3y*eQdwYlAQZRPiL&yIL~}Uiw~k
zk*Ck;F=Z3DM!pQBXD3jJ@sy@YK~m`>Mw-nmD+EQg@t_%5tU%N!(B=0-r%N9Ux?g=l
zed2yPK*f&%-H$GZ0NH0U#poRxOM@<lOzcZqd7r{8fRW#gpRYDLCKojTMsv{=tZtTq
z)-A}ITqVcsoZGoc++=PFx0qYWxcQVov1y!y3^lA>mT4EL^ow@$B$T*xrLR{r(-BNu
zi3t!xUR+Fp7e0N}9g8;KEcWf_nA$7wxdS&2AG+~?<O-x`tnD)NF1X{aI~MdBy4KD}
z2VByyW|xmFElS6d;O0elT=n!qp?7M>jy~~bP52Q56fT^HE^BP^L~8CXSa#ff_m0%s
zZC6}6HP)1Bg1^|*ORw0rR){m%Lba~=sqDg2^A_GDY`eQA;%RC`>se$;Pwjqjv+yAo
z<fd|07p<iLDO}4lvJFVF5yLKNR5JWh3d@v4gNP^1X`1-jJ`*k404OStQ67tjxr7(|
zZ}?-4wIpDarM8&0%4e!0LH~*BhM51Lzc9sr!XJy)9Q6C&sBRdWitM`R;Nl%OE<Uk%
z`SPVZcPx2h$rwM%#-Q{7sWbVitg$vpHiEk`=KpcE?|>iw2^{|F1O6x^s;(QIsPOiO
ziw`Wm=*Nq9+_ZH0awvJUw`k)s$839Z8eDMHKnpdgNI!_BUBgPXNXota)ag8Im-lYP
zXu`=S5$c#Ru>MfPZO^0JQ*Xl_y5~1(zx5=V@WQ>_ht~J?)cyqMjq72}nVEilkXn6b
zP?ymp`-_q`P4pNDqG-w<vb%)8w@qJvI=6m$8~S^;WLit{W!3l85AnaMA3Af(FW$B5
zVp4_fE6Sv8nWipAU#yFu`_wHFZQDUb*-VL>$F1Vlb33>@xcyw&=D&a#f06BR3^}(H
zmpa4Q6HG9d$!ONIZ^*FgXohW5A>rbrQ|4ltnc-&SL?TYQnaLn1i~6Xw6)1#RaYqv5
ziXxZ9jQN8*Lu(}(;|y&?r~O2z&6#a>OJUwMIv#N1HH-H=aM#imMrqBWJqH#~)0=nh
zH0!4=KCoxe8cAqqx@hkMdls*eAf@ga{AG*XX3o_L#D98Kb9~{dE9OMCSM$Pnb9BxX
ztF#xg3<NFneZ(RFp7e_WJOn%DpdN5O3-2QXxxzobgpF7`Bz@|2&Tz<<1(a`hFOMd*
z&b=qKWZsgS`tMCGsWa<m&(@pkmZa|O@7Nffza)9@+}25m??t<HQq~p<JNGs2Npyti
zqtKDq(->wCJlJjwJ9RBSVgs}Y{d)jsv+BYv13Jv}Hr}V^v*_?X!fW?1+PP83)pHRp
zLBA|9>K>+eLYA~uT=sNALP0$W%JdK^exfs(E_=km(v47Ih<*_Q(N989y8_cXbL!7g
zQ-M9di#k<inE-P!@=MLhmrV+wK=IoXkQvHQzaIO!`g8nw_2=qmQ76?YqF=2*Tx?+Y
zAAC;pF`hPmW{+^Qa5J+4?JQZ<&@6Wp1@wzr8;CKRk`;c}nDoNUPj0*Ois8R+dF!bs
zug8}dx@=}c;pzETu0POEbUll*OL_|5^wrlWRp?Pex6Ncwuk5*Q(ef@l{fdXTJ$VJu
zUH|w~|F)&@w83QSGT=++9$J5O|M1^?mSh+8;OSnaCQz+j331&9^k~=eMb|-LYevcT
zQ625++BZI!JRkdh%!ppUJyBwLjnzRNt8?d}SQ`Bx5Jz%3r$POrq1CG0$mL+T2@JQI
ztI!P2mA_5OhTrRtv5ynwERzhV%HS+1_Mhf7OA(l>xZRP5S**amTB`oZKQK!7WL!IZ
zmDlV1z-YA<?S78kYiah5Kec7=(RTjM<*u;a{fF_K?2OM#)DDAozZT^(6r(9=usKS%
zhGS~y&JljLRcUr_sQn2aR^GIo%8e6P>3)M{L-%V2h6l@rl*#YLhM*Bk)7r3FnQrOd
zxmsB9{jh6q<Zg!TfUSazwmPI}H_oK$#Sr_D6`V)1E6A9x+I>m1n_Ui5W^N*NwjuIh
zDv_kvrYJ=-3Ht>H;g(Gc*Y{4IG`XhfYM*XWShh{Etw(b&O>|=Qkl51O+fq~29J<JR
zY5VLerY)L|b_svh#=&9H21@<X284BuGw)h2yjK}hIa*5=tm<7pvBsa(wHc;1I1o-9
zUVgo44$eLmb|jW0n<jXws@ppflNZm7FK*6Mb*kUe#?0c7$qkoZ-f*PBWRLXkQa7r%
zlq1HB>&RV-l}mAJ*<LzIxG|zB$D}o*u-XSCs4@*Z*vgj!Bv`bTTe^+Y6j~_WoXTj@
zN}i&vH!A%lGDYQ&nG_@Xj^ERI$7c{9-`0Dr!DtaoODyr!@}1XBo7&s^^Xco_Bk!Td
zqy|rGWY&V&3vRk@;r_{19i<zuwANaM(8Q+hj@jA1xf5F!*5lmBxA(H4iECE8nA;_r
z!pef1Ivv$OQ$EzTvZH<Z?5R_`oy~sl87`W-c5Pd0sJYeQ^2BT=oyEMdwN{Bt!1Z$!
z-Q-Bv<*xR1c1>F{yQYFKdO6j$mz5UH5H9OeJR^BrqBbCImq)JXt=8jaZOE($K+EIK
zc*=uC)4OH&$jE7TSg_$lm9cgWTO&GRuI^0ksb9KiYi(OC!kyVp*^H1yoEYj_e(}0x
zZB4EAu-zqDf##O$o360nC9n7I09t=ybhc<EI*aJC`jk0+8#WzyZrk?GF1O8IB`kGV
zMn0o11TkKYc!>awZ^`QQRhApfQSlx1PdCr&2)6hg!LYxrefHz?*Bo5hG1V19m@G9A
zGgi!!*My9s)hES_vU=xtHuX18X`dVjHn;TkZ(r~Pn)`B9_|)yCxp8oup)A8O_L~Ct
zaZhO$BP#oDALAc8HviN9vGtApMkxJGdBrE{E8L@FRPNkypFCxyo07Xs7D1pQab=r^
z=-#qZ9dQ!Nc%c_eP*E6~SNVlex(`>Md8}xULT37sP1M2%5WXnP<h@(Uc1$Cl|I6E(
z0Jc$_ed9Z`m(G>6tILut>#!upXKY!LZ!58LIB^o^PRM0)Iu4MVKth5Dp^$Ke0O2O)
zD$tNZxp@h#+5)BA;e}FKXiZCb3oS?6mjbc1`OnO*4j&=B@BjNgh_$o3v%531vop^#
z&-46#c%*0p;51w2hak8?{yi)cPo5NG;)|lla(H|4m6a<!9`pw;dj9$5X7oq@K|PYb
zQ%%s%l55|I;cL;QF?_A~;&tStXQezuu4{fiy<9y4J!*oiJtVU7znOAUGx99#7z-M!
zc-gQVi&bDk0mUJL{2~ENQT&h~(@JANC<2cW$pw4MuY%;AM(r=Ptm4`ax-^pDGlXfZ
zlwwUbL5B@KLDC?_9WYwS_@dP2?hm;bq{%3;01yd_=z3%N$7GjD4N)eCprrx8z7qHk
z09q?JOc>Kt6SG&l{pcpHlmZ}-lVPS&85{;Y5Mk9GhZqr%A{xj4Dn<yE1yd0zF^67M
zjeT{{oCD)EVCxQtEpaC{ZfKIUmDawN3xC?X<4@PDfAZob<=rzp8fbu=C351yn;zW1
zp=Fw&2|8l6tqTfPS(w-540`BnvQFz=HpTywaKrvD4{v#CPh-#SAGG)0={0!y@tnij
za@I}n-FxYeK3~`p*uJ>9cH)-#oi+0E$s3k{i#|D_Sb=hN>&lb+Gqn>Haxk@WWbpmY
z%4P7Tl=$Iv`Fw}A!nVHoiN8$V^<-b~6T8nUpEbj1V{|NMseR-A8}GlouNha)9<6Da
z?_BA$Je40~ymOKN;cz_&|7qSG7j`!E?7D2?+S|RXPN=Xrq}D};-?{se2mZdW*}r{Z
zam|FybEnqGD_7r|4Mfh_w%kNs!`O*FTSQRd1Zo{|Txv5Gbb^s+Ac|xhTf`O_DWTFg
za`NH#X!rQ}u~k=HwQ6Zg?>RU24-E9*_X=2i?z!io|A3e;!@?b|&^~8fEO5<B*EFqJ
zjaOgZ+JUp32QM2Y-QxN09xcT#Q?Y=pFpm`5>)?qix0UoTI_``5>_HnA!vfJrG-6}#
z__6%cH*b``e16-u=Yjb~;Cby=+aKO_V&~2iyXIbbR(mmr^s2`V^r{nYojCCp-1w&a
z>{B=+C<Er_x21lz`J#7*-npo1(xRDxp|&=h=fsKZ8Y0GMFi?e51<?cvbt&(N;UJ?D
zB<lIAU|lP$MLLB=`GRrSj?Gs$YDCA;^T{nY%qTPBb;Yt7dk*iJQKoEQS>NHoB>wK0
z<l#?4u5ZbT1CIfPlRY4{zdLA^2R^>);6*cMUUX2|$Yqei7s%w7PUQH4LMqk(gY+B9
zn2C}hcm}8#3?<14jMkZu2w4(+7D-DWCDmnc9+28d(Fx^RQUw(O0RxZ>5zK)U#vDii
z;wvF34*ANp2`ULOLVz*LtgAvBV9h@FASRK2A1TA9oP-G`ugnUNpaZ}JDYNn{9Db82
zd`Nxn@YtFnii-G%Z)6bjL5`kV`(aNyDY56Kldwmj&d$zvOmeW_D0!Kl!KB2zmd`_i
z`)7(#u;<((TU8v<PQ%+cG@{vlm)8<wv>|y8dfXY`-LM;}*V2?)#xuM-dgOC+@x(5S
zMw0vP?GDD_flZLuzJoCg9Y*m2Qw~XBK?$+qsx(o`LU~04=)1gO%J~rhBIi$O_z{@e
zP`<KLzGA6vLU~Kffu`qJOZf!d68T5|*7N4hU{e!T(2YYM6EA#MP3YgN%BpK>s>^o$
zAq*DGIv9}$6MS`1i71v7Rr86@oMqRy&Fo!H-uWYFJUfTP{gtcu7Iwu|7kd+u6@7)G
z-e&QM=4#-x1xSb`SSCLSR)BT$;GEU#ez=;sR(@*sg0}fKz5Ems`#~qPmQ7jLcJxj9
z+94nPM^M|ja%JbVv(Fy-ApH^)*YB7V@kG+^f@{H-<HsNLj;}BNbLPD%<7*w66LC0p
zNjQYV|08(S4g2(vxr5_JEc0W4KL)AhJ71SSy8R*f<#TzU*{?I1`Odd@^gefB_Ur@C
z^{#w;^8UP)`Mn!}bp7q1@O8RSeo6l5^_|!4(-mkAXrXRJFUtNVx@yYA19>a=m#o>i
z^L13l(o;6>Z|rZePn&NTXe|y-^>8@emsO9oG9(<Db*Npaio?hOth#n2FeJ2u4P)%v
z3>NI)f*T0$?v0`HQ`8=zRDd?d%xLIB+O2nqE@Nq-+*_#C+VvjV6VjP2Ityoof&i9|
zl@;7PM%F!mD#xo-8-mf`Il&;nma%exo+UslhccOUA#{P>uGNy2G9$W`-i>amK{vNS
z^ceK4(OFTc#>l$o6jhGu63$_GDE`Ely%k$Frsra-v%;Jds{%NRo%nlTF5!|9IWit`
zz|1RlA4`V$9V7`0GSDlVuh($y+A4lc^K!Gb`_=<ia|K*U&ZJ)<8>r^H@@gq?@&^Iw
zYK&$D&H-ItUIWOP=}@IdJ_7c*Dh0Po-pkHto^hbGdq(pXLCNt7*=$$xrR2ds6cv2{
zxF_*VuK7}aJTopRm|J!{|4~R#L$VKsq~~J_8huI39Aa`{To`^}I2soLiSCkn<vUJX
zyLX}6S#|TS@`gz*uYy%4PJr2Y7+tK%ISQofOK>~*E4ZCWUitU^n_ih#+p}bL+c_al
zbLHQG`1fDsfV*s#F>t$n48li`=GGu^>_#KCI=>d#I@E>mTlfwX1@PVY2}t~-7t629
z|GuNI=j?#Lup&Bh`Yk|r#~tZAF>b=~GoUN5jo%AZ;Tk5{`{>#^H`mwCvr5G}q4&{O
zAN}k8zn=kWVep$Xqb%&Y-~<{Uz$uEp2#sMr#SW_&AmS3M7$;O`cr;4TK^*Y1UDT&P
zG8Qp9i-mbX?qf8fQDlG3IL%<H<YJG4t2B&6zif35?ka$6p_wjS1N0^*-5`hs7L87>
zSqbyGKjsf#4@F83l21pHBaeBE7;Xc(30}eTvH4UKL7u8FRYD4TWQwfFj=9%W2bFyi
zcv#v4F>+sNeSSD%DwWAS#$H`lDswG9n(C@c)#qfB6w+pAQHxc%DC6*sk#j7uT4j|H
zt4&<S6okFWz=&NknJKsgF$&Kb*dzpOAwN%UM<;K7^X5=pXy)pfzE;{N8TE#mMU5R7
zl=C)5ZxQv3jW6GE#SXG7TFCAN9gT}>40@vkDydUo{!gz0#)12MAWfB3lwsfB=hMe~
zZ@#$~i!ik_XV$_FeaI;3s;Z_n>q<C_g)7lDPs>kNRp}%n3!eg(E4r`$^8pCoS_$Dw
zER-@?yNU*B#BQvCus+3>;v2PC;>*Txw+tsmA*=T^l5Fw1yPU-AjA^o(2~(&J6eyS9
zfmF`eQeVoTl+A?af+Swb2mQdC#fnXzi}KG;lXu>)EYoAtiqVATgPyEhNw{FlR4KKT
z*d|F>xvDdv=2xQ{tO`?hBu4bzxD|W2WuY;!W=I0I$eYXjVR!N<Q5_&0kX+I^b+}x$
ztETr)+Iaba%QsHy(2dh2jUO44XxouoSJ~9eR2LLf8r!O@-OIbJRc*$~f`V$Mxv6s9
z;_IIJ=~LG&rpd}{RV})kx2taIMYAd^XI(UP%`AO|{+8>my9I4#t+{P;P1n}i!dTGl
z4%QVpoK>|Ib#)cBRZd4y9X=K-tlipGv-!4FM>kKHu=yw%{}t?67l}b3%hWmBkisKL
z+$GF;xRjw>pt=HQW<1$184U*c=UOdD5UR)?Oom8MCQtSgl;0i&MH2L&TA+VAln*m5
zCNM&z1brE>NV2q?g@nvt1QKqdD2V|s&sl&nwk%8#$bN@inWaQwfZTWhlTr3yGRhS?
zn6Wlrbw0K>-wx=eDJ%L8kK21c>=8uJL+m{LgaNZ3RcnReZDNDo`+nSGd>d5!_+abd
zzOL5d6Qj!*CXUMrK1J3KH=-g!oVJYkF{l;p(&ZKQJIdHE;F_TP27@5Vq>Vw3B!70A
zLT38A8vnJ3>d9Gj*sQMx9Y<d&0Vz;G32+pqH;y_0{(3WLW??cM4ciZe>#z@|hsip2
zD5hQ}q_}P9gN?l%_QuJZ`ZrB!DA)%k?<?p#?5*#v_jdJmk?o`=02rO7qqi}rms6@6
z$M1*<d-sJ04qVu==kV4grn-(-tgBnPH*M-}S#5o#wYaypxHWOOZ*fr>{<zDE7Gu1O
z++N2HzivWtU72KBvi0yD`nRe>M>e)xX^R;-NiUAnAB&aomSDmXm12~beaIJq-laFD
z_~Mf_A?5AiaABKrhDZ{%*|3Ev4GMhpz3+!yoX*l5z;5rp;^RPbyx51+fo6-2bA{f&
z7awYvf?9`GoDLGLD{b=jBOiWvWS{l72MMHxrvyoHqI@1%y*nhLoe~ek{9p%vYu!f<
zUTIs|ike2{`c&+ySep$hzENxr9v$gUk*q6}ilH9Kctpwl1l5u0AEJ_q3lyaGElr?<
zOcH~}?ORHt^dOSA6wjxDq14iSEVU1{X)Z=AG9p6k`$vV*iSHQ*_PqkX6xlGL%JzQp
zrb%UiPwDii!<LWWTji3Qx)X`+Z@=WJ!+nEP-(f!S;gQ6?r5NoJFTxz5$M<iNlj#(C
zKBGl_%8T0z4q$e!92R;dHBpfU_-ur!(xph3u`Ads!_#awXP&eJlT#W9@PEUUd>92B
z#X^zeXqY&@54+m2sdN&37DHd*kAT*r4+Sdlusy^XuYY9vTf&(E(dbQk_Z?U4zDoRx
zgk}Q;19vWAG_Z{{vhx-n=0pYR3~$K+<SO~t5mvyFRzdbS_H$4z@5$1h!hPTZok9MU
z0jwhK4HO0)&OpuxA{@x1@{fuFv#+qHbTEnU!VxQchkQkm0W=s+iVTItfs+*7lQ9|z
z{W<I2DJqx75#L$-`q8$ehpC@YZ%}`vzCaR`2^51$&@!60Iyz#X9kD+$|482Ik>}5}
z|Nr{>GvyyyUyKND$#`3i!eYX_(pfPrhu2Nz(x>v$^l6TtF8zNaKRnIx;bq47skm+g
z7>mkhe;>%!^k1VZo_8$$uQ3jemHI!GQ6B4H?&sw77<6<%5#aLNf$<9DcYHHXQNO3Y
z`hWkG{BL?`)-NNkzZQTD-#{Qb+}o%HL~Nt+?IXUd2J?TVcYojBcM5C5XdJ|8r5BP@
zdF4r}_sjH6kU*m(=D|t)AM2xM=ut!0Gf6KVu)Tvx(y!>0QqZ2BtYejuuFQQtfLtLD
zgpkmY$nuzD+iNpM2Fka-5(w9fI46<Umt~I#WGEzT*|%96Qve`_8E8YqIvZ1Lv)O5w
zEW63CfaINm=9fHVDRSTyB&`!uw}PFYNn)<bRK{LQz8jbHqLgs;D^?tJ2@h$wkpHDY
zmp(@JY451};3TZV=AVq^7W;JeyAtSb#9uv>!In^P>%&wH`W8EtD9STd{d-A;M0*;e
zifKh!OcLpbNe!m@bJC(09R&Sj*XHx@6e2VD90V60TPips-~);XUQS0NmH;0JW2;~^
z9F1c`W;7mgprg?ysQCJVh=WDiI-dmchjRZwLjL_E-26TLi9~;@$Lmd|Qc173Cx!Qk
zFf<7S69b?pc~AorUi3dw!vw7t^bdGbUX3&9)S&GE==W-|BAD<Nj@J?WA))%8aHtm&
z>jV~aZN6xnv}ZW(i~Eq6gz>hgM;SCRB$G!zOnAY7mri*TINstE6`d|8QmNF3M?fNx
zOs2d;1H(8|G4n}|E_H<8qXG{?@DE4f01-bvnac6j!VGh2zU?-p*sd@IM#hGP2Lu^=
z0nq<3!Z&e5xxNpV>saNIQ%c!V%CnSGB}SG^A#+VAr5k<$Y#d%Nh~(@U^uL%0lH$f;
zjdmm#F0Td5SO?)&U9HZgldE((@D@tc>U8oBupb;4^YAf}B1h1Vl4XayLpSzeQZ6GZ
z*MDZpMdf^3a-6!%SO?);{BY&I`_U7~O~G5JTw@)EGnBHDz5QUnTH-3**oSesW>8l%
z5oYeN_8QI)A&zyBiJYm{!w!Eos;Kz+;QTQUQ%bpxp>l1_Z?6#?6XIA0QMpcA-7yZs
zW20X#%7F_u#$h}bq5cK8lJ|&9r3EADmQhDia}Vn`^k-u?78&1A-+*(o_x#?S;B;@B
z+;avnG7);Na?k(43k2t$?w#O!R-$`u&6V?eHa=Z>n&wpP(2Cqxt>C5Rqx2}Ye5)s`
zk=M0?Xx<otmm0q%A_A8nw*B;g*Q=1Ed%bA_k;LI(E-y`FiXohpo`GG^g0owUcnlGm
zyF)p5v^*aW6Ny;IW7}{`LjdGq&*8FS5m1#GBW!IQ8Ud{l(4Td3n>g4n85#2U!4zHy
z?N?x%`sqz(bHCXPC<Q%KLBFMYatqwj&|I=u-GgSStUoxT$T|)*vuEX;;FztJzht1`
zJp52?0VAz6Rt^hqEm=SqP*#+Oa0%$whB@jnN&(2ai9_*5Ki$(IX@Vv&lEMJINdS?k
zQ%I_#NFC8{3O7MN7~fSVQ_AW?UDpZ)H;FWXvffY6@Or&NBm;wg^XDHuDi1}eOtq~*
zF-~S#o^QyK(jGcAik6n?&m*mUZY-<^bx!vY_McpRT458&5FKY}$nxoa#?C-fo4Vy>
z_a<!OC$m|i?{IzTK=&p(d72Y2fe&x$hAHeCK&HOKeMtCKvX60`8nfI2%u{oatVibQ
ze43)~&OlS63bv^mByqV<bAm~w6C+CuNQqB#92Z%GWcdVHFVs>Nf{KQ}za}--K*7<e
z%|;Anq6@6b@@p>MVC)=<*B%t6N9($#_rVs$xPB$sFlj;+&^LXkdHKHO%l9!~s-|}Z
z&}{F%rI__`>Aqj~O~)DK|5BuN#gLx92H$Y{bow9o(&g!Ul#@zGg1kk!G9$-k`z)1@
zbis{8B~g7F^E%@&{#szAF{FYDVv7C2+4AB3S2jz;E1}WxV%lWj4Q7*tWdp4%H{WvG
zN=#ZSQxeu8(FYHIeRmY}|4{xj?{{e}R+Bcsb;Q^7Z=WA4HsF|Dk`4c06j%A&A7rs)
zDe~RbP>b+PAOL?As3R<Ud1;4&D&-F={*fLU)0NSZl^2+RzlsTGEMv;LIbK#Li@z{g
z&@!*30RO;SvdL!-oImc?DGyD#x%~VCiIs<bFz10eKRC29G0+ma{Q93CUOF>*|A8y|
ze63fwBj?<^;rhF8*th=P4H5ShptpNoN5{P3KNnr_fK9KrJ#fLIOQ%-~Lgn;Jf#!{i
zW^8H>XgO(I>*@)+-u&#yoJHH#&YBnS&Y8J(+rruX!@nyBehccjhrgQd9DNnGB&3R`
z6FKuUCXF3Mpfmu<xkMIH5dL)}qmsg7xt+y4mSG$r1?m(KJJiAiv=_vJzUat;A;p!=
zF)!tpi&)GZcJ8a_V5)S9Oa7f0WfG-J3qVL5yppCe*oC;zfT}piHdM*)l^<#!Ol8ZB
zG`m#nEV~IV3zQejH#*IMiej+A{&;_`Dn~(6bkaSojq;7rNx8}_?XRgK^BSASM_x#k
zP<4c5h?r1A1a5@jLAL@A7zye}nX8~zfMyRwBfpqWQhr|WW%=cx#_1}k))ZX+z~u#+
z@wHA_r})xLSA1!vuRZ#iJoMSowP*{N&yIdPl4$+43vamLLUaRko9<Psx?N6lHF%>>
zxte_XGQMnW?lx$+9`W6dT{k;{@l)*m*y93!F8_nNX`Hp=)ml{-xSSeXS2_Mat6QX?
z+MKDD2Hgf#6>9&tb<-2y{c>#O&-fwYF82MalnlAjMBju-mmK<^)kHB0f+zk*g;(V~
zv{7c6_V2es!i@0mDlt<5e>lJ?5D>mvIw1-vQAi4+67i5p!h~8GbtAw1cIwdkhf;6L
zZ-a`r>EzoWHR>9iTt}*-dUz3>@?;WJfCm6(F*jw`MetaR{iyL=IhR^NZJ>5gmy(s&
zd#J~V6(7|J4F{+m@w{|6FOBk`_lDA_7Qxf!IpguurP=(nC7X`oeTlG>jkF1vd(7xx
z(mY^B|I|H(G7lkvk?t|4v**bMjJ=!L%9OgF+oIcU!WVptrq$`uZwYoLM$iPCNRBV_
ze$!u$IwX&=qi%q*QUA&PB%c|_pAIGQAAS&xe-)8Bp{~{0sWNH-mew-9LA-_Vgb-{1
zFv4u8S_d=HaoEw6$)ZQZiQ8)?Vhj!L$p`n(X<Plk@?#%=bv%Cds(8GxqTzzUa|1=h
z-c=MpeTz*6bo}pbS~R&ZF?mztTKTILCedv676%qyeQ)QcUu+6Rb{@BDi;IiF-(c?&
zZ%zE-^n;sC!2-8nr#A;0ErSBFzx~tFh>hCY(`;B|nQZ~V=P6v&sMSb8_;J8$D{l$4
z#-&XL)+}0a>`$idEb75!R4p}`+Je7Bj<>}m@{7{pC>koYs5xw;QVtuc7dnaRYP0|U
zY8E>2#4E2o_R!n!(x3e8Mytfu8*8O1S4E)0?r=$KpV%N-%W5t-_Tc_X-wlHg{jb^z
zI#cE~&-8#tUeKKX+(x<n>1~w*oR%)+oV>*88HWBtV^qr>w?O{6C7S2Uz~}$FhQw=2
zNG>7k2PFy{=ZN(KyLDvzDeN3;K|#k<ioy^vgwlA_8aMVTid>l&d58OO<*DoWxy)ze
z`3)+^=<ww=yH$&3bWD<l1L-k@^_azk>&IGc)4@sdm5jsCYBVxnyOMxck6D5JW3NOp
zzLQ^}i!F@9$m*3ux_9i#<$U9xrEC~e2iP+3G`K<-w~_$XVIm5}Pg2D0dLuH~&=Zg-
zOAu@nal2?-Sl%j0oY7w%E#x#-jxK=ZHzwY>Yj_@T+wlj%i<2?BiYj|!NAOAV790sM
zqw%KQyXy@WpmBkN_f45)92}8PK3VwlV~VT_PaWg-umhBiDn)guL~T!794sBy0*T<a
z1_|d8W;}{v!XqSsORNVlcLN~bKGAce3A8pFz*q8(3s}3u;*i_qHng#`3*;NTVkP+Z
zht{G(+lS!al_G3ES*L3T6Ng%g9{{T+f~b6_Z14pQfB(B7=)+t|-Z+n`lE%pmoqU|i
zVDBc0k1>@4)%W=^;2Th|FW3vyNlPiKv%AwNdq5{zS;}a3izc4AXOId&HeiPdcSWfV
zCV5F1m%-Y^vN=SfNj*XE*8-nn0nD2De5x;nqUh#GsN<;j;dMOX^im1urjzLJ7?aGH
zDu()pSuW_g|3>{qtNof7c2L&ep}(Fy>jvGEXW{r-t3|p0J#<W@RQ@6+$D=Ymw~iu?
z@EOOxM+!$w5g-d-MBR&L#yJ}v`;b`7M%4oV`%Pv3!KcaQ=DG?v(0)a7Zbco^M(Zln
zO>A|1LRVSXLUx_x66R^LnM!_p>J}HsA6^_PFKwOVDp*{H6?b%quFIumldITL5G-q+
zr5;qU?vo^z(}=Y9Ad+;KQoYnRYOl%=tgbxTtq#Q}miV}Y^5jJ}8>0}$;96)<z|Q}1
zI~o}Pp9RZt06s*V5!=*21SanmAn(@fu!n-DPEmTNUaJKZetG>0)6zg*EG!EZ2psuQ
zo9zo=anEsIUsx!AE(UC%dtUmcFXS&&I2|COWAY;^Vh)&TgV*HUCjC$4*5IaL4+Pp%
z6zK_oY$AE#xC11A{{<K(2h6esMEP?!P{4J7^o0#QY5`m>0#OCrkw5>^hKjV{d~$*O
z6We-)G>Xc*<$c2*hR1^*^pOmab<JkQuXC8?8;@o}{!!xSuEIi-xfH}jA9h|%IgvEu
zBtM|JI6S2yJT8v*Ot!r<n`)P}OehabHHrq~y+&5k55{-jy>||9W-f5Tsj=lv&2GD6
zUV)`JC{@nAKHzSwE=v>@oMqPR)_IIT*V=niM%RY;d-h-+t$gGQg{C(%k=gJ!OOKr0
zlFAxz$dyQBsIXBYsc_LKKxA3i3y@R|W9d|gSxXE{O5iJ`R-zwImUm>tLnK<!r^9qe
zjp5F}y{8a_@opFtf*`ic27z|~pTs{5mnIo$0*Ho3EQ*!c4d|PhhU*%@(fx$t&;)$Z
zh(rgXJ_30ViM2tWEkH}a<|FRJOy(Vh6%HE`sS}CPmwa=?siA2=GeBp$O_q}{JhLBI
zuY@*qkk%Aj1;Fm7UxlBhWtyp*dDhIjrg4!f!M@%VoV)(KD{7`M>Wb5Uz5o89GOdB;
zwb1H3c|QmM^8+6-A+14cDEsIE`78Oi@c!4`g<_(wy{)R%7pe*C-AjW-6LzesU*6PM
z-t6mE<{=jQkkNZl-8#Qt-PqIDjsE_1`+Hhu=;3wiKIgnECaqdMjX87G-h16$2}aj!
z;`;W+j&L`r7eKn##jJuiM+LDDyB#mXkRA~t^B7(^O@i(;B|pM_WzrW6B}0vAD%561
zX&R+zlqNWPOw>QUaEPiH=SN!xZI$)D_sLk=t6*di^lXeLYxDD%6ebj{%f%jJVjneb
zpc?qY{-_0GWMDxT2QX&>mI*Bqri!uQ=EqnY3IPyO5EjoG*IC&SJkJa4djG|}RW0)Z
z;{xZ*o_D?{=&1^JuQ;p?YK;IwSRAAeujmd|q2uSz?>-0Rn%9!}Yc*h5;0#n$+8b)R
z%jYZsPtL}tE(+fqW|7#Ti#7y1Dm%x`TD)XVd3Q~Ny|N<UgbaiLFw}@k)si$sJtLl`
z%4JNFaM?x3_ek+JUxqE6IG~3p{B@F*cgm}#@s!{tQ-asdB<1(sBQS*OdIO-|li$P3
z2LxmhB~DSt<!_E-|64kd{6K!jxleJf+~)*SK2U}X1;3G?<gAsceaDaQgZLMF*CM%Q
zEAe-2$1^*+VYWD0pm@>qsL}HZIjRC-J|FYIZVdtj1Ra>x;1CUFy?oR0eeqb&+2=e%
z$~&q)yU&x+xIagyW8NZLd1w0i<NMa$2WPEWw^6A;6nf;FlKYNJJrT7cu3=R*cE~z(
zr3>EzZ_yoa4bRW|Nh>@_e#OrLeVvlUDzJp`GK)pdB;>@7<$p`HuiC$DPt<HEG?=4%
zw(Vclt~k8F1WXQI+cxcK`jIrX;K55Tn$zjRjBT#YITu~}-~we}ROKZqiw_aNwg89E
z;tP)Oei*$!B4S7t^s*_`qG)nCi9Wxa<0qZx1d0hSP7=1o<noD_K~LGBBS?Bn0WSg3
zAo5*adgdT8QL#9Zh%o0Vzg?u=Xd?3tAi1wA=U*OFVI6~2IMivlV{JT&kq6Yz8pow&
z9i)BeWRSqcK*h71{-Hr*U}!m^7fw+duTv(!-K)G!o2Il_8B3|z=&%@AseZ!x`hw;A
zmJ6Ut(1R4spsQHro%hHovz7-vP}Hw=JhF9&OjWeE??KPT>ZWNvO@KGlI(6RZ6DEme
z6}VQuV!a4^0I$V$D>>!m6uV?)u5Q4JrB@oW@DT(bq-tbSxcu>02{u0U6G0U?Z+dk0
z7Aq9wB(F8-6GnEv{9p3lX-?24EQSG{8SLumJ`UyqR<JUP#0rw%$~QjN-6LOS)(tRP
z{L-wTU_Q_$Br8Y?(7I*zv)4!&{~_*#qHh4&hq;o<@z#g_Xdl71=1$xzKl-S#&|UxF
ztMa3-%74PYw=hF%e$v!j1_#qDov8QvhNjTZ;6E^Bc4z0$hWo+b0f!34V|7Tw%3#%V
zBpM~()I(prR+8k`Ktz((VvVj*lE8~n9sI$FRn4pMSr9?_>Lh$cqmmiEds=*T<@xB*
zVHJ?xp;f`(^Pdl2LyuE#hi(fZ@@u3Z^yHDx$ECtWQ;PW-%7?Ew)AK<*mWg&zAn>&#
zp3hvJR~so;NiebjfYJgZ3kyaTV2pQ=X?|^{Ax6G~%2D-FUc$(w<<CeXjC^5m#~5vp
zAh9DB(!=7YXJJU1fW$_kLCF^eKAH_OedeL7s^Mz;3(p%Lwu3$ftgB65WRmOIWHSBJ
z^e^b652ru<C>p&={&Y211-(yzcTTRn`)<;I4W|;^f2$aBJ}s1dJd5rt`Qknxu^-C+
z9(q4Lc?uX;1bzrU?iiff$UGAooQj6GSLCmN9<09puDifoFz#n+TbX%<vtxeVx2lXo
z)qq2-6dr{`>j92DwK-1#wM8;kZc8hOXTWOdlrk!<wQ3lHe%TIrvs@={-my$8Fd8cw
zF?;M9jcIlJS2rrccH`v3Zy%oAsO;SMRr_j_Mq>v(g2;SK#-^cux!<mV+GW??fB&`1
zv`{%|mCUP`?6$(oiS&MtfBR(Y4LNzc{~mH6eW7*tlGSF(Dk|SUksAV|IJU4qCt)I0
zkpu`^FXPRTdU;jJK&AW2nZyVdaDwo8J%dY*pDw3{+p`oMpGYe?q}z~}GuyqCnNt5w
zXA@B%Y=K>keFA4IM5Sc;|DiJ&Mc}6jWbN6Y^+S9;oR__{BE9E~mL0O5f<*Tuox#%@
zr7@25ogU>&ovbe<?UceEpkt?LZzeV7PuAxJ<Z!)4mBVs|{rqx_^#gKc0KXk8na?@R
zQ*J7Xt*%+$7fiHC>_mhk0T9_E1gk&^W^o|L?To0L7|qZK6_;V~BcuGxCxX>ty!CxO
z5RFNr6<o}&{mCcthqnq^ooIX&EIq-K6FNO8&i9N|BKrNGfGI{`MdwAJfB#ma#cI42
z6o2xQwJgx-$Wi`;eDAA9QKzL}8|g2Zv*BT!lY9mYGL#c?9->Q(Vo7)uyI2+byk4`}
zVj6{<pT0?)CW3?{O2Kq8C~36lUB*sDxmVbii7bcSrIyXj7I=_WmV{%dZTWCU0wybA
z4!ad83eD-~<>$eA*oOvW%srAmjK=LgF-BiGv^}^XxTk(ofBo)YkiHV_?8ZBLf=sjg
zd>Uh|;;ZU#ZhTc8z8+pXv@M7(>feO&Z3xl_g6JZ&vpcw9Si2~?|HzQ#F??AShgo`*
zUoG)oRhAfrd#mR7_wxGouoZ?g_;uk0$|17mLn}ybIft%fKJO_U$gbDRwS*Q`$w}|c
zr$9yHBq|YolD(KJ#D3Q0AO}{Cy}<)H`d|8_Sen8?S2m5t(62RvM5<J@xIjW|MX%gV
z-xtIyrlQr9(!*phSPYVOyPWirxeUp{=ou95ZBl0aMs+2`RDu>Ckq~2E?EaN1Epf{!
zbW=IyvY<!GDM8<F)M{Bu5{B-Y=9STXL9#d$gh_o$uu8*afs#B~0EBb0z^Kpg7+kB)
z?v?+kiUU|CTATkCKZ9#kSpelxGT$oEKgfTdxpALEBfCv~rw$%Fr4x7s(tcXn0#q_1
z(`X;L8*Z+v?*VTK7Wo5<QLuo3MIMA+c_2MNCzlo$-dxySxD@seV`Y8l=DMDG@E=Be
ziD1N+q!Z8!(6=cMz@DY(ikk}ym-d|QyDz~0wW{AG&lP7FgW^D0Kp4|&+e_f#)1N90
z0qqAxx4{@5(d~NxQX<0Rif}&Cawwm~T3}gzNpj@~;#g^IX3!}Det}h%DB`g&#3aVb
z-YA5!&p;1)DgB;s>5gAqdUm}}cfVfXIXhj^SM|VEr3QlwhK4oQV<<lw33{-(q(9uY
zqG#ut<|qDWptVl0az|Ztf0>1asbP(k8~-7Cvm)go_7q?N7BqPS)$?!|4HXXLz(F@M
zMSJsH3`aR2f>bgIW~Kjhib5Ls2gFHH$qiSGn38jNZW!^ZQpM{~J{r^vBS(snt;Ad?
zI^>izQIb;*(NYSNr8ld7o<{8RIsDDh%L2u6!tDmB;y@tn9p)4|V*DCWCS|x#2Z=M6
z$x@n5mRdvynk6PmAmP}4`Z9rg0)ap=NV(l|qFDaj_b(IiQ&#N1F$XwfnG*Q^0p(f0
z&$oq+=-hYZHKhf&ZTjyt8Hvdi^y|ZUj<F!~FI1);G$J|doCyegz)yv<B6TR9O~xp~
z){TU2VlHJd2#6wtqk?h{C5acF3C0xDhK-H%n*rLOXBng9bfXs_eJbDGwgNZML`b*e
zLal5EXAi7hs@HOKIc+yGjLBNyE*AE@R14lVYjw1fb<0kg2CtZqgy4jtUfw<am5ara
z;zFC5VU0$^Uyc}Tn5KneS(br-{XjBqHcAcSMPZ8|z6B@;dcN@pHqQc@p=p@hWH1O@
zT)_^5!L&(l+P<G=(1if9Jg@5G^bl%~wwzb(@RfZ9<pmo8arhQTsIWQJVNHQtS66cA
zA=Km@f+!i!UV&@6;_IJ1a~P=z>$FCrjxFn{oZky-NFdo8;7(Dv8@<SD<?C?H!>Eg0
zEEz8q#6KSW!){H1?qWTFTDGucdDpw5aH&y}FMC1(H3n4ODT;mz=?^Ovp7pGViM<%x
zFz}OOyaLgS*IVgul?EH?vTIG4rCY6rN+pS*h3L0_bwm^{H%b$Cb$1l77SlT3Y|_Hb
zdxOE*yF9_}x>&e!X7$8zRRxyk?~sg_3u42D_GXc@7-nlsf{}K_TNjqCxWG~toL*HO
zt?!9X3cA3GTRw0-j9cSjZAE3oiJo=24njR#<<cyeRaomE=dhW@fV*N`L({Zz2j28N
zj$xu7;rzZbGbdUPnE<V$#Xyl`L5Hg%><&nx)lnU4ov=uKXM52*Yt6{u0^sc`Q*f9H
zXPt-RSpg=Lk;5~g;N`&Xz}A|*qVRy@?H}C_N(7z8_Di!?ejQ_dY}$91U7k<Y)b42b
z&+Bl}X!8AiQf)bkw865qf_U(8>!b3mW>GYNjjw8r7aOGob3_51*en?@!+BA%Wv)m-
z4UwpU%8R6RUqA)&S7A!B-AxfWYB9nxQeP#KM&oKE)6HzT4rk@yl7~>IATf%-t89NG
z|4gINiNBC^?@B@4IR0lE+s`aItw#RUyQI(k0r-_IstTAU3hRv0d{O8%N^qjtY!>B(
zp@q&x7I3d*7A)!KBxA22&X<hq1W|s{D5<>nir!IAbamYEF;_}{$+Dd>_vvI)%BaRj
zd;4%yS0C7zeo1}^d`lKAdC7Qx#zdX5TSNCt^tzWWk`v%AdCz~JKhlv69k>ydeY+s$
z@egSz1Cn+M&}e%e>KRf%vRfT>F)8kI_#)u|K7f=U<$$6i(xk`G0a{^_rn9BZjfZsR
zz4)YITRTr@7aVwOtB13XOa}mL3&`(#!ChAdCW9k0@1Bj0Z1l<R68!FW?&Y0Focs?@
z+>f?;3+#Ur*XLp1HF$IGVpgX!?{~3hfpur|&OJ_kB{+8(>)LPD>DVP3ahB`+kD)PR
zJ}5`(GlLnv9!e&YX{1Wa@1PxY=vXr8MZGkAv(pKC(XXI`y+qblR+hmclhNRmZw9?i
z<=0>|$q%R*uzp*AiemnX+A%^+C745YOnf3Rye$y*hiw6iAALq~Bn4R_p@0QDC^~B6
z(TFXEflxg(U022U2?%LzD~ET`)PQzcIp$jN#_ijTd}QXfi|5?hU3RNDReGs-W39%_
z>5N?)-%j{$ol|=2tew3rCp;BXnitj1(r6k(9W@iGYCO`Ef|BOi&hiO7+vJ~E(G)5X
z>Ex4Lg@>=4a?a#xJ9BCf3{j`RQxR|ofZ~pO0T}ukel^4wH=Uinqols1z`#NI$AD%H
zW|zMTeB+Dw96AmF`86~>Xaq-bm4b^wuqD)ZNo?eIuu9Be-jvKxb^+Wh2<ZpvOQAOl
z5#dGZ;BN&%?iK9b()z)H4B~^r=aIc{Df(`v;x={oEErUNc#O8yE}a3Ud*nWQ96htt
zE_CD<rT(R{peRPBnG(T{i=2KwS6Yl&mG)+JGa!tW#PX*f)oC|}QO--KiPRiaqX?!3
z3h-z$0tyaOMtxEy9immSnCL3j1~7#I_JYAI1^@{kHk>gkVTOWmfREs<6p@(we=^m8
zsqmQempb|9I-@}^r|?Q#iukf%x0jCe(_phfi%HWA;$JU-ars)#q!+ZdZ{CszrdR)~
zdb<4K<d5(EnCbmpwVAO3zhTgm0f910R+d0-oa`4b`{XQW5w%(x&|CkqIQ_Xs)I$h&
z(3kY}9X#0A2M?$F6x&aJz3XtjgSmRMr>!>_Q8W5G+u?iE`;K9?lTO<T*=ql3tXj)M
zx#}?&k7@!PlD~GK{_9t9)39FFKy_jax!`xa;^8X>BOM{mv=0Zyt}^4zUs=Gaev)+L
zB-xQk=L9LTbBZE6=(lIATIWH(|MLt<WxC7M-;}HW$XcGhJw~mdoME3CRsq>Nc5A@?
z5p^Ec8o74zW~;Jgtfl~4&fEZ`&$F+qeZC!g1P6(cpIGis-{*r?4DB5bh2x4G8V_Jz
zLN)3Me*hT30Lcj0?E>?WuoD+G)wOnZ)J{&{d74Up?yB$JKB=|JDTYnvU})YNGqlaF
z==;IJb9deAk<0G~kk^Q<b5gth*w!~~OIK{cSapuK?l^Z&jakEQ<{9Jmg^t2&*Q`JE
z9IW251w6t#S+l_?HZFK3y@eW8_c-x}&ei?9$GH*JlfJ7tzDM2P%&*@szoQ`-weo{M
z8msn0Bdf_q#%zxaZe&7Thh3U^>x#q1$aOy!qYT=4JK+-Jc#O>q2yHJh8xu%E495x;
zL|>Z~lY&7WFE3Fcmpd4AyF&dTmrQKD!0QSz{c#grWwDsT+Q!6XC0&+@w=bNrE8q&1
z6gYcpI((u_tL62DR>@V>S?x1vfh38vpkaV*<`!bLLHC62Yyb!PUC>tH?P{rS06jp$
zzi9|=n$!i0-L7%~f-ZPTK@h?%iG@C~Ian61XtqkW;@Z+?k2BO&;pd!IVT-!vkH-B3
zi7|7lIE>ksH&TNS+HFJ|h7RlmL*R@t`7cyxjMXN=?a@SI4mI+}TTj;z>*HYaO!;q&
zMxaH}3bZC)b!U}JvKH!jt=1*_I%;~I1tlR@VAqU=w@<Wmm0Xr+)P_wKOBGFLS|a@y
zr42}XJlwKq<`%)~<btI$LQYR}X>GAhvNl(Q%Yx0KZ((8!guw!Mi7N;|xyxM)yC!W4
zHlT*<@?sSF%vy$)*pbSq7StN6sf($rs5_}gsb3IY6YLp}SIHt6S}lkKM)ZG_MSrRh
zFQP8rTUgac2xY<IBVJ{&Su-p#Xh0-RutgwXv!dK}u{z9Ygo89{K^>u`^LYt6sS1AS
zCH)ME_k1`&z%XqQOms>-wvf1_EZkur4vSijfLe}G3wSpbS<Gfj(bE$rreEluHWU1$
zJsk9DxrqP>Ry%0p4dVj7_I7W{I0HWjX@fgjS7fsmt##Wj^E){pUy?{bo1~jqeueyZ
z`Lio3Cg`kI-GuV}FtooMrPIc<rbnVPd9Nm*p9XxkqMC@?W^+esifm7`w-Y$)c21A(
z4!+J`;Q8c^TJwPUs6P_<>tuN`xPS5<`MT1|LQ4?%<$pS%sTepn9;&mIjVl44-Bns<
zds15@*u~P2yXlf9cPLcU&^00A0tTC&uD?AJxxFq;|731O6KgWDO%)4|Ju<Jn8K;}e
z=h01|^q0SMEOo4l|N4TxjYa6%MzV1?gDvu3ip|go%<}JpqPr4khOgnGuLF&je<AU*
znf|eaT1D-q_EWb}4--8dqZFcd%_5<vt~MCKc)FH|Z;aQHd3jOPJEG*}1)~AdVOl_B
z)QgQ{h8sWHttAY&Jm)1{1Ve_SUg0G@1Vm_bcMP5!kurTx>1Vj_1;^;2^ebV9-R=m3
zIcJ?U)VM)@Y5i*8UA)-i7HP0pW2hP*1IM(MSZ(>@#g*e@7A=^w1PyCdkGaF`9pS>F
z@T93oQGx0H1q<LCE@4sQ(`nb!jf;&glx}(oeoWFsuC*7g7OI1VeN(`bg`tl2P+?)H
zy(3fzW-W=<Rv9%*04=&bpyWT>?V!@$QB~D(c=_`5ufXT>56Wz`7n~zsSmO+~EPtWX
zRUdmVy?%T=?w)Im=t?FnTsJEii3DdILz}4Et)+kQ)}%>qO-?WTbX!w5XR~qLO`AT)
zY2Iq(QJN9t&GJ8hY1)Bx^W<+QKRg><9qN9#8{cG(Y>c-Coe^+AzRm~j<zTnsONn`N
z|4m6a`X6wL1|64b!x@DcuL|2Ti!vYv@Ig3V_q99ph0Ur<18|o?uXTJ;>Y`uP>(gI?
zZoN)t|Dwz(9}^)c2>-)QuMy>GResD{fL@`=R0&p_Z9`{)^etA4sS=*&rLU>XjM2*2
zBxU(U@OlrnAlPWmfxWQefE)pKK=xu`fW&aeDC5f>Tk+GPhS%(VUaQrZpDC8;IB$8@
zBgt!!x^4A7E%F+zJOpmh{C?OXH4Q%S>kXFQ0{Mr6U@W0$8v^MtlzjoDV1xGo{7>^0
zqcLkJ9Zxa;MyXD+hA-7J#Q=leD{S^f08?|CfPnM_U#O%SDl-Y{*)1SM_~u)=NDTf8
zd?Xh>^8je*>;zuH=k$66P70$^0wD1vf*^RjP9GW}2IVW>klz?zQ&JL~;2fPp@Pa{b
z^T{+=r)3$M=5%I<i7QwdPh2;y^or}Qi!VkKvcsg~Xj;N7)eNii7K}P?#^*&!!NKBE
z>;Yn1#SF;BXjouuz!v7CAnHK>;x?@TDeRxiKa%Zig=|OqxZ`@T006KsJsT{LMft~U
z6__JC<Ojh*@QM6mS)^O!H{?HqHu<A-<lhrM_TV`^pb)dA$saMlmH#Zi2?Y6{@;~IC
zgCcs5{B!xAU_27u^=MrBiujo5(a5Bf2jf2nEa)#7XL(FXivMW9Yq94Ws~x<%pS`nx
zXpWCI`O=Hp;XCc=|6U8%u6+-Dkdy=IM`>>l7)U2!vf_^WZilWz^0DjSle^NVcG0`i
z7x%zRPTqCo$QZsCv#51BFP97$Z3gGI#2-R(5tfc<yOmS=fQOFN+OhNm;;nRupx9zL
zf~L%Q<D5A+%w^m(ydTR?fBZ3+3g*PRVzDlHig4xB3+ETrc3Jf%7PlO0(p$S~i{@WA
z^~%$qg6FZikKSA)#}>W$k&Y#4@G?$AJ8|d$_bN~Mm^>tw{GPWReo8)X^!-VC*mrFr
zI3FYZWg^+g*G#kup*m8&G;r%hk6d)oBk&Qj$?zB{U*OOK_?Y@H|2YuNUYG}5^05&u
zh{S!vT(ziQ%jdz^aycqTm-j*)7#xX|a7ccA06vzU(GP0IicjulFJbRN`UH-yY{z{8
z*tsx{Gm4>iSB1%P(Mv>cQ$p{#ghjmpJ5D2MQ6ljWNQR`*{M81KxZ?qw#1Y(uAUe$8
zGng|YUczGE54u{jJsK`543%`oHwrJVY@1Fq*DqbN^CRojiW>O?`Lpt>gy>lsZ~o~0
zw&>CY8k4c2WWgIRtgD(bCt)q{a^fFhe89$;pK#4*E6ROC@~z(-GTDqQ548cCOG_8|
z>q|VlkAq!c+-=Qf0Pkz-@>=H1v51By%Z4o#g%?g*lGJE!hCAH>t){w$*ZEzA0WDut
zsL=$5MAw@3PV4w;+M==gqk*31&DtAo;QaOU)A!3xPhFv9PsqK=P&Ce6r>%Wy*F#fX
zl^%~tUnK??R&`lh2@b6Ct~6w{Z$vsdVYdzuD&kn2gtL=SeF?V@9y77>fksuSE*1)-
zkH!QDhaqm*80J%8IbLaN4~>p9SXU8835MNsO3Fcbc-}P4qJ4cdj8{&+_DO4dxZ<`4
zD?;ryW0l|Y;#<Cw+Il@}x=Zf8+rYX^)pvaRnBQZ%Tx%)c^jrBK`<92wBaFsg!T}8@
z8rMGt=qH@T#msn6I?S4PYk8I3x?Xg|S|*-nSlV8*$XYxHG}>GoYqfHGfmL$yNU>n~
zf;7#C3z)t>&Twn}Y<JZvX+j_TRn#8$wYd#`lXbkO<EocS*gC6U-)${iVzh>AKo4q1
z%tL_cz%gK`S^d}^h=-Lb8cAYN)Sn2#pwH&BSUso(=|{R9k1XyzwrQsCfvH<M##>py
zGye@{$d4Mm?c-;@@mZi1!1|>ZT+j%;@46N)+qkfj<>f^~>64zis0YA&JHNsp8%9%G
z6^vSZQS8ux20k7Mg!oylV3aL%Q)@+2NnL>sfK$|Q4PXnRYdZFpFT8Elq|3qG`RzCT
zDLZhKj&p!(egP)yDi-uED7a5v-mtB20tDlk>fyFf`cwj@QQa|Wk9};F9)4vu%6IFG
zf=<4}sL@(gyg;P1ndPKT2a;w<Vu;ORFym7~!8Dt~_f-8>varc<HAoDmv-h!?jbJ&x
zJ6L68Bx#U1a5DoTGe9?&lV;@|B>>G+beh~VgMy#Iz;`I%89aqcFrrX!VE8ju3Zw>#
zA2Oi1lzLCaE<GGQAG7MDa1ln73SNqu;!Z)6Uj@`aS%3V^s69g@>QPnau&^HR(=e(^
z+gN5N8lS=u3NqZP3elazYG*fx=UtMlS+Zb4%k0^an{T{+^X8*d*Z2A>SFWA1V|iWO
ztiXf=@`pv9wpc9KPEViq2%ymnGhz4c=e=H^AMLRJ{OHg@kH_zyP?BhmEZ=<5i_FfJ
z>C@X{qMp0)oDJh>GtC&X{`>@sT#*haU<q0Xo0GbQKT0pae_V2CJ9h1YVtV^>SPB0t
zeJ+fqcMN^L8{SBtH}o;Q1G{xAxU=jYGT#>>NpuF%fhejrM&>6*-LlForgUxv%8~?B
zwqSLaEG~qJjSvS~V()tF$y$uv7;vCCPreNG!>F}`54;YC*A9+*?RKwYXt1ogX+d){
zGb>R!y?H_Nf#&kEW-zTP0e`$9IkYNy&J^BY<fpE9d&N}VXyCzNe7?D?yqPI-;QJ{5
z-e@k9=ae@$mxCXdHB0HWRf#|2y+13zi7I$2xH101_U$jkFE#R<VP9F<J_E-a(>G?W
zDsO5+^C*_Pz9pO+Cdv;qNEHZz2<Qa=Ab2VPOzBkX;6gmA6bRvQhv)G4-AXru5E9_A
zz@x}Jc$oy9#F7u0=|VAeIRy{$Xw;9#>Z0f{=dcE<P&dZJ^c?0u!kQsZ0-zkVc8&zE
zk|~zPV?T|j1fX!7pjjfM%m`@u#K9v1Ua`U6hE@TRA<>Sr;P*gENxUn`)gEYzp&14Z
zSm<gJ$d5A+18xk@L6KIZaNq*j?2cNVL%J`n5~EC2;W{+u`*G4?MHkm$VJ;wGu^&zQ
z_ztx(;DNX}fIzd*1iT0hlVPPP@B?roVCfJ<NfB}3Xx@q%l9UjyyOGtn5I#xP;ZVKf
z%KR81U^cv(*G?o)a$D3!xLMU3t1aze;Z1ri!%FN@#-wv<X!$mz1<*9F(=rwYKnNf`
zKhE$p4SApix@iHYZ=p{gE;a$Z)+QQ_K=2pX8OEv)o0>QcXD<jA>hvO#Dl7$d^9B)U
z#}&}PU+6A^Kx^T39HZwg09c(CD*$$_CJc<MPO$6T_Ubq+b9-5>o~5-0Yp1rtRS-kd
zg1Ml~67u`pb|Zuwr{|4y;jEb5R%WMxr^qNeW@#YcG&U~-IfjL>q>3$NtPg0-bg@TM
zCRBwPBL`@!uIhrzDja$PM9<`Gv;#s5w3|vm`^@xRw4T#KT1V4*8r%c57LL`j9HfOZ
zQLBGkXP`NTp#??*W2})jX|*g3fetc^M$iDW0OM9W<eiS7E2IgnD735%i4L9LQ?Wqm
zvQ|tfi4+#yn~)ME<xW=T2LKJ>I$?pu<FrM+5x>?bLIcYHKTZ3smjs-vCpgN>Y0;{?
zaC}Flo<W13=;1X%d&qj8U|?WfcX&dyucToTi{yk=@x>-2Zs>Jxcg!!kMXdnsA<=A=
zboFPIHnns{$LqshpN|%RU~-w=%o-p8&VY7JwBE?cbAZOevKl>VUmdN%FC5CZicV93
z+gzmc^X2UL^Q_jkySJ4>rgCRhxVcy~fYv#l61#1JUqgEUsI3F^!~)60GYQsHYSYr1
zJtm|;@(mLKXec&S6hm6C1x1qG1IkJmlVETF!NqDECOv=_V9;8$0*6XMbH$9rAPJOV
zOb!4HX33;ww2);Pj^=^T>@w(Ei?uXg&^ErKh<l(xT&r=~irWecB><QSYYbk-ak<u1
zRZ5$hYO0(a8nXtnTE5O~ni|q@RR!%x-Ilg_ZR;1i#GqGCmswm8YFS{i{zAjk46WmM
z0L^g*hy!|y1~3d@+%yY6g`5VOfYHb?MwX*dy8-6pONIi6-EOfOMMj$DHuIvk$c}n4
zdP{}g0sxwgsAn52ddEV&d3>-$YhZMu-{0x8vb51u#yJgky{SX6Xt@Fn=M`wKqHaRi
z^3%F$ey!7NFT!-*YhxYOYwI?>c-F3R8z^#@9qCxHWApl^Hy74SDTUA<M6Iro3`J~E
zm=~YCd%_gfR}&~e)hf{Ir%f>wM?7x5NsW)kvY0@5ksMt`)l#k00_;^34AB8>^v4`y
zbSTXD@GR|6=z!5!f(8mN8{+XG2mE}D#q&GbVWdzPUqwcfR#59<9I;^$1Z68BG{<h(
zb49@P^r!n;Y+m`-@?o&3yY~76yFx)mTzA1m2U1>8MZf>nuNIEmc*D>?(4-D$J@ZZ1
ztV_2}+Bv1!^bvgsXszwjcTXz7s}LnKCU-PP%RRcCBlNHmd?ja_vGAH1`or-0n$~5!
zaM6d07vHwLLofpNH}Bjx;h#5s(Omq+$J75pp9{cs_ewu{+chcHY?J+eeH0i95)GY&
z(K6PFx)+VK0~WqC79OM8ey!AUtbbI|)c|uRM`}H^;(LXeh#`)LEe3>J9>>kn89PcV
zREW1Y!ZfR(&ta)3h6x!(j6KKP7;aoNqo&tWSSFedmUonvRJf`eHa*nSk=)oGnzo?%
z&{=kG_k_sonzGuW+Q@%D*!hEv6TyZLkL>N8(Rr;r_}oTwx4HvZyaV2=og1rg>YY4q
zHoGh{oIbxZQ5j!cRou3*vt>zhP$;nr*3xjqTUqICu3UO)aPszpM?UN}Z+s50*LKe6
z-K*@#gLsGN=M_kIc!k8Wv{4--;wobgi4%PCT0&DC%CmCD;+zh<ln@7BfC=rg@Tqjn
z1?ay9*+N^o-cihffWzba!tSA+MyA*%{|>K4gR?~c$EF#r49D5swLbYDMy*C(Ztpb2
zyXMdrtVr1JWLjr1Gk@Xm`>lhIp$GK1Ohu->EjDy*Sy9mad8fQv{*}dUtFT*jTG?H|
zYwca^-uQ~XzM)SopaEP;jaYY3G?h`FnrFZ`#dc{TGlK!uVw>IT54lbflMIV~Qw*{9
z4pD@d91=?|vFFl4E>kEISBCws1_=M7VucFR0h?qeeoVv2S?c0aG(f9tZ6x*^$?}<)
zAC{^wjTHU4@@s9#m6}-9Uo|o13TeNt{Bu#HwB8J;&UGNUt`ksZx#!aVxb)Kh00X7<
z<zW6kd5uYQh2$@*CQhsZ=8#J?f!p@UN6YI=i<}_2VS}7>(mnWsOO>)RxU50qiK_~`
zfzxc2Hp}9(QT5&RiHS=ml0TH*)D4r}o8$pf8ag2>Jb67sn@CCCl*i*OeNZMCf1tm6
z(<bm*t{lpHv|(1kAnKB#a45rShZo!Ij*|QZ9u_P&TZ*bn7qmD_nwv_TEepm~6<N&8
zq7ehkr{F#Nw4P!Yl2=Mg3;n=V+%wI7%@|`u1=26xW>2Ah)QMOA2w@u<5NcaN5DhCh
z&Mh1yG1e?`3l4^`3n!K{<3Zvh%*F}XJi+i`i6gGV&Zd^!_Rgp8+_ps7fQ^h<e&1*k
z<o6%fd3BG=?+YfQ{JxoCwU0lpWf?OlK_@}U<66J=aZrLzf)e#4)aP!4Hc=DXBfoCe
z>A2<J7>(a7=X5$VsO@1*7Q;8+7|rM`s8!Ay49Z#gb#&Hj{N@{js{8$vy_gbF52b>5
zT*Jc}M@GO%ZAp-0)S*s{l@Li8LwsPzVIqk$pU3K-lwW?l_t&S^9{p_ZK{Q{6mdlq7
z+>R+`x4r<xTPiG~Z^4p7CvQ0aym7?>{|Ty1?8(%9&GL`m-TT?mwYz@#%D;BL4hnC-
z1vp;a&B1Zwif6vD^@fv&B4V*ns$iRODb=Q3u6i&MbG~nsAOEP>mP8(!23(u}1*0=3
z$r%pwVEs^m|D%Qo(g(4^f*<B^I0%l1_f$XE!=|W-*c*%@{0_XsZYA9Sjf?2B@K?d=
z4E16gP)Q$}fF+E-k79xlqyhv19|jWOdP1&&_BSO-jEOI@*2Kh><CBp!olS!2DQlrq
zl4#4zjSAeyF)36h9izLBNp&IV*nmr(oK8LqbkD-G>Ox0%oRI1yNqT`bkMp`PIGj5i
zHVSXp%wp8~=PmuXVj<;1<u>x~Aa&WZ&!P|f)F}$^yO}A}WyEI?uczUqORQNyr0TI;
z2+fT&8ucAkLV<yoeee;aW)a{VB(mT+690PW+ITBNup@}Vg?kFpX{-bfhOCO?)jY-i
z0Ubf4!|=Nu$DHFzJ;l6K<!8XvwKUIb%0j0oXToarbT>?J(mJPP0zAWrfvr;xZ(ims
z&;`!vy}FsB8B-Y$4R)3_Ypiu9b5X3kw9p7SQLAI2z;gx7M$v4K{>PlC)h+N43G|#r
z(1`xB)?jlrgG6%3S#`i0uI1=&5+8e`k+KGN84_vXrDw6Gkf(rQtp<Z_!K7*pV4Z<U
z<)#9Tm1t(%gm$M>S9(o9;I1~?Sx!Q-CPV9OwHpeHnitg+vOrVP*xOk;(P;2%p<U9u
zATY3&Vqat3;*h@8UtO$)jH`S}Ywv|R69yll0c1^D!WH}@?rU~Br6VI=H8r1FPhE_@
z#;i_^XJe8?`llm<_lX)cSOrRWj=>*dJXR7!dM_Fkacr%KcCk9>!A@(~D33l{qFO=^
zPys_@NV`;2${;yL4xtlRWydNyya$_pXWHyy$Lwtytx+iAEgr%1MCG40ZkSzNeWGvU
z3Zx_U%cl<gQU1N4?FZn{A3+d=rXBpboR&Y9|NEW2S0*0>i>FPfWH`aZaaaDPs<INY
zg3i#ev}4=60!dTuKn1fdYIBw`tjpO9<}ZwdwY4#qrm&>7^`V7@;|;}yyZ$-kpKKCb
zKK~@I`!=JSW%b5lfz>Zx+f(9yX2r6l?xH7}dv2I4I6gb1Y_93J_R`+g_8m{1vlTGO
z2Y)avah+g5y#O|~v~4vCdeosB*TWUdch#e(qcXJh7}3+6<5=UYp7d6?ORROzdAws%
zROE{5t2x*7eA!|PrKKdy7f<+Yk*4jzYo3tDq|7D2%%g$QVrN9=+@mi%fAqjF{efS~
zx20cw;(k!VM4xyy{TL{@-@knM!fy^9{Dy6j-9z%(tKJ39XThZ3q|4;LzPkz>83KRt
z{6>COS?fcx!%ifpZNO_UG!|7kiYF)^Xe<^WHXi`=am8?&#c8$}#G+L!()$?!X*g(j
z!fPV}{*XDGWOsTOE$>~md{(pBvROXzrsQ%-$3XeolBvrVtz0nIx8<eFx3m>RUA%ot
z$BH=%5|!NKi&rjaiTLa+W6-##)Yl22NawlDB`jwZH9S&}gzDI$6_<3taLdg3^SYWW
z7Dp}ToZh`-+cn@P-P>BcwBRYw={}Ob1+Gv5c;~nvYK#@r_ROue24;3uT-pz4NLz~P
zr)`~FXpzP>wYAll%sV?d>!fL$HecOQ(Aj;~qPde}CKI#N#XH)fjm6M0^Wr%z9ua*$
z^z~Qpj;5**tU+Rn4aqKlV=3ZEZYA+mM8X1!&pxpEEch>I%P=xAf7?2{K^{tfF?%cX
zo58Zo-`3gm%-LIkd*b{Z^1py_$NY(4@+s;Rn2LU`YHy#nV@IBxi4n?b)cBw=X-w^>
z3GQN&Dv@c1WK$tBeek;iz2G%t@R=U{u7Iy$GO=3L;cTq=WUS(8%ZfQmaRGBwteDBP
z|2qpipcWCdVP;f?kySqRouwTmzbk8|xnho#-$z*+sF2HQQNqqFRvbh79RX@7>|13}
z!^RAup%=eLJQ$C@{o-64zIYnO0M(vb_FcRIYIHsDekXl^>f^o)$>cUFh9g0VIEJOM
zxC76vR0Ip94l)|i3XoWwkc(nVgXFXMaI}|1pIX}}zxnL#^4GVW_>pDjA;3Sg=bi1)
z-FS*JnoBKT$feF8-2*kkg4o36y&XYtzr5ZIepPDu2rPT`u|M1fw6{M2%33dt{qeGA
z<Zt(W;M$Vp1K<Onlh#`bB5lhjPCA>H|Cme$<c487w!-TZ3x{a*`grU<sVr*ZrBR0x
zn}zKPk~qpc(V#o}U$ZMh^YzSCf%34?>)G41-hGa{u1nugYic%i^xW~M_fHOcpL>7H
zY2<%NJq_<a82j~e27Z~d$Jt)@Sp4_#$3O_U!NtQYXeyoqDkIi^t&maFu&jeo8;Ito
zGhtXra4AA^A8X4bEHO$w$t0hXkN>P+5Z|Rao!031B(oI-bP((?xg7Eib#ojr<S0!2
zOg{dcD8N+{0jD!39hxc2vZ<3;t9)V`YsGsPF3Tk30wb{g6npySV!s0_`m{|AGg2y(
z9gMP8vF{lVE-S2-az9aidz2WIo-;;=kIGN(^j*>7YFw-a<9LP%<6pO8eTynea1~H!
zjj@kC>McGZ!4Owez{k<#=D?A@K92Vz@e~N49MF+kIv`<)Uf^LOtS<!5Iq%LS`lR{B
z88aGr$(Tsqc^<R4>=N_hot2e47n?6B<D${o9UX)7>961WqG6M}P#$nCuIyP>bjKY<
z%X+F7xqz1us%tw-z)M5gZJ<AqsP;Jvpv7r{1x{aeBEj2fQ>3D#B4VQL{7}iJ63_S>
z#>>A6m5p~gu~#T~6AXYiv4<#Q^cC2;6YBSYu|(z&|785JVhvHTA|a(Rm&_0}v;jJo
z46AOeNW;t}Rd_qp5K=q_f;7v1(K>h8L-qW;rs^4{xcqWlGq1V2%M`z*$ksADUUB>S
z+g<kNIq`}+qRNRFh{ZJXapvgVHhc5@=88Mk-|HM20<rb-%kZ1oEob|h?zg#`7Q`y=
z>$}(Kz=?aJ+U^!~?f*yHcfdzgW&gi>-+S|>w>Q0J`lKf_nVIxXfRKa`dT60{2_PL|
zXkr5urKl)T5gT?aD7snuT2L3a;Ln1)xVyHs7a()_-}~N72+00)KmY$fFz?;^%6+$-
zbI&>769Z*&=?HR_*glK7a&$buXKoKElE}L~AsJqgKU5P(FP2Kt>A9d{{)Kxr*@7n3
z1v(-?mv&@d2GXwVL+Kuy>A-2c3`wM#O$4gJKqV6TgxlkNDK@RXep=ykg~}XxX_&4J
zmnO3Ndc&nvfx^c_v_tLSEk=XU!s8GP6uz4CbxqEk0Ec`A(>nj4L0PM^q(LcaA<h(L
zW|x<S1H-LZOKgyr>10Id1)q5Mpm{izktGVY2Q2Q*gQ*eJRBACr@puIbLIEL@7DPWm
zjku>lcqhI;$s6>={lta0XyS>feU>+wg*6a=TgdV8SP7NI;H4T8kewi2ZsJsyKaS%;
z;sXT7P3s%Lq8I<oN?DE6&a|M<3UYWg&%Zfry;3KkHOlst_n?2J)3_}8Trl$G8-QZ2
zJkiWBN{Jr#<{BjV5-{sFbkC*NOnLjE&nx=w01H6N*W0&$jSit3(IFB7qd_OA`s9i$
zK0z;_1Ly@3g2_8~_3=}{r9jGuDjl7wvlLxUv(V!Nav%drJ+B5*^c0fPwVBkOXXbT{
zNGL75UE@;v+4;v(t0Zh*7Sr+I3-6$Pv*3Yy=jXtZ^KRTCJj|&lulNL1UGNN<wMS@w
zJ<%5fIyUGhW5k~@N*JSoG3x*yNCZPM#>`ZsuTP?D{`?0p>G*N<DTsYWKM+WLcf*R?
zf$<IEqBLpPpW1QFPy1~LgD0-t^A8u>j%v{AB_o@h2R&;uI_84kDJ2!8iU{(6(U<PR
zz8LW6qPhXUbJ%fgCK#oA>E2|v<Fwq7odkGIN@o67II>USj0y=3{EPz<3MEAZkh4?@
z-}u~5geN5)?UET^(Mg$TyH4l@-XwIC1kaixiL}410I|9?8aO_!<B4<0WE)QeGJd@z
z|JE}H(Vx+N^yh<&9#)%5Oia7!Ob?@EQkUkIN@~i>p<Jfv)yU+qyu3~^7CmM%F<m&D
z>4Hbli-VRA!v8_#;~WRI1yY20!=v6?X8MN?3Zmg^1^!cmM}mWf2H#pUM_M2ST>zjS
z{Qe8iCfOTAofg0o0R<nVAdzQaHcM}=rV}JsOaSfZ399Pc>{?YAoqc#xc_go)X4~&`
z0@ru0ER4rW%N@18Hu(<Nkg8HB;0uGmOCWr;MziQk{A5+1-tgvFwK_Dt{BqsTX`eXk
z$HE#)0S_5v;(iw%S^j92nZr*Z5P6u+q7xpPf`3vzfgXDAR&?^{s#QmU<5rOOmv`1Y
zx#543$^Y3fcE{u<j|8>Ae>YSeNB8%V0-zi?j;{K{A69Jq2>txg#-bq;I|8C!nK(}n
zyH_vOCP*VpL^&`hDAAMswTM3r*c@Tg6sIXcfNg>y-b_4v3)rTZo}wjO+R(#{4@@-T
zkCk9<&_7_7z_Wvi8LZV-qkmUxwGzFgXw}MMi5?v*X^zF3!S7<tB{+1ZX@-B}<2A36
z#6aBk0WTSJXoIgL(iCt@faRr^frWGV!K{mnN3d9{sjk*&C6eM|$-DSsxG!}E$Tdqk
ziktkM5@62{l*F22kz&?}UgbIiO~t-)jorEZwb!<1Sv6(PTyQ}gIv)p1BY1Nn^Qq8I
z-gG;WW(s7Q$;9@D5<=qyLkTnacK@NNL~HxdFZGt_`&Fvg7crHJ)v`H9b671x1=R)l
zwfUe!JpZLKH^;sB=J@>}-%aE$MaE}!Oy$jsTzR>bSvL0Td++;NVs(S)dH55%@kQ}9
zC6b&R$u4(6flxDj9-LF@ZezX+W#!?k=jO0_^u44tt1`zGQCZEaA9!H3)uJi}Coj&I
zxbW;l5SbHc@Ueci6yXI$l@ljmV`)W|D!_$|qywF&CONJ1(w<8lLHq8d9V3?74ZIy(
zxr>}SD=)ocDHw4f|8m$~J-mC-aP*16Za1u4-LYhGJHU&ngO7i-dY!@U;Mdq3YucAA
z0S{cr)sQ*rPA<t#5}sSYMG_xcG_mh@UN1Z}$9gh3=7gBV1S>~X_C50G888F~QV%`c
z_X4;U3_0`YBYm4*z$tX;a-trS+WXMYXC4J|bUL@9A{Q>W|J&~mUQvEK`ti{-ryd5%
zs&e#gPDMq|Kz@bbeNX}7W?XcSdJ+1V?M>C9tVx?-FE}x2Q|-X-+XGI(-c6HGR;qRr
z<2+wsPl|swDaHH)_h=cuk4~_54+yw9WO?vdflmkUN<kZ=F`i&k;C}%fP8%2=@<!?l
zFk}t5>CHFa?10A9=U@nWiX_|&4LD~oIt&J{VgAvV4G-hI#pqgGW-vSqTyMOA{?^xV
zXUBdqu|GIqe8~iC)FR?rh!WUtV)HQ|q)h{PbGihv?SMkuCq{n3h?`nsxpqfR4E>M}
zz;zE_X5h_<v1^Y->o2?ek;|GJo<5eSx{NlTr$pJ9?9>3G4va`nAm>yuP(DYul~0kR
zHfJB@;anW`_dSJ!;OFz(S59T0m2q$4`E(<7gnErSO1)40o%$#BDfK1w72!c$G*Qr3
zL#}}J5lvDT=LRMm4T=UNC5dW?rw78K3Ys^JNNkfO5zqSqM{Ukf*ie#2=^%oV5Sc&(
z8#!}AO`8)1T&Mu%5Z5c1EOo&eU^HXmPFf@CED?oO%%#!fg7}F9$}VB%fCx+-s)kWK
zG)X2O#i=o)2Gl_2<zZJ&pIw*hnNT^XXw_bSUZp)$Fny?8!pJ0foSW6t5&!@v)zQAq
zSs@RkVMPLuME~w8>&$M4#E4vOtwpB>|Bxz-yq#st5{-?!Q>L@(G*19<m#Of&!bG9G
zF_-PA&P(JNjB<-ILWlExpo-OTYKfeaF`UMxFI2Capba<HI0s9WSy?8f>8G`hylksi
z?Nj7RIhZ}X?~uAQPe<qe6gnK2*_~!9T(zdE7M&_uI27DY`^uuF3}+l(=RkwHB=USE
zf6Oh<rdI(-{!O6^n^sI6QaUeD<x13O1A8AhvU4hASQ#7OoJyB9VDi{%vRiPUkZaw|
zCRJIL5!zyt*4<=aY~3cU#!Sysn^ba!g+P_13z&2o6CKvtp6n_1dufA3tLO8E+Oo8?
zTIF}wI;`O^RA~Op8l@TuCg35>fLxcyR$w0~ljS=AUV)}eG5SO1d|eseqLIbM-1TxU
zEtAXmIH%|vWy^KP3rg911?^WpQiR^t08XQjav&F~IC!Z+2b8I`BbAb30E8=xJgy#(
zv42x$Op{HbHsNJ0nBEN``m<ysU$C|m)SAUnCaBbLxRVIF<#A9#&})eL9g)WXL79yx
zBM4e?g2tC2z1GJ{aK96}Y$DAcG1s!ZYf1BlT2`via6syvKP{3yHkVW8@dk6O(Bdq%
zsbxAdt&yl@S~ah*`xH_+D>s8qxjEnENpAGphYlatomjdb!WL&kQ`xTNtFvrvb%PDQ
z!Yqd~w)SoGIeHuY<4?&@MaQs?LSEhMt8)4Cq#Mfe4(1yDqZ>vhLJ?kV@)lzb!ywOc
z&@|(*bIQ$yYK>f(XE8`Q15`0`MnXf4TBDONN>FIZ&v%R*1;XX!VE}HK*<E7L)wR|F
zP&Kp~(B6XVl}GoZfBtU4(pP|^XZ+o37Z0m-%B2BA*y0#J;+CMZ&91Tx8nS%d{nSA0
zEf-!TJE@g;KF~ll2xaVf6G6;Xn>mRAlM^*GZN`LxS7LC}Tp=s~i2@Nv2#<f0Xha$!
z+vy22A;1dhgquiIT!1!6IFn#GOteKcbf^Ya6NMUFktyie?W%iVw6=Tb=#}FKnF{KZ
zyA^>zU{1ib`}XIQdz67W%>n10p53?ab~WbNn>tsHZds}vbw53O<>=-m>M_qWDs~HH
zTzh)(KWA;Bv1KNl)nY4XP~wc{IYP$mdz=kVjZrLZ8@&>|)w9P{TVQPJTs3+~w|2~f
zb;>=8z?@)!6oh(m$L6`@j`*Le;qX`uey~;3nhk|#c8*>(d9Wj|Q7AGeeM4961EUp7
z8FTBUiqTItq@OpP)sSx+HfxpWw?o9t7(|VuCQwtT+0;DhO6pFspA#$;T-Aj{WzJAq
zLopE~)1ky5Dstj~g3&S2y~JaI$b|$QPf=x)78Epnq*OwXh9x4bIRpYa7MSS}o_5WE
z)!|P_ZXqDTi2EW!U1GY82N%!@qU=yfNGE8wBy?;f4`&*6a62#?40*X+Bh%0@!os*|
zNsDoVTGt4rv!o#xgn+e~EqXZvBmqTv;S4CRSIDdk18J*+wwBZ?FJl?iTQsK(x?DE1
zngO)OP~_)z@VT0+&-@IZNHsIZXFWdSue0)xp#oTiPTv*}Z`@Jt88!Ty8mU~$I6TbI
z2L?~MZnVZ7kb|9lr`4$fPQ?<1Xbon63m|56D;NWKjpn2>gOiQH*=<uakb%rN%M*6j
zl``Ok3MtXMld~Mh=p;HQp|x5c^f9y?0HqN|%Gk&Vhol68VsJvEGHaByS!2V)kWnk)
zj=$%mZu%D^{WKMK!|UCtf4MKIqbr^QYftM`J@q54%C-VdhNlia3=}*4oDMV6$uocW
zQSzM%Kqf8&64tK<$(JvgZ$y&?d*clD0<q~EOpV1oVFk67+D+X}JxTTU@AULLhh@))
zEGP5>@$F<h=SEM&W7qvk{Qq}(UIZ5N=s*_P&rFg7d!oE)*Sx--`pKnX*c0w@>~Vxs
zSpv|}e>?!{|1Q6)CtR9JGRevH=e#T5>0Lf3Ma|naxn4qrOT+jvy259Y{ndc_VnKA#
z)c>Xc*bb=Da1Wx0H*catFQL-1n;L33o&y$9>je*j4^h9P-l9Ijl-OCI0d7zTYA&+l
z*Y6}zY<Jy%8K?it@A+H$$Av&X|F_rsfBAf@psaF6)Kcj^=XT(KKO}!^!E*;l4e(6#
zn`;5;zrT}&3ffKy`&<%yL<1mazx}n~qy52)Lm*u|ct*fX5f1RbsMhyilsylI3G<q@
zXSGZ(+l5C-i0l|%pj1a>of%~zv&oRLGG+Fo_tUy{=zWL7Ioxp)bf0vzI~=G-RIqy=
zz2En$pjwwiNkO%)6!=L2$H|kV!Y86`9h>&OO!iZpg4AdPk$;JN52hUnUjjs5F(AE!
zvJpm4EGqEq=kwwW;xr~Opfte-2?)MnL~;t#XUgEXs+P5t_}IFp65ThdwPjP2Z~#{=
z2l}VHHTAiTU)9v7nxE{x`)x3!YFw~#O)ELB1v6SlHEn7k2PRxOzisK>q2zc=>R9{o
zMSGjuS1h`<@CEeg(t;|dqI3L?F~=TUeynYNW%Dgd@p0(hrE^xaH}74vyuJC>Ma2H<
zECq=#aHEL1$eYr}?&8DaXNSE@rsPAvt=Hy<`BRpR-gV!u(e&5XzZB?uUC;!J1zx&7
z`Q5Fzes>O2Bx85v##B7ev7vmRA|FviQcYup2%D&wYDvOmDp?DkPBo>P*wcP@s@75O
zNY%Ri1wq(r$}_><V8J9X39kKgF+vEYC|{)xCAC_R)K&UuDqODylvH|_QrC-6dHDWP
z(T~YFt7x3X288EeLHZoZ#L089WXBiNtYRSjfC1rvpHf(S@c{}>glfT!XaQQlzB?e2
zCx#EB!DujhD(FGA)><p7WoXEzgPvfn4?K#0z2>+X^!jqaqyC((UQoWj`+)}@NNvl6
zR^A2V`@5fg_SsYw>hf1>PpH)=ApRp~ZM7ft1Z%ZVgX{3IS1#|>)&^1c)7n~5rh=pt
z3-No)aJvVo0;-Pe)*3xDK{gH2n8J%fj~6pPl-MIVkHHl1L}DdAPs~Gjb)P3dJdfcV
zp~KQX4_Ar+INR6REdhJ<2Wpn<KA3?H|2YNNqgTB-6Q(X%dL|CSZ@z;52&`=ro<n`;
zbJ#KVie)timt0yra!Il&bu070TJ*=coiC)GtWBUdf%GqL1OAE+uhh8~t%}@z=((Y-
z*ZsxOux`TR9a#rf4O=s++?M`^nf*)`6`=C)n+z8G{9Lda^1|*D*;^nR4YV(YDOE%I
z#NslZc<day4}m74BW52Sdbm*rO2UqzZD8H9o@?iann$%heCLX(ho4;w<&8tYEnw${
z<o??(f3x~3#n9r#3dA(c12yRP=S#uR^?hG1U3^<kNq5=s936W8sm{shk>iW!WVH;E
z8#X_3aO2kfzw?H{C96y8fxI=tYjGKz`w&5A?e|(B?7^Bd`ez|RnS%icMF|7t1Hv3q
zh{u(nK0|<PDM`V#uU&iXYpHEJ=Gg6XTI<~IJuSu#L)P-abLh7pTetqP$JVcVY!~|B
z2pXn*e)FoQt^WX9hEG<R2*!ZonIk~KxJmtM&ph|`4oQxCcS~!nTk4Tk4y8X@_ZY7K
z=%eeOML(k7Z+LXir4zvew-!OL`xzibKTzlKj#B(S4OD9y34m;$QX)4fm@miiL&wi;
zgjHo2k3b~-oj97jeIT>HEVc<@4&PhSvv_e2(q7t8I@wxMP`T1-iB@%(3>|cz_$3Y+
zZkRIXW;qzY>)5efH~tZREaQh&qrZqB=%?+kZre6v<~BOJXYrEZ?TgW?2bPu>84UOu
zl`AbC7A_P&=1qepuDoV;-?5#$j=ggudJY6ufOl~^>Y1@^+pF8R5w!8MV<ca(XDJo#
zm-(1a9wwkB(Of_fzG4Q-WXBvctpPOAZjC2GfLI#=%%RadX#pUi10kMhC9*{7#Hm>>
zh*J`DAVCz@*f^%@O?0CMqKSCyD>#kJ3)}Jz-B2^N$W1fP=^!Wd4ZlW`JfbY-^@DGe
z{^J;T-`~nop~Cmj3;f51_OPYcS7a%IyWiC-OscTI%G0Fq{u7j~-TpqBwA<S;s8Xi`
zJKb@mA_Nwp>r76%EMPBf_D|%LupDifIOO`dql`u{(^jd|*IYIx^%=U!>7yBr-47Ol
zc@Jn!Ci>ADbj>qLFvIO&puv=9jiZ;)&On>b;5C`#dU^<0@WPiP(ba}A<8PkSpi%+a
zuF+J9eWX?@_Ia|e+i(sog7@IoB19zDpEA&J)RQqF%{UUl?MJ$YnW!*;6O%Vjp1gS@
z{quNek)<e^1+uh|g!JmJ?w;;G3Lm=E`c0D@bIo^5qp4|knCChsZ362^p~>I`m?`CX
zY04@_DTGP(Byqi&6pxsmOXAXZPF}x$GMcnWw5yep={8DLU_QQe0I&AHJg|tf>`8mX
zGV>X`S#a*%(<xlmq)iun^rVQ2mn1K6>a_T{GX}gj;}Ozea?>R861C*<YsKTampDPl
ztP|u_P?pe4V58Uoea{F{Ob=vX9_57aew3dKR96P;k8A=F_h||8X8lLepD<A(6p!qQ
zpbbTU+;2s_R=*seh%Ly29iIrtm&h?mVBwQ|(DoA8fsdbn9i1gX-L|0B=d%X4>4G@-
zhW<m6=Mk<DL<@z(fVsv<<x-7;E=(FUNu1@=X4vrrPW22(%@R_1oaz_$6Z=auf_pwN
zP&I9~>-T8O%{g`xo3(k--|pwtyrawaCHlinyNY~P&b4|2Fu!9_TYU?{>(HYQztLlM
zXS)^7Ef4Mk`Lm6@GxyC4;pdyO_@!Q1uE8m_&sNyK2phNMsG?S%)U#IQ1G+-<&|!sK
zz~#=71{$lB*%K}h1_9BRE&e7vp@xZHHjd^nj~&9H1fTFQ6ne)3%!tj~?n1{vp#^;k
z&fqY}XWmIY?M72w=qnc}go9mRp9|<*c<kx$?;07!TuQ0&3QIiNS5iZ$QPebQI<**c
zq}!<LsN1N6R4?@|@wP>Jsh1dyk{KIEaWj&(<!FOB<2)cnb_czM#I`qKCW<(*P@)9S
z_OzKZ_=NN*rrFPBxYLR|ID&IzfaeT?XC&ex*_602CPqZN@G?M?Y_bOOM2u<fk70V%
z#B;?$4Dzvf+8AHJZx*OJl0XSU3R;UvNR?csR;z(ZW&$}1rAn%ms(@S}k*O6j*_kg4
z2B?NQ9aN9A*`QQrHp`^IcEoB`$f3~)<%-E>GgPXKMwPM)$JG*<!61{U!3Ok^(J1G%
z5c5k~PCl9E6;d3+aj9Y&PBZX0qLRv#;L4XZ8VzO%)M|}EGhMCLnzTTv1X`2kPinnQ
z4<r&Ll*<%SP7Rq^2bT5yTcvl5?s@^Zbg{B!2ljsh6>_y&p8DY%xvJzCY}QIyR;rbx
zo&}!+Ij4|uDzG5AP9|HIlr_Eex=jAsTQWQ{KmXxNh2qN}lx*MkD%JOWD)(nUYGvGy
zpGjoM1Q(*sKXMBFk6^7{F&yQ6FIDj0gLipF7Lt5xG=2+C%T%hA4t|E<S8|P7@fAP{
zwc3RYUnsO%#TVcUrB;ii|5WMqswK<dT3RFHSgAgB<FdP;UPW&*%f0ASujv4l!6%>u
zAI5e8fs~@M{0ThOkRAFeVEW%<i~vq8MoZ$52k(KsD~_VuP#3!G=nAm+SK^03514i|
z6F*8*V@BO4>SNqDs_(u55s)(=!sOsnQjFo#fc;#avQa*2G9EjZ;<2+8&q=@BuQPKx
z5AmlgC|eT|E)b+;WD{4y8O1$w4hnwzh&?+X)*(i+2TN=YDquvgzsIkQ516u010XTu
zNsgGj$MC<9ful*$5V?wk4f@EKEMbp0!u<fs$#9orGgv8CqF0n)I<YlNQ4o2e73DX$
zv}y<>bw!ugd~p9w<25P^VC9T#@@TaTmLwYe7L`ijHUhI!FC)hA$^^2PjE)Wk8#F5X
zI08b260F_26PnnTsJ+w$S6D7>DN-}cW?_ph1H&A4G@>h<N>HXet!F4=&~}=FBWy0N
z*o2uY0D@tUr2?Jilz@@j!n5;b8VE;sU$L&^mPlA*ER;Z+b*&k+AK5LJhsV*Yb2_;I
z9cCDS>zZ(Tq~^x$m?&;oIA&3)!r}mcI<KFJ-)Pit`!>9h02<@gk44GmIt~kvezZgb
zd?f|MH5&m|C$yapw>TY*{c20kZQ8#t$<dIZ0ZS+M?QcTwc1~v@Wbo5V;B`x`gDhYe
z2-)eKzoFUa<owip@QJ~um0D=84B6q%`SVe;!Db}RcG)Z$^rSwLxg|!U%>bU5|I2n5
z`P<rom;(3+s3(yILpSh|I4w4Y0O3Z&4TV66^YpJa0>}r}VY68|i(i_7EJx380lvoG
z7aGu~&9fOLje8d(QOs*WA2vSw{BLN6&*sg$o#Um9gyCe&?epdV9k9)xzmMY?8ed1b
z54XwJ=#z|&%)s|A6?B1rYYSkGQuNb}DGh?`2z)v+atYYtufKB^7(D69mYjy+%{4_G
z=(>r3U9qynU0Ut_Z7+DY#+>XJvC_`ZPyGp4fKu=281L3x?45F`$Zwo^be>qk3>Z;e
z%J8eNz$E*qUb6Yo-qVd~(%<mhpcnP_k}An=QiULAW}Y>(FGHR;K{X2~>oK2^jrpAE
zv+>v8!AHQwbwIEX7PO$_d@M?wB*HWq4U<Gkko@S%|Ml&XNkqYI^QG5+c)ip(JvrRu
zJtFveW0C{@z^}b=GKr_MchH@7>&S%*M_TPQpf#DaA)DZzv0vwPz_%)+S_Eyj-?UB`
zGhQS69XBN61n5y45|PzRS^;$>6d_(g3jj$m2r0kbIWdt#d`BMGL>Plj2ejajo8PcO
z8#fqP-HaJJ)~J8hZWudO9}hylq=bjO;kV3A1yWP$1aT#Kx3F(~w<a~%vJdRpXO!r4
zG2<Ha{2F6StGUrIsc#Yw{V_w?jb(<IUU!i`9sRB2^uoO%Hq&YX8fG-|>r0{Fg%}A(
zdI4z`wG90PWU}A1j?u|XU4V}ezke@ze<1G!a@j?`e}WoD@RNSin^hCrQ9!iciG`_P
zzTz=)wBWZ05LI_#zKE$@OepYTS&|w0^^e~rwJD+sTKdEjQW^(r(!Z(k%c|9XyD%Ls
zS83o?(4?wKpMO(};41|2mA?B9Um=LE1oC<OhmKvCo|51z(&W-|9O(N!4q%=qbapp;
z9Jd$I(8c7D1d5J*<e2L**$C~F2=;qi$Af^VBn{l|V~@|ATK9)L3fnszb#rGd?HX$b
zcH6jBtB2paeES`5AA0n;a?aXNQKxs8M`E>qyrUYv^s@O1^zH4o{32a!$+aH?4qWoq
zduTWM>gBF`zZ?R>hkJiG*1K;#V3eV(*(1hwPM`4fU(zytPMp^ylpJ$Ydd!(x2{r%^
zbOAOIl7T>G!x{5#IyQi56rCaMRE)4BA`AUjH~~G19{>IC=_n3;haPPOTD*9DeKlxH
z-Nn55d-OO^rS77m-o7`DdB(msy<R$s12_RJLYIKqANe<I=zAaRIP}rwPdxF&q>sRC
zbP4)u1AzWRU<bM>H}zq*IrX7R1-<5M=*>1mFQ()_G-vQy@r$r4alafZ_DNya&gaR6
zf`p?Vz=P=B>v1L!m}jD`kiiRgvC;G{9+%Mp^La(DTGB;VesMRWq0bBkkiGAVOC~D!
zFPqXj41^v#04#Tc({J3f_R87X8f8OkqO~=aH=?d?=!nI2tM0yM&9&1e)wh(iH<#rO
zud5&0v8ZPCeXy_KmDT${1@eF1b;;B5Q0~$@%5Oe$JNn{Ii3NSVdi!+4P<35HJl2@g
z*wN9LbM1;%+ovw5t&f%s5)-zaZ+{?SZxXAT1mQo<HyZF~;a7>66Ce>RNrWU?DhnUI
zAx@ta7ktaIW;_9NCIfu!m#Y7;7j3@(`HuTKo<H-=^A5-Jov<FP6%$@dyNab}Jm1;*
zyhB1=L{nJZNh;y0q{97ZbLu%E0R%r5D@&ihU%Z^KUy~&{!TyDyK!9@!PI{uuPZ4~A
ztZK65ABve6z2wA||3tm02lf8*%I87*(GSoEX}`9!&<7tJ1?|tn<ijNM%722|hyMhY
ze(gS)k9z*GQFLRw@gJZo|D^kCw2kP5^LRe{H*Uk}xTnYUiAXUXg^Zv~A{ej(V&+aZ
zH50^qBQ9tI5rUCq3IVlX6)zgQ7ciLXiJFRCQnNm-Th2@W`VtGI;o4FUJ9J27PHVMR
z8**suDz!X2KS!;a6KXT?AY?S$-s1_;jA^*TF*~n==iOdIp=bPv!6swnPz#flQ=F|<
zsX2K#e|T|YZjplr^oQt@vxm{4&$qx`$H8hmLZs1IEB5R>FgOy@x^>#<rX@36PHVBp
zCXp=FHQDS%i?ZBLK3=fc>j@0j>6WU8IGv@p9InlG8$3E~Z0(A*-Lpql>2xaE>8+2n
zH_w{0aWG1u8UMKPXV4+iJwjhoVm>!awNsO*1=K3)O6n%!ZzJd@o)hqY%+zuC7}O@r
z5{{@{6Dvk87EgrY33Ht0h#{ARsP33?7fb|0L~EOLOOlI^5qtrB89Y&@i-qETN{f%8
z?j^2}AXS7~q$^MZjA0njIOaSxczWL3=(c&~&b+!C-`CZp{x;HNFPk>4%*A*3SZVn@
zblcmdb-MR&tjk;dsapLncf;Yb&Z3fuB}JWOha24gQma4p)E}-GSCqFPuV`Gw;d+!)
zS4xTpeP#1N7o(k4W;c!W`#N}6nW@YdBsVFodk1s@)z*{fMRWkYcyjC3lb{lGg36PR
zU1WgFs+YWV&|4fSyC-jq66ze4C7wgz=0l#+Qpb$$h3H@2gKtUdfpSdVJ!KI%p*?3z
zPW!~xI~w%g$mQSY8}0x{K)AnXohT$tYPq9P|FvBHwZ8F=78tCDiZMC&mgbat4!)JT
zAI&=CDXDbKUf4auQCjK=dT_?QIb#$M-x{x-<jJ-Ud|J5gV%quVWLX@g#Z=!QYA&^u
zXg3B7L`ocu(CM=&5tH~bYWGHh{!b1BUWBk6WEvJYkWieD3af^X&^K&M#Ep-bqA?#y
zBW?xA^cyw$aAjH$9*KgO_=PS|Vbi4f(`NabTU-6X18rrI$}!6;@`Blm!;LMuC%W3~
z#l@|i^1$FLA-s|Xr(JlOm-%FK>1&uuKcKakd(*p1gSF_@q9MhRreZi_ph)aweN8Rc
zIeJuQG;o>IxnxXaj)vAX#w>JTR(^v|d!(UO&AKglQq3j9Ee;u)YEOVo1!i**S{ae8
zGIo3nmvtB{?!sj>fX4&zil7C)=TF1~{#bnE1sJaqsu9maM+6LPt+0o=fLcMkdicD=
zzXDBGBoZJaL-3?7AhWPWt;Z{<CdUZ#5KGJP%@N=uTJ@nQQMC^k1yrk;E*kR+i2Vef
zALm4k#8sHikk<Sb*FQM&uG<douBfb7yLJUo`E#{9)`mm*gU5^+oR4-6T75~~6Ad*(
zraX5|SI0E)#D@&?Ap<83o?YD;aY`X)kr;zrlD|vt*OaM8kF835-BwoKKD?sbG-J+8
zdSX?_^;^N4uPNoZ+3O!OOM@YIw%O>)A6bUpwwBFrzN?bS9=*`PSneHh_2I(4=kmwH
zsgu2)38`DgKk{NIT-i0Q0!(3`<hho(FMI8C47y<xqrP<P*z$^T)Gz!}%Ycu@lLzes
zy67+LJ+gtk`&Nq~=a!X#n+gANo>IC2e22S2-b7G}cyxrm>U`g`WoIeo75t5y0#=X+
z4#q(u0VCU9K@qu;n4}O3aRD1ffSn}TyCSd<*<=>LkBMRhCPL`uCBrMD)v=%Qf!)aB
zVWKt$n;OGagSCr$z`ysR?{2GYFq&D`Z;X~reKgt9l6>@ed@7Nvg4y!gNqhgg{5GIs
z3_Xi|4a3nkWHEW5-LUSv-#xyuvU8X(r+sk&9@yXSRkHznXGWE-j!#pU%rS%wYJSc3
z6@T43aW7s6_33qxAT_5IWfKHigjjA%+(c`gjALL-Q&j|o(#H{aO|yvBly)g2DB9xQ
zCOVcO`{@Eu3=vg`jTF-YwbY~nI`!epu0FhFOL0eK#OpRFK|)V6tz$!enNep{XaOd&
zDux<HCZv#IYyTZvI-*u1Ro6<hAL#HkE+18Aa4RYdj2yzEl`58z>W5|nhM~>yJ>Fv|
z*P5!8SA*Qj`h+oF-qtj|y__A{pe|7YmIX`xupoDd#*k%nL%`fT$Pg&VVJwoVdK1q=
z27vr9t+B-e;gA!W0ECcMJX=j0vKtr~h!+4pLw8kUI`eq}C)|T+<e>tF>^Y)+pr{*O
zJQ?61L;8a-I73{*Pf$e&vK-M~F^iycT7gnE!Ny2-Zhd`jHf@cD?fLokaP*5}F$Eqh
z36Ydg3Hs3;x)+_i)9mxuimL4$veXdt;R~SkrH4V;F}Uc;Wr<gIHIf2%0>{0#1IPW0
zydx3~hoWeTBQM|X$j<{`U6^nmb2B=%x2>6`<%|xlfA4kRz85&|-27>(X4#*{KE5!p
z?OWjbcH6e^MEnxTS==<Pw69@-XARIIL{bd%3<Nn#z;=+F^hnN9tX-{Bs8GeXdbdi(
zo9V7I$I!9>4ZV`22CoP|Si+|%r&h`yM#s$z=P`gujIVF{9qQ~bPxs2s;U%19f5Mz-
z)_HdYnY*U%33$NDz`*;azCnN1JJmAYgu(%u_DPaH^!f*<XMuKl3i6)2`(Myuqj2{Z
zf3MCC8R%Z)X*HYM_tKScec#{Dn|DftIf2k0_{)jBY}Axi-4`_a@mDo*nVCp{3l=^u
zd%i<k(R^P*tv-rQ?mdWJTgU<Fm2!=i8~W~wInQ1-V#HO?&Y5<o=}O{`8r9l@;gD<N
ze8AtZ7dVclPG^+&P6$e9v;)0Lu(__^EVoLpl0o^DIk@`U_$q_zuX2ULM3<0w=H4)K
z(dwgnP`@@`S4MyBoc@ZP@D*yP73gqn0XWZ^Y$NIuDQkfQpLIXD{sO@vOX19ch0v3~
zkPTMjdp(cuwFT3YY3(y%mc%m%5z`4^ghtw6cF}3BZeWQJZa0EF3^Hz?@CXyQH==cJ
z<cVm{L*^pBBvb$|UP8F8WJlg3`FRiLS!~|Ca;*mdRUkDfr~)9Mt&N1OmcqjYx%cIm
zt?ul&#zU|#S*cp4sVwkYECq)Pa_-HsTD`fY8XvA`gU?uTMW22|)M~|-%srTEwfgeQ
zai&*WS?ISUIWF7kb}@3faRu0FlrxOnh_-Dv$tA$)w&ihLj>Y9-<#O}NGCH3wut&Th
zi$u;iguFbP%MK-S<JG9wsGw<u5!7Cd1Lj~l(*any`KrDVD~xguI$gFr0b|H=Hpw8|
z#(8P{2*Ld1oPxHmKSY%8MLXemHo?0<0ZW9jNoc=yfz^Ml&$htkyJ6b8`r2{hRxJV%
z@R8NeHVk#v0*O@-JCn5f{Z{7rGu7k_zE&2NuUfYKz{=&>0l&aUkUm8X@H;{@h#RQE
znA$OVVu4?13VUL_(HA3U`og>m_sVcN;-(UGp&lr>*Gl8M_4M_eI3b}@StrgV(#dmS
zSbO3`Uk}+K9RMO11UL?<WU>$cnDcTFH87SgCd#+dzUhfJ1@Rt&+mPVw;h7w-qXE)6
zvv4||omk8Xv2mt%%QMfQAD@9}&%|{&xMkf$Fb5L2Hxfj9AOv$JLW&f5W{c8vXbj03
zbI7C=tKpCZC!RM}15}Kn{GttP9J5TOsJNAkml`hP94{dl#QwsRkEJdfH>&Cz2*0Ts
zHSV&@9$p8(sUC>~<3?701J^waE*nTHr5;{azEZ2!t}I{oFfPJrSC(D&@MUEywcNPN
z=o16!Ca#}%)ZuSkO|?+ts2P}hpeSM6SJ>ed1QUrkFcX|Tjevk~j**KJT=j?>@WSSC
zT5HyXm(GE)xY&1v`7@MOT@j?}BDPD32#scdgA7I11qbrv2CGVuqxWtYWu>1g_`Z?n
zYsVAZRP;9j%PPRBK5=_3ALAR($dxMj1er{3lXuGBS6CFCa=FYdn;^^5s|DbbF7<<Y
zhaUgmJ%JRJ<6<_sjJ`Qykmns(U@elf;ZYmB3h+R|ca8XhwYNWUZRQ@pMQ~ro*YbQL
z$V*qmSGIp89A!evGs3ld(znv<2W9S$pD2w>K-!j}4CKp$084w|1zSKMPRxLLb1-CP
z0|^P2;E7SNIl=OrDUt~B0XP-7fqNmkmHp)&5VLUStgmY>-}O}teT+VieYI<A_1Cj@
zx<J#_moEEp*`-&5CiwQ-Z=;8q<V6_VGecfKLytcJ8k9#{*6!Q4w&kc2J$qt2edhJe
zVf5!gq0k_Z6Q%^;b!q?58JmKkg4YnT!*B=nD0PI)4jIqYX;<zS#KEuR2Qo@czF#Z(
z>-nBo3Cjq;4%G}^0bPvlf+D(p$Du&<5-GZhJQswu7fnt*?+8K|w8OLiO)Zd2A+!-~
zOd(ygecNL|1*(Da(6;ud?p&Fm9VP9-6a6~y1H6l(B^OKG5wvgEU=ODLiz?tMm3$5a
zGvz8>Nz1U-@<5=xby!OY8hft9D11qL;eNSa8W+JJXz!GzalrcLC7vJ}5kX%jK@cTG
z%%C6IjqMM?-k>dLLwG_y#aZCL2)wNr#WVRm7Ow9&fjR<N1nf5xVtP|JKP4;`kfP_B
zQ?;<SFNxBN0$wC2Gf1S}os*+T=L*m4BowECBicet2;c=OsILKLKm?JTaF+Z}Ab=L_
z>bVnD97eky2lLhz-r2JYTo;_z96;Tlf$M|wn2O-sAnL|t3fBrn4uh9Snd<}1^KsqJ
zz;yvZ_HR9_l>Afh+h?T81+PQ{Q4lWT>(a$y>LxD0d&bQX7p!LSsMm|ucL`b$`=|XS
z@PhLN7ci&S0HZDuH_>y~Ke`_O2S2Xs9KU}3_|A17*A72(&&Z1034<p@$2&&DM!STu
z`M5=Fjkz&6I6Abd`Q=q-M$NBZHm7Y21Ed}fFk^?$Synf9<e630oDid-CpR#kHcU2#
za%jiM6)Q%LTE2W#`iy>tw~QUyI59QF>@{g{P2iBwR@(%Enomm<TC>}-b2j?>p~b$e
z!sueq1fUe42bV+&v;0dA0sHKoff75E)9{HQvt|uRHEZl8q|IjF^>A-mPD}74aL*Fl
ziRt(RvB5VcfDU*#B7WuR<n_>f{q?CcV?fh!Of<Klr;i^;OBOP1s0}<yekm!U?PvaZ
z{5W%8p8~bv^X0%J_Tlko0ec^t!kl0(p0(PjnPjGdq^SiWO5}nC0MC#_0~o=sF^J=M
zF(M)^Ko-DIkQTr>(|#TZ=7r$o#!tSWp2blXPuda@ZB<aI!Nq76u*y*UtWU)NmZ{tg
zDm2Abi+vYeyb^t>^YKbns?YJMo*kSw%50^}xO<}koBF;&HLLR#f#t8aNgb(9wxYZg
zT`sj}gVyq}j1IzEXr~6f++YFb0=3HpnlFpU9D$-;lH=>q`>HIdY;umqs8q|FA8X<j
zGI{W1LK7MXz1B#}<BhP@srSlq(UJI{4Qitt7+Z}IW3CQ_>g}8fj+kZ8je}!+_S{Jt
zxlf<^{i`8^yhS60m>?+(gPHf&OL(36gEGOsUzFn{&$E57Q$9?$5}!5r>j_kzPJnrg
zo%bU&tguPw(HXe&ARRn0hC)P=pAsxJSPEgH>D&(!dBKvPBzc-ru&-m9uDktIvb`Hn
zq|#YT-O-d#kLs7l3%|Zvx>p1eW@^v$dfY+gy)%NYDpQ-pRdXm6_h$ib!Hws(5tuGZ
zk6NQ4;l<2K+KMJY^!)@NFaiI{=OxaF1@arOEkZhvDHt41<AR+_XAI#Tmvvk=2ez!=
zxPBO|-z{(Z;vZkM$#+v{70N6AwP*DG>t~ch-7fiNuo5J}%FXg!NTGNPtw*J3{bLG+
zZnyjy$Uqxpo{{fX-C)Sd%gZvXjo`msdX>C&+_+Y`O1}$erE{m}RafWj(ktbgckI|K
zSK>sC?ACqzZk3UOPrvcT)1)BLf)ng!gni6`QmGnh7&VfbPR*y*;K6x;PdMtoJQHk4
z5!EgdADA`}>rOjB2YVom3zEZ#UIchuI3e*w4;vV}Xd*qVWljtJk23W$=6EbV3Q4cG
zl$;hM=PW+P=83h*fAG3+Laz^uT{JP31m~pp@T{2CE5K5V{06#9NTaFK6e%YmN8%Ch
zEX95$A-H;jgnba`@e!Cj0v{k4L6MEg3Lv<@5hf6#WFfkAGWbH638aN4N@O(BF;V)J
z-ZU0@^Q=LZNkBGaJ!7=cGN0ZrV}qNv%zmhQR?MORG{X$Psi6JC#aDNB&d|e=K!J{%
zob<ogd?y^^U0*bRF}-@!O4R7F@#uiY=5ZNIPjr7&8i3}|+$p=8Y9utED;}G_;nR*V
z1fWZr`cdvNvA=T$ZG85AGKYuKYptBp;~6|mxGFQndmtUe%%6mVbUdNw^&~|Gv^4Q=
z6BKn1^x&|E2l6gdzy52b-azj!ZW;bam^t?G=OEXIs<IKq%$eDM-nWimcrBQ1^s!6n
zE*qv@XMw|@MC(Jhyz)GV1IGs^(Lr!6I+EhiVt5lBO7)^~Xe}&)3Xl)%TC2@~W{a{B
znP@knp)8aG^EiSZdf<x_31Y&`(ztJOOh9l8#76-g<$bJRDMG*<jG~G#XNsDLy0^HA
zA9sTQX5r{)B5E>6FYLwKlUJ!rXhumZPj4(&)S~YpNC3?pI@|IgTOR^!;J};%aL=Ij
zHG2WrQ538UjcGEOn-^`o6<$-ES6t8(*MQz+o$1F1eebfGo0BaiKMUPSijUA6*e;W2
z$rCF<D6Sel5jBr*TH!<xZb+?z8@2Z3lV=Sv`;D$FkK#HnSUF=}qt$CPd4N@VOFVU`
z%hXIie@3_%EA&lEf7=jiiCij5)nZP69G(egQ;Vt9)L!Z->J{n}>J(4_D{j+D&<w_b
zHQ;Kp3!QP!ftkY~)F&iRZ;tC>$fSpyu%{jq_SHZ%<}*f(6);A8OB<sxb2LF4b3v>E
z7^9&`G!ZW;1m0X6iADV-{X%_z#O!0lxfsXd>5$j#4S9otGzCwy#gUkx+FEQjnv9%-
z_>1>R0#PE#@^Yg0V|>+;Xv7JGlhGU{P)r#%y9VGp2T6uGA@2MN`{<Y*CC?uhHhGD+
zWFNi^c?IG~J7eWV@<QZJ(Q|jfS23kCL!wEMaNP@UdR~QeW+spG`pA|K*$prVo0AE`
z7$=BuH5el86#NCg&y?g%v!A_U#E2`7%(*GKY4Vgi*G-(Te*J`rlQvG7yeWCpoFgRf
z+1WS2nVgQJoeV3Hu(X6>rI4lxD2nh00UqpUOeS7$GU<76S0&p7wwf?~!|P9*{bsX&
zE76%G<;b2pV4zS5g40J_PHUD%?Y3xKE|1IUaUF0vbvEK?#G!e#P;IuF4N8;8<|<TK
z+*X6i>T!BDN>wVpsL17T6dGqbgCUp4q}Cg~+)V!_v(n{q%B3=yKIC!oYQ0WxHtTt<
z+TidUb-6TlXDH-!sJEDvPA4fQUGH>iN<$%sQ{6^1h9RLyAwx5e#Dpg#Pd$6!0AlVR
zjhkvVX_nFRK^3SRIUOBC?@pf%@<9HY`RE1o!aP!9&TL$w?>J5C3@VjDqf((VNXuD3
zT0zC;1ua%RZyB5A76Vqlm7JV_5uO5y?L(Aq$ur=G7>)BR7K3){Fu#8o`876Z4dLpr
z!Qz!bMy^p<)E0w>1a)e&&Z4$*rYd`Ow!JE{J?zd3@g|K&nH9qITYQXz!4<U@6|e*?
zN{jaD%%xUmvafDjJ=l<4nQfrS7b7hKg{L5Y<eNi5ml`mi44eu?|MbFKAjh)-+4-xd
z#!}O$d3YwcjJk@tS@3d55Mc#}-v%MT5<_@h#yLEjmLbQ_4JpA<sEBbbj4DBvoL2OS
zWd;S%seux*o^$j<K=4G*C&=ha|3FmGydt-Y{X%L8%KXksovzB^mwa8z8){CCoH2aL
zl;-?OS6v;b%}zLtcB9kc%`VHU^cMuAyu(yv&dD1btp%n)c5zKjL2fV{Zk|1>IfwbF
zZXbFP-HQweNj$b--vje@&6~Fi!0QHgjvu`J?Wa~OUAp2au(f?|OLghgIvMb^CVrMC
zT3Zv`&xuy}Q`BR7-|kkG%v{nu2|X5!jt8y(3g;Q*dbQSQ&kH2NzHF^ZqBI%odEwfs
z?AAbCq^Kd-YM8lWX6i|(36I;c;hLf#e39IAo)nBZaRS{ZEA1?8E<=x9qiriJL62>L
z{xizbwzg8{dweA1xW50}K}?aWF(2x{^mq_+qr<5Q)KThhcm`*I4ER9}m_|{2Gz1c4
zGRE^-z#KD|km)xP5KllnvC$B5>dyH>MqkLs`FOm_Ma>CdP&3{jo)AMECiKk-T+Qgy
zMUCRc`i;1BcwsaPb3G>e6A`i(<AU)_qRwXwk^jO}NY-8<#`W{KLI(bMjQDetA1Bx#
z;kvk|k%dCUNl%c6Hb^)ZaAFRhbPe(-5kW*Jq?N=AXd%%|c7+B!CP8o$J1{}KD-cno
zjYNiTin~C<D9PkW1bIX{&jn~*ra8Q^5}fJ{su=<MA|bR+Y{mF|Sl8Ti=l1QOYWlO`
zQ6sZ~C#PdXF8Yid!RzDm`b_nc%O-EOZnZXD+I7ji(XDWgLg%oAEZMSk?IX`pfNAe|
zYa#mJ`0+hA-pIZy_N_(Mg!Mgsu>m^ea$q*sW{;LxORazRK5@u;*nDbG_@JdYbxm&W
z%cgtV#BR7U>Utz$MlZTc-!V6S7LTAi!PrE}F=K`ML8+91x-$1Ym8pD-$*Qljcn8(p
zTvU!ew;FA_I)Is0v%abJree&O{PnN9Z@dwGSr31jwQil)TO9G0gg376`-+QwUs-A|
zyUb$^<OZy<@P_67^5Hj5T)o+LxpmlvEj3(@#;w#z?0)COsSBqsp~oypT|RtxaU$M!
z$?;0hps=$FeCw<XE+|Cbyo>)TD}e@`1>mWtQtujE1{DXvgw9T&89%<S6lltDz0^CO
zB!&-9zynoP1qFqL(}8-7S*ZlDs;ayktj@!KCj2*bYF^%BU@Iw^>NKVQ%FEH^6&2%E
zv!*lBu@=i2b66(xI^+2s<8+{LfqN`C?s3IrK8;DvO#>R>OkIlaT8i%q??vALP3qDy
z<yNhn3;IJjWmc^WNCN7azH+Nd30OtIMG_5+1lFT(Uw^%_a?4c}cy^WRoP03+C;T<3
zBS*;iRP>Ke1?IYZcwCO8E}^zi`=|%0!_*(r-l)?1M7T@)IKmMS#D{_D0_X@wO9<u&
z(PtB+WGo*Sk_T9C<1;Qn3B@%aBtVsr-fI>!65uyq$spF?V<kd)PJlZ}5Yuq+0ZkXq
z!|>B+!0C$w906K~nN=NB=uI{Ym=g6n{Ur7DJ+0L}Jgfs!Ns9sMfl{wE(PO58ST;#f
z)Aq(8GY6GBD)o$N5D%W0vaJekULLC(#!5r^phJbD)LF2uwR)dHxJZYR`Q=4ygUChj
zdO$AnfvQ;{6s_mssiABRo=KpB5Bs?#=h4;61I1a6K-9A`#|7pq7~{SEh!Edi5#!Mu
ziJZSgDyQMpzX4Vv_k<S=t!T0slrk+a%4PDsyR<SEF4@d<OI32vU7D_<y7ZS-fR@pM
zgFvl7U67UWfcKg3?abh#^Oj<=$I`zRYp4h{1h2#ss0Gxe)Ya52;yR2MR6_l-zPPXo
z3+rxr+2zuR+=P}53d?RH4idhYhK{DqC`E-XR#<@X<g1GkTuEM7!38VVP#R4#agKo(
zG9>Bx0{I&ZMSp?GDXB8@9<$!*C<9MiB8fy#eNo@&&kB~;>l->+3ySI*Lhd4Ghg(0S
zYeZ2LGh1C7^aZ-=yx`ER!YpMDxKg9aDwNAN?Xs0>3wP~;m*j^B*T$rqclonMMypU>
zL483%J^gS|WOCP{n#8=B722}Fxdt=)Gd!P5S~V!(lbvvlnf7T#omFL0+dSP_!BA6q
zokeZdx~=-f*@0}}TeQ`<L^}I_M)_Te<y_<?>(z9Ys}yB}h#Nfw{_^4KvXaum)Eet<
zMQI&)k=(fueZIJ+cJq>CWg<M=&GUt7_{e!5j;7R@C;nDK3FDj~E9uRofyjPvh>es8
zW0|Znz(in52pU_Q_@}C7h#QH_<`Z7L%tX~*VygPGr3BUPdUq!PlvZ0YI%_r)l>+(C
z56kV+Q8@54AL$rZ75eNsX=!_@bnSC7a0kwT2hrYFOIqgb+Bxr`tkD%(?a<khTDe_z
z>OLuyci{rJXL)lb-f-WySMLF=gEtWUdIPWDFbT}Z1w?zcbMIlobVM8373zQZs0^fC
zGipKq+a)|fI-w`l1HbxWjQA=;Q$NuQa~|I^>88#irZ@AVJK+xpsuop&hEc!zq7SEE
z4tx%O9=EJ!+JY!bqFV9AH#`HhQ_)`Lp03~e;{6!MY_ea@l^~i!#CM@Eh3Z7Kr(cT$
z4;~sG3CCvq3W@{7m+=9S5chH1#M29;E)LT)Fq}F8dW$$YdO^<7i}dO)(Sd^?a0Ia?
zO<Ne$hTAkvAg0#$KtYs~5~}`(F#YdkG6-cmak#H#<f>&O>8FI-+#M(>3EZt8fMuK~
zXgU&I1OhokiI6U|lTc3Hs)5>48L=AtPdX^fx}i%~mA#3+1lrfVBWHJ%YL{y_4Y}r#
zC$~3VBa^I<$oqaxM+F>R7-`GJ<L0f`fmUYE9+JOMt8L0Hesag|mx^+lIGK#j{WUF?
zfpT~?@zW~21KGq7Z1Y*7Y~mGXw)EDoUO=0y5j}C5O?bs5WpSt0QXa4Hu4IlRa2f)h
z;sCgEihg7M<eJsfs^(Aa>KP47n%7)2Ou}<h3LR|8zR9;gviWaY#$FMG3Ls;bvr-nW
zWUX0_@^SS=Xg_*CqX~cV5rs{fEd@|M>&zCxkDuV54~zr%z*7rWS1mX&wR`oJS9FUG
zPK!bi^F->${qDhAf&7-iwS1{WsbCeUn=O`*4ah=O%iA#ZKQYrp*U6xwSgBOWMs|`*
zf>Pi(x*Cn^*V_{I^?YPck1}bAO^`tYh&-Qo1Ytuw@rs!i+7o{lG7thrN#l{pAJ37?
z|0uV~=ceuo#9lv3)g}XQ!dx+J&PS8_UV^o~sa^?n1pPGWqd7S7k8+`GvKCOU$Aq#%
z+MJIkpRN_k_NMj7kRXT5PW$NKsLWnFhzpJzOq7pk+7eylL^UHB-ZVEK9ojN=)w;(g
z!gUpWPlvXS1PuD&FKeD#TFy0=R%^1=*1G0db0pNHrkZi7tJh38ygoS!HpI{T*s{Ph
z_)qBjNq4-loQ;IMf%-`me$9FE(ENThJprLQB4B8W5SK72#31Q5f|trPV6hAGMxui$
zV#jg<gxAF*gp(nfW}g0kB1a=?Q!%k~GR0p;IO-IY-yU?ha($Mt$>j967v#75T}E@r
z;>&e8g6*ARrdNpMr_1CQwELYVQ<#+bWfdV8*XeGrC4Ldaf3@x1XQ&~iv0=Q!>)?Z(
z@IOY9M5yDiTkIyambcm*POFvIs!ce-A*2c+P}?i!I&5O@1qE$ZyQ#Om8}y>u%&(i)
zwvHSYbLLsH+~vU=TmEB29P@&_iY0Wo$4I<DV749qq}0z8o(=$YDhYaFEe@VeGE`p@
z;=Y&a?e~q+E3AWByb@BF{1?1F;aM%pdx#$p{QVg{O+oKG^vSL7i1W=m&(Q431^ZLf
zJ9yrKm#02lurf0XrKnrcC-dMPG=(R)^PbI}c{Z|Skda1)TSypT#Q2UZ8N%~&R7krj
zwG|JPPf=Gd97+P<?NwTx5j>{Wi|=p(wHkFosZ1fUOh}*hx5QD*SgMOqk_5My5p{+o
zA>v)RAGAcY5y5L06xE@L6BH3`TOxqE5-F$81<hPABoLCUQZ9Fu_yb_jv7Hrj+gc)J
zu3|-2#kiFnT@TLs)2)w;D7BB$IKd`#_J$v>7<>IIbH`pcdu(|{PPwh?$`MP0H63He
zHJ2*rhZePsE&@uEi`igvn4626=vs--nQd3eCw#Nx_ksA7_VvRrcZ`@jF1+Z`uAZ-^
z)Wr69{b0{+0PL9i+U|+L>S;4BU%Dgy>eTj}$}G1zzhZ8aR(HvMhBoIY?D_2UVk0ot
zpSKo_6=e2A_b^nF*}n3bFex1p@kk5;@-1HYOoHMnOWMe66zBd#KXkD$%(>`AaO(Gb
z=JSVT3@rA?b-=(+3duc#qU~#;cIpggIARAQE2cJ?%R+;OCr8eFVjj&*dT`;>lMIT=
zoF(Iz?%6-5`_clb&y?*?l(yu|-!tbtKL#fssF$k(4yaN<f1yU>9~_rE4NKcOZPz%b
zRO86DvE@zI74Dq1Vn}iKQ!~JVCl+5~w=8TQ^5C+$_sm~moKilatTAN28h&!V!2_L^
z@roFtQR;lpyMD5<?;$EooCinsT0DahLkBJHB_2EtGRd?at9YUXtyr{f#no4@02}8#
zd(}H+ZA(#^RgNYhXgOCQbLvFjqc_m^og=OScV9ps46rAp1hjn00>rz+^wR*QU#%ar
zzWw)^)qij1(ev&IQ2Npt8shr%9!8k|iHZk45$j6}rj7_I7yiyQL=+;?lCcqrVlp3i
zIFp$XK>3O7f#460&<$C53dtfq$`T>6jFNtXQwYx{xTlTc(H}~O2;f>Y0#Bot!#>NA
zx*?m79NE0|;X9w!mx09~3uR58Yh>9Yn=7jx)W}U5qfh_fq$5BID$yyl9i1B9REPHI
zJujL2?m3K30q*dUnO6#`l^_Wo8~vfE80j$p#e|uML9!|9jQa@s`N;KOjjp*7Bsb6A
z`67@Wv7kP4iCW<V%#@9rj{xDi_)1eBsF{XxZTsH`99ROl#FN32V3LUD9jH5Rpj|a5
z^qgFRr$=2NPv$dVRJ25p1;g|F2>UL?x6+jm$tN)vGxHhwFeA!tokLikxo@7?#|~kG
zE+*&-{?lPdB@GUT0VWOLASs-p@F8iPEqesm!5CnFL^jt96a(bHPzjP|r_+p*u7U!1
zN!Z~CJ5m!;cO_%PhQ*TN5l-k{1YT}iURk-k4VBLl)`cr@-}@P_3k3vQfD(ti@a-@U
zE#g>3Jp=_xFeC7Yf-H}TA(Amb7z0s>68C|SIDb?Cf#CEL=pa0ouun$(sd|4T;)l=q
zfz;fWL&Eem<IsB#Jc5orWTyX268bJ32SN{Q{`SE+U}?m^Nw?{J^w!-!qWROGCAph%
z92DR41K2tJh(7}V-V}{CMaPU874i8a*WU9GdiRk`c=kizfX%+h=+Sqhw?5be<i{g^
zAqI*+*o1yO9wBxWinA2+L;Bm=asOW?V2aabeGK!4f~|A`el>!nWF`=M5?XLhO@vou
zU6Igfkycz+Lab5z;zoswNkjzrBoUGvj}s$K4u&MYwCgoY<eAb7kFZ^F&QMrX73WRn
zYE}>%(nLudifI0jKD=bvUBNPRjf)O=l{r52=007PrgGJ=BHl23_GYizoTUnu)jJK*
z+pHC*ZvFc$d+>KEMSoZtP%3j9$Byf8YB`Hm!#EnNvTDZ%Xy!_p)B{JvJMQ(ANLx#l
z&WD`2@g<`tJ62aYv+wL^+w{ByN(!<Ys)q*#ckHVg9#l`huW!$y?w#*3m!qeQ;Dv_L
zzV3Eujumnoy=592FK5A&_kDdo_zzrTQ(M}y+NagV(XH7v*YCgYUI258TJ*&+1?%#b
zICzGEJnwhdOqPNx2Dz8Ilu9T+3ORLb=-v@tPpxu}PU-z{d}8KWTeGWrwFVrW+deb(
zj839mf64VThfEu~05xf<Cr_%~h5DYmB&Q6h&iVTz>z|E^3pnu<hz?xLeCgGXEOdeY
zm=h0>%_kTNda?+Jyzm8ye-9Jm$s%Cy)quw|EUkM>eecFQ4nKX(jrXWtXRD%RHF8@#
zGzI?osQR8v`WsAjgrvtp#R;&`oiEWi;F#2{scT2GR-Gi@<;s`n&5}H@74UG{Sk|Ir
z3tYWFQ&4-`<Ntc~`OhEhscl-dtY}Ds|LO}9TAq08)hek{4{K@|jY?Yi$~$krQYBTZ
zSx;6SqgKl*U#4F_O{T5Py25thc5zY_qQ+wyAU!z1qoXj=1&_mOkXh_Ao*m<v2z^5E
zE!oqJz7_(QVSjt;$t@tc<>XdWMB+FRXuEra0DT?O3T3|T?m3erAr`acTTcET=Ds_y
zi6i@eXNy+77h9HP$+9F@xyX`igJs#6Vr;;eX1eL7n@)g$=p;ZwPk=zU5K;&!<eT0w
zxl2L{9LYfr5|TK%H13jIzPU>dY-#w-%u2RwxZHj3`~Bkw*6!@=?Ci|!%$qlF-upaI
z6WM{D(kdBY5l<ayVOj(m5H`UEBuF%PsGi!foPbr$#{sKRT>RFpuAIJ3MICZ4hPU2>
zqe)9idMC+ZL5CD*tn_WHwpgmy`6>+o#JW#NvKahEOVT97-3JWxpei4{=Bq-%w2D){
zs?}SXI?gw3+0w)oG;N`uTZnVP2iWebEH19}wHu9J<G8Oo&r1*ZDl2_(y20>Fb|rnN
z>*+0tz6)tIHDfJ8dkV1Q|B{>R3U|Ygc3%Yn_zD~VUjYHIhMskNX(Y7t`0=Go>(b-k
zb=n=d2XX%tD5D?hia(CKgQ*jbaS%0vnnX2IbE$>Ya<mHEK;1#@r1nwwQAel;sfVfK
z)RWW;)XUUs)M@Hn0qd9{7NJaR7t}7oKY^|>#Nd_@&<}LQI7%0zZFWEY39u77f}@L$
zsA3L)?f?>N3TWIS9@tGzlqZG(<sAVAm_R^h2Y$|rRyZajV-Elo@cMY8MvosdX#yG(
z$OpV8;1)R@oXH@eoo)@sdx1%pPorMLxZD!j$LJh7z*hj`j!p(lelca%pJkHurx|-v
zvKqE%iZyV7#%xMwPwSJJbNb{I{aYaYeKy@>)`D$nzZ%@7#dm*ivhgqLk|S=g5gxxA
z9tX|Z?8sO^pI5!|vO-Ni0$068XTxvRx%88O4QZ^#2)tAQmZ>Y@2rx(-Y2m;~xRpht
zWLF5jd+7AhM_3?!%(@?BefAl9_LPWOrjG8u2>*z_XJ&Ne7VvfU2;lr-0|SiWOPm<i
z0)M3SDEh~i7p%+tJ<U9}b`VFeHKeidK8Zw+PEU%(rgW`dueT?O<zNV#rk6;-R4z@A
z(tt+5f(#XyEfpu(4d|aeNhF5{fZeE2!dKX|$XPHM9#%6JRwCu#y`s0k*w@80XgzaA
z-7#FmRS%g7r0{GA?yvwqe3Vt8)F(w8SY8DxANu6glVZjPXrNY{1PU2^`w%Gm?o%<m
zHt=m)-u8J8d;^{aUe$K^<tMpdO9zb_!hqTfEC(zsgfD_$K7(IJ?tou`lt2BcADAg+
z(Pz$#-q*kg@)Cmok1_8k()~LJ1Nznpig?ejr@sbG&##aCef{(7`KLl2Xz_$9^O(l<
zr@-{~stvEbwjtvg@F>PGhk8#Rf!?e~<L!1zN<4dGc??T2m~laT3y0WVbb%I`KubA=
z3l1a2`Kf@2H!=^w-@^1|`m><vd;^#|zCT<UePjOkU<>VsM;Fl=FeOt7ufWi<8O-lb
zKe74XTrluGLwzMT>o%AQPmdmT9!xrWXXTg$(bI6{fH7blUDnYXOr`Zp$IVy{gYaXe
zzNm7z=`5(7ckhNLW3)j`vHu{tznGHi1TQ~iha?B+{D{r=du>>`lZnSOc%h3J8NoRn
zPrO5!{3d?d!S$=poc?0Zo-a<H39sS~wgLL;fdf|o4gY)XxkIZSd!udNzP2|WTQ&2x
zr^dW<;>1sZKkT{p)2EIsT=o8v_m7=;hh5$wE*-mP&)8D-+L~FjIvy&mWTJz&Zyy|C
za&jGW=A<)Q*?SIFMTU8crqAXCKKdA%o5yzATa5dk%b{<&?gCg%Kw2TR#R|A9R{eOr
zl^o!gR{b;_MhAH1)?seTcMo-BJoMe_nbO}Zm_9fUWWTyMvRk?N#4-94gVkz?I&eZ-
zhmX<k@ew?Zk8l_X&m!S{==jh>-+lMc;x~%Y-3xxx=lMVHj_j=}v42cqZAt1zP$byS
z2!7fO#8aD{_-f0e3Mn5|N|jTUR9~tF(dD6tGLNRlBkDYZnoZ587E#Nnm54%bL=<{E
zqS1S){nRn)A{r4`^y4H)pWT41*GxTs0TZA2!!C&ue*oix{mKvD_ZkBK<gN+pvl#eW
z{G4$Pi-6x)X}_S3=IGR?10t7z^=~wJ10E3;UW=&6wWyf8ul)?Ymp<BlW~ej%uR=9b
zm4<#+a&A@)nW>t&9Q|&Kog<YCfqoG%ECTw4<S!QPc)_{ofu8X{4qnumu`{}5?F%og
zUHAO+@Upvib#HgeBr}uNXJTrg#1W_;63EIlq}QkrH=ZG}D$PcDYQSd~QSCe66QH4z
zIUJb`KjJdqej9$cXwja8zq`}(?aFjdI{qo_p7eB&J%55H-GhJQ^V2=-`x!m{!4pFk
zb&pvzB%@oN=+E)|I-#`S_KYkE2Xux)Z$-A$n49Lw=YdRbND>)MWkAKq7!fTs<;DFA
zEJEXNJHdO%?y-iwm2qCojVxv~Cf?t6_;4Eo54YWae;a74$h&qauc9IkJeeD!e+uP-
zC-W-67JTn8PS~>GFk908N^V6(E?13@zxfS1#`w@oM87Vh^B6?ExH#Mq-?cwa1kD&9
zkQKZ{P>B#pG0g#=u*nfuWfvasbNc|h=Yx+9k2tVmVe^cI%kLd_;J4@RpL%HoXS0Zv
zhThZQ&ucb*z8R#PTYmBI&W)RnjhVi2?L_MgjXq8D$NS4>mluguhU8vPO*jSFQs%|?
z-q>~M{lK{88#XQ<7kGaEp_gjQ*;JiDndEDnv-rbJXMuXu)`uV2I%?&#iD9QzuN|zv
z|GYETX;A4>`qXs1=1f(^cv<X!9NQA)V2miD!a#gdrUIfW)(a4j5sXC=$FgT*XC3jd
zK>P}zj}RwyK@ec#G8HR}m*FgS(2J!O#D^~lM86hv$OTpMcWucX-vORWV(!IBB9z%>
zbkZl^6T~L!WR;BN0ejNyV!G#o1JOjqa;6nhNls=3pPD397hsG&v(j75G657+Xw!^N
z-qnR`kLxYy;|~*hn<}nGPduQRfUzh5{?j^hl&e^`8@+ZnVls7r!qC`MboYN;Yuzs3
z#5dr_yL2e$8<Y;`m;OJmyWmGd;NP(~PC2nPL$`Di#_rbHCA8gXX9z>@6t>KXXAg{1
zU@y8r&xaSlRWLr<?~eCiJ8Wa3DCX73>-6#W;1BeCFb1~4b}$-*m9#n%(w1o>AvLW8
zVXd7F+Zif4gWeyBFf8%65&4GRPXZu39a7qSO@z|xSxS?yr73L3i7Lr|kLIEp>K?@D
zQydn{^KJq~{p*K-U>y5T56;9y8U}BhYrNRar~yNOVjm5RrYrTodL=M8IUk;8cpdu4
z;W5L8Y5m$^!%+C29&n;xyFaWwFCkUv1C8E#GAwKZg-=@bnh$h|IsNMEKnP$HABg&k
zkfH9M{eI={ZTN0OgHG2F0!~n7E|->p9Bdp8FP2Hm&G1e5u@>EI_|;5UvjDjnAAelj
zmrEaNDMi_Js3mnO0Afxc(__9M1vico?0_0;XE7)s77U|1#~u@KdoiIEh%LrvF%}V!
z7C?Ypjl7q)GIXe^2{%Nz2~adG9ocUZZ{a8P8!07vx-#^~$T@{fqctfqJUXdDCYLFs
zI!}heq}9k2oSc!7RN#SKw?+2dwo8)g8R{GJp^<+515MuyTds9Z?>W|7TSi~a2e0!f
zA2w8s&Q^oga0r`7g~D_ZON(_htrOF%R>JT+YZsfvdS1@5$&U2o<a9?e%gT8@inOyl
z&qyLiZ@cr(+sYT-F>jLjN+=}PXO@&^2X|yUgF$EZj$n3aN#@WYpWD|QxjVLR5Jj}C
z4son4*xE%&W2*`m*(f0*P)CB`+tq0kZlz6jFP4M`$X+|{?lGYRV%1G}uL*Im0lVNL
zorv2rf&V5MyErPZUib2h-+Zr@4;j+GX`VCX2GzGy3|?24wDMVE4i+A~X-aM?O)VPn
zsnx}?uB514-*2HVWg5QuUyIi7xci-J7ZyEbf^RzXTFvhK+zqe1!i9nOmF_Zk@b?*~
zw$$;mFOSTBtN-l!FW05G<C5`|ym^S!r4*$a!+BPd)iQIT4!zdwI#H2gz8vk?IX}&o
zhE{Y~@cv3qaeK_a5f|p#5RW?q&xCfplD2th0Z+q-m28wOZ)LG3bONkFOc)tKR+Xr6
z(y5mhn=!cX%CkSi_MgwLtXjOhzd4uX(#&N|rI{+g6ii-s>cXjYlM5K2$}DXvGpBKE
zuDSp6#Z@ruGKT~cC)9eiJ`ncRHW6P}71PSo(#oe*6b|t_<R~kYp)@7Qq-JGl4y#^o
z%}A58$|O^Y6y=2SlRNxFm?0256blRc5%}k;tp$$=KC$RdpEW5&d&-U>`~(b3w;g@|
z6d?F=(V2_@&3PD@R>aHDjDU9&>@kc;+7x840G$GboRnpvJGI5y=nhT|78o5|zt=?R
zMnk%2SBaK(&wzK&7dv!$vbDbxIdapv#c=ct*cMznzdj?Qe*W5E8>A_bgkhtPXtneh
zTAN}3$<b+gvsn+mYH@%QI}d)M(bHTOY@naen^O$1;NZ?H*K%q?85yCPoNJheqi;}b
zn2QkG8VcwsUgM4T>P|sjC*H2c18CxXmepq9y(08u!|?Luwl2^ZA-L~vYvr=7pKm-4
zvY&`hLXX3HKTPW<@I};@5|Rq)M6CJ=pgp+h>s>0{F8F7yu$zOQO56v<wt(GzLK1Jt
zbh?Ko8^9(I1H$nNWuw$wtJy_f0N1S^d+_3)FCH9=PD|ds53GhAL|8c^UNm@}Lth&T
zYD*%x_P%$Q2&wTytHElLO?$YjE}gn4ET+xng6*8vfSS<oD^2KgQAFbmQ5>wYW5ra1
zP!e7gFEkU}c@j0MfY?A@D+DjY%O`gps}SileGTH=*6&(##i`{Qov0%EU{@vB-wl9&
zc^J3yhJ;5+a6=O4|H;F^FrewAIz>Ng-MU%&6!poDD+yI1{ejFiRn$Pd=Nwabk5>bO
z$Nh`?;V$B*FcEO#@g1)eOJSS&_}5r{tNQKz+d8=#*xp@wrIEU^NvVx)PWU#cv!Jg-
zy3D2<hu^++1yLu`9DEPtn3PrhpjO$@l=!viPTSJi7(L`asT=-w0XN?XIc(@AZI4d|
zflj1izpZ;CaR0gy&_`ZfJWXPj7D$0)=6rGo5g{ACxpCIW*o`rzhrzDH|6wcPZt(VD
z-+U<$=ZaILi&{33J|8dF><O_OQ%Y8^zNr<l?1#qsPF$2Kp@LK`)j)P;jI`)hq{IGC
zhzRZ>Xx21RXp(e`)Jzd!NL*y%1sW`q(|{rrM)N0OOGHq<_HX+VC<df@kQ)tfpFQ{3
zW9QBScVstWU0N5-IB;ObA~Lhm*Y8-i><&8gBCf@Y<OcKCgYbtZ)ZIwY%>?Nj$kQ1X
zEi&lfAENK92Xof1hkM{JrN_Q#d$?3+a>S6csv$#EFalz<q4eRlFOHRBz75<E@wmVB
zqw1*%)SO%OImAATC|;D|_Amiq>U4JMVRrAFrr3Z2#e`8Y1%Xp<G@(|b0(iFz(M1Xy
z7LrbE1)^>}t**kD27h|~19-I0lJmRk#gaR}*u3=P(WL(*rt6jd+%6IcDfWSn&|f6{
z=`jW<-}Qa688sx+iW(3_z@JbA+mzVXCjJn94o1wWADt4-IQr?b&41pj62@RCG1b6{
zl0_&E9?`p!+aD%}M<S+F>j$91xqKJA9^nxegkmgdAHdTn2DPCmwy!Y|wc$9b`B&Ny
z^_hQ*FcEhnLQ|5yM_9dpOO1P9XP;A}E*I|6gf{q(XFq#s$<~|3?7{1|o05UzrM8!L
zJ@IyIR8nCK6@aR<WZHoP)0Vu*lnR}XTy`I)sO_GCk(BgRgH<;VR?Ukb{ehQ(Dm8u8
zBr+PmiFHFTA9ugfhe7MZrIF6A2SX2+cGDf|MUdkY=S;p+S(5KQdj`5RCjaR?dU2aX
z;z2}c+u-i=>EIJW{E3UdKCgbbO=?C7CEJH|pI--`5aLf<{3r7)eS;<QY$@^QXrv5!
znkC!1T7SUT^^ti2)JdpDyq;a%f{xXP4qpcDC*X(2H-5fVhA9i#{5&#FD8xHxE%=U5
zpK-#C>s_^BRwcm~KY1Abd6!PL>+4Mif%XZt@Y#-y6P|fnr+Zt-XxuS!qa)mX9zrWR
zKFqF;*M*><3#CpVmm&)5@d@0P(d6~TH$m-jFsk^s;pggf@FPizBu^@R5q=b-@&BZZ
z!1bb3nuij1gu1Fk&qWo69|<>J6sRDYhn@i0o$Vt;z9_sU^8HQoD)}~8J|ysvoj`CD
zUJ)Rcx04OP>>?=%dO_^tNBM--B@ANpKB5yo70*<$UJ`w`$2$>$4YL?e7=yRRm{F>;
zJ7X;`3SRHzBR6;TR&)Xhb0+QUibp3Z0f#Lk!Pln78^DUM-T+Z0!~nxyO($^NV~(OC
z2fXbq>sR^JD=HRkIeO+y)Q;o0aFL_^xTA<3_U)dM67YM;kzJ2{8+{zz80jdYV(;QG
zeXGMeVR&7@8i~`<beCHx!p2ePrP@H3*j>;CXNl010GkWDwjQQ-!-+R%90uy+u7;&2
zW>jxVm1fAS#_S@eQliQk!`qtc%c~p5gaQ*P3R4sxKXnHFJvlYmYNS=(Avs3ou{o#i
zYA)Ugk2Jk-eC?o6iF<d>l$?f|B2IcJZQNI2jJ2|P*sh_$s`g;Tu%eO8OJ?Rjei}yK
z%55mfkyyqss)pHf<8tX0sO>hP^+XUOmQVsR3DG?#>+FEwj?7535do<X!5KmkOd`%L
zA24d;Fk~3-PDhlFnD@+&a<oQ0FTZr-<Q;Vb0MkFoB1+<QDzUhzFPC0jGEpv7wXC`N
z$keHiT!rYge8^9S5m^VOca|@I2VUL(+v9NJmO0Dcp^F+NoYbD<_675HwagwR9^1#r
zC=B{7yrD+Qi)%u@0v-;DWr9v?-aU48P%}3jX9CZ`tM4qIunFva`Vae2&cv@v41Y|(
z3(^r8u^Y7lTCoJ|KD!3}I!%=l!rD%p5#o=A{IH5Ig?}PjNqtF4eS1>Eh46RpbqecJ
z<6oG7(%egKu(o)J7E(rSSYSv~UB}LSM}ozjgDqz$n@f#x1wo93P0%8V&ja?j_6Tus
zZiow$IB$FfgEdmIXS|8<_0KUnKOF*13Y|^?kLVPw3LQLxFF+Hyh}!Ck0aZN%i-vfE
z&EIcYxlTXio~Q2_qStL0@mX;l9gYF~!~1W3TF5urT3q)-(Ve&XrY)H|u}`L^9R1TY
z)fLBeqWOQ2`gy653H8H0Q3V9F3;_$!S6o4c7)DzqG97%x{gvYh+(KeSjW$wE!hChr
z^V#bX$rg!1DY<@KqEw(D4)lnL8lH7JhZ#)WDtrJ8JfPQEQY~g@XMLle{qsz^VxD#S
zea>M_SLIi%(1=nzcE2-0FIG#L3H>6hlAxy_`-JhXXYbUc0h9>M?>DG+M97H{hz{+$
zuy5Z5Zsh0pM?>fmBcX)=Ci4XA3>xv>eWCk5N8xZ6mM*4aMxy1ycnx;mZm>&mUw7Mm
zUWTZ==+Laz+6sRNfEqXr9z_4AftmpPp|urIpbuC9`ao*VB@qQft>M;4D}zs<HHxZ*
zrmHx85#EF68V9D&ET+$hry-xJLU5~{;nl`Hi=uk7nD6g+=Av3{>}WHp)fb=XKz!Mc
z#EBEi8PWQeH%7wiUf|wQWoD}0;a*tBgg3t2-b#Enf%6#NsS|H5;oUicG~(9prxV^!
z{mZg^A^0o}McWuCxHJu6E0kLnOK|lHUdP3XCSJt%YVJgIXesf(Vj-9}8Ztq|+<9Xm
ziP0pXu@8B-6VKHWAVkt5l9M!Qm~Tkc>y%b-g9*{b=%3lymI4#(PbWuj<iZu8TH{d4
z=~R{-+c7)YA-*cjH?fQL7S#=knGrb*q;$WIFOt&~SD3Gu$f^GH3R-0m!Jp`E`0A>j
z`092|PfYc8st1xfdtA_dOQMF~5Q!h;Zp7@A^QmfT5ETI;pam(wiRgT9&>sv16Tlp>
z4Ez^(9b5)i0i+e^^I@bk7r{w0a#-4pJu$moq5ugKr)DA{4OT$#8-X{SkAdsBW80a<
zF0|C*gR~U@BjTNnLXNDHIH|_i?Raq!I~EJ;Tazy~?cu#p#Kz&NE(oyr$6Xxo#GXT|
zKE0JOVSptUPcW7|tUCk4ECswl23vQT1d%G>4Oj~ml^7@T27#5_At<O0J?|IZX~3v`
zsDLIv(BmVn8D1m_UKG(XDcx-}6`|U5MA5=Ud}o<Z!xUn>GW<jUaUMRAiL{dy%WeZM
zD&{}ISIoG0pU5c0yEyc7`$P`Gjfqo4JY1vnA|4fhHTg48a})<bIWUkn6U;!jQtS}9
zl?+D1aSJhc!Ea>z7+KJz1SaA05QSa*6k-yL1a8WK%4A}Ri+T}x#$hOO;%f1Jp8%JK
zeL$kDIKO}ms~3t1J{7yP$vzr1q@YR_^DbSo575I>jK)&MsPw#nn+r1Y+ZQTE3PBJ3
zHpp_Mr2AdP7OrJTeM?K*l)tS?nScAzq4ZB;9S_Ea{RNH2=+NlzOrr`%z6@wiCl)0u
zQ+SEYl4@0$EDp0)FXMfUGKoYrm`-<DIE6>a(9$faN@c1B!37qZL975qK)JsjXewhE
zn&r8a!h)jA75U}Uciy4TF182d^f2I?+<Qa@;CPm%0aIqG(V~gNGQW5KB&9}{Edi`L
zSHW3a>GTk#L@aOgNqL~xnjIFC(r!+XNyQe03H~f;u(Bx@y=|}~S<%O;;FuDxYM@n_
zEi)L^*6XiX8zgp}B_%VpT9NE<s=NVK@{+QbE+fxlPG&BPH4LNBWafe-*!Jy14}JTP
zf95Q}OH<dTNmvg4BxYFp0?mp<vh+>xUUgQfO3N@(uJ7xNa|19vbOIO-+8ID=s#N9@
zZyLw)Qd%V8<zls1$IdEc<yN&t#Qawh?a$AZi#3w6R4|m$RJ*foYvdg3{N9lY6Z_jY
zCLfz5GSO)gd9G9kXht`J*3;AA6Ls}sab@WIc>vfWY?4w37?mnpDM_Q%^7sDhO}dF|
zT%PUft6`)gz5aDu)lOcLtTR?|tk;kbZcM3^C>(arT#g%&o)BiMRN}l8M^TPRH*n_6
zJu^R=o7bmzjVN<&`xRN5NmH_*A5G_HCnskW(9FSMMs1o*Dlw*}N~B7?GF2?Mpiic%
zp{0F&uAHD<<CG?AIW5Bi4#-5AjEJS}X&Eggt9@!yDln^)l#G)0SXiy6%vYljs}y1-
zvl{+m_?=Q6qfAmMm6jw;@#@kRhs{n)=`2o;^5GbiW0KgVu~lSd`T9xd!Xy>yL>9Tk
zqSh)TQj66fW}Zw<woP@eOx3YVvp1G0Y)WNlnp!0Vi&in!n+m7el2f&;E_LPBG-cVw
zY>`SmwNg{LYCenFa`bG*?b@!>@?!n^-ZZ`b*y1I}jxAXXU8p0bEJcG##ti8565H5_
znq5D<fm6|EdM!&9i?r%Jsq{LNV*8tc!q@jJ3^ap5d}tnw$wos`tSIEfA`ZK@1QNYQ
zCu3-!DXox*Jqkr?25Oe*2Bo_HQkmR0+wZHV>E2f=N*0tCZ<)kOfQZ)WOfrRRSfBK>
z2E*<`hmm0nmfm5I@2_&%!Js<Sf0FcCmSe@QP3X1FKiemlE$gRN7NX+U3p_&~3E*BO
zoOv(e&%2wJ0<fZX^%hxKOp^E@=Rv0o56}I*Y0IQZTcV35ZE0%S5*<@Id-EN?Jqz5R
z^wQQp+%qYU$?iXA)u0!rrA{2*)Xya!asZxu1YWuF>bgbM)%N@x{Lm!w=p?SN_vl)0
zrb)?3O}6}!0Yj(FsXR2syLjUCq4mAJX=;X6TZ_E|dkqf^jq4o5{BorcRM1*#2KMGc
zb@x<+5goh1H0z2GD}wlTG|zikvRLFh#R*vXhPJWVxXrW9An4o)AlHcNk6*cLqMlfY
zY!-Y1zW3RN4WEHx&;W{YC_49Mr00cdwN0%CD`(X@QpplO)iG4CY>t~se?X$wzqFp5
z&%rC_m?oDw5{?6^bFCXbgYWft+wX3H3mqM-hWK4=>QJrEQKngl<pm2hWey)x+ruy$
z{ve3c#;;#LUI^_vcP?@lO;8aDRBzm#Od{aQn+RWr*J56cqeoNt2sdTusajQJ<ipp)
zJX(usmDh+8JWp)oYkd={uC-Q8m{7%sswVhqSqk&A(N+)^1o{!d_WcM9`)ZHiWDH4s
zq?YPYrj*Vy#pDq^ieN|vHx(7J^&CYL`=G>9^e7@K4n?=t`g#;0+SI*_!1jMp9tJIK
z|9>hEjX2W(v+~fL<uRdAOZ`tuBL4MKF#p#3u`G#WS0cJ$At;{cwYs>gOybeR74!UV
zV&@X~AM4(h>XS|;7syV*Gdi<eo|!3^r)a_VR(B@MK+(16HuxR7$7!;;wrmZj6Y#4U
zEbGHQ3Ty_9Sf$b1(b47>*&RNw&8I;}O)&|Z{OAr7g00~&2!%rM$CeiOV<-ed;V^7P
zXLU;pP=~m18*B<k+uFjrc7@w$TNoT6L7_S0b`5cF4><(&q8E{zVq6%ah@`<I6`g%{
z&On?n`!qg>!HEh&G+I$9i9g+#!8$$@`*njDjaV4&pdfZ`8|Em0v3jvcMTCAG!Wp92
z2uj6-v2)ZY>cKZqdh82Wc#5S!+&^wR7W$(I!RG@GMJdvQ!Zhwh_yJ15&OsGJbxP}$
z5qV=iEJk&&Rrk7S9Pt{0#9BHGUZ=gQs@Qw59sN*0^Vwrrq1CugLh6cZg8qb}Ggx$l
zHJ(tdqg1#ZMRMrZfo`BG2!1JWMEntkz!(e9;vY@UFy<VX96Mr7L6hx|sBj0hTkM^<
z0lL<L8jSA=G>M}FU5HF}+-rH3iZo#W6fTrmLR=Js+f_v`6g2=FY!YHiG9yhT0~%1I
zib}M#5fQ)26m|kv0sPLm^aImw>~OK0rO@(gsqz=)@F!sFKpndToXNDjU}?&XQ1Mp-
z>Y5a#IK-e10c@Ei%n@|22_?#m6$1BDQ38He68ff<)NpDlvAXO8B=mQNjb0;1oTZ>K
zX~5tRHm48ceHWAUB6fG>B9_bnV!GxNJZ@t@q#FCprcV6*X(q9B|9+|1q_CP8`PQwB
z4467*ep%ON&TYOeS=nF!{mztWb5^XFGi^#iv&FLJ`N_Gtlb>HRjj0(~RT^rjLhK|g
z1%DYhu{%Ujaj}!5x6#~_Md>V93)nVL4BsoO>D8iA17KfJ%!?<#G+E4hTjVO57G>5q
zEpDpM6tQ>t`*Mu9k0(&Ypmlc*<L`z)#C5h4#yT)l9x8}?fD-W^8K{yPKSeyBd5G&y
z8w-dbH?dIFvZ%H}`X;NXF|#&opeJvbH4BVA1b@1J+2upy520@y1WMX6|AoJ;hktkq
zUVickko^S6Tl@11^Fd=`ErFYUHtW?tzl#2{q64$Q`|x%66UyQ8vipJZ&>>j2_2-A0
z9)KUd^cej3__RmAV?^C?u$XSV8saUv9<==?{Ah!t%Ye;DaQnKjslqx%M=O?YvLS^o
zJfW(Cka`wP2WafX?;SZ3k8HxpV$tlNuEY~S@W_$)op3BJ=I>REX*bqo^-<;22x=~t
z#b7BN#*x=_%6~hhzG(T~c|lOd<4M@KOiS2tA&Q0mB9oQndPay^5$&X|V+u-vXO$J1
zG~vS9$?QfqWmYJmfy`ikF-%@H*#Q1Rwht?+^7E_m*&XBW+Pz`-UE}*LoZ8H4>$Gh1
z)P?;zs9VLdA?$r28e+mI%l4nU;E6aHdMOE&_U~Ux0_uF6ePmM2;wrnnYH^Kh+xySG
z#M|xsOV7Q(O?J!JL>XruH3;=uHO(8fag~QI7hGy>z(s2kHu1@A5M+FIG^R~fY;mV#
z40hDD-5!*L3tv2P<f70fq{vO3*PLKadFP-Vi~2>Vev5Vt(wR&;e8tAExG?O1^JmS1
z^I=B<Iui$Wq7ktZa0w_)y;Ijb{nLgGKRvxBmA7Zw`R<pAvei5?AN|j2m;>y3lO3B*
z({2Z<-@mL@TZED@KS-(<Y^(daZrg(Df4?SG!SeP#>;8IjO<LNTlYd>;T`r8v-s?Xr
zJA-<=1C4`!r|2V?kt0g|&(HXJ#`FGvzvSnhembJu{&sfu+uOVMr~d!D{v_h<uK%nv
z-7%YfW%eEayN=}Dxzj6jp@i?CqDrwxJFW*w2?WIfkJxQjig~Npr0a2)YwIfcWX7Cc
zR#;y=IyWaLcXV-mVOhGFVI#MSo!s?QNUIFvGdhF<%_AE_wRx3Ri^W=*R~u>^*&Mi4
z9M+YIKa`+5L7`cE7Wyt^w>RceUE>x4sMIFBPef=uDtbWYj{%MeY2ArIcM<UgP7dfn
z0@5W+3P7lKkx4M)W6<Kr7Ao*mk%I&H-7YhYmc`OJQW9I_R!Y#RvWOE8uPm+V)tsJU
zo4QRgSJYA;4G*6K->cg`MaGG?PAv8eV8gY(@c4p0RUSCZdIF!@@*VJ!y8<tJle03w
zGZ|UG;Aq?JnU!L?$`fAU9mIifQM$j7zkBL0-cneXlwaSnWH`vIncg;KJD9l6(6?)^
zrwM)ILJ9+N;bw6NwjjwM4#EgX%b;fQ#jHde3FpqX@Z%*C&j>7;8^o;sgl!5xb9h{p
zt!iA=0awUZi&b$$^i%16zK*LB;%(1tS(K(TP1!#49&w%W_My@G-g7fx*t>7m;G*qQ
zOu95KT;++j&}wWR8vXGGb=F(!%SnfnH#Z&ZwWWZch~4Oq@dWe^&+Glm+3iy_qHQyw
zGBXFx8PXicr>W|Zv-YKfr>AUZ%j5e%f)20?&7uRT$=HuEhu2qvm?dBrRK`1zrn#89
z63>Yk%zp~-MR-GobQzu_7`-?u2pDG^mYOrfFh>G-dy*k{1si`p=DVUCc!_Bw7W8mz
z;mM;FreF;RJ7(?MH)}!ez_I&gdGhGRXaMh<GZH>N?(Ty}tr=AwvmP`QR)7!=!A~vP
z9JRWlNUsG=){JkXOOuSg+B_$%jFJ^8ZMy22Kc}Gv49oGOCFpxwGH|<>7WehI;5*^%
zg+9)@q_0c5@4`NfWqtjueVV`Sn-!hfxYaPiM8DO4pfX_hR7np=>x*tsD6l~xHXEGA
zqLAc>GQeoAiEDkCRmwA=+F7-;-mJ)(9-(w2WPNk#`+T*l?S=4?C)m$({(Qe&@lap(
z0L}K!zDL%B83Z2>^(4^g#IGDUJDC;y5!^x;Xo^wSA}klin8o0R273%O$!jNC6|q$T
z9@e<unmCNk920)6DW8`?_g>mk55x5>@QdiD^(~Js0}p0L8>a3SSGLrPTE|C!>kdUK
z%`Qf*k$TgZP^1-w#RKx_@Yu`}E+j2VgMF(eps`%2R)F%PRIF5Pc8REx!pPt5KLZb8
zk1r?hZmG8|do;Xx%8(hh`j+dhV9KF2jH1|OwmCfdG?&d~&Q<1?m1L?^t*OolRW`GW
zKdkViyg>w50wx~j?TV<ym}a3hKN?Ns;EzGPrGOaJ8#btAVvr=*WXZu`?Q{nd2b0nz
z1W|+Oa5EJJfMBS{bG~9T2*klo7>5oA!MlTQ(@j%wi}_XKHS0$WTc;m3L%(j==#9#8
z%lVbkfUzLGFnQ*_(jv%Jk0^ANOCDUaQ&R3K2r(PXQzSuGeigHrXT?*+#di9+>~zpk
zQd^9M>e<i$h7IMr%O#7=`<RLw)Wlk_v(%es1fQf>$8V92m@{K2d=Q)%I%Cl&>7C<~
z9FXF3)K-~n&&*(p3vTd=!UeAANP3K`pekRbh<*a@b$Y8jN;yooEVjb=wk$JPnbW7Z
z#{Bi4SRe<P3au=^y1)gkbc<41P#xRz#qH`P2qaSo64$LMUAf?7+~G@@2ZR6`wQfT0
zyksWmnh0(te7cyIDg48-yL+;#iU$hB@0`)WjY}%2FA=7Qfqpbu4D`?5Ym`nIm|wi0
ze@g0vb(V4J=Bj9sKnVBF?B8qOpKZW~|2Q-sKnjN6@z)g-BA8+TElrazXZ0@0EXVUe
zXiQ*8t*?nL3k(S#oPCAvYZ%3Eo^W~bT(~1NR3L*h?{UzMS^L^!c4)#cVPD)yyx2~n
z))7xDiB<Gzn3xJv8W6BnF`%!JPZy~O6d~zErgS9}L$DO44%Dwu7c^k~_&|L65V|Ia
zwKzjiU);jF+D{f%Du9<>oVa)XcGC#M*2d`6S^NH~**B|xy+wlvRf?hSl9%iO<-q=d
zqIyJ|s-84D4Q8=ogS5(nqK`;I9hKs1({n1`L{zCZbVgZ~>8oWexqW3LblWupvVB9v
zx&6+c_w);T;H5(Q>RKOjo2laH$qD1&<0I$nL%b5bIL|X{-`Ih<3os#u9b8Qy!+P{!
zMImU=n>|&V)#@Cr1%8Ud8CKAw)fZKO8OEgO(!TROS7{TbyU{SMbmrBz|HYpJhSfBT
zh3~jLeTz%+te3F`zUQm$#DU?TVJRw^@Q;RDYwi>oIh~Owv2Gd0^-4!4;@HRS^63QN
zP#xKn)(My}qjd`Sp;ob3p@V-^=(I{ES)pT<gMdV;*d*5i&#Pj?a=ql0JfM|tR!Aj-
z(fKaD<cd_vDA-RV`t1rW)3!vRja(oP=V}#8lv<rMQlXGZHFCNRj?(GCW6`JO8mUyt
zoR({J(Q8R5yhB2Zb(**igRrKSP}x+OV29uq+&K76vAVdKE^o5}Aek@^8tERJBvir%
z3EnVawY}}bS3XcRp!lp<BG%oj7r%Z`s}%I0UE$z}$s=k+dGG@K@r@-*-T-Ql3)Cd^
z(Jgi%n94@G7Jf7EGTf?Bsx@FPd;sTzVQ`Yt?wdYtcZQVlFL?w0*dsq!+an_sO00Jt
zqBX?R6(|b$^Rba1nxME&c%wAzim3u|haOho73}|BvYVQw$NmvLet)x4mM7AxWh|@G
zr&yi3y2(ugoqg46nMy78DO8L)*VmA@=Xb9&a+Fk>C)WInq`TjE-F<UoMjyO+^9bZO
zYqbpumR2yVT&0xrQwP;eu_%=?K+6Z~b*wrqS$}%Ru2VRblKEGu*uq;hJ22eh8{%;k
zy3xkBayFt<LP=N?@0NgogmDK<62PPXbQ>mg(I)!HBTWOK4YZwxpV3F?Bhe;w4cegX
zG_W_pFx`fQocIPwhNIJPqF6Hg*yl|kOm&kR;di<b=|pcb@e*JPxFuY`9gqMw-?Qt|
zXMqY{ZES6VSAi*W)EZdE<bpS08T@ZxLb1REuV#*7>TXfV=ddwK<0+H`KNv=jRDn0q
zqyLSvJB6}C4>p49x9F5uR((Z6aT%zbI?59Bve}m!hI(kYyH|ktt|}K(FY^;8!o*h!
zNrkC?Ml9qN)a;dj0I&fJ%~fQj4aGq^uF0#jD~WnKmIh*t4zx5U@Wr%`sLj}k^K*J@
zz~v4E+^zt-E-*L{7#wjgII;l!v1=F94_Ub2NTl!4MT?I<`1MhC-O<I1j-rdmXYjvI
z-F{)!stdQDVjhF=19%!Pxv+oisJ-Xtq3|cT4!cwUt68unHz=8R0A4$|@!R_R2H6N(
z{nd>J;k5(vB*9!TcQ3f_i#Bj4og%zGK;yUjC*XH3SO7>FTFHx#0`&X(D9i+_foj#o
z_KT}n+5CB94_sKX=>2;qM0p&IJ_C9!%X-&%?|JDycx`{nl#-Rk+niGt><8leUb+Xx
zPhHT0`ponj6nlWsMIF``CSZ-|V9<9d=Kw3f9?5xAO!*zHK4Z$|0jzc8VFW!SD~o6;
zRxGjtrZ?OIe*sdk97y557uK(TVLixIu!_t)_o6d3KxVbd(?+KCIRk%A8;OExKsMmr
zh3>pelth|Q5VCXnssSyfV;^$5?4g1TdI^xe{0hqHmsef}2iK1uw|@P&@zIA<@-njQ
z$u))nBo~F%T73ro-HHMuaejuHWP4UdUW(qT)S6kP!)){>C!4iOYXW{4Px+}J(N>M`
z+IxVASJLUOd=kQ%M<%Q!gq>ue85LckqrW(x#{4g>cG*N~qwOZ~@%`gBj32)Nc%>P=
z(xk3c>z1aZr1i>>8Z-M0yW4wLq0uNYmK#qk9E6S%qw!Sn_Thap`@aVN{@QCmPOnIW
zI%OcvX?*k-eG-=}PRh*CYLmGneO|9zpR)L_f>;KN>Vzy`D^~h)djTzwzlL)I-*(40
z6=V=Epn7Wszjb(#Lo}fgIfywg@8rlOppz99rB;sF@)bP&<WunU*IUMg=+pTQu*ccA
z5Uu@Rg|9k1g?%%?UON{aTN%Cn6m0!^^X9KX=qZ{HjqA8%#{i3keeLia;J5cJ^rpjA
z_Lz?Py@&?Pz<rJb*wn`5b5R%&y4dBj8<e!kNSUybI*odpk244gTtvOjU+gPFs}2;!
zGe)fmcxaRWe<q6OK7^N(;m?)8*8q==G>l!G3+Vptp~Y%5xIHiJBctxaRM$}&^zLJ@
z&#}#`NUEL)LKk=If(z{z6<_h-MP>h9X7C;WTZ7S`>@(=+3!^tS0su}k`ge*JjpSV7
zBHB{s=oQ&9wHzGGc7rc{ed!{QPkTK5{#yOv-asMEXNUkOq=QAUpFIjS%yn0x5+JIQ
z%Wm%o)h6I+OQ|GkA>wLxB~U!P@>H@s2(nH+kFl{)`=eTtRY4lrZpDB&1Tq`ZE3#fv
zVLm^AF$vK{KJn~_Io*7+E)Ws-ZC30L7!BnLG%y7XkHi_f+ibu*Yfm=2(u+{G6C_JE
zZJo%#qx|v>+a}O=HZzuFR?%zVC+pRSArJxefPrs44w7^VG)U+Lhtv8>Wn8s#E^SX?
z70G)2ptcPvT7lB3`d7U7q+2d?&flL_B9*bF$`NZmgqPq;@Y08C)_e#uK|hfB;b*s)
zVCeN`7cP!{7~NMqch$PFqUbC9yp`+6_I~>~tyL+c=`DwBeNdLws+qLY$|_PbncB}c
zs2DkZ?SMY#9tTFXT%?oBTMk%JI<87Fw?v`{)qc88PU9*l27E(az9z9i^xA*MM}gSf
zYNXOJIu5`)YfcyXT>cCRFtP#0g=P}9)2O8p#c%>Y?asjXB#5vuxBvKuZ<j~SN8sPR
z@VhXWhZc=P2LR)NuP?xd-V*(;jG21w?yuqB!QMvMG+5Gp@?`r-5k;@q^n+XS@GkJk
z{g1;r(V2JeNrmP1>tM|lAPek+r{E{iVH=h7{Pmz>spuqr2#+fo_b={kvYTL|+%6g|
zteGGdQ3UW9Vu;Qs&70gJD>ekeSQ|<f&4X?$z-B=n95A7>vy{$AD*?-FhF`(HbIP>+
z?wui%EmUNGzu3Q?Pp<Wj5UXU#oM}vnYOB`Zt<UmKsBxB;O3?Djm}Tz$=<Nef9@#rP
zB}d#RZ`9Nj)y_KrA}K6A;(<%>>J19yU0V-^gT5eVJp4w<XofDN^M2o3j2J(_4R!FQ
z0_m%Lat4*8@Di_^X3H{YUaJr@6Nk#mbJA+2`^LWegv&Lo|8X#8{vbFTzOm*8b>+mA
zxGX1z;~x<GHL^s-6>EQ@`6)mQKU|pLVc6MT=(_<uO`sI~T3<2kCcYK5+{I(BAB5jc
zuN}>@qid%F{lV9d-3HG-nyP#f{_e|7xNkhiJOT>Ag9o-WFTG>wfw$f~ux#_P*_-d-
zEc14)8Q;D=dwcu%HM{1`Sq{W|egM@cpTj)~EQ?%gg^#VS7+wM<fB7dcxpY|N?eIiw
zeWFI+?MEty@=+C3KjQDkF05J++k#7t3W;?s0$Qht(Nbu2f`QC1433c@BpZJ>KxBSc
z!4=raq81Uwj<p}}neuoMc(~*%c<zyxAN}&7@AEX{-U9j;{#F5A1j$wvb>rz!^N51l
zY5ismpR?<>cl&y;zd32-qI*_6@0kp)(U-VOcklQkJ*uQ&*Bj%9-~acG!xjU6(UIPd
zg63a_!0*w7GZ8E?2PRi7KK>kdYS`p{`H#-u+_7rp_+bM+-E@{7c-L#M#pP^aUhp%5
zaRF|*t7*7tztESsF-_?d*U65hNZ8Gc+5p*zh>(p4&=j@d4NFm|Y67q^Bw+;aXEJ9a
zg8oZ<zabpcc@fHGMDyaGQMpWb=UC^(duf6aH2NQVdse5pqo3ihPM@1>wF$1T(Wr8|
z?tG(PNrp$sBx!Xl?X{Lpgg+KkSF_)OVst8a`hptf(E98_ft7W(?DBMnL8{e{=$$vH
z)a%fI3)NgWG@@kb#@UA^j@C(j82earbpe-zA8h}&p!x$aWm?|AeuZ*#RZ8`1M~|Kv
z?8*u$<T6u!p>67u!unQugW_%@@{)ekW7HdHR^<hV5J43hE0AL)?wDB=S;XNWS|J$u
zo2^#@G1C>3k<$~1;&hUU&q4Arc{MSMD?ybVMW%r`?6KgBNfSeF6E4vj61P_DGwQMB
zTMQ=#mw_?rJBx}_6U}xq5K)a5>^gAt*u8t^F9>GK*<vpTw3edjlfxT!+`Tb8NhDRt
z4H?i-RbjAbR8mQ>ij%6;v{qbIrM7AnBEGUxYfS-fdGdzVfB4gf^$j^HASo`AI(q|V
z%FI2x&%eK`%x_Vt(Q3~nYu+)SfAj4Ap?Mpcp59cmecM}Sw)v81vD9ufq!~2KT&p#5
z5oE6N%w2KYhxJ4AJZTb{%&d^`v!;djY+Re7MWj!$?$HPDy+bBi5DbMXT3U9^7-<oU
zEr1!*ch&UC{*saaDlyCGoOA;zv9!F3Q`0IXFRiRnr)s&XN{uyT;L>?Bht`i9SKrWV
z=TkIl%am#`jNZ~T<J_*@=hd<zub5#(ch8vCuYdi3MmVKU&8DX&zPWwdHeWg|lSsv!
zNku=RGR=dj*~4|7arHxIwt(|uy;@=B$7YulO7oKyYPK{~hWkwF4NCO62xE^0sl`~r
z=JXr&XgYADd$3zz;*{CMI{i+JHiI}c)Y%cYucRGHCYu%jZu~}!*_VbH5-crHGGv>c
z3kY8x4HPFaK(sOjpeM!%{&JvXL@Je0r3kLw|Jl-IKRk16YPy&eNflh{9Iz1_cn#bu
z)9BN^8m+{Tui*@KbFMB2h?HUpC&K!_qFF_rRd7R!)1_4WDRZz+CsVqXZP~HDIatzo
z`|@p5iVW$aM26nQy|wV8+%c<9PM`X~q{`%IQ@^U3;Z|j@=DC%<MWR%lIxw_PVQ}n{
z@mUg;gaho7!ly=NexRORI4nyk)#dFs@)GPqRB#qc)9L~dF9(mNRTX8+WNpqtdcDlp
zYgDGFVA$Pbhi@BSlVy?6YbtF%+URTur1V}or=hT@X8e%!=;4w1xyIzlc_k0f`uvHV
zHa}r9M|p{c*6akE&^W4cmu+rm$Qi@5^u;hPxgOVoe(A4RtH+GBh>Px+V{k+WF|ia*
zHxeB%C4|{<dzhgTkPH%n9937`rN7dI$!}BaDA=M48ifhrb}cqNq(eP(BEfF$qat1o
zyhMY|kT@q48L__Izs3Un7Y&Nqibaz`R8Sj1MTnqPA(ljURh>!nPZhpptDzWhB%Vea
z{eY!fZ>qBp9(?PDs_Wh-+=z1_eZtuVapodaxzqPh%nsdT)c>Eg!zgTJ{>m$Yjrpsu
z3RdUw>sMZpL~Q?A)7*3G>^iSu+yAb;^k^NGNtIx%Scw3d6l<lJwf_HA192uuNzGE&
zCKUY&5bDy=^q(~g-5XL839tzbf^s9-M$7(##sHl>Z)%K=05UblPYKcq&}w$kNg7l9
z=rUg?dh#O5WsYnFk1JhfD4aTkcytuximb5qAznwQqClsdJPv-~Bs(RYA|pR|Z9|Zl
zeGUhYfLwS1Ho^-ug)6h`oYta!6tt?M3-BxGyV*kFHpm5!)S-LlcHv~p9u;JoPV}8W
zCUcaN=-?0$RF}A=>tkW0rg*WssA&wi0ke??(fd;Ac1vbEu{Whdf>kP&X^Ff71QS(;
z;H0&;W?HtBlr(Bv_K)bRZ?|ATNP-0BGKVZ3SBQ?knQ0XO!ccOYrnOa&w~HyRgXk6G
zu}lej$vhCbom^aF+8;pN7w7bI8cyRx{{cGlUs{aXXgDb;dT;bzsZyswmo&Pho9Sj-
zM-m<CXrgUwTeOY)S#NI->uvlEN+$c|7fz<PbNCXFOT~c>>DTNpiVo>z_Luf3`^)7H
zX`*acgG%L#&o_9Zmb4@)kNp-g@r`gitZ=buN}<z08!tvD(8jahcDw9&L@c5ytxh2p
zL39!!X1zV67o*OjLvy=c3~-=l40D5$>e>;L&HxnP5YHapud(rXm}C1I6NMFGdw5id
zp9Sqsw}=xFQ_Mh+4`3w;tm;V%j#I$9-A_Nlsehk0?Qz&%oG#ZhY!c^G+Er$yire+@
zkKjJ=Ex3=aO@Q?j{(uKQ2roaTeY`}<0HsW2<m^hPxuBqrdrb81CxH90$2#qK6Uyx&
zh^{?sgW_krcY?-C8pd-&{5a;zGyG~7(05h{%c*@XzYDvR-~z-a6?O_^1-Go(RoDy<
zy?^(*Q7K8DdspU^_AP%8OnLu(Fcep~U+tT)y|9u~C9w<#q_mvo3k+FFR@tFvyF?xI
zvp3f}y!E>~THYO4)HHTz#T=JNy!AVv{SIz@0yT#C$v#RkqBE?TRUx)e>@$^k24s!~
zqJ8VWKQV3EiSNmGl&}={57Yxil$26nDy>0(AQ_M|HsgipKTUpUz>Nm(=t+2qSr$DB
zGTFm8Ob>yVaV(J=Hr!|xJ<f%Q9l8imj&#Pw(AaxxFlP0t71lQaKZ?|HM$zL^_!|7L
zukM<h+c;o^cJ830M?Ck9n7G)KYYbF+XG{|-R+NU8gJB&^`*&~>918d&pbCiUCL8X_
zyi+V$yA^&u^7?OnGh(Y5+#wTpu46?4E`yXHYuf>%v!f0yqS`68{F6_jn?Csjl%t7(
z0>|iOAPfF6dIvlo@7M8XwNxcFBKAB_Ft-ElfEzp7=FmzvfYp>^pdi==3$39Hb{|@G
zVvQYdz>$tQ>Ea*_d_+mlr?I1zTr3?f2eVCHo0dF#c5+&+e4@|hgZpgB;0Z_7fWnO%
zn(FjYMGa`(E8=JXPPx7ju`DA`p_lr3j)vcxhMDBbez^E-t9{tQ<kHgQg~RMkO-F6{
zhCr=Tx#;!*VKH2%lmotTq!Iv@m2zNxSR`WVQ&Li8k>8F)OCd%sqQ%pUydK`Al+coq
zLfxkl8ie<IhGH+HSkI7b$k<|=FfoXBr!ELg98oR7W5wrWSfbzn@a#h78Q@0?jP%&T
z6s;Ncg6Bb390pp?Q@x7h7vT<A4|iUad4r3Gjp+Rm$Xd)KDZv8mfSh1s<El~c>1L4o
zaoLDri`yR<wW_f(Sl-AW_Fih0WgR(kBui$M%49kBOlX{Nk8#zg#`0hz{dC#HWKYpS
zcy0fFAU>F%pFF9oVM)ckQd*)=GeezuD3?*efiP2YPx%t~4S7i;Y?4`JQfYQ(X0}u+
zO_SvmNhC$r@XJQ6B7M5=4O;XvYL@~meF!pm8wzVW*sToe)Ebc-v3?koD4+zq-S1)Z
z(F&?BP><O88UTB~0rTcJcN_#WANj){->w-4zlRTOfAwdY`SK41z18$eu`M{Hq1tHN
zeErP>^jE9Dd3W!~KfL+!jaTL$ZLpd9c;V*2K-ymentt~a7(Ti8`U!(p4=ORM0N{qK
zyC>dXiEh1sMxR1asHeqP3fv*F5lJVr<dskps;(gh2ODu<GZhiyQT~DAY;;o;tC)jy
zV#0#BptiQE37xu~FB7|!0zAJv$(9`M2!cP!0P!Xz2&@r#L@XX<PjEPDVjS2$rN|1D
zKveM2z@NA8zP4k;&bQ{RzgqXldGP*segi+cuzK|c;QGx)umFbWXBWd-_``E?3GZ`&
z1;=i`-`%vumM53y{W5>~ojb1Wn)lYu5x32`{n6Id7vM*TdY~*mr2D}mQTS08t%N^c
zg^P~>VorkE$%g9D7Q@qx;SmJvz^wskh|bY=!0nD67{`oifA$6Te*Ny~cVHZpM;--J
znO<PsJ&{irGh?F3O%o#zfg$vo$ftC#c-w@zAIX01?Wm&=kK~;$YdXUmwnQPCEa;4`
z5x*Kg`#R4-+UV7E`Xn|8a5?ChD(pTWVreMyTj_4kptC_EoawN-Nsaz!Dt?ZJTaL6u
zadhX8lk;j|v*+4vc`m~swWc?(?w6vi(Pb6^H81B9)6(iTb=O~14MJF94Ytxhs?{xY
z3p$XWh{p!Mn^g{z&1Q0_G*XpH{eeoMl5Yfn;YBU6gwY)>YQe`N>8rB@1T2BwDhGC>
z$;uJFJ`VCGtRzuC<FJ=5J5l%%ygXs4RUjzp1!BYp&%lm!C5zRevHM3cDj#eWizU1|
z@{rS`)})!zY?>y-sS}<bqNQY$tt{7LacgxZOKx5gyw`YVBUajJywlj6l$UEU>9lT(
zC%4Qt+b}tZD;=C{n60s)d^Bp0lO1DI(;tgn;#Q88YQtr-of$z}hPo-9xmMYvPw~6z
z+*!WTn)Kmw_FdRFXLx!|sV~c2=kllMOZ%g*(!W%lVGCwBXP1SwdRcef03MBEJK;%)
z@(ZQLHb7ny>Y>!KdPqq$S_0_j*TW&tMAy-qZ>6mgY#9s`@E?GEArb}(F!L6hCzys@
zM&HGaxZyHt5H*STAa;x5_)T~pOORC?O_<!fg)M%f0oUcdL+}x21t!4_Jbp~=b`cR(
zhPpEfi=7A;Aevk4<JEjtl3bo<k(yR~uyWHE{yFu=+>ohuCjK0(amf7rZ{OAN=SP1$
zvo{EWzx@jsYg)X&eUd3FNoSU8`}fz%iz~E~0JX`KWzv}y+BtKy3bQ$=1<&=GXvoV?
zvM|z8YySZ&-(RuoHp^gBDA!oK_rl)!gYP=?*GKn%X?)>J_}g!iU%u_h9d?DL!rTn#
zW^*t@VZN&xCcTxe&<4#9zW&<>%oQ4~JO%L-88;~I3fYIBhuBCm>*28~;4)$l2pl$l
z!Gbibo|^`UPg2&6x8Hqn5gWnya%2M!ODw*KS5qrvvWmGYtDjl3=9$%37ag?kx;poT
zm6QDrxx|t;Y*s^Vir8eC<IY^PPn+kTFuum3T71`xtgNw{-deHz%-S(7YmPrxLyL6g
z;tY>PuWEEUtEXg3UDc~c)!jb6rXXD>r4^&stQkFK&6-oHCzlQk4bJW}a(IJRsmrhQ
zW;pVDxs~bpDOMUxZ!qWOx{C7B6?|aK!aF7m-m!jCX>r4>nO;v#PO4O@b@@m6)j9xz
zgPln(e?hO*<Wheq(9d7vO|-)k?ALGFJ#hB8PISagw`!F)$l4R2Bj|n=?&)*8i6$et
zODGfzgBv|OYj^Q-g1$|FSkre}!&9~(P<zk<9;l7ZL|<u%vWD0-o!{N29UKOk?Ynlh
z!%OH0e!yjD?J5*Ga6Jp&@x-q7&Zh=<D|$k>8~=(u8s5~B-CUT55_15pzt&bawGY#y
zeg0|d1QKmE|5a<u>#EQHpb2{FM>(l-#B1n?K{J6@2Z(_uTHJyXeCN5yh=oIfCp^+d
zLfCIJiav2LI$i4ZaH>wnI7H(|ULQV^$w&qiSv27Tm7D?ByNX?iMx!H!;|jyKEJlOD
zXaS{6|HyTQPqHU^+_eAZ1||5Oz!WMTzW?*jV|I4<WFQDdy{H;&X9w^Ul>_2BzcCLO
zXzp?|9>ft5HEU<Q<VInXbcS_)tmDFn@TBJljDzTH#y$hlpT&ByIdPPKOrJ?9Rg1&}
zJROv0fOwG#UxR682W_LXit*8z431#O7sW0Rj-8uqw4*o+-E)|^WM{|f@f)V;wvBmM
z&{uzW%r@P$4dZ2f^B%^qUnnB4FN0e!I?L0$w};+`f{`{l%M6Z~9c-2vHYKNrP#D83
zG?C`%3L8*3i*?|OEIOV22u=krHqOVl=QqOs;J(}v94<lq-;Vm_XJidF1bfJGFnIIJ
z&e)4gMj~8dh&Cwd6^_mj?j=Nyln^3d+eV)8c7|{c%x57OVqgiM1YZn+fJ!Q5OE@!p
zaVVeErj|;W!4QQ$SCP=$_=Hk|{vjMDDMA0Cd~%yAmNFK?`AD!h>IMa_wI$u4<Vs~*
z5_|zoZ)#8yKchoi5)kfz0XPnxiJ#?iVf{H9%`<yr_L>@Eac|-^CZ3Tn8V2hM0yO@K
zwIv#)1Z9({*|T@=p7r27JO_$k!Hw}C1Y5^bH|XDo<{v-(%jx6uL-7Fk)1JM|w!M2I
zlfZdUg#Mq89-?lHho|5v^Z;l<WA&}KR}~hndK;9Y@meZ`g|V4=gJLdqmWy%*+?s$}
zhb0AAaT1;A;g6$#HZV2%75w8Iuo!Ne1G4Cp1t(5`c_&Up{~O*H{gQqQUYY}zfF*O_
zCHk%Cmx5hQOxFv`W3s41it3acbxM##1kF!}rC&sTh^1ecIJ2=k997p`SJxb^BPX`*
za{;Mut)in%XG1+u!P>|<+7!F<9!^)skmPkREe`D0s@JxoPHxs~IdpnC7ER<v%#Hq{
zDEA_flBiKhQ?Wl7?Dj>M1wbJtPyQl+-9AV_Ar70GnWV^lS|vXXoTK-^=b}Hp35(to
z7jXsCc%?RSACp8b#Y`|Fp_eLh44^n75si)BM^80HH^TP}Ig03=%s<eTDM8-WhQ0*e
zbt%MtQGE_TY{=ah@QNTza(cX67t|-y1?5S>?FXJL&|G@t2-CND>*niCpz+$CwJ?)l
z8-%BfhS3*RoGa7S>B`QncmYO7Px%oX0$+neKhmvj(F@};XfUz1seTdwx3{&vd~Euf
zL!ZuU1fX%|r-#-|Klbwb!ekJ~ZivfIgmspV%0&EtVDoKo_;kb*nZ4^rME$_c6XTQE
z6o*!39Qx~_w?{LPNQC(bJ_bf$wcKbE<CcqUaMK4Lz)d!>TrOrWiP4hnML3Jz`UyIG
zF*4YZ85}t>$X*JLq!)z4)QvT3AVxo+gmC0R{KO6FvB%Ju6nA8zJlF~Q_U+SmJvOqN
z&Pp1dl|XF6UX%u~wvNfl;(b#bLjw;-yKQn5kHOgtzyXxBhi1afC0oy@XN;D*-N9*%
zzFY~LTfcbG?%MqT6!|QJ-h&Nw3x@S7^VGW0Fggu<SMO}Fa!Q2)^l66Q7`HZ`*!vQF
z{&x-UEY@i<)z-9}X&WXC*NBJTd3@axTa}1O&oGpsk-xh4x<mI~c@q?E8PIa_k*|*b
zY1#1MCio&qrIVDjZ6uYT+m=suu!x6w$^&@T=5#5^Ub2!#^pz+eAPO4rVs&zFQ6Pw+
z?`b#Y@na*B?Xec=iBi;at-?)}=b2##{1$eY^W-V!*XPnHW{X5>OqM8f)ndOUTjLk2
zbCr^0qf}xsr_gg>H^b+NfRo-j|5fzl7qH{i`SV`|9IyiJRagtpz%S3OSaA+mKnbvr
z(3xAUe?}Cih=M^;N^zdZBR~A<=>CS}0x6rN-@1JHR(%#LEl4)>AN}cJxkq%Ah*KBz
zcoPoIS#b`2+2e(<;8tpAsMl8``u%dOjR&9@BQb{|s~;VKwRgufI8l3|ZZGlxqLYge
z8qwtDqy?pEJtzv0RRy*!#Cn28ZdEmx%a&(}nA}pvad%+P9b?b#+%)};<qrb!-e>KN
zWt{D==4vbWHbbt-ISUqL?P+e_Gc)qhtT9`6y}GAk*W#_c&(gp2%a2~pE&)uRT=2Mf
z!J13=-7#&`&U54LT$loKNBzdiRW+twH1S&al_9@R(YJc=Xfw{H{k8I~i+8o}d1cSm
z#<@GsQayeA4ko_fdieOoC;_~Z7B;&{bddRf)qM$k8^zi8&g`Z8T4`n7vQEo~WJ|K-
z+luWti5(}7bH|C}-1iANNr)lj;D!WJAmnO*aJD7Ta1|P$C6pFOxf@!V1m3ok5-60m
zkZAMG%*u}Kgwnq6_x^t0msmSHv$M0av(L;t&&=~Y|1|MyL12rBHcM1iGJ#$lG`OL+
z4kDJbKYvRv&p{OL$8LGtwM8MX%SvJvN5bPOFP@mJ2)hzWgIcjz#qjGtyz2ck(z#C`
znmhNQPXR+haO+^ExV^VT6F41juX0;VW~ZL)<2CuK1Ac?n7Vs2SJIwVOu7kI$jy?t&
zQE~l?m7W;HN~87&pQqW$L_VxTTuV2$k?md0K`ju%2w|vid4NC@T@4})JFs>S>2pX(
zqy^b0rw8!Z2criQ1SXHLAN%qlfO=S^1Bh5Ps2u#DXX@0RPH;m_qfWY&*D*A&UJnj5
z+Vt9Zxywew7uoTCMrAVdyx=jandqC=DXm^`KhGm(N?KCXnU@#f)G>cu0rs`Ff!^t%
zm1;A$Qu-yWplLPpi_RgL&d$t`tUvA-t>B1;hqOX_y|h<KA1$<VcAK`wVT6;x{(C;i
z3kX^OX^lBg4-r4Q(N~cD2dklh_P!M-E7H@v%??rH6%0x+U3#QU!9rFYQ9TSk1`LEs
z1@V1GQy(fR#)(E+HR7Jjs8(tYwF%E~G@H!X00E&7U4qC2AsKEBa{&G32t;!<@5k;l
zlTkXHaMPZDBgG2-`4FHd&FM}hI~QkP0D|s4ogn=#tujepSp+RCR+_*_otdsadrbO5
zXEy7A=4EgP&^v335}``F0RW)0SA>cpbuJ@(3Z>UwNVoN-AIasf7?=*A8z}FaxKP@#
z61<Yt;L_{H=mSRhmCpQ<bmebRANrflEX`I27R^{wRI+A4r^BIebxz$}9a}qZvfch4
zrpx=EY!CYd)j~~063W$RTEM{f*r`4NXAGk@2_@6mkq23UBxva{XWh;dXL(p8v|i9u
zs{;ZWv*e{6MDJD+5vu6Jh2RAsl49WH1SC?1a!F{G;Nb#0;w%(Or9NQo%JXSC6{`Tj
zAW*O>PV39-vIg`@r2@c!eWKTl<ciAC^)3%bmxV%Q6^{DLX*%PxnY|PD*+W7wh%x_K
zTP;tfOoFg{Igahxbr46U%$P9+N0(fF`I0-;U2Bz0i9?}Nt67WSVtS+=3<=4q)jEZv
zgi)^TQj4`3g~=EjpKjFfi%v*ioLICz+!+ACq|nsTheG8-5WOjeENp$NRroQ+nOg~J
zR^o(R(xhE4<AlyX1M1J6IB5x*@_r@#iTFu3<Ab87kJt4OY@;+)kLF^Gr!^hT$IGZS
zi1N2lH&frE_7OXKvZE5ng)kQmPXE??gLX8(E&g5Mx7`n*?78^+B#{5$_xq=1zkhL#
zuf4>}GF(mqY565$tQ=$q#4edL7X#g07oGs+K<c_UZ9wFlZohmt{sXsM962io^nlo<
zGRl8B-(}o6j_UIWKav_pEugNTZa}O+uGLb#NSS~Ky%tpRY)M=CjHOZpRt<MOV(mlL
z8;QKv+x9^@O;+lVmm|GmP{y6Z462O3CbD9$?q)7Qmizxej$;8e1xc)rkO=(Pnhf|o
zu8{uJJ}ikZ++|G!d<EfvjG2J)^kO$;Nq*3bg3Z&WUW0<yK;SiS9pUGMe7@;!i^5<`
zTAlzwrNyS!6dR_#D)I(H((=iDWYOU+dFi3#JT(PS+vEsUJ!?`d;t$m|ME0G+t1=5K
zXN)fmN0T$sGKvbWQw|v7eR2!Y_P{P4ak%5P*KWqFohTe$g&u?|aP1bt>Ydq*qUh;4
zJzV-crO4*=Eap)^BK&;L@||$IDeQqOMyzXc;EH(m(Gk;cJ}#@o;ueh)&3rW9g~CA@
z>JOu23Mo@M<;JE-d@6^Dht7z{{2+16M{}|^J6;7(_kJsKF7t?WM9m=W>${N1C09ey
z%HlzpQB>QEb;0u1fXY`ItTWo+WxZ$Bxhv8H<4Awq@I)!CrKj#GFggMzi^UXh7z_4H
z<qS^ggU@vO0^@$QPW<(4#@p9<M#p(ibL@&+3hEiQv|wCowEVJp0XzL@Uk<y!#ATE7
zFp5CBe=gI%cofh%fge8$W?;E5+*)3dukeI@<yYrINK%2xZ#R03VD{KRt5K;mwg$$|
zhS0H=_k)bJOuGiCcLU>W8(%ldUOjZ25j`8#Q&pmhn_4$WM{y46tKHIPvqis0&H+jT
zeK`W(QuY9wV}WWyJnU4w-%YfmLf$?-Da4!-Yzh)1JrRj^xqiwK^?$ja(s+*qaq+!&
zcNlMn4u!F*8{@?tMEdP(D7fayYv$uFgbAKNn*_oIzCgmdYayoLeW&yxm&YGST03`V
zUpSq8R^!v$uhDQBbokgltl_H8*R?))G)L|`a^w#_#Be+~BKMQ@jAS%iI(|mwLb9y6
zFVavK@<(EmW>ur!lf3~Ki%RurI1U}PAKQlAxuElPP5(7~Gc}2zE@21{+0S@xj|Xq@
z=U9O-X5}$U0Ez9stcC9P;k^ztKjI#hb9z!oe2M22#uFENN26zI5krW$LbJLm+1%u`
zI*s5DqqG)n=Qc=}eUVq(b$iQ!oi@OTy4I3Hi_0zYc|$$^O541N9XlplIDw_rtCy6H
z1~jXDa)5DO*3lS$Ij*JwoRyjMa7dRgRqC!_6>U&FJ>+A~c<WE5@7T*h-`M2LSYFI)
zL!FZsT}>UnNsAZmXcs4o8m`6!lu$p=Ob>CXLBvCyV9!%F#HUikUmcQYAO>bZ4TP<9
zOfvdvSiVA9k@oxgVA9Q)fN;~$X+&&=vPu_0(M))aX2{E~f!qN8iP5^O;qZdR#=y`R
z<J6c{(2y|*@C&_y6WcSMLr>~Cl}lmm+I+Zs+rIF`ROlX%AB}qRy(R7CMIy_qR4VY{
zH$$&@c4;yNR*z)qIR__*9$`K6dY;Rpw^m92xVCugs2BjOM%4z&+d8v{crBm}%4rHA
zaJ{GV(L1^hZ7=Ux(C7r#aC~?uzo35F>h3}%q`_CG7oUFNMnNgvF;n_}fUd05@;^m1
z1kn7qi9JizQXPnop)hJHUPi!DFe*7mNZ4l!_E1s+<gpE~L2`l}=UC&ifgBc)cxw#O
zy^8D}?5~a!fq)l*^#EJHlX04-<t;@ekV7FC7f=i0OsO;?vU;!MgW9qk1?u5k%$xnI
zv|kynOoad=Wg?Xj)`Y>+*?&ah99J1sfm70fP$|cy{G1LP{S9D%Rd0UUud_KUPoH1|
zX8;ZI)Lu`E<0i-fuZg}_&*)1v>4h+|qdfD0uP_n(#HRD*x8(tq^o_+5^tYP-x?OMa
z1xFd5pQCW+0S&B(ge&OjrrQcCAB@&Wv%E!2g}0(0m}0#(k#G`Z*i6J<Qq!fX4+ctL
zcMwFi8?9sVL$7QM!Vus93p}H2R<&~{U}4E(a7g<5h?e)OovFImgSCaXS%aV=e+=Tf
zz0!Vg%-=4U@_f=%FvdU1DA+^NjGyUQv*Bc<22{#ppqr=IndoaxL-GJ(VS+Mv0is6^
zO@(-^mDrl3ur`NCMg$^@BJmv(m;ZJkN5g2=!w_A5Y@JIJzyiS>v<3tiByJigOz~oF
zBt@Ss7`B4ZkeP6ArG;TsypA)$CxK?E@p6qxwPEUPpaQS&G@Come-9<81=WU()Wlas
z=zpG3YO5=0sUlpI2R5j6*D?!F7W<%={}G)m1I9-mmp*PB-X$${nkTGx7B~-IX$Boi
z{&86Oqp9w&(rhqmM1_?;yYeNipvoBjOOQVOlV_yorr&2?(wdbhVGW(+^Q^3tl7`br
z=H=-T&Vr(BBcm$jeh&7Om(#@>=_%FR&Sk&^EXy+wOkMaatS)e_pI~-6%~u{aGJLNd
z+4mTUU4Xd!7{SZMqp7T3N(KQd$LG{>y;yQerNyur>VYqeVV=Tb*b)l6kzj=v-LP7b
zJpAH;R0dXJ>^pD!!=HBS-2TPR?g?JLq3zIzr$EO^Z$o9|SNrzqT=`=+4KLBt>GX&#
zla^%1ww)L*z`_?7`F-~2vg$5JOP+TH_`$pT4jkC`?#_Sg@YH3Tf4~31Pd|Nda+@|V
zv-PO-+HAmjZ@mAFA9fD)?f*V}=XCXX>8aMWn}R~ut+rHkaGbr^Z5Us*;I<{TZHs#S
zW0ASTPDQ9Fnoq|O4<1B)jLW$Tz&IHMCE1&z3E&kkR)drg&lX{kO%ja*0&<AoILC?&
znk*Q*Gg2(x^{3r;UshhiSZjvd_4?}|`TAj~^28@rS}dyfLri<sRB%-yGInTtUdt92
zb7NDoDly7p1S9%S4&bv<Lv6}<X4S!it1f#$C@Qx6MtbF~w?Q^9R=@Vv%Vvo5^}ulX
zlJ+OUcSq(9pI{Y+4k-v4XAeoP2_;*~3qQYTPUwCA(L`@9+1rPp%%NlZ#oV-rZGEk>
zN)IPvdExaS?3oG@g&!Oc-6}G54&3fNFE-9~@!?oFXx0>{83k($Y#o1Wq>*J*ngW%@
zkFM~Ut>U#%p*Ls}I)A2kSfprpQO2)JXbn0AycU4Lt6|rOtbS5P;Pj%#B?>kJoGy&^
zkD7R|f3z?i>hsJNmqyfc!gVfIjEZcbpmh7)=ucrTU`23t@H!Zv^r#(HpmxBmkdkr0
zWJM-|J4hUGS#$7UP}Xb8*)z$_BsZH(>R5vU%8n)y@f>(L-M;nhN{3RXGc}l8sruG>
zO>pyQXVUpTuP|H9<HVrNTaBG#aArZ&=aY#hww;M>+qP}nwkDp~wrx8T+sP9@v8|nV
zYv1>++O68%`{DGdb8mm?TXpa0?th<OT4h$Ew0y1Hve(5xcY}DA)<9o;W6TE1+){kC
zLgxd#d6N9;c=y;-;CWrSHfC3t2YB|5G4aI`4^Qif%~Ez1mw_JgQe(A%GQbf{^n<nv
zQN7|mOD|jdpvNBWFBUtd7oHGLfXeAxrOhg0VbJNfhLvGG6j*BFDNz(qP%od@wccz{
z#*SP*40ClV@|MWe@gF7#ZX<L>K(sW3*xydMYL%wnEf8l88wnXm4nLs1$VF1F5C=m<
z^0OsOTsTCI{6`A{st_D%kTm&^5=GJIW^Y9UkVbiu{i@sYG83~Ws2;<>qZe*P#G8E-
znL~<9SX5X;dKeQTtz6N(b<u)Vi<(nzNTy|JYv5hDvr@4dbXBjHWETm$fw$z_=MslW
z5!{=RLfkg<oz<`l%`)C|@Xn@-cZ8_j_1cDhIp~%fAt8i}{{T$N(KNc$wl0=5T-G1k
zwffSaqC%A{3A9np#WE!gzw-3^?rNX*59yGs6a1Q;{1wzfE+smA=UcBNVn=a5aS)I+
zNEsn`#WO#$Uxo3^cH0_T%*7^hGX4Srn$wXMSB2)N+w3fa;s-u`c?{XdBA)@CYJ{<u
zpZ=Dfhl~4x1}KmpqA&f2NQ}^;44afy7D-?_<6lR`Nd71D`)_>r))Mh6VdCMgMcO#W
zmlgCpAM%=<uT+z{TwyGtHqSFQctMcQj*>GCZR~HrO(EF7dpp1UIy|O*d`jiF?{_kL
z1iLIm-L>4YyV1XBb&_g~0#eCdAnMD8i*VTrp|`PkKI|1gfG%-7F4~ly&yMp6J@*j^
zgf%n|udr@K609@35ia==-(d&*d}L_dE}ZIJ4*uIfC2j>*fw}99)|254Hj4T&b3Rv#
z0$21kaI*T-bA#ZnQ`R-QX|8A3&U@YXWKfAy0>@^B*~B#zv2wIgjsurBM#+4jTPdC_
z2>zH!lg84RpfJejhbqpwUihLt$mrnM#k!Zwb9I)v9bL!X8q?eJcfyu>K&S8F+K3wz
z&9wRHP<(CyMfQ7L{*N7ws%>_QU${8E9;Y1_51SC~FOwW|5AY0mFUQdvx0B*=RFe@5
z8`tuwWr;T)>lFQ%7KD;nSlchSy0N`u<@yHKTzdR0DGDiyDVD6d(lsUa1z(;68z8@>
z3bLPtSQquUnQ!nMxj5FXSXI-#d;V&v^wf&W8PO&<Y5tU%Bv_uC6GD?7-{vCg-JvlR
z761G*^7I(fi}@I}))4VqR9L*)l~PvRfH`sA6lDwrKe@w=WN9xbr@i=4j4O!Xr0V9C
zx;AbJO;q=4d<cT=Pvj>0s}Oh?TMy`5Ow!K#9=gNsf>B1mqqc`#*k+b^Ux~g)Sd(nm
z$5~c5?)IWe*|rJdwI;g^4V#6z`I*J)kXp@d*1Ee)XS0j_>tP_1(oAz4)XHck^{Fg{
zie54eQLKMM6jii_f()4k++#RJ8v)%kOA4IUmLeUDx@D=_6YtP)UE4eUGU}LmBMu!&
zT7r>6(6m8f?%+oSHAYpGAB%lSSNV9)f}ZZhSDM95%IDZIpR4m_F|>g1^ZSC13-!Ta
z-q;F6=$JOw-XwGt$9C(v$8^b!qwfRI)A+&i)b!aeI;-lLE~8HoK%MCBvKUR1CY8r(
z`m{Fiw=l*xz{E<02Z?w4-{XIyUQ<?g{Epg-C&jb4{8&x(-QkleOubghF+tMGgzoQ8
zt{R`dn7d<PQ0Rh8Id>C*D)}wPoQ$Go1EL*$TMoB6D5=ANd~KUtR;v!IxSJN+jziV|
zmS!+_d%q7SKA*o(Wc3?OsotPuLo|Q3lkd7rk56#)xw<@NuWR=0$Fj*tjV_0DfbnvG
zyBwIM=Pwyqi-q7hJm3~_Q3PQPi0d=`%7TrQ<*K}ZdX7op#|xOXc|VtU!aK#*`rgWE
zGC$RqZIx3tuxO3II@?ky=`?k#cmQ)xwDVH2P*AW~bk<R6AP|>DdjC6o@PHM(I8eC5
z8I&o#Ev{7R3FC&q{x{q#q1_uPteoE)z%kk|3)1)+%QR81$CeQ#vJyHUzr9c(yH*S;
zXHLZdSwyZ2FY-5u!p3V)G=fi)m>%RoZb#D%+YQ&%(PgdS4gXT#p({<LlKRpqKy{1r
z$<~Lg+*`F8CQensZmlcp(Hf6C`iCgJ4nMVe$JCm#{gbeozfw{}U#ZVVZn#$jxyIMV
zDdmRtM>qULZMb`r%^z-PN@ZHb(2E7iv4!K0)6>CNc(zsDhH6!AvTZT6rmJPP_DWbA
z<{-5uZf<k@JBz={U!h<PJ53kFb4e4XoOaO+D(THTb0e;Zd|MBh+VF-$I~P)c#XK#-
zZ<mef9fgU}SqtiFM&_;r#RP=wFJ@ouAK)>0^$XDPj8qJcJ-r1G=wU7Mmj%QoY9+Cm
zchaL}2pl7Ue5Miam&AHWELLunG}Nr4fjwI+!$>&!F36<1!w`^^vBS#M7O*wtpkhb~
zEvWUsQ{$fY?5Z6jlTxrWIZ*40yeg~qvSdZlw3RHZ?DYe#mEFCqeAIk=soNfQ9;c^M
zxx={MY5G0Nt;8gaG`^j<Hr2vw)7%;qu9Y^GaB8kVx-0qkD{D&ZWUZij?sSs{8@mfM
z?yOAIUYp%6r*1wB=T@g$>$24K&1CQYUVIAFsI4tYsRF@FEPdGmIC~zQRn?X4RF=L}
zl@4f-N7CE;^LI?Jm*dDB6YfEailXZa(=H}RB7Oo(tBBQu5Q|j`4MiDnWA=4TtMFR}
zMt*{0eRU)3hU&l-s(TSv=c|cD)S3>473l<nfa{2(N369(43;+vg^6rGVr;7OvLXg{
z7mV1^23oazmQacClz0H22F<g#bl2qj-lHp>@#AB`e`g_X_5Y#im(eBKSc#gnwTp&~
zlF!RU3z|d$#`<YY=lATiFXPNUGcMLTC$$<S|3YAPBgmUo8S7T9&Tk_2{$7hp73ha-
z+r73Ae7>ZKws~>EdQ0&?#A_%mdDaM355}(EG)PU;IQD=d;9m%u2vb%`y+?bO5_m`8
zIV$y4{W($SWX(qM%LY!3X6gqGKBN#%7!zxm^O`try(?0&7mbvBgjZq2pOqoTcsVT-
z&7z#6kAgeLNQ7mu3sVjL(hw&a8f|c6pk0G8A+D9}WR#wrp%BJ4oVNaL50q?waq3Ru
zjIZV!x-p53+rR10fh#AXu=$cFzYbzK`KgI{?H3}W4@@;m@x+7P@!|~z!W~E_Aq(sf
z+EkvGKl!ZWHH+dca#Faj9VQk6x}J_9hib5d7S58hx&31bZCBjU==_BZ-a9(jqxo?e
zp63aJgUoMKgC5w{Uik1&YM(d!xravA`p>3$!Mft4X}qm>=9kA`7KHEje0f9Y41r|`
zxjx4SSs1bwYiue4z*ovXTXY$Lp+*zL`iDGXa0ABvah3sSy!4qSvL<u@JbDlO)<nHB
zw!&&$#1=XooJvD-QC;z=9bB6;?(`tf`WJ6DZ0yIuL?zYbDwF2T{X|tkr0pr}R210>
zi4oE93d9LC*i5>_a_+(tc$zzf@x10>&N0em3BhB#c6tT=^LWnn*6%L>WKwNc)t+rQ
zkvX0nkc1p}+fPDKlgnqO9))~2p-lM*`z|BV$i-YEE}aSNO5b-3KN@q}DT4K_e8v@J
zcLrrGHc51`i^5~-k|M!FRatDw)EcxQZ_+9#A36He4}Vxf4U7Y~&V>G!-fxDO-rHqT
z49hO&!@6W1nW-*_a65r-gHijG7F%WJ&PnDs4N6qIG_BK1dj2Ij$ls2GK=nD86DlE}
z)ch#Ma*jpZxhi_$I$FNdDtsm{(_*Kc?$L#rFgvNyqE_m8fvOEKtffn6<|f~ZUFvqm
z)b^(V^&w#d3JKzS(pSqET;bRPbt9iW%8Mcp$(^51!Dc4_W$#ZX+`eD*3W!IIiy+2l
zD?Td@N0H288#Eot5>7@&Mh!*DRkrcz+R6#ivD<e^bUOZnFK<-~IuGk<j~LMe>OeX$
z)r)yslFRGsKoOETT0CzL#$Jp0YU$Am4w@A6o}`NGmU0W;>aj3~KVNevfj`oz9VcEu
zmN1ni_8b=S$d9fU$xOiXxBPV?NrQfa>+JujpvU(BTkFc>9Ve7{^%xEVZFYmkgiY&j
zF)B|@7A?`Hw_iK|4j~sqdvFsUeY?8O0~PTv$~ZcgHMsBHX89__fSgS@o_2p`JIv@^
z`K)BP)XgRa|6S1?fC@WRh3PH4+TVd?V~LjU6~amUI6>4ADv_EatsJgD8`DD_XAqUO
z%F6$^p%QDu9t|r5+m6z#o3+RuUS|I$>;3Wj7Z@63K<~Sn$mCiBUATtF_1hleo)I?u
z2b!c*o0P!UInl@<>?5-xXl44EbtHN8Yj7r+J6whffhCiU9Q1rvT!eE<Slu|;b|gBf
zhh%&}_+Qi1Eq|e!+o$kZj*yWofdC>6qqxD&WC{NmYTtXg0En8yr=}tO&trS7RpmF}
zm4iOSkheF&p*0^;{Kzkz%|K8Q{Z5Ub0pn818f8dO2Z(;g6L=R>%s*bN?Ecy!x04*X
zJ~yLj(YU3t@v#Ih+f8G6|K>o6oThpgg;KcB7u{-|Z!0-I?DD~R=h7DTUM}}~*L?x2
z#~f`_w99r|T!csB9MikdVOx{FE@#Ibd7vzPR;Uc0M@=0Z&#zhLW&yD5f8!s$-yg}D
z`15IuLN;VTcpeL^5P&cy)Em1tby%qDy_X$!o4H_6GX?W0sU5{Gp(~6Tgd-2JlHS6z
zq0oHM78<Rs>NAiE$jba(d6!?1zqlIe{F6@c)m?u52=}_ihpo4lLROP&QO;Sy<IPR<
zlO*k(++1$&+-1*3h=Y0`m3fV&$I*XRJh+Ft-hKl5$u&$RWoRZT7#P42(AHiPS29jH
zFO5ijhXD0Ta`g`+1+!}pWs6OdDtdLXWEYFyaYkN)@cXFP?2LJnek)|BO1HHHg@~?-
zb9)(GT-={5T+cBe(~@1T_EmjXxnKNR$0P1{z*Pwe*}ouyUyB}FlR-tXAA2*l5_a<I
zTlu(dGnrkDJZvutiI^o{azE`&1;0*EpVD`Xc^DzXxfR~%7?OR~l1&ARkd^dJ&Jq6{
zm!HFipSunb4}s?4GL1}R(aQJ%jqDKkODH_4XWjTDu2G6qpG%rZ|2W<u`#%uIh}zU*
z29>^|q?rb-fC3u?Hum6}s)Tmt{n3h{6<NFSyavy-hrR1oyLXUwdxPhR1|AB$c6#=j
z%2rVSsNo{%Q?gUBQ;P+L7%{eKG5VpHnGqNJv{ufIG<O8(7T03@wC^9H1fED}J<hK;
zxVfKi8z;qi4Aunm8$1M4O3D}Zf1^pmc`EWya1{#K!}KMHCXqVCyus#Q5udbr6R$0L
z^U3GW)ezl;8;ipmA2cHC6Q%>Sd{7)xQHHS!S%gy8ZU&)D*t)a|wNOZ$`f=!i|Ni>o
z!3?37a%L9klEJSXt3OyDo8)`&^$AeAA6X_>bdmEw?6{i}Yo5Di2$~{3=t~y}yxZp4
zxoj2h!xhm=u&n(4v;?VJRf(n+^c1LimCvDbfEe!M*<4ZLuIQS(aD_^ClPjaT<DlWy
zC|bo(S2YP9Sz_tK?sm(U<FL)xIBLYI^CL^C(*+i4E7Eie->0y2u{p+(<*hh?%h%(_
zK#dOnhyax5Z8}}xp2j=G<cV&=vpa>*;58Nz;x)LbTgGUW>?McY-p>E25LQQBjC%U>
zM%^=QTm=pXCbK=zY1vHA*;G3|)tJCu9-V8Dr{89Jn`!D*yp+F`t|$BthDSB>Rs2s+
zZPgOX!V$mKC-+a(zw>0(LJ;D=ruj%HIB|Rsy+T_+hf_6Qjdn-4M(g+BX!QLU&dYob
zTY(fG%8A@n(HO;B4(^NR6WB5S^L;1hZ~gO@f7(dGGtW<2Ykj(DLA1sfQ%L&WP`<%{
z0Yc0O)&&#mvRFbG95)zsGQIadoZmYjTYgj_KWb;&l2R{7DSjeQr!0QTl*B?8;c7BP
z720x2N={`-XZ_B*VPy(!#u6j8@Cpe)il?1c<5QdFlVbxmm!4whdzVV6-<=bm@JUPv
z*na4<Yzi9$*r%Ae%WbZpWDZJcRhrstrds5#-z7h=0rI#Tu?dD6Y>&(xb8K}*;B3G0
z%6Yo^-@om)2Obx`rMD+hQ@<ZO4FWy`%8ozJYf0}Lb>DkCi#iSk>NwusJ*@e>N22Dx
zonqnruw*?;pna+wO2w5>%jvD@TavZq^rY-c><itMe9Yo8^H((t(TdG%JA6%M{zywV
z8(+w#yGTtRUIZ%l-0m<^m4QQ+A<lf$JwNY^!NaWcs8wFbQFm2}lu#4Ut2R&RwV(5b
zVV{Q0!k>HB6k+N8O+$ApOAu5)oZd-O*-2pwt^oc0$s$ehCgF^23VTTP8AltR8*&y@
zX{3Sf@nyAAuLnCzB98C!h)-v<nqZtF%`JMB<vh<M6$N}vt)ifphSp0Crqg-%eT1k$
z2~Ouuwk~2P@p>0ObGJrxV|e`eXmX}?F@SmP`Pkq)tk}a4{#7otu~VQ+i4YY*KcJ@`
zf=7@mnTkFSK1|$ss=)5_=PlK_x8`Huw8yDd!aYt?fK&#)0<(F|iDfE1n>?v01h44d
z2Wq#&*Oc4T9$$*Q3xl2jJBJW?`AoP)+xs`TvEV5j`ClET-h+<Z=qvvNgVJ#YFo}5n
z`ZI`+(B;DRCCe6^JpIRhr5iBcX|ziZR=woJOH@R|*+IP`@Ei}rqr$YYPb`-S@Hl-}
zhp|4{Ki@xRBi-<+)P)ah!*S$m65P5yNoP>hXJDtW*g>m$_rKTtyg+W9LQRHvN%fB<
zwg}ZR<scTQNN1lj)Y8oiyw-FG`lCidyGWl5J!Pn*pA1y&1@qXw??g|t(@&U!i{|J)
zFZm$E^$dv=FMPftAMWBgviTYD1M@Bqh~>Z_z`aN8%2ugfmIWXlrk?}X-m{v@I0SmU
z?iT@oLMxczO-(N~wV}#1bz81VH8upLTQ6Ex%2I~l2R1@ozexcHh$M1aACKc?DwbV6
z?puFBKYF`#L7U_f@;ZH~c+gu4LMXE5s+W=Y52u5qh4Uh-5;6tsMM^f=<!hn!f-KPY
z5APD|5vS8nBLCy#`=z(G2qze|M!^#4OQ7b{16=Hvg-+>?L6NdpqBO*+v+=?4;;Qq<
zO5d?>(xm&yk4(g$neRl&W~{Q=V!I+cu?a`!Z~|M~2Ku1RTp*it${|M_{{1}^6aP|l
zqsXiKYe5wp))f_G!x%wU?|-rYF0@+M<<lxuIWyz}LrPE5>qQ{w`ezR;XuXcRGlEj-
zJrJhYv9mija`6^MNF&d{{o`tFl^$KT>>nNyfjEyKRK%14g@<aYAYb#(uz+XDl@E_<
zWxRlTg?qjcdYJoiK4*9JcU9lJ-MX`rIB>VrweM}>od3JkU`wdw154l}2<q@8Uy+T{
zU*6}I0uoV|+rdEBJEfo#>Th+A32y-zT&N$i4k5(th4d*~>pKcBZ#rz!x<SxE+WxAS
zGCOG};Ton*vURb)cu!c3tShkP9At8$)M-tAW@A;<c_`GU?)Nd#=`nZ<)T1Y{SS!dY
zHvqJPapz{(nP}%!6my<4_;G5Xpg!JG!$=ENC(jZ1qc_fpe%>)e$@xayog3zro17Sh
z4_m2sCTc}db1WZ}+>C^~bgj^j@#$yP3Z~^!XR%ObVf`HpgoE0R&nHeFd-44E0C)B<
zjVM_AP8$n)6f>P&1`?WA(BeGpbf2V74}Y!Uf?|PUQ4lD?oU0N<nKoywdBfr~6iRL)
zG`B^p5H2FDQjK~QHPxc<cu4*x`P<3MT^Sw|NQ%A#6?F_8X8wXrv-+VIt#(c@gXZ{;
zGWE%JvH1K5X#q65uwZ$b<nD)1i$QA%+xd^To89>cUpT*pv2jcr5rgVW7ji>ZjPw{=
z09}|c@xBHM&xf|1<oV(oTW0-eA5Iw!8l;nSDdnMU7T3T9f*`DglGZ~ZmjZK!9(R+q
z=0?66n4+?AT)C<j{;iXas&64JQx{o@1v7fIhW3(hE`DG;>h__r<;lbOq+6kp6z!Rh
zak@|q(|V<7k>YuHHcGvBDwHp&CV!jj&QYy!+`+-0x3f`5kH5Jm@?lXu)|*E87xMO%
z>FoZr@B^JP8~Gu<ZkjPjmT15Iy!a&Ng7Yj%k1-0)u#!iGVpI=iEhcY0FlCJ{(kip3
z<I9+g03V*)h|c!}@Q_*3F|YToAG~S3<ZMcBW5ZO2aedY77!0g(SyN<d_<6}_77hum
z4%W0_Fxv1Ya#{V_FI$g!j*#Iw$B(j>GhZte780f!AgQHB6E|7KC&ecmY$HJ=?<?i%
z;&!mB=)IW9+}2tMmd6{-C06a&7cY(MmD5>OPON5Sa@+OxDNJpI!mhe8s!VE8o>vVW
zDLkZzK&(EdtJ0jn5oAfUS{utL<D}uxdBnMR#IR4vP*jv3(Vej8_wP}GOu0xZdq_I;
zn=Z*kaHldGRa+1srs&)yC{ou*OCbH_=+dbL*l|Z_wD2?j_5OUE-Hv&S)$3j5rl!cA
zfhF+db!5iPl<D#=fFKy0KyC4B7csu7)VnLqt#{9FI<A*JWN}q2PYC$G1;Om~`_*p!
zm2)oA%l75_%XpAjfTijyI8Oy?kn7K@R%FWZ1bxWIPVuS%^SOFfX~~P)&9;%F$8$dq
zDTpgUIy;=^)dA&_lY+vOPm0WW+GPBe{b@=jG;;k(Q5ZxTrs_ooz&to$8ltdrVs(D)
z9)fUC+5joms$O551Tg;|(GbK&z&j_mwh((Vn7u1A-<yy(#0Xx<COsyIb`-LLXA&CG
z2olmxVh%rMU8F&;eZ+KS2ZF!Q{BEb8iH&KxiuoF~eenhFAWe9&N%d)0pkv^&``ju9
za|fFY=Xb<_SnFW^fZj{f>;JK0sQ9pnt@r9g)paR(*m;RNw3oHo>scyh;qdi&Ueddl
z6GS9FX$2Zt9Q#Ft!&^9nF`~z6N&}1Y7ll7eF@O<l+2q$|_K|m<2g6OsU%fuQPZvR&
zt)?_y);~`@bUk2IIluBGQ#`g<!Bfpg#l)<xL6JOd4uY>LJAM;m#1#b5V5wHn!P~I~
zp&O_>{Rt=6$rYknGe4aEnVE3~wisT{wlYUs4@%kAf}h6UL2F>AF>eSn7yL2`k>lP~
z%H?`FodpY9Am%XZ!pTal5IgAe9$SakZJWAS=1>70+bL@;zRTdLKh!h!728;-pHM)K
z60cIB$O#o2j?VvrHYY?L*fGV;J-r?TNu-{{A;NM?EXr;Qf(tPM`~g)%tT~3{>%}b=
z)?h%!QB*V!WnrT?M6PO=WwHSLR98s(rD%XQ#bUEeT~G4*VNlFa?7$!3O91;&iIkN7
z4S@yKIgtF1iZ#i!8Q}au@sDx<s>y#CzfiWoQ1VQ6D%sT)gYUK2RL1}Qe!8lCUuDg@
z(Dkh<Xu10``eYyN_Eb~W%HV(8FZ<$kE0SWAwr-@>z*?kX6*3Sk=%0&W8qjfiitY7#
zS|aE%cYJtU`_jp(igde#%Q0SLQgHV6<c56C#kv2ImtThIc)m~O8IK1<`s-=*`B=32
z;JSm>Kgo4@x4)PiBZc>|)gs{YO~G9@{A!&?KkZR!982U0^cF{&Z~jzY+)mifl<-j`
z3We66@JaEvr^H1E^Q}NE;&IrVrn;#A(Hev$iT;;B456MqC0l;q(JnHxKqV!o2im)A
z2@3>zB-7iKj^xjBf{+1#SYN=i?KcPZ2Ns6FMfH!ee44xf3CeS%(YX(HNWUx{#yYCa
zz0rDBbeKh<B6OSGP~*V0oTYu6;gP66C2pFbS89*HUZ~Vt!Rv?5@;OFAVy8u``f<zx
zQ}A3HV0Fqm8rCzA-}x~f1zWF{!R|O&r@>o@BIyFSo(sxqv}@??{kUsl5f^7tzPz_U
z?(cqu9~GEdb`U4#LBWre^vx_IMB6MX=p1m@ti1h`5b0?Fe^C8^dxa@-eZlGi!!%Wh
z>TnMHLOBBY%y-6fA3afIUZ4SAWIm!+-54175ZeevSF_&xQWQo9AMubGn@NY^3m#m$
zM_7UIEgLIF;teZh$-lEdt;wfG-snS0F_*K%JaU=W<kx7kP{99*hS}I&TrN+6N!sJa
zQQqw;w9wEcblV@iHn<Pc58?FMU|BaEGZm3lFABk!6itDSFiQ=Zgc3>48o|g5E37Fl
zexM%cm+P?W<hy)yz1tNiVbQ1Gf}2hVIaC~Cvs$qvQQQ`n-4rD6j36C{7wj=`S{2}8
zh%g)9`TD4KDBF?4J-a0RT%D-jaSeTXWYTIQcydJKx0{r|pDve8S|@OP^X*!$Pg1EB
z^^&gw)`ujo<2Br!3_?SQP)K;M=jaztDEo0!&^RWp#os0=B6PaE;N-Y}@0AxMCvfSB
zu(A&==PmRGn1;vQ0p}OB>*e@%rt&(-egFq1_9CjEq)o>TL6j#~txmn$UL`Zl#-5UR
z*Z~btbX}lpktV87Kn2416yyrcm7^=zmeiI+mQerEZL5}imL!(2AL7;^%Me1%B#m%%
z_Vc}PqOqDUu3@tHTtq{Ol!MihHOQ1rnFetv?)h@vlw&9v43<EN&Oo@3E4DfzR@zXd
z(uQGTNIJ=4nhsZZ3K>&Ix8ndQrASFZYsLvQa=k&x5{9vkjk<6^pWHP87tNU<<#jYv
znbf(9aSU~ix?wq%gfg$xG5)z_n3hZzD7^msX3Hfi57UBWBt(qgCYjsFr~$B(UaklT
zGvK;~>r*jyCsP=hU>vuZo*4}lZ2tB?E#}T`S?wGLf8*?6&X>;<+dwZBNo|=5OQa&R
zqKgRQM7WHziA-WDXc_lfJJdi<y>HfY^0~_ymDBepGuYnQZ$AU;_cmAMqMRnoqn|IN
za~5cmttM`bMh{(>n++McGkmb4wQi_r&0YN68-%W1mvG?TRPjH;nShV&IOWU&^E6^i
zN9yQlA(pw=hwCN^d^ovaLCC^_V3`F4scH>)@R}j$Krd1guI5t9g8NbUw!nfWY|Giz
zU^SSQxYY<*gGv!08%d{c{u0<wxP{f3yLB&Vy33ATI)SMfDT<gsykW?MKvn5q>CEmC
zqok%mO-#iVmW;4C=~~2oe2uyG*T##|jMb)Jk@DM7S%|93wgz14Twi~sZ8ioGGkWbp
z3yORQbnWRE3);vfRE5%n84Fj<LtU2535PUcd}&QeFuBj>ZFsWX_(j~acSh&Lb9Um+
zT(o7eA1e2gH68;%RAKj8K|nw}vrP<54Gj&Ac=`5x#Y}norZph#-64_MjeS>sihqB9
z=LIGGfge6HG&BY|0|7Dp1-ts6eN0|v`}_MRZU}#JVq*uAj0alLfcU^b%>26_t1e@M
zCWKV$^}rjGMH`OJ2Cgn8n@k&34ir1CC+LYJfQuyA7b6L#aIyZt{z4om>XYuSQDaf#
z+igy&mf^4L>g?QEPMTV@*f)4fq<j@qT?p878)&}aQ&{;y;UmCn;_H^npCN1HfmM5;
zN8>u{ah)-Rb*R5{YA;H^=x4L}?7bWTJM#gafp<|CtL8URQHJHfb(q8bfIkzRjPi8E
zbMR8VCO%i53l-dWqL7W)!85X@iGZepxh#AXr{ft}G->vWSuNRN5^Sw(N`&AoGqn9r
zW?ij-z<zc&G*_dhw-1U(6n`GH0!!?sSW6!D=irB^*<E`YmJV1S-(_;Dhgc1_OO4rC
zg%q2^=uocmcEp-QcHQt@7@vyphhi6`3(AbI24O7C%XlY74D>1>BhXKWad5}>P%oBA
zee$ustjIrTy}3#J#9{C~Y)5W=Y{|Lsq2}=SZQL~v=p;qh+u$8)mV&;8?DObZjaP?d
zlSB6~;@#)mi!BFgbrwVU_U8reVvKW{6N?`>pSwu^2S(U{NFC~>B%(N9H}Y74d)g)3
zZJyx0)xE9r9{sy>F>AL-$z3zT{X(7kOKIbUt*QE8b(Ac`mrjq_)4BW?`0gpA#!?^R
zkwYi?Y|@*RgA1-ktcN#ujrZ5qnNnSaRw&rL)@L3|>%ge;r`OcE3{eEXz}`L0uWR9$
zs+ecrFX_+T8gJ`TsFpW^kRx`87d^oqHBq`g#R&IletSSyj9WiXNXv@G^Ckpvi9n&I
z4$vcKCa%>x*Oa_^sk>$?m=jV<eMfxt`wX$C+)W^r;@mE#EAT#X<{EyA;<)jHi4*p7
z{E5HWBjD*x<YOpP*Stfnw9CY=;QGa%Z6<)=^%>1}dKxp*&ViPG*)QjrQ0uzjuF1Jv
zXGJC_;B;)tT=x;mtF7=;xK9G%(raUopur&}_j*-Cr>VT}>l7Yvy|L{Je$yw0GAkws
z({puNd#LNzjcUrfjpn^`&F~20d+V89lIo*6Yk@bmJ9{8c-w}?4V>K=O$21DbnD_uG
zx`U<3DoZZ>w^<D7Y6ojtjodijApr%eGh#<Xf>kZ?h1vH@z<Kub>sRmWeMk51_3XW$
z{6b#<!8a&VV#QAkN%kM6l3~F@xvHG1)MqfYk|Pq*WTQWxWE%DV!e=Mq6&5dml`umq
zYwb+lUP)?=jVOCLQ_mF%m#R9EP$p2%*EOc8mSi7_=Bjk6x;3lP{T!BBK0TT8hQG7M
zfO4!9V@SgWk#9LD;m%do!<<OL(r90XO+K@bv45}y;qbWIQb~|NjF(vOd2j$CdiD|`
ztlf(?ok&;wlQIugK=btgjz+pTT6*@*b7<L)JQf)R<ykn{MatsA^5bU7E4cL8PEL8y
z4*%86l=KH$LG#~$-B^$4(|ErpT`S~(yg(^-xiKU#v=n&YwnHh?B)qg<v>f#CIbAjt
z6P>vW21pQAs1%~f%33&g=J&z!b^+caq?CVV3j<cs@%3&iaCy6!Lav70EP4wrp7YHW
zd@sbdcV3pD4BixZ;A)K=Pi1rkKCUF<<13Kk;y@1(`^SR9Ky@L*KxPI2s#ZVQBIaDM
zwjv7rIGeD9c99)%pxYEG1fo7>*9fQAU+`x8@}IG0l)>+R6Fti~k1A0lx}g3RIM5<g
z*z%ZP06%8>(;_7glACnP7_}~@6adqq0^mZA6_}&IxmpA;=6qmVEhr4nnmS-`F-<Xr
z_pE2fYrc#$V!-BUt{8Krxc~(svN>5tm1q#+j|T$?PMrAf4f?AwxMiXNosq8}vUMXb
zO`+a0>pD>$lj&N#?|pz-XI2J@AsF-4AGtIctJG(tjw|X1J|rzDx6bg_HqON@584r<
zZc|Lq_EOpBkDkrB*Ct?F95?v3fxF_~cBU9v>67Lk8?xJUOB=z2I$RMtdpWW@?E7s4
zRz7b!7l9HmnI44>nA{#J4u~vU5rpqI)&d{OrzugpP&YRq+=%-DI2Ppa{1HI6NbZOV
z7w~^1K$(ciykWeO6D3!?kO0V*xT0^)d!C>bR9=OJ1JZMfd0!X>`KADzz8Szf_T3C~
znXIct;U1pN3BZlOVRmTmN3U+a1V(og!1vEuG_X4~b@D>*III1~NmaGMP};d=`%K4p
z_yPRB1M`8-@OGgG!g<>(#&uv95$5idQ|kA=?2g4XXfLnm;xA{ydwjlu2#OnDX@CBm
z6P0spi+!#h{kf(<hZ2xDhWTfd9frMcnCUuAA3a@hbh9YiM5;H*Qq5l3Teu7qFf-{?
zFj!M*t_e;wNE$O~pYh~9YI<C{gK>v3&y2fMW^`Xc_EpyySuzem+avva!P373*kzO%
zl_qADVt-W;Q=It8RE7v|s-@)V&Q^_Q!@4(ySBYEcx6a~{oy=xa2p%K;wjYhRLrr=r
z77@>iBZKV3){V2?f=e;$Lo@GGbC8v0RKa-^SP_sOL=)`tW?($rhr}C{%F=MY@l1lx
zHMwQV;v%(cmeSo`3ck-X3-R*wmleSZnow{;6?L)nx(bQ>1kkf=1LpV?$&=d&9N#JN
zkT#PDdb&ZFdgd2!uipR;g!@BtTbKl&Yq0T2rwVmnRLo$2S7<LVR5Qo|GscYw(+M~;
z`JqA6@F5E{9PvdTIJaKm%~eOj=vIgF?@PE0r$f;@ym<aAYL=jG=qZ;UEV+?&N#*Z+
zw@G{K8K0DQWq@5(e~BiJ*e$}0^9PQ=U0K%Y;Z3a<9Fe~D>@2RsvD@tE+Kwr2f|e81
zE+oC^^0xGLvMDEMoV3PPxY<;up%>MRqbW0p9*sgXbiaTc%6nWs6u>0DDT?#%zDM^<
zh)WBOgN6$R%B>l^?#f*+M$b90FYcN2Lvr5_mcU-jgn7qtHvRI#VQd#aI|3gl6Qly;
z=ds|hid)~BrR{SQz<~EW=pexLp5a05jgbFJ^ock~2EP;0Z}f&|#DG67vF97}hW)@h
zW2^9wR74!uvp97M*E8dsI<v1te)7os!Jx<jt6PlW5!NBvGwIk7g}6FC89oO8WdAm?
z6}(FKaMUjl!Qz(1?*a6R*!9>;kB;w{2;6uscO&$Bo==Vl=lyuYwL=8lCv-==e5ZFR
zy!huiUgZs5Qt=-RU1QtKdIbboKn$bhhxrV3AJTRgj%B^?yM<TZCbrBphVh!hBBsze
zOSk@m<v_2<+->ef*`D&QH_A62X}V0M)&MAU{=7&Be%INeD`-&=u2<GJE*F|r-FJ<W
zuV)qz>8+3{x3agKlm6|5oa`0x?IBu!8}8&wv||)m$zgk@UH3RJ<@01ORv*&UQkbKZ
zZfy{tOt4F&Jx3=#pY~UA&gvR}OT30%#Xtzm^tUHcX(ijzM!xP7WCy{w+cyKNn2&qT
zcNFx8dVwhWAp8I`>&bKdul$mGigY4>2IPmV;MC7hI5-4DelQSxN>I6fxnfGvt~II<
z+GyW)v7Ak@;k<Hpf{^Gy^mcPHMli>wz^R<2@y`;CGj<-SRPrt(_rwGn1Hl`JVH!fg
zZp`inHE_ZK2MQC^24OkLV-AbskJp)Xi26(3u#nfWG2BUnzb~fiV$i#^n2v}7beKx+
z1lsxor7CUR((g;o&<xuasjH5wehyyv9$O5llb(RD`tBf!ut2TseQu9B+0kr#+r1pK
zv^IVndH_?e4!!ZD6I~qu+HKk^<!Lol<^|Z@(j9K+VeW<hyp8y;|CN7BcMxXSkGKTm
zP;4~ghq;LGekNgABB`=saO7DCcclS@r@cR5a4+aG`Wfp|wTU)Y__yS73-hugJ-rxX
zd!kW`jK9r|+Zvm$e;YC)9aEx8n=8wiibmj^OJOneFNw-99Y$$q0u8B~T*u|2Qwc_^
ziA?F6O&xfDs$FgNV{eo%z9Xq!Z8YZqe#kjT^DN<5TzWfd+BMryU`~ry`E|vdh^vXW
zyy^w<S@Qtu8kaD$Wl~10NS?aE>WoEq=slB!NlQ#ikGxR3$aC@ytiRrm4@;Gf`0*F6
z2Rn6_6BSmEXX&E2NVFqL?KGOhnypc<6EAf|rP`0X;wmy!tPo7orDiH<Qsye={HQRB
zrcEVI2D>VlDfB8)wZs14g`Y`>YFE8D+t!j+#PKjUg{YS{_IVdIx7*Li&5~fuqR0}m
zzAGQmTp66he@C8Tn*nY3D&PF|^*Q6OM^3**Z@4PFG*A}3z6qH=LB+^39&TZ0qt}o<
zv;8z6To1+@-PAISDX=w5+oqD&QnP6l3^Ou%8n;{7Qt4ue7$>LxUGW)DOnrV+Q}yu~
zmBml8#~&{K@(ZNfz1w~c8dOxWpM3%^IG728XeIX2dU>7nZYF1`OEnd^%55d~kl?|r
zrbMt@<3mVj`9Fske-zcjr4GSpLgNmM)<fIEWDOkGL)b#=46M|{cSE;^T^jnVfx3t0
z7+S1BxQA^UdaQvxh4vUatU*16F=0iZBp3XEOjitpP7nPw4B!Mo2n_)ka)PT5pvexw
zO$`<}V&Nf3^#5^0!-F5|Z*auJL!{{c?TC^MSJq$Qh?9+A(VyXnkqv*+-=P?C-yiI4
z&H5;A4URJh4nb!r0%fZSujiN#<>xpM!UhllAr@tXx~~U`uE&^(fCUJ*|D+F>0Vub_
z(MQk#q}yR?!)*ZC?Fh9IxB&5XX!~#-fO<Q;eFP6cz8&@|+y|iFj(8OT1rYN5Nf0gp
zQ1XN$h@b#SdBWs|TL82?5pp9i0b-ue`r#S?HBXjqh#eS*khUQnK+X-lCr3Bb4(xTv
z^AHpu<c9c#u^W;wD1LAZaBu_tLh1{{|Bv=HJ9q-Pzkzrm=|(UJW*E`{RNb(>aQlMw
zLhlAU40!;$ZunmKKS2C{3Ir1lDFDiDSYEh3e)vQ81se=G0NQRKKM?#80|EsG^8m9q
zm@hOR@LveufdPYkfZZFy7lu+Kq(6+Y*i*&`_Z9e#KVdb8jqnDPbi*f|AZmwW9Zj~t
zIYy=(UABI-4c9o@Y(egZZtlCc^IZk<?8~>aTm^US+qd&v1^Mjjw{u*DyzgVhnLtl!
z3W3R0?}N+l`?m`a1VZf#c`_0NS2@CzIYC<7D)Pc1j{Ulk<b{bJHM!B`MTj3my%FW5
zdgRWHDFak^;^f9z05Uu=a$`>b9hyV;bA#OM^}k_s)<zLF+HtyohKTRL!U&tWF%Xd$
zM}!k6P)sMf+;~htm?yG+Od6oX6I(w{1CZj0t{=M!Xz|3?kLLiydZO;cv;k^7ad+Z8
z06CtRJF(Az9#6uZctk+R3le`!JfP?Wi$6{Qko1DaA3F<Zdcot5X8=UMp!CMn0jgfi
zePMgicf%dVJODhmdN20Ah`pG*5!Yjg0H|A$7b9Qzf1^JVzc+S^`Xcp#=8q!~k~cED
zcXA8+BIb+V7iutC2hg~+d2#!I^hfOr+a0|Ic-;ED_<ewWAq9jAjOGCpZY^G1J|MnO
z0>b)6cL5H!@E`bJ1pi*tu)tp4EyIh(2ksaCchL86z+T_2z>9%2G7^eXCUbHL-jP)#
zjB2qFPJxp4zZG|gn&MbXlZ{aJl4(nqjo{Ye8cUmv@Ey_31@~sYOF^Cm`DT_&;jRVy
zW}ZtSp9TG9j!TjE1*}+=-+xt!Lu4x#z~vVFn+5O%p%#Q(8S#ayETc-T!p%<=xnmH@
zegP%9qvA?UfSTNKab>7LQSRUJr7A#G?pXOU7N9J5^h~J>P`7g4%Ty@`XNgpd&RQkH
z_Marcxm?1}d7_BzP(_efj8)>kSunaeb*2m!DBKxIUn&Ds?u?-?qX9~HM%9+u0JS^g
zYRhne;+?<kOLc(iow4?1JV5!*=&Mp6pnhlkRT&ge$UBmtR062v9Yat?0hIEN$}P13
zYI(=ymSF<LynpMLY5<p)@H1LXAcRUWA>4oAQcgO!-c<^e;jOA<AUqGbB5C^zMP;6O
z?HO~!B<I<$%QFzVTgM%>p@-*WH(wHowq-r4&E}|dwA5}^t$+IJb}32PSEayTxbHfb
z@3pcNI6&mMj$Kyp&X!uIqLzwul`Ztzutj8D`R?w8!<|6o*d9uyG`zcc6acwajBAYE
z;U$>L%BmSps#5EM<@Hlh6oBoq_MJzXmp>dzPu;e9VPITpQ6E)fS5=neh_Mzf|DBY)
z#kE&CI#btGv20oVz$`wm-JF)0Z~Cwwy}$HNx6|Z1(m74tM11X7oZ2WjT8lL<#~9R>
zSih9ljNH6;XSqOo(dsgAQKi9?&xBt_Ofit<?(ODJY}SwvvTVaxY)mWMcDVC_mTx=o
zkkC;VnW$Jkz9@Be$=&|>%fO6p*<nq-z`~17tLm;vU4{G*_1LYl6yH2J?x;$(sOTkB
zwEho~s(y_<Tjzc1E}oT^Z)k|V|D5Dxfdy~0T>q$JkM887nJ=fm-`sDDg`61e8k{}G
z`>9v^#``})6gz_nC!#`fF-pL7zinD_@~BO&Hr&-;HY6hwgPf=E>z}Dv{lVdNssh0F
zy~uE~+JE(Y7O0nMzVfYJdwB@!iqcsR)DDx}4^K}Te(nE4A-r||;ZsxDLNbQEa+z<z
zHRIee=UAQFVy|`Dx^28kRW;%<tl`x%E^fjWUOex(B?y0C@o?$S<IgvAvaazOepK$i
zc-Pds?9kbxJ9PP|d0;zh{j8>mm924D!y}<ZxXG8TL5;Up<C8194uIv^GRCA9Af`Es
zqczIVf62ZR$->qE`j0(cw%8g>VjGXG;^1eHX19qvnK|DWGdK8c;mYF~m^km2)N0G#
z+acU}PYg(|{q}wgT&0F;lYKVrSRjl7lNxi@9^vdHWg?@vcaFqzy6{h%&cHL9i4I0^
zunBdDzvHr9I&{JlzVJ_-=$SEYuwxP7yA?vg4<$dSM|^QS>cupPrVuR(napy9y@iF&
z*m3l)U$td+VLy|BqiP&^Sr`Z9m_Yn-#`>yUkNa}-cG~HjZ7dSkG6IELDI8(8bQPDi
z->SP6)om(@U@EphzTquVyJbk4Yq$<6@~4ehvUCsYYDLX`=Y(f>B2;}2z7bE!i$%n3
zSG^`2y*!wcqk|%&^;%qCdxm+4;CJSFXCtSu;x8C2>3D^aJLB&)eeU{WRiT+Ob&DeR
zb*I`{|G{yg)xF5QO+9pX&p~$!%Ki4k`{t-sMGw{RX&VmCDT&xCq{;E~y>p(<TJ(P<
zHd@bHy*SQ|1)U}Y!`W1$A^2U;M|q|x<a&#xe)SGZvGCLMa^MZV3voO8wc=n-@cq{D
z^@7Zxlcxr&EAiT<$1R=ya&VTe?5cKB+SJ;?BhciTp~O27d9o?zY&~Az<hOBf5<N`U
za5P0`YZc?0bqaE`ubO{}v<ZP@&vr#EJ0?w8@t!6z8H&Tb*{kwJS}&kX#Z-YdX&v}2
zO*O+vFJU&3?8N<tZt2(N9)9yZ+!N_FoED#X+Z%k!Wrg`FLNuKgN>jCZx9f;keo|<~
zil$7BWv7x}^->yY{Ab&M<bEG~_*ww&gPB3t<I6sZp?@G{bpYGyzlG~X@s$SN3ge>C
zA-*>H_b7*h`X`Tzw!zGC_{SwFmVX8BH?Qx_6Fpe6KXXQc5g>dSC)2|FIpOG_Llzjy
zAr$P53h7~iWY=cF1Pr8$`&G+jxo3wPc;~!T87GXG?<5SnD0jz}TahBLT^$)GEXNmS
zTvo5fSW%e6bzGAxBRu$loav+!B)xs7kP;2VL6V&p()C6fr8XsJrcP4kRFKHKlD)mH
zW36##Qqcxkl!!j_8!gW6t=5$C`OF1)2f#OTy04qFwZB$z2q<!mndpgy))(YYil$Kb
z{7QKtIf=tfbC%A53+v=qzRlHJhN4jAB_b&KsZR$W%g{b?f9%19xF&ZF6SO1?E7_SO
z$Y<hk8+Pp&>O;t&twuT<gchV%|C$^Xyeujl&)yN$dANS2iDcI%B@iMW<Bz22+orP`
zkCD$F%tmrnk7*RD6EL7BCKFnK_dfa7kTsD(YF(qX)^_WWp}#KG`k+C`HNNxLJYh`4
zpDjI}R1mNqvS`8AbTv&LaH?XOc;Z*ha5SpZ%hl>~;5c*ENEE=ZfA)zq*8CZ8#0$}|
zor^Y6snM;KG=gJrW{*Ad{?(bJZ<rB*0hvc|zVl~jifx_tLur~gr|$uBAiA%iefOzG
zzjb7{Sud}eJR<J)?8R~$;rtI?PioMwf&<JXY69)!cG+frnONFWiJgVA{i-9Gw+ZyT
zlUZF4{_$J3N4>6$y=Y{*8|KT-!_@pPpp&x8KY|ZxgYgGfzq(Ts9l~Usv<xvcZ!;eZ
z$)6Qgm%G_mzOr(H7N^>*3=Q|~qX4|Ok4XkqnWEbrn~>>AO|v9ZsgUe*QZ5OCj3PM>
z-8;ci^6--vmFzz01Gd}o;Wf#`_5Gks8WA$8zsiy7sNra(XlhjC#pzRGe(!U)Y9_ub
zE1dDNFqVz9dZ2PJmdb)jKQhtg4oy4Nv7?dQtWt_8Wt61MvvAVlsKnHwpsB!F`N_k0
z@iFJx14n6;v6O!r>mnTlW3Ad`5iGU<q=RXoYf0M^|I1-a39F!uY$W;{OnH7Z4TQEB
zb;Iu?o@*@4W^%PV(<ZMQ$3r)&`Dr7jNplMpq|WN99tls(ZmKOJ7#;`*iv5Eb-1O&o
zLP=&YBZLvmAX;cenz!YLte|<yY!|u!s-hZ!DugQfe>7pG)U0YM`u37CmX*QjNW-B-
z!<gu|Vq(5Z$Ofwa>1H4e7ZZ^~5SNzA!WcIu+NT&}ucK{65&jgGHL9m-$4V<C71N4}
zLi_JgnxaC;+Cr1TVooDYWgJEc*BnHW!7_#xp*4zum6DQ_4n|_ZGKLhHGK|EAV+tWQ
zXB>tL|5vc?zk|>Q;#x>%Ldg)s1dM-!%YPP<L`D&bdW#fu{I{VFW&|hh#4YUlznM}Z
zS)oW^IMq)TBwFvP;h*&21BEU!NF<%ag}7=$su2I0|LOm~3=`GQ-{9e*KSW4^1`6Ax
z)zCMaS(!?0Ml(oys1~xg36ja-^s<;WQ;daSj#)-zN`VehU;n?xoT?+WM9n*_YSc|{
z!A)z`yQ1nrStFyf_Uzv|f{<7BQ*Y_j#m?OMM_XkDs~xIoo)WJz*6ZZsoP}<cOb_XM
z`TrxR0X4nQe4Mk=y_o5teJ^jbV>QiF<5k9X{l5jPOl+jaRu*E8bLP8QGBqUD665Mi
zu%~&7yewF+|5wyQ{C>uAM{Am=%FBZ7y81Y0xw|RTL;ZdxN`;*5w3<9;xwt9QRXu6O
SdSQM28?+M|D(2r_;{O0|uQ74}

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.woff2 b/assets/documentation/1.27.0-rc1/css/fonts/fontawesome-webfont.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..4d13fc60404b91e398a37200c4a77b645cfd9586
GIT binary patch
literal 77160
zcmV(<K-#}|Pew8T0RR910WD|%4FCWD0*06X0WA&y1Odwc00000000000000000000
z0000#Mn+Uk92y`7U;u@35eN#2nJ9<0SOGQyBm<Rj3ziT71Rw>81_!itTT%&fM`8Do
zgetlXfhX-f>pHa>CezJ5a<?i90vY8R@%CK=bO+o;s&1pQ|NsC0<fJi1+Ya17;MMf|
ze65NU2xgOQl3<%8*pZ<?WLrW}5hN&ERXi&wt++r?&@~?9V1cj>+CKJB5E?t-D3Q@I
zv;Az_{%F*wqQWVk+*x^)@=9sx>ldws&U_`?fwx|)6i0%hGq@6No|Wjj+Lhc2#LbXI
zik@&>S#lthOy5xS4viawbfqcF5t#22r#4c;ULsQqOn&iMQrAORQWXh`G=YxhM*4YN
zTfgWxZlU6?d>wP(yNq!jqfNVxB}>Ww7cSen4lE1$g!lMN&~*PN_7ITCO&u%|6=U~^
zD`NV@*N5j%{d4(V*d&F9*Lp4o^=-wV4E$&&XJX#);dbqZ^8pUYCyEa?qdKs=!}D|N
zZKGn0G1#bWFe1l-8nC}AR*a~P9;0KUBrGsNR8Um3F%kp&^sGD!?K|!B(qItgwkPpO
z4nOg8&Z#<)4^Bj%sQjrANfD$Zj098^i(7$$Vl;{o&HR7r?C&hE&b-&}y`y4mHj%mu
zNlfW!ecOyC;56fuZ7e6t7R&P^z1O9)e^Pe=qGENxwk%7Q3&sYU;&zJz+X!u6Ex^F$
zTu6(Z`;JIR{;Knn>IcTcKbV%&ZSxB`P>8MADLLm#sD>oQy@;IWvGh3j=*Qa5&VIQ&
z#BvplZofSw5gN50lul%1ZW|#duBPzgJG1nxIGMaB*-obI9wC1%7zRoi%C^%k;Mn?+
z?pUuq3@j1^4v?E3B49cgqW>EY2?-#3jqje^;JgycOCcwp0HG~LNR*rji6bO_n_6Fl
zxt$OawF6EyR#iAg$gdotjwKXO)cf75+S~gE2n>cpa0mh<1W_5Hw7c36opP+~qRPFS
z?z(HcYuX#9GugKj(K=EQB_0sAfiipahu*36k{xIzyD2!y5%vK1@c|DQ3Q0^$kT!Po
zBklXM?*0ZWJJ6;!hoDZHGR|mrw+{{o{_lUy{_6}+Pm!l|BNl}Q;&@bv@2Wy(0-c_O
zab6Z9oUWgiKYRW)Vv0%P;3X|rT9E6xVx&Q%6AWJDG0oX-H5vJ?>5A8;PEnm%C;H~y
z%@URb{E<@x+!!CGA#@@j24G?{>Gvg*2lVeVHM;^7(Pnl#tDV)(Y|gCiIh;CbXJ$WV
za+~#V|9GDufDe2U{2(L<AY~Gi91@gT6ez_MBzGuUa#N7#b}O4&*&NT-arRB3>>iu$
z&FbBmZ9gV+TlVF2nNyNeYL2HloUh~eKdpS)>J9Pm#Xd(4%myqFVno%qUa9n|Ua803
z8#-)?GmgDZL7HHzH4B_FHnRat`EXP62|?edFIDRb!q%9yytA|?Ib5`-)rNGqg%GbH
z-}d(Uw;KH$fouQ<g&<H(QnZ?oIc|Uo&0rN06DZ0MK++&cc_~fOWKGHqkQ_DX)T9$g
zC(@Cc9P({bJo@O{aVBfLDO}HcJMJ;X!)^Hon>gEh;fvK+gfZPMGsl{cktu>gD1?zL
z`z7_05U{qkjReFC1qI#x+jpODe!iG=?eIufIBbyAS`i6yq~pK;J!P{R?B6jf<_85Y
z$&N8sKi05v?h+0-IZ#Z-(g8koZ#f{v7%?Dp!<ehXbz`TUk?zDmv-w?16cAGHe_~Gm
zyOMVMleE+ts;DTqB8r1~>%F^s91LTw|BvSLb7Oj@878i9HK*kSp)6{%ZXlv-PQ)RD
zE`x4f_xM$H9{@mn{1`uWwLbR;xgELO9FcMuRbkvnQXmT&j}ZE~*Z9?u0F(1c4Md6G
z%ZpLJy?$`%3V_^=J3F{;`T31Z7#Ad=bomK731~(`S)uLTR8OErP908ueHZaDB4D$q
z{GZri&j-sW%|A#W5to*SAH-ai&E<8<FcVDFwe|5Qwe7mSzRi?SVs33uznJT`-TjTf
z0vJkci$4MZ2%hD0tLFuXFf0x@jCjdH^7{6^LK(;9kw%FS6rW$;8&YXn9r*vZ)P7|n
z6>6{%v3LDwPh%=3Mm7wrS#iOV1$&8oKgshx_jMlowl4ED4$f#L1!t6C1g9p~=ODPt
z5-F*yQZ*RmNQ`~4r~k{Ouxs3@+Z>Q5N}1kIzW_;y+Y`2(U+=Sj1(9)2Vkg!}$DaT~
zSw&5w0~|KUc7%a7st`^}4doR9Pl!$j8b%9FcqlQFIssg|->XC5YmQ@}VmJj+^a&GW
z;TT&?6ewkE94j()E$+}^)|h0Xjx{@?P9)U!BBDsDj}WU<M!Ik7GHIwHirHMVXaqM&
zjP{^BQ$tSztr@tM$dE{&9^yrJAptHQ*XjKsLQ@h$s%IX=orz=P4!PuWD%GcRi6}K~
zls$3A%8F&8`|(+k3nc4YJ`iS3IDm1NjCkrJb_%67b#3nn;2E8;VB1bjElL1f^bkh3
z$8zaJ0)QU1TGKF-2O}ryrHF3q5z<F$OoG~mSQHz|jG{rRo$+T`bD1i#S<2i8$6ndB
zm^&ia9VBRCe?7St8PA&&m@wXUNIaKTc7K6mn_mE2S&9Sfqv&@#WI`4KgNp-BgM>31
zAtcV{=d|bI-bs8=m>_-=CKKcXWW_GX0~^$^=>jcb2lM)283`*Z!V{7?x-M-}_~|s`
zV|lNhxg(2J)xt(s?g(|g4crMAX)o}cuastffHd9kY=i3#SX1;l!-O06F-4v5y)!_N
z{n~32h};!G7bhd5ytZSkz1eQ+sUW)X74K7DJFF%9?n#Q!!7ID?F7r$p*h2z%vFq+0
z9=`hOhOu`E+Rawmf`Ea#sNtl*!}&#cW`0Ouz3DI?ydh+i=s;0>PiQfT7Z<Te!L~-j
ztJQjQ8jUye-HEod#+-Bya(2w<snTnmyM}0GQ!}^Qhjy7cgmHYUPlE54ODUCAT=JGd
z(j}w0y8^^-9(!y&hTBWH|GJ&cj-sTFX|s><Nb5&{NrifyJvN$GS8p)u*$aFX-X%fz
z8fs)jDIpDjsc?6$$nIZ)v+Fy!@uu5jmqa7!|I2|*kigzfdYtkFw*+voUXMdWc;3Qz
zYAJ*@Pslm@4WVGs(nUmA?s)NyAl;HjRmi~Y%dZZ^nW_Y-@7CIhoGv8|x4*W|h_QYQ
z<MH}E{|FiuLlbYNDGf%1H}lHpBwD2XD7R<9>u*A>rw!Z2oWMZd<tFmO+GXy02I}JF
zj-#LmY@o1aieJW3c$rRHr(F!Ln+G^xEi;*Ow5Gw5dw)=B0p1z7S9N1K?}fOose~I_
zJ{{^UpDskA+>TlLANQLT4}czIhYZic*axDrD;QpTldic#?)QnYZQ#V&@GPdWKu$ce
zkR96D(D?F+uOEL7E{&8{@#anN+7VOiE7M#=o-3l-Qlfm(Hnj`lCvjX<;N1eImGc}P
zIfq1q23S0QB<*mCfZhipyXl3dlKdo_(zgrVEctLByL0)aRMXBH-Ttp)yZ_WqYe|tF
zU*@4;)#eID=!hTcSCgMs|CA-!(RT=~eyOCyMAVSk!pq$%^Rswq@*cQ(TXI^ehX9#d
zQzf)Vo7@<4U`9OSg`<VDtRSMnR*NhC^C2s(miP6FxY&)0IeDLJ#ldD`kvKBm26Nth
zY&%;iWhBJ-iBz42mTRqplHe(tc8|8HIjjMM;~S@Y({&T_b&qt9$lkL+MdS27d_(ry
zJX|y-2$xcJ;S8m=>E*=es@n8G*SbT@I9!qVekl|qYka=BE@A6$s=C?(x-c+DlyNW}
z6eaQe@Drh#XmE?Ex(!VKoZcdgD?X0w=CviN3tmmjikMECbJNHMagMY-l@hQIzV7AZ
zriQRf5j1k=Eh_KlCFt5{BiAK6a8T){lxWsNJ@?M~+S(158s#PwDXC&%gvLuu_&~q;
zp5%18A)<aV?NeQHS!}vmHqbNCo=V<tw3tt$R`ol%XeMV*HIh<Ph%bHl!P3TiuBGx9
z7eQLmCWjeQ^Wxcb*vk2w&jSn1uL0?zQ0nVLp`;X|FcS#0wnQxZaAI)Kx72zmryyN`
zN%uY)01i=HLTtezx|d!vQa*D1D*L+xLq5PB9)qXh7kE%rx_Tb1eOVDb0uS}fl@`2x
z_0YD*5SkeZ=M5Y-EnqJqNDB&Yg(i|jmq{@HMKV}niIpuMse2AJz=4@O4J>_>(Gy@`
zHu}fy7?5gdqUqRaZ9G+VYFVjT`f3hBTtJLx%QHo4W^k7Hn4dbj+U@EPSKG&~pSs!K
zvyPmU&Tyr~vom3Dulo^!F^FVgi})a%1Gn9)rTvJRN`lw2KOkz(aW}5MO~dBSW@edL
zwPwp4)N=wJup1<soC$=LNd1u%=B#X`mi4*6z=)S9B`%wC2IJCqKLhf<Z9RSqf_buI
zS&?FADLl(pgdi_gcoy1gskD+L=kt#YLhy2a@rD7X)9^VH-ZqUe(I)<xUv^CZS;8fR
zlhU1g=0$&rHax@WmB+&E+a-%7t2C{Pj^Ch9-azm3PT~0op@OO+TDKVAPegllGgA+Y
z$5)F@u$5A$?K5*c!}S@bk=U~hqkyLIuv|$FFpaA&pv5gR-L34;<Akj{uL<mfFx3vW
zeNL+{V)gbKj!t`oNtv^JVqbE^W%!+6a8qf6<H{5dJ`yL~cdRx1+xk*QEYXLEB_2~*
zmV~>;S7@U)OkZj2gQGo~o4#o=@iYEeNjFZoLvW2r$?(LKzQYnI52$jlzP&K3-Fs?@
z8TYz{a*Ip6o|)y)qHif|*~IjRGj3tOR55>Cr^87ZMJVZQz4x-c--DZz!bJ3J`mBFt
zv$MzMB*TT@cUYc?%vG%XC_t5juJ=v#VIpp<4lLv<c1N=vmK=%9s1ta(impDDN7)Qh
zf)Rs&?!9Ng%!wkDQOkCuViYhcdfUiQMf7>W$%%|VH?JfU3&D=q@FkudiARUh(d2N+
zWLd~2X5t4S?fb`JHk6Khs0b;)4m))>Bf>MuG>~md#IxJ@3UBxJiBI@&t;m6*b~tLF
z>Y4m_C`-#PTHIv21B#D$$;E^HZ8uiYUtFhV*G%O%3~-xR^LiE@?1e}-zAdW`mbEM>
zF-u5dt!0p?EOIRw9HXESaG^}g@5b$*Gd<>1m;%N!sdSMt*}PbmYdWd4wf_iOfHlC+
za|MYGa1MylQ*%_SxCI*3>pCu7wYNkflt8fcEw)9s%#j8m5R?-^jqs5&y2-XJ@J1PZ
zvCEQxGD63Ll8sRsnbjBI1u1mJ!>4@OBQ%73++6qLsDSXuV7F#t5G=NzBh&|HiRm#q
z*)7%<tD(7cc^4qtUHgZa;N&u|T7Cktga9rn<LR#R^t0Cj$Bf|C9<`y|B~qnJjhL&y
zD0z?qV39bMwnG}%$JUMdx6Ai>le!&>OD#^0421Im4)tJOE2i~}o^A-DsEaeX+t0KZ
z{sQInfSneVRDtp{f^<>g*rTZi2sAuCI!Z9Zh$ZFSky>G5VCcOA>UPbn{DxunR4-Zq
z0{Rr3Vcwm`(344N37c0jkQV&${exerkPtp8!}^!LNFtPq`QzzulIshDd^c?rMzvmA
z&&_^jixC$vO7ZGm0Le*_7u+*exgqHorQCbdJY~!;J<f1o+Sd%;ajl*JI9~SD+0(&G
zILzx$%{lgWFw^Q<khFXrirfTtKap<36baxAGnav8fg%0N-?!0zmHbqSARnjX9s9w`
z@*qmno2C1N2N4|KHP;KlaHfwGx>gCi-!q5HtGLD2^A9dP#_`PVfh~Qf+*{6P<x=4_
ztMi@nZtSB%IN_1^gPAify9m-a6bV^pp(8NgCb+$?Q-m)rW@lUq8b#t}=Y0;4$SiAz
zqLk^AXZ!{f`y>OoKUi6l2P%*Hl&QKAyfLqkaIKd`D8JY1@={Zhq*1z<be`@5HY}h~
z<7!+8@Z&rPFI`TqbNkI5r8~_h3>ZjQU5-VVG9EdQhh(N}S^W*!YLJe?QZ~`l?e_yw
z5+Rt%0P61dAXbLEnF=K$2o+w?V3$raPx6eS5Bi3KtXuINb~@n7ggV*iUfP^;*T3fx
zK<d)$3XMj^U#`~?<pBszW6VO*7xDeWIB=s}X|JNS*Ei4Zi)ZDn11j#1(arrVgF~yG
z8p00YTZcBZRFXfsy0sRCCGvXv#XtcD7-~UqLQXaCo+30<o~7XQB9?tHbxQPykDivu
zoPIO*9@!4jdwl|RSN4qH?oE>(YWg|IErMMW^{br`nI~*hvLG+;Qa(JTE9Xz2mD|`K
zWkMsBLSxbz*}wwmYD`=a5~IW|zFKINTi5zYJdLXS5AlQ;aj16QewJ%pn@7XW)l@{k
zKU1m8+14)_#x2y>CEb#Vl-cMv42b@BrfGab7RyPY#BuR=W2k^v0h<(f44SbZ&kQd&
z1c7+0f=Ev<uI05I@NZp_o)45qU5a^+--GM?hx;RihaWeok7CW^B$IT<9I8^=Bp?R9
znCX9A<FsKn8_h<e(XOwuk1TE>a?9UId@{fgyyLhy>XLZ>Hs_gVQ>JLK39^$?US5+#
zF8FwgP0>wLKjyriCrA1t{C?ppovgaV><D%=iew>1c~smv@h!4uR$(`2`$DeE7c~B>
zpO)wsEU7ZQ#)-uJ6()96NKJ8Y@H7-Z0#aPGy|SvlSYbSo*fbFCmK;D$X{<=pL|?w>
z37bU`XR6OqiFvV2n$yv2RQ}kYO5LsvtCo2WW6I7VnMg|XEFd<Db@ngXw434%t(^qG
z4~vxPiFu9ymsZQ!=59)E+n-2WP{mTCLS%f?6g0VC=#C_7?wrfUz{W1Qns*ZFmdYE#
znG^v@pm0;Y{Uqf49F}~2YR=a5Imp`Nr0EmG{t=;VhkS!E(chS!x3~OmzBx04IldnO
z>+Y<O)HQJeQ~G>{o1b`B?Ku<L-0aQjLb8@tS|PfbxXW#)OE3FOZaZnK?sc>6B<2+=
z&U7;n*3GsPjMqSY02HvKv_gCJS?}Vw<e$`$loWcaGD_!lK;L2a7F-!k`-z7RQa5k2
z^B81$=%5v-pqpj0@;BZuBs5)KmBGI<Yl<9bB#aY193=pW<uUF_=R(rhgCK*?NPGwa
z_)acc$xU1fOqY!NV%qK6=`l@b=JFakolaIRUof!%ES@VC;VihMXx(%-v}`zybACxy
zUJXv=%e+nUvcrG)*pX`F+}VRIq6u%@uEnoW<iT$cTWx=cplazoas!<FZ9egSdNd?W
zn&B54eR?3(@0);g0E=iMBA$orbvL(Gds4%@-KGGzPZ2Gig+w`4*4d?JhDpkfOYBT%
z+qOaw|5OjC^H8-Xhf5dF%FL$k3J!5s1%%d;^D||(v!xOQ|8V4nCXkkh+meaqOp6$3
zaI>nX)lP$9Q?8>7cln_TCYaRXg*#;^hb%1uH+IT+qb<MNcO+M-7td~3^HraohlRL_
z>i5QUIEkAPwUL<vS?3Xox<5-zpJQ~pS=fWVa4OY@j{1oOi{dTqgdFb6(2-_LtbD>-
zZcK{joDF?6iF-BK80ny(qch>Bj2#sVh;E9olq4i9E2BhC2h@ZuNbOcWnAb?Aj+ol{
zPjg%dw*~)|Ezvu`S2h4n_?1nG-8izHMroCi)H}Y7r8gOC^D?nEB?8ux%nux4T`W2w
zjmomxy+te?pWb^_g#G~wZee%3vH68gXQ75Jt@23+IdVE`poA6wl8hR#JV_HpwK4Eu
zBw$Qpa>tT{f!Cet&Rr4Zc;X#7JyIEVCMr=i=zs(;dVe1C%lLUbh~NS0gJ4a3_SBi0
zWKV|KrD<BO;~B*yuI?GTD<d9DNXSMCjl=20>g~RR0H=-#?#LMUi65trDJ==U20Be7
z%Xwp<u0_BlL1~qe1u|Whm<Y^l<+iAhi5!|4%{Ych8oYV3(gj)<M@qAU8lncST-6>j
z8rGRuVi><nzV`5+Ny0%b{YP?A03ppVpcA0mOe?@qXsT25S=7=K*YZ=pHT_>6*eIn2
z4sdTqnx|BWhY_zMYaCA7zUpjza))jPvt-vupa&k7+<6n*ist$5<j5x5h8K9_aInGm
z;pJQD7C1*5hW^=PbgZJRqp^DIu!GsA1_?N{v_ieEOHd*}GG&Zq1Ll+qta;`hc;}}c
z+G@SHoCcLjOTvg~!C1wtLhOC&5vDc>`NN|BwO~KBX%LYryjwYCD`L@BOz&Y#&6yLk
zrl09#3<5$~a4xgYhziDTTr}+GvxUZ_irgNJWb6?<cc9-_A_fJ|(?1}eC%I205|3d4
zG8s<)IUkFyEV<vGp|%g|A)CeGe=gH`f0tVMuO;#{_Ep67Ui!;*pwEWlXP_wpO(m89
z=R@_*8dmA42b!MBO(A;JCXk)H?b&=5M8YhlY4v_mEG4n}d`}|2``HZS&mCx7Gb?|i
z^88_|y&9b2=LCR*o&|`|X*iRD9$XY810gY)Op4`UHgmQOdJ-#5!cwhb=h7En3TxoC
zcFStS-RX@RRrs&yqmnIx!)jRiM|2;R3z)yarj=rteu&GOz>^#5mb!Oz(fO^4&7G%H
z5^GS_GXIRAC_Q6#bn~Jjo?A1S$rmQJt!U~*P6dbvJ-70Rj*C#qoAg1nM--Cz!Y317
z=u#u7#!Wgd*X$9WGk^)j?$&fleixkNGkSM;Ai$K^JD4}R=>kur91A#{$yq51$wX5{
z_^yQCFMy;I)XX=RX%FBGjUjh=$~M62v?QPtjW|Ux>QrIgjQe~*2*&>nXZq^b5AiNL
zZOI)6wC_3KIl*(?NODXbHzum22a=JFGaEv41mKQ*TW=5nCK7LT+EZuu)vXw=D|?|q
zMZe$WYg*z7q#{n@ie%~;HG`r$nwUvewW8XJl|HLR?P9D;g~!gQW+^ITmZnEFJoC&$
zpqK!kl`d!W6<q|V>#u8;k_s8NrGXb9K``UKExyy)qZX#Ac7FthR3Nwo1`lL3ODL!o
z#aVG+vZ|XXb=~EAEWJ7~DkOX|><)vPi!TI8y2~t+U`4!!=-3qTcu*Uzvm<eYu&>X|
zU;vxoFY7w$fXLF*)+alS*@;#LhY>_6%d`y63v$W)<B#?@IlgzIeOm$ghDNN2%LwbD
z`QDrt&bJPnzM&l}<<i2MXr4<*-dy0vnpKL99jN52f=a+vByd$~nS5g~%kJEJuinQ@
z^XoyY+CS)4<~^r0jq>kPx*5f^bYS(x#$=iQiEsSbWTj#TRZs?$7t8|iN~L%c(PyNt
zN>cc8olk|i&vOa$9mc_tq1qTUO?Q~7+#U@N=prKaG!!!T;ppICO~e}UM7l3dA&J#?
zf-}{*xAKAEE{qjsE0aKYPnTB6aq63DUe`n4s;NtDuJ@l2EaI^^NCY{ITBxi%Cb)05
zg&!!<K>x67sqr4))=f2=^B;|&U9nAtxK%O?JrH(qLN-KLYGA2ys`5Pbca_F5=9yX0
zI@KWOZ;?E|06C&Ni~*hajz+-M`jaFaJ2KXs*J`w}5c=M_?075|63ZIOft^DH#ZttH
zbQl)6uo5JL99BwZ9>Hda#W}|*0Iy-0IZ%nKCgAwd#WqiGzSaX5Y^gk*)brv38S)wL
zWOF?u0W-yO7LT=1Ezn{_pw#>#jSuWwI<R-ix?XDeiPM3*&{1V-V2q2GRB@68J)-)t
zlt?C{Z;u<H8*9XgOhn#Sp-=mU!ugcz$|_1Tb6XkCHl1oQ@IcwvZgM=X&c54+h9im1
z(m)A_Fu$8)1_`2_9|f5|@3oygGKxgi)20c(=zXuSRCCSQQ_lU+BH{~D%?hrSq%M8m
zZ(82X7~_ZeMsF&Zm8ad8hqnK>mbE(F^wt}}lf1z<$?f+@!t&&enhvFSp|oAa+s9!U
zHXe30?GjS`pv=ByF^BCWSWJbRy2A=eiD6-y5fj~pEXMQfgpkY{A~P+|N8}+K%cVH8
zxAHg&eBe|%Q{GUMi~=9Hw)OFF98FTLS>9sw=B0b@E4xqqW!sxF_VU+f1*fUgb*|_4
zRz3PvJ}t!oYhpH4pAwRi(5Y}*;!VBKPpDx3vfLzB=tRMJ8;%jV@j>6aqg%i<1&#b+
zk^D-3Kdxp(KRuW4k%?rmuP94I<g~Fm;+#YtlP_E4BcgxxBtZ<t`y)$8E)hDFo_Iec
z=G#{Ea<>&g0b4>O%zd6?@oyO6liO1^U`$YEO(w~dfSW-)I*JFbc95RKnhH_Ueo)^V
z5O<-H?_2BbD+u?V6s?hlkNW{&D{7-4R^P`fkDgL0;{mp{b)#&5Aruay{_1@GD<`i@
zS^hSgHnz=Q2J4n}WYT?K1Ba~KTmN}=+nAMVj->#wyKf}M<5@kRd1_Le5osxl7MTWO
zkkpGzVMHjsSp8MXcS#7V+PhkS79{jH0@}OoIU2e8CV!dMG+M*m)+daUL`I+W-4I(&
zUB!OpWEez0R`B*0QI%Jr&CRlbeRfkm!A=eXZTHE;D+5#BaqzefNU;B5|N6>RA@|Ob
zujYmt7m3<eVqYtztBslHRrLN(U5Z{Czw8M7Y&8ct2|&f<G3F<K>)_czpI-ihZS1NN
z{mBusZ?O_Oo54A_*Q29z84jB*6Wst#IvTqXn1FOd0WHRQYg4!CYPDfB?VoaEw10XJ
zM*G{lAl|>>gn0kjc8K>kTL8Snq(eBCBR95iHQy_<hO;0X;(i?}g<?udS=@Tovv(`}
zwawWA?+`7>>TsDaOw3GMV`td+(amo3Y-6~SVgFExhSbYQt48O)0=vGOBz@93V1J{b
z%hnjMkz5Lb^ba^Q<`P+L@G)XOzkbHOO0N0Xg0Ihy$^3ajb3G!GhUm=0X6-0?ONj*>
z_f3DrB8?gdNMPm0cL=p(y+ve&>N;XLt~MwFIj|UsJns<6WB+W8-IyLPg}oO15Nn;A
zXX*?`q_n+^0g<rD+TdOSMN>s7HP%P#UtYbBYu|?p@^*>8)y$gH5q(rM|2sDE3?Nr_
z6;wk|U!eBTYxBbDj4oegyx`H4PD;~E0DDx)A+w4$lWIO__?$4^47wxdhTYj)uj=EM
znyJ8s%uB-ov3ip%{vp~EGl-_rGMMKEfwnp}WIi3G1!!q)Mb=!*J@7~jy3`z6D|<Ga
ztUy=F%C9C7Y(pm!!Yq;y5zum2AQTb@Ar%@ppD0}8%&jt*Ex}MY4ru7_Kn{`=Lo^GT
zjXZv{p$6IRS~qGXDGX))w8iUXM$7zgTIwe;HL(lRUN#y+gUtoVGq`SJnQtQ$e!7Ul
z!m@FguTtAUA=RPx&>(ulUfoM`T~yvcgH%qlR3L>cQz}3KH_#K=7el_UiNveh$%U8?
z_LGuK4xOlJQHD;H94v&y2_rh?&Qj5;yNIP~_>vbFIhO?$;xT|Nf?1iDP{&TfzW|C{
zCb@Y`IIq*W&G(5WFw0|-!FC7~@WzQ;j=+kc@=CQq%FR2Z@=-e+m0g92{YkV<I0@Nv
zuL7#r6isIIKh&@X9HB`P7@D$j8@qBL(o2Rp(T_NA*?m#J?7fYP=V$vZgenhnZMA;I
zSO(Wn8Zcz|O<oAK@IOSw7-UI;Z9Imka66%Y26>JKEF#;crZ%nQcFJ%ER9s%lZuHyt
zzJCQXZKOUpq-8^{@!U>*5UtJX?PJ5B=Gm<zb2r<(6Z)JZ)wMiRMlC_Qr=S$%hWUD|
z(&CA+6VD2OLV*b?d$<NRV`m+Shp|+8tw#q~A2KVGg3b2X8UJAiwwy4V0UL&-{|7tf
z93Y)VMPWynWbw|J00!5;z+3OCO#r;B2H^^>Y497K(+_9#(mFzjTf_-f`njzVGrbu~
zIo%B~2+9wdNd~?$Ckbz>{gcoZ5?p1VB{W_&eWQl99s=eyg47Eg{UFjXJqPm>4W7YD
z$9-*oALJ8xuo5PzsHx8)k^U}Y)`AIEyYYQx=Stt&>pC<tabQQxPxPjnEfW-#@|>^1
z<1Ipzi|(09mqxhhS;O1DqBDH|#e6Br<PM79^9HQC>h?)T?##hqzUdF1q6jPRD!uP?
zbWjmu@AiW4LERk~L~lO?LlBOkXS8(lwDr(C^0>rF%Uwqug_tr@MLb@WZA&whtoIbB
zE8!EYJKqhOTZ^g|%QMT``HvY}F|fSBy?KOoxP^}j7bAZUs@!njJZjWwL(^eq=6+n~
z8%LxAL!~qu?!w+=bz*cNLZC~R!u8OxQEj~wJ<eg9rkhl8JgxR#dgs`o@vkV$-no`X
zeo@=JT5nGn_|{|RhTxPBaz0X}dt$n|G^Y2<c1@jegtHNYY$-g8R+M|ho93C2u`*DZ
z0QyuJfF~V9*bE9*bh`qOyw36!oriBwtzlJ?$>TO)h@b)gBEo@zQDyI4YXo5}-(Ea;
zYM(shM=smh)qbs|w%6;$>GU<*xxL%3UDH<j9ll^V&!)bP5tsNSxxKq`*B*JJcG2_>
z0vH0D^OBr9<J)j!{~7m%>a`sG=$rh?)7@YIo7tGXb<&x^?G`z4x$kihn?<R_f2kSL
zx#rF6Ld6-<=M@yE2irE-$B_eJw`JVHwng>Wt54!tl=`j5ks~^J>k@Dr0)P<4=`SHK
z9HqZCbCIW(RVN`J;D75Pe20ytLgS&Ts0!l`bX*&cR3jPU^U~6tO^zfhGHzeR<lZ2W
zy1ru5+8i9>UZ*DYv5=CgnUBb27sKfkX_*_QW8g{ZJrxy%`UQ0*MHZ%`jL5C?){`F!
z&C1heYOrD0xYm%Mlg`aWz|)=J6XL61(PaYmoZu*Oee#}dZ#fyd`&CdjdPpQ^urvhm
z*}68VQ1kadK;l>pC^5~>n9Trx;doyON_o9|l{4Dr69cU$EWU&B<4x-^ZkyN@g+6xh
zPwMoB)w72E_{3`d-x8SCuyV~Y<7PBtbGlz8b|q|+<4fOKPHB=WR`~8S-zT@E#MIz^
z=alPCn@!+HKuGW89YXG6E7SeT?x%L$Rz`6^7@OU(bxT^EXsU2P?CnJ`_xORo<aJ?z
zm(KE2SY(9mg;ltdm`i=suhKY2fmp{&0vTyZ1gwJXqa~UP$NPf-2N`uzDX~SK;F3u#
zsM?k|oW^_(F$dNX%SRG`&Ys}rW;W}{fbKmZ7E8cJHj+_h9$Q$k71G*%z!3D8UytBw
zqFi3;&5K?XYlW1WonVuQ{`o}swR80a1qMf5ewO2;n|TulZx8|jihYiM(K{<?C5s3e
zPJM?_yqqw<<^I&A?Nz_Ybtz4@-CM?5U?QJ44Y}eP4nHqjL*#qRZ1I9A@+25da*6f8
zntWcm1d$10nY-e*5Ci_FI*6dnBI(wOo!emv!fXQaJ{#U>0LS5ZqJMxCVbRWeo-#hK
z{zFi%iIA{N#Sai5nrc7MZU}T|<(}BnT?3{T;ZumX`1pI_wN=xH1(7Hxv$bO9qbFvM
z=4UX|gWc*FmBdU?L8VP}WEBU@DdV#;!@A>HA=Y*PjwWDlg|GfH5>Q(U8=Ya^l!UuA
z`@jrShkPR|fU*HMN(H2f3L_iHxXfRx)nrwvq&6c~8APszz?(uMOM~~;e4-k-z`+?7
zfGGlRkkAmSbZh-=1DfW@EUpy$Y!T?8>kso)AM7dJxn-C&fjmLF2(TVpFr4e2U+g#7
z+4k*TetXy?4RKO}&ah^a69N0{Pzn%X8X;zvwD}fTRfDp#XjmKaqHNo}UcvD?D4zpu
zpg)quKs{n;XPMnk&6ayDlWEX8k|(r56^l4OXTtD$NJe@v5fJxV4@4v5kU@+YF81KM
zB`3Ckcdb1#4>KC1$+)+jS|{?MNO*>ms=Mx+CI?BKk~GjUN$;IXX{4>cn`P*Fl-e82
z)6I{U{cqygw40B6gQ<c3uxaPRpEw-}Fk8z@xG(MlA8sn`s9`np5z_79u!#`rEMo$Y
zn5^jgm>97V*DIRULB6*KLPT<GL~ppC5%D4<A5>`CR2Q|GilRB@t|Z3gvZLw#C-?I9
zy!hb|Fjj~seB&a|1(KNJ>wxs3916gZ*He~34@x1F)sNqi(l*9MHd0)QHWXaHyE(K7
z7cKZ-J*L4?vm!Z3S1w#G4ti~Cddo)5wN><Z4?H>F(8-aiB*r&s{6<sh@6X}>%BN!A
zf<XS;sOpq``p<Rc0rYS7q5jXlyb<2fst*ScYP~c)r0)K@<E3w9RZ9!zcx35UnCrW^
zF>XYqSk3jA<$0DOjjri6<$##L%7TK|6qVIW0hR0*(fg#o6fLB0H$oz`;1a}}DIS=m
zbyp1H(H}*@XgRD90l;D@8c^gVE|w&ON1VYZKqwZG5%G1S)>4fd>}E_<AO_E>8%j0}
z>CWmY4@fF`)8Fw6=$}2#(#%l{FRR_s*mX%Ry$HHIkK6B%!5A!-uyP}Uc?5jE0|so#
zJYf39QTYezJ;eLe`Rl1hBpc|f(m|4R>6nc&+U%5MHUVSI^MY5$rR0aBG=BCa?{*tv
z8T?`Y(3M|9)vn`N-fV}=sLpm8aiki6a}XqLI<QCI^y6H-S6lY8sk1`~8Rcy8^nDN0
zQpH}MGD@jQHr`nLY&oImuRZbq`-2gTU~~ul(~<8LFZCCc8G}%)*=l8TBAlsTtPM;V
zjl_4SZL7<Ez@}Ify5h}F`xZ^_F?he#7JsVQn<E0a>P~HXQxETrC1SUhA1v?k<DkX8
zn|`uFo$d)>|2gmVR&_R2s(seFN2Y%r46JqWZi{zMzO@6d9I)pcW^+TATpWS22)!K7
z{@c%I{Tj3rhq(T^vsRbu&Ze%9K%2Jx;;cHVUtnV^eewPNOqD#*TeOfPRjbx2AAHc}
zt-4#2+gs(Qnd`dLr*F8*$-Dx&zg#^>Qus?OAzM6)zDVOgj)gmgIpO%m1%Wz|)Je^w
zE56KO{+Rh8zqjowkH|kGk|#&d2je}T?Zi<w6`L#?<7dllCOfu=h}84f&g;3^Smu?5
zF!J@`3i-evfRhfL><f=OaaXBv%_plgjIK!w@C-w>XYJha&VyO4V8#=E9bh(Tco8rT
zPe-~LXJF3m-dlc?;6F}7;88&8_{fAd=8#U#frP4_L49h#jzVGc!5lN~#ic3g6~oWV
zv^sIRNvi<uub#mjXIj1pGS7AzY-TLq5YVHd&VO0I^M}!{?A>D2sp=g0o*CI#Z^KCv
z#FxvQ-B_rBq7Gjt0mKsW!!`BC6<r!igt+`NP|^rFGO(ya&58Qd{|x;=@tLMWrJ#oS
zn;13}MW1ES075{E3kK+{-$9W%l;4NL0_Wz(wCH&TT>$k3Nbv~=i32Sh;2_&#wx~G`
z(eO_m^%*b>b$6$%N#e-yrUExgrg)Xbt1_?iT*?_%W<73Jkye1Kq|hQGIg_l`b~tzn
z`?hTr4-{}gX!g?+=y~FiGlIKtQ3(zu<j{0puaVdwe1pP*U7cA%IBG-JtZu|32PVtO
zhYRlfz3|GkcC5>iP@z5*mQMqJp{b_?lasFliFvhEL3A?EU$@}>?(xy?0}JwQH8W)@
zgM%@<laqGz6|l74C`(^RwRTp^%84_55(g~R#zC}0;8n(r*n$$2Lv;w5tI2c@todoq
zEnT@_<^|5y>G>PXH-ueM<_`@adULW)`<8U01d5R+zQxRm%!F$xyv|chrOou44}{FQ
zu6YqRf~q96u+ODLO0G^H%4Fs2B8k-be>oiK3g$C0AW6*^ms%)ZC=G0PHVrTJK#p08
zLXKYE*x7xsPgH(6W4>d;@{V2knw5LvDa+k`?zu!b?IaU>6Z`Pq6UTXDmMjv=q=0+&
zbV0gTGkOq6NxG|T!|+7LG~A?B1pV4nGi0U@Nzx9T^F)#<4HAstN!zTAE&*ige(75b
zE&EHBUNV4MV+@np3f(yUgLS?vS?RQ1T-jfytki+QU-&E97h_7L+8iXKTrxUZSLO`W
zV$?#Q?RP!b+FLOvP6MA=R(dp(9y_!AD3@k>PN&3w;8lV1W+;Df)|ucTc-JF?m*BR~
zOsPF17R8HH<!EjN(_)L{Vau~3*2OH$RN`E3)FFcKKtOX&C8pLGd<vDv=XB`gSZcco
zY8$iD3BOTqHM;$Zof??Av+Zw>Wkv%j8E+8z^ns8d>p9D}&pP2~Dkoz~<@M#QkC?n$
z&e?ks$b<$?W~FX=nO!(W5x+0$ryG2dx-rUj?F|2CK-5Y)v02RT)wWJ`+B%|S>gH%j
ztfKJtZwjIKzq@q2O_0W5goIMejlWX#_i4d8d`{b6P$HnB{fI(9u(`CzAZ=h_p7o2O
zI!*lxi_iiR31c$L#i%^U6{h{zleCsq2#-&VQv#A)oq+%)VO&84x^U<84CMIggs<|k
zy=BH+=Ey;ktf{G+F3hldr`GGNcZSEmemrDYNoc|SQck^RYZ`Xo=5O44Zl=_nqJ53m
z?jA^dWvppdl~<{u*c`_{q0Ag3%_vJcw7Cau9bggfCgx23cwR=Xk^w6xrQHLW>mJ6~
zoLc6EiL#W%j~X5^KVItxMGgd}D4^Y)9{5DysmOKYi5BuUui;d}nD6_L6YasFOjC}#
zHczo(ZSUG->j%o24td8i_|W>9e3D++Qxe`w@T9$cDvUBrFU6PyDH+cIXb67yo5J#3
zG40794Me%jg^c&;B&HbEF_T9x&XsSefG`7I4C>qZhx=cAaV){D41BBnVE){<2L>v7
z@O+e}#wYA`9CLORgK8)rap0>`tBHC{KGDrK|BkwuzlaI=96JbeGJ_Pwi(vS%g;$GU
z{Zx5S_h+a9Wo0lHhxZH-?es7(>U}TAl)Q~QXj^ng`9!-l)?P)w#v|is_sESpW<Lr0
z1$8reFz?!q?<DF}sHmP^RL?<ZdIb`f372>Z=t+AIf!#G5rs&Syz>JIdC**R%{28T7
z3V@q>j&C4r)}lPRp4ColvW%S&W~ir4e=5v=&{fKhhgb93U!Md&2bOjoJ19Yb8HK3L
zy4q61UjHC7w>>t}Ha#-tZtH%1W3Rmx2ar!UlUNLfmEdH$tN}_H)_jlNOi-NOoqi9^
zg{k`SIGQU_MC|n7T(8vT(ya@_ty9AnT&F$vRoQmT4Nc^QnjT{!Vf(8~JI_I`92Py)
zsKlD7l)2VxfdNW{PJnQm=uIU-Qee^9h&$N%C=>g=hc&|xSDL-sJ+%mnhFKt;XD#Gj
z2zE4q&{%)2*@^mvO4vZ|*FE@S$1}z1{Oo<oDk%~Ob&}S~|6&`wRJjvInj0t6e7R0D
zm%+K_Mc>{4vd%e)yV|NLF_6$95=Yw_z4vQ4lC3tBMDGfINUylPM{vLdC8$PvGww3M
z#7!FCN}^#}-qt^>V~yZ$FrFzti)i5lP8Wc{b)L^3ngy~Q{tIn0A4raVvcVtQ$}w_8
z{3pGv*4Hunp5VvTf00XaophUX0ZP<L4|Bew+4i%hf4<hZRo4Z~&&~A(5S}u$^%Qbm
zpetxjdS{lgY%nKW94}>&+jLmekkfXZY#_;M=VNVsAyL*H&%BP~bR*Q}dWg0oT^8Hb
z+8?1G&z0BSPn^-$hiXOPI+G&__cnoUIy{k1=Mc@&b;oJ3rj6kk$$N!*-WU(H*D=bT
zr0V|Tqw7^x$?|Od3@g!L!cOqQSF7ZW$!NRFDNm;|d2K~(*`%*Q*3~y3q@}A_QE>1T
z_6D(LLad5BIEtTzyE_8L9|e!)^p^N1XG>BwZkhJX2IjpB!BjvAu5P?4wikmTJr-d#
ze~F%~qM?I`uv&gYSC`RHUPM?eSZ1ec==@HA#jy~*aWwx=5(dFZKo$AuQ_>Rp!25mj
zSZFWpKHMx~mgDF1I61Y+^zJP>M|=fW1(A{|-QHr~ANxVa>i9KBlioZk*_GScI>eu&
z1|bw(XKH?{PY2&7|BF?JPV1t%IM>@CuK1MYhZAS<3|$8;R~lD;C|B%<PD#8oy2Bby
z(#8&Fa^s#ee7BNq4f1V`peH?BZj|kwtW7LG=8Pn;2+>GHu9HNvEw0;77(X?22w1IM
z%aiOB(=+-KA2<0vs~0Nfhj)MhXFr;#l`0{U>G=9ec~qi63stjc&eM9u(Mj>TmCs)n
zqy~jI(kAj;bc_&x@JKEnS@BxtC^T6o>tw<V*HniMkw&=EbG$9=ae2C7tr9mI(+yjV
zgf=%zCc{dIFC^fxV=u$hc#IJDy;~Q=0il55wvP@wfA_?yqIxkJMt1n8T}Ol`+K=i{
zuR>E#!UOw>4wdD*?dko{h9uAd6M2~^-V^XtQ<MBH7#=&8XvML5zRVF+n#d(Y;iK1d
za|ED>B8iDT>SuRV5`lF@KVqR6BpM!C7IOSK==Vpw&g(pxj3)fUkzqW=b~T@qFwtEZ
zW+hV>@`(tZVIO~PD)HCr*ovK<9kXxHykgqU{en1fN;#jwg4p7qn!+cTEpyI5hH}vG
z>x6~8sZ_AKr9oJMqy|Y0(OfufU3-I1W($>IBOJ=s6IioUUS_%(HTTpfCmY%9#O%-*
z7Wh}nGS9alcExi=;#_~8?TAqrbG4o*nahwsLFg1}QWPF4TIl>4u;pQqh|II-98+uo
z(Uzi8j9bgxoMgNzDV@owyPUubP~^g*#Jxy#7^83fyfvKkIEl$Fgu-3GXv<u4;LwKH
zi{T5}0}$rdKN$5^bMe^dXf0KPCy66P_Gj{mx@}$b#4=85S8N&fa&4(v&Epc6qr<}^
zGUxU}MHn|VUS5Z!17S1=+62XSRjKVu%O__)XJwOr$lnt(F*DBQ=eW$rxSMZa)YoiF
zdQdiAmmr8F_ar$^ijWkGS9WJI`A7oKkCU(FLsIYGoMAUc4xumOx$!gcTsW=!tww}g
zxi5MQP|WWyKmEPz9_R<|r|I>3c-G_7y!TzN53|0z0QrgQ7caCIUOD<eH)ErJ-lYy2
zM;kmy7jJ%-MvC$w%r=xdhH9BAny*e`+H6jFx{24rL&Rf8q1<FLTVyweS2SJI3eh#d
zG-=H;siwgy8i3ts(eL|kxg08j9UeK`&er*DS#8+2iXOLXXd)8Hi^YngSKbRD`KUqg
zieYa0*-EZ_>sHrJxMO^Wb*kGR?`kWpC;A=J&>1(h7!{7l6brcI(kLf%V{TT2<75-6
z8&zYT42<gcDUeCxm9@a*8#pK_^-JFm8P1kD+f^sm92m5Z)w;nNYJ}!LR@bCJLXsU%
z&qd%6M-3S);A2CiB2imnxFp~86*(DnWYUI-J(T2FrXb*COoNc>7ft`=>CKA>vVv&c
z>9c-_$@t1_qhpRP6z0#+ww!e6an%ezStolEC*FwaLF8jo@%>hTO&IniscS@-4Xk^{
zrtKJ5<UQUx>&7a4q|Ll#BJS?d+UDhcz~oPM2|KSxUs4*+p8fP(ywu!Bkt8%c6sw78
zWyNMQf4$PiP-wJBw)<i*(&#qCj#aw8k{Gvh`@yobOw*{J8keY19`k%(Q0CFf=iD>J
zFrI&zxy$w&L>{f?;zPdE1W50pp&X*=#w>q9F<vL%O*D&=8;j`V0^40B?L|s8GtTIh
zf(<LpszOj7$zCK<y2erpL_#acO)c%R39)km+Tdc0QVfVzMrBY1pF1~;x`M7r`4g*e
zm)mW%!d|S@O{I$cifi8t#Vadco0X!Vz*{*>o{|y964+OygHpN!b_)=H+o!D;6hCIj
zaWcvUbE@H<eZN=)xj=cEW~;NRy28oY7R5-)FFp5|n;ZMe)~}2~ejxs=Fb37koCx(9
zcyeK(AV);McB^c^08y;2=~`S|kwh$Lm1)09;uINOCMZEKjUq;3+!qsoVbR8#z6cEr
zi0N%IqikJ*<%xJC?E8}FMKyTM!;mp}wUc|9kk<tPx#2;DF+N^0pWx<Smd3(DWtux;
zmZE<1)`Ka>&Wtj%YJiK-AP$vs@i<*4hd0{uunqN#iOC>hj6>gO$NE&}#blR<?wGX<
z{V4>dD+`i|#RqLfDYEs|E;WZS(Jd4JuKXL$d|7$*@si*w5&^NgZ;jfd9P&&PAfyK0
z@-#u^rMW!<3dHgDRD+nfKzz(tB&HQ<8g4F2+(~@yQiKAa_dwrJf`<O)K!uUqP><ui
z94fJv8;W7Fm&5f0wrfBP&fA}i50!tfqm-BJJxQ8`3E(}OY!{os0lSV{ys5m`k|M-t
z>{u|5QPP|UW&x-B%aYvU?T(iBW85A*9V0nld}B|2ByRyeWvN&^j9@JKZ@!Qbsb8_^
zONlcJ=M0REj)N6&mU~$eu?2^f;T}P5TkRP+t4-So4XIQpAtJu020vP`T?2z@1x3Vd
zvJ1qX!amg}mWG+-dq>E0of@wos@EzJey05Ent8dE>tKl|t3mre*_a~%{M0D|w-9f}
zC?w+b<H(8Il}w+F)ckf?Pcd&Dyqxo2JnS#WkhlR&$|$*jv=mo==&$IPkx`K+Ug{eo
zF#1h=mot5MH*}H7Jc!O={?<Ug%)0=~NS$ntF~>fEz#g9_ATATsZS!`bnjtFS^eH6s
zdY{~Fa>v+oy@j+DD2O^9u(yLph#W_UVr5pQccN(|L%vTj^!N}UkkH#>=UUua>^w(f
zJbJADK(RUlt4b}v)x_UlVCbm>IDny<ehz@zhKLO0O%{p?r>O(zDGhZ+jkL3o0&`h0
z@{No_wWBu{*EDzEFzZK`(=~~~dX2&bK`<Zhe9)klpIfKoK%B%@_s`s)?ERln%@%Q9
zKvw~raxISi(p8L}Pwlq@+5W{OIVb1HNkVF7U^NY!A{5c44q14}_*(DuAc0lxPcJ4o
zGvC}S$T-dpYpgQj`W_~yz91)=KbmDlc84U+8P!Z+k3tZMCAK}YRENE0bVfDhuf8~u
zF2&CqzdSKLK8`TUN5&usHv$2AKuUR*uYSVia4BaW)GTN1*;yM*E+n}uAFBoTAeY81
z-aMdxYZuP>()oMNe|h|4Dlo1x#xHR(r?t-E^1H#SqLUK8XTlHbx)y<h;N(jdzLoJ!
zCcsiW=nmz_H+Vzlo_SkM^p?t-4I|CE`2dci=R_EJVY&XPGhD8xcV?b<a>x-zJV%;W
zKH0>$zqd^jvt0{Zv#3t^*dDNRu~*%VWSu<Iq5IMRgIDDMyqyTDFg7&b{&WY`$h7a!
zcJRo%Fh10;49o<G@6bCS1PHy8DQ2%DuPO<mGCTtN4ru+&Aom}BCqfv)cdQGN54vrl
zNH5|UoW0ZRw*!!`;dgOOupJNZ6v^23Z|-Ld6A&9iDa^GtH`^oSh(g9wkoZ1dEfrhM
z#7ulrzEaQekjv3*6j6hH?i^fHzDOwwpE*WhvAZH(;9{mhI+5M8Q8cl;Cm_l_y>m|q
z51|7P!|^AB8yP?XE}H1sStdAo3W_XgHx(MPwWI3&GkMs-JB@+sRef+T-$|bg0qg$@
zcvks%*4}As_(r{2#p-68|I7JkSlVNUnAGeZE@BMm>Ov~4d?vr*k9=pVw`DKNYshuG
z{&rknNQbtbo??Qa3<vsT*>K@Uo4zmWL7IK@zzE~4tS9XEc*vZt)r;Y|JJv<;-Pq|0
z%OO{|+~4Q~2Y_nK%zLWsoY`7QB;R_zdr#gJaIYRa=Xj<Puszqhm~q~F{nPcJ^~p8*
zY%;hrPmT=bJpmc{K<yK1hH4`W6Zl72zf_ZMp+5O0-mDI<%_D=)LqgA~|9VUwb$PY<
z-E4nT9|G@Ty<wN7?l8wpRCa>EGnV2kj4}%4b7WKja_3cjMco6HoZV~yG2pj)qF`7L
zVJc{QADVF*X?0cOT;3WMsv=DOy3n*h`BatGSlLolhrUJwXZBrl<;2|=MZwM#05d?$
zzq2)~RxsboSgg_(FUIe6>$S#fx_X73LiM~S2ib$bO1gL%8=}nT-y8|%NqY0{0f5ps
z`ihbDjgrz?{)Wz#?J;z;zqWa=h_}v~Uwwh0e6)CN<68v4cmhg&di-qj$o@o|*H)MN
zhH~@QV{>G4ak_TpTan|pCJ~N~V4rVQwtu+3Z0kP<JREA<L-ZjDPh}EuLJpI*J()_}
zT$~<Yp2SRYvE{9Z;bbvQXdU-&t9Q}Sxl3sV>cpe!WQvt4J6;&li^~|lB(=48NU`r2
z$5ptqRbX95wQEDI>V|^m?Dw++2AZ+`PnhjdQ-wp7;&+p8j}{AOe&HW^M>tULnR|Ok
zuD>oM_4^m!6*k2o77=|29Aq>saUVY9U>1M`Y;3hvO+r$Wxlm;ShBD?sjWJS$x#CFt
zalGMd2ttrizow=n(pRG;iN|8%w`f9%viT0fnpPY@C_nri9kzc)_XwUrm{EN^M?~~8
z9KsqptPf>CkY>~*A_I*VIO4tc$c;w&m!_F!^Xs=YV7%&ksTIJ23`_L&b#~lbrq5XC
zwJVsP@(gweY7>RvwgO%>J>JhSGf$I)DB$V(zS=M?Nr#PQOVRaGpb^N&Z?Kz!PpG`j
zY2z{z2Er-Wh6fb0NAky>3RpbR633Wj$86{78f~M+Q_WnU=k|wC%-kU%`fqsdB*QBV
z7l{ai1U_VJ?Zx0LjOU$ViklGOPDxDz7Q<vzA}bgUg2s%wuo!PJ?Zsfk7&tk>{@2g^
zTzoYk-lO!p*rq7Q`jeoGlGu3*@oJ@Ulo@R(vh4SO=F>b}N0A8?-ZIw*>G5P#o*45`
zoR=`K^ynmrr?zg-<sU$y3IfEEApzG|48P;Lm7kWD9F5aX>4U}@Yt^%@cxh{CkoMm5
zoPXV&&8X3vA}~MBUNYsjSVrfKEPHdn=5k+U5I|P0`W2GF@sfF;XNZy%{u&bu&Q8i-
z=V|l^j+gs)0&%@NSlY-OMMQ(3T%oOEF&Z96qmn4Lq!5jYQghe9lB!h2%iZ)m8(i9n
zQU3Xn0y1<|34=SAp9^4;)!bVf2iYvJ>OpJ1qf4XeVnl2s<6=0?EM1vtT&$b1{(Ngg
ziP`1QcuaAAau(eR)Xs)Je2aR_jJpp)irmA=VV~$?#P>g8-w^PChhYw9GrTaM=nm53
zC<$un+#*J`K`QNg-=oW9v|YuSD_BV8lzPB(|Jl~}3*`%1sRC2!;!GV6;0|><r<u!z
z;VIJ6vcTPLxJn$3MM4j5Q@-}>541kSrttz3llsEV32psoEb>y#`{&)#REmCm={YP3
zkS~Izr@rF*wXZJjgaYCHsz`u-g(1b@h09>l*8)ZPyAQk=cp3W?_!Lk1+m;~P8*K!4
z0ZFiI>Zi2PkyUz~diHB7y()Zd<(bL?Dhn<@{q^^L<@~-4$mL_}__@FWXmHolKV{8X
zmtDCkNPNtjG0*go`N(BIsa87)*ry2&G7*|kQC5h&l5AHtZ5%aE5u`I4Cj;AF{i3TJ
zcoP!fEU41C8?#|4RP34arDaw7u5&RktJ~QYgl2R(7ZZT|fW!VA{8YQHd(t7WicG+#
z(LnD{Opce;bjQ6R$qxFtUgJz5bgkxTAoiq|Uby)>LlXGRQts9Xg1wpWOPu`;5<fCj
z$?92n|J$iXaU&ftg^I8WJo3F3uV~S&&ib15!zq~t^{yLhWplY<y;PHI)$t8@gSD#3
z{{cC)@x9VykI5w~{<C5@Sp8bcAnV9GXPpCfI1FwVH<Qo1)YxH@fF`|O9E!ozZ=7O#
zcL`5V;RE{>H@|AnueaE;&Yr*p!z}53qVrc-7QXP<yK%#gdYv1vj<Z&8&b#Sn#wRtx
zjrS<4>LS&p48sckL6*~l23wsvl+#eZ@qD?{k}E!>@*~j(GCw3uZe+c6>cFUF(NmvF
zC7+C~{t{)_o_?MERiAN})$tgb3cTL4+0ux5*#%N=;LyJ;H-rU?%dzP961Dfy#l=2g
z7sV9@3e7L;bw(0rhldkSXDLwUl}hx5Tq#%^zXWR_Rz@Q6=mT7I_Se|Ta?%1L^4NDp
zU9)o<tU6hsBW{P9IKhAmOl=}IL>r6R3XU9B02{=iu1H`}AmFc}s^F;7ukNi;7i&ih
z)Bjxo@;ow<PKZC9k)+^N4d>7%<QejOhGCVty#ilH+>fz+n`CL9A&@#?$i4;Th0(zq
zq4@P%1npcbS*gTbO0&BD8R^ft-;ju`#KWw9ySA545D}A}9Ns}CKAj7;@tFi&)#MX0
zP?>BsaJb-4lf%)F2=;+n%78RaK%c^)5i9`50Me|Ahl4GHEE$<Jy&ddWH=ivdKaew$
zxCDQD9v_SSsTNJnhu=fLjWNzRqZMJjuO3+`vrWGuYw8oNVdh^wG^a{&O@-w@qReh+
zHjZnG9m$-S5S>u}8Xyn}nlhj}i8BndXM!{V9@ULn(5BO=r$<`sYbb4v3~;t~tLvr=
za%ox-M$LVSxQl5z$uH~snh+g~V|q}Z#dTK2Q8`78(k3U&FYF74k#^;r@~!y<Jb*HW
z-}Kvx-u8?Zh3Q#QDS~P)8qN4fPOST)+7~e~nRCt6%9pL_lIPfq;Cto`ouwyyt!sm-
zY*ecy?=kY~s*4>%rO(}G_EA+zTka?F#8vv(l>5w`m)5p>zc?}JARmg2a;0vX@8X)$
zxrGwVeI2^a3I#e75dbX2(7D|AHX2wrq@S+utY)mi8fBX&1q}yIO&OsTGH`r?G}-iU
zHU*Hj0#<J8lYww1Q$5IAEg;{X@!-FHola`TNuIErS@kbtU|B(NHkvK{i&?HSFe6re
z8fXV|hW<rRR6C({9hdN8HrDutS41Pl2Tn0>KEWC4DbARw|3e#iG>jy*FKP&EG4~32
zmoC^Zo2~LJm+tb7QgYY%<Cf6(TUkXaM-b4J;!ABW{d_n5$L{<K@BH6WNx15QQ^uFL
zai&Jq*W-=3_>8DF{mc~wIt63q`c`uX!V5sy>UWxeE81)SF@eNm%^c75VZ*KB>B;`2
z;ddS|3p!af%~7->3c!l$pDPw;A`&Gk9-}fE0qJzh^_pOfN2QS6w51KeW;$q2Gwc>K
z#ui=$hJHLy5Ccv6zghsx1S)re`Nq%I(vb2=FrXH2AtGRbP*dgt3ry$(6*dbBHmpzF
z)DwFHCb+z<U?_<K+l7)71;4pXaSOCzP{;<%*x5Z$o9kL%U8CM`cJ)`0e|v4OXgUq`
zRSb0oEDAyChiW<WUiYgi@1@lQHzV!9L$79~1)N>C5sVNNXL5^sPFcLNv>-LCj}*in
zB%n`#2xa~aM{dQ&bC}^Iii}(a?`ivB<3!fj+0pGkwBNo3JMsYP=y%-A>orw^cxry`
zw9KZ~+_i?Pr}WmHpFW3q)2ZL~;3*u^Zz*gl-tLh|@GTvdJNwA=0|P7Be32N^D_f<C
zE!o%=T1T!ESovmtJVuFz#9z+z%$?yJ_x+B4avi;9UIh?R%muy;--3%YFDWaI*fC6D
zF;Epnc77U?Ix9>*juK7AWtCz#4>hE>(_0DNNN*N>a1aA&IDhdw9bkWyB#<|~n11hB
zccL`+<x+WY21=51h@z?kg1z9uhlT=u*dZ!eX4ig^u<@|!rdRoaU9?n7Rv6$gMtS+#
zY=aw#BqEv5T-N!*K^nV*ML+(c)C5-zEZtjT@)8~}arx#D(=Pjbm&|yzS{{ur%FBTS
z!Il4AlJM0~Dl{4clq4!Bla#@U2pLj0(E+qfpeDYe;1cCvXKxTx+>tIBq9mMF%!i3+
z7PVFGOz=o<sAazTX<w}(fs@z+Z{L9c{T8=nDs5u!o#aF^nxmF=d-U`k-MP_-4d1q0
z8=t6&@7TZSsqBQ=?OLZq$K0C6^a^(9dj1YERcwb4;8JWYcWW|M`FPpYkvpB(fHeIu
zFoiwTk$8`O-o4tZ0|U|53~w?5Qrm5R)Ref_J%8TxUw@s^a@QaGmRcs3*Pkzc8{fF6
zov)#*DCf;v&EZ3P=p|xXW&?#T;mkZvV=zZDxZ1pGtM`6LlI3YcP@KYJW!`^$I#Ap<
zX~i#b7?;)8E!vN#8_j?ET<l`eH&XOIuUu>-eeG5ewfKU|_u7UZRra6A9V$XI{cMyD
z6jD%T>j}|h1Ft6zzWU8PYR1716h*D<!pk3c{0sN9eZ)3qt#i;9D8#T+$jck<WqtuP
zo&;6c;OHq4(?c=kX^V3uL-nk3qZ&ve_cPe$4%*m*9w`Zwi%eVC=+mhw%x!866r};?
z16A#Y8w1<foFe@G#o0-Tr&0^>x5hTjS2M1bZcwGy(MXMlwbkF7HBmQnT<So-juTUN
zm9MT+XcWeT_+@eG+>J*tKi<85{MeCN8$Q(z-qr#~Oz!UG+tI~i0b9dl{Z0yvB||xj
zSfxDrQSI$sY5BX_?~8CORUpWb6c-C0RKtn(ev$1}t}+)WCwF|-FPf`DGZX;A>ao}8
z=Sm1HyL1Zb9^CP)S7%I4B=R6z$X4V04t(CenRdWvFj$>f{tW5tn$OTY+iH$z=lPtr
z8Hs8z(9U~uOipdHt>#->Odj?#Q?Vpj2!j##rSZy$6MhZfhoyg#kxQPix~=gT-67Rc
zMJU*dnv;ve*-$zrf0y}tug1L7tTc1QlZk~_Ofx}@Hic3R5ovZU6*mP_5IUbsu`{i(
zWd@q@?zuf)s*8!Q8KT9eG|RKUGzP*?L*MCAe%z3Zg-%N_D`O-kGnP%U{MPApJUXQ!
z6<U*&=m0F8ipOp;PL{^h&P7L-5bMz;SJkN@U=ZB{G}(#5hx!{2x?kGP9AMSzfPJ(s
z@k?>v^u>OgO2=!ar*yf>Yt8mk!+9#p4YSJoDfdZ?`D-Lm?uLxs_J(rRaWjcjl(l~;
zK?+iH{>VLBM7RoSIUI4S@8WhIf6qhQZf^tPol8<4GKO~FDaOszF=U)$eMFfuYdkqW
zz+DbI#5nz-fBL#YQYm=$%cDC;(`mGQd(AgAp3TY^G|!J)7Q_n--a2QRRtGJ8K)4{?
zp&DP;fJ#t$7p1e0`iG5`SUZ;~VMI#JKc$bHToof&lELh9>6+(v@NK@y&Hh32(2g=(
zsSVvd5#}~IYKc<t3ruZ_p^E}8Ny24E<F)*tQm`kSh<5iRm<dqO89p^=3||U>ssUrw
z(x6waKfH!3`oiD<_5Zy0<6z!{&xf)jL%o2P%Lo|7Lh768S0_TN!+x`?g3bM7;bIK{
z6Vm?g+BJTCVDQyJ)<q~1C~~43dopchHTx6_bUt8qv%>=e?_>fj3~(wvuFsXmya5;|
z*x|VcAa9N&-KDBKX7XU7%%a%*bg{X~pGvPJ-}~dLNFV;?TIB!)5=)iC)QW?#9M5Y5
zz$*|;0d4KA6yD$OQZgQ-<*qUGEU<Cm$HVoAm4`+i?+d}BaFWcqEtkDYC1S_xAE1@b
zJ!kb+^`nhmiFtvLy?)OZ!`Hm^6)=7+P{+^Ls(bv#n?j=a#xhv4TG~JB2yaIrc+GAu
z%G-S<u6<7%ZwX(%KVrBWO576RiRVtf`F0z!Bw}nkdg;z!h9*m^hj?CHA`z116~knh
z4=WMmXA1#kNiu->uZslsAo76}LL=}fX=+YRK2vu_!3<Xb(+r_}mjhzB7zzFYh`?9*
zZ&zMiaT6MkKfk6iJ_JGlOwcbq(P>iu+bq88_~6K6d23g`7+NXELRGw=j@D~xdDR;<
zSpN0LOT*?Y4Kwiy?nVFt`{lej7~*hC>vfK=u+_JN3zv-9agadwoS08RcK&%sH1PV6
z%ii8DEN!`?BSa!z%+aHV0XS@=QCjt-G4=C;tI$J~uAk^!t2A#)+^CG`?VgGcm8PJD
z9h3cJL^kJWTc*5x8kyHj(HvdXR``B_E{4}Sw&@Ox#uCibFnTHl7##W;6`Dv`*DQd~
zzt1<Hk$SH7RrFC#yk#yoBs#i=#V*atFxI0@z2$1T6YDwu7iX#qdotRrLya5$8>>$l
zy`tr!xYPUpkWSf{f5Sj7i_}-tF$F}i2YMV^5W%qGTd++fR^~PAav?M(Rhe?D4Rhk4
zHzj$00OwBGN+>_2Zdq-K9wJl|`a_LPZF2iA1n!vKw0mMxPE?E?>|H7uedv-Kc3`Tc
znERrYG3s7Oo#pO}({__iZ|+swhCx#{SD8=QiDe60DB8|K5d-C-&7B^FbZ;?Y&#M($
zNP_3Qd(pu4q<+gzfPGdS%Zu5$0B^FA6+DYRBgg%sZ>sR_zEnm;BJUd|H}5m9tk*8}
zC_fdxX19`qisj~A-_rG9A@!WVvHZZlyfGzJ@APp@I_R9IsL!~3k_7ueI4AQLE3Wlc
zsJ2%gb=#nVoiKlk3(I{VD^xFu?on>(6QJU35bB<OhGV<(dzWyl{$cGsrs$(qIwN*%
z`00L-;>a=XfzR!b_H+p_jZ;uafnByQ$ZFzeFCn{<h#Pw^8>3?&<!YVK_sM9Hh2mS|
zJ(3Vr)%rlnjd6=fXEx4FmaYH#AD5MFaq0UdSvc&zWMhBTU?LZd+E|fvuB7Dwvz-&9
zuRfg@2O<Nv`+MSr#d2x5#T4mKoligetS~)>FTXjn(nbO86K)<>eWp)YTN2fr4;#I;
zuOdnA*$U}<M@4!GU@6mwa>^3y!5y|wZ%gt2Spw?1r~Xs#>Bj<<Gy^-JrMr~A>$lV%
zOegfQxuQPduw&@N;gU{38I`@@s_{4=;TOt_ihJyWm3kCn_5?TuUw8;s;?(fd+}bD}
zSR!4{l&r*?O*VJ_ETm@WXJ(YsE6toKRI1fV8&wE&J`FACU3z^38-{PADv@nR2gSA@
zmNAJ_%^i$9yRo{v+qLC~{I@2mg%vs%mzhz6dhtl@;cB|QY#OF&{<%y6?i>x+MlAdP
z!SMKxVdz<^A}37CtcJ<7rLtm5aC`Q=mo}}{tLCH*Xp`pAT@$~J5N)ar{YBC}t_#wB
zlImumyV?Xsb{vY|>W4+UU`1DHZWeWT;5Z>iR$1piKQ~KW_7y9eTQawn-6dbFZFl6l
zbHiG->gi2dKiqcWY@V}|IitB|q=-+-49|NU`Le1kvnM&LFB^Ro01Z@q<;)xF%I7xO
z-d5{+!?gc)RT8;d;?ZPO9xPvV>Q>6_qvS=+D?%1Jfq3HKVUJlZOf-#h-B8Oh@*)wf
zp>D75YFjB-bJh_xG>!EE+aSp_bLCUYHr>IiqVf!TnJ5J;iECG?hY<S;t2!D)ZK^Z;
zh_H??3h-3LD%~H~1*v)`sWBe5Z}BHH{}}jhig$d_ixj1)J<3^!JP-;5VV*>&ZGs*@
zMqi^@Gv{UkUbjpVm1gT^CmIz%)EFjBH@8MGdxDJTl@dp%im_D4Ld4O|(=V?dX1LXQ
zabx&hE=(>-5wdPx9=)X5(pRBtl-4Ni5NH~T-D9L7$ejA?u6*K(CD=bDz|dU%gf`t3
zQO3ZuZYsH%Fu(%jvnLp<87GR3j?-7JXvC@GpFR5k?!}!<mKxkcX9!XR@tc{9iKaPL
z?v(21j;q+4L8TDWnpD40^{#o$1;mXeY5m!wX!V@qQA#W$_IzaNsk#Mv&C2nje0f<&
zw8-b~(R->!NfITQtWVex=oEq$Qbdv_)@$k~&IuRwktnFF{qbwn&9`6Nb>Uc41%a?M
zgG${LZ>@pdbjP58^&MamShIiV3+(fVYy{dbgx)RP)TyehuE7}!6jVY<YNFJeF9V$l
zg7`|nZZIsS#HUz7#P{7*x}HeYXdTxVMrEi1B@EU!jwKA#FA~PVwZ;MzIwpEdY_S<+
zOH{S=3b9_iM|RDMqRJ0bK{Sdw<V3*)Nr49W-UF}7uaWTRJh%&%Aug0LKOSyW<(}Xf
z$a)<IXw;MCu(b@IT8KjA7^?EA7naWNhp$6!7SisQwIBKJNu8bm_>Z%RegiAp?{fle
zrZ~A&f3U?pW+7v@D4I(fNcW2BgHx@`=twsqOz=~`E=0rvH0O&X{@H$A%i7trVZ2A_
z0-AHLX$VU<kig&~e`L?NeZQ=UwVHgNd!4D++^|uSH{NnB56T^Rr~Aj?h|Gd|s})jV
zR?b}rb~JRnmY$%Gi@&f1GWrPZ<OKS{E#}AQuBcf=j@yhG?Niu5swH31LMTSo6XV@T
zYh`~WCImJ6)jcP?8)`-@r}z7qx<~c&Z&&ybIp{n5DDT>&kiqv@&@*~q_hy|<gVa2=
ze%~?b%lTqb^fq*+=oBz)y>-?`nyJ1?Y7xt?`{T<VN^h%(Nz8Gmxwgc#5GaKku48`#
z$C$@e@5n&(x~tpK9nqpA0%gr6o3U1vv-hdY^LZ#3`U&!T%%@9rq|f1)S4$IR0hEwh
z3SK@acSK318Is!)72mmic*x!g{@TX6;x)WyS%60}rW`U4$kY2Ki}U-Q4AXPZgCTJl
zfXZA6p~0TKtc;EsL)}m%Rf`Q~V(Sz21@}|6ujSe&wMd0bVrk4QoO8A0MgzdP^fu%K
zrmi>NyhP**=B8&I%%g8dVJT|pQ!OT)J~x!odB)G@6&^!F&Xx#i;#~kuQXG?@y9`0`
z8jmoU@C*%0W|Oo=J$eg_#%Ba)iUY57W}7z`OL!oVThJ2as~-$ZUM^d+rqr!I^IFjX
zWBVC5<Q5YLjfFEd{uW~%&6k<iam)v@cdWT8LqqviJh%J~T`5J49m6@ApDC!%o60b3
zlv7RXA1);HVnI`w>Xt}pViP5L?6Ps)lU5J|-On4|x5|JRH{|v!IN<tw3S8nyra|Fa
z9sna-mpH@)q%fW;#thMNA6qS)b9WnV+jvkb?v$uVMQr;Shviu=FWqZ4cNt4!u0Q)Y
z);LG@Ne2Ng-wSo20hYIN-n^M?IgbxTY2KXp0TQBynP7$@g2scMk&noSpUb-Q_9k|r
z%t_4K1l6K-DoR{i)m{T-ZU*#G1tn?;KYQzLS1X$kvoQ;TvRZ)H+(WDK2^P{Muh%p8
zuOZv+HtP44qy8_YQ%A=jK&dp&j2#(8xFN$*8f2axIA~`-gVRcW5swg}vUNWTT4|xb
zL>PmIG^6cHduk;ZDTpT-w*`2b=}lq&|5<ixMRbBJY}N$D0sRwWI?2O#;e}Xhe0(zV
zoP`qWB*HF5d4@e726&RkDlJS+nz>&VzP9gpLxa=Pdj-IB)8~jZ0xqAXJQ<(_Q1Ei`
z&6%0u5p%gQxx6o&7S&E2IIwkfqP;HDzf-DTa)fHDUASDWrJ7-OUX|n<qN(9?_VZB@
zh@K2u#hmpm#neQM0Clxf-47UzXNxw2gb#+Ydn9}27IF`!GTP7Z0RA=eKDPK9g)9k^
zhiDIDrW+Pwu}ap8&p#x4Z*`S#KFz59q;^AWp^_-J!aUqBFz0ytC=Ns?e__<8*ixA=
z+}|SLZ$O%csH8ql2%9<ImQlG~w&JK7eYm#(Gl3|JAbK8NDJaseWwZ!=MKKp#1Onf1
z8l6IbD0%ypX3Vz}#Yph+&&XMX#4kum{*3@TEdQsJ2yw!zJ(Z{Y1Z396e>{3@uxM!@
zW_&@H(PqGBU3px^=npz&)a3oneUBfD$JMVB=SHsCO|dRb7o{ys+C!t{MTlnUx~#vf
zb?xF@Q79BkjoXBvQfjTMxl;QQ$B)tPFSYPn%>=h~4pdKK4y21jI}=0Lw_^g0MZ1>0
zMaEQ9al_sGXftG#+bw$q{AO5i7R1BwHm9v<4_%_U+g77UVKY3f)!YDfnbb-^Sf=9X
zzUTJMO~iU+Qp!wX1*0>fkuR76^az-TxMX^$BA58{Kh%H&A7|P+L|>&H(ZW!uzBj$C
z!e7~-%Tr?&eZCc;mcswvsPxK}{4kIt`JFHVrJ!^ByWpEmM<rhSmRRD+12xm#{#0%|
zo4vq3CIS&urUX3YjTV_HGYC^=Rx$JC+LI@&{nU17lFG_N=Jcfe3+`@)Bs6ZTwYMkS
za(!YFFz@6<+jwvMR_Y7E1JL|col0j(9~e&liJYf>2C~*PgS#&h!5i+1eBY&9l<Xu;
zm5h0TyCRutrhNr!kGTNok;7>Se`3@5A=D2})4dQ=Lbi7ELpiQ@aGf`O>dG~-{rIee
z9&s}0(W>Ca(zF2gRl|+DEbG<jyn!1@ofh?d|2ys7S<Rftos>jMZCmj6<<L*8t#jU`
zBt~rISc;B*radoT7`x$9=}hdg>=#PJ)7>Vh$6hE6ad&nj>*K!(9`EXsj{E;E(NN#n
z<rX?(Lin*}8diuham#0JiP@P8uZsn2I9AhzxU^!?<+LytgJDN4PgHDAJwc3Sld)Iq
zPuHzaN}v86dz;nFk<GHXXU6a#YZ*F+;rZ=J{^v8~&nkKl73P~kBoY6I^Oe2Kifg`5
z4as2U=Cf|~Mn`xl>qq}mP(>xZHN;%~eYdXK62QEvGuyRNb#<HG2v_GV%;@nSnf{pH
z`ZClM)aLuS`t+qoiJ}tzs}G%$i}V@}C3ekkP5<4^Yan<BhVMf7bw-ZqPB+(rYgQ>S
zGVo+VAqX@L`QWZD3X+OWkpnnSEM~p>rxKihGE`|+4RwpL<iup#O!BVndU>b$8_IQ<
zXVLJ&lFU1%8B25DCl6kvrxKufD}x$0RaH-&sQW^h_|UfME3G87B~QCKWo*@@Dv{b_
zK&puaMu`OVV>T3LX9e_4RexXEelcc*rgptnyEP4o5c4fo4V&CB9gi5nAQvfLMDcsQ
z^VG9qF&i0{BT;<jgKM5SJ*_{7_vBD-nZcf8)^ocbAA=+&@fMwZ(?V}oREOdsO~MSP
zygi^qc_b`JoYx3W0W8{vu?csX14+$z`$dh95vMkgy?Eemp+nR|A1$Hy9GNVg&y~{J
z%(7VxI^B7tezDBToy!;4jHr%1S)vES;+|vAEL3=9p>b8BYv<tIDo^X?RB`lNu|*u%
z2dsc9gyJs%*pe@as!mhne^nl4I_&j{mST<kKh?ymr%2Lt10>nDRc3XEhGa-0g&L$J
zwlZr`49qW!t<P5%X;}OI%^FS{?zYZ&4IHp?HvOEsUwL~!GQt<yz0LDOetVPd+I7`9
z<(V6Nh7R0;9Jy0wmFX+vqVIbKmg+MXm@r_wcNbz~L-W-Skx|(6D|*JNTvVTbEe{;&
zAA9&+-U6e}zBbj-uEJxHKf*YcT7G<jCd6eE^Bk^3ot8OqSCcYQELkg-y%V^3JYY|E
z??IYkdNzEvUEDfxr{r4SPZ#%A)@M!e(#)l4W6Wzx%P<ANJuII3iSo?SG}<g-Z6ebh
zh#IE!QbQy7+bm<@3}&LN8p>K8Hd13py~UzBx+xJKWsC_4{hGpMNf*5q8{KjbHZJNA
z^jbTY%}}r_Ptz%g(<ByL!FNfbR_wwkXz%u5dbE2b&t`DC`*>^#edwhcZ=ca_8*&Y?
zl{cCt)2II&xO<)-uML|M;dle8ZJ`~f2E8$F(2}$CX@l``6R_kU5=z#}+)tXXCsrYe
znIg9musw++6$%Z}mo$XJ_)Al|E9#NL$|hRc+nIxrC#2?vrCE*+;Lu*%7Pkduz6Aoz
z=6?VG_kH4)EQP{&Cn9sBZ{MzDvB&+fAEV#BeS0nl=WFQ5$W%&MJ7#9;mhXj**J`Ir
zR+6|Jyh86Q(e`S^+yNbNO|Dl=uOgcpW%Vze*S5RgyIE$L{fzW@ccMx4@;YnlkxA?5
zaW003$Fc~VWK36SZSMTIvt1ql$(QxQ$NOCkX3yfdDS|@b>U(Um*1NaC9boQ^vC3-J
zexu%o-s!J9#DP10tv9j7EqX!0@7UK^!6&TF4s>Fljo2K6S5MV0n9Cm|0Q3e&Q!rA=
z<P#BLp%EkHQMlgz2>npX9Z$)8+E81nn+%5I`6XaO5-DT<n#I5(7uL<aWJEE_e|T_T
zb1F5(VPia-b|3o4PzxX1>|>j8V0%P3hEr&E5R&YWX(0Rh&Q}B338(XS`fzLR;O0^i
zd>Hn<8c&)sFK*C4k~U4@vH;Ce=+&!2e5nwaToqMrp`;65!)&i}-NFU5JrG-atd}08
zK?AM@KeF)*dP-jqQZ@nvt^QL%gXO>D3BQc`kD#^uZ<wh6cW$<p`+ni!o<~a$EB7dM
zXiK>_*#iOk;S?;n2L=z$7UxKT4FBS~l*jqV5r<K@+b^)1EWf9}T8s2~k|<7E=>3fL
zc?yV&`?|@ewX^2-Wh-^gXstuOJjO5YEOQBWd8of5@oLxDN$2purs%J=pL_ArjuQT~
z`pGQWzw#ySrGw631ydqhJG9;XUw&X4AwKL~`rM8aD$d$;T{udabsN{W56yK?!3~Mk
z4%MMZK8T74XzxsGaW`k;61Y+_7WOR4s*$=FT3yC`ppYc2Lt3S*<ZTVM*6#GJ!}4*W
z7Xw%Ur-2EaOmb8CkKapTAD_(anV$Za64NC}zKMk|y3WiRca1&|N1HjqD17pE?RF3I
zpiXX1c32Hg3ebRHaJ$mS4#OGID+9@UD5Se}16&`RAaewayHUvcvv3QC4&A6TxtVdr
zT$1+9pPc9<5*g9&wWo?ZQP@+(nR>wviCb!H35qsum>>o?g+x^38-2Cux#N_m_E3sN
z0tqF7x<Xg*{;$}r78H(Is~UF~g|{xi?H$qLwB?B*p`5*^FBD#~ZDdngeri3qDp6--
z{o<&O(J*ww#vHL-hMxrmqJhJ47Qrp<E>NdRLU5MqF$v(<tKh_8bpLFLFZzS=dGc`A
z`Eka3e#g=HR8L6L1&pRP_XOAbv>gd`g-)XXqjy=ke8ct%L6}x@&+K<Z2xv4*YnB$G
z@xdz%;V-^G4M5e#Pad562mKk8zDoS;0a`*aTZcbvd-+P$iu|Lk8*!vLP<E|v09iK2
zLrSoMy10Y)sr}3j(#hu}wYQW=U^fOuX^pR_DJo@4!K2uMSqM0Psh4|JyP~TpVyDmy
za87nFLD?ncf;-)H9cYIrcg%ylY<;3C(KO3>e05ej2PWVuP&-WV7*Xz-^YdpaeNVp4
zS347URKFp(y4dzcf?Euw`K@p14Q!Q&zAE|}u&1=ZO9lazgiD9wRd%-AyvB^#t4>)o
zn<PhMD}*zZBul_nTG1H34!A}p5k_@V_N8hrM^2lp+m^~T#<a=^a%CA4c6Jt@8Fr=o
z`US|WGEMsGLtD%#&lr5j-vMPud14S4r+fG*+Pedey^t;yNqcPCF{h^dphLh0mt}=>
zTIh5Ujl*cs#>u;pQp2VJM{vf&6*oV<xG1M&vBp<~UOl%B2nwLY*(UX7@Kyu6@y(tG
zw`tFx5?mX!hml7Y&h?r$B;EzEB$BvwP(254=XE$YztkSR?44VlB|cz06%L**_sb;5
zO?1<jwn8aKs%lfNQRC*uRb>2Nj_6aiBDkj?Gq;%?$-RYrP1murR10)yKlB$jpRoq*
zU7O+1_k{A7X`)3)<rRsadc~jp<$M*VEuX;|6xDQOhNr*Vku3c>%S6uynj4a-7SL)p
zY{A_GL;yC~rxz{!hK~Zb)WIvKeOgsCpI)x#cu%$6yq%wB#r)V&9!U5b6c7uI!s=B!
zB1wDqDUsYUg#?XSz_9olF7?<K#RuV(5<v5an=<o+mZ@R`D{;Dd^H%Vi3xRW9#y+1P
z9<KxfR$IljrSHWp9~d>xcD{h2wDDc&ny!|Y+GD2sBK(aaW{CO3T&3Tvuj8CNjN6N2
zc^<8pBeum+YM(Y_a(^QMr^u1Bg5DHL?aMT55*qSP76$I$#wd9XhZgTn_04@GZH^3E
znglJ&eDjmkh${UN9h6h?id^^6oQ?kIhlxNE{|n1N3f<tO2&idgCz@@7pC@r7owO2j
zCqe_7e}Tr}sk=d`xn%Px_V6wSh$;#BUwO8UBYIyK8PKa=?hnuL^n1M%>R(~3Up*`2
zijvce&z>hx^xV344M)^U?$&HBi@N=CsB!yR$aWt@D4j$@85l>8CgVft*s;SQ5ux&v
zuRW5-qk1%jf{J!1qa-^6yn6<S8!{Rc6d*v4X~&rSb>Hp>aAVR%!xZca8VP7<010#C
z&pr(kf!0j6UhAS}@7lX}z714Y-k-Mr2U6J$%r9TLNgk@iro>GrLVqrvwAd_Anl0%1
zNXlv{{r)9TfBC(>^h9tn+sIz+UU!XPOV+D_OXveoVLr~j@2jP1&!}hW_$mEMQ~cA}
zyb|tYM@Csk%p{W)s+AS^SYU_@HzktNfMc>tk=jufPq`bxkAWgW)u9_gl_#s{wq6h}
z>tG`AhC9kff1(D{|A5GBWz>?bPhM<^gF2Z}8KFMxG&N-#7Wf)HTQ?+ny{83(w0{iY
zX}{%0@LVcF^bQm!$DPJOmJ9`JZ{7m9kmpTCW4yrK5Wa+krveu<e1OxeC3f+mJ|WT^
zw69&*!hofp*!GDhAqnsv?|nLWX^9sv>Ud*Pv0edJrHe_c_J+3K;Y0fGo2K7-<nv!(
zeq;WknpURoMs{Y8T{TZ`6#J}0g7QDb-O{(ZH>^3KpC?_WFK2zB=YrOQX#|1ZRY}N$
zsjg3wbQaq1zOBrX2Esqh)oYCB=NAGx(#X}&Tlw5RR8wig^q~--1elwg97Q}g_Zmel
z?@kHWkas)hZA1u-uXWbP<XgoZ>dM8_271IRIjYHLUr-uPBp=?(Ras7yfm^#HYOSK&
z`wvMb^~2LMmRw~tZiUa+5rruoQg&l_>o4?H(nG{Q-Ana{or#-gdml%+`dImrvbG{(
z7p&tb<2KF<yvm!se7dRj@(EJ#a?weg$>1iyEl$<3+|T(cr$3H{GD2`gSx^hn7h3?N
z-7f#2g>parXHTO6Xp+A#C2Zuc{Zdc36GglYx@H|9PCaBM{&in*V!%HPSi-P^+!JO5
zI@rugFRTlbeLpC5i#EQCqt8&7BKWgRe%EPME#GG`?dVxT9A|<C2^5$d+!z%64F2q-
zeHTciOERD|1?jbxaw!O@+o8xKd~|6D>p(!G9fnHgQW#ss8N_Q1c&3xd57=V@14Ul(
z;Oq|aNiyHKuw+(mm2ptbABVYXT46HV*GPgdjvGBFxMN#vS0!oI8@L~%w_{iUf@6pe
z!J}wU#&NgP={AWH8DsoS@;|-{eIIF4Xopg5(CA$r`Op<MJM^fZmW|p!C$FsX1cO3-
zXT{k~t8Mh|$DZr#%R_1`cC?(&)UmIiK8gCL50^*qz!ra!D|%UMKS$`?rYd`au@Wxq
zZ8zjW$5g6bF+}Aer8`oNRdVp45QHLPX!xcMY;kualCjh;XL-I-zinD@hb0t?Fhb51
z&z&PQ|6;-D=v;9yZtVyO?oM4zi9Eh>>xj-ym(=xp)QE=7Xv{$V{4qbf+kT65`SQT(
z!ZyvE*xJEVow#eKj@8VD4<6E)84uEj`&>;30OfqZbRZDZHBUS=J|IdC=Y78387%)%
z9dc1B&9C;GL0lCl^(lD;dekR|9TQ7r*scadjrLb$X}myZdUYo;Torx0UU9+a&q+K6
zK4o6kXer21DjvD?6l{8}e?ow4KMQBv`LY4j_lk?k1I<U)?pm7~8iKwsU=p(j<$n9!
z2kMhKqdXxx1eJ)+E0U>r+oK{PaH?B{SH*qzj};=~S$xWpk*YrTFKJ~fRkm`kA6J*@
z(N}Xe3Y2H<DxE}q?0SKDZY$x4g?Clci`I$j&1R_-4@bWPB_XN1h)i1}{(~aXXfl~*
zZD{|}d`59%eJYhmhzO}8dYrVeA8uC5w1Ami_IN=cm@$p6qNQyCx2Yd%u?h*-f>sg`
zd_4%nK)XGK!B0X5uzJQ&ykzsh$u(ATY$O1^q0w5^ggB79gS0qa&ySdKa40%KHcB;6
zSuzO;!>CpsnY9ilN0f=q%y4Dq;hn8qwyJ1qlNKKx4x-X<p)p~Ej>>n%%9B&MK?4XR
z6VrUXNWt|*BRA29)zaX!+<gAfaI)SUD(cF_3Y!OD<wRXt^OTH2Es}s-Hp>%fR}Xm1
zh)0bC`jGnm?+!;tk`SQRu6~VKx=N|OR5wj=Uc%_QBZ4r2r{vhfwQ+~O1RC?#%j#l_
zFq%tNZ*=in4T>4nmTeIZUgv8d7i+Y-Eo94Z+TEXj|F2#QO7z`i_A{c#-IYcf6OTsE
zROZjR+n1d=Z<Ab8;{rJ60~yhAYY^%pfdbEicuZe9ulO8LoQh0nz@;!D+}>%+j1JTn
zd+6vm8?`#Qp7VM|4Fn(<u1|UTtBWttnBZ&;EGhG}N4|#g=Z(d2&hk;V6qp-Q8S@Tc
zfv{W^3rhJuTZ<b2l%}C+a3<A&K%uPhts1Ve4X&vGB(I4DI>8W8II^OkLUcMnV0%8i
zr-c?L`(fwaopm_}=js0UIS}xkC!hfcsZ1Uc`D4(y%EXaKXp!_}&7Sgy>)}~Pk7k*v
z0R*<I!4lTrFP{lc<^nzN_)})PFjT8MS4t+sAjV0Y3o^L0^7;boGcl0>+iSy#a$v~R
zeX^24%(kxlnZBzNfrHfi>tqOoyp%v43|w(75S}?G)<W#8EOrsmqpcD_OjyEksz_U@
zA<1Usg)MY^`0t<D1c`3BP|l=M175IV!tB-f!$(h_W`zJfE2WI2<!Ju2uvhRzJ4<HX
zcrk*=UKa~ht6h>apg?N;OE`O0+b$p?Yc&Fa4;>M((f(+qN5a0fa6{?2lCvuLHUtJ~
zs?$>|(7(8KG&DIi>SSt=D-4F6OKZ8(PI2i%r5OSRluhu66AmjYKYItpG80XMn@&o9
zR`GQZ{5deuBqL;2oG;ZZDUr_&L2EFS#)4iOjE8~wMjVvio6QBl+}v)l0*m+ix|BR6
zq7j@*t-zf3jCOGVB%GV-9-qnRuVe{8<ac-VxIdi)<x;@?7;}&cL@}#I6D^=$@kKFx
z{d!~Lkru|CT8tTJ(DYl}5grGW#?K_f{hcNS07O@K7$#<A#U<(OAbu$cevT4@SWLHc
z%bVTOg_e#=220&9FDRErTMU>>Sv@<-AIjL3V*mP=gMK7dWVl_LqBz>zeAM?E0)b*m
z(-tW@b|C-yqZl(%hEkVNw2uUR%ev%$PwfoW32O$$RZzsii+!`7Q&yF){S3^1cz<&M
zQOa^}ud$yq9;5$y=a4dqMi8Wo()uUXucO%AZcab&9@l#!UG*^*LMtD{)wQJ!<FGp_
zs|t$k(Pd9v!rj&_&eBePwZHf>^~{{|qje>0#VA_7t-GV0Vt=7IO_^w2S|1KGCn=&7
zIiMqlKFliD13Y7lJK7x7ntg0O;-~v1`zg0pU=VC&Sr_guH7d{#*$<^ee(Eg@iS`F%
zHA>;eTJ<4O1GTx+rl($J0Z@RWFJ@}K3xQP1SdkK<1Xw00W+4cO!<}9e@|b5YYCH+E
zFWSfJrGrx^O4gG#;Z|M={+0UQpTC}7#2Ib8d!Ua7GQO-kqNNQmX*UEU0pJe@7AE4U
zwf@t!j*X40k61-dQ|KSSc*Zpj9>=l0*@|=`jumLC5r}r@uU|vj7K7zem7BeOK_t37
zhCmC^0leiNW{O-pQ_NwEDVnA>L($P+o!;NhiVSBkC^Ts;Yr+#e1qvfIbc<X=L!+x1
zX!Sk}JC7k?wg`}^s0$!7s`D+^00lOcXmk&WL|q%{Q?O-Dhp6i74UK(+eT|KasOBQA
z-p<bxBT;UXx3U(xU`9Hh!x<0+J{6%iIV5aW+RSBs%*)5jh!#o^VfrPLiE)0`+@rJ0
zw6CXL4{V1+vGlV84Q4AZ4z3Hi{^7J`LSeh;6Flv@C$u13DgZ|FnM2z<t&Myfgkuf2
zhT4FbPP%{gX1*cd|M^TZX?}q`TMfn7#qDtGga{^@(Un2IYi{mtx{z|d?Te@V?CBeB
zCc9=Ae|8*hYHpM*&FC^8+%+g6?9uX~^wr(OazlQH<cdTDvX{*wU|dw6Cu#}4%uryG
zFlidxPtBU=okr|ya%Syy$(i?}+No+>C$AnegCRn?NkwemQ9q{hZ80)DRKKV55>n@+
zrF_6xec$!x3-5M?t7hpcw?AKqOMFRL_1?t$qmqSty(Mj6DiAf?M7yNXV2p=OfuA`f
zBa>sjholVH6rcqddf`ip%Fh>sbg|fg9}8rHx@*{h-8b_G>|28~r~`VU8QhR8o~FUQ
zVm$X6d{aD^e%QJ#Rz-<y56q;h0_|x*Ku=q?*e*3b#BfpdrKRF!i$0d&Qpb1a*s4V5
zF58RH-sBBfP9w1=PNJmBYH9(Zk<h+07u6vKnXz<BU%ld!%VwogfWRR@=A*nr5|m0U
zs1j;n$sR~5_RS3A`;CE}PVUQav_N;4R<v6?yWI`l>f)Y+bL?@#<<Urrq-=q<+MGeV
zKh*wttqCH!YW*RA<b>8df815HKiz1(<-p~CrfcD+F|np^Vcxs=+ty|2{Ww#AoH6&%
zo#cyzwgikJ)APFGIg@CG*hvi-ht@)l>k0=EIZLZ=Unl@u0cII6x44LJA^Z!4lKC?+
z9iBtCzQH?K4wgx1B&ErK=cc(pgvCHGS8NR*-4R`eCMk0^@ZhL4ck!fIkTYX0{Nqgm
zXA54u6v#2s$LYCGvvG4HO>^;rGg?keO=<Rh@bJbBp*f9zRf2wp=(Bi!dls%FHo6F$
zr~^jT$*fVYMQQFbS9XS36h@{DLEGn^RuF8c3lz8p?bhT3Rzz53a^fhoz_41nWuB7j
z&9IObGb!83Tyy{$iupBMUg08g@)^*m=X0|P+;{FBP~<g^s%AH#PTxx;X0ym%aeJ^L
zOpTq~U9X54dSF2Kl|)f!m&^p_HfFM&7L^=+Xsbu5HO6&S1UE<I@a^lk#1($`3c<MJ
z^)84bGx1Op3y%6!R>~o~A8voFukYHJ1yE)-pw)>!Y}+;oIY8agmiMNa9*?C0;5E;h
zHZt=0bU-%>p5aW6&N2xd_SY96bo}-0C)BUNVo1v5@6@~jh<6gp=2vF&@wdr}H$BYT
z{4PCWcnu{5WIqkMf5GmJVYAB1Ad)%YW&d!Hr;EKvkJ70OOUUK-T=0;^+mHL5gr0<q
zB%rXE<C{YzmN2N69Kq%d$;QeB=7Ry9-EMStqr5tRwN1!i;j@uKgpJ!_b8wR;3n>C3
zEfR5KgQKbmo0CAPN#e)o^I~h<*%Y~*smuj4Wl)?JMmXI8iCS${OeonAC~;6QHNP2d
z87I7@!9)1R!d8j3ifO>Ls+-yplcA1kmC*3XzXVu6ap`AXI@6oLTU$`DRye7g8L|tZ
zpEjfb+C53hi6{uQV+PGfmYNmYK&cfMz2Hn@A#As71>D9s->gk`+WGpOc2;8bao>Iw
z+|m*+q}t6T$4O})h=stm(t^*S)}vJOojv*?LbHPePzF;5I;L%%b*y%a&;$ig1fR%r
z&(EdrJEy-Frq5agd~+-oM}-f|I^f1|NcM`aXW8ji6?K547g`8XK4#|3K%L?MWfbCz
zu0Te^JT~LavfwTq1(Ui=feqFWFM%nOSd<F{Ga^h*K9pX9Z41;Cn0F`E!Q~Z|sXp8K
z)EivmLp<y8g+u*IVql&qF81zq*1^`Wnt`R(RGt_o$RL7m@6`tLO-J;YdmVVVBnoy0
ztQ-0{?+UAY=$=Nfjmdb*%79@IKv7BC)~E9)?SDPbdVEp&Z`k}^LhNSK|Dr6jT4wrJ
z`T;cNsUw{T2Q-t;d4Wl+2bGvPBir;f3=Ue_tqw&Dr`hJfG93rvw{Vju#@iM`hopYH
zrS?_0YJC+N+oKRycSZeR?g<SMZTBZX=oTTYKp+5sgF_%PL)jkr(ExB`t;7gy6WzN{
z#i7_Adnmp`G7ib$YeR{H@zHC6_9u*0m?Ewg=|evVzYJ9JQC^Vl4BDNzq-#s@=556@
z&gpIJ>Lj|`ofd%rjvvjgu(Vy^JZUHZQ6_h6WNlg9F`pn0bGzs>?3HLw0ZOK&|M5DU
zPKimPl{Zeo*d(cX7TUPF^a~>+90YH4G<wg9xp3p;>8YBWFps2b{&?jK$gEYWx3(D1
z!<<HbIw*X$Lb;Col*?}E>21adU``7ytCf#r&HikiojIc~8C+D%CNYW3!UMh+0Xdsi
zJa%p$1_QS`eLF%c*M|;d-cycTNT3ng2n@+=H5Bb2YKy3*W@TT9jMnMqPRxN}#5li#
ze0*p1fWUan)K^A~Y4FG;5kt>L0VD19O>3u&F_-A{u@MHIcS<E9gArWQzBk3&!xyAd
z4Hy~g+%~;ClzTj}RZEdMVB9+->e0TnJmI^0V)0=rO?PJ0vAVOUPhak5s4~M34*5kF
z25O02RuL8f<kvLvSd|PakLhRcQ!tE6_q>Q>{_BoGq=8f#?NIsMkGNodk7Ylh7DoD8
zzPfI@YFNx}*s<GHl$AAFAR8LIBA}8EaENnrnY7k4G1x%2gwFv6l-3YOX}~;6+r&J3
zrpbEK<pG}#3*Mql)_tH1VVln(LS;JP+>LL!U@enFT-YvoYpfdnBm?&Bf@OHevw%+U
zNR<H|(&&&Vfy>BWjHA7s0U^svMzgEe2yb+DSJl{eE#<^>v`hffK8eg-Ib!p$35ZH=
z5}7G;Zk%*q^70w$Uk`XiORbbdlm;NByg~_?BxhNeLBCc$A7><$B}~vTOe5~&dmARs
zotTzJbPr_fT)?GJloLIi(i>qk;>rz=9}hSpoIKo}ii>mnOkQ42-`w&=W1Po!xvcF-
zEnhzAm-46a){EHM_yRk8D~DsL$RUfV1i!Yw-s%fDz8_C7(k|$ygu(YpZpJvgCa5gz
z5rLK^>vQvTkX<$?3u_0KNH*~diAHfFDBFo!mU)+qkEVP3!7wP3Uf{|L*1y4G*7)n!
zqpZcO4g-UdfaDhx0NmOOot^!(ktSw_&U!;}Nr}%A5Eb1#&YUEYt0*XFT+&5E=|j=<
z9|0W|t=$~l^XX$>=y>)o!GlGDE;{5K{rqWO_{J-W&Yzw!e;C)M$@9{JN@+AeU~GqY
z5Kiw*B<7HqHp9|Xm#W1QE}fP?(CUxm4>Si|42@W%F=%{!XE;1D$fP_A?m$ZdjhZhO
z$MvEw3*)8HHSKT#$bZ+I%5UrFk#v%-aEB0KAZqEQbl_q|krJE>MX7oAw<gf0G+@}T
z5sAIEB+^WW1fBUJtA&59=YvXiX}%1>Z0-PRqgo|BCn>&`IF=Y?=7<!?;b1uYRLbGU
z>?)5<=Q#D7yDqGNhr5l|ces8J$>Q}~C`goaq;?B(t0HPdZ@otlM-AqfX#@VUglq#y
zWsHU;X<;Tgvt)_3&m3ev^ZX7iX$`k*O%m?D+_2dep;STdlq9yCR!B#D=d<hzh!-Ts
z4+{(G`8plP5;0N?6?0thS|Ai8kx**a+lRf6UD=DqXV^Gk=dgw#7W;bNlJca>R@7LJ
z85N`5m3X>xbXYH-LD6v6GPDl}URyDKQhV<R>zb^W8M3^|hoU-b4nq-D5+^lon2;PL
zp(ocvSOQQmHb;Zou95p}Tj@NO8%~3BV^2n9QToa)l4ofo^B7W2=o7O2Zy7hzS9+Qa
zUv#>;B0uVSJW<u_Y$mmlLM%1xr6T%$5?t94+i6~te0{_4v7%C+oW0l?=(KDPJAWjJ
zjM2OKCuDec;qpN$#?87h4_|liW+ZQNmv^RCr4=L!$mvua+eij!`SSz%^3zNf+u|1d
z<ZM<4V_cx8yuLS23+#%T4!88hxl)EiDc4=@_`Hll?$H6$<hDICmFVelM#)W0$>_+F
zhC<5xXSd1N+X}5uO<VfZuwW7p^sQH0a6-<BbPT)S0%^)z_VHledl^{j(eW=S)5fV|
zM7vU_|4?>%?u&Sz?xr+3NE3!%pTXIOg(K;@F{1e<)9X;eFV@x8p{La*u76dWsCAC0
z;3<~x07XE$zic`7(5?15A?1C^k-R-y@)9btnLDSgvH^s3d$6>z1M4mtq?T|Iz2YM3
zA?o4=EdIQF9Ci+?4{lBwn@bE6?KU%Y0AxOc_BM={1iR09FGv=mecTfslJU`zg93YT
zOo1Jo@g$P+4GQO+;4Q?&^kJcoTaNzub94*cZc~hIGLFQb;6R~&lI|MOw~CDqzYY(N
zjCe>+aKWO9$K$o$5FXMp@zCQ4CIsQ>3o`==r}2dIk<GxyW{mfE;}0q4`V0{PS5PNt
zf;VRJK9SlWmI8Ajs5=$>aDmk(QT?&E&SMTv9|S&6XJknCMcy%W2@rdP%wEgdul!cz
zeevkyGTT7sO3FwDl~dss9`+PIA%681n@s6mWE&6(nC5c8(lsyV9gs(PP7hc92rczs
z1*EYX;^fJiOiBZui#@5-C{m?XGQ-G^>`gnqI*TpO>_G@HJQ>KO2~5KWF-$y0DAG#q
zt@IR34u<YSY^YiH_QOt(`~zP%?EpF|m0UQ@kKT6(py~?^WHl#Dvft0;rtbAf_j5H(
zAf7TwM2;n%wpUPGaCvf~euab5jp-?IPA~_>MfZFui753z0sPh|B0G^vM_P~}qobEq
zrQ0l5Oo}5#*R0Y-wylJR92l8TH7-l~!I80%rumsuY;$h{jKzA1WRep%<LT40J0%5f
zJdY1G|0<6Z5BJ$=b-0eUKW~haZAq4wB5jcOE*<9-SWNTY_r^x0k+rpvju~>|$Mtgz
z>Xr+=pZT<o4LGwQqR7j8PLpHCdD)kv?F5SXPG*4TGUNRr{B9c}HE31DM)-zGC(vYs
zLIA`v<??fOH4)wk*4O2W@XAA>auYs&7%qXV9JSn}5Q%GN$Inb@Zcg!Jn~;z5y>%z8
z^3vmGU7;TFwL<%I6im0bLCFC%Q-^5POQUw?oOW(4%3o!?IS^&_RtF+&ldlJfLJ~Uf
zM+45QzIfJS^;%d8uD;1{8XM`_dH&`30P?~}5KCuNoE&~*P6xuc7wzHzhfi8dI^1I1
zK?i^(IYS9uox^YP70Q<vn7PQ+ciS<I-6<O=qjb2KUa~*2fpvh!rkDdQ6hQ%<x{5ik
z8H=L;r|CIP*4cy|Os)38y(8K|GFf%n>EYqMHOIy;UmhPlW)g916w1eH_QvJjhlsxs
zzRRIMb@u&1a;aLGnikCh(OuI)>sTNZU)6T+O%J?}F;*Owza|+_T<_`~#Wq-@lQQe;
zoozSdrLkLV(vK&*9zm(eQ8rS$3sVd2QGM&{l&w>T>}7wI?C(<?TtqE*Omb91UAfba
zZ*pvTz1@OXrOn$)US@CZqYN#I=?n17u!of>l~^;=Qa)VPBkGn3IpP+HR#54sm{HY`
z+mRkD9%1=qq|fB0SeqliDuv(YXIAV~ZgKgK%|}d^D44=pDbsI+P4mHNj^!aETG1E;
z%18w+gU}@LiOGOh`t`J+uUxQjskjx;D#*6=jSCkq50sTIXTH*TAUTuoOfr{&8gQp5
z(IZ+dDQS+uxbwB$YU{MpYSgV6Js%ppFk+MQ@*7}oqcGrMU7Tw&lSwJMSnWmIIA)e^
zM6u4dyCpc1LsKr^Z`u`$#G4rQPG{dIe`MWotu39|N|QZdx{AG7JZ#+T$Dj<OPa0Wd
zV#!EsUrYf*3I<*qUB}AO9no(Ns`1C*k3Or(x!9<v{7!4JSqY_))U`c<n$*MN^%rJ^
z=T4=p>;p*7UX{56pUxSdX5*+lmX{xiD172Y)8r^qOtsfs`JakDoOQx94|Zfum+8Ls
zezZtV@&Kz_v2H}f%*thGFWQJGGO015Xk}l@lu>S0J&{A?_VALZ`AGj98-GQO?`Ion
zey1g>LZ#y|HU7rnV|vAv3w8~GK4I%wfbk`<Wxgh3A)tvBa7jW9%Q(=pU4B6=Y@s$Z
z!!f0pk}nmoTU-)cS_lkD^$Jup&>UB}`S4+3I45lSh<H+2tlv(OW%~feYBM_A?JWj6
zN08e#7v&jt)8S!cBqU&iO)T7$L-h8(1bXl@w;^$cF_W10kKkR?i`f_7ZX<Y(wL%V!
z%IC(wY+bm%OT%8b4|EQd^tsl;6JJ1C(EJy5?3`y)`n7AW=UvbOPsXH|CU!dYm>*7q
z+hO`l8Q2kJcgc&M^(|;weL5bf!FXvPPq_skm5O+LD_)Dkv9d#P0VRZg1LnA0ds|x@
z9@udrnhD%^KuibLb#T>`9o55XyXu1r3*6Q%0o~}MTRq8ti@^1h*ru{v4Dn@&i)wLO
z{w41mvtC!Fhm;x_C*nwI(|N*U>hvW_IEolaZFrT!<vr*_FZx|BCc$?!%|zbAEXJ4@
z&J)TUGx@pdlp?lzmK2|ZV8vCbkQVB}4SY>HA2U&7A(LOnqvi2eC;=E(YKM^1`El#k
zQ}QEbC`U9$-j_)}w5QbIh2(D4+Jr@t1`hn$ssHzl@?M0Sl7Qxy%a@DVJVYcuZt+M*
zTgMhni6_ZJ)FzV0xF>J;a#d{z1%Moi#u59?PRq~TzJGU00Y8Zn<u;dGK|F|$PQkYK
z4q8h!5~4)GDVY3)?;S{KJr{y$*>P-B1<utvoI)BhwkCO5k?md^*#;M4*sgVb<`7vc
zY=2|?zFOODOvlwFIiwZirgOo@%&J-MPx3M8-?~{uG7e0(3cvlo%AzIsqV;1HD>t17
zR+L{Za&t*>4R9ORsqnewx*$Ff1j%AY>`r=>#l14Jah6z<{Y3dmuGV3S_LkZwNdFL4
zgH)oe?3}!rpC6S)$#jo=`r1deGnOa~Z%=e`N^B385_1AP<vZ2#+%qXzQTgbBU}txS
zI0Yhay(aJ9H$E5cW6`aGh+d-gKqd?3(RAumlLr!gXS*D+B!Yd2?65Fsx@f%<DTqf@
z`T@QG$8(h9c{FnD#{dl=6aas3>J3fuNIMJ8rg!Roe5xQJDC_U?_s{tY_J-Nuwi)+f
zWY`BH3AvFA+bwfZXCvY)F-@=*oP4jXFR69SX!cT+vC}QbE^8!5_)9F^g)w0jJz=Z-
zj9E~}LB=d`lqDe%*8d7mP6ZWuc1||eUZutZKJf0wtU>8^+)9T=@YB7`DX_^3FP)i+
z-l}ZOlBq&7M@<==uP0j=kQyv*To%6Pj9eXS-qE8CZ7~I<Xl=A_wLT%!8uYvH)oM*J
zLm)h+>F59R2j!o&fVtm}T)n)zyOF+NOMiR^UwBUR5fNa=fSkCVa9152N(|@>YDi4>
zO%JI&l<HrUl8HSB`G23PkV6F&sEP(nKnGXeh0Z1FiMJNG{l|ua^x>0c6qkRajwR%$
zO>Wq5=AjE(0Ms-6Kt3n-O}y}A4gOiWEJ6fSvzK+T!b<fz`2!n+=GbpOueD-c9o4zv
z$dQuXi${2lx?fl8V9x|d3<QsoB0aRvpQHW(dL}*I1qd8K{w33lNZIq)acPry7qCP~
zx>$J6YU+fqO93Djd_VvMQB)SN#!#r_D+d_kI&~iIvSZzS(4M_ivYX2bq40%5HH_M*
z$^tksg4Srrsj8}+r(w65Ms@aBOk-Q2Zcf*zcyvzRM4MRH#VQd_I0ORy@W$NX!*e$t
z0v3rCeE9YlhRre!e~<-Idp><PIQZBu$Kkn0j-3S6c@fouu%Az7!6W!l4wjLcaq}mj
zXA%m}W|FG762b=<OZZucv|zG1k7)BU>cWJ{Hro9peUl!p4jv$vgDAsPKfCX;7=1yl
zVD}F<8`K3jl<0sMOc_W<QW67+M~VsyMg2xf2v~O^Q^QNra)up_00iDZMN47&+%n7d
zC%);i%8ZmHc3aq=TQ|OfA5*SIvueBn=xT-(hg&u1XrWC8bS$B{;a>lt(rF{w;X`k)
zw9awDr~6u`W$5Pfn!R+azh&bYS84v0w}<X<U)OY~|6VFSvbeGNR%~eT`4?K6QKM>D
z2dB>*Lf_-4s)9MGaRN8iK=~Q5i-NDXC$tjK?G_&6p5gi(t6M!~9vq3pNGo2^m%7E?
z>R~VSM}-qMjC$2P@HQ!V(6)!=L`dX!M$6Ch;}dq}`uZ|%M!hK|!({mL?*qB+E}bdi
z2o%QKl~6Wb!?$t?jpGD+s%ZDfJc>-pKeI__E~mGcj<jTGbXz2y<sRb}T?y>svS!7Y
zusJ3)F4{W)=5srbLX5AK{q_nHnrrs;8QkXe^_70lKB#Ib&#-wSRLkR?ylTBoRU3f<
z>157=O}yQ)t+ZSJghcUYG!J_kE8*RpAE}H2p%*%;JcBuLsRFkF{z1=w6aoc*p%r%r
z2~2&v#X&v7qc#&8uiKzycKF>vbrF;+Rr+85ANEn+GiKgDpXB0|8&bDimk2NgQpNxn
ze+{HkULf-<_n7Ne(RYR1SE3so6@q`V?lR(FK?xt_cBx0HJUI&wlgc!1SUaIVy9<dw
z@~0arbyhI@tK_uP?E`yT0W>165W~)bEVdWK?t&E>anro9=REA^l2S{WD}o3I-yMc)
zHON<ZV@B+R@EA}CPyBx$Ju1TRr8`9u`-26U)fhyBe!tH;7t{%oZCpXNzHs=m+WpJx
z8C+OcrwC-X|Eu*Yzeo;iHv9itV&3fES94el<g72$%>yJ~x~)-!6B6-+T3?r`y=Z8V
zO!akq*TxVy`3(ue*5q20roz;H@kvO+I>w7{OMSbH3d~_IE!AtI^LSQqFvJ4Fa>~ws
zOhb@g;DiViL=ZM;Cg{79Q>AfzaNnr%J(?J}els|}5TWs2c#c!wp<}+N)i_mc5wZ7W
zemAhVwjT7ER#jTZI`nqNuM6Z`ZRtLRzY~Bz(+$xG;BXs#^j`+y`4DGI214ERq58vL
z3MK1bq-Q<%Noag7-KE5Z^8Qv1UNPj8x-bbMdy|$ohJ$T}bI>`+59*tyv-HtI;PvcI
zo|H+!6L5#jX?qG?N~|F25cWDvxT>YndE_OD#dU_~)dm2+`bXvj&Hq-`fuRDm3+B=R
zYXWOLZz&qidpsRa@kdJ6rJ;C3PHHnP%c>iy@9_{<EjJf4If@@b#*!#h3Sin$3?8bl
zh*%%#zG;e)3wH=n<vQh^*TLKHfHvc}DH0-65g;QI7Pl?vj|>QpEUqGU2?+IsT<#j`
zWPWZHu#qxyaxzb1yEcMbmQ;b((h5=-535UK%USd1ii`NKG-F+nKC~31jRuTxdElq!
zfocYDIvNB=U9Vcu=-9|45-<vj^!i`wPAg3}`dKm<Y!wPX2Y83-HV1K?;R&~$G@sSq
zH91ez(4w4u5mb|qa{OjB`kylYYZf4M0jl4!x_!HF#8q6<b#l6!x3P0pY`E8|g<*&F
zyxy{o4SiN^+VRJJGyi98hK<cE7+g1PeU&Ya!GtQ~nh-2SNSkp3=OkHpxIGR<6`1_~
zUsflc_Cx9!vQn98hfYMb`Z@Ijoslm93qu)Vva`Y1_;{V6KsaE*GD*y;EFtmH!UJaA
zgtBf$@$)#|V)6Pb5>b$pGVH3D>%Bu-UOz|o_*Q1(?DprNv9bjF7brsO;7Mik{3{fR
zIjt7%It@V#4hzHeobL+%ymqLi)X+54QbM;#AlG{5(X)B%eE)bGzOJ0squW<MfJGbo
z5*l>0&_+)V&)k&ZlVcwHls)yDF-7GhRwz{SlA71SeGBHRa#<J-qajEfXi*_9MlTIy
z5T5q*)vHIegPt(|@6^#dY8MAMHgp~Sz{KjR#TKsY&<Qx))p_Lj3*S*kwEZtywUA*m
z20aD}%g^*rfvShXU)9*8N}8Ea*OH=1u~KuRT0M@CeA>K0Baw`(tc>suBaw4;>+a^8
zyE`uH>D?LzyZSD4ir1++>Pr?$R3{gKHkcZf%5688(jxLY?;7mlzH<iy#bOf2ao2fF
z;y_v~S+5CVXPA!N#Vo=8ziyuf`-zx)4o|o{U6aYGAz$MnJ!2R6)4BqNnu26$YMU~o
zN9;nsShXa8<F(*?sjC-%Y1<*Op@J%IRPF&Kn*tO2JI@s=>c#ftUNg=wW9_cFMZljE
zbDsz__PRp@cT8%1DH*Z(;yfsZo>_26cjDdiSBqYf{YXrVEem$b+i-;W#F0P&cizO%
zpK!&@xt&$|OSqT7p*}I|w}A1)Ov}EhX5s`eaEZ{)j+Yxf)L-k2@t+|J2|508##_3&
z!N#qw`E-OWV_Xf@2|(3x@m;c#;6p)5w6Ac@P+@O;9(k#3PTuN~dk;p2^C~m5M$q`n
zcuap(cA~V<Fw~n?ERm4A<lg)9)M`leK`30w^wfCb2m1S;z6W@8P`wTHuc}g|Ua8mR
z<p5K^?`R^CNU+BJN^T=xaKA3XB(1Un8I5x?@M);=`$Ej-=J9(}(REr&3v^u6Od3gt
z8702$@hX}NjK5I$Jr;ZUV&EcGxKW29R?|{_2|ika*71tc45fj^icYb!R^6@w=`H(8
z$?RwX49|n%%?-m|soB-R3=xbwlBPyc!_+J)E9k8v^&-_UFe$b=J33aBrxH*&DrG1)
z(n@TXy^f2UFmFg@UdD>z<#{E6V7!wZG^fW|(pzO%7JafdOZ-X&%c+Es63hSqUL!oo
zoyiE#N#9>D?yfR3EkLnsvow~=`(VoKP~trS=1V3$E-C5F)tp#%Osa^*X0dPC3!RHX
zM_t~ojTX`?0`iOI*n&`bxX?+CZmCva=4&l}Q;fxA(Craq{Q}ryRkxQe+Goa>C*2@1
zPKy2YtuRm_^Z*E<&aZ-pNR{oVT}WoI5}prRv|7S=%N^py1zaw|Ad%pJy(^+zUlueI
zVwk2+cCQ-$f{KzOyRP=Jh{bjxf^5tLEYx^B>>5N9cu7tIEk+Z9>}4!3iCk@h-qU2X
zP<faV#7T07gU662B#IG78@x;LOSTq-)`u~~aT1q$N1q|Dqq4O@1?{`Q5xFxstr5(P
z%>+3&RXfPER%PaAAh7A(j2^#CyZFwKZ=7^+l2SZ#n&oRS1XbWI3xcA+g0SYCJwuqw
z0lq`Ao}SV699L>VoU*kH+D~c2?VpULl4)!(2N*|mV?75{qY12aHJv=!gz<&?Cryez
zBL$AD4emjwM2Hrm!{oMw5TYsQZG$4moADV~ArKBN>X*)(VZKrxm8ycdnP08+k$ovU
z%{w*|#qZFcvM7#@Z#veL{Bc8G{rSh0?Wy~%+qLPfK|PLo`5I5}2V%+zg=B<&_{zoG
z+xxbS*Y0R~mu@dgewfFq#iV*u=qyTtrb;6+#jV5h5NQkH|5|=uqI+Yzj2>NY2bN+|
zI`nor>!afKKV?4&bXr~3xZl;F-)GgTO=}M778E9qdU~I6vmfOp!&O69Tv^`QyJd6r
zwuU!pcB145xvW~3WbX(X6cL|PsTNk|tWnHEjvORy1jLMMz-bKKceKX81rj6k=C3;s
z&G^iV$q6NS%SRurI6yTzd2uPUsH}YAjI2)G=RN(j#_Yx2Le_!BUR?gEQ~5Yu2LkK$
zs$H5td%U1>SNXN_(p!Hm?71sf4;Z9z*(qK!)%f52$1TXr8%s-|6fkEriA>VG?j}$9
zvQtpJWbNProyDFlZL$@B1;;-3xZU%Bhi>e68_H36S>?2j0Ak@B;)!{tLlRM%2%FBw
z`auBC8Ivgpn2$os>qKBYV3LUJnZef>v$3-91?j*3H=fA{k-H^kBBfc07Lyf?`#!dk
z+0dv*UEEZC>R<EX`klk-$W$1_EMb4r?B8A{c+{Y)k>@OSr8JmDa98lcwx9A-gh3Sj
zPVeG{tq5mo-YMS6?BXV>ie#Ap47xQ7xHPSQ<o+ny1PJHkB*FdTb421o-KKb*@K2v;
z5vo{GpUh0+vUivTieT*@agJ^sQ0|CxRG}Ah+tnvP$5eX2y)5lAAI#`VwJL6E-iZ4&
zUzmL}xwsddoV(YV$7;pWt1YV~Y5Az~rM>A2fbzEiy~0qEPxGWkKaZ_zYE#=I?FR%$
z`X}qka2xh9=8he`O2Zg!>S6}k_RZB{TkkUOvE@H&OK|}lr?Mf8h(Ik~SvfcNDxH>Z
zFz|tqX~j*_Y~(%l-@5#^wC$?DrIPl(DCsw6sl2~mtKY|&#{^g9*rTM=E-w3x3XBeL
z&D$R6Yov?=pRNn;BM+?e`1rwNT?Rnl`2+5kl8tc#i*K597G11%OOC*4UDHDqD;=6k
zHr5L*?Jp-&qRZ%eR;uAfBX9-Argcvy;pJx@^m>V@b@JeJlB#%ROq4E)sCM3S+)ZZh
z(Vsvs<IXAeb(OI1$Qwc9DH|{$+r9VzDKA;L2%^ScByCkcQ-59+-U&x>(E-}a6UbJ?
zi)t=*-PZ9{NTKsE!OCsNmDboQGZLu0htOgNbTfdX+Q}&4&m=}8vBXe=XnI<hva)Xx
zwiMc2qR3?V=CYu0Z5&LIe)dcZY7P@(5X)^4ZA<0Q#|fx$b58NLB2iyaXgSddEs-1B
z<FlVbRnG$f(VzW~PwGA1hW2^XHSvVe3|VW)?bIKN!%i+`9Ce#%ts`~0<=T?qprE;}
zl5o`wDwEhDq4Yyv-@7x6)lu4TgJF6EZKh`$=Pj0unF+Zq<%#q32LJ+V3JW-it6B%d
z!|0Bu7M591lw`~wO{$!+@nBR(ytU9AXwjryI;&*()X-K=&2|D~s#iL9nG@@cd~4Ey
zE;`ez9*s}k+L3dBcN`#a08|pn(jN?fwk3Mbf!T+_D(o;R*bM3(K?f!?uaXl`P*GoL
zF5WF#=^^2b(e}M1(NuKysQ6|x>ucAv-Yc~5wEt#<(A_qRo#V9!r3<UoHf>PQ(T_+p
zvDb$fg~Kxb)%*&vb!|;U&7}tCp>S;~S<9`fi_$p`0m5Iqo$}%pN)cPc^YgkcIkeX%
z^WiLVfJnG$--9^Gg`n?Y!p+vm-x-%%zfK;QZnOS8jze;IOttTF`ARb4c4HV6{^UM*
z%?bRR?$#0HN*;nEb>pN5w>oZFlNOzreHv`^dcxDLwCP@1JD#@Wv3j)Xvlr8etTDh~
zH+qA1FPfNN=bV$U$_{&w&l^1_REHp7O4+<!7y|gnhgHi0DNB2H`&*@i6tLBud8}a9
zEif(9Kb@MvUV@tc$6Lv50}oTikRHN4`2$ZQUqr2~opH!<8jfvJA21Hh8p6{ll?rL1
zVi8K6v3=*x?f5+1cldAOVSxb|Ho9A$_JO-zM1|fQgj#xFudAHk%(gB>=1b4=r+>{F
zJz}v137f{^?qY}l<ehA--m-V?mx4{=7@E@tH)I&rhNYtjg@6@+?IU+lT_Ldc*vpuh
z6!T{>eL_mwIf;h)#KP2$@ky@pJwsMfjkzVxOw~<QqFqBM^(!M!_c2kfWNOMXzPWx9
zCdWc2*{N{8*<<ig-W)W{8!;oWmYQ)L%D7CA$;_^<Oq=4Kk`@S?h8Ye=T68LE7?vJM
zwqWQM+flWmjW5swNJ?dY)@-@xhtePDv5u9Slz3Y(ltiP}j4{H%Q&dZdVP@1jq73-i
zGhi1?n6Q21jeFRqN)aYCvw*S0+3HG!Ubp=9v`4*<hM|V*CiV87c&+ZTC2odsBO~cY
zv!OSZr2lXzFF5&xo!82?N*hOc(Hp+@IMF|rr2nwUD?UjGw56{2j}YaBi&x^iRNQR}
zL28)yFJg!XriimyMovfnbr)m)1oyR$T&}^3h|fCfX(hUr;bv7Va2Mu+N$ibqApe$L
zdA9479|-qCz+-sAGK$db8~4f<4OU{{r#4Ojzhn#6*^SegRDk5>oop1wSB86Z#E4XT
z@RsOP5gsq4QI%Q#rAz&e71cMl<RcQUyKoj!V@Ge1-tcGpQJ{cFKV>|C^R(y%bQy;I
z=SraX>8v=nGuK(Qwce=wMqWCe%!=cD?vBcuIAC&p;8EwnXh!KY)$5|VY9g~bYoanc
zYopFCEbk`%)_U7iNk+F+dH6k@OPRtu!f<i|B;3)mfH-Dfo0C*YA68q1idzA)#kyej
z!saec4=~PExT)hfNdQ@%mkq~6H4l|H_HQi;93k^<b~&k!99%E8OH!GgvEm{99*qAs
z|A-8MV(A{qT(v7FN#|uRv7KS|%0_w{&9@NywR`Q0^YBo7^R;)4!!%`TEv2Az!rP!;
z!d%}|OV=wWyh`T#Qk#NP^o{@>W|{B~$mW6rG`^P9mMg|(`OwEA(}UJ(8eEa{%8cMe
z%`O7PK5(|??Uy0VT<pH}LiOOd!+mzzhE5>|B4)+wy5mxdFml#Mz~8&TD!I`8A0Vy9
z_LYq<N|ogE;x-$YO`87kZvX4bev7MpeHc9P?T#I96XCGnnCEQIxchML{Jmx+?cV<o
zZhqa^SJhbVRpGpB5kVoj%Z(w^tHS;LIO}OdD!F<RGs)RNxP?VoZ^{Kq(oXS1IA){-
zw~{Oa<5C?G37p1{gKgG#@T^4}4#Dv#$!Yy}OpFEJW$xoQ>v+(tyYkaA?dME-0IVQF
zq6on(<R=<jZa`1oq-+cC_x~7gJZX`=<5^Y6*UF=oI)^xx-f--Ib)$${<r6sbxh6j5
zb2Lz6SfN?_6PCr_&+iN65s!Uz@~m)=Ewl-Vj(I~ICh8x9dZn?-3JzLeH=!x2JZYaD
zsiHPdXJ>SOc)SW|R7tuYcQIk^a?H%$GdpFj7aqHr<uG*q(Chpj{aJHucFS2s_Kn`d
z8ha_OOCFMv_E{Tf0raCCCXL&X$F_y{8(5z1*5R=}R4J=4|7uF2`PkR5k0dt=pudx%
zfZMlk62VntYnQQi@zhy6IH0yZ%<F*hD`(L*cP1nq(LUaSb<69v?)p9(!V2A1TI<1x
zO0)%|ks7qPXM)SW<voi2gFa7-0p)4wwp~D+$pQc6QCZgahWV%W*iYK#+Va2B#=Q(d
zNv=*MMkt-&ngm(?Im|hu-b&R&2sF-7KuZ0%wmG2Tb*?jTJq3a=L8FQ>3b^DfUK#a1
z1%xQI+DKBV)IxZTwM^89h-xhu@a^wm+Hf<i|NA#}Vgv9_Ry2GE5p{>4=b(#WY-J3M
zntBML_NYog>eV&+tKxaMLl*~)Q9x2sae`0zr?5OP9ponQ9Z5$f0xfVrUsEr;ZEmLZ
zzu3Y9W2TT=H9Pe@c?1a<<I5N?>8hSkmdIs)AmE+0`hl$i@S+5i(+8GNE>~;xS&2k6
z&H+5_A3=)xrPCLtkWR;}m6~bAM3wdqP9%TAHz4izE`}h|E6c!V97&vKp~gD3BR}D|
zq)>H7mlts>H9RPj8PD3TEl9gcM4ub4xZqVWCTHxs&b}jAxdIp?eZ+&1i3cr|bE6eJ
zNt(*JjbP4uHo}2$*i)qYnsq_zoNa9ui${ZSJP_@f-1>9)PibQ?0?M|6b-x(+1)Y?f
zW*)*dZzB(^lAMws+SM-aZ(W6Kt~@AzN$b^?E6^ZY6htkSvC|S{q45O2aUJTNyWuGr
z%RE(3ad~f1UNkvN9Gem&2`a(A@g-jV=Jt;wRv&hR94als=IV3Vc`+hRq#?sJ#t86S
zRV2}$%8OgA%)m{3f!~o&zJGE8J(=}OEs+NbiN829N#(8n-Yby^$|$iNS!8W!ucpP2
zh@1sXVW7MuRhd+mt_t>)L-!~K4+Os2<%%7S9VZ}2C<J&82pP*2wF>qF1Ij&~sytX#
zm#$Hiq{;({!UaqYDMn3;hhD2bhQhpsaK+vjh3_!~%tE-2YOpH34hR`f@__ApPq7XR
z6fA=70*d{S?l8&Uu&>Iw0?@tlh%6j+?umfI=!E>h!V0uVbN&)Fz23yK*~(I-)#@mv
zhx7G~E2PjyyG+L)KSpRHeo7bg^1U$+^^}&D0vrpJw4o4iDNiEJElS7|{c#Wtn*zy$
zH^+50mDecSgrdLqtL*>omLX6;f$9i88pDAxlnMZ(CKMSbj&n1u*@uQ$EbBR0gBN_i
za~iADLC8Zzc5udg%(^8Mn6m^kxHlhvlwT@%L+j=^&k8)FB8(p!Cn86|wejcDAqU;U
zqr?!T=T`OWv#H>7z$QF4L@jNekHMRviw=Qwu5_My=y5gvw<2x#jIX>(>)h;pU;HRu
z4!v#dCsv@do11eI-U8dSM)y7v4}B_g)>g?C(}x2VBCw{Q%=c~lx3{eZ@BI9z)fV)r
zId5^Oxu?3(`Fp{XZ>*3Z3_K2^e_eM6zd&IQ@FQW2#Ob+N*I9jO!J?GJd?V6w@6ufM
z2J(rQNelv%U*DODS1a4gBJGim|J+X8o`Nu!e3$2^Ij1=2*1ZZY#d&6sq__z0ZtVVZ
z%b@`1Vwk_qejRWsHAN!<@&$7W%XUuQIX=*1$>iv>QAgDw>wv?W#}9!x{`}C2k$JN=
zCaTH|y)81ceo_0D%K(8}^kLz-mYD0%z9}`;ALHZM>0euyk$Uf6X&&!%s^#-yDBrCf
z8c(E+J?KL(`pMv&4DAlE8BjDo3=cWxRLd*^?lAzOuhp#56oxs`%_8+?z2M1E?yRO=
zQ@i!sAJm+GC?7C(H2ZVUN(XadwV7^Fw|nXA{04o^3?sonr2X>u?#Yj!@t+x(RoTJ&
z6TPNhzMN7k7=bS~_a_Pxq?eExi;EG+OK7L}E$!b%_;Z0ZlUV+=-j-PWd00{RGl<px
z2h!;cfViFQS4;hh)M6rys3yz9qS1TSTkUNVmT=qJ8d{>h;?}k=%CeTjT3gH8S}klO
z-cE{TlvhYs2G32%Ul`E}R@0~Cc;<7H<bbhQ4JqW-93Po)!9ymgHrZ^LYjjC)iJ@Hp
zE<itb8dJHRhG>^_E#ihG;W_N+Zn02X1Gb;|^{|d`gISN$vPb6iA3F7=ul4nrMeB6Y
z*XQm7VkWpe4VXpfU+eMFaM3VIbb24aSPZAFLbS5=tS(aa?fUf!E=9uP#EzhpbuBPY
zQ$oYO7;OpS+ttUSoS^aIlk6G?U3Qcf-(;O&w|~pSomd(FQ2*eZ;`*Cg4Ht~+R_;U7
zG*1wbjFGjFzxOaEdd<yspujZ7CeaYoMWM=>Cv@3C?)J?>!L=pYD~CkOjz=7SenIVc
z)*kS@Lr_avssNX67ObD=zEWqrym-PZ&h#5;d>goL@yeXy@sc>Kw{M&maZ0mb1Dq7=
z{6`er;eHH;iOH33AW#bDI1sRT4|Q>Z>!P*U!U)Xz*6@&^wfdQ-jg6m~)r>vHwx1K5
zRNTV1ZZdGK61l%&K^-sQMq3SCD{x-6wMMlUo5U!}^Zmj<$*ePHX94rG_1O*t>`^JS
z0mH<^inR_zOl>sxm`6LmKR7YhThXi3RM<WsJ+V<Z8sihHDaw-GHNmK3Yb$4DQoi;8
zhKL=*5<z^1cI52+Vd}1HLSuUW?d4mQ>B&PllwK#Z)ue{h&rb({Q!uxKDj+GFHFA&Z
ze4l{Gq>7VX%s=>geYaciqQHSuR|i%1y&m=(u>|Z?eHwv{KTOxa_W2G~&0f2}jLm%*
zObOC9Xt+4r4eny%jmM5f+OPs{yf1`J0nyn(g$@MlHp=4b`?ixdO=}c9>CAOGjc+w6
zKXIuEBgQZ>Id!8!F3N3K0v4%h$g1*YXU0)~8k4uWS8wtDXRScS>lk&cJHrXdZx<s7
zmZi+~CXa74juB6hI&W^%^i5u=ouWHFp67CcFt#oyntd0%DOmO73?iaAnYvHs46ure
zeyJ`uKr_6w^6{F#Uw%m{`j3@h`h^bb)}z6(5^=2*!OC6?Q7BY~mCpm%1mB=B_h4WK
z!t-}BjlSN-b*-e}uho+Uuh#|GqX^5|#V`gEj7IOZD0*W&xyWrysc2*J^(}A{6oxvI
zd~E~i-Y&<YxmIRqO5*BG_<ouo?OV{bw0->aa*E0_iv+lS{OF)}dP)V5I@OJP>2nDX
zo-+~l_juI0*DOc3Ae~K1WW1WNb{8dL?XhpZgMSCsd;;M7t=eohrFscoVM9kddRA<>
z4j_DA^}`RQ{cYf{w?(O1QEZ&<S{&={K4-V-5OY&+n5@5S2b%+j^H7iEt{XW2L+CU<
zKoy#g@_=PAVieDUAKV?B;0YiO{>*yN*Z1H?2wk-`wgXYdgN!d(4dHe{W=Gps5=uM&
zs6F0!cNRdrQoq~f{&Bh)TmuqoOE7yfbaw4920bEo4KRPiPTm)k1NFRe4X;G*ZrTQe
zN?<d@H~A$mEyF6EQl9RBE>$c1TWqgUorX6^!WMtQ*YhxV8~87K$A$rMu#mwxJ~l?O
zz78iaDhNkh@=@Di*Caawo@j|?6aYm+*ZilMLlU}{gtskV88Cs}0V(j0gL#x&Xv&e1
z_7lIvR_c`sNHU&qLy8%+cu}=b!lm%&IhqnaCVFS#fUS=zl`Ct>yo4vk6u-(>U!;CX
z`L&M0P-kEF5JOLUV)5e6%$A9xs$tc)^R`aO$RP00^a`i@enBS=l`jHG+2!qwpKr36
z_39rYrwrQMtQsmXcLJxux%04r>yAqrqfbnDi~EUbF~ChKf6IV++?TO?nIM~O&1Fiu
zAuLZP_NZDiPKs>~!Vd=GI;gac+@dN+$6(;}cwKYSwj*XlT$m930rI*Pqr^r@f}Kcr
z^X**{tEvE!Nela;kw3UMBNfPkRf#U~HFq`1uFg_FH~ZEXkPoipFdUIOy)&u5ZW94;
zCOIbOR&{W&9kirDMstu9n~WP(V>?NGyCGbU7_L=z!W*>ZeW-*1VuHU9nR+_S&CWS_
z9^4@yQrXnl*Ur9^?vvj9smcmYKq-kZ-<L#WJ19Z0SaP&mLirL-{$U*-E0*JX$IU-j
zfrk_R-!G@CO4_~EoOagTw!=2|Y|^A>jI@VOCAy`-Pzor;FIKC~AnIxkg#JEFRE_du
zH#B0&q+aZPUhF6-dB+q<y^6=!(1c|-VJCQuRU~ydm67Hzp`7BJ^iJ~5s3#U~y5P=e
z=(LfZH8I=h89TmSZZwNH>%QNXQ_XSDMmyplN_Y;5q}<BzUGQDz=KfhA?j6=mM=e)P
zsK(V_$q7pj<EF>yR-|V~XBWrh<I_HbmEBh+`ob9*X}u;5`wYpM+oR69HOp9-ZoCuL
z7e+p3Y+=#jr?QVQ!{!mfcqx06<s0HS+}wRWJABT>ISFaFAU8k6$!ku*yc^EJSGK*T
z=KmJrv-}|W)j{&|Q29k__J?rgrdiT*(u&d(@*R>&7U2?b7&pUyR-wDvz_&Qyw99Xw
zKbNE0@4L&_{_7xztJ>$S{4*m;MhQDpY&H;4L4auz-G8eDr11qq-w*6&e^fA8@^>Br
z!b$u0v@3qp9<*DRuxmmcu?6CjG|@3k`KVi=D)YuWFKW~JOaVbnFj(b%KK&4}xuml7
zF64CBx^)%E!*m~Njk3gPT8+5sHpJ|qDdP~aq;(PO9%T5M_-^B_`~<+cm8-v=e?OG8
z*~-cl?h1o^ZZvONyYo0m+b^TgXw@OB-2?`GgGoNA*A^e%{NH5$<O$?|U*i=BS@tud
zazv1KV>Z)T`L)kW<ptQR`1i&^9=|*IpH#{Codp3PM_3t4Vl?h>06IxI=<98b%6lU}
zd;iB+CHAF5u!l=cJK>D$!T?2$D0_BP5;hA=VVhZf#%kkFlZ?@=RQAxazhDq`AhEds
zgq7{P%O6U_+S`NmGG>G^_TNOB>Eo_1pG_M4=u(X_vqNHs79c<)55!(1c}OC*V*}wO
z8{dE%<iL>PE)z|3zSu&W$!s?u>Xg-9gr~?|U0uB@mjb^C5Ev3=!e?GFI*zjmb|Q4D
zyu~u@<vmS6W?kn^y3C(MU!3uGV06)#{O<yW!T+Xhovf;r$aNk{ccmgiXq%RWv`;&e
z8yo!Ay#y|Vg?EWFEW>3=`&LVB1jIu!OhXiT)16P)2N6vDfmM}z$}e0Zi01L{OR))P
zfu4}63BO`^8d`|I>r7G-zM8sey-&v|J?^%A((R=D$5wrax+(Cr*S?+LTU!C?AKFm%
zThH_E@opW=^W-w@Hdz;)ORAL#zf~Aa6PkSkl2;ipB!Ak2QaYfg45d#1{WD2wx+u<)
zA5zwZN{xUE@R2E}ozxcj?YE|}u?71ENSjIfgV}DJQ@1F~XP8Usa0{iV?=qWQpO2;v
zZ%*CsfgO2a=)0Qsufd);lqckn+HkfGu_YUS*8xkbMMbG+PZ-5pIx5W9xDWu(4{*Ae
z;<JYYSKc4q`urKk$VSWLbojL)16Sp5<M!I8f+DiZvLZv)fNzM!Z@%S1txD!(hL<}h
zOU;ttUtjk6o@k+V>MPsxlNSsOfn>me1GePI-i?ZjASVHTm#mzJl7?24ui?0DtQoTo
zs!1+h#mj{W!Mq+g-|#}8<F9jnt!9ZwFxdV$<JG(xvMS21AiS9r>Zy>e5meHZgrj4=
z8?!cubAI>-pzZ=nX>G6<7U{7Tq<C3=t?E|ODTztCx5k?lufQt^)Zrdz7yR>q%Fdj{
zJ6-jjMV`da96|v>(2xaDnTc#7lvUN*e}?e2EZ#%xDgF@TCuW;Nd)!MzhF#ilBPbjN
zUh&S~9u>OfdG`);J-nG1Jyp5fYHt>9{t)nNR%I0Sb;<Z?N-HGK+GNF5-6Og?^|l31
z>+PHh2|qcnGMo#QJl8w2aXxPeRIhTR9(X3!3R|_iCoR%=rf{e*YNuQ9J2MWPNq6ar
z4!pI1Hcme~o3T7?Cn}71MA!X4BthWHg7F$S4~b?XA~449yUJQg`8$lGAYb32RT5)I
zYp5d03<e{ZD+^IY3HqRL51UwI3w*?_%%{d7cr&ABGWPjf(DX)whu6tV;1R)ZVE~=x
z46RFkw%fN-sWu7RS;J#${L?&ymrPyg7lS3C(h<^BQ_Hqe=TD8ESHreqW4pqm$7Rq^
zgnf=v3<4ItuDlRj7WLc;9^T>mRD>Vh_R)3Wq#$U)jJeROYo@y{cnAjje|rbW=m_5v
zdRhre4peW9JI6TY%}C1-uZa$T%TOO)MRQaN5+_TXK*8h&?#~4G3<`vF_JKn4B}QuG
zWJA+`gV)!p1{Mu(u^pqXhCo<WE3Oyg>acn)1(OF<trP_FA|WEC#v6^)!$QNJvfu)`
z%trHzE`Ez&ha8z<W2j*Z8#|%c01XiIJ0&9tPd1QDoA*6J4IX4zn3>^k+Q143^xvVp
zbL#KqOr9Ywh(R))QuiPaAe%G_qZz4~f;t^%wO@@YTXY1Mi1bq`U5>vt73?g58&5gA
zGXtii<F?;5{<qkcBVM7NY=ax=fo;4O1e06JWuk@9pT4LCSEvdHJ?J(#b;nS=8{MSj
zUzg_%*~d-p)Nq0#2TP89aTJ~0W*KgdR(%v(;9H;}aj0dBuA?eoXCP^2&GMjp7F6sJ
z+b>)TcZ5eX>j{;)dPC|}Y;umdv*NnW%@a{b<Ro$aeR5!yllpIG9;(%vXUR`9%NafC
zs>J%bE9HM1yc^v49`?q&f!})o1m8}dVgcOqEpVx4TXOF@ru2`4y|3%+mhgT=W*RK8
z6(O@ep%JM|2AZRqIayLNy6|@Ka`{9v@5Cqi3d8uB4@<UZ)q+20Kg)7o`qcPKCJbP7
z&7tw1o{6Z=?Rhta)Fv*UKK*p{0rYj}G??F;%@jws3c2pxI_O>&O^R@KgztCSwA@*G
zejM6|)v@<Y*{bCs!BSV7WW_tPBlO=1UW0lZ*UE^4wD83SQ5C7%40K$hS9t=vTog}A
z7cn%x$2v9AT(bTQ@Rw6qRE4+QAl;J^9GdxO=XSRqRymJVYgjC8wrNeWT<Yky{tw3P
zC~l6PK1H2L51}AoySML2=V^ss6d#klEQ6TZ;>YSADEAE&J1%pcDX={?o<W{Tp6Mvu
z%Xe6zXQzEMS(B8pkwkFBG?%P<8tQ6sC{YT`w^~ZFRgGF^u}iV_D#dsJLw;}~(h@SS
zta5`R>m(r#j7lDc9prji1zFK94xnCq5@^u<eW0DldXB&wvRGl`julC#i>O7aSZC05
zUNoyxd;YU#6dH<5$q{+ee{cxV;hLJs1^_YMsC=+b2Myj7GTY!a-XaVP@^r~n<B~z?
z-k0)~K=%I;b^9Aq<e~jg8U#+ZSjI7;T22Om{{Jti+^D~JruO}+l}S;r!<PpJmcw5I
z1de$&kVQ-Qs-dMIFTA>;5w-WnAY*kzmT$khfH&2ouL;on2i6_id@}sdR_6Re<qOVc
zD@csJ3bi_5zIUJb0crBYdE5VfcWb!ilh$-V%QR0#T`c=NyZZmh&89yObLJAEVi++k
ztAq{mO23ld!$F+1r>Kn5@%}+F;L<HUhRJm8?75jk!o#)9jo^Pe@W2lW>77DhvpWU#
zR~PA$Lq(#_o)&Wd<$LE~$tH=!EFUNI+jRfk>=llRTR6cNap8$|?)VBVD91|dUAvex
z4XE1lnX>E3xizcj@L_rUw+d)z`dP94nYb?R{>wC-2Wlp;wi=T(-|~XCVfGxN_6vh?
z%O@zB3xze{mlYEogz~r)a~g_R!$<ULS3;TWhTeXyl7-1*Z3x@87>qCdnJxh~9m-+<
zUmHO+y#4ztJ!HJx;|xB;xnC|B?y6|d&&cRFbVA{Cxacs%4@gSJABt?8;h}6>RY)}U
zb}k9K%06AjC<<$gIWC|eRg^(GEI}<5tiQ&0=7o96u#nP;%kfs=YF1SYoL;_|fqk%i
zcYjn!!PA&59|J*g$S^xB^IAkIuG}MgpS-PX%t$xj)nXn}Snn`HfyZRcbwbgi^)=FD
zs6EYAuv}C<n^7|W6N@)*3+-_eLClar`;6;P{QL%N?%cnkpXVX_t$SZ}L<~n?ldaBj
zYxb|-m{gQrn2@4<SI}=M7%n&(n3$}kd}mh=P?bYv?n<A%_MCX`HcqnB{{IKxA1K3q
zb_e`lnLDD+o(`)1;8Q;ci<yg8BN$Em%fH{(UW(g)Q|ZVSq0enc{|y_?xJrMY?NK!_
z2L>SJnQ6K_r6wz`$U7Gvh4EHB^h>UCRfN0>oF8QmleUAP=ENiR0;ep?5Ol1bMx<)P
ztE$4zlNy*+vINO|PA7Ftq~gOIq0xAyhbD?C3aK`Ca&m7+=AbkI7Y(t#-b~w4x4H>u
zZj^{xVV|S9z?36&D-|;2K51ql2!9gKrM(;xDaXF~J}@LE+sg!Tq`<t`?Qu$3T#~2S
zNdneWD5cA!H@IFLD-W$F)xg#ngT!}~*_!HlWeft1A^2sLhAqqC&)u1On1x}w1&((d
z1J8uS{1_ml?Y&DJBCASd4Z-FeOnD+kiOto!593gb032?JDG!Ixw)5Qe40o3;Syj0I
zHca|BBDf*Zq5m1)e9lG{{AxX8^ytW-?7)ER;DJS*?e@sdQu@%tdLj8dt8P^nJfu-$
zs^*O6@Y?YA_irol{4HQ8e94U<hsf@sPb~0?bQ}v7V^Y$G6Q9$DuAT*oFKXm&?La)2
zQJ`no8k-oa`S&#R{5GGVpI1FvjoOluIhn4VG-FGsw$>(lp4;Ai?l>b_^H}p9?N?P7
zRV(TIQAf_v`BC%S#^2;KEadAi;3bMhZ=9n7j^D%HhYl3gyyy<+^p#}IH+p>p4I>>-
zw{&}XL?ScctP8us^h=)3WUiI)AbUe~H~o+&(hV9zDQ<)?dmhg;tZSyNkSKf!btpCc
zm31j1>wLBpRv`YAS8^1dobY9?6!C7|e{PfB>sVKWPadRukA#v!b(vRHhXx<1k}NVz
zA&n@DOMSSa<cjt^@AIRE39?)NO;9P~b29PUY@#+L;23HRBV0;<XE9-3963?!8Xq1P
zE}8w<M$Rt^_6m7?c%<a`CXPOO)O;l+PN|4{kOn!lwPV+bQzuF0Bj)<R+_NT;QAWPy
zjBd8zxs{R<8KDdz8cN25WdoUIk#8J*EZxvp)=e;D?0*7tIbG?P!({_7ICc1VtmNat
z-oE`p<feka;y`GAR3ybE3P0}8Ehg-_J*C~mMRS`1rf$!u+w5j1B!c$PgkU-4&v&Pz
z-{t#u$da7jmebPWBy&!Au{V0uujw-`$%#R`K85mQzMt~3EOwdvLFnSeKX5HS+Vvy;
zN6vQ3r>1CaEZr1Qc9y0`qCHF0z6pl^ZoF$ia4Lg4a`fI&`~0(aoLagn+LQRlq|N5^
zAo?@Ty_40YcT(~JErnoFdR*_*r;T>$0D)ulk34{L2mpz=&?+f^;>O=4ZRfvdPTZ#M
zx~)lhvVJ4y<ttTS?zg#qf>n>s?eeeZjjL=Y<9{s&aT4?=5{ZP?qoUOTkK1S_$(jNz
z*h0Td6Ql>gJg;ZuO-W6E2>{ur0Ok9R5*P^K&cZ-$X5avZT%h=U!L(!^9B-Jyhlz~s
zj9V8rTdqPRthzZZx1Lg6)q<1a1_o5keeHD;K_r_i!DZ5-6g0+b0Q$R*b|>%Z>HMFT
zUP}nh?9$2{7&Z-IJ2+%5cq_Hl;YtTzhIJKRG7Qe5N3Q_~%5no`Jsq7tz})-WD7O9m
z1A&SYcZZZ4FE5lR#{yqqy*2uG&M%%XD>_(xw_5yI*1|4wb;yuWmVlRmS0?QP++|gB
zKYxLG@PAH&(tK)a1R7t+O?NXfhvdf*9}gpO7D`)n|5rxvc=^<huzd&z+If9Vg>t<v
zDRSt(F)N81wHGM~^QBR4wIX~(AHr1^DPA~pHr)R04E<xP#3TEX52!)xJAIcg3*QQ(
z!U@kCxza!H8`evI<nVybxWv2cN1vbiO=sO{y`T>{UL!E`&pX(Tml8^17>keUn3>qx
z_9L=9pXlpN>w0}2baie1xNG~4aEF#*Qx>e4uAb8tATslC7%o9xQ!$=jE_X*CVQ(cj
zt}IhkSE-cMl?pfKZDh11MfN=`+faqx>Zx1Ou+!y=nyU5fY>MsY@k@|BGrB%#I&fMy
zf7hQMyJvp?-Xrgd)H@t_M6Yz)-%q=y{(RZqbke$g)YT?gIsND76uQQ)aAI{;TV0Te
z@t9P)qS(&4Bf{aTRn|ste}4HEdCt|Ps-<e!%wS>evg+l9%YLdZI~68eRYJi;uE+=(
zy^}oQq7v`}YQUPoHF>1bgKy<2UAm3$u`IoWwkzme$12f8jI200yT!cXn)Vf@plwr%
z-BhJX%=S6ry14`6?As!${;kAcOG{^H#qcJ>TwY;4qze*QhNm77#{DRX9CcvsvmK>v
zXHOd}i_?jQ0%(1K`;y*ys0JjN1KW}kq$CXAMaKJE)9GT8$L0*PTpikq$arjiTgC9c
z0MXNII<gMwh`jbJwGy-4&1VCjTxx+E5v^xg6Y2?$h$jcM9OWivDdCGpOnjfltt#P%
z98ufcaB`)igMRKBJI-41w32_rNnNbn4Iw=FVNicUw@L2v4q~`NRd~>k91iyVMQ8uU
zLx2A$raTpYXSZbU+t<*ba!q?oSJJLW2WS#E{5i8%_eRN_EOSx@h0EWSdPq0Yde526
zMsj0FOZ@-%8sBdjQ?B9TMqw}+!xpW2vVoOo$3v<d&eu9C1}~wVuhr76{aY<pn7|-#
z0+a;6&@&Wv=<Qr}amPnTE7Y4rSSj7$o&zV=2IIFTP3v_T#+TE>n|?*Dyxxe6SAQ39
zr}o=50!rC%N7bOy()6@2%<7C^)zpoujsV|rSO3JAl$Z*CT{W0^43YrJ_Mn~?;Q2Aj
zd3Dkz=BEy?I7rBkCljCkJEYP;yF5|ucJ(;9gp94ebyloA9_F{nrbSsP7Au+WbZ)t^
ze9qsp)l0SXl?>D$-RZT}Gb)M87O3hX+x)fy_TH-_BOCf2@VMIzlF*J$*=Zt8L!(BR
zTETTx2nyZ7gQhq1?GWmDTs`;EhQ85}V+55CSXm@0=3d%KPU~pyaU2D~hiJ(>hp_C2
zqSERdTekq`t%i}cCBccsRay4VLGDNNIGk-8UXIXnAFZ-=7uLeIlanMi33<RbSyoW9
z-@eqq&;tVYbVl<iYJZVBsIS4=xaSolY8o2B!tVf2K(N1{g_hBKcO`IW5$r;?Op)Cl
z@mxJXk|Ho2xQpR5DODB_stkAW1ScS>PpWqwGzZGc^&=nRnea|NaiXT#nC$KguRg@;
zFjIWnUqNM&XRbUl%s3GJK&>n3u{D$lGy7*ta5~oM@T^4#>P+7MLU#X4uda)UYWq6k
zz3wU|dWDqT;HmmB;tp0I3qB5^%}2CY9sWZ~qv}cWPqOz#a<T)m@Z%5@SKsZ%0_|dz
zB%fC+!d_~U$&#%5`}XzEmiC?yh=n%b9Z1tyBQZD&jmwNRn2{CM0~D9ki=y<F*<hm9
zsg8F?u2mPx11#{jpZ+j236G$w?5p(J=ghS+3&GG)nI^~{qMT<tA&<~qcA8k`>wYkt
zVfMKTxtqb&36J<(y-k6*{Go<MG(#q6;+Y_gR@BqJ)0cdXtghyOnRhwrqkX}gIgKy1
z?MQ|cS-iBRnlb9;mCKs7R|SPA)O9jxXBKbNeL1LpAyzjV);pa#NT~_)c*mF56MhKe
zvcIQ_4|WAt+}N`FYN5*w`*)8d8REoi%Bp3WzKAheUY%DYQ`alRywRF0sV%EBt=0!2
z>|<^2nP?XLx;d4Oo1rBJAW<qiC4pa-5AFb{IEY48D6`f0hMRNv-?wJWI22^{o1GV*
z5S-YwXKgh=KsQ#_iM7cgDUsg7USO=&BW;Wm+=`{UzK2J#Yl0!Y2IB^K!*%GWrWv#3
z)F>;<asJUd-omZXMBRxsFM!Kpjk9+d?VjuK@`?G>$YLuQ?P3oWpZMX9ftu~R*EY_5
z>qxKAn}=;AoSJlH)-f#}#G4B4{I$Hh2uEFMx!joWsF~ooB)hs%I&K<pdF%djhR3Oi
z=|b7yaX9&=e@L%#EjyttWB*RSD({+&r4n+pN?jFW#Paj#{YTatS^3WGbz^x|Yuj}U
z)XEsYL{Xp`DUF{xG+vyZtxG(7=U7FR-kL5HNO+@i<hq`zYRUM{n#Q5=h6VfMEt_5a
z$z@eGrT?RNtYT}f7Zc<jpkHinpBU5Pu&;G?rnqlR4wQO9E7T-j(v@6y>H;M`>RX{u
zppQp9s+yUpG8&cB;`Wa`y;aBL<&N%mu$7#ct}8v<r&RMYVt3u3cX+nFpYjUGVR@M&
zN9E<gsONOXb1TPls^p5w%JC1DTk@+_(OEHz&2AnnrYtC@G@SQiB%xKzQ<>{IlaZZ5
z=Zq!ATK!0?TvF(_71yry!WnJoSz3fFUExbel3UtEw-Cd>$K)?;JKtu#>k<m+pCo`b
zsKOyzVM2v+@9WlN2e(@F42;ZH&w6j!l86L>ZqP{YrS_#AOR!cJRfQ$C&JWVVDMyly
zLYXAKMK@e#{8`quROGJhxW@|h21{q&-^sT-qBk4wAa}2+LTLUe`D=yE%`~!&m;dQp
z^Rse1!g_VVt8}YV<!{&dKPVU@tq3BdDo2Ew47MG*2RutZz9$1bY3uX&oK!#hnVRof
zZ4GS86%~}%vHpK+rpB;C((7ck2|&_Nwo2-Y8Xo%fl&p1Cxga+pLkKE~0H~(PY|dr8
z)ewO3LA6O3=8)jX5#`LTLRx%B)qW7$ndb-D;8C`|0<7<4V<}ijsNW+GyTFzDm1~B&
zp6TW@q?1cl!yr9d65aIj<5<97#>d}~=Kb&KS0C0xZ>O05*hZ^(wj(LXfpj?Ltv2gj
zo8?Ha&UZ5`5o>v?l+mGht-Qj4$}B;K*S85};;G9chJ`QG=>2rtb9JnpBl?`eIEl08
z=F8#vJ7>(744v9t$Nn5!hks;X6vl6}u0eqaY>4|9XCt>DZ~Z{tULNz&c1aGSL$$ev
z65-Dm;A_w05pn{E{A-9!a0?dI)PUjhOP!6*ZEg-q_%@``%^}1Idxd&YNmfpta)EM1
z&RUkbaOAbpSEY9-TX`D!9r>%W4Jryw`9t|r#SViZe<6Rv*rQ|A?vR9|{=&j7ajm`3
z9#wZr`#owb!W-}fozU3pz0hm`9__JPUUN<E9OQN9i#ykw&ZoaRec`>*ob?Iu32|rp
z;kgF3`_32QV@_zB`;`4u!hd$xDOa20WWvcA?On%R#~mt3*&W9n#uA)vzN8Pq<xTTC
z#WJzdv4M4X<aUQX>kp@@8H+}ttZw5(A?hRnQ>%D5kf1xQip0-5#VERy0HuB#4XRgf
zb-G*_%N++ublNIM#GVdz$~vmkTjRb=*K(NNEugEZdHhGvZ3=6HEjCLRzdeFE0oX)7
zxkqdEzTys>VMG}2Y&qaOYTX-Em=toaod7orjI7}FYP7j3?FLS4rMtiskCPWEIKdHW
zkTR6eV&dsj%fKEjVTzk`^Y7?1WFRaVrU76Cf;a{N8y;#fUq(YJxDqy{6sL(Qzgr|<
zTp)2LI~YSUY(&;c()klTBjOkFI^I@rEht}`=}2MBxg?|{J$Jt&7HtMYDna2fN{boQ
zP`M?VbKqnur#jT(B?*1#y6e$2szFjX?!3eW28EfE_<A41xTnF#z&(LKMRhE3EfE*4
zwb-M9g2T+ix23N2EFqR~kK#_y{+T+y3);nyHQDUBR)9$~s+6LJKR&A}OEQDa6pQUj
zI8Sr@(;mN%vh`3R<$;+K^I}fhC9Vy=76fqa26$u0%ubRfVF-DRdw)%fY{sewGae&M
zjcrcMl_u3b80_@3G<Oos5ZKk3-l)SDhL#w7Gm+rrmfC$Qt!35!eTV4&rs0kF`d@>{
z5Z5feEJ4dm=;L*?TbY`i`5n))QA#!1CwiHc51K$u)Sb^-%!#K(M9x5?C{R{pY?G{9
zI8Ny%ES#_@NnN&NtLCIm^Zw7?Sr#}eyUL#GU%Li(pajnQ?EiJ*rHbr0*CYGnEAue|
zWbHU}Hi41@^`6J98-3-YuMD5!(ezb$i}Ge;kinU_E6UXSAt{Z>rnBBLo3|CdTj#P)
z>#+3d*L^d`u1QC%+jU)z+jxH7UWLk(m^2EVnVWHB>E@UNxLY1Rlq`Gft}!F=UNfri
zNks3P>pkmn2PCm2@}SA3!t**oDuLcZX9^2a$-%@x43$EZhDiO6m_Xzq9#n4qn-$u3
zwrt|f%dPMg*kK41v0d)X^U18T!x8iYdNmW93$@Z1@d$f*-xkI3G13H5CV-D@o?KVa
zpOpJ&g7BCCl0`|`k#s4C9-;_@IFM4PRB$Q-SxuYTi<?GfQocA=ms!GMN@;QyHAcjZ
z2~IR+tY=6ir#z6^yrm6<ya;ZJYRqFQc7&Zg;itS6ATRH$<Kk8J+iGENE^J2yi{+Ab
zL9=#Hzyh-J1lXX2TB~ZRiTmm~w@G9{;OBPg#)&+ij|*x~@9Q(QuWA|(i8aqlX!L0V
zO>}&+2B-&RZr>_BEkOW6iu0HSQT6zh@E+HVE_|mVKdIxxk8`>1o!DGj-sSrnCDQ&I
zXOi=DGG0uOBRfl;Fg`o7AH&WekdqSmQ&UOR$NU5#A+Oa3NQXY4Q`HpCe7r)w&$Y$1
z9#KxO2rMM47A#8d%Paw{pLz3Pjy^%6@B;TDR0rTw=z~q2&(;o0mcIVc?FS;mN$jhL
zoGYn2JEhaS=%ril>EShyttwvSo-rYb-8%qn$t^8EcVb>;nW95!=uZ`U<tl=m1KCda
zLofP`?=DS$<8vqY&I=#447T*pW-E4@Q}`$A%$SG_fdUFt>uXQ+NQ_LD#8ldFQlyV_
z8HXb>1RRuE-_{gBurj>nfll`}UR0XDDRo=S6+Sd5ZX@FnDtDj4vPxo}(%t{AB*>(d
z)<zHdRCrA@1QRSGCJpr5w0XAAS8W@@0RqRsfzAx)s{U&sZ@(a_gbC#q`Ya0)%aYP%
zzN(F^Hkn6^M_h7URWc>E=s3(*NbiN^unI%{*&L$8QE%m_qn0VNpTH{VTY6%{GUaZg
zuKcylw5TpaOh234XZoLP(=yv!^^_y0E?1bU@>yW%9UfOlfx$j<IP{LD6Yga(8;ZKm
z`tEA3$wKqZ<Nfmu|J7BMn7?s2rC@s>Y+qzNL&<0zYOH9myL{1h`)?iN&`dd|p}^n!
z7iWqFt?}fCgs5W3CA=oLvS`R4-gv;)OrWhPdkYsRW^eYJf9z13NEw#vp2vP{7nYM9
z@z^+`AT4w1v@^RXA<f_2Lu(mgtA)d5a*+x_$3@ae)$`DbZO3u7*r3d=ka&U_w!kYn
zCRUyt%ScRN!~)6=vi0ZSYD*&{Fk_Wvqs3ccVrb1k_Afcw^W^c|N_iYHo=r>qyE^1G
zVw`VIzDvSXlD}vkciQLJQ687Z7k>%5uqox8f!!zyy=j=owihOFIgy-@n4H}nMx$i+
zNr1riQ}Ca9vDMU~rRM_Hb#a>)6=&YvwCPqv(OUE-VE<R1Iy&tt!v0?CA>CHS0RM1(
zorRg7`C$_of#;R$EI$ml@aH&?&=3{}=9!!PONO3bm9Moo%xB_11kiGu5mzo%<y+R|
z9K~bmKA7h@DO|oht-AiPa=|Vwl@AAAhz+1ZbW%X%yUmlvW}O5$@ptjj1pz!?NyzSk
zz^xbsVa~v}!p5Hv7|fys__HX%fe}NSRe}TDFDa{BQq~TB``#adKYrV&3d6s*WLgaC
z?W<bbl}E;qgWebsk%0ShXTlHJ@wZBFU;QF|`$=Wb^=GE6x~{#<k`^{C7X(M{JDbtV
z;top-#y+V5ByQgv-q!8-49YA2vP{8SfRS(ABA`y6KJ<x=@wTsJ>(E(|W*UN<LoJ)V
z0$fpgg!CnW>~m%89UW)1r-Q6OpSdONsqpjp2Ot(n^TqzQUf6`KywCiL*z>t6&C{%i
zl^o^l9z^GW2ADjOt;6+-<squrFzHVr4fJ;*^_7OH-ky8=f598TyhQ6$n&a%#axS3y
zey9KbLbiJ2<|~CCLK^CALFy{@D|x-I3;P|}C~E-2$P@VWck5s6Gi2N!-r^QkuDf~u
z)cG_o+`7WwS*?JXXmgTwgnCNe1u*Yn;S_K-8#kYtSiRmhq@J(E37+YB#cl!4Zxy5e
zn|*AjhHC-xgN|;VayJTjd1w&bM5SU&rSwzlPf|5-r8pn#r!G{iVOtEVky*QFOGraX
zU1LDGFXf4I0WBS1&%C&zi$%7MVWdZErde{D0m_GkOFZ*M!@&q;j+<BTRs)byP_2dh
zbgV}!B=3#TwD%yiit*)Au#;k-&CQ1%P~gW@MO$jpg^vy14)o}~5Ev@4g|$vqwx(K|
z@_PZMRy@kp_m1?o46Phd@#f0@;H}tq{3??_o700gPU@8mbNf%Df)ojAlO%vJVB4|#
z!Iv)_4v|irOC6tG&#RJM4QX0GI~qE7h=JMuA3TD_^oOVQ)A~2khQrc_l^?v{rnK3p
zA8uCecWmc<M8(NLgeClWc8{0@h%1D5BrL|rSZo^)KHV>B{T(sGCl4f9rw~S+mk;$^
z{DUY6{rJd1(1Yq-c<;e!@mgz;u;U~(pzH-z+=z%j16r!JPW}TrHQZXizX1Y6<^?BO
z>fEHteIFEep{Lq@NJZn`0j*X}C-YA_sZz!L7^r+oC9Dz@*r6B#%+y0JUf{XM+K%O5
z%i3qnkSH@DwvS;Aj9W0tm<|xay8t7gsAFAfq1ziNn1Nst8}HI`b4nqlDr&X`5))(f
z2xedul)Z1uE9MQZ@9iBK85=uoc&NO%c>jSQwHz`$bH)`l)%uP=gGf}ueTlDLjo?s$
z$T}5ud;K1)P$#w5?b-M*wYsf7Jq>*bN=t96o0S<2VG8A`>R3+Zx-H=ZzDv3TI}~_K
zKtLVAwuzKs9gFZR1mcOv5vZ!nbzL3Lx~ZL2ELrwDN$p|S%de~@7J19UTnUIAz$3Xb
zBA{fs!4ZjJMc%bOP?dhKKW@dKc3pQ`#P7^m*Q^50?~bvs@PM~rDTwCYGo3SZGSKnk
z?+^E_RQ~<jw@ps(_%=Q5oIgX|xzpZ|fd^#&eKGJEc_KOWXI9`94$8}#AzCp5v2l7P
z-&eY^ca@DTW}{M^2!um?OAo?69S*_%s3+fJcK|^@U^XNy*nC67YuTOc<S^+iK3w-B
zsLQ>`_rlfhpY%0L9PhA9Y0^}0ZSl-pTiU5kN?3J{ed?992iu_-l6d{b!&^W!t97dh
zt7nGy_wxIp0OCNv9gF-c`XYb@lTt1dK~s=an=7sdI8z6JnXxl+3Q#O@-IZ2egk}Z0
z0NvAKnfBV9U1WS~unHP@bWsc3!=yc;6FTAu1aU(z(Z1hH`ZnY_K+X}&rnLV!+k=fM
zuj4ibZPja!&x;?05_)@ycKx-r#X}Mc>+MGqt@<C<cH7LLWca*=4QxXZh{%WMV3%kX
zmX&gVv81m204};yryfSzZSL5mJ~Hi*h`N<-{Fz*jc?y=i*)zjy*cy;DGh&fH?}F@e
z%}#2UhUDpo`c#F85}D>D(qX?TwE6ZjpAfQr9ybd8y6PZFl%4DfeL*&Dg(7b!f@w@i
zj2)gy4>kF`dEl4hKLCM*hk<;r)>UOKhti_VXkzQ<J<qBJ6Wg(0(gG?cfP0;Y5NMqq
zGjhD@&<C@5B082;KtAVj!rOdG+5aKz`L%$R_ScTO@0jhUv^O#kTF#xk%?VwCa332b
zeFcsgfGlze<WvuXmgU5OWwUkKF(-5mgv^#$`)%aesaPaBL~K5QPsQ@;>IEM2{_TZJ
zSRGrEJGS)UgfvCVXd%c#L9NT*Y8S5)TFE?oI%csOp`rt<UIU9yo9}2ft$+bxl_2%-
z{D6e7`Af2sslDZdbsLa{oun^f1A44<nt*qHn>cAC`KWJiqwjRGUIa5yKXTRWOv{SP
zW~}#b%gqQ$4{p!(NZ1vb%^hjkaaCt$>W$?o(}$)MX&&`08eyybb!p7YG%R6zo*-_%
zStPKyoB2rXYf2eo)Xqu>0XRU3bTL7ad5`M*r8uKfQO+qS=MBMea{fHE!s)9gRK)+3
zGEr4UzVlRwsD~847orT*s|ud!(keteAq12X;-#2i@|3Fuxm}VlUf-fCJ;$r{s!4na
zUcM4f{b6{cyC;|9iA2y;QxZ}<J)Tc15??OG%j2kuu?M3FxVvQamnZV&33P1yIf=Tb
zWi_VcEXJ7<Pj)8<dIfs8d&E=1UGf*Irg-BEy$Gt?Y6?VMfgQu5OL1=^3aO8$O@6Bo
z6N>&f_wc(a05#XI2<80k7E^_AxkZi3@j^aVRxL^>^7Ob_S6Y5u&tBC9%x@o1<u-c?
zo?E5F={-DedJ$0%B_6NA2xo+5cncZ#5RV5wk_GYr-^!%J1;&)xmy7a=KKh~=`GOtc
zA;JELLj|xe;W-zenTBh5?s=JVtxPLEJENM)lChYtwOiva@Ui#_1<z*pZtIW(+CI@w
zJPU&{=pz(z$;x>b>UV_z88<K@0iuu-*kQpMSxtbrFn>v6zBou;Epp^(tqoxe1)JWq
zLX6^&05_3NIkO?P_-9EVGV6l`X-`5QxvUGiDtpMPA-yKLM%)l{sKHaApYP%5ZFJKr
zR>ta)V`zM}lFFitCJ;qEqpd{*mMenOLQ0?}Q6evK!eo)<B8xa#ZrS~#wuFEro;nck
z?-`_uR|dO$4yHJri<)7<B?;q3j)LW=>(=gmy<FGY*y>#4Aj$-=1%U@W5BBMycfgJo
z<+z#TBC6zRsx;upeL|I~S2LO4tnTCPTW>U3X1UBFiyi*b(lapwM1ODEl)b=m!Cgax
zs)TUQyg_+vu%c_pH&Y-?uFYz}stxr(**^XGbNVI!@#-+!DRmLGLAoH_IsJ$&UV9oN
zc=#`&-lj}j7GUBqFRhj+iQGTJs9DV^hS-~73XFG2d*ZER&16FeF|U=j+1>c<+K}2u
z@Qh@I5^9OOJeK2t@fz}^Qm^YU@G50lL$OYCNhp3U<hT(;Jb|BYbq{yXsxRB0MNpe@
z0^Ij|f(zSY+lg2tHUi_~>mL))Y2Dz9MFs%#?Dv?0Jg6<Ujexap<!x~9R`VAHbXeE>
zV$n;z&Aa&yk);<e)op5M_2{T?spm2*J6E2}fy{WnNtS2Et=Nn?Fmu`TQShct6HoFC
z_aLE29#90bG3c27C%ge?OQb9<$llB%_<Az&^VgW#ZKbq?aS{qzi6}*Sl2J}&mUBd;
z5)mA$qdnDzJM0H6W2;b@Um{{~d9fY`NepW|#))*2EMJ1~LZzmT>Mi$il9-nupzPd`
zE|_1o6$aDR|F39^B74{v`DgM++YxH6-RBhHc@PHS!WFHDJ0Vz%JBr2|gZvgl3P`Au
zDrfd`Es*{@GD$nKf$(JG`c#tFSn9+j5?tM87gVhG2bG)0no@J1-);F2$1UzJERG$^
z!aG&4y;ZW?-}$i+#C9!vg{PA}m2OW7If4M4@@s$}5mm11m5`mP?&6aY9t7@-65;<S
z`fe9wdbUYv{u2!T!%$!CtqrDYt&m}g6}L8IJ}Nt(?*a+hyX$+ER@&gz{&CRFQ-TNm
z8|sGwTbM%bPw#A9c~_q4O;TFHBrd7lC76<%_^+pNY9hAGnX%n2@7*~n?YFC^2NbKF
zNGk3+oJgq2W@Dj6aNp)qwU%$CzPV8&B52j(bWFm@T$fgt39zWaPiFPn;@Z!^lzjy~
zQC+W^OueP?zDTc^e49LM=a?mm%R|#P2WbB#V01L7HGA7B&qTZzB=19=g1uKVO@*@R
zphlON%S45%mvD}knEqBtG-W`PAhZmLtVbgG!JWp!1yi$KeY2<Ah4YPq_?At`V&q2L
zDZNW{-MG(xl^U9|nN4vyC2<>LE02$&Il8gBz;kB!3emQ*ocX3=7?L3q^K^<&Wvva#
zUN?1o&rq%0<AM5+US}<8648n%LX-({4Fv)>|9-~Q#t=VNTzFlgZ$^f1XC|I^HBYD3
zZ|f{GmD{RpOjP}!*2A^j8HP@71^HEAdZ%1e<m|)bWEzpJQ}pTST>7tT#@_oYT_{jk
zoYC=^^mrvQin?FQ<(`=5GG{>kMZlkz$!CV7NNT&wbm>j)`wods5$ZPfMozvB+hbn3
z$_4P*vb^oB@?(+J>#Tn*O5jA)U&jS5EAgRBQEY)vkpl?AWaR*0b(6cNAG|xM;nt>A
z{bKECm@DWJeNT{G=H|2U?!oXA4%&&swIR$Ie`08u3B~;4AJYaBj>ma2FZLvTEi?nZ
zt&lAOf%g)qqT3vOmf#tDkbYdp&o6E1+KA7wzyu&(gd{Qpp3RivH6z^TzQ9}$flyq6
zYgn_i4vfEaculM+#+4LLYzDw7UielyW-I#?baRbryb;>S%a<b~^YgC4fq3=m)jwz9
zLL24(m{5GdLv{_`wy_g&(?2h{ChfJ=`^xB&><D>uyJsS~XD3||t4~R3@K@<}WEJcd
zjW53+n)c0Z-w?3!@hQ;xFr@qIP$O6}Klwt(hO-f=DT_4=<CAk@@?v{*s$+(FW6n4G
zRqGT%86W-Bk})YEqSz?Cjgyg6`OfhygcmfB@*m_#_(P5)Zg4*&!99Y<0%=>G?taDB
ziL0FtwWGmVSeAtY#6csIUoe6elBkN7YK0{o7b8l^^Eh9nyqRV$=kLVG;VsUJUdArq
z)+Y*#WOc#*?BavacnB;#a{um}vLlgYv6Hr?f$}OrTFuJcg~bzFQz~l=q4l-I?6iRN
z=txez1Q%4YvL*RNorE2g7WsCJL4xMUV~SGWS(G+_;s9jp%)6^u+_C|s02>sC4g&o2
z%I|?6ij7Am2mcvk1Bg81^lzS*kS5}6^LKTOy+2GyT9mVtZk&y)O({e#^HrR2*0MXl
z8}__A>JJ4CkL-_(?hL%f_GccAx3dwOxZNoM%F*4Ts-LBd|GBq$4tIQBeq`Tl1Fse)
z$-Y42<H1u32>oo<hX)rN2FA{fa=23-?^+(VE@FO&>k7pXevXu7dHH!|z2d*cX8Ip#
z{kDk+QwQJGz|@gMRJxTHo|TnN72+7l0D(^><t!x;WGsK~O!Pg@Lj9>NgMu;YJ1l~a
zd+L1`ge=mW+&!(obC2F`jEOzRx=%?v_9TC*?$U7b?ZPK%CTolz+&8Y-`n^Xk?)I?~
z=KYPj58d|7bo2leFzOp}1-0l6CmpT)Vq7_cs&apk+wKi)XKGK}+AVSn-2Rem@dINL
z#q5j2H)&&SE7Ktrt3;Pw)%1zZVKF_?q&0DYi);pejt{L4Z139!)uW>&5tWg&8q$&d
zYQzag_heKG!Vh)=FQfGN3H690_Uw-zsl86#zSUmA40w~A>_V<O#=+cI7^&L4$&Uz_
z8>B_ic2YEP&jVFGdTLc<K~hT=)?MV4(9{&~xoB)5)mNFH*mXka>!J;94=7^~+UF+<
zNCIV!sC4bz6>ob|mVG2|MHFKDu|Ju^*%g7ytnQ;hp$~Z#vu4}=nz2JK&Yzrn-PW^p
zH+tlfj~$O1lh9a4wsxVi)&APsEmuCjxvgJ*nQPCZl*sXqh?JD>zp8fba>$!$f+iua
zDk*`p2pw`s_3YAOK;`VJmL*L!(4BLWAx@jU>pj&oXv8I8fgM#d2C|Ni^?6o&433TD
zaEK2G(`zg?uGZD9id`#v6ZZ7RMb4L8z!TJ7+0z8d)&qHN+mtRU9Z`CfO;5A))xZDg
z5Jc}0?%gNsRF(fzT%s_TS5+r9`;@*qnIqw7&V@l0CCWuwx5}I~Vzttos}wd(F8f|_
z=hf}gw%S<N+bEKz0x^ZB*j;Rg?$jtW7aXFeLDc4$;*HXx?c0mM!U7YmR#<CxDPG%}
z+-^4Gt7WAKQKEkCfN@~!VKhago0YB9+iVfpT6-a$v(DaSr`fp>2n@nfyOw5crG$6I
zp%;9$_}WhPcK~EzdnHly31gpm*wJT^{Zg}@pq#})IePD)ShWX2PM&-<`Pq@P5r<El
z`!qRUckG<bIi<Cbps%|S94-f$=;fmSX6<kKu_*f+MBnC_ToVHvMNn*=oPLW?yoAf5
zL8~XF_s5TIowB6EAP{`T)+x+g%Z-EDF^}Iod|)Yi+3omwKg&uxe8!XI6+P|P$OL~%
zH@2}&<>mcNLB753es^X2f~1W|_^o1I&Auz<&NSHfmi1H{v*L*{8t1yQ(X;9&T25C|
zsAdqu9a^S%sgey+x6K}}eIAnt%=gsI9;-#y+M;z{!1t|v+YOnluowS5*1R+1u|q-Z
zY(re*qbEfU&Z#NaE{kF=E&9jzM?(Cx?wr_!^6p4Md|E|^d5p`g(|Peo=iEB~4ErRF
zh7%`>ScUd>AIUQ&yLs~hR#8eXxw-$ENnYvG#oGz$Cp22`|5;lZeLnoelWrEDoY?Ec
z(XHkg#iMrUtNv7P<aa3YYk0?k)gaIE)W5A>XIFaLyts14F>4KdP-E~eX8OgQ>Gl%)
zOhDwfUV|;&&^PdKYJ_j8vAdjd&7|=9MB=uz3vh5tbn=1119BAlk5zrjBxh|(bdW(%
zgS5kTt=-EE9B30N*|O!$n=SXX{aVm=CdFh(t7?2Sw@}6oIiU0VvEDyjU4ME7cN-Yn
z?gAhY0DuS@cliIKOq<~k2bjRxdd(nuz=i1^xS-IfA=UUU1uG{kdYoc7`|b#Xrw=OM
zt|W`z>W0p0&W0?4wKwWwL*|76731rYZ=NsO_g%q7tY|A9x)Qe|P)@2D$T|%l(#JfX
zMB-BrUsE&?I}Xm)Oh+HAu9@BMv+P!1{UJxQsW_L2%A6&z_W~WQXK`JycUZaH!W$S8
zTzU&#h(ecFu=@;$&b!xo{p?gz`F5c6Y}3l{@X8Q{hE}*MBl?Qrp`5C<r=<qB0_GL^
z9}MzLAoP^J6~0&hr~bOnn?2oiH4f5d9)?}&SvuV{bZ2omXvCr^qpG2(E2-N&9yMgF
zv{0`)Iom&Ub#5f#u6tk{=ldR6tPrcTKOw~?UEH&h-*BU0frh(MvK&0r(y^s(YkkW^
zaC%{PS%KCh)_N8CI-%c_iAWiG?B>-G8-wq!WLcaLM{2QQ?{dvP@$dI>&A3HC%GgKa
ztTc_@6Pv%<EAD{&)Z6Wo0=M%ue5lzX!$m-!pW@)p;y54uc#nBL*TGl=aY?79GbQCT
zCXJQFRb|nmc#PhhD<9SyR$B^JxDG$kB>q*5q>Gt1sfz4Kot5m6GO^s4?rjQ(CK~6i
zdwsMs1Mz*Gz4wgQ^`ae?U{VKF1<utyeQ9Yb_M;+EI<xC6AR#!Z^Po11+@w&YC*V|+
zbENCma&~v7tb<Jw07Oeqc<<ZEX>Lt|CtO#jtqE;LlZe@7ico^8PsAKnrVR<Z=3Ioc
z)5>7J4wd7P6D5A~O2YX{c0+BVIFD-`b~(KTMT)m)-DY;4N7<pycQWs>F!3bYEvH=O
zw8lx8O++`GPZry{(&MdiRr(Cd6gpAbgPSotJJJa)tC;IL7~y*Bulimk@o|v6LcUr{
zicv)C=*D{m(wCNa$8TjNv?_26*A5mpe6=lfJYL;+*rU*5RQ~NMZVZ*>ea_pNZ_vui
zp4TYz-2v~kvV*4t*V<gRpQm0Z?;cui#L+XLW`gmtTBIy8%k76cgQu^mBDxpQZo5Ex
z^S0GEET%1@Ubvli5>d0agHj&rli=;pMSiD$>gx*yz$ZS@6+m89wm$!o-B&dWfWRd)
zBUp(w^adi|w&%FD=xuj@46e86BP{5DEU`oNIO&#!omY;}Pd&uD;)WR9NcS5z>*GDn
zw#CdEIxEo);gg;yPUWmT&BAUXT|3#V;Y11w3M+?AeFU{xVAkg<Oc0mnc5EO3i*doK
zhn`wyqx`mYCauaXf0&~|II~T%`_%4$zz`g_=IYkUHgyVg6A&_Kd*(IpmE!&c#%mD1
z9QXMR3Bh(izP{zzN@pE*J27x*w*mxE0(IIlTkCL)2fss+l~rw{mkOy~NQJ*{s(d=k
zedX%(N(gkI9ys0MGDV)Gu%2u^>s2kg)2)5z)!Pu0FclNz#B-?$E<REH7NDjY&v>Vx
zRIcV37GXCe?rjqKeH@89VZ*=wZEG&XG}9j3=QpbHwgb3Jblr=TLi>CC5Z=!p^Pag{
zJ)@C-`z!cKp%?n5;pCV1cl7<~lW$I`F0YVM@gi%kPc>+=ycJ=&y+f5tkT4rhuZsO2
zP^%<_FS~nj%XM4964t<9X6s)fE|7QRc_i#ODI#xJh&waDG+HO*@{^)RCZ4SHZ`tfM
z8=&%M$gBxl<n57yaIScxBz{(GS$WbwK{}^TFi$Q&Np`|}1+mwD3~ZKqT_y6q;CO-g
z)ugU5pGPwFvJK6z9``h03o&>3p|iOUUic2NB0~0l+0H!Ij%(Fu`Z}fizb5rLM1#qf
zAN<)s3GuptNw~=3G(7BVoI@h*V86&V=lrF?-ZvJ|i<RuXfP3$ih3%(3R-Y@cl?`B*
z;Zy_oe-Bj<Fzb|#ps{l*Ps)!Q679UObZU*^)OqMKmd~Jy!h9+PC{%aYY^h|n#bV-a
zQ7_2LH(FbpX?+ixXv3{-UWuDmqfEAKr$6KYEH7_sYXVrsMsx<d6#|F06T7i1oh{Gg
zdsdpNx>z@iPDW%5_Z0mX&NDg0$dQFsz0rFIT#po}Z_E^|Zy){2{g*c?4<9<jUdt|K
zo#H)b_M@!|J34hxTd;MVE6-Z$<p)p%$?ng%<#m22dz`tnx694S{hkO?r2Ov6k<hax
zq(9C~*x@H_qfaA^$N(ESw0H`D^baH&PCmeVlHZnI9=WO?d46&S+ZKtB*RI={eAX;^
zEv|0+zflqCpx>54(@xJKZV&hT28|^<RCCh<l@UVLt!C^XJu~P<SXh}iq*oUW`Nne;
z3G9^r5}0W!C@L!=K|?OW)!L;P?YJwQI*)>%(^pbnZIM$^O~b&S7<wy%3@)W0?sHSx
z<`5y;MqU2<Vp@1iw|!2?;!ckWfdM4z&~RsVorgu94C!q_enhW~f>3B9<DxF)Fl)2J
z56I)Pr^IjKw{DGp^FQy+)~#&+4~>a06;F7-`6OMF4A)GeU>Yu5D5g*Vf-5?5YJ1dp
zePd7h?(6*{Rv@AV`yI@sDV;hD&+cZRo~S6pz4B2W>hK^O^v8hSDyhm_!_~E)lC0r=
z#4TWG_`oqKI=_g+1%}d@oEW#lZVx~$$j;q?+9y6^6DYEu@$b(*ET*ZkkyS8`E>WNE
zuYc~_FN~yfRVub?qTZ2GF(xKEdz?Kyq#g-T0i_nTkYvM!QWY2_q?H||u~M%Iz@)v!
z;-^MHA`*$t_<DwhMMp8?P3wI;Dmqc$6*UQi)p}Q&!J`Y+pQw=dL>7w<*Gp=CAKV9D
zzVQDa3?B2({|te`TO+C0$IRgnyjljg?%FTFgb+DcO-7xl+lPA+;KAHC^8OwI$eEC_
zoZ6}6^v~iOw=0STXoj=H!~b(cW+5Rj*Tvd-#@P#d+_?16J@xKqFg%GB%<n1XIG{AJ
z2UP4$%BFg1w_Zyk8N+`A;v`I;E6UuDzad_whFmI={A49u!T%*5po&hp7|e6K<i;d~
z&CB>&8<vzh%e)u_jfN(LEEB+V3@26GeUyH*BhJp^3cXwr=(6d6^vRvLj4vTA>}^@X
zR`WtFMQJ$6w>hlP$ud00$Wwk!2}|3l#BkFmhr@!PhX;TvkrmdQ)^}r9M&I^hryi)D
zOFzO|K}rzW#=50&H`KSh^I{;;X@~gs%S%ksU|q-SXUUFmBy1^%ar_IpqQSA!jaIQj
zAErZ(Dr4_}{7bKCa(aIuku&JphqfHHvwSe)-$t{F4Pf*KTAM-ynNePz_IiCHA=Rl(
zkFNM~A`8D;-WgJ|j2iEez)e5x$M6q^xF8d~A2*il3*iZeWK3inNGn*=>GxD{ox8U6
zmmfQwjNiLgwa?GnGmnOAK5F`>S6!f6_XPp^(SnyzRDSpeH#xOMojjXz1(l<tYEJ?_
z!ZWW^(Wi<+Fpq94`43!i#9UZt9l$$fWRZv9N#=O=<u>I$@uwi6p;$ww{h(GIasiWY
zPNqh$6O~Kvd^tH$Q0JKT8e(BB{eB806#|h*7H(LOfIm86E^q;6E*~BO3n9X;L*ZtK
z0EFL!S`Q@o-0y(;z84DW;nv-rT-b?fwzR8_a(2>Un=$(2z(zC+3ME1y5C|W+LJeyo
zy>hZF9VDmpB<#ukT!}YJm8~`2bNBOZU&IW)(JS@!v7;4swY{exit<n-lFz9#%rBv(
z7<j%NK1zayVRtXf@>I@gyIAUmMv+dfhbcfG*UTOs)P+I(p#t@!OC)kW`bXDpV+m32
zQe6$9zg=Zq6+<8pcMx9c%DT+}@R6RcS2o_NeM~}p`RLNInW(ciG4q{L3=Oo=aBe-4
zhYTGIVi1%aK0s>*v;G!Dwo=#E#*9J?z&vE@7DUWXOP%N5XL?HOGKFn#1;5>TO>PB6
z=Y2&>N5EH<<hPVap+kcSX{Vy|Gqbe?JOxQU?M)d``+=K+ZiQ&z?x`L%>oBbrabh`Y
z3qxPPeo*Rf*7fjVt(nSzz%lTYK4RCYijmXYY1Vdz|C=^58FgO>oXI<8Y90f)FEJ;1
zuo*eGL^zva(I5q_x^62LE?U6y7-n(*xjw;K4$Q;zRFIk$&Y#Y#1od+^r|Rj;8V%R(
zAMK!bqgD(btUxLF!RiQs_TYCHF{ly#yR%@@XzvLFrhHm=vXG0ahWAyo|7r8L4<2Ez
ze|z{{=d%7Hs+SNo3y4_vAg@jLp+s0_Y<xD)Vy4M6&(c~SJ!7F{_{WAXz~W+8PyEou
z;@W2x#7rO+3k=x9fnKl-e$a<+lsim#pVTmAw_ga#TAGq9nUK3f!?oSFCHEqj#0ZDE
z5hxpb!4{g#KGf|wf;I;~!oh<Cr309}1^oN(h3P|wj$j5E883&R#(lj<*C-GH20sL(
z01=c7np$bJ7YVsG{cZj7xe0cAOs~f?>{_c^VWW_Ex60Z2C$Kp-5+SFwF}5<X7bod(
zy}-!LrRH0t%aq0*Da|RdOhCq&R(>mTn4YdOpVi8d2WxACwK?(wTJ7cuFiuCig@(&A
zgEey5VNpsJ3l760&i#KYjuu+MEUHha>Cb5GPYvig`Wn_)6$d?Fr%%7;Fo?knjuhXE
z92|_iS3L4g9n3qx%6nV0z8;+X9Mfem#a_2Z=g7|8tiUaM3_89h9Nd=mR-qOdPaZvV
zU54|#wa3x+G{%ohMtw0+tXBb0%6Z}wKu@K9YxnV{Tkk7@xnrLZ3<SUwM486Q_qX0a
z`HgEVzZF$N)FZ{QCf0I8jJRdiEaWd?bXyQuPh{)VntLt&K=NS=q!bxxU?5TMyf3f~
zq6Vo#f>`btN%croh%9}h$fRAg3r~5fEUv2F?ew`DbVp<e6t{|>E<opp>%N4HtN`|X
z@7sX+?i$ArIa94w60cVPfgw-I8luvbr0HO2z`8%1FPJ@_r1J_O@NdWYBKMgZ29G*8
zg7`r;0#-}LBc_p9t{=9DpovLw^l^_%g^umqc`VVmgF0SNL3I#*-`(<CumQO>pn%^z
zi(q7tnQSt3*xDWcb`3V2HDc2J3z^5Qt+0Vh)Ax4k{O!>ek8cZzfQqim4V`ZjqnQdx
z(U7G$5Q^v!FpB8NO^p2c?FoNVf63Sv5>6lX`~{ZOCQ<z*!ou13wzha%9wNG>I)--3
zMF?UJO4^h4Fp!i>B9LI@M}J<rq~Ia(+`jb`Gb2Z`%*XwUS5%;4_(8+HCz|s3?=%!i
z&cjJ>zM(bsOF*+^DaN~^NI7L!8ku06qi~X2%kd{V?eTHWTz%dFj>j}T?yx{aH-F$-
z!1EKCceWN;HRa}>-su}K6gHFpzSEe^>d=ybAhaqe1GDJtfb)8{M;7W+JOM67IU?ua
zLt)M#dW5c{id(*Z#ZW$)lHIgp1CiKTLjR9q%rtBs5W<q#pX1$gpPlQQ)U({XS&0^>
zfodp9m9*8I8?rixaawOBIU*p86`#rCg<WGTI=5PK74)D`K|Iq1KyVSnFODMnoW|4*
zpO0tDUB6p(5wmZ_SDYxmLC3f=VM&8b951m5k11Yi!HZuL+3s@_lgB%eUlSt!fUVUO
zOO;u*2?=cx#Dtn6xNmCd%{?(l_MT?O&ZIj=AkWziRa{m+v+y5#z{NRPV>U{hKX~5E
zfLHS{O)aaXH_{p(*qNT9?nrW0s4@z-krW+C>a^}W```%c;^ru~+~&Cz2JH`=4K;On
zcWOd(h0Fit9Et`(k+84Uk8c+bhV@)!8#7tqj{3DsT<*%cYiuKP|8vmGf0Pc(ugn`1
zM-vX{V*f8|=Fr4KS}>OKauv=*xoCw%*cx#;;r>_a^PkdsvqK$>9XKFBtjQAq(?b{P
z1vHU_w&I-e6^br5qrz32dtawq(GY--UwtDXe0r29F*3MMhmW1F1iG<g*+BY3Klyk!
z?h8&XKY5dCc1J_>{Q~9EjEcD;1^ddH6j{7%L#klChR8DOCnXZb_w0aTTWQ>@HiwDn
zXiP?u3auGPPhGwKgofVdqYaHs6`kSkBHP?m?b0!yP~g=H4_grO9=VM<ud<}b69)VJ
zmeRsltep)MxqMabueIvKLfG-S9Es^5Q+|4UF2XeY)9+MJzJq%%^`&Atj&R<2%q_lt
z0A6~mvkLlL`qn@dN~p?MU~cYW5JXpSYYsVIV=Njvu`=UXVF3|{%0|w-(x%s~6k^md
zy88A+Ok?(8^>rfBomA;m43jr2Z+86zdY~WEfX1T?JdSS5b7@3(9@(KUv&Ewa!}^=C
z@YNGDZC5VIdon8r*r%-S%XE?#V(@^K#Y&xm1eRmh3j`wSy~_nT3&qaE<jRv7o1*gz
zxzjk~Y{{)awVctU%%ml*K56jl7W$3_r%xB)^Z^3Lz=7V`-xT(Km)U(Jx#;?4ePyQe
z=Ut}Mw+_4SIg_M0c`~UsS4`r%|M<6c<x>kycKV6N+Hs-MIds`6X-C(I<LEG^&hLjd
z`0}NvM+q%3N#y_|$QK!P;K>s)myLbJty^QX0>P7dsg$8M5?956AuVueKNd@&q@<iU
z{wH9#P(yNZyYcK9(-X(fa9sS2n?gJJYZl1^Y5s+NIMm;-Nr;DgC(%R&iSdKc^2)05
zoJ!ymB4KSnA+JJ}wo}rAv9bIhk3SzDd%oix0p`Vm8f$&-q)l<USB1sSSKcfyzx5lS
zQY%l`>_h!q62|<IS$8vhV}JO~!u;fGJ$(yNzW=t{V>?-?G{EKJ8T<Cm%oT?R`(<P{
zZmNHg?UVc3uWVyr<JT;`$*JF@KotiMH)&0ekv*Bq;zx6ytu$u?>gR<e)^bOV2BzI`
z^hoNeLmUGLHE_Novw~AE+MOzqrsN6FlU)Ti@(+U_9DNu3PT+X{oV@M3q09HZyp4;?
zMRKlCKT~qb?qaw7k5ASddlpfEt#FCS*k~$Dwf@u=4`R;!?~cs;SqxL_Zp#fX`$Ag$
zI}3f*ZGJgnxiqqw9ju})!f32phYPaT^y$rxAJ46pN+iWGvjvy{PRAzAd?&kO$K<S~
zFUq><=lmw&r=_zjry990o;ft^oeJW!XNQp~8D2yN6oL*2$1klFP$Ib8h(%=6y$c^E
z9SBn+mem4qOQ6W_fJ7dc+W|!Uqze1UnhX5!>KaXmIYQROG)Lhc^JPHsW{!T|yE_A6
zez#XoYYNvxOabWejv!Qq=aqb*JC@yc=qcimvtdXUlD7<&z`5{xu03pdPWlw0Q(pS(
z2H$u`hv}~{7^($k-^O?$Ww-;zxGtJGm8QVrTqp_$|0r&6L1|C<Ky`FFDU(y!P}Ws8
zza}cZ-}XZCcJ<xua12I%vs=Z(!5X@wKn{xthv6Ju9Nf?CN`Vy^m|-x;$YfNdc+HAh
zt<a$hjhN(d95619S2A|t&G*7FXk?8oLt62qzgE>jK($AN!?Ap4JMQH@8Aa9@G|DGS
zJp4edx_k(Wm^5C1aS43oT;+fJhE^3H;_VxsF>s&{C0oWLQ`GO^BkV@$i~8dC&)6ff
zs4b>Lq)GAG%<asjzAIc7DJ<<*d3o|WBkbRE?e|foyr`JvP+mOo^4~@NFY8d4o~)Ek
zd546$^N9c7o{~Q)f#_wx{Zsvte_}cbY94o`Zega4((YWiRLA#SZayrs=1O{_yNyO5
zBIl{RqQ<!}ExgI$Xo~=cmio(a^R%-lLO<5&=2{4QDYCK4HhZ&gtBsr8l<t_?GFL;v
z2HkYai-O%}f;ID0IKIR7j<CKgD^Ja3FdIl!;M}?gw{}u;LDoc%4VkAlk%ki6#hI!9
zAr|NY1cpQ@ZaS%-Zet0hVT<auJu<f4tMBR^cXK)PPu*GARzO~j<5)@i1A8lr66*U4
z)gzYYVxO*_iS4(lSM?Sfpm`N50zf4Vv8pgGxqG@NetTqudeU<3(=QR-+m3AWf1bbP
zolK4X7%F1h*<{jR2fe?b5}Xc2W4&ho*Y4pJVUr@mbJ(@wEeZRbb_EpYB$W<1HHKZ>
zCM>7Si{DTetjkQUS>fL#IPk!rKK9ZN(LMOWTgTRS+&l&<2}2lu&Ljd{n5CXs$yqo5
zn^z=R;gf%{tX`0uapFcLMTOSc*Fn=1R}->PsT4QLd)4sht<gnDGKWJ3<|#wk8;*6&
zl)UHq5-xW+LB&}V$di&wnz0hr|ACyiW9sXf>&fTkWD3zq%%hh)<r@s~j@RQIcY>4}
zR8UUkko^dEVzQ6B)S<khvLb#+r_eUYHp*WD5Z*9%ZbVB#K~9d5-eozszRuDZsncmj
zR%ZmXKm7Qt55gnB(cXNY&*$3U*1TR0GNpWo#hQEQgh3|oSP+DKwBxK>QD|9+UZIf7
zZ%2H-o#7)_Duaq<WneAF-lMEs1_u@Zg*L`%^@Yp2uP$_TFJA4k(H?pH`QWu{L8z4V
z?a2iK9-pr-;metV)HRvxZqaVno_g0^G3VOaT3gSZZ*3J;IW-T<g$Q5aHshQLWnSf8
z!OtO0<?0(52F*>e{pm=d2+@aDcwKEI@7mRmkxNQV&kr<4EvuIpZ&B+*8=b1Q+A`6{
z?Xw2DGjT72RG(eFDe)Z^JT@+BcyGTid_zHArdwk|>N2V0d_f7hdvAZxF|CzLd+`P`
zK^0(6t?>*SMmW2|JEzqrAij$^5(E;)fIwnW!(Hx_qsq6@aV%EaZx^3DD)5r}_-wrq
zUX<LcwHQ%jRHTYu6p<7)KP0nN*bp#ZIoFCHX35bh7W@Moh7v=<#Rb=;m9#0Rj0^ME
zndpR2rduL$EH;@J#tIg?sNFns9$JlUPIfL0gR+4xC!p)P4Ik8;mJzw%)%<-qiM3G7
zg1jUR{JF?zKl=CT%Yz#-J@@m1D+?~gBS$@VPm`G(M?Qoj%wfm?=IWaOV`L<tTpq{S
zfQRm#__godyZVaZXXCYbv|74ni|clbVxPSC)VE=J0yq|_d&rx84nk<sLAQHtL<9bY
zu7!mzgB<iHDoeQAPaA1#JEEOLAeJMU6M=x89Ih__Xpn}Gx;v9V8vo$Ju?->g+bjRt
zs}9U9vKC{UYi=(3%kOp>mLxwqi|>i1f$!Xx-^IZGV#j;m6U||I1Henb!|L9nWSK{6
zc~;i8yupR1TKTWdr8>9FCt8jbb7z|_0=ofETo*4Z-)Z|UgrzlV%04Kejtf14|32~v
z%XS_L+w^xmH(Y}>z8~4(--vnf`hF?c$#EG@O928G0&}Tze)2hgJfheOYYm*>w|is(
zhNj=vZ~4QXJD;`3TIh|0umt8o#8Qbgr*?9~txe5=meI2L63T#{my0IyUp}>PJYifW
z5ZzK1^IvhFzs+wAKv*JBT~t-xFnPb|zIGYlcC-t3*6RJGbjn@jRn?ak?P=c&hddQS
z)8g@Iu6R9TF?KgOiYR9J3hYhlYxCNKI+G{bstUVF>WU1N2KQimdCmwqMD4t$@imfe
zj__3uI=VwEFFrX{$3`e4Wl5BLl}jPI+TqZWlWZ`kq%$_L*>1;7N0((PHcn*?FUyP?
z?bMFf#j0v*)tcjX`n0X{W%b23a(vN(kl=)r<kpmw*5u>_nW*Tlp6uNXgF)(=TFq0c
zLvjk%ltSZ4o3d_nhuYSDwJpsfTH{u`f4kbqcKX&G8%(mSLIE3c`KKZ|#g{dn*uy#C
z9)LJj2EOXJc&rC#>R)7D%Q};Mcx_h!D4(}}tKSX!P3n1pE2SwT5+%xlwV5Av{i=nX
zf_~nwz83q3(TR&HxAdg9#Y+>Tlvs{~ukSqg&(UYA`!@i5U=V=K+SYm!u*OI*l^nFs
zX=_=SJu=4@7UbdY`{iy8U;Ec}|5(5NM^{$TxsHyrfmvNIOFT;MRAg=zow&GJv+d^f
zN=-IE;OBDPjhq|vPWxhNzVFjS9XPdoAkD%j<SSkdw`z@xbbXBT2m8)}v|>g<N5qPd
zq`l08`RSrBubpF-M5j9^X0&^Ah$(roz!)d`3HeJgH?;bbMdj0N`skRq(v;JG8*AY_
zBl-mE{jcHbsE<?B_({0HR**X23CCsd_!~GLTA3(xAZfezKt2ZcI9r6~!0R+vOz-{h
z`-gj?z)CLu7s?ba3N?I1yw6@;bJCq-okJ0R>ERm(*b+=Y{vkc#Nu?AQb$@#5Z4R2s
zkY2spNmV+O5P<2JWdDuB-HZ}p4nJWsXaX;gu*7NZdBr=}*KP(;x{3JbZy?z3kdr8j
z{(<??8zu{%Jy<&}**}kVYeUK@{GXi*8)j`e+1%2fMe~*HW?mf{qVR<+P1lx6%jZ4r
zG;b_%m&=l&X<mU?Tx?k0v)tR0hLM+-4|^>-f3BUf<-_~!{pVJD6ygusKR@**+z#_9
zUupR8uaaG&#iBsBkip|rei7U`8GFp^9aXe&t^7^>*;pOdkf8-?`ozgo>6@unIy&#s
zKvoo!R@uI<sy!{ey?t$6Q*b6gmyL~yZQJ?cFSc#lm`t2ZCbrF)*tTuk6XT2R?EJg6
zRr|2#vAgPapYDgQx_!>QMiy^b`(7xJK9Pg5Ifgw}#EUkT$JQsde_T;h7pswSZdX`o
zBSt(hd087`3w@5%ml>7RcLn^BBO^zV(9mOrW?HmyHMOy3adL2Lc{&>mzfYG}-gIUR
zvQ(uPmV|mCv`7+D_a;#4$`4*Z79Nbok%`0Y9Sy^dOFK>k@$5R(jS-`_ET71?$G^1j
z#hG8oLeZ3y!I<d-7X*fz{RRnpVuk&7cZjCJw#U||kLI=l5y&BEc71&(*k6qNYM-^>
zIr!2KKxMG`e%y50jm)j5zrxdGk|6RbETSD?hO(x>^k(_Cb8uRYT*DnIqva{A%}LW!
z%?zE2exenF<@3*R@AmFSnk+t(IaEI3HZ91nt3`wm?IQ@KIu4F2GPNIFgW1w-^5Tjr
zzliSakOP*e2+4~lXJqpP?xT`+QJ^t(OKNuLq7nQ`U_{~f^uX0Vf+Jt<trnBasR9!U
z2m#1zO7(~e`QI=dEN`-OW6V{6eYYh%cFDQ3$H=t}Jeqqy@n>zdIy!v3*TE2yxCq+3
zmx2?LZ@vO7E!oLXgADFuhj0Py?`ao@9K$>RJRZX#?8>k$SNF?|r3xP5aU*ScE6enB
zWo2B_tEVq_xcR+Q;G}N9c<1B3U&`F5BT65Q(LlpRp!gFOz}T3DZOMUSZxE8V`)k*N
z1pVct^9@hQl-|Lh@LZ@r5e~>B@eQk=Zv)hL&FJlozmJ^-vaz?bkE?{3W4|B?<M;Ng
z>9Wl#rhXOZA@F^c##c(~_f3A^44sA8$3F=Yvq)2`RJ&I76~~@H!P<-0mJstYKMk^W
z-sKgB0TZBoVR*UQdEOeOoXp@X?j7Q1#^VJ=N6~R*JeikR;1#*8w0Kj3_tfuvYGkcg
zlALYL&ie#>9tu!z{eYXNOosb&YI;j2*As}Sbr*4<{#7@5yMvCd+RmfXXPZ>?LQ~cW
z43IOF(h6MlNq0h_;<>zwepxd2Xo4-M9|&lgk_ExSSZyl2d&6@uXGa3mru04xOC7_2
zeTxN<v*3~T-P==Qy!qPZJs9(1Ktia*2`(R&$Nr0y$#Wl;%Z(+Ue$oMKc5xqZWcOna
zr|8p~p|h{a64bv0zv7Ya1K$J02yL^>LP5zdtLmE+qnSt>7%*McATI{_ggapmw$ba4
z)47KnvtHpDgRN8Gd6DmD&VU@!V-#;qkolx`T~Nfvh6ST*^iw;4i!0=K2GrR(yB425
zx1z7lCDO16g5L&2!UyWzO^JT`w>I_7nVv$&xDn16db~&w(;2%dxz5GWS!@?W+l%RL
z3d>o2*5&Tx<n(yQ9<eys)G5#rwEN<TqwT2X%=IMI2o{x&vz(*6`?f=kID2aqDvJs9
zy?d^?lL*rCreZtrIIKptFv)9G*D^cu)#>_q9OdM5w<CD`{Y6Qh1HGoiReb$Doa?Lm
zG`jataXIjwpL+7oMG+(^jjti=&ifhC(t~OR^Q}6qFQxOZm(ltx+>!~h?hpmOUgYmi
z>Vw5{pBc#t(lo#3iIUn=PL(2~eA%106>GSzBJ4=nWSQ33(9U#p+#cGAG;K6Cc${!w
zp!zL!oX6Y<YUxw#;m25(C4RWE%a-r4`~(vD*0v0_21yp0GR<j<m`PrN`2H;RP1>K?
zPhI&O*L7gLVKK|yzjQ0m;&LnK;Ar(MF><sMS9l<$rKL%j^_StP<m~oEof8NkB$Ta+
zsRMWH-vJuB%{zooRgv^__>(?R5;3<n&SL6~oZV)0mTR<ZEHIC7x@e3yO8I}jF(P)3
zs%KhAEWZt7i>18I+O4Ld6FyC$%e^z+pvXz{l~9jfQxHf$)q$Ogb2+$5*WC2&13Btc
zb|lHGdOF1yW+UPX`?*(dB8OU(XM|dJ_Tb4nu{2yl-EaSin=LoZjtvhQzi(aj{?xA2
z*VWyZZK&l1(=@1>ty>FcK=r+|ygG0RWE?!6kGnY(sWxIc3{F3!r2vugB~K?sq}csb
z*>s$l@E7}ykdc*@i7ikw)1dHV851~GR7?paz>g7f2uen=i2HLey<W(MOGFhBVKZ?z
zC!v92b>l+Me;22Ebi^j89XnvHWgModvFZwFxteCyK_{Pfc`AnRn$l{Z&4W~^yrj<i
zbZPvY34cn1HNEZr#G?B$L;cx&ySyawubZFDh8Cw+5q`#Z*!i3lw$k-;m2qr{&7jDD
zbK6IFZpaD3=qD{Q>q~P04i4Zpid?a^vu2|4`97BKQtU=SAMAT@hYg!+U8x>1a5l(k
z(q}(LUBdg{{}lW_cLmPA9Z<LZy;4Q51GEE}VTlg!jl>(({PJO5ffHP+-XyQbV#q3g
zT;LT1k;*N|TQC}{og&qHOz}EtP5mBAdbb~5M<8m&Gg_RNN?QpvQB7oRPq!G@8=J>B
z8VMwEe~f5`<bqC`&}I)gx62j6hAYlk&}-of_yvvrX}3F<#sc8G(-}xizQ1SCVrCOD
zUq-dy@3XwP%i(-%ji`#zVNM?3IFjZoJ^?q(9T*><ZZ#&y7s!!5D0$b)+j^8DOLK2k
z7-7UCIxE%{md8{FY?+A#^>3lqY{!Q7CL**EZwt*40;t%UYAGeSk~8_lQ|*+?I{(Im
zM6<j8!4M8F4qAQV3JAey{wPn}N@0l94S7vRudwth9G4nKMg(MK?nSE-3AS-cDVe?=
zt53AlBLuYV&%`FdQW(8?R3NFF%r_L<z7`jJ?;6m{ocxF$dzJ2i4`hP!a*Md!ld3hx
z9mTND5OHVLP2l2GH0*|~e+7XWRCgEZF{C!wRpt^NUiD?L!_rB*wuSKSVhy|rm1l<j
zt_Yq8(eO8Rxn@nAr31Tp#D_ff?6_=`IA!44)k`$s8?->Iwe%GQCFR)G>y@jLRz)B3
zs#dSsj8h|<W+KsKkyqzO^zY|>R7nSjZdgw`zOOz|qmmt4pks!F_i1;7XUbJ0Cz(oD
zbOu<rp?18FA3R;@mu;nP9mfH2sj9z9H-U^)xJHp}G>VKkK|Bnk6Kha)c7r81k~>!B
zER=eoTxlpY+10w!Bfp91QnDKHMfQA@lk!iHeX7{aKbI{xi%wg_XiI~7R5UWI*rr`y
z^!fLsU!velyQi>BR}f)mg6~7VNUHx5Cl^>S*vrI`Z<0SPWEZ9&R|YV50^yR%glz0C
zj^_?F*>#p(F`47~xliY!W(4pzl_dS-b`I^$h8ZYJC?-nae8$odxYcTT=i}WQ7mjw#
zgHPv--!4z-8`0NNptNVs+m^UC1z+DSj!*7;(4E`?{$HGn|LQS+j9Ru$Q0Mt>bebJj
zeHFCu_jeXCcIaMY8*LR0P}}X-l=Xj{ULfjIKh&6cNM6Gwm|=tRs{v=kVXMiX@6%dx
zLr+l#>wYSMIwgGbo6<<=B7&|ga_(B{^Vooo`bkYEn<DVq+?T&qlNbC4uuCz~U4*y{
zm3UjJN<fRG?zo<_afc{|6<)2>k}vvDj;g377=`jAcR>i8tPZAUT~)gNk>lRbaFvK3
zWD?)<RZLoGdDF0z8AN}K_y{jTOAw-SrP5=#R2cv(7f8OwW`3w8uA)ScY3;|i4g&Bn
zt;p6DqkkRu7s$A_hH5F*9(9gDEryw6JD3JlCu+@#b|iNz43h1)emv02q}K{Te_!Ab
z&?Tt2aT;FZVAcNH_L&zNgbfqWmA+X5_6dyg$}U2b5p3l$Ug|93+_e2rV2q3t^C}m-
zcG`-lQFoTo9-o$UdT*Ta*Z6dbZiLBX&~=cSJOA`%deFpWN=%L9C-J_pi7U<;4-_uq
z!t*!d@wsftc)Y!ITvnFfSI_l{|IBAt5FmO{=RAu&7u`Q%+U(XV5*8_*H)rt@wrIW+
zd7^h1vL4Gy4QJ&zK~WSs=KW22$MJL`p1(Yi)D)0TOc**|33s(~218sBH22pF;+&qu
zhXLtQ2JhZdoDzb|qX!N*IscEI1Wc3^MzKXwsQivaxBI{Lk+*-_QOAxU*rIdL8VUZ{
ziq*gTr%Q;wYk7GzQ2ubU#YL~QWT*WwKiRmFT(L5+Q}ZVC&!;gU=HrAmhKjKFvSG{9
z8E^gB3-G#wt5V-B7^Fj&k)6BEa*vuKO|38LHXQ7STxviM8f;0YF%<tza{Oa{adz%0
zXhFt9(T9OjXv7!kc5$`m&ih=_`~_zlFMHbr>4LaDVe;q?lv3x8skl7JoX=$CQ<GC~
zca8v;@7H*I>Q5$dnY{d+OuLt=6)#YesFT(Z!;@3W#F*j9AdR6S@TTvC6kCu--xuKO
z%(~|<<I;;5rrr4%nR#CR+E6ggQH7wLoV#xB<=tCppD{MZS|x#-j_6GHupx&PZC*t@
zE;^XZ7$trv7yKJ>I@d0!?Ze^g<`QT~8HQx3YR;=bu2MQm^$aQ*E}bi|yq7K?87K)e
zIOR1`-F(r=sugj$^Ap%yeF<I`{AqYIEXlMUwWyidaoY)Vp4p}8(oH{@Q_d3Lwh88%
zoO%4d1&dl(3!1`nCo>iYZEoM{$$&hb1?k`=>>__`<5w)(jrLeMxqql7GaA1fgXZW_
zjvEU2!V#?mf)!f|A`)i0DSej9*3%r)yLVD@COY^44&(BZIhx9)@DVSl!MaX4p8KKq
z`fH{%V$bXHe%>x*f>;tBe-NyB%F~m+M<(j^NpfhL1uyMtySiU9cTqyg`L1$AnkFsq
z6g_0PLKn?PReWp!6$rgew@b@KNcI;?fa7)yDh+sN-vlFNb@|nwtz2Jv3>5G&e8d+0
zMCAq-v8Y+|q9y(P|LB1B`C^m}GWACf5Ja1!6V(gpsp~!%B}ww!q3$(WywZyIjim!W
z92<}wiR&_v5hXwOdws{{;_Mwm=RE(ty!y<CG1uwa(!SLL^D+*xj6*gC4b=E0;0$7s
zZM=8SB?RIqx)Gr#fq)=}qc^LMxcCuqx4uiE?6Qz+@LZ_S$b*JuBnQ*<0AHW;P#>3{
zO7313dtvL9v<v{Kodc)waBo(cYYO%{O%>Ss+|`jZOodR1h8n+I1VWOEFnPHv&PBLo
z|3{e!zMSRyk!UU&*;xx-4>t=TA8X}|NUNAA>}1A@a7(gcyTggq!|Xi6)&Ako=o5S2
zUXOQo-+_dk%60*Z#ar~Lti@-T#T;J`U16m?8+_%l+iLiq_V+N3ZgWJrYDjU*$!)(2
z<)_E6eG}h?MP0}LQpqIG<`=jx|K^w2m{etqeH&7+1yp3E+52@f>Ge&c|1`!taDLo<
z?Ry`q?!;wX3uJcBLmiO8CU-{@6GP)Jkq67jz-m(rI6PuXlqD)Mo#Yn{ChH^3JoTrG
zN{>9^G<QriSF{DVWzsZDz&pkA%I?P@!aK5tC&oK(a^yntCv`W0CUfRku>kZ2n9r(P
zVNJskC(vRmgm0vq83Mq~zJPen*TUaG+-9HenJyK%_2mtJdY=h$hfP<scWX&zw`xfO
zI`3`*zgeJu+wFIF0JNmSr@?z1^!#WOD-Ec(KX`x83boyIK%zPF)iZA<d=wfZC@vOH
zP)YKH<`A>namJ?W$iA~csmYBI6DmDi%%vn=XSWpGJ$OI5;gcSJwdPv?1Bd?m)mrlW
zJ$qNanNc{sn=d;)ub>`RBE8-p5O^f22~?p-NblrO5jkR>OJA>yzx33)aJQXOhx}y%
zAT(BNCoiCnwv#i}>79@jCv4(F$c?~cRDW&gndWeF8Ks&EB9o7GLV`kfQjS*W)b-~v
zA{NyE<yv>K`xZS&V+yB)1>beuI_y<R*cu36)+{@ajN)E)z<WrJg?0Fzk?9qTQ&vJB
zsYDe~%y>WiYqJKXzKy?}t9UZbjUEgSe|1tF`&$~7NYRvxz?25tbyRbAe27dHI>nK=
zhFZv@J7UY@v$A8IIK8!;uFzE#&-hkIK)?Oi_omncEP)ih?^`@WT&zmKMw?T?<#o4U
z0E8)}taVbxW+J)BL2Gb<yF2g&3QC{&DtFLYitG}AH9pZrEhki7?aakmA(2r*f4I2r
zPa!l|sG2O~%tN(9<no^7^EKr+L4nwD>l_xbFzAvr)iZ3VB&Fx9X_9~Bil+GY$LJS=
zu(5Qq>zQjyj)t^d=5&>>cV)U2<M*#?mHO+y=TlWDil*<dD2;T77dp6utWrCE9&UnZ
z0YEgi4+EIz={#a)zT<_XIc+5Hh^vJT%7RHk&6e$$^*}d|6=;^|J>e>0aOktkZ67U0
zzaM+qMdXXE-m{SRi^~!+B(O4a@kAOIV1Yw%G8S3NU<t+%S(Yy8oM(wY1th*V>ieQ{
z@`=%UqY^ok@;kyO+gKB^0@B;C*l44)wZBY-*1Qa;46fTrGvSyB$(NFN(RSU!j=aC&
zs@kBXkRq>@lPtu5@(S57qR9%?Y;QP_pGFKTOPJJ*b$G#`g0o5Lpng(K7L6wc3jJYE
zWA0}1YjK`yIlTiswHaa`F{!pLv7c&OHR$c#KB35I#*r8{HOF<>-pm@HUn(9)gb)Xs
z#151Dy*9Tqou2zX*1y)bliHDNv75X?7#8Q}CX<=cF^M<MW6^V=&H${P*5>lxPJYRL
z-p&K{r<)xG@b8_zZd9^98(9sDS-EqmV61Mjgy?!Lw?{N4=>gDN{UaJDAK70tZ2{p5
zlnkJmk6~^j0Q_QM{ws;j60EQ7!~I=!pN;eDmxlL9lSupqM)~O5%<^qqBZ}TU5>iqk
z^EYF-dmkjr4syM-(x8IJ>>X(~z%px4wL7VW#aO*`n;mmvcfSd%z?`X+%B-wS231>v
z(KrLy%EF1C)|2f<f;+90o#o!9gqvhKOM&YexR=)uMWl8B*SciJ42JaHa5dMrw>*5E
z35$#~9)VjnVylbnQv7s3OXUi`B}S%VL!(I9^<m<f7HU7rn+@)fAH%I1mxT~@UluE$
z%Y#k{tTj=@KoAK6xX+?_f9ftd*xn-pObVu8#&cpfeaX66G^SVio~PG@E>)G_4>bz0
z;Zt4&XL26;b3-Cs&%rH#+VWH+|IFIZt6OJVs}Xt1WQ|SF3I)v=1O12#J3fXC^gMC0
zmpv6?TBJm5Yhi(*-f+Zo2%wfnq>>3@0h^QXZa=F2ow?#!WWk+S@+?L|NjKAE8<$^|
zLkfCH^7vpF7x&a36OtmKKNt5TLcQHU-^bSKx7K|$sy1u`od2T$QkJv0L!HF<R@L79
zg-R%XtW+107!(2O?REI`v7mDVrJGoVI(bJzv<^w5yA*J9naz75-?QS~2E6G<0vF$j
zb*1q<T-ZT-9z`BKQG9$tW;EkddjT#e(Gup{GX<6qhed<B`$f{CI|J=ipnVA6!UVn3
zs>krb>?h=_O48fmctYHQl!rtQL>13-$W5(BbyiJ}MoRrs*1IF91XV7YsfBa{aVl2s
zx57pJzH2CNk3p4**K0Gw{VaQP^R_d?eA^{SWqYY-VH)tjNX6$lns%fag+BmciwTD;
z{eVqUm4Mgr3)3<R>4~grHgkOhHM1NIlmK)DJ;NPEBY=^bL5fof%EdN2GAc*tSba|5
zd%Da_mCezJ-OR#}B5eCDOYKr|h*?#syewp!p-?V6K2h15S)NpCOho4^p0%JDK5iEh
zx5E`Egfd;y$Z2-YWKQw6dL`Uh+<MoUsz4TZk2d}O)-W9BslKl|t5Td+%;k@4m=oj9
zYlU`n&GAKONjm8hQB6&u9vSYwAe|Ec#Y2VlT)f5p{g#gJL6KrV%q<fLq)G&p0$I6=
z&`X-<=Q0}A>8l`BJ0L5q7U<Mg;=S<6=fl)QHao^oqswb>=v+RZic}Zm1hu}UNe`mO
z=LptzGSdq5EKUf?`+YG^;{mRZ>MEv&WAW2kl}mE-NCVt17>JK7Wgxm{we_u2<8t}k
zhE3`2yO=e>c54;}iy6<Ce4RC(-ZM^hbeeFHo2vchSr_8f3%#-5s$A9;axGMyk=_x}
zdS|ei6d}~~N&ogT?;BhrCSANphndIyfE}^fF_+`@yE1q24n*DClN<lWb?2x}Y7ut)
z?VZb1vM0ZfyKFqhAxvz1QJDV_*y3{)UaiV#Un{u%ni=Xm_+gQ89Zq|NT_dT$w6kJ{
zJt)w@hbT2Vn?v9@I(L{F3B7%Uxv@!&t2%6=syV&njY-cEG~cM6L2;KY%?(%i^XB*Y
zkG1=%#tn*bRGBT>mEDa~O){1F{NO2EspIQ_)1BZPC>#dQK?im_j?!XC+>TvujUx`O
zrP>n6kf(ZfC;SY5DVK1NYw{0LRH(j&?q7GP^!vy~O?pd-yJBaRdj5PM2kMk9%57Lq
z8{48QQJxx3-?aAE)fi{#%_G-5f|VtP;dT|evh}ysUl}sn2)6>_4#d`5)A05UZPLX1
z02wc&a<SM$9NUJMnfI=D5vkw81hs?Xh6k=1P!?SAj{}WnuTlgQdSqf_<g$>b>YE*|
z00wzTjq#4xcwee33dNraE!<1rf#}rrLC>Ne*Hz+OPOl;ShcE&{W3yKE(nV^p6KB=`
zRMYM@Oo1fB_Fum@?w?s^yJuO8^%W-k<eq^ClIG$`sXl_EJ_4|dF(d(pS8$PrbNPu^
z(frquSWmv59a~ZGY52D<21LA^wr`W01Za|ICa=FOcYM)@?e(z<I#n9TVqLk~?m6VQ
zNX!VhGl3@i|7sEsaP64IOiB6HFg=5h^oFh3yBV(BRSfcEQcd7+yZ_Bn3O(lCS844Y
z$wN$wb<~#etoew!<#aaL?83L~nr_~Dl=B}45;CxR$v~UZ{i)+WqJ6<XlzmT#olcpR
zlx{yuc)polW%wIR&qhr?R=c}97E@Wfr3^7_GEGI}1e0J1>>^AFHd7i`>XSn}I49ca
z=gHReK08-Pi5@6RFtZAuUM|6SAmr9D@_T~cKyi9ccIdqOV(_+7_q`0!Q~}bIJ)p&&
zW{@X%7USX^sK)VIDH$%xZw&JAFK)XGZ*H5^hV7)=SIL`3%j>^td5j9#)xL!K>sfi&
z?cYH2ZOjQlvHR&piRSs_6lh@}Fy1D3bWyLXRg>DSOkm@f2&XQ#-T~XVg*Xa+Hzzm>
z(gA&X*`GJTi-N~5ukS-Mho#wx7!m1QlKQ3LjFDcuw^Q0VZ0*zsb4BrpU(-i{iRjxZ
z4wO`zbg%Kr_q%?k8tX1bhjnJ%E;{f`!2~Od6BuwtlWYrt-E_9gK&;Y|FbP3`P{}?M
z?*aFreO^3N5_5SLsoPEJFHiDa>%XbLV$8Z*TJ?HoymC7LVZcg7WTsE-x}QtvjkteE
z)emmI$xS`a4?+LBe*!!~@gDlt&DDD1dMDe?TRB)09>_d7wn*<dC0fye!heL7ulcWI
zKU_5sfRM$$_`k_#%DP<S;JYK<Wz9R+Kz}%B9SdMRH8)J83F6o@&<5L!DZk&~<vK8>
z>B%%mKS|5ch9vpQtJwXuLJjOM2Z}vQpox06_V}qN{w1Hf;cu>$RMe=8G?PF*FVnZ<
zlGv3(nC%)xH<bOcDiF+&Rw8cKg%~p9S}k`jR;7p>(B;wJMqlj{ebX1v|JYhFlX+7n
zbOM7NWBYsG`uS@hqD#v^z^BId-Y#pPr(%W@#^g(|t?qMl-|B&F%?8!`c&j(aaz0d{
zGRmQ$2!<3KgmgVe;%z+tR>_L5{q2jsae_f=KcLhRe{PNxD2qyj1QLQAg#pu3`yOas
zD@2DAgAQrzZLUC)(Avl_%KNLYno*aAk#w*|2=AMjyPsokxx--ms^V$9V1_pjI3=1Y
z#8SZ|$E_JsT`3M5xPrvD%0an8oi56j=9s90h3n8&sNajoTxSRe2822S-r=;hF%2DM
ze8e+Kre}(!T_RZ$(U4rL|I%ZzEV<ybD6n8mg>~EFNNeM@N8t6~7*%c>!R!d8lVXBl
zVJWn=l4EWf;4AzSakR{LSO?S*SHc4=Xh6ACdK~c8lySDg_f`pkFa*>HU#k^?Mk*9{
za)hMXOej0CYjHfP@rr~g=bzpZWd>K)z(RWS24$;J{WoGXRRr;k!7#8hjdn`O-U8}5
zo6@7Qu$vlPAwxkd&&~X!a5-rWMK9dA?DB9=jmEx5D3{D5oiT{fXLI@`D=Ux#grhuG
zD^+!nEA~NcC)v7i@}e#|#_(<SKfN^V?Nqw6<=Ko~bt(b*kFZ~V2`EvzX99Vt1LU)0
z8dV5?CtUs2eCO-#s@IayU9^h?96{`>t9O%4YG-k=tCW>)%JiM~S<pu5216HzDrY@I
zVIi274Ef2+Z_U*1@GUdb)XYEx;;N&wAVt`Pt6?)m36=L{+gB#2qtBs_aLxItL#?<%
zLPwra3|bt}mb|NFOT}gLVOP^=p*dtKlY;TQ?B+RXrf7~l^vn|BU&aE|0_e*lA#k|&
zqAG$CnSOnh0_+B4{&Fe%G97!&p{9rYRm;{cpBuaAI$=V$DqOlnG^T}HSFeoomI<K6
zutnc6(M>cnO!i>TNad-?#I#}>v((J!f2=gHwtwVc_EHLQC){JFeq7&ps>W$Ag5{AA
z5%-n%)m`Uk9s6B0JIB6kaJrH3z;!O?qLioid$n=1i4lrqDOhOBjy_{)&~}-)5yfq~
zDifYQW_zyMSN{T4L=Pc#ME$CI0va)*OlfjUkgHml<^y$ie%U+w2tv?6msX5G3P$2|
z#}ZAU`GSWiS?V@OD{M@e!KF@7;%AG)l_V?oK94RRx+$P-W{4>of3`BKkt$%=Cw)rH
zdIYbw;3}9c=gIK<(6$4kYGoOTejN0P^d6Erc!4g3XYGD<S47&V@y@wU1I^{;Q@tOs
zuJbV$*AKkl+{VeBXHsr;S(y#ge+$>qwO^ERSQsi+-!=}GN!)X>w*ji{P1H>wZ{UH6
zX{an&UKRFSLBQ>AVwy2F&Q`XK_T!efPgBi&dArxpzkCbg)<c?_6Vt6~$?FJL+$1Nu
zAEno6m?L-)BqrhzOB(Iw7`nSpT`vgS^7OBnMSo*7Be5Xpl7fxQ#YE&!W8|7v71C(%
zI11-p>}*sMQ3d!ynYcWix<iFs8?LSg;__?O8*g+9R99;zJa*kAUgc{pNRO3EFr9Ji
zp~rpa9SgBeMGKVz@el82`r~0}o;V7)f-_ANEgy|u24IATY7Q;~d#NHJP25yJ*jkc>
z_|npYGkjM4H<CR+;CT6#0g4-M3=V8t+spfw04{SpDIC|C5%0CDG+oK9N?N{+9jX@P
zJZuEs+m2GH%21PRPkEWYkgoRZei3u)Lf8tGj=<#^xi=39mNkq-KJ|U!6^I@kqn44Y
zB$La_D?=r)S7-$ZLymm-p76MIrIL94Z>_VCfl1lDfoX0C$VNv<hS_7hgp^D;*9i$K
zM<`WeT+u~dZ74KV6ArZtsBW<6r(?(MbAiYZ17@2)b~Q;4p=3%U8vA#`vdJ)jM}#uL
zM-Xe2fbq@WXZiyT=6cl>A=MKO()qiafz$U5Uzd^r!`sw6gjbZ`=$i^_!5*E*mpvGd
zg5%DuZ3wI<OTO<g!7y^84S?CO)|aEm5S|*=FdD}VWx@aouYLT>xm4a&5e0xsqmgD*
zYGLt_w3+$h0%!yaVq;0um3t$XEA$yK5Pw|pv!C9zSh@wc?lNT5)5EG6KfIzyluy3k
zUv3{ba}*4FG$(pmR^n<ZEP!kW3WQJZqDlkG?NtIUqUwGXE4bXc@V>Cj0s#eCNQ4~D
zqf!&>E;YJNTW#siz8Z?A8ZLGxgC714l~`@O#>4Wd5=#=oawdMM<77yT(2db7k@4Wp
zE%_OM$dm`us47x}?QgqM7)?HZM=$E)8)}u<x^Y$6HrJ5(2V<fSMCLXhsWZC@-HG}e
zB+IkGfME{s{h!15{W%6dL4<5spr?7HnJmn1DJznX^?@}|T=)Bzj80+7Ve4=Z+8c#z
z{U6(Q6W!*0Z!mIs+I>-P|8J5me;Vs-QgJLa01hjt`<yJGW|Cuf;MFmh@HbqDkUlhN
zO#GmsU3hWy4AG)FJbCP_fx{c<epWyFZf)|EF)Y~>-GZf4WXYs8)21~d#k7r)eGs%T
zoTM@mjdY}?b}Wv#jHbE*Kz`zf{tRkAt>Qc*%XqotdNs+gjp4Eba2n*ly|eRwCt$ys
zh~nX>+L&#zD&EyQzPT7a-T4FSO1;b<&IKtjfrbAlppEY|+K)W=f(08x4LSchxPcZ;
z&=#FTV)*|ywEy4&Mhf@OGx`^f5+SB<?;47n4lG~U<~vN%(2=v3Z=f<|s<ee`h-%TY
zwYzuFoO!dh!;i3q!^fLvZ}9);5Oi{<jq6tlnd4Z#MGm5u$yY0vFXC4zI<aO>VpmLE
zI=62U*W>|>NHHU*R5SE{tCw-<<`9FC;fk<jlhS3H@cy3_JpKHG;Vtx~i(=e~v#=l+
z>J1!6_8;hau))x%lmF$sfp7&pD(kD96H)c$S<Rp@m&`Qxjkvq^yeBs>xIVbZT_~A3
zq=}nfv}2Lwr=d1$v7i?b+##9FLkXQFg^h;+o~eoUixID_yyG_rQYZ@APz*{54#pA0
zKa>pR#RSC`{ME;>CYUt;d;KKSEM)0R4s_P8I^L$4pB(rX9NTKK(#8fN{R*CJBK6fj
zg$x42U%7H@19J?CBoA$x)b)Wp621#55p_mM7E4!7(moooafA6ECF-Zt^1qol{;FtA
zId&y37DAx8Lw|yrU@Kx3nm!Z4dtT`gHi}vb$}j&kSBP&eGZ2SUb=dNsnEsur&WEKT
z)j_QnLZ)5KOXZBcM8xs9Gw{W^CwZ=9$>@IzmDQpcEd(2W&^0pw4EE)QCw7R^@bLL;
z`;jKBD-xYQQ2yd6a!O3cQ1R6Y?8$v6opn%hlyAYLdyZByBqP$wt`$?@3G?GqjI-WI
zFr(&N%W-LTiVx^1Ho9CEPW9Z5AOL?Gi|-iXg08;`9bHFOX<@)jh53F(ufGo7X8;-H
z0l)YvMmC@|H(*Hq)5~Lc+wpVu7B-~+C=Jcxyn+Svys26)m~PyI-+W15v=_={`XO5l
zHTRU5<6Q%(;GtU{_)M$_Z@txr^r;MoqLKj!*lxsJ-o*}P>e`FX{w*=TWA)e>mkquq
zR>aObeoL>tvlW0b{B)@!*Q#MRNDVE1iwYTY0jEF7nOpwz-CzpVB)}t%DHnxnklM&j
z{5nE-m_I0{MuyF@X{w^ZXId;$ZzxX3PofMm&=br2L2ZV2EG&HUL-^jmzMYczD$O`Z
z?tN3awcrjqUCwXxK5<+SI?>|?PR!D$t||ghxxLKVr-Z6Dw@24}CgX^Pq}kM_7!5qg
z%Z*9SS}A#;Gxrf6Yzc??{fJaAfRlxa)hoqd(HC=<gf=AkIIcoG=V=;RbmAv%u6WD>
z7O1`LmWceuZ0Io0(jzpSr>;rS>W?x`vcp>fVVJl1r4thU;2&FV>(dCwX&XK8S-%w<
z9R&H4wYnRLSj%_btvh@R$#$Oo0`rfNf}|CtyFYe$!fDRQ{TCn#B2oP}ys`rt2n8pY
zPr*hy=n`c2!FY)-Q6avwsaI|ld#8}B@=2^@?xy>AgA!eO(n7ie<cU_hF>tiyp6B?7
zzEjdImQZsbH{m6+$_l~!C_p?uVA-?$aetr2!i(>2oJ8*9svS$rL?LjaYe}8@!`*TQ
zq#ig1wLj@;6j;-piPNt2DLzE!!*!-C3&;{_h7O&)YC#HO4{G<&N_9zob7B%}yt1NC
zn%`Mm`%Yl-g?yhDxiV;rXh^>0f5my?!*A)t)TMO`3`(N+D9}1!YxNnLK)>@{8hpI5
zD`Qq^)g>Q(N6@}yx=%cj9sNvX@vp)=nn6ncK;7JEiZgd^P2j%)6VR%zgBZHuTvAw6
z>wG|E*}P>alW<G|H7&0;9<g5Vr^gDmfE3Fg=7@aKIbuF43dwp@=y(kTDgBZ%Pqv%J
zmL}QvQPYNSvg8Q6{wQM*S<!A(DC;E9*&QFnW#(IAz$GzO`@LGoLA)<oS})@EqEeuq
zHqi%hX#I^UuM%N+Zw)@%fb;zEo^NS^-IC6L_QtTum|kb8?t1BO3u?WggTD=H*Hg!K
zOq|+1q2IrV<8&Uq3Na{oYS&^LX~?5OYPM`F;iC8YydFNjdeS0*-;cb97uH$j_0M=e
zEk7HGdfHtb3r<(Z;ab(6S!=K{ip6oEApOMW&w1ZM1%-^u(Gpd0aaZxmzoAH~OoFkz
z2dEC;Udcn&{+5uSRz>tK8B}_gAdu^xWy(?U(@8_IgZ{Dg_YfH_<f1UEcKW6meAmTI
zi9p`$NeZtJm3{28py!+Q{MaURhvQy(M+qsPF&td}a#6u9WmM*ELcr=sIzVHt(v>i|
zcEU*ZONGosHYDv&Sy(wA_rub(!|ZW;oHgD9RV~OgubHzEy>?~?K2bePVezxt2%>;P
z-?ra7<4n?x&FYaE?cEGI)-)$tD$5+muBu}U?sPHFKe+hV5?aCTUXV`J=9AHC=o-*Q
zXUuT@<CqAmX`>-0>M!)m+!o+T(oHaeB!5lJUF^EcXIqSUNsvI7$4;|X#{w!e5pUJ_
zak1J+C*mxrK*L>l)}}XDmB5!T;U_ev;jCB9B2`6t)Wa`7=7pam>YPepUHy>E1}-i|
zx=cTq2|P}#Ey5pcy4D8*2oic4dykynV%zxoUkQ#ZS%}$Wd?mL`_nI;G*Tm<wzvA`|
zVZ|gWr+_}WUr`!wOp2bL2X}3(Q67=0G29#e8iZZ`e$1ZFrSZ8}FJ@~Cmgl)-;8=Cs
zPo7;udw#i)U|?W~S|Z{CHX9(0_uJ-`M!Gnmdta5omY5^|_1DPcP?V5J?X0>EF^KJp
z_vh{DE5H7`9RZOzA<X<ghmb2*Gk77~W+-6lgX@$0c2!%CSrh<fAAni)*&m*4sDGpH
zTMHjXS^MvkoIn2)hhG$e-qd0EGWwK)oSdA#C|OmOPD1=21}Fa^3&>ku0+?DJ`Ocwh
zS7jB5f%YHF1(sTSKSuTtezZh?ey859@nDV}*wx8We3^(^>c;D^k{15Qf0gLJdBw#%
zK4AOfnWngIHTLC=dT)#w{3rZBSpE+*HU0+;Htp>`-fzW8*#W`aU5e&a;9&m+kS-Mo

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/lato-bold-italic.woff b/assets/documentation/1.27.0-rc1/css/fonts/lato-bold-italic.woff
new file mode 100644
index 0000000000000000000000000000000000000000..88ad05b9ff413055b4d4e89dd3eec1c193fa20c6
GIT binary patch
literal 323344
zcmb@O1ymf%w)b&@Ltv2L5G1$<cMEQVy9ald1ZQx_V8Pv;put^(OK^90{m402-qr8i
z`yOl8o`3zSs#!fVy?R&G?s1hD7l(j^fPjEGMu)(7c}4I&_^tjT|Nc)xL0%aG0`e0C
zWNQ}$v=eeFTAjXxGEf)-vRxDc0*xC2g4(oC(-<VL%*X-(`Qy{ec>Q0+Qeb<*$lAc}
zg{?q9V6a0#0CI>eC@GCxoJb%b*Kl9@SiO`j-t}*`rgmo5FDw880=57G0x4kw>*tA?
zf#b{A9lDo3ul`if&8*x_Ul<z%6jdVx^m1EV2R*mBiGeW$4BE*{AC6z;l_Y0?`3r=A
zL8pGHzx`EE8!*Yut)1Lnm<$92&I@DY?K<uivovwAfq<d1gMhG9eK~(9xeU4YR<=ej
zV`KXuAP6~M`U$>?K{&BCaI=GesdzaQ1j(<05)Zj+V_<Fa!d~jH%wCRZ)|5W}Y-j7}
z1OZbY0s+Ck0Rdrtyc2eVZs%a~GWO`#xn{kT23y3B+-@n&sR&-mQ;l_M+!XJ!U+vk`
z0i&q>2=GkOj9(|gBKA=iC@2cSDhgtuV->DJ_<=~MffpGp<mc)^!djZb`8n@COyqpb
zTZA;fzDxU#U+Xc-b-m!(>Unux5y#<qSUYp?`+VFq{sA`tz0xqH@3rFhdt?Gqo7A(t
z649}PT@7Wk5SP$6-Q;&3Vbr?hIanA3h8BEbE2qb!WMWRGW^e{rd3efZ!&qqh&n`cn
z4~w3E-Zy-xHVuKiYbC$*rP_ZU*)X=|f8JT9j+|%DdMfQ5%PMn|C;=>kzIP0n?SXi@
z^~9vd<eUKBT_ns(;W!iZOSE@*!d@DV4_io&=80YfTW%lge8SBW)g1|zYPW72j+58d
za4aH=4J{(Sew!q4&6_5WUoO&HB#}X<Afx*xz#A2Q@qFsuJ1)R~e1H{HK2hswR6m;t
zZ*<UOEj~4w`n;XAg;$q^<w$%^>gawzzvbZQo^24JYx`x9`o3pup4HKPeK(>Uw~k$7
z?(H?>Ze3*kCB(DZqR%$pyzlyPMALPCtN7ye%zgZ#>q^UjseiKd=JVP8{bK8<=eou8
z<%hwot9zQ`VyjcUbo|M)&!(Hh16oHmNlW9;KSEXWRQa^NkFY-3I%fcnmVG>K+NTdS
zTNTb@;+ybt_4bK1pEDw+=BFuDdFnLWzaCllv@LKf){fR`Ol?^W_x|)AD^p5u&)}#$
z46fCi_DOQly(cG3Z}b)FExE_3xhYX*?U{_^d-->mKR;^c%X6n5I+Z$BkF4`B9<@}d
znb?}O`aD+MyW(={|2Pym3%(}eH@%6+h)cgQ->8VuqjZu@Osud7H#vYdqLcUG;CB{2
z$^pk&E8C>9oD{AY|D5#9<4*Tk-z_n-N#ZxXOT<GlllfZ7e)_p9LEm<5X<L(m|70O1
z>3DSEb`8lZ;F;@aivL=>7)Rbb-Mi9Q)qQPg4$Sy?akik=*m8E4Qs#(1ddTHEyg;4-
z@!Z0_Ge!S!>;p`CFZtZ}CQ@qHY^&5A95pPRTHG9eV|uk_O*{X+&T6wShyJ+rOlTX3
zQOvz_@c7Vim--dU|AXj&G8tmlCaHb)5c>OmFZ(E7(j)M@tfU3<qXg11?I&uYSV(4_
zBkc0QVncqq=uJb?-uL<#%?P&bhU!p*8}60bsv)jiX~xZ1Wid2^WR3mn7~l1&!{Y_S
zW#U3H!tvS@F~Up~yIv>ZR7$lFRt9eOpIK~hyYt?K426v(r1$dD$ai0SZux<B*9qZ<
z4A-&F^a`$10T-^*0EQQm+yE;)2nHA0$bf(sVch^qCg1}TUYcLwIDl1l0sEXSD*dyW
zJHO5XCaZsM=n274!1gMv8;0p=@?6UK>nOb-H8=iX$E~v)b~ha&P!ihyW>+F18M$e`
zUH3sOn7K*JW{60UpjvI-=<4(#$Ehm?hl?2}K!8&ABK*U)5nl6F)~haKP$YALv6u`;
z`snI;gBO3)=yn(_vns#s`nk;rBj)?AFOCt2idf3;#JjZtTZxurJX?(?-729z%v0LZ
z0G)6}mQGygsDX(d{xuOJJp<OOI8r0u$~jKK`tYcJhjl?bHn{|<a8?ow(+;E)vLU~@
zlgI@lFC107BhQN0u`Av;5d1L$Z`3;9++a<2a5Hz^;PsBKBB`V4b->M1-{H5i@P1q{
zb{neKC}H-YzkAb)5rtoO(qP;d4Y@9c$8?E_mfX|NHsRtvRRitP!7z*Bsn2*22inDn
zykCVN2oSNujcilogzH^}NeNJnhRR<>P6>33M%-S7$`Rr=ZWHSZpsR<$u1B7Wh6eH4
z()c547!(B*+o6<+08|DM9Rql6BLk>I;4l+OvG)XZ3gA<_xE;+DEsn_EBsQJaH&MU8
zM%Nkk?o!)o@oG-5pWqd=ViV};g+DvRG0APvW(eh@y6egtSg+hhAv9vdh3m}=y*8Za
z=BvarR6h{oPeahiYBDD!+c3bO9TXKISfQ*}YoX*G5M~DIVjTAa40F9i-u6cXahz3U
zmJYq=r9ndR-V6@P<RxODMJC_a4?;L=Hi(sBmx*V@&FcfhF_xbW?uGE5DRp7Fa~jf&
zRH)Zb-q(pg&@E!{7=M_=KPxSWGEuxZtfIR!xOH-}<Rq&T-|nwU6g$E2q8kiH(XXdt
zRqIDHsv8hIxE`v!Y)!djJDnCtaaXes&cuK4fcF=}>{J-*VA5v0CtmD^UyCn56I*}2
zT3qNGn&?)p3Yk;0uSHiYUZJ_g5Lk&7kfv2@>@dIWk<zfSU|f@p3i&BRC<d)eWnWwv
zY;OC8`psADK5cRO*C-ls7SlP&ivHoaBubm2MX~pdJ$)wO2Syug;$@~A`jhZ1>0{pE
z7Az<^n8l+>9LygU22-$9Pu`f-b7g;F^-IB6o3hbe{K8dZikd2u+D$mLip`y;zV|_7
zcm0mvFm_my^so&1&^XzkV#t62CrO&av62NRkR64&YP+uCZ9l<Q9MNUwkSV=L$)?Hl
z8OuJdA)!c#QHV2gWhCh|bJrW}s-VCu`$Kk7$keCaeK)E%O<e_+8lkVm<)$UlsO0S#
zjZh9v$};N~tf<A*_)nyH)JnE2RLj1l6_;*XST-cH=QRwmTk!wTT`=1tVXe0yP_ym;
z9<w-Oz?Cg%Xz`V$^nwYqbU7V>1vhW@eZjzD(af2K^fNm;P=nu@79IDP(O1r5LG%5F
z0P07<a7(tm4S-M?2BD%JZfFp~UZ-^%Vi*qzYBI+DeSg8$IHP9YU={^0OlgkRLxdzh
za%m<?O`yvU-K`MRlUL?y$6dYLA~;#gfX36)BLYuBd7|sJS$v{E{vSAZLcX{VQSE|m
z1aR&8xKJVnxX8g6CotgwicHD&n4FQTobl_Nk@5rD%xUW|Tl^T5?Z&$p$}8{m!Ch>T
z@|~<+M;aP3*X!7<Br(0C?J{m@p6-yk0UEsN!`pg>vbtNRwBs~eZQ5>tE&Icn`mKF!
zPyP&Y?gH(9w8}4%ttf+ib(;qqOB6@6Ih}T5LCA6}Ig;FD9<PU=m~h3VeY@fa^6gVT
z7^lN;0hpz?M4SDHwobf=B+BIL!1$HX=MC{?LAlMQc%y1rBWN3&A;2u%E(_gOIR4Fb
zy^Q$F6AG(O5hnmEzu^;hFK8`XMm&o`TF_-=GR5LpgnsLV81bjh@$5o|JLIU*4lc>S
z^Jst5QsX+2Em6zGLFg(@Qv{9gSW7`Bf@T<w5U3rboX8R@)CA<`$Nr{**A`w7$({Z`
zpfo!=f4rF&)G~)Z%!KBJs*kP2bP8hl0caF*-GMA=s>Hbn5;}=g*>S_-PGk9dBN8Bt
zN{{T7?_JLyJe}CQ*>!ku;__)EXg#HJpSxkT3MQ<;bZNJlh4x&<nMH$NAtCVVw1bK4
zVCF=nT6vq|hsB9vwnC@<iA^#Xx&D>LxOFoOc3=El4?$lbFEvEd5HofMfP_ID2kYGa
zy;}xMvjQUji9eKy0xCcOL2dPob})^C(12AO1hl9imZ%6apclq8B#>JHXHUr6975&w
z1j>(BHUT|9U<w%WzOG{5gblGTBG$DZ+QBa%xC*5VF|!A{)#D%eo7xHRezN5VhR=kp
z2?&O0W#yye%j5WgJud?92E#2(wS%ma!Lw45r%P}zEPx9EZGgUx97M{571WN&^jf^#
zT=Ek$6LwF#TOxIsY@9xeOyI{8HeTqPFCV#wAiM?w<df3ic?SY;5>4B!+z@nw)bvrC
z;mSL`)FF^oQPg2<JG3fr<J*+n@Z;MZ+~Ai2qgFB1QPLfTYfoTHf*B2<tpdvRF}+Zh
z+ps^fQ*_py5PG2rv@ILpKfL-GI)yrm(4_zV;PdwiG@s9pc7Oex{nzcF<T~C-ex9&{
z8~N?)VFx)*Lddd0W-N@Y4TYo~WYzasdzWcbh+n-O4pu){*zObNiB%jD2-23-{ZDVU
z2)b}a$Xy;w0lKp+*bY$E?p)w!p*TZ8x|c*wikQ{@=l8oEW!%69=Do0yIn;Zh2D-@H
zqh6(JqhY~dY%O@3=();>6>)Q9*-taQOUQL?dMm2C1&;B_*wW5*O6=tm_p=4m02K&$
zK${3Gb=NL!AL<9nNzC`>1F0U%1yi!6u1SK|d<c|b+)k2eI|dI<V~4n#NaB(P0b$`Q
zY^viT-*Ei<Ygz7+e(r=PGp{M<!IDW$5TuUz*yHfcA(Yw0H)!YZ>`6r}gNvQAdPlQg
ztgcnq_Bn6W{*r)jf?V4hUu{{ubuKBbg_ZC7w877$ZhKS3bdB&e-J-+~sI2eu(vM%)
z%J7RY>d76?MJ!e0SL1h2{R~^Wn>vo!-?5q*V<gPi<Nna<)I1&D!<;STo2V#}q`&jl
z43FFKprg_>C_UJWv-j6G<d}8wBseM3G;iK2|51xow<~=4hv^W54`I`d^TEnYrN3S;
zst+O0ZxzMSNabH9r}X#sJO3wspZ09qM{gertoi7}kZMW!=!5ENQap8>5ODv9{(>HT
z;2wSC>X%11Q5~MeT73h3o<VLa0@@7?3wMm={K+~$%UKh9)}Pzy)YD5#MpdWHX!onZ
zmvaMmRwmxxs`#}u(o0*1FT_<GTc*<v(C-m2@f=c<iiVsx??Z@dQPc6jflVH0)%~XF
zCu&y+2mM{C;V$5@GLQwvyJ}Ia1?p>%TOp`vm8c<@eb%2+KJ!Dqo8XZV-*gE4Tzk#R
zIsGcBIV`3=nT%gQ6KtB_Zx_*Mhf^ZtZ=t0I6TYrr!YZML@MuxirPR?zO{PDusT<5}
zYsM`L8?orQNl=+r2|ltZ75A5V<X#-{K9HUEwCLN4&NSo+H{Mk8nXFdet|jnJ6WpSj
zn-1JH0N$yAmw>shz+D}nhdlTOTxr;FkwH_*BYiM3?q75fZ!wh3LYs$n5$N-S7_QBT
z37sf7lL<Mf^OYNvcn38u3IY>cPY0*l>z+=S#8)pDelultxS~TjGn~2+xuunHL_|qt
zj5)r>pDWB<jll$qB9TX=64%k$o_%9{8#_b}7g$^#AOh#uY&nO?50Tvcid0;CY(8(V
z@dSe8H{R6L!_k)sg<1Ys`=4^%^(@w&)(g!y*!qP0p^LyL=&<51;pGF=@1bSe{CHf^
zMGg&Lp_F{lAD4`I<6(sthBV(3rT&S$6v~}1_?y<ELih{6m-z!+n;<TXzricyK!e|J
z$ZuZjBZmjtGZBT5{_|t~PZ}d-n=_7Icp*;n{U0UeJLw@Pn`oL^tz4JlNgMEdsZtZr
zq7F2w3$TA4H*1pOnKLQ3=fyC>WgvUTY`t7@I(m*>UK&8gGR<Iu4lF)i-@Bc>k)AAg
zU8d3n#@bUZKH(vm2QWH_(W)udxC+(#bpWu+GVEXjX{oh^NaJS;juYx*JHS|DpNb2#
z#WrcCYL{ROySU1Nmd7fCms^!;ufuV_M@MEt(wg8r+WmA);SzHKr-O)oNS9$jZ&;kd
zgs-{#J-mW%0gQg_O7n)J<y`)e=CPnfiI--~-aGg>xrS)L{PZ?FNU33LCC(DX=N3VY
zXb{Zfu$iXaP^#-V_qDS3F@*0(f_b>G6n?Y!pq$9Sm)(zV65>jJaaI7u<e4qNTS@Qg
z1OL?r|2e8llk~|1z8_Log0yqcrN#p1823qO2L^c)NSA{95`|DYg;4Yjof0ysVn%ma
zJUd}MN`U#X?d#lpTWR_95Aw_LX)W}8-dY}asOGi;np#4~kBHx|?{_S@XlrOYGG?+R
zlSBa@UW@NyP!^#5cKhrSLP`?cl+18=8`9cexMpCEVx2)><A3E)wF43L>DylFjk?(m
zSt|w9a)=E<lL#8o^+thMcHIK$UxK(cOQLno=ovm#e|;w8&wskA{AMCII6>>?kq8cP
zxSjTN;r>*cGR(R@4_Z0tV5CChKUw$r(CKf}%m<32Q<KQ@KAdiXM5J;kM2vFgrG1C*
ziD*drq|K0FE3$4#*qyJ{X%fQf43e~I;s>t_q8Y<nH-D=1&l%(%vO6UZ<9hU62Bi^r
z+8@xX;otR_qd>2GaHtpm45Y3=gnfgomeafPMHxlR;g)!EHtwlO06B>2vu9``1(h;8
zjuJDDIMep4Et$;}!b<g#$*HC<qm1jfQnzGaHlb(Dg?!$8&(MrN+bp%Ks24?R#4OC$
zRm&T=Z%n!@lOuli4i1xKx3ZI373xG$nq;FA^qV&v67(WhgQa8e8+9IeDXXU%4WU+Z
zSg8ZOBO;L(qFS4i=D{fhhw+1j^GN+Ud@4t8X<T1}c|r$LMK|TL9H<l<;tCc%{MQ((
zTGYcZzT;;FvT7S7=d0iqCW6n|b}}B}*FvoI#6+LAPDpA##h)<M1pSJTggjq9aY2b4
znAA)pr$Cz@gdPy5>{otEOs{-m5mfeJikzXQxIbH@3f9VHXi_PZVirvQ1q-=mi4dT5
zVsIk%u5hM&inBvhT4781T>Y0gWw5ZdL6ay7sf~dOA88d4ohKWKt=I9qVZKalz>)Yy
z=rap-u<uGx4-J2r-xp<BC}ea<MRXMAv!4Q-ri2ZhD!<2pDDK05jstD{Uc$hJ53X}s
zn=%vDc0A^ho>aX}Byw^be~knmc*=Mc8FDPuC1)z4%M3_$I)xj90-aEhcHdx+v(x=e
z1E#JqnXhcMK8N|p6HD)(;yMAx`?{Njm(>~RRcm#)!Bs*x9R47AeRi(__L&Zx3?PV+
z%jQ>HZw_9!jC={|Zr93zT^EE=t--`A#}z0(0f!FXKf)gb=v3fewdu~nx3>9kLcp)0
z69kdlVMVsvb3#(BV&$}b<b*a`CCKS;uZQ>;jf!W7!9t3}@EMjtgkwXnOxtF_->bq8
z1+fh^a0P;DrIHc{3tHFsOc22>6U%EQm?S_jMq1WHfpnP_*a57Eo5@5h5*kR@J=5io
z=&Ku!L5CgFhhps#CM-a@T!G`#DxZGuV1+EZLP?!~G(598GtWa>IeDnQ=Td@an2EYT
zlHbGOho8yJ_WA3^+3c@S8)<<iVTMb(v`o)ZB3UAEvc<szjOZL=p%T*cv-9{^Yqz01
z>xOJnCtbHusV2*pvr8kapw!iFOLHVyR;OtwX%NL*jL+jo&_#x+g$7OS0U7&2`DCf%
zWa-3YDI2#qRqYO$+HGQS^B@pgfhuK8LKM?W0A+cg%}jNbV(>H?EgYN$d)pAW;F+AX
z5##9^>**Tf$=ClKzW+N>-q9L|>CKy4*Xoauw>Nny{$<~HZqOU~x;=iX8zJp`XfAXT
zrmUi>I>NuVhyPjcFJBM+-t`2f`Wx#ye$pwx)GH7Vht=qC--f}o*&ol=um?Y}G-(c-
z_2<OU36W`i8eXJfkc%nqDDra$G7po;VX>F5QIK<@0U7H95^K1L3+#{$aWzkY@8#L2
zCtx8?4p?_a=y5djY1?jd?S#klFsVI3n=hi+Oj%k-`%<-RHldhp6;T$?o1np3j5zp$
z-%YO+S3XN*zU^^()rYF0t~{gqHj&o7{`%d*{piB|U~Lx8Aol^8hX7L?uW4*=GMkYs
zzp1QhC1pA*>!GFezIq&0BGAnAl2eg)v~e=G!#1PCR^Qvl)EiaNom<JB`^CQ)#$vbV
zHG9@QHh}E&9#ec%1CrU&Ct7&}`kB>6gw+sY6MFohnX@C!vFVgcV2UG@4Hr!QL3d*h
z`mLFU7QE%X>$J=JB!Re+v{0xP%DekoqC`48Mw`Og(fYoDNh1@2c~6#-0p}xyscU&@
zV;a{2hhUeZAByKwMv4hZd>uo=LnRojmi<F}%+=yU7U)j|8#J&bCioiW=3!}fu?Qk2
zK?a-}EW*!HUZ|FZ74e8_h!sdpT?_|G2UzX_Ln)L;kG83E0X&Lx^nfsMb7O>z*~@I9
zA}ZB@BRj?93sSg4q@o;tULTbB8EdTGGea;%Rq~h%>%7fT)%-(NiT)&T%~X8Itcy*Y
zw<n}m5!87?eIZ8bZ-PipY_@?V&fn7~fp^P7-h?+d+~*^%T1!ZpZEJE-8eYcI7&T@V
zCO$ORy|Z-U`qBJ2B28b#x-Ma$0581gyKlls!3^#tclO?xK}}q^ixPfB3`dN}@h-Uu
z^SHZsW1D0X-iQ0WTUhbNK1nmYT`clB-2Pt4mXn7kukGCMdd+8UFR7bHn!|hTGDjE4
zq*(&?8wLM_Y8uYsjvDy|Lk65-PFju0O*(7q8o=oIvNr+gAQx+tWxT_%Qkh0~5?4x6
zCmxR|A;0plS<z((5w?9nF#?eTxdrI`Wyk7WDC0>)W1el7{~9cTTO&zuw`d|vT(_ek
zA}{Pj7r`l8uh~ug)iZJ;%HXWp^Br*O+U-(`x#Nc>^7|SLR%GjLLlKG7oXogHqn)8j
zq+W?``1*G7PW@Bn$O<?KbrW1tQ~Vy#ZIC^a#sQlQhPUM?uVG#y(JAi`<Rk46!A!`m
zVs+QWj`&H1B*+G3!N5rY`MqiAZjZD+#)K@IpraeQrl7Rjt9rGG&NVJ&d~>Av0jHIM
zQaOpp)C^Xq&qpWwpv%q5Zx+y;7PRj}?BP1maS=OL5O5K)_1WIG;o>5#>+@EuQHrrK
zf!m*>%E#GWD~pM!E)Q8Ob<ixG2G0u68ERzCKC3{p&gsz}lmo725brGmA8R|FG!1-9
zD_T`&|7*OL`Iq5E!5uB?2I=_5QI;lAFJ4RhNQd3&ttXHD!LK*1g}}1qnu_(nNbTY}
zAA5l1D$C?R$p1iSaMqvZKnQS^f#|6a$XC!oq+)<pQ~?kC9XsSlFT69>E37D2nN_Ay
zAqWIzSLFYa2bfq_2#EJEf!=-{{6Yrl85QyhvsBdo8W+U~`{LxZB8_)y?5>tv*a>;m
zlkjOrgI?zZzcAR{Rlf_IKQW@Ra0_K|G_}7N<xw63js+mN(UXX3m}Fuv_G3hU&7JZ5
zu(75{jRE2{N$VY}57nED2sm>iB0xddyX53qT^SMbx>y9A{s2W|VJ((Sq$E4m#-uPC
z>}Ui&nMY)1^KH1j^~F5-9ljQf^V4G0XUpna{AzdJg|D?wRMpH6A33f=6Ez#qjbWh8
zY9y}Nk2@Zpk|a3uugrcrP@Qrb@<!rDk^6w|yVu>}78r@H!^*um7ywby-RnxHoGQGi
zfGCmfb%j$-CEiG^DDv)g$$ym4i~V$wcKMcx{pSn2NDI4sts^ftG5__hb<R^xIo?Rj
zsDC5#jP2ozg>ZUOc_Y)8Z-PB-8L{m*v9;Zy)O_d<yjd-EZgnR-?5W6+^WzfV20iRr
zSucrj-Q$h;#8mg%x#Vk_U2hNlykLcY*d3BfxkWY`*&5<X;fi4mp5b=%E2FlaeoS&s
z6-a&LHd`K@>+IamP33Eto;w}VEY6I24pyJJPpEv_cqW;4WeS5HdL%bxiEE%@xo)x?
z_U?V5b&jJVU8xHnpj>AX2Nn{!ZS-M}b0YCAmQfm}6E$c5WI*qzIlM%jUOUkQrY5z-
zMFNL1X093abc)-OQ74Gr&l_7FWT&M}j++QsRQq_n%#oMjM%dCxVzj1XG`wMv^K|O#
z^(Sw7D|_sHHP<<(IV0I4jUv|7|15h-)wemPxgwn-jZ)YDLGoC3r`E2GXxf`~cDjBG
z=h5m-wO$)hbubHE(4ajk0p5&g1|F9HT(98lL&#C>yGSEByD)+|*U%*h)<Q%G{to7E
zf6coU@>Q}{Gi8dv8#06|XYxNC(pN9-i`pLg=A;_emF>&zXme9s=g)aQXO|XH?!1*M
zn#pX2)@DnbFY;^z??y$wfLr!tpE8wF&A(p4?PlWm*u-q50)z+F<fy7?h|3pUcB2+$
z`;VLzv_RXBBUwJ0d)#>1*4}y2FGM|+l?La6t4mUxj|6V)I+wk1#TFjq1@5CpJVQpq
z4XnvGn5}1S^;%{U6b#AkWJJ?LOB~5&k|OxcvPb8JO!@CpBKR@K%wC!{G{_chL>d=8
zoSIN}UGm3mBXWLv``KJ`H7@2lHDT_!Y>yqvW&BK)n9`D+x))Dh)US*jxP}EEW6~`1
zaxcL;H6s;#YW;C~^{m|cHRK9&%!iE7R^%c*<Oy@km+VeHN6JSA{Gi?>&Amj`7bxmL
z8lx@AwiR28ma+Y(834N7=tig2nE}Twla^j4DuHFA?(k=`?7}&7ix+fX2i_kvvc80~
zn^d*?7we_^@I|Hk49syyb)<{7B8|%)POX<aKKo;j)7kf>64zQ$M|DKMH3T`eqU`$M
zk3Vwc+*?at|BU|gh?j<mF4=<#hH80fgk!3x!0T9naq_gX+Jpz#2qNS1_<j&h^;&mH
zebo2l4&Cuk-B$5(y=pz>*>XVU&pID`u5|&t+XG+s4UZkQ`{aF-yBy=YoW<2+hQhgo
z=d{oBGwQ|tdrh3QqVQ8eyrpy9=_tqTwS3l;j?~7e@tREv*6<!_`)M=R(ONslIv3Xr
zcb+(p-@~4k#C(slT3yGMoBmI5SDZ)GaaONu=!{9_-%oCP`1Knus)(tL1foZYG6J4j
z1DaYpQnl*OwU3$;dFra~%3k$E=r4qHmpsrU$v+=wJ-d!QH|;#@Ts$+}`QkjbhCMBd
z{f5P?R#S{MhCuG>%xL!zIR8hMu*-M=YZLf$#ibtlD4<EdiH_s&Q)&g0ODEAR(*4T6
z*%nCgSK&m%Awd}@g=P?@G;XJ;Xfx>xB2dTy^My~TkbcjTsz;nz;Z_l1m%O5aA~WW{
z|LS%1{`SE3Y;Jj@y0zcTH*WNaGW}8ZSA#td{{j}V&6^`kq8s={DP`W0cSO@zXqKR0
zYowWr-qQ-4lZs8ZSys1M8eSRC>#9GuvUhhTuNin3#QBnE=j|WIaNC{Sao#M}yV8vi
zhB?0PZTPxAPj7#?Rez;7me^Hm+xg3gAJ*>~);I`mIUc<e1ZIl0o<34EUDl17ACGiD
z))f_PktQvOFc4Kiqus(v6s#PujkI)W=#HE@s8T;DbLfsBg1A$}a!D-bS4qEbHk^1G
zC2&eNsfJWTH8;{d>_r}|2eBO4JvJ4Wor7p}6?1*fdPb{M@Mm5kz>#9_yKn}Fpuo!K
zk=gqW)`1_s!rM`-hz}g()%^IS_qYQ(GY{H|_ViRuM8)5qaY*F`KCgX|0laf4;Osr+
z<rzlW`w&CfioSa$8$+rE3Olooc^BAcNR+UlZxE9nGFVmD7as*8;E$*E4CUpL*;p4>
zZ2-<1Ybj>ry=wB%#OeUdiE+9`#Py2p!LG*2hZxR@)SJLuvvvK@WnguRj>04QT;@=p
ziSLxKh|ITPEFvHIo%1R_G|1-+uM^@{W&<wiO@m?!-YwXJ+aWGIYJtvE!bVY<EN)ec
z{~O?2VSYAt|8~}rU-wx=0ma$Zf?R^-_+`=Uf#a;f$%(Pev%DR|q&E}VWg&QPgL{yJ
z^7UzC;xw4$9lhYv0(W`S+nF)a{F6?2n;{rG=n{u5b=PiKnxP!s_!HKfSf*~!Yy2cK
zqb~4XHhGAyw>cq*)=vd13iD;jjTtAjBg;Dw-Q>TUYZlJSeBkv-?<Fqi&I9s3Dezez
zksu8dX2z8;xdt)t9w9EeEf9JL%BNlXExpVdR*k$fi7&QqAtHZmTWa%tB!ck=hPj7$
zbn|}c?bPQSl_=0X$K)k?iBfAkrcyGnlY0w%&ehYR{Hfd*-A2B)t%ov&ZpU%iB1WbA
z6*5Jfr^R<XAoJ25bI2!@4zaqWP#-f3Q1K+1o!z**388X~zGN`GZbmL|`?Vz2!Rv;i
z8+=;<f!%>$@oFicPM?|XbM6TTo&Tmo@-5-m{6m`dN8NXC65~W^&+l3KA3kf_>ISBJ
zQ^O?*tey6*`J7W3*1Ff$&oqluCJKN*Zq=?)o^xw_e3GeQ_sz^poas!cN^tj2v09=|
zXZ7t~m#x5S39{8kdi%0VmHM#I3}{J^PxM{6{cW>KpdA&@VCfI-R#7Bbv@oPItMxlq
z{@joy!^e?qhm-@UG$7+BbisOnoYKtt(Cj`z5oEx?SFA#)60E#JJt0S3Aw92)xm9Ip
z6`bXI**Ls?hi40rqmIR9d1AryjSsI|9l+M+N@!W9xQk5ayCAD-epT)fh1@C=q}Nk@
zc2eTC;1O?7;<dyi$1gvfAALzh-WsdQ^3>aB%ViU2Jua1(PBAgMw>(p&LPXWcH#VtM
z#S?fSO?t1?*Me2W7<kYmb)`e`t5$5h4EzP8nJEY6dTJet>{IDje0uE3dw<`^y-{bG
zEtqgz1*$_Hw@XR-U9Uo`!xBr;;uS?_A|@3^Cn3%iL`VGY@Cp)lp@%O%o8AesdS@i@
z|BxXz&qHIIfKUDxI6dH$36iqoZ6fl8?bfdgz(3yvK|@V=8XWCRVXX5v(u`ui#5fgP
zQXT88S~Vgyt<ld-tMSL-HghZV|2TmTi4$fosA2;YFGNcNLN7QymT9=zSLS|J)v?y9
zRl`!>H2OJc=S(SnmKc8p|1%h2RUKo^Q8g_7ZLW_4f6kQrr<L*7KMb`H=UkGkv`D!X
z9qA{3TD8-5X(UOMqC|fL8YfHT0pm=jjMV|P&Pa1WahJfpG7{%0c@AKltcmf2@6D5Y
zRW`^&UHkriqtJ40ves%(lf#+*Yon@|&R|}diSkTUp(XIII9~Rz_@y_^pL)OG;;b^0
zIQri3;=W{O7QsB2zAq3-uSt}ldWel7)7;}KR%o|Rz>YUkuUpo7)fN^G@s6%AkFF3~
z);1%NPQYGAcQ7qg(0cDyN9r86U5=X3_1?9qA)bIoPXPEWN^Mdb0p1h<y~^jS^YzpX
zFE5jpr|R{`lNd;a`}~#OfrguY?S~BlS{FEhcWv@6D^##IA0T~{KBa57$uq1_nVrT}
z-+Vy$1yVZYM^>q}PvRVJ`WrNT9LnN<LzTjgr*U`&0!gQ655{mlEYQD>gLo1L^^gPc
z&tz9r`pqe(fX`a5{KHKsvB2p%mCwTqtUtwk@3Yn;zi<<ZFJQk;W%JM#@gKu(`R1EY
z9D&m{D&2>!uynUmOh%uzZuzs*IIoAd!~*@j|E-idiF^H!10(RRUH*^BuAubU6HI&`
z!%lgtn@|*i%2g_khkp-y<qvK`2?Z+GsazhqBGYG2F?oCp|1fkw6&UkDeH5`r<5!Xm
znmdho&9cvy<Qy>6D5?sGRV*}~WHgQov^tBEmGgQlN;wu57s#L?1E)iRS)+URCh26*
z7KB=yL{vyitM$QmGO=aH^e$`qLe#qN_^n5l>V>fE@V@BV?+QkbW@omhl%%FgT{2}%
zn6#{wtZ~AohP_iILwNyn^_L6ZnEh!lFvK>TDxFy3$V}IaC|$}H0*a?rEu8D;C$xvD
zBUh<akKW@`^>0e$8ocM~0yC^rqLyv7$);#CN6=EPQ>tE3Gn9ESALKH4qaY@J*2!C^
z+Z|eYJ7U<bF`m@_aXL3(E~Q<AWk-SL#q8n;7T&^dR|KV!|Jqe%<8ladlA!FY^Rl9~
zircN1q-2N<4g0cAwpkwn!1>TCR`Tn$a*a$?yK5jhp?d3ugPj@876<JyXc-K<3CHI!
z>+M3E2*?P7C3{K7?f*`u9*k1lJN7?mR|zEiucQzB+%d^Lp>eDKfot?5YSpsP6;IzU
z`1U^4xHay;HTF@iYWc$zPrnb<e*kU8D57E?RoQ69c1n#~!3T9&Q#=atR8`9$Kkm#7
zc?AW}s%5Dwtubp>Crj}<UuNIWUrU1-b765RR-mx8+x(E!?I4jD^xI+S>OcKENCJ)1
z*9OaC_ZeCHzm#ntq>Ye-9cqR^9*`F|NZL41in4%Ok7D^-=92}MUeH>xV#C$B)$T$4
z#GHNp{xWoi_hW0ZjLCMYltc`%53$02Yk9UE<6fEg;*=BirV}<cHxj&s>YPyVb4F+V
zQ$FhYUF(>E_Oo)ZJ>P->K}IL1IEqfWD_*+&gJXVWU=&3s8cRA|p*WbPNJTLhL<3YQ
z%#s2Ciwcy)UXWrT-iuR=kQ!D{i~w1vSOop1emPk>b`df5-@CAj<eC-~<h_|v$$kTv
zDku>Dt>L#3D%n~85}CZu16hkYkz>gAtSg1)!AH?{FIR;Y5&E95SR;<nQ#2-o*f6JU
zk#-<r@PqPA);=bQ&IhNP?D13>HtX%j&i5CJ`as2`3wBYxJ`D|8a^P7~{Zt27vCO^E
zq*N>?*^>ypQ{<(`lppMxU^%T};Vli{Nmw&U5*0|=p~8GL&PtcLfc{H`nB=biFO`>;
zxKJOKF?q^6$Y0%ltDvDj8hbIug<!9HCf(>#wj_ieo2>n#1RdwDc^2O2(zGP}_cDu#
z2eCT)A02IXf=716_?y7p78Ov3RA<Y@E5sK@BxFFmE^V!-{_a=ps53$4W?Yu~fEtkp
z)Zs-v6#U2C^ZsJLGtF&2bsg3w4fRZvgATPC0_}`EuuSkf>Eyo1cSLZ5-@w5XP`hpW
zkN~N@eWb7O8t$mV?~!^kN|=vYCG*UJ<}zDJfaWqo3GKy=pzmF*5MwtR@hmBRcD3r|
zp*e{}Y|e%{E@<QVwodp{F&RGh9rdvPIPX6=qw%Z!D9l_TCfuO5f16gF*QU$_$ZMZa
z68eZJrL2(bH;(lsFM|#C<-oE+A4!|(0>*`@=>rl16*OPv2A))*>tYN4jy2a!NWc84
zlJKiV>O7lGKnf|N2I4<(FC%^%_FuR#bFA#Di9tkPocyP!miibQCZvelA8MrY4gow%
zP>qc;dyCF5_W1p@{ch<b>uKrf)vlm2Dcfdt8MsPS<YY~0EOtz8OkR~K>-CW?67E=U
zNCNJu*G-d}qtD}$vN!@0sDs+(E*<gz!a#PxRy`7XEbDkTk~$BaLqm&(BwRahuMalT
z<c~p)8#o(DQ9xRXQK>#w9QQ4<UhR#<u)PZKpDl2&;>83OFpYPPS-dE8Hnb7A)PzSG
z`nYhow#k;YH)5u98~aFcxHiawwKt-}2pnQW7##Y<P#b=OZ-Y}dqT>i0VnyT}`aYm?
z^^;O@ZTyEYir_3pgx{f00`<0!l$dLSJlJa^8tpJ4<MH(=dgW87`h7@k`cxIhzGK(C
zbcsCrK4uU{S3Ujd(OXAFMH|j5L|SFJgHhZbC8ORCo^J5#642e|ZNYF}|D`j?#m>HW
z@@Pi(;2pNLY*tma#&cB~N&OORbWAZVwh+qqFjdLATJC1K>}lPpH<;+2bOU$khQ}O%
zfyQb`N>gNPUDR=3q{Hb3Zpj}PfAA)D#+qS3JkFL|oBvq<Es$?=CWwfoi+|5jgfa5F
zn2|^1^)A=a`*8F+`zbbWfm)5DqVK^S{lztWaV_w7*Vh8NUpB=w{x=RxUHsYvm{lV6
z1sGaIqo_(TP$a4W?rH(es$tyI80v`~6o+^ND$B{PfPWm;`vQngAdmD+bl=@gm<_c(
z7TZ13+=b(u1YN&~2LopA(={|{`)8VkR>X9-c>eVdcj0FCk7U}duVxrKF2n5pQ5H?<
zVXfYY)%#$S=>_cL{E{uOGj%I>*xJi}`&xG1NM*L|m-K%eUf>)fVHP=M@#BEbKOP%q
zY$NT=Wj*t@zj9Zd6ua!bDG*U}S39f0zsMUcwf8wJM&3<6xBSjvIU$8Cc8dBXEo|KX
zu8E54Oxl4mq{I8hgqg<mB_CzaCCi4&#~r4X*H4eA9iwdZ)lB_3X_-?9EurXYH+3`T
zgAN7GMX@(U>WvxmlScS>D)nOMcxu7IOGeATai0eW3l{ztjyGh$zu+I7FZOzRw`iU^
z8)|EUHBxJWH{Zf3Y=|mpu{(IGS$whv<f!9I+_Yt;&k`~if1);Dn@+`*+nO%BP0Byv
z+3(~cjCV#aPJc(wpKwzmMr3^9AKp?qecv6}RTy1tg?Q|T*f76&(xj8b8T++3&tYn!
z>kxYF3KA6z;>l$RgY7y*x97n+qN!QZhaE`^sHS2rRxwoX8$x~ED!is9`G6RzM|w*8
z)+ey5Jo*OkkMQKVBKTo+{Tk}~Je@vOkTk4aAp`@UEf=a@1tI})MF~=y=F|Tdt~{R~
zbw@PS+vB`HTI<nSs1L(;wO?njS@^?{%}eq)g}3(0Ru2M4a4HG<Ql^_?B96(&smU<R
zgAN3jRhTBbPwDob(w*T8ZbK1eCo~Frv@Gk^#JF_7tpEQU(U)~0uK(WMzGu~2W)IOV
zNtE)5ueNx}0j+Qd&{&?)=y&5urwyPrZjOueE_jM#e_ugHLz`Lk`ro^v51vt5_J2-%
zWFio6`<s;TI3^;>wqLvG1}}T)$_B|-x-sf<&WEzjsgl4{VW77^s4==IMpn#w_@U5T
zl08+Bolu6|Tj_1p8zBPPK9D&e7lsgAO(QjnRO=m3bS!hmWpUj9)4ovHTRyV^EI)xI
z2aHsPwNFPc!!)j~NmDZD_9{t?0-RSG@~aN@f^OBBiD|ct{t3i3?)EEDj|L!B849V=
z^?_hDDoJSnGiaVqaQG!V)uBc?(q&*wj%)s%1ka{<e#*;P0T26%A`OAP6-AEfQ)=o{
zY^u)KwA`@(?=JvCxoP<RI}#1zxBLFa-q9s!v6n(s{E~kdQj6~_9*I3Jvg3>?b}SF)
zn0PS9yrZP))?Ahm#j+5isLhJywg+?DU(Os~kO^zbGE#DPi{>ZpU||v-5|$WdDa$y4
zLgkpp-u;EAzQ70H>4u|d#Nxt=<bUZv8uxNPv+a;0I}tb$@=0LjI`KG>X8LdM%ms9O
zeXC4cwcjj#etz<9eO_q_-R*wx*mlv@#z3)~BG6`sR~v2zPS{U5X<rK8H0?7?KP=>#
zQ>RgQaETuCy60UI%!Nn4dD4vfHbGAYau;QeqTa&j<~>Y(E8g0%gDO6ACjy_%6LMfe
z=BaUvd5<v#sc?SjOyB5!<BIX5Bl_h$#DPe0gnYnVlq-sQ8)K6<D@Ed;L6I+xAr7dD
zBcuadqFlk$+vuAFSt<V!>}$7hs7NL#p@c8){~P(x^y+0pY1t<qPE4DuY<`JN!eSXx
zJp!>x@w4nR*JjII6E#k!z+(!L4`ZHR+Qap=ZcVwdwz%}1c_9q_$7P^Xkm42V0Dois
z@$OoSSq<6uD1sqf?*iT-b1K|Jp2j+BC)=ML_YUmMjL&-Bw&Kfi@*+tZDt`L~=g50>
zqN&@?-rEimx75{J_jwjemF4br{Ls!8$K6=ZSM140Rmi~jU4iV|;_Yzs%L2ri&f{sd
z8J`4QPc#09qlP;@w`*P`plRj+ok~(5O|^mvcF~Y9SfhaDKZL?68X+`DiYBB*bfVzE
zf+}<%cGiIK<c@Fz!++@((~~pk4?V5qGN}$-$#o}vQCm}=mLjk2(f!?oVbc^o=UJ_$
zqx@*Gd=D#|I<xdnNSTN&w-vM0n?mM!KvqPY9<dncdEGa-GquWRA><ZS^f=Tsjh8p|
z=Fsrw(F)kiSQP42f{eRoe|T5b_2ZM($5-zK$uGRgdwbkeFh8;{y!8%x$>t+^hP5#<
zdwJ^BHkik4F_qxhkJGE}-8J6m`b#qZ!?A9pZ{U4jj48o!FuZYDCf7D!-#WJOmdKga
z21XGcJ8Nt*o`&Glk77~mEY2gEaZ*N!@p4h@&q$!nQ_1%dXkR`h%zzy(`okp!U~<@5
z`YeSn+7N%VipFQJAr@?$0{ML-)}0I1&Zou+3&#nil5i-Doxebm<uKAHX=Z0}ik~lZ
z8L>t+Nvo;&Y7nr0>W%8}DELf3oFJy?&$(8sDB^bbYu;tzTqB{GEp6;Pgsy?x8A)$S
zL>G+{F;+D$33z{$jW7H1^c2Ev)x0_k<g0!Q<+lsar6%A)+DG8~$VUUHsO{6!D1DSD
zf#A|{Ys2p{MK#Gr#zAwhE;Aw70uB!*OWc$o)2tE_h67hNYD<cfoY|}MOs6M@l9Rn}
z3e$}Qx03x+v?x+5FXAd2s<>5uu6{!ox(!zdwJ3Rj1>7o(6&Do5WX5>Bxg6qP1D=O?
z5Q`wOr@v~=dG=90Y^v}a+zwe`B4hi~cVRSjUsdFvO{6SfN&#O15~%PPHcTG8Rxb=z
zFJ$h?uK_AmM{G|as^-EMpOF+R8tzeQRzp2DoJ$@#V7Sf(^USv$B(R)gnI0KzrL&$V
zB)R*ZDVkgp2FmR#+U{51+Xx1+fp3Q{v`lXaH5|Adf{~dzj}uqxl3lVI!?=fb*2-Ju
zzZ3(LezM-VxPKXo3c<&9rpmT9sd;(O12o2OP;(i6hLBxijD>dH@Nzw~92XDWi;FAb
zt{x9nN<H(@yH;jR4V8ib^hRv&vtj$i@X3R4$7IW9ai{X{C5BzE^i0YCF&YP_Ad`1$
zFG=?dCJHmwuDg+Y5var>Gfv(mB@uY$zMI*x;9*k}|Dle;U17F05JQ>yHprz+y$g`4
zJ=P6a4A<@0p$I23bYdjOW?pj^r!(jxlN}D<Fw7zIX8*=Ie;xiUHAe2?+nagqu+83D
zRbzIuV^c8|)eTDVSIiw8s_Pl`{$R<sQpZe6?Brg(+A4g)*2dUR@sX{MT{OnQzWxWS
zoP84EEs<jaMo#o!&ou(ki!+#((a)V(mc5SngC+UJ-+ERdqLOKJ0c)4bZb9|IxW;yy
zScVEiQ-CtvTu&qNqwIIR*yfv~%a{%RKrS-hNSQdb5HZqfg(RU*#Z3*36h&10V_Ld~
z*jh<qsMRNS%X`E=Gj=z1wk+BHC0ht_SAg=v$;j!UosX&)Osw<xBh^zw1!$~q1k=2`
zOM)u+`-e)tX6A;NL|n0Uj%_4gJ*}JvwPZ1PuHFq<5L;HKCw(88e;67{Gc}#*<6*3x
zZ!1wsnnE{KX%DCAZ-pMpgRjPue#(t;W$kOqm(}Th6fLH5e;=lS+HE4Y$|BL%N@w~&
zdFz_^a3BA0p5&j!wVy2g<Sp|wY*<HR47Su>hjBgQa;-?@kz7Gt+C(K<rx^_+cAIh~
zd+Ul2c+?{NL`IV-^&~pQE#h>A8!k$sx`nsbw;0r@5GAEb?ERqIEv1o8zDl!|3j!#2
z7Zn<k7R`$Pvcy0d>?}}V2arw_fV8U^8Qiq0dqd0Sf4>Szqba+I$ov!PF?HGH>@DBq
zJC6e8)n!+E`iFaln(L2I3X4(b!30>2yLGM~XFrM`#W#`p#x#+?WS^&O6+AGX;YN*C
zh<wOaH9O;#)&&i%az)CDmE@7dD`AMJh%y40Ma7U6Ut}lx6q6`Ba$vDR2#q=Ev=EJM
z2&gUwgp;)vSm1(Pq~lya4p!PNDs;l0+(S@nj8NgGw;jodlKJ8p3(8kIWuv+Uf$}$%
zH~@?Rrp>i9X+=O@mDIo>hKx+<0&Yy8nG$SREe$SV?5;}3#P7DV&vS9feus#g9@i8>
zJV0CsN>>6vt8_yEnFWE!4`D^P9elzn-RMAOQ6TbE5s0+NQ1V=($dDa4=Eq+=yuHbA
z4l5bAYZ~^@?}b-I3V&wu25^Q9sQQAqn=9-w=Ew}FN=DR>4J^qMR#heyQR%f{JCgW0
zwOUm0RJSkP)mp-6Dn2ZDteNkUgz>WWXxyc29$hBLMne1(l%^Ski)<|RMO)aEj*Jz1
z_h?QXI~LOCi!aKiUN++d!R2v5gCsub!~Je)fh*UZH~b}o#P{Qs3W*DDR=-}OP0x$W
z<IGtxY8MPC9W3{h@4E<+u<$Js<$|L?*->D`TG^P^$AJMcjfR4~H$@fpQMC2F0P2pY
z*ALX~FRmct4J;j*RKo>>ryZEDet<~Z1nv7^+B15g_Eo)0<BhQ0c=64JIaa0apqQ)b
z8ZND3n-rZ91$Oo8Fb#x2u)-;1sR*#&77SMCw+9obX~gLDIf8l1Z|S$JHP$2Dtf?B}
z0UE=g5)(1hK(!5J)eY8PX3R`ml?ZsrlEJDVgDsJS<SLG>rlHNQqM<3ysv@Jg&D)H<
znz%i#etqmX6E>EACx3K@>*^ie#NVSsyk3S>ZwYQv9m@ex0@(_)K7auVV>zn5EwAbA
z1>U>vzda&aOZ%|EYTu0L;UvrDV|Yw@#m~08YBSiNby()L0OWE7j+CUDPs++$XXk&z
z_=$X>DWlD5AB{*O$yGT_@-4TE1JkTx715p3&wth<9B!A5zs!U(6?Jd(sAM4(+*Ix0
zs(LgskjmMBNp*UT&V!a3t^5#?#FOOyDan#2GHmF9jFr)>XLG22@`tz+dkugPg-{G$
zglcTzN0Jdvq)w>D`yJXlT)42b$>yh^RRW0+$e_xsK!X(Xb{*LIY^9?Dm1PR;ZnNS`
zo-uB3T32CgkVLi?bZSLmt+|-b@HPWS;$2we>d1U=>P<andc$Y)t``vp;re<-t|qcU
zyA=uCRIq_6Rqr2r(n#yk!Y6uZPCi<>RY-k6fY=n!F_Kv!O>HG{qXSY_0jWH?)<kUH
za+>Z%gS*~#5zaP1^SG{%Q<7eBm>gIS)PH?_)YY2`Qy=%*aE*!*ky+8_vDCDyTS!}b
zAvB7o(viyLs7p@fU?DV>r*K1#=2D$azejU4cT<G2df3<nJ~5T`q1Nm0eP8bWqMX9a
zxldU|I&FQuaG`miGC(21x}@8NrZS>dy<M|}Bsow;yR^JkS=PFwA5gUO=654&NR}+)
zaM}i`kQA9!WfB9uAi~j|3+*_LoMB^Vb3k(injA;2u;4y%iYmoGD;0cv;0D%TtxFtG
zsVHWpf`JeGB{5dZMBT{1o#LAnm5$eII~-%G$AS2mwUi#qcAw|;^sh`rt6%dKdBD}K
zGSprta#u01*Dm9gJ=V6qNdZLemACef2&qViSRg0@L(I7_=&7;-7v^A(O2Q?vU-u&(
z9YDnljk_lKUoKCSJ-2XP;2D;NsqfQdX-KjShMIDX(NQIDidLtX(}*eyC6GE5zMhg&
z46etjywWu_c|0sXiOBd$Oz9nNW8{QS?s-AYF$VTZU%FMz4lFvEVVmI8x^LJVI=M$m
z#%9O}q^VKpZuTG2_=#u9=XZsVa>cyYa^mIfROtKAu&d{bKU=HkE0?SmbfGrgUH8}+
zo4j}2xEa`LJ6m+f<L1m<&agF=+kA%zsFqp4N;{P^^@_lI?yE($FV*ApbiR26(AU+p
zHk|RY>JEpit(vJNI=j0~`&gHE?O@`08_o_k-}O<1YZJK0^|pE?G$bOUydF(nRDVbQ
z6K`&yPtE6X_;t8;K|_vtUxAP~@<Z{mdS8fU%ROFYqbmPBZaY1hIx+3}z?9jpL37aw
zT`jXbvnis{5yI#hj8WQjOF{@UbU2=|4DdSQ4RIZ_^!u6FZg!VIK9RBO5IIAPAIqB!
zQ6YSyyz?2`->3`9mln;*O<4^&$hXkRWy|4lHzBgM4Zd`C6{t@d<sgcmF)JmNmH0mJ
z5ZAhXd|3;Bj9hE6V^EC?18*2oI99|4lX~0E2G!aYKX=C*_jev{WM0`Ex`;2lc_M0-
zHpsOlzjlfB<hfix`XQ|c25)>#0G!0yg0<~2)fPk}KYC{;EHnz*=#bPgL~G&nl_J$T
zNbmCs2N4*2fe%2~gPx<Z@%!oK#j^luZx@xqcof(=fVswRPH7f$zezKu%}>!-!J_k$
z%N0!Y1Jgsu)(z`UP;UqR(Ex%M4tn)puZjH1NlFNO`7xVMfhTZue(zW5)sdz3lO9y*
zwuzQZ>RdpcJQC%}G`%3Fj{v+gk(gXx#sq2g95L<qk7V*bjAyrrfU-Vfu^6XUIO&Y0
zC6+1W-;uJiJpB)3w!h7`X^wv%&iDKprCZ`;*%WePL$=`eN<cC|3w;$n)RZS{ZsdfF
zu!HXIpuyads8Lfmk`b);CO-R%Ykw}l`~cC2dm}W&#z9w9-kl^1r<ec#5%(ToO{8o4
z_*y7ZrFT(SK)Q(ZwiZAI>7jQ7q&MkJ>77M-SCAGUp-6{>4pJA9UP1`HcLF5jAJjeT
zmUGT`_B-G2e_hXY=brn0=6#=;OlIb-*)x44GxTGQ%phKyinOq<G}Z2pu?5ZdZpieD
zl_*?Y&%rPa0rncg_@6tqdm+h%o8^!M!Y$azMUdCL8SzmRCGp{L*}cguBHdTw7!I@V
zDCK%*FnfkAhl<^Z<Nrl=pdfNXk!C_{FTscJE{>X~&+F6df%OR0Qe}2^-ZvjBp1n+J
zSmALWx`KL4y2Hw}#CLa){IF2+`Uu`>3%w_mY}dOL_MtPUzAKK8mgKYH9@GQ(xiUf-
zD*&$v+%UtBDpOW-0DZPGE~0#Jvu~5p474w;n|t<=#1&&)*Nre0hnJ-NuGd0SzAek}
zaeXk78;Y)4hhaXs4yM>jpRXI$oum2nkE5Jil=_Wo2SA53AcoOX!m)>@8be(k%=W`X
zTcLPw#U$~0-(D=~G3W3~f=<ZY`ik8<rVpXm^*mk%Dg8oM|C81V?#w&9x3|prSBOhI
zkzlK3`m>MvX8v){8E@W=irsbE1Y5}rI9*pv-jBwv#&a=F?{XtPc4}SYkIJ;zm4u8*
z`hvAgZv4}Q6VUu_gLfc=+zVWY-xlssru%i_o}t0tE!^XUUgdXl7xH7prMp<I2dOD-
z9ue2U{*PsJzEtcO-jYq@N58u^eO085x6FV#&8=B!9H+sAbR*bzFYUV}d_F)4T>fV>
z^Iow)g%a-vOMbVA55*GxNv0Ti&P{sLW_<QL4|zVnu2&&ldwAsqK4#YF2h3Ux^oR3+
zm#IcU-)6v5rCh;|9ZSIjx2)e`rfz=VafP}ieTSMSgstpiwGYQ9H;j|L!VK1KxfO+u
z=iM+(o=lxt0co$9@Z7jz6QW&s#dR@!+)IU-{-=j2EDar56b7d1=JPTq+>7DmsXw#T
zcj+#4jQ4(yNG^JBQ}n)}@GVE-TQ{y13$DlXiDp*-X1o{Hst~-Rb}K^zp92J;6M;oh
zKx6ko9j;^Z_32JCRiX=GjC+irv8!VZ6k|34>oeiSd2`k}wYmhLq+pvoxb8{q=)+n~
z0#IVCja1NY0{vG(FSE6jZ(g&>38*d#xS=#cRbU;h*BGdm(Z;C>r_>Q`)6Fp99Vnx=
z)Q%J^>7W~(C$e!0slv*4kyq(_0*I>PTiouBE8$LkG?t*V<p>msZ%O|+*Z+LS;;x4v
z-E=0=tRk)h`}Z=E>@HIEZmkeq<IhC)^0@9de@(pYK-bfI-?dj|hDu|Mail4B%~{33
zK;u{%*buOmmK$>K^UoplpHv>w4?Sb4=MCG!m~AUHBlz%rw=o=6@lRAWeo_@yy{|eK
z)|Go3-$Uan8P3&2gWLE4=G-dO6YsAdJ-hVoG0kWNfvig5Pd$p0?C&>!?C*P?|K!Ev
zhp8Wb6#N(@%=R909DiL(N?%HATWWcBA2N7$a3U@Eg#By*gZ8yd>nnvcWbe$NE4H^z
zAPwm!TYe+%$C|JiJzsYjiq(pDYqo{r48Vbqily?>{V5agjWGWym1tp&T$|>5W3Q$R
zuH>JKOsYr;Ys3<dm_0lk{}Vl|C9Y}@NppBOGNBS_TgW`2Vj%n(Y+Fc7!N6tnuxeZd
znvTSjGT0VcVl`onhKp=?2|8~uxa4LsUpvkiSBVt<vd_NoXF^O{i1;rcaeR!QLVr!3
zTJ`7R>d$+-yso88hg(@|9}3itG%}?|XjchE6m5a^P+Q=(s6YPfjJo<}k+?T-KzUBX
z8#t7;R$kz>QN(ui8Rc)Rd^oNyMd7{XgH6t&KO-dMrSP^MYR?jPF;(8Qy0A?13)>Vc
zFQA@KAGEJ1xKUk@RrAHl3$n0QQ(*WdEpnqsHr|iUP}++9+)m4`?juNdPs9z7X;9S-
z0-kX<00%(8%Hp*Rpm>9IoB_a6Yh(i8fKL3zTrWJoimq-WdKkinwNj|dh0pI&zIS5z
zKFjZN|2MS$cmt@%#H+V?5y*yHfUFx}23A*0zX_CU01knyKm5m3e$gtXXP7b3!CeC~
zqk7^dzc|J8ZNn3oyQd+)SQOKv&Xic7v;q9a#JQARHL}(UC0$LmnAQt@e(`o2`R0eA
za0kR1jF@R1jsv9J{vXg0gxiIYH&}-oRJDV2O|^K-i<8Cy3LC%^w-KKPYlwjm43y@e
z)n8M*GzHk-{0kW)G6Qf`JY|W8bie1nyBg^>lI1qCFT@IGwksB&0uEFID@)gGFX&LU
z^@mb=yJER1V4UyqIbO|3&K&;IOmibcKvQdSAVmN=fDJwv5aK8<K`b~th49B=rRWS8
z82}Ue_ew7s-)Ri<6n>N+gp=<nv3H3LBI}{GK*3YtjXdj4PR)nyN8S#0(2^89uW{-;
zr+-|sSL*nDFK12y03$8XVhV`gRnH&?fy75v2Oa5^jt>SiFZv-UEaA2pfvcip<^wKX
z(iU@<m5o*oDs~uR@)>|hR|~XU@$|Gxuekwx@MOSQjE0&`@?~e<7?$wt0oM`!&|+X{
zAXtv$jB~;lwLR%CaXK=`I^-KrntO&LG~`bVk=S*Q5F82&?9WZcVUC@pgOK@(BApI)
z9j*Gc0-9_<q|!`2Ls|!RMng5evdO0rTa+2JKFwMirbgxPaPTMsqU(NYEhV`-GRa$E
ziL_YIgO|o3S`*_CU6{KIxJFIH5HAL<0U~Q39HYZTZ|_e`@G|hMG@v2GL2=s5zb+Of
z%Y5P{y_YDxCdGauZ^LD%DX{5+Tp9As+*&@t&~GePiVAo&Bh3^V7X(k<48Cu*e6y3f
zu`Z~?=zD9t#Ny_(N+loT2?orZt}jzTF%~O=dA%+_h_M7Sw;{%2`B96bgXShpLf&ib
zX-&Q;>XvH95hI-nvl?6y<!SnHM5Uo9#88CPs75ophFu*|^GhZrUj=o;dBu_8wSrjw
z+WW*bA)BM)H?XFuJ%;2}Gpo6~*yajxZ~BKJ2u=DR$2t_G^S2}!t7B&(?zla7|BPC~
z*hokEV%i4h(N9+mnL8F|dpDrdq=FNN?i<@7GZa39HpgC@hTxg?D(|Mz561FfSM^_L
zL8NJ|L4#=G?BjW3K&|P#$V`{?SWTzj@QmxrlG?$2b*UpUHxGUht^Cey3H!s7_nlkU
z_6!~N4INx&){nA`cC!Wx&jI6-yG$!bvkgth_S;PjryqA*nOlyz*8+QXW{t_&L!tQ9
zM9Vl0SJQDCOx-gv%1BAb9QXMklI0x7s5QB~0C-9O5kG&tQ*P`qct#&Xm`xmW+&J92
zWK2KMoGRMeJJ2bXvbDP3xVfJ>prTGQ_dq{LH+xs8R(gZTzWvP(UsscN;3MQhJ1l1{
z3rWbuUsOGU82fnxX#}?01@z(?z|~vUXXQn_Ix+l5<3dYM#*#*FGDGHzPkt(s_PIyf
zDbb<{0Xozk9Uxcz+4ov@R=Y!6^I|STV{BJZnkF_2ZSeVS`PS#pZD7H%AvBMqL+n~*
z9#tP6xQ)*)x;dWi?qY)XG#29d&Nw%slo5jP$!<O+naIIl-Z%pTKau2_ner1o24&6H
z(OizQ3)7A|3z9e<ejawu<&YID`o)*mS)|XqC-3MuJulPg;Jp97bqs9kh4ko%Dyy3}
z)xY7UsZS-Xr@HPrChqToH0`j12U599U=(XTP}`0(%+dxYuWWk9m0M9eMLqI6h09Vg
z1v^i#7x@VJe7MU5(U=GU47dk>>=_$k;w#ms5Y{^KK#OF6I?}syX>bla8PH02txEE3
zi9Mi_jh@7|teRVmZ};p9SZRqdDs=+-lAQS2S(Mk3m4Nv1@myUPQj_KPAG2tP`BO9~
zgq6j+_etGOeHqtILg9{#4ARn`1v_~kC5jsd3!4pgCdxebmRmdG-Cg}^9J6wFRO6@G
zMn8gsm6f-gPEbfpw60{`+-gl3pT6c{U0IzqW@i@YfcSwiY<upe4-Fo|8!1iF@(ykQ
z2o*zLBIzPS-tr4#Mm%N=&UGS+>2MOgA=7eAluX^p8L2&@9Oy!|hG;yc1<&fa>N>{g
z`UYriFOGP7Rt10kJTx@)EwQd26B}F4SVo;>iL|Zj&$;rwJZE8sbs&THlY^jz^_0o*
z;}!$JpqxF}i*L_(ggL+lcureax^~i?0i+3_D5l0e-r0Eq=rypAUC07HTDT_UtqzFn
zEqz%x+Wj!%C=ICLs0$GHsNh04>m=(fI&bog!Ob({8j1~F>P7~Z1GBlN<$<G~{_9Op
z_}r~viGsDwZZJ@eg_L``0Vvl5i*8Xle2+a>pB;*eGq%W3>WAkot0S-&RN3jP?xqnu
z++;0(4rj%~`*C6;Fk*<duj7vG;bDu#h{&803fCQO-`6U2|J`Yg(sqY!UyFWUn{V9P
z)AI;BAah}urpyZJVN2RtD653V;Bkfg&TZ--Qcama7(z!fRAw&L;|9O+t@9w7UGmO8
z!{wJ`hWCk_KAQ<78FSMA5~ej2w5a|1YT8gh;tN^wiJjFozzcai@p5_t4=JC<dIp<0
zFN3Dh{n?jkE@|@o`d!6n9?j$2Fmha#&g=S^;xQAckU&y^gX5{N+zyE_3sH8==}DBF
z%Il|!tqYEJ2WIffA-gi(>b9ftOUzv{Yr7Q4AEkpc8wV^iwgLuC2j>`)2C?&_XKHg7
z)y+;eB+o@5Fd~vNFT>ayWYv%S$%W;Wo5NEgvgau?BC=m=<rE;6=aO$j9}QlvdBnt!
zJM6?a&~}pYn$YnUUuy>vhp#2CmWMIMaO;2oMXqJa4r(1K>=3G@9)o*LzhZEru<zup
zrK*8zA%*O_m}&(#V$M5P4Wv681PG5!g_n%^mf+IUv3NVzZ;+6L50Dx~Ne9U9(%$Hz
z@F0h_se90Gn%tdyt<)G&4x@8M#fbaKH<aV*)B0Y~C$Hkl5fc@b^H%+d`Be4MwZPkE
zX5)0kZ3AgPFt<{Vlk36TkoXXCpLZ7EIqU<3^=!<C*BRU+Q*QyA>q$eiz)DWMo>zZ@
zRxB~_?f1{UPD2}PO~q}GAa%6R1tUIPy(AGnHA@YA?q&Nh!t9chi{FnZkxVmO^s-EQ
z?2Z{@c&_8Un3i%;k}d=XcKH`mE~VCwNKU1eBDjK(Oq-P`lT6pWjMsur)B_}1dY;8L
z`45LbXN2wxTuIAc!rpcxcM0_a6rAYzx~PzBpms(5;9}KC8%JIcq2A#~5o>$r(=8)@
zSk;o|vO^m<U~m*Aj&$qa9DtGe<Sh-%ZKc7k8kN-b4!egseC{KV)^JfS^X+#K8raw=
zN)t<AV7K{pUT@xLZA*#8UZ6MH5FVG6=iNOBl+7+>5gQeGlK3|>?@AgrKR{jMpJ!`~
z66a~<4!afO#nVa7BYTB@mn-cTYFj}3ed^+0^2Q90>s%4hj!x0*)?dsjdfh6zR25NQ
z6fj$&L!+3r_iksEQ?FSwy@E=bNYAck6nPtaci+*dwe6{RYts|at*1^-rJjEe@1eSG
zKnN!{Yj(yP0=fJW0vctfzL}Db_D#3PIrXj5!9;FDKW10ayA#vk7Q9GQ-#vyc|4a;G
zz`(4zS<mKZd$-5S@=RrBkk1%t^>ud9b9)hO88UbE3$^OGl$=hJr`7{w&rgIsrld`#
zIC#?e75&(dF92fW?@kXK%?}5i*e@P|F)mKN+D5)t?1}V>4T^ydoxF~vK(|sLL_PD%
zPk%acA|<dcg@%vOU%%{1;7l$aPBxuCWo2$4seJ4;$O$tnhK_L;Hs{u7d%#;l3JW7K
zyE5B}Kil#G8FHjUF7{&~iTZuYbTd8M(9LpIHv+H=G17Hsb*E}haGb62vk=^GEXWFU
z$!hG?2b-TJg>G)r|LjKmxB>UQ!Ie+n<mO7yC51o+?7M5;>{3P9!$m2OiMUW7V$ysA
zd>S(oGF*r}e|vQPR^4!n)1YOF4-=C$K`SiF0@puu*K6;hpWtca+mp7v;U?#{S5b~B
zs&p5f60)tf8J_`}xZ8xwJW6nQFN`u+=yZJeJbG;XnvqL?y3sDNE9zMR9`2czPuIyq
z$CQFtq5=TpGU|y*u?_q~gu21(@@iTNsFrK|!IM}i`;}f$oYh$O%f-e!dEDZMkIWXc
zTi3bPC7Zfex#2>IP6dbX>7EYlwMAm>EuYBVg;pA_Ncest8&Qa|Mp9dT&#e;ms`cHN
zeG}y9do-Z*P4-LU6nfa{#XIJ#FA5XYbS5)pbPbl)*wc&cKve`7MC<AY+Bh-UH%EJ1
z<8SNIuEGc34Dm<-o)fvXSni5#M9h>)oL|fCx`DiWPG{5(ol`*GJ!;q50c->}?FwxK
z`j#_8umdB&zK0^ayhxPri8rF?+4-yo@YL9c6h_*$RSX$WK5?}^uU`{%{PjvPMCu;?
z;f6<)jQHc-?sP{@K2Cv2cFUcz4yL-`Cm(nA>&El6-0pkwaaJ)b!$3=TmT|!vOuUJv
zQUK3Ifb=-nK|>}ibmz{J_bjW&J#5G48#j$762SLNfKM@8R`Q7-a-UABF1q~2**5>u
z<$om)iUTFr3oAaWniu8vsL3bh#c(Mw0g}XlJf%hWMxdhh9~I@OfMl}7`No2cq}yFf
z*cG_LD%<QOa;FAXss-yeqy8q{N_&|Cv?A2AzT0g|HQ81t)KO*?VFst{O6C+w!LG3j
z*{S0ETAb*4_fsvUkD|f`b1TT7%G%>fT84me>uH_LPVdd;9b`*VYSGrl8#Q@>Esn2Q
z$9dy8O&p#_mQAUyZ+4%+RTdt|19jyqY#2-J@i7axD_h7GVtST#`g=5L-B1`fX$(eq
zA>>JX>znLzBjhS{Tp5FFKAYFq@cE_Ih;my_+WGsmEwy0-K!NA!fw7j*OkO@VDfx?L
zU9a%W9q`OO)um~`b09mGE(_AUuD^mZH<|aZl|eE$L65iV!0yh-;xz}nV@>AkC7^Sq
z9pl6ME$Jg1p*S*|V~{fsBD0zqbTsBn=*S(2X*v7sb9|J!=Yd>G;JD-FKVsAX=A!bE
zD#Xtb6~iydVhD^6=xAAQIc!P0$t=l8$(l`?73CwgN40zuvB69vM-s+JYfHp3SP<~U
zFqe@Nz?c1@7mwR5<KTqOTWQkela_ST*x6CNZFc2x(TwG}G~toe<Z`sH`=mSAH+JSY
z!PjB>c*xfux~*^qnsDgxYuGrBM)OTLjQT-k=H6~&R^`FW&=KY1Okumpc*_lEx!w;P
zgOW&8#6EwjfO)5qpml+inAv%hD~)2kaXKN?4ZcA*#fO?S2kX1G1NaTxM*#Br$De|Y
z8vNujd=2n^1{r6By~vhpuUidj?v%+vY!sUAaDwLTb+CdS_SR(io-NflxcBzg`0pK=
zIY76Ms;6MJ2pjjlTC*)C{^=pF<%jOo=N6F?hRA+0cj=d71ziI(yR8OYvqA_E_g4K0
z2sZ2Ti<JDVOOMp@%qPFW#ADRatZSu=sCVc@L;tMJQA?$As_*PZ`gWRt_tpl7<ygOc
z#*FZpt8$`+Lq_FD#$f-+Xa;kinA^ar3txu1#4<>XwEqOXY3GszbKTE45_9O|?DzEE
z(sYrLIyPFm@p919B{oCCcPrY(vOiPec&N@l<E&@8J%e!BZGgAW*L(K8r(WNb)vV0m
z*=b|$^0R%10?(@br2+4khCYV9jY8*kjoZG*b}nQ6$D7VDk*%`{U#-*IYg_65MhIV<
zExpP?)EVwJW(9pV>%W68nD(DVC(mG-(StM4gY$E|06bxT<K#1XW@P7;E@{WpD>Tv`
z`>1RwVf5}3<&3>{{l+u?vjv25)6T(-!N#49wPpMBHmxjJFO>Tn%y=mR(?a%kT}u8H
z2#Ub}<uHr&r!oIF*5(?<OGgt6_;-fMj2+}(fzdRKm#WddWOJ-7t7*&2@Ye1+_-VJN
zs0`1Uz0`U`)hBmus=C>Id;ILmJE0uUNNJR29|)qZ%e2P6v&xZ&zhDeBb83X>Sh`zo
zZk5brRy9<*xsPrQOwLRgA3N&oT-0ujX)uD2F#ne19rF!3VH~3tt#Yjt{G+2rFx*2q
z`})RQN>!!Wl$dD$p~KfIuKBN3+*oWCw;8AQIt`qBZ0!3NEu1s)!m1hY>n5vZ%MH|_
zo1fb}8E?|m37rffH^)}7w$*mQCfd#0U*~6HtqIg>IJ9V#_GPG9EGRj{V<Dnk{vb>l
z)iFY)dy}D&!bgSh{k@+?j~pU>ZrVoqTxTYjV$~BzKTZj^-9Dg5n~NXtC*TsUs2s*t
zW=&k4(-dTPEZ=JZ@p&uNKHzTmwbWy!32jR=+3?RS{X{qs7JI8gxNjx6L{rp|`#CoW
zK{cR6<`dCG#KSfKl{~Ic+ATf!x{iR9EpW%Rr1rMHu2Z?X(ZkJO00Qdj`b@S4s_Tm)
z-sg7kyG-Q})1==1<GqVotPC|D*yFCg-mV0{KbKF{yj8N%oUbGWJGUSBNfxn|CaPs!
zl9{had*#HRV2aD|s6xvpN?;i=E9bkj8PTC6Brp4LTxDqG9(;AFtcitAvG_5Li01o1
z3a*OT<W2RVtwT+3h8byTDWhErq@3))S&z3N_*fm^PfhipJi&+OiV~jc5hS#AAfl#q
zgvtR=om;MKXg$cJ`YwL5rd-=-PnzSCMGFt++3nT-w&#m@t<^oGA;gKy1X>#Qixtcy
zM#ZSGm`QO)5b8y3i8F)Uhtl4S>mVRXBLzDU^@LeeYI@Os!&%<C(9>`ma!1`0x=-qr
zDW54FQ=qbJuF&RIIs&S!NVIY&AU5E`h}TQWEc+hR*$(Y1&>lD?wk4k0Y@DZQqDO#G
zO-=g))SYo3wd=x45kZ^rT&;cYKMrg&TL|fB#+!36EqI1{&6<cZc7;5Puem0oI4iBF
zeC~l<TVQI-i<cn-Wi;LvHQnQG8P(;LsFTtcI;kpia*pkV(D9{bkP5~VW@&E3!<_49
zt!P1o1OcqYEGBvYS#2%A>PxlS{2o_Lgt?I6zlLh-CyqV<Y0>-Z=2eE8e}dv;e78|A
zozmoy{}gHr*GtE+JN^3kH3!#{ZJ^<GzG6RIXji4jzppMF%v6*WdDZQ6|NN7nZW(#$
zV-^NsP4EK=@n6D6R$A8$q1dXew=P-^X?>_W=s$dtF)Zl?_txL^(wd27c}n{e-NT(G
zuwm#SElG9p?A(D})EtxTBU)iO1Lj;Zjko0Scf=UOwy^KGOvgFd?FD7=%l@6Kd`KP$
zr7gpZ;J8e^`_AghSOBTq@$LbnB^29G+8~P&LaH95x47rv;W7<vUzLz&Lge5{NKIm=
z_G`&2<BL2}Zr8{N`c~I9`%>3UyFK=(j@^s8mVIrUHWOP@xG~U0r2mT0iHxt4-|-q>
zhxvW;1Lp#*x#U`MK_@DZ951M)s+MF7fjb?R?kH&AQd&z4Z3R0?Y&B<^7#)ZxZ665?
zw0>(ssAVRd!?ratl4Wimkcn!_W1BjEtCjgNyIGy^@xt;J8$S3XCv8VSt}Bl2$=iId
zecCh7g(&p8|IYD07iFi~6hB<a^dK&Vi_*DfM7fy}d+p$g-Z^D=c5I9|%6TPyaM9w>
zTD|gi_-;t62DX;t;wKeSe#yb?>bCK{zRwy#>o!~h*Wy)!tskida*h*ix1E)XNxveU
z=WbcXkV-%8=}F6m-^+-}Hv4j4CbSG)O>?=!v^+1F5ldJ51I;{(ew5K1xqd{iqZp`}
z--*p)o=gAB`@Knelni+<v691qw1czP?@uU_c&l|LCD?mM4`nI+;IklnKFzX?N@x&H
zie$~|BGe9(fy*`qC98(Ydf*7OtHyR{2jso@iPcb+;*&{rJ}=Vv8Lm!A>)I|f_md&Q
zOZR(IKM-=B@j3RV#2w;vJElBydV2A;>vP*SqXNgan-klfP{vkZ8y!1uHjb+t(wi??
z%1nKAI3Hyw^1RVrSW!s_$9}wo)0P|q>VIwHa%aN2wAv!K%rAg6q^(81>{~aVve#@u
znZnL%<1u5Gb?EFVxaNGl6q9nuTzPIb>fd)7tAi0(m$658m11fSVb9TBB^QY`=gO7m
z$7L60Cw<YTkkp$I?Q&;kc-fPASt8S<$mq-EsR~Y>zpEd^y`!KXo?1(wm8<EAtuB?G
ztn;`^z5ihpXSCacivO^hLDC^rT-#)kqqQUAW)Xf8XFvkW3w$-W9?*EAeS1r|C}8RB
zOs}{PdKS$z3*f2;+-j$Mpm>W%3!nSTXPU>4v$(-OYvAi~2U!H)ITCTwrFzixAdEAJ
zD#APUX_##FUInT5DXR%fMb$oY)t*d<o#duB#cq=-S$Q{!l1z-U2SfJ3-AIjRB`Orx
zgyK{vh^<-Pv6EkbY21vypZoHl>doOct(OQriWzO@)OUP*YFsqllM%x|ud|MM%{ElU
zX)p*>#f2S&GR2vW({V;8%U8@#jW&$D|A|lY<`bN~CpgYom!EL`T#g~Ds=NF|2?Z`p
zAqdyXSa-GXn3c_fj2CSekXsei>KFBWSOAkqzmuD%8mrBqDtek!{KgAV0h%XChEDBU
z1V@fMi4?a|<#^&+Q9JL%*5<)w9{kiwgHs@pT#NG=SKgDndqoK$1oA)Rk%N)Bv1gvi
zp0^k^c}gS9Wji7bF>K1vjZFwSdqOY4;wPYfj4I#92)5ZSHSqA<Awwo)&H0&0y=m%j
zP_KxDol|P!W8A8UB~4iuXIb_QO(6xqvv{D6>JZ#z?ZC}wU%Xff+`HUv|8$w+>GF7l
zh!2q&Cby65;qH%=%DMBNvbz}?L(7P*<D*D8%c45i$Fzq7<fF-zZLv69;-jP{%>igc
z_(pS8NB7*;`0+k1II1v;K*RKnS1Ka}pp(Z1lwtxf3z?KSM^sGk_{iSsp!{?<`1AXp
z(<s$)A6OSox0=@wC3ELdJ>@J)(7c^zk@w*dC$H91Zmt@2u_^8(rpEIwsixeqlc4?V
zm)1C%^$=iTP=qcpCka?c#bsR{@f2A2J|d#1ke!N3T~*)$KK5t@5U?cz)Fz%D7UsXP
z<|@tqWX<(1pWND7HgDa|oOJdT*nBa)+Y{ndvLSoPch&+rY&xD(tILJgdI&6j;##U=
zz|B>9bum%Ru&Bo*xzdLl&7&35JXY=e`D{|uEmnI+Rft;MjQg{;=^F&L4}&*#!xNGp
zZ{7M{Tme}51=`;SX8JLQ*7tpRuJ1l^4_;54+*z<IZz4GJpjEdKs2Y7c8l!5Htzz?}
zYP4k3)S4GGx;CO~>g-VapuB@}YTPJ4nzQ=7sUC1#N!7NOa!Mh>F3(i2X#5S}EOfm%
zK{+uS4!rWt2biEd;_h?@61t7J&PbnBOyY8Sg)xS8=OGGTrZY~IKpsKM7>RI{^b4SH
zWXYd@j-o7>(?Agwz+a*mFa9i~T}PB**;sra7@;}xtubP6*C5JB)Ia=b6Sl40I@|K=
zb4X-PuJ2lCqLo@I`|lx3XN1Y8$@*ED13-Ca0w@wd$~{t9>=noaJPlwf#tk$8_Ou)U
z9=2E(qZtAIw>_W{&w%6a{{jpEwrU;h{~<WXcL_hU-y6?=LY1yjj)fBGTZ|xSY?lMM
zQm3*Lfl>#y>lE8*sp5NOi%1xJ{_Q>=Py_T|KQQd;WbEsZ?CWCnpd@Vds?rB1t&cc2
z>4LO+53TDAdB=(uzZ1cJVktTQ%Hd+K6W1zK#9wC+Q?!_(`#Y%BjVWII0$&oa>`yLV
z621p%9p0|b&Wis8_PnYXwR)YtLFCrPNp`2DWD}uu<V>Jc;{I~t{<|Jek;TR;=ktYj
z%;eNVF=lWEY0MV*B?-~2%Aj}QvU2gVRF1sItZEC0%WHi_pat@@p7%8VP7(G37r%gd
zz%!1KmumkE6rXi{e)%uq;J&qZe!kh?gV4_}dAyQicQ1NTS`t>8lq}6imIB-pT-9_q
z5?$|}z6BpYRAMHH0gUyI96Gx;=^OBC{S~b#T&H%O$pPtoc8#pJ4~Ja0*BI+6{$5iZ
z<6WzlHTb>b-w}iAl?vDYLoft^DAv3Z>kack$wljnYxOz?BE{<#t}`W|^byy}dixmr
zgG1s(=U4b#t*+MInUjVE)nn*IeoyQ~sIM<guzebc^!vu@=A>}~=1%!Cq0Xm1{J~Ws
zkPzQ8{-d_BT`&?C67FE)KVBt-H}{hdo>^=^+JG@?oAcwvtpvLY_CM|;AyT<(G{vVK
zK)-UJQOUoekozMdg{Qax*xNM*4c|bZgUTT>5G(SlANFdX?*gET{|nlWz?|*k7KnJA
zvKNRTsHY>QcDPaWH3*XFaM&E*bhJ(_9<)P0Pm=T)?kD*QZ}<9*P9Mo{y*_2@05kyr
z`d|dCa>%XWtN7Pp{$=ccDRKbNqd-3!0JI7S(;evopd-@8no1aKGW@Uj8EW`FSmgKu
z)*F5FGW<fq4f96tkQ5Qnw@49n)RT^EjbDLT9VO85D_rZyRzZCOsP-;%5z>YVGoYSD
z99kerlb`<~nBlX(8d{_X!+yxDj@j)`3Qp}gdS-v=@zoI%_ApZy)QLM?jjNx8Z7kF7
zlfg4ew`=)V8*qhMwyck`cRW#>XBhfG@LVzS_!uLE%W;(hui$C}PQm;=HfiiXb19<E
z&M*}%p0iyiN|uFNU%KJgtWj$EA-zsGe&O5#6k2d=)X8xIh*&RRz4f4-_lNaBhQzZs
zyJwdLDQbQwQNui2gFZvoC`s1)?zbClS)cSe)R`yxH^eT_$eZeeQG(lb4tK<yV8&?n
zV`7U0OcKS#hrd_+8E$-!e+LpBxGmk&{B$u}?ObOO1KjfmoNy%iYo1tkZOcrztaj~Q
zTTV>aQ|82IUbqy6pOLBe$mF5a5yz}sOM4C8Q_CI`FO{<yK<ejhJs7}<Ov$N8;kn6(
zj3#O`LPpRDW9l3a%iqvI(N)PD$(Zr0oY7T511DwlHZ4E<O|_$=Q^O~j8wSf&S1mcV
zT>7}s!g;X#gV4nDr+LuKPYxO<ZCp^DMUg1ju}5g{^rmNJ!miIUb4%{*mf6!ICx_)H
zi+%M3(ED%^E|f(uR1FT+K=u<r0dSGqD3f5Q#*F2NZ!u80_%s3N063%rV9Ws7s)xnr
zGrn)YUY_dXptX3QbkUk1&@T~al(z=fIK*Cg6acg?0CvyG$XsoNL&H~hM5OpM2xtUe
zGg3dCDmp~~(AXba{+dyCEpw&kyk8%M2D<EG@8rT$IRI4S;xdl{Di>kP#Drg%gXSSO
z`_`C#5%%|q<^n*Uj)2t;p8%kSBLx@Ru#&Z8;OTpy5%A*o8+j3EDexQsfa+iP@d6=$
zk(y#`IyOftpkE$P8F*@PaTM4dE}aXHYXBKH=!?pWV!lZHTG-67Hv>T+#BLrklyp2T
zl17I?SLeYQfak=r*{TOj5s-&N1(d!|hd8Kw-R4#AR76M@uT&zSCaLa|k(WESWH#M(
z55(CT^$xhHe2a4&00+gCzH&pBl)jonP~b}Cg?raIiM`qoSmQuXX&RcQaZvOu0;2jY
zHFrfYLOORvJ;HBe`?V#^1!{vpqCrzJu;Vn9eFcs!Z>BTYyo~1lRMAOPn)0*h<H^D$
zqfBIGZ6d`n)PjA>zrXM#C{0GSAFQ$OB$TbW&nc9R#yIwKeD*O#VNm)^7N33O`YnHh
zPJah9TLFKYEB4=Ezo{1U?vuxw`$m9$iJ}uy;E9#BAA=AyGYylFhDk|->GYFwo<zMF
zy!~gul>DXqSFYb_w$A=9E#l8|1)oaiE_?xz+b6_N{Q}>>-Y)!!M!d<+S+Gg)iGBlC
z-4l8Wk^7kZ{l?hs6M8nI+^-%EDtp9FA@@IGGr?uUX2y`<6ZqzLA~WFMc|djl$?hoS
ztz&zQz38V9)sG@vCn4cyO$->3t>dgy(%Efv(i?|g(_&!TO)jD(3!#ZVxnI@u$ftf<
zZ2mj!Y*6e$KKST=|08qW0<>VE@+m~&<97anOwoe7`koFO#)=J^_XY!ev#o~R$_9J|
zx__|Wv@Z;sfQHo?p_(!CXB~K*+cePLE)Nk4__sI5>Cm&?A8s5}`E{?hwG44VbUH+e
zkrq_2lKFIiPi2II=5GHtk(vsYKR>16lOExqzH7$?;XQqzBId;G`Rn$xj+!E*@E@H1
zmUtcm<4{DmL6t?XSD!Ds6NLH@&$fyW>M`d7d~`bsegn+Y4h$G(dH&8(yMweCX+kAa
zG9L;+l|?W&$e<&88lHHHaBj0N&b)6-PjHXlvsasa_8*HDi!&vS>51-@d-j^M{XGpj
zo+8}aSTUzjFTp)>&t7$wx2HkYv*z|T^?xR+_nb}jNaS7Q{nWD{;orl#y8rf0s^dq@
z>$73O9&d%kro6pbHBX14MutT9J^t9~Dt7&%MlG)GggqtB?Q)o`A}5v(aBaW80L{fr
zwOMpegPf;jg8Q#<-s!uEL2PqLubwF5g>r9mCmvgB9CLMKs!sDpcrUi2H=`pOI6jru
z+EBTd&P%^+tf(O>h)q7)f?sB9`soS3$|ol_Cav#)F!A64Ta(HYezgmcG=?y_Xf?Pc
zyyb|?>yd11;R+d*R89_pOB{p+tirD{#L6X}m!tj#2#{)rdc{68&m_scEgC%p2}IWS
z%wmCKTOYXfOPmp0A|QLjn%ld2U%i>?Sd3lPA)Knk(IXh>t25FG*z^LN1p%XrCy9Y>
znK?|VA4E7O(<$wAhhlC|lF2e?ePE4ndo;wSR?-$B1k#qLwDDcY4%ke5(KtT^pQ5tF
zWd<ZV0qRr$F}Hi-B8n+ZN(;~$g<UvYW$GsFRC3kMezmoGWRh#xhd3oQE;G<as4?d*
z8Km^imL{#c7HIEf%~NfPn8HZnHPc51QH7CY<^nl9atR$_6=B?waplm~_ctR5atd$C
zQMNxLFnx4Csxb6}*NO&-)8ZXXLZ>RncwJgmJk~YiM@;P__w}*R@}SqheJ@t;oRIh2
zmD+!LGFI<^mD;yd*2rdPO!uJbFDdlHiVg3nZX{$h2VC_ZQE#4q?Die~eP%a)%l8Y#
z<jG<bE;O0XU+jam()Fr7{txZ^pe#zInnwO2kaNBK&di!Oi=K8CA<rOA((>hAm)DDR
z&3pRBo_uAJG{2YMo|=C)`Ike&?%2C_mJZa8(A9_|G%cssqVzHeO9z5Ammd_nyz8K=
z5v9@1aEcVPck1LFsJ+-mP+LyVN9p}R9BCVWRU;7KUPfj@`$wN#X2N9InwIKuk|{Gh
zA4Z7~!qTDO(Uk`_FW(8#*F2!neMeaOOYji?)hT%>eWU;Uw$Y|lu)Wo5tZkY3-jLaK
z2j}Z#uu?CD1&f)Q#Av6mjxL6|ikTY3Xea-Hnv0q0bn^Drn$y+rAd<|dE28w0oO<ut
z|3Q@JZ(FRr3~f(L2`_dOvUVcIPF<<Jfo;y14oY_-wC}J(Qu#$sIpJ-!J2-x=ST?0Z
zi={+*){-70E=dN33cx;jU5%X=kc{Ej`Oz=5VCSA8zO-!zqpsl53Ms7XmMCQ?98Z){
zel8SA<`>24L>bd5AWGc@_ds3cn0uty@kEqPrh`*7k;y+~*iqas#!B=`5`-$g{Ei$?
zRJJxXYf?v;xqzuo)W4;l`$%ZU`sgssZkyEi8)Sd6C;Omx^>0x@jMoyZ8O5OO&(s#%
zcy>G*a9ru0(S+DwvfLK+?ke~Y>>%jO!P-UVY2tYEN^IG7H_|9YkKC~RmEZ(8^3c$%
zI+<>hMv>aG%#zmX8X<42j~L1sJJeeWJJfr$TP(_rPoc^CY?UpJ&V=3B0LiiRv2wsB
zo(9Lr{ZZCxnB=hP%lzCGMfstsm>fYSSxfPVftQp9>$k=Kk&yabLgwo2`q5waz$VyS
z>|uICZIOO8%rk*?NdO_=D-|#pjfu{L-+4*-Vk9p6Fdii<^KlCKWOhP%XZhZONar@O
z^iNthXnB5#X*eySKV$GYtLt=&g(<lCI(j&&s?cpPU`II`ZyWc{`L-y*AGQp@_gnbj
zh!)GXkU5u@ngD|~Bb)}DDcmj`iK}BF>w)WmO`Y~Su^aspXLBizP7C9^UCFn#d?-TU
z-8))T@;FnP*e@PF8KExeTfeV`11qc**OzhY-OgsVG2i2cp90Z=zQvH}D~>lIfq^?0
z^=|kb)DNKu{4d?uPCv%94vFG+&5JU|X3t&C2rI%4h`e?Ls=qhh;H9<$S>wvMA+3RS
z$q27>BFRVS>oZFmUW__p06Mhx*W%R73s2whDLy5craK3oiqsOiBfh<`NK)JCp+&Qr
zw|6MBNUEd#`rNG<Y$G?zq}-aj%I_c>ALxO9`K(o@_3YJg(irSEh?67u7-#AP#CK?5
zu+}iS+HjJwJw0wFL~_O_wJfopvE42X3wMPODELw(opSLU0<_nP%RXzF6oFgSjDnT0
zmc8gA-Mj3QG<d?3y{{v^T<J4ld6F@>Cx%UE$=;aLaogdMKx!}`_0L31Fzg$!AoP?K
z#%&UsdE`*=jg}rc6r-osII2g^H$V7GY{D|oQ`YNlll7U^_63>gWmFP&?Me*gBf@<X
zA*EDiv8^7q<7*r)91_LD1J+f=788KV4WN$O2v37`l7Ub!D9v1}zXB_(RoWKmRDb5t
zvrgg_>P<>BSLm<E``7Z(0FU>w2G-7&^rx2e)7edif3!^tdKO=1MK1iTHUG)@y=z!;
z@W+kRAgTB=OY$Sd)~qMvg4ewNxtJ2f6kldW?xxrp^JM%^rm$iG@vv3f%Spb>YK7v>
zPu2||CizO;6pCj)S=GFp<jr(bDEN*xeX;_-oaD|tdRmaHT=3o2?`iQ%@u#knTw;1`
zmc<LUi5aDDDgn;bPX{!ussOrniJE$OBT80P>bjc=<+)R5j5F2l&!?tUH-}@ajhr7f
z43pV$pXCfgRzC2HZ$>J8N7HkL^H)A_iZh|b?IM(Z-TJ50``xhN$_E;8CMoy%Or_b?
zg>L||B4*!j$ITjVrl{FzAK%{MCC!Pu(mLMG`bI>S#NA7Ad`WwPS}gSm-)AE#!-@fg
zQ9J<O6mq#h-+p{C#K3+AsgQP#TIs@Uu`$#7_mx~}t6{-|d&B425tdDhZ`SoICfL#q
z?$V`ht(Ies&$bX(?F#9x!S)20SL(2ShGzAwonbX}=FJ=|M%S1leW+jrn1wulzl}u!
z!p=^ar43}4KBA(OZ)(1Rm#?9vtMXIV&yL~dh}cuNilb7uA^_jWmfEJF_z}J>C;uj`
zcMyxiruXcTD`J^lTHfLKhvivc#gcNc?8LI_QFRaESa<dnLl^(yqGL#nMB7v*ya_h9
zud{$PUdTKz1WWFn&pNmlN$9VUB<s%QnK_6E?gB8*$e*4MIz}g>r0)uiS6GjgRW4<g
zpM4A@kgw2d6)~9CNKRQKA7(wnQ)j<nfV@K8+8dXRv{h>VJm+G#Zx22(R@oFv4@hqe
zP7f??bPF7dLNB@$?|s7MpZTO9vy?~J3GEC$N%3MV2xYo3?+JH<ow^<3uJxc?OYj$S
zD3jNAzPjo1&+K5s<zR#G=vrh8WSrEf3p&q$WQPQ!ckLKoUD;(~4BDPIj*?=TId;M)
z=`cb5#gqZKwfr_@jzfCuOMk_W8BywvTz>y}a9Ymufc=FBTCnXrk^4Tp1McF1OnlA3
zwJ%UZw<B8k9iM2EU^~)l8Gq|VFYPr9v}qfft9LYW^sVizrz5r}I`eTKZCE10n*7nB
zU<LCzD*ld;Px|Xq7MnJfSay$ls&KPXQ9@}Y&9&kbI0~nhRyvD-S-E2|%O6miR(i?>
z>gext)f=}Vi`GPSE@Hcmvt*{GGO;6jL(d##ZZrpa;FFp`YEB+&TQotQK!oG%2_@Ja
z$dcHhwA38XAlU)v+J|esWsKZAy5n6jzVZ7e<!de`;b)<B{wco$X!4mi?^{>uU&IMt
zWa4}nxU6e=sk9g(<&%rOw|^9cwiwhhd>ig=^15c9$S>A%m+}0S%)DpgtAE;KP5wfT
zP&0>$Gux8ht~<oHZ@eq&zY8>_1d&6xt?%HZ!+kwuguC!|?)%{D87tTZlOkBh>6tsa
zT1SW)(oD1jH>^Vp`pb&x+=SYW1Z<hV2U*|k+y+yTjTrydWw<B>+7d+w36k2S@}crJ
zaquBNn_EX>AGg?+YsR3!U0=q4hfcJ9ubAiMkpeO8s-pB=bJ~ogT@i(5vY*RYPSr(~
z9x-v`#89Yqg%=_oeRg756D4!a2s^E-#6RT;kdAyi$g=Xkp^$Lc#75-ortcp{WJH}L
z4PZN$V&T^$!(nhvNvZQf%Egt+|G}V_GNRt{%h&GZ;&2Z|{HXRgmzeH(Il(5#l4+&g
zMmw6X5!(SUM=Z)N2YW;k!#`BsMaB1)6n#4<=zf9#WehNVXyw$=>?JM3&c$R7IkFHN
z>&qHJxjmK|CsAD4s*8d^AGyTA!aX{GG*<ku^w7kp|JTV4qrq(4puvds%K6ihT4`>O
zLqv8Sr(aS&QYURsz?OoVw*m54f*WkM=vvYkl88s=DZsi+E7sL5CU?Vpf$>*9AmAJm
zw;z>ZxgdEV9s8qq(_+j95WbQ!yH44!C<LfD;LkGx)OQ6lLWXx;6u(St^pvnfFe)A&
z)QJwBV29Zm4}WQfhDu3mypAJ`(l=hX%t}LB*W8UG$9Kp1i)68ImzDI+o<vk*TpTtO
z$JTnWQKp7y6M=O;iy75XCi5A_^(7r_|B(Cz5SHi}&)gr~G@p@NC#kTHb9E_^=&sK#
zk?5%p#55xWsI+UE>pii1O_z5S`0B|*(aBx1x(lBEn@(|t50z6aXYcOE+}##mGU#et
zPjP432bs;f_BF(Kj@{X&Ut)Sbd;d4+H0Z01q;nTQ@L5cEL^Y&1(FkstUWj6y{Q~we
zPA*aDX48y_C0dcLzbUyVILXst;rpCCJNpIgvz+#$(k=g9=7?D9z3fBU2h4=tbT!FN
z--F0t?f2PBB4X}t-Twa({tGAZUmSsboKs|!-t%b|1T|evcdcwE?_I1!7^P=CeHlSb
zThm;N)5&|s{`G%V>W$K~n7)fhqO0kvHSgpVv`=;Vw-S@_^rcSUP$!tlv^(uF(?6&?
zE5iQy^!-kz{}HJE?yCGgfPE^V`)oFftx2|J@fNe58<_X8BD-GCQ1n-@b7}}fwQHMO
zaj5yq9Cw*F=I>MAcn<$B!WesfZFj3IHD85eTyP|h{&P4BA&m}JLVxAQm5wrm$Iybv
zvkMW2ddm`C#nYG+JXW!z`z;hx_$}%ie}Z?<>OD%r8)!Wck0{(<%#%EueiuG<&uPji
z4GHt|Fz-->t8{2&%%fJ71`kk`I}Uc!gP&xRwk%g~CEZASffy6ELR9e>7_Ub27(8E{
zf5bpqad1=NFQNS4mq!dV95dwhzjPI|qs6D2$7S<xJYTz?&v*CmraI|2nDeHugIfC+
zz&bC9UWc{ZNAi($9y?;6X>Cqd{lb{xU83aQMm96Xgs$ID{MAPITTKt&m#G*854RCh
zx8f3-1O}J2JQz2=Wm|S#*!I)XI&aV+b*mSlNmFpy>;r9ZztQj#Scia{H#jk=^{IkM
zUS8QJHEk=-k`I)cx&++C%!Hvp<}L~(Q&#J+_MDjqZcGyOqn3c%+ShRibBym(@`MH8
zsFvL%_?secSPqUV%Hi`yAa(m&9Dx`2iFB|3&**L%&L3?O^L`?d`q5CpZQbj#ggGzn
zQ+~<*!_A2QuINXY0}EKGxp~SP_Sf_rL)bs-aQ{H>I-2?s6ldtqv|X3bv=pa&G(g+t
zeo58MQQhk{ykS+;7jkz1ZN<$Hp0Hd0_w*g6)dKe7ew3?ca^f%MY_=cBg>|nnlm<m>
zw#spv<R+F4Jsp4XMLx$fn8lE~dQzOxOhCKOJHquk6gG@ZG2~~-<IwhVwj=&>|8Vp-
zsbE~D<DBzIx!gYjt-g_MilIFF+Y;CW^9klzjBIAFi6AY*{BTBE_G>|}u|Y&`$TXkh
z9PyX=zeW>&Ey}&jAMfn1;JDIX=8WT>M*+^yWj`e8{Q$-j37zPM27T;KZUuE4!i(dY
z+FmZ$C>=X_y&8Vl>K197C;M|aBivbfIc!j;K}1f8K)xjCP2w-mkEM%jk#C=q5h+gV
zN*j~C)V|6@-Lg*ILVqDP+LKZ81mwt;`NZq>8r9&dQQz-jd8~7lGxDZ6*?XRV1lgY}
zzKSbl_~JYPpT<iU5j6=Im)f6d_{(tBMt`!Nr`}Hx`nlqQ_t4XxMQ6SdQmMc_Eq#4S
zlc&Nojw-T5`*{ZoH?>ZAcZBTUlaN_@6$&NVrXA$mN!sP@5p0?~<)-0O|2v72J6~I%
zBZ5;?vD_59fM-dHX~#d2oQSzWCLKa0wINhvW%Kl!`fY!V;G6;WMyfgDN{Q&dfd75e
z|0;JJO`bB-*HnZh+QuE1xv90wn<H>EH;g+-{?Ea(!%uVLKL*7z(+67aYimjdGeyM`
zuC4{3t<NK7v9k%reOJx+Ec+It>M{h91(%#V^#@XV>0HFViYMY`kbxAi;L>{3S9&E%
z$Fz^!EQz+VJ%z1v!?MrsAE5R=PGCPO)v{00EQwBVFvYX8PtYRkt7O=@Vcuu>RS=9y
zHR&TVv!E4hOQGxRyJHa|@HZukdChghP98yvRDs?o9gDuZ*n%tjQq2D>eT(Ib7dAXh
zPw6POXw(&`|M{|^VQWh9#qk_QO)yNiH;V|)L0>HL2ZJk@-t5Y=oTd$z%d?8#)bB|!
z!$>@5QwKfo=};7NQ*ifdEb!e>)UoK1R6n|Fp32#)s5858T;k1P58pEHnGMJO-L9g}
zV1ju*kDxifx<$&}wgkHTzB}e2oPvs}COt$K(*826!=lIV!X=e6+qj40s~2|jd#}NS
zCW;yTi-ML??+zw-=JyGjXL0T;rds|@2^;iX^`zhBHPM^Ur1&fR?GpZUfPZn!UnG>W
z{cG%5GR)uj9xj5a==*xgzMRmnasJ;+fBS&{vE#Q>`sYwF1A1>Uo!d7|Z=G*rw&4B%
z89tL9HpRLKPA!2&u6+HDgyIxuDs_-)54n0$N<|judg@<7GN*TH#c$B}-DQAbu$y4;
zOypEh)G_V()Xv-MU(Ab_;{1vePuQyWo_c=j-Tnltd__U?G|pkgREwU!E!pQYdJOXR
zq7^3w6TSjP4G)b-oq1h%f^0qyq<}XPD<r2>bbog-VN1sFe^?whvexNO=uNE%=G3ZO
z06v?n2xqJ0nP`7Av5Ud+48sn0PqK?jHSN1+mQPn{6%Rt~^Y)t=h&3l+-zd@|(_b!H
zS8rJKUaHpbPinH&G3`xyW^ZNKpJY|7SZSWdJ8YY3(R)uXf8y>J$>CGt6|<Uqv9Nm7
zAY9P)gy?Gu`a7@Ha1dk4N)L-((s)IC5?eJ-xp_FR!bQ&He^2rnEG_jf<;EL#e#QG0
z&PiYXIkdls_Nz3}pEP6pJGg=&^|ZV^t5J1ymiXQdmywo|$|*}FBc@XH6{~g`Q7f5a
zA&cl+mK;%dkRXX@q-h7@5fvHU^&)bMch5LpJXZho;o0Ml_Vwxc&prh`NO$%3jz6M|
zT|OJA!?tVhOcxApPgtdIlr)WEd|{Y|_ze|ay`rR2jb2TlIrm6KqV>dSc7~l@zOJx3
zZ+cNuzecYG&|Gk&BGr0AvC8(J$md3)Q}pk2<qDI?faXEgbbn1xWPZ{5*DghByZ~U{
z(<+UkB(4#)JYArMLZWrix&O4*)>)9B+G$~uG%zpLdNo(~SE?gd#gnV6slv-$m_((~
zO8_*-8L0@c*12C*^7fnj$6e@7L{57&hx87TGIL~z;#38mRp-MxKv4Nnk5F4d$YWuH
ze50D8VPs{LMI*0`pvVib0zM(x&5of~IlR&I$p^C3979sXaZX2{O=@3(UcgQs(Ri0w
z#7ZC0ip-Ntn5lckmPd)?B{zu+&L)neUO80iP}n-O812>`)%PHsEw~~|Yu`-FlXzIY
z{k%!^84-C?yD{y9!#abEN5N5%BCAayVU@(mVY?v;6Na5f^t(+aA3U1xXz~b6--HM&
zQ8q=nUxviR-4lGX0*MO?rgMlix;snND>z8zA~=Xs8hT<0OFid+#Sb(xTGFu$ROz$u
zmFsiGR78=7V%iuzX`M>C7_D5LBwQ9uV%EI+;wGim9eS*n3IoLU-Y>tvbNPUfNy+`e
zh4PM1C<6f^q_y^)<LQk3rD>HPL@1kyaU36F=^W{{8{u5Y<=R`M_T7ODdvhU@|6Tgd
z0Mpqp!y+}iIXe8U%$u7bAKV*)hwX2NFhsyZOl#lKek)tQ_7;tOcQAu9Jmin`b`S#r
zJcJSJp!7meiTzdlwL=d}y_@KP>c^*<c4_fW@aOuqDF&wvlS`G84!w6sEL@HyCaIs0
zZgm8D@6H)Y*3$fuI>8O~&zjQvW1fySL)^<f9eHo)N8*jmw^VsJ^1eQ37=K_jM&4N!
z<iu;DuR!}>qi~tVUY=Jr*XDFD*Czb{V%t%kHK%T_y6VV#NnhcIG4j7hzefGt0sLFq
z;K=(&J7@Myp1?%?7Tb4W{!O~$P@hB#VhgbehwGZw{+@OO+c?2>^=qkVK>rUYTae8)
zxbB16r0bynoHEu@<NZ~TiT$<z+^n?7n-i}(vR%@D^1}rUa%8)u{{&x)yfrcCgL|AR
zfAqoohYJsY^>K=rXie^q1Hqqr(}`&2IYCKAbZO>xrxJW_^k6nK$m30Yc9}d2zo-5B
zj~79`^gK<E{Qp1R-U2F)ZC%?<LU0Ri4Fm}8-nc`M;O-8=8+Vf69^BoX;O_431b26b
z+sRsc@3qg~=brzZbMHUKJLY_N>nrI&SIw@P^Q$>wn*sFw2$D|;&*3DLaNzB+O<+(h
zeHUkjfx9)W%9YPX9?(9Kb}fj%j#v-PHy#!TgdhY#@#+)su5-F~P2L8W?CIa&l1uPm
zaOpKg9r5y^=)XOyN^^$cJHzx`cX;eF1Z!Ew{r%H6<SCK++q5>~Tl8nBG;uzXp$Wb<
zOjb={Yj?&FO#ic?-qRt7Q*_Zg>J7~Tx736w8q4H*TmLo3cw!`D(S011;4?_j>kaj;
z_#o^_$5cMkpP}^ivLVKz3(lz|34sDbU5bN~#NOEF3}}vedMBP4ci*u<VuShWgB%TM
zM&Ega>z#6Ud$9-HZhIYyV|~vKx8x{AJt2xNv#$4m1k16hXc$-<dKl8i7^mUurpXdq
z(m7i3&cckn>H|MwgQPqMcWSL~kMJxB7dE<JQqQIcMxD9B)|gYPu|^XmuVgYKZW3T)
z#8$pa$1;DL_gm{|YcgWAhU%m}$LcJx#bH+Jl$vHxfEXKp*xkjqzk~%(N$kvL+=YgH
zmJ@P&A97>lvJC}#rF6+$xNBl+#(`mjuVf9Qbb?y=lT@);GGCouHep*fA~lcrQzq_m
zmlUB8>1_y=4fOnrLB-<-<7YZ!PZH*_r1@5uIOjLiHoivK)F5AHzv6qK8grZ!haZg#
zMp2{)S(Cp-P4M9r&%7Ci9G`bUs=yR&E^>LLe(O7}+RWgeOx=gsmoj=QbV!EAj-L<O
zix0P86dD@c<zB-2(8cPaNS3;TW|$@*u;;t)IW~wg=}EYvBJlhA?wJY!#2*GKZ?8s`
z{ho;gt48_F#?wVQ2s8N=nsSXh(K<eOy~7!kY55?%IZodGUX5Hj$~>^q7Q|UQ`knN4
z8uif(){`|v=W1Q0`BsVEb2|7>WcQp7)p6MP!yWh5vERVzyzOT2WDL<k0OODlb}M!d
zz28}|-lINDx6dDSD|QFH-)XS+dVjFa<vNzouN8j0{pHSVU>%$VU)^@!A6M#?4M3f7
zHcvvHld^Cj505Zw((T~-bxfbnUgqf)UCBU0_iHaClm=ET0RuyFIG(||^eIOO+^Z06
zb{ja$&OPr^8AD7EaMB`5Zbgti$1UA`7cT-&YK>rj9~>TEWQj9BI{|}K?f3WEn)dM8
zkGj}|*gY36XYR+B35BvVtmpp4=6b-8F9+}OL^~+z2zokzb+3Cm-`-L$!Jz4(O8F(N
z8rMNu`D)f7TKQ8lh&}6$e5X&S)NMFqSb=BOCF6#vTqSZ=nn}>{zS&g2csTt^LoO2=
zMLyUcwYAxAdv3_#QjyH9CY?&d?lt%n*Wq-^^Z1IdL#E=bjK;S-+V;uV)z6ZrRiw@f
zsN9yYsWpGM-;Mv>^Vy{%YLE;#M$K&e`{Ms(t<}$+&I=5wY$179>z|tqq3Kg+f`8$%
zvpRd~OlY3N#^+^2q(9t9fhNOuV3fo>1IIe6|1Gw<aJzfb^{h&py97(-;NKzrJ`udj
zX(mBazQ4t0d$8+o#G~Ku32r#cw5o{y8|pQgV$<XH1pA$3{tJ>h`TQIA-^c!!Zbz`+
zX(myVX+SZ~-w=i#_b*6X<a(B=-IR|-zfaov3oDAj*d6?b8|S|BcSJb+8~!EWFBr!O
zUhU7l9pe9W7fJrVj{$~WJshiqym59z<lrpx%6Z(i$&^RCihy4IWyR4?VgRb>3orNw
z{e;;Ow0~R17$K^2CGUi!@7elF(=9vw^YDYr2vt3zLjR>SQ?o*RbrEWtK>GBNr){Nn
zWBBIHR~vKyeD9=3+N=Cfsxd(f8+piN#n<FY?>{yd5EVi9?+aA8elITlK8;b~`h{~!
z+E}IU5H5iyU#G;AbI~nhN9mxNdYZ3mg}^wi@`{d6ATBL^P-bk4eD@s9{tmX`@vWBU
zx8L^rL6xYjYA47;FzoYg+1C3Ww)h@u8|BBrGPzctNtmrTFyNA{HCgF#`5xKF6L}k6
zr+da+iOnB34!CyoT|~`O_wOz^oFyAxyr1X($Ts`)BsRTLMpn`(w^;>$p68<|a^!f-
zkXgd}B$d1}ilYxnT>ab974=aT$Nx)Y4tD8xh1K>`S#?l_FxSH`_D3v7Ve5Z8@5Mat
zRe6VQh5SunjRhMauM@|HEE!^9+G51}V(m@cJGyVddN7)A;yR3MI1qgGY#_^_wu@HH
z`o1n24!LtledT(^XWoK#{0%&(nsYeK6R$h9M*as{#Yjvlarl^QUx^7pQjolOvLY&Z
zOqclohxp+mDXhHsH^cS!3BZqJNRffw|3D0;AA)4ceO*U}`o2=d-vj^lH(Y{h`!K%n
zuSH-aLZdcZU;f8hf7!slVBHEv$V*HS7T?%LVcW|%#@DN&*PU<)=@2qwU&(jd(Ck-X
zIZxl>JAXss7JyFu|Ibz~C8Jh}iYe+Jm^R!ptFUENt4}P}{PcfhKRvi)F9|6B6i_bx
zK&=uPL)||RW4I+zVN0quZ$Q$z&{xJrJ(rGk8TU_{?lsMlIYfNY3wR7IF3^hT|I|B~
zt+Qp0YxM*Pa%>2m85uEO!O)50knO3K=ByO$sod^xJ8cO`LiWQm1jHO=%+&8~tY3ma
zojSY7+efomTB16Re|(WNVO83vZ4fo#JN4dbLeDdxind>Uhse@H2=N7_Ye5)uOMPkW
z2xUO2O0{8H{MF)!Nas@5RW!;piIq;cbwAAgL}u2-9P$&}v<E!@sphogPLDKns55kK
z#L>1&2CP)?oi#{j6zxnq@Eg)IWD=pv<oUF-;N7&Wp2$54){s3uqx}{cYxgs9^B##U
zMzujq#2GdYa<u`qR=Z)di3hm#+_K-`TIb*IRo);@VDW_W@*Z8ayM5E*Q>M$f**SZ-
zgLi8%Y97}=#F~E9(rq#MWNnO7JD4H2P{334eB=p~B%{SF|Ay$={@Ug};4QR}^)7@*
z1|i^$zn~Wop(^zrhC}V7DBO_iUDflwX-#ii>x9XQD4_@V?E0L3we0kx8E*{6#T?@=
znohgkB0RhCEr+Qhc(S(O^B!G;A9KC#wzya`=fIC+*E(5iHG06O@jh9DzC}@n@!m2~
zg>7x4qWGe-#;%I!_?K%y`$;)Y4L=e3SBRjDw-Ol$1A5dJ-f%V@jy3|Mbs2DuU!V&G
zxNc-gjyAct?nb0rDx*#g|AGs5u;(c$?k40b^Ziba{|0G6`|@}n^w_I93FhGO$6)2j
z`T}8#<N&6u0#K$q{4^FNy58D0uK+L}o61j*ANgwjXaH<us)aB=?@0B<IiBaFxPK<s
zS?G^*B)&PpDb5`<+E*EBP=|8mtT;9+Qc^0+_cW$^;R7<8-0JW$JH<PDFY)MDF(;F=
z<BY_$GUsafnd<`846A6ELbj~g%kf8F^7=ykxSY3*=RcBt{t#7lT1-jXYm!P5XPgR;
zXE<=59x`|Q9XYUn-GVXZj6FcJW}%jU8A+jwXB{cN(2M?3Xq~Rc>0;6T*nytA>xjJz
zfl-J1Gf-v80x08d0n~9f!zNB;)g<1=r89EFSv2o5*=(jq%({C~JtM0>VeNE2Yg!{?
zT(M!6Lb>zf>cS6kq|aJ*>M`?+H*<eQ;0t-05ueB?xoLduYuB|tWT)3$C&m>tlwUWm
zNtv6t44#H41<HHP9tbhwQ~AZ9Dw*W?M>6zIr>_l)CW6o^Y8^VAH~2cO2?;*03_B_M
z^!WZbrx*k_)t}+mJA~ukMy-+6;aFkR4_(G(Vu{W7%Q@OcmjK#-gsjVoj)j|WrJ78Z
zt~UmlaI{6zOV5r56#50P>VNbyQ;Ao#K4NY%TEJNBDtv+G#Ys6l`@HqxNh$J~O57_Z
zyH#RBhjgzj@=`_oz6fl~Hxc6%M2W1kKGCR?43vt@`%*Lp7&zJuaRImS{fH($*9p5K
z##J<j9Bo<ncT5X+*wlw5%ymgw7?RbbKf-l>s#vh8d~WeB5#~pGQjYYb79Y0AHYO{G
zTi`0j%Z~|t>B)<Xx-?w4l9@%}IB4MWeI!rgf2M!T{v62}mpwvSU?;w>`3Ii$h&O>y
zt&_X($p0@OEok2KGX!OD-=c_emPL8udkCiXH_GJ#^uSk0Q=`Hxk+pdJi=mrGqUVkz
zE{!PUtiq$#+E1GM&P-kCd*o3_WWl0+nR?1({R1|a>o(?s2*eXD<7LwMT9f5cfVPcl
z?mcmx-tt6`4|8IOKjx%p*wBLU53>?I6ffq|d}G9XoV!Xd9iXe7dVK1feB8w9ZnTf9
zg}ic%Rc4E@3~M|4t$L%D!)8eAo$jCTl`{G2-Js#<C3cQK?KM4-+}K|BEf%@NR_7}}
zXxF|QMPE-K-aG=jaP{5xxt0s`^e@7ZIHv~XG{bL8gMyru09oNqaJ=UyV$(f`+0L7E
z1oeZ&-HggaVQUe1zQiNx@+q(;?R>3BLYkUyu{u}EI!{{{=gDvEu4|cMQ)lIz<5$vF
zPwXy>QOUEaB3KvtaozfGj|@Y3{Pc!~V(ydUa791165;h+v{D)-rh6W1HTDQB-J&)j
zo-o+GWJZnDC1~#f)H)Gn?HhMIMmWTcKRR;lc+8TG@g@<n)B9tbG8g;k=whI^m6hWj
zmP5^SaH=8~^MrAQZG>&qZ2*t!T;S0KQGn^#61sn0_--#oH+qL(=R;e%Bc86jxIDfD
zS@A!xZP#r9fdtZD6m;Ju!@V@}<q_;~ECzhavLIQkjyPKAbF?&UWUJ7^n=cKum=&!t
z2is~l5-({Uo()*$d0WUJ#CgLH^P9LO2HE?B!q=yJX`%}^EoQVyB7J~Q6dYe7i(EI!
zj~0}-C@M5ZeLS2Ezl$9+X}&M^8|*ghl*N{=2GEM0(V)4+!X6sQaFRRTMNzmF7|=T$
z=0ww2M6X0x7xuZXD0q1pAoO3lHS%y%4P|w3Q;8~DO;<352kj@=h}EiaM0*s!$79Rp
z(^4AAui2mNT6V%;Dp@k;BB9j#;A<$T6K*g8D0b8=!XBrp&?Q$ZPuNjSZ{@t}e^CrA
zKkK{p;+TCAE`15qd{MYxcH4qFn%q$1F+o87+}5oX5S&Cj(y63z)~^hx#t`Fyxv}Wx
z!Lu1vUaG9#Aptch1IjRZ&AZRk|BlP*pjzdn5)3Ev?*E8Qn;O7*JM8XZ;QShJUaUdX
z+q`;Ry`)Z=x^z0|{{>@Z&ax%DUJuO+j|XP~ty?#mRi)N(%07BAFPtrpvPpzsK---p
zD3ULFhR^Ldt!&ASp65fmOf838WD<nC$L!$JxH6j;&3A_Ial2aFkIS6zKDb;O67baZ
zX6=9!pXNFX?jIN9z3|*Be&i`6cxkvkTMo4zAzxS<{DRQCTE-W)?UkP2G5?7vIof*7
zJEnm>4<mYQ8vajfkW~NM)vw}T#Jk>m%oA?E7^R-+rGjurota0SUBm006UFdL%$=NW
z96)ZDK@DOP+yh8F($(h5)@!w>Pqq4<i$m7k>l$V)g2O8LcW|sa8QauT?!Jj-vKJWt
zJ2S@KKSOo{gA*YJNhqgNc8@{vKVmn$Vz3L7VBA^{n&P-oRd%=ppCczk%m{xDv#Gcf
z)Iy$k)k%$I#x?bnr|&|U>;r~btKgAJ{u5la&L8HlNZEo1I0v1KW9lgn--a^T8;t!H
z!4idh2e@kKj2X%)PG9vr*#mU5l>giu@R~r$w|`58|5ZXP{r>{W;}sQzPRC}4s5%O9
z9e!;dd!6z=C&{Y)(^GM#r?MPhQGS}z)F{=y3C2}r(7l?-Z+o1!YV4o2yKt3b9w=Fs
zt)j4DmD{tN|8kAl+T3nU?^L8Y=`9o<i7zZpDktCX#g_e|K*KwCGC=Ajps~|dZ$prb
zY`^DKXBHTw0)9t=A9tH0_<;=aK^prEw;8t<pXRL$#!JDz%G6kC;*S$EoCVf$_0y0-
zN66rpER|AS#Iq2pRJm^ELTAydG|dvh--I!mzmB8CofTxF_>aZ^wYl%*ObWY=RhGAY
zrP!1jG^=ptN~JB+eNf=cgYn-s7dj8R$ISpGJ^xyy<*i>Rx~B$>DxA3#Uc-86*-bC+
zaEczNq^#s|d`gOWRPM6gYOo^DTGX`X5`WRLTu`vY!a3Y<y8aR9VKI@CSu;D)dXsbS
zaV3Mh8*U*(JzB6r-}U5Z+nTZ$=CI;~S1tph8g-!`y@MOQb9Yiax&SS_SU$eEKJ&%A
z?Ci&6S3Gb49+cv#tfn2rk{nBOW%)8CT`rvoctrU|t9>G9^gc*VtSHOoy<9CGTeI!9
z5b$|v_3F%?%{uIDjE9Xhu8dpGrqySgUuSn%FCr|EGgYscxjvI^Gl$J$_e$P_5brlY
z2QOYiFRj;eM|&4=i&qgAdLJ~f`(ux-`F1&lROUVSEI)L+YO&^;*d%#Mx>>6xwZzHH
z4-#KjQ1H|o$6$z^Kh~Z<hMztn?>{WZ{IvGv<y&AUZR#aiIk-m%=Uq2(?!qQuR9<-y
zJ-+yG;}ZFDxy|=<E2Hzo=lQ&`!{>ReF@BYTwM<<nt|I^u&Z$8N-U5~73;T~ajjND_
z>SNaXEbcv$<%OdMN&Dvbi8NTMqvzqtr&c;&=f=iVjY}Sr>=U`zvzklera`HM1^}nm
z{0ogKq!@FeW@1=e2)hyK4dtdB>Ak1Dh@t5U>qTkl!?-=xUZvksZNN+M24B+6qNJKD
zy~w?Gh}OzP#!4P%Nt(p*hWLq7BQLMDtNYRYh1m`0TqE*@{7MYdLF84qeRi5tuqTZc
z3DtzxVuv+e1F?uotPo$^^wps&pduXiTCR{V=K2UXSap<phMB&Z?+6%FKWltko#4iC
z*=v2YfcG+PoD=^NeGslQx-olxTfNtdWmdSQom4kVcC3`|wfJ$=BC8~so(Jiu+28XC
z$I)Ji{dr@X&*&beF*8q9hw<pn(^!UjZZgQ8ex5aNaZ;>Wt5s!GGk4fWV^ZUOQf{$Y
zMr@DyWKUUCS=~~LBwsSTZ90YM`g2cw%V^DU{XtOs_2tg2nTx%WtB3g&#`Jbcl|}@P
zmYR%PUWF&2r3})wVpnR=gj|jowHuYBd4-f$vZocpQ(fYdzP`DWG18AXSx(&G1}zE8
zn=9^@=d?_#mkA|FfYw1??=*DR^h4Kl(mnIE!%nMt7p6-YMI^IG!P19;92twKB4OW0
zS>P6=e&eIO;(%6WkhY6|a<<ojX=szi6i6p+2<6K5n{2imOP_}D$8Cmh&=V_7=bFl4
z$qB5uxg9KXH$3LdmB)T=x+^!u!$S?o$No5{uZDb}^)L?~QmYfxD%Vhc#|+P|v-@>A
zd=EWo{CHmszIT~7ZbqluxZYxjUhG_jtBYJI`&P7uTNm4k=#OH9-)d5c51XYr8#6Ru
zYn;Om+&z_4jVP%|O@L))#vhU>vFRr>CTknAhe3{MQg0!$`Is5|FwJPdi-X}AU9Z3v
z@aizKgt$*RB6LVmk!1j;@`~)>3KJ~mnxB`x77QM=Jh|4ou(fd=$Q4AB!Dtpyh(o5Y
znbq4uFd4EShfMMQE&e6oHS<ExpRs>n{7IC+1($7tOUC2y;}5CCi#gAcYid=5yHi%L
z2dLP7OXD<)@{nFwo}O!vGycyncc)}ckk*}Cr==F<+Vlq{91OTUZK~MN>}}5Rue^Nm
z^oXUt_1mB=A=I{&e21@XKVpD9{!+kzc<j??7<FY;2c6s5Y(og1h-vk8yuZG-FS{;p
z6RdUn;we%S{7L)6>1&!V$X`ds8s72xajSmdnUPtuu9&{ZaYxc=i#x@j@pJz*2Po+&
zEsgJqE{;1gUt9Po+Ujvhog4M>&!EQI^<Q{k{iU;Z{j>z=PK~q@^j{+uo-k2DnPP0_
zt~<I`cxD{hfu!7(sA98xotzuSS+mfH*u0}+b4vV*PvLTY!)qmLvFQuBEBEymljvpy
zqfxPW`bcPXIVXbs5fWt6mF_6vW${j!yJ{j0Ps@8L<@EEre0MIYm9T-GtY7Haqj{&*
zb8*f!WhHiW!5mdVe88%v#|uB=XTGYALw>xmjk44dX2}+^c}<~8QM}C!{=~1-lEVdS
zv&QZy?0Ml*!UcE!6^F$#?kHFYeYdm5+|d)m1ux`GdEx$>radW~R-m9t=2#5HUopoa
zcgZXT61lyT0gvFT*cziVAoUB!=?88|nNH?YnjznvRTt;i+CFisM$VAi;#?@Y<Zljz
zzofvFqrG+{Zj*jH7x?NwH*3&dF9v=w5^iH6*2O_74}nn?eM>{~CKl!OV8DN6e;0eZ
ziSpV-n4bXUe}t*iwA96JTeIuJiaG%cQ4~DV&!s|Jp6CPu(^k=%sn@TkwM?SbVzQMU
zW~%*H_2Lo3+p<ovxshbr0M4kX-}2UQoH4gM>`u9xUeR|*o-&!POmalThcHo<boc~z
z12J-a$E)R)GP`u(L0Ck`#9bOb&gR4;`dtb>z@T?xDC-o0hr&Y(tX>4(y=xB65Zj&L
z`9{IFjctvFz6VC=%VOgm|C<7^+&k{^AByDa@E_NVGrT<uy{Zq`=7a`E2E`sB|Hq~j
zpzBb%eCGI4oxO6#b7o=wY2YxeiOT#wGJ!9EHL!v}oS->qKugeyny5Brw~X1Wj8S_e
z3*0l<aAJO9o4wBMp;Ws8OLYeAr7FObl{B>b>}8B`!{js?%rj&pQG-jvWL%Dd54|RW
z9Lt5+%(2aDALUWM9KPt^_hn61&3c#K+pp86!hgdx{L5?L7|ET-dqDS7n6VoIpw}~O
zr-i&N@NnZp4S6T!qsO~NaCgBqdwg&5$kV7UpGm(cnmU8h7agciTtx4ma$Rwljv`+x
zd@p%}_%8BOu4oMvivV`s^iYjbO?>7fJ(*MD`dCkk<He1m*%U#ITZVV5(*S2w^cuof
zbM}v3esWOEQWc~m5KMPTzMfrFLO8R1sy)>VZz}3XKNc8<te?yttS}J{VACcs_1Ji^
zL^6iGj0+eRR`6B^T59%GZ1=}=C>*oB_#R!ICSAr4rUNu(;o+(TrCe#qfGBivM3Qve
z?MFAOLRMaHfZ~$P2<q~6u{4^II7r{TGuVs22TjvI&7?5tBJzK4rDQU-`~sdk>aId`
zQ`#K9R>P>-(m!Or3AmJnfOF2<`Sn~$ajaj$W3Vt=HO4xyKtjLpTl_sGKH^c=<Z>?J
zIgj$XfiZV@f;3}R^^h)&L3{|a0;4fyAHuYm%JV3<SlAG^igv<P)sj*3ce&E<l;-~K
z!tQjLmqc!|20>DmL_rp|tXTmJL2={jI%E2TLMzb__;iB)CK;UqyEfdMLyUmb`(>NA
z2;a%GIsx|a-bfGWf7Hk#{v_jT&h|hY{4g<p5{?Fq@wJckKveu^Nc?L7e+~eMFYH$D
z>7op4ARMuC)4mhqoU${<qD<edx+(3W*Vm6;NF@#9g^Qc9lb@7U<2J?*omt!<5{CsU
zO)};IEJ@zRcJT#`V-`riEDqBe<iue{kxh?WOw*XGg#I6<PD~3aLm|dl%K!zpeW$7<
zZ%4baW5X)93QE#Z;~M|06<$*(?gjkep>WYg4<?#|m2oSiA_m;2hVe2yaB*@Q5>aq7
zZjD4873yiHnqstDi+q3N?FpT+!h2h*a%x>>*z}%n#95AR)H(2I(3Yctz^C*f-P~zL
zHzAHyRC>S_d>PH#QZro+ogvS1U{`la${UEjt5wXar}6!%AYK`~SY3hadgA@_A^nD9
z_sRb9Cv<ZjjZk;JDKGT!jljid#vOnq&3pTk=`$S*AMWr<@HU^|1%2intLd|Lv^}jW
zAAEC~?@vCVlkm)&#W6QJSMVg0c4H5cyB^%G^cA8x64!1>S03N4mut*8@Sb$Yw=+7j
zcfZ3)STJH|OK?wR_GM>aCGx#Oiqu0-5R9OliWdw`q4)to>X_Mv4tFU0HHCt~_YIev
zE;*c3MjI0P+}AfrvbxZ4hx}h9<^HJuh(Hv|j+3ZbwxL`cyqp~yZ2SptqW&pXgFGtt
z%7VSmA@`GoS6ty|X7mXIOaYu)>bh_p$Mhbg=(#{tE;)U2i9_MQl>Blu49Cn4X~lR!
z-<14Qa>ZLTxW_k;Y#D82=yRVX`gn3b9ByC#dVc>{7S)?`8DGZlOQ|^b^<JK$3~icJ
zP7C!{0UdN8Y?(qq>pLNzFXcub74E(&Bu9xJBg`Wn9VN^me(_}3NotF4CY}+C{+D7;
zm@<We)K^}fA_pzUJ~I*ty#m3PMu=!owvP$DVn|)2W&SlmKGeM%`edL!r<^3T*&aVF
zetr%_wS8tR+0?{Wbxyf{T*XLXQcA^0RBsW*cws33?YeVdHc;@;FIw|+d7y%9pFDa6
zs>9>R09M5S;ddEc))G{)B(|VQsqS@{s9;M{MLVt!d<@k=8}V0nLp1{yp7DC9y+(#@
zz&mp?X>#)rAmstbSuokqQzf}4q}T*%Au!IfOLQp`wHF0qMPsmge5R!Q6Tqj33;T`}
zgqt<2Th)wH;2WWiy$2`C`6a@$_oE8KghPnE-OWcYQLZ9kYf-N6<LcN){D0ODAvHST
z<8-=JPuP}xqK!cj1U(;-4YK_iC%*3GACKae=w&mCE`&!sw|#VDp7<GJLwlj#-c*V*
zit5oFVugXCGPE1Z*svwMVCx>REf9-lDQ@faEuaz&bS11A8Bj#Nz8_e(C9KJVqB1&e
zLA-t_oSYJ%!QV9>2;>s0`|>N$k+?K4KtsA~I%*@h??hztO7Ps32u0aqA*h3Tt|3Rz
zN+p1dYuu2$_T)q6eqjCw6eStqX*9VjVMU%laWF97mDr33rTV+6IzJ1oZqI&TrfX(?
zDn%iA5av4(@k~=@lqvvWMHEE^n#kbqW$_eLWI;iJ#9VTUGU(I4-7Vp9TiYw#-?HA^
zTj?8zB{t(gQIZnIK$GhhR%C3+dbc7Ma6-}LgpR5<I6iJmY|ar;o!qA`ZAfd<t&e#R
z$}CFVRUa9kC2!adEOpHsl(wh+(13}m1s_=ID?BUs*dv`uDb7OL-wI1SAT2x}NWq0-
zME>hTK?+Bw1eg)uV49uy)GGCp5f@=YT8O?L6d}|~(rS3jB4a(en!<NIn88|@aPUp-
z$~epk89M3`s+(Knysimtp021RZAikQ$3OfL!{a$f5Le#&v4>$in8%8oI_7(f#GC;%
zT~0u=m0=m4kDR7qADbb(Ufs{{BnW<tevBQ4*e2NIOb8o@8zQ-DWSu3%gEszph2=N|
zEZoFM4BW=ff|smKrp|HzGv|2*nM?L2V`nXZUOqd;`bTdwQ<Pq8e_a2ds1OzGGE{QB
zGFIbYh0v^!tgeI}z=kO(7E}x>z70Mr>k(fEY|!>-bV2rL8kE+J0lS_3>-vDhKrIBu
z5eDA(emI0IydO$gM%Z}CN*Q_e+yymF+$V0M``CC5lBq>;(%4&wMe%m<c7kDhYC}%~
zT5(s{Tj<Gfv9Pg%#Ct?~R=Q|K8^`Ikv1f5-1Ia`2Lh!mKdsafb*KrIAKzYvnb%Xgq
z+y<3DMBMd4a2LDu4JPU|Xc&)KQz&8+dlIeQ#pL3Bit0w1?9B}q3Ee}RB+s0=OxUBA
zGr3==5}rzmO^k)>zVzOM9@kaZs|fzi!0pafFCJjqIoqT0iJ3W(nU96flEWu$FBW5l
z{MJRXwPe!VwJc0~5>bZ``^dxY#K*{W<>4|7`TqVMaqmX8b&4pDP~LI3(w}$n##_j1
zpRdyELeGSd_vy42iGG8C5I__LJPP3UL|r)YK<LB!j{UvYz#pLIyqWsddJo*KvBYaL
z+QuV>-!a<Xi?Gk?v0Bz^1$_43P$5|98cp4}N&XJ%h=DklcE0vWA(zHy(H+YdNVS_y
z@!En+qGK`BtlM9Ijza(}yaY|FTsPaU#(0!zCqG$ScN~^gdJWU{m-dwoln$4US`AtC
zONXG7SZ19xW>`F$c~X%l13{f7;al4XxZm+wk2V)mn`l7~FrI8O9F7AWl)eg7Cmvfr
zS#R)dS2iCCkNNJOB~QFI{VE>Vmvum`C(qjtT*jAapr0XwCL!^R9zC<j?$5nx31}wL
z?z^*Ij}K`p7o%QXI1NJNl2<m{;b=-8lckSDouC5T%mejKoPq^{<2#IDS~Q~#dzD2p
zvE48wyPQP$X+ZuqFDRw1pPdD|piyj?)sdqozDdw2Aa0Os8NY?RY;x&+f=TJ|JxgsK
zM<bm|9!CQmyHoWTuVqvuD0vC@yxqI5jtc~G+NUdRJsyys3P5KimJ0nSM<NgCR{8yx
z$ZXWqiaCd{wm(Ty2uUN7SZ?#mIkj!yQC)?mrW#%8p)_DVrS1n8$iUp@mrCk>C@;<7
znu!H1MCfDw%*6C5fYj4ef-Wue#(ih3Jkb9@Y3m;3{_`WR^#^1`5@fA!Xbn+KNyH~~
zWWTk&ixuUBwPAKxhs#yk6IS$N!))feo5JQ#^m=xY<4=rSdgrAxpLwWk3(7->B#0_2
zg4HOEm9^6s*qE5Ze``@~_Pr8&Ujx*Y)e8ksn(bzHThh(`qNuU)uHF8iXe&!`RMdDw
z?w7LS=P8WYh=)Xd=Etba;bW?QG<G5jDVFLROC%)78|Q{5d^RwaC<vh)l17<k%y-&N
zut8+Drww^kLP7{(um**beGXaR9;(<PN~J>*Qx<{a9=$&+cx9e(UoHEjp6@A8sPlav
zOV~hw1vC2|vcMT!PjOlpyF)U!e8bUc4=K~_QDNBd9dagO*6s_zV%q3_8PgIoESOPK
zSXR%s3f=ty$pghoPPSsaEg48$!p6$Hc*4Ahg>ye}k#N+Tu*IA(-nb_~|2`-cEaD(u
zqM)BsZoT=*g6PXbAxpyOJktIiP;$|d=q02<qNpN-Xd>+IL`H2C(KrgJ1Cy1BcTmIj
zm5EI##LjUe?5HCyNJyT(^np-0V4vWGr)}v-nw7XmKI))~-=)qWQffvbsyKd69yL7?
z#H$BZG~%3zUNS<Hvn|@xagY4^RjgoRSP3$$9REZYX2AxQ7#qgZkN}_E*a)DC*`LG%
z@n}eZ%Wh1XP8z(7H!{mp_$A~>WHTao&6cB+0o||PX|D@wW9nxPn$A%15IaI16!;;X
zk<dM^T(15dL8&ECsbxk%;-V)9bjomh{csOh)qiScREwoTDFe1c*p7LTt*SA}vXL99
zmJJWAJT^!kX_4T1V0Gj82H-M2NiU*zZN@mOn*&%i50)tt)~D^veof+g1F!%K?7%AP
zG1JoP1dWEBdiznkz0{oweW$E(SX28qxG7&m$<xO*SrUUq?bL>IijC=ThpRQi%0^-;
z$Ia-95`(#tLcua#=?+{DCEybZC(P>Q*aaaSo3ptldmpH`QI+Y(<W&sRuV)jaw12gS
zf<D&xoZQcQ(wwM7Z4&cS1Uy!C7Y6BY90kyauzj@)lWBUfL4e<W?{x^{gTjOK(diAJ
zqthEXy_tuY7lNCaI3CvB9oFiLgkEvqW=J^=Z_g1qt~l)J#^rcVX<4q`yp)y6k)zP4
zAjfBEu9Msp4KyzzFU;>;9wBEa=i5A+!)|kKcrJ291R{Hdax&A-UklIJlr|s>dlv8W
zxF%2B*Rg-*xHgGjIY%YCAm5!6JZUbF)wD_ya!iVqUNTlp+oRy^5wk@SDs1+myT~1+
zoNNP6-q$V*rMYv}oALZ1l$KP@>Qqf7{!*&<Dj463;QEw!iM5N~-qlTe_uWJ1?W`lz
z`$tp<i{&HhZLi3Dg0TxPSt1c`Vn;mztv5#?6@%qlcY|_+*yZNqZ2kTxUcim$dh=Ij
zYuz%v^<}Z9hxj;s{hwk(5AkU-0WO4$Cs_~*0S}_<EniVS6yWLY3&uNNp_K8ivr0Fy
zjeTZCtwijyfM8tYZ(@5_hS+5eaklWWi7j5;#XV#}a8_uE?cMJHJ0+<l(SSwc^_qyf
zP_)_>geWOvLw+)^$^j@diTFg+++3eP147UeKY;yRZ)g{Y1hn)KaPlF{X+p31U1#W2
z0)qpYR0^zuNr#ub0dC-m=z49$t>p(#JTNlZLYyt~KeC~=hIUy)oE4=^U#ZF4%c|L;
znAZnXYj&yA>C<AN%z`+JMZscnf@eG?>G9~Q3&*}e*+49|WCR_PWKkEN-Atu2{P-zV
z%pQc+zblQdAxwshq6Si~^`1WZK)_b1o>I(zL|Aq!72PenWjo2{IxT_2A4;j89g|?5
z{j6xDNeO|YBFTPM5$#++rmeV6TD^jiF{$F6OIJb~#->rFGNjUnbcRl{FKiAgI+YwY
z!d5loH<LK7j;F2>Ix{eynCRJ^k&LSlw*APX4Kh7A3lhRhR2WZAbhM`e*Go(+d6^s-
z!yIFp8uu8`N6h)+W|9+CD6Mh<KZDx3k0eefO^$uOSV*_N`Qh5C^8VWEDuecE-#bO>
z{1bBAY+&4;RO=hLpBoqf3=NlAgKSLFj0+Y*NyDZJB1w+Ms$B46qL!4iI=+3|CksVL
z3)Dykw-2gy0yP=kwpDYYv;|qQQ*x5~Lni}lRRR8fwl)H^UJB_L`W1+@;E)=EGNvkU
zb*zH3pA&>xZS{gxbqlZl2ub_=4bw{?c-R!gs;(J|IXIpfgsD`OpDDunwEu0JQ>ki~
zKX_}m91*`J(6{(L3mEJIme($Y_6!%?k){`+i&{fvpAe);=C>%h_P2@*BR0+h*1$JV
zeeL<W04nS_-W5J1j1VD6vGi}S`MPhYu)X2Pej|V?{>v|%oZNZn&G^<ifj@|UfA<_b
zr;QLdNe&(lYKvRC0jt@|qS=eK@Q`5x7+nXZwtpV#)Eg3_M3WtO8*Pgtf#WYfB22j<
zI{=Jkl0Nx@E8t5u=k(JHV1|<f-Z4~l$T(N_@?$g4me`*`P&o+4ytCHd<1!*)^9^aJ
ze#M=Lk#1a$P$j(_arN@id4zc_@p1INyqQ0Q)a-|@i$s>4=wGP!SQZM4P>`EcoMLfk
zEj?ua{P<AsZgt{C_i{$CbDlJ@bKaXXx~1b^(UVaO+OxYulbuzaazNg1fOc5Ua<Xrp
zH`7Yd(e~>Y5!N%w9o^yc=^#rlho!K11BVyKo5q*Xd-rH^eef(T-I(-Tm-HH}&rWt0
zwT*k^@Gq-2_Zv20y=w?<Yk=@h4g!DX_eVBix89u`Z~X0q7uEp2og8rfcIZeuw**K#
z0acxQ;hlRcM>bY^hESqLx{6R#rD+kCdF%H$Y8kv0KP$eCE2ZC=RcU23rft-Fyh)~*
z&D=9%(Hic9AG2poEEOHaSddGfeWi|=KJLnbn_hU&K@1TyJvxp(X2z;sG80ZkLw%VQ
z)L*@8UE*nvZ&6KxUhyVHDXR>wFe`0;H;?mvT!mG=kY5sGVcf*@#6Nj(CCwkpkVkz&
z`=L0U^S&U=^LL;aSBzn{1d}}JLV++BhH2iLBgOO-xGIIOj#LdMC$Ltn&{q|>Da8Wh
z=41Vdm*%|YmkCO@IuI=1;85x@KPetCH>*I!A4wFZ6Y?m+;7y-=enL2P8QQ*M&@9cK
znEsr?tz?D@RycN<Tlf2evBFkcyP&1^rkPU;^6-fkSTVcw?x8gQ`U?h?=^<}N@N{*D
zdZF|04>*2ah0uSvSJ0~FDW1ZgQ9BpAt_W)`Hl~NquiDzXafq$xg`V4ZbA5~CR!m-j
zrZ^3QvLtwUKlfmH_{4TiFxBJ-jBhq88_JznncL70H=i?LcnX^<S-?QQbj6=u&P)+o
zbg_pBx5DfN`IJzI7lk_Pjb_fQtJH3&IIaFJchj~2L^qk4&3gxoQ>!ZGr&&t3<5bs&
zLL5{Bas_tM`^jimraQ*f)KL~|IJM=rT&nf>#Y;%aR?yV7-bxdh4rROD0O|$>Kxu2R
z!wNe^NUu})WNW*amqP$!(S1BL<2ELNoS6L-Dt@)FXvwiQ^ntnB<kj9=MXf>SLL3>^
zE7q_`b2$)gVTnj}^`6R}xr^Vs(RYF+)!dTIqw?VrPx(`S7UpuFX{ky?a;o#IFk@yi
zN7Sd(2B~TzK<gC6%E==zBq3v?FdiXez2HKYi+P=dPOB?Nl5h`3G`YkpR>-TCo8&r2
zY~LW8SM+xQ{=5=|S&RL<j!X?HA>dy13r0@D|4>x6Ce5!5AD$RrJ25{rCfqGt26(K0
zxlF#layex5UjR7p*v&4P_EL?k|Evb+Aoi+wleiIxU2|8fa?RjgukWau%ep;zo&+=}
zFAC|!7aJl`6=dizKof1hkAAlIz1H448WKXJ+jH4Z39rxBqcgMNA7v(F9TG#lkn7~0
zVnA+X{)bq>p%=2h?Z2bV5K&mID4_GqZ_ERu;RSoydS->3MOa$o#wqKeVE5T-d+oC*
zmZ81C6cBP*M(Ad8?7@7u8Ln9+qik!}oWr$D@FeW`F@ls&qLuRrh57lHT+8&|3XF3t
zlh&La@>SNlU(fXXT$t1N)=WB=v<+2T5vO!$gyE*vt*!h6j5(h+%l%(bzcYZ$Eas1f
z%V?efd}{4k68GKR#2Ltcm!b%B!~?+l1Fp6xdNqd_vFwH<f!kYv3)C<d4(hCOrbMWp
zYjaMvhg=-j*1+o%j_Z>G+!RH`qv~}E5_;WDqmZVM2rQ;^K~e2kPug22WjcwiUBjzP
zMffAu6^bG(qpK>J40_#E%<`adzO#HeWyS$2QMGQ0B5Wg!tYZCWr4V^o&X>#N<c<}*
zbQHy>>P4nPesa4O=BGqUMb(7rSC#1eNvx(9&@6RiPdIPm2)t?6UsddTIhF+gKQ`vE
z!VlTJ10XcJRAGK%yq4`J*q=!8MBUNtq@A;YXUmirWWiTwSwpgz$}W|;K%V8(T9xp!
zzDX^WIk2-n(h@>pWbklY!y=IDB4Mlic2n^U`OnfHxq%n4ogme4i$H&iAQQ@6tfwaG
z$B`G%+XidY2J0W4wBVlE^c2!`$Iq;SlM5g~KjjiH1Y(Lv3otzO$bCNbxdn7oNx*nC
zDFc3mUMlT3UiHgLijB*I!^ghL$3D>EHgKVzNDf5hCcS@E&3@^fb*aASC#b<eccf0}
zHuu05U57`yuR<o~QbJLLp;VojuZ%t&l&S6l#W%VtCRajHh$vE>k<W%c?U$)8r$`-S
zCi2U~5cwl=;72dVHL#apXKn-F2ADn+Wh`+$vRbdJ=4I>vo!ld@s9;BOaU8$u#m{kM
zS7>ySZ#>9fzS2^0(?fc*z}42}vRAw~bmq_T%+O0X6aFIXfz<J`&ngoiWfKlqCr5o!
zN775}7*dFLfn%1@+ooLd(262^k`hUF31XH3ZBveL`zGWuT%a5OHE4*tno-7bNCEF+
zs)xJ!^WDeRV_z)x^U>&)vfhNY)PWOn>3vUOYvX!C0Az1O22>?}PlygI$@?Ui{RIP6
zHju?9K+<(;BU#udE<TmPGggr1C#})8GZA15OfS~jEipg`t#`Hy?7M&Z2QD0pFQ`S5
zt)HRmKXcbdIB54;ctt)VBs{}X8$YTUpK*W{Awt-QCZ;C#vXGf3Iq!s&BdrR$7`f!4
zblUaY0zNrJ3O+A>ZREjra%;JE2Ep7sCU|hS^RVZQihBx<My}r>P3XMLjJVLf8{IdN
z=nGijimH3jz9wM5)OULY@CiN`*1Xn3c$y>V@VIW4sr2>a5Dfh(@k>Z!^kTblBts4%
zV6PRhrnasahDjv`e;+Kzp`H(*<*t<2GR?59${wBS2FIxzvy^1Q6_b(8c8cOKS?V9?
zYruMDdXc}qbRrPh^~G>qgK4($(FO_<0y2=p#-PPiN3lI@e0YHYVFtUZZe_-Ak;`MA
z*#%$l1V$Mj`M)@Xk3Trds;TdKcnc?7o5>=0mB;*K7tHybu@gFWB046DVA(Y$Li40O
zgw1ng<+`wZS=BgvGuXWC1Y&!^hGw)!6(avzk(CxYHYhqKiO}4&YeaHcfkGt@?@@d$
zAqRanF5qteju5{~%)eSwv_xYq{Dk}bqBX?=qWq*efmX2$vrq+oy2$q@o1jH^zAo)T
z0=GR5np04K1<IpHm7rovAa2V$klKfZTb|eA(Uo`$_03qEoAN|z9IuDs+u!2YW)ekN
zV#e=bmsnU*WW@n|BSkZ&U2T6-q5qKN!*h;(hOP6e;|=)?S@iJ7Slwp3*NeaM6llc~
z4lQQe)Ky1M@V4Ue4WmE9w{oScdg@c@X~1o*`W&sUd&bBPzcfGo6g<Wr7|?#L(*E%d
z2W2H5CrYGvS6<nklDdKAKy5zqiv1R#EJVce_1YsIN*8I!za2aN)y<$B#j50>ylVuL
zaf7C3yP1dHGFfmj#^Z={aY*m}H;Md6Nww~r;&pjtP(ig{>-2ybqyIEaB`Ww9hMIaz
zg71Xn8};6f$KFzT%Iy#dZ*9(~$uvsZV!$ZVdS&#jrl30=5w8kLT27Y<<ynH5dn{^N
zPH|6MmkG|9TC69b1Go}(KPKiK{I$ZQr295Fw0KF~)sv8UNn-TGfJ`H>pGm(WBz{R$
zDi$@$q05kxQBC3(=KP7<D8JC{#x39J!mUwL@b|L48<{d<vWtLz%PvD4#(8O}8nh^v
zu1!?^3YHCA_s2iFQ7N8dAq?t9!M7&hy@HRJTe*svna-owjJ8O9uyDqBIIHXqUbF0m
z7d~*>w`*Te-+|~yqFC`ZN|8&K8Nr{J(`82aS5y}*uBq%u=~`veFAu{mCV{F&@iywx
z#bHzxMTkZ5&e^*Wi$n3&UPRg>LAvnyI&X;yo%<vyTsEIb%^5CL*1XP~%-u3d>v&hb
zUn;E{?>u#~r+%8laIV4J%DT#dY+^08OCVYFp3<0i#DY9w9LS72I#yaL;`A~0^M^r}
zNF&^SrclEK(d8e{=5j?M@|><!0b|khNMfNVQ`klbTsWQ5J?Tbn!v{wqr0T|{1~gna
zlK2J%1~dx?gmOI!z0PJhGPD~7M%>jQd9iAt3`Ho$tOG;UK?dV3LB~p|88IfNB0KoI
z8q+Is4Dqx|D8mKZlGKU&{0daK@-Ae<I|aMKBIIVdj`%?<ee*`LNK<$$>6x!F5c5s>
zMIfkfW!2nbs#Po(@_?Nk6x44osKDtPtMoQV;0f>B?`&Rc!eF&`+rVnV#kFsNA3U{V
z*pO;Ms&um2&?5XA`()Vp5gT$=2r0ymkpZ)(9g%^6tW9T4G#(~OmucxOduPe-0aj~z
z&TqEcs0~wQ?XRZOTW~cutTYX{N<r+UKbCDmkH-gP1u_pV<|vpx#|s`KPkg#;(noz@
z8~GNuYUwQY0@WFPrf`er4wcr4bxP_E8BC;;%Vagv7+6}gox?QC&lt^5IksUmv0*gR
zPIupwrpr<MB~6d?@l8?sD^K6)ww9s8!6wX^cGtOAczS4$NJ)CXht_}DVY^t`E-6Q(
zYJ**Dhq&}Hrl0yk=qUJVUjR=B!Uz1*!t@&h3q(ppJ>+iYkmdI;9}fK-=OEm^A`MFM
zS;R6Kq3FIM0YBz2{0dq8XRZ)*d;1vPJ-^QGAL*h<-kocz={L0iWb!sj1{i5b76Uyk
z+Tx-uB7Uye`BNBfIMcrK|2U%Nt-YQLj`mlVQ>rGYlTPUJSNY#!*(#`;Tc_XRe24v8
z!dCiW6$t#~aJc8kJdh2qH&-jA6w6#p48(J1{&H|YU|BDFDXF7#qdKUhUvA{nR~drZ
zOmnAS4ireH(7`0{FYA6^FP%(f-mP2T2Ncva9YWc`CAWQ$uJ7a4YO!d+GH#P{erMb+
zbXurs;)$r8r{eOraVmtTxBv8Bf_{<Ml`hc2G<PUuhmX$a7paCDngn#?J#@^Y1*D~#
zeu?qmqhI-DT`S1OiyBsF9&^`_uEZdiMWGBnFTN1k7(rReu2;awUId@4RZ~wssIV=z
z<%VAg4QN{|#+#qN>b%Qqdw<8qT&bAcQwKGuwr-C@&Wss}1K%IwyKa&2o{O_D45=c^
z`*8P9G+><n5r3#k<Jb4e@FO(Ngn%CvW<B>YTOEFG8$JU@Za-DiLBu*;UDC?Q*F78h
zCFq+@1m`bLzsCW#^1Vf7PMx<P)FTY<FgOKrQ#u9bt$ucfO7*Qj1#lzNw*{Y~-gx}_
z|2#eyT99be1kV=CUrlvs8TPzSi6t&Vpi=u0h)Xb2mQaT`Ogg?~wIQo!+9b~zs`8^*
zIW|2P)N^p_5iONjxYjeiL@@Y5HlWrc&Scf(yJB~@f^M}!#EzZUFQLdj=p0AG{B!u%
zAwGs1u<^bE(5uzX-NMuo`jUUyV77JdF{wJS!u06x>+Vsh<Iz!$NPzDjI_iO3IuW`J
zX!RQQX#Ki1@rjIXME9BLp@Uydd<c+GFK{`$L=lxRJ&~Z+xng#85XZ@MFn=7`oj~-I
z^s2BzI;OvP(vbK77iYKu)2|bz4yi)#L&&!SJ(>`2Jl($~K9aQ?*1=l&X{;*u`7W+H
z#=o&!702m!h1(t&DBi*Dyf}T+M3JIK-#&N>*Mww!dh_?ug9PCoguJWQZ*Jf5e)BzL
z+-xU5g>;A2Y1i-bFI&S?eY4Ube~Z-OPq->}3mfZ=Kf@4KU5+%<2{i|kwCeP%^A?H1
z50wIv@6hKJ!--nsdl)zte&+Q0VoXzCimvx`QO0P7ePni+@%5jc85X}h>XCWH_Y)dF
z=HKb6eLfzJ{cSwFzU!14VTfWL+C;dBV0ahy#@6pn^}SAfKbG;i@0~CZRysoZ;yn;U
z+PmF`Gx@bi2Zs&auPio58=_xnLhtI{()kXq+G4|j$AP}j9RjC{eupq{83BC}VqEES
z{L45<e)j}x??pYhrPq_I(sl3w%*-Is+_Zm{v8QTmf=MUIDFruFcqbYIbgIw4eBqi9
z%G$V{m0CVQx+K9>ME|p<9#caSSNxGTX{h@Dy)J5*thC`)+HX!F9`kkV>fYTb2Dnjm
z@nEc{!hvLb>+%Gb6o`%s{@ZrwKX1e?M=E|<7Ls7EO`O9<9w|8*f_$q@9AhIp2qfPP
zEYMF@WRxEG8fCkh4FFO?{|^x<9~)XR1cIvPHO9u5AP|2yFkK)1Zioq6+Mjt<3J9NX
z7i+i54b%ac)_*?|v0+5`D!D3Ohw!W2!T>i|-)Zkxxx%V8ZSb5daUcxz0DmU)g1^(;
z1D`Cc{WQL+f6h==&yR`yY(u^TIrR~qbwV(-N|uE74=iaL=CH9tT1tjs-}&ETxqFu#
zosY;V<s%~RuUy$%R7@dWciJMFl{VB{%ocB>Ki)tASHF1v_jIw-By0n<;Ta@zUD{&r
ztMb=u9b~uoY@L`CKEyV^o5E-T4hvsP+1Ju@NObvc*%jN7PWf4#aSRZr1o3a%khzFn
zfzO>=NJ$8vFAbmNz#Tzj2q>ms!KV<C<@ZgFe`JRkB`JN8tJz3i1dSX4cN~-LxJK&n
zcb3BJta>?W!FGv9o%P>ZI)doN64-?DHC9XKPe~XSWAI4djcOp)-UG2+g$VcBzH-^D
zA_3|kppVP1;*@GSS8c#gdE4;Mc^BpPYCNE=5)MT?I&-js7j5En0%<EW(Z>zAYzjyx
z=mu=m<?cd>gj%c?-t)0oMiCq>dtU}f?xMsQZuJEfkApAg?J1cmGg=lW;9=bjyKxTm
ziw~=w@vo8pY{0m;^=iPwx}BqYxqGfZ*ApF>$VFGnD;k&RYqZs9S`02wnN`*VR#qfG
zT5{EDEnT19m|3~iYYiT8T0PXIyz^BP|G{HkTgPdRTzeCgSd0X6QI<$HABiqYD8ndA
z^beN5a9GE;tI20sA=hDPB{|v-@8;MZ?bf}(@+%tF!5v}sB28tb$IMH-=)PNUh%Jr_
zP$`ZJGCPp1=@f3hf@7R>EpZ;?Ol}Q*2d!FJ&lA}ij_RFo20K*ek8?98(Opnu+X<>E
z@q@Qm?CPw68z0<87qW<1kM=T$bbRuvdxM;-vRd`Bj=|tm*4AF!CTiUH4gAhCi<bd}
z!=VM@uu(H~a)t$mkYg^<>##e!!W)%x>~o`J6H^S6)7=$SKKg?llcxn$K1*x9@>+I8
zHXOt7v>%>u2eWPWF%_OU#c63*7nPo#GozymcWPXG<~t_KkHtx84i}YHo-@Ov4R>nn
zd<WYm!;i%YX{;BO+Mc53CeiTNTjqNlP4N+hA&N%XR3u6XjYlEZ<lrd~c+o*5%f*81
zMPv0;_L*=g`GVwyV_&K4Q?$bdBy0CF2WfH^<#)69ceBws3phC`d`HAH><Y8&sB+BZ
zcVivLDPtybD1cs&J7uen7|E^QE>vum;Yu~y9jNQ9AZJTf8!$9$ziBAh6v0_3wU<!U
zDM8j2t}0_J75<M*pd|gsL~!NhI!*K6@s$>k9}B4r-CrfBle&8?X8lwG<eUTie~5bv
zs5rKDTR1>~;O-7Vf=h4-PJjfLppCl|+}&LQ!68WS;O_2DXx!ah`!(5npMCs4_x|UN
zH^$8BS#zyU)qtk@Tc1^v0-^RB<g$4BlIUEliYnnmmA(ler%zqCrqS&1K|``u?as$h
zAW7uLl^_><WPmVD0`J7^u+84=aKRTVqq&b6JgI7q1eE~^0+*~t^Ol4nAZG-PH|8IO
zvA@z!7*-50<oRtPD_YlhY;a6wO<3+R)uzDou};Q3c=~=$vf8*Fy=inT2@_Vcr1kZf
zZ7N__-aW1=<fObDrF8-rlb_S5bxSo=?~58x<?;^Fa8?vrsZ0+SHmE7rI+g?%&#pM!
zD1kRfRw_S-;TzR-Iq43J0v3zQQ%oB8=}1TV3UQ2$4$&o0)tn5zudNi9@1$X2Nf>o^
zzff8chqn5=;att8W~U60vPQ^-^RHTUF!$1QM365SMb5i3c;Z@{Z2cUb{V^OEvp}5C
zf-H{gPLF9%H=p!b<HLky^Ls*L2Sr&m^FL2>_!X0!@&hnIf=uz9o01PXt(+)y=-9}s
zN0h6jmyCrK$Dmf2z+^TWz08$Z1p}1=lOtcZuSSW|i3xf2{&`|Xh6aXVhhc$EDbre}
zDqDw(i|LeE+#4+{q_j|M@T@e<uZ9p|4eFnc?QyZ>-3qroJ+Jpc_xxop&HSBQ_9M62
zgWLDFBX*33M5F{19X-M2EaVpC>M9|0nFwWbFu>_m$MVHaKECcp*ZK^3J^lEfNm0|`
zm;~oPcvf81u$ZNc*vyQW%`C!`cyU=c#KR-F)rSd7j5dBk8kK+aR!_!|>piE;5$yv&
zA)U$Tym;v=e}wQ>5|EjE4-P-PnkU2^($5P27ARjs!5j`UAKnR#Zp1a^#Wih&WJ*x>
zAu<qOF??9w3@<mSQ9XH(37_bHXmzZvA1)VD$-oQX;uFt~h;jCgan2lnU&VrM87@jd
zAwP+EIA6f=Nc$PWF30qB&Y>$Vbj~UaE)-|Sr)N9QmRZ~NW0j97`2u9zib@?46_llZ
z1JsfK8)mE{UsGnHBN*WDTMVO4enEolpVKss?4eqgUt!Nz1?ou9S0O&VK<N;6enlK8
zp@YT;FL{EyU5iV+{e+>w&JQPj;UsG@#6eIw++$J6GJipL!ZHs&KGZ_|L;B0?t+58c
zNQ22}UM?=|!!q;w9qamC%7B=)k(NZ9#9QMnBnr2iBo7XwjEFg7{j0e@>228qHIVh*
zVn~3Xa<u25lI1_AydIS8la-@0CRgm5k|$Jche^kY%3FBM7)I?Db+G7QcTIrXs-;?l
zm1@rX^p0coEx$8hBl(@qz0(b<9NpU{e55ieMU}WWMg8&91_Ng2>Nk)xLiG!S7R$fT
zD%`40qzuWn)DvFIvTix#Ou)8;{QwoE7{h#SxrP7=w@!tU8NIQ$7kpcJ5ATs@UQaro
zfq<Oa4~<m$kSQ=I(N8gSVj6MQQS#JeBbTwMZdH&VU{n*8oYp?HG%z$`Xtd2*X`eio
z{FIzFIJDF|^c3+tC1Y%KY+!T@p1rg0^EA2=;19AX9oo}0s*X}i8!TSxEEec0Uh<+U
zd%J<bTlv#7#$At>DI@%gfOu=v_^~<bnHSS&0Z1&pJ|$*3E@s&;=3O+nF`E2xocwZ%
z{4$tCqP+`7JAU-L%{v6iwS3p>QoTL@h(*z|*W~VZ#=KU9cRC$@V<zs-PSNre4KN&B
zX4Iw1wpR4$vODB-g7<w~U0d(lmL@ajBdPu6!xVmoYQX5^*+&j;@|1<>2+qO|0_D|+
z!V__2=N#H5d90=PDH?M_B^FyM9QJf6xADX714aUdY#9~FvU7J1sRX5sE$T1jh7n_L
zJaHjKba4@b_H|x{`|s;wh6fVpATGSpf9^Ta(+)0V!dS&ldRg0H$&6<e#JeJs1gWUY
z0<QY#<2ijz@AJD&p8LEBEbHSt#DF<%C_XLotD6^$BDfo9#k(8C3WPw-2bi9C>ypk3
zS-_tEM8zfZdK*qIk<q+#ZPocY*(!;g4M|ZqZ-{j)4kA_h#dfxraHa=qxdLFdm}7<F
z23Mus?B?Z6TmA{S^vT?15$6slea8gp>lsrm^t~Lx@wrpUy+Mf{Bs4uL;&3LnzaYY^
zfJ7TOe<7|a-x*Yhm@$}^IER5}GyfIA3iS;hhcGx@`g=JXM`u|%ba6CHYrD!%n0Z~;
z1Anb@f~z*|pRo62L>AEy$u=)4R!9kbJEM^tqghAESICbGaj~<yiK~A4VY`j#px_?}
z`SF{S2hsM@m1gxe_OXtOV25z+)d@|E6jZaB9fqs(=FI%}Xk%U2o;lC99p{jDa>b`1
z-#MG8D-YHhdmToQQyCxG){iulYg>@#d;fqF)F}QA#~)W8shxefGW;pqcJ#4tlAr~Q
ze4^A=exs+p^r+xE9o7syc`9wg`>*t*)GmktO0J!`L3|rzAZNKqR=X(JOB#gt@nT@J
zk=%uRMZP9%&hCSFW7N1d>Ivb<xr<tR0n@8bWam&ztK7#OQcq8Ez+?zVBkwdk9b=fE
ze@~<ERuFC!(l5#&4p<rE#e{TE!m8K^4uo0<)-oCH3Nsyz0@BoUja7aoV>zBhQy09)
zPSV?evx^AQTqm1#?qesm3lDl&BWrc;V<J8a`wO)T3`$)kGj{I7BmOIT<{!kjN+#>v
zhe7<GQwZWhd8X-t*>Lh?K#*ZM;gYw3vqoZ8pCOGMUZ`du`Io<<$(05%x1@xzVl=))
zV&yrn95LG?$$!ef<PFu4Ks)%?BAumS<ODLXGj|MvM;NoqCY5mvt3inVGwfF4gd#Rw
za~8^l-xKqTHBw@j4pQ)bS~S{@XkPwTWno?NW4PZbGXzyfi4DPr!1-0=I*hzFr6d@q
zL5u;!B)Drq$RVHlHbRB1c6S}*H$!Bb5TD?V+k;Nf+!2d(*xez`SJ-X{TjB(iCW55y
z<RnRGcSR^Y3cjHvTx7-m_r*8d6@vZHuw1LJ2m|=~f*@@m&NaA^sl8pYF-73&vM^<Y
z@szw_n^*y-KJkVHHp!HNTN;q<uY@wap?$OP-Ugx8iDGBYKo>Ybm}z;d<A7<RlndnY
zT6?YY2?Mcv80_*I+!n}}A`7W1z;P$8rlCs+RET^}P=YdEJ~MU3RwQj&RC}=*)9Y-2
z7u8h!jx|XleJiHcWdli<)X6Ikbf5EdOnui{bm_&p11g;aJ>o^NNj>ow5O@lBr)G2m
zTmm_i?&%7yR97DJ*RIV)>)bI%0Td1WCFIx*oz<+;7yjD6yqa9sjd=57d{IdLjbmDe
z_jo8aUJ&3C{z?+s_d?Kb3P`*4<;XIy3f(1@`oAD%aYZMlPE%F@QK>lbI_j6zRq%j)
zvWS*hX`W)Fhbd3Hfw(RMV*&Sz--v=H34VjbB!R@_JhPG&8)D}ulCc}nJepmJ?%R7p
zD5q8Tf><QRWUMxq-DN*#<d3s0$K{A$;^=F$N0ogVH>9UvK;JlSj5E{jZ|{zYD+(}Z
z!GJ8<r1o)`!1}~g6fSIphjiy8R~a7q(8ZO0_;O5ze7uF=G<=AYG2s^I6ylr8Dh+xP
z`B4l{8>5yNV;8XdH+E3ZpkW@I1$74lGn`exJlMC5?9`UV44v1Z#f+5KxyTG<)S-W1
z&cZkHNWG!7_vQN(lj5-WEzM;&n-Rvm^@hrM?FrGZ%GGiRPu~n(if?U9(eNocY!C1n
zZSbZi1mGQeIgw+V%unb>U8V!S$7p1ZKJO1)FXmVWErJO9roCEI3<cmnzB^~w_z^hj
zQ8^?ghgemXEWq}qLz2eN?!+6%T@H>`Nr*kw7r!9DHJVjA%L@zYr64J;PYYGXMx5+f
zKlSZKoco!i!0qb{_gJr`?anl3&-KyZ`w$(_b$@pJ_!@hFOExoc0{EuNhZxmH?u?1u
zxqkAJ4^DdJjWd3_kFo9>KG@MtgcI_nmrR{>VE^=QHN5VOjH)vOW}66~U_suOC$cx_
zPtbt&*$SW?re?)}0;8-Ntr(qj!~&*!$Phd-)Rwsooe7fTW9<hups_<k$Lk#Cewv|p
zubhsJN9ce#C$s>yh>qfx;0}Wv=4QDhE1D0rpuk^qY98RZM_zdQU1&@yyZ}jY-B|e~
zgTJFLME_#qpD+JSos~}l!vNC=9-a+4Ao;8n{`?Cj6-q$Ai0+wO65k*6$-Co|Tv8;>
zhh9*5hvpRy7S%%(O?WWQ{07+%5u>oQv*4c$_F@h6v#M$X(U-oonsPq-Mf7u<>M_!3
zJDJ!H1Ms%~_&=gSyd(P528S-QWa<pyl*)mKGCG3>HKUZCUv{NIi7E1Yy$#dQ`thyB
zvEMxz8nHL@2`RmQkn>2V1&NQ?35^$Zzs0!+>u{6s5pyfk;Be8Z;tire5Ywjo;5_-7
z(@ZEb=LMP;;%RoAE^0WYZJ@kfomWIxjB|H;;F~r4PNk$bJ*kc2wL2J7(ighc45J4n
zs2*3@quLj9VFHcg#+-Kt;u(uOl>{D+IlqZ+<3^mo18hH=BtP9(h|r%E5Me(ngnP%>
z@Q3@3+dzf;5a`lBM|-$%Q80AKO^T#sd^J`%l8Q^5Ab<Zec{{QRF{1x`yEwnrBlaT1
zSCP4V90xSu8?8-hO+-XCj@vTfABnX#L(pAZw<ytiB@6&^&s4uZDE|$`^0?x-OY@b=
zEmK%6Qo5nVYLN;6Q}g9Whn#sJ=V6mc4vytTc7%4-co>K4xHuDVM~t9(CmToWB0Eg`
z^LQAe>$n(G!;TovzZCf|vV*iQ#=?kQ$3>Xbcf=7EO|l3WKIiyZeI5%#b{!WgQ{!!2
zxAE-_%fzh$Ts8c<zdN_XCS(d@DRsUn@KG;-eY0qiL2ziF<6-rAG~%fK`;D^L{bS7U
zcY70vtTA*(ALds<Dr5NMr0Bpl!-+6)*YWpE_`6~x%{w_b9^gx`x)_TfZWtHgblnk0
zS=`AY;QyQxU{y61f!#1J%=uT>^)JNFV-d&=<3dh3SO5>DuL86mNfPp+q$VYDcXK8#
z<W27i-hySMR=XC_hH(K-;I{bv0{EJT&+(6XmFsPk8EvciX!UTXwQNNB4c=6a4jfdn
z-WLxE(EV5G$U$(@h|2;JxH+$SvB$ar$Llu2q`~!TR<`XwY`mAQB79x?7cZ?!Q8`tE
zQ|P*eu~@@OhV+V@A*pZv&M;>x&%jxwte0$}w_L-jDI35%#kV?jSXi}7)o3aff-tjj
zoaW*^gb&F_45)a!;z+0g`PvQyp`-MYZ@`g7Ba)=;6sj+htC0f2KrmH{tS}n=1bNg2
zN9F8i&_t;4C;3-&@Va7T#Wem{0p;1KDwrK$5o)HQjA_GhU04kt6Q=b&9jz|XopNFh
zrb>KAsKO_CcseOvB-+^AJlx%$xq2H%#?&+f<L!>Wr4EdmX$Y#@9n<wT{~6`nW^E;p
z`U(i(l=rS(u}n7hgk1_qI05fF1$?7)u?+eZ&V{&MOD9jO7*!{zSsJQn{AUzP_4CVr
zfN01nmsTd-XTMK7$U{iE`Shw_m+lViqwb3?AwEQZA!cw;*nt^dyb~7}fwMBh_BjG9
zT8Cxj*KfnS0O8bunFK$%Vuh&#Gvx0^3bECusl!Nft|P#VgSq7^45O$5?#l^ob57Dp
z`w1zd4gdK*R$YM_q#WEy+og-ORtj&c8c<gxyr4{WR48{VW2O2lK=kv)yY|s?G=&wM
z_W>Wv@jL?<bOPSqAk}nm{6yx}p+4|kEQh`75cr9*tK)~*=MNPP4ZDg;7-&&0f_xZ{
zfNax&#s%*ZjRL&_xs`86DD%Qz=uIHHjmVo+f7XH*D9)Qy@lJ8sQYi}1(>CyCnb>=R
z10S&=AXuRtWQ5Wb<+d@Wxc`>^Sdn6=Q$Q%4@};W=Q#8Sz%BcbVcC?DOT<AbS4U-_`
zOEmtjO+6m)XT3{9k8$3mgLJFX<GrTmh&2U9_a=Dbkpu3ALC46+i1`IJAY^b@%?1@&
zzPVQrX9s?f6uSYcSK%&9Isrm24xM_bW08^;s@vT#x^As%P_ZZUI3dMl>9>3D0(>nv
zJV$io&8rLlA;9z`z$8k7gsHThff2n@ha={7aDF$TZr#}N&Jed=-K{^a9wVB_u+_-Z
zH<O|Z%&_>SG1xmiVQ&4yTE}I(9@ErQmXV($cqFQUXP|s9FV4_=p!G>lIT78=8@TME
z3c=3`#Mm(d5~6q9qy1>AbTYKTq_zyk^;&OnY#Uk!ugYr8C3fjfoq$YbQrv?IBNf;g
zM!orSe#ZUBV*BsT;R{QsxsD@Koj6C_$hY~U&s&nuCr7?>Z!;?`n@ga5xExnV$3(Nq
zt+K}~tJ{9q^P?bwOA456l5mA=iKm2E9%%4B&fQKeO4Tj|K*+RCn97x2B&GXst}^Vh
z1a&Y>U^HnHBRu8vQK{dWXHz_VEeQNtpljKtnJoKJ>Ep-GQiPMLNhRa^SxXZ}I}~gt
ze%1M^*?CAc`wnQ;A;IVnc68gVDd(fFbC9tIb?U?4ozJht+?7pcurDZ;X_;Gj>oz<L
zfbG5kpFp*h#A=AyI78$9Wyo|42FUa;aUs=-pANfRJ8r574csM1*jp&+LhN7JBEtd6
zso6U3<Pn+~QS7^jj7y{06pqWzOJh67Ic%$-F6QCx4qrYx#!|R&$L?P!+x;w>J<ELh
z*q6I~DbK;;ihmjNIHbI8BxRf<Kzns9AK+zZno?6y)f$CtAK%$JDRFxt-(oUjFrwL0
zXLblWG<~bzO1J(b(xYVG<E-jIw59d*-U;S&F6R{-TQz;8LY4QG&705OgPC!uLT}kb
zjosIk8=TzLG$~r!d8y<M6BK`8okE$m1^pjjN89ono~QWop+<Mx?0HU7k^id{d=9?+
z&~2sDRN8dKZu>%K8LZLoYuw8JC@L@{%KgI1JLQLbsp(IVu*#>uUrm=i&uOX*Up~g@
z?%&gH=Mg<VWB7FYs3T6mmwDWL02`YWZV~rWHIYD@TWK!j;|oxIqU}9Kf-wXb`i^P3
zp$|jgz>{Lhh<EZr2IVzgq;0EULxGg^$@gxE&hMhu-nKT4A70gk9n$Z1G*Z1B(v^0<
zQB8oa@rSP=Bq>_cS9UKBjdEDiPgAPi1j7?lxCT&eDuO!RYir~=DMkJ#^t4o_aKY}O
zXdrx1$6fp`TzZvT&D328q*dT3R+^s#A-ifx<g5X^q*CPj>vhJb)?vkxNXT(F2c0ns
zow0Wtd)>bJSmpM^uM~zRm_OY@d0up5#x3}zKDaxOT3G~L!m>Ni&%5&g&oL4hLBg(1
zLEM+mW?z7=U`k4vADRu@5IBB*PKJiv=2wnN>>G4C{A;%myTbAb@oT;(WV%1)$#0F0
z%Q63GbnFX`%ssJcKNy~ypAnqzmm?;25=0|f558=2fn4H)uuk{plx<6)UKz$X*@AOE
ze|gSXvGBm)4!himazbI@ov~v4-UmR6#nEn*$;e_2LHDiQx*V&f-SH;`uP)9(;P3mT
zzF1lZA1STOua$-&bI9D$2ohvb+Z&xMI`m0Vop8iVzItP&jhlfATyTaf&?HK}@XB&X
z`I#_gS;XJy<zM2Gz6eKsNwu3PU@MowRUk_^MUA|N0eczZch@E4vG%WJnlJLyn#kkN
z&27P%QEkq70`lKwmG&?a?nHC{-%{vdr7<i+GQO86ofPG-hy!|8;hfPE+Z0dU@<EMu
zC^#dh2jQ%UIsfXwuI!Ak6zHTw+3SuX;2*W3{|UNi72^|BM*H?j+GmA*uI~=1Q#>+e
zMAX%haq7L2CF|d2Z2vFHZ}MjT_fV-aA9pqccVmRF9w9bM<DcSjD{#1y+ds&fnG-3g
z+(wz@N>Het>VsUEk!`;T)o~Xq|7D$jDP2MR%|4HzY}Z9aF3DsU?b9>M`U}>Kc6?u%
z+7S&5P0nUrG#-c_%W-OcQD~G2GC6E*uuTIEM1PfC9MqnelMV$9xbQyAk}r`2M<EqQ
zSBq1W7OxKU5U+DRrUVnrt&3L*VehFnG<A&$yCP*h6+vh}>`8rvs)3bKvreTMlmQrq
zG@F>SY^(><Ip@aMXGc7kYbn{Z056^SQ|-~*1Uk4gx+GOHv=c-ChK$k;+_MTJ)k+#_
zU0!0naXncT;JmIG+oSr_MvX>VHi^<UEtTZNJ`4NkV!0XVFPpr3(w0PxpCi8>wmtzM
zBo;=;2@mG_(}@n|@&Vh)*g8zWvU1G<9kg6TG?6)JN;hzRjF~^anZE)ExJp|sl-%N2
zSEGFc0DyQjL8Z<-)j>$h=|ZwbYeJO<Xb!<~>kmW3=UgiMy@iHlyM#<}{3JQp+<GnA
z>8w${V7I$N=$41mebkSz*1G}zz$a$!N0_^^qsC5<7ZRgO(bJa@<GiyW%=F~7vf2we
zWjHpFeX4|l^9By_oPQW7z;P)!Y`NG=<WmtO%I<X){9&ftg|(L165!rZC&&8Aba`#E
z1&&JibVEJBDapf27nh!sAh7LKz0W$=h^EV>1^;(t6o;u$`S8zCxZ(PM5Pc9@ehXH9
zdXOSWX=);0{PssyvZkpC^65l`-{*B)EiQ2!#uLSb<$Rwvc7`iu<pKAmc9i-KIAB;A
zQd$}2-af~=bitcjgjF(UF{^GZi*BurRmL+L9GAK<z6CMjBXSg{(>F(JiVNNObz!o@
z;HGDKzPC^{UO_0Uzxn;ujGi#TDImHGQ63Qc8~KSMcCDMt27X#c)Mv(GoWMiXLS_=>
zPuyUXoNyf`$(oaN%C-h(c;dfn2ELOfn)192Z)zRSLq7bPc2{kZzy8IT+1z*l+Iibh
zDdpCc0KkN@7UPv`b}sL5m3=*P?^gN})DUl08C^K+bf;c@vE@q3Ns^EfH83o(xs_vg
zE?<8;*3&BAoS@j85GJC>n`4b~kTBRS(DUFaUK=6*g>2cViUb4pTMC+&65+ROF3}9)
z#ASp96bcZpxF<2iJHW;%=+@?gCn<cvjMf5^0Va|0Olq{7Sj-SFhC`EkY>Ssdl>6JS
z+~Tc?S991&<Z-wdl0HQn#D!N{J{f&EN=M7ErTUG;EwK`|`}e=lXuIF&XQL}5;PN&Y
zQO{NRh{Y+0m>IqF%k)r(*}2Kla+@RKLf_*Ln~V>7ghQOIQQ4ktj_mWYt6)#?%-K&I
z8&P6q@Hdn*lJ@To?@th3aS{xVhRKx3Fzq_H$g}OQaN#)HK34SEvHk9S{x{A(`Xr=h
zFLaF6pk^Ho*bQ9=ZYC(|`~v%Z&|lqcUppff&@d>)CsMCSeu9*3pFBb2LjZqsI}>Yr
zgEy*ecxpD{iL<(Ra`Nh64?OsSpbiHr>ZlM(`+dzTnh@w#`JG7wyrVYJ27lii{q_-Y
zhuB{sDJOn{19Y^m(1AO}`5YUjZ-N`@bF|5xuvz$H-asqpVps$MbP+z0A$j_NQ(S90
zk$=K9>TnWv{g~?0w9E@Z&h|xAiV`5$R18GDWu3E%0!f`w_c<2zIcBi(Ry@)%6r1o7
z^i?Jltj4x|_P{Db=?gxNL7Fv5MolX-YN2Lc#u%zJtk2DG_p_*r%3;KSAm?FbKZ!>5
zxoRUE7dR<kdH<Q2Ry+*XiqN7-ESy<}T?Weu9|s>N^bNQdhnQaBspNXx8sj=!k8#)A
zb%pgXy@peVbyk-7o4`|~7#&SrO|mWAW!4tTE&OHn7P=!Ocm#Nib6+5=1M0b7wl5=2
zh)|kuDJBYx7S_~9KFle$f-j#4<I&@3(_h`O_tB=q1F@=P`3MY9>_Tz;BB8N@XMN%Q
z;JYg_F@z}fT);6GsRxFF5d%!RkF!Y)!OD3tdC7VarZuKMKgkgvm#1dlv0os4`h3K&
zBR57iIc!8x8?qIZ5>$ON;8kQ&7vPAb)z_LLyR6<*{UA8MS7!3rygqjm`-=I;?mCXE
z_IirT8f6^g-24r;5#m1Kl|oY3;qJV&*G>;xr<*?$B8YUs_D;FvYf!y919x+VN^eJa
z2`}K{vXohMzrIAZN?_t@E|OASpC|F{LaE8*&5Y|2mbJZS#OO#t#%c0BkgfD)Z$TqJ
zNrpwW#`JC{z#3>zuv}_kzu7PnR~p*52X&aYOlRiW=o$;ESsQAWWU16Qa&pPKHwV_N
z&g2|t)G_S*SOKO-SeZ6kdH`)wW^MNGzdG_h&hEC3F5O*Q;$64SoqAQSgN%AX2;i4@
z&8}R=CK#25Sy%PQ5~ntp3C+9(>xJCDaTJ95*2wk=#Y%S}CWhW7WnCe1l-gA}HT(JD
zSS9h4tU=A#6}7JF?4qrVEj5XWHI6DA3@r)R?*z?>Guct(JV^4zDhpbQOr{YH%P$mM
zB;;LG$G*BTV4c;~aCYYE(J5bZxIlInqw&i1r&TB%to>Ll5888P!a5OnvVP~4FU>@&
z9vQlol}$^#CnlzhSw#rVAL@HoFk2~#9JPIx<OiDEyUKY;>-9We#r48D;lsH`m;;wK
zQQv^b)pos(JEdinv*X!m47sJ$BtHUt)rpZb>6(22Z9K#pC;)I8ZYBP7ah`9f-ob{P
zkZN|SKzt=@L9C;)VFa8qYnBw1QkQ>d61qY2f8enF;UQI6U>~t7QuA9L=I;SoNJ~o~
z!oBy^+gv{+R`3ha3*h8uROEKuJ{aB&LB_E>Dr!O>3^_!Bf|po@nfNk7&q;h!e({BB
z-jHah(2IshYPo^M3L+}t2MSF^E1UJvvKu7eS4e^79=^zJ8Q=R2-E;VgJ~v>(X9GCA
zEgaSlaCmwCh>F62Z^$|ygadE8A99Py2bE~!a6Kd~Nc_ObK%Za+SCQTaVhJwCn40yy
zWlwa*edVXajOdfaj0o<E$_&Y6jj(OG+Qg8`nOxA*;iB<;{82@rUy4>ul9KMb0cAq*
zx7Y-widd=tsn{>Aau%D=WI)NJ_BV9qL`@rQxF27jA~33WmBRd{@0pICaq5zq-_To!
zycnEcBOc`K5S=-RVRuiwc3!-<c;}5WH!E?%a;^H;QT5foi&C5*W%e6HNmWQt&gH}&
z$V*-oymnKH<)`f@PWT_m?CpT8iHtCKrS6=v6`K!JF)ZN~eL6F$lG8H}Hh5qCYPN!|
zJo9Sc<7-&0ldATMgsMAKs{<>|y;8MVrl(B~qe9uty)^U6cqg47qt3+ly)fUZgF3Uy
zh^Nb+g0wW)@F)wXJo8EFgaD`QST{wUC54Aimx7w$e|!-$P^WjZQ2qSI{LvV9p)C=!
zFTan?zT|!*4K<jlNi0+u1?wuu%VcugpRUbRq+1g05itY*<{G4sBcl-@0|+V9?FLv5
zM^lLBcv{}Vg9;0QZVlAo&TrR|?xfCud+2j__~e|sbS3Gp-w|?Ex=wcmVin8DOUV6b
ziIfR2ZK7x9hY8aS;WI#<P))SiH4iI}n`bI-=?hS;+oK%3U>6T8@20z(#W($Qxp$#X
zv2U2})r@ATRjUw&r!GiS<$rwQ;OsK!=>aZiNqkN~uwm{<y_pJB_P1xaUGYUI<5xHW
zxOE8;PpP1mPO6N-3&>oVhg24Hs!hdI()G=5=1V|Wtzx>&ODqXUF3G$*e?%y$uCcj-
z^3M)WKv%_-C}9@Sl<c`)6O%a&CD)c8prfs_o<2DsPxs))Yr(-2(8i<TiC&$5NLf+@
zUAJ66X54#95k#tw%I|aQQ61t5yJ6dGxB{zST2;zO4qfWM<V@RF@kOePtz?VZYfin$
zZM_)l(XFzjw<OF)Tzg`+Ws@m{JhoT*^z$5UK^KCB@ap;$4vKBk27O?xNUchTnoyp|
z@~cEj;#eN9=_Etdt`P8T2FIdwO5Rvr&_jk+oedu`(1H4}Ver`MYTdwbO;2W3Phn)r
z>Zu_joH@xt&QOg}T}>tUeT5(stDrS&n;oklN<7GJ@Sc3^%*W(AZ(C&DieKuzTb0y{
zlCyvr5<M2H^0HLD9cp_-ij$>W8lWUij$vs&Q+mEvOFYTA0vN~R3Nnf~$$r~PrX@ut
zC5YmihE<=;)#<^HE*w*bs*aHiGc9fP7BES|s&+n9yzslKk8N?p^N`;q*{0_5y&mF<
z!pVDgGABj=oDrGFo~Y?H(V(_Wk(l3_ta0IzqCV6RzQ^8mxJ3hAB+=)2L`~E%0&Ajc
z_$BAJ#uH0STaBs!Y(Q(|L*u-qLhKk&oW$6yB7bQaJINNn`ib^To|Bj&irGy%shM&}
zJF3NOA)*5Hu|yZ!+}sT-`@8bc()!Sn@I~*kN??p$lCCeVRh<~38PKX{GdqYy?ShR}
z!PhmkFH_s5fx(Yy2H2F%U&eJm)YIFLsDHWsshQEHn9gNWM;ovA$5-28Bjc;F;&Ec(
zIT7hARQGZ1mW$R&*aMHG8SIFAU;F)$`iQlK(ng)us>fze-6)Zt>)xP3FD@z0NY>aK
z#C+%uQ=gNttK^wT{yFp6u&Q<C1In+>{^ehy5w1j0uExIbUo^E5^ZW?%ImmkF_R0vQ
zefy#zj(;i>Lc%$BfDXagkfm&BTMbyt`+5{{yl9+lbi-K@X<Zbvw<%12Y3U+?&>pe3
zDMDXnB?;)($v-+bZ)=Or4i5hoWCHkU{Jz|Sza|p!!L1bPy+U~^0xcOr)kjrgC0^nh
zG?RH-lHwYskp-8)4Q1NoVLvJ!p)cqX9hFCFGi0fTT_!j&#^m1Z@s^Ao&0N^LjAV-K
z1@;}=1TL>4p4$ZGa&;<rD5pnS<Xj|#NZABfX=V|q?sQ`{*ald65cL(!X+yE_Nocg^
z(~TbI0oDupz@DQvoz#6)uE+j6rwWb}w;Kpgf24v(Sqrbgh-hE^`v6N?3*X_pJv#@k
z0UpBK(41m~hmSL`RsrDt^)f%jT9$_sdH8IYqK@?&Ni3Q;{4A*m$KH*rLLKsP2DL^>
zaav795HNH{B(90eu82$9=H%9mE2Nsdk*UI@Rxd1*QX05=UB)yy!?w`^i?a_+a$S_E
z?iqAX-|dmOCeU0r%C}$~&=MLWl(@#X$Th0q@v$#ZIijW0B@sWUPko)a4!K}Fe9A<8
zk4>|H09HNpp5C(Q4vko-n?h-o51~3C+Ly0_qfc6kUpsL{P}(MwGB4k-WY>`RKIzcx
zz0aW>q?KAxS!5rVo+B}vL`8FALqf6z@#v$5E=TE>r&^GkvTd1zmveP)dj;mKdWbm#
zfAbl7X*HOK!eg$fFV@W{XcmQ<E8CXPmMV8w7bZ5}Nx9_Pl;qRzF4RJJ7-t>R!;&H(
z_wy`R5LwkAb7~m($6O|A5<9iYU!_pXu9$#<U|VHHSVADN-!tA|Tb0YD&J;Nlk;4Ed
z@Y>uDWnJrl3rN^=ltzx~z%IOgydRhY@v*g%07+F4Q9xXSQ*1H>ba8EIJg}~ZJp}Vs
z`gM64)b-krU(smn4howq-m2=g=PeBcg~XqZB<G{B6V~KyEDx~-in@IF$HuaN3EL4T
zZGxG1r@Q7ECg!R1!lpP-z3?la8XTWak1J+i+#w>A?+&h&qs;N$#*d4!C4=6G6SG9b
zyX5^%hTcC*&Rb<nf|*>kN`hcpwY{laj$oI{pL+?)Z>4a1P8$>KHfs4JNAu&}&)OAo
zbGe84mW(+?;@{&}LW60x7VEmCh`w2Z0?MWOyuXF8oCYcWD#eIT?m5LsfMy8xpQae~
zX~HK<li9y9U^Ik^uE%8kBD|#_rxq}j`|F_M&$tw1vb0c40+Aq$q9X*}2Qt4mG+EhN
z4pE4Cnf~xn1%D2NFEKxGBhKjr5dv9o2v__mY%tGAN#NU{hg3JYQeSKZD<D#?z!Z`N
zn7w}kMQbXiv8$axDfLI(8A`I7B2$65e&rf%cU|X>D@g#^3gK`p`aR}3Z1WyKFs)cw
zV)8qkaodOSaQp*YWd*f1`)nquQ?g1=*h+!8<fCl8LqQ~t$nn)2Ju}%u2lgD@nhH_e
z1SbQI>RF}^ikfV%`OR8AoO%8;f*$~@PWgMAspXXdk`8$<CgeVPO@~sh_x!HGttf+=
z<QhP+$l@-o*7a6mp|5>$fG~G1DgY+5U89X{t6XW8_HetU7gOj3)+E?B(`j-P6|)Re
z>N|aw(k8nxTX($av;VU+sBB}l$9O}1UBOxAY4WCtp0lOxN=%J7p5jnQ;MO6Uww0Y<
zY|As@Fvz0yw<pT|wgG;r$9@>#QBE=eF{?lDoJ8{+OM}20jYo3q^U<{N#)xc#qk#dt
zf3Lm^VktqDPANfE%fVif+9E;PWNf_(_B}e&ut&j#n;nESyMbi06d?i#5&?8tV(!5O
zL!-G=93(LSx;Pu8zq6N5IB%;rsp^OSC+-8a#OF*8zuV{T_#r1R=%a(^pM6NU#LsCS
zuiN#@afyTex%0qT4fy@1_$O`S#t)(ziDB)DoOKz9bX_lK>*wjM?LZ7@671Jh)0!lM
zjStNVD(p=dj69zNP-is+66YCy&yo9;G*W#6UF_%8=6XZz4hQlrTQR?ZY5B6O?&(dU
z3-$2wU8ndTe)k)!8gHzL70#dV^WH9IbHDlB{p6sk&j6s+<x2MEiXcaZ$fE%h+ikBC
zPCt;fmPRf{wH-|L5%L}oBM@~@)-vEy&h_;Nz?)_nz;2D{>nf(pwOXIuv!t4(4=ZqH
z!X#$q@nSt$XVJD?Sog17#+-9Bt(zo)5$gp-R0DVRcU{XQd6ae-4ihSSU+fT&1-nvb
z&$Tx0mJc82H}BXeNPX@>5%M~o8l{}AP~a@h8(#NUB<;QBQl;<M6kwPYmW;m@>wcSJ
zQ=r9tgLU`5KfV!{GC4ffRlFZIJX%5gJzCB>Dn(8tjaB=iS4p$^E(w<Q2y4oCdElRr
z>oED$`8#NI-xmK1#53d1`~fLkB=ZM~ti%|(!S@A*ucuhi&4vMc8PM9HXJVO-C2|eS
z;ypPuTCd@q0!%tzN$P!0H87ZBVMS(TT{18r)G_!p8uD68g$-Zx?maH;vLWVyA*M4P
z^g1qdb+|Vq{{W>OBflpBzo##88OG{e8P}-i(hs#ERQRV{aknqcr)WEB86YjK5}8pI
znBWnq)GL>uo%dx*lXTPBMC-kSOHBtKi-<TYaA0M2NNJTjxZW6~I?ERlKRIPr|A_4;
zP76mVyRv$#-#Pg6gq5R->hLQ{mJNcoyEk6|0#9E|6JbA{Fo6fF-0aSx$zdbZ^wY7*
z#_hYD@3R7aI>)yKnl!*K)Wq1Acg7K$Ps<;s@Jt{&DJS$_8P7|#Dx_T9>U{@kebW@t
zFu8F*y=Z*z5V0gy$SGRc49PRDs#<Y~sM^1bs9M<!qi0Z)g-~YdjPreE=<*%cykOyd
z8(*KX5oeP|+$Hbv%+&7jO#GmT53vjD7y{Dq*anAd(AKxB+f4aBo*W++TvF)>9~wV2
zU*``o^>>YI`YQ*G%nm(pHeto*UPr3N_)O;?quTY7%bI6RmuU8f-E>I^Uj!Ai<<xK4
zo%HcgqVfoJ@={hmIZ5rsbFLonQubo$Ded)xsOp#X0<lry8CDA}KAoKq-;SNkX?+ji
zC?A8t2DX7@dL^at=Is`-NRUQ!UxphI9_!K%q5Ex0u^^Vl4R+x!9F;I9w;o4Zv)0VB
z)EEbM+X?93ONzX^b?Ujc>(ru|e|w8?t4!Hi=<L8YXUjf!%3rZQAD;UrJeR9y!lp-o
zgg?V7Cg}Un@;6qm$tkfG>!sJrtn-^M>?2bR1ju@m!ZuOuLsE4d2TzTZBUx4Z<F?GW
zN8Cg2+3heBHd$#04V4lH3(%L9fCH;iu-sAjI=JlK3AgM?w^)NoM45<~B?YiNaws2k
zTP~G}w=QJ|1P0Ju1YJT8pS_rL_lmoZ!iLvh&jK{R6~|eB>ev{pnuvmd3ccm37U3wY
zj|Y+|9>mdJiqH?-5)Ir!a67)<t53Ykih3%25K8tBEzR*v5`SbSV&@k|VhLzU@y@m)
z+m^wS*qok1WBCQRDYVJ&6nb*=xOS&}m`?Z(q7TV4M@(OE!ItIi%XJXkUf4ajLA?GH
z?lnQFe$i!*$t`Pj&)^jP9L)vn6h2GA#rwSoQy=rq>AyI1aQ7l{3V5|Mk3I=4o?<xk
z!tX_96!5m>9tFb{#*2LCuc+1*-u#k%CM|!PTL6B<Ov{S|K<EII*s})xEO@@5ZN>ak
z`?by;;!h1h?lyOdeQpZ&FW8)d1p|Ee7cw^m%`ye8Sb(7SZ$ST;YZl`7_l_6wj?3pn
z8zg2JEB_xhapAcm!T&w%h@_1N@#LU5^q}sA3ryj86tI=%kNl=mgz)@Vu<lu5LFmxK
zJB1fxF#j}#cPwY@zEm)BlX@_pc5sh2SBv1#^La14(_mGa;dqc|FI*@QWpg?a9E^Oj
zPDmALJ|(>b&qwS|5lnvP%u}@fkiV29)6A0Qs?T%TW40GD{m&-E`7ZxE;J6GdebEl+
z&*Ex=PyTQ<FLE{5W}g@fu}lti)vI<vcF#bS(j8mB6`Om9-*E0kk=A8C0#_W(W{al?
zm7D52>5LdOjugZ~lu-}&#WqJ^FtJag4_7t@3*3bpk(wf&PDGS1SqC3a=am_V_DCNe
z9>i|;#37Zg`#n10P7S!pMsxReJUfQ2AKX~&*h$5nBN^ycSzwzEVq?jlkX6Y^3MkM=
zFf1-c=kJ3~ahYb@@qpF7B`$Lf#zj6K_=1!p8VpjDLTG5kSsWET=FPcw8@o^2@!+xQ
z4%jlbi?8JxC?Yh3`+5uyBv;1(@Th0_jFbs(1H{+khLy7kfX&#4>7B_NcV$E90gfmV
zjg8rho$*=O{KhwRo&kxJJGYf*@{i!hJ#83?6@BpAK$B*x&`Vm7G(^n=_*@Z@2b21i
z1+Q3=(~$d)a_{r`IX-qP6n4hRQOVl$0F94(xz~@m*V$7~X-8%{=F(Rzoa_SAxH_Y_
zI{Q;~iH&iG@oF{^@9hJD)Q_`vfx}##_gtMdsk+R@PVtrVeRG!RDy+T872^1K6pJ9d
zBUOX&{C?aw2H}LP;v9GsVc|d0!%va%)=B5GeJxH|h@1Swf23K+%htRn)A$z6kQm1>
z(TDxUAj~V4;lLowx)1xiL4cNlzm|b-$uAHY_?Gp(d}H9_)CYNK;Nw~$2(LyOKp!oP
z{hkcrTQoFBECfgP6RbQ4Gu{h!pb5%w$%pk=Fxe?{NIQNm?3p&xRO0-uD#~ra$8$p)
z$_OQcDds;=$w~Q%&+%`GC_hU4|D&*!!$OkwaubB{Z~vAGOIFHF(8s?;pd9|+QU2iA
zD+x)I>~E_yrcUt}q*AV^l!v~tk;2c~qTIw6xe0T*2|pTBG%2(4CMNalZ;$d5uJKjG
zlpjSTC*>yI#=k}SA5bjHk7AOF@)Jt&Z~u4nGptktRs@iq5e@6ksk~K;zg3i9QEu3y
zU~5@!NcLgb2oNZxk{NrP6WU7aC-wsVC-U??P=RddPFtO&Q}HrE3i~~EwKT-jWF)AH
zEk*Wbnfj==_$di5Z6ti8$DY`js#YI6N^h&iXhwS^JWa}QW9qt~ekCH}vpr0y6Bhmi
zB2scGAk658dl&^)4t3>Nob`B|1pXU6X5bk`=nbWD>|pXnHk)b=n{^f&-B@y~y%7-j
z`Z$NJ)=mYAyC_Aj$HU~K{lW<?7;m>V-WpfV(XJ0|(6Dh2e25fg$q->7kzo0<7JAH_
z5w93b1%KTrWlC+FC3{S#+RytyYbKVVes{SWDh_`aA4^K2h~2kaw{ki_?n0z)DE#qQ
ztPFmv$SX^gAf7O}0CPZ8>5>ie5{JLiKSp_L)pvWv8)Lj8f=lOc@x0nZjaB^$Q~ipO
z$B__8BOq|N<CIvebxEYLrTcJ1yi!}Ns8p<ICR16FX(rS}nKjaZQJo!u2>7k~)d(Bf
zc5?9fhb|YYHNG&L^boF5(Ntsdk;+$p${4nPk-@9g{C{5!mc_V6yV&RqZ&mv{7_2&<
zk>2r)zvh2A{73P(#p%LjYh!8OcSbbdZmYaCCRQ&;WJvPGc8|jD%7*65fnLsm{%+Ea
zWFiEq9vzCk5RUC0gdHx1kS>O>S9Q%X=KEyQPQL{r-vVI_9bZ0U6I$Im<bCQu^Bo~V
zB0-XI8Ovzkx}1PPX*b)fc6U~nRu!yF-*vLr<mC_C*V}8NM$E8f-x8ZLnypbGIt*OL
zE-Fy-R6ml0)#Od*d4(S3c_mw8oo@ASiN+Xf>pTT<Q6hF4@3(3dv%}b=lz<3yv<<XT
zBCK72ty1>q<kB{Apwne~<@O(ZbY-h$D_ILm$c&R#!&X)t)pN$f17AI6_)2dlhu>Lv
zHmzc#qp=EmX|K=EFI>2ho%;sWyl-d&om+=xk9`}%T9^qsvbZe;r9W8@GJI*8vtgp=
zv6$elrF@!qdMa7JU}%EnBS^<S@?I|i2IN=o0UNYL2ZKv2)vF~<DqAhLPpWDVfO$2o
zRUXENYKQqX0QcQVW2<*I-*zIQbai{ncvQqMgQZr~M$;ET^|dEe1^J`(hJcwAjci9y
z#i6_`fOvKTG`euH&EB$GR_{K%d8tk(u}qw1qo#M!IsRRh#@Nd5(yLedv;!+;6|-q<
z_eutEc6=(+TV|0Dax0!Z9YIq?YT6qqiY-ld9-e05*T?R{blAmD$8N|re{tB*qH%6D
z>*U7uS*#Z8M`dI0CGNPsB+7C1c@^lGTlgNN&3Wy*`(dBMa`W7(*>eoEI8xH$bZ&2D
z+njIb*6lSvRPr<gK=QIi#<RVeG1ggjfKtEGx|XnlT6^lSd~m5nfwc&HXG_3kv;ym=
zj%e0-l{%lfBP1CCnz;k_bAR`_h=`ESc`u{MgUbND_BycUblC`5i}&C#a317yOq#!1
z5)~Uo=xh#qTae^lmEeAXce}&9q<+731=r+&>|#poVv4lHgJXS2&iNQxTT1bci29xK
zN?F*+EXPB2gytpt6Ay-$<+&Haoa6{Fv~{Enpt@dGbUHhCvv2WmDQ`EU0$!F{4dbQd
z-^$nlnE&-YBrnU(XBq@XpLzX_xn=WQ4%H!T^I{fkxPN8q2Y%qrm+um%vtWQvgYf%u
zF#Y45e?^fWs-e6N+W@>Lv;TsgCH#LZ`1L<@02=%38P8G?ybj4{>-!uSpHF<)0oYzC
zvp<>TzS$>ya6o?If%QuBYaMC-8#z+!et790v)U5tH>NcDzJo_OJ2O=~Ge&OqFRA#_
zGDIRW!<6|;f-;Z(sXVEvU!|W99jWqbsPlV%{b<E*_CK7NQ{A#-c%_B3j&uQx*UH#V
zXOqG5g9FtQPuxR_<kRrq$=uxF)jrR^0ppc2wv$=Bn|;Iw2bd=wsQ;ntf$3G!no|V$
z{$_bBh{p*N%e52BzKV|Bba|w9U84C$zRYuYAYI9&d82(r&2EspjOQW<faU%}Kg~07
zj+B2Z#UL4%+%?#|`*R(Ek)ZD@Z2P$pzuS}Ox|y-Cfu`DG&Wlyg)Ve9uQAbh@T8qy2
zKj6Qxb}-8f^?ZN5uB1IVY8|>`ngq|*?GQ1_Mk=pKaPoo=9{hZ|HT892TT40I3ru@I
zSBQjQZfQ+(fmcBVYx<c8p98E=5f**yRi7IM{F4fRu4-4_ZVV6H@gTI{2K#IjiaX|C
zgV)AlFwfWEoDgS3G?dqRhbafMXs4)NU5mkW1ZXIx=(f0ML1=#r=Bh=nDAtHY7yL{*
zgE_+gcf&!`j|)IV8=tsj`V*~XbJZt3kLXVT${C!CqPv-}+3{n;rj}Ls+T;WK9NkpU
z+~vh5x}ZbdR$ipa4f!jro|eH20L8m90JjCy{j#9=_ewq*<;Y55(UqXV(@x^1@<K0-
z`c<HTAz@Z5g_6C$7NOAQE8@tN^;bcsUDV&D2QQ9mWv9wwZrR<QzMg7z-<0NYl(adt
z${?##O+L=f-XR%lt+Y-YMjhBn<m_AI+K#A<s5NFQp>1n+aeuKLxdc+X9eD7&0Y+VB
z?U$&zkAp7E^-Wc^=SPXbeI>ZgW>|NvJ|D8>gRWb<`8sp8?myheC+nxK;j$BojMn9s
z`4%6hJeJn4q>nU);=5I7>B!z;O?x`Ysy*=&-6^`=U2Co$UYA8WW>pSfAK$;eXFSU|
z{DF{K;u+A$W_-V0`f{PTKj8v7wIz0G_wkPX{2S}bfCv579}UPJaI?mPpKF{t5t9(W
zH6DB~jg1u;c`%HECufv&1P~2)gAd=IqPyB7*`M%it>g@~2VKswgL`#at7mbtY!6q6
zqD5}`=WwqA!$q7r#?x#*Qxh)2NjUXn^XgaQ1z-8+@UNQ4ase?S|98~WC=lS<VwK5g
z8{Y1W>G)ixFM+;GGahI{5prdh-8@BNi8>C0W_gcbK9Ib8k~$qvC;DO?DN6cdbCg;}
z`%+5fwaP&=v|E(HF#}SZ|C-nF?FBKOG<ke;0IM1Hx(n<Zp=`<=YM=2*<YivmWnR4H
zdDvy%_jt7Ac=D3r1(X9cEFbVJnOO=M<r9PH;%mj2bM_^rDJg^+t<o3AGPH?bAQ_`(
zrL`Xyzc-j!T5Z??T}|}P-s%t9xLUB+<3G)@j2rMhtg?*Bx=THbr*=E99m_tPk7~k!
zm?BX&DHgPHlfunS360-9HsZDuey5W#8;Ma*4Qb@Gl|XlT{rhmY9{KvHkLs_bKPUeg
zv*Q5RaH!gI)Y@|Raiu^<tbyPE{@)E&hhMK26CASfe#k!7MoksreTM;6bCh0s%@BLW
z#F%kef8%H!1413JFO;PtnZGjGhYiOXuBwK-ST-dZzqFy6TRoV@^-zlZ%8HYj2|Xma
z4`|XeJt0vx9)}MYKa;>N``Jr(WnNSl`>ybjn<q~7aO=~&d<;bdX5#_m$hUa?R{M5-
z;;Unp{Bhz#oVlC`e&EQQzVyRK=%u`e>yaNZwcPgFqAsyCVT?B)djspyRz~GZcDvid
zQ^=Shk%%O&(%YOHHZ_&GwyVF+?sv1{oDOaBontMM1u;(wCz+Dn@j~0{5)TCh?F<WK
z+fx|xrLq*2l=3F=FSHShXU?aM9m<5y3w<;)d{xQnuZGuAjHs&;$V?}alt31~>j}ot
z2&$3st4cQiIlPVoL|w-~W?qq`G_qgv`*qx;2(qCbR3rUYl`Q^qxE&UVx*UPb1S0=L
z)_w#2u)Z7@N44~S;@;Fu0(V^@`$W~FfE0l4U{9MBBf69-W%7EQllrc7XiSd$NVe<o
zGMQ(ek0F$F?^Sl>p92>W`?M@gj0CF7%YQP6#`RGI^ZEYULHKjdHUl_V82FO4m$0TR
zOfK8fYKNhe6o{LRL=C(WC6K8)45{JuSd3~pk_4cPdFo4F5QVf*j61!)tD~aZaG-8D
zq6rb(g#%X}n3&UF1wo*~s*6I+A^T?C-GyQEcgR~*)AW`T4c;ya0|F*gvo4frJg}rN
z<weoNz=JK4yy&=B)&+p(5l0FXfUe9XkMz2*UDN?uz8gcn>FIt-zAnOcjWs)j>Z?gM
zp5$Bp;5^vz1wnu~`|hCJ9cz3GVlI=&ACwXpBgz|VlC$%VQ-4{d5|XW)ZIVEvP8s@(
zK4di1UU=mZi4}>C)5<@ogq+n%VV0nG<GwOP^k;<;#)HZV_mS%nq|qmhXF(nK2N}N>
zF=FTAlm~9RZ8*?}8J&{{z8areeUkRjB*C$2Ah)V#^Wz;ys7cPqc&y`vkTkH7+fBUL
zMU2E2%gw5v#;kKmgEbVmV{a6{GmNJ9*otzLMWPE&VL?0e&3c4iK{ayfGL@p5qbpQ{
zTNvEqIgvuMXNgI_?CX|;PT7~8ubd%lNgeX}p@|2%2yVM}J>vj6D`l9lfPyXQ0i^8u
z?(X8uBV(m&-PgS=1F#)5R~(VeGCFPuAJ9eS^l`3!2Jj>6M|EB_Uv^L+V@Lg{-8?8s
zYbo5Aj(DpuKPh*GxeX$6=X2W~(&oW9+@TuZ3$>A{iW{9QNX}+kZ+V90lArDJE#IQ6
zR#iTUc(xWp@IH)3+91~++|>t*Sz99p?#ibpo^||@gJ<Xw4$fV!AKckGVkAMSKEm-g
zhE%qOaF5}AG(QbuFQFbO<BV4OjPsKOza@Eo?i~sb+aI{!7BU9$?F{klJbbA>xk&ha
zXi#eyKFZb8E|}zxK4S1XZJw7Qq->MBS-+?Eu+GGjNc>oI+)4gI3)3TiR}u3OQ|z7C
zxUBqzB5rTmhj-Ok8DA%5OSpqhkuFK+16}0^gcx?HhtX=XyaFfRb#k{NU&u~km1pl{
z(A-gnK80j^{Z7wGMs88^t$|~l@)sX5Jut+UMaTb+D#f{Dh!IGP_sCb-Vp<aZOS-E%
z|8w<P2AHsKb|NDIm5!kW*^)qg8fLW+89FbY5Rr}Kd11ykiBmP>nap5Op<pnu__VK?
z7uH!J$5lW>P->pcc-Ec^xHtSl6D!jx_b_FH8<CF>h16=M3Z*(Y&?al(x{_bPY(q4E
zd6Mt}<*fhnIa+clI5>HN--JA<!`%eYUk>?1HOau)Z!tK`jNH@tGU-)q+v~rr0d;DB
zn}qyq7{Gz+5Er1}P9#c^Zks><`#_@(?}2w(IfA1|#L%~6$O7Ic3kTGJq=;z%yH80T
zo!8d%mlb{9HGSSaH{9M}Yq=E_FEb{FhhA$NTCc4H^`X|s-K1(WFWBiPnZn2aL)%+G
zwbkrx-vtU3FHqdtVg&*eC~l>=yGxK#yjXDwlw!qNoMJ@-1a}V<D^T1u0gAgrAmrn|
z&pG!x=aKV0?|R;s^~>yQUo(4lm?ZGuli4$w-Zv(wsYCZWZ2hI?*{q4X-&yK2uWc@G
zXJ!BqFF$D#oAvNCYm#|v`Uf78vA(6}S8oUHhiR?F@Q!#Ve4y^@w*oV=IBX`^h_8;b
zjQJ9{o_v3n)$IOf5b@bhW8gJtI_vdF+(cgX^QExj@48|XPMBjj9(y0uIBFf-x)W%J
zI=|A=7Be4DK31ob=XGNWK`DgN7Js=YM`d1cJu8owoJ>$PcHGQnU_6uOL2B+E5|v>s
z4HJ8A?b`6~nHq0eu=>GdL5UL#WC*_|IYTuNZH{E@D1+=CQvTwO5vlna<egqhLc9g4
zFq>FluQpoKrLCQ!ky|~GTbZG5wKg^?<wp|FePG5$Jo^|JAykvw6?*Xj$IpHw>)Xwe
z*&{!DzhLq0Ys9atH^U1Pb9Df&_S{ePYQ1P1=YKGys(C8tU#RtSSJ@{(xWa3~_xeoL
zBJUETmR%y7d~oK}a83W<0(2imc?EW$2BcNZn&R{iL=Tg=P#kzZ*2}W7#i%!`AnW`b
z0-ISqRGXT(pK!^ctluU}Rv`6H&&LaR8S3Wz?wVf<z$0Cj@$2M#wLu!A<;Dx&#FJMI
zL@N8-Xz}<TE=c*(@%%bGxfz!Z@fd+*?#^9eAu{}i3GQxNZEJ2fJ&uU#CbEGQ)!++U
ze<RvJ5kg72@ND|v?AWf9^Ujo*t`v{%lqIRet|RNNh-!>>M@mi4rvo&%WXF$l_bN<7
za6q1Tnz1YcV=_Lhccq6-@)V?zAD+)K5i(2@AJT+h#&q5Eel;au4Ip@%D%9#syUaoO
zm+i6oQ^eI9Cd8{wyDS*HM+%l77xLV1uCYd0?+IR6#W7zPSl%ah-Six0By>H4lSCDt
z32UW|=U3?Gb2#>2e(~H=7gagGnJ5kfiDY?hjUNp^pjUDB@eTOg7~|Qf3bHXL53CzY
zdszCI&NfQa?hg#+b2*%dm5sZ{$*XE*0e?yaNGd<zkSV!7qJY!#k0Q_iN$MSs7fNWz
z`W4`otUQ@~%{du)k^Eq+ljM=yqraw=iXimmNE<o6Ab<rmos`~4Zi2Ak52>NXu!jEm
zx|E3@IjFVWnTrYikNcfzDtSHS;2wI1-*D7?a~(tE-GIp007+rRfNxwoyYs8BvZRKu
zzLqhS*n)J%WXP88Meb*o|54KW27CTe|G8iIPx`0T*b$}LdAdG=k4;~V$&&utgaa6%
z9Qk=ZqsTIXJ?uW&iIE%lUN$bOWn7S=V0HVo_pzNyf`V1VtFV7gYN^y~d1Pp$|BGZo
zhV0$r0NSw%CWLzA9fJ&te2kS}D>N`rH+5S-^sNzN*mOh=zol&q<$o_nCDNLdK_Dky
z;s)CjoS_%P&%f3f{4xZr07!(QL}|{Y&?|adPIp9WFYRnwrtj*b#`T5Xo2a7LjYw@A
zRvlF{%I0o(p$G!_BX{8+?z9%f^4^I;#`k%kj54Ha{YJ!$eKre^K#1_kQZBQ6ds<#7
zzwn{Wt%w_qpJ|7gP4$c)b*7ii#dxszVs6|Xd2}%OUKyre)H`Q#L~AH?#CUX*^V^vZ
z9-<X9VELnjvs8A&_Yvb;(C;>E|0nB+3)HXrw7H@80_krtm_8*xkdk>Qqmi$yO-$w|
zt<xR$xs4vrcMlWq;xl~<ecWexjYw))sc(<odKIt)Gkq|4-63}9b+GhF1F(5X54%Ky
z?nJX4Jnw%t*e>}lJ%H{bfPjM+Pw(Su8BqAv;bSCSE>!x=E8>oD4EBeK!;tp@8{D^N
zuH>bi$3v6LAbn;P5r{t)_YA=!BN?{U_ZUg}uV#$M1Q+3ruri?KixHU?2iS|{mB^uJ
z+XSD}T<EqDxz^y1HhV(_PP}64XLW%5<j~3LFGl1do6hz|3aWU;cF*`Z^9w^KYrlLW
z*P3|qr+F#T7pHQ0)m>{1Ro>73!Z&^3ew(xHe!F!hd`EAT|Am|_Ul!Ny>zjWg6G6+K
zh!4Nbris5lY|#8T$kr*G2!EoaG5%Aed@bdgy@R{uz@uF<6L?M%H>ynb3ekgea}|SM
z&%U_k`%VJ+RUP!Z2IfC6A-QyMT^n#`=9I0zusQLEmiSBhN$h8-w`@)vT-W|b$q6fb
zLieJFEwPT9zqR^n==wy~b*+uWeww=9#(ygf3@88qncWP|wL;ez`l~^QN$K@54DF(+
zw#l70_8t;-?2eOohj(!f7h&BD^8Jl$xq7mbB@sqTtN~tJ3Nh&t+pgM)<#xpUob!-E
z*~!|7Z{(U2&+Uz5RHKUQh}Q~f>Ns=jWhd(+=E*e|p4%JCI7JmX5&vmMr@#LjXX|z`
zy+bvVce?hd2X)Yot`jk?6P)7jn+y6>1&!9sjPfF;U*z(CwvBoI?<BKYyepq&h3iB%
ziHQnMdErArjgRhZor*E@peInVCxkwPYZk90)=j?HHx%9+V-25wQQ1jVq~n{rS=tuy
zTz`}&^h1@_f>ypUTI8Kp->(mJd=nnOen-$%DS}(U{hI1`47BIVXPQLoMK<7FkA4Q)
zIzD+P4*m0%!zA#iW_daCya{&%ycUZ0V*inn-zMmp{>sZ<Pd-ZEr*EcD8FM~;OVX%`
ze<ir1xNxD;u-|c}@IrB>_S3iIJ>3Zsd!sk1%0+fK{G2(3%#*dB0=E>Ml#85j>Ns=i
znJ4Q%%_nOtkk}i)`O`#BCEV>Og3j|dY$kx>6N_7>MsO=5IHnO?4*_9CPVp_>yMGk&
zjnHGu(N(fdA~7oX^lxN$b;ehhX*0%W;UtUc8?q^d*RnHmj4J|xhD`MNYi9JnWdf&6
zv$U6#WoeMBsp2Ou51H#*wa=omBj!ouypUgcH147%G)*>yQKkKXGu5!VJui0z&b~vW
zxj<xK)znr_f}DD0K0a6G7nAw}86?Iz(YA^x>km)Mo}oP}MyTq5GbdyBH<jFNy>1UX
z&L#I&v*+qB#O3sVCM0Z5f}~rU5(4%t8Crhhu%X6xGu#Zcb<u8&x%mygXW&;JAjD%O
z_)Rgc1;^U#E30y_(h|S_h}cs9ZFn+#`iW5M;_d>z{JmOSemmub1p)J-d0UyoI!eZi
zp+?Ye8{=-TN?kwwtj#_>P|0aVy&&7NX86&>b3?~WPIW^=XBnxia-MHnRdU*+Dj@UU
zr%exD*`&W&Hh!>KELb*IA0uXA-8M#Ei_HvwP`~>E<$06lR~R@zhdp@idx=}ARpFt(
zMeRjqfT<Tkt${ZkROg%HM|Zf;$?aR}hkYp8S%JWa8^;q5Guw6DKBwm%Os3zhS_eLv
z_KV#J5Tfivtaae{<}~P4T$YdF1u&kyg`LB(#OE?fpaM1_!f@6~8SYp5!7=7FX0}aI
z#9L(!r8S)d07<N@x7WfNIWr4`=SD4`FLllNi_mBX3vVy5+Lp6N@gf;FcRaR1n{(gE
zx2Cp18^yX&6KQ!oZH7Hn`IC~TLTUL9Q(Eo7;Y$v0AP)PvoG!EaV!7s2X~h`LB6o=X
zhqBXrrb~!#`i+MK6m9t}o!)97aK@L^w??qoVMzJR^3)EQa~-|>PGaz8u=SMYl>dn6
zNMv{U!7xf4d`Db3-AunoME`*3V|YgwocJZNSc${F)tQK&kPvzFgTCOkP8@S4A>xdO
zYFOYP?M^%R2Nx_M(hSUDth^3k^H)L?8Q8<vRvp<l*eOF7ZE&=sr{0gm@afS=JM-W?
zM?&7{D(LDT!5tHDsw056nR6xZ0ryVKg)-dw2sahq46`B_6g1OG16MsFcgdPQC-kOh
z#a_lnJ!A-qn}zk6<6b?yrSZot{AdT~I}*M^SHUiTD<6?vQ6~mFcQlw|T@m^dz58f5
z8<I`GtVEPj;MeFVDQ+T1l)}bcugfa(R!K7v|CJcRe>h)q2iWsQd%B5W_ro3EfRD(!
zUa6Zn)FcYCoVR(KY+I~8%`SAR|H3FtmZhpYzj`*oonq3y=Y{K?O)&7+Iz<$-ykmY=
zftjBCOLpH7iSOK7*oY7`^QS^2_~;>>k6%8)$B+-sLrVr%iiNJT0n{yga0j&wvVNRA
z`OnrQ0bI_7)TTSVlN0U?*K?t1q+3K|2@>sGn%tt_@yxzWPfI|x6y@lJuecL}`TdRq
zAKov2Lk*tbvJo1oQn21>5=xG;YGT>JojJYwO3@JoXFlTf##F(o_&C!c*|F=03VTa(
zx3ECwUpV6<iOtsuIKoIJ*x2$&CNk*23Vi&4>ggk)KI62f_|>l;z73)Mf|vW0=oK2n
zYM&%JLkJt3^vL;$Efu#gc%)+!j`xx-5q&fA5*S<|MRkSckM}O<u;bF4B^5L9K}{#^
zONw6@r=4-;XjeFZhfy7t8ibZl3G27mIdJN?^Xuqt(LIAQ%_**QS)EeKE0;PjT077M
zjzS*%d?1D3Wku3<S#NJr9;jre2wFlpst~|R1l{bhJpcq2>w4+Y@H6i0WY?~6b&=zx
zbe2)ywG`Q2lYFlpl75XnV;*APHe%MIlr^upZPKl>_UL8mx{jVEv19QpWpV6FwQ%Rm
z9Fb{;p%z7Jh2HQ)>Ew)KA@%hG-On2_N@D=i&#@@ir3-sb>%%!Cb_ByAkMyvJt9Z(3
zcf~e{*@VTb0Y5C1j^mnecuDB=enepV`*f2ecQ@{Kw{nIOT1IU8REXdYop)V-AV5QB
z;PqXshI4!Q1-_-gFN>N!0zQ|lpSIg`l^<jD=(2n<r>jYHT(g$9Zb8qOjbt--e)k(m
zx(^%6-LJn}y}r$J__ifbN_e9H1q>uCF#dAU?XmNka@s%_3=K9_<@@-fvON4)Hd<ln
z@?|MUjGl)i&HmZbwGNTg>~^KBEw7^XbYI|3`E*~4;P%?0qIh@Nxw$$ppmejSxlg=r
z%OcC_yya!*MLWhBM!WHuRH1(MyR1zyR2kR1;o=1>_ib$V?MDuVR_DPLl7-<vD3?47
z+lTHnh;n1O=XTFcCr?HFNbmeo0*4u9^t*Jz20*j{DvGeee1@*wcN#xfUo7DzZbhCY
z@Y%DCB_zVNV~_CUf4)03o;~&3b4n50&BgRUO&$G&zG0deIbL`;VcJVCSR)@!z-3jj
zTYSn*fEqpedaM1zD7H41u`B^Kr(`PWb;k<n<<mgn;@zbQ7%0;K5>Q>fGR|NE%i2yB
zB~4kjX(R<|zsD|yXl~*DOI_)UGgWB^A?y2<P6h41D&8VUjq+p3Bdf!Q_ErLn)}m0^
z;=*+t0U)$}JtY|ETm6k<E$peU6{RN%cVFnEr+*0jw$%r%!1+@?dr#bYNxB7SG+&lG
zQdH(ftsp=$FTgoB02NAL0^hFidPz7vZpA%jRbzKbe2!A-^uD4s-jXNE8um`@6KYI#
zbqStIf6)-PGa^K(4yCn8_YI>P2lCRBkIOgk(JN6AIrGv_FQiYRof&>SJ`!59Xmu-g
zJaux9)Y{;!(emKePos(47EEuMd|flluGLlMDYK?;j1l3=P=DV#I&lUek$tR2@}&C`
z76hzV*>7WN<sdd?r)A1h#?#i*l2hT+;q_Vzjwy8fSo7iYBh=vek%gLQ?!7tBMFViO
z9$yBl@ncT)cSbgg_O0*yZ5??9nv9x7ntYpBcvTaw1<Uu}Lu-ByyT-W#H}95jnx~2_
zsK;L}Ex&A=eHrkLY8YQ08pm>y>m%zEzE03j({MQX_M;Jax-Mhr&fSQ`=)F@DWXiBC
z%klgg<eG?tUY44slb9w*c!8wtvbx^0YQ$?#j0gzhE;Ot7e_2a=r;#=1z2oV!6T-x>
z!rI!U?j3IJxN<AKL|t!iKZgW&!6K7a{Ozx=AeL`HClP?a>i~V%PjznD)<{r&Ony%+
z>-+uOl&W*y`tqc*Oh#1Vg@`+i#89GoQ>_u5^)-J0tavTJMmx)A&&OyDR(08wXhX3+
zCkt`PEyzI8E$-d=(aC2F5QE*ib=?F9vZ2mBx*%@+JfVESe3ZL48T3XtAbUfr5B<uN
z9}3y<+NJFY^;Bn97om?FlU_d?9f>(HKsDcTq!hiz-suLqj11M47^rXDLO-3N+=fv+
z!zftE+$10=Tp-;2miy>)3}Hpbj)Xa_*r%x}t%amX&u~}%wG|QZp2jGiBd_@r3GtXb
z<i~x<*!_y$3w_Onp~-0~JE+ideEgz<;`{GRP&iTY+CRAIEt<XxS^pdDQIlwY?feJP
z&T&1Y+X^HoN1HiG-~Eju*hENZ;lTRr>kdhmQDr3o?mD5)<@4}#Fybcg?Gk$3*d^&8
z&vc(*wz&_^pt2z}dOd&O#7UP2CQvufV0u4ZR5mm~^r}_6>~dd=(ci=Vv6XwSu!6V^
zq2A!HoE=^FRHGrPK!UrigG9+yN0nE0?UosKY67vmKwYoYisG&zP?6bHLC?j?4pmEv
zkxdtPUjlHcYrG#=(jczTW=Zr8`B>MM$m;sVG((y1gnJt@BlGq!h+&fWPPo_NuBo@`
z&SwV=<)3tj(xf{C79mPf64NCv9#phzTJO4+C_rW7K!x+WN>fsxe8SPg;@HYn=W}U;
z4km!PDEUhoysOaVyY%@|a1p0(@O+`O{z50$-eAYF7{ait8yy|N$tVq77m<Z-is)8+
zh{3WlXn(YDC!_AFKH=P?+?j$9ztl%CUd{kgEa+fCX$VijzD_02X3%O&sK|<0KG2IB
z%Qc|ItHum2s-=EH@J~@eCy)6b!PKbwP3#)d+XbBxN9`eNa6%^=T*rl4h%N(d_@Pa3
zP3H?2LP~;RjLi@pU(#tI9EXfg{AwRF9e+@>TErw&_9_~zF_pTK{8u@Z399#*u=B)2
zEEmQ>!EKrV!4TuKm_qruu8&;20j<D%7%w+gN|17=kc)65dNj8FM?a4OABNN-NnQrb
zxZu7{QiQlWi8qNDW){}S7QseMt0Z<7Hg^z3=Y62o?nl;&b%$nVv-D?}wwcw?DGE0|
zqW5OF)vl=B++w>hd8y7_NwI6_DI5_jq_73tV~+RH4-Gx&e&eMScJOvq8*^`4dh<PJ
z>L`hUN)s+y%AJAuC-sAJZu2PcoMo#klg;UqzJXW6Odo~QYhc3WwL2Z$*{dlPN_Qy0
z`2#=iFIxls59k$2liuwNY%bD$X~(`FrV;qGr0o=#5C_3Hr<}r}eMmU1U&8gBV+)HA
zZK*TIH*p8e_hZ-fA|7oHMe*`?qAff`@SXXCjyMQo=hK&z_-N9dFI}DpQPX0Cg;;ey
za-kKX&v+pBk+f40{?-Loh%5t34cjJ&?|f(nFyQ`-@r1;MjS`zH&oL#0qr+PQDBD)P
zfut6fGQ}&$m<geo?Tdl44Da4Idk3te3@+dz+K8d@!0Tg6M8X~60gFImczd({h{ok{
zAXH4eov6(NIwsBV{_J7f`GY*7El3<MVp}=pu9XNL@V&i<^2f<b7nXnz0%Oy{-#>4;
zC1oAt{whEAP28mx@A1I+?#MN;fk?j_;Fp5!HAfvDyt|eX?>vv7U;9=xXsUjE?bG)2
z9Nn9^^`RM7MNmIn_lWum+dDI$Eoakjcr;I}VY^1$D+osh?DeDNU=?}j`}OiZwob))
z7tGM%_!1j1rSHpe{=zvX>tOdg*gQZmoneb-1KJS|XFTFbMVCNBVP*gSgyZI1sn{DK
z44vqYC-lF$et94nvThzqZ(aV7EU5Y$M2dgc;Wg*|G@c(l%*AIP)CV!m;?@W6!zn5;
z_8zvprW-{lDWhRD24Q;#t8-Ta%rPV%1>rw_`0NYLkEeJtuLXXhH9f^Wc}+U119RlZ
zxc>g&6?W)%Oxt34!?M>7qgb^V`%*ZR1z>~CpfR}rODvNIz39E+9>k55FVz6Okseg$
z(FU{W{PZR`<>>k$4jpxW1mlfVi|BV)?=c&K7dq+8(Hlt@G4EeDtji$3&H%XU(Zke-
zS*xk)A)B3eaM>dgZ>m;wmXJSVZQqaQSl*<qn9FE~A1^y@;Ms6#aTwx}KYn45dIz)<
zY|fsFC4rG0!rk#f1GoL*zl);LOh%0!1ft`0KCh%q455q&`IPk@iJu%)U`}N~s27y<
zokRz%x2=v^2ctJh_m7KLb2<Yefgn|LzS&#~W5r6<6yy6VS##`JoTF#c6|YHoIN;;!
z^)%i=6n{ni)o1#ie~<XhIn12E61YS)z1am7XYzk*))Mf|>3zdKc{MSCQFHd<xn)Cn
zkd1B!gdMJ{=&ehZRY<6=9S$zm&OA42RV8sw=w4tt7Et^rxo*NLL3@TSzopfx%C=ni
z#98}u16$8R;;NI<u|R=$`u`Q1**iU7B;73z{r(k}LEHRz+Ck}pMmdPU^N4AVxQyy#
z1^{t;g9opW>u}tcStI%<NZs0=DF9Gf^zWZmp^f`bt7(`QdzWa^O6I_knzc8Ww^f^J
zxfuUY=TCcTHPilBP5W5Q{YWi)C9@EoN&Zt3d>)2#hNgQW8C`cY!R~FB<d9*u+l;Tl
zBBo9<qP^CfJR*2BTy-pA?VXM3oz3i>&9rQTwhTr;)DFK)Tm9Bue}5rtfNJIH!An{V
zRXToC;GLt@s=;Pf^n_dIGX?vf_Q25_Yww(Vn^v>kn4pmlY-Zp|;}XGDAEjfl0`Dv>
zF?F^q@RN~*?o%PultI*HaWJ-iM+gVJlk5nN>+OOm)`(7Tf<{yxbZ-Z6z}v}OV7QIW
zn2QbQ2gYcZWkEN3|JFX5z!iFjNn3;dKJAk+%Sy7Y%OHEBHQ8b{u7n|GcIiiTy-rpL
zJVDpHS47N;E~|=g#30<Jw2N<gg=+UG+T(w3{|fajYkCC0;u)a9#yR5q+xs4UwA{O&
z$&5ELMdf~ypZ|rde!^||IR((8oV?1cd>mik-LKX9md)(n+9n@U{xkpSdE`$?Rn!qa
zpz93&PAc@sg{!)GD@ISy<&n^nvj^gx7I2qQJX$ow$3XK3l=xvm7I52_8Aw_@xuCU<
zW4Me9i4au=x*8@pc%qXE4tS|F18;LUTITmYq;B;hSZ={OG!3~d@AUguTQu@gZM7}I
z`;ck*e=q-=bNprN!`nEHmdU&iaa+AGms`*eO@lAXJN)kL!J}ns??c{JFRJAh{6o{Q
zORg@zl$HOdw!`sqo%f+pt5@0jZvy}}M~9LIPRWB!tyVA2<reZo)2Pex9>1B@w!g~V
z+tY4$Xg*O{pD+I)<iFq!{}4&F?1%erL0k6wS6Z+}#IZ**yWLrj7Zt_4NJjSWZ*Abr
zY9SvnjoK{lai3XjN{HY0sB|rD{%m`Sw)W8D64gtWI*g2Ct<0X79f=%JPJETO(msj!
zIhh&wPPzTGm9xK)-8!9nwzo-3kg;rf_(UupdLf2R&%7g|6#(JZgKZD4OFr4yvbN8<
zlNp*(*BU>t56&tj-%+YFfaVOG7jN$dTde~{QnptT?_}zfT8cW;N{om$BT@<&_ZI@X
z&ez+mI(_c{Gs;z*n0DM4xIAl&7@;@~#A$pIjgb;O*hywC))?<pzKXPWA!tk<nb{s3
zlJX4^ro_kWI>TxSH+#o`WiBLu-zV{L{XVW543Lr>%^tz%c<sVO+1=b}{)lp5)1s9D
zGq#sc^paIgyKuP_@EHAixUJ;7ur1E~E@z2M<1ALAfv`y_Etei41td7C2X4vJXn@Z}
z9`bid%S9d@CF}*@3Xki7Tk%{O&`OZs%M~lv|6{2i>n28$@kkAwHAK6k82-vdL<l3J
znDnSh$iEazLJxxh5*#=6qtAZDs_sPnft5G(feU?Tf^Jv8J^U@dOSQd_A%8|GwHkQ>
zD5VWOdh;~NA4KNl#y>c-Rp3(n7eW~TLRRIDeiE1JhZz90|16b+44E?=nKMdp)#}mI
z>Pgh}>~yw<T&gHdO2?;w&YlFAeIK>Yux8RuP#_xkJARiM>PAES_vGQ}x?Mx|@OM)#
zH4hg7Xo8SW>B1<+N}NFQ@NC^5BgsET23Bl1R&4l>YN)RanQsAvl2KhFt4B3L|5=h8
z)qL7DZIeJkU+TKl37M2(mFr>XM|DlDy3`pRrudTja}olhx@K07>V*6`4`OzQT<R$^
zI0<bapK5e(4kptByn>-2EuBcX`w?a;p;BiGoa3l&*|GkQh->S?-~aq=p*Meg4}UyL
zM~mwllm&n3BD94W`=CvVVU*$wqqar(0sh0T&Ng2>TIVPqN!pEnbQlv4H=zBu=o4;o
zgr6pLT@S4Iue-Fn2?2#ODrkrQFW6Ya`WTy#;L{$sKaUU)f0!cV59xZpn&~h__-W6|
zAMzjWKNa{tl>b!O|4cH&{c(hV=));Nr~i<DJ)M85fgq#eAHTp<$F)7&pWmh3NC?Q8
zQ9(YekGBa4J)Qb-ZNK7Q_YZq|2i*D({a2BH97!z%{I4qf%O==_gq`YkU6-u*Pr0<)
z3jz5vDyWC`|JA0<;KtgF>b$meY5!kIVO0FTR{UR`PkF`vzvDkP-#@kF{{xxi(yk-~
zWX`A{8P><ygnT;H{c+8{;{QLj%RZgnquY610{7Q-X=fJ#l4Vrj4(nrXE<E@HW1N4-
ze?Hwj5%y6R+U=h`?c+Q`=J<q^AsD^zpnJ(oTS-D_fP-E72}AD(+8V(~nGmJgwC43B
zOWTj5t%5M1^A`?eF~_ZP(#l&0B!hP$Xe%zuXO~l#ZdN-LC_FM9FziG4Sq%GfM4WS`
z>797CGX;AJ?ktX9g4TteA7r4$YraK?6uRwP`0aY+JR2f%4ZDCs2v4AgDDciIY7|wq
zvw`Z&)(A)FU+Y6UgAXwzi*g3630<qDN_p-sb#**6Ky%8d(uOVS`_;SkJGnA0*(+s7
zf>8POh7hkE)n+4Y<I2>6^<OF5Q~pNK>;RT?>X^DgH%=tP{EimKaa`BM&L#j;UiH=O
zN2hbW&BkKbp-pz8oU?noMZ4nRxTqmQ>*5qWLx&jqg%3&>lqa~8W?sex_Rn_kr_Rps
zIMwcZUpv#-d)hy434Zlbs6am-YWUR*`e{~n+mtYad@Ow&S~dZhP*%R2-INheA%;(S
z6yANgbhF_;8Nw@uRUalHbeAFLX>dhkM4(!Bp5&;rRv&0<;#|@Hl94edFz&uz4KQT{
zs7Sap<@GvXQ*f&JwCtk9I=Xu<vN6ck<*U?|E#bDK2rN~+?4dW_`h0dn9oSZFkxdpG
zs=y(1v)l>`AlWS3Z5)`ZKOP%Dq`5{a*=5$5)B7oDH0aj;l<Rwbaqz4@qX0I;JurSL
z^Ii$`u>H#jU&LHuR&Msp;SOm3I2}lnJYJs<RfUdBq)hB2A;jmKxU<3An9XtYdFoR$
zyDeuf11ALs;EJ_{-E+ZM-9io6swK#HLK&5hRZ)-vrPzfmbV)$tJ-z$cR2gq>V-GhK
zkXDn|cmPL&Yyqti24U^}Iq8Xu(u6aaGK2L!IoNHtL;^zWs3t3#E;^~sW6vXBBCKv<
zVnG<172?5VM;YSk<0ZFgkHmrH4`U4f<nlnUha!XzX|!x2CKc?2?%ZPQ6h>52tWEQr
z13isok~geq&iQ8n_4=v-6ceN^wvoU|3GO95SVDO}A3|)yE7<S1yF3+`bh{3Ze^ajX
zOv)vqU78_BeUxG=!O*L^T@m)<rr>N1N^_C+y{yM=J7qvTw!XGK<^@q%NDTLb8a9}v
zkr%U5b=Ji<2xuOhkurLTXZ>(^a^&QW|4OF4X@Kf-&+6F?HLJt>hZH+EY!hj|C4mX*
z>JFRsHMy|DnQYY6+2j4K=(;*uq}68hO6_-lX(pCK-AVY@$$B_3@>`%LQ2IK<eRTn$
zDIR&b9W$a*dm)NoHbj_#4h<x(<RnI>U_99a*V|5p#wkDO>q;eehZe1z+y_vldluCa
ztftAv>*>SQ;LVIf4+=x~f>Js#k#(#1^X%dAymQ-S?uj^IE9SP5^;$2x=I$u1b2Y<s
z&q>C<3vf-(?ODW?uAJ_GQUjYV3}P4MRveP3PgXriLO=d%s&7iZ&i&k-Kx5xD#3W=A
zt^8SePD$Rb?aWw7f<xo3fyb9!A&S->kI%b0Q#~GqyDC#d{PP~=BHbSCyU#s}8aj->
z#~zVnmMkx4w<+r|IEOa8IX_LhQqlpzRNK?19>AR1Tc*CY-vp3O@wE5(j}(7x*Y`gx
zs_{R(zANB53)tY$Uh{`t2Wre9l5g}N>HfR^#*+^xoO~w(3P)Z|VH7%T6ovm{d6(nc
z>u5&~Ng48d$9mp8*F#&hEEt~NHKo7dx`DIfaQgPt<h;zM-KWaPJeIGoxY4KSIzlNm
zE=|2y<W%^Sxy!2Ey4`Aa!*4?}1|Rht^_-D3`M8a^&|^5qqxB^LLqd*<b=9z5;JO}K
zQYYeR0>#CX)f*Kuizr7H<@J|y?E33fPNY-O=hr1cuva!GqsyVU&CJ@b>nw3grb`HJ
zUTF2~6_nY7f0T%8C$n38?r;{VoWV$S+bW1<*GKe!&qfpnL7)(*TNBo(&HL?|2LS>y
zKBm&!!r5mTsv`vYg}Vj_?x)BUDO6^zn+bS4s%bn*!q@fH;O2OW1>(e?>_d!ej72)0
z2}R|*QU`zo*9X&|%Uro&_X4o$_IA)&EzozKQ`|{O-EV6fXW(c_5!AAEc#|dx_xt3;
zGJe@~hFk+k24i}6ql;Oh(F5Ro>*oOnH%8a~)&?PL)8?P~Q!NP!4MIZsuToF71O&cz
zirK#7fTo267+5l}TxfQ;QgT#vE1_F5qgBNR87N}uxz*!-%d1R!T<`YmG^#RHr7Beg
zu%Wb}pLSVP=~Lm8J-~a|7xsL1bd7z%A6<FC6%Z+$obN`btko3D%r;TQwAWEkXvIhG
z3#$T?TPhM)rAHX3@a^RZ55}s>bW;PW!oC}XJe!7-JN$g&VEcUfF}Z^+gz)VXKOLLG
z!X5J|I!MT=m3TPB48V{x+(AC_mR-Y!$GW(tYPZn7Rzy9^#|`bYN=0=lRK;mh_JlTE
zc~U5uTU);}{P^BTy3f#6q4(g|rn&DzqE~L0TKakCtmUOu(=rLGx@t*tn-W*i^x)Q3
z_Fza*UmBSl*s?g&>FKp72CLD8LxRRQ&VSpjJxcbY3DEgEHnRnpr$R;tmb8t*wnk1K
zgt*7^bW`TO>3wNMc{&lpmuRO$NycueL!H#Eq$`&+z^6wANd(G8DEG?A^oA+-O3U=V
zmgx;r?tN|0``VZagP01#$r_*15@}HtC=F;YbI91`otpFrjS_H;@ruzmEO#)ODH14m
zFrBHs!<r!gz<xKURb2|sz;rlf9?m?}g*Oj+P#7=oH>dLxHPh>amdl&Oy@*T587@ly
z?Hdo1Soi(xob81S89Q&@C0IYtSP_=C_URQJ88}+pXi~NIJ~&$J^#5q{ao~7yyGc9A
z``~1;=L9AW@;WH<$|_nx{<>+ZZYz*+C~M<ub2sq3pI*9UvPEazhodcteb9KVOfwLO
z4aA=6^~yh_oLcnCaDH`q{{;oFSFaNuRTc3cgcDD6c{{MIm8C`JM*JOGWw}^pM%EX9
zr|-+xwdAh}Y>eQ@=#0ugspoZ@|HhD-%^oK_l+oi~-V}8G#=XkkzV}zQZdTKx$*_N@
zqUo=x4f~C$4XkNL9xtAX8WZ-B69cmii9xXAVD-0`&h~X0n0m^Pn1SkfL*`$Zo80_$
z%?74A4ud}Pat^y1tE<y`uu0HQ1B_H6mT4y^f|@WMuLCn%PA~3Pb!sZ&k}_FOc?YP=
z=6`15JCzQW4yFR%n+}dS*B)5iHS$MZYfn#<f|kGiy5+ar6qw$fHZB?U?L)Ah5|uTc
z7~wb+oERrfV{N3D4*hB{P)u@gstMH9R9?8UU9k2`8mZrVdI}INF;aZ86!yXwj7uzw
zt<#;oLd4OPz20|omDfFW*HPL5kZT*H@w9vg+q`&tt1#H+GY`6Zj&+A6XNVOQ9JxCJ
z2f;cqDn_w?;5KxH+We3$F^@E!bGym%*9wHjpJSX6BC!krj^%`E?%;!@jqe;<{*4wl
zMi+)sOkZNrY0LMIXaeh$lLbzZ)XOt>{U;T{KFM1^cyvnymq1q|$a;twQTf5K{k8W|
z@)P&@l+%6)B+xABr(oyVrRnkh%}H02%sj+4Zhz9;U4(r0O`G#-(W&7nUbej*gc_Mc
ze@C-kmi)7_dF9l1Wlim2y|#oiORix}deof-GKJ(uD7sdR%&)&$_iW7&TGiGyx%s$1
zpV4`sS;K1`$vGgdZ28fn`v5etuSHyaH@1>~wzGjui5O4bzNp;4?_g1nJkzt}QMN^q
ztbTFY+jUs|SYR+JS3FgMJXo`^44oR6k2{Uxt_qz)_)F~1I<yGFQ4kN|vOR;}=|5rw
zT@rJA!GW1TVV))XcEbUBKlg5@bL&OZ`GDBAto`?2ge<|cmUS{3+}osqc}V-J#)r_7
zxH!7?O?(6#<Dy1-&x_9KsOX>#1v~W0R=1Giw?rirkB9-T<pa*z%L-7Trn-tITeG9`
zY}V4b-I0?Eb}?Q>J<pYnLnLJRWoikaD76uD)RY}0otg9C1wBzo*b6<Ss&CUmNWp>T
zFA;(C#wmhEm(lI9dai-jxHs9{jH7IzDKlt*F|_Ze>oAF0^l7`y^;tx_-fA6Cd!J)$
zOcc=w6Kc20Ua;NOX+6{mSy2@?6fwy}CzYg=&_QQt{zB}J^J_yxXb8EZaExGGIq!pL
zcTZ%qWZiu@KC_7cOAdNqXWcm-A8$s)F~r1W7Y+BcNEQtDRX}rkoA1^UDa}f^h^bX@
z1+ioRU7&Aa^Rg(7b3n+|c6zru3=oJQKb`=citqU8EZJ{-YuXX0DVx(<dVd!IY?Z!U
z&0M88?B&)gxjBxYnPgnW%O(e2;kJ*0&HC^*iW`nTI!)@_0&UJ?yxW^ruQwt$Z#2b#
zDq_GlVz80b>*UXy#w=ORO;@e#$3Bqm%_;b4xo&#T!oFK;Ch>>+hv)sHbD_=pmB($y
z7`kM`_zSoDn+QpWQeMdkw+{)896R;)#5(hFdHAQhhThNl<v<5}w@8~xm1@2C#(7D>
zdFs>zBWoel!!*rtDyCm6yu&}_hyT(KfAN<vMtFW3SylYb;BQ@|4yc~tyV}R#Y?TV*
zGX&M`fJL8#Mc*@vzWPcl?b#|E!LXS}jP(}XDP1lV<|iGWE8dO}G7{o25_UvXtnY#7
zrb)Yf-&@=XvQ#wdF7*b!x4|tDO>MPD_n&*xPD|3B!R9Xv@E2CTa+A4otDnt&Ryx64
zI>D)D8%aiO87fuv!?E;;FtwsfB)~Fi&N7PXhoJNiK}Lh$OhOw8m1@ccHuVNzw&`t(
zUHnLoZ<d*bf9z2`**%N$Xzme_w#-DU8g{Hw(=MHOva3=hApJ+}L-%l&avB??%LAqu
zlXr-xH}2^%t4Xq3HxLGFTDBCv6v}?t_~j3TjQ3`rhzj(?s#aNP|BEE~!*!~%GHy&~
zTO8t^-lI6!pg4H<$P4dJ1|J_J2dk><N;y#D4?n@8Ao)8fZ1`LNd@f~56PZ7$e<`$3
z<+l1d#aDW@n<ZChmV}kM6+4)elRB4omW0pO+;zyn^SOM8P$}l1+O2Iwp}F#tZHFha
zSWKUPeR(m?p_$LDnQxq{0G0VV#1!bro>%l*PE$LQ!Ts&0w*!yZz7)MA!x2cJtPJfA
z5+=cr>-kpG^Ub~I8>8jWv#O0s8Biz*GK~b;#Dw5uMz|}UrLc|x+q(m<NsjqbA}X3>
z{0&KtsYs47nN}UxHM5?TgmY?UjVYX0GOzM6O}i_XZl)NFxMc2&q&sIujBpbJU+WMV
zuSzs@2cXT&VzqT~GgcNycc4>wXi|AtP&ucOtdspL!W%4dc$Qb57Tx?My0)_0OPB;E
zYn@LP5oS5)J$M|rj{I!RYCrh3Xy~zSPqOBWPA!>nuUT-zym6W1n4x1N{F}nV8JXve
zEV)gyB%M_Ev}5~|8m_%?s^0?qoo=tNzx2J>7Fha~xi!K#mJOD2>bE#}0jPiBQZEx4
z_BU)f>hF<>kcfO70408g#q{Ramq%k9#JSAGxyH|B8e}2@BOfD4o(Uv8s!EfI82SyE
z&>7}cT?c4CwMj!49(<KlqoV!S=C^`lDx*!Zig3-7pJ@fJhtcl~j_TZRtba9p;eowb
ztt*P&ccfZq;;m=ot(X3jE|L`fl*V6Q8UasT4YkL@9Pf!7#!VaqeI?Dr+z5Mb?MQdh
z_v;Xfbkn&)VaOX|NoQ7UDzw(`b4waYKdFSx?n8a@na}kdynx0xc(HD-dF#REMH0#0
zU?W)JNLjjkbV7ytRKR&Z!eHv5#8Sn3%O!C0Ya*5%VO3yZ)Cc_~c~}wN`O|>U^qQBV
zPS0nE-W8O;d$j9W{;E4-B16bI>uk-T7?S&Phv9bsrsgDt%N51%8#*^kuW)x+8R+xq
z0K%`b1jMrx!&8ZJ@`%E*YWK`_<!jZZtbv=p9|u5})HZ)qtIShLq2nO`Z|uao`5ypB
zS%J+K>NjnLE&6nVuZ)(N$hS?1mgik!-agycQ=F_fD?cmy;U=i~sphk70OQ!C7u(J1
zsaxbh;6xTpiri`iH7oo3+V?nR4ZUO3OygziH`HU&p4<DS70X_61W<rO?VbseGs%FH
zg>%isG<&S*+$^ze*wMC4JyS?o^6Te|vlc`#%%N?Pf8*?A39jZ?gui=3;VBrw6Cfe(
zC%)TTLJQcOZ)O*N4g7v+GdMDP>ExRcs0S=?&UrFI8kLo?Jh3Y0XFAp>PhG~aYfH3k
z9l1Z-RiIR!D$FfBeoSB-H^I6E-No@$LD+8v=DLEd*E1C~vcV%x20(ofXQRcCyjz_!
zBTR^=n)LjAj{eRWYphfLFh?%OB=P06=8dKr&bd3{{*K$9VMxG&19WOz!BcTZ)Y0+l
z7TWnt2&e})P&HF^_NM%-2m&3r!p4n@6>Ps-v<+Za1Ge=wo1Vk=n#`uBjfZdBpkM2h
zy|OJbIa>Yv8{+0SY3)$dvG(}_dxuJ1h;#!h<GIZR@fx=2+g=1g3sl+81;uLS=b*V=
zr%cUx=rLsiu*?Q9j7c}_*{DmRB6$HHCL3Y5^{ax@hmg7H&9h&KHLHX3!K=XOrLMU)
zi(gg@md@w&wXS&kr^@nvh<++k_N2I}pD6`3wHMWfRY&VBGcyp4tAfyTWvEZBD<U4o
zHdrezF*SXenN?0bY1F1x{d%Xyk!$`iP;X$)x+f5-Y|X##8n~EgcPeVl0kcVpYJ5+e
zpvA)?&75jd65n5DpDJb_f(U)&3PvPFsMAQ0@c_EChVY>)tk3bNrF6~TQW?s;6_!IA
zGszj#s^c@FVJ-=A4RQ_Iv81)7Eo!F5rot|Me?YXv0FhqIZbX&&HiDZa^~0N>o}fJ6
z7MteHqQC=&CA`U}m(MSs^LMu`wrLS~=r=<q#}1|rsQDM$`rBmbHt%|n5bA9nF)oi1
za2z;JWQp$=pGxM6syFG5igQ_mUgrAJ-csrC#n91^MxMWezr&Ppp+)m#)4QxR@UWnM
z8f20Z@{?VQ!T{SC8&aj`3~6W{6<H85HhrsWK(=Ff<96fb5h=dhu5W5DX)Xyls0P+b
zYN*dL%+*ZNTsZpWu-8#6NJ0+x3of+yXUyJL=$!7c`_&nl&&)bZKKE;Dlj_-1y<o8$
zJ02ehtF3l`mbHG>Tkig?ot~yr7uv6-$YShdeFAY(sh?K^J=~7V1RPr8j`BfC`W;xZ
zrCvZByPO*D7d6)zJ)$<7zS?T~erBTJJDi+_r!-<c?k+5|)+EP8>@n$bN6J6)Q+rO1
zG!JJ`HKwq8WhmM|8E<P%4AB@mz+*H%(RB8~fsB8ivd4d6+IG-QG>>kfR&c(i@S*5W
zQc>IIo{xz|e|8Z{=+xgZUdpp?-BG3=S(0YIm_RxMy5g)=tnSio_}1M)u}R)l@w~~<
zPCZ9QYnH*9#TtXVP9(-)%~FkFRtUj$cUY^Xw17aZiR==`B8Skb(jFVBUx|)|7nxpC
zjIJ(UMQ45P?DV@0<I2iM<QI5@qKl#i%iGKSCtR0Y$)KK-TuYxcOP^;|tt^&4Tve@r
zDluii2>D=5&xvD|m@$C+c`^m@;2`l}RK)sv#JX(v2|ge$VyPYb#yt|*)P1*T38LR~
zu0NS~-)kDE-JCm3v>s^yY1OwqZaK3`aqWj7)A(aO-kE0(>K3-4(-2tY>9P-+g%-$F
zP8w}ERL(e7%|y&X5^|2z`BVDAdPPaIMOMXyC6-EakY@t(vW~SJdQGNe#dIoEmR~cw
zpA+$V7Y}0*d~c3ix28m6l%_NP6!UU=!@$geapC8?xhklhB?!|J6j%kN-K$`;p=Qyw
z{B7kUEa#plyl_|#y_f~k)N}KGej*Toysl~`*`SLiEHMCZJAQa2QXRmWM_RvStA;j~
zA@X_SH}Oz$o~;`FScaRddo|PAQ|&}n<@>pYWkGI{cfU!H{kwrZ$j@#qun*AwTc^u~
zUobD|$YRw7*MZ&aG1|fQ!8UuB=?<6mwen?3NyrVyrT&h&Bf?=i(PAQViEj~B%wjnw
zYdMs;<i6xS6?|}gaD98hdikav_}i@XTl3n1&;p>Z5NSD4wnTP-o5YyBgga<9<QC&c
za9VdzH;WLt6iJ?G5iBA<h&hNUDf8pgTkdU}YE!LqclL7LH11nXw>TCx^mJ^Cne~lq
z88!t!r<ecy$m%l8e&5vs85p;)rs*VZ7MF6KjO`4s60aXPKD#*6lN$M&CB@#wH_Mm0
z{w(Vmfan}wcgVW-N?hJA_TAu0*2*t=?^r7$R&O=)gWvqMiLGJD@iUL(Tf+eT4v!Sg
zq?4no&=08(smYSRPEWP;w8&a}CoJc?`8D`9@b1W6$rTkH`oai)9Ud>`@%{=K3Q1$I
zqVKxZI@R(Bx-Pmd5}Ea%@YnWu3I3+7+b+D2(RIsu%DSQai<#Y#i!X((A$qp5X>9SQ
ze@&BNC}+d^yMySJ%IFm_2xLl^Y(QbS3SkgnKyOcAokcx0V>rXn;1S}1u>f-xA2_j^
zwgO1niT5{*7>*Rkx5G+mc65vvY|^89ztFu4j24%>e)~I}_k@7z)b#ByuO!#yNY^Zl
z%zfqyk||ZW8!6s-<3U?z=DfDoaxK6=@FUC%XtTF+Hve_AA9Eq63t)t{+3IkiZtgCV
z_JMoAQo^&8n?c<$$%8mZgyf2PQ6(q|l!S}WztM+mWTYTOHZ0W78g!rWpTtrAL>Y4<
zo9@z=*}hH-BJ`326IBK;Gi-wtt}U0;frZ&C?nzk?&?wzGp(PU0dIP-L*m<SC@XYmt
z3Je0(NZWH@9dpX?*+kjfRVYC5qHa}_vjz&0)hjgsVPSa7%>JgnAj!2vq4Tu!PQ$rI
z^2h{?q@QbY$-`zkumWa*_z_uy`W{U{e0q1FeANYXc2E2aTe8e+k4tXjLT*b00J{Wr
z&mDFb;9i%fR$ctaxtnWG>#p&;Q+%a!<jsZvIQQg(<DI&=9;k%7pp?vDcvk1Vz^>$U
zMU+vM!mC==b1{H}?2gxs__#cQ@HH?pb3g4=qM?)el7?=(?_7J>bv&CIz(R&pl<QSS
zunf2~BrxaMRQYTBM$MdI<nERd6YKyHqAaWp3r*?Pb>-{G-m~PI0)d8s6Z|$UNfu?V
z7xEBy-cInY{CQP$jXG1DFL=4M<&f)Z=}o>_i-mAfg?OEryOOoY;av}ES@|GHAtrpg
z_>nqDb)VU{Z04DlgKg})CL3A<XZ`ct4{zj9>bw__j0_jUOiow;_u$awfw3X*3VU7b
zaRgxj5gJNEZR188@yO6!#y6ddz!(VcPCKXmR_Y^!3=Bjd=>sa1))V6<h_-h#MIU<C
zB_C>4?V%wy+6Le<1$39j&6k0Bv&3ne`*j{6a#i5*8&<QS9mcmlbQyt%iGf6580e5T
zy$V)WOhTT&c7nL6r~Z&2ei%CkgN!9Tv=JlUA)*d2bcUEt913q=-jDm2-pP$wN@JgI
z86iHsFzad_oH%6N@|>TtZ8ONq3+CN<f0LOv?JS9iYq-t?ie3^=I=reQaG>M=fVm0D
zbfcK3zm`5(3j2^e%r)gwF$(hkZK{O4hR8ud%o`1@Nq6QAgw3J}E?(jj*%k3Vj4_cC
z#9a9><WgQN(>SiuliUbNtQXSH@s*$B8$ZW~YFd;&NB8bU;+rf-l2k87MPgJ(VvrmO
zg;&U~$M%b%i0(pn9$d`IT-YkeSSiS?#YgmV6356tr*4pWMK7GCAG?{fcK!QvGn@V-
zXH)Kbuv<~VLo_z2u*9b?m>((Ow7Tg|BtpI=n@rVe&lPGFKIoHF<fY<eS`#<srNU(j
z&v{)<F|V-vCipGji9-30s(8pK(2Wf1UYhsoZgDl?$}5(?;qKR^WNE@}iibS5Pu!)C
zH^GGdW^bHmI#5&dbMIfW<MP3K*8k3#YYwj|zHY+AjS|praimNrt#RTuugD^;-v3tU
z4KG!*0!!D|`1>)se5vzFzZ^@lQ-9=Mo{_hKWzMqR)MfO4iD)j6ndFKrGFFmVdh>iI
zheVSoC1ReD*n=aoD2gdrLd9}Bk2(20bJbZ6iLyL%GNA&1F3F(Tz;c^~M0rygkjYwA
z%USiIuzTF+&-~$p7b3viEh!S&P30$<+?pSh`l6JcWU^|W1(V1MCcHpAtf~(rk<ET8
zFr)5R4w*HvscKTQbkFSB5Q!Y3dn(`+G;0E^YC^ASLbG&#R@LMg-vCqP6~Se4hNi#$
z@I--JKKS>(SAt2bS^OZ6ikmPlQ<PQeTUY!qw=rh%P@dPkf?<jqaz&cGf$sg8_RBB4
z1~?3959FE<X8o&`Oi_&b)k3j}0K$s5u2;-aj4v2}3tcK7q(oHFnSL+0@wlWJc<k}L
zpa_Fgmd=)Kr$a*%n~==odr}cb_-7H9h$0MW89E`I$>6THlh-nIM-d_}sYMt8GIX}g
zI~|WTv7hG>ddtxLr0{t9bmw(e5k^lg;qOS1FRVMS?~f7F#P+>E;7buk$o&EAe-@}O
z!tlu@#3%81sy!KekxM8eOZO;3<O}ysht!`tm9lg{Nlm{ey+ALM!TU+U`Bc3&NNfx}
zHy2Z8;!;%T^J{s{ha#V!yHvhF?~D4|#t-ZRE+&rWTT5}Ig1#Mm62YSXe2zCq&P$}0
z6f-CC#UoA4$6-+)N0pv@O3r;sySB8kR5<V3;MV{lj-Qw|IkD%JG5q;;?;HLYg&R{J
zi}XSK&t%$kbWK{L>x0uJ@VrvHYVh01Ckn$VH2rCIj7>b48&dCVru1qf_2OBz&FSsv
z`@cQgc)TH>CeP>fDoQV2Qv0beU!T(Ouc~;y31DrsG_!jl^zHCj%C9uEcws&RUYq8q
zaUPiyo7ni<G_#F~jfowX`z~C=4K*%R?o*Fbf@C`W-;ettR4hLHT}%}$`e$FK<4qGd
z*cBc6tNO{x^6TEtf0E&e{A@X{RsH_WwkR*{In(@Bd-RtVY?_){x$)to@nRWYir6*#
zdvO#6Vu97JxA8G+YOvxJTduJ)Bz5eG+jm<opJ@e$w?<C=3AF7S@m(_}Zdc!wFVqxt
zQj>Fk$S^0cG8w5Tk6Gr%Pmz+yvUqsOxsO?&FpX3+{l31Rf09AjEfCOujiVF>6diki
z!aP!u`TM#q!Q^{ZJl=;-wj$VyavBu<k3_W2GK1qOKI9jPVK9sS<S>e}1DXR1f8?TF
zk`pvG*mf}IqNU7^EO5V&K6{$7CB-R2M9uCy>f-mcO`(oVw@5)Jr%Q%R#OUmM(3VtB
zE;c{0_zU3KcmJ`FllziPz8dXYQglqDRZZTP7~L%t5nc>Wm&KWu+cLLg`mStlY#?j5
zc(;-~Ua#^ba;fS_hKky3<;D;#YPU0rX4<IeXEJzQfpIiQm>+*Tt7zLhNV_hqQ1B!$
z{q7c}l$P<6|GYG4$}MH^^V!6s<bK^fk=z}INHjqa^><%3sk$$8aPO+!rZ%4f=0v$=
zp|Vskheo+Hj@|NH<nk<I$qmPV4hV&eYw@5>YF@o@F}j}RsF8s-LwCnebtkVT1(!l-
zCekQCC&T&BovBeZ$-~Uu9N;pv`RZou7wEJg<xbD@CraO}ID>BU{i`-T)=ZnAy+Hc=
zd!uS~{lu(RJ(?Q+KdRmWDvn@@8V(RbaEIW5#ogUuad(#h!Gi^t#ogT@IKgEhxCHlI
zB)Ge~%g1}~*ExN<tE*~yrsvEVx!rwhkE5iS5Aa-crch2a(Gul4;qE@t!GA})M?hwL
z`0)72H;x%0%J1m&+Y*)C6htkf_%Y|YG!z9v+Vs1y#hsod-_1jpPOOwJR(2G95m5Nw
z8#HA`q>8$9X?PgDMOma=P1!~#-spW?v(f$gJV*m}ubforbmj7A=qQ+OHl<<fsWmWh
zW)C*9x432+Tj#Egfcxfw)+-^mzcG<xP2nYAAB=ub4r+p@%Db@a_{5@J6C?2OJ>_6*
zq5}tuWbN*N!~2Y>0|&cmX*jst<V}fm6UT4qb~5F#>&50=r_J?3ia<RYO6a2-vP!9(
z5wRtImlbe@pHgLt!Xx~<+Bvr-*tn*|VDwAHM1x5xH}va2Wc2xA9z;1qP)9dpXJmR(
zZ1L$?_-t}EaxNWsW{+*lREl!dKi~)8Fkt`iwmEjV=IxYfNW<Nffw$C6TbAl9;Qp8J
z(7^RKzhdt9^NvheI~&ZT+uQ4#>#OTKlyj6@lpA6orx!}yzQ^W-Kse7C<-~KFd+Hqm
zMW212pQKNxe)!qxmC%`Y&t1Wp#adWroDbPk$-VH!%hFxB!*7SoGorQT&V^3C&X!Kk
z&WBDiUt}MV2fRnT2fU{dUpC|AwDXr^{Z0Kt{oRV&*?Svb*)^>-?lreHmQIq+oKC||
zV_#QcdwLF=rrJy$8a*0a8vRn8QoT~$Qhm!Ij!A>V59JY5u61SOcl7Gx<|B#WOO7@J
z%Pm-E&WEMTN~kH))q`!@a_#@hD=zuKnk9mo-HAF&ssBwZb#9{H?7R9FVM>{jsV<yV
zzHP@#_Lb}K1~s(+L#SR+<(`S&U$YiaHJ18Ui?z`)k!wYZan3c)RBMJ5pe>V`(Mg3x
zE+?+jx0z^m2h*mnBevowR>Lpv5xrd9hBYl~oC!#P%Ew>5zC|pPX)^x)CeR}CTc@$#
z%^9RoM;i_NPq80;vi(~2O_gYA_(iq9fUgN}ye`HnmPyiu5of$E<y`{0*fC_9c|)Ea
z!&m=lUw6J1+>wxbt$lb`M69|O?fb$3&yJY9)<hvspCVTAaXV@v_I*7I?zr$fSSScM
zg@8As__Hkf8eO{uk6hTZlQ^@JOuzH!e&-o$h~$;|>Bg{Ip{TwbOA&B>FGR`w3w#>I
zI;jzD>|%tx)=NGiN8DO+kK`XvE#^r#b}2w!*(IMwaZXqY6IKOvG`f1;Pln!W?N`Aa
zyyTfJjh8Vp<Q@$xrY6VA2VuBFzrWxboaEgcxwBgJP4#6l;?O<5%+DTpW6Sc}SfC}S
zLZ`9ow%`REFYqT42xG^9WP<!3<<IWhf;p0}Hil%XN1r0~+>6Rw;eb^{v^FcEsz(I{
zb6nWq>XtIsamlJ9S{uXa|4O6y;8RxBqf5!Ecd5GJT?ech#RXSal(~8q%vnU}?fpm|
z-CCnb8?;Lvoi?0l%`bC>FPOWrN**=i9ND4608ik7Cm3vU=xlQIXIdFmj{==fS%Fm?
zggci%vB#@hvISZroc|e2e0_hoq=A*0<LDl9=q!_%ow*MvER!U*1)al}H?$ZtR|1^F
z^y|u8Pb8~|zPkUx9qq91ch>%oMp*SoLG>teXrc7|<p0wl3d;iF_m0xK_uxk9{S%u|
zR0LKXeYGqrDVTG`09Q+%Mls-xSLb9mWRCJx#96tWY?HQpYmu(jIZa?l_1=!$d9SKo
zFAfVi_dCZK)GY(F8SjR0N8hUjceoL&+LZrS?f*9Nn+QN)p2E@Q4SsgJ6~NtMlGMiS
z`};~F*fGDGTH@XtE@Z${tOZ*IRspf?0GTEnkdI5@)bmoDJ$MC(c#+iea-2N|kdONB
zk``x=QURhHmSSy{RbY-J_AzayiTAsE6roiFnpFg>)%%STdCQ}6Ev(M@-}F;RJy}4V
zv&|@xiK|hyX+~u@m5`p^s7s1Z{rzHa085Ez`Ey#7Cp1#`ZN(rny#*y9K<Og}emxKb
z5{p4{@)-j86dubh`m+)6u4m$3{0e~-6cln{l2pa*TVX;Vmq6*!)Z^c|1tl#&#jB{y
zU2HBU`I*K_sRd2=f)a~}OuWS7-+zIM0va=oZUrS^40!u+S}TO`KsWzoR2@csJxd5A
zGb(l$mt-7=WnQs;y~labq|P}*^YVIn`1RI#=jiRx_O1iIb}*-R^l;rwQ}XWw2P}49
zzr&C($J#+nc)L+x!|TXn9;Mc58HjvS2W`~gmL~2t=rvWwGD!H-?rVi0xl_^N9%<xT
z{&g1JT3+nwH5;ltYKsHb0Sy(kd+woo;~3Rlfb$&Rozal`2T;mW<=l{=<XuTDlI7$*
z2g;(SmYEkFE??}d<&l^I+_rG{#3SvBcyq<%YdljnjmT;x%gmm@q<jh&{yzS-q2zPg
zA+pA=PMx#(Qjo!9=WEB?Q^+k{f7B!2Fj3~eeZ&G0?zwQaJMr3;F{wLR;5Fw9sx9#k
z;S9Wt-(;2tbUWtgCw`gZ2Q!;rS10ERt$P}7>K;)%A5HOZM0_w2*M76u-d_`YD9rBR
zD^^UVTi^R#=gL14um&d*ZwO8XLk-lL#dy}X@FyA^2KFs)X!j!c61lh%<_%-@K+3v@
zWt9(+0P2~u&RbC4)Y<DM&spjt`t63!R!K(#efWpF_J5Sc`bD{;Gxxb2I|r68$0D}O
z#Rtc1O@zszF;73<N=KhXG+K9lwBa6L@yw*F{&9`-7E=csFe__4noio^EgBcL)lt&e
zjr%pzFRd-UO^kYG9y<7_Q!h?LHlnFB`0BO1dGA9rdrH~gu-yaR=2WeR;S0$4+<B_y
zk8qZFCz+Pd=E_U$ik;K^_EtMXPwu?&H-+`N{5nrbEx|8o;y+_G@b>ar;!a;ei<^m3
zxy?k%X)5_!0+f$+)7C~7U;d{3nxM?AR1*mQWdH4tmZT-gN>WaGNcfIDMIuXt<Sv#O
zhA{>a2Iik5lc!qmu)hMw#H2abKSHcY%}8xyS*0^+dhy6Yo`m48ycc}>v+X)<I={dE
z-SA`WDn}a)+F}Y=vghRayKQ3OSpQUoP>E0#RvA_$T^TV~$l5?-YVL}L5ENjsXc}hN
zlg{01kN4MP({InHv=a-}Qs!eec|tY0Q<a##-L8@bVUbo<IB(7$4q8mhctRyDf|*Oj
zT_uIo*0^3kT^e0onsxz$#D7ywpHv1GE<EKaqTDievJOqsEw5ULb&^;gKR^(mBOE(V
zMe7vGR2O3WEovqQF0|Gmh+6=!nyZ)i*K*^EOsX=cviXAPGU>*Q(c-1<P9f8p$*H5I
z3t1;IMyDOJ@h!4C+UNhJt8t87BAneU@-ZITF&@hIJe$V_ed6eR0mZaD^n5)3d<3QR
zC52oFqX@kdceWs`43AlrNkNs#E7E2If3}z5WgBmng7$X^l`kI7Y%ktyL2((LJrGQr
z(0R=K8yHZA#|N!Bk*wKg_5yb9<1$Ise2y}Lh+n_+v<gfth8w9;dI59yaa#(saUv`l
zF**ult|Jv74DS|*;&mi<fp#Ni+b~{7L5PlW!ai<}WX*Ymk?OKc4egI2?T_!x(zeJM
z0>S?+?uIq_6>x$`3%+~=vdOHxVB;L2M1I4->CZ2w{q#`q<tKi{IDUmav)0nPSF+X=
zurUy;ZcCy+wk?W;2Rmh5R25N9lFAA|FQ%grNTG^YP=JLKA*Vt~FNUm&7%55hd057Z
zg<gz@03G3f>fExAzyhqF*ePF|AtWM9?;cTdQ&Lh&-l~Xt;d1db^kNBRA9H|I`^@xW
zma2%Y?^X?sK<@u<v+sUWVj6*HF_+$G*2!xw;k0nC*B!1C_jcs`qWTb+)=?eQ5gjf`
zgne>V5JSYBzO2ET;pQVLmc?EC#j@e%5h<4OUHpA(SoHZRd*YP^B~McLJOHy!`kQH7
z^xiIeZq|^;4~ngpi0C~$_S_(>x2Aa26>%w7WP({H%2#{x3x`rEcVyfXr{;L<H!rGJ
zro;wOl?hm;ZAOgb22o@_WSn8$e3{KPZf9mImc78a_k!u7Mt;*+eRC}r>+LrA{vXRl
zjqwEjj|dP`1js%Dq%Zfpq_w$5iuHy!#8;dn*~y3X5K46!!`&KH8zb3iPkG6dIMkf=
zE^R9$GbK2D=a1{-V<5m<BBighzmvMd1;@`fHS{$pra;^jmJU2RP;SckMd^sv>{;M6
zKNwNH5x^!jMx;J}saQkr{fdP2zKEFgC+teMX+F!BkFlQygVaA5tbj=Wd^SL<hUwFI
zUFum`7Zc512NAY^HiEnNdP8_;%;EEYyWe1XZ87<^=LDhw@w}P7cD{<e7QPHVDPQF6
zh)jYK-kjgKUbCK?pU!SY_CaHBjc>p=+t=n7vU`yW(CORaTL-8bM1E2m_*ir0aB=pz
z%%3G5GyG%bM<h6409wFAz-fR{z-s_`z(znqz%*<jtQl<D#{q<D<YlaMj6Xc*j_VQK
z4FPFzH3+MyK40!RS%uCOO|(q>Oq@()^C?uY=P~99=TkODYT3mJ_z1??^}aWb@25kk
z3Z<paq5}y2vP+p~Cp$?E>_^uTY_V65{2||(i*92-olH-^Fdw)gNa9!>^AOqEinb;&
z{ysL8o>TV~kXpxBNN=V%P!fGY;3}p(MTUY<*b`{-{#Z0AHECWq?dj|h>nRKxL{LV|
z#T8`nP(8m~=jzD{Y(_Xk6aM1Ec>nXff8DmHIf(3|2%;b9GylD>;}1tuR!jp-0}=!L
zWvpdPHF9HG01hG-B5r7;IEi?U#EL|R_=|*u_+JTtL}`dr$UrbNVhp+=ek&Cx`A>)a
zjVbJ3mJ%#sM(7<xkF3|$R$lvAQ<YQCQ=3zXD!?-8M)F3kMuzDWYl~2J7xpZRrZKy$
z1-1tH?{Q<R8E_n77O_KubXU=1kPI`9K?|c4Pl?^C40nswJU+Io;jujq8q3a%2fy9H
zjA{0+vFrps0T;3Fj4rz0HFq<|6f>4Mj(T%zMTpU)|H5y~ZQO1sZT#5y+w1!`s8>2H
z4m}S`n8C;BzTkXk!?u?v!~uPc#E<n^=l<Y4YU5w8Lzu{C5Z0^Uv+MoS`SN+MBSkw!
zJAXTKJ5@VC-r}L2y`Dl>u^y=*vYy}Eb>c90mZ1VP7hk!d3usUpB~0O>K1!^-(EVqz
zlE_7Vv|1U~kUQkXeY8{guVHokk@aZ0@<4aZ{5?=j9+=lwRtu=5I2T%3rQ1eP9gd3#
zbfy@mU;@|!NC1WuLKGbUIKW>D00j+jB0M@aIwm^G0JnwQ*><~n=p`W{fd()sO)b3|
z-A?wv%g%IZVJ>CvW-dmFr;Aq}Ss7s$X%{zR;a&goPAhNaCgyf@e7lfS-)2FUy29hF
zatm1)w9HHN)w=auz_&2Y^;Nu8Txhmj%Xu-mHCs@&>`H&pyIoo!GY2KUc;5b7ShJiQ
zH%iYLGD_&+_cpvuJtpC!A52S1z#g_vR8Ln=o+dAKQM$`E;(Kuk-A0)t$Z*k{D9dK!
zOWTf~Y+>F@%|_(A+ZD{dlALJZW7%uZz4|c`#+SFNF!?}jsWtJO-OnfQOz&*t%)M<l
zzL0V>0(O>Y;d_rMtH0Ycev-aK)hzwvY&oFiue0=aZnC%3>HczE%a(J^NC)}d+;W@q
z*<?=ollkdYOOngln6Jp)*0Obr@$SS>PEOlbp42wRW_owU(~{+r7FSi}88TGqLP((1
zk=2t`sa5m7DWnr31}Q8Ylva+&#T8=lQoX+1=YnJvG)tew3V-oseEfOczi$g^E+mr_
ziSQ$R;eYh~`QxW4C#E5$A&DXW3f4+O>7|b+foDQHwP(mXH4n)p|DNmQQOZ9N2btCL
z_5{z;otP1#BzM`>`}U*DAH!Mk?hdPeJ(ahGvhJK$-)zqG^NVP!?<y+1yez#j5y@Ev
zI0XK)aR{7ckYHfKU?zN}5R;S)43~+=pbY<WiG}eW4OXBG#(zxY;U8fT#l$f%KT}}+
z*XP~Yz)xuH<gH6Sl<Hn?Z1^<$aYCrMqT<NuXs&9>(0h+ZXU4=j2p4sZQ)kUYJ*W!R
zjeCCD1QaBJ8q3WKS#JyyIF4P6^+GHCd-R#NAhxlvt}vr8rLd|nsIZ|htFW{%uCU82
z-Ynd#$gI*V(5&7p)2zfS)-1rR&Md>M*sRJd$gIJv%`DBVX3Kx8b}N0WsPMN6(+u(v
z&K%26{6{2-kc(ag)1+R!kSgRQTsOvJwfT-(ZPT@0n2;dkFx*&XVr||!N4bsbUfqx@
zBz!z(Is>CWza0%X26~x71d!bEPZ<PtJc`aeHt1+vY$o(3T9v}4x2^^LP82mHG?X_K
zH^ek_G$b`tG=w!YH{`kGH$eG%`3Cq_`G)ys`Tp`P@vXHCwam2iwhXkawhXt-woJDS
zwyb#$dCqwDdM@@Gx@p^M3#Co(xWXH#YA?>t&yLNG%+AgB%r4B1&rZKD&sgIc;_Bmq
za?Nq|a4m3+b4_y%g1f=<;4v^1JO}OpFMwCTqu_t8-LCVlW3Eum9j%qtw%E4LrIXth
ziPJv<TR%2`Z2UO+v3I(Ex_Nqfx^sF&x=wmbx=VUOx|h43yP12MyOX<Tv~RR&bZWF?
zw70syy1BZsda}AFyf3^dd@8Kj7ui^#2Xu`h2If+LRR7TG&Xko|tBw|M15cv(ab1}X
zRcG4Dj3M0xBL$d1v&aE_MfyxV&O$3U$a4V@C?BPTQ$?p|+*od93z;Yo0zO5d;gT@%
ztNvX4E99nZuPhWdy>;_ZP*r(xdVYFrdSrTTx@US}dVG3%dT@G;V~C@V1IjVS(ZjL8
zG0ri~G1$=EFyAoN0Bx9S=xJDZpV2Vd@Xw{&W!`1X1*)!DiFfp$)hhUHQNI1ZHa(n5
z{>VB-ZO-+dL<-=!)14YESNw6f@Zap|{~IZdAIFfZ^Uk#3by2zL*^eBRhQq>Qq}g8W
zVRn(aNz&gIb%#sFD6HnwexID?$>qT0U|93_=;E=%)B(CQv^28>T^d+gT^e4RUHZGU
zv@|I&rGG%OL9#`1mb0C6n6r^{l5=LbZFp$7VYp>@wz9o)xN@+vwQ?r3Ep#ZfA!OJq
ze@q3IKTP43Z>I`Kw32Nta*}OG)S|MN=TH90e4qtwC{mVvOBAD$kdsP{X39`uZ!y;!
z9!un-LYBizV`R|Pt#2}y7~V}hp=y)6O(mw~GjOilHkVCNzB%aR?|c+)p4>xz*zAn1
ziKq#w0oUZz6xKx5wAG~5)HwJ%)H<X)G&*EE6gWgWv^u0Z<U0Ivh;V3eNO8z<D0GN&
z2y<w5$UDnF3qSjFmR#2lk+V&iV{%RQl6xuMfSOwuLQ9I7<d>40SWYw+!Hv?^XHdUl
zIC%zn>Eu{C5@Y`IpEd{4(1qeFdHfV+CPUTMlApc@CD5v30r|V+Qx+i&uf}W118Wf;
z1<2y7mtX1H5&C`MYhzbkS4LM#S5;R~S3_4;S7}#VR~INA6b>o^Re}OR^`J~p2`Cm6
z0ICCJfQms?pde5Ks11|`s(JH&t9?s<E9&~Kz%)I2m^{nklJ+nnZgEkspqo^WXHhk}
znBvNKq&C-4sja(K4`UHD8k!QrOr*_SXD7FCU9W3#m97TXIWb))T$0`^!Ux%VVeSL>
zhB%O}MbZmU#+?<OMSD&8bTVAPY6W4tQ|wx~Z3=#$?oIJ#L4kf0Q3W)$LcC7_PyV9;
z;{ja~xp{C|AF>Lz5vuks2mLkI6<}WBi9??qVDvvobT9e4=L?HSP8|HPWx4<7&p~vL
zG6naH>-g!?A8;6Og`SKJ^Md9Ghf$a>$UOU|`Bf_N?UNNkDVtRza116_DuYn&zBqWF
zVTT`46|~dbZQcE#<>!aQ=@lvh`>0zEVn)bK*7N<$i%X2Zzf|<N_JjNkxgEavSCh}j
z^MC7=u%rkyb}@uqr1z|~nD>QKYTFw*J@50-nT7Dpm=d*wfN<Ml#!ijE#)kXd*%sOd
zeq>x5Iw>uJK*0{C1r-)p!w;{@{=WYIWI1OYS>p$eq-m?FW~F|~){}e~NU+3~`}!Ie
zkW=;iEW9qY4(|T`XK|GfAAWKtub_#<an|xCViD;l;$<|#E!-=F(Dy2W+wm(6@#SzE
z3>hr9WbP3q!Tra3%yZxov+5`zpds6=Tf11*PrlU)_TfpNYWjFxJBWI?l)v&r0dNFn
zij#R~U69tvKr7>!+JH*dA5C>CY<F3g0^A{*$eheF#q2~^y$k2M48KyGAC@vZ1Sj0}
z(L*GDcV&^W-hSPr?;+2BN(t#Y3zme|YNGRF=Fi@+cZxF(V!mH+DNO4o%Zfsx^#RTr
zhaKq}6&2m&9g+=npDR((hSks!El|(Bw~HXpA+rvfN+zG4jmrL3i4J9{^oYO`e+)*W
z6avWn76>f40InfHuMpQK{m+8lY-Q=KJ|!?J);=0{z+U^6$6yDL>9T*PuntYtin^DR
z7lyZ%w^DtD%>_1i7i;JX_Rj#-hJU7Igzd6?Px_;lm_$=$c_AbU&Eu4i-5r!+m)%L)
z{l#^ycSPSMO^AH$U;gq{8`djDB<wX{Vw<C<G<OdR0jnTz@}FK6HA%lIT)HiB3^n-k
zqZrkRV(ViqP}`UJ;upGRq9wGBi7B%Y0Yt*-ReqS?uf0+>IWDRfXSEWh#a0z1D+=v6
z`^8x)7U*^J$)Gr+9!SVic~iuJOM@Y#%#nQ7Sfu)^H6a(L8|Pf=tL|r=F00(jM^R{<
z+GN(fDOxGNARs28tR(yJTzo`?C6oOYJj&*j8m#fEf~;tZ!Hv5R>_g`$gBJTym<l55
zk^|On%&^>hm`X+P$_rLS%-VBwPOzIX#qxc99-oYA;md3BhdMt**zmHGReS)E-b1^j
zrcVP;#?fW2+xGf>`R;RrXD<Te40?a@Wg8TAhyu~}p51*(6l8S_eTU?9(TS0Ze334!
zeQOf;i8X{%&I5>JgJCnLmJcviLEKtAYDF=VBAN7@zpddgjFSEi0~ZB8M@%sN;%`4M
z_3_2o+nts(-BiR9riSP&Snmyi9#i7o7)T?ivvd9q_cKsFrv#gC9FGqJwkq&4E1oOf
z+<c(obxY!09^7G5%f{HTY3Iy{#tHkVeA->QMVB=rV)fqc+vicQ68Cp38E?_S5e*4$
z_U18J+z<9xFPklA6r3me;?aed3kyRIB0Ot-99SdI>U$mX%peags_rZ?VS>e%9Js7)
zN3}hvdcCf0a($dttZDBg7Ski*i4e0VoBPITO8GBdMs@P`m7f$Hu+nO^(WIpgCr?Bx
zts2p}+zV&mawb>gdtqAd^(7YfVqa48)JWcEFM@V{tcPLcL`~`qf#Ux{sL&oBYY|ja
z^OOnS;NPiHvJDVvUe1TR25k1u{tb%gy(lye|60M&CE2d?!M;{zdSuv~T?29oRU2a|
z+TW6hy3m{^?mM7*ii-d1B2rYo7wO`V5q^kLZQjCjzPvoC`ZW9<kZ0;Thv~xwD@-g*
z_&#8Y<fHzrC}hO;k6um_c^s8zwM<xdSV{L;-!M9!2#b-YFlF90-}x_>Lgxq#o<pJg
zD^Hqruo?(W((iIP(Se{-Ox?X_Z@@Z++7`*StmV6=o|RYi(3^rc_9ZwmN1;vTIuz9b
z+pbtw<JXanWRwjXQ#Dm%Q7ROw7m^Agw25hyZyZ=G*26wwuPS$InNzT>22WK_b$FGN
zPDyx4DjyQO=ye47b*uurbkC~Ss_)+6UY8sAN23>qN0@;Hq&_wCa23MuX|>dhfnSOc
zCCL=)8Dfkh!5n_p+56Qd&9zH95_3!UT&BL!YZkm)E6FPs&zTz{SlpI>W7cqw@$D#V
zhvypp=`!4gUf51H5p^BSqiy{QI5BsqBdcqUS-Y`A_YQOYM)sv^;uuiO-G;fgwi<M1
z$B=S-Hz#qPa;&nWw4=nWpj%b>{cp<4h_~HGhl#WAfCr)W#E$T{ggY#<iLeG-A4X98
zORh*C**BIeL?2lFezL8&y4i4}uF%PKj(NRTK~U~X0Lv~*t*Z|oD57eQ<w|@0(<?nF
zrDK5SLeY+6ZKS#G--Gde)-mcU+S+K-72LCLQxK?I#6;l1)GxiGUu1J|p4l&(%+mWF
z@s-b8`pe45D*gbO04?XQI&{g-vVOFP)&gMxitOHTVLagtGn!!I`-Rd?DJOsc-486D
zI#A@2B#WEev%+(94xW2d+rr+rvM(dQ`>?-p3jlT_TjY#xZH@Yw@gjh7ogQNC`TO6>
zJ+$eD{GNUr{673$&8f<wbwrz1zNXz(V^IAnT2;fTjyx+~9HLj`mBKI+yr|M5*P&ql
zyHP!>+&=l%MjzbaoV2KVQucE)x0%Q8ptY%04qYEkA8to0YgDW9nzN{0<00ZiYAHr8
z?-)^c2W^R=$yLsHX{kv_4z%RA<UJy~^wcCV@^xvjX-ls7M14utBD`uus~Bb4#u}Ww
zu`pdT^7(}RL}^F(#K^wBUNozqqr7r@b-ZHm#PjBA#ACYMWEE+Z`D~|M<f_9n>uPnK
z%%ZU2GVaQ4`y~aGc=uyf_0@B=u05_F=$W_eOU*n{F(LpsT#8u=0X%ih2M>}q88eR@
zkDq9V%QvWM0@a^pZ{0SXy}h4qHszjBZ%;SFZb@(T`)_WSPDC(y=Fe*Ha1HC70)X02
z9k<^7_P3_D#*sz~Zw=H^i<XNZCaERMCCezbTfSSqO_(RaCs?+**Y+3Bi`o~STl~I{
zPYx$txN-Ao3uzIux45^sn~-CW5q8oE!ZBIo!EM~JbU))0+mjR9(rft(2iw2bmKT@0
zuTLWX`dk*?TBvg;KfM#8ZSU><!<N4!+BK%r+A+>r(`-*&V*>em2!KppS)DjRlCK^Y
zy0=d{v$-N1poqgE<IFCpn4Ow&khFbb%vpik@PNCj!^C^mwg*ZEDRgi>8AE55ZUj4W
z7ximu@P7wgFI_Lq$gSL$-yKTa{5r(&O%|3T`5gxtEc<(naDy<r@#x{(&M%%<q^x!}
zO*T!YE`5l6vp1{yi2TTY<M+bl+wd6wTJoCu=y<#2>-z0hM5HXKeott27(NThNS(|~
z?k_*;%e^r7#BsFYOpi=X%*?oqP|VDr%u5XCkc>oQIoF!WoKKMM73%kKp7j4;WsWD^
z0(mqwnTbVTv#Hw7Y$3It#G-BVHid*yK+UcFSi>K_QM5{Q#UHSacn`NB%05Lq#W}@3
zMLi`vMK{GY1(*_;Vqs-fA^3v%1^WwGI!-!aI%YaaI++fR4xtXF4z>>2JkC27NHC8*
zPsaPsfys->OR_EIUF%kBG(~Xz39iSAmBfzN4$ltPj_4TUnD`j)nBW-un2Z>Q7>k&I
zm?#?~n>ZUUn;;w80K<UT0MCHHfM^+GnRuCW8F!gT5JQky5KoYx5~-YANP|X0WE<^4
z{FjPg@;inH{tQL~BfFxwBD$jAAl;y%env$@MUFv>K~_XjL{vl{M;b?FLSaH=La#!q
zLbgY-M?Cp_f_8#Tf<l5wf}TTf87ga7(f*^Qa9RD71wD;slqiLV$w7Cuq}|uE^s;(K
zXv911j)6?aNLRSPN8#cAQg%mu)G~RJInTJW%*Xm6@{()kXp|?#foV;*v(yLl@awX0
zhh{`M%yXW!nxq=vEwp1pl$TH`j3_KCL_cIHR3KO&tS!Vl^eOl$3?U>eSUPktlqQ%a
ztTe<jbT1e`7(Xm6L_73fC{Hj?SaX<r$XzIUFnU;Ah;nEJg^gs~OvFswA3&!JEmoX4
zg(3wLMHS$L;y(!63ZR3+7XU{Q^p3I>0=6iy0qPXffCh>y3S@vh#VDYH;)sF>pidz{
z(FS;;KmbTn3<63E7=Ht8fk#p#|3i|JAX1PLNGgOIatl#{R6|H1s}Mg(0Ayr8d_R5v
ze!pmcW<PrWc>j67U>~|4xu3cJxL>kAw?DC;yZ^fXYag;7v48L-Zov#}cJpl_od+)*
zXm+5prPH8Op|hkDrn9HhtTU;Tr}H+SKOa9oG(SHdJik5PI6pR@Js&u~IbT0NGQT(<
zI=?%AJ6}D&Iv+5<F<&=7tfOfVb9BLf@#y5fjE~;Gb)nEM+YW4ZZ8vN;YnN~LZr5&i
z@DcTK^wIJ8>0{vY%}371%SX${$j8)2*2mLF)5p-q%tziw+Q;3;_}S!H=Go&}Bao_5
zvPyC#7_cFGkG&zu4xxo`Lf9eH5Mc-%gbM<I2tZiaSXDE=Bz#Hwl9!&Go|&GIo|B%Z
zldO}elc1BNlQ*9{pE;i~pERGxo6MWZo4}j1E$dzHR&NB&xTc01wqnn*%eG6kOR>v3
zjz7*mPCd>zPCCvbP9{zy&LGapj?d1{PR-89PBMr$$Tmnd$S}xSj$h7R&RtGf&Jv6l
z%oa=)%&3$rrxVho(G=NHdQkhNA($e|B@31TD}m)*6<lRqm2c#36j5bRl~Cnllw#x+
z6%=I^mB;1A<(U+iWSNw!<f`QD73^hCWKNV$<Vh4rWJ#2B<Qf`Nt5d48+=_&(LHyZD
zB}BzpCHf^xMN6du#cd_tMc$=P#Rw$~(*UR$bZa^Zsy@vDZJ55Aj)KZhGeB*jN7GqQ
z{b_+|Z|Ku>7*u+i23pGC5z<lM2JAqx3~8oN!K{+e=B&2Tg8VM92ZlvX;I7bnX<e7^
z8?%*tlj$Fdti#2or`A@eNY`a6{U+AG8EJvbz%Zv}S2k}@*YQoee>D;gH;f@xGrO{E
zq>MmFokm?`YvP{$mx5r@Fz0aNP~$}7=+CjA!#^jlN3O?FhEOI@Mx!U9M-|2th7~5q
zM#e@N#~6nhCo4xPNA1S!hL4AizmH_#PgV~3k^J~|X_@~vCch`{r+Z6ZW9ZrtARzh=
zHWt?H(;8^^pDqgx?*py9LFy!TU;`}g$9omLh)KT~L7JYyj*&BeTYqJ9RS!p3-daE|
z7xJ~?pGUNj1ru@*jwcqaDRZquYGFI#qr~<BqFr=$jOxV7`p5F(Ay1Th!gK3wACzk{
z|0{n9)yuYg3m;jVew;=pHs{lk0#W%8jwtTNUTzG&wVqkQZ6DbCPxn~tf@vEq)P{(J
zWsDL^(JTToLeY4ticK(k02=U-lfetZeqNw5FOh{3%$r>D6@iy1+#A()3#@hxf*UZ(
zzsa(j@1sFXw(=%joQ$#$+E3{UA9z3k4osV_RqTOgH$11!A3b<4+88veAyyDfxYM4S
z0ZAyoD19<`9R+sPzsU|fkV%pzbz-<phTMv}uPplZk<+Gl8Qn{Gzx2E>tGfls_r`2p
zS>;l0dm#-_L93|HJNs0LcR||C>vdzZzNLn~9Q#aJN3gE24(IU=JK0m@RD3c@bKR^Y
z9I1kO#A}(0@VRL{8y3OE0LMR+kq!h8EprupVIxaf`$`j|$FN=6@>V~a<U;|T$yD4G
z)U(;a=XNa7^Bp4aat3p*y?qiyjQyM0kMunr+MAiu-l3Vv9v}zT#e8mEj?M!^17{58
zCB89lkWo_kn?Hjz_5<oyK({Y`{>#*ZC||q*UHMIjHzppzY{a_LL{cFqGy&HIatNZ>
zBNMBU$TeMO6q^Xie?t?#u4PA+sduWIL67Hm;@~w}_9i$-SQj-r7f8Uq$}vWIlv@Al
zXxCj`CR@xI)TGO<z@hhm>&O@1c-od4oc?ky$O})q=dP9mf<v=DP+Ct53jMM1(jAc9
zAm8nv_*vL`B2Cqg<U9=)Kfqy-nC!y@M?OCJ9&_?DCGV77^fglqru9=!KHR#<=T`D@
z0Y@}gV;Dd5&x#c$E9B$DgF){I6x)tz`Cw+!al&fq944VHw4;dQEa5V*ky4EB!=rRQ
zjowSX9XY`Vp)WTF=w4)tKrEn4YpmACUM{F06;tFw&nxvtlvYiB9-Q^EDNVZXED7IR
zM8yl$GEgW~a9ri}PV5XpjiDq+nb09{mZlQvuB4~5F7$_Gys4f=@_?52gHA+T=eIVe
zfA4UCUc8TLbcT4Q3*v}$7adD}Hl(|`h;K7h&L{%<S=A-8%LfgkLhyh;<maxPENMQ+
z!sJxs!CZ9yZ2Vn<S9uy&n_`Tdm%o;1reYV^d@>uKGO6~@7(oELb&7_T?qZM`m#Pth
z5p2=y168>Kl!KC-?1QX?_!eDM)grx4P0DI_l)t%p0+{uKg}50jlqN?^J%gxHaHLAq
zN{@<~d>nrKkO3NYtUl%H50LrpUsS_dxM0PA?oD>hQmiY>fIJYM0~5BL1Xo8*ucJ>O
zgo#z~Gr%r;pyQ=@^^Y`ELr4_#(TivHWA@`*w25?4t9^r)Y>UnzTcz!>a6~QxB%b0^
z)hJohqBvE$(3P)ks;Yi6)-v#f;%N?<G4-;rd10{o9YV93Rlm^f7#w;v0NjXFmAX(0
zQf#2fuIkC2tb`g>A!Hs?S!tl@hd4|Y_-9}7I`3{6jYwe0c)fB=txQeU{^4ENu0>4_
z>uw>wwx0UuPl^@{&OiP@)|#2Lf_x%&TdVWIkL7D)-c&&I*GZIfHf4BgqQ$IiSTdnW
z`Qh(y6R^-#Bo5VXBP`$eJiF0~0Fuh4aIbEu^>}#L2#U7Aj<_a+sEQfwe;f3bENG+B
z`63Sl2K@>+I;eaHc=etpv*$-DgwB}^!q({Zw6O^}CJSRlaD0?np3{03_v%CFqcLX)
zd2{6fb6(@d@ZWqXJxhep4j5k59j7WrjQ!OEvWipDV8VX>v(LBm@5JG({JG<#7otk7
zn>B^f{+TNJBdW%2V5p*%UV3AJsT8sfd*E#gxI1j(mk@HPFT%;tkT{V=6$I(FrNoWu
z=@~6K;z68UqA9}z?>eu(4Eh+@5zUVZ?$@K+mAm>zyg!<7#dTzqC?sa9`;lwS|8dGF
z)DC@KFWRd{<N(hxALh#~yd9Tgg!%AP^=}&IM6~4FpVV$(uSB<+#u69k`HaKeuaAon
zNh{2vW)t+~4GBVFSfu%wzY>6c^_8nl=0;8%^e1c9)hnMfueljD{gOE6_(ukn<fdAq
zbJ)G%Z%TDVq2Vu|C9F|y%+FvT%_wewB}4-T>o4V&R?_+RQ+Pw65ovPQ4;Sna)K43P
z<&E+cJ&SzG$rqVdMlUuu?HKI?&|za(1}BGN%|QPXF)Ob+<^oToA`*(ZucVTQ!G>13
zux&Cj*^gL?eyl@r5$HNlnX+$#rBK>7N)0AT2BqC>I9UhxM5~sM^%^cCf(Wsr!-!}L
z=PeeQ=`Lvzp0kdWov>LW*9gM&rVhyuR%m(8enqO<ve)uhN_`#dmO!*lMpM`4v|=df
zaL+K-?zy6VvRzROo*_x5C(?vFzW38{;^gETemaXO*9}_-_?$XHdroo@(kSUI`wc`*
zei5*X_6=>HkKLC$5pU-lB|h$7Ulx_ZZgi#K=HH49`Lf<zoT)3~ij)Xs%2s|#`E~mU
zBZ`!Ue8P6+5f|eLmo8MFr{!lB4?=ak`V%asy%sfb1RFmKE+52k64a^&$r?D27TR86
z17FG7@#pG9Q0_VW==XbZQbfK5)nFm2$7f#Jy;bBchC8Er@g?!lx<Q_c9}(0=hMzn!
zgVb^mYZ7YRxH!olE~<w&KwL$aQ4>;ED+s#2=9Aco=+C1R9k%lxFjUzh=!U*knH3ze
zk*}_Z+0Tu^^ZFSAgDZ(E9yIaKl)+cdR`p+sdBpZ;!_HYTw93B5JvI>=7^3Dm#&8OJ
z9yX@gThJTtNOp+?yX9^D&fXi(#;Q#--QM!5BlMvNlUU_AR#adJ(aICTlg?m(tY<m2
z<@RGApuW?BQDcz_Jrq0TN{VE-q^uUkz<j%2I8z}LKYmh3egJ{1**%EHULa}_6Tn1M
zk@#E2FUDTz;zM;c+hj5?4JXUK?_nvD60Rvbq`ywihiuvMU6&x!hF!)tU;V1NUapCw
z@fR7-2<ppVhWz^$eV&@(rjOETyoo)yEn>UF<CGi>^Ys{XWxq=sk(9NE^wm=mJO99U
zP!UU7>N2ywLHb$z9NFbWWnxysaxeJ;nNMV5BR*9p{CR!}s^4Ja)RZ#Vh-Z!(lmph)
zL(4pis%Y^Nlj-zo7hts(zvRN~t&kEnmrDKQX>mclQZ$^0$bzj;>GZoua67E@?(2C@
zy{cNp1s*h+_VPNhEBU!&JBdcPs&|_Qz(VU2RMM~1sdx-lT>ISdM7?$<9`S1P*@2Sm
ziVBl-%K<NC%j)Kz^yNQa-QcrilG^<<*hIVZRgcFXVh!fIOA<<F{LQlWYzJW=vP|R8
zQ+K$vc%3kPOVFCQl0Cdtv$|pN>Cwh^!Xn>~Cu9{3vknsPa~Oj<$ynDM5`Pq(3AO52
zb;^>9(0B$-cBzT>?woOsHPc+9#db3GX0d+~5%itzt!c7?U$wq6<Pbc8WzUErCPldt
zC?npMhUA$}@yVQ#lxgjWw!@g37w6qYp?QgX>vUL&;-A(BT4`KTGF+$fA)*O(jIfAK
zKdI<V58wXHVq6sy_c{wAEqwX&&@uJH27XcAPo_Ppbfvl#K_(ZYy&2czYV`P-y{g!)
z*e}R0YE`036BO%o3!v8F{x(l_?3~)yGAi$QTF=%N3N}ltR~k5D&+fDv@w0o*tkc(F
znajTUepg#DkHH<dG9*RN_2U?Z8}jG1=;8@c-~9QpwtwIZttq#o=ds@2j)rK=txm}9
z%hD*?7k6UwuzB8F_pLkD2}327Lt4Zpj6DV(x~G)81zW)Zvt!iUb;PC=OAkO(49}i&
zJ&8}iA7yJ=si?YkQ9(-5UDv+CP1RT53x*2@BV|GI++7h2mwv2MO!?U;4^Hpf_&7~$
z8}--xMTL%Bkz66Op}f&twrym4C4I#A=$qgZn^%D)2Rr%u`r`xfP73eV__x*DrW2vg
z#oNvk)-|iAdACG|I^XKqO@YQUYu5*uDg)%JpheAFK|fmWM`hntqwnZt@(q?BW-S&t
z{0|3?2}EzWo-}VOX2uti{11<AZ*P}oy5=34-;7>Zz11e?psz-+gH25jdE0r=AJD6x
zrEc=K$=Pn&w?5h2wBEu>Z35neN<`U0sHH1~Z)$JFTIDP=Y1Vg#MAstLX4i_3-|Z`3
zOFH$vY2V$vi%j%-I8PvfG4M6kNvI1tMaL!!(~iEnaAxf^gw~M>B}CS#3A+SzM8B*f
z5>kn*QxfV`E9xO7O<(AUkm-qT=!t$Y5-|u6anTcvA8Bx(Cnj(LX4%yY3$JnQV%QF|
z=C#bm?rL8Kc*!hi=B+~*+=`pjl%42}sPZLK8lgJY-)D{|7vA{oHjnUf%WX|(k8OA>
zx_&4TEU+2)YWMPVzme{Ti5eq${YlBo8ERoD4K^rZ-$@+5%pw}fC^?&c8%TdOx-I(2
zJqNFj{2gb^1Rh=)f6Nk$gope7!iZT$jegMYX8yir#*AlL6GhW_tA}7;!Y!{~WB-mM
zq3zLm3bG`mjb!CEe|=LcDMHsq85s#s%LAJqQ^X}aOCb@_Sr<u3+1L~vgSn+_9Ey~r
z4sD7^r4H?j{G<r2isS$>tk5rj7#=7kK#>cI0vP9p`T&^Np=y9CRwyB$iU&#!u;+p*
z0Z!PUegG17s45_b6>2?T;{sTS(O8nXiQeW+{3ing0LGZ_S1!iH%#6uYMbFI1kVMZc
z$gD)qOw0I2&#cJ=MRWGa0Ae`jWU!+-7i6ZRIj3b@8lN*=a=G>dZ6`eEvac%n_H<n)
z8g{cS$N47zAHyq4-c@74h5;)xe^w#Nc#kQ*zw@gc;$)ts&V;&ip78R><eaXKq2h09
zU+r@c-zSW?LIi3{RfA8DbSAdzT-{NQTs-0`0tOwh^AI<GUpBodmp{mC?3_eabj}!E
zAKhI;1+zsWRX%#|i$M59)fuC|TG3U<@5ivWeR%)zLwNn79F}~EH;4UDm@g~$2J;NK
zlu3w4c3M~QDUeo~*kH6tlX;nj(Fv^x$$#k%rM=?F$5{%0A<^zq3I<$95R`85PvM;G
z!wE)xBYo(Wo<Y=t7k)7wzg<rYlz3Bg66E~{d*`qGfF8K@krZYRyAkrtk}xxw|K?pt
zy%OTq5!o~~ubQ*bpsp0i(S69~_d)2xWM;mw9m;D=YCEPhWzX=3(Vng`aV3s|oM6tl
zrVnitdjk2g(Dkz|({oJCVBQwY9EFT71K%l8+@ErpnCZyvNt~Pbh1mhL1j=vqY`>E4
zR42NGsFN2&-XQ5J#H33$X5x_ak%V7XjE<VR0m3w>5?m~>2ruP6NWplTM&h}Tsmb(r
zW<}fcYD?XNl^c}S*a-*~DLS7g)YkR8<5UQLe(k~~j+D8ffhOe_?`sqddbmJuhtBGX
z<e%~M>Y5(M-lV1R;IBU^!y)MFL5>4N{9j?@;wg+Ss1xySHg)Cww~AXny*SwLjnfa#
zgta);pXaIKCZ-CUONv(#${|#cDOAOJQs&P-u-TTRt0svuT=_EubRi^8ti@%68CMdC
z0-_#u$&rI|SEX&>e@2-=|JXw3PwLG@J+pJe*+m+QVkwvtBvs$kHCT+k#gJ4Tlr+%@
z#ynH<QJ$~_0)S870uNDQaZaLMVBN)}BfN%!ES*SXT4{qz8Q}`d;Q?i1gPJpP0omC-
z^yMaCA(zkE4lv?GQEg5)D7@wsjj($XQ!rn>lywygKlLrrlmwkp4Wlnk;BJRePA^kh
zmo8@V$#Q>!0igy5(<<v)-Fo^~bbR+!L4bVXoYN|%+eckbT5<0CU1}{Nihk}Lz@st_
z*>liimu06`Q+r5gNLcm07)WG<=+||@()hnwm=%a=;nsho6<!=y)2~ih4E$rgJ6*S$
z(KLrF3Qej#y{9$dNxl*x(~p^h<!j0e<nc65Q6)>P`gW)Z9d?JU6Q*|+eKRbOZRSiZ
z;x~bee3wV3CDV72bKK^m6Wa0DEQv^$4jj2ont&mJd#UCc9osVsdA?^^D1u3br({yI
zmo?6T?ffQm*K77S!nWx3Ai$YB;0N-v6kyOvPt)>)bx!Y(91#X<CLLY+8*)w#U@`|7
z^+nmae$FbVKUOrL^HDsyg)9&-m=1VyVYq3sUwxB^<e^!Y$nQue_C7_i(XpT5Tih{}
zIc`}T%22jP2xGizzUa&0Z0jkV4W1*EEWs{oXc2gdnw1}6v@M#y5>2$JceLuT`qZbC
z>K5*tEifI#hWMg_eN|1pYp6KZmYMF(#dc=%ZFRP<y&}T%ZkA#$VUpM{!h!9T#Pd6K
z-W{C=0v$!}!QZ!frwc0t#ZI&Wmal5L4@T<@z!8o+f9FQVOA!Od89|rH`@h+3lnw(t
z#ELZ>3#r|Ca9y?+H&zIDsKA9Sc-oVrzQrI1#n?a6Moung8AQG;Nz)a537DNdHD9vg
ze74w6l6co%tbCcAzq=#bu9=_aZqxcT-s!SjFi?3VNNVG+#61sOyB+IBBoUpVcYfwL
zT!YKsC}#zHc>ieBIVf>I9Ub_XytDm$0pqeGJ+ZK17fZksub&$R!jw2KN*)9?F|!NN
z&-Nj3zIa2iyUITYAqhqX@A^G=G3<Wz{QlaIfG}))ePj07=yg09AWhD>wwE}#wG=DE
z3w!exH$X*MbI(JZ6W^}<7Q%)!?mpL&fFz6GgX|t#76RwoNcIiiZ-a@upRLG+{VkU_
z^jfMg(<+qMfod#0R4rQE5B=W5yR4njdcvjvFVi7pf(%>>>&YzWW-8D0yB}PXI>)XD
zsH&TjwEfLBt+(Ibs(g23;iZCpq$>2Q^ctz7cvZ=v#<<jdM&N*FpXbo<hU}>0THw0$
zn(vY0vEfnbW%AMZ#{Js&(fg6^h2y31wZ*77kIn?111Xm|U7fYr#Hfb@{t6in_qoKx
zsRtQe9!U$gl37Rn9BJ#ggvE8F8s9eb%C*X=vl@Bg-%GksH>v50Q|2jJc1asi=|O1y
zv2|+#uj1X;2}sN!Un@MXbhGM04Y4_BSC!OE-y^WpDYlw?sVD1da9-(^H?O?!e%hzn
z88L5ik3sPsw$r#Jnhe9wqSlJJTE&m18pl3)XH(Cqs$R~3hM%qiXbI7LDBP!Rr6U5m
zLku4p{zzP_b4R=ubkze<FyNAT`V2RjEh@e+eqvaXEdEkphp!w?HIlV(<uM}78*wL*
z-PeXmbKzG)s)c^_dT4#qNItlr?g{5ef40}eV8?{2Z(3}ROJ?KUe~Td8`~DF}B1}(o
zGFf|7UwS#Pp|L8NJ(3l8<>At(wV2~$#NA7_mKk$Ch;9jZjxgu$&D&4GZ`_Lz<E?TJ
zT5&)xTXEDo!^@s)LoU7fwAHvO#9O5uG3^C#)N_!#ZOncA_0sYD>2Pp?*Rx6V75p%0
zhuWZeYUg07e7fNFpDgzK<nF?2LX3u`K#ov~WkqkfAQw@g(sVuBVPpFn-1hMjj7RoL
zCZY$9X4BwX>Em40p?)QKeeefNOc<xn-a3Jdrd$}&;V7TX5lwBsQu_ypiG4<crGTY~
zAHr(-`h`dIa|IDEhur`?v2W~};Oba-CxI&tkJR4G0b0-(kwVtE3*VcayR+)**1KgF
zr4{cV?xG)16kT2N6TK+WMaPD$b;&8?CJ4Dmv&8?>C`%&Z7za6Yig8AT{VogD3zv{E
zh|}8luig(bN9jEo>ef+^MEl<D|3mhKFbvPxSaZIt+kLQrEwg~D^%u_%Df&>8j|1yU
z3WH-qu9;_*vHVuS#`&nN`2uQ=$WT@k?D!bEKTqvUnx^F8nPoAb!lhxc5`sIwgd2aO
z6d&r-7!$|UDW~(@nz9x>RCMy;77YDB{7Q+$_J{Ca0iRw0;D;p3^<Voh(LbXl@ccp+
z5-JdJRSCFM@Nb+*eu(NfO4D46f>63uPzF5|1`Pl3ID-SD<o+PtIHG3e6U23q@E6kj
z=&kw#SIA13#EN=nGBLFAYdFBlw6Zp!w!Ai_wvg3&`}|lnz})n=W4vP-t0AvadIl+>
z06(iHuLQ3?FN^PH5n=$a*P>Um7u>7ZYu{VSQ6CzIa*WkU{@hm@i8X-ygeb9m?#N~Q
zNAi!H4n`)gMIb#69%3_cRLFnF<i6<smh_Ojk3DZZk3N^!Sde|a+4EUUox;_^l0r5M
zc1o&;(k!BeD26ZvBWApo<^;?33irPD2J~`ngxlS=2ubm(@@jg-v1;=g|KasM?nCiz
zVKvtI%J{!yG&F2wE&ca6!BoBKz3#!K8BE6<y>TJNk29%Lp9_Q8#!_25Ya?nyYCCEx
zYU5Z_7Ua<J(6GOMmgr?PjXlpjrUTTwRy%e&);a#K-Lc%njH;;MrI7yKpk9eyKyTvk
zv8M0;+X3ATKEFyPKWZ~jAXXPW%T{L?WXBxnH(;MzO6&&>64dt;Y|z}c>_nQB5t&qG
z%3V54`GsS8<J_Rv;;Gr9yXUP_xZJKcpz#}{_{>71MYk)v(SynAJn34`$PCnuRinOR
z@gS{Vv0SOk%)NWV5u?3?QIprA6K*jy_{r|C+i`ysZ{WXkZlx_apFo$QGFYHGBUgUO
zOenu9J8C|sTq%ZP2|=<vvNgfZ^rw3;3M4-~Hfq1GR<Gk8@q^uw%2%fIy2C=GZJ~u2
z3Vyx<>E7R4fL88GB|Ax;;914+{qovRE`MLrV>j-04{E)B+_&>E7Eqa1#p6J7OsjZ#
z-*?cX<0t?nyH(Pg{XRy|E7vogC@V9a<pzROI(+Z#Vh+@ZRAZ(wU-&D*%^@N+zTA~{
z)|fH#*hF;#Zbp)6l0Q8q@0`DD20BZ%>gQaXx(QeCN}M@Uw+h^YcSVHDu#8jsxt4<F
zBL^?u!}`exN3F~U!Fed{{BAiEzOi+!$*kHfdzuvl%LtX>RfNr8fi;*^(5DSr<NOq_
z_Wd$zNPofGz)Ro2=t-hOzj=kHmf7k3rk-X8s|cCA;R*!qDfmCx2O*q)u~fv&?c<n_
zFr*#uBQBbl329a1IRti;qwmQZA4=2B<ozi5KLBh%lfP8Dg$C15x|6afoAYN1O{Kdi
zho;eV`W0u>-E<Glq*-(?&89h&tEQ^E?dCcu_?5AEgh{BU&Z#feS5#zIv8&pSUD<Z+
zplxhVomKx(U#o9y*koI_vNaW{&(!DY3%i0{(XM0%Y@3Q?R-M3EoIpup(<sWIF*KIO
zaW-dOIAU7LSzSa=(bKd;RaH?cT4k%rY8ltB;ioddPtgD@mUl#cHpNC-{^52nYV{KD
z^?MKS5ydt1e17lSgez=Msa3umybs_ND)lmXD%`HcttRuk)XOl|3+*M@bM)uG@O%)s
z#I^&RXGNSfm(ogU#u3N&a@a)t9E979W<U17EF<L=UY)h8Mq*sres$JVUS~2cYY%1j
zRg>pMe@{4u=fQtZZ)Nuz!?oQ&-XV|UmGqu}d(UOt;IEB?csC!CefRwTLo3R*r!LpJ
z{$AeyHexnc7t61RMP=I-$5ptWk(rpzmCquqK*1HZu53H&^IjpG%`<Qx&*`hUJ}df<
zv9xTP8}RO?^hub9C0tW(;>w`-KhWxn?YGbwb?j>DCG~=OQ5{z&)FE|D9ab-^->BcJ
z1GIrQ(k9wWg|vmX(&Or&dQLsBey5J8qx2a0HC`QV<EPK?;rTthYXK^ATNd|O#AW6I
zb%J+{m$rWVYgHQ<Y5x*e5Z}HFeAx-H>H~E~y-x+SUj487RQ*-`O?{|7Qt#2jw45HH
z6||C8@h)LCt)aEFPJOKYu0EkWdh`;r!tYrs!XK^&FRlhJL(e}wTP~&N5L(h`wO(yd
z8)<?n_*N~Qb5R{Vn``K&)gHA^?N`sJ9csJUsdlSk^{m>Z_Nq;4vnu3Tdk)v&)6^FA
znA)ngsmHmuC)AVbDelX#Z5f=DWBmOb+ZTdj8#CFdb7>hgTelC@ed}-y+ZT;%#m0u}
z5w#AD`2JLWy^b=}DwU`5)uR+rE6cstSgqEmwcMNdChP%jQL{zk*rE_kU@I~y7moBF
zEB)711*(v1eDRW6r=BY9nMbv<%w5L?*3bgB#P|0zw4HX)PI{Jh(QYcHJ+znhh3(;y
ztvK%~@l(W07uu8whog`Sm&dgXQR1Z-vGO{xvaxuniP+jS?4`1HKNsf$$BXYP^$7b?
ze8S!>IG+uEJV%R{?xg8#(Og;x!`D?sl*FVO+x|Fv=?RYRHGJL67;c_5yXa%H+Z5B^
z%^tJY>@)k#0dvqiXP&ofm>1|1^CEp}UNVR1tT{}d(dYC9uSXB@{Js>+@G!6LkMJtG
zl2@pFJc`v=gSA-4tLl1Qu{QDwuo;EeqW-M@qE4!5>MoU|PN_H5@6}uCZS`M2c<!w-
z-j}FX)oaM(>)-bO_<0)6vz-48Taf2U|GTxy@;ga1uHw3|7HV@v5{IjKer<q;oR^K!
z1lP0YZ$Lbnqb)ih5kqhXS5O(e;)XB*lX%^oj451C`K#|d+|O0j0xXp0wVZp`?_^fl
zPj;5<D><vquLAuet3V@vRnaMWl+Mtj^;kVlkJlkRL9fv}^iI7?@7Be7j}!0oaC$nu
zoj%S@PO_8dtammz8=XzgW`Ca6@11XT%muAB{-IX&VSQYm(68uM^=tZd{f0jI?S6s@
z!4AQW!NlN=!Op=h!LGq>es9hy&ZrX@rTcyFk$KUv`a8#=GLKUi9q)bL;WYcsk>aen
z_`vb9j$qQak3b%eryBbz1<>hw68rN`or8+(t2MYvZ`XTJojr9Jb@efQ67}?(`d#+z
z8GQ!L^`{Qdg1r`xPEL0x88<ouoB`;`5z0d^r@+~Q-t5H$+#GDr-b)R34<;kc95qL|
zZvNMfFZ``g?JH!5#WU$4_6!1ffpswUUVAU9+Mn5<BZ_00f@roThx?wXXX1LjKrcX3
zj^G;HAT~AQxE)4Yw&`88<Ji29WU(g2aUB=8JJp@)NOS5r^)Q5^6px`|-!P6>3dV?)
zW1WG{K#X%jP6*?jCC(CrIC}Y*Aa-XuMNScN#QJG$eKMv8PX<ro0k-}aSN5fue<G6k
zwSVU0xsti)ue|el*1wY3SXy`foMY&Ja}|vk9?7ZmS^58ATvuv-YR|s>(X|Nj<a?VR
zz51&xsoV*!Utw{Tk<9T-<omku`w<eyL{PxrO&ZJpuZCHC?_#!RE%*8)cHtn`TPHa3
z@8U1`5TEl6E>)qL6i1CHo_7PCsTcL9K{Sl($q-i=Ib2cXa`mv7_fYw~w<@F}u1t&R
zARVG3R6?id9Xd^C=tDY7=Pb)|tx8t36=TI&4Xvi!zi(YUx{BU`TSP}<fM`1J1%1u1
z_lu6kAki^M6P;nL_mw`vU|&_1>wo8+XxDbD`0BQDtBSTpU(vR1HPHn06K#hS(e_-=
z_}T$Ci+1E{*VjZhTC}sZL9~loU9_vUS+tv5Lo~^~O0<WyNwlZ6QM4EDz$_kJXJ#V0
zFz-Mg=1APcOvkOv40|7QG;U*#v5zpv<96l@`#AG%Yc=n(Kf*6z@#qXJ9verNM;2tZ
zMiR5F>oF71o!JgOnC;P%*#W(n9nqVa=vH8Mw$?DaxRsb)tpa8@m-q2(e??{wYaO$v
zwU*h-{v9*ft;xLAKFS<uA7gI+)~|9ie&BbxFa7e4Do_;XPhDz2O*n(vP)F*@In<8^
z(BN<uVGet12K(!X=m>7r*O8bjnr?0Jl|FJ$`N|%6-B-7@dsMWodrUOJJuceLEfH<+
zo)GQez9QPueN{BkeND8B`-W&&_oQey_f63x_xGYb-M2)0VWuBHcdtA_vm}1^O8jQ~
zak2{i2)QpyY+mxC;_j2E?DwPM9`K{$KJQ1xJ?KZpea?@H`+`K}MTy5DKOXL3iN|jw
z9>4V?;rcP?B{MJQI%^Loexe(p1v;{2{{In0qorh3D?fYC+P6o3eQR_6)hIv5<W<i3
zbIrMh5j=BPNZ_5vP?X?J`~iPfX@NX{t~76$<K~2U#gv#=&1>d$_iFbVx4s+aUgtJ)
z8*_{P@3=$o3eOVn;7?XA&%t?4KF@>a>w2fq+2Yo6W8B(qtXs#e>(+By_`d|wD>4Jc
zaL=*u%I?iyXJl4~%&Y;quOxC`>92{Zw0HUR)$^^^^uLi*X%|^ce0GSH`)!NDJ4>YV
z(>2<z<tFJW-s4`8_l&p8+wB#5d%V56zP>>>)6I2D-CDQR?Q{p7sBhF=^!rY}+k+$4
z*VHj_<{Hz`G&0wlcyFs|W!jk@rmyL5ZZU(*?PjPMWyYC_=1w!kOgDF%S!Ry8&)jbo
zng`7i^RQWI^357kU^be^%)92l&7aKs-ePZwx6WJZt?^cSk9zsudT)cb(c9#0_6of%
z-ecZ2Z>jgN_lUR8d&=A4Ju5rQ5uB45c1^psuB@x;8oH*grDJq$9joi;t94WT3mvap
z=vKOoPSEXjN8L$x=6%R2o<~}{eN3#WXX=}4&2^@UX=a+6mL|b;H_0Z&q?+5zU^B#|
zo3Uns$uyJAG&94@G_%cIGtVqAi_Al2nOR}-%xbgFY%p8QAIu-k|Clr81M@fYsX1#t
zGoPC;%$MdXbI$z3d~Lq*;E`u}0q-GinYY|4@SgOxdprLLQkSM6000041StZ%00jU5
z1$YG%0003P1$YG%000BJ0Am6&0006H1p)#B1OoyC;Q#{vPyp=z0000900000ba_xr
z0HFW?{{IF_{(1qB2etvKAOHcM000001Of%70000W01J4W)tF~=RkyOoC5<$rk-;|2
zG~4IcV0!4icTDfSnchP)y#@#&w9rBg1ky<8)pSDdErHOD>Am-oz}<Fu_vWtkKD}>m
zpS87TB%QVN-`e_VG(rdvNw>--q)5C%Jx?b2s9a)&6dzmu@0XGVWDD6#cGmr5OW9o3
zlC@<6xmp&M(XyzlC@0Cu@+&z-PL<PiUpZaJ${Cnb7Lgm}dbvp!l&!omp&-E`KqMD|
zB1ohVsYGg#Mx+zzMMe=W{31d`ip(O5$R@Ij93rR4CF{s4vaW0@tBWP#6OmWs6GcP`
zQA)HFtwmeWQFPXQM0e3c^b~zWtmr5Di=kqy7$?3I<HZCqQPz`{WPRC82&{@VgvD7D
zMmcF9t)(@zj^b!NZ4&wEF5RJf^uQLiMQkx!!gjK~Z7<u$#@fC%-d?nqY=Uek+siJp
zt86T5$R=X2Y$IFCwqhAplySm{P`N{HmRsaj*`4RhopP_-BQDEbVv?B5#Y7&_OApii
z<u<un#mWudWR#Z`WHF(z5=K)F5hi-es<N6aDND)XvV>eG_pzZla)s<D%gS=1f@mrm
z$(pjXETe~G6`YNgaW2lpt9T7>;1$Y7*-dK7O8uxm#ftV~g;*=%#7410Y!<u3cClNm
z@@7z{8tj#a#7J)*s(IFM=n4H`IE;shun3Onu_jeunXqJGhr;KDF9?6*OXCakRr1yJ
zHTE_2HTSjj4fCz@?eU%TUGP2fJ@>u$2m2%aS^RnZ1^vbSrTrECt^K|IGyLoQoBi<-
zCL&ct+6aF{WJH#T+!6UBYDKh;7!xrk;^#;e85Ef^GEHQLNMB_3$efYUk!>P7WKx-e
zGeu<XoB4T^h*D9>qJpDRN2QBe6ty(!NYwGDn^{Dbl3BWB9g(Yht^v8zF3zwx;`N7j
z`hBMNA3l6Y`a1n$A;iL97~^S~4Bx{EJ<ii2!jgx*_p~hZ312#&-xuwx^HED{-$-Aa
zZ=dh9FW&dm_tG!?DLpND{Q3RG{3Sgtt^B?GvHperjUTmy{6kC4i24zuBc^=RlETxH
zJ~I5HmYB%)Nm~4wV=~{({NcZ}EQvbw4=w$3#pH_hw4`0^_q2%j{v<8`Sf%j8|5&fW
zZv2_}ycPA&1$n!w_pAKBE!8Wj{%v*rPwlms%Uv!n6XJ4(%Vlq;x;*7d@qf3hN%%Ek
zy%1MNB>m@Y!mNazNmiySAwnd)PqY)VCHN9T6VfMyB%Dq1mwUZJE}gp+68|XCKNFT%
zCQFl8;^-tD2jm!vq|B5{2r5i1Xbp!awz|9lOT3;}lg~)LJ^6val!2jtk0LO0U`*hF
z!0UnUgKSW)pu9n4gJOgT8Xhz<XiU&p&l(prK4@alk)W4<_YZphA8kSRgB}KBu>IQ$
zPMvrMhkW!>Ci;obBs<GL-&AmDaQJ`uA;G!5GJkMUuPho|HmUOeH~EyuokVVRklkfv
z+1TS%Yca{=&o*!LZA6?$wat2f9w?T1+-f3gid}k;m@F&k!Fq@us)u=ms_YRbI*Fgg
zBj`+=<?&}OUiq6o!g)l^nn)nZK{@4G5lXR192!Wogij3iIJ?#(?Rt;3n>-HY_egs;
ziM2&M+Ip-N#XZ{g@_5_FV{NQlCwh6jjZY*lgXqf!tI-CmP8)?5x$$#4k7MZqj-z<|
zf-d4DQ50v0VmOZ;;y3gN=hI`6Oq9eqbRW0d^!TgIfIDnP+-XB`uZR)Bq77cR#qp*s
ziMMPiky5n7+oC;z%}?6aAhNYY7fNm$QlM=l(u!{8j!7v(L|4jaJ5adoOrf?TzZ4n7
zr<BX~qfcyq%54WE@|zml1=Q3oq$c)Tim^Xa8~cmMBnD7hyM#Wq>#3_4CZfb}8es0y
zAbXhx+bcB0UZtV-n#d}?pvm?P&1Ow=Xep<l<(!I^aY`{neX7dvQPoqGRlQU>RbKVR
zuT=$AQT0)MRV7tfRZ-C@R#jEiR6kYSgsK{9fNiV>s+y`6_g1y#b$L_OQG--nHCWYC
z_0<qAtfs4>s(~7&8p<2;mTIILt0ro=YN|%4W~#XwsXkLPR0}mqeXaWQ8-A;1^0R<L
z0fz&QP-;qJTTv8cu|2UR9l*!792K*pXoS5*BkgVa%-*3<_AZUK_ta=?MF+7p9l~LB
zO0`sDaF-1uwzbU#lR(AoXt&JlGCOe^PN&<r+lH%Fsx|p-7pzH}aVVXnT6Px3&~Mm=
zPT*2&aGBNk#75&&TZKy4nN-q#P0j3LYHoj`G4>gKZl6*+yOg@wb#A%(91q$YDn^Y}
zZPXX4tr~}I=`b#*KdF=*L#6HKRK|{_vi1vF$N}n0HC{~+ozz4%3ESa#N}wR>sV1wh
z+*&mSKU3|v5U!xV2yHdhUQJaU>>|}sO;bzMQngGiS1Z&?wMwm4Yt&k`POazbDo$-M
z8PrA_r8cR}YKz*cwyEtVBTulEY)kd4+M#x;U23=5qxPzOYQH+54yr@ERvlJH)KPUz
z9aksRZ|Zk-Qk_zNxYg>kI-}02bLzahpf0L-bx9?t%j$}{s;;T)>V~?hZmHYq4qsMx
z)jfWw?yCptp?c)jx%KL?dZM1HXX?3np<b$2>NO@)Z`51$jw4|xXXczR%!>p@a9%Fp
z4!DE-f?vTXZ#NwcpTk&Z9Kshc&WkHn!IvT~U^b>O*UV*e#a#8GhY9AL`P18XCwV*X
zS0AH}-ChK;9j2H<FqN}#F3#tUz%-Z+GvI5O3A11}rZnI2YxBMN!Te}`GK&M|n709Q
z%}w*h{A_+POUzQU%q%x6Fc;>=yjT#6x=<{RWwCI;DlCbmF~9S<NEhX@x*P#<E{`i9
z*0=}mp)2GHyP~GKJLF2ZlCG31?aH{a0c!$Qx^e;Yusl|9<y}Qr#XWXU+*6m!J#)|b
zgA)PYx%(L89tBKwhh4O*>Z-XKt~N#l%m|q2-ne}3P5`({PP)vlxT}XDnASCL4OIr$
z*fn!4T`kwz#ke-EeZV@`(RFfNTsPOl^>Te&tV!nvxIu2H8{tN|&)qmT!A*8k-3&L|
z&2tOH1M$#QajVP=^OB#7d*VLUb_&16{dkw=aZw(RwQz*kC-&n4T7mn-0lY(29HbEP
zi9?h}9H!dh2z95q;wViM$HZ~GN8fNw?!>+LOa4xr5Wk6&;*|J9oEB%qS#jPr5EsNn
z5ic&;f#R~bBCd(6;<~sYZi?IDj<{<s@*+Ek7xH@e4t|7r?x;HkOJFgqf%&k^ixgME
zH?R~Iz;aj!D|H@SSm)J6bUs~F=hww_0bN`d)FpHwT@rqRpXsu#&S$)c><4NDt8oH+
z3oGCkv(>yZuW=E6Cj<DHwA3E&;{!6{wRj_w@o7HEXQjY8;t`G%kHu45D4vPu;syUM
zUW!+g77tK9@s8@?m()Z2Dc;j`@j*(dBuFidL`jmRqb)K}2FnyO6+MxuWf~d6w`5wG
zPG*o9?O+*hXVWF=W0Vp0y^NHZWt7Y!v&w8TyUZbT$xrAhJ(Iclip*)3*#fqVtt!*Y
zP@9kM^KB-XNtf1DWpbHEm(kU9SzTS1(=~K?T~k-kwRA;Yn~U%|@m7Y3zoefN_^Ga>
z>*&h5uCAi%xm)hGj@I=}V;Aod+*NnOG%-zK9bAF+aFrU``QnL832|@@Ho$e*2sg|#
za}PGbP1p>#U<=%at#Ajn!Clx6_uyB!4?Ez2d2a5*PIyR5;1TSC$FLioz#e!Cd*K=E
zgXgdxUcdo(2?ybo_ll15RX7B%;V`^`Bk&fE!aFzyf5LJ2ixdu`V>p<O<8b-|w_1P`
z@ZOzu7x)BU<KOru{01NR6yN1P_#V}?GvIeE+&OoVFYyyT$ANsFgZKgm^F@9HC$;2w
zehjCyf<H9CX|3T5-GZ~)z&VX@UK3o<7A|Urc<tbl4uAxm3@+>B{DAKOgM$D_2FW21
zf*=@DKuSmjsUZ!7Kw3x#=^+DTgir{BaPWa2A|TSmK_<uyQIG|)LN>?_IUpzGf=?hf
z<bk}95As6+C<uk1Fcg8JPz;Jg2~Gzkp%j$n3>?Z~PzK6EIrc+&j^eCPfwMtHs05Wc
z2Y<r3p$bHE9;gb{pgPomnotW3B6=GHGCHUYbua+xnp@_!d2c>IJrpQWL45?&&;S}j
zqky9(j3?T8&={J~Il5`dX0i26xNT=Ywcpqu?HaenzGTU1>8M*_e8z7g_=Y=g3!A^7
zseJ;?pgCuR7SIw}u@72v1jIlaXbbJ2J#>JM&<Q$27w8JzpgZ({PrdVAFX#<@ps#mU
z>IeN{02hRTFvvSM4RMRy52}P)jOj2vX26UXieYZ1`^7EAA@n<rqSH8<&fpk2ixcSz
zPNu8)6<xzAblqGxH*hN5z?JkKSJ4MtZ3V8e64zRV+brT9>%&7fCmy!B@QD2cv)kNw
z)aJowwh%tI70B5-6kzL8GFy*=Z4*jin^H>Kj8fU=l+MObdfSFF*tQg5yHcd>Mwx7P
z%4~a3IXjNZ+b^kt9ZwbQ1gdN2P(3@BTG;QXrTv~-*&nDi=AaICId!xvsFPhuo$V^>
zVpmfy8%MqE2I^xsQeV4Cb+Y$qtbIUV*oQREKB6z}V;XOt(**m1CfZjt$-btq>|2^*
z-_cb2C(W=Q=xY|Vh?CJuPED&g4Xx%7o7Zl(e{pix&aTC}v=!^oHmpzEu>t*x4QU59
zqMg{7c3~6RjZJ9}Hlw}Roc3W0+K=DUbNqo`;E(hYf1+2om|o-0^ag*Sx44Af;X_*%
zAK8MG-wvSyb|@9J!>EuQPKE6VDq=@cQTv%Am%>?>(y>eBoJ;KjTpAi?Z_sdi(<O5u
zF1btV0$n;6<kGufmw{%oqWNs;TXwX7nQL)9uEPzuHrMC6+z{JiXY7bwu>*F&PS}k*
zb2skFJ-7>Z$91>?<8TwM$Bo>F`*SQ0<i0$B`|%(=hQH$pJcY;cB>skf@FbqfU-5LF
z%+q)Z&%hV>24CSje2H)IHU4QQ+OO<nJJn9IQ>YR}Qx&R4m8mL!&x`p-{)K<wpZO<V
zLO*gGZ|04>l{fGf-o)FuIG5&<T$W3487{@;xG^{4p8P2f;lVtIXWQv^8n5IP{3~zg
z797K^xGlHjHr$%qVQ=h*eQ^Nx!TuPF19>=);*mUtNAPI=j6cV77>^e)0ng(lyoi^1
z7w_Xee1LcJe%{Lmxe{09DqNi_b2X0U8r+PVatChC?YRke#Gd#m_Q3Ag%TzQ~Okq>p
zRNyao7?0(lJPx<uW;}zZ@vJFnN|;jo4bS75{58+zStRfSzQ?~zSyS4S;WfOPm+?|w
zz~AyJUQWNz&$O6+q6VhCDQAlDVcyAycn2S$8dRMtaCxq1ikc#(s;OqGn`l$R)HJnB
zZBxh8HT6thliTDmEln#KZSo~%o%o%3U>+sqol2YhNja!8rhsfH8_61`wH}@r51Pk`
zc_{N#7BWvvjA^6Ka3+0LpVQ~{1$|M+>)-WBeM;Zbx5a$<wVWwu$=Py_oGa(aZ{&Qr
zKz=J1%0==!`Mti+={cOUbAFhk19gxN)+uyK+g_*AsdXA1qSMOTvZGF?)9Va6qYl+!
zI$Zm--|R7a%|6*v#^?w&&-^A=n&0Ir^M^TOPMWjklsRqAne*m^>gHC;{qmqZAP>po
z@`OAh56h$SnA|JZ$eMDu+@T|7oX(t>tJ7I^Hr>+nG`&o3)5r8Rv8JEtZw8owroGN?
z2Ad&rpS&aQnt0p7T%!7_Gaa#8+!-}Xby2fbS2ah?RXx-<YQ9-%R+-gijah5fiL#0L
zI#EM3GsDdYGtzt}#J>QLpHT<^004NLV_+Z}d<VjP4EtD@F)*+&F);kw$iD4g80)tG
zA6Nwce}wRm)vzvQVfg<Up^9}2ix7~%9;|K^5Y{u)v-PnqWuC_L5hTVog>@}+AJbzL
z`6}jVC~BIR`%u&&+jj=lRX{%6T>z5;PzQLNtyXDs(^eFfyd+LSmXd`Qb$Q~&X=*>2
zltM6ILXa%G;4aSAN>ExUcG7);mKlD7f6bL?XXrP6TF-s5O(01-!<1os&$~K$cfSf5
zN|3P^_@NN3XU5D{i^g{D1$5b>)i62~y}f`k#rW@nQ7}3kxo_Dv86g>-toIGm@FLeC
zQ;~=c9m*)t74*DKxs`kURddqwJO1|lz?Qbv3k0>>flZsCC8)}%8ipcCNpY7}p&Fb7
zt?~0UW<GBR0#5W|L6hwuf=2MONk;38)*~wl!_XqL9EOsNc5o1e4rP_VJ-K2Ghw@%K
zpuBWxOuBGCBr|d-rzHFm-6X&73VxCr=U>W4euuIp8+uRlL=Sf-YxyF=+6tn!6>o=u
z4DobxC%_|%gBn<ND6eSTEBB2|nwl{jr7MwQ>Bf}VKP0mQ`;;#^G_C|YIpuYp<&1s7
zH_&DjG9{{OCkv`SK4o~mTe3&Vo=`6*e=@zrEW-s45l6!B$(ReFGi6wuO%fKI9C}IF
zqKxaQiK$awr)9ilST905`qCMt1L{vrX8pjnq#c%Qho)7M$@tWb>kiE*5QU&K-d%nj
zK)NAK^JyEWX`CFI#Wiy}B?1}fz%I>rk?2K&W{@<8=2UApNOIkJxJ=Ur@`*!lsMc1{
z+DVm`4gI{<pH+!5>+J=}?5sy-?9yzRn-s0<CTI9(8b4$%p%U3*J4iTrh}P|)yll2)
zOT0G3R{ES@LGQCBL?li4--Pz%Qk_!3#4zS1vgMJn(Kk&~*J@rFiIMSl1Dcht@M#K7
zIVsU^u83g%uemwXm@!<p7bR!M%JjHwT|k-^5Zip&p+%LLESHdHmgiKGW%;H`axC9c
zNuK3-m5i~pR5H%;ZIu*QzN3-}mLDilA@hMlB@G@rRMy~;L+>hsrpvG4<9qP&UED3;
zBTE}Tvb+EvSxWfGav46dEW$^YEAWx!`|y$FDtu(Al&I-ea}><ZMZ!aUB2SkC<D<CW
zDvF#kIhdr2XyT?gr4ll(N?v3C%0MeQv^FY_xkMLBN#0!a1FRtq@WZ2-IsW*P5?8dp
zAAx83$BkgZPBhMXW9d(W|J65SHMwLiBBINP9}b`FFB&_pI&?)<&ea@R|1T<<umk#4
zl*Cvnii&9R@FJCWdcCG>V%h_&b*x29^tx#-F2H^jTV@FZg8!OA6JGhCSCK;0dbsP_
zi^rmp-a$Fs36`LU=Y4Z4c$yJeVLi>PWY32#@4y1Ksnl%Q!1Q^qj#9*XC|&j$FX~Fl
zdT|$zGhS=~N4$exeJ6%XSj@748cJAbAT9`P1^1m`M5fy=hXF_K^Ju92v0HH?M^w~K
z;J2M_xfixj^6Q)f0Zo2okONsmYHnyX6)-$PG-Q*FakXkXWgNgDqsDGf5jA`p+2esy
zurI@uj}>vcbM)(*7V4x99#lqh8{Zsw;0;R?@#p!~5QnAQP*PMlYYi;sT3AUc<^l%r
z)=1qxs@{B=eIn<!qH6iXOI=0R$~_q7W`VcIIVekoDxi9!4jX2dn@ghAD;SdWx;mBy
zcKB<wV)Os%K6an?OHE>h9I3Y*4t(@E8N>J+9KS6G2^hpN3b~1p7t`Uy*Bx^>U!lvG
z#g9+X-@(o`7v|{-@Lfe$AzGX@A9)oGe9DG-`b2R%QVZ}?)yJLz_zb{g@VV-nTGIy5
znl0w|0Nc!Au)`b%yUby*$DG>$UoeNkm&{=hFo!|N91q|ga~Rxb4uh|l!{7mP8USB2
zhru_@VGuEgLChQ%V4pb*I?Q3vWe$S_Mb}4ZKI8*!0DY^`EuimoKjE;6!}p4AjMzW$
zL9>6<h}l1B#MGY^)kf4`_@Jr3YQ)svG-B#QMK?#(M|{xK-!)?D9~v?Bv3fd@%MAZ`
za?4aWpzLz{$?%)v`~#DPO>Y1J00IC101tSaynP3JTh;lf&K(-o-g|G!l5NSBytll!
z9ow-J$1|}VXYWCF0@(pVNJvP-NWvyzmqH6Ilu;l+DU?+@pe>_>5uha2^*i@o$t!jU
z|Nnb0zu3B0md>}w`ObIFWnc^sgMsPrQw%F3%*bNoF&NTZ5DXX)xlDiwfz|2A#nMt8
zR*L|!TAb3<TqO2Kc<V=iS!@o&pYs{l_mnKIaqBz*zZF;9EoLg+L7y?%Z%eUhg%(kr
z+!oO5QtWcMJw>Mv*yP0B=r_ZH0(4;bW^A25&k^a$3fE?N>^4Q`QhS=$?hab5i2{*8
zA9d;i<ktc^eTq#kx20gaF1AH*J%hnOM$SOoUxm1{843mipnl*K02T_Y7KalxqXOUs
zz>GF^GevBfL-;<bf5~EJXGcHT!A&u}g8T|_5ED3WX-i9Mvl5c%U(FieC*D-r;DF@V
z#A)nPYV73kV++X9(^5m>2|$2VfXZcxV1Q(gavaDEOJ{2H%-U+*B*<W<M(#37wHlFJ
zz`-Txcua<$ROl-*vljTq5W3jLHQK!@wE<&dA_hhKLktG<Ul2cxp@jH}nJf+vn^|W1
zCx#XaZMHgz50D=4M->r4Fiq4<_)iK_%`c-R=y^3_LLQ!39Q_P=oalXlXg>!AXlUmc
z43tp~d3z%qKY<}-xEKsOBn|3;7obu!7zmLn5soPW%K#{SFiVj+k-mIm@6roto6?@y
zas9jns@3-{NHv!XRjylIvFD|Y1p3g+P}G^V9Yi%IBN{erX>WWnsd;T>?vl<bwQ=|S
z-g~bpCE3pajQWwUa0GvhkwU@7f&qn*V!j`uLEah=C5yf%byF@gAjthWZN*78oq#XG
z+dGJpJ6_*k8S34A@ALC(w+zg%v?XX|3Rg~7ZU4jDDueCoUy&Nj25ADmWN6u(yZ(9I
zH6J~FXfR!$TJ9U-No-!*jN>2e?mMw4i^7FCM&VMyVBmgqI{3jcG=(6>6R0HN5PXwn
znG-2k^~A=)D<D-qj)cZP@03>M*b8Tc9r;ERM<LK?jE3wyK6l>9_cu+4Zk(t&i}@+C
zqC`iIN5SP*D}_3lMwI~dhLkH_4|&XEs3B=Ggo#1HnISoNsvm*kC3P6DUw)4G_%0|e
zK<xVPmPX?H<o0bd{=4bN1rKeEps9}#Z@#+*Kh<&SpZmIwFUr33L({E)BXttm3Im@5
z#}+ZnagCwIggS`=N?T}f)^JdYEMM@@hGIBw)5SDUE+HNdfdjifJle4QHR9vb1X6dW
z^p4tdaNxZp2%`KTQHZ?*AznuTNA?~>wlgR_A@#HZ!sL=xN&<pEQZoyD9t1C`iEt`X
zrWt<ZA+%D1y+ic9K(w8s^c#K;+Bf+<``Gu!8?kZB(kBlWoM5?{n1x5zjt4T%T-#&T
z9ETgjmoo~N8a@oZ&=JaV;!<psvUAZh)HmX`kV@MEAZ>fH6*&Fqm=cD<QiymM4T9g6
zEhO&P{_fGHP|u$GURv0?fB7t1lPuGq&y2KY4L!1@EUoj}#)kD7<`Zf)g1iy^Rb5r*
zy`S%1`~H(R4Wt`GWv(F|UnaF1BrU)AXlMVOOLL5RAl1r7`Hl~c@?C0<{osQS5f^Kt
zzo>zf0K6LMtRcM@vM#zEKNa1JETi<K0e<&y@VhAGyC4(n*4Woc&7g-0V!6>1TBH-)
zw|i53#7);qt~CMNgmjU=cVoPF-@SB!92?^u1_(irKQY`8gc_gW22wL<ATFH&IO$lx
z$bX5`)ZbtPF;6XTD})Z5Qwq5h4s&Ko*<NgeV}CI670QESlhH_kQpQgPQwl^_YDSI-
zYp%I(L8vPzMO7MQj^AIK>*Xv5DEMymGuzAfg2Qs1z*M@V9({a_$MyJWh6&z~f(5xC
z3qVAn$5m2F-~@i)rPvQ1O}D1V!0qZR=SKuXk*L!9#9;9!N|RE^B;MxxyfrlhaRy*$
zkz54`vod;z&d%kzt<iQCU&=$YT19j-ghataS3??bXu+f<q3CM$@Rtt(^zb|H;HNH;
zDmd~Z{LHQJGh+HPtZ*m~vKh6rm@FJcZ-t*P{FMSV-r5Y%Qc$PBO~mV=ciutdv(8%i
zb;wiEXYYH!A-Ihwjrk+=Zu}gB591621Qb+6A;Xsz(BO9{c`S8`N8~m(_1+Le1wSWC
z;Ak_tYxP3VdWlUVM&Zu9AL8XCb<zqGnJ^$nf^s042H&9!1}K!|UvkkP^ZtiEUXF2D
zgistb*bKe|;%$JUOFwz&cVeYP!~tFjkFOPh?|D+0N=(WaeL$0K8h%j+|Dox|O!Y9-
zZj>YD5C1+btP5$-Oum?dPP7jth0A0VAOfVR>@YaR(bo|SfiSOwFa>NRh~VfF5|&(r
zexUZrhU-ZXBEhiT5LTi`=&^~Tct3uU%-!t5@tQ{2e;&9DR1kXxU<u(lJ7)!|y-u!P
z%o2#@g5nw;9(^6)=)#ZBUQ1DogaC#u__zS*n-BD7N@e{zF@|BYy1eMihAhqSO8g{6
zt<RLFL$^?Q2<4mZhrUV4@RIRFfQ@%fWK0<s9ufThwC+9kzr1MI2S*#ydUoIc^5R_|
z+|odNpE7$#)6m%sk>pw1XTY!kW6bJzpFA{}(S6@%JISm0@apsZ-6xjjw%-2n?(P#y
za#~OPgM^PV^dr~fALIXoen?4XuXY0n(y2-kv<(`zLP>{XjN}ugTT(xuQB)|yxo8$Z
zfNM?$30SG<Ok7Y%qGHse*G4L6blZ*=G@0w|bN^h|L}T4^SEN7)eSm!Xutp0}*;BM4
zWs}uGB3H9L4P8IuqpdUn9_OIL1jH?0?4ijBBsYlFLKfs(<H*;n|3JP;8G*4_8Ryk#
zBnyvs_7GV!3pvz#$MQUP?efaLJ66Eg6=-n)yr3e|gGfX({Fc1+A3N4PcU^hP%uTmG
z(Rba81!^=={hL{*Ki%8;i=}z9Pk*+z^Z3$SOhspW_qTO--u16**L?8Q;i1fBy)T@j
zWlF}VT~v;sC2evvj)PdnN4XqiR`ud?t1h!8`;h`5Sa)`5xcr9qZ+IjRx*6nUf8)|f
zN<)Sz`UUbq*5LIm%b(w0PcW#|E;jxUHNJlO@gb?XaR`qV0MVMW%SZ^<KW3sFnGwA1
zZ(J5hsY^FT&m-?;4P4*6;<^2G#E<x?VM;HFk14&BQc*Lee{miI=6EfoTn;sB0PS%N
zjB6yqn>}};wx-P5To24|`Aap(s+cD3iD_n(shXg%JD0ur=uIJFh1xPk_hKriw#DhD
zGU~BJnsn<<H0IQif|?~2wiRm*XMb_c!%IU+t()qVb^$;>EmFM2v)cPgNLGLAs~ybg
z7$oG#!)bH2)ixen-KG|}bkR>z!JjnB=<jKsgOMnVO_%UT83kl)8lSf^<CD3V3&E&d
z)z3_e&GnS%{Q|8_=E<x}4>e`zld8J=x~q~Zu6u4x-rAvAmRVejSOg<txYW0FlfSB~
zx2wt@+5GsjtOXsldhB+Y)Z{do(yJ2vIewcfwQ7FV;8S}WwSf}vdVxfyx9Vk^mIU$>
z&GwY)#SOFX+ghti%&}AW62~Zf+or^Kx&%AyM}HO>`K#`oKUI>Qk=D~%rTf{m^_<-`
zlN-1!@7}^PCFk0%L@;0sLfyCx3X4VMcu@VrW^4zs;xIuRB9>_|J@&?>B<zhpQT~4o
z{4C548NzWnWSIJ4p$SPqCm}v=A&6$;Z(?BbQ{UENZxGuKM)Qzo4}$f7`V$;uIrQ5l
za11r=ePDWml7YleT`}QoYD>wA){KNffXx^6-|_C|&A(e85cLCWFhN-`@Ab5<>l)F%
z;iH@0J3e#f@%J{t>tl^OyVB^`x16|>8aqhhCqP-jsS_<f8iPgWM|jD6LH(wC=3-N%
zUXh};kFQ7?g<neJ22K6wqGxaJmrqW~Lh};w*|)xRO&l#6T?)5O7?(Fd+$0PJ2UyAM
zOeuwSM`Z*ch;N9deNG&H!{Wq$%ayRiE;%@s5HykT7(Zp!46pO_ghD+Ybi0C-*<uER
z^=~*<A~ja5MgT7+4w?nV-=aa*zoTbAzXN3=95I`i_vsgZu(+{}D30(o0?^M*G38hs
z>;pIl<tn(K1(T?aA}aOxOy*OQ`GA5#WT&aZ<*G2Ds}y$f&RFJjmcl!pT$DiD`+bnk
zM2MS~!i_9eFj*w)%^aF$5}8oYjOK&+pKA2%i<|^vm)NZ&qKKb(@^g)f{UOd{fmD?h
z2vO1SS2{6LBo;<LRLdZyw+SVLAVJ0jzqe65ofCs4qvrx(GX2Q=B}BA@xb|Nb2j@w?
zge9^oKv>{6y@RAiUqJ%sa+8+e*&`-%kpo;%Qe%$14|V)dOvg#ClEIK1kF<;3sE|AS
zH{`fxn4N%#5>Rt=gBtx1pCL8~FFkRt7QSE==b*o}j(m;2iHYHS)CETwO$R7-LnlU7
zGKWe-UKgl&jr-<h6=%6?OS2UE;(Plt`zpQu8LMx)zcaGCaNX7<GujD2)#iKW4E1L8
z?5HO08(8me-#Kg614lN^3d%IY`Xnpm>utno^p6zmg3Dk_r?Cf+HYwht$Qu(ex_%1V
zXsXvp*q32C5zXk^lT9Rhv7h7CZkvofl~ZBRH|)n`FeleAI;go!9CHAvVCACF)yC3J
z>Nn|Q^FSz8C4`w5HS1B16%tva<SLX%{lKn9b5<y^E-#S-K1*%Lbtf#|S7*oohP1x<
zD@!_W^I2ND=cOFHDRa+f590j7icn=%ie6>pnA?B7VBi{E?&*R2h4p@UuzBlatB1OZ
znsZb1JS7Lbiks6Su8a(0VP6UOy`!`@mt#r{>3x~enQ1ivRnOc|Rf=-s>Y}X!#khO0
zS8vg)CDrxy4drEZ?y}C1y`m&1NsqGkZnJu<JgQdWg8Fj-e+|meGd{B<$z+Wyla8g8
zL6Bx?^%f3QdrI=$O*KU-ciGwA{Qe4;tzg!ojm0(VJ#4Pcwd0X*zOow{ww-Jo8VGl7
zs{*xsE0a17bhX@dXv3`3ypY9ehCrcRc_I8|P=}HrblN$`6=Oo_NfE0&Dbc*(?9PF_
znR~laZN;6d_twtcAFgGq1Y)f{oS4yHm(<(r$n;qZS`lB#c`UukFU?teysPo}p5;wR
zWn~>4p<E@;U3#Kx$vTlzs}%7QNE~1sCUGd66o(aK<u3FJ(RfsoZPVeA>uYFg3r-b;
zvq~3Mxkd>=t(W6h6(~tkVV4)Ww)4w|_RokD#)$EfHONe7bio^1bmSC?)>-l@UP4hQ
zr{S&<jENu%P!k9$u?VtoQRRc}1@j8EyqfQ;`ANBshN?nk!4G$^G>)JtP?M%L=)Bfx
z<&Zl`W(u__Jb0|HbyH`lfrU18cBJ-PKRdb%+1uOdtz8_6{u3{d+Vx^@d1qSMe80sv
zh1jYliq=0bRCrBSw%KLI7^A#61bH!kqF!YJ<rrDYEI5Z8D>^XA<Wx$<5h^>q3Wi;-
zj!Yg-5_hz(dBdDi1A^i6)JnYwh{X>52gCz5k5tQzzOA)!U*M{BmW&H`GS$wIC0L!N
z)$3jMt5sx>G&f9=YjT<qboh)w3bN!1VrwGIidBR_ss`JY0>Xo*%H3ue$;8lLk|B8-
z-5>dixr}LGEFbR!M=Q||XDaE-;YA)6qKHQoO30<3)E<&Ielin)Y!-qb%ZexAOcdCy
za=lW_=JN1R`u5@l8!><~nV}A`66GC6D^#ejF<iK?K1HCm3iX1kRwuDhC`arSi*K6M
zxwFa4HVn(6V3#{t%S9ZCTppLpUG4L)oX?WlbCSVB8g-AB`Rm9)sV%9lf620dz$p1?
z^+J%`jVtF?C1%WClmGRD4BBT<eA`Xw*Yw^2Ovw%Of5~d7cY#?Q{W+2;TuT1hZPT(P
z_)|i_%P1ifEvOIh)fUkegz#8;g<l4eF7rzV9B&_=ifKgql_bJ{{HG)WW0ia4Yb=F|
zRf(778&m-b<`xq)P>TFJ7OP70Tx6^Q{ZGL3hGTD<)ssratitxi8;c{0Jw>Q=e7Hg%
zz8FZd?hnt*wZN#=-Ex|YT7g7FL*)(-519Lt^*jS3b7DnLdR1uQ7A2o7_=#P{oL-{l
zYH^%U5{wpKCBih{Zld@WzMOB?sW2p${_;RD9ApKNPb|%z@#y_(<DMz-D_-c)tV^-7
z5?<GQqrL{YXwj9gJ{Cg`X}EObc;xQbzp6PY+4H8$m-p(c5I-l(0Y1iWVn`YJv6<Rf
zv7a(5WHe<&Xj5{soQ_Z)a5()S4}L-!Rw`iX|3+|jb*3o65-d&1>npMA0wv&hMN{Se
zH@3IjFpyQg`AmPu{$xDA@SKm!6|5+3atXw?j(f`<cd=3BX-~)DMfRegKDBLaN!ILq
zGsc?n*^zsQFQ4ttTyU&w{%;O6RaGvyGiQ6P#KNhvsQD?@Dsf@z(i*XyPx6?|WA<Yr
zhJfO6JcaZlKsKd!j8#LByg+j#C|rMYgO;!L62E>mu{h|qT4XTS%S)R(xH8gqLw|;~
zuyf7zjdg44UE#eKo<e)w74ve$?xe6mXi|%b+;7AxgG$Uxs3J4KoJF^G)gRllvN_pb
z-sX)gZ7Yz{br~<r)oJ|dC*pUdx$6X6<#9@s6R`$bM@40|2TYN+7Zo<`>`a@8|2PsS
zkrHil<R+ODE}Q7~C1M2&kIbG#7C%lm9q-FWI4Hn>L$1mJlr}|5If7x*?b2RUKsjIV
zOjl5t8S2?ut2AJ|T^w%df_)A7AqDQ&yNZHl7W<z{w0!t)PbH^e`2t+8>#b_t)14~a
zq~s`4YBP$@(EKbPVKHyUKVjrBYDTlI$@SMbMC;`U8IUZ1PRzD3)0BzyZSFdIusP4g
zO!!3hmmUi99aUN*#@myS5LtdlfByPKT@K{P#GD)rU!HC!vxT<8IhnO*hX49hatJFB
zFtwWg+J>8!7PC04OP2B81kzVF!eW08>1$;STs3{>D>2?2qgxrAL^pH!)O5Q@y7QgP
zg!77j(sW--9PJ8-;KlYD4aopDH!`@pz96K;{W@oUvWdk33u&h0te8K?A-;O1G~7M>
z0m+n-;SWi<7YT5kwlgOtceXgOA|uj3af;0XlUPOT9zFy5*Bo*U>*sJo5r2b)nZHr|
zyE`b#fO<)s=prwAchFR_Myd4aV^j`sxurw<8qAqG@=bSPikXG}c+c?rB<>~jON1n$
zD|0*vh3(`WhqGD9R;1Kr#O;Q~To2`(HQk)yr?eQeOgS^S%~@@Q;&U-M)2eN!15BCw
zr?3UnD=LXIshe*?oSUy2=d09A=IZHavHdSq@k)gL9OaA44AVe;vr%<a>r~W@X%=_|
zsagNcJmS8txDX5|cQ3}R-uBcwXNz8i`%P^d>J!=MkHakJ_r|f@-0_PQg`9+SN|w2(
zuXtpH)N?Euf1Y7sR8o1+J>U@rgMJ?e<KBM&ydHlaBgVb|FnEr7CEx!ed|%3NlKmzi
zR-BJd%kW9}KS3jth2AE!_%$k@Stc|4R2siU1_CmRPoqh+NTrrUjmBq@4gVNpL${w6
z8`MSaenCQ7<C2KlFBKssd1{D@^VMFnRBHCB$?uS3Ou8rDq_{*yhdhc)OX@eb!MV*A
z3BPexjOM?OqxmtC=Ggn+j(h(J@G>n+;xr}8Tm}Q5yh1;{RD~o@Mx!>mBOY*Ts`IWw
z(vTCzv1t9P(Ix&XiC;I&8Vk&{&x3fA^!$_#GRIW#ioB00;54j_`>KVIS7fzu)M&?Z
zWE6`l*gM1qEFzim^g5}>?GQk=7~5&KRINYXPu$x*YT#G&!sw3_gAkmBkFf}?9e$7G
zVA-@zIHn8C9Te}HXgk6Z;yS`=82A1In0fU5_Hpk&OukRs5vwg`M}0rjj;=mBF<DF(
zX$hnD<(tyJUZmM~Pj?a-#I_T+{8SKI3>BbhNkrwB3ZVj|g%YmL_-cPL%uQ6A82?ho
z@$WHAG5UVtxc8sH)Nz}n^sIe4J)6F%=6|Pt)+uu6n(FlbrBY7O%ySibO4~T(!}C;L
z^FP%c%<{k13(7J4T(Q$~JdCNJ98>8vy3rOAdMWTq-W5}AWCv%gsdc66RJhh+PBKaH
zLE=nI3biEaQ#n@j$4eg<t(+O;By5*)h31e8T}t!0l)`tCM~&flGjkEdv3?p|n+EOw
znTAzwWCxnp)H*YCDyGI_NivdDJ@7x*txNwPsZHQ)m+=H7wab25tKxqA6wKcWrktx$
zQ==<ZWyhv+&rX+FBK=n^yWZidvB$I1iBT_}XAa*#T~&2-9u=pBeF@SsYn=S98vm<E
zPf2Mm95>SgKS7wYHa1%%Q&lQM9iOTi(DA8iT(I9aTrJT*ovOz3)A{&s8P+M~tH_Eo
zfjM4=+bc;K?qVhsF8;;b8HcKOK63t;x7pRZhKIi^pC}_AM7M}{u>xn}oYgCRXGoZ(
zP^W$kVdjs@VG^7x^BSdj{UTU66$0NXKJ5w8?(0|=eNjOg$+c{53FKvdNP!CFT0xAP
z$rI2^p2)Id{y3I#`Ak4Djh;g$<G*2)llV(X%|WkNC%z&XuYs+NES+q->%X!e)2A)@
zW)j!aroXM4BxW~R3EA5K6$23{v;ucwkepQlwM;=geGic}P4)K8@wQ$yN)|%aN@6jD
zbsh9?bAKjXSD-H*V@B!4OyJrkmQKFS^`qjyae563NG~5x8&B_UIy2rv+(ut)rwHFQ
zg%mlUpGOsja?|N|U4;S2j_-jEvg66SiJWQJ@p??kQ`kpb*pUwMUb30IkI%!=k!Oh`
zD1k{BLWYsiO3nqS0*TW>RcfWA@2ATp@D8w;vGoRwtdPn_>x!sC2@{dA^>wOP3Kpl&
zDzu@<%DV;wT~GUplT@Iz$XD!FmLMy+EYARr%k&n#%;K_u;*C!%?>Ib|nccf(&z@|K
z$<bAuIZ&6BzVP<>8S}hP>jK42ftDv@+OjR#xyW%(@r=aEI%h$Xueu2g*CmUzGM~y{
zo*T}{bGRdA4WX)?^Rk^Kb23W$OFa@S!C=iS(dZmCD{3nDFDce&sX7{yxCQ+X(k-Ga
zcXIKZCT*<olU#$J)GinbB5#;ydh&ZBw){+YV`ZKKI9Bp%w?4isZ*WGDDwk_iD(uNc
zsX3hy4^tkwr!Tjs)M3eK9$Z^kv&tir`cZ+$QMc(tZQo#U&h`fI;&64>iDmgRTava>
zELQ1M&Z73<U2~Tv&Dq=0bjS5;TLbyw%tXrfyP)9y3UymKO&uZ#c1&4Mc;tsE%K@*E
z{74|jWd4gGA=l%jqzQzBN~+<2ZoQFC3FsovB7FGAFQ0o<VC2?fOccgw?=+y9dN%vL
z_Y#;TC=<nSbolG3F(K)Lb360{cw?D{K5Lj-A)pKuY^gj$!qf07zOUf<bDa%UMT(ps
zcJ7z&RsEp4$j9B5GiYiT4eJJEVeibux}_0<jm<yu^2@D83rTwb!ubgQL#$^W0+>9b
z0VmddyAA}jiRlJ?$fMSH!g@oxSA!v!2n+#UQ@Tg3_N1FknO^vsN$nwegE&o%sV93R
zr|pIhjy5R9!2!mU-SJrv0V4@>91c_D*Ca;xA0Q6q@i>t@C22f?A!Oe^MIlKMjX&M%
zTLAsQ=MY~hBZKUv1mmbD(ZhoiGs3tzgdqt`1+_C`G9f{Ic#KtAZ#oz{zn+`gdDEb^
zP^)5^?5Sl*8a5|qdnA7@)RyY=)qG!Ju;2Gt?Bj;m*RdPMv6dq1z_6@&Z*Pd3uu;yI
z`fIaGL!s238)hTBqbvGa3bV;COr{?hsUQx6w<-FZQ)K0r3H%qE*}>*DHRJQ}&A>f{
z0=z#V@5bzxYXhKQ{{k{vIu+!pAWbnYDMJT?fia<7ke$6(%=EzPSI*WR$6uR1<$8^>
zLC7Txhd3K1!lE}wOayi$MI$$efk^Dsy-z$WaVW%UF7YR=J>f;JMrY3ab|Z!mYxpu6
zn!?H#xRhhyX#E4^$|^DdVUs;+a+#1En3a~A2cUi-1C||a-`3u2xW4*A5&DmPZhl5o
zgY3z<!6L{(Hbvi~*O}n2uc@_B@#K|Ja){SrI~`o6?B3`nk6d_k!kXsA6#TV|fw*tQ
z{|w^-94{z^j$Y0h-*7e255=!s>o+*Pc;xohj)k1E2j>-Z=PG#B7pnR8bVpf1Se}2O
zhG)rem6Mkk>hLTXn73iohE=29uf<ihFcSTUyz<m8DT)4@#KR4Z@^1i7K(N0M56yHw
z9-;;o)cm@Sww@oV`TiVtb6t@<<A-(EIK8NU*^)5;NiAzC350}A(dZ^_rp8VhH#Td0
z$Wu^T9VS9!jX}%fa5Fl0b*P;dt6YxDjRJ$du$0Rwnt(zg7{%ek%9iWrWgr-vxk9gG
z&FHE{vL@k#FcL?;M*m3VA=c3yk?|&&NxlfYmfKt6Xll;wgTM1<92m@QzVW$5Gp-*X
zUmq-8b-d-86(y^Vw_da2*BJ{>%-jCYyE@6&ZJ*rTMdv(UkDSAJSOCU68M$g|SB!3J
zh=Ej&YpbA?C>(Fzq4zX^h0gTcfhsSCHM&FO1sfS~xFGa}8S{Jz`g%wEPKTRBYIz%<
zuTU8kYoF8>tv=bKN|f!_7Opzgo8(1O(ss=tQPQaSF4L2tUCkt(sS=4=#3KE%XXI;q
z81h5R&{6(4<QTu%16Y_7TLmYiUZbmKWZU~_Z{XYP%9i5!l`fGZC$Xrn#0B2#-lJN5
zORG5_Fv;$~$edsJ%3oU3xUo60{m6?$J$pU*4=pWTRO1cr`p;w7{EnjLoD@A@$wAsz
z?JU{!$O2bIx+QPv39#^{J)*=wSm(%$wvbD~o!ztha^_xFd3xmj)~3qJCP(p{jKU=|
z3#8lD$GZPWe>_5*MZcr+ub=Gyi)(wx(&{N3s_~T4%WCS1Uk!})0hBEA1iv~3HGj1I
zFP&`v%UHB^Z0RlFC3^4%QsH9oude?PjrAXn!FNsQKaBTDxUrz;$X~u4*MGRR3e@$k
zn1H~erT|M%_Rm82bPucND*9((pdH_?T2q>(NGd!rCv$GREwyA<(Ww(kqZmiVnp4x^
zJcGEgV`zLA>c!W@T9b(ObI3n2K7<c_0IFm;m}6eWIkR(a(6{#SaQGY2v!T4I1vy;B
z7s10H5gD|>f{`yrzCxu?ep%ys7nx8!u}NDV;(J4wapgqb;>tu4TT+gvwkfM^URzey
z!lPZuvuX>KIb4H6Zt)ca-Fb-$OGa5`X@(`W_r^Khhl6N=h%ZyiO4Hl{hcjz-dBu*t
zEUCq>?GQ^eMvcM|&{=$Dwayl<%_!d7lU<Zb^*Mh@9HVe-U@)dZhIJY0SLmp6dZ$M)
zZxT_-ZJX++>buOW+2D9(I;7hs5?QpitB@PKe8&T~z(@C?LmA)~m<GoBpDTk&Jz<FK
z@=0+vwYiOK$3b&r>Inn?&ljFPq>%t?r0?3s*&E8$Y{U2RA5!5=*=~UoWl5|s5LvJR
zLs`sFyF`g`57y~%XKkotakU#s3j9pLvzS>MR?V+XN}s)^;QT#A(=@Z?Uurb7)Xx_U
zlsQscmaJKuO6v;6%fnOga$2RZF#rFs*;dq*qn$#X!U&H1|73s0{I(KV$z>|J0sOy^
z38Qd?gI$CFnp`E3(wvOd9;Q=pjC7gtjcBa#m7M=-dw1Q}J$HAD!<$!`=XGV5X1j`)
z9<1}!m*=UAxF&_d<_@{^sSZVAQFT$Gzof3jFLmYlvb)QZIrHeE%`9^H5dFUG<c7+e
z_65m>vx`&wDQ1JulT_HAKj%PCfMi0uP@*wuRNhRpJHzkIsLm{!9ZAnB4eHXIs^TR#
z)C@mBHTZ~_T1_{DrV&LUjRtbR?-f?l`{~}HHWG(h61YVJyBn<;dL^EycjfvFEYH}e
zwXM6mQ@IIil`KWDo@^6j<c@rWynttuId*tV;gE4vu_;t@BUFiuE>b0qHBdFK|H^+1
zPf(q-FjSq5Z_wg<MWgA~0u@=bJ3|yqmNDJC1o1#Cs2u&W?!~J{3w4g}S<dc>{_QG}
zoVckOxhj+aLk;=%8su9z#<x5WYfqerCyV@<3fCPFJ6VrZi}DXjCLt;LPIf^uEjMq|
zse5i5huw{b4_?kuQg>MRTBti^llp&t!qdbszpND~@~!-{Zn|PmEKiRkM^`h$JBk-<
zL`iPXk|`11kw%ITuseZUvS43>DN9E-ptuWz78d$_yzo4Iu~My`qX8PSqFLR#w>vdq
zv^5A}6cVSgvv8hXLG6x#L|tLg^XljXlL`~qfDFu&%iTtqUL#frIk*^Ao96^)wANKt
z_7hE4ML1G2TBV@M0U?s=hq*>aqDo`JnYgG`p|8luUf@HkuZ9cYPnVZ0pnUU3zQX#U
z{`naUGez$d#p}z(ihllOKQV(YM~`>&WH~xU2g*C##MH^RyO1MShae-45AK5aG)(13
zuCB;F#h*4zMhdK_i|XIWznid#FsZ1%Z%Pv1xSY8^RXV@?FSKp3{sL`lA(bCbSfss5
zQ@d(AjJ@D5O|T`hC6x8G{L{-Va-6%M6qDw}PaEqsvDZCV(FCiD{ItPdl@jY{O`&X<
zg+Uu$$k+m-n(}{Sz(1FJ=p-v==5nSir1tg`^Zsvf61lcvyc<w^!T?Ow^l$|eyL!e>
z?<1JMgf`i91s^fJ?M=^5X3m%Mi2msp@iK`0SLb4&H8b@x=xTQS-{AwKxnSgL^hXS#
zPFaGJ<M__bcrBWw7X5MkHLc8=U-pbEkGUFa3Ke-|(R;?qg+pT{<HUw#rHGImmpDz0
z8<@6Y@0bc!5JlUk(6t$jiBlr*!}`fOlC#7w$({nGO9btAVYY-}5HIn>ebu2bS*XA;
zf_aV@`GdxY&1WZ|2G@5SyOOT#Yh=+60-ed7-H1)5A$5hp!2f|^3?IF3*@-%+gV&hU
z(Nv?`ilq~`Rg*CAe-N#|F|xXu(C@LomDnDC;3>5U%SJIoXcm9OwkZcRCS(Sai*dEW
z7g#n5d?HfsaLSyr=-EUX6JLYJ)8IoKG7Y?Y&)4X2H~A>UsJZMJ1_S*B(x@BVQ%#~q
zt?;0+P1SiIlm(D$0PC-6J^MJ$Wqr&ys@?@R|L3o21$z%uz<E?*`YYmzzO9vj0iHa8
z_^nunc)*_pV&WW6#UCcy0vOrES&R+g$VoVK?nw==h|`L(qiq6*?(vU_=sB$x-;jWF
zmAq(zLxv$2|E^Jk<LJX$Y4nR=P!rT3GMO6U{x67o8yu6YU9%=`s7BlPh)O^(!0(h%
z1s^EH2u_qj{>;^+h@%^RJx`o0Lv}t5edb!U0J#Z&g282^jqQk|s_wDcFS!&qen&7p
z$)QfxcsEq)l^C^_kb(FvYin7cCRNEys#7Z1ELEZ}U?^=cH|!Zg0VdQbjBc|*DwQ*_
z2qIKlWE#0v4+esMM`24cu}L7e%M7xFiio2s&x2~^4y{Ni7D{=fPv3^-AfMuoGo;i`
zhe^&>N}pO6TPFS}rzc`hZQoEqmT6OGZxmJ*rX+ha%=`fUxTCZ;r)kHWprf=euW@@v
zkPxpL%quo$H3ssFs5!z)v;uh=KN&lB&`B*m3IR@$Z>3lKg5V1UiXwOdGaY1amCAAc
z88cHS*$ym6u+*Jgl|Z28UiX<)P*=y7A?<L?CUhU-#UEsN7@^TK7=`o(r13mOMt4~|
zm7@Z<F|abvSCS}U0^q1pDquoyx4Tq%C7PlYvjD&~8kI?-k&5NaKR5$Au1u=5%kfzr
zw<*2aCnR3v$yFkin4O<(EJ}AET&CB?6>ufI-ynR6N+1zRWE9Q)5Wo4%eGCEBSv{^6
z$z;*x_zAUWX%LusMzO@I6YJCpn_OTh@#WV$i)IGBekqfw5H9XGg}KE%nZGhU#UocN
z)tHv`m9B0{v1wEi9`aw>r_6^iL-_sVI>Y#S$GG@_jxQ-A2wTYKi6v@TFw<dGYUNTP
zM~J%hnc<MiU7BWelnoYVH=1x0hYLM;YkO)IU(9E-a||{q%b499Dp=Z-;&MS+Nw_;H
zTCEf7p3s{?h)Ho@OM{hyNB9Pj6q0JtDa_)pXZIVKsJS|rU*{-l3tD|*6D||+q`t~<
z&?A*1Em5}4Y4$AdD}&_9!~mn`or4f&38a-xoufoq4wHpXAdo&~F<vcKf=3XPuTfZ%
zc|feo&P-SP>#{BGin+P%gG`=;OZ<TN+)9gHBb2eQzX(lgk;i{QZ<9e%XJ+LsY)oFz
zWp>F~83CS<FQWOq9z6uUVeTZ)jF86iN#<yWkTo{x{{z#WRhKL=hy_fi$-zVhggwDi
zL6t;?unY0u_$$)%7(T;fPLZr4=7L+9m{by>)^3r1AoHMpa~Mi$tsp=t581zw>PMjc
z(EOFMNJ~=4;>t9kQb-3k`k(}Qp#zlVDK+`Z7Of|w<q6IHG~Ykih*)X_w%mFjN5bK|
zbIWtx_L9E*P;F4<wribklg*abn3U_so-J2sE96?@WdRQZNP<!z(O404o<M}LaUPyn
znxX}O!xOL(Op%=Es>-s-t$vjwC{(~ny;PR#@|6TMbX;HzpofszP+w%1t%K2>4po{Q
zmowAG$K9vgm_luJ_)mA7!Z*k@hERo<cnH*3?IvOusr96t9Rf?32O-Dg^eT9G!m_Ud
zROFn@epPC8DI`V(Ut(~|9Rd7WLI}QoMB#!$QJEx4_?k+tA4HMAgT-(xG2Lx8ZdDg5
z@@3;@<C^5kREbF}MtEYA63=?&GAK$%Bxu0!b}mot0-sI-2uR$KV~`Kz+Aq1_YXq_8
z3@@A{!xV&Cv7-(I(a6nw5kB*fREH)ZB7t598Ir0HNLa0Go%AsFrAfq6h%a)*4+~fy
zBmX7Z+1!0X9>r^tKcpXu_Xy0NeX4`GFUpSl3@8h90kordUk1I>q@V;s?S~jA7^px2
zeV*SN;2PU}Emd64oi0vTWy7GDaD~BONIIF{uSfAgy(7utcMf!tqAIgnX^Clx?TFAo
z^-7a;uZA#D?0H5VdT7+1Nj#>BMWpkj-3r(jY{)eEY6f$I4O#GYeuC1W6Ba9-IuU-q
zIlDQnY+1b*zJ|({)_aLgnXfdpPv$EN_R)T$3Hcfsgmxt$SKcT3W#`x$8|9d(r4uDE
zLvJOq>BL%v&L+Xl)oG?Qhum36xhmD^8T~>jg1JOInXfWE;E~JbSiFXe`amh=t$vF<
zA`nn;=R>$d5H63RkLn~GbCKZ*4l*1HQZCXLGAPtG$scE&(&%A0pxk3(ij2iKk`A)H
zH_fY%fx&3ipEYLMI~rADT}-CnGYCr&lPNvTb;QI;5f#?w*-TO`#^<sP9IZ{@JYCSE
z7NU5QCq=xG$H5F5;u%CJR#G}r1!aRl*@UKFlL*BQ(~A{s>29%i*g`H>rqGHtN}V_0
z)fux}GgJY;gP$bQ38ZqZLQlW13pb{RT9mjafy3c)WKxktBsC=2z2zZ8f><fYSMm5f
zjZiERiA_Pb3q~flo<7$J-3LBmW>NhNRKv<>ULPyJ!`zZA<biyI!{>7ncr3T2%2{5>
zHd*;Xgk6)AU}%vn6)eNjg>tsAL8)ji1DIG`Bw3?9xC)NH3er6U^Oo3|gh`k8#~?!m
z{W>;kEJ}8b`YVmpCQianM!(i+byh>D+zV=nvu1}_0LU@tLET>h$COZGqEuL>l5*10
zgUFJLhga_wD-kV<BMAy#9j+CULm@(;;7{gUgE80q78!j2%q<V0Tj4k``bp!1#Jol9
zj=rJrj%8eMQm}TXSOs_hLBz^(mPS-0Rv`)q%3Of!gj?U+s=y2g25>&Bm8ac|pA^ep
z)~9KL8Lx;XQpwBupl0Azu>=zKwb&|=*d*t5v=2#xH0_1Bkf+~CDHjG~AYJ#SP>ZGc
z;H`}(#4<dK$th(i#Rq@4?u1x~=inSXTcAFSJwW_h!o5k%U&WOG(Flio14o)LK<i&0
zw4D`jd__FJ4`0T&6~v<gmGYW(J8pz2g9F21YQvtv)R4?urINk_K9q1@7F)y;oA?Eu
znAYh-h!Tz&&+pM7o!?8XVMNJ6#DYJ*BqG*u5TWF)-@;KM603mtaZ?G`ECIZY@cUn4
z`;hhcW7N5{BreqS20Ul8aOZ8-7zMw_AJb~S70Lh(Kl=)kk37waP-nlAE%{Wd4FFF{
zv@#Lr?mM-55pjtXK{z4-@ij{f$m2`FI&2@>NRJ<*8Ip-M5+hQJ=DOozmmPnMxFi#P
zOSL}2&mUy+(Kl%ru{jXTNYFQl$K+<sogZ;!O09$yA^t951EE07Mku~Mh8;jt=(D}z
zk%!U~IwM6>4)fK#8k~j0_&$%X6CD5MZR`M7(2w(2EFRv^=K%#R{|_PTc`Osvr4t{A
zIXcX|lLDtW4`rgvgch|+a6I}Nlh4%-GP%qI{-Bl%q|_L2Xta(#BX!g+6mjvQb>IBy
z;adeNW)p|a<lzh0S^<8F_zWl#Sc?*bEIz)7$%SKl2l3be@tE4S&>hh~{pO^=!H=L!
z1Y_YHVz+>0BK`xUY{d$ki^KoR6{I-9CTt~g27jHwpR}TZ>{bexnt)gAHMR8NuS>Zc
zO?pqgUIf}`KD>$DiDu%r(WgL$!a+J4CEc!-Ug|=Iv{rmK%b8K`Hi!LgiPnPeVY)KO
zyCf%GYxbtM7g#k0jnxA$Z15t^UlhHT#by{8)G3H#14G2(Bi|u2DFnzarZv6FpHz^V
zsFuS-1lh~9WmNi;ih_yEJ0x1OD9~Q&G1*NLokf%~yVMIW$=LJ`ei2>E;>G&tero5}
z=L%;~r%iDv6pj?FF6dN%{R(?fuM5}}3i90fpk2Y-96!8X7bHIy)J?jl>G~)3Yt(?x
zB6AZdoL>KcI3>~d@L9)68St1EG{QVX<t^}UK##aY(RY|<_QCJ{fbB%xP*>!1Ph&V3
zKNAl!27FuFmo8$Sz;I=v&6;cwVZUIy$`@lheKq}=hGeruVoo+>_Sg6z3??%H9b##z
z9=@@0D8V6y$WWP)eLu?9CfUpLnGdkSEz6k+=AwBe2ER#Mke%OGYKOc7L97>f7rz9@
zFvhCNFq@5?3`hqFGJRr#blj6$?e>%f)j00StM#}`0_x4U-EB|7ahJ`Vg!}weA%h`Q
z<@doUfj+Im=LiNJo|F^_V+cQwTwo3UB#b4vGqcq0EKXA5xFfT|X)pAvmST3dEr4TA
zyDOP_kGC|S(*;Vsp5lO38z}ZT0|6%q0|lwreDq#cCk4ZOB`9Ow2xN?-$(vUbr^)4j
zG&$|=Wbh4iS7yz1w~AdhJQdQX*OT;Brt0;nl|Bk~ax#KIKPI|B`!N(O!{0^;b}fa6
z_lnfwG#+RWtitT!VyitbQI6rZaIxK%lc*TPtqxl<hC8edAEF~(m02`*zCb1;66Ow9
zVX{V(T<CHZ_%#}TfzzIpWOw=f;I=m<?B7w|5dnPYf6r0=m+tV4(QF>29@+Pn*shs<
zK;*WAw;%~-&CoMa`<PoE_09-zGx?YY`XzcS*63LH=vYs^D>G?^j)+t22q1otJ2h*6
zD-YUPrt@OyU(~wu63JgwdfLw~!frrrr+Qv5vsC2vaV@q~FDvf5yp0)-ahQoBe_-WI
zImRC*_ro%OVag!K$S|2Q64h#NY~R%>;uvCw^CUHcflt#&5d_DkXm6<5m3vvQ!5MnY
zlf-Exfj((}!v5v4)dui>yb?RJb;D)bj`Nl!@y2Z|rpA1QSP$MCIYs(%e8TGVV@f_-
zX4i>4rk2JwSpwIRTA8X70T1NQ0c<~V2YwIbdtkndG(ER%Keiuesl0)~z{+6WfRlcS
zJV+EviavRS7(R<uVjo_z!oMIR_ruTpo2qxgIhfrXKj_j7O-6+reu6Dvij4xK;^Onj
zd!N6G7V1hoo>JYVZ{Ro3(et5E7)6q3-)H}cQ=$<S_?L!IqYqx?VbQtgp1+#oqQS_6
zkd9aAT-6-w4yFj9D|Xl`Z(1DeXSoul#3d*CxB=7a$jhIbHRyIvS18ow8D6Kf!7nqY
z1HQ4-6m={r2ZEUv^#f_cPHTn}H0T`dFjoTth({NF8$bE>+m{0Gyn`(Kkmfgab~lSY
zo1WtMW5n>0=y8(i*!&pNse1Eg5YF}RhKynmU9zd!KsLdW7?Ul(u@Wu^kcAmD3#ke<
zdi)W^QK6hHX>epl1@RwkK<_CrAeE}&1RiElfRBh9xIBc9ey_$pWV1E74&s8wrd4qH
z8iP|yJZAEWaQuZ%eTEESB6^`iw&+E=_daLj0L*Zdj06~^sGeNvgd8We@=YEyZa}H0
zI|zZ5IvYn4vgN@PrN8~?k~~k{ii+>sZy_(1SAg{!U)o(U@0Y~LEvoNTn_k*o-v3Jg
zjwrteN~C`0WBoO|2cQPPt9dnh;1yPk%sO^%#X(~Dw@bk@&w$yto?Ct+z<#?Fd5X4&
zxeNx=0C{AmD;zAyQ1V<^YRb<fb5k>#i&8~%rXgR{b>hQ4UgDB>=L_rnqWlNkPArWp
z$Qo)|0I&tk>l*yrG(6yeIrhbkuN`V-6L*4H?AAl)HXzKPji{foZFU+9T|Im)D{c0+
zX7Hdb2;sw&5pTdBrFwMD<h;}@rCAf#XeDYU8#2uFkwK#k!YuR%=oaCrF2a{nvVK;Y
zr*2vK?3)JC?S*ZjEW+n@;Udr_DPLIW=>H{gXwxhEt1=ec+WYo)s~>#I&mTNGP_??z
zo4x$>VChgzGM7;Lt=q3xHZR{>yZfuNef4{u9vXQ1$YL#BBXEs;jkRJDhJcYx_AQ6P
zxuZo*z(iO~a#v=&w|dgkCCG4eTkU~74ojJpo;6gTjAjLP)B={$YpqtHLL&@$SxzO^
z`BG0-PpQ*h)Uk9+Nk&UyqCle4>7@@J-BYo1Ag^@Y$vGdOb&nD+ZuFL=>30eYDxo^m
zm^rk<H+ygAtosjN(-tsg)+QCydIe<NiXa|D-@+eZ=qP;SH4XBJ@NjUniqGPLc)t~s
zHRiE}@dXoOM@m6=q1l>I;mlC#`d8EzCY7ezc;zRBB}?yE(7e4pY59`HD~eX1?k(Kl
z7m*tmJL}Gy%qcUL<Y(8X$bYqVZEb^V=DxYn2avXFUf5j`n6a$jnnyjRJC+YTc5O{k
zaLd!lA>=S+8!aPWqZgr%6EgHvuPJl1*$a@>aWsyxJv6=yBpEBufCyLMD^JOuTj4S0
z&n;1vbmwY=>A~)nQWe;e*IQz5+W++6yhC07uKPaSS+_W1G)3kk{j2XDN=fh8UX#`2
z#q^KpBh^jbl&sM5$2a8yU;Wa^mNyR8m2H1!^<P2nf46x{TK(b9<~n*kmN<)rumq|q
zNScgQ>c{ESBVYg$7PJ>~jVWYXu>D|V_{$K&SJ^_Peq92})B0?)H`bbgx4JMS=Xp&S
zvgG_1fA1p-!P)Mo@7~{^*&;P7`E#EnE}keme*0||9y6(bj*)NC*YJm7d@dS0>)uIw
zjtK>r(X+_YMD{UrQG&NZb4pzL<N{l2XL+K+7eR2gUN6e3YWC)YJdxJftr1VfwZB=}
zePkdE4mnEFOu>%pn%o_oZT3@1GdI*`cGec?mBoEK+k$PyF09Td6U)WPW?e8XyR>D&
zwM|Q(-CLKp`0z}yb*(O=usS)Xx75kvi^#bXLkn@w!^Dh?Nox?$V#Y5<jIBk4Mh#t|
zL>VHDSZMU+CC_MUtUoM0vS3a{S*SeZQRw)YzMkGW?y}8Y87r3ia_pk?fy12(?o39r
z6+DGnQI#1iKH5~CQK`4-<*iA14w18>zi`$*lPD=Y$B;4D5GYBfWa%J&g?2#yN8+a-
zlL4G^I;1-$D}c0@rZEar55w>y&>5k#5RNX*>*?$3C{I+SlqW~pL&}`&2NP6sKHr*?
z92qFHwchf^+O%~wrCOVejR=uVc#F*D4LhB47OdTVpfV{Ea*H(?dBwKMgY~5%mnTss
zG@C7ARsM{j$hwdI{LT`tNTAg6mq8qph%@K~=zlDuD_hfSRq=vMEW0qVGTn?;J=&R1
z?$BFvel0&xU@j@nRagFJCOa|UN1rq&t5Pac2j-F+H-@d~hrKPP%%;@nEyz2O0@5Da
zp}&KPE6i6UR8=%qnIvb;vC?SlX+&{n2Tc(ap*<bf9My0E=xp0~R0ksM2m3P`51m^-
z`{sd+rkmeD4rJs!`PjuTZddwMPd@h5hsd_-gYWEompJ>$s+xm;-t}it`|(QptUK&|
zsOvmNA%lAEfRa3~kBL)R8Z!owJS>^cl&MudYLOmD#zhDvl4^`BtYvBwvmEJJ$Z0O>
zbrs`PH@<s)=dNZWPr)|&v$%L;d2(Hvf+H7{G)0!Tq~dFTy(N;=vZ1beYhNJ`+iwWi
z6lg|gi8KF&4pZW9h-d$`Id}Q(eGldPW;&9Mk)f)GR_?673m|6^PxYeGqD8fd=?m@{
zB-fuuz5{>909m`BN`s@(A$<IN8{3uM!a?ofB6Ci2nuLvksJAFmu6AhniFFGKsJ!Ks
zkqhYakOzr$zbN_5_!iCBYPlbc`x}H@!w;g*^O!j)X^r`QVM+oE@J+J!*mm=a;G-0#
zSf6Ol<02wU$myslO69$gkQ}<BBVd$e4Yhun+iJDd`w6F1gWd`ldY3ApMPgD3#GZ<b
zVQDJ)Oc)&cx?~I?b13`x80S<lg>+?gwD?I~V97iLPAsg>l8~L1wY{b{9mR0{y3_#k
zmLDp(*%c*&j`|;FvXheU?G_o70%dY}puRQDJ;VN0S^)bjdi(6fjg`pWsINGGv@Zhv
z67rI)xiS-AJQ#O8JmqK6FWsvT+|hL7kI!k$SU;PKB{xJeRa}n>1KWr%i68zuhyk@M
z`kJf8S$Xdxk2gDv)VOxyNwfjleIez;y?|b#q`Xor?;vAh%mp~&9)Mmsqff9jqY*@=
zw@R9`yNc}ddpZ=?=eK8RwHY&W+iP-i&Tv&SzB^pDvdO2*AFQq^apX58?F~6_E^-_%
zl$(`2XJmG$qWYKi{MJ-wPB2;Hm>;P*)Kn&NdcAUMSfVO!Us@VmG%!=AA1DjAm8Hv4
zJS{X&tPuA)h<hG2dnA!3oj)=S@?-uhw(f`4@lX=+nOoOugH<UV%7xVf1$uSH%mRpb
zF6G16a)&;5d25=XbY*L6OX-$J7UCzn<Q5fg^;}m`itd-zyw;FAH_fjyFDR?N86xdY
z^vT3}wSue2X<ktmTD`DMW!cm^_gH@##1|R)0XvKmu^8Y5bmWRz1+~l(Hbc`!Y15`E
zH&#-+&Dbu?XJ5<Wad588AW7t*Iyj*nnkzLpB*b}jT1I|Zy-#S-Nf4RLkei*Md5VvS
zw9sf@LU)-G%{BA3HJ8s!7In)Ea_*jMvX^eXZT@{k^vShlI-Doroh-WP{C)ibqee{T
zOkY7C`xk1jl6B%b5ZMhFVvJu1Lao4K=}r!Hm3!yZcxv<g3Fi#}eVg2*R=M>|Uu2~(
z?MtA_4y7+TIka_^t!jBK=K?@-mz|uq@uO3nnE|4a-V2944Ckcu+4`dk<dnGRCh>Sq
z7MqMC>t=0ja?a`8wUYzsK}3AqpYq4lyxRTGt(bGmP-gobAMZjd(ua=ETeIoYckCtE
zNxaAU&A#Mat=GJLtTkupZGG4N<#<eg0x;%nfH671nDlIrspB3MiBowBsl@2X^5ylF
zIV^>pxoPEz(wLgFRUUI>OHX#`wa=}ee@h1H69`p0ReJaK>f+WMpIV+2%5zj7YJyQN
z(XSBcG-{rvaPGkct6smQwLC)ZRUG*NJ%A2Vby9K$Fu`R?%~Wj!-Hs<aM;L{Z+-DK-
zB_H#-P=FqHd!wHe)1K5<yPyDZ&o%f*ds@+Fp%0-tFVNArHP+un5}QWW$Dao9-<(^X
z?e5sqYUS3Quj4gTCC;u&K@b3h3N@S-Y6^?8Wq&7LeX2gxcc2Z~6J6dl=wJHG4Th46
zGPB$uWkcEeiL-b&<S(CGA+yJ)Gi23wY||cf0yw4mN`*{77J=x=4s*tJ9Rax~+nHLK
z@K?p}kIvlR7wWw0lkLvGIu|~)p*Uy3&23>8SH^9dXD#l@zYRoI-##a+v&dH0_R#5q
z<+rx){pX$SfOrPvBPDC^?i+aYrls~yzFwnXhMwPEFjV6scZVlI{5qlkAfHX?8^w^G
ziz?`;=mZQQpSbngX9w*ieR&@>Y@Z$2zX?<>d}MP;$Em+>cYfqt_{heR*(d+LJ@C<O
zAY<TAXVFl#2SG9hZl1IA77SgC6s@^?-gWQYGK0pen7(TQ;2?~3M~UO;Z!qd)Tik$-
z&7;t1f?d3M4Ip<h#TvWT#zT1uo5ojL5ERd3ixYmww(9Q%d-^zXz1v{rqPWCmPi-tn
z5|V%X7005#msnq`cBpwBYLkR1^4ArBa$TyN*eB5<uYh$1rz)YD41rQ#St{|UK1~kh
zNwm=-N{`AQ-xfo@CB^hefYD3}OX*~c3FA@_rMXEeEj|dK;`r(pUw5?8^`-0DUoCV9
z3Qh`DViuAn-njMHe~vb8Zt>w5g5Z8NhG+_lvt>7Za^I?IH=B486mx60JhTuIi_~T@
zQL*b*1@`qN9w&3fFRyc#<Yyba^s_^PBVXa0V0^BO<3umOjy1l7$w>*5Mf+TOTYr!h
z9GhYxP6sq`yg;B7bBflS?#-H6;N>Z^t2#2O*ED){fnwKDky(Pt)d9C!VNX&!vb;LB
z@jnJA9#yi#UX$+;NaZX}g383hki@=$e*fMt?wLb=&s7}I6|TI!v;Nqj0}-CaYjAWd
z+tXA#kf(K(_h$d_Lw0Yu%h_@3%D_NJr3~gCWGM*Thpk3l!vDo!l52-l6$0EhXOBrD
z+KH_Oi@Y}CuXH`-ci2XBFMb|=PDA$2$37c7jz6X?_=G!fZ^s^!Shy3+LgXfwTy9hG
z5L8B8sd)q&zUh|Bt!f^M%8gDL)F~de5iIuFiN79DIt^m6!KqZajS`8`t(tUC_Au;5
z4}y>J&md-BGB#uDDA^>8s6h`{MD4#+Amp*q;ar67AOQ{HwL2m*z%>T7s6v35&0x`;
z#Oqu90=vLjR$l8{p{1XLLe>|_wNzgGM1a^+xVU4z3DgrXZ%uo%q&MHF2-Ig?m-5F|
zcMk=s_P?@;NIZ)kP$OH2GJA1%wyV&uM%swQq1hYC7Co`83_tl2BVNM{O{ih&qpwgk
z%#2t$jsDDR=D)_CuOtn|KZPuDzDR!#6jJ+sPY|c^%~XvJ=2~_s8QWu3La8~n(KZ*=
zfUp^Q+y^%kw>jz>n!V^Vc))hdGn`|_g0^Etd$ig4g~cUSwDriVFJOvyi8IlMa|o~5
z17;H6m_3L|n7{f7zy<wZTq0XlMxJCaSi|_KSdI~U6xi4S2Gpd5awoauMsH`l!8Qxf
zeKqva2h4fqLSJ&J2C(nTsF1!YP514oy->T$S7;!f)wiVI4}RfpNpl62#CNYc^MtR$
z8Q0Rv3zf_5IR=oYDs#MsuJC1xC8gQXTarECZLdAL3E5=#5*|-7GB>+aBF^?9DNZYq
zoTx*(qsMiL;B~7L;{Nf-Hy9g#gv@nEw<V9&WF|dX%rT*gL(+I+_P@9E9vw_yzh=&0
z)t(pDRqk0g&)&{8OT=b(N?v{N+JkGB{Ze!9hP}Q0g?-iOGMS2l>r3kbGuKzFc`A^2
zq_^kHmMUGa#JffyrJk_0bK}hZH<k`mwws(LS?qbGblvq7wc<oIkcTOmqA{7WVh?A+
z`yV2P7qFyoYO9Gpz}1>;(%+s1_(GOMqzP+~2CmL%lTgoN+8kV%7oKAqzFVMI3h-0I
z8v_e+LbI)Ci%_Q&jKOSxFbz}5lzPZ%TyW@Jx`;Deq63^SY>DDON&@~HYl!GsfL5-z
zXXrtbGQ;*4w9}Cy5SQjfk2xLS3%4P<2|ope-~jI#opinUS0i8J*-&rQbZt2Sq4-N>
zq!_8L*lyy|5#o-d&c4AVtMemSsH|L>l9ryClbdfsTd)s_uZShYzaQ+es#Ul1U6mW2
zfXPJtyYyaoI5uk|WydKKp6v_9S@C56QG99Ks9y~M{is#@r^lk=<+!C2WyqGerB8=j
z^mOdGdaQe>=LuS;#clK%wfJ!grC@#LD<Pm;b@%*0)jkrX2@kCW_|$leJ;*kCiuU92
z^$jjVLHY4mkP4ga{@8(Iqr3F!vMT+I!S-8LH%NzHM9Yxi>}?ILH?3@vgD=SSjY(@B
z^fLx?mfk-1nK`#C%*q@(+J&qpA1yd}#Urk7nUmHQc0!TUZVt;Cx3<7&gSz5?H)g88
z0*#9eM%T-piROsb*sE&lJXNK*xJ>JFJLE+~-+wGt?qfnFOPZ(#T7I$#KY7WL-<T{l
zI`(nYiMCbfe@&X`hshnu@IPXeQ)k0;K>Rl24~#o6gq(u2CO(D@eLv~&YKupKqmp1l
zQuN2qiNk-exR|kZ8SL!^^KqeCc76Y)J@`qpW_UgQL^etmWpMmQ@qbWj6v1iMC<LQR
z6uB6=LQz?@wJU5d?#cO{x`=e=g87SoxwXvSxMKgwney-COQ@Tb`|q47{~oMBN>&`3
zS+r_q8bV&R7OiSaL(u2(8GE1XZ@GQ%iWvd)zWcD|eNPUw+y?Jb(7P$Qz<5H|=%8D$
z)A3_e89OrYpzWyp(s$6w96^Fd;O`gcC_yq5`wI*X^!GFA?}OMg=VK$_nP-VsGaj@a
z^AIy*L*OSbwv!<yK18gS8pc1eXI)DBKLLn8eGi1fQtWBy^~x5%eD97Hiy#x=SzOza
z-yd!yM?%W=dQNKp?aROigspjTD%XkJ8Phe^y>Prq&wpm!`_PY#BqHD(Neg(LLMKiO
zg$zXx>m0ofH;EtQ59?ee8A-iAZk;gB<(#3oL)w2IlzVYJ$C$?cp)*3macA^K2$;uG
zjKjn>4YFYx$Mg0%=wo1h1nFhYf<DFqn3S%Gv9{6trj&xMo!<8#nNvfC4t{E|_({^U
zkv{#x$XD2%_@iXbJ{nuer>Mskr{RQ`b~j-&?Qh6G?CSXP;I_AJtQ~xY_~y=&pHwU-
zpI@xa$gfGRKCrSy9zCi;I*{b%wUyO_RjCS@f`vtA^vt>Y)7_5}ul#M}ih)HUsllt^
zWiGnC|Cu>Q=4V<xRtedU)Bth00C6EBz{KM}#yyCKWoDV<sXC1NN^EOK^yH4$4^*ah
zU3b@W^KbZbaUc26dv{(}b=|&YO>(4H6+IDbTVI}BS5|0|_{8UimUZ0qum3~Ze*nf&
zT#w`U&6X>=qU(FT_oh3Y?oPd*dY9E@70b5Vi`;w1fIF^WFb2~M7%;tsUPCXTgap2!
zg+M|LgkWp$H@kbMW&`>B{~_}2&hE~<_vX#an>Vjqw*EsZ!~O8IHGC?+eQfTr!6%Se
z*DcNyXgx*|PfpMKa80@e!Xu+Iq)pACn>rn$sTDv97_kq<KA&}JS)sdWMQ!qz)M+<8
z^smdey|Slf!IR_<*Kd1eZw>iN9i210?)k18zS!G;d~tsFjbH2;IKD6+SqQfWeFLXI
z-+4dz(kGkyPyc-<d-Nb&6ZSIe<gJh&o}l@`#aIs}&$WSB#w-W45I1&6U`7{4->;Zi
zVo+u_<$<;2Xw4SF?RF{1uk>v>&wzRHf#SYGL*3q&Hi5sQR`8&$Y%t$lnxQ%WSEP$a
zxQyf+PY@&q-Lj%-vvP*dY^+F*b-b3D+s9Mt#>P+4n0%oeI3o6}POg8An)-@aCG@iR
z??#e5M&6)CKhTgnLTFuzC&w6dbR+iOE3c5tnRz9Vz+;Te0q1lBeE=H`plnX65#-8+
zj~!o8tr5k@bJ-kJmp5b2U=uky)&g3o)A6(BUOz(SgJ*I&3#}Z5dUS+pfgWEoAuc+a
zp1;1f$LNOOe`xx}$JrM0DHSMC1C$ErMXps}e5h+5d->(ZsJxNwiSMuy{0CM#Esc){
zy`f?mQIaj(mvP2pJtW5gJBDnGkF*9l8j9!Fdg5T6%SnE+;`odZ-`u@$Q)S7bCO_=F
zwFg>S_sz}Y63&8-6-WEgSl!xVwIeGUHr>!ZYbNsO24@a0ARD;kM02F0$m;3X+1qm6
z73+Jla@Rk#GxyT{2X}9pQ!AnA5`Zwi1L-26q;8rnsUuy;`pMzwoS-ZkOSOeMW8k&I
z`AvRfOR#)NlUL<0Lj7{wV=**#_4`A0nVPOEUtKwE@0?t7e#gRXHI<9}!ccLYOMGYL
zkuR>(m`j%*?<$?1ufu*iV6}0D>73|_?MFIpA^-L4{Me!!7S<oWWNAyl<E~gTy~(+V
zk&)bq@6bh<m_8rPVa`Wm%-Wn(Ptzj<AK(6uAC$9!4v~Ay1Mc!nEoJ(SmA3}Oo``>1
zMN|x0GusNS1tX`1`>z-ZPdoC;n)sZ!bs0EQIHTN(0Ask+W(b@4X$OQ3e^BL&c^ej$
z2~a~;U8sD=+~V8?$NIMX<Ln$uZiBaRH_gl3#P`UL7}M)a=U&{~2piwLP`NI_V}(oG
z!rscBzMe{NVZN^_FCdjD`8lrMnRCK*Yo__@Mz)XCg|loWQNJXONQ=bp!O{)+-TBd;
zy3*WOEXQohP#e^O^iF4vQ|2h`jaIK5XsV9eH6FQ2ktUy&Q_8Fb?<9Ug7h^wD{)dzu
zG@C;QVWI^$%FhzbV~lDScfJ*ii{hG7yMj(cDvs3&%fy9U%i@JjVM!+TGdWPxOs+h1
zTB_b%RSi~jZ)~<74rV5K3jG3q0P<A$0-i#nlzIHrWK$@|;-J~7F)+?f_bz?mmL0vJ
z6dP4-xqorhl7Ogo&8-Vfa_p|k!;p<EWy`LHY?P<Nei8Dbv#x%3&!gl!uPvlFX!-lM
z%<_BY>})h38rm*C@p<Aq_MajDEMZOZbDwNA6pl{lq8OES&MKSW@iI99IMZ`u<^zRj
z5g^cKYj3*lifCxMKVPU3rAZZp$X-|A6sqhhiC#nSg=%ipSROCc=k%7?vfM3|*<$Rq
z?3$adzakdwgWqU{X)-zdrnb;2P}AS2(k6UUYSXIS%~d&K^mXv*<*)Cmw77@i#*xD=
zT5-#~{FY3GKqvq_(LAj~#dp>(Z@6|>WaGZ8nr(=A*Bg5(t?t=G`oxz-0<LJj)<ID3
z);AxHM>g%hy2VWAKuLTI`!R$`SQQgv(jXIzBrc!`o0AodO-ViEaP}EHW{>2zt#5V`
zk=FdqzSz>+SI)SjsfeQyE8Wrhyl6|dPU+6I8Qbh!sWwZS+nS}WoR(dm?GTHVB6PDc
z;#9iII|8<<lBig|xUFc@?Be{YnF6`SsL=&W9hQJjC}0OV{1`{=3aJA5giZ~RG&v=2
zrTnK6)+O}Vgj-znQw*gekrgs}*7Wg6kCeg{@+$2Pg2K5ahAec(V)5v(8dqCf@}-7c
zUs0Xv+C3(}Ma5ep$g_7vzTWV4Bv+<W%J^t*tUjpNq?Pa_x~sgwG(lMrIiD{#$bs3O
zAt7rqglraKJfSQd()KTK-c82<C27(lj@HeH7=zB_7V3LL`_>0Gf4kx9VMA_vaZqMy
zow=qu+lxv}{=$$K@ov0(B<oxPt<}eucU=3<mY7Vv+tGap$_}t@{2vf!DV^(WT(v(X
z;2V;32$|d}g>@v1K7{Ax2O4uNJcUE&Y$);JmZGEO(as`k>%Pb4UA0RRPtWbGicWz^
zYv|tj;D+yhc1FXEgBgU^EDO|54*+ev-dft1J9x*|`or6ilF9HcT7UP_C;$|{eGAv<
zW(=b<4?=oS`$pQ-fL4Nwm^c)LKtqWjv==kuGK@EG{HPw~bIEN&8)5Z}AHn$?p;Bv6
z3xf6|w(9ac;#qYl?K*jyga9r@mI}kpok!-VbM>Qh<b)SFV6M~^tzN&q&gxwLUw{F@
zPKAl&mS%cfh{mL#d4`Hl`5#D6J_DDT<_@zA{m;6eBIK2kpVs{p1j9kf5ga^5mcnjc
z1g=QhOW{w`{owz-ekcN|TEpnU-yyvcwh5cg0JDR?P3i~8A_&Y<un(@CshE>|xTmG;
znAxd-6Gb37P%j880koi_JJebhN|$wX2b)VX)4_e$BtuUwPKKfc4|7G_t?RtCa|+IE
zTkEPC$^(z40#K#`QqsO{sTiLKYaxA~iam<37SJ@#hVrf$6Vck;<Xpp{m6emypd;52
zdF6F(lS{#o=o~px^4NR7Jf|^ZOSpVgs1>1=MfJXP4qt$8v$)QGi~)^o^i@ZV-Bv>l
zdn!L4z88O$MYU2tIT9k9<DBH53nujrWI#&6H+j)whHXfhp(z?Fv&G|{7X3eoAbnF2
z_crT6m4ALk>4JK9#rj)kW;W?9sM3<5TN|QE7uI>`(q?^-DSbwm*0lAe_K_inH74Yz
zE|F(EF5mPkW^e!D;l*|>`5ECdNWpRUgfg&K3Coyx4p=edHPhH$_~OAL!YEd}829QA
z&uG4Q%!vOCpCt>;PSAC+z!B%^ysV|k*bzq7SWF7$jEXq}ni818(c*Vf4Z3rCa|!;1
z;VGhxTJjm#U@e|Aw5w}Um<rfd40hbru&rdY>Wf6bxO&}xvWky&mk;L4dBOh#xxRdB
zd45RZrpM#ivWm>!P4!?ixw)uWl@a%Y<k>G=7x3>eI+iYACO;-f$i*m@y28I(ztQOf
zc*S*{{R^i=zqMDF#N;J(^jl|5NmNlnHP6JqUAbY^I2~Pe3*(5Hy7DwFsYH}4rtjDh
zCKkt7-~CSj!K=s;jOxtB{~50DQ~mot07rFqQl9&Uj>(Zdb$_gsU2G3S=@F>IY9yG^
zlxyZGY+BE>xVLyn<1#3@rmDJnTjsPvi$1$${<ga66|H`;vou8B%V%c?!RyB}8;3$l
zk4fgQ9f}m>Azyi#np%C9s7+=qot_(6I<LRd?Vh%&y=cRhomCy~FdWyJa4k*H@xGPx
z+(!BH{?4iw#uDp(S~u$YovF6xJ0`lw`JaAsN&A_xkA-lcgY<lF|NV703_`!#_-`+y
zKT~VwPq58;D5Lo%=yfg-&S<p`NU3$I8}3*#<Jg>N>lH7q96lVY<f=qsqdUi!J6M+`
zA{WZRF7~1s?&2(uOsis}2lL8`SDl`><%5&mRaNc0bcI^ssF+!JYSRX#S|Jy(CghjT
z{H^@*6ZJXa%!}rjuT14Z&S<NONx?Qbxk?+Z4d&EDTq=$9f<*J}X(EM6VJ+^>IYngm
zmfFouGeP%*6OQdJI=-@Z^8UjBz_=XCD08gzvWu>WbrzUGMOCb$&;;V-7pm@cN2WFG
zn33JQ`=L4Yn|s6eMZVtnb=I9#Yp?5Cy|i-e$?nx7;EutQ%ZqasoS3!a@3+m!UT|Wz
znry%T*-Pnf{tWk6l&wV?D@b`uq|B;Pa$fqluAH_fOzClumv799yCu~{w*u|PkHh^2
zk3q>_sm>`bx90c|so9Z7)M`q+xlNhM;H+yFp|h>gVqH-&c<o#QoDe7tvX}i)Jx{9M
zWwI@Ig++pl;u>epivB!$&Qp^Qp?|<%p>5nJm|&##&g}7g1C(dk@~Ug6m&_<J2d1s6
zexQ0*k+vYea9dvK*E<d>4{E>G0wY0wjPhH$L(?y5TmHr8pDwQ6_~CPRw=NuBF>mx^
zEbrbAKfD+AMG*4F*LXS{6M^3!6EWC2B?Q6NAN!rb5fgo;{LK8F8Ke{B_rEz#z-ue-
z0YdVJduSTGk8MM9@tYW5MA|AqnX<5<Pd*I@0xUtJ48KGrMcG+xBjx4ut1N6(Pwd1o
z!i%%T_Cmi`6K>5h8gp918n3_5E@lCsz!o82;?=)VFF3C>NYk*DN)dv)OFP10xa+|Y
zm3$S32zA)UlormRwCA~%N_U=J=`gwo9;_F|&!a;e>2Ja7v1XX0_zsl}!aHrGtb9SW
znT_aFm*6<zW3Lif^8-FjxFJic&1wj1e1Uwc2=+@+;(PEuqyvvRPlqeG)j|2(PjD@u
z8UgQD@Lihg5L{642;s^$8MECgl{?#L%61X>O`}iu+&MIKXAe^F%g4rSmrCV=Phu{D
zaK)%`csTJr+KAuBaxf>lW2*#pa#Dy-IJuQfY4xzJW%}H_hBYl7f4sG!Q0Tf52btAv
zRl(}&teU7ZT`J>Iz?fnbFfkJijKvUf6aI#|`O{Xm73LND58aU2P+Cyl6e+2N+eD${
z+=~}LNWpjqgz;hg36_kufSej%VG_&%;Dq9h0VR^KvniuJ&@)aFH$k|wZxefiL85d)
ztvkDI&Olwd^N`di9Qrr{FboBng1o3lT@X~cxf%i(CqQGOpu-li(>S=bY-UN{hR&kG
zn&`Un>+6xB7@05hW)&DMS$=P3fh&^Bl~Ex=SVr<wPyvh-ZxD?6;FRd`oI<I^>*1Ng
z4!Ob+F*$PVGPvkQe@s`1oLQxA!WA`94yf9U0!wh-yqO*-m&ak9kE36(EFkKj{0_5O
zOOO|-wjjSW!nR~AR%}Xd86noDiB!1s0!pLQ_xL*cdne`FFtrZ*@7!O|2BQ4^lBsZ*
ze&?Q|=|1!w@G@IL;VBDH6EmTtG&>?#yOPa$*v1LZt1lA^gc6??(Q=h)^qu<S2QSO>
zrAhfRk-W5XUY^{_gLK@8J^&uZe}WV&WZjOvPw#nP-N-1c+X8ZFpUzwmqRZjC$XD=P
zYw}(A4fred4P4*fBtL|Lpq_@uKq)GmwCf*bKLf|>Ck#C4e4*5<L$o}l8tChfAG(x=
zM=Fw+b<WL`+aNqtJ#ee1hiw<qZ5L8)Lww_`jo@|k9@;jC&7qvj+35g{0m1;_-b*GC
z3j2g&Q|qG`FjVVNIZ~<<3U%KY!Xg{kZ2-IM!Y~taA_VJsBv}s!&>?=JF)GUdT;AXV
z@{?*kCOa;Xiui+kiKzu~8OY@}QP}W}Rw&YaqYn$=qD0XG!h?{o9t$X@;VcFLx*XPz
zd`Xv=(B&l{BdMdh7QKv)2gD+hb}f0}HD$eh7V?<9!ZVBG3*e8sm|Q|<$g^Mpn@{^y
zhb7iCk3Y`l|9lfO58Mu)&8MGnn5Po>cl+ayQ}3LAm;BH9_n3XdHHmAH=b84Hh#}Pc
zb<Heq4j;77bd>V(JAJNS$^(=NgEbxejI<+<r~J5AfWK)-GxGTJ)U&4$fIf-bmU{LM
z@|9v#iQIN8^=tqEc-Q!|71*bWb2{c(;#2Yi<dwuq>KV>4$B<X#qh8tN$B$Fr?O|Pq
z{)k~TuS^*~d*Ulkba$Uz8IP|#+1-6&WgKblKC!C2eAS8Wu4`77m#@5rI+p`if|t<r
zi+$gs50^V#@vy-Vj=P-YVLj67jED95aNOxEqkhZa_vPdZNEzEmuPD?(ImJqpT%$o^
zgaM%j5d!1_!a}5LluO;YcB#Gd(BdJU2<He(=GHjD+4xmg9V&8qghg!+KJrleVW0*o
zU_4&LmO#N~(Z}DCqm2IgPvi^W?PNQ&;U45MO6i{lWtjj%4Gt;51S*S?YR8pFwR3p!
zATJ%ZQ#z-{iALgA9Z$CNz@xAo^6%sq<lpFa^zucYeNSnlXr3ltLk_Zebi4zKw<t|S
zIxx%3$fc-DyY{hlIs+;ow|oLN;kT)5|NXC3)61c9;5-GtvnRhZ)5|oop)-RLa*F_U
zYS&SpB0{i<e63ewWpivQDgZDm0>9e`zbhWMXNLkbHT!_1(v_AWllBhGR8Or$F~(k+
z5g<1Tflwl2b4u$uI0`UsPgPE##-xcwxg3dziwHxF%WLg=i#`yP)Z`)n2@W2b$>z-$
zNCkL*XSlDc%{y(aLOxWKyLj=^g8W)sAQjH_)Xpg?S-E6UPO$Lub(_Q<zgIHv#-)^t
zTH<*KvjoBnXO&b|Bua(CVNCJi)JfZ{<^kGUkeaws`9)|8F51xjFOAD;?K+Fjn<=Tz
z0|<EX`A|9#NTeKYX&uA?!8kotxrJJjHWuU1I0)E0Pwl*-k`+r9WkZP8Z%+64eB!tN
zK352l80ZX7?`rc<NX#nAS-g0pAist(bDz)j=|Qv#O~b#WG;+**2Paggl9os)Q?7JC
z?VG5H3r_q5C7)Bohx|n#i(M9rd3)Iolav5jK&8Kn6C(t|;|h$D<G$lEyWDQt5#M2y
z@o?2r0!ibk?Z<uCeM&Z_>Ko`&C{2!sAC%j~0!3Qi;B<aE!dCVT_RBOT7c90*w9>vo
z3NG>*tQdcX_A^RF(l_&yIsh$`jgQh%({YQCH!PLq#d<vy5m6qwJ6NVIwOaFu%|UW^
z8X`6N^f}v0HQEwuWd`~$TqH=7=<Tvba@F}y(&7J5J-Dn<X4gxAfe&65i4BZC1h!ua
z+b^EnzL^p>1E`ZeA#%!6z6s_j5Ge`dtw|s`EnqnficVKpT4q-1O03m^c1uOPM5lME
zxJVjUZgG;kd8mYeR;wwoS_=sDpSVbv1ovt3>qfZ)g2@w#a59>nZUBE|o;u`>Kne<y
zNTh+6L}D=|(<%}>;aYGH-1l`PXCTT^i+0qRY~Rnms9oWBoTl;6aBzZ;1nc@TJoZ3M
zuRrKS6nvFfY769h+=V`+v#6=9smR&hZ+7J@xOR4MdULs|j7o-Q4U|TkyUS*;m|Zr#
z-|UXeJ~A+LWdM26nUmpDtIFK2+<-@|DFXiz3*i=4Y0uQ^18#>WT-+MzI^;7=%Wl{?
zGe>3)XuBm6jX~2~8Y;@ljL)j;+2gi!6;^B<$c|?-{JbEMf&T@{@svFdwU?#-Qc|E9
zf9jpP-@E&(yWbn`J32qNX6K_L=u+(6Upnzye(6Ljqy5_(r{A=pimvA_l!xUe<IJRd
z+Sy6V^DvfsAE8e>Ay)B3#^XGr<}tA1B+64sfLWKR3B|~dBr4<@2A%=17qg?1u~;uj
z5>q~o)>JHozvmQy=iT*7sv?6O^~UVN7u*d?s<H+<>X1vTO6oUs1$AcK*afWf6uKWA
zq3!gUT&MJ@n+zPWx%h66)rg^X{6_NsUE>J^Jl6mdBS*k*kbl5$ETD&$7kWS|z0P|Q
z-(ugwJqeFhNzdvjeJ|r&Hm>0v;{e*Rj&giTWoV*=LTXN@>^`6Es+&DnwIdfnUe$X{
z+VrgH@2u>-Vs<ptu_|sd<S)8rM$4u)FW6@=aoH+c(C8`4P}|+WWzG=dD%H)B!D{5X
z+{0~yi*m!{XB>$}7O!p&_wSrmf7!BLQ_=dIwxdf+v$~cS>)2wgHp3>j<Td((vvbHT
z`CH2g-HvZ&vKaf7bo>>32IPBqpUUf`Or@?H_j`s905ZX*hKj658?}HjN9~mIXo~wb
z`lMc;zqmc@b`hZrzw{wxn%J)Pw-h-FmR>hRX+LUrKDMlC-K-{^(oBdj$sF=OHy-=>
z&Vl>|#~yfd$?89y=&f9H!}P*#e$m#-aBZf_R5X3<(Jp&IR)9bq?84dG;^AD0ry{B<
zX$?xtSKlzO;O3>dBY!0SdHtoY@2M7REfN97mkY|v+lL+i*!3I!@$${9OIweBc=^Wn
zuj?(Us4TD*cVrf9T0OThz~+l7DQ;%sd$t?DpXG)9+|OcSQBBt0U*zo9&ftqBRhd{!
zKAvs^zK3D%G%33!cH6R<*DouqSby`3CD%qv*mAMN;4Kd4_mx<zg>9LkBA@kqb7WxW
z4Uf*A{f8TN4n(NyKg^!}D0RJa`l-Kc+VtTKecpyeJFjkQJATQ+1`opGaXTt&D>s}T
zntkiK@|wIZu2`;;JFDlEl+UTOi<QdvC)PCU52u*xQ;*Kx`ti*J12=!Xwd3TjrOiHH
z^U_@>sjw1b_*3>|VOArfJz#8JB&mfOURot!0)7-7WE1eG`X8;2mfM8_OMY<v{Qk?k
zyx#6z19RR1uBkXscwLAtO$OvGCERHmv+N4;Bk**vWl>Sy!q!ak19Z!|H>befLE(cp
zT!<%AHERlP7FI5+eF|<$W^$*Fa~Tuq{{_j6tP;COV9pE7pZ~}my@P~Nbl<B!*?z88
z9eW2<{9kbWL1M`?88eLOWCEPJWJA{ugUG2NUoiuYSV%td{{zYh>jYYhchmN`_S7sN
zbJH<Bsd&~9%T)Nn@yO1|{KL7YvJXnZ%gBe-2b{_?Du>c396%iVs`o0S{1!f&E9M^-
zDHXV$41hN;9lZ%er<1Q+t-#w!{t@X;6O+GKO%k&Nuq8Zdj@gBl;WP1jSy7ta?B7hl
zG%4DleGE>=1VG2*Z6l#{WtvQFCUh=SC_7{_7j#55(XcN)$dU1dN}Ww(v6zC{L6a$W
zS|rk|MFlnc?26mvE|pZv9t4j4HG7m&elyO)7>wk&TPY9<j2fw2D!1kMg42p@0;OJB
z!xf~<(j9sQA(2^gf}Z+3i`9?`@s4$oZ(F4j;Oin^M7p^W@)wCk0{;&&=Q4Z4O=vnA
z#vf$jfKA;QO_(F-xnxsh`o`+&P1B>%>6@ynH%^b-rpYLB*o&!<O2u|ZQHBN^s@%{E
zQQ1%#Ur)WZzRX^n0jGEPv?Qq01xu(lm$6>P4A@H8W^CLVJk<tpGIAluNiS2;m@~$N
zCnaJ8hjDo&z+P(0HnvHlwrujFo*B`se$SQbj%xH;^_3frc!r``1D<2d{W0V^2eZR-
zBzJlw_lQQPQ6F1Ry%_2D99w%>qk}K5J4$^B@0m4UocJC)1Ldw#YEPVWP#e!S#$m#l
zq<-n;2n&zT$4+Z340*v?w8ggW)H93XBh#yO{d}cdZVWY+ZF(YvU|h^;B11eB+|5JX
z2J$3-&&p6u%x%(%_#$p^>*sq%?p#%ZZxgRT*!VK^n)T0JUZV?F`Fr?ci`#O`b+rn6
zPGJ>czx{3*lqY03zklAc=7TS<+iuKbbQeYlzZqLY`4KblD=!2euJ#k)M=k<?e6eA8
z&)MN+$0KpEOChuRbKQ#$IlwhI>eZ9SFbn~`^yQCf^9Ez}IbMZaBMMi%ux{ws+&uPD
z;Y<X_hLHCMu3C`W9Ir?xlxpS5g+7%-71sC(=d$&Bn_ecXXzM9jdZK^6CQ}X9IB~*=
z&1Wy7{THcN$VvNjSyJjv!G|&iaZE%L%IPOLP>G~pBNGslnlh1{Mcp}Cl_%HAUbjW<
zFR+1wV!b@wkqKqo;*GNkt1o?etr2r;JAKQZEb8D}WJ-TtV|HKBx`F(P?T@b1P>)=5
z_GMyUa2&C?!yIv&g`@SN9kVSFmqCbh%Vlz%o=bKqLUoIpXWVsJ2lpspe^)$EwNNBA
zdAv}Pmt{6AZ|}H%Q!~CvWq(@ImQ9U?;e;9UVPCPh)cGSwdS|APqxy?7*h--{6{Sse
zBenLn2Jju9kcxEnpm|TMKIWDg1li8+8N*pd+zHWX+};;yIQXZXX56Li%xGAXfp&3A
z=I(8uze|H`5Q#)`1!r^`t~aRU(_FbuC3b|czayv~xvGEtyC?hclZ4}QQ7N5MHSrx>
zpe~2<WirkO#WPHZCAf7;1=6HoOF43K#$-#l-$FN0{Jl-h4SJl7PNZFc$P6yxe37i8
zo^QTNfV%aa20_cE4=rokJiSmp47Yp|vp2^b=`Qy{T%SN7Sg*!sd3k9=QoCMuMBLg6
zL<36ucYUWf);Qz+*@Y5JuXbofwz7eO9~fQAD0vgM27iq938o@DQ^w%b(Xx|H{uH%^
z$5O$VImm~nHPiPzx?0Sub64m2MYn8>aQH9VgFya+7<W6}H3b>zcHmVY{~WEEdu%YU
zzDAkZn2X#h6=cjf`urcaIVkJooc*+p3rgkKdr8}3#^{zZfT2xrW9A8I3Ya+09|N_R
ze2fo@#pL7Wug&D6Qcx-&{~!ix@~sz4PVP-=j=)R+y)eW4BC=}xzz*_zAlfmo9SxW@
zq_DNZR^tUf5H{HEGT3eoHjl<P%(Tm~GOfnKlT$;Wu;IJ@BqskW06Yo#v-(eJ@+UFi
z@yY+BzenEZ2y$mh6u7{qyOXQ2I2AV__AOnTUwUbC*A^u1*N`s-D=gNE3=kG-<w8bo
zDN1~c|BOEZ_a0#=m3GjlaCDwwxW|G#%>GU3G#ZOe4NAw!nkegIFN^HPGv}6x9O}El
zc~M%?jMJ41YaIpi_O&*Sn5x;5bdgNsvbf@zdWAi#cVy`#=u3r*j&|0pZ1EK?JknLO
zveoxUU2Ui?qN}eB)@SMPP3goho5XVTXj<c{%#M}ieb+88&i1u&g<`4LRyL!+8xN`_
z8UcxPU9}wUQ`W@0j>F&XHMP@bIO2o((`MM?Ga%l>EEabq9oNXp%A=z-OtOVWr<_`V
zFl}y0ZLnx@fpWQl9b%`ts?w3?QRe5`^F7Lfm8Em5ow3178cXNUzoV6(p51A1h(}*W
zFm&;!ckh%C(sUjYg?C^-vP?d@2iF*)^}*5x>ff^Z(L|teenG=!v-1Lt3*hgpJY@GT
zJ#sbrnju$nekFb*%99As2TVoUeWz(TKm<GS1Rbv}hnB;_Ow2+?Eoe=;>02jQaD<bC
zJ((_w@y$j4-<w@;AxaZJD?F#`piL(tKG?Kaq7kE<8E*}VN*(jJtg>rG$|pMC(+je)
zR?HR_I2LVwWAl8QQ!oo1BtHeu4>>I4r=DmXIV{%N<RD5u7IcCueUVzAo8hp6Du<UG
z23H1c<RgsyQk(bztH9P>JdP=6O4K~8V&J;BM*2>!DD6M_=1AZ5E6V=mC~on_miFd4
z3Y)#Lk?DEJ<;Q=zttY<u!I9(txxFX8<-xVBtLkjwrFU;^Sy^ifFS(084`3k&u>~oc
zxo8YdbQu632X}wo!xo$|=Ss@K4cLNnhmdcwVmk>;KL<FeeLEDn(A{t?M!<%@Quk=W
zf*zpnH+}%`6Tc)v=;N?n1Z?_|y8kd?LifP&jDXEgQSUEIe2;#Kx5E1^Z0cSD-+zXF
zzV%+}J_esZfcL=rZJ$&36^S5v64C|%+ux>WRgw4s{hX#175`#VXrFOvrOdg}&pQu2
zHGkT^xp^H2pPWDKz});VHNkSvC3|PI77tfDk!x;Cux@S3UwzNY+X1{NSbfi;>bY_A
z`E&br<ga^_mOXYue78b;#8g}vI0;c!j|{28D7sZKYE%G01)9dW$5fD>3r;+`^30ht
zNLXKF+OFiNhJo#T2_u7fVLf+3It3|<2TDsF1LN`IQaY0fM!Yy>;T?6laPj#^#Ne)+
z_FTQxl4<mm1Z_g0M$4Asmnf&LJl0dYs@3PN9WErl$X(`oGi2Jb9drho8k+-#h?CF<
z3oQfz5Tbd{oV<*dk+RBF^9F<OiX;q7F4%YXLzs#uoc^*o$_dfYl}W!N8qf(5&KU9b
zh_ZF%(VnIaZT{73A1z;ZW^Tu}>G|Si8Id%eIgn=yPs_Jx^9SPc+&K+_#!^p7$Sx9U
zG;Apw`I!c&b#d{ATYY73bY8!%#@oK3H6)YkDN);A+Lz-m_Y<cOeQtMARf{fIM596V
zKMwijkFY;*I!ZikgKB0*Ib5AAOur!0BdCx|)*$bQQLB2M`$ad2DqVns-0}Ww5CFGp
z3(TV*tkvkrdqJH=GZ(En{}fFR9pu%QATRo8{XP}oW1{^7vx6cg8zsunmqd6tgWTKV
zuC=vq>F_r1d3<5saA%daQJ$~%4dj;&m0E@eJiY#%_ha)`I>O}NxIDN6saf&N?gouF
z$Jj@RW!B8h_L1VAxw3Q@vYVEtzDGZWV?;vRrB2L0Za`#{L83Mn%qoQ-x&7t#;jWzi
za)&xt<+e5Zi&u6>>o0w1VekH-@XT4DQ6KleLN?wUYFSh`b7`<?UT&}@--7IvNd2AL
z+UGs8t2uAM;qLXHZU8r0oMbXr$n-=A6JzsI5nvftY7mXl!45HTI+`vTJ;_y@tm3<n
z9$)6@OFBCy#paC=8N|82h}1Fx`eQt3Ht%74Xun6_fMZ(%_sQ`KF`F>SQT!&G7+5Ac
zLElGti+mbw%QN=2gjx$MN^i;OV0ETiY{_=z)CXizd-jsPj;hUf&FR=P6kT_DRb|=o
z6TJ<adO{0sa8(ZFb@dpEhsvpC7E7}iwFS+EL4BaI&1uf_Ye}Vj_u%kN%ZozYn;UmM
z<8y54=s2>lFx0W4e9c|-Ts;EkqnF|QlTJt17+WJLBp7FN>y*_p=?T`=)fVk2Fb_6|
z+X^gymRZDs1x2|FriE*^-7}~2vi?kcc58%ulPGe(g51$F=&2rzO`qkio=Mgc9)-p3
zowlK6*4>xXXV1L6wQB3ejb&si?!xrMx7bN2&l0qy<dlf3oGD60AjM9GyVmZ#x^emq
z>#8!lR_{4ZX_%{jv=_IBs&~xFhx7<lT{61>?K%9@Q~UcfYL9$;^ze^QGgp@^JlyRp
zzn=W@`Gp7J#YsT<3f4d%9>H&Bd{$|jaL6SAKrJPYoc(4q%EeEm+wCS^J~)Hl{7V-m
z)?{g~5D0)s)COk5_2IveF-QnM0`|Q@&G)9nw`hXC-~SGE57`h)!*7E32dMQRF$$l5
zMMbLxSNwrFk7i*R^!>rRsQX@6-w*Wnhn}M7(*x;KN&61Ee|^1RluitRD*La0Z%xn9
z1^Im^-(A~tbWy>N#z@@hYOE^stBqN4NB;8O9CYa?<eeWasyguJ1D}9q`eMhNJsl2X
z`J!vz+&R3b-BEE95Yyx54-lS*Abq40*N-HH;0p2(F{)Jp{yda}zbdur6>!>r_L<{%
z-+edQM}*XOi8$<Z-Y{5sj?ZH9q+@=FOJHmbVWJs~&&rdQ5GHuM!-YxD&r3tq8t`1%
zP^r1S-WkvF3YFQxb=sjF*LAgBHjowRSyN74pE>0D&}ZA*sER1TBgIP>E-CKl)&z>|
zemz$?e9fFlxNmz?&(WQmO37P9RH%AZ4Wz9b!c%;4|C8TYL7Y$1?YCbtJ!mN%EF7NI
zzW?EwL;HpbC5wC&0--5T7A)v5wWtc`PgAt7s$l^4QGjD|3LMD36-{fp^JR|xb5}gD
zu_QdWx5p<*H(4sOt)b>Q+0N3S?p9ze8z^k+N}@rXFF+dFAV2-)`f+zY<*#5wfdtVL
zBfi&sqi+&sBn|oO<Hd*`e5oxok6wM5Tt{9FX6lJG=;8CLQt_Lx0OUpgudW}_ad({L
z`hf+6?5aBQM5n*W(Z9DpNO@BgE$XW`wCn6DUrs|_)%;4^f_WJ;!uy`XZ=4k_CjXem
z&6~ZeY4e-MTD2Jk=2<3_-4yHFP%(2vD)S&zPQt?w$4$vx9h|Yi#}HL!(%vLs>-eMF
z6~*B*$abYyJ-S<=N96d8!+{+6xxJPQtk)7#SrpgN^UGDRt`O|w|Lc5raG)ozztlFT
zld}B$r^J*VTAW|FygS;s>+!|Yub7pkk2ZwJW3qD3U(jb~EbuqZE0{gvYg$bD<W8B<
z80gv2vEYfltpy8?bk*-%zowY95+>^0DDm%v63Ie%EEL?3_%y-f<q0JW;I9Y*%Wh13
z!jvW6O&Aa>{oYNf_Yz;iZ_RYs&56&FWpBavJP3egw~W2_Iebq?mz^Ff`(>=`*2LeE
z?WV(TYv{7u#@_phevfM7_Ea0JH29v4E;};@b9!O}q5xZ1DE7oynVD4zYkLfqJ(<FT
zMI=5&gg^(&o*HZ8Tk<H-A`4*IYhz`PkOx_xBeP-I>rA__@5G6pktXD;|7~A^G{t(?
zmSuGo+akTI%d@(R?Y9Y4X1ONItr4n>Qe(_TfQLp-FOE6tM(RgyrGA&?_;M{mqGHQD
zf4)Veuh{~5uK~973-W17UJlDrvmM;MgI`4C4Dl{6zf+)+r(@p4{<`(+*MnK1VjhO2
zv1^_jJx1$1et^IiLAZSr=DDKOJjb3g&81V*9QeCdi}6Q4<02BtKXpNy!e+7tBw~xT
zH$A6eAQowk=?vjg+Yx<?xJsv<l`Xc5URPyBB5IS%YEnw@^qkggtv+1g4%C$unl9z?
z=<$q0`sG77qLbv~i%f5Hl$+RC)KNIMm89p?_lC2YV!FJt%urVAoUCYTfs5Z@2yroi
z!bF7g3+qH}ahuH%5Q)tuL_h-&EVh<)tE44aWkV$<MMhoB#OKTTYK5@S@3pQ184;7+
ztk<ODEF|#_q)`R(Npc>e76O!+$0%({avlSnax{(mcW^r&k%^1s`{m?^gbJ|1<u}HF
z^OP#vNPaz2AU}0Vk=_QLC(CJ^5r}g(te4WiaH8V}juQ_L9B|&Em90Q$u3S)U54Eo-
zuUcd);HvpzwccrrmJSXKEdd+2cqoe0E)__#8iOSZntZwL3V}c(my{LcI*mH8wZfV~
z^QjuPnFrexj@g6Lbfmo(Xzko&ftOJp0<GF-mIwUVr5US<Y>lqOYA%hK1I>#|bGizQ
zIXRCBGYyB=$jkwqFBFe?B497!S4))&e`RJK+>cNvfmLgZKM*U&_Gid!2!nvOkF$==
zmdI=ox%(kdEYeEIKZ+DcI`YZ#(F0&qX%`deD;U3L34}ie`Gn6>GaeYxaReqrOmq;F
zC0fTsfmRZY1{@jrt~n|j!M8fX8TQ7g-`B99IM!8UDQ>9uRL{r`Hsu(z*A(SAZQ){b
z2KY&$v&(JH?4UOAjj}eF-BWDSWmWsi=4jo$lwhn2l{$-hskqD#w_*ri8YMx<<f*7k
z?2Ap{$^18e?F<)%9I^bc!Xs1X7%XL3W?%jMqF7s=p)mA-D5$>@{4^~;>dGi0pHn&&
zLV-FM_lNqb{ifWejMi=We-^1|x{`1{Kt6?Q5gbv@ar-|*fpZYORbS$pQR&g+txhjJ
z*YzZR#`EwqEGxJJq1=G1;3n1_<SA;tMt)&2b^~4Tot)%5ZOM0L)9;){=nyDW%p2Be
ztPndy>o$^FOUh~;bCPSrPlw6%O0YfrR2W=}RFX5miL>Bpawh%VB}gSELVix!^&Ll-
zDbMdkem={h<Dk5R<zTa!JVhKHaPp{t`~>nM@a-YrCO0kuTgi|105e#;7&%Gax&gG2
zr#FC3P`!bC090<E`J{_=3zm-^g;%t+PPGB1oK{V>?_P|)qC6i4JGFkQKdo|IpunsT
zS!A7)3W8P{1QXn5$@gm%wxG_M=T*zC!O_+!1&|jOgDWvBdP~xd5<)=zU4o7%&+jQk
zM-=DxAT?)^^t)+#JjuEpeI46L=aUEnD{8-O^y=HNo#*Yao`YaEI*NY8($eQ&luDYI
z;7gKBNhkT0ax`Yl3p;pezD*^OS%bY^Q(@S_l?Ap{X2CmSKD^=kH<m_b4fOg<1z8TR
z#J{Z~GJBvGT_;iyyd&WN6nWAWnzSpTVWY!Ho}fyPX8MhGqe!7nI}i&~34#FYYSx?R
z57^SNy(<p?lmu=7=>RTAG4ux|qEeF^)e%F?2ig>3gc#Lv0g5fXOKuiC%$IUR%18JX
z`CZ^dEfw~HbqdyZ4%Wxm&{A`*9gbqBoie6H&k4@oOCW>>YzgIMd&%3C>4*Y(dnP&K
zF1dyOh*BgZ9u}D8cTw}5k=2AXU~faZrYE_8GtQ=2=&Qu}EG$DwuJJtSA=fLw4&ReL
z0M4Suv*azH^DLM}9%uB1i(x%7>?tVcDKCN{go#R2A(NwOE4f>nYbpwWdZPqUj4IKz
zN>r^n{{{BcEpnUiM4Ff*l3ypZ$!`H0)it9}JOJz7!fHZ)hIP~VDH#~2U<{6-YU2Fg
z(S_*whvcZn3YKM+=7q_7Okz}yd<8fUAb07=tyBZo$wfl>395c_2Svy2z=u)EU#U2L
zG}`D}FIq=C6zDSG1KP7RZgUb}v8{A`?F`0>l;R&f9A8OgJ3*Pc*&L~@E=HKK_aZ}k
zyE_gH=c2sx|0!H?^SsMHZr_oy_Uflr-9i52*?F10+i!Sk;i~7aUEShC&)tq5=-fY?
zlQ-{Br-6K<<M@j5g=_mOm(;r#Jq<)B=R9%a&cUqgq04W0aFC(3EAc(tM?MJQ$z}B8
z99kY3ivvcC#hj*?JXVO0M^IH~&F`<34W3$Fl1UCr%t522Brj9?vaWyq(P<SUEq-7q
zFd96~PGQcpMO%-wl+7wN58U<B5sYlv_rzjX-@K8$Xu+s^{;n3YHMhYVYT7v?JG%Cn
zy<8FJ6jz!y``NRH7Zms#=H(CFd2Dl-nrA9lUtlEq04?`XmL<vj%p7JXhEw1sgO*Wl
zFXL&7oRi{E5``$1i3<&0l{S>&C(;czpH>}oYDXKGd!x-u-Rp4b9ptj2xz(1mw9<i9
zMVU=SnR0z;ZAZ9pZWUd&vM`(~Lz+AVPN~|PXSTpON$M<ENnhvssB4cGK0~;X{_TxT
z+xsK>P>J1M64Jx_rbc)V7c{%QG^C^YLzDOpLU%7q!sNP`fRZvPt8r3M*kjC*G3=G`
zq{`sV!1VSy1Ez2l`ip1RWTc5|gzn~!ft-#@yDVbO;#)u4*LGQtOCTCL^ziJ?l~x2p
zlzn~XqHKS<NX<X%?LWG}Ss67)`nNWWtj8{)a%<J?du8iu<n7;Y&tH6E#)=mYO)JWU
z+n)RGk*nll6)o4EB5y_av1icIc<LCN0eUQFD--1j%oLUnU)p4Ev563_)S%97%+j$p
z3*)fN);h5adwclkU`D!hj!-7RiOl-gxxP76fovESu!&H8EU7oZd)c>9KDs<6)pQXs
zGbd@BRPeXnQSJ-ZZnlNkJkYN(V{tAAq^U%Rk>^yiZ~Jc>vcnsx(@M!l+^t?qxefau
znJb;On!FP~o{SG>O*-F02^8Oc+fzS2N!C5}<5Rb)uph9${`XCGfckp@(&1I|ERH7g
z_nF62lqd7sU|){vz$V`4$H=Feb2sr3X*#l!ED&(eG^`tYcXV~-=<3(nrA{&O5%P}2
zC2ddIfFy3j?D#o2qtf|wlTqlCXN3@J9+ZdszvN3e95Mg%&-r2wN5Thpk=t%3w}B0}
zBd>!WwE=<%Xh}ZFXRg4H=l_IyQE$?2l9kUH!d|Ch+Q|TIIiEZ@R+#COJygcNbTEL_
zv}@8-uj|7^>HcbL=eadCSCpzE`Zv@(O*^s^sqWN7h`0298JGXpG@dM=dz*-AsDnn<
zLRJB13HAmRUkM5q4#w$_(ji2so}zOT76HzZ(fgD2t4a@4pId|NtT|8`%wekEG5TPK
zCZc+isy^+ne6Az*HWATuGVq^D81QVinU2XvpI<-<L2*=Kl|V_9NuCJz40v{@CaQW(
zAAkV<KR#FH*S`S)>_Y0$ciS|4;w@d6DA`|iZaKEQdVi@ZtbbdTrfEZJsrtzq@NC$p
z5PmxpjiPiK!~lp$!V)U*3Z2T3z_Um19etn+0{ME5oy-3y*+NY7_2~UbbsNO&tyr*h
zUp2P--11}t5HlKnd*TOt9v-FPmpG}4X}CGSnIaV15pm-4*4vFJ=I+Zn|H=t899a}G
zRJh6aEItH}oPQPopBZ>u<%X;U;qxzEjmEP2+!zLowsj1RMqnEcFm2d5DFRUvvBb`i
zvz<&w6Zius&c8x^i5l(e(IUiWA>VUX7+_obV3pwoS%z{K`HmSb*=QbEXEOqff``Td
zj>CC)IfDZp%Zd_I-%?RtV^qG!BvSai^H0J`fs3h>MkLuBnh%i}s}hY}bN&UUJ>Y@u
zC2>eV9LlJE2up}erGg=U3{VysoM;TTs31lll`z!RpM{1YF0hfpM&N=(Lh}*7nS6()
z5Ul>{^Dn@Lxk&;sV}RmO_f#HDu|JO)8Enq4^X&PL<t`=7ucP-R2aDH^>VA!l#dZZf
zM3CC#*zp=CGB(3^Igqct6ihVRK}t^KY2GAuXBg24kbfolP+=EO<a4SOW&rTg#5N_x
zo1NqhN#0aAW#|=?7=QHs)UYVsS9N}Y%%!9lwv7cqH8y}egMTm<15-(7Jg2=FCagl$
zriFR^(>Uy!uzrCg=s*y{AknGd;N#=?4QfL}ex!+LJHoLk6gqAiSCB^YDOiaA8~HaU
zLdS<n){S0R_d@fc{DEFBs<LNjhz0yiFM^m15`#)k)y^hW#=3m1$4qdu7IU-`nTpHj
z3i!-idOx-wJIpR*F;?Oe67e!Ik?k}==@3+*V;bo+Ce!L-uA0iUiV&oyoY2ma+3nbV
z>0&15>S7KbD35*U;o009)H=G2zp{ncW1Q2l4L$23*;i9-pcl)-iYQ4>oY2fnlPa{*
zDM?u`V_Ff)L>#J}#6485ScnUsZiiwBN;WV8`~tK9ZmclB{1>TOD&kZkybCbHhip90
zhfq=$Y&bs&F}j_<(79x9h5KCXSUXC(nJJh7zoEkN(qHT*VI`uxFvaX^R3lo=hOefk
znoaf#%H9BJ7PwfyBvmvQW3-EORH<oN(4Oy+W9-_ftWy}uLJ+l9s8mR~{4{(@*PT=w
zWR6@%R)gHTf^8?{+7vS~{g}Z;#$cL)?Qg+!VaLWzEkS#MM~>rlQCWvDGmM}b2$Nh&
zv+U%KzAXt;qs+6MW19pMl^=K$`|og{6{79YrY4<bET}G^AN<CWT^q<K4trG!qe4Js
zp{4FiGCgW|FGTV$AR_y3RAySZ2bJo~;?VR8FT9j!E#lETCvyl*C-e+=@ONRFnuYib
zp3IEvSIbRGA+ig%QTL^Erd&dRlwUwZZck?Kq-?n<nC_m;QV8og>@xH+_I=55&Sa8R
zCKJg{NSFFU&#JhRbAnUZ-QC7H$qBS?1$ksbX4PDJt;A_(GSueB<M~u}TEsV&6%}Fq
z#KtieH<uZE6S6x`ZV6+NH!IAV%`fuhN}cqxo|UBv&H-*iPfs`Z0LR<1nVU;~Ea3sM
zNX$h>U-Hz<%FQn<%+H-w<6$Ln=waV`Q5?|m1lJehu*YtuQeGQG&riX?n@WI9^U`x{
z9Nmz@VLS^qZ%R|(J~}D(p|u*bi2NLMUIYt-Cl-?5@<qTn6^k)EI2fGM1N5vuK2S2i
z#4(i09FS}pd=auEh|(a@!+AZ8k6Yk^5-jsbFq~Raz;+7Lo{6}#4IG<NuBT`F5|vS5
z&oo3EiFP`*aEc7czJqv|{VF`kHD?Mq2tNdu8M8jM%veo}^ZR=_)EcB!E&v-TO7u*m
z4QGT+FFw@REm0e4^R-@+iW5;%gh>&Jrq8pGKGc|&(Bo$^@nye~TpITJYKZx@oQfWZ
z`L&!t+tx;UAYcBg1AQ_tfM2MAbKwwA(uW$){}*@=!v$>7Ob_DAe|3<v@rkSgex~8M
zV0c40=mv5Xcr0;@(sf;s`T8-HJ4>t0bP$9ytkq^YRsS_)IpIx~K_79!U&@D}Iq@xf
zKRX7$FS<yKT}E+Dn+8oVFi<A__aa%*F!Cgoqjf^gR?Lh5Tg{@HvZ>i!kNl%PmdoLB
z%4?qQJo(A)iRoMMC44)-YSZjm+1@*+20mXlQ&{8{sZ?5Nem=x^IfVCZ2rm`AB?%om
zmWc;VCDxXiIgFJR1tR+mfJ7JGxTs7#=hXXKwmiK)Q#=P?^U{ct;mV2?ojGaq0H*eo
z_z5lr96JVK={T~u7>s_r`Ohc1x=#FgGdk=1)vcEeMk0fkwxY9M19FQ`lL9H3E9p<z
z3AhK%o?_jiOu;xMS<)mDf>#P>Ryx|+3ujh1rlCCuFqhA*<fYNk+>%k<7M=+QLvZXC
z#_z0Lb)sX#%8Jz|IybC9ze%(3OIHoV#g=N%#L#ZNo#};Ep@Ps#!!c%$L&epqhA>W~
z+pk0-n?O3e67HRPcJ=pc_?4h!3Uj7K%1h%Fm18F$EcH8P72>0^i-jn=9V1LG#RQm8
z7D%AjRrss$N=|8$2};{IA=(?I5TUgekx8c&N`lF6M#aMk%h5-r=gW{UEN!0B1@)ea
zBG<HrG8K4a<L+%47GBLmbBgEGxEe3Lf4F>+Te~h~<EFi?`Ch$Y?jiI)7G3q~t6LY$
zjSXzAMcU6D%&_iVv?Zf&|BS6)o}Cl)yy@~6C1Vt?V$H%H$Ikq3ekQBh55KT<=?jP3
zQ@<Z%b*(OsukOyu>Ruf$U)`03TsHAB^&4M9JzW!zukDUx^{l0`ZmnPqV$WiC!u5w>
zSy>sZJXR&EmDSIh524w{+Q&N1x|wwk>v2j)O69Ot$f>9&#Q*Vn;<udt;ToTCZU6tH
zd?E};yIZgKc=USr{nS6y&DE)k*{MgK)WzsbH}lMWb*gAM^|mclf?k=rI=?IR5KT{A
zjdrG<B7#&Ixj$9y!>NbZJiW_BU2~ZS?&{?4rsVH6$zSmP@4RqT@>f6QdFrof%Dpi8
zOOM++IBw<my>u?Lq<%B$YReqWCf!NHvXruy3RMYLY4B>s$fnCG2QO>Z3j8YFkADgF
zISIB^BJz1d^*J`K5%}0VXH9<b)}@`wVUj$1xzh)*o$<vD-rCKl`^b~eeE5w-x?V39
zYICQT{1;S&`>Xx&<%gTj-;3Ym@G!8E$7t9>zYW`Of!3<i{`5g;x|6`I(lOB5e+#nF
z!4D@vhFm)ZGQe^qzQ_Iz;fhVrfirEVPk<AhlDeh{pr6wX7i}HsRNBeWB~-)waaf%)
z$?y#y>}Wl9$r5j!M8%gnf(0$};>T~7DbbH<AeJ3&Bws;yIX$nA(ed>wcfPu-(v;m0
zSfLT9Y+jq{#;fk5;=3gNjXr}(8QL+qGLQ)%S?JS_B4j*!Dm7rh+PZtD7xw2V1q6>D
z?!Kf??X*}GGF)NA(iD10X(c~REA-`98*57xIe%Zf$mv6aBTJ|>s?XMT9GH`Xu(|Bn
zdKH2qZG#P8&Fsi%Ut2>03{CcDJi(@6${33mH`b3)sv9T4!bzogMb}RTMP$&IR`Gc;
z29Q!kHVp{7?(RMs^6=h{1H(B8&Sekl2~OK!BX}PI(y^wNL?}SEG4PUg5FSn9C-k<d
zGy;=-8X<!vi9`j2rinC26DeOIP^788e5q>ftQJ$fNWmupC4E&{bzwbQBoq2`tPPMz
z>7O+$a(YulI@9*tYbtk+dAVHR$Z%-0YBLs|p@_7m<}zeAL!-ps$eY1K7((p|%(TbT
zSbktY=ZcKRsJL}NtZ*4+T8&sC;^9(MV;RV5?`o{iT=&B|zR~VgsSOw#6Za_fHMw~U
z{ZuSNivH`+y~t<mt+d7B|KfLoO#7d_NwB`(b`xRr`REbk0DCQUUJp274z1GXfK`e=
z%ig!#-vb_#;{Uky0Qm*-=>cZnvK~rZZ4lOU#=dfreHeR+X#t0z6;lz$dxi02dDZHe
z=-<-Ybnu8ND8oLaeN*yjKNWHfdxGyueBu4MFG;CzqpTK4r}ePy7;93_=HGRBMdE2P
zkwB%lsk|;{ZamlNte#t9Dk;p87IT%tbe+j<aCx1%Ww}mA<;<eeg(m#ZB7sOEa+*~-
zrOHzp$(dQ}6RB;At~8;PklOt^y<Fjn=Z5>LymY!d2-`~Z2$~1!C}qxEra0B2dE}u}
z_a7v5Xc>o(3$&uExMqUAc2tLas+5uk^_31sr5-FySJQO`VO@S$7p3oGR0Jud1?}5n
z1e8`Yng@`Ko9~m#@aYJK>|(3Lrvdwh`z7gkKhDM1iBxysT5_F~|2@V*KjlloIxv^V
z|0h?>eUYZ+V%UZRwjpQic$s=>fRpAnf3w_Y`NK&<gXeICIFAs`gAiYb-AeuwD8Z{r
z>2n&tLg~{yCrX|R#UUR(4(k)qeZ!pb!0oCzW=0-B1U&K>2unx*$wOseF8PrZ0qm$q
zCm<dBt29dR!2!m0WG<dS{=vSBwm*R1lbf)4%5z89cb#Pca0)wytY)_{wh5>eymNi#
zDRvuK26++~;4_kb#z{V<{+dpOuLlM2AL=#m2kKSGzrEOA<j?s1kl!gQfiZ=Fb?gcW
z+AV2a(=}$nRoB>!!b|6COrjU@`;$t7NxFh|wh&cwOq1)%0M@Z9q|@#d%$l#!ORj&~
z=9lbSr?E=j;+S;m4`q^X^r{b~(r?Cf8c))8@)ztaC+7;hP_Hq7YTaR-#&1kVQLQUe
zs|}dMQ+Bnd^;u4((wU{#Guy!N{eBoiZXeT6B^#NduR-2JbuPG{ge_pGhH4?hl>Ubc
zcD9^T`Y_c>SfAW%lI4@N9)R@`b_|u^_t7VI)DmKij_;QdMdPe&G3Nw|6F!?YXcVK@
zvR&0n@cSrC3_*)jY6;Rx3&;!CV$+dp*pV>}P;zajgR#ZvXdp2}r1j|pC`#CZI+I_^
z!+5j1bwU)Ru_X~19-!19TE9i6_UBt$uc|PLBpeY(Qs8Fv?HghJdtv=*7L$Y7Ku2Gr
zf@d*qqDtgaTEoFja|v(`03usWIS(W3VN-TK{-7b#uJGj36^e`%SG8L6{pw13jO33d
zkj%vERNNGtV@<j_h7qF_$WF`1_ocukJN@#pYpywVH8ZB%@O>lmJ{%8LX6s`{gyehh
zeflHdB(J94znXskAhrs*gk8hfSxC$gGjhpY<R8Ef*eVdE;)$7IeR5bIHA-k(%`l3{
zWu!@V+;Q4L9zAvp<dDz9_ZpLM!uN0{x`7!n9fI#1l7ZKsC!YhkN5}A?;G@riAv#Q~
z(l8=C1VK9_rT?7>Up{#?d_RjC!_=Oy0lXn4GhU``Kv^boGlcD*EEQ}sJXuJi7d<d^
zR>1aD&MdYSM_hu{0x{0#3*g)zV9SRy`>K6XS8;|92U4XpOo<Jw6|lbAWPR+ZxjrBz
zfe$wu<Z7vykEQb$64^!Nw&JcV8C!UET__A|0k|)t*d_H<_hk;#^9HF$ki=bZycjRG
z7gUZJ+4Z_grukg)u-;YL9&nUp>bF|0?ktDNA0%H5x8|8O!7^87ORh;1D9teWasyT$
z6}OA^C7A&pgYZ&u<fz$8cYWsda(d1Ji4Vx@kt-69QoeWq_65ZWW@PboQu0pe^->9P
zh`j!aE3UYd@gM#-`4auEf#NX=TPHh-F^3(?q<_N7B7j_hava&!?jCP`x4YCU<)Eig
zp3BZfPa{0Li;I>kb6TRB{CrKcB}b{OK+2WMa-@Q>olLw>9-`ae(R~F4Y>JtXjX*lO
zz<!+^G|R95^itqDd6J?V#dEndFY#%vE21z!V^$6#laeN>63D<uPbzL#koylDIJ=L0
z;_O+bjen6ZAZrp2)BQ(@K~XD}*F6@AMV%JLtc-|)KUH?4x3L`**eF2FwzQL~MU`Ft
z+=|9&-WXC!5Ns?5#JtlQDSZt9YHS4g4_qfGNC*xUt-%>1Vgxd@e0bTRrbG0<_{@Dn
zd-o3QrT>NBY{xbux3fp-xhBfYHPl4IW{hYcgMyC{sZxyL?$XXIiNlT}QUcz2N;}}4
z6>paZqD3}eZPa)KnDz3E<jrAVfpy=3{|kAIoB3;XXGW1UM5dBZb;H`6RybM-DTce~
zI}`gsIb<xGuQIGV0tmg_<__EZm0|5+6~#|yF%Mi*w6s4rV{8J^h5X6rCX<0FsDXv{
zaGW{SZhfwH_E5i0lFi@2cI8&PO$GY7Lo?DOT%8@qk7xIkSS5m^g}c+*;H6C_I$p3J
z#oUaoMB)chh<=l}j@CueF)?w-q;@)5CuI|kz9AN&aw++)kX$1m|C=tt;N;~Jf=h+J
z@U%J&@5sW1SEbPxOPA8~uV?fl<l4kzj7$or6<HJtQ%JV>bo$J*${gVwa{lh!AYcbJ
z@=f~vVQd+4mfcRzdvvEFXMbrrx@s7o_5IL3*o)LVi?Az@1?)OHo>p?r;8@rkI5i-7
znT-*G&GwYEWeUw9HtsZGR~U0!!r|r|<A#h-C_wS?omeH>!p=zA)=yq9$Ja78y_Btk
z%VbEa@fzTgtZ{}kaB&v(_N<L7xmU1-uJX{(aM}TGX4iJ?bzP=iskCS6bYX{5=?H_e
zQ0JP;KwVV7WP0VA&JgU!O{0GYZzi6jaf3V?BS6-=`OhY%k?-yw`1YHAdhR?h`Z@SC
z@$5MM@NU|Pwe!h$z8%=Vzn?y@JTv+^a)06(_zr*UEhk+cD>3bwbqf*E(kt2$&ys)o
zW?<j`esa#<z5U;O1L<}KJB-}MZldW%?LDaIh75m#M@*SG+i4PIHf9lQ+*8t?iOVvA
zp^S~j+~#n&CD%yXK#(I~cj6mrZ;2=4`vm|K;4eBQz8_p>Qvv=cDU<+>8l6fV4rdDF
z95%|E#zO^A4$U{^r|U&Jb!Iq|FXwP^SdMTwX@s!A{D_#1N}QDru9&Yj)Ys`XX=1Lk
z%E?VbFsXws))*S<#X2Eh%ym^Vy2y5N2Xa&5JzC#JTegnda$6@{+b<T2E2+-~|J3Rf
z3Y}K*C#_Z?*J~8OWsTZp+ECo%%aaiCfHmfjX)`N4zFaX;N&aNhDby4HJ|<idqpKpz
zVAC6{gga_<R)h^!z5f4W?z_X|s*b*O+xFh>c5UxXTh&&*ta|UVdbKTg8~1Kwa0O!<
zY-4&S1VS+oS|B9!mJnJXq(MT!7y<!|boHHkcUM};BJh6i_s946kyUKnJ7><!oH<i|
zLpD4^1!xSxX!|Mb%6KK0F&@xBu<KUI+3f0noLQw{v#PNNh^y52&CpWt7s+>waM2G;
zUmD*xvR;vf>UAb-M2jH5z3lT3-dyf{kq{H_gFo(v8i$|#{XdC6%3KBZYg@<0TCcSi
zxMb7QX}?5wF^aGc(h%63_7JU&s>l8f`Whnx+YWwai~o$on;|yPH%;4<=emX7BK`Kx
zx9+9>?R9h`qXzpfktHYbon|M_lhKz5qelAmKL>6<aqx=M9ea0io|1k=es}1KQyqJE
zv$1#Yd??)=cBeNjy5r$=PuP>*yeRG)y@X!NXvDsa>oZwt95(57C{Fhv=n-mtju)WM
zAR}ag-gu}1tnU-7T;?pWpKco)YddW(aLT|lMhGq=2iPq(Ww*!ya3SC{g%~oC7#vQo
zeYc&qJ!zpHS_y2xZ_y5T6|D^X|6p1I_k^;b$(g4};;u#o1OU%N#?<<ZS500OOC-V#
zlIOjPvmAML0R|gNB@&Eg&U54z%JY^qK`<s);A**C$QNUn8fFQkTp_r%Lvo8n9VoMN
ziH|rUT$`Q~R!1}RFv7FwSsWIh4QP8E(6)nC0(=B#GWrGX-?QV^skkc%F_y&3!65=h
zxN=Fln|(nU3I$}2%5b{5cu{6kAB`no{Tp_er8*VP6Vb4J<S1l|<2{vLL{mo^LYYHV
z&cSxAQA`VX**rFvw2v>L{m@yu2*`jqexr=UwI%Ux=y>F4_(7rCB+)sADx=8gqNNi>
z&=WUHj4HlYCow7c9_mi@8d%3oU>)MrDTg!o-&C+69t(lq@l=L1w(`DAPgNLv?q_K&
zQhI^LB4g4@wBcG`;b^5*8>#gbj8#~PeQHmhzDwcCGbQBbP4J#mv}j_ENpjy384+sk
z8hk2y5swG9A?h%N^c>85%*^l$4MICDN|<;YsXSfnE3!gf;`IVP4{8L@Bxzp>Xt&Lc
zPt1mjQg;J~ix^xEn<vD@-mpn0Rf<JiA>FJD1~O#kLZ8}D)Rz~o)?mM8GFWU@eWNeL
z;c>VTY7fG-{_K$&m)R7*hrR;d`zW0Y?%pI?>72Pa;?%Xx<WZpSIVyojuMj9C;70mZ
zGr3N>ro^N1870POqetfuXs}0k91%FIyk?OYmQOYFI9iQS9jI^@Ow_r=f=|GDUq<`k
zE5UmuGjTdHNJxr26)c3VRzys3)?H=7WVpd-Kh}JVrjX#OjAASCJII}G&=5a|?@o(9
z3)v5NXG+#M#R0Ua2PQ@#gp)H7C>YTFc*yARu{F)ks#3P;n3?X!^(grwsZ5y8a~#X<
z=JGKbAJ;mK4pVO%`MN^Aj{Iau=W&R;p+EA;e&*-F8q7earHS|AbTT=S`l3CGOr1s~
zr;8XWrb5p%UX|UB^C9e8lS8mtjH>0tpP@erDg1YG|E092skz{!49$R2kyac0g@kjc
z7#p-3Q}H+)Iu90Tij2j%42_=6hZz-irlL+b&K*a;(Q_EAY6)Ij_%8u3DqM>1Sxi3v
zJwWS&KxPG$%*I1DGMp;Q3&0QlZQruZ0tqB%Kw@<TD(8`63Kq$Es-~>G`YCpzzyB8S
zjAy_zNPCP^vXQ7giCE`^mei{c^MzO#W0ugQygm1=I4s~`nHUqx<VyEpizfN(eO%rI
zoB#F44EAn@h}k0pn!gkI64?!WtVF*H6ak0*-0;QR@9aCEq8%Tjz(rCiC}&A!^(x3n
z26O>YSSb&Rhk&nqN|j5?!*1S8tlB(C0_02088a@EOPyhoN=-9A0B^q?(9x4ZhZVw+
zWQ>3!0Gj(<|1flV_&V_R45cFeN{f%8gQ$=DZwXJ%rvP;DQQ2nb&}QPz#QW3<f}o+<
zA5a9ved8E`rLCHNhwNLYCvJ`LwlFk~$4qJ}?k7`XNf_pM+%geUwR(_;)14kZS0Ysi
z)mB_@)8iVG#^Sc9VFWe1^j5t{sZ)wvVHb<V=CHVIzSV$t&_sMTgTtq@O)8lV=dtN1
z#^9@!dcBy>7cx<lLDMUg8UX`CF*-}A5a}&AkAcxK8VW&t2@d4s3v@l=#-640BAH!J
zlsH77Yfv_><)>%6)3NIq*?rq<gY`iP6Wgh?$>=g?zO7_^cSxN#TnYS_Uf`SGk?_qa
z{}mRkAA9CPJvMxJ@XId-XMEG=lfG#><(y*Ve~sk+n)FTK3)9aoU2!z`bJ8`<J9n<{
z(4n+Me^nax42450PId)QDAtI0rbjc`lp#yZlud%hQc&n|gbCzO*-&Bn(5iojwgsQq
zcVuirvHtFffWCZb)mN1VUf4#Ur?~lzJ~0fT67xw0D{tK$OJA^*_GQ=i5H+ZXXxX%@
zyWx3n>&B|Q6@68T=sQDqZ7E0psR>rO`8tN&#nc-s^yIYVxUFtZOGD2Anz^KvNSS*}
zPZ@k`C417}Zd{VD#Qlxg(@_knU3d42aMht#c1?Xd@g~&sMBWPpeapP|x~Q2DSmD1E
ztvuGa{8xvYkWDv2`v@|;GktFQJbD^?knBwt`{y*}&#f{_nL2$LTgp&{3v2w{x9_O-
zwQsJe9k1|9rBZsV{rr`C-aKBv^cmvwn{WMd@ftBy$7X1qDo*3+zg{_b?L>~rX%ewF
zG>^^<n_jbIMH~--tTXAMeM;ef%!1fPNc)}yCL~8E0E3&%@uV~<Q#B{(&K}~Hy{{dv
z3J+d>=QE3owq&8^+HJl1kjIJp>0%kqR-2>6Y)&URe%co8uN%96cU7Qkb49eX#A{OX
zxB~3erK@{y|7hQqKRtGQaVDfvmhK$M!&rRgUXg?W!L0s8E0=P}Y1A!e{<MGi`sF!d
ztzIi;VdQ=R8Kdo><`jDtm{UyhZegK1HbIufbnR~bZYy-;@()fnt$CIB`|SjLu`s>b
zeCET0{b!cte*Z1{hefykecuDb8}DvdSb|{k_KA*AGEdGW7snGIZ~#K|i32_d66+)I
z3*k2oY?k^Pa^Q*k2<MWUS7b+bzjDPJ8B=Q%FF+6P+-52EtI_u^bY+elY45#tQyFyR
z`MABB0*ZAZ-rr$|BGeFOs$;8S@&P4W79=8a==s3ZBTA&|Rp^%Ipp)cW<-+Onm==2!
z&=gFu7PCFuGh@gC`fzY&%#0PvW2<AUYa1_HTq&8nx$wwU$I3SU?wU4V*Up=so>=qP
z-WX41mLrRyNA9ax-&>h(6T%fOheoo(Lx(%yON%<g^443vIJNGrM^7xtt~&Jc&Z-U{
zk1glC`L4t7h-0W{PJfAxV-Jz@QfKF2!O781b5Jo8Q2zAP4tXm2h@(jEuFDTs)L*l{
z!dbmI&tK*g*Bp6yd&Q>VCPTT@$dfpWhH8p>a@8v*-pBu4v83FPp5K!n?JV|7**IIq
zdAq1REb|Xu(O158tX?IK6jfN7Pp&J+9l7RV4G-9IQ*NEJq4g0@<sy%}KG&eKIQb0n
zw1%c3;sjcez~m!)`;e5tC@iCpiOBq{o(}yp4E;+<$Z{bjJG<}F4pUZ!6A#eEQaPJr
z6h({J*zHJ_68!^F^(vvPY`tPU2LMSxw!dTZnR_Vd$FROd4y@zVgsvU~x>}q@br;TH
zY{w(8iJ1w=45CWd6j(rw=~z~WG+U#|E^W_V`ryu3sBd3W{pKvg4GIM!f_@cSHg)sv
zcTcvgc>^-uTe~L{vo>t+(FeT_QkMa}K$nZy=yz*XJc-z>6}6uE@UpR+S4DMd;MGWv
zPCZ&*-FMfg`_DrD4>l|Ck{!d*IeJXl*l7Zs3n#E!fjlZGs{^j2qzg=sKzb(SS~BA)
zuIK1N7BnK}Z0Bgj=b?`8_dwqeHIqu54TYimd1~Qz?=v_wp7e9MNAk(kDR>nU6iTM9
zhR1~BxGyy{{Wa{0W3-bsXfkSgEp<YE3t^WrZMloss3j|ADO!{TPRConzrL!ZIo+XT
zXSA-P=DAk`I`?4rQ?*%%QO`+U8mRG?6yQ6Fnn|UmAQC*89KQ}dm}Ly%|F*XEFU`{j
z?0TM!E|$nxY_rhUpngS>nXdCnprs$V!F};Pp4-__OHADdAxMct2Tf$v`D7TAL)#@1
zGa-cLwG+=7T|AD{G}Wz=!wQvRYCBjFl(u&IJpB<Md;a+S$eJj{vMy9}H~S_1k^3$!
zWMVbH8qe#GW$>(n%Pz@Td8$(>SOTF-*uspuKxC*c%pQiYVHRqN<v3d#D$>WWTQ2lQ
zA3wa!T{lrsxxC6;clDo+Aia|}OkCaTEV|^@VZ<@{hqZSt4+R$Ayb8&Q=L!j8EjAA5
z^Cs?Zad^Uo6=VjoP>hY=w^wV8BNC24ELO06M;j16rz|dfTmz{r%sUcDg%JovCjfCX
z7=%y6DBWSr=nmSqD26Sfa0%VId^NH&EslG29{U-vJM1(WRZW|;Cwg<DXAzof7g4Co
z*S)8u>*V@I@#J$z3=S;X-PnF?U9%MW^zuKRY@An73133iPDWSVIPz5Q$z?g&OHcK~
z>j&=s*JbldD9Q7piMWj(r0|fU3)Fcg;skMrbgo(_?sIzh_|Q#j@*H(*tA=h`oew@E
z@1P8&Tjy%Ao6X+N9XCC*Y|kqPD#m{W@o(AmtFp@5M;g|}l<a$m3%~8S`Qt-<r<Uh-
z-ty7GzSGNckqL9YS7kF++}*$7kB?uyG#ebsmp%xE|F)x{qO2)Abg2Ep>cp9gJw}~z
zp0os(xMk+ZC1V)K4>)o)D=LhuE_tvJ;%~ffb)@3T_pW>(pP0P($c10>G_EcgTsL(d
zekW)Aiq^Hy9<HC7{sE^APOF~wqOE|3Eb4we>t)UYAdw0h2RA46lMY*JS5=zUZMZu3
z(=GR}3VYkPH{cc?1b<S5|DIzs54(t|`yoUHo7}aF^Lj=JIecHJXLnum(e<4Qo?Sil
z_aO8KrHnX%J@_GMC-l?jk@vy-qp33`7an0xOL6h6kJkTwUH{QRf9}B6om&TTdzy+z
zYjfp7H6!Yp*swi+`1E)<@lO(ao+GohI3O0wnV2?KmpinpY{l{6e6KUwRo>9#$Z&{x
zo1A5SRp!wCrm-tVibLLLbG{+hsnA(;VhM>G2llK0>>1hrq+fV{^q7TMbAp&Uv7a25
zhyVtfPcfKz>+W2NDA3ow_o1&z9L3&?_z$HmA=aWd#-B~)@@6mAWMYeSPr%s-_p^P)
zN-K}2LAkz;;J}UwDT{suv0900RK%L2+O`pnP%|nKXOA6e^`bYw`R4Z|bWPeY(ADq3
zv-82TlMX_%6GBfn(&HG;N$1%r)>GJ`WM?1=;*7#~Y=84)OX<d2`!fc;FAC9+75YR1
z@ym9PM8iGXDm!o8R&6Tm44I*S+8n6x#f%YOY;BV(Jb2kHj|tkZeS6!6x9;6xq%(J!
zJhyJ+4PO1sM9;xqU%`%NcQ+haRmFzP9@8!sLo>4P=B}kr-?FF2ALj?4xfs|NU)t>4
zNO-<sMw1iZNjM%WQtt1F)UB(vmT$T9*>@&dFYhu5E`iYXOs*wr&DpVaRcnAHv#9w7
z9!D<b!Pp_OGy|BVD~W%6_xg$E?DdaqMP8Z=mX8+c^4Hw-{Kwn0nGPj}!4N|til2q#
z{yz+4)Q~pY>kK6hF;Xd@l!_SSsH3T)Ka$np_Ve60!y>U4rW4CciK$Xz-`@--*3SeA
zhR~@*U&(KeC?t|CCN2$O`FvA1O}z+*kQF*5A-2birkD-*NFM-y_-e3!ve~+ml-d*W
z13dtXdBj5yQ%-Cm?u8#zPBOTt23kT)%AswLe`-XD{1GdY*+oRdQ$)q9BNjdM&Qs8l
zSL6Qhm%xY21<&^-o*&2Vo-K7uxmi&{L%kOD!BQ2mx#K{8p#R3-t=#mdz9oE|!IMe3
z83nbj>Xj8Hed$Ei8K5CJG%)ps0=Wzj;FA-l8F~F%%67eSuySC@N&(802=ppppmjym
zSs6)RF0o6Xs#g<!ZGYly)>Dm`bKO=XFn78}B++PHKJ_vr6tQ96BW>#{b(-wXykK*o
zPskPVICO@L-8MG4tM~3*wV_qN*h0L6(_jvA8Soh&1n*sLiw$IFbQIeZCcA*eropIS
z<?7XWYi?WIedFdD1~er1$*5e^G%@`Jnibb4Xf7lgno?Le=RQipqR|YA;Zu6lO{=IP
z9@(M^DpuUQB<O2gwq<vI{jP})^Dtk=<VcuOUv5pXX-%cxnAaA}TH`<bHc!cOs!S3F
z%tzK^1%U$M_b8e(ez>XQnk{{W22FNb)+mp~W=NbSd1mLT>_AOWNkXS#Fb`L86TQHV
zK&QHZ{AN<M4D)>4i=5$jJP!&)5<YPNE8QkfdbY1arh9MxYiuDen02E<0So`Yxls;2
zK~EdDK{dZh@o2}IFZO$zRMH*&D%mdLU&*>)`tF3^Gncjbl--Sg&}QrMXy9bR-g0#M
zV!hdNU(<>m2TL3F_c{2AsWY|2<b4oU0}oU~*j7PyS>cLCuPwlpa;y;YEsyPM7>jIv
z<F1|UZtwVAn_iv*ubnyqub5=*+FWz+`OUdSbay<aVI=OujMxKdeDZuWhfVPohr~qL
zc%)4Nr=c@-z+*Q;Y4`QWeHH$~-D}z;8t<xY`^ww*cDkV}iSLQ4-?R}^?~*mRzpuFM
znGbh`+6#=a^(Pykj*{iI&can^7X5;Fk(hkFhIoMXHC6XpP25A(BWu%U>yh>Ut@`*@
z;`=-PTdnbhm$2YPb<c2G*7SLl#6A$GHO=}`*7ymLFbwpheVB9Cj8BP$sA&KcjEL0|
z4#2MbWq{u$o&M;OdatRl9p1_0($PTMn!-R=sjcq#+xu4EyFM>>cz4X#oNs2!^s>h^
zB7sC{iZ*(~y`?q=jj3_}Qdhd9D$r0EQECbrMvJo=Lkjd0q0M0vwd@?O)oIJS*HtZl
zXh&IO_(03(iIt6db#c>Zp`$n_qH$`Bb#8BEZa}Wgt?AFl{X#7@mvQ<7aPPbZtkaUT
zsqqr!xz*kJ8Dn=45%DJ9fL{|rG*)EM-gaM;)5_NIcxI(OXqKVK<ZE15#6^5lqe)Bq
z{k!|&VEtu7*%Ha9M#xdRa`dthiBW*sUyb9~oyU%VTL_1$P1Dnp*9)_eo~+*?2NTCd
zJ%D^Rbq`~<sRufGDMK)JbE4sgahd$G3J9r$8!I8S@=|zjNwS}(v^3e}Q~DI#H+4Pv
z0p8sRysopr4oD~qma6om9ZmQg@I3oKfr=yaq;G<wrK-%r8sE@eTVsxzrA6Mpo=!XT
zOwudCxIOQ07`tmj@tWU4^rL;Ji#V87`S>058UF>1T5@dCmK#62y6>vtpd#3qH6@8V
zE~cejeNETAd+BRX#b4K#c2?_*7tR#4lAaC8HwickH&A}F?Wg#uBoE>0nw6ENwZK#T
zY|AfJg}m+C;-2b1i{-!Lm`uZE#8lZnd|wOv)m&G#iE>qK>Z!j4p*NNI)NkPIN8$U(
z*;l|1SOaKar0GaYipNiU655}9C6WO3PfyHYL>m6%=E)cW3l2SXzl=CXyq-@?<^7WQ
zTz3C5;0Z9xpyQi(9^FUCAC5R;Mq`B?DnCn@2@LukdhaYG*C{{vKx(G)(rbuIureSs
z22yI%5a_RviqhFK;#zbC#gnWb=Sf`B=DC+}Q7t&I*KD|kVo`X8MV}PONoRg2kB-q4
zZUeb>YLu7J9wIlHjokSoEF+lN&aw;@SEMGL($OQW>DT~e%kIS*!8%O9!USfZ>u2x&
z2vrP6g)gY7N@(l-Sy;e$+HN7Q`)~1FuA2CDzbea^A%<>HXIVca(mXz`NAz35ueU+<
z;F_-nI|i=#Q)htxF{P7F-4c|u9ma(2-%IJfbjF{G6S080+tGmOw0-j31+<%ZkbKjO
zN>hH+dGrRLSI$H{8v5~g^g)i4;odpeefzd*Pur%Ns>RhonIs;K-u>qBh9yrEU)*x$
zqsn+RI+%M=Ec#9=7X9J2)l1{CXbOAy>o_(Y;AJAXiF|$E<bz7MG(t!f(7!6k>;9|I
z*;nEExL;5WbV^RmdP+;4ugLV&b@8LK3hswDQ|IEDIA+ur$XD1aX@ay6*u50s@HwN^
zsnyX_h7yo9lXN2#GPFD6y=-=}m(3o#Z-{JSGZl6(-&Rt)*}-6&Y<n+r`VBPJ4#k&>
zmxZsKH)|Vr-$J&s_3y5R>W0^Odye$C-F|#)cQ8L}FzV3>s+a95DsBvD`w#XqxI>Y3
z`*VP5lhlA~6qG_V@Y~M@@{jivFRix6w%<G2I&Kj&)8*IRC`IJbspj;iK=xp{t)aYh
z%#WFfzJi*}B_{{=|Ld;4^4v0o6f@m%$M=5;IWt$>v2x4m!W@zY1o(zH#UIyC;|~dx
z(w4%Ox?;J5WXm{UOHtQ~S+=Zy63TjDh8>v$dupJji`ap@b0stYk=T!bjvKIJROjp5
zoO~o@+R(*0iR677NAd%U`WEMR92^KV9QxHtW1fn^a8<9Uw%5C?Y(0->Qu^FXRUJdl
z6ROM+SJqg)cc?Y1GGvo;amGWL)gEzl#hLysfBo4gn^l{?zB^Ma9RcTHRoU-)n0%>R
znz!ou{*{~bRy~(R^34wD&7k<^o15P!kEBGSWO5l)%7hf`5d4n>=gJe!kz)_<^6Hu9
z=I+5DC0G;(OIJ8NQ}0M&E4YoPNE34Z1;5vLIMR`4AX_8bZX>zqcR?%efZ{%19yyl*
z`#JE1N+_>uPFN|m3xhV>5R&R0S)oredSWiAyVMr}zKqsiM4V!1HG+cL7IR+EQQF?!
zUh1gW_p9{-SC59zKBmudD!jdidQI(%I?eEitYqlY4u5Bf&DXxAHn+DnpKxiV0*Sz@
zSNj85r7cT#H?9566%F~zu5SM&@m);r&na`}jn_D7Y(6u7uj3JG;eTOIqy-XKuQS+O
ze2DCVq0e=A$S5K;Lp$&%R`K}$CVjR>g79T3o~<xLM`xaw{Iie2&K@|>?XLm8k4DJT
zYD#K3+@2a`I?CCPmbUL72(p-$@PtfQ;;YS$-7)!}veqMG*<#B7>F!?&6Ff|<>WkYP
z+w^%F9qcz*G(Xei97t)yLXy$Bc#*!CMz3c_7oQv%I?$|T8zHVK&(c_3gcpAEz&ABj
zKkq6W%*QzfUT$%DBewyCrq;9`9?i-cIot-xhuWQWD@vz6!d{u$+t)*NVEtq1=;%^%
zF2VFPaUb$2DoW#0r_n5ycbs9Qs?Id1IR<arP#Pgsv_!5jw=NnAZa<tqapcCk>P_cw
z-C}hfa<91by6&p>Owv+iMmh@&cik}fv!h#v8??lqutp2j9{^5nlmX5NQp)F_bK=Ah
zR0_CzzM9gZBW?$-7D9BPUGom{pwTT-vA_O<%EEq#rBny9Ki@R7I~KN9$V*p)-9bJk
zuHcHHe2I+MVN>y~IKdOkp?x@yupu9pwq5~tM+$a_+ucvf%R|#&AwS3NC$WLe$sjWz
zCqzb_sm>g#oY;dnlar*<p$JYF10#q0oP&t9HbtnZz|GHMpxkuHI}D5dx6q%sKTH1w
ziw3-IeI5%I7{XRdU2%}j{e|wq+gKUln|c&F5lxb_v>lQ;iZrG=H(?bkk<&$a`||@D
zo1E1q(g6eGsLaYQ*k3UDevlmTlI8~f!wFOfY(?ZETQRpB3{NT93C068QurNVeNpak
zg`;C2tJ;fW=a?mHZ(cldYAn=r#c$Vi9m~$!-%>pu6|y&++lY#+MqQo;{?-*PUUO~d
zrpr8K%@(No`1;EHHMfp#e*f0~qMY2q@X*2bNiFghYgtIAl0j5{hLo$Xz&;B|Y{mb6
z4lJ<Qd<Y5~+LD&730O8;>=%Qn7R??we<OpF)wi$H(d)L78*b8+lyljio01l;Z&wvm
zGrV^8fXHwWgIKt9(Urp?kz`yY2D{!*=^}gjJOZI{)WOs!>wL71ctkdSPar2kKb2nJ
zyEwCUW24hk**Dl%=_$&y7X%z)o`m7Z{rR%$wY4@+Ro`%5m4|N#T6`rz2W}B8Q+W(x
zYuP|f1@Lw3Mtj)m%9JQ196?J~simYRt8%<DU^P0koKm|^tkfwDaeI+RoPd9W<&yDX
zEZ&BjOJzGq_X1ALIs!Irrfo5ir%Ewz5$F&@z?j&E0v9-|Ux*`|Q%y9rbdT*D$#)Tq
zhCpV6R4o-S2GSYMs%2G{W`~w(;_-}1x0l6(pmj^=Vsq37y`)qQs31AesK@Um3hh1>
z8@9NZZ046mmvo24l0LxK;@Skw)92yOfDGi%+}US#IBA1Z+ANcGR4EHXAU~d2)*9ql
z9Zr#ksTc4xYPne>qqDx9rCBQzG1wd|oVlkYb#aFv^tGanpbTYl7`?y%OT2YCHM116
zIczq2z1x$zECDSo(Zg~tdJxEiDK*ZSv_h2Ak{aoRpB9Cy`f@YMO&YeI&r@j>PU+NZ
zJd@!U9}{1{u2ErI=}d&J;3C!5SXjpwk;Eu%-#?^OK&O!hRidd6lp&QW9PhE4{wMHX
zyHS{`S)|Zmz^w{NfGLXO-9$(?7nbwxzDhz6Z$QuBQ!*|j6aMZ_DTLokl;bEoqRbG!
zeG~EB6Qe?(1Y+Lw{^Q`e-w-E}P81?NLkb~S#)sxOJab}+!01Iz!B67Eq7OAR=G|oj
zdFmxY8KnV-%+7b^-MMb@b>pFop_60p3#BLuoh9}uEtRh7#nJI~xEeQfhGPX2S2lJW
zUscJ0S|xt+k~sYmaW#U2_fu81U|I2rnaTRvIl;_ue53@hvSBg=p-0%LTJ!1dEie2o
zRG?@1eMTF33lsR7!$o5;>z%hnn}T>v#q~_oI7u|i;3ttY=^n+)(!G7RKc%LN<!XV(
z!V+p0ON6?dme8)N#B{AE-x|)ZvdaH;mg4z;rvHQJ0d1Lao;&B_lP6SYCY))R7tKWU
zY^=Eal@^IbQopvwQnmi-nx4ChYI#zIjL)@Y<mx>oZfSF+u}-_^G>t=-DD@IL%tN6D
zZ_cj~*jC=3J#e%?qoJpg#{{RAN|+ufHWig|xfW;y;z^a9#gs2*0lxiyAd@`m-a%UW
zL`-THHGgLNsPb9Lv_hBoTT27{%_o{vT$PjfduU|wy0XqI$Fgb<Kfk$tLxVkX@T<pO
zb{7ZiMuUWdGtby7M)QPrZ#bQ=Qwrc)L$!W+borV7jeog!+*8r%Dp}oGDB^u7RA>}J
z(r-nlPY~CjI^aKGz|!l;sn2-al?qc4FavqLoC}&l_Snr9$Kk*TBu-j#q$euFEur8%
zNRU^Uk2bGY2@wPyxn^-52g2PYUU^xuyTpT+!k4h=j&Tf=Xbc*O-e!P$#4D98Yp!T*
zJ2YOvtP{85^+T)It@bl@mj06L@p^COvKyCVjXLWmax*fxJf4apl)Ke%nxmw}RaI{-
zY<AZ)LzDGBflA_*dn)oGS@{-wNm)baR7O*-L7&^?KjkWLDws5e)|gwO&{%5M)>a)}
zS)x<{Ia*5`M;IuSKm)rdk1(5Jq8x~L<Lop7ZUa2x)%ta{mXh61Z(VhJpn#Jum05iS
z8To^yCOp`fbA|?^3_cgiA^LFm3FHBpUajO4ce1lvR}_psda$V?+#wX<8r;>eHs-1b
zX#)Z=@ROnSXVZ{0J8=?y6x<2fY3j6kvd=2f?*RNQWUl8x;_`>*&LgMBGLU1MtfAE5
z<iPX=kk?HvwN4pUGaOGFI+7=K3%I>K1S4=wiKEDcr{^uok9O%fGB)m!gtCh`LagG!
zkvaF0qH}L}3`&DW;jtlqpSjx&?yVuBLM_ju4wO3F?Pbn@PoNWOXp*e<D#xPG;l&$M
zFD$Tv>_G!(`1${R+%^&pl5tz;8E12mot(<+sn0d2efe+{qhqkYd3mn8slZac`_a|C
zM~6d^?)3%s$}Bxgq7>ev5^(rpr6<p5D-WA67(tcJTlA%iD>FM{QB``ZYgI+4HXz5+
zcxH>4-?3-7#-J_hTwS&Lm%C%(fqjjOPp)h<Xo?$0iyWo75sgD@X*Bt&^Mi6lZbf&N
zDi_z0{`2(5#0g->VQNwyH3vp7z4#uJ4CEl4<ViuKLC+}Y&Z^~AmKH}k!$jU)-99F5
z>aXO%0b?_V#?)5mz0_0OM;;*XWsj5o+=s+5xR;V6_dF?@8RrmhMNCLd9y#?E+-RUn
zj5Z)A0R_t)f?-HsY6`|&0u<Hf^%PuEL+8>ZR!y-or~+sBE$9B=HptDmB<O~`JUK@w
zHs{t@t@Q=ADwdS3WJ)tEF@5%tcC3)RFB8Ym7l7Sik$2NsdSnQ1zV)6<&<_Az{MqDE
z>F^ANkV&J%mP(^F-zg`>H#F>Eh#0tA62|>XxsaE|^+fHh^~KVxZ#ID|53TlzVG1}2
zP_8t{CB4u!o<@@t*9Ob1q}<wE90eE1ZMLyEz3A@c&~vG97<*Q)Brjv}yLLKp75pL=
z1^fm6GL~d6*v<dW-?;l1j(dM_nu_AIOJ}rQPcpmA7>qfEB(oP4Y^bJ#!^fs6QU+8)
zCcCXiEJrveTe+@HwhPh=m*N!PJrK-Oq%gjkEnzEJQh%KB@UIk#UL~Zq6OY_M*1*`O
zzo0czF$+CuTjqKB^UMo$QSis;g)cTMN9P7KUNW>f;@?`EYKrBMG#N3AhlVyem~0?l
z(rE17l-ohcGDqQ;a|34{qbB}cxMzD6WWFeF1cweILu+QOiq8q-RGp8JxQ`Y9az?JP
z_J6p>#I1hr8j&@#D{QJQkv{_%-gIa*rzFQ-Tb3&$S2*XQ;|N?Y*9tK>QglOa_HdQc
z)3W~9&-zOD7tOuttc9TJ9e4FE9Rj!S8b~sfa_{jwi9w-CCxGthS?cM!th@W3Yqoa>
zD6ns6`W(2YiNX3B)6(W1QnZWENoHU;=-T+m#8kJ<>cOlIPP$BHaOVf?`7W6uD^^vW
zWe5%(?H#x}kk6I~geGs)S=XG?Iog@y@7htzmN1PqAq5#z$G91FUVn8otX5`t-EKGj
zoIoVk%4HV6+ThkJ)TT&XR>_XR+~Q!TfD3L*<srM@V$E4pQMj(Rn9G)OGjiiWc8R+@
z;K{YA)JApOpZ+^oUpqLHt;v2J+H4A+vY%Qkk<dZfef8el)_kAKo7a+i4HuS*U=C4$
z!>@5+TsZZ0Y_L2S%5^C$Je~$4-j;|p-rW3LuVzr-k-*2!4k~>7spa&{>gIAUpoP3g
z00}}OD2J@=Oqr!dV%f~ZS%5<0#=hknb6fWhgd%;rYt`qRwcES=J-wODg?_1;i;S3~
zE_p`hma3+s>$_Bchq^fa`iZiJ5w$@rrSh`J(R3;nka=<3aDFN)A%U|=EckVvG9i7A
z`WTSDRle46&3IJ8;0TIt>7OHStGEo4Q(-4}3+YQrTh7Sk^^^Og;!x*?lD-}ND^ulb
zvUhb&371S;k^U=jA6gI2Ejm@{Dx)w+jAk+>PF<)F;Qd)sl14Cxg|Tr?*R#-<TP2SY
zcAiCj_HV~ulpHL6Ri(nbkfWDnk^BaFDiBZxlusT!HMt60r_R8}Q(vpZzkN=kpkfej
z5y#<YX-u&9fthYC5>9Ilh7CQ19jTq6@Us~W{_d?YoXvp7bIY<96&WJ~d+RDzRcTp!
zIGoI4jh-h|phQC?>ab?!*oh~kRQj$QY1ddw`?6|x^#*-idz!z0YM{THBh+A~&W1o{
zcRdA=2a&U$Pzksj2NF3LvJ`1{{vQy|#N?@YBLHdi03H4dPs^u9`$45ClK}4^Hp*aa
zZtg<E0CR&!<ZwMt!zai5CFcR2Ia_^2+r{Gm2d;~qjqA<_)1M&_IFrIu#dit<PdL?1
z#Oowx4k73q&5&7|YcE)Jx+^f&SFfxWYGjU3iPux+#uYYyz^mueX^X@-%sJU2aBQ}H
zC;bjFxO2R&Xj@Uo@#T3kdyb`51{7EuEVY?K4x`x>ZOqI_J$is{r4t*Ghk!pq&4HOS
z$ebJtM2D9vAs<e>)^M(YcvTL0Rn*_LpVxw)!l&PUcxoAZ<->130<WLi_eeY*OWcN5
zfU}J3*hr-0#0y1Z(Te4mQ*&(Kg&MARUIca&_yJk>5qWwm)Bzt{AnHoaLbrhTFah1B
zh2ozn$-rb76nb&oIX~)o<~Pe3R?V^g*4g0aS?uM>yXHnZpCs~hHmD;R@5EkCi~Ena
zQU0T3#($if`<rnY|FMc;(_A$$_2NZNB9TEpch)x~V+tq}6{m61a;S=x86Cn&m?R3a
zg{rhqsmiC05quUr2`UJLl?sc4$%J1gxNjd-hE);-V&f79mri3dFyKhXvKvDRLvC}x
z!4)wC7R7&<7CC%OSMO69Gu^mD3pIW}4L!!-Vs%^<E<|A%miaT>B5!}KUzb(u@pse|
zsSem%J;AXs><1Qtsw;z^1ZTsXTp|4Awy85RXp4?`28W^<DD?gGSqOOqIuwr$fpY|Y
z3H(kxS4c{R9)5^882)JMM}BBE^axRoLd00yr*lt#feirL%q8Qr=4AeamV}N4Jb-4}
zCL*|uRCVgUf+LKj2OD)-UsUHSWqrub>)T%4d1NTuazF9O)7Sj@Xe@vEHJyGs#1XSx
z<$krMa3uCKPU*yv*1X|zYh_2r_C{;*n(Mj_{Qc(6k_~r`EPm+tDsvxKtCpgwnt`>&
znZ2<L5^g3f24qo&Jxj(tvAHN`dL)sYqw*oC(OGbN2g{xb+aU*ph(g~RXlbvnsu(5i
z81M+P!-IRO$ehUKJXWY_WvRj=7Qi}bFwEw|wVUNqd%8rU6w3I_Cj{*>O=VW@gd3@x
z{O~bf2rVEJBqJ*uc653%+D;L-se9!lot<uR$(1^cM)m5%rkNNDXf{xmlT!O1rj;&E
zLSDrIuMi{j9H8OzA0zY+xA0VG7R<yHjWmtm%m*JL-%Zkgm`Esx$sD2y*@htoiz?v)
zbXH6=(G!492Nm(s(*p}rO6Cx#2(yJM8K1$negVkRdt1(p5_b-G`GC;fRjPE9eSpWw
z?b%di&$KGpdsixT{OUlVMNETb789#wKxyP&jeLhpvXF|&Ka-T^^JpsN*vg*WO%@to
zCHXgBG7bstB>|{PNkLqpaekujQvA&P3H-bW(&?x16GrMrvxM|pQ4Dt&3|_4ey^Zdu
zTKOYfEp^w7W@$5wB9Spen>AVkE}kgKS1g}a2<UaC6_A~FKTb0}S?i0;15v&RRQV;a
zm@h|(yAzA4C3${${$h}!PsC=`q1{5e^(l$oC6_z(VzJ&Sm%H>5s6ecDDdbL_Sgdo(
z6)wG)TI1aPNL}MwznAcTtxyu16;7Q<q;o33Q^3<)@_FA=wx@!)jkW^pRa<=3KLk;j
zWX1waiSvZ?LG^Q)gc{)5Eh)N*i4eK2k5cQ{C~<qgSC9o5LY(XmfG>vj){@(NfX*&m
zyuYC^jAL$%wZNyNGoclLTg@v=<sLB~a4QsMk?Wt;;8~5YnS7sQNlE-uF}eGL+3g1g
zg5vEsL+Gl^DoW+kj84(J!TR&430QhM@_)Bhvk{qV7Em2rD;@oOjJQ3%@q39=Keo>0
z7m0Y?hu7S~Q(_6Lp%$J&zPo$!{{P`REs%89l%yr>9qkLS=F<3@FESeZdA8-hFe25y
zybeu}wq$eCmZ;JN)qw(FOL%ZK1Z@VqxP#jBp*_Uuem|uR%}Oo8IXcS=kDB5Ix*Qmv
z=6;odG(H#Gnw6wIn#+VD{zXiHHYP1na-S{KJ~#hw_W2@X_5Wg@q5ss40aJF{tSP&d
zZYNFI|9rC-FmRN8qaOwKEiWyW)}6NEf3^M@!zca`!-wkO8tLelW5ivvicW3%MT|*o
zdYmzH6@BoZ60`EqE}_G+eZCPSekIYn<;kDO-FnIY6~BJEv4ql!fNwL7<&v}Pe-O(R
zxW2IDzvUkjiB&z_h#+sL7{^(kr)rF7&ctX4m4_5E*jy|W*;_KP4I%T8-4bxgxu%Jx
zk?yv^*GQnz1q~q){ehI^Yt)rT2|W5o@0h$lz9!l)!J3vY;II9cmHgyoCRdwsw9xcP
zgxlJh@E9>VvsNnS8j9>GO{|qT^pn^CZElXU<5KCEX%<KKmos>||BW9%g;S6^!LL~?
z-n3+G+*?$f#P(zL2#IPJE*X~_%PG#a*OlkUG{tuhC&MB4^p@@~-n`RmxQPsd+}S%Z
zm^HY!25KJP?CH9!tNWglRQLn=tJfGmx5%2o52zTTd%@Z+FC3X0p#c|c_;<QSOTpqQ
zdvT7rzOqmbIk#NtVKQlO`JH`v!!fI=plf1Fam8wfQ0zfubE2D{e?RTo#^nyKoDFB@
z1_Q3N89uz9q~%BI^JwI>8h<(r`E`xfg7GSQQLd#9&|;fQ!y3C#;=Xe06&@xF`wURB
z>z1a8@o?|<N~n5pmAB`L{<hnXZR;XwaHBAwY=(|_eMt1D)d?<8A`;S*k<{8`tk^Lp
za$2|1!6eHDH!(O_z56;HeJ-jj$gC-jaoDrL;l5qfP(2m-ol{2m@kM1K;J$bs&|C;)
z$Tlxlnuz43l!;J@hb#^*5~VwGyyfF%#{RC1(x6?Y=4KB(v9xyYP*&OAXSR%9pZ5lj
zkE`&!6{os)98u|1vi8QR=;~X>cK+$+p7IjFC(m>M*#h3lPAi<9LQS6KbBY%6)GV;Y
zN}EaCC4;!or|oqzxgcF{5JOEInOLN==eUa(S6G#DLs><wJ)=6L@^oI>!BcQWQik2q
zsZo!vE#LR-*72)zuPY8IO(I8G5Wa#Zz}0xc+M5Q7d(vyi3st&Em7{1?vk!s_>oj7F
zw{cO%GY7Z*?e3viF_oh^j%H)8q}i$Ys>%3UXr8cxD>R*!48YA*4m8`>6e%By%IIu<
z?17ZPf7uF0(U%X?L@i`RwiYJN8aiC@n7X~Cz62*@aT#qJD;LwYj;>Eh6}n;71;6_k
z7bxe~=JdD(WDoDFi`QRbF-jiuFVa!*MWVM*L1qO0r=i`I%w5zK%Zu3w!Lza`!7C}}
za5gVco(UF1M?{un^0R+W4a}P(eUpld%QW4=cpv;{Kqil%f;1i#r6Yp}@qPv<90y;U
zgN2aPD5zLgaoH-^kX7T>`V3;?oLDC@njE1Lm%Xke#J}&Ib=Jtx;kNPXmV|6&y-U|*
zZTesc{!;02*u<qvDl9;#r@qDca;2QFjdthDq76gQ>?QTSqV=~A58u9Ls8HYDN9wo^
z&~`PDT?X0XE2bqtUgyt#pAQ-FHH~L0%^2CHoO-_f&54c^6M0paJ+-#+(*6)jtQNvW
z(CXoEV?l;Y!-fv{+X^i^mP3DSsfn(;d->LPuI~yBU)dclG_n{%#-RhGLQ%8mzrgH(
z4pv%4k`BNYEGdxmIay(IeD7z~8IRyHJ~Y!cfS*VBwqjpFe~ATycd8r1+0`x{3Wciy
zk^Kic9Snh72$zeNG$n}40gEWxGE^z~K)?bgB+S>~N+p}8q(MW*@+@<pcTYnpU*RmM
z&|(stTtUf_o%!ij8He^t&mwXGZ7ns{s)_Pimr9!@cj!c9asf(HPyZV!0Bg!mn~ReU
zQveqWBa)?}V!+b^g@AAN7dl%SrS_<Ov3SWuUu7&*5pj}6$~`c!$X2s!Aff{@VhR`p
zWF99x+*&S2GG!c@QdXX+0B+o==2%v>N)L#1<(dWds-;C4jfFm;$QRC5=PhmUi1nUC
z9_Hieuh6C7+-V`B|0(QD=8qzw)WYG^2s2p-6qqr5bIS4P5#;AggpMG5HLg^#cxsHN
zY7Xbu*jVUG<~+BecFU<6YiDP(zFwe}8Qlc|cbQMo(78miWYKU%%vTyP@r6>hBYMZ0
zmK|*_<QT$LYP02zbTLPuDJM6jQj1pd9Fa16{nj?Oz>@E6mugHJr6<o6E;wCV;EBo<
zGOnaMQf@B;N4_8@e#Ux$-2V&gjhc$7P!-ath&PEfVe{t(#gzgcYiO0&^POE=stwAl
z&U~_uy13$?7;4LJ$X<TK=p_$sh}Io{?_mFd4u{lT1`k(8Wj3v-c=hSd{Gl?7(wlDy
z#!i=|udJ=v+~zA-d+W%K_itY0Ebq?Hmls7S`sl<-^c%|7)&CS*Hy@~(><pW0!r?dc
z9gc#*Qd2>ey{S51R?hU)udH$}a%#znIGfVxV)55;>UKZ0I)8CXu{@8Rj!VtH;!w1&
z)IpP$-Z`8%SZ>khwT^ErE?a3wcn(Yb_Ur407X#&JgneZjIs+m}pIXEzt==?Q(|`Ty
z0*T41Y7z?NYPq$zD{%YBDsS(>p5~jb*x2q5d#PB7XZma8VU$DG;+SW8IrT_tb!@yG
zF{SAfA{-^@;x?HS7DCM-TXXkFcJJxsdCkY)*qS@sRII2M1(XV>+pjHNQSZ{{w%o<z
zU5|@*67?Fpid(knwt;PLpJ|tx{hD!{D;CNH^vsb%t;ORNR<du4IDveELTOww9%v@(
zO%ia@UMMnG5J*(iWO*Tp7eb~7BG5Xu7FXyD!0-K~Qf97P8q02pD7k8frWhtZc~Rk{
z??>q{n>WQa;V%(EG?dY1)Od;_nqr-~EH-2-T-BUm&TsNMii=|2wGjM?QcQT*I9nlw
zUKcB;q%bKL>gg|$f1tcHPFgu-RgyG%p?La|gprHiH1SlD0e7t)D5WTxA{@F&iEDA(
zsSrM`2t_O0PNx8d*#@oGW)MB##Rb;Nr6rjynQE7>XrsI!$H+!7nb+km3E4%ZECEfT
zf@(~Dg~sA=*+LdrmG09CcygVnl_k~7zwETN>wtannxgft%yrR@uRV@dvQk>0^QGS`
zFiPxXn`l}gaWC?1qLvcep)VeXg?xM4H~CdR>na>AR&r{-spWX`Ee+L0co7O;xCff-
zT|^DKIxw|nm`dir%9$Jh@+Y7_j<orhi1BRE0<P+wWP+&nKPic$jq`oe!cq<gX^y9h
zrdH1;krwnv)2zgCijF*R$6cVA;lB_B&kT6kgE0I}Ybt{sE~?tsqI7v!^lC0(#4L$(
zimZzOi6Uw>B+s-3mn_PZNP0CwZfSKky!(d;zN$a5CQ{DGA&>84FQ>_<DkchjKBe3b
z>`y=+3C{p)!p|M3{H!t*Y0o#9^P0ToOlj7+wgbdoI)rc(VvE^nfqSQJfO}P;Dj%?y
z2B`@8!&G)AS0&{-HEJz|JAWMJfcME~y-<YmI%m@09A6^Wi=fb5pWQ=GrgyPqR#$7J
zVPhATXHltKs*eHqwhiE!$^32V;dODbADLQ<CyUThOfMrou9}D$W0(DQdrp6C9&i-X
zWipdHFC%}X+=~0ELwlI8f(yxruF=oWp38)vK+fp=65=*)X4B%lk;jj;iVYrBCsp$2
zX<i$1#RBR|iA4Y{n|ug+nFvy{LC%Ex0?58IEiLJ-LbJfeb7sQLe1(0nWsB8?mEO?N
zvy2h@`Do!_RK}_Ks)lRIGFKEvqy_)3;TW>4m4#txAvxE^;#e_0vUS~-OUSJy)nus6
zR<*1Y){|d3>Q<IfH8i9i-ZqyO@lT=U_AORtM%j%&iIxkuSRK%di^qP97&6a$9D5u1
zA<?u{4APmYQ9qzS^F}o-FT0_=cY;ZhHIOIcl(88ZO{*)1TN5he^{{xQTyv%+MiTl}
z?F^w`Zr*BjB1Pk)TP}&yIrU&);ri}~Ev`SS;i@>%Qy&1;r-+{V2Q|S7nwA4y|1+T5
zwV=(pn0AWJiDY?Ne6Al^xF*ZsFnp=R0)6ML2CPOr@p3fE?8K|oO8Q9cP7;UwifWN3
zXI22&uK={TQ*L!XR9KhNFkRtm3)hV2Ntm3{AE=@$<uTKpN*mc9O)6ffYkf%{$&-s}
z=B6H8U0WP4ElJqpzoF0!&Tkwi%9w%)h5T*XB}yZYI02z>@$*~P^Cf&P16m3pND-Of
z6-nViWk5Fd4hkU*9%t$rO+*gssGegN@a297)(S)MIu`Hr*Vtj;SBS|Dri-wa$VvqA
z&-|f=dOGw$!D!5)^jCWGM`KonzY?z1Kn5A{ffm|=Pd&oPyQ;bK@L;HB-=oW#FAZ?v
z82*dw#aDIa4wPGRsLy2<`08`N`0Am7Kz7;2n|n9Ed&8pq$kK-su@r1Mpix8J252c^
ziJ5j45_26%#psy5yCMa2M3G_DSLHjNd-7l3;?{u17`CaI@^fPM4If=uqRpxwUSAw+
zD)0ytc~zakhRw}RW7WD_-+_LaI~23IJNI>8b<=w<=k?^L8=@`2$F73g+K)WkTXFe@
z;R>6=m1{KSx)dd=jyG0bb9n2bFp%YEr@w}G0(&5uwM~dMA|urv-btzm!`j(59B@UK
zc2=q)z|u@v9Jg05i?Z>5DLJ)QEr*_q-zmuFJc_-t;By{*AoV$26{_XfD;F|SpL1+E
zay0QAa6UW^=rPR7Gd%O8Ip@UVzNT=+V3wH17Fk=n`!W(Fez_J1u2pFwYokcP&0KUz
zLH~);{xCz9q<FG$O?4?HvC#B1aWDK4%BASeLvXq!#k5RVJNiZf?mUv@-Y?0vI)qa_
z5oOChRj}(%teQNJHBopNYCtpj40BpqB%yK1C(-BQCq;Z~05j;|$-_Z+bV*mG%EMzB
z+)ApJi{@*MP!(TAq=Mg;d{^z!<-~@#lJ&+lF|KRCGlX9SvL*vQhfzGQtA|F1f}hp1
zvilD#QaJ5a8RariZIbZiWGf`b6tG6sWHTi7EI>Of0?#6AQNnQ;liA70h!N7TlgBVO
zS&LQw8GH+Q2CGNo=knCLI9?`_4fLNyRn;um|1X~D|2K-E8v|tyQCU@^`B2ZEW{Wnv
zDJ(T{j=hpCUd~V|f}X!`g>~tHLSt4T@f!4J5`8>tq@`HOF)E2uF32es5_`bQ67T&5
z^<G0FHW!BtrSSX`IIjV!$cHSBg4TAo2@GLNlNq{6;#SnudWLUYO+3H#@1B4{!+k`X
z{px+44J58G@hbGG(#$pPYKd)L6ha|lk3a%BU2$3cBRB^XfM+%TgL=()F!v%*tqitS
zCN;PVf1q4bWb#HGiE_=HWvBXeIU0<fo}skxd1{pAtFc!PM)(ZDOG1${UHRjcnw5Kp
za~O<_(rT_q-5Xbt18ETPXW|<8FWCKLU+BE6Cw+ki-8&O4o(@Y~vi8U~W9;lf@S|!M
z*^|rHXp8IET+}hs+R1rrlILhWx+E%+#@lem<9s{|-pd8PvvvL%HdhE!be{`+#6?>w
za5if_CsLx(@q|hg{4CJDC5E#$ut=BDz!S<b;wh<!6wO-Xo&Ij1K9r<h(K>0XjXRI<
zw2in5sR!?7lb$>7C*!nnU-zPJvjj9Gon|2?YS3nYwPh6GMtTI7xRo|CdOq8jtQEvt
zU)QpoI<Y}mZ!q&v2HLZ}u*u7#(Tv%RL1Uo?M&P&HK?$Cbt~6jsY9H)mN&As3eTBs@
zWhvPbcD1db-fFGMHH(ED1&_p6m_85h#BwP=#4qE+iHfyIK%55$=f`MdI5mqH?hwjR
z&Z$PaTDsfzt(5BABQr&~FeQluAv9VR^jD>FKu!D;u%h^0=t)~fGTp=Ctap1ZSxlvS
zfQJk05U_u*0y<0!<HgNui-cO3I#(RMgAPo1)o8AS!Ra2Lnjn*8ecPKsS?Gjt_9L{E
zPRGd$)cyDiv<aLOOv=tAJXJe2$2b|(j-%ED5K8f(3E=0LYGMU);w1e1KqO_*GILNe
z==;V8t;qPsKL}ki+-5Evj1oD?;mWl)K_`h3@`JRK1=C-n)xgf=#(6#qO*b30oPo3B
zL-Wz>P|RS)cuVa~HeYR6({jZ#6FsMvMcwtw3T=(nrF_(5fO<tddtIJYpIzt88mV>T
z)=;_*g{<jo88m5G=aQVIkL_<LTydhc_TZX!1;$vLZoP5^E!w-OG^;gBZK++~80aeZ
zU=U31%k-DXlc<0~VwuIQn{6%3gRGQX%=G@vAcT>tf?1v_f9+^gK5*mjR+g`*bMU1y
z8Vy4pG$<ep11iEViv-7-f?QlDR_IwmHH`dQzzwx6&$)~E?CCLY*QIU2v88JY!fOjG
zN_(rmWbIh5XRNnu--~-andxl0fQ$=F{}R~kJ#qg-pQyF8&h&T(kUh^Tb?6cX8|CSx
zUo*}4Z=nmXDJ8JU-{<r72B!WfQG(wkpY#0mG`0kM?OxzH7d_UGiz%%oj{<DT!wMam
z3oe^{z35L2lWeg<2e;DLC|kw<EzOKS4Bhr*I(>i!EFk0GBGXy&?d~Rrqscw>u0)}b
zz!rD2!_n-H)8d-C*J_nmC2(Ehj5rI{w+m||@m(%nA6cf0?0Qk9!nR@zgpISO*k;KK
z@U5!Q*}tj8uvC$uQ2G^9pGp*%Hb{_t@njSec`i{iN}iu{2Vdquu*vr~FY(>;+H__c
zPeSJzrPs0Tniru<i4D+Rc(Vp4es73sw7CYzB{Bf|J_2XhHXzT&6x*wxQ<M+Hc*gJ|
z+cFYo4LbD=2bNJ)`7-!54uT7&zJY#&)0k?X!ph^T(WLLCO|8jad6qnM;&%mj`s3*$
z6bA3+P;t1KStBVmncxVY?Xj693-~th9qxRa*vr%EP2!(fo0^*)!73l_?L9JJWQy4=
zo4JcEV-q0`EF@_x#o>3kG|kl4XUWoph|pG?F|fTlT^ouyiq^FGb>&tvW9DtK4hZAK
zhKy6xY^?te`v~FbXTX`Iq<ozc^30k&vXTVS=(6NFHTUupo=fRpyYtN*VYe{=52cV?
z992u|j3ypJL&Mw3V~fj;rlRi5&I6fJJlK?T?Ht0N&Ts_mDzyh)H?x42iTwWi%R>GP
z8C%KVGjs-fVWT71QDiQTL~G_Q1@Lz_5QL|&d&y1&WOmz07d*8uW3zj7e9XJ()XMzG
z_|*g1=PD;o^w^g#&TOLkGBBpMz$%Q4pB(DH_vmsRp@-W9H7gD^tlz9QsN*yA(qiEG
zuf^X3r2>-EQqnaz@N-AYm&Q!3N1t8c8R~1(*9kRJXI4$*zzKcj>ZZzb(1)sy6?@8e
zzj%4M&|2Vam4O#Lcu&q)Q#N;ss)e6^diramDuE%sKoTV!KL-M^E9E`yda^FxnHhi2
zn#Rg=$gfrHD|W|{?`e~144Sj?_rR^xdNPO`k!w*Qb@tDspCNb_5@9ykB#IyZND~Ja
zi?r5=qhxJshB8p)bLYCvRD!9$uiM&ua3r(h$nW<LpU6bqJic5lFTI}l{;95AEjEow
zBWnXJ7DRVEclnD@!3XOqO38k#s_FAs0QgSi)DQBun}V=Rd2I7iE!O#!Pl1fiZPz_I
zy5;$URT*8|uX}W4>vIRH&bgX4)QsG|zR1<Qv1a79^@Zo;wun|6wBfidsMSVnawK=d
zdyk!1lHGsDKQ2vtb?3*I58SXSzx(!2j||>Oe*Vmvn2M@R50SqaBJT*Q=`WCvsaz15
z1D~4&nuVlC=C^Ri#Ra;@S7Z~3?M2>}jkV@2o5C@-xVU(y*tPz_4bl3m|G0nX$Rd|M
ztHxys>iPbWYoX^=-l$&fHA;$BpXuIm7`Ft}-t5zGtZ?0}BYQr$p~F-<R1jHI5f<{C
z{;(>0S!*bfD?#r@&o7J#zhLSl1ri>LBf=vO&(DqoelVHhX)vOi=s<<iVblv<9IKd*
zg9{3>Ykt~fq4Wxu?dgoUPzIa6E}e~H*;#4Gw1YSXmt!vg+eFp`Qyz7q0Ram9cMp0V
z+hJV<cld244dnTJ0{G7ogMc(jz<=($q_D|D`OghO6Xicc=^AiX)A;fXB)`?(+&{Pj
zF4CVy-<sUtemEQW&>2#uk}aL%L(6&CN^*XTA?i`d%o%E9o>vw3C5ZcwyMTSw#Lw6n
zsEK&{b#m5p4kSkIy6y8$5(tO*mTU=us!T4iiv87FDhvAoHrWe;LKp6Z-{Fagr=>Dz
zyIsMv%AqgCa$-HsgWjI$Vb}=Xg^@Tnq^AmR#HW6}_3xvPKaN6^k0tRw(J!bRVct)x
zhnUytm<^H5WwWh~<vFq{rmtajmAl)eWgB=ro6_ZCN^ZR#Pp6t2ukXzsNj96Y#q8M*
zv&_LgHE>~S4)B@_uUy>D2qpSae}}ySzLJnWiy6|h=T}?N6ZpXk;AsUA<QUoK(s<k4
z7F3kQg=Inlf}WO5-n}5WR`HivkHMEst$=&x^qhV?qVx-<wmz`{#ult3;`JM3ER~{J
zkk++O|K5)z7Q$3sVZp`d=VOB*1ge)2uQsf!v6Nr-9GQ8D%8N)B!Q{@*$RCbb@Qmuv
zT`bfHWfO&C3&V(kmBR1MMG=E`k-3RG*_o}&3P*o=s5zdS5aQ|?H=@$2fYwhwv@jb2
zX(-sYBKms315O%0O_$a^$1lUcZq0A9UD#7wm<y!eM$@@~-{#?^1HWx*GjPqyzMIP$
z_*%-F3sw1Kp57}cZ;olRklx(XD?iAGw>iMM`)by?gW#(osf-~`FYNC903VX>ACL)f
zQlL}dZi}Z?&BT~#p<u*F!G6yv_n^huKxtoUDQEong}={f3ds|p9n%A08q;2r2VXkd
zi)+lTsHw;{`WD}@@x8-$wF%j&z(7`L#8BlJxGr$7Q14djUFmWvy3-UR3d4<IHGCx%
z;E9FO9eS14npGRA+|e5e4;^Tuz;x6QPTrh3+#>26EF?}~7<NCfCgo{!P<6<aED-8}
zlgXi!=0Yd|g=U0bnt}S_XoYmHP|DvU-vP}*XG_-<*RfGr@RHKJt}L8UwnzdNc1<gf
z>~|-A&T!eC?Uu3&DUl)+MIZbA&x~2fwyu6thC5)d8qbHbX1WijvhuS+COAs^BKgw+
zY#8hl3!LubsnvPrnYoei`dsXXiuF<j*kX<IfIR-^>}C8G^lDqT9OtL&j8ivIz(+<)
zj#61s{5jG+3qe@t#ifSwsye5q!mkRCT{8$X#Vn@X(#chFi#_^StVBBjE?#7$CArTU
z$sQZ@Vp;v@@yK<>5ly<tQFb;_Wvi9f_icE;)iMKD7;4wo4Cg9zkxH`YFC!t+S;HP}
zSm#!AQ=ya+yDyK$sJ@jGGz@z(tsy0MHD~<yMfo=4f@SUr>^{9;CPl8SeSElJv`ERx
zXR<T<_V*~j?@A?@G@Yl_6vf!gVoox}^q--B$BWr_*W((5dpVO`HgTx2FpR@|sfuSW
z3K-~gXnjfo?ER{?D@L=xjf1vUgVS63>);$R1+}q?K$4w21w2fn9;%L)s<XK?Se8+j
zRbox##|nY|K83wZ<>iwJPO>oTzXfV3MK(fzrL^$ixjl3iP}N_jsBduaNcX^X!2(iw
zExxF2MtMDBcWoxM4z2(GaZ)emC@UF?Eedrkq^WUQNn7(KpcS9#2c^%@3_MeCV?*EM
zpfcgqx6n)Yl)hno_5UI5J>aV<&&Tn+XWYHlxqI(Da_`MeZgR8t9)u)}BoIgldk+Bs
zNI<v0K^zPL2cn1|DB#{jtF_jut+jQuR;{hwYFq2TRa+q^|M#48Z*l|Je*d2z3b{$n
zdEe)K-uIdBGYtG2KfRG1j4BW@8C78*Yh)X$S9N1&&d*6Fkei-l_?QF|$=~U^s$%-K
zfX>vCXTPF}6Mj<fKT(T19q^NZ{sczI+aaPNU?F)Fp<GCle<dG5zrmlNs~zXXa9rxC
zor>xBCNHLA9?#;_(yjq^WOlr5Nm|C8BfMOY2a2~;3n<^8tgwG$&4e&7;DdtU7OVuq
zP?CQ?^gjW~zc|85BD1o0pThqWZ2wv>;#_hSy5u`yZHKUGE|gDQiXxLggt)&F>UbQw
zYeLQg#H0;b*o;dGX^pT&xYQ_GkAxpJSlK4>WE0P8cno~>5x5RO?&9?|=*Yj58x5+*
zA6J;*XvpMa@Vxwn)*Y#63OPOK)U9WBU<(^*V9D&#6W~WEa1!LFDCks8e1wv(4TyrK
z2a!hPJpxYfb8oGQd=dPZy4C#faYBy)`rM!eVQAw$gDIdspv`FmbhRrLn6l5sS@&yR
zK0}_9afTln&6z87e?T_aUD#Rb;ji4^ZYV-5V|%(R>A1f=<L4R$6-|kz;)p?Q=33@F
zyKHQ$q3q09`SOln<f;$9w{$4elPNR^32s?@bm_Xvp%VdX@6h7Np+hD6K6?1Lvu<G-
z*X&Oi0>$7~%vxCENfntYMr!}DWFa)8HL{kDj?RYqc2E6aBDtbJjdS*0ZFO6Pyyn8D
zh<d?Dyg5Q_-&l3kSTzpU53+kFD$p?TYuOtus)R6GK2?V7(#D6$m>m4sUt$+0t8U`m
zB)XB;Wm)RV1k@!NMgNr@4rQpJ@K|Ee&2!1COsj;eI_{^e#bBy^Ne}V>`K82_2`3`=
zS<AX3{`Q)rJa|LhmVr1ZSb`je5QQecMt5KWI_7CcvA7wWY`T+J0(n8sZ?AfC?eHy&
z;~fWHT)X5%Xn>=V$qcS^q-0UE-;`|jr#ig~z!431bXIM;Z}AmxAM0;UkMpR2`1pbY
z{pBNd4!u*H&0Byt`6=zU)6iBwwO&is;P(L<C+JVR552mXJh%<4Saf1#`XfWCE3v0z
zPwlEUFH*Jj*SGg#pnAhyi%J*NIVYAT7agR>g`=S#!*QwlF8RIxs9S^F1!4}hzoLdR
zQlpxGFZsRs^N|y)(%pw%gHtBQBxA|5aLj&cbn-tt$*<8SIN2aIEqHz>_+c(ifeq*4
zXKNNv|52UY))@iR%>PJ70vy|h46D#aiYBu304Bek{1P={QcAAm)e&J|&N9e3+hWsE
zr#34*0#rC}^RD5fCDj_R7g{B;TsUt<ei(3>dt5QTY*6k<*t3Da=sJJeE^*f_Ovig`
zVp3ToS)wmn+8&ZyLi&N}Kw$aN?s|R1uAoAJ89(a>WH-1819X4Z0_sKt<i)tsFmL;G
z8~FybpDp?@Wj~i%pgpaiqA|!nK<ikmbVT(w+DfKcpiKU7@@oYCmWkn_^`tT|-Ku~p
zH1#4sHD^bcv)0KLaWE~xHz`dao0`?}0a!C@-$;_fv({MUDz-dO7e{WI5jSFFVz@4@
zK%2d~r9Ipy<#xH+A%6E&r<He{Yc<6ZA8h*|W>Gr@U#cROpTa#e@c32(=};-bh(ba(
zV}KlzNI{!c$;eq=w$^}@vANkvI!FgiQswYa<T+@62M)+F&HCaG0zX$^x`%DgJ`0xD
z9@q2J;2rXoMYo&zbIHHbvBh6uGCKamm8FCHS|%5Hzc3l3h)s)5u1a?u`o+eDcdaS=
zCv|+QSG4<$sUG;X&4-jxWLLNKp1~{LIo{u}^`4>91+~uP$icp{;aW#x<N(C|-y!YS
zFtjg^{<pI3StoU3l|pQ2$`p;Zhjp=rV6-x9lgVW4@~TG`&p*5*)x7tGjcZOO7RdlE
zHk%3;-Z;N(xW=y3D#hHT>ALETr-!$_dt#uYZAeVT+Z6CHF8VE8uMN(A(HU|~`Oqkk
zLhU#H;)+ElRus42^y(Fhj;|<2T?cme@9Oa!+)a5D!4G!)`fz92s^ddD-#Xj{_1QO8
zUg7Il*RYEEm)@gT!A+P5{SO`2l&wNJt+YcXJKg3gTZ_fzL_QI4m1dQ|T)m`W-mY$^
zLdj<fHv5C^H@<qs$cYstb7l|ofkdF<DnqGiZ(?@F8t&cH;A$~Qq+B^?LF(3?Yu-N8
zR<h#wf&*{OTEJuE-`M20*Z^jPdXt2yy+SWAldG&j`2@t%UiJi4k~jm1+$KPSw>Nrl
z_qNtih5X=k%bSq7GL-;9_>a{8c-^Ao%ZtOos8lIH5z+VRo>~skRpN6aw>Pa_b%l4K
ztv9yv3iHH2gj5#XtfSTS5KF@&57hVtO0`kB_Re%Ug}!-rS21vgCO>B(kS|f*&6b(b
zP*C;3A@Ss-_H>-xbXB%#Unj^lGegf+k2kp_&UB!9VU3&3ZJzkY@b&7AM`l~f$^Rr4
zkFTp9ydzluvrS!B&hpQ>?d7EluJ@EbzKS}=$-SSP#m48A&&ouN0)l%_?e@o)xf_eD
z8MuHA*9valC-p^>dS?oGm@@L`FPJ-0y6C#5Gm{U@?rLi4a#YVxRj%r*kYBac;<5;M
z@Z1^UnWyST$tkPll6r#R|6Wg!?gImEuvf<|8ehuds*LJ2-XwT~&$Se{_$(!UZSjiZ
z3ww6<1>9A$!=|KL%@(P|XEYKKN2qi}491vCgCYQ7Yn}JVyj2l%q2D1>_!1RfXUr@@
z`&21qaerMAp)9QGj(1!$uh7%5sH|aWXIiZY71#Rp0k>1>)M%q(eZXlJOYHuHMQRmk
zoz(pV0x+E3zij+X?iLK{bc)%l*Iupomw3+gPmV9Sdx=ksfO{T&^qx&G>}hP=^TH;Y
zUXoM}A42oAT-WayW1^#9i3j$bT{3=Z+%Nu@V)nY#S1A#&`Gwt$jk{mieD5QV+&d-H
zJ7^u1$mU7phwU)2I?wbBRMxF<KR9qzw<|Vwa>a7*2ip+d;7~~;`84<@(7L3w=fGGA
zc`wG)te^ZPT|YM)lLPX4=Q2K3l*(zOYv<8)jFdP!=gg*}a==<T5XUI|zA^RsCyIc!
zwKcf##9G7*!gN%Q0{r>>B-kRAlW+OKh}I#n?dqn&bLf2asX6UTzg~tVP50}~x^S}|
zTtwvPiq&{!HBI2o?c~qs7^GBpTxk>D@_Mm+B}b!;1s??wQ(>hwRe`pjpLEv^6{SXI
zRVoE`Em-I$-%?1x7KneykI_h8EgGs;u9iH%_=Cmdw*+zyt-0_FTJr-&{#3&A{0e+l
zN&6`%>tw3vJhWKAE3=k~8b4?hG;cgUfBwNa4gvf|)c*A5WmL<Yd3UVNWLDoXkNUhc
z+e=GPFbj*KPf$B2cjRiivRru5p<?cvEZfn?CEUJU3+Ddn#fgWENZIJ1qi(dCEJq&)
zTYCB2^escT-viLEP*7FjY%Gt67@ndjn1vsO<5Kc1bE$;8xP-@d%ncT+Trq<#;!vp^
z5uG9CQWdKlF@ruz{UEA0#2l(0d<S^QJGo}_2Bz0LIrpM=^hoV@E&xn^Gr1G%z}}=g
zaIl#|$81`+pl(VWNnDknLfhddOZF2qusbBU-?wRgFM=M}vt|*3z4q3`3kIZg!5lVj
zsv4;zJ=8Y?Y}`^iT1iHX*qd8jL7bi3+qGa1kvcTz#$zb>93Y{TqdMgifpdsIMO6S3
zeU!EDQ4;REte}7@#x(QlK8BJc`}GTt8Lg~wu7oAF%07kmAEkp~z@VD=t*s{%>aihC
zxtZSc+JXZ7ex`;rHCEQ9oE|i*EX|w(zn`4{##{_XI70UMH%>igv|}k0M-=KeIetU6
z!NP9CIVeZY`2i<D&x~vpTNMhcc;YGy=!uEHX-mviQA8s*LxBE96d8?4HKI|NC|v&;
zuC0N#lc0>GJr}v#dNjk*PJ9J^L`*pNh?tKE$=L+*68eDCJkfr3Kxz^qk7af1k0!rC
zxl9a4cE6@C+Y^^`{-fd)P%aNsC_X72NE<Ta``gDKXze9p8m_?+)P<{j3YnwCv!9R3
z6|a$ZsxV}h)-L-EH`>q_?zw(ZQC-(UHKOLK<N{N)+)8E8%_VHI=bp^!h?D0~N}iU}
z{Pc3ys#G9v-W~M})r$>&AD&(1&MP(V&(^2!@)gY<j|l^9X=`O>W`+7TcdTPU1RUka
z%rTG3ZK5mA_fsY6oi+1PZ3{CF@nW`E?}uU|SESxiIVagPuf)on_xC5iKp)0LRIfTm
z)`?4tb^!HTCi^r`W1?kd41JgfSx(U3`&ie4m;3!b35xJ-hU)qjXX{|`%Db2JUDF@%
zHjS2=tE$QkC+H3crO9L|mHpF;ON{E-Z?EsZex%6XvLw^6Z`Z~`LMO(j^m#UOuf^~~
z<a2V@=!ejvLOU-!L`euR3E3eXd-5HzKigkoXaN^nrRN|mJOKXvx<Q4wY~8_Nw{7BG
z+6$6zJFurcTj<D#W90R4J~T5m9~HBOEyn0rS1OZE3~W$Opd)tKlv9wpqkvihMJU+f
z0Ka<0kzwP9#=$+^W`6L9&5qkym_8M5{GcIP<x{ilSik`di~W5!E-7b!`6au2{DwZT
zI$$P$SJ<AivXI`1ds&uLdmK2-0l3y*L!SQ*6BiF*w6T~DZ}h&PGDsx-e;a+#Qrpnl
zH9M3Jp|Xf7Tv$|GYDU(gozIe=Jh#4rP$>?Il1rZjx}Q;U&WPTE{FSvi>r-MPJ;Z?V
zDcQ0<CGZ~u&c}snem%JPdP0lKzX-F<!~rn$H1_yoij>8YQa(!lm5{DmC)ObEGq$}3
zy#;*>jyvU3f`ih&ju@n9Th6BhzQIH~;X+V{yexYP`AAM~LEcR9?V8=-B%+mJkAq@!
zf_N1qZr^*y!8_K;RLJ``KzXte!u$ptn+GMID=#{jEoaa4qp+sjDBz^gsp8lIL&_pW
zjoM?BI6bnec_q5C#^tW2r8VRS1DH)_bSbr#GvJleY^B@c)LpL$mb=nJI_pTRui8Z~
z3@w<A9!CDg+Cuwr!ufO4ew<6@&&3QUX=lTeMwg0f^(|oa@O#*4b&c9<k~-Yt%6VyB
zSyL+EZW^y9-&eKpTZ%E2${r+i-opL_`1^|jUC`omZ`A}UT<Jl*v@#a!uXcT}AH2oj
z8sY;rKzs;joh#pu;>@{G45iC%=_9`y0D{K#o&N8)G|o!S3b(}dc)aiM$_(;;w0A>8
z_X0BGtXaVDEegjsz%gmR2DP@VUt@#(CFx6Yz?PDg1K@`;{2$cTP}>6EnGN4roqdNY
z+X&Z86>mgTWF>q<{u9|ta`NAD@I&;LgLmw`{RVoTE71L@gte2-BZ{GyxS*!u7F4;g
zg(UdLq`P=$cg?DfKzjMDb9%3^m5V$|x!Giv1sW5^Sv6XZTo9K^5nNCH$ZL=FZK@qO
zy1Kl?)2-l&g;Fl+tQ{)uU&P@ol#8a;ipH~W(-#%ApFobr2hKYG<vdIO%i27l2Ql(h
z<bCpW5MkcifZhUj!}m}s<4qm|fwObYLKM7D{mzH(2NYeYF5}yvR5frf$5S;}sxLIK
z1UROYa#TW(k5haWJ5{#0!Gm*jNu5ZJC+fhv(=e96@u(uSG%DzOBq~5lPSa}6zX28y
zQUm9x)Tur8Tb<sny8fh5#~Ea6lrG2j2A;sX1;T$QB;>mmvDic2FBAVqEFgc*&@8j(
zL7HYMUltWZ5R{X12cD?M{BTthkLBR_5I$pNa7A?mhU&M~h33+8X6hmz4xES}IQk2<
zU+ovI2M7|rb6}5J!&$)*u>=~?%R((dV|Jg&EG6%BI>DgSEF#w;?{gI7?TP@Q4l2R0
zf-`fU6uF!rxc=OnbVg8oV4h0L{|3SQcMi-al!E^N6!lT#3#H(8pOw5Bd7mdE2MM1X
zEQaHa!SUe6(mnH-wJ?Qi=>QW-3Zu^cJN*b7Cr?R?%J~B){0IjJ^CW5p=A}}%l3XYi
z!Xt5;!bgA;G9E*ZSD@FUJ@8D^{*6ohIr;t#w5M$O;n@^TmO%n-T;Jt?rnxE79M`ur
zg<A^sc%tvf+RDPdO*MVD!>|3Dn!1ObHACs{VMom{J=a2XKk_16gOsvZvfSu@n6x0@
zq-FLh;Y?B%?FN<KqAd18wj`5it)L59{H{Wy%4LxHI@UF21}iMOP^r~dg7HNBs}%ws
zj-zp>6Phak;82R{1-gLMn^KF6_JB@nRdA7cBDV-CCvK_487Xz9hiaY1L}Q?^t;8=g
zw3jK&dY#xH=cuLb7@;ci@s%8fk>O{^>u^nMntGyH-achQvY`oiYK<pcuUl6&RBCXv
zZ0M>tes2JmU*(Ma7A&?Dw+2ebn*HbCv1Z2l0WIGw)And~Fp52AtFGnJNNy}m1tKxc
z+}hz%eS4GCz?*+JVPIFWWO9QAPGPP|I0CPNeq+4O)4tuzH7Ncqll(#?Apf1Cq4jXS
z`)Sy-S+J1*-Fmj+dks&@5i1Uf2x+~AdTt*)Bev|>yNvDjP^y8G_+Elj)Vr>>c1g94
zn|LC@Da3pojo=Bgxn@mQFxa)GhWgytLC?Dfy#?C@$NMflJ{Q+ZeXGimC$@=v^Hdta
z5L|$tIkn+7LXTPz6yZp@*Kw?>1fgX`xF}o1-pH~sNB$AMUM$x0$#&#@m5e;92xzo^
z1z0H75K{7}EkgKYV4*}!oy+y`T(;m3LwMp-arHC9`RVVb?r_8)nN@<J)^B8Kb!wAV
zE0?NRL~LCqSQC)35N8XaVzCr<heusrqp4mu0EDino-bDr4kb3|v-3rKnIPfyn2TBh
zVo)SdswHYEr#x-0EOH=%m55NL7Rkgi1x+{O5Wb}lJ`t_O<wc{wy`aiB<tlMyll>rZ
zJRvkn<Tkxjt1{SSZ<dc5*&K6Iq`ci()gSXk6da)mS4af%U{g`Vt5ksTiO=;`lWXlr
z{l?yiQ7zFkwlJI*9l#%f=TSygYRFYkalmC$>!+&be8&w~3COErGUa_^F2E)bgs)aw
z!+d~Rqa0V%z~9eHsZAOkg+WzxaY?LFYVM4BDuY^<Kq??npWS3v%Y_8TrB4?p)qzf}
zW4yGkUJJ2`jft%WMJV=mq#O|`G-Agex&&gOOpx??Y$l`ClxhoG-70o02=Og0HrN$x
zZy?~UNt>#RT?mcaF^Jn*{6V-zU)~C5lrv&V#N-y_I**_tt<o0Zlb`C-B}M9BN80LX
zT3p&c&K5}dfQJO#giWs%%emNGs*8;`^p(*rXPZj<iZd%Z!^?&&ZY4Vv6^aF7NDB+#
z{2VxcvS3CXm5ZvVsHRP@8C8{j%a`(b61fiQf~7^Gq}xIegh{OubH$ijUy=;VtmQFN
z+-=dAiaTQIHZATJbGZVpig1nVOj5N_D&%lVDd^<Rq&-nBlg72?VxQJ&r0KL1J%}Li
z+$HkveWujJ{Ah5<sV*v#;#zGeNkn9h+Cp>0t|Lq(y+tK$+8|%T=Sk%{h0ao%6lTHI
zsGv27cN-`u97%h)LM|`V+R{O-%Tz95bNO5);aaLQLTJT85xr+s$Pv(npMfV-UQnQe
zqL0nsBMaA9#i@#)%S;}XJuEZ1l+FlLgC!H^?xtiz%%O4_r7?#8jUn$NbK&~jd2t~Z
zH!Wi>*cs7HfKo$M&|Pd3Lc7RZ)R{2)G&+ug&*Sn92Hb@c8o6B>I#V%f;NWYtR#T$U
zNB%C<USj158{`7q;Q=X|Ln<P7BNDnke>2>B0`9$=!tXRHo%xhA?Xlj@6^R5AnMM&S
zaoGr+QZ7=mJ^JEQT<xw;n4Aqus!O^}n2yWm3;DAL3QL3%p}36NTXT9=qGDBd#O;Q2
zZpDrxJK&lx^|^xAI7Xj8%)Or-ZC+4RG`mE@!Hzf8)HG#AYMsv7kqnKqHRu6k19to}
zK38M|C(=AzRMZDwyq{|dc*9)mcxI%|;iwzQP~*_=&qMD+cH;YJX*t!3i84AY)Y4s+
zB(hV88VDIdd8f%&lptZWs>sKb_`XGEE>BzHjJ6c&PPv^<`zd<7Rgg!m!%t;(yc{p2
zS&@^LPmBsnM@2wxxeoF|7OpGx`l5W(K%lpY?>XgR!}ErD&UkT+&R`DWryw^}X)GaE
z$Tc<}w2_b2Ijqzdk5LD<P;*v8y2#M-q5xd#b4Vm-UeXvr49Tz|(=Zu=-Oj+=utCp5
z09&CgHS5jRbVtwyIbBIumr`TAQlU!9)v47wu2dx~6-d2v!=aX>k?@w-$~MO&d`4&M
zLB2%Bq0XkE<rUotBmdf!iDGi)-_&MF*2T5~3tulyBt%MrYm{((PQ6mDlZ#lV*zU@C
zrG@nYxj^mIMPts&{&=Z_IE@A5qV|l=C_;BSOY8=zqtwq%kJP)3;Zl=69<&P--HFIR
zo!9y-#LF=91+ovnzraMF4a(J!2x3fL7!|9{7!}AqQL?7ZWjv)r07t5Is%31<77Ew+
zRlwlobMzAYRCx8Kjq!i}$=KZ5SZpiR*u707>5>gW9o27QF+6`GtnCHDsoF-23aQHD
zo<=;cI1IfT2__Z4%U|R*$gCQP5omFxobT}YWnw<CCo*xnvwp0qurp=s?9n@xFH*+h
zF$E@Qt%#JV`9^=S!;=DEE5$q^PrwoBt^TsEWXa+dzbVxkp1s4VOn93HFct@A_Gb+F
z0_}u!&8KT`Q@3Up*Ih>#KTKZXb*k76fha4xMM@1{V#JTI9I0l1VP~-^KCr1ue!IMA
zUX9CI+8MUtfGuPjyd`0bgY?hQ`wU{eJJt|T+Df~^jq5sm;OJ3cEt{Q8%xNxGRPvN^
zF-kP2(-}HvtU!-^fGmcv1?ZDQb!nv07NTnF<U-!ErF5Xs$=Pn;6<ncLa4@|^A95ME
z1~#vprBZBs(Zf^g6dVK<Xf?&nQVWY;%_8I*e}?W>s48trt~TgcV^r-CNx+H|CV84V
z+@Z4VX621SDY=iiFZnUK75oVlL)`}2A5(X`&Wq4RXAs*Ch#XRxT_?5ZjB(a!wx?=-
zX`r>(>Z<IET9QijsY<0(0nO?{Uow^G&)6(wv*M8Ng%#2t7f`hnCf_5sA}@iW0u*hT
zTyuUey;l{JpR?R_{kj$=KZ4C%y8;D-1k01Wu6&(0d*{#2qcQBAXix2QtGj1ko9=3t
zq1)b7Zy2hRd*+QUFRGX-iBaa6-Cm_E`M%iG-`i?zT;1YM?*Hls=t589;!>$QOtrz&
zNXfD<q-vvDD&RF!{qSt{OB?E!*4ydYKzk?Fjr2xlZ*2izZSy9~f<QghByXTXPT}^;
zf&zRg-CH-F<@U6NMK~DyH;B6Eh&G65kj$@|A*RAX(anNjsWDSltnsxqw|Ed#erT)x
zU(RS>PfsxZuaba|^Pud|7VkEyd`31DQW5fTsNx;kXl+33bU8#f-uxIr{t{%w9=}&i
z+QBE%_G<VeFmI}m#%W1=4eiJM_vAUO1j0JE;G%kRv<o~zH)Ro_Y=!E(qS3S77us7_
zh9+|=5;}KAw6Rm~x0|FvAC4$>yV$yTPX<uA<&lB*3L?!nsT4LkAKj<2moz#}UW-vi
zSXDv<QRuE_>l5AOg(Gx+I$DuUF1Lp41_@s#WXG&xU1YGmM2NCbD%G3{L!UR5n(mC+
zwPFYeSE{v2m<I(sCQZEno!m>_hQ18fE{2?QHeA0dKRZW0ZGgicG64V>wcz;F;X|D+
zh?a}mj#;SSeEa%)#v_9Zi{?~1&|`UR3&|kevd}2Ex~-sk`%`P@-8!C1FWk9rUplW-
z;ay8oi+$vu`D`z;S%KTr)^tW6t#*sFWR<tN$Jf;1s_YK5bditbdKH#AJvH@RiRRsl
z)2`aVRPEwApA6#}Z6(!O{dA|o_OK+Ye?j~69VojQUslovjpZ0SmPFpEIIH=Q=E;h)
zsvoH+Y5eM|i1<k+rgQRD@-RAvAyEIQqN)(j@F751%yh88F1Z&^B$=ex3;@mPIT=gH
zR=Ih8O69LW>bWQnS`76YXN4mTvl=30TfV<#cwfJ_Y|Y(^4TT={Q>T*GwOw7}V)1?i
zt*65Bd3Hsrp+8|txCrdW9cq(O$a1tdS7}t<SVjMaw%MnyY>9M?r5d&^Zc!_oo}j+|
znWcPj$luGz2G!)(SRaI+vGFZTh-T7Z%f=(m$lpf(Lf*;}w$18UE(BxSSc0aFchZ-m
zeAYJQw#Ww&FdF_KybZh_T)JiRvS2WGO&Yux>><}vf9d?MbJ$u8Kpm3`W3pW|OZFU<
zWHTsZxukLnHvekl((8`2&fh!R#^<kBt`C122AdEB0Fg>7xEsJfD0bxp5Og-%8mkgw
zau<00>L*u46C(%v`|kz2$qja6ZDYMfX_Rxcl~rklx7kik3@y=Duj;1h{ZVoax(k1t
z&eNtAKb>$pZFbx8gR?Ix&Hz3JI4{(>sf$Zx-@2L1`c@`SR|o`{Lnd+?s_F!sHr{k;
z0;$MgxJC``_jc`BT!y#SGzp~oA%(nX?#9e8Q+}WZ*`8Or0mAt@gtH3bue4ygZ|rwf
zv_NJQ<(;~)v!DsoqJDqJhSc(7i~IutDaRbv&V*QBMzt>U#OewQn?kCF**9`frT7Bb
zMWx9eGZrddQCzdIYwt*rR5Y3o^p6LmQpjQS(F$iG)1)wnsD`pg!6>vVmO%YfK>G`_
z`XSRcb|#O=R#+y0U1&7ef;O$xEXA}bzq=x&v6eJ@qZMk2&@@^(YG7l<3T4k=Nk||W
zQ5$WUo@m|L4!_fE)gxj(<D&>738+`F7+FJQ&#;ntj66U7#y8#AbIOt(FOu*iyE$T^
zKuVi90GO)1Ccj=pgc_m(32xA4grZofvwlf+y335Qaj#tc8MJi-{5cDGQclVvGkVmv
zOjuv85MbQWn0~aOd?ju3AO(xi>yag_bvd0e8}dT|CBL`^CK05XtUH;Kf*GokAk@!T
zY|tUKnl&7*(;7}WKe4+#tt)H8Z7GwhYEHbxj~k3DG#sH+Bv-=yh|G4(*Kq`5OdztC
z#|-wSR5%Jg2&`@F+cy+5rrKli!3JN@mLf6<iGjn0n_?;ASTuzRkv{7?u0s!iFX8^B
zrtHEQTKq-vmP~!p={s51E=zx@uO_JB$}MWW&0XH+k_97CWf3mrisf>x%52nGi$uwK
z9icR+WIVo@gO8b9&|20>Y*r&rT<G*e8NpWA4P_iQv?9$0nS5zPD&q>c95Dr-8hIaF
z3+-=pmUeTczY;WGNkSeDHYRkqHr!ZfGl>zt)I#98B5{(qTb0B%|IS$*GjjX+0*(83
z>mgeQ1skB<Fb?Ga<J(ToEXxM1H)Oo$v__Y9yNm5Y+<VFc4Q+*8Mj2`?KUZpvi3T5K
zo>`%34K`3`aRfaKu45g7GJ?uxoW7)?&_^}=W!vcMo)}QeOoWj35k%!Cw>2qF=uhdA
z;-um<{swj3OSox|f!iqk)B3;ub^SdM*0tyjU^QGjw12ZH3R%vbJblWCiBwS*qILKb
z*07$3;b+L(b^54GCxe=B+Ln`fpaDNUbq~Y6v*I`ugA(d@;}GukaBMz}*DR0_nd4#Y
z32jIa(w)$Su;uT(GxxpsDF56fiTnk853Z9};G|Brd^+!x0xg?%3N`zwq*Ed(kE-$y
z{APiIE0RhS;%%p+0ta8tO%hrj8cf+E20n_a;gKL@$UV*o<xP<pX<VUcnMtG+3B|}9
za^X;w#45FkSW=dWu=^ECk43>2AwOhrCQ@5uDu_XP-RmIU*07o{gSV&8RG=bdEDvw2
z=81n@jJIy&4X}ZAfIf4V*5#ot!N3N{y8@Md!mCztlzfhuD-~hrin*uTFxg&9WuciT
zs8;ZCt=@qAd*Z6xUOWuX-P9ctcvwQdQgJMdX|6)V<l3x{2weebF<FpbuTKT_=gU>R
z%({wZ_>9upQm-$@H}?g4n*~+?D9=&SKzWWJkbJ)0h_fu*q{fDMPkV5+PHYloT}bOR
zmXI^(8XF=%<WpWGzMw%a#2uax;MO~A<YS=KYZM8{T?pf^1qG{+&uL$XWtxt@!xKU|
zj@R{^)~b`X?{I`jjG_=Eu;w>ZhRZlYL;`RH6Tk9{tPkzdTBNMY6;PV#Mf05Y&`vX%
z3t?GiV8vj-Sw;DNG`L#YclJ}|OjP__Kkdsq4dL)j*$>Hh{yvzdpo`_zR64B>8j=lO
zA<Lfcykq6yvj8?u==cJTK#C&g1$=8sdk6uxDJPyf3*0v$j{_IVb2{xRNZ-ory<dpd
z8f?rB0#&LOSyj<3Blw2^im3NhbSq^1+fanSPfwf^h|kGvqL&c~SMs&OA$^hd!7qWb
zd>JiQh4j8EsLiu60*sxEPRAnC`TCrWP$BP!F9N4CkPvK(brzcgtxL*coh9(=IJSCC
zCe@orr4oO%q-VwJ*L3*c*F^p54j<$1UxIvzcCfZU-Be2Bk-p?`G0iv#Ide5P?YPK*
z7&OijZlWxFgeo{t7JjX0u-0AJzp+YwL|!yl<0|aiP^CG7aRK2k_og!lAbjv^IRZ{o
z4vIwW$~MMXk)b}f`oJ$J*@yfE;lcIRUt|YjIS<x%Yh9ER44YCY-s6b*e1%FY)e(AM
z)TcM4XQxye1m#QlYCfO9FnyHp7n>os32~GXkzAo841~cO^BVNYuA;<j0{8N`Ts~JJ
zm&hb?W60raNEmT}LC+Eq2_es1SYb(&^MwMTKr5EYBvNzC<F1RFJWNf<$)6*C1z)pv
zGBqmEZ2CV#2!tw0huoma1d(5C3n*E}cx#*|=P9gG9Y@8(1Z*}>1`Q0fkZp*!CY5rV
zLl1urS)0y?qt6A~ifxo8j_|nk3IPf~AR0%20A~vODxFYO$E1yNKI*4jqXnCg*TElH
zX*v#sMq$Zi*eJ_N^9m|R2c;gM+G%DGo>0K!)ypwW5HeSfMoB}!6Ua~$<6!ABuEh?8
z0jDj<HTKF@i`HPpVio5w#c=t8YB?WMnhDTb4={<eO1?>ZXdPn*Er#d%CdjKeObuRU
zTQii{%ldG$RthBmX(9N~78HXt>X7~^qFZcYv5b{LS|31NLbv*~W{di?I)bgxSe#N(
z#k&+`QhI@A)l2XX6aR1navaLmSWY8I<Z4!x0H$VDwjQ>N^5N!+T+tdAm|fUaVyaIQ
zez}v6nAJ}Sc|si_@;O3jqk=1ZQmsL`4n>Fvgndnm(HkH~@Yb!+p;(7XKiYyQEJ3|5
zR-1N5u$EE1ssqD_o_Kstm6PFHJJExXzE9C{0+-yag1KfF?mXsXc`AAf3)`Yf7W{^X
zY5hSEAzzPmr!AIrcZ~YnPwz1tYXE;}N><Id!OB*?QeM9DRU9nVdJX=RMOfIos;sRK
zvS6x%<#s}bLXzRLwKBQOtiai9lp|mX<oIz8+Zaw8X6+p=oZqL7B}#4jQfNL9UWvUV
z>Qi{k`r_H83MCf+zJgxoD0&!K!{|)_oo;|eI~Zfgn)8P@?Ukxf6^nz&4b3c#1V1xz
z4v|QOZ<<Stsq#04QtG}0c@1&GG3*5eGi<~pb#qNcxuP*KGR@qb20sB;#Kn-$xrj*k
z+aF87Rt_TJzw-hI@G*{*C+2bGDDt6@Z;n@5q;)*A2uQE2ky&}<m!;f3ody%g>9g8`
zCXj3BJkoH%RDV(S<+G?~!UKM5uyHx6{c@K#s5SWwLTJszBsd#q>9plI5C4n{M1uET
zkbrGm3NTECs8wuUMYz;1g7yqyD-Y|%W+`RS5FU9gp8{}ujm!c8q;SeXJ^<$-T#id@
z)4b9<lzBia<`(b;N{BYsR5}}$)m3zALK2-wq0lN437dZo3sYVBeTW}?P-PcgE$t~S
z9Bd3Y^yMn3^jD{C!MH|x>vl>;?1FT=pLG?aTM2#V!ct_DLl^@yhR#$lfgLz)LpqMr
z97~H{NDi+Fb*`+4v=^B|U8}Hn`D$TD!z%|n8VCD9>ed@p-oGyGYF=5t^8U3{s%yc0
z@XQ=z?Yd0OVOpr$G9Z3QC6E}n9$E@6#!_(ODviP>3!W(h7-Vim?Fj>OW5?xD8U_OJ
z9ZJm%^<p>pTFXL$Z7ImS8WeoY;T7b3Rr|n4Q#J}C*D1Rvk-H}ZA5|>SND)+5YO_kU
zY$eCU(c8sN%6}zO*<3;Cb_HtEfigJO7UXqA4$rZ(U}ipV-e@t@mZzr3^+Aij)GokS
z7?H4=<vO;4W9I1WV%M2cz{Vhd7IS$D1o=?Fw?MfRvD>}UD;20w3(84JnOTYPDSvRm
zQK*|7q<OA6FTNx>RW6ir2C!*1OqC0rYcr{|D)B%07P-ZuPWDwkR(_|F!x!Ua0@n?g
z%xRVB)_tvn`dWqCQB`O{#1C-zSJ1V|C(-AT`=G8**)derekQtAjtmnP2`c!CV<ASL
zXEn==E)^*f8<4#eZ15e-NWVkOe9Q7(BOt2mH&)fm;qnFs1#{5TU@OZ&^Bp<}p6(ql
z20<i|1XUV|%q|l<m3&Om($uH7hVl2gK11=^MO|vXOAszSa{B%@X8-?$Ed)Qu&(q_;
z;|KSKowcgK4?Q6qcen-Kx|oKAdorzF{JMzO8Cz+HHwJ>u3Az`+FX8*oFz-`#T7n6?
zq(t!V-C-Pex`p2Qm>S2uWvyQ9*D<Fzvc{Nb4h9<I273OdAT4Zx`h@Y)UhaS?RRYh?
zQ-*XZu8j7S+BA{Iu<^8eQBSYhX3&ZiT$aP&P_Xqy9q~X<Q(FEtsFo~hSs)Y(v%c78
z;P`jL@lAAu$#>TZtE{OEwJ%94WAUi6h^G`2TC=)5A+i>EU1zX;mW@?4WA%2n!eJ<t
zz`<MV)j^k@P5ywM;|A1@UJcJ5Rd@Jubq|lLwCr}i1Q+O~yLlG%z2MrdsGX1ksi{b(
zD>9LvNeN^J9Out)oL@8JTrQ{J*W{+HpB<yelHz=W^g5nJ1IchZvV)M4=S)R<eUS-B
zq;zd~z`<?<e`od3_BbRukhwQ;AFGF~rq1LY@Skfi1lotxNlruwxdlK)4z++*RZ2KU
z?g2&c>nK<Uf({4yE9BP>$nJs+K0gMd$T0E)+O}lgc|?^GEe7ks_0&@#>Y3f37&(ai
zi;lliTH-NjOo|+w_|H90f_Lt?1DMD^U-XPk3jd2+kc0O;c@M%y`p7>6(;a!w(0&7@
zEpCg);xT26eh&T*UO9O1=)r>wT)V+5@YzMwdgT_SWjDf}_z$w^DE+&;!C~Yunkvvy
zIW@$0bjf)VD8xKG+w(@x6X`LrzKia8gWiPvYH_YhP_BbbgAoo0arq4L0rDc`d34>w
zY)0XCwI7+%4k-UAegBvQ+cbO*M~>s@N~uucsR-DjW-(i$ks846JrXtU#c%`{u)Ek&
z>Fz&c=<^Z1NKTkU2C*O$h(S3TF)AGqo!V}7>!SdS$prWD6wo~2-6xQdw@`IMPe34-
zLc5K^Geol`ZiypHe@b2e7=HTOe(bZefWhCT&q?#1Lmxj2O8*bfAsfyjoBj{af%IAQ
zi5bsP=PCOX8D}0ki=AU&+gz{{xevXPenx4bPSbr8Z#)Ul2trOA&-*={uLUQINiE2I
z<h4&e2{wVp$Ttv@e1o|som7DDgIEEIW+vC1zlN?u|0xzl&8+vK%zx^edkbuMa`Gx5
zD?ss7!5`pPK-HhY75F2RZYIy&_oG=wT7*KuZIRQ#09RlYHT63e*YFFsTzjCtrUX^g
z2Z!eOw`CMzl8nj`OL5ceU>&|)t%>dU-M#nzZbwX`K51>+@f=B>A-94fcYXWxwiXMs
z-sXY=tRC_Ky26Bo3AgY8s&j`0r31kKkpSYdo;YFjHX%Hn-$I^mATK<MHfgZ8$wrmG
z(pOrpb11nJ58<a?hi7yiT!RpQv_Q^O8JJmHpM6pDcofoM&z`|TU+c1}-re(~p5|q9
z=H5J7H2=ZR4qoxf!Pd6@Ki%jgClFR@{I<awXzCU(y=@*edA+YG=kB^|;M#vays%^6
z50-9z=bjaE@^yMWkQHMca6LjMHzWxxw5thNkdya03@V_S2!e;HPvl3)uR?A_g%*X}
z6aUQNf~AJ<X6uyX;)5@0Mv!HbRAdoL{pf{Fn1Dm>Cjuti=#-G(0u0-D{?YfOgiOLc
z&zG|K8ZlTPP{`F%{M5Gt=zE508(E>TSTx|r_FBUQJAMk~N`+(}R3t?P2{=UstW&Ve
zfp`?--=ph?I_P9aN@HU=^COzrbi52@2t)927l3dA8`zT?4tf`rj=#Fl8<y2H-F*0X
z@4?^R)M#$KdeI5Bfg_Sx2f8cymW~*?a~85jpqn^|4t#3%OLc~LQh^w@25Up=?xTO)
zH~h0-|9P{@=25t}9Q)z8q1f=Zhr#;F1i6>SRS$U*`vHqf=Qd||mtZcyT+HRai`r{h
z!cO0X<se4g!)G?vq!#RIYF&_2mX$utQ!9mhQ*m(g`+M3~zXB8|%34Bd&X@$Mjo$gU
zV{bJcc;niIhnLl>l*Lu`*6!Q7>m+V}kPw>;dZB*#UB9{Zap3yZTCT#X=1XLp^!y4N
zq_f`1&(Ux3v+y+jiiR}=zwg1MR0li9rOl(V!kJ2VU_vKob@5AUQ$v+z<jz&;`kVfE
zt1%vp8npa?L9Dk2Ol$Y+zzYhp9IPJqB^?@((+rG4DIY6cb9!{gA5P7~xFYVblYpA$
z?)7)=yphFX87MV%^6wB1D}*CFL;twwGJ?vWV6NdQ@xI=aC`_0(KD;W?dFb`6n#$Tb
zlZNMViqy8af6c8rGOYm5B8EhJ+!VAM#ReBZKY^2DH5>1mf8Z~7bYXm{u-9pT5FEJr
zuHt!Bc1rtoQoP7F`8oDG{Bek*cWE4PCO^Z%n2gE+gO+?=R0}+NRCGMt)gYLPLxMk{
zNB|2r4@P;)pfM>!5)~yw<r>|rR%e4@;=;A?7u*@Y=xKG<8xRaVeAlOEMvIj<OJ&NU
zg~$GMTck%f@y?dJK0Q4~{ZOhbT5#--w}yMPh^K(*!*-7KAbJ7n`E|6{8p4owhcg|}
zX`|K1>Ao2*%XIb~)i{Iopa}EX_KKuc8}C_I(pTXV5G5`1QZ1W0ed*Az1c*dyQ=&XJ
zstGwAtrZ@Xa6%)uYQ-vhNaHN=>p8|xP3VOcCSUQ|*sc%m8PZ3qU9Re=zH<G^!R4<E
zEfg6wl8NWi3me?7d3UU@+8wub4z8?h8_Ve24GYuXe8c2Ok;}7vTg$R{ic>)fVvs19
z(fu>4HRSj)Q=ted4{YGG4uum#4c>We-j<3G?=vGn-|4<#EZw-{fdw^N!W_1{xy&^b
zOf-fRdRH|TEb_KRhwoVIl>iVZiN{9o7`tkNy?JdL_bY&utvR)L^V@gMEsoXAO%go9
zmvI-TV-8+m$-_J7*xt$g<RjU>x4!=cGkfY<2zadvaxk`51gBwa+WE*x&4z&DfO5a!
zGr@A@GN36<6s<V5bS6mK|9E<^IC}cz$jC|RtcJ)(@j=L!k%GU`e!+7PrumSLT$l74
zpn!_y2{9_jzfaO~<=M?uTT?o2&|v6|)()ghJl4ypwunmSu12^Tuj$$5&k%6cPj*#F
z<&bVg;l3RmA-Su>T~wm6DmW8|;mm$G=bLnViF2x&Pd2*b5~*ebuazyVb#~7x8-f3J
z6wRr$&${Ww6+I9EHJk39=lSg6x(&yAx2~(*aBTM0b*B{#i>_+F`ont$Q_JsMy#AMW
zEt8XH>2<zGK7>9<_nRvKGi4cml9FYTi9_HH>JxbZSwcP(a)a|I2)Riee3v92!5+cr
z9LH%{MjH$&R!)>n>xXCzdt}?&4J@sMJf{j-%x=*$2+CUX_L+~RYMGd`nJ3}!wUQ?U
za)nw-C-}|{Z!9G5)SAs&Fu!m^_(B)nfpR6Hb5gxXXq0^_l2B5NzUPE^`wA0KkrVQZ
z<QTYEj^Rnl1LK0WlM6fu3gaUIb4R%Op$>0Yn%Z$;|JsMw78~j|&Dp0mu!S;lI9U|2
zvn*Zli7xOJE)|eCc;bCqQem`43!xla);G|)|CKFcKYHO;TUAz%TvOFKwC1WNdxPai
z2f-3^iIzM_!51Z;L9fReXs;A4!@!gbbGmXHn@CQda}feOw%XC!{?>HaBYd?&=t(qQ
zGm@^~`^t`n4mK^hJk3k1`ZhOPz`5$a^03x5Ufp^N6kIN^UtvuuG!-K^FWvOY4IQ>9
zUo2;r&5EnNotr3Hdz`!#{T%-_q_vv=-A_3igu-~inTRv0jCagB+e=l&tYxZVdUE}g
zE9R`&UR}S&tKkN!X2tk=l?dSwW~C56%?;J`MFo07$ov5N%$_ZPnHb#B1R6)yP4`uf
z2Vbt6S45yZmAo2=%n=*jH2uBU6tOXT&LIzDm5^4-p$>EDHRJz~DFh>ZFfYg7y0Y2R
zNcEo-iR{{Nki#Mp{bf3NU9}-jOiWyt6ESiqVp8+Ub@KXZQxSn+*JXv$ZN|*TIYn}+
z;;gW_CM=8gAAIe4Yq2t4+$iF6Z~oN*TUv#9s2`3ND<~a*@>}pEvf(oKtWUfXLj^>J
zgIdB#wWru7U?CgG0fVuEuo41uQG=J}^UdTL`~X`9Z9uB}0hM>fyiJ*5xz4q8;-Nf?
z2oXv-Y0xYNs8}KtTdS6%titZqRn<!yEG$H?z6Qq$ztt8p%W!b#Tjc&*m$BtiZAv@w
z5MO7u%YXbRz?ZXS5^Yk8bn^8kyX?gyY?)shYc1623R`1Ze=uzmiEQcMf4(>IC(wuP
zh%L_~=i4vbD>4uw{PczG(PgEHxi+*H8l|H17PyXHs7s%Qd{;o-FXYwLnku<W*VIZf
zRj`oTY8RH9RMC!-UnYQM!@WzR%?EyQCF$SsmijF<K-Hj}AfMB|;;0@@yDNhlvL4x)
zn7gfh#Z$ZLG4t~;zWDsF>9YfMZ)`84zf*1ODI<i6vx4K7ML~<2e7udk(Dt(W<wi86
z!G2GU{b*t{a?OvB`7cxYJ9#VC2H&0bb!PikOdr6!>Nd1_V*zJcPIh!&Juf!v$U8ft
zi+w8Gq?Lr7&D-Y|YNGWadt*(xri3zhQkschATKpFrZzme^&axvbBo1_ZAz`E>YAVK
z>RwxK(M4;0qzOL-;h21yJi|euoe9ssBimaguO!uUS!kLax^k@;N<g++6>YBPidk{c
zVk~CA!&j7Ql)ox33hZn9s%=l8(nvmU=q-8>9QX9b-7$jv`c+p({Hi?RT;23l(^^NV
z5oFZ$&ezCsOJyKjr+w_Fq|f37ePJ(n+vk|L61mdhBfZ`*vM60Alcobm#APGHemycg
zaZK+AZ`fQDuLsgnSzVgU_Nk=KbSGSs1Fk7{@uDCmFM%9e`fxEGwIB7C+5OTtWzpbG
zt>na`0ByR$kurd8B4z&rIZI#TO4jPLz`2~@V~=s-O8hhg!U=wBa!ow#jEJOl8OAol
z55v7>`c34ugL1K{3|<-nDi0qpKwvy=#*wO3fADdw?jfPiYC3Bg%+5b#J8L7{au8CM
z*xyD6;SA!siix8w;A6W9odg9CfKwC4frb1lZqS2w%}#p#X*mA{xPIr<{9wlVDYc!+
zchBJg>tt33xF6?XU<dh<8kA53aV>G3ZW<RfAaJP@M{{U^RPoYF&%eiDf`(xUv`;%A
z4A$?2A)dDn*qO`Ce=B*d4s4jQ4VRhv?bktW53+l|kMR}e&a<5M4$yz`eat?;**bBo
z6;cYoTae*qfZvwgR^*C_T@a%Ok(KAIQ$7dw(JYO#rw6jg*+(If-9}!RF%qPy^S0?h
z7&>QP3*Qg^pXr?Xi~XrNOX;`2J%iHcP?R3DH`HbzrJuizhTu`G6!}TxcM^M~#zz{k
z-=DY9T4~qhIs63v1k??wD?~a>FE@Ku>0)I&Dp2MyZFQm-*IK-|#0FrThD!7rucfz}
zr?hG;DX$vQrLNATuPi-q$Bx$ywk-WQus>;v$D#%uE>r8oVuLMU8ou|6I!b|++ob+j
zeDv^e+p2o2CEZg<xFpd^y}^T&4`1zX`saR2MWH#+f9=Fpsmy4tnt$)#cRvN<f7*sa
z`*BEN*GVxP>$>AF2NoV%UW_7@kFDMH`oZSnh1WFCzVpDA7><g(F8WN8XRs6SOj7k*
z(Ad=JfW&~D-~I%}yN-HazJ*+)#SA*^m*@Y*oC)lgZ@ra`w}Et32C+ybb203mBBlKH
zGz?QgJ_Ry0`Du`x2$G+wfs8|L`@m`yJSNp~ByKG*ih|}3C!Ru5&y&}Ijn7x3Zi|M@
zI7<zNG6#5G;k@u0$d@00=h)BC&kP<$^JANZ3v!v|AQ7_wtnFk9kJ*lTJz4|jTP}~>
zBlQsE1QH~l{-;*W`8_URgF>|ph)G5Er0b<fl~g?OdyN9ckrQGWDdH*k;3xKpCCpkO
zu2^$s&=I}bED5mYFxWc(^{wP}TJ%dTx#vnGcH1-|L8^TH{O8yoAQ^#zaftV~;aJ){
zniK)5ED0RR2(@YW6?+?w2p90P`jxNTe@(AdR1EMEzJ1kCZtcn=&jy2mTR3`h4S0{V
z&stf?cOiGvgbE5qp)7s|&O!Gxu+Vj4ZAlh&uWp&DdjgVj?3u^N3-zvMyZNkP!SPX_
zn3{&owO2-+XC2liZx`kHLK^rIHaYnT>K(mrD>YSOR;ir@3dwhH2_Lz8$``o-&L^ko
z+K4g^PwM6h;s-pv;>D9!v>8N@MvM9C;inIG(JTU;tB3H9om@jYz<aY+LHH*I@KdxN
z=9xUlGT~>TKHXH1%}c@QycAl=rvh>kS&F0*05EpW{WF!WG8O)g#fDCAYv&*Q-JRp*
zI#X%?g)6l(mDMV~@)v-6>)J;*mYF;E{f2z=XR^m`?btHZX!1y^D{eS+OYNGM4$Twb
ziAAkpmWYsHe`>t$`Sl!gAXU@mcT^V|$+vNnP*!NSTd+HU_$MpMm+Wh*+PZvReVF&y
zUEZkIFkIE2P&Mv<<61>@R;4BsEwV8E1|G?-tM&i)y0S?t|1T?xtysIh*!`({?j0MN
zc>gbpi?<{!9P%m9D4D(Y*>!nKq<Q=?sBfI2{hutlq(PR$=a&qnxvXWT`hnhKveoY#
zD(<=cH#?()F^-gjn{?ukvuSI8G}^hWnEdJzJp>(eYxv2<$5!7({^$E6LXor8snm*-
zYaib-e`B?V(FdR~e3ur(RPQm!N5&YsaL{VJg@@2C5V|Z6rUgkT702G5*njLc@~+U}
z$dXkX%PB8?0}+WA6_=Kko6+9eeo86fP=h^3t|I^b@B*7geNyOd+V&IxpyS>1Rt5)$
z@liMrb<>Pqu3&0TZsMbNiCVTkv@AMU$dPd<xfXI3c9b}|<<o+6s0EVYJF6bwR+U|#
zNLMz}gs^7F)id}ZIG=cGUDHDT5Vf33Bs{f-OXd4G`3Uwb!<(o$6{g0<McfH{_Oa*T
zuGx=P-WR@vJ5daS{Ex+r5Mbw}+$pDzvVH@3xi1IncX;c8ikPygSigCTJg{{Q#%Gga
zY1Cvh1$gA!07X}S@YoBq!yfo#0-;U<zM&l*FCL-Shd!iDn=ibqhkwvwQ(AMO6+cb+
z>@WNzp42C_Xffror|qQ*s0SGFrwe$@{ant{n{xGHQ?6%AV!F?w3zYHo^=n!?cQ0vF
zT)4a9;LV3>uXyve-tfTAyMDZE?GLW07wH^obP4$Wqb(cfH=5j1q@id3qEuqxfj;Eg
z%Kn6U)~U~LU;ob2hsTSX_P@HbsV^+zs|9cU7SfoJzKi-|@(V0YX(~uR9i!L*;d~JC
z4}O7))}gX)(xk<a&Hn;3;l;o}c+S;514lM?08l`$zsfJXjMgKuxw|@NA6nn71Rw8t
z??`8Sc;ADstl0D3?Va%jdmnrS*)V+Ps?yTcCl~!_{*mP+#Y=A=LN*RR@Xy^F-+lU)
zC8^;DKB7O3r?UHqC1@LShW@|?|Jd;)tylV9eUvu!&VR(nE6T*8{Yr<iqq&@AN`%HP
zPCKU}nzN>3TNL=z<Xg$7EF53+iY9M^k8WRM(}n|F*2iuCQ2%4foFpsAFUps+_~c5e
zWp;B-IBQ)N(E7t+T7RIrM#nA_K>c5IiT0=U9DnPoW>16P%s1!!8H4{*vv}z*RQv8J
zVE&ti0VbgZjdw%%EcBgz9yC+}%}jtSZ1gk;{A0%a;4SjkYS2vn?jj%{S5+f>Ce}|+
zj_i33nVUEJUC%LjSx|m=(R-<zuAxa6?#va@q$+2gty(+#+BqS8syB_aKT0-id31HM
z>*Tqkn={WNrclrN+GuC71$+P7fs(NsX03hkKs$oMv5CpAppJbC;=Y2`vFQ*zIyQUi
zLZ<{UdI^*2n5I*f9eI_MGXTGniu6njUE8^IkJi$&U`4wB;DUJP-Cy6etQ??QIf&Aw
zudKxYNcbn#%-u5()W#aZfzHYhPmgRMV$pzP+5PKEw=NBLrmZDQZkV<HrTq}P3zCMB
zGTo|8GKWRS2^Wrqd)C!NyVDkT`-V2UHq>HBZ%d$kP)|dy&v}#LLG+@E4>P@@Pytfp
zR#WJVQ*{`}Ao%Ig8+uzd&k7(!a$fxn>Ib&(8y_uS(43Sj2wr6FpSO<OxuV!wKEE{H
z5+wkiun?71I2GX<_akfQH7vhxU1@0K_=?8iV)ZXqk2MXLoF=(qb4`16_7x53W%HV~
z%Ie`=-SK*#d}>iN&mDoZnuhBL=joh@i*n{?EP@i;Vt}P7#rAg3n?as9IxF+6=6(v~
ziUmyx1q3<V^Ov0v<dPLDf^`8YN1Ihk!Ist~6?z&xv&*bdY_4yM_Fd7q?zyC@V%E}%
zcW5~b^}8+bOcc>P3@CDbw#&(5Rvspui5P1WbrOolZW`#^)@Bkc`A#`~4U46;5}8J-
z<`GilM^>wHD2xo>ybvA!4*C5=yvi+JwMh!G#|_6QJ~#O}>olZIH+_pTbq1)WY&jX5
z1rdq{3c$N*07tU`n(_oWl)Ma7<qa5u6#0;~Q`;I@aPz`RD2`8096(l_Kg$4NtCLb2
z2nsqUKgS0l-;dH&xUs3`Z!>zuQB9aKRC@^;zRm>X=r1pyeQ@o7qgzpIG!)nNmMneZ
zs`{eQTjm{oQAK{N)}S)PCsHgu_4c+CU!3ejR&D;>(}%{2Oo@8;QoT?icNk^8$N#u{
z^zPNA58S0!-n8`i$9J?0-uKU}O*HvAZ9m!>U%(U&T+T#EKBC~JCb1Jba{aR0h9J~_
zTs>nO$Do~wpMLAY?!1N1zzy2{7M!yP%EK{;huRtU!O8sgjx(D5(1m2C`3TMO2@FkN
zwdX)X`)wN=e9cSBqP0GG%fVN#Y}hi=Wvx@%L<(Q!!j{T;Y5l5YzbC$I7_YOMGV?N}
z{Z&yVpWv$mzp0#^P(>HqFj%*3v|T4pRyH`hkF2jFylKaXL1eHS?CCaN$E@!M8|MZC
z?P;sd=@WDK5=Q?#Oy7qEr|Wgjkb0L>M+fy;f4Vp4PY-ZdU;H=y^!*u<=f7#HOmC<&
zSQ*?$UADvV<$c~+n>&6{ej3wi1>K~Up{&B5)z#JG^;Q;YAg;wR!e_IFO>!JGt-yVT
zLkrrc`!Cbk|E2D()=E|8o5lEPpElN&GMQ3cF|999=8#AnWr6d2vdrQFeYvL0OtQbf
zb4?v0zVI-FJ2m+^dI}>7=$mf`Yo_aH=A}zgo{gnv+rT=!Bpqxkv2aulgR8aN&$49>
zSI1{(Y|iSzwO7~OwpUWNPq|m{h2Unzp?|v)v9_TQ;j_qtO>=`lTiar*oL5}2X$gG(
z&@KeIcX;?-iWdBnU!WRHT+m2IZ&G(rR5mujc1#7EGv#cFta<9B;-p<k{Nie|;IE01
z&LTdf5LD|b)E|_Se{|KvjhVEkIu%mz#VoE;rQo{fEF6thE$=MkvQSok`P~W-an{6)
zu|j)AA|U0dx$&CEF)<OU4N5ICb5UVfCB4Z<graesIYj6+2mmOqG24W$luK@mH~Nj1
z>NP&)jeb=i7$US@g<8o|jHD{5I;-R@Xaxo+T^*l}n5R^9+WB!&=K=a8gKd%4q(N*9
z7+gIz=cl78<Z2Z;=8r8+*N#<N%T^qn7a4GxaXrB|{V=@nj-{!VprW{l{5jhG=%eKA
z(R6a?+K%1t9qCrehZSlb-LLoz>$jMsU`@d#oy(>vJC;zHvWGP5u}ji5Smb#`HeD@Y
zMtd4Y+?7#9{Lz=1PM^3j5t$oE3$-GiOi73w&804(+M$*jv;<$M;Us!7c$nv@m8m%u
z_Cil*U6BNPy{Pf@$s3d5dGIxzkO#%N$k9~h5@_hx)I91nQ*}+HAvLGcuG4rr>QfT*
z4e<V+H}=+9J&Oqu&SquS-LoX!8C42|0>Bk5A&<bb--5bY*0vts8{c-|NQWJ<?EU5S
zbvDl;LY)7+NWc+|>zo81KHJi9s3yMs;L%P?HeSyKX&c8-+7_n_DLU1hc0ilJlphVA
zM>Gg*wBdzPF-gcWS29_XSggS{R<~l6vDlw!R`)%;g5x&aJj6B!tZME`L5ZU;{^{0F
z<Hd5lO3p`%lPzK8cAb<f)gSSNd4j6U`(&Bf4f^;BqXJkQAt~8}A!LUT;|k?;9<7Vg
zIU#I8Iyxi=7cm8p3$-N~n5Za_++}xH4ycsBtc5s!Jp&CtY_c3Q))zv667_}~bW)vY
z+)!BBoWRg5Ox_3u6FJU+V~(KYzrN*>-54NiIiLKNt&-nU*c7GGE9stG%@D5eC2%>X
z@HE9v*h%W(P=GaSX~0&}*dp${K9i9{B-vNRKbd>G@`&IQ0pu#mPKYcSe~l|yRFel<
zm`{V|by0Xyk?qJg_YMu+`~UIw-tkQxS^u!+-YdzLWEHDdOIEYGWLc8C+<Wf@+;PLE
z*fi5Sgc53iKmvh;02@d`da~IKsk<qpZVE{@yQ$A^b^}SCl-*!o|K{E+$u<!7c|Py+
zdH(?Go|!xC&YW{*=A7?26H5-&QDR_;cDac=J=iY$uZ$PjFv8zH(xiK5e8BKnQD3eP
z|EmPyhQ8h?`Mo0zqP|~vtjJG?Ry-2^c2t9?xs^a+IZwM=(1+j~ump<hKc9>rO}@PP
zvKw@{FZZ9Pcslqao(xBR3~U*HkQSN?^yMKeaSF|uEC*^c^d5Ym|MFBJ3dm2;s__TI
zMZ9;On&$`Td*S=j?+>RlCGSk;MOAU!JDgF_pRdb+JSnlo6i4tRt<Y2Hr?^)G!M*UK
z{g+omKKFNT#!SW(W?dO6_!~rf2)t>8uvfzpF#+74ljnOO&wt3{3B24ebRpzJsbJc*
z0pTk{`aRqTOOQlyiSc;UYOhZ_8g16F6r94r{CG`jLo$QIusXc0t4ebQ3bf4VfhxI1
zsvvCI5KW~mXT+1XBC~e)Kzh+FFRnI~#3Ne<o6`Fd{QGLWLBKP~0Gc`P_LiKvr3oNq
zcWwLL9<RG@B&YAmBDnQbn`T9`RSJbFbJ3}RHJ{ww#^zFYypR`XW3hxDI<=38#0{MK
z6@k+U10OI^Mm8}a_ILfUJjR%8D#{Lsvwo=H#HW}`vi;)h?^mui+vo+yo7#t?iyr99
z?#h&Kl0&nF0M$t-otHoH3GvHXxv*g3Zy0K_E*$7vwRF`|0!RlpQ2Z_xe-NF(i1-NP
z+0u2Gnn;}Ya^g=H6k7T`HXGyWB;Q7xq|cV&J>U-XQDyAJRa=eKT4O`#LNfLoEfa?y
z7M7<X&ke#}>DLtt5XA-YGm^{V$Hb3CT~|CF&pdPg{b%y8tzn$Rgqyq{t|KOfkT><y
zt~MgB0cdFZPx++?F($RJmde#pN9k<l7cp_NOW@!)f0aw3b}+cnk4m(E#Sc9k8arhy
z7~qIm_;UgkVg(;?1^62rS<JW|Pr$dp{yFedbfRv<w7REMJmQ8!KTXY}Gv^UicU3nt
z%Af4c?#)qflJUPvk-tmdN#-~+%(dk?(yX8RLRHr<9wrqx@ctu@;1;O5RgDxNLa4gI
zdIR_=^mACRX2u=J4HV1IsY&x{Qr4lCyv}q{wEJgwls#Ram+lc*e(nwPlk>R+iL=&}
zgSGhDV71JZ?*NUkB0%gf(L1SnsQ8711Ml>T!Z#u4ohyD$QY34HV_ZSJAX1abn=ocD
zWr!>oauo;Xm3G0M3lTJ2Razw-6yxtn%lx2`7Pf&vZ-w<qX*cxQ@+OKwd)B^|?A~kz
z$NRH4#vUwQYBvA8a#a)3Kf9h7Eqn;<?`hh%9e*7|>Ph`v4SC8!5~Hgud}nZDjIIn2
z##E#1EN2EgWum&o#{4OWuHRp@=goxZYTnzQlGK!CAnpVjWqf8dGtnVw+j6eAYOFdT
zu#-aO>dzEd+<_Y*b7joGvojV|xJ!IWm&dP*Wh!D=5~WsTa$)VKR~0*pTWt9wEhIJ<
zO%3Nf)u)=7eIl+o$ob$z|3i1g;qFUkb_^(O)pd;?9aPiyTXF_U5^mb1X@hW0?<QJo
zIUX$&{|Qd8MnTcwE!F>%&c%d>B&>fOM8AYGJDJd*Nti;{G({_TjZSurBK=P1B1P(~
zY$1T+dNrYFDJfA6b%#Dm*;puZ#_iZswBkgIDaS0v)KI5>`h#~;$~+1>Lg-rnubC#Z
zL(*MukKx_BZ{wvS_0jAlB3U$LuXqaTVqiKS5K?$zk(dR9w-;gER68Gz?1AoQ`=A8M
zatq^Yd&Y{BZKy!&$n@Bhnuhg{ul+X60?<-*{-VZX@2v|6<vUC*`{%8GXe5ag`JuhV
z=djNBX?G;(%sUcFnLs~Z#?2Yr(`wE(V@xIkBjmJF9hdCXMSG`|3k-}~=iT0Ak7mcJ
z<f>SaJUZ6fS^|!QHI0ZqEc<nxMF#t(xvlG^Wc(qj*ovFzEGdwO9ffOMN5*%MkRg-2
z(i^fd{hK<JBUSTOIGzNi8*(!I3STK?fr}`}x}KF$cUM;k+cXR#e7GZRk6fLQ@`6jn
z?ac%V;#`k}j}Bk0(RYzjqw8Eb%8tS}#2BP{2miNFe8fnU@p6vac)(DcmnMBt?qMAl
zu>?|(AWo9K8}2*OFHcoZ^oyi6WRI>;6<oG*W0~H(=-*H@a<+)IcvMcJH33m*#pCBl
ztU;O<?#&NDJqSS_Chsv;!*4AhBA6ndM-%rLc9{Md)Faq5F^MA@@}nhAdP7!|I`mp}
z2Q_G&<*Cc_@<g**-8FfMeDKW4rrU<n>-WDj(zJgl1O5e1F}cijW7d-1^!wH?GZ%KI
zf~N`7+>KwJ=_LLVrn=;}W8tTepW%KzgW9jddS;*vQ^Olk!mw*L=@&8=)_ZM*t!=G^
zw#;;UQJOPWAYrHUMVZz62dy>Mvavcx*~rF`vha>v$|85<n)H@*e`{GzY9NrJ)4Jpu
zIfvJTcf(y$4=2WyGs|DRq@$`h-#Bdx4%=#lJVXlH+WMc)7H)uOaPz~4PyZ)}4PxTr
zrOZ-p)3CK%o<Z(*Ml-5w{tr$c&P+e0N|oL0AR?qE9VB%IZ{!YVW&rD(X-%l}ZdtUe
zv^QJrOfZX;QHJn6PU%gxsPnIvEN^nt**x}ag@`yy`*n4SYU5jQkH&y)BzT(s8a)nb
zjx!tOMQ{7V`+uF$fbvV?f4nlI4Hw@BFXCy_>IE;}2lh@?JTGJ~@g04Xev!r}eJ!S8
zq{GQ!)P%!*`yxlCq}-$eV^fE=6ih7g_xNTTVS`*4OsKESl_7^wI&oT?+PAAQyF1Td
zp4C5^P8ucWv@Team%qT8b7czy5t-w1GBM(Q#)b-wAsgi6?#<<Op(FPt8IGF8MTLuN
zovyasU5%#*i{wN*BER}rVpX!5xT=U(GRdn7INvRkm$4O)cjQbzZ#RXnTq1VW*WI}g
z5faGGm;$gX7<o;Q-oLx?wv#|$$xEsh&2<(hDhi5h`2h=0AZA;09_pxB-Cz^BD^siL
zfz6RyieVV=*^mWNZ=#(%dH&7a1gz*0iOHvRrio-Cj-=I}W6o{%=!)}FW93T+ic?3H
z*|WLfw%edg$cJrD{Ezo6)8UDE0L`CIw`%rxT}Z%UOu3#x;oRB1#YOG{uYqi7Tv=mB
zV$JG$yU<?fEh&#-g=JEP)@u+RsSG+ZB??K5xK-uU2`%}p9&KT6icq(0sF{%MaBl3v
zNIOU%Q6Z62dFG7-JQ4y($^=P%Vn)z!g`=3(zo)Tmd5w{siQGi!BXw+tFPFS-@!65Z
zkx%cLy}2HI2X3GVOtiFDP5<~%K2Ls6?<DaWr?)i-ret)udDJB#y<>XwxYLdrYB^M6
zkn7qq9G2tPRuAiUPX35qguK>9c`RM)a2CFA;gc{##JHgsIf^ge7(O$aPQ-c*_BZ4z
z3SzwquHKbq&Y4$f`*L6*`<z6C@DXAE+g}tcKh?G7(y<l-6tzVfBV<X1oQ(NLX5*I!
zo2A0_R2vkN-=kksy4cihX?Q!PyJi5;zk{g}Ft9W5hb8D%3I1>f$DB@n3)uZdk&7?)
ztj!JJr}O7=R!7Bxu~?Ii>^YRz%E|vmgM_@My&LjhIfymDHYEPaJ;kr+h7F3)Rk<y0
z>Z<&;n`?@%&$z7kRgICfX`}P$50Gb>x<~+L#(#)}E!1KE#y6-zyafM516E5W?(`=5
zh^W}Ld;c&x_lT=CS`r(pG^cyhd&_J@RBVM!l!$br1>c<i{xNV5CvWMA_H}<g(OQ;1
z$mU9v(m?O7rr?}>Bb@;bQn*pGC*$Ze#(Y{d)GF&J?rViSAMQ&i=qSQfC)6-A8nyz8
zBOyyj3?9NIgxc}=l48R?-%K)=1*y8N;Kd80cv0^=yoRiS5{uV~EDFvs&0#4;1i%yj
zqNmo*ma?N`nJs0{FV|rS$|k$V6Hok2DVkqyZaVhi1`QoPCB#T=A{FrqdmBN)I00ew
zsiuF|!-KuYQm{&SiF=G4%i@dK<7phXIf@+>wV-Jz_NdhOHeel>8Ue>RviHHR6F~C8
zZuM@d@hKG9AT`48(mMGqokM?&iWf=R7E*^lQl^P;>Iz|LPbpK^UekddeP&}))gnVe
zRQ~B^OUmr>Oc~E#=+O&e`1IB`{N$!LcbEEmw%_;S+{*O>_3<sR=aPhs&dUCWH<ltR
zYHt}VibW0>Ob2fnHC>W&N^c!p#j%)FEc(Ks(e~3{ZC&-3-yIlCRworZhB&bXo1y;b
zU&wU^_vqOD^pg}OPiQ(#`79K;z@HVkUJcBA{E{BOs(*z4$Qrbc@SWcD#@8G1&wyql
zhQ2|>oP_1<rawx?2ltW)IB67uI0+zO3h@kHXwDKw9Zb?)#7o}P>PVPWz56il_Gr|i
zZsc=nw>&x8uy%H)s6Rek8mqIWSbfcT4kjNwE5Nh3;8_-G(cl|cQ7)^w!i+S;AVN)o
zbUaI#U%`$&jPx%lmKry-ompLC&Tmi76kuw(Ny#<jc4TbYL?kul_1dCY-LXcs@BqKI
zmYl<M!fT0s2#y5`XK@ToNb1FU0xXg^;xd}`%z&4`s-QEy<XojfI_W|O;Z&DHF4iP;
zFB8+gt2@mfs0A2?AB{i5QO&J`KhYS@{%F*uuF82^V-}pn|B>@v?tcD$&i*J!tj>K$
zAdTfkKLA9z@8<5~qo8x+WqrQppPijwey7V){j0N3YMS^$BnMX}zCctPI}2ncL`%A0
zvk>jXUpEqKu@ZiZ2T4prDq0M2Db5t?DDM{n|CjRPAU-i{tr~d2FPrXC;Y(C@uvMMa
zQ`mz%zed=6>q~2T(teoN%kTAq<`oZ(`qv@HhL(K+2I$GP0VRHW=i#9gT#atn1n%_p
z?3pE{_`uNQe=|OVbrW%D+h|kq<{}|=r@20mR{u9bc)JeSI|Av3q*aU*8y1g^rvGu(
zLnA&{)0%3jiTl>qxzZCHy)jsTPn@T3VT*bEID<pu_PPqH3tX;Qo9fL_xfTZ5YKc&-
zcbe1|ImcB{Ti~)atg5YDZ$y3|AoAM!a2aym*S4{;cHgoVIX6Ky@kJ7NS0SBviGFhY
zzqlNpkmoR};#F#QaccI$S{Gkw5;yV$LYa^+*YY)bh1ye*l|HxHmF9wD!6YJFF&`r5
z69?*~a+;cEBC)-xIYphE!fC|=!~@|vWrowp=%s=hPE9j7!{9$1oP5+Aqx5H8Bs>!J
z3(hzCpWlf(VIHL;EV{rTz(0@PYkPY!2DzNnA?Uux_8vIh2~ai`Yvm#zdM1cD`2NfI
z-;Muz1piwa{$KoY?w<+TO6RNbHbe-pF{V#@OS}U}0a(QJYoEUJ83Ee7b5m8yj*`+H
z$?xujKT~&?mhMh{cjv|!=koOQ<<31j3#I0XCy_$p-=>`fQZx8toC+TWJEaEduS}08
zZ-f%I8?LoW*iN|4lr$PK5hbBBLLEw&TbV*f2RdQ*F2wuj9!bXg87zMuesT;uwrk?z
zW4px}A7sG&BxqfR?L2c1=YwynE5@zZ&a0zm?g!uE{F+LXu(2U5r|D0H?Cd0zzX{==
zsSoow)EjpDAw1~OvtBI_eC14t!N23^HNBPiMCIesCrSZYT9y<CPAF5%pW;q~4$PGy
z>ttyYZ!2YpMk+xGV3}u;?uk1YCNQa$O?;Ffd6v>+cEYvzeAouv2tTTkjPOc0iv$rS
z$@WN<232bTQ-uG*2h14MD1R**pYZ%5`h|ZLJ}I7Y5e^6{1@<OBzUA1a^_zMniJXCn
z@4%jQcdgm5wpZe1cY*cqz6)oX06!nyL)!S|l5;Il17evBgn^MfmO7{>c4O3znUp;k
zb!-}Pj)u9Yof9vlo`*CaI0+5s@!L!Z31_~-zrGERiEmruS}iCn*nLb<8a&Z@_m)15
zI;P{P-L8tfjLaO9*r?*uUzIkv9gP)P5-Ap!X)~7>rV4RI&(4PjTMl%@X;ky~oog-}
zG%Wa$e(&68@Slzy!+*LkxD0#r_W;icPOR%Y>aE=Mhowv3Jkr7y%fwv1(kR+<b#XA@
zYQMF;drOVMShApuKXBi&oWf1dESvw#_R2&DUP9V)O#TDkh_%vxpz&yVA)l7;z901m
zu5oy#P%Xnwvs{$P1`Nn3k>A;L28TS_s*%`q;`i%<aj8yKuy<{C(cB_~Az0^@yY%A3
zhDABm@i|Fx7OlIrERDB*joiHo^kLqH-MIw|yPBQlW$}5v;}=$RXRO|MOVNU}OEMB?
zt*OY_bMQ!+qrGo5yYJYVes`U*zHN>_XKP{h;?5EYsKtMFA!lJfFp`%aBzZX-%4qTi
z8xY()#M22TN*tR)hBC$017X$<`3!17p`L%1<LKOMz@LDhKZ`rqQ;kRv3|q)wt!!C$
zdZ5bt!|c_(HJmm4)mD(#cl$tU^d=s<Na|L0;a?Uu9tFSD7T{kiJknKFYg^oSH}dnU
zu2rDM)wrs16}j)Ohq_+|)cvAJ?I)z~=}_ttkK|#25ST_tt)p~7GZB13l1S>Ogn0@Y
z-F|dI=KNle4K@}oxU!xf$I}uDTw?F>`KfcC2ZEDI%nUWSwU1^ti&HgHr!T|wada#z
ze>6qcBa<W8JDiR?-d=t1O*gna@l;hA00*VUf2v3B`oqWr!1D2i=(SSgGu+Oi#Y(P-
zr%{R+SFZrA3J6tVxNannPn3puHG%x1CrolfoEQ-NS{Rb{)P9y6WF6uE!bFSk3{dm-
z2{D~Z7sSVak+?U-x7WTLZ=w6~>YXgF_LV1hiC@b5ml!y|2hqbIMU4FQc96YQTkUq&
zYVo&kKZAE^m7p8HQ)&Q5&)j|*QBQn+n&2H(liy-as8f|gor*r?lXZ=WqLfKVi>Z^a
z8L`6PiY89Iprm;hT(bK_)}S@HA=fJuNuxbge_GPHzsKvgE^+@}n-dQVPQ1#L<x;lS
z=k`^k$zoMe8TR3^wZYyy1_Lr{n*NX*(DeE7_<l^bN#7dO_{~zSNh=hsD5^|uTbbXs
zDN#4(6KQ$XE5<~wjB-zLj@4roa#z?25|!Rr>nqc{s<V~0u_A$%-v{SS!(<%xFLK_b
zPtBVd`vmm5eFC|3u@EE_yZz{*tff8Rww?n?b65(oKx<90U2>M?Wop?{4%`eh&-(c;
zat^ur?wXh4ZQFd$g#jh;jJ+4teB^`8N8h$!e-O^fhC07gr)Q5NAVz6blUo1aC~}+B
z_=#lr`0GnoeDu`8!8CL=)bxopDTF!>F;}8#Sy09|l53Lm8-;6;aZ_bxCOqwpqZiXF
zxCYI+tD{__{2}ZMkupZDw<_HZM{Y%~!&W&`s4vM)6Xi$AV+1<0N9VEIVS?RKJ}<v$
z%rMUTwaCZxH9YArYxp80TfvRxn&V|^iQJm&PwpwTapeYaGm9&f3atq$wOC>)Nb}Av
zvf2$G|3=Z00c{%`ggNMk1jdw+#F)b7j2rJdb`1S+oWxnJf$0vc4Qf1uohHR+1$sdk
zNJ*ft$zS)_$im0h=HKOPTv1-WvcY*A+1~z}HKnC%e$zg&7};LDtlsIYUsgP^n9wO#
z(Ef=juon1>N#L6asnEVUV!QG*>J^W_mQDVjMgEVBKZtP8PyBG6vg;dy>v|Xc9Q<n0
zG+Hzw&<O=P0l+@M&A1VL<ndqrjO;}hL56#7A_vuuThaHx`;^=U)#wk%zbTw7^2S?-
zelpRgIjkYD$&jL-e?CuQ$0gudXaS>{yz2~|D3St`>?cT2B^EYx`wcY)E)pH9k*8E9
zO8<fWWA!uJTKy89u#YR`&`ljD*Zx8T9-90K??r_4j|qH9W8@Ny3jQweBEpP;omGZf
zJr{{0N~-cm|MAZ6zTcL_752x3ilLJ@>yxh|(F`tfio~<i`E(5Kzb`Pdkm#fE5jl!;
z&`icXWE%V?Xy#pvdw%YZIuuGH-y>s}6F_7P?u7d;bO91Qj$%isv)$K;_d|I|s4`f>
zgd1G|$rDG3GKjii`4Rjv26ue-UC61U*pYFRY8zR91j7u?9N&$+$++k0oTKPO$fpt?
zVG@3O)!{p_kU3){z-8DT{+g&vA@keJsh?1?Fn@aww_xw($4yH&ZS>~Vd&F3tLac8*
zFk)H0c9CJp{zg-@#7KbMq|PpIb1eglS7prE+o<9%1lR($z*FT7^i=v;1AsBWVkVTO
z)gDe?NI&_@OY=|7PmW?mMG52O3R!wniYh8PN)nh=_*8JH(veWqlb+vSs4v>_$_8}*
z_)zPHx`d3OeGTZW@p~%QwI=S`gWgVIWMPlcAE2<>bwUO<6$>LgheVXK(IbS1;=TCg
z7l-Y=r&np*;uwT4Rm6Dm?IQo!g>4}ZMO$pa*?q$=+}1>=kBH<k^rYrxc@;f2t^qk2
z@;MqI{Szs_W5Pd?RPD$(TannI)c9TRw&>v$taxZ?dY2<JH7dm<mZo->d%AoXH9l38
zizV*(?ctC+V~biHML0a+OWO|g2e=7dg~CynZRU#H)#+ec?TDY1Ksh)9nt$?J^c^VQ
z;J#Zp!+-dOK`%2IVJr~_Wi50?ZA=<Iy{LIht23o-*{Wr2DQ&f++!D*7+?ogF)|?{)
z{*?A*tH;_>^9u|ab|nHZ1|1+$F*<7R&&gajnCq@zlsj~2s3g^&KP#`Mc1m6adbZbg
z@0e4N8YpPbPcM>LeCk-0R2VH%a0vYpE*R`{5~IsZoN@!Yj?iZ!U?6d!@M*k|Dvj>`
z8efXO^vk2jKBmZ*nXfMtp;`Iv_J(2widoybd))ach`3N+TwI`wxrpqTSacDSijoR!
z!V_|t*jt~)WM<WS#WMK`p{*cEO!2nX$t(0M5>GUL3g04x(+Q?9c*!xFZVyJfa!>8A
z1IX5fZ5>JGlA-*Eo;8&WA#bQ+<BG>xwAIz6^3tWV@+28A>{;=`mZF~XKkixg;^zE<
zJAQdYT~Sx3cW0V~*hO#Gp4qu`OB0?sUo=u>r90z=nQg&16hq_7SGQKy7py+lxAF6P
z+iGrqfAb3<|LgTIB}yExpw>DeD=I?1cI3emwa~*JF~ngnmW1zKj*l-N)Vj1ntdu~g
z5vC0{k7@v>0SnR3#x>|?(PD#=#TT*sEm?*iejsgYM(H162pMI1CJ&*CCawx4BoDbJ
zLPF%aI{b_N(Gb_)e{w}dUqznHo^BGNHDW0TRhF#pcNOFmC1y3H#6@v)_EpUqVi(=l
zvtgCA{D<-weM)?OreB=>Lm5YxY$^=;#OW9^-aB;f{M2X;D@v@FM{{GNT#dOV1hCjF
z0Ak%W!O_{R%SP5LedTG&%-dW#HxDsQtm|pA*DfvwI5A$y_$l;5j7Og9pnBm<6S)Z2
z2!(g}@bs1Jn)UwDrFC{^$8EiFZV`*%8yq6ISzDF0BUpohU+zUjBEGqPYv;O`w&c^X
z*&<mCJ<z%&xTKHGMF_~r$!908pg1O?af#gsNDNGw@J+YaaAMQ|lM@RI!<fx%API8z
z>0phbHr0@*<#H5OBwd<ql`GQbpXhUByW``uBA!koWB%57#|nLt-Dt9_yaf&s0GYe$
z3g;H+owK$!S8w;TqB*fD1@dT<%_CG9_*}J=2g;I{rUcd&jl6QODOROb#d72p^^T+D
z&*1Q$YL1j`OEhQIIsE-q9<Mu=FXctS@#Ic^i~NiU2&|J|<3ZQ4AOiYV414|nS7fPM
z+mzE^V009>b+r{c^7GRgvpo_M-x}B0H=0(nw#n%%?U>V1>P)hFvJnJBWCCQfvRr3x
zEp?l7XC)Q&m-?(mTfpo}Q|eUuex=JGN+{|J7IYUTT1>7ir`;W}aFtO)5rf*--VGI^
zzhhju`s2cUXBr046y7F-i9C1@K8bvC^(io+ZgeH{QE$2~Kj;@}atn%dX)aU{aP`@q
z2Al8|Pa|JtXRH;AIT~L=f=|N{i`Qmkll<j7OhLZ{zk7C=zl5e&gu74-d8UVG2B5eL
zISIj)thuGu9r+`*&IY7f&XXn2%C*-kgMBqYX?$b<lI-kxRSrXL=h&W_x?2a*%67lC
z+1iqr>7<{kSaVOq%Vo<Cm5wZ?C#t!LWnMYcHSgh#1e&t7am%cl<9k=OCZ(=?ZVUJe
z==^a#Q>r8H9v?)B^K4njhIYE*KqA!W&_nneyD#r9(GlFFL@VS5hTCd=mwg}+Ex0;}
z9UxeVL6lPMlYw)1Ex~6CCY8(t`Z!HVpz4P_kFZd0v4Du2>_j*|VgX<U!I9%He7b!3
zr!O2QLa|N#o}Jvc`+--6hhBbQcV9B``{kkGSBT%pj<KoCV`HB^e|$6;96kR0r^|<5
zevr!h;LF3qQ|}Rcpk?w~<{|ncL`?2$F+_g-l40sP2%Uk>MZASQ61;18-jOax&0YVv
zeaWK*&95$*fA4~1RmSWMX9oPuC26t(zD&SVo080g_ntbfCB1M(AQdoDZNr6?o4W!7
z-R2ZWJaJP?_ofuJ9C>}wMg07g_4SpN^>v3o-ZJv>3->O|73y88wc;3wLeg^fUq>5m
zX-iD@gZFT&Ke_D0#QBGQM_%BPx(e(c1L_9p*Z4b7Oa@AY8Qx5htCb8uVd)@uYc@Rf
z_l-MW&w~3x5m%ux`HMWITZSt|h)p(e$yGO+=Pb?52yYWxemc7LkGB+Et|WDsGBoqn
zzn^UFtApD@fkLeiBo7?wxWMQ+HZP5%v}wrg;m~N?sV}#xCf3tWPTUUH<r%oo5Rka)
zq}O-|)f$9O&IpK~5W;nB5LPHkh+T(Vep6>=E@?0Psc6=ZY>)0O<nRARt^#rVEWdxY
z9{*;7u2Ue<6Hg;~6F*B0BqRiZ%|)XzgJeDNH>)S)l?Qi|Yl6`Ns=h04#haK*+KPTG
zB<j<?18n%gLbAhk;6c!F_17zh|33};*?|0p<U!BSXp9!pPnPgpgo2a+anlh$Lhb=j
z4`PyyF;k|{<e3S~1a!!wQnN-x=fvCm+Dj8dh$3%JiAS*TZEXUhh^4SW-ibt4{9H)~
zLQlTWCOHe+`S#!9%V#evz{lv1qn{a41OB);e<0NW*mxe>R|^y51}Qj@lxOB66YG)H
z2;ZESgbzv$;J*qM)cV-S;_$dd-A=YS<A2j;!uO0CNgeiMxaq!7(|d~(`3v9DO>g>7
zu;~h0j?XE%pZKKzC9U`4ipr4Z<9U1~(Fc8+-xn9>^QY;5wGX_6P#?bZmMcjBhrP%=
za{u)jK7w9>>z+8<^@kVl^j#5L(r~-_>kh48N-Yc_aEFrg$U4-WCDEG`jTc{VHLtEx
zdtDA`a${QDs=0*E>(03YA)nW1Ps67h<{X=!Hg|5>?CcGH*rah9H9VUovpRjHBfZKa
zR+{k<uNmrj%U6^vs<JW|3?i0vdpmNSKkVq!$<`fnn$B#h!5Emu6t8C~U0EidpR}K=
z#?MFp1?t%G#2o?Lv2LfoPkzhl$s-H_BN|G;Ae2iXxZV)&BSBNC_*{Tsh!nD>IdrWY
z3cjO3(KRi5dIQ=FxN$3YxT_Sc`}&i0!C7gFQoFkvIoE#QH#-$Aes6<f(GzR(I`98(
zx1!$bYf_9nx+?b#!JIqaSXH@YuvDZq*bV%iqi?USzGbi^R%@^zImhw8UD_qH`4X*y
zd8a;Dc{fmgc&o&k=&{DmKlMKBLo4KKw=-9e_|juEG7b$D=a|x(2pCB~MeQOZR#ReD
z`oHGz-s|`~9iP3quhy2B9kqwIZ^T}bms4Et!vV0w>FD$*dSXJVH_@Z?*Z9w69>0kk
zD28%?N6G=8xqOU}1I-!TyZq0o7k5=|?hN#In^Wz29$(C6EVCq9a&lI05@`$?5q_&A
zDoUjVz^-;=1U=T0K%Du1AtZ)-dWNS92mt5CDLP8|0@MG~a1fH8T+hh6QU`bQTf{~B
zj>ttiTQPN!?rm9F63DV@#3ez(;+}zk*(bla(cSrW!sQ$4?Kq}0hxak``4}Kiz(e;5
z<h&#KGf_7I9zq6<V@OEeGxZyOB+`nfAD{^EwB6FULnw-|mdG3nk_EA%UG9n`G0T6#
zpg^s>KyrLA$-qp!Tdzbd+{9FCWu}P}r@$b)^f-9?zI*k78m=JaP)qaS6h1d~+rfM4
z!2LD_ety*-N)0W&3(~-T`1IuH+tt>gZD$9Aby7tFX>ar$HV$=Q0t<U;>}CK;Pg&RN
zNh2gLC6lqoV<f^@oh{97D+{_}z_0{AgmgAIGhHT$AeNn^Z)lt2t=!U`e2ed^)n6vv
zB57WAq-oC4G}OoCOXLzmUVG|qR_|136*0VWLz-2ZF?vrwhF4+$Z)v}4aZYhQDR0ih
z#s32tFPD(5(@#xj%2s4$LKKf7&~r<Xk|)&hjOq;g2lkXZSXT8@NaDu``=Gkg>8ey8
znD|jG0e<`-7{Ff<#leE9T|E5^Sx5X$>JU=BhjJD3n8~_$L|qykqdFbdm3l|CP5snM
z|84(j^;d*ZvglVUh5sMK5Ih?E4EuKh?t%XX=MIOAOhwA3Ah<?0!FsP1rHCkAL4;N|
zx>SRBDLCOSOfvGCo`N0s!u@rk0rh?0(|Z$if`x3W`pHwuwA`vh{3C2T@?RRS)1_3p
zoL<c`{2y#bc0&^WWSj^f2_7X2F9#2^l^!#W!&Vk1)o0r|;0a3ifMdis3CC!f-2V^l
zB*Z5*U^?{oaL+Hm*y>Po?{*i!<~Ba5*3%Q=b~w?1_&!L|C0g`?#ViYKt{~ln-w$Wa
zS3dA5{yEX=xI`DxYFA?1ja$u9dJ?Es>wO};91d?SI7`UPXYf80p^In>rq*V}%^)lV
z!~4GJVAa!3#KIv~uaT+&^UNStgqlk3y^`ET9=Xt7m{eL6=-=0B%ol5oZimnp2uKJ4
zsW9hZo}i=ImflxtHRSi@sM4gCEQhSRd9HBo?7re+cfQxi6NuP0@5cJOw<@&k0G&gR
z<rj!DjZ(89hA-E0(FvX_qrj*w%uN+)M{^2S%=SfTje6qXMd8XeB?Y_*thn^Xl;qAr
z3sd1pk5A8@W+Um$W>0WqdsvbfWo(N=5zUyV<PtL1j-QVTVzF=)%%@~779hX9eewvl
z0-HyZ6A@`inLAD5hUG08dOa*|!>T!yw#d`YQm?97S?7Tg)m`RORV!*e{uXd4f7v~4
zl$<SGTJI)M-{sBzK&zr)QJwSY*y;thl>EkPv_n~1y>NT!8L!!u1XeA1^X_><TT-Hh
zojbH|){-~x85TN{{SHp<&|cVH-{g<<ZU#aV)9kdRq<qC@$X8Ma2rzy{zEYxcx;(kY
zoKA9M;fg(z*;AXBo~%mDirUNHzc4IbX^2n)<tr=7n~+9|*J}S#=kl8B1%=wc!rzS4
zt?_2<tg9WXGK*}vZ7a&FhxHj;2{%S8*GlarK6PGcu*q~rSdf)eoubJINDUf!3|AP9
z;UcwOEy~S?!Zl7GC&G7exOApki`bxW&GJ}_{c(P)KWqNJnw|f=uRYoCPtKTkxUK4r
z9ZMSAe(R`^#T9T<7Ti1BJz7*+TI3nHdt_uGB(a1c+uczr)&TwH;}DUm;BT=yZu8Er
zBtu@uvYnN^y8@L_GOj>r4A@ipt6aSeur+E%YbxP-!A6jb1xGt;kM3Ah=PD{{i{^=C
z;>?k|I+v~?q^U(`f^CQg`w$(HPTo;4bpb>t#w8*o{mdCic?{c(mM~7hUsBRO6$&Zo
zjOfi8xYB1n12tk2PJHx?#OzfmJtm37<WZ`;W(im;F?v;Mk4Y>xdDJSeQNlQJ=f71R
zgIH|vsMKB}r&oQ=GcDAHC5&&N4re4|mtW(f5uj}SBvYYlq}O_JWD@mHYtQzFk8-7q
zy67kdhdvyo<R1DyooLUr_R$Yr+n6Abu$l8&JZ21iK7)gQ9lSOJjTRZN30gEwO<E5S
zEhCw=@IQ^(YsPqX-#Uec_tHE6gOQt1Dt_RL03GN3rvU_$3-M!M4(&W~=kC>Ck3<z%
z`vuV7D~qz1FD$bXMzjRp2jOvX{-xlu*#scATEHnSpzfpEU|F@a$EmUcy6eiCHzWnA
za<VK-u{|z~9TNTcYuA-U>x5-Z&<+xQvjOjQK}G|s-;fe<=FMEL8e@9Osi^G-e_v3_
z5vV(;VC>V&$tC@7ua8v<KyJ+S<*;%Grx(;j@LUu>jDASQF37#kpFv1keB2=RM&Ozg
zS3jJ8$m_ahYgT8DE;GeaU!EntcVX;SRr9igEy2P1Tv;YNPAW0FbCb&E>+#QHK~`M;
z-L1j7<+l74r+X?^TSY?W-X$p4YD(!^ThP!EU%ISe;<<fUeZ^*x!KJJf2xKZ*nrGic
zSBtA<eO><_k9K4wr`gBL$vs>UAC6kbI7`#h4agqaqcnuxg%k7~NZ&}(jmVc29n7RB
zATQjIZbdHLkZwnwxFOww{CGpU3HjX(=?>(x8`90l#T(LX$Qw7L8_+*OI_w{4ykWW#
zQ-#tWzH$H2*KYd075(U@>2~y!o2FaP4{n-nLSMgWx&wXbrs?MYkZwaiy=l4uizCw$
zfG?a*BQaROJM`BH*+AfB+aCGhQTpq@B$7JHoXKx7F^RwGn|>cgZ3Bgrx$!kfhLr6e
z!b|NbwW<B(?v$<~i#)NkGe*uaH+k|`wI>_%I+yM!?>N{WQ2MI;V3DZE`lpA9^Fv>K
zn$}&nD35?jLq6xJxI&S8_O{lt9b?^v=HSTDj+|91SLK3tq&k8R*Tc3M=#SC_P-aAK
z>r9cxP1~yyjTTOihc**jnSsP)wq@!1TK%)~Ofq-zlgTxHg}{{QOs@4Sg_g|Gfv$?}
z&n)OTJe;=uKy`J|nsYt%+q->Zzp<4M20Od7`EyHcC4LRoXepSTq|fojSqj_zhAfYI
z;)?0u;Lrmra(x|J>kho(G;g0h`{?2v-|W>z>winyN9RmlreCB#Ov*hM<Vm%JW!+4v
z!JO(7(U)n4F~63PWM{}vnRC|Xrgs;ZlRGz*r1un>pG<S=lC4sn$|Thiz|niS#<+7=
zN4Q4CgY=Tj9+<gjdS-_%#VSoDUXfv|J8qwwVyjwM(0+I*%~m~9R9B=9b{ASw4SZ!r
z7bxb+ep$m4gY85%d*#CXjw3^9b|PCLk*&HwnbA${cU1TT;1S4w3E4?g5~`zD!eFw&
zG}}R<OR8M9Nqz@laI)t~6Oy%Y$rhQ+k{qW^PLSdcAkx<RySwjio%lQUT3m91OqKvs
z0tr%SLV)Cto#;m79AiEW1^3eCp&LosB6KBkA4xk!n;)Y67Ut_?^h4T7+Hi=r9)1)h
z{a%_L+>a2hJ9?OwgFFZGoJL4^YM7^;^cSJ>2ts-C$UOHVZ-w#@HZo57IWkWPndcO(
zFH{Z@v4+@#|2KXdIg1J59xyEw6@$_Y2~-*`Jpw?KD7|)ckh6yB*#l`M%jz7?{JQc~
zmgNKnoOzYGc9Gtt^p^TfJRJxBMrxTpau(@DwJ$-IP&$-bHBytF<kRoF$61i(&nQjQ
z`wX#)IE4!R;=17^Y_8!PjS9?|qkZH);QwZx8vlQr#c0or<nAIW*&<DGYLl(<|BFdp
zbn^uOCb!`n+G_g81g}LQuU+yz@;%OBzWFaV4WsQv^{AZw5-o}rNAr^YmXTPpp_67(
z(R7iwlT5wx+E9AJYgOWREOBa$E+$|O=y*1(gqhGRWvCH0OC;#<l&AESIpUJ5+$p`~
z_PFHAvCRHbOIpvSlFUB%cg{xa)&!YIIsY-f(kOQ130UHdqJ9>AJJ^QnUA6OqiH+GN
zckP0pry<*jw7aT@Gs|!3O?TA{XI5<OO{3Pp0;CZcKs7W36bakm^F^cseGO&7=VCVT
zycp@A&m*5p#KiL)kO;oT`rsPLqG@T5kY%(&+Lt6Pn`RBsU_LYs()6KxFh8garOkqA
zA~G!-$~7V_8#IT~hQYtUSLi%gU%8T~?+}24j&;N5GWLz0=Yel9FS-Cew{Y7DSqQ(#
zzvz!at}Ta>QVG0l<eG&!r=aXOw_xS93lGTvbMf0Io~Os%V0|Gp+vK;%m#|#nR2228
zVue#irzBs9xMm|7qUdQ=orX-IKdp3Gy+d2Et|R4cdft-8#PXbk{PZLlb_=XcJH7U+
z|JL{tq}H;&%(9Vz;i6~%oz&3Kni4FFRmJmQ-|HuZNF8Gk_Ps(-IypJ{&7=_glYFj}
z!Dm{@qyjn1sDsZ{aw7dh_?$sLSCi?5@Od}+ToX&A{{=o<$md!jeezBk4f7JV!Qg&S
z8RD6<Cb!c+rhfwSwDDF#y@aqIu7UF14`n;$-$cYUnkM3<C<RP;t?@Z}7<38fJ~Qr6
z#22od<-2?D?Ar#CjX5p;blj0(!33Z)ws>BtssG8z18ZNqwJc@$&hGa%>7DNZQA}{|
zk^Up6(??GY77kZ<Sh&Qg-?T^Cu=v)>ZCB3Esows(p@HAszCcMM$LL#(PGBfwqu&zG
z0r*VZuOir@&xr2|KQBi4st{qf^{AIRwGNpRgbeKTC>iO8a(EPmJf0}$6Y4x0Wqnio
z4Y(S|PV&~)tuZLLk{6cE6Das7v-O+VOu5z&JGiWuAfK&$LBmc;YHR0Y8i$vCvux04
zVs)UM_?O@h-6lQ$rOjW8_wtnn5eVSFlj_7Qa2S$+5+;H|lMU|&huj7-q%iCYcQOte
zU=VAipWItyP3kZ@_7C_xaEZWO_zw1M8_`!VNbb+>fZxg#@(J;VT;B9l2$X>Ly3h@%
z_9s662?yu}_$Rt6@%W$lK+ncM;s1<3_inr?>JEW~&Pz}M3CFE_9~s*`dlP;I2sX{$
zjN0RrIM-8awbr@8_tH>oDIMu2_iO%kX>Rbg0(Yr_g^#}%k6(>H%0IRS%~oLV;p^V`
z=SKW*K(-N!egpQADCa5i`^8!b{c<s(poRPd;-`GRNdJHvczhu(o9|HI%_=)M3D&OL
zg1kE_YTy0rk}YXJ&fhH9<OM4i-@hnzF>-9lg0H~fqWSpkT}Mc7uT2}l9lkmH+KA@E
zasHkjq(4IVs0+PeU%%-ADT!qe{(Ie3f*Cdkj<J6JNyDo9|GXhM(p8}>kZYx}mXxa0
zgMacNUKV0e;~*LZUqvGp4L-y^yt$+!$En~dVv0@u%eNM;cxp`^;|%{W!l2)d-nrtX
z?WGELfg@KYjWfiZIbJL=rDPO~P3IocTlH*ip|2)IUA^z(ijA5yHOb4Aa13SGARN6E
z(&9ff=b6*yd@y8|9h&nI$HvH<=K*BRfx-jeuPTn$TUa=3Q1HZ$HV?r$k1^Bl$cV`?
z4YxHI6+GFUh3A!US=3~+GfhLSN9+4dCUz!r;v=vH&gqYAzEb=PV!l85qALNYtp3uE
zAo&%O9sdHT+=f4rXF0`_O7ul~Ih47S#UJIbLOIyRg-*5!XeTEKp9x5X6t^L`@ifDF
zL`dL^raF}g0X@%aS?%epaAyu5Y_@H&&)VzB;2CASIBSYE=;<tTdwXx6W7}*m8#85d
z6tP@oyglwDLt{@;+r6;}kD*HNsuDc0HoiGHE3b0LP+rtK?{lj%t3+a{CN3Hzam~Sw
z!u*Yc1<XHP;$*v9_#%N!9!1HL(McEjGIkvH$NOvc|DpLp_A1;HBrmHaMVXom5{d>A
za(HSHPpZ(#*4Q$fhFGDL<ucXOH`~nH6LRNQJ95`PwbZg5)v~j@H<Y)GDN!jm$5A2R
zb46n2#70b^5XW%y%*h53_QK0Cd2?@V9R0(=+0k!NYt;k?{S#~zac(Az__IzkL}3u_
ztfVU|gYskzxv{ok&V<AmR_5Hpy{ist%eWeWKq3^XEOB-H+!)ZsMy+c6Q&wz)t<DDS
zmyX{dNGXesU56;O?%uk?OAFU63Pf{->Ugzq>1bcG%-p!4md$>852vnTe*|9()53W>
zorh4MYy=PC=)hVDzE%tXf08D<EIYzG(t~_0M^EG5K6LNe3m4X+*5{~l2*&Xl>>uR)
zfWh=nbs#XqgZJ7Vha7mpBeC_3wUG`m*K^m!tf#}iWnpC3S01{i>lnz3!Jp=UTsmq~
zgQctLrDUg)=gzT9&03=8>qn=0t{a@=kebPP-v;|Dg#D${Vn{rI5O4c+ch)awkBIU2
zg?eC=I0`&XNY)&F;mFb6CfgS^ZTz+bklwv}mc1Xr@>-4pjU&y#!@sN;tF_^GBPZ5^
zB1_ehvKV51!n&~b|L^?avBwG@1>Zq&=WQrl30Z;o#in7BKcqYs<mMWO+j<Czc&_L<
z4P+r5K@Q{(O^>w@{2}<i;18r6RHEA;e?YLiUnI}o;QG1^t}g_;=QZM41PAjq_`MPA
z<YnS{4E8UG5qi=vgLoFh=NRG{yZ0M1#xBhNIhp?yc{bAt(<Nm3X_R>OO@5CBurc_4
z9}#|=)(v;FFJmGy27O4Pk_LAV<4?GrbK_4+K%whd7bpUs;cLLUhX`;diVuKv^eHr*
z^zVpxcie(TNyq;kB>xAOA3|v7$-H|YH#m&Wr)=?vO+`RD?aJCru|4!x=*Ztx0jG|^
zvMf$@G}Toa)$obQw=4}ho9im*>VQMXoS7!D!nCHk3RD;)5=9+!+thkBS0s(z<8#AV
zil5_&B+L+145@y%Mz5jP)*@O5`dciTj0F@~pCJ{4>186PW`iOrK4-&y8=jQ_NgIAl
z0v=g$dii})Wc!^Def;r5cb>m^@jNW&F4|^vH~Iq^UxGl$l+u}Sg#sp`lqM>DW?)lJ
ztU{xaFO*0pTfmGFKLB7rpTGAfutio3Hvb8Z)dKkaPGf$!Y6P@!#I?}t#4<+wV!KRg
z5dx=TVp%kb{8cgjFXUm#L^<+gR1BTLjXLuuFi<Q5y>CyHpC`tC9V~BWq&y}FPytcR
z#y~U~`)U(9p;drJv4bcTe_MfUnP4H0NG8gVt#bU}pUy;a8T6Q_``*S6Pkc)B?HKIa
zt*~!ga&=8B4xpO>I-yp87HN`7;TGZVDv%9`QHGDb^Bn9YQ^0=aPxx|bKLXoy2`hke
zhex9k*5ZIUHTAO5D#`eR=>1~+ar1L#{3$8Ow>+D0{yZ{q9)A`D&x2z8aoCQn;4}0j
zvY*)J5;N~8%9M=%8`=L5@g29&K0xn*X-rZprl4ha0qrZgiRUCJ6VBwH0P7*bSC6&|
zeHHyXG54bhgFG`p141B0b^+S0zu-^I2bDkUyaN35kaYaQDv*l5unKPWJge|`fn^23
z<9cYb(N{1<_+E<)?Rd?G4ZY@hIoUf<DYvC+l}?>dX-|t&I<&F1a(jv{LU3whVOPMx
z_*A=Gq<1RgQ*CllymMleF3m;~bg4F(Fy2W+CVzngI)Ho*+Yq4mopCz9W0EY6Vt0Y-
z*&WjxAoGE)3T*{2i=&Ksh1M$<u=t&+6;e6NRFS}PC`wWj6aqG{DXvS(H0qVsD6678
zwIa1dp=8>?>7g$R6!M`sL(+>0s&%($RWGVcz9C53u24VsoJO&YJpXM+JV-amW5P(J
za6uvQPs+B)9_Kv)|9=7)UVL%o^UqV*rNDq_z+K^QTLIqW;Vy93N@DJKX)hrbfY0PR
zIp8e;?lFTmxG-P#3Xr^tJPVna9H3o*JP7hgsfmKy2U9o5Oh&Xwsf^O<19qE9Y)Ln*
zW^h>&g;tC@v}RwDUKz~Flv9{%aFkz!<q)%#x}pi)I<xp{lf>W@s7+#{qf~5C@?Cnd
zQOS2w{6q#DoPbCPKQrMpOw9<SrbPO&sWRCXG;`_Jla{C~nO)+zH@it7po5EAtHxhq
z!yf__g+e}lE5hT&l50mxYe7<wD!85<uvC#Ga;eP-z*bR?rTTa?(;Of!%LC>Bb<Zyi
zNWau8`D$s5UZr)9$He8e<w{&~hq0xok;~`il21}wY*Ps+SD0cXD!wwo9gNqfCYINh
zvDl)D+VXhFUZv%=r7Sj^Rap<`|Kv}ThmZ!efX0BWA$3~<FW4;Pf*HCk<pMgT-bR$d
zX>P@&i@zz!Yto?U7L#UnT)InbDVvucgD6F5GXE@1CR4`dNMtI3nMxYY;~*+whSZ%S
z@vwzlu1>XqZnG&=Y!IX;XcStGnk6>}68s${4kVeY7+^cK<t#Rf%V*pdt*~U+JuQV+
z;N{7C*>+hbmm`iM#?}G*<3ZNJ{v?vTm(XqLGrd@^Z#Jp$N<n&hP^$zn?m6BVR3S>2
znzLOBOZogl9s-{f##EUnip%Ay#93msRKyWQgM-nv6?PxT;WE*ad5WGWa~jm=hiVhi
z9G+rPltGcoj^;D*uh5tn78lOtA7KMKkbh87o@{^uVxfWrhZVr<;9CHx{CUBL%*3Nn
zm{6efDZh;ZF%mT&*T(4L>D)plrjZG`3|mo8rX$}Q&n}W0gltWm%}0-U3$*%jG#)XN
zS;UcxV*2Su{X)N5Ht255F^i0e8ao%^bEN@CD9#|%`jB0a4^jJb{Zw4`KnOi<D)2XP
zY`bl9)IsI})@|IA+}l|DnYXbvAKflhU>PVAiQ+RCM(ZRyL0(x(`N&9lN*OpNiTxth
zDwkVhzu?KK`iKuU2<s!I+KdW`Ku$Tr4|tbiwnc5{KgKVOD$4<{#UeF_Hujfp*iedy
z_rUS|7ks}Pj%Qj3`^JCcu_Fs687drb|BUgL7to6s(QXlw8ooTQo?R@}3)yjSqeW-D
z$$1ldlYyyacK|r@{-p1skQi}z;F*P>&}8-{UOSeFvrHznEDDY~H!|n}3Zq2}+q)R{
zmpCiXQ2I21Z9|+D(Dh^kL)h+#5<;66re?E`bHv9Gzt;jf(#88WnAOJvewI)9%Bm$9
zpxx$eJL@)|>>d6Z{I24IdEJDloE)G01z7~gBt3jKAenwNK#c>5TR{An=IjT;M*{)9
zBu|*tFqmF6D9>f`V`5^(T4h?P=-+fiA^sBrz#DW#DLKgQi8Cog+^A?qwsl=mR(nu~
z7DQ(-(!s}>J%y%JcQ%v56>xLX4P0f6l560~Hw%OUl$oEBW-XqRUP_oe(m0c2Ab?ho
zyp=eqlfbV<UAYBFoJnwu&JwU$LT;7ADow0N&gZcC8Kr;`Us_tEQEH-`O|Q+aKD2LF
zu{~O??Ei+87w=6j1^_Lhe4q*VNq;bGdj=;2{Oa==Y(ASU<X20yVwTiXnViRE31F!g
zbY!WjD7&q_yT@65aPRICXOv3We}&ZX2hdH(2gE%P_6%)4x{0LSj(&k0qyG)kF3{$M
zXlJoA$PT&@(w>dbj$@_BLHY(rdoDs7MlJ(4)ag*{dD?;yZ46xll1SPMkvdkRtB~I_
z7SK>|PvqU%uq}^}cT%S#w1qI=DUx<3^6o}RyO*T>hBi0S=1s_-NZNgoch{2nh&s+j
z-rW!L-A~faMe^-J|AL&RzYE*<QY2pwszzR5yb5W5h~zs0X~!50Nc&@i)(y*hohT1`
zIYQe9X;;ZHeT6m@qAi8AOC;^pNFBY9_7?f>Yt!1Y3HgG|cQKN05M6_OM&^4xl5aVJ
zgOiMRAnlC^Eg$&>EMQ!Ov^T@=PJS|}LCO(8eBa40CaL&$pW$0*Cnw(^zR~2DA=>3h
z8SM;7dm)^U#+)Pq2KpfF#mOrn8aBBMZi(j+V-+dyL;Nu$73m?yD)MeDq)EUrVyq%{
zT!Q80A<@KGMe?yBZIo=^E0Oa4327B1?bQhFV@N9`-+e9eE(U4MWWI}$e1DmgA&q3d
z*C#&@<*P=XLoN_!(QuA8BF|BGov04kO3vpC5!!9&SIA<li=5+O+BS46vKHnc=6IM^
zkJx|=9VO>@Q;61yJPlMN?S)9bd9dEq*d=28XbmA+AMzA(ihhoq_u+geVLl>`HE|ak
zrj<b20W#mc5!!6{?tYSXDpGF&%y%bwmvB0guNmgsMbgehXk(Cegrxn3))5{9`0npW
z+I^9H{V?CHWF2QCv{f+QL6UYZLR*TeklplHa?ONk<wy&1juAz!nJ{ewq-~++l4~YB
z2BomP$B6RanhDcZL)us5H+m)VZabtsOVVDA&?+JADe~RdrrH8&uaWsKMrgIj)5xo2
zzSkqPZX^xd%HWf0CQNf60no%?k!vPQBldtw`s=iKY=n?+AQ`-dj6gY8HCadhkp2PW
z>mJe%n7XHyG70TV0sH}=7f=SBp`!wy!0ZbGo!E;~@o3Eff@8A)gNdxH-_Vh55=hKR
zah$ZaTtmUOH*NtJ?)UnlwE|J%NM^^{3T@A_9)R4x4d%>B;8Qu<bI6?Z*HRw;_=hVW
z*Viv?$&2R%7HvPf;4tt3<@XH}N%(I}c7VPok~mv7HUPWxL(UK5SKCq_{pg3wA2u|M
zwdBWhk{9hbJMS?5D*om74RE)tpL~rGO@9dXOG%5P>7l-4qq*R2CIB^%AT5_xNTMW9
z?G{NtMc|d{jZmeh!+$``^a-I_kHUXIZ}!rmYHx)9fG;3M15&0C{zIpkqmTfFnyOo#
z=<j=CYn35q)`GS91#1`1$}xb4cd+gPJH~2ufc^Q0s)6mXMFsa%cP;PPhJU_;bsQgs
zDfn=~p=$iy#}^gcUDY+#vkgt|T31rMz9TugV_iwfx~^p8`Ti$vsUnKcU%LPnN>+d-
zJvN$ucV*YIo~`&7+gZo((WTYf@p%P@s_^%yl(FuuK)sE16zqU0U|&8=36^Z=N>1+D
zP*Sp<_)B7m#?TC*@e=;(h|#XyYZGwgKnl!8DcwvL8-2uShmeT|h`kov+e4~RYV^^?
zAOJV}Fa>GWB;}dS`Cg62n{PJfC25xJP&9#oWjJ1r&<pTpJ0il(;9vnh>bP(0{qkX$
ziXU7Ckn)ME1>lr@;-BCWK2QL5I__KkUODoDInS$Bdtr%rM2UH*7&n1~`S^(a?6UVu
zhqfyk@q<f4FQ2wgd<{Or`}4uA_OoN}l@4!HG=hPpM8%AJSTS|hz7pMu)-%?_G0@+{
z8iG{B(E7}I2b)Tk)YvnJ4>Xr7skQ&MtkhHHQ<ayx%ac@efAir*IZ4f9`OQb*-<Gk`
zx-L_GXL?<iF~5sgkK-?6cVd<Ff6-9HdUb-jFCG7y{v5V|sU~RS8ek-Kq>cDNM2rFA
z9tP;Ahd(9k8wu?jD*Fg+nLo-^yP`hcuaeQ_@$oKgEZx6Rv?*{Uc^TM;=jSeNOk_o`
z6|s2nfduf|GXzjH70VNm(_ex8jl01;wU=`BBdP#HDwkfQa;59k9)noz&g71X#}dEs
zY!Gb>T)_@Xj2@Lf)1{P{ysG#Nr*h)t8GIP*gVj)b2Rf{05#(j$dBhZ`9MW}PHU3NW
zS>f3VK(DwD**7ta>^q38nAim0fjS|$f+3-I^x>|8Pv!@{3M>%J_y3oFK6n-nf@imY
zr|<%Dtp0*81|QHb66XLn#G>`0-~$a6B9Dj;OPb7joKexQJ%0K4`EMh(t}&$rHS~+W
zd_kk)a37!-l0LTOGreq0<c0-hGOjgU^#x|yga?>2tx{1AJEeVVi?zdUX2l7(26bK`
zhqHnaTdy#4xp1DjYXgNn84@O&SM*5FGzjg5R)!+J$xeZ8Tk0$GWSD*S-Z{Ql(STAI
zGpn<6T<*9nMx<yL3q6g?O9mOM`<6`y(e}P;3IT4X%-LE&`YYhauy``I2EqBK$JPjS
zg)!BSYh!7|!EJijY*&h8B{q<8HEPJX8ZU$mb{QQjTK4v*=yN*8_S8lKX*hBt(L{hc
zTInYGt)de_HTp6H7FR$+1l73OMH%@z6NqRb)udhi^|3R`z!#)NFg4Fq_%ZZ8OhDS)
zO-IZ`$l#9C!3w<M8`vCA83j)d6Nyan<$RtoG22#OBerB%28DBnJ4%Xt#Q~c{6_Wy_
zQQ;mi+~ro-ZEh51DT^=P&=t_8lsgRGcz#mPzIOkdhC&&dEa6BLlEP%ULnk^?SCmqw
z)F~wm;PL5Z&2b#IrF1CAQ<Lo$#Jc^ds?4Ekr%>lqk$qe+`6IRhu8RyBjUH|-Hw12=
zgS%(Sxic)3%mip8k32V_HdctJ?Z~_gN7cOSgj&-O7jwpgj#v<5smwI%QYu|3edSK6
z*%zk;?eRv8H)N?za90G>b$g#<XD>L|P_biClY+rqq)pgApOMkNB0r@eMQy5FR^x3g
zbkYHupj{Nj5ErxzrOkbMM^)G#3Qd9SWl^_MH%B_v3&9C*fi<?EwAOfQ+on2`CZ*0N
zHgIlxBSp9%N-j@wez_Xa#(A^#DcSg&;Io9n&g7Kd`dl$bufUJkflVmDH&MQ7#gjjv
zO(@}iV7?JApXvIDHsucAT3WhuC?{uVXKCrJ!@1*9vsa}`B&_ihRVuGp3cg!^VRc5v
z>I>`FUs#oqvFgJ5&ZSvman{mK_*WvyT1wp&A|~`x@~ob~^702Dr*Hxn0Ep>F1S#Yi
zO!2HN;6Xnfk3-6p0d)?C4S3utz^CL-*5r@Kx9De(=Mi{0AwMc&+6t%p-caVQlt~FV
z;?2(SBn8vmBB#vKTITVzuBoVA+vM~+PDqRGA6~tX6U@mg%}CD$XIbp{qLIqNHC-uz
z&drrody7Go*@WK*b-)5x@7HjwVj$N|n`U=QRvq?$h7=(+ha#)QG$k*<?HZdhCexdg
z;ZJjWJ&B1P@4ke9j_YY!Syr~H*~8TZ5*D~>Msji%)VLlKYHhMWdV0W<kE{qd?ZHfk
zGl0J<aHZxN^A}XwY?TZ0jk&2VL2zGMZ;91f(wnxQnEQEzktJ-WooJ&(4Rq8%pdr8!
zE|`v%&m(-zkh3PoM1HLNM{Tl2=5ec%*({%XJv+B!SvCQmW==2B@3mIy{^m3ssFC@l
zfNRK1OVir?278=5N?SfsYIIf&W%_2-mYYv-$ykJ1I989rZ$#i95{__8|MV|21H}$D
ziU}7WvM0OZoY-V8nqO*8YFl67Z7$DJmc_&gr11u)Au-3F8*m-024ADge91eQ_KJBq
z<r_Qv5_6(@P{4!SB0J5OC$}SFipQnF`agtYkV>3!M`BV=nL?YX5Fg=VYM;a(9v#$N
z%Smq@$u6E>Y%I#FD7DqCs4kjYohq4c%iuD_8k0hvpy0O5nO*I2YtnhlXn|6W{GJ#C
zN6BnY=deOCry+Y`ojX2nPOeM9SMjt;L2R5w7IdBmDQPy3!NL);Q4G#wC@GQ8VH?@h
zC`rPj!4OhzWiu5G>bMsqC)->pDGqze|KsjG;M*#)zTrE!NU~+ilGP<!R<R}bCR=jv
zcH$DJIlcEzdLao(NF}|olmJP9B!m<oq*9l#z|xkGun_733rk5@N?;)**3~;R_v-3O
zmK}$EpYMHsAG@)n|D8K?&Y3eaXWBVqByuJ_FKc8=ZqDFkeVP~b%Tz(#x?R^Z;~e>D
zS!s1~Nm)6&UaFAB+ZtxH)Grz7%^$L)sc`s^LD^qAlTkZ@?GIW?|Acl2+HyroLfP=G
zMXjUIhAt%nw+g&UF@GcF23@Z=*atLD#sKcS1nzh$u`Zc?ah*Eh!i7Zr3Uavb0FwD2
znCaIrzj)-YO@rgDLxR!8O}n!kkYB5#*{_wQ?k7RA%Bg4X)7hwhPRlFS`i9!_$W4x7
zqg{Il+b92I7ZVmq6Fw{IRyizXWs;_=x!fI{YWVCW=|n`k8qPjo_W|b}aJu2uw~Xvx
zTsFFT(a8QI7FA0gn%Ae{>Okq)5q;*)?=yEUa&1B!Apy0PJQCQyIZM8*@s*HA4x?vV
zsjc7%i3G3P;&nRM;i5Pa*(99XEifwMljGx@S~;!h)jTA@p3A%`%SbGlH?hA#?uyMR
zzxR>Dy$OB|XDj(R%*W24dju4d5AtxIH5m*h@1Vx<`$H*G2K`$CzK>^B`QUpMs{-H6
zzjHpg3;sd*03$tz{7o`|fFlw14Y-Z&PwrsO;akhXy~AvhZ%4?A19y=+Q;Jh6kFjMK
zWTd3dW6MpH(@aX$&=PueT)aePb5N=Tr^a1v%qUCF=~HZl`EI8NkoPhdupKGk^TPp)
z(}4?%KuV4&>6ahR$XaW>1q`K3%CSkJ8IWW(#*_3wkW$%})3de4t#Kx(fYmOO#K&QJ
z_tPWD7nqj_3H-sG=L7qPZ??wAZJ<YhNtwy)x41sRP?#>8Pe-9R*J^OMNouxkj)Cd)
z$(iiETzkGi@1shX2eEyRu1yBqaG~p%xOtP)%?@Ux)K%P=X7gsJ#hdNSCP``u`jz8i
zdfPIJhE+RE7Ly|#eo2O3@K^%k>Hd@#%hlGoWI2b@Ko13+?2^jmwoEKwuPp})xN>L-
z_}Ln-T)S#mCxQmEA;&*}G2Hm&hh-8sC^N-@r2!beQsuS`BP_GFh%XaXDhXCL%FNbH
zos_8rs^m<}qZ*dCSn?e#&(k@N9R!L!E_I<(;F3fTw#mT>JJs&ZPK{5nGo8>x?!dK>
z6s!eXI#&;|^Z+Us>!CG*CTes@69e_|52%o8M%KH=TPPuwNx3#An!)-A60EAY^{a+Q
z)=N-<)DBGIWikNE#E9<qbfWo@Wzt1^fFoTOB8f;8IVzGwNaA<cF57P)4~Ex~*Gl^3
zsWCxN9x6x>FAo5+Ry9gZ*3FTNPDAYr?cpq-$5Cr>8#G~mj$C_92}CW&oHHT6z^%hJ
zS=GvQU>#+2<(W+x76nC_T)8GwrbXfV5q`}#83Ulvlx2yd$AK}Z4LsV7JF(&PaQ#A;
z^nB0=`;3jTz;zS!z~;g3=?*=w&}*rQP*=?O7Dy-k57h;E<UI)vW&_lXrZk%;Cp8}R
zR1z1j8!u31SDrv!j?tW%qyV!c@FCe{OAl8TcFqmy{~sGWh_C49DGM_^FrNNKy5fBw
zGQ*K?SmHN&J(b2BKxZ7#iiy`9aHk3-2Y&87p-3s&OEdb+WJj(=N$-)QHqN5gXSGf)
zvE<s~<88T?lF6-EFdr#97nuCdpfe77bdR=_k6z_<KB<%#okp58BxmYctL62pvy+pw
zN!sYv0jT`xbP2T`mXF3YX`m`>UV-5Zd6_B8rle`88fNgeyv&%5e!;3R)4N8iY<ae1
zw=Hgr%FcbkW6%nE4Yi6nit|LS?!Eckj9=>TWRv8Ql<Jzs!87XPOGou@?$wrGKfF*G
zwU>!CyBNLB>a^<a)Y+UiowIpn&x~SQ?Em1{`#)9R>DWi;DSQr%Vx%dQOP%6n@IO8L
zO>MXe+#A_<emm`F-`ohYe`jCY2=abC&4SzwR33Zk+R<Oxr&fc0*N^-P8huB92Mw#(
z$FHLJhJ=i$^BZMbBsI|fa=;$B2Qh@0M%+ehMKc&^{yMm6mIIo@>agD+?6>Xz@^gA}
z?SxwU(bS?M=TUp@_?nPkzBKsLb_D)(9kJDpmn^6q51+c=PxSQKdGr+jL{I5ogrDf?
z^&MS3H8^WW78SVN1w|ukosx8C9sC9VD;innY`-jiCjQP=qF?TU0(am^;5)Ulvv-ik
zbauLIs^lIb5zdwd6Z44e#N))@i0@!6>(Fe`p`fJrOE&UlgA|I=1CJhi<IsoBxLs-|
zaysR%puG4C)?yq-)1~&{F$=x|zvwi4c9a+3^FZ(g_)~nBMGX_<P+e&0Lp+-X_!xvY
zn{weVSiw;_loUu@*k6b%Y#Bo@ol8n&j3zoRBfr3qN~OnV<>qJ&Y9>LKG-%5FimTr%
z)H0P+ZcWQe0KH0Jzo0gz7bRtm9y8qeoA^ySE#%Dw<&VU~$s`N_RFo<%eNuXIn$hEN
z>yq-VF;cQn87+%WNHj`{djO3+H_={TSDD<+d9OxGL9{eF5k4tt0BT2WqQlKSAzh;E
z(k7?J#{-SlAmj*oDl`EywaNL39GzZk#u!K^{X2Y@VE`GWQl?G9uWF2i@KsB`Ek^2l
zQxzz)xQE)F1B<kwB6EG-u3lr_0FZk%<UX$uai20ijpu#x{PL?m#A>C8oOCF)mJ%bR
z#sH<3F=q5|rz}bqCl@_5Wr`kNeLXZ+BvVZ=U-A)w*2El}8c}O6;HZUm(ZlR-OtHj<
z_gn}7HHSL~l>?%HRN_Qe1Yy^yRdEM;k{}A_`S^$ruxV}NGPz8hm3Ut7F%2PG$i~4Y
zkKtTmwpu1vrfARWy{5sw6TZ_!OofKGwJA!rh3<L%40Wh+TaCe;_;*9JX#m;mJ2k*0
z*T0kC)>m)q>HARa(*4~KWg6f+MK%sFMH?<?Q{!1X7mpXH$?wR6^lm)6<`){Fu9pIS
z6#`h1@7$>9sLHzefXp3#?_{b?W6w0iYW3!Lw>R1@@3UcIDV&{8_9xLtaclz=`$vyX
zR0i&As2!A=a-;ji=%<%I6`~WJaI>jx_yiWYqjpS%Wz_VyJZlP96s{?lFy)p$ZN^DE
zMrPU?rZ@l6W8K*$8WhSbfn9eD+^RxfUk9o6Ba2%{lE@<x+l!882Y|!u5XG%?`}UK)
zCUFm#*HAHQbhEMigRuv1Yozw;Q$A<*Z$W_#@Eo2brDKR_H2%80*af`HOOj`M4Q4Nt
zfyo1VN%o#?9{k%?S^dBk0{B=o=jYO^VNy7?_v)oKOBs7%aIdpxdkqAW*~K#1;O4Vu
zTLz-I347Rkz*~}m1b2%VPQLYFyKbtR{JjU=x3+rGjY6*#-M7Bk-{+IO=$4^3iGN7;
z3A^;z5$GHC3e@jvc7|+~<Ve6jY<vZo?9QhxWIS@%N74>^GBh>9{lr!`Z#a7yD0b`s
zipyu$x3sK3dzrnmV+VWX^4Sf|GwYTdz3|hjRX<%gx}>%ie_we8ey<}p!St743i$RV
zoc`y_FQ8v9Tn4c_SK&11-76^l5%m4Yg)7Jo3epJmI-IsbOfx+;A}t)9k|U8y+`&`B
zohu9YZb0>m_f$hyqQkp*suMbxf8TJ$dP^6Sk_Q5-*nw4TeieHRzp72`?~)Z#;6s7d
z_@dx2MS9Q<idN-Tbw)E?#h$B*wmXv*JxKCD2fHATzKi{_k0K7pV`>t;X5Vq@b5hq$
zdNPTg$cmLnz1&_FzS^MIc{n4KyG^P9c<tEf=(Lu9w)IZm;b<yzp#U4zi$>SVSLPN*
z%Zn0n^9*T4*8e~|^_eUu`*RmOfCu6f54n2vA6{57y-#*Z^PFB*nK3Cd*^^-{Ev-mq
zujoC7es?8jGjTUinjmi_#6V=b1e}Ix;jCO6bYTx|hBzRs{JMg%aHO5FNj+vXtD>ZF
zWtQBWz9S|KRhUwZCZ|O!Rg`DU)Rpv|*0b-Dwv6W1x}GVGGaIYt3@M8N-Y!_ChSHQ=
z9g~)vmr+^_j%8OG(vsp;W@}u6Qk7FXq0XM$HoJP@1e0mTn7k29Sx6>SahKc&+Y4ID
zMW=+-sPfz@2Qt9iHm$qRo$o0JopSih-x%tROY8&#<J5q0Z}id`*ay057v-QLxi0Z3
za;R_L3Vq^*3km9V^vtd+C|Ez~L<7Fnqvwvi2g2M0YX$w3Vh?$p5zMS*b$##7@z#23
z@{_ZZ?Rr&GY>T<7*ARE>%8>;wILC51wMSd4*-yG^K6m>rXBz7YORIGzU7TuaV!lh~
z8NIq!%`L5&(oIE$<nr$KQ*yqa3i^VRz`+@vs7L3u#m8SHQgvs|X|SiPvLLUf+H(EF
z%trk~S)S~{EBdxBAC{NbGAzxItx<K=j^@{vl{eSbRMvpMfdNhzd$n;#ALK^0c<k~X
zz323_%cH4{H{vH)NAY;&1#M~BP}C~C7+3+i(4b<Q4ouKHRqV%4x=WS77_DY^bt(Hp
zTD!5>;hUFdBM)ec^QMv7uBoF1+PM9<K_Svsz#)LsB?PHGLH`i?(5>E1d)<kpp7H{B
zMXWi)!tc!eJS(T)teToR{c>jEJ-Q*cwX`f9jP~fh@2VoE)#ss2J41$5jkfKwDk?M4
zwq3=Yfla!dl^wS5XtJB_Th6zh0-^0VDST`r*o|}CdXX>h&Ulp;XJ!=_=VTN;d@iG>
z?smwsDzo3B=03{?=j67G%*sn=<PxT<9&BV;d09zub*XP>vh&OAK|_WYHZ2*F?;W|M
zzGX&(EncdS((7-aY;?#N??GN~Z#2q>j-Q=1BdPU<V}AP<@eupfe`5iFtv5LaQ-U8e
z1)Omghg$`<Zt=*>6Eo2Mruf%}o3a>gl6pc!e`cT+cF&6FUhOegyJb_fmvpxVyK7*O
zzu&YdM6xI$8nK_0o3}c;Cl>nXP1_*s>h6l@4;UoCakJ8*1z8~*B?ZL+>BLIurbPbH
z!DhMsO1GPJ1OtW~@?W%tbl8#ybl0j$=@x^MiQTht+8eve^^FXkDSy09<w76c9Sf+N
zUBSc~*h9YF-R=Z#Y#o95|4sXkCu}$xL`RE>>7F*5I@nL`O!w<G+?WD4&kG~)!r50%
z#Kb>lVRf@|hu?&~)jqk~75zu7FYw(>ic75bftKGbi>#Zn(RRZ=^A&fyd%v-@M$Wxy
zg$c?4*>7#wBl->Ox9(aBomzJDZfx0o+b#29<$q)Hv3LDnTC#xiEoeW{Lue4VH?FdI
z;lDvNd7a%$zUZr<!FB&`l0P5508A&(QD?dRR+Vi5ImGt}b=G$n<%6ERg`bJ?SwIf<
z9o!2H>^CUcZeZZ@nMf?8o9LlvA5R^&3OccM-N{LlPTkSkddI0rlTNN{B_~fhwXU^w
z9rp`9#XdI1lkZc1<<5+T=im*y>oGUC->j<2S#7zwZL=z?X7$UxPoL_sBze$+rzgn*
zKgmB;&g!3woa$B0?4Og<e`a;yDgOy+zWxJ!FYKbOp~$N$I}KZs%ad&Tlb^Ws>745G
zqy&^Ob^45|w1);w=6EFNdubJ)-b(AG*<`W<l#r71)pI_*#QN`Ku1y~FP+C=no&fD~
z`cE)#6#I}+WmDY7pN9*9cH7F0Ej!n~`u(+*jkn)gM!&CiS=DXBk36k1JJftR^Qm8$
zkMOxMZp?QTq5<DiNc{reT7UcEvdY_5Zh)CEA02&4WlmO~)ublDJfIxWnWo*6-v~2~
zz!&jUK@<oaTJG|E6R7hO8oTL^Jt}8Pq_a-oAbVXC_p`~2b?y@hMQ6xnz`iR3%|7@r
z5N?X!o)5-1<Y=HX*i%}YasQ`sjouu;Nn_P1$PE%lQA>7CbwQ?4o1}{+H%pR>o3nFj
z-I=l(>_1geK&ep5NY)c?wkh+6^+>m-SmP7y%DfRhGT>K813EjfOL898Pi%k&#3lCq
zv5WPqAu|uC(vsN{e5gQj9@4M;#bjnT?&jJJK6?;&U+_dONAH7oQf%1UxZ)Kl|8~Hk
zIDFgh2Qd;mZIfja4&o@$oA?&yb{gmTj>JyYLtKtd8vyL`3OfM64m8fjo3$$0q5Y;r
z6??6TOjY_W%HUY1RIoouRlv%w+=A@^RHw5f?{|Gx#MRYVk*?}_OyI0Y90kAS7)@FD
ztcb~#i_VI~ac4!$nHEJPC13+bLlU^7Aqio>G5tucV<G)&e6NWBT^+hXV!14$$iz_;
zhbhW4@f0~RMRC4Aadpw_22`*=??!a6ur9Vrf9?()45H&V$_QCEq$MgS%IM58pu)ip
z%9H|0O1EGz$7F=xd|PncNvE50lQo*;T(db3Imgd4hyA{|1?$9B#z*}iJqC3mN!(VX
zArw$Qz!qXR?c-X=XH;UQC()c^Q&Mzdy4#$X=TJ%ugRLSV(Svr4Jc&u(bb}$Ci;3|b
zy^ZQ4`40P<<xb3SS;K-D$`Kj`z)h-Ao-}32@FrT^$tsFY$|?d$SKdATfWjbh{m(pU
zOfR<DiZhJHjAEO$INcb-UIMyk!PUPUm;E0}EVWkF0LylUmz@$QTX2%#CQHoOkTohH
zy%4fyhh!vVctMWu-9PVFIAiN62}w(tk*YL>6jn!}g=aF!QkZ6tu>S^XnQlHKXW;+m
z>7uy4dKTS-+Q$q>o{{<B?132O;?Hd0rS_2w-CLs3sz~*TeD3p9zC^20krn_*X1GEV
z^Lm^jPO*G>@b7DKoq{Xp0ML;2=$<Z`c}gkJ`r9K{sktmY4*2l%<?KO{A*_fFy%1uZ
zba+MKJiMM)7+I`Fm6aEzO-ayu2bEc^rTy~VL(Dmn=NSo8pRY<X#90%vEA1K0UTcDW
zkdiwW4EtQ_0a*>~b50Tt;DJ)-e6xN?Z=uk+7dvsJ6zTm7{%OQQ0<h2cx6`*X-=KS4
zTrBqrsuc9J^-Y;bzZGXNS+uLuoK}f0-k_A?bI}9+Zt5fY4K&^b9S~E=+B|FDcDL4R
z?n`eo*{(foM(22v$))6csz8W|F<<X{MNbu+IRojr$XufqOW%WZo+fO-3F$nE>4Z3K
zkWIsVW<vnyV?sP4xr*CqUdJ0G;gKNJ!Jhv08%Kf|!3_kvRjDaV%nc5@fpftjj_2bM
zsM8MOSO_0~M*Lwu4*P!&;vgT^&omj0`F4Ufh@ZuHG`)kWk?e)|DIyuvLHq^WX8OZ6
zqmx<*&MOx`{y=3FzL9MynevI#O$n-pUP{SQZe46jR$Y)<6O8{*tA0o{{3Aa82c&a9
zNTR7WsTtc3+)*+oKTwe6_0xJLNgtEuH8xgBkIFoQ=1I-Yh6z=rHPvMelWJ|4j%Vlt
zR4t^>jPE8!9Br_FuAwG}WV<xAtSKFiDz12wU9wY}R@R(m_hviUzmqPt??a~9k?tK*
z=`dMMDe2y!Rp<*C@IX+1*Gb>U^09+dPJiLw=jpHLXvy)Q-y`(DUnxy|`*#}rS91KG
z-FI{CZ!tTLEb^a5_Z%6tzwafBuK#7yoSjF0`f1$Gom`r!?07QOe+I{NN8W<;;DtFm
z`(AsA9lvA8*eh4KcIx{YT=2hw)8K;wpkT?gm;G(*#ciX1{9zPMv)%U<_|pF}PJ?d<
zz+Y{<7f)l~`*HNPZKE*l$Jl6cmj6NSUS~%;Hh3T7SaNxv%&dMDDJd2GvNHRWC$G)P
zOwG+r&CFrnK_O%<o|f#arozO;!lo=&e!eR`4>bj1C%uqdD`~<s-~$lkTK3t;!OzT5
z_I2<M$L~&hfsn?5g4mO5pJ1N@Khq0<_W|@A61o;9hR;*9HaKU5dBi^czyshN_I33B
zHu(Gw?m0lOtH?W88R!WgXFUMB8QeGghh0r;{ZAv`G>p`ycEdLBrb%_X#5qq*snv78
zya#x8?+&IVVOl1THjoe};%I)5jU~T=a>Ks)q$&6eRtnUy^L`?R{aqPLspCOfECB4{
z8M~s*38tvKW)s|*=021`G6mnA4ja+YWoXh$Te6BRa7<Cbp)C^)Z4T9c%6617gVE5%
z4Q2TAN8i_^kvlhDMrTm7CF>*Q$p9B1$MJc>;gU|w<c3QS%`O}Y)-#ub+2Rp$0=s%9
zSjyR#SLs>g?~=Rtd_%@WJ)B#S(H58`g|f6DG9kfPMK7?*c<=)=+?ZKnP2#dnvX*2T
zzk7g_+e7rNR26d)-*u2;?|oFJ+P6L)oYOqYDDS>|Kh}p-`b)_=+>fVd9fjzI3qya&
zHk|wY9Nm|GW8#sIi`gyYC_hT;pFw{~u0&~5v?)+G^o4E}{pIz?VcPWP{G^UuSo{@x
z3Af*m=}FWe$zj65c>H$}AH&Zg;%@j!5~qHBlz*<_pWlw37Zc~ho)3~d261l}?{m)=
zM|l5xI-eRL`5caOXMTGWm+}CJCn%T;{N$foL!Pg}&x?tF2+x}(UkcB?{tf*58_{$B
zcm5ygUC4(qS&d_xH?sH82IghF7j6r`4{oD4N1Lu}fIQEMZYxWq;7zh+xy(J_*50W_
z2?oY&N3ormsqAB8bCkuN@oRgVlIWPtif9yS)sU@Ll1aJ(kDU7b`j@o}hPb1m*J$K%
zHcu)wr~RX6a|`Ku1(RSNGrRBYLvt9(%J|s+!#Q1OWbc;Dg!J|5ioOVRa%7^@UA9oV
zX&c$PT$VrZ*50n-1cSt6x921wx{r>_i7WApTf^Qr#*G<hMGS0`%Il|Y>|5>8Gg*nQ
zs$8oy3e1E|wau<KBBrd`0&g^A>I=kFbkrJ6i~=z=mt(3y%v;IeO=AnxEA%o|W>axZ
zD5oUUi?viPb5G>^r5)l#{RnM>#DGDbh-`u?JVnSyNIsq-+|Ur<&fd+WcaRS;Z{X26
ztQ7Jgb4HOR(VGru2CzdY$}llmC=P-#y~t`UfjvQb3GM^@P3%47CguQdlZRIl=wOzE
zJ-5r;18;2=E6(lU(+*}iO<w;fL|Nz*u&;w*PWtDwcTush{5(99R8Ue7xLE28UZCVw
zT98eJ0y%nZ>W;GoKNS_HRj}v!ENFGst$uOYoP+MFm?W*vm0OipIj%lgU(l~~H#FO2
zaj~G39jzyyXFAYKozU45OmXZXdC9<8Rg<3H+`rK?L=~@3)Mxgc-!rqZ(Bf9Al^P{j
zbQ<jMzzd4OeT7M5_Ty6pXnDLVPCQ;N<}{N?X-(_{V>S#<pM2=z%&OVmvS_P5#+>9d
zw9M`0Oei1Ia9<pi0a{try=?n2I+JP8Wt-S#vZA5$>(;)xzQL5RL$8uWNzvuh^!hyW
z%+xe6<$8J`{`D;cK|c<ENYO~9=A5S^pP%0K)O9nvW;*Me&aR@X&Fzetu79_E8#Rk8
zeD__h{SJojR={`BZEYKz9H9_e*!>;|+|u^)LA3C98|`BMoRuwkQ~$bk>-5Ad6(BFw
z>i-_&NO?kcdiwe#wx<p}6+3szGX`og{k?sF`^?B~E=88r_hkWi*Q9@ZSkE)fgP(`x
zmceq1V7X~%e2_}wNc;yCg(e763GJ|{rCv`ZiT=PIgscWJTE>1^0b+Hu<C3Ln)q^S!
ztJcf+N-gZ=tL$^BkL&29?TW{BjAdI7Kv7?BeLOX0<-E<0ITfqE-?=_Ut&o-e`Wxsm
z@JVZ2^ZbFw?XgW{IcF<OW%qzlf!J%_j<MGkyBF;>$g;2>2_alswk$048X$VGn@LKP
zPlsq}^RgD*X9@TZpryI3X)WVCO4+f?4b3r1&L6<SDz097uzSc!TwZA)LJT*sl6`p*
zIB3A`Ez%p)ErEz|;beu!mWz<r3Rr3S?!=aZ;};r_+F^fhXP(3JrpLe=1b6>l%4}lJ
z5wUzkJuMgb5_b9^!XQ<O?*0ot0GTQJ7^yKYU72bv8{hufI5+O-o6WF)-yn&unYCx)
zfV+CFKk>u;83R+t-x|Ywpk>Z!qNB{kV|ypYfx*7T?VmlH>!GU^60>P?R=+>Zsg1eT
z1Shdkixy-(foWb!Ph(z$W9|@4^Go0?&&yIKm-#cqhjBPr#`6-z+>dz~6wZr{5A7gz
zP(maRp@yC4;D5wXS&wB7b75}P#bQ>|lFG-o{{yV*FHO*_NxiE1y@-)eAjP3gge_ej
z!+46;)Xi8<14<$(VYiRPB3a!F4S5@*<UM9=?gxiFQlT>|(rVl`X^1@7bYRrz*yj$h
zrD?flIqA%l$H?XKMOoPkrb*Q)<+<R3c-(8@#yxqggw*BrE=E4dVB6fq#YY0CkYvDq
z|F;2uR{pDuF=FhbN61eIB9Ml@7BS7E<cq;H3>`7eA@Vg*8W1tf5%P6D%~Y5si;vUP
zNN{nQCh%pQzhRmq<Oh73=`c+*?2k~INjS|x<TDJX`HfFA0;b92(-h$}j}pUpntu|d
zNsXB1h>*qr<?}R`2E2~b941EaX;u+jpN?XAAH{c+YS73Z=65O(44rdaLJNV=r6Q%&
zgJHSD*9@5P<g)s_5o_C~A6r&Ws_ml-1`esIUh~eKy$i=}Jo@^q4Il67H}c@6jT&cS
zyxFAGDx#Qpid;B$@9gryd%xH;cJG{u!4G|T{e4|xQ;BDM20iicS8Er2@bq2NipL(g
zynZkH?fct|a!Yc$-e{pEv=Z}I=Kl})C$w4Y#D@g87F2@!Gz<K(g1buxr&(&=c`0%Y
z#QPVeRv6pA_sr1Gkk8i7t_4)>EBaUDuj^k=xOfpfb!NmF((3yRe*6>pl7xAE2J^CV
zd2y=*rO4E@;4N!6*U3@TXE4jY*(I_UqTGF_S1TF;)yBw~90U~fomL$cAC-CWBDu4=
ztZ_kG7TL!)1b~{drUm`8;Jj}aR~MP=Bh))|JQ0U>#zUgi>C~Y$5xn-}4ylQ^D#kZB
z+XhxlfPepu>!7Z-dHL{yfjeKCIbi#gvZ^_|h5~JBl3J*O$9pW?J?OUi4GVV<zHL66
zfyF;5Lsm88?$K+$Iyk!cmc5hay#C-Uy*w!;!w`@?l(CupmK@|?f!4(I&=SZZ)8l>b
zt+<<8OJH}Css5MIJc|)xo`P9UhkX1xvsL+WsnPTcocW<CI8o0&KxX=1!fAthH<|2p
zO|p6Gp7=Cp8QZQ_{$euXbM$q<hHIKY9s8n3J%`vj<V(-@D}#Ij+EFe9MUwu{e!myu
zX}(|SJmi}W-3`F_BN%tG&yZXEXJ9_Z{cYFu*mnJ^|0n7fm{y6R$ftw^8I}g!q|k^J
zuGfW)0Ie6n;g{2b3;+u4gENpDrH0D1w$@rhTF+ygpQY;IGnd!3E=`xolT+7jv!qB4
zN^=_q=fzzyTGN?>vYh(Cd9oi<cqdBUF{@iZ?+FWXMs6E3=pb^jROzuhZ1g_TkzPEq
zHf8Z!wk-IWjC@G>e`2CB&8Y2$dV>O7Xa=Y=-eABu>^6!cycF77(hA@uzu}4QQJIQ}
zCaW<$)cRF9wy2c0;o}NKuA*k8TdXdgdIpkjaWRxyOgQC6q+Nd^$FbErq{1$C6ZIo-
zWN`G8_H?d)f^#`)5w15a?){5M1Gx#})vzvpXC8+5THG#<Pb0DY^d)<Ma?>hev}nEA
z>55<zqxl_dDxtNAZaW3txbUt`g2BjLUe9~{QngYWJ@&Cal~R*Zm*(kJ>giXMpi3)B
zP8yIRi#HdTOZpcWd$bkxDsn27I)yuF(8M`q1D5u6=?nXp4IY`=f7!tFOkt7x1-!_u
zcg2+T93P`W!Six!oc8R5*ceInpe$NyOwBW7m+2FXfQ;4*NGf#cQtJj~C-<!OC^a(&
zcy1ZhBhJtxU9>ii<3u08aiW`vpg*cW&C`6;mJr5*u47yhyI2{hWO20U@dKSDS$2zA
z8LN+~aMaY)C1>RdjKmAVk;TbEB2H5dA(Hg$B}%<nuZ)duag}FUqV!D}0m?Zsq{aYo
z2x?f@N7-ZK+i=R`0QF!zUZJYTx^b8U)Ee>#K{9!M<g4^^)=mD?e~hq$W^F0dm1e)s
zKNzO-Q)iitk`}^Ftw1_N-415p_n%<=Os?b!nDQFggC7qo{a2_Kq;CN4-N6ayT&!3B
zVh_;K%n5WVMQG}hND3m7V>ZPr9nEihNFAXe>Rk^F{Cw4fy)#R0nbCW6<$^=g($YK1
zQdhTP&gkUfa+^wJPtB|B<6d`{wQQj0IpdLKo2N~#8Q1L5s0~p}V$a_BLzXtp`?EJ|
z)3BlYRu5I`8`3&RHZiY0eThPi<CCvjmDw}T49?G)(mc%SvT8I)Z~CzZ7z&Q{&4Q0F
zIy7#Sa1w>rBG4K4<jS>gZ*BIB-+1`tX}woY8DJk8ZPw^g%g6Mde0+7Yd)U&(@}YG(
z$q9;BB{QtoOG{GII`AH+QI0zJ)g8Be`rKVpixLYOv!=(yCubxN*!}57D78|x#b!}Q
zGqVTJh}SoyhVZI$#c=hR0s9Hm4(w<yfX08KwEZKfE0-W%ig5C=Yn)wBh;X8>|3`*|
z{M*smJHmn5_nc@g%#PQ>P(Dh86RW@rB+Z<Lx>-bw2XCPsia1H%gUg;tK0@VFPZJcg
zn@DKig|Vez2AD|EPzzW45Bs7pwh>|rFt&=rpuSyXS5Xa+J~+zjJGzT=hxTT?KIH)M
z&0*J(j!~?&BxsD$$Hyn7m*(`C(%={~EU&&GO_vZ`GWPlDt!u{@H>~~3ZH?u%VxMqF
zz(7SDY_S!y?i+slHnY{N8{DtCeD40qD?i;g61gSvKkJX8;^5o`MWvun6jnU0h=)Kp
zl0;l@b4$Tn_M|j^fMe3})M6kUGPv;r7<%h1aN>n#8C&{Qd2~#6Vrng%W5~YJQ;qCp
zV9P{f33~v}Ajot4;CEKRBqogKXA=4-G>@oz0@r07+V_LDlN^pEaB2%YT&HgV`V?-5
z2z^6G{2gj!ji6Z}`s;u!A@?0xDHmRWzw*z_iA^a==~?a7_PlGb?~53Fv1hcac~u#8
zE@u3&^k0&P-BX|bi>K$^L&~qDJrXlvSoShk22=mg;E}gP^?ZC%)tCx>G`V^FAXoGB
zdUFbRbo`)R^|VD}n00>!oFeC2_3Yi?FQydW^MO9IcBg|S&h*(+CM{dIY+?TB&3KOJ
zPhgKx|H1Lc4Tzs`iv&`SMsKlYf+_}fLV-%bTmg@LaC*)3R^-_cjqW?j#yYi0sf?!S
znJK|>ovR?(kMY65ec5fU48bHRf+IUCXY!nffIWlCp1CS$n-q_zO|HG0AKGcT6FKJc
zZ-WfP(6M+0vx3q~oyblNSV>Um9EqIV!A{qZ(G%TSWmASWnt?TgSC^RNE7=JSs46*i
zgK~?Zbg7t@8Rc@_cgE<Z%~LrGh`k7wlF6x%gcJbYLq#LMrf>*32j!M2_%Rc^)f5!i
zAz1QvN0*G*G{TsX=F++37L~%1Sl1e(u?F;3n)dGkYZ@;W3Ath5w#g+-lrnl!f+}YC
znEe4QeFE%rpl|pt?+gAP$xoRwd}3Q@GYV4EaUNd=(3+#rj!<M5GBEQ8=j}l%7=}u*
zYc0BXG-ogLuBo4~oT8)>xy8woMjFP%>uLG@{iF%n)u~stq9)|ZHbr-woDT~$DU)fe
z85qz+{t15WbRSJ}QQ=^7(dD~^V@}ZY<-(MC)ts@(?U+KF5=G|OLK+mG(^4whs8>-3
zrLKwr9!FKuA@CQyPZtYxs-NX5ncQqtQ%^~=dyMd;H9K~*J@n*9)cvMB75f#CsV%zV
z5!K0Y@^_z~q{`KRJc^FeBx#X~X%v5b4)^)~Py9CGD>4bT_<Q{GuW#i2o!h_&Py(?B
z{d0NjlHUkE1-TI0CtxVuR~Xwby!#rv417w)!v49*Kaa=WXKy1(;DK1Pe*uqeV`qVn
zVE<21tz0^2mqLxBvzbSrt__9Sh9sdy!7F(uiur*^miQOH%;`chl{lCV5Et$<<P{-<
zD^u314M~6^;|(jM=D6BaCXHrDnJQ`_lb~A3{(H5ShOz>ZSlO016F3OLRS?ujFc>4-
z8fRKD73KgeBngeo7?_8$M#zJr$cNM#_GnU(*;57vsWdM3aAJ|!1g+<RDvfVs5?HKG
ziB~(->>Ww#)EeIi3s{1H6b-x1LO!g~ut(sl2}Kq#SfzHdhZ4Q;-9$Y0C9(M+%KsW3
z4_kkK3uD<3Gh%F20Ash20Bj`>!|}Dz_ZDZXb;O`<eot>9m%{NoN_2va0xu=o(do4$
z#VgDyv+3tJ4V+j4?tBom^>CcN@D+ZlPsgJ_2f`QO(VhHV<W&D-*gv0xJ5u8cgppCZ
z$*Fr4#+XJ%%D^lpC=wM1e*KKy6|I=g#7LxaW_nBv&~S9SU_RsgCnNjzarT*194CE*
zrga$(JM!&wK$_M(huxLcYf?#4o+Ccqk(X35sTcC?1E8%u*MA7zBWEI?T-akuX0}UH
zOPl#q3l3(7G?hQKaLAs4Pb(yuk^`p|2;eKFHxsWxnZ`m5#*AsvMk|!jYxpdQ!S|tx
zloz1`C8yAN5wLq8Ixzy;_tBgEEcYHIwH4y3z(OYDeIII3ZM+BTC7H?C4N#4kO#`tk
ze7)%{#0+Rtq4KayVR2fd`7=-z_V)d*B3;?=O?pe5X7X-eMl?#`J5~HUHYvYIPznld
z*{pVA;J}NXbTP)s_(ThoRQpc&&I(AMIZzIMPoNUJwS}dwK&38y5N2{DKy%GRm>ZDs
zG(7yUCXQp^{`*a4Gjb8sJ{9J@kIx%$+4A}G*>d^s!xDTvPynV9=UY2jkSABb&nV|T
zd+=EtsCUc2JaQzt0Q(Dw>{4x{G`)IYUPeQ?*KBl39+GC(49L%@FZU)GTnss@ctlMy
zwB=G@?~lJ=w{}o}X!dS$qyI3pDG1RSIS;q#wei<apWLr7NqR@iVxy<Y5)}j3?|>#+
zIwvMp88rvB2SUN_Cma1QAU$RRZkz(c0B92Fu_FiS@qTG)^PDP9jqPf+omXSnwx=+D
zik9w!^RR1p9(E0K`U~u1Nr>-;xC0{h@=s0@zi{zM=%JLCnMY7$9I>A{gV${C_q|S2
z{-fMk8j6o0)=Fn+um8Oa|7Djx3BGuOTjTZpPFDI)!93gj)xVFyefr;hAA-N4_elxF
z#&NNweV>vg{ud#p@z?&&%_Z~v7O)vm5G(XgzV;lJrIfv&nF{+CyweE_rW|2&CH^#w
z%j;01eKKb1lkBzLzCEqwhL-Y_n&Dn&RgyJIr!bk4EM=7yrB4E;7dg6>IdE+#@>E`-
zsm*kjr|abMUi!EMjmZ$bnK|IwOwL7g``B;Eub_QpN0Eo&4EeKva`T}A{}ph8`Uc9i
zNQ>7~hzaCtP~Hl9i~oM8uM}~}XXW}=-*=K&|0mLVh#d}K?0rzL=i+on1nh()mbik`
z9Tnb%eJg=ua1f6Pm=C5~C$&QCaRK`krkjP+Jt5?$h3O99bjO5rSLl7jQ076j9w*9=
zA|8>-Aa+7j?pk6ha}NN6KzzSJN$LdbH|83#OBw^yofOKD(9aVU*w5N20n3!wi3w;u
zfH*B+dU`$4i0L~cU`|Oiu}Nx%*i!=5pC0f3ow*LNrv+>i^8=xgqWGlG2v`=B-w#-R
z&kI<iBo;Jbe*Y|BTj?GC7nwKEOjE$lNGShhX*tBs3cS6--tVs`91wd^z+Pq_@uw4r
z-@kAeIx#}8rJA~ZW}qAA2)lD;0O}!ZS@hqaZrIU^EYc+6ctrdt@d2LGaJZF_5jqq{
z7X*wSZXmZ&_}r$=8yIROfsvMK8!J)DG|sq>sKnRoDY7!(zt+n0tZ$OffT)Z66)sgJ
zC7~qIgN&()-M+U-EBL`aw6JifgN^rnW;20o_JTf{IWS3Xo+^<`qGP9;<v<;zQzp=P
zg7{KIe~f^iMDz!6s6zq#H1UZjy;;DYB0dx0Qw97P;&TDNDC;fY&tdtHTzaUFGVB2<
zvUIwVMQ5A~v@ov-WnT6>{hz`zPeA<b8<jbDtVG3^`D&odeCr!GER$V``Qgh1Ul4wg
zTnYvJ0_LAaICG!$QC>d^ZbCy+@aisFfapp-Z+Fxc9h+XSH;s>u*P7$Ir#S2Xksg(t
zc3Z4kA?0a?yd1(bTk+|s$TVZ0TX@7}Zc4w|4VDJ`8y}}wV|$RgZtFToOO8tahuL)7
z<xr*PWK76NUdHt|A!ETEB8bC53cVg-sk18vUg|(}y|rI%N_o15VOl)uL9zL6k}{cN
zbs9Lgl{4L|gu_OQ+F9Z(=&eqlCr#FC%(7@%OterRvN4!H5BAy9S$%Z4x5LLixtZDl
z(F}jDC(Ed@>SD=_OfvdigYWt1W5~L0R~dOSe|X5fpCo6J%4}Eqo(!!*#3O1~LO)t|
zGd*dz8>pMAxK|Bn1!i-;Q?GZq&E^7^p?j6}+t-!?7ksC{l317uKMMnWz<F7T&<A`>
zoDcR5BK#jAc&&hc7J`ov@P7tyETcf5?0|jp$9y03o2U=63jN_RaemVGg!fJp?ZAo0
zfX_wc(W2+SfHpL0i^qsyzRYgol}KX*vnQmyQh|=M#5;Z#jg|iG%sS>9IJ(DR8&m4G
zA#ajgEvva|=Jrb+z-Gp`9jMF)Ut{Nhig><CN%tjOr|e4hFX$q~;3=qDt3TwfLy(u>
z06T{VY7d-f&&2h2i_<z2&V~OCH2hTwVeB|3(C+a&BI2d&X^d|T!^_xhqVe-P0WbGE
zMfqG1a4(NP4)HfR+>h`IKL7P$>8m=)zcM8Mmjt}16TH}8(aAXfK_}xpkF#^d;~dii
zd?>;La&T~R!_PmD_#Dem^n7dBb1cX3_XU0(oIE?^e?fTe4SW7Ld>)jqgOe|Q&e<>P
z!``pDLHU(o`6Junyfhv?r%~I>=j|m9j|t$gZSi&#n<$ne8B2VN@h1sF@-?<68P1+0
zzYgNKo;dt8KKVj&ILwE}XVF#2eS!+k47q=N-zcR9I$Z3><T&t-fvqQLlh4Lx?^hJq
zUZ)zUAB?1xJU*n(cZodBj{hq=>>QZF^=#)*IlUnLcf$Omp~amloYX+kXDEIP&>OnT
z?69fHQS}q5lP1jmrEo>zpV#h~G{dmy@QecFN^;4frcJLcXUXHQJL|`k^d8CfqBU&4
zWh;mEe>G>|;^vCkqg#wg8>fvwd|MA#W}y6?f1v!Tr15i5`7f;9-m!e@$?lf#hcj~e
ze)wGh<(n%iAD^vJb0olysRIq@5Dqz+r$cc>e?-}gNqOt5a9Ywf>Nn2e=~-}Q4LLC)
zIiU9$Y7cjgfZi!BhI$|&xc$3V!7T`fW57<VPZGZGe~LSIz<w*nna_wl7{~jASkJiq
z!J{A*&#yS#%AG4t3GR+My4XYo9mZbrsAx}gB)k6xJE)|)!}$AVU{iGZ+^)7xnd&f$
zA;_Cm;O!Ww65*u+eipRB@dpTdrFq@v_$K-5CNro#Z-8TAA2=39qg_7XoQocaVvghO
zF<P{<!d(Kyk%YNpFL;DJqH`yq^5dwXDyssKq%bRew`Q+w4W)g-vkfcJkO>mgGdUi5
z&Ufp%ffII75=31~71f}0s3Ezk*!DLnYlHkW*6w#&!IYNMlR2*RI!oZ*;r}MN5`EeG
z85h)dIrjg^U)3#zQlq+YG$0N{Uhkql(b@txd)s}cg=d!6bn~1*|M%CcBdm={T=6mx
zr%=hrtB=Vi?f+=SjgAbAniZSZVfl<dZ^ZP)Z6J!b`7RJayi~x?63_Zs+)oS_pDTm?
z$CLhlVf-yI4*QP)zFdq;)G(iaarsA^f;f@MtPYebdtZcaVwU0l2HiUw1#u;ccakEU
z^G7S36yT0v;&bb`Kb<$@$z^r9!&bLlD+G=4>}e0!w&9ce`ptWb{qhl(?6Xh(aPM<%
z4}89P%<h?GY~!754SjLsfv@g3!Cv^_R&w*5<Qn4tO__YZ-GuvFIlq2%uYk`J;YW#w
zFpXS#D?}6Vsw=vHfERtK4xKHy>;|tHS#JT^)6{<ANvheD-=RCDFR~N<$__mTM|I!{
z=`sb{tO5<kM6@+w+eOZ=4T*4Ui^zGK@gY%qvw%Mpf|m;TS>kTo?_wO*gFKYOj{JzI
z$7h@1dzYA3;EY60?B!N?*q#1Qai8-?^XynZ$2yS#kHhh{3G1_*Z!gb_(iaN&1>#W=
zE)()OfpE^gVJ1l*#r2$aqnZvb{dDBV+Vz4@=L#TR<e_*v58<;Vt}q#Pv8>aP9^Zkk
z7IVbpT#dYb!_o4-jKs1jxshzTShDGku)18R>0Ef7EY5JW4}^1d<VU4Ely-Humt#5-
z?!4(W7!mE%>TWK(Ao`Jh^ZifWjbtCb)Y2V+zZ<^5(z%d3EUI+uvzXl>eU{J%F?;at
z8tfO?`*C|s5%JR5E>?Jl!M+)BAB&wY?nff-Vx7Ztv_@#t#X*~nLc5$%z=l21a7G()
zz>mxjH>8Nn2KDSRcP}Kgzgn?Lma&~u0nQZjeR-#m{pJEy2JT}g_;#L4gJ#zfdKW;}
zmapxv?0-b#j4WH={|@3Y0e@P+k*9`l;EWUX-GTmWm$*NJ<N0A8e@2WG$NiVC>CyOv
z<O$`hMqWw-cdNP0evh|X5~g)h@1S}0_0xMM$&OMob52TQm4sa-68m2wi+vdqyVP7Y
zp+}0Xc2a{S+p4NA^F4cmYJhX-hw<2OPLNF<tH%3L2gC4E-(490Qy5;x;eIGlx({9}
zkW26y4vWu#uqgjV4(HZz_<Zih`CJh4sq*a(%;{l1FA4b+v9TCG6NVSFBSpF$FN`hu
z#6A&@=7h2QobY*Y3qO}D2+ZZsP2vu=w=0_pn!6s{19>~n=HPJiV$WOHhu3^?Uz=y#
zrX#Q2GI;B};mK{95=&x9{ovB+Csy_>9KEi8zoo^ty+$JmZtFM}o%cP{r)Biv%NrMe
z^z@&m6eW3jrcO_Y)u>Y}@q_k!x_<J$Ips--KyB7gZ-?()@qC~*t>Ekm6gN@8O9lKa
zsKmBxUv?=|fX}{i_)EYmN^ceLW1zPPuNUy6{JCt5V>^e#PowmlZN^L$*=Bgt8~y9J
z2rX=dv)B1u@3aoG3G9P&o8FVc`(nVAC)hMXX&v(p%?az$v+&({crPq2nzNLY&{F!Z
z@)Y>DBVSlpjtL^XRKU*y6F;|Dh|A(}@C9&*(#HttPXeb1ZxZk`pbhNf+AqxKTmTo^
z@7^%H)VBrWo5S!j4)^Cmd=_5Ii^J`!oNK?RT{E+AJB<r(*US_S4{6t1asC&C{Hyr>
zAw2&|KL0~F|Ca>3h-EOoKMXHsoB6(Xu2^nN4-#<w7{&v9IXF24pR;?zo@054o^K9&
zUKaY?p9`M{>34AQ!Ox|foX~SYP7Y2^!RPFK@Oe;P4k)ic{sbpCT>b^2d@Q#v%C8K~
zAH^;s<+#17I9uJ{8qgc6MuZ>r&%*7s3I6#zK9`_HH-FU;Hj6+%_WBcmxe%docGyeD
zv3Y;PwmetP2~-ZmdqDgW)@Kes$>S*fleiz@@YDVo0{#W=*Esws|3U#T!tIE|&-!Ns
z=1U}r&v0Nac$&HWXE<h%F}R(p_;w!S|CG<`S_n-m0)0wndEsY2g}f7_YcihOsJOX}
ze;&s5>_VJZ0RO@-^b_RIxS!ziImYqrKMC<gL7ds`A1kDPH7E~e50}4xA^VItf8sd1
z|C%1AuY*5k%BJx+v}ybgaQjz$IXf_q=Y;&~STZo)hv1^|J_HYp_eO+cedO?RR)X=n
zarz4a?&WaQUyy*q!~2Vn^nv~&3F0y?f4;wn!T2$R<9<QK_ZJ*K8t3zpkWVpJE|%Y}
z5Iq|p;Gc!)*}SfG;70lZ$HhufeW*z{wsSxB|44lg>y<n45_%&ZU*hiA?#O%NT5mft
z!!yRMrVJ*1d3JX1ij1gvfcj^LmI(f{=!G>sV-@#k6BO1Sv-?t~I}DWs@P7hnKz=cF
zktyKID}?2dMw7lQP#)be_h5b_V15>KE>;?zV<q4(+fohpD<g5Dx=(*!3!qx=Czq}Z
zEnxE*at=2h!G3-z)0cS!%2UJHE6BeXKSm?m%AHT=97tr7E`Z!d-~pR=BwY%qzPe0<
zB~t}v{Y!7v$4S`tVzV-O^=8>80Nw0$<Y~Y|#!}a(RAWMlT%PXm4U@*IV@R`E=ewPG
z#CN~e09czoblp(HuLXS}S~sj0@T0^>fpriu?cfXIr@+307-v2Mi9#Q}2<M~a`{>&O
zG7#O5B#D<MVfiEfj@0cCj}`7Wb9b95>ULxM_pP_;Z|w!BUeD{FFSvM-T#99Sh8;!(
zXbZV>`312hh~svGa0iFu_Oc*AyZAlkGh$<4jwGg0qF&CI<Nr}|A();}Q+OYoXkzbS
z4&yu9S|7qEQtt-pRdN)j$LlK&6wsYNS?dDatsQKh<0IT&bd6JT^vN&h(Q+vpr*d18
zEm_g*dw`<m{OifTsPys5D3B2!6Kht2Ut`o7g9_Pe)MKVHYx}DS@IR_3sl?b0tvD)5
z72Ezwp*O)}qDo>_Q55mNixy5dBuBAs7<fDUs0c3=@U!4Zz^=r!^Ek9C&x`Cwl#h|m
zM;m6h8hN`_Y;Vd0`~*l6+9hXy8TomHGQ=L&W0{4E3SDV{X7pN%OXYi;q)8~7JD_Y7
zGSW>l)NCXZt%3U3n5Aj&i$tMRw5M3Sdg@*gEklJe4}m;n`-*I9BQJx*Fx%S5%b-DM
ze<B>Vzn%dd7UL2%=oipo*#;4>YP3Gj>9BMx)?p*3!^|dOZp77<nX|z_QAGSGsKlQf
zZiO=A*2D1q^5A5Y3G)u#aV?BFS~zyo(bs2g`1rnlK{pHRuK_;{0ly5=4g&{OfSfB#
zEgpO1(t5$o!dBi3!$#gK12rvdFcEl>3A~&DwIV!5z)ylvK^*rhW`4fdUzFY~;7@@8
zBHSwAe+D^3U=J4gsnBEZwl|PecjeM8DRAo~Kg045Vq4ODowFr-p!1XeujzvG`h~cB
zUS3ewOGI)k6z~fGwibd$xI`{}l-Ie&KcaQP75DD)qw0Dc{*NeQ$T3WgFUap9%omD>
zd_%svTDk8oU%rc7t><@(EjlamO25F9jO6QT=pU)8E_ML^c;$7uFYreyv$Nxzf(*uB
z88j0kx*>yZ?<90r0E2FNf1z74V4mvU&I8T0abcY3`$zO3d^h5cSN`SjJ&He4;T?~J
zM(X>Ip)moClgLLAzPq94A|ZNhf6P-6y~}q|MW(hN`=btvB=#-W|N39~EDGb1*)3X!
z6^)0?o{(|%Jsx+!@pA$<pGW<<@cg3a`9$Et<8m)JY6YH`3Nk$lMse%GxLwhr_ZD&I
zSizWJzOv~8J*&m}$!di6PJ%J$rYtH?^j@~`-W?Hf2eg5<a(gY@bN>ZAj-C_Vt7B{M
z`oK3~c&YC_jPDM^%Y1vdeFBVM5O6Px*Hzh%Aby0y`Sl0x?&&>Y>8tpBzJ~atcs;?~
z&aE?Gdi;BF`j>?C#cV?-_Rk=UC;GQDUt-%Yfw%oKiNIL~WLw5?QGtc?7JxrBhbOb-
z@LsbT9SJ3a%1%@R#gb!lyp20P+Hs;1PGQN{v-{7f&+Aug^?gTvTsn38pm{HE?aLDQ
zh~EEn{`~&R2F#a*pZne?!b=7GEV0YaLVD2oguC$h5{H-`d}J_$Chm}+K$q@G{V{DQ
zZPVB4*JKCjd*aLyF@e;AGhmUJ#svXd7%%ZE*e8+=M++BP4&A>l0bZAv;@!XKr7i`x
zq(J3mq;WDjDO1UM985#REL~dr$N)!k8Wt9%Nx!w3lNH!L7JP%Kx#!3F4dWh@O0dYd
zGN<GENbI~mY*Ml!!1>8)puF|iT*USEQ&zlakp$k(?mxFauTN2u?+5b3(ka^q&VOlZ
zANF_VKzo4SS-4JYe4T6|g1A+{g|jT|QhFAi-`MyymS-cRCz;*D2@!4<@I6b#c&U)j
zS>m3+JWQNF_=0#*I43d-&k1b&TEmOn+(4k~Tk(6$XZ)FcpZ`a?9P?+#I(~E-)^&ta
z*CD;tME@|4NEV3@PcXz=k0dY->Rla&%A*RiMw4FBr^wS*oS4%xcEZ?}oTfWoy0vog
z^x^j5a=S{Il#=1?ku_&UcFUOYV_LH7Z$CY^bjHZuiQ0}Q4Ia{{tuCvzs3kMIJUcnH
zpk-Ri)Mq#MH|IBGELFr~Up*^k=T~LgQu2Du>Nn!Zs@{go@)WkiU9|v@0p5?z=jJ6o
zb}4lo`L5ydm#Vlmx~nk#uMn@kX^Bve#$o<@7kPvHH?IH7;>ufR1o<y&$ew+Bfd3Ud
z|9_C%Ab+JiA4rGRA{~PKEfn(yzNjJuT^KJt7QmTJ^Mg1e6Lf^xvfR(hX`v{8JNRN0
zSIR-yJ0YE$3U&BFEZ<~KzPEC^Jr%Z*2eB@4_)CMiH6olI;!?be44bakMz3Y(-@~$Z
zv2#syB7OdP4t@UJn@`K$kJH-FosX_>6?^Fi%`lhhh$jLHP}a<WcdzF}*!{<ak^aMQ
zY?_Vln4nb~wL=aqD=KgVgFA#le(~>Dn_5}c@+CTZK{9PHSL$p2_yx5eWcrTyR$XO3
zby~@-<gs@Fcg|IiXQ?2!vx|8-!?qukXK?*-Ds1y29Jcwj7@y4U65|pzkI#eSZ3FHL
zoZMOqaU~*tlxWB0bGVf-qIr4>?=_r1q5;22BA(b@*)V@_ar9I`Pg72Q_=DST|I5;R
z<zzrljn-FBB6B)4_O}bi+|i$!(0<>F4|fk4virjo@caG!*N-V=$~)|rarDRpI!^$(
zi2fJ>KgqAVU>x_EPJSIloZc+pPle!91^gKx5#d$=|1**g!r>gF0n6FRuOq~W(iaN&
zg--H07J|RW<H)W|<?U5v@HyU}a`JXyZG`6y!t-M{c>geQspIn?UC_RciX<m!U-LNo
zjF@lYIMImr(dMzc#5mNuc2W7$g?v^66Sj-F{C^hkjXXW034&RM>p7LHXa3CbXejSx
zIR8|>9ejiFSp*^d2J3GczlQj0MEoeJ!FtW%Rw9$AK<B6&{7pdM5WADX+acnglslz^
zwoAY99lQK6B_X3!GIr9p-@Rc^qnA?*8EaC2$?`mFx!oz-#zawaog56J<Bds5c3Q-9
z8`LFDmJu!G>X-vIQ~P>rQ)+6Hm0GAvLBEoEx?DZruNbW|I()NA;4?<x^CX!h!b=7G
zEUCse#w>QB^cyV4G)|7B6_0;MpxiSdj!&22>v9rwSkqyP!hXK+qQ1v%qpHBPZ%v7^
zYf;hc234A#^^w`^)0a&K*(Xel6ciX7AdXVD|Cpd6YgKW+PmCHUkq6`ASw*x)4qi$A
z|F$fsXt*pahjf0NJb}ka4v!J=lf)@3w^0~JdXvHTlXphM181x`+)8M0Y%4fefp9(Q
zs5#_E4Xm$$UH7%!8TE8*yi}Q@171b8^&)$z<HBEo?@cnFnrAh$F)8&{TdfoPqEGI4
zo?w)~PX^D=<9K`=#midL33Z*)61iY3Qxnef6``!lzFY7)fsQmB=VS-lZYI{b48HB2
z6v<R3q(2czkMTkw{RMFy;66Qrw|}1&r7somv&3Fp$6ie5g#gZYeFyLy7S1f03=Ze#
zws9EG2}@t)^I-fbT<&)QUdiR-PsZtA67VA5a*TV!@M7O5ozVZJh<>wxKSdn+AFI2M
z(7Y1sF*mP1%Gqr^Zsl<_=h-g8O9h-ichBLFwm3fC0`KSytu@gbsW^H2=j3ivyDXYi
zMpHK5G9&c~GeBjDyME?eZ}>qsorCsNpv*XIy@ln{aiY;lzK?e7R6|Re6n0m^{}HsQ
z?!x+*$?GGxhVc=!sYE!msSe`$arl3tF5o?bEG&aV{5gGy(^(??2=Sqi{+~D>4u6b4
zAB*r`nFj^@I6r?x`DmDX0=T4(cwI>U4KrLwe=3O6K$QO(;(ZaF*9H7(;$0#A3h8J8
ze-`1e?s0lr1?Tmt9sD7O9Q4%bv1erRZG|zW|CULmb){*&dz9)D>kdySnb4e(Jz&wF
zj*hP1ShHkRj*S`(K+EliM@=7JJZ^0-_Q;f_*~8WkAO6_AD~7u@ruM`f2S*c}UtGYx
zNVB+k$}&R4!$$#H!Fj%oL!4=nR0#Mxd>?|+e<i}-4dV0}$!!9DQG^#rz83Hg0yw1S
zTS2D5{rtzEbOY~sBqxRUJ|d0^I3qbB;Gdwj8^EQsfPX5&(?#Wf&YzJ+<^MgT{Iz`D
z9>$;Oy%f9#lZx*#+_<(nx^e4P{ecHN#%8%;mBM*Wct{qWS6cE=fLD4zur8_VlDz?5
zp<aIi>hPK4mqj}8hM=!65O1ST|3<%?R?=?}GD1ZZA=@FqJf%$l_<AGnz#DlA<Xo<b
zFEpYa^F?-TVgY8})w+7L2aw~m=~~3L49cQM$vhOv@O_J&lSo{Wau^D5NdDrx<Up(g
zucYtt{llW;W#nB<tPF9!ddgDUKC>0%W-aT>Nd$n~O<e4}WOg%sA8ude5&Vtw?rQ~#
zMb#G!QKBc$ht?VRDG;56@p4p$)Zm2G!8j(N)z-d&3uEHKG>25+TU?wILH3t}eGAAH
z^<CFP`lw@~x)Rz235e5?`b^-1Gbc{Z6UFVGjP1#_dm7FMw&L_TTwe<MitynAehP5&
z4vf<pB9<@_Bk?&cL9%Ek3k3mp@`tzZU$k6P354A|&OLCze=YI{D-C)Z)suavZ0K(*
z^<?&`%!~q;3i?%~MbFyO$5IR|g%hSNXc+xqmVMCJNqKkvsbtfo$C=ogCQox|UZNo>
z$~Nrz8B=acsCZ;b)h&IqweEqdPA!@~rgmUOUSf<s3jB?+71pN~7bn$BXaKJ`dyKD$
zvSxY`vr2qJ3S09H<0g7q^7P9W)vlUS$D~aipJ-1s#`o&mw_jt=K50Eids3Pj%5xGa
z+2+-bbVm%nqnXP4;kTok<+!bI^QBbSp9FE(zs@Ci{97^3e1>qStEucB-k*O(7ykUo
zxUd6po=PAI`uKNu=F;C*+UAby7^#QWCj{L5pSTjyqksRs+iuHQEDm>*Kx6;@%v&5k
z$fxxaSa0$$A4f(6@$FcTIsCEF9G?hBcky%3N?%H-tN)P8y8-9$`i=pws7m*U(Niiz
zoVxe!%rX3Z9lFy~MJ?HCv0L|%9sR-69pZKIJk7=ZBFEDUoR3JsuXj#2Il3wOyF)Fs
z<!1Wb)Gs(bELuTz+EI~-07STMP6hQP&^vRTGX)#oAVw}h6p$pOCsrHFE;qE~i@fY(
z!h0^r-ibQucB_q}zi-)8)K5QWGf^!7QO1BxQE{<RzRy$B0}l2P8?Kadu&W+dxVn{N
zM)xO^jr~u8<9~+?i469B>Lm8p+K<0q&dH^-m<63(DHry1p+HXrJZXNsz0=SIS#1M`
z6-2s9URFP&IaOefK88JS`esB3Uy$D;$3S(wMZQ+iW5$-Y0M|%|)1XZdj4=XrSj)B7
zG-#8HVvj)kXEl$1E5@NszKh3qiE)XV*oyN@WA|WOiS;ma%vE;?Ar=^ZLn<6j(8Gd!
zymCi`Fk?(v#E2iYS3*O4uy=(->vBa1^+B4rz9}FZC7OSP+Y6Cmlc>W91(VN2jzdx#
z7I)<Mwfs&9;p#}bH7HwR6J03usoWS{is?O68SHCMitr<22~qk30{$4@3!pIm0QQIC
z#V4u)19mnEG$H*&@Wcjoj1s}3t;`=-?~Yq~cRzEiIfH%vZ<%%OG>2US$J)xmiBlKU
z58W}j*ike3*6scK+}bzQyZM)A$(0@L+wo~llgd?TIbKVg)u>`CuBZ$agDNJv1r5sO
zGane!_x?=_2Igir4$Y{aGqhSw{njzeInVD=Y$IWQC3WM(au_bi;nb+e@;Ng|jK3k^
zFANWkU0Z1-mRt9w_6KBi(*hwP>qnm;en2c2et$Fr+9-%09tU5{5$E%ffS(^B#vc^&
zKR!Uf>3`ulAea6fu3Z0BlwO3tTOUl{6VDAf{9+KN&f&QkhkwvVM5j<scH*%<To1K^
z;OhnU+g!c$39XlIbkTezX#-WL53Md>&KWXdTv4RXxuj`9TUKbjiK;fN3VlO!dgLcE
z`5k)b)iDjzw+#%d&e%YG<M!%*0?xY%;n*&L^R6D;N)2)+!~3-NczGV<fG$K2BTvD=
z5`B&_8q8FrCt^mI_XeYkM*DzmGfw9B$*K)i%>_eNqJjRi+yai#qG8FmqLCgvO-abu
zA{WWTC=s9WT99gOuzN@MsWSMTVr4Bj4M+U4qPs_MEb26e;N&czOOo?}x@Oi64(h-a
z5xypXv%AE)Dp5}e;LnI~bhmlmH9hL%pib<<G1ZcZiQ%`K(WEt~CRAs-(A5}E?UJN6
z&g$KJLXlFkmuB>t$qwWU{aLZ{{M4m}RCcOa%z={0tyx*ElS?eQw)l8kuEqC!h&HwF
z>{4r5I?=TVeICed6SwV?0h|N_h)8`3@D*`*qd$rQ(!LNc=jT1iU@Zas_rQ4!VE&9|
zH|p^CDsc4Z5Mz^%2Kilts45@#wS*7*jGS4*g<+xVLxZaLCX0r704P6>yu#B8Z5tCF
zPir~b23+8AbT3}OiQ_;CbqAoBo%BqIBP*bbSkgF1Grq^-P&>Tj6&rhG3=SHzw#96r
z<eO=Euhq{kaSci|Fxl3j%lc-@D6-YNNxL!cO5O|&Sq5Uo@i}cH_sp+}ie93Z+G;1%
zC9t)RvNOQWM|oK@5)@k$MMA=J^W%X!pm*Yax|v(61Ls8i3h5!g?+g4kit;%Q;&^_e
z=vfd)!BD(i#Lf<3_m?F0$k=Qpib&dOPNL;oamZ{Ty0k|gN46Gj)NXKJao?gLo7wiy
zQE1Id%&Rzv^lY}@qwGlV(4#_KNp8V)(!$YBrv+%2{3(bN$Ejg~x{{oNc%!(kx)E19
z;43P$5}8IjdzcF<x~>}mwNVW}w?v(u=2XBsP8!D5af^4kc3IvJdAFfDR=0nM>bPg;
z5w&r}lZ=$<Q1yHrOUL0lYvbykKbHw{$=A5<+qk-?9U}P&>7o2m1^L}6%I7#WG*I`F
zGZ3%8N%=+62_(HkIE?zZHSDe%NpBVxj@*!~j)MwQ=!uSllDl2I0!nTPC%K!6MLs(q
zH7pw`a}MvZaB*#q0w1<V&a(GXEbjY8aQ1LNA|igKL5#m4;4d_Z@k0Xsat#`%X(69D
zB8eD`PLwd*B96<+#l%G8ju0UeNG1H(LZf5QTETLJ({N{DL2yZujJyZ}W)%&uNv6mJ
z2dCzbc`mCi#{hcNX4Pfu8^{H6Y5Ej~(InavHTG0Hs9Sz!-pG5VmXwWOxoJ~bl+`(=
zu4GD|oT6JEnpQk1<Nglz_;U&QbuNWDMk7fsvzJwnyVL6iWH$G4RkvmJY6I<ka+PLH
zmLa>b!dqPFOsntN&(pGgQkkn^RB^-P9_jIPw8c@<U`lYd&TnnrI=jwf2Cqf3*LiuJ
z66AQKRg4c8@Kc=J2??|TKEZMyiR<-cVwDI#AmERM;BN@{3!S7tgK$_5#&Ha*stEHx
zu7bqD&MHCZx-qm5$n&-#=~d(EldDS7`ZrhVfOA1i?^UPgR!$vIYp9SX>2)c&wFTv)
z>(eFL`a=^c#`SR8%Lh(fT+_NRU8ByX6zR@BEB5xDFx5S3O+WBzd#^Ej=T>QwbIko!
zDno+7RXfamaN?YtQJY7$J-mJK;QT6YN#_3_XlG(E?E^c~9%0F#JKU54Dx4p3V1%gP
z%-h-lD-KTTCXYL&hH}X+3SC_2yLzPi1{}9@@!tYEi0Z4~AFZ*Dy~2N4hj(<GoBxqo
z1^Xk;&pDn?3GMDkNP8SE;HP*Tj$G7dcu#y3#*g`Hf;hGXM)B?Xys+jj!r=^&yYp+r
z`DldnCt*G^w1*Do2%p0AdH7T{zIO!2F+LJsS4SD$V9o#G?mgh7tgipzxlf(l>Akm|
zzOy@9W_M<LFO+4eO9x@;y{Vv}2!f&_O@viY1Y1x*h=MIqj2IKUs4>P^Vl2@l3N}>O
zXa4uz=b71=-C4xM{F3+m@L^}>``qW8bI(1upL_1$2PV|dYOqM#za1hgsPT<xYcSN8
zX7p?<edr81YRcr2X<H|CFC%W8J~lLTadY>_nSvY%Yw9q6RDDYR9s$PW-a$(K==Viy
z@%nQP{PAauXUqq_P&&d!_-IvYvE+?r>7Z{1NyD|i5kngE)n~5TtleZhWBgu52XYRR
zB~y8Ew-F1ckINgjw3!oA^KN<Wxv`EMBu5d~MLvn!)lTHUA({z3#q}87Ch#7<Cxky$
ztLc5W2e@P9S1UoWC9lkGi{_flxiOo)EM%sLvm8Z$kh3h;WXdgbIx9l(lRp<oaLX}G
z$cr!2IF6$fAICkOii;lPuEjB}g4~V7Oo(gn=skruD$1TsKNJwDXOj<<r-}o`1B&D>
z-=URX&D_|tsYh)~k<f)C{vk)$*rSMZ5AZvAd>Mjc*w&|G`R<GJ`GGnju1~=a#PNBW
z_&JC#$9)oyABywmG+@aSSK&36>B9V$$6;9$m*O=YjMGmFIJ9MA4z5dl`eX6INxmyn
z=syzY&kV!SH8Gt}e}+%b(?RhpmZi~eOwa*wJno#%k2~Z1T969<xdF$T&<SPVcf^8A
z|J^=Kj8Oc2c3iMtmcVj;iy{y|6JO4IkiTR68_4fT<~u<SH`L>N(17+u<7iP7#D9Q)
zzNZKr8;KvCMsN_U4=*kJs&I{VZS<??rQjw!Vg$eC_<Pt<?8cq&9a6}_PAD%g952hG
z&=w!<kp<c!e<ocIWf_3y&R8b|5X$sQNatKnS%dC4_VJDn;<~^eu#Msq`zak9S|smN
zY4)rUM@C=P9w@UKX-kf)z^S3vfMAA7^mgN=<04tv>$MVvD;l7@eQOjEAI)_UH0E8<
zw|;2cy@g4rt+`hPxp8Z0AE8QTX=lg2jBV{(MY;huC`~qSjMq95uZOyL@xpbnb8R2C
zYeC>&(FH6YSPrmmp*k^3sB=TH?M#Qb29~o0+fF|k;m)H0XjmEZ8%KA!uc8>-R?o)u
z=7g}G;)88IgZsMKLSI*tf;T7egYmIE4(IqObiiL%3Us(nQ*ruz^Z{+#$L*n7AP(!V
z3%h*c_#?O-OvE1n_|jQ)V_mN`8gl9`i%0UT#AMAW|N7ytW}6H)B~Yn+wm)-+Jh>W+
z<W4}rq1BKjaA*~BB!*U58WUJ=kaM~8OXm*CHK0<b=dR8($pc32$+S@umK&BnMMIqv
zqB;D!6U?j`<(pb6<QvC6h=0bd0<WR`3HXV)9p}#qGi!l(uli0fYlnX|>|*UDL%$w&
zHPO{Qo9Nn4+}O>>RXYvqa|$h3pZT+WUvbNc8<C$N#@!Gfig`UO$gr6EH1$3DeLhA{
zynwqk6=yVv9)CwE(Fk!3z86E7EJtF3h%7juzFN1o;;V8frV9SA`?~&W9jV!}pYwq~
z?ccJWP<Ma6AKB&Ckf;sPv57<xP2!5Z3Rq-(A@VoH9-hSJgqSDAk+!K(N=!9;J%n(F
z*vG}igQrBLBZ;^tui~OcFCZM<H|FG3Om6gakLK4=yU5?9=yfLe2bLZ7WAq>4*gS-I
z_PuyGZJd$#7Fd;by>NYJjb1wB>mf34nGao2T=#XmG^ac;5PhY{<W<7S0n(U2+rsAV
z_t3Z8p-Wo2|0axy=s)7NbiS|#wpP@GKcB>pqg&beu^^UPz`<YfAv=KlESLs}*P(il
zL3VehO!i&2q$i!sn4d2*WWDTAhRTsCpS_g9d3se7B!7N9Lcc>jk9VMA8HL7mnT_@-
z9zG}xakHVXu#@IX0D;!^*X#6sOUuliMVkQN<tKUxx^fwqZ+88P>|Jv2ahokper!Sh
z1((?Zettih->>2EdqieDM$2SL_@?E)1BeCfPt2&B2}j*S&J2--tAnG5HR{UGth~Y>
zA}agNT*Awi^hj1P=CZ*YfdmI%W%8BdW!jsR^}(4UVV`>y`4?<QJbpr0FYleV`vR%>
z^GW>p)C8U7DRg?y5e4CxJ_Uzk`UHM!D$Zy`*YaZ&*p3f|IP#OoFg4C($4I%<;0!iM
zz0pgHOhUh9N7CoD=^9+mE0*(MIlJg@llg`12Ia)^=fzKxuVMWx;`K8{lo3CWhToIK
z56w-*_a^ZN7o_4{37lzKnu<?Mra!hcGyO+;aLSb;&l4kf8^!6No)zfKt+&S+3(n9D
zy=N6K)l6^kjT&7u1OBb+*fO_j^i3xgb!?r3J|AdZe*2g!E@@eQ``9Zkd7^yb9kbSd
z{EI2*bKOV#r>4sGNm7QtkNYpk0PXWNY;TMB@kB?eY;Py=S1<3;+ZnvK%j2&JJ_kCK
zJ_UcHvnTxwyywf~Z}#BiUzlXx!CRdv@+8YE2mEy|wu(+<V~MgvdMW);&Gc<X&ZjG|
ztxrR8e)Z8u`_5aCjNHB04oTSS*9$Qq(&W^nM}SDm%SKWoK#&{Jg~ooaFh%5l;@A&O
zje}QDEJ;XSxAfNWKo@XmlA#}{CvHDGGF5UegyTNU3W@6$?3|Lw!qVsVE;dLU-jGoU
z`j9Ad>^F?dgz8wHVhh-B7~}LEsW@%}c>6tmd8YKp&-gHCN`Fr2m@`RwSEtbXg!y9<
zzb=jct4aKt9-LC8;Oo=mdRf3px=HY9>Wx>5)@Q`4((sc>Jk}3hBb@c@jn}26PuMys
z`g<CFBALEC4Nqy~((2^V1WtfS8QWISUBk~?Psd-Tq!{O8sUEljw=eNHcZB=~ue;`+
z$LEy7(*>bVj^>QbZJ6Jl+sgZwng%^Sr^nB!Wl?VA)IG2tNxG7jAy?A!MOPzN(lNil
zPEH|i8a=|7i{!%mv0O`exhi>idHne#e!QHQcS};<;vbV2$7yi$L+lHYTX}`<3i&Dd
z71}G-{h0jg_Ag$%pDOp|3Od{)$W+_EObnaJ^DV|)fMz=e6=d>#ix8#d=U4Z2KTJvQ
z!%1~g_bFws7exfQqY;11fc>_6I~}9g5`AQ4q|BgSG@Alec`u2*jg!iT-aFdoPL&UI
zb#BTTF>z{Px{zb{?_3?ebJ}5Xk7&aBZV|SNOL)6@m+ub|9>8nnc%_pxus-H|qecI?
zDKjJamp>ef;gK$QsP7n2+P0utqW?#v>piYK^WYGg<A>a;l>4jEoYRQMVk{J@8{&o@
zX_B)$UZ{1v2(#}lTdCVz^kvZ;?VK2tB*8W`^%j295<H8|iO)OnF}8g^@5kTZ>%{kP
zPMRVEoRfAW=CH)4c)Ww~9MQ4olQUT)WBdhf5AhLv&zqvLOvcE|J3pzioNbu~j1R3!
zksc}SvveCnDooAC(L_E7@VYQQz<9E3LHDD4{yvYNA}3({QohW^J$OAH2k`hICEpex
zd^E%>Q8bTa#0W;GwNt$UMkL}cG5znQ60b|NO0}n;I(O)(%JH+tS5_|EHMMZ!&;~=b
z#ID!n<kv@nwR!rS@&SWe%X3Pm-*i!DSERA8HPtI+T9dZ5G+6BOS56u@=$aXonw+p@
zvPx}snDxG5Yfiq)Wc9>`mN%`LR@GQSNHVT@eh%jx8ax)`^L*k7zARCm5nlOIbNnym
z?<eObSza1!zr5_nxkR3pr{)R#^^KnLJ<c=;c#i160{qs7<suS4YhnHY^E*^D^{3_;
zt!)aP9?;zBpQp^ZZ*4_xB}LjpF`GT&QIV7*zYI8j21_uQa?72r@{q|CDt9@{b4}7-
zrjgKLQnzqS{2A62ZyT^5Li!!vS5Fx`A3n_m8%)8)nVN&O_6GM)HKU7$r8gO3@sAi4
zA^L`DCc4?-A{y=FA+NGnuVvwHB+W~1o6&3umDz2vlx5)Nu{U&<eA8!J3AIBtuuXp!
zj_`6stN1$h2CieGT5dP-JBT-nM6oIy2Nr6smeAmX0H}4B6WX4WO6R*+E*1t?kt|a_
zRc)XoyGO8A-MYYcy6<B&Lwa*`cD-6Gk<z6Fiz?L_b`7f=2EWQ`yw!!^1+%%+0*qQc
z_v^!4eX!6XA$)lfsYD`K;mc<V`|Kj#pr4QPhhttpFXRvHkv=ZudwFWU!C(3MDbjPF
z;(S9K;C17(eEocfyEPSOG-r7|LHfj-^uw@bia<uSAa(R8kW6)Fu@i=9CE)93LUZ8d
zzPgF6Z(gvP?9pMRI^S$5^6B-yA`AR95)#!2(&#BLTO(e*-W##nN;Ks6y|t7dzI0xS
zDxZ_9be<xsE#lLoU2N8z@6zaf5u3HhqtoLU74hNm2>Az?=MuEa7VB*TycaE-F~j^8
zYs|d~Fygd=e{&vMUh94w^vU6XxwgB|@)|LD!{XEGx{A~S-)VN8dr{siHzmb?vpC7o
z$N6%ri=U!?jmvoro;w^TEJ^%I+@E4xbRR(^aC&A6et^&<@pjzL^7tXbmc%FGIS5bx
zNg^+aNAb9WPk)RsCh-ouUc=)L_Q*pwrO<x_;jrEzd;-M7!ip>ka&taI5=z09;Z)e)
zKcCHYltBf99t}s!);BF!O(7eas5Ow%u2GCtw?07J@>Sn9dk9zEkKw#xGF@Z_W>_ST
zfx~^;Wl<gXICXEb4BW5``1^ey1XVaT3wnMju0w0mahUg=cn=f52g{;~-@`;@!s~{5
z5buo*%D7kO7DB0Cn8wHmrATcZVQaZ$P4VZ&E43?gE?jTXH5s?}@E}%oAqqtC2Vwhx
z@^%F3B$~2c^AmEido`3C&end4<f{|=y%#K}P)1ffj>Tn1078<iUmx|<BhcN0vkbO{
z^?ZG#rYCUb_c;A}zCKbzlIf48;0LJABz`llFFbyzhYou;u8%zZC#g%4_&Qu4`Si!A
znMwS1TpxM-!4x{Tr_g_dx+Gz9>@kRsLSFOz*2j`WJgN(-s{Peiruy?)+-$!5+&Y^<
zl~R6yWSDYp^Mw^IST%~VX<;E>)BTgG^#xUUYsP9X;_Ef@ZL+N0q6f+A(Afi6=A%T3
z=TGB$FX$dU7j%CL*L(iG1JrGNy{G0U%Yel7e(_JP_y0=CkP&8Lua@EBtBO7^TBW_h
z^)r`G^s0ZU`MB_c;)H!NUWZkpi9g!D{EHg<{6D6l3uvZ(qCNzhTaMeY^?W;)(moXS
zv_GJm8jbP#_-XQcj9-Io^1gAR3^?-PTbF|0lT3eTS!(*O1kN<gOT{N9(;r(X%1Gyt
zH2iE5f2;?mDpKTpqCfh=S-^TYhx#7-@La=>e`lqpe>;i4DxCRC$b;kXp+lgFU=cA*
zgk*ScO-tX!C-VDMSBz!aADx!6T^ShJ-k`62G^77h$E6GBmrUC>iMXNrk{M(2Ml5S3
z6n#CS5_00Tc`PT@k*a6hrd-3fDWV;)O@aDG*93_u;rTydKJrDiIPPfXyl6mjP|mkI
zvGkll>o@dD(SKgK2dojlUhj`sg<<;*58f^}q-4G8%c|tqy~wB2`HK2g#*V}wJu!N(
z1$s$RH*mIG+dDyuUb>U|8nZNE2YXWN0Qrr*_k#)JkEi0I2jef`HoKm?H7&hHh#y>!
z_a4q9=+jrHmB$~G`1M!v?NU8=BXu0o2`A_2=nQnGf=KgFq>d*Y5{okH`pm5LJzk33
zLxN9YCRHZ96jSW}XhKc`OcQ0Q|Dao_|8V+DQFuJD0oRWQ1^=ZAZaGC^{cI2=_YYxy
zqud@!1aY58<jt@S;YtS8ipFr;N=*7qrj-V+n~Ohhc2M)g*`z)2O_ta2n_gSg6k*nO
z|G9Wd;gn9oqctO$YDFUY1DuEJu%GIELd?hB_yJIvg5Q(G4}nMu-j%?arZoKdWcuUi
z?hk}>%jpj&DuIK)f`*jzXOrn4166qK<}m#65!8`28IKR$MT4i3q!5s=7Qh)ZaRp%C
zH`&Cu(-QVWnZx)N*!j=*O?vT0MxJ$4?|h%g?f!#B4dzI7+1zhbRw5VtQLf@%mKtT}
z+-NS3`Cxgk=hx;+_&Gk0cO`J9seoT^JOs-w3gs%w>}$}!pg==KGnL{4=MkRkdazfC
z_Lmhdz+H>=S;ZZp#JC)9;QOc?QAYegYbt(E5<gUzigzV&rm2;;U5vy0>rlDi15v!S
z;)|5f{s<-R9xwM<AO4W*e%WH7ugs<;25EP;PfHO$d|)<#+sOwln(lu@BIbyh&}vP6
zWdMaq8J1&SJdSK;RElhSlQKV8lq&PvNjk5Vr{WWn>5rAA;?F1X<7xQWB>q@yKXd~9
z=qiv|=TF#p+xi4%W;(_<@@1jI{VK+%;yrvEIXFG|T!#L1yo@l)IT3i;(5;sNy^5f@
zRs-=thR$@Rxk%N0<rA}1g<9geU-#)m1)0WUUGOp;SM|s`9+wS|ACd_;95al^WwViQ
z+sq04(^Q;(U(MH>Pq=%?4Hy^EeOtUlfIU9X<RV;8Qg-+9v#9Roo-Dr2XPlTOPpuqI
zA$xpgp{%3GO+<)(K$MGS)WY7K0*!o8tfig^OhnIpDh6T18;#vmd}(cdOP-nmz}IHb
zvy9g34H#=%%#D{!1b{Z1jZU*!qtY?Y`-`m-t;XQh(Gzon&axr-3hsAOol$92iR-Ey
zjb%PU!h}2$xkN2}l8~v5a<xLuuc`emZUlQkxhRM{Hew0+E=W8ka!Fl&bH17(pmYX?
z(R#c=V_mbUiI>h|bRg;UG?q@Ih0=YTQ8+Il%_JNlnhkX~kJ%)WqnOPgWe=BO`GQL<
zQYNA-xug!2+HF-?O?r<`Zg0u28}4r$7YT(m45L>po_r4#R7thr!DU6cI{i|!bJ>j6
z6=RA#W}{k4e8;yf^B~VCeGvPcr>xhf%s|N0^M3>(R>-6(wMiSP@VN~Zoko$RAcMAw
zSkxG7Ep_+?%x$U~>7<=m5;!FoJE5dfrjm)p)pn1DbySUx)-N4Z6bQh)BEHw*yt>m*
z9l`z=ax6$(Od@QRfrn&vr3PlzZq>U~rzg#JFr;fpq;8n6aeTy`uX55_rBstYI2Os(
zXoxZ0VyoYkd-03`FuPh6p!hNLT*$Kp=2eWx&{3RKmQKqc*076LeWcg`9wJDYS)WrV
z1uAP*MVTo)tSTosXlBiXxr|gT;m#2GK|_wstkAO5y9%dCnH&Dv=F!5ej;pL)II?iT
zR98U9mKRGEGGV{)-MAV&3W|9dycZ;cAIYH0De94-GAB52R?UPty<`wiLn4Ioze$R)
zXk_8S9uX9<yjPJsz?aN*$fsN*oS$Xz@mYSym_KRzJmak#R;aeC<c#0xV~9D5X_0#(
zMzxj@H_%Up2bJ0=y2I%zQZMIbg4-BMqi#myh<f6$#4K3%vqT2G8(NHw7x@^KgbBYK
z@a3z)mn!MC31d#%MMHi_yfYHuwP64QY7OQ(!x&3$)FM^5!ln6t6%#6r19)nN=Vz(2
zWWkz&H9>F7jJoL1h%xB3_=8T5r*>pPO_+LWpx!b_XW^ccODRBP8{}%Un{d_2m9UGD
z(s`{#767uOaxp>a3-bbPl^&ftZ1hDG`k<pqqpb<#w-lRkOrHNg=M9K%BX<y6U|rPp
z@q*>u8o+8xRUlB|meGNG0<^)X^{B)5OuCo8Qg5<H2Zgv_f_Ar8rQoi|jS3;U1=`p?
zW_!;Wob-J%Jy=<Nch!p;M?kN3=w)iVU*{{PujLfr^h5dpG&-YGZGfM6&#jdB0Q>^d
zQsH(Y^$-MXD0<UfTSc1-2bE}?DitABISq8x^J+(s=i-1|iXaz*uQ_6;=m`?3DF8n0
z#Sp+Ycn7f?>cWb+;f@l!F*7V|3WZ3tA;7vdV19{Su4c!It(va2dZ#ga+zySEEFhF}
zoAutw%qDJvSh7hWeb}XxIe(C-9+a~mLhS(2%}_U8kbdH9PuHY-VCrshqCK8N?jRSy
zHY#z3j(7gn;{p-N0~HMKZejq%w%Ty0SmGF;Kc-ERdsiSUX7o_OdxEsyZnqcQT{qiC
z(sOOT0$<oaX9_B)0bVy>UKVaWp|B_0MZ{Bs$3VSi)f(Ih@y#>X6d6(B%x|At6B$tn
zKj&o|d{#x1!EaU42VGU8O9w0)9)h3I0ZWI6xGCEF){+_8`~i^}eB1X<oB{6v-v#gy
z_3*);J$!&q;FIU7?uU<P6mgoE3+t*J$Kp=wNBuqCM7Sfx{w4<Cg1w8{V^vx7R*#x?
z4Jmb&`gHyV+_f0*?U=355L7@Z)#eW_E6&wvFUkqo%ZC@Y;@;&q#6xm9F1wqc?Pwui
zy-;?1Xo6%lLX4)`YP?R3g_38B?O7I&+<$NVG?Rj)J8}zEtEE|#-OL>)6e<IzcZJY5
z$9~-B09{2wB|B-cSRs*U^=6gDU=0<Atd6R&<;LQ$PgWq-Ddifi#b7hoawEAmYiwj$
zbgY5S&Cbe_WN9@@wNhg*@P-CP?b#}WyiOvM%A{t6O085mBf$Xd;Da{aPA?-jf%lk7
ze3x;KPuN_AQ!ecACM*}A<x5~0*dTV~$P|RQy&&5@M!i(N%uZy<WLeo#Hki{!ZW=uR
zP%2fU>T=8W<=-iEV#Nr9p69U~=6^nYcj9i;0+7Bq0UH2fe*J8#m~=E21}Z!<8X7*O
zH)}kq0{ZUm(^iYsZI2ENfuY<Hmro@J%OTBKu#A>KnrcjwAKl|n+PpKyk{`NO+@LZL
z7Lq2i_0nOqMS(~W3WfX)SB>3K<9Z$S<Uq6!*3<hTo&1DsK0j*unGonj6I~#X%7VQA
zPgm<HI}I4Ac&ya2X4G{mBai}u$kIv%vSwwY%1G!Tcd;_7p0;A{*3%xh+N=J;3N1tX
zoUPPsF15X&Qft)DSxd~Oi0ws{8tZF5%-abl6KcEotL%_Sd;|?FRAT-vS$&5}!&Fc#
z-O3u2H$T1d4wZtgrn8tzxv7gf#QjYzxmm1WmrK+@8PAg3l&#60W8mi$`{PbR1PTxj
zFVBPN!vb$ixAHv1Y^&Iy-2U{cJ5)-#n#!iDSdFx+jQg8Pdb3KF;IJ(Va*$=iJlqBA
z?n5vS`ovr})~Adf;*QFVhAUQHa}ylu`6#F=g}8$;BULRoYTg9zs3p&-a#U)M>RG7@
z>7@<o#Q<q4gc%+g;b(X#e2gKBP|08Wy^^~ui%_Uv{|%(ltai(}@2_f+xYR(pnqL>8
zUV`tddd{r*@l6FG0O#H>y_Vx+pOUCqcZi!IDR#a}JpXr>nOvXS8C}qEZl%Ek-vsf`
zAdRi?n;+K~KRV!MCs{d($e_~^!lW|`paGbRCEB7RbHmO0T?!rQ-m|n0J@-#bu`Rd7
zP7F4l%a&3(dhi~%O(G>^<hLg39kJM4<Kw<Idn|g1%xw2txMR+clBS=XVk_4Y3}I9F
zw2OYn*Q=Q#5o3q4c=;ZcC0&{@8PniyhOrX{jf<=y@xlUQuTxIF<DHEm?ri9~XIB7o
zK#aeJm34=LeyUU=ube+>0iYI)UO6HxDW!{Zq3(ZJ{nC!HV(u<5Q9O3X%U2Ri#KR5m
zSU0JZC0CrgmMxvMZZvqn6M^&9zrp$F2z+nA%Xn<{cdjb_9)EU@9!noZ?VT4*OWiIF
z9~mogN27ss!Da?dT6?*wlY2m?k}CCcdDSheCYI(7TRL#k&2!4V4HKeOTz()(D?z7v
z;G)64*^hENu6ki}Tls?9rvG8RI}ARR)y>^Cr)|Z^P}Rlv&TXCFUMS%VVfXs2hSAG5
z4ZY#ikr~4`{(AnLU*EFW!q2roz_P!bkezPg@cCu#yIy!@_s1CD(+jWaz5~-)f^dA7
z0FPI5{CV=@IQ_{a9^>#@9`_Z#za8VkT?IV-TY9Ch6X-YeqF>9?iGPLDpGe|mTzg{e
zEe$W{MhpHp%OHL<iMJ9IuLq1L^5y3B(DR%-)$4g>_q+UaJ_ZiAr`L0=7ySGiOn)kR
zo|NAW_0yjEe*8Fo|77wx)>8`ozr*J}`f@{kCHQ~M>#f)ObxHpJ<n`B!e{DK_6mOXt
zi+$){!DEiUUm;4tUryk3bX8`&vY+%-sW|4(<JD>DPbTqLKX}cRnen=Q=+~yv=`UX=
zlIhFS@V!aAA`PFIq;o6{zbA=5lEArT)L877`HG<D&K^9eA2*Mu>NV|o4%VyicE;yb
znVu*0kc0Ky_x+Q}=dmAoj`V)M=XF2AzcwTN6UpagKk~dh<MX|J^p_|nOZ+Rc7MC}F
z7sTJCsrbtYoNfyB;L}p@%Dl|!tJ3h3Nj#Q<PfEdS@-wHe%j-wZH2g#|eYt=aaEHmS
zar!s;^o@Mq*T@~FSZrq^kbdqKM_I;Bfr&Zr+RrbSMe1CwjWwphpO4GRFA7Vjs)o?u
zSPt2CbZXtK2D21$d1v|<XGKRz_b%ei=K4vlLSxb3lG(G+!NeXpUKZp)XMe60^~Iqc
zFBN6Lk>|kmJvg=#K7IAYsp(H9)5p^2_uw^XZ8!s7*AM;Li~G^zv{d{=l1{nk(G+}d
z60hLzkAe6y@@uSjo_=eis0UBx*Ujsv-{(14PxxtucdPh)qx5%^dCI{$OMmxd^4(ZQ
zzCF)tgthhlp4a^d@7g}RPb8m}^~uwTBwei6K798kpJV-|Jg<s>13tp#^(PS?Tg9!o
zKl?cT4RM(MB8mSa?#A^2rT>5eXl#q8Rh4|8D>%!#{fqJ9K-riq(i>}pbL~>Km;&9Q
z#^!-0pIMeSY(c#U#{z)we+}O^CHCg<MzRo50M7)$*C{0QE3_*LzbIO-Td#%0?@H1-
zvL9^VR_wp4v02E&2e@4S#Mha4aUyTToD{rLz+Di}Nx`d7d=nx40bB+=Ufn|n(m$ER
zV?uf-Oy9`k{1_|F`=nA3XH(MG#d#mQQi$(Pp<m0>iGKs}C)0F|`Np?E{0>~UeENns
zj<X&A4&q%YbQ)9S{46DXSv)sI{vNzspnne1nT~CP$18;NMu-o?eK9Z3F@b&%;uCOR
z%;S$B9NI)FcZ8Zk5omtk6{6nz@m(r<IM;Kd*?w{Yj=xY-r1a<k{^qEctz6$ey^N%2
z`{gCY%&ljJFtyDsbA7|lj1w0W-rwnr7zzg#4<B0^?C_o{Ev7!}zF}17$ic*o-T6&*
z*nZ=uVEgedF3Z30{d`L*elm&2di;sVr?9<$#J5jXsd!fc=l4>R_!r6a|L~{cFDG!i
zsVOsF*_;`#O2u(m@_2Px`jbgK)(>9Ok{Pe-hkk7e{yeq`9<T2QZ|H|kW12iY>C5`T
z%hT|^NxUKrpP1D1u{8XiB>o7(;b)jTLU&Rskqqq{dK1$=6k4R`_#f=1`H5f5px2@+
z>H$9~WI8rXF4pB%`AY_8zpwx8u5p`ZM5p}XqxJsx{R@A2WmENno#SJyL@OCT%iT1s
zZZBwFvG1bFDUF_C<9~T?{l&LUxbfq=CIId@s3Te~-#=r{(VLfgr^sw(JrjLqef|9Q
zd;->q0Z_ihaL$aP71>FAQ4AIbO`FkJfkF2Lki6Vz96`?o1Of7gFW#_gWZ?6_wU00K
z$?NY{7*#A$s#<;Z?tktYxn@j0O%VhgHc^DRp{YuH^G64k4+)C7$3T;0=-OW{BveY1
zOT`Vk{x&^z`m8jo;*v)<1Y7E=>>+%In<x@LMPG$&|1-X=2Zj{<<pfSQf$WTUrEuqI
zZ@elM$2P*_)oJNZCh=H5c#UuuYHz%*ANsXvbWSAkvVQRLG<<IouSno<4tEva|K{;l
zLf3;Q^XumIbDrl|Pv?1FmFamhUv6G+ecnHrd>;Fe=U9*Dd0zJ;{A)APKaqT1_9M^B
zGd|y&d|r|I9M<JFk%+nx))oHFc2YRhMYttBYwzgJc5qwi$(HGL4t??P$_+)YE#E)C
zxNY+bS8;hq$So#fEjPg1)L9j12%CuU+~Vk@D+erkWZeMz?%!h>5RaKS9@Qyq`v>{E
zA>)sUMC>^hjWfSOI4CBHQgCSk7ab+4F#ciuOG=FKud(b$g?R3eK0O=L`G%(h+$nf-
z0vFvc_-tVu-|5KX52vM<Ch?;nl*C71I^PQN^Pj_^Egz(hi6kOD_RZ4@apGOxFp1|X
zAbGl+55Wm06i!^<G2zw~BQ)oJM-Ct&lh%zGd-J8Ebl@M?|M}JtrJWlOKDX%lKkph*
zI_-vo&k@Tz?^se@y>#Eq;}_k!u(D$QuBpU|&I5nHZpB-V?U-BMdEhhrZC*K&aeVwV
z?ZY}a$Lm1!Yf%!%c|FJHRdja`j`PanN7Ha;5`R*(4de4*8U7lj2S7-Fe?m9RM2s`Y
zzC<c&yr8?AaG8A_KSkYzpR>YyH{$muL!GX{e7do`9J-qiJ`cuElM5-ONCEA!9O{&@
zqZ66PBw2sYL30{6>uKltbXo>j32mq;9BeAKplv3qX=GTLTbe(rC8`7?i#uxE)l2W3
zb<wtIkx@HdysUY4vwImhSku|$CV(T-;IT(slI*QAUw)y{9}BfFY?PArlD49z^>gYf
z=66kA^XZY<ITh`pq5RxT9RHFWiF}lR3ftlVkw_T3pJx7q`b?n3`6>j5Q}C_?&NLw$
zj>$iO`7MHdX^XJOFLa+N#{<(&TjGAUBpOQ(8o>DclO1DbF0JZVHQa9~9a%MYa%{<g
zOFIt@t7XkfeK0ztGCHEnst;Cp935V<+EQYv7+GR!9aT1@%%@c9<>Xb4QolaXG$!mB
zP#;xl7j@LGo>^BlV7gRmc9^Y&4ZfVPRVHP^WAZ816eu!=s|;2XAhOXlr|}QD-DCvj
zVM69S_>(TFj->nQ1?Ou@hJ5AcQd!nQlV2{kQEbtWVB55qLM(AR|E<h2u9m@4m2C=g
zf?ZKN&S1NMyrZ>MSbmkbTy^}|^)%lm_3}vvg-cTL6d(DCDL9U0cTGyV6kqf-AN3U9
zcwvqYhsNZG*d7hMJ>qykAbtw1MN<@xngs_z$d3%|h2&s2OgSI3y#|;;Oz={~as49n
z@GIXNLQ2Hk)iRI4ov(bHmasCtCC4N!^zQHsY^pRoV=BtttIbv!KtNYwq^Ps!h}otJ
zTlZ|OAw+C-wOVUetXkLR_Fw!xpn&vRos$zc6z2vAvr{J$;%1U(gjky-Ix>X93c57p
znU&v`a<`OzyYkyYFsl%Gc7rFl28!Sof^8_DG5FqYtZxsWf4u)li;Cl?sW`+@Ovnn+
z5PYV&*C`lR?<haK*K}gjA~kviKXF1rkq-$@<~G6Uoa;;+Cl&nExeutys_@W?oGiW9
z=5MddqjPF@HbuwQx<_t$V&1LStHysxE?#+NC3Q{0$-KAIdE)oECH`n+=+pv3$fXGn
zniK}6mUef;<ciLNSGR3nPke`?ib9(^18txk>mV1OuWdRZ!fhvPFDVtY0UOi-j!(?j
zMHbbq^vlvU#k`AzpL8d`5&I04O>IGEK*y@AzH&9!^~WE6Yj#nK#S&6xk+*ttvd2v_
zyQH_?=5@$6%riUXzb9L3hvX?(iIl!NCvffq3YazBFZl*}J%jv|)?)rjp#`+?fou}C
znP4BR6IuLN0~(;)hg`@~$^^9zU|)+QVA@A8l9tB}!7`_#EMPPS${fzJpn<-p`{@Y}
zOq=$=1fu$f50Xz}0fQkBL-x_keF&Z;{|0pv^`Z8+OthHzJ+!y|<R8FCj1I+9)P&Iy
z9fKalSdkNYgPvhu_pp(<LmCwlnJUjhSj2i0`G+C9Zn~~AFH0lQ$h8e)=T>UnS!n$N
z>Ubjkt;h{(L_?{!V6GOdM0~F%9|liCoP_uhhzl5TN=S<^_zZl2p22!~hPxcRK);yu
zEqUSNFFvMU{O%w-63?;FbMhE|&i2$0oQins<1aqplj7t+G=%{4IO2Xp3l7y>mrx(-
z&RU84??d%$3wbqt9hH}Ob~k=T<>A<nd$_lW4e?9SGn#e9hz*+VT+Q{ncKsKgiAI21
z!1JU6mrpNy7-5Sv`2)=nyFJnz@Ha(l#7KX0#Ab^$`~8jRvk|_(h%|#wsV$k_Ut~{z
z-%h@sc;DBAKAS|8s4aeqq3Oq=ZAL_`qA}Pjq!RG^#>EbFVP=nGW!mk6*rOvB?HzTN
zO$O~kZ4C96+-pB{cB$NF{3SRm&#vv<-@0J1uX^t0kwcd{2Qn&!Tw@O81e%L&I&Z}0
zE3vA`7it#n96RXJ5qUKWc8nWz>Bzjt+Xff4m0E`kE*w%~rB^EqKde@2$(`9lmluz@
zv}y95i|fkrI>a)iTIp%*tPV97np9>fM~u7m;)arOmo<;u1wY4MHh5I0uX$?Ks7`Nl
zC-Q?4og_b_mWY(Xeml*udIN0-3IJl{XL`bD;;t;LjOKw3y@JqpTcp&I!&;a0F}+-7
zcwCaBJq&K2j>>Nlr1NZo4qBa$d809(-;1`$$!DeK9)hIIU`=6VEX3WfSCBg5_32#a
zVQr4&alKrwe@yDq9!7Nrj;Wa~XsiuB<j2}zm?#r|KNz2amnLv<GA+G0nf{>!&MjxQ
zFtKF%zk+IvUkuZ~j_H3S@Kt2Q?-!j-!Alc3<eQpaoJ{{v0*8EG$9z8$`0{7#Q5>>2
zaKHUA-*3+mWyJ4G!{1Ke;MHZR_}*mt2ZeD#9=Du&gStJLKIQBhJ&=9};-Bz*7y2{e
z_tmE043WUWt7++fmrVa)0_T>~12NxE`26y5=earTRm7*_BHZr5_J~_e&DEdXAuc+C
zp3!mQQ#e;if5sd>a{l+g%Z!P*ll=pJ79rtqeqZrE_77Ym{0Z))x`-7_N8%ay!@lA>
znGXJ0|L+lC5Mv?(_!%p_iT<yGDM00&d@}HBloY15LmnLFk(zecosoT@8va4-l4<`#
zbVU=XO~jw@J)|gNaHj6PFhd7UAM4#qBU+;w8EJxZvou--z@7X?jP-`3Gv=9Xs(nv;
z@>QExn%%0`Sf|zWu158R&G@cb{RN`)Tk1M;0`rteg}qn!tJL&D)M1UVbHR^Mz*iHN
zH|yEk+1BynJJ>te@aVNuNJ}tcHRn4NBxwm0TP$IxlDZCEa8}jaT!k(>1N&_yXarVb
zgP#V2AN!zw%h2Q%;s}%+@l0bvrb|Hlk+cR%EEdRtBF%_Hfm8A8370nL*sbFB2@}SP
zx3ZxTSFv~6_;H@i&U4|KatF<*sH&-{s+chdU4I3#88cbM#;^x1YWm$#VMOV!A&EM4
z-5Yy5$r$q7?m~x>+{5|@En;Kg_F2iR+A3zXhhZD~9@Ryv=%bnG=ma|awQ-0Jx=fBf
z%3t}GqgLlYI#4VBgYrB_zf1g{eHh0^PmQnySidg@Cw;K9Aj&Nvo0KFC-a@N0-;zaT
z%^GLR2H9d|RKpzBd5Z0paE`{5U+o@wYl~B=X60g4br90tLro%XV@fmAuE8A<A-CjN
z5p7R`_RR5C841;-D%H?oofi_%N5rcTafe*R%2`AlwO9Xf`u|_n&HYgJM+Di!peJxv
z2zdb7ks~%yHn1s+g7X`vHDr^Kq|sYwVY31<ngyhcez)b;k?!hz6AI>JFZSqy)he-^
zRZ9`=E1~S0pzJ1Gi<1-;2}XKi1Ef}95oZUakQ$JC20=~+Z^T(vML%LM_Udx0u&{Cm
z;!>4wYW+{kEUM~`6UFgYMA>M3i$Y1d;J*mrPy@|=4fmEB1T_0!=(_E;uH7Pj4h+*f
z`1G((bE9k1BCLy$aesvA@k_wZ?MCT$W7#eAIf7$fgtJ}b4*`i2&+PXhy06mbKzSFR
zhPoW~8EqNTP?v-9TYgSDA{Ufj3*|?>6CBT@ePlwb;hdUXKA3iAR~IPfo`va#3VMO*
zXg;oji*Rm-X|`*?E6;Mj1r<9*3H>2`;CTFeBu;b(4I$eORk2--|EB0eRK@Lv=}S=m
zZGdBfcJQj2D|i9RFLH8MLD~L+?n0p>Z10<qqA@V-h?L1~onGguD-B3jNR_liB88**
zFr%GSJb7TAI#5@TM+3E99YIrR(It@HV1XXf`@|J2Igm%Y>{^prDWMdS1%|TPCQseC
z5)C6eva%=wsQ@~!pe~@!8#uXm7VfV(8$rYm!+y%qcg7Oa3IW03%za{@epDWuz1RW`
zqr<+&V%u7`J6Pg#<`;4=MMhS-%!Q4C;t>^2bGV_vnO6~Z=b=!4qR+Sj@C1|>&9%^|
z!3swhT0B+&@wY`DVjG;3iqW1iEDRPFFtJ9xSH(S`+UF*=AKkijE8x$Y#NX!j5!>Rw
zLTLd`S_@pnqP=SF0rft$irCKW+qP}nhJPXLPmtkj?s-htj_MV@rIr!2&N8uL{1MUD
z0%9A<`pO0dCxoiT2OC0amfTNf1-xQ%Kau4Ph{+~>`G}~ws>&Q4QLfjw5KVf06Vbx^
zugBlwwqqVy*j`*3<aQh(t_14t`QE)+FkHLu!wn#C#~rBbklj~cdzN6!M@|$jGUjFp
zjhb_+^*{sOdrEge$8FiV^~h%K_>m(#kAHH%BQA?ShHVH<BcpD#M;|MVMg2MaX$M0T
zywN(Iyr1zQu}MI>JlS^`7q*VeuV@)MDik9c3<icO2eHtop;c9=o;J~6k#0DiM3NX-
zKkJYAV}_W4*t~4kvYUo)$A6iRHc#8MY1-z^otrknIUg`lONldZT-p1bX&290wtd)k
z{Fk1N-`Rx!{vYyLM_ol6V7hVp9Oe5g)L}8Wk#@rh3_c*#dL=~%8^)HXd|r}J8{n_p
zhB5G$n;xwVM{7NKgQJcez-7}G2tRHHIgs`t`k%zh;^O{j7e|R~LSs}R+K`&x4O=sV
znxX^vmy>x!3oD){uQg)b0Sq>+Cm8YMw?-^C8&Q3Ghdw~AXK%wNpZJ4MEQ;orxN!sB
zy=Gu>$lMsYp7E6r3fju8GpAi7)n{AW^m@i$F)-+?w#}J7HA^M7x@p#0Hlg0FlJ2P9
zNYlBw@P|hu-&M1jq=IP7DLO*s!m+glpUz40Lx+v}aGSvT%LfK+6&A?Nsw$JLX95DR
zX`R`SmzSn@@w|4{Y|QQuI8|?foI-p*^?#hV_*a~a{35;=%|2*5^0}vB`{2c^c3xO5
z$yb$fQmf|PlyR3yx$hNn3U-zO8Q38EA<JSlXYE+9;MQ#XWyuoUm*sZ9N9>6|f$BCu
z-HIlvH)x15<$lHVBl>dLY;NAhjUem=9_}Pgzm5Kec!&KX?)$LO67QTH*0o|5^YLk9
zs5s3mY8i2a8J&{m$PdGIE}uou_;T9jP17!z&aI4w=we?&K3$118VmIbyBK0t@z7EO
z!vyO`7t5T*G~;tJ8b`&5NMv}0<H~}fLgd~67E;@Y`LLhP@O~x#er|n7vCLJ((0(Vi
zjeoz~aYaE<QTX5IPl(>8e@9-)9v1FmN}q4_%o(tu5ciT6f3d|Jvdc-*>@PH1@*IkZ
z6EAPpiMP?RKvU7QnUXEy;&JPk5!Pa~Dqd_A*4#lu(b&sc3))I;izc^THns@zeSm5u
zM=%8!#CIi}-W4If3dFa_3@4THi4!hw){D0>nD4CYt%xu6inSQ=Lwxb7JZMCG!);O9
z;z<JE|4x2^Xm$4|;AH%_*p^^h8Z&^BmGhp7kK*3kGUe147vXxkwfkf6Vf>jMdxO75
z-G2Ez?hmJ?Y}s-VUROTY{V{PYegdYEBvbh@JyCqrZ7UZL@+I3k;?Hnzd@*J7mW#OA
zn>Jna#TU>{{>bQwH`!OQouKtjA8arAb`yN!EJDU16U?PybTPBNps=XmN=L=;NMuBX
z1Iczjbu-w{48y*Q>F+;^Y|HPI7Y{8lFmx`oHd@o`b;$o9bu)24|9)@&kN-G<e_wtt
zw-juQe}R08Xneqw^@o99kNWRu3?1D<gUgt&0L0)d!r()L5`0*w78t-#v(;#dM2e+a
zmLao7Ws%Y>gS^UFrLf7Zrs7DkM9Ye4h!ZTEZID&F9#=A?%HQe}D<vlTkT#n+TPgMr
z@QbqvO6|k2+1@@xX_ZNo;y^3E_cNMXPuvs#BP>+|K7*JTKI*i3cglBf%7M!C+k#=w
z`VWg$r?XmgZ&)lkt<9_h0e94^u@p7u=2fZ;&0%-Ur?C{b<mOc<4Xxa_9;?oj`u_t%
zpwtm)DY1KOcDErIb@*E%cDK!jx(zUoevT{_OGPrgn}JRS;Zv3hKo;-0*dUR#eY$6<
zQ7UO;quh3@;Z86g{z326Q3FVtxgo=QG<*TR_qW@Znk3n6^h4;qyU=@g{Tuv5G?&M2
zj9<&!3G!ZJD3{aYkJ(A`+3UV|_l-rN=Q$1c4*ZvYY{ZObUjLN)vp%mbc-!dNvq#?+
ztjp8K<DyR(O1zN0NJJ7|(FZJlkNV@()#3*FU5p)L#$YT{x-XgG;z=xkSRjf0mU=~8
zL|=um#JhdcLD`kuW$em$FfkwUu^qba?t2sa8Hiq`&x(hzm*cSyE_kZPV~;{Tw|I!|
zn@>A`vGc~QyT@H~we+~|YxHZ=)?MSSStns9+;_|oE)6?IPTK#lBODDoMor?!25>qk
z9zuWrFVdy|1nK5S^AX)g(&_$(<b8p$i$}1R@%^2gVEs{#%Sjp7FiCB}<(vB)_$P1!
z4>);jI4s}KnBN;hb-~?ZXU!VBJ6IPoU_Hy(aq%wHf+oi&@E=<V$0a%q_mb=fR!@H~
z=d#QeQ`YwRhZn+r<5~J`Vk!HqC?G0HiM1lcGD(Ebh?TlynWCA*3+9&R)&!L_k<+Zz
z(u}tzx2oP)GjAjyXrswsH5ye44gHv>z>=+28*;SlDxcRHX$i`?Pox^X%~27xRu{Vn
zLhf^AOS2V{14On`FH^~sYP{b2EH#c;%Cx}zl;A#1;7VSQl;Gtg+uvW1n6wpg*J19!
z=<^{tW!%S7wZZPFgmM<S2r?n(|G3^>g|e+-f14ho#Ly=`NC@=A2jK`(X4E?JB|n%;
zOC$Q+K~V>~`(or2CR>^P6_M-JIV}dc3U&l?t3mDy{@LPGGuG(v(z5A;^QMipd(=#%
zP%4wkFn?HXYnY~=pTC-+H^^;}f9~5B7vvwq{6mnxTf;;OByx%De<A-b&>w(@#W&&m
zl2T$<BqGs(9kH9DM^#pj))`V++-i3odk5D5p151<wkX0*t;ehg<8pj~nhG9f)fY~O
zaUeQ(Avy)AbbcmzUV(bO6YBNHV=ugg;=2S|r<8>UN8#txY`ag#*4cdeEcUndSbJgp
ztbu-e6n@Sg=;yArhHG3CP5IRx;ZD6*p#9tl?dRX&!!%*~vj+JQzdFQc1L8Bmlvm@K
zB>F$h4-mZp`Rrn!NW>uU^$tQ1(-6BVCduWn398QZl)9v}_hv7pGr8PB_6g3Tkm!vL
zOHqR#gt?QB96K0}XhI$BVyZLK<l`Fjr712}<*0&8HRq8_bw-D^5YjB*UaeEe!HEBm
zoJhw@ppFBgOtGQ*gobJm%cK&y%AhHTdYn45MlDl{z2=fgk=|QhXw7MuQWI^nu`O9y
z*^=yG!waKQg;Z8%Mr}c~y{KYVTfWcD>m1q85@<vJGG7(jhcA61ON{uAC@huArLvfX
z=UZGcb4Z@oBk=vN<d+b=1o=KD-Ymo`=@SbpS(XXTF>qFDQL0@grAcdctKJ-i%9XV>
zg>8jyt-E?e*qN)eu@wrbI@nYc_Ng_5se7bC;;^|bk%9Sj3x?)t6rUl!P|uICvY(eP
z{is~3h7-{OFXU_N9wnFBZEkCVuky41T7H4(Mfw9`8{~^x(v&zyLNp!FWr}(Dnz7xJ
zRg~in-aP7Nc9+&*Eo$_0uYvq}8}|Tl5YeHg65F8Ow4&belKK*&^#-02W6~Nd0wqTd
zB6UFYbIL@2K;8gt7n-sK2$4AYjUEKQyjV3+rl2WfsXMn&VjC42+${0j>}87$E(%Gl
z)2kfvT-f*gSs~FF?0N27@02l^q05Or+;+K?JHYFLyaCo#kLbMdih3g8++a8_%bT%W
zjKW|KxpO@irSi;iAf8B~|6+cB56jC7$Bv0uSvY)JS_apf%A7W}kyVQ=Stgg<y}e?r
zK>^syJh{qcYSL=t{sR82LZ&17J+vb)93%f!TJ(2_mWE2B^*<^XYEyOMChVPwXUu7F
zf)Xy=44BbaCAPUF3PL<Em~9-Ynj@QIp)GQ$l$8_8D*Ejq^?z3?s#Noh>*xL1B^772
zg?jo59rGI;hlok_2=B!UtV>d}HMmolWtlKD>I|fs-KI6PLq_sy)qKPHxxMA@5%+xL
zt6I{tqMR+8!>r(CPRRwN{WdJKqp;6bi9~%PjS@#c+^}$!QVWb?kZq6;q>OUZQ6mF=
zYDlwtfd458is$z>EUTk%ETK%J5$!`lV?`9u@Bvbg9v{-u+IC!`<aPLS$Z<EM@ie4?
z=GKPPxInS=&_mW`n-wZLN@q1OI{Eq|i#IE!bQzsRmr3;-n0L=9CD+R2^Cik}KNe@N
z7pt=->k)03$ERT)|7F@T-3EHnIfZ0{Ouj&(_~sL_WL=W>e@t#tbcnu~Jj}iXzZvjs
zCI(o4x{Ff!ua2ug!<tV>v%lDE3OV=%UK3ha250#-W`4EV2fyXn6|8S1w{+FCgwuCo
zc{$%&<kjiCNdR(ROMXeNW7;lQj^G+32L)MLOqiv`Ux4ILfFDSczerepHsRH0yPUpj
z6)#5`TaedFu>T=_ybk5KK1B{cFpx>74eTwR{%hk5aNG3T(Skpe124S$cztlg5^`Wr
z(8tbIVAD$Ob%CE%5D3iZ0kA;)8tX4$*-TC;n;(;9>I|@Z#vWKA30X|O!d|i{ctt^3
z6qFvyvWk177i%!RmvFo+|2ujCqSMq0GM|11_d$$s1}-9)2e^fj80-p1MZSaHBd(Zo
zReQ;>5^WZ}))~;V`cQ44X~o1+Yt4*7KOY@%J^c;whOqC3_ezNB6|<i{JB;~w)3noH
z^80QVQOk(^!u}nfMh(;aFpQqDdD@q!`7}RHhu=^6ePTbwfj3lWlr&a#0_~>|Kg6Gz
zzxbxAFVJ>M&F7y_*|Z7!-^Ra;e@RuL^KZm>Jg+!%8Sf*2ar$miA)eQ;AaT$w5f9p6
zPoB}lK~Qj5XsVFVS-4f>HcpL9-S^s(mG4cNr!a`+dY!DOu05}9$v}^*dBNb@;mF+p
zI=fGr$m{49eW8)tEv}h*Ma$JM-8iUo-V!C1rB%8ts>tZY)uBN#$0BV|3kJUoWeajQ
zQupKgY8%q$0I+;gE+i-*V#&Dxh35iMeE(hYLIUD-=Llcj+`+-dO7E~i^+s?ec|k#2
zI4g@GTJM`uGh=|?Q#WD36^#Rz<*GE{ZL_ZLxuSs7yKVffwb98}4L-L|xUe8^wM;f`
zNx|eTon!7r_w81dMDorZPFz?3;-})L$$CnK=89>j&V&`i0+1ePvRrCVs~x$O1+8;h
z+*2nMHJ1eSR#`>o6Z6}znO@#<&C^%Rx})Z#Tw$;nY8LOBxMqvRY0-}zF}Ql!-Lu!e
zch}_BCKN*soeR5go{^t}r=7cnbkGl?v#5!9!9q|=7GFcyHy%H_;^q@cMd!we#Y1v^
z61z%nx2-qUU7@?ePfIGMLAWi?FR`f<HhbexiOjQFyPC=!y>)hlMmNi*lK!gu+x^^A
zxub8ISFOgt#Hn+D2c0e9{=(ftd;n#s<m1Ejy-Tu>D7_?x-TKW&abEl4w%mca_QZVv
zV*0m=>dy6J(&f6OPZoMz3(&r9N@-F;^6``$p!N#|L|#K5Mype)=NHj&IWk#d{^tBy
zb7zMq?OIYBn|;gF%FhQa+&MY8cy8Iq`XaqeLT44!`Bkwww@#mW_@+fp&P9w-4q3cu
z_=;859IN1C^akXkf_#E#9+X15Amv^|9NZcEzFp>A02wSo42pHo7V>A!nO%U{&*|z^
zt<hbj`&_q53q}Kw!f14w6xZ!PcyK@8Mwda}$9dkMCn6u7EhIvf5(YAP12!1bI)8v?
z^i9t!4o{yl#x+!B(}l{1#5V494O%wRxl*?hGGC)z3*NVkTfDw?-SgMCs{C~YqxDdR
zqlYSIkF1b!-2MXx_T#n<olP800g)K5c;Vg15Fj-|jzjqT)8icz8d?_x4o<jwls__O
z-=c-NA6-dgPnlXdh<gm2$#0)q-LZL2CAXgf{5p)C+(G=6xg63&5nRz;EZT$>9M$<N
z6(it#8!e$_M#%uM{YHbC)_hsWIt`n_)W@g?f2l2Zxyp4%xW5`ymt3MS5g+pX>Iz8r
z6-YN5_CkJs4-kvXYS=^tjtTd33&FoNV4vNm7rXPP>dLgu#-Ls43#uC@S6XTYE%Xnb
z-^_h9fpVk3$!6ER;JJHPUBKnD+-M5d`KzW{a%M!vHTf}f0`Vqokhc`;NjQ4XpCt<M
zNApQr^@1JaxUVMwDLNVS=#W99W1|a)lv?T1aXS~+5+4?iSw3*oG_KayJdH1Rl%K7T
zCf@Bw#p`16dH&^^XH?H<0IT8}CV(f@^ryRSxNQsZ;Z_ljJHCljGHda;B0{FG??Bc1
z`P1$EDiEGp#lWZWK*ico%}a*oS1s(CIA)c*P9D^0oDQcte^Asuy4f7mNJ~{Jg0^zU
zb3Ku9m$gjTy|k_}I7*wPkg2jrU(3{r@iWEZ=^A-bZn9L68@Y_)^Pv$9SvujE?_1w7
z{Fk}B+X^Dwi^PZA%Rm^5EGKt>>)?CnOb1$&$v-yn7*xTB=vj!|1dz?>MF~Hq8jx&(
zVleT3aj<bpwY9{?NNGx^66<BbkhtO)b$89Ifk9eqiCN?tI@$`}>XES$(nB#^li{aH
zbbv~e3_p!mhNc-*Ht}wi&wTrzELM;H#(j2+cnWLM`MpOcJVcL@%0AU9xwl*jMUcB+
zt@vIc<(}v5kuSe6<bi!UT*$*Vtl=h2cxV8X2Xoc^%Y+;s!!$Xf#2H_bNgVMNRsj;{
zK2cEHk0<OcB53jjW1cZjekmY`!aF8hZ#0P)iRFycB>$bvY`~h`D0iy3JA6JcMdg%p
z7ZV?fwcIXkzQGvQfljSBy_~edTDG4|t~?+?P=QU>n<ZxmD({X77a4TY?*U1M5Pg{n
z><Z;@+ldde)!Y<ANCRf^b%1yo(qnNc6$^DQ*;Jrt-ghqx77nmn(m1u+<{h$p<N*88
z3AE;FU(uhyELTN)e)XKTyi-tpJgr~hHp11@?g+#f)(%plgrg>CTXlJUQN%Q<rL)>P
zY_Q6febHS88{5dJH8vMy;cSk2^Irtx?WL{3VXK{4Htlz6<qL8t_g$i_E`|K=$Fhq+
z!q2(u*ubL$AJz~#G%PHleFsXnk-U*~!*n{{7X=ooFv!L0|KL#hKymbFR9rUZl9raa
zO_r?aLs4-F6&gMWJjAs%FB=&Sk6hM_z7HCX`Cd=%pe}>-g7_{V61RmcnSS7x4{n@#
z56xxVYj;->6hTYrd+%O;i@{3f5F{a1Wo;1W=%WTRQ<Mcq4D1TV&6~qviB+MnO1NRf
zhk7-)Tbpk(=V`%og~_1ecDsuVAvKt;#J-Sm@+smzI8Tz`-5$X3*ZpXSPJ>HHO1~Dn
z46~nN+F+BY=i~|-aRX}m;5(EZzhg*$%hewRLNENt(WjG3Aq+(CQ`5oo^jUttAN#ej
z!mJfM5iFo-Z$O&c8Zj|+u(myy-cXe5i!8R44$2R=MbR?Vzy1E><WAx)*p@o*$hp6M
z*9{t)8w!Tat<ptGi*;q$I)%aPG}cAsIc2&2d#R1C6^+ev26$Ml*H*2RDP-*fjA6f(
z<$i_d5?+yr)}k1_<SyKY{k{9L_<QlVXb!?r><s}w%E$8H(4A5m6qAPBCB&!2F~+zM
zrgJipo~{${69`8!Y6QHt`v~S+i_@P-;$_{pV!XH)Uf#|7v0!;nED}MUhlMzVyquOK
z{;22?OsBG!JhATku)Vi&_tG2rxZqyiFwpU6m++t7SV0$icIUp<-hF#JckT$FhY+1@
zfWGBfF67Du<A_z=>*%|?w-AfZ3U@!%$4}9AtfyB5J^dwdhLk>t@sm6bCgOhD$sHk|
zgkyU#nh$9h;XpxRBGhwK*cC0wFyLntAUPxYhLH!Fi)OAi18*XZ1sKpV;@YXD*&3^g
zXaLJ*L`T%2@nz-MHx`WBxu9l1gFYGi0&FZEQ}0`|sJo31S|K%-&e%3FTJO#ltHhf&
zqA9|djv>{T9$2*M^<j_T@D@VsywhYCiXT8cD8lgrgm|HO5XX0x@prH=O~QR_^Qj7Q
zE56SV`OgaG?}{as7eGi-WzKggDa!0Gwt!b8Ri-fdW$_nTs9UF~TtzNV#HE<3%Hh9Y
zng<z%e3&i3wLM2p!9f+CGh+Wq;vP?Z!@#lgn^hH4MhtErReaqH<z8B5^)p?1r_ZV1
zu6Oxe`mQaZG8c015?w{DC$FXtV)=S#3C@_rN-rX|pjlmc(a6C=Min<tELCRRLCY+D
z+K?dUbLoA97YzuNLxMl6Y~WY)ABbnzkyti{4>txWL9OKizgCY<91$BUMigmiaeG5q
z2}39y1uiC=b~sHMf_@Wt>qZp}7}5}d6<-CME-|C#*MY%Ss)M)%){RVb`IAh<)QS<s
zYD70yLX!er012xJYBccHLc;Bku+It!=Rm@^T>fM7{)&E`c!C{{*KYZvXTqMhu#qMw
z{opCWVD|VKI-7CjnZyL!7;_caB^2YW9bduF3N<5kx&csGecDKaDX+>?Ftox6Anh&G
zNMalPvdEmI&7_ldgB^t4?Deq{sVig@L(7i33T+aK_STKBpw=PEE;oq@*PB9+@UU{{
ze^O=~XXzB%1qTW_R1I$1HWQbFyC6OSwt0(C+!tyfkAo=s>^?=U7ClCPA!1-Ik>fTW
z0p6Ro2ur8^;@<4s=ujzc024`_GpN(KjS`a7Is7`k$0+5pNSzCVQj*j={aT&ZB&Ak^
z#UU^E{uYDZu2R|k24m2nRy%^mUcb@&UQAsrng!bgs2dWm)A3fqYo`(|-<@<9I@Qd2
zql#ooJC-&z&1-csq|I;*O&UTpqx9C~hs=?Y<qk*r$cQ<VU*kpFB3uc5PPCm>pNH;U
zIfV{HS52}d9ZMUV<_&PMq}6y0LmBdz<#KmbIL{nuFR@rk+9T$?aFtt*=+5JQ0S#J$
z<^^PgbRRtQ$peh!yW5a$cE7>h7M~LTEk65`JTJ}N=gpB!Ut_i_p02Q%zgFVY(V+W!
zn099T8I+d4RR9^ot=w5nj(NjgRnS|>oz*J7G9#1W=EwIEQmPWC#WPZrgI`#hJ+p~N
z%~iqKWT=R0^cP|o26A2T6Y)c+Ph<Puby4;0>qqdNb(EN9B+NpwSv~^YQ72&*(=wKo
z(Tiy*u4mnTZdZI?{0JJakizITaoL3?GPz4`l(bV~ijmN>E%w{KeVyBtEuT$GSyoEV
zHUfT~qI(W^OMG|y7#^SUXQq1=W4USVGh#~i4vN<E=YFX@Y+&$W?iT*suW)`CpZo1@
z;ts_R#_vaEN%Lo}g+UL0Yy_I<dlolyJ&VqxxMJae+LFWE!1^osU-!B~=$MGvZg%4%
zBJc~OIf45)zCC_5KGz1PvfYaaueST`D{e#j{uMPce*C=c0QVbQU0I0)wF4y61Z%4;
z8`jqP^Rxrp6I4h1cYIq*W^NOg!6s47WTB>(flY0pi_WI)s7dUnr3Kup)TH?5aE!zx
z>oWK1l#Nc6{6=aLn3d<@KE-9hT@TZZ7t)cwXeH2aZ?-ZP=f*6U&fv*ImkOXVi&J;O
z`nZ>`H<@%j!|b82WBnBa1H7u;^hP#NIWUkDE%4JrGw7P&s;QBp8CajL{##al2cK(9
zQ7ns_!9uH`Sa8OvQeL-qaz6?NOJHul08{apg9|~Pc|XF_>&BYkiux~10<3Lip_cmL
zsRSxd9_H5w`JuSOW)#b`zdZI)CK~Xa&z8U`-l(IzQDaR9bE09t+M2`kBNMR=7lEUv
z2wb_mPO7L5(G+Zd&VDUWD2Hz=hG#HDvx)$Ar&_sj?Uc+032KnVfmu91ALQpx@atz3
zKnrE?O~Ufa5JP8TFrX$t-r5#i0vQ<wk?r#O@4)&up*tS?%UeeM_gm+H>3qu1C=PK^
zX5EwBcT&?t590cF!Ts*t7i~la4>sVPKXb??r||I~bDmw+eVViciY%sFI|R{IttHPP
zr>23as1EGU6cjAwcLsSR0JjO}ljkfhhAa^H3F5%o!R`5RaiBb3QP+r2JZy`oK-Ab@
z+e4m5yl77s01HfG#_dwYpg>M6>_34bf0)yy1B)rVUzwN4hb3f}Gq<{OdzT=$^vC4~
z+!1bR{MYfv(S1WS+Nu&_s{3Nx%l9i8lix&<hMZjekXlLe+OXTHcj_d=I^Y~(FU;%f
zaQuS~{;S+7;3{>YF1wU`{aNlc?kO<a7?dBS@A+Xo`3Vpo(<t{m&CjJWzGu*=(0fmE
zZ-Cj>u<RgukN6c4IcC;!uYikw?7fG$_rYv;OuP@h2d*LK91A$O4)9gq_e#^=dw}~0
z%=VX2d(nHts6EFD+}$q{*I+p(!^$}yzQ+puVun&;{<GYp>z)=e<=All(|kHiU%{v2
zw{QF)2E0fW56c4vtxL{ztpk2Qp*N|E_sZ2$38>n@aUYe661-CL=HdxNu#D$~*N6TY
z^L>zi^=(j{@}A`XwRi5(Q5AU}@4C-UI^F5pk95+VekJL=g`|@v1cD@i5X}ZK0cK5*
zM@9_d%7SP1=(w{k@)$v81Yy@120?UrijYNM;$x1Aqq}-Mq9{9ia8Qpj_*{h{&WH}V
zm959UeQ)3HbcZ>|-GBUpLwCA=zpDGIy7l?~s_Ry%bp&`$51Ywd>%c917I&OP@(E`C
z2KXwHPLF^QQ?gwaGE_tI1l)%#9hS#QC|5J{Kn*gry5SjSyD8Z=rnlV-4<TD`)^2Ru
z!EObW$kY*p-7GyD+tgu<sZ+u+-8-N*cwaAVZu(t)Tv;`)S)_{{wvH=A9R+S101}NW
z`#X5b<@LIlANRsAcy&e!A6nZq;QBsmE6r1URDVWXOx$g=6A$vGli&_hLOoKpjbc9Q
z6;l7ZsO=zgcd{Lpp~%id?4A*_cx<=iNfPCiAi(Dc*!01N*-1LvlrctjOIe1rPaCrs
zTiwrb@C^Ikw7%0*$9UJX`<0txcMH58-x~D0q#S!fjEmJE?>0{;4n-{h{_0s^QKEbe
zoZ~MGdD&wv@-*gfrzyQ3Kq~!sPHjN-;~yfS`V~Cm2~al<Z~&}H^rN<ypt>RL^;BTI
z>Se+^<YMH<Ld3`LThEhqrK-JEYpY_du~g&k=ZJ9=HQm4-Pbga*C#b2?UJf&{>>I$A
z^&pt*!lnziad#5imV}tc)R^x$v4;*UA4cUDm~|%gyJ`CMqx{6ONP_^kp8#eWaptG;
z$>Q;qA?}mt@M3mLcRC+5+_>2kAMVTKQiou-zl^$wG8@7A%sz0FDL%?RB0d)279&2c
zd<C{L&nNqc8SXDU_9;H5yor6hh(<o@VecUOsm>nn|DwOMU`(-_`!u$rHgmW?;xZQ{
z_HVHa;Boo4>%a^;x*psBf-(9%{ry*rZa;i-9S-ul@aQ_Q)E0IrBl1Ofb^~a#<N%Y-
zPKir|+Qrc}41Z5;HN1TUAu-n&XYc`d#fNeae+d6feQ2ly-+WGdXuLD}5EFfz`U`cT
zqh63+g^Io;A2Fkk|NJBMp%HNAY2qS|!DQ}|lkQ?+pu!Dq1I?g14z@vHj-}x|g%i~W
z1r;`hPFNpE1WjYn2Z7og6;9E?fQN!9J?E)Dm|#}Gv}~}<uRtjk=OrEIQRNWlN!5~B
zAHQe#IFl4u=YXKbBtq=Z!8bEf`OxVFl}U+ufj~*s3j|76qZgRF6um&0WU$N92?qEK
zHi}CI%p`1wMZ-?Qq%_=5&<t%l$)GYRJ@-*VF7AbIDf(hG?mOd1LLC6^7=XZ|0V&{N
zR`$YH=Dp4g+Cd%Ls1H>;P#jSwNIM`LX+CUv7U@u=c%aGwlZcqhL$5Q3GwTM$nCb@5
zL`|PUBuZjGDAmaZTQ;_$ssT~R;>2bTK8z@2<bKS+{SJ0d3%pL%VWaZe8HbPpOBpyc
z2q9n|Z;@|dPjsi(4pM6EKruv}v@!!2Lw}8Spd_MhBya$eDA|w7qGCOa64e8y5%Ds7
z3h$S!_hC_aR2&CVqIjTo>oJj1^lz3j>F@xUuZ{w}Oy7)@dQ#7&SK!eBa4Q-`R4&Pb
zz08kYUXY?smnCxPGx%TBRKwCq`4X`vSW2?b0*Ndbh8L*=9g|*#Vd6o7Qj!nACi?gc
zQWqMNnD<~SaiQg79R?;De7rYAeZ-l>Lio4Dg)TQs)&P=D1F#dZ22l08%0O#;ycLNO
zCjjF_4(>n@<Uy-~Fji#Ys|bP|@Wm4B4ecc*>j?Iksw1YP)e%yHj?gd|*Aa0Rj#Wo!
zNCcOuj?lQ6K?B5fM4XPHcZr8MB9ocS>NEg`9?}3+phW}TAX7IZopw+`r)dWQIiwvF
zzGc)7`IR;mQzFt1m{6HCK!SE?Q=|g{R3;68S-9aKDI$#q@WlB<0el72XnaBtp1k2K
z8|=)aBh(=;QAbcd5hqAT;A~0rVdPUp;ZvfDz<?t5aO6A&)YWJR&_pfYC45S>izRD_
zrRb*mwL&Ot_6jR<yKtgp94BK29neN(fKD@{(E%7y6rw|*SR)ig_>HXGoxz8cN=r~c
zsaoQFnkQYYmY{fwYYBv>q%ki=o|K>_FqsrJagyXos(o^vlprJ&8A0=;=_#4CA0@F$
zx4gcE-EGL<Q!wc{IPff3YN-pUOd4L_!XER6L5h6cz@&HJYt&R@((}V_5o?7>275M<
zNki}t)Lw_A1G0lS(DJ0|nYi|6>O=>n!}2uZM1hjgM-r1R$kc_#q!V&K@t|W;vIdZJ
z8UWqFZ}l>Z$wY@y<4G7u6DX06!ktLqSsW^lcF0?MnU!uUrqQU{K~lBD64V=27RgT`
zLr;LPXmsr$soDXXYA8A>4-sn>MPt+tOX%I8vWV!1mH1{LFv`e&tRJw8IE$F~v3x)t
zbop9(_5&HQKR_h7j(tj;Sph{_nLo_7!tLuo516N7D>oayvH^@|elWw7iu<BKWdmWC
zz+q!mH6VBiEH<8uL<1t&)o2FhE{JeD*^)!@v$1Lh4S(n12r<_fXykn+&Cmuee@0yB
zc$kLwc+f=L4uMXMZiDQto$2h<fl|{66ljA?l(OtG!~Gz{%@D{mm4G2O2t>-Sl&nwC
z2+F8aPk(+OQ*}wKj~Q5BkJEjUPo?KP<`0GBB``_j4@tI9bDiCpw1SjMD^UIrAMdgu
zB|o}atw8ys%sE`9^K=VG<4;88Poi3QQTG!CNsV+qk{OgB7L@4*%Al5%4BB%7EFmFV
zE58usKIl%I7fr#Sr{SR!;1;2wRAtbWIZ^I>xEko~QZwjH_!2eM7&LfgFR@k_WSj?0
z9M?XA?@)UkgZ|~pSHywFp!7a2!~dZ^bO_ow93?)qyvQ(@nmoRKL!D?4+A`cne5epg
z#e7M}eAK<JYhm{o@@{o}L*>;e5E_8H5b!`&o=Tx@!wXy3<N3L2PGp#8$8A-o4scX3
z082Eak_an?<K7THXCyh_FH>yQdzXp^Y_8Ghh2c}ggF>U^IfJ+ly>P%jbTB#~OT>wq
z8Ksyr$TIj*!~=GuA!$HvC4ThzQF`{HI})>>OjIPXpVioZnEWIJIMAyyNxmP^kK>rd
zhPi`8-5@3D26m#R8%FsZD~)zw?ozZv!tYoaw1bAE*W=n@r<yZ$Wa`@n?a-DW9Wa!P
z+>aT!{~}KLiB=w+`Ma~cIN6`0%*r5i1syoouVlA$rqc^#oV7Txt)dq&zT8%9Tf@v#
zG~H<P43d7Hfd$hQkZ}T?XJ9}f<=NOZ187p_8Av{6;Qi>DLB*l&=L(gHX?Tx8hY0Kg
zT^i*ExktJ)@jg)}P_hlO%V<tDW}QG`hI9hun1T8F`GmyZB3`6FMJViocaDfAt8kmT
z_VM5T{gWfYZOYomuSOnYp61_3T%!oXGpp`o|3hjm|0!Ev&VTHyCeHz=>lvBsi}-!q
zma%Lh<@mWxBaf3aXmlsgz^_V*vinzigSMCBr_G>pp<o^PQfyP65n;#^Q)K{t>F~KE
z^S(X4LJ7)Z8<S<X!Aqh9@IoZGpW9?wP5nFLYcE$r=pt(`%Om`ty7&^nmjx@}ssAkU
zUHoJx;NkJSkazDni_7D4h;8tk!whn5l9|Ev2lsKC*gon%EAF4|gK}~Kr2T)y9AJLP
zeqgu;(C75J?dJV^y?zNo_5=MjFrbq;z}>+9MmbwYR7(l->MQ2lSy$M5`*ufdgkj*H
zT;<+>d?~L!!v5x><b1!N@S?-<e!icSFJFTH1TT${zR%O8YQ&!tzG<}y006VA*k>yb
z+%TtCv{;3#P+dn|p&j6bP5&Qj`@V}ciep|MIp+12-^E(b?`U1B+`}9+wX;V?kLRyL
z6~bY0+>D-R`LxEGyil3&q*&A56Rnswv4)*rR6S|ov=U#?S5iG`(X<G9@%{SC@7G^`
zzy9+3^_TyL>o32nHT!?vx=t33L;OD^eqsumYRSG3x;<#rqtD{o>Xa%WOgzi3!WnSq
zFsu1seS1~)wb4qC3%v(xxo`}<pITd)%Q$>tM{y<3IJ{v=^1HKYS^CPA#juh$BuN2R
zw(z0N?X#A))rSfK1vZb*8ksQxzdYp(7uaH@&Y}XFt)K|>JHiFIxdmYd`UCpEh>RZs
z|B~sncotp5)X}fNIm+MbTtSbG`I!)D>>M|~rLMZb9m=yZKNljC(EHZ9s!6U8`h25M
z(l~S6xR!eKdC;T(Tv#IcitN#w+ABkm5W3^-wF}y-f~7&=K$mTg&QJI|dTC<hCO9~9
zeB>2+rUIYt)}De-RG=Feab$xj+#&D48yL}zu9U7Bu)b{ATB^{v!xip(cXNwJF7aoT
zzDGtqfH(9<olx6N8r~gRK6z1>D0I{XmOE=p8P*e!{P|9^#lrJ@3Iem5VzWIz_=Skv
z7n-xpIoVW4Jj(ycR4T^E-T>-|n(X`0@QS8I^UZ8Qq{i!6ZjDy4Oei1)^4(@jHZQ>Z
zU}uxBGVC$euMmBbGv916=UAwg8iE_(w<9~q87YY|`kKQxEe;14Kkedz;eZM1<0*a!
ztQRYA&W81FG2X-+tK{|Yn7gPzKIs5Mw_99!g$}U-{=s2>V2#a=lrn(3xQ9kwL-#By
zJ8@*0#09Tu4ESq{>>L-Up6CxmizU7`)L2<iP}vv?H&zuCR5jB0ye;I6TofCUeYjbF
zb%URr_Q?4w>wU;uuJC9eR*~$z2Uru^+BU2ppwd*D)Tk(kbP$mm5fKmp=^`Z{O{6yo
zLXr&#C{;lPq(l@10SSooK<G^%h$2!01PFu{dLZo!?tRXC&i9{l_CD`>{nz`Q>)K>^
z=E*&?*35b)$*lWcW#FLWtcL^%H1=;D0b_H|s&*sKA|xJsA14j$8IHM5iozk?FnI;3
zSiD;RsKJMe#zeU(GZk}lbUsL}P0l_&mX#yID><w^-6xX3(0z4jPR4PNu`!c1B7WH0
zCUVK>R2^$4htk3E$%9N%2h{nV4pbq+drz26$$nhZe)GwNt8}2eXa?#Wa6>{;s_=;(
zk?FD*u=|3q*z~q)n*Y>P?`58{k@AywmC2{NL9cF6BP>oz#Qm5iM|^*w9ub$q(f^6>
zoI#y^a7;aVk6d%B;fiU&=q0RB$B{$pMy0U>Uqm?+`>y(G`p+LTdPtD8{mxZT9COdw
z=uWI@rkTVeZe{*Yb<Ip9WYo5<@tfxD?9WYhjE{4FY4gy(agNoc`j{<uZ;|hDwcunn
z*3OL|1q&P{2Nx~eZs_~53>J<Hn{8a3B_H=w|6VvgWE>Q8A*6)2$ik=7#x%<QT7TS|
z`xosqYVzJ~HJ=XTWa)eYm*6*z4%RR!Pq$|hSK$`-;%dRl8QsVT6<1O?o*(uyUHIdu
za*1`T?DrO((1+#t<L}BYFaTL7H+Fjq!Vc<izA!d>I<1GlKWT;lT;husIX2X|9DV;(
zAy4xC%~Naf_oukMADcHV=e-@AI{qf<`6A%TUT@Nlm7%HcrnQ589ko2A?oIMjrMjR9
zv6Ba%6%b6PXLT#`LwNGq)dKkL@d0E}{4ZoreYkT11@(J=|K1Qv@V&0S9NOEf;A^2)
zl!tlUL;9G_^Fu4M^ykett9;v5n(0aTrnPg{>s)@|BOPWt`Dggpfw|q3mxW2nH<o0|
z-Z;$`4_95BiS3zrs=c?1ZzIc^D#z-=pcgcad5V*ExNL`v%&o?Z1r)Zq^4_hn$O2kV
z3?K!(^<Q2+%cToR?fQP9)}W}t7xc=0#zeBv(l&0<_|ZmzaYBc+HNN<ia!8z}z>u+-
z>)BlnS1tVOmv39=-8}d<s@}9Z*k84I+d8>tqAifL5HheM7C*7`{E_?fw3Rq3tA)o%
zQ#-lShF5weBr~{;jG%0@RmMkcj>mlba+pV_o_jo2^QlVQLMvxwLukgU&ki-%4a*Y=
z+R9(fc16C4E>Q2dulJ*tOXd*7;vAv5sYgKX1BOpb+4O=Ek?&x>ypfY$jpf3bwl{h_
zsgo>`Q$C2=b<m`E%$D(q&jyISJ8WeS=;LE9p8JmIy`s%!^sPkZdt&m1>czslh5;Q5
zPTeBmWhyg8AI=dW-QTC?;y=tyekwEUv_GwA_|7xzI{0|Dv=UE7;cf+Z>B<nUeJB>F
zj53}pWWC7)=DRX^_mI(Wf4q2|RkCpJf!(|V6)7K6UDn^VhYbOdN6>&@mP`&PH&j75
z$hEH2+7QebX?gu^(MUDR2R2hrF+#F#UwMT3lPSl#7!~EsI;WYCU8(Y?EwaiaPfv;;
zaa%2TgT%W+0-Iq(C0~`;X4h?K_YbXpcrgQmLf@NX@2<c&mYR$Q-Qpxa2Ixqlu9iOa
zcz?3ytjHWjZrE_}o!D0?vjLH`%Y5-ltw}<sGC-<|ApQ;aF9{YOs?f!r@H?8p-#>-<
zE`Igsh$%l4;8R=Eu=_o6J^A~tq?MtMjkQXGjq3N$f!7%VV|t<+g0hy%P}e&6e7xst
zD)mN%74P(d9U*gz%<nvOD-V;1#(p*e+kN?Uq8~*vWuHCqIQu3;4pt_U-Tid@UFXY`
zOYKo_X0)6Rvz9)ZnJB39y83y*64Y0WaJ$n1vKbj4#=F<p!o*IbhZ;IoOAf%C0@PY!
zuR6h7TC5)g#zn0J&0?xiUXx7UXBk+0YSl%m{Wt0l?x=3}zVW5>+VFM)?~2^^cN$!J
z;kDi|sZX5Eyb|(2-~C<`Zq+reuk*P8p>~L*4d@J>ZNeoszKj)sN3Er1@B;$)sfVNj
zXGV2;G@8tTAG3TWfmhzfV9ecL-M!;*$K?%)F!ew>U`i=ke$(e@W7ZGOOuUMi*#VU%
z<)sHlEUxSd6y%3g0ICTkKs*&b54tvds5{9{Qsy!;$0J@k;E-gejNl6wdmn2*JL%HU
zGn%7Mv9D0+m&>pMxN{k@(+9UlYNt&Rh(MLg56A0uUrL9rPb?mdVCsdTDvCT7*IhT)
zyZf>!Ak9q#Xl1o)V@}B@%*}?jVxep()3Y%fu9zMBOUv;B!qVEymk%=vwcpfTyu|@0
zs7S_ctj9`bYWi|&2A(q?e}p=4VGkA(;I-U~T7tbR4IS24_L6k7vU;mmg()wtBcv<k
z1Mv8V^P8{SUOk+X@vK=XW7ptO^u~iMzkc-fHs(6IKx6Qx@Rc1naNr>QpMh~`Q{+ko
zh*N#*04qyB9Xar2z98i1dO_<jX_eA_#QAW_0mcJI4lw*o@iQGuCDro4fg^LI)t%&{
z0`zp-w95T7zy7hJ!I|T)g41|(DjSWhtT1YC-Xxox)yw3MIK`-aD?<BZ+QBCg*N!AJ
z9XiDJ_-O2F2C-XLTzH1;p476Q*SbmcJ$_D2?%MI&S0YZG`aJd!g&*aMKKOh*pVU!@
z*&!KO1O;L6NAr!gRBCh19tOJQJWfUTR6S~tUtJtbE>X;lY7-P+n2<b?FKOl~q1_-c
z`}OHYZeHPqg~CFWWlQ<=Y{`X{8<+1v%M?Cksa8&SlxBoJ_}n|iK5!!mr{eV1<)O$z
zY1ev<?jC+hVPNr`He_9Ih~Uhh3%gjp)iIzGtY{M?BJqCXhJ;VbJv+nh8m_ZnPEduS
z4erhlpRcWLg^SvE*LoDN;Cb}fUG(r4Jh^3>Mi03b)^kJkF66q1D(R{!efp9A1Rc|$
z4zF6^d_N?-dp!Qdx9XegE&8x?3CM@Z0@)YduO!WJK~f$C8cML#O!DG>G56z0tFWwP
z$;&RsTr8`mJy%$PN)*-Vhqwu@TC}0W?S~>FOzm;X9akliUl;LXQ><<jqUTet1^hVC
zEgaQQgfKm2wsOnHF^PNI`}y7;BN&8#Sdr%qe*TR!bn=EB^=)?BxRg>oI<JJ3kZxRC
zIoi8q7BG8y>utP=_^g)2l{-aZ1EVU^l&2JPiG{`Z7rIZk%$*jnXMLq7oZruN9vv9<
zl7N6yCoUN76`HRYzJT_zezTEu?;BM}Ci@0`*z}hq04mNs2{fKiGhBY&QhH}OP$W84
zPxg^l=@F<abJFz^*6vF!_ISHU^(eL`uYN#b^Ra5)X~$DH^Cr~fB#BA-s;Rjlv%NyF
zzB&1gG{kg$xBAI@9FMv`FX!0$!<8+M&fCZ9x^p>-O!Oj)4QQ!;HlGb+{l2=J>hHYZ
z*rPL)icPzh)`k!?CFYwsOWvowCn4m*^DDqYz{~ZOQ|-``^hw6B@&*?kuIioJVN&e1
z5lg6tJ@%q`j_jl>nu%RrmGg1cdljk>o9aHnhL8g+)Vd~l<)`v7r=6S1D+S&TrQD<W
z*K`;p_f7C-?@9!D4j*6O>wEsGdbBesIXed@A;_9O_h{mRbW7cBct;PYUVZ=_%CPcG
zWY5U`^Q*#n=;<}@b58;`(hX~q&DmVi>Q@+DtAN2qde-A(&e1n=_{266mCjCleuG*<
zx^RrvEM>oN_R;VN$^>HYb)&ft3qF2hO*jL;0{E6^{I11dE?3R^L_NQ{Sr0GdE%)~>
ze@V(SEz}H))$B7>Z}E^}JDGqiL(`k%QtX*GC3s^~?)Jf5-fWb_oAN6hzpkR#t6IUa
zZov4$>Ox)c4aO?XkCDS4ypvT5OMB?e$pujZPbwjJh?L#<Ggr<9oVk0TJyhRhx99rc
z^$SIp=FGlZCf|?;)ke+e;BVt=0?wj#o^6V20BTibyKL^mk+XwO4~;w*5s=ad6L~5!
zaX4f=^rl#~(u_QwBYZIgb+<uCyngd?0NY2s;MZY#1+Tt62_1Q9;H_czsu1o@(rR}^
zRM)1dU}Y|ij*BWZLhQWz?-bVA<elEJ&W^fvo<)S)FL)!<c|wujE>ntgete*d-GD30
z0s2MX)VAs!d$;r267$}jh50JSOsPo!{zE5T%OKeh?-%ACy)r`GRL+<>P#jb58@;~x
zRQy@Z8+VC=Oj)jT=ZjB4G%mjF^UIA<k1)Sqz<ph;nf+F~1h@NK{aIn;>49t-k|jIh
zV(D%;L0^vJ>y-3)-seCLr>k~(Ro>@kkz$+r8Z}=G<$M;TX8_5^_X@1FvpSkFA9une
z8Id>JrEa)`Pl+uD+4PMWL><HhCGQ?kC|@W@vppitSfgM=jl0qyd?T4Rr%%Bg*e&1)
z=>OWfcA?Yv<XnX_Wcv{~&_LbEgsbG4V3xLP>O*}IOCFa;8IM;!w2?EDyzRU9PM%{N
zgbZ9cI}meeq>^_Qrh0YMlZJ|1S9ahI)%JQ^wUJi;hCVt)%i3$b&GEJ`?cfXd%H|`T
zghkg^0E=j|G+cam%{S}UpVP6mnb^^jwu?Hul;`NTR42Lg(79Weba_$+yn&-)`QBsf
z(`~cQ&Xp!_Zgp0as(L>e%kS<=MdI${AADH*BJ8tB`IjfBGP(o?^%@>{bPW}6S@d~!
z7j{{03m1Kb{}QZo(`iP2<Vzb>wzi<&>iV5U_NAoI`JJ|&EQ$Hlb+OML1{jQVS8crC
z{0{FAo#R{Q7eBqpjpCH!Md+Nd%#YSJklYLir5t|vL+=PAI_TR$;Sjxt4=o>@#dLTM
z8TK02o<kRToS7ecImLOh!&$<;Bc;A3TEx3D^zH1!O{f7SXJ+GmPI(z@)7E`nDYx%%
z_Om9%?ozRhXB{hFs`|e_n66EEQ^`@g!Le1)C0v{3p_5Qn$+-9+C-~-t`LpX5GxsZi
zwY0_TC0&hP;5c_cx0i!uUBVZHM*%D{efs;QmQB;_o$}{|9nxs8k%qza;L!X4-<MJC
zyt9k5r8Z;a$?fM6pYn6PPq}<MRBk;ar#luspS^1B<K(WZvE9<-3a^VHiMp!MM^lHU
zZjZ&)4-SeCrfM)`bdB6H$o0Eta`6L=w?hAi&1d`@b;L=9BQ`7i0pB1t7xpUc6uido
zLIZ>K{Sb-V*M0cDBxOKq)raEr($-^FGLq4h=j+bx70l=ZK{rlhZp~N8o3>*D-Z+5L
zuQos|k{>QvObD8G*<7Wdd-ycrdjk$`JSLHO&+zCmNWvw<$ZoN(*7V2O6f4J>3!529
zE20XR2K0b!u;7+NRndeow(?feSh2ryn$B3tQl(sI5M=K$H27<;+x;B=w{v<<!LhsF
z>OmJmA-V5M&MW7@BnxZBnlv0N-|Kw(@XK?yGRqb}!s*b(UQ;fc*V)R}_(z^7Z>*i7
z#Ar0N#Ji!YTCmr@9)n!<dTujZC%hBl`Fu=$@zUOhQ_DV%eU}$|I1ArfuXvvUwD;Z9
zrD?crFY<o#60dUP+H9IDZbeEKj><g<E=O%vtonRk*L=UCl-ziy0DTg-VOee*?3(zY
zBQeZKpw`_r)n;7C*Jrk7C`02u%gzU714@I)>53q&axLkXZ&ogEQl$8EG@m}e)48+W
z>H6y;epu&6U$vsu0)B8_da4;YK{|H6qXdr?d(8-cDuUNvU%g@xICXkk!>Zj0p?S~C
zsOn<nefOn4pWM2QtWT|%>c3W5mF1ZOLb#&~9t;e7or|=v-rjQ^xc(y58_(hS^~R6V
z*fO7PqIq+}f({%QpY74Ze=j5bHPuK^EFH0RZ>i<Uj|fOFL-6a}>q>1aTSSa`4cb~X
z0UUF6zIduL+sK0-|9qA<>c9zfIMeB9B<{Yf-dlc0%V6Y7XK|(1wfwEJZN=sJxU8?8
z@9$BkdRiW=h}QRSwYV>GAvg4bgfHz_PUOesZovHRAGj2%wp+Aul(r#5(ve8-Yq)<I
zbP{JqpV2%ytJKonn$2Jg=d7^ge@WGENnCOA7^zutSnC7ogFyF*pxdr<k8qmKCV7;4
zLaF^Z$d9T4<h6zPhHA}kj{=>Ro@@`akD$E)bLODAVbXkg-C3E7;afJbyJjQmtE0^y
z%1&D+t)z;X0h;Dk&PI)~<i?iV)$B(b2vtsKi>$`UpfX6G7lMloJv7%x)`0a6>EAeJ
zpEXRF1cG%N=eDSA)}I93`s@^b6y0-;vGk=pSjdO9YTlM{|6#qxi_i?>`{@0_ivn>_
zOg-(jb0n~CoOSH$^WYa(?KKofi`*~0rX2;7@?I+gNO-L!JddmX{IMPNghWs)>>~;s
z*K-16IVP$!Hh~<yDdFLD&knxTFRZF>SbxiVF!D==-Q+Qs;^BU?AAQ9VJ8FTu%dREC
ze5y*%f~wge$z64_$r)RBt6%N;^n)Hi#y{T~J*|ZFn!gu#?jh{C%x9QoitVNogIiaP
zYL#_dN!$?ptyzbokDEgss-xaYk+<uIex}#v;&Y|v6WK3~G8K!ZZyy`o<i@o!=Vrth
z+@KNeZ0=+YjAuMqd373Xr^K!nSfX+d5gKeDxKzx5#MotvdTH;TL)eR9RpKgV_F7Ia
zkM^KzDl+}Or2~@7dj(|8>P61IyyVdw<6KG&-)*_<u3H#V(_@ZMS$;1et*vYj)OWZ`
zHEFli>v4kZNm5B!pl^r4UGOg#*?gXdUX9_8vz(J%nsU$Sp2Jpaspl74Lk4X<!=sm$
zGr-@~x2a461D|yO-!8HuMLX?Wb?&J`tRqAHo$?_)BJ#$`mr>_Fig+Jc(g1iSHua~k
zhf4p*^d3|2+;K6b?X*G#9mt^rK3+)djPV=zyU+D<+%M&D*@WmDd_J+8!5L{-KZG7+
zL`fucjj6(v*$*?cbfl$UP-D<*(=2#l;XzBE!Lx(583Mkj!kZyho8BRtj%T(fj=8^y
zPLnR=B01=mx7azmK58EL0u)Sjw#%3205zw?YZ-=KpA>Q`?E*Afj$Am0EGo@2J#Xx4
zf3DokuQFVrY4_|w)kU}5=cFey4~F!GJrlxIb*|$D&!S+7?+xJ(QqK;IM}~^G+yZkk
zH(?3aedqXDj9cvbMK34)P;3+S6~rY;<)_1BBo4Jj2HaqpL3e&Urn?vDyDSxin94Ss
zAvG4s3A&nU9=M(?!j$D87k>mFAD!xOrk^>Td3;LeB*zZZ(B67{%<F@+iY(eNd(1Fb
zi|yCvURrZnuBYhD6cIg>BOK1GU<Ui>HT8V<AG^N5%?RuMv-d#S_Ye>FyefA#qje*<
zb6Zlnv*q8eer0;aGIVFHXXRGYU=Ky)OwOSiN%O;XxyPK^HKqI?@CZ2|gx<c=J2)7w
zI4-@ke6E)R<2oKeU3l#E&5C*V(l-VDS=*<RFIz3~@%3_dO!fGJSCj8}GwBEGDsYxO
zt4pt|%gNTTl6zU6#j`nVEcc?)ZO`qgz8rrkEi3d5COT7HFS184jHcBsOK@oHo`-CY
zKFjoH*873Y8hd|6ULWwJT%eGEDt_Q5#{Pp<ySmbBuVsD`CY}>_V!Gi4_xC$qp+>n6
z>>*bk>W*gfl%Y*1Gwj>8Q=VpM9L8oRsN|3ayk1F1<kQmzPJItr&^0n<xab_wg#@is
z9^EP5(yEb;Yh3uDtbFnsY;@H%iD}2nL`~G-GO2RbFE3)%H-pjc-fV|@`O%p(<3|%4
zPlU=s>TF#cB%SpzKZg6IWmuO~E()e>p5G`pR`FzmEoF{CGZbcxGb`*rJw^94O`Uw0
zrNT|p6s(_P+eDS$4RwmkEwdU&Nb0Kv+Ih9Vr$4Lfd@R4`YB|PVdfTRi{s5lPmM=xi
zj&hq@3yT_TJ~v=XQAQK2w;1XsL%-)zII5ZJY9fZ6z4%9bx#U2(;pNBG{4;Y$gR~mr
zOI#Z^hdLj0FYSCf?V3dUK$1^y$%LV^?mr0eYMqC5hXqSvZHLIOtMm+Z`0?uQ9Irt(
zKXxp-iZNLVPeZm3-)ww|DZcb7FDEj&8OCh_%+Oz9`;N0NZ>HRdRh{j<<fc%YTc+~b
zUo^vSqTpVGnamc4zpKF6w%2d;oRiPZ+sr*0PLN_v%p|!C-c77e@Z>l>Aj?3xf8E5m
zNF#X^nsEwovgM2Fmz()x*=XgbtDV*jAC-l(cG9~{Prtumhj$acY7~ijHgU+>H#rPC
zW2`mt68<Kh7XLgZ;uiCrrt(_{O&!ljy<53aigDy^C!eyqc6y@<RzyYkeP!BxGCZ&`
znJx)#&s#0?VjFRXsLB6G{R#o1uLm@z$}^yhA0WxDNFe+!^|g>~h1CG|!F9?tK4L61
zp`vG4@_n$x^|WsWpq9QOp%6a%Iiwn&`-YhwiZf1@0J2MT4@cjBY5h<pD`jC$+UMbn
zA-Io}Qo}QsT<O9UNd`H7M|{iTEsE<6a{3n24i$Qlzz~wH>bj=mVv*-C8A=L06(ee9
zo*bfePG=%2Ri7_fA{P_!r0}H#Gwb=qR~sSr#@j;|#J(mdk6sq^EN@WvtO%4W$C7rW
zzQZdOY$o<dMrLm57t5fiOxsG?fMd#_ftHqB{YhDJP-O<z%6ye1SrAZCVvU0UhB*-_
z_VHs!&FY0+0lUgh(3_Z;^en41blK+Zv|y%Ia<=?)6^My-kL;_I<8$>wF7@bLLzoX;
z5=oQYHYHMrmu`cWb<zZ7?N&fVCBQ`P@Ee5FyQW`0dIr^Id}yHUnBImHU`&cyRWD3a
zYh5W{H2F<Xn<|Cy9TQOFhU;sTm2u}(QKh=jiz$gES~zC!qi6T^?RCV5i}|vJK9HK!
zP@_wLnpbz<wUZ}$mcIoooRrPlh#_ePg8Jh28X*dADwDT@K^z!P=n>>~mF_nU>nEdv
z*xSirRNmkZ=81d#Iw~wTLoLjw^;22Nc(-R!jeEmyw;DDOe5@-q2S;7ywxHLu%Z8o;
zOznU9X!2dt{K&fx<-^w~>uxtWF|u&R@5mP}%hqGV(aYwyV^1YD`JFuU!rV-vF!2@F
zN_&AUjUhYYm1)z?Dvg)xoMxcKF-8LX8I9(<`r;Y994aMqy8G<-0qb$v1ACd+;mBS9
z#{jBPzM{LBqXd`KCQlaAP!Y`c6)Rg~PdC-|TFc8jP&so6I5+jk-O)+7uk6$*H|y<9
z=G(yyJ?+=Y7mfy22EPAg@}X48bnxt#4R=Ar)JCNFhGvRtYRk~UgAX64FLpd2=Lag1
zWV%$#(Mg<LK2&kH_`^8bGH&{sl%Y$sqKSP_p+Pc0GWonLsqD-pqqA9S1~0z%Nv^-y
zNKk*Mm8r+Sn{vOYrmk`~?nZKzSMlT2)ZmYP0++61CCcF&R>x<&SKoKKgCjQ`Zfosb
zM&78^eA;eViSc|Jl*Amg%8nO_AKY@%q|zVD_W>0Ja2l{!*_;JD(kS=m82fyA&{Cu4
z2oR8WtuoNB|7mWCPLjQcSkuDBP_MP~>BmEh=em+Y%4|Dc5wi$Rt`WD>fyuYW5)!Iv
zPR)s_g+PE>tb#rP2X%Ad08om%(T~fSx5@F8IY3;NUyOer=iPh$cb)FvExUNhvOOs&
zWH{5mJU3d=V49qkn!e6gf9u96xOv8`zMIBSYP#8_=r+<-vG;~^?5u7p0YrJ}7tRg^
zDqaT9`5YYz3O`l<a_Z7)acJ>XBhRI)9B**s^Y_Iit%XR2OM(N2PjyZ|9XP(Ee70}q
zl4es^)L4@eD4EvXF8Q=7%;ntf&eOLC+)?ADF>b2L&(P7&f0=6vGVnXeONIl`S3u6V
zL(bP$H=G1b!A6dcyW}0PLX{?N2T%3-b)P68F?{4hUKzF5p5R27q~f~OOV{PodNeLE
zPpi2_{0L5C#F*HRY#*GZbPh4)0{F@}YYuHcqe{$+N>VN#$xTW~Ep@qM&#>Tx6}vm+
zMLsmp(Qa}I;;GI=cPug`eZ)MTYF_Hw-!6UET`)LYJtm>)axhGZ27!3qWFCm2rp1LZ
zcmlnzG_VSKW-<@7-;c+Q*ENDijiEwOdEy(G_5<;kwnzO<whWw8NyQg$iT7R)x|RF^
zII{N)0`TvFk!>2V2D@>LwDVrW?qyJu`tIl3ko2N6L8p#u=Er|}e?qz{?ap`Odz8oq
zA72D_m8SBd4_0McO&%-twkeTfI*}AIDaAgJ;yJQcP`s*tcJaK27{}6%?3@-aHbn<^
zZBNuJN2;{sV_K@U@Od2nv)RVmx&^5^B+)AEGh;_8B7Gcl%O{RHOkC&ntxQiB4!W%>
zDjTsb)*1I&ohjt_^P#U^veD}@od#>V6<Gf*8tN0)pF)oL6sfY|AQ!yHvhKP#dWFib
z>81&6v#naIbbk(r>(hp5CUVZ<*5|`|@57ijzV>-+dgk8Utn+^PLHWc4TLVevOmFrv
zYnIOrK$koRrZI8<mq9_i!Wn~Nw~dEu)~<eZb;T6|&T4qa<i_Cq#rSGk7R4=Sd^SI*
zY2eJWlu)E?5M-N%o=|fXpFmyZI1$H!9DP+83x15bAs2qTLMb6uXwcGAYt()5tmNV^
zxd{;?=lcf+?s~Yk*W*5+M;|s`Kc=1=5!-R$L1mPz%Dn?oLS5vQOfCfs8W%#_cv#%=
zN@<aj9aN84EdS^#qLyds{@NT5mu5%aoy*7@KzvZK6;Q`bm?{$*1{A}0QXepD-Wm}k
zrVJ!D>fTsOE1?AB*-v7(S4&~R3-24@qp+Tk#MEpKb&H4UgusR2fk}dm0qU?V9~!8x
zNoZ(%5?=L!nXg1f_-L5Z!tF^LFO;+=ZKScATE`&Eu8s;cp~W`B@E{Se)l8${9tu!h
zh!XRySpMvZ!Y;v>>_<@-3H20ZX8WYoRRjn5%FJZw^f2>hVi&c}0EY%0$EeYQh_}WR
zkxC7!wrv96%fbyk9R=0GKX2CDg#W&Y`5ah%^Pd=EM8CyryzH%6rjkb1%#G&op&i5#
z+hLgQWF9z#UIe9ZS;<~bL_=|)AFYZJ6oqIX+6Eo3W{_P#DfphVk1bjPC9E#e>?c7n
zcVs0$bg-vQUhl|FbM&Se7KU|h_fkGHC{F>~H5gH`x*V!dxg;JIpF|RiGFEqut88V`
z%f7xPyKb7Fc{R~Zq<C~AiYmxZwT0mZ`=~>yXsim3rqHmMY1Qh~x2uO_z>S?yAp_Rx
zTSf_=!Lk!EpeEAVLGlHtFe-d>ErWPU^AV=m2OCVEBS{9ziAn-C0;ZD)$H@{@<p+Ko
zfF$@mux?syD*I~uD~{EVZk(FOfeVBbBKO`>3wm;bTH6Ro90SY|Tv}N6te8ZWK>XlN
zs@s~JNYh&|Thb0j0Q`~G*JxI0jO9mUw?StjPH;?~>TB5rYkj-d#QOF+tNkO{cGk5#
zu=Y2PrUW9C%qoQiO@ngWZ3$Y%ue)p=6!<)^Db_T`OLvwvX56K*YC4l##~uONlP0D2
zcF#lEfQhgn5Px->JiO6(+6$~U5e`eD{SrK#?<Z;bg-w>;U$-nlSg6G>v)MiKiOg-n
zDlvr206o6iB&#E1E0hGP=7uNXunOwDyU4b(6r6NZ9x+TExDKP7zxl<V|6}IR%Z(9#
zdz(J%&ng}@ySCn%sTsAib6zzeHr^92GxBC#-D|Axc)xs^kuV!*z0xfkJeyj#{@HGK
zwuG#clcE&Pw*xvsybz|;P>DL@%Va+QqfdB)<hB|{31HmN*GDB>!6_SKW2m#fX3m`j
zrLg{@({G#WuAb4Ehz@RZy2=|B93>fGH(B|#hc8NUBXL0IbQFE_(J0Xti=!GbMcgOX
z#f1Rt;_LtH(jLXza<98tOzvOb5-U^;rUNj^xu#1zOy#Bt)?JQC>Oh~^Oc;v_B|IT6
zTwTAW8Kvo?m)!|T98QWM{B{+w`sz{nYi#t(=d733c~Gb|<T60^agcW9wT6?jt*K{(
zwK=Zwg3Z#p;;wSEE@zN@IL4ewEyUwUCSWX}B?-$*J_J4C(=xioK@KIeAi01EHf6Dj
zezCkg(<m%%jg_c_WI=KBj|oihgbD1@qpv{RRLZkTwdZx69L$>qo6u(StYYe(b^6Z`
zSg_Qoqhe`yqg8mT2iGi$9fbvdwDMM#aS>nLqD(i^ckYA_J;Fbm?YyP2#5pL+byL1Y
zh;<B4yzsp=k=^qy>*$XoVO|9ds=g}r+~4S)h;<^{U<>t@hC&m!VozD)heX6(cKYC3
zvC7hftVW(f#4Sh^UeX+tvv+jRs-WTO*6%>w^dH6*$q#R+7x0LG)7&4lDr&g1HCTwS
zgjC>*EI=Rj{xwAT$mGG&CsBVK!>3wv#y7;dK+wABkXesh#~A{;xeh8$FXT6v-2(b5
zjUEu+>{4K+_&+SBpgBrw>)$mdTY?s-f79GZn?R&~Uv#V&`FBkuUeFx#dXITfxu8L7
zi@nh27UW+;*#&>})gW&U3z_ss7SQVQ5^^3ot0<UrlC-xve@2p_O0^+Yso04z<45zQ
z2MlI|fAppJ{)PUBoA+HzB~$LCf9uY*6su79*H8_QV%6O_%bu~=bQ}2qNmp<Bb05-v
zA7mZ;qc5MMgR-2qBK-GtEaiTF+7Ba#>%6y1GPKb!^IDZnA?w7z?2Ig&E3RfZ#QVX%
zJ4Xx6?hjD^+Yl(fZ_wW|Ec7vjq~J5mF}ZtUgTDg-?0xkYvIlgpat<AmNn+y>l}vMp
z<)6EKXkyx~3Opn|5fm3Z{`c;~p$`*5MZx2EyQ;r)y-EgtE?r(F|M#*y5mXmEzG7Du
zI`sFhE_i5^F;zD@_`iz%wQgmzM6G_&Xtnn5T&g^Bv9NLW*_7Qgo||%QYynaX02zof
za%XB_#|!AcT^Bx1En<Lumu1ovph}Z{7uKkNLn~}M{+y`~w&=AG9isATOP+=s3P5Zf
z1{~6SV$8IvZo8K!3Ufg#PGPb+Q@6KaKwl87bd%7y*n;v95xG4Kv)QjV^v_O(D-qiX
ztNk%76Wl5nMbL5=ztDOcyQnq{Zg<;qtjWbzz?hwDeZbg`z0Wr|;Q>12Yd9nqO^C)o
zJ3%{26OgPHQFe$Bl&7CI@(A#eG8S`<gLcLe<m*LVVx_ikW2S-Az^p7*<l>Sn18q1P
zR)$+C4`l?ppi$Rl!gS3Yr+A2c<w;ETA=~d8i<W8x5M{KHau!BJInIvg9flrG35SJk
zcQpc4LN62Qw?Rp(8xz2wK43YH8To~}qlRNy+6|!Jz}0Y|_V>4mR>UC+<|x^Lm^$9V
zD!E;}ijwlxhPgQ0MPI*(<(8)Z)@Bg2!HV9^s3uffFVT^Fcp{=|T6fKf=tou?i}>sP
zy!SGY)#fBEYn{;Sm)WSle<N?QCQCszjkcO)e^Ad%M1q=WjiK02vPe!;#158`Xh9bE
zwR!{mXBC_?@L*#?8%=8Lj_U0ZVIp{e(D<et$ZjjN@{xm6>PUGocyd>(sf7`@0}`s1
z%H5j^=i9`bBrduEdB6u72us6_e8aT6VNW(}?~(F|sK^dZPICLOT{vn%9Tg?Z+Muak
zI=1bDUEQR~5rVx?LZB}wIl>uSSYEkZ*n?mPvdENgXF@QueQfFuM!1?8b8>wjXw1>o
z9uX3G$hOlOz@ZUt+-|J8X|9gzm&J+;@4Z;gU*jJWTwf;iYmSoE4v554*o5hWY&AG3
zw8%wHP70j(Bsy{O3w5NCD^Z0XG1xCLn!gtBlpSZ~Gw(^$38zqP3}SFErqglktrK(X
z?V33DwheSf%tn3fscf%_W^i_hPdpql0SH-D?LaLr<uhVd27@<;nCu-%H&*M9A~<$Z
zVsLg`Rk+opy*}WvDs+uP_Hriu+JQZ2gLy42AT`opBLL1Gpg>M3?_h+vqF0C|Q~6~v
zG;w<zlQzYQ**h_mmu$0iUrTzs^mRCVk&`Jq0e){P)z6rWWQ9MzAQg53p1694$hOi#
znctID7pj6+alwzk>)jrPzN`Av{L2^^vmsC0(zqClL~)42!CK;Ts1n+{0ezD32yB3w
zvJL0I&5h6IzkQ+voi2w)9Yr1hot(q<G#ViH1RcH6Y_`s%>DNQ)Igx&91^kIZ4`oDD
z5ZpUG8A+_uR9^}wv%Ndo0vx1{MtV$dlNp~)6;h!KJ%pj=+6S)04k8zse<iVlK0l0K
zZJ*SScsMJ3x~4y5W?GJhX7aHYK1qTZ(a=#;EH(A=+!^HMFg&jLQw$}CR;s%Xw`BLj
zesIl6d!ws_fo%afv}y>CJs1Dn*>A4^C`^bE4!uBD$pYqY;I87<2J_4K_{C29D^hKo
z`&GZ)Ar^rvUr$;vZoIi3UL^YVdbrlx@PH*?2lb}`mD7fnX!Oqez0@I2woNORh8&pR
zWFb|O(Q34zXFHUH;6&0pEvv0{=ESUZJeyLdsS$!G8!Yy)zWThZ@SPXgN069p#=QD)
zpo9hwQO{Nli;!Z#-93@DQB6@>!g!Hz+W<)o5ioKyaFYIwGeC17p~Me#zO{H`ym2jj
zhslTy={32vX2l!sBPGllR<v9-Ji)IPHo>yz!7Ov69s;D(Y1*L)AJV~5pakV2;n~1S
zBb`fE0;*s!%j1<WZ_@3B(C`j}fbe`zxXiLZ_1VpBQ264sinb5z*kyS_ZMeZzA2kNd
zNzL(dIaSq^%F_Cen^<Zcvt_g-Oy2>yE@`*>qJ(_I3YsU08h8QXFA2M>V7uE1(5+pU
zY<U4vEv17C-H5<hD?0G^`~DM{Uvu1clGwNv&c(RMZ232-T&mY|T6|}%*pa7;FY|FC
zPhZ|KWb`>Has<)f*fcUgQ!6dJh@z1gi<*lNY_?BQr)Mcchf1EP<3!ie0=%1SL|a0u
zIEx?j4ffTHs934tT>3)N1MKHAQ&s-IuE;0i+eVA2w9hSDN%2E8{~_ACFQuhuYEPF+
zFCWeKW;Hc@Y9m@>YNH{<Az`D~FI%avyglUmWwZd!8msP+>GoeB6iA2-SH{{fPxx=6
zStk6AYBp;cIbUi5ZvU8YCeb-1E7He7fj|wfV+5SM$3%5@I7@gI4!$`=tqFhMsA~W^
z95z;@hO7;JEkX=Hh)DM`iv;vx`$Fhl$iwql-Z7$ICbA)2h@31XtYM2+L<vdE6N1$;
zmO{|bg^9*z1L2Kj;ii+sNmfR2X1+s4BZ@q8%hD}h8TmMn=WKVynI}H_S`a?l@RlUH
z*;Knu_J;ci-D9RsHL5XKSXawjrbx45cz1xSs2ico-(T%kxI#aqgFNPje%Ecs1TvMx
z;ZiSo<n`WBM1Ai;C~bK3l1E;Dn`K-KtT3|rZ<`>UTh8c4o~iq*0@Vth0AaeJ-Jisl
zLcnxW?>0FynI*|m!oKnt$>ftDB*K4NfiOY9t3~!9I2Fkglf`u5&EJ-be?l<v$Z7&o
zY2YkUIg<utE(wla%$j=WRz1Q04_u<l!ZbCu(Q2w_t%9zhSWTX*J|Wv?Q7wSsJAqAI
z8?p{x^kWpO{vt2onl=hcxd8YG383vTDC=;LFNi44cQy(6BzCl7T$rF|z6&6Gsddw9
zk-;4sJ+zQ9MOx~!HDxPCln^zk8U_}G@~^g$2$Eo+<}aW&1XkHsjVcc10<^{uY=~ZD
z4$XK>+v?QL8VgaId|WdE*hXuY>6^l?nX#=lW>vH9OmY#=(y8_qL9v=|X9}wR3(MLu
z&A6Dg!y;`?U?JnlzcTK>6-+#uSl4ujcf*d@KbF<u`uNKV>wLrOzf__)vAP6aB+svm
z8#DEja~pn%_<Pcg^{eH*ImvB=y_wn0R8F)e2b0yI2T_lACR5K~WnVKx=_1Hl585We
zU~Lx+ouTcS&^|UPvy-(J;=-+7Xetxmg#@QIoFF3dydpiYt9FdC?8pmL){DL_G~w|5
zFS7^Z(4mI>i$CamicEdg7)O#l62{XY02=*G{u2AE{8jGuc9~ld*%jiw0y<GGp+JSY
z6Eq_26HuU|<U>EjkLlG^22?*v#@7ZGG+CdsvD1o?WuhvG@WW8tU;}3|#dPu#Sz#h>
zXUd8I4Lg8}1$FpLJ|K%}KIWXN+VeR~egON|x(7X<pO<3oYa2c1edS|6PtA^{4sGzs
zq)8L?=#I6s+09?U%;>v7`Uy(-9$@hk>FZ#<J5D6!HS%Gjh^Dzt^fV6P%3BCF^3#7q
z``9lWO&FL2YLuPUAm(-MXZTZj+7Co&kFd+i`2gK?weB&KxkQEF=QVHt0?BrVnass0
zfS!ls^su_vpAXO)Ca3no{+~CGQVqew|9#^*-1^e+S3{m{Z;M<@6@11Q_2LZGU-Y98
zKS~=Aj~aXYD`WF5!WP|bQN2|9MB39y-1jYB&;nDicYRQ~u)$<2q0q-1@~<Hgm|EFG
zIqHKm>u+8gk(aO0^#JOe*FNwMwUb^=k}Diij&2xs!z`8iY!54wmNFpQe+VY=Li?)-
zkquFRO=<FLpD7jyD{$V1sD)|f-22^4fCP*hi%e2H-TsBnkDY*7aa9Y+;%O_BFNt-p
z8vUKgc7_g2|40QRUn8^IPp)?o1(A)vDQe-t#N2<nw1GGd$#lf+!7hTW$QIWf=uvrj
zsx;!ryEMl{Ci*yG9*^4{%$Lfdyp|44eApW=#C-TZet-OL4gEQj#~4y|+d-!e{pEy<
z+c8g=_H#uD{&Zi8Vpm%kev=0#Ejz5rqJumgxNLs38#!dD2I0TGH_JEr8)vj<ias|*
zuaLK5%)jMM3vnbo7g<1aE^UJV#BwSt17H;-TwP9AXJz-S4y`P39@6{*V58F!Jcy6@
znQ9S^`sjub-PwY<-E+RDzQX_N$*RDsHuT7b3R2vk+IQQ9`lVWf9M{P-)E@g+u03T(
zL=$Df%Fv@UCI2b4X*X*yQv(;GwTN&Z$&6@QB<#~_PO3chNCO|DV`mCJ4WD8Mi#7m&
zzrYe<;V$IQU@tx@4^;_z>^E+|wu-g5L*yhHgZZe6RMv?Ecr&aG)?$pcET*fLM1G+r
z6VK~;yp^TGFYJCa$<s&YWwuIWw)1DUq4%{`!UmCv{8z#}BlX7#Gs9{EChbs3Vm#e8
z(0N4;iJ5nck40vM{`=guuXLbj_{NRMj1|G#-%*zcOiipi?Bu=S)kF5b$S%<yOvWw2
z<QrN;WIj<$$ry?xBkU~<I_VP~OW*5dxpW7n5*NHSON^y@Fv|L8TdB6RQS!p4K*QmZ
zq*XQ~x9loP&DU_IKO0<`BTnc7&-9zE)oY{T;dke)D&g&JzJQeuMzEZvkg9VX9~yw_
zVpksl@qwGEDQjk&Ssx(+@Hi_6Itf<VC&4i*8CJ2lCzw%Yj&|rAds}($ZyeZ-&Vi$e
z^<I;I&wyL;8zrTXydC=}D_y&}U-|Fo250LsQF^%_vd?;LCzH^cBE-LtUT_cL>yNm2
z44T=y(k{+|_aY&HlG9jTRz>XfoXjRZ;nh5jMiKPK0CjfrcxgJx#qN}bqaUF^YEWZO
z$r*inz*VvD5y;dy#?&a$st(ZcL)5)tV<vhm)k7~4bhc3^LDTAdBT$L<CnF*-onyp|
zz6~4VNBSLiwh|@?6Ax_onZbTQqr&-AaFSWe)8%!H*g!93yHUfT2VX131HF<^XAXy%
zIg@#`CY`FqvlaIb*+taHA`Uaa_<`>G_*Xg;XMgf(KQmvTNMmFfoG2O5XumYP^fR@3
zgf7X0(fIP5GtzR+>QMM^a)a#8VqmxT_r07jx}Rap^zQx&7aF9cZbQ%6A+vq?onPp0
z-hNs?fuH5HU#Pcoq;I4{+CNk7$C;iFU1d0l3-~nwdU@`rH%XTl_P2>p;ovO8g`dZR
z#o4vd!*xln55NCDXW2EV&U*Z3jLvEbV|eJns^;8zy9j{k$bA~$^j5B?@%yhQF<9wF
zXNEaVF76dYi?FHe#x}O)bVo88?4kIG<fnHyqu(cn+V{h(CJ{Rz0lEStceW+cF&j(e
z!y05xT^*He!_1>D5O^GGMc8WiK#)8NUrb#pON(ukVoc4^&}Q4HJB}sO+xy{cp@0u?
zwr@Oo5<4nRa9$GcxjCkpfNq;;{)7yfZ+d!XiYO<ZW7%0yU4Kdh@a~L|%BmM7juGQc
zI*J^Sx0)I(D|)Kqs8#^zJNEIsC(8!}|3lx)CElDIw3Dz1V9WSg+Eblp^_{QRGZ>Ud
zOWH1IVLH)K!%(?<0)0Xk*()O6JzGoB<SrqPGQ#R<g5i9VZBv6W%{cbaDYHY-CC&0V
zDT@rScwiG;M}}+xu8^b;sx17|{L2{3jiGv@7V4$sj8<*aCajpU0V~FH&71ao#E92(
zbVP$5WmXa&Q$y#^j|*=9<8rw^;PhLW!(>C;u5?&B<+B&<5;YME8`}Q7#xtebQ<Iv(
z`c)8Ae|e0CPVZ7tRN-?~5aM@LSns0GiP7cjoYvJ(UsqEuYDR|o?f>?jT*b^a-)vvD
zPiy~m?@jvN3Vk!SX<gu+E-=&nwy)rJd32k{T`^qGOr~0Gja*7j75yJAmonAkC?@*r
zcaxsGh@y&{7>=F-i@n(wl^&01PtRmk<gY?(P87-Y{gzZqDL61d%vZ*F$iX4AQHAR=
z-$%)nCv<FOes1hbZ+g87-FNlz)*|nGu}!P*yc`<fxP2Ap>Lb%*PqcO1ZXV<)=i9xx
zq;k`41{xUE@-52COxX=D!df&_5nkl0WFNiCzOea&E-|PHmAA<MjS(*YDzEmNQ4~>J
z<z%K>(U!w$sLmV&Hj=p9ImI3hNJ2e1ibQMz!*@oZjoZdIfb3zppVUe{Xqn3$%NWPd
zs%7}7rsbaf<l2DkPt~Sw4x&yKyWnf5jw28oZ5YIv?Uh%tYsw~c(S|PjSdRL{jiO0c
zXtg0WffYJd|7{aAM9^DU2%()Iwjzz&mUktaU#-&)m9+k(yTn=oev!dyTb6@<%c}x5
z)JjsNvwrIX;Y_ws4KLdBVE8Fpsr6B<CMzfgjF?fF)8rPBO2s#FUTa6?aouh=-o|La
ztjKYy;fR))>1-lj5X0ZrhpRM$7X$vMW&^jjVEt>8*#=Amp3OwBxP2}EOFi=MTV|_e
zHAmU#txj++=HIG)^B`y+svY+z{Ie)Fp!qMU!ZD9Axh(c0upt6MCx{_ZH9T17`u@6Q
zEjZhcq%f+L)%e=T;g&ezAshY>^prv&y|AzQe8~y-z&_^Ugq&(|I`Y?^9`tlL{Dv(g
zy9gby6;h&!9>mq`sawJSTVS>(`YSGEPu&=fTi8&CWapzdHbee9VBBVn9{hi9wrXy}
z<Nl|{V6)~L{C{q?YRusV|5LLXPa8S<cU@?#qG6#88U%)TUHgSjN#T$@Q3M&K8x2c|
zc4|iHi(<aRaD*2v8`>+oOkYYt$Jj}KT@eQD>qm;LLbvWC?3V{UkPj2A5NmiP`}+2x
zp@&;{5cZ3M9`z4DSRuad2C1U@o(-w2tLob0Iv1&{&s0%HxS<8IY8Fh68dX3SFi^t3
z_THd(M&beM(_Vy2u9@1p(C&wU=*kgIwP2%(sMg;2&wB8zA$r(hzWr<THPeL9P6tSl
z8OjYjzSxdZ-~-2K1h*-+(!JYNI97`CA@4<$1YrUkMwSc+N5!wkqQGoqdIz30A4hij
z*}SM}^dh<-`BqyHlN90sC=V(T)3{7D3_AvB_L-_$QzObj`TkJ{4`Xgxtkq=S>n#>6
zD4lgI(zw-FfYxn0X*OTpK|gqP6}<`%7u{h=g~(9{5si`b+BxSiO-iI)6wIA8wMMmJ
zG>(3<=Rp4KuwTKm`l*G`Pv$TEKm^+8nGnx}$<tM-Ho-Uc`$cU4&=@`wQ;Amh1on^l
zYe$}a?_vsT&+Yy4F->rjl3*?}gny$m&;Hr|Xub5nm#xF^Xuh9V?Wz5sps{>}I4~!a
zE+Nt1?Q1B2)Ty#gqSYKj>ZECyW;TGI);;E{6K(FS_ow+^jDdi8u9nUpHpQ|U127AR
zDjG{TkQIIp;%-a}W`rN^pyN+a%@B%3%VJDBcDw(YI`p2Hh|0w{cm*v0Y&=7L3ziyF
zE&)(=#_S2o#42La-;w16TVmo5T(cx03w(}F=&(v)Y5SPf=3s0nA!*H+P!HB<;G}WW
z*nAoV*C@n;<o)(+EU104l7Ju})*_p%7x^qb5gqIlAlpq(pH^3-H>(ZU2U*GbUti1U
zUv)_1-;_wgC{Z}<Bq|QmvWn#-#1P+h;>NkmM~|T(thPd`nEiDal;#zV8{LTT)vY}Z
zCGpY;Mk(#pZ%xdKKbx2Zr((SxV;Y$3X9lfCV1Bf%7QyK%pK#+gjkVFLM$j-+0Nw<t
z25?R`fwPIrHj_ux`AJXc`)9Y~?)uPonPT7HFZ{M7J^N}pv)DhX4Q;xyYP5j?5!gd-
z*;~2*C0#=PJp3u|4j)Xka;p#KS1vHM0=`M!mM-PvrzacptfSBWPTvIN6LZt1!-OY4
zb3F-kzq@QyJpQCYt?YsL_m$R>tlM>59>ITt|6u_!7swqr^@92RMZG+&3+$%uPj5v2
z3H|>TiLHyL{@L>4^m{ga7rhJGru@m>PtBuq{Y760z8}+@y?#O2wB}iNg1PrkD1EGR
z=DL`&Ld~<Tgqz;Z{-P;@e?tGuk(iqh4Oo5F_4H=6v%=Yw)9Gwo&U#|n3jE3Y(2T;_
z)YCO=T`qbu+W!2>pP$<P3H`qu3DeG}SEIQVa-W`#Vv}&zJFR_`|4-<DI}+<TPdTH)
z&d+F{1{~cjRib9a{#(t>v$0bj=*`Wrnll70u;2tw(i2!4{Sg+FMfy+*E0&2-SO?)d
z(MpOgg(t=DZ+S^)6jBUTQ>knA|J7=u3T3RqDz9mU9Y*ndbnzfd@`huYV%F;HDI!n+
z>=$4wU`mu|M)p~n7Sa>}8tiYcqfgFt9B8-i8t0$|X|X#0yv3O(?yoE>2n+H%@{?of
zsJ5g0j^Ca%JZ(|A?|}noz2O<2u#>=us>z?dC;z7J<bREY@DnpKAxp}H(-PqwvXgvk
zB4kr%a>mK<pDq3SUW>&_fxqqxwZbuz*~AOM<~47-h5v;9U?c>Bzg53&7gky+@Y79D
zyFX@vP5cx3gOSKm!;hKZ5><o0)x7N!4q7P)(EStoW0Alr=IIjLC{-*g3n*2>69V4t
zhVeAQ7eutexkc}@<D2TP_jrLGXdEHCbJyf8nvHhGzX>z>vnTlf)jECGiWSiqJpBU9
zW1lcISpgPqV8tY?HUZm#M*^tnQL7b@e@u-%DhP<uh{ecMV7Xjb{qd@o4MIQSt=t`1
zR}+SOryxWgBmmHem>wc564}QRX-_b%ENiF9yih?@Bqug_EtCi$AEX|GabLc=bG$aG
zAM$8LG!T$OIy|mBulb({y$uB9k<O3nE@<A^F{w=&fIMIMPlP6X`M&+R{J#@{nMASR
zi#2b%gbi2j`Rk^ry&C)SC-es+;ins?c4zF%bRuu?r|P$D!qO}E{)GNuBx>IF3VW^G
z3((C_8yWjDmv|}o)1S~Ei-hXfm#IXK;K1s)EyBVp^S-(<YJWn1FcMDL?eQT3igWHg
zY5DShzR8!z1_JU)m&ZF6G>vxrYUvM|$z1u5gtT^!)Ef6gB38Hp;jc-D#>M9~{}Z8<
zKzJ_c?6~-Xrv8q8t?>XPdF4M6(%F%yHU0vLT`>!Uzaept=g({YCqiEX;qOQn$MY97
z4R_pYjlV)(t^7wq+B^KU=zd7_ieex<hr~ASHm~`g2$cuI^GH(TZVQ?QJJz-60m#dh
z|3rv79IitdVv<=wu&V<%$;06wAbsRBLs*WJ{d5{;9&r@ex!pE(1NvaTi&#P*IEn7>
z0+ag#)`&Ufl+V#XHTw8TwBX~8o(!K*Ep^w47nO)+k26@>mE+)3-kh)xwB$wr)|lW{
zJz8Y!B<tUF%)1>HXIm})J(lLwMsR~yiEa~+S&p!(&5!+FRiEhH`cYxkYD5t!T@IMs
z3ZTRxf<BJPDcnXF^w&;LYT*He==YlWdztt@=Fp7EfYXerSe>a?<e%>6XKS!WY{maD
z@1#O%0sh}LY51h~)PL7>(2iXEIeEnf0lNlcV3*Qurz8J(w86?PNDN-h9Fw!hF&JFX
zpuHtrxcWO#VT0LLR^h5SBp<J4fqB1YG#LD^p*nL+-k!{0@cRaXExW>1Q%EZQcOZ?z
zRTD@OKGYoZc28t*r=UT1>vtf<wbh>e@f<KW&EE>DGilFXVRe1^g-NK(w|~<$-hvda
znnB=rk~t=SPjhhReZ%iSh&|}wPEiABi&D611wr9S7MOnx0d7%#!LyhHU+*0p<Sc+*
z*<vjGJ*W_RYb&x4U`~0BXR!bl>}d^h{%a`49GJUzdXV!yRBubW5MWAqivJzR%>rh*
z^=}$r@t)%#XA$)FR!bqkl2VF~vG_g6gz^}#YYu#~cYH9Z0D5gpv=Hz+P$ATO>un*x
zf>MCjwE!0GnG7cVYpBB<_-;>rFzG$?=9W_-z>JcH{~ZWh2(Y45<2x*XC3}8@NkvfG
zt>1x;3>p_euWoS_!f#O?;l<5?IeWhY<>JLHfbaM82aOA%rduh6aC6G<KsUC`3gM=d
z=lFbcVBVg@pz(X???4~++y{+|pm(;u7Q!tlpYZt>z~6yPDDikVbKu)O{y}sB^!k=!
zA^dlsLa60dc_G|_QjB-A02b|857JPHE9$ifq$X!+g=5$D&O}^CHaEghkT3S^XG0^2
z%(GWsn!P;zC|&=C@*QjQx|!RdkuD)Ad|m8E4(Ti2cVoS%bz;O6>4stKi+b*>nv4`&
z{Xguzd03KPxcA#^WoEOPsSTEyrj_$ZW@csTuR%>sDND&5$PodR(#&$qOw9pFO)V!%
z98y41b40-*QBy%v1Vcpu2L$2exA(jEyU*UIbAErk?{&@}oBO)%`~G|{;Nn{FtY<xo
zXWdJEVu#B0JRmz<1Wii3jLt!uuHrzV`NLX$>C;4>$Ljg;jQZ=q!hc8n1+8vr-iH6j
z@R~(e4=^SAR-6}KF9!|121(p$Nc(7oMM#IH;cr&!q%_Bp|0c|-{unT|*6os3o?K5H
z(~@@#wj2NQkLV6NhkxgGU8_*8FK)V-_a{v6wVp2E-Gr&(-@0AXD)=MDyIt1GPwycz
zJ$UC~^7ua?SY7<2XSjowj31wH@*`^R<@%&zC;f(w8hbdVDOBn`^6mclzRKJ?in66l
z##tgf_WkkmW7Q4se9Gmr1ZRaRiO~D=L)BI96w1jm8|SP_Juit+TIJ-8p?H>cIcHVr
zdHYf%f~9vH<v`gPXP3(AN4`Bj^CUtE#i6Xs*`=!bv2Xv+;ws6;%oHq!VvHF%sV)t0
z5Y5fdB64J)o-|cK*itxW<OGDcb4U$4`4O$0qSYoxx8`{8W5ew0(>zY#-?&{xe{k$o
zpHAgngZ&9hnD)HWu>JU0H%oM$W6vMa23_dbS2EqtdkoXXXS)3fXL<kB4#8ybFWfB9
zxdYwaOkLiekp2Fj+CZ=ObQRATb_Sp3W{ocR6Nan)Q^O~^S)ua>dRWY0o)Jv(kGRN#
z!A$WvZg%LRfj-vspAh_BzgvMR!`lMeh<`@C@JBq3Po`c0f6(t$m`>nbhW!b%m^QqV
zu)X+K)Jxzz{hmMKb#S46U)FRN&l9GN&!GMZ55T1H(bS9J+?s9|<{91}vDam~jOPGT
z$EQ-SfeUK>gbCEk;QX4NVWuxn52k?s6VCENV8(bP)fQY-(>FZ*C!`_8qi83;l+<WQ
zDw`yp8_-bTbp9P&=$f@IA#JupC#=HP-i4Xhp8~$oB05f%aH=$nnToufFe!W#)tvnv
z()~xg%KiZ9HJ(QDY+<VS6zZQ)6DEg`qgt}_AU#;7EANlkhn<$J;DYJnv#2)gLdc&m
zhHAmiUG9c6O?gT%S^S?6&vS!m;nS(s?1JT9`1Bt!f4N7%4Ck4_l<`SaEA}67Rq3A^
z41h;b?bt=jeS+yVUc?`9x%Z!%6muhQ{pz~#r)C$F-^+IY3G0*ov7ze!p+!9X$M!nn
zpW4fae`sb`lt0M!N=--c%vX<uzy2dO@&2hD=lxU5=lxTA!273mbahwwOS4PLd9pn*
zObgy0u`g!2iFbeXZ1_8~>&k_)f50_^e`?{+%`PhECUsjekMnk~Zv7+X^KPu33V&;M
zO}QYc*J}EYn4i?s%6z~(w|X!<-t4mSpD>P(>LLbYm1+nd^8Y2TI7$|hr#${Vyg_>y
z+A0?%^|ek<@cdT|!n4i(gj%3g!M~i@mDR)ng$&8CsSt!B^GyCUaFV>UIqJP#w<>cl
zZ`<mo@JO>i;nh`@@Hb{xQ6KDjRi{&Uf5e_5<}IGu>b~$;GfPyS-JdYi%m!6x*H<*%
z$Mag%3I7vn^W;}|gugJeK;@FVLCim50l616jo~@1YJ{hmS)=}hhr<)itWf#n9tJaz
zXSn)DoR%zmT9vGSGP6S!NmfMt0Y&}S5oSbRsHa0tSwQ;88RLgVGaa1glx<~uomDGs
zA0fMqa)U3jo>Q)tr8uir**-@8F!~gHll4I&+;T3ewDm&v8WjXzW4)!Q{Vi14dLt=D
zWx>v@N{UxmpF|)%LiQNt2VZ8zQ{>CEok5inq2H(^*nw3_aVo<&gQ`f6B|=fKEi0R1
zSQhBas3dtI`y@hx9dR?@jGWNt?mWi7f!wkgpzy!IvMkP7u1fQ<>yNsR!8cfW6w5Me
z=k!WVFW26>55ZSiZzw1J7OFJ8T`6^?!A`6SibokyB9uRJ?WxNPwq(Up_Lr$UJ61}B
z{<`8|dsZ>UzO2OAv8w#BL?{flVP#Tu%e<WjD$BiG`y_%ZtBw*}#&RC0D))9Bs4JHU
zFDNo)3eNhKevd}G>vDrFB!W#@ma~49-{a9Ab)SN7u?i)Ei*rq-pVw$_T|uxlD~)pI
zZ=uT1dz4aF7VN^Rrudc(ON6;cqdj%`!B(t9iej0uGo(@?^w*UHJF?0tu4PzfNY&h9
ziBJ@5$I79YmcgBuE9bmM`y>L8RZj^o6F4td&3TUw)S)H9Gs?y?DQDSArAMaSu=k4>
zB!Wd*jI(T&(qq#fu#by>v2rDXm2*<1l9y>O?8D*}Rx;)I-$Ip=w<!fyx_F26h4P@R
zRU%NkVHPZzGX2W`nB*;9V!fj5EmL*2tIT<1+5^i=74yfFQW=N{17c|^sN~;9;T2)G
zST<$)Rn#A_e@i;VZ`rM<IRMKvMzsmo!BPZj`L{tk*WuNFu}=>F*)kmdv(-BMXNz|D
zPewUiX75~5>EKn?>s(NE%{x^h^gEYSIe3>*oXe`5y{jmXC4zS)<xyFWbAHuj?*z)B
zGF^!f>CnC1*<Ah6=Cb$uD<dhx7z*a^OCWFhzjt@#8Uug7_W$~3rUi>{DYu;My#7P-
zUyl!4Z#)H7w&={NqIj1LIHRlFBtoCFowsS(V&#8Kylzwo2b}8h^ADWLT}94mtnGj|
z^wq{f4U}e>3Q_rV*jXZ?Lde&k9o5&+0@d~~^xM1Y$p@6dsp87{R~m>=zI&RubD7WJ
zSZ!Bs3&=_mM~8vNX`XydWwAAXt}#tRJ)C@+RtDqWOk=B=py+UE0E#Y{6iA~wIU6}q
z(Wov?5m$qch(>jAf}y(NoD&0+i$X_d4pInD8)-unoX`&sv!<p&wv#=e1Fg%G;rt^A
zyLJm@ggzp$U4hTO-<~3Lyv?cMbT!6cgvLPbGM{bVE*mCH6G{QONqn|jd%*n%Y0-@_
zr+a(%^C6mNI%p2g*#u0bida-oP|*oELngR*S&G810p5v!S_AR~H-O?!&XqJ}t{tL$
zzDENvH(|##Q%9-e)QJpk5^;_$jv&r4lnJwY`4IT97LnZc?4pfj9cP3yq|rxj)*yTl
zu4xcvwbMD24i^rVb5$g`>vr>F2S=L^>L9!(6bqw;GIXtW^uB8qcS#7#{lHX5E)d*Y
zC8S+!4u-0O?MKoebkpf&!Y_Z(La{U_WXT(WKh<7OW?6b;fNa(fnbGz4SMm@bi<a|U
zvO^dM48!mrdt3X5*kaZRSxyoLVLarRCVU`DEl}r>-=?*5gxn!EBT54>u1)S>aM-t2
z!$kf=YbF?40jfAOoL<{Vewfh#ZUYmo`2(f66I@i<01<GU@Mf)3Ba|PRuJymm<)v%E
z`2X7+l>a7O>wlM{&(NXurY;2H(0M?*he$-EA`IaO5x=Xx@TP-Y&Zn>0zOGCBnYAGh
zP8_f#n$aE-V8{=>QxJEjCWMaue?NBt!{M7?Qrk);&uVpx7$R!H`5sz?Y`lrMsAdwv
z?F>0WCbwx#X1KyU?MFHZE+GW6!=zZ5Vyw;)%c_$*e5C#*zA)hetZpZZ5qF?-Z?GOQ
zGjCl3ehehF%T2~{PVg(jEbC7LiJY<;<Q@N`#1wTu5cFp&$YG?Nqo7`&Lf3aRA#q&H
z#QN&>S@b-z7GHQm8Mwq}m)+^)2-N*N_#2f8RljaDyQl*ye_cyc?jndgv<`%yCTi_B
zy|v)bY*!lkjxOaGrbU$HuVe@(>`|IHM1SV~{%GZ{0BmWpxOhIrN%T>u&%txTIjwZN
zHoN`B7$42B^F+NNO-MVCqx<(~=JEZmB_+Y7#YV(>lQ_RA;H??;IAag6NS9A5$)ex$
z+poO9Cr<%^!dju=tt$y|E95v?$nJEl@}z?qC?Fp(=}6xOy_xf-h%OIx5G4v-`EbrM
zUAYbL7NH`(BYGvg#RqZ7bYL6dEieU`&Y<hlfkd%7;e`0I<`f||)tVEDJB9A>=F|xj
zc_nU87izNPz=8tJUdz&t^Y4ht!fr*_MF2&T&W68{FX=IAHKd_w=+~ANchWk}^Am+M
zNB)-D8-8!H=m%=;DN|w!hhV5rG;-2Xc$n|=CZhLW&|$i$e8kRGq|fl2W|WQC-Ka(7
zaWsd{z#pP#Qs55>BkEF<X0<@2*HZMOhNon$0V#AV`Z+_D7`ngVF)RAJupaMLI+3%V
zUmRv5dLhgcz7g8+T{uMk{<n5*R}D`T(c`mI0|U&+LNLv(%Cmo%t6%D@j(WqI{Chz=
z`TU(1_v9lzwx%8Z@8tj6MtG@V@lgI4ahKDJw)2<Lj#lhQ_V{n<|3@wH#pC4}3m<uR
z;x3mLgXh1e9j)H+-_rk~mT(Q9`Tf9A8M`{z-&$@KviPMW>Ay;Lcf)`E-s_0^y869e
zwcN~q@m0xxOaG@@f*`d=Z2EeI{p>qJRz(CqvOwGT%HxWLg}eM7;_EvvzMoe~JNjkE
z|BZywgxQU6bgHkJpKz+Tt0&BBJ4IZG_&k3-4R8ja0muY3yEuvZW5EYHDufQ>rcM#q
zc?&1a135&_#c{p{dY@Siz5n8kw1Mr-PHyQmHKBW&{&un_v=215(t(YJl&_Y&(V9Z3
z@dK!*GhU~darYahgNCB-s=>9zq4ZP}BI2kVQH)JOIEiHW>KqKmk&bRBx08uLGUgY9
z1GH{#rIU$vZ6JCe2g;Y`$k7QYsJCJ_krZE<j(8(>inu0{;{!d)M$}l7MRY{UVuiWh
z6rpCnO@&i+o5Rq_VY(*YI^dMpwfJBf;TS+2VK2%QW(#q`VE*QRJwZ#RyIbkvw_@x1
zY;jg`sAYYoIIAr5-%i#vjy@gSu0`Bts8%%TI9ZvUj0vzM5ou|v98`8}3g@lK8FCwj
zlPy%_V>!!{Y$D(_;*|J`=!<YKzlcMgL=g$E5o&~!1Wht1qb}};>xa2x!E&FlS4J&=
zYu<z;|F`u2-V$AG_r(D&Anpxaa`i6>9{+2uzyuxa#==pcWn5=Q70DYpV1%j>0iu!>
zUaeafnw>fTeU}(40L-)M3vQp@cIM_=(+>x4r+rC69($;<|Hku~hY81ydZ6U3<sX0^
zo^8=clfO-AKmXAB%GRWPNkzPHzA0^DWlgkZn8^K#X02v31Yrak13EglEmF+YS`=Sq
zo=ZNw={{<F$ozH5*RO{*L3H<LHFq6p8+H6H)iB!seVzY>wpuHaslWMaRn$j~%W<ye
zPr$~>`!+3GZa=szyDbv8`T0+rq51p;Eq}AEN<Y}S+b+&otWJ8L88f@<+C~K0wY4KO
zwkkbyT6eiYH999ccKg93H`&NmQ}{*SaisbDL*kKB7oC$go6p}KI1;+5>3?!-tdZ7>
z32oQNF(*EGPCD{e-lezmrJE8@6mBuUI&v*>FYN8jTiZRo$ktlBE8n)1Xb3BWr(Mo%
z&6#Kq{F<HubaRVl9tq6>l37m4Agvv;k#gY<0d5&DI@BYNT(sGQdr63V-=Q+@WRL3S
zY!#Md5UuH(G_@9{JR)$NF^(qiW>E05?xT<EF@@wzh#B;DoH)7i#|y{w<;BhlB?K$W
zE__76z`HH#6zE2!es9saIUD|u9W|b>%)7IdyQUxII>t>$ww`gV(HU@f?9u?Qs_f?K
zazneqS-3o_U6tq1dXI<4ICZ0;id5EW<s$Bku-c$9AFl}bnc)J@90qQW)SriLw3P}~
zoVg;EW5qq@OnCIQN5_gq>w#JsC@#*m(QGRrZ)ojiArv%bgycEk<R_PjHDI~BfqU0Z
zDuNr}aaLfDEe*r-G`*4<|1gCE(vjuD-=}NTZAT|Vv|IgPcnh}iS4b-cJE9Z@O)rFa
zh1%V>!w&XAwFdA{ptK$EiJ!wFp4t9Q;rEsn5*M2p8%@pLqm`9cGkg&SYy5K;MC+C}
zE*|_SK4K!(B=4gYGiLOha`efIF|+4sxtth|&%4$8bAS(Yi@KNzqr0T72FFK|&eD>X
z9(`clSV`#hek<%*O=<yEj+}ek(xyCt<hPXqD&!t4Dp?Z^$gNP(mk8y)`EBtFQ>N5J
zn|Z_a)FRHw%$`feYZ;JV+JVUD11j*dPNNSOZ-weK5A6%R^&`xd#t5?2C4cgqk4B0v
ziqfg+UeqD4AUkfv^%&hI4baDoX=K)?Rt-#MfnQqP&^%~DHzv(64B5m!h<Cr+S{z4*
zXw2N<e+m8Gq1$_el+(JPZHqD(^q-PzO|PAw`eis^)>UN}INNtusjJCLNtw}Ogqq{?
zx)`$?!s_#;)fa(8*R9}OR;YHIeo83Y0+($WbmFU<M%p*0-#%*P#7Ax<7QM23OmNM}
z!O*2FLbv?YSCwL*MXP?un1Y}t?WxMoH;=C5sc$2zgs03{yfIX1x4W73Jt}w#mpH(h
zc4kLx%$D&?pMjpQSGe!POZ@Qd>W!>CJxkx%k+;TV=$ng-lPg&(uOAonJ+a0}c}=D7
zRCV<;Qk<^GYOlP#Z!5oaDoRV9qdiZ24~SaY;RgCf{+uMw1BJ%u8PnqX4zNcK(BxcZ
zCmasdWK8I}`ApapiZUK+FLwOUk4w~8ankW=1z~^AhK=k5#|+JU);I2atSSzvqk1{k
zr;5vdvUw|RqsvbqJ$NEt^KOVS&DUyaFv&FJL6YHIKL|a74;z$%DBCRw+y;{ndI>{1
z9$bbLA282Yhua7{Jjp+rqkNuh@pvb9`s~c%uz)e8hQ*gTR$eBt<RqcV<<@g`NvyzZ
zD^)r&PrT0tkkRF}W;>jW>KApQwZn|^Y4S$oUqO^1!%)Uu6xTIi=bYi)h;vE6F>&4$
zj?1klkg^8Q)HtB4ICdEgyZdc95+pb2HZR;j*5v%ki;!dA?F&n$SR1%jc&E<`Y`VZ9
zOnpqP#&X4IeS9n3TAZN1#EV^3p9*PSvtM?k1MS6HLNT4M8$9r+{xVT_aUk1uqKl0a
zkBWqT=<>cGq$*-eEM+Htx~Q6i_!Yd7Bt!O_A3s^9?@H4dMl{uW6xPgz^+ph}TxBz(
z?IO+$*hHk4HS8JaLPN~V0W!=_ebf+bznEKo%xr7)@#arQ-g<}bs#8z8B6G1eE7sMV
zIalAvFfC~Qa^!7mcn;T`Nj)_#sy}MZ6vZA>-AbQ5p}9F%%2_H`szlmA)_(6m)L&-M
z2*Gou7vd)YyE@oV(I<0e@`eqR;~OLYdKTsm+r?2hb^9;!Mc2sge9O(*t-oJ=IKm6H
z_SfEOx?Aq~_7e3{T8eb!U&$fAF6@F8XW!ZVJSSwS5|cL(`PaGd95toqIbG^c)Dl7d
ztJcgL0YSS?H^=nO6Wi1_mdv<rXbFS?iXet29qn4=6pq2|F<|sIbEae>D`}bg_;g+Q
zR>5YR+w;Xd)-|5Pf!(0UzxIo6H?vRtbmMe_k=^Rnk$(l>>0kWVFmQ<TxUsmvPGx6u
zxi=SIO%0y^WNf^(f5IjF;NqzMn5D&G1rFt-#f>mu6+*J1URvM5h`lQ|E8VwkwW<2~
zRq~`RSN(L_MOSIJs;_}%cGjRX`ck<LB$tK4{fg+H83UbMUBfbDP1?W~n%>e_F!yoX
zEtlF^rM;%laZ9V!MSK}I$P?<b0|e;Bp5J-*Ln<Li-t0^UO*>aJpze}XuKw(|tW|uK
z_EvmZy*hIA9>KyIvI?KCmMT@k!5q=c%rM!a<;kUecpl4=E#Oe?_8BbcrBHJg&*huV
zuQF+lzQBXZ^Ya^n*LX~{c%9+KyOL^27qEui*-{ISUPEPmv5sgTzRul+Jum5ENiTlu
z1_5^+@*FVxF1Gjycq=%X(9{L`iW}#}|E0ZQIhkbDsOU9!e75nF&}v-w8tIWzqJyzB
z_2AEzZtWM!%Fx!9pW6s77a#a5SPvNFB;4YjJEIIo0Fw2U(ih5A-z{%~qI$WXkZW(J
zUai`G_s?5qXfsltAU`ZWG*u;L<b`Y}7k=a46@OZqm)2h0(~{09{DivP7lb{FglKm@
zD1>x?(_YimbDf@mh^Se<&)QTQDvEtLqGev|McTn^_a7}V)d}XStbNagC%1J~r3XR{
z$dJ~sItKT_Gc!rSsptVm4&lXut`?y%{Ag!1>^oe4qAO&#)`9Vy3)UN`+d@x<*5B!J
z50@MMa>C^9#pOM#Y4eXhnOS?e6ffW8-sy-cFwnS#xh^`tLZoX9APnQ_1{wnoYQvp&
z!Z**V&)>=QJb_gAaw-s?77#KM`=2-xt$%3m79GNVZdudExq8b{IG{7^H@tac)wj=6
zXy<bmp9~CRWR`rQ$PWeBo>INusvbP;Y_1KJYh!lH-=;u!|A0=YS7ia$pvld1EIXIx
zN%eX0W%Jwt<9d6lo=Htl)+fkGYQ_`Hq(={4kv%(w-`KK~9P+Ng77sBJIMBddY-4i0
zK8oGto^FPv&pBYEmXwTZ(-Xs2XH&4W2+xU?jcCN!=z49FQ{p3?Q80nxZlmYo`!HD|
z`HO{N(BWr@OQSa!R`-QW(Lq|`xc^~_ztHZR;d-`;qAJw?Ch01>UyTodMmW!UnMO>p
z<p)5aArv1{FPwx4{7m8_X5?xa;c{y*)fGqsV>3w3zwWz$HU^w(_P}7>6CGz7?cpLV
z0i;U_n9qk$-3G))XAmy|i(Et~(@q!B8@_QsL5KDf+N3o46wxF=>=oHyp?lGY60trQ
z%*WBgSCiP0ghy-EXo9~m3sAElXk7%fMm{-fpS`Uy_o%tSh~`#C$MMxzmibEg33G!Q
z7B;{6>5(wI<|ElwRD8f(*N(>J;Qhu?^J|OW3yx&#n{5Srw#$}nlx+-e3$CYZxNH_G
ztF^U}uO8Rq?zn3S0a@8SxH&fVab5xQXtvzDGkZ1*HxzyEI&$|c>Rax6T;y5l-#7lU
zH4oqJCes+5Ef?U{20hA%KDl|^%369vDSvU{$}{o=%*5>O7}r2CX+p56v@u{ii~AwR
zZfYwT6$Dg4fBSMJxFP@8@3{HgwoT7KyYZ+)s)f=@CaEf8X2BQcm(&j0ac8_D%#a#m
z0@vM|rwJd0d7QX$*Bzec-ZhK1H<CYW83(~PkN<)lXf4?!whnc8!#FXTo>z7|`_54l
zt!DB~NKT*gwQ#TOwUgV@rz|pBFUcJx#B(do5;<Qr5<Q@T!+vDTZ3pR-=@Zt5@90de
zBu6NWh(#Y^K<|(zT#}Ra_Y<C^KN06KwCd24m_6~=c=o?+P6$u?9>9Ivgx=$q+Vv^G
z|Nc~J*7lLpeU2GR9R?11eI1`qXPJA19p7-@@mS~i4a-}(31b$U2**}-Jp*srxjQUj
z%=|g@c0<W_P5X{*f#^u^exu@d@co$b#^uwVH=?Ibn|yQ!lyGu?r$kN_<4PV=?7QBd
zMi*z=+jC1gVv3i_ifbKo2Ofu&d+HYtu^tOQd7?^sfC-|<{^Er6M{p+qVW6>p`lGE?
zuu(C$Xp67z56ZW)Ei;)p{Q-*Y=~vwP9bB@&!9RZFV#<|*{mU6RCFJ5_F`2gItNxf*
zl%`lANN?=^#t5D7Uyi!U+}FK5{F-uV`NmxSJ^egPvRi_e@3ER~z^q2^SZi%iS7&}k
z-PBio@TyqeK)<yQ{QZgaK*aGEE)C!WZ*Q~ebNPCoheJiMTJhy!tVn;Qe<vy=qzDfs
z+)q?op)}y~y0FKSj2G&)&mb3>7l~PqCHwPKXP28{UqLQGv}f+i(F*9MtMFphwh~n|
zym)$ZzFa;23F`!5pkLe~Akk`~@C(0Z>-4j!VYB%V;K=IFxcaY%_j4Ns-AT(4(k}!H
zc$C>1oi|WK_$hk4IvgXKmtyKZEnGjPv#w>`$d)$cM{-*_<WGT)$V9E2ZJUv5SAIx|
z3e~$py@xrd0r|||@xu7siv~_isNQ$ubKe*Ls<N2n{AFx-8<qPc=I58(uQJWhgI!He
z6t=(*CMa{DUs>bSq}|k>-JHw64foXCn9_}f<Ucw*J9_X8sFK_BHQwL!viRK6e7^BG
z{|?;Lq3cedvNyV=L*BaY4x4ue-@1S}oSj4u_mMK2YHqCzk7TGWk-$CkszPP3Y%5Wb
zjdeHi6KTi@To2`}14VM}7BWsj@^bcit;A1}nXB=0WM0l>V8tQAjiwa#UAW#*{7II!
zd{H}<*j_JH$Q0K)h3^Cvi-7aX(kS36b>&TqSLpR9W0@8mT+u@KA=kc6SRFpcb~uOz
z=<By@^?orTzuGxQ+_9|9S_9-RU*~JjvNWKW8IlIfvni*GJ+#s})$9YClGM1F>-r)H
ze3J1XY3d`&0unFZJeY7$JAMIq(86Lz=|OH%gWBaJ$%*SpY{Sts{V!oJqvfQv4!CLH
z?u16z#XNxSE`gLTpQDJr_bOUJ4k!5IUTTYLe^2$A$&qX8(Tv~PjtMmCIP?jlN1u#=
z=5%p=>PPS1QziUjI2s^)#r4%7U|;nvR5VZPJL0IObhz>vo~A}6Sh_3dD0N|_nWc<I
z;6w|&?-K`Py?3w0F@ewfj%6PhuiRQ>xvEuhJZ|#DyjFuqrS0n3q)m6Wk@n78f75E%
zae(O5ncj?Z*)aeX&fly{FLrs%PUD2ADMbv#r1#Wx3M#LU28ha^VtYp%ewL)pI~KdP
z6H}+^_r#=5)pbzI1Mt5|RfeSwgiK2RRAnZk1X_`)`f5olIp>l=1UF{yxJu*I+gTq&
zWOjOYPAZs{7U;ebsqn8Fs5IPRz>uuq-vgh3MG>a;tVI_z4Yo#M)wq=tWE)vs_oC!|
z&PK_2RyM#hd~Dl;PL^0Zq?c+sxmI8jaD#1e33K|5Lt9&Ed&d)=+#Hi!>pV-j2#$5V
z{>4#kD#JbJU)>5gFEB+ZYtomq(>Jo_D(NJ=W}8DX_cl%O)6%j241!(bCs@Jn)ZZpH
zXdTSeCRG`f&Oxswjjm;v%#05WSGnTAL!@cmhl#i4jz+fA1_hD?_&<|e(2E>-nCD>g
z4v{AlnY-*+?>EKptj(hPor^iM^e7HF;(owoX7T{Gx_NG8_!Q0_U1s3h?4@q&;{P+Y
zPtUkc2JIW_@hi1G>be<-W0*n~C2j}(EYT3W^H9dj*r(w;&XYCPFrC^&vxh@c2w-##
zk(Njcq53eoLZ~y{keGU7Xl0*C$S>|0U)rx_BvnM+&aPO-hRwBj>$_o1X~z+=Yj7ql
zimbE(U#X0-gHO)XrbI2f;g)~l<=A-6Qpa#ytDDKvuP=7wa1&}#2<qqBR3$BY2}`O*
z58*ni^M`P4Q~uS<y2FBZv*Df96GPM_WgHyP9k8xw<NQu0;(~bNs`3x<dy!~KT3Lr2
z1yh`CH(!-)F#XQ92vWQmc%|#8ZcP7Shrok`CeF?#(lg{n;~0S9=YV_kZygQBR^f@b
z!x*!?rI$aC^OSOzx8kjsix7{Mt+?Zy#Bavi*&kW?<%poQ<1@-$g553WL;|dKSbR<E
z4CNd=sFOS42_NxE%9{1ZnA)~V94TfZ%%CA=uh6)Guy;xL9B+J|Z99nFyEON~Oynnn
z`Y^5{qk2F4X5h6hHQk~gE5>?Z|C(i2loZW0s$o}Cpu$T;yUM@aiuk$M>ub??PRp`R
zebMX>FXQ0Mnj-p|j~}3KNxL2}0dHAzS|xQX*Z8lL3NajV2Y^V#c>3>LG8`m)6K!77
znnU;_sB6%J3@=eCK`z_%v#eY{@HXPcn&qNg7v~LwFodFY^7RGWta`$@e@09?G&Dm*
zG;o#dnvGG<;Ts!=Ng^a?+CLiY2n|ZLlDPdOLYSL&zPHZZ{P9CF1CLe|V`%>W=2&OZ
zO}L$0*<i%{imZ~jVFC~;RE-DR7jBz)QM&>+4Quin{p=$0lcl|d-<q?j)$f`pgpTMW
zxp?}=Rl8J<HclV#t$BpC<RVr$>Fg+iKW-K~Ud<Y=SMVD~4F^$MruA&aAH`N{fZyV0
z0`jLLj(<7n?00Q0IO53ET=+0=G6`+tc0W1iTDmLa*PYkuGbS@8Bi0(bvMdw79-8b(
zwThPx7`4A}eZO_&-P-Y~7g;W@e!+hy@EQ;#eedF>%GZb*Ar`V-I9D$}S*LpQyW|qn
zG3R$)RkwbU(sD7@ku2ch>`37ObHgV{lKHv2%M(ukLIHggaiRO2Tsm%bs`-SLCe*(@
z&f4t|w|C{+gS@<_%j<AbW2Woa>qBK5;k&3&H#Sf#zM5SUSX2U@Th)i<Rem!B8uvI}
z-(}K~uCerrYhE6+F_+x5YO;ehuIc{rJpd3dJj-cnOX40+iM+dcMD7W2-R1QMH^)i4
z?VGf0Sid3tV$lA)l3lLROxW$N{KrboYd1!eo7T>)DJ{?Vy8&+4e2X|{)@J_>70q{g
zH`S;kSIEEmGgh)^R_RO3F;c97`mfThoyX3iBKiAf?K1lMLIE;_M{Y;aA8~n{*beoR
z=!3M_42yI4xbeH!+3qla1z8&hr|dvA*M5yS(V71o`u1$no{;kANOgbHHv2sxSASaf
zy6vfX6JY(zK@wnTk-+T{YKsMnr^>9nOs^GfcT1bPC2yAc%ymnM{Gi9Z^k=S=(vD1f
zC(LOgqarj_w}jF8+YkfutCS3gqwdn3W0e{)0XeDMQj-ymP>U><I54_n;)WZV14|t!
z!MV{Fi!WGh#-C=|o1?eG?7Lae5fsDG@|{*2^jWoBsNh((oGJQY(dnk7vEb*(S5I9m
z$)`yr^Y4op_Omza*|xg1{hjkCa&SS6TWiE}pdQ+BWjR*pD48wlEanz(LFzI;<w9&2
zx_p-ug0BBZwVIO%?@TWn?XqnpX&IFBea>gSdz`J^&bSTaVbZd%L|n?W|G>RccWm*c
zPSO>_<f+|WO370<T-<yQJ?^v50$1JdFD%ldJ??XKA^+t3p3hH=2%h}WP_nbsh{Q5L
zPvFYAb*uf&c+I(B`j6&MlHiY4M{BxC0;4ns10(%5Ecu^FpFI$@8amL5HKR(#muSau
zn)PDWr}ZQm-s2-h>+5A!DC-<H)*X81zfs%orJcoHg-m}7ZNEn?GX0kq3_Hv$7fd^_
z${vX~JP*)Elg<~NqN(2S+~=W}fZLl8yL~WW-sd^!xQW8}&_Qxbs9sC%xtxRrpLoy%
zkzPywIfMeYU|YG(%J6f7&AeA6c&|ur9DIwM+56*1y-pRVYsOBSeNUUV`(Khv+VG$8
zFFbX0@^j^7y1X7GItD_!7QnWMK*KJ7@XnHG?g5gE0eBo2jeOLQejv=NJv|NQ?PYtW
z>r;VKrA}O$PIWIfHPZoBBMH>9vFga-Sk<ynPVrh;zhLP!75#hh5Wb9F*@D)MC|mHh
zu~u;Y`OSMHI^pNQC}FPt4DBbU?2OiMhPko!qgFu(4%}K35-|J;ob&)*H47c4hW+H0
z;Ol4ms|F@y?toWzGA{t7suZ8Z>7gIh<%ic?79_q5QR>Qil%3yydE#(FppGzcCFpt2
zjif|g$cLKactx-2E7n%dMwvj>cgQExD(JnMl5i<dm4Tcw2OUIq)oahWGN*r)#?|R}
zE!hM{q%4ESc?Xoh(`$M(+SKB(K~VFT68zj_z0uBstW`hHUYjJpfVxk!TUd$$?oJ!_
z*z!(99d=F=ZQMEc8w;m2<t)ChkwU@dnXaa^RBm}D#2=mxU=I<NL;L$g%R1bgrQGzj
z*=U58(&C!|>DJ}`dh)<Bw8zB{%$;tEF`J@DG0e^i<}1*k@Gdl3AiFaE474`m1`w_;
zU{H`k8WO}?>>~gY*TxrP`hc#8l{Nm^byJegtWA-*c5u^!U29R(N;82k$wzZ!bAz{%
zEV}NW0>5aGZ;853t&&|7@1j0gX<ATxHoO&dd@M-^n@sIW=3HL5_x5Mc)Y(Jqo}7eS
zNc{4>9W=8@elkP3R>|9{h4Z9zR32nDv0|K<nAFACdl>M{(2cO*X-3UH`HsH{tJ5%|
zI(EL{?#VXs+kw4&lODJ5En;m{3NzzF>qE2aEuih$Y9?757=d8`{S>l4>al9!FOyVR
zAd?^MD%`Ln_k{3a+&U-hYLgDRXaSxHc~G}HU1_&WCC!Juz{v-7zW3jvseP~OwXua*
zzMkwkIFUgmW*BsR4=;4;d;_o+Y49=3cQPP7Tg-h@L-5Y>z)tlR?m^vi0g@p%9bW1h
z8?0#Ma=6og`x4{g|Fx?Cq?uhi$5?<U0j8$U*{y}GPGwDmg>w6~K1TtEGSHI<$!%?g
zUb&gkyjJ750aYse>lL!4j@J2fOVWX!xA#DM9$o1+en#5lra9H*elU(t7*smb;PJ}U
z**(H~rG8&}fhX?A+Rd-T(27oz^abw>MYr<h04zRxi7s^68MwJ~|5?Xxcb{>u2_1h`
z_xhDS|FXU1G}pzW$RUG!+OTA{{qbGL5~o?S8#c$vU-49WYg^V1QPB+#Wa7b0!Haa-
zH(|?~^E>Zp*Alk#LGLcD_V7K*DJz+mhK-yl3lWNIteIArwu>DRw#?#xQCgPy3V!-!
zJ^G=UYF}FE$qed4m_AHPua3qvesDZ~ANxYAscr6w%`GP*d?LTRO0y9Tes8*+Q<&*k
zjK8iMqZ8hTqj?4NKC#xH2s$`@wwFCJ{Ax$|`Oq|T@C!lLS8z)(#&qO5`v9!wUEcwQ
z%LusnfjXf2SN;BFU*S+8TQA4ADOe%?`n!y;px!sH;Axo};TT@~uLo%iCj-wR>@2Ce
zuikYngj~b=(j=Psc3%o<e1G-_xTu!>gY5#M)rlyj^%H!EP^2`c`7>kzQX?ECEqxm~
z4n{-S^k%a|OBn+ZIWrJEs(x)1)I?0n@|CLaCoUy=WRYc8#P7xHL#1XG%~4X}N^cNt
zSjaoFVR_)Ba*y~FEwMw~qqO#sd~PHWo^IP69KaQ?v#7>KuUo%voiusf?7Cg+GS+Qb
zw_)91>+Y?CtXn5J%GRyhxNd!D_N=2Fc%)@N%4VO_n+cr@eaB{x9%QN<b$;xa_Unhy
zz6w{V4V#8PCv4j6{2nu@Vc7k;sdGoVldJS5CaA4-TO<{(9;*avciakN!ND)EcZsoi
zg)w;_<=o5ys5F`Y-@5<7Oq6-^77d}`kVp#pjWVX$2L3!eL%tD_a$-j7hT8-7PNTJ&
z!SS)tQ)moohms}#fP#$MC1?~Lu=3!o{t&*w@dnj7Fp9+RT@tN=^MrbW=2donSWGzH
zERJJ5lU@_CIb#P!@2D`nM)I<6dU~Qmbp1iHzGydHe~7JDAICW~k%bhwlnw^na04m(
zh|YA>3@Yo1<>@kdKUaO<>N`~}7M%k7hGF~pxUS29HTYYarxbhi6$jan&R#R>V1I5x
zg>$=q1eS0bxyYb&<@lC~qhX2*?b!mpcD`lm0%q#&S7{ORV*AX+g0Q0b`g#I^R_*(X
zp{sV{liD%_S`yZPvR0kF?kW88$pmriT6+!ox&H7rz^zZEhY#!8pFFc1J*j0&Ug>jo
zFgHFuvtU;c+;KZBJ6>+R>tp*_*I#dK<GYqoW@f{iQDdvmdgK9%7fX0Yo(YqV@-Yug
z<bT~TFl^~a1eyU3E1k@rJYr~6r+;}r6*JekMQdwY&lBFl6JF0bwtZQ{<L%Q%rv<5J
zCvO^Reyur{Qt+8Eavl9#yY}~({ouCYl<RMW9_l`xy^;C-8z)l7?S9nun4OvQk*99E
z(0h7^EAi8n6R6mm(}v^^x1gI{|FVB%ek-k8=2XZfO}d=hMTA>mgxsrzjL)`}O|QOP
zz6@MCZ+(#rRXZwEuNdZ&Z+*(Kc7qY*_xfWe6l3CV-KSUfydJ%@?$GN}?F-pIFPwJU
zW^%<wcXJrNIKa)tqm*+m45dzXy?=<An^G}}((l+fu};|0KUT#V#+`Y3FG2c*&Gjua
zFOKm)EZ|NMuh%-qLAP$t3AEpqAak2q=Inhx@YKL3>FGV9J!4m^p4b+=2fEx+kY4*Z
zq7*aeRv^Q)nA4{JxJ2C9Q&?VLvw4rHqxMyDCC}~Wr!NK42{#)#7YBQ9bGr|m3A}W2
zTs24IaAKO{iO>ceWEv-IDA>2tP^;N+OdWK3<KecgFP}!v>lonn&+Souz4foB*;jG;
zHf~2+GS=IrE`&X<)I0NG(;2VQ6Rq>e%{ti{{oR=_w!Xcp^)}?Y*z%R;kL%-`QP)0w
z$$!70QZxLERH(Y*S%2ywgDC5i)s}0Q4thUx$G=;5$?QVZ{;U@JUUNHJ^}N%X6;1d%
z+6zkFU1j@}CO5Z29+m%9^17}?ryTXg)x9)hz3g1#<$PIaIU{(z$FG!Y_HSzTq!&wD
zlswWhI2N|K&F~SR`}@MVpBr`-$M$XNBr7CaUl4CiRBH62+*|#v7IV@0ldc=!%V2OP
zhc~nhEq&{%UBhSj=jVJ+?@amDyrb^u>zG@g8=d<$OoxpcZ3({RhF^z<Dc|*)2h3Ay
zS6`bxe9`Yi(zvAo+RTl|D5h1oepULsTcHVbu;6&8-g?)a&VfriG<5fty33mwK9Dhv
zF>ciyo7)|xesX*hT8)2+rsO^f63lx|r@StzW2mk7ZMxR|ZHM#crF-o|f%8*i1P^Tv
zap*yJiDWQ&&!zDesrsnwdh(7d+dQIsPB3d9_5Zbx*VL}<jK5d(zJ2Ic+ooVay`$+&
zLyBGd&xSyYx(6?HB5a~}&g|+xlw;U!E-mA@(Js&cvHb?=eaCB1+v@tG&!9Pt_;vF6
z%1>>-i4Be+w%i11-@UWwn<!^$?5VXLZ_#b60@%hkjwG8JuyOP1?gVFFfL#5{bI)0=
zytUn?h;Vdpylw)s&aH+($n;3tUTQFMe_7-1m-G{N&wNfwVP|2qYrixH`v5shn{tjB
z8wTYTm}tLD>2;EmR$qF4Ho)l_sPlVD+NOF!In0W3|JaYb$CK=Rwl{w*zCCuF^~6&<
z^GG)5G$}GKQM2g%`q}fO%gmXN=>-pgPs`)E+@=|}rd|u^wz22v#U$0|uJaX{>1*cL
z4**8C`xc!i8+qJ8w}<j|aVz`%r)<6IO~+N+_3mZgEPVN3<AL?qZRd7B*z{2G%YlMS
znCdHXY-Ob7wZo{(B3Q>U)o^QM_4n7i_+}o{?cntwn{10qSN1^6VnDIK?nOW2-vKKI
zHZzC6V~_cL_Iw8Zh}aN;`HHnrU2w7(sFu?{9{;#Fr2gioSM064nBb7TA0NFTXjK<#
za0gvy7B}}JyKiq=`tX6y)JYKSR=3zXY@mFHtAu>HqEXPfpgCriFWmp5u$_I{O5t;<
zT9VHBUHJPp+D2?%H)Ze5wCdE&J4QM#sl~p^vh7xz(gS83;3aDrq;zY};}7~RP#TRo
z-dV>K9*19bndOvvzXUONKxoiO^oQS=wiu5OpLf@(9;+XyL-y|3Gr*4VJN|s<m5Zgu
zR-(zuz70wKt<l-1Gi7a0J?_9JoQhWSdVg}5IM^c7$9R#i_Sa{94NGUg_wlPLACH&U
zh_xU+Wjv@8{{4u`Vo6rdSV02P5)4nKovwI1WMOBx8T({l7e&Ut*Z(UkF3x$wiu|2P
z$2)zCgWWsqACCX3E{3^O2`oddWGo7BBg?M9z>ZBU8L}380ZA1UbM1E>TilQ!{tox4
zsd*q1yg`+zc{>s%tLA6}{&Fk?)A#A4{+r@AalqpHte}h%Dtq(5@VxzGc3huw^|qgh
za{e2Y&$j%=s?7)wYiyoHe_P9cw0KtJM>+R9xY{J-!wH|oU!uLg|9ZE$lXxri0df~&
z`>*u)VZUH+O(;%i(>!6k9*r?jaQ`A(bk1R5K*#U1$y}>4mt_#D|NTvtcmr;lCZ(S=
zFD3+w6hsuhzJ_?S7SQyR<o+$+u+8sA^td&?$tP4jJU#F9{nTX74*6bFD;OzEpL}x{
zUTZCzd0zY9AGiW=!J3+lV2x|iQ|i+de^2L7S3G&)FoR7y%s>yyvxUmyNYLTd#lyce
z#`iGpfUbhnK#`bAZU!da8tH+gXVYD$O2+~~mY@?L4@S77fv##$xN1ORV0o}RLtWMX
zX3?B*?qPXQfTLkFCKgkS$;8z4O>ZI9+D_lLB^Wm<PLn1{Go`bnU!>n*bEOlcsrUd8
zgz<zC#0X%7%mp+28NrM|21M?OT##IVT!@^%T(DfA93=fodQf^mdPur|dT@GRI>hnG
zT%co+V}N4_CD@w;^J88nt@_R2ew`$3@%!z=q#$KSI)~bZ2D^|p+1zYawha=E?8-hz
znj$ItjhFvAJXQYNXS{r>e6D=Fe7c;jH?p&4I>gAOt^kvYslp^+$}q^lw7_bYT5l}t
zYyL>^=;FxYsLY7WXwTf`xt6(;bA@xBa|a=T5NU`tL>=M{QGmEWj3IDHDK<*-M|F1o
zh(D=hE|g&ki5#BAP1y#i)~1XqF=QZCj583`ngQf5+{BV0xNeO!Ov29HhJYa76oX<$
z?nC4tnb;C+78Z+*!4_fDu{GEvEE<c#65vna@8PfEpW!dzAK~xdU*XRKU%)@W-@+^5
z@$gc3HXH|!gy+HEz$@Uf@M3r-ybk^XUI<TvSHlzG<?tMMJ^UFw7oH6N0)GYn1kZri
z!lU5@@KkseJON$?N5b*&D0n_R1&)Eo!Asy-a4b9qUIb5v*T9qDXgCT^5IhyU7rYjH
z7Q7UE6uc9B6+9Pw5WE#s3gQK&f@}d!5GlwLyb)9gVg<#5OhKLCg`iN7W`S%TsX=BS
zqqCim>e*RHmuv-OR<;x}CL4={XA`rD$f4{nq#{x#NrSXVlCg~md?`rWYj8YUH@hl(
z7O9w>OcIgSNDZW1+otJ&w@rtqHRcYF*Ru}K9iFad93C5?*RvzWwlXd-jx1X+9xfkW
zez3eZ28*gg)uOP#ufRHBEf7olN~@#Q(y)N9fI2`e0898vs3X*h0}&AM6LF9@K)iIA
zyl9eSfH4j<2s8>b3^e8%a1EtHe>_lHe$IgR-f|mDn7<6uhHAqxp%@qjih&1)2EqcN
zfpBgp7siEh;nD^Wm^4gUvI8m2fM!%<6lc(CkZvGt9A~6zplYOQC<l{<OElvmBao4t
zVUcl>VGT4676*-kTZdZ1tfAI$Vki+tgc9NEq3SSos5)F%i+4<GX^+<8Z?`GB+j!Zp
zvfpJ>WpicYWz%JJUEEIebTF*I5$X+Rh34ae@r$@cybMkT-$T7jZK0l|7E(Q_2f=}0
zX|Od|9qbKO0K0&V!EkVCP1FEAf!hM#i}RC|^k~nTSqwFX8AI{ZeP}Xkxe#Uy-$;G0
zKPdyphW6oH@uRp=yeZBUkH_Kh;ka=88g3205w{T^g^R*l;4JV>xF-B@+;Mz9E+78@
z_W(bEo51hI?Zv0yQt-EMxA1+qKD;(g8;`+Z@PW8MJQv5sOXH;Rakx0VHO?AO#1Zk5
z)rI&HTnXMA=Z$CKSa=1T0zM0ug?GWZ;D>R;cw?L~9*e``B|mb!<cEfr!b#y{a4~o*
zoE5$m*NRugsp5;W<M2gz5DtWA;23y0oE$zKmyUPDIpPO!19*L$KE4K5gNNWC_+{KO
zUKS^dPr@bP?QnK@GLDSb!fD~rI5ZxN1LN5^HeMO0j7Q;6cpwglr{Tm<0vr*FfFYoW
zy)j?EAAkN=<5tzkl}mdpH=K`*SJ6(+XxDh?a9$w;*=atd5|~`uZt~FWymAIg<H7+I
z>E!74V-Igs9CXUoFi%slPA-t#LhDp<*eR#<f`f{Ba_ZHD=PJj}UA=Pcx5{xtwYJj_
z?JEvBAxq6ED&EOkrjOY4UcGiRxvJgh;XbGIQY(t8!fToKM-{t=-uYbAJCT)q?qOiX
z=Akz}menVRU;DO)JcOT5o4HWeW^g{|`jOFx$1*OROi`*hKJ<$BM(slqFXhui(D@5n
z+IPvH#J=`==vbjJB$?`3Qh_Jq+sz&VE0l*&hcE0@kxGtgKRWqWz(K?8!{&)9R>}G8
z=O*t295&3!zF@1Onw-+EHhDYXkRdYLoTLIu#<Uww-VIPPMBTlhsUnvg*M4I1W`KNc
z_FeOG702X~cHK$m0L9vzkqdq*`pH@CXC@s26l#$p=5s2LWNf?Xq+5V;Ez0DAl8S6{
zO#AW48=QmCY!mYw6}#l3cI`<g&S7W{?t+_&R&si~`lLPQ5EO|sr>cOHYub$`T{%in
zRM-VG73JilcGbyS9C?1Wq)3YjFd5yhKk33z<mU)4M5q9gQSDljjvNKPG9M{47pWkU
z37;%nf8V&M=JEEHdHCs1dFvI;t$H(<ok0hT)R74!TgLmq-dg5Jkdl!WGKpj-_g=a;
zn%Nk%yY7^0yrymXd+Xi;W^a&uorY_ork&$^_1;uwN9ARULp|?K>J$WL_GBLj+Fy6t
zHKE*g;JtTm)uX78?vt}0PLwf!1}PfFmRk?xv-)J1FM@PNU;16w&&}%XVjiqB9F6q5
zT9fC}=gX`PGOjaKw1&KQ4LYo7r`qjjlx&-q;+4de9!;LR1fSmb(@HRXyG~p2eN@oP
zoqeuMojUc=ggM*g_wZgklNzL4r!|^1XD9n!syB++z}p2oWg4$!oAlnQH=o(VI|$P-
zO;ob8d#~D?!ffa5gPk@_$gw5A2lZl@L%hQ<P1B?tJFWL}y>ZND-X2Nat9UnC^n1tN
z5@x@okkT1Rr6M~?d7<7cW|yRpkGiD#j;*8uPA`@@DycQ2B`FYNC#k^F8^dgp)X_K<
z-YGxZ$?9aUkT#Q+NwOpe$&QpnB9r)}CQ0>*O_C}SmZ(BWHHYayNs)yO;mP%vfQ9I8
z$7yd~@amTElzK~AA-fwg4d;cgu3vi{aS2d}>b9E(@d8&juf2(|BoxxR!P5{Pe0Aem
zvgi_`kkAdB2J;X+$g0#@ipWyzxic`Mb!&e7InpL>#>3dnKARNUJ>9i2PJ^XBdV0oL
zQC;m*?tvKSAkN2358(3jOxpo>X^iDyp3k{z1DD7%?P>1T7>~gUAH!-BmuF>d4({rh
zL()#)-P1n5?RRPkaQJLLSnQ))ZR8SF)=qJkp)_Qcrlgj-dt-tJPgQHWB$bi%?kQCC
z_#Cf3H~ieUL+`<Z!6_f<>J!7UzFpP#hbv|WmwYsap9O#M_c6)(RyTA>@0E?GsgG6l
zUY5tLJIXB3ts#=nQ<;jRdYvKn`v%K>^s9}Bqh{Ne+~Jt;!FnG+HNg0(V%tu4DU8Kn
z?#$T`1LH`=_C$9p%!9!%GX^0h#?O##w(hE!TZ5lwbV7`bqmb<+cMv9Uuy)2I#0>k?
zwN2Aq4r4u7Fmpb{5F6>*UheLQ@gA(2F$yuoJ{xWGbJxeX43^F4g&1R_M%(AyAsF}|
ze#R^W0Do%QrsOV*u^P;uIk#j0k2G!1aks;O1~D^+OD6DV_%=6pEsWz}$&Buj5j+at
zPIU)kAcNQ$(<L*()9^MkcV&#-V9|{BlA$0nyuIEXhyf4Q%os133ZAXCMYsbnz(Mqk
z{t{rxSP-?=E^<e3)6^PGZ4K!0ftp{*Cmc=2j;~xX+l$H|H-hMxg(3doFk3S@R2I33
zLFX>;`5Pp?!7kuCtwuR|+(I*dPuSJ^eZWkurgS=SfzID9Sx~$Om@yFAc3g@3ya-3q
z&f!L)8y)E-3;p~<VK(&#!1Ft)lStg;eqa{5$!Z~(4+{&gUr&3TG^MbRz&{ywt6pBY
zNuS{|e}?Z6=3OsCOOyOf!Fa&miHl2`nBZ@scByi%hMi}R8*`AMTBt@rC;-&~nc5ik
zT6W<+$h=+})dHbo7e@I?VRrR$v@CYhGF`B+#$PY#wsryDDL2Z}V-}kDyM<RG-Ue0%
zrgGnLUj|lbCn|R(`L}Q%@co6M5gR1k+jqOEqWN2VFJVx`7C;KBnLNdq59C9IVG-*I
zuYupSrqbuF`5wZ6h|PpIz-IK+z`Qp<SO|;QNJyrA2T#?^yYPL5ArVr96k0QTYIz>c
z4;My=)*)U?HglRvGC**wkOck%p}%Mo;tik~HAS8W@dJfW(FRFR`W+aO^P~=G#aAay
z2<=6O5J*A;Z4$gt!#5VXij)v2#5cgC@<I|{Rd`DzFV03Z5GH{OXuiJCMWiUs5r0EW
z0v1qwEuo`GL98qu<)?}p#FK~xLiF*w<J*pXyca2bH0)^fp8rwXS4Xw=ZR<jzIKd%!
z@fLS)X^}wD7I$|76fICnaM$8)MS^>fmH-9XLU4jR6bas9g+d<voqNxC=ic}48{->u
z&-G=Gk&L~v)|z`wSs_3cP;7QT!kSvBI!gn=zfI~D+tI&d%_LNxrG*fnepBF4;9WpY
zD6JJ2(cfoH)>vt%&dZ-csuo+;KWR<dSYxQkE1*xx6Pw;YRKh7w7GucHO68LhV@hdF
z)mUYyQNuq&>Jr<ksNfx4zDrqF*}q`TD5P4$GefZ-N8BH2-7=>F<`pN)jUCC0v5ucJ
z1+%nKn#9x&h+CU9=Kl))Rr4#)D?#KXSYR-gQ85$9H5i9qVxmr&+HX6-=1VCPV=kn0
z784|-cfgC&Uj!uoVof8Yalq|M(G~Z!zrb3c5jLlMz;i)y6Nl9wvhm2HK~j-{8$b~i
z$JU>+@z|q962!ohNbxm}B9CMsW`o_MNm40~Ta%(9PNYA3gV&=?QaO)jlwv22us>pS
zcr<QQZG+XJsol_&m7gjzW_W;VL)9a_-Pn|^j%qe$e}H%c<dNELw8ZL01&di6VBFC3
z$ZR)RVmqR`jJX-W8l~BIu>&|w_A``aWx78l?CSu<#>>+*KVw<80;;i?odLoPrPB|7
z^S=#0v6@rW$IK4Uk0xp+HK&RU>`}SL!t$P-w)rW4;#r|Mjw9)h+F(0vyiyG0z8|S^
z0{xjAJg2Q!pg^8(iq$yg{-h1A)8;FsKiokSXbO0oTz}!H#fHEv8RRDM__{zV5G7K0
z(|7rPkH^8mp-N;8ceF^Zk9luwYwTcbV+=L6J$5v<KDIaZW9)Ejb8LTXXY5#DO<-4G
zOW;6YLjWbPEpQ~TF0d!?L*P(gQ(#|UN8q@At$w$DtNvj2&v??GIjuj_^*7nSatm)F
z;IZ&3c+UMBLL|H#p0Ro&^QU}uFEi*z{bBuP($CrZRIAxbi4%!4<s16n^f$Rzxzb-o
zlbhq<*&-v%o9;*M>+XB*Kim)9H{JK$cifMY&flJN-47Z+Na*UJ)*09D)LSNqGK330
zTexxg`}R&3;sEJkK8yNe1)+iDz^mc8@Gf{1yaJvHhryGYtKs$VLO2`}3@L&nLmD8_
z&0Wp8%~8#n%@vSJNEW0W5)SzYNrSXN;vqGVJjf?VD5M1P0n!ACg;YUuAf1p%NI4_}
z(gsO{)Ika$-H;GSF(d`j2#J9}A=!`)NCcz|k`8HwBtU8*`H;_$Fi0sR719iegH%Iu
zAzhFtNX4%dNG1dZNrKeh4`etx_}*`ljBY?j--mT%q1*2xUOuAJ&@JeAbPYNW{Rth4
zE<t}lH=$$ERp=aaCpr>cj?O^0p%c+{_d~rK9fB@Kr=T0rF=!|{8{L79K$oG@o0FPh
z&G+sKbSpXmU5m~~e@2I)OVO$5W^^378l8)lL%&6nptaBfX!ku8gMbez+}T^&Di*3x
z+egaZQam}On)3#JYmcIq_#IN4ho!diJo%+ydCH?aJE^~hA8v(?a(S|JG?*&#bJL{8
z4RdUL@O;wIVhZBt$xIy{rrL`2<mhOs`ThzdoDrjLXJ#*)8DXka$8C^WJuJ4B<H<Ll
z%-FP-$0lR<gr}p;R5|g({?Pf>wI^0bF$15(2l`=+t#VHhDUcgKEZJnJc5CL|z^z@<
zbQAbG#Autz!1Z+)zsW>1Ep^Lwp6zX#%y)AsrHk)DQhG<cxLZXGAHI0fNNF5#zfJ8L
ze!5lQDbN91Qa<9jOuZS#+6wvk$iG2Wk%^lmHENh`E9K{7{}x#g6Hij=*I|mSn4j$a
zO|nV_+*+v>!y;SRKY9JzWR(ke#!`2N3AZACvidiA#ePyW=N3rK9Ol_d|H<v&`Uzyt
zQ=d9JOuv=zlheQXlhO*edn#;LW-I?Ezd!7g@(Ry!>g6!*R@hIL-wlC^&$yXWlZLsr
zQhz@A-4Y18uLqMlHvE5=<4CO^me|Vu$@jZ0P`R6DHT8IyWGm_?+waCdib34>OVO~v
zR_0Hh->rW@K|J@X%P{j+(oe46&3}~cxFM<NRQRymR^d;9-!RX#YFQ;pJ#`O`wEB<Q
z+^^WCRm4(rj7CcA^_rpcNCsz3vCJHkk<x9wU(nyk2hJ~AlZ_4eN~rbXpaV#9=a;Q%
z#>RZ58G6IeA4mdcrPdF|Mo8UCR;p^nvZ^}a^lJIq5`DdDC=yBMtkIg`TnRwx=2z*a
z8=KUYf}lRg0O$9uAq%e(^y#4qNKR*+)@-^`aRZY|KBT_0OKZY{zH3FBfejK+rIw(x
ziNr?Ma#p=`ZbH45smj-_&ndaqh38cH>SH;-B8FPE#^sdz>UBYvkxb57t(glZhou*K
zH_%%oChECQva}&%2|zCj`UOdbQt?TXHfAhM)cXqEMB<|qeLhGV<(FvcRY0eZv?z6-
z3~7`6(oww~=r80$l)O($r=eL1zg{ME7)gav^-1qEHY=^un}zNpiBTY*)J~)25;r{<
zbP>sj()7vfG+8b^(z}G-AhA#{&XWTSpO!G`B|*O;DNrxZ(*lg2mKNxZL3faZD5dic
z0Y;xo%=PM_vq*ZB#(747$>-7)y<_Ml5*MX#o^oyYzT}x+A#@B$gHk(Bzczkf+I?R^
z{1{1sQa(?;Ho7ed(t|_M&{ZTeO6xrHTIS6IiIWH9<G~MQNkf>wJ%9K@kQGRaphPer
z$Psi1Y6KI43_**aLNFpI5cCKd1T!xwFOZj#mw}g@myVa3mx-5*mzI}`mywr(m!6k~
zm$`<t23SK`!!R8x7#%995-M7WYm|(u)S%kn++f@g&;V+%Z_ppdlMb~Xr%ii7Rl`_A
z5l=8fJVQ7`B913c1j40%NROL~or{zE&?a;wj4zZgtTwbZ%r(?C>@f5&tg#pH!a$H8
z$gGan85Yy~(b99A;sAI+d4{7C+Fc}<MR&kJgdNuVN|51zT%FLD*q6|k<O1)4=z`z^
zaDjh8d_j0Y0>A?h0SEv906u^iKnNg7#7iVfBuE4#;wKU(5+;&p;%O3T5@-T6@imDx
z2{lPZ@kWV82}S{<_@l(5grg+<c>F~C1pEMge12knLVl7uygH&ff;vDQejRZgVI7GZ
zo*R)Hfg8XL-;LOf(2e8>?}+G#;0SPpe?)vlctpa4$3(<Lzyx5zXCh`IWFjfRD<CQ$
zC;$}T7Z4W^7Lb_ZnG=~4m;=nozPx|hIwLo+TR6Qs`#JUTVsf2Goy+rhXM?Nj%`Tkl
z8<ly97`O7mq!*j~qD&@g3TBF((LO0B_&600ajv@}6)(>+e3mPjQe$kmP|Q$%ROdIJ
z*DbL%<%Al7Q?4Q!f@<C=P1G}UOt&Ia5uop)s&%hD6F#`4nU-$Ram=21X~@k2{oNj)
zwFOak`V^bcycF~g9P7DSe?sxD>up);Io>-k<cqQ6_T$)QG8qlJ-J_%ZLsag#NWo>>
z&c`k>E}Jiv<#Ea97nd5&%UTE?>1o!F%ntXzVFKk0+%Na2j8ma$1Qv|)#Q3D_vLcnt
zXy~3!?8bn!#5xNOUyb=zI>@MtfvSWiJCDG+!`x;QDo{|B%g0X8WHa-On6??)-X6*M
zy+36HRR5xK_R;hdGb)=zWSM;!!QNk7xBDIND_Lugu0Cr1x_0r$c6#{-7w(Sok{wCj
zvqkw|kA>TOXVadTxf(0=iRUgoogSDy&JlK#&xF|}!CsRrwm3|t@i$FuF*QwCYIRwa
zTAF><;d(paQ9I)erkt5$*ND{EJz_+WFYDmGGybLd*8MX_EgI}7ykOT-0at?0j=N8x
z90T5eS*hbAi!I3_Qa^GC%VCkQQ;F=19C(w<lr3!pi&YTrMrO~5%*d6!(~b*(SfJOw
z;Xhr*S`K>}RzAa-&k+m_c?o<l=xR9qN(*B@nAQ?7hjHNe#TYYs$0+<#j~-M+a`)1f
zWp@@Va}v|T^<Wv#o9!enCpf<ccBcA#yt<fKYz_H(wu#XW7zk!wc-b)aLKMVh<INA+
zvG(T1Ii<``nCJlJs~vs}4vHV;SaYFa!-Ql1(Ov`uQk-b?aA7WE|G8IqE!0R-KLnc-
zbO*!@v?|g-`5Oc_N3+X)NzTr+fUC<A(;tfPw>{>lLsY6$JpGE`5k)XpaP;)lMHii=
z;Vj9yOD&hp=hrrWrO7|iZc`mL<t#k&FUUyzmvSTiSIPaSDI+=a5BNnRR|XsP(;HWY
zYZIyo6JA>y`V$Lc$79&^U<*EM@w<O0h8W@)G8nnR`N15FxsLg{ipBh_X8oNi-YKY(
zx;S;34t@eD(OQV3=U7j8?}co+&-_!#X^}D)$7}BXCKt;hh_U-+KZ{)u@tJy#EIVRs
z9eS8aab0oVnoDCSsxEK16|B_tqn%m?e+i#YEZfm8_utr!P(PFB3}B)7oE&5RO;NzM
zghqIRF#CVeAHIUmw(dfni4UgTmNU$7<c~|Iv_D%8=+d~Hv~P|mG7z2M$=RjSIE&>B
zP@<@<NR=1i5p6CR;H^b^lc88Am1^StKKA<o?47bNZxc?(HVrHu#1jKm3Z4B<amLqF
zNFZ~Le`T{fpnh&$9w4OiISXoz&=s(+q7gyHWuxwCsT`D-D6*3ix#LLZ5^reJPscU`
ze8ugdy%!5o71b_DAy4=?wy0YOgFbWDdB0MA{Ym58KNs~&9J%9K^*=t)Nl0-fdOuel
zFk61zpmA=Mi~1st%#}n&xmL}}A@>VW=UV626#=(X2ykITGj!3Rd|c(#uGKq()}q>3
zOpzWOOI%C*xtW(NfCAD^n9n1uP;<-xS4_8FPD`#wyP~Ym*TjNnpUctpxCBFRuY54-
zu>xhZpRf4@yW^gyjn_YiJHz5i=q$14+-Nwc#qWE*oY`vrnP92?Q%qir#RZP=3<8^$
zFWF?<Sulp%(L=8@31x_vjFzvd?+W4b8Z|6$I>%Xz{K)qt(u_a|?%*n>G^61Tpk*JM
zck!&Gf#TPLII74Ol<QANmmasBOaJ|Y>1W9yBt|Fk9IVm|{Tpsypk*44G-Ot#EU_A5
ze!JEy%$XPJe+JAgQ2Epn?i<t0oP#R&6JE`BHq`l8neF!lbeYw~%^X2p%nZLW#b}>N
zwfdYr9WY&6O4LTYh?P=dv3aun-~xnw!>THDLFtv(_LUCVOERdXi(4ptHQieQcy^!d
zssP$AGJu^4UefONCB|BwDK&Vp?ndG@(b*M|C_Eh+M-$zS-HSkxlaU??EQ@b}wmTxY
z76&1C?;eE$VvE994`LqUTI_zrlYY`?9@AjJx?71S%^jK;TU1(de`-uM>uwd^JKoUI
zSb~$NqkAz>5Lfi2<iVe!;S!uHD=pBt6WN75_A>Pgn9^MJYpl(%1Le6cvI{rtWg0P}
z`+mkju5>H4Sz-gRID?;9G74fLFbV(ZY6{Xn@+XA70@(2Xx8ky&L(PlXEB646_lNBy
zspmhGK(>>F9*GC5cz=~%37l16pv`|MgY7maNxgD7XyBiJ6ioErNlU9o0&^8RkYZfx
zxg6&Ed(YOB-H*Ev0_ndOhx^Nk&Y3`~_c&bo+5mT1de8(nU;5fgBZcUXFhVQxf_A~7
zs4yfb<nrOQPOy2%9i^j1(R-|0N6SFs6PJ5|(82mcU$lyW#<>#hsR%ih=&8pH@@4k5
zG-X^{3_0J!Km$&W|EE|5oE&0U%wdp$i|`x*uot;dj*PbcRs@c~Jk*4@y5k2<Q9X*Z
zoT6#$GEPw)t_7bGvwsOuW3DTo&>(zS7o{{ugAz0RYYtHh{1Jl<xAJ3v66J531-Df3
z%l2mcEUdPU0X=#doY{5?pR;Fm+C9<|ZVbuQ&P#q4U}PU>zI4aerUPtV3?5MwhT0<F
ze8{)fPLpzmB-o3m*FSxYLG{fYyX0H)Jdu}Hi@o<OM@Vhnn(50o1?-Z_<a0wWaTmUT
zG#_!{gW=e19uF1;_8R=wX2VypCX+>l5;^|>HLe75PE0JHk|Q9YNDWIDF2ll)4+^VB
zxLgZu_<)$4!9G0<4VZJ-*g<%INH@dHl6#m`2=<x#BpZ0h^EUr}>DXj2GycxoP%oKY
z|NON)%{Tm9#A{Y^ob7S!b4mC|toYzVY;o66vusNP&bjw5DSkyPXNn5BYamQ0_OYzg
z9|hw3z7Cbqc(AU{eFEi1m=I+>un&HCKi_aYI$85pSMW2ZYfag_F<JCfg;=;q5FbQV
zkR2Y<?#h>qR``;%t&|X0sAF|!;RFg1UzsoDv_7mBKL|dq!0IjpTm?ywhy9gna8+qN
zbkDf$;jbeU<3#DQW!Um&RKWF3=uv*uJKsIj;Sv4n2<IgUiEk3a?n)U9qCIw1x6*yb
zQbw;uw~J!Tk-pt&XMs#{Pm{&x+>vc4yIv>F-9;ZH_4msxaI-uJ->2>r7_5s{tFA2?
zQFUw-#tCl=t&4B$^l;Jx=xWDwgvP4AaZ!1rrt(Hc1(jSb{ShA)jtvWA|8j!}czXH_
zcJ|1w-G{y1mEA|hY`N3fRqhe8osYepgT0-R-T&KQ+qS5LUGZ>(z3MO7cy-!bVIe!`
zp^NwYPGjcb6QEr)Y-JC^!C-t#0=z%I$7~4I@Yjl2`FN!<f@)+SDyufucz#vkld&G=
zJB+J%69W;ECQ<Fwx4F_CUG8PZe7ei;DLQeuU_qd&cLYI$&6;#adyEHrxzp8V;k8`f
z!Bd4m1FQYl(r7qc!mWX8FGPa*<`@M=`x3*Vk;wLS>XP!@+g~DuP?tA>T4S%Yj>C`i
zk!SY_Snz_xyaloG<=G>1!`$!F<E?^u{!7niukt&iPNZ`l`Yb+Tf--w=`Us~&=Q9rn
zV*1kF?m3(Naxsbtd)n3JoP7WiVdF6>=RCW-@Fi|xqU>fGSFOF3ux=2mTbX%dLdEvn
z^>m2Mf~RywflaG}_N5#96A9Cwh_pygH;@VN2`^EARRaNAL_{wik(<>U!Y~uylKf`d
zbnp`e9Z-3^Ms}94nB8((_7g81I#agWl$5(~DiGU`a>A3$w0lVigko{8STk7!j)ZW#
z{aOmG6D94^w>8k;W=d}Yk(=!sn=pF%rMb1i@jBWTFB}(MmmFB6Jdp<AcYW`%_V8N7
z7`TDd{0h+~Axklp+5bva-Gcm=tl0aP8W!49nbYxXt<xTwwq^d#Cpuw;_w_=`TznLY
z-5yU9KV<vzdKsa({HC7%ptD!JOLU0n60v5FBO%hB-8(|$X8%ScESGlaBHA;|C7geV
z*v;)tLcbDdgO$xAC8hnFim5F-zc4usZA@JJf6%(NEpO$~$-kX&On>Mp;Y2OI4(lX?
z1HZllbF$PKIZ&#jJAL{WhH3bvr1-fW@(bOgoTrhjZw}8294;s>52R;_Paqux;n}c-
z|C>&H1QZK5aW)(>j>?%6acVD1HI99=HTvb&SnjZ7?9g}X<4pIhvYq2G^`VIY5_7JN
z)uiFQT9vA-`>Lxk>2a>#YX6O<EbL60?^!`++k3pA`~V<G)5h<CO_zf6oRHW-B;7&!
zUu?nbxiGs*BbQ%)IjVdS>q0y-pyCE*mk|Fzzt}7b%ite9_yiPs3cQc?=~|ZR_ZtS{
z$P*9h5uf7;4*b$}&!5Bd$y=8M=f?B-*JIfSOIc#x+vXVH2fhz7f+fX0deu}J>Nyf;
z$-nZ%=X~rtHD33tee+3Qa-}-Ferhtv2r=sfJ^x5NIUX#jf2-4Vv!I+i&uh0BHXX`x
zzk<T7$|@cSNlX40HVT2KTJcw0pg$CBcQIt>{%DAGznsv&X<V+?@3-qtzbGu*nB=y*
ze0tV}&`}t0-0c5vu#4+jD{zSGZd~&oo<&1aV~Dfol3x;KW6%0z#lFU8e6?<zSna0U
z%VOMXWwb7xNN5rsrx+e*5>BWTPG~xv@c}fmQo@&oMID?V4%UJYMtWHhCJoFmE;5b7
znKO}aCW9a7`Gsc%D*>Y(#v$>yBvI&nC!>+8Gv@2VTb(`P!mLsjA!P;YM4VhUGHYsu
z$9YXX&rm(~NB3|9@+y2~pm3d%5c;ZUofy;4KoKLwN$#c2j%N|&^kaWN9l*bdc_i(`
zVj>XlBucB*M5d66+j)wJEFqK9r0?x7FgxfX3#+xd92svAiyy?xpRi8VBGRYW_Mu>j
zCe2L3Gq|gCVtkogb3rA>yUxw8z+)xpihAROl-axHTmSK8a2(9j*k@jC<raRPeJ4e0
zOl>Ob+3qgCZwXvo4G^t^EkBO5Pf(lxynnS)_r!0C)!{QsyTkf33I|{R+SzYz1Xm^8
z`%``8yWuorOj$mD>!_1EJ4rzihOB!tLh_Y}-wn#o;_Hp{r%<1k>P6p-q=W~eSXeSc
zGYsrkX01V+LBQDxi^s|76um+e=?j)>Q`2caIt!Iz{3$bHONtITyXqAAP9-85?T>Sf
zV|8qvmkkE1T50t+>gPk}x&A_^SldRvY%p9k0YBYZUbTI5xaC9b;syWm=1oQX)bX!Z
zbR1Hj0q+KZ(@#PbJx1dB#y+ML?YVlq6p!?Y4b}o9j$0bM)sG3)Dy*EdGL564M%)46
zKJ0q~-#lVXZrxhMh~0tb#dKJ;aZ!6BF1xnEc0-U!7<m^X9W^Kz|4})1!7e$|E_uNY
zInxe#!8SS5HhIC1Nsw2rctD&Z^c+6J+cM!wpYQq$N{U}adJ1*EkOH$PMpw~+S?^^|
z>%gn1oz76Mu26@rdpY!a%$4!b>*RY#W|$VBGx|QYd5be22p{F+8|k<C)DS04v4B~j
z<MPurS_<cb(%=>n_2O3{r3NxDsIqOswO^*KZux<u)UjwsR;BfK!3d7>I-*0Tknjj@
z=i=-ZJ)IFk^EPN&GPH?L=ZD<#<HeO@vS5)Rsz4#bRqT`=@?YlGPgN0+7(99W#dfeY
zcf+lk9}}CO<zIX}SBe%)k3LH;t_@>m4d7t)rz$X*+BbAp#Nbi9=2pb0<}5H7bEqh@
zz;PLCP;^1Ri!qik>b^KDbJP$Dph1TE-1V~lc$K+&Ew_2LPN`5twrxph{6Jr)cyZj2
z>Omy(Y=?9eZ&~?KqkM2<>_K`zfWl9bj|aQGs&D3$DWtXv!wmZqH+D}|$wuh{?(So}
zvC6iS_?%}iymj|8rz2=DqhF(?HcW(VbfiSSVa$-5?~F4Yp7bf}j|<_KG0K+YQI%w;
zBl#NNC%t$yWW;i9G;nbj5x{jKeIJoTMOv+zlP=-BY`F}fre21z#@@J^I_&#s<S#rN
z2!6qmX2Ke7GKg;h!MP22%2b@h!P;R5o)Gf2jg5?s4j)-sv;+!AIQ2HDVY?5rZ_v|e
z27aMc6npuZIEtlpEu_-T>C)J`aPhpMK_PyyDoMQhndjNo`izjMpllh;#jo<bNg2+7
zDOoya!WUe(5ozjMQmx<RTf*f_W6dG2h^gRLSDF(ch?8<g&oVC|@9A#K#SBt*@~YI9
zb>Eq4X%k?_KjiLjuEr)$c^*o-T33`(Jv3N|>fP;K$xyQ0&IJp1z;9)n0tNZmTO_Pf
z^vcftOojzFb6YaOsk9jg`}0RAN*2Nr^;#(`+85KG)YZD7#pK{?=IjKpzBsw4D)yvW
zRxF2lKY6*8(b#W$^cgz=y=^mpG~>@1`CJ~`f%?Rio)i9karfH6uPu6Cfp`-@HbroJ
zn;j_ecjjZ-c=G%g3~UFAgS6H?EY@(A5^WawVlwSXws-oEt}Tp3NGH(33R)s(qCCH;
z2l=;5S}NS*Amv(aLZtwgL$~oEugScnFxuXaeS?pGajp)H6Sn18F_IcF3E4+B``GK=
zjeIHK_AS((iR`mBqQ{x1plaf%qSTHB$5bhP4%f|ebT2JS_~7n}Q`2^*9Oq8#QtmSx
z9^WHpKpnH&N8sC<4w?0KY0(&WlliEWrV{r!1@M}cxJ2<<A*LmYd=J1e$uI<PF~wls
zBP!Eq?Kcxt1k3WeR#`^6Ms^K&+W;^*@U(TCNdt`=s^5V&0ai%OlUk#9qca``-(7mI
zXyYSJ(TzJbI@r>(bv06shtfpMZEpDVuoffDZ{}()GevR!Z{O+o+Awx5?vLLx52_@n
zugR)w%M@A?v2`kTD&yli;N#lP_xpJ$^W=*AP_5)(??<2UNUEEVo>|$Z7ZcB7!R?C&
zz6|K!a2b>A-}M(Xg7mVS-G<~d&vWjLvz);Nn|bcko<P-el8kP_wxN5IPJa2-H=+o{
zt8XQilSISfdvI}c1lNe;W^r>$?+9`Jr`yFdc8RCoUCY^zcKw{MQ*wjm^5lu=3VNtp
z&V*tF4^^|g%SMnYGM@?<PbpOK^v#{7zQ;<tf1Oe!!T$Ia?;E0)?827>aM9!bkb8!x
z`92$B>dbd4pM!6scHcML(a|N4Sf`nqPPG2E{p)uA#!YH_Y#1Xt+bIFxLO%NA1*tSt
zanK}29X4s-{sVvUCB4C?x1i1M<-R6t_-rwJLI}0RcIQ1Tup)M%!l8*{K6M5aHTFw)
zJ8KxT=}to0Wh==}H|^n*+!^8ml?0x{6_o=o`tyd)>L=HYlDDolRcH$?OSyRH9eOOQ
z374;rkfV>#j_aEE^0iZ|K39P7ZB|QxSgvKlKpdEH8)ilTl(T#AOh4{Xc75n)qu%%$
zau;2e_z+sCU?J6qBX0UT7}QA2<>D>QEgGovs(2>3FH4(VEwo>YL`^ra=ragQgznXv
zrE(}%bN>sY1<@~iCKNmJz@NQs9D-M9T5bKwT9$~HA$A5chhFO4BkC<}AtSp=-`MjK
zqxg{%dRKo`ul@}6F}WJUl{~r->e;#4ao!*EPiuum?QDnU(qf+I=+G_ouW{l?2(?3d
zHHh7u-{^$p(k)G|mE%Z=wS(l8|3R*yqpfvuN=yWZlbSBu(2=tBUER*Z4Y?(8tf&N9
zN!d-#lPHH*x_mOEUdF~<Bo@@(#y8_D)Nd^IT6`I|sqZGpjfyz18(T2H_wmd14=}lq
zHci?`wH<UixypDLn@E?BSaNCJB<16opNOQ-D1(vMe>Cjelp0cxXWD4r-W<Od2@wmm
zottD*(f>6^qE>@KxTf`Ry7m%;T0C~jChLNYbT6ZQezpqMG=ykdr3*4l;D;tfXiyBg
z@q!lw0%7<YWa52`4TrAAJaqu^y`dl`%PFH%Cy?&Knbleap65bz<L5^##Qfa%`(1=I
zWtunh3Q-z3t(zDtXDx;|PSLk51Duq|X~%q+lo@Rlm2eWzk}vmC5cg65_rVRpO-J8d
z9ZEa{?4H(B{Tw%F{yvc2j|2{WIMosQ-LyBnjxHT_oyj9vliXs_dt=y3Z^R-64?Q>O
zrK`65q2J)fQ&~XpeVXb+Of`VMylpHbv$P=00ua<LtS5CsimvyJ!wq^PWRM(M#YR7I
z%PePW*b6u76);@aG+kE<A$SKPI4riY+Il;-n?hLomC)dvprD<gpo4&^gP;&YS8$3u
z%T>?T0e{S6zJ_$H(o(@-jz=%#GI_b`xy(Td!Mj>+UZ!0MKC?A3k$Ic<;O0>v=*9t@
z^3+>+|B(Xo$?xY8akdXDbRsC=p%Z#9Qgs`uxeckQmc;Zb7`q~hrkq%Idq;HE<t@_p
zqStBN;a||*x1*<p*F?hr;#a-J+D5nl-gSbumk~A{P2vQiFZ7JR5}v3odVvcO<|!{o
zaw?jv684_N6{FDgoX=<1<e_WY&^1-4C5vtY5%)e;)gr$o*Wy4`ut70nnnMJhW<<1R
zgo<Xwuy2H#FS5a}h{Rn!V$nfw{+RDD>R9}8!TiH|uDmT*BQ=SqHwFFg=WR~f%`g)a
zT&5=V6vNjF@=Amy%ihd%SM%=hgU0lQpm~+JTYKWDgb}+aibpYgOn~gYTa5fk^VmZe
z=pvUpmo4!!{i(Rn3WDwk4>j*TA}t--T?f4lQ^2~tcWP|X{z)#ojU)}Z;cW8uHdnTN
z@Ud1{q>R{^HHrpe^+;2A9yu#Fy}Y<QRkld`j=Obr(@K-|-Rmf>u9gfE;lv^GZIS-&
z`vZ*p!iUHY)m)4X;k-2zw%qC8Ot~BRRKXRKD=TYG+$rC67Zf8@O~Rer6bkImq$z6c
z#98a1GfvJaPh96(M8(22*6ovA(*0v|My<dV#Y$6O%B6G5^{}YC+-vCzd=#0i^KGW8
zLLwUz_D||^`kVEM_eqVPMfk^dhu_bo#jZ=9>)X)^eqN_seAa<`^vdEjgbU&YOtcGA
zVV}P-310X=ZEKHyxFPVeUtAn0p}|9+eJm>Ws&6#L=4q0T7gyyM8Y(V(?3i@nGg&8C
zKW~|9{8AdQw1Z~)wKc<b#;dQe%2V&?XS7f1O)SK^MPm}CXFXVwbkvs5s@$G<XXP9w
z&_aptD(pWF=IV^`Qcb-J)S;`eUp`fGGIfWEnilulcqu^H7MHfVTb&Ob#EU1s$-CL&
zu14p4YS$k@#1h}-%4mERYz}n?TW`LrqKOPmx7v)UqB)dkqX{?{Ve8FKx7;+luax6n
z-4C9YQLlAVt$Fj=$ystc7l)@sR9a(X9FH$ya+-*k=ktBlPIZBU%S4SS`h1-k?sXie
z$nuPwNlq6a>VoI%&@0#~zy8b<!lzE~R`BuFw;(k0qPxEpzwd%OxOTS1s`&O|@@)EG
z9<k&g;#D|;2>OnAFD@dSn|%Ye|0pR!o=f|3<S%pi&mC-~*(u-u-g-0O9TkzhNLrD1
z+qo3vf|=>Ll#Q^KV|3Z^^~pfLAOF3Ii-a)gqFrC-a15#MG+)7MPnSDxr60g70_(?f
z-18iw6CaT^*-!QuU&N2>i#CUl13^b3n_Y-<8AF8nyxd*tyns~E-opOt7Pacsn$ea{
z8c&B-N^4)CB`qQAw~fd^X%V5JguBs%vmNP|<$A`4wG|u^JI~!jAxv$B{pITFP7Mi5
zJH@?i0n6VsnP|bA^CJn<J1M=1M84B*HVtfHwZFJb$};L@#oG_f2XQ3C+Z%fmi0e+L
zwg$CQ>E$%s{)l!=eDAn#A9?^gMn`0~54&kQMiWeTKy_YhvmGh>OW%ClwxlII^XdPS
zzH;&`CHC5^_?|$GNVphI=pIgp98S<2PM{u6SQ$zvA4(V<Nx*$7!J6&x-`g^E6K(!~
zcV=8ZZFijJ?0}}WK?GiGZ#z<8ODcwLANeJW#U(Q2&4H$+HeNPdTM@ltlNmHPFu`^Z
zd^@5SY4K7qVxlhMPPIhue{W71MWod9spwm=R||g71Aga@x1|C##g4Dhy*CDSaL1cc
zf$9j@3?fph`@ZQ}ZB+?+>iz$urw<E8untbsjo)(q88v|))``fXW|~Ak9jtzET%fd^
zYmW{XJoFbPHvq=)#P?HyHezdTXHXdz^iy1HUJ)rBecw#2Z0iJt4S?A^@dzr=Ho?DW
z<BHe9o}Li2rrGAT>!jtrnXI)udc6H;<<4n}*(mjEaszFUYw<*AC45E1&T;5lTH_N6
zo$~UUTwxJAH`OqDx~1{8NE`{#_TpY*VmHS(3h(qn!YB);BE`Q7yX@+}K0{-acCGvS
z<=LF9^uA$zY|X}IW3h!Zn9o4OK=l0~J?&gx+YhCV>?e)Fjv<l&*%*dyhBj~x!^S}k
z!>eL&+Z%BMY8&x~`VFM8sb?`b>o|8fbvWWUIQlr6MOnd9&v0-hvEzg)+QGV32YB&w
zYvW{?+t3idE=f8d(1=0$gF;Ve%Ja3JRK)t2)mZrm%lFZt($=t3$UaWSN`g8OKfRHT
NDMp1hFB${m{{V&DCTjoy

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/lato-bold-italic.woff2 b/assets/documentation/1.27.0-rc1/css/fonts/lato-bold-italic.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..c4e3d804b57b625b16a36d767bfca6bbf63d414e
GIT binary patch
literal 193308
zcmbrmV~{1$wl!L|ZQHKuvh6P0?6Pg!wr$(C-DTT;)#rTo#uxG4zn76abMMH^Scx&m
zm~*U^+eJ>42>=iP008J72LSPB4e4_M0Cd*~00g}9^XvaLVMm?7;LMtU=>b%bK=_$J
zrl2E2K*jX%M;-_PvH_6*Z*wCD`T{|3^8<hofL5D=`_0+F`2ErZ$$#<rKHu2B(sy;7
zVHjY^0_Wi-gNdJF2}5=w8jlD?G^oeBH<mfvmuh;F8nkc<RqGZ&0^%~Cf8S{St;)ZO
z@CYib2Ko!6Wfiw=$#{WL7#bur+~U%k68-BNe$9)QA(N@DL50(%La<GIaQf@}|L2tB
z8OHX0Fh$njj}Eo?S$Ns@g04&|viz8ePtit3Sg2o$Sg3$Lv=^31A_bbaDV)wEi8<r{
zhYbF(gti_O4W&I9X;U#SLsLuf3@m)2lpBc3o|+akNl7GIY-njRLLN4B&DWm@%@qZ}
zax8uMj<dRSJ4S>ef76A-T=D!!K0uMUtyCfbipnb@-6~>&vo<=5v&El{-By6>L{OV6
zw||(fG9&(2G32VVLaL}&V;soRBk|UGrXV;Q@4hqz++ES86zcsi!$pOBmaPXk>}RS>
z$(yRVKUiZ@Ywu+rI2x<F`PCu(*^yn$X6goCHU>8d%2-|=3USQcE(0I-vC}|TFL1SG
zh8RjT1O)~p%^H&4y;e*I%RH_~fq7)k{-oMK>?y}Rm=5s!QOvPUm?bA5TLMuGSw19L
z0tF}LLlNg;9wnO0(2yrq!)YYERts0XN!@9!vuKYy)C|mA<=Wu^_MigiFKG3d{KCh$
zd7O0Y0yjNxpo17;Xc+rhK?{LuWUB}!yT;a)1JbTC+td2P@$?L-)R_Pn%|6fZ%1Pn(
z_#Mhg6$K(uy7Ms_-7GnU&fwQZ6@k$*B*j9qC^{Rh7H@_r>IM{vXXidJ^ym$<I7RAt
zeY$$6rh1*P;wi(*KKWBkGHc^~bQ4r#nHF>8dZW1XKQ(OAR|H(~DV#0HtO@y|>qAhz
zZ$+LQmpWJF_8a)hYbf;x`QFZqcV$qNL83-at%*!$Q5v`uqLLl4dmt6;Qp`P3BV#W5
z096uniju@dI1C%5hTbrjBDj?3)Qa`uQEwczH3bFLzoDK2-Um7rQzvs_+)e=g$QX#A
zt^tSamwn_0=${}smMRN;_EKQgboTl=7gDm)7SmK&sSAbFC4KVqhlii<_Oepct%_XI
zIoh#P(aSyUg*5n`gu2E%-)SWZg##grz>21|6SHGhBXy4F`lSrmN9C*hnc}Jq10_Q&
zv$7pgpmGZ7o7-D)A4!FcJ6gcd%5CIG6dU4Io~wHo86y_yW*r5vyj8H|V!bI}e&Iwo
zKR}~)(awps%)6*HqQ+&k-@aA2GmVnWVxUKrbk*57s?I}@iII=H?l6(+3nRbHuEc%J
z`znQ|taoIRmq*<aqNBExlh|ELynua6RSPF%4aE>i1+A*peKsy(@*y$fq1A}=)C^f{
zA6*wLgh~pJ07pNFgfzpbQnGco4Q4GL^edQC1Dg>x=lq?;5is0O7fk}hIdSplweyTY
zg@ANudQIdQ4uw~hH!2NM%567J3Az%PRUCIbHQS{-{I@IMRKglt%e!rH^=S~&5tcT~
zfZCx{=c*n{XCNBpA(kVfa)VS%tgiG_KRsKwQg?3v-4tV+^j{Y5HezTHT=5hR$NI{r
z)G@%;U>D~zs36rnYW0#&>FV}$(9UO2BV1i;CKvy4K8X*21WPlXCYIU&TnphSSAQEc
z`@ieJATZ8)+v`{sO_TGYxhvWhs=7U^J7s-MbFUR=z)<#k?g1m6S&Q961zLP5G!99e
zIC)R=7;=gNq)Q8%*ae;;ej!J(`9$Rcl4vdd3)VpUp0?|xSijMntCw=wrE7F>>8$uy
zD)$t0_Cu|Q!rjyVbgm78<L$7m$AOh-q@YkzmZ^6yYFd;EJJ8zbi*X_+?b}#bTCa_d
z7ij#RvcZK?&ZDAX<c&Nd&vfR0w;FB!ty8qHt8o$^qk^49^}@Zo<U~63q*SbQcBiA7
zX}~S55Zz>(k-ns(ml!4QsLDJ9<5^fpVayw4UD8GA37)C4;~6`r%n`lhr}*l!ZQPk(
z@?v-pv1w%6vdEknx?`Srtz=ptlDGRzQbZ1OokXwTCD+{rJj0+ybSi(BHm*aIbLCJd
zqxEKSdO3W4cu%Dt^xObd0OW0v=Nom9f2h=subU9}XQ*aP(!#Ojg|4N~pdfX>tMp9T
zz1MHtP>rC7nwqFaG_8XZK6BZl+EmJ%+$tV<82-uUgh)ej34TVrvMftM5>P1!d9f2v
z6CA40!Wo7#NGQ95Wu@L<%+q}_W3-btjirP1>Ydl;PuDT+-ac|?5RdgS+Tl{=xC(Yn
zg7XqiDnIVDfB2C+T3JHdHf(NVHQpe4mhOO4;<;i~yy|(-=<{evX#9EnBhPs}744n2
zszj6bkYY~10tVZvoS^D>fSlHWoz&}j?M#EyB<E$C5~pqC3Ar)ZjJM>e`AcLU1^K!`
zaX8nF>0IV%3B|TUFpDL(<d@9D=A#}vMQ%i8x(0Z5Pn;}}aTr{a&`TUWhw@2bH$*?Z
z6)b;PFWx~|jy|vQ#Tb3W_0zbX%vh%pt7lTr<cx?AXd#ZRI=W-zLUq7cfuTEBjVBZ+
z!&&Y)I~M4~kS>B7tzDs12@W_h(n#l*=nDw~`a4<7U7XT{>L8AdN`TV`Wkbe61G?Y!
zB8}K|Zp${C=P{eznK*&PJYZ9Ax8|@aRaLsW>xz*#8J#Oe`OukK3`8dX#3|>O2ElYi
z(OLWi*c!|01Cc|CbD+X8Y7aV&==s?EyK0+I;_+3CPOjzbRH0fQ+dQqywmS{|CTA7L
zYaiKobqHs{b#;0}*~cB3t9+Il@Y5|@s+CnJ`*ri8ny%|#!mkj>c0>z^^8UpB4DNj`
z&kwPVZCk#tz}N2Uciwxi(jSDE-`)btdtXcZcHfx~p@a7)fB-@Z<5&LKBqKKv;(hn^
zCdc=l`JV&c4WN~R%H@|HCQej4!{?>y*)p=kKm`y$1bT@Oe-6;6IM@_S9W!D|gMl9m
zv>iDbHgr>8)*{^uI^(74d1a&`RL$i3wapn;#M!cdx1OVpCRDP`$1`OrncmW96ILJj
z+NO5v7VU&H1_v|_)pwGAyCLwcqsw(+N-iHNmx)1sh^Jcp_m7HzsgdXA*`nkVruZWI
zInfhjB;}$_?a-NCZ2C5PKb@mByUKl#?fATr^Z2M!7DZ$V*2v-}r!A)DD}zH;hTl>r
zzBJk0^b84gyJGaKXXO#2EBAF6bLp}XHs|yy#Vd`-Q{NfG;hiHb?xi2A4$jbXp}d|>
za3eDhT#vD;trNbO`2_8IIC&f1WVgerC3RW|e3%1Yo*9G4`~KXtCs$>kb6bAnU#ggP
z=AwR`ZmK0!w`{TU>qo~^h^MCO`WtUL=r$eMKUz##LJds2v$OiVT<Tw3cXF|OZq)<k
zkk{kiI$!X2J}?oN!9MYPzrDw-UN~lz6@&T$`%aFpyLSP35lqoIS3&tGb0jI!h4dva
zbn|*@u~;&L35#-Wtv3OEc*smV+dt;fGt>6XToTA0aI+5O!*cH!%5EYKY7%^WKUNN1
zUY61<6mX+VAumY2mB%O(3(-z>N55siZ0>wgzC%9b4!<eC0bhN_zBRx2?pDTq)V_Ke
zb==!N?hh+IRDVABhdp%PGOze!*EHYguk;f(aXmRNzcyCLb8@DfC3!`>t3RUm*vEWS
zx~abrUVk5IzP3#8DSj2)kxzVg1ib8v7wr&!^SvUz@{N59d{N##r^w|<eKy&<o@#Bk
z^jDRZ>ha=K*jKO37trUp@^j<GjEMdAHB`$BZx#N?Hyz|7@QHcJ`BH6YFjfiuJck|t
zQ7<%_lC!hz!KKzQ=8>hRp@GRRZ$<EqN`PXgct9!d1MYJw5d~W~3$grNreqb4WSh-d
zte?p;BU&(rLXXOhD*)4WPQAp|00<DqPp4c39+zH@O;#{Tgf?-ZhFvrwnW+-dT$htZ
zcR+nA+McjS_=c?0)@6miO#dG9g-^No{0?gKJlO_q!}l8kHBU~2SqcbMMIU-J-HIev
zp1(urmnw;wRAn(GpnnolI6RT!4V^-9S+0Ipt$|vD!4vPo%)WQb{_FMga7&Y}OOEaP
zcbG4<MBXUe?idtmeO%dx+9pH{XoS$}1w#7K_iN7=-*Ne^><XP_VKE+TyxPU{00>1t
zVf1RwhwPd30n!#8uO`!|qHku&Xz#q+&5llPm1am&P8lWNq_*AgWkUbvXB{`s=`uZ)
z4z(KBs`=WNGy7Puw%}NddQT+eo5aQERV`xmUsQRAEKf-)Li;MBqLAf+V9h$E>3N_l
zgz3jm#Xjm-cMUnLG-+Y-TdZd7Wsq@yKD!`fg~P$G5%#5v7OI`rh`UeuwWXOnGd(0E
z#(V%cfU9gAfDgWJ@Xx2qsgGCs2LvQYlDT9b>N+BrLRpYp7>o@{;E3;>6?3wRu5Il&
z3V95!JuTT~qb5T^Kx~p`k_ie;rtfcE{j*Elm*Vqp)hn;-`|#Cj2NfJ$g-Li&`fjPU
zA;+RrR5NJJbs$>QBEROc5``?1f-w@q<giKUW6OqaRG#V_=?9~`?d-|-ny64OyNQR4
z%e0*ZC_=SZf2zv8KoXY0GJiI~Y=G6B_ihGiKPw4|F*`=u#UZM5vTn9_v-Bgy3^Z;!
zB@|Ns$Tm~55Kc_^!3xCVNM*O@6_c7C`A4RG=7dSRk*!Bu6`m<0cDprI>!>tn-RyKj
zgLptg|9k|TX|VP<>-7CU-q|}xIUYNff+QLO3gdLb9vp`4NW>+rO$rgw_?O;F)%D#3
z$O0-ezOFCF@1IaUF4LW-Znyxoy&8oE(vhJcRPd2hG(8MGXLPAT!oN;g3-ZwxEuOBN
zJ#-Nu!UUy21UV7~a^)#dpqwy4AjE<bd5fLej5?eSc}LhgbpIAmgy(0+EZeYXFljJh
zRqdRV^5KfiDLA5tDENfupHP(3t>E>*XVhEh-Tl?BGrNs~@_|DUQb%G5Ap9jbEuwLj
z{;9mu&xl56Px|aA9*ZEHEFMFx=&s`?2qAaknoX4FI*%MpEmysN3PBi%AZSaY#gYAB
zx4#auRU&0PM9<YUowGYpuWMuJGpy#T0$2-0<x83iq9l^b*QUH9Nh=e^gC`Fg1k)%G
zaU~t|g5E^%3zoi{<%y#0UBDd(e^Pge`tS2aW#~zmrqLW|Sg4v%(s8LFg~yd>Zp6GO
z3+u;cDlK0CY)qdsZvWx<qRd?pQe5@R?O(8#dlZoc77+y&6uTMk9V=!L1sw-dQY3u?
z{i~ddkO2T0Q`M*@#x||NPlI(5nIVwyv2c|8`rBTW#iMCy{r={ZvQF63MI}EcGb!+V
zv1|bIZ_0s(nR6TIfqs@xQQ1~jG$eKqFhFGyRTr3+Kgkqe7of}R7uk%T<#A23%bz~z
z@PA<XfN=?Vn<_<1IlRjhfafQa`sm(!%)bk;V~}!VGiwmbN#EyH)YfH-8#m*}8hLbY
zyDjGTe`!_q*#i{68>X!!JR%P;53FfG`H1Rh@1(^u3b*ze4*s!sr~H!8k20T?`&(=b
zE8S?B%bb^nnMSFf?-(0a4|F*Q>3H8v=y(s;KPhNoQz?-O85p+ocPP&Kt5Kq(1K+>R
z>0p>`xL$AYL`Rrmb#*l~xjq(&p|78Yzf#bP_`GVxd#H5fTQ&50L<6!hw}|=kFhQ7X
zume~Uq3-iEH6--Paq#8X^6}fsSUJ1$ePdN6KP^xoAEh4&kGOWAkO6ByRl8?>iJJ#t
z0}LYEfg>tIBYES*l+JrPW&I_~%`G7$#DPOK+`-i~Bqhe7^%uL;I}fJ;HCYJ_o^3p_
zdr$QiNiKtZC}bTiK*#if@-U#KfH-{LCMO9PHVu(JHfDdQKulyGMr1gGKrMqAC@L^Y
z0fVk|<*++2@Zt(R)VZ`XFKWL33vKlwq>brNB1|#?>1Qd2o-QbHJ`}mL0-ikFe5+%C
zLqtABdcJvjG5ImT#*4&8P?=2Y<tyZ4KS%L6*kyLQ4gm!<!>++Ms)z!L$lULraQQ!T
zRP>LQn6Y3*i7F)eZ_J;#NK4D9#P^%Dr0JnZ#M4A8Kz+MAE6QQ;=)?0-g06$D15(Aq
zCw3Bzn@VZ;CvdzqrCl<AMvx7<M9r<v<ErFA1Q<?;6XGxw{Z{=Z=loS}lz(2R=%ouH
zkC`rxQU9B6WAV|;esCFZX;Beq^&W<{3KjqaZW&5y|M>ix*`mtl9XL1@CEhS7JrItX
z03SQ)uF>}Ua_eFi2{uIETh@c%?VLf|a)RSK|7ghBuNtxl7v{$DK1V_rSBo888OLP=
zaRk>(IB`}H2*^NB?=Z80%}`-_swv`QL#uW4nlDT8hQXJR#?{ZVs6*<mx;PElr`;?f
z618}$$J)93;_A&%RKy$S0T8Hn5(wsx<(>LlmCnx9w>>QKwu>ifCs-$fweOIE-3zNn
zLUX;~3#fGc*fremBScv6a=@9F4mMiiL34swXr2qYBAIEgg)7UZC0Mx40<-jdv+#WS
z=l8(;OHV?}H7o)`iKG!#pku4%DH_u2g)40;m{|G5j5~N|WC)s2AV?b9&(#KJXidu%
zJ$(bqf)35WCQ~FiAJ}AXtxzdxlu^K*+~6>#^N3!9Y@&?GS15@jK@5cec^L>0A%9%`
z?*j_}<Kss0veed5N9flxk89T_hE=w0`q1*OKomP<%sdMp_}16ol9WX#Mr+*3UZwSL
zCqA-Df-r(hRk)kN7~FHQUo|OE;NRxaU$TT;3AkM}{k}jK7JS~W1*DRMgEp`IxRt@7
zU4xS?Nwz9j`9%m!LZwigOp?<d8U~6iR!qph9d_Du);h}uqW_`*oUjc5OFk0^zC~C)
zc@qzHcHHX$hJ#K_UKrE6rL688A)tDR*5=>&Ej9vX^QKH+%LJnPIG^Ts&4p{3gcR$e
z&Gx-PLsDy%T0c=h-u-=WxX;l^d&lm`VKhj>&r=J!eHSVvN9kW&cDQqo2g(NtN-G>%
z2E#TqZ34=p1_7PysL>bH2;`qjH|q?I?Q6NBRCN~QaP|KrBNe!#QYkkh6&8OQPeG7y
zpJdhD-rFmGS(;k7zI?m=g1yTA@;<FcaJhAVJvWR6NU^wPIsC?-e(0o2ZwG+|l64If
zFe6yGe8Rp5!~7GxiMe<l6jjF<f}kEdEW&*32b{OiTC@?*%co|*JPgcxrrG7l<6US{
zZoxg%QH6BwSEjCmyGpkCQ8f+)&AU#G$HyPAL$iVKD7{@T(;{w(>K!8uUxx=8`xuaN
zc@)3$M9jhr5r%+t9g8NiQF2^t-PMZ#zsXfK6Dx{mXB1?q&0{GYYb%pgt_zxqYRYSx
zcLB~ropw65Q3Q3$096!=MA%123gP6mN6vktb#-LYy$li+{sql_Hbl7f-6iYc@vIzm
zVYNL3$=m1Q+V%NlZ+aC9IH86CD0!Or9^kXD8%Bnd3FMVh*wI*(#Wd6P4GeDu42I$A
zdaP#C65PwD<EBk7jh~tQmXS+_l1V=+Gu3$@bUOzH0tPK*Ky>6!vb)h&fy)aEkGSxO
z%Uev`y?7k)$%~fzy<U^Dc+GsTZYI8Wv5^G}P!<Ha6+X@rMr>ay&<Y_o$afWa8RH=z
zu9TFlZw&l6?L`F2uhy&ZT{Bg_`uJAjRg()9ZY~<?sMa)Lx2Vda-gVVRN(Dj$1v!T)
z=RT|nafk73FS1CcudDt0t!2v?97{xD!%6{#$4ktbH5`79Lj={D^bS~T8wnW&Rl|gA
z#M$bvLa*$?B3uE1M?E*B8`ywibl&rruqz=Vy1u|_W>e5Hh2KfvU}k0<Yxd`+%Ck^U
zR}e|)8Mh)8YD^N+!-3dMXf};eMwC~9ym&l`-?8Cj5J!vZ_SSlBj4NrmD6C9X9E}2c
zo^wCVRIjgokZHZ2yi*P$Ixe7J>H@;?jf)oaXF+vgK4fi1$p@EC8#Gs8QQ);2)Ht;2
zBBh1P(x`p_{_zUiiB<R3-^SU=`LI}wXToF<mjEC@VRjBg4bt#`Vi3>2v-3kf`9B%c
zk1m-11ibQ3z$Xr)|9#elfuEa2!6K&o_?{^?R-L*2qE`>I#Cg`vkg0M1nnw?Xv$GXM
zTEE=4SA_Tiv#DC(;s+WFb_D{*v9R^0CL0K4UZjzSc#&%|9yJ4I#$%3NfxjN8kx#q)
zF<Nj9tDv{fn$ECV7T%N}(ca7Gdaig>st_FKvrf%$rUpN}m##es7w;TzAfs8{FenoG
zC3n$m5z*}tH^e35OAx`uTn~_0^h)!Yx%Zg`4OzqsSmZ0_>yxueu9uWop1)FVQ~b=w
zg8PDD*%AgP9nqybfu<M;85y(Lw&TB2XdXx>)a(<5<6#?t`{KouAw`po_JwOltrq}K
z@`z_C6OAx6>ND`X()8AFNd&-mA)7JVZ$z=MIc3AuYt02atwKk(7N)JD4aq__+Fa;I
zcpi6KL+-C=m%ZE&RxIb#Vw}YJY!&PP2<kieV&s__z(@Om+`lU<stbK>0?;0_l|757
zyDqAvt=5?kgAV*iE(#!8@3#}2NLM-xio~U@G@Fe&^*OnU8fh0&^(PCbwTkM0Z+~cR
zQtq7UXSV-I&Z+FxPR!5p&k{>QO-a0nKt-=KB?Wz#vhyR$zig?SSghlo`QCmrxyIXL
zu8yI34aBC_U5YVfEjtK2XgwfXIjH64c*dD34W`jF;JNwuuD?!NR=F@qC*?n);v+=O
z1(J?bUOI<-U!k9Ay#MUV7UW%!EGltCB_@DFRF^kldw)Jwq~j@Z_MQgrf)Nj$U4_9~
z_a#yV^1Zp~dek^QA|w*&E&QcZ<ebjZsr#3y!f>3C>7JbToar4gYP-RQKr)jDJHOZg
zBl2`7^AH$B0Kq6OnXH^+qB%WjYaq2x9@~VzD#Oq!f^-3-q^Y)?)-9e|su*Tq84vOX
z-ZAWyHx;EX){65ir*WLoQk8QwYz~+8<$6PP%K0EmU;TU{8Df90YbHLfPvvo~Tq@PP
z<yYV!=Ybg<)W~;ExtEoIL^J6MJgU3kq^4@yCL^75f@;HF$2H)r2Rs0*Zz2p>nYd&<
zrDU^&WHaU34}Imr_$Nl>8@2dXXe6J1G=C;cJpRtlq;jn18h*@Fm#ePM##m`spTv=?
zUX!^dvsy6VQIYY;@rd+Htjr>Oa^{-KBM;WrEzp+G{(X)BIS?--c=EoalXO<r3T%ee
zUm%}Yh3@vf9sT(m5YGA#g@kc{0ZS|7`1`1P<%$|wog6arh$P{c4ZatEeAU@&xvg7#
znuK%PV7R=hY8_h=8NU3ovhoSkspY)lz-?tb9IymMxEyuc<f-C;lf|pbu1g@^*ZqT=
z-ujWcR0Qb!aDB3z<8K7+ckdq63})<j^_DnHITs=rb>J6!rK9wB|I*ON(EGq^a>_X1
z#w@BGDBVLSK&^$GkCTO_6GjUG1;7WY4GL^Avxc`dcAlkh<xw=r;sz;YzF=yuBT(z-
zR^;djio(ed&HTn7pA*w-8XLHZ%8FqFX^o1vg{u@EvMo=*Ay32pJ=kH1TpumAtj|Vn
z3#Qp1Q9=^IYGzd>>N96^+B;ha_4Gzn?m7UaMpfR|2g1vsN!!9d?zl?u=COcGdGj%s
zop1nY1c`sYcd&2pgH%}nGOiS`VS%f(bU4q1Q9-@F@0rU~(bdVyJ*~_z09HHgyw41_
z%my0&M90~=x~Bj3crM2xRK6cc*~JHF6<MAD{MCj=5(jbt$+~uy*Ec0<roh_=PG0m<
za&~S3O_g%;r_FKARL<N<4Zz&5C1u)pQXDD95it9N?A-I?knWALC?V5Vi30T$r@`di
z;f%pVleyCG`&)V`8R>}AAZxaq+EuNMrf%C!*L<5|H{cjUORS%;XxxOfK3`d#j*7j?
zjW>fu|0z#nmpkZ70>R;k$)407gapj>;~0+z?+mzbb5Y~HVHeG>*QZ(OkBJ2UFhqk&
zfrQ(e#;sl7a<P)q^RyLx6gt09DC)@;_N9!sS1e)Re(aE7V;K!k^Sp~kgePR9hZbpQ
zB2mD<dbY52<>J=K+X{rCv9H=gUk!}~=p;kgi^PL>!rh%^`Y!|_5Mn3+M0}xmc?+lK
zn=MvP*=kB$#1TG~R;pekBN>SPPuUwf!oYoGe{}MFbtS8^V}n!sjU+ngQXLu!QxvEu
zNm0ZXctI*M$n#0}(Y<pP+Y8fm%`Pge(-Vq_h*%&pX?aK?7G~-Eebc0>LARnbFGX(;
z5;t>)nLNTl6E8@j(;aN6gD~;KSYP4v&8)H<+|x5(U1I)|Ht7ow`jHF)jMEGlyDL|g
z6G-dD55`q#%1Pz;*J(U4`4o{1!x%s3CmKou8Bf6Q!PP(|i5u;7@q4Bn966G)AA>m3
z)pMAw;yT62Djh*s7>ZI@&^2XXQulNE;GQhxKGVIl^tvJ(<2KTCQNu%nac1vZ&Yt5q
zQAoL}+_XxgDW52x_oL+7vMt~RU9*x<`#jv>i;2>k!7ni{DMah_S`aP}_7DDK(KKLp
z5#WWNKxng(!|v^xjl2e}a)ZFLMP(<P?<GLj^+*o0ZsC=s06&g!7(zTlvV;HZtJm*I
z^%%y~LDx3SnnpEQ{#c?S+Ksnop`)|!`XJgz3p>>!Xb1{DAoExwu<iGr@5oE5t0#0X
zOj!j+G-pr#?EqlFO%tydkri;YHbg)}WV!t0vdIe@tfTsN5V=5Ra&3Y;qaxx^wRRk&
z8i2k1<2qHUI=afIo?ot+ub*6E?w3Bzk3^vn48stH(hP)wvB3<Ebr(6`rhJ$^otkV6
z%0f8)b7!{`s#9(ej?|}_T|{cZ<`BaIC?d|as1qrkhu51y^{c|4<j4CZJKsI6J)B*-
z<2?@B^ih1j&x+)t;Y(cGjOr%D9Vh&~8xA!D52#;Gu~(!xh|HGlcAlYMy)hZ(kX)^W
zROopKL()E_X58+T+Ze>MUyoG5)E}fi)d-_FVNw}vP#bq6-FYKoO74!o%m{S9)W6PE
zfxW&P-q*mNS7NTNjodds|F*rKqHkV%XMOIW9b?Ad%~9;`e8%y~7RJQfw0=Woxb^#-
zH0<P@Br$XjZA@>C3=uobc>xHW*xeE}KVMRN>?yI5f%5CoK44VduB3&bz`Gsm;M#c9
zpSbz%r-*U0bn}!v@s@ge7C(OrKMQ+tUCHU*YycP7*3k{jcArmQ_w4|e9K@u+`#u99
zkKwj0JTsWSweu?F5N<Z#nz+RE(@73Iyz2SG$kw3^)|+4GTnM2NuTS2gZ>ZdY=Bikk
zBn_le$<%Nk$z7=iRESnqX>AlfE^B6NO0=}^F26+Bfe%be`nLV_|3&#n(TQ1nANGn@
zZ5utUJA1Cbx~`0YKcBAxaHKheY^o2{<d+Y5WNk{))!9t&&hdit5z}$hG0}BanmA>=
zWUG_uOYNwZ@@PJ-vf_0fewH6lmtv|C*PQyH@oUr<C@D|Cl}M5~b9kzK`a&o$YFL*h
z<MK9mgy^CLMJR5OU-I*W{}Ff)YtAjAKpvVc?Bx#k243aIMbCbA!+r7nu~pH%aF+p&
z{@Ta*@E7;(yjNO&Z5!=3D>@&XkcqVws2jm&wQ3A}ai7r(>TeMVkah2rqNV!6AoTeg
z33-GQ0&+rvq%Z>dK~YRnklQh%C@(}!$T-QvTZ^6Mw`sHWSjvi1$Ae!&6N9Rltlpx7
zoIofc?nicds(#@DyfheCQvKR;>3SJR_k}dp67L0sAf^aLCJ|w#8G+6xp}v}+f)0)$
z;-@+2YlTqdPa|nr)O<|0PDSeu4ht5#+xaA`Gt~B|i;Wo9T_*FyqMERwPa?aT;XQfr
zHo3s}3}hlIvz~%XmR@Sea35QKrI=dV`3&mXp@7)CqQ6@?;Z2ct%YKiH6LqfKj0yMJ
zcYh;3C5M+=f6;jzeV<DByF3=N?}r_bF=o)zCg$3%+N|tnqDGgCjOaX__$4_duO!p+
zp3r!d<8SB#6|-0Om}y$OHZm7CGPeBv;@<CUJ8^5r48hg~guo9WIy*MXq3T;`Hmt{z
zMyrC&4}hw?02>I&N}FLvn5DN9D4B{u8aI9ru7FpnxO4&o5U2;T)l)aqS=QCnHvCro
zx$$Pza=gv6b>3C<=vDX3KjJkj^n9PVI9gWRQGz*Sl7nr1<@RvoQ4loUGn8#c`M|Js
z2;reAP#deVFG~W+wEHC<qRybHnC-Y-jr_DpFF}LJfJ!sn<ml*v%i0&We3v+!HTRsR
zb)o(F6>@@1&O}Dskj;cinW8>%Av`U2a?M!Mb8nn&o=CpFOdh;^*u)L5=sl7JiNztc
z!|pph$aS&qgS@MYvrmaj@80p=A)7~qo9?=$J7+G5Z*_B$56<yAN%`#7zDVGvggdd<
zLTMOr6j*qM@YfYp%U2pR3+@WJO{g3m8ehjiIB1MHS<T`UDVQ%K?t#`3Gfh)iGf<Pr
z)Vol|PDy(ACa*{M!{m9`KKNWT#VmXrNHgM3!k-$#j5rH5VNz0~E;eps;ipl_uSc!J
zVO)tlBa#FFf+P(FU94MP2p|Abx8(#K=|j0856JIl7QJXk2!9g@Ul;FL<vRA>LT^JW
zQ{wR;X@V;?YNNN0Vo&UI45<ns5(8E?q*d)PA$fKua)K+n7%sq1G${bq(mbGOB?&R(
zTtZbGdlLG2gO;a`1@1C4Il?MW|M}E|E5N;>J7fe{_H<Cji9cj2<kmbxd1ktzH7j|D
zVxmDDu6$cvNTqZOMlhhg0R}I=vuJT70GObtusoQ12uFW$*n9&z=sc=^^()qsVXx5}
zW165NkR{p?uE{UJ0w9tl%Aoh~GgC4{*9-3)MPCq@(kZo=aw_7%wnmNuAm#_&DFa3U
z?#TwL9;6^igw3(QhLT3_z;h75k;)^Gsw=Q=jV?Bie%y4}WOm;@G@)0n(`Gb|TSdXP
z@u22niUv#PDMM-I<t#ogrg~&PwjQ)QTu1#am^$`E<kZ;{;D#$qH;Yc4)S_Dwd_&-q
z60oJvvjss48rDll0LbZ5vtDkXjZ;oUNb#x6L$lUxjT9#Oon1@21dcWMK3!B9#z*>z
z2}5#Bx7iz?iy<2;MEh4Vk5LT(d~XbeDr(v{m4+>3VjsG((aEvxAOqqKPeOrZz#fpB
zh=#hn_?RcgpUv>VXZjyi01G4<i7Yt|G+w}!Ok}aU#(uqId;?@{>rIkaH>>R;0EF*?
zNUWI!AG-eRXuL=YAc$qvZN~ti07EVwZlXruZxEI^aZ@QhO`TZ2_<b#0z{<K%^xf7L
zRFu>t;~eh$+Z-lz%)p`5e+{Wf>C)Jg(NushB94s<q7Ong7G<h7Gd567MM;KTdcv8z
z+cp|-7&1N|6OErlvOeFUU0<Vl-yLFMdYe!z5IJIM_wEHKjssGhDuG(rB8sgG1VE6%
z-+)6vk;RZ9eG;t#mfttL{1mJ|Fg<yyHCEOd4IY3<nu0tuzOwX(_$KW)xz~PwdQFHO
zd_Ej*#O&O<)Y|f+BcdiG#wW)mB>-7r%Eo3o6{eUY0T6Pqu?Hg;zPvAa(Ye0J*j|>5
zVH@BlfYukGz~C`Eb<W=dTX_5P9F~QoX;i4K72QHI!4W(3CaY1aq^Cs6XxS+m_RERB
zfn8@0i`wFL%Td9ep2&|Q?gGzk;QgWN67Q<=4uLI4nIGG0Bt4N}zG&|{-Zvmkpe-xh
z%anYSx!E0Zbc~-MPaEE_g*_XD4Lv^G$6fg*;N>Ii9+Cd`&i(LExe8;u4-3=UzKhU(
z>$XNHk4tQXjFcd#8dGFi?sVTKvNjIviUW|bce85Y>%vTq_iUo(J1F6tWB+of&t_!U
zWDfpE&FKAuI^qdG50Xv~52F9)o~!4W7|Jc00&O3lfVm|+ax?j1wt?$X9r11D+*Iv&
z<4<63f4q$~*u*G4Q~UXu_t6$wr>Zp9kcB-?{ehr1l8;FmSjMvY4H?<Up;F>T26|HD
zYW24^ec(BXU4a7ntEbiuv4wGF5fdxy2Bj_AWT?094Y0+QhyZwpmtUZ>bsdqT=KYos
z2q_|Yo%4*doG<tZq(JRe?@4}NziKcHF>w?`JZk<;2dk|S=@bR2lr$})KWn=#b#Bb%
zE&Y?#gHLGX?_>}cKExbSp6I+iPPQm#cV!s;<dX-n4SiMfzB;~15G3+=YizCo$dIjn
z;r{^p!);dA_nkIuuCnz9jFU7i&c-b2m2A%t%RETcKRY2k;sdrI=>LR0PYn^?`-F|p
z=RMyBygwq!0A#$0S~R#n#aMW`#4rFVs=lC12COcMAE+%sHb2S#;2($<x8aE9q=E7u
zX8)to<l_GW@!K)uAJ8Z7gDL>M(*I6cZ8qi*uop&qyG3Vu$}i_>F3Fvf?%1*z@F5HG
zpgkLpgNhy_4EZ8F!HNsp_@GIctR$Bc&3{$skzvS%t{wvuZ_1J;OTeWc524&XCQ6Cr
zQYXTQ9C#zifijU5tg2uZ6`{jeMI_ak$6-|!?>WMDv$ky8vYYd#D&g4}aa*b4Ied^g
z-!c)aEg-Z&ZcogrVFh!Lms*Igi*qP>@4A-7-|S3W@*K>(-Ll*Grm5iWuI5AU_=-4q
zgX^e!ez*OkT|4*cV$W!6(P(Yatc~%ile2wa{P0pSo<)Do59H<p<_bD^i<@dYZN^u$
zEUg>33m)OSQgSdV^OH<yX&ijGydUa1-jYIZFF0ki`-pMw2RCJP{hZ!$=gZnSL@&7e
zl-qHQ%!i0TA&gpOlEld*A}xp12on>JpE5#GVtFuH1<;4Xgx@fME2>cUEeMg+s6+Ll
z5SHds_tyhiihd0Jo7|s_l?CXFP+3_vk0h5zXuf+;kh0~EEfRg&YKXV}ur^tRp*0s$
zA0N%&trs-#tQ!qA3$rDJAYlZRBx+iCn)%qVCd*araCyhEZ!DIybm3WrXSJOjX^)rS
zd%CCG{PwbZ`mxY*H+ttIPAckScL^G<C3mU2`Nuq<X}?*+N7vK;^QY@dwc1on=ON|#
z<L{g#+%dU8V{UNYh9G@enxJ9rSQ|KR383V2Fs^&6;W#of*WsGFJul0M@nZbSCQ0yk
z-LBB-G`9vvmCVx4rk;>bk}m#tSqXm33aN!VuQbKJAQk^ViL)b2GGB{6fBlFT2hTSP
z9-;c-O%?Vxk+`B+3>shH+y7h;zcgCLz~L>Z#yV#^8nAH(5rzO`CV_b{k5isIpunI1
zvS;$vu49|-tG|(h*ttAz(im975L8aP_UQ)?ZcTkneU!;6{8^x>+j71_3IK$8qt9Da
zo96UR7XqYscywC?C=o@nxUTIx*TrP;;Z2G429qY`qX9WqRax2<vCDz_<if3x=#Qi_
z&~Dtm^xK)-a|mR&yE`q1g5C%@y{&z?;r{p=BaaAR!N_sZa&skw3gqX5&?R|u;-FoT
z-WUYOhf8Ez3{~7$u)YY9{{#_b3L}!NVaNg)A@@f|{220zjhX2R6EcRr0fbZKW&bPS
z3~7h0ZuN8K{e#uSKlvk+ak*!Tq>}04e^bb!#lB`k`HA0zB-7wx(WxGrAZf-L&;THQ
z370dB96)I}$M&~38Gkji$=(Sq16r|oNURhWO6WnLhx>=2o1Wx?;1oENjt+)WDCB4g
zgANOuBuhFSh^Pby)qbZHuFfTMw-3uwxmY$=u`YAF*gLU%2zerd<2U>T-Tb?0IMQv3
zxfK7<m1-jey1cXG_32adWTpC)^S9W;vFs8iiM#UdhKkrCCK9`pmCW<bTGwE$C}kb;
zeI~q3aNyX)OQ<Ml#p5&KdgCHg&|ST}GRge67^QV`c;q7k7mML)+wby@X`#>!xXCD*
zE*2Ii4@35#S#K_gD?7AAPPbY9mqa~(>QTPem&#b`MIUUKxQRLG!sKeewFK)bSM$9T
z*+BK+zUvo&QAJxeX`7bjU&+tE#P=D1e4M=8zJ1TLR86bG*pk{J&)C>6^8BqTZLVZb
zM*10LbF5kj*0$mq-!@N0uRGSkn_9416_sYtq-+Msy`RBu560+sD%$MoINL1;H0Q)L
z*G4pr%U52w8fv&YTR6L}HQHP>KVz@8*GQbi>TZiGeujEPd~VkbNFCi)U<cu~pXq+|
zZ4_NRsoR22c0B~U^fxz1>gGLd^g8-9zgIWE!zRtr4-<TOPw)+E{EAY5)}UT4Zmjyc
z%T^SExpW+ui~@W!OUJRv_)vE!#VbDk7&QQ9O=)R$+yhk=8<eG?!DNZ%s^aIY1A*d;
zaUpN(@ZKWqN2a|S{NVa#$3(T^x>KUf8oD9rzcPqstpUp%=62$hv0guLG(V*@6`j;7
z&>na)*eqGLw%V&t!N<^?!P`>naJw>6S`pa+<DxIl#obgN+gvt4MuAj=5lh9`{!`J{
zw$_l{WTmG(y~Ft6+fM0hw%BZDi)~qi4i&lH4(;oNz0j|ekvN@LPU~|r7dFPPls>`w
z3m%pXv&K3WtnAXw{PPJ8EC-|ls)=zMVb)j;Sa}cm1oo}s8eh@+G0{OTYSFE%0roal
zzexM@Y4dV}dkEU5t%HTTX~`P(-bUpBcmjm1LB?1ev?2Ykh7K)a^HeTvCdf930iini
zZ}*c*wQ1!rA0o)hM_>|tZ&OUBtv~tV{7fhAt-sBug9WzL2evq_=Ur2m6CAHdXAPeA
zzS5BROqfz1^qj@DRP9_OQz|@*5?nj#oMcN8HhCGB_C=??54Mw9J&Zn^iVBU54i73!
z;mFkR0V*4iB$v}5h0THy57nCmYd8(_ra3LWGz}JE$Rd7{-9RE3bX9tfS|NL}O&7s?
z8}ELs@afnA^?ubS-t^nh_L4hzb`XqMctoGFs+hJ=ktt#+{&V11wMFjwqi;TAU8WDj
z{1JY<nSJ_UmvCi>lo$ZWzj$xn-S}tvE0mTN#f@G=LC45*rm}*feg85ClhuIYI*p-n
zF$7Y#M3MC}Kmrir(sr<js9lh;-8&{mGU=ohrR?%)i&;#7pKKRPlV|{viK16w&8<vh
z;K);VMZTs3Bks8dT*@?xi0N0o!Y`<sfR&8fYfhN3jaL`C&7O63PJS7%5_|a5R1<x*
zfzgk*bmM5{OwFk;$1O`%wz}~~kMQT-)~T-JRH?z}T(&5~wSvVl_tA`rgQmV3R}dps
z8B4~$$!t5}j8`z&wium|J<TVSsKkJAgR|>S_6%GME6STqaZcqn<kBOX9Vf>Bd&e!k
zM}EJQytyQk6aRtRz*2~x998+OH<~QPkVZ=xL5C2*p!42tzW$XhiWn8}OSk<g2ind!
z^^EX?1^s<{H>%~S==@DCCxRe4om0K!PrAj%oslI>j>c^zdw!CnLox%V`Kv`aGFzuk
zUSl}Qn6j6>B9!Rk3%7gcWJ+|;MGT(j*F$gcqR}n-GJNN8@k@vliAuc(C{VObm;fD<
z>$n;@1V9ey1Wb@LX!vO`^FRZ2L$zR*-ibOn=0s#wxps>ISFlt_CtfDNF;Jk$oD5R*
z1(_f7--=RBznqV^%IDkLTY(42ZML`YAHx>WPP|^O7q->CLzh+kKoO4n*^e%0qAha(
zmY!Z+Pw9WbHM3`4vGmxz9SAoY&8$LhTA6LhkGJGQl||gbC=lMVdSG#_yW)Ol$_^B9
zEAh4~_iIE6ke*=<h<unHeni4l7}%I%QJkhL;VUDu4Bj;=f9$%WN{A}BsGZ7>U#!FZ
z1|&<)>zhA1t0P<C{xJn{c17F{?}9a?gM+dYa!@coj*_R5Jh_XC)Q`mK7T^%!Ds?WB
zwf$At;S-d}^1_6JcPfZsv<fz6-}7gb>b{#s&AeM8!*$wctB-To4l`!3HYFux;=d`R
z=*%x^QbHohVb?{EvaIMoA$AN$HVX!Dei0ZCdxIt>2pum*YuUEMl%h%NVJ8dr^TO0T
z8s+VN!}Q1Kd(o|Q{r0Q~ju)TT>(f5_S3W%WGRuD@(~FIn%Re9o##9@GHcbt;jDfP<
z0&;PInE};xbHA7~gIve`*KktOu_N8KdqqNMiQ;TxhFStWYfhE-dDgJ=-qTpAb7#B1
zT>V$|BTcE(s!DFtTVZp#H;y;nrj|?9FO6g6f2AU{z91&LBBWV6AVGg16I~%w4f?hv
zax?)@*ne`BO{<Du(*3THdv<ytoU_))h4bOX3F7=lo|rXhg)fy^nOTFLKtzURKS>T{
zy8iicj{p9Ipp}2Un?T}$LNc2of$)E~_(6n|D$)(yGySTOFOMJod_aQ`F@XHvnsdND
z9)bU-bO!!O_$N%X#K~vLECR!ZNEFkw@}!f<sT7p|>qQyOF3Hv~m&Xo<gx-kg@(<P4
z)^@W_$wjMBE+Y#<5b8|^)gm{^xn9ieONVmUNlWyR(}v>^j-5vYm9UJ2FqV8I`3Ru1
z%ax&9v{lY071tk^y0bhYY%E$Qci(4Vf}f3vFjy;(Mv;P@<67!roi%!r6W{S+NXPTm
zLLLqNniE*UN76*JB}<_tQ|t*r={Kl$bj=2~sF^Nx6t`qm9UkeZtLeP`5+kQ?)?)I{
zU%&rqFTe#IRnOZ>5r@Uw(5RCOheOt;d9G`$#o3@J9d04rRD_<mdt+xXN*dh~$?ES!
ze5T%Q%K=3_Qf)80GjE!)7+%nDIHxHm$8N;v+GqqhBCT&#DlVCtT8!7mnx5}m19gLa
z$Xs8H2(WTg?H8v!Up@-;V7fLWCxLSCUowg|*tT0idmH!QKJu`pv2AE$uqagLZje~{
zQ{H)SvVA{DC+2V%h?7m(O}AU6FkYtRLF|3Rz~*YZ8w45&U;y723MESPyK;nubAVDM
z(Nr9q(O#NdYewfLefvh|OToD&4O%c!nv$Nw>js8<h&b8hd^&Z~#QaJNsM<CPHNDFP
z9y~f*6jOLe^9&)5{webAQS!PZ7d!>TJO{&%IB_v4cPer!U#Q1`qkvXKLPg73IfEy(
zo$Ejk8Hz)7-As?RjBf-~Vh(2F7RXopf6SHlU)mn)f(-K7g}X4c8>H19+*t&q%bz$#
zy?`WwRfDgxN@X9BVP>^xs~22H_G~xKkSu%20K)d+8bdU+OYd;f6VoHm|7y*Db)p}^
zf8CLJ{N0Wk>nm)fZup8Xtv#CxsZ}Ggs!tOkQ6q(`m^ObQ2o^{c-$YSm&LxU0IG#~k
zn7vFo#BnPu*b;RG*~nv*-U!qzX@fv7@L42cW|0gB{m#|JnX05rIF7#UfbHynJk*2{
z=R28fpxL@pZtI8H#0UIevY9c`FY0eG9eF0X$A-=DG3q}<4p&i7{>{xBJH>l1NmC;=
z#yUHNAM1L@r4E%5ApC#95dPKN1#r@h!2CZ+etM#D#6Oqz|Ej=;4po{Q8~+(Tw{QJ!
zVD0}xvu)pD1|A?(SmM71(RAID)JqPx$L-lv2Yin66I?e=*2j$$&a4)mE&)my>A%2J
zDr42q25?3AZ(*K~88BzmtY$@5ZSB|rKRs^UjE&MUFx??RLj}sAWiF*C%WsYWT#}&n
zbdD9{h{7|*&$74HX8i%S&E@lb@a|NCup5`tMGA~FZGxxenodAO@PrUqY8E?+a?Thv
zZ988X#GGaDku>o1mVPtN&UV3(+!<?ms%8wCQpvN~B*o?m5@xSwy{8Bg97y3SiI$|p
zs!<{a&)PdFMwciF3v061AO4K8`8+E(!i9qy<IRTGd9e7E3IBJe%H^+KZU6ivWd?a$
z@ou{mnj-PkUYg82o6|j#Tgpzn(1W&O@$#%Wq?#si<LQ$r#*>f$2?7M+uj-wMUMx_4
zs{g*?S^>3N4&(Tr@4kicO7SETNGDB7%F4?BS^TV(SDdu}GfTu5#*?(qkU~E1YB@Bc
zYJ(*eC^%12&<XY@Zc+hrD)4Lru!AYcn|DVY{zc%v9vdm3+{PxjrzKhuauX`Lu2*f3
zJ9w7@Bfqd<>`=L=Zur1NXv+Y(Fd4Kin>uBX8Md=`IBlCOv_*ha?pHb;!-|Eg5-Wb3
z56zXQ2@G)&0Fzx@GR))%4REzKj~Pdbh4B?{mHtDfpNe5V|M$fVN}T$f1N8nR^|2>2
z*2FtPuCItmB7#X-!x?Vs+EWT)RX6YX_n?f9r;5NkoP&k7kgZhnv0NLW<8Qi1EOWG(
zKS-O4Q&OXJd}44-d;Ahj)Rv3Qz{De-@g7^aq@BfNT^|J(ed!kj!ih0IT`8jq;CM)X
z5dXK5ti_@Ku@GA~%aiG>Qj;%TJG*U@`{@6<pV8<5!arRt<;B>=#>6RNRTVN2iiz!I
zz(!If^M;T(M0g6|?{T1@b;)vykZ1k!L_vMlV~AN&ng22<gD@pBRf>Q0I648tPk#8%
zXPt}eGh@=MWJ6bFcV9QHHgyTGmfw^zKuiS)cLeimw{bK(6$_`-{G`-8#>c8n|6aN1
zDQOk6)C6t>@Uv0n3`*TE#80UjDbd|)nL+c)O!j`moDsVMLqAWVYiZP>q-VU2?CG|L
zXV}ZwL}n6S`L%rLMSr86yAu@&^=WyZ(RXq*Wb{Npk*@zs2LX3P*CQvWwn3sA#T|~N
z$<`A%UlR!7$K*N<Hiz8&vozMeVLEgr#Y(toj}krv2$FbFKvGe#6>5eEHf+yif>tkV
zhJzgN#_7sUV7z+NBAaGxli{@0MOR_UZG={%t*^7gI;&cWjlrG)-6fhn^z|NDC~bd&
z4!+X~I}Z+q!2sY37(=;#xr=2G>*x3HsZ>ti|26slqK$kZ*oAuBn3a}QR@Xr&hM~sx
zVjc<IJnrJuY>5PUQDZH-e-Yr?<_8(w)J_O-s}Dj=Uf`;gT&lf9cS}{CUf5@D>in5E
zqGT)W>d^jD3JHTIZS-jJb#RUhEngDr3G?Y5)IT8P#A#V}Owh$)@h#!_U1<6(z12f<
zuY>+Q_3di-Kz2A&icOw!?*)U1`=7J@!H`-r#82my{C|z|X!IW%`_T$1@*k{l;nmQi
zUI`%m_}@R+iiRXj?3Eo$@<#{bg43sqp+^WGL@JZ6mM>q#s-gqn`+tLD!q|QG8Ky(a
zAQIWxR<`PMC%Aw?A5|83L1N$vqaQL#9xHSm&4#sIUjE=(^bI9G8ur;UuqzpllT<Cm
zpc1M)9HyGbV9*L#0`K_jvGutTN^lfAm;`;g6rJpcc7N#rApAFzN=@GCt();We1{oQ
zg;(#f*r{SZ<>f^j$pe84EwEFqvF}ZvHPMPRzewxT2=*r(FPKBG6u=>nkH`U9+ZV=1
ze`=s8Q2#E&<;<<mB9Vv(`7bLqTWx&b6bENSbgMK@Fla+%Le&7Cw?<-w2N|l<I57nw
zA^}^B%O<}YjXca^{wYm4nc%tJ`9CBkx&NHh<CKu(Kj&e!V0s>2G+Ly!<`JCaCM-Cn
zW<P7)hsXPxsQJA_!5gI~&pQbLM|^<FB2!ee^q}-vPYP>HGvk=>v95+->=+4tEA9x7
zbU>tec0)(*VhYn!`)FR)vifjZLhtio?rvW011J7|GV{~0Z*Dmi$G^W5V8~K0kcTUe
zD%g1j6QEqFZREQ5KlzdAJ0uMNu1Li(2AKa|;eVH%K8Y32>lL`w2}QOz26deYVcwDm
zKqUd+Be!Fz)i=2)qVN7ej$Q^c_wcD6L6)cX@Wk`2AObA1`L`Y2<AA1usdkLT%p>5~
zxKOLw{oX%4ecgo%Y4A~E(o@q4Ozt~MXuUDWc3Sni<&h?z=vov%t%4PV=R^H#-ItX>
zQ6lDmsJaRAE3v@p0=@q?<P!=&fh~pNfC-KIYR8N&gmetWJ0pYN(m3xr1aIGHLn5}r
zn@%wc8h9H^V_IHKw+(85pA0M%#Gi0X?O>2FY%bOIgj40&BOI=q;F4{?Az#qL*Hi8E
zz9Q_Pca&c1q>yN?$5zVIovfx6o&!CGXzCv|qVCef;oUBH$TSFy_$TTAH@3XO6C<)o
z{&TN#LDS)C#(~P{Vyk6gjDawqp%)eJ+3|lbKH`k%7v<aiTocaEj(7WJZ)FCqa83RU
z48Jl(YmQ{zS+w~mQjhCiWQztFia$$DTnEe8wY;`VNMLF3XHozFkitj+0SGW%)wE&%
zAG+QGDvoa3+Q!}8-3jjQ9^BpC-QC??6WrY;!5xBo2<{Mq1_^&RdC$4$-244CdL$jf
zDCq9mYcHA4EY)0&tht#pv>KioC_(W_mLAnyii>#{H%QXY_GW_+Ihzy@{lzuL6==_H
zQG0RC$I(+PaIrfpt|X^TZoi_-L8zPko=OKcYXY@H)&bXW8!B_DtThOTT?pp>cX`eY
zlWP064dWwy!P5dyi{)o)%k4bIp7QSB;a%gJzFU)Sl2?c057fJ7{c7+1$p!*s2;~&u
zBzwWf;w-f5lI2^i`}~E9hL{KIl6-<N$p|Z$ciamGqgOcK6&VooL+%j-3zMM0K!5@N
zit>a8t$kJ8XYXMa|F5D%Wu8^5-_ue_q^JHyH#J^Eq2|fp*UR^58NJGbPxf{LOtJ)8
z{EH1CyNTZ|yz||!-~*bxi_J14xRD8yBsHLpqT`d!59&F6P2(dF2A2$?Rs(<E+j80U
zGTQL~h;CJO&6Xs0HOCHSfUZ{t4F(rg0u%TNw%kk#4ZB0204lRmkJ~c6Y}@$!gQt^l
zc1&@KGRoN%jvfO4#-Q=9L<cE&MI}WyJil2!0u&~&-ONKE$2l}`k&vN-e^7OxBQi>(
zMu_AGS!<I|3JNK`_<Iv@-K>6Xa`$RkRE<7cqV7=1e&d6|X(`z3>oq?%&#Hu4<|+yx
zLSdewGM>FfFpt?`_T1cLbQ>Gj1iM2%4(f~eh5zG47FUw({Xzo?0%3-TcN2yFCo2D)
z+W@w-C8^ZMS==u)Go7xe8%5Ax1QOh%#F7>0^u;#zcCz_!DLvMBk@s$d+_8os!s=eH
zX;#zLH^u$*%T)TaO3oGtc4|NUY`Bu3wK6{<J&XU{!w*Ipj7G<dhe|k<7NG?tvphLO
z1Falfj8;8iv(6!H<GdK2rXaxHf)AO*V%3zLv}YZ>Tw=5XVsBpxLC1SBX=BaHtuOW%
zbj&**zCcLSWiUWpCN#_}441=9kpMya(Nl;FECmV9?3UZAhb0ajmNGSqZb8aozGljr
zCo#=fD@!&)0{KU`U2{;8lS)OVA<X(#6Rxm0erN*%E#jnE2>~XuY~oBD$5VJ@D3Qop
zal>19gz@jsKSY0Z2Wg?3P9wrE@0Tz^Eq&VnPtKIGT8ZvvB>3uDYJAv|*RMSg#m__u
zPN!MKAA}nGfyuZ#vLe=?T}wdzO~<GMiUa})71eM2F;Yy1o$edKOEa4w^ea3G)l}av
zV=WZCA_(Yn60*Q(ueIa~;kFbSzXYFPw^h&flOJFEW{A2Gbj%h-_xf6x?<BgWXMfnN
zuHY_ZurR%<Gxkt?_p@92LnW5G6m$2cnCoA(QitxZPn-Cqpnm39!dt;({OGRQc8IBT
z6;Fbr{J#15dO6^Z_KyUy(;#Y*ILs<DnV^|4M$XC4EN2f#R0JP8HP<aaoi6$u=l*W-
z=h&2G?6r*195&uQB!1B45E^2`k(dE_-c2^GrHa@QWvns>`=4w1v{7>z-6g%s>nDSz
z4T_OsV$z_JWMpJe<m8`@)v>ondcars@HF2>;l8u(VvUe2SDf({VwVl&yiU85FNn<+
znMJVRLRy{&K1RLBLHddEllM?bO5tf?p<*;DQl*N3N-@Ym&y%cMo$XP;>voA`+shu0
zkuYsouzr%NE@;l+o#ukx8jGN#ia?;{z0D=Wv*z|t+5Nyw7(QBoJN(;~5c3d6=(Xz`
zs6(Q^L8omUzM8#S{Iw(z_#kO%ZeIU+<PI)jH`CDeXGfD6_$YSPxb1UA@^&VWNJP>Q
zG*;$XCM**yGeu4C*Q70m`C-#7!DJVBi-!DI^rSBu?3P9+sN+Q$2%d71%DCO-9w!Am
z@wr^p8w6Y}D3iFb`k$whHS7pSq<xl6s+wk3{PLITwUammRz4b7Z7PHkw1;5V_Ivh4
z{)r)kzf2D(hKlDiF|Oj<YCDYErH<si)IwPt3-p<?&?OXHOSadKoon-SHukOwk0(1%
zL!HKL&yXF654eKy3h0*~g^7*Pp_tL)@jz;I%xJUx)8@3f_vubPF0cSED^0Orfx{b#
zyI^2Xj7A0(eYlpM^tgfLYr}6EC=u$;t3DdqOzB#+A69VFIxW0K_PWu;Iwd|+38g#^
zDVbW{+SB^j-p*Pj3pD!Yw^3|xkMSaG0kOxPPkI(E>an&ty~PXNt&d|tiV&^$!x>Tc
z-z8RRosl(|WQZjLp(27%2<8w5SY%`ux#!gGtRJSu&7xoIaz7#Se9&hv->la?^iIe_
zl}#K+VE%kTcJqYLstj#LvCSWY>tPv(zR$Mf*PmNWcGd8WZ#Qu-3Y7bo)gPgWKVLuw
z$C-S3lAxdQ2MR3Lt9d>9FF5XuBf{Ma!IRbI&5PJ+lcmj`v|8kDb#C25;R}DRlvVS2
ztR;H>a!)K~wA;$^Sw|H5yyCzSgwjJTO?iU}_qN6bwVTQ!Ia%85d;=mXjsE-*g_Rpl
zV^O$4XLoX;C3g=Vgd$Q%b)RC`Vdpdw(Yp$xvdqW2FhZ11HhTfzb0JiXx7y|C!>gp!
z$GDY8ZR{+kesgO5*6v{enJc!$XCoD~c{fvg>RPM1Dhk;>zhOVnfXMtnDV@l@FA!cY
zGLPZMzTd}9DJJe(_`ixL3B<M>C)MC<AoB(Ik%x18m+_=8Fjx|RfQ>q0@QAUL>Y7jB
zsC}gk?KfgZV9vpx8cpoy`4p3S=|q?B@Lc=Ei|<gaycfqdBTRCD$r#}v*rH|a5Vj>*
zXxB5y_=Q|m;8AgZ${Tk?&SOmuMG}^Z1Oi)|GM~LXz#s}o1~<<ILtRv@Js*!QUVY)3
z#<CYrO6rmzeQ!0~$z}B5wjYr!K8W%)F#?S_hMB>vz{Z#kTZx3g?okvM!cvR1cph1b
z0c3lpi~tc|vPe(KJ1CkY9N$23M=IUN07Fn2b&!@^sg4r@vYS9wp=_keX0gXgyHT_e
z+&N{#SLGVFkOMv5qvf!8PZbh=E>xRSRH%%LxF1HNX-g*fBYe&mhzhs(?V##Ax(M#e
z1d0Hi%bwr!h;Cq2&K+^O@NkiOTVXznPsW|o`avvHs^Mii@-w=fOCx;J1P8k~T+~h6
zv;(x|?az037&V*uvCXg7=pj%0h$(Txlv}FY#ka6AG9wGeK^;yoJ1hC2j|i!3K63N7
zlFjHJNO}jGMt@9%XJ8wVN$+ITmopA-j!JHtz`$;?v%wub_UuF|uQc@sIDxKRj5ed=
zqC!B#Wx>katIw!j<m2I}lw2sO(IKi5c*bT9OiGl~b;UT4&giWc!y-amjE~S?60Ww~
z92y%3gSQr3`6-1beEjkhb+bIwWr4Nqln@*|aoh?%-aXUPzERtUpC-R;g>_>u7)gy3
z>Nzo%Mh?z&l@AyHiw1X^O$e?rvrX~qXh6ahSwF4bw>1WjWT^OnFEvYff!;i{S=I(O
zX+aH66+1T;N?OKk#hxvSS24bCgZW0F*@R_;;Pjex{Gou4ELU&#>boM{u$5Xs%v7pK
z#3y2kSn$V)Jz3mA+)&RSkV>d_m=q3}HJ)_~$}}BEf=>@0%9GlZ7J@RDZFf+fhm((=
zRE3tyod>V7|A2p5BRZ+q3Tm;IvSKU{ZzZsP{*oYji$}pjM+p|(E3ia4p;mM!u3T;m
zUMZ_vxe!BtpH$`OvoxSaN5C`m*!596bNQe#qcKK7eA(}|WndHXQyMcV)`y~^v&t$o
zOrtk`xlnPDl2E1EpP^8yukt<NaN$>mK}YAzE)9qzi)b*)of;da=5mU`;rXG$cJX<0
z`%X?tB}{h*u^JhXKQ)xR3hGgc#ZrpF2*AJ1+S%9!xpWPvy#z>4O{qwZM4@KONrbUk
zW2#&ff8WD>t7+Sd98HOE`>lIJBTVD%B_qR!8p)?<bx=a2K-<dYd%W`N&XZR37at$@
z87z81$rg7w3j;9<dV-suHy5ILj&y8&oLCt^tOSBCl2MoLa-50gp~3QboMu;MVjQC$
zOIZbRhlW)iYw@Cm5JwX<w*#h@hx1*Q_O94VpD)7)O1S{C2J}%dn1Ljq*ybcc>Fs!9
zA%U~mYtR(7d8(pyNg3r3Z*7lE&h2u+dMS}m$fRI?T-LRTe`<S*ljP>DQS76)bp2Z|
z7K)k;9HaML)lt3N&GdrQv|7Xpc@I{0&^KSEP@)-!&U-5df>!dhDLwP2Uh7}xv~IFB
zli9un=2nrC{rq4P-2FRphS$A#mH6btWipr!a+C3Auk^+<=%39KMpI>B!8i~Sgg<}7
zsbRbX+wNb#nzfi(x1Razt;fH@z-LzK$+3|0)`9=vhlm~R8Sg%=vz*1r0QdAIsywNs
zm`EZQT@Dsf#x*T`)1ZF%F4)3ba@qLmwE6pdh(Wt<P31j}KZ20)NXj`@EXTO)XRRx{
z=Q6PS=bPiADdVvQeaZN(E{)3+PCJ2E9VwpJvz>@sht7-N9o<h|r`pFpv@ToM!D}C!
zdNJBZW?fUeQ^#<s_-74mJ2tG&O5P<Q5M<GQPbO7x|E(gtBZ_Ew6&@(44;<ViUz0d!
zO1Rh9uxkgm1Zd`zKP>%Mv)hh(rFPXg(M=uD1BbK=f#I{14Va7jZ1Ys;OBLh3H^1J(
z@`vXbe|Cg4jP-{ooqZ8dq9UOrfB-^@BSNh@R15~_a{q1If`F<420kcMi!F8|;cj5&
zy8x{QH?TK?a}Znw6l!o#0p~GQwhe+2k6gKV2m6KssREJzr_v-{)4>9uXT{ZA-yd4{
z`Z_<x21AKDi8v{{BQ6UusrGfsd)`cE!KUT%u-$OAayBC^TY8v=@k#qzVIg3AJAQk_
zBR7Z4Oc7HuGXbkV-ogFTAv4EaN?usX7>Lwy!?V7t^;SvUbwlAK0Q+S!%DktyM*5lQ
zJUznf11`3vC33q7xGBK|OHg*IYfwjL;t^3#L9cJjMgCjC8(;Nm?NGVZoNCi^rPiGq
zp|^u`hi^+RcIvQ=D-*<|fpi6+<4-S4PIi8-`U1}bS5@Yzs4?~86;08Vi)6jXz5Hl#
zKbE`nV8}b#`MR49{k@~$m+VM^<1ckh8Vj`N0zb$4_`t%gDT7{ZL^*lZ(N|E<y2?)O
zS4$AmMULh%O>ugDxV!l$iqe>!hZt^PQHQ=RS#*43$Nc8GM<EZ8TjVANZYGl^^|&^9
zwRQc`VWPJ&P2`w}g72n>-ne?JS0U2-VS#rUn9nN*>jFVSQR!bQnN>|(aFg1z&yml&
zv~;6j?xGw=GBXo}QR>FR1Hw?NmP(j8&lnrDrU(vzsvqJhOesN}7PqCY5dk$Cu#Evc
z?nAZ^AJr1T0K}%s#A9#l_vkbgAihaQ7lDYMFzb&>DxPHt@TkBsHesqo36$ke26UL>
zFsn&rQm&Z+PXP}#nwn&QvNLu`+DW*>>k%R>27?|HT_iy4tHpT}b@@q6Em5=AUgI^X
zu(UGWOf3Ws>RA1Lz3<L)Rnu|TD1kwLqu$*}1pgjq<1ZE8$$e!Ba7ne1IQL!+M8#jt
zp}6jnprm+OsL6mPH|Y&bD^Y@P{%dx!)mY)9|HZJj>TMUxo~+~2j^Q@(d24?tJTlfi
z%=`Snh=O(4=VLKjp2@4HxuI?sk5KhM{fK!xjjy5PCYRoyFxl_;xCrD`$$G|LE(;Ya
z9|gztDq5W7Y}eUtZnJ}%it%%M203DWU!Gi-YGy+QB+SeVK7C%hlHyR6rJESL8Zl|b
zo70KDCv+hpritmW-hA1)F@R5wcjxIAwyhGSqaiTNB8=A;a`Gdh3z(fyye#u&iU@2A
z*tC>GycEL3ri*vW8v>tb=v<<dEG?4D=MN0}z20F;=||H-8s_Ewc2;~4;JEv$x#M3V
z9#7Dra#mPaB2=@_MR{;@&y@3%Qa8KiOi1Iq=a6>IOqwQ`+#&Q+_L-%atX#M+uZgjH
zouH?TZ5`1ZbFa6z@7l&Ab$sEr=bO-6nE(qb6S8vgXQ;LK8&0IwJg?In!o~3R*-S0`
zM#}^pk&5Q0K>Rl<SAh;UM;5F~PRH?4<D1JPqeH=YiRp&Rvjq0fN)=VuOAQxlub$X`
z38(NqeGm`sSldTy2M$7+V3Gcf{;sFyZ*(V4-H)Aj-g|HfO#?>KB+1aur9HoFL+vXT
zJx+W*?UA-4k)fcLd3--*X5N&^YURM((I98>x}gVW6iM=nrnsdjE6sgN{RBB+r#rIB
z%fs@`);vz`w;rgbi+Yz1br3=wNtz_@AdXr1U^%SLi4FF*Tt)0|O7&Q)8zuQHfdeaz
zAj5<Ng2l4Enmo5Gcb%Gqxt<TtoJ=+%%%_%!f4-g1a$jsuJ%4kwg;wq)Y_%*_j>00I
zVwhXv^|3(c!0Er7>vmK`j*2`qIW?!!!Z1Nx-A%^c(@It4Ka_DgyH(?-_YU&H++8?%
zDNxwqyB{K`;GsJbKgn$7(Vcjm(iQ#S`B2uHq|6Lma%csKRB-U|=yG04JxDG@5_L&Z
z2jzlACK4_$^z4^mxFY8bns@=W(C;>*78vHcwnZmcL$CEViMF!d0Z12BpPxN$ea%m*
zA0c3Z#l*Gx1>I%U^GJ=!qAOYE@5jb!>N2<@`{PTQL4-KD8-!L#*)#lnsfrZ&Txkel
zl`Fwte}!45>edX)!j&SmG{qO7WmaWu2rSw-9vHQiCpo$!+<pGx^2uuveWJXCT)TDg
zmVxC{96T%r2(?SK*57#vf-W?0HgmpBB(^{C#b5OkUTcJlqaE@NjF7p!je)hcCO}hI
z`#V3<fwJPOc%)d=gKDpFseo$hE|SMVo{gAl^Jm4232t||vhTm#oM*pY|M?-yBUb&0
zkjwIjN$%?QX;w=wp*jmz*8*<A0%gj=fimA4J~LPLaOjDrcVg}02<m8HqEnCM$mXEn
zthu+-<!u=ot%2)Iq^B~G`|7ImC-jkbjNF^Dj&)+wiK02KP!;{2GWyM;|Fvj1bF6*-
z9p|dm!sdB*rfj=O?uCb!{o5U6P>-{KUlS9}jfQ^T#Z6|n7I8o2O+Y5`8vA_>^xuKP
z*h0HcD-K|byd<keL;;B2@nO(ybjFDj=@(eJd2!jSS#)azRP&@OnE?`q+^uvAEe9Ws
zB2*a-NqsPq{UYu5YzLoi_oMHjQi|RVC&Sh4zrR;@(8z}V)-UG#Y}0lfuWn#^JQj9!
zA=~UFluP!w<oLj|@8;Y?0v5$=yo0vD^Df;dU;>G<NHd(U0Dw!t3Czl#1b4x|$Fr`;
zu0{dZJiGh3!-r1Ze!*6Rnh1!D>EoEP={m*J+oak!0P%)P&p)GV)=B6309K7s9ko?J
zcQo%!u))FRisW+Brsv+>$ou$oQqpv(z12pjAXLbZp46ON%1a=A9AAH`<)Kjm1t7fo
zPx6Vey{eSW@t;Xua`5cmp*bW-^53k{dMz{Z_eT3wuAdbn7b#c}3;2E~28chjc8aN?
zmTq0;N3f)Jup*i<YEY#V3@zr6vM35#MwtWQ6u$Ln_v3k6ragUQUaR^YJ?Jf?*o)Oq
zzCo(XkzJCwnnft!3Bpv+Q^SMQUO3yD4qXRq&tY5-A}6I(?ccswUh_O8q!}V>8t$++
zCSbKo!jNn@IKcILf4L~}cw{|+3i?!;0S>ygcw_0bnwXMu)hD;LmDx6d@wyi=717gN
z{dVH={IG^T{R}`T<8IX%J-6%6BUR&<K|lw>1aoste!&$L83sxNu6LN(fj<;kPpZqP
zdAxK+9ws%60{;1ghey8UNW-8Y+yqFGgAdnV#?5jh<M3O#^^|4Y3zeeX<k7=y+7}W`
z7QsD4BgiWLPJpCOTWT46dPhzX#n6niOIoooq7Jlh{3BoEJzR(n&Ki}7b{&o1emxiR
z&_myb2K%cj6_5Ed#$c({jc^d_@RFYVDM^dlN*`|u?F8e1`z5;5lrg)gxhU<MLLe?E
z#zUK~!nSysnv7cp?Rx0PU#s~{y_*t*!-|`exqo-|>(e$Xbhf5@zSSBJ{q)jD+ZjOC
z%zxbH@3haGGdaD-dQ6F`nPej+5J?qV8WvN+lOE2m&D0`@H~l*&Pz_e)Vc4VgUMtnC
z5Z^U*lS(Cq(mG;PN~2Q6wxw&1iH;5c+kg^8QD>o{Qeog=tB`I2FctnjVL4qX%`5%7
zYs<)RE`r9a$tt%_dc706JWFm7$>1uWO#gqbB!xP$I-^9jdH^8+<{=uE&j#7qge$Rh
z%fF)}n%pt2WwIYCKn7I*@oL{Y!=zM2u;9pB#4bVow{S>_iV>A+BvsnnWtaw8jiGW5
z*XAQo9-+Qs6z+=P@$bd<FCm0M>Sl-?xQE-_{WFnUVIC|b9!x)}4Ir1z=zMc2BT(%2
z4eve8!y6K&9fC8W=S)c{h}vJ%M<wafd)kn@uwNa(Y%lB)d&+>_d`>dQeKgZxrdiqi
z8C|2xO864xqm@M$7W(#+(8EgWF;SS{dxYiO&f}`61Vs@OGwJ}T64khJLUElf0M2o+
zpOIYfR{xn&^*w^a(Y^wsdDj3(-7&nP2X%MT{dnuJJ<$Zj4m<4GN4fX22VRVxUqGnT
zy&-}|dc8bm&xC%6Xgntd7axS#gE+o_RpFi1mt)V~u6j3(Q+euxqWZe8iB+$IgngkA
ze;(Q9Nrm~vh~@cqk8GEZ)H<PXx8$0=>o{N$Dx1?5-DedqwZF6SRDV>A(Wl8wSe+Pi
za#(V7_Z2k;iE}2VDQ#j<qJ~ySQ1_7^IDh*5#LfyvEAj!G9wr<k;ag(IoO}iJ^tXIc
z@9K2|M@}h@QPg%P--YTwK6HU?bhY;y6&w#J?VO<;y0#T}P2=kv_s&N+<(W3zmb|(7
zC2Z)##JTHO?Wp#1ZTKioTVG+B&b8b@I5YJP1|e`la9Qvp+QBb+JiNQxIC4K;JVuME
zkzBuc?f$-dNnL0%h8aM=rHHbd9xr`dCLvS}*SrkxO*aVEJdx<dVmd_h5}Wzh`;pVJ
zO|Z_<b{T?{Do(scU+yOiqA}&BINyqdc$8VUj`FU8?^>VRmgPOHzfa-H=!3}SmsN9z
z(8QnazZLG>W{uBAQ<EI*_{K?IOG4PUNc?wYlCcYT9=A)Mx6#$Mu2-%N4K}`Qqh4}n
zR;)N$6Tckn%Q<ET1RI`6y)`PwILITv8qy?%b(UX<+(xtseF}M_{Wcqt54}FReK6^`
zTzXj>smItv^vfWWpewcRd5tO8HE%d^(k(k6^Q=C3T`>NF+FjZ)74o|p_GPj1O}nMH
zO8tvx;veYZw~r<k$)j|Jpc^!L)9sQU@i8Om=_;XIc3_iNfg~GID7uM4Y^FS6*T8|z
zK^yr7X(nCAKziN8(s>a}Pe^6QaSiI^wFnH_JCK*uZ|zdEnlu<Gv=DPuU_M3WY1X5(
zgmIj*lWDcTQyy@n3f^xmLI3q+yv=9gNAbRErRAa6ry`HyCc@TXD}oj$w`?4q#vyVS
z0?P7`*f~?Ll#UaDgS91Zvum{G^24ADY&K8p;P~e371s8%TpJ`F#)I7ovr4?-fdMN?
z-PlnYLcWZPXo9gk^Ua@|Cx*myFQmbpc~T^kR^}`f`<OS(#PAlTI{@=wWxQZgTHRK^
zw?;5E9vfQxs+D35nb!|^t2sw=BXb6n3T5P;`D>R{r=*WZN;Sk0@#)4r2|vZJ%V;e?
z!q^z|t^y%z3xBblf#I)o@N~IL*ipB8BHs&0Blr3Zxz?PDZ<$-v<+PtodUnPl_Ydr`
z!KPt|G*Z5@BA_*rLX@hR+n!A<sWqs{s?$~nFA`<m@lUgNxqMive;SePkzx0wI^?NK
zUs=(Yj(0)TJiG>JbKn}hAY3o8Rp;`tfO^13B9~r2&QD+$`?zG}!K%sHd@wM%NQM+N
zdWb;g(|HEZZX>1SUi9TVtP4j|Ne!Mf2cXTYW8c$CchkY+b%A<Qn+|#)niutbb<-<F
zk8%IBQ3bjo(f;>WjiaB6v~norU{<bF|BBSSuYXFC_SJ+3FESk7`x9Zbk{+_mbV^2g
z(v&}t%He?$%)u7X0KGa4^PXV0=0BT4iEH2gM|bfLnS}<DKKUe9osR@;CZu@j;lBMi
zHk%r<Zqs5C;>lYxmTgL71*p31JTw8iGcN<H5?F2AI|61H9;@YArQ&An`tOI``k2aT
zP_ErrGZm2)<Fw-!SLf-6qt-lP)<jp4Y>Bt8_eL`!u?^atw++SLtTS`>AW?<GV9j^X
zOo`uFNuXMY?S2RCFZQ*?T{jwg?EC9{xSH!q&~JTOU?kXE%_-!cY-uE2tc0~w6tG#X
zf0jcA1>}8<))-4xhU%dIRtX7%(gBo5z|4<xPn5Sa84?tLw!G_1fFfB7`AX!qIOYQM
zs3b}DktaF8*~sW;RV4tT)PFZk{@8ZbDTsj4R#j0#W@e4?07%L~mmUz3zsrf4!8gDQ
zHN&gPi-j%-jsb{(x`9MBsJi6ma4(wV+zr5fhC_{}1a5Ed;w6Mh8JWqX+#K%(k62qi
zTf(l}5p<+<9*_JzD7&U%k8?Kuu^Ucf)D8$P5)zm^I}<>Yj4CoUHc}B~TjMga5b3(O
z@%1IOf2Q*|<j$m0kzf8-HO;q^T6-nS5b(uR%6#(b9dlG!wc13^iUmrr;ZUldh@>(j
zV>A_3$K%XM#u3BglF*tony&MUDQvV!!ZecK%=FkJ`Z2>;MJ#a~G`Rgl1H>tkY1Q!Z
zlc}bkhH9xhdq$4#jF(6AxIn`nTg0Vh(_uGgNIq1cjD#na8j;h+1dMt#tM(3h1k7Fk
z+|t>kvEsCFrg6~8>1vQ9>)9SZbR>QA$a~8+j3-)*4DD2lgF<KE$Z~N@31Ac>j%&H3
zy+rplB8H>NPBw?sSc{U1ah^I5uVdrChwYa?wthnJ+SiX%{Nuyx>w=`=nx;0Q!(wUe
z;B@H^;Q}v<x>sifV*I_jwVL(ZlZLQdIEGc0=3t^CNX=AN3v?Q<bzKS90lHff<74~*
z%^rfwnfvS?eUo71Od)NfBd0o)4<>q&D&q7pB154mIuv{RwYiS)X2!%4NxNE_qUy3?
z{WODg)YUL_lXPGo)bH#%q10oQsnur}zkOCNqn)r2#+QGlap<cnw#qMJl;)B|UjEYJ
zN%^Gp<ZQKMJVea5yD(}4m)Oq8pFE$IVcmnv3byoNcvInMMIUEUqK-1*ZMKd&rjf1{
zN@p~F?`(@=y~(CqoUcNEtN`;l28kJ|F##vxMB)4(Mw9=6V=2B#H>I1PUUkF-DyRXp
z#<hY3mJz((@DLrAIgDLG12dD-5{wExd`vkFEo$WyErzwqMM)wf-A!HA#$qwUT~DR#
zshRVZvyPrVcm7adqIhvGZs+6zKh1G>D)=zk7H36MPdeVDQ4h3s`2NITrP6WCE~HJ{
zj-k_P(+7rW3_5@r49YU>D=EUHKN%PaIgQ$FS5c)&2{(mE)5qX>@oaXvHywQZY1=V4
zCf5zX4G=c0@GBcjibvuU^FZ_*zeP%3G>V->iI*bX-oc(*e6uN8YHI`JC?Dg`%)&JI
zHguZ!nW1}o*P4)Zg&R>A^6*#^Sm^C7WDmPUXNapkf_^nJ5RGvsY{>rfnH$Wx1@8xl
z+9|9+@}e+4!v1Gr<M6l6N?eI-{wrUo`{RI!ku`=cIt9W8Am_ZMx5FY@a+;>C=BniR
zHs9(dAD`li1v3pY*G}OiwwN3LjDB%oTLxeD8LL-2+wPVu4Rov08q}8KLcsbO>@|P^
zo?d|vE?dk-LiHE6X0RvJ@AWj7FC;`;cN#L$nDm_PLd<Qm+i;GSyU~ia7*^>qtsW3j
zxw-X<G5CfsDMDe%#rQAjtq1QgG32|%C6xk%F7xi;{#!LTz_p=vf6v(*4@!#Klxoi+
zmZNYaFIME+|HR&tS2UE|q;w!g2#mctdtOWiy|vq;PfF>E&1!~tQ$p};R<Lmiq`Tba
zolE$>;`F}$RRf1FHix5~MU{mD!~Dn{4SipRRL%SriCk7say*mJnW7*8#b%RJG%o&s
zMB*(#ByRfzl;Z&+ahBJAMB=sJ-<11N3oocwJhuJ7>a`!Cl8kY0Gf6k*U$Q&_Awc7q
zl@{EW__Ycy`QNx9#(&|4a@r_>9pD|E2kug4%W2<9!%;I$iO|hO@#5LaQb_>y@I<vL
z&C=&xB{lK*885qQFyRWE{hNv{+jTu$00!Jqjwa}sgd0T7`0jeKAeyB#A~C<z2KWDv
zr_NaXQ}hNq=l^2_0z&qW#;D1V`}WYZ@VuHDui%NmpvULta<DwVH?$u5h9SWYVLO?d
z-xW}$D^X+s%8+oC(q$|6v*t$7Hj#hrqzIC!YXD%pqbqqM=M2k=&l7NIyrOGmR@Ma}
z=_qQfjPXtbFO6BkZ~Du=NzZD?_mO19KPkV0kU)%%3^|3wiA@3+(^-G~2h(lo8wdD4
zL)m8zHC+wM$kxExNsR^0g2&M>iRDjjHgmdvl2LN|apb~K2B3-U5<vLrDuiHG#E!v9
zO7)m1lW<I@c#iU1XSnid(v!>-uX-LB6L*5?nuze^R|OkeZB>JGGj-{IH$NY234MaR
z;rRW*Mf&6V%&%#sP<f-Ebrt0gw4bIzd2I!!$j2M0%J)+e7pT{1#ZiubOZTb&ey|Z*
z`NTw+oLBO?UaL#xsU2*pv<9u1pz~q_LtA?qAx4`<U#4Qebc~fDb|V^Fi$`64Ox~xt
zKeZI!v6`RhU-E(r#+RQ8GiN9{FM-}td_77b!K!VLO|1M?8Ak$D6Lx{PBR<}Ue4;Bx
zUt_%r&DZR1Gv{X6K&}_jbZu%L%DNtHbWXWr=H<6OKcV$ivcI^H)fmfEu#iXC_OzD!
z&h`2rI%U>8i~Mq$t5t@DL*Uc`gIZ^lj>^qj^ftY6o_aP%o4b7YZ&80DM=2Yw&9jvY
zbiyBmXavp#VhVYT&&Q{O^(PKLl+>+FrXWF(@xSsyLwxE$F-Y^{1uby0P+pFOl?7o=
zrI8IQNfYfUqo9d((HgeVhOPWu)j6=<SCg9JvPdiiuD|!BEV)o3-mKu@?mDt~MZXQw
zE5nS9ePhS)^z`-kTic_W(U!w~W9@*Xi^wMNC8)Rj*)#}LWQs}-z(DJwWs;vmUJ9mC
z+FFNQy?S})H7Eu{boEz-S{?nWM)&6zhF_sq;(f++1dNqF(_&c_)E0q#DH24a6aaHB
z7-FD97e-z_>#A``l3RGl=jCr+j}IyyviPAu=>A(QOFF9=4Pc)KWzn`n0`O{9)@R43
z43)>@CxK9D7{mKC-1-j4qwr)jBkM#M^&#}|&@y-BH>yLB06ng_OJgqPzcQK)zEUAD
zl=r$j1*+oqZbi}!0T{x3mA<2hW({Iv8H}@_3}Bvr39J{E52-5Zf7u(r&<RrhGDM$C
z#d8&f%ig|aGiu@70jdWA(oujx`G>V|bixpfQ2CDVuSLg`l0jOmb1`Wl#$S429iA_s
zmj)19n&fk-=Jx=XIS*4<+yllDKZsnsB?gsxhQ8id-->fdm{j+kv&#U<kXandNS_7d
zAM%r5Mdb7fr7D$bF-T_tf#PlIU;l4s3^RWg2w8jiLzd&d{ojP|S{PG>{ajmG5EJh|
z@;yA4N5d!RRJ!~YKJJ9QA^u~cIFDhO2;1akQmzsC2pF&}r!99T)54Q}E#gyrNTz;R
z2o#7vWbDt_Mlpm@2&T)ME?*9pc%FCki-^QpJ?rGzOi#p(MaV8tO4S>XvwA7{iWqxP
zQq1z=LSiBc5MEI%HdqHZXQDwf)17g02{P$AMfIY+c{Xm@Jb3nV%AHPk3nrbAYPHgo
zo}#h+tup<6TwTGx7OQ$NDXwjaIYQj|<$2HPeYNm#q}lcf$TiqLeEM;~^Sm%enZU>(
z5gLz$c-VPtlWl+nJ}-d3<*AQMfUM1O$BO=8RSUfBS8}>n$#ud{%$FG0{f#p^jN0aS
zt4LYsn>>3bPY4?L(-m^kImRlb;p{qN{iCj6S9I)eFtL+mvN8$l4GtUncJh4g$P>1q
ziX(+4WWq26WCL2yIMkE~6!PjN`qbpjx7!i%lS_>a;4xqyRu1A3vr*@i36Iav4_#NS
zkaO$N62uqxR#n$K49e?~YpV-KKx#$ABI0rKD@-lnaY``$Lr%VVYBzs^lkaxdws#VX
zEQO<>Mx@HFN)OBml#M<^k`8sV%&#Bo?`1qkY!tAh3`WQn@Nqtn^S$`_GbfJPaY6ip
z%KuA>nko)LSLHzRvBH|NFo9l`h#)^M`!<(h*_#t7G%W<cC#;><0Sg2`&zAKRV3GnI
z&&kC|N%IvmJxyK3ysE5@1=bT#A(^VsV@j7SU^MrcxZx<aKX>xR7&Y|Z5!EarsdDEr
z0xA@MHNl5G%aPIl)0s^;yC$nrEa>&RJKTy?<nxX6qvhfKZPCaBM10VwQ8NIPeyMEj
z+#eSC9n0>Z*Byla!0~{;*RD&oPFL1njEIr`5uiY<s)=~V89)FcGCkCmVOBn2lmCkc
zl`La8_~N=t9R3hnLGiTHs>Ph6|2h&xp48fQ=TntU4slLAa`1AAZ-#HWk50MkIrr>=
z>%8-A72K`sOJ8X`LDae(bF+X-OkqkCQ&bnVs>OX1L22(oqEHrFIf`cgw`U<Io7Rn-
z{RO81W4put@J!VIGYs^n_OQtPEmS>UKl1xIqEys7Dz0_qcd;N#YX!TH^i)II4yL4d
zLPCDey~Iz%x?czF^0-=EuS9>M^po5tQnz%t>!S)8a|oBs!k}4Xt*q@fx~7+wb`a?v
zV3tg^1r*|$QGZlej{jgtE>#X`%ilfK8f4l-i61}|NRNyID~c@l-lO)@h+v-t6Jpgh
z1p=0!pi#_#flDR8nn!Q89IIWwHL)Zi)DfCgY_#^}&!bh7mi;BF&b>4zz(*)E>k+0S
z24)f<%kVb8{5e{@%0s!=9V%bfLtB<((S>VK_a?mxeku?L(c$&!!M;oIV{_{>S7$v=
zf6OAjHOUW|Y{7UoA=-kTbU|-;7cSQ!#1|Z@*rh`v&`t0H5}+|nalO?5G@KmPT4GZ~
zC5ZQRJiuC_Ov(BdCj=!G6MrllJS_eDQr$_b-sabh^sklqYvkOxQR7po;Crf}eEjB7
z^>V?pM*Ut*mr1}WQe_a(2Vx{#4Ve8MEflosw+8kgAqhH92<(LZ1=IcmwA1m3TsWA)
zt`dItMY00=B9Z(*e32Yr{<RqHKFaHZhxb{)<&M`gHO8jeo_?EhZZkBgl7}L|23FZ%
z|EAhJ^b)go5V_Q~(=Uw!_d&vhEU>1LTyuPDK2Tr0xQNZT`nJ<Ae3!uCa`~k+o0T8k
zR|!e2c_KWw&&#{pdbaCWg<07`8R)I=A^1IC37M(<gUr%~V|;Hjg-FKnEz;q)$eZX9
za;vOH-5!ycV_Ke0B_y%@xT82CEn91%%u5BUA4Z4WdWAt3t1g;B9v>L{r)0jEi;O~g
zb&@$<c=W^Agoslhp@jv^Q%;hJb|2Xg|7l4!Y-Qu-2++FYO_Hv4Gse|+P<)L<x?fNb
z8dk(co~7hS;q9U*-WYgE^Vpws=h}tpQX$%GF}T(>Ml6*L_VMqcKQ}<|i>x1Wq=m3W
z#v*AW>T-2;tQyG=kBm;Wp&1n;o6cvsPun=ci+A%c;NQB);Kk*%PdHdY#-4WtNp<XA
zZf{Ay!p7j*PYw{0S4yzlZ*U627T+P&1IUSRSpOC<xy=yCx#!(algDERQM<OwfEgLm
z)q6uG-dNTJuFq#p$=xqh;lnmD*}fahw7WjG(G&Ep0~EgQQBm=EeecN6eOe_Il@wnY
z)DOAZj_R8^pyYV;4-a;3DZN>tGo|ny51#!6vmd|~AxopQBu}H;s75lx#ZWAA0v9u3
zDMt5&gx12m-W)oZ)X?xn_xr9<NU?o){punS6s(VzBi!un&uoATC|vj=JWUl4RVBiR
zA%BtquXLa5f^x+F<tzkHsIL(!Wb%EF^7O+nL}B6WeJ92K+Fx<L16!2Z<EJ_xVeIRw
zAwg`miYXLpZT3JRMH40^fcH}Y(thfYz%PK1Xs?K?FWHr%LC7derwBv8fAJj~A!(-5
zZ=>`7&{iu7Fxg6zNPngaw~>pV0Ri-%z71eaI)&_SMj_<Nsc3MGg^$jL%q^H*X1&1h
znDG^444{Bwp#(dI!AtPMiU3#UfUxLP!%ok)?wk>58hUB$6OCb1h0KjXc(NcEbRC?}
z6jI4L?Bcz|9aI@ta^0V%Vymh$;36{FH4E+pjRlLQBN6n((C8UMh6Y5-$&=i83FE0g
zCy5h;NS6ySI%A{rS|z!@Mtd&MIbeB`4WD{x#tI}nkQzqaYR>DslN8HiRZsV#sQBKU
zGXT;$J<tzP4FDT3gB~d__W$>L+wBz^?2yagA%-mgWy(T2jYY4A0`Z@#oU+;$6lLB@
zarjTsp9mEW$R9DX6Lb>l(!ixYf>FZ{@Y8`H%a%2L_tU|&I?3X&6e*Mk1#C9&pgE7o
zU)lqJs@4A>5Q}@S(Ed#b1Kn-P@_WUcOZXaB34jn-bSwmQ`gl5BtEBF&)xT-ke>@O_
z{>uY#*Wwx;I8A*wp*o2e|1io>aEptI)hPeYkzuL#)w&4(KsE&&d-LJRwRXLLA#1p4
z%H*D<$X(=xiPxYoTh>gt-jGrlSkp;lWl<wY0>bBOls+~Ia)`5N!cidn^!p_O8E{8c
z>)x<01f$M92DY_#{IfSyhW;rpQuE&TdZ*!$53Mfs4^gdl$oa!W40pq#oZB)fZbBKk
zX;f&@;$+Fv6lmj}FR%^|a6DR2z8V#urA!1rlZr~FQPBI|juJj!8_`O?2j!rD#D2h`
z@{ReIo0pgVx6H(t9F8F7Pjdd9kY^hg9^G3C)HR@`qBK0e;YxLi8F+8=@7`OH!1ooZ
zc-*dWodmL?0?;1CdJf$CqIi22u@A_NAwU``PTY9&6^;(_GR(FA{lI!(1VGi$t-~4M
zd66K(AT!{>eUx{zkKs7O16U<rCv7O21vbkj@ae8|Y~&Dm!GVgkhqYA0&OZ%nm{7VY
zS{);(?Eo|g5$yeRARxk;Ci`_ccD1c4bdHH_A11+o3abr|N8Y%Si`-5Bl;m^Y`{FGE
z>IS~Ykl-;&`rA%+jQzS(;+L)Li?jvV${r5uC)$NyACb@jCnT9&T%^3(&av$jws6>V
z0STf@Ki_%w5Fm;V`fneyf1*XVnW1wd!%o^WBnrDsR9F+Fa0V}E5G5=n@RtJ+zoTe9
zfSUzmfPm}*{v9L=QlzE+4)c8D1|3pBL!F8Qr2s)OOQC>8Doiqg0`X4KO1J%0q7wEu
z99Th7ODnWgCR6UTA%3MquZB+c3Tu@nBYmISfJ3sFlJhtZw;Wagz4x%*eHv8O-N1nz
zaXo2sL5en0dq{rZ`%N+4^kKY7w?pgWmbc!_>F*lN1T=oJ;auA@jK=d-zG;fIHk9Er
ziq_&VMMu^!<?ovak-fR~aK0y}-?M9@`7FCQW-u8K`&vx$d+MCq<pnb$%>cEQ17i1p
zG!irn2)+C)|5RI&@jGn(zxQ;;?>|V_Ea*Lw0r6DpBTaK@*A>=BktAT#&Ab>m>Qzoj
zuc?C+mM&)K8~!i7;#TOh-2qyVF$l<eVEuP&1yNF8qIVXujZ8m=cPMZ2RKv?)7K;-H
zvgseHXoopINm>FrBIH)qcRB;GDGQRTuC=WJX_xe~TW5i@a<l5+GowEO{WgHdS01`D
z$AXd`87B<6sZf>?X|nr{=_o_@-IeiTSq^iBDYv+dIKn!CgDLa6X&YMW^PgER;+@}j
z?BPIy2G4bBK7X|Q0RI9q7&R9PJf)$F&Nllb*5d-QEei1TIL#0rbVIIK{C!j3^>U+t
z5C7}-2;hHA0VQSDTPx2@#tk^|JDnUgPZe`mLL6eTvF3y(H5)R2#wPz95_3CEf_>>!
z>-}xj^<?Ec$YK`F<?%+WO#!tB@mwQx5!<)5)OYEm$-CPXxVF-F+kGMZ<}dzXWZ>vc
z<!$r|^2~~As|9#0+ge*^E5H9Jz)#bwwEVTP1cNInXd_pjU1l8;4ZztcZW58N^w#w3
zs~EOlxX(Kdy{Og$TFw8YouckVo9EP0gDn2V>gu^k8+=o0rGyJCLV$Wg5T1;v2#G*E
zz%v34V~YzAM!+UGHTC|AQz$^Zm^=tN0O3u#6NIQd8yzHz8xZ6GhwML#<nQ;zfd+jV
z)*6t;z>1_Mp|HV2v#o7SDe*j`uHTpPtiq?;M+v6vEosPzIqGMylZULe*E!1}Z8dX9
zle3f2IxujN!-`UqYN`Api^Jw)?pBEM3k{J{CdUnzwYjDeBlV~MsghmeBbH{lj63b%
zY<=5ec&~dCU7wTxrTo~qwF)?@!Q_q?mF5v$;f$F4N{(RPpDbGV7g-@W=??>gN&bSh
z0s-^MKTfukdYXcKPz^rXd(P@*8KO{!n&m+mBZBgGoRU%#4TO_LQ2gDPQG&C=8TwD4
zLFoM*3rLs@_|a%6RAkFi=A~6p>#+x&5{5gcj&8X8sm~udx7=|kcil{8DC>6PO=TSE
zy{u8&g1=2^8fTs@#8rH+w7ws#^1HAf4(RIQO#Q$@M}Pe}F&U(;NSnllU>sXMgC^ov
zITbD;`m%FFe==C)<G@h6I!pZpW`-Qc`Ecrz$o%kokpTi6Ui~W{$NvJZ`5JSOi;!FV
z?jIa<FD@n(1dW;jz$M{%4ef(fYUj%KdYXxV@z)vP#q>YBBEWue`aCe6`pVh-wm(Z|
z$gXjK6z!k&e7~;V692E_6;QhdRnh*fU0Z9*>Vid02jIZDQ4~p1D%qii%m6iKa7Kc*
zE7om#6F_~A2Jo+#Xb}RPqnUa(#fdQf-w(zoWfQ@|*~AnGs=%@<g#!!cOiyCr=;h=7
zqEI3zoQ-myK%GbAP$VCmJ{YOWmL_QdQ#=Z3Go^}%9RH%&>WzL3+-9R-0cUpHqvUcg
zlW;B^930akZ((mdVhRe0e9G@CLJfuLl_|70($o4nId!wJHC)IyqhcbGO8#o%ho$)+
zDBj6XUfQVk!}d1k3}PoM<=uFdc^ws__PCZ2@<^C@-0hRPPLZtN>1Oml+44H|T(BFE
zf(cN>DGWF%W+c2n=D3IYA<k(t^C5-6FD$g4ZsP7c{2C~6hl5`UiU$J&!kySE*%=od
z1<1%G;NvZJOeab2?z4oOx*%&iD(ZOebA*2~@c$Vh4DX8}ji0!<_K<|Y{6=@}-hZS|
z1NgV*fBpa4u`S;02eF4uf$AIrp?G{V9L#mo16U5@MxM<pXgZ9lshNqqaQ81g!%n3&
z|N3Y=Nz+2Ju<JP)mje-lyQhPyQ5!Cl=gOUh#Em{le*g|p{~_@e&;V&c&U>3<Ee`$!
z<H1ZBXqAZmkGjT!$AL7R&QlEzKLudq)yceTK?X?S;3G2u$x=VOsPMieLRO;GH`fbo
z<V7)Bp!GvI@B$vU$aMe#*2^mwMum&?Q;r=qXj9gxN2!(aaYDF(gF+n?#{;V~E`D3G
zj9{4ef}-!vFvVF|H4(8&*3V>iVMG$PGAnXxV#R@O@lYG{0n=vmRozaJ{`Kh9>q{LK
z$XlN@Q3`LvV({KwVA`C51va*bD!otJxI`UV`g9Lsb`5(1Lk)9vb_)KiM8E?*909;}
zFu=rUzAL`~`KWy{+48YM_lyQJ{jziTGS-@v$JyC^l2CvgPFT%fV%21`mGVkLoAm;s
z+F^EZ+zA#rV5=^c%p-YKuxjIBj6A0$A7J%bfb!RIchH6Zy)XLTp1U)ZSIo`FLJ-EH
zJR){F$v_KV)@tYneSYs6-C)E!IGM@l2?rBcL(armc&pyzAGl=FGb@RDZ6vpHP&`;J
zJJ-!W0#HYO2-xiNe$>2#$L1OSNWOmX^F_eR{2DhTI-EkG>^6x?vO=E%iwyVE>nz{o
zYLOgu3>3fOp?k+9YMnThQ}@IMH?he?_r)p)@758tnFbmrhHSYWezH51BiGNPF!=s*
z^qXteYlJG4QYBt<TA9hQiE+(Y{EsNaAQY+<O6b0ZJtZ}tC0Cm4TCG$iaX)J8>>gc1
zilRnXUZ?#Y0!>N9Ii%{XNXo)T?=~dm<Nd-X;r2GW^~7EN897%CO6jhd<3bE(MN-Qb
z`r>TBy>hpZDW(B!kK(cug51F184t92uy;HuK?C%BixsPw9Rl};)wn+{qjOCE_&1FH
zvq;p=X&pT+vK1Mw3U3Kv+a~HPRnirwzn@OoM^fO;ACFzx<9~?({ciqq@Gkma^?-0T
z46N!wh^(4E$KM>)6dqtH%Sz{Z3B42-c7Z_LKESp29lThP$-1t&?RHoqJkLj0Ft1rj
zfyp+FSa`7a4BLjUYP9MnN5=t$@SUj08}{f6uk=W6gCaZ>tG7zPr>ZB-YDaxiU78lI
zp+DuzkOvxTducy^i0ZSj1`|s14*M8-hVyO7W?kV(bj^E?y8SZK@yH##-~C>Fj2wXY
z36p{=HQiN}W5cLx_Io^oh(IPX2q4o2G`oR+{4Rd{Ab6Db<@`^_Rs7eVnQxR0N))N|
z1{Jt>_36x?Zqz7k+@OGszph^MIu<^CZuy0Ima+9yM32XXx|MHp6U{tP&XJPTWuhMz
z2jdB=;3MyajtK&Do}@N9i_h2*gWz=udJT~Qu5#`ZZ@MR<bd{NY$9v%=`N-MVqD~zI
z*B}!;jQW+fPKig#g9zLaHYTR}ElU9mUGdqOi0N==pj&Pu=482gu^$;J8OZ6W4fSvM
za?WR*cC0@SLP_Omj~UrVD6?dJc(?Lk)_ZZR$KOP{Ct#wZs4CA#mCG!3&}@-E6uVJh
zNTUtd#~OPq%+>Kc`x8K7hq6_qz{!UPxQk$bkpJRH>~A;ORQ5){4mydg`+bo{*RJ&1
zUZby{2x_1~f{cV4jQT?$;b%h6P?hSE*w)_dHL~{g#PqL1Nbh0>z1NJVc!xsK8GN@L
z6m-9|59vFgm)|9?ji9Rcw%u`64%KUY06k|)3Vyd&`fI92YyWRkwcJBd(GEE@xNy-=
zN`aSN3ms)rr_sxkmh97fZG(ah?qY)WaB*f6mEyo-bI><5dyODZZ!_D{o?xFm4HR3&
z8eAUGIlLmu0i}0;&#AP3%1YP?lL2R*pC=g7Ma`?{-mMXJRwG#RNZ6=l{I;u}c+mQ{
zlj7Ql=EXa?U>-NAb2UA@da-q$K~d4MW~8=Hv)s!l{TE|%tYT5=6<&xUC@WNS?L*^5
z)7S5{_qqh-f32|~?;I6{*?14ejnEXgeR+a-yH`5IWU8~4_!6trEf+NCTIb1JC2Wqt
zk3olO2Ds5G@D)~M3?L|d>dS|7u98kVe#0E@bS48@{QQsB6VRKUVY;YSE4b#*B?}@|
z*s@|;gd%r4W`lw@_7p19C988CS{qgRJSD98863y#mV|?|I3xa)!~G@*&`cH@sf)XJ
zv|-s#De=PpZXSd$Ku*Zj#@|a4L`A1@rv={h4BcjJl^YDXVD2GG8@b2vlSb5Z5hGdj
zK5=*#tlK6U>M$abO=Xs*kan))Til_YU<HW{{N1Bcs77od%pi_J5Z-;bw}&S|uEOZS
zSNT640d|-KP;}@6tOL7o-h!Aq{)e_!wB|RqHgJv6AqULS<2n3~Uza*Xbsw=*WaO28
ziUx*bM?-E7ZuP`gOWa`}mwobq;<YqMnU?1hwsHd0;Xa!~7q|<vG}*MRaV!Md1UzCc
z5q6SYF#f6#V_@DR#8tl}96A1&;k#y<A_|eU#g7sXt}UAO$x{6=_vU$<7*G9ZRQHui
z-@`>s^yg5jhU?L3<fT;G&>p)vn}-7Owz6>G?S}tw;jP{U{Ib(J3hS!*7qW(0T}&}B
zI~>6_t<?_Aw!YUOByGnPElLWb)X>lKp^Xy#l=YTBKHGfa#K*6}_x<>^V>Q6pZ$>PS
zMv8fU;PHVLU`47&^lG<l<QZ9oOJx)59|Vr2HSovkL5Ivq_y-KK5rkMSsn*UA_sF2n
zw=sjVoeIi0&`-iO4_e0LBxnw91>8GPSlyybK1jX+4FtH7LqxS9zTP#jBs_MOi>x#v
zOhFi(xmK5c;OaDdH2N;jKEDSJPeu_%`I1=iHb9EUN$Ih1pJ(EvV2lJFUX|vI<a9-4
zKBvfZopiXwGFl}PP%nJy(Z&@=i`L?dP%&bdHEy)q9G;YJA5GY)d6@Be`0TmQj6LoD
z7TCR-pt7Bb+YUOJt<=tZHOxVvDRL0dyjaqda&6__{VSq%$I4(rMc_Hy_D>eq705=j
zySdjXgEpU8jzxddTH{DwZg%HTf<WX*mMb!$^!_JS_U0SAexVq)VN9i9aZ);+TS2HY
zOm-+SQP@eRCa;A1ryi~LMOFG8yAwWfS%t5Cl{><qI1FV}pKHB0w;*dhd}zh)Z|l+J
zLDalLJ!hMTSR5MU#Po>{?U!Mw2!7i9z!d81<vmV4{h_?+{mcqV1Cpjzt*om8@?=-H
z8|dvJ2N(7wYu@FMn#*-(B-CB_t1}=*IO?5B7#b6K8NZuri9-j$@KI_igWO?|?o1DV
zjlfm{bW||+$IN}Euqj{Q=xm0>Ix(uA0~PH1<53G}ywXS18LJR&Al?0aQCKE&@{Sl8
z(+za+i$~i74q<xm`V|q@1{Y4;9DWf^e{O|81X<C$f?Ak96tynV_KTPIaZr85&JRcK
z>7#Hu09*4g+RswhZ$i^!*%U&0OHTdaK@~E8wgLf78<7EQXY5yiBO|Yo0ZWj-sTROA
zi&ERUQ=MTe^{*in_6+NH_`lBX{}V=du;?m^-fidqis?#WVyyWRIRCfplQ81HWOe`J
z3Ff&Xq#1Z~^)?Qvd{1mmX3sK{G^M2PCW#8#AA)Y@9umodj^UaO=+^(<4u&~|x<dp3
z|7QTKZvVGJ%8jkgU0Zt%V2L{#*{)!&ezdo-MZ^F9_<G0aO1gL5JGO1x?AT7nPA47P
zHaoVRj-7Nmwr!go+xENC&-34B@3YT%=eISoMvbhhS+i>1_jUa)RK}o`l#-Lv(_t6$
zqVYq>gG1dq@1pH($>ZM~hUf<(Z<CLhuN#_iY2Sm{;DGtVUL>zk6_J1nk)pHWSNsWl
zPtefqXpm)k;1pN24q`z{<Z%@mdW+aI&>g7g&1q>&@N&*jlaxvTkeGeH{Q_DtjwEfn
z^%Op&cBs?*cQjOgs62RL1kpg?bH|)ZtGS%q0k(l<a3nBd?tPP!8zNX`84W+6*s3ky
zt1Tk7g{L3LL^EHd3C-pR26JSBO?EDWpW^<Mgjbf;8r~=&x;4#_UOPnIe)xg?zC%Lb
zNdvMR_<>G|r6OXBD4NBM>?$Y16~)RqTBCU1c4>IIC!MqiV3^>g7#)-FYy?YBDEI$?
z4@Gj5BEs=cuJ~Y7Qrbi~as&dZ82i{6r6gqu;Jp-cYkYm)5b%41-9B4sO>|FiU{utH
zPTE(jrzmlmd(^e?JW*(|@LtJL+P5{kh98G%R;?Ra;740<09vhZ5GY%-*)Z&U{(aa~
zZ_#3XfG)w6(AKhMh>2r5#l06EnjyE^VEL8dtJ5MM#tFN8Hpd+)gg?}Z1(ZDz$tmL+
zC5el)L(UlGF@$vz^Rc~d2Fv7aIuoi1Gly38Lnlj-X6iEuoiB0&Iq*0lWbQj4cRe3!
zjPzXmx8!r6_}PfyhO-$#Z^wk>KuJT+$uXXxPPh*9QKO8aj?&KurvsMpq$I?L8PeDO
zh_F{xi}#YG4_Lh+%=RaC${re$pE2+7hO#Hw)8+L&M~oP#bN()=^Pa>Hm_)11EC*ve
zB80PY>oQ!U=HiU!a|?!JjEm9NYYe9c;i(aI4#Nk|p0xzJ^S>)o-{3VCV{5jP6PaQT
zXt5i^IzlRxWi~m^LKVChy%d7Exze!vKy&^mT$iE&Q@P*{5E=LpQI8&~OqGnO^yVyZ
zCt}>Oow|*fnN69Q)#c>o8sa(0NfvN{aTOZqV`YD&nj%zgvvi@Cm8UJhd2*cRwq4u`
zE;x_x?b|n*wIsDUc|UeTA%TR1GWB|s<b92IQE6veNwp`*HA7KO^{;4t63Y_O7!cs-
zDFPo+5|n3T_x2Y*8_S(W1~C@J%=d{t$^<ZVMfb4oA`<5LjDk-NfLrz4en$4={5!>t
zT;&2X2e2~>&kB>ufAQ*x5)D(#;=5Eg;+M1>-G%<b^+RgvOC>psS4wgm(~XrXr25S&
zZY&_Elee)6x=&j6wo2&z2f8OG&gk`qoI+#Z?xL)7eb~n{ao<F?QP}fsUx=eHJ}wFr
z4(A+ievsGG>C&byxn&Bc*LGH2`HM-Q(`$oae06kh{D;k<tUL;84DJg*CkJ{nxxJSc
zUq+Jl_RMsz(e`<3Y{rb?(NVRHjI;{15*kIRN~uF_wC0*Ds|d-okdjUc>#g*YE&F7v
zF(*?n$0J@_GyIS6^Om<M*(BDbBD>O+n)+pKb&olZdLhd+`*gS&-n}xj++Qk+2xb}5
zY-P@8wHZ;YEi+XH)-&fC#LGy_W6i&M#kDb-9{AGRy!aEd4WOX9ky))4_*u7Y$a2?-
z7ao_;SZc<vlnBUkQs=#F^cB9tJf4vMVl*rJ>1=iiB^Fc0>P<m!bDWYgcHvMK#ibQ_
z%N!@EOV%w)A7yIt<=(IUgk@Go{H_gR)VcT*=&;DpNA1k|=FqQ(BM9XqCCQ#wX2gdj
zLhV#rF@E-JRl6BI&}wCm`X0it^F#=y&gh4f;Uxl;U4&7f#vRDbUEmRx!}bO7n<L-l
z%4(>Bx>lTxQkdQnnuwlu%ogtw>!RMu=J}279>!O@wooR@XcVmxVJLZgeB>h-Vj9O&
zQB!$JehEU!p(GL%S}E+|`GJ`H^tr7H;_=<N6>jPhK76!=B!amUSdeiF7@^LiKD{aJ
zYOMNLqmBA>51CdqD1z_uuvzQJ_}lBSNBza>HKGc%%Ov&dr^=i9a&A+a6Xxe-+Hjfo
zX`BwhDWg|krA+T<4ANRFM)lvXEB*FprA^P6>??Hl*lU0vS2~f0CGJ=E_IiWN?%qNm
z%gQM*dRY$|E7<N>?&q?z4g})3uD^_Qa;yr#5<>e;aAKZc(cVS~Z1h@wOimZr@qun0
zUo2L8)*4$({&soZ6ItlbdApyp%GGeg_B|#-z?f>*t2wuQ7h58HqH+@Pnl?K6v8;zq
z<;!Wqa=H`p#0aeW1!>xpdDPBd@scQ+Wu$^(;16%LQ6*PBgU3Kc)RK?fv?&#<;TZJT
zuyGA55Ed|pAh044c!58h9pn)3q<^DeZswPkx2&=jnSO;<vB`aMbSHr!s`BB8{qWno
z9$>W>+$`pzi1ls9fnQan6bMPeUR0>^s@6)xswq3l_S_wqozb1$0=?yb=$T;EdQ|A$
zPnB+Z9GRV`7oFS~@h94u+t#j25sN|y8F2W}mW8WNAZ!rhugF-JC6n%xR6EK{>E&mJ
zn(i`H2Lf4AtnJy?=+BuwJKY5B_{P``v9lvuBC%O0%qY;g>VwGgmGiFX(?m^RdMp;k
zV;<T>naY@X;Vkc&Zb(gaqzIV~jIy|XYnUqF_ywGV)Crt1TBv+;3n8tBnc*0%ih3<L
zIrXE+E<0_q>ZFxauXP>fL%28qp18BTDGmQ1US8v<a88s;A6?op>mFB4t1s_Kq_2P+
zcPB2!Oyf^iX4OG!$<-ye(uR8qAwX%?%x?6RePpk#8i3Y?V?W#zbby%c^;D?Lx&|<J
zmNZ%oQ~0o8UG3NwYM|7W@voOJm9A@x$AEwLur#y4VfHve*IYu>BO-ZXh6N0@`3rMd
zTrjT_bEjrDR2M1YMrs-ATR6AikL4_~R?y`Kv+U!7q&`9>dRA$;Bu@rtAUjAP^W#`8
zup}@o%nZwd>>lnIdH>Q{eTeXFKHuy(_CMECl9hzk^fOw|81eY(j>D4M$ltw1@mwwS
zo<H1&hMT^^6O~$7fqf)n&>%am>Bul<Dip|rNvRzg5kMYN*nyqIbh#o~%SeY}?CLb!
zgfSWL7?#7}#4L5|h`?O{L*MwSkTlVB-oUdmrL*Or!7;oe(GFPsMHT9ayU0VUSRTTf
z-ilZX-$Jl!D@Ip|43#xTK&TK`w*-IfzQjPiVp(6r;>8`x{G2Y9nonzSmr`cf^aTTL
z<jY2KvMiD}Cf>8GaT*`^!OoRL4>4a<k5_WKYi!!jbuh@9ILjGOTXEB(mU3-yjH9p~
z+uN`8QQ$2#UR#!K=+SHS+-y9n1VhEV>rI}09THGh|3c^sgpCNZc&MNYK_MoZz}`1}
z91&T8E**qo*WgGHrLHQswe2E}pl<OlmG_!m45Y{DlQ;Awyd6|IRz2FN9LtHkAG^{n
znD*gW$*9eIjs1$ieYpXv@yTpsyb1EYgSjyPA`&a%)oRL>Fp<%E?WW=E$K4(dwR~5o
zU|kr#D*)r;*S&Eu?#_vH@B85CmZK(`^7au!6_6$b<psyYNCE~Guf&3~!C{n93?fr#
zwO=B8f~Q1ww<M?)oC_`EIK*YvttOnC47xPHT?j`*c2-kTTB)~YH4MJ+{UP>l<XGfb
z0uBTqvL}gj%8t*IcEsvcv4yDFfBZeRV^pP23>w=DK?zq8hdfk-nZTc`=(#&}_*YWT
zL7AK85goEa=<mfm_7TwF8M?)&pi9J~fG;^DcbwSnh%;iIx%Eyb!T6YpX1aC;L<(Zw
zI^;}xV*YZ~-vy5Z!U(-A&M6Inj}!m=(PsYP!jz5w!WA12{F=p(vea{mh9qH57{A8A
z8av6Y*b70BC1s?Pn}aexmaDL$Ak>{jyNF7IC*CG<1-$GWQg0B^6Ew39^oWdz07rO_
z#k(8c-75=Ez;|>|0C{628f>6Hf{Xz^5W`{?+cS$iJ#p+W!e<4glIvKsIh4bz@=kT=
z>pynseWn_|4K59>nwL0~0s)s;I}(lQEK~ejKAYdW6tT>f2!5AI3>=(BaU+gSPeG{2
z#y0w(R+%5t_+4f0U8*cIvAzWQcF`W$SE%%;?1u%s@kY+thmt;Z5{6<uQdyGrj;cji
zX@KROZ8H59gS>Jw^(xj;w(siGfiyvi;pmbo5nY7pf)jrJbFso;=yW7s^owMn3p&GB
z=NM0!MawvT+e39dC@7e2<fuJg$GF5GwNCIe5NDMdD1$gL466={8&|(04GaB_schN^
zVIJGlH?QeJI){O@nDw!}m+O!hT`k}67<`La%;6$P4(b|?v^KpR_4*JQg0Um7xZiXm
zn3@*3)(!QmbJ|2@y?LXzE$xaifFSRnLUK21UAE@i?wt`vYw|w50GP4v+WBIA-^~DA
z6)z%wAB4)m*vT6W4UL4?On;B$^o%73+M^WuKjJ{Z05=f$mPnQ@d>~<1zA&D7Fr1|F
zaz!j|9{9I}9%Y27`_%9c5Y`s`OhsAJAdG#OU1n@&uIj-!K&u$j!#q{MOk@Cy!Gs}X
zG>PuLsvi`&J@ytmY6V#Z|E>37x;TNgc-u{iCZ(CuCpPkw7)y>~i`}q0J@Yj}i2e3n
zaJP}QI5$&ml~#wr(Y=djgEhUD<_iZ>U>B)Di4lTk#|mNv*Oo2hHP>SZ$8qWtu7p2c
z1mgJv7`|k`Zx@f%9#5XGNl%I~w6V0DKq1}Z%g}BoI}sDG`*)csoMWsZXd$_9djROH
z2A;Z52`ylk$y`)r22;FyhRRS(xXWm_j6N`4=IJ!Rp??IH3ArE&?RbYS_c8(9SRhc)
zPx41yQhf}fpX3X2uOR9+g)^}T0xTAk^dj8h?||5s-#%bSjshB}M&sQ*I1}!AIV>J$
zf`HP_vvrH;)9LQy7Osq$UZ$U4YzZ<#)sM+Okhx7`=+v$YHIi;q$MblYs#|=7Eq0+r
zD~tv2VenKwk4i6h5LBUt+OCUx``)Ry>gZ5EqIgLa6)st4ts6&aVI`%?t{FC~Ve*u~
zAjC!5U8yauqv{-esad%U^~rd+-K-0zDLDKzpF8APw4K`9t%@x?P*@f5-}sUfv7Z#M
zt2xJEX5I`zhHzna3C+v<FVv0HNf9&to%j<?@R{{#VH^f?T;_^~)?pTOE#{p(4b3))
zMe8oDUe=;#lVAAb5#r)Kwg%C{Gx3ZM=~GJE08A=5l-#i)JuDIwC}b&1+JP}CJVp)>
zYUvD{FtoyP#W=JG8WIUE&i(U1lcNQ%CM~th@~K7<?8QFKGnp|}Y_uKyJVp7!<|sun
z4O#KZbml5(l6G`(Ik5EH2(?Z>9VgZGNhkwPX*im`Sk_d8mArN*0l9LjupFp|96BfM
z3`IPDcP67aP5NPb{M)spJg;oWZE`YNiVHrYxV{T={sC)DMq+iHWC41zc)K4huemfy
zb|fg)gSKg`D~Jos&`D@y?X@{EQT+%nr&Sl1vi`vJ2w%_*(IM(_n5mBV)&fc?Zd+;n
zmcp2d^7!e(C5K9=%Hr%}-JB6it1L66^YEgNNTBv}b9HiVCg+>|UJ+=W!Z@u-Ah?11
z$jX)4BY#Mrg{8*mmP!f`;<(r4?t=CPR)K&Oj^56@NFE9QsG=B2*VO3cf`FjOUqm1?
z9V(inP0=Pug}N44sCYdf3gwWLuw5gD{UJm$L)MBZtO|+jdc6*Bc#b%PZG?nD5u5Au
zi=QDkjLjT6<p&_Sju{IMLYW^h0oxp?_x!_%s8QVGxb9t#5Wi}7eZOx3d)napA#O0E
zBQBcc%@NHy)mGW>)4(5z0E?7Zx$-PEolmHLzYJ;F^9vimk(&SoO`5iZjAyNz%|Bcr
zb|>I#i{j?Ah%^jl*W@@cG(ENLZ9=`MQob1CGi~A(+44i$_D&oSaL0?~j5<Cg8o@gx
zM~I{IF;eHj+jsdh&0(j*e$hfUINLWo+@&ZiSwxk;w8I1wC`t_vy=u(DnjVIE$f68o
zk5yZ%L`e!sAm6j2_}JI#Bo%+al6=dPH!5A((iw1RQ!{`O1pB-7P6mIAU@X*WStM^X
zd`{W!$imPuy{T76lR+w;ftdn4CnyTB<PT?#ecU82FvE%_oN=UR4h-PlFhp>qdQ*J*
z0PpFVa4&49=`o%}Ap!`jlq97yUomDh%?Bd{Oe96~r_DruVHj|<9n2{<?USb^rj7RP
zT!mq73HSKY-EhGjxRN|#*KkE=mwXi|&&FEieQ%U}war%Hp_ceo6TwBVoVu;=4}Z#~
z2ITL_D~|_EK+GuCQJC5+DV@=;O>qX+fIn*MDbWk3-Qzjhab^AS)1!0p5xB@_x$*sH
zQ<QI?#pdSppYQ!KeZ7Z-rFYfalp4HubQQGKVoNccI>ZTUtqs>OI{3IMDa^b1%Ns?>
zC?Z!3?;q+n$$WxFTlL^os>1CqH8&mW<v0_eW!SnA&o*`M&{`ZX#|-JtNw%ep=0|c%
z#xVywQkmPcl;LR-w^Aq+{Vouh0({*M!eELCUOE_|F+7gHEGo4PwzrjfRcXxs$em+b
z*w~n#?<Q;I2V2??p;yH~IaS@CYOihY?|>vpYm*am=0TO)e>h9)`*16HXD?WZ$2qg|
zyzwe)Sb$sxjpN4_sL2WLaOygOX&-?XBc@Lg48|IW`qMZWJ$Ls$5yXk4zZ?AFfB{Q>
zM(pyWQVT(+a9tSd`Nla<7yOrL7$H~5gBcudZV;ThXQXp(i1r+)gQ>fo<MHkBi1{1>
z>4z<<cJ1^U${$@EcF?70bSdP%Fg8WVmSBC?C7#+HL$0Lb`*5F3VzDo>@RA6FzptY3
zL>MqN3H0*d(!P{KDpWZmTcb^+F#2`g4n}hubB=_m2$j0zn+Gy69<?U<avI^#&=wGQ
zlPO9=A*K2!5tHLZH&MwLBB7y32P)}`h^#!Y(3N?~TF=`#cc<!QVPMe2YWYNj2zy6*
z1l}wJYOumuat?M08sDz?@4_uR-F5hwSlEOx`oM1$fuW=c7fxd%DFgld*RTeI@;8Ri
z@4pCsv-gaw^<VFgdz)K@_^3#&=ufw)%O=6MExFqG7SYeP+|aceP5_K80V+D^Gxm$&
znFDHsgYpJUVIU^o^#eL4#6RohZ>^urt_&Q%KQwF&h~i3v%6)v4&|4J%g&{ReQT~;K
zrTH5L1P94$_$`z*RzlsJg^rtR0k*nBW$H`F1EQ&T2Ax`lCo$XwajtMLKpcAhS9q)W
z;jrAV3-W^(^IQOFU>2JLPEEv=1!9F$G$cpgsUUZ75!*7S_ON!k+JzWXHYZ_gtf}o1
z8BKcV;Wk`aQ5@a5)I4wg(X3PKJa2zYqMql-o7rT*8dg>@#R9w1Pr{ppRMg0UEmEX$
z)H!f=?_T>*^hOazEb&vic`g)p=wPolL#xK^NjlPV1wKOh*SHszYFS;iGi4@Z&75Hl
z(&3#p4HL9}xqR9%)xdSuM=m{GoyeAj7vSX*zRReDDOz|jH_fPWAXF>t$<J}!*`}%=
z9-}{y*Q}b1MC)M*lcDLAJ8Td{*5g714lGnKLxPM&Dz)T>{lh7&t$yfXQO&P=C9wM)
zUuvwrg^YbrZPj8Mi;XA$;Fq&_ii^Ppomat+-+@buUmT=&J)#gTVb)PTV_jgN{uT9o
zruFh?1`sjSF(}Za7nw4#(67?kPK7>y+UMIIZnRyUVnjOaoUVHrJDxxQs*KOjMSym5
zo(nY&MD;VomwRXXc>i2|S;Y+h)6FqVw`xDA)!@qOn<-)$tpEd%<<&1xNzo$-O(;+t
zpi9@IMlB3+DhK=na#1c};|4XT`Kz9t;`Wg<%pb)NVyZWi4Wcbo{nxj$tpor<)mok3
zZ_@$N*uq=?Cz1Yaw<VL-vj78NXn0`bCImYT`s-*QWPwe!X8CMk=5!G=BS!c2u!Naj
z?*S%U<PRbeSsaOVVZodu$jRJ>aPJ(lh#^Ns?h!K?4QN0dGqfm+vqe9VCRhT%*AM=U
z+hqJZL+VUOt)@bd;NKir`Pog`9(JOCay6Et2SW-BNc3=e98<OW`J29LoT8;la8cI&
zs|ZdAl{R+x^uIKy0|P4ihek<{BQSt2<v-p`U<d_3gr;Ds!fXvT=FAbiCK_O3{nZ4o
z1b@aKYsb_Dg%$qIr}9d9|F#_bkB$>D|KVx+V{?aM*a!?v*ba)ktg`zV3Hx=~>dUHI
zA#Cy3t+U!D8vU(CR*0`9VZsKZ&gh5Xg~YKI<c7$zr`1*(IpgzO$j&#*^V>iku16{S
zdnbv^gG>I)RbK6j09A3YTPz4<8PJb|gM-OebaJNmF<r$UPZx_9h^?K9?iBKfNj+fc
zuPzNw?k{lXGrN=mmuPsoODGR|J~MTLqm*?<yCK6fosgG|_Zhg%C||E}D>bjB5zZSw
zp46U)etV}a?VN^+3YcVnh|zK_*XrWls^|M`PPqveCa)LWsV&di#4eiLk11MTfL-p6
z`(!8Ufhr$QCUU!VRkv8Dd}uv1f7_o`Rl^)5x#M8+RY&#(y}+#7T!dVdkY2Mm@bN7z
zJrL6BXwd1-XgE<F8jGxrdR<VA=tWOb5s@UaEe-;zWJtlrVGA!n(}kZ`Q);5P8zJMv
z?RdG(_BAo`*o2gO(ki_fNi4@o8V!!9nj(pyubyL>Ht37@Csx41^9NHfgL}G~=r!i>
zxugIk_*AX)37a9>5q~-XP;8&QHAm_Y0imM@$`$Qw`y9Y?0ueAlK|%9d*%3!6sA*ST
zq}fL8e~i{2&>4Qc_$y>@X)}7%4N3B+VI~*Hs+%`VhDi1K^M0rP&h-@>72Qp3QRX(-
zv1$9(&(s^!RjA%k=8}9d@j_H)EWW0;xY{hf*3b}zCJ2X=iI=|yo?POyw+|R`X3Q6X
zG7ichV2K*EwDh#bt!)3mIGQyml7HaA{KsqAsIvVxbo?%v$St8puR7<9go(RY<HNM_
zKK3p~(~R!-NoKu98Zgk0t{A8HtXj5ZC-Gjc9;Y7&m&ivD&M3-yDrQW!H_QQzRshXV
zV>bhjR_B(_&e6lS1K%=ZmrjSUS4Bl>=r1xocvDpI6c+A-R~!*=UI@QPD)l+aovo;M
zVUp2-aB;ihMf#Kes18#iX;9!XiuS=SDDpCn9??izcvw0@ejf=QfWnqfu+o9&I*iIs
z1+93LwXA_X9B9eNUmaX|)l7*6G$W}%ftWHob(ZgP|I34SrZ`JWg!HL{ixH&xD^9nc
z3i%iF@lQ;y+SSj5-9R9Zf?%WwV54vMFLI9?YC3hDTv$LrrBi|0ZK)a2&+$1+eF6g2
z=MldkUr&hj`QoLRPn&fq!x^kU^>d3)Q=N=dy43%-gB9(n8kfXP(d`7!)#M5wK|D@h
zn+?P#W1sXeW&G?XHi8kw|28t0d>Y&o<MBD1SOq<=Vf6=yjUN`5Rkgky7&mw;o_4N(
z*!VIX<jr#vo#Rx1Bb*%TIJeX-f>BR#x3=hEPGQEkI`ys@P-jX*Ye<_YmMfrRONCe{
zDHZxmsm<w(%y7akbIC@GkL+66;!RpeD}TkwyWzL;p309mJk{r^87$m%jcUf5r%4;C
z7C)bR*}SUv>^Sy`9ZhOE_;$mxkNCvP*y-~wSWzmaesDoMF;~ub)Qjp|I!9qSYtn)T
zoZJEFch!q(YW#t8qA#(9qQoIXyQ+?SI|zC{{B|t}Sts(BHTP+P4^jba&;Baz01h=?
z#2i8Hf2bvH3*h<92*V^+Zbb2#HujD!*yXe#!1lEn<M;~|9SLxS9L86wz}Cj+-KsyX
z;M?7JNc<R*>`lL2eovPJg%kd^0WeW$YT`md2mXs*KoY7J9YH6E?)<B<|3CR_@l^jk
z{jc~@4VV3LNnT=4i;|SVGz%o<)>)L4DC9G?1W1s<b-_C+h7~n>mf%PrE`k&wz7ON)
zh3g$J^u&m$4N<^rZ&~tKkw^#yXrMiuzk=AOf>muhQrL5jUfV#>?jRYA_`#Oe`G1<#
z8g0$LWV41=b1^wZ@<+W$ff4`zO2KBSb4}30)cR2@a@4~9S@1#8<s3Ph*_2JgjJUY*
z7TSo5CSzD!Jtvgv9bwmhxvWZjbUDVDI$u3d!{bi`*gns-P8M)Y2C~pvWSbp-7^^kW
zPE(*`kZy}4N?B!rn)o_p`O&!%lS!q1x_95*2UwU6+@}Hs!476>L`IRDJMDz<cKl=b
zoV==QzgC2<d}C9ntI<o&E06Q1!HaR)5fM)&{%9tMxpOPuJs{t9jD{Ux4JsWpmmXFU
zpD5gAMdMAo=2y+Pfw>o2py}&?Cq?2R>XI@bt?DcF>zE@owf2mruUkA!b5A9OHk6v5
zA&A4&E5MubyHZy0F)}NIz3tWLYo)CJvX>e9nhO!dKWA?a=G1P}!C$H?5C!}#AQ(=5
z?oQp0D1zuOVEXTEeb>piCz;bFYAGDqG#m5Y`1bfQBk$lbb}za_^N;5W@ILX608$nO
zxTNH7!nEoxe`TCI3e@sViz`oW5+e}M;Uh|)o*A<}v=p^DwkDU1ng$OB5N;@F3uILn
zUuEzn4Q2<yhEMgCA`84oW&1$jpe!J`y6XSL1_De$ZYMu=U!Q+oXB&a{jchukCH#`Y
z|HdIr*O&<3k0TdrZ5w@r(^8ayfywiIwn!Iaa7X$>Nhd>*rOnb|2X-{+T#3Q?qaO?q
zrUjUWe%LbyJA7nPEo&tssn@N|ua7+?Ixe@(Xu#Lr&!RE<(;(HP+t2p|w6!bmp&lZP
zUsLHE`&#yc<vko$lusAFT@qGuzcB7f>j!J0PY;_xCBq4ZX;d-;P~9beW5J03p1?g>
zj(@$C`yN~@P57%@V`7K*mp#UP5UEUG1DT;!P5Kv}{HRbHfJH=rfcW7#)fa`;zxs{h
zCVVfpiqqeBdCjwBm1&!*jb2L5sHm`hO0dIl6nZ%QJ;3EPPb`SvWf4lJIM76+C~fM!
zG|3#wj5cD(`Dv=u;Zn1!B5ydR<~~S^QWz2^({vBrD$)f4s!|mE?~WpCn-(`BBA&2a
zQXsKFV*svi=rr_w6Xy)n0t*OAu^u|XU>haANT#>oGk%!gX}55A1roqV0bynd|DWzI
zfd-(e0Hnx2faEr~QD~`Dz_9=<DyzYr1XyywJLDj29vFY{5KKceaF+=t5Srky+vjTV
z#~56Z78nQx2q*@o;&||Nvl-0Ry6g%x0;$u1_yn4`FH$cJ8{?l*ru-BfQTUk?`UyTD
zracw(8milnwQh>ru5y@MH#yws-dXgiyvf%3anP{hsO~epUZ)Y~JmkL9z-0RX-Ff+T
z&S4mx9H_g?(R|dj_>0Y^m89YKX+=z=^PubVbSs#rh!{8T`D9lsZ^NzcMl4?*9C!D!
zs;)}yj@l^%;)a{j?s`C6Ab)jgRlxRCrpn=Zu!aOOuYNkY<j>_$WJ+;ayi5}Evb3sq
z;-7}7(Pg;G<l>87u##N?Qy8UWY|GyiOW2+X{_HGxn*R0r{N*x}QG@d#08T_I_M^f!
zk%B)F+21_N+*#9awLXr9UGwdE+Li<zxpfRd*%Hv*9SG-l1)h9QYe|Wws!{b>#jN*k
z6i-w~j^i}@bIG>4$aORp<2YQ<=w@=HzWUN*;1w1>2aDlNk2Pa*h7{3~XaJUOICsLg
zDwjeVVZVP?_0uF!e+i)7P6gL4QTBJ}(zlb5$kD5_A6>7`vp}H!f`9g1SEapiBJrGY
z%2}X+SKSN@M}xc}7rlv)s+f)GKY5YRvAstipKshu>$_328_#|TaFjz-ZtMVqyj@vw
z1kr!ME5GIO&(|mzh@Amy>}EfDBz;XqcD@T}L!p1Dr2yo_KS59lqQEpXJ-cxWeYh__
zyAwX}7Ug|t!(4&n8sD+fiZ08Dikg7TN?EJQ^1|zZ1mnq$$^*$&xIZV<e}<mP-vRjO
zS5~$`2gL`4^nZznfc_^kOtbCN;++ZDY5i4dkJ{f9Osn?vjePDAm`7rY+nb~F{Lky@
zwTBZww+5j^fUQ9|J-`!*J@}0w#+GyyNNZOrQgl31Sg!n+?D!Y<NT3Jv3a5dl{?tY$
zV<S4@i8;Na0N6*SwhZQ){`wGnU66{8g5IxwT0(*&^(yyC$IumGuiWJ_>fI2{_*PhI
zkJ6M29K5A@xYC=dSSv3rNs(c;7saex+ZOgXyX(wT=vP)+!q7e;4a{EZVs<AQ7L@^w
z^7b#*M6){J@ag)MbUWWqgLSw@fQiwZm~c6Hku*!dLGl5yR&ejfB2Qy_fQChRFtFIl
zp}e!>y*O#=DB?bKqNc%emJBC-41p5$jiED%4*!exbw;q=>rC`R_S(jUO^NOHP4DDl
ztC`zAmtgADi=fU8$_2dF-LivUa%)7BiNNxdE6nV&%-!L`wg6PiD<a;W6))p20-)H-
zlXIVdc7EAmJ^H(hAz$UZ=5ot!9L><ioZQE2p+~w(nuCTmzSBSCcc=&6uCD#mk3xCS
zt}8RP?ih-d5!(A)V=<0-4Z^V*=TbyjZO|n;Ye+eu<XnGlOio4yM6sg+RJQ4C+6rJg
zh20-7^lV7J#D|oGreIwmGm_^NuvKMGpcd&*V>GxMc{S}<OKlPOC|^719Le^wnaiKl
zS;}9)9gmHTWyJ4kPG{7=f{u+1SY;&Tb8&ERK*B{FEN|Vdbj74`3~nzy)$^kGj=BJa
zcV>#*$t(~=L23&e6A&WFD0EKXxMeR2y@d~KQl<Vj5`ZpWXG{ISoWs-9yq<S^l)w6B
zRNl$3xTR_&+;PQ8&3P+8I`26J?~Q!$Ggx^ef9Ur`FNW`e#Ya#124!!|B&OH<J!h7u
z*3SaD0j*#!s1CT0#K9EUea{;!!Q3g>vhPc)W=x!UmQbZgKsh&hDM(5~!3z0gJXV@r
zrn|Up%A2W6QKTl#AwLY58aR->oXyRZ)>9VZe0rfHERzfTN8a|C$(3C&-!6vDsY@a$
zcRB-vN@od)-zw4w$=ZiM{8IRmyy|X2{m4TmoE>e)MV3irg9ve+24VbN!(a0=W|0V+
zF8G!?zPrzcmly<!N`=?OJNhY_$R<r!pj+?9`%nfMGUzE};$M!!tGZVZS?D7xYrsMF
zlr)^;8#!=E+({{G@ONsQ_YpAtl-vw3k4ml8-x#Vd^Cfrq-V3kHan@53XL2=0VVr>@
zAX3Wx=lguUaE+++<=2%a<lOwFz5v)sr2oZ@Nb)UxmlsuA31I;FWJ0Ba&-|CSrHN(C
zQO?r`BQWBtr1W2-gQ2*7caM55F+RCWWC2P@Z$xo25i`y)%<oN#1}>JDq_7Fg!#DAT
zISQ9(?!n3f*T$iX$^xioz(cFZuU6IJj}zc!2jJ%%<N*cROfu!byYMmTg~Aewk>}b$
z0{Ct}A9-Z7006T$T#vv&LAV%HS5=OFcfNTpcC_i2Kc9;}(9&OL9T3oovPaft2Wurp
zA^h3K<+9R^02l&FmdLR}5tLlDWoJxt=pm45>-9wcww!`@8rh!C^;>FlA;G|`X0`Qg
z=JMVfGqp^SfAeGUjuX+<F8`sc4I=(|S>vKcyP$)Y(#W1V<!VmG1%p5=x_wxhD<rO}
zJZfY!vE`<lF}wLpLLhb2ln~|g8D_TL#-Wsx%CAmt622RkF0prtY$2fUFPTelT<Yz%
zW9=3=KTG=goPxIrliqcidMCuDgS5&22w+shR&0>G*fp;3|Dd#vnS2_!vY;lPvjmIm
zH>mDrF|z1(?G2JG14J;{x{f#_ZWGaIZf}NMNHUCdi?0V9{d@!`!SbwF`%ZXR{Gzbw
ziHI+IbrnhkAxN=dDf#?F28Mj_!u7S;C8u+8&>Xy4h=044u(TyXHPXDes2Kg1i<7p|
zCFVza-$yC-M?74X_B}OA@1rEJQ(-V8``HXJGeZ%PI~}SiCBoN-yFQMLrcS@kDRJY9
zJ3m~JdCcz9UY<B@hw`yU+o8xJ2cWw=KHk&ms-|P?c*Y=+(g;3Y43Ib<X6)`|Q9LQ5
zKb7zTK>l@zbRVTH$NLU!G*Af=S)QdW6F*p^69^MG*$OWH)U?(SM~$fQ(Xb<;Q;KJ}
zk;cU*O7Xd;f59#so}oAh6Id)_D(of!f;dGZ<8&h01z~)YhJqqa&ui{qDOLTmrx<oU
zEkSI=q`~Krqd^A~A!f*A1Q+Zl1;>j>qhaAmO6DLr1D!is`}NKzY@gn1XZ4*&?4M3U
z+WBVK>Z3&KHr?V;<@9E*2gkD~+=cS1<c<DE=(gcDWe=}mHFCzmHg#70!szR@2alM<
zW-C*R`Ri*nl$DeqR5VpC_rlOJ5xUA9+cFk1rP8fApGj=g+Nq{{2^=$BVu}DnhK5A`
zq5e=&M6&wne4aYBH(Ty^b|a(ZCo>AkKY@rT?qJ8$b(qS}`G+4tdWV~ZZvt35zp-y>
zPJu~af7AP|izsPH`AV9HK-X=v5BTOc9UOTkwZPgF$$gFZxr7_r>S)!(V7)HWUm-A0
z<)|~pTsbqmEJj?+-nvVjj44m^<!X*qO)DsB1HbjOJz)Bv)^0`*ib$FqTSf{>rzf5{
zJMG=7&Q{{67WHQ?h8xf24}{Y1`7QD(Z8`SqX7T&Y*ZrPFbL87W1odYpqui3NZXU&n
zlTc_t(a@^5g;$!?vVblT8%~sXKJZtb=|OnRH3P%nXQ7I7GfkE|-ZL~El=Yoboe--I
z&Hz=jyP#o39b`R7J6o9ty_U`cM<w?=q!0XHLQwo)I6ugLTy}psq_6HdhShJ3IB!vy
z7QA0jYW`MVVfzI{?$TbavN`ed)7t3-(W8Lxia=<4gL~0cd=qUHX-teKe)v@5RA6QQ
z%L<B&jh6d|mL<BKSNvJ|{O2X^AD2H6*#EHealn!S@Dd}?|Ku`L)Z#V9%FvN~R+^0!
z_t2AUd6WpnPVwip-CpT9$1S1<ody}jq*2xpcHN3#nW>9&oLP!UDpQas$kFpg-X})L
z>zmX_70PNzmhcXYy;`qn$4ACE*%c78A8KHT8=Xe?f{Juzzp-*;yT;L9X;rrRQ(oyM
zWUVD)FuL1ZV4pdds29Nz4er2@k8kjNIVWWUtkf@`G!2C@5cB^Ew$Tng<0|G8fbHog
zCoBBibnG(cSJA=h1_e7EZUlIUef6GM-Rw+$Ly-K1M;9WQFU|8lEpXCi&xO#g3nQ?h
z86vxY;h*CVSpENv7X7clYO8;VfZ<^}pIggMWdDCC;&L8c_pz*eWO1?Xl91;12hdE0
z_|C&hbmSKdoTfRnv^8j-t2G=kd&$4@b^@q>v#!M!Tfj4}<p~z}M=8*T-Qp%-b;Os;
zv<(EE8RB}feTU%<=9S>p;Iu@WX~(w0L;x_3yiC4w#r#2>Se$l(sor<%)6iI3POy!5
zcFw?Yg31RoVp0$g&p;_EnfRoV!E~EG6^edL4i|sfj4#$J6~BQ$uJ1e}94_K6Kxe#5
zMq^6usg-p|J)@M7NOq<|kozi0XSL=BYElIha{|5#T%5Ylnl{aX7MZ_CCo><xefS>b
zT?f(ekmh~8)eG!ogprXuV-lB2O-U_<mx^DAMeFz`V+AS2LOx3;dkja15z?RDWq_K)
zQ6TqKIHN2B!AalQb5-PcPTRswOt(O^(0;(Ig*8D+yN5k6*5ONxw2M_8owFX!JW-TJ
zigSW;#VjcD@r;v{gLM&{QL>TNmvz;*p1cT^Mms*6%CjmBD}z=%POE!7zx^t__n2~8
za~saXVVn@n`gh|3xlu6dl2DG3yBrIq?0!Cyw$-=~ogmPpbkzkl+I-h~7w4b!@ZwPm
zZ0@DYwDfA@!nC7_YFk#5*`CU=l;rB%4R7C}XA3LJ7N!!It@=W~*0R^i8xK2p_vLq7
zv}`s3)G;vG1m4N}{j5Cuw?!jgZ8khBPaVFfU%s|*jbS{*h1w?V+Dxr;()?QNSiAQ)
zOS->Xr@a<!ANf!@Kh0x#CACxwfMfgY=hbpg_HiYPGOyIuWGSWAh%b#2G*}JbqW)*U
z0SJWpgprK?vZ&@@!h%B%Al7H<`ZkZHswzz;RkMW8rgkv<zz{64V~h5PVfNDLu#8jt
z!yFW-i2(>Y2S`#9ND>Hz=t{I`RM*`wggkZAQ-t7yKq||ArnLhN&fO7jtF>c(tIyWO
zFO~=xM!ygPfJs?tLE3Y@O`Y#!!mV<XXcoO8WVMS|lgnHrXNuWM{eholY~hn(#SI5n
z9-UyX9oUM9s5!i{)0Du<IhRe?Idqc?92Uz;bR(sefB_2O_Y3)f8T6OeXGJ5L`|^+B
z|0{Uh3HtA5|1PLj<`G~*2h?DJ1^?N~0sv$~d-~4xP-@{yq|9tqM=BmLLK+1=3cwk$
zaCgqpyh-G4i_1v-5zIXChF+D%ZvT_K39bk6A6LmgfdTt~w%CTGUtN>-f=3Us4?(BR
zdQ^-g#PW9_V?)}=93TBeM)2rUfhH((wUNbks)qWxbC$O+KOJMV?O&gh1uH&Mq@8JS
zEs3~Y;aZ};6lNN}5f}S6nt*>C54-N6(GX@tWo%Aatl4Q0o;ED^%EqA8AS;|AQ>dnr
z(f$J5k4_d9lnk0Ncr`X)iNA&kCp4#3p-M`u>t_AUlLlA{r0GvWUrszCfjYx*N^JJq
zB;B0irbOqzDzhqCowbg&mE@>f@tMGR@Y%tWD-_##=<WcMtEDisXY=xG*JE5{`fNVn
zI?v{>dxBg?GH>eJA9S20;>>MSKLfRvz9D9Z`LlYyg}iLweQdneYFSFcvGJ7>gMMEd
zn_k-74zq)Ki)({l)vU?4(;+(eXcjw|Cmh1YZ(~konw5%k3#FgVL0gZmpd$4>kQdCQ
zk9%t1$9Qma06y)-w!<C>#t!sNtwq8PMd*X+qeXjzeix2{tOkGN)z;!F*B_imQq|i8
zi|oC_ugw6N$i)C2gq~xb<JAs>?!j`GFZLlAkYHlAzsBXRres2lY3otC@2*yKg8>%f
z6zhwVKKh*?TumwI9C=W}M$?J8PuxFX71WZ3(8?(kNmpvCmu=!@2q=l6=gL_Ee-Gp8
zKIF`58k8}pU({bnJH|*=RQ6{l(DNp)61ZFpyud~4esCy%yn8)ZnhH4Ri&tVA;wP!j
zE*$Q5?@7S&ake4=pQ$B;$VN&=Pi8bv#xV{J4GiUeYRscLg%;IKJdly!K#K~+C_iTW
zjk=DhTrnJtYQa-4FFR}Tf*L4+Iv>0>3`0rBZ`Io`d9ii!UNhxQLOR@FO6Ed#MN9h9
zLh2#RJ=`a^92=b;d^P_w>uT(qDf=5#GK{mP!@-7?(HClW`yg6cPi+KO_p9ZD!<Yl#
z=qbEa)bi#5-I_k~_kFo{WTDP^zBBDVkM<9d_ld6yrh<J@3<DV$W1tqPc7b565K@oh
z$b8?!_B`??cr_4-0^-T30cl{d=%bB;MM5Fu0-YshS%HE?vAsho$7CQ<k}XP2H-Ns%
z=kT*@)@Dc<-E$xYWbyuID5c3!luqqPwt=TVI9Shsl|c)PQG9;eZJ7^_&Ajkj>P?)H
zmnB<s)%5t|PuH%7jXgG(BBdPt2ABaNb}2SA8LKr}9Qh?nylRZwEEuV5fs8kr>uN$_
zQeY6_;rDGlmy-6%mG8KkrgvupD_n|DbEG;=w#}~d8|@XH4T*J;6`5^6zKrPAe8!4U
z^<2_rRZdr-4@QOvo)Sl<#|g5`eyJf)E7m7jTV{%{r04Fd<Zw1A|90o`lK~0ndB>Lu
z2^kp~2(LZn-28!A&k6i3x#0U1_St40*H7W^yTxc47if@QWcBKDST|ZNsV9k5qIKbH
zMDfRGsFAgO78`fBXfgS~_iY~ZB3%}P_OTc!8I#k~SHH_bnt{A(kc43N;JxdOnP&b@
zf7mub35LiD(j!q7j&E=Zt=Xk=JS-Hi3PD{m=M04fE?Qi6dC<H2T4681r|91Gj8C_y
zx)$})K3OYw_p`Uh;B;ka3)c#BbUosK|L!HG1-dOwuRA+|J}nmUy+EDm(-h>iH3dEg
zt%F_q94dF#B-+LA)@~zV+?{~pH9{OkrKn5-sK{2#!!jr=+~9RN=o{$oRW1G(3q}%_
z9@jI-X&sI9GhgfF!L3yDqG0xzKw7n}nG1NZUta9fuv=*Qa3UN7nr#HQLVfOZikK^*
zSoa{|!eIYQio83{v6@9^pi||qX#SvWz&e$O4E<6BUvR14)8Fj%g3>z|?JSxRq3UlE
zk1{(?R<BdrQXJZz`C&6xiY+cg7X>Ga#c(S~B*;HzOK-%}STt*4d(Ib+x#hoeqarl(
zl|^saxrHdx6Q`MP@`e5izdMw~7j6&sW+u1iqo4L6+Oh+r?=ZHLm~n5rKQO$W8^6{6
z^S+0koFbrs%MTMUynX!$k_*+_?^~lKJz2d&j8uveU$^6I7&b&iS0F&IZ`4Md8W3q7
zeUnc~_bY`MQ|gb$00#lQ9v@JZq`HEv0TJZhPZ11e2y8NZ3<W$DYy+tsXiA6c;B+Th
z#Vr~7<zt6O!$0y;egSP|MR{(6Ou#?@V3Ud|DrbPCW}%`>7A_VBJP9Wm0Z4W1l#w)|
zYN*(667tvr_FEw33=Ee3@0J>q7Jp{Y#lZ7GQ#>SmtuQii!?y0v>jAfNR}n^y4LX}F
zsEEfS^dWG75lnrvo&22h7o4Am=)>l>u{yY1IB*mZqdTyHByf}4^lEO*lF>?GT#6h7
zfjo}tv=U?lJdJ$QholU4YU2C}xT3>dhe5612tr1LOV}ptNbc;H7v?RO7M2`rb)_Zh
zeMB$kyPJPy<~ic2V?wpgkK%8JA1ULDF{^0T3(cFTvVY*ljr}q+C5Ma%;S*TWdS|B>
z@s(8O6yBUu-WY?^iioaEEo<TydT40i`KjFW)3w!^N1A|vG3HLoiJS?P@K=vP49<wt
zH#nE#e9RGLM*ZO;wz;7gldlUmEWA!{VWEEdF{8MWwpxunVWOnz7$QO86$ay}6tc^=
zjmb4iCT(rHycbob*?>G@KYRdOB0YDlj{unNOSKX1Nn-61Wp8r#$sy7sRptb?0m6&v
zL6>yu7l=EH<G~a}@9~L+Lx7M;$gF=RP&|Kn%=bP>bOMNO2!mxFMs2yk<AI2q#<bAX
zWBYv?wPRuZ_i2hyeiDqpapePu?dQ12-!O#-azi1mu|=={0i^IVW7ypON!FVNo3Cdk
zp3%#~8xvF$D{|{+4>%*|9h_L>Xv#~WA83+=ef-}-J@n@~3FOByfl(u`EMy@Z(TDP1
z47%XG&(6rfK!44T=>$T?O{`P0(~BTX;S^^nt}4tB<)eyBhDAn>t&WrJm&cKf*zIha
zvP96Y&K>G5c{aDpO9^~3C6}XFNZ6eRTEBN6E8aAvABKPbN&LY{sG4$=ItGm_XTX&t
zH|hCe-50yxS7a%{`mv-LIkGvS+pp<A9~%Dss3biGo=Xmd>({27t>kkOR$+d`j%b&J
zku=~t%ri7C+gTj;lk<Rv-J3mkQ0LheQd}s%cR+w+okrl>S^IoZ=W&bDT^nzwMWRb9
zr%L?tSQFRU9li8?(Y7?Bbd$#2ZAC}=c|hh15N0b9BbTSUE1DfP9kJ=cXqQ^m3)z#;
z;#V$)8>+*DqFM7<Crjh9DwWA&G7&KXG#PLKmG2`QtWofUt${+#f!A;pBeA-!BaUde
z?m287Q(r^P2+OR5VB=b7y`s2R7K|D0z@yDHY?L!Dews&bG}Vhko~pW2@Dc$VDQ{rU
zQ9=xv<z&e0B5J@KBh*ik*paNl_l{S|jeiq`!+usw)>?erQe{mV+ypk=6adCD`;%eJ
z^Wa1TyeuvF_X6gCYo3m*-d+bkRmH}}?sxJKL%t%o<J}C~P5&Z?fv5v#4-vJT<xMY|
zTWQ?#gP2v#e%{aE_#hQL@xZuZPuMYJV||x9JcXo$g2w{TQO0klC{zloYQk~8kJilN
zJ-a4mXT4po68gU3ejsM$0&lWf^_4&;6v<>@*S2b_n{6dy>pdD*+;$MJeNSb7UU=_}
z5G-*0HOf%s!jP#7nsJc*&|iB$VRPeBF$pcP;JUdYEB)t2{@ty8obu`BjGGGH(~jnf
zqD|AOm`d<=Q?vxZz-0K2OzJv4q}_uG&`gS{AtFkFay!nyAdt%%&2TVxa~-CU82_(F
z?w5{4bNRakpE__Pd#;-c7rU}3V$7mtLI?>w94(!XCQ1$-8|okX?Mt6*#L>Gp<Lj3F
z@eK8tw_23w$IZ1MaN?T=$pp)eq`ZxJsK+A4wVL$`$Q-KU^ANhxzr3Y2vIfY;T;gBB
zgV{2l05grEO0Siwa^N{!$H%hWMe1>%J-<63piIyzC7L9_-@6nQHc)L{THMkbIr=S*
zXtO66w{`w<2|usbRNfhHSuJZt!A>iM-X{M+bFWPJeCYyemoML<(n%&n;qdl!1Z(eZ
zz+SlwC(!QakyBHF)K&jxx@{f7gGKy|@Ebn)Z1w`ip}yAp(CNtj-Ue^*Dzc^i65&xC
zVQ_En9lRUMTg5l^lj&#zY_bB+dihn17n_djQoITYVgR`i@H>p0sIW@D{eHUK=}+@#
zW`clo6GaCc(eL+Q+0Cw_1QFAGNinHE(=d6arNIc(4=_!!@pQg1XB4Id4Z|A>+OWfJ
zi#V>d1j%lX(z9#G-?zdW@e3Q7q1?qBAbj>qU%s84;V7B~U|JS?$q>7L1BbNFVw2q@
z%Xdv~|9Ma40ySjxo$Pw(z_B?Cz+WpM0$k`Iqy~w@m%B6VNG#&E&!|^2?CF;B;{y+^
znxkq8z{8;5h>^kUt6a=o3kJNo%s!zuR`=~AnT-vE@OrCW+MxM4bdLz^4}(*f5c_9a
zlpgQEeP5=l<}P?eFQRO3fGSo^<hnAYMqe-CnNx;ZTwfX#yhYgeh66K5SaK;in1l7L
znf0!j^{hGf+jK{M!yjbdvtHNI33ONDPJIwzJ5j>mQ`3UO*>?&NqveU#(5|_G5eHnj
zqNhy?JB33C+!3rR7K~Z-K-@o!cO?>&u?$qKnT-@XmL~c?d4j5=zr;p0AfUNVhqXBl
z`>~?2-gRi6H4#>PO+N1B{MjVr5Y>zF{Gc?lK<hgZEBxrPcO4cXo9b2v-F#9k?(oEC
z0Y(UM$mkce5ct{0`vxd~HN{Gs&%%Flt?Y@D!ghec!X*C!r*=x)Hb5Z%@V`xO*03lQ
zmg3Gx1(SX$ggZjMO+xA8n@&LcAr=K7eNV$_HG05{1ZLTw_U!{Gh!UCuLj1zmcEm|v
zrT`7@yZC{(NO0jejlV62e~M0-WMKbYe+Vs?4h4n!RT7XpWRM71=JgMW$bNA(1^{u*
zd~a~wStdA%((Q13N+Pv*4loR@4xV*`h=4=u4`fyxLs!NbK}7FVG+H9fy^$x9!OGhO
zLEtr%x6@~wJV_G;(=Pq3Gl6mvfnd3d`eU|%=?ZF?Jc=R4;Ykiwrt+&{T**VW>M&~s
zfksj>n>%|ncD}XXQ$rLdxs%v7k=%x*I0AW1+Cz`N>c^7M@fBgNjPeIm?s=-T8xqBd
zzYk2R?`?Q$#|ost!I}HgV$DnE7K_uLgi=FMT&w;9ii*rZs$c20@I5WV17>f+MN`S-
zvW1Are5PI<BCvmsesCJsq;zPZG?%x=?zcCvE(h^{G{ymiw=K7H&MF+xu1F(#LU|g*
zC-Lj|HqK3Crkobn@;xu;+_X2f+4>iE&UG#dBq*9D{T8kC$0Zo)aG=>sqNHJm@c}zA
zdD+%AanW^kzxj?J&?685dV1sBh2s-ez08i(um+NJcdhs+em8A~#-~sW=65s96sQB+
zw{qFp{Jo`Qeh&nMZlL-c=`B2Nwj#0$!RZ!8vJZc$Z5&;OS}PdwfMCc)8qGf6^2+wW
zCU8(Pz|6ctN00|$f0p5?f+joR0o+FS$F$6#vpg*Kp2`-TXiKa|{6{+pdT=ZZrTmMA
zzG38&g63YZw0R8QLS^GzcEx3BbVsgo_Sd>!)kC)ksM+TP-sffqKE+v+Mr-vc`IcS5
zzksVkx9O1oO^^CpG1B@Ol`02mqHfER)$w?lx+S{DEXG>DeSEQi1itZW&2F&%8Rpbd
zdUF>q3%hqb;x8Uh^5V)P;1J480uaEs#h9+BBKrX}gnYKb;U3i9OV{5vL9IW3+G?yi
z`y-Rw``PsseIr7|mGAw5%A0GGM;dH4#5ADcPk@3X%@81RP6um2Xsk!A+r2x@ots;G
zkXZSyAL(0axWg{P{!#g|lKy>f+9$9W(3%icN3nG-V#Pwz!E>FQb#JbfqSUff&P!d^
z!mxB#zGGX#Mpkm?`kkSp41%}NQ-=Rb(`9q)(lvA3elgx7pP00ZSm;J@j&nw8`kf@0
zGz`>W0~)Az6JMZ{?_CG(@)g?XXHKNv_>${+fM+p&bZK*A3jkdS7<yF7x4J<S9s$*<
z6|7oio;KZRqTv58QZe*}++Ye|0SyJoQ7Parj`&BaNXt2>^1tcBLsF1_;4eX+`ZjPy
z5bzPfnmhnT7X1%C`#GI;f-WyHupe2CInn{8{46~n;u4T%lf1(K9<ZE^^$S-{&=>G;
zeaRR%q20WSj~YvR@eiU}jn?ReuCb##xPH`}%BC>XT8#OLn=B^SNVos2_&BbE!$Jn5
z2{_>seyLV+TR79{`TuS4(gZAC9PQzsGCztzTg;+0MZR7v)D85gTDb%uDK1^z$z?sT
zrvHzzcZ{*L>%wl!wr$&8w$-IBTV1wo+qP}nwr$(4uljkvlaurB{MlLA$xc?XbKjY3
zu4|6LkNm&4ngOK7)JMyi`c2Bc<Ri$svA~We*Mn|`qA|ig-2Me5WkLpw0@)GrlM!r!
zWaeHT7FZzP#!W%A&@Mv=hQR+`ckf}$fLAMib)-Rm^rA)YSVl5LBQO{hsNN*~!6>c7
zy|}e0f&L4-|1<jhBiQ~6yLVkUC!V>!tVV7;fjL8#{-}hydzuqX(ZdDfmHzvu05I%4
zEDPlRKS{#=>yd*F!BVQTEaM;DPCWIMuj#I*7<4E7zmofZ`Ivv7Kmb1D%g`Oa073qr
zp6dSv!RY=-8vbAHTQSPDj4~DCPd2C!NIj9h1f`7Q|1#g8(<y&Qfy~hXgk!6{J&<<z
z;?|Zw#?%e0#5KaB>;=Emakr;ghWvFXWs!6)=F<8i7DOjnhso{WEdH58^4hHL1Zc2s
zxQ&#WaPG1Jkt96O>ns)XPZb1H{gq}i8tDbdKTIK9wxH~=+;4-6w4)-6F;J|yP7$#6
z>&VI)$`N^XLc~%kwNBvEcz+C>-S1|{x{PQz<X6t<tQ+|$X>DL5?9A)bvR^nskS|Jk
zK%B#^h!?vy%+LC7)Ys-~wxRie|5k_G->%ZXd3YHQW^D!&>}v9y-(`Jg-+eHn_GCtb
zT+mOMN;-Y0+DG9Vlf)AnR5_6G((dt3r730WQjv<Xl+Y!b2#ZJT)~O-=C0EYtm)sT_
z^n(xwV&rCTP>3a6@HdTtE+z?lkj+@g!}~kfAgQ~c|D?@C!GE?;PjV3RN4oZ9B9NH5
z8a_I0dwGy`4>T;(IsAu~%pXod8v%9%jx{X>q^~hW;m#)HbXe{h9_`8{#zO#>H*?ka
zhyq`Zi0~=zwbR_DV0rGin6c2WtbqmsHHRaoa8ocdxH{070!_Nith+i@bFi<!Du6Vd
zwDy^yICFF2extli>F5^)T~A%iZw#cnuAYa3!n$Q6N`EPkjWmbDDC+haCkc`aNzHVJ
zbZ>39G<)q_{};4V*93Q~0`kGJxvA|D@-tzX!iee9;q`3`ztG&eQLUH1*LY38(BI1x
zuVvPlOD@$t2J}EUl}(!`BU_OZ+1<wWeUBBpe012jrj`!ZNJBqs_S`ohC`|NkGuZ(R
zf*ltk@cxd*&Vpdj=HQrIQv%!Qhas#Hwa#SR3et9L)-pR%OO!h>-=_;V2ck(%5fLOA
z2SA*gF$jb|lPn4^R}6{#)iFO)*ufy8F?wOa2j>;M;56ylrxqC$3T-BuVz1}iciF?9
z)1oDm7hoc-H?4@fj%B!|He?Ik7`oT;X_1CS`61!6<3O!$vVYdvI9Z-Vdcvp-T}-yS
zglVr2EyXuWyA=8)8XArYl{I0+Vdh0({Iye*Sr0pdfN3^G!#6}f=sND$u5S80?t|DT
zt3Q`#(JMO(OUAp|SfQZl6M*z=mJj=l&?_a(_jCFUlUC~|sZAmH=hp9z*P6OQ^FO|+
zT-1}uC5@bEbWQ$%y06s-lVF`Q?lLtwnEu5o%-Z$)qThwi+V?g%o;+|~dHeGfHEWG&
zTTq9)d!|nA+tMmzVoPf~<S<VyTNtr+O`<bqh}n>{2=)O_4lPj7()c!lh<;{fh`pAC
z#Cn`S@bZY^{I}q`D3b4D+Q8vz(PXH0hdNNX-Z!j&h<VTk3Il?@NH1;ga89G=qd736
z%RD)DC+qLohwoiRvAXy7CCEMoW~4VH46?e5RksqdpbF<*I2UB6Pk%X~O}p{wIZfAI
zt#Km?_37&e`4$#Lcvx+dduG)GXF6}}9F0p2_|M*C%vVKT?Z7Z*(@AwrmRREJ8DE5C
zDcX`u>due6`KH2Ce8n>1%cE(tw|&e834X%lAL*DBE#wk}dNBs{_OWyO`5;I<2#2v3
zyvFE{jKp<ghzSH17Y)wLBHy?Zjb;mqLV<Loh!Y^!67+hcsEMm)pNxxAav2Fypua7$
zqcTIWfPf?;?^2f|+(Y%o<W~U&W~ti<g|~){rv63mixu*UOv_8rovEDJV1ORQ5o4TP
zl<pdqJ3{NL3~A>UVKmC%_GM&@*<r|j&L?7)o@|ROd~_-DY<H@i?3`S^pI6f>f=50&
z!P0=g^Pt~NB=`YlHy=r4I{|#EYpgbz1435Hd9e6l>$`-({~Yr|UEFlc^4(i$`LnEr
zsr5qVsJw?i72j9n6|=c4qo$MXle(N^c>}nGk!(d7Q#txIb5*@XJ?0|cL`uO*S(p-o
z4ppRvqgmh*!2qQ|2w&vlA==hyq(Kx8{<gE^4Jf*H>BLo|lq$`&*p}sJKmO@5TbM0b
ze%a47G*DO~S}?(7y#2s{Lyu<78U=|jkq#nLESZ&67!FQxINPmO!I$lBrMRCM*0>Q4
z3{+AV&L1qG<-mv;Ac2&<i)P<!O@wr7s$N>-MJ3_E^xIRdBZ;rD9m^15*FpT&`<C9e
zG|EWP#ELs&%GD(NQ-$Wmfm97z5UN60cpHp@fs{fR$RU42D1q|C@@@MSAbM=Ocu{-b
z7S%?$Fl>8JCAlTkwCU_xcq$z+*eiRiln5_>guId}t5u|v*;RgY2i-V*EIRc}r_(C1
ztoe%BJPxI#U=_<Me*c@-I@N`w{eZ)Wj)kL}V`-Y(`8yo%oaD;ZwHajV%gnBPwJ^F~
zs%+Tk&U1sH>w-L$s+i@YtN|+iJ;c>$zNR9k$N{vyVU%{JO5F@yTv}nSK+1m*2@z2M
zf_H(0WFk7{75B>&U*zez)5b<8nn}zpu841-DSS+m<UkNVe{C5o)V}kX`B+}ZUe|^n
zSg0;RrdzRR61-fb2ov}dV|c)s#=xEENiFeAm``QrLmZpHCL;gi4q`lN-(bdyZpz(U
zf$rl^d~PR7i~VkcF_l?xL@IQn;z&a{U|J0yo)f!mT1k<$XsZ+0U1WW0f^|CL%_S!M
zcBaHvz5P@2n+IO*(Za{@^x-PJ2ZI>?orx^P(dmX<)G|B<x;@IwxLsb&Ub`e9(3*4y
zk(V~0cyvrM|L`+KNz|Rm?X=d{<Xs>>5=qW?9q~bgi{7);h+3Leo;uo>AZ*eY+6KIK
zG97-l!95izcT)xx(KIP_nQq~n=3rWYSn7sHK0n_x<oALcT?J6##gGCd5JBiMTZylE
zwNjZprxpa5yLFolJ+%Wh?O$Tjrd1m*Pm*!h7+`ZI^SfR57iF)8b~@DsdY$z>d2s9T
zd*dcbk?~}^+0I=1FkIV$FL3n{US=f=L!Qb0F-Z9of+9F@nL`|kURDKt7I@1OZIHqm
zd0Mjei@QfVFpYLpRnE6ZVG#%TeCL*C|KVB=!lBGi=Z){seJH?~u30t`7Cvcx<j#Su
z$(bxxlqBMsOzkA`Mm2721`6)pe1Bsz&8r*>j}zF(8;X*CY)iN>jVzP1XK9+$h{VZL
zA7={B!i9XW7<(3tf*8!qUE`7$P4Pi1%HrK%5)k^?805XvGe_F1EHRN~qzslSgI+92
zZxCyhf~#W~?4?Fy2foqED1zR-llk5ILe!IW{>76ja!sTu-5iz09w0`#X)wPgIGcKL
zw<_fjHPDi8eGs*CklhyMmF0pS5x{W7nG2FNwa9r$aED^jMG{x-sw;puLUrrO&(UJf
z@@m&BR&_J_M8Z3WmuFZKtfo(e$n)>s3?kx&`WaR^=3+8&&kmh3MzjQBaUkw3ai9p+
zI@2YpAypov2Mr+Y8_O4QTH<hS(R?H;<>h1iaW39;HCvb?S`x@{<@jis;|TUdhii&i
z8@A=6&K6JYO@gbN0Q8RehZ=2WQf8}+iH_Izi8gfig^Re5)+XKWFw*Dtt>!uy{rFBs
ziT?KUU?pA*Q|YdBT_Rr;)XrQYJL$?r%m|soC_Pa7T<#V6K)QDo7Cau%Q-3-#Au3zm
z2z^S;!AY@d_R-?HB2|b_Ws{5<lEU+B7akqAr$Ou`a=(4fggiY)v7G_D7dPb$7osKT
zz7aS<$u^jf{YA>u40g33g9rws^0@R6%>4sP93}uZJlCt$8og7an=re5R{jyP-Qbh`
z;snp=Rd}e%?Cuq7GVdh~?{7vGJm}FdGp1%adi@NgG#~D`A-ipI{-~fNqUD6)4@<zR
z`hjKyWN0R^@ffyR-HK9B1LV0Mcsu43WM96GGcJWn$|^SbxDVqHhCxO#Lr~9p4FN<5
zg6)8{N@1(mN?k=s%48BY!pG!kx3I_a0s9L1Kd~?rFbwk>4c7B$Cbjsm_-~&|<QN+n
zM71omvq)nT<->qs^lD*Ut*=(~^-zo2)WfnH`(R3Gj<!UP%`hHxbYvn{Uvx@52GS5i
zJX&GCs>&G%kP||5buq%%2GPFN@=|3)m!Pw<<oF7z%ZexZd;@{9O7pl)R%kZ!f|7uM
z@>43p%ca>7P%J3~YuUfWTR<g(0*?>6iLgHWgfy3FENB4yIatRox&hn2MNLDoE2{XR
z&aepr{HlO9w%KjPg_DX+1!f-If@WFzXINy+69bh8O$-5K$_v}iHT$mC-PJWLD8~Ot
z9QldMp!*R_Y(*6}seE?l{NS_raL+-OTfhV4c04zG({>s@Tz#ghJs*-p01WBZJqkmC
z&9w5_!Yhvq^o+UGt39whjCh@e$=6#vtj@A4SjO${xw_trtINNqKkDg6D(i;5xn$I&
z99O#EHlU!FoFWF{GekuzN<JOW`AuYZ!d-MjoN|xutVmh%bH86Y3AI_Q&BJ@-J!`d3
zM^V)*I#=1GR_4eoVa(4~6t>~B0NPnIvC_J*0qs}SIT<p>l?s7}*4vp!2W|88=L^r|
zt2BB;Gk6qmW$ADWZ*Ook%T1pgtq2LZHLP+={d<yhTYt2NfM6`X=w{OXxw9#RT`qBY
z3dl>il^+W219$KlB@KRvJp;ZndOV)bL$}-H((Hy`%s$TZ105GlR?xM{hflp;z<kYp
z!dGqPXZBxgVu^SeeB!QR#}?mxJj=?*y*Zn2@t4Z;yu%0+8<oX}g3{itmV((qT&&7?
z6`FbHGyQ9H^%bhDQu?za_Rbm?%To=55RZy`HKosiap36|(wIT86;D*|%sw?K3#s!_
z8Ekq*9Wj>t{7_M|H#Or>=QJ>8_YH0NDP=Q|sO7$=={sQqc=94{3l=xWHW5p6mn}gl
zrF$)+8*V|Rc6(`~HlM9YBxiM1^<dTg@GLp~jy$_kR6J}#{l6esYRH<UntZr(!EXv!
zS8^0#d9`+%d&Q81T7{7<DEm7mz|wBiKt&wb7g;&J*J05yMkE4VIDalyFCD^A#RML8
zR8l>=uX7L8KktOo`{|xU1YZG=b5-0~F;lDEG215#%>Wvs$*q44GtaMYS{^g40cUbN
zZYX1dHMZA+h|8=LH2=N@0yBgPk^Hst=e4WYA^=g3ZCTKsB$-Ztf|vL$bN!`tlfb#<
z)`JW7QKcQ^y}Dn#_#735OilW(;Kf2wBt^wZ+frSz*gES%eXQ$I%)Vr*{cb3)?Wk(d
z=5v!|y`^0-%Kch^J9;C3AnPPQ*6sG|_fevI;@tT&StI<l0jJK!uLuAM80CU^Nu@zt
zzm<B@Kn^4^)iU=$v-9>f`DG0Z7}(4hmPeI2ZUjtbVN=YihA0j0`&I`dRbF)qWYH4$
z)tM{zcRnqSg$wAvP6ge~o%x^5!|v5bPOkn(&X(A;mrG7&mtSyaS0z{T55>PRg4a|m
zQz8Qzhgi~oKn!SzsKGS_Eb6kV0-9>VWwOyG+?_KUZ)Vi@xTD-5MFC>+iok&|JTa7_
zO#wLxc^L~rT&8LqPXkRAev4?g3D1!QO||=@BitgU%tlw@#}GY$M7XP$)BVF|H%$H=
zV=menNI`kD<lU?h=a-}u1eaN_`+7h+5Z)3m)O|Y0UqLDRz!V_;e*%wcBx%X+=!HPq
zN!pO5;V#P<@UVU}GPaT@au8=A(?KMY9p|=Rh-Ox;0SH21B1cTDkc_R3pS~`5qDJ8{
zgv>-6Gd0z;PS9Qo=#F#YY`95L#I3d$J#EeEGWg@rF0b5zscE>A*Ee@Xt~51ecI5BL
zgF^qvlsr4M%m;nY<`yj?p(p1*Zv#GB>%KqISH4Nf`ysp#-y9lG-F4t{-<1whe;uXL
z25q4r+CSI;!K1OO)jfn(WkjKN8Rwzb&+5O%k$J@p2`;xC&|70l{h~!^O3UzWfy9AE
zpy5aO+q(!xAP;~<F=KV<!~KbIQV8|oe-E6Z8}qKG5?o4CuYWz-5k|=<6}-1`Wn4M3
z4t`s&{ij3`@4zdjNgDQo>S^9$(W<ic&m{4;tHB23{zm$XVqzetA+4@CyRh8{Mjrht
zTu?>t2);RMs_Ntj$#g`jB<Wu`cSG88`-#~nxOxzS+fg5>v~)2}pHNChOkvXdSPLM(
zb8ZMTz&#=~(tG_rDW%L>3S2eWKX|zfBD0CCJd8T?KB6o@qLe!{TGiU<w`MV<=kNOB
z2fy92x+ywvR7knT&PtaK0>xM4`$PhUb7Qn+<Ue^=-`jDuu1^I#Qf@FwPVEC#m*`I4
z3%pG1{zB+$>xj3R=@-4w+a~`8ONFM;qIsylG8Ook$NF>GX6QC)uIvKLv30gK=j;WR
zX{eoMz~7`V8<&M%iB7AFRLPacY&=NpfgpU9N?RKq1pz_?;C8bk#QT);glE)M4MOj!
zPU*qDc(c3~ZMwnXL~(&bzRMvoXCFp#OcgrS_|5U!d(IDZmETW3lq`g>t$)=LH>OUT
z>GIjkk1F7<ZBvbFyq@oNR=)v1onF3-Le22pP*d`)ns=KQR0YDh9@Br3Ai0Qwzs)<3
zR`zYPFASlSV;@f<O8?T;C%1j=yA^C{*O{MYep>$A@)&Of{hVbA9o4Dqq9=5zu1)0K
zJu`Nu9isld<B@AW$Tbr?RVo4eo8lZEM?L|St2@!1z*h^H0Zb#pA<LXBEaO9~xZZAh
zEpT4q&~14feA;6!-w71)8o=ss9Q!S#I^twga9uSD(&ahe7xHJ~tf`elyEu7*dh4CD
zwwBn2$`=}N#`RllFEhSF?l!>XH9%WE;4-W%8aehO4rhns2y!1ocPwkgxtuI87wA{C
zL5umMa|R_B1?l6KzRfm+Ub<54nkb(YQ9`}>gKI>-w7USdvU8E`PYMShk{T-eG6#_*
zCr(jvJ89*WTZuUXyqi{OS+LeStmCtFZ-MEmgscM(K?(jE48Av$VoDnR(YX%e)?H~8
zOYY_3xx`Lw+hbJO2`!4YZoLq0P3hh};AExxcq>X@WbLghurgPxqtQI4&Gu)IM@KMS
zcOx&V_5^-B3;dzn$~Su1Uq=+Jc)Ms6bvh|b8e|G%`-Bbg>j1(*OiMEB%GF`oar&v&
zyb5Sqk!thv)FKZyQ|0jeXl?Lo8k*9on$JAkZ(lZSTY+ssVvre<sw0(!pITYc*VRmY
ze;7G=<uwHr?_FOWn?Vn#vxL)uP!3(>L_L3F(@>{JiUJS+l{B|uQnlzF6PYsR_UqlJ
zE0acCOV{>xJ8&XkyK<ZaO7F1~*Pifwtt~FujB+z>xlAkeeP2-bY*f$;%nwl<1Sv3#
zZJu%E8Hdl4lM9d#aW>})v<D;Y=L=J}wv4}i-V-(;aR`A#{ko^2?+*upWX6O%l`&b0
zaubwNSuR2aR0S(x9M1Y5(0gr-)6wggUeEC%5>Fo^fhYr0H|^KGchE1$UK7mOf%-8d
zG7T9TW80p_ogU-tFcNan4ow=~$Akq%n0lgMpg}~S9*|?6zJ|DyhZpW(OBBeUI5_#`
z`X<r>`*`eC!TLdKUs@mSDd`xg7^mmXQ@{FPWf|Ym0zd^+*<FY`S~*%CMJ+8DE3*%Z
zit3npYiaG?##kz^@+L;MaL=z5kBJ0;-oH4l3E;tAJi1iOeH#nW&ACuXxk`J&+mNOP
z0D^K;B5Q-mBcfbO&cst%7$u`60AVP40N8_a@k^HV;K0C&zNDACt$POH>Ei{)7?9Yj
zsw`^92|?l6OXvZ;KR=Y<<F7~W`s+zk(`ZWM;wwf4p;=$kXo3Sof!Hbp>NQC!Wc-RG
zZkY0j=!|u0I%1J%<a<UcfD+qRQKzlA#ZRpNYRdOak+@)PceU$BEG<Nom!}^q$K<0s
z4ZXYVP{Uuo8vmNYnQR803VOy2XfQPEa4ioMg&Iv$_bG^}E)A4`qD*I?5x5V<W(SgO
zT8KvsqA*G5_3h^;mE7xr3DO5?_Q=tW#B5`Mp;o-XX&89ni6iL;2*NLP>B9)ZCw1#%
zIGRX}6=q@_iY74?!oEzslG00e$@#g<VE^k~k+43?zd0+5iM)V&lMpMA$T-cLXa8KX
zt3yt{8UGpEu7n3ldDBs)BdRIx6SGnk-2;MyGt7PChN7=<*1ZDxi#;%8X?o*pz`A#m
zeV?e5KR6A{G2`Oz=Qq5!%Y9+nm-urC9$(W&`GjL$JmmE4C;fB>PQT$Ta5{Wajt7!}
zH9H=L1ZdvOZArE+G8+IAcbvc>Jdps|-~)zE-e%TCch(iOmVJDl`-1S}Rxl8R7@Pa!
z_zZCv{$|~5m={T&dF9>wJm}dTI(@!EGX>MAYelbT&5BQ)tKnW6zu`zXa^MZ;j_^Aw
zBjrp7&ueNL^RZNo81B3-Uvr^Jt``_Kn?2ARkM|W(2}oC&y^4dlQSI&}rkZA-eKvl;
z+?qrVWdWTvuqV2S#4}<jo?u={>4I^FSyj6OV+@V;tQrLSGHo%-NiSYQY;s8rX*>y}
zZ4rS(coTk$@=9?&3X~QUs)_&yC*b6|vux3I2S;p%C#^Dpm{!S?NUPHK(dvMKZU$ZO
z;9tj>BF_AT86vN{2pgi;EZ{IX1{S0C1>iTl_d(~XlCBC(aqbKp3W-=>jM5dw-flMb
zw<AQDs?YP(*#HBITv8$iqn(fAo&ds+kya$1Bs5c?T7A@sG6E;CxEqshfG$*8qC*(*
zNhK`%>Ce|iS(^jzO@uPe8WhS})I`6-8$HXogMiA;fuRPwMF}vzPp9i^Z?n~}o{he_
zB|HcqA(Sfr9s~-SZf5&*DV(Cy--}y1d$%sSwH(|$|Ea25jOH$H-#&bGDR4rEd|Zei
z1sMbspmI%{x@ucd@f<ar5hjY)7|u#D&R59(Uc_@n*=9K>^$IG>OH8s2ra9c->b#d-
z@()I`?V@Y1gU;fJQ+L@mmN;t9Okx^XHL7O9f`dl`ctJMp_Lv=_o$jNR?^Zk7FcrJT
znCJ*gb%^}sEpnonTwZkf?1-8?dM1@inevdKjaYwN<K(gO`Jf|}_7DB&F0I{qGlu<p
zgZr3`9L8UlFK1!WpbL`(DrWf345W-BCheN<gCXYwB#0PIy(4v&!&_Qko}V7xJ|S`B
zYsXN>$zu?19<vrhG$5CX^jgX*@&w^aaD&1@QCg?ejAnL)`SPf#rtx#-bX{R<&>_b9
zWC;l6gL1>1bW*UP!5<7x!Yv2Ba4KbV#gq!ONY)73&|u32^NX-?g3(apz$NNe(MXt#
z^sjkt0hOYVnq1Q@zXk%CXmSKY<E1+Y(^D&G8!aJ7e%wVFARUbz6KE>b5TUUSacs^V
zexBQcV~Of2a=3!1pYfLE!jFH>iJyoufIcGtKmkHdLP3E7W$N7wAOQ;6F27}L$S|tO
zEvcv|5;1TlCjmpHq`$Z63OtpNCt(M8V2n1zTA+;<xPsZ+S)+<ibLWi$leiPN;EI`9
zCSqE7etvp-dp!79Y}r2R2$hCN5EK(B2+(>nn5hyT_kEtuHY5fC3$g;o15ks>8QOzg
zGx#T2Q+HJZvcv5@k#x0pJ9Tn(&WKtmNjd9Y|NJyK4SAl~-NeE=*0`qDp8k-QIJq}l
z092t+7zK2)k`1fcLeo9&T+eBU1|6i~6q0a!fTd}|X36zcE~!euffLjS3qaRryP<#I
z2+X!f7gmoeIpECb&PBwFJ8X-l&=W3kS*=pl#PMh6@f%CZ5%%}d_ek`0!x(k1{JKR`
z#q*HH=6N#Jx{-NtlhEw}yxWW{_U}%?zOtd~#UYB&0540Z9l||-evLjjZ-vt|u)2va
z+qj%ulg~|nX5U8=?6x)F<H;T5O@xjY?O)qi*dfWJs0)$VCclq`X<MeyFo7E)I8kbM
zwR5pNLi1QQ&wLKvGQ*#{BfKt~{b|kA|61}35i|lbQ+Y8FnTQT&(300KKx=4jHd_e{
zq+(Dap>CG&BKy&_D7k;QaoSD&2GEbnCnVx4^>FVBION42A+9Ijr#~~Rj-hW>a1E>%
z=eTKXDz!>qGs```M&|jN5R+Uo<{l-liHah^c!@71Z+wd;ZqdEK)NQ+G$S3_Ku**So
z3X3c!qWqgf^Lgs^o-3MsS>5sXoDCTL8&o<8qqlYAfOOV&dpRy~%;=7`r)Sa;gvbdy
zKA1<G)#z<~Ck|aQ&<w85|89m?=M;6}$~a?DEuE{LF@3EMOA;2P$m!z}Kc}YJBKewb
zVlekRJN`NW-DE}>n&;tFfM&EHW(@x;P6p1zZk)HVysJm?{g?xdeMdacPx|t`KN7*T
zKwcEvpu+Yh=E(B3(CKZb?+kxq1DAUu-9yp(2vO8m2+~=p8~2Y@e9<Q`p=_jbL7=<C
zIF6t_TNNAh^Hma0-?cP*Uo{U3MoVR#Urtk7NjQ<&EO&vIgY0X-9u$6>O@cnN)WSQ9
z4NT#X$q7{7aur|<P|$f9M^21ZV-ST!;WIBaO3R9s4TqKzM)N{0wYS6S$Fg)O_tLM!
zE;62caW*|7?T0iJVsR?9D?FJCzs?Y#Mvqdpih>SAjqZbV^Yw?{x_bElt4s-~t1N6<
ze~^V#Xdb20^Pr0DQ1jQwte7o{W5XhqL>ra_%27)rDnRCM9U_KpB~dnRCDCYXNO;I4
z6lk0KBrchyb(MbwS5}$<0|{xxreUClyXxDrB>KdN$Tgcb!;6|1#bK?^ggUswf(VL;
zbYHG!osMe@`oafQTWzJgLh#4a8B-Lzl$(B<rEQst1zxU{HU$w-c%t`@FEAj@_KFW`
zAF<<TH$5GemXs*1Cn}ztn4rlAq(GH2F(Ku$Vi6KcA7dP~#!MxzkVM5NoGmJ?D}d*U
zE771~F@*N`vZOFMZ1>MJYHTVN2!14c2z7sv1*Khh`ocB7na{Lzf9~sizw&M4npv%*
zB`GhlH93*FgNu>>MOXRd4F8+n8Xx38?$O#ZJ;2uIb((thkLT`B=?|AIAA#I73Ek*V
zaEc)R&@=u_BWjQ`J47JyECvl+^g!NG?BY&^$Em+vTmOnMg+HJGBh9cmzX5Ko3%|bn
zn(8rNsL15)5riEH8tXJTiE>_~BOc&?!7(rrwCba~QV5s`Il9K$DdO4^S3_2IYMr;7
zjH`<AAvS|d8klig9&fR%_p)O#<>|HKE_^i}_w8TgaJk+)QvZ~T@c2K1oWLALRUAAJ
zpZ|zw!nyyH*xX@+Fqn2klpLh2u(Y^5|C4`W&8X^=pZ(hoVy7LhZ-6i&35NhtC}C{G
zXxs&$4=^1Ff)F5v`iX7;s4}}xFEC%*OfZAKxL+_3GTj*jf?kBTTnfbxhJGyvS6xnu
znzPXSiYz_xKwg|OQ3*LWi;Qhnlzfu}Ll+(#LocJ4LV=jbI9}_C<M2>17LXf9*-6$4
zPn*~4XLl(79E*U4ssS8=uK$JTnj%UINhU)eQIuF393D;yCJgQ6GY<S2!s3-U<0lXQ
zEm+2hCu2izC!$@1f9BwafB(!|>i^^R{U-VsE1J@+Tlp8O%Ra;iQr{Dlx0U!u1bY4N
zcj0wqLKbTY?F#P*igZ8OflfOuKtVa57+^mTV8o%CfKCA0fkb|NN)RdP%!s-Xs$d4!
z1C``A6lH0NTLr_hKU%&-k&n?~$bUC%hOj&Op{-m8i#;wkjoatAp=lfE%!rrP56IRp
z8rB1VuWo&aquvul%teQ++RnR*yF5sMLIiSbNU;0|cSR)rGr^6c&0V8@IniBWp8r6n
zYNz^%3`$rn$!TI@;$joyt<jB&*UQg}bQ1n-Hmqe@RsXlp(y@%9kwhPiuK$s&XLbD$
zMI`0T8#p_~5u|<sfP$q8|F{5de-ts?(y?VGX)7%)E-!{nwU;dUrq1#1U6;S6K8H2m
zH=dtS6^R8?>jZ_Q#8iG~gT?4^1VF+Q^acEjCH-fJ6&N@2_JIQ<PB96Iq6k1uObKIk
z@{g3fAqYT`Eb--sM^4lAN47$M$N>iqA&62$$OQz<52brc*@HH9Kmh@<(1VwHU?1SH
z8YLPryQ9p@KwuR%%}J$gm>0<)p#;O!Pk^*bfHbL>%q9%JHd4GcEi&4SfJIaOc^03}
z^)@V==Q}QfZPSt$-Rd_l|1BKX|4znEz7`p&x3^?vcmE9jjoZ3+@OF<fXjHJZ_n+GR
zgo3!dmhF?_!6?X(u<(9NxY+3UqPB6yuJX!`Au{Q9DrP^AabXi4n_b>_a1$Hd`7;L>
zcZY|^=LdEM4+s2MX;vrrp~G|0rRMYgsYmP9)g~X#@8k0E$H~jh&)MCVg9j`=Fq5A9
z<@I82N3_p-p7wn&+)pzvokw{-8-iKlbtAJ@TkGkKMM^Ducxa}bwX64=crG*ZBSC5-
zGcYX7aT5vFxT>;0?h*^<{X1Flsx2b6SkyfZP@^ZM6X)X*P>I}h33C2?G3f(k1(I4u
zfmxg>yR1hdn>@brFSCn_ifIW{Gt&B=5vFX8JVMfBWTqc-^<p~8K16qBDs-)=M57<|
z0+M$hJ!>Qax<r$#H1lK2Z|vIszYGmodKr6}YeVS*e8o#YFue71Y+{FbP;sWkG&{xE
zJR|bY3NMwW7}HMgVt5t{-BkzmVMz~2D?qU&WbSR)$*0R2;QvHBC$TSa0|FMpCmUjc
zH6r65>ddWs)MM}<U$~C1MxgcD;xR+@5kttl;o-(_Z-U5Y?HLI|AjwX?+Q&7ZFLFgG
zO#E%0(Q}evFUFB&wMf@al4EkFIs4>xtSnZmawEN^d45Ncey;3b23;W7J|G)EmbI&U
zv*Mgr`T$a(W?DcCYPY!B5=OamJ}R?h^aIEflO8`@YfD?MSnS2$whJbzUfO04SWw{S
zYTZxUiSs7dN$QY5`lZAm_ByIFSM5g6L`0<V8HzBb|FMzQ_@~CHU&32?;!j@T{-RTb
zqN#WczHVhQrZ79t5k+6V4srVUJtU^Phh;O0pj8?%tVI=>!Yl<dITtqAq!BF7_8I+?
z<A>ConyV-iEjUN<)JIk;%noD9o%4Vqco+MAT~GpQwh~F6V3z;G(G0SK8E48?Y*T1u
zabjeFj^Rl8E)Js1@RM!U_qI7|R(;`ej5*q{Ap-7<?U(yC+eCh?n4jt}!w7SJ!+6-}
zx^Iz}q&`HI>$#oB31Z9?aXg83l#xi7IKAP?vcQXxLm$MGpZ0O?{5|cZf`h=-4F@UK
ztVlF#=J_LeLH<O=M5bD(?2MuwrLwEF^Zg=C<xUhTMJ*5a=sb}xUGBknVK`XBkw%y4
z<f5&qnWo$PhCt+6h%Tb;hVn;Hqu}%*Qb9Rq*T}Orl}cO5o&=~}bRHn|l+Nxn3jb@~
zIUQ=UgE|5cl-bIqTlx51!CzNh#^FNw!v&ttc5O(}jy+P(iG+6@f+fuGppaHqdF)NC
zj#+r8Appc0Qt?Bs$i=orM67PFuG&pSWw1Lw5#U0LR1oKQ`UYTBt&JOR74)zMa><ty
z8+3qtR=J?0sI@Uy=Y9TwSq_|=j#rmUYs1{;R{KBKHopZx*w}3mkbutk9l`mnp-Zh_
z<g0HmYby{BwR&ERhH+q&BCpa638DpV%q8gLVLAYC%t>D4y2%O<C8=8VYY|0R%pg*2
zddc!<jvpc7Nk9pkDS#NHuq)SL5K$(E;W4C7=H9)@unG6RMg{mz@-iORSLiqAz))ZD
z;f3Vm2#?Ee_v<Uw23S98tj7JO`wdI7-@2}*VxlmG)JBp>87m(k>AEfnzi|rriYhhy
zM4g-%0;uEh;<F~=yTeYSDPOvGf#eFHS@$rg1-lJ<y(V3Exj2aXd>9|nk>pgNbzYY*
ze_@pn#9Rv5Tf{Th@agz?*LK{GH1DDZWQ1*v$M>V0*mh+aaa=5**%pLamQKE_DMs|Y
zQ)wC%E1Q7{0<9Bs@jsCmBTCsau{pPRo4Zt3B>Mj&|NcZleWicwq0{ij%hcKnGs3{a
zWyB05QQ~^g9@O$~e!XfkCC{Uz`6t191?Q^~75rWcfj1^}OR)-`$&Aldh2fS3jgcC!
zp3Sb!T&bSV76Gl>nMr1khV6~!9>m^Q1-jlPy9lhfkc~LZBI~1a%b52MnmX1yS0w;J
zn;O?=D{juqYwp-}rPf{|-&Ng6+V2~v9s5Qs%ytsYI<L1cGTL0-v=qGy=zb<Nnk=Z;
zrf|!}NeZv?$ZJ$x;_fL4zU5?%4ofM@ZRb!A%g-UcH<)@gwbBe59%vYrtmYBTh$$B9
z42#-ufSgf)7c9T{!Noy8F57^YqEo_sB8f@!04(q-K(03W=Uh~ydgASR=dt?gyO_DF
zUtL{h@qJZ3LBE&#8CDYB`*Af$B;uQ)NvQxOLdPNug%g`8I53cW_JEoBLm>g?Q#e*I
z>cROy?1M7!57;bK@4~VTMT}&U#_Yt(n#Rl;moZYsF59m}{HI7U!jtM!+Q8tFCds61
zE+**PIWlzCGn$;0Q8`;=GM~mdmmIr`&%3^%cyvm9v~O4~-1nQGaCjZfC#rL7GhcRp
zM4&*Jq%$?w=}}psoRJU4zJNjX=*E#aiK`z{9K&8#><1>4spF%I3e5f+mMhs|a_%c&
z>2#7)f`^o<w>f4P=g()<h02?WD%<eod*po8RY~gAT{<6aq7`)S+P|F5tBOO-cU76s
z&D${F*ZFDyjjh?_8bGlFsJ9rTXxDA1b%_V-<d;nIE6t4!G#$<3H>E6!xVHGRTpKyI
zgf(_Fqz1r=oW9r(1wHIK6R%g1d1u)=3Ei(hpRz|+FDE!Mj<2$x1F!!4V*AR;zw3T?
z{!;&Xxn7dV40xlsj8l(Q$E~#7<H4Q-d#3Us#0|sW&AXOeDrJpVZ;&s~+Ms?G$_g48
zhj2|N!e_?6`%}QqXH@fgeq1#dpnB}~ewOzrpjDJrSblAfr=<n0c#?iSdgN$OY-54w
z`Iol<|MP{sI}Flp<}2y#p!F?zJ0-+T7&tG4f{qgueTQnpkA~Z)_y+6lrtoksZ&U(;
zWF+ZgRKblS!M+t$DyM8PS=>%w4kA&&xN(Fo*(Np*MM+$qbU*?vrn1Z<5UVW5n$FI|
zNU2qjG*MnYa#7(DHpQR{6iq{KMg82OVNjVXV%4C#edD;sKsK#ef4=G*4#)N4w^bAl
zC44^nrd-<LA-En&ahwBL`gpM4PpKGA9#`ss@KeM5u6KA9_uZc7%So3sbv1I7vDErx
zpB!(y9CqC_;JsekZv9R%&wlq>9m8NU(6S@?aV7tv-$t9W<tdD$FPIyu`_ak<D*c>5
zj2^}g<BZo#im==Ap)DN?i`_iiqdgOcxppOfyPgTjdKZ~<u5(O#4uDo2gVEXDayjmq
z2E*yxw=H*{exf5`==J!Rre;w_{t{yTwO#{M#Q70I1dk#!gP|`gbzut%k4e=VfFwht
zdEm2BI`lh5?+Z%ilIMDP<K*P*^zz&r|M>X5{p#2|WBIdVEBmLT_iwT7Z5^dqNnhSZ
z$#<ir<NZ^um76-Zb$XRjsFXFj<*%Ck9JqdcHks2#Bdco)_xPH(W>IH43;lBb|FZ$8
z*QLCmKO))g4|CY~pDXmAUHlw}%5t`-f#sD|L+WOg`KmmR&E=l3zm^PNsaVgOwsPc$
zKNs-xqbEVouyT>ZbcIlh^g1^Us_i-;$usTF2<N98idK&@+y{WpS9^%UuNMYPh5F5_
z+P{jzwcoqv2*Mx`^{JoqF+FjHTsM;b)GQvVD7ogEg)Pb1YnWA+yNoKpvMrb(A5x(&
zST%a}!@aAVLsLpq>5U<irAmjHW+a*N>1NoHr?`am&ddJVr>UP}w8(m0ZtMy~*RcCY
zNVQkdsWI9AtT*1TfBIJ!yKcI__p?uy8+EQ;J>~0hr%oM(ADZz*%x}Du-$CBoSpwXA
zJaV%(Ha_#(X=O<gol*!ozFTbL6Yhh7-u34^pe`R~rG!0@>Axh)gI}o=8jsvKZoMb{
zX)r02R*OaF^c-Qq$xP!rk&QR$1{ub=(y2cL(eO(pQ2wJouLIT0Pl}W0^(9y_ODDKL
zs}xRecnKK7g_lzH-Y_S$^=6Yq%uaC+M-r0<lbofN(|*j>+7zLBx(au$fT<Fs3vzc8
z8{+KH(;TPxiMiJ@e!mljs&D3Li0e@L%rZGPxe{<xCdq}oDifGHk5$ZAC!SKk^LwWx
z=Wk=jpwNR#XF{l*4^-AC7s5CjN8%Tt*A)3Ma`_-5M1l-?-IcGXcY^b@{vBO=|9sf#
zrn(i&he5LbTBLG*-!TJqwxn)Z0@K$`or5Z=FeiwUP@dN7?|CE{(j!`JSlfF0JB@-d
zqaxdp!uKPb$oi|m#HGG+Nj_7m170kl3<AU@i8aiyvEM3$u?X9=0QL3tQ{O|clvm^!
z^Y#?+Bg9z0Jk4C5eO$jHqj@RF+GGudUG9p$)UF`&ls)E`cLaVTQxN-@X_O{I0EIlS
zt#O_g@}?1wLvzB}1QpAFA&SsCp>XGIXp%UB$ZRZN=!?ziv5zKZSJv|)f(OaS@@G8L
zYRw}Pe{fEY7gQix(ahBn=e#(OFIT!mOPSW^6b>`zKzHS1;tRVc=l!CYG}FwLFO<BJ
zLvuR7`*SzaP*KphK&O;Wl($Us+YL&z<@S7l)5LMM$*|UrW>VsWlC~jTPfsE(<r+zY
zP`kd-T&rlj*jBdJ4)u~a1~Ebip)CWw>6x@@#&9}`iJ^`(AI*e(|G+!^j350;yOjhN
z8NX*xWX&ykTV^fYn#=)w{04;NnWi1$=c3iJgQdE)5$>Z+7jDp)2YKN<1r0=VqR;Hi
z+NhmMW~`DJdpu%$q|}4tzLF)SGuX+Ad=(9z)wy*1qhD~p7oJC4)<66vLWW;2_JUTC
zy65niL<H2C3;8G(!5*uxhyXr)fbn&aB_(e#qw$%v3~RL~G4!bihO>{5TK<jaFj;UF
zR>C-Oq~}@W`SAtwPRh#}&X1j}+{Ts+tK;`Zn<xurcXe<hF*5S0!s#Q;)kG0L(Y1P~
zOU0=wmhGq38dxk{+@9h*UO>@yZ%R=7X01L+j?kGw?2S-1{t-oMpgV~LoOh=XWLrQh
zExs#Rx8-1#MYhvSf9!Aq6we-^m`(VZMd;R_wAHWvO`N~9sK!PlGdb0m;|_Uetdf}7
z5FQ|q9+qzvE>%j@E$KDR?R&$hvf{od_LU0#(3dDfx9aN;sMG61di311C3=LG9*Rs0
z!xB{E{i6G-eWZ^I<QY9W38$)y*)~{GE1Hef2?{1W29nbuJy*c$ZBWV`sm-v{kTU#X
zPCVuL8}i<Lr4V^zKo=%fvpClSMcLgOAi<3$_v207sM#qi4Dl7^BR)nhVuAft+NVI&
zTN%EMWyIST?l=ad2R+2L^cET^<qD)*aGwmk?3Tr)thFP}Mw+@0qgQk5FhI@Wtys3X
zC5)p;(BxcQdsBVZeA#ta<(;mcYLi!vwe;yn`&)|37fDf!(E^d4d#f4rfIyUui|y0q
z&W_Q&&~3XI2HUf|=lXUlc6`&>-i%W9hOObYIeiy#m)9IqmZ8sz+%}I^DifQ`{lPeW
zm#ZQR+mHBff>tP;Kw4L>*lk*WCMw=X7Hk}zfAz~*u3jokcewu@5mlLA%-kS+6)3;-
z><GaX(M8y>RYi0(*NR^?rh7l1DE4EpAr|ZPN1&>r&WZDJmTMFs-pf$@q|w!^tnJ5D
z5n8x#p|({)TfQo7(@cd-lE(@J*5#bqgl$2r!7&r2NRW^9U0lo+-ys6x)w|}TuaH*q
z+1(MGB~ooVGd&5C(!yJg!?Be>kT32%IE2#=C`ehR+fvIEjn{}A&xcIKpHNCyG9Qff
z%pEx|vA8HR-Ou5U8%r_DgRczGWJZD2cTefq&!2$NlGh+6HJ#Q1AdwI^lz?ESdsd<;
z|I%Hc!ocI!xE|9c!8l2PDRYn3#5$hVVeNPdQL&uj)wU}GUz8D90=o1wI)iEO7!U_6
z{mu3Kdbn$%8>Bx*L4V>Y%33oPzuo;9;$bNZ!@N=}H!Po}wqYNgntIJ<0YqfvMc8!g
z5E%@#Agw~+e70Va56C{FQdZ7YS#UxRiog&<K=tg|Tet?12sCnI*SH23FiQ#T^3;;|
zKv|cqtEl>&{&lWB3x-#)J&$e8?rYAZ9x`A>-X;?BDJ%+fU=pa2f$ytM+*6l%simG7
zJtA%oJChU*NKg)aiRgh(C$X_*#VW{^eNx4EB-zEPK<g^$dob~^D@WCRjMHr$wS)z)
zRegsT6zF4Nt4M+6st!!f0>ATi_e-g@k{$qpHPupD8aXdk+04JDYbdZqVH=GcVI;xy
zWXJ+c^a!0C9Rw{D8AzcvlKp!5*Cn>ElPBB$YEkz_>Lttf)2EzCU6)%rG$pHvOoGrB
zT7|^dAIa0dzc&D=rYW#2lS%XK1a=m3ufqt$r4@V3tBYPH?<R+Cj?M<8UgZJ(Z}Q5Q
zEI+k~yw@C{I0adi>}Qy6mAEw*w1q}aKS{?}K2BrU665aop_2h=%{-}_PXbO03P#qO
zm|Z}Hf*;%&7+g{_?#j{-ZSk(Lf@7kQXGR=8*|3H$GQ;J-5{+Y#)&w@Pw~PTYDzDj7
zxV>(s_?4R}wJR6hE6z?K&3j3<q5@sC;Kr6SI2=J9pNj#%ad(PtcJ=?VyUldznwgu=
zfs;uSv+@V<J6znI&M=Z|3tXcbYCL%J^oc(qf|7kn**AfdKYZXvda}>{tx*UKXTZYB
zEszpAem44|u-zhx#|$~0bTQlx5ZjjK<#-Xb&Tki|!+C4}PVX;9Y}LFGsGVG(yo(Du
z2CXCzWVXs)e_p)8q`e(2E<U8_`lcok+|-&Rc!#;p;bJD26+lrygTFEWiadz=7RDbR
z{v7>A@n8eYjocyKnKkRUL=M-ql41YpNyZm!C_r`46v_%y7Jg&GOa9O~!Fk21O+`~E
zSsBsqs5=t<mw35N_6-*4zgRBH{mD4E^rDLGmAfaa)&pvUC?hn%`o#=rfE$pWUd<n#
z$yK92A+vaG2yzQ-7*1*acKF@Lu1!HhambGZ1{T@p1y_YjoLp1leP9PI-PJg$Pzrcl
z{M@ZmvoF3btK58IEmyf{r?f)}Rpq&|M_291*BzFn%~5vO)G#<NnyPr7k1cYW*L!}p
zgBo07?NQ#u3c2eppIP<+b1%E?3;9|1bSG(jxPG|SQNQX~8Q8z;SU!K3{kDX^Idi|s
zzh&GuI9$4>EodGY@l@`@jXZ0Pw@y|pFZ?^U5Ol*|)x?RFtl??dO`vHtwWUdO^3%v6
zvA2)5{QF>go&0WNrJtBaWSt!4W;nZawYGRenB$Ss{#5K*0zd;?1J*+Zzy;6&s|(Om
z4A2F3L+rB+_yMhp??VhA3)lj%gXO~ofCuOThyb7jZ~_bP<}=pp^;E0{$9^<n9dY-1
z?Yj4eKSV^IB${m~1v%}6gba7g`}wz?SXk%p4u<Ue@921EH+Jfk1K)?x4>RKXN7LE3
z0@mmKEQi_+N8%js+-e3EnIU})Pr8h6pYLn6z*J};5{+JKQkSmV41xh_KX7rvvgO6<
zv;Jh+kk00WxWq1H^Pi}K6+>Ig=hzv-xnF(>TH~fUwCAOFFhu?VNb-3NokRIj#d?ja
z8O;BN^4T1Zh9)Yx?4Qx_xZUn9=98`YlDv+$+ahS<^oA(@7`L^esp)0XIsw_(K!#BE
zG&n@iRNydV8Gny+1MFCPfJQ$MW&!loLe5r`ouB6hpNHC|S1B|^xx@Kl+VxXAqqY!W
zg?9(uzdNoDeS7Hi3+tX;GqNQ{7)pdG_}2|;*bpoPUQBe)t|s#fpg75|*830qWicT#
zbN0XC^+D*Ubmzmk7GuV+IZs7NQ-6fdC(!bwm@gfc9)Yn$qQw_-l*6T`m<<s}agA=!
zXr9hI@$y&Rv4zGHZc*ynUz}hzXSrAr>yLE%UJ(XQo1H<#X4Zs`5<To}`4i8wBkfQj
zw<T#mWu)a+vdQ_nh%DUnRqQXp{<J@#q@}WSWcvy{^;-{piMU+aw39LHu`h;o{mec<
zdRlO<x`1$T7ltvwjc*FSNILxH!7V@JxAp2#gX?$Zf;1q;D-kS{Os5h0W0?@&hrqJ{
zkLLV0(}l^GyMR}v=P#E`dX3zUpsp6R=EJ>QJr2i&{nYXrvuFmSx0&qaPKAgEPDT|9
z>VjV~GU2jHZAB~Q!v52h$-kZmj2tTNlvjk;W@~jx&zHisuS<Gbm7j~-i;{O~26%Wb
zm0{@DtER*ulrE^IXEJ(Wq3J@dSExM3qi90Y65i2Qw*qZTP<zoh@hfZ(7)ad>6!3}H
z7IWMnm+ugvDm#qclZbgEsiGTFa~kc?YVJt1HGUER5ySUibjZh+QbnV)?)l5HV&?Xl
z*0bxaL8XkRO4(VzJYj`hn1e#-cWh5)r=>@vb+ZIlx=@pwC(eCiVp{`xp9COo<p<_<
z&|RNp1$r9_$$<>(`K1ifHs<^?v)<7N6fQK=9N^pdn9$kP43)n0lCE3)ZI^f?`S|{b
zE}z}8Zgw)1t!PaXR``Ts7hHR{M?>OGF0Z0Hf6Hq>>uCQSV86rHPb2Mk7I@BOEl#cm
z_!Qsg@OnvVgyzdQyQUeN2s_}txo4rw{a$`5YX#G`!MG!`_wXvVC{!Q*5LVe2xBsvi
zR+nJR+YiNsqu9Bj_+6gE?M<M3y}pIXIYxM;rG7(<hTN1*)ADPO<I_N3yiuT%ijG!2
z`-9(ocdAT8F+0h#r0F}O(l(yQ&`bm}{<W_x*Fd%K!qQHI<%{obp>pMm(WlI9lOCOl
zz8AKer}zCiT*!SH=kv3NuV4FV$`<o#lWpo1e9Qe;39sKmw)0FRb2Q_s`<7U<Ihg1}
z%X_d|1gJwwYeDXcjDtAZ%F7T*O|n1lkuIXM13kAH-wW&y&Sf*yhul`_4X$d!WdecW
zgCj`n+e;DYHwtxagn2A?5=awzxi{dL-*XLY%J7+f)!g95C_7TYF_<93yERm$$|XY2
zmdr>ae!Yrkqt9h8;@`%4!0SW7cZxU!D~XHVyIyp7d5$=1oQ34^j5?8`u>b@>J|*{t
z`q;Lix&r7Y|GyD^DM#e6XVq^AAm7{!ZsKy?BoNg;x-G9P3x9Xn>-@khaGV8|%MxQ?
zlw#~#{oohwmnfHC5jGRDFx}kmb8&&tGcMRJtHQj6S_N8|$VI_-Q7<d__{;DC2@EOG
zt%h?M1)uSr@8be&2BJZb`&{3a?gD63e#Ho8!2bdNX(Amt9ec<wYEkHNjoculA|nJ*
z7(eg_W%+?{^mF`XKl~Au#De>6@hx8fLaQOD6RMaKH{FP@A9t8^N0kwe-=1aqqAwtd
zqo9cq$TtWePyhuEA&t;<Sr0G;X5+-=BwxwOmNw|G+8r8DX^I$j;|IudQ=k8?vRad+
z+H7&ACfEYxGS@U+B28Y>D@ctJeginY0qx!a)PW~+fEav#s<z79da=MqN|}h=Yn4XJ
zc6hC4;|Mbzc~&68uB$NA#z{7aQprM>{W{R@YNmW>o#(D!p5C$Z+?6KM>3~0ene%Lg
z(&1enS)P{dvW>c%wC@@QKX$9^a->wb0vQbN;Ryi8v?#6HPSjub*7x$`UZ||f*6nM+
zVH@<nyv56k);XakI{^U_kLLP)>-eqc@?|mbiPBM5IaJyB@&!O>=jYb@0E;+#RAO#n
zb_F9#617FU+F5%eK@{E9IF`3w+k@*_KW??kuoiDYG9GWCR1np5cn}o{=n5p8MYogT
z-a1|FrFsxV+udn&@a+Q^ID`NBT?OqF5)VmMT?Q$)x&|;18kOx3jQRF;1v#>*i9$l9
zj>^cMHibuS*gqa@5697w)I^>8{eJ*qK%T#|a~soIqokz8WqlkEmy-}U;Rqtc)rA?}
zjI!ne2z~E09`HVIG|?5~pE-<G(+aOAc>N^`hi?vH1uH1V8<~|2Ns2>R9R>2B>*JZh
zC`Ave_PRE8gqLk98dw6EDcFLvYP)HFx>;20rjWL{G)N_r&9=xYn{GRQ)X9q3D)9(O
zDeu(^bm(9)LeF&Hq`<YRVjCwnLO{>`0Ms0i6i3{O{6U{!8E`{AeIB5<h=co{Ou_Xk
zIwdG1D&fpd)t(x9S~Bj)dG76_V7ccv9VJDE8KYF${q$Om6fT)-krj`1YV{V`3BbW6
z_!4XT_f?`07{b7;<=(Cxg5@PHI1(i&bRX5~mMy0e&PYkixHEDeE2!t*$CraHGQxyW
z_OX(lX@M0sU;;+v$10jnL=K{X-W#-faorHJ7IrQ;@<!d%f<mGa&PaWw=^B!eJ93_T
ztAOjQ{q1z)AtIaKB;7WM^-0|~@ZS<&iFhF}5TY1PkQ6i9LYP-soz14mnZA?sov81`
zeNyzDRCqEyJVT!pOzS()H=1KV+KqJo9&b`Qn#w>^S~Nr5;ci>*_DNJpHU3_0H%GWQ
zsj?NR)BvZ?D1v3%j?n}IDS-6S3^vLXb5v^9smBWIZMWZW<4iRhAOO^8CWYZEwp}91
z&;VHJyw14i=TYtc-MQ<jffMel?4IMy%AOf#R}Nx$QXd0`p|{tjw{p`bXd`p_B#f_I
zp@6ZKE8pY3%2jspQa|?QnpeCxUC6GzcXIYz_ks`0pV&@-b#8t$aufcH&-(T+OW*zv
zRql8Wya3(-?|~1(M`>&3$3Rd4-kX1a;zTCC&jSPur>-u>?+XAS1_%(KQ~(eT;w@LG
zSgA6Vs@1C3to2p8e;Zi8{;q#RiYT&?jcRmb8r!hO8)%ThA`CIKiG~$rxDg_aG|FgW
z>gY_JoNag`woBFTdLse=5wTQ(A|)^?VAZJ8q-8P+6e?1#LZxaoYSpRNpiz^#=2>H{
zb=KQpqfIv3VykVo+hM0&cI)SF{SBydJ4W0IfBxP;01yfc@4va6D@#VR&<g^ghCm^t
z5Hbik_;haOcJ3euA_N2hLx_PTJ)85nSQHRS2o;0~0s)qU{WGfixY0~gi0ASZ>$SvE
z%dD{4+w)<pah6zSxmBed%;2W6^__(%A=L@)E4Sh{E>Hy!%vSYmwY53<SPD=Dh(jG_
zs6~KyKAyqC>#i#R5E>XpWkKTFBtct{3;I|AYdJvZA+#WJ!Hn#Gfar+xWaBLG$hP<q
z8h8c)EwOjp)5B<aIW7h`r;9eeJlkJ<7!l}jYc@K#k>5wk!9R~JCU-ixyzc!Fg@IZg
z?WP$W+-GJ+W2D|#$^G#X+UbBr&We%ogc9+OZ<cTgXmr3OXUCH9U&<5pnga>tPp1RM
zK^!<D|7%0Pd7>oCR?_K!SIG58ZNyE2f2~;{Mk+LnI>cJB*EI+kejn_dY<qDX>`*&9
z(5`m3r~le)wmG8BHP3ttEpAI&+t%Lpwci4ZB+-n**`3>R1q&0v)mNM#vn>HIKkE?W
zr6Ws06B*dfK@b43Weww7GvCm^x83ZPfBf5>p3H9dx<3cAVY~?@iZaP$Q%yI+OtX48
zM{{h7X@nr0a@e4rt=2ZDZ#hJi9D}R+UChdQpxMpwNB8sSyqY<*<A1^aHlXFLZ)2NU
z(W+J!+uGK(x;1Smy1C8MPk&u(>CqOnuthB{?QAWkWq=^lN-y9mECc!73P|m&hTQ^<
zgV-_~VMJzP+A}zU@%1vlh0WqAjL!8Bo7Gx%sVPlun%}!9Gv=l@qnX-;g?RsvV2HJ{
z4DdBpLTP6|B%O`k^<4kArg^XhXzHzQnNu`S>m<S9Mp87)@KAr>Dy+0htku?7Yn}Br
z*w~?=5~v{IR&G6br0P07><4NDh5+Uv3tM)a<TO6;6+S{5SVcdg1S4sMF)g)FhybzV
z)&Y9L-qzAP4TlUFG}3sK=-&Dk({I??GC2SBU$@WKR5ug1wFGDz5P}gD+a7OER;O)K
zqHLtMkWDNNdgi$oTox@xtT^!!Btl7&ELECx88T)0<F9Nv&~oL;e`{UuMBUod=056F
zr#n+ZXXmYErj_`Pbd(e=BMfg4z73=ffyUqnbhVgIFBv%nH4R<J7zJEh<o0G(Hg+LG
zh5fM4dnHJbrb><a@J21h8fSvZ+I8qGyo(oDXpzO1r0P=0RxzmpBsI^IlxU&U0<fp#
zdvAsKRdE%Uw|rGvWmR4kRatA-X_4Dq+N5(^){0i1(Ym9T&!>JG1l4tm2eurNEmapU
z=c2X(7eRfIw~S5M)J@xrb*x~8D}tcj1ly;nw0-ZYd%t?%7kW3@M;mv!1@CQfFWpsp
z@4_l{cUy+Zs`$th0{Um=hiXza6V>)aic7jAW&Onk{A*85Fw}7*Tiqavf)w46%t-H?
z%V`XhGb^u`{{YaZdY6I;7AGp*?9EcPl2vn`SL(1vv4;i!qYlGEn8Ba+0^(1%o%joh
z4Emm^<^s|hS~~J-q@=9rMj<B%_t4ACco-g!xVj7ykObHI;tph3sJy@o++KC=aIePZ
zwI_)87KEv_t%|2Bq^);HW6utcacN@HeNGZ_MQ%MKN_x-aokaj}$N)&v`we{}zulKT
zmWE$=>0v@e86M}{i_=jEx?s-`#ALVE_i2yJO{FYB%R{22Xf}o|{L#;WwNpbt0YMBE
z>IkIN%YtJl0*I8^mH>h*ugNf@&AU-hGUdUj(W2XsNekBPlNSIy0BI!2l4G1{a+Rw$
z$9%n3SZnil6E5sG)F=~7^^bX$SZSRtcG@T2N#|U4(|u39PFDs6QGw_~2`izAd~QZ3
zveQ>`dY<7$kj<i)2cFl&ETW3W^!4<(z2)P#8#{4)E^gsuV2eQG$UBK*0@WnQ6q;$U
znToAbK>2z`WoM{fo78re`cBilUZ7vkXXvw~1NwDT4^+GE2yX=0D2h4Yc}2_u>iIy@
z3hDFt*t;ISwzsqf`#v>*Zr>*c(CwULpg!bHqv%I905XVX2y7U#8Om3e%I2tEPpEC4
z`etcfkI}D3w9b20cMkV_#5<qJzJK`{x$mS+`X55x?de44y0VW`74}8AYOUHiMFg7T
znrvz9`|yn9Ix;r(VBEZ1$LHVmREKYN!pUT71X&a4n!(lvz7~kJLarUK4&>`Xv2K*>
zg<T)q`V-&Xg}C)+^0e-Wo!#s1EAF_Q(HX5aF0QJS?XQSre`}>$xprPFTVF-1G8S3&
z`f9As)dx(%E&TGZm=6($N<SnQNz5u*Dgt}S<zfgWh;8WNh%G}%@vpE6Z644)mq&^I
z<+VD3CDN#7!JF;07xp<Zf6kL-p0-Yw)5ht^Y4h~-B0H5TakVv8Uv<>zF>QSgS3bC}
zR!uL#udWBKol)iGR~WwHN-M9j&=3uwvmeT7M+4InI7))yjQ$i?5X2*!1OA!BPCAyA
zI%tu_R!xmleRrZ=6@*iD^`qg6N-t{6PsTiwCc7f9N>^u0D7%u<pdcxlVcM?WqUyz2
zv%k5m1z^veBTbyw?+Z80oF?u0mB`fwM;8zjfyNOj3^wnyX;&NSD&@Yrj%|G_2(ww0
zG%G%K2hjqgDql1#R5fURBtCTILn}*F>e7_9bfqu93Sdhu);FCz785sxb(3c~Q*O<z
zrAQA5$-<Y`HkPUM4$f{s;3zDCOlNWVQ&GX4UR@*_M=4RVRA~-%^W-Yvlv7V1_}qI<
z-?$VO@I1=_AOO}I7YlgH&18Rwc_biLLqPpF1`~mZ76Dz*TmOh70C?>m23>g#;C!k2
z|1|Z5wcsxR`WOJ1K+piVhX4TmGc^wcA;LTIis%lbLk9SN4mX)YF*Ux@20ql<pi74i
zS2ue`5v5jccKGNi_~SLzy;fPPkcD`lMNF$qgLYNCUo05?YMaFAD6zY@5};;pLDdIJ
zuZIOR%~ViMC0MGco#=nd23zbXCS9g1ecEfMgHAd+E5SMGZu9EvK|bqmQ*92tE6{Br
z178I%0)cr)AeB45|E$<*hd372Mg-(foCp(NM;pCndz`#v2y5Ol6TE{z`4<X5lWclN
z*k+qyrn~I?fsiCwqLq=aL6%Xos`)BFE~06BvbX0czNMG&mfruj@)p0I?!y;uAGRO;
z)%aCUqYqgCvc-^XrdsVV0L=Ao2K<6AVpIWdKmRq{njg9F%esLEjqa-43e(bGl+P<X
zw@w#Zrx-XUohjmII5v)*<KVbB9h~#b6O8MO`;7ODFO2_~NLCOlloiKHVr8&$SVFFw
zTf?1Y?PmSKdcg7t#0C-rS%E=;p@A`h34v;!o7W$>IB@7%(5lf5G;xzPRns-|=8gJ~
zb*z`R)?PBV5yPj<&I4^u=8T#%E?6F{4t`D4ElR-^sFsXi{>|K~{Q9oS*vLCw|9yV0
zOv&7Szd<8p>|HzTbi3aHesqhx|K39z5e9z0vb?KnX(m9!DNvlj`9x(uj0ocl5Goj>
zKpN){-8zgo!TD_qsiu|$BR#YIKhCQ2&(jWVN8V`#iC)rQ9(&LC^LO5F*XII>)T<@6
zz?LKgG3yS!f!X@v-&w6OcW0Ra;_Q;9xS3y!N7~(U9g^4xY&UP<?>_~e$I~*zpNm~G
z^KEpBW<CWyb9~x=MA?;UKdJb#pi)_c22%soQ8iVNtxMjxK^2cX4k99ngzBdylkk%O
zfd1VY9Qiu|&F-KM1<beF-Dj6xEBLQG-`_<3>uhh*lW#8_=Mb$I@gp6iQSVcoJD7o*
zp$qcbwAX7bdZIxaHEVgDw8<8&rgUy>ZoiVD+wi4k&1<qya`<O##ySFMh#RM!_A5F(
z^!cn+Nt4Wu%w0DA%l??H4?TIchRMz&t9#4!eJL)(qo8DI%dJM_$)A1M77$=pYyfIw
zwBGs^H_KXnyKj%}xxH%dQFs-rROO?SgqTU!HL<8Bck$p+nZWn~KYY3a1^Rbx^qeE8
zHm)R&p$n8#K_yjSshx<z|Ax(DmJ~HOhz9^^XGn)8#pzc$6G1TBJjopqOgRW$NOjey
z84|(`Fx?<#ieR?E5E?OwW+%xqyG>=UY3xsgREuo4$p^je!`_goH)ZY%-+|{w*<~gA
zrLX&yQe#f;`aD3yMzfuDLBbB5FHo`-P_e`3UdeCcgN?leOcujx3Cw!$bb1@`*#N(d
z2-tLVR|!MYd1od@X7I^8KATU8$;>Pu#l8jL>v+xM_Hp?(adQE87x8cjPyf$-w~$_d
zIxw@5!lUKH(Q*7>bNzu_iFe)?rQVg9TgbnkYOEAWYa3fTl|4WWywB=uf2<A+c{#KP
zJ%Z`s1_aXhUiS2TC`WV;dyK*2obb*BqDwxt$_<a5zQ4P;%Ou><zklEF6>maMoOwJ3
zroX0icVAh=?ZwA6d|k)S4Su_czgzL|2YULEfAwNC3{|6TvJk`;`$sObNZ9v^zP7Km
zF^y%t?Xo5>A7Qt&Z>g&%BWRe|PYm}nLoF0S4+y63tK37CkaV8c&hg${j71aR5rH03
zdcPxIaRS>TPx2F#&k2rM5H+K>#att0KW`jB+CgLtCiBSg!h|Ml#w0uuHE$^MP%{&P
zOysLbRQ+Op!ad0i#B5<K5*<skVwIQ_q%cJ(PDx7NB+_FkPem$Ib<4q~`g@qmKF*cY
zr9KU5Ow-47qrx@){TQOBmDwJg<DKbBcY5;gD$<+2^k*Q08OrecM`9WEz$?pmCNi0+
zOlKy9%w{h0S;%6R@;}R2c`r#U>!xoZo7uYEY-cCy`Mp>9s<NMh9Ofv;Imv0xa$XAj
zJeRSyW%s5zxXbsC&Y`(D@9YQn&wiAZgL`~W&L8H|OwD_9`2?NL=gE1WGQ@mvzW!#;
zOSjhc^XA&z^Wl87Ww+dXJfF;`^I5^M?cC|>ciZRNvAJn)-9NT}`XtYnb9JWYKjuH@
zzvc%0i+$V6?g?5U8#~8;>DixmB`D?MR>Y%N{m8bsPf-ggwrN4VoVOJCx#Xf=oOhW`
zqbz5)zgX|mp|Rv=A9J`oz92uP^E_XF^qQv@R<{0&Dq6e06|=B?>`(ofKUe(nr9D6)
zNb02`-U0tR<hOaz=c<?GgbE=%YO(9njR^TTH%nITd&lJq6~zfzsK%3S))gAzjN9%!
zl+Nj|ddi!7?510#dA8Eq>tbzo%G&Irl2w;K{Z;9`w=Vd*HW~{5G-Dh5+k*aUO}knt
z)Udl_?6FtBd1d|9x7E9AQO}Q*$Kr`(MP>DcP*Yo1e{ra>siirUZq~)+3peW7`tE&q
zbP-BaY$MbqGjh}dJzK@q@O9U6$SK*7GqNQ|vLokYPcF!TT#}dMia7Fpy7C^?A>Ow>
z8H%S><bqY}Ti9G#H53@PCs3xbzN?*vz%$Q7!5!I=oeY5fj=SaSo(Glbp+_Ds-V;yz
zUj5xKylk!7)tO!y>{w@RQ)rI_MI}|LsX>iu+HilvYMrGi8ER!&o)w4jHHJG{leKGT
z#?Cw^4aZfVW!9APuhS_Y6?nU~x2JldFM2PW3)LDwN49GRnw)ie=!gc&Q@`%)f%ey^
z?rJSu6!1{OM}+`2LNwphTdEAwC~3UCMjyRs5u-zb{%t8oYcRy(X#Bz8doxz=vddd`
z?`xmsMIla~B$!A_ES*gz5;!0O%0dVjiJ(w4W|nQHxcR>02usq6vZieqTh@-VmvY$W
z`@3yvM;RwsXE_&nR|U5k0Eq5kpzaLTo3S=1o3zN{_tdqox48{AzqRlDw|f1yc6i&r
z55Mo9g&zg|Uw_9oTxa#v_8O_3S?h2AyZCb`wYP(t_M%#7R=RDjSDRs1b1<EN3v@#s
z*o*kk^6$-ps-_!^CNqL!I6+c$29w3+aCv-z5KsTTYgGuOCJK$g0yq#)Ad<)wDvi#7
zm@Ia494@bg7F*&AIG3qiUMZdG>ymP>u&}&Yo;5bln-5=pWTQ#<zM7#~nxlE5Sir!D
z(!9;n{K!QEN@HT!sM91-E>zfmHB<V87j~(LeXx&jC~Llxq2I=3-BuYZUWHASQ|%YO
z;MXhF)cVVB@Ydx2J@dYLmgrI}ixpRfi)C4rKp~M*l4L3=Ql&|kAybxYIdbL6SD;Xl
z;##;xsWRnw<4~Dc`|{plwBn&R|MFj9J;3)j<Mn5v0ZcZW#Ufd1B>x-5vJW(&(aaB=
zO1UkDyIu;QKNU!SCW!t)V)}R4`l7sjNxr@;f05$)ih}(`;XYL!GPVSAwiF7s3>tHw
z)eg*D=yY)3d>&Z9LkoFi861|wX$4$XA}azpLy$KV1;fxb2_2I$@eii{<%8LLEDyyN
zV`T}}mSQ7@FP32^7JI94um(qKW9>FU?hx!Q2=@qapHPnp^Mr8Ei13_9FNyMsXs?O$
zj>!R-*N%eu=;%3p44gSe2|nY^QSuE|RGWtC&{$oXsz-D6X{iCNHKeUZwD%pjzNe$c
zbk>Bf{^hvYoHU2iqB(0W=gs4y`CPVutL`e(J%u3I#w*(qvIAi|5wQzVyAiXk{A(K^
zn@0=~*De<X$-en_fATAV90|EH@)YE&`o^!f79f%|P?8K}B<bP;4Fn7YMZ(ds;>Af2
zJAT}RJp8yO5c5U3pXy*!o2t}s(5Q4uty-Vo1ER%@8Y6n3>qLtb3n@mFxSS*l%|=Mp
zlV)?*E^^34FJe)Jch_x!Zo2oKTsiV(%Y#<X99VT~G^kduRwD@%65|atK#s*oB}RiU
zp%%LsrAjnwVnU-Z$aE?*dFqsDQ>00i&dCkF0{FPePhh4}iI-a3RD)Buio@bDN{R&E
zx3>k_0PH{nJe$bEagruUoG95_z3qGX;ZNx<FL!vlm-^IYA}IFz+9MwDjT8yuB}*)z
znyvS(_x7WGuS}7`uUM|JVH7vNdCe`ldT;UO?==lph?dFyVL?j^s~b9{G0c-wkWx}n
z)6mk<i^CHP6ebl9oV-ZQ{p*WrG9DQ}?e0@LojE1Pw3UL^hM@iqeQLD7GAe33Z{PXh
z<b^N~1ccE_(s)CfVvMu~vx&QJ|2#M{j^W3IE-uwO>H<SmbtrDk;I4ns4AECwHF3y8
z8S2o6K8#@wYn@ofI{j&WGqZHVmJTmwW1HB>CO5kAO>KHZ`Sv+wmpyj-&q0Umv)6tH
z?6BOo-nOM24wnnl{hMRu9?sb3U-fEMySmk{VU25A^E^ea=Cygp4L3LYZL*KPbW`&6
z@^}4bB8mBuJ^7l&B<Dx=CT*p|tZe10SS2#DjN&r-)48s7&yPs|*-K^syWfWi0C4^W
z?EiG}cR92dq2n30)@OdBVO-bzsw`~EztZ=6$!EcLVmX(PgZ?Mo*%co$|A$M{#@3r}
z-q?Fc7!R+AUrB@x)!kpD*ZoZgrGP>lC+Y1!u)4SGPM;!=7-K!>3w0HdX#4+=C;;-@
zW|eb50|ac;QwDl-@E~Ax7aj~P#LqC^r~ZLS#_@c7^f@|nRX0+U97KmBRU+|gCh?q9
z0P^jE2Oi4@j)=Ulh=h`UrV^lTQ7rg<%qPrP&G@grcq#sHPI{0EWGNYtiOZBc1VrNj
zNNpE_;z49dU?)NJ`h?Cy!epw}qO4a?C1DJ2^(;4@)5ujFp}Jc6aned;cC1pb!<Y}M
z_9#V54UXeD-mpp`nd_ZA6kxdDL%CTbdYIwiO@JV@<aL2>bgan3KmslhaQ<%+lCTRr
zC8v5jkIwGLqG!s9-f`G-hVH__@ET9SL1tA88O<7Z_lcc=tz-eyk`DKb1ynBQP_=eM
zz8wLo$$c?8V5;T0lZ2qm&rp9Vr8m)4=F*<?h){59!%NzcM+}gY5b_Nw`ka=Kxbh&D
zi-~GIJ`fUfP-#zPo<C<?#jLJYh$Waug10BJ%x9D~5Pj{3#}{u8<J;pBvvRlnvfo~c
z0yx3x@YSsv<G|GxpjAXex#Bf;WeIyG9nuG}7_P)<=v)gdoyZxA@>8pt0Njo~(4+;O
z%1);h0yhP5-m4S<%tlCX_ej`JZ}1<;uu_zZP9j%J(3q11Hi2?M8ROsAG*+JwpeJ-M
zDA(oYbnI7mlShsMq<xP91$`7HTvUjnMivdKXwgN7DSB-2!@XmJYS7(dzbwB=NcjtR
z?T;1SntU^iJ)^S%OrSuS6r^C8Ws#Lv8V=<RAYmqjRc5Yn8rnV|x}u=tp|SS&O*jZM
z!Xi%uq^Z16u=b&)u;7g-jK)2YuIXiuh^SD>?l`6(P_8M;Dn50^Xy~4-uOJ31WW!)<
zG{#U>0O~LJ@%K;nnLRAg$#~Bb3pJX``VSHW+J~Mv)HfSXJXjt%2YsCc6r8Ycs@4<)
zQGM)n_r9G~r&Ubp513Fw|ET2C?zKHnA^<9+KI8hH9J#;j9xhVT(FrBh*{ZLn1t|d{
zEo!^^nU2HwGmG`QYH#4JXDI{|EY+DHZ_y^1VLO`10$HN(fteQu!FExX58LV|%lStL
zU*DPp>Dk18)TrktMBg!oRkJQM%XALO{E>&!_C*MQsDU<I1we1wL56ejDI`y_{=-rZ
z$}4KDdFV+g%fm{j9-aV<z*9WcTp+w`&3f{&R%5O@QEr*!P|R)a^q}eWz)PIu8@;ku
zkbF5$8h3+kVYzP>s;9VdIvu9kV&C25D5^<y2~Xm_C!_3X2N4cP|K|6fIUvypRyYSF
zS;rIt1xf02b{|OAgqtTTx)jSoV9hr*s_h}EkL~P1VKW-S@NF@TJP;jni`iKEaQiyt
zl6)-35Q^@7xhZFtvJR@cu{@2^GOeC2_!+rc6B~K*tBw^63Y0A-aToc*0SWKYkb0nw
zO|>SS1oD;T8ib<BQy(gd2K_BvxSxMpM|wndD{`GsB${#w8I{$wXcCKdiO%X?42i?I
z#ANj>mc+0wv01%~Be6M`xU9bQKe?y=8qYiQ347-kk^hg<QzFIz;C->;Ai~ru%v43L
zm!mFhP2ogAzFtjn;o1~#6hRoTzx94yk?Wt+8k}0&`aodae<#$!Q0eM`(>HPRw#LpU
zbkhNPD)JbX`?vs*29US*l8xSJ=0O8c6F5AY+D<eQ2UP>{8T4S4iL2ecmwckOD_J0c
zbdbfI9>mhbS|?1lYS;aC0E?XGs0E;;+F9YRB51Y^Y^U0eoYp&&0*l92GYzdSm0pk(
z!9(R1A*(})H(DUj4#v5yF4n0BKHQ#y&w)SK=4fUYp{bXh7P!KJ*W6Go6cw9~D_#t^
zLZr4OiX}Ez4h7eQX8twgF=Q)QCAQ;ar`-tA8PmHcEkaUIzE$=bQGyYWh>=+~=go<y
z&L$zimPWPQp68gAK|mlXFPa_4v@qR*7)e~9I3_iO5)VwYTV@QsC>T&ZVm?!?CYA<*
zdx4j7$D?T1LMr$eQ?dF5JLy6buuiQpMO7DAZ3&jHf;dqo@%z<W3Ai;7r4OG7UdA{l
z3uAL%uZtN;4`qb(##4jUScoNW#6q)C>Z%y+xC}&A`;(IP*(4(FV7Vm+XiclIg1H_#
z`zWR4L=}<co88q*pk39KzOY%sQ@l~nK-A6z*UU8$so)B9jSoBtjaB38Cx&+guVQo3
z+gTqA%+@qOX1>knh<08CBW<5))Q@{&+z19NA0eLvH~<i544F**AYw@^nKp#Zh{F~T
zOVn$o)t;_MuzH8p(tNHZohwkiDrQRG1wyycVXUK5M~xFh{elSTDq2Co0YhdIHEZrM
z;xf}DT&n>PmYDF2f<nOAG6n~XDP};JjSJL@JXfhx!Sp>HA}R#Oj1a#FU{I7II3&>=
z)KuFjZUpb$PHd!Fkt5E;MMjntn4egf;1ePh)g{wGDlt&aXvFr?v4s}gCOBm~Ba(Fi
zh%|+3*jUB@5F}T)OX`B@7CsW24_(|;3sY`^cFncaGnbj9A}~=q_c^NvY%O1qR*j%S
z;zH?df|6%){6?uIi25#>3dIB?9C;=qN6I2L^P$-uKsq62)liZvXUP=--9WZvd6-n3
zE1CD@XV1|mEm??Ab}NBm?EyO~=0?VY|54iR+TVkb5US|xMZ{^mdpjnr6%)1-1WB2m
z1fYVMn>!R@hLzOPV#%|IC8Ws?(bC7pI=fZ!6_Rb<TpwPv)fmd}$4+snJN+2m*e|DU
zu0AIb+uQabg*V@LFF$Ix2=5pA@aEiZT;y7UB@&#V+(TIzMHczSAZIP`t<99aUwwS%
zA#<sg$2Sj?*B@U!M*g(0hgFdn(W9bjE_BlCn6{p&)0hD3DoKk<I~k{Em5UZWHB7Kr
z1Q01-BNCDziW+4o1cMmFEK?+)ggA^yWE{>o&n8E`Dr%$35pFInTFOwK!gA&w1G|l^
z+xxNVIL(fm0zRJzqLnrXLw9jmSD75kRB#tIIp?L;C?aX4-t5pz-()g1J#<F-ivpV8
z%qq%gwG>e<7}5zgC$(GbVM-!2e7QHCPbQHc#c+za_NZISh@~bah-InNeY%?7C*Mec
z=j_IO%6TWX^D>Eruso}g%twy_hF;Lk#kd)>9*sdq$SI;gW4HIib_pH<Yg0Sam_+Mo
zXB8Qyb=u`wV8^PILRGwEf(U|0N-FQs5)lysfo$apaR&356Ojq>OfeB;{UR@bfe>01
zin6PQIxwLkGXx}hvld&^ZHa9Wg)HCij=RmS?3u}qQ4woWgNz46NPNb5S}O}O9HJn!
zVj&p{?;B(RAO^58*a%T8ARdJ1XiE$#*J&4zlgj$=`-rb)XnsXbJ7rg|#Tsq}?_aOK
zGNEC+-w5uo=OgZK^88L})9wDw+?ce&J4z1YIWMW>>v6JRp&jSi`n#zbw}-h(w`X>0
z`|F!K()BOT^)%q-b|>rs?+DTG3$eDgpWX6fy0Nn`n~B32R^wQ%S*ZH!*3Ma*v<&eJ
z-@Z0}o7|3>x33{MTPSqdiPPTg$Dn6)!f)@+u)MvK)l^=(`E4qPhsEM%xpG*PO%%1!
zB#n8--Fwtb?3ZJfUtdJ4Bp%7xj$br#mJX@tD-#Wti}@uGJF;)bp4%&TxTPH4J>hX-
z*j-T-L{dFexts44R3Az>tN?M2W);#2@Gaf|P`j>p7A6kS^--@^_hJx*6UTUfbNIPa
z$%R-5k`_T5CurapYB~&)z85;B?1r|-Gh(_9AZ`21*J>`hm5%kTnthiv=K^+g*s+Tn
zIUKCj{9>4Z03x^t7zW2?zDNcGq%?bz-_raLA7LDJ6B@!YnNlYNAXwE=M1o*>@x7dd
zfK0#9IK@<TyR-FnGd-~@o6k(DX8Wyuc|Yw(GF8j_=4jeRYHi+56m683XfN%}t~@dM
zg7<<u*=`%DxAslxyxWgo7yL<7yv_YyUT>F?UW&(gT#Uw5<$nGfw;i`pa}aD7=&7we
zd*1zZw;1ntj6R%+50QWbeLz#5T@b1Wc1pG7Hj2&5Ajj79jL`DEu>(7!D#(b~7cWAW
z5K>Pad=#!<3y<NDztz<Dmx@B~hu(kaQlOb!$Zf940H*INcg9p7rgHI{LY<^<3xpsd
zAVW;kIJSF&4PcEB7YxH04qplyLQ}*5u|6Zm7J?vsjGR(>pz|FZgD@qhVmIJ7VoR0l
zHX}&5YoG_hgOS8IRSyQo!Qy2LS3wY6yG-eHM8>-j7xtX-D9TUM@Y?FjPduI>YT=b=
zmh($d1vVm@03mrc82Egk<b5{CRA+$Lmpsk=8_x7ga)jr~qV%PASuIFP2^rL!BS;=;
zuc!UeU;4oMxfk9?emGuKL`Qqwj9a?=^?}uXPK84&(zaB;QT>)$`k=oNG6vw8s2O2I
zkgYQ%{aykQFe*tY*vBvv18N$8g+iaEfk2{E3>e$LmqLFa>|h;|ai9J)s*!rDxlT^Z
ziZDj(+U|br7ZdKIU~?PJX3Gb4xnd9{UezT31#Cjd1d%E*pb`kG*klk2RvSfp&W8JU
z)JE%_xq~f0eka~0azTI)s>Je8h+2ORC&WQ_BTI<Hj_Y+&NUIYyn>mNzP$_|M$R>kO
zu-Z5Y39h9sgEsn}OZzbWFd8<`;|!MIeGGAI3|JRcK<U&jj~7l_ZD7NWu6vVgt=ApE
zu?NIYlUAB8=Woqy@($RIGW=ThfL%)vhXllcVaDyc7g#RtQ4Sk}^*?Vw%*tlAvFo(3
z;3ijab%pTJFur!o^n49?cJ}EsemejmL%{X4*d+$qx#&+DNE5aDlD-0(W_pCWRZ*k{
zW|LL_dz(#Ew~<zGXOw?^StSsoh?K~)M8p1dqqRg<4_gTO{cPqr54K3;5QY%>Kv3=d
zs2L%HIQ^&vCbC~+s!4s5c1^1j;g8q-#6ZB~3_D4kr5!wnF^&OmE6S<_3vF`v^Yqh6
z639Q8t=)Cq`l{)Bs;S}}B;Rt&yKKBgEz}XcSewztmiD>d_?VC2P7x%2^F&P*Oe5uA
z9vUgk(3mPkXsuCFikCDG<$%~?a-4o0mnP7<P)W2>OO|XXq|T*F0ojy_LmZfobR+;8
zMZ%a+-Xdo5fgcRA+y}QZH#J~g57PyzOzy3OY8s!D!5}A@p3g|0Ow1&Mcv8YZ6VQlj
zngr#00M;9LZz7UW-Q4!yh@l@tjrBt`pk#4>%z*lv-PyxLR|pU1XuXK@`q<jt7uuqp
z9kh|w_-_0wFhA^sjr<%MG)L)8;=7A1S)%AE5lw@bKyLNPj}S>>2B6)KeM*nbS`FdA
z%;qNeGX3sFCsll<BdoD1TC+`a%z$MNbcPv(pvnf1^%mIprh}0tg^m^`Mm9Jt^4LG7
znjqs*D!S!Ip~`YU_CS$D#WWmW<nxo}W=he5pYV$HA37)P7$!}D1tI2hRQXH%O$s@Q
zBM)s5r3nGg(6TdijWkQD5*)+UcmljCb99;0RQV~iOoCg`n1`?&`&yklJ#V2q3iOsr
zhhEEyBG1WXUc<W!ce+=a=s6u#5@1~Q7ZaVj_Bz}vH1e<-|3HV%9ENt`V=aHgNSsJf
z&>loo<8DuHy04`v(&f06Y1$Zulp2~myuF4gWa}Qxa+ed)ovQ}9a}LS2wxOb8tOW4@
zE-`HITsI^{TPXxpcJcs7R4FFrzrM}ya`J^r1$L)IJ5&gYb<#S*nItv8C}IDQlP;C6
zyI_b2Kuv-bbSW?*@uD{nviilHkJHQ`J>qUds++<PlgN88LP~fjQ6>PAG^}7yiK_08
zMge9S8c+n6YU8*<;D1C3%D7rR&ZQu-i(8A=btK)0u2&fmJ_tFKEq9u(?8emNk((M7
zusH25606#Q{6Uxk-P?_!?|`}CWFgz@_&}*{hOgQUV+U(tCO+LQGeUMg3ych>J4neh
zaN8$Y<R}skZpM3HdVIV#VBsE~0LpRxFv_JFk}KyoaLWUTQn;e$r!>n-MP${#Qv)|O
zpwY8WB33H(<dv1+QmSj>!ppZkWWz5|dyuS^#0YuVx;e6e>-ptTJM^a+WJxYO?hzI!
zX)vfx2M-aag^ZgU=O}stP<t^Quhx=<Mge#9tYL%7Y(jZw8r?tSwoiW=?Aq}MzFUZ)
zsY#+@Ry|D+@I)E9CW5?Ir9w@K)}8RgS6x5>{yiW`rk3hG48fl$n*-G*lMZjG;q-KG
zWLL<xN#%@7+ulr^MNH}IB+e{E$tNOS6D2lfx-T_+@Di{ROWmn2B6c;ptJaEhvHs!O
zSZm8gVz}LNK)a)7o04o~#i~e?#;70%OrP~m9Yw|H8sbv2E0tl5zjR=EqmU_ReZ+B;
zuVa!eKIVj+^f*~DR5Es-==-t*5V~FC%nytm6z}b%!iFem%Uv0_lU3UN&>9^zd#1k5
z1-pnASp;08Lzgf)TBL;;Ajr?yjf^g%W{)HvGq_RE)jxhVu?JSOLUG!ATz>;6VrVvs
zI<?R*khi?cm87Atry!nE^R5WzqwvKD3DK7neF!woaOy#>h}HyJdk#thJN8~LUr1CH
zo^4CDb?uhs*!#W|hOsuK3YlZcNHsH(O<lo;!u=5Ea<Et<8WY(+Zqr(lPV@>J;n`{T
zrql!U?0B7%xzPA8RT0Mnoc6RKgfbg}tx5gDY2tT6j?Y*tM$L5~Kc!T09WPQtVc0Q3
z{V4I{C(o)a67fhH>)5MmVsWjE(kZx!^Z})EQ>7wRf1eE4Xm&Lx$y5>2Q7Is7{o>&e
zc7|<N9HVy<t+vK<50235V2Sycs?v}@TTK;<*WVwvPylIfn8EUGMWxu;7CO0n&>$9k
z`&v9zKAx8*(^Uh0@Nm@L=+R!|RfwL1MhQVb&VOv(#}#GF!fr***7oE0Xuyje9J)jH
zgq{Z$db%}7YvGP&FKhDW!{qtTC$OqwfF4C!67>toO_4m9UzH?n!r*-$33?d1#Qb_m
zLRdoyJhR>eL2a^N6rd8J2;jz%hndo(J(-ZucHpO90BFL+qK0W|KHbn)PG6YzRmU-v
z-7sLl8i4RVJ>yAx6~yf4_lPH0_P<$IA%I9Onr96H%e%gVcmR-H<(d$GSQpxHVZ^x^
zAi}Ott)BgQ17_D|m3S(VeRL-YF<Dl`?c4F2vJaNM?=iG6Km<I*Nglqv;2*6Ll6I<u
zo`3Qhg7>D(3`#h%^KiX%FkUR_V+Lp(j0NrbLSQjD&0BFwhwBz$YG;^c_uHEoHX8x%
z*2tqRMf%`uUu`*O>e>LZ?ZUk6c^VU?bKJJ<*b4{!_kh!!OmcBKQl4SFrUel87sGl=
zD8UrnEG7|~?%PEw_xpPm;lb!WXGUjf*#td7t6V=LPjCmrWD`o_?QstBuP6;H85-fy
zkKF)xCNDwQxrg3{jY)RCV|hd)_(*MuD7RWo)%so7hrYI&4tbZPzYkIu&DFgyV7DbR
ztNi}0#8(Zu#H?1;hy7z<dk42uP$oy|Qruuu`{%eW4^2baHg<uN2pf<UoE*D`n~to|
zxw~7ud1dqFN|8nTi3Yau$fEbI{XW~8URs~KSEQOHGGH-fdJR%SL}oTHF-9C#+i~%I
z5kZTkxM&C!Bg>#3b6etxD46^;wcO8=6lvvD#~j?;4(t*1%keT!bx^$CD3O<saeeZ_
z<^a_zP6`9&qMnz8vS0z$67+kSEG2$dRZdB3L1Qp@^3J~AqClV_<7^f$emy@NeHpE$
zz>YzUciQ|HH5JSt_9)1_dwQY8N)zM3YKmN3IBAyyYQ}bF;kVs5tAlGe;^BUB$gDAm
z^66%V;`OKYS3eg}TdPX>d1W{6sc~G#P~>Ko2lR)GO5rlKz-*N2RtVbMzxZ!a$v(@c
zmGt(5$7$Zm6Kk|{yWQ1CvR=nO_kr8gzu}!As4Awa=eT>cTQYa>SVzj=3o-2Py*k6a
z0b8J+evW!$I%GRU8|-8~E0sojC0P;80g2bM;zB6)2)yAkLP@HYA7gP<L2It)Jn7|R
zeo2+FvV##y!^*=j6nzH740+XCQ7@W?R}^@##2hl?zI#tg*O7;h0%30rdrG$O%3o`)
z%ZPiRfV{Kp5KGu*(&~Q04v|zRx>vWI`GbD44|de|fs+vx&X{-PWUou?EZ1M`)Gaza
z+4ZE~57S!ddX{&VyB#~;4Ew2?1Gm#@R21_)ZYE4>vlBvso#ek@o>sPkMnahZRmDc4
zR`ZRT>~}RYvEIU}c%vpicwz#e9B{k<5={J7VNsDmkbtSqfZ7Gz+h(O4=&rGlUF^a!
zEaXJqD9L_>_vhc2E&`EA2!mfS6hV2G!|aIqWf?Pm)+N<qSH-}o<V&;PQn;5vFb%V?
z<Hz)neF=addiYSCa_w?CLoe{jpeB>cO?n2bqSh$S*VujMrRTd|L?pFGPC93281V!<
zLmP%jd6G4g<a!X7{AMYwE}YWH?~(D#;dP=amt8N_hcRSlI9Xf~!&o&5?iJ~TWqc&9
zy7zxOQd3wDPTkp!0m**TzSP0fzPOUt(fi82g%(t_ga8EthB-ehOczXoi^qOCOYG0>
zpW8wQDsEbI*{|O%q8n$rrms!>?G)(q<3&SPU<c+jacIOYbevRttg8Yo{x4}-U^Fa!
z)+EgXRF^L+kPDNfvU@ZFctKCV4&}uC6`+{I(w-K&%-&?#|0qt=I*IS#u+flWG2&*;
zS}@U#Tb}?GhTU@*bS~G+91T#3m~+h2Ufg7i(L~&y10a6&!hiLDh+rmunvl$<3u`$A
zmW<;&JR~0rs9L)Uy@Dtv#S*FQTQDnG^fcs{(uuzwEDtcHYEgUr8kbPVKMg@re0~!k
zwDL94do@k-Lj}(76KyxEDFTq_w-wPdSbPYes67R!*m_@xWxf+-0a$EOip{_pFT73v
z7Fpx<(N9d>)(k5nw`?qbfz?>U2QoRX(V=$**k*;T4pWP_pE&qR^YOR0>t{ShfoKN8
zl;qndHdOY&*YVNtIgXE)=`XIUo}@;x_GsjiEEY))ju(&ng7B4QMu_tC!BA^d;+rHy
zonkGc&em#L8Z9(bE=Q!wwJzpCma<&{id81HJpzuphP$aA=f(D7c8jPo$@TM`9^=Jt
z&q3UlF=%D40kRhL+wia%p>e<^((hj5kZ5mrB{k)VEz(>^A&Gre(Q3+;(*;i!Mt2<9
zl1Ce8pZhUxrIiQJ*`IG93n*^gENugxh~m`5<<9~%VKSh7r2D9|V&XiaQ2V&)K@NXi
z`>|XcH)O|PDU`pKhP61b-wbg*ZUYhwh^I3oN9yW-e`nENXWH$Xo8Of-odJt2GQBoo
zGozO+iumr&lLo(Fk6<hRfTi)ZAo+tyuuc*g87Rv1YQuj{$bcgM$2lXZggCAnEWW4I
zPepHfzvE0snM9WDUzf=c`mm)MSbpAD+~_)<ET;L69h3kd^|ED>2sDr(Pdm~8r|{ZI
z)Fg9_nq)-H&2CC4zN%W`d_$`Ci$}8^1cB*A5O>_8-d(22$c{q|>^`Pa8kfEa0Rfm9
z^Hep(HgWp#X3Zd9<axt~zA??wLf~oIvydgNnhXw}{<cy(;FZ=cLU13;gIamAp;npa
zAW5qHV&?*E^EcU6n)_F?s;TqGyMHz*LF`rN5VVSP!02^*?%S@&DSKF8ohb~p@aM8_
zpz3D}C-PBDusQkVXWrx4PV3)(!{>6~2o3Du?leUbiQHHc9C?Z;l;|Tu`6$b~+eik%
zEg1(hs<yrvQWUiZAfpoiXhk{ZmsrF5g4rGGOi(IUdK-FSqE%%_SQU9_BS+7~@&!by
z*hhWu6)5IubKNSE>tJt%pypxrM)+oD%^MMETG96sq9*w|Xdy`C_M(rf7Fj%9T1Hd&
zEKN6Ez+p40i=4Ws>#h|1y=_D?Mzc2%MCFGNby^YE->0ONVhkuADBSpr1Q;Lc4sBFe
z&)_5MaL1Z<sv)VqM-5C4`WXr{K4xF<skp|H8cpSv&vU+)uXG)ts{_{MOM~u~FLZF%
zGe8mW>?9s`lD@Ay98S?1=b_gkFVf4tYA<eOMGDB03#)p6!);@g^vuG~pbaF?vQp-9
zyA?;26Q`;q>702|-5v+~_;``@L3byuq&x1l>iscSWoD>2nn@m+M5|8SCaVvWfYX6%
zYnWF_I+@JdI9|=OGx~k2o!R}3Ft646$ZCyPN#c8D)2SQ>_z+?9_-9g|z#DsXG9HiQ
z+gQc^CveQ>tlFIsNfJvRsoBo>69QF)=eg<vJx?bM3#$77p%;T8eHCVVJG)IS=aX>x
zjsugO*&{9ksCMs1XaT*CtGqLntbh_S(Ct+22a9eABLgQyI49;$(N_gJpo_IoreI0)
zf&eVx!K5y!_tdJ#OhE)-QxD^WR=5H~T%A}a#LOJ0d5mP-msy2uH@({*s`@q{+8iHh
zYjfSN&u$Z!rjIUT=>J;1K@j?J-&^W7DC!<-DzmvHG6qxsQuwS*&Bn<FVyBQ&<GP!-
z(wf&d+o5vfN+g6O?m*$HXeOe#s?#{zqDx*Ql%*gfVxtuzRJRoo&;|?&cVTH(Z%i7)
zM;v0S=#sH=T{O2`4U9O2qI%N1i!QE_x2>GHAx|vJ9{~6pT1V^RP!5l~X#;H9)v%!L
zA+e_ma5jlL_ijENkbyYh=tYc%PPJc!%4h_0W2_g5J&C!E=zR7*2O>p2y@*1?u9{HL
zcFS8)^@@ljuZ&BOuKRkW080`%g#cnl%9cRR**rK1)@BU>g@ZcCy5}lga>M=Q;*rOQ
z;vpIVjL}uq7M*-V2PaK39Q_EGH>S!s)ioz<H(5!5*GhP!1wS!OZt%*p0Y=q}mHaU<
zRkR6Ooobp4`s?g~KRt@#0Q%qNN_q=E4kGDOAnYbWZB&+qYoSg_0t_0JQ(l~5Nt!~q
za3N7O*H=KdYxRD_W9$rPsl@92^MU16ZON~fVx?=EDH9X4S3%RYOPEdMxWiXewSce<
zRpHLP`F$-}zMqKz4plZ>w+AsCpvt@znW~j?IeECNR5ELX_0Cms^1^6uKl~fomek{~
z#jW7&vOVq_-^n9WlLr;;$&wBdvb!qkYND32UEhxa?Soc5H6`G5@AR07)T%n9-?q)&
zTF`kTVeQoo?A=phD=KvZX!g;XgRf@5l!%3_u@?}dRmxK&&1NT(9=S;Nr{UC@z6fO3
zhFsi(8+@;D&M6)wJXypV)qP#mf#<>oFKcKn7G)#p&wOJws^^9hz$H!m^UtML<l_k*
za4q~d(vXGDF9RdrqpW(06lIQ_qMC(BcP1j(LLY8hBf@*dz(f5eiCT{l7+0`_o6Y+&
zT$Vh{)hFQdo5T8-;gZk+BlIQ6>+hKWZ^K7>_B8l@1{H)5=?yl*ZtCdCN6&F#UBACN
zuzH3S>asdmvSS3;qV>|;zpr)+LfEy7`!ArWhM;c}DX1D5b$6I<COLNl#7p_NnCdX*
zy;0D}!BkGw=ZR8r89)2HI$W+0*|RBfyEZ*;bC@p4!9AV$qeI*MSH;k|aK9z#C0vp=
zcBJ71QzZPBjzbbMg0yJwf*1Cd5*y7lJIdCho6}HvfGookB#}`K5SvRB?6|xloC0LB
z&RyWiAoXxBNDkk}t4a>+(27oT%<D@QCf6UOr1SKGKznae@To+Jy<Uv@@zBsA^fN9j
z1(B_X#<AV#UlmqW2s2t!=cmWlH++P^i4d*sXMkCN^@_vc6a~;Gt_ZZkkT<`*5PTC7
zh12WPC81%D=$9?B#c5Q0qn12%xx{i-UsU#Pqfi6wn{TIwBXv4W{O6%B1YdPz((YqL
z*@&<uF5D0?Jg!291?Z;ayoZT!i(Kg^2}&lvtH3}?u_E&Jg=n_$p$J7y5%nf{yG}M5
zkA7fg3XAQDhJsBFd$+y)ECY%gc_(Vq#j1E&aI%X-U`a)K8l9HxIHl=9G{r$`M?+kp
z&3L$7xlB!=ur}!7a{t!3uej|t78163S>DqCL~)(wv2+`z=0_UljwC|1M&z6ElCg;d
zJECioe9U*7oZOGa)GX|{V;?iT9Ha6XJcd%F!4#zc=E1i6a#pd_Flc0=<e{*Im~$sJ
zwCBAa9TOw`y0tNrfiRIZNkuG5%n`Oa20XQ!G6^dBy-Rtrwi}Knfu4uW!(xc+RcQP%
zLt4`G--&BlPwNOIUv!8}O@TC*B3*~}X(glcP=HDKF=NuTa7k9U_(ei^3?qIZy+*>Q
z(#QqzzD<QDcA(b@-f2l%Z;ZB_01uF@g6*HFwl1)tLCCna3jXDlMHy`dxvc!P#TzVG
zqM^=XmV~K5iuc3>=xZ@a`$0OrD4ynuG(yO1rF;ls1P-(%`;=Cg*4Y}QDw$YR0(6PB
zeMhseS>)rZcT)fjoRaz5hwh|7<Pnq?)WIC)e^lm4@6WA4hG;v%e0U2htK-nqQU=%P
ztM>4CR)0OHTa}g{ZDaJxD5h9($q5@;swbsQOqZ9UrwCOD5K?SfbU3B24`6TV*H_!A
zPh^+1@^(zg2lo;c%>d-LS-T42Dh#u9ay(B$xb^z9>eU+mo~RWb)kNfl)I@FH<=G;~
z`Tbq!`+T1l;0OV-sWlO#U@ZVP>A#se=Ao)Ooq#$v`Y+LpYcRMs{I~AK$)4O%%di`A
z)$78pVJDrj*&vKR3_&8IA9q<8ze)J(;FJ`m$g>ZU(a%zCbdcaHY$GXx!Ipa~Eug_r
zXt7+s&I*HJa2~^pR!#j4EBsyQw1ir}Hy$3ZHykSzEj?H-NzsEp3JkE1q1r5ONJ7Hp
zJdT0Z^^wqQZ<w)rp4$sn%=g9i!@$umAArtOKE_L%f^iZVOeJ>4^<J);1KTlqSSvQ9
zQ^6{#-<I8DOD?d7xees^H_bx}BB>c|j8w$J=o&K!2uJQXbKY}iO*Rxlb;_4Iac4hw
zfyTsZoI^jNs>DSqLM4!TnqsaH=%IdXa8Iq9X7Z~89v*i&@+@Hjn+xA(>Qb@%X08W#
z(zqjJ^8TKkUgoCg_d}vV2I)ZZy{<Q4E_+^FShVsN<oUe$-mr<6ef6%5)5nqx@nC;X
zLLhq6!XD-K(MdYu6eY!@pxs-}gH)<sU)>2?-<pl@V$yYANE}wel}%D<z1V(xZfy^H
zX3h;lqQsCudbfWRlbp9Pv%^u?8`nu6Jk@`D&s<SMd>ss$p>u%|o|DKYe8g28Gp;my
zo}%d>iA_FLlzrrmbu>0wQ7`XX5<}>pW|F3<RVTHp!~J>adV8Y7u*<CbwHGCBL~nGE
z<GeX;sdTYD{B6J+qjpV11ThNa&L7F}@VjDP_E@^S4o0GxLm<bL6C9uP3v|l0K&(3X
zlr~6$;l*9iLf3|9CyWE!fm|9<T)N0jStZM|NrQ}&JxXsP;WTM)iz~XEs$GX>FT+Z7
zh$K^>>cS-k_)ujEw_Tbk_@cRA4Z^?&(`<HTrbxW*!q4|>K~Pt$>kR{YtKf)adv?>q
z?C^8zI(3WHvbT6ZTpt9+GKy;XbHGl&07pQ$ztcFrYf)5JzLdSOpZ~l#vANb-`V2vT
z7+ie%PQUNpl7-dJq4AifbC&uwr|uw9zO#j~66Ie!RmDa`d>8&eQ8C}wgS3Bya;g13
z$TjD^xrEz3_Su3g{jA9vNrP2BV2eFZirx{`y^(Wdx<7H{o#x>GEi2Kg)Y;8l_g=Iw
ztGRCU>~nXat(5eNeOLbK9fYq|E|Y!zvI9pJg?Dwf&;k&KKKFSJZt+5*<I``lB8~_8
zPc)1lH=9trU(cuJq8O3LkCaWs8b9)RqMkC*M`HpP>du!kkS`#lH+pI1lOI;iLre~;
zmR<TmxA9Z)M2Q=SDytXyC=hYjwTP87n97kFTUdIcT7(&$M1?5&Sv9H{6MZ6%&s8n1
zs%2e8my(x)=65=DzvyKS+N`}pIlD}b&!~%|?5NCP1fw3{w-V>obV(iSVDkoIAB6ZS
zYx#RdNO>jeht?Hb%4F{>Qp0(nqXdnYh(3vo_6uBw07vD>LW2)AajWZso)PvWmjidf
z80B%^744;WbhLy7vIQ31#A65C+EczhJ{{`$h7Wd;Ua|{$<mZ7u9_rx(|7a(C?!a#k
z{HC3Y`MWUCF_6M%hh%UKiX2CTZC5h`IcBZnj(*T+i|pEUG$143ma1@msK)@a3<YC|
z>T(p=5$WktBrc)lksyxd@R^*%oUb=?8AS#$oaOFp*Bxv70c*O(X~=?XNyuXUt0BqG
z<hkJ5Egs_8rvs;GhbWzEdx*8bLRsE`M8RJrztdjgjMHJdNTVe{GyGsoD&GNBRt$R4
z_8mofAd|Mqp8DmOLY))EYL+Cl&&>yH0Xv<sqiuq;!=mCV0iKf1D3J_C@$ut)NZ8hD
z@mmRCrB(3HVk6IeV01OBo{JnuAHRxoPNl8gl7<w`T9VCi8c#yZgX2`HBf|GeH&iR#
z-$k>0!vW?_Q17Kl<<f5^#zxkY_<11Khl2_GPGl~%q-ML`nNTe`=n^lEO`^%>hNt$p
zupJ0+w$sfj+q>jqRq)V_w*$z<6E&ObuZwei4l!sKSLe+uD=fM|G*t8-W=fNyKp~3y
z`8T$hdG_l+DZMUmgX};&y?Oj)u=rUz1JSIUsL-g4RF>^wRgx@tn89}9$H5!g;o1G$
zPhY!L<aW|)zg}`-RY^+b87h=Jd949*=x|6YEs)wdwT^_qT+sRWrxL`>IC3!J2}?U|
zPi1m1kq1HbtPM?3qZDZ?^R-;m)K^Pid9I#M*a53-Y^A|!Y%p#z)XkZ~lDV7gl@9B%
zv*kjYW5KKg+P%A$6}B9$A1{AKn&+Q+>a(?C9W7Aa%D(O4hH7)Ce7l|9xwCoSKgHkb
zw4})Lun2E(o8%wX-+hL*?*EtkYmE|XH=tf9C5PpIo98`6>7R;^Vf<6SBuauVu$KYN
za+QyoS=9H{2~a9|GNe2(qqhh0`2E(WS3R73Ji$nm6>rz0c}Bn-Ax{>F<m<L)|1r3n
zf4j;3+j#h&AUMH8wP;Y0GmMA|e$rYn!?3r*aIpKdV>Wvnr6n_ngY&61%meEg<FXxs
z)MH*Kxox?|0Rx3tmf0AMeX@f~U_JZcHq>}AtErQ2a}J!n^78D{kQI6uwXbhhh-f;o
zFN6~ju6aWr1JsO?Z!qG@G+0sFcF0Bt{l+8X0W=+XcPru7x}af2rM@`nPWx+Ol`P|_
z5zzamvJZOuZ2zd$XU8WZR^GIGHD_Q5F1EV*kUqR7$UcWDRr;DP!VcOWt<8QFX2)ke
za@Xdb6#mswCpoSw1g#3o62jkFJ$HdKMTJz-Ju9MO&r8huQH>F%HqzK(|NLxOOFu3~
zDraxXT9yVmIk8HD>6`5nzO60YsqZKj(e=tYP^TWdb{AL^R;+3v6tP6QRubxqG9hWB
z3IeuRmWI^Y0bIs~D4!Js$8SMOpKvs3*L9acUM5aM=2_I)6zGRbyZdsmkSI8u@`DRo
z{^>%#1Ihadb6&ap{=&{iDVg!KcNwHEU0xznnb4Jv^7sV)y$&qsvB{0!SSg8~#zMN4
zLA}p~(O(_Xz;BDzDYfRt+s!?_UIbzgFP(Bs(5!Sp?uU_ifzmV}F(c|x8hs-Dzt5rV
zWJva7H*_7g5>B}kZ^yXX^U(<+Z(j=2U#<2tY&M}sxuw*G^rw0VyQeD}iA|bJwTth_
zu?gdK0N0KiU=4bB!>;2*Zgf<dg;z|AglcVW^I)RAO4%cN7hSw{?bcE(Y6GX!j~bnY
z{Iy*VEG(@n?Sq`;$|@xMZqh{QImL1J?G#B|X4%0%7{#JC?a#rLxK2%#@P1ib>r7^2
zWh2$!U&1NpYoLRgr$A)Lrp0zmO`O&v_VkMt=+x%H#6;0&j9T^dH{~f0W|BCvrR|CJ
zMIZu=C_vIgGG+^t0)E>d_IdZtbZTo;`CK7(-TOu&n2kPCJ+pS$(IAom6JT0;&8FWE
zS8xbUMiG^LJ3~w+%xU7h*-GAp(mn>{&2cFH_5a_b)&T^{%|hDDH38ne^sZJ_%E0O!
zV$HZD?rzg-H-cIs`oJ1Q`=E;pN=<=|JCW06ewjB3w3w#BAuISS%aK#dgk++xw@B{z
zR}tWE?7$maiQMRPx(7#MO=FqqX!u~LH|$%HxCBj7&t%uM(d!o2%+d@P_DGxa6dRqs
z`~y=Xd6exrnFx}C3bPj&a_6_RuV>z$S<4MZVyQI*(DQ=47V0jnN_o|1mdMMWi}e8r
zP{glWJ|$#&8A=1(uT#4~r?cM7%1gyNP@NgU?Rnr=1}08e*o7YCuoB)9z9MLS6}?`*
z0PgIue)x*UQc|z{SfZNT4m+Dve-Fhi@MWgEQQUb4w(Q-6cw`8Z5w=3Xf6ZQ}OKTxz
z0?XmRBbONn1Wm}fi;wG<QJK^r2!A1<^aER;#A@p{iD}iev#{hxmQ6noFQX|+*EV!|
zqj7h%c}z8&&=*ErR_jzx`Nar3XI!HQ3Q0P;>vDHN<CzSI$YY}<etiQyZ(dUCgq?L$
zoY3&K`xp6JSicGCD9zzj>DZ}U!+;<sOp7$&`tZQh6*TC%aAni0#`~;cXUzGBS%5IL
z-UkN4UoRMxE^M%WBQ!OxPAC5<n8wKU4qxy%gcO8rJgVsKh2kh$3g6M}&V$wq8NWq3
zMT7{_G4x^!*Ll`rqi4EmU8`_l7iP_t+!4i(_`}tz{V#vjbj8IoXFq?*WVZ)x#CX{=
zy+1Fzox0J(cCpUp@cO+TZ(%}TJ%6A+4fyi;`k)v!$+EAX)t_rx7;L7ye!-n9syv&r
z!I(TSH@)tLXN`gpWXYRrlrI=_S=LcQ|C7zF=9_gY>9M{X*+y0lhPOz51uHvyPuX2V
z*%rrljt2KuPr3dnaqG~k)-#QetB1rwC9IpS&xqzdLuh(*gv$Jh!~mlA2@<OOvg1)5
zS$ih?aEE;)J%Auk3d9yQ;(5Iwu>Y)^V@_+WBMAf|BhB814IQ@L`&`tyPijJkNj?Dr
zGk6uPR#D8=&XTx2vOR7AcEj{LlvU5G+e6QrhMcV*E~iyfRs{GR#&l7*b$PN<#%dS3
zCt6+)WMKb>S(4XNwMe>gt%~R&I3e&Ge#ueD9HbmV^UuT?0z`j|52rCrPBPgPJW<wg
z2fX0k8CTs2-gL*?wsB}xY(bR@x_x<IqN1Q=vg1}e;TclpRvwfOuPZm)XRJ!NjqW3g
z{c#V+#UP;#4?D3tw5J)9(4dE4scz56=prYT$%Ie>8~_}dmM^(96#kp_0+$joiLb2H
z^J#^Pv=9q8VfHrkdV1lSXX|+Ct41Yan^N~C{5Pm{crE)uo;TuZpSj@_`h&c{@Tw`#
z5b2!w<F%xhM81V9QsWJt{psQ<_qUx(%=|`gqF>^|57hUx8cZ}oLR@Q2D)upG)Ct^u
z;^RJRpxG+on)8dd>*sFs+e#NVsd3H?hf>q4kT)q#)~wfmBR2`t+xaV7J9g)szZ6{^
z*Xn2|wK^ZX4PJ57_5ZXk6iS|{BBYnSpi4Chxz#)@J^HIYGG8&po5gDZhnN?6{(y8c
ze==ADQn*wu+kKI2uSt~4BB$&1LLonCd2{29*ztCkLx-*OPk|z!eb%U>vFFj+46!9^
z)mgyvTzF@+6Jup!`mU8(jesQIb77|<p)tl^!5q{+=Q*IIo}|>u^%p|!H>KKgn3fkY
z-Kifcu))%0*+qIpMY@?;JhS7DW<z7(FY!;SBr1V((<h~dD;U08y>{8q3i=dA2w)^-
z?WOXdbP<z<M~>}U5ASZ`TH&X(#weMW<oa2;xk%Z*({PQ|Zo4JAfovD6Qd#LsSUepe
zn_8&E#hMnLS>&!+h_>5jUXqwzV~>wo9&~WWS{&Vw``Kz=%XV%jAH6G1f{N|fa0(|P
ztYQ>j&2SkJpw@lY3&q#%ek+0G_jvqAW^Yx{)S9`J2FBQ%fO(KcdKxX41d1OAno}UV
zu2zzV4;W&4jVlAVv-O>#hGBW<CIprhPLL2;n?-t7iU{p_&djgi(C$hDk0Tb`otjq!
zLjmHGZ9+kxw+hZFMI@G%X04*vTp+sEyA+;aV~XQ_F&r0pqLt~R(9yaz`lc1Sp>>_s
zrIg;297lA4s<yJ^P)AhM5O-O4NF;&tp_HpFnif5*X69rG7^g-1%{2VPLMfvzs!bTE
zb1^0-i`1)(pN@z#^Apl6=rUMO4YkqV0wI?0S+quVXi!V9bTL*Z!rh>kv-Ki8rx1{<
zw6UqWdU6#h#0MMZGS5FzI8Rw8v03K0B3`tCQ8F7kP>ZYVLesU9vYR}vj^PeA%Q7|Z
z#aP+eh5qe63|tM8a$F0hf6>c@-_%9LH{0sKeTS!~P8JlIu-?&qwKyi7YPh%R?b&2S
zw3P1S2y%5@ui!8o>5894GEeKa?=tFVTChtR@mv`8Ej9wI)kyrO5TYm$_Wk&2vSK!w
zRpmleL=3Q0$WNu~diB*zb><XPVYDxUp35XUehiEvK19S0>53}iP%KI4osM=Tvhcb`
zSmfRYA4`&KCF*f2k*Qndo{^@N=Ngc&_*{CdD{6y>eVhFu^;g}xc*k^8Y~v=s!p%Wa
ziJfL$A@E4B@Y|$x)h4@KCw0a~TlR-hRq&jqC-u`AoTtvWk;_~LgniD_93)teLc}Qx
zXo2g<LUJZsVCyvGhgg^PgO|Bd<(~J&T>^w776~(O@3BF#*@g7(OcDJcg{T=LL6eiv
z9dxy)a%SbPej>Ez4Wh(}+~cTJI{FaTO3(Dsq*%>#jS?scv6NXJv%A?RR@0sqYT>hW
zv=4#37%m*Gz!VU=vQ7;9Cu_k`fVL^p&>3q0EF^y{B(m>}Tm5jYVU#|*CXa9TeYQz{
zi=5;wHZjG$7h19+IjT1r6v&o^mZq4y<BuB!;auJNxkyFk&Y;VmF%h)%6qmU_5odF#
zO3)~j@2gp@7uG@3U7>T#?0CA!B%d}fjH9;aQ-!gWU-qDqa>`o*`1~<xJCzl5x^-Dt
zqZNLPK!Og>PZ4KkW2~RF#eq8y=tn|fMLjQLlZ}=6Dq!3sdOL|f%GS1DkP#%KARQVt
zrIwy4tW;du&Q8|0pS*vel3ZLeo|ej){<7%LpRj<dugaPmJTzdG8rBzndS7^FX(C)k
zO~VPO=0R>aWXX9$ef8kLtq2oPF+2q%ySSST#BBn{Q%k$RwB!mhmK98(!|Criebg!Q
zSeJZmg)U-^<mT16Qg+UWQ(Om?f|YQTC+MK$F;y&zqsVOMk<+1+S!4p9+!DX%(^(s7
zikpPDdQ^KCuxz{gs%PVV(8(znZ~yAP$^}YoTw}NqPL9OO?Iem9{J~JQfbL$zex?Ir
z&I3M2qu*d$2cZx!FpeKYzhtnuJ?DBxgvI%~*>d3_k0BZ#(emyN&TP*$QFTon!2^zL
zzg`VRGPn|ZqdD;(GA3kr4?0jOf;+(~cZW-xm%B1?B8C$4GPc6bH_H4`+zgq$>bRqe
z(na36-^WKcc&Ln>74`3~$sWrAjQWHJS9hgUiot;S#Q3j0J|5?2CNhYAQmwxxp4$Wz
zX&M_bTWjVa!R5tK?S-1<;R&(RlSA8v?8k?<c(vB9KCn{iq3@YWrs@2}u2i`VPFs7W
zk&*Vxk}RrAVg_~yl-H8Tq}AOW4}-@osugwUz_ge6y?HY%ll=tN^8*t#J7VnZ3DV0g
z4@znet+9dHB!iy&(rhM;IKxTA9ZBe{cUmq_(3I8m5}9aq{J5QS*Mh$?`tG?bjQDwh
zcUCS<;x;aftx5gIMjgr%lpb~eZjI`mqEjS#9?5-)tU!6E_;Jrf_g)T%3KYBY+!%x>
z0~J}Dr9Ey)nSx0ynScn_l(1|5Q1%_c1?L~Jc^pC^u^E{mpOm;iW%PK$`Pmj)4_o$@
zyI5YQ?O^Ha<JN<Z7m0N`eT_kOOn-k4Di9GBvW<VbA8RRd93mDFZxquYucFuk5;L4U
zqC3x9&H9S@G5i&%Xr@=4%`-<@PV*Z|`wRntZmFDBo?~Z7p*-S<4B(eB8#kL^d7Um^
zIh)3Dj+}rbi3dv@4w|I>Fb2XYQ;C$hHAB#l^ZdaFPdu@oygUK;x)Y%<O@{!5T;Jl$
zm>oAz&ss_uGExWarl~Ko>byB=XBTMYS+YDt1-fq^>=`rKzw^;U))~Amz(Vm+?iO4o
zIlsXDfFS9$$7jcY!ZUUkBhihg!IuYIgT87Bcl*;C6qy~ZVb=`Srh(NZw?l03LaEyS
z%Kqw;w&umorrU1ME%{7kcsCp_h*1^zyqiToF?a3GF6U`YaHr1(UFJrDGD04U3VY{l
zXv#`l_stb63k?&?gXO`aQZrX$@e~d9hXE`wq=5@521M|W*2Zm_N4KmyfybQxr#SJa
z(`jV~R1Tdu(RN1eDSY7q4yWHFgrIHSi^iwN6arZ2M8v**EWoSW*E#+nYklqb>~;{x
zlniv@!$RR-4tnS@l`1o@{EpKo-CT#mM{LAhsG5tFz$<(01(!6H`2D5z;Q;r~FdLgO
z5y7!$N-SJ33ex%$^YW@Wy!$cPeQ5th4i+Cb=0NvcYbBEZUN4fBI&WKulRx^bOnIDh
zg|cu0h9DUjzy!H1?;9j&QaeD?L95DXu%aOjq)h!1f+bV8u!Om}nR(X^8j(}b-bbAd
zO_n5N9*N-2Z*)yE&;bcz+uXxC?Egz~cG)~|idF-S3;R$25?A+tQXjb4Xz?C(nfD|~
z#}hQn(lq$0u#{s%kK#mgOaUyANApFS1Xgr_<sZqaHVR<9qt)727l)T#24eK}qzNE|
zM766^OgHp1V7EM=jCkL5J8;K@!fJn(48+oZN;p&KW8E*ATyR8@0J})ib>eJKD&Le<
zwMS4HQe*%KshM>0pk{W~NXK(FF{+noNyI0no+YScaP5R!W(nKUUB6IDMcmCp#DZC=
z*|0DlOb^%O2+a}0#{kKB00`zZ$~$Qj>U}c>5nAAKE`?PQdh}~DcFy%N>;{d0=0}tW
z?o?c2*c-tRkoqTuSkvk^qs-0#)RW7cDW=h<q(LFxvYi7aZ6-;V16fSW_kON%Ceg<u
zm%8OnI7ZDpRx4}2(zS3P$D9A}&aDYGSKV`9E#(Ug>1aJe83HlSLx6>V?6Fb6>Govj
z)SQhL$<M1TBqz@5EzvJ!=jwAj4OiKbBVnCIM~b>BB-V={omyDsc8IOZ>hze!F72PB
zUWBt60C%yOc<(~7DF_ro;I)kVCi`J@A+^sazi~QV4O&oA>#lF=q8DjrO$3%Ii3a55
z#??q<_84qTF(*C%2X4?C`Rm;#oCuo!KW*RfzM&DgHOw8Vd9FMn4-`V*cj}jJbVBfX
zsSpT!t0lkj^S3mJfA+Fu;yyUaFpIT83~KN&Yy{N}F4zCxXD~`|<KSu~VamKFP%g@a
zGG!1d05+Kt;FEX|UU0KIegrbn@V0~oInarK9rVnDxJF61CnA>V3A_ZQ@>=P0(75AC
z@;`QH<)!UNQs1Y|A#-;H%z!D5sz1GH1nyo=w5t(!3Osnu9TgI#;4&??TKrH5a7H%9
z!gq3(gEY$P7^+Sp26Y-O-v}86l+Es_9eDF>_mVi_+rp7th0_>B3T!Z9&1J}%-T7LD
zqpBpmb2Xesw^}=B>}K<JOHtg$wa1S9wr^tUiSCxGvAsM*fZ3RLFBB|M%(9m)y1eXs
zb=MC6zS;=jZD41Q&$zVIx~UMoYuZAFg~1J!)4uD`!3MP}PD)h4aH3UOl3=@M1&lWG
zz~dz8KxNy2BtSWOunNI@otdZ0#S2HK1v0j>YstxcFxV{kQ9@1uk;yI%HNF>(cJ5L4
zhv67z47fr$#$~vnyyiDnd@e$Yq+ZP?85QRAx*yMPY(N2O0#*-z>0oRgbc^@3oW?r8
zKox;YS)M9!VjhBA8QUGl`0cub!7$;r1?kIKc7@nLflsRV|L(Rb5da+`G-<vYK7i}#
zv>L1(U+)ZT=s61(0X#ufoH085`mDHE)|kPiWi7Dtb9m*{ASQV~4ot@3Ds!=Aw{U3X
zHYlBVAd^yS5E+<yv7>w3ndoWqcAaO%l1x_36`t=+`a{KTDR@jN+TbM{p}T0L^}baP
z=&;`imz(yEG}#!K(vnf15uHlo1KNww5X(%cYfS(4T*?2Rrg>gzvWQ8tT?vYs{XyAL
zVq!W{(hPPDMBWfe#o&CO!OH%mIl_yN@E;+|tF@Y~Mn#RRnblX{qZ)soW%X9QRl`NE
zX_wr)S`bW)V#WtqRbF}t4{E&^sPOjpc`-=V`1y;#O=v6tm~^7EUeed8M9b}Zr~Wy%
z7;DDnWAk7TKD-F}NSBj@{#Js|y~i3^pKNp(YIu-SqCPV@S|EM~$t>~n41qT9fu7aE
z+$viRUQ$M@qU5+0=&GP#&RET&{Dz~EwDf99_KxDDHs&iZ1KX5jglyzdLuYlOEKu84
zjG22u{o~3@w;icOBtcebkxyp~y6k?qjTTm|)#=!Im5R;SSimCs5}5-}xUpbQn3SQ`
zW8rjr@!_Bn=vHizkkJe-MGx32;}g@Z$}R1q&h+L@&Rn`3Ta2XHzjY72ZT_%GkO6EF
zr@g|D!hk+nfZI~5H6F9`^6u2GdKiRJ4P7Jz96>OvEHAe804jr^n{04lj*GF1Zyq?K
zLG%-Qq?hGBL7|0t#A@J3E)o~EO~9#MVXF9Ip2?f)O9M5f(rk(&H!7>b`?Y01O$O|~
z#4q<PaJeat&0Ry*EnRPGX^z+&-R2xQp8Jsldtxu<BT})CR=~=;q)jFA6(s<U4R+h0
zRuP=uh9`|^@Z~OaInJ@e*ac06gKGDu!C<FpX4U*?86#9Hz7m7=;BaS{wMg@f6{;lK
z03m91n;c*hB<2r1pCKcd5Y;xiAKt<*B|u&(2kh+~3@9Wjbald<w^6V{vZWZ&XiB!E
z*eKc<RV8E?qxl1wXk(m{9@Jm=y(Jc-Xh1Y;zYl~>Y7E+Oj2mA_6oM&%xpzuvLDmV^
zBUE<C1#ogjP(qtK%hKczfjJqk;88S%Vl2e#YNqCsrh>R#nhHeIyi(;0s~7=+D0cdf
zb&HHQ79E~I3pQ45W%gCcH9r`2fbT*fp99T3Br(QE!B`yxBSpyxAu<YvPdUdQqCQE8
zSArxjKdYb)?7}7nNHVb(;ui4mQ>mujYI2Q8+!^=1X&$IYTk3C+t$=!eZ>)Ry_3cq9
zbl(Uk_LDw?YUF)d-+y+zKlM4)k>??z)Jx7oF9>XokwZ@RhO+KhV+D%JRIijv*h7()
z&m@+H=R<Sp6>I}6rLnrZ#wm-|QJHOTyC*j%hH^{eK1$FlLF-`CrQ01!27a@h%W~E_
zfxuNl-m6NDotG0F;f+~EFJ*X$C&rcl{mOp@uyIFkxj9H{MBjV=MZO~cq42q9x1y+1
z>3d(NpoqT<^=Mr9v};B%%@y3Y1v?&vSP#s#hjr^{8-Lf2CHAqokzCJYZDl>Haq2Da
z^iqLL)Gx+Smw?uDU;)IGD8=;O1Tol`XelaDz(XwXsj(qAlZLP?$dzHv>cAqdG@GjO
zN{~C8%Eh@ORQ(a~#|)Hv$49wpU94=6H`i_{pAvH6cw~bY`bXio;W+aXl33J{Y^t+7
z4y18ZACk?t$Ig=<B2R)(YVrl<F=(@<HG0pS=Ac~?ZWc=k=?EOZ?b8Xtep1Vb=PGJj
zWT+g|(RN1%$}#9y@|yB~SK)b1ASf1od<l>`i#Za?gs2v=rWy}pLv1@5nRw(Bl~*gy
zsZ@RtMyx47Lc<9%@QYf~p=%X0CKHYs7A=2aOfK6~dEIc{p^IEO@oFPP5D?;fwcQlp
z4^{cNUPzA+_0BEtQjvWyCJ@*p&HzCOro09;z=>n%RfXhhWa3G@3$eFE8GHE;3vzIB
zw)if9FpEw)j*1N!eP=GC%_R8(O+#p!i9Z?l7>bqNw`zC<9uqFT;9QdUkt*j^dxV*S
zJ)<xNX54?)d9^zlWi-}Szv}x7!q5h_tXaeiv0V~sty&rkt4pPTMHLX~jI;{Phcto^
z?X2;Z(~n75X1FO`$(dGKlfzyFs`(og4PLSfva#WQiiWP@wdWeOT#71K{SQrwj5c-g
z<Y_wY?U*Ocj~$N<aG{{dSrE8kx0c{B-5?KauT+IC!}`=<MgYWyd|nTr8Ydm}TGf1Y
zRA6HfE1@Nl8*xI^D(G6P|GzebA<Qo+*&chZi!}<pOc`lt04`7%m@lQ+z@cO?&9aNM
z$69R2F`T8-)z92BlKbwh^2y5FBt2UK+F5kjl5*pW+t^8P;0^of)@Q?nO$u}dh*a@c
zOhcy@&9+-(rV2KUCr>pzGc`;{YchQM>=8f%vH<u7UOxzQ$M+YB)Pqp31&wPKi9|oD
zvit&7m~({5BBstGgh+JHuLHB^yFdyape_y{fvZg<cp3{`v5nWYHUn!kdt(!hv4lp#
z9faseSKl}0TinoI4d^U1dBR40H2GE6Fq@|L2LBL)xdNaZ`xYB#oXL>IM(-)hCfOY_
z^4aFL5HI!XsR{x0)G5)@9_yMU=v2{4^{j0*%<wzqnc)t9Hl5^rfzh*bqU@YFEAq^s
z-wGLKLMl!%9CqM>!??oC<|AiscSaIaNvK@R)2)ayUnw)2y`#GPE44heXETY@s4;nN
z`?RtLwo9~%P!}KiudKH%-kSFB^V$-xd`*gb8)7ARU0uZPCn%NrA*V}f-?CTNXgE2_
zWbew=LEgjTj0voaX4`OEK}$d~7*Sm&*u@lUVb_f3YUhsM<`M}XqOT{*)=QI&!z8o4
z(=4h_jeCBYi(0tnOw8RZ)=h9>bx~jZ)IpXC5y&MO9|rpw?O#iDiYAz;75wx;JU8?a
z89cnzI;R}iZnPP_TXm)0Gg~?{S{+>8dMj=_1<kT+XNJYrf^+9}Ni{EUA4w`01R8x`
zK^GQ(yRQDSTABBhM(d3l)O@Hm_-{=J<GEd|Ts?@^W(Ui&R3)O)7P94aDT1?7UyoZ_
zK8=4|n_XR`MDXoRvfnZ-@-<2B538E-4Z6z%?<n)}djWvVNll@KpP>kb<dC+LjGZVk
zD-(9PMlEib$~J0|juYs!Bdn4WC3avJ(V2^-vU=;jAe4w-<J*<pF9zOFk*u6pbjC-#
zj!lUTBFClQ<lMx+`9-Hn2-yLirJA{kVB?5V6?0s@h21gQelf2#d-Pz<zP0NfGsYlZ
zOhx!pubR`wI(Mq(&4PD)qZj}I1X<EK@zYmm;@<7#u4h?EgmZJY^K8J<jYMM$?GwRD
zwc6?CzSxs&QP2iOM9VO1dCSeAQaJrwdU5HLGrhKRN2nATYU@4;*0oYw@X{d&s36Jt
z)<;4urSK=H9SvVXE_hw`FgQs=IBoKk_$uNHj&BREE5BOF55buEE6ypd5|@?XHj0Ma
z9w8roNY3u&NzNV-ddqWcOo!xEMH}kuCdreVLqniHYbE!xnwQ`~@RLxuGIJbN+GO%<
zF=Nd|ku7q#OW4|+?{hDvbv4a2d47>GqqfR^3(HX!^mo*X3TjmCf&628ol23k4}vlE
zAWQ0w;V|?WR4J4T3!E>FZ5)Y=@}4h39k4gc%Z9<9U5pzW5;Hu0*7+grv4&iAA$+Fo
z@R1bEV@N?)1!~{(GpYhxAbaV(kTW|fMJR6z3Q8{apK<u1$iC9F@_O|2^ueCumvPUM
z^hsl}BhcFY3B?(ArvmzF(90td(5}%QVzmq-t3uo9*>2m0t6es>L9VNzWS~E5=D&^?
zsP=>J>iV!%vl~HVd+nRn()FXBkae4EjM~8DJmiCZOWtSm$<uV78|;P$Cupn0O?x@6
z#u;m)N)}P@%1ZB%M@y-wQW+IgLBIZ0@yDQ0=Og7j;$eZF1!`z(D6-_-ao%c2wTrmb
z;fIg>$ujcPx`RO1eEur!Gl5GX5#c#^J^Lw<`GZZCVV|JRJ*k?-XO8<Wq)@GIb|sv|
zT@tM~_YyxO-6&il%2v{UZs3}o%7sY9b2T6b$M|Y21OHPeLKAS$Nh|Bo$NooC%u1Zc
zUId$#wh5<CnLi&sb%63$&wT#g|AQ_|_S7;r(HiX@EEH4mFlHV3s*-QY_577!BkM8N
zAr_LOhtR7OZtzVx_TH)sW)fsC3DGhral|(hT<7a!8zB*`hLNiX7NxJhM=qrezs}Di
zW+-Es(%yKdX{7@P`3S|C?W|@gt(aC1ipSnRJ?%gX#diT`5pNe1u9<3e%M~gevrlP)
zbGAlrKL8>{fkjD{>=F1O3NW1-tRZV(yQ9TDBC&{~so0AQz#;JBtR}h>z<tT6PAt*V
zOL7&-E<Ih=BMHRj01iYJmWKwBZ+2+qFx<}~n?XK$l1(Sd<GF=ySj3brr6FDM9NzQ%
z^!RdoktVI|6`nsj>^N8U0k-N2c)^X_zS>p;sXhTB8``-jSDC}Hutq6Z!q-Pl?sz`#
zyvD=5WOh8nXK|P>Z3~#Qir@zIqrJCJ_va@^J&=EfLFEAy@;b^#JsTG+U%Tg5C*Isy
zsBWCAezYQjA0YA3)gMZ#-qd`TgYs?W0<PxYI4^UE+h}ZRVNI@F`Hj=16!qCr65)?!
zA2CGbn}(51iS(kCPs<cM;XdnKcEkI7`7;valfV`U5~nU}f=JHk*SVm`Yhk9D&h;TF
z7@Znk9UV<=H<kCtdiDJfl;o{WUJ7bj^XdSu&AKM#A}EZGQ^#YG6N!d#hLV*XF)S?0
z<Ln)4vI>uKVRh>Od0g7uj|RU0%~vFx+{Mg|pUklR>ap-*%*S_u=}lO!+!NrbMHm3}
zki<P$k+|wHToyob6OW<<meKLskI9_2FFryuevDg48cD?UVhb2?>G);mxek2UZYPkD
zmdW;X@jJbWxM1jONZoMlBwF|1i&Cl{c65J<$GNru1;k{I6q(lL%*#+f0~NhA%adP!
zOFb6{$LaWXQr++%B<l!}X-&3LBDnYt!&>2itBJ(jC1Hn*!Z1(DLOMpK4)_+3l#CR6
zmF{9kvXA5k<jdsC!VX6Cz<usZ_z|mMT~l9W3D{tq$*~bH&3$FPK#^B>T0L(}!}%L=
zO@tRdH+=rI#xymCJtItjN;%71?axB;+M-<K(^D!EnD55>{aJvs)>DqFp0gh1rmz;?
z7tYVj0@zTSloqLvGgXG3BY)t9S<LL8ZVIQB4LjEAP0)WlYPOfTXf2y(t)-c}K%n*V
zKO!wNWH{XF&Hq|C^MA8DGti(Pv^XPE!uT)sq{bz3&qPpD1|*}P(+k%r73j32(yQT$
zcbh0yY^lf@LkynPAZ$wF++cV+arxY$Ts-V>f>KL*>o19rB7l=YzMjv6LoAhhwvA9T
za%lw>a-_?)<QeNa8FU%vwt4h!lq6-#k|XIn`vuf2dYIu~$>u-DK#n;bInNeV)Fs!^
zIGD3g4S-5>hPZqSb8F!TKk^NJ)yD0G9lLX6VyKr*s`$xsQJ~cuY78Cac|2?$TNR*W
zHqtrYQm-I_BtoxQDi|3K2Z}pAE3zCnTX2a$f-yWAPVxjH%P%J&TCpX>wfs)XHOLCR
zFi2{-ZQG8829qYmid}7~*D5TgMq%6XL`4B}oZ)7+6s-v*lyYx9dcyJyQ=%!Xj|$`#
z%bqI5y7yEmGvIw*`9h#U)ZE1;ByR(P85w!c9_!`fl%$<XQFHe_&ZMg3YjR}vJ|FS)
zrUDu)@GD@@?DF<&C41GrO@Rj`?OczNLUMeQ-d|K=4VJZ~3G!*89#5(=ry(CWrdD77
zF6ZFVtQ$0^TOGe^dBK0s@(#9$va=YINCF+0u$3oBV%uG&d9Bf%-JunX6Y?KNyJ@Hy
z*E-U?#?Arl9zJ)_+7vW7)K>n~*p_onF1)Aa&tz-@tBxev|D=vq@cee+-+KL-?>W?W
z9PXu1W_~#Mxq36(dVoecrsIWrokG{>gVwXT@UF(4di@RFmMN9S940D_#p)SKiG7b=
z8FvaDhcMoE`oq<3JKG9&5Y`-xlz5mN@k+V2e1u02PCo5~H}ZjA>G1s0Kh7!(%`Si2
zJ{!jB97HOqmL|n4nLstuVsEKsA+rjdS2~riUP$xX=us-?JIX#8>&XTwC-<Z4Ie!-`
z?>NET5<glJ4$*c$1g%@{a)D#n7QqtlO%hiijA;VDc^kbbfsd*SP&G$xCz48AIv8L{
zOa0glCl9i+4)K+Vlnym&$Jms}doe|1$YNUw-W!5HU(f&UoLl?%?%03S|4C`TpbSZW
z)2o;5|0+4~U0X8)YRz4e?MF$>RI?1Z?38@R|KHCEv!?Z3ia`}6_2Ou~>#w0cyvM+m
zfZvQ72X!D~M17CyknFZlp!X<($2Z+%Dhaxc6l9P$1LsGUW_5E*s!ax9!YVd<aRtwd
zg(^ZufHWJMe}Cp{4Ph$@!g4AmbY~trEI=_cPp@$Y2KyUEl|L!UZU0)KKtYo*%!}%*
zdq~1gy>ybQp7MV%XSh(G_d_Y9o$Z8OAv(g{Mft|ge$KB+ZhvpSz-iJC)!eRRtUX;W
z3|YnGA$pzOUS<iP-hk6%S3h>@7u*ynq)Q_0_2e^YUu&-HQmqxuKv}r2WB`&hZROf1
zgPT#bNb!ALyl1k1pCL3s@`IHhMunrds}v1#OK)#wV|i7>$!_z)*EXa+ze0WP<4XZ=
zw$b^B|MsA08R!@-`LE^w+xq|iKb-iNto>s^H~2ieNEO%FrP;q<VB2QvbJfr6{qUDH
zLHVfeqR%dLJk>cNZvTcDR2a8pCX`J59x&i`j<$WDaj+C^WcGbf$v|}5lqU1}n|*D#
zU#>pT>Yw741<TC|#8;zXF!kvc4+E+cIADyR)uSLQ0W+ypZEom~qOS<4qr~u>G`;jX
zCz(mh!AH36;BlKw0Da8`G@=#;-U?jIM(+~}4WKI%r{c^jb$gFYq(2;cL`b4eUw@S2
z?djElV|MkmLyTDpdm<m!I&XdP?z`+a`INz80CNLFvYgZ#SyO&?>EcWixBh1d(2qMb
zr(#Y)48*ta$_~+TCO}nk#R)qGW>hhA#}&Q6%_51n*T>1i7;i3AXZ0N5xtS{Ln`P&x
zYUX8|eYiK97e^gfw~t(q^Ms$<Ph!TB%;GKuDCidX%(}GPh+CO^k&I2gbQ_{jkAYD}
z>lK?FWeG<t9%igZ#2hyMy;Lu}3iVy9X&p@5D1<F^EVmb!CO(5H!T!WfY}X{bAa$v#
z#O1Uy%rL7<$suaIZS}eKvU8C6Xc6$?hQWjjh#w7P;Jz9|wEH&R``BMXRX)&IlGlyG
zXsbLmkIoooVQ2KguB92UNh;cumL&6diwgm|$48^sHRZEJVyAIPER{cTT_Pn(CB{yj
zG2S4xNelQD6SJUD{#8%lAaz{T?TcCVYtZQ05D4qm!wxR918cf~XC%FZ;bd5_SQdX}
z7u=JU?SWH>88Mv2&1-7rV)<uQIC<4A3Fc!fzEa~-V4qBxqwg!bldN2eLf9u&U_}MU
zX&J_1XMdva$wd+o=ByJhyrrqVDA|?Dz9mkD1>>p5(uPoH0TQiFp)91xkx(Tdbg=Xc
zM#yaO{viG3Agq9n?a(?^_iGVYGLa`m3po2Tg(}mmonJ9!+nn)~G+>WOTEF#F(==J9
zj>q_G0k0Js?Re^78dkdL7mPtOCYTh>1~KMcNwzrqr^2hnWnXpdMz<?&N?P1Sv#alo
zX%5r|3hh4JAt9}~LQUJ~<x6oPw0b}cK{9oq;xw!MI!;U~p=5p49RH<~!oOK1(ii`g
z5X45c(x;6DY!FjhwP~Eo#eewB^TTHmXZP0{$kOwFOA4y?ME{re2t2t)OzC_&Cfx#o
z_BRP2WKpS!qyAS10FV(l$Ucia#v}*@!WaRCo=X@pCSgg2cz9l*U09B%tA~5p?g$mh
zxp&}n=7X!*V`-}rK<*y+L%Dv)Sb-l7kdCqYy{*YFJ8z@Ew6T2h!+0t8pdOkNoo?<|
zJZACxmVN?!&F`+lv{n@5U8S}`hWZF4(%F;KR*3xBAzefvQT7)(Q%+4$7*VK<^Pt>U
zzSue9JXWSIvq+rGGtHzq`9T&sqKrVw+4VjWzzZ(`c%*wsQ8ZQoiFvV5s7=1KKtDI+
z?P{qoK_4ZmA~B96wicAckN;T@EHbEQ(!yz?R17)%Afzu<Dk-4yNmln<Qkc0MB$*-y
zTT#h=Cx?fNjG_cE^VYb82p4L;1bGf$T;VYA7Ap&7VqP}ZlvOF1esRy`1xV*qNd5qy
z8@R9z6_N_9IaET#Ls)uVWvKe=+ZHUekN*UNa>!*E>=7bVS%#8as$>*brCR9=l{n{A
zszH>kc2SJiyd4A0q^RGy#0sOkl*|_0%R4f?cwm2bBzAo8M9eA<1L=^vJ{HybD!bv$
zVM;`fUZQ=^*LOoutz6)6^zY);l`6F|uJ~RB?<Dl6Vy0qEUGJ%%nM?vKqMt@fsROJz
z)O0K%?(@y$y|Z^$zk4V!-`l=1oc32VVuLiqQwjGEGgLUrfGZBYW|T{)AXHdEIu>sf
ze>=AI_D|2a$-&oBczd*O?~`l*--l>=losyua5o-2pq&@M7PLq-tX+Q(O+J4<DVq4(
zfLx64&Cp5oEmn^5N^{+eyrrVtU*Fr?9_1|U2sAD-ry`BYFg5z&7Jb6%_%kfW=?ewk
z(8JeOAxhla#K{+ykMIT4UP!{gRyU7ph^DagfQ~9!fnQkKC?mxAn|<Y|01KMpBMVyV
z2p$-{q1d^+O6v6lylx%3Hoq7)!fN;_++FA5-(V!aKd1hXneaHa#@fUs>7W#Cx{-8z
z-i^i80D`PjxK2FMCSPP^(yhBoO^k+M&DEGiFD%?l<dF0;0<29s`x($GS$F@5f8SXK
z#?l=4y1dexgXFZrN8Ccce;P8~5Y7Z43#&j<!i+{JO2KY>$ZX=_s7qq4kH^s+Cm%PW
ztx_}5zbJpCnqMzm-K2GP%%H!bE|-(KwfVdX-E&o0r*SAcWyfw4VV?e^r!DwyQj!)#
zTrDZ6J*tdq=Iwi;pp&5~6*P=z8N_$}YZ1z0nbJhui<XhC%mscFsQ)kGBMk4-=W=pP
zSJg<PeUV^rDdyv<*Vl+?m=p7}d600TyIcuf<JCnA9OiPtYBaS5yOqSQqv0x%sz=R3
z1;B*#A=1CI2}T-*66wbH#*wtmgH=-c4K0R-)D$_A8561KZz6P8bGZHG4vyGJyZuHz
z^=F-g6e%lLBo$l8BJg^jeWOms1nM(fcuzd9x`_gQ!{BS0R?U5yu-HnwVl8vgN#(4m
z7tm7lVrgwrz*a0j;Sh?vF$DI7XdD|oy>xru_T9dJvSA<>T(~K9Ypa19;*+eqM8XC8
z!>S750_Q%c&Y?``PnQa%!HlE^WR6WGxv*9TNw$}1*87j%tkku;j*B09t$TIYD-L`W
zjV=-4uYou4>99*1BVU{qYr9!{Ij_lnh*eK9TUMAcD?UM#I6JmxW^fTk&+fh`s{2jn
zXZ_f(AF4yEo`sfa*VO5+Nr8sas#RY=uh*ghVc3r93}(yh=DwcAs<tN5t;wZ~^xFU{
z7a@!*Ua)3zgKTC9U3VXSA!Vtg!gHHES2sYquKi7byZi7$GmY2mlC05dvZ{1@gYSg0
z@9pXDEReu2DCJjlsEznLu)Qp3-~rX)gLx}S5aumma<4K*xWfrp*dS<Fe-Qya9C!nx
z5-%jBxYJ9j7#x&elZ#*10Q<iTBEp#2F1Cz=Y}Px+cWjyI$7YwbGLeUQm;gtXI>~5&
zwPf31ThgaP&jQPgI^41eowM1CiNq@3*UW}uea8*~Isd={I*>VQH)TDor<|pj*x$c$
zsRE$pa<42%FCx&yB*a8*m0UuVl8f6IQE#PmcSe>wW2km(XJqkujC}L-*idHR78W0f
zBf?BbnL8H>FB1{VIL%4Loe9YcL1;@3cgUU-k|uSMUr@B~0SCEZt*qqc=Mm@(OXfnb
zW={vbqn1_+nU(T~)?~I9)LiaL>D}_@avv)BqbPkNXO=8WB5#q-t~V{0!IxX+FXinj
z6O`JzY7C_yhKE%Uc4l!;WgzbuR%7@Gh9B*4^n96w=kwGOEuLldPO?NkYg)&ZlL<}7
zQt-$?Zs29?WJ=G`DevDpstWhES-0@y>Mh2o^SO%aD=g=HXoi4x%{&!?CQ_H@esL6>
zURl|k%6)CtZ7x}GRoqVFxvOh>wOB-x?|f8-_*c!B>Dk`p9lcvYimTHgn06kgA}iq-
zQ)2#NpBu~QoX72@-Uid0Y}p0>`dq-veU)f^i??~qx*-dDkkKpi=}j2w9Obr1Im53`
zdVglUW+5){(`pG}mkl}JX>F**@GQCN?i0}5QI{MjpUGZRGqfwu^pq@65j6wMVI1+a
zkRfAAhN>vSBJ=Q<$@h&l8aK@twY$>wW~L`7NH&KtS+;|WK_-#4tm~D+d5{v0?@VH7
zAQNsp%}5%KvfCu4rz5ycttm!8ebZ$sSSC*Mfu1KqNtIJMTHVOd>u-oC&H5_LJx*x4
z4K+hi4ACPp<ogY4&zL=9nQ?2jrn{WDr^nEt#<NJu9ix#^lwG1wIK#ZB<v~VFLIYF6
z9SOH0c7o6kvSjH2Xs%2Ta`i^k2U-@C(NH;5uWVfV`x%asz>ePZA;v?o4n-MI3EJv*
z#<JDeYWS#;D>NKsVNDlOG^-#PYBDu(vd55*xhM&RB75dvgXXGc2qVgXj8cx4!0uk$
zc6VatpI9l5)bTsHCE=wv6KxqVt+FV^{&11uyZgy~64(Q(Sx7Hjeovd%n7ps)>Y#d*
zQJx`O!!F_QkuzReW5mrmgd5$?-LAl$Hf$J!c3!}4V88&}UVj;q|6eUQx6|ee`f3V0
zgRCGkBS{&eA2v_6nWh;f+Ip?*EVrZFZZQY8KOsIrRa2+_(&*k0uiPys%)xLur>vHD
z{#gxdc{DnD`uJHFTCLK-c@2cpVSa?I798y&!!F|Y)44DiKB9-or?iyBXhOu<9B0s<
zXo7BtkV9<j3t>{JL|Dgp{iT`s-Gt3lw&P;;@(R7_m+cjLyXM?K2)<0^l?nk)e`}<-
zY{H6&_R2l+=v8mp6EYUR4(N-)`>X>^GB|!8T=Jw>qv*%>w#FvU#chFKjl7J3Vt{MZ
z5TQW{5H(0uzD9uK^)6t_101BQB5B<I654J3Sr`NUXIC2BQoD5Qp35wG)$+&VfNIP(
zk5C^!k+tGE_I&Bz`I67cLi1dJ^vYCErXh^gFJgjlU4)J;)~YEKq#&-3Egv?7W!r~{
zRSvv5_Cm!CVefN~{LbMuwD>bIbP4J!`ocB5hSe|Kt^ea103cT<%$Ra?hx||tjL3J;
zsp|Qp8ypeEeLAu}?-_xddC6h_YsB@>-5e0~pZ^^y&lpRmc?*51Y23i}u!2kEQtIb^
z235tMxWdxT?~$(vO*6O!-vuJ9(-f%n^M{{IuQAWExl37C>ZIsFFV+Ro?m?aAtJi$4
z80Us4=8__tr5;veQi1<Zg82D^WcjMkg(UK33QF)!y(T6Wn6kL%g7U;7L7eNx-bLc6
zW1|}6OV3hojTqiC4?Jg4a^eZ;5@>xcRYG|}cD`NL<*I#}bO7p&P1<~9^18}8N3yXp
z;cm%pTy=rm66b>Ig6?vaGO?B2G*_-v92>2;<X-(RoHq#0^=4a%BG%)zJCOdrg!$F3
z@_!o!2Co-(9rk|RQfc{7;_;CUyHn3uSEYMW%MIp8s(omA9ZP6@DW0S2KWnaE@qXH#
zWVV){)s_u-+m1o+DXlsvcvyp#hl0PSjd|~6w}i43BsO0OQ~Hn&3O)4adxmmDJaPqv
zc^^yJ^BNQ&%C1JkSMO8CozlViU(^4zZ#oq8T4zR)@k)MHAItOyR72-i&304OUh#7<
z_2z3t<zCVAI`hWAl4fP78JXoZviEJgl+A|%U$+p0uQ+k?KTYpJ^xU<w27t}oPFQl5
zbn3GCfRyyAFB86^Ypcl1+;6jz^Ie^55MlC^J#VR({`B<Uaoq3>qpqIyaI4h)t5`d5
z-?8~v@cZ^M%l8y>qkWSpm#k|`6X}g6N0@FJV(q<ttj~>RBe1HkT5DH5p0=h~9B||g
zvJJVm^f4A@6?r-q6qya0D!%Gv1)5gs>*b@I%-7Tcfw-;{d=x+Vs7Kpdw*mi3-;7>3
zh2i02VbR+z&;xRExaOD-pfnN40PvTF3JxA4i<8&e8#X;MY56tLn1#U;z=VrNF=`G+
zEU!jt5rX@-0bCzofW1>!|KBkvc=W%a;C$<qOKV2m_XY7=#$V9}$>+|C)XC1RaLsXV
zVC3B<-9n43>gCsP8Q3ZhUgmk^X9{qqgWhiS552lg?AD!)+bsGwc1QAFV70tP*a`DX
z+e9dmY5y~mY3#BE1^<IA84Mf3nP(8e1?I+4jF>cdBqNw{ehYeS8Zw*%Vefd}u%5@!
zF8Yrhn4KB8;qwE(n2GjhS!oRf8=9C*FGjGv{v>5#yI?CMoLZ+JS8~YrX<~5zb}>i*
zKET<^WS%Tk4Kr<eHSs`b+1VRt$aOCPR+w~zIAh>#=ltceolmE~g5w9KFmeOi{T3o8
z)AxGkE6`YDG0ylXVQzH8RO)4$QFHGXZQcz0v-Omrm>U6Uunugx=-%thbeXK#atAoZ
z;nTLtb@5WW!g#G9r=M*aIb*9_6Tbw&RZC$q^I%OKuK4<lyX$NPPY8RtWc2<MX^kty
zX2nPK44)p2OGvKRG_XU<ftJ39)D%ts>)`FKuERv3hM#?0()Bie64=+I9CGAua9?%C
z>#wSF>$s|({mz07?(0La;+1+1MMx(uJxx4y$*f;QdR2_uWQqJVp{Z?N-h9~eO>?Qq
z`w_>w2KJ^OW|nNa+aM`Qyd%zE9&CE<myMO@vTB0F6x~59gT0H33A;aGI=g;=Hf1T0
zKi|{!P`m!T<L|8z7vp*h32RMh4p`~z-CShE-SL4n^oN)W<+r<PdM+}2SIL|4FKD#e
zDX$JY9$nZE8_{d{t)w;I<c;V<-F*R;py@Ya#Pn(4ZBW-?6e)12D{s2AWe@AkhXa)d
zDD|z>K20!g#!}p6*C$qn-&do&b`5@TdyXGc5@ZVgVNiSR(Bc{_Zsh`h1|!A58KNna
zxVJur1p<$xz@Uob$`WOYt3w_0`chsCSgvyflO4-XM4?eneTORCW3UaYyJ|=u`-t+n
zMZ$coDuMOqT;k2{x>;F1tAgfIXr0fKZ^1>p(_>nXMWh7>rq<nT+C;G;!=_QW&at03
zVt%7tr~9g>-{E*C=>`pGy;ox<Kv8pP<|o#eo?xKnvZ5!Hx{q=LtQ`~=P;BjtAwPZf
z05d?$zuFQF--9KH_P%$A2Jh$9_MFWtUm@N_v{!fiV`I2jM^7E*#(OD1-m(GH()4OG
zH>&%Os*+;2=c=oVChQfWTPlZb1$%MV5iLZfld=7u<UoC5OuT#W17XtO%^+tqls#!Z
z%GI+Y%oR<#-ME3v0;|Xk?$@!uVTo@zHu^B4kume;HT>k@m7tDv$mg-K+hw%7B-tnU
zuCb%rS=m9_r9ocBsX&Q%124W9*Eqw9o%I?8j3A1z6ZM*WKIa#|W3`YS*hTaTda5Zp
z`aeqB#0Ou!c9xmHkk5$#-+Lu8Y!m4c<~F@$JLayeoInZ3ehhXg(0;kQ$h-|AyoLGw
zUehn0E0Qk#r6a@tyDb4HUzd342~dH~*K2eQ+f>Qj*&7@gq9PVjZIyOr58#!MDNu5(
zEh*chQZ}N7Z86vr#*IzYvyLf}GdL2%V+8Dc+GUJn0~LgB+)kvGcQLkMOpo0|qC&bj
z{I3@v^D0GS8cS~k38l=Tlqe0G%TsueqJN&Z(1|!=Y0*7??HNps;vp@18hucx)RYk$
zXwvq5h2mn0HC{mQQi=2CRh5XCy*(*^y6)XBt*P)8DQQY*9YH6(s%0u0_1E;7rR|0k
zxl49Jm&&h1=)+jI8H$tXB?WeG%x>D)a%g8&eSxbb>)kbUMAc@%_#f87Li2|V>ON$@
zAwyEaLmJGQc41$FLaGgWPB$p|KAfTjK3NnFKFr<VsH}2ylEtYu?p*y4fioE{y7>(l
zlCxp9xEotS<XN|}i^j++MZw?|LAyJ@$ux%3^iIgEWGPp3XE?fFqQo%ET)GL|T2XFM
zs};6(igIfo(!Y8$pw|c*TR2DYWT4c9v(vyMqn(}6E!M3GtIFXMCIQ~e0<xen=053)
z7I?{m&g3b$Ejjj^vNzPNwz*+Cxhf^_$BVs5ze6o~owH6RC_yEsNI|!WO0Rr$T`a!Q
z9EAm*O;N|0rDmbIeIS3CRZ{8#xg}C=y4!B*)d<P<j1mhDSPCt6WaNoA{~K$(U8);1
zNeLIfA?>_PtPcV!SbL(^t^4QWElR@BsqV2(YEatERjAZx-jpAlMOLct>qMhf+^qC}
z??E6}KV2$E1$*)pg1B?(P$=xE+_Gs!KUO%>*|4n=;mNhNQO^{jN~IyL1IZz>M-znQ
z<w|J|Oy`f_^l5^xwvJxQ`~KQZTh)y4$qPTVHeo}w*sq#J+uDa2hGtOn>a-vK!S4Ov
zWM?$7AnL;UNH^$_aMH=0HJ;aZa|O}4lrW-pCuR5|T`<ff`fBb@!oP<G)C9K60cjhA
z3bk)1Y|^E4v>ND4ad3`<Q^=#VK;XK$4c>;_O8**ze&RBp1mxh?2*<~Q!8L6h&gaCL
ztAuyX7Z<2dCW=2KS2rP-sr(u}WT*~2QPZ04=XK>4`7NC|F<gmXBwsBzg;yVWoqXXN
zaiJ2tjyAW+)Gf?~fZDy8e7+RI=N20z4Um=)E5*i<aFd=vWO>s!n|6DnCXQTDHQIWZ
z<-^&_Md|YAy1VxUr{qnjjFpwuo&!9GR~y9YW9#>ud_<Whdi(2Z*ov0OV>}P?#d?8e
z98v)YL}h|SDvpx8-;^WgIXd+QBjEDT4(Bu9u8IYC_>3?VE(I!a6>zbpG}FF{Bx#&x
zmyI&^76oQ4^V;2o&6X*=A=8Z2N8oma#9Xu0zQWxfO|d1C2TWcZrCQBh^ca*|KEGRl
zHdRdJ$}1^*>@24Dm+#F;00L#zSZ2ch_w%gW$RutmtoUPlxO*;8fwqK3D-y=Zdap6A
zEA)uQ;Zr~?b$@{1EBsdA2UAlxWf(qgiUuB%XcBOFlDvi>^_Q5f4}B9^jNtqieZ@Xi
z*ua}~c-ht<HA)B1*5&ROrSRK!)*_wNp`Lzy4~LIZ0QxknX=9l@o;XzZJ#OfQU$ACV
zsCXxq9l!s#(wC4ipb4AzcLv<CwH<1KM@th%$U2`fzAN+&HSELROt1bx;b@Rf!rypK
zeRU<Guv$x~zz_ZT4ZrJ^FFPb*|8IwBhl$&FV)up>Ba4IV?u~P6Y5TjhMBYGfz6X%<
z6yBb__>St`Ksb*Aa2NFhepQd7hKnytgs}|(Bt;Wwf8bbF9$<%H@Ua_g<#YfP_$7nn
z%D?&MN6kC2!h7*vIIL_N0cKCE_7xlxl*6sav&81m+syoxAiW>$K?nf5(x04xx<)1)
z1NJVIERW+P%5_v$Jh_DB7@4vI6~PjP-btYxpD(Un&0`Ro87;EJqcPI+8&<X>tPZ6$
zcIzXnaT3N`ynu=5|8N$`dUOF`H9kDEhpHmyNh(nAo{rJYwJ2^dfp8>IHXm?2HD<ay
z?Dpk;i~^{h;<HwlCUhq|)LC;YQXHd6Kqnby!>oqwljDOEC&ussVKE^wUE=;{40$8Q
zRYeSdjv#?$UqKa+vl&A;Y{oGx@#ojC`cu8<xsUi0vPy&S^$q!)W|B_Y{9r=2V0TvF
z$QPbR_1cC2p<}{Y7J5XQz6R6OAimHcd|g9<8$+^d@68#uWCgu@K5rU>%v2f>Buhg}
z=jmH-7?lpUj2oNG^}IBP>owhvRKn|9iok=`%w?&*i<i;xB&I`gSMEpXpl1i8Pw9?1
zr;g4y>(5;kCR^r0RGULYH=g*N^zAokbBdQVg^W(Ti<KV`g>b;&EvJ9MPrS~y_HQ!M
zsHczzoT3p{gch-l13?(hkITQ4?g*FcAFSA~dOfk|dhDby{vX&~KT^+4Rx`{uvU@c=
zWylJHYBw8O3TX`POW+5gJHz`cm^8%s?!j+U43whlaou5}Kk*a)q@HCkbT9hr{X=eH
zzgDONF4hGL+xC*i0JpU{<`g;+DC`fhPhg7f8cKIffy1Lj_MUut|NHvbJw^djpaTme
z;Sto)q{BWHf|Q^vr|a3}h5{K*Kr>?$A)N>-5@WeklS&gbHT(_pA6qLSixP=Atn^j<
z8OPA@K%qp&Gnj$6X1Fu?6050o0ag)Y=GmkUUzfB8*@N!!+Bbuf!4x&*r-<z(B3%+!
zpHk5$YI4>^=}a%<7*Ih-zX%bE+o=<Gf!8!iyiz+-uUEEm`|&!_U5NW?h%>d;n>WjA
z^puj!0-?IqWjy+rNRa%SPo!i!#9}`(Hy3+Ym~^xziCd_awnE1WLo)Yg%{G;m+FFRh
zR3mRbJu(K+P5n4N?|#YVC%_fc_Yebi{&RPE{=p3V^?*!DvhYRS!mT?4@W-L6lH~2D
z;9ychwDLDsC&aDFal>^ARa#gRCwBh+6WUkR9lK}-;q1?_^;<VQ)swXifHF_WA<xe*
z&o1I4SnKwc(9`k`4KZ1Zm!#0r$DLjTz-qdPg(&m*ejYRr7J637D*+hNM=!s@;XJp#
zBz^J;<oH{t$uQ<foTXL@1nBj|w*2oQ782t3B=zz@@v{w<B5$$!U^*c&^2BEwTCBAC
z$v)pp@cup;1L$;B0Yh4&jSb1yu+Xa(FU_B$qCN;q3s~|?8SL!{tnemaP@Zv<DfmCt
z1MIv@p!a<%;*8B<QwIP2c$30Ec(;3OkQ$hNa|N>M37YPwGYx2y(yU*u$a>}-`hp&;
zb5O2+$`1jQiQf${+E{F9=7q~{cFQU(^d^wDIN{YMITYbt2bZjSBl0Rc0>^|qPBy9p
z1!Rtk;(A$P>}i;6MxoUTlSue+S|wTR0e$i74RQ0VHiT5hPtmH$5>Eo4))=WKuT>{m
zmxG1;PDN#PAx&ysQP>=-wEp`Oa>%QdSvH`r3b?bNa<thx<w)MeC}b3n;39H;LYfhN
zi_Q<3gPlmVKbw$47yQ5%OB~%HNh5T{QfaEUay`MHFwa5WHB&dEVuZC;)@XUXeth1M
zZJA<}A6BQq@@oCWyc3MvF0<j5`&CV-gKi=#QNMk}>SHZFRU_(9v2klZ!7SNj0wc4!
z{F?7=y{Kit3N~E{)!$_%_js(glW(4hsQwb)47~FmGA1@`b1Rc5yWr<)^dn^TH^qW(
zu4DqfcDF_`I!ovoi&z|K(e0##{?MG*&}#sawpF*dAmY5IEH!nqEj{QV#dz+2i#A=f
zWE72=43r+_WmBHG3aSa9@@ztL_2!(9l9_0)uFCQ}ktOT?8oK{%P+;1&gQ!T&9G?x%
z@=Mbhve9RHQ~NLKErhCwO9{(9z>;zv$%X)TaSwWruT&Q<I$f_U@U?;FT;j+*nGuWq
zU(!FXo6=Pl(0_W=6+YKmxjeggOVmbaR}7yKT%zAcd<@laVq^VuLlvb8H@g@e67_ef
z*~Nuc53Nppi`Dnk04j~|6dQ#}d^IoB)Jdtx)mENYY`16IqRQ-n8s$=Uk=8-f@&u|f
zr|ak&1U&hYghUR1J`+gIqIF1!N~TmW7^t?14c%_VZkD5SLC68*FQJU#TKTqM5x%7%
zze}JG4qAiy=PG@o3fk&*%I`Lobzd@A*|!lc^JoWghL#Sxyg9KM!DapM1H0>c;-plL
z3i0GC_&xRj@}wY8G}7^^DK@yeje5BNU1|$1*psMvhRUxj7t2ymns|(?E+VSS#;IFK
z!nR;0xYBRWm)s_cl>VnArL~+}uFoGZ9Py13*>!MN<)l*K9buarp%q%8-02p@2;c8u
zF<Ks!8nJkiT(4U+S)-UCYUO&OocDd3OVr7q2>A3_R{gZp{Dw^AUcRAPF0`VRc9F^%
z6zk{`J63E+4IcA%!>po!yc$0ZRaH0UCO|T;BVzV<P!Z5KaQ!Bt;W%MFNR8A#QZgy3
zf<Z8HmM}haF^zNcEKNHAtg2KfknvJNTG8QT9c@Cks{B82`+lUHGz1&LaKUCFfZp~C
z;*&*|t3LDTe}p1tC1}o=eQwMq2jSWq)rWlsqSt@L4tzoP(wGv~|MnR-@y3@uDVG~V
zW8+F5Y<SUjcpze{H!U(=i@}!ALkbTj=^30diM9kO(U#!YL{Y*$y3s<vN2P-TU$Y)^
z|Aw9L@Xb%gDYt)-NupdPqm5rSXrg0Dma0OCY^ql<*_vS`MpfOVnqoY2@U1BWEl&{v
zzTTxZU~-DAB{ai}{^vlNa3IN0*?>t)atK&iSsuA!`u)Ja;wHXwM)}zm1<hlAI6yNc
zvKX;W$VRbK_#<vXqMJ{&_^^Lb<axG>U1?P4MA!;+{iD_~IV3$6{TSaQ#_Ts597;|b
z2`aiO!FN%V=N_|Xv%D&G#%sBL$DJ!RJ&XN(8g2kQlqckzXKTr_V|23ea(UvI75N>X
z0<}DZUZKefYU8BtaIj>v6Q5%oH)79Zks!ab`+t6d0Nu*$_q>e4d7h`dHm?-apd6Ys
zhos;acD;-Mv?5z6-JXY;RULW@tmxhRZ)z%J5A2!e0rC%Xdv=tUj`0msSMxBW(UwpF
z{)q_@InjFC5sKlP3mmsC0jwCfGyE~>T<&0r&%x5AwMRY>@AezKz4x4CA0H(Yyw`E)
zZ$0ZV@H)0el(658pk8{q9GSTDGIayLGG;e_SK-`0*xo!WVDfq*k{H#m|9?C{IQRxp
z3bcXVE&K2X0E-d@O2dcHILb3hQ2xiz^5eaRQoTk*=25L}xUNisYuZzH?KYVq$tol;
zkRr<+4X-MX@J@bn3eTJgZqs4;O#rL$aJEY%4nc}sX2U>!Tn9<%E)q#XP>;uC=(ojo
zlEOz6&W&X}f<TMzfFXkPe4P+r2QBbZBf{vagSpm2nXl_H{A8%+5=hg0E_za6{viN0
z+Qw**@}fnYOK4?txCbv)Npp1DcrtHOB2VODGs%2Ey<X%fgK2v2NhbXqT!KOKnqEAa
zKs~b#j>*9ic>#c^2;cTM8pA$_l3R)U$b=+OZT$yQ29}$tEtbKW{MH--Ir6%JCF_W&
zYx#W;aADTCf9WBhl<By{bW0N@SCFuYD~|Ac8`gVqt|BZEDQ2tK7PCN96E>9+#7?8+
zcfiz=Uweea1|2}jE#$jYf~V&fv+ehCrb7%Q29mkyx?(xB$#1n2$n4{Q0|FeqO^-dZ
z9Ut`L1nTqgoxMdQoQ8chFweo`)I^QNcy7T!MM0+RT0Gp3c+`MMy|fj98wJ$xhhw>l
z`*c(S=DLP|NE;la%|w-A$8?bv2hEm^#*okup&uYSj^@g!WgtHmS5~BkZ=4&j^U50}
z#xExM*h^*`D}wz}1EDEqi(d~QWBpJaXAsEdt5Wrwv&5WWMKIeV;G4DNtX4X#Q$31g
zR;~LbTR)mD`Yecq&$$c8LRH^=PT2Bfge->8oIt4bW(L@yYB=foIS9zi6o(I^nI9Go
z;=|tM;G^G#Uq=&(58`n!EFd#e>|aSq;-BPn3g)v0G9SE(W|fDtzrJ!19|q_k&pV<)
zocb!s`*Q*I4_3?$`ZqX@`jmcMB=!@K#LD{d&SNo)0M$P;=I5aOCm_L<ue>&jWDLBs
z^0Ah9Nw7nvxeu;FN-T*<2_ib}H>aoHGiqMoA<J1<Ku_#3*KwDbCX-xQo79)0xcgue
zm_ZGdGE~q?qT!Knv9TCVD0(D9VknLulH*%CCXtGjw4Ojq!g?2$Ddkj_suZi&?_zvb
zzfMkjJRWke1QAUSho?_;a(*}UJv=!Xdo4BO+y?3PWhoPTQ~#onsm_-ffMm<xf6isG
zC~b~=FzBKmHTy0<cO4h*W<2HtmQCLB4;b7g|5OykO^V#U6}|ZoFOng>Zlf_t<SSuU
zKmVk{Bb8_4=@mHin|g@cy2F4&6?Yrc87XFI1wfXiF}nTzn_-A7se!7Zz-2y5fP}M+
z?f)1B;U}YT<L1*Xgqa4tF;jq87?r@wp*H#dT-XH8@??ZGhR~icC9MUFiSv&c14xtu
zKad;8!h6uQe|_^q3#N*-YM<6E`tFMWBg{Z6s;&Zl8G$2vmPcNS?}-!;Y6)>?#e4>+
z-21X*e?-?^WEUZm{sC#`!FxI({D)(diGYP(=p^hz$II=r+74+^SwYn7v4H0PtwO)@
zc9@pdDeOz$B`pFHY(d%bP6MH1+1rhe=VAgWA!ki^_?kO8A$OwJMSz-ZAy7!z`rw+@
z*?{(qfg<oR>N@NgvJHT=Hz1VtrQaq}Mi$R&0K7zmUQhcyUJCE0p8BG}0H)Eypi;%4
zOkMuXuS^8E`ir7z0tBW1A#!tE*|BI~P|RMWH~pZWN?b0LUKJ<%UOon2@ezL)nC-O#
z$Vzlhg(z2KzuTHR(h6VkALbe`$p=5;?;OA_M~*L=s&;jTJuA+rYB&}SP!9JW^qrIF
z0i@+ww*p8mnNkV6>UK;;0-C=<yaw}&JV12G^)*{rmTtQbob#uE<Xe3FTq{44g$%5?
z)rzKKWLs^5TpK?EKB^zzrULnxwYZN_R~XZE>|Bd9j>N@sIh4a>{FCT2j2T*v(<+Uj
zaIt(2<S=0SCsMWDkW{L-F_W6AFYKVwLP~NIO;rm+(r7qg$(P??Tq-?8lml?KW_Z-{
zP(X-G>j%sT2OMOYMv0-TaAghqIGXk|5cbC#{{yR4;EQPd7=Tv?6%B!8{&X)wbROG!
z@o|XE!*4q2xAGLFbr66=Myq71cYJBc2nh>HQY6(##TPOvDqIA`l4NTzB0m!9DT-D@
zkdFZ^eS@4Y-6f?!!vxGv@Zy*PD%zzW!$WxB8w9}wlE#xk&|+J@2=M`sJV`Vm6@|K>
zlz03XF(kQpu@3?B5J&w`<nN!5e?b7YY{hFrfM(x759W=DlE5LaPhoi$senHsN`eNT
zJ%Qs6z{F};@GlFG7BK80WmUpeQzE7R)UiD#mN<CBAx+FKdV9%0*N&fmOb@xC;cbqj
zR6qW6xVH#UJZ0WlHu*%(IQStH&hvmS^AeI<pM2sWh5|Vpy*9>O>l&%_uVfBwfPvwF
zMN5zNnLXgJ)FN;ts(mBi!@5z*%6WN{He3g0UeJTHe@El`JHl-!Jl6n`U;TR}%aTI^
zB6P>|UF2E7FFkPAnfJgOjvG(_+N+JQE`E8Ks3C|U{)pR;G+Y8y%)kf0BXVAnF1@w;
za6WIT_!WG9HgPC6M_j105C?avo|`m=VO<e>l`dvGlyvilZCif1M!xl(bl0>-p7N&<
z+yIAC<O=E5R|SN@CsumI!n?w?mids^f}>OzZCdt=D74~Y^5s6M217x+^8+S#CK_&Q
z)<7qBV-U5!kuCyrJ~6*+i8g1LySrS59MPoIa};IY@;w$$gEBA*>+B|;aI4yKrl4)v
z>sn!-SAFkMFmVo`J^Z#=Y6mZvwC(l0R?zFSvis~7!v1fdBQfga6HwLu%JvP9E$smj
z1yxjgQ@|-p*&Ox~qSdowOSsEG*#a}xc4gRxD5h%P#c>+BU5pRi*=#g4WBXtx<4FM;
z1#CsPT!?P|TEumSS5n;x9>)M>slpf8ls49)6fLu?@+ta8r3a+kr?KO6?O!h%wE82u
zi%?Tid}Tpd2OZP2`#v9;{<nBR_Z4l|sL%0=R7SM!8~0`>CId&y{kxYOd!VxFsf6+i
zjLfQ#z7>Da@z{K)*7W=&YxSyNUyttNU=?jR`rTW4Sj12X-e_|V-783B6)L68urX&0
z<T!u8RZ(N_A&PBQj=+Xi-$rqn+J|1j0{z#|u}mVbgCNL*s=e$i?HUCZo=*6KRzBU*
zs?!>Tc&UV(Cm4s9L<|S*@Rs16+_wE*nbv+{ejZor>!>?lZQ$qBAFodpUTA9C@KXvq
zaBm_eCLDN_Q+;Q80f2LY$JP!-RYeHItP+c&6WOn}PdEHk;w6F-cJfVZ0nAZ@CIvAf
zEwRXCoswQmXkW{DoG6xLAT_~W(~Yj)<Nj&BIaz!^_VBpp@rj$izp8Hy$VQ2S={7Z;
z>3}U|Iv`-)%B~y!q2a^a7jh--+DP&?kD{6b#3A;~<gySGNAolDPY*5x+gBB9uYi2O
zi+Lo86~RvGDxB=WeN6CHj#Z&rQi6A+vr`=!t(VWHIRbJIdN|)a&Z-o_aF8+6d7Fk>
zrNCP7=xhfswNGeab2vjbtGEI=Xv|aGXzDoWUsSk<TRuixu-4C&MoSnJ9!IU^B)D6o
zLolPvRqd#;;-r8U%=)?o9q|0jYZFt0Dx0hi81_UjS)3VXQZN-UIZY0k?vAIOu(jM&
zoNj;Z$isz8*T9@nhR^S;AFpG)cFp4-hHYv^zhQys962EQ2~0vbrtc5;v3X^jr^3}D
z??=y47$*p;q|zVV$hp=$sz|7E&SYvYNVhk6y@U-o!aDlJjacH5<-z5_Hrq#=?p?WC
znxkxuP=`}EDa}xL!y2H1{=?)jU#z56bCm*B|M}v0{ymeXhnV}|J!I_zgj;9zWlA_A
z8^^F-ne=_cU5HS@*W-ZyBqI9{*GyjJ(x2oH(AB>F#6KJ}xz$TgsDHZEJ9^cs8OE*F
z2YT7u=a-5qT=SZg8OH6l`v%$kXIBb=0Ns)P#Enx)(U#|dZiVCoEN$y2Wq)&R*KBfx
zm4_6LyI<U?>4|UUn5NR#;l-3Q?H`RYVR=C#UZK^oDMCs)Qb9iBKRP&Ume%R5hshq^
z)8o|+hEG(wRmnuSs-m_7txxvSi-!gKLn;7N+~d9VHiRz`TWv_GR5Bn84a_zvC>lZq
zf(tlx_lDTBubL+7Nq-rpV=daR2emBa$C+B!yZ7_FGVjqo561m=LQd~v<-*K_|0kqM
zU@E*&MwUGghJDxjB?Sb4v*bmb@dbmNFcH-)ly_w7@3P4}^@wdoIQ2=nMXV0h|K_`w
zJ=o^($E2l3s4_G5d)_sO;CmC`j;nFH#-b*nYrY#QW+LW!oS;Ax%XCd>l^HM39upsA
z4iilat3+VL{IP^nB8=IYFBZZOr&;+#_cwQWahK;vq9CUz79)I9XN2*)Q9R9{M9ZGb
zGF+7HYqWb2$DUl|k<bt@<zi~W<dj-Z$v}=eMFUCt<#edkBdeo-)@h}U2AhunCiwu|
zDI}g2VXW)hioJ+rK3Byg7E&+Q`juqy-KiEcaz=NAA)l7Z)eOru?D=fN1=;pypO>-d
zmWbuWJNXW_0;N7fOB)-iY_QuBY&`4g9Ite_M|F@=3q<G<r}Mn#_7D}aw6e?W6`be!
z7##&K5?t#qqgV8db~r@WvwA~Tp(_cA8<RZK_T`Qb%k(MO0Nj2w72A(vWb+-fX(ObK
z2XxC=|Luw+oCRlBU#^NwgcPSmK8iY6U7uH^MQH^*g{lsv{!W|zd5zj#Q#Yq#l6A1G
zTKQ4k=stOpq=9+UV$%qau=1E*x?u>mQdXMRl|M54?luo9a(v{2*o`RjeqegtDQ8+<
zrS@UhmU&B|dy!o=!Q5BUocm;GaLL>T7&NMDg_!7<TgDA@i!HJaXurxW)8=Elm5<y!
zaTj7jRcZf<MY^xa{uMlG!qPn<LPifyQOugDDVDz0v}xW_QNAd*5d&8J5&7>h;OiP7
zSSbUQ6t&Czh-gHK>lJ+uVArboffnFzgZnGaY;pf-ts-xfYU$3Jgjv(0Ph7u3oY_(}
z#;H<G5U%&pJw#<PAlzsBJAHE~5RJ#oV53586LH;PAM20_ufmh$=^*Q;xa}tgw?uaF
zm37p;1)c8K<HN7=8vyat$FYTL%C?ItTSP~SQ`zUM`{r{aAvDKu+R@|ztEKmuMrU?;
zKvRhM321$*1HfHkwtmu_(-l%4RC|!0JPTBtsR?o3(K@lIS{=8uE_2IHeoeFVh_A)<
zV06<9qj=<ze5atwis5`P0u0~y>fDdONsWjdixd<H+%CPYvrLXw<G3o42G1|a+qTU+
zR-cPX+t_oZxNKZ{v6aq-nRq%{hlrvl@|8Hroe1yt?eqRfu1%(I>^csL-mQLW&Se4&
zZhq9WfJuMRka{yhj|dZeClG81{zIMF1KsXl<BdEN(2jKCDZ5eA+P3!M{7!uQq_gXb
z9@>#^p2l3BYTzyMq|oJWkw9Lt^**5(UxF-CkMlp2?AnM^vT~Sw9ZGP&&t4QKx|mGW
z5`nP+weAc|S&pAC=!OdqN5aV&s#&64T1y`_`p1=|z9ogOi;yylmZ$&riS|t`z1&Tc
z{~pRyiFtO}-Z5rj<wO@**)_IM{2KuZ!IHSDF%ac*3lo4`d#rzAuxC^YcEpSSTZfN}
zYrPR4mi8+b9~VD!?@wY6bZq0S8N>WA>30d(`1lojL3V58f$_!z6Wt6s-kV<}NI-eH
zx;d=LzBLfs?Psy)nm7@{6R-=M2t1Far?aM5O(w68ouF1V6FVY))uoC0E0UVG;P`>r
z#52HG`^4gyZn|`nE9&`z7l1u^Q5#2ah#vX-8~!ovIPTzalS_gu3(tF+=^qz9T+U~V
zZ8_yM)^|w+74>EPFG6SD!;7HT+7QZf-1zD)UJfWZ$CPQ17w!m~RAcJur*_E*mM47A
z@#f_)W5(tcN$pm5K{dJp9d}Xi;^o41QGvKNR`4`_N7O@KdgORH&jSX#1kiGtE%cRt
zoo6$#qC{_twX|JrHqBF%9`q!tPL0-HP?W1iQ=0YOpfb1l#8wR2tJm|b7DJvgx1~C=
z*;jWZ>B?kPM@_1#D7QrD$xw^C$gz#<fg<@r7=8li{6q!161yO+a1WGiIe+{|Hs%-%
zKj`DTG%*2H@t^rAw%sJBFI;_-jRAJTIU_cyY?nx%3v_?O9rn5QH<2DQS5>`@+NPJh
zqa8YW((oXw3GxtZfu!IoEW1&JW4nh?dZAj;l*JDofn!(82%!>-($?X;lnp#O&ZBTp
z-}}V{^=L0z?x9UAiZ?|q=amCA{L=&~Ec*gN^{Yh3wG}Fye}}B$#VQ+3i|nxzhV|$Y
zE2ZOz$8PCdZJB-9`qC_O^pI&O*7<dDQ7U~dM<if#D)3gPhLjC*mP6>^hyFfB4PHk?
zDMRTJ{J4~IuO-@5*qC(gpLguo^}E^c@%Ax1+P)(>=)@`$xVT#})d$K-vStfC!BMjl
z^=cote)_eZ9tN%i)is1-yYUMcHX8^SZ;bZY(kY6sr!8AuA&r5YLdwk_Gcd3Eu)Tot
z27c$sQ5t)Vbz>fLCE?h0eMf!4gn5LRSB~5G)wb%?_nPX)J?2WovHSEL4c7Ewf~}!%
zpzzN{n;Q}X$Wl%oCLVa4#19iy!cc%Z=Fqg#5YwM418*3)Puh7D#KWVokO6N=#GiVf
zx&b;V(cG80?%!a0Uo+!A)FkkalV5-?4AtKYEaM#ws=NUhMVAE&t_Vn7kvwgCW3yXy
zL|&gQCk(SSY+sSU)!wr*yye$@tA+Gx)rvCbw&#v<&q%NLMu+tNZ#RCg=<8oBTz^FN
zu6-ue{Q6`6w)+mfYVs<ntHQ^UJU37OrGm$)b}&beTGwOCdJ?V|sugPXn9^F9s$^-F
zN=72!bb~--#A~tX{}fBc?A<2cv{smZ7=L_d!+7d^WZ3;qsjJD;ywt+F-q_M)#%T@x
zriEB%cfxh&nmg+P>+8i%YIPV1D3GPo&!~e%<K3j8oV){^mtAuGB~4a6s~}^TJ?|jr
z<tAOyWYn`h%OH=neK@k~qrI(f!O?NV>vi*Ny2Xu`y6wmN779C$c)e-X^7R=mFzbwB
z0x;KblK0#dCxZF@w0tKL&tvNtEaF;r0=(ktNtimhSQfi*)@aN;k@}y|=|=n<o5L}%
zJT_na_;}?X(&`U^wZ^w(Z97FB>As)42f|+~UpKzUCT{g>xML%}{D^d+++-BU+>(rx
zYt$vMCWE{`Y2Clxd|Na1c*+{fqx%!IdT~y=Zre7;r2w?atTq9~QFDj~vq|UG-Jlxr
z2PYFR0ZGhSG@&xKU>6j5)_N_!Orz{X9xx|~i(0RC2%7s-u}#D!N5TMMIZRt=Emm+l
z`7&Q6Qdh(b+JeCQ_&xdMExBvr4>Rf}nB~i}Z#LUOrVwU@_GR^$tLlC8%D712W{G2E
zNH>Rhx${pQlOP-u=;}~QR+j|l%OA{c{J^Z^_hvEFh`gFY>?t3`G_j97-!hSd-gDw&
zT9J92RyM*sP~!)h&75S;sW9|n<>5-?JzbI3?{UU;jS)2f^LskBNG=Lwy;0*zkEZa1
z=?O>Nq3K?;1-g3C2menBUyvMakV}%(N*q5If-$lluoXJ7v%fxNKd-E9n&}!MEfm(8
z-ffs(C@YotGR3wml|nZ;3NYh{oH~}-L9#k&5&0oiuE532HA~G$0$C3oq9pVacQELJ
z3k=I*2ct;rBa)R%pe7&2VOGQ&YTSLgT)9dNO%6{A=8|mBpkNhyD8(@2EDxBazbq>s
zqza>9T6kB|+%*&JCPnn99#pC#94htKM_64QC4DVK;)cz;%rzx}o25w?sGY?^R#%~}
z7PY+bFMWUs|EfcrhOSHQE{<L%-0D0YVX)`Y#f&6t`USE_HRChNY`Guvu3lMeuvvCA
zt-6ero&}tlUwF43y1uHd$K8r(<K43_eQppA!-{*tLlkayllX9@L#S>-oEUX}YdY-6
z)Jn_Jf4TC+Gy$5PULfWtz;&rL^7QV&O6dfBae&tFnl(!{cj(6IjvjYwf}MZQzT~;R
zdN6JZuOPXb6Bwdf8#-7H^>0SXXjCX@?URP&S(5NBeU)sIu{1!(eGLGRSjV#2qF7u*
zVVjo2^#Pbw4IxO3{2cYV1>+jE@Mvx0#hbh_ohMkDFt=!ECXz6%&^L*dqGNV31>!9G
zmc3l25hGFun4tqH)C@hH-a(2HJIq!!wXO8yN9%PUuCXgMtH;E#v@&{UtUIyJQGMvW
zm2)2yE}g5hoy>EX*7bho`7OLWJZ0Ai<c8-+(w1eMy*Bnq@FR-WS~$~_J4^2P0J-h)
z5cOSO@$_sH#1m@jh*sXJ{!U^|vz5ZSpM&aQMc*{B%4dM1=pXR_J4UT%s(JaEgz4O%
zRJcmTkD;B(%;X&5ezhCT#^>_*E_*@l#6;~0-?XKXK4h0r5|L2=$zUqi#z?7QwKbd>
z%sEVL0m|w@L9re3%KMR0g*e($v2Z(u$d3MbbhZR49(olw7Hs47krY>c3+ZP!M*a|Z
zWxxrOPm;Y?uKI~}-W60PNzxb-fd_vsap<?C6J-{B8zsc{lu`P?HX`gQ_~9~(8$Wrx
z;)>}iHJ<ngz}pa{cAdE_muQp=V+7wf=uKT=rMU#XL=Ywx{%dCIu_xN{%6{VQZ3U1+
zlF@8+0IkA?v&O{Acc40Hp%aOOF2)^1zsD(xU&1I|16n4$O_se245=q#{v_wR(!w6_
zfH_ZGC_x!Sw?0@^|78Ir7+UWckNL}K0;#_ot!_q4mo`YgP1tudOG(lRUu022Ev!$d
z&Dy0iwvSwaRy8AmKFD}R$nFDxfy=gMBx7mwiy{n<x)1f;H$QuST%};pzR1sHZ*Go!
zufvAvqK?4wm}I~VW|Ljt6Q^_e2P9GAd?KrW)QMDTx_)<stI&EUSU`I&PFTY+18oY?
zWZScakHtGDShCL>;jZWi935_dGLjQA<S7mTP-#d7N$h1#4=KjrvP#laKUwOH1G;o)
z{AWxeIOBD~1V2ZAE7qKk)##XNZlNxIn#L?8!k`q#P=zMWPsN)}0u4(?F)sf}lB^P_
ziI4;XpTpxh?NnNwr8JvYChbKiqxA@59j3F$i)ayd^O^{fM6kJ3OL!fmrBxYM@teB_
zUw*~;KhJ|_$TucuE8TPb>`w4=3Kw`~i>XH{YmE<kwqLRq`DSHSvXG@9<%@aLvz7*N
zhEt>pl8bKjV%GF%wvDtGB7e2%!%`cYiXZ=6$kNi$gz-kc%tI@n_hHveBcxFZ^nw_K
zkS^m&#}ktYz@ocIw}ja(+<jIsqpg<HtszbeXDuJhpfw36h|Y$!*8Dl1G1bo~8ltb1
zH0s~9?>>@{qUoYLhDa-=qzg&gM<CBUMiSQoWgvN!BIFMQ&~l|7-UiAg(suM$!g2?F
z`KEoS;Yvs2KLRK_eLD#~Juq~u+q-UoZ+2p-zflHWCSk@lb?5EPt_5fsj3m2ij};UU
z_|2dJQvvp?;MYY<o>>>=o*kYK9Z!<C8#38mC%3c7uGE+IgSOEzgWoxq{9xH9c?Mx8
z13a1~rcy5Hjs6n1<2eiQk%k(8-+=^GrEk#h&#&B&ND0>)jCn>4TMU<_%dDCD9P&lN
z6y;jaMSv50iNAwim@|g@5GR}y=vyh|L>;C1Au+Cj+~iI;bp-H>$8x^^M)8|XjO5`}
zO&z%g6v5@masx<}OS(#$tnw+m2CzJXQitGt$w{*7*cMmi7I=P;9kQFjESqTpWsKd}
z!~l)i*r?U{j2A#*e2&iOl$KCg>LnOM5?SIjD;r?5k)yGHydao6pt05?UKJ6T*|Gp$
zXA(q|3W|b}HxPk|>PY3*4pi3G%bcaLr*ND=X4ttGx~um4`fp!|E<;&LKcdK&M{m#D
zd|bCn75#$Wyf;d~UPmZ93qP?+I<A}XP~5$9j&F+U8PiWbYeJd=rMSp|OQPeDgtg(k
zO`uSV2}I-O#UR*pwKyw|R<UWO7TE!Ip(lATJ=TFRS8y59rT`fF7F$`pB%!aOMQtZk
z{E3F`xabwh18rp$XX=86fzO%e1<tK#2H&u(zKD(BGlR>|^aa-!{&Yp?h4Zn?SHJzM
zXJ74EOP?;~zRb=74{=A+dZe6J%%Yc!z-SL9<Cmw_{HF^BZW0$Hu+S347sstd3RDSz
zj=&EC#EOhUhemSvVZXzi@9Lw%Ta!ei>u@EHc=!U<CYXNk3Hj7B@J_)8-1;|Qy8QF*
zhG*cF5X_RBm?dDVR+M<9p=d=EmAfV?Y!t8LMvC_~6t3Z5h2Jn6B9L7SPZjb-5S$}~
zvgkqyoX+QqAw-w}%A)ZBl1~I%OjsN^xAx7Zm>e#`XuA~r2YRo01B7Iu%`j@`3mpfp
zh%#?UGD|-3`powPNsWmbBQ8M;4*)mXF9z?2vmk$yJ{D!%cFy#D?)5bk08hz{f<|U5
z<^^N|^riv4V0CzEMmyjg(S<3H6*AjMzhfQ{5cbu8q)rEshB*ok_Jz14@^)JMTkQ=%
zenNnuu|*c!m+kUolWRFujA|D<MQ#p+XgsQ?hL-DeQ%GeD;`0cg2A&_Pv=JVdpr*-f
zTUSRWAt>ld%|U0*Om;C)8}idkQh`#8S<k|(v=TNaI4-kmTNB|&funAmesj?jSzfap
zj)Op5;%>ih!Pc<FXxrJ%Om?w{Nuh%^fig>g*C-*CfLNLtjf;VF*<IZIu2p<>F#bvd
z{t~vU{n+PzOYEZjd8bgTll<Ckcgye3ducFBLby_ImpHGZ%~^5*pn~3E#kB&=4?3-G
zxIYW3p2iP*C(^g@;B5AxT5T`d>Ufimni%_bn%2=p<Dtpt_ec<I$+tkIe(S2I8U>6U
zh^E6xaTg_Z+Z~=Rzt)>@_M`;PmfZ@yj1|=iYq%&H-MOM6CP+P<85Nq<gjDmla}7aJ
z&J8v`_T@}qd?xtEC&s1tdVtH9A?|t^I%M~LW#PWtSAmR9x_w9(e)CWuC9UQk{yeix
zr+>oNo9u;|JW)iL!K$?mRwb@7O0`a+o-0zd`t1dLyb=DunMBhy=!Ha~yVy{#D~5$0
zwZl1<r@w`h=aw2fdfan#XV)I_J<y!-&Rtl@&>dCqx6y!n8^d|?)XG+7pC(puXt3g#
zEUyL#&_TP2r`HWK|IMBD`isrXj+c}}O<VVYuYzr}B!Ks+pMHBH$B&nr@|jkynwgQ7
zE%Dv6K$3{jwu%WbEDK;}*s}GVLiRgb&*S`h1fI!^uvP7~BotQ`$orXn9+XS81s~S`
zl_+eMKMW{xPLoPnse?v8!mv57(IL+Gk5+E8IOc0|_6iinPO`a#s>98s-u(Ya{_;)f
zFAO1{_bpMaA_SLgg12E}CL#o(w#37zZs)RRBH)BVPtvk#U6vkFugH8ChY0@3C!$;?
z;<+gO{{>{MF2HRP9dKr_H|lcsG2OFY*6+SwgxNpU`+8Hy3D10aYeX@q<DD*0uYAiM
zCFm0cnilr_bZxmPS6|a=|8@G6fw9@*o6b4SZv_o5ML%h)a(`5^<3MyQ*X|A$xut8_
z5`$8ZK{V?*%r<vZb4iPK9%~i7VD~5u_+0?Hvn6Y#NzW+rJ?qlEcFqxZvgBx6*@j3_
zy{d@f=h%3W=<DMvi4Jx#Ka%P5iL-nzX&yp~e?P;^`0yav;#tS=VAHVt7^SrLS;|^R
z)1Z8qa-cMcgbcysw5#u?8KUf;oK)w0F*NqbQQh^Se0U@FMP0aXP1RPJGpOH!HWil8
zle8Jtni1qmV60xW5>RB%GMPJZyW*;NWlzal@p)NPrH2(!-C!IcI{Tq-*P^>)xQHyC
z9bCv)b=Y#3#^w61K;N*EB*6>bU@{LOx5QMHRUW^(r?E29(VtJN{OZ9WvrA&uEZ_EX
zNvWcDYq7<F*q4cU`uy~(!`4@OQBy8F^o*Q_CF5=9@D1Yluw!!J7K?~FOBy*5N8YN_
zT;s_3an(G{D|t9TpbUSGheh_niL^E_`m<Vo#XnIdEW^z(4vkVEdiF`ItPdUHA9saI
z3BuFy-@Y__`X^4vRL+}N)Z_yGiMS(XvW7`W3NG&~I)OvNtk%Y(ff7ucEsGqFC$7?J
za@P{-e)Q*3vS0y(<d#s{n;jh#MYNORY@)V@CDgWNXD3w=?VviFDQ#zjytR=x{E(kd
zxAQ{D+)w^)8h?K#ae-}_{QZ>~7CcPI%AyIy2n>o5flboy{qr{^P-sboj6I76%F1i3
zRF|1bDcr17Q93ufNkNWsfWO!Tmd(#Y3VZve7F3AKCvqk%dts<`UX~@PNpb4s;b-%r
zj=8b1PqfuM(dz4mO;&kByp102Yb}O5pb~LE!-?M5yT8a(K`dYM_YNfdc5`%|vGj|)
zuG+o&qTT!}8qMn?x<=D;6LkRmOE%5jyEv9U%`BT*(p!jO$$w+;F(GF*7}V}*;8onC
z5*(tJTS#PE0=7Yi`{fO^70}gC-zFTc?^=Q=Xuca&UbMh1AJ1O#DVzwc>`oF`ivTJ9
zk2jILL5fhE*>rG9?6ad;ucJGe-GBO`L!Wi!7&gGb{7x0R@w7G06X#TB3+1PVTF#nF
z0~iZZx~X}JxAPE39FDSL#fc~^;qoq-u%+e2mu05zB&)7yldShu9n%+XC%0MXyeYY*
zLQWV7fJBT`1k`(#C6IA*x_LxH`mthjB|7||VAZ!{qtZ9Ea$^i*XR4vk&MXjnDP+cc
zvC<Q_Je0w@q_H)WMMs6^?e*Jl7dCBYtrQog<fy;!(;Mge1XvpSlhSRi^j9E4jc2|@
z78GX2xCoFx^9VQ5^F;_{E?CbETLO28`ssPBA0M-CXGexAk0|mjT`(ui$+LJ}pq<s)
zKD%caBwGa{KiWN<_Va0QYinYLRNlNW7Jm#o4mSZQOCaTx^(gfR<GU(Rs?p%0SGWse
zPhrlkAnHV&@NgOBrjh0!+*y&h_24sSQbZRY>hMN%^O#{HcD<0$&xbhz5nW`=b)z#(
z=h8zzlY**6S3$DD)SoXbvCe{vTsILN5O@R%)s7^cyA#RKfNB(MZR*IHJO8`whW%Gs
zOo_mWd}qO;$4;8H%*Rwy4uXVG{nVXtLVBn6nSpecd3*rAI7i*lcvO}_R2HEPa2|WL
zB7cHsNY~K+_B7f;1K`GU+Sv%9fXIgmTxgsyjYtcP+Xv6u{>z%ZSd%|5h)_0=4JCAQ
z(9T(^&Yu%RzG21&s}CtdR0S%cN<<Md^PT3zzhHt|NUpd5n6@RuHqXZ?wL*u+4m~(>
zROD1I0{rW-@)WGhr8N&blLoRiejh^1fiik;Pql>R=!QSouCLM3!+k%OREUPa$Mx<_
zMoz@6nfaI_jX(_+y%|AyfIG!-Ef5pSODQwK`)(2xA60Giqt<@16FaC66wV(z^I=tM
z_7w9rZ{X!mgi{_-i>{NBM)$~G_=8`&de0knx}593>Tv_$tdV8;_f;Ei<>%$Ci3_>}
zmuk1<{aCs2W*w|M(=9yw-S}W=qeqnmqf_hjj&bIhwjgMOOPQ&8r(W+I%RU8UNHy|A
z^_!^W;MwC%T5}PCz5_7e&bnta{QsG<GsblD1gm@|`|Ox0>;JpUPS>z0whLHiU)Ojg
zm1x8P5Nh&_zyF<8)L@c$S@LDDtH9cOGj7up8a_g#$E+B2pzr&sx3;DCfDb_2j{^qd
zn}WJ@M285`wKcrc;?LAVdUZOEKww62q5pHrF7#7;QM}oBytZzvLA8)w5O2g8v*?<D
z4AB@X_2z#}xHXuEM1Xx~_<)=(n7`CB?KpD|Q|0YwI@%(-%D)-my53rLT#;()McE3h
zcAS2a@Tu$8e#FBK+(d(r#pAhbSc>2gH(o;8KSxE?T)D{Vk*5qo6rUNPe&a$v*%ze)
znuk(0MqJ35f!sojmtn}2Qq_ya_J0YvDBl$MXWkFA+-|_hRX#2AL!B&qLpFU#t{rS%
zLoqj_I${m_+a2vE{W4izhD|QBo>a%uu6G`go3i<xL_s05#_RBw<f9zKSDOU8dq7!n
zMxj=eg;csdz14PRo<@|0mf8s<-M=M)h{<tU0+zc7W3Q+7n$y(J47D8z$aGF-yM{=!
z`4vT<DJ!%GZwmR?i_@QhPgaSo7yodV?;YH_>E}q~wve4)Bi%Su8dn?D3-0{2GD@<=
z>_UgVDc49evR-4kU__ko7@rzE4;CjCrjv}?%>Nk`Ql?Uc6%);pOp0=u|C?B@bxVOt
zcBm`=6t}#7jNodZcBMyK=UYV*k#v>KCY-CwSmD@GorK&Xp&o82KLwP2a75%=XjU0p
z%FVa9+C2ucS<063iat2RCx5w_&gErP$xU^n_FS>zOmE`>-;|tTdSMrFm%%f&C$%-#
zK@qA(Dqk901TnB+AL(nv(bDemxGgwM%K>HCob1KG2GcJQ$BMhh;x^B^@sP4&PX1!G
zv4%UFYc0Ttvb#jebr$S&4R?2rH4h_7XGKYCY#0FiV?lSXdk^(ShBwCcPk&HI{+*F&
zJXZ{0Yt3hI0qY;#&MbAz%hIP<cYBuX0c#)K$}GdbK4ng^@2)nK)5ns`Fci*Fvt<EJ
zrE-;YwOK_UOEkeySXN`uaflHB?4lj`?a%Ss;l9I#{QSr(`)HvjWu6@GGll1Lc6|j_
z<8A%~L)44~I%-M({PTafI2DcyDnNd(&0^QU#f<SS=WG?fH{+8_JNNdhc2KN^VUnYT
z+^3DE%;z^XSBV5JTUsFj1!@qS{Z>~TAlgd!rjS0f*=NsZy_wAO>?kd?T%4?&<133M
zNUnCyI4XYxeOd%Re3U7A&xK9MF4PJ#nLaC=$onLXVkRFofyI3levsR3DdYqKIb;{O
z%$)gJxVi3mq8e%{_B^3MQS_RBN2?PM1ix`=)4orAKTiYx#Hem@PR3Jr+Nk&aA)$_K
z*@Zp$5p7M*&5Z+B^+mi&(4|&8Uk_DYhmsC=`!QJ3L7KD$+#d3j*OcK42w5}3PtJjG
z;{d$0<?;c+i9F~368CU~&4!Jk0^Ch3b`@Z#Pb%c)4pyF0P(^5i_4d`|FdPa&8dCN3
zqWZVL;I(XaPNT}+NbR>|Xs?fSo(#%%O|y%K$a7Y|)WPHl$>xZ%kNE-)>Q9iqRcm#m
zAghHYGTKBug`g%`OF3GQ)kG5;?RZlZ)}CQRoz2z7QBpV}Mt7y*OSzxW%xZ~(+713}
z^Pg}eV!{?w@ll)8<wo;wEF)z9JF?D41$>o6*_Z|^W;SuQ`+vB6cqPe=0ZL`DuOYso
zxCPi(Y5FAH4bqdfP$5$y!_gIbp^w9xKjmUM0r0k&XFfr9faD|%<bND2us>d^7g2Fs
zqsUO0<NGowDSGm&0>udp<2`7j{j%^MqWQt-$ZNiOWAXqzjLJ$14!!dD7km}e_lsE*
zwy^CDY7@-O1fz1V__O_uauBfz>l3p1&Vbc^z?{pi4uw<^<OYaZE6|n~boFR)q>{<V
z5-lGML3JE=GH5(MC)+7@vkRI2wH*+VKRgA1yBKGIt9#TH!!#aDM?EX<^j7RSBf)_K
zd1N(Ls%J%)Wi(Y-p)H613f-ueTU&Nqdw3bgm=AiQdW}<6S9t&389}5V#q97V0Kdze
zXM<no$L`>=I{SVlnN-~u8yp&%_|k-`O8pQjR%#iM`AJ^6fN#lRe#Vk2MIK)=SuJ(y
zkopL_fX9f_FuNH%2`{w(`1m9wkNiI?4l*?LP(r$BKcu&Z9>k~fSV9#s(w>l)VR)%V
z&QZEXV{-Mvhwnc4N!tW&Dn3{c6xk0ME=YtJ7vSG18ze119<1HCZQW)|k0nn9^Jk5}
z>}UWlWQa^#+ePNJ*39-E8&m$l&R2k=(yDe~^xH+;wu_T@vo~Hi%cgm=b7|~9?ww)L
zy)dzsa~4hFGus%<s^rC;ZgdWBAfIUjdc(#|zTl%tV6ZOFI1y~#6f}QFm7&1o;p7V)
z95m}8*Sa)%`evt@#OPt?iyZ7i&b46klHdhLTg5_?hwT<R*cjGDi@c?gQ>Qx3#HM0S
zqyBIJ4^mG#g{|AtGuP&PH*>~(RQVN)-}-bpL|(=Lo{AfAxAEpS{8ntyeD_h!%`Ic5
zImdGhZYwYVHyO8G;IA-o+ol*;o;2%SvD+qzil1~l;6rX<*0H;y8t*x}{l~jS-yPq1
zVR7qTx9SJULcAp6FbNzWCKHCqDc7b&N%gDftjvvSI7;T#ZelC%`R6nH<~y1<&A>G>
z>MWbG9=EL#B#G$=i%D1VI3vG)D!X)mIg>{ZiklN_aV<3!Y>3iEKB*3E>CZEgF7+>~
z&*+c65MT4m05?F$zu8p1RpqAF3r6~yhU3qe*Ua3pUg0X<Wf(^9@pR?^9rY_IEt@x?
zJQZEr4&QIjFXh*;XtYJQs*ocr-49GQmwz-~1-@iL)wB+_CCt-}p&F`TDdslVHgWL{
zZOy^}RB26#_4(lG%D$fT4QzeDgApV_rOu+Zlcxs0x6dbmKwo|I<-0qHROp*?@h=|Q
z?WK}GCT}`ZC<Xp$KO{Y%@V56<3naJPC~wW|^HZZVzCL$cBZZfsfgYQ3jn6wvlmsh8
z&M7y_T7eprnx%olP1G<U4?2IvU;-B~MmD*nRW+YhWsVgudfkxQLs7Kidi+$i_0cxq
z?V!#8Lo3IPXIeI@A|^5~ASRM8Wd$Go=~;buXbUTU6uts4s%`4L*V{W6oSf6ZMWS*U
z_+9n`d92Th=Ml*6b%2V#ty>zH_r?$5v?2pG-oFg0WxhqqP*aIiWiilu2vG*Nx)B<&
z3I3(XLrB>4Kp`|~JbB}#6%939m=URHOAd|~!p%GN=s85eTdXgS>QhNT3H@+VH#Fv}
zE<R?L!A{q2Af8?UDepVas+t4Etf6P*OHoi0A^v^g)3bM`RjeRWBVcN{@#pGp|I*%n
zH$4CH`U3vX5Vm3KDsfS?35Y=*f;OkZ(_&kkExLYdLG1Dc%!0`_emKRuCy0k^NWOGq
zv8i!WXc#b)GD+rPu`bRQU%$B^Ztw-n_H&}NE|`b-I#~h@c83FX#5<Od#oVG-Z(X^?
zhj7ueq#ciYy~@idgeSSRaAQ#wxtJ58QUY~(KPbH9@*MM`qWHC2P5uxbdZw)7V=8A-
zQWk+CL(QB3ct5csIGzGmpFN#KPE1|CRI7qu#3g?qRS)N&4h4HO15Mi}tzIc4*oXQ!
zo&qT<@NY>u;81^1Q!5ibhvI~bDy~a2T_T`Jvn7HfST<c6qcWJB)K(Vq*4O=e2~>5h
z<zyr+?Hw7A_LZ_tkl}1zQ$E4smC96I*lrm$nc}}Oj{IS}x&PdkKr_h|shAncL(P=-
z{hS(_C=J3E0+2oZe^t|2jyg@bS)qfa8iyn2z8P?_RqUue;{}26Ng1F<{)1$)+0G_a
z8>+?o<v?Oaa4q#13iF+gx?N^HUnqa&Y#14B7?rwYRW*)Wi|`Bof3V3_+kMJYfl!GG
zpowu)DS+Dx<-wwgz0s-@(EyKieJ0iRyYk>MdNTcbx_f)zzk;m*V&wXwRGWP6$z$Hn
z%M=^;E$9@k7hTTV|1i)AAv@;VCL3ZJ6Dp^ssVa$polf<)L=ytxTVz31xb6N!=L#G%
zB?_ptMx?E#kqWNl5{R}XBvzFyO)mmjxfW>*iHrTk+e^Yf@tJ<PEx;mab}l<^1sVU?
z`wSyf8>b2EzeGD{If}=HTqfZ@Vm(}Z76%27O+DoLsMGdm2$IotH3ykiP=paD<9q|F
z<?iC#T(h`*U#X$5py|P6M1o3HEM@A76~8nQ;BA?a$J$>dr*xbN*qm#*9R19qU=dOf
zjr9ynxA}1#O?FP(u2P{VtLQ=sOzMpYfxWWGe7JZaV41yzj=2%dVDJMn!vf~mPKK|5
z5@TaWonDdvZ2egL->Vs{I6isSBU=>J!ctAceQ93gUEp~Nz`fa^xg=r`I#Rk`GB*E@
zS~}a&q%23ZroS2s$>@mlCvQgxIPswscU>!&iXCtb=A+erW>BG~FUBPUygJReMeBdh
zq{2<l%x68|(Q`)r1{#%0Fn6V=75BkXs41n>z!RON`11;^JsaXvs=@7WPeEt2xKgQz
z7H&IL1n$+b{a-iu7FDbwk!2gp&}@N235=xEVK}(OG*_K<kXHlvdsIn3ZCUbb(jZ-0
zC&AoICx?#}CU~WqCRB=<8$c1QX=AA8-jhAxF5Jd|yF@IFnCK^!=Vb}c+Y%113CXTJ
z?l80c&!6MpbfOhaz9j{Dd^N}e=BMb-SB`KBEAzi8H{p5u9XIJkU=s2E-3!{#i7(s$
zY5gNna}OGIeMg6sb4-)mTAQ#ZLH>}X3NXf-A<MknozgO2r~R{edPb!ZSK@b3syE(`
z-ePL;p_<UUeSH^AxiuNpH#_sn#Z5iTk&>HB_9n78SfcC=#Y#{@ZfUSLQ6z8^Ij1qI
z2#CysF?mWOYsz}ol#Q$@3$G8Ig0ZG7=>GuWhQqAx<sQR8p>Tl=NAtrO`xGVg6{6p3
zaP0_CXtU3ELknk$qfq;n{@+;wsK)$tRPf;v$sa}aQ{Jb`AN-9EK=EcH;Y3xZW*8;u
z7*+;!B_Dy?m2TQ?%7fMA$0l}s0ky3eAB8*+8LtF)v26%0`wumdC>K~LmPavc?pkq9
zoozNwQ{9-@3dapjF9|Grab@LJQy!2Xd|!TKYOCFA0v~OB=n84DXZqX@<kE9%n@24q
zc|p|MrwfMtU|0RBD={9k2sOF%>TugbaieJ<V^Zp<<Ox+l&;$&|^7FYsPAN@tcyk23
z7{3e9=s3m1S$`}y&yZc-nuPj%C1_psQ&!agpjaRlCuAAh=kU*<n!zX)_^mw(s|~DH
zD+~OVScUb!w~&6X+DMB4mPcJK(PT&#dCO2k!|~=vJ#kS0ah88!LZ41W?iqhv7{=(&
z0V)(OCd);3C;7Oak@mu$*RFV$CU~R<>yN&T4}4(6n-U|JNN!YtV4A!&teSWn;a0X0
z6=+t$PJOOwud1@E5ctYnB1z@@Ee;ZGy>0w723gxbvFq<)X5S4Y4(BhOM9l^y!|j{H
zxt+Zwd9{fbdUN?3k6@+ag3fmLxdqIRd?3U=926lDl~1fCMULSmR_zlL7DIU^W~e)&
zEI|vn{MtK-xZJ#@&ai;}-zG9R{n51QJwoh4sL)Ohv4><uC?0<p^$Rfgo6|oVo>`hp
z*d53pt_T(fFC>dU-jq=lNCf;w%2@XdI#AyH6V?hd{b_z~<WZmIdrM}cUU|p;&!bw_
zdhafA3t%fY1Y&mw;tyP0MVQaCd7*T{t+D(;>iJ3?;%cC<o7499s2-T3XW^g{8MORE
z7J9Y^$fa+q#MuGB$}a3D9#{(~%}w``4y<uFpudR@1oGh!%Hq6lc1rlp#Tv^)-dt|}
zRz>-5@sb803t1r>_bQ*HlW&1zyT`c~ATu9KAZL198#&xp*KrE7b~2AfIr(Nu9JO`~
zK81Sg#|lstt`+YXW0^vI)cK`D^xUKQ;>XhQV+a31JnVX5{jLM6SWQQ#7ymD<PuzqN
zb=R)_h7r}epQ+3<Q|)F@eb1s@`rIol-{oeI7ywAgy@vJh=M?DT3DeTdo#2OWWI@ql
zpk7~|K!DOR#Q^&yYM}>a*?RNCMkWqs>3UFOlHvpjEH$?@3`os0r)h$FemN{85EmXh
zcquP!JuBdZ`grN<74t9)t}vi`ljflo&U;Iq2a+#uE=}+%=!DL|OS4E<NM3~I3xD!x
zf38V%{(}!}=Wb_g`n3R{*yG*Gz)i$|glRnQ&k$9u{>l{v;g-;3DbbY;EximhjU<QZ
zz1b!%h9hL)X?!UuOy^@-IJi(gBaOyei(^Hy!_#Bf1zhY;z=Se)qBUT2^?KACoxvIx
zp{C3OyX1K#BEuqi60+dz)hGi2;}BZc4?P+J6-__`1frvO=x)6RArb*AV`}Ir^SEKF
zu`6}3t^vetgsI1-@Y_5vGanss!fo3WE(dSJJ?z@8hBGL$Sb*S(kB0hs=>y^El|rIn
zL@Tquv;~Mq7f(%i6}96to&Ji<GNBHzVKXVs^uI(OsnSQau_>teS_vkGQ8EK%&}wd;
zmIZK&_hN#^RX7Qg`bbtL=H#m+mJ`WJ36LO+7xo>P_@$*voEv@i#-#qjwRu~vpweK*
z*|H^E#X5F1WpklJ!H(VPP^vTrxKe-qbx)K|;><@>Zw#rfUi|u=eK;xXDynXiTN%JY
z1@x?k_Y_ZKjcaa~83GDr$)6uJuK9_gPOkzGaD8TKwt{NN8IgJ~!^|cjT6p1FZzTwj
za91MdG-*;P12>+CBKt}-DU_41Z$-N}S_tC$xMqZSw@X*CNR&!+_xgiuy8^_z=8~<C
z01N|~ca+JW|NP%_a2#;w*{{#R@|DTb?y@-G{|jcFmG7M>>#m3kTUggQ-5C=1-^jUT
zz~r$kh9*-53Tq9C2_`|C6Cw>>rX?tV)Sb1Nyc$@7m~tt%vV;v(UgFzQUYVACZ<Zms
z@zvRz2WxR;a5#9WCQwC9$tfRR@?X5j6a!zAQg_nuQcCJtJ>VS*lbkl!S;;3Ha~P7r
zp@=GkEL7B5L=BvUW0#ho8DSI=Q8H~$-+$HOEI^B0TTRbP+#K{7{(AXfByBF(x&Y@6
z;jR(<1JMnqS}AJTInzfK2YgL6V+q{r(SP3Qy66=Sh$4jn0QslU@c<Aob`QJ$%kI~%
z@$>~zy~(qqmNKjxdV^rLC$K}G_gG=kGw9JvH2Q*}HXtgO@J56o$fak^802b@HDDPN
zzP7dY({GZH7EX$tUy}j=ShcmZ2cSl(>Fa%cdT1Jk$c#Tjc%I5*M%=GMh$5+(WD%Lg
zD{4LxW^wH_TFdKcOk<gs8cj5wl(26?X;egv9N;8cXi=vsu^A_K{kpeV;tY+CkTI=n
zy@?U*_A8wzhM}!6C*8RFSJ(<>TL}K=o=P~z1~9TYw1aak5AGVqdj64vV{KvKyw=BH
z*ardYw9rVwl0X`*K;jK4+%QIroMkn;mM`&z<oU3mv1~`OGSlHr%V`>i*a4Y8JN<qv
z{DH#l(yI}{3LM-y1i{UB<7?MPG5k3?KnR~Gxu^?&0IMM3lQlU4g@s=lP4!1thn5I|
zK7<f1^H++WK0C0)r*@;cDGK3jz~T3um_%YcrUVFd_--5}(DN42a8~@*nEA3R8%O__
zjghMO{0gTwi^j3~es{kP7*29mDHkFKFf&3B%sh6KI-8Ic#nJ9FP0j(jKcF-TM*SQ*
zYv7<2a9*%kfSDg0<;&G401xGtJYFh3>fIv)!#>vi7`+iWpkse@jc2AYi4C36fouK9
z@Y_L*dFl5f2#?i44*i`=4d0J|+#?4lo_5BA1r7~@3w_Iizo)lEA`w*^k~H}K3f+nU
zK(WO2*`t=sM-@meoOl?b1cGT&rYdqhyB!N^LTujOvjULbrXgjgC?i)JK55(Ps2APH
zJ#y<lNv+)4^(<~GAbR?1%ALp4_8W!$RIvt?+<)V-C~{57Ytq_W&6mGKq7JtPmC}Fx
ziYT(P<U573`{p%3RS=4oFOMT$MNtjaq>u+5;GId0t7P(tSI_q)uEg7dray4=FHz)d
z_bQpP>-uAGzme9HEe`|ytrgpM{^6#?kE(7(msa{*%sEdE)IJr5K=1YR))07$E+tVA
zqYyqC*abgklQ4n1%_jnV`eE=x^XFGRuf=!)hNshMUCCVpbN;yzkL>{hTT`2(i=s8^
zm>g^|QU>tgl9>sg;?~z+A6nkQ54VrBC>8vf{oki^pVH<2@!g%kI_c39P(GaQw(GlG
zwZ9}CfPBH2Z#dM_T~_Z@=_?cOl}zHQ3nc7JY*Yv+<-a&Q@WAEP;vc_5ul;j%&@X6j
zRRj}~nkhX5YCuVOZr7gCX-AmVz<WJGX*{ljQK>-^)Q~}#{hNK)-S3m4NkMisbylCP
zywTZpRbL<IyEx(Y&e-PX*8T%FX~5(&CvqjpYD|Ldq@iZn=jHlD<Gq%QwrowR1T2@w
z;PJdcS+mXbBzgV7?ZOR5{LSe?)6H)^NAA>(=Z!99b$&b$>HQjl=W8?+$98Slm3r2?
z0`Tuk-sL3}_NbCNIc}c#gS{!H14SHL`}!4LHoraChN*+-v;=Ir*D|L~l`G<BfSNF~
zf<Gazpk(h`)1TNj9SVAdrFkN~`hYy{)PMPOslM1_x#wDMd2JUzmQT<#S)n%`!SDk&
ztA^>LdYF@Wa`vIFva8abH{)jY63>9>{G?ai%@3X>p1y3hSTeu$@&T^dXd`o6l2psk
z=7y;iU5bgAJkzaaiSwkrmpYFqUh!t=#)DyBmX0xgJ8G_{e<<yYZO!ymW#hQVLY<FZ
z-bD?u3{67Z-1}g=UokRIr;ufE{6R3{kv(snt(7_xFU#y9j_s6B<$Ity;=WSdduWjv
z#Uska=EUM;;evaOqAcDcGdg0$-D+$&ZWE7F1Zn&(@Kvf>VHmemeu&@uSyqXaMl+pi
zEJO2kEQ^<I1%;wy^~o|A;V@uRw~}}LO}_Nr{<#{|3vIGZIZ_6*t-^lTmU6THB93f)
z{X7?w&1(y`MS~|<aYHAmqyEfmQm)*_1ig*y>T8zT6_00NsBSWC8KZ%i)#RRFbl*{l
zv{LtvqQC!vW7Dya5ABEZP2YIJo^VOqkT|ANAnw*GyV!X=%Ij^_0FMVJkoWr<c%Gnw
z%`Y`P-@bhK3H$w@5z4mT>Z#<U|H$$8Qp>LRZX7`U0620`6WZt0mP<rV7uw*qZ<awr
z`OO4|iPV4;0Zcv21PjJ~t}eG~^YP^rZeZ|K_|34+A~u6CdyN!D(5f$AOzoWT>F@XE
zRrh`wJ^ger>E0!gZi2J`EThnk_|;RKJGLKCcHL-8<>o78DMH03d|78zrLqyis-M?J
zE+jof%<|po(0ES~T8&?bD@>utscxUPk$MPLTy2o=c;jeLQ^f{$ZJ5G}H0kvN@&oDh
z)m@pO81{&P$#l2&iw(Dbi=PL|WSFv~bZ1)%WZ>Qi)534}Ja!aPf}U?59V2Rl^7J_)
z=nD3A77yj*AK<*`iZ@tNPfta<G4AtVgJpGQqv6c0vFJSVA}h)$=?#_&H;YPf??)c*
z9vDhLYg;?}N@4q9&)3Z}DV8^u;2i_yrvs#Nh2*d?+0a0hbtR3%Ea>Mmv;c}Oz-fZ)
z*}+9M4NVvL2;}|dYvlQ3wEny!s62cf5v$Y_7)26X>dsr_ZP~+m`C%Fn6Si~=!R>}6
z);BJR5AMwI8m6M80&cn6i}DCy7=|YNKvq<+o8{^v_KI^@b4AJyZcj|ByuiuI4;x%Y
zlgNwIXs?jaJ6auDAF7Zx6T3iO$zghV7j?vt!kQ{d>Jau&TGg96Ven*SPQMe8X5t7%
zcr3PIJ&-fM-l5a<y88R|Xt&dllJI;@L@XpMQaTT6K&BrY-3$z%y+^QFQyfSx$0AQ>
zAxeMF!%$pnn9{!3Nk7wQ5UwAy@*9>8ounP$6m`c9%ci{{_o_?9Z<p>nR1?qM=|aYy
zM|LKvB;R5NJdjnvur6290{d8I9Cged*NIm)9^$pFQJrfD<V<pN?MfvC@>+j+BC7Lz
zd<p8igjU~U973-x$e`X-j0`u7#2zC8qiuV19+|FLM9?(B`c3Plg!VtyUpdi#-;inD
z#mt`pUk+$RG`^w%slNaf*OZC`uL&|ca$2Wq_FFEQy{M)ySR+#-a5whn2p*t-4Y{-}
zC_IOjPp7AANw-Z~-dae?v&SO2nkVaG+$h`Z&V;VISM1!yn?C+S^qAZhAvpj<1a}<b
zs@L8i;^9gDvlmF0{?bh{-AKEyVOJ~FbaDyl(tpsc-x-N1x|4m05dl5f&UR9Js4xHO
z&W>BM+_sMr<Yi^mPZG6}5rNmhUm6rfIZl!nz<w8+C4*@dY}JvlT9Ul0K#5Dd)Cyqy
zZF7{IbOh^P`=G55t_Wuo*om|}o3H`SO)}8=f<F+KDL3~+purcdIlkJz8@k++oX$qS
zjj|ZZdVTpBbwxm^yU!gLQn(rLhb2LBo+{jqzHLsfyEnVCpFClR#P88nRJz;weVMu1
zb*a_1oTA+0{XS9$VK+tad#92>F-*}F4WJr3IY{|d7>SbJNQj;pep}-z1sQ24NzuFn
z$Tv*0O}NpTGG2eeIYtLxmU)<(<Sp%|Kb|xlhw8WmcOFlijz@JK3&gbpE!IDlTcL5%
zRy<Qn^I6(8Zv^f3*LH_@U_{vwoTDFk4B1S7S>e~_5@Cz`D8~v_{vD8|Z-~0|2_b=B
zZ5YFysc?Yv3}ND$Fa+4C+3ETJhVQKXS-mCE@_%^{iML*s-(+2k(Ly<Dk;o1VJ<BW&
z@FQz5E1<bz+QQpQ_4;jJfvUoP>?=3%gh!Vccfd9z@eKFD;7)E0#{lEX;$*lsz_-(q
zE~Gi>GB|I53D$WjHaa5sP0hs$>u8g{$E>W=@H4RaA+ZDA5cg{@%+=fzwbbpSjqT=)
znpCX$;+#H%2k7r$KG!Jp`cT3A#+|lD(kTC#k<=<YTlR9G*;kQqEO7#!?@6f7jK35O
zB4Kx4;#IR}{42=m9tM=gJZwuGVCHF!qywR)=YB-OeZb6gMI!+khbSRMUpDs+UtEKa
zhr7Bd2qNI+r|uRv2MBrpy$+j12sbAjp5`gvCTlYqY=1c&0$>B@P_qQCCKHO!m@C(1
zA2-Gu%qW%RWTD1QcNy&2;ah*VCYM|ww5lcd19@r5F=NRd;e+NIjh=U2YK`5KzeVh9
z4^gBGldr+%yRw5#&Cw_j7gcpFEIJK7!u^1P1S6fG-Zb^KYyO+J=d6NDg3N83YlaE?
zriM%dCg|1=ara%kWb)?_&;IMugK@){n0t;t)z|(!dJnxwcV-d}{mQ3_p7fVJxqX}Y
z0{BFA9Y!7%nDSrjEmi);B_HP4!D82Msq!77H7^EHs<FuZnf|2}79usXpqCQNqz)c%
zfuQm3L7R&b0eBflBkt_?$D!Vx6|0_}@(w20J9O25ho=Z0|G)bB&xa4trJ2f+YvI9L
zO}pnZZq?A0&)lxHcT>!0RjA=!b4Kg!#Y@2|IhlZi{q&;&Wu}?md<Jh@Sbg2#RsKfe
z!KeV7salKF>f+y|OCLP_0Z&6k(XqBz<sAhOv1LH#)rd$$+mRlkWW>c+k#jErrcFp%
z`F_4{oT!|x8bmC*+GX#ncb}50tR+%Mv}Dugq~)-XVB8SNN)adM&w_;f>1)g)9fKdK
zuhiGdBtCvJP)yKmTC^R){sg7Wm`@38MSn6ir0edX9-E@8fZ?cLDImSdP^tg4bLw<y
zF8IA&5Y;MlQ{3UFt7SUk`OuPc0Jgn7B`!*i6oGG|d~(f5|9pg1FTJf&^e9Q}P?!h!
zy``o-AS*%-TFqkJ^j*dYsf8MGJ-j`|PAk-Dd|c04mA7fA-x{nL7m||`NSh-xvsoRm
z%`7fM_8AK0FEp<^tt}~B;FgY17xIo>)Y>nBOx!>eDY!A^t?F@<LujkAp{-acP%DZ2
zAPK1P7SCYEs2)e`4Cio35lq!UpyUUvvv`FU6e6Y9hffx%Mls;A(sOd;eY%Gq-=cqk
zpD1nt+VL%#Ex{(|L`Cu<qqKXJVdzOySsV|3f(If|07(?%J083!tdPugQESIb@UL=s
z12Tg*v??<S$d0?j8>31F#oL@dG}~Smw~LDN!qMsCg5Ak0;!!$g?%tW`c)WW3WW`R;
zZoPjRm<4!3l>xqts+A`k@bq=`nnb_rT?K!UJ~+6F#Z#gF<b~$`L26?9?az>%FCoIA
z2ye%*gCXGcwr^==0ruoD+%CmmEhJgYgJM(GxbYP{)@{1l`6w8XnRnN|6~Q~lVNBod
z*k^;>-p9)EbDM{%KY%**>UJmQ^j%J{M!^g)1Mi=~{7piq$1kr#?#(aH87{O{sc<5y
zDfm4=&I`=d7avfhd6&3lQ<Otx6~+(Njb3mTIA#T#-=8iCRhLlNZu}U`f|&c)2xRSF
zDPpo;0J?Wx4QO96=Gq7JEuu}>n;@5{!=5wsiRdm8!YD+{`*>aoM2N9jrya^6O1?ag
zaGPI#=1nv*i!KZ~LY-(Q@c57S{)TzHQX)gW6lMsb3LFYmX;kGV7fRiHh4i5yif7@5
zf7b8CA~V}%<_Au?WvT0-ngHBoQ>sd03OC6kcJr0;M<V<yMnY(ufWcc#4E+eUQP%wc
zwVZG1r36%|ETm{YSx<X2i2pklu>uW#hhVS#FQ|h36U15G7;{uoRbmryhVGanA(3KA
zbPOM*0!SHG@H|USkZhq)knV$<1X|%%0N?&RjU>2<Qx66y{|HSd8~)*`c-(D^@By4k
zNu^3+R5ynmFUH2x3eN$!_LFq-dI@K{`~#by9WRz5ckaGP-@vQPEWHc0VbWz_3c9hM
zYVzJZ%o@+DzRv75u0c28))2S;>C*mN7Zm4lm@vHd+1SgW+Ol)f1T;s%EOnI*Hh73)
zDtZAS{E5i=&MuFlvQ=LBFlAaFNtkozE-F+Zf11>J9ze^ka6EYC?}d77%WVF{{lmAY
z;-4T}P;`78dps67ofS~=vjIip_hrcJFr%q&eeW3hR1l3*E1@afilc#YGyLE8Q@G*7
zK(FwC1*C-8vYR3EW;(Kd8m<mO^X-MP-A(Ze1Xb&%-r1#5eCVl7czm@Ax-Bq9z`lj$
z3x#zOC0JYYXE$$YNkAwBOYu*tV1`uyi!VXuf(Y_$uwH$LiLKukj=W2gT39J6(|ppk
z?^1aM9PTY3>`Jk@7K=i5W5~xNdO4tay<gSTu71c|%-RQ(?U6!i34XDH@WC<sZ%nv;
zm8#%<f=!KY3a|tc2~S^HNL;F4XAY`kO$D0k$3f)|o_?(ky<|?;@rvZN^af-@6>$bT
zizz7Or$WQM<E9Z0g>?Kadun1z2amRC3Q)h-C%V$taYkQNdsxon<z4y&PbmG*w|FO)
zLYx8DM=<eHqk+X*p=XfV?_9SVdo+Id5OAel;~os6Y-dqy4|EKKvY%t~j$8YT7Hy|+
zAVGQk7Al&qREgyR=2=2}(S>DLT#{xKFFRi!aoDk=;*Po0X7eepMB3m<dFuI=<de$#
zHy-f^@Km<Qz!kuV(ikHxPcMVnxwrj2Sh>8KC^bd((@V}xkTgqTBdof9gR)9}<`un^
zXBXAR>!i>0)z5k4yLVHIJ19f?G}>Z8PLtuMUYQHS!1el3K|;qoVhi=hiRT!dkU&=4
zUKETAv8YmkBa+Mx&0QRc>X76?x~FyE!YW{9G91f*!wO^hNL5=J;=^TmahTJ>Pu#_#
zgm%qcNQ$8o;h>uaNs<V!1}M!mmgbXK0e?oVEPX!Bw&WQXlet96(Im($m<4U}{Q%sl
zx3~v_D63gSNEfOQxyY`iBblS|;IMbY1d${UpH(FnOO_`P+lOB;w{{YRM-q7WP5)Z!
zU0}1>_;h<|!2d0s`qO6qIFsG_w=HxM9Q4w_H|;i2ASQIFN>z4_rR5oC)42qC5cFAJ
z@kSh`SsGG!D9OaUC!QdY{)L<P32Y-iFc2$w*$`ufP=DT;aJ@<0BJ4^~k|A_i76u5k
zUV{^dn4IlGhY2r9*QvV1x`B^rX{IGE{%2sB_C3aO`hcQho+^O-3YN69`XuBS?65vc
zOi5U_ig@MzgrjZd#qKMYFPdN%24qi9y&w>X7vBPOL3Hm#6$^+Bjd|Tdzt9ayy)31J
zN@mS5g|7G1M0|pR^s=S+$_nh|xhrSWfhnK!*&l<?GC@E5ee&;zAyoEago~pgh0Hrb
z7`}pV(fwH1I*Aq?>f$)rWRyOJA=|LXGYU{<?S;6VRf-lG+dM}oYM`{oO|;#P;=WwJ
z<dkR2!d|tIc3p0oSP?R~irowolg~@R(@vnK^}6m=FqFnF>tXG}YiQtcznCyIRX>Go
zB{d@i7zeI{7k{uip^(f5uva4*5K4hak<{D7Cn*8uA%IG`xhG%v*wKbr`h(WE9bhG4
z1N;0co8hvGvO>}5j<E3g-U#d+@Qkd6mPoR#WXk&D2P;o12yvNjZ{BgKol`7;v)neV
zxwj~8fUJqu;FXPO{eA|d(Hl~PaatUKv=Ah!Ba8BtYn^4yk{80#G72)}LGYR8lgG;w
zU~-G5(d<eSgH5<$MyA3sWqH#W6s*-m$<Bmfz>cwPU?+@zmSgtYd2{ty%bWs(kK&f<
z>~osX9dyD{zH16TM#Q>}7fPYs<I#}6b&-L6dRGkIkNt;|jLbiT6%y&6xQQQN^g_~Y
z6T+T2?XDl3j!4`SOS#>W_r|Jbo-hF+elLKFtP>UFMZ`=VZOXF}y%VkP1Bk!qJJ%#)
zC@<Hb<U-b&YE{~tGr~$+&JP>?YRk8S@9VEs7pKh@MNr!~_j;(<WQ{hZj~u!%nmBF7
z4IP8xai{OtK+H&tS{Xd(G_QFwA#}akHyY1!!Y5Cc$n6G>oUT!m0`nZ|IsppVa|Uf%
z`Adju_Sg9OJR+cw)F7s$pj>QaY|SR@&5oM^uGi#SUVZ`jSA6_|aQwnXpv~Ky4(k;L
zR%A??9n*?6(&w0Q!e~(5r_elCSDT>=rf!@RCe~3`3p&iN4h-Y0Pi=ZGSl{e%)SJe=
zP`hDIZX|^07!KPXJogWGUt$5XKEOyV^va3}G890MP6BXEp{Q<**><v72-(qI<v_ux
zk~t#5)&XlzM}+lC1Q7A#4@LSpoQv!oy8+}-TAG{EEw42s+U_G)Jit8$5dEXk^FHMI
zw`HxysC6fs83URd<58k_gRQT{!Pp&r_Mld%O4cyCbfEEDJ>|b8pA--upF<So;*?_M
zV&gX#1$TTvJz+21lnc{d3`2?c_HS^wozq!CPi_HMNx6YHrmn^SjJwJ#c<;|ej+!~q
zH4mK@cDRd_5wM*^S{)EUCPjkd_enc|V=9px@c@vK-{1ov3luQf3z0#t=Q=))>ySjt
zua12Q<fD^0JF#pO?Ks$rYm5_Gps%}>{NN8YZZl-*6Rob$W7+J?mR>PjObRrXD^sVS
zk2himkc*^MVTvnJD*y}nky+9`wK1tbtO$O*&<LwbZ1sT5e@jzjc&1@-ZV%dYpx+c;
z0@t2W41KBer{?O?)$px|n(o^>I_y`W##gU;I^3bSTtCSV{plAq{5j9ik_^v|ZiGkr
zN1e^tHD)H>ez$0@1}8e_p^HP?*Vi@i6k@HM=_u(B0@DBAavxjoqxl7xo{cyJ7PttY
zGj&b?AB!~bIc}^R>^IJtICdzK>A5&4a@qAGR25LIaJ?f_Sjb+?N+*BGCQ^WGV(uY1
z06*;b(>h~@SvBEPAPvSHFev*FG@A)w2@9$*DO&hlQC0a5kQ*L-F+I?>=2U6t(du}v
zM=fiCv3@YuR)wRTEQ;2$W;`QffbMe`3^=zR_OfIOO4u+pY?Ue`DxZEef+-45C3jwa
zRYfjYr#e=jXI69{<eBH3m>$2j1YrD6gNB?IXclQhWOubLQIc+9Qwd=mA&en75olo-
zH{o1}Ldg<^2~PfV)>?HU3myGp^O&)upCcK|TC&yVcRNhQAa6Q>cGA|;VYsHu&<?QO
zlZ=Dqb&{uz!)NW4zBTDu5%6_-giJ_HHqaxV=md%c#+}#XnCNfqgNA|uo_rd%-{qR*
zT9v5@mdN><WMsU8BL$Ump{l0AG>EriJC2~aWbKMxb7UB8Jk!}rsDG-n+WoWU$#d?i
z(gm5l5C~iouIe##Nf&`_rnFSc&=u9l%CPrblalFH4*7|DdE}o(gNZiOtcja^YKvst
z+^@I@HiiMe%1EP4*DV@~R|9G{25(`#AV6@$2tnuq{xDdM1%;N+)5RfnJ(!5&FU5~U
zTE6nTfxn&-8$k|-)f2Y}d1Y340*YmPq#K|ip)6cX>SBp&cvQHWC2~><zMIC~aTuL}
z6}hrgD!X(Oc+0@5AgzgVxFiXFSk#c0SkA8lF(=##PjmynjOz5v5<Uzimaghfsx^Na
z9`crNrhT4Wy@<0ps!I8&W&5e9LgOIC*-e?YSp{+VSI~R}8alI~z1YeC{y&(}2f+8{
z>~QfCA%wtfCy832{odNO;*$m<Ekhx{?k{z1H_$rcfoxF0s3@`w*^|p0^Xmj3@vA8N
zpwr|<XPD!4LfQ^1iYY2$q__P3UZRSCC%r#Ipe%zUdkXsa9<lk}jtUSl_!P7$D`g}p
z*W3=TBra8Dx=nJXA}*)O!Td87?Z0lCUrw+u5IS)j)jC8`j8^U^X6UT^1pbC;EdB@8
zF|n#kzZ>f?dx#dURMiI9MZMPO3JG%L0D-a*hCHRz6JIb9X}L;y7fR;ZeqQGH?ggSq
zrcZXXTbD2@i5+JZncU%;`lk$h)bW4J4MmK9JA+fSp4_3B<*HbZhL4jw<ytWXksN?l
z-is`FZo<95(v2_&(GEjw?7R%nXEs<AocPokPa+Fe2vxP2%lS@8ZmXmL%FEC&(hJ2D
zepoRcz0@rIAs|PqVYZE0_u<QC&hy4ivk#TlY9DVHerW3~Xh-FRkPclYPOKCJX@E)v
zkq>RC>U@Uqfg)9N+FngkshorZbjR5(0q}AV9VtX9u+8xK_pUE*2Eq3cl?mFP4NDr3
zC{#_I0RKG}A*g+aS!uybiIEeH7N=T*5e~4pCc|-9lGV!Da8;Y$*)Vw1QpNU=jY6Sr
zOp_9i>FXH3PGAVe=(-;CxY?Ea^W{jMhXIR_({!^St%d;#<XO^S{EG*VN=Y(GkyIe8
ziJHm@a=Ter#V~462tHFFlihSFh>UxEg|yz)_C`i2c;v=^H->D97p}ZF1;^EU3rJ}<
z3B>hLoNk|^l$o0Ao`~qk&EJ_Qn2DeMx&WE5^J7e8UxbCr4Xujm%W-0>S<ueZDH)NY
z|HI2`dD{9T6X>Ca_1}x51vt%)bm6^g-wbIdfXCqpE6n|#^S5{5apzz}ChSa__!2t$
zyQ(K-xXlC84qJ}7FA1RQXBJ=-WVn^33t)huJj>s%Ys@+8=t^S_=^VXqD*=g&0Wr~~
zm^z^93w6htZD86($Ps)pj4&gQPm@qM1A&PXW5DwtIuvo=`{jp9w}79s<XUF1^>z>o
zAJXJwJX{Vt-%+Ltjo8(T36--_H-`eu^j~_eJE9`_z-G!nL7&e_8JyN!31I!IPR&5i
ziG@~MWVx(Tw>SLkaQ6jM4a-T?@IG|phKm`>NV#y=G`B=0t%LFCY)F1mP^pukGSa|h
ze9ZzAPYm0VmaWg9bQa6F?b#X};XMl8UvXq!Wk<lkLNXglAB=(?nZRlz5it_<*|&!v
z;uMugyzv1sV2uU8?KUFf&Ph|(eS@f?i?!K)+XKho{?9e240a&6+NPYNmZt2nz{?H6
zA5_}_D{=q1VMk_?EM!0eBD<dW{~6+x+N*HKYJ5eRrIsES4I@V+9#zMr!KZ|)W?n}a
zC!f@WBvN4jUYjLY8P<SQv4x7{7CEuRjrMZQ7K52LQWQZ6c)s}l;MPs!a0xH3mZy6|
zL&JC+;8vL=nJF89&g45J73ri=C_cB;E*pUT3=)CltC8kF>N_@mdl3C|CE<buR`h1C
zt+8=JqG+KUa8#(@ZQd~#lVu*{h9asW@t1(H+5W0EZn_K+7ARM8t+F9o-`zE*K74<8
z)sbKy#ig-zD^kqs6ZVf_=0=&1ePQXDbUp0$O52q-F75Hio8Tg&k^c9iZ*}+OB0HU;
zTP`xypyu@6S$pJN4V8zS_bq`m!!yTUSRv~|6%Cbcwg(*=`Q~yu%$iipB-fhn0tIsk
zE_&_d;QXX~R;l{)T=0l21M+mH$vWu_8?mu1*h!cV6&CUxR5!vWAj{t%!H<VEA{A`0
zBsq(dqy?M5();Pq{Iq;NxxVT%>KinvuKZFp(-DFv<BstiT#pSu8SGM8LQ=6C3#vi?
z29$~?R3-DKR5S~JF=6PUEqrgY*;v5%#lJPkWSexVMwxcT!KvAiFz?yd6^RD{kQa6o
zFR0Kh6;pXDz3Y2$j4e^b-i_u8m?E#r2*J;IT-X3NgrIIKlU`yo=Y(bz>B>CiHM_`K
zdF{@mr0C`^tArcC4L)a>-H`etCPZu!64v~kexk#dtyyRB#I|)i*C~ybHJ-{ok8U<3
zU7kN8yl;0IXcr8?L;5$%J$#z0C1k5~$u`_*0X#RZni7LlcG77!?3mRNJpk>EkUr98
zHSW_V5%)umf6|n+u-lb3%C_lMg!4*Q)`0U2LCO(qu^gzG`XvBOvaevub4QF)sk+U>
zon{A|_75C2I}1_TR0fi5D<+xpGa=^Q@l!RDAO+N2C19Mbx{G{=%;9p9uVRwD(m+2L
z8i|sEdI4d0B-kRK{D;MoR%vvxvJdPU?XGyUzzBb$rzu*q)Q1gR3Y$y3LE+FrDT*3z
zQ{XL-qNC!@-#`*TU~9+CDagRatrbM`C6FHxsNjf|ba3KymTzGVUW=la&a#mjSBE&O
zj{CY~gIVF|)&KEX@da1djX#?Yq7=$tUf~MweTCKYW}*`#Rb4Ur-NuXG9aU%2_TllH
z+`wzt5+qKAH4P(;h|#~OL{vLe=BUVDooYL)&CFZkXZqRmW*KHolV54$C)Q^J!m6=N
z?zh<v!nFUWS*-)7P}~}1f=mas6nuJ#NRz}g<;d~*VrlYoh6kw9pC5VaCa8NUY%{IO
zu~~#(KYC4-EA!*DjmSZZMR*yxoKn|j+1{kN5H!gz+}q^cAt2Y2eAq&DNidI2DGM5h
z$mg1jPG|kbl6+yP!*np)LHU8+eT!&^=VNA}e>Ha*{hn7q(FZ($){W^=bUoCqHNKMZ
z2PQPgU^}X2h$dX7G$DQOr?bky`d%>Z*U?z{IO1s0#6Q?!DfUHS3Hw0uo~J8-z!^LF
zS<EEg2`|#$Hie1aaHzf|;vGS+o=7_nEcGtlm05)o1XpledJV?W0p6u>m(>41XxAyi
zuvS~hRB4l{u>sRr;1t&INwqL3H5PdV!sc^NgcjwxOyQPvRFa(a6z?Gys_R;<lSG$b
z5+gpbH_t6MYzy9a;w5+yJ}lMi2>bEF_Yki9E$Ga-xU2MeYs_=62of!tL#0KB3Kx6l
z**vtuQ{X?#7F{E%wa|>af<lXXRi-RbijaD<3~~xP&nIv|82MX-MQROYVC;4IW=9Bq
zmr9*V#6CRUK2NLb=Pni}&`y=FU&u<xU_M;-3af}%pp5k+#&soCZDkDOjDa^#g5JN~
z$>k-PAKWi#u>7&U^_(~dSA=(qt)6goVFw+*aiTAU-n-z?UVBzq)L6?j*2s!K0Dj<H
z5?FudeNte<G{rE&rh4C0+AO1vX#j=Vn$*z;YcbKc(^V+(wAivn@IF#N>P;}l;DqP{
z$CZN|@7#=ca*G|fFymHs$r}3UwkuMn$p_a9+l%|<)?%Pe%^t6PFY;Jt|7zMCvux$P
z_>LpqZ<~*UqK<VrUApRSeEU)FH=kM+qJ8?@X0E39u%q~};KRB^(YhhG<vrZ6ga7f9
zkkPo<o1UIBrYk+8c!qZILg`FBaK1Z^2X;c4w3tpF25(v_(9}X!Y?bX3ZB{bs3v5~}
z-zHiYy);s?<UGHmfo`GFsCzQ7<56C_ryFd8(M4W5$VSLM3!|R4+iiJH&4{n*vFxP)
z2hlYsC<=1_!reH1O++@$>Xdb$72r%5%vUt}u`<r*gwTq9pe)R)?p!8u;+T}9=x6sn
zYh51=LKzc3;zEB_$3fD<n(Xd)li$Zcj|6)zjE?@AOW%>qhq5mG`;bk0&W)q7503l+
z?3@RzF!LnxzL0p(6SCHO0U~2H<8t)ix|NT&1rI^zn#WYY(tGg-vYNCK`!>SJJu=4l
zfg(+F#$HRTF&%_+^e8029E4Pm_S_Qlce()lP{v?a0h{g-VaAdLc5lQkU`oB~Ur9mE
z5(eC_iO28<jnKr%pO*xkS68jG=aYIT4};c{2_9`x7oe3spY)mG&WnbYKI<!G&i2!f
z@!0t{U5gd64D>0Fv{J#MZuFCx5$R(e-`ORvkB0ifBhU%l&sTN@#vmV`aD4#d{^PHd
z(8b?fRJFlmh=VG>sSaa#Aw@(Af%rZQ^a0qK|2mba$MaXDW>RNL2rZK<V-m=&Q4g84
zb+c*;ck-OM(hD!6W`xg{lGQA^cu$bZqSSO(#2ukEf7HF((%cm}3Nx?02~5#budYyj
zZ;G-e!gWNz1(ZSI8Y%Ed3goz#0EeR-9u&ufYz~Y1n-0jW+@N<h>Lu=6DML;zStVh(
zz%is9OfoSa&3s=#?Ww9G$ViLP6lDJeoXPE$XdykVjTZ6b2V2^D5s|}{g>7C)(zLh8
zKX3_sVtItW84uAqXBlttW~xITB}+?3$4EKx6q#ITs_8TBA-Kz%Sh9a?%<jsbAs4^u
zLVJjiC}m7h4FlK1G|!tr>Y&PhSxV6N&4I}i+f<|ve3plshl^(hTHwe^4T1y_ss2cO
zHa&&FmdXG5;p-ax#TUaISD!@a)rA$mB0``#qXmhZf#7#ibVeXhx>K-(MvMn{k|s0q
zhIU!o7$^>k*ZfW-JC2m5xD=BtTYE_@czMB5pbdW<*N=BssJhGIj?r3xq+ttOVRd66
zT^9($k95VUsz7Qr+JFjPH<DKStL~WLkbRf%!@ztkviJ+9J0`J%1;@=O_Z`?sY+(E2
zWIHBNM%7avKVPm$kzCc(KLh#}R$2&D%>bEYB{U(0O+O<>E0z!35NeqEg!7=Lf*P7m
zN&F3x_yon7b)fhpnJgrbD{7_DV7m0fLIQrub{egOeYVj1?94XW4o1Jn8xSenagNLu
zVOM1yKI-`{l&~G+`B{&@K=6E?kbmXv`;5)O{T_c3hQX$E3!R89mKL2yaR^?hXgqhJ
zTzy)g-T)HHn0t}|A0phUvA%{?c#BjtB{Yqolm4k?DVy}qA~)<!YL)15wd?G!?RR-Y
zJE|HAoXothOzFt^Dh~LR<%D{guw!4L*h99)^T8n^^Zl}0Bk+>~@rInYteEn^Ops<z
zSjFxjV{Q|KsFpmrP-Q|}m5W`UU!AFUK@2(!PNNn_Xr$%Qb0n6nJ-IU!`^xnH*B~k;
z^z*<|B-qWG1fl+-p`dV1nA}V`T2`Td*fltBEhyWk`Vf`Yk{2C)Ds7gSSz=Umq9^ht
z=^nE*4#A}Bm~%P6xiipVdeFCd!CY1iZ_f9q-hHC%M%Mn<C2Lb%R%s4Oo38C0anGS?
zdytdhjjHd1^4F$W*kbxV2$=YQ2@Aj|diIHOk_nx(;MFS7Zloe6R#;sFG<_`Xdlr6s
z;82}(<$=q%6G4SIdIA;-tSQ&Si$b&_CzWNkij$;Z#1VdigpRu1xWiPpd2>g0C2w-Z
zQVC;pDo9WVIf#KIb7GGdacm&`WqH7&ec_rmf&=f)vFJWY@!)9(sL487pzNj@#1e$H
zBTP6!nj^wr;F*7kiQ>F|_ZQ&UXC6De+4tT3hgbRdc`KCl8O+4worBSeo+qpbBsnhq
zthR0sJPjVJr?+ra&2|ZTHFNrCd*-dz;)<7&FiW``w#2Ygfv+#OrS4(h;DWW(yDrUX
zXB~D{7~k&OcEwua*)Pv)=Nx|Hd=sI>mT;7&>qbvn9n*@el04+Sm#Erq)C3rp;YO}|
z(|KuS23;3^+Toa7q!&lPxC9>gPc9n6DEE~6S*OG*_q-^ziE+rqMR!%(j<fkCb?bUd
zZBKqWpuRiNf3c_kimt-Dk5fC&TrH~8-Cp0npa-nlHNjj<sCzx9tF1M+9%alR>Z3K2
zlkTW%Oz?W(8*0SNRJZ@~-~u^~X$f#kd5YFPyrBqfj>2P<iBnO2uKQaQm$3^?O}aZh
zeGBS};(gh*quHzOZpZEL(1OCFK=C|LK26U=rytVSMT#~Xs(({zsq)TnQd4!;<1sMP
z#bpoIn;wNFfi+cgCE+)th0GA){aBoT<Fz$+`%AgCkp|hCai{}fe82;of^!tq2|L@(
z8LY62D^~U`LXL?K#tS{wX9zuGk&6+ajw=60Yp*d`S%$Bth}-w(85V|5{JMYx-AFg;
zGp-nO+e5UpIdh$r6?uFM=u0F6@yB+#GnXqMD7Zo$sB2?`n%jqpqjKf2&Xt+8ZPtZh
zTn5W(lP2gJ-fJWI43o)V8>o$4B^MWZ5P1<yv0EW2_Zw`i-<PsV6C}#i>i0rljg!9K
zFFk{xDT5K09&xH>K`0M;#XcC&rg>o3S*B|X`cEG&_=YTLy4BG->y=)1K#{r&bqqcZ
z@XRPfmNwpMZ<+B*D?gZZF^oP2AO9P6!m_U+ulE#o2s}h;YIGN{1W}nEE;;vGK_|wL
zgq6B1`ib(C_3TljNbB^9y45Q<R^M#98WAk6`*b{oe&wuL+shx7w$E?zV{6u%87|bj
zockzEK&>x0&R`I;XV5%8Q|MJCZ_~2#BCIEKV7|#>tEEmLR)OztNW2~_qvUlvk`prm
zI$EUZn;-mQZ*3=G{|E45ZCFN2SasC>g{u%^kMC{DUFAC3Cb<O@kiBsGzut)ot4g;5
z2ytg-oJT+z(p(Deg1Q{eeFa<IST_%{DfG{4*OUQmGXyY*EX4C^MYTsjZ-lDtf}~Ns
z1)0<|eQ*br9#WEH?uR2Wx2{UObWu?80MQb<cCbXN&}^OCqAz!C-_?q5uomy#QcyAH
z;_};`SpZ6=lby{9)Fp7b$j|V|1+}*T^xs-nS-zqq1QG`szQZPYnf@Ah;%dx!9+v}7
zc<f-%OoPzg0AuS9EF<xIUf)U@Xymp~a2{7|6<h(S?#Zm*Emxq%vcrtblr&PfoD;*J
zc$3)hc$$zET9QhX&R{#lO%EqF-lPG8IAz)%vh@gI_kCDC{)Z{u?L+wClR!&(vhBP@
zj(>aaQj{r63gu`m?y<_Gak_SBQ|f257Wp!Vrk>|NqQvpp>$yQ>8uwo0Oqfla6@T$$
z{4BjgAE*4ZpoN@TS^P`-3h<dkk=x2&0HH=0<+AB4MfKb=Ar4XcoD9C78XUzl@eYk0
zqV>TY7M0$W$u8uD0V}!F&&+eze<-$GX6wy`=DQC0$`jvXQ82S0O;9PpDOt9p&Hb<_
zggG`!d4OKoFo3ouFr^-aY*b$FE57~1g(Ad$p#u%1U$L`GzfmgD1*{fcQ2@(eNPf>U
zl)n!}6jr;5+3j%|^weq1)#ux?D;I?DEm8I8yufr->LRbGn*QmH-75E;mTMTyn1bc0
zYUaUN8Ue&mp?RR^yUhHBXIPw&dxWUTgCV&Wc%boJD)sjq^MD8~e@s(o<lEx$S<gA>
zS@DGbt*onT&t_4WX9@s^+DY9mnBbo-8IeuTP-hSqaMATY#TJbILF{%e9R(cx>bCSp
zqZix@?v`7YoIy|DtG4V7X4a(El&+^W9ix(`tzM#_X9F;U&Cs<p#wD|&i^v<PXE6gJ
z;^2+%EPlQ$s#g%3cw(y{E87`OuH+RPV0kf7IZVRLy#tsyHNB*6Jb_A%bk|vet%YLN
zSA^qI;_@5+z)*=ayv6TIe3rt!Zc931Dc#9D13AnZ6P3ZlP~0vR)S6_z1$1Fct8>0O
zdyZ?Z$-kp3Uqmz%(TxwtL)3*zEA2*@iJEhhpiszDx#%S)QPWRimO)Un4qch!nf5=2
zo&~`yJB2>k0G2>8vkw8bhxQvzFP_LT2CGT>5~exiU@h0=F7RyiZP|!i!&@yf@sIDm
zp$%mss)&_u&n*;7l83_JZc~(J51(ksvfR&Rc?sVv82$$0(whKcP5*54(x3oH4OHrT
z{c<;gLrXdxHLF}JBm^33!v`Q@+oM@P9c`pVov+yPwU+~2y&JmfkYnCf^HBQgHu)d5
zJ#k^dNxSox4gr2#jG4dody0o2;Lgrzv+XqLp=-D=$qO-wQ8x?a0H;T6&#I`UHsX}V
zEKl7BVTZ?WpH7$`AVkYd9DeVrA4@3lkyV$SlM@t||5)i85fo7h=(CsEKieUy!u#Od
z<sbjVIWm1JBPu1ehFtr88czgFn0b$drb)x0`28>?AGK&<<=|&DD&=D@N#9aw3lDd6
z(qES+-Ovrqig0Em^-!h9&ElIt07pQ$zcLktqW;$v)TRuLJ2rRey)BK{1AQJIQE-0I
z5|9D&hPb*i0Em(5*26mDq~N;+$)bGFeX2^u2`*2l8quam+LM~{EMUN_>@=Yndcic2
zbRi~ET9EcUMJ&^&JCzxM7v{$O>?a=0c6lk55<_P}NYl&6XTzR;7i{%X^!y+I#zpDU
zOn}UEZg)_F2racmV?9<HD#eO&$+bwK>D;bUTV7_+1L4!H;?G9yw^A}0>W7tMr$&pG
zHW79Q2D(WY(s)eQl*FpU_!Qy-tx3^3Q0a#W#YJv-0wBcWqh?Y_Z;<<JPF+(mvR=xI
z5pwRLl+EeTR29vUxAExQjfq^C$7Ydu0eZbKw+ybE4e%!*2FC;6!!fSfVgfx0do9f=
zyqsM=@t-`DXm}{nKehd32Ef%;(4#gr;<A1XdEN{{wRfc5o<M}mc;KhECH~zt6^f={
zP4Y@vi9CMz|GGd@IFJ2^q}FCxuJ1(r7qlmsnb9f_Beo4Zd#*Q`h}FsVD$|f0Nm$Iz
zAPWM_dU0+UNN{#K{_b`h+iwf{^NF29MMRvI{cK>KoyVz-8N7H-{@|+V`mXJSLy1@Q
ziBX4^BCs<7i{Wg6!l8dfPT(m%#IWo%|4Iu2#zdFV65i&-MEJc;ZF%&7;s=KPiT8$^
zk|dY_?s~|2y*YqH&Qgn300K6?G909Z2@w$~-?%1mT>XAG8T|L2FcKqEEna=J^#>fP
zEgZs8y|ZPeBC1e^$*veUt`(?uFO(n#T$kt8;t6kS@WG#Wc*47Q9Ly77;rz=kEF5P=
z2tpPELkc;%Wrj=|V|_1KI>`!wHNfd7JoyZMcM?XNO?Z-zC}*_+2#MNq4~h6qYr`dG
zSehthf`m;PaX7wq+qK?0cOpW<alj}FsE&BWVUm0Wp!jx(oF!IZVueWg*(y^{Tv7;S
zq*+ASBD!Z4Ai@9EY2t}X3m}ZNJYlx@SamZ{&K9dsq}2nYa4(`nb1#)tCML0zd(>of
z3a&qeK@1Hwq(&mJU<(<-E=TaljfhCb;7C3nYl)Qv7fQ7YZm88_V{&jjM|~2hj*O?!
ze;Sqn0tuP{L9e`{#TY=_^D$%seeY}>qMDq1{>vQGro{&;Z|G^bFdp^Y&77Q!@jq>y
zP6R|n^qPaHlw^%3<$<3fh~bX&8<9wp19AY5T^0Oi^vKRCiN_~%!8u71)@x!WZC7jX
zW=w*?Obp5QN$p5#Hjn!3Adm{9&r<5)W^I!v?b}iEBN~XeP~jDajKt__D>ybzC_~FB
z9?ZG$G3Q$kMFI+fh)PxYh%2Wl^qwCf26sqb+|)54vU69^0UM$I_PVeAI7SOAq%^E9
zL5qwA_Ap(g&B=C~dFMq!)kv;44lI&T0MCHrl^GhGsqguAg`n<xY&LS`TUA(0l8(QZ
zq1P&n^^N*wln@|ZSjtzOy4Xyy3udv<0t=j~Eb|w(b9B4wrs9Hu!pYw95kT}bSIbl!
zgr`3rNPCrfwSn3&GRK={m&Z0gou$8TMII$~0tDT*h?JpFhq2n)4vKo5@iEOW<b&<9
zw<W0P#7!ufnF6CS#HEd5eY>BV$LB<=xGRAslR#YUGv(k(fo^ZY%~6oFdPrue1VpSX
zOs`>vVskuP&V0LO$cHBT3@wElv+~2z@@TnK)>7`1Re~8jPN%hVBQ088y|6u2ZU1Es
z*}B<oY2|1z4EY2`9fq?}(YNKMMFY$A8PibiPJeyVR<!k`jHeQ-h2x%cFmvbaufT(2
zzVRFxc~Y~&Ec?jf{tvs4r-d4X;C$4DQDu0febo~DG!tJ^(xLa4mlFb}8t3CME?8E~
zTq)K4&>4ppsF*c8x{}%NB)g5eeD-(hKI+S$W^}nk9gnXnbGWoGVsPOLt6<bQSo~TU
zDeqssh&vb}%K9XOkwKm0q_|DGy6nH946OmhNbV{T>|PXe*t=2?5|rg|d+<Vz3lT`e
z!<Qdm1p^9HkMaf^-|%Mwi@jrr4zgEcNM(@WhF(9^z0YI{0{4s31Wd*<6M)LLz=sc$
zE}S-b_*(*g_y|oL#2>N?L|i`CZse<70s*PTnipZ%%^9W}d_1K47*s1+Jwe+o;Wni$
zD!h;p?<dt;ymC9CF`dIX*j#;CU0yg!ux5}YHifHW(tALioN(K6YAaQK|1%@$X+z<f
zSypXRkQw-FASE`mD%EPWRJMdx_hUO-LhLbm$A8TP%-+%&d!)@|*K?xEjT@V_w}D{&
z<wja})$CBtCZf7+1W*UNre7R;WQ_6fNQocM#nLhAfqo#gAA^T_gr~yL{mT<{ha12O
zrZ7OQ#u`=tUl*v!P<r()U2-$WSPAt*3Yki6(gd09=uBVd&#KwL3dXJqEh>X2JNd-$
z7M5rm;*lbRsm`D!=2u>5<azpJ;(lN-9l?4v-nm?Z88hn%W{lJ*SLmh6T>LA@GK7$$
z)FylGT*}S0`IjCO2-9N33`&xm`3a6Irb*p7y949`waXpBo&~rkE)ligzD;9C8{1hp
z3i@A!y7Iudn8W4&Ks4%QygIu+jz%SLMO{ChXO#QG%UR_Bm4h_NV^FZ~Q%9h7y-Z{j
zbO(cx_X2$sbNj*jBzEoho)i+|H_!LJyKqaCRTkw#{eZi^l2a52H2rgTLx+h?NR!(L
zx^G@Ngf+(Oh*4F%pCr|4S;GvCfg0-Y%N;1H>QUjPyIGC{?F*1wA>wNAY!VAs-by~y
zdh9EJ)DDDO#hgeX<v}+E)fwnN{xNW9RG8quY62W{OC76RDck9X5XUYfupZGcYl71J
zt1NO|)M_IBOf)eV{<aO!9L-kA_oO7zPck}%{R(acH_?IR;pF#hkfSZ}!~MA7R3PRD
zLJn*Y&yCFKqpA`h8=Uk$Pf~0gJsK4Pc?I)Mg@6mbm0&_JahYR%Y>gakPWfw;{MR=(
zSYp-<0<`7iAz`uoeSCtBu*92)4f=6nsTsh#7wnKARyJsItx3|Yon|$L+ce4dcY50x
zAm}Va{LBYvR1(sExixx&xD@Ub3NL1MxH9Lacn@uZeUESC1dr4HLLm_7>kjfgLkPro
zHF(Se)oC=LAeRSVik0JhorwFmME|@%!-<j8<H)?Hof#P7;t5#MlrjYR$`5_lK5A6+
z?}O?J0F+3G&J-?oMQjfs356TsZAi?(|9O+dOG2EyBo9~zB7{!g(BptQ1Udqz-SCV9
z1wuV6Nx=!>u)QXWcBDkSyKgk1Gl4^I0z=o*TrSK2UyD%>uF%qE;o<-z+9#_>4^6`r
za(%|p7g-$rML({Nh0Fc-=&4fP5<=6ul^xWk$yHCySx}%yR>YGMvI~mPWdn(Fkc%)9
z%P-7+_6VXAPj|edN>1FmXcfmr5sm}Aqaojb=Po)lZ`N#pCC|Iw@f3rYO@N1^u9(aH
zDE7mzn;(nIzE$DT*Q=vB@=S>fZZS&@{swJRT@051d9)j5!YpYT$DzO63|IncuzPzj
zidthrH#KS_8a^5W&oomHkcm+%Kl@3vmha1aBf}%JHWGn^-R$Ug=E`Hx(s&5^$6YjS
zRFlQu37Q>GhEgO`j$rQt&iLsl=`%5W@}QfVV-zHz1zr%C%T!F}218%^QSUngl4M7p
z?~fRONs04uB;H#Y2AkePSh`~ghQP*##zDOuvdu^dcU!RkdlZD9ipGxHoNgh^Ht01?
zksp+@%MpYUMhv(15!W>Nj*8)^f7iJSIQhsN0*<JYCY%@}o+$s!cD*wN6k?8ro_&ZR
zlgq+Y&lDbv3597Xe-n=&%23KDhvT16BiDq)W{RAME9OvTP1*g4Jt0u7DE4XM1!JR$
z8c`4vdZ7TNmdvV3LJ2FPGQHH~Wm&nDBsDh$XUP5C3i??As_kzJ{j{hV0q5yv!-zSd
zn#|Rd^6bgA3&+i<G)y}!2~7-VvNx<w!y;E=uvLFz!(Fk${`_swX<vj82PC7{{R|iw
zhv-3Tm2ubPWod}ZKDT0OB7rEeaFh@=%Ny#fjr^$X&iMH11LQG8`^o?z;ip}<5XW1z
zVG;IbLhw_VpC|~hyo93y0%RJLFoSDcvFAeybNj_J1oo)e(<w4aJ;pa}&io}_B>b!`
zLO(kA2z4CMwkl9a_%W5H04lIkRCKGfL5vjSIg}7bL{Wi}`3#WJ_g^XSw9G}glw^Su
z935rLGxVz$t{~c00z~u!D9K+Zk_!sJ`;b{Wo`Orxbktg(wn}qNE==bb9n%%~SpuC-
zOjoe|k@scm^Q*G~dboDvh<?}#<ZvuV%>rEI7ss-|p1G5pFKV_vp0Pab5*aurH-=4R
zhxqlXdQrB3GBbdJ&HG#ML4z0BL4a|fD=zRaC@tp=FB=dO#~ubo9WjS<wR%HQLl%fd
zY43^+`~;<Bzvkzz%X+U?<9S{ew&Vx1!?dOA(Cp`IOg<QoZ2H&g2rSH-#g#&d{H~mI
z;T0Zo6>cLG{#L%W?GgAKuI_$H+Lr%AXFh*yLlDcKX!|1)e@UmsHwr)={jB9T%@*B=
zEfE>R$7q>KjnbKOC}kjUL#!HLCRz+0dr5_ekWq3e1R=?qH3-$0el!%Qt-YcDNh;GL
zLL0!5p+xL$KMw(nGvvaddUqVj$h^zeny@6JRvBgeOj{ib6ZAwFdo)G1L<}mt1~Utg
zGkS$g!Hh_PD@n^r!EAh}fUI7z78g)`<R6m6q=_Vch@Y?@CO8RL^};p60;hlE$?x(%
zF2SdwX8V%XPp+v1F73h>*>cS`i|!+~Kon>1BBumYi3~_hq3fypH-O|&v+em5!$!*k
z9=}5yfQ#Xy;s>Qhjlhoa<&fn=j6F=S!{{A<Xw3}vdWO~=UN^DzGexk;60!^e-ZhLZ
z{d%)s3LN=<KY_AeIsYbENbzIF%bZlTtuGDGVrOco$Td(XpNUka(0+I5F(Ny+gG<A*
zabKQONbVn}z>k7WHf@phapci-0jRuM8g#T=4L$8~g()Bw#z0l^>GvAL-X6ceoo%w=
z*f!%~mftS^`7di9z-iXyalZ~1fzxHBCYMI7;>H6Aq1~EKmqdC<rEA0wp+kv7%@3Pu
zy3C|dXlgGt%ID>!?A_XvTo3GEY^P`ZV$2$kAFR3b)|lD`!byZOR&94cj*+6G3KX12
zLIpV6e}v^D%>ppnT8XcM9T3xIhGUSt$0<emliCWDsD7API7Hl2=#KEmwG~Lmt1;La
zo2rk#rl2|R{nXxN_qz7W0o|j1$12LSZ+DJgs4b3$#(9C474R;F<KnK7KihmyjlBjs
zNO45Y{0Hg%GYc-5ta+~FG{c9X{ln*smzUHT(DmoP7leQ66tNHZIk**CbAIfzYvfrI
zP6GiTstY!MKPy4>`sO4mr|K08w|V9x&25DeJ0t4Htsq)<zH3;&?De!m!MNwQ*zmlh
zbUpE8-hB))f0=1Ta3Z*}Mr*^geigd6wlIXZ;4c95j+?GAMd^h2db84I-j&fO^N!Py
z3vDz$S;jZJ_GB4=W_|nO^9mtg%iE=o%P5y?TKD_kYd)CEzkd_cc#Nw=KCLe<jm+K}
z56ucMY~?RyfuGW-a=aYPuOOHFja@g%I#gaOd$NAyseNO*fSz`SRJ3r19<Vd{IHPIX
zFnRRTm^DYhTKk@IQE_k}JoG<JFk<@lU963X(|kdk(?s3x=r+9Q+j>o3nIxzXp~d*`
zh~|A2{P58tiL&m%1iAYJcFjQ&&2AE=!BpmT%j*bwX%*;z3l&4|Po{%@Wzo0jspz>V
zosX4I{+*Zzu9%+rZPa_3UsUHzZnn{J09sDd0!4Smr+x!&5A*#E1A{gH=w-Q&v3u^K
z8V&vYSH<Ip<53~q<c8Nylt2s>X0h%YIp2i2S^sW~#mBATZJCzH|Bn5L!EZrS>>4+G
z;w3v!$8cju`E_w6Zm38|<b_Q8ZJGWJ$cIpzMnZ~HFYiO{t*Cbu=}>9`KaN8?)%Bin
z9jE;9R;GAZvwboqQPRr%8RA}TTda!bhB;9&DKhG}j+~7BVM6^|HW6x6g6nQf=>YO%
zK!*olI@4TOsvwe}3^fOW#RIe!G){~en1x+E6IT4a`J=;qHJ}9G3Y6!o>o2&JiP|H3
zDMhny)9L2g1aTvtk;m@#)3)BTRTForytK#-93j1@Yk+Z3k@5u4?oQMns*9Ejiow0w
z6Prci*Gq;DWW+`zWZ#3z%;OVB1@W_r{6Ouyvih@15SMv~AUu3a8skoC`Z++}@Px%`
z|KMmGX6u-?fW*zWV576&p&IB<DodZN`@411%GaIm4jO9#@;l*Nh51t#CGGaV0f7YN
zd7{=Z^ATZFy(Z`H{F(K8HTmPrv*oF&*TrW`Zbny(C7w*UgnnhrHybSZ+FC)ckGw)3
z;s0}3-~CI4CV1b^Q9$~i8#^b+^JyduyI3<Q*0ScZp<y}IX!{a2XtKd8ae%Azux6@D
zW%t|GUDnnr0<sFG%Q|jJfaGvYaY{K&)X;)dWkJn={woHoZhwJaY%-cOZNlyZxl|EM
z%Wa}RA2LryYAGwE)7oOC%TKpZ$?zT4J7|cY{a?)y7idX5P^@;r^c*S)v7_R=S%&}A
zN6di#YP#1iG#RZRGAgkF4o~-J1wz=CK(i9wAX|x(;;XJ5H)YDLoGJMP!K7olNKeTz
z=TwrLu3eu_NZMwNPq!Db59o`*Rp)zV{ZR*rxe%^+%eN{La%C7?+5m)SMFXP{W<jSo
zYk@lzZ!>;%=50jebkaDX)Bgw@?18{Dly#GE#Mp6ldnEW9&ZGxG5PxF2Kt;H&k_~JR
z{=MPc8Ce`N@iaJrQ+lr}0*(C)`(o0?)(Hz@@u9n=5XU3fwfI)}8#3yDzV9lbbAWuR
zA%s|`lZ8R}U>PXZ@kDdkkDC!Zg{PtxV9oQ>wl_?|gO^9-Sus$>^_c*w8vD#P5PEcR
z9~7h#hv&IbNX6}v!j-BW;HC37JXUo{+!Od;Bz|-!tIz-M_+B*Q*DT|AzAG^Btf;*p
z3p5-=D_()d-SHoV+yX%r-YL8$K_=VS33Yxm^R<xg2UsEyvpP9dzlK}m$*&fxMQ{Wt
zJ-YZ@7V?%~xj;+;(~@+lFxr#^f+%eks{o`@PAR++>E16nbf;%Wcer3FDA96-dHe-T
z>dS^T%Ug)-hnr)jZ@XB2+(1TBU~jmUHc090Xh7v=wX<$^xeWGPE$lwx`?mE+y2Xpn
zIIZ_*2&HLf$j(4a>(PjS`QYOW*C}K9Ug?W&rSVE$W;atu%JPWh>CZGZP%f#u=Y15q
zYNo6!b3hpZTFabiEF*b3BT2kk8hu(A&~R5FUtou_3tkVR7xXPLNx1>O6~hpZprglD
znD|yxh=2~}JZGc!Za?j_spX&6d1*%$?=W9*yEp(&o*u#|MPQIBluR*^@&29<dLCU2
zio~?c&~c<!SA0;Bwl@OURCLm4NqAPc7ZFTxh-2eC+^MRRsUlLC;0E(s#hMl2Wqqil
z$QHx-ByE#ZAczY|91iB-<hUjJVSq{7vr=wTS3@TlwEd~+hS=ZJOlPH4caX2Z76|W4
z@Wu!_$m4`jMdgt0G<5WifP2i9QI%Gn5Y#H648hZpG=@jSJcd8UAcUZ>$d&Ez^Cz`y
z57tlf#tv{s6|NcW*~(GZJr6Pdj1GGH_Mwe|WypNd;MYqH|If9EFPyUXQRm~uQ_p+#
zjmKVxP4-DCA!&4YlRqi%4HeSgXEaDvqK?|YT?mtWCy+HqEVC4iD31p<1^vXa6VA8#
z67<9rXD@T5Vc4v-WbeJ=I+CL%dNf|MNc;^YU?fzrf@Ys0o}C~kHf2Q>iP?yJ&B<%%
z{j)}~=<ZF%|DAc;5QP!RX{$&cf+mOi*Co!jSDp}N<`|egns6n^sCWD%EqEfN7%BJc
zD41A*I<`UQOSU<h3yN!(Im+^7g#|C;;g7{m%vK6uB=7FxFuE(RG9Xb0pw3h#n|a@4
zAR}q{oLa*7xXSyQnDFu0)B`Avum|l|#H+Q56bL0q1tJ}cOgXfd>EA9djjO9rD!H6^
zkY0E$QXpXYaZw7Su<bip<2S^^uj?_hLEzas%9CnQW71g-@l)l*^UOk#xjdt=`6a|k
z?OAh}X|HXah8xqw#6wE1^QuNiZT1O=!1WeBy}mSvE6C#-LZlSkW-F5&;tfkcuty6Z
zLJWD+EHK{Q+4WhowbgMexR5fIwlx6}pq61e<}4Uw>xXx>lge?%Y$2<P$Ijo8?HZs=
znTrh14|lF=)>b-g^@1#ZfOwV_C(BZW!Rl?}%Dh=rXq-VgRvx<xpP$Fp2T4f=g`7)>
z)=30uTq8=&{0tObbvc0O`jqK7T2?T{wj^6{mTt`IC^Z?iV8E3i-<5D>s=B=<RaKT-
z!Y@o$iK<Aku04eD&Em)YmBnks+InVNl$}}aakZ-MyZMTU1ysta8yzee+)Cv8tG9<?
zTo@GLsssYn>4q%j<h^Csj8b7Mbo@dJ?;z>Qq~{e23Nw^qH#ye52R}Y9`$SfEQj=14
zTdbk#xhkuN?h=dzUyk51-UfZHTKrazC_g*49W5`|%`V7w5VRfXGjMnHT35j}r(K*d
z@8E~i6LMwE1b}j2evAesFgT-r=UV}7;WUxX81{cT6%0-?UZASl0aeBv)47q%L>VEY
zQ2}JP>opZN(l?cI5l(i@4a<V0G%H$Hf%Sp1+&OmP-M2U5*5F9{7d&qx{i{f;RUbyS
z-ceSq|KwPGH1Iu$DK{uL+O)2Z4e5kL8NjhB2cp<(xwLw&acSIRc6CTA0?#u&%}3nU
zbJQ#y6hNYi>gTGoq!!O0;2<FwlF&f%`L7(iO3f9aM-(NRhDOB9R&zs|Gr}~;3v0<r
z$`Scdt053I2TI+xI&OcE<j_bTqAS~@7dO-cEBeV#n7uJW^8p(PNGYZo)O68#0?H$H
zq1)-gEF`9n6;TS~1aDJVBM#vL>gcQZRgd)zaye-X5ZUuWFp_34l4V<5%pHP;+P~J~
zuyf)fO)v)gkbsM<{rL6OTX~<T($L({-fG)$<*j*In9&9gNgC1W(&A1}DzAZFC@SWa
zJJ{lWny5W<P}j=2pS5W@IF6W0HgXCAmlEKwL5)d@#VDr!Vc30Z<L-3D9G05%*}kkZ
zg3?Otj0gZ9HYA8_bGD*)JLVoKU8>-UnLYL4FQ(sY`VSAk#EnVLlgCK%J_&^OwugLI
zYv5Yt`0YgblRg9*fP?B}_rNb+dGyv%RcpwcUh{*q#;v1Jw!X9dSc)530&{+AA}g>F
z>ri<s&?g%P3lCQ>C5V}~;U*j3w=o5Z+ljp5xJ1SV`}5AE>Y=x-Pb<tp7L^b?*#(i{
zDWIs)FMOST*<4I|I1p?Ad&k%8Y9~kBM-#V$)-*OovZL%3{=k~5HPn>U)#OBk#0eDM
z;VCt+9H6akHjS$&u~SQ*=Oy*&&Hu|oPAa2M_326mIO37aJ^3zaWj192&hSM99K_5r
z$Vt=riR~nnzXUI-%c!a5Axrx&>pTY1i3_eUt~QTa^!qYsB!40$Xniw<YuLdlpJHuP
zRLeeW89HaLf+^5+(4G2X4>_+W;+`4;dh#OZkFZNS$AdRTEbjyMJpJ-W{L%pT^&6C*
z&NbUNz;w2EnYzX&8l6_cO~7b=1UGaTw|NA&c^Er13=!IzfcA6-c(=z#p_+hgPpP_h
zpaf*LpQ(g92JFnHL<J&%N$D(aGYLCin}2->VC55l-<motsEL<&qT}5o-ikuLgkfyl
z-+dFafUOqs*v?o|egnO1yk1=y22D<N8B{BTOP7L?W~a)8FaxbQJm+q6RDn=_f_~<^
z%SX5sHjiTQZrJqD`0v2WQ~*6xthXw@6X6r!TVl-yQ=Ojn(uP+CXp)8Te{j4hrSSD6
zq?OS4r$01l&X0vLj^hej4i8pL$&<D0(Zwe=<~9U4n+R6UPL^L>t?bS@W?y7USWyZe
z*7>3B^c>%;Pso2~(Uz>(=^*hd13k(Wd{jjxZ6<OkXA=23u8eV6v)V@=+u^eZdK*0M
zmu+4TiGm4`mE;D)T>|_S2qqmcS;_^jh?@xLW}?(!rh9qz&CdXC!~;@)%fH6Ar!-*-
zT_E8jD|O}l4x;FR1o#l0S^p+8A1Tu>l?rm;%kz(9^tOZUSf7@iiqs{>lbxWFiHiNh
zbr~^1`SRSFklYkC1eB5-F=x;T)O4HjrdF2$K(~F7klOqbC($GmMM=e9V>Wa~7dr?B
zu_#2$|MPJFv4}oK6|}jG=2yKF=bd>uGw(@u5NdwiJAQsHKr+mMyN%wxU8=O%io|7u
zZUpYYxyV*D;2Cg3?ZU>mvkJcvs)rRRKOzwhWKx06GHlQ%7;E;Ynf{;s!-R|4GIdML
zR*V<0-YUydCOems2Oou0RW+vp*fO8Jc=z0MqSN4e?g4hg-)DOWPdKwVw}IM?6)>%K
z$ix%sQoEARB1;P=*cM+QMwA8DM_|&XdY`ct%jPLv<`eCvm|=^?Qo#|rh8)2m9u!E5
z0tmaR@l#RMumVgrx_t+C4eR)H3t&k)(o&U?oDw&W6(h3C6=ITaeFR#ufXw$%&+y`n
z9WaX@m7~kVN;RSsb6P_*FD?ZlWmrM1X4_cDHg0X4KmizaS(MSAK2P(8AS?G+uuC*i
zG*_9i#abRt>XK_E6r?b$O?MwM|7#yZE7wgV=~p7mFgjNU!iW{Z5F<;*Rc{WhLgfLa
zXrX3eTUud1T2@E`?Y0sv1Vb}q0A_Ukh|I$lJcAd43za&PDBAlvqu4Nri9iVyQz*}-
zwz`g=Pd^&sGzb?&t<YJGftNAfc(rsrb3&5W!eTg=KI+?M1g7BmD3&&pE{h^f*K2z>
z^sh+)e}t_aMJ?IUU!>-g2IrlRPr(FC1a4Ooei%vkjur&t4Nc(mCg-ny_|sF(SB(Ui
zT->Chs6W?sKCH(K8qXwM>>=OzK}He3T)qA7O1q_%so$~j+k)sHtMC`xW(TOru6?59
zM#{RQ*7&$*=Y{<I@+H-WsMHY`I(ndTmYh{$R`sAJ@|@C(&Ehx&L+MYBU*HB7?%ESH
z78;OK+xW{-wx{5;e^bg76Nnv^$)wdgVZ!v+N-sB3PP6cI$KJmXizi`v%|%+pQ9nXi
zgI{I4m0lVJTAtFx%u&1nP<>W?r)mw62&*R4)3B|sAscS>_TBC}Dt(sttcK)@KXFYw
zwe#*}3h3Hn${NnDD9VVsef8Wralis$%i+8TDB@023``m0j1w!cElpCyj!3kkkzk-N
zb=w1k=68*nZ;>uNp}rObbcF@ceVk!eK-VtF7q1XmtRtG7`S8()0;S@9x&_w>x95%w
z;!E<gGJLMcZizdV%n&B$0gRc5?xU#gBmSeG)QNvij8>ExAy603m-q#RnQMS6fg4OA
zLggaD{1V^?J?^lary{y4g1%ql<>o5*n&mtl;$(iF9{eNlOpLqo*FtS?pjdo}uJxt7
zNp~YRj^KIBw_PZN5;^ZQBS0ic()lwU>>ih}_dD+7KlHXR6VL_zT%EK%ozgUy@>Ep5
zX-67O|C^g4>%Ns-9i3lV98W)Q)83u^>8jRJS2Ciz)NHS{{0ya`i#lZ^^Z>gktC!IO
zra@i)7xx6>-yqO6ah=Q!aL!6Al$W1$LV-Yym|ddBMTO9wNGW<qqQOb+0(Ethu^(rW
zsBl7XE;z@0;RXSFOmK})pEdOqlJS?6WP~JIoXX2aRTlK^I8$9uwi;-uiCl#AuHkn#
zYG~*|J>D|BQZNdk-O%ps6ZT&1E>zbrw$1{vbft3A&-M0*u=m!w`UKr**my@u`1o57
z)|vGF-)K}f=(jJq6CmP0c8ZDFVn#&wfBqd0prUiGZc*L6!rnr~^m>om>U9O}3c3U%
z^m;UI^#y^RU3T#>vI}&z{4yhP_v{JWrmXk(T&9lJq=6j)b8pF3XWWGj&zit)hWCSY
zMs3jEuG_%=q*m|~Y52mZ`FS{fIOJNgta}@*m+(i9cq_JfNlpD?=YLzL2%g;JrutOT
zZU9~F4ThI*6Ly79cfds7ZbXSlu;rz4Nw}BE>>nN2l|R}7I)ApGQ4-ESmtfSxYapr5
zCiU7AXa236_Z-hJY(@QMXh`SzVO+(&UjmC;wzXZu9c=v<<s9Nlcdk~Eys?!}*F+C#
zn<kPk(8fTGHJ2TmuSBlHt7--0ySJV7Lh+i1p5l6JheoqPX@qFATGPrK#}`ryD<(5^
zZ;8T`LTQxgC#wD%Kq~J#HdcH<kd`|qmG`F~qK{=(jXt-#ZAum?D<!f=UH=s*YR%2^
zNfuuqQC8Cnka=p2OvR30%@UA{Ya6|$R&L=pwyml@>QreCceA9hi!F$h5oJx_&Xf>5
zm9xOG8L!xiE9860wLTwl)l^mI6X5lAv4T9=1&rJvlnyb)8h&HFDnDECWo=MZ;LNzz
z-c3O7ZsPM`Mof`X9_(f*#~O)V$^Ien*AGZMhPXI#TuMEzWmU4Sp{v_Ij<3j&_I|N_
zYeTlI4k=oF(&I=2?AwDYFEZPa>e=uXKucXOge`YuFLSO|4OCrEGUk8V;4by+e(<S_
zeEgiTpyHye`(F}uUwzgZ^HkoxGW}bRke&V7ly<Y{57p<|^>#Ve%H*}x%Llbjyyrvp
zPM|w5FwtbjC<{|eAH@M<!Q)>J8}&COL$OmddfIeEp#HU7!}LX0a6^lO2JZ*Wl3NyD
z98>gzS?7)nc4LQ52{!(L8;|)&)v1P<<6J<kf&QrBfJMG1J$b<kiG(9@uJwdwd54>3
zhVE`5wFUF={c{SL_;HU?K07nh*;-ZW#pdAu-jbC%MXSIf`S4zjk}%#XJxr=-qV;GT
z5{hJcJ72yK5j*bxGM1Q=QPm4*xm$&h<$3u_yxUFNif$(ACmEklM9&qN^MO94X&n07
zy3XBtbAMg&(G`I2{xe>w`>b5@J4%0RSZOUu7&TCTn2cMi&fLeiSX@qeFLrLAe>nA2
zc6m9a)j}P}C#s)XF#vA?!MoViE&^tX|HZ)N)VNb@(ghcshAxz0_-00gJEg2a$png8
zKK($Fu+%ahhW0Ei4~*Z(p&j63H58!~Epm`KwuGz_DTy?r$+>6|3!mK~-P+otdpqnw
z_K4f<Xm{0&GOy;Mvbu9xcen3r_cClMnp?4&WE<9!50lZ+b@1?2B6e#Mx3+cOmXr&x
z7Dy8H_k$h=ojea~<h~tb0=yf27r3IHo6^2*wu5T;ZHa(L{M|-*E`FLg%0exq(1LZS
zV$L_KmwJPgt`-p;)Po(Miv1f9t4}z5Oqn)jt`!<<gHXu~OV@}9mY}0@dsL?w0Mhq8
z0AAIN0OZ+Kgo%wS|L<6u0}TJJ?)d-8wwxpWc;j!G1VPi^lC$mg|G{$p5L9Fjs|{{U
zXMM8X6FLUb?biiK6y^gwovmU}L1zb9ii|mGgRBM7j%-8(kJ%GvHbV=LV#*bDV7XiC
z#|Z6Ci6o3K`bb~c@2i)#XK_k)$-+ic&LTP?*m>R%^*&fWzBkU0hLcm>PVEqNx1Xtc
zu1#xSfsVSmBP>5oWEl=k*w0pWG&ZiCq4UZi6dHX(nz1>PDY~81cR0K<{iz$Gp7ck?
zys&to0i8!`g0<A5C8+EE)7bj^04ANEl`5oz5Tx%3qaB9ZgLAE_GqkbJg4*bug$=ea
z8HgnqZ2V4`MpsaqoUJ42nEK_oU4D9UO&j$Yzr|s5c@@XS#`D}VKbPE5oqAYUU>}^i
z-;laM1!KXU-lS+}Hkn*7!vP!j3+;TAgzxmLY&%c;<|UCaTBvN2bTFIEt{^in$QFmC
zkh@1ls2-VSe;~FZ4%mQKH`-g;9h|R*Oan56=r&M9AG)Ez64E;7yEHD3Y|+c}Yp|4+
z_K-qS5t$&`n21{~;mC<{xg@yl1lZVTZY4Q7$WwM#SXoqA4wqcHacI9MuO_N1M`FGj
zQPJ2OhCRY<X6JJC<=P5)Ia#qd(~%H$#N|4*Plxoh%}bj)JdXPsie65SuG;7HoYOV#
zal6}ePUN=y&5zn$G*!8w!cfkRyRBp~K|u3q4rJ|L-g|p1nP0DR>=bzB)<jqe#(J@W
zW1mX<MZ?=*E@<Jl`pz%Wt1=xb%R0!Mkn#qqFalI$)E*-np{JBQnhA}in4`iTXj$1~
zkq!?nL7_f`qbC`<RbdT2=kDA9XL(a_eYo>jqq494GJZd3)1OuFt+p(om?JlpkwsqU
zQ=hgFH`iu`i4|PEv7Rh<{0m%O4_IUVX9>nY>Iq0uEQXo#=%J!o>`8gktXp!%Q*#{~
z>GzCzq2Vut`IH7vV~baha--krb^xDNrUlxTj3(K^n12_M$O8+u*(>_^je7=3?UCB-
z`&s?#;VLYj@HgYbS1ba4e_X~@NYB#2at?97Ci+ZjqR5S@CQa#deW4F$ni|7pFo`G2
zprS>WHR*;3*6aw$v1@XczJ~%X1U|$nc^FQ9ow5s`<M+WNeu%>;SNbAK7o|Yv63XRw
z1hGQ9#9;;b+z>+OCj-^L!i>CvS`tgY8g2_?y&kEmFeY^qJyN$wss7j~DmNmYYfhwR
zKrxL~;LY{J4dAZX{qFxfr*eyId|E)e5Rw%r#Jn?FzvE&dVaYIona{YWb_>4LiQ)p^
zp#c`hU+#ci{0hlZ4~<J8zlA3d6_buck<wgE%`H_MM!07QU37EYM{QsUAQvOe?egQ)
z)gCG0C!b!aZ4z3m6LM}zfQ=BF26^|7>?Lwmma!)1f^q5o+U|;kygJJ95nE3H!J{pX
zk8|gD?3k~A?%2Gnun+b$lRNMDxU`h}N$%Nmehn}WoV6ZPT1mf`yl=95Z}Mg9n&Era
zg<VpU_tDQ}o+5j1e95|c<UZI-1;n-FueW<-RxQ~RmM|9!t_I5f#(?#vc2m(Ivs9a-
zeKDlSf5?=*NWb5lM|t1jc+6;T@q{pymP1tVPfn0_J#9fpoU~fPRZH!bP0aUgX6kT;
zy@AM<ETb3O9%|X4(F|)@dO(%1PWx~Fj+Em?f`PO6p|1mgT%ALo(fMxQ$h-W8@vEgy
zrn->=7CHN_Em9UqRBWJE_iGno9P-n15A!WnuNpFIv&Cv9h7Z2@Z;e^Gz5LgP72Ox@
zEgK%MTBswk%2LY1ieA7p>R(6fM07z96>cMTW8VF~!Ez2X1Uf>Z-y{O(Q|Opi;8mmf
z1HV9hgRM5Gu#w+4+1eWyhDE=M)mhhtf&r<BY6CHxJ}uw%H&Ez5PfUH=QvF!mpmpUA
zbRK!X09tHR<OtPx$@rJIn2kl*+zd%@f{%zNp#4-Ue^<Be@W8|iabmfsZgVcX^L_2@
z8<r^HcN(iH67=Mz=xPAa)PJf-duXA4EOtQt?a*zBQJy1K<L=^37V;YlIg*E!s3a%m
zUQFgUuM{Eb+%IL-Ax%||oaxJ?y2*Sa*xw|CEH@E)alW)%iK{E=I*@u6^!a&0npu?1
zW7|#c6?tV_mOIf7|I%{S6UG;0k7f16+fM#((sgB5%dAy0=a%9K{*m5>3%bVi>(WI;
z<kZlhYk>}JsOT&W7_Jdh2f~0Qc|8(2Rh+b!cB#@oV=$|tUfFlumxGPdC}#2zeQwnX
z{c2SpXgH^$NwL1>&B4TJrN?<Y^9aZ8yzS~BEU{Y95>2|rM&zZMstwV-is5|niMt;<
zXW<qbP07g??P5LZd~L;s@GfYpD~TOIl<JI9bOP5Gz}pqxy1PG5tRRV40)d=mCQ*Oo
z`b>EV*LbUUBurpomn9}3<0B}tq9L8ODfG^cjE~CE&w;e(B{oV#j(dBBWzkbq_jE;J
zh{i)z*xWu|0IJ-#Aw^HXCttC3AM{=tc=vX+n9XSv0MM$bwEVgGE?(~bdoq4s28xa?
zo=g-Xpf~PA?75b`VS!^Y*+({d4J25VIb(~>2s&=o57jjC0^C|ZgXzQ??vn6uHMYfk
z$68L}S`Ebl{~&Q@EoVbGM_k*Wd&5?HNSn^t6|%9?Da1faen|##EA<sQCfa9cKpd$M
za0TkT7c+53%hg)j$E-&0evZUP(Y7Qi1s1zY=An``8`!Q%`hjwdX-V67Pq_AZ;=nXq
zVQH<sU`Y^Bydt*~1It^7EogzOTf&3XAA4_5K=;yVrVN!6S^mDy)wY~GcLnVacChE4
zAdnUkY76~_&Oo4SV8^<)q?{~YiA>4Egy)OwZ`PP^k3rdR6=pdjW649+%M+=^7uK;q
z-J{4{q2*4v`!i__gMQ0cZ*o$wSJI9<8zpu`Gf=&~Z0!o#zCrilY@?sALwg#v)dL*S
zw=&c!GGoIf^^21kfc-RSw_)yA(qaTUfP$W7CGH3$PiH}z%I3~IQCqXi5JWi}nsZLt
z^n|vt2M9F({UwPBC5c2MdyR`pl5=E}LK&^K&$*jYAQB_+ER6{K%MiowDvW1q7~wds
zn6e;Ds1L}E&O=3Jm9mu%q}j$`J7K98A%r%F;XfA2*=()XUOu6SdKn6>7>Hb+)gO_s
z>f?q4ula8(<^P>2?&t+I`6sEB`7V!GUWLfSC;fZ^9<IMB4<PxO!}8rd@t{FO%waYD
zpwLpPnIno_db4@G5i!MTcvMj&eyw=uKxS<8lGVHrma#_+9pg8b<9FLkJv_WWBQAO@
z&zhE+Z`vz@HTq5E*l7@#e&r;RjF5=`Y$KJF%SUi`N3`zg&%Fy{3;1%j$=}sftnn*d
z&91=2<^Y>u07F{Pf8^B|)4QdX#;l(w9nILS@1*^mv-@aVp1G3_{o0XgtZQcLMqrDD
z0Wr%FJ^VtKr4_HqR#1^y4R1!m{r%SbOBBnjlu^*3nnY2pif0Q$m8YZSK^dQ-*D}gk
z`y2Au)s}?pE1h~sgHG^wGPDO$SzIc`#hum+`}}?10^8e?(X{!1JMmwVRVH=_5F$f-
z%(9R}|A^xOsfZz5MHs9rHGKe*O7}K+_f&pi2c2ffNQsS4<dJ53#nW?k;8!3k^`24L
z3}5sSfATJmG%ud=fMV!h9(jG~%0$YerSlrsKKNVKn&qHvgM^b+qNc>eDUiz#FdX{{
z^U2`B6u{`__=_2&^G^bq-#M<l;dH>t)2|T@9t1lrXIJb)_&O?-#?b@(GeRpYMg~~`
zWlT1MiFSsd1Jo6=a@_GuX5^`3ye6_`fm2V|J@r&Xa+7=>maoE~yOg8ZAUe8_OaI5M
zXumz0SEg1spn8lc;=5&ohviCb2X7%GGN$h@afkyH+U9*pz*c0q)yg_lElf={HmWlS
z=|vh@9ik2<B^sDYZvN-j+D|CLV~C;^_`GKNt^!}ksGuajuu(b+Q?<`?%O+?mPM73%
zV_UkNDx7-LO2S3m05xSfb~#VUE%g-i7C2}QjtGX9#nB0}U#0Yrc@`UklqzC4jbIcn
z_mNSW{;G8lgL!61Y{#Ds$P!V({;~|s$&s>?!kqj?N_AWIkg<Q{+I&N;SU=~Am92CZ
z92Y1pBNSINr6bbYd=$`_SLJi|6sPqt1kOUaBn_($x#^3}^xkZ_vq&z@z-k_lg=EXr
znJq`+U18)m2jv9N^ksyio$@Chj1$t=wNHiQ)5e{nDWLA)B84RN^TB-jQX55QsVcMg
zh1S57s56`IPH+KCoj*P}Uvz@xx*O<}Z-(c4<99y00E79`Iop?|H993FG?sh@Zi->b
z1A1%?Y%sCZhS@&-zBTG={i8*JY^_P?M9cNyB=!?ZqCAdoLqy<ybmBAQ$b0OwE}5Ah
zanf(0LWax)3;@cQ=mHjr0fH-Q_TB?5WM=qFBJLbL5K(Ks5H<?^3?CgK*lAb7`>X^L
z<YOF!;ZW0^CcBi6ZA;av9H!DkVwf#_{)L;;OEl^n+V3GUOcs6$(%j1Rsg)T-g<E4E
zb|>|-<ZiE8nSF0nYac33>dOW_TDEF%J*=`9A8-<c^AKLV6-jg!^F(MjBs;kpjgQJw
z%plEijMuH^)Fex~E95f9jbV*{1c?m=tA&_r<0<1pgqUzOz74Qlz2!po^ZnotNH<wn
zam@s`W00~`zGeUTdaY~FNmz0F1iRy#Mg18GDAs!DxTejwjQ)2gog+X|8!cV*DTw_2
z?+bL-0x8i@m)s>>x`~%RQ@p7P<Y*<0wC`hFyxmXJ(Umic-ghbIjO6EOF-;{Ewn{I&
z7g95`@V)C-8PC1P?F#5q#{U-37zDQoBD;fFsP`-sJD{5lv+*M)ea9||Z?X%QE&l{4
zi=*EN43Ecsoc$Dd4+ywhv2AaXF5RU5Z4l5E5lHk2{)%y_uY`Q@b7s5>8ZHlRDJ1z%
zraTu_EC5pnt9piRm*&S5v@T7ipSBsZG5fFYS}T(#BfBP<Eo~`0L22w}?k+?%01vjS
z<pZ4N6))^*dn~W#)iVk-n&5GX%g}E`^vo`QdiKKWLl&zN{iKuu`tRW(FSMoP0meMo
zrp5c4yyaN}*_&kKl8aJzv(M1N7@|p*U(r|X7A<HtpN{BSLd#Dq0;{ggyFcuIHksnO
zo|Py$&17<yp5f%zb0`(HMm;gnae0};iEGXRSWQccRkZk=D8EPga6ftd4RE5~dw=v%
zXmw-Cs*zG6cHhf64T#>84}4bW;=ZdC<me&zr&JDWVyiI1Db~301+b1YTAe;GiU^3f
z)-1Xetv5%bm!-MmMvQo|ylbOlqQ6tDa^oFg38}9nb&o{3Gva!a=#CF;oY&2_U!OrE
zR}uHV1VRn>uShPV5bRY&F`Jh~_Yozv<-T@-=J9oGK+T@*V^*~txPR9IgRQ;?Cny@|
zW<d_=K<M#y!5J6b+JL?cGj7Qj-l^`t5>ph&xzY|=y7C_BCm>2t2G?R`(V{fDW4@cw
z7^gjYf<o(+nFl%<#=gd|hMLmO;5^AZo#|&L^qPW>nV^wd2>XkXQ$0SxfhxkxM8FM9
zFatX9+dHrW9s$(=?cs=@rc2@Nhj$9(-x804tInwQyxAIWa`IUEdc!K$h8C|=@#pDW
zPvDQfeW8cZprIAlRKOv{0f4$&9(+M$pAf~`Wzoxn=poVhPfOwPd7k7FoGR2@V_ZR%
zmQc<w0(a&i+FRi=XVDHsK^onV2rCD!XU)1locS_2)kh_oPe}zYp}RaAPO0qCdU@FK
z#8VdmRO%5fPLR~|vWI7B=|bUj-=CT7s7rmyMJwQ1b&UMW)2RDcY=;DQMq<?Uq)kMC
zO*>G+c1X_eCfNol-})6Qt@<r>3u?iv0%3Nv1v2rq5R_i?mR31#c6X66FD4H%@ifqO
zJ*(<z%~B`e?Lhq0d^;>G6JNsuPK3s6mE+GWt$Va_bInoQc7pxx0^I3cWeXFf3zPV5
z05lFpZYY(go8;?tO#-O&PUG+vFx`?IuTL6>M-P#&H>YSzB_Ah|-Z1Ihc@Vd4C$KKw
zgm{!fdJr}tyIQCmgGX;5Uu{bI&N#%gdcc|`+7k9x6X{yynKYA&3%+Cs50S6eH3F|s
zk1O5VeflqUTE^!dvnr;Z7U|2M6i9)4Vj=kL5H#ywsxke}vHWtdy4;og&HK3JSGtFz
zYK4~nOI%0GvM`xbvkX}3*5l4-W%F6nHg056udj)w2Ce^Nf<Zn0l@_!vbNU}GEDI0_
z#=$igfsPU_qdW!s94lHX2PZSD3`xkjpNrC;ml1}R@;cOl;gwe?^51srQ{V&7^62HA
z@sa^KI3;}g_^rt*+fA8Gdy`L82zLRVY9H}LbFdzUPk12VSab3bki7ExAJcCD-?TT7
z&9CuOFYC30ORDzIhQln^Z!P#1#SAM}q78x+^^R*105zBL>mPDF<RJ&|eN=*jUIZWY
z$z@1J<hvxj7tFUXLWK}}6VE!tH7EG+JVH1R_(GiwrJ^n*T|rXAXsq9Vr=Q_uJaP4P
z8HFnQx1?x6gGOews^8$zzuk2qKxOMe+(5RZ6lOqFkQ5O~Dfn<r&aNqRisPdg>NiK;
zoYGI>IO2**jJWJHeLXIdSl;Nse!NyW&>Dh>TzP#*=!RGO-dzyKbF6V`1yTfDVcm<(
zCY1cei?r2ljzl6g4g<&Oy^i`6=IJCN>X$MEa@uGyE{ovq<HNosskB^9Rl-<Bl$Il%
z+0E^Q+!&r|(P@4kjyxrHO5(qgVH=8@0X}%IB&|YtE|B-2nDQgU19Qf(fPAc5R*B=+
z)`g4N?+~&66>TVMSWpDxMhi(0^k#{uQitDsiy0|SgjT!(Hp@2!C=QhL2PyZ3)h{@C
zUyyQd$?h`6hLvsYg!%DVPgxc8=0A(-KI_sZ%mBX3=!HATuDgh`xd8c=h|Xa)N&%54
z1hFrpW&`@nkVJ0nC*X>F0|G|iW+~uNc)^HDQD$F<6})bFCDh?AaTz4UQ`n6^K|GlE
zT&0v=89-d~K&lb%Uk$U9H&-&u2BhOYHm+oMMLnGMdZ*Qa6hD<I`Su@`g_T7C*?{u9
zn<39#kd{K((gEfqU*i4SUysK9FV$Y|WBut$U&7y@!u+obXh#SOVUvm(`rU*-hS2aO
z;yvAVQg0rTE9H6=Ql#8vaRNsmLEdtd94|Y+WO&=(5Mz<O6dM@75Z|ZjqDx`)<xRh{
zRI%^C=)+7OIa-dBoIfV|9uS$!$s-q{+-d`LK5mY>n=T7r-`N7CY63q1iLel2(>pAG
zBv}brM&1t%jcXL!4WiGEjm72*N5C8FHcKpaQ7(OLF`as8OBf%W?DxSFa}!ff;W}4i
zH4PbkW^s|~y<(XAXU~7OK>OE(*!J#{KXm#m_=LD?4vTB%1jM1^aruH#|5}rP^(4jr
z(s0XR{}f+FH4jfKB~oyg&+l;f1zliCh^T5G-Vpe~T}*OPuix%f?Rh0)!~RiOZ-HCW
zLQ%jFirTYVXJuoDr09S?V5Fd@MOw75%b$v*YrndqoAm|K=7mC5+Vo+a6^-qT{d)hv
z_04Y9)*O*r_ZB5|)8)|~x}$?sxi`JXf%9X@FQUvIPzng>0=)==hpmQ1$3uZgFo$dR
zljs6O7rvK#HzH-e$!*IFrD*#`QSrvxk#bV`mPcgE{t{{9*p?{eneF3(Z;$(mDmDZ6
z{1=!d8xQZSVlH&Yc=+L1&RKB0B>(T&W%&$*uddHoTZtCF{egt`z^<&Ik*|0U(=*+e
zp-EOJK3ktC0o33Cq{ILg%!Dny{H3u+#+&Yb7uVN?8R|Yy4?0|%0qb{~^*DOLCcm;B
z-E9K5TC%NfykX5j4vw<C@=|3Kcn?E+Z$^ta5jkfXfF?OUT8<DQb+3S_ttu2x1KOY%
zrc(6jOd~jCrkyXLFgf@?2Eo!?)nGMoSx<Tk9<$kzMys}4G?btMgy3K2d;zNP$k2J|
zU2b^WUk_dAKTCxyny?xG6w?-gO6@XM=F+qhL2^YlrZNxwFl0M5O~=nl3@R<4_E_MK
zDxg8wk~5K7!xf>US3apBw==Z5w$bwr+ew)5KxADqHfgDkR4P)Zu;Y6=_%cs;BNP&#
zotAP(dEM3N_A?sXEojR1#7VPSiPc;u6k`J7>$VVEy9Vs^1X}*bPX4Ki%5k<LKE|$E
zDY)KSm(uczG2Fg!cJ&J3^}i<;;Ty*wsWhB}(%4Y|yI+c_w2)EMMu2bn?8SFKYCKKs
zd*4pWUdh#HBf#^T&AC3F&?h2Na^x;{CSS9eevcTQ&r^j7HEHTwXJbJpL!0fQ+1jxK
zngHr_l=N6YX#|S7_d5g}tfH^k`UffXzIoDl>-c1$y;Tc~i9#kM_(#Wt_C?f<2Kl>)
zBwByHwhg6Dw4-uT)7~I7jE|}v_j6}5V@k4$8l=$gM;fBhN;qc0*|pG%+y(oC05d?$
zzld>@zxc1TPH$zRed1`1XIDLcPGrKA{u;Nk2_lF#Va;i5xtkhV;4ntju<6x<GI$`6
zLE}t(i}rkMk69oeMJtoAO23BOXP5U-)rK63TKv<LBK5{Hiil6Y$xYySS=3}ffc|yA
zNK5_}<nD(k9W^Co4ezE_g^@=gPF+E`LX@OoD7&o!RCS%H6>o@?W$FV=4@EeN+jseX
zmj8PJ<fQr|k4U*zRq<sf$c$q}J~m<Od{tE!yrv6SO0$|3_%yC9yC*uT*I8seA?+bX
z+qtSBz9J#Pwbr{jX!>{)aaZJgYm6FMz{-(Z&v!4GJizG7;Q8P=nx`P}@>=*5>;$Uj
zho`zB5$g;kbj>^7M*+3<^K?_hJkr32Rf#*;J)U{}#qnG48?Gc%kvjm0$}CVBS`(XZ
z)G;IgqI|~mV@C{M*Hr7OH|m_V$5r6#fF}yiV>g@vG|MZ^RoF1Il<J^^DT5}Kefm^@
zni**_odY7@lL0Wycctt0$pQ-ZhX$^iP#9wj@M)R<{4r^+7V7@6GP8kLVcu!rrlSq1
z07+6Kq?37m@UI`9vwUF^+>`H(Xa)ccEe`KEi2Ae@4?xcD6<>4~Gy`7x_Xi~e+;5ET
z><|*Ttph#t75vAVKjpAeJ~yJe^5X%#A($Wp_6+v(8O}Ixrr`>t$hxzj-UtnO-4h-l
zaC<*WkVQmL#jR3wDoO^h;&DbWFcnPU<zg6LSehtz7o=vh;7_OGy9$!iXAZH2o&`Wu
zTsVdU0pt$g!P5*G#p#mbiw=Wk02<|v${zzoer`fd9{O2s^r${ao&rIOobARYlP%1V
z$tUl;1T4z!8M#=NQ4hi?W>A+omrz-<xv;}%sP(&2bPBm;sy|F{YFxC+t-*A<UX!T1
zpI^(Niq~^h<Na|(eg3ebTSe%Vh%S3QjGTjOGhQL6y_#SnK;)J{9nRz<;0J<vpOc<)
z1?qGrT~Whc?Oo%9Q-OphhHxnYj$CBpR8S;@nao0pk*gG`xh4up)C8r-akWUvQRSr_
z8OywWv8axfj{okJ@Mqg5@z)>X;lBTLiGQ_iH2nIPH07Ur51Rb*T{PVLuQvAg)=eOk
zmni6l3jLWb>xrZWD?@KQkrrt83yYxJLnDZ205sAJKop2=q+ouK;5hw_T*l*REUB*@
zunQL?aMgJ**!bg7dd7)F_YK^Jyq=PHy-w0QbzCvofEMv@M}QgRPfFa3m=gSWH8HMz
z$=1?CQAfWlxt2gAS1g~xOiQ@+m|OL1$`vNmFZuL8z0loIWhguOm|6^--8nmlfpIYM
z^^TbPw=)9n-L}%r?rOlCf{lK8`t{flVGvT-;r()9vihQ=;!Q(AA!y5Yre=;0(=-gW
zecC=%$m}tjuV3znu95l#k+V>rXzWxngc<3DEqBbZ1JUBQuoengSGxH%du*MAL5XDD
zDJN|Hpt0tE*c8=D(6oRY!Ax_6Y~%H~*rd_b+GzSsp4@U!*X(#E+PUO_B(^&dVNOcN
z3jWXTA{*i`i-_Y5xasEc)6NIdX*nQ*M%iaOqlsy|dY~`}4cBURxs&!}mjk<c_@KQ%
zN62#7w5_i4Ef;rK?wEvx<btD<HcT?#P&`(mSF@zfpfi{PNN18Y=Oozk=(-RWG%6@;
zPpoh+8l-aCvurE2e_?JZ^KmKc1AN(d<haQi!0or{$Pr&}n+*pbTRNl}ZNJ5$Rsk$B
z>qE)NQm<CtkfVHko{Uuj92sJk{-qSqNE=(6PyaVlvYpM(!1gi-c#rP()|>YF$m#d3
zdh*@7_2mC*J$<C*PlaAzpO5a;H%Cs9>^j`~UaniayU+D&^VO-To6TPYU46+u*i*Ia
zrpwo^PM1158PNL`Y@VpDUqPtf@zGB+cb^Q2Kx_5b#Lch5Z-rlFo0S0C1`lFkaH%4n
z4sd!76_zcC3&_>nldiSD@9vx$PgVW;WE@A~Ew1U2D}ie4@;N*CvINU0c9^))Re4<#
zR^e-cxMRYaVCCA3@183*^Qi=%NLKS)$I2J~COk?1@I3b-A9WM4YasSmRQ-NvXVtrd
z^ti{OOs&-kT(*qF@<?~K<&u)MANps#e|<-mQ5@gq$%x7_<=IxesSZ``vnoBBBoRY4
zTtI}_A|trntHM_U$%(OQFiKLLO#*@A|M^*)f^q@t%K7~Fo1+O`A!lq+n>&m8;oC?<
zgrrflOqR?G-)gb*k*}-;rurIJ7SBt9+_c3L(IcmQQjh<n49%gC)oZEtHgccJ1y&i;
zRH5Y(D|vLYOhTsywQ;ImFu%cy#dmUY<VGSdAms6VX)pf{xhIy2yvG9CORlDAtv`0a
z65mBLq&gY79fZ!Xj!+Yq<z^yD_iR0|J-g>z4b;NjI1fTef6i8R&kpldA4sF~^y8~~
zVu?5qT361Z3U&1J7K!(*N$2(r(H0X}v_FQ7O8X?tcFisrpr2MVWM-7(5`$UNws&en
z*-91r%#;6HT)oyj_E=POPeytgSA%XoUU6L{5m?rIwpnOq<=`DArJ^;P(?nEdI%u{Q
zTx(E`uZT-rAZ+{`@g6J4ALcc0CQ}l^!Y!GzI(OfFT}(ZiBl5O5DcV+=^QtXBYb@?8
z*Pm*AZpCU6$-G{kC6lqqXlhy9f+0Kk8P%I@7I$Xd0QY%ST$h37^|q#>c%L^XEpE?g
z55k{Ig~xenaoc*{iZrjX`qVYAFXVBbH#0Mm*<#Yw45o{@3k?}*46VY;JZqWTm!Ca(
z79dPdMuyto(?x{ltgR4b0`%ngG#3V&4*4ZMhhES$4;J3@&x@RaabDA8`VcTl@nT11
zjeb1e<0w<EhI;s#s=)j>wxSF<l{wF66wg@GGt4u^8E^EAbV>jKLHGSX{krg>Q@xab
z>~*tdnSG4<KO@=UcFB5;{zp!)g@8(d_wg0{9_Dn6a?e0;%)O~k`+h5@M|M!g@y`N}
z_M<(Y_Wo8*?aLW2ID7PIg`kHq?Opocl{GHqB^KAi|Cc2OW$KD=eo-R8f2-0fjgKS`
zJPg>JTXrnE=WJ1v)osOBL8XdW+~TCR;FAR-<1*Hmt8&(fdA-15gzpDcfI7!uR!b4B
zr^5#*r$ALN*~<M*);ptd@&8UR$RabAjesH)mQc7wWS`8~`PqJz9<2|3*<OQ!n&f|_
z>E@}{oZMm5q<e)z>^lBP7|~%oPoxaoc-%vdSSeT{QRZGh%JiB{o`2&??%nK4-QO%z
zsv|wQ|5c1fl&F(O!f7clwZBF=p4ud!(jnpB0B`gTIyC$rC+3~qDYSG>29%Zi>T(G^
zq`=T-8zmI#ZS617M#GCeSkD;pH%G%=Ln@;kdl9`JmbN)f<j}qtw>Az*$FyA|wmrfd
zm?pN)=x3llG(e8!|M+*%_47aQY@=q=vli&+IH5jjrbL$Nw^*6ieg%n`@)HIIDKU?^
z5o2xx!UN#mR5$S@{z>unxAEOTkM2|eZl?2LthYbK07&%4_&ph3CIDg(i|@_ie086z
z>#b-O7rK8a=}89pEI77%f_LF(*Mnv<(c|g}5d2IL4MJtXbkEqyG7~{m!Q&5|2oRaP
zMPVHX5HSjJmUWj`kn@;=jS8&zBo&>Ev+nWg+aFi5kwMqiBSmIO^s-QZ%f1?mUWmgk
zZ>AUEfaSZNAC7%VcGc`w%LR|8<o4|D2}t<!<MFR)C2zS)d@*drv;H(pw2t+Vt59Qu
zWp4*ku~8c6d5&xr6ZS;R`6v*6&=)@jQp<U<)v4>Bfz-VCG+q95)NJZ*_w{{NU?cwe
zUxQLBz}x$C^unJZmQBPJtfy;yod{kJ1nD&={x~NJPqx`sT^Xp$^E{6(x6tWOGIXUu
z=F*2lzr436^?5iDkN*1`e3j~8a^`3{Kjo&j$f~RWa2XptF!G17<C(b>x{aH2V((rl
zIrYB}sIBjTUO-|Nj77~~#`doVDfFeeq^Z~b{L3cqHMunM{{T%xT{9Bmn_F*XZ?5Ch
zWh$^QiH*o0`Wpla4c=iE@kDK<^tNyDM1n*GmQmIi9=tO#Bx$I*W(+AUl8O4KY(%EO
z;Q<^uVuzC$FI7-CYlQm&acz_-S8Qv2C`B0YaJV(j`9ung(CBx(<&THmd749owfT@~
zsg?$0Jv`{Uva98;D4SoMRPLBw@P(+m?v<ISp2Vut&~i75DtscIEIk}vD><S{d7?A#
z){++HqX3c;{Y|-Du64XlT^(8}j;3DWZAXD0|H1i;p)vO|e$P3kefwlO|CI%V$BN*{
zgNC&YzhzHGOD<jZK-`{vy7Ea|>D7dT%|Hmfgw4clkx;&^)oZNj#cxiIeqBd<C#m1J
z9yt|$EV>M{s*?6A_Qzj>FzE#g?o95;I&ZzE(MFu*J?{2$XKw?yshckCBb=-f&+yE$
z2rr?g0;Y#HU0SBSnXNbcRF<z}%Qcp$Hr$xiz&gpXmyXOQ%(2GdPG;yh9PKsAxYNYN
zh-Y8)V4zqmq^*<5c8sa_yhb?gNidT#%%5{o<}DH(`Y{X|!b;+xb!lE+7a!H{b*-fL
znCx{E&!8*0BNl)7_UrC8Vut-`5)nC*#0oGsnmBoH4gOLM)HczE*1KeEGyl%upIX67
zY3Ha<fctx=w7YTX+~qg4rTT`9sT?D~O4Hj6C-^&d#HRDCFqr`}mK{wLsw1*wjo$I!
z-OljN74!;GN<^E-F-)F!uHXB#=JD?5?pVx@j0Xy{X@K&eJZeD%7@Gj&taq<Wq5l5q
zcMSk0dV87WQfIALA-9BrCEGs8$<#ex^!s^_T;)d|DKT~hg*FHgIsPZoRpxBvM6;0#
z7TUl>r~re(!kENgS_WRwK5a4uW9aX{DDtBTeNHC0ncxMy)7-;9f)c*@zzVf#yqR&Y
zId>inUX#n~kXphQMvCQw6Z&H6*(qXyQ=kyB7^jS73d>y4c|UsJed;2hOFs+)&@g?e
zFSs2rpH<dZK38F-Rl2u0qPPb}*B^~ci<lfPlDT$6v;bJ$y+-SXnT};AwxZG4mh!h6
z40+1@rg||`a>+v07dC4*Rn@LUcru7-To0_J1|X#kV^j-L+iqu+MKww#()^uZ@h|Mb
zS-BMzPSUZPo?s3Wb9Hu#n*fS=v0@+B_|%~TeZs9BoH2!0Zz{a%tJ3fw9-(L>ukSm)
z9y%seA_nD|!pU>N762-}@DR<BfQe(<I_W#JJ`iD}x|VZ=NartX(}DvTLMpQSm*le^
zr1{|g<GE)4#PL5FGOBwe*8tm0;p2?v=My;&>X=_X-HmJ6uBW?-Of2N1kL$g+2-KuE
z1}?!lOMH2V%Ma-O)@dN*6+98r>C}>LcIZfojx{PDORgwmt!lX)La;fX49hQrC8tV^
zoB^Q~@}te2d>ak+i?x}bbnrvjpBlo^d~3dz)mac;;R{O80-E+0mROub28%2^L~#Ba
zLG7VMc@mFcs89fFZ0ir|+vw+{IEWXt*`*gURL*z0_<1mm{p<a%+hRMZe~KIOg2E=c
zjDq)-8#+TmCzuv4Ct;VL`sRI?>V1Gyd6ggAg=rwC>#<=J{Djrk`~wjJsZ?rq%D|TD
z8Dm2E=b}0>tGjVIapU<E5B;-wolVQ+b(38l-AWf`O*huAZFS~aU03rba!19`E=*$u
z-M~(uEKNPw9-hBHlD}R^Elw$?JbOtG=*D57CYM_Fg-<)^nJzAuSf3Fq%iq5OAN-1a
z4n&qrvUs+!r2~h#ar$H6ppUn{IF425*Fa6`k$iHzd^jWEf)d`o8C$m7D;NlBJR}J;
zNFJf6<?vL~aE%mrJor*F+5?{*@>bAP*e0O5c4qc6$W#HS<zXH%788Q<1o`hI)yR-q
zf=3uY$}|+^L;HqE12!2ecw36M%ohZj#Gtj&a&7%3t}*eAg1^nT4LJ+6Y%4)Jy#foE
z7%2i@OQR$ioA#H8Tt0yrOo|lFJdde~?l>@~_Z|CeKV|^A*et7AZoj@UEw|xCIGCSW
zIaqYZ!R)_ob{MS?Oq3+hxb0Dyf3;b+M!~}}n$rO>V7~0$Ot@Hv8e!BMotF`}N}(L+
zX(a<%!S_8Q{m(2C%Q_F{D_b9Pez|myZ1laE)6vp>vC;Qv9vm+%bdA1l=b_)BV%6kK
z&KIdWmAr2+JEDK`VaFe5yVmxh3p|cA+lgFz<4oS>oSu*&tFJ2cJDf{=7c)V_K)A$E
z{tdfbHTQ?ZO+82ae{jn|<YIaB*`JMn;ko!dn-Jadq>DLv_4UaY8;)#C{GJ{NdnLfJ
zMT3)hwb)nOj}O>`S3`IipJej=Y`Ip9_;l@;n+dt<KTf{sqgoePDD}o;a;dQAV69&n
zR3cL;E|y0f6{(Mh*3=0;lhyfM5dlw#e<1%Esd9+RJa%57l|4GJ%T_l{t{)l(V;20A
zi)SRaW&Q0gHu7hCb*UmY*e3ON^liAteOIS*sj|1aUS7viV7(lRuD0G&HG1%44#N3f
zvn9$5$+rEcb($-0Md6m9LGyE0>c)A*Q^c!K(8@^xLD5PAiK4Sz6!=iqzU?}pr)^EV
zexsrWV4-%Y5Z+%5^bz5t*2Yyg<ck1z4HHvq<B3bR83~k%;d**KcqVKIYSxOq5tIE-
zj2~Ny-?P*wcbj*@Ucdy&n$EXAoFlT<PL&!W@1mnylL2e$^~9>>E%BGe`_^pR_|J{S
zcF4RRvzm_+TJssgYQ;}&swzI?esARG;HzP)I?}!p?%=ZLMYr93y!7<!CHPAG#i%*@
z!5)c^SBm1{d%Hl_@uS6A;iws$q%XFUs0~OA&VZV|?>htVTX*31Y{zcYzjAN$W18ak
zOfnn`7$Dqw&bWAhHC%wA>q1k96ZF3_dTO(=?Q^-CaMy++<OED!70xuy$2r0kkNv;l
zO0rXHmVyFVAEaJh`PJc$v-&b#Ggxu(t8ACX;Of^jG{1`;9QnH3>Q8agh1ah!P162Z
zpjHpOjXdKOtZCm$|GvZ=%sE*((=bh*y}dE#5ck$uU)PqO(4gQl=Jozf@WBlLGh7BP
z0}6vc=;CCbW=!NEIO@2t=6ok5px}*@CnxymQ7QhGg{$=u(^OSmT6rh+U;z{ZaqSat
zm05=alS`CM)eSF*v6A<U|75jhL#5&#e~9W>R6}Pna|>`{#>_IENlN#sTlNpV)1dF4
z?Yb8SGuOg`L2DVa3>CQW@w1x$oH>dhWOK#@?V6&W<BrD%MAig9#P<uSrbj#N>Gk)0
zp@u#-jwC^ZQ;{x$y|w;YeYBE)yS}jM)!`De7fSms{~kON3}2tMAqw>J<m!X>!MgS6
z>VEBm-OadM8mT!lCkgecL&^&HxbZ;e8LTCJHnn9=gSir7i^uaBEOEXE-mN4Y_V>BX
z_8`n}XZT2-yOUT5)pG>gouzllV55Vka?GSzt$Eq)!q>HWX$xvK?ysbUerBygX~}t#
zNs@?94|L>ple}u$`Cs?|i7+aX#X01j;Z|TJpV)sl@3+TQvF1|9<4)fU2W-sX>V)~}
zRy8d458jV1bp*EN=gc`*QK^;~V1uG5uuJf#b|AeTAJ1nM7qavBblhVb_>sj#pj?xf
zpWS|2f=S;epXF*WN5IcY#=psxo5a?oC?|TbL(|Pxe}b%af869<>_7~kv^fgo0aBBh
zpKVX&C2IG3N4AFYIg)8&Y@Ih?BH95b>;;gF8L{+IhhUE&HMYmcFt#wXfY=pX=yj|%
z-`5p;m{b=1A4H$;T5X9IWXb@A0fZ|ThB{o7D;as&G-8wcE4c@z+x1?56%?~*Cj51W
z)+~fX^}Q3YG!{hu`m`TaaMJ!Td=s-{gP>U)7v#Z$nCX5VQ)ImRvsou%hB_@zu8b%G
z4BQ|G=#>>qHstnbbo@6bX}6b&jTg!=N6M{U_+~**WTT+maQ8VlBy2AHcemr&bzA^s
zmhTEjvl0(UH0FY=dDWTDfPr5$3+pjQM$5*YYI^$s7{H)sbzz4(ZSStwJor$8oV-nO
ziuxi!cdkDJE}8rXVXrMX)nb+x7v@7~-cS=B`>AikR`%+uV=bnxn9vQTA@rwlnk{{y
z61=HZxKHs)Y<Yig#aNoX1B8PPRbAz+!3||q{RvBR*HssMi6oJpYShh7Z$KnyMr3@d
z!%N!royoe9=7-+2CI&svEbo&-+w;syK!WbBAlETb@FX9#JdEzWd5%(FB#LGb2NMT$
zwPKI7>W%ur_^HgYY}FRpoSnd}=3g=gel+Ot$<aJpUa#H0+k9mQ4kx&c_Xu=MN3ByE
z<7$h59O3snt2(s%Hx!|#Y#eWTkW4Gc&IW##oW{a}N_fy|y=MaU$gF`;P?1z&b*IYn
zfdop-!uPc-AFJmfsu?3h_ksCX7@zYuw}J?(H0c<7iQPEebj3fGdvEg~>>n$}8P11J
zFFaD6u$No{KV6}tNLLd=JKA4ni4QURkam%*={%fr2!O<2T+n8>wKD8uWSpfPA<ql9
z<5Vxhs^kr{Ue>Ptl)M)8(~-;u+x9)=OY<vxFRj04vjjquAuOUwq?CMf_-%LQWG4D7
ztoeElcQYe?-dcr=4J6ihsyY8njPDzXAMsfX6IhYaGEw(U1kuO6)lP_xTMns@n|3&5
z1^K5U-PNt2IRC#(L@)wc{@k}RBlGr!j=HY{jQ-mj(ty~`3bJ>A-hdwFrFP%e3l{7*
zQ;vuf6;Uoh9s?sQC2scJYUdST8&$NTxWxs{_<*r5u<)mLy`Cd*(F*dUN|j7c!ne*a
zljo|f=)T7pZ$g1KVO1i$Ny=AAi|kiPD-UFn_`rcP^U{%wj4Q6p$Uh>$M3acK3=V(`
zf*nA8K{rEcBS!CC?63TMZvzOV`Kn(HT4U9~Wqr=_#NHC%niIa(`8|oTag6BEC!9am
z0UAFAZ(4gg3}iiFhq1o?<Dir}u7dBD^8%Sr7ss?!o;VxufBQ<-X@4;Q!+ALC|L6QN
zf^M_-W1y6Wni^GUdhr>LaN1pb1T~UN%9P_OeMHGcvooQlbzpA`>J*6^KWp0W_|tNX
zaoQk@A3&Iv=IW`tR&yM0fMZXae_GO}6E%^5(fm{Ii5yfp%4w>B`L@~A+R({<k#jfN
zEvvKJNkU^aFjj%Nx(sP!YeD4fv49B@_-Eqjv_6@A$uKgMd7#k3P)oZx!qyH@7`vsS
zo~#PFnR!*bI|ulR`2+_sB>7+yRFb#+YWx@=7dYtpGY}W3x^HWt<4M*&+V9|VvFfef
zOeseQjF|F=jnx(^`8piTroGM=DQWpUr9jnp-kXqyr9P~;X8-en_mxvlkHZ`pXFT*i
zZptL=&?L-SI|&eiy0waF3rQ{!A9qZ9QuZtJZQ5aQ7X*D3xs^{*tuibIDql-t$2SQb
z`8pz^xlj$dFPUmCZduPGAUIF_Ph{VOIkXT5x?u$_PCs-WtIK+E2EY#$^|adxu}-*z
z7=cVhC1x`~qih%Ej*r)!@JV0V)r;)5{`^$u75QB)9l)x14V6fviClQ|*aD1Ahe2{3
zzhTuD7_t$WL1w_lS!*?1a31t)41A3;BwU4;)jd(OJ_+Bwj~iPD=_UbfPy&XMH-?~>
z+_HX34^%hHRf{(S^sfZ4&FOO$n+!nG)AiJye)3bLPBzaB#Iwwus7dZfN8{XHaue(D
zeY0)Wd^Gn32EX;$a+n)%?mWlmk@c6Q*hp(e&4L^`y>q<9oo90AHOjf2ZqdzoMt5E+
zn)b9LvpcXht3~dvbLYL3>YX8MkqWV}G}zI81`MB{SQUJ4R8xgTzvtkHmISA_QTmT>
zH;kz9k>O#-uG_nqBYka)8f0+n7aIo^uV>F3pTRHz`A}+=$DGa24ryzSUKB>x2cA+P
zQ(I1ZWbO<+kDJ$Xc)j`aN=ocM>qF97rCkL|!?LO|i>`LqOA6^HT2qOdy&5@N=fhmX
zCeH)YYpd7R=N`qW?;>q_oyXYS89+`%G@+mg(0YRp?n5~Hk=CV<P4uqx^z@GXNgE0s
z825Y#lo~FZePuc~2rF8fzrA;Eb7Y=-Lr=kg1pH7{<jwCdAq(ThU0Oi+S~?FF+etk9
zXoMbQe+DC3x#`@tJdhk;*AX(v?K$*%2`=TWql2rGzT(%qr9S&B+S!T9M`D2%nZ8+1
zRj_?$j$rh2WLAbo?1!@LdqK#+JWwc9NQ{W%6_;@sk8fXB`o6AX+f!Bi3`74EdO?C@
z=o=nCd38$%Du4C^8Pd<c-$cQqME54mjy|wq!-D$_JMjsk&CgC-CJ6nRmXFDul4opG
z@L<aK-#>SSQYmpRqN;5Qp!`&uymkwK`_}S2mFx0nre%@>`2{t!A#e2RInINdrmy#H
zK>g>a@joXSA32Tl4oZ(i1aRYtU-vir`&($}0Mjn8{bcd)R23Xu4Hh5=;tXWu9K{hp
z8}Z+)Bd7o!^~YtMITa&gNf8Fn<U-3!u0qE_=dx`cgA^hUFsN^t?B*dv0)Y?Z(f~OC
zuxDCy4v&!;&Cwzh(93p=u)lc8J;VacEP)DQ9thPEUIe<ZQlH9=nd_okR0a$kA(3-4
z;}FOJIJGTql8j_HR}#W3)tjI2m!a7Y7&?NCQMeQrfxn^yl&hPAsX3Mex?2sb3I7F<
z;2JP%OoCDW4xKe{(F)kjo1h&(X=pSBhV~!3bScaN(9yd!I)g6A37c^;*hjARY9s~$
zj0tTIBo40}NPeH40U#CGLnsaAr_Wqsm7ml(6W3in0#Gb{jJW|5Mm*BOVOPB5UC+~Y
zZCD-$I@`!<p{J}4KmZ(MrswLI-$y+Ul3Dkc#`XBAL=Oz$XC!5*xN8~rgYaGdL_fW<
z-d*BQ<<@VpXm;`Db<rCF%^mm@{a>sQ3?9P_T^LZ7?;TGpTd{~7%@=_=+wcl3wNVl(
z!MI8RVEb=eVUl1TL&YCK_1#YhB5#U2eTrLOejig)v=WHVMeGuWK?k~ilPZmm@{OFj
z*6ZUvsHv3WzE?998M!<j$|Si$`r$T*#p!4)B+2!=#m;y>*N@hM1>knlk#->W&A+$2
zneM<<&b}gfKgBY9i4cZ|r!NDQ7<~(t_Kdsvvh{ni;xn@SEB*X}5a#0&EWt7W6_;_g
zCQFwja_WN%3D`{|CR<drMLw69>2WJO_J(ba5I0>LM7^RH%OfYe9XW^P_#+vNV{h)v
zFz7FR>-f{&I(9VBpLpx_3%c4wpR)+hUFKPe5DCqK`3zTh@&uqOu8=)&_K&;tCd)>8
zVRyeE&prqN<t+G_3<t#!AlB^WrWFrF%v$YzaXJIVGf4l&mJ0XQ1#%-O!w|KQL5_a<
z5zoW8kLNUy$?NIa{fkd1-G@=Mk3K5LpV}F?t)~!E=oip4Up<;MFBEG38OfL;`t)2r
z2O`y;;2+C?J)6!b*a7=&9ox2^066uw2Yw^+#kHIJ2e`4ZdH*ZI#qqXZ2DPv+`}b47
znAt>FxZViaGe~O9U`$pTng!4^XR`i%NwLo+Qf2JXnmo{DW?8a~-igHQ_QZdW&CC|$
z*sfDRVLX)L;g|s1!9R=qxf0&u_rWUAM(reMgU|$0u9y|{UpFWR9GSo3Z%=D%xudyY
z@>AMF*5l?(fBkYe7?}5jk3X+bQQFMbvtpI+aQgCCs^D%bnFm9gIq1BPqsfFm{~uT@
zkeE8Rn99nZ^NmAt_Huxw0_!)cu^l4plzpod?DXWtEDHgoc*DBnjOGbe`GLtTUaIpl
zf(#&#T@J$Aw+6=L!1vVzZ}0<|BTBIj?-&Svy%)dct73PLH=PCbLQ8>aES*e{Z}#zr
zKto7_WLt|OI2A;Y_1jdyto?N|X<Opl$v;PTt#3K3kk3<5o%VPDk_wgK3dDEJEM)I0
z#lP>_G;OW7c|!uo7I!NZor<yoICF7IzuZ@Og9n42&7yv8Cv-ZJ0X(;kP)5Yx%ICC3
zS|q1agddiE8*>gxg{V<DcU=D1dWoJgbgzxkl>Xya?8og?ItHgju4=r@7tgz%5v>{F
zGY#N4w{-2464WXA!pbVL=TlhLxq@Oa$y<?W<45@w#PgkB!fz3#MV?J%jrS3`>*q<z
z1^LAXwCLH0iS{};IX7e!d5NHM>(EBPr9A;u6`y`7hU5;H6MG-++BW|(_<+O=eE{ma
z^Hau-HBZJKPi0;#=lE8wA6uD*YH_hEspAPc_4^Vg|L6D#U%J!#rkvgILmSXEyYERo
zAr^kG%)W05-^1%wvKYHlLl`0Bez3M*^TxeV^+QT)(MHP7<^NAoCx(RB@sFcZ`-cQe
zoQfQGt}obt(bF@B_89;AV;+c#KVdJMfAg*M_yg*)OsOh9VMl(Xep=j(leTZo69-<r
zsVMx_h1}S&8o~%a#of|grOrLgyhXz3ME~g}yQxeR<$fAJxe**Q6n1L>Q%%NW*Y1;y
zU0hQe6uo9sMHm>wT<<|>yn00fJ>a!TIiFzhgkad8A>Wkx{nzo%G5^o5dKTM{hbhuL
zI<bfNEbph$IPkbf&-XV@60_4A$HT|0**s7*pxf2r#h;xrUCV7SIcd8Ye-#{B(H8Id
zd&Wm~twIWR8H4oG(B^V^uZ)K_-2Blx1=P;-2f#GdKAUsWkHU{`Z-w6jdn5YV%sb<}
za2zi@fB8#Er#GG1Ro^V7SH->GKlbDHO-Z(Y4~Fyhn9ROZe-`55L~5O+e~11liZnZm
z@nZgX7(~jQ#T-<9zJ;t`uU=1-+~A7>%HbQEWCN-9iY85oDI4fv!%?Qwx*}>D?GW)l
zGCRRuGrr?CiW?UmV3AlQw9I)>aVAE|o1zPDiASY>O783v_J0o&{*1B+?INf|IlEmH
z_Ue3+(*{5J-DJJD-b1sf3jA}C<74{wNyaW26CF#}ZuHL*H2VnZD?33CdTmDaJ5hi5
zI*!T-Op*4{$)M(r;=tn{4QQL3*ldl;mr{Ar&+CL;)wG-3OukzXAq5eW>Zef;MG=$u
zKmR>}$j_q5zrGFy!Cq8LYlv_S(`KdmB8y(viG0b?-6$^Hh!i_Y|At7nale%H;}KD>
zSFJZHzk%lJb&3t54$r9*?_>jU_Z20&P$Q~Y)C^tL+c`k8Gk@PRtf&s<JlI6w<m`4n
zsE8q_4KmILKsr6yhE!@ezanU&hKRV;$=vAcI!xmK(PfpW2hoivx<cYYaz!<zqX&og
z)}w2cfu5*Mw0LdZ)uT+7{>=L)P63J}QsC6rb+mVLQJ7NS1UrBzAhV79vq=`zptE?&
z$PlCMUJCn{6`Ae4;$Uh_UsQQ!&?ay@WE0(A5IN$oC~_A5Lx-K<0LuSwhECcE-o%Qt
zB{qFiB8<!hO<JL5f|+b*5ZAslj&WWBu5MEOX$TNRibb9NPLy@))#)vj+yLQ@rzjMx
z5uwv2_;>Bx97?*-Qq`v=ofaaBkh#&9YnXl|axj12Z&gwCxlSfg-*BViiYk9>*RbRi
zks$muh#omgqs42DUj(GXoOx~Ln65}7XTIt?7f@u8{>&fK&LI>hsy}qzF&5di@)dys
z)1Sunw8d!ulwj^zIIn?fz2e%IDTOLj>~ih3E$f-Axq1K4;a|;)w1^Co7?DM4JgUAK
zb`Zf#v)dy499G$4wrxwaw&5|0%e!$g`tAxMgs6K`?dVY={54irkH0R+Aa3WJ`n39K
zxho=!&G}i%yyS$kE>plfe7bQVJpU3^>@AhtNWtS))GBV1sMIROi0Tspx^loPfbLg$
zaWxI)t9}~z?^bnR33`mv@)eY)KuiMo@GO_IxCHzH%uA-m{-aK22DC0PhCz7}QaS7a
z?kHSER)b#}RHYeyr;I*%b4ast*z>i_ROm5gj`aVIL14z${FU_rYSsRGBPO1d>O&ur
z;31yy<@kEA^{FS}4p5+7UVAHF*GIcrpCvo~emh;CLk^;wtnZhjVLTe%D}@0{fx`bJ
zh|xEJdJ6WG8oGkQ959K)2Pb|KnC_-CrN((7VGe{8&IddH8tg0U0xu3=nwplMeu91A
zb~JUOh%PorIq0Z6v_(YR1NWn$T}doa@VCd`E4@X?%NW#<KZZR|gpOL|k49hgtR<B2
zA{Qai=u0*o=pc_pztE_MHgiD5m}2tdw400`9oJ!X*xMO$n2f(kua@hysY17;qj4Y8
za92Y)xmIbyFJ}7mwb&@Of~VSxGkgvfXr^d4Bx<-k75{@!GnWSfy6vA+8ItKv3rjPN
zM9=v`NSo83Imn_r8X3E|Kj@jEG#2mxTU1eBGFOkrC69Z9_QZI(%3s|A^jw)563~(o
z(Y>FlCjN5}Q-BI4-XQ=7!xBfSWZXGg;x<wQ6bvmnial{eMN7H;*J`%osg2fDI)wBB
zAZ6XhCzEG_D(yGt8b|L3Rg|+GImTg)y{*O=L9b5z-J$IPu!&D;$&oL$vrnUDgdd^a
z1(>F#2gkZhiTSKnn{uVQqB(#R(i@--gCk{EwmL&7e^5_7U&9>9iHQT76O&0VI>vXu
z0-(|^AwtN5l;IC6w=V$V1jGm9q!vP&65ICnZUvnn`hS2>#3zaJbqodP8$7EqcDmHa
zb(x@J$ZsdZvF0cMXlaizT4*=0fRTCUiV2bSPb+h3IuEn_@(gMP{al@f?<`CLP=0N}
zGoTs1CF_cLNO*8Y94kN`9mv_%1hss^DlIny)rt?9QVVI_osZ+_^?5RoHu94Fkd1L1
z4GFkYI%(`D-y1NDcpLqNfyxCf1y{iD708b(#jp2bh-iksH!8+z|ID00Q(-e^53(rU
zJ@|<Zt~;}NQ}J$4FQjB`6^~fBVnU%sX6r|wkZX;462Ow>c?&V-sZMdA&{$hU76^aP
zFKzg)Sr0*|@vIQ(Qy85r6-LUOxqIDO7F=;G69QNgddhlxGzi4Pd50R!6c48!lo9sh
z9B`rx5KV7W^?kuY48(vkh{eFc%ldx+76lic6t%NErKq}xnpgvoQpVL9d>H%SR`Lz_
zZ`q~vywr*&ko$;}&C-)jyd3L^(~n(eRd8wl0035JK7AV#tWTQY_YXo29mC(mm0Q$q
zM%GA6O<hkZ`0aa41J(|?oNmYa1k$_O%sBBKi5R|?QUbnnEjSS##X=Fq_dR5AK88?Z
zNXNW!j5HbLmOhsHp@Q*n#GMeyih?JyDJC!_tW;h`l!oWK6sHIk1E&cGduH&?rIK{)
z68b-M$%%OW5$!Zumvt*lRCTJNg0jze$-DuQYOi!g+#2iqsNKNqC;Q`dqHfLspT{s!
zTs}E(-?ZlYc^kb$h_;}^kzLFz(F!Oo&_u~`-tiBp0L2H8q+RU&qOSByI?<~JRh>ga
z`b`PeFQ&j=sb5V5SxsbOX%$*sV1fVmr3uurl`|4f&FV7Ti*~blqcI2%oDd}^XE{+!
zrMm^;oW>OeVAaaHE*NE0S(yw*F(yZ@Skni+40rLp52MoG*U>+9>@gj$>BJp6`IR!>
z(5J8Jv$tB=CFMM*)3;1J^B6!2eHlApvv}*a=PQQ?aoUBI+XF6wJ(^OSJx{I7DqGHO
zri8{V+C3b-!7`WKb~fdhR~CNexi^?fXu~(V!b1R<`OMZVn20o6_-}raqNo7kbO2tG
zk4;&y>7SN4ha-O<ox2d%3xoPFo`zj(_zWPTU!~vWtVTaLVq?a)r9hOq$JOl&XMcT4
z1+X<QWb+fFW-Q?cI50m9b_63rC0rDG;gawxTo@k01>rBaH2ed@LnB-qn)l9&wMhrE
zR;|xZ(+d0#KNJytx*u8;`*G6pmc)yB3u8~-g4mR|G*+J<p0_v-FfYwKh>&c)+S$==
zM(bc_3O2Ua7RQpXp}2I0n+w%JmyF%BhpQ&Pbg)rdUxr)xcDr~O-z=`FJ4`CWgF`9E
zdG_Y!Fw!9B738wsjWVfQ+n>Z{tko?;a+_t+bk={mw6vF2v~{|%dhHs#eY>Vr3+dip
zAolw{i*72~{I1_Z?At?C@T3Y~@V1`{x7T=R{}FP?JL6P0b_Cc`c6L(YJhnHVGRjvK
z*tJT{(!$gUyGkoJTPecRifP&EY)$T3avfIne0Kxmb0cVSGt=VIFC>eKu}AT$%HLD%
z8g{LQI@iMuz~@G|=?m9~rL4-a8P!A?<!f#m!Ik+-RTwNSOl`p49NN@LcG1es|6Bxn
zP>P3EQ`2favUPBM$qm3qBTY1??x^MGam*e-QTajxX3_sQI}k2eXKg<06%D}U&!}%s
z#sL_6(C`lk%bGLH6&6qJk*R6l?H&SO#$jf=fHg=<e;f_&FF$(H_nU`Vpn#$|%RE`|
ze2x)bhi<{{$DgVw1A9Q|Uq=h5_R$zOUl`GO6qg}*X4GL1wop<R_cuOCx}GnpO&7J}
zoX86VU4MNSgU+MKde_k;I@2NROHfC{Ku=(K9X-BOeXt`u_!1^vv1jRt-Qnz*C!9mF
z+`)Q_7ru%yPq>T9#+<wd-%(obLht#)A2H-f<ee9hinF?aC=Xeh*q)Viu9Z;|{IwCR
z?T4Q>8nO^4VuM@SW5T3xiaFnt{aHFRfYYi}3`7->MH$qD4%5{4CpfnV+G9X?$5jJw
zn$H3UC}wqx_M$QEW)+hEo0*UIzuqEKRtLf=VRIwDX9@?JBj<{u^wM{Ozjh`qV)SyE
z_P^xOm*Juu1Rc4PX@RHS{}kypMf3c+Vt6IVYp-)^A4fgGC#Yn*C&S61DT2$*jL%Jg
z`TA@eQwQi+Wg=~~zBr%A8_?@&Z!zrdkQQTMD#qD0Y`-CMO4R342xNiJ02S>p%AYGK
zXCWeG5P(eb3j!JX;G=>T&tq*1l&PB8(#Dnx`#(Rc?4T^_zru+hV5S!`mtFCpaRD|0
zaLItXuDM}Y+_Q)xcPq9Pwe>SB?nNU8_<x=sbNFMqvsFs|*~1LCU>tYA`K<>DNc7NN
zF4e}da+&zI6eafoY)*Sbsa8mqC<x5&Bb{HDsu3BHc2T~I*>N^vZ<UkdbdT0?>hMpn
z^G0xhMsScuCL*2Rf{NrHPiH35Zz!~*(VH$cE65fc=QZdr)71I;nv1qWcfDvGWgFe9
zm6js4{&E2_FpvOW9CW#%=9D4h?2V4^(RN_RBpU9ZNVx}B7BClISkW2UoLLzG<&&xn
zg6&lMOJa6DZt-2gwIa81^B~dBne?+C%28JD&b*oXU0~Hj6=@3F$j4z;mfOkdtQ`IT
zZ#nk-dG7xX5!NK~!kAn_zH#a)qGL-KByz%xG@W+<DJ;0h>P3*rxglC8CBVuD#zr$j
zdRvG!X}Fm7h>=l-a;J}kU8%k<x0)QC&*z+;T|s<i!6byJF*M1-8O0#fSD1vNP;*0-
zQT=DutB0_W^hrezxQNvg5j})$DRSwW5G@cBVnvNjE_gues?ovj8ktCT9(J3;Lnb14
z5S^*EK_m{*$Rv7u6abl=Y+&{-kwt;#?XdY^86KG^p=Qs7d4PK?u3FQ!&C@0nJta<Q
z)n2ZR;#g~zP&u@-Qm&0X*M1$^q*e>rGAiG1A_@h9LOerEed~y*9?GVmj~Z}^S5aJ9
z8>3t#Mi~}%T46y1nf{0(2jc}qC)|9C_joe&1KpE~AZet%SqCa33lMhrg`IhvMXTTS
ze*nm(-V`Dp4fbZr(59`SSX0zxgh)j;Ua0JU1hSa03sok?9}P$uqKEfLoH$ttOG@;G
zX$37#DnsgjxOy2SoRnr@RxV@-pva-^xi<$knauWKIClBJfL+4!h|;l@QPj3gsv4&R
z%$Iv8qp_`hJU0%jWb0RJQ>QFdSkH%5_Kr|1mgmj5i=?ljU^}BY_S}q$loC<RyC1Y!
z+oM^hVO>JDC=4X>I3#n%0i<we`^_HkV_A{;-wvzA#azXCFbh#9$D$0~$b4M}$t$2(
z4&l<4B32RZ4%Gazf*kHNw6fgo-+R{63d#T#tn^7m+RABsM=Wx_z#U*4Hh_>1U8HjS
z?mqij34-EJu>s_a8)T=7PwbO3y;a3sH7w6?gBK^WNPY9wI3-^>ER=~XK+vui_UL>7
zGI0-Ph9L_MMOfE-w*i;(b+&PBMImt8itIwV#fh^!Y?SjrdnEYy{blz*$&GYJ+I~i`
zE+OL2C&kJO>pIz8jDkX0aav!AFXu|fima2t(PV!^=LfzVD1li<z|L5)rWo$hM(7Wz
zL@9-zA<_KoGm>B25h$E1M;?EO<v#aATal_FmvP&|q49eeWOk+48j{gu2ZBXSf(@G)
zU8I0$_W3TBXIt^#mkl>Yyys>o|9Vyd*(lyUGUkf+F2#5O^0Xn8?iwf%=p(!<AVkNA
zqWxI@d{=>$9-2ROA^hseD4yZYZCzCqYM%xoc8cA6Z{>0jBEROteu{-ItRNy@qJbMx
z9z;RIRGiSR?DD^lSuRM3I2|K~&QPEexr!@~HIalscG3}kdUx^~55@S`7DxxA7Z5UO
zRN&>wC?5O$aDnSg0l*FkcW?Pd9zhfO9kx{D#;o3v1xSv(FuKP)Ny*#T0|;rBNU(Q=
zn}f&h^E};!R5wY!-A}9QDiSCjBVOwc@o0ls?EpI$*xg$6=C75#q=Q?&;{?mxES&k!
z3)}x$Ar~H=7`73)Ui^e~^7@g<Kv_Gp*K?W499+)^oS-sGNT?w4nLOL6Bx<WJ15tOD
zkOFFquRl!TN@BxUphLI<=?GUuZB1+-Ce9Ly`86g|hWg*cPSjevNOhs)OQlb9C0MC7
ze<}{p@KBFNMA5}6LQk0-7Awe~7!`BH8w2|1q-byfRiyC({C=<Ef?V>oVu0sXmQWd5
zBc`PEu>l2w5r~cxXmzE2s7~NO^$PP(8frM@aa-*$w{|sHd*zt&HpoAOJkQD}V_1~h
zm4x&<cEk*+I%k>>qyV8$UeeX}DDT7BDQBZNRWB~^+Y8|;d?HNBY~FxwcG6XmWar8>
z;09PNj^TY3MSfxFyx3dH*hhA!0j}Z%HqK;jQ)}lU(E(ClFQvh|eNW{I+RLoI6Rc*|
zxHK0XlO1L4UU-o3kP#goJoXsRR`@Dy){e#&ptwP5Jw<BY%XjkKgWm0`cnASAn_YP#
z(*D1|8$35=Df#ePY3lD}js4-mXAaEkjy<374G9`WQbdTl1t1RNuQG~kjAW%Ns|6C0
z`s$IHK*`~?a5|K{g`4)cPXQmkHh_;vw>cg(=#Ko&WRn*K+GY0neSn3V3F%ng<H)^G
zDT=n5AYp5%KQ!`kNb${OnL0dk^`c*5`a2Y+B4YODa#kMo?taB`NwC9<|8@An{-G8K
zcRo=0Axa9K5CRrpptn~VqWn+;376vR%DJ^NKKaYaIsiYqR-YSFL3kY2T1OHx>Xo@8
zVj2hVQZX?<seq7N4i-gMnnpuSr2@&+r^mrKt=F_AZ$u~0uT7=p19+*LSS>y_O#l5r
z6A&S7S=I%161odKR)WVK`m3i$z*l~DHl>4of#QLTTDLE{vdt^U6c+K@4URk1RmY?!
z*5=3Gntn^NZ*=r2?8!t`cstqs;eB+5pO9|!$mqI77BqRuj>Xrv8j^G~M*~5b8b9l2
zoc7o`{*0z*D~j*$pOt0W_F*x8dCy}<0ZRL1tiDLFXoR!9$9f|p(^j}euy{mc0$Zo3
zr;``n?YWVxgDc#NO%G5yBxu9?2wNOh?D~5Pv<2ll03H}ws(P=DE!P_a5_uJpIg`K#
zB;){61hcz$twv;KbP<YQG=Nw!ILrlaT33zE0V2<3S7HRaOyR$3(5A5ryRK^X5hai0
zzYG}u-AB>YAG!g6Fiu~<;L~ivvq^ZsBNBCn&F~fI)7#jXaJY;PYTEI@MSIt}Wo;<Y
z?Yi;nG%yWGhiT;Fn39j9nTCEv?DP?Ecy?zonlE7NFo_t>lRP3(BP_=A8F`J-y*Hbu
z>yEu_Di@460g|*y;5Zv8|Fxs&FfQ{R(5*1`31OfA5yGFRkb>*1x7t_T{u&Cf%LdY3
z8~A7>hSqn(dm1x|{{Aks101K}D-M<Oo`(RC;Sb7a=<tuQD57IMRwRhLWg#x``v@Lx
zzA=Q1o2f$wB#mo?3U@_RLexSLb8!DObWRoXV%J&=7lxSE+oG6Gc4DD7Ivf;?oi7rx
zfG2stBNo-hA0sv`yqs6?N*?7g4wq3@&HI^eipV=URxlzy6Cfff0udqVqXFVFzDpyb
zA|~R8xqzqj*yv!djZ7z}gXsv4(#Xd%Wgky79i5I%!e9RdAUV1s{mx3u=n&NzBO&Y5
zDj*8)neSsZHJ31FDgselOYav&(vO+gqwYT*Cqfj%Cd$4oIdemTE|TZRLOaYel+L2(
zCg_D>{c&Lbn&;5_UA_e%K&!`Hf=HEIcRkjO-<Q^}rLiA*v`(09_bBB(OG|vjxhnG?
z3$Ud%^HQCTmlsLC=n0mmX(#7S|6?F-zU3Ol{*E|rX<+}D%UgI^TEPyOl)q|Q+F=<h
zDw_r;umc241QV#G9S%vuJk6E$SqHaV3T!<#CDA^md#-r(vBeRCs!^I1Q%w~V5~oXk
z1G$vKmkoE^N_n@4xaBUUG#C!&5n85K`t{NDWbW~C$4G9)WaaYWrBMmgDoE!th~{K~
z<;g493qKRnOqgucek2!A%gk)Rv{l#3hCV6%3Zu<|c7V(83<bb_8k&voD-+-ObEN>t
z=Pm&9M``gdbl72t*GV9x)bPX;*ME2WC+`2-iM@k%jz33(3p@AU_fLbw?-)XgbNoxg
zf7hmD>OG(P_6G2FH#_M~FxKI2!|$n)&*?8Cjs7_Rzl%)5rpOy|BL^3MTsi-T^71aX
z?CTWs_^g9^^sm)a?%(c!YfAevbkwnDZZYm>m9BithRq*k)%Y6p{nb6C|K9cgRbirv
z|MzsGFQDvwm~Yhmo&CR^^RjPDZFr*vj*o9v%l|bV{2&nO9e@vHnMxY_Q~AHE|6;cF
z|K)#B;F2|7E#2y8<KmhCpkeSIN#s8@2p+v$?*f*bfQ+1umrJ1vIS3c<LzkXcValKq
zVslxX*IVv{%XNy4I&Lk`CS^g*J!pcXe6c|gUJ%c37;8aw?DeDO>~lBY>)Kqs>gLoe
zk6$;3!EUat6;<z?q!){vnx@;k0ueTUxC4&5HYP_PfVgD4A-o)o?u0Tovd#N@&SP)H
z{%YJsy*avkJ#j+9`sy*3dk34jJxUjdgHr``yziupEJ!@{b~<Tma!8Eehj$jlhf|e&
z=@Gg}A^!f=*$d>I=zciuy_=qo#1Tn67tp&ZGcUN@Lx7_C{L@SdFp*2HKfvoHhUF)-
zoC3n3O1P9Lkv@JCo9X(VX=Ce4S*g5KB&V4Dh4`P>Rs274Gv^dTpBLk+ewpH+VNUSK
zhLu>abS$wJkKWq#${k+b>}Q!J_wLKVLVFHorUHI1^J#Jt_dc)ffpk4;({^m9rrkiG
zo@D7wt8_2F^EJzuz5GaTn2hax`<)^}`QIwwRWESBReXMGx93&(@;h6%J~n0*Q0WHE
z4H7DTxbP`fEyL@}&1$zk-F-J1jBY!&?UH`E_P4c4R(iHKn{J^0LF4*-t=_gaG{76Y
z8(z;nzIXPk+fKzvqIbR)ZsT@E;nk$*=(YQ5q_*;mf<2${V77o1v*l*@Q3x|vn@J!l
zUDp#+UkLZI&6i`#ak7DsH#;bh7I|heew$m%)X;e=<KAri&JtS?cWo~{ugKV6DL`b1
za*;Ze4=3(KM7Nt(2VRrM#zrq+8MAH^`B(Tn_8Mwe;`po7?s~pO^w?(!QBJeh)pYDs
z)llgqYpyV7L`USnYm{+@-mtUA5|)>H{>qy%#b&v1r`OU~WE^5}s{=V#i&tV7Owl|J
z*K}OAjC}=E9Lv`3;O_43ZVAEN3GPmCcP9+)?(S~Eg9dkkdx8YF;11yp$vNkq`~UB)
z_4ex3U0%C(?W)@K^-T51hg|D}$x@9LhP^1%1E=NeU%N3}_AGhsmVrl8o_4oCFLQi_
zJ6vy5SZ9vtQ%qNX8dEuH#i2(r6lyYKGAjcU2|;NIkYMTQ);c2Z+et*dJ9(P)m=X&Y
zW10K;ninb;Yi-Tq(Na(CjL=Wp{CF!=`i!xMQWrXJli26=T2+qYf^PEY1|VHL`^lmk
zM~sG~ig)6Zusdg@!iUj$<mPs$ISiB_RElmj&izFe83H8N;s`Z)9h)THHWncG2orIe
z<RWpDZyr`xNhKh7S_DbE;1ShVPvg39oP9vC)N%gm_f2lK*;|v*eY?pcEZ&S)*Id$1
zY0Cd`TC)3qjJ)~db{4>sA~vhAwc~rPqx8zH;5sGOZQ(vmtbB)lini4w5KW<`ZRfpN
zb@BaVkzidHl7i7iA&H5HjH;$n5)wOqq$IuugF5e+?Yh8-ig=xK%_L>A>x1pe@Ta|5
z8(!eIC5xZ3J79IX+Gx12L8jSvrMT)r<?_g>BqToY=m&GjBLc;#C8>vdFzm7dGtfYT
zap0618AoynsavkUj^Qt!I#Ya}?N3TV#y{0C>uVcTwVreLQ{i|I1-=qdUKpOeZ+ys$
zwW8v+Taf}wP@&^zCp{cfD!+9dgDUCzq4D$iqGonYFl8Pogc#TWcY4hKBVtLWXv#%e
ztcc&?BY(?w1?AF0rV386yHh8)$hn?AuXze?UrNT@stOwrrlmy*ykJMeDAvGDQjFdH
z27F1~`g_M0@geDnNkOSL8l0!}pEVI<_s%ro5|eVL5{%@h6LuD^Dk3xCdY-jkR5wiL
zAs?Iglh&4D{8CBhp&r$dseH)&{l23Qpk6ITOO^87B%4CaU!{T})B6D%cBmOrMIeue
z8ym?W=@1T&5S=VX3UT>1NE|<0n1zVW8m@T<DMCIA;IZ%f%GtML7du~vn4|pk^=%;K
zw?tB<7Yjyt<fSf|zUtx<z4AL);P|$9U9x6w`p~-a%^NBoM@4Amxm%@;9{A8Y+5^CN
zSmAz{rkqW$L4Zd>w>y533Ih6Ev~or%9~TT3!yZFXX*yX!yOPdiG*qkk6g#Dsp=wcT
z02522OBNj=nfn4E;#0&OED+#_Xokg;3o~I-_VLZe&^=u=z?v#ibXQ<RDP}8498Dad
zqoYpI`nCasqAHkJs>SL;Bh3xw&J$~}H;Y)D^KJ4m)$+k8ge!@?u<#{k-XjPk)D;Qr
zYu+DttUc*YTt&E);bhS;1<4;_QGGM7WaO=r)vs-Gd)}fDo~qU>vfsU>K?uVLKeLwT
z^wi}#Y*A!2KIcjhVG7nvFd^d5tX%3jYd|jX2d}u9mfO)%*-ke%$X8b?l4{aG5jPE>
z$jTWD=ZKX-<>ytiCQK(7EDZ3}eK%9GBH)7b8T6$o!p(dKT+DRv(7li|rlj@Kh~@o#
zxkY#d5?ZMQg3hC}1Do#-@j+tEAv~~bo8sYZxnJ!(gUVBY3mb7~XGXQDMc&b0Vf_T<
zP7Ef#YwM!Y_;g*H2AGdv4aHsoV^C@64G7+nnq@Ch%BrT&p3}sNC}nyvXCD#b9aLXB
zer=?2XX!snceHn6N*%B>-a{;$N!BdVY6u@bq=51J?6gOhr9a)2Z7m&a52ql7<}=nm
zmDA?of2$K7A*I<&bPs2{!^hD~g%?RH#1{Mxw=%7)o<@F8o~Hgz$JhFtB1=au5T6TK
z&TwQD260{3PRfw-<pIxU(b20lgZ@``T_k#vt9Cn|pM&Z94T)vRFAQ1&%GB6&pm(-h
z(~;DpH?CIh+YV!DY(0yb+nVSNrZ<gOvgFs@rpdL$ZuL246`!a=b$K-TOvgo+2v5;t
zDHVjhPK+dVR<(MSi<v$vrhQGW8XlM@!5e_d0YuP^_vEDkYcY=9jmdm_iD6<hCtFnW
zq%=h+uC4kj)eH9JpkBUEd=0Q#fq>d$KNYTIw)lM0jiCtY<?}2RSunMI3TZh<oa=8G
z9TJ<q-0!j%5}5(o!acpahGo(>zYcr8jI%>hN$Kjaw-DjLOQO}>=$8C|nrVZ{0e(-Q
zJo<sy*62vEfe}Sgh4AG(K|?URisw0RcVS432FSH<HFtaOGVXLI&rqEHUUiZnVZJdX
zV~dN%WkDt}I;<%ytHKlZxitw-`8=uH0!i*m*LMw?2JvqUR+Tue^IPp_DqPCV(>XCz
zosZ#!HW_S2rVk#_Qx;(Cc+vr$#_29s^S<*}@O$n7d_K~Kn$5Xq<kn=$YWd_87e9oT
zg)t^MmUJ-kWrvlQIayUkd7_dpOZb*O3za?P(}#t*g-z}eB}1ia#X7yz0v7tzT2!-u
zLUQE+ZX{oU^$aqgZyrT_R36uultXsyr?<>8*ExLOF~<4%N{v3t=10d%jO2;$Mzvjn
zJxq2U4m^POLjW;ZZZ<eTZ_XObyBW?}nD6$})?@}+Vkdg1bb5n1?4115*YA9td@z0|
zPggf~YSjs-zV9@P0zQSMn7JTn7qES(H^Ive6sc;7fs<IzBXcZl`s(IBn#U)hKRj|w
zaWDt%sgNg_eQDQH&_n<UnSZY`&(_WGEnNx+-<KQTCL4WSdKD_1Se%k!h@!(r-UQd+
zeLOBXLcxtcj<$lN46h>f!ZcnucUqT0V#bD+ay-S@n^v~cJf1h2GR=I~7o`Rqnoaff
zt~miX=g0a{S{QMims#&mG4_s-u!Tgi^PuINRQTwd7Az3F#ZV{rP0ja^pycI>c5)0=
zu@$CzvjnA0*{7@*dmX-BG;ti{Zw9Gb9z^18cWoF|!@k8=C5n*$+@k1kt$M#o<1-eI
zJ5Se?<8C)%w3vKwVjMD8pMGd#<9Ils7B2gCaB!_FTGA9o-rRKB5wAFNt=zRPI)!3S
zdZ&>)9&}nk@hrRAmUwH4ojcXrciEfV34;gGYk}XRu<!#1O%%hT;2sj^RfoS<C+O%T
zH#^VyqEEhy_pI=cpMZZrYhj)Jpq5O1{-cZV7V0xgcCX{!T(;ZoN&Do0=j6cb*8*@0
zA*^(d;z~M78B1mzfn?YOJgz;30Ouo#Q?GC>Q(dclY!&m3k@E6G%Y)+pG3DA3efZrU
zP6!nUf$~7;q<LBFhMt>ml|E4YW3yw4qDH4wiiffu?S2s0Sm>3Dz{HJ^mk50?qsR}V
zm|@ZEZ@j#iIJI!h1E&U077<iUXP0M|HoRjvB<fGIPPB_6{9;Y$q!YMCcBat$4h`Gz
zjUKNnrs{g!Nz9|J(#4&whncv0y@GNAoxvp<QhxRsYF?0^F%pAu4=Yn^TGacx_i4H)
zXkxaofU_9Yz)B`uj|`9FTcD1I7NZf%g%$^9h&meI_715J`{Ht%XX5zNj6<Ob7iF7X
zUx(0@;&iBA7pDfbk`p>EB%Y}-G%V2nYPnV9Lz4{ru^&lP#$Cl2f!az>EIV3xVw<=$
zlBrUhJ!O;AS&)$)c%++eburO1ukNV#mWf){SjAdy$qf&M=i|1I9rX2Ak8c#;d8~l}
zosX<iI&hEVXFvAVR(ZMGtRftQu+yRn;unY97k>7UMx)<|Z%~b6ZGNgBzWI)1ti*5B
z^sNiF<CUrPY;nD~3=$7P%&D_O|IQleO}#GByr>hkF$jphi5^X|`ten+hcZ68&G3p(
z5h5{Wi|TP7X}>Eww};%`C76(a2Sd$|e{-)}6FowH^Mq{XH5FALQp)Iwjg>c9aW)S3
zwX9aeAE#e7P@E-9$I5no0rqLD?`Nhz)JSK`*nFj@Tg`K48wJg%*8w(abDoJMkrGn1
zx$3Gr49Mp)Ky1376qT=Y3(295t)<P&zk?D!Iv(*Z&%82|(PgK<7J59!PoVyaH0uti
z`S{@hu-wKH5YO`X=~hsPDi?%C9EKX7h4R<;eCg21LASfHq4C}cJSq+=+%^0<&T(Bw
z80v1K$wZft)$?dEByp-R$$ybg4A9h3l*dhMdE}*mXWu#Ecwe0kRuNE=;r^_E3IKP!
z`XcK`e2oA2@IuDjfCAKbaoyd?d`VQO`E`GJYJDEwg!I&X$;$OYaFHG|$l$l~5_!L~
z8J@lV^XYnTW#Yz8{3aoTQT2l7M?Ht;J6~0~Y5o-00BSh!k+K&fV}9wvHw`LplG$a3
z8%#XEFrtwwwl+-Ixw6@(zk3RklVGm)MlSiH1TA6-zDQThCHbQ>UEqKph1tuv`uSYe
z(8{3E%8kAtouJ{^&)M8Sl7@DxW5h!}R5<d|AtjP`lK{<h^*U+*f+5M8*59}U`Tk;T
zuk6?{bFx0~+q{}8sWX%cg%sZ6SG`G_6<vk_K9lUK?kmx_lllV^X_FCArh{y4Bay_B
zs^)un|4zF6`7@V{mNPGYwR@;F)I(Pzc8rw<^1YpNJc5MAQ@EX>alFFr7%7$dtSIRd
z?%inL&!VnO8F0l@l*7~G)v589afuPjPCm!{+n&w>upDCD-$_hI187XHE}CKblCES^
zO&eH~E#_nFvhgV-c9iF5_9~n_GCzCpDDq~~nO0A5luphR!;RGr@M!1uG)rYm((jc;
zG{<Neh0^ir$WFS2qmPb%S@&eBaTrM~S4NOPWVRTC=(h~ngz$*`2nCo>+*!e2Yc`m|
zhWeG0hWiA6M+7e{DFv6?lM84X+i--awU1pf$wM@#zJAa*Y{Gyqd!u~WFm)zPz)mZl
z=TW8QndKjb*3F&wp_w>)O$+vr{H`LwFP~<LasA3l?LFGd$W#g{k#VBQ(em|$2W(Te
z#fxzu{^t>YgtqrF<vh{b2gy9N+6(7j*;g!jw$-h22V=;R?zJmKsqG^uU2p~2J3~gj
zR<AFjBdJ@_)Uz#T8kK79`PE{D?mg#K?BxR?VYH*C*f_52<0Aq`G4lAntd4oqqIvdt
zQhy`rWeTI(4o1TiP^n%abN~L$ixF{xu#bv;`aG;*2fEZu53ZRf=B%kPDhyJ|n!MD!
z_$xyC*7r-kUJ8np^7rT(U#F*}Az;qDGeSAT!si0oEhEX`&{9S}l{eWr)eo@^ke9-x
zLC7z)Qu8X5mW*3nH-CMAI%EyU+YWo5w6mkhJd3}FotW)q*zMH}KL*uX%{kVhvsSR>
zRdqaGy<EUT>8n(m$3+)LFdy4x&jqW$VeDA0Lgtgv`xN6WWF3!YPC{EYsJ{ilEwyE(
z<HOke`G9n;2_Zg=ZJc^z79IGW+bmQ84-GGO12H&Jr_6<XO((A(OTQ?;z#6=>bnu`6
zAX;G_HmOO*p(z5ZUN+?|onBVp@@$f_BoFT7K~Fj!Mhr)KI<Zy=EAy#SkU|#$l~%aN
z{O4|ha^l;tRq{B<?#v(hVw|nHm>o8z5+c@OqgYWz({>4O+-!abbgO@R{{g`kbL>;s
z%L4Wgnq;BSuq|Q%an8BITiFeLZdOy9>4s)M0ZZX{t_r94VlIVixrXhU%;z=W)O85=
z^JoTY6&0oDAc0x)Q1gnmCjInnAxW{?l%xl;`6H&!ks#G!(bLs0G<6=5#x1HOCO&1G
z{9c#)6{6|Qh@A@aaaHHIyHq;h%qkQ8`%FleOpPy;$#8{ANU#@ggw>tkM^hQAIGNN#
ztJk0Gj+ENi=dQZUOvE?2zF`X+(oNvkYIQP}Oq*{-!%n1aIUX)$O~sTf1QJ1)(Rm`R
zdS-Cy@Bwx;-!^;en6_uUdjx&h7~)OOuax(uBR&>NRdeol=43`MbnODy9bShla7*hB
z?M2qPNkl(at1Oo&sM?t<Z_RT~-KRY;9hEblI}Wn&=(|TZhj{t0X+Qex!Av4q=g^ur
z>ZKf%gk+03+|7I-#SjhWJMgTKv)t#{E@lJQwV&Om{L=EA<k=->$v2x!lX?p9*RB6h
z#k4BJ{vlES7Zr___;h@joLrZ<Gn8w8n#?lSMB3-=sM_IeR%M1a2@zA0LU5Lttq%Ms
zrDutg)5UutIjh}00cZi5{_nsiN8>eEv){ODW%fdYk+QsjDM0%vUkY`%vaivvT)~8(
zonN%c-|Pg3QpGH;lWcHHffOfz#(nrjx7^T)bUyZ7UEEf`NseYiYBLqqm0Wi^mOA7)
zH^c6gpBy+@oN2RfT59l7^Or_uM$b<^DU+p|^l1#(pG`Jr2fQxI^<$L6DZmXGKh^i9
zDD^TThr7QaTquvM^K2txF&57l^t!rB_CFmq8XSin;#R3z%@{Bt|B6oGN?joN2^K)`
zcFU<JLd-8#otb7VEkX|3=dfp9Uy`<I;)aMW<9O$w-H;}bw-~F7cADbUIL}J@c7}xt
zmWhI5UmJ@9*&xBA;$h?P++zNSv2W!*-kX0v`F7d9ox;XkRqkiMge?QT0irPQYo#$|
zVtwXy89w1)S~}XVJm{wEKJw*KkMP0FtQjpn*bkSCm<2{;#Y0xcoflEz&M+v(czmj;
zgADlViJI+lTRQRDE&OYd(g2AV%%5TP7PaLB;YJbzv|$cOE>}ArXnPD+%aeQ*!h11M
zH+ccMliLTPyM2qY0^}5EMe38L(^7)#(p1HqekB6RqB(tf#ZI+(Rz(EDd4v-cafMs`
z7lZK0BvZy^dC{(}Y>g6`zS7Q283Puw!Jbz~Z)2Y*L@2Ol%56JQdtBHC10voCLSuek
z3H-({z5Z0Mn9N^1hod6RE-q0~ZJqGhR8}<jZtf_W4Z9x}lC!)s)2#>n0}}`FI@_$>
zXv2DiS313`Dznc32A#OUqu<LoITuraP_ioLEkK$;MfL!WelSB@!Q0u|*4Op~HPJ^h
zlm67Oco9aY`a?oeSD!<+x+PET*AK!oTfC}}PA=uxzHAceZAC^4&I9}fAs0FMbCTj3
z;dvfe@7OOs(&*-Al*;Qi4~M7jXRLP{EU$chNAL(0(mD81GL86`bSx9?uccA6_4}^i
zOl^RM)U^9b(}TYocIHkQajbAMnwRQX6hlXae`1ss7lZTVdng{klrLdti{MG3g~7!*
zeLdoRTg=9vDsh%04!&XeciOQPHwRkiFCZzC@)W;QxYjazccd-6#kkmj>o~CTL*m%~
z+$8rRol{707z@ITkFg?Fh-ub|Q&on5chu4<3N|xtxO%?s`h)9^AoCWDX*BFrr(HDI
zkIVEk3|A8li2_nVB+U94Ttt$u870LJ%lh`nW<}b|7U}O@pVO8swc2chcn}D4@wPQt
zTb5MWH6f3+F6#Vk$M;s!NW<KeZ;A+utRhobJ*Yg?GvK(}vpKEErI3wGk}Q}W8$hSo
zP1<<-Ca`rxIvAwtLn_Fbh33C0>*y;Fg{1igyDuj$Wn@hqira7DibUpXqcMlhx+EIv
zPimxS<se2d%m4nvI_vVVwG=j%<=_{(0^0BuSu9a3$I^aXX`mr7G&_E@V$af{EyUnX
zu%m2E>D!xV7)z8T=VAqBB7Be4LoFkQX-Py>WszNRaTO}`(GYQP6e@7*{)qmf60amR
z9?Xa5xW~cmNoG@*_Isc5J#kSIUgpovA7ybRlnw|qgy^J4aYdnxq~_8)$5|HG%lm&E
zp@={!arPBq&bx`g??-xlaLfa&k~}DO=NQqFFOi)6BG~M!hk`t_0`EyE%;6VTsQ~YJ
zxYWR?T5R_g2&aG2>tm56WppU>tX3{<<2bA}8MlD5oMA|QvuMI$M~C~i_Bi}~vi|rF
z0XVc=`18SGrF`O*<Z{0B#=S$UP)M7$v^`b-Hpn*aQ<f~b1(<xeZ(u2#q(Ho+v|vmL
zNu!j3{X8IDqE@Ei7cVX{QoCSE<l*2PLMZ+zWs9_i+Ib^pJ1g!XnU&?ue#6~Hz0*&?
z`xI6#t9a<n0pGW+T%){;l$7sDqh}0Z0zaa}__OV_%r9Wpw2P~>H7yaY>*R86HGA#%
zi%-mbQD|vkT{igAB!|ZFhRw5uiPygNbax3xKVPS=mJp0{^>Hy<MVy9Br09c;4Fp$6
z^_rQTy-6q*zLh_{uY-khNywF9s%cxFqfAMR>eSTR@|pne8C&ZW^T5<T#E@Yt#<Jz)
zao>^~sVUfxvcjFAm9{d~vdYCtZ16BMVH~g;xi;EK^85Ez<O0=}MX16-@7_HL*Z77X
zwG&iR4Ln60OUS|YTtwH^SuBG~g+sRuFcLk4DU%2MA|16D_Ppw3YSd%(vo2`(`0(xS
zTxGCdQXzZU<J{K==2y33G^rgRNXr6zr8o?lE@;IX&_&-}2PJ$xcmAH{gqSPiIG3zf
z0lZm)PZt>8S<Yw6u-^5fIe+4&8A85`B20GaVr+MW1Ttg-o=0h*BT)tZ*9*4m$ovSH
z-?xQjf0nBwolhwrqwj|7L`@EZ>c_8cIA%I~T0ZJSLtV9OkRJAN@K-I#hTFs$O?g{2
zg~CX9zE{cUE1L_3YIqb2Z0obv_IE!&R;f*%(65~>r`E*4sDx0S%dK}ef%jQmU|eoq
zREWfSZhCwqG-aMqC9|M}JqGt<GE{1`@q@O}g(W5JF&_+&s*sgm<FbhTXzKN2`a?+s
zr6ZNZGn(tKSuJ1%1nwEmAZ{?WBGjHmgcl+UY(~n|RDhybhHe6%q-pU8(dEjw`P(`S
zHWFMcbYJ~5*Hyx>P&t8;10s>WU-9Epdh=EN;|l>wwx#R4IJ^a6gH~xwz0adBS&0!@
zH<rrnKjR<SGHOjEQ{$Y-luRX}7pN3f#TaIo(DtMQ+e2`Y%Fa42?0d8e5XK&AT{#5C
z5}>Y+RaMYa>z?wzfZr^D+xx(w3*Cd`1}Pi>Tkx5tcHJejhZkDIq_Kd0M-u&Us)}U*
zQhOX)x`|N-Lc1TB0C<Sm&C5^8UjccjV>sWo;M#)vV&UV<OMu_rX|jHdA7q8F<m>Rb
zJ$i?)nUTKTEn9c9qn?A}Ksb}A0$EeoPp+pLMZ>XhUIm$c?@@#s@^vAhH$cqjtUcq2
zk(Hc<2A)v=?$bAlE+@Piq+!GBU2h@F01I2VNf-6TNHdIfc+6`|eXg9@ZgRxfQgy*A
zvtJ=$PnP($5DQ-09JVFj2S0eLP?L*|O)A6h@q5;MZgnYf%_>Py?R2(zsk4D|cMVyC
zuw<VToT?~TeF~|gd~Df#ucvccA;O4t-mY=pkPvdqCzkhvIgKB!fj{mXEIyJk&{<!K
zg6a}O<`Z9p$ys2!&lk-4Ug+)MNmmz>)|cD)521Zu^4;}h-d0NU^s%Y#>Lk)%!j@jj
zPIBe|Tc(7Nn^cW*B5aT^a%!=t=@BzqZ@!RC_sWr!vqGzk8TmprXvO+KOnkH6Cuuor
zzUsPXXP~B?r+z$b@)rD%ll}bg{)MPJjkxxcGcGLrK-4An33sA873FAYXM%9ExtwIM
zqZMq%5a=hfSY||Wy<3Uqk=LO=vq_+02==k;1O$rv?buE+;TmYDe`s>=?s?3}+`o-k
z!K4N|LdIl;xJ|TEUCVHAqSCDt?(j&1yZYquQDC^Cz}?uCAsS<9lG7YRx_fB^O`!E{
zcNGvjev#NK;n;~l*g76oea(VfgOBMbJncy(HC=p~+QH0-hfe^@_7JRdAFQr0?Rz$4
z;h@2zH1XD*emK;#6PyuYhJ1t^65Wd+%7qWzS0?{Fzmz;LbSVdB2!$NOOzSK~3oR9k
zP#mxPWr*v!7V`~$#Av9IdRnO1P9(>4UHM5;^d7qf&>uw|)04Kwa@aRl8u}$fJzCQw
zIR}J{9Hv^u)>QbgV&B7h1{ctn4Chv3(OITOt{S9}$2?CgI_hr|yg^7jTOz2Z6IJ&c
zR&s>)5;JVe&Zs7`tP>x&7t8t4gbnWd_%lwxk|ymyxO#J&MnAQ=?qg{N<*_`6%OqGV
z^c@F%;3&0(6>{O*s~lN8(PyF1NMhl{JZB+IS55VcI{ruRh12i7A7dr?1147D4E>~c
z6RYl(5c4#q6@<*ybmQx2Z{&=*9m4C3*Ob{GkfRkC>0P?sZg<ASk8Vau-Lwnc*$3c%
zMmbK6_hpZ@QRI8O(RBV`%ZK4%KV|T?$9gM!suuB63-t3SAs=^yJM{6#fwvr{r5(TU
zj35Q0e-wh{BHj#sV-}cyJHsoPw_eOXrUW|wyIuhU^d(5xE;fT{K?AKg<OVK%i6><!
zLqXZjJh;LUs9IWkTTEr1kuJ!5!`uMHt~DmUg7fevFfGkM;98zHLka$6>fWM}Hy8ne
zM+Lx7OWYZ7<_IRt|7@NC2K(qP5rH*WLgvNV2_z$Dr2ghe><h2i1jD}C4%}J~?nGoj
z2wJLp;|l$VF9R=xPv>ld{5aKCLEl{sB^4YCKiq{K86KTq`4dYvCb~4UtkVFPiI8SB
z$+%Gu{)7@df<^tj^mXL}00O=P^@@NEM&>x2``!xdCksHtFOCFui6Wj6RjE$T`b>rr
zL2e^m@ur(Mo{`l*lw3=wTQ;7NG~2hGtI$XR3@lc>9td0%(du@dRx$*C3HC~f)WuTR
z7?Q#!ZMW=60p~6SIBEJ70v0j536k$&0Rqv7ia@JwoAxD9Ft!gPgD*_$Hl~#V>#cL`
z!HN5gpPGy6EDVR!NEnVkli3}QMVP+P1^@)YBOybcuddQQ@bK4ivgyM~R+_N1kZMY^
z_ZlObIQ3l7W7|V4nBi#lW53UQS#4`O7KadGn7tiK$KuMZXq^p*zYqXm(gHB^11^w;
zKg3Ku%_W_x24u2e!hgu)v|#@hiXC?v2d}?9dxR3GcJJ_u!7+(MDa3#AbG}}1)7$w7
zAA9;BZ<U_aO!y&Yu6Nt8dQIz4F4^bj4%YR+AA|(YkBe+6ODE~AP?%ZR>Qi9O)hAIr
z!!T(5N^_!x<y_*|#+SUBqI@*)wBRH&rmcej&=J?7T}niFXZY1y5h;Pa@MV(XMpVyg
zD^y2(PsZ<#VjpW1eRp3<I?#t<034U{Helczs~4YMexgm0ZyAs&JRqQ$q2J9c`kX*?
zog;bIm7lsJtlyv${mSUNa-L>!8j)o3_*Uz=a2sRj*F{{Dt6HwJe!BF5q4Eo+*T^r(
z62H;qmLSRFyp;Qp&Qgfo^CG;}pQ}9+A*?D1fP^lxJJe1s{O<k4i8&3K!qztqX-ucJ
z`@Xl{b=#wdnQo#E(0FJ;rsDGwr|+%A0C}4Lz`3B>#9EDy%bV4n<IRa?@1(+6lwk)s
zzOD7A(|+;TJ3&W>>aeYFAg8HGR1?g=95r%aXJjI9hdsV*H&d$F@W?RK2;TR5gEozp
zy<W0aZWc*p{n(Nya!TQz1J65E8n+e|`JvV*5?`nV_lVk)N1X?B-kTeM!X=;2rOdO_
zE^+K<pESk6;JHCBShgKy(D8XEL!RF|KX%#p*IjNN?7a)AD$F{F`!Hx6Eb61Djb&!`
zIT#IFHKn3og2P7FOQdl+!@^Bl^O^`i7Jc(=d~g25CDc1MM;UU)NlS_AJ1f)b`JEe~
z=Uu?oMcH&{GrkcRWAsc=RndcT=6Z~gcJr3kwonKLZ<nZW10jnPDJ*S<U7EEX+}E0H
zN7#ghg2`opfX)5{K|gttE#|u&$;Bw<WC<0B#j<JK{JMQPufsDEXa9mC(8LY)1A{D~
zWtdGaFs(_}bswm2+X=mR6M~JkZg=sk?cKppqD)nJ30dIyb+}(^z59NqvTWiZ#=!&8
z8ARDyhD$cIPoS0Apm*xfY_ql(3b=$KB8^mrktZo-8|AWTF_!#Wp1Nb?(y?rovb7n!
zsB}3Fof{>X5>>W(0?t0C0NRn!ic<irW#eAS-fsbn;?+RnnF==zq>W)il1r;|zKX(;
z-wCcSoD`A{)W~>Z>ot{@QItSwaj!MWFOfkMZr~SKRVQ~(A&IoH<;B+c03(rAt5r1R
zw{q6UlhI(F(Y&>v!`LV0RpC*o8>^d%$Xxpx2iHoQ0~cLN$VWLfR1PeVP^md9C;nvl
zDM1GSQMb<`PRC1Yi1Wp(4?vYbDgAmudi<<W_JBHY-jK!a%eMj;v0q)<Dt1Vu>#!8a
zIddf|!;s2ZsAp0X*`+NkeOH;od(ABLS7w)IouB-wS1_+(Wn~p00*3_v)KEws1`ub8
z!tul#(X9y~{>A0bM`0)c5X?cR=u6Z!Is!ll!p9a406^j_BZUq4*9Bg4r}c4r{;XUE
zf)p3-Box7oG<&AvB;)*Y4IFS5@?%B9l(x6Nz^d@A@hPH^8WaG)oquNd<FVw{VnC2b
zZp`i5c^eUkNiz^F0JBg}_yBnr(g{W9KSPH4RfUpLlrhA_#QKeHJJaC9W|T8>+`nUE
zJub|VRzhAv_c~+lsys$5=<-D3c8)bd?ozb@+4b~_M;uaqOb7(v)Iit>3;ALoj{cZp
zHM5J@S>FmoiIymwwzv|#8s5No*4W-ALB4E|ChoDu%s|zRC@a?0COI`{Xy?2#$aX$n
zI(OK33{|zRZd%ZuT#5}8q-F&Io}sk*(;+S4B!VPqh2bnX21~?4Kj!A^87n)<)O;(q
zyy_+!CsfC99~{}SOk70a?i-Kw2`I7%+3^4qqLcwiqRmMAhHg~drDl1qoi>~WHKHHA
z{Fo8Kx4OPYyl}n~j0K1qm52L24s!xGiW>AmV`oR#!Wp+0kFYb}rq1*DVBW3R_V2PL
z_q5k<ewdby`>FiQEkDCbHdAV<Dapt%)zqm+E@rBFOAsW15LaC!Z_F_~(I{>U6+Fog
zw9UJ!tyn20x(0t|$HtO=IyPnL*|vXk;I>=cJP}i^E7wXlN!H#mv-4rp-k1(702@yv
z3l)pl)XE?N|F)tmI6`1tl@aZ>nC{EW9%nLJgVp;H7KlMXqTq6tHZA#f|GKti3b(-O
z(s$CsbRP>lp}v0~${}7VZBFS)7Devsa_bjU(=#5IEl&Nl)o>yx>}OGU&s>BX6S?L?
zFsp5-Z=|)Dk*s3I3a563XMo@(k5|8T;O}Mb;-=2#RhQN`&ZJaRc+*P5x)-168qx}+
z#C+O1ew2FrT)XuBkYgiq**9WCpX*h_K{N%B;?HSCq%pBAU0X9cpQLz7Oi7@Yf1ni#
zBE>E|l;+|(Oy(IjQC-g8T}G<S)}>jQI5m>bQ+=9wSjY{K(D=Y~v;T<J@ry<ONP8BJ
zdRNn!sZ=nsPKm|b16SegPRXfaMT}D`{?-0A#i?@rdWDN}q`_60j2n4vtXK>Hy74Y%
zbcRRE%Y~r4P%G$IR7F`?!m^Z&Xs#5-7<X2-Y4Y%}#rsRB$K;SAL>u2-%H74zSgxSo
zFOCZ->F!I1fQZDTocgTY;{z_?#m<WIN1I(&G@8W;jGc$8m^E#_5li+Q&`Nf8Q|OQ0
z^ASGoGpR^irNo5xHtn@2$(JQ}qAxM|zohx`bAqT&;SnGJz+~K?W0r;Kd(XDnmUi!@
z6L;uxoI0+dWuVbW9fiT;8HA%tJ(3P<ws1^U3|cCQZ7Wr!IYLw^l4lGweJ+u0ZPOq7
zE)!NP@8*O_QDHI55PhtCENP~amRfCsP(@(Le&0Ok=HC`+r|bq0fs#mNCf@oH9_`Q7
z{cO*`c=G&(=4WsF)%^pG9z%bj6$$F@?mO<MG2c+XZ|>|rXO`_qB4&|c&|z?Zksv|<
z0Ejy|C?`sf3o&XYiCH=_hDrxhi;(eSeK#<C%O9ldL>q;$ij&BLXvO6Q%QJKB5%Ed3
zG)#T+bgEHjtX2}t7w~qMHB%<&8A`bx8P~_qHRM0*O~KH_cBoD=*dzPer=oNb2tME4
zx;DM@?@4&G02%qcruj%5V}dknQ_hH!h39LU6w$0%2XfvbeM?fsbdxc}iVN$|`Shmt
zV2MrfW1yRr$TtdzKe`6}MwdpXHkA_quxY;%BY;Ii3l_;oMMFbVDm(OapOqixBaqtt
z$ct6K=}DuILw^5!aAv7i7PHb|cXOjp%+~%W<zzBEjhNqXU{M#dLL30Ee-*vdV(R%8
zH_&t}g-OTE(D2jKY3c?tPR<$i31>PO+j7={$p)!D3?qtU0lxG|N<wwucigq=^cBdj
z6&`B*dhT@QFCXO>WT39n8Ke-jRyABAe`T1zXtx^JUl(F2q*rqWqHh^N4mbo9;iYW(
zlm0a?xrNT|e0&rcamijY<V<H$#}#JFBBdjk_(aGOmQW>@O(!H(DF5hc_r3LYV|o@o
zRB!7O5Hz(xp@t_^m4Q~sl#|cI?}9e_@d8}Kr8fFW^<lN9UHYnW>U^$eheqRic%m&?
zm8G{^y_-re%xJ3L-o@9E9gcCiS67m!%07NAO|Zh%tZ)=onDmaA!Y#P;PYj6#HulA{
zxv|ogxJkpnSST->A&)fWL5cg;MX2PeojW}^O|^n^3I|_3My%DjEj7u4&#}${@&EM8
zzwaiXmFJa!_>j1$f1LkychG_cq?#7?Ck(|}^cw@FWb(N3plBcdP6PiIw3ZqLM=-9#
zrcNf4{*acCU=snYc*5cZi3sHcC0u$qZXy4S1kiA}+HeZs<n50l*A8z=1oQ?iSRKKF
z(p`V^EkKQ7iYTD{*Y%mD8v>BmGgR(^=K{;d2?&T!It(`6z<iipAE8YxFaCfJfTXa{
zvE_x7HfPnUJKDioEZCeae@!?gfIQOkhtTZD0y+17FXcx-u-+iErgtKTA(qkKP0dsF
zZX6G0ie*!oDH?0PetN_z5rKeB%wM&IuT_d!mrfd*o8dxI23ao+D}=vol%FHrCIA5Y
z5f)m%ah)b3cI3c6kJ-*T1F!sdUw9ZF5D0Hp_aFAIo+JGfG&OI=w9XmWHz<X^JS>_|
z=i*iIhzNY1Y|0_vHM6TgsED_%dn*~b_T$1H4_DUy=nVpOgdB+^?UqPQ+b#EC7Lz}u
z2y1{bx3DtEIO_l@<PWFHm4iJV0+3R9babis6Vq^FDE^M)0f;TpwUYCt>@7PoZeQGi
z=Swlhk8Z;k%T!Mvf<KYK_P|DLLP}3Z^;od$RK3B`XgLgf1jmszVf9Wy^Srsg&wC0+
zI<bB3)KKoEo0nB)inq#9#UQoEe96?!=qw7q!e*B%>8=L~`H9Bao4jR*6y<nFnFZ^|
zS}$G@cB4_GDVK3yA{w)!W9P?b$w}g;q)_>=wcHge$pBO!v)!HONN4-7HlAr~##MR0
z32(SIZe_JLjyu0#F3`PcD-Tw>^hwgPTLMBdIO|8t5*p%n?oSG~Cl8q?KjIqdxs3}R
z=Zf(&r3)AN?}&eV^uIBCCpcEmsNLZ7aLKw{)`DVD*ke`F=VJ!7<%z|yu;PPb3N<Ru
z@w^fE@e9qZkMt^)X5Usm18mUAUy~C6ut)Ysi-DJ@q=X=6)@s&jSWhbwAS)EG!3PQG
z_Jq}(Bo-)KEqC>@Hy~0M9;U+*85c|cypv=uQB1DJtuBgG-9&Yy*tY7`ARMPu2wCYg
z^RX;lM`2da{^*F~L7tH+PVo#C3-tGcNV@VX+7A-rGCM<F$>BumwlMn~{#AGNk`AV4
zd5G^4#KeiX-Y81ibJb+mN;8QxPF@zdbbacHf;w_~7&1mY{3T?+YG_>&c(agUR^zNU
z<8=G(uqV`qPog!b8b0<=ndIDIyiu<g$5u+x8pD)+Tr=ca_XVx<EG|_|0}1;SPKVDu
z(kVIIyf{UMQBAlaOEut76@H|+219nKO_(tsH$lgxp|N9*X`#BYpczG~Wu!#4xq|3~
zhRZgVA|Om<W<i_=J$VUV7Lu_CD0<hbv!r~G*0_&$`)KxYb!DOXV{=ort?d!_OwL4b
zGgXs2_L6E{+7wjyG3n=pAfiOCenugSA-B)G_K1@|Z^i*G$0Er&@+nCrU*FS`&a-={
z8-lP-u&&%1J4dhfz#(^X!K`h}(v}8qw&}g0(8<?v3`Q2@aE3?mrQ$N8$gbnzU??{!
zdNelo<mm2Nk$lEG+BYKX>RNd{@3iOnBW&!|iz0cig0uuhf{auGT71fqV#mYgf}Wlg
zsRO8^tM&|vA14CWa{0XDI3Bv!z~G^=Tm}f0>}9WcSVhMnNpJv{XTP_@y|3Hh8E~nG
zkPXo*GfP0B!W$I>y6D}NZlmT78n1OZM75kIf&dO$il9$bWh?tkq|u=5!z=Ya-IH)<
zZtBRDrxjo(LZec<WPFYTnYgoyTZ>rsESq_tjf&H3ZJR)!0JB^$C|-1O5@%WiH)kjj
zEe{%0Kr6s1P6X*92%l9D=XK-Mw%|ws4%!6GzN#wlRf%7l@=9l5f1avpzlou(nQ!ul
zh)J!&@2QAK`N8VsD7LgxlW`%lI9F0U>;0E$jarymqVFe8t-9Z1Y*(9CPu$vxh8(lL
zP7UIIh+-S0Jkk?<hIM{r;x7UofocX35P=y8vO)eQd60NJ>HQs;`WH6<fYd*(zvKQq
zbwRAh-}(R+jaUQ+=l(nH|K;<P{vD&@t+_2nAb^(hAfTQ*v?E%&D$jRLLS}H%Y9_n>
zERR#GWWo9H;%yd5LmV4q@A@v6xj_g;SnkhkitG4w0gM!qf;I$$Qk;Wv2%&(Ifw`r^
zXu2~qeuRCtn%KkVXC%qdTd=YE4JDIU*58vQ;@G(mD%EcQ;6rsl`|Ym4<oXBZ4mco)
zA2=W~U|E+KFa-vXnx1wAJza!e*zh~coBtmze{BQpPqIJ4eD(Z?0@t5q0RTl)0I>Z(
zf&X&tw?hDkJN_@i2ldJ!1VFz{;9rUVaRMvARQ*`zm1h#KSvJt>*8;M*kYG9VWUNuD
zY6Twf9c<SfhTIZw7bm1|J(4vw`eL>Yp%WM7{F0p~)gRFqlMs>Ym_l?AzJc(!|4AMs
zuH=8hKyV`fNX);T!$EI>o8}#Yg8C>Tp`~ccwp$NHnqVS6i!@tLv`CT4nguHoS8x!5
zcS^s|;dk80Q0B45A<*SRNeTa7g$sdy0ss^QG!v3&|LpMpf9?q)uRD5x6y|>w^}ju5
z-;Cd+QL78~?<9WqrOvsFjmy2#wdOf$-JJY}iNhXk6Zwd}KGuDe8cZDUiYDn^w}x8U
zApO1fB-$#}{_F**lz^40Ge1?4J8Kg+Q8%Y?$(G_bSA~=QC{L<3v@ZO&hCv7?nTXH3
z^buBSn3*B}hnckh=!X#Z72f}{yMjb<{#m8|&b6WVx9jgGQ1m~={1t}$mo@iy5&)3(
z(jWI9A0P<tUkS$l6Am!@mz(21Zs2dQ<d44_@vrcApr>!he-gdAgdXCjJ%l>4X|Jhv
zx{9sN%bN#dG1Ft!mh*3vV$CHLxOD`zpAvF>PL5bhZt)@oAfDa@R^6$hJBJi7+de!_
z3e;id*GeY(r5C1a8qXhufi{#lhKQ>!r!@kdj|A5vYcKcP9(+vu*GdC4ghu*K^~ohE
zA<$$%)_g77nAdsr!&|&#5QAzc0Ut4gIQ5Jr(5n04QT~PebZXOA{M)#sjri9vG(7i1
z+Yrhi`jbtFHGq1tS@sD!Xbx!>zuf==1n__e2m)OGBFNV+v&ks2{P)#|;`ei_S9l)K
zYhp18?R{_Z@5qdjWqW_f*J8S5K$$y`)L$p-c@j|2sp@MmK<Y0@>Iwh`=%#*6g8<?X
z_&e?x>~~jt`29U8lm3RjD5Yio%4D<J44TPpSKUDAHy}Wnw<BMXqu;c97O@_u2x0ZR
zBmjW*&MfR78V)4|1;4IY|53QSrbp?UFS|5@#=X;OulDe>^ae7ho<|Tn0!YMv6Dp|A
z69-UE;4>NkSa-sKsb5IAD4is^I5Up~>KNOmlUK{0%gs-H`VZ#zdwBx2?v=`tlx66O
z|GL3r{SJGD-zox#UfsaI#{9_mKLp_XvpoG?qi`>|K}-v@{N_6Duf)rLWYC=dmry8w
zSGBSBXL|XwIARNk3<za#vK5A@8$*HiDT&sr!L>3{-&w2c9>o<wy%R_Z0C>QGy2U{K
zH&ees!GANzBk=b~{<~hPzdGZOxXXnJgf-PwtLNVBWjTL+x2No<2V)Cqq@~oP3~JY0
zUNk8qLxno1r5X5*zaey)d_nS8O8DCkVp}=zO#sNE&@TTi6DzAJ3DguUH3lw@SCU0q
zfqlgei;0{5ukH7>R`^Q-zgzI>w`MfkivAw^z~3dt1b}!U7D$33lTS@k5@V=~K^01y
zs(K^&M-s&H^nbPKuY!VzU$DrCi{2@W(-tIaZry?mmVbcTpCm%BCI1%oZx`TC9fp5%
z@wamR=EkG{j{<Dj)9(`gR<Dy+<pNcAUyKXF2GCwj5Zu>x{l*uMe#=mzMgB{)F+Hh_
zED6I1W+bGNHke$U6lyV6-XG8V-=4TX9{Jy%Prp56*~amtG7KAZ*l-1nBGd!q!b$4G
zC7P6BGw`6(9|LHsh5mRLAOQ9-YHHUgfQ~=_;I(6k!GL67z;|HX`ypeze-Kw3kP6Aq
zj&X>yflB$z210xw!Tp6ueJ}x^$<8+WLQzNreD2Q9ty$UrB7Z}xzo>%vA3fH^0^IQf
z0C_shpgu1+|LM(!<+gO<EqEs?SH3w41}Ll0R-1o$afh~UkDWH|s($-NUcZI+=avUu
z2MU9f1(14x27weJfK&?rvKdkT=%pA8XrnKL_-a`F-thlM{_>#5r<`r~_D~-)DuPQh
z@W((PAETma=*qZnueJGm-JQxCj)g4Y^1I^eYCbr8z38T;$*WGZZ}!x`cCRhi-D7q!
zWvh0s_I^*yAqs`T+3yJ+4qwfYC+XL|(l31FvdK1UlO(-b^}9Or-t=-Lf2#Iji;RMm
z<NAJSl|yqZu{XIBBx~M)yK2h9$jsLIXn;fl+PLPY2%t23fN%nuwApp2p)Ywkm9KFb
zo`51qE5SjKFK8Y?rOfUz8PNY?zw%M5`!*Xi9jm0!`4(S!qp|c9b`5QPJmCPn<bqz3
zUnKxo0feG|{<`$T3RnxE5o6CD2d3G)ht`ix4BSbZ%2*HjCZZGS#@^vwqR+9QA;*nB
zl!cMz0KeBEfWaK+?8u~Y?6zl(8{#A0D`@xl`?Ub5T>!xF%kN&;Be|de8QijQjk@Zp
z@^3*fJzv+vUD^HEQ*a-6LIEE3KT!7T>mb+=jO0Ld;oqhvWPpj(>#LK+He0l)8$FXT
zQfltH?b|m;=8s1gEPv*|-!=XFcEpVGZ|^^DkB8oW-2ZXtc>n+)YxI9n-Xv&v3N@wF
z*mW?tTVH8+Q;X-(h$?nh&bkP&+^ylBm$IIcJrOmDH)3;S3~hUwv6u*JMKmiW9#qEU
zNqDb+>Gb3^yPOAa3PYMD$rtsbxnN0AuU*}@Y75`I>J%4>z@*Y1kLbL;!F6tiNB<jT
z02$7pcS#Xr)mEjsM~JVI(l_`;hb8o1SOw$%KUT5V>6hz8MGF8eLLdUYr+Iz+-tt^C
zrPqia6t1%GBOw$tp8tZoA#!W~Zr8FZ=-m4=WKr~`wvVt~-k1Vky+D1D1Ug!tTi|XT
zrYK6G;R{$K+C@54TDJjeFA<OuPAEJYGDD%>NX!hE(bcR^dU%)IFE_yrwu}LWOkR!b
zLg$^vKw~!NU2isokl(SPG{tde)G$Eq-5%NJy<75;&rOQj&Bz%qIYCP8e!UTVg&R?V
z?GaD9?@my|p3VY(rAobE)cVt23ZUsRVLy)e`R&}5M$ejBheNLgepq(9oq!Q2!+3aF
z<*^*F`iV(`>kGRWXbKh0?%a_<jpDO|?TZXtXSNuU#n7zZ?C$xv6A^A{EDF=7skD*}
zOvYTGU7XWi&d*%rKe`(`T|!ouYQ6cT;9!Kp7R+R0R;w^zYQjkA>-l(7|2)ZWB-DJ{
zvcRw_tv8w~;<nOW_tCG?WHPmA>1DU$>%n?$d(NjI3LnA7qrPrcO>}s~yjYj&;iEue
z3po<puU7QXWsJuDBhSwoP?U`-JApn!-dv_SvgH=JOV_Rs$;erD+w(FIgX;_3%7_HZ
z)#jEyrh4*4J<K)=#2v~;$LpJ9&tjuwnNH%xySX_-JvFo~!=1gy&h-n_yU^mX44zXb
zT1tGQF4`VJsD8On3e-rrcgHb=%JcCS`rdJ#BJB=B1aVo5%T(Un;@OR?!^nd}30%Q4
z23Yco%v9oUeRRhiKWY-zDpHj#A7l0VZ17Uyg}CLoDDr7tB7bHZ;h8H}R9CQovd%LL
zsM{?;FPt4gRmxryE9bSx80q#ogSj6>PC$u)dLQkdO<vS}^XoIxCFZOLc-MUrd!+Xj
zh9COH+H%JHHSTe6K!@gVvcl=rhTP5k6D-Yl>0zY=l9E!{ne4Zfm^k};{Dp2i7Vl_*
zVT+39Yy2Mv`)r01-FC^_WlY7T_EZIIN7WlR(#Ww%VdKsYjz>cUtul2)lck~|SY)>s
z+P{-tL%w$}*q5(N(G>F;zMM2Wn=8qp<To}@Q$X-#JE9K<9V&`3ucCfcWuwq7-^PED
zWH-OxX_b=obpeXsf^ah5{UE^%%+}tVBZ&e#%{om4UDlJx*Ks^Br?@x$q7;9<W4d^Q
z&8`v!4gXkQ^wt4-C7GzEc)*tS;hpwI(F4_};rlY}Mos-4$hZpj^Lm2e>k?0hhI2EG
zqynPyy+D`DMn^t>1AY7)W+M5!&j9xBZ;zo|uCakZE$J`MNCFc{iD=y5t2pN6-$}E{
zYALgg<92cLN`sk_0t+<g2Zf^>DeezAG54W6T1XsRsvP@vcnM0!7SNG8V20|g(L>7~
zeS~oC^WN{@8TskZRBKLT|9~j`M6OHHIjpB@7Nc<qcqE^3IyRV!!MWD>FcJa*^Qh*;
zPhFyJVDe{F9Q00k(N*~}U|s)&ZHKTYx<60#g<74yc^M{J&iQ!(nfeu0%b*9leo#*l
ztPLN}C#{IZe!V$#mBjB$i$%yiwn#zyWl;^^i*lX@%EQ5FY0KVT-&ePfk=9<9SEq}5
z(%7>mu7~zxQ`mQ~F5cO0HYRZ_dJJtenk%Gc{4R|FwiNqJS*p+|8eniIn=hj<_sGjc
ziT6#im+D0t;}TzfVrSW5%Qn>?^H^%4|J1WFc`N+p>8r+`Vrem1<W^yiHC>cB@{b>o
zl;oQ;gi#gm!HtRWMv1Mg@v=;E2bPzG?cK%#Do=-mTg-zeAiWrU*Q|>Y9fc-^d_s-L
z*6|t*StzyFb}uPmm2l1is7Wq(c$-_vnGxy5Y>a%25f;waxdg>#ll5i*It;{45i)A}
zNC^qka)}Sf)a@I*8r5r24+zml9Gt$rY;u@=u=^rf)wT$1{Olw;3lsx=4m^B%8G3KZ
zsjjb{_1IlJap$mY$nMX^6JRM|Y)I8rizG=9YxoHAmA>qz+sr1t*?!Vuxmcs}zKinO
zhDg0-j}?KInRmMFNe``BA^cUrN#^B$5#P6PCO4|K7mbsGZ=oVE+YQe&>17P$?${rH
z(R%iF)+aU_D=c+$8_BAyS1i}WyQ7(wy5#XEv(ZA*hlb8YOsNf?80o>wDK(?fzp>1k
zWjcZ$Mz7C$UpsBGGqVXUBQ(r`aKf0IL{1m=rovAi*cbNMDW(xha_62C%&{!|y1zN7
zj9y?S=6Z>j+N=a&Z;?WYbNnDX&j@|%-1uHNlZhe&MV~=6ckoQkmAs~6jUqe7=Y4Bq
zN$=`lnNvDusxNTq5!U+j2n%7ermv~Sa<vGBwTaX>TZ8da;ke2nYlw}`1iWohyM9M_
zg1tC8Sc3el=AE<)qt^FSTV+?g+Y4UKtn_)TmP3qQVBPMo982yL=ON8qKfk`OpC^(d
zYf4!eLMlCFaAD{UG9u;F%5;Y)uu@W+t!!jIjeJJW!6h4<%{?gbue-y_n;^Wb0i71{
zD;P$S;Ei`!pn*NNLckXY7ceqf$STzFs`vrdg}AHa{(Sn#5Y|m{UD%Ox2hFhNnIYqE
z*bMJGQqg;bjXk6i7{x0%m*M=0oYtm!XfVU$aPNim$+wO|p2QfW5W5TG%AOdfl9(Uv
z21pnsd_2>Ut))bs(SKEwqQQ%@Qud2E2OnDmVFp`SSTIYdhR?7jc}~!Tv=-_HZ|aNl
zjbNMELt+(>9gIxPHFX(NP_T_!B!8>0X=1t^HgVmlma%XXyIO;2-tN!&#{DCT!PAk(
zKpmb@ep7QiJ61e`C|1pfPP#nt{?MhXm^_&{(?3EQ6Q)fgAWY4%Vm6y-x-sIDl)HIR
z>5q==O33eOOpom|Ut8=7Cz@C6O26N%oaXh#B%z&nzvn&bh-7X*Y|FH3Kk5o4_C9Pq
zw*YP~iIy4d96@N#)2sCyOciN$fwOYe#8aP_!#nNT6Fbp*^yO<ap?ztB3m~mTMuAl3
zW?BQ!?`;YDGRSmKf({O8mmah(x`tRIeB4H0*S6El`?GDY3x?QhyN)L3qOJaCv4+0)
zR<*kgEM=Lv7;<{EI29HblkXZSY#6Q>ctC)ZunDOXDpVM{7*qlDG$fJSryeL0kub7g
zLYcDsb6-XyQnN_`>f@BL0cyakYV2}d@Bn>THI-yNWz(YH+PtJ5g#VmaKAR>0<_DY@
zdb&vQG#+Z=z^;R*57<^QnJh!EY(HZlDJvv=V7nf^Sbh&PoM(-!PNZ0gqNNM;pM?I3
zlqpiCPQl8>3l^?kfzv(HBk5Pl_fSEBF4)B2&0<v%H1Dyqoj^Z~IN&hX!Xm?&G3fd~
zWt~-2T+6nGAxLniad&GZ1SgQjJ;B}G8+UC;(BSS8+#P}kf(Hq1!QCZjavQSuIOmSD
zp8BP$*7(<~Syl7<Ym`%>&6MlHFkW&(5|a)!&oG;@oWPm(x_zS{BL7#9VaXXBclN+p
z=aw_#o1RUdd#YH|pWtuPG2D?VNst1u!T2i564E}|1m;)r!pi)TgjNX?%z8AVYOhOU
zJt8KmysUypp;yrxBH<xQQNI6}i~*+<)8_JqNFI>hyLE;Diq)h}%&nv=1C~mbO_4lX
zMCt@HGW2wpmkQl6<*F*$^N5n-<C0<%<2Bx?DyzQ_G0<tEc;kC}y)m2ZkFLOGN2Vw2
z3nxZnf~)e%8C8zOhD1jY(AXd>z~9!~+TyKy4yknsA*7dI#V4D+FybGowJjjkDxW5S
zpI3Es8RTO9N%=&Bp}d#!sor_<`W{82!<J!bVIEHU-kyaKEm|~hoRAemi85{gk2z}0
zuy&3V_-XYA8P1c_MIM7$PTvOJLgG3pvmfl_7K_slhno~c6Ehpcy^ZL^tyVMx16K=}
zEm1e^l8YF&WMRo=)3$jgdG(DyFc~ZeEOqh(XDVvGMW!3Ve!*WZt}k*8){jTRtIfFI
zw(rbuF>?s>;fhJZM2=v5TS^KaNcAoyfjc94<_A1ZNWbI8I@Sj9^>t;4P2s8tMW<C`
zuf)Ej&H<~=I?AtJI@ZeOnM^KV!Q@jZm!Lv9v6oSCl9hd^)ZT|$t&XDKN`J;qWbD9i
zrTj6QJ*n)<yv-!Cz|5gsCfr;znm}CUpUsl)cg!9}MMEm&yC^==J<4`;7^=T0J<W(;
z|DP)RlebI+iJ#Xhc8MEZu;8M(e9<psEcxK*x2BevC5;v%bX!sLf~TlB4I?rgGRT(B
zJ6S+pscNI0!PW5KM(JX8aoy9vc#Ii(zf~IL`sQmw=a4@;XQ5lz9CuuDR(EFeZrpHX
zvo%#u3d*#cqnTPZ_mQPg>R78jco&6@wZaD^><2@MgcjKI6Nwfjs(bwuo;plEcXAhv
z9<@*1zN(a7IaN1TwWO`Y|Hu9VoC9ipaDIFpDh$#Ku^bM*7hxciG(PZZK_lp7jrkll
zP?}n$ODtA0pOxo>3<uF=4?!5+-~YeXe)1A@BUe7`Zyy`=F(Z~0;~b=o+t`(g(#9sz
zA@HhTq@$Xc&Ekzr<GyaGVjG`O!}qxoH--l2i&*h(d?9CV9f*Sm$Qnr2^o^rE>FDAw
z*MNfX!zlip^J~|WpMM7h9ibY7b(DG$FQI~Y#I(6PpPv1v*&W`d>iXL24*V7tWHjs)
z9YNAS@li`Ozy}5_nay@f_txUY<oy55264`K^ML7%GhqQf=%|1Rc+Md-F^t@Z5xuw{
z3;LF2pOpHf9xtFvZV)hO{gOb-k?ND3@WB#U)eqtdMTZ>9hCSZ4-og34>CxrhaJ3P}
z!#m$@rZs4q(n|HSx8oM*G7K7bd>Ybr_s-;ed<K7tZGUxI?-QqK``86W1F1^-vBIv<
z(T;$X{{ZnSW#*Xc1NXhHqm43*3*2l4gDy9=Rb2AU-w*#t0#@sIwv#b|%b1ze{?VeN
zd{SM9n@NqJX!z*t?qM5{q&~yb=yv_@$KPbYt(m7OR-fu&r!hrIl!OXvi;?_|07=3)
zETQ%XpLJAH*)dDgQ)1+|CxF3%4;3{c@(B2OOcle}*J@z%pCSI&$|hg=uJl;~j<gX#
z+32yOliQ#es{Jv!dbx3RI3Jx5G*(ztik}6*iWprxpOc@qaD}F&jz&=_4JAtj+OaUF
z%6kh#OLuS~)SQCwKF*ivbW0<<!^b=C^S9q;2j4}qm+fvoJMf*N^&-dRy-H!_*+Kj_
z3K9qLWfQgYr}xk$<L8YV=E)RM^jlUtggUhy8ry_n{=diI*^CFRVEAE4g5%6R->bV$
zxjk}_M;Bcnz&s@mLTI!=rx(&JXsj}+5<`nKHT=729S`@<mIHly4aR>}{u^<B6KHuk
zmu)P|Q&j-!8+I{F!P0_u(X3oCO){FaiXpJ9-wfz`>~`$bZKxUhkaDh3^5;wQ^!K~P
zMHjJDw+}OsQ(M<QRkbqmy#)nkrdyl%Kf`5*m`kCd!MHeJ&Q8INi276XNyR4-;f!l{
zWh(lXdM1Y!`jgV|km(^4jU^_I@RN2VgY{m2ldy&IpEK+K`mCz|d2uq*%nUskQ7pn2
zA>G*0c*MbdPa*m|lm7R7^FN}3x|uo6m*690)Oo1wK}Fl;R>`!ic{v&|sx~suS*4(0
zjjI-#S?tVZzrv>W6k!IlvONAtCSXz2{3053>0j|Fj#e&K7D_Cc|N3l2kn;It>b@|R
zwOY0L5f*uBH9hiG-FtTWcW745q#xO1{)?vmaU=cXH_D=byw51m(oaxZuGbTZ{IId-
z11pO3>;?XxoD9O&HdQ+g{j$iUa8YZ&RKH$%w>);XcD8rBb;X8N=JfgMEvvw6V>@s8
z$Mzx5iObT&8?uNnyGSxV+_bsZoOy;b<NI30uNkGeiAXdsR^jXeh-@HP>l2f|g6F@{
zv=Wv~N_bCXyKNj)6FF*?q4q#}qJ>{=N^bz9L!F@vAQe$ape=Po&770kf6XLiaKz6)
zah-<HxT&Pa3+3zHMX05ZVi`7Q3-BeMKW!?19X%lCIy~E=Vn!|=;UM$pI*#6ia@jPK
zky8o#p%Ms|kbrB6tA7$N;5FthdJ&<D93GHwC*wl;4);`)s~9d*l+jp>R+KrNIv15x
z1fW~4ppa&bI+I5SfhnvdjXT-(IQAIA`$g6_l48wmu*Zav5A)0Fc4>({w+PacF+-Le
zAEm70R4+d4lXO1EQOtyi8Bj;a=D~{J2oi`qt4`RqI&F;oZcVOFqOkZ;Rhv64Bt>N*
zvuIjG*lNWp58|JWq4a%ST7=lIbmAMU^|j|B;{tOCC#8#<hIE@If&qxd?t~4Q<|7;Z
z4Y3#WB4S&#k<P<H6$ozts#S%ra)=9rRH(=j4nKVN<%A1m3G1TPueW)vR2;NeNp25K
z=eVao)wNV#{E!NO;uR9%pXx#I4L!(Ky>MO7YFPkmwY$gR9X#?|6S?%wsFf2o|Jw^L
zROk^hqZ;j<!#^Q)<MF4GFJm;Vpbn;`0TNSMZ}x4om{4Sd{tz_lzqBS1+U`gtqe5ID
zGJ-lQh<Vse_wv2STjl~IP#~CUwWR4luPth%w$g8S{sFxrpKSSshsG+i$z>Z})iIYW
zvwy8nblU=jGY>oMP)P|#7gc;-T)c*{xZw&#1PZ0=RC7#2E2TUm2hjAL9Mh_dZ#1u+
zD&rOM+WT?q2FaI=dQ3q)7CZ1U02>G>MU_d-CT#*#1_c`XiC}!5+^*)Bvp=No+DKrZ
z_>p$$d&NAdp39ymI6(`FKO6f?j{Z^^v4l+A<|1B5j{Bc|17eNhSh0R&KsqpA(qh{<
z2Zn)PcYc5l%`u2(wuJ~O9J@e1If_(jI#mKmx=$SjU=iMf*jlr6u|a8FGfK{^<@!T^
zB!hPRU2KMQ-bWQ${w)O%FgTuOBpF7rreK35%Pu{Hy}P)le3yBHR*n8`WOY8Hxat=f
ztraEZ_;R;mz#jTeIZ=pSPV_qRIVCzSN+kR4fOaZ;Cqe8@G<Ncn90j$u?pJ()?+kVM
z?B```BarE#a_6!xf?aiGnaslfB)Q;l(L!+=bD`>ks@&CrG7u8^PK7|AvRw5W8|v5Q
zn4wy|$K!QeAU4O7OhdJq%{_nRF!8xhMHQ&TMu*91fq$~aPw~;pfIh(oAi|;n<`r$D
zIT<<3`0eMVfACQ#p^$Zyk#ND{DDTZ>$!a#1<qM)xLM>+DAGPqG<~9nAIwBb0Kc2Jc
zy$uulR;0P<kHW)uMH>ZGjQP{fNQ84k7dVLh61E5XZ{-EU#$CFHnh%d^*V=GA6IJM&
zHY$Eq>-vs__g1)5oky<iePYT8-Cz(l*GK6SVVL6)C}63-0#xvui)b^P^WS0<7&yaN
z)e+mN<)d5I3rF!-yc1w=5U?BS$3X;|aHWd|$dzGfI47jMyKWr}mz>1Z&H@|pH$~Wq
zQ+5?@eZ^y68HjS7>hJ7<=n2@^uY$47KrNg#P+Vr=(9EgOx5%eB>7@RvAu)s3(vu!?
zv;u654MH|+<0LXSo!L6ctCEzfxYoGkO;hS)_e>l7Igu>FV<dJi#=tT>ZFAh?4U3D?
zEvgU<UKMN|Xg+dtryfdgMN~IoF_+TTJM&j^U<^r<;Ink-d&F{3uA(!hWj+F8FleI7
zy89?+E-@7ubibrbCA_N<vB|fChn@KGk_}B)JNmOc<Dvprp`UdmAu$c4f55Oeo^7XJ
zlC~ToJP9xd&EtoVizA(}-x38d1v5&L$)~(C<kkJ=gpO=Mu5$4)Dl!KKx;Q{dhpuIS
z@oxiSL%h7^0<m@!Rz6gHnb0XFp!Sn$$XR|PQ){uR;D46=C%(Qw-P0E<^9xDm*D1)Z
zQQ_kr!e~C;*^V4d|A&thQ$307;=lFp>qJc%-&~EH42_9LZ&F8tzuHL|F3#Tnh>;uS
z@Rd6^TMoIkXz0Fea{OMnxl?<7;P*I*Fn^Pj04I}bW#p}@x9z6}udjHA)#A~ce5yL#
z=UrAPeo?1Z6<gv#mHYjbqNj|ta8HZWa97+c8@3m99{j>bR3cZr=cE&H#3bGY>0$aI
z3c`sSZ;k1CMr}_-mAdrqJk)DuAEBQ$odJR^P7ZkilGp8Vo!0AtgI89wg6DwWPui-*
zM+4oB{PwAKp-09>i9~H7L#6r(4;>|o@_!Na6Q(xu(>mj3U+|qQdo*XX$Wp4ZCLZ<9
zRS>*FWKE>c8`8uzEJH<YX1Yh>jdBl{Xf@3EuAEexppynC0c8}^ZO)~e;R|4r)ccml
zm5Kew2~E@v*VXow*UMglrcGP(0_Xlwyq{R;JwxYpy<=!(chslBqtcfyC>Quf!^ulI
z2hEl)u4NHDs^S%O0eUP_?aSLozXv#8aAZ)H=nQ`-83(%L>MfqhV{d|ef$*8~>bfa2
z?mIKEZ1X+AR~2g_Tf09jQ5GSBLtJn9Tu6Dl-z(Mc@<j&8l?~cP(RqdG=e=~n;Ec>!
z?e1Lz<x<R2qJJm$SG&r@$W3b~DHsuEfTfY><VK@{d2n!fqJ7Y3>GaWJ`Y@AF?i6mP
zcSe~N6#|_Y9+e(<bZCC>1S-RDhwksw1GH3dT}%nzGC|k#g$(KGt&G_;v8q}nCCyiO
zq5e94XT@!2)&S4_HQ_I3muaw|`rkMAGx?VFD=KHz<gFNa`=p$_@S=4A0a%Bh-em-Y
z+mKADg^VbMh9|=|1>(>-P-8(KyrfEkx$Uc^@MW#*PL+PEcHzM`32W~;oa`dbb=CP3
zwe#Os6BFqI?U}PnRr>Ym;3^&aB*P74-giYdnH0$cHz8dV$2(4GMse|IzqvV&UFGQ`
zDbiY$-j0n@ADiBZIWTsXodK^;)Q!HQhWYvG)e{LGeDjK9=RkQ=w0dfi)XcJH6HEQN
zpW3USB0XO`hBKRv_1MPo;Czoq2x>M{_i=m+3lLbNR)@(Fp7n0qaPaBiA|@d(!=$gL
zVc0Sq|8xg|F$b^;sh78FX~i-i5b+~yvG7*G7kCGJ`~tZ()Rr);KgLBvL~SFQ2UX?R
ztw=6pw})w+#4k&n>!9<;R<Os@zU0h^Z0dP65l>vmc6}%&Z6A#Bl7P1QalEgRpNjV3
z{kg;i7m?MfKX?MI<aO(}+-q7Q_HK5arsmY>+HrzjnL(x!D>)HcM22bE%Aw6Thn<#L
z#XRXvoC?s0m`ujI3A|)IdUrT$X4&}>dB{i}Q>Ap7$15Om-=kO_K}F{tewxEAA%W5z
zWNM^KBV+v4x_mJE?S~rSiyLF^;;SXiqho=JgFL-ABfcpD*T#xg{5(x{FNLyR*=c1)
zE7g(r1WACI*Ok_B(o$}(qx>}r(%x#deXe;I*H+h)dCAc3o$GhD^x;)WIK<o_won=+
z+>%RtfL2b6Wjd1z(8sp;lJj7`>S*}UsOUTPbrI`%_0$^iMz;v$4QcSN?2z86)y_6o
z>+ZPwK0tKc(KuZZEnjXP6HqXe1|0RHHa3xzE8=r=-c;I$MURD1{yyKyc7kRKhs*}1
zF@oi#ZDFF?SxszcMcFq{r+?H-xwf`R`h-PEVZE9<a=q5%kj}IDwc1F4*dI=%<4z5B
zwF7pr75amUy8rbV-#aIR*d*|dIyP^O;0<qw*z_Wf@Gs`$#w*<<rCL6ZY!PH%@VTeH
zbj;i!jZ^J$=V%c{w;#@}68XLM#F5^pfNCs$_eJyun!(pU&YyUz)VckVcb8vj4D#OT
zWnp59vhcIxIx3&bZsT{Im4_?pYLocQIu?YJWb>(dag+juYp!<d!>$JKnhuRhHNCx7
zMT}Xzp(k##-&mx71_IG$Iw-IDg~0RF-XRQU1Cs}i070*~Ft(%&L$KT90GqDMXvBf?
z+*}4{Q@kjQ9}|THZ3pm+pLWit<g}DI20Tx8UrwpgshkhxyfLVrA_+yDJ11Ne3Jdd0
zW!dlVztY$S<)}u*!BW8?rJ6z;yxGOA^lo?k@MbJi<YAUvAX8*4o0x<y^yo)~+s>KU
z!P<caz*6mYE!|e*@oE?IP%2^_+xJdM0qc<ftrx)4TQB6IfNzqhC$*|^KfbjXeBZ`U
z_W@{Z+Ao*r8L@w(d?kKRCXqUogyeOc$cccDu16G#PHXxet}%3`uW4x!p3JO#f2D<t
zzqw@hs}twCE}ei|v99{^d&pt6Z|a-0=pO9RD`f236D_GRSI%@DdN)3+orV67Z`LPX
zCP|wB@Ptr1iyI|~aX;v2D$7>S9}0ERn%3AgB*cacN>ZsDYL+HjF<{eYl@$!83iaYT
zJT&CjWR089j~)nTzTkjQyYV2IW=C9}U)Q9Jv5pjdAUmHZnkRqsXT96KcQ>|9l6m`x
z7I+67{CQA<A{kImVxeJM7hvMHh#kYc_{-``-6QVRYSAfc&5ke2yveQDbX{JKxq-<q
zDE6JaNzjTp6}W_SxYFa&xsP*UHzkhyP9|@**Ugb$d41jw^mn;5k>89i=}+K%Wy1E&
zzJM$Ly`Mqfg^Q^xFilXgreYCQ{0q+FEI|tU7yW&<j*3%a3m>9F$sqortk0uL$-*<C
z&`U<fJp+<B=t1}_<ZDgaxGF=eyAPS#A}Uh*mR_JeLKqw_6y}1Zgi)&GFc)dvIMni#
zqN=?;&=?#x2fdzM^FiI^>LRYk&E#WFv?_Y?W6P*`IStrshkFNX`hAV25hTURELq(P
zN|0kYxdCgp-gvp?<;A=-<W_|oTqP=*@H&`u^wQhflbCYkX?dH?He#daX$%y@L7p}z
zy5>)wA(Kcj)Nb{_<dmklVsJ+4MBo^4lHHt?_u(ErqXrcw;}UeaSKfuh?B*u9fSWrU
zMZdo(MDF|bobQ2e|LuUn2&NQSYzzPS>hT+WH})?b{b>#RBWUVZ`J5<KxDL!U;bzg5
zGG#jEW!f~^yBo_}_Xlm$Bn_i4qKKPcThm@=gl_^8Tz^93iX07EJ3zgmbB_29=*5Jt
z3o(m$Wnzt~Dq)1AR;Wwr+FORTafK(%iP6FGl@4Kvir*Hs6FeLc+P``7RLy?%CREz4
zwhSKzzLFPXBWaO^$SWvGFnIZ(CtDMHV2aVg1oaYX8zTX>#$X|`^r_-7*aPxnqLp8|
ze>ds*tdnk%hlatvFq!xX|C_#wk7U-fktGC)k}onhRy0N4_h<eF2tbHk;#J<=Bi`uS
z<++3BVC{Fbwfg5*x`(TkBX@JAR2b}Y56#Fz>txksF9P5nH7&A*&V_@%-_iZy8RbNi
zbM8u^WRIER=Kdt@?Tq$m5d9-Bd!JjM)VZK1>~mjdTP<&}oN&6N*EV6aQU)4dMy7?2
zwFx8@r1y^dxtpjJ<u}#k4%h6zS8-A88{jcbZPr4aU6AL*`3TI>?ejGNx<tfPw`hEQ
zqykRDcLA&?E1Ss?SiS{leh!yQ_C3j}exqRC2bi#`;%Qy6xbADOVj;i7o$qf?5~y%v
zJ<~t8$|yJ3{(6n(1HMGb4$>U2cbxc6v%*}sjM0A&;Z`vyU2OM|jRpq0j2izszWQOS
z6F*9*D5JolCt0^q5$}yh4*wHg^@T#`XF+nL8gy@9f_z%Cz5AdZqh4N2pI}LerWi9v
zDEj9R6)YbV9#ke8OI4qU=@DdWdFvO{$3cZy8+kZydK#FbS+=&h1VKI2#@6n&<BRN*
z9k-Ly<%i=jZ_UV~IMx$K!qw88r$gZpgeh?3aH59Q%G?*YjH&lsz5*aHI58Q0yHx6P
z+H51i;~8{KBNFx_Y+u2&uak)Inh_eY`tTN=jAK$ATI*?pW>jd%>U2Gb!!*K>OJXg+
zSTEoyL(649b;)v~oLKLU3~`TBI)<Ysch%5meKRz4)|aUnvSn0Hg^Lo!tp!OYP+sD}
z;7Uz0fLVFzZXmXMfxZo)=npG@-kxk!oCB9GiKdLe68d4LpkT`v8z5kXT0pjuJOui4
zMJSm7Q$4nVGbOcj2wj1pGoL`je{rs&(}jY+$=}7){fFZ=WaaqM6ALG!B&~Hv=s0qG
zVD|LjamBwN5!)_kiPQ9j?&_2$i86YDF#fHcY0SlC={LbY#gB53<T9-ZW+Z=F@;S0j
zlweZ(y;Cm(Wk1BMj(a!2LvTjW>5|4KB?D`776$@Cf1g8dp)K@`2o?w^gFWq)^K2}A
zUa0;jGh{depU-1L{<=<|*Y?c&g}a5jTC_RP<v!})4KeQDbDMw59nVcXI}%OUT~7B~
z2Qd8z{OQBKv+NaIr>Db9vToV_!B6>KEK?AI9s<fu!uKm=mP(ZArmJHdp^5Js4a&08
zIeq<5HlYKaBtdjPV}8uwl4Cfdc=O>?@UdbB4o0krP=!}0!~@IjX`8>v)eC)zv&SXR
z6l0Fh^oyJ<fIfFd<z+On-+|tp&K6jX^Hq1_yooKdw;O1OF2Bu$3}ofr2Oz~?#E*YB
zh`k{#xj1w_39SCK*W@l(6?mfY!MED`<Hd>fQT_Sj*e{q4b3|e3*qg;mx?9|-qx?Sh
zG5C;=2Iq=`X_B(O+lxZIcMBi^zo~bRqDTIG5AQC1iSiVF|8sxeD}<H%=+KJ#z#{SR
N1_t7<0_cP)^M5+Xw*mkF

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/lato-bold.woff b/assets/documentation/1.27.0-rc1/css/fonts/lato-bold.woff
new file mode 100644
index 0000000000000000000000000000000000000000..c6dff51f063cc732fdb5fe786a8966de85f4ebec
GIT binary patch
literal 309728
zcmb@O1za3Uw*PU0yE_CYxVw`;f_rdx3o;NSxVyUr7~B)w-60SpxVyW}f0BFe?tQ!a
z_TBgP&*#^tPkp;;=x(~Ft4^Q7O+i{30ullO0;X{l0t388V8s7b2D|_GBcrIG0s#T}
z2?BC700P?knN^v6Lq<hS90GD21_A<&69R(HtV+f6m4XTjI|Sr1FSxzI&&66~m%!N8
z&;iU+ARsWrARur)fA7qBZS3ky4gq<x2(DuTUbY1vzhs*^nA<`?p1y{FfCWN8ASG{N
z|2Q=_`~YrybqcQY;`asJ+{WDu%x)ndx9-9F(o-AYuWDgxXaWKK;}Tql`{x3`%=_K~
z3?ZNwnZRWV@bVJHAKA{r))@e1is1b?fPi2T)RUD*v^I6JgMdC4gn+Ob1Rp=tw+loj
z8+&6z2pC=P?<9Ezt|y9LS?y_S2ylRa@%VXc<UbdbB*;}eLt9fY(**Ax`264zka{91
zIM{!1hJf)a1MfyO_%rP_A3M_=oJ_%O8^ON=A`iSY+9O)>12S4#5j<697QVJl`O@Sv
z#FOISh*=erlbhlWX_}#%z=@eChVg#FmdZgKVB+oILuBwDabcn)NB#6kF-X~HFQc%|
zk|Uw8*-}FL$KjQpfMhx8xcm6s^3F%^XJ)r4v&z<MZP0_yid!0PE|xfcFBYY4z$F>0
zO+>@TzP!5+Ql;kG;~whHSr5~GJ5oLvUDg2!lpzwW{NsLr$A?-24DFp%`2d8c+S+Xq
z7XDk%$_xmE4+1@i+)O{3_o9P9{dXXdB@k$bPb+;~|4Aeu-!(D@wCf0bfp^fO9!nR6
z0KI~McM}RP^?p*TCj`<c0H3xntf+BW97G^~*x)XBS_cAt^q3emKK}7+JVAoM6OE;8
zPl`v@=B^{Mw(U4PnclBJxFqQ9b1=HGMfRjIiy#ybLSB1;Htv6L0@}FnMteHD`vfWe
z)hFN8zG*cFF1K`l@4&XyP3Vx~Ih}yJcKJ({vlru2|9!Ye^0SfuP>>r>#>A;Xw|}Je
zInJ~7VxD8T#}7h#I~|9eLjj~?!XBTClP_N#>K%k8s!fAKXfTG!1WE1`H{)Kbls>#~
z9r6jz^ULEuU-<-twJrQ|$2o;<X(ixyvb1uoQz}u8T7U54IMfy4s7R>h6yswsuHZ&H
zDu+N>Sl0a6Ow_D^5a5FG=$>6xv1mTi%-YyxVPOyGYF8?edCso}39?){@s!z#<!N7T
zmAcV*<Y;LBxSYQheeG3O>AIXRXT&e#5;0FUQ+*U7?;b(G>pFfQlyk$_iuG~lx_Gw8
zI{QuaH#l437K6FvHIm?V0jK_r%BW0%Wue^BfE`-mG)@zz+s$GXtD<F|`u=$LZwn%+
zJWm@0mK;b~%a0KsT!-g3)=RP+$J{N(4nFt*<Uu+sc+1{vM|cA5x7Xo&7t&+z;Vmzw
zwiVKNoV=gq-s|5V_l|i6f_MupSJFi+*LaVbk&;{3ee@Pe?=_-dk=6oE))%SWSW>?L
zM&i`ut|bspK?OHVTJ@KA1<icRN1!2wD0-gu+RG0hw+k#xO!-RIa>1`wC-)Ne&sBya
z=^{26O>8&iZ|qx(&s-<Iko-`-4mf$YDDpZ*s_IcMKos~W%b8@}OH%W?E}=*=K#)p%
zuu>|a4842{&nW6qhbeJ}QcOLRi(RcOk-(_+Eym7f^t#}Veo|JB@VTTSQ$*04^YEPc
z^Tr&t8YYW+PI%iSB7c!Mks#NE<q3HQ?KFuCQ$0=VJ1<Ql0RDowfCXB#D11mz)C5A4
zsKzeb(wfpPq!0z1hnW2?v{x?KWw0hb1hgSKvTyGCa+P78%bWvg^rwD+u(C5UQSU~-
zA!medH7jagH;f)f><5}N0J~u41$_obV!uMC^PSopvL?MukS)$=x9|i(xA625-gPX1
z+$Q}vsp_aHq>AKRdQRT){TxLbh-*b;<R&@<uPf?2%^onyrgu>e5Iz*pyJ@w+b<LQ~
zTy>#!Uy5!y#;z0?Js3M}$_D60S>Pp=Hq(xjS>q+qCIx9pI%~F7Xw7lyCRahlqN~%1
zcbBbqvK9#vx$0)ktWfw&eN9Td=cd#ERViND7QA1P-#qw%RQZhIF25r7eP3os<zDHO
zH^SGEm6WDK5}@Q=o(+Ft8u(1D32|11t`|goj`XDb`qS*HizbcqZt@2mNc#?1P1sVy
z$dm&8()X46MelR<S>$(Dus1G=dK{jl+isE`yC&p4P=s=#-*UHfo(XB$-o9=^*<+uH
zfz)E}jzQszK{6YFM$$A5%Y6~n2`5kId!UHOOczhz_pz64!)yI>bt+&0&|Zh1e$f)h
zN<g;i&PXbA)*1|0OgpJxyX*F>d^IjJ%wSxoqto6#QVePg0fGV_tDlpbV6Wnx8TZMs
z9}aw|7iL9X27L#mRgwi!88tNM!(gzvy(UviB5#rlPJt!bgg46flxv}GpK?heXzFyz
zw5uEW7MZBG#Cw-?Os`dz4#}}~(4^&*Uh#Ip#jY3*g|f+P@ItIql85pY+ir-ec+#+&
z1oxm-o-NztmlO**&h0_yE1uW(PmxoMl+R9Z3gHDH&hX`RJzcU1GY;9s5~5ey`+Z>#
zp!U(%(`a|i4M+N8C2SmnxEuxX^S3>vH3_j+1Qa5>a$3D~sAB`OCm1)o7bewfq-USj
z^!C^mX&3O*LYq-;B#<0S*Tg0#PeXRe?T{Arsq>RKj0j5iCe`B`-3hMv^RtYn+0_{Y
zHcx88CM!7>$}^TE7l*V8*6FXU3NQEiLhqYW^B~Q&_=ZOr%Ufy)W{(D3jFCrE<&Y*r
zIH-Drx(2QYJ4mK_uaF3eBMzEfbWNJ<KGp3?4-#+3b?Ho{%9&1Z)MO~hJsw;}jTi|h
zrzm*rdesO{L*3N~M$87ZB8GQT4PPyp@Ew?$E|raZIc^eql?D>2T=LqbN>o}gh7~8c
zBd5wTf5vjwEs&T+fg2#<hjmHve~;@>pVqN|xMoFW#n>~0tW%y)TEAsQpi|DF5x#1L
zQI-<RxZI2L(Xp2_Xs@QDN{2Mx<8Ul$G_Jl(QOzK^F0uIXK<h`Y8D#_pq2i2lvim~Y
zIYXdEBR~zKQW5!PP`eKqG0!T&E;smnF8w0(P1h58@3Sz|Xx^(j|LYn}LCSAZzkMO_
zOW>u_H;MC1RNT|)A3zEfP#WdnT?PqH;N6S)gakseqQi9>;6q6m;v)xRoZ?3W{JedF
z*jRD<IsqvVScaHygJ=!H-eRc?_9(F5Sc*!9?M=~`b-Xoj>G?*S?K|(ug1X&N%Ziuf
zzq1B=yd{+af8qX&$+W7s!N+W3s~4nUfYCBEi~He-+QN?hWry`CKa>Af71Z*l#41_b
zkeRBW5FI(GCi!W+11YMrLZ%5EEF9OoE?>WUIkyQ#d{~99@ETqV(iX`C*5n)wK+B6H
zh*{+IG_he``^2{wj0Px`TKyMa9kbsFE;A9r+OE~VUxRLI^PfEoh&IGK3=*osyYBSn
zg$Rv!K!Cx<>ADYMis{XLx7wg8uFyem`7Ht013`I}{c{%%>jv6vh+g^#aw{{^z7To%
zL45$cscWlMD(Q8ZbMR>3&Z>I~TC*YAVW3wP8LBAd{2i`n`~8m`NX`K13H-E<Ob5J0
z6bqf`zAFnIA2Lqpx(a*LSF4Z~2pFg2lH!aZe!)3ZBgq9OSIRXW^jfV6WqPveEHmva
zqxY|>aD+dhtx?Uv{V;_0L~b_VIrMF<Lc8vUd>x>$s&b1g9L%yR_u9|j0Y9ok=@u@k
z)2&7mB=iVDYtr=m^6^E{DpN*$>b(gs8Xh?;^Tm~F0~F0I!PF|lX9@02QRWm1G^QA|
z!|XPQGDVnP1L(REH*o}=<gjH}(;QL0hFmCyPH3JEBsE2pc2SgRKQz@C_EB<CcrkQj
z3UtIPhf&rEe@Hvu_iNl1pQ3qw9_vKWn(J+P9l^0*^BQRb9;b{=-<h`s>ML?6(g5`d
zIMN{3Pag>L2#Tnj{l+F>o4WHSpgqKqFa4G$;P1tMU2^zA9g6sH-G(rNa8!oa;H!;&
zNtA{&!vBmFlBVlr3bH~MCjhaq8#x7`cGVI9XC^^B;%jcmEC@f|%~<t954NSd3OlLO
zN%N2I?pJ00S5r0sEbb2J4h`g!j^-)^?(UE5KTd^he9KQEJztP@a?ha(7|{Ngv)kc@
zd>gg)r}KM?L+n?%#!Bp)e~LovZ@(sROX^LYPa2Hnfax8e;y^gop~VY7=s?QcA=Lmw
z??9luhL}Q*QX$^dFbaMYbQuf;5f8v}Z2H1hgx&{1RVicPh_TIeAW%Dy$acb-Dt0y`
zuKE(K1~O=gn(Ep(%YLnfsgR&=$WbmN5^{iUQG}godBy|!YM&1J-2)&AXccJ{31%KN
z>Y*Bon@12f-v-L|O9UEk%#iBoc9g#Iz3=v~oVV{wcv0Yiuzh&Hjym?7#37`OTfjV)
z2bPh|TV0caJ{4e~G5(Q|^pI(Ss#X5lz2Icbf(7!-TdMtBxM_)2e8(iiCSXx<;sUR~
z75nQfvrA6t@f`jWNtfl={T8a3JGGK?_ojYT+8F?+#;c7IQ`HR;U|)W5pLL^$R1Ri)
zVCndpp4C(Rv=aeIjl3|?c~*-U*K(>=3sr4eH%`733kc`^km+>Auq5Lhb>fupq&Cgd
zu-0Wl^npjG!JU->_lAoK5T~f?q*nVbSnFNfo9EQg?b{P`p4j=wSu+{^rieCY0--&2
zk15m3&%?WKk|*Pt^J$;rvM%LnW`+Mj9#b#>ru&JPe->!TdZsyje~ARRT)tS}rK^z>
zip&|SaFr!zn<jgeg#lb%aw)kXc8(Lj$`ZReF7$9yX>BfEUQ#`=D{<rb)%4w!-dnI{
zv0jefeM~$)N7}cgVkld)l4w}aD@Xh;^oClHh|BxUij$;vqd2n$P}*0wIOs&&mn}kl
z*rL8^n=)lc2!?RDJ1<bR7kWZDtpN|KId#YmH#~UL(bYNILc;5sRl^SHC`ah6FRdY=
zAnZ3oxRGfOr2l&Tdjb&FpM)}^?-dH3ReJeJ+v(MGX^(;7Ex-fj@jcSOWx-=;=-n`B
z47Yr~s4XrIQ!ba>Fy(95cZH<s2(|8l$s6HQGPb+<G?z+P_do=%X+MVgoM=MDg5wLN
zn>*lxsud5}!@A*&Q=M9V)J1NIm8#l1lAU~MmEuXyX^Xb1@9bP<D1ykgxg>SLGC9za
z5_r3aOF069h(bBEJ)$hTC|)@%m;TS_NYDo4$bLl~^k~7l$-!69pG(MI_#3by2O6>x
zOLrKvDyJ#7BV48b$@nnrD@Z-{0^9Mg@baIHru8H4!>=lbHtu_?0$yt(BAgPIec~~o
zF7ul?jT-shj^x~X-`*|qNl@l#C;$0E33LYpc~1KX?~9OKWk=tS{~6zY{s-{i)cfzS
zobWz1*;QP$$DmB>X1?CJ63ZPh)N@)=*ou;jD>gc9K<3?MKFzrj*6;Z7NAShNzpc?t
zg^og!i{%`|JV8PlNIHS_w}-L>6Y{4{R+ykJR(w>dRW^Ktd;`uL^L=bGm#}F5UYX4G
zeEBn_qFbPf=QO?WZ&<K0Zb$9BMK()g@Pffzk9xdx(>?L8KrS8QLnz>?BQ;<Z4v;Hb
zvS~&ZwMTtYvZ<TcQX1!`c3#17{P2}|;eEjVeaAZ<mtAS3Ry(G~yUL~MchgNEW1iM<
z#+B6}o`!Rj3Y+br{st%R)I0XnqJYx5#vzm%c}^|b%u?MQt2>=FI4zpY(#2H<o`xZm
z3Mc<R+zjr75l@2XHveXmn}Ze=$H-V__PBID>l12Ss>&6H!qwv<z!qRqp^f5x808XV
zKQY@b#?p@ZwH-;HWQb0$<s72)qNJkqQE~R2ouP|f|6RPxHxo>)x(p_5c`1xMmCc7H
zr#rOF_ud0)!5?OV8~2w?h7l|7QJ!}B?<ZY)4m6Ei;HvpEG&A3nxst0tV5EO57Ct8D
zF2YLx7CK7MvrTFA0i(JxWKKuY=9-FoXUg2AXng+-3yv5W&O5T1RN)dVp>M61Z%KAj
zYj#ulCpcVk%)<)FJp8?PQSNhjc5T07lp2T5p!V#-+^1OFCy%KLdWE)kn^eY{RN9p(
zo0nvpsftXhio|PeoL$1)OrS|lA_+<^t%Nm!*j;=W_n+0LpOmJbY(v8BL;Yc=cdd&j
zzvfKBTxv?{&T+o(FUh9BqKQGklElCN)?Ge<eeC;j%^RSJO7VaK7Dn{IWFGhqmDz>K
z%nc`|`q>F|Jy&Y`4(&0dOZofYaBW-O9<SP|k~}!vm-Pjl|Ca{|KGY4DKc3BksQHG-
z77PUaj)HGLg+}m&ZkPa|3I{@sN{Aoeae4=NYaEH^d82HIY4r@USh@sL#xG!<P*VBi
znG!g9hEEZhpr&bYIkqwH+J4=^EvUl=e81hsac3r1fNE)GT<c=2*+IM>kH!#W5yqT#
zd!;j;rnYIXr%f|mpQvhL_yLqA3a4y4{Ktx8t7+XM4Y%sL{X-|tRFP*i*%Jj4A#CZ+
z_|rIIk~-0-T&NJLhkjVL74mI49M*6KgFF%T@25{Lf<EuZUM%!%j5=Z9be83iIN49g
z-)bHsEc80^9L6^LU3Ur3p}~{Ko(cQvQ$^IHYEhsCl_ls0l*Q3Xs1FZQSo2nF0i{+P
z8+k4R7Pq3i<OJnoe}wiN<raG$A*K{?U8WI}Sj8Iy`PYm2*Y}0!Rw^}K$*8!$RQ&&~
z03pV5!w+kG0MhMlyE*8OhGd7q&@pu7_wPU5POiYA<WO+>^-aJW2Q;tRk@sEpq-5cL
zTY(?_r1^~}821#S4(8nNSu7+#9UT@;OlD%yI-K}C8TCtM<;f>-Z~2iY>Ke8Zgc-L=
zP8>w#fZgV6>>wWXJbEX8b_?!d8ejhG`iLT0RHO{u?DHEFj#rBFn@FHOGJa)R{isgo
zXH*5bFe{J?Q!%XT<1p>isBsd62!ugfT;<XO`dQt=TIJw+<_sORH&)5Ze>O_nb=yFX
z%2kX$u^cPgv49xOwci2|J<`fA>Gvru_56>zTk<L+K61M~Bj!rZ9&r3QOfe*UWZdxy
zIvEY(O@SWo(gC1m1^*m=AOfHhRf!W-GenHbR&U|T0@QL$W9o@#J3aU|zS`8p_TL7r
zkpS?xJIw$JZT0}NFCFT)5W)e`21GW&Bvn|#LAq5$*ByFu@DFPct1NJjy{Gh^aM|5>
zr_?Vy#cmN%J7@paGyi%@;)y0Q0AT3+k0jBgV>9rHsd40Q(FL7&7R6U>2312+L6mfG
zM7-eB{Il<f%&^Jy%2-8hEUzR(N{uhP#0gi;G-HzKCU#IRLf(=qsl$a17Eg6(Qagxe
zd386C0hn~An)7#Eg(^+5Di##PlUxi&G1uq_&(jApCEx+<Y0=EbD=wC!pnG@nZ&|TP
z!@BIx+R2=FC$d>y&MuEyoUl*LMsQ{eCW~c#^RBoFv#WYB8;KcNY<`lLWh?Ie5c`<)
z*1I-trEK#n_h#M3X5Go4r8!VKJVgqzR<oCBy-q7e1~GMz<#y!(u+08w$G6OlEg}$-
zP0}-tx^51CR=agO4=HE`D}2fHTq~I^V}p2yc-9)pt0(>_+`p8uW0x1QLbv`E@9c;F
zEs1>ydSqkw)}rCZZf8dUN3QJKQ*^X9J)%%-ryLI-<ej&U8G*%e#l>=3fy(M@T<UAw
z>V`f!c27Zxb3?LonxT~HMvQJ*otf5di;@~N_71Ze4F{^n{PE4-y`kRAqv-8}Oa?}?
z@$Ei8GjELz1KZ__|4CY*`07SzjMc%3bKSCshB(6K?eVxwD{E2xu*bZVryoXL7ad{T
z7K59;f||WTno%y=Z<@7_*O(Q;3l}F1kGGqyIkc?`Y8NM6u9>2RhBr{3`^s8J7Phjl
z7$(!Se0s`+M))%c%sEPxMpjWPgndhs?|sr1bQTBI9vo+QEAXT6GH05o+2XDqGhE8H
zN;ZJI+>TrQJ;YjrYM@Sj;a-04PJZt({;@|SDe9VvA1O-+W^R-@K((?XS+hHu+7T01
zd$wlCk&0k_C7+wpeHqX~;lMl9m+6YLgf&*2i0M-5Bw<6_@o#=O(Y9)?WR{)Ce|Muj
zXvQiSHIMw7Q<to`V3NR{{B|~xiRV*uTO@KV!i-S=y*;IWPhLwS<d)aAkK4X?jnoI#
z@8W_Oic3T$p*w?6`3}!t8obfe>9AqP4D>S&hf%TTvRnB=^M(B1xB6kWn_e+v-sJ;b
z?4@0B8Cs}MqsoW&`Lu9YO7n_`yBR*$AX=@`t}Hy19}Tw8jFe$<Fv?IwrYyCNRB+W=
z_Z%LZn?WlLWNs2CTTpW6ghbXT&c4z6?vjM(>|d-Y^M+$-S!+o%HIGPUdVG^tE~yHh
z`cMqvW6l$26L(#H3;qIv{IK?h#a_vZzBjoYo<jH;$V@d*Ne*<NM8u)ZoUdzCcM*{^
zU?IY>KrbyYY(XR4jE`TQFeyt=&ds`@B`rXNKRRjwLU&_r7ndF}>4}d3K;htW?CVJj
z4Fg43_X(t12Y@1MC4ovu5msm;ll^JQ?B|Zs!eaw%9fJDTK3QFZK&c2T)1Hlp6b<uN
zK88Iy(xrxVgwk{d0Z?Othwa^zV{f-c!ZX~-9kv@gQVB9rhje5?My<;D)YJ~ai1}Vj
zU8(&F5piQLQX?GvYmYLDoeE{0zlyO@2SxYj_Puo!Fn<|}J_cNkplmDk+A0B#A20&E
z0$mFxRPqS+t-|us@^YGy%X?Ok(ZXHmiUSQZ8&rs~#PR|ySX@K07UljJ(u?e(Rp+Jt
z7GMsd@bseVHzW@3egQz1h8iO$4W49$>+9mhN5e9peCs!O3L`j3T-d3?s%wM6VL&5@
zGTvd+CJdhyn7pc{IpS_DS*OXk5aLp$=Zs6#qh764Hsyjn?2_5TtZRPeUl9y=Kda(d
z9KJRez9D+Xf9wK#)8zNDU`;RCWur%U3Hz+xj$s6Q)}^+m)J21RSE`!If|SW`H1ER%
zZq$3jU<=$jEMeS8e^<vvl#hUxU!fs#!eAzJ0r7NE8ArN0EMmM-afOh+1=K)2KWtL{
zAaE=t(a60u$td{C$NLjrZ#0n(mr2bNKX%2O3=&rfSXDoGyHghyRWYtdC@w`LVMWI#
zIHTa)pO4{=MdYvDD?PZ~x(+<x0G(f9mKpI$@b&~0<*J5M{aSTli7PResT7C&ul^a5
zbFfS<{AB?CE^KQq+9fQu<?H@f4sy9VHt-{M(~sc118O!0qHOw6N)egc0UW>yR(230
zP|YKwRO6JySOa!`!bCm<aJcfXqn%ADaT>T0KI(6nec64}7U8QmL3A&wzYG6FfeY6m
znp1-AZ}{SmftdDk;J*s^v6WG9RK~*^3DtL|Px+&%ZAjpPb{gP@Ia}zcPQT@p^1gXD
z!R|E9KgYBrM&__6CcJ<^*3CSJ^3j0h(ErIn)I%b=8{zjLN!aBSyvH7N>!q*Wy(o)U
zPO|WX9NBIG+P}erQ+oTivS3+VLH(2qPkmFm_R_oZ<3e>emD1+onWgD{yFai5+_hrq
zN8pUm^ggMTOEgHuXue?sc0Y+zeG_|9FWbUiv@W>zq>n%9uuntn+Ee(Wu%1sq$gpwt
zNp5WmniMw{8=VjD&`HF(@npBoB`ea5h#!sYM32|>3%9)RqO&b^kg*0T2(4mq7fqu=
zLuMG!d>`O~U75jr>2o{gwVu?pVw%x6J#{37%}gAKB(v6al6yu+tP#8+z1E<_YX?|T
za_FHWW<!*T=t9YN=%&+QMobRxYRtQQFNKxCh`1B>(^tlK%%szyMVt-oa>;Y}<t8`A
zYneLsXS3FtE}qFA-%j##)U7foHOOLDU<Q^-uKo9J!rHsZ%o&1raMmoyi@Cl6oDRVX
zRm>;@9ANREzlA=Jh-&7BIbP_{C2Fu<%KqJfcC%frKv}H!ZRW0uMrru)x3U1YLqFW{
zTn7nJgE6$5O@}$rYAwp?Jlx?8jk;(*;-xVxZVeQpmaj`$2aV?!$cN>Qc1&AdtJ2A+
z4Jsp6Mk50$<gyT79JVS-IQ5>6Fnmo6=zo9)n#@gv+_$A6TI;0hMx>0B35gbjnxTaY
zveT{B$7S>!c0&>A>>Gt608N8Fxzw{CBe$>2TG9wu4EoZ{xlu+MEDieJrJf;H;LFut
zCE$bLg_fz{Sf{Kb>at?hS*J=Pu=UMvG@Q)zU3clv=Ca3h22*u;Kk%Ek4WyoB+<9bj
ze02JX=J@rB!0=I|*Y`}paYEEtj5-$h5;IZKsnsVZWZ)AerIO^!Fd&FlN-{6xH8w`*
zZy-bxBNj*z$7>Ps_c9$N=HDx6jSHkG!QI3Sl<Dp0sXMSN9gK{PM9I`_#2x}(3Xl%|
z8@ET4=h!Df1g@*G+2NQuqdC26jK^q)2-dYti5#vA+KqUOBp4)x9PpukZPAhUSMfJj
z*0M)8_@C$>73fMZ!mI-F2&?0L(C8SFZ~&<|n!Si+=CIuPKxw)XB~hhFs4#G>PA~xn
z!Cb0KE7n2%WyZg8m89HMCll1%w?TYxm?>vLqR19)SL^MezC7OHz6d_b=j77bW3P#z
zZ`u-K^@?jBta)p*Mc|~L_eN%X72c1mkKAS4A(~eJKbRrA{RnDCF%JlBxHUfi0V<Ju
zL6traq^l#{^~h1UFlXkEvSBD*5h%(A^4Lrh2D+H<p2$6Cq!T_TrFUr_p@Pnvzs9|5
z$NsRJ1^S_-G4(?-|K_Df`innn@ulBPM9$Yx1ChKv+dqqP_h%7o|E`eypG}=)VOrn)
zu4ha!d#p}EnTa2gV8xhHhJ1aw{wg$6ZaoT9NsE#}ZnF&wygo~kY@x=mf7A0G6YSb!
zQ6z;l_x%3a5pLKJwgr;W5XG%3sadCAw_=BxJ4B(_btNBuL9+J&M`*&dWI6Lvl(yK@
zZ3;T`GrUJIDcwqYNj`5BuGBQ`EHEs33jRrw>=LV97R75K-DlrFF68N@kqCW=J1iT^
zeXj4VD5h|XqzLxApSomyQsn$4m?y=*Nm7w=$BXi~izn_h@+HFwhw8HVZg}2aI3<*q
z5~r6E%-=Oh^GIDxDnPm$8F!lc(v#*5C?62|Oy~C}r9IRAS%2R2XCG=@wyQSowCtrI
zBf>A&;gcjWIR^aem*<#{pL#@nJ~z5jPA0#;q+W*zb-B+6lLY+T=s&mkQ{(^YcBAKM
z9mH~nU<KXaKX}bSf!_k%q6_=kR*|@N$lv0-cK&U&+@Xg*htyqkO5lmA-;o>x1HZ<|
z3!~p{$O|R2M#KxZ(&ct4^m${AAV%tX^l$O}HCb2#9O%6@xT$WG&%s2m(RgA=?Z|}|
zMLimPFCBi{Kppm@7tRukXwS^s3*Mq?Q7rib-0WQx^N!3CZ^?1$xy|ZQwvp=l2&?)V
zCr1CaglqnjXH`NOIf1ddsM|)qeU|pf1&O3Rqt#03Y|6^L!mjrAu*6bLkVE2qgx+Ji
zTvVJ|gh!~74{C!cb-pUxBD>0>-$B7f)51x;rx@B9fw_rOpA?87%=z5Pyd%)3bLM2N
zOxBTcc3^|htU^rnn^%O{HP1?D$u|GI@0f%@t)JF5$FS$vqqe8Kh;>nR{kQRjJ@cc>
zTGx9mfv2)e@9+O#FmoX*DDbk51^nV>U}a;W7jq9?jsjB8f7XzIDH!JzJQ(LXPt#<q
z{Dzi1g=YO^PvMq*1j=L>Ls?(UQ9B&}A-KZy>axw%Ltmh^GIM!W{=~ZIrvBT*!k*XB
zFZ}V>g-mkU;p$-^AXJq}Iwy~2Qw0Cz8}yF@Av%)FPS<+_0k5h|;W>FSn<BI?-{61j
z`5*l|+^jbRjWi*K4kPg*pv&WalgAL+2Ijc;6tx8@-Jlk9gGLf`V~AuEh_)(m`{GNd
z>l~!On(-WLv)IGl)Ne5YhZDHtrT-yDuy;-<^vorZ)MEGdw?>1?_aNnaAEc-Dz~>cl
zkbN%b>jdciF6h-I2=_O<VB2KzM%tDD_(S`-*zVhYKvILNoK7=!#S-T1GpFL$(VqI*
z)rFI_h02YEmDPn;jz@p0U>9mVo*NWKJ%!8e{qfw^O-oEKn!2(-Zq_(e3b{7K5SML)
zGDxF0X4ZJ{pnCI4^W1~UT`1|1Sl*lTo%gYX_p!KlmZZ0ys5dFtk^0>pzx9?U=cxpX
zny2z5Pc#ire{A~3z^L`WXy!nF_2!1=xntQiDQlx<>7emoZ}sMPO($!n#w$ywgKuS$
z$al3!cN|GA1aiv})b@RGJXaoAj8hQfb}u4x*c_PoSdwPK4X=zeTk+LdXsSHed~ay$
zR#+qcKtX@s+NbX;{ja;yfhb1Ee3Ti)81hjsXk`N8sk#O+);2>NoFsXF;p0k<ZmlN_
zpSAj4Uf(O0R&K%5hX9S!1!KSwUWOyr=`n~}Pj{dc2~dCiMiAay^>%z<6`9feafCo*
z=5Eo&EJwO+j9@`wP4Jl`;`zoOPK6e9Kjyt!gy8FTC0E}v$~gRFTy(lW9O1>wN;G;m
z{z09=9LG^TR^$h9tUPG$UeqOPv~&ufrk;6|%uvtf!tW@LiZyti!OIdHg6*#SdFb1E
zSd(1JCihvbr`G4ezV#9vnklvTff#p6m1|rrr}BZMCCMn8S5Br;tiyD%v=4|#V;L+W
zxU(jVN;!6Tff2@mlv#Mgs9k-=&G+>V1A1NbKf*Duf<Rasx?7mKJa<hM&BQq$u|0+j
zn}jDczRX<3ce_0C^*Irf7wrWN5HuM&NuM&iGXuVQ@&Tfo7y*?n)PU?m+zg-{+B1ys
zmUVWwn2W{$A^~0vruv{1Md{XZ3>We2P;0Jxo-I&g2}hgSU!ruYu`0^xwI(e%(_m}d
zu-kw)TBgHTkQ5;w@c8$1gN_^8u9u_=L9_rt*urx_mS9mk$?>P}6G3GYNyY+EM{C>m
zRoUM_pO4v{<CTJFdF6faR;9Q`SruNfj_jPt?W=V|)%T!}Zv^f$Z!DeHosl+ZB;lX<
zn>mP#r+=`4L=%<ElIieAM<~D5#ukJrcV7<L=$^n`U^Dv&kc1-=7?AF>Aax6nXYZNQ
z;^uN)bJW-^%;IrPE{}{Jg6kt?ADWA=>=k7hI~aBM0xaU)JL>t2g>Rif;19U_^V(Ng
zv7`Ft)-*b%92yXhZD0s`zjft`+B~D1G4s^9=8pP3!z$%PyaBr)q>2H9Ai}p*`V>^~
zD0sxLXpJBR#gP?0E0HSVgOtn$l2iPdlw+l17NCbWyPu^KYH|^urHK&l{MJ<OB5ck`
z=j8&S{#HgW`;P|6$I%AW`v?T1oHG}fW=8_19bxr>wmzOshz(iNO23&ZxbI#3nrQZ2
zaCcuEsakpuR<`d1PMK}|Mo+Umx^MsK6?vH+$MJf@-vXX5yJ&xXm0jH1Z}R19jj?Wn
zUr(P57&t=0SD`<dIcgo_YMc_rtA;*{=Yhy1+uwhdBb%&5f8x#)N#7NbxqJxmOdJrA
z++>vWZlp^v?Lw3~m!NFZo&(qv9XqYI%WIL#n%J(IW6U>YIfYl?At%{yC@gpABLkxO
z?{)Wg-9jCZF!b<SWRftJcKk%PZuy84OeH_y#OiE;Mx3%P13d<}XQsqIYlUzk#hOt}
zF-dBp{9Idw)DcpSg860iu*PNOu=~Afjb?ks24NKVM9d9bd|jp0lIAS=<01lQt*re@
z5mQVe_%Y~Y{1E`dFUsj0AU{FyFEi>^C;NU+sgrh>FrY*BUt@(L^^avmBu(bd>zBTq
z3n3+%G^X;fk&KSqt;P`g>ri+@2LP!T;Lb{>=Ld_9hO}l1fW_@Bt-??GB;sMvSVm)2
z5}Ia}SC|GY{)_I$$C~f|{Ad1`c_#Ls14Hh_ovF;z29qt<q3%xOMkuw1LXxy8r6^>F
zLSwYg*JUJwWK9w<2oU*{C@>j9{MsKgnG*EmNNZ=GbeWu#3Hj(FGZLibODJe(V&bO;
z-dJvaCUjCp`5ntr(H6x1jyZqg;-H_k!5CcI3S3*V!}N*q9126x_nuMF2X?=5!aiyC
zv{}&+L!lvzHsv&+eFGut6YXOJt<9!93Bb?wYcIerQ9wAF*3+N10XplHz)f!?^T%lb
zrC{z01pt~t)f$3SSr3;WMf%Jwfr7&=$V^7TGY9YSjwR%6to50H{cWe3`kwh?&I^%S
zI1#!ow6Ifu%9@sVrjs7Lsk1<55behKXCi&NF1(6$B#pDc(%UXI&o!$Kyo&F?71Xz=
zJq_hM@U|ZZ@wQiyKAZ;TePY30Lz21`$7oXw_$Sv7THj$63DvXHmxcEf7QSt@1CRLj
ze+v=Ya#oT4$r$wFmEHQ`=vS>Hse5*Yv1p#bGPeD7xY~!ec<V=`@34Vn=h+#_(r^aL
z)Any5ihk7^61Qh(5X;;tEK!?5H=fO{-@k?b$swb9u9aNh81z8jis4|yD|~JUNx-Ju
zf{BfjO5hERk&_&7lMG5708+3Y0>r76V&8H;zU9=J&4UaqT7{mWdlaymwxg>jOjOUG
zvf59~Dzkc3AGTIF940+YD-=3AGfle$luIK@4rASqD_pl9$;;5fW(yZLi|uDZOp$`D
zty-0zANd@R%9}FCWoBefgKB1Eh#NSP7owHGj)YYEVq@s4QQ514Gl?-URK+)p0?B*;
zVey2z;u1w;sFNT==g1>R`}I~>D6a&?*ed#hJ^cIAeos>UZZsr-ZtmNDimB92dSXhv
z;Me9fG~as$ZJ0OEwJxFb?jcyNe7LTBTyppu0*F3ys3fM+z|jsJbY^!Hc^-Y>4Z$jl
z<8cTeT9jg0B+vBFf5J=jqgA8_Xj+fkCw3{YXIi+SAMHtg<e$uvuPeg(XIG+b2mOdo
z@+0bG)_>y4=PkXd69{#sojiWIkSW<5Z{db{GzJP}$U!%~q*_2K&UM*6=gw=5v0#zR
z4&1$v&uc~Bx|HA}Qj}-;jh4n*T&dSBEZ#P?*y+Fxn=&h9%T4cKUNuU3{bg56(hFB9
zTWZ=I<Ldw9-jzbumKA!d_lh(45i>wxp~lEb#mGvkVj|#3`USr}&GAl5`5_CVn)8e}
zt-lui3{~Q9)V7mQ0^*=pDhNfLlZ4NB2cJ>ywVuvE@i6O#uIPclz#_3_s*1Qk+rgqj
zZxVZ;nsAhB#Hz%W0>ppo!T^Vb<6kV_YmoN`QbnfuGn^^Lf4kWiu8K@M82#|1*6kGK
z!WbMW=!2x`MOg?H=%EON|7Q~;+oq@#6INTiiG%}NO!rz!jNwlFm!Z}N{?2}RiJrN6
zIqcY~L4K;(pYzE7sEnu#ZvEe)#LTOZleu}4!$Y&!Av@j9(s!x?X{CCJcymk0t{N8&
zn1W-&%s=L~N)MeV1awv_?+`bY9*-!WU1Kv{*KP66zI-?YAhadzfexMB_)>MVM=BJI
zXN#&29!?u&Ju9Y8dOmJSxh_ZcyU#!6A3iGy9#fLKVMI5-zEY98lAwLrwC;$f)M=(#
zMSx=?4J)s@DhZqZvkYF#{|<kZf7_m}<co#F`+I%fp9PyfG?tp?z}q#c$5Tpg0ES3Q
z2$^0F8q0bx-dT6}FPwK~r)Aj!e;k~I4v8lIvM$J#ouK_~A4~k%u*u_p;7Ugl0NJ3q
z%yRmWr&D|hITVfItVTq^a55<SN;HytS~D_xPbnXTYeCVN%lkVz*TQKn>FvD7V;Q4W
zU9R+d@|*Ad<7qj4`M@(eE9X3E+P`kr%~Nl+XuOj`vrYf6u4$qw+l&!yn8sPP_L04D
z9sss?Ht$xsrrB@5GXGv%RX+^8_K0rZ9`EfR@f3=l)x6ac#u0-g)fkvW?Dbsgn>?;`
zl2!8Nb7@mMcu)e+Bf90D5@H{Vt>MtMKm|4{HXsEyL)Ev)4KLqLz<Le@qaAezGo0mm
z-6~QGtA?VftxG(d=6cc11S(rAl^_)~DgG;y=ZA@t0L+nurDmX05(`C?RaN|7AkA=0
zYbB#svSm`C^>o#^)Zg=Zv=cNR^uJGXfoh_>Nyz$2mHrnW2h8blO3;kL99A;olVy?#
z-J+`|rcTQL%kY6?zZ`hPk9cv5lO#i(KCTgdYET5ScQlz|(-RYGhRz1Izb>-)K21gF
zP#9XPV=*<7nucV3BD1CZPVdr3d24%xZTj4jFinM5?pvaN$nj`BNgf52jv34=<03Y{
zM2rd!aa1ZD#K#eGxsOFzwYnMQ>&;gLontSs&I0ZujPPnhGL3weGRLksb`k3yeJ;Fe
z*p2c-=BhA=v_)*Fn8QL4SmsyJ{}B27Dp&@q7fpB#`#46u(h=AgR8l=5k@(dZRNU*`
zLEE;wOF_&3Y|JKf$}*XxPkMJ-@muloZ;USWB9_A^KeBnS{4XJLYjW-l`=wsc^6<n*
z0uL666Vu&R<V@V$Z<KXgQt$Qtk7hEf^(m_Dv)|Lqa{i!+&%49QZ!5uko6#1-;a^&s
zvZe|Twm^Gt*h)`O4jbV!pUToHeJ0-}wpW2>=Rw+_WfA#=$iFoB)5B<eY_jshTUllH
zv?%RaF*SA6*G|}U(r}jy=_Px$Wif<%`=|!#b|#UzqSN^KX&bTaV>cPwgCh7HvI@b~
zi+tSNIfm~*?ulB`zBOz7JHh;<oCQ_Y^dS$D-kBpHPa@-!q>i3=r`dg-Zj<*k^KXNE
zyMm<ox36loc;q=(ON!}u6B)^*TZ@4_I9G+35=4p)42belonVdwTa>q|ik%VWr=s*H
z_+GIJ7WO|e8o8?s*gAoJrHT$Xh!x_UYIF^Vuo~5%`a_>r5BkH;vo-%G*P0+VXu;$a
z*y>r6*AJSoi=z<a_BDt`<Z-9IlLqE;YlW+q-A=&$;z0|WmR9kW(=;CjU|iXKGv6A}
zV$BWyWmkJtvNY9#3#;5LZ{}@XTBth5q!rCyhJ`fqOqal#7gv0W8P^{I;yO-Lb<aWa
zGrSC^tO=D*f}G)%Iucu2z{jv_4J)nS??&AF-<LrHFK!)}E0-}(4a@n*WhT|JZKVd)
z6EdR1gl<nQJ#RUMJqgK#1JSa@=L3OFF^pb&mAcY*K16aCCRkx#)(7tZPQoQ$@~jxa
z#)2{I-<Vx-Y~7GNBqe8xFlNcgK)NP$DZIS@9lRy;a1zeS7-#-CXNuN*XqYT?SQD&!
zT{TSVI^X@5;f7lsp(|gs?v(eCs{hIKs=(Isp>1dQd9hshoRomR+YlkP16R(cc6jgS
z@-2{Ri&QE3aBuKo<8@R*pi(kx38P{yzeByO^lZ%oz4VIqj*t~C;Y3Y`jBoaPzQ#11
zRvgD(9nM^b8OG=FPge;<gUCda-KLigsak^3-I<+hV=((+j3Z{Rw2Xwns;$XEqva3?
z<j%0@4*j1^Ah(W1_y661l)UbFm%8xrkv0r|CStN8&~#(5!WMSLv!Z1A?Xg0ebuj@5
zvwY{#;XkbUT<?e@-m6Vi`g!AAmgeZgJ~8ZSh_(L})LAeVVn{a@I)$j1MpS^a#x4ML
za+$Efj*6}B*Cnf{jxbcS!Md`+Dzf@h{SNp?STy>u!iI4XVa)l2M@yve73-pW)O1BK
zTM0QCm<cL=PO^&f2t)K@{{lMZ5z`L+M<$<`XUOrtnn`}lV5NryJrVV{)WW5jT(7vT
zpX%j=$C2)uX7rC9G+!mooMTw`_Gq&)=G9;_Fy_`^YHzg$%qVK19PO|%l;+kD{(~tI
z`^ZxKN4ER#xf+3X|CqM@$6PAQ6YEe@lYKpt{WX(aJ(JxtlO0o&f(w%!YLl&MlPyD&
zEqWunj_O5Uw}Z@QLMHzmEt6uKD0k1LE-P@XJkUg(5!*2;GC%XmxyB<+F7l$?eABF;
z&h2EWOr5?|ZOAIIMw_KtyWsDof8{>2G>w5;`_dS3tMha<CpFdUkQn*>aCCdZvP`7(
zjiiFB^PV&(*+4!rt@uPCx8k62(GO222UhnkwF0iLGNlnm&&0}<OS?RHPup>fBb#CR
z132yITgmk+?IuNshjE#@HMMfribo%EMBWGpn3xA29>!#n)YMA2x(<w?&d*c)20_-7
zPo$F%{}f?FZib+)$+J_R9t~^KQsQCUH<MZ_1E%A+)c%B#(a-BA58pK3VR_7YGi-@(
zz?!Tvf{s5dX_GN`@f|eKVMaQtBaNj6*KV(s;by2kw9amJJnSyC>&HmbPEF_&Y{M+~
zmz&_di*QKOb%tMVo#J=q5U@0(9X&LG6WBAlJc!U90rno2gz9qLf#7!0_e?Z0bqaQ8
zORH+P`7@hRNw{mf&0Ob3P}AoPIRtFXf=3Ul{t-UwKc*^EvuVCTR>$;D>@oP0Ynmy)
z6iBE8?EF8P!K}i&l|Vj!%sMwO_Qz~2{M8e4ACm$V&Ao4Bm#{t}&B?RNV+8aWvFjkd
zgV8o&q^FFXL*opul>H;*nIEYg_ToMRbRz6SJQ3&6`JM_hu5l$tpReO_k8~+O0^;_$
z*jUHl1i=qLYNGm#3!fp02V~U>!9AaoZ+^-bjaC#IU&X6Md<tNek2I7N+A6*RD-WRC
z8O*C%&JGkfCrx<AbOWvGvLR;kQn0b({fv~MvK?i`xafUvI8_wo5r^K0@zK-K!ft)e
z$-qvC_j6MI3E6UqvHl}7D9txdM@zJ2lAmFd5FhDOqa@EgH26&RI1&@RF!6If3-_fG
z(LE5wYdT2SN`kCD_upcP-a8;K8O~1rx~D4miFu*qD9kV>^OxbQw>TZ)-AegjBJG5U
zn&_a$<B7hj;q1q$@k^*9S}z_@+kpEe08<E@8OsArt!i=N0lKcRuw2!B!$ak+=*G1_
zX5Nz^D)U(_25&z?F(;CoI}~v{X9!W(i+}h1o`Ze-RukMv0YyJ}u3g%y?$`KS@Qj4#
zz6*ghX3K9&DDT`o(H4<z9Q8P&Zicg+N6*@D1${p4yrK|K+9Tb>M<`EugWVsT!)5$s
z%?0hE;gy%i$NeAQrtm!B#;{uP$o>0M73qfk%fWL2KY`$W@bQBusGS$B9uUic=cuXr
zBkD6IYjxTIbC4=G8)cGUS0Gp_i{qA8t!@MRxu$S+h9}_}R+4K3C0}z%(q2gT@xomQ
z!ic-;DKJnNdXCcBQe53>>sz7`Fz8Zr0|a%<0wY#$@mGijF%p9X$E;<#@%NAj<N~!B
zUga_u2e~9gRe`g%M-nVOrpskw?=u}<v<2C(an2l4gR`F<6zd7s<nyw)xa&6OaPQ9m
z4EjC<xEHrBfN&2G?H>2$u&2LnArbM<S&XJlXJj>t0A+Q21xLYmdVJ73pL<hAE-oA}
zn8grvVojy7WST6D)4;Q<NeCZF;|3#@fb{aO*&V#xUvTj$ev<=QCRc<uh3TFYT9<m4
zTho%7B%9}*V>DH;i_N}cme^9L9wO1~HKgdCX)M!mQ$JEsKVVibP}2;}$Rk_Vj~y%<
z&{SU)R?ne#dk)Vn*d18nW@{<fc1Zr#kS;&sO~m09r&VE?WcjR6=S>^T{*7iG)hwk9
ziJHNV`nz5H3VU~U>XNHj;_J_vb?w^No{~*|?ZMy9f5f!qQE)U8E+`cST4gt<(-T$|
za_JnEoH4umF?x^VFslfthV(@|6Xbh$0Y&!HLf+%MlTg{4OR`XTG>*?iTti=cXOo4^
z&oByLNik>6{~Z3H*-N;sG0eaaq1yF2v1ip(x=B9bGpjaztf$07^Lm7bzmh#V86p+q
zZjGNB6WSh&5C!zaf`fb3OkHhSs!sj-Z2On7k_D|9Z8OCV<e?N_xy7NGu!gk2()oro
z|DPr^Rt}#&JJ#FqB`uW}Uu_D99A7OuODQ@^!-WC?MJ$HA(~h*X=J5QF{lz=&vB$B~
zPcJr(C7|7W;xO7ak1w7;;-VjpJ>lH+29L`OI1`n=utj4^^M_;?teFq`wj-<I+%CO1
zy7+W3SA3%xC|hA<h@(>`PQa)*+>$x+kS2o2Gw2M`e|JK+Qx(sl1$!i{YL;6QzrX+-
zF{-r~Bh@jY(MSnR)S7luNJBd|qDg9h%-F{8C^=cHdt|;f=bw73g`d(pekg^?F=$33
zkov~V0G1JSnmU$xPISG2T}yAyjWhCDyv`JtrKUuLJ=}Q22&wiqPSdHHW`#W-|NADe
zqL!64pT1{G%jiw1f!P6^%1IRFJD2?4r>5#WdTXbcR3-zOvS5!`twSSR`Vpho0|H$@
zFFpRvldcY?Aog(c(0XJeTcPS}!s=_@YVJf`qMnK?itli2!-ga05@wANngZ`Ka`he2
z*uH$iCwh4~;z_|FGB^^=ana6kAZXT_rFCP}qh!QVIY-N|W!^=lB9$meS<(s5aHT+Z
zlPhy}rM2g9e1O{!>D>-FWdB<A=X4QCJ4z0%fw!*g@#1F618?nPQ<o_@=uKz>M?S}-
zG7P*$Bq;Wa_#6|9T@x$Ltvn!!nEILmOP3Z)EhZG(OluWH@CJ`v%`M@S?$S)y%K$>Z
z`OYo^<i<GfPJNs57_p?`=M!V@uh41f9)f(WcB&xQ_A)vr#JOfp14t<}H*z7aXB`Nh
z(vV&kGl<QeDo&#^V1%gkmLi<qq#BW3gJNEmLXO^~`0Ic&qLwU$1icARwnhbZ{tbly
zy-88}5YmRV^d0W}8^aSHlaqL*HQ1U2*(7Dfjb;=2-pYYkVwpkZ8dX@WlCH|JYT}hx
zjmbV(?0XJ^Vfnt27pCn4+B?5#Vnm*^7Isv1S7x}@q^fej;NzfyI;V-0ggSdlBC@&|
zTq(J~TFxg#PPJcd;>HFdL0JZ}x;&i9fC0{KnICdtOlQI;71fwd#7Uh3wm05pf-m$3
zRX5n&dv0HO!mo5AxTo5fQKr+Ia3IZ(_(>m`a0J>E#*AXuq>6K^445D;v_{!6PTIn1
zy~TlZPWL+>QqtiMV?3K>v@M8#VId3SY(V2$jeVq^H~Z8?-qftvIO!wZpcARC@!(bZ
zGu?Os#x6N<cREmB&AB8`0mrLkSEV#fwWRQsg^E-<!%Q67Pjb<|WT7gR&p_ystB^RK
zkgpI8x}o+M7%#?+-ZkRAUgu4*<BcIX?Pb~35ia_0M;xi1H$Jobfonl^VtaqJb_$#{
zrA*;p87nnW7{;wuSDg0_#}@aeDX~x~7+UZXR=X_DQz-8Od$q-7Ulg_OfMuQ*YEq>P
z{A!cMvRqpdrP{Csc}h5uX8Dsgb;XuSQo#&_s*`DW_VPXHSd-~UneG#*@L==Zs;(dh
z2PYG_D_QEGdYPLSZo`oNL6v(4XfviXpOIg~7c9>(`G%TsK3e)ZKlaJOr2PzjPm+w`
zo=%c1aJM^9_-7+D953LmL_yGLE(T6y!vNAssMg^vz3bvwRHflpedDkC7Xm6vOV6_c
zk8d(buBYeMKCifH{#bH-*6TO`dG(O09t#x%f1Mcoevp?NT1~TlHCVNkKUE5rtLw~I
z#RABZ2h<Rs{b)%mVu%Np&|%&Vi|gb?u<ql|(l_=4Jy&~{=Bu<dRM+iFSGkWG-<hLp
z-pkCF=O2Doay_7Hb`I0!?`6(3N|vvda|JO!U5x=A1>$Mjaco0a7|#;LJQG(zu8%8Y
zRyz}cn>9_1-uCw4m0yd}2}R$1xVQ=1Ek9Eyns1iecDUhl;SU@xlSI`koe?hBy<+!x
z)v0iFYX+HR*~fA*Y4HYsxjgz>V>Y?5v~+Ps?RcNT%_Xt9DXfouLKBXVak53a^aA*)
z9`V4HJu|8C*yy`k_tWN(x=Gu2&+=Csr0;N?Yn$i|lW5G`Gqgy}lkifuV9ng4v`CAB
zmG%r(&E9v}Af+DhnSG3!PqL_p{HV^>{9)u6xmKY2aE!H?<EP8PCJ+z)FD~DOWjaQz
zQhQlOI)*)FU_1tpeA5otYxyyDDLyo$MKh{Z)0mcprgKd`%YLF)eJCqN8ILYxX@x~=
z?EqR6uw_Ox`H}!uK<VZA4WM)%`&CLRCh7y79VYmTtI!|M2eqW=whlYX&$UFD@#;QH
zi(v#`&0);2fyAJ(5f+Y%w3xN7oSB}HTPTjU4m$Ud+ZXqjv8G|grFQw&wyU6n7nZ&&
ziKE*Q)-B3wiS8{!jF-MEB+Tn-=Fn>34up=L+F0q(vt>r9C(llHpXG>-hT~V#?dEhg
z1=hlAtgU3|Qg6Xi9z}Bww^1RXMK9`7y}=S|A2B1s8`emSO15<_kT5QL-b^+la1FF1
zP!ORx7E<6#sQ=A%t<vX?lGP~ChpduyUtM~{SmwHx>LXOP{~h0{d+BgQRjdHx7E_VB
zRyg_CTnB+ArJ!P`Wvu2^QF~_E`yKltD^jOOMt!W<i~}lJ*^oHGJgWGIK^p$L6&%6d
zd6Cs9TF3s{hK)CiXH5CFr5Ewfr4g>g!Ge(zSu}pKAvtd;>EZ{fG5Jy@!xA69IQ4ex
zoUu+SOMKQ0#m0*Lf4qGKR2|C_ZAb_Nch>;H?ch#uhv4pZ@Zc^9?yf<ClK{cpf(O^&
z?i$?fAK>Q7yZ62S<o>_bUUh2r^vv}1%<8VLs-B}qBqu2t6etQnqIe}J4izb<KkAX6
zudBn|kJ7Z+W_8)5j-khx;v{)@bh&XENMDQ3Jp(OO;Ykel!}lsZTZ5WtfiIDmC_Ofr
zE@MS$NKG2UY=u>?@LIJX9#V**NJ=-9u7^x0$!*}S4%hiGfqaP>eiM<|ZJumEeo}+P
z^@PZ^a1`sh;zW;OLT~K!3D&0k*cqnT<rA~1C}wvrW{a*%?%qr80(CEJZJ`v2fY09z
zJ~D$AjS`0kV|9|+zQ6p|&Ua%d{D!)d?@)LU5ec6uW*xMyTKfY@E+qHnopOgHUzsy*
zC;L=WK%FW+?5!vdM!n`2s5xJZy-f65K3e$O$j)50)VSbprommN4c|-~-VgNnHe(RR
zc9L?;Gc|b<=x8G>g!o%`wC?PJl}_Xul*m|jKC4~^D;>|>s3$l0*!uzt{FrU$>e<c}
z-c(Z?j_KM3TwV?i4yBqu9Lj79{xX}~G2Dl*)<gqo3v9mY1BXd9`?y>PbYHm=5O$<f
zJgFK^tnQR9r4Oo#XWcx1{R#>0Qbp4p&K68-*x~h=r+~Ze#Mx4F@v__QnI|u3gCh0r
zb}yF>wg+i;`}%5=s+F4S?q*&_8%v2C+ecMM{f6e)aYM=zhsn!t@CCL23Ss=#o>x=z
z!?#Q}<imMRHstTWWn%aFAHQYdby?Bh^!>+h6-w9T=~B`yQsX$E(lR5~Wf;92?O6Ex
zPO#mL&ac0$`iWw{1g-m#eD`UeMAAD~hojdkksc=1&sc}$Bliui6Z%?<?LJri6T0q;
zOJ{m*%kNF#Fod^v#g1fyQr~aVIz4Mlx*90HoO=<yho<ZfBPY6|4d@QbAbd*nl!)*}
zDfyKgB4tlzHnlHpL7^A*)93G=Y7P$~%ZYx3GVvXp&MF5dr^&fpn;pKpvrbLCV=y+l
zUGHVL<)Yh@O3E>@Il6M=wE*rj=jd1Be(G<oI)}Ff$k-{bmuY(Ws`#|4ywBD<)}BMS
zt!k<#xE8fXBU;Iw5^`3l1JAAhsM&$G^7T3Em!+hcTupxr)(8Z==ljj!{4;_`LDn!}
zHAP!D3-VO+2)CYYbmybpXYcQ}uf7r(X|WTHBz6q{1P6otE(^v!fZ&?EO$xP(%4m)3
zhz9(vx)#(nsk+arAQxTU9=hAmvxqyQ9YXj(#}@dWsAA#*SzDEZ43z`;vSGurVNK&~
z37yq$-S!~eiXc4@UWw^E7t{H!(kYJAP6<MZzamkPu_aAv4c&fkVLM|L*1(J!m#y|f
zqI$5gC1Ywzg{15f%RoQkz4l>ZzL(LI_X=`?_uGYkn`o+gg`_{byH7aY>M=mp+gO`s
z1gf92%TU@{iy>FW_7XOpy~kt>nCcEa(3r$^m9xL&8fdJ|oa#QXzw@DmanB^|whZ?s
zp6zhJW~GjOIFs$4fvD_zkmn~3A+7a*`hFzm6yie;krn%}Z`-($P=5p-8xhK%aAhqh
zy%>PoiG($PH0e!T$}M8>^d2ktVF?zv07y1HQ|mVK<pB16B>7-sBOH-lu&@L*T);G&
zUYKp$=n}AN@mCBrb!XlohTn4F-=uS0E;}77A8w4V40*<ic;Y><N*T=IE-Sp;TY+3#
z%1)zI`*|XV_aM7RfCvam+)I%&-v1PLfv)tCe?T$8nGVq(vBZ0Gl_U70qOIF?_eJNe
zEXktEs_lZDVGF026B*PV$zlpgeYB5b)P8>xNqw-7qcwu$Dt^EcJ|<raS>*nt;(d{U
z=zW5yecs4@eAyw<qUgigdcGFUnoc=UCn~7<Fjvc$P<z)BEuexZx86SUA}z+z`&FXn
zt|ZqEt!L)S-P2k1(J_vS+4W_Vt39IkS1k}fN4mf4z*;0WUrU{+ld)op4B=wyLzO;>
z-)|1&iJv==xN#zTa6s{<_*jXw#7FK+BYTiRHAVZ}#ol9Htc5IMAByCf7TE&>D(!X4
z^ux(Px1<QA?R|ew(#UgSEu42KzrW94xZmyn*${W_e=hfP-!F~yc<{eX&R<Hj%<HA}
z=%iew+}DTiu|CmIdqj(x56vC9Pm4S!bl(IR{|?!1N+0`OhccfJ^&ipvLdhGc0D@Qr
zPPiC51k`xHZRjv#Hk;Bf&5MCJSmMzjN3B}&Xwh>LWS$Q`1Eh;(V&~>R)w^Jnxh~V#
zmY?8nsUluP`Pr<$G{Wy{tY>c~7rT#g8|stx6`MDmauM`=b2o_Q3}Ufgx&$cHC}j0q
z#NMH=m6iv()hN%z9RU^3OcbHYKLs`UYo&c}G2)_uP4CK($x|O?u82C4D(X7PnKPe{
zW0iE@hrile;y%5~Ah@~#Jb4Cq;SB)aJ32t1kGVlOK)PzBPrex{ji=zFX3h>=m)y*#
zp^z|VU>CHAmg#?E79=z3?1#uK9U_MSC1f8wu1H|33ODp7pSaf4zFmImXzBT`(2%AX
zIsQ;mz=#@*tjzYC3)XQQlf?{#(7n={N}y#bq1FPg@7P^V@5&sIoCitQ?acO~fBB+c
z9=4BCyJXahwr1*Uk|`!%W|G1M&oj;HSj`%H-I>pcv3u6G0pR&g10RE$(6vOE7UPb`
zwgQ!=%9h}E*=6I^6_xYpuz_%FHyOar!tH!!bUJGoM{AfXrAGfZ)xfU8vKs<dx3xRo
zyYo>L=GB|eO&&~Py_$UuZw}}>;UjCB6dIpu4Bt_Cz|XwF&)Q{Cz6@ILY79D~uKn7u
zL^Qq@A)>^vVF+5f%CPZ%N+m9@ZxHupb*9_i@Kb#^lXa}g(&tK9uKuIXtDcj}R(HHN
zTi+AK#%y*+s^j`J1SrPebT_!g4`2@%pDdNRxy6MK93EgXwlTVO@asl8`YPsFyUJ5(
zr>(9ztl7jUU&C-~YOS1qI`6wu5lASvhJ9r_z3b+?s@OzBvqZJK4uW<6az5TtzI#D`
zgz-5jv=~(5)~?a0_oX)Od)5bB(;3nb1`QuVg)rUzLk45##IpJfKaJLcRl~7E1~ccx
zih8b|&%we#BFEqypdUJeT6tSO(06>FL#>Bq39h{P!=ds}+|g8eLp>?SM`Dh2#@dfm
zwdtHLAIawU>5e<5H@qG9Y3BsAj|DtozrKcT(SdEgI)5T?@RFy6zD58x9<XHlV;1WC
zDaygCDhp&%edyd=o4VYR8?_%uBY<b~I_Tp7^|c`ObM$##+BIDsbe)&zx+Rhr5{Uho
z)$iGv6u;=fpOjMi*c#l@maZsTrxqFO-@PwC%Hvd_DOe&(>ErugYl9cRYGUo1+1&p5
zaDgt!Adrh^-BClJeVeVpEfi;Gy$25W)wm#7t~>5()#|(u#d_=_LZfAkQ*!35<C+?s
z$RJuP@!`{a*|0@`bH_fL=>in{<UXqj>u5|TTm{<=Nov$GT*U#?mHj^KRyR<9yAl_}
zZ+)_8z~fmxp{5_kWTTJYVeO(}Ws$<I<Sna!KJB>AP0sNkz9$Q_+bd5)BObE^QW>nq
zI5N1ARi;+hn)&_EnPyn`{$h>W-kBZdl_O`gB4+Bf$~pemYXAY)#FU2Kel5eiy#ART
z#SUoi!`KidrybNV7ef}O5LA3(Lwv>)B4<%mYDaR33n#W*6Wng>)69wRxbYa8i6G22
zBKU&|zuk#<DH`LnxDoyd?F}6h-Q$_UILn6E`5h+9(x;BPtjHw@xz#f!>6nE!&&sOD
zHw;pnU@>w%<Bdbc-{NV_EL<K=ZjpP1_gqb)FOddSH|q7*y|SY3oTs0Q8&6zq=sl!0
za*jX1kEe(gNmviZ+$+2D$F+hjrRhv_)97Y=$&asR*aIVLU>6WM^72LOxGLWl{{*%H
z>P~+jYb}}0Y)Gd~u(=4HWDgAYp|l>@uY~&=(19_o{Ms=G>2xKROffwI+HrOK+L3hv
zI9(~}p_43;SNtEkh0^<0RtM)-Dh5$R(Vy`bnh(50QDsAjKUTVh>(ao&a}ltFI_Wtc
z<ag#eCe4*NpWv>{J_N^WQxDbuG8N3AQYb0>0lVw1ygn13Jd=QJ`D=;#ASEX$ONIv8
zCe{k0yZiSY80-KHhu;X0-Uy-H2(sJ=!`}$30(D(&ZB};aFp8c6z2amX!eph<!%A{4
zWhP#E0^<JB!;4vV=iW^(JJ#I@X%%kZ08|Z|m<?Uh;_6ZawpYRnD72h%VSvyU;01e1
zw?yvY@TYn^O1fXw&pmdOWGSB`q+^A0YXx&_O@h#aHx-p!V&k<|vz47U6}5h<RAldO
z+-|{m?g-O7MK!Y24TlP8hYBr+3ri)%GzI{)M>x`NYoaxNpvFtA>F3tWV9`3p-2??L
z1?`WNxY<#Qb#~|KuMU;i$$uf*P;s^^0CFfbetP}oW%gLYwGEtmkHq}pa8>;=4c#Bq
z9v=pu#?@>q=S_93%eeUeKvlLNK_2b!n>9sgg{t^8@tK8j=gkKk>CZG9Bs4<E4;T3y
zEog7gV5AS<*zTAR><popGT;D)u7`xK4;6=<^tmVIooV&3h-UvSbgRJDnIGwvI8P-s
z(vs{6S&e#Vn~R|CGZsA*7GiAmVl+U2P<x$ZN7?Md`#<43EBczqqXU1ZooA;L47cs&
z<w}t`!t#r-C7%!_nI+UHYi#4l_X;&aQUV;*#Wr*7m5JtMuj4+kXn5gGRtHGDU1In`
z2uWMrZo8#eiNEir+{GL#DPPnI!ysk2t89<@m5k=IwwAnA#*6l9-zS#K@INxZ(eC)m
zQ4OoZc@YKKZ+&7onZTZ*Vj{hNqYw>9f}&(fFf2bsoc2F>u@#VN=Pj}cfsJwyZ0GI2
z0fDxMJ(_#Cr^1RPT^K4kRNKv{#%d>maLjL24>u;ii&vauy7$graoZmZ^V_(-#diq(
z7jvDEm_eYC+E15_r{jg&`^bzqmY`jrTM*zJR{wy#Lzjzm0Y(zsHoRjd6L1EUf9+u^
z4}jCw=P+8pahChg<$zuluJL_M2h{O4mYcy$(6$j#cOX*>RBxoy#JiTGo#RuLKpPaD
zK2y?%8(R`d%)jvwEf7Iv(IIBhWy~mfu8!ob()JR6x)_i1wY1qvc_j{%XxqSqcf*9g
zb}<3uTSWhTDtJ(H6G3&p)yOexS_GGVZ1lHEwH2t9pF}~;{>=+*JtB}g*&oiqphqG}
zL~Gn8(tnykz0SLiyqP<u+gwf2>}X`z;tTOwLK>i#Wt>?sVLLE!&A458Z5?(#A&vD~
z=L@JS9-6&=ucGfEtHs>ZW{6`m8DFzQrBR7QVAX5*;q7G34r}z#+M13ZD`V@2#Kpee
zeIp|$M#lOY=DF86^-zyG_n!y2M4ca@RYQ<_3!3%*jT`>Ahf&T?AoLLbs_ij-ht5&;
z_pv&bY(w&|IR!s4jTo)bO-dsNIhQ((a{1mA(JMmqjR?XWjqk{;GcdMgd~T9THcfqH
z+gp~+G=L<N)P!c0uztwh*XovNsRf$Zg0HzV9yK~s#J$ArDS0}t|4QlQQ(hhBF&!F@
zn5G0zev&a_Xq;lC55-tR6YmQH_^6i<!!0Jl@FoH^CqltVmWq#)!UH<{L?V6kMZdV+
z1kJiZd^)UV4;|UOZ}hiXwY@Br7%Nsr{?yDEZ@GK3jCi4~Q5>u3KyPuc@tR!B0rzYt
z!HW!y9RC|a8J}0st`qp#?h{(8DaG!7YPwA?tR_4JmWu^;2qNc-Nu0@d5<=jKwFMI}
zUv3TesgLw&8|%6GjBX2=D%3xd#mwK4EcA5>QQQN#oXx}LZxqp9<_F(yWz^Mfe4(w)
z5B{-*47cLQw6nS-w24la{xapNnF>sJL~Pbhjx}Xeip>7+RVile#5q%jrE|+iD0cr*
zrH$)OYiDp)qK=2$h@y2_L5rlQ8X=fH?kqeOW^EW!oy4KK{rtnecE!7iXEWnjtzeC0
z<})?epqV!pBM705r{Uv^H5<0pcGa17RcUa$t4abQu+cbhtpLRz%)K#Zuo4>)5{C7<
zudcLs*8S|LQdX5X5+yeKE2}X1S#5{<G`gQiBgAHI8q==IJM&@n+^%b+?nP@EDWeCA
z#J)PLELFn)=v}j^W66>50e&s#&uR+1QLbmrhW3x{ImLs^2KnSKPH^)kHN{)@Za5*I
zMB^bt&<zw%=`d0#!{E_G{HN~W8I;M3mkk2v1E}z_iDz@3)oi?`<%kIOkUy}(RPt~1
zo6q`yzYNb!V>O~bbBxK#-60ij{h(sFw+qQw56SNI{-8B-#3-u^o}6vp`Jw0F2&k(|
z=+o?7qcyU{D60vcoM|`zp~vC~z^F?I*6eMkUDLy`EeWofXxG@$qjdn$qe*$bWCy6G
z-pgsfWB*CvpLG1x3#p-}GzXMw=|$JlyZ*PBUhgnNUOEvFc<HOJPAIWge%Hke3kN(+
z(;*SoW#Vbabn`1&n0V9q*hjX-Cy*HDMITr-mFkppK+Z35_O^2!lyao)KBa!_6b<1u
z-tCn{jpQS~<kj!6W7Mxr1kCm(SQ<&PGUj~18tDt!H2Rmc@lG$J!x|RnQAmn&M?aUo
zafN9wNT!xB4ooEeY3Kh;f6<KLHH%+}F|O#Tevezd(4nXi4OzauzXWlZp8165TsGhX
zIX}SiB_Tq@y5-@FRBBz9Evxen(t+8Pnh#u#(f<j_&}Ya)G}3$D(Xi37MyQH(QDCsI
z66I>F!~`eXBsz2TaitpJ%P@xLCU!Cwe9#d5QQc;o)mr&Etw~EqsG-$V?cnT;HbBEU
zP4PHx&@ix?2BE}M7&A4ZQ{|-<PEJo<K|q(^-m0on$yEW@htIdKhHfHEOMSi*C4!*1
zbnAJJGcq)Mw0CQC+_Ybn7JG-ksO<qWDXF3KAy~a!H`Mq>&)$#gZehJ^X{70T?1xY7
zdxzTwCuL2ly}P1YmQWF0omH!rQ_M!_X|sg8`5W||2&eTsUXHuqaA`99ly`T>8};p(
zBL|+#L!WMVo$WXjc{suYtq=1s2S)c7@OfM9-exXoAtX|U`|-RCH?_*3nM(gTnCxE!
z(d(BZ>V>Gh6b?i^sC$7i?ki)C((boLG&DH1pF_@2&UlPk1=j%E;LCKp$m_kxeJk&?
zxZ!}*VvK<Ujc;*1a~+3eRXq(pJ!ZLXGM~LX5jO9jF>P(u$&DB82<zZdE#E4==it&b
zQk9ay+3q+s(lxuOw(if#x;ImIB$E>E*uQ6AqJ4zm7nZO;c^zm*Hr2Ruy4n|5DMp+#
zo{SI3Tnlkv9Fr;U6TR%X?u(u;PiD7YTUA9_vq)jLpS#V*h_6t$ci3zX*ka5T4q0v*
z$=6oBx!nrPH!ixd)jSHY-k#GKcbxrZ4>Mk<UFANT=4pk&&Sqo2()O()a(#@qwz223
zal1-bT4PUzAmB5;V)0@ZocA~+i}}RDoQk`C{K>nMccCz>U*<3y0M`0)cJUjHL&TY6
zh12*q7RNH`%2u-tC*Q_K3o)wDI}`L%LrkznXmUJz0}?0zw)#pP*Qg^jwN{dDy@3fm
z07t#piLH_feVmT+5O?lMb@RIks1io~_zug^Sv*(zQ^B2870;cUYLVrw4(70J<TKfs
z>T0ne;$@=_nh<roX?j`?OXjP<A@}9e&Xn0|`hFygfFgWt?jPpY!3Ut+`!-KhUVsPf
zU19h<fhWrxei{bB%;|Nd!%P^(w6LXmtp(NH?xcgk2V>WYT^UQOnud|nxoI+sv?lk~
zQ~7DzN{pQsld_H?Rd}tAk`n;i^&p=}SK%F~dG-3e*oJn5+iBLN_$C5acFf!S^>0G@
z;L(lVV)M;edpg68^qZUs$9R&LXnWn70!;iUq|5gc_QMchpz;uO(V~615w^!Oi#G=!
zRw|Rn;ditBg%{G1oPgl?*zf*E6`&C}?2dgT32dGk=XdMh{AFry{maz;>V9g!7O<J{
z&Wb*GJE_l|;g`;|xAUPVjhobiiqpeNt4l^>4m}#^l31#jOxM*YxQ0nZxLs2xm1>n9
zc{|87+>X|7dvG%A_QfCKkh5wV`-{YfeVdy5$-KOxr~Mp1igkd^0jku>Q@A$1qi-x+
z;vbwO<FN5X;6`IC1!yW|mP|&Q8S{EB<-&K%+<qMGj2kzBX+<ct2Aga13z)Fh_nx9L
zMX~#JXncXX(jIclQM%2cnBEWVW$2B26<ai_)^D*-l-9G!@PTysW4mN}J6jCTlHujL
z(^QDSCLJAxfDqhNNaj|RlricLS3^H)MWZeQLl*TP#z~<9sw8DVRwF|wJO_&SzzFtk
z>`F7kz*4@{j9n)nC;n8Jf8}!epH=V5<u?wtb;#$}f{h*cYJ*y*XI-eP7?oEhN|5I+
zkgLwC5xoi?vC6TnGpWQHr{vmHfxCb&%WUJ;a#JxQ<^v1V>$w4Z;*`@&gSTkGT!jY3
z6+;uW->8C8j>@dX+;Z6jlb2AVV{sEdSD(9Z&57e%?9}EJ%^>E-K6Ms2ux?D7mi;!~
z)MXfaF{3`y|D@`OWt!9Nhvtt?<QV}9ZDR5qidDTN*>6X}-n}f8OdOfi%zlKZ-wncs
z+LXK#*Dyd1j{K2pe7!4r{79DNOopCw%(Sa&N!GClj1ZZ(lS#w61?}rRU7cxBh8<JG
zdIiLE*lCexAq8k1>ou^QVUhZsY+eI+-#Q^d`52H4lWYp9>AD=i1dLGY9jj#*$1<rl
zp5!I{Twmc#JIs{w?w<3M?OMO>eIf!5=!IpLi$^a-*u9s6ZixRLgZzc%Z}JcD3Fu<U
zfEi>VXOjpSxSodq3JC$9UT8o7nE<LYsm~P!2yJa1nA54leERl-DtIs5*=}erGk8IU
z1D}pNRA5Zyn^gJqlL;O&dHytG<j-`BCYAU}g=9>sun62VTO*d-<?0B#V*+(2gZHXP
zp1R$OzF1>^t8e9RG|OMm=xpb{#2EIlvhje5uj#Cm<oFC_l5Z5T`5hIInIx<B+4rqh
z9+z@qQoT~>x>W^6R!W>(p;{uBfV{(C3?7pqq|_wezfg0)0n;(Grb(r3;iP0Eg95{R
zwhn{IcudBSeUraa)5i?NKevOvjo~{*C<E+=Pb%|X+xf`O`F~X@waJEKcAM&zvYubv
z8&|qfdFj#}=Dokf;ARwmi^0XJ_`Z;pxDnHmB`(32o$v~s@aYTaKsOhH)k7k4$v-f!
z(&co}A#(uvo+1L$N+4ZJWVq6AiBh&aP7xLe;h_|7Vs~|Mn`M(Dj7Ou{d<~L2RI>;b
zb3U1f`aj2F5UQ}bWj|${G+N{`uYST=YK;`X&}OK?2e0uqICnJPoO^*y;pp{R-uUA4
z#LUvve9&tVJ;~&X&^ISgb~d=f{qL!niqYBF+mSi%nZ+1;7_kSq3pwyxTAjd|+gjBu
zWSh1c)(F0D1^Sm8x5G@?W~83h13!Jou&;oKE&7C=!HinSd?;>4)Ndvw1XGxpmsz1R
z?RUfxv|jPWyzaqc>XObn2Qgs3i?{DKKKE?Exsc#e{|ST*j`I(*d(Zpwv*Laef+b?u
z*0*jUNax_h7x=;@c%d=?h%{Ylo=&!qPH?w(fjT@x2{KG;C>GG)#4IRt7R@9(Vcnix
zzGn%Z7I84OrN=m;Cx9tN3@*l$D283kh_BRG15)jCE9s$qQ`v<q=)hK}H}2rLCdZqS
z33&9L1X)j!R(?PVrI~;pa}TW$)-N1VF=HCT{#89xnZBP-8t*h~?X=QOgg;{o5I9Hk
zw+0u91ZPksj;@%0`;^QYx{ENAnW1)zRbo<&aySAWhC!#D-GB&YUAOi5L}X}iHMoC$
z7JCgH?J~5@!h0NLYpFQk_+mTUinmfB+E>W?$)^x`2MxGEU`^$QjwPvlZ{MRuzsOu4
zHs<uqVxM#>18*wx8Ak>RM<z^d22O1zq{|Y`aa7{koD&Wxnlabzx)JQLLASdGh8e*3
zX#VSv^R$Uz`YoPg67NF^>!AuS%ZD@@V+IcZ;Fnil9f1$^T|b`=WN5v9H7%A9LU9iL
ztB0hwjk>o3*Dd%$WBunOpq;@-pIvFewV;hsaN)i!3)(rHyRS3L|L?Q$_xh7=f?S3?
zK_s}X6so4u5S<0=XuUCOb}A8IRQ>mEOu9lNoM{+_&K*RAM3`#nhfwoOq;apK?9(+U
zTZ(Rj$_t*`*NCeOoaV8TQ0g>u@an{kFzRG3J~!kNtxjKj@nThV#n?y(d?LAZm7KW^
zBIt+T@*`3fmUl@`8IW2q$d6{7aP?Kfr#6>4Y0aUW3`KMdzmQr{O<H|`A#xu>pi!b=
znPi44=@4}^Fs{?&7Z{twi81w%BxQ#hnPjR?0pnQyUeyq)&nD<xA#R9vdiWlN<q}l8
z!{T-2!?e-Bc(L*xlBw)i2j^r5lWfh@^xrTAjK?bPft@mh*k$l`NaU;Q{ita)NXz(>
z#@=NJbx7o|>qTB<`np=)fp*BhTE~@b&6|7Vl)S93n#@BNuGlcH4jsxE-Qg^!5#<O>
zF*ZqAH%T!Drfin?OR5>0es?8Nu3z_xJxvt6Dmbs=rYIj^nleV-J)++|g55pJs_r?v
zg-lbX-BP*@){;v`PZEQv80IfCNmo+Ki$ymrbfGbTmKqgDslZNMI{Y<^K!W`#RyawV
zSSlk@%_K_+dsFqEFwKt484@jIlA{V`@)b@JB(A_t>b6reVJKwkqL-RuaiiHAmX^UZ
z8WgVyr}CU<$v>P&oz4EFMNb_|+sdG7^dh&0cKsOol;9elHu^M4&{c{NwTDWvD7rq+
zF3zxgQZk!!x@v_xJHB4BOjEk7FKdz|dy+PL(rDP6F&0e2D9<U#;lrnpj0$dGwHVXP
zayJu?qhI;3P57WqVfhTKnx!8@_*zXsN3|eR)+)YooOR9H{@{;%Ulxzmu;;=xc!G{t
z-f|?J*8JWxSRB1Q=Q~^84t{}CIR5#%*M2XZ???8~k7b9OmXqCFL;Qtp0s~jk)U1n~
zVYl#MHwj>)h)Lrsrg_*TtE5AmG|%@VWZAwD$->X1)4|kDzAl@5Rl<Ht3da@*;T8ko
zCRoyKw~8yp5<O65-GEUYlG5{*YuImm#7`gCDj(A`qpWN|TX;@Vcn(|0CRNkDd$8|Z
z<EE9$m4DrT=2=)u(IhF4pC9ohNLt>gJrj@%>RX2r!Uq#_$%Tf+%=)vK$%c}`N0Op}
zeVxEQCABi&G4ph0V@l6`(AsKcruCv2-iunfoS~00BOeC_KSl!w6PY$7vF%9VID8@8
zr}MgD)$B-VE@5ddU(j&)qPxf3BZWVhM=F>{B3L?8NF6wo*wJJ?nN+@{w!_<Hn7VX5
z#Wa#@l4V~#!^kvVo7ZX2+tX<h&9p74@6J;MHjOa>TDkCy{!MC@ZrVp(g4}x;D>bs}
z<5oH1#83CJAaOM^?MPyu5_i}+PXgbCj`iQjOjnLn?v`6nSxk#hR}NPeDi)<w3|AL2
zSyF{^#&%d_TdSMQC}BGy-*2TzFH5t|<<!hC9&0wvBhM@|WY6R<%oyJxG^P<w+gx{b
zW|t4w%Z$`-57$Qn=aiDFm`P%CG~r158GB&Ws$<bp#b5@qe2s@&3d`S8(aea$$Yl7E
z4YfoA7hjd{k4Bu7`jC3i9b;9Vte8wWAzNINTU?V^%n0LD4RweNb!g{=P6L-&rm90(
zEHm%bM6^8<F&vqUP=egRJ7E-=%)s2iwrGCUJ<zW51Cl8xQi~aW99}UTZD|}{KAftN
zj)CD0M&Pp2)VcH2IRU7MJaMAFX$UDW$OssQ{&TjZs%P4F`cLCMgE&^U?*C4FJbW_j
zE7?wXjM4~sNStcU0mBFrn6?g4W1E5G@BFdgB^@!OmkGn|)1<*b({4n2DOJ6?O|C19
z1w;!e>4W4=hO4tS;w=FNdBcu31kIUFu;G~yPN|<f1*8BftIjz*fw^yRdWk8I0=l^}
z#)P=(<MRgIttYAxa1D%N>=SA63)F`w555Rp#jBv0HZuQ^`Dm@B``725f@7thf?^1v
zJWi0HV83LBz09xn+rS&C-(oEw1A#~o?}W@*>CZuxWR*{U6;wH3J;6x2`^A2f`qh3D
z+Y(FWXOLc|mW!Ya&wsGrl8xK{ne`U_{oZ<G&tH4zEYtu`m!Pars_|X+Nt)ef4-<J4
z?JcRw2dm&Mj^kU5SJnP<F^dnQ;JN%%xoJ5IiUN?nhlD1?!k)_q6jd<|xK*<_$Wao3
z9o&K{J1uaMb(LlsOvNayxXg$f^BSQG(pBWG`8JvqAfYBdq-54{K{HXgSP!4!JtjLk
z&Jj4Lrfl;4F}(d?tZiqV!mChKoPBlqbOH)+ziyvzG?*RzEBC)%#9xJ87>he#3joi|
z<iFx(0WwWS?sM268W&xYA7U>xq943#68tZi&YqiNJO;dM=4thDXy-=adKjmm-NIv4
zo*R)pSZ()~hSHU+5s>#K@-~t$+yr^!AWO+?2++J)sf`fbI-rxqyc3>Y+oV@{%94Z-
ziB})tRFA-;*#q}0A8tz#TL>{*5Xs|iE4Fv{1~$F1iSb({twFho93r^QkD(@5#Y?yh
zk-kU8i|-|ecFfBR!yF=SB;I~g=%Xkr|LH|^$`a@i!uN=eFE^`(r?VuypMZH2_*MrJ
zp)R98t?sh`{ZGt&;3h*-i~gvdemqjSci@}rT5X=cG5Za!`ejC9Bhd2e=Hpx2?}}CQ
z5h)j^%;J3xkTg6I^x~>5DVDdGIpGx^Kuj%2l?!o}i$K~5lGzDk*a<zv!`jq0Udbf6
zE?XQob2?${rGvhv+Qems4|4bVG-JL$I{@=r5^(eRv$OXccbQ%*=L1=Q^cvlS^op5B
zm&3i!qOnCmvUNNm4C@?%5dc#LfSlKBlw_p)%1`~&eMEAeiS93LzKLt%s!cLMJ?@NR
zFq{&o2jltoq4!@xkCBFJtqdb>f}_j?Ldao@KGe*NXGzi7C)(N{T$OSX<Rd$rH;W0M
zDJ2V##t*bO|4_!sb)HMW%c!mKI&$03L}axVAx+!^g=4%Q!ZGuY;TYe-sLmFpV42pj
zfD_$q!Pep?P_iL`q0xk{Gu_UM>C8hr738q4EP5M2NDWg~6MZ)_DE_EcFJ=UThL8yn
zT1N_ZV{*E^fW;N;d2O%?HS~f>ZwR$-ke@U-&Izq>A6rYrOzj#6=*^lfRK8m80HmV}
z{Kt6sAWXvn%jE)Ieel^J#?2tXGkQetHwTSCfqfpHuW#G}!s(Ou^nK3xLy!vFjn9+!
zte!T06?E&eNcQPUXxaQUb8BMGUi)06YGDH%cUBL5oLOB9(RQDvu~lQRyxol&)cP%Y
zi4<`<6ldcMn}~}uXFY~tD$O3It9yH8LLAdUO%`#lB-)*w)ife1KhG~uw+SVZ(jHht
zrtQUG<a@-YQE0fOs;8nTJI`<>r}d0qrcArTjbBv9cb-99T^v@EM_|3rQ9O~4HJ7C|
zg`u!e<W=lq;cB_fJS<%VoDzt@U5Ab^XMcYad;<zZTvaq5=q{Yozjedh>NWtSe@NE;
zlK#PU&h1&b_)6j0z9oLL@xAb2aylU1ti?k<QCH_VKr%KLZe#_ob-c8VUNe=scY(#d
zb$!5qQ=%5Oj7q!DZSpk{P7AwLjh)i1V0(}KimfKcxOVSF6=L2sjs+U8RM(eF6Y)<i
zSp~=F!Le2Bd(GS6=#)1Tdot6W`y(-AG2v9VNfN6va#3jbwuad20}J)4hgl3CXu?Zc
z^b30P-TGepl?sk3$Jx{vYS1Ph5gF9BpnfcfW$z9j&JnbpgK$<0jEn!rl#w&qow!73
z`O>Iw<JUEZ%;4)W4GfBtox6JCN~b-jzFEqmE~^oe@*b<p{;Qupr)4D<xWF|(Uu7FV
z!nrC?P%L`&O`-p-DzcUsl75UrC9b15$G90E#CWrK_FGuWL~{#`)2CMsw9%mwdMQhY
zA5e1>vNR&cV{k1qgL`Uf=JI!34dSAxXvFcWf(4bo9NcJQz{TJ!*}h7<(vDw`eVUkC
zJWS#7BcI=LTk0TNuB|hu=2m^i@5%hUg=Ht+shDlH&p?g8oTbPcNrmnMvNPWp^vsXD
zI3K^s3upGS+&ip5-$xXiWB%+GvOFa^!s^!*-LaMI5wPn${!%40+~!u_oM64y^c(du
zipHrG!*`YF8@0oXNF!r6@l@8aIO9<J>V8n*LPeP)^dzhAoH{oxdb4BwBKeY`{o8@1
z+q-S&$Rmh-=Vz0*%O_A|p#V3o%0qYL=zOiT2y;pB@J|P*1e`RzAj50`_)aPgyJjF%
z+PU2ctEtQrZoK)xvi>C<&Jif@=E+&^&_E?3t8AM+y6qfIWB3!x9^_>_>APiSn8^+~
zT6w>#ox5gdzRFdn{aW80#Fvcxuo(^kM9~7(R`=jH6l>212uLOy$BjkM_iqPQ4T7e}
z_g<}dERa{L0WL5m@#VIm$?7&{>L)iE0ksWV2KHlTXUg(MNw^y+Eokm{kVS?-L{r1N
zhXFyS5XL_EG`+@c4$hgh{0WH>FumMwZlxZQm%9tTq0=L=_lpbYEX+dGUyNclJ)LP<
zFH8$$6^jhX3p;LfOi3gpLx;enhG2i4&vTt`iUn@|3+wCdp@8P~axU4coQGK6edq3Z
zeVo;H{POl-Bs!|;UT2asN)*;Duh+q*E0bDD4on99HF6Fe0Lvhm;^&CCBlup$L>$E`
zaaaf;TBzQ<8&M{)RIuRD_$ri=mhH4lym_i>bl4p3+ETznQl_{DeS*XVT`KfSU7=KH
z^&;mMj=7yM)=jnx<Ah=q;vyr8j`AX7?D<6oga5r1mfXFZdzdV*{RAsB3ScS_0ieXn
zWNGmpcQCkHt-zZ!y-zVZAGjk~h5CJxi}!D#MUXRr%Ly((@vqFTFMnxvRbRqP->`Xk
zvyt$B*Pg`hK*DW@N-Riiqaayk>L+^s=`bY859C*9c2-K(=Z&^N?{D>kDJI6ju!fS>
zcu0q@!pzY!+y)!aW=7~G-?DdV4#|jG{v7sn@LT~qO^sYa5j#zMS>D8rGE^q};8T?~
zq@(P6S8^e&AIk{fvSGX?0pC}+`@qq#dl^(=^wseY7InGaV=v(qRyt|s6VHKMWW}Ja
zVYJ8vPIMQf)E6<MS^;s5)lhUtl7hz67!T^l-do`GZxc=d@q{!Bqc^_TuQJ&NjNx$)
zMk`GP(`;vVP-m1FneKVn%ex{Jq+r_yc4%b4>2O9&cVT~q>p-kWU=YIjL*|Q~*I$`m
zwnZH?`G7Oid-F@Goyje9GXZRk!Gd&Jb%tk+$O3*%4}VSnXRgt`>7{;9<sa8$XYstT
zQ@r45S@dJ-iyofGipM!rq)Irs`B&kC#LB>3BSC$bN+O7o00FK_kYCg5LR`Ob*nt=<
z@Epsv7~^Um=5+Z9{1T!^`@Kt(<lVz=k5;H;aEmt*5Vmm+5XS639u2RD@&8%qn@l9r
zdrz6OwEo(7X|{abw;MMocxldTfw~Z?Z|`6%HGD<lfHmJ*_o_*4|00g-HLWp^HzNe~
zBOTRnSoaIf9DVe>(c!cP#>qZ)YU@#6ID`|}%IAw$Ol>_*&qD_>r3O*^R!nSv=D@)f
zWj>_B1Xcq5PdB{6HhlUw-hbKf`?2vZ)d{8n*!_p`K8=OvXS(q6GuU?j^B1l3xCHv(
zJk6pZEx*q{D)e~2VS4+1S1{==-keOAA!mU~^6@!<;zKB9^f;hFf31i5=wCY6TCOuC
zneYB->QOODUGaV5k#|~_!H4jGskKbe768||n0O_7%^^29?FUe7<V=}zgX}k78>rii
zF=rgWDH8x1t?8B_^tOV27>|k*X>}Wek?C=g65aa@XFSgiAm5Y6C+g-K*i4uLh|EJ(
zFe;_%aZeppK?#?=@SGYKmoYoVnZw9&B#bR#*6cQbUP?Sa-xhLW!593iI<f-&s8YZa
zP{&7;CG<0`_Vy|*BrEVfLf4ul51U)!$<KHfH4;saB~NwN7%Oq_%=K2daE$C9=cXGG
zs_aF>VBd?X*S<KDvo#3(mha~7E2Pm1x6-3ue#d34PK%mtlSm%j^ZB-ARvP=(J?X{>
zgsFO8bgT62_@QB{IfM>N!dc)Xx?xnF1ZSl}<+2dd*Y;u6NiX88{L%~jh;blWTz8Xe
zcb1-kT>7R8kOMs_tQ{EJ17zj|A%ylcn5{@*ZAkDC`0|4Z-Z&5!9ox^>uOty&H(f{t
zh=i^th`#$e6AU&NOobBXb$b24ik0qC6@9yU!V>YnfFzoy^R9i39|h0*{}yQ!JRm$C
z{(Jo&PWby>KXnf{`D^T)^A|bi&5{S+iA%inG|1l*zp(<|5$H{&svcA!B~}_U2n`rv
zTYSq(Z2dQo+3}bM_w!|Z%z}I9q<yrlF-6{@l4bc)jI_j<=ysRW8>%HR&`2i6-GMf2
z=DeXsT6|1&TgvHm)e`7wBooj{C1Fr<eE&p$56$2ATK*@+vk$FCMdg&fK6x(eb03*Q
zN74U@OkXiT@B<|BDN={Gg0Lk6LlcqJ8DEX*in}FKl<>&wnUS_RR&+?dlWKcI+Bzj^
zgHFm06P@fU*55*6tQ%EE-=&(cLj5NiNDP3^JfP@UU<_$r$Mio)@S>wfD!}_wxqmo3
zu(w@sO^?VH5LuJ(O+(UvmXrYlB{BGseu^n<nj1Z}ndQLoDMk8!QY(W;9U`Y_<)(#9
z>qIRuKJ5}!Xl7LgGu^at#e*mK6By!e#)`PCMrt`{DgSrskh@$?2vbP}Df)05f0Bx5
zbdW-|Fr^Bm9N)2l(14zOSl;#ayU9Zcs#2{BtIw7_7X_8B`E#m8f$9D;z;l%~%toW^
z6xt@n-iWzw&+T%JRD<W=1&CIKl<F-DoUD{@gvu)lm=+6|IH*GV#ZexRSvI`!z=7z+
zyJO|v7F82FCG3<~(&T#x8)pxxnzX1YLMYvS2%#<s`)<HN)iv0yg+sQrU(ndam><J4
znw;4{EaLhs>=Z)LQ}z?O$W<opF5HG79^2BiP22cVz<f8-d<t<@gmV*|$Ov3mawV7A
z-i>yHW6NDylOrii<_0AwurP<r+%}T&PJ>P>A}}L;hE^+%tc@xo6iA{R(6J=Omy5iZ
zVbb1o$5<ZE3Wo=fG{W}lk<2cu&$jD)0vk&egU}w`4RoXQRPL~Gd3qHr1ZfypuYRyM
z!=G3u0D??UU5;=@{wF}vM~b9$cD0YMw1mv+-?2EMSPa4M4uRnfL8S~m*BpYI9eT!n
zfDRgZ4&qEuq1#4Co1D~ksmAkfKy%WEsG4Nd^!Kg=BAGmG-N$&D<dATR@1%|IL!#H?
zWRtoXVM)v$lv{~+8%EF`ZP%l`p>+mAxyFz}Pb+WJ+U>kkp}PtzRx9y{m;Uv0rkJK9
zAl@1hTW^C$!X9<-Utq_vv24C()&HNNogt?m^8s{;9L4~X%LFEO$s`_9DT3&naIulj
zEazCUBg*JC#Z+hI$6YxR1S8quo5P)U&as>Qod)arrFGqcj<F^`C<ng8CziWOswpRa
zag$UA{8K0ZB>xL=10=b%8BW}~Vi<#=jL}DY!cAH_nHKev_5niY2}EBQgft9;s=HCG
zW1*HPQGCLoS~|fO_22IU_|6ju-6RotNM8^{dxv*5cdjhx+w32}o&wm<6L8%m;dw|Q
zf4}FR#&(m0<4N89?p)dQwM=t)^2@=_mw~b?_S8uUXCqe9O?Q%p@T{}QW1grvk>M**
z7Xq<8;#v2sx^TO*66kYLM}o~CKer=)@C?t2)L#9LTse)L;fb2=gqDjIJd70OLGBVE
zx)3EH5VKSCDRqb|b)YqzwJWyFDKnZ|n+b9pbKR$%?(*X^H|}Q8U74Xuw)M3Yr<B1f
za#60Vi_MK<x35~_o@ygbp3>c**~7YA;O^h;bnvQIIY`wl;Eh-Dq{Zs^=A}zXknd!F
z?0qIj$y|57gUG{Kw57QzULzQo*TH^vdy;bNSHg>{Uv1uA*YJa}p5hF1Dg*NB=G%M7
zs?4P-pU#WMZXdZ59{n%fJs36@>KeD`@s4l%OceJZJSvwoN6(Xk906v1%=KO4z+n8D
zB*?0HCFiTAb!@m9<ul5nsza7Q`Y-F+jXhD_jw3i7n~RvwlyqAeEHBP>iVCiGvajcR
zl`n#d7-Am~?MfZ{0N?HT9{mHVGf~sk-3!k6>qv>)Z?BdwDA{A@7Z1BVuT)7tL-`g>
zstM!FMb!AQY`m<B3bjP$kF0|&3f^+FV<MRSCPI9%k?W_GQJJ3RG)(_`lo?jflRo}J
z1)s@{NCpcub#vlgfs`dSfEx=G>9d?l@2E&Yo3|~bY9G<aOflm)r90yXQps{3Gs`wC
zS@C`w(fEuW|G6_;+V<14yUPH0bX|=@0PRJ>B7)MVC;19qXj|}RdKCA_2q&RJE&BF!
ztb_W}=B0a0M56|IQjeZeDL)9Z2VpMvelEyx8Y<P7AmponkPaMJ<@`^VI60>@YLW98
zdET48s`r_t_e0_8^}uA9J|{lP#NGY6r!-!uXn^mC_QAoY9U1*QGo#Fh^r-0Yz83S;
z&PTUbZ|g5!FWNeA3B#Hf>mJ(u4!*}nd9g}(hS>$zz7U$|(Xy%r3ULg9H(lrA=ur^9
z-LR@zZmpY><`*u|+A@h`H+Fa1Btq%P{T@D}Vj=vbfi|zAdcKIDu8Wk-{vkiS%l=1H
z)#kbHOL;@<ZwRH-2BGz+rD3Qp{OJC-ekh`GLg`AC4@vnVU#Lm4p#^SAtJU096$(Mo
zr&SBN{D@KL2sJP{s@JB^MGK#NLL;nrnx*9RUy=EoS>N$W8)FLSUTsTsUCRBcx)7-D
z=?765{1FPq-B0b&jTkW=5>S50a@a?S5C8o#klz+1{LvWmW_z&2B1nS2>$8QSB=ZEy
ziwZ-_MS`ZvZ{ZWawKz|_1#>W1Ci<D5um~2;xTzt^ff3d3n`Qg*H#NN*@Nw>O`S?u7
z&pFqxD?Y}Vf3En@cVOl7_4D7S$8XLoRdKzK>9BcJG^NK;52x~5+~=nSyEvf_EIQYF
zVGJRHTqJ#iPm650A3d=3pqUutm_X>s8-4Ck6$Iu7b-QET;c-dGFX5bHAzsj`yT<t6
zB|CItzLR+~WcX{6^S$32A7%eJsUAdQvt)54(3T$IsN@Mu$&26;@E*jlRk`u|j0SMC
z@Sp2EoYk+OdO4^5ab*qeQVHC2$+H3}Y_sTpvC`wKt&l$Vh{{0uV-gQm79rY02uNpk
zMCFWWj62j`Mt^q1{N5j7$R3)lq5uASf{qFGDpQ;dwgiYs?vRt#r^qdd8Byteq<1Ti
z&3*~~Y_f71AVnL#{2kI0*Moltm=UA&MItC|{+9TN{R<K|p3PM8T8!u)?OCpXO?;AB
z`(aJ8-w7Dev!}xiUUuVRjwye;IE(thaeqzkEY}D-gs2~U!`z~^kYZ<qe?k7d{6jHN
zg+RYTS*}Q%T7tD0k)R_%wZ6%!OS3zR{^2n^D^q(V=E%GG;};Sk;s@C9O`M8wDcw4c
zR`W~>ojo%5>x|r}jZY*l5rPO&8ytaJuQMRUjtK+tNrrAnYSRP}A~v*;8@%p+g-Be$
z0<|Q6*-toRkE}`dm*U~TanM;P@JZV3<uu6Jy|b#NgSLMsoWLmX2|=_|1nODz5{HQz
ze^OjT&Z{gFsNYl`lO&m>wdkCSER)|<ASFeTcu-DM#;2@5s%nx!=+PPNSwH~A->62Q
z!bN59$tjQt+5akFM2DWrm3yJm5DLMF%BG-x7yEx9z6W(~Jcck)<XpsL=_s~d2{mNp
z#iO1?WoZ3cm)~mTodx`*vP_~u5Mo1w6xbv}|9{E9p&|ZtwUH>)1cT5cGla5$e^9r`
zgl@9((oj#LGd$!*Wr8lnWO*t6c5>(m1va73vn-$&DqKVcm>kpVAPCWai#$fBaFMW$
z3W>LV&i=MJG{0JSN(=OnkvC5W61c?1^r9*f3}{GIpOKh(8NfvpfJHICE`<;sBkcMd
zUBL0H_(?zM!X{LOL1pCTh{sQn2yYbcj*Bcc%-XS+J0<15#1=C{3l;MswW|lEeM4&2
z29(nvqwV$0J*0kjfWmd4@uC*q1c%V#S(b%YIb1{~*f7iMDG1T&C;toixz-N!r`qwf
zL>9rK(-}>6n;D+D5|E<PHp7+4<uqg#J)plE|3~$qEN_18aaxweOU=vvrdy^@(e+jv
zA&|VeHi{?PM8nkqOqG-b!{H+O)K@4Ix0z-bk-b89qZK`3Yc^3e#h>rDeHAt90t{}C
z=rrph4B#Vr!J^n-GeC;2J?X+FOngRS>-9+1Bpc9@B?jl$I#6g%^NrIMZcTy7alH9n
z@hr>ED+WGd7_{|T93ygAD9dh0yVil7LQ`<OKih15xWaaGs>W_tqt<~|lQaHHip2jw
z=iBY(OF|m{6~+_czcAv>7;sc~*}aY4Tp%53mdf$|V7F@qf+Unu4mg$k`&f$R?iigL
ztC?9SHx2uSyE{fP@n}^2*r%n${B)Mpe5lkfg2-QVD>)#7YovSi2pKk!e+YUCZ7C%F
z+((Z>l<(uWu~+5gVt$n-&$4|@NExG}K_5osSK+X|9bilu>qcw1^=xw8yF2h)Iq*nU
z?Ps^`KfAhh)85<bqLypXqtGphDOM3znQ_xpFlkJ+{HQ$`YKL+&tZ}P+Y<3BE6PGjG
zcg$JqYni=y>{=UYnajC>U`IA9#JFL3N!*v^3PhikI2(F)On8%spW(l0wZ8CtGo6qd
zHOv3~@tX*I=wSgq7jjXAzk`I8KxiFqEk35F=Ki<TI|F#F82q4N0a+JvaRi~wbaHOg
zJ5MG^y1%13`}6dWMWP63o9RT{3R(U^$8RF>DTf7wT=M>Q^1pAuSp3f)dYkj3_!Z^y
z#Gw_%(kUqvUip5`dJ~KK`JTj#L4|nb%O|G$Mh??FaD8eU^z_8i2`NxXeBWoii9m&p
z;^&hi7lnQ#k!@dj)q_XGKRHBxO%As5+lJQDZ%r>Bi9rf5JMkwe$ggw3|5mkF=_$GB
zlXP%Iagd-V1cMcQ@(lT_*S+d<Uz<M&P<<qxI71P}JZW)x`r?&WGI&Jv6C32$()Szv
zo{O%I0#Jkno_<!bsDm$`_r^a}dUYBU_i8E=0|infJl&J-l8)~#J5WFC9b*Qw+-oi9
z7f8H<*N6v4_DlW&1VkRy2UkG4V5OJ0Qyd4%FFn3UUtiqQ0q6OMO(+MPNPi(%-RNkR
zFc5hKFW&a14jlqqhxBF1rW`YFo`8h=z4j;?rLPco1<DbIJf2Uj%hH9rIFI&ZYT=(8
z=EaLNaBZ#rN7VS7$$_y;06yu_lTjF1I>Fzapb6?<oU(my=i9%!sPyQzV8g#FD)Oq(
zPsTFl)JD~VUCd;yXtvPa6nVKkAEo-J1$F|Rr~JAB@r3`ee)kH_>jtoYQ~cq$ha3D4
znE$P5GqnO-UT*p3VPyQH5--qzyS4g;&fkT7v?pB){=_CP-t}m&DC_QKuL$=3Df|bO
zoH=LrjUA%2T~l1^&F@WAPGl@%FxE2cuZKqBL@arRv`)O_CYT%^aD-&dL)0(Qb`iiv
z@JMR-2IM1JqY-`KZ&M7YhDH()>?PL2M>+~f5NYEg@(aKu(hCT9N#w^&)GyG62-*#c
z1PBkn66__^gFs>oNZ@OOB{D(+1P7=-Qgw(WFi3x!$d_(Ahqn8*I&1gWcD}D+BM(_W
zvED75?GotnhyeLClyxM4dKwA>(GnpM{JmI10#zhBAVIK=goqRg5EvjPC`qJ;{78Wb
z;=XPpL$t;M9c&FxbV{se6&f%FC?UYZ?fW#eZ(zG7zX3a7%#|7n@dgkc<gC#9QLmB*
zp?`e6SxiAPL(elMNL67+q@7QpH)9D`p*K?xAMHxE1O~0{&0h&XU{Kd3+7=h(n(Tq9
zf*bl{v7@{R-yqFj1=jt!Uc195i?owa8odDswj-hmD8S18Ps&5hj`9-t+F|d{=^b=`
z6+Lvcvb+SLcIscLk9rVjjDIZkuPKLgJq*f!PmJ@XFY(q!fo|*m{vTWOzP&)T`roOG
zyLj8?-)`++SNdlI{IS##UH@}PS!+bJKMBxddwAN&Xwi8If}p2DD*N|Q@E@0+Q2ytF
z=UtG@$0Y^@4ZonCH`Z8`v;yshdDXCwPmev14H9krBj}Ax_71XrV+~K)&)5Dyf?iI7
z`#1DKH1WuQ-sfMR_-~cy*n{mITMPWqxJ`KtsT>rXry|(CM5-Kg=h%eh$c+|kl|bf~
zhnb-l5cHDL@6I5#dNXzj?x;=AJ@veUs$KU6$Iex@1Ox5Q!ZF%e4;f895AzOsMNeU8
z)*$uV$9W0*sLi++B~7Sf9O)qY^81q1df-9q;u6kUU_-z}a6p4S5js*ym4{(<KtM2S
zBH8IJ%>2p}h(Dof1(l&fvR>70njO~n-1|T?u8l_9sGB;0qm6c}?cqP1bJW)4XkQ)>
zAS6glq=$qQeD_RQB>IlE5pO>Y@qj=R&%Mm~v19wShx=>goR>@HI<21LvZxp3j!Id?
z6{!RR>Hnd)!&wh}=&7KQ<O34;+fa#e5COgc6!*RN0i7DHa9evoH6{`U@sggPMo2&~
zk~M(nfxK_9hgN$KC(cXrbvBo0Yk}<xh0RK`uO?_HA+H1l!2Hdfnp|5Gvm9}Zgz(@H
zgne^xLLv_Cx|hZ#06?>gH}o$jcz~gP-UsEeSfiHb<>BtBSh2_ip)SafLS`W+1JnBP
z+@}-zHH%b3#oX`{`qu>2>pS*=4W}WK0BroSq%px({X)jmD?70EJHR9-HvU;OIron#
za=d!73GN97C%Rqlh1}<y#M-X_6z2+h^9vzu9&u^K*OG5NmI4-dkwu=vphSB+2kO5U
zTnf>VY=vr$gVWBY8q!x{nz7T|*BOE1E8WE4TTkHj4(`|yvdygMTZd3*NfW^s7P13q
z^2h%l*4_iG$)#Hxe%%&qz!p%Xt0+wnrFTS1r1#!bdha!qEhtD=X+mfcdT*hJh$xX7
zLhlF>5(ohzNq|7$i@Nvs?sMLA&VSDN{_9%Yv*uoFX2^3r*E4-)j2;u~f7Y7Cy<8~J
zb%uYs(E<GgMwWE!w4U2EaRc4-5H<1wrE%YL20is?w3@4$lt4_>X5Oo985-g7Xf&7;
zoRk=V483k<8I@3;b$mQ`+2u!?B9EA+Aq$U22|QrEL}0<F7*yeJ_{MW|RNJCmT~pF!
zokwV)XlbXWvB^L6*!Co_op?f{t0{SPz2w${Q4uKK-!SgbtiAm4FNUf32lK`=epFk(
zonPb6<i(&uf5UPZwu*0o>Oj@gemE2#YX_b{mLSL2oX9u+jRp<oHy}mW-TnA+gEtnV
z#Gve}#Tiun2)q4w>Nqnu)g+!6^iJrtiNL7Fs_lMB)9ki}rhtoj@vU;BV=}FQ=Lys+
zCG>&D)ROfz#7qK%#+_rR(}g=i?~U%HRlG1r*Q;RAFn(07!DoD-Sm6JSy!GDbc3S+4
zw;6h)3>p@X)HV6mB}4X1e`+p2iY&U5*7SGte}ja0Egryjs%1~UowWR`d--F&s~3v@
zEZ5+To&bY}>ZAW($uzxq1`Yj3{2F|!7mE4bGu=rmd|~i+@_+ZU{(L_F{6+sJ&;PKX
ze<8aLyq=Anki4Fq><!H@tMet?PD^L#*SO$N{G!3&kvaeSsx&<l4W3K4Q_sHb`>oIZ
zxqZV!5%U{ag0Ho%J^o2EJl6kBUGs*^h1){Ui|)K8fCl^gx|5ZZ$6qE%zCXCmO$k?9
zdwD&?YQ@fR6F8=X6pDLBc=YU53^<cjfemWIyYFFkFvnW&b;)8ySF6dLYxBKKs9qaK
zdQjy_hWT9quQ8Da`)5RSS6VZrR+qo#b_1cu3Jr)Xqzub58kT3af8vTa%gSw*l@^gt
zLbSZs8(|t)QGKoThNB(PgJp?>W%}<ueN^#LaP1l~3%Fvfl{vCXI8DB3tz@bu4Un8f
zCe?<AdO4#?_ma;qqOK}pt}eN4&&?iAlDf3(ASUhbdW97;z<tk<l_qD06@MA-=|>4w
z={Mqux)Mv@rt^Z>tu0pT)|jJOT++eN$vMcUU?KbkAs@$q%&4Jp#P><&`*kyUwy(zW
zs}qLrdC`a4tpu&Xw;xdSM)VFpSp$UbZlR=fE?E%AvB^iT$-H|u>R}I#<ul5bCc(`%
zccF5^(9Q~8g*B^|`b^60^nkbh?FGn;6j?NH?rv(g;})eKYTL2rb{MaCnrM|H9^C`o
z$gl~>HI-L;*4kYeaq3_|&KF#*gL(rDwl4uoar@Mz1*wcwQ6#1!hLSNgpURO#78^c7
z#MX@2xRjc&V6N}T6v*sF^r0aj>@|1ZH)GqRl-BhUj5^xp;V9c{!nw50iyVqk$xekR
z^avjGsx@|!a^^Q3<qt0BrD#u;-ux<gWyka}NvKKYO7ZZc@|2t7N}(&&81K^}IZ5Xw
zuTvB~2#T89IYW(+Rglr)ZUAAFhB&G&)N$4lQ_gkWr}Vmh%KiAQr)O4|o+Rpj_vajD
zS@3*N$l<I4{D|4Pnto!v8wDV2hzjhSAD+>;HV?3o779+7#7+$uS7(k1fGzF}A8=c|
z*Su>4dDOfGqOT}1<(RQac7M#(wSdHZ#Vlemi(8n$K>K`T>GrD=MwZQrd~#9$<BG(h
z{xTC|E_wzAYbMi7rfbzf>i2aX#k(5&r?1jBz0a;<+f%YqV$i&ON`>L!Uw~nG@AM+?
z4Jo0?_C?;6P&GDz{xXI;5e#B#k~GwfCjLHk34RgGxQ)kw-~}*qbdc=FJ(XMt;#rq)
zsCwX5Ms9}#+H*#lSC-cSU9_2#mYdq(XAr0(GvMhogA=40i#FM9vl3v|Az7Q*sn&iC
zZaRTO{WazudFj@T4Q?iZLwz;;bi;i$(lg?BI!f%P(l)b=rqpM|`F})mOt2Z&h7DNP
znE=RUyG5Wi$6mf%b}GQHTYMM|r=DtNRUQ*j6cdp)t=N9g=N}wQ6r><3om`rhpJ|%<
z-L;041!qhua?(4Rfj0^wi2EUgYQFN=c8BS-%b?V!hP0V1S884>)_&g?_dKa0sULVA
zi1WhMSR)u$iHjmxVoqz{8*Da>)bD;9%dujO{CKk*(BUwWb2<C1lHYeH-%TJG1n){&
z)CG>vV4?{($@jxwC}?njp)OoxDeb~=7e(?JoG#4>@4BJ?jqq%`Ld1yEx>&y|a|$gu
z0Yv{+QBgU+IC|aBpN~T=zf^c+8QH$Zjd7NVNiIfVf@LH_>ks6}jz*rx*TO+v$|pML
zu|4qc+9eF^yL2zMFf+Thlnuk|&%K}mOKf-8^_=OP!;E<l)+NaPY~jBMONng>hJb;!
zg@%w8_eCL45LHzx@#Hpac~d_3W!%GlLqg==ng8b55TYZ2=v$MXk>dyPCONDB42>OI
z`ZrCo76ckC9Rk^KZyQ1kBy?GcZ`Ghh?s;P0?>OvI!?dB)U%c%vd;i+6#Q(<FzlJx4
zadJDQXf1FX?p;>`+HY`X$sA`4IH<k+_aYLYQ!?B)E}bRAYlybr$kED8FK-kHFew>k
zMK?HS{uSvTH_wu}Yv|;#QT0!c{=X+nE%*D^ynd1zB|3fM{8=&%FLZx~cMMDIH`26n
z-<BJS1W=7P9~zYC^pC4&$;6%e0q3c}Z^-MgQKXeC#`7yoD^GQPLj{q5zkL7l_(k$O
z?*CB)HETVdzvW++`ez|FNe?TpI776c79}=9hP4^xrUT=Z4jU6+(o!w`eBE?Bhx)3e
z+r)WW*1k>V%x6<cO!|Lj`RNYn<jd_;DdtNFJ;=Bcnx)1c5%ejZ?@j{GoBR9;JPybr
z!R$0uzXoTWYeRj7(&l2ZtP4u1`UD3s=B^rYe_^?nN5<R!X0qVr-W63*2=bbN=HLWw
zelahwAlHRClo=|^`Z43Tn#(8+ni~JFR3O|$eScz$zyb0LDC_?q-wuzbE7BcPBCwDJ
zIkaL&&=@_LL<L>jf}ZvBGH;U$!7d^k%J5Mif4SU;yrb%nAXd_{5tj~e+2~@affVFi
zIcm?Os7~Oeakv?Tsghh*L0_5iY{H<*B3@S$UrrCoc!tdW`rBdW@3Hp^6V@5p)9!&!
z3I^6`2+AL?%x_$%`PftG5k!0K<O_}qpb3dEzzUC%2kyI{jj8@nXMc+$-KVm2`9s<K
zj<igaPGSsOmvczWs=2@Cc&u%BD}<?q?Cs_fZRg@GxDRO}B`Hps9n1Bvm~eR#mnTPK
zEQ=Oh{O@X)E{%Ek%PuHI7RavOJIqqT3(qNDCqA>b6{^;HoyL`VjjOb@(CA3}k=?ba
zQ9Gqj!Nm1KPm8PR_*$Bij1}7@M@DeKe#`GC*H)Gu9a+ALyoC3<c`Wn^_VRy2N|D&~
zLpII*CA4oIu^#??PNEH?-Wk?#AoQ+xZ^)|{Pml<e^-yBOa5T|+Xu1}fYl~IJt#P>U
z8n6v*-zFlf6taVg7o2ZV*l;@E&31v#x-zd6etfLd^HF{*`2+h_y=V~<-P7&g{|49U
zTK=f)X_ZO*8*sGFKCk>w!Q2Y>VS?_z4?PnKRya304!gXIMnyMSOBm8!Uf7iAhrV1n
z;p<YX9h0fhgOIl13SroumVW|MSMiR}OE3N~OKy0|=a&B))$IFj_sgKUY^l*4d8v!I
zY{~Wi0YaZ!iuaqDmNHi648knqy)^M2{9S)12hHQ9H6J+fuL*w6DSp?;<d^Ym*x*mn
zWk9?4$ab_AGeuw{3uzaF)`R>nX@f0YWGH!_;JI}=^63TjjdoS*mU->SqAY*<p+exg
z0-13^w{iVc=<8!GdSnmb{Lp*Ay72ceb_6MTCEZa&vCOrJE|xYLY-nB0e+3p918nk5
z2KjrVegwJdLS|=i>ZR4MVuhQlAU0gZ<@vs14{y>MP@n8*h6C&SOqVp9xQvyx(Mc;K
zPmY4u=lFGN)#O`eqCvmF@m)1?pgVZBf+W3fe17l#TSE4bf3_X{yQhw<T@289Z`GYE
z;2mFXXXi84qK<Hk19<iOgG!+(72y=f@bvcBSuv_pXAnVzIr+_F8OE0Er+LO53_Hh|
zU^#hC-4sax$T?X8$?j1oJ*(o^6u0KgID{lg0Osb{J+^1lqf>zH3^=xQ@0J%Gcjkqb
zJud`lwpxB%VA#s|A5jxEW;stnZsn@*0#b(<_sXq5?^}p92Hrsl4m7%4%tc*C6z^g{
zTak14Nci_9u;Ji|&Vv)#&qv#7`x`WC8OJXXJ43zmGu_5YZr%YS>{iN(7Z;=25*EJ+
zXx#E)(k_A7sG7f(${jw>I>gPpg5Nyx7hknRs`$a74}y7)hv&aFh9wMg@lMq=Tdf|r
z&7YY2$4h@(q*bI}jOt17Zhg^nhyC8N_k~zZDXWjm40M@4sAAfD)Lig{8t`~19Rx3A
zxR&W^>V3^}vUcU`56`ti#v#?c-jx|MxyECbt~f}g94tN={t|UEHj%d!vU#mNedVqq
ztR=Dbc-}LFhVp!IQ)5Iv52U&`8cz6!{Nu=ySj^MVd90!m-WXge$gBrwYLT8?Tr&fL
z>~J2*kRV*VK_<H0r6;|(*b{D=nPEx#^+N5(kGT$rf9o8o=gGFy7K3LyCyOK5-3p~A
zRs5>r*31|ml)q5Fqb2av;6kd#JEM<93_R)g|09aYc3H#}WYy81Uguu0?`oR5dVN-K
z7H;Li<p&9uusP-CcUX;7I3Z|EKSyd=WyReU^>J{-^-rS(>5F?XyM(hcImrcJzAj%0
z>1^jkF=VI9Gn~LIJ_DcL#3)3)cYf4`$<|zU;rnHo)Rjti+xjDc@T4xCrGiF`d-kKH
z;%($!9QuJfPs~u2b#BM}cWPzQ9<@>#U}|ZjtQfB|6TG@*(J~PoGRD8AUHVQk_t~O<
z{|Q`ClXNu)l;qdw<0&yb)Y~>ACCP?%M9sVBfUG-iwT<{*kylP|xe#E$9ANl1V^qX~
zv#FUd(qGV4oS6qkyIh4ntXx+OjhpP}3r{PF=tutJrP$*T0X=>TCflo@+f=1m&ZDm_
z&)>=cnRggiB=hu|Y7SlD&F0n-1LV94Xsq{?m>lYDpD~l1WB1wq>Os6)F(5hoZt#!9
zLIjJvZP}2B#Nh9fwgc>OjNf_*S9yi{DgxzCGQE7|74eZ_@{yHac^$o{vgL7C<=;4`
za0a=rf9gi!;<yXX#(@iAw|M}&3~&|1?crBzyu*nmY<;3?-xJ@+9dkXDYo|+|5e;=8
zv=Ni6XyUxO3g@_<%f-$WcE5Gd2OTABk*86L%#7NN9$UXm772gZwLz`-m}!;@yxJ(?
zWOZ+AZ;zeIPkG%TanLB~IMUbhPeo5$pDjHJeWo~|YZk$?&vS05yMXrr=G5hONgu8I
zLO#CU)FY~8xPxVU9KFlABNnc}7QH>a&3i%!^5m-&nbxZHx$e()JR^DC(RQT5(x_c{
zS~T_4Hu2V~5IT8{$P4$}SaiL>Eo0Zjo;Md&NAFrTzxQwf&OQ$;%5`=M<;6YfK&s5<
zE&{eo=|^HQ+@wZcoGOl>Kg-+Nx{4BuBNbCHj7^Fh5A!eIo9w4QgUYe)n@L|e_9n=#
zAK=)#18qFmYOh6tw#025GBezwg3j2r3Og+3h<Xis9Fcm}!l8rEvs*$JJl}v~R!g3?
zxtP%j3@ABBmkH9OuNE}08)ZcI`|6qhKazp`pp)3O6Y$yzViJ9Fvt<}HS(>X`yKBB0
zW^#u|l@b>Yo?<vOkND_&f;sqf%3p818yV@FftL(a_$J7O!elb=&LQ~y)tVYe;o<l_
z!e_r@;?jU=#)EzlHS=D+f$I(|U_rYyhs1_NeJYu=)N>%;pkkiEH*m#4x=;|1w)(1p
zT|a|4X7%OMkf&xg*Z*Tx;^O6jOFiE|)^*+&q+a#(-%`E(j^u&grF1fV+7rhda_*u0
zSxN__tb5l*{*`KwR(007l5LpyABmis4t^7MzjVK2sq(73=lHu?cm}rmDrEaWt|!<q
zu_DYyd=!e{lN=EdpDqbdtt%F2Z6RqF)dTbCddH7pO(~&LQX7q)M@J0>>x%LWCtQt7
z+<3HJ=B#fqg?{?v4;cYVyT{d=j6&ZkU-o7OvDz+rgw0f&+`Wt4R@XUa$tr)Cls6!e
zoJRv_F|*4PUo%6gD_DNRFpmR<n@k@AUn+4s&3wt4vHvE>CM{}nko~oKcsYH4Kk;>b
z>W4iocBamry!@csUVcnMB&ON10(n}u1c82BoG);;UGm)t{bISovl>yVH1x?%04Daz
z$ehMY;0>TrcuK{#K2g4+>%U8~ep-qJUgpq*Bk}&f<v!*`^7p>eUUE71fCoN@*Bb1Z
zg3&1i%MOXdB9iRu6<vC-ea8h+*OO9#@ugD=&${kE%lkdjGDw}0T(P82l&y#WOl+5t
zIgDZ8jUc0+q+irih-^h5U}CFmmczIM>>6Z*OP*YU$QuANNlTGIgjbvLw}2^M7P%Yt
zzMOpM00SlnW!ap@V_?@%Bkh!mb$xO9ijx1743ihMr5~8;`A)3+OFaQ^v)g!vty6Dx
zo7Y4jcbnpE3MQH)1Xv6;deh!MD7M$)|F<e$lJ5i>1nIZq#)}_5VH5YSb5&5`2$#s~
z=v^wTT2wn(4<0G$wf*|pcrsKa3BH81YH-v~f>|6^Es}+NoB7JI;v1n!LQXU&kF4fZ
zi&~i1id}bd93@(mk!Hjxsv76fWk-&(lbLyt`$U%?C@^O@lNV2_`}k`5cgpOQz?Fs5
z!GXGz)GL>u5t)#~ss&RvQ_e(R)C!gnFLgB~Uzc}fo9W$?L(3$?@Z_R_H*$uDF&o^4
zRpR98`blX*@ajF(_*Wh$PTtOdVTU+B^Jj?`PKog;7?ZZ9o9*_gJ~Ah^tfi<uulYv&
zVMWTwC>D<UoOj@s%&(zyVP<uqfjSVF(*MRo#2$2chDW)}(#AcNneqEGQ0Fv{FptE7
z#jsoI?(DZt3F%txztpxG?HadK?CiI8iGNX7BluO5GEpQyG2Sme@O~djPbq;oSGTrm
zZBMt<x!G^c690wjc98O9DI@=ktZTYxw9jxE#cMbm{?)2B^qnc?wQ2YXPwoEp7jKK5
zYM43j@JW=A<LnA^bL+^pOsQe8#LUKV1{aOjp2hY9E@^QyM|yPUQ+mK$&o*w^iR4``
zpW{Fu>)8;?GVH1gbg9n_qCuhd3}8>`r{<I^<--O!lN(~WH<z72n@>Caj?4TOXE}As
zb9Z?cy@!_?iS^Bk@JX%(>Vf@III;BaEpAKCaCfWaKhG`^ENDC$KI3fcfPfI!ohl(j
zM9&+}r&vpm@ak&eI^vXj_zsWd(z=zRJv~+(=HIhdIJNb8JK1b=v0)Zkx&Rc+<M8O*
zdjY%@<?=4Od;D^V<9+eyau%(jC$8rVMgP~-e%6J1iRYpdFwfdw+$$cyC}Mocrzq58
zzig^byl^w*S`Re#U{&8~*C-mt=57nL1sp{r?`MJ{?Lsuux~DF8Iqrx@*Rq5SeRVr$
zE4rWEJ*CxS-JJV0X8&E)u9Q&8opE*RaSjIwklCTm%H<M=`$Ew!ELsCkEY6LIyvyir
z`jg69+xPoai^Mi13m7Gd2uZ3&3&DzPk+tiR1j}p<$+2zBwQRMPQGc@hf?CTM2Z5$N
zl^vL1=hX%}ek{7qDT4B7%iIDhA}L}Z&H|cs1mSmit&|b=(6kJI@XCC`$+z~Sn9GzF
znBKl4OlzO#1hM$eP}UU{snwMN9<)z8IM*L09ih-V1YO_KuCA63Qg*CP8r4i3O-LF|
zkY|kSp>Wr;4I&h8=SRL%cmy1^8P|zC<o}}Ad^tL`c$!*$Abbw3WNMEue3Y7_@Ub?d
znI#fWe65buyXr{lU3UvjUGt|cPt>8y`?84Dy8T=mRcXQFGz-4im%e5{VV@`8;L>WH
z9^L;6>ZIdsTrTh_F#t8W#gW&^fThUrrjTL#zlIT?>l6u(mix1Y$LW-cVzhp?!Zd8b
zwPTVPK^aiVNYFZvK$+!@pLD8(h*<x<Cy1=uWa`&>{|lOq#}q*mC#c0C#sy*)At#&n
z*|vYjp8b&~i@0s>XHzHqgsDWkHzoaLFqiHeAU52896m-gy|LmXBe&b+l($GQ%x8ly
z?Aru+K*c95?V#esC6L((h^@W{L72@9#@PaKwnsy+pb?4)FD*9wY<>f&Z}K<;f|zLy
zMEByuQS3Dm9f^^L&p!9UxfacMTcoq+IEHXU1m+W#cvR|i9GZg{O$l8S&O6Wy2koEF
zoFqXjZ0a>#Yo!s@$+M`t8!15)?V8F3!*0OYF$p6d?+zd=XgdfZp1;s)ebm0&xn)%=
zyXTe6XHz={Z4(duyw|=_3vF$lz{CW#jU%9es&#>3crWl^?Lue?iItYPN&Q@gx5FA1
zYBx+XC;h}c55OE~CiuZ=ct~IGZi20kKJMZ~Ky&AC#?%BwU$*yasAbs1HQP!Lq<-o4
z{Hz=WG<jSS(A+dETP6BF@XTHL#!=C`SaegJ#5K?BSk7|d(<81bs2iZGF0hwv_~~jd
zD!Ze53KE!ai_N7)RPP1IB?M1oO#rKoJ1!T`awB@X@L!y9*8QM~IWm4WbV^knA-9$l
z0&$W^jM3bHZPk4cO>jfVnZrDZtxkF02cz>sngW?LCDxK@>F!NLym4#{t(^J}tIn8l
z?W)cgPp**E!E%PQ1sZ9y4KH%vl^1Eii`(TZ*7vz7n7B=uHeoAgi4)pW6;N*19&YSh
zV9ynK2ok<4`7J&PE(s&GPr1~y6}H(dXU%rZM{ZuN!C#yjk9^6ikf1sl+8%K&!F3M4
zWy2&}+eH!0Td(mrDZn|+MKnY5Dq8mB+~ggr0aZj5k7}41_JNzcNp0tTW9&c`q^Yac
z$*uNn)t-hE6gJ7V8q=I_=@+0($^65n1{YL98E#t20*$-Qmm;RgeM#unFBS<^kTRPj
zY;MD`mTUgn93~$vK^l)Sne&z#kQc38drOO&JF>Xy(aPCeN77K-(}3-0z^1?Xy}*YA
z&b5Ol9oafNK5!4XEiSl^;p?{GPV$Wn&2U~E{sJ&j@jWcKr_$ms>6mfSqR!`V7Gt@j
zz!DkZhiYwFyjq`cGaY<3DBMB8W_OJ3Zg7ui%0%*$mrf?Zj;hdDl>T~OyCGK%amNv|
zgr132(80Dux}UC(Qe@?Kyw1N>#-WSoE%JXdawV5dFmaeJBe=K*gTKKtbU81nhBiZu
zG1>u1RMJhOGf|T~2SuLh-bHG5UqZ%pXJfj)es<n25SF?9#c1l>45sb|GY)-zSUs$Y
z1XNyP>2UHVO+zuildZ-jNqRDaIK&w9yh2X0_u*ri_~ep4{~v9=kmF#PZXDzK?H1h<
z!@@?;67y=d;zO=P-|9KFlon52*;XhwPDQrkL}$PnW8GAFNbNR}C1)4xwoCR#fD0|K
z$-Oa7{d@1KRUO^l$VRJ%M%Gtgl5Iu=SgJ+JRNr=gFVn3Q91~FP_Cx+*(k5rNdN6@>
z6>3x)xO`UFWiD;bjo+gqVnC}&<L=d{=Vi8<*3kMj`gl&~&T7(OYi<&CiFJ$9XgD(a
zfw0PHJ2kMl#jZ|uNa<v!q1!cxqrTf>x%l>YwraKccy^HMkSt^^_n!__TY^Pn*$)S*
zt#DG1>HtbfRLh33$xnv4h_xIvU?$d1>N@+s!wHP-la%~X1bB657c4FW1O?^Thlu1V
zqenvs+T>sJGMv>el!t^zSekWZ!c+2joH|fnwmfDs1-aNnAD+X5>}ui)k0O<x#-tMX
zWnL?2(;%HNjsD)_Q=#X5Ebf*<IMwobb=+2)Cb=<e$cI>Sf4W>vG*WWilHft6qsZp!
z{v4B7|E>M?k3sIyvPNRVY^?`<bGGH5Vxwd_YV0p=t*ltcHKvQPAoEiaYrxp`b7biS
zCSuF++Xz)y$<m0Ii@<^w3~cGlx}Y((zUR-jpc6F0h0$qGa2#160J2$#G%06wH3c<a
zx5#Gq4^igjG?R2!F$e4v=emzlP?2o#aO8&xKk3ky7LhN&nSO*DfIV*lkv$yR4vVgI
z@*xtf!qdrI-!?(gz;<$^kk4cP$dwVyaqqf5vy&}iMm}euXJ*QeM9c{fA6rG{gCed|
zvU<?I`$RjNr1suC<^XXobxS00JzT#$gnoeDEaJ7oH&X2S=#$E|lLEK(QZdE$yt}5}
zt3<01c~cui`jp?ls5-0t<yO+^cT0U&jcRiG(+%5v1x){k<N=?lLVtRS?<&~p@2WHQ
z4N|lkz*y7F`L`(xf05irwnc{PVq}I~9jB2jf&=+tczTzbZK;=vUt7ezDa0zd%}Oy7
zi}s~h)#MKl|8sKBJDh$Bu|hVtQcS=)`A`IF@;?(BTO+Rh*JP<5#lI$hm^juJAv2|m
zCR1CHx!C_M2_?QSs|+yqj~wY=&&{zGHxXXlfUtA;;{9?uT6MP4A##45<m(1(+|6dC
z65n0zJ~`Xg1t8Dcn$Rn6+^D7dew2?sIn^bM56Oe=9_6C9<#f>pB8b$Gyun@jJl<Wo
zEOeio?pny7)VJSt>G1zga9%fg=i9%7R}uW{nQ#AhU@%e=khzgi)D^66`;GWnlU#Vn
zMX{~N2V$YB)csX}zR5k8L;c&<tq;t%wn?X6lo7+GtwC_k5>vatQa2Z#;_WE|MTg+0
zH!4``^CX|i*D@<ZuWx+T6OIXeFrM(<<}&eF*?&aQ5LXIp*vAv1Lw)pw={7zqL8Z!=
z|0m?L!GsFVijDXGE2zjuM=zZzE@Ma=0@zM{zuE%k(-KojSJ6z<O%&Y?t+ba_u*eOz
zBs^QeHJ#Ni5OTSD6#`k6bq19Q*9&=|Nu;LJIOpT~)YV}T@;y)30M6P)@-WBwz^kbv
zYpz3RNqIZqFnkgSn*)C7=1LTSuuR9;nw24P*|<u0C%#6NjZQ0BH;q$_2+vR!8(=Y_
zVN63B_&KJncf|MgccTwAg>VhzL%SK@+o8>P2Ug;|8zFRjs&%;Gk#PzDnV=o#Tu|P9
zRE5Oxu%eC~#U|~l^=-$bQo?!qCBrl5-YYLC3R;X2LI#9YYQ;G`LsZh-WJbwrPTBx~
z8))TVkrw$XQBlV6zJ)XoS3pt-_2fT~6ahQx!0_Ap;t)6TdF_PI?CsJS!g*>B%tA}P
z>1_kVwr1NExhRxhXgIHsf6x2Sfb5dynZ-rhTorfDLImk2WIjqKq%6iRKNV`1<_eW$
z^?;^uCJR*m?1daZ(p4319xe_Uzf$cUKI?n)*GMn`(aa;1pA-t0XJ3WO3xGOBAMnWJ
zR`$m=V|<4zHYgw>;g7s7L~C6W={PeQ+_8ZQIMRvJM|~7e@&kidO;sGKVHR#^kOIrq
zY`XYKmzf-sB+I521q3jFx{YEAzIiqG0V&bBTC`eb%oQu4-)(MeY5OXI^C$`p>qYyq
z_fe8>V;|pJ!LQ3L4x?~#i+S(#pb2nZ{Jz9bBF>{?jA3px(9=s-b|iU1B&B6{e>u*&
zg8P?y#P3uhxT8@n2R;|lnG0{x=|o6u2LV$yoL5eFt2jlT%a63FX}?+D(uU&&qZsq!
zhjrMU4_pSK3&#>|GOt7Ld0MgL&QEKWm*q~)g-~`o7l*N_!O$NODk%12aX%Pb(o5H@
zDS9vV_+&TslDBgXtZ{TJ2hqV@x#&4I+gcseL13O2`Ue5!e`NtViUqM&ICOcT4+Fat
zt#sKJf4m(NE@4YGrgW=&q>`QrCp@qtZzgtWjySxa4Y1helaZM%acNjxMW#0_(}QYW
zc{;ZXv_Ic&VM(pcAkJ>t(G;eF=;H*2#wxDl=YK(`g1CHuo{;&@ccIP>1P6tsnqr8B
zXNYN?<v>k$UgzSXZ~P$|Q2ISowzj3^sEN!@6Ba#1k0zpmDONU$SyPB*BC7S7aD*os
zt$rjIm+!TPuHD&PJnEEGY}xgbRg8R-KX-6YVPY>DYBQ)UoCIPFPj2Bo!^|STYej58
z`n^KfYPoY(t9QO!WQ7h}8*f#3o4)K2urgk)xM*tJTK-Y{s%ORZ2bJ?i%O&e-g94I2
zITp_fZ^M_Mt#2h4C5;m^jCCq*^RPhn#K~Ju2Nwp2+h;4o(Vi&VLDBreHsn~+TA<p{
zP4Jo?>Z7wU>ehy@tiu^=P3pwNWe0u$gCei7RQX5st6<0U)Dpi@cAe}V)v-3d9#xim
z6=Gcs4s5o?Q}Z@}vXAO4Iu+gq>8YWK1=Iq)4L*M{U(LISHfk;T_~0toZUSQ_E@C1L
zc2%j8;JRAva%@g$Le{u8RkGqLtn^l+Dt<=1AAWW=UHwCV#z?B5aBph;fQEP!9eS)J
ze^QVaIr1e#vSBsJJ%rnG@r%T#3s>pNd>_6%Ex@j~{KrLViW@zrsC)dfZE81&u60g&
z7n{%bcMo?zzON8`XIddRy%0mauc{kJIJzu<V*l*XPR6GUr39N4hPg9d+U}YifT`Q0
z^UcPGFt@P#juv%(C~(GZlr<|e&7363tfs)&bB{(SsrU)DcPhHY6?zxcd&W}IL#=v?
zi-V$iN!70Nc$)MirJmY4h?dWWF>e;~FsOZado8%aLAy@8c4;istIiJ_PAGj6hMg}c
z4&V$>xuUDMJ(xj5+ierq!x&4WwDRTC8>L%5{wtV*n?71A?+PCH_^yl>@cTHf3@G`n
zSjJt7p8S*^cQ^V%TqWbwIZK|=IQKg1XZIhlZ;pFE>^ar#Nt^Gw?|;93xsf*Z+_vX_
zSPwc{o|Vo^>el|l9(`KCSuR(pn&nSlduVOl_n(a{dRz3kbOYFQyre|;&3a5(hc7Bn
zXIFYcx=+zAx$f)il*jC{b#bwedq3@Y*?p6iS<;FjtY*0(W+1wUHDcOZ+dH@i!5VRm
zeau_A2N7+@=IPqXFV(edN(-aaac(VMMt)6;fwOX6y5}BTxZL-(Fs6;xFItoJnwTKn
zJr9h#8JpG2$kP4mS{{57muX;Le3FUhg2Xy!cS7%j-;YW?csCPlg!=YG6@^dYJ&O?6
z@yKDV@;tIeZAXbGjj?T?w{h>R#BbeLkZSaCeC^R$i|@KIwf~0=`+0_?HZkXmQD0wv
zI*QQ*b!~fXz2krnE^PMJ-^~{Ggu+}r$L4)#k~;i%8IP<dNUJ_H)uwZzUh)mNtOv4P
zxK^PIt$k8!baPJI>a5U|Cj@13=oNr7@oQ1A$9j2%V`T%0L0@DeNXZ9t?8nLZ9=lkN
zHP4Rp!&r9+su|z~nwMx>AmMS;&&e7ter~~i&aDL&aR?8RDkAMIaMUa<BaYu5Pi~3L
zlLqOQ!qJp%i~XA74$n2Ok2P~!?bw==u7#nF;aQIrPv)(_L(jWB5eGeok@kHyytn|n
zDpJoJI&$+MoJ-;BmaasY@09MA&({SSg|M%pv0FhHpV$b>$R&CxX(XSEj8*oMCXkf3
z6$sQ7Wnq}q*g*DKpvvwyl3nxORK(^nZ;tndP^oq29L|=!m02SlzB?wY5RO}SLrAS9
zb|B{QgUSfG<-yuK3b8RVB+#?J#?UjbAy9*ulcMdZSh|-pC@q{XdpvJFoa?`pIV_Kz
z-_8e4v<2mYq-!aiJ=9z}g(;;l2)ddwY!Zpa!#dVLCuf0Wo7d8z)%~8vGjnB|9!8`E
z0ibDmcxHdZBL`k1!u6~2YO1!?g)MqW$*H@cbD^qUrG+i}$hmS1&WIpU5z^_(3C^xH
z8A2KF22aSTi6iv;ss%!V(mOje7On4i#d_Nr@4gEaSA3rhuUs>)2(g^#takM@?sjwC
zj)a+I<f9)uec9P%U-w8RATX(q@|nm*iOQ-3_4m3L!wr5BgAb{!Rg8k@2=7Y;enQ*t
zKMcMZia(w0vwnZ>ctcOaF+{^AL_<ftpI`kT%*IZnzi)NdK0_(X;dciEzSKuqO#MZA
zJTFD~)70M&I{ZaAp6j=Y5m9`U#r1>qyV-B`N`&8E{k`TzYXgk$&Gw>^)eH7n&jtDI
z)o%`5wpZ^%?S8|DeBYO&=Aw0xnz86<2gicJ%OOREoa<=-&es6W`z6=(onqJ(bV+%<
zKtw7O-M1*6b(=T!oBcLB>(E0mi?i72B*y~eWwGq%YPC(9S7>h<TzunrWAw6$#!Uka
z`eC&qx8K)URoc(JsZlC&8{u^jyjS?oXHhhQene33<9fgOW_)Y`#ToD0K$H^;{VmDy
zj2C(aFP?HdkzXxt>$!7VaZ(QM<V7$V(q)rtN{7k`eHP3}>A>Nx0D+Tv5l*^6>X^zq
ziL0b{E$~iz{Npj+=$09*$U3l`0QKKw=?(@)EaYXXFQv>Kf=Tl%orl{++g=l+doMPw
z+C23t4<@l0;6EGS9egg<6pu(b^j;99P69Th@tyF9dp=IQ3+8aUfVW1vLHvUw#NOwf
z)2%M<l3M><?x|cjCpLuRACl+mlLymw3H0UO?#uo57-b*W7Wzec6gy;QBVlLG6P|lB
zJRCrlQ6`g<Ne2*;wC!)8ThF!Me9(DIl`g8}z4;+;M@<dLp)q^HXyQP~kuN6#AFLD4
z`nvF3uq?VN(|HOE!M-sVQO767L~eb}m)%Fx9k)eCZoPKqO#7$g`NT*&1%`OHK5+N5
zn_g3kRdSNF<toZuW^f9A|K{0<c^+C2;g=y#wi|JN9nc&p!eF0^S03I!HIWw}fiB-t
za`Mj;l|irw`KW2;=+CkgCk23HEALb&=B3lKZc7BkL>eH?oep?^%In6kFXqER8N0cw
z$`vi&w9u7btNMp3W|fR(%Uo%UT}_G|sbK7AyjoDfZj>Hf;j34fQ_9dN@Su{Rk*rX;
z{X-)+P_>B$3y%^LQ2B(TD<tcuT061k205_s=rXY^oZvLDzB(cPh4D__m&qJpx(W8{
zd`JM==6&&&w$`h~nt)`<)P-cfpyl~m@2x%Qy_OudliE!KCzABAJR&iG9nIO>w&%A6
zklNeL0j~25%l9C+S201gvMmcp7(fVmHxKT;b({l?<(5nJ^ZGjPMD)rB%gyR{@$Scg
zJ4J%;v_A+=w@F!(S~(<oS$ReJe=?O`$#TAbmbRpzn+X8pVAWEJ=8y9zto~<H7in+w
z?jud=m8TbPX)VVl{0x28rfz;@QhE20D;4=9K4aSUQkd?g`O>qFcSvzvpnWMEm-TC@
zKNR9_<%?wh*~;bOq011ZkMmSZ0Wks|4*=BrQlm|5Kx3^^?Qb&IZuAMi`IebfIj>t@
z1sP|yPT(;dvA>wDrIgD5SmdmF$&EgyF3_MC^X}Z|FAvU2mxy(7dc5Q`9I?B&ZJo$z
zxW65|2%?76IK7UiYf|&0*ZiGQvCQb574|b(Q8x^Kx4&qsvo_EdCe5OB{Kt(J?k_lP
zQ?&&BZ={k+x9x{z;R=~vyt}xZdK}XDN8e{udW&Ag36E!2$cw%g>(l+z%KLgdd+%6k
zNT`S|95o}{`b<PuS0WHbV_vdDvfp}_C}{ZF;bN>+>@CCJzh#~mIjdB1;|tT7td9?v
zxxX+GTC?mjc1Y|s(s^z?G#$49k7iv&HJVuN%(kxCsG~X9cLB*E8?@?ZHBOlIN0(I3
z-pYN6b;nMBQ5#6hMCy?6M%>yJ7f0Y<5|)(Iac*w1Z`VHDW|XI|3BOwgW}}_$^tHwH
zqh6FP-E|D9Q0%&8*6|y&t$spn$!F8i<Qi*qxivDr*6J)yt%WAhorQaDMh#+^<XSpe
zBY~^B7+5(}kYAOuAk5O?B^tP7x7jr`9iCDTT#MQBX6ZR`z6=|<9+9cPZN$A;ZWaWl
zDqx%5vdjmg4vC(AiSB;(>1P}If8(BKPp<T~lH0BJ{&2T<yE19Xl&xGxJc05o{Bq<+
zXTl34<^mYWs0QXuRHMJ1#Ce}p{)t%V2j?`TAHHh$&6Av28+4UTrM0qUr1ew1!_E?q
zbErKE9KZpykVDfBQ_s4jOqY@qi2Bfi?}x?_u>Ngb_j2QwhSf<=SadTO=Rz~9-#pjn
z>y+M>Ft_asG@TU+HCo-PJUR~jff45SOUcR;OWV%z70qSO5-OT((@B-15yrDi(<#5P
z3<$0|-ypwt#hF%9Dj>FynAz{KNq4^SSthHbxWWO(p0IwLDTGqdY}=tw;d*H7p)?Ug
zjZBavlavyMoU7oyZ6{e}WxfdlEoHukzuep2_tP4C@?mK!hV=rj8QbfNUo*DT7f-I}
z)t`{6U<H6sUM*HX`_=kotjZBvrb(2F2S!QnT{o#(=*@`+9@cS$<OZ6JxSK>iP@{x_
z1#n)fRg)p(-EF!Zu-AF-KR3N-cPJ@ZZ4{3QDw{5h7b=^slVCnj)O5xvJu>Doa#+zG
zo0XOJtT$a>YlYZ2<eIXqw62qbiA#rhezj7YS7V_oIlWHB&#(HD$ak9&5**j%r>Kiy
zDnm=l7q1dGguKYsnBe`_SMdA*(QnQg$wf?7YkW2-Cz{KAqsh1YnYeRuR=)}II&mOV
z=Z|hk26_8sfEvw6Od0Z@C(LVxeFHKo0j)B_;-alGT^69#4XLHeKe)!(9nN1?W?$lY
zQ#eZ338zS(qQ;%HTUgO4D!6@FlGF-~GRT2ukomMJ$mpEBRf1rtlXUnwD##D4o9l2b
z6IgO0gi8@$2}(L#-w0J!Vz-%TeZsC)=B<zgr<~d%USk`r6y4dwvUdSeiUSAc!!T3L
zrGW$PRwC1$leEGB-aHxMdvqS2;!TAhDqJhB<9n%EzP7DuoXqug|I`n7zP8UepHLoa
zVj#h~ynlt7A}ps`O)BCAs*#<`sp?cREE9$HK4MSK@4@>?MGW_z@X39~`xTE-2RQ<~
zBQkaybMjY@1kp~?k*}#b>@_M@I^y=b{<BM|?ll?iH4#0RS60ZxLv{8Caojvv+Ew3P
zQKX;oCcpc1C6!^$$n<t|@vmj(9F?^`pKd2h3Dj#61AdyNR-XJBUiz8X=M!Dr-pm@s
zb6daKQ^fG#ZIfSW)2^lqT61(bvnaP#L)Nz17NJ-gA%DUyzH6<HHc&@1^sTwNthsJw
zeUeXYbz<1lTFIld{R-9R{g{5l)#pXa>-EBufXOR)+-+#SE$Meay0tuYE75X1apPi5
z)+h1Q*0m=!Sw^s!6IM92cc#wncN@+=^K-=ED!XWT1Z|`Nh4r|IEPkX;blaznMX6$I
zmtj13t2=nBoA@KEl{Uc2LE9%k`XHPbk8OBTN7taW?OKiS2`+%*Ja1cz?T~LFTkJmD
zc%P1(+L$8R&Pn+l8i|#!GVP&Q=FfWCY7n#7TR8eW;J$P9^MQgb90MNk$y%)LN)tue
z<AfYQsr8$U$dQN}<MEj-qDIw0R#PzQ)%H=_HN4;pAgj~ysmNrn>_pOQ>&a5^g;Asl
z(M{1(9bh?8OG%u2_qz8CDq8{!<0-aI?CZFm8uTWu`R#7=j2J(p>O$|t*ytG-myf+o
zgac}Q`>1vlYoNy@1gE5d!$MQRT2lQl^u4dZ6y48QeM0ZaZord#6IQ@$6Pf#jJI8`M
zPJ{R~(Z^3h`jNc*J5RZ%ZY=`eZF8=593E^%IHi4UJaluK_+3ckqL8o2g(K}{uZxi=
ztWZMY!-N%4kN73)kPxv?imJ!!=-deI(OZ{wo_b%5HoTrA@|(~vSxHjutp9Sp$=Plo
zXN7do^#0|sO-a0Em25j~(xS4k@S0_8F+Zh)FZfb>xb7t@meOnG-swiuaru!dP3S8)
zV|EIU4D=5W@7J{p)%XtXx#NlIl@pc8X7`#%-v-3&C5dpr#`Ljsne=hk?lltdB_$b?
zvSfMa<A!J;9T0;o;M@CFPflznCZQWaXLJWPnyS=Ly0-ZnL>)*AGY+SUmb5|WysFjq
z{R9B#Uk{I9iS+C|R`|Lv-+-9zQ4PJr&KB8BDb>Fd%)6Ah^JVww3c7Q@CE3=O{qE|j
zLP(pf%~onA3Xyr-T~Fxmb6foeIl{|%$q8TD>;DLq`!1J4*nO;6Aq0S|hK+7d`y~_4
z!pTtzSfrCYxeAa^#58hJCb*hp;-gTu#U;HV#l=KKU<o@mAz56<MHsW7k2nq(8j>{M
zm7bU+=T9!q%$}Z%P`X2?h}yTNf#xiIKCo`K8Kl(uo>UTz8q-ifta@W+BT%|6GZom@
zn&}2?Ys%F8J2Ym>0;NR*7b}T`Nw>g`<=`nUY{M+Da49&)t8vo8EuHv~S5k25QXl!`
zOXT|rS;z`jJNB$lbE0B?$78p94YACd%SyH8^_l)drxw_E+~|UzpFaL@s%1twG*#Eo
z-}eKAB;t&<+MIa8Tq{3#irM?aQ8xG9N;?UIVE2}x$>}>)>h~dw<exzb)doV>-s!Bq
z7?WQ1*J=HO@!r=zE=fI6pczE}A<ce2_Vk)8DJ1#eHav`h#tMFF%I8A>yEn%Vbr&+@
z);-7ZnIrkx7yWsU+MsDH2PrfbN;iXj4efHT6`rGp_ZnIbakvOz$I{|fOUt1pYA*~j
zX%QBc*h%9A-!50=Ye(Ssrj~@Q4>x^K-gT<?mtjq7dUdLu5-A>@x0mK0cePy!-ObRd
zbI{C)7gOo!&giyu!$~hr;vaV|7KaC9cDW0K<}?$aP1Bn5`Owh9LN40|c*YZ65AQb;
zkKLjxH<p;b7vxEq>xQZ8=2Y=^8L@G1<Zq2I+Kw~wuE(V|&8W_9-VzUK$?mkAvo6Ao
z&fcpY8YQ|V0Nh$!W<9b4K_v?%E>u;hnuh1`aR+vZKHG1rSYa0Wk-X>P9=rsUyLAV0
zEW>T^5)_m4xSp4JdN-;b@0AqxskOn+!-_??Z@Wx9@cqKzz>-tQ{Sv04^(*RRhYB_0
z35lxN7~{D*S2h!mo(c~$2yJEa(|<=!hZs?h%=iVLPM}FAcCuAYyyM3S^(F|qiN&V`
z`o)yBuo&0IKH?Oc3CmMMwyvc@g^w9g3s`x}K%KK_BX1oCv{7)QSBQ7sS+sdzp2MOx
z-t$N?v0+z8YANbZNQ{Hs@w+Ef!fByCQ}#9N(s0X9_!g!)-0~+3;3a9K(2qR)=f{Dl
zjYZ4)ZXk$UZE`S?<OZKQ6<AKm=k>pL7Hv@G5&oFa;1?2tvRMfMc9sU;<3vCu2WwMm
zlHNX*gDvh{^pZ)bLF9An4M3!~q$q?j)(eo9$*>Q1Pg;-rN~isFvETs${0<rQ_KE0j
zG_$v~lg;lkv2XLbrY3zTDoBPDx)A?1QMS4z)x19SD|6~sxFk#*S8&D9$B2};F0Y|`
zXqaXWCaR>ssN+`i2)Ge-@$$Wt+E4G^^loRd)g8+K5xf#DVV6Gphk)#Ye{A_loV9dq
ztY%-D+@dxg@zc#sxpQ-4bWBs9bTVY;6l#)!+MsuFB}2Rx$85N*wjj%{*u?=;A6(}W
zPQLK7W9dOJOa;rDUl>BR>nfIzkfj|Gezcn~a&$`!c78~hJor~k?eaU@7i-M#4^+)6
zKU3#(ChuA%?`#f;ZM02ch<q*)SF&wibXwkrop&S7I?t%s6)L2UnN}{Da7QaVs69W#
z|7bUE$ICTTk4|rD?b4mymv0Xql^>Kj=d!ps*W9=NO9&;9+Uh~Zk4bhPepH8Ug$hJ{
zBQDiHL5yt(l(c5am3+=($lnq@0wyq>3?-2VS*T)j-|74i%Ok&-k(`@iPUj~~x_^Xb
z)@+8uwDHI%_f>kBPBIJF7nl-NbkD5qcJoo!hn!^3)q=6@vnNls9-l!zxuujePW{Ij
z8GAvW%v?>(g#_v+a6Wv{HvMBEF$Ieref;5?2?e@6>>PH3)jjOj_8p{lQi|E|dw|<E
zjZ7Q<!2o>yLg=XTVH$i*wZ(U^FG&};$r4}NCS1RHd)G(w4_B1P!0Nc&!c`{Q*vM|m
z@{^8|(}}71g}P%-iHrHg%9uLm3jG`MYQV>P#?Y`#n=Vb^C2`UK<OF2|w|N?JbwNXv
zUmY<y`sM5NWn<S9Y&olZ#SqRjvXi8kpDO*$#KoZ?z(lMJ;57=CgdD4{z?LX8MM4%3
z)yn3Pu^`O4EP=ogN=`QM7$FBYebg#oJ<_YC#ncCcR+N>-hn53A3r}9c5+0>+Uav~J
z;APn8RVw66F)j_*2yJWEslXPs=atr=%c<e7NJ&lVhD>cu>7NXGJix%3cOt;%2N+lj
z8%~W;8DYhm*ieF6m^=iK0G~2Sb(Jp9_z6?xt3?(%6;v3m{7cI#$=G#mE2P4KG~_7f
zmpQNWSAu-Q0d<I+wh-@xuYr)Ms}UEre$qM5LT6){Q+^&C3;eTq18dzMB@@L0pjOtp
zW4l;FSV|rOd(cS*BB%T;7yumKe<a?emn3Y2x-_vbCa$2Jq-%&8%SLI9YRqaU@&3v2
zP6QhynU3$5v2q!sz^-9N)XTFz%E))>X!Ba4yh5`897tdBT%$4d{|kun^`dN>-YfDO
zp%x<rv1sh`hNf#L+d*L-IpJrM$gWG_e%?603^s*m=<VZ4cCpYaNj8^RJ@A*Kv_=|X
zz4}^puy>akcbp#y>3i_=ZVKw-wn&`5N-(+mze8(kZE9^#BEox!o8*9RiGG7p@SmXN
zb|hrEyW+KWQi^(H1twY~Vg+i7TLYsw+|w&z`M_6^%Ew78Vwl#8ol@+Ktt6X`Q*iqt
zKX-hm=WDMOAL;-B>APweNB9>XlFTqO2Rb2nR~3Fxh?*x*J}S?e-6B=gRwgFKfAI$P
zRvJl*_k^(M40s#Fq>ALEu`oua^jiI#R9(q%E;hs*@qytYN^T<sCC9UhyKWbNls$Tn
zqv5pKmST^*{YQi^FoJgU_Qk-Yd$fTGp0t4}Yv;C;^DZs2QEHZ7e+ARV(g4MCzLHGA
zieg-x*0W(}IJDs-_5SP}x@a{&5CZI_h7gZT=+a(#A6dG){t**2#Eksxf5BQuv4Csz
zs=ouFBcr^V4&QQBypvswwK&^3k*UF4j3F`U+PNV-+HS!!AO<BUS=yopg5TMG(g|O3
zJP3TN6?GxQa@0iMwC=~GINNMSbK}sDDRIoPPE+IDcGLWhC4Gk)uge>+vy9-g-7w@9
za>8P5?W=q;7D{c%!%o$UO-Cy{<Z2p<E#!@+9|Jh+&L+&RgOQzI?V2QUjPln$!IH(}
zNJ%zyB(UztvHw59-zuomjFzt7AYZ1=aPzE-?X#<wbw4G9kbmRQ0gSxyXX4PtJ4GeG
zw_9)B-&OjxO#h^35%h<o@s<ZnceJQa<7)qnRIQg$1%tb0=UC39v7AxiQF15)sh|CH
z>b3p{0Z)f(>E@?Yiw&w(*WUBLd|f2e^wPp$v`t;z&^dV6>*a@YEx>$A-k$9CUM@Dc
z8ao9Msjebcq1(0(^NZY)oIt!ERNkEt?zTS(7-RT6a7(N6)<(Q(oBY*rKMUQx{Hb;`
zm5**alBB0RgHbc{d8hqm;8R(!n?ftv?`U?PK0i5n%~}6?ktor5dix`=?)<eLhG4FY
zk0Q-arRSj=!SQCF>kl4gyqX}m(4Z6sB6Ekqth~eNfaGBS{l)7yU*6uk<=IgLm{aDQ
zAiZ^hK(iFNhX@#E$mv#jy~QFY`Z2nvA=guq-WZ;q%9X0j{bIKP;Vt=c9d~zB1Cd{m
zE1>IA>T}}X3e=8&h7)|(<2GZ9lgmK&JbD6a+RO}m<L{Q)zdO5H_%`q?!u&Ii&jndy
zcfe>~xbVSG@*~g5!M5D2@K??Ki_JZB(-%6PNNzrdR_(d%>*q}krGF;(>seY5eMZ5G
zzrj`B9k-U1C@#ZHUIOy}fxda=-opyHO6sB+)8%ZrilCiN!H`G!J#wZz=cZC6qt_3+
zmq+w$=<cNhXm$G@DKk1>94e4*`XgiHqJ=UL^AC>qjQ%nAMy}o}VDpdV9AV6hu^C|_
zKeP=#$Mf+vJK;_Nj<&WR6jT0ij;&;%F^1*$3$@+u?|LYH%K^cs7hi<b{V~;b_L6x7
z+v4+}WqGqR2~RInogt?$pEjd)dm<EeUVrCG*k$b3?H&HGbJ(Y+!_LmlBy-d;26lT+
zp9U_waVq{}>0^-h?_IHm-mJqP%%y1XPh!rro-wI=&hhpJi@}ErM&joLSWi<H_5Shl
zVZLPR2inixsg%9@!l#7OJ_@y-Hdqw9IP%A}sE0Jp)yRLSJ#<Urq5h@3wHh(E3pxMt
zqTUq&>MMF~;{CaTYPF_`SIw+$${Y_Zlb-6)ZzxNN{SmWsMl7m#=XTR`Ql}FQhI+4F
z%^>&RpT%)1HvV#kolk9j>y+8No8XrCwLRAVL)=?H)v=^&ph>Xc!5u<yclY4#?(Pl=
z?h@SH-Q5WUcXxM(5Zq<IO_DQn&dj}Y@63H~y|w<;{ngi1y_??b>R-D;T*H{cqY6T4
z+EttodOMsFUm@utwt&XyLbbqDw3m1>qZf2IB)*P1#e9S{8jNe)6w|P!C~rhjUJj<P
z>OpDP3|0?=Hpn`oQXwta441d<D{9<QShgkq!HV)ZHJC%H2dCgU<tSZ)-pVVi5|X(K
zbsj3Ci}@Duo6m72$fr)~d01B+8aLRrcJ6t2h;{W_I5?=Zvv(IJw~%oBFpnR<_I6g-
z2;ee3g9~q<r}|8t`<=n0`rAjo+H2xLpl%neY$vMpft6dQ*YH*l@pWi~GKr@Hq2FL<
zeGh&5TAz8FxBL?QBJ0)Z8-0XzFd-IXUl%Ya_*gGAu?^Ja0Q%DooCDd9hE;N}$v+bD
znxn{-$)ObU!^%n)4YZ(62e8Yab$Y>M0dMX2+hksO6Y7us8oFZU@k_kwCJ@Je|93l?
zNOOkYhiuJc8DB%WZ<@s0KZ0`C%&MTcboBpL4ikV+3llJuGx!!Aa;%FK9aeuG3>_Xx
z=Yxb#f)2fecftmW6H0z3V<H^Gdqgc?XIebeSI-44upv5hl-@VGWR$);m553m5R=)Z
z0Zf&sr$Rdfx9GDSB&SI&rKN$el?cooM)MzfN!61);g;5+|8i?zohY12?O@GAJZ!vj
zgI??4yT$eJ!rOQ!&?RkyuD5P{3#PZBoK)D|fp7~O-bu#_N3xEb8o*$KI?BhHi2r(&
z|AU5Chz(?^PR?NsKmCjlltutWB$R0++}yS#5eR(|c!e)W^?NM4_h{$u@u1qNR>bI*
zL4o&IxmmJn8$}*bQK_EOe9&8?-`7p1;!gdo;QAXD<e{AWlyz^!(~m_Gj4M7%GT_`v
zBEg<424N2VrT!V)Bkwq={my8#KFH!B8ynWMlC*YG(tNoXUO9&d(<+B%r~V8<H1L5R
zE6LIX`bpQT(9B7Rk(RUXoEN?OxFfqs_w5kBE;>vg0xe>Cpe&~`V+BUnIW%qj63uzC
zEv0n)KtR~?D&ca#2xgit^pLvhvxYwXWBYjoCEn(<3EjXcQUkm_M?jy)?x)g1gD+d(
z2$pZK#@Ghk`x@O-mq?sOMXj_^rP0exY6BD`QTUS+Ek*XO6(uV-lJn#7eV39pZTZ6=
zhvx-S8JST&>D%v82_)N+QqxJNvrr>ag;8|Z^u{Ht_9`Y9^}=^cZJ8nHY7i_Yngwa*
zFK!CU<H*h+_u6rtl@xIgg{fE#KS@_F`|ac}uSqEEkmd$_N5jWoGwbzpD@a1MlW{{o
zZ!JVT_cg&lq*}a<=zaFIXZ-Z+$oMFnbAuNyBpfa@1lSSI!4@X)o^2C3>Knf|QX}cA
zjEEOQewrWb>Lt&nS4ZtqvZO0-&r|BcBri5<Isd{sQpF(-Tbj<XK&h`fg*$s$MJ!-+
z7m+6zZ^vnE!&!zcP0=@HhW@@az<7f#9-{MoJVe*K_`ptDbhyLMw*(u`=sjCGx-dh)
z=_Fp;@8y2eSsVyk?3gV|uT0ikn8K+icg63b7rB}QiktA0Ey|Fa$r@@K9#zO`YG)PK
z%T(pbl;z390Y$a2v%0XIGPj}RzmQUjT%eFblMQ|hu8z#6{3|^9fg<kD$5p@?>q~CY
zw>513k*W~d`2A}u-&i!p;95C*wIZUjMUU!Ob~{SPT*ZgdLLnTsNcPEM9CFL)h}rjH
z5|ERFNPK*?4RDv4UZRV>AGfPAg;mPmTk@goBxQ;%D<>@}?&M{fo$JX+V&Ex+JRI6;
zvob~&_zGPlSE!uGvQmiqjCK&k$K<h)3c5JD=PBO6*l=DsZVQ@mmaKy0O=6bDBow8T
zPD?5s5>q(F%$%|$g4O79eD_MLg#OfpI}iQP4b_D)(PN{;X~{~`3469F>$0iT1r|>g
zNvMV?C%{_g9k<vnW~r0MTq%d8QUqH%4X$JcQgTLD_`wCEgudeCF)_Y74XJbpO5x}e
z$KD~9rjsXCDMzAGgjD)p(P7ejNY$PUyCX>rUh$L-KC`?$1%MUinRg?Sfq63yTJf9q
zN^YaUW2$Ft6x_zJccI_VyUr|We5M)XebVU+BaK|XB;o4i2Nq_aCmrDbYN1{^X}Oz-
zoH)P1ta^NzS2#zbvLT4R2;478;<k;rbMMNfPod`};2P!&Co!pB=HpI^kI_$^v@RMO
zKynQW!Mmp68s!HnPQY!l`3e%Y4olE5Ffg|)$}Y16?1k@Li!Y~l9s{+ixH}vzngf4K
z=iqdw#B`G^61DxH`1d&y`7CPtVFmkP6PLa6m%Uq;y)l=)PA)nAt4`soPN}O-v8yI<
z#gY*vUG7&-rQBRBscgYW(~);3cMPpl5+{r~^hB5A6hPradupAQps5=dr@EA5c!5k)
z;?k4iBQA^n>1O!_$p=MfFtr(3kc|FD<JfAv;wE5aS+KSKpT=?7d4=~u)3Tr){NL__
zuVg`7`W0lMT?TNEqnTL8R)P{y@<EErbRzzHu$vZ_7^q(oas|9RK!oRvc?ny<J$+Sa
zvHqlT*?eZaHekFqdJ!e4(B4&`fPXbP#)}#VokYeyk~K9_NXCdW63R>Z3xo?5W5}5t
zE@WgNANlv7y^caM9{S(USTrkM_=kkn@}Rgv{#g{A$^MVxA?u?ZyN*V5D+u`$qObW1
zc3Nr-yFs?Vi|b-g2BK7A&bF)FzRNa%gu3u6%D+rD<FhOTam0r?<a2);2tNKU-Aia3
zJ>9P$^X02M<q~sLNtUD=_6*Q|j~aeD?`+D~GhCR6fx?iZXQVJJp+-YgmJmHFE_#%g
zdnFe;f@p`{7sls0D8oW?xGT6KCc^@KXvDWd`CP)mJ=#J%?bB={y@HvgBJG__HEIJ;
z-Gw|y4Bi!-p!BeADKSEw9!8X*7v~*lAzeU;wLld!;u|Q=)|--{gC;jRD?t}V2dl}{
zDRwCu+!1ODmMwRRJ$gGB7ive8qcK3LO!oqlWXoA&DR6h#1MPZpG|*(q4PuWz45Hwj
z%3=-f2sR<g0*Rrpmk|Xr)L4U#$UD`U8mO@)$UEoR8d|YKA$F=V<;bxVV88ewA3LI#
z<3D+7=s`o_rWVo!w7+$BmZhe7Iq!c?o`7JChS)jd_1paX^go^O#v5i2cxHG5*1vxQ
zIbV~QOgUmK@VZoGUap6)iIOzo?-%<QQZ3j{FjHeiwmh9wnRKuYVdpT&?n<CZEmK2M
zmKter2I+5q<6nkVgZ}SM|MSNE<wBGpUoPmc7kC#DXHHDc0FBzYbPCr3ebVt^<D;&a
zY@!@;KC(ZV;0v7ONo}b9qmf_egQi#ss_-5Ir84skszSRDl#0x2XaepegcHMV^=^HG
zBf082b{}~R)1uHy1v>{aw&qxDO|fulBH@JS9PxpP!`b}mx*`ipa`lu!)ck7yA`4w|
z^+X_q%E`|FJT~A0XuP!zxZ$+oS(qrcA;Z+dOinUL9__Q@3Ivs%g#~z7_TjiPNjPDF
z+UuqFw^Nu)-)Gua>Hd2<?_qp8Xh8#B9_<7=gq-j>I*g&-XgZWFV9*<uP7tg9H#!KE
z0Ys<Y?l~Y;h}`w+T8L)vJ)sMqi4|Hu-5E)eGzm^&G>atUmrza$(4O?Re0`Ld0=d5h
zeEngtPVRQ&k++}kZZ*lx!W6TkNOe-S(^?m@O?6B@54zO&1m*^*-SKJuHHR+R_W-U+
zv~TgBFAdb()d4qLpD%^mVIXaA5jT8Vkd|du>2`fww36PC`hBqR#tPmbcFF{8k%4Mh
zXO8uT|IyDeXk3ZQ+%7Z^nxYGB;Xmf>E;A3||KDx?3st#LdFcM9EdtZVTk3*Bbs$gQ
zPGwEjV}ryg^F}K?%O!vPvfcVt&hN*wY9)xV+LT5Im}X-pG@8SP7d7^{KS;9;Z-NQs
zg@F9MD}xCfRW5&REL%28Z2<E)>LMRW5-~f&$s5hQv{kEuhNXk!PcC2oBbb$5;r^#D
zDO4Y;x2EjH$cR?mBua#lH}G~!x}!KHkC5~?rNuG&`NYu2VbDb#-o3_l!a;3UZ|VD}
z+G|3t&lpFSJcur77@AKnB#)6(6gr^*q>+XU0#x8Abn;p{_Q{d)`prWtVJ3aV?fG|2
zQt5rW*FWGlihv)oR30{zzyX~G1opKTiDQBO?GJQ5gXnx1i#yekvawlD0$Nj6>s4Wu
zK}$=yX$XeK0t*<jpM+xn5ysJF57w>?x>?q?l;^BC*yr(UV{GQ8O&HGM#i-tI0ncS*
z9J_#F_(>=!P1cA6tnqTrAe>v-2y`wXeBH)`bjU~C5Kii#lT4E}54yl%Ba#|>(x1QC
zMg$G+pc7w{HFqdei|kZ36MoZ)8hgxttI38FEqt%@OrtRsI>CO!j#^{Xf2hfZ4UKxQ
zbLW2`hYeGyE<){fs9WHy+fyoW!`5D5=^|MKP*tLE2U?yI0UZUp5a0bYE3vNIwQe!L
zdAnEQ!L>J>;$Zvnzk}uJ(EZ}Ao!f;D-PVbar2qKS3<G=dh5Q%BEjEchxIw3*4KM0A
zAao%Tq-io-Z&6l)BiK}!?wB+mr>8b2@e}gYe@DjYB;}yDzlGw2+R5bf6AS!l_GVU)
zMer#m<tYSW${+!skE;38x>{(RnYe#5d*P`3l}v%U&OcbaKb<TteAfFQPnkS0UO;;Q
z{jIMKEsVD=ZK^xQ>la%93}_0pyxP)zBjG1{iYO64c1qv!rlM0J5qwG)9Owa~h2QOZ
zqq9t5-St5QMtt2}1!_o#t<+EP6vMLq&p%pSEVtL%oywIspW3D7!M^IkXTmosVpu5#
zsK;$68UC*!S=%5C5nOn?wGDE3hb`;tf_27J?;0Dp&5mF5$r}wnaUC$Md3@DXnZLUf
zh@ou<KN87n$(R4d)*ZS3J=f58#S-G=N}&}^2_8B`v1{f^U6C`g{WfvQ#@fIdvS8et
z+FOqp3h(wqe-M}zf1L|#bnVHZ_BO|MKWJkQb{SLo;q2?GWIHAY;Ht2fo_;dVH<_lu
zdjO<g0-h!SH&}o*_vbd@Cr|ij(Fc*GCu6sf=KFqaRk2C=z@wQpt^gT4Vc8dnco(<r
zw!G&1;A-OuKWg1|XUW<IyVtPs$eg-HyeO~w*(-cplsNK@MeZy0bv3aBTe%b$Sd-Lg
z;@$I9mVP4ZPR>Mlt0oDj9dcQ6Wz&y4RFa0yBJ%#<RW*OiOnWU_IC41!KP1yy6Vt>9
zAH^6Rz6cK%P|RHh?US{}g*}Q6Xevz8{m<wz0_!%inSt}VrdX@{jhdv9CGvtj&IMkP
z<A@zf-4B-OW?<1(wFa-HoBEF#$b%WvJW1nMNDYDXc;EzH?o)V3T(-O^+~Ubs&gb>q
z+KV<kSamkY|D7<MvYV}w{s(e6<2YS%RH&R&s4Of~5uT}qW7r>m0m~LivA1P`n>ylK
z<7~qWKf2qoz{#2dVSKS}fxCtF>o*-}^5v_u4Ga8_-HsK`#uSLp7wcBI%Ok#jCi`wd
z9^VGO$Mo>&dI!SOg<#sXV$qla`?&@qqKk}`YNYqY)#9D>fS8zJoc<PV{e#LnqDlw&
zCy@Z;Mi}MyD3iHp5Vad#%-G`rAd5D<Sa2p?uPs?KVIgWU(jsBmPERVL95IZ)hSq5I
zE>Ket15Z!AWtCvtFeD~<mMf>unLT|0u(tj(DFa;mIcQN#z6va`*w1|41{SMaw~NW5
zF#vY1as!iDqbonu_l)*6&{3KcXg_ZQ2Q0AfVzXckgx#y$z-CVE3ivxYnDX;it3sqk
zfhPkmGe!2(IeO{&+beY*e^A?ES<PGA5|F(h!-y4Z#6Mv{noPBgc6g|=i=6_HE)qnU
z&PFtog{(9AqQ>|rPW3Do(l)*6DMck9Y^#<ZTyq}HN;2iAN*ofRu!#yl!JIC6jT~eU
zU(rwXL2?!0fb&z_gQ(?ZfJ2DI!ShtjM5KoAr$H?EG~N8L76X|v&nZ0c{-u9*PyEth
zoZJ{gb??B?ht5N2rL^eb;`YKWw%N8m959!A%~XOHwo6|4J+EmXH5QoQcXq#cLpKy(
zW-B;KFQ)9^{IJ4YQ;LsF#{$xlXtI)1ikxLZI;&yM+CNVA+Avp~5Z93r*Fi@_&b|P(
ze02smVji~@)nf^S{4}r&T@VXo-R7nb651GxU$pM)WhlwP0z+uGXx>4$1=A8Clk*A|
zf^up*!yE=f-BfTcB`;ZKQq}rik3+KaqwPZ>jKenb!|xApKRedlw3S~!&&{j?w#`nG
zBSaK12#aARW2G6R+d_Ix)?z4mdfX)s++UpIr=EkDef?kb4Z7**H_<U{Lql1Ggs=$+
z!lMxW4O*&jt_<t%zDsDDK?%C_W8l5<Rzj_<PW%q=tK%K-+*JILL2lo}xC@-yhk*X#
z;Q+Sf8}<tp15`4akk|yl!68KGMgY~SKEC4dAKLLBv%W#P%8xeYOY2av5*5L?2X9VF
zr6JHT`CZe#ewgDDTKQcQ<2xSNk(p8BZ;@<Av(;9|ACh<%ho;N*aEWTr^8)LzoJNJ_
zyWN)zunCyM5wQBcgz0zp(&=rXSJ{TnvkF-NX{oOXj_#6@Jj%QK6#S{7`j@>27*V0?
ztU@-}1gzl**nMxqr}hS0*6-<AST%M*Sz<{<eKB%7U?z3IO=*1@6ZtTQ-@_V3f-{Kt
zVi0z~MC*Wy()to6@*xhthct==Wf1ZC*EA%p@AMwQ*<C2Z&PgxOR_93p`5k%y<J<$f
z&ly6kyEsm%|K{_>MVbHi6$yiII#iD<&uol9#GWhxTT)qUG35UZj5?<mbxz7{k&x3O
zCZmaoO%NR%Qut^X{!>L*Pow~<2(dZr(_YCk&}RHNh0wsD112xO38<u(Z8>c(iiX^O
zs~`+$<N*x}k8wQk_L@^{7(YH*^ni9+9ZJ%Fdgyx(f5112dRHUzMK!mJa#9!dfHuS-
zQILIDjyr}V?yB-Nb0_gUjJghm+duiaz3B32^JA@b@V*CvoKm?#Ky0|)zV`T=ewDF-
z_QhXYbkNoY)WbK&1}3}<k`=6A<0X>t4&F$_>mu@H?$vlx0&qEK+du}2Qfg<gyoxOp
zg_Ld&St+Z(ViU2a0{we=++I4kE%ZR!&@R?qUEr#@;kM{~tfBhYK$^lTDHFL%@{||S
z$<T*PbT?VdF#Q1aCCZTHeJq;1K{#R)ZNw^Sk0Z*Enp=c#8W6+S1*APif;MuyZRGS=
z$>>sJ(WS&-NQeSrV7kJv1W6BQQytKy*kMR;0%G90L<2W+yKE+PSr2G6iUddG)K%ix
z_0UAmEQus2v+GSgdFbkq6GX!{a(iv$^jVAOQm4_S%wR~E0%9<`{)tvr3i*^zNGBr@
znFk*XbR)T5(qAb1?T$UqDQ8faVa$a{FWj&8N^Y`k8C8up3WhRRp;%+^pj}M^z?gx-
zn4ULV&S%AEK7|%7q`T-;dYNa@Cc3r3d$GlvnQ}O0ypobE*EU{q>N(1Xz?E7ZnXck!
zB^mP4^BX3;`c9stZIR+<02EfEEqS{Ld2NaLFft`<bW#{(5`!0%5s0m^6W?dh&uXhx
z42l4rrH|xVis4@d2d(uo?G$Qd!q1-J&KjeM0#c$GQT(JF^iJ*vjus6!=>P!MImMGK
zt`8;=UwB;wZkGs7DHrj5m<z|aF&9{1ACNkp1uA(E6f%sig}V^c2N0IJ5th0T9=r)q
z$9^99E)DueC+rT=`p<B}dL^FFW>83XtjNXvZWCSt<3YiegBi-^i)7U*55W$mZ9TF%
zh8w<$Dc_jcSa8b461?}&fu@v=d~+yH9tAL>;a3_5C!3ahR^KQ9Yf6N+pehxBeAvfG
zFV}o2#}XfWWKe*$oKf~1z^9NGKWW~4Uy&9gzGNWBqnPVKFT;aTm{BaxLpCi9b+vt*
zsaaZ*KR&qieTe9~hkCZZUa!o8fIHUmanJXJ#Ml&kWneZmwv1_89JVO1bWM!Ge+jHw
z;sNH)Bbajt!Aaq(hLpbN(EOU-ir#`+gP7EuJ8;2J=IXR>WfnO+)CEbC2IgnzC(%7$
zRRAk@!A=SCE#mC%D}36Y$LB7b0`*omdRs404`vv^VPaTVxl11V3chT~BeQb1)kuSV
zj|th*-@47^v2iz4U%y4>vT=(((OgK{lJ7nv+q^}#bqi+Y7R1i@5H5}IGA?G|YycS_
zkOydL`>c6Ma8nLJt+m%Uywx~71r_csh;EQX`;pBF+w8?}zhU>`f$_|H4ex}A4v&ax
zi~#?kkm2I5A}exl0<r%#t!V|US&YPVQ8f8ebbeZ{>HmvxIteV-6wh=~IQcp%-~C@h
z*__>95>@I>XpUEBhJWyD9PpA@Ocy1SKgHy){4=C}FNqeJA0sk#c!E-TIjZMkjG&+C
zhpU!-@S%b(dy)}h_$%GX-bvO?g_xi;)08|k6P#-P^S2as)(Aqa%;O#v^jG{kp{WHp
zV~;;h>i6zE8@S}}MfSPPb~(*<KSno4<o+NidJs9Zif&F}Z;k|tpA}Ko1F*+rQ;fq8
z!ZZ%iJ*j_&Uq$z<4iDcTHb>AU35(s(xnyH-P2@U~n68Mb-9*i%{f3{TXVdN#RE0*;
zghw<*>}cLMJ&63^j{cg0$vH-=8ISSP<?!bi2gOim#2fb|72J<mZxsB*WH5^P91CAx
zdJ;UXi2zt;1K8VHX#@DU3gI`#UtxA4jlae0iWvt79}4Qlr^OcPyr6{=>H@g7F|CRl
zRwWE>lE(GOl859dpb8gJhRdm9=Vd1f3j!A#11>ZMTz3q(f*bNhA?dEH>~Ie7K=Dn~
zp?j`NM%1(sVI793rI1`oRIL#w6?B;KI%TRa==(ejQBxtg<fvGq+E=0@B619i@4=|M
zP(*+)q75u*r(-taCDwp|C^S~g!o#Y;hp@|wIqVd5+{kUVk<(-?qE1ynlPZQLneqSc
z=_1gWOIRIHFkF8-8QhO~5r>_^jvG16r?Q&2h16~eXxzoncr*V0|Ih`%Cr*S{)G24E
z&jc;Fme)_yU}dc8B6fflOe;WnT`>`AN{4;eOT-Cwx5G{4l?hl}XoOg=Fws^{^qK6y
zZJ~ji0zEf52Hr0^ZZluZRz9z>NN!ny%&HifMKL&qyhrl?J37yc{Qn|?Pn;A%<U~Q_
zd6EApf=_9FafjVvj(U0QRdQ)6MN*{-Bud3d6f;3DG)lJC*UbJ{sv!xsNNDFsc+YcJ
zH+ee6!JleDmIA6w5Aq*Um=TB)P4pvOoQ2`^tK5}Fvr)7Ukxg%go}G~GdMJ;mw>>q}
zxi(c6p$+j6sFpi5aChOIYKxiCTsn0-=Dah*6$lR#O}+9Cus}((`5FyYm0rH}Fcg4^
z^7(O2$LTgy#uPpkK@6A+Ojj|y9*5C#Uhe{?EUV6y<G$YF?eASPfm-9fx4?acEe~m-
zz1q6=7D7;5T85G^s)_MkD9=@_V6)bFet87IBE@*27t2CF+J#t!egWkwm>^)_Jiwb-
znL8F^P!xb7b0G+Z@0{>XEt7MAW7?A`RQ!;woN=TlrllmU1*`LG;a)SPz9ks=mHfng
zb{3-4Hy$$0QX+BCnCg?rN_&y{rrg61a&;jB$B)(;H%(C@kpmy1uCxfhs%{(3B4gcN
z@1c@CLy>U@)a9Rfe0Ji&Gry_2Mrt{6T*Xgg^jw)2SfytUL_Lo$3TV+UhOEnEp7w5j
z2Y!{w?Z*#d@>ZIczywCRQ+^yY`6I)sykyQHMxNfn5B+7cF)fGaKBlxHFrTKlUMj2x
z3(gajOqQOawgLRL<)@j8ie>vw!15I54dIyL!?AxmTQg!I{bEcMyR8Fz*UDTf%p>By
z#d-qo-eViC@)(BYnf1gKZ-w-wwJdJM=u~0R%syb`7@0oqo@2b-nssK)?B0`QPR>No
z8L>9ZIBmxff^mh7n=3P78I9FirNxsHWzeEmmU*kc2h&P+X~uvPB}8ny^$2@LAl!^o
z*ikxjF9Yt<jU$IPDm0-F(@upyJo$DZo?eLmO%6U^MS6^7qNjt$fptub#RFOWlfwGb
zlj25evyus3p?Te9C^_~M_&E-)V|9WQ;y!WxK0o6AjYU)%m0Az`<eRy7&yixod_=oC
zC9C=+^>RTgIw3z~!t%h2tHLc-v^))KR6I(x8Um@@LtbPhB=|Thm<%WgXWjshR?^X-
zHfTFM_iH%!*^e2T;u(%mDQ#=)0*Fk~)tusMT$I!dLUPVp$;-lcpT+}gx=$`wBpRuC
zkl?J0tK58}wqnUHjYImQqyVc9akAU{g`SHgXggx(mtp|VHmijAOq_Fel*5fo>%@~l
z-}7dxpy636f5XXq_1A~#d9vaO<9K2x&jm*-0Nz#rUQPoDfX*ew*5TpVGZZe)KJ;Y3
zv{!Ia7Z?=;yO`lUw$vCphTq6-DR+qd99uQ4?bp^JkqB0!3peaPw*l+CGOfWbNtH=d
z>oYqJzW9;D1Rf`oz$RA`7{Qf^NGj};nARsgq(iz&400J3;4;d_Wsv<lEzhHBatIHy
zuIdB_-uWIKhF_;}m=QMcS0V~6W^X$*EvlBE?XTeNOLAc18=5YlOJ3r|BY&0p+S50Q
z7TTx_I}y5~3+t44*!QmT)vAyGDKHB##4z6U?@>)eU^dVnq0RN*$v_yEHGlS)dM^$L
z92;bRqL<}JDom4@mLfJIL8^-h`bjTBYj?3!!e9H|Yxjg=%kno0wze~wqnZv5M4V-a
zKii)vp+=PKiFCVunwXN`-!OkOM=$4k+sD_p1NCSUSPuV<vD=gR=6n0RTVT~4Tzaf!
zG4<S*_#xBdH=(&huqW);4+1h~GRcKlmtRNUA09|Fznf5=(`5O0ITbb)hP35q?`Yox
zy281_Nhf<#{zH>av_YUjpe0wmSe=ach<jQvsHi!@5ijJRS=u4v3r6#pLq?Fu3iyi9
zS@O5)Z`FxK6-5;UMh9J&S3O7f0r$Il>EFV>m8p~h6g>r6DtPjF@Z*n0?xFSKxD`Dm
z-3mYN*L0J(6mV<16}J_&5iuVb+Em`sH)`0hRk1W`+3=q^+L+oD-OirIZeX0HWwq(X
zveGc(AWa_)n6Vctx3{t!+#KCNC_}IIJ9Np6)t*jZdYdZf+}}>*3Jb@n+jtIA@hGG{
zXrHw!cv#&vb+9BdKR<}NulmZLhRIm&cLwICWfkyCE1UE`t~%WFBs&@TL!x{ueWxw!
zdZLKJp<tq7d$LleaH&+RY^vaY>v?q#1xvwLdTE*`9;dE&pj9GWX1ShmSngs|d}+E;
z&112$a?{*a%1ux@h?kF|OL5qGEq(KRSG&0(>aN+kd5_k`Q5fTCy1*mZ^tk|B@duUv
z9yfmayRcOgdg-*awB*@m8i|+`DJ$j!JoyW)vQPER6Nf@aQJ)K#k7f>5%Ul}(bak#}
z8s+SDA<BT~9edBaWo_;o&%&{%6X}jPr#WOgRilg1!-9V2(!5Y*?Yza)YH*T@Mzdvn
zGt8-6{vxtNin?vdyn2)DX#}R&W*O;NdCXvD1%k3i<9X?<9;+!mBQ=RuG2gUVv3$kv
z3ORX)b)d2La&kf3Qj$m6f|I6UA)UlhIUkJ|T(7Vt(PT10rg>27j}R4e<Cd6Jy~LVi
z$l%ExLE^*&^3IFoBXSg+N#oRdP;(S|6ylTx!Q+lkIC+rD?Uy=^Y93Ln@Pi#;dj<uo
zG-|&~))~s?S|ASy;<$n-ioq;W*!z47ux_;G!H%U?qxU}?DUn9PL>|by83YA^(&2p#
z157Tv!~jM@RdC<>s^G%#tKdR)>9B_W)QdLHCTIh8fYHz)noiaOfu7*d3j=Dgc&}(@
zSzttYI0U$-r+H};Wg1Y&Qo<A2X94%a{?Sb`^k`zc9|tr@lc0(0$qoxG;r?;Haqt-(
z2W$Qa>frlh9K@w_Y8={yA8#LejF(5%D;g!!0E|@iwV2XhptB4;yx1<^04He@1kpvN
z0dDNDZ}k73+{rQEj-|vS8WJ8jm#udDGaNQfCIL^{g@zT2kBA2LL;TrE@?-#e>VwKK
zGtD0vif@!U$!}i)^T<@7@jfEEf#P+s--2@Igw1w=&%aI4VX*KnJ7u%*{goID@`NmC
zpJhUgJmR0-B*Tany!&xNgESdh(B9vT5UHDbBfdd^u63oau*uhIKTjCx12khq|A&#B
zX9_a|2Bno`sOdYDtY|=R?jBRbKuI!r=vwh|IXIwkRWLoDc=}vhw^>9!&{;Dn3-Uty
zB3nd0V`*dDYY8@qXM+d+?j*T)IK!_%#TY4lE_TPL&;mNi*%P_9e>qdzP<EV-m6`^$
z+*=m85nRY){Dhu{6zL`IvptiEHT>dorzapyaK_!{e_cVf{q2KL^^hl3=w+s!)tbQq
z2oYx=#gvcOMm+FcGKWlb=RR&Wfqi+y&>A!B;stSn&F`&_cxk2_I|{#gKm5?bB9IO&
zfZ!gZn1(&oZjx<19A;bL-SvH(D;eVl89PLuY1XA(_B;;FekhJ6IlgyOH83HuhXn@H
z3XQ{ubaOA<0CkMn+x|RF=|WKxFrP%g3n=9zWF&WU>YT+`FN{tZhqf94l1?EzH|zXK
z!Qguo%7)E${JW%5q@au9S*_znSH&<*`M&Q6tP?$65?(xF;HKzs`|u@5)@y51Mr|G_
zyL~Yb*WVoRjYy*6wh`LDQQo44V)I>0fN#{M<5tM^m~^ZlSvMfMm7(T#z{DeOTodav
zq<)r%Yby#}bNF~ivY8W;C;c=n&!FmeUM!)tvze5{Spz3E16~j;(`i%TlKr8=;<Rm_
zVH$A3bMlx0aO8DdJ%Brj9=3I6JO$i-7C~Lujz_c$aWSyA3q^EJ;PCc~66rMI>m()8
zttHY$wp}K-TQ;*@PTy=)+-{s9GQ8ZGSCl8NA~__<IgC4!o4*#fa6JdfkU<T+)bl)g
zh!J=*>KV1CF4HM~{<e=eNk3+!iq77`V`Dzo&ce#x!pg=Xn2p((l^Hc$vRrK{5(-fS
zG>_0n+vX`8yF@Nrk*u$Hnvvh3N7gFI2oj8>$<jqrfw6VK{i54WBR9u1>n%eo6-@qT
z0Vdg$+=PB+Poa{1(>UMSFZW5uq_8Ny0m0t-RblQT`goJ`fiQOS$Gp<3d=!>St_)?l
zg=;#KVk0I*9A(qtN@lziOqp>KwQ`PXMObCi{z`)~s8bITEhR4b5A<O!#Mxg7$ol~5
zC`@R@IYr^Ll>y^`^{L(BT0;a&=d}9Aw0emgDh87wm__<D!uXG_yW{Cni}Fvq>)^)+
zxm+_I&m1q^hI6Q<OvOQt(LTERk82T_&~$ljxol+J)N3#ZaOPtW_nHWOiGu&(|ASyc
zyFm(O_DPeo#G2samE}eU7sJ!Sw~OHXmh3bBF}KTSS6C!Vrwmk2rwkJ3nVOcvB+t8I
z8!g2>_=@8060_4{a`@KbUC)Bn6U#N<<LB|~rv<vg%Zl)h*1D&KDkqyVcpS7T5LcYR
z61=+vuA`3Yg8_!G&spw^HP6?jZC7~To*Hk8xfP7~og#F<cf6H-hOa0eE}=L-9QSm&
z+VT2`LXT=q4_@Q6BdL|tK`{kFu$^xk*kXHQ0rqk17HV?_Kh&Scxh|ik)#*#&z$Xbk
zj$W?X`iO3u`YpkFePs7aa`(!^HjS??j`Rhm*%EmQ@}JvuTXx%44Z#pKfH9f4orv68
z7&$d4vJpNp`^ZTT!n`Mu7l5712th`b7Q6dC4<%}RQq%+vF_|E89Gj5ws@Tt;kP!lM
zgzuv`QC42eI5su_>ACfYur+yfTyu5u^3^qSKczK9UgyaqAGv+xAa*W2L=mO0!tVPx
zHW5QOIaP$B;ok?U9e%b1$?c;Cp+pP?;elOEhxsrcq8NAIhq1kR!SXRG?4rYbi1v})
zP$GJViZ_#@dOXqH*n~6?MMHd>c9HdyqUr~PWncRk#ynfc9ORVX$S4A1<M=xV2^BT*
z|1Nnk#gn3n2f4)#a*FIl<Y@vs?<G;9^RaV_93~amO$Ygs?Z$6n4jz(n$*zJus0CZA
zRq-n`a>>w42l&(m-%}Yz#><I_!%ar})^5M2ViOS$=T)-<a-w3Ygn14l)*nQkP+?(A
zfU})a<o$74ZE#=GoS&Ku+TlP-Ha8=&FQ;hTlHWt}AaphcBSdw*Ns!bZnz+n^z45N5
z4(C|PD<s`$hc5~5$LD&6DBIptoX;z0F@)VYBzD*lw(J7%*0A)5e^%9WZB;O6x4UJH
ze`(mjaY9@56|6*$Z-1ynj^CIW(giz`@yw|Yp7ZcRT){Cf!h|qA25(5CS6vF(rhgRx
z)YWl`yI>N7LPmYq&I3NBx0I%hoqybIX^X$PiI|XfvH-cU_G?|fVOqv&u$N`6+f#^7
zatY65H@YgSR*6_Wv^TV~ad&28)i45QK~7$mbME4G*Ee}1nFajA5c9HrS{VN#J2c%p
zh*lF7YhIcknA-VguNm~hq*;HQ(pFCOya*3{e4tF>E0iomg#a@d9J5zX!y-HklVhQE
zS#aZPp}z`4BDcd}Hy}+w!!|@sK-|Zhf2Mf7KBeS@0MUIn9Pi)DMvJBu$g(b}@?NvI
zVVz+1g09rJt*hV^qqKl}@t-14uSb}E7<~Jcr2NZ@=z4vN`pwtZ=56){2`dcUDfA)2
zOD@ao0~WTwz75o`8Uh{fm&}UXcEiRuMUmhKyu?hCeW4hUkaHccRe9T3jQHVJ5rQ`r
zyn<yQ_X`H~y$DEWvI6c0aF#F7Q+bPihMT+&Il>ZIUMpyu!rewrCSTQh*N?+3@{{bt
zXl7FUk;ir!oe;M=4sp-tiT-M=)1LMnc!y5r8`*#kn`=YRP`^E0<j?@R(>I}kkhBQI
z9pbbY`RzleP%TjMx|kAyKTCpu84%E3XBGcce_{MF=Wo>(Z`3#J=fSnx6HZYq0{^H1
zG70giC;d|$OXtn$UxNQHf!<Bl|2hPf`APAQT8qLc<oi6mK+l_pDs${Tm`rQ(OG*E4
zMdK_e_j%dZLocNiq>(HVqUY6Q>ZmEdDldYazyC^mBae~%mH38N=)?aM3bLXwhRes4
zBmtBj?I1O>nBr=guMz^8yBS%F%5M~R?0Xqyy<JRMQKSUTa%IeNtuC+01_=>LpIKVS
zV3orVjJNU4dRjMq9>ZGPy;`_pT5u>VrcVi9MRnIiH}MFTqa>VFF*f0!rW9>$e%4BX
zoZCU%h%^>N9b(z$HtQ#}yS@1!{9JrMCT-@z=V?02Nio8wJ;1+x4#LNgcoJ>y`%U*7
z9^4>*Gtqgd6&a<zvp=VRlyw=6t`<2whS30jZ(k-9Cz#~8m(g$v14$m1di64t)FA&L
zuvF<8oWXmJ{BMSP|Fp)lk=bjiER^4gb*}%aAnbmCBLDd>S&m{~O@C|lzdW8*ryqW1
zM4a+X5jsH<cOg4rXn8B^l1um=Ty|hg?|SNU%TMQhvbOq=k+|EgAsdGIt?2+Zer=oW
zqWgnc_G~`bvPXzVu#wEzTxL3+fg0sl@~^3<!%pQjg)WNQs}fz<Qh#`SC~lt!T^zSJ
z83Wpqz^XC}Kgmjr`gWyT?D~%1c_tA5m^)@4DxbHoHU-!N9PLExi8p$F@&>>HR4)M$
z3<`d-9LY>B&fd**G0jz>%~fC2&M3^9E_qgbP0T7)SgAcBt7XiI2G)v-&K<e(1OsD^
z?)#C=o@om2V%{)$p7FbKsN&`aunRrO3p{P*Uw;m{uDzmObV0KGo*iaA(c5RLZ=M-;
z19r&}SkEQC6klcdv{0RPxTjEiK($!Ay?UZE(e6@vK)mRHWZ4|VJd!18Z!#tMLNErt
zv{)wcQ+^Y_daMYf?2hNN{T`Cc|I$h^ktR7l$l-FYEr__j%tB(C2(&ZdlU#HpRs-7K
zGK?QVd;}dAo$3MVvFFpBS@c2IIARa!lZ<GNc#B9bXvYUxR5>Q%SjY1zpDrf?67X*0
zPFNSM-_-3`E{=<0#ZLqnW=8{tI}b^=(@xWaIt5@qJ#^HW_lj3sD<<_6lIkiLtf~{R
zRrtyYE0A;vjz0|TKN(uoh`OL#;{uw-v1k$52he-fp*&pDtJ1pAzjmNs(0)^A_-0wk
zlmL9alAAO77;|r8Al<HRs581gZf{~=rj~JO&gH3;%i|^IlGDwF_8LeAo0h)hS*hp~
zxZ)Ei0FzxtiZT<{y;hgmGEo?7^{$IWMwuxhOH}dn*3%8->T5nY=Ob(^%_;0OO|lCm
zU~8%1JH$8l`(tnGjA$lFr_~kU{;6-@?-FbQAM*JQi}(odo9_J%{2J|@4^-0_6_Rgo
z(pu~SAFfQBYV$+b<O#f6PV6y2NOb57(8nSg6j~>c=KUZM%5jxKc$GqMrA}~#m6Ns1
z10&SV4rmY<xOY2Xs0D_gfeA5e=i#>8t=G_(KOk-qJOZ|sjlr)+5@Dnc<Rvn%YmBNX
zPs1Xmospi;!p6heSw030!kQ|j$^a|BIt71tZ0R$ly^7vxyX__6I1Q7w6QShV5WGL5
zyYIf(G`;(_Pc--Cd04pJq$$`#GtGm`>sjstYCqTI30N|mT}^(@GB1y31h<C}1D{7A
z0m_DmAR#wSdNr=}9kTR-1i&Tyc_#K*5d^|+stxW4X`B4Xxhc5W29#+-eA;hJ7D+0f
z*g{YeSg^iMIH`+b)-F2j6;t?HI~zPz8kRK!(}tUA-Oa4Mpy;)+%$Q?#`jHsUoEK&}
z6O#sqS!4aQd0pY0nrsD;d_`ThmbqZ->|!F#8Vf2f{<1DsE_T-21u@9z9AsaMGEVZP
zC=pk=2pqjsIHS~02As77X|wog^~7o4+D%;2T?&coWb_X+Ns62?WiL_-c1;CFroJQ>
z&@o9PnI&WtDejV&?1&kLEoUMReYROS+CJ!GdIRQ>W{~m)Y7BoR9Vy6$FCe@BL1w!y
zcNwnmTuIIf7C<s2N{{HcDl~{AFz5~*_l;Q2kY(8hRLuPq$#-&kgSSBqoG<bjIjDgK
z2*{t`27TrfTMg^Rx*nJPPKaj4&i^^w2!5Z8#3Vg_O0*k^u{EhgxT#G;h+a#GUP|C;
zE;@8*>lKb@pRdpLU}R>+2G)-ycnCvhxpT3fg1KUc!7rzkqfVx86Ks^bbM8`MA*m<T
z&9u9YX>Sw8)+hvC9_4L5-0?zSytL>b<`R8>6F+<OVrvk9%=Neb9s={yO613sCJZBq
z?nM&a3d%jRm~{GJ%9+BLF8P}tqQEg^L3DQh7a|YqJgR_XMi>5)w=#50yZaIuu>bm+
z(T^k(;f5)IWP{AAhAKaQ942{42GN5QvW*xLAo>D$V*RvZ{MM5F@WeXdi8cbGPhF!<
zv7%0wqE7imZ?gy=lL;S5egfb)Nkk9x--CeNPXs$F_+G?Xs`Etb4<P=Vj3C?)jy@$2
zy^SJ#6hZVLgyf0#!xQcN_vn*A`v&}t3WANf&JOkH)48Y@=@Plc5xG6Gxngd-chP9Y
zfCR81dO-cqnz>{i1%x~GUZ%s)QTg;(Jp8IBe@W;jD)oWaVJeNni@fA{e{e(ej}jPl
z*(GwXOZY?^?SU@J6Pk-BGzm{|@bA$i(U%EDQ18wW7QWKKef=onjG4fdMMjdwdQ6{s
z&9Pkfp_~;H!Y#F1PI~I&w{zi@8Pn}oazm7e;%|d?*rM0qbK_@o<Gfi%U3;Hd2jS1b
zmW}9tOrm}^^{ZKy>zt@&nJ9%fbWb&47tQC8s)ANd^dTr^(2Pa}pgw;H+=7!1hVt&#
z=>jX?d~?^>u2{cIuO5YZ3r+;<DDAxdfKGDgjB>@88SgTEE;|7m!G_!~X1z|vq_Wgk
zdLTT@nDSIzqkYJ-dcpYAO^}SA9c`3YSdM{DzC|N^mcVc;PW&7l)W+DMy?L6T^0)&!
zu+Od@)viRTPmy1&?mhN68o%7BJ-bB_avIxnJMfBg`#rARJ9xG)f!N*rs9X51rx8TA
zeGV=9S#+>zXm+?Bl_)eSU(f`qS&SD_dY$<6TQae<#=&Tuv`pWVR|SSFbfFFso}nl6
zV2!i|?Rp08wr#Z)o6uoYfw-O!ukA#goSXP_s%>bhWpS2Oa;%pIng)f{3ZPQirp3?q
zr!OtoJ4R5*uQ|^jL4SAr;F`AG_HhnbRRC9Ej3*NF7T1MJl{SKl<~{Uo6xc<-kF!As
zXSEJ4kfTf#78e*t<S+@ssqKbS(}O6h>;b4sL_U7u!o`^10{31+U^b4xs_f&MUs9f5
zB3V%P1xU;f?Z921H;Qx)jIQh1HYUQOg>>}Tfn>~3cK3L6_gFN}pERm)QrDxQsRxA+
zt?RI{&ZBvs+)1zN5jCnHP=9)b#^DuG*4v|JTLscM4|m10VpC;pTV;}Z$V%;q{aLI#
z4birM!F$XSZe4=HHvdCv(OYA7F9w|UBp?CFD*t9Qw>kPy1ji;9q;UcRdkZGq7QBzu
zS3k9bPJ^`<1G~##ztJX?;RSBJ3Xk&D$8M*CTStem2?b&8ef`4OzUpK3`b~3VcLnO-
z+Q8t2Z*<YQu?E2Roo=B24<v%Ge)l>$9jg#b`2PtqV|NAU&)dLYh3j_FS+EAc_Em16
zGh-9r_I>H2+q4aJ`j6r3zWo4w!gX|A?=e3_n@~{f9QN>uH+>@Qbj=&+6t<yotU_<X
zZISwDW#DIf=mOT!1zCj<!VyCByEoCRScNG64agXd5T-A%g+9S5^q)cC_e6leMU9Zv
zDcM728+dMqM{O%1kCA5~FldGUc@x|dm?5upD6bg6V8jz^HT^_-=<!OB=B#4FR$=d5
za7@W_=a=Gh<l>l+^8Bn4(?SWw*gR0ffg6e;`ZMIgYB0m5pz3*<IOJIUx8$;5{^<T6
zx9>c4v5AYbV5D<k<YoPZ3+bir)+}k08}P~~wlsz1L`%2QAc9P*6F)y8m!*7}#o;}=
z&T)(Z2wdG{yQ?oW6IiT7c^%U51LCXWN)`qQ>woaqm&2>i^;Fz@-cSH!+n$N~9Tm`z
zY`jnu(8_GR$rR8)Y<w1aD-0N}bFnaQ!Tu&zv{*RHURc8&uv+b~Mlzxfv}%TU*Ug+W
zo$RUjh+!H9q}41xXbINg9v)}hG>d&{Q!~@iv1|fv;-1f$$o=sZAV*^9s-dZJ`-rqY
za@0(WS~d#MTwbv3DBlI!fzOe}^Gvy%DZJ(HK2mtgPy`3OKVQdZG))e{8Ly}q9jTL>
z5xE?*^D;8?e2c*8$0s5t#z#!{(H-pZT~skzmxHz7p4-fA9WJO4pF;L`*Imnkn8QD0
zNfZ1Q4v~F0#CygUY4-K|@&4~e{?-Ku{<#;w_KHafmZf7()YtKTO%nq;Ow~{!)SoRq
z#%lC1N+E*JS-*~LQ~xGHCjQhjjBBD7-$c)t(Uz2b9vSDmKinuUz$M$0f4p^ce^sWo
zoD7o%H7q6I8?5k}Q6@*tc-qANsE0!VPV*Gr%0k4C@4TPYvN@i{({T1jO&pAQni-&0
zoJTI>$Fn&$_D84oM=2Q%kT9zuTb=m0s<X+9tTDHoNQ$iS^qq0_@1P}jIIMclg$chA
zV;3c`%0aNnt=Z*jZHV~W<rdrJngO?~9PGI*7=&L(L+?gIuOd`jeOP_qwR75X*E`5A
z6R_`xFz$zN@5P~Tzh44)oTDZ3)>3oU+`J(QHab)<(-@p8#{g{tbEj)CNnsG`XF3$_
z2N0a|0TAj3@<EqHC6`6=PBw_R8o>|=n;i|O>*`LYO!t!*obzJZ_ix}wdwpwwLvSs6
ze9N3FAWp8v+wQko4;A$)Hd^OSSIwPHm|AWy-Md0=v~oP14)C;qtyNdple*1TRi_G+
zm%UQUT=0$BnHI&Wd5<gbBrjwfnUf*Z6Tbg*q>pm`dK}qh2=cuklvdL37SOvP0_9E!
zRw2<rA-_*Sb{U7<LJw?ZjpdFT%bgDXZUJ)F<D^<9MS1KdBT}96V!mzX(y*P0k!T%s
zQ^=nUDzwm}R7mvvXE1Lpf5I4I%6MwOCSuaqeDVdDUM|>OE`VPyFy4RHx&OX*x$q3c
zE%agBOJ3aSDcnog6~nz0HD_X2TBcnTmQH!F6}202%q^1v%8RGJ$xC~zr{zDjo$|uI
zS$9#yoDLGU&_h;8bpEHXVk54>PYD!D2<w^HPd8pSsnASCSA`@Q^V#Y<B|GL<%)pS6
z-l$$_e`OOFgL}YH&HMcTt92g9rAJSB2aqezYf|~s@pU|>+4}afm<|%yIM}VnDd~V1
zA>Hqw_F)fU1t^v}W?3+b88_?Q=HzRda=YLejI9@A5hb3IN%&hIjcBQ$7oPj8+oJ&|
z1Z&*)2P=7YSvxM=jFOEUWK@Gx(3BM(I$~rM6xvvrad>@eNm(HjrR9mTP5e7yaYMLU
z>3!eI%!-+F7JbalcFdK(Dz>VHE#4G#w8-yoneKcvS1M<#+$CYM+;ObKbv9Xnm*AYe
z$TD>=dsMrt!zvo8L*xB{hug-o!^64aE|~W0_^E_SV^3*C`0#tVdd`pKX0#J2-QLQ#
z05_-k#mXsN^CQ!wiZYhvwo<93>9#A98SQx+%Pwn7V$L)E9BC|T>(uMqn<6RLxqx94
z`czcSSqHVL6-oJI7reWA)i9$~)DEiV2J8hp_o>)Oj55^1hz6~ddxN7*hyv!TSXB76
zi-@8}RsaJy1C>?HT^3nZSVLHYWotWQs_F5Q`e*A5s{+M<)s#j52A=66@dtjuz_jTk
zz}NJGNAfO>pJNB0oL`Rjc_b7agU<VoU%uNMp%1U640pte={e_M!D_1+=Z;3Iq1jsB
z?lSQmFqr`UX|uIj#kZn7uFZUL@WR`E_4_1DR1th?QEz_Iuv_r(UCf1J_t8@4%7x>0
z;AM1*0NXk5>xI>;lUb1;ZO$h%0hCF{Jm#ZQ*<ecyFE0)NzHO$%ArS=nxv@37B|pR^
zKuDG!siOt!;#)S!fc~q29QXl!umSxfPdqK;I>s%XYLk2E2YPvh*-@Xnb`Mh)+BH)0
zqg|*gz#YZW(wFl4`gRZSz>vY-mlz^ST-+~@^r_npoeAuJRl-6>zGmHr={Y|oBZ-#O
zk<Oj{vxJ7{4Ak`w)O8`W)s4I|A)@L<V4okq1nFE8-ewUf9sl5{>a9N~7yeFfS)9jJ
zhuzfW$!Z5T5^`Q|ge?>C6!Lle0`5L=m9O=F`a``V($YQGQuCT;cp^nhM$!!j7VB8F
z{|#Gy`dHLWQ~&)I$kCYolXGbs<@lb|gt-*h?1|n}MsV=W*t)~bcS(R<+2vPy%}T(q
z2=&T)KvK%1c@8}LzAv||fBkKmrFgTaQa1N@dmgzHki7$4$uo<!fp!cg>q>W)HxDQJ
zjJsSmLXz5<u&b9DQGM7Z15N+{x*?Cvr$Q`FweB1Mn)BXkT*12DCkFLuhOef6h%SEb
zCcR!|QM8JN=<ro#l72d=Yp?r^T%~if2wZ0s*%icJas2%os7-3nH=<sW@3U$|M(#W=
zj1c)>Em5uAaBA<~jY$|8kEQ~ns7W_~bT)<>U+soP>%b3Bnz`;?weSjUM8OW+Y@7WA
zs}w}q@V5lQ<+kCWHU>fV2HX3>&pS7&PqPo1aAT5wm*4kl>tnS1V^VO0M@BMS<qHp5
zpe+dY`aiFN8MP4{7@s$G)wU6yJxD)2R$1F9s9usUnlY%!z*sWHDIxQ#OYRgqARb@A
zEVhf*diR-vM0|<M$WfcpQlHZLil=*A*VZBHs95}f6W&o<+cBzm5aAxUMdRU`lb^?A
zE7lY*SHB)y8z)C>E4U~|7DK9wCN>|0c%ALHLbd@eHlK>fT;P`$zM5{Ho^n^mwKT?r
zB15r;BwwBhHcB$Xdo_idyIrBkfBm(9yvoPC(r0Q!T9Lt?ifK(FtoH-v*2De!gV4r9
z^Tq?XKEARJKAPIG0!e8uHifBa+L*^pQOF~OVn7R-x%QPjWZRh{YDO~*ja#WU@by#+
z^Wx0c(P6Cy`ZNopDYZ3K2^Qab3NMI{Ee_dJnn&}~Yl`+P4%t#%M)R#|MhapDpN!<&
z7N)J4uTmuc3V&3j(nk~wZ;@We*R5vbNIx0N0~V$|nXfV={{@^)Gs|VttZVpGa)0Vj
zHr-xfXiYuF-)lFkFsc?&!(6hFO`@^gE(rH~!}_uxm2K?z4#ED%&6mJ`=3e^QU4^+3
zkqN>Q8t=u_oNa%<Q*)aRjKIF__x>L?bf*&-+|e6by?`%0%=iu9O_l;yOEF9F+swzL
zsOH#4RaL^Sfp^wg2=1d-qt}QiQtGjs6W36&ibu&7ZBymb&c=F@PyH#gFb@fU)0EZ6
za|0D+&d)4v-)W!J(x$)d6*gfr-LMD&ni{jM8x{*)$l*qGF*Leh%5{6+&BS32WDC(3
zMTP3)T2sUwEnLuDr*@=Q6!FblQ(vcqJnibWHT?-rdz2@aA7W`JH<80_FRmq*Z0eLh
zl>r;Ozy`(EPOb}Bk(O}rT)%wJUZz~1Z;+WD&cj&Gvwamn<2w)9AFw>0ph+$K@`qBH
z33OAfuf`%D_3`_JPm$sr{dqXslW=yX5I}mFeNAhyXVt#yM&mmdn(NrVfbvy0<@2r#
zX8}pH(U1iHw3&P-$%demjG@`|{Fy)M|Do+Iz~b1lwPBnPEVx4icL@+Y2^QSl9U5;m
zxFirf1b2edXyY!yf=g)Jg44J(jq{V7nYri8%s2mi?svcEd0D*sUA0%y)m_EftGf2i
z%pM6zvE+2&8+sX>La*rWAV(^IBPG@Oy@(kW4iZUEkk{`2@E0S1tT_^pU|IPEgC*tP
z8MlA#@K61JHQmVNX*(p4<Y~YAj-N8YP>r8AJkrNvH@UW00dit2JSr%8IRj4FLE;HE
zrbo3D?2>;x<QkHISotNiH9e?xy;Bi=rvGDx{tOwmP?+0{Oh5+8UyWhqkBHs3;(rzY
zv<-_6Z%t}ILAHQ3qHYkOG0$|kh3#jwIi$3HcUF5o7j1W>#=IY>uBZ}#%2b3BjDKgo
z0Vqp*I|1nu?OP>;+6sY?znQ3D$Sdu?8{*12OilC-fROe+MoE-$Ekh|^kjC}<5q<6b
z$0Y_PZk(m=A&`+uK_pE*hzT!_=9=+eOlSx6$u$78#JQ3j{ofj<%2cEhrd1xj0FVbp
z-mB6%vszVSUQ|sr%HQ}!|0(3ZHb<gQ#ujkD$!f{YN7=4m)Ko3$*I!lc4FX9?#a(?K
zw`YauQpm}_kCqL|FrV4cP9u|Dj-IF&+MBb<dX~aN>lA`DG8V-{>k`73{?M**J~I&;
z;Y{W^Tf-`QB~EVjZVe0B{~k*UXL`IG>Zv+P3v<s~`Y<^k>qSuL&ht)0q5Rm4sZT&(
zr?(_AZz^R{P|Mb@BsSHUSBfGJBz;UAqf4b;>i<<xk@te7PR$;3)tg*RTBBH03d96p
zol1}9Ei@b6(RLBs_|%hX2Hw;z6(F{a?n(Ut-gGS$pt4o$OZ{O|Eub|@KjOitNGr`o
z)jlzC%+kLOl?S>#Yivr_H;^d*@*VOH$crz<QSnEtKZTu2HylhgYYgY>%=rP{c4ZZ$
zicswPS4tca-IHSm-qvOnoEp~$M@!Bd6-WM|^yQdQ{muJ-?Ea^q1{sLeHk@f_f0#v+
zI-w!=(Afjdc`C~v#(da+H+7iqf@tn>CUE(!$HL_9^IZqlGxoU6*v9<RJJRGx&Eh6-
z${8xO<}PEnPdSMQlrtTz%jU0U&BRj}%OmusIjLgs&zJw!9N=^<nluRg+UkIFfhwf=
zfhIX_<OSA^@Vm@`OHKdq{rk>;iW(;xk?N_#8&JLWvxLnDb%lkb+|F-xr8g+ey><?0
z)gV*!BePlct~|7M3xSD`Hs4b<yrR0kXKBjB`+97KC8l`c$_%?$Tbz07b2x9F>S^($
z4>NC;>~P_4inK+kG|Znz8^tK|c#B4EnExrRS@9*>q>pc-qktxFzJxf_xUy{g+c0kE
zq&stMhOB*|>U{Cv>6iPs{)eQxX5U4vct;%|n2@TNU+`BtDHu+hKrWZxt6B_J2eAGh
z>4vOnyNFjZj*2ZyajgjB5jW64rkuq<O+(1luMyS)c)MrZ&U5KIH^|*8f1Bq~lm#;-
z`jVMS2Ot`E3}km-LIN9>S<Ry<KOQ)%2c>VD1l)~~qJ-?Y^*Xf<kTR_;Y0X=?wSznw
zjDE;1IBuK5=UJ@+anJA%IlRIy%M493utyNJf=W6dE99IQ@@V%6(@?rQ%GRM}yoX6^
z->`2ZH3d0j3vDBM1sSe*Iw5UiUj?*f(`@6S1q2#DA;k&___`v&DW7y58jNR5ONx5Z
zA!GcK6ghL!_C_hNu#;y+=ZMmix&`45)ewavFsYMeMdOIvld1)A35BOa&zRnmq6OJ9
z@NMg3vHj<!SJik1EtJmTP;t4v%fjeV=@0ReAL8kl)M4~ipJkz0vUJCl>WV51vEPow
z5`qj4wC-FR*Zeq4T@S~07ldGfF<(6<C1UO~IOwU^AQkEA`@36T+T)={{<dwm8pziQ
zVHA-#UZE|v8~o9gm&e`T(|YziDrXK0b&WD;UaD~oSSA4s3qKI`Vw@OG6^(~l7$u6U
zSa&HiXdDg-P_VpGll6^WvX4Y3C<dD)8uqyKM2eN3^}CH|OD*m5Zyr8#3vRJxfWh+G
zs2$+9X!W*?gQ>X%ZN(ue1nbQbw)a6IHxf`Wszfi|d%g8rBPtl*$O*QU&TFXS)SV$h
z@%^5UhG}z`Ki7@pbI73#%=^NK15OX{=g7X2L;fZSX&zS3O|3uosP+~+Yxb-~5!MZA
zY4j%r_(cM+U1oElN1uhR1uk;vZ7JMMN{T>p42LOh<81TOxAW{`t2Xi$hTaP)JZ9o&
z*w9vuPGG$I9)Fv+SAU?6ZL1n1v}cR#f5w6=Ed&U5;m<uwmVQ6mJhqJ*opi1Haj!LI
zxA4sRbeYp<hSXq)WA`#YxoK8<*wOW>V()CvTS{_L4sXZTXC_u(4E8wsrnm8GMw<BM
z>x-mU(&abe(sPM!k4ok=;=W;AA?!Pe)p-ZFH{4slFIMbi{y{WFUrDuxAmk>gVCeUi
zU12LqT4vJ1RKsvgJao%~foVU!h4RwAGkT;R^;DVoJ>#)(yeGA+Fz&t^_na-#++g$@
z1{1lhudVc^atyz$5`!~pKRvEldh#asi4&9H9<v=ln2$HJML!0If@zs?FQ>dSvAk1m
z{cH8y*Z5QAf%l9X!tp0Bw<tdTVl^7nvI4mI>7lA4U1{q-6;2*D@QfFZ2T~i-Dak%j
zGoS~KMN{TY$J+<Sm(>G`KXs}bjp3f5BX_*!e1wH2-l6RDd?man<S(a!B3fa9TBnUM
z>no~s#NI%jPMsAyCs93i1cFY<6;mgIdB@%tOGtbCU5jWA=pF$=orF##4HWV(;Bb7h
zMf3v(_zw+S=!P@Yf)oZsgmDLYz5nDzCfh13(TbIC7^2G2Rg}bIoKII;lVix9ZRn8m
z3+(xZ?9R>(BwKZ4E+XYu&4%i12LF2YQSzwq7AVr>D$<;eys*R#x&)+qU<~H3pdY=^
zMsqJQ;j-5-tA1PivOdV(SZD^(J;=bA|5K323P~l&9`bc3qSF&fqy!LM9S_btS?GRb
zmwT^?&{}1N^UTOAJF9dT4hzbE=h~Hl%y>N(#?C|>4ch8BT|qtKIC}1h(Sl`&SP?Yc
zvAcqOM4ybf(iMceYk!23jJkw+7zpn~UlBjTyCC&J5=G4l9PPB@ME5~#LwN@2dmOAG
z5sYfgtBw4)Q@0X_Fc`n`4XmCo=n*4o+8co)1icQ;N(ERF@lPREYB`l-?z$#HdLG>C
zS~_R%vSxFqDZ>LCsxptoB1p3#{9ugByDwk*hDqZd7Z%R1bsqN|_Wd+$9cl`=@Bv)p
z>o&^W@p}#S>HaVQ)&oMe8Wj%EEma0sWm6=XvI^pL6q%|SEr|0YE7bnbez%5l;&tM=
zBUCL@MvJ6=lZPH^CEBv7k}}ndHpFzpIe9wqFERD%4q3|z@(z_JnBrZT>Glmu@_OQ5
zMtreUnPB~=ZT})B!U6;X@iUptJXV=Zgy|v+KTNA!mo>=N0^8W<2kx3!^P@dvsg#P>
zVpQvo;{`KS`_!PGzXc{YVJ)QV=uqD+j=!mtN?~hE&cbxjh26*TuQI0=!vBDm=<G3y
zM`wo_=Mf6l0xt6Oc&gq51bpes(naGmIe|2h-Cgg5|Ff}+e1bMo>=NoqE07FbU-1Jv
zF$gp?YEsE>eJ41kpwf6QO#jX7d9i#zpSh>J`){~<%75tV&OJ(g6chGW<GvhsYp^Nt
z%m1$?<X40Ol+jnhIJt!N%HimYJul){$vovB9HGA<%S%p8@RJMgKbly+$xy!dw-i;z
zn~zP_Y6R0oUpsikr44=`c3a=H1oD&-7oPKf5&9BdX5NQcPv(?{SWlKW)vBpf`tz)N
zZo%@^f@Oz&uS&ykz&zHUO{KTePd;P^o|S)Npl9iRD^9lX^ysfI{R>}eDW}5ya<^(Q
zeuYB&&!#l}KtD^jYp9Gd(a2kMG$<w19IFd8J3NINhsOqo2O?7JmLlMOxa9*8_Y%%h
z1N&D_SEKKp1!PcHx)gVfR9Bup+w(yY;xXBhnb|=U5}|bWdiBelbO)$l*rWY6a0!%l
z1X4v*Uq83}9Kq1vQ#Rr;Fj{2ceCRA0xv_0mY7<1R-*>;*8@uIX?jOB39IILO;!yNk
z67|xx&U8{;`I;Qh#`S*fbr+48Y?O|FO>bUZrV8v%*}hg8`@6~~;r5*)Q=>(%$$`bx
zc6|!mqJtv=UExT{9adQ@l_r^!@+{2P2~m6=c9TF^J8-BQAw?}CSTc-F)=tGV0$(qF
z=9^TS8o)a}>d#tEH!)ouBlx2)U!Q22S=KN(TqW9f=`k|yw~nspm{zoFyJ%lNkG<-~
z2jBix2p*;s>)^rG0a{b=?{w#B?{A3|Y}_4$cMW(YAv{FpW_Kz9bSjJsE?!?De)xuM
znP75nEOLGs`U)3945BI-Zj8)P^7=23I(cGsn5{4hqy2XMY9LS}ACU(1(f)}e{KXx&
z!i7N{$Jj}L6BEqT6BTbto}aA9bcgYepw{hfz9@g`@;l;RqafFu8tS9ke{=_XCXKsY
zwDi4S9+q5RCkFyW1X5HZMn&_+q6zoTMHOEf?qB0(WL)D)m0jby2?%fA28;QOW(%Z_
z_&NGMzFK`%9#=L=w|=s(+h}*Bbx5b&6vt%1ZkY2i(wSV{mT-M1{z#OSfn>1Xjg?^<
zoUW-@Tp}$s#RjX$CEty<PUj%Mi-|Iqr?*mgtu}r_BA9rpl<Y}Dzw|L|+GLfBwa*VO
zQ*I{E7`?InZOFyn?IrC{cX&>v-cJp;(gM6j&nSIiS#}3^-Jiv^P&0bzx`f2(_7S36
zsc6CAT*Z~5x#<z1yLGso?P2S;S#JmzJo@2*-1edEaw`h)vu4WUYMycr4DSl7L;Ul)
z<=L9B7w-Ke0&vpSj$`A<r7fQ_>#RH?`ZDajV*(pry<J~pmW**rqC5++6pDnJ8>yfr
z8(L^(C(&2XXg;(p!MiZLwtaVv1rj=>Z}8ml_O9)m8e$fl(X6Yt*R0E}J3Z2)dVUwE
z@3R_joqtLPp%DPQkhYJ%n^%Ha_Dc#2FmjV`lSJY)9a&4qrdejHT)hVp9?u$`jzAKo
z#G5EFi+s!dyaLB*Zql~Y4cA_72yP14#%LM3OdbyqK-hgl=gQzktyj-#mBh?Zio~y}
z_F&rdfmhjqqQlnjhIw-ozg)I+S?5TTE4<;EN(&~=&NsBntF#;DPOzXDBhCw!|BPA%
z!^x#;ueWLqzMBw9BiGNN0g?p4nz~yN?NIQPLH^E3-~|-E!6XgYh2Q@*Io$8R0mWWr
zOE=+G38U1oA2*zt#-!z=UueU3W2px=$S_Vitev>$l@JSedY0IlzBOxboV)!{x*9><
z+F=+@I#b$|UNPfDXB~?erhAH|8K~d|-awE4LH?+>+K;Ls3^wl;cJJHTcaNAndWCcw
zaZgdHtaZ`8b}wnnrHzyrw6Vg_`r;_xu+&f$(=GqXkVai>yGXa7UTFDzCP%aKuDV?L
z*&XibJ@XXiOy8a65_zivQI#*-b?I9D^Hz-nW1(Fg2L!yjq$<|9!-tE+#^g879n|`E
z;o6?t)Fr5&0gY4p*W82pGj_QA5#PM!!>CAei^5Z{)!QxqebwDkOJ<#WvtL(>_#xk+
zxj@tgvaz7&=X)BYbG;TXXz<i5>*!wxPUj?_foJai(qkB|XpPyJ+mD+953<p>F}woT
zIx({Ow~?=c{IbPJ5zvC(7;};$g#;0Fa{7*mQAQ%X=w$qiu85S|NqUrZb+@qZm2{8e
z#ITitbb#a$T)aZfiM@b%fD8{t?{GbO>iI|*iyAQ|sIOyfMW(gup3swA7&#MlG;pgE
zbH!*y@(ACPtOdyswIXo3lVU}I6S)P|GN`^&$e393;?cR4%3w*+&(Y$ajJ!7jyp;JN
zxsy)u<ag=hclrkcn#Q3j;I7(}A*uYiA`dgOgp0%nSj^0pjATsp^lBSe&nE){BoBXX
zi}Nb^luoq2W45iFtIbn}p?t?-t(zpX(tj)KVk;tNy3DW`13QQ%R8XD&9-H>+p13y5
zRv%)$M#nwp$-1;D2}vU!Lq9{keeKVQfQ1s=Va$nwg~||QV*H8}Q7TB~DQ-H7R4~_y
zxzpoUMCoX~K|ealj459cq@!A+Lg@qC7)!-XsGxjKLJi0Z7zF{%9gD`~bd6ev8t`50
z+FnHtF2xnuB?_bYUqd*>9l+vzyz?acghy=Ku5)WAEN2Po^+&#mq}#IVc7*0hFofU;
zzL(eaf+g?1ueo^o>(fWm5o4UPME*nb@FmNcrVGmqT3s-eF~bb1dobe+asx2gyHm81
zh7tk2^O>^DuD|MGO(v33uvJI(iolVuC*loe%OgW1j$o~hl9h+40X>mhFf0)Uj8)M7
z8(D2@|3g;mRiS~P8O)pgq!e|x1Ff}l?$PsXLOZmLY$Q8Gy-q&pc-<B9%#Lp9-4jiJ
zgc7j;$YF<rT;)Zp_KoPChlr+s0H3+o*Yj$#E~QuGoetvX6wp0e7>?;|m+HeBKuqN-
z`z5LxzR~X>)c#8v2Ij76!BI=h^V=-&i9P2-2B8--A*5yy9mpDT$*5%vT@pv1oalNc
zu=}#<<~ihuV`CjYpv4avsa4(I&YOcP6_U$^C+OSkd2r267gzdh0YB-Rv=yk!2>=kK
zeL1v}r)Q_za@&%O+BTDBZ%z^bk<7Y*%yW^<b05id!yeESHV4;JVNYAEL5lB}jnQ&U
zsGq%p$;S7xV=mhz>=e~v*r5v{$dV*flKloI?~{a*U1DHk5b%JuP-UQD)Q<;Mzz`aL
zD1LG#^8PAZn2olcZrwep#baMJA4XEt7?Tb!S9mMgX8N)y9bmqlDHS>p6GaJ`+Ad;H
ztrE@+ZG&tV9|i<tP>Xw<W4-2z0=0Z|`Esy9mb)ya!*{GON!AARRV;&-XN2Gb!teo`
zEgof<kBb6f${T=PJ>SgxtR@zV_nqzXS#s|SF15aENy{M_ZR0U!pn)<^+i0$-p7HcA
zPBVIYr;qrqLyZoUROpSMM&E};(tX*BDMp0+H-!#wbi@JAAYZDeIa{u>PZLsss&j11
zxI?eY+yjcEy)d!%1HZQBHHE6f8?>PNc`X@UvywU<ua<|av(EJ;QU)1MWk;GyrYL}e
zjMr~~%5QP%VuQ=>d*L}>7~emq^G_pOdj7G3vGG=Zu$A)mZP}OQ!B`{h;sNQMR>ht6
z=O5vWzOgMz^ZC#;rBuv#?sndGEvg|pOKmqUtrR*?MPujVA`?wYu6>9mn#$^}W@17<
zb>$o$M6q5Fk3-aS)&oRc>!m9`88^jgi*>xsG_?jugym`E)ag-_w)SG&(ckGsaox?|
zR!1t`9$t#^JRh(Y8T70EASl^tbyE!hMp-tEW^5nq9c;BF?g+s34n~Fj3f#F5Hv~p?
zn#ZeW2u@0mEqhpB!nG7M%}QK`UA>3TyoS%rOn-D2^b_?bM0vlYp19cSP2%;t_+H#U
zSbnV!uk}jfS(pL1mk^ar)lpAg<xExF`JXK9<J5d8sRUKnU{r%k3&Evu>tj7|slbdS
zP3bOA`6Y3_KqzsRQpA0Ts=;dHmSb=2{j2iZ;mQ_VYoa(CBJ{?`ti91jozY3AQC%W2
zjP1A7#-juSIU14K8u}wd&xVM8`jtPbcb0sW!t%|t^jxB}PD~5sI!*rtcwwt@L8#$5
z>k8oYwZ?EGzWk=F(`x(pm%C-p=>{40@{gAl-+P3C$0(&0`IPXuh&E1cDW478^=H;b
zg^dGrK#0R@@55~Ib)aCQPk70t!#T*f!u~vNczu<4#PE$odssD9&Jz9wok}lanN#L#
zcH<b+^BKjV_QaMORTujC7d{O4x7)(gZSQ)KHAHTg0<GJi7#H~?X(UUa3~}LpfK}eC
z;RzU<&;477NRE}jz{BE)3r`(QFK(?0aB0X4>#@YD-C%eYpNf64_6~z@vyA;A{wAe4
z5rl<tbC2JvIxqWQ$n->Lr1}MyD8`qJC`p_(AMd!=+!1Ic-CmqhU7U(&j~31xb*-<<
z4b%-b;1D^#aN{%Zmm9bSLr5rNYO_vemR}{0rfkkTBEX`QXWL>yg@?3>xe$b9GS<H1
zhe>8ef8K{ReTQT1j*|N=yGY3`pO&^8cVFIF<Xsx7_P51c+?)Abe^?gPn7$HSyC1#u
z<!gWF!l9wJEL?{=yTx*TnQDJ}>5q8r(<Qomau0wE*7sT;u)GBN*g_WD+-{7_^De@p
z4%+bVj4JSbDb&&DhJRQJ)%My|)TIf4I`)d(lQZb1(gzakQ{IO{trXP?Q{m+BG&q^s
z(6z>x&+80p#lAF=a`?4g(d=C!;H#LV#ibs2NtX>?Se4o7ML%Dy?bzq#UFV^!Gucrb
zr~|TD5iwI;@m(9~K!*-@go4agUO+gGiple-l^sOH-v?+dS3q}VK-gU7<ajp3n#obU
z21U!Ajzgav-?N*{<7$6r_f49MI+-ac1o^H!*?*WiKqXi&QrnI}(a|-dn53C~JYuoh
z?YoGUqw6R-=9wy-|Ki+HXLR~{0kacd1akXAPQ6@c$dToksic9MDB!IKB&p2mVlMDJ
z8~HmT)f<K}vh^VLY?kc;tE;B!z5iSVri>h$KQ?**&(SaZng5~u!~WUzH}3OLsy*#M
znHrsjUq95wV90I5UigVz{aRlcQgUHZE?BR~(vcKV%{q5husCt_EBv_}5%`1BI)=T#
z?=c&Q7Je1aw(U1FSPOrr1I!KR@@w_K6Q+AH6zVCt+r!<@_sE<Sa%sqI2u4ATUPi`E
zqE9?OZ-4WvGN;knBRS6MxfnGqU*MqF8knbJBXTJ<+K_w9bKDBP5sWp;@>l};JZr0G
zYO4qHXqGcMYq3iEn98q^yCWtSH3=+ll{)&r!H2-<tbjX?`wU?l{bQi5@9m{i4NL6I
zQ}YR=eH_cW#a<KaA6xg9He)iVFIvxCdLX$TQPQ)g=n%tYkYE7in2eI<KWgsHqH-_<
zk<Q~Af28d)trF2}j&1a-U_|4m9l4-R<42^A6;Zl6oH&spQF32Xzru(_GwbMIA#`Hy
z5NEuJ75r1J5y#%CrOm(qv{lT~vD~rTnXtak?8Ms;a?cRA<zLyNxm;L|JRMBYp^)cX
zZJ6tTSRXXsvA^<=fF}Que|nC4Bk-;J5IE&GWx>#oh!))#0Pc9aLety%^Avr-eofWm
zG+3{Fu_w34gSBxi1tga3u%?ltVpsHU7EpZdQBOoV`+MnIzw^o{xyKq!!@M$gEnm0k
zuMfJRPbU<6fo#d!7yGWdu0*HJO2wjay%O(@CQJTJxiXJ8ZU${hSnW)HbkP`;d6*KS
zl~SnX9c+xD{n!sdEXX2TTj@LzTHQkAr6Lc?B>ACP5jI=MkfyYwH~i0cBL0$=1=M#u
z3;;aQhma0~;2qa1$VV6#gg$7Z=+$pNpZcS=p`E@F)qdx5MWv0>hA!8MYj=;wiagk<
zWQ=-2_Te?6HuhA&+e+e6WXS+v8l5rn%&$aE*=W;J8Hf1{@Xv{(AL5_#MvR(F0FyBS
zi4!vJQ4pzb^9C|~<!j1M=orSIGp(>63d)?Ee;FP;q{A9Yb&AM;I}6e=Mv%6G9?lvk
z(FO#06q2Bbj-C~KC#D80eVlRxe`J63U+-%af>50U;(t|^QQ-mJoxUr6zF9DYWE^Ug
znMT+nPeNfdYIG$i@08k#%@LL-u`qfjI!AziAW5g(ip9}mPofqyLv+Ug{!Xmd-j&w4
zQ}ZiSoR}?`OUQ@8xE-M@FOIk_P<$SXB4-898sl6b`Cx29C8va+pcn;Kbox{x_#mHj
zzCHSV03$l_D+zB9{7?ovfR#u$SZ}@3h|t<^4O$X3F=jgaDBhsN2MuRast2$cKjhr*
zJ3UhlPf)!(IE*U{_l%0SE-_)R?;S*DX?|-QGle9V@L=SXr?2uzP_3<c9SAk>!a<LC
z-CkR4b0>tg4L=8sOi>(hZg?gGh2<NeMJz|$DlPJa90Was6373Jq8xL-X_0@zLC`(;
zze?j*EOMawC%)9l2qV(%M#jsMs3d_Aopg5X@j#>A6QC37?yq-DYoH!E*E5fix>#Oe
z72aQZ9}Kf~L#ZI_WRX0Q#k(Gccosa(WTF|3kFgr)<JnkCIXRZU^epfZRulc34C>&~
zSV`GjOZnzm06&&@Ig*b!VpeI9MFqJcgIt4mnWrky;#_|pf%ry;mHRXuAhoc9Xr?7z
zW&w&4LC+7?Z$BiCUY;ibwi+@mmmfwncK#~p$FJT9D?W)K=w3tlXDUj~Kodg%lb<45
zLNm_9S+xmTy7WR{qW@Hnv1%XWnfCM-4O_L(@l1Q%qM##Bk!bJs&?lUm{Vf^E*T@Lv
zUP;Ea=kd;X0}YQX^glev*d$*=B9yx%i+(<zbixBPJmS^=K>q(Dmr52*A~Q}RZ)!9R
zwUF!Q!jt1V%#U!L*cxyaida<g6N)CV{{hBv>_5YE7}#PdU|3CAp%XpL+Gm@%#yfbN
zy77N64|BMFyrfIU3=#}Sk6L|`>p8|q{qldG278V@rGEJd9eef7e~;Fn;OYjUvvme1
zuDp>u%BJ%i!xy$D#3k<umO9Q>`8zF>Fff52%VdjoNR@>=)j6#E{q>j6aEl;9CrWEn
z-QbsF#O49+*&^Q&GhVarxFQ<7;UA+qL+T4Ac<uOK<NFB<PZ)QL7nxxzR>i~2jT~Ji
zNe{Ch96|po$E-qfJz<Q7BH>#9m-IjG=3(#BM^L;LFO&-E&VQnpo-m&lFHu7gnu^RA
zt<k=ctu@H$G4%hL%yI-J@`OEZ@j^9hMXGpsxcgzXORW{ie^<_m(Ru*x8l=k;#%U-L
z`44*Q+j4d72^08_ko1K86S#%F2xF*wa;1;ARen*!K<SE(T&<OHmZNPV#OCDzzfp*r
zL{ZFC%NDdk%w~^1<Mf@?^Bwum46N<XRCV9w)l>?4CHP7SIx-K(wn3F<x6IBjlV5HL
ziNr5^Qjebs$Lt7XGMs4vKA%zrwhJs<VSqNg5>G#Z>!4P*MUU51w08VKNQ=vt(H%OV
zcmA&ryuV!k1eF4j=}7bW2(sL!web69$1lZv49=E)3_6`S-#VT}q2y|hA~S$R$s<i}
z|6DG*5yeUGzk0aWIyH*823uaYH5f^1x>0Z&Tc)JE>nStN;BY{_waI3ChaT$h%%XiA
zp~p^wcPlhd=)p|T9c=mQTVBz~DPEXfrB6gOKT)$t#7K^rJv-BWBtrZ)=HuUJ9lppf
zsKO>}$IYL;)On;pEEV^0+}z})4(b1xYMy_O`bWKM1Z~SWbWJByZfO*mpyRTM@L{>W
z7WDTNO{Ihen&Ipb*@Mrws~$D62K^T`_y0j=K>RjIa?AqHbyn6@2gN}16FZAU5>d|J
z<M9VghtxnbfSu)a5>fWx<1q`=?J6W!9mJ+mgulrN*@LoU7CqZl+^)0kt~y*zrQM&l
zGpwth%$0WYzB_b{LNM!STwy+&f*60n`8uwdGydGV<`FqtkQB@7T%zo8*)eMtefakN
zc1^-|4Zf@HGeLVg!7|be;x~noV>Wc#HJpNMk&2kPKfe7dWqDml)UfnJ&mapLwOz~U
z#TH~3kv;wG7cHA?e(fk-{c+sR<fR_zFtJqi$JUQt3{7kw9Q48*Sl-l2j@je6>LE6<
ztvBl*o*5wCq21w>|M{l!(uC0PtAN{7jHh^$zb<Rm2;{-^*-Rb13U&+Ky~Bx5QH^&k
zS;olog7}_d&#Y-pyg~bpqLYo;Am#XG+Ws#nA<BU~9tV81u6<jh`%Jg&Ntxy+O%{p&
z1vw%c^4z-ikuKW@P0X*5x7M{!eo?)!zu-@v|0&Ide6z0Q)Mbm*#Qg73BJ0|J#lH#g
z$6p_$`S%x6Mp&j9uE`=<l8^(D9S5L~1M;nFRcmyabpOfoOD>56e*N3)|E~ya|6}?;
zJvje$;D1FpuiqR8;MM4&lo7`|rYRtL1U7f7Ury;fwBM9Sj{S#E0aA@FqHY;NnPz|{
z%j*)NY{=s=0IGHE|1+7+x)#4i7eluUrA#wOljTiGLN-Kp4DjETiE<&~;{XfmTJ9QM
zGTkz)GR+W87V(mVuaLUjUwCl#Sl61?=yK_nk(OyjYO+X`{L$w@{+As;zZ>={Z2wy(
zUnag?|Ky78gCFMC<+t1Q_-A?;S7j)-nn8XnZ`#WUMJ(C}b0bXJ*|?<kCv34Rmh4bm
zKgMQzkYS%)qa9Z-px;jUA@|>Jdn2{qv+sXcp6e1ag8fWC|50$R_hGl6VtB4(tMpnu
zm2w}LX`!8~KX7=za9^!@mvEN=`q)0!u33BLcuu3*hl+-ZR?Hr_6Bw#K-SHw&S|g@|
zAdo?$qNB7U3FKjHVjM=Euir+pKhD0n5Kv5B><(=|FRX_ecrguTG)Xv4ZdBQe=+##)
zpt*0ec~Q)j0S<w_0U~hd<5nq0B$HM}M`;^MAzz^kH?NGi14ZBMN+Ym@4)M<LNF%=n
zja%ed-A?coTVgW|w@LN>`Fu`ZbHaxEYrW^v&FQTyo$R-@hVMrFb69DPZJBmU+z`*T
zgcfC6RT51qC;AToz_yf)H&$7}UQuz&Z|(gX`wi!fT^MZ90TXlH+D)T_C)kxp&2`iM
z6V<S0cR#m}H|+-Ph6!e>Y*x4OQ-))3sMcA^m6dPsoqP<Wu*#n7-hO&Fqh(KOXI8k>
zirH0rA(}|m5B5x3;2mpzx>4Q4z+UZR(gp0g>b~gQqvjv|W?=?=g^J-|L?Ht!e^33x
zQs)FGQXQ);!xN%nW{nKjdZ8WSdAB`I;-6UOTzVP4b(+&*_6$yrF4sJX;BXt3g^C~7
zwl2GS*TF+#$kk_YLt(-&{H^-K^o{x}g3YY$!r863)EBt7f)#Uen~*-@9YpPKs=gpU
z@tDa)m;^LXaC)&b-z)y%C@}ApHMbeYOx=$~*iICKQMT@J_fMc{u+VQ^Z*J=*=c{zj
zo8{(G?c2pDP1>7bJ__nFu)S;)x+Zzu<pJg;e>TkYGRwvm5UPM4u54;3XfI%+O1GWu
z$Ce6#Ev$NI6bP^^qBh@>_FLYY>;~S_y}uwYF|gN5uh~jaeGZfnVy1^jP{|o8MENn<
zdV>bkM3QQcOaz2z`CK0D8mROL2!NUn)OGqe+6~z*@{>haI?>KKg7awvY-0siV{#|V
zQ&1en3kR=qy*?e#pSxAuv};UHi&dqUE9JTqob8|Ad3{lYyqNhiuv9O%pIOMU6{!ZZ
z6R-@XY}PDoYpP9rM^-1WwWJBb*+_NyWZTW%e@Sk4VO!k(R#wGRBHHoGC7p4mA^R?7
z<&V%0X`j^`lVo)<nc%oyL2ZdJ%>LWuGaW%Aqn!I5UQ_P*yReVt<3=)RbGccc&1euV
zJ!!pfy&vYWwQ1L=treeNCIHXF0nuro!YaQCKbhr<FnQSG6|$;dqCL%L_<o&Rzse=I
zKkm>Z$AH)8V*QiG$^Jv(<_+fr?=at`1pDTay$w!p?Wd<S8TZ`gnUAT*V`LQW)UrxX
zX<HdGT=nGU-%l=y*H0!@Eh!ik{BXsss|^UlgrOAI+i0&7&f|kqupxEQmnA26FV6Kq
z0HbNG2-sm@@y68_sHqIR9L#&U$Z&c)q|Yq<UPEpwx=V=P4dwyU+9?k#?_}<B%h{Dk
z*e5?A|2o%rqW>NgY+GX+IpCbJDk$j&%-9i>b92ww71VNbR&X^aYHDJ4H~8A*t>>i&
zT3UMR_!YWlu*Ih8+luEX0gJJr`k{+`lyTVn8vD#(@4A_MuesNwm3*UloL@2n+B^+U
zCO`E42Cr$Fgois8Ts0pWEQdk`joKWGn`Z03X=NXr*q_*I!mpWq^d?=G`Ih})pDQNL
zimZl7d9n@p)`rla3f170{3V{|WP?ec>gHKBHcs!fF7-BnZ<M*3$%UzfAjqcnsbFny
z%Xo`|MylG7H&)E$r^{rM6s2S(a&X`%QWhCTpk$z=)bl<004k2h^dbGqqVY*`Is+98
z%-N>1)P3t3$MRg(<+SHTqvjwq`9wg`m)UwSVBp*mB+yr5eA3||7cCmil&#CvQ#{3-
z@N%x`rK(NIghtMQF{qF`<%>G8ns37JWPmQ9kX%-TZ1TrzA}4GhwkrFyF?5K{jrifI
z5S9vC6kd`SyjHU>A`?b=L#{C2-S(*ZTY=EZtBZO<R3o@1S0$!6^4JNA2O~7nck!p`
z_FRg0RqOOOn<Ckgn%Nm@S&DW-RDXyT?*vTN7y;(kc=zK{&y{~9F?D$e!1i<6DojNC
zJu-mT<%I_n59MsI9}n>g9_G;}RL{x)t@vp;=#Y(QEiH`qqMO{u6k8OGmZcpW#;eY`
z9HgK<)2+DK>~kHzTu*b&*(2&R6PooNfrYC_7Ri(j5&R`UTZUDWTe~MkyfVSlZi99+
z7o3dp09H%NQ=VZKjhy!h?`uI;hQZi$CgS|XSDVAys>t(SlFej5U+sVY3|Q&myRWD&
z8}qmi&!4-dYpaTb(?U$ShLd$G9p)v(!6EYC5HC|~YH&!h?$nrmX(!v%m}YGuQ9b?J
zop-Vs>iiE^HfUHGWrd<~YrP<akWgsxNAl5ijV;q@802z<U_)ax&gfgBT*@B2b^dUy
z{q1cAj0FP8bHa|hy@Si_@uU<7UZJa{H)$?rt4>DA!ypRsh;G%lA=tbci^0B1W`NQI
z3qa0+86f|_iW`C~Uo6G3=6S7$+KT~-9iQK}Z_k+7?(#Cq<=DNAyaPpXb&zIHL<RP~
zPB6jZMgxn^tPGfA@rRVKn&okQxfJO2v>?NKkwZ?NFI9X(Y9W;Z0N8Q!nQXWV9m`?b
zFtT-Xl;wP_`4BRJe=~u<Fo8cOD`(Bf_O+}AC8h?kz6LR7##e7zqr61JcbayZwmd1$
zpz>$al3VNTo!2zBUHhyX&u)E_LvHKh&nEHwrUUmyh3j-^DoD4Xps@ga?^}L7b62@*
zlCbJE1S8d>_7EwTpZ-y9_3o$6boI?ujxCx!jE!XK@M;DI2EOn0E)p6wzm7o8WXfb>
z9(SqVa@bT8QPZf}q8=4tp640niGq2Hz~_u=V-N9%PSN)3C7+y<EzvDml+Lr&eXXC-
zD^2y1Yt07*)_>FcYHFrxrmCSYpO(xA@{^xWt{Wh!=CI5HKnKq^K#6S!Z3HPwM+(Lc
z_4{ji8vOB^i^_8V@ny?7a~_+x;k<m__{1q?U0rb-gOrIT?tC{$+?0lru9k?60kw?*
zSFNs=i;aQ9Z`kL%)$(R>8>yEKCk^8!`<sqf-hC8Enj(F<RZ?KtmNM$|^-{zhSlk$Y
ziEH_Z4b>9k6q}yd)PZj>MJt&|AGIzuVW@V44jK(+-KbqHMcF*3NQLV4YgTcW(rc=1
z4u>UU58jzZK2r)I)f6(d>KXt8lRdt0^vx)ROxAnNF6&gH>4>YR3)A3RWte7syHVd|
zg-i-gUkRP=mQkcE+bw=O7b^8mUX~-Iwpw%)DN-#BE$d4Wv+*tVnbO~-AhO-i8%(LF
z^s}U{`UV2m4(Jx9YWHY{0W9n*WfN@d>*~0cE%r5v@oW3=YDqw>Ip<}dul{NNNhcQ`
z*Kkn5op1LsIPeg;GEaX=YyaIM|B{$y`Rn^wu~jy`Hz8vSRCH}=(Ni~gM5NDx3<B>Q
z0{E8RoV6CoE>iMjl)1C!NY8SGWj=HMc{{?<BM7g&)pY4?Z3k5Aw#!Ufu{e)3s7(m1
zcT>y*p4S`gz1tvtKl4+<rNmWDRuyz8ff;&s8E-+gWl*R_t2q;RHFt?#w8N^Rq85fF
z7`Waw!mH6<#{WgNn5qvrg<MGtf_ZD0J4bQ0yuR?%db#?{G(3>ko9fHb2P%z$Hiv#n
zjbw)RehL?!?@WX2B_bCA=YsS!?FA|cFM!v!qn!?<mpwZ7*oqr)W`+AtLnWpwjUyas
zXEwFxdZq1M(V80jFZ4h;S7noMVsN>;d!7<yLk8oDZuHU!AwB!m;#I(!{ft5~W8ud|
z{+z>SwfU3wv3^FY8J<utmei)`3~I8T!KpqvtsYY&mc9EhPiC0*)^y2*zeu_x?Qm2&
zFKBt<uq5>&LpXORte2&-)Jot00S^n0OuDozoGp)tQnLV1zPm0y_lW>~$fa(7!px83
ze#8+U8#-=E<M_#UW?cT`Odm$O+mf!$yWx2^7GDi?5Fptaz;x*Z)l}-8iZK2bt-ohj
z_Go;W<Vee1TQ(*vstix>{*7s!#tgi8qyi4TG+mpxem&=2bI+4lKYwZ9b$*sRLH~Aw
zBKGh`)j2tejiF9gX1J_qR`o~lR{VyIjf<ozaWlz=h23VhXy5D>^DTY5{pYIEKBU2h
z5ntKpfsEyn@;B21@3&+{mz@2Wrn+o5%u0NT#;>7gc8!yq@rFuM(OOp7bt7*(Epk@a
zH5#{TDU^NrbIZ^o-jYSUO(`9Dq5&)@`cf^Ckj@4&7Y3Pw1hwM7qo_RJ%9WtjBFTP}
zsX>w>Y6+5)@Q^27JjNZzn+}g|pr!&#EUw(*@jB;je@c^-UU)9JIz@WjDq9~G)F4jS
zozX_&!(YVIhTMh>W#^fS)bL2lS_2n`_hr&kU;7E4!=cZ7+}??>8(zIXo~T&MXPK10
zIeo^9d2d(Tn0T9zb=b|oL6UV7cd?$;!%%^j)uQQhB6!^2vl=JY%}`N~wh}kk&ESZi
zr5~syDks@Pp*6QO^QpcStTKAuE9KjA94w_ak4w?_Gqjy+!VcFiJscf}Vr#Z-I@$W#
za1A&QC-<-Rt#Gd0_m0}NTee*Y@-VPlkR4u>9o|?mu}^St>Ny;$)2DBTelssF-#+&o
z-**__r*`#rtns3OB;8(fz1Q&P4Y)-Ifs3|(fDte;U!~>R+0(q3TVj}7;+R_^w0F$e
z<FHWD8@(Ps)iUAN;(0%I7WZy;>J%eq%WV8~`YW`e@5?GUPcLP;cU_~tMCjd?Vu2^`
z$NrLow_9mBrvwsP4B;ac41!`Zu71Abm)PCJ*eZkUDuWK-cXF%~Pa+~oBJ7?D3Oqn+
zuPSiHBAsy^MddpTJW{B#H#*}OPmr<jniWDQhy5x4s#{e7tgiN}6-Dw(XzEcVkT~uQ
zUxh`q_C~a#bsJKAYE3n*D3~dc-h({xb_@IF`haQGWNNTM%uKm7VZj4PFqfnSuZM3-
zX*yCBRMNO|_<Vok)^xT&yN)T*KHMVhFEsI&x=%8A9x?Y)(jKk54LOJJ0oW>O;2b_P
zN&DWgxyY`EW!{dbFs&8UURniNkD!dFW8?@BNV-fB45!ehR<~J?T;&K*eA+ylcXuq2
zg++I_M&+UR#5YVw@%Dmia*gWGQj_tK`OW<YSYs>G-U)nk6QXvPqX}bD0k><a>qDgR
zSyaGuD$XquJzV%i4DZwz^jCkH+h{4|8PLfI+f9atrpd&ov9f&)>#ixIP35IcRlvWF
zCb)JF^W}eXeIDjJo%D)Na&;!48%!N$hK%3mMH_9;<ZNdaW=tWsH>YkoU4Y;0Md$7&
zx0lKYwyo+eaoFkMqBC@p<A`QzeO1t1?hvMHMhj5*Tm;!qT}kbzaNkQ+E+OfQf5cZ%
zK(Ym_n{l=as_8ekiBrg<qL&dW<=8)J&^-na*hInddF#GR%}D6xD(M>ghN)wRsmJ9}
zQ8VmUrkvrXOps$A@-I2&@v@sOMvE;@n3>C_$tU`~P}8*}aBQsCPnih)rF`K_VO6ny
z5%!ishH&oPRib>@+eQ43O}=qH)73o(DlhZJ`s43t)vn^?!&DY0vdm@uzcAg(6r3@n
zv?;VH4DCOv`zle1ov+m&pV<q_q*e1GFS+`>fIr(rSLG&0^M%RxU4cZSUl{PV?-TIB
zV@fwrOFIyi#K<p|vp^aKB%mEo_{><}DA71fH(<}Mm1W*|MLP&74Ab{b{SIN!DHrVr
z!ekOll&bW7vBDgqbdT+M8dqP&m55jAQ+?TherBBx(gd<u)5ThSskwY*bINXWik&xn
z{TtIskE)9$k{!Z03FyAbCyH{aU3JKZ@uYnYS-?9#jG-taFVTmIU6n*DC~FWw-~xA;
zRyy~)H|_AyliI`i@_6d|;P&&~`_NHUx1^Qn<byFV{I-7NhmMiY%stzg(`tUy6}_+O
zhWxG629E2^6OoXH{Ey|O>8g#24A9Ibih1^Fey6kJrZQ>}vY-@=|B%a##LLPnEsctG
zLpIrViGxGdXF>WAn|CB)7b?5J3jLh=m@`bpy`#KLc0HOY4txUkXW`niEu@pDxI&}#
z8Xj$cyXEKe-+)@vZMIib7Vlf=(Gl&F?A!e^J~=T_D+|DP-J!dCo`uXkVjae1Dri8l
zQ)S4zQ0Bqxb)kKs$QfVQBJ}Zqwp6;R<+82Y`P}nJI}!K!BC3dYK4x%*_-Q*PhDGi$
zFHjCpn-)i~yJg)PK5iR*U2xv2Uuf9&)zYqa$%C|HGY3E!Dk8h;cKg9F2&s~+S>=kN
zybSuLGDdVj=b-ZN6msQXC91V$Mnpp}dk(SPXmeIJdUQSP>b&8#x5I6>i&*Dd<~TmO
z!vXs-^KBVM=iWy9F=sAaYtc+}we(!1MRKI+2g{4&HMVoz4c*11gK=Qpa@pY|E;J2X
z%_Utx>%AA}7l_{Jcdh6+d_Dk5^qNT=wXXwR8+`Z??3GDX=CbcO*VZoMOA`<XzH%LC
z{AiD>tkgcP^xS5qwr#3YbL8aIWJ}nt2Ek@jO*-;vQCz{9=*<%3#JYXngExN)4uTp!
z-C=t*m*Hx$+{|89z40}*){WN|{%X*BV`O`L;xcNY!xpd3$SKmO<gk=Oa5d@eZEJO%
zwm;k8VY&*+*QV=%sr)|b{5&ltjm0&Ut)v&yX%f*1;Vy}*W_OxSL)Dby6zaUhJIPG9
z>hJ;Mm`}hd0KlMql{HI%_`VNRv3y@5@}+C`<mogxH;Um(fun?jz_w-GW8{1QPY-8y
ztvG&>#e+c0%sYKd*V{ZmRa$P>LpN>>HQJEh|6)`!k5IL4zs#I_5<s8CYz`~|(#Onw
z{bT}p^N?U-SzM@pF(D%!m+yE~WGU5xSCL8qi<AO=9G|f+RgEf;QiJq9EFh|E)9Wn7
z0-1WptEv$a>tJ3a|6=gF>a3JdaPsiBwX6F6VpfBg8r4GeqKi5MJn0~Nz|DWxu&Ajy
zsUfM@@E~jP8DzS3pj8&;;ppV3j=Ye6z|H%;b+%O!+u6~>QLAgQc~OP;n{S8j>nI=%
zkVf^r!~PVMHfDZJC0FED<QCGO8JigkB|OwU)O7=SM0i994pYFSAll2U%dBoqj*W*5
zZXp$uS_LC#R3}ubR@b4IN}5|2N-(3Z?B_;1?HY>*{u5$yB6jT%xz?Sm{j9<zxc|nz
ztS>a{@LtMy(`ehMX!9cJDhb4K!*atinN;Z+$Z7kin%!i|Aapi^vpIrEYTxptxTtD*
zq%pK#wVm@4Vn{EypNq3v6dYViWBOQ`B7r&aN}0Kr6U)@D%gj?7PHsqK)lJG}cdVl4
ztg3gcs+TyaNm;8A(<ILgB?#o>Bro!k63=}GoBO0I|5>+`qju&U0E|~_?cdc%<Tk4e
zt)g~I84(U9x2NTudk1)_1E@jdy$Y*Z$Z8VPa6T9<GT^8c(z{%6DKZmt6HdAmh6@v|
z;ixVfLWQzmA19k6A7<<JE%s*G6>IP}zLkc@lyY>Dn|718m|_!8RleZ`I(F0JgTqu4
z*4ewbp=M+oLo5qKpiFN}&575gd4bw8BH%AxrgX4wS!h@SZFoX=L;`I@LPL)%ez&YV
z7+<cm8=nQ-Ez4SJ9?5;fV8+63x52%cWX9zHCau?wM2~o{^#1nnT1;8=KGbhj`Cj@?
zN#LA^wLgZ=w;1WJaVC!LoG?OUm?2X)K!Yw!gYJ_Cgro$(D8f3J>;q_>3s{s$me&{{
ze4)8PBnM?ooFto{EsRz}Pd4pwm<wC1;nxq5bK{inQqSlXHI34K5j~}Yn|2hzTZ3<F
zZAoi}?U#!&HP&q%!g~>wC?&T?-}BC7u`Y7Tlx#=JHkWr^EsD=hiD#k#zotj_2F*V6
zeO>G@tfTIWL~iSNCYyj14zU@$5G7BHPVPz#Ye%X7%N?Qkl^VIMf4E#PD($<9KYlHT
z>s@IsOw_MBw{QAkv%H_b<vZ0m&>0eQ^6yxvYmYu?)HW=*wuMhKPl+sxWWi7mP?@`K
zqpm3uf{FYF6Maf6gS}&~y%X5#Jkw{4(BVKh5Hi#Htu@H3>mXsTeZU|)wHb5q<6iX=
zRcC=ci`_>e2g_DU7P}}S2MgacZwfwuo{23S2d)U2XdP^otL=R5QB4P3%2i!#Z?M@v
zXg%-+m3g;&i|y9s^EuOWtKJ^SdeB|ZoI~L=KOdIZ+i*6it=qp6F;t2KtR27iu{-v@
z0fjNFU{tnd6=sE>V!_gjOhvkcyR>Nz$VRRnjXr|BwOc&wKV9dd*(V#mF&|~hb4uNM
zxq1F6n2^l*^Ya%ts}|jFM97?<aJ;~Q%3#`TE<zVU`1u*G=Lg3JD&Qrfmi8jjLqiTN
zb|Zcxe#m!^@<ZWGt*df%uw_-sknr@7g<tsl@PU_(oQ}!@n_Zh-%w0bHJ~F(#V%%bu
zqJ8OIK7oy|=~9<dmqDa1VKRiqA;X-f5A!l_rVS}DkDuuIZAO(!G0y_*oNudC%hWgO
z=d|s$4~^Z7MaRg$Csvoas7LZHk&oVK=}uSqWw=r8^6T&)@9t0S4@Hzdhx9U6^A)2_
zx!V>3Rz{Dr-tD&jxPMhP?Eul(Z_KUP8kq>09}n3A;oN156$#47IdHJea<DZf)T~?H
z9o|IDR3)G9!8uMj)Qaym?lwyA*Y9QWWiXYJ+K4<>Vmn?8Jocf!(C5V&!Wq&82XY`8
z73Fm#1#)PZKHOgU8jk5ha-mqO%)V<rPg`1l6RaL2xU;N^d><z^xw!~2V}t?Y$Mm0X
zD$PvAu+>-Dvvb)|T;59ErkBl~Aw55j87uNLDCN1Y*q9%;z8cn@k5<3nz|U<9D!*3t
z2chpqBq!Pkoe!FOgZ)Bb^T|u&JTPp3CX&8}P(6{iIh*&4v1eP-d$n(k40qdYymW_~
zs#`5<Zmj&7Jj5v7Y-8K9M-r97ln#q89iysm0$$xR<gcehXPv#j5}v&h`O&BWHE0i|
zn;G=4vM;_%WW1y(;Dx9_4%ZJNavcl`56i1JY({u;H^ms1rb=Lw&_`%#={be3c6-hr
znd_wOv$mV+Vbrx|H5nDakCy$K3%B@zbx6?#(1bk$`do#BYVSnGwKVtp0Ffn~J4YqL
zc73BlqY8l$vet_E``D9vn3za4$X{y8YCFb)64uPyE=qTrWMSwVDwIQ_0k_nsC*6tt
zoLKQCM$-%*k4BVx6Z<xnRjkXftze&U=Q1>g@UxN2YbC2zky@*mx*e5ktxb~tg&mAB
z+-;V#k0Vz^vgJ$@qt3;4P{-x!q;{#=5!1uvip^!$I{C5bK@O5_Y3oz?M1j&>ZN<;g
z8;uxMu>p=+FD?xat67!JDHEY{!GTVy42x6UQu<p(MRyvqSs^z~?}#6V#aoke+mZMx
z1{Rr4Gl;&?Kv4Ne713qMolxmHOUB)Yfs=vdPkpci!Sbrjo!B{Fi@uqAMv)Nzb)`%m
z(mbUxUr?X_<kkMC8<~oe^EvOasuJk~nxg0fe@6+0vbBvAP8}gxf5{AA|LUz3(!QHH
z60?}bVyIAC4(PC|&KC;4veRjE(H_yfb;l*}PWKx!inboDs@>M2F&B%_<h6_`fjS)9
z)7+lV-j#`w99L0AFy?&jlz8TzZX%m*B9s1;|M|JK8T|BMYaHfYsyu4&`lWJ~wJ}?4
zLD?}yShOwcs3IT6&|@FaT$}>|L+>STle3KLTH<!^i}5JE9EzB92#XbLK*wx-1gvyG
znFidN`JyuF*DwA01drwNQ=Ct?jOZ#IjbWqKR-Ct6!9q#3`O6|BAn{X@u8p=<x;4n!
zMw@Ty0$3@|8`cj@5>+@DE$kP$q-<nZRypYRNb)`@+sM4Z06q-%5Bh01;Oo2nBJbN5
z;$jlKPy8Ag#NHkBH?L>5NcZO8CaAE8Z``#QNqxmlXg&jT8(I`Cl<;pD-ac*A5>uAS
z!}=_Az60zN)jODhCkUMzY()Fgz^K%O!ctl%Xb4{1a^>cUS>~PfMJm(Dhe%9D(dJOI
z<GH;EE25B<Sd=rhsqdc1pi6XkuHqWfJ(@x1r<iadptQP`i7!?k|C{yVi*3o=q|+Y%
ze{{VCP#jCt26`hvf-eLJZo%E%7k7et&|tx3(crc$Ebat%cb6au?ry<03yZry?)~e3
zRj=y(TVH*1PM<S9TU|5LGt;O0xMufHIDB$ZiT@>_N(K9dBLI`%$)tmxJL3q@{U^Cb
z0mm^uxscIn&q+|hzL*)1_BZKAIy7Rh*s?ag+?~r?7qz)+E3M274hNd1`<n!#9Bv1i
zkbgzo84~8k(Ne!;zX_2{2P?=W04`fOc_|eKX-U}3ai=Xb`%XC-bMwKnzv55dky?Iw
zQE__Nr~zh{%#Uh>q}-Y^H0X)y@BM6JFkOC^gy<3`P0Gs9q;fJ+YRk~PWCwlk_fiD~
zVG?_dty^3})YFm9YITXnG~48_$7G)(&H~RL&<jlN`1L@UX`x9)ZxoF}&mZ*{m<0;Q
z;z1Xf7s=~^nsCxzamn-2-YBcnLUELjud@nGel%a8^~-mEH@HJOD=_&{e1Wzj-z`oI
zC;0X9y#EPK@Ri!3vGM}#BF;aM_vKj1|Kry6KW^s#<MwTuEspN-wQ`{eh5Y~6!!OW2
zy;Sp`oh)#CnqX4T`_)+i0fp-SY~;OP#amc}%ig_KN$mQLTgYZwbAf~o?fTw3O~4Ku
z^h1vakOy1z%cfuC#UujA{Rs~MO!+m)a@7)wa2~n%r=am^lS#Qdv^&r>=(^N{Q^T$V
zj6z7iE%CrfR#3)AsV)<$J6#+{Z!X0QlB6^q3@ealld|5J>nhh0BBYC_rIwhssF1A#
zU&<wOklI*D)kAIR9syaFzOw0Q4p#Mr!ApT4x_U0x_ME(W@V#8ZDXGA;HIy-5*u^4I
z76Lx|OP?>?HbNgeKb=2iFzB60VJ=cPx-zz+RRk&q(YgAp$|m3bxWzv3sFn=^zY;JW
z{Qhzdi0{jbMX1UI%_gj4=YUa4>HMff3Gud4vZ0^ggf^e3fe)OLpR~Q@<1I4fD!{m>
zim~$X7pb3qrvkdcgr|zf^6_Aj(~)0L2~HP_I53Ix?_Yq}i^@;GZ(cSv1#%k-*>f}d
zr808W3fW*OV#e*suwnj&T+Zo&vgShQMboF>CAi%et=#dVDW3=fUk;lhOjyXPd1rEF
zQL(H>Sk9|CSe(i!I*@qE@WwK6`JWe~xJ)TV9DoVVX+~pk_s#oPOHvo-x5Dy^ZMXO-
zCZj^W;so#)IJKXkF}ybhO17##9W12a?If#!btLzE_#~7_`6&9caHBZ);{M_+;ON<~
zF~L8FcKSGh(oY05y)g6n&Rbu>L^b>3a!1}ol@EUKJE1Fk+hTTA?R0FcpRYL5@rb@_
ziLDFt{o>UnS_iS0&Lx&F$xTS>8t$x~cTl>5s#-j_F0!y{*dlSPPyDT)*iLsz%u`>^
zdDv@Mb}P8Uq?~ET<|I}RZADe}z@@YF3U~84*if0ytbCT(_D-%WJMee>Mpa$D-eW@7
zc|c-{!NuW8UB~!d|Nf1*nC_a?naPO6ODba#PBFx7jEQW)uXkwy$KSSd#^!=K{qy#+
zJ4LMaYBqB2O!j2PTdo592D_i=wu3O?q<7yR-7rTKZXFi_;P%tF6ce_Ze+%z$3DMlE
z&kZ!Qvu=8iL}spsS6F$4CI-VV6TGAR@2<_4#gbBf9-RxRijGy?cGGIi)tBpcpC5&r
zfzF=FpDk1n*<AN)@6TAnlJ2-f6p!x2)Xonie@oY1$SqBbJus_QKIDm|?Bco)-97wv
zRZW3?C7Z-L;46KUQ+~GQO4GTlT~RIWP+2E?%4$H^ZD|{QI=-mMQP!9L&6sBOcSzu=
zb3?RETTpD@eenw@Yb;VlOtR3}3sFliTR>B(J{Y;Q5V5`Ez*9JMq<G(bilVbZUn}x7
z?B8UUAnFBNdiDe@F(04lj=A7wvxO`e6<(9snCt%0zbf^P9{RK0akVrV{j5t0k4f|>
zU94XtZc?$mdDALM(g^WCxNUge%UP#Be#HPSzCh63D(s372Y@oCI3~`o$d?t@)v1pK
zmvcQoW1$R0Y3IE{zx3o$$zqs51Qd7aM2kEMzY%^T5-c42@*qtuoFB2HLIufC8uj3-
zT^8y8dhHGKPVo+)m|upislJt7-N}$kbZb0j-B{}??Xu~zep2<>cuhW_)g+eEIkA3x
zoz-bozhuvwL8CmwU64qnQSgDGFp-Liiu_DHN)Adzr9s3X4Sf0S#72AsFla={F-X6Z
zYk*&T1`?^10X9(|6P}k~6&vVAlDU;B$JbL2>)|t=<JoBfDc2pxT&{a1-G#=vPfgy1
zcS8GG`^RNE<p#528jjk}nw`>*iQeURHkZ7Y6SFIGVmilaV)^T({@R_2kD1=hcLe()
z`zGaBWhR>4d7?#6S$8dW*Za8pVkN3&CR#Zf&+2PMN3-;3>iCi6)9DI0I$Ab$p)CqC
zg_R5Ic@C57We&4f^Sm~WGa@VqJpah!gbzomF+!Tb?X_|D4|wJlR|#TV**5i|K2|M#
zMqI+#_Vr#xmGrA(`OLHb<o6AOc+7M#{sW7d4yl>Wzg(I_3NBQW1-IS2ZO0BJN=!*i
z`G{tw@@lF`eBXiDJa3{F@P!D~U5;u3v=0JqRD7dtF?=-2)2lRAo-QDh2e;{UhHqBS
zvEleiugTPWUi+OYzefKaKTi#<G?%28700hser<KI1YoXvQjju`V2t#$R=vjUOO2az
zMQ!dza)en-%)3F>C>~xauXgPD#R${mJY93@Ew+D4<`>`gz>s=jpcnMOZhK+3JuvAW
z*uW&&<>vIaS1BG$Ee(QBHZhyiL_LK(fr<whtcO-kHl4kNYsjo);O5U2rnAhZvxcU#
zZeBu#1YSIR>nebrs@9&WrQRx=o~l~Y1rpN*Zqo(uf86jNYkCRo(mL7eJJ}OC*{l4=
zF9PrXmhfyY-UXR|4l>{Ft!3z~J>6V9`e$e!1))#wWJA)@K;OcB7n<dAVy%8+y{ikO
z4w8;G%ZiO~7p3~xNdK|Xh20jwZp*=Lt6p&h=q(@UDF@Xq%f4;Lf7QM>U`q}lF+fM?
z5H41G*O+wn`tt-n?qgh)^DS1dn|6<ycE7CWX86K&p62NPDXXU4w!Qv(J^rny-;|K}
z*$MdB-|*L<^RuJzvt#hH<CCN!lcb{l$1gG}i7pR6`->YMKReyO4mHC6xl#Ye|5NgT
zpPl7D^~LQ)_}7Gx!%Jl+V3xzXVJASy5mlrj|1a<>Qt^2UasCAjnqB+=Dm}n12k2y~
z?qqt=E=Q#;5~+LqDd>&s_ct?JV}!#Ytvw-^$haOt_G%*9GLfd;eKkPZ8j~-J)VPb)
z?2Fa>^RiRbZon_OhBa!Jn>~5DOf+Vdi4lz&RPzdvFG>()^#4bHQQkc<zkOm3`F~yh
zEiz_7jn>989z%K&j4R1H^hLZHy-#dePhQ%*7^gN{q2IggpZU*7J<UkH%}c%i@(VyO
z=xM&~Z6<u-o@VKuW}5%-uMp)(h<DTU@dc^8BK*7}i##G;JS<*~>zmUJn-l+Gw83<s
zVe_Z$$)GysOY=CA?EWjE>%IBNiIG~fZrazd+2bAjW+v!y`up|t_jZl%)f&O28o~K(
zNF;NWn<e`_>T`klwr^$U-a*RVlgy26mVA37YdP31uRTh2X<FuHTDIyXCEr7=(AlGJ
z)1zN&T1jGB$^9QP|Kq<x5qyEwQ9;#bLHTW@BwB?0Wt<hSa8LI%kZu?WZpuE~FtY5`
zGmcu@RN&$gLPirq9m6oEt7z+c$H*Hd+#jFux@Z=+Yq9X24-x*!z{Y?B|3ELR>P?{^
zj_%!Fm(}Tp+T%#RMg=EHKPme+5G$SWK$HvOydn90Y2ioVm-xDmsMZfT*NW@$NlryK
zoj>isu=euyZ7;U1qi@!p6+Twi+)K8J&F#vebPYF{5hxpYhAQ1Ar?KzI;GltPXPE?7
zF^RnIKJ6oIVrwFC{nefTVXsgh->#1f2T>e1SQfHqChU4N(V@)JkFWHyg9onr*D2gP
zD(}^<Jpq;DK#TUemo<2AAc|O?52xiM_e1UE<cA(^0r@^^o;CNZX93L~0g<alasJ17
z*n!&{djafkZ@L55Sf=kK*B;xL+Kwrn$B(_+4G>R2N`>SsX$w@Q-(la;7<?I=k&Q64
zO&g!+Ch{-VN{-Y+y>fnOP{n$R0q=AuJ)Tc5W$PE($<*~5CCtc|hG~7N&lxv<Jq|fm
z{Xr+Feq>!AX-BIwneo5!toYCt#>8~{Xdpt?TA^M2hZH^1@~+%h1Shi1B$*>!hv|>V
z`N!j%<YBb_?2ZfLk+yNJ=j{;%wk?)UzNoV^AsvfH)u$1!LmcD|?&rv7`A){;j5U-f
z>xZH1#Mo=E!4Ypac+`*h2MwVv%4!`K)uF$07Y}nVyH@I=9-*iGtn~7|V+yV}eylZl
z_m@Y->&_P;%xl{QoX44^Rf5qqqiQ%aoib+S?;;Z!ZyQ5(gMc{1as@RRz<2#HI%A>J
ziOA<MJmGI!I=BI8H_eVrY_{Guwmg^V1`*`f0$WLb&>M@fbT+#^JF*4lNn!Pq;Rw~M
zwV-F|j_S4kgFBYfdSklmxkIF!NG~NUTRJ=PX_YB|86mBEy+iITJ`u@>LR=)VNH6(-
z`D`{X@wSu*x;i8Jindazw`H=krLw|b#V@SI6RpL4ttqZ+lBW{xzf$T(g#C^BhfF;d
zRXz4~E%^0m#QP}}zw7nyH+|oK^#PAAq`+ybhuA^nG#o*%j60FDJMgnRvS-EF!e|=R
zMw|+0_vP>K$5=iYo!EnJs!%n!TtCv3rd4Az-;|VX;l3nNXx>bjhIJC%6wXr5^->qA
zI=i1pBY9=K?obx#P=52jOx>aU0^AN|t``W)iwKLnc@Pw_ofY4|5CA@bfKL*@CuiVO
zC-yB0_HDS@u_*9~1NdazAb}1I_z3Mrf_9TayNRIzJX8U1r~;78{0YpSZ2KR)`yY7w
z9~Al@n9cl&&HVAq{4?yOqcAuE@XVen{zszu&qD0|hRpzKCN+92K3Xj?Y7(8=jmZ(f
zV)i81|De+Upx&XAAhSb0;KO6np@ZA&!vk=7#Yg#ig8FqV<?Cz8*Ri=11K5E>*ntMv
zfd_y<oqV?aDT0{4(XXkTM9hv|`q#Pl$0_%#WK{96-RZF1+X3z?*zQdKu@2>a({Jqp
zP0D?h+!P;d_ZPhiIO`zQT`m5?vz3znvQcEoN|<`@i{BzUuW%h610!&a7r15_(N+#{
zPx-gz*-EK@9sdQB9&}4~_E2^<>uo}c1mZvLAQg8Tdl?&A1Q_X<D-E*K+F={P0O~V*
z@(mGb<p3@ipmz_@t4-}O_P?kc{5xlUff~Up4a}h0QUaJS>T-t7)y*;2+UbsMiQC&q
z+S^F|$CCDheP5fuGz?kT>6_K@u<(LCh-KPQ^4FrKzDe5?0__Q9?U&GME!p~$U%f#0
zExDN@o7o7vnIf8*qLA5$u$khUJOzS01*AL$;yeYKJOzC9LX3Z5`63hBW5kwlMtf3H
z)d=xKkhw;Xl><av>fG5ZBgov*GgdW3lSY-jJw(n+``WR9atQHZGdJ1DIFOp`-nTV9
zDp(|TtlGi=`)hbb5F{ckA|WD2E<`R~E=(?4P6SFz^%#Nvi8JJv6IH(~!5~hWc!<~C
z>qwcmI5F>BBjV^Kbmc<4Zu(rP$|EXhrX?+Kp_M=nY)Sw|qz_?WzoH})VC&WUemX#e
zBPI5+bc^^7jub6B6(iNB+-4kS-1j(<0C~V~9Lm%5?0&{OQQ*tF572@h3INLB63SXo
zK^cHWxM|WBtk7E^K7g_|%pVCl2b>2iiHF>v-#Gw1aF(Pj!~k0Ze`B!)R6@Kky>V#%
zMy3=VQ%uVj0U;4#5zvUNh?EGqPZFOhb*Y#E$!O&vjgrwd@{5cJY>$M+=O2@dB)BT5
z#i1U5f}G@4kF={73@*R<sgchVU+DQ&c1di=ZkUM4iD`;Sis_4~h^dQ7iy4V2is^`%
zbjx*Xc1w2acdK+ubnA61cYp4FnKv6C7XS<}3{VJ=2~gR{J?3^oj_LhcL)?Kp6~|tH
zAt05NJ2kn$-ow7gKFU7LKFGe#{+oS{{U`eh`$SDo&0@`H&2-IR&3esL%|Ojs%}C9H
zQ;*Z4)2vh9q!qs%zhleSznqL<!ThDa+;=em^XXKMy_m~ET63{&@onsFr)~Oe-R-yA
z7Tet0O4}sn_0GA@k<P8oNzRqE11-N>=30KXth7vcO)lCBTM63;JJ|CXvm0}A&?d<{
z)}^l&{a~<CNUJN-{~TNzTiR_CXH#MmV$)!gX_IFYWz%MpY*S^^WdpS-wF$Lpw8^pw
zwyC$tuqn2Qwdsb(!6V=;@I*Kmo>}^H)@E;%sD8?x&u1)8;EPIz>z<%%erq-8JE#Vf
z3Mv4BK^>rYP#Gu;)C9@~1%hfpX`n(-45$;74~ho0gHk}%x8HATZcA=MTE~3neb;@b
zRxQ<a-SF!NY)%cRk_%|ee;e$xC@1?T2PRV{|4CL)u1$WQ{5#nuIW1Wr*=j^`1ZTu$
zgmFY)G1@Z0vfMJ<ve`0c_ebHJ%c#q=%kuQMR?}7s%L>Nwb=$_aN(sBs^g64`#(88r
za=U;7iUYNScL!e&_z!>w9}e6Om=6pOd=ID&G!9S?Y!3tvkPoa5cn?$#$PWAuC=UP!
z&Ib$!ga-n4;f*tcOWeHqW8cn~fd+laO}qB)O)>^1EB~yRuCTAjt$bYZTKTl1xq`l8
zzaqTydc|yob46i=XvKR)W(9x6V}*6ac;(f~mlgGu_XZh<6^9*%d6gqoH3tZ*_L-w*
zS%kdLV0QDuN(SN)@#atp@$)brVSb2<NI0B9a2>iL#;!uIXs&jzw5}Sj@b78wweK<S
zzuk-8OZb#Oral%tHgvA}_xk_t<=4dQ{JHNW6a-17-u)$LON#LlR{aE#faF2|kST~W
zBoe{^fkX5lt&m%YG^7xM2bqJoLogs?5C=#WL<I5(k%CY|wjrM(To6|XrfhM7t8J!C
z@fzGcYCMGNa8%$RGiJPN{MC5x_?L0$ILG+uxcqqOIN|uxIA|Pcd|=#iJZYTgCD}pD
zILr9qxY2m$_?z*c<N4#b<Ge6E7zie9ouc?>x^<Mbc;q;$CB6#GbX?}i(|Xs6+!odn
z)-KaJ*hbqz+g{Xa)wb7?ZiHr}XgFe2ZfIx3Ql(r~Sw&j4R^?X}T&2Chu^_)-qtkv6
zbP%86T)yhvJa_1Uvc};#oaMgIM!f2``nVRnDz!$vn!mQaio5oCb!M%8)phNBEqYaP
zjcK)f?O>I7HDhgMRcOs;^?ogURd#h~t$5XX6}C!xq=E&T@&c2!4;=tR-m5MroX>)Y
zMEpeF{LdE#5p&^fkp$t-B3#1tBIm+r!qFll!b~D|!UrP6A_l@MBJILHA}GS)BC;ZM
z!VcN>+2`5O*{s!l<>%?0D%Bgrr?j1fj_U@;4rf>Am=~C*nAeaq$fe4O%9YCb_{I1s
zuMdHDidTw{4rsyKpd+Khpi`)$z4N{UrL%I~d_7@(X5Hf$>6nIm`}6IEX!*n;+MQWf
zBHKavCC|;>&D}lnZP=a6jm-VvE$v;=P0_v8?cUwqJ^pR-o%W6P{roNO4ex!^t;gNf
z&DA~TE#wAruW~znGkz=Ro8>=VeM<c3(Y?TShx^nZ2CF{jySu+bxj}gu>zBP7x*58s
zyDh%6zOlZC-4fgo+^5{?+%4QJ-1FTv-!$KQ-d^8f-C*6v-l^WKJXk-%9tj?eUP+4+
zu%l$Y3ZTG|L*@+h{UJK};V;3*j~{V9l6}PcNc@uJha?q0l`s|eD<(5K^Lu8j3e*aW
zhPS*(O~@W^Jy5QYFp>4&485j%Q~c&I5G_zqg0=+pWf8m|LLbowgGx<#b&2iYUA@1;
z!bHWyfV_iXLeNyuRo<&$jiZiZjAOB)vSL)dtHP{8`}Xb|<~Ot>^rQDjSY)VV@5!*T
zQM2D?qj|g)k}{OT<qShmI?AEbNW#@vH3@9dFEKFQVPImQ#h}N$kHJz#RmK>5H-<Te
z#`2B@lLhT%g4+8^EC+Ol_YPQxsD~J&??^F8F|yt@hK`4ghqH#Y0Ygi0$MQa3L<2Y&
ztol22*?1!#`vbSIom==7NSIWx>7r-))3!)z^$h7*0V&bt{f%bPE%K|3N7$ax_x-_U
z<z7m{4B7ZA187@??6}&YmtX7_NioCB|7h|PS7Gpl+=twUqlAWs$%e>=4~5c&6^9gu
zTZh8JVBrLzDPcMxI^heUd?9?{&7q!Q*CE&8SfQ~YvEizr6Co3!LVZ~P*1X7%)K?LF
zR5CbFw@(D6(cCh3GRQz=*)VAtnL*&7EUk2rj1|yIc261~h%cKgtt~SToR{U5X#zIM
zdPrZ%U;;5^Au=k!Wh!fG7&QU4k-D@d0gr5!dH^?$vJBUhZ-eOaheHC=kEA%HWTbec
z#97!`Bw6@bgju)_5LPg2Bx`I{R8>q9kWac<#uMl%do7J6V~{_TN0(ome>jCUrN}{B
z6a_b*PZh!k515te@@f;?MO;Q+#$rTa#Kc6zKw_em!OD@!v13tVF=MeTQ7kc)5tWe2
zXom;~h(q)t_%QM?mNbeqk~B6eDl0N8+Pz<J+t3h~Z}8CB(GX0x1@~e#CU68_$6!TZ
zL9n7@!LgCCv8qw3F%uCJkcnuv2sQ{?bTzm-vO3lg>=@}7dmMEfLmoj6A&<$4Xdajt
zoETyoY{!WTVf~`QkNX7t1XZ%Yxdr;=F-);>uycIk5awXy;N_s?5a3|p;Nqa0%G6EO
zjn~cAP14QyDsQh~uZ)mGs2~(clp1IuG%B<zbj!E|I4Q%aoOnMyl(oUM{06sscrytb
zp58dq2~}~hXt`&->6GLX)gH3ri{PPeS^Ay>`6+WUHX`%^Dkq-9vpkv7D{s~xRWz$C
zbv?fP>5w*b(=v3@8taR1AW;lJ+iChIKwo?SP;ksbVe-mNydJX!kDs*rP|}<6Y!zMe
zH3ok=GA$IwyXpURKhPvdCgvgI`|C+$rC0SWWIHg?FcX&GE|T=qp7va^unW0Oy1?q+
zCpL-O(%v*qqE4v((RSND60W$@u@oX0vH`DR0O_;^Q(U(x-@~CO-mE6#MQ;`_RV;>H
zIggD>!#h^r7Noopd-K45QeH>24soR^<lUlGY#h^~^23T-S8Q|>F(ldTh`4y{k<A6Y
zYr!HS>#n0XjN4E4Blh0W++;RHCc>SrrVv4mnEwM>a?gI{uU8fz$~yBINUpZZNZC#(
z&`o(D&}sQtgOR@RW`?st&Sn|ntI{U9Oy&E!B<?cDqd+ec?J=z#DP2L2wCVNno2PeQ
z<CjCPK!P5N@23B<M9Js{3>wj^Ij$n<bw6UCFlpR2G`m_`US8>KR@V9ZlL;JHR(8L+
z`E+uiQN8zd#qX`n1=G<&5APCBMe?rL_Xkfoni=nHCjx}pUpmQi8w#1X(a;f5w0>Q4
z4wogPo(%<-zFRfg&ax$qTQ|hyRBtE4W78s}#K6CBHfX?AeU+67MLWU=&4wb}S(9Yo
zs|hk_v0J=b*W<#cr;%Tgbh-qWtO*jJAEp^B5LBL0mFb601SZ{6e&2eWcgeS@!}@jb
zpWsP;s3@cX58nM+jPY`iD(~4fyg+-~#^lbibUn%(yRm;tTYSS@R>~Dq?r;ZtGd@0>
zM2g5^_zONg<O5jZh@;f;WTW3v9h3Bud62oWbM_nkU!LcWat=tH2Yi;hlcMN$;zM4}
z6}i5)<)8+@bwtQT*G(4Abo~cAapN=UI-$I6g8WE`vv=0OZO}Lx+duciPT1JnC0`G|
z-nwZMz2cUaZS9r&c{L3%Qd$_+N69w`%pT;C+W3A!EUqg}hA$;y=ilYFU`QATxlRxl
z?Bb_j&JD_j>ca^N-4=8#z5QM#U7$`Gd~oY8w0t~a`0BJ?WfO1wM;7ZjWA@x;rMAY0
zc|S(l;e!L)B`f>=iJNBLQ#98$SKU=Qbr#h9&HX<pTl9O%g0l4{;wrY$lhsk@q>T-;
zT`WlcQprQqm%8aWp<~SYScU;p1m0pdJ1CmtJk(j&Vl|vOzA&ScjRdt*;=jj9l)_PY
z(n;G3)!+f>I;&!U!hDy=k9co31IxvGLFcv#F{J=inv3t!Vu#TSaWMU1#OJ)gOL}kW
zh3~=@fvY(9(0g%pZ7b)hRu3hU;60N_oA;%${nNKwyn4}UWBz(=ALelC__{w+%aVyI
zaa`rzB;X)Q_d-1#Ne5&K5*8x4&lnR5tD8dt2&P*v%{d<$(2r9Jzc_qlmbYFx7}Uk`
zx_$|mAYuIp<t)gaz@-80EMAd+uS=8s<KxNftzEdd`eu6Zp|*Svx^2Gjz3`TtzL!B~
zzCOTbWAXM?lB-rhm-m!;H#|#j3Hizb>t;VGKx;?JTfXE+ZPR(qcSt$en30|dxEtHk
zb<b|_AqjfOQW$;8X7A3B^Rr_v_{oo&*vtA>r<zayP2y)pPQ@lqTUH?j5VD}>2IUu3
zcgfn1l)O&~weXj)1A!}lYe#D_AB>w>9_kowvGXGyU&47q>n9DM7>xQDlBp6_goU$Y
zVni5CLc6;}Z!Qm#9=6l!^kg2~e*W_7>8#UqD&+>N$L!M+o5Yb7q4r}r)Mc{+CWaL4
zN@ev{T3-^fd`Ko7KtxIax@i^JB-+WXJwc^7^wBh7q1-i(_H}0n`|dXT47i1J5$wkV
z^K8jpeLtzbQ8mVB4fpPm){zk$a!yn(L^mMUOJ4_Al92)LP$oB!3MMFe7zuLTeWx*J
zSdk}0A0G49>Z5XXSJH;Lc?>>i>};9FFa%48&`SrRY^TPRDb4k;m#vqrd@SBqnR6P<
z7tHq#X84??(>bPDA~=Uyq+h9lrqsFogO^L$Hf4G2LMwchp(v*ZO_&R)_MUMsKS+C$
zQwr&f+%?wp19+6Zmv%AL2PtLKEDVj1^5-g@CfeNSJ4&{lwENJE(2O*wWbkB<FvSJF
zH&=d$zogind0$pv*67ziihU`mv1sQZpwW+ioc}oQ;r7+{)sO0aX|Bn*EjZ~o5$1vz
zKF**|6c8fcrx&GWq<R;<7E00nGBM5UDs)?Jg&f~aqJ6f&PHryRdqLGrDtiW@3urcV
z2zYZ&c((9s)RgRtH&@O}5r--}TAJwS`KUw@n`^`ahMB+A(~+6K;uA6#8<%Wadz$&q
zasKFW8t$mt9{MfuV5Yh9Xr~wX!<UZJM}dwZkzl_FzX(u>U$S3v+V7^?YK|P(w{0@3
zt{y)~Mz4J@0ZOxr$!1rN@EDJ)iB*$xtZOXSN^9t<<Q{Bwp|zSzsKwD`B+a@dX;ooQ
z?`UW>HqB_2_DFtD;2ZHZ*B-$t*Q)F2`6^qh3Fm$5o7Go)NJs3~#C!j|ECgz~M{$jE
z^ywVOGu<ca7UP=kNOjb))uSp)pzo#Q=;;`BcOo4<ZizPJbIpW#L2R~@I^sbw3nxT-
z+%{&^=Yo!~wNc`Z94t=Q?MHI+^(|cAAo%9-_Obc;-ZAXhn)NJaXNV(UmwboZ;%QK9
zRBY7kEC(hw@sRb*+Z_hq>YfP58Tj_DB7NhRqXo}H!b3tu@<w0x@II=eb-g=kr{u(X
zMGbw0eP>^;Qw;`cO5fOe*$IQMy`!`o;7i7bxu}fAt|$Y%7(`YS?Z7`*)KP&^y$GiP
zwE?xOz&=m>MRkSt>2ZH0xVrb^)bMxCQGY{1ox#W)@0>HytIwfq%r)Cd6Aafi&xH?J
zXK(K}hIx1G5K_YnN!F1$7s++Oek~{Ns8_C`szf!hC16Hsq57Juw8sv{B88fIRFhX0
z-6d6O8$ZX@1C&Iv9--c0cQC~HK5Q<9Ut+Bk(6UYxY=!5UviEG`-}ll7R)C^}OcsZd
z4kqmvgolh~g{y6L3C93qBOQ9@QF~Y&TCNJ`vg`Q*m7w5jye_Yy@J1_#5LH|A<+lNf
zU!JwP)HCL_&pR7=mIa?M9Xgw^0*afeuQ2^fu6`~H-F{h){fcsWjd%57?|4D<hu?Sd
za?;AI-hjFj9wGmxmx(X}4<v{A%d)qv%R>#Zr?Ix(6@EcE#YP22{bE%{6-Iq*ldN;B
zyWM$@MOPUQd3`B|H`TV+wkDh1rGDx@5zmmTnx>@Zsw>OG;~Spk4ZDDe=N~7QLjHb#
zMm&6@uiOt09%K%48b}{h-B^t>pIfUG7J7~sc=p3iWZk9Q^Kbav^WAZ86+@d_@od-Z
zUnYVmHfuKPL+2}}M9N!QYdmANjMt3UL<b`JR+ger+}QRpnPdpMREj^A3+4M5oXW46
zxMxL8yz>j~iV6>Xc{BJh6AJB<8-Rsy^nDya|C7*1hZp;9JM=Uvt*<y#l}VIM_>*u!
zDvc6e5n~sHFeS6*C_X;ghT15A_nnybOFocLhp5|7cbX`=kj}p94<-O(Y-2Uwm@htK
z`;Ap6ynMBUykQ)ppE$$ixS*lHWNbYZ3p{8eP(Q++sxIjlCRKYRg4!icjtOcGRKXFb
z)VI~O)V2G{Vb5vLgJ4JSBDhGn8;Br;Dnu&8%NPXcDPVN?H}Cwpzr4sX9OlERJo7}v
zU_bC<OfXm~h8mn7vkk_L`3#<ksRz5poX13i6=Rsd<uM0fVsJ*x3Roz{2YeqB4weNE
z#T0|B!7woCpbD<_bSjv({kI*C^83%riClAOM9O~3Z<K<Se=1Qcn=5TACn$YZ=2EIx
zK376hidG&`Vp6tKI#4E7Hc(noZddYAMo|h^mQ|)xaww`VIxmVYVy*A1;K~?Nsox;s
zpc^A}T{m?6#(B+!#f`;*#TUyN%cIJ!%B#vX!9BsjmqC!8lA4mCleUm<Fq$!HFeWtG
zK6XEfGFG`~zL&5!v*&S+bWVe2uC8~1Uq0aQUf(P^k;bmHkz4mp_s#%WFHB!XSH@sa
zk5<1(x5&UsZ%=>E0ADXzUt3q(U|x?`m)D?4&qM!8_sRfM526b(P|+LL9oG|N&e9$)
zt0k)RC|_XI$DMEBv97G=)xXzA(M2%`*OS#B(j79O(<|1u*0nZ(=@IA>7^LXEMCs}-
z81U&g>oyyB>Rsz&>0%kg>Z|ImR9IKSDhVo$cte$~xmGfHyIIT>mpPj{D%a;N4y=j4
z5}Of!Beo>A%P`Hb&#=m{$uPHTVrgKhWofRgt88ps<Xvi7_E_{-xmv<p)^`}Pr*kNF
zIBY^|QuG+CsyjH;ZeJm57(y`k%p2P|)?C+KH)GXdHOAJ&HpSMfHmKIBHc!+|G)^?L
z)v+~J*HkxE*E`lYHaXTGHyqa<H<Q<q*OE8q)aBIX)O#)pk!DJ5vkM|HtEJpNk=V$N
ztHZv!UAUt=p?jdag5AK*U{56%CHGOMQIAnqW+!G3X4eY03g-$>dpCP$dryQ5!kxs4
z#Dl~=)2TsVTyR{7Rj@4+wRqgdLomzVx<Ad$DidVgS^s-!LSRy$Utm>WSYTeDS71qC
zOkhS}XbEBX*Ko`5$Z*&2z~1?r%QyEUrz4LeS2DLI!B_!RK~<rZEP~7wL$KoRbbAGB
zGt=LwR*kBP^7*;V{q6l@q8*}rqCZ53M6mR~>09YX>AUF%>Bssz`uqBS^bhr6%bUxH
z<-KM2^7itv;Ev#y;E~|2;I<%a-^smApn1^2ZDq~4`L9aL%u#0h_}bs21F}sr1lb-L
zoNSxyID031Kl@MiVK&To(->jAXAC#qHa=eeyS}x4w7$E3Ai61v5ZxF3^UXEKJ;&3;
z%@g#2ENcki?ER1(K?ncsb(Za|noyi${lhxKy2U!ty23ihy3RV?y2u(*yi`9~-(SC4
zKU_aQv$eFdw7>Lc>2L`q@Ym*&<UI2t^Qysz)r%EGSUp^Rt>5|0agzAFs6)@OvblF<
zXk|m_m(Z+GpU|?<xX_f)fY6%Ih|q%2M*FY!+4jEn<@WLR-u9*TvG$qvq4o`*Uq1al
zt3Ja%gFfRce-1C4MPnxZ*57xCPNkd_`U#k1RZlG}@b&O5@{RIM^9}N?^Zn+V<NL|C
z!Z*>})4bR`+C1Gn*u366)jZI=);!X@;MwE3=sD}zx3DL4AavaR_u!1_L9l!2_~QN%
z5HOu{3VXbKq74vx7JtTmc6z3N)_s2aZ1K$ftn^G0P#=&R5E;-KkQ7kaJ<$ETd#?Lu
z_sUC8J-M+jwkHM`J9NA@IWa+Hf2Ac(UW2?EXi9-Ehg281EH3p!^+$lIn(0?lpsAaw
zp{bdvf~mKuw&^!he^Yf+8&m0*5PBn1DN|Qd15;~LRnve?wN1HAuT9NOrA@;h)c-Dr
zoc@F3E0%Y#89P7;#kIH1)V#*gN!-cFN!Q83Ny*9ANyEw3Nyf>;$=FH4$=ONI$<j&L
z$<N8$Nzuv2Nyo|YMEu0*<m(BrhQ*85OVo>F5l<t;jnefO;aNCUt_3~raQMEIa;|@F
zU@m3upIr6a+T8cKzjJMJ({crJ_a^%$<0sE1%O;oA6u*A{YWG$4tLImfzosQTZp?0+
zZi2I9ZP;y}IP(-{qqV14kOxvzaq7(~7b&g)_tC-qxm)j?8~9Z+=~V#5(e?eUTfWZF
z7EMFSD*S~=;{LHMUgzQ#*;O_&oY;t=fzMlnr<seC9$~FDwD#yLKi6wMs)Wq^F>GO7
z{dh!7hD}C7hEGOFhD%1C{UMtu8<0(!P4Lo1kr?9}6B^?hldpeV$5|&^$6F^B#TF$I
zB@zXEL(9R)!7@Sjl>PuP>L+oQd4S4&BK!?JgWkz~E-<k$wUD#$ve2}!w~(}OvCy}$
zvQQ}ysAI4DR3}`=SjRh!v-Dw!XbG@Hx<nxG(I$o@Iuo1;X^>?FvP!3wFqXyY=O2A#
zCyFl0Tl(tIK)Fn}EG9@V$Sp`EC@9D($RS80C?d!t$R{Y)M&HKWM%5<R#@a^NCeX&x
z#??mGCgx4={mEO{o6(!rn{^p*2zKUB9{pH9)WN}#98qZAs%uoiG0(?K!OPFf%*)A3
z%PY#uz{|r+%`3#q)<n_7-^AR+*+knU+QiXB(<IWw)WqjO;lc00?Ljq<FGMUv-v03*
zifOB@Mc@d0zYX=`%#MU@U!E3ub>H;d#NC|Sl-w-dgxu`hG~A5dWO}*!e({y}1^H_E
zI&{!<F?8{CQFjS-vH7#F6N%xA5sHyI#+pQ!D6qfRlFX^0U5zxQN|vLki(Cdu<*DWc
zn5mh4H3OQtnHidynJJign`xVUGxIl7H?uL5Hgh*KGLtfMH8U`?Hd8eV*ize)+w$7d
z+)~;y%%h&t8%(kp23uZnI;QC+(<`Rz4(|^Wjoc+;&=VW-R@hrCrPiHVCJYxPkI`os
z@mAYQEN#_US~88yCswkp=r$GF`z%$}by}hfW2TU@2&vC&do&?@mj>#p3aCmI(-X!E
z#0ceS6Vfb1^>XYLt`sqqFy%2-Aqo&>6*(0Z6~%F-ad}=k0@{>MDReqC3$zCD8Sw@Q
zLh<bh_wgtRmA}n@C;XoIeYF$1Q|MA;s8z+*oZLPVyjy#w32N$S>d5U-1wEfh>`INu
zCdRUo>xkC+D%@V2>Fv6Xz*5*4P4v6+eBE!`&M<Z}Mw*k3nKwRnbw8-xLeI8$i-#u?
zbC{0lkCmJml!sI6iaQuMlH>|Mw`v-dam?}YQ1I~cF!ONo(DI1#F!1p3Q1b}!ur*RN
z@;5R!ayHU7iZ*gI(lm-RGBxtKQ@HcHbGuW`B@1Q<=Cq~mm#Jy~WgNvDM-7lJpwfeu
z{?eJ%;nun+|ESARVCFSY5><<b%SfxERGzBGQJmLm_GKVGY8S7ZabCMY)4ps`zc$~@
zbD%3K7_Sm<h*3p5v+8Sgi<&dTSb>&}-*UP~aWGt0FloHVZUzG`3V(u2z;odM_!Qh3
z9tmfF!{K`HR`@Mk8eRy;gU`X;;TZ5SxC1;3E&_jqOTnq(+wjkDF1RZk;$}^wQ(DTc
zz0A~^WM-MiX_Qu8QEp#>FcA3R;<Q^c3{5g;9MVxK%hVUhck$Tm7)DBpW=hejsxbWA
z+T~)tn>>7&)XsRVO;#do2x>S3S{m#w4WB0wFtu|=fmzMR`MI8yJ|&D=aNa8U6*0`P
zaj|oK;u7X!<l^O`<PzXw;o{<=o5|Em)r;55)=SdMu=#C2Y(Iwhg&0SSkc>81K`d3Q
zRIHb|2sl&9QW>?9x`y?4t5CHE$~3f=%9hK*%0#su%aOG(Dv8v2+H4Ky`pX!!X3DL!
z#wycI8cS?#=Az2xv<}L6H65y!wHxbgRp*|{q_kwqAUauPf}h>1%JR#&Ml5;s%;&Q&
ztp@C=GRF7n+?NLJHxS<un~0j1Kaz^LK@=cn5nu!Y(SZm;Y$56p!-#am9byoXjJQHn
zA=VLrh(CxaM5MjJmHn0Pm044{zItUjuZ~dp;~aF~!o5h)#K>e#bFJFj^fGS$&s=`l
zkhW?`wxLL+x7B6l{@#A*oMKsuPIZ~F!J0;AskhxFWPfe$z6?vdS)06ERL`%it@BRu
zvXCU<^X`R!-FOz-o>{9VYexAP&(7V>9SnIlY)@uK1~#}$yH~VR1hd-R+uMWT?<VhQ
z?`Xs3cX@YsVNJUpdsjPGFw9-Z4g{vMJH9i%E9jENV;EC3sB2z*Iv>FkneL`sRa8|}
zTjV(QJ-wIbr>)F9xRlU@tJKPN44l5ib8d@2%Uq?WU0-LVJa(5J!((9Ew16mEGI0H|
z=QK8zj?3e~V{JFSU|0bkW;$!@5I7#aKZp8q=KO}8U)~n^c0cqy#66rmlsqgxggop#
zG(3zxWcs@LfAN?12l;FHJ9N=>GrVLWq3#yyW(#27NEb^MOB2g-oG|%ivOjR~vgYb_
z-IdEVDn9Rr!*y*hsmD&!=KEorD%Dp@NNcJl?_24huwtWYF6IF8X%hyD>H^(KSF!yk
z%w9|WJAQV($$I%6IF{xc41S$>sx#lWw+pZ8dl)Iko^dHu0Sju7d>Cp;DhnG1=<Y*x
zaa?%z!SN(GWG|s-fnM_Y!|<s@J<cM!@5k;(F6qn#$~ioOf(V>2N<Z8aGVkLa?@fo6
zA(;Z$CMuu&bzvLc;`jVmiEb>oOQJ8=G>BqaiC~~ly~rS2<_UG@ZJp=VU+F|pisoxi
zE*D-((!r@}N)~Zd=a0i3Auf}wh~^(dYqgz$Eh<-BJ=SXBR;wdAmX}Ug{zxL^xz^CT
zH}{I0!9CJFf_mQ2*`n2%8$5^WoY!=Uok8c+kLnavF~vMrB0oqM)X;$4W~#5*@{G!$
zF#oSIzw|2!WuGzqi2d&=4in^Nu23mSrItg_U2f*crwp8o$-MWlez}^+o49{Cqo3yA
zhptVL7XW(6CD!&Vd7O}GI-)LQ{%-dm8%_`=GHmJmHHwmMiGP;Kc9heRyw`I6Fk{Sz
z0q5w^a^sc|!?*4SrD48r{Y@_ro-g)&PfGl23%Y_h`L=PKH-+kPb904iow&#e-s(Vp
z!?WUcmTc@UdAPrjOOyO%&l8ZB5uWNt3jc5xKnNFHT6$(~M`poxmzL#=&F-0;55P|!
z<M)0YffF^4(3zYB0A&dWU-Kn2aaQHbQ!1F+Jd#Vd`vx|(xWz`Dwk*s4I%g>OqU9CV
zMC77@cI!;RjNIswi6Q4ujoaNuDrdJ%K!2#(bIXl2?Ko2#e4+gpYqG6S`-Al?wetDQ
zsY|%M{dB##p=+a?;XkEXzzK^P`fy0sGhMx=N2Xtg1!!^YS3Md$XPcgxtDS_U4&!d)
zjZHMucXFBc?KCUW4zJtsJrEA1Y_*-vG`MPK#kql&=1kw+FeTp$TfMqM`ddoVAF<g{
z_av{_qsNbX=1aT)BHNv@<9dAz9ptYp-}3tXy9$)bJ^a_Nw&q0IN7}mKcU>0;>RmTQ
zWxh3ZjOfDOBtJh1@_KclvxPUxQ(hoiuF@odTf+-&+$EMoy_^)Mj^QugKOEa19PaDl
zGqGNE$L5DSRkezP`L7)1W^Soa3$lM_^c3E(G-@_fQqvQ{wpKNWIUKiC;9w=YJ#+r3
z`WeE&Lf${dI}eoOmpZ!Ry_4Il{9v?f{anz?PH#3|YXq3mUq}^-_K1W`dsB9z=!Vrd
zznMyDnV?#uYQ)TPX#MBnM82fE_esqb$+j6J*hb!?zW;mDu8X+vQE#7%<WVb>8^^|R
zr<8zOpV$A(K?{Qhxs|6xLeiZp2i+m%cER*lW&GoBRB`L1_M`@EKiSmLzH@$YNJX3M
zfz-}o)@x+vVf_;jNs3wEM}{9?sQvZ*;ZM1rPxX8w{z*N0lj*bBTqmbd*~p|BfcHyX
zCFHkCF|A#TKkdGsgzGV3uhZUt@_uKf3K<ug4UYLkZ<}OpVf>bb+#|{8O~C>puBzK>
z%%HH`aubQ;Zy>riMR04_ZK#r}-6hTHfJ2>6t6tcwPph;Co2op|&q+PJb!wr1-r4nN
zzwZ1cbvRuOeJW?B(+>e5-N=?=mOlSPB*nSQ>t<S$Cts2*8{m}G4rmAn?*~E{$hdyI
zuIwR|RoPFOhTf;zcl7ktWX<MFDN<T}frIDY*`sJELNYVo6}Vm-K9rGjU)-fgZoH0u
zWjC77O*S7k<hApM`m`o_w)*n}-}J214W&Z<Qx99o?kg4O1D_!E=M7b;?2{{whGPQx
zyH%`?ko*SUn>Vx7rsTbkU66bfda4QLoxq$QKeW+w`aU1u>C_1pcX4zOL9#8ocHY;!
zk>&EROQaJ<a}fCAWP87hRp9y{_8Lz5@2NmNsh}uhlmGp5;Ovv>r?Y0cUu%$uoZNE)
zCw%PePma*>U(<TQS1{Vy-!5OjL4D)%nr}gg51bc&b2^ZT_UC%+@?1%-1$F|Pf277V
z<@>oXT?EG!)gxyu{h`K#nPfKecmGT%7PUQPu9&?O&XUEHat+rEdhIaQrB5%LHt?vS
z8b2;tIhk6h{!{&4rV{}6B=bkQ#KQBGzx?@m<;h@FIW;9(JAIy*)UJlz9$aLZjZWJA
z(GFdqi@7Mj<)4M`Ppam+SA-AAchcM%MGya2c|Zn5YkJ&9>!Q~q(PJ(EOU``1AE@+m
zxCO=i>co1~iMnTgDKglh3Hq=mRmDAGLa4@OS~XBGvSKIcqPvb9on@JvL`njhFyD1U
zrK^jc*zFR=S*r<&05v%S>R|7y1AalR;h*ZFUq*cT=qzoP51KX&kIz=hVXetH-&H$f
znT}6879v%L4_=wSHIx9@INnB~f1!gb^|KV!<6s|ZL~$3f4jyxNX-{Uq_XAk^;g!5a
z%k8l@wwR{B>QeDF+;1MZumlyfo~_k<q8l{lm~WR<F+EEkIsTlNdundSkT;4WGVyAz
z&RcurLb|}!(&jE*T~B}cGB@-5cC)59{uyKq9Q*tnH%>$jjdMYg#=n+z3CX6?FaDJq
zS?BitEYY2VTA6T@$yBxSy~xIA)i^bYB`&98;Y;@FmpLhFw2E{unXEwB*KX_Av61n-
zj}0N*GW12epsr7{4YMiU(<5<p`6-kaVK~Y*WI*3lr!+cwfUqvK914S)XUytUqin1=
z!mAbhnKE+!o`+@wx(ijw6>4wGZc+`YZ}UX<Is}K$#ZY~Jyd_VzbCRL3bgUv~Fgb0G
z#}QOKH+f{%5%DHl&^te(`7p#OJ$#}@2B%HaVd$9A=@@k^V18>!YICP`w-WC{KW)u)
zBKRS(*4dbDK4o9sO7)hMMxgXMo8b{}?$=pj;$RS(8EmuUHr<)Tc15bwFi{(rR-|$k
z7+pbY6+V(3G`0ALw)M%+RJN3C7e&oK+-;C)u0~1K++f&IjW%4=u}&VYVZqQGD;MHY
z|3K;z@?=-YqpjhXVq<Y5ohY7WOeA3_#G6#~(pY-g>&NhpW0X=IhD0#G#9rw%KjchB
zI%H5kFW1XX{;60&Jw2CoCUFmhCfCZt{t<ym;a7#azRiiKz4Ylx&%TpU)t$E9kxfbZ
zO5ZFld!c*5dQu{ipIH1+_OFGUPZ4}rE{Eva?Lt2eDc_x@KsIn<@)T2q|C!28VT0y}
z%`hzgnH>eH@(bH976g#Xar<6u))md|$0<pOGyF_pWTDJ~%i%SyyHnEJf)CP99MzU@
z3My1ZhI2XJkz|U#DxNUz9iM`IJH}H#Ux<`$I(Z|LX5>e%Tk(7VJo@&~l#}?RDn1Ox
zgNjOI(9Ar{#H|3WEeNM!q|cJfgU%N$Xv3R+|Hvu&bnE(dzvd0;T2uEO3Lf7UIYCc6
zWb4}IXhty%7EWBzdsWbx*o7+@tF0)P!&$!pbj($~5Ovckm^iX@wEK`_GhHljVMFa#
z6n3o<<=CW@Fr7$a1<51REWrgj=!gR`F7$SiuxU0+`;)L`83??QLM#VA*OYfJsQX$6
zcL@b9RqC2w+)`)L)@-us3OnZ~=X}m3A!^<1%-_04KDlnGR*=hiavF*&a_084i|_{5
zz@)>-xon_sfFH!u#Ir?vo1L4>zG?B4ebc$ry8P@XH)nGBW$vFjzcR7%BwL9Ry!4Qj
z5YfKZVdh6xUbI8(qspU|O8DiXj(uelf_o}f6s}xci4SW*jX4;jZ+5Dow;#EZ;bUNP
zGOHs~EB5+SpES1kZs=(KsHDro%FglUQRFke>?OIUr)W^NK);eH=F6DgOsY=m1{YVF
z7<)C;q+|Rc(#C4}_r|vFW$X9G8oeSUJK^hk2gJcBnjxOfK*ujF*SS&3s^oHW<E?Mo
zT|XOKSRM$Lj2{fU(r|BvZt3{Bo_U_^GGm_cpIOGo12Ue;V4K|&j(b55_@R-C1oL7p
z=PzSjGDjTJ30q`G2chneRV=gvl2-ge6T)5pf`^*3pR1}#V(Q=anm%aryR4uxk+kM8
z1Qh$m_{iM0)n%;|`znGWg-Q_Ggss|1%9gNYO@LOAP^GO-qpRZwZ624yeblj+Siw-d
zh$v-!iE<rbBi-<l8@(^2d0XQDlC*<Dh6V{^g^XrLLFJUc+-cp*sFNepGMXK7QnOvo
z!lMkR_^7$fybSR2y{EfehG71nv<P2&zf{yfx3oB2TQ{ZHyQPLzmB)x8plss3>bniK
zF>HT|3LO!~2f3TteU2~XC$4k8U#d@nYyof)pB6=3sApm+<>A^u9IF&iwqL1VzF+l|
z<R|%0QlC@{vgL50{y=0LLP-mLs5<c9$ZiWxs148xCrzp#?Uy8#Vgxf?UDPjqDi$Cw
zU`fFO1-b^j0tm<zB>m!`qKnL=omSa-4OK*k7XUSZ7r+YODliCW2GjsYlm3KQ)75@n
zB1G7GkhOm|8f7)tsk2+WM96rcwP&pj99d%3gfHbI-Z#a3X-_}(gSFBuY6TT~e{IW2
z{_+{CJKp@<hq3;aNFnU$I6#XRTll>%+9K*hxeID9ZjabMCae?!BWpU69?H25R8<La
zOA+Pzj6Yv)6t51x2fSLR*|ql9JS(5ZQ8;alkN0^c^xg%GY=<DMsNyqo?=-5^MpF`h
z8CXbrH$NvE3JY0NN~)3d$}Xi{_(R33VyXm2y3Zls>8@l&;PL2)sIKL$|9EP=i@W2w
zw26`0o*tcNp1zeEsy-a}Fo+88%rX7=)0XNW!k(fo?H4bVP$Yt~F6S2|m23nFolDd&
zLMm8<8#dhHBQ?B71_MA15CX6PpmITS>F;X02L-8OfOj~A;uh@CFF+X_LMaPjs64O;
zCr!eF7YYL6W9und5JHoH^VoW-7SvD{U=!|=v<2JCMU06nps@26%1dP(nMvmYeOLRQ
z)(lsvpEfl@nH`W}O2yj?v=540e2e@4Z)k}8zit2LPXCvo)Tpqt*5i6`d5zf4)3IXh
z|4^RUs@MFm?q!wliVp)W9S6uf`}YCQAfGRRLUG%9b~5P!f#`~{tjq#!HQ~Z8B4=Da
zGzd7+lj?ENCB7|%rno4C`-Z4WL9&Sy9^cu-&(34`x<svsBjvdL5;rljGgz~kie)7@
zdS;qa{YmS3+f3`LM7mX6&XK5vgnpA0ff&9e@9SO~XVaI2cl`ITILu9*25Hf-3;oUW
zp677k#qH?-2dh9-zjGDti2W4wbf>TXDx?)Suj(tvnU~d-8E1(hP4BK8zkL-b+a-*7
zh4wv+o%ge2n2}xs{T3$Dboa0~QT~gvJou6&^JnPk_c-gNYcB38_IatUxK`-T01rch
z`{MP`{0?dQ?Nv99{x9E!jJq56wFUSCY7=me)zG{K%{{;h-~k!FfIKQ$?KR0XtgJsc
zC4CY9j<Yn$uo5{B0qIr!4Cx^7ZK*Aa-#bTJm+q5R?D?YNF;c<>q^+`X(MOi9mc}^$
zpi~3byVDx`I)3{v-)W6KiSzzjcUt2jsL397TH`8dFM=i|wN7!@wH?%s0kH!cSBCT-
zQ6{x`VA$Dj%WO^x8ay+Q@7PAI4c)hm>yJDSN_Lok44R!XyL23-!4h)+CG{)z$IxKs
zDEXdm^jGwbxI2*lywvA;^i^W*zkfL@Xy2o@Xq3$I&>Fz(%!Q?UDegd(m)&m``8NYG
zvvZ%4^<fk314s*!O}@hJbM(vl*cXeRh%-{8b4Py}*30e-mYk<&d5a>-r0KOXJP4$7
z(?02{SlEiveeGyH(>CJhHQWyjNwrj*Q=-WErmXE=mHGg?3@F<fj~jsB((foIr5dJt
z<#8Ic9cBc&OCGfVa-=gtarZphA7p#zb)SHyWDh+C^DK`(%-<qw>$hdKf#+E4a^N$x
z*CG7`@+**rZ_xb<q>mx}ERNm>`~u1cvTe`|mf6ggkfyD08u)!^sE0EKzeRg-(|`sb
ztTB5QNJr(*WqohCEN8u}2crI|FI0S%wpJRUMeisgL)tEgN_fl*EG-RInx`|!MPMxu
zGc2`o+=H_7rX=gf`K3O_50lF0ZjoIr(rl}&htv8wEUTrjLVvwG4F;rEEAH0v5nRI@
zXk>F@(K3HX(idl2T4QMO;*3eXP+HFa`5g=C+$!I(kfkkXlIoE9DzqmQy_7FOPe&8=
zM$XF88Ch*p%S^4b8hL&Xq$A>Q(#Yj&C6xO@mw7eFPyHflz1iJTAE3{eIZiqk^^@to
zi^ZAlC+{q|c!juH_LtJpYu|B^+WBJ7r&a>Cx;TS;p!+fMuz1`zfPI0m4BQIbDJ&#=
z1lNC;R5Ns+MmlrR-5Tk27VGUXIu|1?-?>rd4HoB3YKyi5X_Nsh#u2Dn8j;C&bnK?R
zrKi0dX;gI$J36v2;=FIrJ_h}G$x;>Vm29U+YHy1>tiFtNK<aNSwg10{9(I^P9WpdR
zLEEujU;{7>v?0H2_el1$v^OGsV-Lw2dr02cL-NKRk~j8{ys?MmjXfl9>>>F<?IHP=
z%v=7a?I%fNBFYc+oD;sBY=_Arw||}cOct4K>U&d0<r;RLr0l_a+<B5dQ@BiDs*z#o
zE|fIluI#BC;0L=q<xR5ab(G|1{zvRr`FF|BfB(ByaxRqi-uA8pyCvVjk_UfCnW8Jz
zSgBr$D2r%E3GZ#MOUjU6mX>M$lXt%il#Jzo6gL&4r_1)hgl4T=FH3*9B>xrm#zY?a
zj7+X6&50*y|JX$nY07NVCumcVmgDNHjhCKx+PwB(mGl|;(W(+naa>Dw@7?y~l=2jx
z^2qn+r2IxtyKa`tk6tzBb?(^7{t9(V@f=G2U$%!QuKC})lP6`}KY%?sKbUglyKWYr
z<bvh+r|<AdpGy3D_xZ$g=MQ?fPn7w;aL>;ods({kC!SNY^zDMuT|nvc>(aeI<<GDG
z_4|T8g!A^WJ1DnE@;Bsreiq-{pl|i;qHHIwxrbdqi_e3uz6)ql<}tqeUZ5=V300Y@
zTvef}R8^^}RW+(!s+&|dt8P*CRyC>aR1H*pL^Vitmuj%;Zq*RgM^!^r_o#-c?o|y}
zol%`tomc%ubwTx(szdd*s#EoMRhOz;&8S&5r{>iPwMwm4Yt&k`PA#YnYLnVr*hN$w
zQj6-aI--uMW9qm%p)OM=)#d7xzzIr0EocOtU=U1#Rj><AAud!3RYF#%5qb%=LY;7n
z&?wv?3=rlBj|$DgeBp;ei?Bo3DLg0aVK`>Qb*%~=%QRv=Xg{n69gg*&4=|51UtvZu
zKP7+fwg$AY`txzD{`?_UfBuSXW6v=AxlD2OXP$Y9tL1KDe#_m)eVuuk`v$j)&2Zo2
zzR%Wi>$&ypEnExN#x`)L`2_nge;a>0yM@1lAHY7%-^Jg>KEvP54`X-o!}*cy9)1)*
ziv1Nonjg*X=ReI)Vqf4V^OM;Z`6>Jq_7MMB{<G{${B(XgdzhcW&t!kYf1BUT9x1FM
zC9`H>{pbL!A03YMqmvZvigxZnMVF$Bn~b%j4`D6o6y@#8zT6Du4&_d6rt&%EFSsu#
zf2aHdH>a>qCW$-?Ye~P1wWMFcTGFp$73ue|esq0dS4{4Qg<UbZ*21os+_}Q8n0&sl
zD<(f)W6-?8Psi%g`?NYOv4U7#`U$Kqorcw=pTp|X8CYHV2v(PV5vxm=7FL%k{-k|g
z`&Y$Z3Oh_H6S^whVP&tv{*cO73M);O#|kS=mFEg;NtJ&t?D44VEUY3`b`^GaR4EF(
zJE}DQAL{IO=XjjmnhAJS)wRd}>)d_LKId-6Bm@Xa2*^yB2a!ocKx8HiA_6jm5HJKx
z00EI1#4w5&WS(aT^E}#G?0b(^q_!U&r0>0tXIpA51w=%Yx6ZmZ6fk^5p{4daUw;34
z&pl`Fwbxo_@3rp@2tbfVxuc<4v})HCF$2bAq@mrQjDas<eOkW}={N($*Wl(&M6nnY
zMI=fh0Toacb<qgT(FX0%11}&2gOQHW7>6LJOH%U$)Ry~-!bSnUI~J9Zh<bP$&!RJu
z&>Q`cikC4K6T;Uyd}lP`PzlvhA5WnrI-(1Dp)ZCa6C?53EnAAhf`<|)g>tBg255p7
zXpioA9s`hu;TVO9C;}^~WBUX&?V8j!fzO7<5P;@SA`pWzD34mGgT{Cgt<eF`p(m0t
z1Q~c0lfzdN3ZgKIBOYZ@5!LWG8lov$p%c2I5BlLHjKC|H6uw%)MIjVJX*`B1sKMiZ
z0?qIY+M*j?#6S$fFpR-?Oc~HGZA2hS7%MC%Ocd4?HWs!R&@Xdfpq(&D*hAPym@FJ3
z9G;vucu-)JaGY?ma7J?au%UrD!Ue*`!j;1H!mYwxDH;6+1P%y)CA{KOMF?vOI|$Rb
z;eIMhIA6F}xH>I;<WRLym?PXHJS03JJSjZI$WUj5XNBj4=Y<!97ll`c`Pbj@X<I^9
zSV$Npj1eXb%ScYQD+m*XwS^6a`=2%ywh*=vb`o|M_7e8bWS`rq!gS#%;dtRxVU}=S
z=HT=cJ6pI^xLUYTm?PXHJd~MPvzC2Acv5&uct&_ucushpS=+uKyd=Et)3Jm>VT3S-
zS;r|WtRk!}Y$$9lY$Hr!)^&Oc`wCNpX~GQQXyN$Gk^M8BslqJbJYlwQsc^M$W9G==
znNE&ykMNN2gz%*Bl<>?5_NsGMcusg;ctLnkcvX0VA8U)B$=L6q#IN$pgnKY5pDf7F
zxXtsF<|p0b*~;+DR*;|hB0MAgFh8|;ZY!OKQkc>CW@NruEZ>Z~2aD&MWn@gb3Q@Wz
zBl69%`J}~bLAmdx<#~<$?n=B)<(K&%ZOMGIM7~&=*Uw(O+NSaPITf?8086nJTd@a6
z@E%U#Bm55M@hPt01}Q2)Q4~w%D3R(@Q))+DsTU<v8jYZFG?ix20$NII;ny-mJ;FL9
ztmz@OTJsYC*w)EFufQeMMy;0jWLFC7h_IdtsZ%qoD?_Sd!@4%4ZiBF%4XHOZ)K9Q+
z=zVZkNR1mhZ~BJyOh^l~2<yI(7VH_;Qz0!hJgomK?N~)piyRA`DOy&}sEEFi>!Uu6
zZWuaSe5}+)RQ!BczX@rnt)b6LT@7h$uds&gi4EHwJ0q;~!<rq|Bb-@<pxkG@Ic{ff
zA)i&8p|7}Iy?6Mv!+(5GVZJJZYqq)Af^FE2ogB%1IDkVO&lC8Onyy|~Gt?VuikhmX
zshKKE%~Nlx`RXmTK)tPItA+GB&7e0Zi)PX+wTNb`#WaWJ(mZ;T=F?lWK#iog)hNnV
zbJSe>V(?t>6YjS@W@9sFO%8ToH}+yb4&pG5<6UY_Pg4tONo}Yt=Sv6bNS&xNB~cg7
zoo<{xeJPW(XC#fHS7<bip|SKT=hAC5o+i*lnnaUn3TM_dnyyBx33i>}$HD*O5w<{S
z^^LlrzNQ^^gdJ&nc2PTM8@qsAP+e0uZP;X6cEDD)W4p9NeW|Xiuk1p0VY`TJ+nRRB
ztU8n)r-sx@EE+_qG=yH_Tu!Hq+s8|9Q#S3O-L!}Ht4I~4qSZ(>N@a8X8hR=N{1kP?
zJb6ddiWwVj`Tp(R)#?M@>-QeuBZ6z_EPn6Xghy;ou2sGrybs_ND(NA4D%7sUt+wNL
zNe^MHx7$my=jg<Lq4^;2fNcjj&vvNn2WllZ<A~$?Fl-`z4nl24u^&4<l#%iZuddmV
z;TY$(AI+M?>rBc+?IG{JO7Ohs?+H_R9{k7jmUq7~T-$Z$9r6%fNyq=gd(PVie{Jl+
zyZJQPcW3<*t;pM+c&>H*y}bWz#AL26vLA^>dE1u2Rk)v#!!edCpE-C3s~@p-dD~f*
z_X?qG9*5~Xr!VIEEazXw(!6ah$Ge-{Ct(KWb4|IPD}zJ-f>z&czlCOqvx}+s)lbw(
z^`SbWeyUEZ|4{#_{!5)w@6vkOKpSZjZKf@>jkc>FsUNHN)X&t<)d#ed{J6w%8{dD1
z56$nPT?^n>a~AixgUif!)fwI~KG^#4_f@TXxcvuQL45me^JP=Ss?XG?>MyjG)~Ua$
zFVsc#H+4x}R)402^bRee#k7R?2+L_Dt)kVmMqN>#tE;q(Ry<%<_&rNSc>j9v?rQKM
z^!)v^<w1H*Lme8d)~WSs0}WGa@2I55-c?0U<qCR_I;xJV6Kb#8ulA_}>aaSZ4yr@y
znA)f|sm)wzPvZ*wRkcNJRohgK+RnZ0RJ+t}?kmW)rE*dZp)`Ll$GbVjHfFG6U#Dz1
zY~680`_|zxwl5mx#l{M1ky?XFe18(ZUPGyBsamF%s}+>4mgIY<u~My4tGPGvO~?b>
zqQe%Yu|?@LjIGF^>Cn=Dtn?qR)~d~1<BONn8nrvOXCBp(Jog;8Swpkg65ro@X&>#U
z19XrM(P275N9h<H581;bTYSq?;-|2eZnr4|nxilsE{`i45#ps7v9h9ASy{YPMQlwB
zc`2{G&)vDe@#6b(J;J^epRjk=-pU3)o`c0pnKX_qdY$GV$k#<8LShohwr^)I?d0e_
z#@GE6{meUN5nVBh%@X?DEH%r_a<js$G^@;Nv&JrI*3wn8j=nJK%?7$=Hqw`LoxbAr
z=uMvA-@*dC&8z!DUPTx23bho=upBF}603MsUBfHZI$i-bU?VoEKdB4q*XmU@MvYa!
zQNLBcQy;5y>i73O_i-NYKT^L`zrqr}{+$2E&r?61<@|5hJf184@74;-?<7$u#&uyy
zl;Vmc0cCi8Er$x6mz7ZkRoU~^P!qNAI2xe|dgDc|pi+3nO~X(O<8^lgMshvnuf8+z
z23J)xF-xA;eC}Mom05W|*&}3M$ys%473dUR1uFTgims>I>UO%l?x;KI&N@kV(bM!2
zy;LvPEA&de%8hmt-D++Px29Xmt?f>7-*B_sneHriwm(nn4{o)ZdRwcN@7Jo{ruXW7
zdcQuX59!1Dh(3B}Kf#z_TrfUZI#?!HHuzYuT(G>~n>&#+>NE!Gy7xS~-*rs=*0D9u
z<Jeut2lqPMV&6LIxfAa`*vdSPV1+x6z%m|BB>So!pxfwf?9b<P9~5L?O+zugSg%4f
zdukiv^&Wi`rS)-rl6`wxpGGbHTm1=Yv)7{0)UE2)#*=PCw;`V42u(t3cZNF`&$1U|
z&^Z{(-b)Hr3|2=klVftYZvOj@FZ8WYsYhgo#WU&q>=^`>1=b*FAG434sQsmV9T6PM
zdWd3c`f%R^^*~hBFYA|)$Pt`|YGP9jj@vdo&NiLI6C9fl(N3)Cs6W%6;RSs|-#{<d
zc5U?LC`F@>*w>fiRS&6R<zTn5+ZaRKBsU2!xuf0DNaN^D#!#_)xVykzfYD<87`DDT
z#s&`t4`Mc3znv@l+{`~6&iqn8@bNs#T=c&w$l_W5QD$Rq-T6a~q5sWQ6k>QJXK!WY
zzr(m5)%?_uefgbh5iF7KZNBsBuSQ7aPH_DSi>r)w9M2|v-_!iQzr?W#D3Ie<gqHtb
z4HNm^d2G*0?sW$a-~`uOr#bTfjX&ZduK7zQ6`>N8K$WN_HK1nHnk$SR)R$7YzRTeH
zVm#LpSzI?{^X_Ri?<sP)W;jGA=p>z@Gjx{D(RsQ+7wIb9uq?~93RzKBjFn(juoAg{
z-@2M;F8U(6hz>wk(PZ8W`kG>&5FLabqN(U5I?h_>D_urUU)2crny+@8d(~I3r2B<v
z4BCsvx?hUMp@V2VI*OL&ddAlTbQUec)vm8)-Rq*|t@WZ6+#8}5txckp+^<C|yI+Y`
zwKj?-S{p>G@ea)5(KTZ>!Bfl^(S|tyZJEjF#!Rt~GY8>0W~%*j=1X{iInMr&`I@zo
zciETmJS-mFMOZwx&tUP${>qF&3udhQH)b4KGUL&TSsKqU6VRGj2G26fx|f*ctyRnl
z?iFT5Yb~>q`#H0+dzo3)TEk4VRx_*FKV#N%zhO4CKVUYpPcs+Z@vGdp`}{6<owLWG
z0u;gd6Hn!+3TIG#YD~>JhdNMK>KV!+Okr=0V}Ip{_UBf89e`<~$<`KM>9TjoS3Azz
z@2eN%Z5NI8c8JD#J4NHYJ))((U7`uzZqYK{UeU7NKG6!^0nv)yLD5RyVbRLo5z$2N
zsAx4z@Z;w#mnUeV#BY+sZ?YdJYqK9AZ?hj8Z-XBdZ-pNfZ>1j<&-Zw|=li;}=X*B6
z^SxZgTjxi`Tkpri+vvx`+vLZ?+v3N=+v-Qc+vZ0?W?s&9)>csbL{~y>G-k{E|09Y*
z9m%S?e)gcAZ;$-?R{z$kfqst3tI@a4)#4WV!{4Vj;GIVw`~tu6pLf+Ku*{z;&3?1P
z>@>T~ZnMYiHTyj6d7kSzUO}&rSD0J$f5+{OGx#-rk3U$`c@CcBPUd;=R$cGTap$@>
zJ$U3<UcghH?G^Wb38Y`h3>3pX$HL^@o4?M;tPYu319IO-;rnubO;owP%csA*)oKa<
z8%fpYE{loJ_GUZpuqd>%L^3~JgX~gXWhWx|KTaj5ij(M6cWOGdow`nar-9SZY3w}Z
zeB%7k`NFyCeC}LvE<2Z;8_w6xH_lDXn`mw6fVQ1KIe&KkqN8<C7t%$vqqQ!ei|Pm+
zsiSl;{h>SAtI9F1ZFtzmF`hA|kcrgF6gRQXSEjnDW$KzIOk?w;X=U1)jwZ=;H!qkz
zrk_bRgUk>!)C@P7W|SFgUNaNT6f@n-H1C@C%=@yl?9VxwV#nBVPEn_nQ_-pHRCTI3
zHJn;b9jBi2xbuY5$Z6&@cUn4aopw%pr-Rec>Ev{FlAJD1SErlP-FeRG;XLpB!MWgk
z>Ri*FE~pFZ;<|(`sbh309joJXJnvj4dL=o(YXol^%h<*>K~vB~m?#r%N|}nLnyG2(
zm<FbiX=+-UHl~B=Y`U4Arnl*92AC8x*rb_ZCc}(0W6U@+!Av&OOqMxeer!(uKS={~
z?*Ie@X9Bzc1pojAcm)&y009^Ucm)&y00X)JV*)Y&00IvM0s;aA0|Eo#00RF|0POz&
z000R90001Vc~DFMpa1~={{~9_dI69JwgIXj00Ex>000040tKc3001BW3wWH>m}hiV
zx3b42jkISp0^4*0w$HJ#P4B(;-g^sRO6Z~YP6C7wdJQ2Yq>>N<gx&(7_ui}Ny#zuH
z1n#zzcW>@m@6-GC_Fh|iM$%bJ|E;5+Mk9m(k^HD^LW-m-!uMpd?<r2IkmB!_|NEt6
zA=z5?kzMsb*+#aK^<;h7M6QrUWer(ER*_TWR5?vfmowx{-Cxeq1LSO3To#k-<r=v`
z7M2PAm^^{P3MW#E5D_X;i8LauNGHNYMv+-WiJ*uUF(OvPi)<ph$RToyT(W_zE*r|0
zvbI<xa*KQ-zbGn7iqfK$Xd~K*j-s>fC%TLGL{HI2^b`HX05MFA6XV54VuJWsOq7je
zRoPg+BLwEf0)lWj0i~kWG?zZ1Pw6w7M_-5nbeIm&5jtigZG?@oL0i){wvB8P+srn#
zo9!n1tKA}-%8s&|>@J(jI<kcrBHPQhvV&MGR>`%(hzPk=Zj`^sO|l1%l-uMkxl>%0
z+r=a?nKO&LqL&`22g%KHhZ-Q)`IAveR+c4&!kn0g!bGI#Eo;hJvWzS%OUcr5wcKrQ
z(nz^Xc9s=nMNv^Sm(65dSx%PMqcAs)z+5;Ahv9DAgZpq7g;1zTPbsM-y+bWT2eCw~
z5NpIbu|;eU+r(zET`cowP^TH<mwUx1e;#W1)(Gec{b2-5fQj%W9Mt1Xnvk-QDI)hq
z&5Qax>SZ8ZATm%nP&?2x&^*vG&?+!Iurjbca4c{x@G$Ts@Fo}*j0wgE^92h9O9aaV
zD+SvGdk1F*R|VGxFGQQ@G|?HNgV8b3@zHsr3q;q6ZWBEwdT#XhF)AiBCUs1@m`pK&
znCvk*W2(ipjd?eV$`Y0(I<{}@lQ<El;!?zg#ifl4kNYz2$GH7*hvII;i}+IUU9yhM
z)jik1JQ)^dS{VJ}?JNBz%bT}v-zNV%gJJ>ngCQ`+*D@KthQoTiuSG<rjC|v3Sr8C`
z@IWw7El}@oEo}m$0;>Z%11AF)0*?dFf+CpO*OE6_AXq$D%Gc65*elpCxFERpZ!PKn
zp`~_o!{`s9r~a)am9HgZOw`|65@I?eYYE0C#NLU0`(IiX#qIrvmI1jEa`p4IWLOyV
zwTL&tWG(+#rFz2uSkD93-z2?nX8q@ayq(v-bNz2i^>Vs@TiyRtd$rxAZkLt_ajEj9
z3b&qKntr*|zgt!&Zb@7t#Ff#>zj>WFH?eoJ6?Zw@@1NW!F-Kx_VpL-0#PGzk$^KHm
zSNO$q7sD?+O7c$ylFAerl1guEvX0$y48~wA`eVc*_zo_&QAw?w&n@zMUP(DK<))Oo
zLsExC{56V@*pP&f-67XP-h@(UuF!m;<w6sL2pthRDs)WfINur{Iw5po=>E`WfAtT2
z@*i!X_d*|pd13UI7nU~Z2}}RCmpaK$dMDfQ|NK&65n)mP<);tJ<Cg`(iuq-+uyV<j
z|G&wneC{N1tCQ>@tI6g*uiA=9K7Tg*qi-+P_*C1d2kRkXvCpj*vaZ;shl<IvvL2>~
z>k)dSPpDizaq=Yd)A$4(hQodSjKW=i(MPaP)RajCqA*G&SBVH}k<6jiG+YG45TCPi
zebUbJS^I_0!2&*M4=1xW!l$jzT2aEMZ6lwzO?=iildDB9pSPQnh-<HlzV;^OqxqPh
zJ{MZ#!EW>`cBd`agSO#&v=#e`VmL$;$I)~g-=`D!0i6^nL@69eNAVkai{Dy--&u(Z
zt->Egf(R3Bajy;FejAMkY>Y@P+T%gd0dLz3c*o|)`?jFyg1_4m_{5eJ8ALa8*Q6Ec
zMOTuxI%!*rl&!(1MJCaMQrqT~#<rlewq+8(sk9wUW$g!4#=cKg?8j8qP83<hK&oaZ
zQ6u{a)f2--oESl^%spyjw^D-LMs4kOYG-$dtl~rJXV1|HdxJ*OH2XWvuuo~aeIkac
zUaCAVRlQXO)kjrSl~i9Gsw%50s-Nnws;X+Lx~icDsG6#l8mMZUC{;%dwx!e%Rae#H
zhN`~2A#bS$YN%?chN(uXu^P_dYL*(Iny8Vgsk|v~t7fXXYN1A{mTI(mN3~M#s}Iy{
z)mn{FbJQR{$LG~2e8TN@``teL17Fz+<S2!0h!trGp0x24upQ}LyN5d3z0}F>qt13e
zb+HH3Sgb@#u`(^g_OxELQRDD?3;56$G8fEc3ffL?lG$#y;UFAL2k{51Rf1|uo~?}q
zX#uvQbyUa>!78){tI}$mMt5;K-N92fH=ee+DB2FD7(0l{*$GtMenegE3F>B#Q*}F;
z>f1SPvicC0+A!5ljaTi}N2-IGfYs<{oIzJ8i|tIY-b;$JT`1mmrE&JY`dCd=lSC&q
zSxv#}*o$`HQ);ZHs%dVfnvR{+yPN@M(p9`?^Qw+&hU#R;sLpDpTC9FjOVm=eO#Q5u
zs}*XcTBTO2HM~=;RqITIT5p}&pf;*s)F!oA{c0llJ)6UeQ(M$lwM}hTJJe3KOYK&B
z)Lyku?dMtQfI6rSsl)1sI;xJT<LZPusZP1+>a;qe&Z=|jyt<$+szh~3T~=4rRdr2W
zS2xs6bxYk=chp_ps_v=#d{{kD57lq#k(=datH<hh^+Y{Y&(w4ELcLUfcp>VQdaeFs
z4I|j&lrR!T!Dvp+>D&))5uf5S{$4r`#=?g%o^SDO_y{KWam6zDSgi3LcxlXabH!XW
z*Zlo<lKIoT@ps)RFcqf#9d&H?BaqE7-4ulxOdP^#+)pqQX2EQj1E0WL_|!{lzTvax
zTl1Y+XudZ;cn{5M?>BSHyfTZ-k7lv?$t*ET%`z{mm)*<h<@E~kTd%NJ(#wz5E9w>Z
zay#XWBgZZ!hPu=)y;$y5^eVY<m(gW5t=x|;$^~4|MY|Z61s#%$^&WYpy)rJ&#k*`?
z6|bsS&4qf^y&8OluX-=M3SKI&vUk%hcG+DHm(%5T`Mk{D9q*o3*QNE!dd*!{zUI(H
zx`LPi!(CxlL`Aq_uB0pD^15=aysO|UV@g-mRdY35Emz0YcMV-*lgTx6EnF*?;M%*6
zu8ZsLdb&QYzZ>j^xsl?5cxbA-Y38|k!6(H%aUTowbsUR7;b9uhnYcR^!gs|ku^Y$G
zOk6DX;30e<_Tp<YVjraw`>C)vKn-Y=I7oxUA#oUw(EFU1t8)YH#$&`0aa0@^C&Wo{
zN}LvF#5r4BoEI0wMUiOV5tqdkaZOwm*ToHSQ`{DJ#9ecdKd`O%eVzl~z(Sbsmbj&`
z7=D12@C7XKW2@!xIs60*U@3eBKkNLum@c4;>w>z3E~HE9!n%|$qD$+dx(s{|i)g3K
z$Lru*_>M}!3heDin#<rvv&p<Pf8d8WUZ&t>(ozjPipTJ-cq#snDS0ig;`LHu5%C*#
z6pzI3I8HnfPsKA{DV~cL_$Mx*4B|Bv!JgDm{3+hjU@4@MAhk5olPF2Dbo8YRm8oQE
znU+q;bTYlnz<Xr4%qTO<2-{i)>`>Y+gZ7q;v6o~P87JdqR+&v^mpNoknOo+e({x7W
z<!v&Tonpgntj!}c$w-@?5At4nTgK{gx~2?~`E+?*OIOgfbwyoASJHKLWnE8K(e*ha
z&lay_lz1bfc?%!cRdoYhO*holbtAXi?a?)KW7FJia=*H5Zl`HsTEc3$3TxmRm9(S8
zW0?ll!gW{&H()*7G*8Wa*Z{X+Bix2x;0|npyRaGV!LM*1w!j0}3J=XQ^8mKNZ!{Gi
z!FG5IJK%TN2~S`bJcZrx4EDft*b6UUAH2ky{4;Nd{qP4IfLCx3Uc({y6Ar^0I0A3+
z7Pg_4m_Vzr18u;s=r$bH!mV=~c{%Uk6}%gcY00a3Kd<2fRL~BD<661(?ic=*kMRck
z8*j9a_!s+_H}MfTp@BE^Q8=kJoYDqPYY)!Q0XVA>&S`@4+QJ3Ra8Wx*)G6SSP6?NF
z2wc&je2DjfgA|YwLLd~vAQhyBG>{h3L3+pl;gAtBL1u`6NQi;}1R)w?APdC0IS>c&
zkQK5)cE|xaAs6I^JdhXiL4GIz1)&fWh9XcDia~KG0VSanl(v6B87K?o>}&hRzJ>Bo
z0V=YBN{nowGBZ?xs!)wna43gCb*RCqpeEFU+E54TLOl;XfBW*-b6yIl4-LGO(9qmA
zcRb-qXyhpmJPnOK<9W~onnE*ozy!F59Rbau1#PDNbl;}1#Z1svwGHe@JKoN6Gwf-5
z)xM+^Zi<OEF(wP|avN-B^A=j#WAF~NvVTHrXafl>p)CWngZ9t?-i40P2|7a;=nCDS
zJG=)y{Igy!=nZ|KuYXSJ4+CHz41&R&-aj)9g<&w<z3;}V(r!Fv#7vkOBQO%9+(0+M
zO~kge7CX~M>_Wd_SK5SqXczXQ-PoV@-~ifdZkU@mkoMs$x`wmqI?kaR_zB&_xpWJ^
zrhB-^8eC>m;m<a;e+Ee7#n`mC!i&W-HWQw;+3+`87$4ap_}CW3XSOsxw`K5!EsHO0
zIecR);agjogsnno>k!$xWNkfSTc5JpZj{Y-r|kAU%3*s@Q9F!^+2K^dj-`rr996O(
zQe`g-)wENomYqhm?R2VRXHZ=`lbYDM)YN`T&FnmCZa-69>_O^o57B$}F!iuUsHZ(j
zz3fTqZBJ1jdxrYjv((?7rvdf?4YU_&h`mfh?G^gaKA>6l8O^rOX^wqi(|PeW(LQvQ
z>})JbUtux&8jI66Sc1OAlJp&xqJ>zRzQ;231D2&lSdM<g^0XK$&`<agoy7@s4nL;z
zIFT;kB)W)`DG{g8C7eo^@wkn{6E-7-+cuQZCQv5ZmNMIR6k*#_r0qaa_FcZiPxvlB
z<$L^$@AGqhz%Qu1-9;VjZhpuw`8WQ9AMq=G%&+-({*#8;YxIG=Lu2hd8e{KrJ}$%s
zxCrOx!d#GxVhyZ=wXh!6#JX4;>vIjR&9%5L*W^0*DbB~w@C%%WpK~K_#!a{dH|FNt
zlw0CTT#Ku5J+8uaxCS?HPwvaTxj*;fe%yx#;5kgh3wRmN<0ZU^S8Pw)$M&}UY%klF
za#9}3P5CGn<>j&b5r4=Z^EjTs<9Q-|%%AXQ{3(CVb9p|`<1aXZgB-;%9Ldof;4EC6
zi*bFf$F2As9?C=P0NbCZ@l^hj7jPM_z~#6Sm*t9Fo-1QhY>CaW6*luvr!BBGCvXRD
z#~ryXzsv2p6K=+BxCM9Muecqz;!ggCzvu6G5r4}+@IwBPvvN+(&bc`o=i(fkhf8ru
zuF9pk3YXw&*ccmOLu`OeOchhz6f>nvW$walxHGrruJ|P`z+Z49ZZc&|X;YR*@Ngc)
z19=z^#v6DYui;fw!IU%Qc_z=`$vlZi@o1jTQ)miJrb#rBN|;KfqAAHg@z=bVzv3lS
zfbw%3$8x+WVTzlYrk1H~YM45vuBm70n+B$#X=DnRd?vqXV-jQyQ!pv(#23s%^C&s*
zRL&Gi&Owzog=JIOOx7`N^{AwH&^%7cLzySCi22>LGwt;mHu|hSr_bvP`l3$M$Mp$)
zQs35h#C$nNej?|}Pvt!MnVc^_mtV*Q@=N)Z{91k^zts=yD;DfHEzHwlI+aeX)9AFe
znog(F>kK+vXOwqjXPrrB))6{VN9lkL>S!HfcA8ygx9lz3=`3o#IVOKL$K`T!%A7GL
z%vp2NoHpmod2>{~=cdX%a-ZBQ_sb*ls5~eS$V2k5+$C4ax^joys$=C^9iNn|)7f<n
z-Ny7beN11|&-6C~%s?~93^qedN1f9QGsER>c~{;uiMG7CM8#ECT5jjNwQ8>Frao2O
z)jai?>Zv|gUznfGa<js$G^@;NQ7$Q8Cu)fnW|SFi-Zviz@h?L9H_iY60C=2ZU?3X&
z1H!!wds&w;Ft9KIxf|KH{R?B=_WuKm(EpDR9<mzNWh@N;KO<DJZUw4?@)<S(VGBbG
zTR-bE=BZ2{L1JuES=TZ5GCf9-uV$W#qNbU-7eyVieP>Wz1>}R=H3P&40J_UiP<WiJ
zR%vt7Ruq-IBu+w>l7$v^dE&)sYCoBjLNH)LkSx34F3#3UP+BQ=(tUxJ8GeI*&6R0q
z=r?{^&wa8@AW1vJlwo|&yE=MzzX};jkg*r|p%ATS#>`fW#&+%nblIZSFgg^yy?`>s
z`0s*IFghK%Z`n2(AsL>m_YKqVBG(~Pk%$f*$|%tl^t?^Em3#eFbJFuW{`URAmbTRk
z1hw0NO`D-5sLH4sh9XHxahF!18k_{J@$)riK5qvCPV{0ylkFgaM)0#qM(d2$BP$BS
z&?2)OhLVhSa1e$LWtG4^xnc~5@?JZjymV<yx^O=vGjb@WB>WQHB){(pev%sJU&=>*
zhq5IbdQbF34|gYP`69yF3Zk|ZZ-;>l@pN-1z$1%;8d!EHuV~yW_l-=NnlT)uE0JR9
z#+2DVB(nqilrK3nt^_+d<#nFrjD5j3&}I}eC8}#D3#vapWq7_@vPa3DP%kHcGQGtt
z!vzl!N5b#Pm<ypZWmud|5*C~sdP&)$jO(e1sZ(C3WxQorFG4%|(ix=#>Q7B({lK=Q
z9hPi|rd5*3_|%Q-4$UYKg`hLuU49)vx*<*TX&a|$oE)0PHFG*80vYJQF3ot6=tY8N
zkTi$pRBJa#a@~5kOw$MQi9>Iw)>hEkNtKoj{k+znRf#d{?FGr~tVd?-(rlTV6s_wf
zXZU9tKV&YU64_!qNH}?j*6pFZY_?=eyf(yE`kY@u@3SUEBu)6=g!bi9ol?NWFy<w)
z<&m+`H%(L5YF-(Mk@0r}nw75bX$nm_Dba7Ph+zJ&xjECAF<iG7C1=OV^tfzYK$;d1
z+kDxfMU|K=myl<c=Twqq`KC&8EZ<T|p5=L!jIp#-GS2dCl@wUMqml`hA1F~F^MOMp
z4IVmF*5Hvt?<#|)%dg?%d+_mH+%4cEOB+72yZ|3rO8Cff89uTs!bg@X@R8;F@R8*z
zd}OJVsOeU76wJ;=!b5!`PnQGZqqyHHikvbzn52tn;-)yI5;CqzUSt2tKr1=4HY$&~
zL>Eg*-dywptRW8Y!=srw{`is-SG2z$foJ;1jbOq~G|qZs=}&|I)i-1{xnwRPqRWUM
z4xj8V8au8!bVXIp)f`&?FDja_1Nv2z#8@hdifHoiB9(V~y{2qp+5@b0tVK-px@j&h
zz<w25W(fm=|C&M*UiqL`kwVmZxa-=B$D)$nK{?zBmY|5|eRC^#nh{xHJ<Y6S&xbDW
zzyh|Z)NI+n^m(t2Qp9^GUG^C->PpIbaTkv>UTgtJyn|kSCx%N{%(8(RN?2$hE(mP}
z_nlxwrrR!u0Y~ohXsG<LTX7>tRMbx3x1Dae7q(FH>zo4tO@3vN16f0AZfG?XFg!vu
zWRs0?wQ4$L9Kax>#%@p%HGCV{<AGAJFT<3N6>++A^y`}z>ZA@HR7P?e-yC@04NDX8
z=lRtTho#(5QdBr=4J_tbSV=180tWEbNZmfF-h7#TBImZEYWc)VT}9W*Js9R@fw#vw
zC`*MZpn9VY8)lcAOQO{)7?Sk5I+g}@_-nLc^Z)8TcAxi4O=5){ska>teDpaP!}uE<
zzbyv|7{oCOxrvY$)8WL|9dkHeq05-Xk5AFx!Ok@o=IILXT}4+RTAVc>c@+(O%7%IR
zL~%P(3-D9b$DRTB48UaYx$2u*(+1F*E#~+D+st9G!yE>?%we#{oZA3jFo(gH%wZ5P
zhe60358xhi7~E$LgRhvw-~n?Q0ADkQ!8god5HW{A%p4bBpE(RV%wf=F4ub<l*GFkS
z<O6L0eXG$epzm});joFr_lj<e*gx<=vwzfx**|H-)SngAM$}*UpsBxV#MIw3V(LRh
zH%HV*e9+Y2HDc-?8Zq^;dODHI4F7m?%Tzd^>~j0b@SEcN1CxbKZvX)R0ssF14|trc
zy$4`aRk}Dn=a!iylj$u}GreXqlbOs+dhb0XgcL{uApt@sp-XQ9Dp(Lu>;g7WRInGU
zYk9WSRd?UI``mrIuDcdQjY{U`f6l!#$)th){!ccWDY@tC<$UKm=dcKtlf@!5<O!CE
z6=G$x@>wiN9`O5gm`uti1i)mo<`IE(tI5d6Oh%g|Jr9d~3E!q-z#uY&;LkUi*Y}jI
zsB>tXzEl$_zhA^wIQ;HpZ>l-XtQHuB4KlM&t4XuSWR^6I)@PPc_v7CU^9%7s!-t8D
zsrlB@x!IxmY^TL6?_OmIxGWC8$&|tu^0i@`#)lsBX|!o(narF<?E9s?l+?0VENtWl
z7K>a5agSrkSuB930vjK2a9}c8ZMXsF0~Y`W{I*AU8a_|Mdl*0Yo+*X9Bz*spxK!f@
zSSAo-M({uSR=>Z^KpDcHnN+|=eX6j+0pZvesgvYMdTej(*nBj4AUzlw2Lzb-xJ)Yd
z`w)8+_^qQLKQZ)#=Ji*Wa3(^|NS9i5VyjV-B;b-_G8U8JC*|51g`r;O7(&0ab2TQr
zTxTNKgpftk{vQ^LJq+<9SxE>#8aatUW<Woqc**c%Ekcv%5|*C^!j#sBWe)!>CH(UN
zUb^{h>@P$bX2hQLw_C$Q*lB9{yVQb@!F=iywSheG2M7aa-34{yeF!6wC1W{QEDIzr
zke-T}3`$655UE8Vq6{2@RtbX$d%n6aSFJ1PEvGL0Vc)e|ufFchZ8^I9xy8U)w)>UM
z;m<xW=QOxI)d3CFN)S}%{G}_q-wV#auFXHEu}D!oGW*!d0tgYXYDc~$CFD7l2U6!t
z25iD)G+QBfanS7d$rT(Vh*SdUrA(^B5a&aAfY>e<^|w+ZkKaX&oSVDwIl#W-_8(f>
z<CJoN-s&rwl{xpW!Gh8?cg_yARTmo)<Y1;~VCmqpSAg)Ydw}4Tr3;%kC5lB#ol;b~
z<GJ-4p5I=YsB-Ayxd<QX7>!Q_<O3fFfDSN5V6}yU5Fv&iwooc|B^;rGkdpe(Z{c;;
zm<rp2j&hTNt>7E<217-4%E5o$-Ew8L6Xl}!dscEi^6GSB&?@C}YZU^eSgYi2<*j`Q
zU`H-Xi-^`ABwO-0En6kzuoQy~hKB4T<YJN*F?^kek;nUAq`o^I{uHwv2mBZNssH4!
zy}zIOCs6j^zcwHH{T<YgFZPos7QaCKc*ol3c9adX%XU1+=;sI=|4BH$kY$L~91&Dc
z5kO#M5tyccUxfXs|Nb=v1#9TB6R017k_Hz6e)jAi;IL~E0IK;YRZYA{1Ehgt`;TJV
zApx|mra^dI_=X0;{D6nSFBBWwKD+`yNW8}=Iiud_8R{gF1)s6NH=~Aah<SRPSrb_i
zV-C;74~920<IWyu#?&7prVBwZuqN2;7@qN?c+yy6y71@JcQlU8ABP`9C<0bBw1LWq
z4TuneV-}#pkb2ot@iFZRhD4BrTtHSX`}w*v)c?G-tp8;oKh=74#}ap~ILl}#YV0jq
zd}>2c`L=T_8aC&gQ)#h}!cR0-NAzF#$`ValnRA1dCzDt;;)>nR4qo;0o^qoWu(h%y
z5!}i7qdXq{N6x3d3%60<0X}vT`6_H(_-gV*_y%kl)H5mcQzU!_XDQ%QkYI}`@)#6+
z0KSJmexf_vhMfe*4>JQDK8%I}{KG`zhaX=09*svN-WG=cjq(sYOpnQOKt#a92sU!t
z@Vh?hB=`!x*2c;dfgC4G@Kr>XGXUQ<od_p*UBHr$e2e`Kj*UES#Q5_7ZPN6(0g(aw
zUC!D^*8~@4;&C{xRf|H-%+_oj;9=N?SN2u$`1S_7T+KIB49vhE7^Q_=62TYA5afYu
z0N5NIP|$%4q(V=Q_ytbqTYX}1KpAp=K`C9ShCmYd@hh)KNG*`~JTs|_fQMJe6yRsQ
zGJG<mNOYOP9cmROSIfgYBfNpI@Nemu!LrbrhkrYK2Jk-nj688E1Afngx+#R;i<s{@
zf%JR?+9H#3ND(0%KJ&QlX21h|M(WwmKEnj<PaFAl*i+#bA3N*d-AA>uSkUSj81J!+
zFlL|_@+j~{VYAOiY)xbmrH2691&lW2N8wvqq2X%<<R{3({p|B!v8n3h0&77sRfZE^
zy(L!3L~-DZNXzHzMBu?Vu}mdK62ebp6b`?YosDN03e>~x<OwWJEExW?zQk-P)#C<%
zI1U@*Gtyl-4IeR9J_a}y1fUl0)4QZ$9{a0nMM{a7i~Wcb2!c$BzfzPj3^f{$7x9NP
zOeI=;dDMU0N{>m?6paQEbqMBy$q?+b_RkB<OjE~cMFNwdx;iYH0Bzf>>lbB9WQ(<u
z#P%*b{=!s%G2|E61oR7ZRAzj4tZN`>4;~YB*u)~_N$;h;JKx`b9`Ns7_R`(k+C9`)
z$m2p!UQn<W{a#amJo<&#mM?z|2=2H82wq$6pR?=U7yH*fx3jElC*y$`2aiJ>u7@~$
z!AgJ}&4O4k7LacBKvEglas`NbdB_(I%19(J5j>QKX9KLEYdr$&aj)}lEJvthW#F?H
ztfcYneYCDd+hFT|d0;b*_44yGvU&2PWcgk|q@swh;QoRYIz7T{;9L>DZ$9<!6Eyx#
z`y#s@B+duMM`$X1-Wg)0kVEsXcH}~w74lAk^19Ku6k(QyV+hbe8z4MsNh$)-aDauo
zj`U|_^dIT!KH8s|*?*MW3x=<6`Raz7E}rh{I(_k`8@_76mxs5Y!0>Lx?ibdsePK^U
z#UAu~cSYRCPj~e%e>KY2{_dxl01=JF#Qk(ER-<f(!3kQuB$8dx4ggzQwXD)?u2@$6
z#v9jvxUabEn%`gh26Yj8*HYS(o7Gul3jd6KT(aST-bD{@E~9YT<j0MzoqlYCY?{%b
zwSPS2_?O5NKhfjYQ2)zrp!w-Ty2vP8l&8ppdBB9oMW>1!&=pm>s1gzvKJ(V<KlCro
zny9Gu>LsPv?<3l`HlmG}ZdIAS<nt%$>fAH8Y)gyeHwlpL1eQ5Uw-wR~Q5kco(c~5S
z9jv8hWu^K0Ll5DzFP0`#?};4t0Z9H+H~xN4fva(CjVeWq{b((o9a^@A(uWg*;9ZqG
z{1$m4ciGX|mD~Fp6at5a_6eyY-x4gykK9Q78C5QJbkfAQ2py9`r?La|oJy|1?@3fk
zWoacHc^S=_n#|61o7Z(_7H@lcUFq(POPuuyda*LAVR7}qX86@r@T>fFkF47INeyv_
zOp<I(R(p%>{t~a%l{ss3`@9FYRH}Vtu5EmY!{=Dqmsyc!v}d&M>8ZbYu&kki!IL^h
z<JmGLp3~>I_-{c!(08a?Fh!p0%HOzRp6xf$H0#z4GX#N28SiF7msVt-mQcXbLH)lG
z>H!C3A4uo{192l&LtUh5h}Fa!mqNrFe@1_Y=D~NszZ1mdWdZs}hW#64Qm?}&UWdQw
zr>JX=hD)$#kAlHJ{~11e0Oo0V@L6TVqrhh)vZi0^Fzlao8=KvL*L3S=`>*-z)+WGn
z&)oQFdgtyYeBSWw+x~P%TiYFf+6G_W(X_iOotDo5>Nq{7FA`fgG3iV4SZ0%oM?f$M
z2$@&3>G4$(qgptc&{*kACqHZ3I|plMxOE5@^2G4%gRkGxE9R;VRvDAxbfC<~-(}-;
z-TwQlqR22v((!I|zAa|4;(>|wj-xRf_{nwQCohJd`~*&Q;k+uDpQsUmrZ|rg1yS;Z
zQ9XQ}Ye7cF0vEnYVP)bc%roLFa6B6`o)t~8BjZX&$IS)^j9d{6p~^&@h04E3y~5+N
z6FJoR@2P_SF?r&Cj1$DgNw`1*q17YsYMF>9{E?kT!^Z#HoUTlf44cUl2F>st`f7)>
zN{`P~SRqPx<Tch8;B%E`8XuTXk{J*mHOebdiooUo6t?1l0pUO=XMO`9GpO%1h6L(N
z9G7|_F<E&D{FU;9M2(UQDiio1m8+5hKzTG`%%v1lERh!b0()K{3V*Fsf<H;b;abGY
zix8F;!jdw%^aN&R!x=sGefYvxCI=tHDNKBxQ4ToV6yw*JH~b#v#n%{Bl-5;awbr=6
z-{cW~+My2bf@AWLC+47J8>t9DD!)q=R$<><dYsS2z6hrhsbq1g_0ks~_e(88Li-2k
zFVjZ8#rG02nA-=DM_`l<J{+X$JtD@D<Frnv=MkaNnvm6o9a(%stF<<-W_cj|=9!<{
zubbyzVX|`NwyK7XP~ozM6jgTT-gB#4n{w)N(sU{_7n~#2&J06gMkoX8zdL);4YR`Q
zWcn&oz$`J9EiARwmgS{t@tg%c8k0sXMz~QY@vmvz>c-(VW(8mx<UCRQW0U_Fgh2~!
z9W`arq`2u3PGP7TH&2KmBK$rwoQwrdLZO(Biuwqh6Xt_B%MWuoF{F(L^Qew7>Yy=O
z=pf2Qu6We!am4UxC}q->(dr#$!fsi7J*2ZVZDyVsJC@|D_AeaZ1OEP{B`p~inVDbg
z=;>dUzVx|VU0eUU+^TiW?n#8VonJF}lQr{!fmt^%%O?|MBJd8GoSI`OEzsr9FMT;}
zcDZxc`a?JFSLs!XW^bWQIB#LF#;34WE-km!RTcPjxM@LuvN;(tps}&Fwt80a=EqlP
zEV6hyci1p;fpC)VKz)Up8zGaXh|LMa(1Btmoj!{EV5PGsl-W^WT(PLU-<x-MZrg$0
zVBWypJ>I&akdn*RD(@Kr34W(z)}GG$4;N;iF03uv@$}%Px36!I7}Ip6Dmes4+e-1s
z1^iw@%u1OU|FBqQ(`;tqTN_s<m6&~{{=#{MdQ(wnc6O!DqR<J-9o-9-2D|RtTv@pJ
z>GcDrN^u8YsL(1rt()p+Y@OxSnzV{`#G3M}U){X&{Iv~Lr8Io%7!AMp3iTvBiU4OS
zEEV{@B@cG+I;%~EZ9zwcQ4T|_ktroLAMDSKU{p8_>PH)@<9(At>W;+5T~7`$n6^(M
zCBi$-n`|Ac3%-fS2~Fu}!NC{NqJ&%l{n?agPh>8f9Yre3ehyijb8v3+_F3+smezt5
zz9F{39nu7w;EzWaP)<k6cqvFMBB?ykcT-o%!lq(9z;DVZ%Up1vB|Ly#+qodi7gmvN
zVzngRkX4^rbX8E~P)??EoX9XNWwy6+^PF_0P6<Z!hcg0su;^Fn&lrh{Y`_sA|0S7n
zsy~5$zf$icW-&u?QD0+mG8=$YrB*N^v?YH|oj2NL1_5aKi`L1fe&OqM854MVC50WO
zK1r(rVE8mo3bJK#YKJ>XU{_Fli4yEm@F^$RD%QmEG|H!M*|$JGEvEGx`D><11*d;w
zGcUPf8vUN0i&_-kL{XnESFmphUQ@mMz#^&U(FBPgLF#SDDO+4=NlD4_{yLqJ*(4&N
zulI1@`~w|MAf~?dIOKYTIG)Rot9GXz-i76=RP%J2g2Dogy*!wlQrVrJvC?lyyMpTA
zm~Domd}m)?R_BKN4<8AC=nZlcxm<3<2hhCP!Bob^sEH<cQ?lwZM)hm_$QTP{<nr-!
zR!zx5SBmyBc31LXJAbN5cGUeyAzKAew&FjJF<{*&Q?;6cqI_)(Q$>!XDY$wCXElz|
z%-pvW`uHE9!xy3qbF?nO)Ji3gx1NaQMp+}mC}&S*Mtgx#8?5uzF7XZ>PUFe)?poY@
zO>Zb~@b2E04PI>6?{v=G(bm4H-c*oH-2RKt-BaFLw(FJ6t6n+S7)-^`($vTZf=$-b
zb+8aq2gAKIPUSG>?WS?^Ou`A6ra&ry>ZE>|9~+@@%ZIqtdTW<@z@7s~(s<H*h~0jO
z-M~G)E$h9XfBw?}>@R-1rD1bh`?`wc{A@hu(jkOl;nwFj54^CiHkkU!(Kp{@_)`FJ
zv6DyO+`X8YxrD~*$v}rkgD-;#R2&<}W)0@UJUtc9N4aW9A!l<ich<a$6kO;jn2}yE
zugGXC?f`+z*@dR!?Jr)n@X_tng=_C$_`(KRPs^(wL87v{s79y~fOt*sGtCdD@e^gI
zoO2HKTZ+;&&Z>EtmCI{vgxI&~@S_WE{O4WG#hcF#%s#QHYIpyU%&m2b6n;vQjF4z;
zNi#)x-jxk<2cM>+2+H{@7)#?=ZphQov<aWehoGE-ZNdd==>8UO6p`$dik_UDS%qne
zWatq3mJb9MKY4Xs$(APu=H9!eILU~u_0BA?Y*=xq07yW$zkZ<FqA_YB*1i9~_AGj8
zZ$sYNQ_C}KG!8IFWpF5&8V4}_4DQN^<=oyRF-@A(<z>x(U{m?!a4oCib2Sqtc%3$O
z?f%!d#-a~>kpmL(D)|B{nZ@#pY^fj@_#<-X@M)!B9PUePTGP=$&vk9(xg_8#bfT0}
zuM%*nFkZoDYt_9qt=G&;mt4gc#p4oBZDz?M!%r}}=78~%P5y(GiB{0Sl-V6)3=AC8
zI2>Tm^oz#jheYj^$)9zmy<l#E0U<PmFwNZf(mqdfOIMaMHgCjtPEHH$JdwS8E{$-6
zloGTS$%*HHOF3f+Wt5iqYauN&SaUDKt+A9w^ef1PQ^0WqPR(eVAm6NxzCtiH{ml&h
z2^2L%Er&CdSgIMavS<ly<ck>z`DilZAerGOF3*+9;U{8KYer|tTIkC{SL8w@yvLF|
z4T0zrQ=y)Xr5WfC7)qwWy#u|EkH1PQKyRBOSVr}k{UMZ5`b6BIKtxj|tzd$Z)0}SY
z=qnhXj>c$Mte!vyhF_bMWyY{Cf>V44#HsE#Y0Y$4UWSQdS~3Coaq4kJg?RmP1ks#k
z>Sn3r2Q2+Wnqoyx<N7kfHE;9z9nM+$I4spTcSoZMyK0Eq5y8XIdDoia_=K&Bcw=#I
zv2vI*D$6JgBdX-W<S0^%hz=a<E3hw1o2A!XqcKSqHVu^P>G5e#khS9j@&mW|qCmP7
zGZ*(1M8=PWP1`nvMM}umSvnM-CsKqww2>W!%iv+PK|fC~Zun^mo%Ms&>J*tlk?mus
zYdg-@^5=0AxC!$Ub%F=~_lpS3)ibuXdPvS539qJY4TBAFkjr0~z~?6{<Rt<*okt+r
zzlZpkSdU>QX7z{8C(!5rhM!AdZc`Rrj~okf<b?O&vXtQ0$*q2^I?W=NThi28zf}(A
z$Sr=2)`vdvX*GU}{L&{=QAZ|fn7$khdJ2s);r%ZkPfu=?zRzg-o*1Jq^7;SJpFb5t
zH`E2{B(VnSLe}N=ZR%J%y&7uA6?d$W)#1|Vl{2Q0Lx<H+pJRf)A|1Md22HIn)ANfN
zn|%(_Kb6k~)B4<qokSoahf$VGMqTU?nj5X-jq)dI#d!a~_*mbRRvPgI$mgDg@nDi{
zroc@?8_y*4+O?)zCZd<S>4hD$yZE<Vqcw?F$}9T{b&Oe0gJDPOwR6*zDhitVT4k^)
zt7!~JMz1(Wplpn+X4;NU6AwrAjk7uC^T&u&Q9I+TjM&+n-)d)5&^=xO&<|TCx5XNt
zO%7($#+PQ5$*gI#@%=nwD!Dlu2CFnKnLa7Y7nRwsx5x2Jn?l<n>Kx(Cq8Q#hL7X1_
zd`ZmbPod8l8|7e7M;m{mj!tj1zg~5fQyOyRZ&2uIEPE{8LHm2175EjjO_uePG)y7J
z-zX!R=SS!m>AkF9jBQe27OJLpho;(1?WUaMcuZxr_>y_kxxq_+FJ9B;k5AYo<q8Zz
zJH901qo^aak1GFd@}G>{uNQj+;W%7nvG@_fzf#;&P%y?*=+8LuFkj1^oI}F-$Yo1-
zQ)QFPMC7uCxoNUXGz%F%HC^3pT$UM$5%JeUyqmAc|KCK&w9?4j`0_qa)0K%E%RZ-*
z&TpeOCMFWq<SUcsu5w5nLj$xzzs$s-pWc7>vYCgg@A)y%Yg)19;=d!9xMtiuP|5|r
zRFH`nd((jHk<pm;0USHy%5$7-Fb3=j2|7Zd<KD)73<{Ue$7#G0W6_Gz?HKu%yb8|Q
zv*|VBNyWp7v*;L%X>p4TGNRFIS0qQPfBUO<AEdg5rbPMi0I8901!BB%Vg+wBiJmz3
z2TG}&dhU^kPL6yVM?zd1uBekSA4Jidsx*2TeGJSW_x>@6x?&3|b$Z8_IuBCa(<x$v
z7A-%Pk|`*U_zIkrMjgf}Ldp`rjCIav#|hL0x|o)pO4#@yTC0`Fqyiw1)@j+X%^}Qc
zCSpV=TBwyPz=hNjx1t07r*M~o5_4YDoF0$Eug>l)DV<-a`!O(Emb>J}nYs+MH`+I{
z<*7A;53S0WRpaoA3_fFBTkg_Btwn=gOr=c8v(&V;)tK|#%J7pqt1N*e*or)d+GCW+
zEPlc@J0(FB$gkPh;$f3obFwxOPf!NuRF-U=pX;uk7pR!4m6c^G(!4H_^P0|@jk8kK
zDpYHwZpD8fWUNG1UZk$cjx5tkM3Wj{^03?qML9(%=%=f%D|QYntXSY3LY+Rvt2%3S
znOvPh;Rw}cL3eG`=a$xcyAChPMAcYteQ~CW$4kS)e#gBhP9Dk6!JZhd>bzs1P-^z5
zJ4IrZPGu`<^VJ#B^n&u8FRWYo+%*j%eTpX2&FJI?D7c?szABq~9m@|^j-NgcO|g*l
z&dA8fjc6Q>9_B$^v@Se6(oOeEd<owS!SS_IkIxi#p>{KHwjnsP5S)Vthk%m$C%!rY
z?FMWa4K0&cb@b(zkJ7Ut2mu@;--`6r!qFyXreMQQK&5hJ8T6S>rP7(HH)Od~1a^rc
zFyPW>pwBYkXXtkpQ@;dn!0{xkG!{!Tu3XB;Br(aDe|#tHaP069+(VI!tM(`PxJ-<=
zAqJiS!T+Tq(rJs3n$#za)<iZC80yKOsoOBb;Ewn^lez`}6OF5lg_<cQU~8E0p7f7P
zErPkx3Ol5Qp(BK6Paq?FNT1<SDqRTW6qPC^3p_C7?mn{ERFNzs)V96_Y0Dd1w$Dl#
zYM-U^SPY`c<V}2ka9GiFZC_@5!cJ*o+wwf0KeO*Z3wBL-uyaAY)R=^N<{zhy&@z?K
z>lKsop~(_vvL1aro%QH=NZ#3Fz_V$2|7l!;Ls%vYpVrm05H{ksWJ<^zq6s0cq!Yp^
z#%1h@a7Xn0vRMUKdD%pPd}sRb|4tMR#P$C#90H@(PXh;z4v-YEbr2%z2}3R$j>z;x
z`$gC~<H4c(bo+*gxN9A}+~J?FM@w%o^0Tq|;fwU#XcK()FKGRT7-ZIeST9C>4qMIi
z9iYrB8Ff3OwhcViJ@8{4#fHOPfl!@YT$?&~Q*u&8%iOe?JKH@&Elt+KG|f*<4Z%5f
z0&~~sd}i6AS^mmYdHVc=bC8Fc*P}|S@}gG@Is>U;(U{MJ@X@Z1@jw}$=Tm^W$)&Ze
z=`nr}B7pBq4p?O4eIJAx@uM*Ip)s8?V@_;`4onBb)p1><Ct55p>8q=!0(p4W4U4j+
z(j{7PVtW_1dkj2=*5QdP2wQ@(KM+%8M^++Xb}7-J2rF3i%&v-xUC*o<cy?E1<*sK3
zwr<?Gb^E4Ggt+SJSJtEc{HlGgY*_!w)m6i{J#^y4>4%RWKNX4XBaac?L@z6jB}DT+
zOJr5m1DK%|F^jG+#d3ks(9JYCgLB#STlWbCb2Db_*l)mk@=FmG6<dNPzRBj4wBJ%x
zhR`{<Jd`L?>g5|=*FSzDyW6_Xc=p8FI;^ndg|!Gdt;QqOh&b<;o?nk}%&Hcv1RMrG
z$OHDxkOy3rlvRpW^2VqJ(>4)}TV#yw8cJESYSo%`t5y=6q_k+u(6Uftu2-SuSJEv*
zOP<TkIlry<!K+HkHa)!Ps%Nu8Pi~oYXjvX=5PFzl-HC_5<D=a{qswOV7S3H1WpZCv
z`{L1VAPnlz8Nvzk2WG7{x)eeq&#}d>pIB`X6<X=+$%?FprqwR-^78LoGP)AF!HYBq
zEmt^O&{}PsxiI@qv`qW*=7CoZHU>P@Y_ieKio&JWV=a^51}4Lu2sQWCz9`Vv^`4=j
z@gPqZ)Rpdhi3XV;q^ddE$htIjhR&6yS(g@#mkpg6Ip&XBmmbQ!r7yZD-M!t9lAv+x
z(%1*TJPh71Y>2K)7iDCP<viHmAnc?_PQql{w9jE|6Q-Lz-kt5`E+Huq3bHkh0>4c(
zbiGwa;tjJGB|jw=BqX^D9O0`8Ol@MuM7@I^sDH6N&+MsNo@wTeHVtF{Nsx=gj$o;$
zvdLB6J_kY#EIc|t&^xC-lJ^BGGg9&$5?6UgS4X+aH~0Fk{?l1_mXIe^O7naMw^6Nk
z<hSNkZR+sDq$QH{$&BtKb1MAGRn%RQziOtxER(^LI!5E!JQbePw@!fHfWE6~W5bmF
z5N*f&zloxvRjpYGllvXECKP!tLnJK=_Dr^pb=7Z`g>{<Fnk)69{J+RhldjUIcHg|P
z_l8b4(}FTK2}La^3#D4R1x1nGlvBQ_%$S`W$B+BXQYXo}=IT9tIa%Es@;{im@g%=6
zUt_Nf>YY{dGKzO(vU!|{p3pqJ@&8Cq{tsC@oqoAmr`NClBW_Qlk=x>@)yV%h0YD!$
z@-4BAe1Trqifl!P+$W~qKtZ5J*oeobQ<*#r+r9e4La!~mB-`ezYOV6+FFDYV+TK*9
z%SwP8a{3C~`L)4@u7;p9zcSyc@YRKO>=~-K`X%y(lD;+mtQmQ!PPf+JO---vubsKA
z)jg(T)j6KLG*5neY37Uqe=yI9a_qZq9rog%^gp`2GE$4eUW2&9{7N#eoFN;n#=OiF
zSK=_QKBdU5pzAF}DP3^bs)(1T)n{IMIZ~8h{Ht-~TkOwd4qE>t$JAw-;s|(;Zs9tf
z&eUrrh+7!pyc#4;DrwMps{#7*`E=jXRU^#)y;2$nGsNL95C=$~#2=V|fovMJ&fY!_
z6EvxvsC?V8b2rA|bK?<eBvws;n4zB>Wa?aKU&eIy6G3OHwiSFORX7py7-}y}+0Zhn
z&^3nUlwB?u%S4?dKBVVwGbYbUCF2$}u0X^1IX1zGozuZN-b4DxB%3l%ENLy2YVHk?
zYQ+}p_p)C*0iTjo4NxFb$E}AjvLJRrJupLA{0c&dT|<<4TFzs?zZ~eO?nBw<psLbj
z-M@T&@G@rcAkCsFOM-JRXD`zf0>@bqjdL6q>g&u%{D>`}UlGyCJRGmraieujx@uf-
z1p=z4Ap1q6@1^;qH&WiDOUjp{X}nw*CNMU@is(J3o!0xMzgF*mGxg&wg1v7-dFJ6r
z*{Pn&@Y)r6g(zOitB%xor!^7q5Tk`JNPe@W$bTi5#+whL8ypVQ=YnbN=ht$C!x@6a
z{$}Z8FZ^~{L%dhOxbQWBMXHTsU8<29S}-KSzdoGC6XhRS&<sQ7&@5ERL?t`-jDq^i
zh0#)1rVslEZPzQHuWW+jdB^S3pK4tHxXn96Q$*6(L|{Wx@8h2ge?qkpptBeV1;iz0
zUt47V8QOA2D5yn$r53%dv9MngCdDTtiQeRxl}t5KB@O?#cXn#(Y%gY(s?b<)47Q&j
zP$z0U+H4v<Ifm^569%R?wxPGo&NjB6dipgZ@5y)p$ri*vljwM!dgfKNm3<>u#O5mb
z53o(jr78>iI8VXlB^{1nkb*VpvUR##UHD82gN?hz<!W(bR;dcU`=fi7Yi2ux8pMqa
z>EuH?)kycy`85bJW`i4z8bl<R4FJLaT5aHdO7h}f<m!|D47#b)U#nFKA9JOr<fgw-
z4{OArSES=nAB(h@2wV_|s0WM&z_(B;1Ov{ebr6Oe(NDKUP2#66{65!Ye)2_X?x$Kq
z+#k6DPP~}=PMigb;FrIv)ZiF?RwEAoM;+8?LTXIH@HHJKBOP#DREv|c$8B!IJH!G?
z34R{_LMR0Pp+tBBeoW;PhBrUIK;)5Od!Iu-su3^5mXS}hxTt~?vxjW7E<bLA8y364
z4V=%eaf>Y`Yqpj;ow2(vvpwI?l%(V)CZ(hX49=1?wXylSB_6ji#i)}>lyO8c#*=A;
zdZk(m`urYqVQV_Il`pqQlcfoASH8ngnqkG1K{sE_mn9<HD)C(G6Y|L`*Ra41mFrqO
zo|bi$mFs7Dy|dO=78e#4mlYP0Po^}kuB=+yl#<f4wyJV<V+tjk+1A$F+}1XesX5HX
zE3x<JeXwY?116%VZH;7_aG1UMe(-(@$tKwGDPZ+psgkXHQ%NeN`~H0gk-h^epjN*9
z-%>$!HD89!f#VtRYr!w%8OYDH%kYyi><R3g;R+^ml`558PJNNKwlu9Sq^(a<#wXY+
z0@W?*($yVCy~?0gOGS{Cy%<*@<;uk(IY@Up^_g{U>PenlVKCHGXtL9cn9yN_j!Vp=
zX{^An#VXhbSVFX)Omf*;PGmpX_ad`YtWV-|B^t5HD$`c@?4^FKA*U(Lla+)MQsKZu
zgiDafH)c3({$!q1zFMs}m(I`6>8o^_HAxa4_6u5vg}expr|Dg6G4n-vY{hM?o&(;F
z<MR_G3avcoN%yL>G6|&6r^?LCRD0Ws?Z)Eyg$3O<QX9{OlvNd#R`G;9L4nR9<ygx4
z3Nw2uoen!A(-cT=3Qg~?+}{AUAbJguUYSm+vWQMCN#@4sYcm|BKCL0U$!815NiihX
zkm<BSawQV1Da_W|3@%F<qPfZ`7Xx;rpBut9K$_!NuF-yXj%<9DaeU7`*c~U)C)wO_
z@mZ-#i%u<&$NN>;x!LNBc~ve;$=uvvYk^6SMEr%XOA<Pr3xb|RK_WxAxxBwTy{p1$
z$ZyZGGrr7-9|G5~_t7UNut(STO%s;?!PUTJvaeo#N-IgK&}B5HOZ5`A!<g(5ZJ-u_
zTREgyQm$}U2el*t=Q;-LZ<vjI1nRVkRgWxj%<?4ZslZ4t)gtanAU&fixb&yQ#0A{o
zSP>ZTO*)+k{@j@C&(|wBGOI2t^?rfWKp3+c+zJWLTiIOcHI?)f<acCitwxc|XmNUt
zIgOs80P#w)N}ZgnR_du&1c@Xr7AJ`Lamkpeh%X}JgmQbnI|=7-1#uXu&PX?x1`P_U
zPi0KuCt9@1fJk29wHKx&MfPG<;D;~|)EC*<DR1Ly|39en-L7JH(nHBQg-vqm6uC*E
zN)A@Js578mZ-!3xI;ieY_L-3PB>NDv_J|6Wp$RKf-#zq#P-~UR%xa-fZI;QbS|PcI
z;)Cz*mzgy}p$2|rL0?&DT^jiU`y3E(JbK+rGHLZ`;^-G8?&^@#C}9JxL@ZAvpBHLk
zVQCO7m8~?OBgjrJkK`+*;2%=}X817|@<RjP(EbW78_CcTCzNqMy$zeg=ExP;+}k9{
zWD_)v<Wr{<0twm7(MWIKC^D!8_#vL?44?CN>=$ZwT;hHK?`*P!Z)C=1eGkXR84i8_
z5c@!wjo8P0hu1^fF-7FS)ZgjTV$!2kjF`oe&ol)-Pp(KkCv8smLwQ>BDXmdr5S&_~
ziz63nY+jqkzGyBIQHfcPei=*x9<>(}CDZfyN+fd#3nyM5`4Zw3wcQ%{*_Go>c1~}F
z-Cog~lha#iw^#P&q@|{&`BGEK)0Xo2`31e@R%>~0LH_)53)NFnSy^0MSy{sPhYIWh
zRte+7RK9pZJzvI@oqve>CW%_0w~K|z^_dZ8jQrB6B|<q7>x*U5`NkAWSugF2<)W9d
zvwQ)B>w<7y5H6pt=STVwMqOfHQfVD*7Fi??Zz2rX8Y|R!Z8;MHpf~j9C`qo4l<*Ua
z8mu%#upnIhsm2iXhI*w)8<8it6T*~_%9F#UYwGN1N&O$ne7i)$O(f*;dTz3XcWQx3
zLXyocUqakYIiXimuVW&yg7ItDf>)tz0*qfn47+^oi}7>E5~YdISS0~dAU9yrX3h+$
zLw>iw&XI})@+5tdA;}cX4VqMehG15Ymb6Ra6XNwEsYq%Jy6nYi>IAWZU(DrkVPr@Y
zON3HOZkj32qjBgEPRS6bJK0&Zw!}_I@&Qa2Wzg?3!JkItPJNxTuF1|9HyhZ=?OV18
z1cC%^Ts(<CqfoR}!2DQLDp{kxVZ--)DTfos_@yGKj}DldOh324980u3j;=J_Rg@ZW
zPvnX4H(IsUlpL&dfd=Z4WRpk$R?*`DsPlg2oC<)OaC#y|=by-?{h0r)+ul4VRuKhp
zJT^xVSA;7?XfRA9<iBk!(CZ6KZ}I7QffU+l8yv@tYF?2+B7R}qkl7H55qS?A+JOl(
zedz&_26vP3WTG&OOo9}v$P5mbB)OyySBdtV*ei=KA>#-<o-B(~?;%f!rRQ}abs+m?
zkwhXnuMMhH0qrYdarhhE7h;Q8Vv+oVmV*$|HG?^yg7H_;od-4=yF5l99Bjr3v7FPw
zjw@m-L`P4bJRugbTZuR_gR8#%Bz{Pectj#ul_&w?k$CRSTt#B9Vu<MhprGvpnKQDO
z+&wgjcR}hKu2QkR@4Z_ja<Y=0K$3~<3Q{SA3|y;}d;<O~PCPF%izF8Db374U4~4ez
z`_VHga6gl_OH2U+_`T|lzfc{C!ry%ij*(rq<Pp}+Dy~ri@SX6v2I4x*LY||~$&2jy
zu;C!&u=5XGt1*d($a8AdMS&EM5bvMaJS>+}iq54&#~RVS<u))Z)heXiKR%{4NU8Ij
zQY>D`r!H_rK#ynzJUITBk@4v{5Hc+6%OQzLbJKMKyPZ5oU6Kkes?-n{I6hv&j31fP
z<l%n2gnCwL);#upf;34h<&;vNi{pTRFQN||1FR5n5c?N>{vm79J`wC+6Sss+-1q@l
zen`^~9R1YK|L~Z=rI-PkpD;t=5<Ga}uWTMy-OrDU<M*q%KoSdo8XNf6|9<hm4+_+A
z{UnzS)pAjshEJZLz6A0F&T^8+;qb`iY<iEfD}u)~<NR>piwlnloT4_8gX0{sRpb(I
z^wd{C5+`3xCPM8X2NiLM-(q47mQ22f&X|Mpq>o)<W`{p&cqk*{+4Ze?<a^4*_~h(4
z6<Q%^XMDp9;$G~1@-F6NtYE+&@q@^%o1%R%mvqLPlY`Z6b6(IR)f$c_XH=({^Mk2m
zy}^~yQD{=>R3;~UVTLal-s0FV(D@`s`t-&Ih52)IRE#G#$Px~#1GPSXb)H|X&`T4J
zYS6oyoOJd*Vzoi&>nL~XEqbxWC`_AE?t(9w*q1}>#{N$4tF`@#9Rm%M+W&8oTl`uL
zv-d`$^;_gu?CNLWrm|VscbtS@2{#LkuJV}Wa<fN;pn)f45QFH*5F;6ThuUkFO3hw%
z6u$}Y85#8w&tuP!v*}z1&dYnTmhc1Q?Az(@=Ch61v+PHr-_6Hb!}qZtxsLvB9<djD
z9_pwpQZ@8P&oM#*0S8+K%5|r>TA$74({fMg$_I(P?z)9pI<G-2Hh6Ve3+p0l+GXqn
z?2jBZ-Mch4PB1b|^@bMDb9_V4UZ3}zr)2{>!BD)QOqZ$`73RPM#sc|vhM147ATKfb
z(8M#2L(<3!A5^(B=G=x9_l!J?C2xj1r6Je6+mmAVdhID5(w$lp)aimXsqU(PRvV~t
zTm62kGc66t<wf!vteew+<?&xMW>z_zwV6g^X06jvm1$g?%8Z}Ne!x}k(`bC<E@z2P
zt@f2TZ9bok9v_GJFUDn@ZhCyj<sppuy6I^FpACtlUN9Y!rPU&`s?)XF^lCQ^*6YPE
z=pKdNL-z>bzfJxDpAlD2!*^W)KFPqx{cr07WmbE6P_GY`+pT2*{W6!+>hV~eE-Z<9
zTWZog_9E?B*}LsUUX{vQWVaQjs#K|kHjBq&v8SejyFL)dz05dVjCC_{9lnzG=dxIj
zZos4PFzM?;tEP7|-(d&Tu-K#>JQFXHX{4i$p8my?@R@T0cR`<j68gP(TB|st<B_AW
zLiLW+s9C*F=yPChijq3CJD-rIJ2?7pM3T>xns3D7&yuu^eqJO{4*o7Z(gZ8SJQG{?
z$h6T`#7tD;&Sb{;nVpE)IH4)Wu)$}OwLwQxk|U^1hGVhs)CJJHfG#<NeutPb{+Bw2
zErGKRI2|OXS;Y2(m!?=<&e@kcY27!{*Zm=N66;`25hi1I?I=czwwNxu52v|q>sXEU
z8D@7)_EKl!SUHv+6DX*wu=tS^C{~c;V#QxIa5|@v^X>XszIGTY^!_TpMhKkn88dMJ
zOCcYi`$bI>Klu5hrMD6X016wUXYP{l4Sld1krv)epSJt)B?o;_B3=6>yXo`3;VX-Q
zN#-~}PPe6pfC1QWF7-4&nGgSmy{Z4@Q9TBO+DCY*X<lYlw{`f-`uf_M${EB9^x2rq
z`J6c93ObPhoqBuaQ#vsXCJ%p!fAK5N>copaUihm{>txOvTf>~|YKXK)+9F4r0YACs
z3sVZ0dPt<_D~!~sIFIoStm2|cg%7wEWDc|rU(1|`j_kY!^6?OT?k<Nu0~qFV=m+_A
z;?Sihh{{V({6zcy6Q6x{DdV%xu*FQRKYI2mhdHko{fnL%OuRfQ1Hj6OoL`2b7eo`L
z84~6c3WO^MSs#-<#sgI3F~~4wsMY1I)qgBk3rIqskyAhFQxvYsWbB$tPiUp!IVz1O
zCMt=K<KmQ=CTd7&(IzGGH3qwqddcG8v&nboYqRAT3zG}%(t&qr8Z$=@vRAMbtOV#s
z(&&ChG;6idt4}Dkq!A)GGE;y#xFHnq;~&nsxj!qb|K>R(a}J{yhv$qO9Xj3VY*>BM
zV|^pH44t0Sd3xyR2uQ}t*4)wFe%snI3@clETYLK*YsxSp2kU#}UprgxJ+Nk`2fX+q
zSn%+dyLSHTkv{BM#FG{li|vXzW0nKChYtOt>jelS_#WaYN)P(kuDV<PahUq<@ZXQt
zJ?`?D8n$-<e)o<>lLrnE{(0-WH@9-A<Det1_2zfCV4QR-)zrMBBf!Q7hp%C$ckGx6
zPFd3t%$X2o0@UAZbPlkTZK5H>Xe)$?rhoKlGKdKP>NCMO6eJ~fg4Y@Ts&suvdinah
z+S~71SDxOnzBK%m)B6w4Ja5}g{n<-j1o+K21N?<$+5I=QdFOimyw~CZ-o%;P@9SEA
zd`U34<oNQg`?k+aq~7yb_QrGct8RH_(ZP$4&Y%D2#e<8UIXa-{#7BBRA0}ihDY~}+
z#GZu><pM^h%;U?ip&&Y3kJ*cX%lOWW5}UWZ)M3i0OL5g?+vC8aGJBTUTArIGG&Z)h
zInl{yWgG9CH}|k#An+Vc$Kp^PguSEoTNU<}tGj1ys5a`$me)}q&J*gA_)<rn%TwqO
zm+g3V&8D}nudmE3a)-b6cDc;yMj^y`J$0P$k!M+2R_3^VLl+2)p8f!-u#FW?Ink3?
zY$6j_VQDWao?oDMS9Yf5>C<O~wDV>LYP^b};PM9smmZt%>FX(7T4gI(d!p}-?jayb
z_oP(!Wma_tr01pX%0PdQeb)Z@aaX;5O;vv1_Tv6Ktdg>>wZ*M>uCM5(nvwo@LZ0T4
zPp|}04Dl$292?RCrc=-odpe9bTFzmEdcsoBnvp%X)atBRR?IDE%TVT*XZAJ(6Tqj1
zePx!0ea|eu>g<}#nMZ!VdG4-8(>$zi?a756Z}VVDX>SIpd0d%OTy4uOPha`imWueo
z-d#0=&+IJke&nYkuK@Ski!xi6q_<v8`wA0vhG-<XsD=jkIDIw(>53k01jLFw90h5j
zQ8{b*_L3o?-IrZ9!(&ZQdo4YOmsQAYMFBfM&aNb|mEV5zzkO5{c)acGeb+C^YnK?5
z{Jy8DpYJTc{qDP}QuI(}`6Cwz9r*~1y(MF32HO~qFm;pN_=8;(m^ai>WOkIar+He7
z?b@6UaFW#OL}jx&?M0zr>xwliT7$(~o*Z2L<kpho4>+rWdUwbEE^GJv9>*zLRey2C
z^43zFB)esxCU5BsFHx+Q3Z+7uR+k>kt(vp$NY}!Lx0Y9Id1T>T|0q%h3+sKEU8OcQ
zR}hbK<B^N_azaeoa?}ulQynXZ>V4TjHd-&EOV{{v$K1X?ck_|erCqg-EVC%E=+*^m
z9>~t%Cy9jSKvkfvW8vK6$CvjgJ*6o*wIL@uRnA*r6{1b;&1;O3^z8iP%muZnWtm-a
zo?Iy}N)MIXRhFj@*yYS=a!8hi)H8S$^l=&RjT{AglJ+u4$JmV4L3T&nEjl$k6@%U%
z&&4^)G`qE<eP)qOmpdoFeN|ynYRZf85@7=0S(7_!S9@yZj>r1@)(mQFNnGqvvVf<x
zhisO%-jy47mS#2OrAoE=W%VhgSC>`s%{GTvY&4rC>WX>WT9*CS>#z2S1quy+Exo1-
zb<GEPXpH8z6Z`e)Iv+Y;Sj^LTOpTj##=2SEL8gO#R^f`YpRz(}_*2L|R8$)?>~hr9
zK5WMSn`vanJ}fR^MQv{uw7rDL$=;0Zg(9c?a{y9onG}mXp&DA8y`(!gr>odb0Jfue
zPF8kjiGvLi2bgB}fq`dtS61$R7Q1fq*?~}K;Oyr6);_o_J$>1OYq4#ePgDOndye||
zGhJQJ0NJ^-K>Bni%7swRO+5J+#G@Exo5;&U8lg}i^O2ipFn~fpBtvy#S{ozBR;Js=
zlnWEx^90Y9QJ#{MkNsqI)?--V_SbhUylqjs!B;V(+TUJe?VgKD%=mSm9cgg4Y^;6a
zf|t0dvV_R$EH-DqIyc#?&eT0fefesC-oU-R4+jGC^nPvevc`v3@66uy(JfgSm}|y{
z#+<%t=f{6!bZKDZ2P}ucP_83E<-_dJI1m^Z3g*u-1WQdtJ;g=>3#S&9RI6-izPoW*
zA^mL9$oE7oq&t<4dy(i7UBIWaB}kiV>>xknzKL3))~QNqsVkK4O5oybe*EikM%{;C
z|155j(POCP8G;Tc{8k2*iL$dEn5Qy`Ibu&^0q9YsNM$Ysg^4xzt>I*wBECanNa71!
zRawJHeh;&+;tcULq{SYK51nDd+(^q5Vq@AQ;0xkunIqHetSj{Kg8N!?I?V~3jp>;~
ztt|~JjY9<)55f?o;3uWk_?tWQ$*vCDw*epVW%%wnD_R?{9btD#0nLXvn1`_=y&miY
zz~;pCL@;iZt(~*(y1Jv0t_Z#&KBY8Z7m^O>Pq$NFQ$PH&i0MX1ndz)Lb?#iV4V7A0
z#n8@u(9R?0l|W0TTU}|d6Ui*5wE4(}NV?{1z)d2xNjxX3tHiQ>{rsc(9oZTfe(Q4@
z{qj`z3-MxM0$1a;)E!(_B=a`rRMu+JimaP5+}QhMf!vtHGv?0p&un}V&D2v%GJINj
zdTzO+W<Tu$tRkr?S;>_b_U!F)cC|NX&4Z08wS@th-_?%rFM#-`Li`I+etKnu8P$uS
z60_uYWNGxJ5p1EaVz4zMY~|^#g^ex68&5BOTckFMdkZ@Al6S1@#csYLswwm4%urkQ
z_IKVe&)<h=)CDSB3%i*8MkOOd#1lA$&I<v^e$iq=)Fzmvc>^0`0z)pHjD$?IejA7<
zY}PFtzFcdTyOW%u<XxNNc|3x8g-}=nMGYQ-Nhg)*vpjnCyNO9AIU&dQ=~MFeytK34
z$(twD$+(X`<es<sn%0M?@Y5SAG-RSU@p$o}Zys96PgaSbk68+J+e=8`Y-{3vkC+<V
z*v<<u-#w6pc0d^OW~O_Z^UOo}>mOa!b7of^+Ilf#e{cw>v;EPX7p9Wl!bK0RD=Ob}
zek0m^5%N-P%sFwy$8e6xV`dm^nUGmV!E6>rQaTX366VMDpFS4ewvnIgHDGG4R4e`@
zzoLBSGXtxh*<ICm<kP))=>rc@FP^wBu&}L2_{?gqQpOA2Kd|E2y*1^#URbyB<vrzN
z@$D##AL*=#XN68wA9D1#+1A(t7ac7-+jC|h1*gLsSL-$Bty$2LXDr+jd*rOUZc$F#
z^6Egc+@D+SM4BQnL*_}4rbt{_b&Id*=y_~+eN`zsdwXOEKMwUmP3wipFy2+7Zo{D8
zfFDnBP=62R&qiLeaDK6o`pDtL3-Q}rDdGRbcu&l@DA~)<x_snY0zltkrQ_GwfPPWT
z-2gT#q!RzH1PMQW#?@y!`)*&7Ii&GdxSY*JPOebQ#uBBfL;}lSJGeIg#*g+EhI$XS
zqy8;VrB7{~dEF9!PtSb6JXsRQ)IAHRGvpie{-+@HlzAZ94IZmT%)zv@!Yg$2X?*k)
zK!Fe5f7Ven!yYR7B5n4L#{Ne(mA2mgr=4Hy_~h1>V9&nh!gwrRlu*~6+PbCTB!2$U
zsx?h1<!v3?nryXup6K8D_Q85Uy$A}hy8SP$?znT;0%H$fuTc>06D#UAxBD<Ut`|c5
z-lXp$kfBqhEK|-YV=)x@@%4?{+B}}NZH-?vZbdJ)Hh!`5kH==sI`+q%=tWBldT|n<
zFW?_|0q`=fJOEz|s`tLMZvD&qs%g|f^}d(auX|~4H2^n7)_JHq@Gl7=@(JWvoEr^t
z__!b^iFT_2h^HU_GG1m;dt0gt)YlXIxCc1~?W3UXF22T;YOrELyDc=kI$Lo)!Hc^a
zeMLQWnwz9|Y9E@X(u+C5)W#xEr_WVThb3z4zrdi*u1KI0ZmGK}Ks~O{Qh;uWI$TVx
zNU|ssX?<D@dG`+Foo7^^B771>_8H0*P`4r+ML3g36Q#Vk_FLXxGjzj;dy5_vXk>}U
z4-HkXYj*R+BAhE#Mm6iEx3(81P|tv3Zo`hpmSF<1MlYc1_TM5SzPcoebI;t~RkxzG
zE+wjGfK>tWqJKl(E=PH)c+&h*96~5@7^yOw-2F2DM71aTGb^$dAMMQQs?C-wvTNsL
zb{<)rRi1T*r<0S3@iv>zoLOpcW?4mW`ew~?8cH+GI-4~<k(4Dv%m=9OmNl;(Y*e}P
z&E|Z!s`21!YqkJ<fUC0Wgw4x0W%ci=)7mTMXJ5RSJ-@=Pt=rR|wP|^?P-j=6k_{*$
z)?qWqf1+MMfEG15I4H|JVoFL}Nvs3QU1sX9OsyxA*n($~-@w09p?oOvx0Wj{Dikwg
zfra8^heF}diN!kfJ6Rn5t61+ylH1WIc6pLRFDABt6)p?)*Mkb1P9)OV6iM*U;A2S>
z-m~aFh9dj`*b4E%S>M3yWCOEqJR$>I!D@PqOb+L#sUVbxS#8L5fp%-_=2`{8)wm@*
zt<D5ipQPT}>E+w_w#uq{_galPayQC@(YsMBqZ9GbyHO(7m0?G#d-GJPy!qAt`Omd)
zY{@}K`%-cEN8yYQ3|V#Vw1$w5YQ{F_Exx{~@5I^y^2B@8hG^Z3(2lD+YQr~B-{Duq
z)V%1wVgGaNehQJF`77+9_n1Eeg~-S8sr%SQx`qZ*DT@dNZNPzEn@wM3LjUsT;VKX^
zhzLKmI?)j<vJ$l(>)n_B2><VPO(@-CRdeve?-FqzQRjYnG?%iPoS>EZ!Q{kjf}(X#
zf_O0hUzgCd143iP&4jQr$LfXjc4{=yVXB6CXpgHcdTBv6U|MD(msdf=V5S&1^RetE
zCH0BA$bU3^)K{#cK2bJjJq|XQngS{LT5A7Cj#3%0s|y@k!do5r8eo%^IzOcLYxCT}
zCX?R@-c2!wcVbtWQ>ZkjAM4Gn5Q}nCu~fU63Z`hV&hXuu6!50m9{wOTS0t{;g?KAQ
zz9TZpbEu9udW+>)`D9}A1eCNbx-P+_8FkJ7yms|-JIm*E`kJy0mHXe^UUU7<L3cej
zS)$5oT|aZrP4=oq1#g3=H(k4HbLFDifJ~}MBy|-H8NK_P`i}dP3hQU5&wF5V%;hVC
z>(c6i+E02qn|kyXy;M4`9*UA;C_FeHN2O-8bC?z-CvpiEs*#fMQja|RalBGzmb?l0
z=&b^?!?z|WeYeFv|BC#KF7xo+0-ZuYo)})^UzwlLZN@v%`zS1QznFehmJArfB!Q7j
zzPI}2)Z2;bWSjCXbobBIjvN)pl?JW<pw=pj>^V(VyAAw9rWUc$m10l;R`8+T9)8y9
z<BKW_nAkEra)I<PccGwKZvsZMmQF1Rq@ARPx<IYw`^!6)Tvbw0RI3UE{2qrv$;J;8
zA5-5_1Ju7x&o!x(_a)k@Hk|`3(D*6cBL>HfbJ4b%Hm$8r0w!Xss(W+Qs=VInfB*a1
zH@0S%?}4Vvo(BGu);t|j;Rl%91M)X+E{&IITD(U8vFmA1lG_{WNjTBF^8kNJ492e0
zV_=T0FQ9zFHD#TEkd0q&06pBw!P~mKj}2CGaemdn(K&OD4p#BOOU&xR_$3EyL(j1#
znVCzD_57~$rUk*^f}1+AL1t}X!h%CYzkCyF`#$PI_!{av;`%W^H}W0S3k{=(@yr%<
zX1b9NMz20$`rt`T_{rq5#yNqCqB@xHI>njcXNOHrK2Rzwe3jz|ZVGgRmrRAtUI`RP
zTvCd85dYDr3V)r_;%=XbiRsHwz{mxN*LLy|7FzIUtR796IpeRb!T(~ualOf{ObE4G
zsksv_uOWWFVksNu5+@g4x*>XhO=ji-7bAmQ7K@!o{w<o*O}$QljbA6Yw|47nzkl}D
z+L5{~vwgnVTk1yke16aD+4p?DXJq&1_s*Vu@8`Qmz*SgI@1DAvJ$*SCmeaSVrfyGf
z4u(HZbl(2nnzirW-bp<45Yctp`)k*{cUvcUKW*bMHUOr_#uAMP5rqRN0-);@2Z7*S
z#^poqIgntOoCZEi%a70aqL`<l7=0e=U6da^jhqdN7177(XX{|>LU-g!m}mJQdK(c4
zhD5|k>cZ-epSfje4iIGR`qN$X&5*@fO+ujmo&oS@%GA6(J;8?E!{`v_)5-Traz6d(
zcMvuk{=_kt2r-C5=rrDO_c8q~6KF>N;_icV|MYG2X~3UAdz60q3=#5$E93wHg9tx0
zRSrNc#EwtxHQxIJGFIk3MD{gsd?Vn{dLttK9Q7NK+(SLR-<Ue{0K94Pj&S5oNei5V
z{fD_Xl#YX=x2+n@^lGmn;xHg#jLSfQA#>&rx8DIc&n=vHmZI)_j0(3d7Ru!cLveLm
zsOiRm+QjfY>{fo&itA^#tf=<M<;r;Cm*#~_U!gACa~JjPE6WC#4nWB}REZf&ZtMMB
z*P*_E*=ZIhB7CBE`J%h5E`OIV2j*K5<bK6%zB6xFQN_n@4fiD04Bpsu#XEfieTTY!
z*L&NNjL4<Fj2vKG;n4TjrB1#NkU7m{tmul_BBs&NePmHa#-bzLk>BB`1dAW}>fmkR
zN4vWp4c~U)tB02es9%s<pL7!-w&<EKALv~E8g=0g=uKZ;KIgtK_J<E62T#Yj@1S0s
zqV>YgbVEj#w9p}vh(XL0ZM1@K!0)^m4RIKYx_DEP+hLcCz)b5cP?IyKVQrli#XO9K
z+rcSARxQ+;jO5`@u$Fj*Ety*C^n>AUhpb}m+LAfPR^&rjL2V>ogYXTk(azw}rK!|N
zG^4LX#Lq@GvZW;&)nI79NNp$FR43jLRm)Lb4R0sj|L7xX3!|gzkrDDlq~|ja&FoMj
zlnU6KC;;rlz?%>5>GDzE*_Xb2%jme38VwhD5GoJ6+_XGB-V$DehNWfchPdB!g;*S*
z2Z#Ug?NeIxJzx&tf%~ahQ`>dYt8cvV>hB;dRI6_#AA>&2GycRC2_NS~RtK20Gg7G!
zS?JpmW^diRar5S#n|{~1YnGc(R(34T?Ynm%w{q9BtCl}=bxqdJKimeE@(8`-_`SE^
zcJHmX-18uzVCOD4Fw0ixQB~}GYQ^BwJIX5V2KY0#0sdQ8C2F=hGBJox;mAcoPy6DW
zNo!R2w2M;)w7iRDq_-AY+|~1guDTqPCZ|)Lla}4Raofi3?227auUd0%WB#%0QtGk{
z-Z^__fp;9HQ`YL0HD&z`IVx#(<KohS70q5kY|-lcY3YT{%dYEKadt~d#nv<Zx4oAq
zPcNDg2=!FE?=YKb|A)>Wx*yJ=6QJZ%Bb-A*QjX4&O`*|y8S&_?;@Y|nfwj>0)ZONs
zlq8`w-@}=E?d%kht18pqoMR|ldZ3P)eSb}nCe19RzQUfQF3M~Hy~1sh-DNH62pGzX
zf&#8ByFRUMRh1c?A;z48lm=fib2F33fTvLfL)a5|_3&9Da%U{_H$T&JGv>U(0R30s
zW8!CO2Ku`prgwz8kN5yS6q%dB9DrjPKQr^?;bNGM;@05=o!z6xi)_iagkeH{OlvC2
z4W+=$^@&HYL)+fHd!36zWgG2qV)nHv1&fp9tb7hg&kvua@qzPPHrg{8otNP;^D><2
zOQq*!c%)iCIxmwjH_FjzKD+6`q7vy5Nxrl3n;DJ*$q{Ku(F5Nq3w)OJq;Fp~W(rSB
z{LYeZ@|_{cX<?@6rEincExrP!-3>GrGgStjHe0B_yY1klJ6p(0vx7}09rdX`8Jwir
zlJ&r*Gf_M2X*^+eq&LqzaskgJ#0Y1}Sld5mtkOzHq{y7iO1qlaDOq0DL+iS3>J5l&
z1)k;wrK@hNOX=;KXD^4-8)v8{b53{9^1;Em3p?5ZRROb5l*Gqx%qVx)_5`*0IexMJ
zs*dWxMyJqL=xtYMP1@%Cyt2DWGW<nyrJN^cWIQrLNFh(7_Ywy~Yz~wkJF-CxO~-<v
zJUkSn*FB^|Bq2@0%$XIIS<Cot?P2&{E(i4c<@{7F+LMXRQiL?ACd}W^o4)Z@nVrDG
z_rp)p^q8-qH?Z+mxh<kwga^Xa(f)5#I+9qqGQz|DBF;0t^o<gULG|r}g%!%f(tPKf
zp`iw+UyPsEni0eKf^0X{mf~Q9L|{l5G<`VqQ$A)b#{e~jsr56tH&RK$H#D5+E1lWh
zmmczG8;bHWJmv)KdA#&F>YL{W3S<(|Ez-P!=YaSHsONAj_7d85-7%IM>s}{~FCxBd
zo*{M=xX+zka?@-_de4E`RO3_-&omcl((MZBPvE2U)`9$r^|QQFAVKYn@QzF-2>Lz%
zMrIQ(lODI<luZ5$Cyx3+?p1l^)H|H`zr3yTi@p<T5);+JZ^b?pL0lTfa!jq(@E=?*
z%x!HqhhHHGxq)iX6&sBuTJVTbHs%k0g7kA4xCUB8(5inLqE-wIfrCi;;58}>vVSAk
z#pD<0yf+`sGs84Iiw@%#5sx%CN$dsgC(bQ~yz(PnH83L&O~IZqNQf(ubHM1c(AX><
z9lv$-jp8<X6AWkKJ|7U|?;TjVhYv)%m#w&31mY(gj|QH+dhgz=@7lI~`!?{@#1qoS
z^Me!F%Z|J#%?o^U#Ek-U&J_M7^EZs24H)n*sT+o<8}Sd&AK}%^nfYjMaw;L9_hK>O
zQ_G+|w)O~3;dc^$UbV~MOp4bzv-s3s|4J?VFSUj9nkXqA&bUhR>)gUPZX&tIWE=hm
zvjXYs^3ItLc~b!AIj9GY%@UzGGrdY+y?hD2{Lnr39Qvecpwa1U9H{#1#<#9-Xt@5Z
zjbDtuxS#vzt+zhLW&2w<*4A#E<!9pyIrUdRJGlC}s~b4fIZ(xExca%(gU?=F&jE+%
z_1yai#Ff~2T14_^?a8+cpFom+g7N<ZhIoS<Km8od=kaqiM)jyOFqBYdBHBlNH})(e
zqf*HKdztlcKp!oJZX)+b=4kl6Lpwh|K4-|$c1;hhyf^CO^RHV2W>W9x*BaSU@N!hn
zY%;3%QIz52lKf@$5NLw`V>ZJx2;<B>4G?Gcd1g=j1X|G#`#i+@m!r(n6G>*shPI=G
zI<bzn9rbj!1E*%#kCUusHuV~2naZP7JRP+a<U<<iv6alsZ;H|VBE&LGJ9+$n<Nuk;
zB%wL(1XnS~lrpxD-w}Z^9fT=IpJr$leU9=4{2FNE?s4&SERYh&<k7?qL_=tL>8XMB
zPj4x#+<aeGaM^-xN3l>RP-zV*S@s3{gj6j!BiXUsU*@++q%tnPqqM5w+Vd+nzj}2!
z3Y$%Go>(E~?cILg;C7i(CgjuW_>sFa-7)K#Y<lWOSKg+$JaaZzCXrYnkmWnY;0#qG
z+PA=#onq9egj!+oqzg3D_(BM4`{4h_+<QRBQDlw6QynH~Mw7E9=aFVKBTZ7yIZL*z
zEZLGQ%aW7iY;exl*al<cfD;&u!C<q1NlRE@NlP#}eXzT1Vo6KbU4o_7U)4RMWW(<F
z{&U`W_OZLWy64utRkv>4s=DFMO*`q@l{2R2&!lsQvN8J1&oM3H;S}W?b6RQfN@!LM
z53gD^JVYH6RIj<ccku%oO3F4pFxY=)b!FV|zW;tAY~g)#Pc6xc$-A6ocl1-Wu<dEP
z7{oZ&(*5b4Seq#Wj0%P#gP|>4dT*T3uCW`o`Es1%t~${7d6L1IAd5RKNU-|McLQ9J
z<|vz+qw{tjS%3wBHz6skEv*Bu!XbDIU#63cC`<}I7;q#D<0IuW-RTQv23TP19qLg+
zK)y=rDvZY{l3C7}apqNm3O{zgIlC$Hd~%6jjm}q5l#J7-zX#dWGk98h$ya}w|HiAo
zZLe%TcmI>~EBXrz>8Yd3iL^)m=YJlh`4^5lqLz&Rg}DpXhDJ234|@gialZGZmj+|=
zeEH?ebmr`<4aAbifPnhvV~mYL1+f`>C+gQmyMLrAC#_X7QC4}d&z@=!+^E$g&stSc
zv1(SbMth^ckV3M>_8f1LHZUXIXiT3G&?b3v?6mLRO~fK>7g_#`F!!pBQuZdL!d}=B
ziL@8mmCB85se$-}r*at`N_(bTsdQ)Bl@6mz#iQ{gN3eG|(*FZI*(-(CtYnWiP!mi@
z2-XC&p5!d65Vi68v2Ve7NIQ>-W((C#E0WOoG#?7EM=HEiD0QmbX(nSDvguDVn$p}V
z@{ZAG+s=1)pKrsme)`0i=2EL&@J+;}Qn?~bzQJ$t3i2Y$i7WtR<70ym0jtvy3!Fw<
zmri%vD7DmgF3M}#+n44ks4WSQs<RTdGrz9Hm*6jSrq@OsBAfVHl`G9;VtfotrZks|
zv>L)LmA_?OP1WLttWdyo<88ju%t(HHnl0U})EG5}%P(JnCBm~B;`uA`X}EsPVO`;q
zjE_q?gg08@L>ObFDC5%y8;?%L1L6fNT`4tNW{1)mds_>*@rU&p>c{@PiIi}yEj1yz
zBWzJ8@e;HIFiyh7gm5E<1wv=dvg#R&Ya*d+@6pl|HQ1bVDo$RMn3S2G@7JX`lw5_J
znO|p7e+KJ-5$W+N+VKId6{bZ%;;fMJxqOo;fny5V6$(e#<Vd&6^l39f{}L&=a<0JY
z4H;Cfut}F<S0wndE&hRl-o&vn)^Z5@H2x{e0wPez;UI%$#9oBu1CVD9)8!d*rd*D_
zh;V`BTOlqo7ArEXGiOcjs2$UL0m6m9C+~y5hj1ZnR**q>STuZ$Su0iHr@%tCnzpS=
zMsg1AXb3SSx*YdgbS;(Da)PgLh@>{DSc9LcJ$J|9Y+t;CuW9I8mZ4AL!8&H*`@k|b
z2SUwb$%yyqJyHl4dj!I@fGoPcEKo(4!*8*t;J4Q3x9~Th3;l++sd)&@0m<~<Gi}e|
zq%lJ0zYe$_5Ygz=#Bl+K4H1&rBq9w+uD$yVM2Ibsh}kieP(2V9b`OMQ0kj<^tfh*s
zqm{J|yp3OE&X?ID075`zKpwsvr3ySNi8IxY!LRB~agytVQmGIShM>>^cALO%hcIOL
zTq_ncu_~58IA28JC{XN`T&R2@m(Fl50AGwj2z<#d1YwtiZ>q-<P1G`nFlhJ!0r=by
z5;`D`5EtA4VOT%`jbi~Qr`rg^#zS;@AzfaG%3+-uW2f)|I9EWyMMjToGXZc&DxLGO
zGI4=t08dUP-$_JMIO}%mPB53vr+xGS66@_xJ;mn#aEuw3cT)F(e)=7Ud5Z$T-}%&2
z=$nyusqaVLV@<D5MxU^tF_|&oDG+02^PQCv@>Or*Pl?IMlz=r1{)Mf=o{9Mc4rA=m
zpRi|MrQw{1%gpz&^Raj5@x+mLu=D5XcPlX#`Rv5Im1Ol#_s8CqQ6J##V{6bmQeh6^
z?IT}oJ9(19Z6E6t)Sn5&E7OJCzTy?fTU$@AC@x-cvbFX2iejw3_4vx7qLs&6TaK+L
zDq3+2jVo{%yoQUe_WN1-K#|i`955IH#V%)2K#$FE76<hDK(W(Vh^~e3_vO^H;7hiJ
zv9*%Y=0_qhZU9d}u)mCiu{mrE7<)V7aIPe75uAsO#)AHeMR5`?9@o)}Eq#?5J})<_
zB<#ZBzkc@h+O^+&_Lt!TwnSxA+)E81`XUhihf(-Jj2;NNF=H8LG8T@6rGV_|;6wO)
z1m9pl@c9rvzoQ4j2Yc^TAovBtfBEd2wQIlr?61Rx2)_J0*u(J0%UCYt0pz=jR@W$5
z5502;mhRHqs6KGSrY8q~0(R{jPVO8nQcqYx>Sge1^fzXDc4T4(n8B-5pH06D{tz6Y
zUWQ+jWAJx$Kc&NZlHhNO80$Rwlx;xTgfhA;WaKMS`9h3VGGT6M1z(m_2;v0_SGvuX
z?oz<piV_}2D&dDZceQ!qCGqLGx#{rYY1`Eq;!C6)a<I8NGPkSUXD>=ijN`l0itN7j
zuDOw_W_0?uFr{T}RZ3T9r!TvDZ*{h>qq8feYHe%EqIj8r{j)eHMGZhFu#4)1^d48#
z){^-YX^>dbRFrrn<tP$ElmvKNKAi;2265@6acN0e7%vyFo2z0(xcPC3F(RrV5wiG2
zDXlaS9gql!b01!eeL;Q^jlITE8foe2g#Bs_(Z&cO02dQTLLpl@723^F&}Ip_K!sIH
ztum+iM8*lJksrT;Wb+M@<C!NM7ONeV83eG5BS2-ugM1OrR(AAu@YO<d(!&qQ9TK6E
z-`?A<WV2Nry`6lO(46?lLyBlIGgj-VV?=~}pV6?H*nv)&WFlP=&IH)NV|xVHX_L0V
zW-HK|sD(nE$6zd}sI<q5?3ES8CWA*O#B-_RBYzOXKe!2WHz*tiX`E0*g1@68N=1r<
zaZ-ar(J&PUWan!hUr5A|i5bh9e*r5qb{gzQ=$MM9qEli-=z#sdge<iXM8;91R0u`z
z_i+?4?k}K^v6{!W<44E`St3?5k~R=G#vals1hIG`^obIiHjSCI3p?2~hCMlc5tQYD
zjE-gLE?ZjbP@30;0f~tYN}QONr1I7D^!L>GDrb1p$D=;eQFh&FHJJ@<{<^vI=hpdW
zG$v=HbnojLIG>KaotT~C)ylJNp6pbQR+RxhF~~J?nc1T;`IB7Ua7lYs{brYaPVv;}
z&P7?S46i*gP%^uq?pnKZuqt<GRxGY}{+N$k6FrAU%RTfrrh}QuHSfIl`Fs6$uFTJ0
zd1pU9M7;Y`GkNDv&3I}4;+tl)9bAw_!|1`z5_ZN%l8H6pn6UZ}5cUUE2Hq1U30Eb2
zfNRn`0j@uZomET0hWwB|-9&AWs<BaqcjkgUgd3OqQoI7}i?p2Q-PKFVLUWp`Oq1@h
z9cB5|Yg_y}vu^wb!R*KPf?V2u6pjfdUb_!SK(3N&OSHSVO7afs54U)HKF=+{gmeP<
zJ$9ZxbMByZf)22Rp3BR}z9vt>wE&;a!5qs+gz}EZg0;nD)r9#chwYqjtW(h{7E~mV
zz0${Z<&ONOl;#^Vv9fO+K5cK;7dvO1T379<S&$d@NBR%VZr;_CP9F2fd3smanpogf
z3v^yH*kE?CajohIs3^ux2RBznnzPN36zWe>{k)py^aY1!7p?A}VW`|&TDiS9Gu*l?
z$ISC-eO84&CEsR9OUtxSL%F-lRJtu+&xJI#jfvRhWFO@B*^nkjY)wvEmar#GFQ>Q$
zhLw{Jq0xQ?G2sn8-U<Zbe1bGtau(DkM?%_=-xdFa7^pqE#L6^t{f#fK+VY3nJNkb0
z&F<=LOWJK(7thj9efFydsh9t_KGL`E!YfPm0P@9ExkHCriwESHTdH$Aa*g_orseya
zYZe7?3p?DtGB2-G>@Esu^Xh%l(CjTWo1WWR*mLf)?Wcb{GgG3sD?|cyOVO<1w?XQY
zgD>58(?Dj|ePbsFAG@wLue2=3Q$0T?efh$!Qny;k>}f&$ovnrao5(7mTO;a^J+TkN
znQDEG8pBRgN(UGs&?$U`DMt%KbRtg>TDhnp?e3+$w+`o&TzjT_@yT#LTOpPhlJWvs
z9r+e(c4HtVH_1BE5SqRHwqN)4J$`!o>=3*^{diyBuWy6*+dFRkpY@HmY+qcHlvJ~L
z`z?))N471jNyJ!^rqasNwP$<!?z*O^GNXknmaFB?^8Wmy{!+VGseFGjsJV~d#@xdy
zHhpqtwx@2%b;p~UPVO42_ju}uc0o;#7^ffERD@9WNpR&EFq0Q%5`m~8WRn^Ibv>RF
zDRjgOELr}+!LI9Cl9F0?&F+5}xUQrE(RL-tG@jU-O1P#o!X+Q|d+?0EVNq`8!WpU5
zhxo?JZ(M<X6C#SNxsq50IO^ZY^jTP0w0xgTpOTU2=m=^21nEB#Y6|Atg#vR%^5EcO
z_qNYb8ifzO;+5`;(`X{^f|CCoz28YJsV1Y(D5A!|ZQItiY&8g-TIv-u;0Q(3WB*5F
zW2^?elI)`G%j~q)PfK?@iaCeVXFj-!Iq@+9Wh^L71Nipz-M5kP2l<C&F11^7h<|Xu
zQZC#ii6e!)twOniykj?&0$$radOJv-O}%Zm1J4}l4XlkP8MB)uHp!TTN6X7Wya3jH
zkrk#hMzAORJpWTTu3yFvj6i)yX>e%tPFH4erpu5%Bc#hp56Il4j31w1PSo2?^b38Y
zKA7HT#)}UKj?k1Gj5~OvN+#SS=941sR-r;pI+aj6)T(6)smfgt@>Hgq1WJRniYE}s
zL}razEmgRS(`|)8qg|hh$nBxtfaJP6qvV?HQfri4l$Qh-VL#DvNS#-U;xSd47Kb|4
zmzS^a2#1+#=$zJ<>#*ngwD4+oz$?*Hy0$$OYF}Ggd@cIy+CqDtFCoE~XLscLbvi$7
z*Sv`JGNC0_z&az0zB0KE5cPKBIHNHYoe?Hfo+_fEl@~Tg1$Lq(n3Gw8Iq4;s{N}{&
zaIh=!@HIDU^$D88YY!%MheKV7hoaBeDF^epBf4^<xafuY(6zA-*BnG2!tWD%5THZM
z+^!w_mKY!(K=%K#0F$?A+;$1=e<ME{wp^hDD&{^G4O1DD!%k}`;0T7YK*Xxus_NZ$
zad6jjg-vmgIaNA~FVC~$RulNQ-9+U80Pb`csk6EhE6SQ8b|qiT8!UNm?~2E+Ym%;C
z2Ea1><eJ}JS2@_$$(M-LI<@%L<5eoB#4Hi0`IRc?xwB5clM~myU}^2Xm)Gs&s|D~C
zLxTX)pd;3>3Z~P5O{M|GD@S+As}q1iH48Q>+IHT*aP56Xxk9H>?hY3FmfmOpPr3}$
zaty3<8mPB}A7;<YOoHP@l9T_tZHw;R*dSdy1W6mlKI}TOAfv9NT%=ZL6hnhvjZ>%-
zx|7wePxThPTvk4-EqmzroJDbRJ}i%(ZJLR6_F@(na!U2MmyZ)?4)Bc8<t`H;Yf>r>
zm5f<;MWZ=F@ffAniLD%1n2=K7>`tpmRY9h7+*Gz_s3d3Ay-NhZu4|Jnf3>VC&MZ@=
z<~5|*OLr|U%36NcB0gr*w}}Uiq-DkH<f6o2zVkQ2r5%oRk4cDK$1(e}%#L)gRpeKO
zX0Gk*xNU7MXTQq%j(B$IkVs~9C&qy%<>8hceN{IMSCH$}j%OuJ;WoKkmZ0OIv9Myy
zLTHH3S?s8%7)k>|qSY8f)Xxw?FFI7%oOP>v+Q2uZkN3r6Hi&=A;U&3+8y{a2k6ZO^
z^4bmI+&G0yXmF;OGD4*Rr(7?_8zmR^Z@XP@sjK4bS3BR1Z`k_a(89-e&m@njoPQA(
zrZx$M@p3tLw2Ram)X_6=D20h`C=-!A2U^unQWPDurpS)*4zpwoFbgPi2nDII+TDqR
z>BHxi)voU;Pw27cYGqKRH_z(>haubClagpFb6^!Bol8AZV9xRBp1{snQoiUsyS~C*
z(iO>-5(cF`LAZU@m)&aD(*^T9TwcG_VU!)^>b==+fJ}K<PU;N)JozMjMgp0`O1mdR
zoloXO%UHw}bXI1>DrN<?eMWrM#z)rJ-LB%Gg+1e%$cs|V==Tn{yEts)$bbX;`)J+3
zq3-03PP@`ylZKs^3R36Z^ukNqoksM0{RO&BgvcWW>D%;rk;#T(WlYUN<}0FpV_yIn
z^&5~&{pJVe0w0H8wR-s<NVPn!TKYcUW4VN_zOHL0^&{Zy?79y3nsk)fTV;1tdcmhE
zCUz-Q`3MU!i1ILi08^*J%G4MNL|K1wrO$jpeFUu3M;}uk0z38Lm(<B$%Pa{B_N^*o
z99OS8DJ=Bdg}JsgZ+-sxt<77o!gz%?o_Z&x!fLDV1DDQ+^pB*mZ`eD?U$c0u6jm{<
zUq#&q;2H_pbzW7~91p)4o*uV|6FahlZ;6)#Hq-r=UlrK34}-Ju@s-UF&)U|R67JsF
z(74f^%a({lDx=R?+pSM2a3rPcL_||s-`?h?eSK+Zefyf4_x7dzrmwSe-n`DvK61TC
z{nL7}0zb;HU!Bo+U46su-t=@&3s)eLiWU!q8X|hJI)3!^+Uw?JX3o2=wsuz^eeGMi
zv~S+hrHroiIE%%7AI^m;mKDxSD8p_*LLW24Y)sH<2u?~MMnNd(z^5mkM1gVkf4R$;
zBp(&v_!qmSYPpn;{hPqCFDmNmE6VHZ%WBrQrlz*8uZdo%PVDq(JF<3GXz*vvx!RE(
z<Q+IqA{<G#7V5Fzx7F9Tw$|6TQCP5TO-boBZNX66H6<l$+JZgj={ej8ksqXE^q}Y+
zRy@GOu0n!d1Rv>{TxMmg#UMSoARx2SOFG6zEWr4AVUNEOcm@1X%JqkO1J^su-1zsa
zh9w3$kIZ;Elbh#URJGJ$;>JG_ct-|5S(44oa1K?!QoYEL%+AI;sV~5D^Bi{S3vZ-`
z>KE(m3Xn=Y?N0=Uyy03Php#|^%R>!-gDH0EDMt6`9Q%$qPF#ES*may~D>&l#tOL(4
zS@PWe#>V~6Em`vXfm#0!HZF)n24)6>GY2A(1&u*0vi;qIb#({d-M-_!gSE8>-`g?&
z#<s-7wj1a7-_Y)Mx8DHAkPPK_Bo?s*<90+)i1`4(R(*|Q516u)Gr>t>(d8SlKPRN?
zx2Z|}0^mmL>jpR>{T|Mt7+6ozzG-7-{7w3K!x(x_81oZ82p0nzwdmP3X2eg!v5J9B
zAED=ZI0wg*GvV{*IOe?{e}R6#<qh=QHuf$4PqG6(Zxx{DoG~B%I&2#ZZ2LDI=MT13
z+<)CxaW&f>oY!~%w(9C__xH_va9hnk?FAiaC>)|Kzb!4Tqri?uZv0?hS=qi1ZruOD
z4W*?we6at@wi<#ozXNF!p;!dS>>?O#tbhc6XXMYo$$rd`FRcJapSl13`!P#y(H13J
zI{+Lb#mu|`=WP4~*hYSIl1xX{0uw=nVtX1BNB0~ON@{$w%QvzVoJ*|<>(t&nm%rF=
z;>W3VY$@mZ_|oBH-OX_L+Y8$x)Q{l-=LZ4H)*YbPT~S`?wq$uU3BD||T8&}qhU@z?
zL!Fyyat3BMC%qCcWHB}jX8bLPPvN9f(Wx6^VWny!_>DC*9b0E#e96!)-5od0Pa7Ou
zvm$5NnfbH#FR9ZFCuaynN$F*YfteX5Q`xe{%>HUmLTZuQUz{4l9{T~|6z*78K6t?8
zxNURQ-bDq8jq7Ko$`yKhj#q0)tM)}2LJ4PqCQuV`7kJeP$=Nh9^jHCqzZ9@92qt1K
z3QtDI=0KAUM4j#wY>$wdgR9NjYcGwyE>J5(m>gUC2apPm<u#1HzAnK)JqRj!5~Xk<
zUN-V9(?^w%PoIZ;h<u8|Q%y^9(8<?$fFd@>DPtyiu%@YY-toam#g>Z;a))~xEhW-y
zePBsZPFKEp^Qz=-|BZ{VTYV|iTx_j0d%^yu!Sm~iwVrg-9F16RO?8*e&04ThCQ8Ki
zu5pD}(er8ohhsxF+0QG+&oU+q*p$=Zs1qAz&FsjtSo2#WnH~97b8b5(Q1TtEf$AHE
zib~f1YQduO*W}mKgNU{``K^21r5&M+_B^w@u-TtByTpk-1l3HLJTUKYU*{cb%Zk@s
z7@YIcLU79JV$OKs`206)7dbk=L&+y%b{=#XEd1Yb{Lz21)kcftA|{ZzRHHZOlZe6P
z8o%oDCqk`UfPZ1l)LN}K(0Xhw9NVA5v5oSC7se=z<q4Nf8n=jU+2nu(;Yr(a5DP3J
zJR{w(VxWJ89<Cq#Wj-|u@D!>@maF|`53E{JxcaVneRr)cT(Y{eGkejY_O>I7aysue
zXVm%@4h=2z)n=G+$`~lNyDBrS*33$my*OZ`bnY`N+V;;&OPja9ZN(XP;-SInt#i`S
z=4`DVILyfDGAN5agtA9MM@Ngre2FgCV3SPVaEcCPMnMQIT@Y!^Fj}%^rUqwZ7=aHG
zo4mZFc>DbPqBVEV>p!zRSLMlfQ=iIn65qn!TfEeoJ;NWKnQpLT&!Cc2UZu^IGUvuQ
zttVC$=PkRnJ9ov<l5}bf?Z?|Z_BHV#?ZZLK!zlrBX#b7rq4tOmXP<g~Xz0?(uC9}p
zhK620HG7N|Y+0V4zpObJY+jb1zq}=gz4<ux_lqqp7lG>WCx8;&QJ+0=?A0|XDQjLm
z7QHg#1}?3zwd9?QeI7H9AUiuWldSz7!|oJ192P-2IEA*I2_hk)-z$g*B4IO_$D+@0
zOW>UCfcRtJhM(y3Xh@Hne!h{JPvHB0@(g_5FGJ61V_)Mx!8slSH~kSkr^5Fd`uV`y
z=o!xZ1c(0p!M~zDONH=e{Zji}F=x!G-}}ta&~NtC)$RGs(9kn`>&KF-d&8lgDzCSy
zClv0jPX6zjhtA_o@L}6XCe0hs#tBFW{>UGI9ls>C8rAF?@W}5TdE^niGBtFski!=7
z2Eoe9bPQ<}chCdzpO`!7Q9oHAPnkQ=CJX*HoI6Yk6?iDplwmYPs{NkI3|E{a9M~k9
zweigC-aA$l_-Y3-s7HMriGTIlZ)(s)l;GjCzTSE1!P;<w#+zkJHgHw_$L5DJ7aZ!S
z+i~r(Eb4xti1s`Gnn;BB<W07y!T!_a;fSK@T)-f3YB<}NF)O@jL*0)1dl%liYNlaf
zQl&(ilvSUW+nH-rmTX?swyIP&+~ujrgosB{2^m5reeRCh;`udUsr%0L3+@=oNbTO!
z;gw2E)}oNvT~O~1HfC8a08@IMzi%K)1mXb{)29*g5JAUBoi=AM^EmbbkIKc1wdyVJ
zjvm)ING*2HXP6nhUsyl7f3I9mod9!;s<rt3ku|UlnqV6sp7XHAbK6fh=#NUaiMisS
zzu7%}?~1JYeZO5+v}Ul)R;6}of`x5)Mg7Iro!jOuII;?Rsi2lxiXV>S6|FkevGj@U
z6*^zGWxmDaFnMYh=B?Q3@L*5O4;9ekt^?9k6peAs$Yn4|E)zxaxY7TS<OJ`>d@{Rg
zv`S?m?-=xF$}b<XrV#a(bge~ohL&kFARII7&;PYdt5~}<t257RD`*R&*fgL_Vi2aT
zDyZDIq_}L;#YKznTU)3~%(7DtN{W*Hg#UB(dPhNP5Y1Eef;NhyaLG;P;QXWgbMD$u
zQL^sB{K8d>2ZEGKZAN2yOo<I(d=?JwfHJ~B%Za)%1D22BunhKNv@8>rHPheS$-<&#
zY4EoVblKVQG6no@0sY&%#(!G?zbmK9?j9S9mgT{+F1qX-)H9f}8u;5by6m3u-xk8}
zTIf3N9mlU2epgGEogbs3WesC%u?n!6g%eMYe>azvk40Ed!?I^4%EtbPMSu~OJv(0J
zqYeT)wg{HJK3=aImKo`?H^xR$87<#_fNk~Vf2R*)1K#TXtgLxeNl8`nva<TCz4wds
zPPN*ZAVfJ!luo?_4A0rqk(}JIXU?3xonCL}-Z_=+L8&y@URl9h8JUD-V}C(5JxHzv
zBr&lTfdeU<s^3Lc3p5Hb5&8Rp;o)J>AIRnrWE{Kl>Cx*MTL<|2SrBK>B$<{AqH=;g
zO`?hDSnCNo<LIB_#jh(}I*HS2cEt-V)*ha(tTQd6E!U)RhxHqDVbw{4W`4TFA%0bv
zl9HmbdCf+plr2hcOiQq2)F!)&axx5?xI7w%Fl@Ivh(p$Y(t*Q_6q`{0gt)Vu>nmvu
zq_<?70_j;f$rW(1KC3WQT4f0E*<zJR;q?p6X^DwpW4zO8b@4gzQndsVAUw?BVta0r
zT3()+(~_xE_^Q*40=|N;mI+d=2{t8fS-i@kuqT-k;>A3GvuN9OtRJ>DiFQ5cePEms
zUTDW7D!jl-oOlU5AQffZM18DEAcUayZlJwWoo1juYmS$nI;9X-fj6lTqx=7WRX})2
z(`1)py6B4Oxp1gUWj0wxOO`RQY9OzCxjQJ+h!c!%qs*q01bymM)j&Sjm>jtc{0~l;
zGwS_WJ!P&;cRAE@#R82>my#;r>cO@OtDi;3ll%eeg!S{0mBUou!K>)E%#I(J;mHc5
zq@;yw6=97w&u*>Aaym<Uv-9Sb*b@^^#itmKuFLcW(=t+$Gr=B>FF~$S2WDi1I!hB>
zW!;&Xiz4qyRLF)EBG3fuj_I=a6kQf;;*k`=mnJB70+v7{qFxqiu)lOkbb`?@;^dMz
z@Gq59q86=*`J4OzWx$tozNCz4l*G<q5$C9WL5&49sm`Qiug8_5FvxiJ#D+MzabsS{
zQQDoA*;C>S<@=NE`7OavOTI06UDz4$cmmEa_)4hM34Pvn6b$+^O-p*}47k?Hn30;^
zqEXdHk}4xcW27=EQqSnDrSQLch-Vy~y;eRRj9hkA+0JaYe%<8_hTZ;@LWxzZ@M-Lo
z*$#X0oUH8Gg;t@)q24O+>rY_Z?o_`w5TG8D+vGg1E>s)v%qmQ@<hDc-%L?)=Pm0uN
zoKeeR{kPIKzAWdsE#4j4Oy_*OK%MOwD0LgiMn@8hvBCU-ypBB2vVsfPZrTd-PL>{f
z8p(1TS!L38k?@=D=r=o~-z3oA+>N6enYr;!!b2ROeKw-Ik;qb;@KD#jNUZ~#UIbgP
zBB~eM@(?&e^)bKMi51~v*yWgg-A;VP$aUCd#y@8v>jgqb^doq79&qwNga=e`cpj$i
zq3+rYW>JrB0wthm3-uV7`4X5x-MtYsfs#$sqo8OL^%!*y@k=}Fb|Q&5Lg$T2V(I|X
zPMIXrp4;))Mp8iSbhGE_&k#%S<TQ)c(dH`+jWO0va1%a;pNrZvqMh0pr8Kow4`b?w
z=(b>;#m9)9O!Rm73C9|N!UlO(L;{?E0()yFSWnqkTv+irD4j{o1>Y~au;?}HUuPfw
z{PTy;KJ?K?55c-_0dw%b<9}iq>G;HG7h1&_57C;SlM%VHpDD+c#w@>;tCs~b^G%`o
zeY2BHS*cczO%}{4vW5ocb|w9X_xJ{(Ld83#v8(w;hf$=^@DA!+T7l7Sq;C1SHw+)#
z%z6XAKn&6Ls>s%rMA0Teh?W<a)|Zy%1A{90$lq{{T!lTSijP-4#<$2XfaAU3*af+n
z_W6Gg!uTc%LqW@IdpP27+EL_g{F{-#$yHzwL81<*<k(xiRQCnBh5s0W^{Buszd-j@
zJF5=z@cXc@L{V;0Ot5l0erd#yU!tygfm#bTzW_K7;m(JtyFuf_pqn~Q|Nb6U9sV5D
zJ8&fJ=-*GL<{n%#@;9(4H8(dE%r>bINlFt0h5bz?6v|J<+vInGbv@vkJLR@`MwUDc
zVSYFT=5*?wMljJol?lv7kf{?UC4%{V548yaIwcnhWycY0*iKu38@~+497)?QA@8`$
zZ;ZC#D}fs%ARg)%`<$&N?`H{UZ=0wt1Jwl(-BqVKXTp$0DOH(?S3*5|TATLuXW+b%
z?{k))8QAs5SzCQ;Zh3m;z0}`-JCNGG<@D1F?+5V@bdZ<N;Wsqzo0pzBa8t8^dcEoB
z@}h-nx=NQ+yB9qJgeUu-x_$ec;F_1If879a$r$^VXdxelxMZ;C2$&pNUx}UC#<&<6
zPC1dG5IL?c<4M86u1eXQ+m_|0Qu8EcztNJPnJRr**LCg9GfRdWyugrcG$htL<I`s@
z+H|m?aBhKl_Jw~RB&deHPc3$J4h(08vq#;7yBf^ajGCmBy6xR*;Wf|h;R-poaiwv6
zzrF9kf^2WiKvvKBLmL7}*0i!dB|GqkXq~Wj!cu}BVFuisN?T-($9b5%e3_cLP?dud
ze0|WRQaeLBW6+nRP$c<+qfZ+`$>=sYWYC9@lnG&*3s$v;LanO`B5hT<2?@DXZIOai
zZJ|)xq!Msm>da0`%yvpONttF#CQ9&-X)(hqEKf{=<rp{AwWYRhOIOGcC~`Q80tWb8
zS3BvM;lrY_Z-{d80jL}0FuO?O<S6l&E{9FE{s{*sygeLFj0pG4%$M;jp~^tT!gAZZ
zm9F}x?#zy3OL8j@{pCp8;U&3syPjO!y~_tI*-c?bVY*i=)C%wO%s#ZhQ4%(Vx;E7e
zUrTH=_>7XOy{~L~jXL-3maN6cyO+Os)6C+0xl`J@z11sM%f)IW4_MS)_~-0yT0@T=
zJLA!a7C4jckBR#Mo{BG?x1-KB!y1oqr3Ot#ZBWPF7+=)Cy*^rIWXg!Q=G{EUCzAHZ
z%LJq<wK{USvmX`6<{{HuRZ2B7C_wRsi1*odp`B75eg1)LkS9*$kp4%!Kl;I?FIPJv
zV7AWA?h{H#wkQs4;@C9oyMCO7ZSsa|wQ}mk#F-vTv5k0{$wym4-A86cW7b%s&cJYj
zAhXVlQM0H!iGLIC{`djgf&RUQzAvTjBgUd@RU|W}rZOPLMxMj4Q3}tvTqY1=Ge++b
z3W$e^cSl#1j;?xbmeeW1KEmFUIHj{t-#3iiPK3$JP%6^7PND&dqZC0Zc_4t7zb@7A
zxEjf8FUk{maXLA8nCd-;=KFKlCGdcw%IU1MQx#NG(#*uf8HwQTk+<<AJc*J2vsqc3
z9^w*;og@P)C7pLFntp)}J&ZCyiNI{EVwN^eeMuis73?b~wqIUdabtlxq<>w*)6T-S
zW97}-km^mnSH|Uk6vvY#>)uj@wM~pJk<D2G*K``xCr$^g;UYy0N<Y{$bRNcBz*#bS
zF$!N@a6|d!)x`FS8w&jC4EU|14>xH;>NgPhxR3Z;N8~M4NZZWdf7_UWOk<nr*iZB!
z1#BVa*e+__j8<2GOl#JL)vxK3A%cJ4b7fxr>kz>ftO|d(QOj4osSBv`_my2<M(i%%
zSD+5)-%`hE8?j0RpE^yZF)_}dE<~FXDpgUxTE<K|2dK!j(FaB!YJo^zO1E?QzmL`s
z(S9|05i4(ml)V}87wj!3c3)l=tpHNSoUxC6M-Gr-8h@0~G!zRF=ZrNJ+Yxe-1J~M(
zIN|OLj=XXl4}=zl3?**rJ&Ok;LnFThz+(o9t|CKlL15&?TkuG*(@hY-XuF1KqhVOb
zLrfiZPOO1YR#S<cBWF9Aj#iNm9UplG{Sr6Yuf=mQkA-^AU1ETB?S&u%3xb9s7xj+W
z0|1^0uCW;bf$)ji2|yZ(7#he(Fswp-i-HD5Q1GoNQRKkLZy-?MVt~?wM61KIAQ9sr
z@yM}}7nu4$BCIb;!x*HY5cNYqqM{RGFv0Uwh+)GKSffHU3|oo7U0p#u0BM1h<kSKe
zY$QAj^O~u5=oW(DZy9+3R?Lky5Hki4kGiMxXpH@N%*bGKex7GXK9ReWG{25M7#%E0
zc3k&!Y%I1b=plktM#oN)aWZ2we3uUSItk%KvmI>7$vn-Q!tM+s8UglYln)hl@nk+n
zwJ-yK7bmtU5pOnAr=z^7aLVu-r!fBL#n`YY*jqNTK;}{+hHZp+JxI*PW{@8u-+g)?
zK}n~_wT5UP``CQ*pg1{_W9siI2`X0vZ8|d)?Q$Mp$RSS)6hdxIR;X4r>mbLbQ0TaE
zTmdq5X8nr%C)UmhF>qu4u2%s5m1%kYyoD%bnPf%K<21>P8U>FZ&tX$)V^vl{qFKca
zF6JaiWNI#-E8s)<86ox&Y3v**KbcI5Q<Cf1=_aHzM*aQv1l4?$rEid%fU@*q!5<SV
z_2v#bZxpdlx)^2bTg>4D<)M!gc{cZ2fn3Oe@B{34B8_tv>b~QdWv^br6?y!o)G#%v
z-%h3qCP5WOeTwq?K^pjo1{vynH0K*pO7AJP4eKisfBagmQ%HCnSmQK;$Q~On@neoq
zE?7G<i5eO{o%io92wyiHzT@XBm~%y9!q=D@Wbtc1pPHhO=?DA-doAn-&z1cU8IRz3
zMUP+6F(K2epsP4lUzR5B3I>gOp;{s33F0|Z`sk#_Aai6mg0=F*<!rl3o)G0Ty1(!f
zTnzS?_bUDMONd<2fj@`I)V{nshKek48OJt(3ezUozu13+YewJ1Ugngb==AQCY+7q!
z|I!Al0;v_5fdr*V&O4M4tV#`3W~QR2xa+1h7yFMWb0J*%Np)s%N=Hc&yp<$a#G~gY
zGXdQ$*iYO!5EuV{z-3x~%Ac;DH8BBYRJ?I|lX2Tp+o$AFjA8SusSJa$yu?nNU_Z!W
zyepVYf6DPhf8#mdz`mXxGwkOYySp3D*=Otk5+<FU(CuOp2xb)*XQAYQm}fkP9mWc>
zNxX@h0r_1&CClfuTJR?7oZP0{{V1KA?tz|d^_Ju9-QDfSt@T^E8Pq2d9uNz~Tx|4r
zi4}7*vT|~=GUiq!GPq;ku^+fP?)XH8)2X<B>~e|r?ABRj-%mq5DVF^d#f*EKO=4ff
zaG%J4%9~!zdvr$Br?=>B66!AS*fiuZo;aTRnlA*#X~?r!G5k3Mlm^N4uIa=m@PWw#
zWIRH2v|i9KF6`kj@S2A5gVm{;l8|BrI0Xsp87G%*;MkOMJuRd2)kcLq)ex#v&7#vh
z#z<%S3DR2lvv|bjh%4}@ojf-rPnt8pF-U&Tcw=ye+4Nk2Mr6LmP??pGWKwfNO4Jmw
zW{I{38mG*e(X@t^{cKjzY5l84!}H+PhwjuK2S1@PapkyW<QGYg)Bim#lQ}^9OZiU8
z$s7TGpmDik)WXUEhuVSZ$8JIUX48X%V|tY%sEg$_)dd}@uXL#>eJOkhpuzy81;w^K
z!cLnS$8LO`9!)YvC!v`dMv{p7xgmQ`+=UY4O-h)Dzslj5^1BPd>C=+y-3j97gd_3d
z_=4hhN;adMc@w$w$ZlnpDQjVKp|tt671ILW4$T#$*<?DsRUHg5`t)9i_a7kMh%2L5
zN+z-?j3+;km=zOvvfp5HgZ;<m&p7(=uH7FWodM##jn~xFTr<-P;+xxOtk`J~iK;Dg
z(!uE8H-31crRBtj8}aUu6En8K>7{eq47~eQEY~-V37r#-<PayIEC^1Ei!!P0CijbS
zQo~_+8?L!#!=|-s@hmpSkkgf?Qca2owRH3E3jKbeM3|Ky4VQBJJ^0u1G-LYQ8QG%n
z>f*@}qB@%5(=1|*)~xm-rerM{`<kqTczGtZ&s9@>2PQQTnZxEJ&f461b4t7<_t3nV
z8=Jk~H#MOsCWS>b9>fV)eZlhP2sx_qHssZ&_wSvB5=C^*OHalAdXAgx8b^VSn~V_~
z$XDT=7|pIKw0jrL5Kq?)kavm2H_d4(#Dr97Cb*Y>z|JLhM~1g9?Jw*1for$k>=()N
zj?8V@*O!*N?DX7OEB#-7`Tg9(_<MoG+wMJiLtZBS*5S(syuIa3r5hhwy!_egYr?*d
z4!`sg?5APYT;fsUp8w9*VtCep7lwvjI4~=A{V>?Fs;GEXYcSZls<>!XOAy;R`8B#0
zuSRcI7Z<N-4F%iQuprG#SaXP{i1Uy)kX5UXmB}h)&0ux023advn^}8VM_FfB_p_cv
z`;1{mi-%%W^}oEI{9Dd{aZgUVxBverpNs=m@7C)R6ZLxcMf4wfIOb+<+;d~E5@R=`
zy|KGnVmI?*KeNSd@WZipBfG}S#4(_wO|iF_AoiBp7b|--c0&y4T`qLbWq#%^k6zbD
zug9WS@cw`J;7IhUpY}fXuWZ_LeDq4os#8!#gvg80{Fc!?8j~HG7z+qV)MSN@6|Yo*
zvpEX~7i9IFy{0Jd+KVepp_F8eg{zl}QvHz`5#5F@nSHGdPU_odm2N<Mnpf`?S8utm
zcl5iVdsk$WaU%XTdTG2iy)7RzuHS2j)TNFP<Q*<LFVrdO(El}jMvhF!2VXTEpPI36
zNgc!|FroEE{Yg-Ct!a1|V<?ll=2L&Ze%{5S>yn$La)Hc~Ue>v?@~(3mH%Ae9Mg<Yc
zUO2EY8{v%UcD%N`)Sfphb(LC_;P$%{ZoL^i$Dl&#@#|g2m3ehu3BnoSbY$#b_+>&!
zuTaL@h<(*2qT@i(Ewsr~Ra)vSThpBSoBPx*n?+{eszvcey*bq)DQ~D)5cujIxfR2A
zB?Wcd^x5l6s9Vq7M{ot)1zHhXXiZN73#w<9<d5bPm{m*Tz>eWy{||MKw+epwm#W6b
z5$rj49}a6?h-$W^Ct>XqHD`LF=%IFK82dN=3B<wobG*Vh<4tRb`Q!EEthj5iddJcZ
zORY%4R|hK>)D8DkT&*d7-+OpoC?Pq|zCa%D^1J%mfghnnJ%sJHYNIyI)EV#=LB|lE
zNPJ8ONEuIl97t7xx9H@@<waHBD<{$)lTwoU03|?<%uPh$^Cog2i)q-&`1ROX_GWs&
z{J-$6z>5AGpNZ~Ya)@APYQqm;S?p`jSv61uXm?Aq0;s?F=5g>x@-Md?r2dZm^&qlA
z$3=J##E(z=WlqlUO{?PUsi*2}&R57Y19@m*%a58vs)nSbnC}L<Ru+-mc}thh>sz{X
z^psTH&YkR+(Q!1$;AVqu5`=YzCcH8K3ujC)D%Qm7%!%4r{<4{6ep_*Go~67vTbagI
z#*0l(zuE2em(3{iTMFjnl&o=)?<EMu!d$IhrS(_m1lx+7Laj~F9w(Hlqz0GKs8IW6
zlq5CeIz7nshQ-GZ;3RA>DSf^$&Dke_lhk{6QSTj6o7fxpia4$;Zav$iVqY_=#r~?2
zQ6~%)PG^My%n{RP3ToK)Uqe{qyGAkJFB#4ZDHJ#;6X4j_zm_REJ1`Pk$5u)%eD=p*
zOC{{<2rfCq*FN|c{D4gGFE*e2y+8)mgLyo`S8=kqXVugx)P`eU!#bXYb;uc8RX_u#
z5suoKJp60wpLb~V+}V5?mn-GZ<``9X5_eOd0VTMkl0B*QDOJhZCq)SmUl)Y66v9G@
zMv(bk^h^VoLuPC#k4rrQsz!gq<APG^dCbEOigfXm?_i}+!v}93gg+TQPL5#R?EC4Q
z-SD@g$BAbzXR+@`=kFkmI0QarH`4FmfC6b3F0dP^LV7KFhB$<+rr$+l5}_~7T(|%%
z%tzpH^dUBOf!KrX8qWzozQ(rF8(GY9`yRJTxPGqQE`I)QdJF5m<vOc$guEDCUZahx
ziFNjRc06`!JSTh<o)1`KknP}{D<HmZxy~Yg^=)@h{?JyPTTW3NlTP!oO!5!C`eUi|
zALDxgzk%yD`&HI!(^D!<T`>k#uAo65aH>?!fZh;vsirLx&+3CtrP3MH!z=tI$QoZW
z2O!q=EA8W^?{Hww={4LuWtqsi4Zedlpm%f)RMFJk0>J8q{qqF*Ak*pwwBVey@&x-D
zmz5gs;p<bK&Qv}B9z*F;@<Bv`!EcdDEq;2zPmgyXBRViUJ4DOZY2w5gi?s$08&YgC
znJv{|4O%4~%~l}~9r7!=WHQ=9Nbp)@8gG_$#*q@EP{I*%cxr=94sjfTu!RtI0xOz}
z(g0{PB@vh~Pr`(9Yl?v*N)>Z>LTht}#1gU^Qmu0GVMD52k(h<xNrc9dBQva7UX9G+
zg>d(eQrNb!*AZuu62>79+jfC^92EK}@6lsNSyR6O$fG@=Fk{=OU!Ok@im1a!!J9|X
zH^fS88@pn{E`WjZ9kCLGQB0~`5XPP;4BGw>xqOU{p1nXFJ$4L)sh6hVVr9-Jv2C|r
zI0e3YnR*F<ne+{Pj;XLl7drv^yHgi#h4?_Ek23OiKXn*>8%ARit)2FR@2L2fjxq0g
zsC8K9*cT|?FB!O+L<V;}Y%1t2a+Kx-WGnd+LLiiCRaTF@FVI!)mAdl%UJ{ckBq`B6
zf{#IX7o+fEQ>ii*S2P<0z*3J@rIiW=gha4H7RV`e6!jLE9$w>5ktn1X>GkKkq~7wb
zKp*7)3zP<1GKTUu8?Uz3nwYyT*s|+A-i92zJ*UCzsn51;PxiR{ewQbi`Xsq3Y(S|v
zy%iz7K2+g#rlvX*Q&MPIMft#|5LXm?EGnzyw5Wn~xT%xaKgJ%X`w6x`>}@mlk2BQH
zJF(}ell%4oJ^jr~^f#vQe0;GuBy{AZK$yO$QnLZ}4@0=Z<F83bsPTI$!iEbz&jqiq
zP?<g>qBX)l+Q^J_r7|DORVwp9zLJK0L#%!hDXfrJuz!qZ+zD0|Qf~pzi4(AWV!VVi
zoT3P*%n~#B>X~Owj*epZvu6*0H)&eDP>z2-_82-#Cy^TB;8;+C8;8|_>^*1`1I%7M
zAUcO9C1DqEw+BBb8mxlYrWMyVdc#<TUY~)5y^XadLk_Le62ou?YovKk#X(;F&WI|a
z0$=ax*}JEA@7~@$dwa;<y*+!-Gy0#F2^%m8dz6WF7L^GKCX@}`bfFvodNoFkEx$c2
z(W*6Qt?0%~&XOmGb8Vi=u<;-;>*c=a!vSE4${O-ZOu|k5dAO<JtHEVIEVsIYHcx3l
zcMz!ba+^C~^Ogn@4yYl0J|YqO7dwIW3yyXx9m&9I;aFqY=usR4I?DUMjNwYJDbLuk
zbe2%f&&Ku{Bb6R&vAJt$GhfCtSO9r6tu5aw5!{@!n<N{N|DH^EG<zRTxRa3XK*bY-
zW2fkSHv^iDNyu#WWPnVQV4o8uQkhIjU80((OERfU3jE;gPrL-3mUnRB!Xt6?&Cn2R
zhZUp0#|4mIP@f=i0JRvT(qKm)UU-z3px5$lrUrNK2FX(RhkAqI@vn%bSP^>`Evx8G
z#EQP{z3HZ2a_+aN<LGZbBW?sAv8(9#N-<fkV0K=>N8y%yt2MtRZ1wxC#Er&`hCrY`
z-MH45l9G((FFR3+{lxbD%>2d7FpgM+B`iVd2<l_IjQXHMxvS^8S<d6#gM;12oU?Wj
zm&SJ>18DOx018u@SC@7yS<+Fux|!aqdTaF0SmN08G(C_nAx9p(srTD&d#QK!_I&#d
zL(d5OreW;4Ni;Wn+k4<ZFZK2}-Fx?T(|QUq`X@Y_{)Qj>3OH$at#tcf!+Z8ZxYS$U
z^gvFh=Ir0!^UXJ~4+@C`SeRW$w-qCrLNS2_3Q-%y+KZI={3*V5#*F$vpdo`^yDp%H
z!5_x{flh45Ux@8STdGeE?iS7kDsWP$6(%I)d2)p+UR)DF@|427#9W<Ts264@Wee3j
zJ}i_b<a!?C@-b3uudqQ4QEjR$7wh8r60WVnE+#QP*Ir@g%J>>fWrbKDuMj!Pp=3Em
zZNimfAJBVGk#V|c2Cz=Lw@)(0p1KW}1F#mYPNz-K>HZwO0w;2fRC^2DDJ2R;af-Vj
zS))mYPsIvF3H5_srP1j$Dt+wwNrErOX3Oy<*o{W}<a>I)A<D3W>|J!cLY#Jtw#sOq
zY3$&JwOSE3cVs=f<d6?gH|bQT!2<Xnvj$A!E*iU@=_?zGiOMF-CYv*2zzCw_CICMB
z{c!&4qnD}QQqPV4bSZD?$DaWf^+%N_&wX1{e}B_$?mUlbY>ZV+Y~U^;KVjh*T=7Af
zi0pj(h*!Cd<Q7<#$dsYjebj1h<Crft2lsLQ@q^^`i_AEjPb}v)ke6dQeVMo<a8ShJ
zf`_;bU;Q-j=v}8y-!o_b))yw-lONvmh%q^wY@E???$PK?bd5_KhIswNj9UU(_JwU`
z6QSZHV>Y7Wz!>YZkC*0M!q^}KWMbs&`NO~ej2a`0R7rX6TM>P?y7Q7$G~V&tOemlD
zljIZp%T+RR>BkN14KaCiaR`o`Mxq&Gu}k6iXh=ra)8R-g60l@EWEqphdeWgRm=E>J
zIHg+ckW=0T*`Csrgi@uF%d_Psm(^%;1{;iewNb5>idAe<hw((xIJpR__)3ReA1HQH
z?+Ro}gRvw}6Y?4{k=+=_j}u38Mb#56n3`PzXUW8vEv5*>g1k(Pc}{DoR<MU7)hkOx
zfE!L!n-kPR88=xKiiFjvErm{VPIJUxmu`wzkk`d0sD#z+fh4|=FHBD`OWCHp*?In1
z`3^&RL(rx|an6X@K*mwhw$t>=Ei!$bKpZ(M(pY6uvsxrlo24?VM#MH!`QXW0q-Kp!
zsDVYyb)1%5NDHkKO^>%Mn|y9i9%)6c;;oTL8wym|7V#z~dXtlq*d>;{w)FJ&Jc}i-
zJw3fG&qD3YDJaN6{}|qx1N%_R&OtgHnCP%6yZxAUj!?|uCgdhNvl5j@^*Xs-!p@;A
z!gz(os7ony0w49d-Ygb^S_US>8~gzAcCjYKo*&<AnI3o^{Ei(j;7jFNMT#dSNu3}Q
z3uQd7Di92+J$2bOV|Ht1dXtrWh8qXFxhN~QP#_dA9bnFF&kVE{Ivlo%zBh5iEHPa(
z6J0;H`y!h{T<q8YY!z9g5`!{6PO28_?UJLj;Q~aUD^7uos5QXJ-sYE+j|lnk#(=}>
z(+OlUOf_03j5p|P=G?aQaC?D6CjJ7^JV?yOtgvncYusN2*|LrAZ~?YD!{y9&E05|>
z`yD;X*2p!e@u=5<Pj40psSDTzG&c~laTjbmTg;w@38q8?L#;RkD17^)D(vuPh&7GA
z`lh4lTFcP{jod6eg6LpNR0faDW1HQC>c}w}(8a753aER)$3g+qSACFYZ-HZ25v@<f
zL7VfFD)?TRW;H6}2su|Dr#B0ZwyUHB`GY-Cyh29kHPoNM#}c$w%Osk?e)h9;t{i&E
zXEXoNyCG<kN`ZVj=>FcXFL0Dr*!j|GJv*U(=~9CzKAs~Yh%E|LUBRbfQLbb_vvuM7
zCIOGf;Ftm1HUxQ8Ld$(TwjDy-dj+u2L)SmFQKG^lJRvENWngL{Vova}NbrcO(q2~g
z2wx0g<U$zb5JtlEeVd4rh8Lz0<zVGEN#yJroK57Aa?y3iZ$2OvvFq4z!8q0RHxskP
z{9SQk&H!Kh<6pRO+ZD2Q#UJ2kC-HCb1gJN~d?q4*Gd&6ObdBi7Yr(#C)Q@n9u1iQk
zDo#p*4lda-3@SUi$;uCT`dVuE+8z{kTwzZc*M~g16q^E_jYkXUv$N@VIDzVl81>Vh
z$JT;<*KSurX&gfXuKAUtl+uwpp`WEXl!WqHu;*Ip?PztnC_bQfqJYMS-oNUn2-Z2M
zM-;JGoS2C=bDkJg)d{pxLc*6>$H#U8LqRlRoyqtiV^Xp>UIk@=)t4MewkBHX<bYNT
z$2>uk!=y0UjEbZ{l3F0(#|tD$&V(kmM8xL`L>z$&Dhmoeo6Qj$4RWoNAIIm(cx;@*
zvFg=YA&11-9KK8^H`tW%90AED01zuQ44-uqtFR}?-_m0^cDffkl@9@tB*84PWO=mr
zq_l6FnFeJkxyj^Ga+FEAuA)`#AzjYgXwIFtpst-5)wL(<rsUk1ZaPixG}4MEi9U_=
ze~a`^JRM&4?#cKTsh!#1eABakKjY5@X9l*4&Y!1<S(P(M|1{C`T;qBuhlnMBU`)<w
zQ^@GX2|=QSgoeDirPMd??%cCs$DS8AW*Ks47Xo+5wrAIkek{tUOI7i3j?jLKT%NJy
zwt+WnS#@4tWk^Rg69m=SyKrdsrEu?_mOw{+fvRw<{g$CT;!m(C+}dQm+8bvLw5K&}
z>k81c>YzS>a#f4zU80H16i(z5IFYpwPu~67&cc%I&utui^9PXoTcE3%pQF|1&#R>V
zil49Ccvt7#d)JraLubGqiZ^Nv)OC4%ZKa;kf1)-wjD1b~nY>8nTuGhc*ge_uWNMbp
zd*hXHbneWyQ!9$|mYtdt&6>$=ZT$D~6M+4A|D1~yb@Bmfta(5J8u>hwI<t7w6KhsK
zzPXsroVj*-c1;#@HuW_-m;Du;gMK{pmJqWrS)TM@QZmi)c&7-vE7NWgHdE!b?UwX_
zUuz{LO0_`blow^S@-#}3(UDrvoId;1vb>^|C)y(|RVcBhKq($<rl<!_Qq+Up{f`6A
ziOQ{+<Slt?Iy1;PQQUP>1s5mC&bGc-zRlvzkFQ?y#HL~<-R9J+oNA=gAb$It=C{eY
zH_fo$#@q7h93~n#yCOGt#n}PsZ$NVz2%j1lc#8V=^yqt6uvXNnV{^#}o47RiB=zqT
zC#ZivHSja+1aZn^v51QCe6W-9Z_=Svn5f<;4`BA^O!~;VmEZ@8i_+y}ZFuqe&qveV
z0Ot&mx)g6shM9Qlr`Eiccl6D;VK4`5yF~XN>^J;f#&5t4LQDoD<n{CJ$P#QL#Q{H#
zuE+Pi3l6^qZg_`@hw?Q!NIu4jV{GuEJxU*aO)y+6*6~ErA5fXnxudChcVC`hgp<AJ
z@QLb!0Dp4f?EA-9r*{11jt-90pvIq&eDzAx`q|}Xg^7=q&)C(Q7V6nO3)^1Y8dml^
zL;d0L{nW^BmNcFD?iOdjAo%-V-KlPg5YjMn>|0_h`4Ea*VV}^qVp(q(j+_)|RtYC*
z^K^bx5nCf0u0LGc`N;k@dtq04Zc|uYzWc?EwcD4?ac4<vLPelvcxFLYw*LApUsFF;
zE-W#-YL`_P%_&Kd#i<}Kepu8JRz?=zu_$XnYneuoTh*9Uy=OtbDk;l8-yqUk^@c#9
zy`%dnS8km%(46nkK(zvLA(}&asY65x>;t4vAossX2Z&fI9p@&D40XVH%rN>%V#|(B
zXLiW1vA{v1VFn4lkGMq5e0TJNrW*${Nxq18olMTdNusljT>nlimd@AgZP9Uxf<8<*
z8_{|%<A)*{cixJQ$<UQUT0xdoOEWCyg8I1ygZHc{C|P&Uy!P$c7qxouhserpM_P_k
z|N70sfoFj7p5}uE(}uLzAuq}%ep~~W;WCF#TDI-i%ho=#t<((VgkEuI^dVQKLlzyB
z;%65mXtY<1W_0fHRy40F7p*<)=yVU+z4L&XN4wJSkoYs>o0Xz_<+gbOIhYHcx|{`G
z7=09wI;{}g0S@vLWB_|fsQ5M``9@(pI5B!NwgUG{<fDhMeyJ>azKv}s&(OI=V23C(
zC(M+N08v_Dk0rg_Rl1<uPM*1ZTX|uV$&<iOX<9{}37?{Kecw-?jWg*kV-7~q+;=z~
z7?(by0d!<sw7+?8t|P4Yqh-dNq5R@mCN(KhsQB?NS-3&_v^&ol(SonP^!vorLV3X7
zOnnF9@iK)G%*&`tQAmY5q;ej>aJJ7yT`JTGJhsvH1T7{{P>*gQ&oF!CV_$PVg>9C~
ztbKeS<{O7!X%Z%haRuko-Nj<Psk~(%uV|>XNM)V9cy;EQU#&<7B1h5e^z6B1P9RE1
zZ_Dqz*+<^-Q)lkp(98^@CATFlzb!MNeAn+b;Ri+rXRdEdN@`p`6W!OWYxZru9)E|$
z@cnYK7vhu@U5`0|QgKz@ACGP)A$zYgCCNwQ+4lO4?bfuwlwokaL?c7->>#5=1J)I!
zjqGZ=aUgRF3z4_c0qoMOMS6Vk|6BR%F;+EoCuf+Bjgxs5d&6j6E!y62YSbKN?Sxih
zX6&b~Lj!4P1BbezSNsL3HEc_6bY$gr-Zy&kBz0eB=Y7=49UnKAoLSJcwKbXg=8Ck?
zc(*MlS!*}7|9LZ=7JBh-V@TGOmo$Xu?rZsJC5xFe$$!xE6PgdM8sGY=b0+>o#iBBs
zt!z=nOE2B<)^!CXyWhC}CF;8?CQR%#dvQ;8MrVO_^hfO7qBVEToqv8^2>?$(u)l?0
zea1xjvs1`8x-T6ud>jx5*j5umO))7%jtZMqHB@f9;lMe({kswabxGoOEk(oY-2OMW
z=Oxy!tkQU-nA1_%9$B=4GL6QC!E0J2b%eb5`|L%B+sii%)TxDT9X-afpk5|~b!Sh`
zg*UMopq#WDz@F^-*kASDhT#jVa??9kty|TZzGhzKU|qUaW{j&%TyV{{;#H4sEX<%^
zWoSb+!JM|DRJmLyAPr@8MMF2$&e_(Hne2|#WOjAH2~j58m{gLQkhk<yck{Z|9KR=0
z9&#4?bw-C#ra(3eu)oq_f1xvd^Q5kcCV>IbBn9bIHTB)GoCd#~N8o^`kli9vWGp#7
zfOiltUXBniN^B8_+RGQH6%uli!UA<uYB{kV!jGMkg(pSp4Mj6)|Gua~pC}TUxCtp8
zY5n`!-BcB^oT^G_oGXy(2Nkl+`8PBXFMRY7g4YPgW*meEM+0fGG5AH$S{B)3q6uqq
zd@`rRjAECdHl^e50s{9Rq(+}wm^rY&#XraQSAQZVD_-3eEM0Y~we{5M(qP-_Voa9k
z|Eq6~zvZTZ%tcR9qvGECzS}qdvBOKv9Ntd5kGjNf+<dlc@#zKO@PgBeyUuQI<O9FY
zzLUo>FFpL&{C(fu*9-AH0QI6pPzOn7jpxF{rps0$mKTq0K{>;0sT~>5Jdv~L@Woda
zv>#oP1LAe5rAe8qhkGlMc=}+H*dY>VVEdALWs0vp-bqoP{Caz3=ITe*<1dYbOXlVq
zLv!~&@Ybs2nYj*v#CdWwZ;gEe+vzdLgN|`~Bs6zBVo6saF0`;<Oe`Y!^|tEfo=ii)
zmmC$Oe77>WKt~;=z8n4KOKYMKaFteJyiG;CoY#`3LAu3ese%V^JkIAIy?yjmEEQj7
z(Ng-PO1q;nk<m4v3?+8JK10z_<g^*aWK#_EkJzE5-UfPV7WD@9kIN4T`Jj~g4BQ6f
zqsc@vS(xmgTA!yH-yM+K#o)E)!FGDSV40zw*8t)AX&KGT$F``+*Q8Yt%^P%8bbx@H
zR-9cBm~-mVlD*Ve*L<OhE7YjP{-U;ws^Kb!rE*o%(_$s49zBJ>Db(WIxJ3(g*R6SC
zbMev@%f&>TT<o%{y;Z%Dl!i?6Qn^PC3g78brf8#UpKpnE3_kV=wKu}J&_be-WB(Nk
zAGpw2*F}x(U2^Hv?9>HkS5h}=h4`DJr$Dtr@=VjJO0xsvmC;({7ppZwt~&n16-$dZ
zKe49n`oSVDXxFAFd)}cQhlngSXEvlndaJx@t4l18qs_D+PM)!EhysXHHnZn$#$$mK
ziHQU7DJw=4Q-*DcCIK=N+JahYZ(D9;+jE=qlB)VvZp>@izjn~q5wD0-s?_OaZJG5$
zW#*)s1^L-)!-r1^^`car<Nsssz2n=g?)`C}=aJ+gYgv0s)|RYc%aSa~w!GveZ^t{{
zj-5C=&fXKqf-pjuWrsb&9tnX$puH`$Ty9Itr7d011uY|Wf%x(7oafQD1MPi%|M<Ov
zv7OlGe9k$a^EsdS{z#bkIeM9=iuhG_c-!gGw!>??11e>pC%BT6BM{hhB81i!><K9O
z`~nQaI1&YW52cgRe+hZDoQ(CS>YkL+o}#8Aw>s6!*%MV)-Sl5x6Vo}rzk2$0q;uZ9
zf3-cPpjNMZbQ`IlI$CQ(s^?{@f4~p$`)fe+tErl%qOjJQu9RkT#heDY_|SktbeQ-{
z29>9p#fN)qPxw7!HSJ{k9qJDr1MD)Aod8X6bBEmnTf>Thldnwl+_JG|u8;T}Y6bU0
zso2>P7;m%|hq=;ROD6smJEv^&VC|#CrANA*D<9tZ#vHswbJt;OF6Hjq?%(vx&h7z*
z1HEy?<Mej8Zyd7MXcF$6DPC#MpvBWtAG_`1gMFs@i8BAHu^t0Gux8EL;Ff21hK|e<
z5B-?<0;Qw=tm?Ms-rHR<S#MOAv=(0SH5BA^9etwzVd9tH{G@|;CzEE0=EXiv=EWv@
zB13KC@>#IN=a<QO{rWd_Q9Q@>DGOOM(hc9vb7aq))`Z?;qQrZ=Q~*y73Xt}l*N5<d
zskk`Ve-X9Yb7My;R<}FcJu?--sb;&QeGMki%AKv#rIlOyJ&_ateZ`gkeInvpx~;lw
zb%#q~{JvVkX6HFtRs@UttBrYVmc;p*qI9?>&|e=^$b$|2ftuk`1?~6FRfYBI`|4EM
zw&^1SV|Q){g*Mzd)_ZVSlSbVzw58cI<hQG&A&a-8$|sfhYP!6-kW}rU?xh*pc-O)8
z=@33w4BaW7tXc-N37M4%XxCY~uN-m@6w0$SY>riF@aFR_9b_}HKOy-jo0GkFq3y_I
zfG=FB<mXClevJT0N}BTL;|}9De<J+`nec9XMCxS*GOH){N*Z*rJuCyLTPnr0Zd%pc
zG*#@;We4}(gepLe{`$7gn{EOu>_(7#6SluBR^m}!9xMDPe-j&=y9a$xzKS;D6yqMq
z9|96zChh8i*hNW0d&I;f+%qqxEQo2Ny4se$;*q;IRRyN5?krwD+H1tBT$H9T@bQ5?
z@7><F{MmnA;~87pW5t19{yM2nu(eq<zad}}hOfM^Z`*U*%cRBa{yCOF5L|Ix&&lD*
z(dR(c>1TlA^(n3~<Y?9CzaH(HfcgfcTY&Oh$bLrV%jt~dRwZkVqY14std41oaJybW
zYNHLRjWVb<{xeN&ocj^xc@=virZ|c@NO2_b#OQ}fdsc(aN=&`Y2J*4idfZeHK<lFb
zv4waC@vpEz!^&0jK|67g_=5P7`1vb0f1<OnSAh#FnFaZu-uw#wv%|I~gQ3ZGn9vYR
za1ng?GT`US-g{4EBtCh0em>(G;wZhG#E3VNzSd{J(y!^HY`LADL+*uV@x53?sk@9e
z9orY`c%ZfyJ;U$VqxY61se$xeDVv34&>8x@(5BVL`*^2V(LAzlhD;o#Y;5|yPUBrp
zWH?Xpi=16Zvkw`I^1wAxpY>0K)aKB7#bEF!gd^VyTA|G>l8cbdJa?B+48GDx=kE83
zb8R}pO5Ncz<Q?WGdWfgqTBq^uOUIM1DPcszre02vkq>3vpZ`Pu?Nhnp%lU6Fe(w&D
zd2adGGX!zxQ^Z{FO74H)zlC}N{$mOY48)v&Jp9L()?@qTevc`UA^jeB_&uzd@@vq#
z$=){^vFDD~9ed5Nt>kNUR|Yo!7pQ|+=x=9mNpC|8r<qbVJZa#ZBpQ6QOSD_41M98h
zeuQ1A^tQN~S3ApYnOt&onXi22o@LIK3ZIloS4r<aabos&zXREBi=l0IU;owybw%LO
zisp*lFYn%P{zx-FzerUp6VX=Q{9pfdb4Ii`H_b}YQ}A!nL-wn-jt5HmLy(f@!sb=3
zvRl(AVJM~d;N4Jh%W+$+-3R*mceUs%gO63Tgb#jy_sr`j+WGl~s<2E%fBSK`CvQR;
zy8a^?Ou!9pL%T8X?KJ!vD4+i>8u0%<NrL+V5~t^G`Yoh{UZnk2ddOOwlH*T?;PG24
znL+_yUlev%j#X-ORYSpGLy<wO;?$*dPH(Ex)UIzY=!-pKUMqf}pUo93#m?SctsQ%N
z>`I+d+@IV^JugxL?O*a)V>Q%}XBVFT48KV3n`L2~dtq@LnVCu?^Ux~S?5RSQu>7u-
zOOC;<+j#e~?(MF*yYVjU65O*cv}diliXib*`*>Y%?V;CqZ-Cq8b$~Tg{{qeY7x+9K
z<!aWDT2G2QCap(dA{{uPshBX1v!~juEFCCE`3jbre&PporHWVEGia&ud3)DwUf1ib
z-t+v%O)u=Jx$i-1gI8l8I5uP)nHaZVll)-!Oj9{jQcR62s_WPGg$bud$m8?ON~OnJ
z8X4Sr)9~`g_te$zd1Copf2@-FD%%SE!(kI6my-=`!Og@b>?!(r(k5ktC{S0-y_`@#
zydDJVg4Am2$gxMULTy3VB?UPIVH>!5%+m$WP|4%yw2?@kQg^dw{OZ2CGP+C2<~y7H
zHBVf6zUSH%L3C_+xdX%aIGdrAFKg;OHdf3hd2Tzj;Y;8dqS}!}5o#i|&x^UPsMJ>;
zqr|oB)|IPnUFPcUMa7k~r6)$0?C-HJX>aeOVRIY1uUYO#m6bp|G!-bClhNOvd!wY*
zKXpwv@#pFB@o5sM5Z!wyudOs;29xX;AICB^CAxQ0fqyYrKXUixs#OD#O>S1j{cBsV
z94jeZe&m*Wn`ckCI48^#+fQ_@Sy5SfS6y%6@Uem6)7NYpZ&47R(A(|Q`k-92LwW9q
z`+F1bPvUjb@fKVqu-+k6a^|@v_3wyR^UXpn2Xy~NX=M{%vsJ2+S#s~YUGcrgcCZ8>
zC=?L~>=KSyOtAS<a7fH1tTao{b<_dybNh!$-|D6LFKJ3hlP|7sqSibPU}8j@NRsKT
z4%`;cE>{DeI1~9kX-clzp)$8Ml#32#=hB({XS4E^zW|3NFS=jkG9~#=Z8J;jvs#u!
z%7x;Wi_QW?wn$@BJ~SrN=4IwN+bh5(nM3Sw%>5%zfuF3cytdMTI@b52bRV9rF;H23
zZPlfZr3OhZst<<m`De7e3^v(gC{g_irDJMFQNqCqH<FT@I4&EC?BBI(f2i5Ynk`;^
zf4nky;)z=Sk>2(#Eymd#MWIn&slvXrc~OC|DOjxpHAmKjV}-%NP%wntnU{3<uZ&@j
zMkz_~4juK#_I|s(HkuYc*~`8jz1y4%PWH0$JLDxI^sOnU3rM_mFWj@z<aifjF$4rQ
zBO%zuxL4ISy0&cTH50`J4TB?t4Fz2hM~%nE=LmC30#9!0KQdfsZx|dMY_RjKRSs{x
z$0{)i*T^0D{DRiCH5EhQLZjB`%6F9sqyiSV&tGe6SyfdzSnV`uOm4l{o-ags$dtXK
zBTiwzp_iglrBlUMRE&wb98{ExJmy$nC0QO}Sw@?Guu{K5pt!G?t`O}7dBmqqi&!nr
z%U(skD(!{*EDeWaQ5HF9xu%BcDy&Q<8<PWxKt!B-V(x!jUS=-y%h0w#zd$en#Zpy-
z(z~!<QTLRdZ;TQYqTF?fvx~~e<W^(gr&nA9X*q2ZA6Zx2V#&+WvN>7}d?XTNG1*y-
z-ecTThbThc+p>n6HwGteYS|ehhsoS(C;N@lAa6Yd&rg?;z@CdvP62uI<8@nJANCt|
zVf|RBxW&px@2FOzu=5BzQ>T0W6=LL<Doxh=Ol~Gmh&PxUd|EDV9L^~-e{)VI2e;!-
zEAr<4Cif{yeB_xxPR0jm7@4t$z%krHEgp5u@uOg(_+TFA?)!=N-vD1<`k2do^9P{*
zK7xnm;J3+&xIcS<_~zv)o>K@iA9(*9b<U;4t@yog%z`NTq$uX{TEyv1y2d=~u!}?y
zDA2r6JyNDPzSG+P*-WHl`c)0R(-phU@2heQofsoN5-4ccIpP|bsaY55_3Sz<mW%Uv
zLx>q0cHckLynnnR7c>hzTFSP@%ODM2R88SCP>w$i=^{kX(845>1&@LLl1Lpk@R0^&
z5c$|ex%mCI4fXjye8XL7U{?gqW@NCaC3bs}vUx|h^ZxJ6O!p3)!89h>AI?o`OL*VU
zaYe>TZ+cS9$P-Cf8Y8q=*5+_>=$g=QXzK}HZd*+#Ozw|s{-1aaq|KkP0NXj$Z)r?-
z#ZfrVn}s&f@bMu>c*FHAlNZ|Sa)sGUVHVdB2pgR>cHznaW4Gp-&6%uBiOe9*!TzVb
z@h{kZ47azhtLi({Yil2A=49t&vDGpj@)JZ_Sh*%J0oWoLYfWci8TC$vppNwy$d6g1
zXDil(Hv#v(FraS&O1ZbAWO_&5+<;}-+8OW47p`il+56ng=sjDi=qwQr+sQn+t+cnY
zNTlL`W3H|W!}fLH*QBm@^sOsayl|wge9NP26$WAU_ij++D<DT^(B{7&PSMuV1R0DB
zPKG*Th|J7|q=bM2M~H&_d`80AZv?t%1QXg0-e^0<M2l#O14N0`ZPa2~>;{G04Quvq
zV`B8C4Tr0Z0p{-q2E_KT-BDu~4`A3nN!R8Z`<CCazA9(gA?JuISXI-~SGM|OZ`H;^
zV3a7A3d>er->nYF#UgM2hV5HMDl^A78$6DJeJVMNk;Su0@uhuD`f|HeT2O9i>bt~u
zc9!e(<(-bZs&#^DpS@ROJvP*|qsJkaEfve?JWr?zau<Wn6!XO590ptA?WO8;=Kq&C
zg;ztqaU}V=lM9#<uI{*}8(bJWG32P+cYb%pbYH#7&s2&eR!@Vsd@QV2l#NuspanLf
z2)n2dfIl)T$M-j*Mt0GT*6?=e!{g<i-jJ@@ECuT!lY0cnFAyefrmumz8^YacMRhjO
zOkAkkq-o<~1r%4LLq`<bbP6^eklFoddb*po*J##TRbFXc32|4N!Vc=&N;*sA0LTI(
z;l?RrHZLpBtZ7mNG#nW#H*`m`DnI*UgHmRe2%Tp92gwTkPuL2U*-+MOHnmk)3hita
zN5&KtyZTI){-V0No`j~4DbXD$hi~eo|7ZS3WkE;CXbBIvt&KjlG1LKG7Ypr8<G$eP
zB}G*`&#YT_W@lAV=c=H0JYpBgpH>R9a+r`!oaWkMWlnaMsNfN~zrVa{s<TR^tZJVq
zuNo|s)4sN^DXd@96IN@Rmmgj_dEdrR`G)U}^dDRn(P$z=+gjZtUYkZ*s`B^M1!U4d
zT~CRsT&gXg<a9CQr}dDZ@?$tSN$+in_Yu|2;_Fi%S+{-e7A_b34ZQ?;972kz<P}>7
zp`kWTKCKS)CSZrpO~N-~ZZ{=UmJlbgzma@Xkjgc9Dx0KmiHGL~bBHaJUK!svMY4fU
zL9xMs!OUDno>?0aIixbhzkW)dy1-=ycD6iv(CrnLR;G|CXNuj%dTsF9K6)^!%bldJ
zhw_byIvl0b5_Li@Mod!jaU4H@b|B8S%Yi;(g#<!Al?D-k3>JfD);5XlQkk5xT%h^D
zQ-_;-i;?;AP728afuS@;vxq6r5fww41K0I}Zz!XNhS}TI9)l2>HE<19;w0{d`V<pk
z9sm3LnWl4LH6-<(MRpewAKP7dir)3kB0JqyX-=X#cx^BC9MpOsC8YXA%8mKY7>|*5
zyB77PNYkKAX@-1y$Ck`REPFS8(K;4L787Yw1Nn+bxp2=!ac9^s$09Cgy5T>I+(rpa
z+n6jduq6q-TV(O;n5R-*0#HyOd3c8L7>)OTSQlw1q^^l{=|aW)+ZXni_!91!Kud_P
z^X_FsyNhxdN=dDQ4d|C&S1nq_Yvj5-PGSVSRoNUq_!_yY`qHpMfa-(`i8J^vct^V8
zbqpp4J?*(+EDHF*AZ25;F$elrd{<#-QK-A7%&035c)ebwpQ#dyE#8Kbf{=x8s~Z>|
zsIwJ~UOPPfSfC_F#LKgI!_J0ITV4NPf1S<Lw7!uq6q!tRrP9LYXtIc33IsxXo!c2O
zNoDy8_*g+JLzr)u=pFfTjjd{=CbXf;UF+}TvY=g3UZl0dzqW*W%R_5=f~-7|#3bh+
zKR=RzXJ~vV15L3tGEzguKt+$mAoy?zl_QbTl3-+{;vOE7eOxH}*o3%srZ-&O;7ZV@
zbe4unoyuexxRX&5>8f+0S<zem6}%AZX)L7g;|Z-QQ>f!5{7LZUW@?8v?5$dM|CXx4
zzMYM;ExUSMs?xq-Sznb~q~_qujO7Iq-?FQFnhve*l>QD3G99%e<*pW=no^)J$eVZ2
zzN85uZ<Z|Zm8FJX5*+AF4!vN6Wg?mLz&{JS18p0d3`s0Evfs^O6`r!Yl@^r3k?KX8
zJ0;}%hqhMSP}vr{H&rD8`!~OgRFRv3WypvJX#3z9WFnso5K~Ra>AEPa1k~kBNzsl>
zH~2@JfR)8(M!@555nGx0`sZK!#|I~u{{q@Qt)Qnd%OHMZ@+$1WYd){SC;vY8(loSt
z?!%0CeX7WN<rRVKQxYfPYWVi;XXHTH=|Ud&q*|g_2qP69B(WiX@CN)|Pr#48TiE3p
zyL!M@+7VvgVRsMgYiZfHv?vnM>Nq@Q7Og2<RaJvNzMi4t7Wi!%d+XY&+D%KGuBBIW
zeKRpUK=EKXRCH17)<g0j*&0ln=phCfkwP0=&_;}r=@#M=mW)lj=o++w8PrWoAOY7C
zLs+xRmFOqtD@ybevm3vMHL>BZJjLe3I*Q%!a>d^I#TtsW94dP`1N9XD1P{Y^hU$Kv
zgk|DQ76j3Pm&C&YE*3TRHWmd}o*eLPTs5ezXRAd;<*gn^*dbQB$|}lS$|->|@u=V`
zN2$|UGtu0Bc-$wllp6a*3avs?5Y$@&1$tvad1s(7<wYTDt%&XT@8Fw)5?xZ88lzSs
zLhK}HCZ3ulo<g5M^DJn_ZhrUt+zfX7{JZC|&2vZ2BVQflzh~eWibVWqF;67z8MFG9
zcT?Su&k@0VGw8*RFYr1>^Ip){C*ar!h=rHt2;{rdqg6WILigV<err<SGM4ZF(%-)H
zXsXZe0!2j3^GAQ1lxq)=x}AWu>r=y0lsX4Tox3MhgCjmi<D_YB7}>i|32m_4sKpw;
zD`Es!&nByPQ7;AHGbQ)Uf!r!4-4*D`18t5X6t!YyV;>XCKYU;5SE}h)mQawz$>MRj
z+UjN1RU;vlqPU?T#8<KS`X4b2QtW1BtvTOPpcC5o!1E0OUdYO2bg&d+9u31Voo0#2
zKUQZpR`s}Copk}p9(|W<as{RrM6r)7kodE34`OjFk}I&YbF0C9#9d$*K^ndM&CB3u
z)L)A;Ng0$u_M(BzgENVtzyBTF4W1<$X&5n0<=)SKM*ksv6ItlC#`7!~allG4!%P>?
zN+WaVVzvOjar989!BW*>_Er6<aOr{e=_huDJ0B&!c=2iCpO1HW$B!(j%*L{LIW7H$
z_WgrT=adZWYHi%ySy0zEu&>k9eC2b~``$j$+;r@<EdzHRn#vz%YZPLd{q(x<`YvA%
zwPq`EKW#hxO(gBzDK31Gn8ck!uB;U7Cv`F`l$Q4za^_oGH%8<ILajJhgzc0H45~as
z6cCDG&`kKorW<P-i34~&>D1rUvA5Sr&%Bb)YU<m3DKiNqYJkL!nzY~zm!3m=2d@O}
zYe<_4$=q+D4#l|B%G`orAz`z`0c^v^Z$HdY(L3n5^c-dfUB$U?ajFmrv=cy-owYVw
z$Q0+TCEJTdX*vyQ(vwzo40Q*kLdQtaB@s%G1N2}@YpG4mesYsS#~<|8S$HHpvxrFd
zz#i}~vxU89Qeoi!fc|DCS1$O1BN)SYhH^)gmKc?tdwU(cB%EB5o<EU$RQ#QLv;ene
z@jc2Q!EADsMMhJRGWSt+?Z(UR5&ek;FgG+r6J5ioByk`MGukp1;2Wf)sPZ%8ILF_*
z0{pN*hx{U1fk0azmD+Uz&@a$JQ>h@I&(ANAN$pxe*@ps$`p_1R*?j5x#g<2VNov#b
z`C6M)>c|%e@*UE&@4@PKdHnCo<X@e?{IcVBhcOTL9$Nd_%ioZ6o<KFD@krXjbuw;A
z0aP<af!1n?1OFn{&Bj7!wPo~JfbAx0+r~zPO{kFs;0iBuosxJcKnB%zC^;zbR+P55
z7*A#Hfa~(0N)PRSzJ&Ce(;%Rq|2N6cPQ9OM_I>{e^$Tt+wU!dNmS9FW{eCQ1!=jfN
z-J94Yer+-O9sP%TVs|@VFz9Wx^GQa7>!sZphvK?C`Q&xy^2Y$rn7HofYCW5F&of8K
zGl_iXI?}Jrw_N^jJ&fogwk69065Q(FIg9u*7D|W=N=9Vf2W5mOBb3pZG4+4qvxL}4
z2N+8iF#k6H{T)e<gIhQz%Tod^6b*JHYM{t*Xa&S+fzBb7P{Kzdb?5~D32QPcDXBti
z{|@m(#=Y*Ry$AK@@{EjBQIZl+(#6A1F%>!$qmlMrRCKfwdY46{i3gY>SDaWbP~7XG
z%f)-JclnFsH{uP+5vOQKDymASJlYh!nFEmCKIBzWFHUlt;_qC=!o_5&5^}JOC~=v^
z8Zj?hz>1J-Ax18{I`FUu84K9?yu>13N|KAwC5oaeTx7-3XdsZLuN&RTwb0IagY*d&
zNAo%;BOqyk(XeGQdMMdycX-vcy~d_c(^^k&XK7ooP$knd3!eD8|M-}Dt<K04nHt*$
zd{wL43d*kj<Z-Ntrm*_8l_e!UV(-)#G}UE!ZFi%bMC>Y|rZL~E=j&>hhXd=E25Heg
zS~z9H+ZM%jNOg;$>`AX1n@jQ^wXAYd2`_i9T5@cn1exrv)@r{D8tvGe+mhrK`tNUu
zWCs^dQ=stM<M~o?8qz#m$zdU*DHE9+WCn$6RdZppSD7E`FA0oW1yX-?t83XkGv&Tz
zN0+R;t6a!&ojT>>09UX=*Sf2}??9K;>b_G^py9Qjczwg}*ALb9)Q#C`m_44ag<|i)
ze=}F=KZ(C5GN=CSD10=FYC)O>ygx>GUROarD#*x4i_K789VbZLu=UBgQ~Ii*K(L`m
zFIJPeQ){T)sXZ@ln|U<+el%5TcWcL<<W#9EQL5C{ZH={*PFp?i#-AYhxFUhCPBny1
zfRTukX)saUe7*7dSdkcO>hH+c@H8p~8z`7UKHpFnb|2VpH%o){OA0H8%ajE@2YNJ$
z++4cFG{WXqt!}cS6t9`b!uJL3YBSGV?Zyt01i$d$)FETX$_kmGvbQKW*<`~jTUC5I
zXWNisV8_k<D9fucO!}%$(Y_@8!`^?_R~18Pp*&ToKGMZJRmfL*88_86LcV`+Tj=(L
zn+myizotdqR8-y>-AVG`LSNcKc3T9dJ)OctB2^w+uZct!CZ(m)h<%mJY~Q??>WfZ`
z+d308W~Q}|P4nLPu)p(mtSss9%J1WeSoEqb_l(Xwx3{L{suxyzXVxyW)NxdzqRQUV
z(((EN2DWA0c0)y%>twdjpji9pmh!g4FRZxot)q2ZQ>Ck44278?GSmA1qZl%l5rpUV
z0C^vfcb*=NuG3>2m6_W5*AOEnc1^`Tu}B#upFG9Si2@+^w0bLsLmKQ^WtYFY*DVav
za7gHe4fn70O0?Lx=D=WSPgS7^-Qr2Okmh5Xm#TgzVr2{SWl9ATu^;`O{2HIm-o3rW
z$&nRQG^%ic%%ebSXxe&Rtyac-r@srWfxP2}hE;XV4yDR3v1syGd;}zsQ9J(yz80=4
zn30Mz6a+$DK4Y=;&EyM?E7=krSMO=`^bIT@otarXE_H_Offk>YOxqltoU(V`yfHk~
zZ1L-Po)x!FZGI?-7mHXTsi>;hS94cwxyEA_Q9`J~$VGP9lFeGaCm2%ur<xtL{tPOw
z`AgdW()bzO@SEgaRD;C!<BNI}jW*zM$AuS_!bF~j68P}nCT*l7dIE3TBVJYG)|*=k
z#wSNDbzGI$;%)Lf>I$V3Yc_5io$BxNHWnMWJPEr*Ro}CseEigM&n-Atp)QeF)qJ?8
z_0eOf=Qu+xj>e5`7Ot@Z@-$qd$n4RS*WOv<cUQsnvqZxRr<U(%o-CmUD4AOY-=`vY
z7AjIUM7xnECDBGB^K`^(X~5HL47<6b3-uW9-rT6s)Nfo8Xm^YGmMZ7%;7HTRuim=m
zm)A!kC*D20;jT$1S6_-PFZV*5nP1Ser=xRUpHpP=YE;E0(OvcV`<C8#ODu`a)i&i-
zmir4S`f8zUy-0s9BNy2lDIFyikz9*p7L=u-R$=p&3IDo-Gt29iy9`Ym+XCH*z%atI
zsNOKttn%lm#bS%EIZ(Z<I$sqEx4MQ;O_wBzwtG+Ce^W&%u0Sciv81eT-Wj@cQ<XsP
zlv80Hb4`EIfX<`Ot2=mp>*{mI+Pp}ou9&}wzfWT!DF<ITU#$8oO%X~h7sCdNBKgZi
zGO()U+^%)69BXYl{)3$r>xNs^VXj-HC@S{rt5-%W_SV%;a@i*({40p&KymBw^XoUf
zdbCAoa4T0!bNP7^4#T-*OMTm}?t%<#{<m;naT=DvA+steM<2ztPT)&T4hVrX=<Of?
z-~*vBi!0+PH4?t?oJ5_MrL9?36P~QnX7Ql~L#%sOTA2MCMmCL}!}xWMR{Acnp~Tjr
z%+pG_4!fz*Vyki11&S4ciAGyNWV}RC9ISJ$$3B(`h+wWHmnF^x7X-37ImH9C`Oj%Q
zsNu6R8c2yDjKRt}$v#r#)k1s40jb^4Lm(|FR3wIS{8NFzs+3qne8qL*qVgt}!zsXw
z+CsCId%Dyl*M*l=RW7U1X$^t<xmt6P)&K-fhpVaFEuNC`*fP+naR{_FonBI;v|?hl
zOT%MJwfz2Up;q!~muJfA8>zQi>Xy1)E8R;z6KjPzRIaGTrM^XLwW2^##ya8*{wdsh
zA&C_bJNpE18~!QjrjK`Ip<!P?4qo=xrgmV-h~?|z|BBVfF2pZeM46060A{IxK)T+D
z-$2CyP^cjqyid~<QEcE8Ij0YK0Mchr#>rTinjIx;d-|kNlH&JK%O>w5Nnz^rPx&e8
zdQm!LEN26IiJ}zo3TkFH2X(PrG9xkO<%Szep){weU~aH7lcyA!j9w?WaO-TKVme~c
z23j2E3hC^vc&3*n73AuqYVBil_hWsU(%uqxyH6$JgI~`1qx*n84CfNW-!V^$UiWY`
z&^Fsh#@19>#QA6?(8FK*sUTW3)^dt=D;&rDo%vBH5<)roQ8Wbi4P4P{tBNH_1#*;P
zF_|PaUPC5HT_a)woN&#~l6g|UV~0j|MTQ>Q*PO_cGS)3C_jH$On*}Bwn7s57{cWO{
z%9hHY`U)|4G}7mjz}Ya8FdN3$O3RZOm%+QKkj0e;t6S`2yHt|;o{_?bpPTLOG*lHT
zW|y>imzq)R!rr7R(hH}0-Stl4k6uCyJvJ^aYILEmmJb%&v46n1*AowrbDN@fByHve
z6VJ+gp?WJd>uBM_&(1zbPTJW{PWts}@FRswCrF<3!h$*BIWXk#Ei8-YvZi#wSis8c
zG^{{qI*z0)zUyGWGwG3GTa`tQ?oMN6q2gbiZQemM%BjH*Cw8NF;>2J&Ymbe~3L9PM
zI!+CF>~maXR%U?to#+liTCGX-t8rQul8a~?jc4yrcVFMM2~y_bQzb1$c0|m<Sej1k
z{$H9;CWq#-NBMO&I(Llk7t1e7s)L-3nly`~5;=+}vj$xbWXNC-EKC}j3scq%CGWn9
z=KWFuNUHmA0#*h8YNx`GM<{UYon0IekCOvF#&N`Vd19<b;T6yQnTFw6oZPv4RRI~s
z&A?G#FIoVuhXG$0ZPZHl`l2uc{4}K>R5N#O-nb(Nuy(AQ*~z-J;iW_MNsYX~4~|@O
z&5`{FuDa>~_(9`UuWw6k+y&)R<@`nZTk!qola==Am?$U`jQ)7i@GiANtfXwDN~fzD
zDJvgEpGPq#s3Kkl_s(5adfVWtGrPj!U1wGe-d2ijecsW%Jrdd0<#cv!i$u0}JFw#)
zJ@?mhQ{K|H<FBk;d;WNPnRod)($4t@{dZ8u)uLQ7AV@X$V+tU`Fvg3LqUUjaiiRKO
z8B49&ni9Qt=BZt~o}TgPOTrp!sgXCk<I4ZJb6u?_u<Di(|6o&4Br0thEE&FORX|g>
z?#}-KuLdXTEyl?DNY9l6F4w>n-I4XpMoaxf@Xa@|4%d=(dyiHRKX#~9W=C-Gc3In@
z$A+tq>|59ABIQ!%{3qBt$OEa^r%5HqJ|4F2TBC~2aUJZhv+-zrE+?q4RJct%#0PTS
zrlr&B7x?TPiM_&tZB2{`W$^!DO#0hj7p0C#tD(k(cXSP;(-^-eWeZ15dNA-cE_h2e
zHR<g;dQ+#EwHHx!r?E@&!@lK7EBNN8QDYz7%`@2VX+m-x6fS7=VJ4fxQDyDp<Px~_
zr18<p@V2EZ)Gy?5$U!gp>Fsh|{Cy(Fw4jb4RI`+{ffp3gZbt*M3)AOuM3=!Y?DoTj
z8fchYw=rqfxqfmX<J2P2+>gQc{5OzC;gh6YOr5!JHod9~yE0zE#U%BW`G3JNEYuhv
zie!+eE8*!tQ6!?#aq^T|^4Noo-80<Jj2G_CZHv}mLD};PJkJ~wbv~t@7>}kwXk$fl
zKn#B13fly|OGmKYpO?xWW~vmWpMsXPw~afd$HitYrj^+I+Nwt4y}94mfl<IE4%0Aa
z$GXb#+l(xoY{7g6$~HsuvE!ycN){o#sa~j)zqzzeP!M*FfIU33WMbMee%o5&sZYw}
zD&`~7()XTktkU{z65>7ZXPJ&=yluR4U5Ar~5r=tvV5Dlle2`x~P!6`F+T~PM99*O@
z{g}(ZWs>T!FLFdYzQt4PXpH5;d6wTi(O7NqQNo^I*j~`S9twz@)O5O`fjV2^*oook
z$NhL9JqfOH*MK|ERnw5*ki(bFphM?gLEH@Wv!_T*-Zaix<VjD{N^gwwm5Su6Mw*G_
zE5R!G629=wUwcljDvvW+Y_4ZXgo2beF@@I_>V~njs~GFWRmE4M*g@Li{#-uAiP!af
z^C8KX(0<!VoWxCVJ|@yu#6@0T%rs74DTD0X4!>t0;2aZa!}}=h##`)Jsq^urUX@jE
zK9jy)xvbC@(VBS-7Gv;WcqAYLK;i2wu}1XZ9kWXyG0T(&+Skd-`K6}b>jKqH#iATJ
zQ^agFSGJkV&1D85pCxA_{>qyF9D9vkPUaL*m3w4`_QF~(B&LMeYgCFA@hQl2nUe~W
zB2~+44a)^e(5fK*ED(X}C$IuCV3L!&)$TAguBe)OO@?}^*`VC|F};+^6JJp3pPu#g
zV!Cib;TuSScn?bQawH2Td?Kkpi;@jR^Z%gT2JdPXX?JL&J_<u}(@P4Z0>M<k|Kmnt
z9ckQw&3lqsaIRiG3r@`L0k1V9Bkz8qEY^9m`2lc>Sb;t$nOrx2k%rzD<U@-=L?zPs
zzXMbX|A(>NTsm57Y&rbWnl&$7)ncq2D>b*9b{FWtPD?|H))raj_b+R-X-gW-V3*E@
zS7gz}EtA`;M;_eW(6IZ#k?QS}En<4sHjRb2$Z)q$2W!SFHJZxtn&5Q1n*o>>&9*2u
z@BHWZB^r;+!AlKyK>83vl66DKxg<<cKp3QMH|K2iOzv-xcVG9~>h7cCUM|3Lm@nxx
zv`hw9<}BBv=D2wpyIiSf@-%e(OD-$C{@TdRpFhxFvhMyhk!Pm7n=8yR_qb#9bf|W$
zT<KZ+(8k6-CnuAqLj0JKK@-D0%tLPrimO9%*ip^|ZkqTlxgqlnt~fhK!b4eIuYsFB
zlnF4sYrx?caLs)nfGR4v#=QA?h8uouUu2x<x3Nl9_-@AhC{ScG+!y3V#`R2ICR4(G
zh@qFPmg^b!vBXT4<R&=bOCbEFj`>11n?dJfzr;45L$lkvt=4Y)-1`ElRDc=nJ+`iX
zij;!6CzL^@GN{5@qjeGhu1`wuK-g6a*GD37(4?`dyDUEQtt_MH4a~{Z>7Rc^k%tN8
zUb(_2pZi20qbp@{g6hpdhi}p^qxpH!9%m_@A#B+v#PN63`rK>tR7|FVcOu)UdKVld
zc7lW0Zk3q$l`f=Khjc*4&yUq|&}yk#j`%f6OZgKf%!u0PvoZI2QW~=qd|~w}t?VQl
zLY|Tf_&4&&pzdk$d=+gQoG+z^FH~W43HQDYB<c=QNx_9wY)P%;yeO+^>i1L*m#I)V
zDNN60pl}lWMC2ut_Oi>aF>{R}*XZ7e%23f=Sh~E~rU{!=0y@XJ#FSoaf@-DiBx|K?
zX}$n&qB{TEE2V@MvQTR0@x{xePVcDaYoYnCgVz6{UFkJaScU?=D@)+~ZZhgml^w$4
zg|A0UjKv<0g_IP<A0hCw(QAjCZdaa`)1)!y3H^uLm+o%P2S8grUfp+Nh^Z<Yt|EzZ
zV_zx+#H!&+`!c`7SOWf-TQR;b(tbmk%p)rnF=hIEgQLE`z}68mR{5+hZwkSegm#ll
zD^*eaK98EszeGQSY`EmybRLzP9(`p@f3z%Hz0SS*?2%Sf06#l<V!(Rc!E!P&olVbn
zRhW3?+n?FI<d*&8Dnf_#bE<~7)|@&?1!YLgLHu=U4v-AW%Sh@PDTX@bZ3D+f3R{ny
zUE^N6nv6t=i>ms|4qa;<I59a3ex(}Uf6J21&ulN}nJTF0)5%jcTZgMSbEm1bd^LX&
zznOlTvPUn&2PU2y(+(UTPMU|S61l7T;5?Rr6H~MJ599NoDA#}}I?qTI8|$ZJ#1L^e
zem=#PUlc+EU><G;X`^f;gTBrRN9|O#R$n(&?GD)uVkNiEGCVeFn|}I0Bf$Q(`r$Bc
zA!Dfi?Pm`jzp$eO#Uch!K&a_7V7v%=z*J)x)z&mX8}uNF5o#jevUDs^70Am>vq;l1
z`soKpo|rv#<3FDm9ev`TH=de(Vq`YB`u4H0+tvhwYi=7GyM1+#_(EzeQ7gR`iNxYn
zs!Oa=?A;W+(hKX>y+M3_$F>VcBax#Qwr#&~BoaAtVY|wMe#4_u`_N|}ydU-RpV3O<
z@shMaNdl7@PlU-6(JSzwv&zC3yE_7%8|$^&hArJC%}!xg$L%{0zk4DQx&HmD-~M2@
z$rjXeos)NgH$|pmmBwolIs5i?cI@dX;A;z{-txP!NX)Hp%Z*F-<#P-D<x1~VTeP=Z
zCDaR^qkTzQ^b4_(7YjF}AR~h)Ff#tX>7j+nqDcOvNJ_>a)}N<h5XDQaV*f~k+-}nI
zRas_1mL%7z#}A~38x{s7*esT<x3++motwE`lS{`ipFabi-$k6ng!CVgeN!qj()tpz
zF_5I?g1A^pRcet=%X5RZ8hFI;$TixaO(wGii4UNjD}#@O-VE-S%cKqw)NJz@xtW6p
z5}IvWJ(#6kNB&j-{dPc$M)~@CF=ZEwL-khMV04R_a;A{kYN==^^;<JkZ}I!!ot-Dn
z;7>+-){@TV*sG7|HpQ?ip}L7bIUCEC|1BujScO^+@z8Ie_6g`HRUY~KvG>>l;ti1q
z?6%4{CJFeQFC}(}+2H4t4-DGl7<!8hLZnS%zn?qx>Fcl4uuI>kVrFOPt~lPqcgOqF
z*a4eQMe0e4_H%TaNMtsifO7Z5z%J{zh5El<3Eqk2C0yNJ=B9cfgy%oYWYXV;^oyu$
zbO7Iw%(T3TXw%b0YUg-b{34!32Y)5#Y1L&k7O4(=b!l`#Lc%OAx+gQ2fgNs0p>`Gd
z^1hs297hyWHAts2E6BW#B@6b^u$ZGh`Au9TjUwi^Pfw@7UV|2|W1$~^*Rl8;&Rdvb
z0av6Dq;CE*DW%YZJU)Enk0&1aOD`>4C-v^r;F(lqnaLVgR1Mgdq8rh@3(tps8GY%p
ziw2C><I2-qH6t79Na@FieJ!hKCY35>T&Xgfky15xe39h~Qxq&&Zf@G)ZdhFBT4WEB
zYJF8Crf_M7IHNi4pJl)U)seWj3)~_!65$}tn54iE@Rdyig`8-Kpy*Xqu-lJ~#7hL1
z*y{R+`s-{gL&el}<3GRYrRBOrrRq^#yL0-nz_Wa{k*~3;WZHt7k#L!tVCw<}66`?S
zFQS!etfAg=b8CIMUFKf8yAgbz$c|*P!hUK^`B2CHivAR|cM$GVG-RSRe5XsKY;ju|
zJQ=V%2X&}zajIyzG2IpC-Vv#qsx>4QCIap<pT~$ff1T`0`4EW=0r^e;@DgXSwP`wp
z6(v@JWQK0uO@EE78J1=Yr*Nl%S`dYrpre0Rt{7QNY+5YgGm2<C+~28F^E4_Ydv45C
zY%G_lGzIoK{3WFKkhx_0>}E-6T`ZSue~(&~n+y4LIFpm5uT)mt+<MhDiOkPGo4Q@e
zsbzbMO4SPgRc%A3t2Cs7^!!7MCz+M5ba5=w>e8F9zygV_$YnKBSR5AO6r+)TKBGP(
ztylYE0oO(Inek{obCDQ7qY1b479;;d`U#RQido{5*(9tiz!s}`WX|%Fg)IDlCKjW)
zF&Q}vyMl`1B;_SjC|Wz&ylkAr+9L5|HbCKna_6ehn+dO25PVmCE_vl>9v)bs3ikMa
z7NIU#lH<^~!1u_~S5Cr9w(Q20HAW8ot#6K?dz5myLhHNSVSoSPH%nYl*3?%-+k)tw
zf%KyIGKD)sJyEf^ZxE1p&~vCL4L(92bsy|=%$E8k@TCH{jD($mZ;diM(?z@Yn<2jk
zyYd`)KSv>h|A53I<d9zOM7BKqz<=<-+@Bx7r>OsfQQ{7)99XH(Q0G{WatWgG|D;@k
z%eWqsa|`Tl1?lb*6jDKlM5@6{R0;r|N&37ds502OTy&t=pU62+(LSN#|LN(Cm!CK(
z&O!Sm8V&q5N~m;4wl;3lU-@lR#UmhSKeOQ(2}xfZLhX)uJ*bijZ6@W1!EPC3N|^A!
zrPzt*)yAA4u{D@wR=og@eE|*wwxY4X9#Ifq5?fT_M;{ev;b_?Wmk8JeenlfsABWl<
zKz$;`@Q*1vu2zU$<C80|0(Z+nJ@K{zYyorU<-|kHOo!$vFpCS|;6LaI5pRQ+{`lNq
z&;9N(v66<p4CPzJ{683KnvkTqFP?Q60&&Y#3DWb`lbd+PGZCGsk!v!^TOlcmxR=kc
z|GM(pK4VL`u&Z33l<nR3>gJ6%82t~;^xU{6M9&rSupai&)iqruMqxg;+A==9rg-(s
zWvbrkE#-|{m)KDvIJmoLpw4<|+ew<nQK}7Bsw&27|1>qN)~jWCZSC#7&5@q!-A}Jm
z7(`h&9FeJIq9w@k8(Z#eDiRwTR@VkLkA!HHE(nDHegW<&H$#r<H4X7(2eS8^6vP09
zJn_IvtUHzm>b;e&()?VGuGD_|o_ltfD+<Jo?b9cRZEZ^@hTWsrEF~s)?>-|lxr9n*
zKEH8ID|Q$04NF~Yst!J3svYq+Z_`QF^j5Cxbb*XD*bOoJ34esfBK<E(-r{s&lu(4c
zctH*~YpDFiJ)2(KR};DN?1q^$!L}>`pP%onEeVd*nyiiEC6&DvK43AjCfhra4K(x0
z(U#`2wM@21F1B@SZEo4xVUroSRLqAahx?HW-#MyYO-lxqGO5@P+76n$>FDcQi4EZD
zt*;+#`rOpGs^*S6YF0IxFtGOQ;bt1va`^0;2t2B}t@b5bDNJ6PiQHpt@(%Oh4##_2
z#CB9rvoc~bMON0_@%iU>pz*1>Hf=fw$BLj)=Q9owb9fj{f~Etn90KPOxkzl%x0Vr)
zWTRd`E67OoeRHd@8}J&$_K4+?FJ=A<ycycke$-<kUK<`$tc@vpb$V8%NpBvDW_k`c
zTLSS+&ywWi(2X0{OpNpgn|)TXl8dj3rh7JaZPp6hWV&aIqs~7>riNC#OKR?{D-U%l
z^OYjFXT3xxxB;$(><Nmz_URq?w$BnD%WTj_^dno*4{b)93`LiTf5iWW`kWDsFJHv)
zXv{jgymF9;1H%Ud!)@IMdM(XXEEC715~g0FbLaCu0h_z8URIKoqifLd#hH9ttsA>8
ziqpuUkv-aCzFjf^iQ<9Dwc0e!&&)>lpL0!`z^9)YJ)(~VF5TP2Pc;U)jV~5~5dn{A
zp<%>$K4_GSi17k`j-HGo2jN+w{2Lx+V`h4aLy%#3KB0gEgg9^R)N1LHPiN&Hy#6{E
z@SavM3&0<UE4JUIWp0>{)*F9GTTbRVm=@Murh9Z~%bSk9wsq@;qs`4nFKpfV+OeiD
zOpPmR!jPvScZX|MlDz%O@%Hv;0t5WKCbFf|ZtvUzd9tIRpkphf*#z(Ib#P8ALPiiL
z*IJ}Q31U<b{(eE8rMJpA-e@z`j+K_wI<<VhFsm*2<jnfBS4L{~y|C$<UBg*iz~UNY
z@S3(X!)q#*i`dMyWz8)|Uzu5d{&?%XlUWRuN1KsFo51I&p0E5gUNOW9&mjj_H6DI#
zdn_qr`)h|A@#&{dKk?wx_nmnFqs_c{u)hA_i!(E4QBuj-nSIBO?>%tr7+hO@#&xu5
zI6gw$E%qgV6{vnEBtlqn4Lb?nf-mJ7)utu;2L|>pF>4H2*^KNB;rhlSuWjE3=dTaX
zWHEqDkY`@%2~9Pa%?(o_&r)-iASaubIaT-U#?5CBgu@5UZr=E8-BczI-h{gOS=v`L
z9jT`v%m->kAwb>AOb~yNQ1T337Q-V#)QI7&2Fs04-?z7Ywfw2mtDA7~FTxjgq4jIj
z6?`ct^Vi{*Hlb~i%K`!gFB3Zz=sR%CIOU7%JEoY!?x<-*`_Xi;#F;CUszuxGEvrNu
zRlD75W9dv5K6*>4=09VcB=hA3sLIligpOfI&f<^5Z!T<xoyh2?J+gJfhOJxHufOys
zNnsOuKIgWZ$;a?qS@6|;lMn9<*Y0|J#m=*Vl4tk!+_<`&d^)??$5xlLmAS-9&f|}s
zKK&^A_>6ii!GBSY;OL6R!_>)7jts1<-u={il=gr9(P-K~<fR74$5+s>|2Ozu;A2DB
zqtTQ!S`8I0x!O|$t`u=p?y$+$9L)Dk-#R{i>k6N)w9Rg*^Qw8WM`c1LJzL?bFsMC7
zQ5Kykv^>tymlhcOE)ze`><Z`$O7$GPQ`?|%HJ23$CBc@7in@(U9F8R$>&k~4d}5KO
zs>7`-vznxAgIH5!(Ls4^E7s)c*)lUF3p+7DYlP>-i{)b^PzdnIj=lSL&LiB@nU@aM
zW8m~-kKebAx-Hu>$o_br(IOZie>b)PZYm#`7O6k@61qAK^E>zN-GKqL$LO}*_vj<1
zWBC+&Nxe`U&2=}Xc6ZY8z#j%Xy83tSTy@)ot8ntx>7AcqtnQYYF5)$Cv3OudUCZ93
zZsHL#?uVhCwD@Q|AA}dHU5NYs7&gGCu&dDWu$ke(UV$y_0xh4GDpbseWu-rVpKB3M
ztgw&Yz82F03zeY(e)|mpwr~Z+`*tuY)90FQnLw!;>GQ?<CyL_j6G<;4PDL1@J&VnZ
zkO?S*2ts7-?c?_8aj}K_ek>Q|d0?RuQ1HfYh-ltPu3iR4?Zo?h9@ql+nv3EnN!Sty
zQ?s1-@KfSL+<}KKy^4okBhPa+<kw$O`OF3~*)Rc&jI@5tFgpE7*@k;2C-2!%_Q~}3
zx2(j5=I$Q;-iC^b4c{AvU*9#og&b!fBS>3=KZi6Qz7{<+Q6`7;l80r|4$yFW2WfCF
zr&1ILk&!9KpF3H|;%RE4M(o9&-ii%Hlzv&A5v2c>9MhgrNk!%t8P~9&Nq1V(-!Exc
zeBv%N@lrIgg7{~w!LO3)r>ji+eo@M<CYuDungzqp#A>pkunYZ-i)<)N-IMtMZ5izs
zWNaoHi9`R7(d|fH0SViWe}HmHSM<0W9HJk+h{zlrlNQxe*`rH~9dmhb8Tdtcu%_8Q
zwo6SV=stU~dx@c{NO5sVyLZU^C8U?sSD=0&pkm|MK$jNgb<+gI#Cyc#d6g;W4Yq=r
zBV}L6GAWVzL&H?!xj*ZBT&^BHCKizS?oc?>KZawO$+4p0@aUMLc;q;B2KvXu>%Vw~
z4rLMZ_4kO^-&9*NkFj$Z-0af~tEyIIWZs+2$z<d*j?-=Ayx2OfL14<CJ3+&glDS!L
zO@6ry%NA%MHM7!yMiY=?*+LB^f1Hppx*$F5gbg1JW8z&bCSd@-zw{R&_!Z&7=J5yl
zdhXo7xnZpmyZ>cU$C$;7;qRipO>tz_ML|%b8QUQ^E-qw>f8DgIR@<=URP)%2%}aBI
znYkh%Q)Tw)oi#S0z*gtJoy|W_TuH<F_*T(7Sw)c%-_j$4&bFcDY+80+wp7fKI|3SL
z$K*}&jCs$J`g06BxiYm^s3$4fnWFS$3KQ8Nq=yoLD6cCUI5A%AU9!B$(O#xo(qt!5
zltno{|C5{hj|>$SHjlUp`)e!|jB>G6B2+R-8~{;3uD@kl^Qy|4UcZ*ToWYiu)UIF*
zN!i-8JXG1~QRgnt<SGjE;(~mEOeM>sdNf$)Kc{(U+>FAc-Z3#B0+|q*2&zWkIXBIN
z37q!PpNvoZWCRs!7}Rx5t;XV>a-DDbds9=lPy2M`J;lb>raJWl1E|=d-0v?(MHvHh
zjzZ#Ey=6~T{kGnsqTX%wReQFqc1aW*dWyY5kI6TjO$_`U8YxYeo+d>+{22zk2mH(D
zi16Q1o3h_z%b7V6_8VDd<x}9+_f%p`OkIGvKa-w=*j!&xvNY!5!N2-DG5mLYPjotf
zdcM-Gf?pXjC~Wymq0R%hgUp8Fk#S`=ie&SOy>8l7-j#Pwf4bt1mEODbR<5<a<kOM{
zE6-wty8Q9}>sE#`KmR<lV&!#xV8)S8{HnOsr=??^bC1%szSd&2-H0X$l-qxxa;YIr
zItJO~%}AaDp6AozfB5_FnMO}d>(Zi7ajC%Ru<50A>`A=oEb;f3H&u#6!W)_H6=#9s
zE%-LE@RK-$u_NkpF_F8(0jWM0@W+xYes&f=s|5VwI*BUFKzwGPYs5DI#jCWZ9~1`i
z^Mk?%h~G-`)~(~p$O0E^{t_JbUN|nDw488qP%$)Ik>kari#c7uuMA8PvlA5M{pRgF
zKqCh7K5=I2WmkhqtcvzD2;>K(7eL_+CvLp)mUVnF_R)>x+c1Ei#L(Eea0jdzNgW@B
zJmF>i4&X|SNyx|&n^bFBrB)Ts<!N0LR{JVzs|@ukYKV7eCaz4y<|+6&cY^QVN$0BN
zg_`S>o`|EcUBYiJM<BXX?GB!y#!q1{Gj_svR+`#zlJtEb8oY~<;6a8uxSJ$HWKyji
z9&RfNxjZdv!Wv&?7?Dv;ywlS|lL^&2HcunvI0uWshv%)HLg#)+h`q2~%5N@1ggi3{
z-i2oe_W=jwJ_yr%4o1@D;Kf17<Tbs-Z-BP<n#qz^riLaahNkFQtyhivv5)){SGG=W
zA!;{MZ#dl3QaBdr13=5rib)@U<bx03GeW4rZ|Q$T=RlnS$ne9TmqmXb0bQZ)DX8y-
z4F0J8gAa%gz;E%BH{N*Sh8wB-XvdFZZ!->%mAUD0?8W2V9`GFC_zw@XADs;NrmpKB
zI%fB=EMk#CZxGq*+;Ww-u|VY#R`B?AHF3_S4@@3u?>M^5Uux|Z<Z#*CEKKchEA({*
zRXJIMe0Fq=e~Z!_b<?7(KJ0HV6Ms2(4u}{#=47Cd_zCtA@eXiObob*Yff)V{4!?mv
z4#elq!BIXU|4oS>2Pfgb#dbeG$u)q~DR5F98m$VH;S3Dp!?%Frw49@zE??egVJS<L
zoIIMl7W|T;3&-F%sHYjS%g7WjD6HVaO5VemivWnF#=Psf2Kl`|&XuuEil08HQ8BO2
zQi&~R&(eFOe-!eF_j!^mj+J<b&%MZH5^o_wsdcN!yNLWdDDJEx%FfaXZ^J&Cdp0`%
zgYe(A)V@H46sf@ZCOlT65yOE;4?O<hX$*T_V3#@s&tll=6B0S|ai%a^AbNr+laM>O
zpJx#fH=E61QfT23yRnb5M8rKJhty*Q1EQ>?a}X}51rbrDAlTo=MM^gD3><%4BIbY=
z3`Zk#c;I@GHIKLh`-sUWmP?!hFo4!q56AmOd^|)y3FU~CSO$r1i2VZ6Ogzh0iN;Rj
z7-->$DN0B4tYTsnj{^_<K7msLZsIeMeE@kC_d#AIeF6)8APJuU?nC#h=fq@5$>fP1
zbjMzu92%OM8XB5}x9rGNFgSIjwe{#E`FV0?W^!s~299rnci}LkmycqV;QweRf|#Ay
zE3xGZ1bUZTVpj14`8J?tGf_3G%3~3mTQ)Q_Y-lk{tUfi;aC7pG2)S7}El*>UTA(_V
z#naHV*%Gr_V$#T2xeBdOqBcviv3^OhFyC9C=j0Xm8yxPg^8EbrF1NkLYvyr{u7E*Y
zpi&F6MI514Az_MqHl`?Bs3vVIbhbB<?@5xaCQR6BLTIb42)Vtb9UW~m4LV)pOl!wk
zx~Rlk;C~k^GgbGy{lnG9Pa)${V_kq_rRMDmLCU3w3R%cGom#sx*I!-=9(zcl%~_c(
z6zI?Xt7Bumwmxi<(err<lh9iHCNab3y~$<~Ut=HX$~v5N>y!c$>KO~?S`FvQB=0%=
z17+FjAD;Um)=K|y?inm{E5d$+=k{Kd&la(lzzr33XYHM&x3%DGEv>Mn9z0Dng=dhF
zJrjmsH#eXZ{R}C7lGY2yLEVIKT}(3}L9bGBGL!XeH?8;gkL;mk(cpjkANu1R5-q)-
zo=vCcX0D`bB|fP#YnsKRXVLp<`C^i{AIMekc#2%27yC%eCms|yWiohQdbl!49`T^Q
zSX#gbJv=E@OO7AKWc0_NTy&Ej-6#%?FfDMA0z^Z?+Gqa7=2bJLGMPn~ua;}&asf}8
zr7qlBQ`q8Dwo0T~IRd@OCXaN>!<+kQ?_o?XpDE(<gio9Eb67cftP-n5Q_^Aw^=yHJ
zE9GT1)hU8S`52<f2KU-VKeKqxrA2ZyeDEgh<{9{TS_zxUmvc3yyhm55m@IXZ*Bo{$
zwZYCJS5V4es_1-nE?euj8r^D^PynXp{;tf|m<+WOq0-4lt46|Al5e~nzZ$QiKMDDP
zj}Yki<kTTDaSUxx=4FFA-bG?MAhus`X7W_x=G=Kcq!Ml2(R__8x@{`gbjTkOtGc|d
z_EIfd3?xjiRcn&+*^(TmEKnMdxrg)f*HkX)B{y>gTchL;y_+MosIgq0kXi7*7E>;V
z#n1IyEk=z-Z>S#fn`MPoCX2}_RT%`CR;R<-QL89*>*D*Xhi9IJA}0J;a!fi_M$%$T
zZ=ecsb3qpIyewE6l$VS*+6*;gWuCqY9aju=SpkR4pptQfOxjYmO2V~TFRBduOnu#S
zt!KF2stpYU%rdW&#mVJH^#Sl6oZp*Tvl4@n5G{fv5pS#j?#kgZnRybmSef4x3>IjW
z8mU$);)t?~WPZO}U}`QiI&@Zzs-)dr(XXK!x!Kvd**t-Dtw<<Ru(&Kv1=<mzwcKJa
z<q67_Dvw!gRFiMI1U~_OLVp6qNRwk5;NOaENMr#xy{)6dXw~Xf%0O2MoZbY9&EX?r
zbw*=pX@N$mk!c{c!W{Y%m0rLQTFNb!5}vSBttqiUgRGjH1*y#w2t;dzA|WCd#h3ip
zO@K~+fQoDIp}fgV^HtYB@)B2J6bTG+E>~_4h>Qv@R8x6#f4^Bs{gqH?P;j{l1Ets0
zV}HP$aGj<^pYX-<5E3P_AFFEIwraaXQrr>HI2C+4KQ||rrBRlNP5eh!shRW{dA{1)
zXd`|F`4?XACP6MuZvrLNJPvU+##53q_Bi+gp1C<bXY%f)qZGAfvDvwNu~Ou9d0aB3
zkk1h?(fRu2uD%+xu6m-fV#G*OWiy$%%t%$Z0c}(TVmU+YvP%DWqt#+Yu`1dfSRGvF
zB0fuSgT2u0IAg9~R#v*K-b}lrp{AxGG+Apj)=rW&Y<m1^td4faVm?c(4*ptc>9Pj%
zla8W72knm7?=@6cBd~*vQv3m|i+(lv3dRk96sHd+iEh{#(5lJL;}9p{F3~<yhT%3l
zBoAw#TE~BAT9ZwkR~6Jr8pvLmv6}9<)QMGAdt-&wJ|5n%Qj?u6D|a}{c=Ex*!O=%T
zO8ui6wO&m>4F#S^n(s0>&C|o6jd-FeUxPjw6$-GKnoEvfgL&YdSrRd?gsGpnh_R~?
z1egb~)GGIw-9F}4saZfMuhf|AYG1S6-t1G`O`1x%5dR5FoR_1J$rL$xVpb@Z=UCyh
zRJ-JISGC2r!oka>eCYMqmsmSve})`ID)@<5P|8&kno<aemAUCIvh#&Xvy{nKs9BmE
zXTDJ>ROV$qsw^L_EbsP8tj@}s{IVWTxZqKmi_hX~Z4#Y<hhM3*7V5bApp8*F(O}m3
z!uhUtk!ZBS-dSPPorU|6i+zr@(H|wXK{ifW_jIaGr-;<V(1pR;a_qs{{6{dBK&iLO
z_?p7v)_@^frp=<uc=XfGO*?jY{`jGyu{jdZhh#>3%XC@UZl^+s)@+7+7GmtpV3C;_
z(HwCSE`uKvjlv`x?3gg5rU%8gVy;{-%r7qZCoT}=nw^CLjU(J1cAzU#K3;2Rh!_f|
zmx+A-5)qACUZQduR4iUysJI?{BILk#n8%juUE!e$&(dm>zH*=>vQ8&1E2`<BF|sM_
zNDKBk9wPMv5~nVX&Y(+n_)tENR19K~7z0(U0;QJCSKX!ZwKz*BYE6aR8>{cC+OWi_
z@<!|hnHYnaDbux-(U@4IJ>RY6$<4)$4xzbrxTI!9y%F4cD=^kA3pqM#JiMA5k${8q
zL$3M;j69b=!Z+-35_t--VHD{G-3<-}=59h-qNkK<uZ8MgqsA4ukR?-z<T|Chz`!ZO
z==2i0P_XNs8n!|uWXfcrZkZ2b&;oRkVCQN47++Ll5N69A#?3q}>mZ8<*4(Mi3$et!
z99P9&o;vq9n@1c+u~TU5L_jIjS)h<jiDRbj6}nJD-QV~H0;H|viq(8w@gthb(aPeH
z23vk<XQ827_DD#;Wot{UreZbA>+|(j=uEW}P);>i1$p0}pU*H8yYX@m$iVT|`T1{-
zk>`YPA9j-XSIA>dO^h6!$!}>~QHg^vAn_qg3art;C--*vR_^4{83py@rKP=<g(N`J
zvgzgaeXobwelpX&zt29~)75m)qdo7sZdK>WwUs1R))opM>tyRp#1IFPn(SLTkpMtx
zt(@2d{<O>+ios?fx}g?Ie+JT>OGYPExHzhS(goz><G`t|6>twxK2jW~03numuzc^b
z(b1yrp2~HF`1OYm&XV8$%WHc2_`#c8>;zmvu>m{9u@u-iH=xX;-kY8k5kCh3HvAhd
zVFrI=chukfoB;GEunSJJ+v_QLD4hQX?GU7|FI87j(Zm#<jW>wIg6J{;AT$$YFhY~M
z9EZCdgTvaJNO#kCYg^k5T4k|4PjLj}7DP&M@A8``Jj(`KRnbb@#*%`NnXmQLw{;qf
zYWRclqae@TUV*1q-73v$sZ_zwwrV&E*I-*IM<77;w^8hnXwj|Os*y^RLZ(H-RTPf2
zm$D@CSotl~Fa*RY{6m@`gOi~nJ76WFONnr_?nE3Lk1uFp1JbA^8`qu4qAX0C)b8r6
zzPxjA%xQJYgF`jpiAvQnvb&YaFL(Nfw(j0K<gecI{N_!MtS{+qGP}6iqWowttj&eQ
z2NLDkzGi)SfmB*hW@zriPpXVir=l~&A&cCZ&leipm$ns$ns)R!8FZyit<1%9q~5`X
zn!OWc_Q<HGeoQH>^@|H#Hm>d1Q1kX4heEbgBx6MNBWMra2H#uCSLD$_yVWgpd$8Ni
zy?^f9`{)(@@sBayGtZE@$8f*SkU1A*Zy(Z5jhXXk2gomJi`es2p<x-&g8vB)l&Qn+
znw=wlg>MOXKby_Vs$Cs11^brw1%q3j-LdBGl^*|!Q$remf%Nv{u3_^>C3f8Rg1RJP
zZ(C)|b62(%>dKsQS{GlM$D|oMA|bxm;cu9@qPOja4K?0@O`(bnBTW)szR|9TJUz}}
zxNZHUuVelq?F<=P)lyM5lBLr-w8x5H1H{S|qodPc%aK@I@W_!*!O2gKfVZsETehsU
zSYqKp%j4h*Vmtbv-gOteLvNEgMvjdCkF)mxY~slN$343%$?CoLZp)S|TbAVBd#||R
z0tVB2@4YwELP-M>2nhs23Z#<W$faJ&CAs7-`KDbe33tZ@to46pSF&XTx%>U8lC0f%
zGdr)&d!ILiSrLqnbWj@_20FtI)Q}NM0Ux+u=POIFSLS+R$u``+lh?N4cuU`1)6>?j
zy$bG&)p0SNOv8I1R>bGx+rh%5@)WJMU`E4=N9U&nC-%3uP$bkGtWy}Jv8m&FdXnLD
z<&g96PR1jYCZp8WjkWPev4+jxQJL1zhO1iEPSwH-%tN*CHi^(<t}GmtQw=sW?U<ZH
zR2G*FXFXmrh*65|#i%4|wAVb4CR7s~soV=|i2qWxkGzl6+(;20R)Bg3<}5fd+1q48
zWtDVAbX2vzC#xYNwJKTJ)^W}}NcS7WW^=q1y;&72$EI>Q9nq9NN6QM8E5njoRO8Un
z9S4zp2K~meh+i%pq2r>O+K#|w{ih_(B+^JZ0+mT3vx&v(OmA{ymRavBjtf*7`CQ|)
zX+|!QE0gn$K8GvaEZ_+zLkU&Umz6uA#O^d%^vHccb_njlFv@2Q#tip`2u6uy<xprM
zA-V-s#BZ!J7@)HtT1a^o3WFk$#N!)m@yd!qg{LH0#KyF`BAi7OHd=~$3y^og#pEKk
zK=D20WK@^?4W<M&rzQi{7v)0#hHVU}jmtaId&`lt5kuQ@+pz-X!iX)0SUpnUKMIOZ
zq4b~zxDE>L3>qc|fPf!SIi}QMkYR#khcDItMrvmNhP0j%rzN+=pHQUZ##?8YxTqJM
zQpuMECnR=SIcxzT;#+c3be7Dx>}>Eie}DJw_geG2v)qlj4wcdpRA#4%^lY5TjI(62
z&Fa)Np+1)Ob$5anp`9NX_5q{p>5)~7w68mSKIx1zwHKt+r5VgFYmy_o#wqiqWoUeC
z=!L6HDy!a<n3Yv!)hmrEDTgcKFs2%vsyM$vpCc7#dE#?ia+b_)$P@B~e4RorpXHK?
z*<5z4h(5c+z5<od*VUp}+z7`zhZYp5Pdlj0lDaE`GK+)&Jc&ffV`OEW&LWn4=q&ad
z2u3GYz!0cqA1*~A8u?GqhL4BxoQ@IuM;k$6EdD`lt~;T?qdILgK$jLu_^LlC&>=$t
z@{UXvu@KCqVz&oC74twiUu;yRn-r=Ef0(|<Bc8b2p%;ntj#XKwv$IcUG2TSRy4-<&
z=8(&6S`m5r%P*H6KaTpM<GVovoVOU^wNQEKLpr1Av`iIH+T3zmz%F5&B=68@QzbeH
zN8`z{Qu8av_s9GU=ZC{<p{n}%_;IMf#I!C8LYm9qeYw<n4p9io{P+3cA7c6kAN2h7
zuhiMr;AhyEpasrP8{<G--au3taa6S)R0YU#3~%hw^?n5+0bj%OE44g^H`|$J7Xu)*
zdJQVggP#dxOsPyPmF}0(!3elI=zj+h<7+U9EMmKmC1#mbwnUjc-Yky=Z-wp?>O>N*
zK!oiay>Qgrs5N6&{MR*OR)nsNUb9l{ZP3i@r%otuXaJmzj(fzQSsI_8q;~803^`;w
zu2it-G@;mOE=)CZc_mN;s5Lt5_t3_O%>eepXE1cm0``-S948E0FfqB9j=A8qkl%b^
zev3o~ZxMKj0E0yWFq&*nQkGZ;-T59>YGZ~mNiSo_cx;})sLu&|_f#Ne0rKv>&Z#}*
z=iY`a3zt_V<KZ?Z2o_pRDA?fC>By~=NTvAVS1PVx8s>{Xh$@^`raNyIQmA}SX}ncL
z0SrEjeT8{P#hR?)*wRfQ&%Q&kCd7&;xTNx<x$30UT=^#bbOUcF)&ysR;!97BnCI{M
zaD3|(dd%S(hiIs?8<1UI(Rz&;4SrQ5pv4XcybMM@pUsmou<JaoC9B>GtdWpbB!Kg}
z(}wfH*n5x<v1GWOvX}@S73xMz$IVe450=~_Q}Zt2yIbT^!CM%PEJ?ob2dCvCCT5F%
zk;h9Or)=<esAsF7t|MaDs4i8C9sqJASiw;#PVex#$MS%%wL>@+MX@4bskriq#KQUW
z+onzXo4s^GZr;RF2Xv$JawnA9sr$!aSMVI>a;nd5d_<c%Y0P}3l(s^me0skRBXVnN
zbB`KR9g6y#qlNRDyxyjHh44kQ*V_zV5PYl*{=$IN7O<680B{fV+b86}0iDQ)cS0g^
zCX_nBpXhaRLOF8@&aW8dqmGVo+|>4os-P!^H2N{VjHlEXrK!-rPPOXOn}d3tNXFN2
zd1@9<?^C0~?RbG6DJ3;jOM&cwRpYM<WRBM};-qX2+a#8WWtKofTw$`7$<b?=B4rw%
zV@@qJ`wCTD0awnGNJTPxcCs}mNf&RRYy2O={txV6uA}gYhH{c`VKXx2|5BzjWMulK
zv;Z;cl)kzQlOOJ91&4Z%zkmX!%1RlZaGAlshqf}2fci?Cu(!ZbW+tk!xS5P%TA~X5
zasl*2sl$7E`M^;G>Z?xF^Wj(=F;^&IaG55bLl!5HG?^Ku_EoEdLIIacm<}O<#-jw9
z)TjVTSEdaBvA9IKK)ZYCKcUd3Y#RsMlXKwSrm=FuqvRr$G7>8XDHlq??AU42LvH#i
z2zi!`0-KPh-R{#n9}E&RRYt2=nDH^qMCA#p`7gm=^xjCscVm;GzCv-GaJ(xFj02|^
z1taT(775ks+u@{*7HAVpD2>bVD_l~KLH&x>lbMv1>CwKbGPq?fg+Dv4v=`rP&1&#w
zb!%{<S)qT52qvXuWTYeoiKq06W&+oAXTb*$#!suq`zc<&)p=jOE$&`(PFq@9TaNkO
zIKmk3M%e?trfjo0yUB-MyAf-}WWf7)X}LeL|MrbgI*QRqI&y7-F}*ZS;HjCK)jgYo
z0VZ?3Qi%~5+o6_Nw4zupkHHZzd2*a_gw2Y}sj^is9pj!e)6to(&$epCx@3jFQSXnJ
zC6@W^b|C<ipaL-fKY;mYTLX;lx8uWnZ`^sQU!rDYaD^<MB8O0k87D)(U}CZ0k}1cS
zlY2=ZMmb^FTUY_S#|;=TsFOPdbm|+%fWZoMZcS2typ+7k<-Yw9xP!-e^JBi0E9P+I
zOzayz7crfvoNE>U&iXQml}lbfrcs9FDi-6y1K47!*3LU@`?LN4{AGv+@S?%a;j4EE
zEb(5g-ES2kTVIAVFkGuE#27e9aw7B)YD^}L<>z>_Z34N?t23u3s0Btb<V?0QPFjIz
zW3MljTDasjBnN)Qz6P&Dn(V_de#D(4jb`Ygg((5H<~nQfl;V<3V>};;B!e<F;7RLM
zEcp{S49D0n?Je`R6vo+g1uAF^`+W()pjNbZeW}tepk#I$<iAel`WOyfogt+odqFC9
z=0?EFFL1Heu2k5xVjSQStyP{FWDTi^>^`I-`iPGLl}R#LQe|L4O0i2?Hvy!1yLWbW
z?dtJ*dv<ko?(Fu$=R6MXl``fA3jb?_{-z;XMj`tNw7H4s1mnSMm*YX8Nv%((EEW2=
zNXJ;M&<v?=6I7#0Pi;CBJxKi7oH5}uxNTq-TvugGG^S&e+zX1qtVtRvBUY8|lxewK
zjL&78IYv7lX;Z1v7N5k4UC(0^CM`%u@&wAz0k}`?F(d09N8B;0&Jhggz1E~6w?ZDU
zkGTDVViC1p8Q3>Go(1mLW=8@w5^mIi^w4`oDG}MPjnEFTQ?k+&l?M?Vf&iq-xG3?7
zAOOWyliI2Kgsm656P1CM+>6I~d;ue!9e03G800GZ?0?C0vC3MnCEKIL#P`Q?7b6_3
z$MI*dBxw60yB=kxP|1x_@K=>hj<H{68I{vlFe@a+cm*jE8n7J{UGN(G1?n2*h^x%E
zxB-@-vdM7HOR)y!j1hMmabFNK7C!-2F!hu?F(6JfAW&~1@L+);C{&9iHi^(7=Mu8&
z$~K+F%lL|&pwF1!*Qnw;dEV^9Cr;JU&%TA20D_F`)P3lKV0py70Kr6$C(+%IZL?)J
zxEY(1T@K%Dy}!cksR|g-wQca)boyFpbP68iiMHrViT8aDSMoeVpvvQ}@Y8m%2JUeY
zb1jO3Nuz2o<s&hOG@6XeG-c+b$^?bGF!4cuNxV2cUF$GvgbFs(jt(D9xm`KV%EEx;
z3Mh#+C-}AbnLHs+NR8oxW4OX&`~e2hH;ILAWkOY7rYbEnLzBXl3AILtHa$%oU*dm|
z*eVGWRyuRKa!o8L@}S|}GxN3n1amC;B&xH(&G>4#@6aJTmG|lx#xTQIA6FV<*BK=e
z-J)2N`YdQzgPT<n5Sy2lmPh_aqQW*%bVlwW9+^WP&i`6Xo>@cQN8L%JVvF_YR*>(O
zVH=bZ@;~NGeOf+<6|3NVjuQvL7-lo&llsKg<LAyXo5@0&KTg4a@~OO9AthDN7-p$}
z!d)|i61G;aVILr;Ugv0a@CCRHcqCG(gnSQsUjlytDi8J)n1bbFPg6NNkt<IOU9f}t
zViNq`7LbAUWB;bUCpS}ZMyx;d`^gL7qdV^eM)HeM--+b^^q;(N5@TU)<QKqrXViB_
z`O(z(;2&_QzyFT@etI8o0hi!+`>45_<>oCIEA%_ocSrbV`>}I)4vKF`?aEtpsn`Nk
z3O-wA(dhNjO(zaxA54jA%MorNfn}gIO~k&&#zHyA4`)?G;qBkh8emA{51okxK{kgi
z;=(_%%$WiSmmzUxxm;OJXf#R%>KAv4b<7F|n;<xh3Z_WB>qQKIL1yJil<>DnD#+72
z3|f&nBT<8jD@7WkQ<nrLOZZ2j3C)vpkMbqtA%tvq6cRd}(&Kavrr+$xroT!K0D^Ji
zT08N}c|fn<jo%YTeGh-+JjnhZzK1P3k1hEhz6Y|-<ByK`9`fPC-y;3=m(CNHBlWUt
zu?O(gQTdb)gx<LT_XtLY?vDC-RBu=80dmuY3t$O&n0yB#$#-I61_xsj24$EH_+xN9
zKPKk-ChD{CL<)A1`4zOOo`|_W#>z+^YzC4ToRJyxHvAt@XJs75IT{-^d;pDy&0qlz
z6|-5KilOca>VmSGeQT#!%v09xt0^m}_D$@9ZU%V;y0Be+Db<XXYE8<Tznwn)w>2pm
z^+|Khs*8g$C&`sy?MV=GaaE0(UJC-*zY1zCh72taKzYU}IruE_R`+GAah^(1jpdY+
zpOC-d{lq(DlQw-!24ANX1{|SB7$-hNJ)$7pC6I1ubjEfhsf#tLcmS@~%gvj+Q&PG&
zH;>tb{@;``|Ecw*ohN_l@BiuK*s}Fc&nK^7d~e6vhK98WiJJcZ6ItJF7pE<I|IW7d
zJKkS5{o-wXQu58=dVn=>E_}KkASg8>xyFK$PWzC<F8ONUGU%gT;3BUJ6XMxkSLj!I
z4VY$l9fi|i9?C6^B(0jm0OnMO3iu$HX7W10An%eTn3$#n8F?pzL0<n_tddE%ph+W<
zX+RTKB2`JKP5dWQwUf-&n9UmSqNBz%kjglLbHsddoLQqcfjjwP4o=a|gKO8tI8XV2
zb}FKc>^)|<K@FjhP>Y7p*8;&D9N9K3h7&*vfe!2mjQ6C>FI@P^#Q0Q2OXdDMPj;OJ
zyz^c9yuR}L)Mh?MY^p0svef&@<#VtVa$9H(-ua`+C01)v12SM(>nTlAjem;#_4JrW
zo_M-PX-kkfmfrdFWXzal`1(9pkmo12P&8JM_YlXJ97^(ppQ@6seR9%Gi=F5hO9D2^
zWQ{y&T-tMVeqQD32f8OL$(MQD&$1;VPOPOgcg^?brc8bYu<kBuN|rNbC{#Q=q5B~5
zR`!xd7A`uwyjG<utZ8ypZZ9qu+MEut%w{nO4NIT6cGnTWd~zaNW>yL1YIgS693$kZ
zuEAf49L5E>3;#^Vyas>87ZDP45@nC>GD9P&g_SW2N^SahgF3BUWUZ+#)h&H#TV>(a
z_xG67gXtzABhe@{IenI;TczL!QYzlF)SKnh3Y`w7Q6T0LrJGTkv>kN>Tfpv%QxQyJ
z?fjE#w=h@?gOj!gARUuwI;0~r@1oMopf@v=gXeHon$ptJ&AUI?T8QB8bfwj`76H>9
zC)7H#l9ufekuvbTbjvbJiqj-AxEc7*aA=}#$MbVmzP!1V;EDz9P6Hf&%i5Fk*Ft(!
zag@xl3|?li8IQpA`Gle?Yw%}c1|g$*-Gq-U;I2cR;+;8IxI79`2R}g&U`hc7DJ5nE
zi?XLw#S>{+hD;U7y)(Pq$T0fNne@ku^ekhh3jF(yoHF=vz<lPASSkzj9QbfgVx>Ct
z)#@WZ9G{dSM;``z4*q42yGD)aRv(2QrpqaNK|Xky`8!TRxmX@E0`uN!9xjeTnD>A>
zX^%R@7|tNHQjeL45j!$m=Hhf4SEA$&yv|ifxVH3Svn#_PzKUIQI`(QT8Pg7SWpr0(
zDwJ7OU1{A1r)5~QpYT)`1$ZuVLRp-?X46zhLtTZ@SXtZPn7XM(A6GUZ^NlyKocX52
zs>78FU+J&cxN~i`T(_pa|CNQ6w^vRU7&YkpY&toM@DkD(35E1Gvex~EB$0?+5G8pn
z^a&E^b<d;PEn2e2_`Hp|wyU{I9-h~GZbMDZ{Cg&}?M+jsjV(^>^A)xSlsH!*E5*`s
z-D3h%&nznfDVaWJ!-_F2OKYswqKWxaPAx7d-SF(<S<h~(%?*}zrYkwRV1u8pQ3z6O
z9QU-d>rg$<x8%7n-AVtQZYl;v*+*bPgwCAi)TE{yiq5$do%8OQ*sv|o-+y)E#y=t{
z=sk3H;li_MpXQV27?+?d#$vvs_UUx;96lZLkMl;HaD=-Oy>2L1e0tjAr`DHk$rCW#
z22)RZO?RsJZ>8PoDx9m7m0+1gA6~_<^{=ci5KAGq3X)n@)w-1_RRNw>A@JEkx6^iO
zAzX(Hs#e`HvQk|+T8CM&yw%H=tzNrg1*2_eZvd4>qn;Ci2|HV_o;`g66-Xa{@L@^o
zhBH%8j|l`0Ipys7Rtfninp-S+mS98sm`~gB!}<z4aT2PjFGJ%%J9_aK>@M=G*9HEC
z6J8fdWAiSBG`<(cqNRHY1;hR>I$jPZ%?}%YxQ}@6GaQNqa!~5FSQ2IAAQ8*NKmV6l
zEfaIk@#GwiQt%K*B2!as7_eG(dRCT}yjN?2{`FXGR#v)tU_7H9XNv{ji46jQLH0Gm
zilSqs1CW+Zf{%2U^hVtkUaM%;B?Oe}`Us@@Cb;9e0?ild<5LvnxvSQ1tM30~Z-qXi
zExTW1;<LrFlEM^Yed^#8@SDU;65#w7R=-Sd^rp&yagMvlt?WAUpTnIGo;uyBw7O*0
zX}d4X2KGwx)BC`byi{^$IIog?3O_(pQhMtqI*UO+(|~_?dkZj-7e8iwdsc%_;c-95
zmWnuBz1NnraMG9@OX0c~R@FDnkVAdtET2*^W^ttz3$)Fu^cxkv>{3_Nwvq~=&EXVF
ztwuFhnvhX5ZF@)W1ItQmDU`lyNKu$`$D(~^Cl3)W#s@KinA|9SbKI=`=y0k=4hYAe
zQF0Wt|4|3hV0uTMW%iWPsotCe<Jxvj4CKr^)|*t77gSmETK#;3TAX5a6m<CcdW|^6
zhT4zDw`}UV|3H4`nf&UKbx+P;@u%H&5|c-dc!iQBkXMQsC1qWacNxV<XOIVo524P;
zLzwM19;I14c;H42f-{E|NG2dYG?mP$PpnUtQJrmc!FYYz_;MHKPEop~BNR$jUu6Pt
zr>NYrVTE$9X1J+aS+QH}9kcc2O?sa+TDM43+xstVF$HBvw|sxRFN2PS?i;)YzQPvY
z><n?=-(;FXLsFV1vB0gs7L%PiU7^aR;+fMbU6edHN}gnTSQ6;Vq34vM81}LPnL}y{
z;ASaRmxNY8fFt~TRGNh5o`YusF=5fDJ!2MER4g9jQET?_49O0Aih+mSbr<>j%%cpp
zEJ+dih^;o*q?dpIy;Wjy@U2yLi6u$Y_-azM+SD4KCef2+6$q?Zp5LDdeGFRht-jg0
zY2CJgV?u*c$T%^u&^ISHt;dFUq4(G0Df*!w!O%dNO7-1}!WbHfFXX3Df$-SMi8&fg
z&V<Szf86o<sw`yTkg-4h2>76tJo%nEqsE<F7c`Jf*vgz~yBqsXEXpGcuRj0$t8Y>3
z3`Zcg(Ka{*-7luGi_CJkTjBNOZ$JKsFDE`C=e`zNg{^rF>wG)x3z7$kSK)Q8(ed-B
zhAfdB6v{C%gR_|{%cs7ux23lKwIzWm=|W7e69-*o3z|I1ZA;6`x}DHdSsvPhTXg!&
zEuS6R|MT%yzTl`_EAaFlnm+GPhr_A}9bue!n~s%}Cu1Ll<L4pt24r2(MQh;-Bs3}r
zL$i;<i=~@<Q0_I|{6i^?eKg5&OqbcHCjX)>@Er;rN-5Nke^EDOJPMXt8~us7dUD$b
z@x^iwr_GCB6<Qsis{>AXvFm+un?A=KXtZ8?n{-%Rpw;IBZztM9>#^mwL^9ds!zN~z
zNyOP6%oArL1Bp6>)u2lRmuzvN_dMBRNm({Im0HV_jPr0V&QWurH>LSTf*I$%_G6_E
zpMv}oPiu6lkCImae{+1624u?uj&I0C>VmkeMn{CKI4Af<t`##w>lr5?0S@rKDK7N1
zBSj!C&m(6H`Sy&*APrW^7efo_MAia5KB|=lBS>I8_RmT?`7fEzad8G3e8xphycqgk
z>5k9IgUW1sR+FU`d}BA@*9YiPfr0#nq0@(lP8NvD3#f6?UjG!18yBt#kIZ^_gO8p)
z<I{hRm^ro8aWZt{{D<dF@AwZ#PMxk7g}&q(I){J6_$bUUdSvFBe~lQKoQxg+!%^S)
zaP)GAdFLe42gj5QKW}QC>EBFWlH=&Np*He2Ai(Yeg78Dc7Kb*&h1`S9gi?ZfUaWV+
zd@DCcUCw$pw3qxXayev|>+!>v4)Ja*$}jNVz`G-0w8EAoD{^Z_O6H1T2A-Ubvj|)l
z&BC^f<OC`CYiK+98?k#N8$0Xc<XV1&k=Y_SH*|#f=z2V5IaWhIqL=Ylj4*=MH<ZiD
zj4tG&aLkdjO8JENXz;kvB@mHDP_If%37U#hp26qLsKD;X+E!GszpU)e=G)2hy}cKK
z{9$u?TAE3K3*=g%$mC41jDzlP-okq)%50MS+N92{?c;WIB=j_ClBB^>gE5JL-BC2F
zwOEt$#B6tGWzvd)s}hOPYO&6I35br~1B5TmU_cLVqRgQeLwBxt-7`y;UR+y@V|8B~
zoO*IzcIna+UAum0XW;w<^c)T3Nn$Tt1%#hL6~`uoLt%34Z*N1f^fg&UEFfMVVA8vQ
zc>S}_X!!^ECJ|nzqcTLz^p5pM<eYMdU2#1~B;SX7^?i^S`t>JkoCw4!tpc7!37CAB
z<(JT}SoW*rR<Q8ZJUrf_AuFAEMq|DMJSKMzd;~|qpls@)`6F63g~clyn9+a~oA}IZ
z!03S_=jhBF@?0#Je3oZaUk86DeSoJ^b3r*r06bic3;;3-bcDCHPJ$(<C1i|Pk9~(-
z6pBMXtJUCBsU%b#`YXks<Vlu%1g}st4R3jt9FBMW06Ce+h0Hh)2*Y=UocH1NLA1fp
zJ!;?_7Q%aIqWDdKIu0O}ZvY6uSIk%l@AU10kDfX_BMS&KHhg+?=w?`<UdQoIy=NZy
zjI=h*O654Qdng{Pfw~iN7?l$zMg{aJIfIFgqTzihv}X7i#Ke8%ukI$-#cAhOl>lMS
z+>4H8FBJzZ<ce9>zQYoyoLYhIJZ&i#q>vvn#a!&3A(>3PMaTR>z($9*QaylHsNn1w
zVE<qd`I~3qn@13{<Gl&e`d1z#t>E*fSw4<4)X6wO`$rteU#l2T#c&WR1_-nDa1nxH
zs4syt;*}2_eP>1&fH9UPcWr8E-QJhWW5yOQxM$LsRpZLdauc^cYuBN>s(1b8nFSmI
zS$tCYE`ySn6ClJh9{PFr=C4n5vLr?&-rKNkVw%5q`<TZUoSByqpAs(?OepRMDB8~f
z#wkVSBxGl5nKpqiL7QS<{pr!ME%#lyJ<ey~qB)S~!gDCU<s8C=3IBg5;hnKydCt`(
z@7ytt{r@_PKwZGhBA)=I;wfi-JM@QBq2%w~jOwub6@bwojl;s%JW~7P&+_%+_T#H6
zt9HJ=Vx$3;KW%F{`PoP-03R<i@VWUbUfR|F)!of}!4W8c6UO#WTymh<5N!!We8Q7V
z7NiO4Lpx;|n>iRo6a`^IXh0BZCe~f#wHXhQ3k1H>j_J#b$_lDAe!nj%-mGTg2i`{Z
zEwmIblk>=boEc};s88~o6)Vm|Sylfrt+U93j0tcIbTBwN$t;KB8u~Y5Le`>l3+WkZ
z#c8hemQ4MyLc8{tIghR^r01i_>Mh4&hP4~5TeIO9!l8K#E7ojex<3@9SrNsf^lA<C
zjqjsn1rigKwD66R7Q}tuLSgZCw6H)7O@=Hk%mC)!C@pBZScl<#<0EvX1_1@=Frw#X
zL~<hsgmw6C^4iQ@OtR9L=g2dXB{=cZ8xoCN91G5g_0XjkgHy2*xkmB^H4pqmTK>Qr
znVEQ+IZr##&NzX^N`wQSnTl-oViRr_N@6j}y@0$_I(V5ejp8NmaNI699Jt1q#El?+
zQ0P}CcWp+TlgAriW$!$6clB*>PtNFhWH9C^%^e06eo_4Mn=Pw)D2~F)8@ElMSOwcu
z+#XQ$zDWN4nZ4w|^Rpp0+~M>Yc>nl@;vcv^=E2{HhA>Y=7{Yc77^tBxIoQ61_fPkY
zJNnM-UF2Z*6oE2UpjL^zMI9McbE_Pd%Ec`&h!mhYbQJ%yK!b0LEt<Z)Zt2B!#q$;}
z5D^@iD9);KS4{{eH)NXU$r5Ft@WWn3vWCj*sDv_;V4R0*BoFrw8qVuLIKWgFPimoT
z4%#jOz1;HoclPw$F~6LP3o7Ov>g+r;zd`_BnEAr7HSI}Lo+E!delPjk^HZlj54Yda
z-aDqJr%%75_qDEllLCQB`?|3CzRnHzJ~wqlFO^qj(R+u`Q~uxx8$k}vzKu*p<ey#t
z53Q?c_Xu8Nf&SUHNNuW_IuW}u1Q6xxwUGC}9d`A@J=}xw<h7rE3Oj#f4f$i<wCV)9
zd2M--JK7h-AYU({pPhZQD5C-me_${yq6dw1&JDyb_+PAtv2T7m+)5Wx^9NSMCp3*I
z&|aEM_W+6qQ3Ro_MAL*AFW@sHYl<<MyrQ*)$>5qG8FxbAUQNyhe65B9${D;^;8s{6
zDU(1w`Fzyqt6s%=;P5~3)qL=&J#^$%>I@j_@f7O$X@{`}DR4t`n9Wch6Z>lwGs|qY
zvY8d&12SRv`&$c2w!gRIwbwA2vur|kMo*E0`21RX(bD@TPC2u(n1a+o_a6Kw(@NzQ
zWDcM5(BhOatXPI|88WFjNB9gHMSQSMG_0kdJ3GBK%ZPo!<is*kd$x?3wa=dO=DO*p
z7UxoA0Df9QRhA^lh5gl8IzB6Fe2K%DR_y^r6D%cp>9X#9eSyyA%Fd!?5A;nrvjUQL
z{n^gOzOlg$t%J%75J8!98S+z6Omq(>nx&o5CFfBnYjoWMl#6tn4N=Q@p8@IfLHgSF
zO-VNvOf2~mcxuJ=4J*p0RQu&J9j~DAyB!Oj-cUNWbKx|BG0E&mH44O#>Uj||{V5X;
zPORw5(f*~ktFhN)H_2qH%j(i5Zfl%)+?V{yZOKJ$HB*yP<_VJyX%|BNdmYm5jj|vA
z8{yFICSHeL`nSfsiN$Z;oW`E+)aEQx*vbUUt0(8(NYteJe2V<$=>_j19X<FnO9G#D
z>c};`nW~O{!pwi8HA@}0qpf-C_`of+w?DHy6Rp#np>;~`+&BhbbqjU=aA$So;X?TY
z=_(7K$Bv+D=yx<ZtORBhIm6mG04b1oUD({A4VB!vX$&w9spm(c$At2kaglx|;mBY_
z4i9%<iiWT9o6-6(F18*2e)lQzyVqw<eF-QYY(2DghPzslVKEofPb{4F;F5yU4NosP
z{~Y<Y#(;freEkQv)rZ|W(M!{H$tA9(dcIuh&`HWRK0SZMiyKQ%-l>-#M0-Rx_)p@6
zu)LLzm~iIEHSrU>$?EW2w??l7S;aW<*}!c>lN_-O_|(s6Io1UA<OaqCWXVV46h@~m
zMdPZYxT!fxDo|osNo)wN-f^h5>xsP`_QLM;+?If<eEaKbYB$Xv7oR1z3FN+-xlK?a
z=y$BYO#WUuqr@CnJHNVUTuHK&qvR<>pBA+R6v0_1W@b%qFH_5NtC|z4cTUe&CS=*C
z7=(JO-ry^=caDE9F1OC<Yt474?Jg0UE2iztgA5X`ljr8T!hEyM%piv~6Rjl3Yqv5&
z|1m-@{DC=&Fl-@Te?<9j#eWnhw$gE8CJTBPOx7@p6*?UW!hfhPRFiKWEd~d_oq0cl
zkf|_RdYQdtrogQ~aFszQ6o7g^OW@Jp#yF9n@inF!jp>a(O@ceeE)v;u+}FjSU!ir{
zq73RhR?Js7F?HGP@;Cwu-48!WHeo4s6aC9>S2zbAqifut(efWc4eb?kbbsSfA!8qP
z3WzOeYLv$1xi6fbzHe-NYVWSGWap_<-+%DIxuybLYMhe%6nv1{Ixn|uNsAZzCpzhy
zN$ou}#@6up7rGIZl7;LCaOu*etEWz37x2m}XUP_D|5@<Bg>YUDc>q5Tukp})F)G}I
z-y~RU730Zdo_k7u`<AguxifBSiLXfj1dd~vR>iX_<BOAZT3@+4DMxpez%G!N%(nc6
zCnheqxUr1QmFl#5sZ7l>Rxayon4Y87$jI#oG!p6`=og%UFGt3U@u+w)ooGqNizBd4
zL-As11pmzdjDUH@X*}#GD3TqN=DO;CX^7909+VXoJaAc^mts#<U4GG$E;=Lixr%<t
zbp@qoMCsNSE~`@QDS7HG7syOY9B7Sm1D)MQmVhU1cJeEC9JtS&DdH!i{;&q}W0Miw
zN46PFz-h3O>*A96qD=Q?YAsI^Tf>-^(e(IkoDfYl_BTn6^@U&5Xl%{q7vqeF?fGTu
z1F~FK=hdrqE}sN{UT;Gq2!wD1nzY1tnlu7KB!qLTVu*$GxI?&|RB)IY2W~2~K6r#4
zC9&{<f(F4{u19~O^6J&f6Y<i`OtsM_e({prXG_jiKt-w3TbS1e=|R5yRNw+mkxIlS
z*Ts7Uf=o|%uMwMQoLe(>qBiuXhPLsj=b|JwJz!38=y?aFdGVcaJ6?U@fm)YOdPbUK
zdGWH!kJf;zFv{ua!F}D`efAJqWO@nEB8PLiV&S-^QM~{n@!;qI8L_9r%Q^Nx<SSST
z98GdIYQ-Z<iI+V|KhELB4)exI;xQTzH7X8l4Oey(kHP2lXL9yc)WtZwZ@?>L23)gc
zU<1YW^s`|+9_C4N)b(b@<7D1d`f9|N1CI?~8|F)9b{Kp2e_~1+X7xYrsd*8;bk!ta
zI6?EJ1@dKzPUkD5_!16_uf!B)>mPF_qKd|b#Zdka@fvl8UmwXbrt$P{?9W1_6yVk<
z{ILvhv*>RSMSlz3p5&y&L@#JHG<wR`q-U-!nDFq1>ikttE{Usk2ymWME#&G2`Q!6V
zaaFTQ85~Adfv0I<DUy9-$^{0YMu(DzuvO)`m1~nc%gc(ZLmSy#gqah`CE^Jt%G3e|
zz>->5)HbZ^@PfiKeKkuP6OzX)D(*R3is4LPKzMd4@+AI!7%O>Htate{afaLfOzy?s
z!z)A6>4%M1UbsN#$&u%%9y~J2d$>uT;4N3l`EP1%v9E|!v23;YjaaMt#WHdVID|j0
zm6B|Cb7Eq%8(fuX=sg1+8$wO@yRZ*sh4^o{Ex>lX{r1(j-@ftQ<b3YgQ>V`6j=uds
z33Y!0?(2HG4{@}tjX?df>5&3d+h!mo>f;QD8?|Qc#|(b#b6k_^Gtfhx`58J|A8}<5
zDy;uUp8YPo{dE#BQEcFoA3;w`41N`g$p<WEAh44f5@7+V$&-woBlwAq6<aBOV(f(c
zG;o4^1-D-TyCNI~dGpE8EVL8pwJC<Q_t3pXqGQE?Dlej<Kaewfp#1;y`Y(@nUX5?t
z-aEvcdrj=zoeM!T`EG8tg((9s4$yVZg-~xEBQQEnY>kc+`=a8+__3?1B<1n?bzQ!z
z{`BJt57hz%>}7C>mmdX|s--RH&ZTvHARvE3JsV#P^FRIx-CG3mF&#^yW5fuYbj}7u
zqze&w6`N^B<dLU95=9=F9pOD2<h`FMjGEk-TVd3MlLe!qszYs&m{vlh4KxO)EsMa@
zwB#o%jl$CSzFG4EedjhdvNERBCQ0R;dMPinP*A(##Kdv;E-X}8ZjMfqx8ljAK%CrG
zIc)KHld#s?W>Nq(X-=AE_?&2(3vW&{V9}4yga5x1o_o9nKH<8}eYwp4ney@qKKVP`
z22G-xr6(r;7y2prOJTyNM9@h*Sd`+9(lVpPGB!3MY5$Mb;k3pP+Z2cH%$>P^q*Q*)
zR=;X&!>j^bM4!_-NFOH<zyIXir#F-j3uZ_Y4%hS=y-)3w)q4YswV1dD4capUyp-bR
zp1#zeFVkF*la^%TU>7eSa}_UshWzE?yga#7d{~w<?-?L@Hp~Oa4*WeV6K<wxh7}+F
zd+Nmf;}c4UrolCuZP{*hSQ94BJUlKjmMhg$WXFnA+RMO!Va*oNtIxx+gpqkfDb?o>
zemmn#M5!W@N2pZDt58NC3-=ZpivRjYN&x)WpW*g+dPo3Jt%`oL#9_j}nqqTCNPq}E
zjBf}6`N#H%H!&*sJ5utB8Q;KV-p`69-&1%sUIqCUi~YAhX?)_}L^>W%E4nO6(fo;`
z9?P<}Izk^NBw%hwyDjt*K`6{*ouSZTDbj<7Eb;-AL7F@GE7UuPSKN_!Z@7EQ$m+Bx
zU`e3Y1{%_)E|Y{h;wM5bp7zA%nxfSg=8d~&Q2~W3wVb<uNmgrqiozfS+i6|^pCj%q
z-S+0jDNk&zi-1YpwU2JbGB`N+4S58wLEYc5uenq|2`G0^-X0TLFXnJY6>4__ZdN)6
z3c1S{&R@m>{AIJ}E$0uQyuGpwPt8R=O3F7p4PM*2YuDDb>o#v*2VRRbbw+K0P#zzA
z2205Ma4*#h4B1J;$`|*NdC$P7`93m|pythhEZi2xnU5n6QvQx5?C-$8H$x;C_JN*>
zil7RhpX&N7;uQV%?g+m$;vs<;26>RErR}g=#ZGUjIBQ3_#jZA;nG@Ec>c4_+^6XDK
zHPWJI6xJ`17JYYA&~#XviokCpwJD+vN-DwwX){M`;UTboltmg%3tSw+^V5jY<A3@;
z@|WoGzx)2%s1d=l4}rbIL(X^z?$e^dUm0IB-U{d8M&rvu0b##cG&9^3ceq5CifD$y
zt#EDG4IXc8h6#Iv84emw+T~1raMp~Ib2B5IZ_^7<gpk2vB#mgkY{_i!{-32JKaGmO
z)K=A3MYp-V-rrfRNiOqfeQrD7fs$`ySc5+k|Au?{X7Nq`Ey9FhAg(a+RB(*=I6`Xu
z)`@8{PepM4{Be^z+WZxMyGX1Qq-C65+`Vt2Uu4ftY;Mmih=ezX!*<@5B^B`j6aQ#Y
zny)~iR`3<wX{GM!-he(kBUPeX*i~FG9Nk1YttaspA>B8`Hvf=lJ-}atO!KzFTYU=x
z#m>B>rb!XYD9@N|k=#g8ZkA7CTHY}q>7Kz~nRd9>0;6JxH>#kK51Yx31cV#5PDs0%
zVoEO>e!`1}9w`-D{PqTI6&gG0$x`xr@CxG}kT%x{+Oom0S{X?b<4wlUL+nipE1T$z
zHj<3V5e0PP;2<V%@LvQpQ|S1~DA@B6QBEr0NG%j$&7FT@($d%a>#BCVwjys%ca0%i
z<kO4e)5?+x`igCL9hf!a1%(<@>_#zks*U^$+iR81R9&Z<FXJes{G_%OH4h)}YgS1&
zA{tbKzYz!v%QiZ`OXXpNL!I>0iTcR-0X22#&yai43#zi1OeUQ7LNsrAS7iBrzHot*
zbXHFs8=3InU`)y26?_)lk66ry)ckQMAAcsOGnAXk$D7$GKbuNs*Sn+6l>T~CgJq;N
zyp`#K>S&;iR?K(^^;rStp=ON#rJH3Cy5PlRN2Fb&Hp95!396^%oOust)}x-5X4KQN
zx5SxH(VLbTkL|<rzB>N^W<Z(0k7vNWOjhl-XJ^fQerH{E7S+~L;ci}1RlTU*#R2<}
z-fSK;Gjz;ZF&t?1LvPuRQUam0bWsSK$iQVpz&3*pCl#;^m$uSXg)Co+l8RbVC_*&d
zPCT6YrNnO2r5k$1P6bEGzJ1}wwrX5n_R2aTu<JTx*+J@mP0zt8!RlSFFB7155{WN~
zk6tLsmw4OQY6VZFx5&HFTiqN5Pa*m)mV@E{!EoRV{QU6tck(B;&6FHcI^V|GcPgEL
z8Mon~50`Ae{M0J#4wd5x<{Fjb@9HY=3Z8^21j*-mohWb&Vp<0;GYpLLRHSyOo`59|
zQ*8v%C$YoNgNQs2Wf&!$ihf@rq+(%)-jL)l3NyzhAu`2NTgkykkCKDu$4!0)Fz>$W
zUt`*1)e51>ky6l-jxxfMTb7irb?BM=gy|*FHvN-C$WbQb#F6iClU$I*c{Aom62M-X
zF}Vp&K&&>X#VGx&@8rrx3AS5jozd2Z;A#;PC{Y#8>k$w2_Kcjx#(<AWC$N*BlE0lh
zhqn{&klQ}`dJF0hzJ*|Yh^|NHiId=3<c0SmYGZ|>9s!>@3~G$h_K{C-r9#<JRm~0>
zm_QHA_)2mzIOsHzXOa^t%CQQe&Z!#6H|KbD&ph*t)37*g?&<lpt9r||y_Q_9)b8?`
zC-s4Y*ypp$RdKZilM=;~B@UzX_E^0;JATiW*%hj|m0kC*s)#S?4(3V-gTk&AY+Aeu
z@(&}X5&rWJ3I~fFgSuE|qxuP@Pl~X2tahhWjw6lYV<7u#D8tMgj`h(~2<Jyoxu|kt
z$`9VBVhLg{`MURM7J<*h2JdkiJ3lri$jEEt8=v2E&pmO5&QHZ^se}tSAoa6*u)z*;
zkG;&)x}~E7T(TDGd$)AJd4#@}tHDp9uQ4t47BirF36hT)LSJry)Iz(DSV7gD@+ou`
zRQM$qn^A@+!bpsSBdIb>r4RhNdA*Rl4NPa)izb!TVxO+%RIGV&S#4<DI#9Ltxm881
z)!30av;GdIrZ)yO<l*tRPfsT;`0B0Tj=+?|y>Pte2d}U?;CLJ;X}e;EyDJPu@e#wq
zZ5<9un#CiLPj7{F8WB-gZPlC#+n)U!HthTJrrd=3MOB(a2}r$CZ2DasA6G?QVRo}+
zBC*w#YDw{@kC`|oJ+WnVldHM9P!-_l6mm;^z-36#@-kZbS~BA5m)5uKb7TK@6pjtf
zTu7R*hq7lL8e6`0YMoLTuM2%20B>s)p*I*O2L4aT6N-g)lhLX-`I`!JCRMr+Tv&%l
zEQPv8t`V5+I#b%%Dg;TNl@!B5`z6*u?H3-^&qoi}V+_4#SXL$NC&6ta1d%sRU(jl&
zTQ)FQW@;1RX8O0^?4)-P9nv=sHF2O{;XXMt;~T?i?R-8*FNl?K$OrX@4WBOLapi2j
zp0oa}{#(o(tK)KYvAEp~gigbcJIK$Mlb2VLpYI^w0wVJ-afZ#a-m|7KYJj<!@L6`i
zm(9RXOQcv{n)N0=X3LhW%so}rdoo_$0$*nBt*P0Y1z#pD%gI@mv}H?$${BhZD?)#_
zY=L_aylT>u3&B>Eo&H~KBh$A)ZTMtN3==1I!kwr^J#@_oqKtwfgS$X%4kLppd}i^J
zSmz6m{JpH2Tt`d^-9x<uD~O#BoF%2;r@E?vBx2|Fx%WQ=ej=r{)%d$eo>W5qd}%26
zJCa2o7D!@WBndiPeyL=<^t0C^Cf7+*lA6gYufGoX%|Sibr4G8jBMVI?&`<8tCo8lX
zOr=$X)?zDP!+JtTm=18=qz?TpUhx{wWuo;e9G7?&j*En%+%9LxDGe_~Lo@t#KZEM{
zMp+p+4+Xt|fGw2qJ|wS@A(ZfKR$U^ii220pgPV_UTCr&=SEG_Lr-uf>_O-{?u3S4+
zk;>}>3#oirJSK}g$KFNds1(MuBHl6p35$smc+BV+Zz$kG9g+rUMNV6J;X)tCRJ2DT
z413Nj8oC*`;<e`n_c@&L_kTlvzn|n=l4|k;s#T)WlHEr%l{rT{?%6cSpy&5I*<UiX
zt1}%T{xjZCj`6x%Yx3ku!kFW7)|6&QLz><lk4$Yp&|@&@X6-%QRyx%_>)(tM)1D>&
zefQnuzn`1B7)u(vts9U9xuG?a?()^{dUesFcW!Uj+w=(0aQF2Exxu9Fo!z~g8f^B8
z*;S(Gg1r<sSwYA8g5-K)E#se13YSH4t??n;;J}R?<Ea0fbO%%c&f=oD1;9>AEpDyG
zEMZFY4!O*(6ECd{cv_2H!Hxwv`E#3+m2p9%t2W2(s_4z=HUwRos&rRFk&k<Enlxn{
zh$H3&$F(&$vwNE>ZNXZfN|jPQuy<u|;kLbZG<NNskm`l=$XdH;OJQK{>iw+^>t}T(
zw3@3L+dYjZS}N8|u8@E>@=7xHU<^U^<6ci;x(H$vsQWc4xXJ=fvs^ktTq|TqLqb1w
zSZ@1=WjC$>0FdjtX0Ftchrv`{VnJJa7xw)s`046>^2QbSPwgVN!CzqPoHHwGCA;wX
z0=<weVRw<=med~r|A|kt3dtYg2SUAIZT;%DBytk=+uE)*pwZp3vL3B_4Yb*+DVq)9
zfYar%N+6~WHz*q|7%s*R8)>v{2Gz9_SENvAIFyl#{noi}a+<4VPAT^E%xgO&HVI{f
zDc8KcyL$Y2fF0!lo4!M`{k@tRafU@3%q{m!;L5pmE3y`8^u(Lo`gP}~b{|>MrUsWo
z7wRhk*sFAYXIT5h_nYnnvCq$AFIPD(3dWbAJO`0cD`Q;01}u8Oq_P~SK5tM~Y!Az3
z<PVuyX5gb+)Ul{$a#D&Z%=Bq0Twzoz4TUY_;icsFNnjp%<)nk7=J8Y<@QDAb6aDX4
zlVWF(#u+TH<-PvfKlVd5uet~%7eNd5*ZrVqvAH?LH^xkUy8kRW*{lN{<Z+c996Y=K
zET#>8eU_3V^@Ep*Y0w^m@<hrQhQS_{lA~nN`oT`&>5WW%ru!@h8A!3*k4ar#ZE8(w
zPDfFS45jN-{blvshZg5LEqg8B=yOe=+DxiZL~_aG%4v1!8i|Qh>zcl7WAWlA*A$j#
zp0WV5rN~6iB($4M4FPjTg4zfzCHbndy4)$-t19Ov+E=7Yjl#y2OQnf{B3ENYd`i4j
zuqL4-MVm48wy|C7lM_~yi;coQv~OzRzEM#7CS!Qt4BPiN+cRN%9!H>8O6<zm+oolD
z8s-*Z8(KpT2{5=j<ZIsARo(YE0JrndTj}hF3Xt6{ar(-9y{XM*c_yVoAtK&kR<6A;
zulLyUX1Q|uJZ!hp`KfZ{#eeNO0{Ab@!k4KWFG<H1Ktoq$v2X_jfUk+u%Md%pum-O%
z+u<Hz#}vS4(iT3grqk_i);wWE1D6P1xk7o1&WDT^p3U^g^|yF-&Ev%H9GOU9icdC-
z4>t5P1kn+mqrR$8oy}4SBo0rSJ>WK_78Dnxnj95Vi)%KzukX5L-$ceLq3YTyksQkv
z@C714u12raCe`HlI|`iwjZHq5BakR1R*Om}6-o`>a(_ZYt~1dFif__wk<Q&;hJS+a
zNbFShC9!P4apdm1@lOU`MtgP~{CO79MfK;6NL)JfLb)tr>$u|87v{`8zoz)8XUy{I
z>SZmSBiOd?2Ub;9u6m$5v;f;yzPQ=rX<l3&T7dX+OUyU;Akht9u@DxHlyWKPzgzHy
z16w11G4cYYdOURXak#gpLSEj%c#y)gjA3J9vlQ8s#0R94bl{IXe(f`C55532kY_^q
zxM{$Je+WLJ_-zlUC1SDbbgxfzx<<r?Tu1PQSkb@0=@<aw$UMA+*+!vRrRETk16z7t
zAWoN3I;J;ZYp@A0w#1-LuT4?@fd8=a*{vM`g-|+4AmuR}J;zsHLyg!5|4sH`QpR7Y
ze#k@aKb;ON_F>ZODLd+HjaC5`i|$mHto-56&-}JERUn<r58sAC^-3Ll3u7|{*nL#b
zKq!%zg5RHG=3(r+;9Kl2l85Io@1=f*(ob@ZFz>xOIrd=qXVi5=eNCBykoO2a8)FaP
z#O-wM{9EYy@OQ$UosWdP_-y!b=q_{*G&a2d5H<}{FwlPlyYDXI_5qxxjT(Ol-v-Ya
z=*Qk+-g|xGU3iGLmG+TyS;&W~AIhB%S7${BglN2la7zh1l7u&u5E_07RSD}KS$ltf
zCVq8)f3R|_PXbD0N-nNzJh05Ye%ngt%sYDBrpk^Pg_|GoSbJtI$y)Nrf^;Bo6nAH2
zPb_l+fi|Nfzw1B}<HWVsCLf!bjuSXbW>yR28eX72po4FPu8NGqY3(`Yb+ht2GPUK~
z-dKz8ADGs(syQK{c~uj7U9++^X~Pcu!x*ZEFmZ_S5anZ0bu<wx1d8WydAB^Ad4Guf
zb;TFY9-5Zn>N-5j<WmBHT+2_%wehpJesM2dRb$Wzv*(^#)N^8434^gnuI4k`6`jdF
zD>K<~*uCNUx4BeZjc2H?hTd7|*dZ#WLoeFsf}8Y3Ppr<H;w#F;s6|tyca{35W)!vi
z<*s>eACE4?S=@cwq#(!X<3k#}br~j(B&j9~Y^k3e;KYTCb5LLE%Y>bdYe=JW7zE6l
zDXAQ0q}z^+R%-9Ydy}W!GiU12>A^tjoP~2*14t>=W~ik`?yyn{w#{2KuPxZo8lRh>
zWOLb4IX=ZZudHx&Z&qO3#@g=9y(MX>*>&mNox`dqZ{E@IO^e&|0;zdTS;h4Vd$Lxd
zSIXEjEe~N&d<<pBP6m=9sA`oB7-nRv48f2XL2wuX37X6Vn|y$LfJnYpiRE(iMdj7b
z%Dl4FDHGalES9~!cS>qmewDMjqEOHI09zAU^#LK5`ic`IC)FCcuPKku&uj9@HR_X+
zgkqnRvSV8Ye_`}7u0i{+e7HtBjMoODj*ciE8Bv^%$_SBA3MWKjUq?`l&OV#cy$S1+
zDY&@0XmOXdrL9iaxS~CcpML4C{_l^sk3IQQ{~cHEYZZGMH$1b()HJrkky;cd0`Dg@
zEUl|uF~)uSzUB>MlNk<yLc>pM$udGlFjp-fTR*0D=SvF~zp=jw8fe5l6P`V_Yf1+E
zSuErkY7apFhp1&7r)o~9Ku|PaX95&uC2GlO<dtQ1pGgF&5%P{YyRUi!;Di16=K~h}
z^H{l6D^zOv8DrA5mr<_R9CAKWOkgN>IV>+6QTJ7%1yGEX7ZH5voM;qwrZ{2oho^J}
zg@yW(7Ow=9q6IQG^v}^`WoN3#F0V3aGYhKS<CYs$<t^iqPo2Mdzr7$?ceSxTFgA|B
z2Byt8I@OP17+^`vYChx{Z$pL&pbxll6*>8a6q~HO(O2P7yzvz3NAt2erNWC|Ozuo|
zW0%qTl#wU#UkDN1%h@^<cnypa5VUB+f4SPaGqZE=<luwn%_+2ia0KlVQ)Z(tX+{x&
zT|0q^<Rb6Pv#US-fI;*i0TEx?nOZZw(7+X7cfq|CJNOGBCFC)}m|8mOGkg>UqR!;$
z=pxHXyMuJJWz^XeVgm4cZg-rux4@oi77ERNEKi(jOHA@j+&@0KJUzkTP)IBWIq@PV
zsiH4Gy|%bCDIwb_73Li5Y+Tu#kl3=mt>b6`i^UP^wb*%=+vOH%3__t%Edo`+`RSz(
zPUt<os$8NqY9(BCoUU|EO}xY7h^v^A-&E!aB$RdeeBI^lRIga15}`h?>4TT?8H5DI
z4sRuIZV)%<M@ZN_tT4J7S2oowALC9a?da+#O=umH-%*gFij!p+TBa?@>p3(vEwQ|F
zTxWS=u|H72k&Cf4riz5Pwn}ee_2lfl&f;XJ#o@L1@-+sHbq4Bu?rvOIo;fDh<FF;B
z$N5ry4zY?Yqp^(#{{i`8BY`^YK@PEVk&N+xs3u<#0mEeBhHt*XQ?K`em*Xd;X83Y#
zRpkX*Z9#dJEhjb8H#zP_u!3CoBKB2o)&_-wXAHPp0V7YL*pQWrWJ&MfuS6Z=;}{XN
zSEFPJeBz>EQR28!lAvhwPzFN~8-oBK5!PgWPo4>zDUot8X=;0kx5tq?q1?mvpIXsz
zY-w5f#wX{jeP(G!!px_4yL$r`w}uDKCbujqE}m8EO01fgM&8SC@gxeir^KsfxhLPh
zynbB8x<{u>eQJ9{`+Yy`c?cwZzLLe@$wlGXgmd^aL$bp<T6UoGDf}7o;j3e8NOaW5
z)wJm7xe99Vg6p%0-E2y7==d4ci4t&%Y^LhNv@926AVy1dT%?61GS*R57!ibqJIc&P
zkwrKdQJOpN=!;)0UHZjKN9X0j*Drmsbjg=5!q;7ClXjiGG-Jl=XLn6XL$6<-G2;??
zjcs27zdScLcP{+$68g*ZO=i6QP(S)^|3j~%>*&{KUq|z79=seYWjsbzuu=~JphC6L
z)!}rx*f3z2SSF!_f?14$I1;~Ts8t5>Xy!c&cD%YWqrCt9ZL8lM)BNu0Z6EZPXRLf}
z$NYOU(*!E9$l}gP*mT>S_tmZo0AXNl?R|IMwka{&Z4rr80){WWeD2HS)!WXH|9D|?
zYkhs|<QIVQ%x!@E^4#+D4GO+Otq76iRq|R!8hDKi1~UNjD!@Y2@h4@23|?k6K)oMC
zdHl4?7A}^E0`Cp0FBEpehqL!t4b8uw?*HNRWFGk&vNwQ8H0R+Tw;lYk0UcQ=l1iu6
z*KM9s!pAy8M|ow_x7PR?OLI(A;{Llc=69d|r9ZThaUyib_V12&P$v~Om(Aa|zx%a`
zcTP{^Y2po3sy^huAE1tZnu@KU-4*GHOXnm|$=`G`fEiyfNnjKR41!7c*1uR2xtC@Q
zPP@eRSU$!k0UR3uENf3NZJd?79wMw741`|5azcYj2UYtI{iIkOHHPI6#*l{B2ACNi
z++wVMlC!DB_ySn|Xi)g?3vlvdum|XP81$8x#~}akV$!J7O(<1zftem3*)uGP2q*O%
z!WrUt5PkuE6MI_kb?Vq`ox`htJ(NwH{lwztY!W;C6#)}q4-!BhsPH?)n-O(SX^YzC
zRgi3^ndDT?YcJB`KiIR<(oCkbv@Cn*y2_yhdwqpYAqZ{2mI0x&&_~WtI>0xjbDR8J
zY;I^5*WWz1lwL13kE$ih{$J@uB^2S+Ll-a{qsac);$d%&BHNx+9Eg`}rO1}n_(MNZ
z6*`wm;r~i}K`KT3*U42Hs?c~JHZ3v%N@mHS{jG$1f9z0}2aUTPm2`aT`~zlG8}6{Z
z7lp@W#gnnD5|tw%;Jp0hsoQh<eCaJ22B;46-hA?AC0On4-uiS?_R8nhnN#DfBDYH%
zSC~?;F1frXgTf#q=lYz`RNJ;^;~p`pcMH_{)i=~=O}N*m%x#>Q)o^%mIl&|>MyXE9
z;g~Y&ynMBsA4B2!Rgvd76XBdKF<OB9^=-^jYX4OZ-oc#B<U$PxRgpamaTOM8c(|)L
zTo<}$8TE0v`$MEM7QfcGz9ZQ?c3p$6)|*_XZQ9V8oYJ|mNmJ)ds>OD<9Q|^eracgB
z)$I8Cp4PTwU+>Vg1_SMyZC@U3`J1S5^#hY9Kd`DnWOg{s!iLqSCr>%OszGRWI>7t=
z*PmM{b)_V`BrBe~zGwHqb1NjS6rW4B{JCq8{xMJ<%UH`}q%jFGb7QEU0CY=5^e6})
zNJWJ)LAq%P^<>f0aVq~<bdLag49jlcXvxj^al&nj#wVra9oVtd+gMZG)SXVUBubMB
zV{jOmNr9A%9JQ}H^@WUk=kE;5_ciZ8`Mze``$)dOx-(;ZV~IXZprj@I=KXixH@)9;
z$<sd_3i!<lVFAxv2wkCq{8bxe28%&PZsiFWu{t9FKC>%WmE|n-YJua{DnM%W>Y|mv
zjENIxL@NLgQ%#;^0J?sSfu{TiXV-`)peCnIwZ^Mc#79W-vGEiTCpx8Os}(|{Bc-4<
z9l>@ME;!nqUYKA~R5^`@nHZS<0^r~5Od3IwaQK{1$U@iu$4rEDyaN3N8rdw20Otq?
zc99%G1@LrZ9F#yi;&mkL<t~{lu4+cfZkbXTnBuTc3JN9i{aKT%5>GlzZ55WRL^XUd
zrrMh8)$@gXjhevP?y8&j(y9GL0&&Le9qqSgiUk>44jgL)k0ffzv&&yBv$Rf_l>rXI
zcaP6|tJc~vZ^xMI);zaFW~K9T{>7*v_*6Y4as?<DMrXJzWt19aMrqLi@pi13)xG$)
zz7tC;xp)8a%Mn4ts^jBlpGvD^$z>8#LV<tmY8lu_F6MX&>fMH9ms2JId}eIly#))7
zjU(#`jO^^WYff%;HkF^DTsZTg%(fgOQ=pbWYjyA%v|D#l{riyKjE-WC(3?K&ksO|e
z&((0Vu_vB0IN9qf{$8>^HqP)I_{&!qXNRHDo7`yF9{RUI2|VPTpqG44W{%`+FNJz*
z5;cb955|y&Q<S7WVtY0<77vYObg<W#|GjiwY`o#Qd&n!l`~up)`x=g@Z}fU^7!m$^
zC!BCB_zxPF4flzU%A*X7(mzRXi&(?zhw}MHX-k#bWmd<s)Ml4@Jn6$%Jg1LmcL)se
zX->fTI}<np@dkbeJ6`|XHia**&PVPfJ|lOg*5~<@*e|A3Z?aC8>`gUIA2@E7k#Wgd
z4j}8mLx8JIc9M|DlGK(0HxHaAD|zmM7Jp=oSTc&%tUsXD8bvHpmDGaKG~>UIqWO7!
zeC$}7W;Uc5Sp6=OpgT4W63tI@klTOx1rv}5A>lhx>+}DZaE>-Pjw0NeDkE#*0*?U?
z3=t1vWaMN#iJ_omYxopyC>K1s8~cqgq*1}E8@i!WdNk-9*;xd#32N}p!s0SJvP~#)
zud6e4LVt&=Qe}4Jq{-8=GS%fh2$K_GmS&cE$9YPZwx^o&$K@FcwFw1o<%F5@=Z~Az
z-WI4xwIkt~ma?hi-5pw+pgL9%D-agSavhpDnM7me6EQ-6QLT&0{Ijm9ESlHsjnx<&
z7N}!seJSIoI62nh2?f5ETpLU2NYNFSM<ot=^SC5m*27WqwbB-ihRvFz6;S%MkUSTA
zC-iGAF|(+1s%^xoa9z<I#7D%O7$s$C(;bx}s)w#I`eW^ySyx?KuW3(9Z`0J*RMn|F
zGSfT3W0})$@6ogc(poj$ho@&|Og-3*elS+kb!b|~v-)G}*59j7OifMHA78ijm?0@G
z4ajFcy0KZ{N=b1Enm0Z=bNa&@n}qOlkFa^eBNV;mP?o*N#GyWQ$1MCqeHsaUL@8A4
z=9#gq==2b5NSTH~E5m-!t4N!A({c|+v}p#^rV5i8YEvfa+wD)u%vSrVQnw{8ZJo5c
zJwB!H@T87CIXQbeCLiugiSOv2+`23wnI{+W)dq*ArUT`ymb4ikGPacjD?GA}8jZuC
z;R|Jaf{ag&&o3C(s6qw{X;gvIARf}Gsjfi%j;E(Cera1(dRkg~)wY)wPknkveZaLy
z#u11Fcbu+VSf5Z<Sy`4)zp(Q39q=O#jTc!+-iIHiahn<8228ig%p20CSP@^%?>@P*
zJb&erOXfXToX?fZq_&h|AF2kk7IbA=JVptt3u;n67Af|sC~g;slzJsq>$SSY&EauK
z8>K`+j2P_13|KaGjvzPtF+=DImVNdtoqs@V#J*x4qq@W(JdshUoQzTLQC=6QQ#gJ4
z|Btut0BoyB8rJT6Pm(QLvaD*^lGSC)-LfS2-n*UNoVdkFNbijhLV6$xp(G&$2!s^U
z$N@<x2?_mZ0S-8hdT?+@Js`jZi1qaE?t7BulEQu8_XlL@&D))woh>uFJ3AAbVN>JH
zSG~)j2DhtiE`3}khGfR+T{gAvMmW;<5EBuXVO6QD83<-qtL-RF|7WmdH=@CdX!uI_
z9iqX8Ps#^c*n7G71M0r;1DXLTp2b9j5H<gcL$X-$wD1T<!b}y%Ngw=T1STqkNM^@C
zYKnkbBAOL06Gbw!gc0o5MFSIX=ggUeUp~UGjBDT*rkn`BYvCH}PE3$)xh2jLeevq7
zdplP5bCeP=+*!|~?0sOP;3W3H@3PniUkGqNauH}x4D_UO@+Hop6z2#P<GCN<Su8li
z;c=S=<Jq$q5c~d==05xWGw1uGL4EE{_C7dWuoK@6^tuLxXmj8BSEomxD3kTYo!xml
zG^T6_jtX+WaEK^xV8%ck6;nfTjKuS73A>A)MymuayobhExIN|m9@E_e{JMLIT_50M
zv2w}iX`7?#7Ve$C{E6C(Fq2M|T0E|NY`ca%3EJZeE1J?LZl9KoP4_dJ%W`y*$c*hv
z*sacvoH?uYIW6w0p7h3|o|=RrPkVH%&Y<(A?cAxeX(V}b_fPM5Xhn6D-Wijg(pv*h
zCt0>^sp%?=^|-L?C}L-bR|*dcEQ}ql5<Dh=Oc%uPLIl5oz#Z^=4i5Umo$%<8@MQSx
zknmJ^+mP@i_~#+v3Gl#>@HF_(A>oPe#E|e5_`;BIJM}1nqxymNA>TV_JOBQvq3chb
zxMKcf>iH|aPo*Be;`=1($Q9owTqS=R_3{<pCsN0*_&$Yt?~3p3bOd?t1o46QXgpny
z{>*1y51c21`4^ejf6qh!G){*5f1oRg&k1~OWYB(cz}9X+Fb)`=>1@w#-L<f~cJ1l8
z^G~g+7&Z!wiLOZbklmEmS(RX~?8wWTRBktwOrmxcsx+P%_fPLWzPi44&69H{|8+h%
zuQgv%CRDfQ6n0iv6RO&?^E)dYWS(tA^yH#-D2^*%7TEo^^CMCbdI1NKqcDI_Qv2Px
zhUEq0i;S!1&tGjU8eiaTcE_kPTl4c<GgZ2*=F_WJ)U1Ad_Uy-3*Q{7Qb!yq-{as!A
z7ne;vZYdm@xoGLqMVTWDEp(kZr#3OErO0kCYDr40%`yA_lXQILq`PP4=g+)*(#qpW
z$@kA~-8?lfZ|dgOx%Uf*ZE=JD-$EVp7%wL(I1i%zWrHZIzw{5WM!8B#_?373($eas
zV=^<xEUm6yHa7E&#^E*?val%0G8o(r4ZJtfVtn+{>ycL7Ddxuh$;Y^!R+Hp*mC8<%
ztLf_2)e|x^C#-HAzP`=nYFj@%w=rF%N^i`~u1i%aQ|rJi&IknzM+sf7p%T{Pg!QN|
zEnts>y-4TbqLJcTg)V%U4f=WhPldapW&34v_JSrM+ZdmnsMRKB#~ZT~H0*Jx8h5Ot
z<JdUgH}oq;Z-PdX;5DLetv11n`*}XK8jcap5m4ZOfTC6tJv*CP4qFNApaAl)CX}vN
zI2FP62h-J{#<_{vFR*}z;WX4z7O>y%gU_He4^goKZchx`onFVMDdW@lNty$ciceFI
z(%i}%BWbQDX$}h1Jf1|}2Ub0MKh;Fz9*~E3Qvy<kE&?u%T1p36)0L?i$Qr82(mZiS
z@u)46vy)4kDl>(egV91qX>&zdY<j69r!m_uvqrJ4m~%!i<{aV=;@m3+ccLbB<g&*4
zX?0ntX~tV0aFx4~J=Gp-PNEtKo_Ol-@!6P-h|wHd5uGC3SH*0<zB)s2<Ns!Vwf%qZ
z&(s6n@k{!WEJYaq@49^U)rJJpt626pnup2UOS$A0NYl*gzy1UF6Iw8qGEx!DOC<hZ
z7O{T~#sCcZjlf!D8aZZES>%cV)9|1>sYepytya4|wb&uI+a+?QWP&z4or#cWI=AL_
z;HZurxjF4s33$e>Suw%wp0J{Z|E6y-Ycz(LC!>u?G4_HeCQ5RXswa%u2ySN0&YI5b
zoUWRrq?)dr?9Lh|>~K$5URk+(yvH*he@}38V`Bjv4wq480R*+wMD%<NPNe=uNzrqi
z06#B<6PXvub3J+A1v0@W^fWYfN(JG9M+uG_5zI$mWdb=5L+Pjl1heqzP<k+|FFjRB
z-f`(sJ}@?z?^o~<H4~NBB*o=z1=uH1Cwgua4D~z>d`G8Jv(fW-W+EELn^B9LM&pCQ
zR&g%5!lf8AmmN3mH?hAA9FH&`OlNQRJ;xXZ4?ALe`vcWV#+_ThN3RWujNYe};`yR4
zaE%xIhH;0K1#$wjMNVwR!tthqu|>06(__=i94U2$SsHpho<Bn=xOB<jNzkN^SXf!y
z-7&rTso&FwwT#HblY~6h97TB6?3aO`g)<NjnniW!xdJ_ZMV?!v`1ujP1~v#sqUTof
zT;|t+kI3^d8GbHB@3YAB@G$&bg`RWB^9Y>Y|1s+L5^S#v9tKnSIdz<Wldy*Q45gVQ
zSdR3SHZ*H)=g%U!+eGp{qj2u_6!D&Bat|;Mr{!R6x|3xp7LLsD_S`yl?6w|n#>j;g
zEaOZEYbR{$%xXV&@y<K{bF4k9bK8WEHrUd@j}p(=l_Mu?ZqLkY-#lUD%CQ~^D@(I&
z*re@PcVOa@x9=G@?w+@oOgylzLrZAI`bjZ9DWn(tj-N-N=Q2bqq!)&fwng>(E3rq$
zw%;bo#O+q&rK}8CNYi>10c&Kl9W}ASLN32?7XKy%iQqydvKL)I3_eqcGTfb6o9#w%
z#NQg`$PKD6CXf9!FRa)xqkf*<B#wOA^{zsc?wMU6%5%)F2jYgAj#N<r)y94cUg)vg
z*l$z3jqH@DIGYM&vd^SD!HyJ96Hua8pfn+wod)jAu(4;kcBuB7=tAKv)DF`au5M=P
zclsOjeBGz`*@o)Yf$IvUlXY4FY9}M_V=i!Qj0@L?omdWZB0!A?QuZt;X3t(^&w(QJ
ziDdIXvZP2ZYAllQc+Icj$>vYsl8s|FV86i|#%!cgjB%{iH8LrAWG47hV<Tl^{;s<0
zT{S5bumVudKE+=6)1RnS1MjNgzJ~JON!m-9hV{*nyx(#f%`Dgtu#vOT2LrEE8EK6R
z-U#FlHU<1ucK5BjsLGonhHrXi*)HF0w}Bmi25R|Ac;Dau4yMkV)_0j|1K9oUi<s^v
z{{?0O8uK+ceh6ow)Bi94cXOdq6$doj?_gZ9puZDDhds-k54@J9voSLde7vFjhB<AP
zB2BzTkx|iBvip1joM1Eh{sIA1+Tz(F^Yc4eCYPnfO5>tNSh|;QX;}a6J)O!Yj{<m%
zx^L<8o9c8Kl_`}m8iU1f|2_2@2V!G{R#K;N96o4vnj@q&o?$uqrme58*dWnHpqFIs
zLV6Hwq_5-qw?*XQ`nM>ge-|NeNdNY7{oBi3Z&HwiaMhu-!{Ak!INd!ebs6r*FXzve
z8<b&;^SD!7VxLpeiGWcLr#%~mI(KKXIM*?!@KNs!d#W%I-uDhzKgDi)2lwoM;hz1-
z)2Ls^pvQN59Jc2iDeRX(n_+u~tS2V>_0*r4CM09!f+~K;6`P|Iqx*PZV7Mzj7VKq>
z-yYBeZ>PFKE!bhx=vtM{Wtiy9HcKnK>l0e)O44I<dbW*@zB#(*p?r6wSr=u`s!Wf`
zUo<f{t^Kyn=uOchZqCS-XcaP}(_=dv-r&(W44N<~5$dcdF=-x!L!z^!77cS(uWT<8
zz4=aLOW`n;N^OW2gJfA!?d%cx3nmtc-hMB#G=02W6|IdCkv5p(&!GNF?-2;ePE_EE
zEk$ZE6y+3m_5{=BP8-t#-nX=jo{$=~Eo#`7sd)v9j?I;ClQ%8T$d$&aqGC;n`poo_
zRI5U%i=cFhJ*$`O&|4F;Z3_CC7a|*19Gu#9bajjPjdvr<Q(B{CQl(1d+f2vkl#$qH
zayer7CHe*u$Eok0XUO>>zULXd9f}?9s!Z-eeCe`0F)=@_>+YHB9?7hZ)JI3_G&*ah
zWnw2-onT;}Nlb7KO9r3!4lAhI3}ek1ox^u6s=jeycDPItXNptIozp#Do6u4+)hUrY
zduK#z{We5PHtMHh)K5d_3C^(;_Koo&*vF0qTK3C}M~+Yy>H+rGlMk#ueR?(Jd<on4
zp?dgHJ+g_dJV)Vx%c}z`6}a|Fszvz`snuJyY)LTGq;=jsbNwTkH4(U0TAc;esta_p
zyFj-ip8b?+bPi8`mJsco*`A_JFbu4kaYlQpHet~)iG<sS%tG}_K=l%l6*9S#8F~p6
z47vpBZt|K$><LiM7`?6D9(d1U<p*!{d^dF}7(VNPnR%iGP#9&+b?yNA<Q%h<{pUUV
z+5PaIHK5wrx~zrQS5TRE{m;kz*RQ3$20n=vr+d27HsLY<K0oFiuO*9%9dk<NU@><t
z?QJad<|K=eK+AirV7fg`l=KJ2Jdx3Q>Npznkbdw>{5%GYmzU6Zf%Lu~@$*DfA2n)U
zNbip&XEoT~71a-dSt(@wh@Ru|Gkriq<Raf6AbpVF??La!k@pXg{kj(a1-hMHit<mb
zAalK-o%$E8A~AqX0bhM`6ZJ24`%COj(DM?Q3O-?1ffc8~3U(F8<0T-QdYURG_a%b2
zC6-W?y-(l|`2HjmpTg-j010)3n#b9~k=ECQSY|o68BB2*IQ%R=C)Ff0*cKIKbWR$Z
z5TBD~5?Sp_$}>AB;-|~Lqcl>5N_2O6Qk*4Ds?>yS_oVC1diJnPIS^{qbLaO<1Z~vQ
zG>$?q0Qjg|Wbs<uCcN$Hb%|Umc%T7vvBfiw&wK}DHnJ<hN0X0EeiE+VdGh`DPwqVR
z^2?_Xj!lBq)MDx);iD9Y&?Kh<ZlHn^bw;c^1<dd%;CHZHA{Rwyp85c+>jLXPB)r^(
z+G`!1k9a8+2)y{@LKw`v3x4ZUf|ZGBnRYPUr-a|0JPFUp!y}>|_yA1p1U-L4`5#94
zca!`wK0nHe1Jl_ZHuuBuJ6x_$0j4Wcv>6HP?Fhp=o$U4x9uP}~lBfs&M(TeS(S8Kc
zj{W=axsimixv3*Krv@LwYS`Q1tS)xR2T!3Yh~$zdK15}sAxC{h*M*kd*M(ZB9lcYi
z9f59i@+8HaVxI?jr$8n91kZQy3H3DG9*8MTdJx=xio9DSc$Yej-r+ky+`W*~Z~8V-
zmG6SEQ~3RO!7}Ot>Kn{&TNrSJ0dE-4gaK+a`yBi1O`wo{>qd|Ul2@~Dfr9HnKKsln
zPzX|2p~vKv>|5+}cz$X@tJ*JVJ^H1==SrA{fomrDfaex!d+$`>)i^xHcn@CKc;by7
zhi2e2ss%V~;9eMv9=sCr_*Ml0?gX_ufjeh+pg;5B7x;vUo3Cu4^OcB9QQUOp9Xwr$
zTwan6EUc5)f+#6twrS*PI+ZYNlBq=#FI3g4g-NjuCYw$z3>zh%L=tG2L|v1q&eRYa
zPiw%w$)DH6>L#1)o@br<<!eoG&&J!cCnM1MSi`w<M%_BZ>sG-;SPQ!c#R;!HdGlkB
z-Fy;Qo_p@bbLV(l7+^uGzrBGr?FMhLsbKGoq^{k9XQ3B@{__Tx0)NU@g2I&;M~%M+
z(1OSC9Vm^RbI}|yTqaAWi4oDL7B**w6Nj#on=?%-!lYp;ol(iSY?gF6nsQ_F3v;!^
z{@wpO5FuQMb}xVQD@2T}_Ba!~-UO#-RHECRnBXRM18A;=6)*;utKc`6xqITA7f)BF
z=6hppc2aqY_HevGlb|>>&KL>K8=di<nk4pN&}=kEN3mO>+=A~O3dSIwwW4wp0(&KV
zTulcm-yw2%QO&##FFAzPcr_wKm`DTa^$7|3*o1^<>YW)W35_G_)r!VZ4QTMDCNz#}
zR4bc6RH8o4>5S7SK8oJekL1(Ug-eu;qv{jWQ92@f-Tu2^8&!q$E*bH6&7Ix{RY{6d
zCGklv(Iz>o@W2&jFIFCcTAAGeI-RMBMyuYU5IIeqmNK`=Qr=n2#3+j-o(@x%OcSm~
z%#XHIcudxcF78EURZLR2Oe(X+trjL)<KiWtoQjOrMCdIM21#skajI){c>?8@>3Skk
z<C~QdS+wv_cwBn5JE^7Eks;Gfj!4!PM@rP;0{+g*PQ=d}QGGH)^vKYwoIw{YeRLCL
zQUjXOy@@8Eb#}OfP>V=Qs`JL1%Q}ih06j(6i{g?+QmIU@(ko(B$_PaS*cMh&<Smk>
zr#l$8T-OzrTs|(_JFz;MDwXNxg;{m^l5m-b{ho@943pt|0f@ls;CI*_P2n0M^s*lN
z_(IK#sS7w6!FpOwrKx06QA$;|Q&uifgiF;iMr~r!Yp=z{dgHzdSH{ZOc$1+L+}@Ku
zx->y)bH%3!#d3w*o!m34FegbQu8GvCBClg?W<E9<>hN$inoIB+mvgxm7_I0-1q@dL
zC)D7P>u<T`mctu2Ze0H67Og=voQY%@3DYW!*K7mjO<7HI=b}Ggk6QV0bW)7Y8U1k-
z?*p|Sl`|QYgY{Kazk;y7I_&MY*RMZQQv=?FO}DS@Zd|ph5vuOQ`SMV{8Hi8bEAnX&
zuROd;n^$EjnOKxk?ZxbhmPl2IUCyM}(Z4>18H=i_s=#yJfgJOqsz~~H7FL$mltso#
zA)@JKR2K$~R6TcN#iDY%@S>U_DyoWin~c<G7bwig6>r}m&PD=xZc)VA>#h6U?$=h`
z6jlf(CA!8RO1C~RWyZh2Q%&#B>p}H(`hSN@P<@L6>*x@J3K8e8MX1D;#=k-?tbxE1
znk=B5)e-Lcj=Y+=@r7ZLQZ)6MbY1!%V^pt#S9Ge|wVeiwHd-o{2<yzts!O}8lfx@;
z3x873S>?!2uMmexqoj-N(l~LXSZkBUu82}Z(W1({yoBoRf<`TZa&4OAUkprCGuD9=
zXlSX0GC(F>?D`WCeJ;r^lSvzDOG|4Tq%xU333Ro;I4sT}PMiDl+BN@~lNufuH{yBh
zUkBka^LWsNWA_vhlSrY+k&0#3Ey;FSl&qn;w6wYb{jev4u8!wN#KncD&iT)pwLi~I
z6C2`&y@>Qw2elf`$LAt65-j|=NGtUZSj&8cV9x|$-SmFwWfBnV*$`M2f~`TY=Yp_W
z_zhs_90WsD@~|pu1rQS03w}Qj%cPdWY2=J%Uofv4(K3Ua(L5wzcvvY)S3_Wjf_aM(
zY$Aaj4wlh?@{T32Bf;~XGL()x8#)>+qXMOCBCunAmWQ=aAHjO&T}0nY!SkXl$^a(_
zUqP@x2g@Bz>0zCaL9myD<z^#%q#pDu!E{;#TTOWSYOvf&1e-))ulaxHVYvu4o#cHz
zm>1()OVXVWrn6Hk-~y8F4Sz2WONG6_DtsHk-VD~)iC{(odn;Hshu?to9*S#UzkzEb
zb`4<sf8pAQhgJKvKty0K1k=qyc}D>+g1sn+=3y=VMX(;s=6J=!ve;8_0@7OuuXxyK
z_9UzW_j0`AVc7`ZG$`SC#ly4+wwloQYOvf21e-`;ulaxDVYvu4o#cHzm>1()OVS};
z@i4nz3m1@dh*vz!37>(BnEiwY6nuv7<0jO{9b6yhVcpah&`VF|`gjnw2Em@?`Zy1(
zfr)^o77_jhU{&xbASAFC$oU|KO+w{X(jO510UnkKpMcYtV_d)IVRa~7KBkX9TO{ZA
z2sVzSJ0M_qSQg6LNMHy3EDuBP;CPbvA^*=jtQ4iIA+SS1d_@S>Mqr17<yNA+!wBq%
zzn6!Vp>$(N8ApTZs!_UD0y`G0M>7=*>lh{J2LYHHj)!f+Fx(G<c}K!=h?X+k4}!Gh
zAbi(heDo{9bXo*kP1@+yAgmF=rV!X`0?5O%5sdH;^#dOdD?qSKB;EO784maqTu9Qr
z5loi|b3wc?8jqPE|I!f5MqqCR`^NQX)W$Qf3(WL<EW1E1xC_ojGOXD@oOz#l59zHL
zB*LGRAqNj4tQF~SyeJEQAC+HbyX6jd5iqG-R3Srl7`<2@3`Z+ZxO~J-lS=GzwIeG&
zBCoB?TDkH325|PM%N=HvD>LU7PFmS$>{{Ff;L(jJWpP3jmvUk$Ny)sLbMnKVzyEN=
zh(%+|%@N-Dn-0&u3$0{hFO2kMu@9lyo_bfQP93{?BuGwuKjP=!OKrK2eem<Y-yb=0
z$=C{WME3lf56`@deTDtv!br3pj`6?B_?bTmRK$;!NnjHs3Q|xV-ALmq5R~v13w<jz
z5_t`{G!~mi<Y3STs6=iBQne}c0TzdgLHf20eSq7mqL9w5Kp!f^MuP-HS2k@pHKpg&
z`etkC_}MEfrkvW)1RmKW*#mA_(t0zvt#U^TNIE&c@`2`#C0!fYf7~2?A3JYx>&@)+
ziXAQNJ15ASrCl58?2c8nHLE6NXHQyHQ@g4o8$OFrH8&&V6)R_tFSRzWKS_-`F|Xo*
zrjEs3>)FpYh2P80Thy|Nomsh~nSGagv!ru9&~FUC2i%O_fZHn2o1)sAI<m7nZmPvd
zQ6X4<M+SMNK)oPV5HGM0Tgfzm3u#+<NCPSB$0@RwRk$b%(4d9BhH)?|n;VFLS0SRj
zlttkJ4uGIGjm^!dfEOUBLIj%(t_p{vJj-CnDt9<4T!zJ)bfdx4C9JOjGL`Ju6sThD
zV0$GyFXhmZck5@|tQ*7Lxfs9(-=zw$FWL7k_!~R566pYkm%iHopL3ME^m-S<RPHhu
zT;&wWT*1ywKD_v^b<;QLMzPx$k<69gK(g;^@Bure0&Gq`yyV@w85?z@z|=)7+W>_X
z?3iS3jgUg!LV1NZAs)mJWf>5({q|7a?8#e3kJ>spJA3lhQKPp^&OSG}t*xi0t!*+R
zZra$Bm)EngscF+>@;!OpyvaTD=K1}XexP^Ka^`n59+NLUz?}zP`hht^%SG`V43Kjl
z|9{vWu$cE*Z|N604qpz(YBKr{7OyckUO(27A0I~PY_`n!$Xjo{xCU%yo5~iBafOAi
zK}#Z&CjlHk2A*g0Nd3^t2Np4}@bw#T7OMz^ltKT2d}EF?CdQd#H037gbV<3Nt+|M?
z)7xU4*$9T;<(iDy&Y0d_b}rZ)C<4bALS?LB_Hk?dK0jt~&1v?>)2D&#G~DW&4Y%G6
zm->i*(+reeLqk4&kOHV#_QNvtKX{rg0Z(rPkF)&!wNdN>n1bdo?d5!uy5um0Hvv@!
zeUM%}`4eZo*{N4VR97@HumAoP*X9-MeM}m2LJ&o45<>kRd%W_{?Qhch^1&9G1MI#b
z%R4~Udm7Ulrl%*3+uY$Ekr6A_M@y~7y1IepoQlFd*A2h9+spez4)udvoCkj!wQXvi
zLUkRYdhEnYcZOPiR*kJ1-RBpXv$tpOqdy%GOF$GPG?Y%x1HY-yWq;80R71&lxBS#z
zp2V!FuIo;%Z!Evz<UGy+zi&-HkNtrv1^n{&wr~`h<kG55udSQ<_=aZA`F_w}KW7F@
z+OrDLjD5~F1n=S!>o#hT1vwW?Ru!~Y9YA-`>K5)y8J#d}=lqJchQu7J+&y(y&%%ee
zOT|`qt$WP4Ded#-&FYLvt4PUh^g1<$z6u1|1g(;sP4nx9FElCKc}4L#Jq@XqITOj1
zveGPX`JT!`yaT7V=mRwg8ua3`&tFKq9&8O2u<e%e7v~W}s8EwW2X-Z>Cp!(?h6?PQ
z`Q(O1du4mRqs6fz$qJSy)?}NKYP)lCy6cim-r5AP%$l^q(UO2;05-0FN>a1p;H0vp
z-HlqIXt61g{h7&XnVMJLRbn)jbd~2#ZOLLlM51Z2NT_Y>URpNk;EEdVZVq)8(HKrv
z`aw^ZecmlC<V1xt%F%$A(kqgbqsLEzqu<Tf9g-O0^8XDQXWiYII;~Ta5Cu)zq#RRe
zE&EsBCn><LjAA#?Fs*fVN$1`6NQ;i!d-<8_p}r%wS68*TqI$|^Zmz4lc}8jJjGOD~
zHqR{U)jC{pv6<K+JTo@V<<Np3SDjr^P_W|cs#RyNFDSVF?5g%f#VS?tqIUGHRu?bA
zG2!sMLVe1`dm&!`ML3W^8URr9GlW%AtKA%43^J%sd*fk4tXE$eAptUJGl=5mg=YUR
zNCE#0%}WkGrWZf`D+Zg5a!3B)u&cN<!&Q`@rcBi)j;qhe7`w8uW##BpPs;t8n&kH{
zoh>aYEw3xcF9V0eCFbh6O;tB^<apcHHZ^an0b+-pJ%n_z(f(hc5Ag~~WZZ{BZ9>(G
zfc!xaMW~~5)W__70~;JRIAbFVTv-L4y!5Qh%#4i8+Y-DcX~yW~^$pjL$&i{oiF4A1
z%`GjR-I{hnVNB9`^YgtK6>yn1HMyuTCDqHmBTvgMvsKJ)N=j;)U12NBO_LYio;SJH
z>8zcccN_5ufclUe(TROS<4$bi7(sEwB3`G31UZo5t4{E=BgI#)i222sov6)7*Jp=I
zveH*cO4}EgV0T)M{94Pl#3s|1sn$DNwH^(SS_|{?j7c7Aa(s-~*f6)wmfAeM&^>-w
zgX4awjLaQ~S0AA^!oKkE7Kq3b+A{q-n<1h^4uuJxDrr2TvOB70)j6`-RyDfDG!)0y
zN5;!FW^1Z7v(!`OP21iAzNQwtvu_q9H_j|=SUt(3c4X?O$z^Jtx+KqC9+M1JoGfZU
z<$sHKkc;<w1946IT$CURJbm$V?H0G%6W|Wz=$7P<om)~fv({E!-dLA3d|6BNbuGE-
zSxE&_kxK7~iAm5&$8=9<NlQ26%S7Q(aawo=^8ou(YM-Igb&o8WGd$f~-d&a^kBXBS
zW98BDiQ1yn;~*z5DZ`o=p^#8Ccg6z$g=my;Tv7+PA;cH%gq8tH0Jj|q^0SlDa&l6V
zbJ~Rx#+i}QR-c|WdPQ^H;?`ujAxXDNU7d6u9?Z`x$;r(xU^j@QqG(g)jQWaYZQjf=
z%WB=@$Bat-+-}9=2uUU?4Yd)2Z(EQJA&PSntFqv*kZ3%*<lrlcc@0Xm>c*GZ-AX$X
z19p84)<142v$5yaDdOIGORrf8$NTp2HZkyHgfANJ9V!EXWbx%e;-T?lML7GfsJzTa
zfK_hSu)EYI>a*)Ia#X&trVMzqB`3zLdWh&LpRr2?24QW$R?(23FRcAFozr0o(YqH!
zlkwc4K&t>WeIWfGsr_EfuzAg+^M|#}pWiZXezWlY`OTw#tq`3Y);xcH^SpV@n7&<5
zK<$Rd0_PXIDA>!wW1O$Va%v0c5(>#VA=wo}v#SB(oid0PS;;Xnxm6*vt5BuH;f-};
z;>_vHtKuYm?)=Haw8E%pxiGC@=l(-YWG#nq!G{qpGeh<vnJiFG=B+L;0#2iP_%jll
zijkvF7Zmz_#~<+B!kr7i?gcv*VjOqTbKwf%2($*p7k>ay(ZisPIZtlRa(CW@!7Fe4
zxB|)QIJ=#aL|QWpktO+7k6jU8&{jmRmPHH2CJQBxvnyRCF-iH>wB{Tm!8roqd<$C@
z0%7R&Ig1lGaQ%S_N{iYG;_IsOOCk*!R$&Cg*sO7CdL*zF4Nt3XEOjaEadKcZi-plL
zLT3p*0X8zv354i@vmpZ|IXf-dh<Wq`(35Oszv9N{pV8yHd^*bR$pZ>dJugCQ*_nf0
zXspTXPA*+5y%)a8>>>I#8Xm3?4+oaO9j8kM^PTaYx)f`nCrzn0?TpW^OSTqyQkf=G
zQueqK3wEmGL_e(P2X2Q=h?nOHFHOWkWN2<;+AWIvhvX@^fNC^%bIxUW3+AATeh=DF
zS&L9vPh71mn}x7ovnJMIry?S(8S#;&s4SbpP}o)klef%4jM;ISvZ8?8%CC`Tqq4pi
zev8WTT%nf?!9hInT&DMcXNTgf(qO&}IdB`{czhqnO-@YPdeqncO!}Jf^1Y4cIk*vb
zy4vde(#Uw!=_Cwov&CvaB<@9s=R<ZrP>A~$=;8P<g76`R*tK4!EX8H`Fm#Xq^m1Gn
zk{CE~2qtiJowyng7_KjXsY8(g8a9(bGIX(tc;E;q{}*&8<sxHCM|}Bl<8Yu6{Gh9X
zQ8_zsuLgGvx=i_k8f$qOSj)@6TArHj1nszsAH2#XL1HU3h#qddUzMIEq}yksj(IKg
zpi#iydrkE4cTT@0ca6#h%`2inZ=kM1Af)t`(0K>!2y~2luYT21c$djJu#>QJuSWj=
zi5w7g(`Vq5%=qBBKDjzO{vI;_cF+K7K$X86;2CBgwznj^60X1+33Ci=9XYSca73cd
zbRacMa>P(IpWcwtI3?GRZi<dJr5kdmG^TL#_(*mxnD2iQTa##9+;WlIA#jg8WlV}y
znNzgGnkrVMT8wI=O42+6%la?qTq+NhjeWtY`hsz}gEf7uG%m}bLCiLQUrX`oL+!}Y
z(|1jhn=(vRmr2$xH*-HY-GQaoAbdxN|5dY;wzxBi6IL|*Qz29&l$Y0zpI=wpJ*uI3
zwD<NKk15T`j7Dv=8`Za~O?H!d`>kj(75RT8H~%l%)#(48*~y$FIt|5$Y?MP`^D^Y4
zLC@4<pMq&i**pI6`ajuiOTes8*=<X~tk2GW0j4gYGT6s|d*pZa<a*H1`-l%z;Xl>u
z*++lF*YX8oq~FJgw+TxHa)AZSvQ>gHg6jm=3%1}D2O`(PEsO9-QVe(o1D;L)%kSyw
zW!+__BaZBB#}RW`S6RO&pA$jM!AIc&^wxYNAv@cC#8lSx`<s1_=q>$IzqgmRUFogX
zUe=bK<#J_Zx0Tt2PJ20eLjSVc%I&@1guV;?%@*M&S5}rQ@Fwt^T6MWRi1#jby0~4q
zLtsFw&@qAqf^C9_1+NRfL#?dFTQX7#t#gQXnpErn1&4y6G{B=FjvF-nm&gu<9d|ZY
zA>}1MNbkjYQD4CeB%nfB&=0keM@M-9c3gyG1N3u~2t^9+ESQwuZ}|&wbQNsJ;UGUq
zXc}A&B?3YRaV_B(6u@a3C1aG~(xgncR;d7LRdh;vno6r+;?(h@rY<P__1{v3ST2$n
z6EosKL#{5xq=<25$0tu}A8)@1g<_OfmXzVvCeVq|sp)A-tx||{PFYy6FCt3JFaU<h
zWzHU_H8IBHaj6ZNrU(&qM}>>S<Mc7YoGOJmU2o1Z%XO~0jF-Yi5>dDw!E>t=mUO+v
zWtPXf>e8VjLMCQ}0O3NScZxGQ8Yop-j4nRY7$E}HQe}Wdl{HfzpfRZ((MbQMj^wFO
zre~(Ba9(AMJ3xx>RXGUf%EYv!p)yUFmUN#Nmq{{4CH6Q6WMf_dsOpMf)oopgJj<pm
zDERgJNR<fF<3ud0&y7LkXbCx!#@oeVVwoi5r7k(-<*zUI$BLUm*@qYI57MenGbu2&
z<}8j{tcyLsUSx8FCURauW;V{QCk=!Fkr4Zv!84{x&Ka)6BPd#z6H^v!%nVmZ#EKOC
zn;MU946KJWqjetbd3~xvEQzwI-qd(?qkWJ1PL9#JwQs0wQEWY3ed!eSP|em-txNy5
zHe5FX*7;71&`C6ZiF0X6wpRPzS2)yfYr}LSd?#Sd2wk}LEmcA^YkruMQQyEX;dJ_5
zyc!PNa3iMHe1HDNS)8Pn%BA@wON64-iMMuA!=sG}ny46^Nt=?P%#N>IGS-Ff-k$TD
z=pTr0dMR29$6y<xfCn>5Zi#^|xq>s<a`PT+h{t!4itI(=(7Ysg@y|7#`8s`JN5wrm
zcHA><`jnZ=kI!)%iYAqT#IjYVmtqg~>~-J{{QVZN<~Jv&)@A7dI~p8dN7FRh2JUCu
zC0!GHCW+q==60?h?wZh2swwl2yK8nS+@o=P!tC3mwFlPQ5Q^Fny#jz%)5Olx;f3&A
z!)W%cd@yBXgYdp{b)zr-Dy|q=F91Fkug|&kIEW}(hI=(4lOdmdYjnf8a}6WG6n3dt
zJi6}Ox%!d#e&G^!2RI-cDd29RqBXMSDwdd6dtNf|qT3&RelwoC%^T0Zgv|pk$PEUx
z49J4|b^$v>yh3<5;14vq5L#WCv;h(~ZV(6FLVCqOzn}$m8_#|Nq}#Ru={M&#*41r1
z_YHet+cx&XH)l82%_?7Z_^k^!t-A2m;pJuJOOL#DVbx9O_p)+$GfMw8m;P&#{wJKC
z;EKErr8%;!ynNXaJ}>@_@Q}MvK^l>sJCHUvp_!gABrP1B!ox$AxQ(ZV)29RX{&D*T
zqYn4&8V{V^smsv8e0kN~<;_>16z&V`I0ts1`5otWeg~R*@QPJ|!FovXeq0#d|M3)I
zb40mIemR=yeD-{CxY=%%Rzdjlfh&+l-^u>aER_LCM5*2z>wARy6soV0o@8?Vg;pls
zzUzk~joQPVt&zEdk^-{NYqwmsmH%yOO5A3t&3EA72qlZ#OC_t)vn1i!`t%HKVz%*@
z7zKPP#lik`g*t%UGU@$}hGFB~h0~i;ZFO@SjN+L1WUD91n3q>*WiMzv+SWU*sf_F@
zou;pDxg>&>I^bFgX%G$-uS{e0BozdLSL6AzFNTTea@C|B(#A!Fi)8tR^t6@<-D9M>
zgqRqIUL}$iB+XLiwp>@;vTS%#U1NE*t#)Qj$=tE|65zQ)m8r2bB~e5qS~HUJa=`J_
zB5h)Pv^>@*i;I${m35b!(}&L~8QHDV&1lb<P@95zLgies_I=|8@4I4)R|Rf7m)wGN
zFPBM$4H7*C;IcJ5`5HsL{59Jh!`PLe^W{dhmc9E*<Dvi**~$!$!?C`-D>eGJ-ilMK
zqi0>Yf%@9VNjwXikP;ZMuO^G+zE&Xyk6yBabh&YTBdc!Np5`s{lxA8}t!9lpKC(Wx
zxM7T|aaCKEqi$BU!>&5gSi*jErQx&P_f2w4xjU~!ty9b7)6kMr?U}T?p>$?rvgqb)
zH@xB6=P3z4PxZOr6jBP}E*sk(hnkGwaLbn&PQyL<MXrp};`mGNC)a51Pw}LVUfI&P
za%@IM{kTMJs#1QXakQW;zo4$Xw5Sxk21eK&?5{Q3nw!?PdviK&sA`&9ZI*;no32)$
zzBY>HqoAr?CLC>ui((C~(1Wr}YS68*%h?Yf$;^uaG2sgKt}F8XA(c5M$KsoxVS@Wq
zIT_bM)s?BEgS2sHWuy9WTZ%*gZ>x_$3QymaYEAz`*vrnk9eJLDELTBftkaN=&(Jcn
zewv-uI=i%V?y$5ui5{~wW6bpp^~*<RNKM}FuhbCNRb=1;Hf@qofsfcy3X78Q5nIu1
zfdjSM3kMyy(eN6_w}c-(A$Jqdpux@s``sdUWqPr1=gZX<<|L=&<fJ8KKX5*&TD?k_
zWRNGfF0N}{F*+^1zAYug$w-9Em1eNE{DS=4oRU1>ZC3l|siVe>ch@c(lj&_+R#88r
z(iAO{is%hj>1=dA8SfFaUR}!fm!Fp#MxxlO%KY9fp(6I5{}T-WZ25ySm<sy9k_z-#
zkMCbA(>2wRnIBq#-d97PHvJ)u;SW+T2%$eYFbc0ti@3JdWBzkZIz?~(wYK23Dj4v$
zKg@~{UgQdDuwUQ*LhHCTw$O+FunxkmxmFha7YYfm{84VvL0(}U#YSTD4XveIBS$_S
zq_bRl;hKl_5DE+&^FJ61PBfB7T&q@NyQT^XCtsV6(_3?`wZ59dGxfi3Q%P_RzZMPX
z8mEHESJ8)j&DT5$TwOZ?3;rkLKU!cSQ33{QOw6_Q=9oeHQ?Kya+jXEa1^#$lm|$Hv
z{i;?l`M=Y!uCZ~){{elgcgi(4^nas$fp7mHyF&YYVB}wuMs|(7QC)+6=F7R}>HX^3
z8l3lsJ4_!Bu>Lk&F#GEI+qG&6m(}d%UtP2N@|x6#RsR!}kG=DMY0CoJN+L#%p@Vmv
z<t7|JWE2fAvG>7ee1$Z)<i7_#&+R2I1k>T`)H&`<Rc=}cNBa&?=X{4Sp1yY>cu0!-
zurCmt>>i-y@JtpgqHF1~+?~7ryP%UB*FDzLb7FmC<N6alJ&&zxgj0G>tZQss$33C9
zsH|C_3%*Ug$k}%e#NZupKVnw;uvx{$v$41P*~P`PhNbV)BzO$*+#UCL?6V8rQN+D2
zLa)=(hRrGoyyd?U&6mEXccLlkckB~iZl=*la(Jw!JN$yLKbc$dCKQ5Prd*R$oOu7J
zDO?=|yzM<sZ=^M%RA{w;Tqu0AWbP+lv;Nze-=~baKe0GTBLKY;`VNHq626}*Po?@?
zfkRE<^{Y13-?sLpfB#;;>Bc4b^m_`2Q89e{;V0y=76o6<0_tbx19G>OllgcD9t(Nu
zXOwHhjZ5>3u3xngAz?l^^0++KsyL@ih(|aOA6x0Ylu~$65KE%1UCt7T_|w9}<gzwN
zAmw7TMSuHdSwiAa=1JfHdr2w#Nf(RziAzXPE5$R=yp@Dk9(>#Y7Zo^u54!ITS}d$&
zpHf=m9(gNVsnIJZsZFZz?Xm8LOjli@D^_DvhVP8SPxbj(;u-8`@-Pr3jS@rF6CG=c
z${bhaG}?^OaptIu2~|nxCwH%(K7;E0CTg2Ve2N^bpGjq+l)<X7#n@&*_$DGg>StXn
zyXhXXKY{HEf_a0UsEIEIdqRS2^UZoo^hF1kmG>r1vSOckLNm2OoGP#gjv#&gD})XE
zj)49zgl6~@f=jR^fr5BRBDdHv(l3<;jY9JNBYKmPJ$C~hPhuqDqNMDPA~`U!t2Uz%
zS4Z!KKMUWxjO|B|lLKeNLB=VUYv1()O;f-fYP%~gVEPf~va5$`cQ#<@5yx42#0_}n
z?N-jf&k^naC%)2!4Obz7{plV=Ln`9`1<_B}N&|yw$i*e;(yVH=HBE<02B%brngD)8
zoys>CH<xI7Y`Rscw5G=fC?4?q*Ue;HFg~hFbX<U=1BHwW(ZF+tE;Je}`aiviMuS25
zBR+gJxbYc~+Yq1aj1jr}hCrO2bMT>$_d2y&C+{E8OK*i=3BN^kwGY0N!%&t1*X~_l
zGro31uHoe2t2ucf_lqw%SMYd`hVuo_{E6J%$w`WdNy;(dyF3xtFI>22785BV&fg`t
z>?C0%{6$<jblJ8c%DyF71&#(#^W&F4J|c6<$1oy_5;3FYNiva+RGzCNVTO?X4k*Ox
z1xy5k{-3WA<MY73&{b3eGoIX;R|@fQEj9+mo=QT$Q-PampkV={)F^4&vkpe7M&B>s
zZxx*bX=c1s8S%1ADwE!DL*L&&OVrrxUoZ#AU>m->id#?wKs2b|!#+wa^0AX4MDO2b
z_rp$s5!1i~LtsOTHzcTo*8}8?M5a}wq=e~GZHl7Fm3F<iDI>enXcIn33+Zf!(r$=0
z8nVjmi4~c8y?PwyTQXHh!QaKjXl^-yNbw+UbACEY>CIG<uu@<a94^7*?VP_!ut)&d
zxBR!#+02*t9uyaAyO7EQY5Eq&G<tfZMr%-SbR-yss_2*~5jjs?=XX&D=vT2k>+?|y
ze~eBu5AVGrIxB8Cy*bYO``$PcO8X030>@F_U~GhOzPl*znKL|{0yNg%MRa1fICezm
zi2$6MF20V;jR_&}e0nXV5dMnbhXskC6u}=O@Fau>_a%$qcqktK^B6zDbIAW{2%aus
z1e#-MzTDvm&fiO>??ChUeF%OM!OIc+9GR1sp}x9XWJL8<^v(0AqXcGr8#tJd8MSdi
zoLO=H?Sw4l$<=X*O4cVb#>ITBkbke&ejFYBJ!<nxVK{tW6w6@=SoQGY4Q#DjIx_8a
zVN-&~Bt4xra;YfRUfEroUm`cA8Y+9rOq`5{ZzB3)$sM}O$!I(yU2gVfR}kB`p#*cw
zZo&f>?mMFQc-|y%eFy!mraz<Z6Q1nze}n(4rbhQ3z#rks-Me-Z9po;y6Rz-|#J-Oh
zd~WWAD=u8<+PwMjk3V*9+a}=CbfGk-NZf1eO-2KCn>Tk|xWIO8+tzX60!j0>?{nz%
zzev)M19))f?I=kX`|g&`3qN*}G`%QItN#U(hFHnN)(c&C+|k9p^JB-BEggjJ<7_yb
z?cc-QI~=SZ_T5Q1ZY^j|PH8Q)*$P`zlA8;xYtxbw($f=?)7ZbH)_V*FPkm}ity`~m
z*QPi!Gab$h>=aON8@&jw71s8}35RRhr;dT2m?P}V;4fT#Z=)9m(-419aP7nFY48)h
z5O{av_lVH7C~+`mJi-xqZ1-;P7xrbGe=B;wo_o*535V-hF{nnbQ+A`_P0FZdSJHR+
zpTMod;7gBatkHK}I=YzZsAOLNxx06Vq`_^2%TbXO|JaRQ6CCfbkyJ6_74fI0vZZ2k
z7DNzL%zn+Dk4FDM22it0XWSJY8>b7qa}MV3b#yblT{xB8-5n$?z1R!>0bO#gsqao_
zvhLe^n9;#!?)wMdzhDe$ulwmFDnhtnXnYKC0PwLcDHLCl4y3ZHXM^R;H+@Kn@abk(
z&jQO4&YS4jaJTSI9_IjAqrpB@w-~uB7$5r1{m%DKsAI;*B<C9AIi&H%+~k;VIX>l}
z_WX=F5o`}P{LD8B{KlMM&)&V4w08pixo{nsA8jg&8{gt!=+D{8^S_;^Tj*CNAO0|h
z-3%xCaa#Wj`g6Dnr?shUsO>dwmz@6m(lM0QdD;)v?4q21vS0J_QxE*B@Q}d5Wc%j`
zK1AQSf(-)f&FrM$ApibJ{{2|;K2PxSfcJkD9!2n+E9B?iw+@lNgU&?xKSlE6alt{3
z3J@)zFcuKazdzIO{b=$&PjEi?{#oJY!S^}-34Hzq<b9m~2O9Gg!ZH@~*~#vpQ<)d>
z>7PsPNCgGJ6}Xy7_BOCb$U#?>P4Z{Q=q)?(CCb=jl}VGA371<MxXa2=XUCV7*_)_p
zsZbx=y`XjF=rl&OP7zr@X5ppJ`(0k9ruUxYXb_%2G*qB5Gq@;n%eWtD+@(<|B)bO#
zXceB|2@&I4(=JTNuk7rLm|S<~<}sB849qYkSER>)9nR+YwQ)%*qc#_lKZr1@27S0X
z<c_|%BTKPNFH@v7<Ye}%5gt$D>9z1VX2;O?9|vjFvj=JS!v|{9R}GxQ%||~WS(?V2
zC$es!U3nT(9ZjLCB$F{<=#u;C{(bBYIGXr9?(t)N<zfFU0{?)$k1E4(_yw6W9@cPW
z?(tt>IuIP676+~<h6JMtMi|ZVl5p$9J1X_ig8kDn+wXg0cI6F4Ng|^*(qK)AtDjqM
zH`Og3wbu^ZzAxAx>FcAk)D&@P&xYour<ND$;<m@gMPiYoyv>`@m~EKnbb|Iv>CC=P
zby^&!TVunp{fHJ3o=rJ_adPZq&^?lFVcXcB*fzT5(lNU9quyOqH!S(+BeEAFpc7FZ
zE1rLm>g!TjNZ4@=z8%Yjz~)2hkl!Xckv*K59r5uenvJvL-6}Bcr*b3vhCDIhsTbyM
zh-1y*bM2;uFH_IZUm1sGoSCpSL7HmxeeD6~b?Or%E6>yn<M(pPQMo;+TnCx2lro^=
z{u0^f!ItcFB9M#RSw+B2{vs*IfEe>d{HeWlPoicY`!o9Q;G>2+(f=Tl`uEloiIF$W
z-tt&t<mykiuG7R9Ui=TJ8vD2<vT^R%C(MzJ(1movL+pLv#z0IZ?+`JS9?I)J((gWf
z+~AN(i2hmZEpSOFo`LtWAIR$7hgJ?wnbas&@)xa7eqUY_snB<Z#6z0J-UsjD@FW87
z5V4uSi|m1J@N)ksPafwWk_N_$8Y<4yBds9uYT=@=pB;7wBSrI%nR%M5k&i+f2S@YK
z8RiW%HpUS6pQwBJ^vmfw=D8sJdFbZ+w6M#W<p_rvd*&wa(;VFYgODb8#_@Q*AY<%H
z)F=2j9^g~rv1PyiZr+zmz5iEcCLg~8^&K3)gZP)Bz(LBu`IaDQYKBa62>L_POdm4M
zVM-d3renx7N2#!oG$V$L6>^A@gru1{WSXPFm?Om~&3eA9?Ig`Zf;2u&S_q!o`83y&
zG=~IXJk6evG#iFYbCgQw(~LuD6g+=_A!&{X<Xjp^T#Vuv!R$WNHYd;=T8wAW0lr=W
zF?PM&mNX6_Yv2rRr63q4QUltG7ag27?cl=V;)VEoQ87GX?DTd{EzI5Jf2?!bIUwCT
z^O^f^9Gf<J&*!&TbL?h?CMukfi{M`toxZ8E@}|>^7M)&QS-JZ3r7fDcmeS0&1kr-$
zfcUO^f$W7@t_f@Qo}G5<rE|*_suE|sg<%*uH+SzwE58aPcg%thNWXf_-%iFDTJO@~
z+<hCY>+%l%h{npf&!fY8kKcp-fygJ(zmGo#C(evI1NFXtps)A1v4!KTDiMx24hOgP
z!NK0iz~UA~4mqvtJs$nI!BdwEBGn38;$ybbah}+ik3WW|q7z*sOPnH@>f01%PR?m7
zvkKWs9M4PHeRK{Tjb?2e7d&Kr5W?^N!4QaB$^f@Zmakg5Y}v|H%fb7`&g_n9#d%X7
zT2fN8=Bat}o?Kn+oqX$9g*8rYHz~9-31%{Q@W|nP`;H##bz$bZ+7d<08=jiK<hk{=
zwd<c-a^1sgM#&|yW`~MrEf93G|AbHaZ^G+oP2eum^}D%w{8e^0+=JFbI96+4T)aog
zPGp=#aWOX-(GCdiM`>^HKTpyIcRk?^7o#n4cWjX+B<2P8X@THDwhW9UttiL?a?69q
zkF#aC5AX5)$~;KqGaiW)qy_K(whQ|j^ZiQwf_*(<yI}&~K;X^nX?Py3KPbT?e)e~w
z@B5ede?&6xb%7Mej{_lLDup8VfU6v2Z$gebH*W4cBnwr2?d?P>gW1kbZ_c=4^X#cr
z)6xsKw~yJ<?J1mhe`k7QsW(O<)W<wvwmohy8|M~Xq(ppwU?dC(cR3SBt!q2Dy(I5w
zNkipLPt3pm)mxht<_trHPEGFxR%b5iAxmEaTvq|4pHv{ae@1ji5!-?OzFPo^%qqtL
zW%@g4aR+blxN-qf^i_qxJ<w?j_z$K_v^^tI)!#h}C9)(C@)6A!Esp-)T4)0%?b5?3
zouQstE&xk1rX4JM9ax-X-r0j1<OkAbD$=6oz+T^12tM2Y1NCoa4}z~H@J9rDNuRQ^
z4^jnaJPZrjr?NYE4+DKJ4lW<JJs7~YFODtV*(%|8wv+~Ga`)tpgesXq<Mh_&OqkR;
zYySN9DdWbtYu#27R5thU;)%C+yK#Wp;XNshQ}VL&gWF)I$u?M=OB&@UNgu1xTlB+=
z3M)eb$7WZhG<14M+*#xDarqq$S&_P7>3!Q}0un>?K?=vyDkpwm`qAm?U*{{t7Dc0<
z+MBz%!JQK%E;>+0{S~8)=GA1{GzQtuidw0zB`rW&pkkK`K#E<!pmuwZJpjKHN|5}h
z0yp8F393jt2YdlQ#>M+5%%s}<j|t460p=ko(}2d_Xaqk+on{(^wE{DRopDjrP2gsd
zK9A|8{lZ63%3ipemsvOXFK~J{Aou=37Py`8Ps2V)=O8&XqR;m*_C-MrYV{Cq4s?=%
z6>~?wF63w&{;yjWoL*fup)GS*o+)SMy*)1PVBW^p-Fnm9lqN~MLRUC?$%u8gC)7?Y
zeib}%{Vi)&)J$z~tCVpOjG?+YyL;2H$q%};B~9bAM(tcOOr~p2?Z<1qOB$D1>AX>@
zNX$%}zc{1OqkpfnZ5S%dsN`bJHn0yOnSBCVt6!m?^oipkBf67HYZyht`?sZJ46csh
z&L0nqn{pZmNsxDOj9O;2XO@o2Y2P!yxMJab<Go|*%1q(v2(|pp_SuoTy5xcVMLhpm
zAl`ME(C-ntL_?TFj(rmPe<Xe0jJ;stc|h=F?*|BOMDSG@4j=xV+avykz#IHOkh+`k
z4ilL-w))P5tl7<E&5rThL*N_0S#S!$Eg)Cm0<U9_e*zc1o%ACb9-!>hlW66CpI}4p
zE&>|^W`Z1wK|K)7KfZ7R8wF+nFGVBR8Uza?ZIH^Yr?w*cN<#deaE&lT1XI_5wIA2B
z9I1(udS-gaki6lEC5|f7KqpL~-x#%)w&kKRYSqNcsA=gXj;N}2ct~z;4iguKx?p-}
z3_n0uG_~Hq4Nz`=u^`4cknW9^wWfgla=8cW8c_VM0a9qN6b$Gwc846q8cdJdOUJnb
z8wFJb42hmhwhAPyj}bGxI1@`n;5}$fK*GTGG}#`gC))$drSdQeZxEC}%>Ek$1Q}qL
zkhVl?6w$kgrx5~;pq5Bs4L=N3w!m+ph*1(x;;Fz9{7Vj}y>jdfi*pgowTK>g-1L%R
z4^0|5%wCca=X<E*aPzQc&x8c#ksH@v>^Ri?>##$UF19|mZp-#`SyXIZSwm|3_3_&3
zk?k2HR*y}qfJr(V{a{C@E~7R*nKo;qd)nNoBUT@=vQL5(%A{d;fRnL_3@ZSCcTQP%
z)C?x1)EhFbs;Q$~HL2>XuB{WUPnsy8{EOJ*w3AjL86873=zw++uzdGmU&#&?6(Xuo
zGayw$WpVRz8b_){YTX=XXKwb`A|#_5GLVc$+Jjh^s){VSZ~E{}-QI%PdpeoKk`bAx
zA&_JyLOL8(4Qm$8kyu1GT1)bJzc(jGnv`3q<5)yLyJGG$TZX~R)|`0IeToy))K@7)
zzx@a`N*$s*lbo*v_LNA2h*Y5}5B6CXN~l@`UP)g)wkj!#QAEk|;u4Ep4tbz&&|>-`
z;8lo-TkQshY92o|{_$v8xHhFY@lL)^u&;r&ywdP$tcBCJA3|c~6B<V-=XcOU+|ud6
z0D^+_9PM*ICzn}Fb#=mk&Lu)z;^>gTb)#<Oyv#*Q#!h@7K*TYymm`9VpLnF3R51C(
zClx8T00c{MlSj@C7Iw)m4<#q4n5#8Zh3DqFwOaz^PF2P|n8n1YSAuBv-ywvhC2Ha|
z(P0v)xGp7i`<mA{D$eS39kD>GRI{faX20c$oSN>DL`b-JF#w;nQ!mgE&!#pUZU=j$
zvWFNis5N-shU_@0U3~@)b_ci({MP$rRMZzLS%h9IKWi<UkdrbzVLL0Q!lPwxD&!G5
zb<`1k&WN1k5ea9`^vKgxAXONqFsKk^HkIt9)01_XQS7%uakN2=iB-vnKUlvBFwlfX
z_YQ&J5+~EE5bR!n<CO35`*~QYKL#d(Oa$8-Ob7fX=pwKOgRp9LC2WCGG#A$gVKR0F
z90qa_tU*BWFey6++5yrqsAd7gFr+J^R;1-<t($}`j1<(sfMuB)g}N_#8FmDR1KNuy
zp@kU;;R3u3nfr%VH!EZ5RwjZG%ETQEl6i@e3G#48A{<S{%GbZSUL&3^5z%7djPN+{
z`5@5R%Vwt_+^bZwCyaS|eV!3C%9RfG(E?9wc06c^R{F*p!90gUnW$v98rLe(b3A!Y
zP_kR%;a(Nan5)<4qKwgsKt?R@*esCae}$8GzrDf9I|TC**qQ*0y$%Y%9oVN6sPjF=
z>0yImsQ)$7o1qQK+pthe6yWWPcYY#P_md1S{s4FGkMua~$7=9NJN#;hL;Zb&&+ri*
zb{G80e;m!P0`5fA?htZbyc7t_gHpY;LlQ0t?}{+U4t?<@yDMBeC0r^EpAr!PutP3E
z2fGuV@t?S6-y7`Cp?z<(vPa>Y{zLc<DDy{sDD5B0g%TP8Q@|WJ8ZIRFN{9BO<AtM5
z1tYRjn<@(pdh0=R!AN&%V`Y&+X9sXL9*8=l&YFY=Df(efCj8og_;nQXD`;Jz)_4YR
zJv<^T0`t5Tvs@ya9WINEn9W2Gem#iz^$g}0!<`?8*hhh_Bj)$#*Sx}k?DG44_b|P%
zL$n|1@V!Kb$A5pu`+)Q)_&qZpt=8oT`$;lx1-=*P_5O#sGhaC$^Mqc1X)*q=*PjGm
zpCbKszwZ)U;y;D3Ar<hqP6E5l_W@js>PkT|f^`wtUB17=75--t3^o66GYM?6-vI7L
zy^?}nf#CNuq&*j~cQak6f7;0T8a`qfplkEHG7hhWyk@%C3%)V+^0s<Q$yiTfl|>`e
zNKHnQsk$!R1Eg?2v+wt@aItTFfx0fs?6E5)k_L?|CR!gOxrN#1+XiQH>zk?UKjA-+
z+%*dp;QBM4(Hwj!yOa8r>}O2GJQJz~`v{#8=ph!t`Pd6Ce%UV%I@v*se0-W4ZAk#9
z?d9XW(u=g&4$eBt$9rfb1gUXmB3^tWq2HREJF(0LV7%`ZQl`rP1N=xh7L~c2-#`1C
z;2G3@>GWnlgT^@}c&PX9+<egcH({h-FRDPWLjjoYJCyEalJ0O2hSCYFB;Ao9Oha$=
z|Cz+mJQ{>45WaUrMg%)HM7oEAFi9}o@gOXd-s?Zk?7=$-A^0f&`yw%dJsO0?(QEzq
zTng1J2$Kp0{<lQo2zDX}tDw*LcM;z`CxftZq1k`85ckVdL0Boh!G8~-@9`kaE)4fS
zA&Nz?CxWnB=`MdWa|ywo48rbXzV{c4rXko<LD)iiv!I3W@97|{8}V-)sqfh!>@V~k
zei?HfuY5xI9N`y<u+7UeLD=)`-Tr#C5}*Xn24Rn~`~7*S7g2)eg0L9+27!+G9>Kl~
z!kqL?{u3mYYepZ8>GhuwMI)Fi0AuH~2mD!RYNkMy?>wLGFuU7-qyGi8*7`><?<xeF
z=zku;KIdQpz>f6q0SD<kEI)V~AS7E)Xe%7EVV5Q^c@CA7L6<qwxxT>e@c$W)ZDCAb
z|6q3^*l`3?^|cAR(|-?|-_eNa>mTe<|8X=|Q$kH&8?*oP@4|bU%x6K^FZ3|f&k<jl
z>=4)p1bYj?a)Na>(G&cs%yak@IhgJsJ%K$zV0nZ4C6gb7U5CmzM#?A%!bTz3T?AGb
zgf%1BdEvJRRuqIyL9`qsv=oP=8{xl`z)JhUxV$C7@%lX7DNqpl%7%cI_a7r9Z$+@a
zXV|&^5B+%UT*FS`+K%k$y^Z<@j)8_PE|8*$MT?ty`$hII>^U$+n<#w@&w<pxfcS(W
z>fUFskWZtK<9tuE?|><BsgXy>-1!uAozN-SH^9WJ<$IL<JD6heitoqyz*=hRiG+A|
z1o&xiK6k%-$Jj5x6h}6_2j^?1?>&)b@x2Du5<1(^WIUamrE=wYHEuZlMfUO4&+?Uu
zUw`OXE*-%y<I)8JKzV@;v*M&QL8CND*&VBa1JF1pJ%5ihIzj^S*R$*wZb6`|(7Ks8
z1TI2jFQ2{XLsIS|T-FbeM%|ZB5}*;_nBq8_uVpppX2R%42`3N1aqHQaXfbmS@Cyd#
z3qu(LEIGvPLph@*2MH^0gd;#Y${ML+--CAv2IqB$=6#SojPmNj9>95PscpcCvPQ?V
zt=vHt!0Y_}JXOdsPaixQXz=#2Tyt}2L-|St_!>sK*pbN8IMh+t9Y=wj<16(J`-W1d
zQ^Lh#Srd4vatIuKZR5rCJ|VTMc^t`K5fs@ENTUb_-;b|>If8z44B0k(_Qn?p{foG~
zC*YF7`LItOlutwQJuVDmaK5hNgv+ymfr${}tXp?cxgmLn<T1+ELqXC$6>t*HwSlJD
z_o#O{ddr9A@x4#%=Lg3FC2S2I8hlJwTuxL!9$NxTen9N87&9e+-T4HN@LWz|hv^+g
z9rZ|wuM8fk7hD++AVeRG$S?%(=r0gf?PTB67&tW1-~d?FA5WmYgaI_9y-pg^0$4nM
zBbD*(F%lfTZ=QiiLh?uUwUwo>u>zS}Pm|2~T-No}qy5Sb%oAKzzP+NwBxn0koHGl=
z%ak~4+YWjm$y?Ho=k5T{?>@Vin^->0^gRt%3j%4c(68@fvK=<BkiF|H5OW-dYkaR+
z(ws*6Uzxp=s9RgFgo9%@ZZ;l=>LRJ?1-4c1;80}3jbPo?ao{H7aX7vpI40m0BRDSo
z1h&C5gK@YAj4wR*@i+?3V;twu%*SDP@C5Z`Nd9o5bN7ub*3IV|ehTN~@(iPY5b!Yv
zL;APK0r0&1%xX}{&8`ov2k~w$UFi6;py7vu5@RNR$o^?H=#iR~{EYlP`@wpUFNpwx
zkbFE}Y+SyeXzOL)=koT6w=Y<hWbc!418@L_$H9-`PuX8M9DSk={Q5P)(I@W);t=)6
z@y72QiV&$6&($Iz`Uc@}55)1p4;+p@3E1!#f+8pe2g_aD#@Ki<Al%p;pco_v1=|TA
zc3)9HkO%dHm_#Wrov?l&C!*<E^aDdiL_j!Yo-k-Q!E|Lg&*=vqF)x^=o^a@Sp){17
zmxsuCL>!XygtWo3J~(EWpiJV0bp(j-lSxEke+_=E912H>z7UW}{q+SRlmhw!5lVkV
zUx15veSyfN0r|p06bANjoGGX>V3~yTVWnX=kx5sO`~7r=iV&3{Ad{{v_fbPm8q2=P
z>lc@k`--4QLLGp;`zQ-EeFDj#fwRZ5rSPNrtLP4axsAgS&>c8&#34bt0}@AlIHaMn
zC`1(T7&y%VOCplpci~keiLR<Q@R>Qi0pxR8Pa;V)NcIDJh}s|x$GJGI0ZAc=0%zO0
z3rV4Ya^F2b?$=U#OW5jw9(GxItq2MsURe4-be|AH0`t)lUpIBO^~$<~d}!T)6GI%5
zQg{@Lq5npA;3N@;Mh*^ONi-NwKo(g-g;9U)0ZSu-rT2}eku(a$AqmJMOHd&7S01>0
z>##%`qJLAIOgeHDj0?;HV_|#ckosh(TzZlH(@`+x|8e&wfKe6M{_w54ba%Gy^qzF5
zlU|Z^_N}w;3keYRecuBpiy)vVF1Ue!2q>T|g2V+CfrLT8WmG`i9T8+)#!+V&*BLi(
zoFJrcf3@6u``%7B!8h;Cd;f17P4cU%Q>RXys&lGtRUJ5sh<3?;cszZB$p*scv{z}D
zzU9x5qCvCt2md)-8k?ma<)eVo7IgDJ5&|-t^ak(36a=Hxg9c!fG`{5tiJ(oQKjj-S
ziQsyyHN+-`(D?K`p&{8MhUdp%60)^fPai-p^8uK0<O7KQyJ!RBr1@5jJ#lQnST)N(
z1dSjE8U+)^s2TnZXarecFHw{a=`VdxKY}?Z`Vlpk^&|8OKO$%bB|k#4g;(lF1Wh97
zB7Q{BF81OBNPdK59i4y16eJVb(<U=A9{?FW=mTVfhM>VaO#50c=R1goF6cX8BL{s4
z!M^qCJ0xUjMKh&_z5}vQz4-tN-=SG>9k7Aw%?CiXaMd1M#btZ|t7M;u0lowZg7yg-
z;i^@iFew9j^CQG5Pw7Vx`-F)=KLV|mf;2+yQ<`9(lwJffP`ErF_yQTI-{M1nYEtsg
z*gh%CmGtx>X2U^sNU%_-*z1g%eHbm2Lg&en5I>+9y8$wv;WB;zGEu~co(G<wg(4<=
zEaM;E3k`iZUxFAY(U<s)tdoALFG0+c<V!&F)ML&IvrbZY6UZ_N-ozj9I!P?wbDgAc
zBm_5ttdshLwMkFFMXaEf{TrA^L)PzMY|@MT{^!B$7@t$LN!@ohFb8ce5N5p|Vv|1R
z-y%hWHtD7AQ@FHXlS0ZfN}F_^{~IYUGf7YS4VXZ1oz$l{yY>qqA~Q<+{7smMV3a~>
z^sq@k_z8)iO*-nIg(=8vQcoX1FY^K52tGBQo{Bd*LVY|vGDxMwBK?lv0Uf*;gJ_Q)
z^4~w6UTBU()+nOypcj3IHmHrFE%G0M1+B^07De_Q^rG*8iUv*5AN=QWY0(s2q5sfE
zMuTXJu>Y_S4F+tCdbRz?e?TN8TSR|`+y_WOwqCou?FW8n`;)N?F0*}toEa6Aw6K2|
z9mj9G3ycG!M6;!f=3ie0^6AknR5-h@RuQ)W+b$K03X5I?G+rtO6|RC#1GHej#b=<G
z^3dE?#l+(E*_HYXLG$+oAHc<fHZauQ_vSM+gRXBe37I{-jJ-#bCbZj5FfeG{4l`E`
zyj(ePq73>8#GoCfi-;|24;c?CsTee5K`#LrvBN-3>{nP@ukaCsS*MtMe!yFGJ#2kR
zh^;S1%YD3_y1bo7_J<hBbD%P4fAC`aeRkmR-h2gpIA4L-A57!Vj8j-2{Z?Or*dJlf
zp^NO(O^#%L(nR~C^cIfEK2hMMk&H%98>Da+gzW}mgBrrxpvR7aHY~C`{Vx}>e;Kaa
z7Y$>Bp5^x*1v6D;>7os~G@^+8!j%K$<-*&bll&{BXwU{7zVtXQE!d#YeNg4R_9g!@
zDKE1@8!!Eg2?TA><!N;B{~$DECTLA}5vCDb7lrJl_MBfY5F$Y%bYJ&0OhYt6;cUKM
zX7izX^=n`r3t4xI^Bb(sCm5mq{KL@Tfhdb;g|>80ZeX5C(1~lJkbQR4S3YrqBMt+I
zDRPRI2zd<8*qqQ3g<0==g|gz<B~Ak>9<)X;cfW@z2-c|Qo`FO|?l>SCGGp|lUyq51
zE2A)b22mk&1m^(}3Yw(-{zgnkzCOCV?S~^0*?#(^aJHWb+Wvj`lMrCRc+n>LS3~Q^
zvh>uDy#uA+pzq-~Fy%qNA;Nd8%lHoTQo(mne8=j=cL<uKcO>6ohqz{H?M=5se1~R*
z>wt_>sNF9KvHQo+k{|oZk!}8?Q8u*LA0h0@K+~0CKx_Rh=DvZK^B3?u8)HCa1%CmV
zFLN9!TR@Kze7Z>c40`!K0|WX9hKyB_eFhpN5qoy!J_D#0_8IVcEX3YN_8CNTDEnL?
z+QiG)dt~UK1-64>K`VEd-8sBBd$05ph-Ev>Tus(gSL`PcV+Q>MV#h*kzI;DH`7PoY
z`4oX|7doR7PzQ=tbA&T0`1`W|bfBHi<KD%0(WJ8{{CAGQ`L{7cbqzTinBolXD|-$q
zFP>AORrr3aRF+nKjsN~{J|6|**md;Z(VGO+UVN|dSNci1hWQJkMN#DL0?^V=vIXcq
z19eoq&*1OkZ|1)Zpz}ztUiQ36xN|9C&aZ?$=Mv^TOwV&O6zD!q?+Kh@I)xaMW#MAM
z@o$J{)N%$imM4g()N%(lmWij->?w9~NDcmi>q2)(*h<wd%1teR0K+{(k@qn&DHr`C
zs6+EZ8oK+8UPbxw34ZmH^lPpS8$j|E<@vvV7Dp!QmdNLGU_LMRWZ(_;57Z3mneHxd
zq<TY<75;wAzl`3KxjOS5stNwSob}+}@p(D!mB63WpHLojUM_G{I5+n`;e$UMI1zY*
zoSVBy&SPz6rv`l7CvZ%?FY$Ii_s>AJx&&fpB<yQ`74Hu`1hFqA-FS{WM;%gU;n(Ky
z(Ookf#$~mP?+|`!FV_Dgo!k~}N^qFeS^Qap2CTb7tJl!K<?I{Jvg-q}+#ZO%7R0#k
z0<mf}!N4TM%cUQ=b5KrMXdjJ%Y@lNrDEe6nDEB{UPSV4b1Y>eoO)*!imahXqqXSO#
z`W>G0yZ3VEsdAwm_$)GPh8LB#mZSIb+Ibu34}|jEdA0t&bpRE{Wv6lH13!?mj7u#(
zx8_p241Cff=)J*HSOCBXK$B|wdME@Pk^%C0FSWusV>O&JTw=YrJo3p2>qwNCjn#;a
z6R$&ZZ{hd*1YXvxAheV5U#d8@{y>L8gWmH)?Csr)Dk6-6OZUUNj>5XoeIi^-9xc>o
z6lxLbyUXOUAJUo)`si0*m+_y1>$vp>p*1QmYzY??^}9~7MW~{O9wPk<<?=LB6!@Mk
zL-Pg`;S979PZ<+N^-J)iAN4j(D$SWVs&4|EOW49NN1)MIV10pCRUebF5cpH|;IilN
zSQtdTmA^RuF+3Iq(JS%qWPU6S98e8|Z9WLc!u`Uz(oW3Z^X$FUR5&-sp<4w(-37j>
zT}Drm+P{ZRE7E0TaEH-dX0UTKy3LHrsn~l1+hMs_Nzcex?3w;OR;Rw}>&y(TkIUW(
zXq^FYb{h)d()}*Gj<Rq^a9yH)nUUXQLC5Q-`!CR=Sy+x;r!!r(6WCFh!|pB6#(YZ3
z2zph9EL(}o!!y$%hv;d^44NLzC0>Q^S_9a}zrcDjA#e6jeIhJk0<hLhRO_m{A(4IP
zbU$Kw)JRC}g22Q2^(GxU?Qgej*kH5U@tO8Z-H>*bK$|F#NM9g}>HDgX^g2cQm`Ox-
z^k_+zg#OQn@Wzc$s`#Al?7$K7_E7gQ^0tuwYWNeM+YLNLiFvjQc`C{KLjFBr@*E*=
z5cNWb<SB|kr;#m!bp8tU<~fXEzQ}7s{;T0nG0)DBJmuuYB7cW0&!eg@WO*vOYXmx@
z6m*n%N|bb<O&LiURrkX*XlDZF2(RezE-CFhSsJ7RT0+Y8iCj*|&j@*tpYjXzrEY+8
zg&W=4N8Sp$auEjKr@);O-T~5OxJJUCQQ*-MeprsHIwkyBMSi=4Kd->&Nciu8H;8M7
zNcc-2gF^2GU>y3L8XVJ|fnyh43?kQETv(}ri`mf`m!yqLitAvWc+Zm)Gtd9jJWZba
zG+hA<v>W`@Io9VJ=i*)d&pbBZ<v+HjLxN(R+-p*u-vyk3&taYCA%0zNb#4n+r{@%1
z4vd$rlV63~Bh(4L1Rj}ON+kS@TrTRTB>V$~9QR20M{*p_=OX?m1wKu}|19E&A4v~9
zL=Qsw(o{<2K2y*O;(t-#O%i@KLj7MT>bFbvKOe4snVud{wEqLC9Mn6Q5~7zHR*^mu
zc`1tW5?yXrc)jJ?6}Z$tkWN~Fr<lMmf%{;8egoGFvH1RqSM5PTO63}Z-K;VXaM|%g
zn}FFd?2)%XhFz&Yd@cW1^aSUy$w+PIoFETz@~dh0XP<!wTSN5ex(w$6Za04(XwfU3
z{_Y@;&_5G-FAr!i?g+ta`1>&)6@u3a_|14se<$H}fmj*+(-K}G;I<IFUZ6vV;EfUJ
zHz??zknl<Y|6>SVCC~p`<{o~LeC%=kX-0;Na_|tj$<iGm=~#ZU^r(>Z+K}{{QM%M#
z50Ph&`cF&g6(Q-iko5Wx`gBNoV=whLgwV(Hof^Fj!1&SF^9f^*;L#!u$CfZA`9!%K
zX&u0CR0Y1HC{;JMH5{=uOhpjK{Y3C*nSOX~{}$rELOL9kK;gHz;gCU3r=fqPiPp?)
z9Ubq{U!v;@fuDC2(G}f)%klrZKCU?R9r|;&kapA0`^KjGyXgJ=f|LC04?!FMk=@1Z
z{s7n2PEqVByl-KKYfvgpyb$h66y9&}l!$l1@ncFJm!5uUz^od3a{bJ{{J9U-+<V)q
zb#L8Xom@Aq31qdbJaMc4v(u^7Lv!;7lq8YBq;2!Bo%&vB+q!W=MAC^5U0cuX{$H*;
z2G;#oyuX@=?<h-k<42eD;wvs?p$wqMndo<eOdLFj+4%CyP)2s|mRMQ%(lUB_I8MO8
zmzamh-T{_{x(4ci3irz~>UD4p!ueHLMgk7Lqyi*A|CJo)&I<Uzz)ze3>zFz~{FyZ}
z+$rH5U|U%HfC4X(@Z(?`oX>&u?gfhOTa*G+C<a7&Zx4L1cUbgu#`1w@+WElYX}!PZ
z0Y>Q;&tG!Q2@v0Y*@ruzRZ&CxG9SOyjNVHU-yOmic%|1x2%G8T!6c)M+cIQt(1U`Q
zZ7*}eHL4u3lH$0kV(sAI(;}Gn8{Zjm6*55I4;zhJFn)VeDltNvVvJF!G1@rxP;5M6
zao9Z-cNZ23uZzH@)K;#~aDu+m0KEk_$n7jbcIj=6Aquuk{eMud1Nn!r9>q{2AxF}h
z+K9qAN4R`?MGw6&*U2{!#tk{UEiTM8)tn7qKQj7?UVXufcDz{sb?uC6WAc04XuU0N
z>2Xo)5g&k&#vu1N9t%-|FO?v}OC<a_um*TM2ItG)`+`21Bk(20-<IRtSqZ;Qj;qWf
zPEpaf1#v2eyCl{dHB^SL<$l3-0S-v+Sv+^S<TDq(kqnAh3yRJH6-bz@J`o?g<G%*c
z{J%ir<3M|K&YYwC`N#bqA3F2_dD8CA7JlSbegOO4+?V-(J^V2LucLG5d$!Vd{KxAP
z=E6cehsBV!8ubws4&SH1of6(beG?WxpunRg{IDFyc9`JLD)QSU{CNdlBH_oWukjp-
zaq(M?a7`Tk3p&6>UPa&0y^z_!zDJBPF~iUY=*ITwHRy@Q;N2X!+Tstx)fV+%qt}ZJ
z!?YdRnL?~<F@l}B6t0cn4E3!H*GP1p3Ce_X;`JEG{{g`R@8SG=B>W?p4DZJ4F@pa|
zE?c}FBKV)>d`f-lA$=|5cZRahxn1G=kZY&Nx$1WQA>8gXnQSB7u9pj)-x2nDJwGMb
z7h!MLe*o7+&p?}H!)qcHzAIk_#|<Dg<B3-9!s{R(^zy*-@$pXp4_^wqd1DeXKNpxK
z!qP{-n*Zx3^f>EDa9_9jLoYNiqu8T(xijV@|Gp%{JgLoVWU`ng;U4HCxM8o#^qt=>
z*9DbX)CK-UIZhp<e!Z9oTY+VW-|>h3tn|7udA*{v<ch?~9M2!UYyf`pU+XH(7*fmc
z=~d2ZJM_TPTurlElJlJUhHC$z%gG(;AcM!zNl6|p{vXKRdk9|RzY*_a{S<=N5<H;B
z_-P5R@Sn$YKnPwh(D^n5ZxrZMLc9#G+hSCBJ?H-w<93|?gp|LEA1>2jgES_53f)G&
zW1QeSet~_*0nn%DkH>;m*u%nmfdX!q@aGkHiG&{qPhmSZfWMjRkKZ~Y_^V)$EPs&x
z0R^3A3Eu~{25~&UYK8UaQ_`H#hUw@8KCct!J^bzknfIiB$nzFxZ6AEef;?LRWryBn
zoP+nQbSg57#=%+izeKACUk4Ch5?&(V$H5Z8A6SL!5OC-ZES2StmhvAK>F`_S`BfG`
z-t%TKuO~%ZuBQrIrl$&A&{KXo!tuJ6;B`b#k^aK`rzKpbzY1KYzY4rD0{sSoekJaM
z6Jj4odacEDPDuHy_+~*4i{x^E>+aD+4j32P<sotirt@q_I+jN;-TzZadaW{@pN`Tc
z{yjuKvijAy{Anq@LYdBkko5YH`o9fHZ|tT1hLHMKKwW(kk0a!u($v#yiEW2C{hkcp
zNASQ&_{V)%UkTpvP!N9r+iHS8Bj9hrKh|NrB=})rEsFjai^nO!pB3_-g@0U+=M92C
zFXZ0@`8<xt1Hq4P=f&|0I`C?n%7lXsbf9qt|3<W`aN27^88}Y;zXU#y#8WS{BDG@(
zEc0uSFK}iD!FTejz%y9i2>#`Rq<yc4$nSvAZY%twB8YRl!pnne7w~WR7wOp&ee}BT
z0~ZqspNvK`SHPj&4V(b!L4Nu3xQ!>pa!}tt#d;Kq*Z5~+{Id|emf-v_gk!zZ3*-K;
z82=Z}e_FyT2=4ze1g{t9e;9%{Mxft7=mgw2{|O1N6zUCx;8lF-Z`ZTS>A>angKCF%
zr&87*MtTv(ErFky-MC+k#O|PYNst!A={I2h1ksy8F`>nm>T#e8`i<(Pzq`KlstQKK
zFb=!EEURK{RWgX9>18L@w8m*OhGtmoT35ft!<jvlNRvTl#GLRCk2wt08X&y;&CGi&
z9PvYkK-^>WjY~r-xaB2!f&V^X9=(~Hhudiq>~w-;M-dKvO&300i^3&f^Ctwth0dl5
zZG&+0zAwm+=Vu#>@<;JMgSfi%A_G{TSeEq-pO~HJDz(~ew8d`m-vv$NBW5f3)tTsj
zqRbkb?UC%<JS<O>U@xm>c(a7>1398EFXtE9%LH+6OOC_!bAmX}Fh5~BW-{+>r^I$E
z-f(`E+J)N<$1MxUxi{f$b@Hydo(0_pwr>Y<FTM2HXY`F&fG_bgMV{oe;JRWL#<d8?
zx{7cQ!I94H5qbDZUXD8}l!Lys9EZO2E>R~{a-NNBhLC>?ca(cu!e_CmVjrrGiR%=P
zzPJpivVq%+_F~|lI3Ol@v#tz1J*qnPy^0@@QlDO*!nZK&_ir0)X1xX+&^xr+WIcFV
zV=&wB?OA4bc|-TxRaH#6tKQx{p4&}p47%=5oqbZ%nw^YGXTV1v{<rHVI;1*=`#yo_
z5N(j*B@%v|c8k6k=2yVMmvpks7ejOs1znsQ;)5m%x_grh*GTv?A`ZtI@mUguv9?&@
zvs$p6&|tF!1(XL$pvSq!nQijNslLBgpJ+71(Enoa(MfY6bE2`l8+xBilwR9i?&;%T
z7Em%C#!GeW0dIoG6n<!;;D;^?@k0}ZakWqyS27%qtHq*@%5jxh!~;KR-j%h{s8WeK
zs@{opl;E>ewCLZfSS(vR#-A4Uo<s3{3fw8-;+{0YH4^@e0*{vP!*U#tO@cqG$ZwbM
z=M{Lc-lGUd@g;EVkHh3^1i*V*vQ5}zmJ11?tYWW5yG*@fcxBHMH99dTwli@ioY<P!
zwllG9XEL#EO(wQ+V%t8k%@dxR-~YY$eeS3IX+OKWcXjpZRjaCW;%<)OCKF&{w*k0f
zvVRJwkDo{nr@NYsdToTCY8ezl(WFeu(6k`ey9voqksqVZA?p3<M1dP%=4;sHpb8e$
z;Ej9(yOhy}pMBGT;btIJjE^AEkN?glp4g{g`2QcGE+ZBA8Q^`5eSQQ*Nu25fd4>eV
z_>+`Y-c{)du_$6jCm)`sFZNMLI_|;78yefIhoi{$C3|fQ?qiWvoEj|c<G*(NSkmFt
zi3C;ZTyypqI)uGy<b>>SE&n*g<OfrWI`(45M#|mIFr|{0dv2_5>)Xod+|hR?xLn;M
z6mJGQ9O=j;ocmGmZBurLY+;JTPre&T+HZh<Ea49NRxq39ra?tPQI$C*#5ZtmhBfY~
zT&j)3*r_qx?f1EH!o4sA2{TQJGh-+5Yhi(B4A?1}CTzP28Wqd*tua*dnvOfb{=ZX)
z^%H1A=9J+Hk?*90Dv<F(*N9e}j!(HgA-Gs2vZQT=A2Bt;-D7>EMk;bd)pgxV>_Abw
zgN{q8mhTniFFYm#xqzKl6PbTgo34Pb)L=HhA5~rw@(248abV4te!=m_iO%-DC7j&e
z>IX2To$=Kv-A1n29LecF<o_V!!sr)NuUX+YuQ$d%iX)hSCiUwOfOuu1=jn00OOu6S
ze9f?-x7-w71Bj~go$|)9YXnMD#1DleX;dt#J6!ll8%+}XI+azl7OrBgf=YpNo`x$+
zN}Q{}4{O(WHc|NkY4d%KoK!CP=v440_tO-lAsN%9pt{R)<$E?_loXSXq}gi61bQ**
zZcn)JK|sX1pU5p^Vcna4@Eb6BM*%^I%wH(bUy=P0K`$66W`Y^5ba><r1K<+gVA{Dr
z?EG2ilKmoet8aF{qgS1}ggCo0)bR)WRca&5f~vbaF)gH99&6|hQm78gK2O&YcxBeA
z+Q+A4yUqfFKtFOYr?Y+C@RaNHM!Jb|^8d5ET~l07MoUkp5cjPzTn0I#kDtJXD+B3O
z?jIwm_GgyH^KV^;biG;E*E=runocW&rFhFy@;c|^4Tva*Flny-;&wt_+|9>X;YZ^J
zRw{u(gPG)=Gu8N9eb&RJoB2G0Eug_dqP(cvM4tL=%}kE6;KwDt7>U;0kH)-8eJYiX
zSk>X$&O4C$t$Pr&LqYMI)hU#TzkQCLAc1u52CNhf*<8YL2P<&_jvh)ZnL9<QO*z@J
z2RzC_JNlDud9Aw-+&K0T?xosJ)fxtFM*`^xcmma|#uV78Hq`xm;xINW6nZCe@drc>
zIb0ZqB>u8f3nU^yllC`CpGK;URb(z$QE=T(>G^E%^U<92NAtzX(s%djh?|{W(9y_z
zNdN)o=8P-}Sg6R`2%{29ZRobt;NXAvRq<7}hx?-$ndTi|;6wFZ{%G+gSuU0;u`^cH
zVb5Rg_ifrJdbOhXvp?1FPP^Jb%ed30?h5qMqo~J7!h8~p3glwwRt(~!>V%3;*dag&
zkO-2L1sU_i4tun3_mAKG4;l+f_6490{XRJQmrgoG+SJ;$`#hRZ|Muy0sUdTqBE5ys
z9QTi+(cfsadAIgtao-XTjOTQV@1eSq0|-35|H3^7e;8=-hy*CwK1JQStHSltHsT`O
zTsRX|Kkq+GCmmNpn_h#c?*me=eWd+Yy^fI!^4JiVa`q<C_H!an&gf*4em~GA9piQ}
z{J&!jF`(%G55WKL)^%^qFL?h(FHdktqq>5s6?24tUsXc1>)z<_C-sb;gQQCNOV>2i
z^<(-pOsn%po^-Y4M<Dg@03J@N8w?QA6;z#c1Z#dkBhLQdirkm$XK7eozS$mCZ@Blb
z?}-XmU~*P;UlVo^+`Hsi@Wr5;F^?I7e>={2(0>dGo~2X3JF*j8Y5?a6?kTD9|8eZZ
z3*z`Bj631z3J}5l%~>N)T)u-EYb>J5jE!$X??>HFX4XMNr?W$CjKai8dmlke*8oXe
zmgNq+P6{6*@0T9iYc5&dT%_k^*2(4K_U=1iEPy=p0AfdphFA-(K8)wq@JB9(%7+D(
z9bLk0UO{^ZcWy;J3@N3pKR1`*&mTv5eZILkPSt$?gsU1Le(<u#-qraB2f1ev@b~)o
zt~Vg*8dfy?(-{9_7Qh(MLZrc(&(r!4V0VN7gJZsXzghRT?x>xB$2`<|5AhF=lW*qI
z>D^)tkR6a`>aqEnrN2IRF{+Zqum8|?>C|omC*IMBt|~PLn&@Ocl|V<|Vau$Lfwu&q
zSis)2>0RsJ&U;y)FZXaV&NQzeysBon7H(t7_uAZjc<<Y$zyPY@0!AuN<82yqj>iJ$
zI)_#ZYHS=}MURIp$RB2lX$KA)go7Yd+(RP+N`Sx5Q{7IZd<)b5p(mi;XP7O%<cDW5
zsfMinSt}f4850p#(u3{n#*G216loa3Y}~Bi^qA4*iZn~`pZj(&23Qx)pBP}@?odD@
zFtlq&%v(^olUcyiTs~TXYRKjO^CAAU&rH`EnR{ZjVNCz)XI+W=Y{~NK?to}8Y(vAM
zYNGXhqu$~<@q$X$kx{wDwA3x-s<Q39s6Y0h{5HNXkM!1%BIVn=5#ef1xefxDq8Ccc
z=z{|q4j%02&LULWE<OgX)6*!gp?bqamwc1@;bH3UI4$!FMf#Uu%2W6$J_1-Twn7^L
zd^U0I2DUpqIQ6$T=hi<~oALfRu*!<)n-=Kvk77Y?1}>HF?@U1whCp<GohsIKo$0E_
zKU$e^lYS^yEn?!A`@+p1-?yM~7pRcpLt1}%eW?mN4HfI)ZcEM{3v)s2;@Bz>NH;K4
zwgr3YfuVV6DE<i(RGGIHa9i!K{q5~Oi*rc-OR7V2syr2BC|OObXFB2$2OSQ<o@8i~
z^dpHg^Ysvidfp>0m)Q!tRbcetC^?HdMNi-_le>*N&r$_>9M*wf_Wn@&G;sXDWRvtW
z2*sLgV0JK#J1og^-K@?@ay%)j)U`H_@`vb$H3@FN>p1M60Op9AGy<<c<X*8q(=@DI
z{l^frorP`UbK05cjt$NVP!Q5^m<M|aOY-Ec%-2a{fp<ry0;@=z<JS=w{?I$uG(+S$
z++)Gt9HHnk9i<5(R7)`x+>1;%r9Mu!;Jbu#Z{i0hN?InnP~AmccK)rYy%dBNLUdQ)
z*aSW1KKn_em1d|m$!D+~>Z$UB2Q&AbT<rf@bs3x4$0^`@oWD?I&3%7lAi3+|aMP>Q
zM%_A4xh>b9d>D1Jo2<c7IL~U@9hxM(s^hU+N}y%my|0jg!_l69oxVCF-q0~jp71oE
zmX?+e5@5GoSrLI6V&8n3=qqMtTdmN-;T|^MsZ$U9<%Ar6#W<cXFxGeDjtK2@&j$gP
zi52^NZiJ76^zoK=^&_rXL)A}7$X9Fv#~6_q&c&2JyrI!@1?bqnbnz+>N7HU#Q+r=i
z0N7DehMiizkf*Ykp|?N{Zw>H@nmAmRkfiQ(Q27Qxcd7>E6$i8OlMV@X<E^vNxW@fX
z{jS22$;ieeDz(;~p=vSBoHAJb>xa*0=rfMOL`KAVHn*oNFpekgXvlg5A|lvA1_Gyq
zAgLkGOywRsK|3D(ids0SeI)zON<@XNPN7jLQ2*fjtSzV|(RyI9c!|#P(PwU#qwrtO
z4GINYun2N<@+OCj2@BhvYa&u32eCo)irhx_{$apkd-Pt@%}YAiFQcG)pA^HjP^tiP
zGQP&pku(kcl`Z2~iLEiH9&g<-`W*YZW}lmg;uXfXgGe(2J$6^CzwQn`)>L0UY^d(A
z4>==Oq)IuoVg_$1E(|5}S)fnbgAPgy2>R_iQcS<6H6I%VOiW*I{d$w!0#`G{veWEy
zy|~C$?k<IQk%Jp0TJd+lUnzh%nY1Ytdygj9w0rnnBkV?CVbA!c3(>bF^eQgUgZ`Qk
z!(S>$G5MMT{g}VBM^OgE8d~J}1Rw5QBjS!MMIDY%`rt|Oz{2Zu@~6Iy>x4&L0f4`_
zXi9)sMW=LO!KkIj`?RVa^2#7o@405W%th6DQUX(SI-kn8!EbgG*huM-nE&+jwsZNJ
z@+Z*fe$owdu(kCI@9%}u6JWS5ssefwNHGqM2n8q#koT`s@xq1NuTIx7%iV$#_E9S(
zpMQbEMR;wI9up8g>aqnNRS`ZS{!j>(bYI7J<2;Mkhnwb(bW;VNQvd}_s`F*}i)iGT
zXMV4)P3AP3D!(7R&^6HaPvAVRfV$Y+L8nFIW;w$u1jld|eQmiVCUgR^^=CmY+$7ob
zZrFjHr<Q{Qq*hy!7hjk+2alWbYnm1i2=7*fO!r_Fyc(UFMF%epT`@D?6`PPnzP9?0
z@w2~@R-I*S!&<n&@mkSS+pmgR#Mqr21}e_Ay_h;aUaj9=S`YYak#N7}m0ju~6Ox?)
zR87E675gtV{a2~?4jp>nZ9V#9Qg9(rxcB4!;7<_d6Wan5TZ)|gxs&Oa7y6-q(klzf
zC;cBX=-*v703}~H?6K%oNO<dC7Xp-pyr(4dl~|imBe*9+^SDHWd)RgYz0?H|cRBjr
znxHFxUP;|_9Ba0vm6@FL!I@gV_N_8?eLLjzQ$rW`G5k0A62h?MF2WMn3??WkGkF<>
zv@<nm$Or3$KQ&~Ic$RKLeth#``lAYGMYDh!=uW)~6ypy$=b~H1y2ROa-|6?g&cpZ{
z4QN2B)ATv3<7*h==5WpRS<C6?zn?r?a;pj+Z(6yefHbTgy;$ZF7YCZhICD+f%Iv?o
zUPtw`qfDTFCVOq1#pgi`NX#<H^sJuU@bd;v6g5g(Yud30*`~=_FDw4wg*(C0?l6$#
zJI*h*=!kzT{4!^pnZjW<`o$-9^;Z==Mkf0VbJKDAPD{+>(Sirz9&Bt!F6nIV^cOx}
z=npjq<7X7gx4PG#9}8S?PN!tAjU##OFuQJr8)9C`5g$Ktdb=ioUO|Q{ROPa=UnOzd
zYjx~;-`O;lga|oZtFT^50SkpPm3&-0u2TJx-yYIexK82fDkT#IG1uXp2%c7@<}7T(
zS1ii8LY@oc9%X*CNlP4&bx2YtE#JtT%KVyZpkSs+tSpe#NvfZm3LPu_juBqpL1hg8
z(t&kV7F#sJg_T#!84$m7lg$=!&b1{KHu#APXsF)OA%PS-HRAd6Wj&~}AOjdd<-WKL
z+L!AQ8p(Sa(+@+;H`w5-)a!S|x8hLJsCY0>s40+Sw-R6HP^Z^W17V$4!Y?lF;rM6s
z+-iepMTo$0m<MBbIq*D~$<?yLYIa{_6q|Ka!^V6yU*=z)y@mW;d@voVfqoGGX)w7w
zc5`d1=-Sn|uk912?rHf6#b#9!slkSk%w&t=5~1xVr^8-rVQ;l)Y4w#pGmr&5*d+Ea
zm0gTTH2w_M&TR`xKT06y57!q#kM*$<$DSEq7a_%{Oj6!kIQc<bq75AW+T{n{_-?xv
z(%WpOqEkcep+I-pl(8A!cdA_~3P$<=<_rJvU=A9Fc_W4#R{e_teHi~v9BTTW`|TWV
zF!EL87BoH+uti>k$#@_{lpeEu`(6N8gt<G~o0sW3?8>!;*Jny?L}jSlVzJvNHg)ch
zh^sQxQbT{#`l*cDP}W&u^7u0QF?ipVWTA=kY`0Tw)cyTZd(<oZ%&Ain6U6scB>RVW
zGfC1lvtq#FcPw%%PMs^Ci50S08InReSpqn-O~Gi#|Ak;e6sE)S?0ZeTOTOweqa2)I
z4L|YtFC4o8Z(i)B2eg4%9wiKY@%x{Hv?t?CU$PiG<_;=HWaK8w9oy*}>=^taEUe-$
z7$miL24<#Z^rq?M6#v2b;-`nd9#DOVw@YY%dwckO9o&%vm`#7TqF>bGVUNq~K+|to
zExqpRjtY%?1$E8}uPFLo1UG6=Y%!ZogyD4^qd!J#x4*{MevkI@!EW{?Tw3Jx-SSin
z+>r0YM6{&ujX;5`9)2!pDyA{bp?Q8vdIMdmAsMJ*yyXYxiF%Y?XJYSdutI<_2av9{
z$e!ciLE&gmqsKxtMSE1wVDa1O4kEu!hX<TyFdp0$T<Y%wfNDM%=e+2Hf!AjPM+^jj
z0Iu?WxvNppN4xdOCvp##XnaJ8=PO5+iwi%P=~6K{^ZN%l2KlsK27%$uYQ11<Zb$sW
zpLfz>m;2tL^PQI6(fvgEnZsWict)TW@(9g-@KD~$u|ZB-NkxSC!9k|e@LnSWV9pBA
zuaHg-RGHel7F5RtLhSLc%G@Pbn;Y2;or&h2>C=jV>RLxaR_*@T%=F%2bP`AOlScF2
z$Y1!M;I@uhW-?ms+1Epl8)xT3@I?%IsB2I(!2Q3`{%TaV))tf+czE22VMPZ)71o~g
z7|@2t07Ouh6X{jiTgQ^Q<MGVT4I_w*fakxR@uD7Vn^_caw!JQC2PSLdF0>54NriAC
zRVhZ8V9d`)s_bf1pRav!qZ8G=>GWpHiaJ`Xxc2l*X@|RW64G<oH(7U1G14`UYKGaJ
zgj7&{)li;mfyF1b)YXs%5}0vkw=ARi9eUI?kQs<7SKAT*l%pKdcC?Ya=z7<G4dvR*
zV3_-fB@dlO9xz)cC5?Bq-(nEA3wLrIFa%8G7`vYc@)kDU{mKaB%;-g|NS)r@y4b?C
zfK)d}3b3#bX6hdUl-C~gx{G?vFD!ztlxyoclsZ<a1|(7B20)B&lST;Ed4T|e^r-c;
zFL$LP{I0&G0xM0vUdti(5@26%Q@Ac1;x=JdoL<&WdMUVAV_yL6HJm?o&hIHbqYW`f
z*T-*x&xoDF0pg`_<4zV~&T-f4CkY~Yzi>dow|@!AQ5f+B-xyY;f&|z+UqlATOcG|R
zPqrI+N%@vsXS~62eeEYWmY7c?YkW~lk#|XB3Xku~aDVgH^^VyHD7Z#-+MEm?je?lA
z3>MjG9o87>5Z)yezZ1DFgWjrVDdq?flbE9Mba?4PN?hQmaZ565NcPV1Ea>dlSrFO~
z=Pgzcb&+Nq8fen?pC3#D%FaC%vLrvN98mQChk?+;&v^K@Ofx0-zZ&2?s63Di5YFTb
z=gRr?H8MtfI|DwHw_>Yn<pr?H3k9;4RKNIY{HYfG+C{akO4V?sBo68n_tZGMjv(Y{
zbJsloHKKdB`o+(&RPkwlZjRm6_d}_X#&g|`%Y*UlqYt)GSE|Ot%u*OV9c|1&MAqP&
zpKRi5OmdMf+ACkqn~tChXq6Io9Iw2AHp4LT#j<-Fc$xNzf<GZ}i!4awKLUzryE}_{
zLi@t_<Vtylhi+$>lDA^tbvwI>?brs^=|ti1$8q?$qce?a`uL+5Kk6p#*B1SyBFXr*
z+E=kxFw{9?k^M|5J1T*0H2*Qh*stHmv|^*EvUJjH6u^|}zD_%3{JI*cHSQ>VdjEB^
z?{#uG@IOwFqpsAqKe0Ff@{{WgLG+CZB~{tRq<WKrewh~EKKk{Ri7xL*t4om*e8~!*
zw-0k>Ls|2_^Xr>F;5ZEX{iVv&cy<?9a|{d^yut;#&&#)LI*l_{7Pu`&5Y9dvEpgDK
zZhD%i+dRc~b$DD|dA{BFC0Ab7l(Yk06_>tVm{Tp4!33j>9o&3EM`qs+Nf7Xc3p*H`
zupMN_{aY9ftdtsn_pu~;9rw$#M8=v8^m71RNCoT(FC=hJwi1vd>WvA8zI6CKr<}68
z$!#nTA4b`MJ3J!5H(0`LULAlcum<jB^gz1_YPtT^+J2f5$5<w&BCb;1ZvLvKnBj^U
z>t|)bg++~H?ZMg&!9_*k4J!X^nlmRc2ROXmq}XHlir;s@Rdx~g$IfV&cFkSIdYzSr
zY0yI0B8yifkK{z(gvUM%5-insrMz8A>8lR?c6sgV#E5>K3GZ12Da5#gjeh+C?^y(i
ziqDMUFFI!EChjsoj$WE^?E(Q0|H(3t$u6ZLh4EB`d^^%WsnxF3{uDOl>XHZXbk>LP
zJL(L%)MDo-l`)VS9=Ru@&=axOkX73+cP2bdFjVNj(S8)8SQxpIP}#7*<O*;%6<FiG
zB)^YUMJd|iX(Uc7?*Bf(@cD8!_{Q+<HThQ|v#&6BT!Yk1k$Yz~NPL$Kz$JLo#g6JU
z?tSpo{o4NNF!`r#cn_y8jK-bmPO?!Ci+F#K8l%2=s&yf;GSl2c#g`NxI;+^NufLV|
zjhy_%AAiB|NwwPg@x6^R{DN*j8=>At-RIZF>?GUT5hWkY7FnqU^y3<JV-xdDF%t5{
zI`3KC`GG0CkZ&Dxlz$RS(@jUJT?0xvrNU34;L5BTig!D5kT3{tb-0@;@TqRHkYqy+
z{58+6LqUshqW2>hfevaQr!P0fQ4Ovw^E6+vdU&`b4R?d1+rgdRB6?Y!>ete1=Zkz+
z`(^81_q|yxKJU$G@)2_Tap=a&L^+Caf6r&Us094mE&keDZu>!}H8=hSdKvRG9@V@I
z@1ZKmphAD>MGJ@$L>fQ%y~EQdDLMhZCwU{i+<CmWL^dqF_tsjw4B{7!`z;uCgv4Nx
z$tvrkj3&geOGY+Anj=0j40?#Xk-px<=oW(9qT8JTP7HHqZr4zwWo*Bpr2%(T!vKBZ
zaOtk$aUV=;g<NK-oJUWj37Z~ol(Yqj70t~l6WQ!PS3;RC40Bb}tR^n`jK@N|SH<Tq
zvwm0vP^sdRTF9_3;<Pz$x?7lUuB<KTQiGx|`Hh!X&!^<2CPSoGV^m)k7zqw+%Ho^O
ziU+`~W%?ES7m$Y3&<8B~i{G~Gt*^eeE{v6YWAsh?lD4xnZYAy3%F3vMnT!dD;`wrh
zkKQXpT^~is;P%IIaUw|REARRF(S^L{fxyp8_?s$@%<)KPy?@tmoQVz=_ckD(7x_ND
z04^;ACtRY}fWva~&!VcB232Iddpo3sLLr{m$%6-5129y_+b&<p2+2WoKW7z#U+%Q0
z-cB8_fQJh99c#(=o~&tRZC~*~q_=EUbQ)r6(Hd-I9Fm)N`MolC?P0Dllbo9<7;-ot
zg9_k`;JNgb^mM$1Qu~$V!B#~FoTVwEOB=52?}Aiz6y9Qw)np&o@3Lq|Q!*g;A<O}F
zbK~i&lfXDHxZSp6BI}I$UP0ens$(J@l|M+*v0Z^brq@-(z!9iSFJNq2Tbq+Li2iC9
zp+9MrOC6V|KgJ2$ct$th!?VKNx8k!j4Q~AsqfUGhG1eyBcR7Kve(8Jn7Z}}y(^M@<
zZpncikU~x_@FZlw4+qRUG2fQtfPi?E<!C>0QE)nP&Cnh5Xuwa206YT^^cT2a_h)AJ
zc}cSg%j<M=JBItPN$v&jmMhikBfPQQFu*g4lf`;(Xrj6G(5E^Fn%9+klKQxq@%dIk
z!eW~Ni&XE+b??xlB+*yapIr}v8o2dIuTPWuEx@T#dLOp~@3QriC$5I98(150cM}tL
zm@UVPkCgOYE$IYfIH6WZj{uC?!po!Cd16T5q9*{%<v6<PeI&Ed0pLefAtk|hjWjp&
z!y{baK!e{s<=+VZ{>Q!^0zq-`Srcs&%W=iy)B!=kRW%h%SV=(%_Q(G~T$2B9iUA~N
z)c;KpEKr#h`XQqIf&1$|FG|UwR4P0`*)OpX>1;(LRr08-_%Y$$T3ev=Ulsw>lDvvN
zbDD@NW(q}n*;cHZ%dW%1qydMB3jAUhx%I1n^EBu-ST0KSFBu`o3SAwRU%zj)YWyUP
z>mAlFwo;c&dBIs^x&XPn%)jgSIi*Fb>m6umJW%H(ev#mM7XMF-onpR<qnGsyBxE<*
zS}iF{x5^6G`;)QP4Eo=d>;HGq@lMlS%VK;$Ht7y%H$>;9`4pkPSCL+G0aE(9XYI8=
zK1ozR7?S-`RRz+kuu7~)(R~mMM7U{`cUm-~_{)<@TOHyC^Uhu<8#2<f&;FYz?<=!2
zUVw5CX|elWT^HI5@(;aVe{+*(uP~hK!wR?JD190G3O<<kuMRjxd3#^sBO9K)^K!FU
zl>HfwI1x#QEwG19&YCAkyk1u}s#!tXJ@z-IJONT5_FTSBf2l$BGs&Vjp3fT()~sPf
z-WXLIDaLaleh@H0<{b(GBCe2jDe`DR-4lh+^ZV>8tv|NS;H{RpZ?*0yNTa`r|Apx|
z?8B_}S9%mQ6?KdK4c=cvA-q$eyEIS*P+CT{3nvc^J10LtHYXD_mM}w=KDiHe=^g0o
zjDT@1AN}q5Ln(PIe7!a^nlbPS`>E%N{y%?b803&}E%v`#ET)rx%GhxIH<WH@LbGRP
z>1V?)s7Cl@`EpJB>vaCZ7?K0zxW{#lGUL%DGs|X8LM!^Lq%KaGMXXbyioI(7U{rVA
z`*7C3emK)WP%I@>dYNMEp3nlHr2u#7{GHDRQ@;G3U9G(y+@af7Dxp`2|7b5u{1Yym
zM?zjMB{XAstPFXIb)iPEghA?+gJ}B?XFkwHsKv*ZtmxM(662{2g8$3qcZ>I-k`q0^
z^%<`-VquGmhKACX#mPVBMcxz(`XuK)*7cV>t41pj|N7&lnFJf&GstY~evRfrJGu>?
zGRRC;GcS$#Nh${V5{5xq;pq46gUVB5$gpDoC;|h_lX?c0HjiFMsC-aFzWt8~08s8Q
z>!IhMd4(msjzbzCgVO_Vn#=-Bp{e>kWIanEg+9^Vw|yY<?#z%}kF&1qVKyTAC+F&7
z5!PhKs(0jJl)c+G@pBi(r%@YDPY!NwccVZms;Qkp(keB;#FrlwyUaEVOPnXAxbVHv
zy;%?_SL5%LT1C4RcO<BV>cZSQLY!|h(<QK~uX{p-*KH#!$iFam>vL%2>24(>S2&q!
zyaS-qThrrionWOTXQf|TuQBVf^tp4x+)&6Gx92*+<T#h(m9U7c!@I{(%1$|`#LFHR
zBDAP$*MoYcQpavT0m*UQ>mfS@PiK5#3a0PFd=eT|<tN5;i2TivAtJ5uw?S_xv8!CF
z7h}JS)P;Fdu_-rFl4dVv?0pO4pu52_>@M#`EvYvnKZcbW-}b~@5>Oazp4YD~P{;!K
z5o9cX6ZKTT+OAdA!9RW`8^NYs-N2`swSHP|@h~kTFT*l4i#wYGxgz9mFC-YpygpDD
z3P6D0nzd}Ilc?xd$u!h6a!HR-Iu&n@j70S5ZT*Yvp{gtPuEu=yCo)Lh#?ID0CMs@z
zk)||b!HThgfZqImdTfI1VlwDrviG8^@72zT$GQfoc{$s*zU1U-QZ{0i8!p9y6PHI%
zog%W63TNs|)>-+8O!y=R!3ny5O8?oIf{los{bW7fOp2}=mo3{xu-#IA3rlE+ly$@H
zY27Ueo>mzvFJ@<3=D)Gdfkv~ADU5>#^+mPS@zNIa(uWKURo>>UB3UD$WonuMi(ivW
zlW~iKiN8x9bLLw-WdIDCo1igd!ZIN=#SUTg5(z%l{Zp6Y$s@-_)P<mNO(Cd7!CQLq
z1DCKdn(eV2osd=JrShe1Hko}&zSRj01I;fL!p$^$?J%!IL!tho2mO)q3PtquIf*rf
zL({P9i`l&^%b9%n3%zxY)h@FEMO}I{M2ehmOdaPH6?NRGtzGm57BRJ~yhh}a(aM~l
zwq`6L0wo>l%~VJoMdy0Bj}F#B&7;Qh$&=9(FU1o%rX_tI_GRnn@5e&*0YRnH(J$=?
z>angZTjvVn^p2XS;|>hQip4AEbaanDX#zxX$5~;;8bvCk3j|_x1WF@X%oYx)Sx)hC
zejlD643<rnFxhw~Oy(5D$h%Oces)_x{6XN1F@xC(1~`!B|7OcNLFC4nbUZ|G5nRTt
zT|O}9I-ovx<E=E<>-O7V)X<f&vf&K)g6#BHRIC<7fl8_7NNlrQ$qpsAjS)#8EUo+L
zz*Dk)HQ78auB9|%;w0Ad(%t}RO6Zq@d}N%W3`dqU#+FZ~a2^b`6!U(xp%WdC(sBr|
z=>)Noxig`99c&0kst?^(f;ngDH}5}8)nkWtOw#6UqpVKZoU_o~h^owiE;r`h1j*r0
zV^GAdm{SM&A@+3pPVlbCC@5KmmAn*ODmi9rUP--W999|^EPov-w%L>GKetQXzlbhL
zT#u2GWvvI?y?eOEQ|9>WFC2lZa&96o$c0z49vA9WPZh^eCYuvz++1Fv-DEXH+a7<T
z62|D_c(jFN%bCY&X4h%36*AjfmJ-^hcR1T!Uk|BlTHB<zARYXN7Uz|?9;Dq0Ntxo9
zVh!cbRExbF$to+B8!+?Bz0Cp9(f(`|6&8=vBgaAw?JUeSwY1D}>v>BpRn`9H!2A1d
zwzIRfm%le`FZWl#g#|zWsd4q!<CCDCCx-<H-xEf*vs3c|Uh~DpNn7co((h--l6gh1
zVx$z=7s&7CvVvak-_|gS^p7T321=33(4uMTDP9i;b+y_q*t6C)c&y@)%=j2zG>^q}
zh)=#>vs7vlacMLm2H0cr4x7BsX=I%=5B-}U(3F$0-soQCgc^>SVEVD~%UJdN&8Bh7
z2;26Wua;D1Bs&@}O_6v^l3Lp;)}MU|3kj~UZa`H<b=OHPn!X|J+1U->I?2F7+L5{y
zgTI8MghY3AW^N20g{dD8oA_WM>z>-f%3VUWKw!;ik#lfhP&kUfhGi&g&Kgmm=~+5s
zR0>s<OtC{PrFFU3?=SBcTrN;UODm$}tCBFA=g;3uEOR9?_yFHFh0>_l*`H2SQ@s;i
zdoK`U`3{^04uF7Fp(g4k9kwy+LGLYiH)hP22D88LEi0vLM?AX=qmzTHF<uBhs);)b
z{TGkm<61s`x{~*XUZrlf!J_3L@pO_vQ=BT@ofixi5)5II8ugj&huQ8HkItrEBhxbu
zC;BFZ`4P%fbXFbG8oy!vE7v8Tt)(FfUT^LX2{GQb^jN~LZp<&R#bdA-%EqEf8okk5
zU28;(;q$d}Sj$Ae44;p^LvltB3fnCGsM7F&wvA2)r&=hG;?ZB1bKhcE7cFJj{8Nyz
zdtDjYCJgl6BeyKsNnDcGY^h=~VWI4^pqlLvy>w&cgl0yzsWNa~D5n(flQ&_byc=ca
z|J9$ixbwHI=WE8Pi)%U#wdN?YWX06!Mh}VCNf^QZ9JFoLvKSKgNO%?!+%699Pr)mm
z4l6K}ebJXkO`8XTp^Iw>#;sd#@m{BBK1}{>TC+37lJArLsT-PVbQf8J<>u5K&3ZN?
z)?O-d(0L{`!Kn0@@OH?W?Q1SC<YCfSM3q5~w6rR`p|~z1e@qutcaUT2#4DA2Gw*eJ
z`cxI-?NM9>;|owRU3XthPCp~m-8lHdlkEQWRE1p7uVS^QFuKIpD(fIgorg31<r!x2
z5*XL<L8z#J4A8t<(Aj(wl<$6(ZwF435H@i8xDW2uZ9eVN9%>mZ_H~#U@N;$^gIs=u
zD9RKhWgh1U^(kWsE2NCe(WJ&qGU4sN&6q4ZRWgnCfyXmUCol6vYr0$qj3JqC!<=B7
zg<cCJlC*YqIxyym5bD+_H6^|U@H47b>?$<#lryl4>$>9q9i(AJEuxc2VH~m*RzK5!
z;s5(H&JN~YqVoDm2gJpmT7KTU-t8SP1m4Egg%e83xx)7z#>&s}K4MW6q}&ESG$)}(
ztKY?iAY|5|X6q?bM9n{=Q(R>$6`G{F)~I7Ewz^=gq!~na?+8JhEo^f=Z|&V=eDf!W
z1#sZ+(so;6Z_y}wIZoDdoslzJJ_;w{2x`Ns_=z(-|BEax`GI5p0&wVd5_JL+t`EmK
z016y#K!jQELT1>$+ALj08;3mV%bmz8a3o(Q#_uW)?Fry|6*Wr_LV{P6J@|Qk_3qut
z$Q}uF8;vD-L`NO~#}##nOWc{(9{Uyv{Xg_|*RTAy93PO@ad;M$k8|utEZ7Zn0pU-i
zx*!P4stHA;UYj>kBVQ$WgYVnS6hr}rG@isl(0NXl{m+WBo-n=7qvW1l!lhKu4$;B@
zk$eEe(SNEuNI{%kW$582vvSabC#n$^0RB*j;owRU7;&dK*t)`mnjprKlZTTSdq6Hr
zij`<UnE3HSCJpq2_B?Xx(0}k>D$JOxzq6FLAN+f2{QZ!@se{tou*EX(^=hl?N&rY<
z1waLoMn4*(*ycdL*5Qdgqw&o72L6<${|Q`{>>;F>aZuWiTd2lV`Jn$#k+O*BTln+n
z4<wLrXF7r#@aLlEC`AFCCxkGhm68;-_rO`bxT8)lY|ePzroTki+0m5ei6KBorskNc
zt2^y~pNH4|2u(IvmGxF%xql?N#e6NJx@K$m^7I5(3@9DBN%}U`^s~q2+jbM;e^SMt
zJ!cf#F{;&})BlYCg6kS?<y$tGA`uL0;?ae66+SJhd<*qTo7!>w>0X~!{f}j5n!@x`
z4#J#9VRFgGlQu(!<ru|*e?U+Zd7}`1FLJ8y_n>`fI{?JxEiw{sDRTw5SV@R?{8de>
z^S3t(gMsV?(yo>eyn&<u+4z47YpnYaPk|-@hAk;#WLbcSh|o{}|B-9r`tds#7zXkJ
z6x&fN-xwT%pGxhKc2#^n#p!9%!_Mt;ys4U&?F*kjNH^}bwB$ar_5p6bj)*xa_P{IS
zg|Kglc?>=FEURRJ<%Hzh5y`=Ni7SJH_RDS$vn$6XK#}&`0_LxAN88uk^)^zfH=odc
zr=YtA_FJ16%V#y1V)4h_>bZ95>N#`8y=ZDK+1ERQSL9l+i?t2oW%lj*l-hGO9DrpW
zb?UdB)0tt7&Y7apNN8&LQ}4^Rxpo1J2rp2g$?*P=ph&l3<eL*CBoG+3%>ntL{GV}_
zk_lps=WV+|;~wXwUL%r&TRsglI+o}^yWDZU4f8}A;M)11e13%oq5R<*KW6_9LO!g)
zx~@d)l*xBN+xuJ<#_bwo-@<`ubcg_$y$-539uZWM@I4UH4qro~SK!j3W5h1mu((;?
z+z#_O?qT%ULS^q)ai@}sVFRF$j-RTN*K+!7KaOWR!C3BZmm>8nCH5IEYf-<)pI3@h
z;^)BkI5{0|cb2Zcy!BF&CM&_pPxIN)p73eAevjTRrRo&z!G-oWfmphz`D3q|W%hqG
zQ~}A?SJ<DX9`2&#*+~s)@O{{c)Sqf%_VzO|q4OK00V%})HeLcaG?Yuc=k;g)JP~=o
zFX&F0PsZG{2{Mm%^!fjoJvq@@viHZAC+fzpp!Z|;lODh-1%MkmhOJFT&0HQ<)RnQ7
z$SjrLjkdwbQ$l->D-83Bh_m!A^{|dlsO>C^PiRfB-E}B4;j6N1vY_`hsIzW7T(Fnu
zRsZaP!ucgO%kdTdD!(IcqU|E*tJs$StcCfID<1#NQ2p=b9Tt{3(i)r|Pkp^DvCM@x
zTIop7VmBApj3^RAF}ddsS=XkqW;v(g{4Tnt@=lpI>k9fnH*m&cjN)11L|vT2C4poA
zh+dV*^gud>sdl^lNn(jx)>d~Bd1e3v`yg`H-8M(#RQ&$JO~}=%xj6t(yu2UVZaQYf
z{nMF&PU34F-1{f@1n%JlqZZy7r63E@?dr)w|DVOIvq$SxNC5xeE&E^o-tDK#ZVcWt
z<v+IH8vO|O^HpFm!d6}`@j%I=_a9%TB!hWbZ@X64GJTS7EhPW*R$ax*Pl;PAvhQDw
z$MfRnzWYemAZBebm1vI7hk;ZTqi#y)yod5`Tdy<Rz0U$OnmBds)&sA)JDw&F7LQpq
z4f@|^4gJ^DdAM5~Ewz6LC3ZKtU;0s)Ul{02U--w-+z6ogVHoZbE%~s1U=bB$DswNr
z3!$U<-lKfV7IznnAzEOk8nE%eVcUJgMi>;Bv(LB%P^shB=IEul)OE`Uv8EJgpJ|~V
zmIy)&{nEDUOnpLR4#bf+1VwagAHi}4KN#)~cetJx0)JvAOFBWbnY=Ksvbvp$$-WG;
ztSt@d(#Ws17po)1CXED*ImX`C<D*Vi{7ZkDiRPkq$kf;2^_e&GMu@<`!<a&Ufjojb
zYNcd=0+2!ZF6VByR{76qoGz2auAkzX(GBNd_$O~K7_EdW=D!8v+=3a#B${ycXf@Kp
z=Nj@5{Ul7hOGG+uh!vLM53c#lA^st35Vw+GNoE(&37fR#`{*k6@{ncL@A9pIbm7#7
z28@n}e#}<JKNDHgT;TDGq-`nPZ%~vi@*v!txILd*Jt<7gTC`|@Bs4k*4r@p!6n(9Y
zOjV4_Bfz=-so>RfMkgH?fy2l9Aq1-G?wFExJcq^jzTPMu)lojiKXIas7O=>kpW-DG
zoq_(xSYdax_?6zUeEr`J=uW3-eFg8*U$afE^ZhE}{Z$7mL$)<@R8ERebb2C}9m9@i
zQ+yoK>#fWqwsiA^oZasVV?tcar!sSAHPdV-=?S%1txlt1WK-ojtovFMml78|{en|h
zwYIoCW};Oj^_!-*JH7e>sru`8yS~EgRiVV0n(5og`s6tq7E#S&SoFRf+;*gQ#{+_P
zo@Jlt1#jZjgRbfsp3ZvfJ>={)$|zJzU96+~wB@hYb<irlTVCSYI5sAjW`73tU>_k;
zIWD1)E*r$8i>FgzAS)4`GE(mGAIgzGiTVYS&>}8KG?Yc*=ny@fzbZEPO)}h$MO<YI
zCBK^FwCP^RhBMo_my(4`HST2zU1B(wZ^+)(O&~y5Fl+p9-ml>#ri`*<cQf4uY*7wt
z_EUl1YfH&gj*FvyPcgJvbqo^jTm0u?Ve)h--{SxDvqoG^Kw#i{F&hAPp9EU5d=FLj
zg(%}2cHc<SZrgPF^O~_%5E<S&PXA2<>z?nA_L59YFK&eJBW)Rc%Cf2-qvf9h;&bGW
z{>CXj<QZv4MUiH1?7KfX1uAf<c&RYEh<MUSdy1nI8(A>9-XL|f_rOvjToV|M&b`SS
z!JK57YaOy~G_%iH+|kw9ZLmaJAnuhZYw_inE}8IW?N3ub&#q4LGaz9R#=}B%dP%5$
z4Z1TTKYyitJH<QYMQyJc9NADUUNHJ2@)|l7Z$C-v@i*Cmn$j$_lzW`5a>E`Rfj~T8
z>LHh3!JI2kH!USK5=i$8U&BTMzx;{!1L+#??rUWW1M!IlRf;G8;TLO^6`V%}#<dPV
zs<5&yqf&q+(#wr)5TDgXpa?bRP<Az2F~Kfo#v{3pheOq9oNSylk)Vxq2?e2FX&@Vg
zPn3+jm$2Wq_@gOp*fVH=zue<T1H=a6Jf4ywk5OjetV6;ZUWnDUb@FdumnVi=xyiLQ
zRNhv@`LVM4L>O^!<ugsjt8pgb{X2!Vm?1B2nzoGU20}YjS`bQ)iv7%Bh^r)=LPttl
zj!zaN*1WyAm8~(2LJ>%a^>5FQ<e?0Gs_3%Uj+72}<*rg?OgzlRn7O&o#>>aY@3c>b
za)e)-gOj3Bx@t_3XTxVv3`rd%8kl)jm$P>+_FQHtIwu9g`<KrjI1BRRYu})UV5e#c
z`%?1IbaHtpQWdX4{2vRn%K04?nlfGm7A8fxQGV~Nx2p&GhBL^JOMdCwsvIcYlMw?p
zt3*lC8qvQRXAgT_&yBXSuQzO$wYEZ-<`H)}I~$+eFZN4r=4zMDow+V0`(DML#P$u{
zpGQ&>^ZoT*dZ{zzoS<jUYcif#d1x4mo6O|*dOROZvTz!AL%>ZN&dRu8?YFPYZZcoF
zZnDG1=GkMf;|;Oz%}(6;6$=XG2A7fBm}{y}8nBs-2sB(zYe(TuXLfnACOil%SRE=q
z>X^|4$=KC7TYiU3&Zntebk+0s@)At9;cyG+r%bQBw^?fCK0{))SEX55g>`q$)T{e5
zlotQnFyDB{;@_Oi_*|FO@frQz)yI$-j0-xIf5YO>JgdD@kIW5LW-^`W;dZ%weaQU=
zJF#vekj(YLQs`iw#x~VAl&QdrA9@rA0TR)YlQk-KswuM10IXfJn($|E@JRsU0v{#A
zM<XONx|7zG8h&-ctq>G7CehL>uHMzMXqQ<{8N!Q;H9xaI#mb+lS`Z1$rzkPxsSN5z
zr~Vjo7hQkN?!tM$$_H~qK=`GKBUGy*`A3z~73>%xERbSYz41@K_f^tCfY?}o(gf-m
zap2iI&h(Sv?lTF<quimO)FyJ)Q_{iY)uWz<N!=zgZkxS2E4P~WpPVW&|C}t3Qnd^;
z@SjkRmE$G!K~Byos^@(!hn#6kpo3b`zE!#Mr(bqve+Z>d=teIs8;y>3=AT_f*r3Gp
zME@1~yux@NlkPw5`|leaFo3yBn5HAP8}3vRi+3?Ju65f6g@k(=9uVx8fxmXZMr?Ic
zBV;G@<E#ipFKwUI)g}C*InRx{r>tp+`whw3!KjTs);|2hAIpDIE<X*G|Jwn3EmuD-
z;IN&t<z!RH949NbQfiF-rgJSL8I++6E~40B3)ztz31I5T{LpqoURz|}$<2@B*WVL+
zf)-PRv`??I{<*fLJYO2Omc?nJUdK_yy}EO!Q)Q4x(Z=0BRxP2}t;xluS#$*KRgE>N
z8Qf)b@5y6PWKGnpi!1`n=eyYa>qdK#lX`FDYWxjnQAu>T#pCpHAHgTkuknvG%&HbP
z`M1sXt69@j<!4pos_N|3%&^1O6MDk;#P(<@;x)`TPk%_ee?ec1Qb)ErfoU5ab?poe
z*S05%FJr4AcO$-h#E*Bf8wKD0_7i`r0d{<a<tm06B%gT(45G3)=gnH3Qh<<?Z(SSL
zqJRvd5J)Z5xPJ*^%EU)=P2&9LwBk5rO1>|Z@lK-EAGO6qv~lF3uj^zxc{gbk)r|gh
zU6pptEQj`q*g5%Od?Ko9KI`ap$S%c$t6VLStlAh~&r46vvv@Bg{|XlHQre8SVBF_H
z&jY0;Oi2v)&djNPMTyQS_DJ(gjN<>hWG&yRSQ<O$oY!PaxKlPN|I<N84Rx$?)~3<g
zk7%jJexwHH)`q4?t*|(0QP@U4x6iDpnwA9P4*L6ct~`?rn}s?B$-^3!nlwi_<x{|)
z<rx251AOi<b0dW-I;Y-%<CL7YsC>G->CJ9aA1M;cxNXs~^FqyAz}4{=KTy?r@9VlU
z$t7f$$~))a&ee82a=|T|2Sl<!=-g__y^Oj|oU1z>?dA<o>4Risk2gs2Shq+q?4B0@
zE>rM-jU~=c4)|VNwXeWdd@E(a2YM#{VEieO3I_m48>rCVWPDbj@;RcY?NXv$ALXx4
z03zO{e#^2BbN8kIWyJZ|z)5HI0%a6Ye8acy_I-C0CWAMpc?s8Fil3?;@Y9BlSGB5o
z%^&vD&7c3?Pji^DW9>UP_Es`8klh;u-lHJh?{ih-8xuk^Ox<YN!P+rY#C2^QS6pOm
zl~&C@pVtSAcC8A#w84DE|Gn{{>f12W#Uz+ufOkxJlqaT%^s9b(nOD{3_rX3&jl66H
zac&k{CH2E)XLfXOaCA2RhwWC+-2VPtkXKt36^f*^O?At^kt}tsKYm{YNqwQb#LtL&
zmsyN8#s1*lnr@44C@Os@W$E3=DPC9P6&vn(*sXja(#$?$%pQ(dQt5k)Z=^Bfe3rRE
zwNd_>A0WqMH%W(Q+k(n8V#O$bIWc`QG3ijR7ERkw(gR){lTg!Q`0AQ7sDetskpAdr
z@=ny=hVl^cF>CltskJtc2f>3Xg#3&4lu)d3^t_?{p6R;(d(CGJVXMOd)vSVLsmDfx
zQZTwFL=N5I%p9Hmg@#y@%u{ia={AlHT@I&ZtUYs5j=aZ@44w&t&5fY=_1i=8B4^nX
zned`Srb%LsfsE+SNNBT@(0q$15b>l`{X*Smyz|%6kMAI-_vnYSwWS&d-4_4fr?Mcp
z7x2B?+25ic=igp5jxEAcpRM$3k(ZnOhj{O~UakVFNw`~p5@+iE{F*pOE*%-ZN&TBT
zDoDb*CNd`0{R6iQag3{nB7oM`*}t80?F-ouC3L7?()yE`-|FyN#n;~is+O_D|LUp{
z#8#hbC($%;bClLFpFkM7rK_;{m9_c#Jx(Ij`aN$Lyx=~dbf!^l`G_fAdTv<9)v_}+
zl+S8|=YG7TCC@>$O?e*;3>GyZuyWl0POgXG$u(b29yB$LRvxv_SD??E*`6I1RBA}w
zljsAg#;jd5o#At`AuSG?&jS9P1IntCr4v3I-6XY>RED|5V4Rk(emNWaKyCRR6lZz_
zyOwbDHEnYy*u^ohU!6@yxZi20882D_3QQvOJ7C(9g+Lg>^VB3+U=-(}=k0mD@P>KW
z0O|F~8+;_kKvX2PJi~5R31j&^Ve8}k?Lyf-obgn||8lK~Z2Aj$IFH(88g+x&mGnV!
z<+ss6@oTojdSjXV!(to05{ER2JL{$-N4q46{h?QJqo&-^6+Hz=?VV}OCCL|uZ516N
zFE!TY+LK@?#TyZkpWamFz%kE3>(^M-a~RBXD}#>^NR6ZRss8-E*j9Xu@i{Ea3vAHE
zo-))WVyNaJp=F4s$fN(3udvQ|G8kK2$R0&iMLVjTZQo`wlsUVVGk-Ld)7{VaLb7;W
zT<97_)kRA;8h#5BHr-hvd{r>0HF5?L4&&^;taRUttA7M2`knij=p>>po<Yg~>y}2s
zRY*L2jcfi)>v}Vs(GFU!%k6nan+ip>wdM=xjsY9JN8cU&$#w1L?}w@xb+rOLH&14*
zgM@OkP-rwd1ufnKOsySr@mO)MO}zK&wq~Q2s={5L*|gq4R)kzr+#V>g3DhZJOzL@k
z?ZR^25thdym~#-yq-t5WNQie1@?}JacVBCMF5CR`IyYw#=fJwc4^PeskBY5%@;n_*
za~_H>{Ab|KrY|#Q(7i<x2A0o#7T;zLBAs1_&&K&z;8Xl~2vIW#(FM;9$p6l^^}}_Q
zl{CMfbjkIc;@?7vTMweUm7PvUmtd)aO-v+7zq2xqou7t&qS)EYlG(B)W}yk0<!9ik
zGe4rB4b-@#7DG<m%ab4AtD+ZekhGSGGd;_i*|^0187Z9=$miHXw^%B93Mc79`9K-M
z0AZdBe2+As15}(OyysGPVE*m2)I&OUYA&YC5}-Rl+M&5N=RBmQ+~+jMX-=P<49ke|
ziiq&Kt}$<D3j=J|Qd3h==@9QuH$1+rEiA10`sm2WWWITv>pDBkqFS2JwSE(RikdqM
z9EPu0gm?*Bx34>4ciSAFjni?X1JI4W(5AzIL&odgkKxpw?sZ~)U{idMQ+&>WWe#Y0
zRc+Lc%(F3S_rzj@?b&5p^=6sBXzU=jukx6!xeovXfHA-!0A%pKJN<z|`%$x${W2jr
ztmn3vF3EQ0QW^AxLrUDHTDe6T`J#mOA>1?05zQy-kl>P`Hy>3@e1uDuLyb+QDp*Sc
z%@nv8y?gmBU8z}8@SgZLK$(p`p1B&=yeyzIU&t+e<!?nB)1>1AczGj5xJ5a~W^;Bz
zYDw_3*M@A-V&Z|gM(27x<*@ATfbKbWUCvh;SPKdx0+n3`c})0-By+YP?#BK2q_D)a
znfkD#Yud0|?yHoN>#<wf_&b8MVTiSTA_e$`J&&tsvvKNzAnGvFSE+6SKXAa+hR+cI
z+y#EB!CZ<SS&v1+L|@w+NDyJNdp;j8ndWyszK#(0X?c@e^BL{LEG6a%<B8S2Bk`kt
zrjCdJORb6eJ`l4+fZON~zs|T&Tm8P+VCHXd<aT}!BUy@IOC*{InI<H{_IvX;Jm-jp
zF3CrxFo*+w^bT*(KJ!t3$HBU^VM!glzNkn}6<HU}HP`JSrDI&dO5;i-RBaweYU%ZA
zit)t7ls3qnfFkdPoeDDu=$4ltj1d$_>+1ZbM%cVC*T~+lnxVRE6v<@cv=WU{q+DSv
zbt}RkR+4hUVJ(pFC#YLY-P2XFfNvXn+FC}o-?Ly)D#tWG5+=~c>5D@B&BmcpAryOD
zNi1ifQ^7#DnBcT{X4YL&enKri#?`s_>>kRt)cjwP@@-;|=9lWQ8l%#mHbpiI!a8{D
z^*BW`G?T`Nk%%$RE){RKt_sQqsu8MI@gpf3Ivfq(6HAon)k<(QWO?_HOug)!^16zD
zMTU#i-?XJCRJL8#N7%_A^^d1k?3ZI0xFe6{<}khbRC>@jp&S>#0?1QIgdFwkoX;97
zm8&@Gb#m5=Q;Bv>w%f=VZB)wSYNb36u8e8A(T*waTly)8^@!eHd%y4MTf8gjYW6jM
z3_I=4NAm8HD0UY8`^UC(L&+OeAJTiCUCA&iTdidwEp4%J5LvXG9@W96lk)GMl-mEp
z-g`hb*>(Ga3J8J}>757&sB{qNL`A>`h)R<tAV#GG2oOpjhALe^!~#SFq!;N3B%y{T
zs7Mt^NCcFcPy>Wy;`@HL&D^=)y)*yyUu)Kywa9*U_Vb+m9Cr38`*)g2#-Yeg;q{3u
zR10TKY}QvnNVA*MS<(0_0*CQ5lkFq#O>V{7Z%AxdBFOBnZlt=9wCl2I_s&76^Or(<
zAC88d?Sn{^*?f_Y({h|=Yo1;XdU-p~+f0goDCVKYzPEbcnZ?^@xrnbW*l4DNFmFY#
zo<Kca4NHb;(XX8o^skupIv&?yZ<=V4&)CsUGwtl1q`VItsrm2o%L`_dONO5J3DhiY
zJj%SBDe>IP!`8kazkhLCex3kn7p`7+v~2DI7i#EywotD6IsdX?U^@ggyw7nsadt-5
z_nadFiPe7nuIPxDRZHEA9Gm_+)6CB|xRmc&@x|2ZaRM$r408={P_R@zYu%Tb@@zQA
z)B0EaE58D(3f~C>FAvZ)SKCZWv+y@!MHcZ3dIRznsRLub)gBgHE39+KsNpxtS;$y#
zoV{3=q!ZVi=T&DLBqt?wQS651q2STb-h`gMFV7!b1=lTD?=_EKloAV`KD(kG9i`ee
zU42+78h8G;`J-yTswhYCGE<$R%6y}NcnIO<M4TZLlEd;W$$U_L!0N>HSC?IaN~X^1
zH#UbCcddxkyxJ<~FbXufr5KQ8__J?A<&jzB`*N<f>I?Oe`qF%3BPY6F`<91R#v8{x
zRM~ug{zC)%d+t-pS2^N2LWCOf8{+j=f5p_7ygNfeU6)S!3J*LC#apxGB?nv2rrikm
z_`~)2Txf~;Lw7-ArzD}Q>G{5I<zqw}&0P@bsK-T}FY-FaS8?DNW7r(m6Psn<x9o&g
z%ir*)`!CvcAyswvqMzM7Nya=_OFzHFXT2Iw<)}YmdhgA_{>qcW+wXgn8(7Fb?gZKE
zP9^par&~9?iyY5+em~JF=RuLE&VnJZHtfB&u^^1ILkIL&Fsv5w_&Th>%J%jRa|fGN
z;@t-ijvt<JT3?Sf=L>yUv%nN|R$|~7$^K@%JSks*LqOt~<!bPff`F__|1Dk)r?U_5
z=EbS4B=nEG-k$yRVZ@)q6%$f;Wa{{M0wRf-gu0j3@x@WW@SJqd`Df}qagnX&293QU
z(j3FK8s30H1@W%aQgT~M-as6%*eb)kz$+nX@*`5mtgq4IQ9+yk(nj^&h}28tCP?Fn
z>XecDl5|loSe_}$=|h@Qrl$%rtN&!fT&H+xqurI0&}Yi&w!vWrCsL3yr^pr!y$Xlu
zBEZVMVW$s=yk&Ap(`BxST7)9?q#cv;-`vjeU}b0+yisdKUBqBc9SLsGTG0||bw5Vc
zRlW?f@{$HkpEP{dc^E0h-xc}gbT^A(#F<s~YdpaFs36vmZ}j|SOeHPsQPUgC64!y<
z5m|}V0l;qBV&}pHjwh&ce)eWUt^D@U8$Bn2!z+VbD)XguxVC>S(!$d1s)N(rfbVuL
zE~by&ALditXh=4C{pED}(#ebF_ICZ&QX0tP(3zQgoa6Vq<U#Vvd9~*>iz<Jgt2WKL
zDePpMtsOu7@xDJ&F`OPLF*_N~IQ$PzmY<C~mT}<md;H{$o?RW9`cQ!(HygU|(z_dp
zKF!Z|bh_k7^C0~js_&Ik5>5zz+FcVQN7w{y$;?K&L9110&PMWlE4-*|oyZ-g^p7un
zvJ|c<4jgZ{x~yiY*P_$_-X_ndnZ!9eY-{=iT&hY)E4^uIKKp&>n`q-Osd;I<4p^1f
zKA2`q(7yYSJoBw&fbGp%=uXjScp1E)-6Pce!;e>n?tWHHg-NR;aa-?}QfC6}@Z;qR
zK_}TL)Ak>$CP}t3BFN|QM#-)c#7ON-A!wIlLq}|D?0oY?yI+r=@mAh^1#@De!h>7@
zQPS+}uPE;`aW?t-HWzB-x-ZWr^Vzml({_Y|w2Epzr^>Cc%HVz-Bil#=m%9w~U*U-Z
z=JSO&eH^FdwSNWXQkSk$KQxVGymGmBK^fPn^SvGsqg|!s=<9V@M~MYROhe!AJ7vax
zRBwiiX*YO18g6LzzG>z>T~*Sy*uC9&_z*O*C6>pdmq#_nU8dD6E5ZXbcaQAY62@UY
zTU*5SFDzF?9Th&@U9cQ_cb9$mVc=S8$^D>QlPCG#eRfc*KlUOUs!g7l9orsh1Y-|Z
zTfznc_UA8D5Vm^fGp6%)+UKouTwj|juG<}HAbsS@S6@5oC;GxAv|i#W;o3L!hk_<A
znN_GO2_iGyT(9Z$_S%w#49#bv^_^Owu#e@){(5+8if`VT*-HlUZgb0&nTxC%2_6=D
zQHP%}>4J@>Ho22yBF<`GLP|ikp!>To6Pn|XuioMp4N(UQwk^kxR<K<N{GqEomS>@4
zrx{3pH|k+B)M_O#>>jJZ^vE!S^=$-Q&V6!SD&|+a;oE$JPo><~odxaF7^q`gR?yR+
zQx^PR)GzJND5Og2$M5G#^}`&Wv-gZxZYVze_=_!8Y@msaRgX<5R=hFCUbH!|JN-z)
zxdF?7yIzx$E7PO3A)AGUVHo7f%v<id$_PT`nfcWDK($*GJgvl2==Aq#oTZdu=xq|@
z-6x+e^|Tke?((ufdSveJJs8IiZ{C~I+ds$xIA#m4iQb!{i+;$SQL9frP^Q4HFHTLx
zCOh%2SxFGdF9?^^uT{nbpYPgKm}EW%Nfq3XF~RJ)m8ck(W(Y+!?uxA5R)x0T(0Lt>
z*%zmhiLtk{$_9Ot^g-V%?-i=MU(UW%6ns*j(@*f0<<DfPw|BT+ToNfPnQ_n%?84s0
zOBLZRGA8<jd*q*eRJ6e%W^1FLK+s|bJFVYc3!JV}|6%>YS|RMX0sUm2pIyh0VMFA8
zwr{PKw&ojs#ifOAS-5JsFn(S<{a{b2o1<Of%mo$nEzVn~*msZKw>sGe(H?eb4W@mL
zuJiMRvR`nlq2%`D>Nmd`r5Z#n-RAyC**yL0WzDaPSw}^1VLVMo7mqAH+dK%GfdVcl
z{bcPGTE{p`!}}o`GPd{v%Bu&{-cMpxFNVqD&%RS>ZmbOnvwZyZbC})&&jaDJ%$%#+
z!H)yFj_2I2T@-bDk>cwMsx^QG4D86s&9_g6zBVmPb4yA8;A`dZ+DSgA=#E?<?Q{v`
zUXu7uU+pv&G|cqIQQwW#b<NsKB;<JXUY)VQaS@870Nc}PImWIQCp})#2jypvvd)1@
z#sc>8PkBF#e|pJm{{5B5F|WGRaxQch3~^<5r(OZSmbx{S;Qd5ds^sYU@z8knXYMgN
zX)pvkpPbw~(HW6D%IjsWH;q=ElgIrjXn}{Bxcw==A}5sX6A%+<=;Z2$P1c04ERE}<
zm)3Z579h#l2Zp!r7B@-~WWzcz?=y0PDhZrYM$foX4PL*1OGFGM+*XfsGg`Q1puX_j
zQV75c07kl6F4vmt?klLT^s3~WMBMi2{W4PY^Pwy*@@?^v&xX%mvxjmXO>ju%y773;
zRS$djBuh@+`Bfv4bfft#ylKEK;n_5wsSkwQr<55}Q!X(z^~*MQ?yE|E_eW!5=k?Zv
z+$*I5<PWrhfI#Pw9<(cr+F8W?t0GC@Wn<m>ZF5LV(XLiQw)8JT$E`l``|;>f+1oYm
z`gcXWl#VW&Jd-0@LfNDEWS+8X%jlZsHPlXcy?uZB9ye{3S60#CrR$flA=p=cGf4;A
zRc(Hi{v~aeqSmhM-^E#Xudm(knsEA>?$FZzVYf4=+Sp$4of2*O;Rb9qA!`_wq{RnF
zF+hywLpnbDPPb-yDWdLJo$Y)9#YBaFoYI`E9s53B^_VNCq`i|X5bx(>8tCF_Vd3eb
z1p`9vF)uO8lTR735m=(N^npd!qPq{G%jJH#gen<!Wz)k0m{l0C;s>)KdPgsx<Q3LS
zXHE|sAG3Q<b1m!KeDsT77$;8nV(Qs)0S{|mNVTgeR&spt&1aHSz2~5*GIUzATi_ca
zsJ|;Ur>GnB(a~QIDD+j}w9v+#R?wD6b&{|g_rpCs|4(B_!_rN?u|cFwVQLB`gr+|j
z4gP3*6mvaUs?BbPNkUpt{+&7I*!v)u`WYD%-_A$~wpCh7AMyT{g~gec!VY4|qdxhD
z*eF!*xd523<l-R+EzY|h=ZP?XH2u4h)*8SQS6cJBT-4B`hfs4Hf^w{C(1E>7cRP3M
zjxQ7LgK~N4uGylko}6Bl;Rl;yK@YzhmxL7Ob44ZR-&I`dJ&7x#T%w6?_4R)J%7fR#
zME6^H!E313p5|}2_a3F~0}J}&C!W1j#a$>dP<Jz(mms{I4-w0lC#Sh=%&(Kj(P}o%
zdL7tVKahN8R`PL2mR6%@%cn|)M<R``87jNa4<DbOhGcA=z2xuuR*I04c8%LrHO69p
zlRtbZF6rk!_o2rF6)10Ub^gWebBhqRb_uV~y*7m2UMa76+oNY{gSNn38Ypktb1(59
zcGIVZve2&?`&X`KWlmR-A|63*n2^77Xn3b-NOAOY47>`E<@BJND_cMPe0$<{Ye0q2
z%GF9Mu}?yVFi_;JZvtbg0IJ_!cCe9m+=sn%hXanRoY|>ccV8uZW@8TVR$q52GZl;W
zNEno8+w7{asgfox9<U^GO)mX_!*@G~*64*!vTOLcxqEZ&0;$P~S1x<)zr5S}?zx#5
zHhmuEMfw%eDlj!>_Qmk4Xpg70T0?HIjB5@7^a$R?jk;<l8zIZl+rgt$Frl^_U%h1V
z;zqD+xu8zEK-M+?Jql+QM_hxYKxzR~lA6=P_mYv8wc=Fe$H>X^MUO(knZ$xwL7DZU
z93zFc)Q5*kt5q)cS=NK+GJ+{W#W?neAQ5bS)$zu4h2u&0Z{Ih1Ig8dWW4Y`EZF`EK
z$S!0K63ADLl8=1j(6T#8iMc9p(^?nZVdY{gWjoa=b^FpuqsC16S*BS#PoJ5=D_7R*
ztuTGpuT_|0x_+psuF!EDBg-GZQM~XK(XY5pj(}obsXQw|`GxX<FAqNCz3wP|<-8o$
z*tK+=a_L#aKFqE88-If$aX$Ala>z;@oqqcJz1#htx?hYIrJlZ-=WprbUc!I+hXC@}
zGJQ!K|EVf65p01?ep_?O=T7{l>2D6~ogcq&1$va{&^h&p%Bf^Y);QNaKApHjZa-5z
z6Lj6DTD^Nf=11>l**o)Njb~Vps;yPA)C^3ETIi(>VS*qfgqOZ|#0UeA;D7_S50m6`
z*Kbg0N2Gn%vSmE?bie6*dP_~G94BkvoaMipzju2uNw>Z#9ndHsAg#frlbm_<y))p!
zJ?(ms%NxTY>Pv&s!mO1Zx0dm-6_<OB0rLgtoB56%6>?!Jyx#MusBun1!YnCAHhdyw
zPkS+LOV&aSbEsvx{=!TnCsC`#7OwnQg_UM0LC|PFTX9X6H|_n|e70vY1mj0lllV8K
zm(N?)T{<6OGntw)y~jZjJEhpp8bD-;Z-qzBcebZzAqw7hu~MqzUaYgwLNa(j;*l1Y
z@sG$hr*@1zBh^_YrrzPac3Naz-?_F5jhc7|h5M1Wyk?GNb`Kme*CFh@Rz?ZpZ3D$E
zw|9&hJ`Vj<>$X{Y>@!;{!-|X8#!u%Xxz`T1emPFv#5S}+;KQBbpZd$|VpzeNM_X(>
zdDP-Q8zGwweqMQOs?qFnFW{)Qc?+}N2|LiP=;@(bx}T1)gziA&I%f{TEF2s{$470d
zo^Zy9*;<cRE_;8>o!#oW581?vzqQC3_RaxR>DLANy!%jAq^)X%4)oDokz%a0$x4(t
za^%QS#)pY{-2ZmAqzjM1_7QQmFAT|%ufK{z{<{9Yh&#A`*u$Q7Jd5!x`w^zUQXC1+
zcEA7N{(anzY7zqB`2$?Fp3x*G@>Hhx>4CwKY)Lj&M&jV?nKvN;f+i>|dd6vHmsQ}(
z#mJ}87o%C2L~ilzC`F$>jd-fWQ4`D9uA2S$)d#v9DW^2gozjbv1rwOg?6clAI72wa
zt*3%#A~wyv)y|hqJTcHT_^M!b*LFtR@$!)zO%!m}a1jz=JvwR~SXLIXT~><hH|3+$
z(pZ~nx5n2v!!=$M0ipc2eg~N%=5)>(7S`WOy54!yC``iGAnUjC*Flxba%cT|2z*c_
zq_+HwZ(i@02Md18v1CcU+$g4PmCe@2-!`05=NtpHyxKjMtWP(G`DG!zIb34oeSkV^
zCi?|b2#cY{rpqMLcX8)TVm8Ab=&8zTPP4t1PQJPBT66R@>_YFY*!CwXtfeZwCs*38
za&ldA8;m&pNmg{ojly-hwBo8BAn$y7KlFC8K}KCM%=KkU0vV`g@FH*~rOVg7hv*yg
zcs$^4@$XPBT{ml2nZD{L)pzCG3#<!~4NtZ%#456cap~Q|R`)ubU1w1uz#V%df>Udf
z{1Ed~W)lj9E3yRh(;0TS3oq4$uI)&7{XpjBgmX$xcRz!6KC&dpN%+K4zFe<UAS<B<
zPsWLWPpa5_#+NjZvJbwD&_qlu^ndF0iGX%pLm<!H8!yXv2)CS!9|OO7Ijr|k7JJ>~
zP38xl$xYF<I0=x}=1b}E+ySb#h5=hng#u-Tg;3%2XaFP{WNA0VnNrr*)Qh@3J|UEz
zt-}c+Yyq=%mM_Pi{hGLS`~fHhpLjNo?Q!@uTa8SCjK0%vz2sV$_E?*<rcEtaJtD4i
zSEmRSM2YqL8L<fuyb1*4C-k4eM6nXc@HX?Sn?BuVz)Yq!;6l1^v7AU%PrjijhW>i>
zw2YHsFX~4u*+*gL8g$Ug_+(k`JoHJd8WN;8qoabp{PInd{S$yjw(?bI(7X6IPj6Qp
zWlaxQWOgD3wsWe+914T_=vQllWD_40=X+TK01dTP!JJ<8e98qmKB6HvY-7yQGig-F
zuBNgn(${vG=&Z6IVymI@SoaL4?K=%BZ)e<B`R|z?QulQP*?q(~I%GvveulwK6?e~s
z9PNA3wuk;bBrE}LHd;D;kcj)-%q96fCuvt9wUfLyPdyaugxs2Q5>9f8&HPO3jaxM8
zj0hfwSE_WL0<&)(X3oWZ`4*nzfi~UolUN~6GknS6qWRbL(#c2Nv|icWXLWa~yY}Q*
z^>O(ay{A?|;)C^))Az%B!GaxUmhFFLlt~Kj{d}_gxB+mrk!|jtzPQJbQ`5^Ax;*)f
zGe=Sx+j?iP1KPdnCD7aZZm7-U{vxO!7WenqB?j1kb^B3||9&hiYwjDHA03jwvZ$Ek
z2ZbmpVFffsr=I<`IB^rIEi>N2<KCvxp!_r(IBgg$I&@?yZl1#9Uvj<s*o)T>q^_Nk
zye9j>h2U+v_)4)lgWOQcLDW@!TN)u!`N`kwrUwodZ}CLr2T5xFR?@u0+VJkDbpP8I
zHR4TTpSM2{5WVg{EhR!M@Kdrm<)G|-fV`-f8FzP-`RtR^-|Rpf_SZMAv9f1;{i&zX
zLDRb3tM)CfAbsI<6zA!f(;1vHoqc!P&t1{}rWLG>EJ!Q6nsJJLBwaX~&EcaKWQJz~
z{KGHs);fnqV$z9@j;g-!pKYfO*=yb^ZC<Ageg5@%x5^qSJ)qm+w|$f_?U1&b;s#g3
zlD;^+y85sgFqij~MMGa^zPSKG^_I2F{bsHe2eTNlmdUtg>9PdOmC9PQ>HX1OzY#cH
zNK3e>of1m1%x>u`*A(?wvl;3JJ{LT5_e8bDVRn)m;DQO_@brO?K+kP>P<_$+s1X*f
z9FeXm%ir!na(YKcm+d3YEl>7-YJ4tdwSC9(p846bY`gM!H;){OKuy$M!>by%G?AE}
z=JLzbnwudrIuUN88lJfmVz3>#k(B2wu{<YBEY-pC<H@gw?gT#_4vL1}TBp2VaRkKw
z=v4oPVl^2HPO1lAN;BliSQ$7AmWSxVeR^&#3%;-e`>vS(q&i*9kzlhuvK6rDa`-7z
zn|XCQ=FzG%VqjX)syDDza(n4wAU|u%us^54;76@H!Y!7Y;y1_HR=DgIZzE%E?<X%V
zxw(&=zla!rv%Xq5d(+GXdVU+=Eou*#mb6=58^ew!{wk+sghX_%@0<w8o0a4nT7<S{
zwO)VYx7HSGv6gi_Bw2mXJM!V$VO@9^w?Bny^-_7bim-2R;;@VRj>rD9iHlEiBDyCB
z0<Wwjuyjr8ZyQuv36^#>0`3BxOxnCwSf-AZG?<2cJod=)Y~1F6eTUYj(3DMMp1ya%
z(bB8P0HI}`nM8YM@D@}m-=`(_@Kl4z@oTf!mL9pSB*jbUzuf}fobmK4IZQ`oKuXZH
zFFuvA1>y(38KJNm6Ac23=Ti6^`aFA$Du;VYv6X!KCSLqYhquQvJZO*-dtntQx5;Ga
zw;+O#DFDQ^J%**Go+y5MU34u8F{H2$zk8w>gHjI?7{`AYvx?=ZHdnM-IFy)2<rE6P
zF@R9F`#oa=RCD(ik6*UBD-sbyuYnh$Aw~~E0MDC$c}R{jA8WayS_d?nFzQ{W3k5D*
zNGU<Qy6Gfwp<&dc4$AHCRp~)L`5Rh!sbUqlY_o&Zjl&hq)TUkNTJD{P_qifJ)DD`I
zCXUq+3jj67QR-*zA}-A-ar%SbbLCurTPe2Mw)hCTQ!slqe>LsdHLB%&?ASBE+HIU}
z5L@Yq$BL^(5dhGBK4U;?)g_91Y*EBmT=|MaVaM+jqbK|aVBmNz*UGR$v(Z-j{i$5h
zp|@V+p-K1&)Em!2D%~cQ$?-}U=;c(mRwV%am3yICKzbMOsGmOmxtU!u=e47yysuNL
z$Bgo0_v<d}^Nnww+7+Eu3E*BjcVIX~mVGp^e*Wbu?>C85J$Z5W3V%mW$;;wJ>LYLc
z!y&~7uZH$=hyt>cvymw~7DoD4*DxLy3MtshM~`>s_0Egu<dh6%Sc-3nq*tu--VoRN
ztWxAOC6+a*`K7%&65=knDV!&`eKjRqOQpKVukvO-*INuJc}2LVq;^2Z*1^AA+m>AC
z0(2EO!Z%W0HGIqZWg(72)Mkd-ugsrD>5J#sftBb{SUt^h-8ynrk<<8z<}tn$r2f_=
ze$_?2MubO&#ttOb&<yyv-wyxd>+QyEW!!2}qg|Np?t16^&b=wZd*Q0WwR}VG$5S+@
zOrKs}>Zbj<1Gn^T&gF>Yy@VzkFeWH7cD3#-)*kA9zPV?ur+GSg`RmaL+YVYtmr=rJ
zCiHm1qvA2!YQU!n7k^bdwxMB;OZ)a)mEyxjZ@kB<Zq_s9Hol!xuJe<+oICMlC|}}E
zYF^xrR}d)wzCU0zo9Oo8lNJ2o%G@Yt;$iU74xgjgfjgi2L(<)Ak{Z6+{_<3uCJNRJ
z-dw_euEU}WD<fE69vF-`%hHp%XEo}`AN=6^g2<UGKZ2#a^H#sp`v#%1E4Ngpno{#_
zt+?&-8R4Q>BOUsDB?3!UKxTVEkYCrX+bb0R@KApD+2Pt-?b$Z23)|3ysZ^EOTi;?g
zU4de8#fioc$`E^{0@s&&W5TM=wr4*=iMo|i^2po5t8TOd#vw@lfb9sSgX9Y}2N#g$
z9#hh^#S=}H4TRRmsjQ_U{fEk%)7K3rVh<tgoAMB(*>^2Y?dZ;ks#`GRCUE5NW%{RY
z_IY&q!@j*wPaC`yw2rB)#;42{_7Z5opRk*Tfy&;LhCw*jcDMYH`5M^K<Sp&-&*pAN
z;=+ASZ@G_tEniHfE{OuBl7u_wMdnt!AkMNhTXAEzSu>Y4-cWJ~KUCph2b^82Z`Gv{
z8(LQEIaaeS^)C1QOwZ2D#pbEs?t%XMzrfR}TSmLGVQrSD%XeeeF@`?i0La_TnM)#b
zFMsXMU?0cLCNz8}&M&bp4YE&zm5V;#E9EJ(u5)o-gyLH{TvF5W_NYSQ+h2X3;Q}<p
zdd_QtBtDDZBt)bJ*-=<42XKDjixJ;)utrTz^o)ZgjxkaGPcPiVjNZhI*8&}6Iz79?
z$*d3jjn1?0<hgAYepv{9W6--5b}W$RTc^JI(=9sGO%f}!^LnBqMgn*2yF28u!Y<d!
zdfuAR&rfJ#Bjx!4Qa=rl5yR9_)^m1_wy3l4#?V53ap|-`hJy}IVxMx5UV_Ikzi(7d
zoPP80xw^0s)VjHNgkY}B>pHYX@BPJUn%&NYwee}$*_&Y?Nz<0qv+E0uy_#XsEW3JB
zYGAcwcTA3nc*NUD=y?UX2YP)nB{jm*hPtySte<re#HN7!-=CzA`QTL@+n_g7<}+*S
zPD0NG5suf^6dZb0ZVMC)D-cf)Mf|n{@uc7I7s)*pZd!RdKdSAjSG8)Ip*cLgt2O6Z
zR%m~pY*bX+pqy10GP1ZW^*b&ji5->p0%;z~Mjr40UP&*Yz8jPXQ|uq!SbO&iS{S}f
z)qXtE_0GvSk}f^pbV;0z#rye%1(q<K-%(ap;kQJ-e^q^C`+j96+te=F4RfPIEp`9;
z^FR>_?bUr;F?wz)(+$@V7_L@{M}^gW{1JL<v8sqWT+ld~Yn$mHjOQK%U^pn+9sbKJ
zsbEIu6`83>c(?Y(quM%SY3!QIRrsWBFLYtnDDhxlDGY$EK(jrTdOj3FdE#qYmp-WA
z@gU?>Jng&LLPe|lP^!FxqV5GC0X2W}WZI4%W?z49WzLRu+#HX5z>7SX|9)j@Vd|uC
z1oG3uqT@)D<%7z6p9{`gKb)Op=O<RHpL(h^HU0)s{5B&nJcxs|uNFcJ?3`J*UT(aF
z9osB>@(eE=m?BR{qv5d+_dTwDpS-s^DUMtP!LtrPpapx@-L`eL!yp>ADypusy(JxP
z>8pa>*#6u;neDPDJ*BfT1EaR(Wsm2e=&cTiF%V}v)=A*-DW3E~*vo~KPBH06@bek6
zO*2hvtc!I?sTrCV%dUgf!g8_2^s<so_`@OJ8VcY-t;6;3t&xYwjRbh5BIr}(opPS$
zmgklSr;rD2u-&sYnXOlh+Ar=_z4+d|c4ex=Sa<Q$GTWonMk~WD;OOPwsv}0a8L(R`
zO1hA&5b4ES$6BFRy5F)MPdD~XzR}&J9g|8^U-u%2wX*$qOx*Qz?%~s=XF$R-7I&W!
z_gzlW$A{ik2(igE<V*w)=~LzJG*#{MWmTu_4atOm32_E4Os6!QV|{HS_N`o@Sh4?5
z)873c<&t}gtXN6zG=OFPh?XV`J!vc{-uV)chljDFlFyKoTiTh;?rb0h=by7O^4Rio
zVKTgJGBxmndHC_quhIJ0`GXfOC)1R#j$HI_wJBmDj}`EWUZJ#=YWB`Q5ZvQ>ZT2Dk
z@RDxW@p0nP%hP>D3#R?pz6#D%j-^MuFEaUF9M)T!>-U>Q1<-b%>|EMb(=dEq@FX?0
zu43WX)Sb+)UsR+lLs)MP=NmA809oZ89T_=0{PZ{fnPp<p6YS&$9sU?Qxxc6I*i20d
z$KFHG4_u6d^SG@UKbVG#Cv^(I9p8{elSWHtdKwm6^J&)&=yqDfgJb<ERuE5Rdvhaq
z6v*;(zSz91=T*T)i_z1uo5we8yt(`Dzb(y`m6|k*=vyo&9+cj<Fv;-KOAFe2b<hXs
zKOason+FPOkH-FZE>ffR%;ow@F$J(3LSI?GDjpTopHn970Js3H>d1U#CoYuU6mdls
zS{rg)^iajGQZ(=}iSwMh&Hip<(ac;fbED$!`^CY0TxrII!V9gL%kGEkI#2wPZzq<e
zs!O;{xKXO_eF)Q>J-6??=k<M7R{Oi`lTOe($>9pCT!-)^e+{Da^+a-~{OqmWhxhUU
z>EkNj8YfLo?SFncF2XkNa%P>p-WG^F)u!>>xGyx;MOvBKy8oPBz7XwnR~a_w%exml
zSJjK8Hl-AOw+ifS3oUFB&h&5eIkUY!v23i>W4N$p$gP~@H5fRRm6=!Q?=y$Pj?b@z
zhv=ziyh1O0H>ByF{jPoZ4hH0ynGv^<t$Wy{;Gyw&h;-%K<j=F1lSGG;pFzjRV{s2$
zLW<PiTeNPRhevNp(>MY{Y|(eME5?v>IP-U)F0=PWNw_QLg@0#&z7#KHhK?M9Qa>e^
zW~J+k*gOyqsoV)+4!;T07&7g$C7O|Qr1pupO9}n@vTY$<mZvZOoW<OdqNIGE=Q<4P
zDk|7<mhM;&7xiH*c+;Q-ZaI}g?mBkN=vpi<EW<(_VYZLNksH=~)l$Gr9%ed!-svXe
z-$9{oR-BRm{gcH9Xy)m~<pT3@PtQXus;|#UqswiY>LgF;{bMbvrgzppmVSJ(;kUsN
z@)mZH_CQkIHBx0`+NabdfBK1bjC*(rN57oBOTEQOx`@8n`l9~rA=U$?wt?NuuVu1E
znz3>Pis#CSB4<JFL3(ayK@Qk$=MABdFDNeCQdYa4haJ=OYy!W(s!+~8d=YQ5z_k`1
zasGtKQXqZ51>qQ+0!#d?ZK$<#V|#o-sp)(ZS}zht)c%=ge^OOD8>800x5K+O$&7rz
zxpARV4P{CI1sq>JOH9UDMT@mfa!JqP^PIdVikxzM^)rfq#6!#Z6EnQkOsh{i1Bnq$
zIcdY1G-?T~o@TzSzA7<1)LmOYSJn;ge;)mOnw-N$v=wyadqJ@~EPDpFX=_c)?XfJA
za#3zM)$ek{?%CX!@hcCmQJg5U;wGoMkprPhkm6-O{2WYiu0xNVKR?&voisdl#Zk$~
zp$BvwR@h~^q}TRUu`?LVG`_^Hm2vgxo+PpR#m%ZdZUQunxGmDG4RmoPLbu^h$@6+V
zJ;R>*dSZM0(lqxVXxq?GVJlBt6lL+J;YQF&;7T0V^3{fHt-WC#g_h-_-hrQTjr>yT
z5ugs17qk|&2u}oh%JN#*t~qS>{o(9;UVsj9SKbKxwYSY_9E0|*H<BW|^5e9K=mr7F
zZ2hzqr4!VNrEdU1UibyFt)|hFgQgD)o%~1*vVLt){*~}N&ofy4WVPJif=f(eUxhc@
z9F>CJ9KAe)Br7h*ew-b+YCZ5V9k%3M<SjmDzmdHTxGPK+E={EHjG7D)WS;Tx;AI#6
zy)Fxcp0Mxm)%g7zNz9QU5IdosymV>ZTikZCz4k7rC8}#IU>uW|8YtfJ*|y(h_L5zA
zJp}3lgWL@+D~&9~BY8Vn$=dJFKf^KBXfR*WPo}5U^J?z-d`OKBcPV)19Z9~%CmMa@
zj3+NZ?z-{wVahoxu`W>jw^OJaFIbz)QVSAQ`3o<>-aHurr*I5+b6$_4=pFOcGP3--
z%1c*Ze7nSW9+2=2e{f~*JNp4nXKc%g#RK*#T3Ef8f?F}oHZ)U(Xl!3xv_6a(v9{G=
zfAkP`=?&pBnX%Z~Cwmy2@9dI{(MANO3Uw*8Cs*xVrXHWBECv4L?r}&<?cI#{bgOni
zoQV7UHf(PV1%5tZEHSc>V!CGZ`4E&nnvI)2Df#liwRtxaBJgo<UP<me|Hn1XEvk$8
zAx|p<>peXalI`e`vwOIt^zE_p=3scsd17qi)s~nerjzNX-aQkG^6#Bf8holo5YdXa
z|57|+?E&>}(^eVQ%r9<QZb~K^@;+mRUiQ5u&{IKZQoGPE^G@f*wNIKUC5xYCcY(<9
z5U0S>h@uGG`uY!B3qg~@+oHvH_pyr1s<aN;_4#2H%5Z-TzmJ3n2lW@G4*>vBYB6tF
zO__G@(POtAD%NXJxc#Hc(0lZk+b*02iX;?5lS!C0mp_<}(arRTDzc8?ZTi6Xge%v|
z{<uMHjfjq}nxu}_m*d%$D^*J3p+O!l_`XbL#Bd<&`g|NhHGnF!T%_yFKZdl?t%pCx
zAFo_P%lLjmpY?5k+u$AP9+^d4UcZq1!A2+vRgAU-{Jh#S`aJ2JqAfA-upR+USstiN
zs%rK+5pf2!(Vw+F%x$2E+Q55!T)Q86_Tejcgj`CGtw^~W*YX5LzM(ofr`MXNE1^uP
zD~{v}699DL2<s$2YB;`nh;w=He>cf4;8FP9d2Qb}-6*?&Ss`RyAtY5H#6_VbF#X<t
zN_etIa3W2Wa6f!#Yc+idlgMOQQNDs!@inK1Ac}~hlyn-Bt+E@kZ^>>TJlwfGrj55g
zRA6&n44f6)hd=R9^yyrsaD&z`IZXrm+s>;wDY(KlDX(2s_7(iipBONqmQ^YqI}n5=
zdgQjO%#fQ0O#KG)D`;2m>pPFuSbW+2?!iBlz442Syqy*Pr9asQHRi(KG+yho2F&+g
z>OUYZSHX00Yd0Fn*$RfLC|X8J_clLG4>iI+E1*l6qdbYy?l~6)I5A`pNFpBEvd%s@
z<fojao{#9xr~jgOQY<NfRMy#~MtnsR&n|W;ifw<HY5f-x5d5XziLx48ABAggA-4pp
z(i~vWC>(TwC$h>ylIjXGivn_RGjw9dT7r+mV}V$gEu>^H61scC5p&QsRF%DX#ON8%
zT<6vLb~EzFUh7QCv^BF;j`e`=vC6JQqIE^6pmStZcQQq9Iy#H6Oy&v}m2VOqq17@~
z-O^r0pHYK4Zn;R<>7n@Od^pCLM)ilntSI)XPVKN5^lzjPMQG8hy^+8;<*Z4taV`j^
zjbg(kO0<+Fxc}{R89Ff|U)jqRo@dy$0f0{dT|9HEUmMG4JZo6yU^b~PeX>KaaD+HI
z3QB~M!-9Ec6X~%yECA0##!hqt@w^5JiA@5!TkB*=F3FS`5xsBlhj=S&VpB9Wd(VYp
zMg>#v{EYuPC(Gw``t(E(W`xX{6n|cZ%k(Ga*)@RrZ&~^9E~V60^J!`WbM_BI{)PAZ
zzqdV6AoUf2w^rBfoY~F!XC)HqP}v2auIc1gExZtIw-i$ySahRVQ)o2Uj1u%OWGf`_
z*F-bIvtzl6TQbpr+2tEh*H<}r1Sm&xG~gL`z&*8%S$34XZ78*l$q8=L#0k!RU3&f#
zA>G&+dUfS$DyxaJh)7$T-f4(qvvjVghOQJ``Am!6BZ1-OW^`VSUV&e*&s8Gn(N(;!
z#N89)fV(F+OJfuP)Z?=vdbN6wc0Xa>mcy8UF~~Kf6h#z^>>MTvlK|xZvr{dzKQWc+
zY9aj~KQR_Fn@z@bhmjA4_KwneTPPoiI$CAMOjsgvZkQ|_450A|-vV7`GBbM0LolYO
zEy1tid$H93eE^@1zi1^UGuXsHLFb$XBXCzP@GwAWoa6hZA%*6xYWF0Y2TP(vagh$B
z3d#kTzE8JzlO!&Ay?vJuu+>xgx*BXR>8~mUxzXF!%Y$bl8>dNIcGO-@zoJ68{WJa}
z9TYA38^UDf8+i4pW`~r9|BVL|>ap9^?nyV*J0(si`F-EBE_am_pXd^5_{bmpu$cB8
z!|ON$to46bEY&QhahGQ~FZ4lz=z`t-`23-&f2;g3S<y?XToUc0((}%IrDi_yoTHtg
z#Zs@`Vs(Y=2*sOacAa_`s^gWt+y`gtORKEIE0#R1UCQ?FjgFV1Y_|W2sF@jL>%#-{
zo@Ya_`&3eOND2MuW6su-;=x+ZwtL?5)0wJeR0!T4u^jTyaJYQ&^|nE6E@*6XFf`YG
zSo5C?FBGFLZF7}^Z-qxKiQmP&+h-ls{;x%gRrl_Ml>19N3s(NjM98M)`8@c$Rq()z
zch=Gjd|7Pc(3ilR;{b-$S}p8&s`&pCTPTpkMysq2|EI+I@ZM<E|B$RQgRE&#{ABwa
z7@&jpKSg4Kd3#8!wSUfJW3DQm2E4NNVQ($ns6sHBzf7RbtklCf2L#BZ@=e7`mDe_^
zA=Jg8t*T;n+-BXgY`1>&U}`Dc`@bcAyY%BO?!*3t(Z&*#`L=f{_)hpg5jkzImV#}=
zTb6!U<0|)qMjOje|FsBiR!pO_q~MpTnM2I}iJwZAuHOoeThhOa%iHH3g%+cXxBrRA
z;#$)kzO@(8`f_vsLv{eS=0pox-)IcWLeI2NS7+zJyDIP&=-!XE|H-Y2eV<Wi8OmXM
zrgYsVym6_;8uwp|TmYru;}Y?l^)mc_7i(smVD5IuUnRL{qtf?t8Ur|7j@~BerTwEP
zqlZq=DtBjoJJE3=h-tSNWwvctx^5Mox)gR7m(N%v_D@9cmZcZ{6`2jF`t6Deuy?rU
zvV#L|YJY63u>lomP)4+u99{~x!Pe^Kj*`n$K!FCH@&=yn_^S_sZT_{`IAwx&wU5oN
zQrNISNeYn!UTQfPmqJ$~;SPjZX{~5I5{gvS+j5Tn6>fq*%+rKgM+8zoU|hn+m?`hJ
z<2ukc*Gmn&=F@1$5UH%fGu9z1l&}3xYo@bW)hg5*i<OA&VAs}IL?TIW4krfXYSmbo
zToY@WAeRxy8^b-e4zy+(@>m24?u-|9-=25rPz~EEqipwPCN_O{ac*9Y&gxE3$c_;w
z--a2=2kZLu2vlJ>A+3yNyDCM3I&SAN8uC%IjMh)Krf^UDQLza9RQfsJtjrl~3t}7q
zS0d%u%nIrTu;#|A#*Z7+HPC-zvhIb5=8n4X1_x1g51fn_?R15Q^&_D8PsLxq?9=GS
zr%zUae!)^1-BZ#V;n2^C<*iIEzqM3%-c;52v!kXwQ9Yih3wo}PWKos$X^goQF7HM~
z>ukSx2ikRA?9<?Nf9f1&ARiKYyOl|E@FRw=s*ACPtD}tc1SaboHBN9Lz9s3wG-+I@
zV~uzRvNr|wD<e-`0(wZEr8yaY{)NeVnRy||mr22oqsWhS(Qua)yN>;<O`$-)t{THr
z0X?bsWQrA4Btin*VTo5D-@&f)Q0s`pcn}#v386C4m?L=6(Jnnzcw6FfHid>qAUWGw
zHZIO*A)vOoA{69Y)e=9mWls_QPHH1FQmB$1kC?+3DzIAA(1a;l#AFNzuUTPm0-3A;
zpx?$rB<NMNeas@^>=+Vscvs>#5J=ifae1oB$$!{|Nt8f~*zQ_#8hnO~+vy%sW-)=T
zYq`gpdG|QRL;QYjAbV`>XqwbO1Na^@<&;r0kN&213gAz#EjVWYzD$8qbZAC4E;OW6
zxD4fI{JbI6m_CY#s{q8Wd+b>`Zj~3(GMG~5;P!j&D-#>^AgY4F8a2Ye*-Dpo1%I)%
zL2$sWTX3MF3X}P9EJ0z8T}m>cs)2AN6(#dvfuFG&iL7AbRpbAgT!E;9Qe$bKFar`U
zYt3)fSAmA4gy7Z<sMUOCDwfDknCVbp1%^<w5V$UV;y&Jx!cTq7@D{VnZU!HhmYQmw
zSWeh7IIw%B^?K(X5y<2CY`k?z`=fiAR6G4jj$>hlG2Mk;j)@}M8$)}zIm1t&-RFI%
zQnOLJ1RhySY8Gvo37j};NwxTOF%=m`ohB|y0e30Q*kQwnH8SM?iKvY<PTEF%9W|_6
z^9xKZ3v-+yE=k$$HhseWe_lkpLn09omO$Dv!x{TrEw_shcSz?A+UOho$d_~@DK@7L
zUB#E(L_r1o^UNEma8;7O;#>7K2(6Cr=T{~7@)H!~;bPPW!Kn-?KPx)Uw%(4sQu#@2
zcguxe2k>J5PSe!*-ITaxYAR-~+Cg8c@`4nQ*>Vl7K@u?FvgE1qHE{IS;kFeYVz(7f
z=^QoXwr`#$KWvrJcqHbm>j+}pYLX`*{Zu3P*SCH#yajezgK^+VZf_nKJI+2%?MFaZ
zFK01nZy|+)Bk12TS^6jp+4@imVQZ#>R?Kat{-7N8W~wHFDh<kjjBQS+YuE9N%~rUn
z6b$m%?0Gf5rty94a@><}<o4khj~#kszp<R|#^`J9a%J;2sgbfV2c3f1{OA_GrVkrP
z1n4e`(QlM9;A05>j?Sq_1cU&!WwNY<>64mMEK8_rq?i<!2Z!gep5-_x+(5kWu8W56
z8oRa)?Ih(ZLJ$Ff!tOK;K`bYhDdJ<`z}DgY2rOGU?l;9@46a_S#6Sk-Ffj;)W3xcg
z3IfvELK(+sWg=N}=O}~ya25;h6^?AN;2)Ugx&B?&+}q8DB$Jf!Xky@{5-x;QN#Kin
zX8%frUvPj}3uVxNYbA`^MV#gN-}SCn{CCNTb#fR2WD_ANlKJm+{+sr{IL0g1<<8VU
zyl+e?Bex>BT<^K)SG)QuZNWQBwKDbDhN{X}Ty%URg15e70-K~%R~U!8yzgbiwz-gw
zx1>*M$5eNp{Og}^aQ%tasbkKoOjSV$+ZIfj6Mj^M^yH5?>UI@}0nk8fOsy0m9jL;&
z6m1rzmxfDaFpx;SVL+2wE4G?%mN<n-Y#lOjUX-bVq>VTCE<64VRN2rI4$1lV;s^M2
zViAv{f5-CWVO3q%JM(4;aPhQIu>Cw15wrbm-^Cu?zi)O9c%s!0UxWZiQk?MEb2uJ`
z&sZ{n#exk;8JS^B^vTy@IeT27Sw~%g;KWUEAkAnIKGN?!L<ctEYPo~QBy$75=t4us
z8V#0RDyXd+KQIj7M<^I~5l8}_L$gyo=4}xtm{VD1(dB#;MMa)2Gd4?cia-7h;t&Di
zq#EO2GqW*`+tB2Ez3!{|x}Dkr`TE<7>C}7O!PjNJ#_!x<1+k5BI`UCZRziMFGUp={
zc&1NMrV+a=xf&!IM))2)ZF{7=Dt=iZLMy;OKmNxf!i6_Y$?`t`O*S_Ez#jj4&gGc6
z`Lrp2qk2RY`2K&MG(!>hvtPS;!@Lsqzm6SX#hx=`RXI_5cpty<ZX<(L#YOOrHW!we
z`FClsMNr4CqBhS1*ZCM`+Za&>n8H0yj0v_X06DE@m*qg}A(cTxqeIP8x;(aHTf@f<
zB!?L>oG7fRMrimqQao5CH*UECj48{eb7S>=6`a=xp)u!pY<I43Q{^jFe<Vvejin4b
zU6`Z91`pNn^bj+5u@D<0iBx2Ok`xau+yFxAr0}-#0uun8sYG)MJ5?Y;3>by%9-dny
zpP=wiOsISjqUcDMZg^MK9B^)&EFP>m8`(%OnqJ@M!Al08T<-v5cXcR|t>Wm!T>@Hn
z@qofim8KnsCpj5J13QsKRgw{vhbpJ?j+=+Z0l=`4rC}n!wJ2wdVh<@PHrBq3Gc^1i
z5sK=`i&dZgtplV@&<a+jY5j$<5OH`1-xDZ7Tr3z{(ZtnAY#|#`oU>CR9JHcpb>d)6
zONW%B)Kd{>{D1kv*1r6WmV~%{@tN#qeya#&bGF(Wt4XwNMf*eWY>GfmDqNA?;00+-
z75fiJT2;ByGEmvqBREHqxC>*l#A=e{4l|g?3A%@On1;JIecQIVg01N*7^u!HLZ2K8
zLX`peniMo5hC!2=<S-+IR5EUp-3x2`jB#mYAQ<RHeo8$}4iT0EfxtU!{?ZCaN$pwR
zQ)*$PQXrY9{YeIB7e7$tqT0~|5!&{9ED;>Q8Ae}2GX)rj#H!+fgmDs*v`pb@6$Q6D
z_yN{Z$N3qG|2BNtpEv$(`Q4mNW@;Lg?2etG%>K#$Unm$poN~kQVop5cG1w8nAI$SR
zonnZ@`~_k#)HHG0;;*;L<o;3l%ANN>=#OfTyQlx;E;*RXIT75kO!`a_nvMi_H_rX=
z`wKtxf$^Y(i}JMzjJGUGKyFZTE%9umC`w*$9()~bMDm6CP#Y}qGAbrL-~*)}9dw7t
zA4ovcABPqG7l(!7xu@gDv5?5dPCrsmf#B>cpQB_d@Y&a42TI5ZAecRZdyx$oXBLI*
zR0o3R7L^TJW8xZpS6<>j`dX0eeqL%lftGZU4p!Rmp{mR#;-Eu3Bs1qdY)U@1fhD#3
z-vKyZMp;u${sq7>W+Zh_Yd1*~T@Z1qlWRI7WhU&+u9AQScX^WT!T6oyz&(w4A($eH
z3zy>HC+>rV62nMsB8RndO)`wBdjG&@z~nnCMJkC%H?zt$WV2F4f+Pbzh<N$w5BHzp
z2fjs1`qsFTeTz|ODeBI4PU-sH@c&vQ1vHEJT|?3J|G7jf90=mcw%*Ia)GD$uyDaOJ
zO!GE1ZzN-u&*AKafS%l-9`F<8A8i{RbE;q0GC>Thdn+d*_02xKa!on*Qb!Caj;^m)
zidd7d$Fg4d7~{RdlCm^f?40~RBzDv*TE3?>BHoL=y8jonBs!6ROFPa0ljgu?iV<cq
zzBe9FQ?C3g?EW8uRieUBm7@^Qk2?wX^&aDz@{fqOsCDG*dO*K^&W6Q*WW@;zD+t-9
zPw=6dzgPzuB16FbkN;_jdTy*bh0DwB#E%Jf>V4`9gFiXDF7+=tV?fQTIe!Jx-ji{}
zMkrI`l^*aqi~OtqE6}AtG7U#rA;I4l#kcqV13Nol6{h<{)ogXXxJ{xyD}TrTyK~Ca
zKNEhn8UWhtwUe<-owyemV=P^tw0M}sHam_x84RblVq7HQYNT;2;7@^E0dvBN8DM^=
zjnr=!F-q~G(HOmU9^gQmY(h~J8R$DBENj@XriT9Pr$1Y)a!kTT(Z!mVTJ4~tF1jcV
z9D-5huXW4>8>0AejHuNVW@Zc`-0)RK3An_9<|c!=a}yWm^c+*gNidkM^HX7h355eD
z=bTj4af38U5rcWJkiMA0Bz-z=khdwUt(^R@u$6CLY+!7E1_(|-iQ5zlnDAQrUuA&O
zsFPq_K6mi`wz0d8)VAc4`}__QJ=_-f(-w2*hww^6a|W|d|1I*={ZAuL%3~^LgwQ`~
zHoP$T2E~KQ5urtTiJ(sc^+|mc0oW2*mDNbOY3n6ojyA$<`FDtk<b<&rjr7-&CWAM~
zorqyS>NF$7ypzJPVs7RgzXJF*{H7%Oh)c9;&*)(WljWwKXL)u6Ox@S%71n{EkTd|c
zr!6yVdK7jXkYd|H{YOYi(?y^IsroPpIKTzImliBHkV<&J{cjN@tZ0D#gN!6KZ61(=
zO$vbmI$vDGo0L!s3G-vNcy^muf?~PO*M7zQw@faJ!TiplFi-rlBsveRLejuyg{?ij
zna`nE`3$QF7f!V`l1e2iL=AvNsXxgPcy01flTk1ajRo)<2-#CEt4zU`(Jr7iN_Xd|
zWTYxuF5;VTuv#VOjA)q7mNI9{7G{0UP^wKBE+Psfo@lLLgb3@=nTO<zWsCyx4ygqD
z17Ue0XA%Hx<~HctcfpUOYBM1b!*v@<unV~`>Wx1(Lq{g=Y<{Cr`U3Hr<;VnC>Cs)R
zWhL{U(0sfV7~wBTabtkU>ZJ3-PVVzt#4zUk{2j=58s&8$zB`Sqxr|{T0mQvO%%4_#
z;x(EviQOn6wR<@UY0pOE24Hd6r9XESBH=sO;c{mB7kD7vb=iy%7SDJ<CDbN>7~wMw
z0M>F--B;|WgL)*(;OV`?U<rmK>F*nkKH<kIlj;eeF@!>Jz!}s%##3r~5FltRm7&7)
zKU|#u#N~PrICU^|@2^Y}$*(kb|GXF-5AE6hlWj{<5u*vu2mU49Wiea*qXos2f8#F!
zoL^t)Pi8E?_gU-p^&JoyZ)JqyU4JzEyI6cL1PEMTT#UL+e#cl#Bgn&TP|pbT=V&*W
zENeCx00_+&uSt4slN&SKlW_o-qDWwexg?Erd=oMk?R5ps%7HlY36crJwvw~m?T8Tr
z&*aPzV=Q++CQ5^J-}m89V~RM81<?JEkw{oQzVVheMcM!B{%!g(1eSy@r>dh=e?xEW
zOL9geE@HRzMZSSg`<@C|$0vA@wF+^UenWk`|8mBw=%{w5ELI<X*yC6IQU2@qeQh1l
zgXH<#deKgFFH_YsY`at5rXnB}8--j!ic!p4NBaK)E_^%M@nym)z$ONA!3WzWU|vPA
z72?{hHxCz;fg%PF*ZVioQN{s0M)7|E6mElUQSH)mfsw{4P7xqdrzUe;)b83(gnkHq
z=-qf36C)gk6|K#bFhgUPc|fs>Jj0Sy&~zd$Nn$?;7Vyh#uGz_cDzotaC;u%Q#6=>t
zS&T%Hk(P$E5lm5xsICB&nvKaQrynyqq@dZ1n30d??I~UcdldLFBdlM*Mjrkrkkx3o
zzeML7-1}c^Mw03m%t-5ym|_tCh@zgXk|K;6x0ksZ25W6x`cp5COSFom{(;&WDSuaq
zNFWb+F%RG8Yu%oamN*ojYtWSu7pXw(2M}AhbCa;}4&u-{*8Lyi&Sf^so^8S4$jm$n
zM|+%~+&<|fK#IdCN%3o3TqF<CZ)+|O-x&;RUi9ht)oI)wH>X2UE9QrZr0kJyU9IN-
zyVT-4dy)48@OgNQ?;s*Bl9{2E&D4}lico3X?&K=hq`0Noq`0w0s;V_^xAi-eYGu@j
zeYSCwrCVF038sJgon~w{ED_UWb7o^im?XS&zanMV9=A?;x~(q>AJ|uAeR*tFTTOxi
zi4<TC*mB$6^P*Sz8JI{0MpFW5zn99G^N@qM!wh!%`V6<jZcykShEJ5JV#g|vkNJE5
zzaiS3Db}<m0y6?`N6y2{_Gfjk53^KuGVpG?2}1Z-uAr18x8pec`d>r)RL0OgTof*?
zz!;(0b>Y>S!3pU604n-c(rYr&NodahVm<^}*q^BpA4gEcy7aO$CPVoDAMCvcSX0}&
zF1%C_5djqur7jC1BA_DDK}AGGKtzp7i47t(^gu!qK?RkjRDl30O{D~+lY|HeC?%mt
zCkaIeH31U{koL#5_St*w^B>Ojo_qiOJZt}pZ}QIXeP=Q==g4HvF~0E)2In#AqmXUu
zk*4()@=@rmf}IwH`Mdx2__n&o=}!5*O{Ub)H2=3RzVelpn10E>8dy#2kdS@5Is?bK
z3y538iJt>ajvT4o@moyXJPp_&+fy83>3&<zAOs)9a@b(LcMRV9xASV@g{h>;(lHwa
zol86yYkh4pM0{xbZh`P$*Z8i_ULW2R7Hu^3!%6(ySN!+#@fS?=cK!Ei@)iYy5u=4d
zu%Q0~J0th^nq~MT|KqkTJjwr9OhzO-_#xD>mWB1dOW5Y-?p++E<%vo~u2QA2$qu02
zs>yu*a<kxN|51OH1@2ij`NOxsL=Hb(-fA2fGkSN~j-y~4UCURI?@6xL_q`61m}$M8
zrkAf3?mtmP_!o&!2=X1t`}BR!fTAZ`x25U5(K7d&_!o)(6K@If-N~8yzE?oe)2%jX
zdhfN&|0Uv$ugPX<|8h`HyV05auLivwttP*TmjwB)<h%O57eUcetw+=TC1L|%OCyQb
zSX()W4?IF!+9!ylLIrD}QDC__acQz&(P%Ie#HW}8><5tD!+He0COxVyRi26(L-`s(
z3(bj(lU0gFy_wV?reRDvwS!>@O*iii@=N<W;LLkre!l^i5C2-`uoLN`{u2pO111Ju
z|80KMJx;;rkLIJ^g4Ic46kd9_?z6j!9*gGd2N&Ltf<Fmc>H0Qj>U`>r5o`*~Oh7O8
z3egtxQ`y8_*u%VQ_lD~iP|J2N9ws$Vo(bZoy<_wi;TqLrKej{_U*N#2KE|+sy947E
zt%q~xyOyP6c$s7WDdwh>*91%!!)788!>80BBNb!aje>psE%ep^kwK~*n-}3GZR8!P
z$z0C!3o$7tH<&JKarAg^1aT`i76TkzPp11L#!({kKOXsK-~Tw4;KRpwjSj;nuc-Vu
zmd*B0Wt#Gy{Wu5Fnw>hMGhR}T&(KXe!%i=UoiDP9o3W=!`TRE@hrBzG-nXWfFK{e=
z>!@4;?pi*8m7vT@^Ky_khwV@$!jxy=`iik@Lt%ppq-DimO&|9kC3y7rN6&dw-PGhG
zL4kyz<bNFZhUHV7tz<>GoPc<lD1J1U|CRidQYT2%`8~KusfW!wa&$PxykC${Od2(K
z>tcp&>_26H{;`YjyE>!bT^kksu}>@lTa)>Zk)QaDCT4=tk-xbA`rg{@qKW5<&V(v&
zKm6j>Qz47Lq<^Q92nZS%;qtdFkMXKP!s|GWjw?ZY?GV<Y<|eGk#pdw@;G*>wj(=cV
zi<;!H>1`QE(D?197=1=D&sRhfC<wKD;P`SG>+!oX$~b~}#0;<jZC)t2u#N~PN%Gtb
z9sM1H)2<@Nmk<3@SOoB`efI)xOWIRSQ5r7zzQ_FZxT$8@_hW`FtNq2ac0IvJWX2I1
zKvU_al00msJ*<7CC7e*f^TB@f)nul~+z1k`>0E7aWL&+bQ41Jz!%n!}1&5y)ommA5
zc|OA_RDW%rDZuUt@Si-UCR&5z4}4^WJ;DZ0!i(bs;TKx#?}5BwA*<0HR%2TTW8%vQ
z&M%0qCXbLZ+6t>M&JlzV_*2Yi)BISV6k@%}(~LUnG0=R;vL43}v5vnE|3r{EF$S2=
zd!bTe;uq-4IdN_{Zb5bV>vKfvSjDOTqG9_GbfO9TP{>$^<L36;%NhBoXZw0G=*z;(
zdxMV_O1NP45OVvy1Z~^;{hra3jeiR`>nsaG1o#HZ$k;M_*>z#?*AR2>e`?vHmpz_;
zG#T-xvc|lB9LC9I1I%xGs``(%#E&<j#S{nS@#5P9UFQ2He!N5H`rjJ1U2n}eCq57V
zCN}-P3!MckHP(-||A^+q552bS$1Y%X$31>KE+s;^5c#*A9Vz@II4404;E#JtBr-zh
z$0;II>^)ooiGucNfYUpN8-KZfmBatyB1jf$*?;{&?J?2B^F<d!owgs2yY-j!Z&eaL
zqKOto_Mzk34=3HK5^7Ptu2K7!^lw!X(%bW&-+C;hw*UH`+RdWZ&J~>w{Y(1yDhcK5
zs<jtHuU#m*9Gb8_KmJy>klJ6;zf(z^kVSf{d0Bc*-RCq^ef%%eH!5R0mLq(B^qc;c
zD$~C^3a_i9D|nx$*Kyvc{VVe^w2$!F?6YH<1Yz=4VkBNyX1UBOEptJpdOes1-X$-1
zz09&#u;9f*!}mFl3qR_ZH3Cs$KSrTUxE<%+1PohVGY%0{w^`PboXD}?^Jrq0wK*yr
zeZ&TEquu<qp>X!t;wQnI44?eoh8MX1If<iVgWw~n|D43}<CA|M#`Ko|W1~|2^7)?M
zPSvS$Jz!K?5MB_Rn%>T0@Q<zN$Y(!3<M$-u-%^PGBY`+z=-Hr`L5&>cA-!R0GHN;E
zc8G6um9pUU|CYwFZ09SerEg2xI|gnOzov(8Ub#v@`ydh+c_`pG=MWX}=a;(YlbDMk
zKl;JT{&~#Tn9x<rOWpr7(B_aL0aqLT5#Z2;T=fNLuMOJ104>PBH83t~X=?uufq?c#
zL^0e@z%h<2wO1G4xKg$(mmAW-*XE%YkWqX$4v@;%=l8DQ34DJZnt@E?&-_7JoJTkG
ziu^wEY6PWFDTQWj_STr5c;ope1RC9jM9HkioBPLI)=~YR0#bE)BHPpPzXvkl=`$?a
z=O8wdbrsPq2<4#*3?E32-5mik>4MCZK&&7$1@&X(h26>_gptqqUX4W^@fz?vaBSiI
zk8ukMl^Y<V8beXNV+IQjFHAwh$%0X-YU_d1%T9sUknmx>=pV^+4oJ&e9B=?x$FC+K
zX-wF0WN#DtBLMmspjRUVj6yGLMn@U#9(a;8DhNBW?}&so&eQK8!+44&k%D}=h0Nun
z99{CGjE~l%KVqf3IfoGvCNaQ|$d8(%N%Jks(j3=sPwA3erOeq~PE7|5&h{S_{9BBG
z$Pahp75*&JSiC~+tgcg&s)1F%cXPCD0P4e^MJm6|>MVk}^x=-rI?4uUier+(NEY?9
z?0=F~#WC?=4j1Y*vTrAK7FoFTWgnltEF17|BgY+|JukboUmO-2W^}$jJ?pl0XOW6a
z-~XN*b$s@$Y`{Ko%!@G6xq8p6+d7>^axQ)0$7fAtm-dLWpNGNE#W7M*ly95^R2@D1
zmlaC_*az{Kv}Q?oBO(}fD9R{jC$&Ns->{-i0RJ0EJg0&0nq7&=<nkd^k1E>%pWM=M
zE0>nE&P0Q3b;t!fTKta<$*&ScUH?CVa#7dRSO3m%f?A=6Z(H#ofPE3Ej6oD-g7bex
z3TGIgC?gyRDnu7wzoI~(dm;WI4b9C~4)%Ljl#F?Tn$GxLJR^WZn0z4JpFE{&W!~iH
zcky=s^<&2LTFxG|y3my6ckxdGl$2<^wgS>kpV#BZDVTbh8Lc<{e-SEW298=Pbbb9B
zNYU~xR-%uM)HFY0ANv0z+3%#HYH+^)e6!W%fY=Xl@o8DJe;Vn{><*{gg9c{(s?An5
z0na|z#;5&Rq^|h1oY~_}xvB=1{VvT`wgD+0{xnk92d((D*RxxkKnD#>`*$}JE(QE)
zq{{(`A4=lWvS$xFfm97F`foH7{w$JSGr=aH@H?X@DLs=e52sEVm{ast2_2B=8eeAG
zpF!$^q}MRw({g7Gov5k?*8M@v1lxf04}S(pZeu!>BN<Z9wOF4a7(+0>JJ5%Z6iyG#
zV+)3Ewk=F?yEcNa^VouhaLhuhbOLYsqm#E&gQ)I3u1{0y!n4oI{OrxahKiDi?fl)W
zQ9)-kRs<PpBF@F%o_`UDopv3P+RZn)7Gm<OH((V1$xU~myoiSvIRW6Yh6@sG*+fyn
zkQy#%3%Pps!q9fTz#H~T7mqY-@jYDh$%YCj{(I`?uyHr*U5)i3{5{<ko-xh7LdjkI
z?<Fp9lrO6PBcqfk&q-QFhDr#MB>C3ue@{#Nr(rc%%f-Pf`2StFig#EX{NDqL5<h0-
zx3NA`!@OnW2FV{sB{}?G9n~(rTkVGTN|(3~rbVupyjoq?E%_F4a`As5DZCf_7m+oA
zPw7Y#VZkZ>iWR}7<;PmTmbZFt7Po-dZaxp4I}P;+IlHsWv#iHSb2-+dKbDl3cx}5)
zbFA2ttm*mL_3G-v%^iusnASvxy)Jj`2+daRGeudUp6{yno?;ut>K@KVvbn~*pr{EM
z9Ao(t!Iu9?tLg&&Kbg`S$&T<zQ|6x4t?(ztXV#=g;4h6YD&<Iag-_KpZ?CRJ!5}^{
z-cPCZ1RI%?W#=S0C~N07;|{Ohhd3Lxyjyz|^z})G&Ht2inongiZB`G$<BcyUWyh>V
zBaP20WyW+gP2Oc5UEKv=i;gk9S9ReiV=JZHn69R&wJ6^7XD#EEb-T)>6jO9n2p(#D
zYE8Ny9&3C)Bg?u|Wh#z&eswLHJ88>QUEKkHW^9)6#=2uoYMGH^-IY7l#dKLc4o@*&
zi|$_C0uM7b&3H|02Tf`**QA}GsS@Um)x+>aV~dPz;#xG?*gPYX*g>82W$LZU!`Gq=
zX3(l3Jl)tjBbV4komz_mUum|>Oo}muSJ%TsYEG_6_rhP)oC9WQcFIgeFwIuiqDhk$
zOy$+>@TWCrfNwNA)}$AKIhtKbQ!PxV)noAFnzg9(>Sp-kn$y77=yt%Q8gotB37E=b
zUR^x|PpG*7%to(8qiW6qGtnKrlWt7yRay92bcX4_st-@Au>$6zyLzYAqLf$QcAZH%
zrugbc_`{l0YtjSoxSI2nEO4jJR4UVQbuC&kX~$Gw-3gDVF{8WzcdSKuF)+pc@-l;@
znvvokf9}#H1s}paq6*6V%Z*um=^p)8t0kRN9kTy^3kXP{9wJ^%&ocxB6@IrLuWI&9
zpt@r6<_gO(1GGOn3WWic10$~Cd4F`O2c}$e^U?|f{@{$eCgnL422>6F!<qKz=a*@b
zMCMGZ!dX~#Ha<WwWvRy!a_(Y9vtqe+c~4J2lwC;&S6KIH_N&a<F1fHH;U`Eq=Fb|O
z`Lo7l{;aKsuERZWJgNCgrd@1On7I~JdiAp=(<wIfn0Xqy2lw3ZoMzTql>6(?8t#eX
z8O=8`9TAge%)QWUYtrz^pS1?&9q3WqOUH|vIWk=lQ)|-KN$nPs%FOLhQQRZP)0%5h
zRb0H|1<mZFPK&8*=4I$wv}MwXc?`N67wLFbGc&1UO=_i?o7B}ZHO};b>fun1YthY6
zVO*%=DfBBqyV|5Qb4}W*HkH7<09D4tI-W;o0oJ0=9L>;g03CUgSDA;P(zvx~cnM!6
zuv&5;+=t%htII})=Ki?E`9jwJ?IrFC)yAbbTB36RU3pX8%(ZB5yW6BTQx+<Y3v)C@
zzh09jI$EH!dpq5x%9uBy>bSM2KT{v7fQxoCM`!kS%uKFHb9=jHrWTn{s1YvR(Hgx5
zUETK6X0!UUc69Y;&3pA{O?35V?fmM`n(FFL8gv6LgnSbGN~c|JQk=PQO={isvqo(H
zY3n5Zq{&T1G0#Hx;a-r>fwOcv*P@8%pSE<wPa63Q_>E3S>ZB#}08|S1bWQ3E)xsr{
zFM@M)x>Bdwm}^nstDm+k;7?jbyWONZb0<^`_n3Sd{CZ8AK)wLZuIRLzDqvoNs^Qk6
z9?TO^Ib0O^EI6~GV{mdUiZo<1T&9fgD>dW5#IgPiYm17bgR{ike>}u-@F7;kpvr90
zY}}G6yA<ANoa$+SOCwu>b1S+Ar{<Ue(6wlW#Udn^{R)1NHJMJmY&6*DZfnFf>@G2K
zcXKZ&C|O+crcgXHihv)i2Xbe-mUgq<s}-0MP!Zfi@+tZ&NV~!0nlua2X)u+>w1TSO
z;>hReYf%|o1lf%K2GW6<bYN;g*Q8S<rYBSfmrAyz=RmqJYf)4BYgRjK(uk=DmBfXU
z*P@P4O<WS$f}YLlgiYa?Ytjz(B%EmsRl>!P&FPt}H7Ixc&zccC?xPYZj(dLC&sJ^l
z5Uj7K@1`ASrVHND9Z~4$xA-Pc#sN1uZ3fV+hIVv20g@aX0{r{`=m6{;y!{)xr2&6*
z{QU(pH39$*4*zhpzqx+yexA1nU|JYvFJ2|<qy23<CC{y}u&R3Ek4}<3?%T97K(h+^
zrQ4#=(PuF>FUejUBO9PS>)O{{ly@6YUl`^fj;W?iSLe+X7XFhHmM2%}Sy??Y{Rbz>
z0XIAC1kl7l`@35T9Rn6W<O!tFX=wnu657zMR_N%x_$&`#FOYKbQVTt+tEc|x*cEzK
zRgX_6=KayZRL@P9=M5Hm{=<>=)*f~J)cquH8(?4IS^KC;fiUg*wfk+J4Is1dtV2|_
ztiM2L?S7ee6mYk&(LSn5)>nH%AXMgg1I7v)9ilL@5N(?4kU$UxNEIHix2#O@(jIZG
z>wY8<;tCHqSXQU_X-~O!c4y_C7YMPl)}FcSTjl*3Lsox(tgre3eHT;mdhKx&)7k)Z
z6|}9}t<ceTu{y8U0Y{tm2cR)fQuj=uBSawS*yBc~#R1?-XnnU_A=zs&Odyf`{d>C|
z01$^iIEy)XIu5w0X-fdO8rs#JT1fU=bPh;BBFWsUPCrWeTr~1a00>b{X&X$1nOC!C
z5q4hmWIxGo#?NUnRB|E>zp#QYV^LtoNEL$_^Ixn7Ablb<xB)5S`y##tzMqs)PG_#*
zSu4mQ$q8}-4HL}OS|U|RX0uCbczWzhv>HF90QM7WvM(JrWt^gB&8nX=>4h+i@0ifa
z9{1Ch!)NIwcL#XCVg`!u0OnF0SZQ)Kh;Gk;g4r?yUPmwg9`Zgi9(UV(5`DJnjo;nW
zZwO^lZ!izKWL-KY4(shst*Xdk6PNg_-+&*06$<?689s=<!n0pmBzUmi_%S|I%nhYK
zHGnJ!=aLd`7*Os|rqL51WJMZlB~OWn(19d=L+l}4&WI<uSyc@6N>@qd+D*+^S99Zy
zP#6=^^z4iSKc4GIU%kDwXeZ}GC-7-B@Q~fP3W{TkF$La&pzus-A%4I%?in70#kslk
zC0%o3b0@d$Vn4%fsfFd->Cj5Xg7&ec2O00h3xHpY5Xua`9gW(h&|LT(?Sx;yqS-HJ
z9Mn%Pt(f&NNS}jmsEYLy(c;#~O`$)EP2uZJF0yzqlXI-OrH~=b9JUp^2yRWgyP`R}
zY_sIQ%8o@433L6u1{7BY{Bi)@xjKXSCD;Atjq2|HUJT-;$Ew@aSbiN1oW+mSoTXLt
zejq|9A1K5CBD!C5!uSO(sf+SXrn48Z7f&%@<4XQd!S|zq2=@OR+6_c-zW=AdxUfoC
z@k1H{5^3BT1P1;q>v}c4RC17&g$!4la_bVbyK^XUH7B_GaF6m8<CQG5iBn#QrJWU@
zFl8XvDq|c=<CjuOxJxN`sNkEfN%2^naL2#&;4RM5<7!rlId~#(5c*qfU6RU&FHw5B
zJOr^Z@XXY;{`&I9o&kM3uo8<qw<O9|W@o{hjXg4oi8%(W9`v{ITy{5Bq?3D-9Fxsn
z#ENur(~0~ZDw4{O2}bl&0l|nis^&`Y3A##GS_=$Z9T8-bK)X!NT=B&ykx!)3_6^qg
zQ7|6*B$h`+Czph!c5-o8l`gpF;5es>196A#A&HbbShI5BT!P2gRLx+o$qXYL&ONuf
z5>svzE7&8wm|jM=Mt<Pl9~7C*tdh)OpJMM}Z_7Y_<-Mo#OVK8GP25cA2KeVZW8VEi
znUc1_&&Cv<-VE9kc>qJ=8Pw1SH6R#pX|XVS78Xzd0^-LrO3)BKVkr&7|HymIea3yy
z-N)8u`?H&ttY<R@OiC!FNKbwpFPp2zR%d&#71+H?L2`Zc0sd`%Bd>r9TtW`wOEmjh
z$jAoAGSh%QM<Q=Ggi@qA2oU^fjKa>&y;P`x%sxshwG9{`^xZH3QRhM(N)eACnuF39
z*WTIcMRpmi%d_8JaCZQuwv`OdNnpBYAHqxM6kCtKRYaZ`xyJO5Ej==FvF_gp8%Qq(
zd1M-ah=T_P-8K6n${WfDPO$Bl=!5AJgD#kSq$G>k=Qs$`bV}vl3`pfy!|TaqU}wQ;
z!(`s8Ua@_fbII~`%4zM#uA94e{3Wba9(%RTT%Ud2@lN%!ZC1`X%NHqs32T-|e$I8v
z;*>ku4X)3+cjT#Fv;9k0t2{1zjeo0ZWBVrOjOEjm?b^z&e+g@p$Ns#jnmVkxFI`Xp
zt1|E8KH+8$37$Sq?1iDGPW94;Dgm~gKx&Yv6;Y(Y3y{66Lcd%Z*R5J>3Sx}+&|r1=
zCHW{_fUJ;Rt4%6duGMM*+5i;oX5kT%e+D*1%>vRjca7FWgCUx9N{EnPH4JG%aD&e<
z1oICJIxzZK^y*YNj?KS^p_(RRsQBeoz+CPeXcjbw9whb?2Ps9s&nNh}eiIuWdzL*X
zGK(zbf8k-d!tA%)SKQ~^BEb>A<r0_fF3HSk_5;h6Dq{Li!`gTD1B)|?!ao2<ICt#s
zSa>9>S4fw4UhB`91*qct5d(-uL=Uf;i{fIr;%s5I+29>Jk5sNDyV64tBc?PXa=-KQ
zxO1~C9sYTCJbb|TZbljYF0z-G4krZkSq(bj-7y|9b7k<QST4OEueX8+|G%DWa%(@^
zR{S>j3r%nOy6x@0OXjblPb!4yum4N<TX`%|^`FsOc=qPi{m6nEO}4K>|KDQxtA61B
z)Rs#v{9w{+!{M*nAkk>}%P)ettP*;IUPdpnjpx}x%%}0O{yVa_G-|L@_9X0`=}Y($
ztK1KI{lXzOZSUDHCwAO+zxyR!{dNA+e5dnfHyU~H6@*FC0-N32;cv)-<Iyu%0s~vf
zUbwiGLr2c=fRFZ`xw-Wb<Jr4Y&-Yx&5~(#+|0Ln9vWeGayI-WXzQHX2y2g_5sk5xz
zB2O(&J)b(-amjBd_2KXf*VB#@7e;-y8tPv}Z3%69)9~Wg&wF(ujALL+XAaodO=d_t
z_hkJVxSbsL^bTa}J>PT>tF8BX)xt~Ur+xHWu4-)ZsgL=n8bh^K5DU#+K*&;Z7YG>b
zP2amkLqT6n9`=@eXN)BP`P6FRT1KUzWW~vAM{Vc#T#h+sxHn1YRPC;jl1oOXOmFKx
zW{8}+lJ!7p9DB~CHup_o#6nSD$gc+r!J<LR%XXJ3mv!S2TXk_KsbU_F9G!**lk9ED
zXpWW$^`W&)T_wPSu8+H@T3ZC+)ZXS59o=+j+F=_a`^BkC{hQQS(u6!+^c{(-ZQ0Q1
zUjw~;wtgM<7GHfc6>*~Xey{dOZ(Y?+oaTtV9jOJ19py-;*Q`Fj#5$C(Z#>f~GqIAg
zf}3FYBk-OF1Yw43bUGVaioNX!e*2C%w(2v}HSi06<FfXVv5kO-uU@mmmbEVr-Vfe-
zJSV$&sL{~vG&t_@sjVAS8V&C*Z#M-+-q1<tz2ad@Oi6LjBA*y@(~?c8^{_JcMcw@9
z@w)u6!~NIg%IfL{n|cdSWyf-RmT+aDf+^Q1u$)1A7{CKnrY9!^PN_|uC;M>|9fB=r
zcFtXi;U0?-;~s}eU`Bo#Xzo5Z1_+ZiXz%RsH(#NDhK2W7G5x;N`~oQb1pknJGf#jc
zq?_-sOz-TA>Ltww6S=VC{=IqOLyFFWQq=V2rLPq#Kv;i<<5Fo72sg5ngOki)f1DG`
zMN_@~8u~K>GZwJVsCJ<@lqX;NKfjNZTCn_t&tM~hXQ;0-ZZMlh;6$=c=6=~YL+j4F
z4_4O&uRd6k^isU<ykSMZeQ4u5rF`e2q1wPLweTlAQ@Dixi7VVAM&VV8&XDl_>=Di`
zPnGZ%rP_*Z&W53YeYcS3#=^<C7fUYt1(P1EoXfC*M%Tf17%9P)jw%^nGm)Lxb+hTM
zQYL*DxA8k7A62{@eO0Tc|N8Z@*#=$Ru}S%+Ja2NI_k1JFnCuzFDvYL516P}7^wK95
zmTs?)mil^ec;rm4)I!?*o;YUOJ?FS_<Q>I~m+V}hoW5+;iKCAjRfE&+kZl)Nw^X>?
z(VrDu{vj>YN`zI5%rfHkgx139_NBx0>BE5~D~56`Jpy$gyehpdGbkN?Zp7vpV+SlX
z6u6nD%FOAT*@3fNK1yL5Q50LLbL&~aDVB5%uxmjZxpTT?E7i<v=R1e2fENR1J~Bpu
z(fqxN!FLgqz?$pC2ItC8R)>p|EP^V&va8~AvX5&d;J>b1=3Jh;^xpWLk1d>^Rd=r8
zs5JkI)_HB}6{AEwpffV@-HpN~pY+1#6`@LMbA$_AKu5)9`qjXKV<pG+JMUYRSh#$@
z#&9kp-MA~^)(R5mX!9JdTTpKD3ddRciiNgpb(3DkJsh|H6>DR!+_2{rj148~xceJl
zDa{iL9$MJ8QqPXNVrh0kWzxKBhWIfqWWHQ)aDojoFex9as&|KcCb`H2)KSh;HG&}>
z99%jDL-8;VXyMk9xwi^o-{y+dU_r&b)R=kXu{dtvT!oCtyvZxxuhtUZIa`sEwfb4a
z+nB&UviwBDHmbRo-d^e^2lM6ml7S2tc5;%rxA8N+%>bfyM23ib!4^}%e_lj-UF03b
zMh77-wt1(-q*A<tqZxAmeWYNNo-uyZFO(p~F&RnId)oVDfG?h6l`^F&Yc&GBKv1no
zf5R#*(V8X<BO0wxwNqR2wa70@$W0{#;xs?i7~jE{tHI~-9SC}k=?`Ji)>I<{`s#YJ
z3=?~+M<xvz&k~6=Q4CI*Qa14Y63uf_;WKA7hxm<)V0taZRU>u9DIIu}j{L@X*kv-o
zM6;2LRn56>P<vaL0(B-}bfdNB$BW@{1bk{b<%(|$2b|pE!K&yczn;@*#Yh@YRe~hx
z3>L5Y*Bwl0z{5*#OLpyeRJUUGL09h4G3Jg!EqC$Lk_}JxotiW$J~cU#e<yfr^L1<a
zO{bHCoo^~WQhc{hL*#YqzK89ZFYcIch2}>+NN4~hDxaEM@VNur3O!9xp$WZK(GtDh
zzy0B*rJbiOC2&4xH}zIIZ+tyO*!$IdG9fobclV?8SVlZC*PD<E7*0q^51wZPEnQUZ
zI29>znz&P@=zINVr0OOkDklgkc1Gm&=O&?{P~Xr?ucJ=AJ<?`Fc((lX=Dq7%53N4`
zh`H|KZM;c3w?GKH-R0EVtkuhbiJcXtP<+X0C!bB}3FBsZpmDE*O%>mniA@!!<J)uh
zDoBr9t9uvAXl7nXS9<jRE&8<YRmUq1yB=Y!Uc0*HjQ|x8{@gqU-3$l30(_V#d)%!4
zor{Jxsn-wK!nLTx3(Y8F-C&NXgrv6d@h_()rHyfSoY9@^_f-G+cc%4j1fVa!I^Ex;
z&@Fw@>m6t#xSg?)wz%N>s(g<|RBKJKqvcm^8yQpJmbRnEwXb&V=ym3}(y&!2J6Fpu
z^{)4{!1TmI3R+)DM_!XGoIB%&;#h4i3n885rqU?Kh~=vl<F<C}&cvi*abe?PCN64b
zaH2a}b8fh_LQs|5jMDFmiVmLp91$I`qQE7;;779|%&AYkR)q#*UHx11VM^7*gJx(A
zKfeS@LSbQ`Uqh}Mjb0a=#OH}_^7rK`^2wPk^tYEFh8S3ngQFx0nqq2AKdD*6e1q2E
z!!Y#vUSrI|OF(<}XnQY1H_-e1se|OhV~ZB^$q#Jza-U9&RoK4GpmL2^Fx7Y=gQto6
z^*0V13}4^+-A?rz<nsMrxew=MKV{TTn7ouRHB`EzflzrI)_zPV<Mo8z6~Ymtu#w|i
zdc4RI)b34-`|j@wp@%QWeCs$z|7w05A>_M*miaB(hj%o_IOldLu>%@Y>m7+Yx*C}c
zKCEzeK@KF+*r6Mp=*^KuQv<b9PZEXbQ51vMqCP5bQ-_1!I7)R}f15g^9XH#&A9Y~F
z=xNUR;};v<KJ;5J(X7IZ`VE#vJu~LNN$F*zjN~pkKO@@?TNRtwj$3JG5}DjBbQiDO
z!MLeP>t2&&z?aqigT=c8yf*@kA$;L2_@vWXbBh;=HJ|tveI=7=W)ycr&|s=wI`Jr_
zDxG-Mq_^LYXgieq^3(<B))XRT1xn2I4VgiEtz2m9JyJ8lKkcaT$#;)L#I3`1Y&ixu
zY@%VJ<|RSdk8QN$X0r<Z;pulw%@UawlzOjQ70IzSLb}HE+V{KC=xZIt&yrkR0WA&%
z&f1o4%$xP-vZ9`pnVa06kzy-6c#)q-ox#Z=>L2yYRGlJktnv5?+6UB0CLNGJ!Ei2-
z$2*+1n;ckwS8S+Y)nk$LAwiO|!Xc2|>%j)-@|m&?F$%%`Q@*)rLsQVC8G0Mhr0q2c
zyHdL->BV|W$t2Sg+G7ZaPh;jrh|arsBmD=1>+B_<nv%)md#;Bsn2h3#LT8A<%gIV6
zgVYQoe*cP1nfZvkwi4d<wE3c*t0(>=i@o13Ql!bt#FLEg<m7==T1SMCRsmwCbD2g?
ziMh8?9sEcTqV5r4nkBevzT>9#_)d67Co-1PShMS~5k9;lEQ^5o?Z(JDz7z{TI|y|4
z-A!pBceDhrHZ7XeNb+p>Xvi3l3K(~M>}^SLTLq5I_-FJk;;hE}R}ean3K^67M9-IO
z@tUCr$cKe;mE`9TQ@UIw>3JMs#;@ceB%NkR3aV!KVf^Bv?VzMaR=HxuB3=+w<KPOK
zJP_m%WYa9Ye+(8#PJ&T*L%j^%L)b3X2pIrV!n13VXf1d&kJtaJ{1qwlPeCsfADJef
zdGus^!WpBEv$|pi0#n-RS`T>W6&8Nx%{eK9(0SAB$3y&9$vR0D;gLwaPZzxpZvw?8
zO<mrK*ni{jj+sxMBeO3=h;*Tm)|jW*H?N=b?;|=+y$!lTzDrYb+mrKbe0|bkT_<l|
zVCm$6v(J>*lcoHY)psD)_vYI@oR2FG?Qx$k`O;Dd2!Q*X*<7Y~YvR?ua7R52kr5Pg
zrC<l)hW$t4?tS`V13u9*zCv?)Q=fw_PsT-9R}D{$niUSLr`Q+yif@k-2K#iRyJZaD
z)j*8r80dIZwLH}irB=b7-45*;;xyxI+EeBDL#1Z-qyx=g+CI`VYu|awO~_#z=gIIX
zp|))ka<vr0kRvgMh6@IosBn>>z|?S_Vdi7K@z*AjT*L+**wAdSOLwAMOUZF%zBwFV
ztVf*xwws065SB60TjIAOz6(KMQ18Rify8=Px{B~*%vXch#8A%RbI3jNo8PIQvEAb+
zqrs!J=N`$}+-1LuRR=Zy5;Y3hVQdp9Jz~2pIO2Q3+nR=3GI78mkhhlV2v(>ymZSM4
zDc0wLBAXv^xiWqfq<YgL735-!J87W@Z((2zqos!d&uwoL_+|}R{D=$AH@?gsYRTJ@
zx0!r3$fix>O1K?~<M_=?d{@WPy93c>U$Niv%TY=2n!S$jtxNUv#`&3vYe_MJTL0s#
zNs^0Szdp1fqGmeSVH_QOz7DfMvZBV}EwO2pAlLV0W5DazyH8|gzX;Oy>FIOSX)G?D
zIe>Kwg-BsKgaV{sy+YTdR*rI_Yn2-f?|l6<EG1|QaKY30szW(T=yxPH*FsBga3jV!
z;Pq}w%1D2!u{O(5J2$t=xb60FNRK>zC&&FYNNn|Hd+&B<i<FzqZmQ^PxQh!xebMc_
zxrK50cgM0YiY&i}HrN+(!gZh$ypL+BPyWPL$5KKU5~&_IF$6tq@Ox$f+^r?Id}8n#
zy<Czo&Sq%J=N;$?%CEl8mWcoyj=8fKWJexc!lohSCOzqJcQhEra3jVo1%oy5Mul@O
zQ@1=7aJ~v{Ir|9o;qEUS{UD^lREKD|m9F2L;y8!t*%GmQjUvo^saQ<)WdCEd16Inx
zYw|q^kX|E}mzwOSmC0h#2ozdCjmWGbc4i$W+-PoHu85;iYi@XTdMWdpjpj{QM@P#=
zXtJB89xkvwl}FZH%y}JigIS9g%+E3#s3gxG?xNQ2hQpb(mfV_E)>TUH?AUz7!)@W_
z@`~PppGE`@3Z-i}I{&18pF~Wc;poDXrhVz@f!tA-h^9U1N(+Whs4iHDU}DlhgSeA!
zp*If98`moCAI^AiH}uA;hmzI2L)<MZ(It&_xo7mZucY56O0A?%DxCY~y_fvdIsQI=
z`&{te45<~=XDY&vnVFd}gz#c_3;`*E?mfUDFoS0pNGZgFo$2*ZrKbJ3*jc~WAeE69
zLf{8!awmzukj01lMQA1u*y}u$hIOAWg)B>cBc3F0`HI}?@bH#IsNSxLTQ48B-8!PV
zk>Rn4YkF%-$k9hhra`*#5YzE3*-pC(>%VUCHM!V!#6G-BYX}>LQ6eO53ygelG_+=0
zDRL9Tl%-V1c}{+@8vW>K=j_>P{u33Y1tLXtB<B9g=fh_^OqwIj`^AwZk4ysiM@@_y
zxp#-m>vu)<-luooA2^%0+myZw+B6T3WEW2y+u3-%WS5)g*!|ricjZkQYj;_<1R^4-
zukmhmyh2gyBA`_3?a&&j*@iQEQr@ZeK?mwy3f+xmpAR5Xv`5Yxre37qW5s!AM9!!L
zj7mXGUbCcpSHG_0(o7o0Y!Mf0;hSl;%UWg>Rm0S0Ggo%m-d?p+;p|q=7~v(S{CI}b
zjvHG(G!iEt=UHYt{fI1h$SUQG7>b9x7^XREbj^P9!|%yqcvh!Ox#n~klTbOSbAIgS
zTeSK)u~Sw{j><F1k>(%z_qSLIe1^{Mo-I{c-w4lV==t+Myw>Mhri3joc}ts-(QGQY
zj5x&)?a`cVmO0+~jegPI8H#qU%Q(-zcoY9<F&oF<PS+$6M;8toIWM^H^eCB3adIpP
zJR;ZVzN;jSI5FbRNLL4)$Z#GzYDab-05SX|YJ8Wqnh326?$ID#qZqLPTv$aMr`VUI
zw_vJPiDeXDmzNRshCz&PZGyR8p{-qa(-j%aa|`g;)25qecl4<mo*Qx5%v06PnfEsq
zXW+URLB<);D~5}#yMZ;>m4J_w7bC(xJ72QbUl&7Z7Tp!Q@9;56Ak2SPljWxE=E=sO
zz1gxAkDaUA6%T)_Jx%4&wrG9=ZzDu}3m!uhr$^k@2&>vPap&c4&L=BP?{cAD<w}i)
zyQ+m2-VX0Q-<4!fC%(7a3|1|Chdnob;}G$3P@*g1-9)M@<#OAJ?sQG9RHs1odbiz<
zEwi6|DqBW0DkNLxYJC**hbfy=0P|pB{xtyrueDdL&z06K_~ep3kl+d!E#01*@PjF<
ztGV1bAAx^SpU1QlZlN@fTrIj*dsEm=I{#`>=dJA83l9@Es)=8d%|CwK<u~D`2LRAw
z=b;3sw^Ij|vAnhOy9vGX9#JH_yUuRk@?X1%Te{u9xexq9Aolc?ltBw0mt7+YR^7hp
z*xyzK^u)4Yhg_;Y{i}X@{@53NcyC8>bhN);eiuwZfmbMroPjaza9p?&?;0H(gjdX1
zOfN{nJMy3_Gvnwa{JL;)UHAEP&v}K4TApVSUT%Kq0d=FH4z#9&dH_@MB~mAO;eZzT
zUSn!&VBBtSov&7U>cUVY)!9&ItZFy0ZPl{}Qc{z;NXn=0gjY;r9xthvf;-$I6a{VR
z1b_g#J>AD^uk}%Cc~(5g_ll8X@feRl_j*_=jvU51akHYoM36j;;Zig}7}Q*)XOq7{
z;h;B31B}7WEqRB-hiXd{u#}O031R@WT#A)eNq<z<l1}?xGusJDGR7>IM3`W_$d4JU
zX*`Rxf@9HP!8O!gR*h!BU=_&~l1C~Cs2CtY={=wdW0UrUhbSelflR8RE^K%<q(p@9
zo3nr`X<`u+>HUhqOP%GtR`jbF8J^=ZY=r)}1VDDgF4Yc-fR(WD`F}WHep8f2xSQza
zfhKkA4jT6pCL@p~MMsR1tg&oSp7k<aCxSbHrJz`;420txwHx6}1{2tAL3lm74t2vs
z@W&yEmxJqkjXzR1U=1FOts^UZt38E*wihZMXFqgCw$DnYa8H$(++PZ38e~!Sa3!W7
z=kWEqN{uT=2;ttwtq<!Bbz8^kb>$mJj!1-i>xR~EGnOCu0WTnD$VAuZ_a^UolMmg9
zF;K+U;F!_C9Zf*5W#RC<y7KiSFX<t7$&9fdOWu!VmHVCt&@!rJNd=p{rigN_CLx#S
z&hyf~Q3P<DALnEJ#YmYIKV<vEdCX8nS&s#$fOA&@euDu>y$eM=w~cz-5j31OK6s<%
zKLG5^PVMJ8m*W|NJ`8U37~OD1fu|Qp9Zq`)ksu44MSXN{5J;x=Tj&b#2w!XhS<BJv
zgudvBaQ3$$MnE0EGTx-iEMlJ!&5XIHW|V?g>+^Z-{Ouf*#T7<vt}*gE-I~X3z~gW6
zgc+K_{5lr67g^6AROCj{Da(#0Qd_V%_Y+BN6Ce8R1;p96pJ!jYxVaGEg$tdLwnz6Z
zs2xEM`w8bFy;enXk;{vkY5V~`G7UJ+y-NNa77_MWVQnRD^M$pTjr5diw}}ApCb#1b
z)G2@M-fsJ*F?~gy`O1(caicDr*wpc?uIE;!`oyj_W==BsEB`<S`1?xEK&mVF9WHw*
zF};F`&8DieeJm(;tK^9;5AskB{{**U3SY2PK49QVe~WuaR0yVZLX&zh9DH7rgKtd>
zU*P=>U>v*%OK}KhhzI4cTAAs|WUVfkGc+cVO|JN{)Q4`Vy}MWa^Vaw315ax1lvc{$
z+XULaVpiIBDEevMsjw}s$Id)+-FtRO^q671=?)qHGx_H>ALHaco>V=%akrv|%Jfr-
zy8imOhg)`M3e84-Ki1rGP;=~Jh;<`;H2C=*+h4stUpfC7wm<I@`}66Lu6?>jp|;Mb
zV`K5Vb6a(tXa^=+P=|Y-Za7WOoH`ZO6!0Xj&R;NL;r!=N^PS7TuM9s7zYvZ&9B3Hb
zG`8(c>HUNH5vT6FzrOdDu>`~WrS<-23wLVz4n_;@{xBLZotv-g)Sx=!Q*4Kl=D=b>
z*6(4L9ZncKYsI)vyl6B0kZgV;sQ;T2)i;3Jp9X@YlY#^eb(4NcS2FkV^F2+bd(p!%
zi5jW^Kza)VQI(`>`|my&q9yPVV-u9o&e)-7J;FT>PM>J#A~5P&T2iq`z9*X*r!YEJ
zBgw>%L5Xx?XJUr=N;fr$B@fKVoY6BjjA1Yg;f^uu)1{x=KImCb*gSdlfw}OkeO6k;
zar!x<y({uhf%_$1eBT=+FX)`m6TU4|>L#2fb38mWQ0CLSSE$g5OIs^WFU!ONKD&!0
zd+gze)gF3ezQ=I0z&8?WQFAYRyr_0K_lV=;+tLA!eL?YzgH)SUvk}F|uz1u#)Elpu
zI-?7Y+py1u9nZw<h3@Fc+!VQ2SEkIwEXa0;m5r|1$d1RqI|~|z(7Ph<=*q;|MwZ_x
zdZwp2fqlssB}B~FpiCOtiYj>xi<*T<QIIk!!RuOR;`V8a`5Yneg?8KZXGO{J!<Oe$
zE==3T>L}0MIgh#C8J$onmpyx3m2t?a=|X?;<<<CO)XM?+@d|2A<=L&+(zJsfO&11>
zI|K4d6%NgjH0HR6=eWVOB{E*Hbrr`d6KV^#cshBhJ+#|B)I5A`<KHE3wU*ou-<wm+
zZzv`t*d``9-A?dzBn0VE$5BZPtUS0`(A5&tVxUIEe>c=1j(wkQVH62U-|PJYkg%cJ
z@QroE&82`>xb<_=b6#e2kXiZ_CN>sQevFW?_&(Ct38gl6T{!#@C$A2FXu|%n($y84
z1f{Es@7`Nq?Yjy$znY0lq35`Iy<bs$8|JI+ThK^!odC2!u4}*SUU5`lO}pmJTveb>
z`{6#*W&OI3M94bZ)E{<zTX1`)wjydup#V}!?tq%-#pE1KX}m9+x$vZM-_4Bsln`w=
zpyyL=4x~JX_2xipis5@zbdKKFZ)WOxWw*LJOLkhjPBFG~l9-66)@5^NJ$lQGko}CL
z+gNuAbYCjq8~#or`aSY0A+K;|7!VHhZ_SqQ@SjAR0u>Z{k9PIm!Zv2~8Y0CfW?X^P
zl^HK!#Xj_yLz0O9ii1pVHS_EE4I}P!vagX=;0CHrD_fj1lUIN)H0G?%%gvXs<7}Ll
z?aSV1=yuM|lp3|%zUk~ftlUEBwxPyVofEl@hAyYwq+TA?ZF~vbV)<ibxkWQ&;BgMe
zeKTH_p4!>F!%B;onry1It1XZs?<i(m`Y})0SbggLV_!AHn_pan^RyKUT-@sOPE7QM
z<$~)FT~;;O6Y99Zf!y-S#sSuKL}T64#dO@<s)uo@?VuGppm4Cog&qWBch>rg;PjV0
zr%zg&2PusB9nXLS&PUgz&C}1=fr8S;{fhYxSTP5$nQ87^b3`H2|8a*j4^xDxotwY~
z5~(m_%-A4F9+Nj!OIP%QeJ@lIHwx-$k%v{$%<MFMC);MoOQjXY@UKfYT}`l#UUzoN
zT_B=iL^j-3(9B{)LUvk1unNzT<gAfcswnpSN3Gh!+rJ(dPI+LvUP9FQ`K_4kL1~l5
z9dHv}?(z^3j^r&RQ7E%y9Sq9>PuKs#*dKJhR3#a-ofx~U_n=A1ovZXXG-*Z9U;4|s
zUw#oI{zCg@>n}0CZ2V>YFPDC~^$SFxPY8ZD{IV_(H3u*O%Qs19l(;<0a+le*URO1C
zo!a(Mb^5{14-L=W?0NX{)b@L|o|o@=LOdZK`_mR%XA5E+WGmh=wuJ_V_^H}go_hg)
zVSFxiFCCXm!bml=U%V_7;@>`pNoKKF2s-J-(WQt}4I2-0*b+REppPepZJ$%tt*{T`
zTbBAVGO@Mg{gh0OqJcC2$@c?;iji-EW1==@oDGVAAHQTnc8(FjKmAS!lj9t1X7!t=
zN@jA5+5Hni@g}z@9=t=%N*^*PY~_2$`uf7o;BhRMcoBEE8EYGa$TxZ>M*~*1m~;?a
zl;I93rx)LW$&Xv=@*U#o#XvBBPqUqSsjo@%VE%w!)OSJ;5Q0z|XS*|pD{K%M3PzJY
z%eUs|9^%bbOanMwOG979^1jzGaDEv|QH^7JuxayCq3i~WOtXZA^S-J>()`&AUuG|4
z2czd}5I%u@<sPFl+N#R$R3%wKdBL^7^D1-p&Ya|ThDePIUmz-Vsia5NR}QI(04x*E
zx4`$T$jC_X-XvaakKQc8v2aN{Cat70X8g*c;62U))%mn|Wh4R=2cH)$%#ck}P=3Cw
zde2C&A#+c9+MT1hXrO{*Oq`8RJPKu~IHugxqH*TPr%~&$Ou-Uky>j8P>{rn9l+5ig
z;x{urjmnC>aoI&lL#>`d>Qz&tmR_Q@B^Tp4{%Y>douQfCwqpq+#O~}4WA$&ryUC&-
zTMlh;Xh}Y&obmMXlrS;NHc0q--l1Pe@yfR(oT5Kxa~drs>+EPsx7qmZJx>F4rTYpe
zTO6sUCl6~XXVpR;#yI$ijvoS?L~0nG%*q;j?tLg9r7im*b@Ry$vHlw;ZRE~1sD;S9
zd*^&J+wrO%y5QKgpd*O71Zv@tC_-i2hi^cg<_+jyIL+O|W#2Ja^#^C8#FQ;9H_C_Y
zT`66_Dz{v$x*1`%X>+>oRnaK%E93$@x7)r4d*7)|ZRg1jpD**W%6<j3vy~I$z8zW@
z-shMtK50tx9shczMWQ38FxyhNQxD*K9&{6`IoI0P`S`5r?VvsGF7M6mM<nX)jhol9
z-YFsSId41mR*IEHP}OYpiHX>x(e3jIz6t9j?g^bac`8s=lDrubC3#Nh;7Niq;)JE+
zuZ_v;tP>W3ol8%sX9=mh<SRGLrwboP9qw*V3ELEZUNb)66Tjw+jBCz(C^746pUtIp
zH<M~~f59e5ywnAY57lO#hu>A+8(DU;*zw}Jy-KfYpIMF_ntG)oBW)wy+r4lqKRGa_
zY~tExNgv{ZQHt8vLs^AKqXt3l8N1vjK0Y+h?3mm`TzsSP>Z0MhE6PD?-u~4`N}I)o
z3-;9k9-tmBZLpMA%2XeI^<LNVBL};!N{DGaJS~5sXk(WSSZ_z?g@T2Zs)oY5i87kR
zK!=wXpqs<mevNc7_kJm)G0`p_Vu%Wn?n&8sjyjmA@iz7QL^q_X2j4NwAI6MNSOgHZ
z<n@Q%$hl6~Jh3}mX|L*FICYy`@lkA;jebap>ZDKm&7!1R?~-pxw+!E_lMN8fkjI2t
zXVhZuZ1<c`j<sga?dg#U*o01W6b*V0FjRi!aa~mQ<tecq#lw0qVX{1@!rcm?2ipjh
z9%swDTj-9v%Y5JJ<$UtOLA6MYQ$(}8us5%itkOHC#RAr)pl}Z^UV?P9s>3(vuEgdm
zpyWCgOtTj34*A^*f7|0VaZ*J6xS=>|!i&HD&Ba&E&q1G8RrkDDM?QasbNr6cx_4c&
zOVC_6$g1D%<K!+{^p_KRlvL)STUcqzbahJp9c{tQPGV$56o<S>1=C+glR?|GD>@ry
z^fY~KUVRyn3aG1-VqdQ7S|6vof-&fdHLx3M98wk`4(~{ATsM>Wz4ceC3lN9H`JGbl
zKU)Z=AC<DcxxJEIKCN&=Bp|QG_1owc&&#8ek$d+&^x_>$*@)^p^!=udOj4xhNlc`n
zBuT#Do@&3&E48u1oFi;=E)!{1cDF~J>3^Y5SaT+*U#V2)8Yt1W^}$9fhN~h5p7<K`
z1h|b#4R!98Ld3dnXjFB2rhDSnwxasr4La*TM8AA?*%BA`>9*O;+P%t-#DmTkAktT!
ztS0JvJl(VByHs;$9A!OCcGOVi(SC2Lo38B+5w$I?P0*Q_YG*0RWNB|XZKImkJk{m4
zQALTgPbFdLa~E18kGy|3&~P*R01d_r_YaVIdmqZb>TY>sq8QURqxRn5^}9{8=g+rv
zc*t`1T?^Y<?rmH&v7vg~!r|=J1>28ss};4kmT?sS=o7bY*ebf*`xRQBGT}#=dR?HB
zb=c#e*sjX5r<Zp~RiwVMYxO8Tp+32ft{2y?F|T&io-h8$KmKTvgr)gXZ27?Ajoz)q
zb_H5Z%V*&EZqN(KmUFlF`KjzhnEM-KEARKDNRrNOQh5I8IwXek#U)o*aV%O)@9J?S
z)TOWS5ILL8ww)&}1C;N|>9iiwk+%#9#oboz^x5F_Rppd|w;G!dl_A~CNa_}Aw!Dn5
z-YxDp(079wuyv(iZ(gDiGv2mHEJL=g`t=2U2?*TV#^M)~4G|n!w`xVXl-JJ=+Yepq
zZoW2$a8R&y&VxJB*oA04r_jYP#tbYNJkEa4xVm+(e@r8C4Can>YLcB6vTEP=RtPAm
z3b3TyF`ISHwY357zpBgzrrn<LOIEAXp0%s^Fp~FKPbSyIU8+=p<-I}aNaHHRwr@r6
z`sM*(2wSCN+K{)g=jgOYxnV$-vb#Tj#drGB%SDM6vE@eneY_o?G<R2!R(tHf2d)@A
zYoZGU6UN-1Ae0Dq@(a-}L$`v4V)$P)NyDVA7BpTSy%4`hR~%`=+wo+0o+~<s`J$P}
z4{`)KS|0YoFNaQam8*aFw%^HlBA^X3PBOw+CSUgKvhexh0IRZ)OgX0Y_n&%vXU&C9
z9xz=crL3T1(^*s5v@yL23Z+<!yrRSp1<5xp%8wqVZKqxbiGt39LQCQq$t9&0X-+7o
zv~l~1!*m~zFvtv~Ooan<rB(dkDn8M^h5mP_YAW8BReX6~J^=lz06lGx6G$3#6{MY8
zFOKp}t5Z!wKpq)%DvT4p<&P6)38TTZ{5isOWB|w)1fhCS{ir@Pe`)~Lo9a*Xr9x!9
zWc*}&WCCQoW&CA)WgtmjNrJ@4q<|#vB>yDeBnZtH;05pl`1E+I5vn~W&k~@Xv)IuC
zgjLUJ_hDy(h$qecoBQmwG)oi%HG{HDL#MT&juIva8J=wp{d%nq4gGZv-41OIB!_y3
zt^$mB#Z-W<UG?LVgp#t7sFH$`G~Yzua=U7`DmP3f$$!Y7v^ca#5+4#LMGZxfEQc&f
zZ9_+C6SSSQMA|i45A6i4oEAV^qFslG<W2?Xn^%pY0Hg&1j3!jk64aJ9DL-fBgCQwW
z#UbWYb%;tuZ`v$&Y)KDX%_R&HFti;I5agqRU--~%hz#UCCJ&Q}!C=BMxtJtO1ttcA
z#$;gdum`YLu;;KM*b~@W*h^R??2&I6EDIJ7D}_bE@?j_#78VM71B-=yfIWk~ho!)(
zVPUWwSR$+(77Z(erNe4qA+Xo57qDX3Q`kFLGOP;r7?ur7fR(|bU<I%=7!LLjmI;f4
zmB1okd9YL%1{My>g(bl%U@<T>ECYsTKVZLNKW7)QpRnJuU$QINkJwr4cy=i}lAX^+
zv9at>_8WFA`vdzK`#n2_UCj<-=dcq^)67T}X~`(zG-1>Ylo~2E%?>4(mWmQd3rAtn
zV5k;UOWKXJVnQxKme5LAB#2wp>wSVZiK4a<rU@y8C4vOu90*B8P;XH$<<k80n{P+^
z?evZIqWDWdqWvho5?(YP3dF?gk?$+t=j_+MAJ{M0#q6i`Bx@3Jh)B{L(j=jW&?N8>
zm_#3<laz*(NEt&JB;XK`L>Z!xOomKI_#r$AY1rgzMBGPk7hIe21QfxZF!cY__MTBq
zb>I4^N|COBbOfbJ?-06D1u07JHGn`uq?b^nN-qM^yMXji1B5Ca={0l&lrBB=@Q?5B
zJ?H$-xc9^Ta>sZw_p|2O$%mb__MU5xHJ>@sGIGOkmf9!%^D_H1iOP$)C1LpmgbiW~
zp@ir`L?Ip!5{L$b7vcnAfS5sKApV;gko%BVc1b5OCl#(`wJ_Ic*NEEq+Hlt(*L>H{
zu6giyILx)hwbZr9HNmynHQhA>9uEHoPlY$aL*QTGN$@&&G`t+132%W1!Smst^^fHE
zj;;8PwD?Y3s&=MZl3R6KbX%uerdvf?L|U6?57W&)>3bEzzrY*B=8gM|XN^aVR~9-J
z#uoY)kPF=lQwu|M>)=1&pWtoqFYrEi9lQ(P1Runlc^pc#Ixl-cf@XhV(s#X=%;Mk$
z@Wk0&b<|ahKO_=fE4E7PBfkuTM~O`@OfL*CEG={`OfLLbSXk&=m|ehZBbMxt9Fy#q
zL`rr`PDu_)E=qovoRA!poR{pCoRJ)nT$b#V9G4uBoRjR4oR%DxT$1dPoRs__xggmm
zIV(9Txq|3Gj3N3FNJKYc3NeIOM0`g~AO;chh+f1DVg#{_=tPVo1`u<I9>g?a7_o%t
zLQEolAQljPh*`uaVg=d(9fS5mk<f1F6m$r>2>lM7fDSexq4UsQ=nQlOx(w}vjzb5a
zbI=~>G;|oc1nq)OLVrLPpncF;=qPmMy5oB6y8jw^-F-cEJ#@Wz{r!64dhmMwy7zkK
zdgOZfy7PMcdf<BQy61ZOdiZ+jy6bxK`p5Oc^(R0#E5q{;G9>_MH~Z%oWbvdx78*rc
zCZR;b{&JwGpk!L`kjif+*F^9B7NCrvtl>xQ*OW|ziHiOCK!F;7VGy^<7p6CfHvKg~
z@fs<^!1C96OcZ3F!@F6Ya}2!JDE+FW$5s}vJKz9xufa7;oKguER(Z(rT4jdGF>xID
zw1(F(u3S^}8QtfY{$3z?4aZz`^z)2Fp8hXDt{RcKFwmO@=7q#+;KK=(-h?CIgKZ}A
z0hS4MpZ-`N`@|czM41WAqWG+Vdo(Qaz|=jtqR*xSPC(C^hjWR0iYT`0c)tOEV1Ua#
z@pyU#61GqA@&lF|A6&4-KhrD5vh~GV4>)glxjYb0$W+i^D~{J5u-|ZV!4*%;R2*U3
zjCURI-tcv~-xP16z{{2r|7O5u!^H)s>9dJqCEIMg<AD2yj|)~)!lHr`8$8~40KDPh
z@~|m!QSlGkc|3H$Z^Qrio_D;I0s~uIyz+qchVwDD_h%`^Y_`#Oy8+h?@8bvF2`vg{
zY*q341CAT+$GF~!EsD!*2l1W*&<(%i`<L;)3Nmat@tOm68?MJVm!EwV+t^m(Ap@Qp
z&||F2gc}8aw)S}Q0mz2u@x#l+8$~qR-P=#iQw1SfgD;AMu5`2%u_S_GzZPt%x!Fn(
zW+jg(*%iBviEo>@IY~UqN*Ph!EG8Vo*_Ly&Y{oN9;#Hz5ely0pt>tFlOl10nS2?Aa
zYm8!BwN6f+c083$xR7SpK6z$q(2b&*(=?`1V>Z`uLIOO-wx5f`vu)%CmPoIZpDo-S
zKikH2lW!(nN_CPGE6f-daC2?OS^Dgx2rpU~18;k{K_$NYc`3OKkjU1^HFaakQb5?p
zoe(Z1{84~z1Lu{mx1Tf%J<Sbv3n!U0-O_31T8jCjah?mEXx&<NV{GPIiu<GaDEHw+
z@K)#PW1kn&(F_`Kxylm-TjQtHKHSo=44Rs`>=TJw1E)`XIHhB<HAZvoCTh3lPU(Gk
zrQ@<SF^Vb^QCmG2^$-q><c9`Er(>dQYZ{|&!Gn>c(8MStOk`{gW3ueIFsbnxm>ly7
z#MTlfo0|`lg00Dz`)K0RR@W&hMr~?nZY-@YZS*LMF!LabG4miZCzCNNC+j5Z6Gk)&
zAEVzCi4k4O8=ctPI>87SG5JMcgoN^{CT6#GF`_(deo<}eD|rVK=UdmOSXa+)!~NA{
z^KvFew>D1+uUKy*{ngv^RwfR%&QBj+G2cd@)dKR`Cswu&P9I&d-$tR;?<`4N)B5lV
zq6J2<Ptt&qI3R4g0j26R<PeBblq(}<c;vT*YfTe!5yT+Mmk~ESN@+n@6N>x}B5inK
z9L+QG#o|p(A#wsl)4**U%QLEH!BvxN5E{yDCGf^zQ1DAFXIXXf94AP(fz~*yqH_l5
zK4YOi(@CILQ;(bn2^)W^_%UO>TT6@#12H!UEQEjuMXjxozd?iztP7Fg;Refvntdb+
z#Jv#cUgHds%IIiDDu_n7*D_!xbHrKAKzZC*EeFU>v;%kUF`X>}Rszy*pj*h=??eHi
z)va?fAWW*pLeA3;65zw?;JN2}Z#}3bGoN<G0+p)^<^=W(Jm@8}vpO_@?A3{L9D6z*
zw31m_og+ZI>e@N+JrfTG$sE%TULaL<)Ew)cmIn<Y)3mb^s9#++C$eYc@f4B0)Zqja
ztIn9?+0*l&Lu4&={sDScBj%*{%sdzoIno^rz(>`e=9u^1p{Svm(w*5r&FbPgp*=$s
zJv6(u!wkq*oifL@r;DP6X0>)M10mJ$Imta!6azHJuR{jNSRFUVzNd|mE6DWgYy+BC
zSIvp-8Ka(FXWw@C17)jo=J@vXQFPZ?x1DHUKy~|^Y>Q3ghd6Q#@%2o?Kdu85k1#dr
zKF6&I9i?4z`|8Qi<z$U^Zf>|9HC;;in#nNc<nVP+Z4e%XUNZT<Yoj*L<m*h?cym;E
zDd=n1MsJ>t(XHR$IwE-F-EEzHm}DolscW{*b)tJw>MPPFVIEvHu-np^(GpD6vf+4C
zfBC+R#5|>{Z+4UJkoZ!`*SZaVB?;2ocQ|}W>HDUQVkI3@GxOKN(f*}D8`i<b`h}NF
zpyyG9FWJFwX<y|w@`GQA-i!yE+7~0fA0Hh*ml^W>seM`LE7m5t5_~Xlz6L$<yJ+*3
zZIhM#$k_jA?cs_1MINRaAV4;VaUgC@`NaC7`Uc=HB^#L2uerv4qJ2?vBkV6B8=NyR
zx@LFcdeMX_5Gd3B(Y&8;jq2phMd6L0zj%9)`9Rg0{)yv7J*J3>bbH`RKV(hp#Q37(
zM$})jJ$Pl{V9oOcdeM3#<1ZWVQMR9P?a_(yMZt{#8h}wg9LQPIJh8i|y%9%C1q8PD
zo3HVm=wFm!wqQ#H1h)^YtU*pZFAz7<Xqmf@0sXRTj3=5G#WzA|@w=daf%Y}?6UYVp
zMiMQ37kJknuqJzAeo=KJhL*ewz8kn(3pfb~VK(`R&-BeAi14}Z^H8!t>gP(4@2uDa
zYEu=5IBm&mqr|&2t#}3CsmeoKzsXOcaJqx6o>#*R6u3Dl$)loJyFXiTRM#0OadUkk
z{}Dye9cjh-jx;Y^ftxHLQf(uj)4|H7I?_P5oK26)F<eB^R9HdVEnF_iil@4PnrDV|
zH}b6e$_lGG5BVCzElQdZIowTM-Gr0_aWs$_M}fN=tR$;jskuBJXIW)Z^Rb2V3cOPz
zTgq47d*MOWYE`pEerpwpG$aatwaK|Dut~b<V3$cv)-~c)9hJ)IL4k-^>S3_btWH51
z?=hn&t|M-H?ytRcjt3afGm%hyis<SgU3=}E1Tdm!j-}{}Snt7KQ*izaFwA7qpeT-*
z?4emxbN&J_&SV~;*o-*o!C8}YPG~eRVdAAoiTKe&v8L*re3H^Qf2nN3TuCt-vD-tu
zrsSO1Xt>DaL;;Uj=y|%Pv58;&!&_(ZmlW?G%JXn&kKdaA(MPYhQY;LVapB56)@#m3
zAzoTitl5;K;dVW)Yu-meUhi61%qXkE^?MxG+>gS%v|Cu0DG$Oud!Qp#Yko(87jJ!8
zWGHjOHGAyVT#rI8w0v3HC|ANEJ)UdOqu`5oH!S{?m>QKmkTuVvPZ!!ZtZ2%+i`av!
z?33t|uO~^GnZ<rPLOIvp&;7Q!WDk`um~Y>q)zCv|Zge>sgx*8bqchPa=tZ;?x&`fv
zzCk}g2chNA-_cCye6$sM4NZprjMhR=pas!2XczP`ngAV%R`u_BblV?y+pT#!G<sWV
zexmQec2#y!c2#y+cI|lKc;(*yQ!I-r(=KZ>(=k)U|C9MeVf&Z%2HAP@KJ!`gQS+6R
zj+L>M{uSg(_sZ1D5aT+gV9-y<Hslv%AF>YFg<#%3#hrN`O5S2NKL!M?{L(ySzg+T<
zYcFU|T-nt`UElZzM7Gz;u0FbwN5k5qWT#iASB5XgR+d(}Rwh?|tSqebt<0{BuB^y*
z$d1YO%OYjFWv66^WEZ{XyvMx<WWR5t;!fj^<4|!&ac6NSap#(cnx~q_nkda9%`?pt
z&GXU2(bLi6QPk+s=-KGW=sDjZ-zncQAByjY?~Kp2?U2v&&tcVJ)oImn6{_l}>a6Od
z>Kt+iIfWcUP>>_Y8RP_VesFl;CWAUSK0qBD9h@Dwdbs&yW@Qd&R0Xu(eVp8s-ICpq
z-IHCD-I4t*`$zVt?6&ML*?rk{*<IO9*@O1g_O14f_PzGC_MP_M?SI;Twr{upYTs{P
zZ{Ka-Y(EHCz1a`gl0Yk?`_Sy@VzeE46Z5(v1+9;sMT?=~BO@bE>^km7XinSD0}caD
z1C9ew0Y?F6n0vta-QnHo-SHjjE+N*fkUiq-XBFPi)50WGT$d1f4&{NgjUg9G@v=<y
z5nfE7IoPzZ=)xdgm8m(xNA<x!k#I0{<GTxK(>D_}US3S(Ias(c;X>0?Zlb}<rytKX
zm<&`56Z~AQ2ILe<`%x;iM<kBuPZ!dy<kn9p8=T(QaUpIhD*q7%8YD67*Q#Wl{ZjBt
z!o{>H+r-@InOG9tK+G>T7wx7rdS<Z{<9?oBdM=JlF^hUm?C=!pUnDi!v5D(hroXV~
zSlI_vYK&3+Pk(8Q{26f?VHhzR$*$4Y_~KV%u8|=5<G%QdPaCjBMU7;{;L^q)mq$&-
zi*Nq$oF`ll-fo~V(QmHQYX<H|37-bLHhv!Cd4H8sW#EZR=o?($IKl+O`BEy`+?ol+
zgOeNE$3)&mQg5<(MxA9oZw{VpTw<c*yq4Ey+<XZsgFiNY9TRvLwy2u%R3*#~?rxl6
zg5`o1m1S;70(@{`WB-`MySU}eGS5N6`QY`&Ehcu(^?fbF&6p53*tfBMjDPvnS5<~5
z#~I~}@<6$x5=RF&H%>4ib-u4k8@G8v)!^*L?lJLY5$1u%vyyNyc)oFsiLmo-Ui)*)
zCgco`ZfqVCUKZY{`t!6WtPCD(oR6d&Kiu@VEVxlYa|a}}53Xz+96!1&zIlV@xpS6z
z7weK-9G)M^Q5kZatfPwK5JFp`RFXC|<UlD>maaZr`TMPFY17oA1A|Cay5?{d<y*qi
z(5deZr1js7)Oaetd>DE6rnGQs!hxo~+(?6`O7AUKX|j%DD5qAns!pk3a#?9<N%AzO
zgKmAgk!eNVjE?*CTlMKY0^QR3sd<MwBjt*+8SULN;;AqP=KAV+1#qdTw)NC+2g3To
zc~x*l!@Gsj{V9|~`TQ&QQfG&j^xWnt1rZhZGKTtsd6l!$fl|%0G7bkjkzCyAcv?Ng
zw-N{a`iyzg{XCQow4`-f#=*QkXWsm2E{V>=lHlp*J8w6ixTi{(Jk5*MQ7$Q%7T7Ux
z&y+CB%GJ<eFG-x{*wJxMmoUxB8_}^Vsht+zF>%k9FgMNR)uAehnr7Y6a!+eEG0m&g
z(Jv{R7TGa!&uTVX%5~BaE6JGV+0k>)Xf|ES`=jGof|!=xF>}vpHkZz2(0NqyX_|TG
z-C3%SiF97Jj%G>mw9t;>S*DL!Yp$6NUrEX|*N*O4x{qmV-m(s)1U@afV|teDWA2wL
zqr+GdH_g7IeU^4*;+NN^V_s4<Ew*EPmUU%zo9nM5Taq))x1)cSab<d&ht>%wX`hx2
zByS9)ivNhqy&8yj^AeX6FNn0W-$I99o8OiH4ZkD5F+Y@Fnct3IpWl;TlOMuw&L04K
z3A2E`g?)g%hP{Uwz`S4zFd$3^<_1%PfnX*uUzi-s3a0fI|NAq7wP*Mf&j^omX{Umc
zgLQ*+gQtV0gGGWwf_=vD(qAdR#kPUz!94gS4A>3C4EPLWk<XC)$QMWek_9P@<fbME
zF@Q)xG$0DlQxG|b4nzfFj3)NLlL&V1ys(fPqfjGa!&!Qz3A2W2kI|`-Tm_*mRAH|C
zkBM;QJ3qkQ@QWZtkUU6fBr{S7$%T|evLnTid`MZqGXOu}1pokG0SE)Q0a5@afFOVq
zAOT<lhyr*4GJxj*0RRU;9KZ??0q_8%0n7j)02e?Kz>cY4#|MyYeAdX{_@WWe$kHg>
z$lWN_$kZs<$k`~-$kr&@$lEB>_`Fe|k)u((k+o5zk*86*k-1T*k*iU%k-br@k*`tK
z>zNn7*9$Lz7mJs$7iRa37n7Hu7pIqm7n_%;7q6F$*K;ocFAgtpFGZsBGaaKlh1LMA
z0P|Um{P*(BsK$}|0?oG_vve!sV=Ky$Z7Oa;xBf(&p83Z}RoWe<3B~fL5KVpn5C7PT
zI7@TU^pIO2Hye4M#+0m<DX{t5PW}w%aU`!>a8qT*F7Al}6^El`%>KBntLghBlL8$P
zRo(wFaP#SXeG#R42cs?UZTa@Rh$-R=_R=~OxA&1|Hgch!Yk!7$ulkmlD=)3!#fb8r
zuzhY>Srxn%A~))_ypWw(Ig=SpToB1CH?y!JR`M$&RnzU;bi9AoZhmQ$o_?2sevG`S
zLUVY}p|Fukd6WWG39q2(`%{Gic3SD_EuRK?>4m)Peg0|clHS)sOLN~or(C^aE~Mp{
ze4VB=QOjuim-$@DOW#@+4Qz?vozaH;ZJk(FmTfepg#e}=`P6hdbhCTL&US%rXVkY<
zNXnW6OPz9yxVE>69j_eK#mviU>Lu7U|A64SZ;-Z2rt(?7ts?{LY;HcrC@;D*m^zeA
z{SOPB`+0l}MjC};S7c^RvJjCN>o{FxUBC}abQ1!}=^wl;-bxolPNsV{LwC9CZ|&rl
zzUdcA-&UZY>eu@XwCYt5%(d!~dzTa+_{U%L8@`Kn81S2`0TFzGS-aW20>HFxoMqo?
zeVd42t2a70*kz;_&ntG!b%fcCN!4eJkatXVun^r}7cJL4%)Dp&QQU$8MuL3brAqwx
z-~?~whiLSe%ock>==*l7-9Qa&3DWtPF(+)FcjPdvi-y(*kN0)Q;s_1}r5u-ILG0Fq
z`z#h(R>HIei2@Q-1+D@T6a`05vSP-YsI%Vef6cwc9A3`yDn0PQ-zsci*ka4g_^1)&
zK|ZGWQmony3{6eK-Y?88gBzHrxF>8gK@NU2T2Cca24<u2*AZ7?M)bm+EhG!vkL?At
zh#sB7AD`OBoc)Ow@-6%Nt!!a(L1<<|U<NAu*V2iM49}WS>6+FxSe2hUmWNvZ3pnU6
zIS2o>Vvv7<11$IaU@}SVL)Rw~^A2;A@2hu!8cY*d;8EZ2{fKWtfG42aQ>O!#6zPz#
zz=Gi;?;DI&t326eno-P;(xFP@bura(AE#Bz$8n0{_%$|#&ij)ch#$P~ttK=l0+<qN
za(zF~*<IsmksIIuneBdV<4=65w!=X7d-E^})rWtpeLX+zXpm}zYk*T;?-=Wtkl2wm
zMwS>sS^Y2cTqDf-75ISpRD$D#X<MOcr*dpQ&&gZk|DW#ZBrtMGcC4>AwPq!$tNAOr
z5p9Iy{>*|+bBbsN4|Z#QgxR=4)%$#X;c>3?DdB3PC<CLCEv6~OuTch65xjrraliY!
z>Cj$05v6YeaxtV1(QmEaS0p&JsmuS{s83U(mFKf9r4pKsO55pCJF_bC5zuZ;EioI?
z!MIt~O6%=t9it7byJ?wcsH=O!MU)nohny!S!tC=C$YQ?MgG&EDAl)Ha$ND`*hQmMD
zG5t$+Zgc)x^~}HaO!Mrj*ymQe6<uO>SI5KM6<gFh#U1ZJ`TC@xoL~V_ibMYLTIOLn
zmgqggjs`V?JTJNaWf&z^ek<*~qtFLJ(fgA3#x<lLV4FSlaz8B~X_43xds%hA1$RqS
z>*cD*OZfep2m2}S+d;EY`2-f&$Vw_!%9;BaABz|*$FrBerLle#>1c4ne_r^V`Yc!I
zJLm6;NPqo(=qWrBt+y{V=RD_Kb>GT#=Y4Ukk9(aqd}Uk%YaL>7LtHo6AtCm*3Jdlg
zP8IqzmCB%;pC})1CC{}0DP#9hw}aLq;<C$EK1FFP^qtjZC+guX#9}GKqpj?tdk5QZ
zcq@q|)X!*?#=<cGXhdm?fe$kf0}R=(!i;zi%_1Ai{~$~xQtMQ_hyEp_a>;G1_-lcO
z9KWC8#1*CzBI!u?qF(eMwTGPN861-W8KQGuU}X`x362fCWXBMx^t{%ghEGkS<4&>8
z9odl<n+p6Wrb7p8L(<N-aW1E_%6G1(vJaQ&-CW0pUr|XhzWS}8J63-ZCH?pnu44Qv
zQj~%Yj%oi_JVB1{W)U!brv7huf}BCok<SY9X}9F`6ytSCQ3lv)6w@ymYq&}Sc~K_V
zG?ddXAJuS|1~Z_5*lCoO5T$r9DbP5im3CS{=FmT+mCo`&Dc<kh(ipxZCq>8O$N6n!
zSZp6TEO1k?^zJ)it`4pR`QuZ$F~V1T*scHX#PLTuCHK8ovJY<YPMOEzUj8rQ#yl4D
zQtZJJ-e2-c40nmz&H8_l-bU-OxL2~cx74Tqko&jTr~ll&?k{1xk=Nzq-eT{|+qr*z
z&#ri<U6+`j_2gD<T!Y}|$?Y4k<d%6D+UC7jmzPjoVjiRT&ad1QYk!xi(RZ@S*W&Y4
zKcU38C3&s1SK9Kov^%roaT2}ym<@8h`h8N<ui9f#ySe5Mvm~~r1ke&&)2~MVbm8_+
z-&?|+DZYP2JO=sbk9A6yyK?Uq7c++2?>7^Vfj{zsKH`bK#m-{rL`Bf@B<oH0dQj-e
zVOKDycZIOn%V~*>YmxK(HJ?kc&Ll7c@*hK1frY_7RY$F!LZA=M4#oTSm$HPf+a9!~
zp_m-rt;N}YQlFn%k7dI=Db#s*7mxzqdY^hJ9jpuD3^n4f=Qh=RS3m8MF+zUTZiaFX
zki0aweagxy@^WIP%het+BgpMAbMR?dHMfdvD-ZjMJ#bki*Y0zA#V5eMQ`HB?;(=x=
zxte5K3D^xT6EFRc{rDFwf%_>Pq8b+0ti(|debl?9JBU@tkD}RnClzk;BN}mLm^*LS
z4VJJQJc7<tRL3|L+$I_r96Ry&?+@MkXUaS~lwbWs&Au0eje4n7d-OaS%SSqpLDQju
zVU63pJ0Z87d}|;3N+J;RW<4cQ;t<A2e!+x~vVLIB5?GPdQKSyzBHtUtM)28NwZX1G
zv;D4!@OHHF>xjlr<?G~CU7cjH82O5wRny(lgBgn?23Vkb9`_zRdetYauu*76Bi`0t
z&%=IxUhgs4;p9a(zMLJXAqDhRoweBIVjztwVW!kp<}QjwzA>(8u$T)Y?)Ik*zZHIb
zZJ+z_A8yY2v^2otn{i)@Bvkoyiyvt*dy$uoZp(Gt{F!Yk0YzN(dRG5I|Lm+xz%oUg
zqBM7CR^~7QbYI<msbFQb%4-+h(u-|CjKZ$43-SX(F5ab~m>Xo7u9*ckpMnz}-)C|o
zoTIYV?+#7Yi?_x3YCwu5XY@+1*I=m;#`KV>q{HNu0_!0ynHN5OOE3$Tn9VBNe`w$N
zqLTDctHT0TO6TtDRWJ)pBX4b<(ZZt-A}yiVW^xY>o|S}wK*)3*?S=s5qG<KBR6!9N
z+rh;oFp27XEtO>*sSnljw~Ijn77tP%U?Pua^T8{za}oUMc(qR~bx3WwzHjBTJiMhp
zC4KaAsPR|&v|H7rg8PAJA)*Y@qsppd>PIf|5MeCKJS{>ayKcxve11xTI#u79e*S$X
z12|(3QTqlv<IFlRPwqwU+6M;cGhQF`8QwjmbrShf;@rifu;e6jYv-=Bxq6YEotM3g
zZ(5-|c|9}~@FgyDLVRp`_K%qXjZOAgJ%6VC;>*p8tmd#o@pPKe201CM_O0)mz$EV)
z#)T;IP>zGCxG=LHyYzc=^=C;xcy-Fs&qYM?+Tn25+_U`OyZ0-Q^8w7b#_Ky^V)&Uw
zYKa5#Tl$3&b-fwwa%uXPvarO`qWV%A%i#}}!_Q{ahSOhF(eRf4#bSDA1;+G(!G79d
zMbT<B8G-^f4ueBUO&n!K!i{0q%w4w$Khgak0)UOOf{To4bKyki%C@-qW2;KIvqYkT
z1yM}FbTo_on5LLuV?t*PkrU{Hbub;>B677CS4@dT`jgv;Wy~-2lj*wnmx7y=a%7v7
zvka6>1Ud4@n_$pnO81S1y1CY5%G4>Vh@T3E3dPzh$BmJDTQ1Yy46WLs+;W9Ai$aI$
z;?pRJ9x11#MGU<alN1^x_Hg>P8Rp~k!8JI8ZgFw-H?Eji<NiAx;>rZ;chjr1MNy@=
zaEA}XeTrf0OkK_iKO6f$m;eF1g7j20u~9_-%dJy3zKnk>ua<L~em`Zph9$UbUpsgR
zW<^xbV3+4z)5)HSP9yF%+9cG_pcqjh)=(qXh~Cx%rSglaQPZ(S6O;Fb;ahiwR9k*W
z@>~A5o0(q@r;mq%+omv&4W&lwH1PGyGy0~J5A9zx5${`<WW-DATJOH$RY1m3&4aiW
z3z4ACh7=u2uN4&7=<!O%#d7yKNeg`6-N3hn4|MzZRN|DMD5p34rpM!xjzydfjE-})
zmtZfMz~kY_94EzLt#oslg{O`MmF`Y@<j+Oq2PY6ftU;p1fyeaPgic_e|NWwcKEf5S
z&SOQ5M?tMmA*KA0W4YL8w>zxFn!ceE2s-lrzaMlkEZDt}`H<k0CvU58rX25|5frd-
z<e9x$VEi^qw$rM1G0&rt+UL6uOJ@Vehv9Zt@8nEO&+36~YoF}nX%U8fB(+!!E6fh+
z?qB^EumCHhtiWClHA<7{nmz26ybB#+dDs2lZkkMm=`@MHM~~cNz~Hr!BO}jkxDqY<
zf5Tajpg!TTg<1M<t4R}+tfnmXqXQJ#q?y(H8#O3CQv!^p;KBFYkN}b#F-}q%o_Fmb
z<|Ly$LCU0^!BMM*3Wpo{qKK&zlo_~_(}Ebb9JcTNzVm~|-mhw8m-PbH)%kAz&FpT?
zMNa+xu6_L`busGz^6u@0IV8%Z7o(UBfqd0Exar;s{|9&(Pe`pO<zHv#hY?SAR61Gc
zi=9?FEwo0AQ~d`jBD&<zz6Q@qOZoy~G7RX=KG|<O+Pz^ES;vvesbe!{jLw^i5xWe}
z`xD69Qu}Zcpscam*_~~=2PX}#s6HQlTP^bC3NLHLN_^Bp#1bUt{EYNFMa1KK;pw8~
z*eD0da?8LDXHp~4;6DS8R|h4we0WHHclGXpqUzG!Yb<?3=DuzF<lBt)Fn_vctDEY+
zK+lvpx9+P7Y=BJqD^2^(Jv4e#^jt+nA5;-8t7k5VGzhRDgdV4Hf<p);3$O&F%VdPQ
zHw3#MxPH@w?xh#_lboe9qf&lC!wzVyLTGku8nO$mN3qib17q?<9^(6_RII$cauywK
zeHp6}!mqCL{)9)}Ra;NJB-Frx=-ZS5A%~u5?3<IMf9}$%!C<0qPkt^vusnP4bM--!
z4C(haMV=HMh)+u8(QRU%eT!70Qn@-bOdb@y`Q(qSi9l<G(!^m%MU?dpl6stjB+|;-
zp;&hzcH4fqL0e3dTEEaT8^mQRjECryvwu~WxTUussvD-zO5K+sa9n0Z&FTzt?$qmt
zL?+BW>DyAL$9*hSaW;Szo-uR4>F-(RKl=c$kb;YnFJk^6y`s4x#<t7}w6fdmeC_$E
zGI14NnYf1e<bh2eo)Tg{8J4^7VbIuaHqBY`Ur;d#@haFR>HQB(!ns8omGo^esO}UQ
zk+*%K^B;VnUPML1x7l#T1R8ry`=b%@G@j3eYz=G|Lx&m()10XU*Li^@og$gpG#aBs
z#dcwnLS5U2wjW{&;%Q_?iE`}1MuoaI(|(>b5a!S*KNnJc_Ag@PZ0SRX00e2yPXyOr
z0DIr{N2@2(bmsgIFlS><0{Z{O|2mavG#c~k|LOj>L*2Ct(d4Y|T8nU5PycP(zR@c(
zJnS?utkFMQIT+)ZPB$woR%!2KGP#(l*d!3;Qjq6jP5G;rdoac@iLUmAnC&~Kq5OaQ
z{?kEh{wu7?rAxo*XW8PRuG0mlm~S#&+u;9iZn(k~;AzF{aw2}H`j6-t#N+m|ik0|x
z`|nmi$T-FIG7O7VJP*T4ofxbHHT%AP_Aotp<^b5ttunDK$Tm>)Bbz0MH!;4HdciIB
zb%spS&*7GI%@j!$aPy)H*W@n^T8$J*dtuW*Uyt0H64@}0bc}=JYHIA@1l6)}HUklw
ztoOj5d&0_$xW4w>p`VpiuhQWf5C1|cP+0~K*s0Thd|DLY&_l4_FIB&?jZ;o*TZKVG
zJH{|&i7I)hf;6=<#%9#t@3Pgolg~Ftkhj``mw(>buQVu~<!DZp&rom~+Wd8FHpqnD
zp@o_Cgh%h{JdH8M+s+hg6}}9e$nG!Cq?`sAb}Nb#{J^VW-Y+PLj%z?L+r7{G<vq0k
z@m^}tI}6NiQ|Wzd;hq&(p(ZZ9DPFB-z4ZN`*w!*&71_|?3=XuOf6!Np6Kg|A-$yBm
zQ);iB9d8AE#KT27pTwUrF;%3^<d?6Iu3%VwK>G5fk)q+NXZP(XY<h6{52M$Y$@<z^
zV}sw&-+j@Q(%%=_(SKD;(89T;GtN6<PDUTV_LRE4E&g3<M4uO_+Scp$SnMJd18{Fc
zfp~5~wyMuK!`tVyI<Dzh^GX<@v1;i@p%n%t$0V+S_u~u%)hq)`xL!(!nA3iFM>xEA
z#veCL%Qs)~WVIxJSi9%c>B&CxI_XEDV+s;}SR4L?9l;PZ@azTu9Zu{LA$C$EThRl#
z+zw|`Y)kT2Lkciv=C3wSUdM6BT@(4d4(5nQYpwZ-@6+tY)TNPa3$RYu4zevTtbZq2
z@Fy)7=_0E*J76U!2(J<Wa~NqyFDoWn>~9-<rQSI;zO&1e0YLjlUJ(`IfU%y%ac7YI
zc@@E(;W7_}K|=m8Ul%FpY0%68vY)aYuIha0C*W{I(X1p8Yt4-D)+nd~W0LAW$2nc6
z6?94!EDQ<x%wvy_SD0&2*)B3G-Sv?>9Ywd^#RorxeHk0gJNxMD_S8_RkL8KS;cH^f
zga<lCb7Tt#)Yw|Vs$YqctBH-)ny|c{euKoVC9Eb0zk!@ebV^K8Q7*x`BXd9efEmGE
z2a`1LaES;mHF1u!BLP2mho8y9`j}6vUtVdG8oNb5o#m4IN*Xd;3P<yM5ljYIQuTXr
zeh!CNyf`AZwU}l(6Q#zT4Z_vRBS6fOT`yOD3MH<7uIDFTyTdHD$KX_w7x;6aHLFX$
zB2M~h9j}9CZdvud8-?Ysd@R%YiFz#QYQ$qMQYLq{ZfA&2^<x3@#iWSUS4xNU%#xS<
z(gYb^nQMNMPnPD}R#~RF60r5yR>QIBL%zbu$eOsp6H1gI0CGVb3I3e{npj%#XEc<c
zri!&n$1_O^m1b+WpOguiFso6wH4w}oh|-C{D+yL~uzt8o`Zb-xzEe!30y_i!$&MMC
zjBgl&Q!`4SphKXbMWFCDvV2f1V>$6fdE&4{r^jm)2{@?2rk$wum2YW3sKzri&ORzu
zz#?BDECNXl{t-=o!lx%ljUy4<bqB+;pMRZ6kibvDl+3Jvev92DRMY%`!&T8KM*t%3
zlU`8l-3jOKq-;}!UNxl3__;*U*cdo^7F0MS3nQTX%&9s^YQ_2ixZpmH@i2_!bsw#O
zE$)&8IRjd~%Yg!+`NmP+vbvl&IH`+_Bg}??S5d8m`_SZL8Q~P1L+LCC0>&+G$mZ>V
zhl!9=iX7sR)JGaINmK`Afq$-u57UCh-ou}|;1h0;QT9LQj+ZoeW(Rv&X%R@@`JgFK
zv5S_fLz%?F@__vrkd`Trn;Ycs7YoLHWSuVXiJORD3-kB58Nq5DmDWj`UO&w>u1010
zh4pDwV6WTpQ}*8VWxpwx{&b;dKm5vZ*75@8PKay_RVP*&^fao*H623CXVehxj!m0=
zs=Rxw)WP%WkKgC{OKeN(aU2&G!b}26Ks{GFHJ?;{zWo7o70BEv!DL5M9L*DsvIJ7(
z4Lf7CN$b_0ymw7<_bRrzv_W@gS1akH_LXutHcuU8_S4@e{azIleAr$gh(C0@zHJ~;
zN}jg9(ocWapt>YiULa8+C~WgYE!}dC?RK^|>hdcMSjtUQurbe`9ds9qS@=wt@x6S3
znD@`fsButLGkee6mI~yOj{jiVQO5<cvYtQm@#xmXV>Iv#9d50(Y02_s^68+K4im6-
zh$)9Vet<n}V>PP&okEe5{BCkbUGmL)5wjgLc2u*%lGGedNO!%M<vuGh3%J*Yeh=Um
zCc;+f9TI*S7O#ji(M9+*luGnzOFAs8?p+VmPB?u}`h_FCB}+A!=ww2))X3!?U9r8v
zGx%57y?!D-GQ`q{HWN*6b7PwG;rFt02+iEko1^c4Lc81GCHM98L=<Hy3){g`XLoPb
z&$_&J?gDxfb;|+4d>?Sl-Evm|x*X+6n4HL>5=G2qhCH_%|6mHJ(SF2S{Ccb{nX=!F
z&r<&jKh=+JT1~)upITCC9~sSd;c!f?_YVrkWl!we$r!e9RY!hH?h^I7d!IBVYxyo;
zLczGU!bvYXW3eNvKgw}~NZMKng9%sPQ6G0U^fKNA;3ob8VZNee(Mgf!7pDTZzn;N`
z&6>t*KGx`xPZ4yZP`1F)`k5~Axsv?&zZRjW*~KJXZHE~Rw@hilPZbH`pqL>`$1>r@
zrp{qvr+?RdrJWVDCd}c(_Z@*G2F!j5x+#AbeK95)(f<Qc`!0*~pABhZprMwZG-=C>
z*{`0}?@0~WSnf;oN0K<+8A9%%Uw^7!;4cQSaeolWzlTLB`lgTVbOA_R*3e-R+A26+
zvryEq-%$dtOqB?J3OJMXc=lemqOM_fx`HR%z0zoAcNI|&{=S6X)npod)=8Z3os*u+
zeh>VHi>VCNy=W`gHTY_g-98N;0UvH&x+|PBqPAG0H7Yf<j5<ML(};^eJ#i5*+k@}V
z<T6%4%SF=DU_a<AR%PI@LWAe;y{C^B^`i-(#kdz7f&n1fWcQD>qU2p|%I&Lo?nuN(
zVyOK0SS+u}Kat4m&#1QI;hKtX#Ah~P_TR<0ou3wmh-rUEaQvK3LLRW9oFn{9ZACi=
zeWE+K#!1#HZI)!#CD$rh)z-<_obkz<%2P^D%=4CE-Rccw<2_{Ky<}oDss?b@@(MCN
z5dLm`hzz%L*SBusj2cT<_#Sjs_s9gNm2<0;m9wlvUdzO=-YfUhV;6kh7j&25m3Q4V
zU1UeQWX|nmGLVQ}S5}l0jggJD<%Z`lwKE}Dfw0mm;<a%^zi~vkaRk(vbqGdgYe+L^
z_#FyJWYyqNMfS6zR1Ld451kC<rS}rZpcUnYQgthJ`wyzpelXC<XV~<DK5tt`mDdb_
z?-BWRWHpn;T1Dh);j5c}Z{&QgqKedH<&GfxnOf5oyChdPY59C!p1L@s%Zze6{3lK8
z!p{IGy!LL>JIv-2_6t&e4)8}@N(g?&*ANNb3h)D!x0Ir=2QA-G^b728UjF&u4UYZl
zo;oS?+p{};vRp^Jge1JQB)sG#7?G+0c45pBuz?Uc;8Cr*n*8nIPs6p4qV5Rwh{SZV
z5jTAH=5k}Hy14hR@DFOZ_ZgqV0*HIfUe{>wTWJECRLTp3qqriZ=Q=2&zgo5GUlU20
zw7zVx#4!xx3HO<_0_NKBDHzu$&->3MK7l6C4fdKH1|{ZnQ$A9)HIg0Eu*@=p-k&uS
zZlEeYY^`%3Umvc>i{)ZLJ@6<XJ$2XEW~8Ux%9&US^$ZuHL|I9HMy9_uoo2t`F^l|X
zt`({a*QCkiCU4Z#Rt0=3gO?R+&kCV*oT^N$ZJBmsnaxZMt{)CGD&AkG88Syc7G9H4
z47>^z;Rl^kh!TAEB4jzEMAGAk>RS4VbSDz9TvCd<S52W->a5MPo{#$sszngxsDARE
z5VaPm5myTJuGu^neN-Y00r$S`k@{7nK)eps2gk-8X_ZNA=IL7L#VDKA8!D?@51?Di
zyQMlciNP5~cA_cI$}`xZ(coPsNe+b}%7A^2hV{;EQ;;&S@A2HEC(Agi==Hr~--|BQ
zYU#76jC3E{6NaIoIU=FGG=Qk9oo^6lC1+2>w!7^KY;2)>s?M9VBu#UjPG{e|Pj%Rr
z_8`~cuGGNcH+f2Y`2oYarf_#jiE+IW%T-RgZq1xcNsmZt>3ngRf9c$EYQp!|QQATi
z=`@MMyl>PGERFjlW+h7J%B&;;zMefvBLf5X*)x7HW)v?bz3=kU7U|L#0qUhE9nB<`
zfSZtBM)fdLE4}CyU7;4O+A^mWm=SPGsex*rwn#TKppVU8D{8)8fG#aNCVgbyKH1=B
zxqUXMG^8^UO!xHnK%J#HU{XlujT+sT03jjG2%3`C-^;?x8bf&HG%LaeVeAelAL!&z
zQ0s<S`piDX`9zrU^XL0H4DT~uCfvFLs&6ML`JYJc<z&K+#+pM>nxv_h4x>QmpJ-WQ
zAv9?CqE@7<R%Cs2=5L$+zg+*eG5xRC(i6JtOIr`YRi42R`7N>QKE1tZdF-h5SfDL5
zu{kSw{N2sDVqbuH(w+A^G+fE@OMeK5WBpEm<N7EJ`6K8M>g-n~vN8q)oOiT-j67Pf
zHi`R2eJ3rNGQLKj5g#qK;uEQc-&*2#-Dov>?h36Yb&T1qx19X#hfG>*?v2d9!+PLg
zJAuhZvp!tz{J`|WikaEkd;_;Pi=K#{XaI+f2ASFLOR*`9qgwENAb><Fg1(Ku0hCU^
zwpUL7HV@SBK~$g8S`<eQ_82}X6M_2^7mZtqD~gM&hpUmB`f*YQ_aOi~N}#wAq+_{<
z7mZvUBfbB-B+v^1prxiZq?h<C-w~AXa<wCI=;x^AXwmTVfsw(2`rxC0UED9rF=|A-
QbcWg{_lmW+@9y3EKMG>cLjV8(

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/lato-bold.woff2 b/assets/documentation/1.27.0-rc1/css/fonts/lato-bold.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..bb195043cfc07fa52741c6144d7378b5ba8be4c5
GIT binary patch
literal 184912
zcmbrlV{|0Z8U-4g6Wg{k$;7tpOzdRhOl;e>ZQHhO+vu0M_dc!n^L?xObl2*xbJkbu
z!`}OJxyXq!0|5g80fEfP10jFEL(^aafy^EQfq*W5pZ$LfC-Tz^cg6%lAE=xZ%GU%s
z83P##Ch}7_e3%!Q9fTBg>laFZ4+!iQKM)upcoi0;?}9Cy?@z6Ky%%>tw~NKKJ987+
zB<X&r5yc#rB3fea)lVX7AopaQ9ud2?3)GOL6P#O*SJ>V~BtSYfP`gDMdo{o&nFop4
z$oXL1NPsIf!3NQIe%V|P5t^GcXU(bIn+oI0I-(Pi^QdP;c44Z{(p8IrT9|(o@c+{e
zgFiYyCq`u`THS?5MRLK*ACtv@7{O^c1iE!ygQLbBi~POQITE#|&AQRahOEN*6Bviu
z#%`Bd5HLp>&z67^M|l0_dyNq$5JR2#J5fad3AW7A!t?I8)8oR9TY~KYyU3s)D_i@a
z11yTUQ)MCg5_;oAoKd9dC}wRJky=DZ3=JvjJxLW!MJ5+<tgvZNTb`FwgiP7v9F?sD
z7hDf&nuV(nhsL<auev0|TBBL#$F~JBWQTVWA~StZXzT+aJ5FFSUty6L%D{L^2*vp#
zQ{NjbRM8!20Yf-uQt<>ov)_-j=o48=R@V7<8*chuFk<uKW?&jWNb@I0<V`Iq%2r^8
zxXu0O)I)w)A!CfO&g{K51Pqx|A(r?j*-tYkW2`z@j~9!Y>$gZVlS)hW+XSPcQ*yv+
z=dQ`KU~~{yCXCLFHNap)&|4zIB<xd1nyFZoW_gr1R_h8{Dr21`Gba|uDPwdv-%(zB
zG!%_*+*)Xs&yq~vuY@GqzbY;l87jv#u68()TC2;%Mc63?F0t8}R127N;wMZ6C+zVS
zQpubbuR!1+z;2sG$Uw2!D^Fn?!J{&Zi^tTcSC0(o$5S^@txfns{RoDOMi6kBI_uG_
zc}4HnYD>LxaPG_@&#4r27@b>6$c;ER39AK`c+&{~)fCy+)Ig^PvF=n>)aNXs*}#Ju
zC`&4U5IMy(qO#`8Y_#Ys?CTE^s`)AFmSH$sYFB_CNIC+A8b(OuA5gYTnteGD*Dim|
zm`<TjiST<Uhb)0#5TwGOoqjLT3j4C@=SnB3KIRn@q=X6#H1rQhXN|(Hs5V23$S5><
zP-qKPZA-Z>wQx%4dq;`5MrqV1Adlz@(6rq4=p0eJHO(2$x)v2Xv>#SI=tgjq_mNM9
zSeMolu4dJTrum<gz5xLcsit(OKiI3iy^{~~rC)#{rxrbtCwWT3rr`oz9t3@LAWaPv
zVx&mKOUmPkFOX1|xu9|iq>0spvic0|>+0s3Ne%cRrmsLmeIV24Ar2*cj6sSplOh!8
zG?K8l$+r+eJ3e#MsuF?ogYl|3*}@g6HCUr`vfyTs(`T%XWXiE)ciE_NXF^HEffX2?
zI$||g1S7@f6e1;ke?#WV+Y?yfl`LJDJ^rTN`JFgSy+`z^1NpRMKtVR^P4P(gusxb<
zBNolQ6$;!~r*uw}$^R~|`5ehLYe9|kOv$!e;!ly~cxQk%%-d3`>u)YOc~*SF*S!~6
zW)&%G9L!Y@BK^~0?R1zbEB7)rzc@PjTKxASy0iaM{fLMlNCXk6Do2sS+v>!#gUz|3
zru)rL)JLA&2MA~f9rT#M+j{u8Kk&>TA~~dg1NUKq=e4(HYcC>L>6Ce+_fGzr3!%8`
zgw16sXLJy)>yov~W|G(|%lM_$=E6pSw_9#H?uyuLhjRp_`*G5STTn6z_|X$ZAB9uA
zD?!>G)@d3rSBLjjf?2zi3M2`V8pT}v3`}~&@zRK+@AlIhWmu0GR0$^)KM{AN)D5p{
z(*(mCsm?v1wWC960!6B;-z5$<jh+BK$4Wz}Vu1)dk2TI!2c{bei4m&;9x^f;S^1oV
z(y<%`S%$KVN!owOMb)-VHSQD2zDs%woFva}wI^7qgp-15->swmZDRzj_256s6!zjU
zKe^e=IL+<sW?@i;6FqEeoFyi3#eUQV`>RdZ9Q*kxKk;H!%=tziX$o0|hyWToE*?^U
z#qZ5^`)PPeKeI+GpJpWz{$eb?OjW1cv0bvE0AEaWH)?UQ$in?tCw<GhXEy%Rxn;~q
zEUru=F;tXM=9D(mWoe1tp9K|UvqI3n3#X6e<l`arFG~~0x$20%LT8)oZkC6{&gGho
z>#irr)k1UPC0CUjx3q$d#}W_Qwj#)I`PN>ta=2vj+$Z7=E@r?z94qmL%Th^&Z}Rrs
zEJQ=}m_OoZe>7$ztW)M6q=-5DWNp*UOhoZL<PSpBlp>ngnSoX`K>k~HciGo)FP1fR
z@m2nMjWP{ikro4YY_MZd&4={`p+<aB4>u2}$j(dD$rV?U$avGHlCbAOYKcX(q)PC6
zOGH+&(_`3gxfAb%CsFTnpL44XUlp}PSJije9yXeu!IC$A$2$=JCUHz{=bXC%lC=ev
zV=nBxe(@Pxt|Yg-SL+wrLlm|)E#uO@qNxd$%>1W<GbL=>M^;|3%7R6Iv_4IJ?j$Gj
zXgOgvNu34|YteFA{4}KcU)EAdQE15(x%&aHOEG8;qijYzBu4O92IC%8WZMrs{aMD#
zS!&g;4|EnHixxi|ao8_VolB35+rlsirm=WC1aqbPmKu{4Po})->pS##s;e*PvJw2)
zEp!16e1E(nBC~cBG#m<zwsUo<7#dVHUx_Xe0_tx}C_+ena!N(_Qda-5hye?oyGQGV
zeQQ<&`gzk3vgPj<7LzcVHYRz^>Sj=b95%y5Qwz_v@m-xBj2nY{dkPZii*OvbGot3Y
z6rX9(KwkC+*QwcaIUl*O^v-%J)13B6iV6Nwt4H8h%`!UlCAMXcn$&b9h?oQgReeRD
zW*b3f7rJDBsRA_9g%GVPtaD{mZ`~L=2MC79GA6lnT{s>C?AhC5W#Hi69s;5mXmJ0a
zbsr|GEjv%QB#Ds7gQ<q%_j7GBP3XoiS8mzPOul(=`<3%sr|E);8rXWq`E&S~%&$+n
zM?a|gI)wes!>7t)TKc<N`75xW%2mY4-huDBHFBkDmU|h<7A8T%5qW!>D{0(!3_GyF
z%O&UZVGPG5wK?kAAnVvIYZ&1s2MX1<tE5X*$}M7x(7&kNw%xY79tRN@R>bMm#$$@S
z!*`2Ezhg#xH!A_eWEKb&bg=a=4Rx9!6D|7av*-4+=aVj!$oC}n7oUjebT2i&Zdn{B
zZWT}Bl;4FZM9Jnx0SQ{@$Sv#Itzy%kSRO2l^O?!&wIDyA{-BGuyj+zIaH{V78Uy(j
zQ5Ix?8Dua5s>5!{l}UaJs){W<YQ&p8P2t8N4I|F%`(?=bF26L4LK6(#1Z-Vv6)CfM
z%X2~nnKZno4`WkvRcAbWG5qUr9y|=4#4`G-(lO`_|HVx#&XJpM0L&5UUAom7_84bp
zfkcfiafx2UOsE4Lo%U?@=ZzVrcPek#pdnLYaVBD-jbJdJ!TOp;q`Tlxsx$6h6uxV-
zDCtBTO6BVTKk)3mo{cRBSU#b4vMmhK6RWjoEqZOctPK>}uentCSLl}BQY`EZXvAUQ
z6=y$NaKB@`4S3c%c0y_fZ?Fjde%KFv65<|}sYc$OFe@_<{5^kaNiE8iGO+dhGM#%n
zollJY*0;_uolCuCz(~jw!6~5jYxt!5fJVV=Gu~k#0PLFNg;ZsirpB`emkXxBvJ>Xz
zjvOmt9yQ6rEn`S4r&>V|Jq%rp#yc`%%tCy`sX^uz=d*he!2Q`>4dg{x4#8DX_>up`
zcM7Qg0{`S&e1&oR;l%k6AliKbDF4bn1EhapoB`Uuyjibc$<1$2bn|#i0NHQP=YWVW
zhI2s37snZ(>FfF2yZmeV6d)bX!a*hN;EMRL98~?Q;Gx2u1pOFc79jqad;$pn3V+Zm
z`o1Lngiq@jZDyObXj5UV{ghzVTjUck<4u++v>>P2KEBYs0KoqQ%&v+p&siWWa=*mA
zxww0LY!|0gt7-7emwV=ab-n?LodN)I(blMqG!|%oY}A{z#8=ub5NM~W_j<k{XQ2U5
zmyhGr4J6?Y+!P28<sMt1Lc{puvNN~o4<>)3#YunM(wy476!s+e2E#TWTr9oYk~bot
zT~9|Ce-KLWULX$(*HB(CNAxc)TzLa!SNG#M4hYcr=vdBEo8wXoFGRk5zFNcZ-RT}r
zE$&!tz>9P(8L|7t*gtpEX^DUV383e(&--e&PvjaztTt5C5y*MwH#*ZxOwg;NKfOv0
z$Ur>b#mMc6G&FzqV{Sebeo+G0`cQTkz9uiKNV%!vm4|RY48MQ{!oa9z4}EIvdQyg-
zzWCSAw)ts9=`qE}_{&R#rx+Q9!$J&6MRP4Trm!#$pF~=pf727Y+hs)gzZ3y$9>2<e
z66+0zKR?tnyBAVe<eR3a{Y3*<5M^)S=q}a|Jp_U49+Yc@5ZP%Zt6GGi*aPpW<ABB1
zqJj$pgZHw@<60U`(W*sFG~}{dudHaQs%Cq7dZ=&vg(ZDd7xiy^M%Y1x$6)%}QLWRm
zaW;TF+Jsgobv#X6UErajqWVp-GLanbIolh6TJ;GE=1rU=U-bgKEj>OSR|Wp4hF3i!
zaZ!OvlmB_cSU4&_EPet^=zlbF*B&~wpDwDsEz=-D$A(DwiTNy<qjYc65@4b8szDte
zv}|&z<w{3ZBwhjo`}yq*P!&j;_&zfZBbjtP^zSPJ0LY(weh3VL9?QVGXC-*1K7&LU
zL{xTjM%I$ey-gC>gcMfwaCI6ct92((D@~+`GwfPTw`fCxYPsQafqzQ%%AH@2@-|Ta
z{L!Fh16HU_9kic;^qi5T4r2n3VhOgJB6betC@m~4G&k#|U_=h?lpDxmG9|xm>l{^H
zmAhQ!^GNlP3qu=EECXC^?LrwoM<J00r-ZHT)BAyuorKCoyZg~b1?A7KAhp0xb+_MN
z3nEPGi1U$ws|C89XuW%TFF$0g>#zwZ${CA@V(QCP040kJR^<7x<}&W2biGx~2{AU?
z`0I+WVA7!Xh(?K*qM`^xE65`&Fv5bO)PUyedVYHEUwV7e5Lkyf{8*}+iZua+lHmcq
zsNH=BeCqZ;T?2I@Wu_u+GNP%gD*~%I_Jr{htxC?T7{I{DN-nQ1D~3Vg?P37g*zMqp
zD4>eWv*JB{2vvfwTwiToJXk@g*M~_K{yODM5|*t&zR25^ZHec+1}vL*&P!gB`ePAO
zb12&=T)m>{&ymxO_JB0)rx+Vb483oC0?h!yARw*ngOY+7HB!#Ys+Bz*VKRL&_Finx
z4SeBCWt3y4-jm$qwm&9z-9-Bl9J>eidFFP@10q(*7XnsEb8ar=quK0O{Mb7q+YwVN
zt6Lw~;BRF9+B_+ThU0I6pR+NXz_Zwg#P_L8YADi1qUphN-D|d<OK0)vmLJgnIZ8aD
z(c2VOa@G*4g9WJ*?!k@WFzP7op&zGjhovoqzZt(IU^1+Db63M^FB_~32QMcVjfhbo
z(ITc(21D+ir4-H0)BiG2v~Z9l;>Mb(V_e`%LXS!tnf;I5KgpwtDDa8QK1Yh?&%S-X
z%vi(nD8uqjO8D>>ur26O5B8qB$$ok?;LxdScL39i_*UH9@GT$f@T*!j4}((KU1(`&
z>?Q|RmC3`!OQ-WOh$F_A{77g0XkOFjTfe8EZ4-_upe9=pkU0T&R^qd^rO~@=_i7w7
z*n!Ew{X>P`=ZkQPvR9GWq7XXd7s$9`*Ao~16#S&VwryD$sLdd}YQ(0C>TBkzC<3iR
zegk3u1;%(*v-7Zipb1@x-q@u{@LQj$2Zufa5SZ`my?w8UD)P?-?0?>TdqK(dA7}o3
z3Jdd2i7#9_0ENDLrmrXyMM@B$l(MVbP*}7%lJxX$H07g<Bkpj~(>BzWj8o>e(6E)A
zlpQr5h8TUA2k7Z5qeKxEW*<Bx9n775?(kE7*ZGyXiz(_x*=~WWAz#3Umks%`<yw$y
znzl!nIwjJr8QGn8Fm*x*t1HFb@MI#iA}l*PjY6ybILyMa425HnW!xOQBXNxmD9nvD
z5vF(?86bRSWxUDwg8AubOV-l|=q9_QF)(f+i;oT7c1{Fh;0E(7u%KOIk?u2Tc~Nb_
z$&U9J1^Nf6I1(~4^0gb}=7$`uJXuO%0HJOPNFdjAnl+%GajS0YK(kfisjci+SD$j}
zk~j#N*{?eY_SPHx4+?9WEexN#k>8e*R^<>DVKY$ZZJ8cp**7djKEo1tz!AN&QDPsk
zgDrv-$J+>c)Z_XZidYf&Yk6B<8#O%@5{oJU(Gg)WZys2?PywasRtyivz^=cB>)vWx
zv%Er6VlW6t^RdHN6|7c<?cV^N9^4zx9nbTkL?WknsV{+fmD+T4t0YE(pzQ0f*^&;D
z`yKTPF3SRnF4HXsF)>n5slCUBQ_oX8bxb7k-h9g9SB-set@fZ(IwhAt>aWm^2pj4v
zw?N+4U6tUdkmx&gZvfC9+@44#D($xyd}R*cBPA3B)lWX2f5qVY_-|B1iRS<J^#2@r
zc*Gr9PEQIjn;#VdPD|xFx}`7UC^7|)Gl!zPn;7+x5fb=EYEjdI`=~b7oTI8N=h&BH
zX35RxVrSig+jiN?Lcu8Cdza_9<2^@(F?|Ki!1m4>1odfA`*v$Se5O1;{)Qp73QF2i
zyd3Yod&m&>0lynj$?z2cLsI%w$~V32)44cLU3?gh7ybZ$e&c>t<Pxv9V>BZwI|H^=
z?YWn-hJX$Z+LZ?bzvXFs;*&=A7+@fODXm&1NtN)6kfU&c;U`43==iW3{g#zB80wxT
zDI`IyE6;N9T`ljuF=Qo0sDBXh1KIQ}@lX!=C}CO;)9pkLDNt<%s&B(aE;9^31o6Y$
zqL4Jt?a%$qaSb95i+}9nV0(lVPt2;Jx6l3QiRr5Q{G}O5nuR21^DCL@eaQw(%lA`>
zXAc=WH(G&`rD%8#9fO!8&%lhn&Rys7)|_Po7+12+TXZp0EaVI#$5%MvMu@l^b~1_r
z68lC7v6wO=ld+1Z;4rYgGJkOKRLQ8A6J3|j9Kk3j5&UNhFpg!oWNTL5&r!2_<)YTO
z+$Kq$kLXY3Li|Tjq+ndaKfPbT#HZyxW_a}d=T+c@7&0RBF1Vhh{OioXJz%}oWQWNQ
z#7%#UWZc*eIGWJVadLUNG53UobuZI2yR0R$9p=Akr0CIlh*b1g#P|9l5FCBwM6}w>
zw5um-detMc5Cb<z871O`=W8yPH@$5WG8%lgI)aCyb9}%hg+a0NSx#~B#EX?ng0s9P
z?xy)DaAttS+V8f1;us~+Leuv85TClDm*JeuL4M9~QD>W?<6eX$0|kB&ym6BT$mcw)
ziZ`&-6E(9o8mRY$Qr^KlrT|_Y&jI8<T+if;yn1x!+wV`EUQ*&02_e#_Kc>m8jHM8b
zVaTAuoR3Z)qUydfi<*YW=f__`c}EAw+x^6$_4c+2asw$!K(~Q;%&@OeXS4@J*ZxHG
z0UJ|vIz3#6yd}p697+h#ER0*x^R@LeHRSX4gjR2_z~leb_v|raG-q}aDpeH5QCG^P
z=n=&P=yoC9$-jFPK=Vqz;=on>x&fIK{cu?}!oYSNh4sxaQM73s#WPb{0BLLjPM<rr
z2dXl+93a@Ti+Cn8=i7n$RhyZaJzsAj8BZD)upACNKovWW>mGA$g>T-s*$FMm(F4PS
z_XPmBdhs1=dSrWHx{~BDK&n6Gi}noqijlp65%A`_$YBQTE*Otp3H!TOHdW&V=#pkB
zOKP537^<A#Ja9Q_xFnO>&5+?8z1SF!t?Q7I3&n8c&h~&{%SyHZb@YJZIPy4cdSbBS
ziJwDb$H(RDKx<+bGQ%W_77r6?9`_cr;CtCLa2kI-Bm1jY8b$<>Ug!@Wy4El`M`gZL
z5}L8I48O+1)rY9vz!2|wB9rI}2!9-*b@XK!izkr*Oy2stLPM52Q0IjwxRI;%)69!P
zExopn5Gz}cYl0Fpf<mC$;L$so7lRGWt<jjg5HT3^qR;W^yN0&sR|j8XiNrvTg)P~b
zA6RahmbQ+LAddf`6`6U|NVH7hJ5A0MlXE=Yt@BO36<B8G)x}L6dzc-47bUYF|7sY)
zf&z{grA>-~@fY9GL*keEHT7st5*{~W!FVjtuMV4K2Uk9Q?w+CoVJZdCmGgT@f15ni
zUz0)5q>$(RoFM+lbuD&9`t5UI0AC029KZdWNm2>wh|-x+O1$4(K{&-(?MElT(omZb
z_~P5YdaUh|h7JXQeQ|JGM86lGXO)?6YgI%Qo@K>9uybQfeeg-=D@;(7^zBfmI@D@{
zmu2GYfnRYtIe?(>s&jN;mYK)5yD$I#0Tlv=l>Ws931-SD>7Y>^6*H^qOEX5B0R`SE
zgotG77F|(y&hb52W*-P9D(uaS9_-c^Og|o??KY^dSx-Op34t}BJ`YUpPapWURWL)6
z>CU#q%z>7I(!#n*{NOn>OsZWDXG^knXM|rIOnD1T#Yk8eQbaEy+<<t*pjpK5)ng{G
zS6$Pk1z9K8-ZcV45(^3X2sL$iT!!@7*=tDj@~(%I%JMTQtT&btnL*k349Z1Wss;-(
zc_tOLqqr5+ZA&p=JK2cGb95=$YAo(zsLof=S>ciatH!D%$#@mh07a$-mRg<)SS0wP
z+lX>B2;URdY`n;sP6=2D5{KHBSS19Hc@f1h2>Mjn<2-F1|9NG26Gvt9b>PXV|Mb_c
z!|Hy<RC_9=v-z@q%8s8rK-u8SdtUdJdzuPntVW6tPMcpSwrXz6bwpA~w6t!XT*qPg
z?M7ZcTdA@1T?v~y6PzeR+~>G^Tg!8<*{GZpQJsK&kQ_Mv50cSQ_4cfXh4$ES^$F8g
zg!lZuO+$t85HK+pNXhjJZuTA7HZy`bPy#eP6a@s8aEu@jaW7w&twzyxjY3M5RY)ZH
z{&Z1&CE+=dDP=mf1X?%XOpVQ!uk)(3aN}6)GH1EF)Ovy!4LiRY!q-O6%0YbePb>4*
zgqW{-BBk0nl^mr5xp;<*e-W)IyaUymJiRiKaM%F=FlXE@l6T(k3wEyX%2W86`z5cb
zbU3N<N3@o5D6qt8gZTO7rE;n|X8iu+dQ#2(S+b#m=z@Tf(`OWI@BV?}uublb6tC+q
zE6s>bH(NS3nGYl*8IUm+KQVY~PGB)c#!8s2+<PTgNE1BW9Rz_RN!ci=8fX2>`Rxs0
zT)B;di($ww2xP{`Gm?}W=}Tql&~)n0@82$*rydb=YE}7-+%RzLa4>Xekb!mlnq?~W
zl2vznNGY-rPSfKNDY4Y!dgh-IQ38BAXGzNQXS1hQ$K)YqA5&P^NNONHJ<qQ5E_|(^
z4e)A&@ld={gt_4Sc$F$^+a5`^42}^id@DI1%4fmuNhTBlGn*<pJS*)k%|s^e_Q*e0
zK+8uku?#$pd?P|5r2^^|%u6$hP@Au#0>@KmPd_Y4!Rq?FTPJSnFQiMUW}4g!Gy!Mk
zrf1CTFtLS>E|?jB?X~jFQTR)muAQfa6dy(rXX^S_p4Hdt2N#fcm%bHhW$~&ZWivv>
zlCh?$A+@wOKxL;Uh=G*8qasQELiW2pvsCWt+!tXfYZ+_(YDRsxcwel7d7~xm&2y1v
zA$;7N{E>~*P#R%^<B$k>TN`2L*zNZF<|M$|n|~7?2~<cPNJ4^C#2iRGAGkEt98x+T
zXQ5BNp0tE%k1LfeVM#;s_foo9zf9ddeJFis1iWp1d3aqr;Rrp5@7H@LTc=U`kI)$?
z|3sze_UIXpGvvF>oMQUdMd~?3mUck=uW<R%5O^4g+!(0CQ8<T?km8dp>dh~S_$GaH
zhLZAe&1D3uDEzn7ux^e{eRZsb1Y#`(#A7rSVJy%DDhq@Klp|u?26Xj+V-JkSu)^>T
zA<>x`A4ZkN%ZRsJD;96m7r7W<*rHw{%2WaB<(}@wYBhTBP6R`u0W>2JKcC;5<kyZ(
zvyhZflSZA!q&PiD1L*i!Mbur%rN0?*$@HeUXwFTilQd><ovi#cJWsQHFIKZR7<&kh
zKXn%HH%&zJ5E-F*{C5D#v)c5(oqWt{;e)<tz`dndWnh`f(JHh7Qf$`OEdh#qu7Vc@
zQ?+JKSnxBI2~r$n=<Pe;JNKyK6j{WFF=eQ}PHQ~6zKI(ASO~QxoL6l07A}R{_kRK9
zfYx6wG`g_CN|Xg3LfM8D5OK;IiK!o~XHdzU4y-Drw1CFA&nfki-_lv&;xM54Ky#;s
zYQIle9#a*EGr~4@|1Q{Y&4MtNSOTjKodKHV61m*})Js+v3y6%MiC|A|9RHr|jz6?K
z*dOC7PjC_#4^qtM9I0V62Ja|okzedHuR`nH7!fBGY`IaeqHzv<6ZFgl+3u#{E7fu#
z59d4e1BHiD>YO4+s~aF6G2j)ThX(O=f8NEsY9FP&21;aS8#=MR*k7Lw-ZI_CLPpjR
z4-gIs2@&oH7ch!ZPr4F1pj^mQdDRLDmyn^%UHbUD8QW8d=YWDpbg;DC@5LR8v`3sF
z72Fm0G|lbwMiK1#v5{he<c~Qd2t|}++^U@=1l6VW1mL(dJk9eyOQ$dVo*WE%7s*fj
z)bKut02qWOS!G?oeB2$vN32)K@+;4)Eba3}^R9|91T6M~j+i(XS_I{83ifNgtgH)P
z)<0NRIE>W(>B32h)HMW5aoJ$U`i=5<A`s4UmBom02$Kk36gPA1_;nkHWva8X`a@ls
z$R7-vSsY1&Hi?c_k?xmlIYSm}y+?2uDyBgM(-5XoO5SrzTGSE2s$v4*_#FTc9eZ`(
z_V}aMsPb*X1E@;E!pgM$ipQ2(%kQ_{nLN?e?_O1C$jBtbssq@+2h0i^ejE>PUv$GZ
z+Lr@CkA`Bo7EfF8VPtLBdGDW_=(N4{FZ}%HG%|E@Ka<+gvqn$r0Md8Fvj4^=5he<t
z3^2o<_VNTgOtO%9cHFQ1F0v@I$lJ>Zk!jKp3ana@R%@W8BZtNg;pFk&MCPhY_V1Ow
zAXUrU7&f(njp6?WgL73)lNUJ*D#P-mEiR$r)+bd#R&gacfuXL$J5{4!i1zX5?7^jk
zI&|jYucUNf)XD7!+kkDkPu&aLDB299UNmXa-$}oa|Gd4U3%8n#u8_(RIzrpF!2%4q
z+$2wGB7bg}4cJe3Y1QnSA7PxTHD+&bIOho!tHUTj5d{!O>~Th6r4^-WO-T)`g($7i
z;ir@l;rq?r^qPJ!r+aoTO~}f2YiEK7auT8rV(!Cth$p!)2k%E?fW#DKFB?35(#8d~
zO(!4z<nOjYsh_z8t)lfoL_b@6lkx)c!!m(F#7u_f#stCGn#oSW$Y~VQ-<8~sCK<0s
zier*Yvj(;+6zxgM|HPSg5B^P}&)2R!xp@POUYTM7=eW}+7XjygprJp>NsvR<9@HEB
zg#)4I^t4k=fE9#m?{OEHO}>5Se)ow%&i8I|R~}5-?c(zqA5EtPwy1;U|M&j*W7@}N
zn<sl-b|=G){9{h&H>Wr@@zv6`!hop<8c!`a$|$5<HxKcCxxKw|?LIZ`L+uE)j+y|C
zCCd+(fn4q0oqD0|SOA79%w(Rrgj9)Td?$Kf`$20S<_Vl*_bXN`TNCVi6K3Ff!UKz{
zgR80rd{-(eIo@mJ0JXUrc*Y$yRfG^BoA_m}$Z6$+ZNm@^s-|%QV~~!aMrH*8+!1tW
zTVTiFg~N$+*oxLBf=+bB=B4lMyD)GfxkDXilXh)$ZO-Qwg&6|I-yfyK%F@l;(Cwrd
zrVKyrIOJ(B<dl6W069A-9t{;b&f?AlD3plF?~4kX4ZPzG`p#_C&G4LeI*VC)^;VsY
zTP$9RghVj}Zxr8(st9kW>N;u_T^H87cwNqg%CGJXo!g9b%1UjePWgQG{SvMA!mZ9O
z(`J@9oS{p+_lXP*HZO9WCC7>_p4|NQ7uhcd6WMYPPm4<n+mG5<f(<u2r<Jq7#b?-3
zompETk7c{%7qDstU&_4ocBS^`EJiozs-Q2Mr47#t{lDrTd)+!r8jn@j+jcefxl|Wj
zsw~~F`AO|`@p+nu&TtnkP2u*A98af03SMWo$-XE#xVYTHA}>csHN@;80U^?ei}WlC
zsp!~v9}`H%<P66X4!vM%BfTlIk^JoJ0@Gy=qhmefG-%_#opV;z1x@Kt*|BGQg+!j5
zvm+CYI(!lH9Toa~gna?b^aXQ6Tm(Y<Dg4g-l|My^+#98*9Bz?>C1k0Jb#>?A=N+tY
z3j*g_i~qP4yL&UTD(TpUN&x-2U#wJBzotk})k$ngeQG<q|5!t4`_U#H_(@JpE-o%9
z!R+0sR#K&9H(#W+>5_7#^)!<!#v`})hKQN{TzTylW{yzl)xd7yX}#Y$X|MIZ(q(bn
zo%uWG&)!dlkT~u9UQLwRRl~+r*ayNsS<fWbpP@d?GJFKQ<e#M;bK;(R65~qvN7!i&
zOp{)tnw@hDIWs|g#iw4nH#FTZ(Di&sY$dX)wv5D-s%v^!Nhrb+s!8q;N<-&6FBzEK
z1JDx_U}{n>o`RtR!uLPOB$9|9PmSfSZ|<+u0b=}Lf_}%A^?-eaXIdPkEbjG(jl{QA
z&5e5I<YcJR`!4ESez->@EGVlyP`|p<UdLBo8_3kkZAOJnZ0W?L{4s|a;uL$gn>@NC
z^GEm%1QRGl2|E!wL-KRYce~<^SQfojoyu;S!$Sd`ZJtbTj7Qrk3|e(C>Wl*ydJZOk
zGarQnZE|n47eX?$ZpRC&uH~K!!IFqGPI5z1N)c*oR*+zEy{Oe+MR<gUZ(eoNQC@$C
zUE|0TT*jElj*HQ6Hl6;attI55<+7geLw~ucCTWif3{YFnK<**Ei!<3z%_5+C#z<m}
zpGjhvfQG@aPQ{?Hg#Ew)hgL#ea3nvPYZR$c2ve2N(GU{p@_qV5VuH#^sYyV7K#EO@
z^@U=Hm6pWaQet!Okok+OjB<+g@}+i^d-b(*B;@<r_R?`jk)P8i;xemd<<{FKVh{Ht
zEu9jkdISx-wJNLY3_F0{Wp3(4b?vE6=&L}!GJ@VGOjC9ZVxk~y4E4%R;K6*Ot&56p
zq4ais<Lqb9(r&!;8^p4hF*a$rVq6PtI?Bh$Az>b6krp*MzkLd-3yz`eXA821en>_z
z<-VI)2T1xXqWG(#Vxe`BcS;0<ph;4tdZS4vLh5l1$$Nn31nqDs3S~yB6AvF$KBq)|
z2W5GiInn=8K#~1=j}!(UEn8<M0L>gt${F!bjIo1CFM^L`qNWm^dU3Vy<_bz<sxD^5
z%Ei6^W+`M|Ada6Qr+}g(mfO>5i&v?qndj-}<JhyeErRywuf_Ie17XR!?7w6I-9rYg
zaY++bzX()SZB%lP#MYy?nu!`U@)x)N)G#5+;yT?U`aq$KIp&l94XyV6HD2^$&hW98
zyI7Xq(!|4mso`v<-Ep;Y#LXahQZ2$oza;T$3xCmGKAD~HLN897vO~@eASY!85@hr<
z^tY9?2MW*!8?;L^NPbTD6plkv`Oe`wyk+hoeUJ(C@=5$kL`5K|UZ}8LQV|x~Vc0w)
z)>JyxbRAV?nQ74bH;5Y$e|UuyO-d9AJ9AK7(j;+U`CMgzDGN*iCT*b@g}2#=Eq&Hn
zT!xhIi#B)TEOnBgL4<M`U7;-Le}M1Y1cabS8ImZi>}M2iC}Up-V#=yc`GB4FNh6Oc
z7Fe6|*F6q6gbZ4M@<WNr!%>K*8GtLqp)H;|2qD3N1rf<(;`$2bGO6Qc@sq|<DPw2$
z8rA-^U*+lIr~DyR;2<IyBw1<i^ym2|qKWqh{D0j5lbD4YzxAWUk}(NiG;!h7smrry
zTi>7L@L%FVugTpPNs&KtAWCGvC{vGXsH1iJ3q+kjP3bhqSujQ!ghE=FpDN8ce%qH)
zZPy1yvPy}Em+sJ^-$YASuW9g`BUt@>yV_R{5^2}cm>C2GA|TY~<S^bN$$pH6D_fYH
zfcfNB)y;!qOAh*%%*mcckkGzVxed6?QcI}@igvoV*PG1wpOvBcs&N4eF5yv7>7T{D
z&-hd_vQ|xg1CBcTuM%h^DO`W9Ciz(Z;(>-pgw$PmwQckpc<+Vql@e8~V_bC>?9p){
zFV*0npWS*K@_rr=3UY?r^{ccwVY11!icl<y9kUhc&~-t1x5e=Ox>O0b6YHvk`Z$)U
zzzB6VdSebj)3qb%&s;K&>)J!Ec2B^=;#s_LR)zG`C_Nxz-p_0e?NvPvx$&bMjdZt+
zfBIK)K|MnlbERRUPiQxKczP^mc8EJQxK=d=>WnOHpn-1KrNi+Ddj@+NsaWFi!}4ep
zc}A5O%s_Y4sB?G}Bq`*TIJF&g@r{z`GR(>kxI%c(um?$dx6?U=>{4&S5Ji!0Pkuqe
zl~Nh4#Y*Mq%ZDSZti479UinxZIwX*4yE92OW=}+lMX}2>M;{#L>QmY_O&)fT_mR{>
zU`EA-j7FGQHoi{PjrExO7rPwDh^ccH8V1B691f|ZSGCI$-xlI^le)s=8$HO3M%p&y
zMcb)u>RkW!f4oN2vRA=(qm<bH5-p#{i6Cduckw}r$ibA2L7l9@y?)ip<D1gJ;M9#V
z5^-`)WyOuc5SFkxP)pbU7gg7@3rab7$m9v;?%iNBM|vNN+n@c#zQF&TL6NoJp@UFT
zH2&Y+GZtBNj9zvDcz==xdcWVEPxJj-L>_J&Hjk91%wP?-Y4$AgdrpY|t<KsH^Y4rK
z!=ouaZJVV1?|e|H^bQ*5j|R6oas6JhRa?9e-s_rUb1%kyAO&!z@#<IIrJ>g)_k{49
zK>iu>m4NS4(+e<W0Aq%-n~$+9*oK6mu$>6i*BmjE5auddC|?j!i4t)nb(uR1_7R{U
z;nbE&>+pkXwO{L$g*Z>15*5a{C_?FiCop=(-@7<8bXRfY7U_w1Zu!7uDbWU@H=|Qf
zj@xcEnj`*dYKebVC3~x-I90e%p;+`>d%plVEwX74L^l78wvT2{*=prw5_;SGp);OB
z^QhVBoQkmP^Q5z4SN9fGGq1`;^>M3?SAA0q*5kB#w*rpfw#PKY%B!}F*ph@OzrgkA
zRKXLs9~9oL#h&jnTtr55Bf&${(L)OTN$2A;_e0t1@-Yjqvv>XZt29@S<e146behCs
zb4$Q<R0G@M`{oF}!i5)pf_AEz2z)tSnYjOqY#1ft6PgIt@L@ufnlN@1!_1_CL3>G)
zEHhf(8Y2U&yJN_01D3ttE3=T<!`bB{E9?4odE6hdDt<0s$V20daq5<gsK!0ZOsKS6
z;h<^n9qk6{aJYG5=SC6$7wmN1LYs<ZU?irr1QaCDpYjOBDY%oSZ|%<&9~1yQ5nU&f
zxggkNf%dd}RhGv>eJQ)HDaSK1Gv~(jH#*%=C}<Dh;r`b`wq5Un-7Gpyo7y~&0vmNT
z`}OzhXT1g=*26VRd7SYVDcBdH4cH%GXT8q>OBpGW-<&teshW}a59S|g=bu;7<^Hx_
zo(s(;i<Uab)(r03K`QBsNsay?j`=&Hf_-%225k!QTF>p4&l9Gurv<s-`J`BwqolH`
zV_Pm;`H@i8ewRJ`i^SP9&ZO(&KaKS(C8V_mm#AJTqLc_adSyFGFl<9)?5li1DrIdM
z(<Xd2f&Vp|@8<U}@=ZrubI9UG{!@)3yA^SPh`xJ8hKc&W4EpXW9Ma>?+O|tqf#=P`
zxUP~NeWJSpihREflZ@HRt(-L!*gg--Mvg>gVKrBke|ECc+h}!o2z*Sg>!J>B-R^B9
zR&U&QXUEAu0XjL~L&8EyNaeeKo_3_L7hAg)7#m61c{$v{gh`H3GgNcY_0T=7Nv^=!
z8)3C7a%_b=APCRhKG$L#|1JGnnB64qBBhOk$KweqMDiO&iDgH3#nymn51;iJgdhV+
zG;fBFY}QsH0xnQ8pCyHsy;$2G-@6(enk9B1uG5`V4W_fhQBq=V;fiM84t8vl=hytz
zFf`<Uo2_4gS<s=YKtcq0{h&oXcLx2pTbq}+PmeNKC$&ECcnsetBN?`|!2n|*PVqW9
z@tyEr6DnD2-wk=r`z}EVQ6?8VH1jwXJR^l2P$pUZqui1NW#S-2IAI8$gLn5GC0G8}
z%>huhL2pOrral5J1%UexR#JYCYvP14#h_dTRa9cS%kvoBEFVHxj3$O#LBT|}W32_(
z08#(o2=7yD1s#&k_s^}&+Wor&gLsdXLO9cU(Vvl2n9m)CqyC0tF64iw(=-Q-+!%VQ
zSO^Zbi3Ay#Y!98dXJNFojI}xk@kFW`$W|n?-^37|`AsRTufw9_R%2oVU;HaVE=@Zl
z>WMivD=_C1<yiUd!5ryIl-iC_VpuA>HvOe+e|bE_xW75z#}tchPt=*?L(5`7?lL_f
zm!YsCU7OUU+C!tA@~euP=L*N7=T)t&j;$2G2=q96aSzyB1XYvp+V?1nGtovs(xb?a
zJ`uFuQrJC1xDZ@$Z2BKN6lXq`IOWn=6;@;0jft$oJjn&?7OmvqnvX$^oo?Z69O$N*
zw2QoTJ*PVvv`q+&n}jH`8iR?}&xf#+4`zn_9430~gPmACGs+NDJ^02Z_4jx~Ar$eC
z`Z1beq`#20=Zkr!uc$6WOMMTJltUcZx+lV;6wfq@;@7ry@<nO1^M|35Bb(A>9B0QI
zEz@)^j0l(z>Wp@Yx+4|5nyL`5{)k<piD?<ijnkdAvUxr@X8*-nx-J`YUf^0suTSKC
zj3$6n`9tBExPmkKH)F$dQaz4oA@+}>Pxj=>2KF9_X<PRIm-lFD8%{?PU7UIN(savq
zic-^ZG0OSt>+<zcRqznqU&I;<d_s!ziHW;rHzO0>=dGK+eDwQ>&5QM$S;L#N>GolJ
z8=9%u6p;#OOy?Fq**@GRaNW79RV*my5#-1s3!TFkY!l4l=rr^hWLh>Ecen$JaH#uC
zv6^iz-wKRY4_yyMP+7?3n^K*(nL=bAoe#~y&acb6q$lKFfdyZ)qM=;u1z4*3<A@2z
zTM+WX3IDA4YT*Or6#lkdMLx0)SRta^G$b~mWub%jXCF8GL4$8))B~EO$I1+fJBF&%
zJ2LCdAw~2f3^gT9dO22-$2`4^KqYyUru!f`EI))m?xY~ezvM$3aRJ7592R35xO!)<
zR7+UZN@FbVhHT=anmZ%*Z&Ut}L&6{4zK2!b4`h`M`|2^q8jW#HwD=Q<c&}jAuXcZm
z?ChXXoq&4O^zoeL)NuhQ9j;Qq&V|10{@n{mZpmJhWC61qOrf-j1*;|_)V~5oNR?)w
zwZZR;AE>H4m_)5mrY)j!reNKo8F^36iRWk%b8h95O(mUd+}2pUoYdRahdXH{i@sjp
z$3B#jF?_9Izcxg$+8WmxdAO?N<)K%odz4!nRt|QC^?POpHXyPv)>s*FNqydOcZjPl
z>p_)WKVN42h(<0mE0m#gbN(i3xaP>d<p}r4_Q2r)rt0kzkFV&me|f&8pEu(tvDi7;
zhSz0e^CNx5=N2S^=NKR#ZnvJH>+PtWV0@YevhrA8f7f}L3l~JB?m=FDmg#8%nx-Ee
zfxg$1T}0PIR3y<uwNZ9@HeCRdBwpMEU6tKg0k^%`-svlko1;YQ03D7$P!YUzm)IJ$
zA3APsc49UzwQ!={fY~QpBShV88%sU$$Ae_KkQ^vqWtN6ooi-W`i*>!&&kTAON9hVk
zc?DIcdBFf^<8SN|dB`S1-qDUn%5|73p^vV?VZ3Q<($drxXe10NAY&l1m=LQ}y&@p4
zHw0_}5o#|K6uDx&ka8>2!Mj^fUZqjjaXvj2k%!gUYi9UUmr<*Nz5REx(pZv8|859V
z*e;mFsaese@lRbO_zAxRA1r@#l;#tX4jS`6%uM@Z0|pq}VR?hDgixubPlmq{|E7vL
zHSBZ0BR#P88#){=7y9(t8x@^r&P)uDlO-#J-7&vl^WE3}t{?rQM0)zI37D75-Mr-1
z)%Ic`(+#>Vv`?nAP-t?=2rbFBl`yeC!S8q2mW7_`vk24eaM1ONs`KQFWV?;r@7~Q`
z!OF7EGE|0bMN{VG)t@v1Nh+{PSRHI`5OD(*b*uiu+`rfQeE2ODo~LZyW@}2NHzZ1H
zaGjLIPqm$trC+(@HlN)v9-E%i;W0umqBBm>457&6Q25EnD&fn5!$A1hLP2~#)8zxv
zt~8(p2?XQ<P6a{*Y!0djp$I&OP!ON8zHrZGdkkJIH?6K4X{{rWJ}-txZc<k*823jn
zv?Rs!BpYFboquT9vL2WajO3dM9i*4oH#%E`hP;xd*&ks||Mp83Q_j6h@taq@*MiT=
z=#}X#!%C<;+`9SRoxTg8`1Q+r(mcKMHaPou&sJucqA0P}ib`KbKx$8O;ibvOydJXF
zvc#z_f@3+)VG)wMS<`Txar`{{+Lzv4Dd7;Cw*LmFpRvsguD^y>sE^iCeSjiuKs0Mw
zdt}P?@^Iu>){76drYwi;l*@=6m5hO{oUU#S2+0rmJ02Zg*v>aS2E2iKirLr9Kx<Hd
ze0+d_@O=J_KCt@3xcp*b6kVa4k3(X5<<wlWvkD;Jx9Y!UbtZSAA-8wmWyEvF#&uVA
zE^;K|MYX<v%5!H!a^XJJ9FKm<YSW_Dbufb*@;Fx9#~FzOwtT6h$+1Gv-;5rqN+&r^
zv0|P^%g&c(@kGMPy%y)XSU3Q>Y_;L?b`aTI5v(7SX5RuxuS0(yUR95BqDmgdfD%D7
zB~wi82&bo3O2m#t{|`a`hZ*Q<HGJ`4&{S&aBonCB6cU|F*tIK%Cdol2DakFEMvW@h
zq?r~Qir0IsA;M)<Sq4w$ir4oZj!bLH8Px<e;s-+?^gR|PHh$qNv+~NWyJlntudeH5
zvHTpop4#N#nW*D;Ua4(tkE_Lo9f+Xbc!n-Z68Nn(#z>|^IUhNZ2swU5<6k*ulC&ar
zotBuZPRyZiIljGBx0dIu1-5R}bsC6J1iHww58)SqEz)0u%Mc>f)>k9kO;H=`vdnE%
zoZ&Tc8Tn1}r?6jhLDp4Y;!yB5N6moEw0ypHkH5ShX7$`};!A-4BTW1cD-zQ4T;Qbs
z(;=?x+Kj%blFRy#;+%BSFOYxrrZ8$R26xcTufUP@cdm=gE53E;3=vsdAhMJ9mR2*%
zo4T=vGzZOe<;c~Ck1z1|gEHbf{ScJM1myz`6^XUB2bggz6GT7cT`dF{D}RHeGP9=U
zd~YgJ#%j(zVTPbaoJvYvFs&7u8^UJQ!T-b(2aZbYMDff`;K!FsQ~nY_41iL_2y+lm
zL2!}W10SW9@{IANwL3#POZ`t7bK)IHkm5OnBbKJz7o@hfva@lH-LK=XXiDGQs#+&R
z!2A|n{0dGGFAlWLICg5g#H22)pO;IWEp;p7*xzR3Ua|ke^&%MvrrH=;Xp~oUOY;P1
z1Jfkmu73{xQh<chD+P7m;QtR9We8C`x~yBr_qeR*J2rP&VXQpFe}|GbW3NQ{e`_8s
z8y?#sqgJ(R7YM~t-%#7dqoWqAqDn$+5hnsFOynePRzBzuOd&2&p&3(*CCi`>VO4iL
z#t_woN!E*bR`goy5Xiq*pAmDxbMj$Lmx}(etN82Wcwr;!+}BS!7fpq!{72!KiZWTV
zMgO8j$Gfy$TfrGRS~!z`2Itw2TXNMTu(@{gz{A<N%>>0s%FPDm0(3={6t~c*G0Y*e
ztJxXH4s%Qc+8%owo2yDgs_ctLx}{g9q3fx954|BYwPOx&v1NWmv#a>E0*UQPJX!L@
zNq5SUljTH@*u@hIzeF}wb&Y@4J>>2f+z(@gs|_MZyjMx5$m|d{No9U4b(7%jpe(Ho
zLKZqiTZ(k)K4E*RU+wXgI_PC!$;l~2Ni{<SEqTiTC4V<VT!irkWhlZsir<Q0;SF~Q
z!pV@nUG10EK1TlNAs{Gsk`4Tt08qtX*pq*ZZ4o2j{Snr+Vn!>cxpF>Hn90vnsvuRa
z*vWU}FWFGX8cnjT1a7jHBBy-}+lc;Jwc<q9l%#8y>exC=y`a|CJyu;##O9@O&fv7*
zevJK*cgvOe%P&8#U~1MA3$~tMTE|}o-})&yX<Tcs_T_IRe88$;3t5GV^^eIT`*0Df
z#`F->*R6G2iZQCZO##{}&gB8U0DZ1JMhP_$n_Md)<6Iq$v=;p#IF7i`m<si}=?W&1
zgFRh<djg38QdO*vpa3cYb(>)b83He`LY&f*VrEbla_U%K_Rlr_^HLXfSXxn6QM=8~
zu1@<lsF4SgfxbxBK}Q3<^j*n4vU&fDFgEd}MfY{a`W1mraLA*eo_&fHa^Zv&P9B*e
zk>sxyIDD}kqKl)kz81fTUC5EC(|wRp0d)iB5%vU=o_iWF35{>^cWu{6@|&1gNky_U
zKFP9!;aQ(>;D4Rwf5PLp>fx*_#_n;VuAM~!C3q~MAA$5EOZx58o{=N3h1YwFN)s^V
zOd}Mqw63BvIkcg1WDVUkC@%PqQ(Cy!fz<c%f{`~oqbbmTGq3Mj!cPM7Eu!`}SPg$#
zy`I_j*wbq`6&+^({AzT{lJ-^B`ikwrU=Gh2#Fm08j9}JoRSXm+6I*n)N@;{R8~PnB
zXQ;$vLBTS%`euY+_QNL0Hg_G#vJ%6z(}ex3WgbO001mcg+%n2_NMU-w0)3cRw^>-5
z3d@4FVKeye19>=)npfSdJhGKSD$cco*GHgZ$(bLn)Gxo0Fhj4AJNn10<yL~MBQo7X
zr)-W06m~lWjM^7c1Y%vJ!r18@1gJPgN)?MVU{d)1kmrBc^Cz#b!hf~V<J^W^xc>>J
zVgDzurpsiqat=;!4=zq_o*yJbEIxl?F(pD6`;W|2gi{3my}4t8gSz`)77ow<4aV9G
zG@JI*o&`J)HBvuy5RrMP2EmEwCGXQYmus|(?<t~iPE;4KIR|;jpNHKU=Y+b@<U)U4
z4=d{Il`l|sAks*z1enk92bBe3C!)@og_(@_QXokfCGzZs_*5yRozL|};OePe*#t3{
zlx)8jH>aI;XZ^mWn#NqkdcN!6)J2Sm5AN4dT9qKD=~_EcnW##PoV2X8l5RLKWQwxK
zyKwh@=QghH7b?Pyom6nHO+X|i#h4~ns7x4823`}Fn8%lPhv3wJ8ob4ML|34t{<}YV
z9Neonvd5MS2dkE=VyJ!6w&MqD;6X4oG^E-A7W$_2jsWuwlJtRqb^<3s5&i=Je13w0
z0#W_@&)I*5Qna1_;sP&w^@Fa93sFl=Un`=bkmeP~P*<!v5am%t8kJ&AL|ekbpHeH8
zq$>eeV6o+KF1v|pY_Rv+9&6hN8eP=DPUTAZ_Y;}^ED%WQ-0KH6`>iWMqw`)#&{GaZ
zl{>oy@G!R`VS_V2PMKd}LK%$9$Sf3`Lfl&+T-#_#Ip|GKz$rmS%%)4Z>|h{W4O)t;
z^$l3Ed=g*=PBaP}Q*s4>`E+uSgl9!E)WafK6v7I$myej^R@0_^(_<$8((UQ`&><0X
zVt|viK|=8RF^t+t#tl$u<XMRf&SWLPWf>iEyv)vu37;7Y3QCE3NmteP>R}S=pDD5%
z`uK-n2%Ep|p#NX-2mXJ@Uzg7Y<!IQMW9#(FG%!$a&Mp|6cuoKUs9B7_@t4gqnU$b`
zjL}HY{#{T!JjhRXT_m!9ss|$-5Hfj#42d7!_dZ@l3HE<>HvT0gTaRzg=W8w5p(#Q=
zM<wCw&QjcGkDj<isk$V6zAjUF<AT+qz%>`3K6(X?#fEn|6EYN2JtHC}26uLjd8zXp
z|Cd&?bg9QmTQrYparfanm4Rx9x9OA1ofEj;!03^NFSwAYB)>7UmTJfk1f7Q>nVfAA
zU!v#xVF4lCXSaQhzm9n7tEbcS7fr*u?-wpTy=@oUX#WzBOv9GZVYL6$!DH;iWPb<c
z|KUgYmG0T{n?!4L=IXDdpoE<cDyXx?fOchNXeZ@z3mw>H{@85$NYS`oRLue=i&6P*
zU(U$s>Adc`EgatmuFHo#v4XbnpU@lgU%6nNKZxQM#GNVE<u%N%V_3KJrDu#aE#>^k
z58{0UNns$-beINyKxX?;j{YBXeFan;UAAuH?jAI_1}C_?yM^HH?ry=|-AQnFcXtRb
z!6kTb$ZO!Axijy+SF6#6Ue#5n&e{93qVo75D>NA*&7)2Zao&ff{$o`A*ExeQ5Mw4G
z)Y!(>CQcU*GY(|eJ_9yIOu&w)>+~ISd!IJCGu}_z^k8<`&tp`SLG^$eRcwX+hqS_x
z)Z4-CzL0&+`)?L&_2!vd6<Jam$+Ht;okWtaw27W3fLPizT@#$^{cHkHWx`>w*;16n
z_4D05+06ad=0;7%FS9Ge6t+Q$BK&sJQ-wUKu%1*F&{aRQ!%K0Kd4d(CixP}PYc3IO
zc_~c0JqWlo=>BH>at!-P*6k~7E%8A5C87K~wkFcH8qRJM7k^bJ_fnN|-`c(=(S}^s
zQK4Jm&-QisYzDvDmKYHa_7LFQp5zH3_EB6iSNVq-WDMTFi|5@t*y}Lh5R*-QG(pbo
zG@Exe%a1P1Ao#C=*kD7v2qcGw!%9G2S&dgPG9-OPW%l<=NpJrFEK{p~cqO57T0xwP
zkUSE?j2(t`8o^eHA4fpcCm8Jz>3Vco-+o21bmQ}Y7et}rLdrfmc3F{M5eL-{lc@Nm
zo{8q=$ken#0pO-uzM@$o*r__roXDFOiJB{ZU;`K0B)UU9S^A@f^_}NKMb(jE5`_sE
zMRUrQTNlu!2*}n8#_3awV-5PMSOW3NZK@KMaVUktyHD`rB5l4Yip3DLP$={vGumBg
zUr30kf)opjaQMyNTcEf+oTP0U-Os?Y#`*Qsy}ZfhNM~+l4DcV62JrHmMrUD0S|?1>
zbWKVZww7xp8Q@_+ip4B@87qTUaWV3iR2BIwT|~e9d^%hMj__kh?T3QnT2Uj<L+D2k
zebIkWqnw2LBZX{DN7t?H2}-kam<nMyWRw9a7<0gC63s%wDYIsHKf$<?L5@vJlLHJv
zb$8{sg{&hph69<eR}D+bY}c`MnM1iyb2L#=;w9mDSsXH}{9rL{KMjlOljiR>*|?^@
zuY-fpaCpqTBN2UQQa($4E5Xh>-+kTEe0Zymc?}oue$S%<0ARqG8WP}JAM;oM=J!9;
z&D%6%vSV)UyIH~*P|`14QKCGKm8iV`lC`NbT}Z7$(<lfUV4nP|?&9O?jFe`bf(e|I
zG}8tC*C@wL@vwXRJP3VCCvy7Hm0J*c&Zz{#lv^kvhxbDebqAFLlN-G%zpUYIT-s6E
zElM7$bj>{c;1H}RGWcF3<3MAwgrgB*!`&lsQoKP4UUv#IXe_Bj-1`D^m*mSB^Y*Q8
z4u!F@L@P*qiTs~7`_C6ik1Pa~SJ)%-Dp{pR<f~7%p4Y$YbY5)F)i28c!SJ}C0j05<
z<cGS&Cus&X{n^2R@WrC4G3b<WfmeR_^x<GPOi<a%#Vf_4)kicjzji?{kH%|%dfo@=
z7g_EUjx@W+PzSoTEVkc!Z1IR5e|R$$W4~bs$=`~O*DH~sK>ugXf4g?-Em%;QfQK5u
zP=34qGg;jui9cy58Fd7`G}F#4?M_q}H4${>WK#=`HFvlmmaZ0;*&Msvrv=<(muBVA
zuWCL(5#)-+$6_5#{(ImFsl+mb<WeT1GVn;eKMDls{mf_RX^dcEVcL<7mROC~3g*i@
zq&XY<d>&nW5(s=>o<%Wilwkq{uzRbj_sWlKtVU(da=3bgz>6`)N`BIKiHD{9W+EpT
z{O$3%srKNP{Y6SfkZQd;#QG=pKUsbBYX@}fFd$)6@PHh{JNm(FVpmyI%E`-c<O~NJ
zGr1C7;NDT1g8;&jxnjj@;Kak$7HA-#Cq7=3a5T4F{jHhEanF{}2xi@39Nq?p!xo+t
z<1F6hi@dhJJ-D0IYwVo-3T_M4Pw+GP5<-CVw^K{u^>=YI<I7=~WQ0nnNPoAMWpWl!
zbN>sL@4Y<lm+;W%ZR7BBHDCt~9DqQ;1xN<~7s?eoJsRznqM57cZ%tr(+C&gn<r7!Z
zx&<qLHo-RGYKvU)tW8HkB*MQ4hZ>4IP&>Be$9Trkz=!mRpu%4XAgiHEP(e`TG2|hE
z*Cwk36mpt{5ESrE!e2OT2vI-kFAa>hIs!KTqEd7N7$7zQfUbi|j^voi+GvO|Ba49Z
z+>)Q^H#Gp_&0yU=W-iw86%UdH5jpyapbA(T4W%hwz?^^SmaqFWyFX(F10pI$R*b+l
z653`STOy|<*~konYlK>aIrDODb9`m8<Ym!`%rUI?bablmHvy;t--qPAdNsG6F^XU>
zsOj^h2Xk@OAh%gun}@Mn!4r4RSuCKEFeC&Z54GF?08D|>)sdry*-AB@uul7Y0tccv
zAOK%bmS3S83EhI@3tUCbV(I!OC^tvKiGP$>bwiS0EKsz@HeEZk@`cZ}L8bxxs357A
z#;SoogEP2gTS~`}vWG49GgCI80<=8BC-)rHcN%tZePN7YY2?(<=L=X2>&{zLdB}tY
zU_q_@L+#yrg8epAz_}%8)ISu_T1Rcb8wyLCWeqF%thnC?G8z`IQZGx!1b*jfyAkQ<
z{6q$7h|1DmM0&vB7)Is1lF{VKNmnYpp-~3T=HR;fgStTdtD+)@(#QGsLbmE5^J?`4
zRFP$|y`e+S42%`fgfcv+ErMRxHh00*ctdl`786p-6u5&cV;nZ7^dz(3`|FU;8?=_*
zI;IoMd;S;}3*ATz-?~xIwTDI_2G}0V&sP$sV{^mI&}(bNlh~~U$^)ueYotPGm#UhA
zvJG*vzx3rSr6`}&DUnx%;1aOgJXT%Acda*panM{Ld)>4!V9@Oa)Rb{1K)M3_M$}k1
zq8~>1kG&n$$i$e$D(AU(ak3ghO)PioFfhLy2uShRd2uTdoJWLbIZ1^c3lKc_=eM!u
z&!3APS)WDGHr31L^epTZt+jg7{cJd^;vPK>RkHA0m*~nmftIP&EX(RJ^sJ;8OX?Rw
z`~?D{JYa?@e9Y3`f*q?TEBuo|aFyJ6H9(?KV~h9G9J7nrhTJOVQGx8YS!>Qwa{KJc
z0{vkPRYvMHmQ=EyRZ7#GpJre43HIda8Xk$b-HhM~0sYhaHDwfBabe>3`pP1*VxdAo
zd7*)6NOT|YD+57@AV_3>QbNTg6ZB}{N#RcixFW@SrES4{lI!Lnan?_Ao#p(KgB<-;
zC;W-CN@D<>uO^ITI7d}5oIknAWtvzNKTci)!;l7O$pWEUDG#M=8OxbZE<X|*H7B+q
zXu@f)5vuc77x5SR1+oHTkT)NOC{jto{X}}5(I|*hXMv(lHUp`bhEA+OyUiH^Rn418
zoyG4iSpim#B?4QlP5gvhRwU(1&L)7-MIL5=VTl!}1t<ii=9EEo{j)zkJZ8#SffDHI
zg&hvc5R`*s$$6j`A}8hAqahcnVk2vorL=k*$vd*Dd45b}oT~mq@^2e0oUcI@&b9OL
zQ66j51j+RW0YYpMn+q1M$u2n8Y;p2SWC-xf)xHYXsh`O?S%Thfn{Fov=Ly^&OfLbR
znyX^W)SMPK6D{LtH$5@y-g;F!dbg7&YYqJ~PVA{hU$$AY0WMsLH+2sW$a3f^V~s`{
z@Cilo90d19b7&{yz%ZfgN*iandbN5fm0q1c!8F$6`}MxDwf4S9g_H;<EDg<J0!{!x
zpc2dOVOYL7(+69+j0%-W0il5n1mHy&f|?}^1Vp#F_`~C@neQ)#nu1rzW9a5P?4UT-
zw7D23wMsLl2B%mvh>`;hZK~k@gy6({?ZjjK6^wzbP$fr+ntN-z-1uF6&`8)fK^&FE
zSQ;fUnEIQ3GM+MrlHL!VZsO8q)V#vxx)Txm1(9mHE&-Zv0<{Et*Y#=y2JRVIwtex<
zCI&?~CIH+J$aWLsh@;6MFFWstLfzSO<B;bPRk_KFJ*zG24VN2*G?N5&qQ{J%d{}kk
zVLfH6$D6ty|Gq$<%x(Yk0&T(!Ex-T7GFnj9k}zs@1?xl9>!<Ot*vhjR0x=AZ9L>Xm
zg1ds(+I6$-$>#>}P*xxmvagRhR3l7z@m<(dFn2`Zo9CmOcV~G6nD%HXxk@b}srU{e
z-YI0OSp;qvZ8uu{u%RI17#)dYfM2MaB{}-=Hf+FvVS&vv5@P)AARGf~5xfn=eMw)_
zxY6~`oJoe~!<|u4X`0?J4xS9$ahXqW#AdzLxz=2=Q3o;w8H=*E>B#kia~;4VnM=$s
zd7^zKFbq#8z1T5}I`X|19;O0MNyI2odAkTwPP(YC;j<)xbt+4{TkP_n)1Oe*NH_OO
zE>UYY{??6B*2WKeM~;krd4=O&L&?~a`hH=)NUBOSYsEx$mBrjcGEp*Pv)nWs_Vx8g
zq(e=t@QOaAcC9zxYM3jI@5OY*t_TH;vruR33!ACsBQ37(u8r;vK4=*{qu~0MfL<Hq
z5{_P?R7_>xSo9j_4#ZmZ>>7GZik?pQT{$JMjZlupk)6zT6^}f!O#Gm>l3IbRbNg~*
zm4H`+trv(QIupyk2Z~E0UJqh31(H@nH0iP7N`_PqI-XaTWBP42cS06gPCU=4#``mV
zl(v~H%~z_tRZ{9t)Ud>=T+*N&unI69X}-Ij6+$=%8|^S|auRN$4Q6xUqhpL!17ax*
zdOc?BDW)eKzl4V)gxW@pdQ|4&Rm&Hn@`V1#Dw%3<wAHhj@uM!XD1-%wq@o^2Y-1A6
z;*AK8F{|YK2&}<2=NJ?zrvXS-eO?f3#YQYsuh#E}g@^aHX-mj0%2yE(D|E@hY`b;m
zT<yUs`fVUgYn;I(a|OPj1U|Wn3|NKlZ0f-S3&U;h_xLfNkG4hi$nm?caA6Dnt^&j@
zX<KwM4~zF6)j}_Up@PcIW&Zb$_y=kTL($UpA^O>XfxYdq3yrd)(5}2u%+J;{w*=Zy
zB%@WJB;kdJ#(~H!<fVOe_DZ&ra`5wc6$na}ORc9?pYGz9umdNf+qf>LmV=_CD}8Kx
zSRVB3?<#)j9la>EN2AFO6Mgin&Dh=XtO&~K$U$2`*#2aO=m~H=b8Qb^cb^X5>&HaR
z31Y$D>VcPrp3oeoKm-s;)yA0JAPM#Nq#yUh*Lf%<Q)GI^&^RPk-JD{x<eMrKD#4e7
zf2)LHN|wEB!+G#ldmbKM5vxPI-$!6J33J$EOjW}plaww?pMf0-(WtOB!H_i=YDiUG
z`x->nCB>%B-b)V?9QN!aJFj&Bt4ODa^_$r7Acs{#8I`e1yZ)n{E~R1}B>@OGQlwhW
z<r)3~CQvCnxY}9nh8lAbg-p@yNVh~s(P(!59a(|MIl`>+k$pKN%8C!s+XqY;ev6rS
z6&qJTkL})}{>%RQ@>v*WU=1+kg2K0g-(8{;pKfR8N-*)1{1&!ZwYOHYZ+AXETcJF0
zV%!=hHX!zc%ei=%o%fH)7xA$MB+f&|KR8U2YQOewt(ypsAv6iUp4OICDSMHXeprPK
zVW{Q*tp9m%U@!AHAOSq~Kqj7h&GWZvf%trb-H$a&w~*u<ZfrJ={G|!!lG*?=^V<=K
zwyuq!TU!J#?&=)0(ABwz*wJX_<D-j@S3#b?(`6ySK@@lsg^T3<cKfw%Bz(wr^4T{0
zTwq{;lFjUjW~rA$#ffit#eopv*7R=07Cdru?%KKsZCx=529j4R8dR7c-e|hF9`#k;
z`K~~{J&p#qm@Hn)y7f-wdis5wA;`F3!ttuNlL?qZm_;Q9LY}YfhsJvAGb<3rU9Q2+
zqo0@7eAV9}sl%W+Yfi2vr+^xzz5KCBbnnjQ+nZm0Sz1`9{9~nIuK-Y{RFMyv%)_pj
zMg?j*aoY7F!ik8<G9&N0W;M1!DkHZMrunt}0x+1YU0Has;<3L8qDKBeC#6N~EciRC
z)xq5}qo>r#qtkjqcy@`U^<wdC;r2qJyehEj;XlU|9d~aTNNF76y{-3o{88o>NVuKc
zOAxk~bw8$9K~hK3Eh+q>yw4XIvS$+H-Me;UIe27<q}%vyer#bvjq&*+Vwv;s_#O?r
zSnS(<h;={e1{PUiL8PoscZ+qwL&`w;09W~0`uC28yDcl8Eu8Q50>|;=c#V5{h~Bn0
zt8l=h(k!Z1PcHH*F2ZUGgy#B_`bQ9agyq>2oUu8hg(Br)Fgf^yf+vV&7q4Y-_?P2N
zWwLHbrTlV*Z4-U5B#W0?1UnN+%?>){O}CD{{WWd!Zi~moArmijxK5$9Fz4uly}OCi
z6VEBEE5T@!duw5TJI{3)f-@pS#wvH4=dJ582;dF?I6klvoTOv>6*zm01Z5G;{qmUX
z;sT(gLLX2mJmUpL(o8bHwQm3Tk!I<{=#04S5npxjspDxD?BW+bZ=DayHOfO6Q6te2
zvP0_FnDibYF0Psyu7}5$FCO1=Ku$0KClG+AY`phw8Ia?7D?1N3{lrJW@%Ec0sW?Mp
zOx;Ezy`A-TWI^Z)pD-|BKgr|)K!*(yL>XV(xg2_yi{1d2+xia174+w@j7O`g9Le~R
zEv5M3u1cjYOkQJ`(($-8oAAuswjFop#qz?%U@VZNFE&g-R9O%+8GUAmC>+lfG*(!3
zNl65uMbu0(oG%Sa&i(jhToYo_?Qp+jaw2<9iFXoTc-z`ScMcKlly|6!;wov9aG2Q4
zePBlxYhsRz@uL!YLbpz`-7zUElKG8v1htnj?B8i_=uQ%7a$eYQ7S!47FV-?&j9g$;
zTYk#1IQ4<r<tG$)zz^98Jpa)rS=<&oezGcY7U|5X#k(l%6owwR^Mj~vr%cihzb!P3
z3h(bjlyTyyPyiLLi-z>v@U-1<UbHMxH9DWZ`?l&BxboE?UytB;aAUsmp$vlitEH)%
zRCdzgY;UD$hwfTZiHj9?KF=J@^Cj_9Sz&i$%q3og0fzagh2&VA8wF!A+n)WR+)-ln
zIg-wzBGz0VBbetU2xof)X8mJYTbGz?PL8ll_A|lRHNF<<6)uI3?Nr%?M;Ld3^L}Jj
z=y|uJ4eyyUy+aGfJ}f@L&4<Dx-XOn+E}F#7$Y8m!Gsnz7EP2DR;msyg+3G%CXjkz8
zom^lUL539AhJCSgZbwS(uF~1v(vX@arG9>lbdvSv1`8D=nIr1zjaHnCiS~VF7~e*>
z;R1=Pg{k9d5~%A%;r=Z|JX&EsJ7PKD76c@f{9v6Q`FS`9GFs3jO)pu#c#=**)Ay!w
zAQeg8(m(Tl<f3$zYf21otMWvEm||msF@ZfkBSEFcqyb56QU0X)QO&F)EI-&QWoUWh
zKw5F``!2JVM&!gWdC;D>*7a@ez{}#^WYgnD)yr?!zdxr|?U_&Z4rpV+NCnEmiZawZ
zbIA+z6vHb#c$s3V{e9DIAq&YFGC~S4sDS;Y2(Z7D4$X*t5n<wEZ~xTj*km<_FLe6B
zQ7+|Clc&o&%sJh(S<=`<C;f@B_gag2L!a-fq*zre+~cEe#8oLrMzp!NR7d6So?|E*
zi(7Zsp2q}z<@DU4vi6<pXW<`{qmL6N^<A)fTbn4zUJA;j<ipWwC5WR0QF#-WB%31O
zqKZR;0wQn>%>I!YKDQr(Gy{@U8LzFnOZ?Ub5aWgweiSmwaN&mGBz@w)MQiq0RQSFd
z7It77;Bdev`{DaQ_(<ApO`|#m<Z$<x&<@h?0Ff<A5<%;5XS<P8+@DBbOq5LEy-fOi
zOW4hi5vNT^9;x6k7{twahN0*Zq{D8ULF5=DGRNxOc7J}fZ0;~sG#xElp*-FV&F;{s
z=78!HLaKO~5B?avI!^EV9i*Nb(0@fwMNz@JaC8lsKWvHfbHR!)2B<&nCVExxzgigh
zn0ZfnlxO}XrfTMdUuzqGsLSYx@P$OsnX5{7+1G@t3&_v+I%(v?8ccM4Y^Tv@zPS~!
zM-q^Gbr@`(x@!hMj4n<x#WMW-n&h3V5{v*2+70~yvg0oc@=xl|avt5D$4{Uzs)Ayq
zZQ0+^(ovFQ65^7UeA1d$5(%|#>#ZL)dOx3fZgoWeVF>mv^Je<XeKeWAKRSAwxYsB{
z^)8g1Mx_TTWiOy#mEJ&Z&WP)D)-8q3O!(zcXp3VaFCqWhQuLmqd!}hSgJ8}(0;Bu|
z$$({&X|%j*rewm$^vArqLAld{3D{L+G%>Tel$Xtv{C3&5(B&J-DV~YrWls`}>4i<=
ze`!$<+ItPl*n!Mq1k<avW9=}mbxMV0ZH+HuSQjWpC8S2orIjT%l3cE0j#Vd490oc(
zPN)xw>_riPIv|U>zM|_#N<)_X&)70Rf5@AuqG_%^MGF@^m|yRlxGYQ@eX367gP1Gy
zq}js+?zJ5(=nrPNtr=VRIBnhrLLDBDN0|v5_428O>DkW=EKF>StYDa=gus8c1)m9T
zhJcMUYv5^uNAeRVR{GAu8DM5+WMyDsa<(~Sj@z3nr~ZlC<_VEf5cOk{_-?ugSm6xN
z^YLc-D2tZXB=|=I^iOfYl=dH5lE%R=8}KBz>RrK6jh%!j!SB8gOWJj5!^~;(rXo_H
z&4Y=L3=>yn!PVHEW%L`$Xc&%7!bY6l7lw=>8tXQV+_bAd1b&T!8L1K}B;>K;0~fgE
z6&{6<Z{8BfMf`WA)Z3_2o1**&d{03`h5Ij!%PW;)lJ8==CHY<J#+*^{PQAn$C!=t*
z%<V4$d?XnrRy#AQOcQeWPaFc;_vKF4_Cxm>);o<25KfVQ8za^~T*_5-{c189%3^R6
zDxhKTDYlQcF_AJFy%aB)ky0c>lE7)v<4mQEG9;3SD0Cny&=V7qNAS-aW^d1|dH-@f
zW|cbpa&xQWt-L;HW^>Q_c?8O&jzIWp%&YOKBb*U!6*Jd8e`&|`2|+Z(dB>BW327W#
zk;*MkX^}Q+X++t>nBv;!o4G5&hsv(i7z}+a@!1nDwBK6=(BM_hF56s))04Xw5Q1+*
z2m|Pn%Ksnkkmn>8IhyBUj(M{Ee1@j7eD5dCUs;W>g3h(Wza?GaLk^H1{WDO41m_}5
zO>ZKYCJ?N`pyV_^oY#Hi76r%M7TVsv8HNY9A?Wq~rV~?{UTk=bVVz$?!h3pfLTc0s
zqk%A5gPf#B|2IOfJi=PlR2Whe*sv$HPQA!WXX86A8(hFQ?-w>LJw>@LMc|Cg@Ny}q
z@hSRIfx{tkgNJzLiWekG88XreJ+AR2=X-#<GvfHqzz`Ci7<nebkit;i7(jXQjCADA
z(<JAu{N&z*VC}^<sq5%`3IGu@YI1nQay3q8Wm+$SK5A7{B1R?=pzbZ>#%B3DO7Vjj
z2E|bLNgOp*5aN}vw>*~_kK43$BNY*PvoJ|x|B$X=P$`-FP@X!mDrjR>RZG!LmOKsy
z^kbosV$eNzT-Muo(xAT^O5Pbct0gbKL9jf~((+G#pXlRABVUr{En9uVuN3)^YP^O}
zmZ^*WLpel}d03LYYzg3p)|P0Y#O8(gFPGQamLre}JG74e>~mCIShM2|>kC^53wvRN
z-pi`_D!a=69B~n$rW$ky`rk|vkTyY0FS!j?CYk^??{>YzcM%kfh(V+ul&B7?*q`FO
zTX7q%h|Uz1U@hdXntzG~I0Y$xK3kVURz64X^{E#6E|Wv1Pku$?;5l;hrz4D^Tt%4r
z(ME;I<kOd3>i(JZ7q6u}Qx({3Z8}gI{)(ukvbdEmORdU5!c;D5Xx2o@w0}i=MfXV3
znoQ0##T|&JJbpmm+^v*8XO)!$_Ru>P%18{LZ>|ba9vO{Vk)67|Sw;Wgo7~|e-CU_M
zCPTGt1+HI&cWxUTh4e*0(6F5d;|!wl!(dRa7xJ?iQ`s%>aq`^sh}x*I#W2Qy&JDZh
zF2#95HIuMIZK8*a5&L@wHukWwpkse15pUAz;(0rE@zJizRdtMWkz-+$JXLmy@8D?I
zy@C6$39d(~vA|!Q7kYAc`l*6*4a3`Sm=ryP<)4n_ev7xq2A4jXT^5No8ts;i2knO0
zH+BS$@gy~pMQ02S*_=M*5H;JFs`=`DVXWOjAUG2R;SBGf<CD;|O(L`}(ANFS?Y=3}
z5&HADOc$nsMHN<4r{PVN`!5eg4^H=rKP9)2H%#u|IBm`{*X6vZy(Sxvtxdel8@YA`
zIwd>7n7GP1YdYI~a(rxjRwSJ6zv$yMf_JdqyC|vOmBlEE)9<{*W|LGsx|_B~uzmtZ
z3m@<8a69~54IXVp>_^%Z%tf>y!~i*}d3=V(*d&Mt%xtt^`e;>X{UJTexEk?~mG0_8
z0nD9AliPTyM7t2{?wJKm*7NVKQW{zqS8@NxRD$VnhsEB0)KmOi|1NFQx!a9{O2%!*
z4H{eK!9at01EG_U)M^p~q`}Y8@q?Lz)7u3X*B6%;zqgAA&!Rii7TLQqx@68N;wUa%
zKFh+G<e41ZdM(;`QHL%QdgVA+Z)@%6eiO4EZS>C>1q0u<6K8SMGSn5*QdvIuNckgA
zPee*=l89DRwns!OWype*##leL5Ha^3_tzUOBWsWNZyxNA$AsKW3|5^`QbHqW8+Cn=
zCT*rSo~w-O-bv7U*m#GVx!-racfB7|4{fqVIRT&S@FTyUseik;q3iyirpEe8t?z<g
z?NzK=bLW|EW+WC8z63BcSO1wx#b^IJz4}bI(3yGsSCb)`c{`9y5`ZDBq`rh;M%NO-
zZ;Mt&nYz&PkvJa%89^xtdC&$jj#%|jrl}@DSAu+Ydt{Ah$%>$$UPLC6Rq2C(m2&s#
zh?67JEEAuxIg-2^L)4+xPf;|?^<@i?qDGSb?KQMB{aARJRKByHp-UTieEnAt(JLT(
z7S;bzBAO4&<kq?VNgClQlpHBBV^1<si}~WV&=xjlu5ZEe#RKCSkB7pEkx$kNtPq~5
z8#Aew;LrU_T&dQaD~uF~{KxzV0glYDA-YWM-&sfJ3+R;uYP}l!I8>}krZl=0w`0F;
z)b={<3xC1>;O0_s$W)Z8JkZcjJ*uy$E?qdv>RkU(<o+9;2LTf3`PW5Q4`fyZ88br@
zjdJQo$x>iIg_>C|Dks4$#PgVFx{+-)F_&Ap6!o(^4n=9b-6Qg#<M1dJW79^bPwZG<
z;Z4U+w22;*OVvrp+}UY@OM4N(YH2!dp?BNN6$6TFrS6@S3s6;_)enaovX|XNOK4ct
z#LL-^N&md`&E~M=a?ow}b25q}oYp4@J?g@0q@1?u@WBt|3?ajhhO`?R7>W)qHr)xO
z?Cnm@3Ls`ukvh{JHw`Eu^u*cNbEw(Q*I$KwUmJyxV$7P+^k!6*FELbRmHh2}RM$5N
zZ69zU^x&=NU-jE8gVMh~rm>2+cED9}9VJjWeh8iVt%kUBlWl~nnX^3o!r^Sa@ASP&
z;MHg~eTgJE*!5~Md|wk9w%t!c#Zyk1W5qA)l3j4dQYrw%Cvzs*pJFJbXP*y>$FpM{
z4SfOss#hAR`g;0FfPw(S26d}#?RueAiBCJ9E|lvWR}=NrKyW#El|7-2wym`N4U5DL
z7DL5pV@GxX-{n;kP30#FAc45gPt#BZNl}hyw*M>(X_IMa@%5gm#H(Tu>qYgU@u0=O
zyYz1<VO*wCbcCckCH|cTE+tItiTjho)OO}nS~M!6W_3*Vwa;@k)A33eRuw~48L#h&
z^Q$#dZY_8f@4v+znWqm*<3#^}M?g!}>M9R+dt2tG3i~moPoLlXmdyFqje?mSZ<>|w
zpVKuxUd6FAX5=5@{oWgce|ek#XVufe89RRUW1USXGl`U>jFuXvGI>AWn^39Ou8ka_
z|A8d&*PrI@w~b69qQW0PKrm?QkyyR;*g0uuWdSxH)ysfZuz&C3?j88{yLEG-w{A-7
zzY9|!>Xn`u5$y2Q&62}~<KKJl$o|z@4iDmO!udyt(DDpw35s(1e-(e92s`gptUh8=
z-on%h9<k9KoO<!}NoZkwZU9mRr;FBvl-_$F!-2mhO4TVzr&C6%$faW9EB$SOPB^LE
zC=<O-`VR;CG+r8n$)-@D_+vf`&WJtkUoyVYEMrq^sIT-1^fT??iEXW1P;pQF63Mxi
z!zh7nERejnR4h~(FqxLLu&PVc(AX$&UM}v9h~jkGM^gPJ&+ul7c|++GGI!wr-Fj#7
zhJGLr=%|&~h-||E{FqBKpFh0b1~8d1n9!@MTHcJu!xIO-D)-~^Mr~_43HQ&s*R5Vo
zL!8v=Jp2*mb}x3}Y7Plu(Rgi6eC%|7q%tXTd<o(wv%pY8(4qUr$8@JaIUIL%tg*tJ
zv4ovDZM={~!dt78_?TYl)4KYXbuy=X7wRi{Kw&VF>d5r4I8OTTPxzVfg`{mj52m_q
z7u|x~OFSKlgT(W&p;x>ez1VDp&`sN<y47chXW`YIF9vLmf4D6UuBs~Nn(AGxj`rBM
z^^ovmGrFyV!${beCMozyXFjN;xuD=?{;GrDeoh3F9rJeB&YW;}4RdiRJzdnjTuy<z
z#B6DFxGiz(dEC+WHD<HXH#RKxUXiQvT#u&z?ul^8bI-pYub~@MWqS@C(m_d$n!8gh
z)?KfjuN*^$Y+_3bCaz@C3`xUK4z8K_HBxW<ME$tbksvzH+B;(kk{kD9*2yut-)2S-
z2`*`IxIK<r-{m}&ItQIFR*#x+Ns9bZY(8Frzj|SIREdk~xB4RR`nH$e0s<khBvI~k
zMk|!rZDUKi9Zi?vJsln!-00uQbibJ%M@*FLvX!%vOY&vE3CWqtmAmg1t51}cmu{8L
ztL?k-luv6ZX<F>NjFj2H*>_2XU?lW>@Ra=?n?;FuAawTGzz?6*Bs3a2tZ7-X-&uN;
zCunhhdD@n`;<-sI|6wrRl=(L+Z{r5c37PmYbsZ{6kU`wZLB`lnz4yhS)T(!RM}$tR
zffMa>!o7&|-i|BnkPhD0oXT)(>(;5APfpplT|&_nOSB4^<W(R`1ksZXCAQ7BUHXfC
z$SNIaJ2#uql|SLcFSljVeh-x2#0m<zUUBnLs*C-l?z4q=<{nUr>{hf%9BuklVljz<
z@~A;jmhovJM>-#tJCVJl;cGz2n%vjttG<2#aD%{W3uPs25q4*Ay^r6kSR8U(*T@dH
z^$p(bu9y}!u+Wemi2s^RftW*hqIlCj`VadNvPSN^p+Vk@ACs5&^`0MfE>$|#FJ&(2
zHtyGJ<3%(-WRAm;`w6^44R77~`Bi4tekyE)2s)WOE7Z{p%MJ9OkMI#b2KzUvR3QGZ
z!3}w20SDNx!3_Vx3M#~;+BgU@ulM02Qq3C@3K8F*tA#hFeVg_7-S@=uQi>j@<<j}`
zkLSAn<t#^EE9%9>l0znYo4E$sKR}f#eX>u!qo&Jj^{z6s1!f}%^?#u(ZRHjyVd<3>
z(GOK7hvE;aDGf&6pL^Yt$fOjhd&<8ugVDT$Q$Wi+(478eZ%rD-FcwwsghQn*5Gv2Y
z_6zV0eCT2)$vcW6=fYesW=l(fz&WgW7_25_diYkPAOm-ZFs(Un#xoer`Bbnx8RQLC
zUsk^D@^2$9po++e0US1fBu0CTPTo|y*2$p<jacx1p#$lQxpG8US)aY3B0dt^p%!Fb
z>_mvflc@%2ZvQ&kJKbu&hiY)<<9=NRWYVJjw^06ZQ@k&G&fjLqfapsr&-#P0_>VzQ
zHpjN-c4+B5hF4?m;YLG#zhfR{xnTrFXTl=|a*p5+|DzLSgpDVk8YrezOR0P^aY->|
z_kauIG*`RuZHTLyJ_^Q*Cm(v#XJc>{B^y69LuhVqe=9ssP`fAc*}P-z%8ze$V6YR!
z|J3YZqXT8KnV(#EB4D2({zJC;uDq&tz_BY)Wo|fO|L-M(gZu6If8@1}S1PTH!cDJP
z0T?P^Z=RBrq~A?fx8@$ZtDA5MXMwmh1y*&d1nqbb)vL}`gFo#3el_%i?U!?TE?E<P
zd6Lwv5USqCP>%B(P!1;3@XzqXU{_LB)TXZF4iD`l?<Xb94C79watS@NmPZ;19?w?U
zC!%dMy0ooA$W7>3CZEtLuvNHIQ2hi|&y5k8&`(n}qnxXZ0S!L03&J1g*ZL~eOVj{&
z_o{a=<A4Av+hyugIG-JJSoBh<+LyZeBp_mY-|@TTEdx2OPLw&T>Qng^nx*y{b2)ZC
zJ`JL|;3Nhe@P_kl!etFnDkznZ#XHX)3!6;)XHz`z_&r4eR-ItJFA-0?CN-(WLHW6P
ztymg4D=5AsNax%DP{|neCjbQajPEQ}o2N1=eRD`uuUPNR<+>2_ZUDCV^!M)X7pFlN
zmU{)U#G%rH;FJZ!e+xnd6O4ztQh3Cq%^H4EWk%k#1p64gMynabSVxo)!F<S5cF0f-
z;b!LTN+UMX2Upg;gb%F4TknG-?`nRr_<DuzYJY@&N%O@UY}cjZNdf6p?&YaJv(xP|
z+Vllu)aPQ~U8OcMEg94-M()ugd6G@-pd>*>g?^wmJEyq7WJLe61j9nT{;I^mr2R*c
zWO?(fp_d0TRHLjgA_RP!EVQ_dG7DG^M+E#z_^3b8rk$&MF#1h!zA;y$)<}D<YTfpZ
z%9_h2A;iO;u9(<&<ANTsp;c-R5svBr@<2;#xB((TWbm1L`aC%6j!(@nL9(Z8YxF$6
z-?+p2qa<^bjdtYBXnXQTG||IL@VI+5pHh@70MLqgc2e<a`9yGCyMLh7aZZ^94GmfN
zM7?qe!La*~gU$LnYV>yMrWNjA5VC!wNZ==VB|S5M@8>>dX~FhdX1bv}y;&C?etHCd
z#WS&LVh_@S;!ZcN(oCLtMPyreR-7zS)5rwvs61y76d3?W0PaT;00$oa6&0&e=kpS7
zw!*?l6!{XBRbw^@=izpO>~6a-whJSSihEzi6g{LsLjR+Av*>cl_5Kb5{7?{HuLvAv
z+9C8RvQPQIA<T(Zc}rqi`1P)M0N+5LgE`>W5a7oG2sU5{6d(Z#d<G~r19UChG6Q_c
zX~Ocvg<n&>@%0rl?2R%FH4cEEIEN)8UWKQ?k6B^hXZE+f1B6_H10>=KvR#3{0u+q`
zs^DI~dEMsl0d2r91fCUe2|7QWzW)4k@5wuP#r^&WL=FVfSBWLS4fgHN0Xc7D?EO^%
z#ycplMg`x0)RM0k5&+<T3VwIK1;^Vp9lH+#;1^UR+5`gtL+j)vsmQc+)8SD`4><Bx
zSFbGG#?a(CPHha2#bbrdO6U+iYjV0n>IvVPhHds)Mec{jPxAe6)!H#;iLe|0#v`|D
zdczT^WgD{5e5VxE*)WfgsPH473!PvZcC|45?^8S<Yd4%5@5!bEkIoFPwVJcU*!TT9
zWg}_p{XU41<(g{sA)AKa>TZ0h4fyWg5rfe*!WbLRn8j9xCQm_vORFSu+dT4XjRe=!
zU9%IDb7x;TZ>`qo+Ls1+?~l~3a%Q3KMsao_Ogv``w5dR7qMjt!9x?^JA1Hjf@zYfv
zz9zJ<@^wGbHI1JFkB1FV5$KNv`0h^)$bnS}tH-YOdAT=#+2(a)>|Cf0A-qs4h4n_|
z5#_Kz!2X{K9avQV6Up$F3dF@{hz<mYk=Cxz_Oe%trGSSvSOh`^z^@WCub!+E(1lD1
zPtcPVA`C)f<rOhHEObYXc<Q<H6bCm%EpB1L-m?%RFZ#Dr1YTl7Ei8FPel*oz5Cisq
zlimN(ukf7>OI?G?UdoLLtGRYIx)Z{`LDmRWT>oL{k*gwo$C7_%Z?oEXztDT2oNWGI
zle^*Ps}Up>XA!qfTN{`BZ`vD;B=YRrr$j}FPZ=xT0$@JWcDPhWM;g4AXqA&H(HmJj
zM%{HhBYTS{PKzAH8Wdx5R(->v*IdmVCxSh2pM_|y1Vn|2!h_;I;S3W)c}GJU7k%6S
zx>Fq^XA&^y`=$07i=G`%d)FJ*yo#NWWG&nWALa*74rXw_GWt(T!%*lmRAC;5TovDy
zz_-(6Wm+wCxXe(i;OorgbFnZIuHsrBa(~Za_&c!q5bK8BrVa<1jB?Dc|G{jb?&hQ1
zB91brlCy6f;XsM=r#=%`32{$<U1$5>Uz(eXJg$8qujkOUq)xpW*KAp@#)>cNVM;y>
zlKwxlM=JdZU!-srp5ZlL#kH&7^Vw3_fQ|@{=rtaQn^y(9Of;7R31Rc4?v~?$;`z*T
zkNKpcNuqm#J^kOnKR0}doR5dm4g~hF-r&pVLa{hsh4GW@jW+jzBWLGBuDLEbH1IX7
z4sn(HBA#?FvZ0#7EO~G!>msAF1k`bips}XOp<@|vjp`T;G9wVFW4_|&Rj0Hf9peo@
zW0iz6>F^zWvRzlOn0h0x;Qxz2@K~S$dA2><{mxgRye$Q_h>T%@IU-ybH4_{Jg6#j+
zir$@8e2bleA59G;>sSze=7>muJ!mjC?n4(77GWscm3dSMh6jHger9j!Bd>ni-a5{&
z-ob^LPm=C^SJ?Gy*Hab`mo~X>%-|6)EDk5t0%K@e6k>SnCE8n6<Ez`BZV}Fv`0p~?
zE|VD!hxUxVq?0h<`4a!0lS<T|hJwIGjAhXipR4*s?yq5B4@X$2yuwQT68`Z_oWiP6
z8G5y>^pnr8#5=aQidhSHk$7zqDuAz`8*GJ8lhX{OQ4WCt?;lzKK}XmjBtciCOxC?5
zSqgI5brI|!KZ4s5*5-8rkRH8uN1&brU<>OAH5S_kM_5YLix}ZYevh*vpUd0F=4`nS
z1Jk*3YMG!!^ori)bT<8SFF>+zj;LW;K*jQGV{l*K+_81*r8&}-ptIJC)4S_v);MUk
zPaCsmB2ps{54NG_#2$o{R!`1j&by<?C`E5{@)PbfM#N>|@zfDZ6u&XUwz17aPbhms
z202cD76XEBs;9Y9<_RRrN^Nqzb#-^9ud0S-2Ap>9C)D3mG8*HsF!%nu>}>6)wNR4o
z;*a0^C_D6O(L*B$A$(DlGtKcn_;OT^GXt7qB*EZp*te!Am;>Ozf^mpo&?Y!sn6N?Q
zH3kK6Dh6!xxjEdYb8m0lp7~0b4$J0hiEz{vsU#q|<V2bu9V?~xOfDiYu1kJ>sM1dL
zTP*t$;m~wk{&Wzs7)+^whh+u&^noCZX_{%)+<6M2a<b@-b;|B%e3K2rO)E`$HmNt3
zuS*K@KJFb#9p|e{2+SGkE%fa@EiJ22yA5~bSsIM)wU;mv{(;oTszn%^1${0A^a-W`
zGvWa6jMjf;t0e=KJXf1-9UxVX{s=&45DYNT#t+!mw0DQR=4b&)3vz)r@;afPOfG&v
z<FO=J9JR#TA_oswSW=RP0|3Ye{o4gV3eX(_&g*VWuM3<m0Js)z&&jf5D#mX~m@B>l
z4fx}RiW*T^1D-)>z0O+O5DrP}=C#oV_YzmKx8lthgjUXFM8PD}4G~}vh-C8(X;F}V
zNv~IBgm{k#DXO0azVK_n+`s*j6dVEn_Kc{xR8w(92iV9@y($UF)c`q)g$o6{Q-`dT
zkO2c(b?LQOYe3lIUT<m`#I6V7Eexau-tV~!@l4;<Ry%=eu*JoXE2p44zA`Xsl807p
zCT<D;Y#3G#qoDzdXQazI3iA}tYfOkVs^uQ>&3S2O!!~v8R`tl%$o{efL2VIs*{~C)
zn=rt(fTqCd9RLT~Vh!KVKipmD2Ap>yZ0BEbx*Gu0D;0P+{owmgT;8iI6xav6^>Zgc
zB+#9p<>zN#Ea2P`R1arFJgl(nOAtz?_^O49sr~SZ+93n!ANPRiK47F>N64gB^%DN4
z=A?U;KqlJcuH;~1s@(*&j~H^mms-@X=W^y(q+DyT@@SK9uv+=&@m4zl0IxspAp&R<
z-hK{{2LP~(orkK<TUYf!-jr9o?@=7&vnji-AQq_<vd#^=ALvtRb;pCfIGi_1@?Cky
zM%VQ9@zQzIU;<Hj`FaLCztZZGfeU~CsOZSxg4)2sUsokShyVbn7yJ{~fGleWt1w^<
zh7FPfj)_Z-#!eAhZ~=h<StqZYdQ@J$XmoJQ6;XLs`rP#7SvWc1Tn#S@umo6|ftnKm
z0H&G+Hl=su%2pBwn86;*<_wSXyepl>e6Pa|0LX#UMk%jf&`d7^8bNngdVnT`ImF)g
zTsI0Z*!RBdze1fxfxOx6-QN{00swy|CGaKa08=;TO5@TZiJ*1!55_T7oH-rFeCQ3a
z??zL=T>}Sg(%a$Md8^{iJ?ly3<4hxzC8+;u&n>kALpwa@nCe_oJtAQ?Fty{fm0$}c
zy`qn7f<YUt*Zw&KIeJUsND{`iOO{Eb623zbhS<Tm6i%%USTZdgCjAtI_GA$T*5GaG
zk&8E+QNND~zOzQUM=f2HQmA+wYPFiu&{SKI74hbL#{k|*5cs&GU6<e*9F)gutG{l|
zFNep9v@yD}gs7UiI|{D2Mh|=7VxYs`JbjDu`hVm@);>`;{5G8I0Q)9OnDguHz0Fn6
z+)P<{C13&on(lWx%bKN9R;s|#6giIc^?9OynSMxNUJp9}0JK2GkV?3BLtDG-=HX`X
z$Fab@{>cnfIc1r%Mg=_hclnZ>Id7P6cU1q3D5cb0SG_Scc7?J%;DFj^N~2+WWVcom
z;sf4~>Bqczy=M8e>704*YaQ;p$ME4R08rqa@`+qYy02$uW(Jie7|VB?J!)H?Jjk3G
zx>qBC4R!m<_F?-HT8a#B5+ucRW5c4)lvF{7Uc`gLx&!ua%fc`LJ2nHm6b4EzIFUL7
zHd&y}KUc#rbB1bp)ru91uyCDLHm&`s&vX0lZ>4W<4EU*`Tp95Fy{Om41_hiO6S#(0
z`a{3&SY;kko#cBl-}NQ*)%(K#+EKi3Q|mx85^&?De-X}Mzw0qE25yi5*Jy(2u`yB!
zQtKx~X)PXVd{i*`o-<dP(_de(z5(w|<&lfTEnB#0oqlsspv(GAY1rip@6hPcIlM-x
z;`md}9e<CrT`@R*jU-WNE<?)Rp@hm8EfozOS)Ql#rxi<%jdi=yU45dqQ}@2l)K6K(
z@rc}~?AT5d&9s&$F7VH5@ZT@_`Q*(Sut3GrXB1L}lM<Ay4w=>OeKok6z-UDlK>3L@
zB86r@%s!z@$l~ol$BS)BhN28<jdKP*h;8`p6jn>b&p!a~)?`YeMU;UF9;*nF7QjGV
z&W3_wXMf_c*LtJ-HT8&GmMwpyBM2)*9-Cm^3+O(joE81cr$>Dmt9q?O>qT$qYqv7z
zQ12*HzMN8j+%(viY9X^>m44`~wy6U-7<47U3}|meGl?VZ?X|Av^5-gdxqkGV?_7Km
zFaJhwiB+aMLTlK@FpWR6W^rQw;AHegI=S43MTb3)&g=>A=^BmhLHTEpo{@+0L`Qml
zFfRG%;xzp+!EBlz%zGR0UpkXdK>TQ9H^1s7hi=@W?P6gND&+~3k}q5l0{{p@S5f&x
zUwk%@`K`GH!uN~>6aLlj#`1pBU&sBwwl26Huf=d1$Cje!mThbx!Z297GI<Kk$T**8
zyx8%$@AxcEoNF3f26nw&IXC%x7b5mo%-5OI!l<61o;cR(aV!#!Ry_=Lg_f*XhhbNb
z<g?KeJcq1%_v|1xnfA8fqN@hRb}-V{Cdjm?GNr4n>nw?{Wee+eBnDNE<f{afP>^Hj
zrKjV7Jn@Ykdvb~rX$NDM4V7$oYP$`Gl&%;vojC`2!WwfMWOS#xcb9w>Rvs_j7T@W3
zba$|V%n!5rh=;P+k862J>NYvDzXKB(Yg=&8S?hPL9#Rt~|MXjWtF?S*n<$BNFyC%l
zZpvZ%R7$ob7I#e|aUTorP0GO+*G4GO9c`%e5~Nt!-|*zwv(dP1$prCHws<u5?rs+X
z96U;bMYnEhni)D=!PgeWg}6KAn|)pn@TQdtLHtB9@}#J+LH^x9bvA&SghUBKDXy;f
zT7e={V|r(HE$xIgZtS#50RoxT6mDcCo>Nz9$Y~HeCK}uNL}5j7MtpeDcQd0I+bsrI
zVHLrWmmG{zgH4a(N?odseN;M&<lbBLx+qw8olw+O+^)`wI&n$DZGu$?!0^QA@EwEZ
ze8IJF0<NcqkpBhh@z}I81Uue}>0t>L&mKB*eytd}Q{#6EN^a~?f1d|m&%N>B7eiz=
zVLioMY0_ayTwuf&^ulXS3oyfqnYOX5^bscHUYm&m8s4vG^J7`6IJ$2y8nG->Xr#1W
zv;%7M4;F1+ZxDeN2BpA!R?T+C+H##TwtpmF5e=8Y7_VuI#iIy%49GaIF9A&o8`=Hq
z92^L6<<1<ylZTIoj{f>buS26~UNM)pYoX`UyVlE`T?gh)t1C1Z&X7B{3yiio@38So
z?mW2C;Wa3dY9wgqH1=WEe?n>by7^l)TH9+rdKDxfIB9F`^8gg$CSQxfb<rU+4sTL>
z3?c7J3DGD2k2ZG37UrfHEeut57qU|4;?+Yil<YANp0&2EA(oF*6ertV|3Bpr9PYg(
zsGbPzug7)dVd~}qe}o(WGuaPf)(=9_md5sF5yjR+M6~}<?|GJ7f#Dsy+>Aa!f?HL#
zO=0q4!Rr%$T~rihns5A@VN&4mzlNt;Q4a&}PEXS(syDSMW4a=DZ3@Q-=uF=1>qzf>
z7hAF7&c#68K9gC?wX;!g_sG^(h<~;rBeh=JizIPip)+dJu9m7j<LyYyUUI_<I2Hu}
zC=qS{Lm+dOO8U_?^q&akyYfk{ok!`bmCl5`H^yKVzSR@)gyh|N41{UdHC@|u!G#Uc
zm07M0UpQk%;$+Av?mKVXAj}^Bh_#kC9L`}_A>jRM5w3*n-g5*7^uFgCzt!NB?q2Z_
zKM-d@c&v%uE8ISpnVtOO{t{3^h8{{^y<T{D+&mz{1OVIg1s!lvDDP4aY2dwv{Fg%T
z|Cv^~mo5-M0Jk`G0i1*#fb9#eGiMU%d=i-n=qnhmSlat>`BifH8klUCv>n7~lR>Nw
zjE2)-DjnyI!p*_DLaG`4+qY@MN!rD^AC)N|SYSk>TCOqqaT$@z{v*NyO<YtwS`@n$
zfesNmuu4tU0vh^RHQ%xEnag~8Wt|aU{Iim)T@XKo=Vn?)M=BOVTElSf0XJA$v*u{0
zQxlcy^_88l{vEHsnt8G0zn%yJjH^^l!{I7stRmd`B6L=FJ3xa(Fq7$t1+RN`CSX)c
z(5Y}4nkrh=FLi%%?cLcva!%)2%DEFF*x0DnJ=kTrMm9MI#!|9ChWDbmGkenXko%0R
z%@jRRFt$<Jl(8yo?hp}QGM}0-Fm&#3(76(ye>mU~iS|}sWYgNweh}W*e(FOtc_}9K
ztBI%`F@8NaaEqw$9(w3wF=0V4M*8&eE#RMT3l)h5>#?LHnECxE6FipCg(s?8uRsEF
zusb{=p+J^KSeE}YQ~TmPu7dLs$p!*=Uyh~A(~hT+<iyJB**M)bL96`y#$<gQ!(gU2
zQRQi&Mz8-z{##Hw*Hbc0aY3BOC8>H_So$9ADiK9Pg;#Cmu)c%y*<*J=Cziu|km+}+
z3Uqh3!|!!cO09BRws0;;lamGxh7-*wV5>tzbbur{F0JWL)X_j9=q>**@wJHp5+B>w
z9ygC#10=LprJ0_j64|x%VKZQaFnSfcQl;Y^cz<yx&V(PIefVj_I}-#G|CYnu<Mro;
z4$-D-(#(=k4WVl)VBl5?|FFmSf#+0@*(+gH7~ATUTDmfGJ<#Xe#1N2MHm3h|!SEQ{
zU^aU4iX%0$y>LY#n00qawPU?@?w-5KUq$|sfbMVVH*UgDgkSIJ>VEYnuXi;5eo9!q
z&3E&;yFA<48?wJ<n*K`4#uUUO+pGXgJ!EhJMX=u;q3emGQLE5uzT6#6rr(gs2iE*S
zArXWU_~wze1Wc@5VU+<G8nw;UFUA!ut;vMfh~qSzw2nQD|6i@SyXly7)*(N0fFw}x
zr1ltXin4I`;-oAnEy>-GOrw#T$2ZJS9+H#*v~Byk^pI|uI>B;Gk!UJ-s%8J|9fZ=S
zAVdh^Cqjk>2lW&0|MYw~G$ILYuhMD%asI*7i0ECm5&xP?4aBtGG#jruxjZWhC#Isn
z{9RzO?wjg$aW_HHXjkyf`chAsVU*_$y8c6?JO%Xv@?e-}OrmQ(ZjOa)<u4TLW!scB
zcm(JtJ17HK#Pq!03fnB~Uspq&XnJyisLCV9nxzS!tHuw%nSF}e(<Db|_01DbbW8B2
zFaDWedXP%xL@DGZeGjclX_h6I!t`@tIDtxGLU&ns4dyF@P}(M2y-IRudmdBO>;@)B
zeYfS>9FN>k2I`+=s1IXKl5=P)5$RJmdQ8h4QQJ*6ty~p;DZ}o!B_7TjU~=4lP6nhA
z{wkjuj(-IO#gN26*AIKm73Tc#AthV|7Oh;J<*5>){<smDj8G1ut+~%%{73}`M*C~H
z;^zDS$X>4NLz874xgSveu$8iuNaoUkDUsqEBRu4>wKLYLKMN8-$Q1_(x=wVS)1j3H
ziCX12fLRd&I5LpDJ~T<;kAxntFi)fhpE(H@yrk43VI_r-g+q@LA*FW6h5Kb}N|Ey{
z4Yiq>6nOyN73V8dW^X8qmFh|xf1m}3lU+k*F%_Kg%ae-c1q+U_js(MOA@7=F2Kj<z
zEIA{ZP3dP`a#xj0z%OH6iN6Wpv+5EYx0=BiowI9HB<aekrG;SN|9HM{|C7?JS$j)3
zJk8AWLnE~t*fWTrdnlne)(UrSPvK>vLk>>t!;?<qXpsQ9lG$noIMG5Pk3#gJXhZdW
z!n9TI1sFd6#_XR86wl@bapCxq83S1>(X`#XkxH2};WO`_SdHh*RBaR~WznRNf2}&(
zgJ8wg(T^~oKMD&Am-{!QVZAH_b$0uxnYk48uI<{+8L!Qu9I8z*AI46_y0X%JUd()7
zh~9yt9($|bxQuVA@_$K5Z-qeHVLeC*e=|2{PPHUXHIE=Jnkw{fN6q~8`8!SbSY^Hw
zVm5GBI{YR5_u|QMKCjm=?v08D&`j+;<$mz(=zUWvu*ijjDFdRDAPDgTYV1$Z4Yz9%
z)XbVIgS1G&Mr(!4FjHD~Nq79M=F2tO#uD@t8BQxcGHx8FkJULzadf2BxIhZ0=Ks+3
zj^UYhTh?}L+qPY?ZQHhO+qP|1#kTEKtg2M(q>}HhdiL(_-Cw`!&T-^V{v^4swdR_0
zjB{|A9ibYk3icBfdi1<`$NpXj2m3#IqqhYIC&!&Vb+1tHc{010vvc&kMEiR0&<D-<
zR+3$osL`3H5Y+typF`#!um!)<)}Zf;g7FpdV{@i@)4lHo)b|J9Msc6<vTX>-c0^$5
z7Y4H(zlTTVunsG}<JYYEi~oRy-<nXzgWiCWZ2Fq;TBnviuH2J;j|PlL40Xu$_0(eJ
z2P$SCDkAs8?-O06P+~3eP6YM+aPMDTrKL8695tMEbU}!NA(LquhaFtWx>>aqKloin
zWg`j4sb(V*b!pG~W49f%-tA}lPjF<LK2xrJMQD6a=^YO3OeS0^!Sgf;k`tMGH_TAj
zDm*8b+A3yxW}Ls=eV?Fg&(biAlLvwB-$On<RtuwG`-p4^(L0@7i&;3Fvf{DBh3+W8
z$uL)3q(3?lieB~W<ni_ehry_enkeiAcU~r<xT!!i=N3?yP`9G1-SFHLbq^#Rzps#B
z$N@^RUg1eBPA-Yb;O{_;g&dTh;|QTo60y8Nn~U}8)hv{Ha-+CufU9IK^%UwW;-RZH
z**E$%OQtf&+Et2GALVBj2BSELd&x^i=?ukt0vybq4<;e<QG1XGWR#>VN1iqS$4-ay
zLNkhhV;MVID$=Y<f_5tDFEmbqa-i7}Vlc)}t0FwGmwYN)so1Byw0sc71pJ9a1SLe$
zDY+fPG5)1ArIX5!JiGM-rco2*eAB#0R)|*iy`g*WcrAl8^n_H|X=ud^Hy83oZ5N6@
zw=_~Wd#M@*A{M*T5jce}_6W~zk_T9;nr#ByNYdnPHAPuY*_+wxtr~|>B941`fn5wn
zu(TK#6b7w`llzN#%?!?$8pJtOH(a%(`w!&qI{`vnb6HXpxpBp$DG_2$={czQo7Z@p
zhWX8D5?1ku=csTgP21x2_WY3AI(LE2pz<0Wm$i9rE@EVYM2N6xDqST}R1rF-KM@T8
zE>vleg=#qgU5)!!8WtLihqU4kZCY=vP-yjaJ_H5=e=sBzvF<pq#qo7~H!AR$TX=uH
zt5%kTS8kn{u{1wbNzB2fr?ny;G=(tQYqd)2Et^MzE7KolxRyh{%|C4+#!o6-lxNm4
z%8ICYc6VFlR<u3VcX!(3OS}P;N}O4d=*TR<Co(cKDl;$T)<W-w|C6wkE^Wo?RoC<V
zWxL=LesFc|&uFt61V~L$4IBtau<U8k;5$orwYFiUC1Gb-T3cLQUQY;V%#72)ZSI}>
zGj#8NI|%-fabzVpAYc41IUGbL&yvGg3-1TWYN$$B4%Rt+y@!AiExXdJ%7C(!MA{1u
zm@igB!Xg-sSV}yAkG9F`-NL-Ju>{6uW4FJdxjOtvg)Uly6r-(BAXS`<R~%Z2wV9G!
zPLUah6Xfu;ML<0naM*TQ!5u)1FRg3X3^fNeURl|thQEd9=-A4IlG&g_=Y;l`#&kQ-
zL-cPJ72AJL8lQus{$WvdLC%G<{Qq<vonAxc9_<}Ip59(Odb-Dso!j|v=s7As{%wy1
z0f;!ZNW%XC#QYCt+TPfdhS&|IaiL{b;M7C$os?GyFTN`YSM&Nvzf$^|S6|5BrC@5e
zrCa0FN#UeXEqwg=#$J&l3s<RtXt!u=Im8^%9{^iBpql^b8)=m*IOD6Edt4|*;?&fc
z43Pvs@S0J+cn}=ZxPtTgM)1{Je&?|^DM}gN%oaF_-{&Tf%XLFX9!IhA40c&R^-n*e
z7V%H>>fg(<fEIAEJ$15LBh&g08InM=i{-ye`KI>im`bQT;lZ`>1guI&3>pZTNnyBW
z6^M_w$JEX%qsK1(+VZ1jx1Q-?#=S0x$m9E{WePFn*5>(Pe(oc&bSx(rS(KzuDi}_=
z^i2v@4O{deR!cC7a7R=0aB}fv6->3bT1{4Fqtc**l@vzuQ?*F69R!s&_MD+FhB!Nc
zlkjTFc|Jys)dAdMxK@z=PHnJFkB<S_n~e3+!OZnH!J*;)#u@!#S=zC87`?Pg@LZ$!
z5L7bT@kfvs6-0NaENS!B$n>)&b6j`KHZW5u!+p5jL^DhEs*Y`zNMtNpC|qnBOgJCc
z=rQ#6V_-aod+5=*PjoOcgh9MP#DX6E`d_+(SA%&_TD4G<C)HBc1dEO_Uo|9FJ%WTt
ziHu0BFs1ztxVm>lrBKjiESZ{3xUQKUQ#chmRqR7yrWeXh5O$o7f)0;NAE`AmjCEtm
zuY`>p&huONV%i8x@|9xgE{Tyzh>@wEXre3)vsE%oHRq!4s-MeUsYTM;M1|8^G)FXH
zMrcIDR+6fEzLUh1!%9d+*0yF$XKlOGrx@n|?=MVpT2_rM@i}Owv{NG3WOE)C!?S|m
zTkIH@=zrLC{jSgRpHm9hi?H3KpV37Ld+tc9;T#U8#n4p_g&d%{&?C6vL@G`#XG-Ek
z(CRM#NZv5Sl#!tsA9nF??aJ2~tdV*3)pDReZSf0cC~J?`#+w#t>e{GcXSf>q_2HR)
z-PA2w;Bhd=|7~639>*gw=2TCgwVZA$1S~-}9zqL;PqoUqgqf*!eXx{$1p@I7DgmS0
zGS)F4BQ6LyK1hgCoJn&*4q~q4T%}ZiOKUm^Sh)~ht0*3;0xvqplWSsId2`WygfATM
z9KnGki<ahUpja}a9a+wrG^IvmhRGDNjwuop1xHuHp{tFRua<~^E5`axBrZc8mm^jF
zmU<S9>^J(ZgsbSz;K)+MXa(m!&SN=`rCt%z8@f+!v=7%uhD5=nj%3FqjP2ws%gh8=
z{miR0WM@;hpmv<oGb<q0kw2^sKI-eHMn?prL{H3lkm9vU4#-0%V@O+!%9J;zZwmYQ
zlk+Oh-%#v!7YdY><Y*zZV_m+WSk7cPh7ckbziH3fdeWZadAmEal;tzCnDkA~l-%VQ
z?Dpk?oj!N<U#Olk9H0TYy>_&?$h+hVtC1C9NzX39_M-zOu?0$xM!l0YPz6xes5UOI
zlB<@Viawh!$IYj3EO@UNap;x^F}(m~gZ(7R4rg-DSa2<goy8OGV&Zaz8cTAGB`UNr
z_6P11GiBaEJvE(`?qoe9uWC6j!8=u{9LyaDr*VhIte(Ent);1O&eA?~jQh%6V6&1Y
zSFe#!;1U9{Jq1WBim>8NBQF0b`ypih!<U~`W~^mWSZ|JDE3G)<V#S2-IPhcT6K}zV
zbRw`xit{RqC+harubm&F>A{P&w=pJDvs7$?!8*~PwQjIl``%dfFyK06ZP9RUc}vbV
z=*eJd4_2RVd2FZUKwa090x?i*h+?Rt43zqXmlxOzI;|PGf7o>Y^5Cc8La0e-fKTc;
z*=E$zunHMtRaR@xbVf%;ce-zQ@;e>X6jep#@JdGzR9U&w?xkSKSOn#~eqqn?L;Yp>
zTnV9t=Wi_@6F!qZ-I~wl@1%?$EeE;#dV9YI5QjrgRbCjGxwRF1g8F)lRajkIF}(*a
z;uQxInXhn)*K^AGT`e5-5&9gsf;UPMRj$#|R*(T7^yrl%cD3wI*`;y>l?JPRHtS83
zO$TmMZaFTA4t$gg7?%(|Q@n)ftAtrhj1tVy4za@#ni2XDgA>T-_1I)mX47f3yRk_d
z8k?`n-O|Tvy^3#S52sWLm=%{Htrb?ExOjrt+>WhG8ig<xd$1OxRLuEWIOx~s2M9H%
zlPkW|gn3kD(ZJPJ*7H9)Myiw>zIWPc!kHp9b~v{07qOU_t~RK$Kz8jBvFAJ-@NV<+
zCUkkkw&U*WUXUV05walXcP3x~f=q8=y*W2{kROz*7>m3%?$B{6^cZgYzJ#opdj=vS
zsT!Gmaom)RKn@l;5m`aixgjB0iH2vB)p~S(XQ$MDQYWk)8^#;z{Q_g|Tf9|!OWKx#
z58;}y8Dedq3Kx`WIjK$#4PUO(IbxsFqQN_%YGIcscw7jG+AhVBu`^C`8${Vjr(qET
zHY+fC(26zho+B$aS%-x(>6tn8*uBpu4(K=aLs^Tx#L(Q0VW?PX(iWP{c5^i9gv9&{
z&?2z5T(+pR-<hw&g<KXM!oc`;y^ES^6&oU4q*w_*{~1t(3VhnzzavO6?5)lkaYhjx
z5D&5_fC#cl=%CVKM8=!?&HkDqu2+fOjL?&3N3u2EG5CO*hu?wSueV4bkJmvI)}{9_
zSAqFO756(D4qn>?sYS=Y=A=8jS(m0MO-!nyS1Jr*wZ0YeRf_jHJtN$ioNlxGug$j4
z!C$f$b)NQLC|!0Ran${6o#t?Ytj%esnumDo3keDbFu&Z7$e|JQ^M@Cz2t+uq+M(4E
zdn0|(3MkqNR6KCByPfoM9kOq68#Zxp{h8KBDgYw(dQ)yd9l9<%n#N93bZbkKTaVK=
z9<4QP4m}vHZUI!ljuQgXjK!GKK?!s<GG*mvi+Vp|7&!nQhI#7@Oko~RqN|S*qw`D~
zv<}iD?B9pmeS_VD8ygbXf`TZNtL@|1w{E?*=yASz+$IBi*0<-wQpv;H<Lh)DK+kHJ
zWYK$xQL}S5(wErr{$nx0?}+)=Dkn|lS=md2bx!7vT0_&pjVGy$mOA)Dhx-qdHl1W}
zN9-dN@X313!Wmc9xw!CHbg=DE?$m2C66z6(Z0aea_y);5SN#)ao7%Qnblm&RBOe{5
zw|s6a#4@hi$)?<C1@g|q1RR!XZS2$Ttp0WxEX0MH2@>5B_p?USP6-mfs~6Qb*Ja=l
z5->?<DK>M~GI^~W0ArYXk^D<FURB}`%RiW?pJFo0TG=6HqDtWH3zPgq2Q64Lo&{2}
zV~vDJqch*!p7ref8+IXILhkolYC0&hmDWI}mbUIr%!nBuNskY$%(6_Dqs>~(@pUsh
z2ONUSrf*DkKw`5|o)Q(-(5AI&>24q*hJ@-4oJlTYBlfP-0m_XloQ3SSZpfzG6`P1k
z+7eC2m75hEUfpMhspd(=QC*Q^6uFb^T&=i!YgDv8?kHGHp0H9$bU8WB@6(p=l-O)+
zY>ca7HD%!&`C#Am+sZq22vC;;SX<0R0-gAcxTYj1^5`yH8&>R{I_2_V?;V5kC#Ieq
z85YDar+$gamf&^35?xl!Pii)9DV4v<-d9gHc5eFX`V}Y&5T&zrtMq0Wg=3p%8buO^
zV}XoaANo!v#p{~+s>h<y1mZOJKm>cX$LRLFv8vj~wKvn@KC}ntH=_YlQ_E^K5VHZ<
zRfQmf#e?CH=d1&wo1&tjaU4E~8P2KM)4(K=wUwt`Ipn|1$bYRU^(!7W#v=xiB#%tZ
zlLny=&lHZ?8D%S!9j%3iR<^GtNv*2vWN*u88uzw^-du#ED@g{OwxJGX$sc&B#ai)f
zkjhLqQXm@5WP@i*aX@yw68mL!toc<qk9{?W6^@TnXfWKCG0`g3U9vnGo4%Ml8-IQW
zJbk|1G$f4GS46SQFmheT6~yVmIRp|=(Pc#v5?1am;Y04vM)QH~MBtgYsQ)M_K1D=v
zGAUMigA|Mkd|xTRkH)*;RKX5a%yf1ism(TmN1zX_H{)}Gh$9E{6ir-655H8VI5M+Q
z0l|?qKi|LJ0%btfqT$Q0Kk9O|6d!M9J*Kdnf(aKk^?~|@N{(?DE(TNu1};VbGFYu_
z8vo8zmq3OHR2q8giC$_vlFXH+g08y5+J=pxHAi>S8ft6Bn8n(`zb4f*1LUG^jYpA{
zZbXJ;lDohr!Fp5?(feYKfpfy^qORDostGyEbh`%zjoaMQFB!64^c7}fk;K2M$GX^E
zV;6-^1_opHnl=O44GnqP@j{eRLbqpo4|ojMPw@Ty0=T{f1%Y_2!uV{{3wZVM2LZ;V
z__#=Pp>4gk$czcj<#IT8bMFcq4lp#T)KkearT(x_AeB_{ffV3(_DUZb>;HAYd;YjR
zqz6N5MWe8u`Zf30ox5V}tqw34l2B~|^l14S&8}imrCC!<ak^McF;xyr!`#~ZPnppM
zje`fdSN>JTgR7|(fug=MgVO4nPYJwTow}A;V8~keCI-bInAEs7rsVWHpEI`v<Hu)<
z$GSE@4?B-Ek1O2$lYyiU8>Z=+=GD>P9c?x>g>>?jf*q^Zyd3V0RXghshB=G#%HIUc
z*U{wCZsz#ipQ@ZUv8raxFG`{)uo$zflR5PnF`0fJ&KqoOJ8bV{ibEeWk08DTSAV%_
zMwW(9LDahhdvu)ds$SAu@4B%EwUmSGonp*oqMB=zDA63XX`i3UxYnjj`e9Djou`@V
zl+I2hROW;Z_byB;bZO1}tRDPo%e0B;ma*H6dvU4naQK^H_KNxiv`o;$4fs_*RKA8w
z-Dn$l|8;*Cj!RSUw}3QLnD)<4r$@UA-A0;%AOThE0py2}!iL9;Lk9cOIx(9s+<26w
z^LNY#%Ch+$Mbo*AeoCDQK0OMad|yZ%Xg)#K!Y+Ex5>r1^LXQL>assUeib$5Ir95KR
zQV&9Ty`Az6qWz@rEs8`{-Iy>xqlC4Q$f;McDT(#7qP57OO}&uO8Px1FW4kHNA6)l-
z<_**vpcN=DR0HW_j!=iLaw~|N0aIjA(p&U-iJoKq9!6ps!&11*1dE_RSOg1shkNTl
zPL!20kg>{4wq%(KMGpd=$HL69LWGb{Y$V=-H5|OauV6^U{g#t-jlu~&3OZJZ)2K&C
z1CqCjik*vPQD7+H5PDiyJcsj|k}?<ftocYjt2Nu9v}2k^^>ZX!R-iXvx}{Q3+pHz?
zp|d-yw<B~&1_ajP*<SUB7b%SyZr<kkXo;Irs(Vx7M6)NfS-x|j*}#+^5-1!~KM*Lo
z!9Agm?k_g(39r|>3OyrHEA`GU_jf-Aeu@g-2}gU2=0)bm^sf`GPt-gXyJU2^`;3(D
z)HM_fB)Ylt>PnNqjX;4hW_&jXv0M}Z>vLeY3G%q-;YDp0GLlP7b3QTrwC4))+<s^D
z?$ZOg9-OCgvft6nN;EBUV-C`)GQ*_$ReelG?#sw?^-ut0GKXPEpZDHO;i57}rml57
zSGZ921v>Y`5u>MT@m1myl2VWzS?}9zsBg+q&9cxOE9B`&wf#Vru`x5Pkf4;3>xsX>
znT%$kMw1&I^ZVM<uoJQi!;wfnmsJm#=^|<`i%*Gg32;&eX=IWM=@8WhG~!sLS7Dfd
za1M=GU-al5gG1>xH8rP%TLE|90@O0m%BKfgBi*dC?FXhG!Gf-<R6i|dDAm1Oudcj(
z?U1IJ5H91Cu_Sg2rHgjK+}c$_A6HKle>BA1&*VJJFY-8$37<P4W-2*0!em!a3}HdQ
zOI+x9J39}(eARhtpYc2R9zzl>MJiD&T0#;I(~Yfl73<qpWSI_5^sOHI(+0o{p$&7(
zXlkYFRfkM*(5XW%(Rk?AEhLkX4i8r?(KBBNDT){#sIz98iPmMXq_u%uO5%$>K_+lJ
zXZqmGmRHpmh0kU{Z>F1{SDdHE0q%rG30;8DqgsehCxxZ~^SMAJS06<O#o25wETjj3
zB|yS3^Gijwq_syP$r}OPhA^@ikCW<BVy%mQ7*e2&)-j_+g@QQz7hT6v<^A(02mWbc
z79zh{3EhD?oLW#qsw)YcdxX3KlFv3xZRgYa1C;iE?u|8>y0b*8hP6a_RNR@y7vKpH
zn}eY7-;j*CL_DUXxW7>f@}bY^Mih2vtE^;JX&3%DOE_3jED<+n*Xt|&6<I4i9E7Ho
z>J!3UbjC|0&WBo9e^fZ2!^UErEXK#`v9tU=R#XF6FQwjNCoY@~dRDVT@IL&TYs$J~
zjRR|#{nlkJUUZD7@h$-V;4I<0ku{-rOiRw0f%Jyqd-;=q@NOFdfgo80ahCI$PCNp-
zf*1B@#dAIeuc7Pt=Hp3(2B*YbPsWSj$HDG9$U$VzBs-!D?dzmVE=UjiX`T)&%_q2i
zd3jy0F@=ras?!Sl8tfuLCVFztmW!P+B(qH(R<-q+T0#xy)ee<*I=EB6$#P6F*rbpE
z)Cn<{C!b?+43@RX8ZdlW5HQR(pn-}yJi{g3<G0Eq4}J{{GoNaJ4Z&7^X0B?i#--L&
zO{y{#($e4mz4A=imQN6?3xXqj92f%PgwA5AMJ|RdWk$;zwpby->&~3G+w!WvseO>$
zrV-(SxxG;=v5{5+s2HMKWL%Y{M66Zxl)(i02jDFU-yKJPooeH?)(MK&7eDxMj6vYo
zy#N_iz(VxSLG>#2*3yi*&hVAYwR0kb+sv{JZCkGhrs;(PC?vi$OSIz0B^^G#no}~B
zS`&l#uFZ;)yF(}(0s;cVyS$_UN7Zxk-eOBe1VfoFPDd+tst0jm%l0AfFH7zpbFP6H
zQ$`@%w|H))KurvEvNVOtQH;4VyiCG~-73&+&VVIgul@|6uNGa1)J>W=B52K($5)|k
zqrgDy8FyQrI5V{uUh_i%m5+4$XnpY%9WdZGZg^#->wS%YHCtCUI;Ao0El!kn&gS>A
z<$*s`G+AI?KbQu{e%CDZ>!6MQ2u(pMkO8?wU+*=V;`xvLloqa+g(<;D@d|t*y@GQI
z73qmM&bdOeDAyg?1O$*GIZ2w@-WSl;r*2-jIt~!5z4$TXzVP2r5)Hh?UEMK#>HPv5
zU|{C&4t+C0f~TG!N~?^=Lij8I1r1$C&Svf;IU<8S2KyvPy6RBreCY9Siql`eV@mFS
zxgys03=3rb2n7NprIzV^*&I@WVS!Yum$O@e^7uhBoFvlw#pLDnukh-K6Znwu{}rSP
zC(z}BmqDaL@1T1T;4hXS9|%cYwV@Z&sjg?YVvjEeqVjIjTpRZNWKrJ1px&)-<#>N0
zb^S&$@-DYAlIwDqO2{C3FsMEGE<Ne1_`XDt%@GdB`gpR8Rm#NGu!=?`;VI9SK(6We
z?|GzBYRMIs(x1QX>aNbPfq^91)QJ;F9Tb|wLW<=J7MVwGepMvbLo@QDdtPhm9%rlF
z{${NSK>q~wWJ8T<O0DS#Cfm^)Pb)H4(ZFjjC5X^ldY)+ezogn;BZZl7j$V&W70nP!
z#++_?FOzHK)24s2u5%N<%}}EDOEF<G(~Z^q%TM0Gm=g{W7=6P1$0R>H42UGgSG7)Y
z>2%yW2)f&JTGI#?9=s$@5$roEl`?Yjw8}CKD<Gn5DCDdWw__zSMp0&QLqn*9R4h+|
zMf=;|{uh_=Z??yl6W1BaUZ~$2lglvlUqg3R#78=b4M>(ZtIQviqe%m9Il1V6@@wGL
z{bowt{yb>B2i`Exe?@-xknib~_Ju;|K!Hubs-#boAc61;e7lGbmpzLANai?!Fj)NH
z#Q#ctu+v$g4|vX9U^X~wimUrUIL)=ssKbC^Ark^ao0U5jXH$StVR0cd0uwWH4@zic
z&7n@1?l>^jasQ~;<sW}@3N6CX{$a1*9sNxj5Bz^5jd$?=#q|718o&K_(zv@oB0x8@
zm$r;a&%yQo2zmubXJ-CGI>Uh{!_ZR#RQN|lfj$NutOzERMx>e*eHixoyVM%gUYxM^
z8?h5${T@XBeq{<8ks&{7+YH9_g7ysXVVaw$ShXAFT&WEDtv3HWa#7edu7eKKtGbg^
zlL?R#HPx>(hDhY0k&O`c^gsR?-5q&-FQ#a!uU*p%7hOx%XIK>yVj*GxFXmAe`07pN
zoQw%BNT4s4+VIg-Cxvp{^HAdeva7O)mwAwI!F)1~tu{!h=}@izKo$VJ%lUvA44vO<
z?i05i6*Iil^Il}Q<;4F5IU)U|u=VzKV6Lk8N`<ra<@U*_dQ3E5B4Qy@jc|38!BpK|
zQNKiP3FvrnWhuABNhp&VpYnO$Yy2#WY4_EEu7S2s+Ho*c&NC@}i^O)&D~dRbNT6|f
zV4#I~OR@|3pcn{-gy4WxkL^*PQ#aaA?m2l4tCpD~U(7Ffqv$jBcDELeG>i`9OAL7u
zba<+yTu9pd7s^x+F!)WPsXsA9N4BY|tN?2rAZ&Z){{86NTDS<wC-nPMC^5Qpxjr<^
zCO^rJ>Ewn{uLkW7bXqECCuIJr+yJlEhUMlcSzOrH1zX{&-mvPbOu3pOh|Kl~>(FwM
zpy4<H)W@lG0ka>5;dK*@sla}+a==vsK5>||OC!sZiMQ*8yNYw1+(fWiwI;MdvZts)
zVE#UIe!jFwL$_4oc=R5-Pc8{;{(V6zeItSqfW1x_hvBoqPUgpCojo1cbRH)nS)|nT
z^~Vqi5mC(Un`@<|uoO{@pya{DoGStt;h-4_SvMOw=rLC-nAH3h8>}|1DqI6+ViHYa
zY=0<ln(mUZL6-4-|8K6n`2DmNdInJ;`G?_yl*E@7Z*No4Ez8`|N;^8QLt9^kVyk8r
zGhZGx_I^ix+;zMQU#PpXKGL(dU+)%zeSxp&$wpHJu0ZYmwM25@fH-y>475Etq($;q
zur*C#B(EcfN(XR|pvK)0OCDNRrFk81IzJI2<;%E#cC7y$L8A|d<8tfVCJ?p<{_p+#
zd>GaSlAWoJBO+%u_?P?h=(pax9zyr5N~6papYjjKq7BcssS@lV5u)VvakNK0@xK!I
zTu#JiXCycE0O1a({{YHbPuUkP(*#2C*cJG-laZxbaj(1vDfs?i#i(J$<o8}w0wFFV
z3d5pO7zjci&hnICifW=t3Jsr7o&<mq<zC}Fq>yCQBdV!W)v@w8+aw2y_h6lAgo42`
zz%kQYbhVJ@pjTg}8DQ1qR;V;FV}!+-z+yCMBgK=wz*J6i?O$0{z!j$~?aZbE8XUFm
z+8S(breAye@rDVPfz2J2NP+DtykZULT%!rbDEJ)Xb!n_Em(m$;5bvGf_^^?O*i&9(
zIvQrA9MCd%Z1zCFRbdV@3D(wD5m|{k1iGnOaL(Jza{a8zLVm?U+5Ss>4g@6I=8y_h
zC|U*FX!oiPn7cU+jex4yV?vk|Yk&d#pno)`Kv?GeH%6+!qU%;ax8H@SmhQJ&^H-V|
zYc}TY7&B((o-{u9z=;A+Oy<V*>q{W2-DOt?TAZI0t4PVf03`s&&$&U+Esq(JLxbG=
zI#G3`ySFP%>_ccwJQpwDAVsotNi%0a4$Z2i5CCrWkGlqu?{*zkf$we`ma%70H=qu@
z>_9l|l3UP&aM@{!3ox>FV-*tU{*V$BwPAr-i(x2^$Zyr4s*jQUjoZ}BrO{=Y#*((I
zvqDz>@UK{mj5NBw0*gM266FL}*{QO?w5jI<M*ZSUgfl15e*(ve7|xwjKA8W?q`r3X
z10j(9N9^{?O9KjuyYbF}Cow6kd4rT=t9qY@YMUl}<L@*tnV%BGrceW<`!ZO!*km-b
zz?>KA{YYa<1GO#I2454a1ekz=xQwJbmLmO|FY}{#tI+9}J>DUgLYi8vn}o?4#cECT
zT&4<RGK0458JbH~i^SI#Grj~y0rVp9w0nt<=L{{bS05pi3I)V<#F8l0P_R&0D_ER?
zaUh|1<dPgmI96;papEOwIxLVtjzJ%7muBiI8g`znnpUmdDBZ-{zo@hWN}QYM&on~_
zJ3DGk*mtjGHbN8=wiMJF;q|-OY_b@8L0r+Ic~zg7&59;=e;<x|Gt~XEqG5Ho!L(6Q
zv{zMP21uyyGrwIcbz&%Co0TCw(8PX0we);I?0Vkr&mj1QA)<QTOh+PGi6VupB!B_U
zofTwYor&!v<F+_^p0@Ojour<$n9dq?(kWX(1!hEXV%64PsHO(zkskBu*Zhw6%NG*%
z%AY`=en%{vhYJAjZZNupKjTxE?T@OkO$4_V>poN^7&kz1sWMd62C0JKwp`ZG>uzHZ
z5$6)+4u>Y_^=}-)*7CGD9)M{ip0WX`Qu6+WrpvA6PZqB7K!R@;0;Mt(O?gqdDQ<W4
zwqIz3DbDHUY%fE(K?TqOs4m2MSg!^xL#f6bbZJ0U!w_?PYdQnU!g;VvS}%)^)_L;o
zi$7hR2BZ?ucve)-XQ#X5J12-z=$a>pGk8;WVIgL{BV@i*xKh9PT)sb@^c4^?-WTtQ
z*B^5GKO(0Ibp1A=(!K?K1wIS}g+##PblmIjAdF`izIVhfggulD%?)FfGE8wl;*)np
zQ#^r%PBbR)Fe*?y;L0IGvWN|WNY6HlQPA@_VC7pg_27rU92(n*;4+T?iiiWJ>G*Q7
zhqO*zW#pLIb1&V39m>oSWom9@W`fD?@-8=X{u}h<`flpk1=|CDv{lJjtaN4SdZ$tI
zf+g%&-U$9rP;;*CcJWB$aS{<QiR=R0)Ia%F=c7$`VeomIjY(aGo#QidL9f<6u$;Sa
z(`(bRe{48A=OZhRoZouqPJZdZwd?djtQOi<3xr&ffBBxCO*pN8r_gZq&G=jLFU83*
zfQd!1$8C2NlCi{FM1atKP!AZWP2(K==L-1YpiS?*WX%$Q2f}LT@jpe-QI3~ltmRMW
z@*SX3M@xsj`GW#vM2G;Npp|zkzahZW3NWfl{o}`*_#0c+1)vJ%LmofOoJ=Dy;m-qd
zX8+~5BETB=Fq7kGJk->G(#Kj0loC!RtCCLceJ}JOB!+6p0<55a{PHv;|6aw6B9`k+
zy*t`Ae|%jwndks4^o_hxP2TU>Zl(jfYp|_T*nJli;ckFC$#(xR%Uyuv`w&-xCEgAh
z;Jlfd=I7ZRmYF?O_us{6<c)tXgkdm(!TX@$&oN;zYWr7kW$97);Zwf;I+ua59*&&_
zxm+2)aA!-oORxP?9+rer3<E*lo2S9xP0`7r$;((pcKn=^nD?I07{BTvas6##xBx{B
z-w`=M^zxW2^jnwx_f&`~jMw=-d?-{<X*dMqNMw-({&^nDIT7E83v)-8vVqLb!gC)D
z^3&C`-yZk9UpKq-8h#s$_Ug?2F8l=Z2)(Lt{t~tuLT*p=K*0YdxKZ-!VNw1e6C|YA
zgprqAc6^WS8Ttow<HN@W?*_7dsrYz)2+uWEH_Uf$?Sc`BhG-iDkQVEEQn&<90u_=p
zicJ+fpWMTok_ymzie}`bREZvnCr7wg9Tt;x{z0-n{BTJIiOknQZm_on&teNXpCD9v
z5^cQl5f`+r31}9{#uBio@c1D7U6{d*1M7r_^{`<&mfa!Zl1NbSGf;DMbCkOmNj53}
zlz9ko2rTDmserqeA;~ikY~&>ADCjS+OJc>ibGGeqz0T^AI$6~qhdVVcEDAx69^+uM
z7On-fOHk#uRNmthWX^tl@n%XbJ=ebx=8u4`*FB)ZeyYG+2HIxAfl?4c_h}YLI;OEZ
z@E!*Sa)whzXpJ)1!UdG5Ktsf*QepK^h+(F<3@EgoCXfGBHp2H(kNop+{!bUR?bt*7
z0HV4hV0*e{uVY<R%bLyxuypzMeE!79Ew#`DSwTdB2_?eR$O*_~!Msi21PXS*C_$o3
zWY;hk3({JJqnS-r{8Fn&{6pBJA&L5{YV~HGldjM~49yE&T%b~<=MU#aDkWgq_!-hf
z_qbNsDrLN%MM3*?{3x4{w(x?oMVkh0s9VKCP3vk{MVWjrj-;@dr%OPsbf|P<Y=6U%
zv51J`BS_hmJ-wrb8H$+^eFniA{zBsJ6{;iV$^RCq8nLfte(^zMRD3N$F0-m<LW~d5
z4o6c$Fp8muUc)BX*2>98<1$?CA;q0}9#It84`n?Fh%o-g9FPuu73S?ULw}!$z6V*!
z#)3W2qFDekt~n5|Gax*GVVg<a-i--t%%_m1&P!;kCP=RlB-C^{Bmg~ve)T&A7)YN+
zFuPYB$r{ywX(%v3w04GivHN(?NNYXB@8S~I=rixpB!YLDTl_OCk0f5MO|#PgUWZF~
zya&dq%fhm4zJ~AOa7*GMqu9BDbnv2S9lRjEV+E%J(pjh3s+r$%i96BCgJkN%uTS==
z&X4GZ%heBe^Gk*kPJTePq;BQR;b#$SLCp>3p)ST~nQp8NIo3BCj#GcNvREH_vjl}-
z1J5f#Hw{x+kPoW7h>UEXRoE-qVL*d8aZtuM31rgQq1;e2MG3%pgG_XJvlako5efyq
zQJi|-5QQFh0_syjOnYg)C(<>#1Utet=oqIW)K_PJQ+RUSoI*`U)TaQQEOt*|!(UTC
zpdYF<$iLNHC_x~?A%8$Hyj3#>w-?PoRnyTr5FE_9P&6-GPX(B1(VSQCU4hZa5Io<z
z(uw#~ZwPQ)Q{zP2tJ4+EHDMW9U)&dzl+T7y4_}Px4hs9E4uzY9uG5324)~8cIca^~
zOvGaC!yI7jfArf#xrc`{J8b4h@b%JclRQ2}RgF%(gW54fi@YPa(q;493iviQxfYVj
zZzpuyygSbKy*PXe%{T-XB}FDtBtyvf_F2-5nIR07%Ae6p6(U`xH_tD(YDRYc&GMu8
z<zgWY3OCBv3Z~06;O+;3M<`(+BI)mMEhN9$e;dfaooG`ZQHokpsll7!Xad!sr;-x2
zkHo$|@pLs3q7anyOh<ucd>uR{-DCyF3>7Yf(!z7;5ke}Q&sUVM3e>pOh-!AsYXG+1
zHKYfG{IHF4{O}hPB!Z1ebe40TX=%`dYSeP^PUie|@E~27AxR<?afD<>OB4Qe5Rr8Y
zD@_FILHbB|oeY@86w4Zo>U<GxCK0p&=nu~y)gF1CUD!oWJCihGPWY+#Y!r>mL#<L=
zu0bP#e|fw_^SuY4A^vB1dKF`=0x|}H{&&XUX2Gjv;@$~xAR&*PGb+Sq)e(zruKoYy
zGNq<3;Yojja+TW0ed|S6sj_xuAF2Tl&kaVA0nHcBR+G$*<b}FcJS?;^a^sj<B$2M!
zT;F#Cct7`m)$%Fd8TNpIsDOabfQVoaD|7Dw<`s@Yq7nFRMMP%c&ln6u(8frV767*<
zU5vnRK=WGW?m+RtL|Z&7pDx(>jhV4d_}Q4&b!-UWZWgX6VJ}Pm)|vsw2#G~4Mf)|3
zF`OMw^yrpm)}%g;`WoyT<&uKeijGtGRJd2rV@ogg&v)3eEDSq{&-=44j2PQ8ha_US
zOn4H9_<Bg!i;4sZV~01a{##5nz+Y)gT*7I}m8K_2w2JAKe_|zcvB(srg8_sBR};;o
zpx!k^o`&j@yTRaP%p2<)uF<35!!w|#c7!w^vW8dt2$NB`7Xp+4453U1Dv1KWAsN<Q
z64fAh!CDC-LQDOqLLXac6u!L@3pPnpJw3D8yl_!8T(dhZ^3C(V)=y0D<<+|cVX_dC
ziC_eKVh4AbyXkp<e{p4@LXgS#PRl76*ft|U|Fmr4qw37wQ*7yAakA8|-dGMzje#f+
z&}PAf(uFV*bdpNGkL8mKY*!;M9Yp}*DL^G1O>qP9iXmXeSyp+8*Z6UKm5MOw9Sr$a
zS@>|Lzh;Gt3@Y6q2wJj+fMA*=p5OdkK=O+?&U(^Beg3je!D8;Ag%h$$HpBp0xotg`
zYRX#T{NoSBzLmgHAZS!*>{QNy!?46s&fEn>Q6eC)K^U9FYkt=VkhUhoo77!4=H1Q%
z+nA0S1Ty(Xx9T7(+X!VgPz)Y2Ta&q|D3OXY54>^dVwHPDhcMMr&d33Dqgo*%SJ&E`
zMl$QLu@SN*mRK;9SebLHhB>yo`%1unk4BnUJ;k4lq8~X0TleqOS5OaB2j4zIxm@4e
zs;PC@J?5Dk&3$bKaUl5b^jnkZ1u*@V9$uM(2XwthgrIHRf7D7xj62e*wlX~uJ-6#;
zeh0<IM%XW%gouJU9fd(F6C1_?=d-%k0;iZJad&daLo_YZeF#P`1XUrg7H03|+U<(b
zMboolr<4$-?+l4hfWwHOL~0?MRY%Y-;OIo>rP5-U;eh{rRgA<ZC9<;MygwMWq5~~f
zQp=+^Y3k4MWPDF`<3id7b47=OckZB7AR2r`Fu|;OeB9ysE7@^-x50kzLIcuuAV|-x
zF|>2p!B+D0K-Xk$;r{}y@EemLe1rE}+Xhs%prwH5=jv{sr^_9l<r#m<8820WFATc%
z0mNVUW>U+g;{AccFtdY`qq%JczUKok?;6~vFOp&59XrQ=r!7v_ob3xqR#5cBw+{mU
zr@II^*Tr=_hhY98fpXY+K0_!aS65q$brt;S8~)+w{rgCb{f}$v%?YhO#DDlMHOaO|
zFiX8|%H3m^HA$t+v{MESpyZRK6RFGnXS5T?4}tDWfUYZ1KHjIEL<mo?Y39?IR7xw>
zPsu5y$)`+%gUcg8(UoiVA^7tYaHPE|?GT}}i5ZYf1RjLpZ3ifVU6hE5afho>DnxzF
zMZJ_oN9NPX;2AUd2Nl`M!_V-n&qfhXDBq!@imt)&KpBEerHsnm@i8DzY(jX!NG6VC
z=n#tA$7%k_q22uVB@U27i%Ryd99oAb(p>#WIHy=5(2Z6>qz!?PL?ZRw@(M-o9r?^Z
zRr|kI%d5isN!}cgvQ8Y@k!F*Mn2q2JwKdS=QHj}zSm+fWOV9TF96eEN4es~K=am;<
z{MP*?`@~`UKJnB_xI`SyGKwdm01C^ZP&O*jB1bV~Ik=|b0l)yE;-V}$JYOlxyYV6)
zB}fV)gqgKGoa62~Eyrl5>)ZOaRUshfK`VX_Bc}mPQMs)|I*g*J0-jOS*x$|&<0Yr9
z2<aG`i;eyOI^YRysHN(s#`Ept^X*DyJ$T=dKytnrchh$Ps_gu$-cl@3auoEy)o(S=
zq8y?7WN#4O{H<o=gQZHI+VTtq#NSzbeZB0zvEJuhXz6krJo{qA%Ec_c_X~nQr~RZs
zA1OUP1M%t#RT3RcAT$AX(<5DDcHSYu76-wP1ri3=G_~gCyO@ayi#Dd=ilPnG3UM<u
zf{GwA68Vbhh(gPj3&cbbXRHW2h6n}*hE`~dxQ`SbzP+Y>^w~d*Xato-Fmx3r@B%^c
z?eeWUuq*Bxj0R>WSp2kK$*S@<^E5)+%M=(38a|!lDC-WKgw^VrwWYm%@y{GrHEFkB
zE3soOY91dA6Ff654t>|rADaDG_MkSTTV!c75A^XZD`F(cl9>B9RM?_ZKnr<@lnUKh
zP=jQfv=gfTI*d)NnnS8AJX2-wP0J=2ma)Eqi)U3>-W4MeQ|R|(XL>$Z8!N|i{>VH$
zUa5(S(rB2=5xmZ~-S9U1$<z^D)HmFELUaJGgyWUOqwj;Ec(Ml4ovuMm&X`NLs%ML=
zY3h+CruDX23H*pRO^h1JCJRcO+L(2X{`VbwMtByDi%OQ&pl*{luisu48TSQI{O^RA
zfANz)YyBw+ma+16ueHq*E7UQf58JDgV*reZJJk^<-6Vjd<uw@U;XgB@b&=JOdME^1
zfBL4h?jpL-3G2PVJDN?a-0{la-!zL4Y7)EUkLubQCQ1t4RGt?TFsgFu9E@pK#aWKu
zvptmln#vqsML!)(+=?~tp%3o?(+L!P)<uI}a6pU6Xlbft(@Ay!WItn~i|8b?6&w1F
z#-p7XA7*<;JAe1=et`}UHl{KHo<;fdPBLfTgC&>xq6G>At|o4=?6XGkfym3D02BG2
zP5{W5O>5_UC*0qb3h;k0f1u69{u;#nW}0foj>1~@3GQqbeG{2QWy9Zk@SU7T6J$uN
zw*F}R0bi2;`cBq~)?g5x028^N6)M^Wk?5&MRLR4AS19{XdX4t1{8?J=#$8KtY?CBv
zGI~#yST-wzZ!kS?&vU8l3Eg&>F(UaGp{MV?nKT{+mPh`a3=zhJR!>zNMV!w02e6ge
zqq;cHN~409Zqc}0Af{|^e9b!VuZSkj4K}lE0@zrESev#upTQ0|<;ul8z9l6^rKQEk
zu}cCQgWQdca*EyE4GXCo1PpLCQM{d6MOEBsg+~KU$nq27=SYSHp4NL^&GGjvaeeuE
zPOW#5i9u=H<=nO2+a%<bF1n1LpCVyoC3wE-D}IFmjI-~fI5mj`Q!4t5QPAcFhhgU=
z^yzbU{+GQ%%DKlf;@|n_QfLz;J<*DzRdG`D$bU15jjND_<+PMi?+-(fU;9gDH%qU3
zCB`I#WO&(yr%V<(uktOr+x&XV2<NQg6yp@O)qd)MyfY87x$(A`pob=t@xXTDe-#zW
z!~8Svx)iPyvD2Yft5&PT5R3;HLzUVhJMR)<p#Sp-0U*9qae1b($T?(uPc+FvrZrSc
zq`2o<vYsTSW|M-JP6=<XJpEyp?HGRhl;pW_F(H!t8GHR}H0WJN4r<>q;&2j-H@+$`
zEsfOM-U{S!U#((-KP8hxFG{(oDLJJOu$1*l((_@m*HH0mH~(t5UtzLmy$>>U68DuL
zx3GY)wCD73>!j;_Qv}ycRdp|BtSQ4IzDc-~I%R6SJLvOQsMMFE?|xwAC)#}_2DgND
zs+bK3xIr4YA8d#PLav(+l5VAk{7UUe#o}KB(DTh=o)kamglA<+ZUedt1YHHpF&>fm
z@%rFC^BQ0147a3;j&PhQU*OSF-qVE3S+3|_QXv;weV%yA56`3SwO$RV0)(C$<w+0a
z$2=syGU@Bc-q^D6kp75}$QFCQ$M@@;WNAbIdm{VE$npLL!jYyo=Ksb&27RI#z?CwZ
zb&|`I0!#i9*($JydBt3S*^s$Lo{RAa%^2ezgDJHtb15Y-B|B)Z*}VOdX`tCwtnDP|
zq;rG)k&|5gUW)*rq1n%1jM!<$eRcVX(5cnQ+L`c#f4`0NAb@9HA})}MmpfhXy}_WU
zz4nuLxIfHlV<|w%kN<Rq$r8Z6rhqfswqY@-`!!-mL-6+4y>{S^teuyIn<W9m79wup
z)&=!DHUEV+`Y4&z`U#O`@cDx5<8{}9^BhceD!}1;n#nBDKwx2WLx>!|YM;D!@wey_
z+!M#V<!cx?SR>@x&=p6{+J`MpH6bcySR`2M)zGh&#+-{WQw*IT_+>T)y+g<)@0J~@
z#su+#&&&|(f;&-iO6Bw+0YBEGG&=Lma4LDS1)P-DphF`FuOaENG&w!N{?H_2Wl6HM
zG&k18v|5~MORvd((7|{5-9hA2zAlKQGJY*rPM7Bpfl7A+4Ia@(%e2YxgYimzXOh`y
z4_yaBuemzvD2Yio=KfwS?`yTq$j1q+0RQ}%(udV{($cNkCH;kn=XWa6c%Cx<_}&=8
zVX$YjL@_rfuWw98qo?fa%G1S)ba30P0w_<ux;msic-xq0zu~_2eb@`BEsD2f>8MEl
zGZ)BboH2WjC#kl1knzA&_WIXRNomFy-*|BUOPGZC_T#tNvRGQbj8E|!;mxHGP!Go~
z<aMWK`&!#(!7O5{Axnc%!#mLce?&k2Y~?Iz3%WxLS5d}Y8vI{<X&STB7mX3B5*<%A
zV=FvKj*1c(gk&49f{1{YGYhzRny?rRrd;dJuct<=OS1D-`gS<NNR+iYoi9K@-65?3
zcjuZP)_<>=fn-|_59&Mb*{g>`tUtM6p=a4n9~X(b#?V+}Hso1ZLt~N1g(Cr^&<RZD
zGlcEVT>gqd8UR*F7>am!Ix^>GfrRh(=t?w5u%v<FxJ^fXe?E*C6u4W1u)2au$`?X!
znhOP3Cp~N38jY*4pd)?5TX9O-Pif22Evy@HC}tRB9(g4KaaOR%z@yP&KfR<uu#=XK
z?^9xO6+~2}k<!)J^7L_cZUbdw)Um9{_86CBQSiU!O*pA>4u7wsjxa0e?zgK%Ew&{f
z;B&j4&1+@pzyE1-pAJ=Q{jWCnkOy=gcq5=8OV9ncF$?(V4J*6FS+t=SESx)@eTJ7`
z^b^ifDWaIc_GL|$9EF(Ti5rc>J+)D;SRu(%anme~Az%yl(2#3o!qoG5tPjl;TgxMs
zS(o`FJANr=m*m85j8i*u-0W!Jk5Mq_WmrN{%EvUy&|+=-*6iQUN#^s=ycy`UYpdYn
z4~Jn&PbL#Osi#V41wML|Cq`O<v#@}wWmk<Fp}15h)K*x!&Nw|B&Uv1j$YNC~`k*#*
zPw2`PE|>EPp5G@4JOKFrzg2G(u>)l)Q6z}!_sL`DU?M2tA3s(W^ZN7phrc&HY}7y8
z0qE;ONMH-Ei^)V##pIj*{7#>>C}RDh$yT^Q%aY;5(5yh5uohvMP6%YqOX2J4rNMNL
zTBth2v+&@X6mr<6$HZw@-)PI^C%0O;U)a`vZ@N~9fP`f-NnR6!e=H#J*qb;U5(!?T
z<Z)Qg44K5x#geglVWifc+c6?zY7Ijnm4s2B2wASRj{U|SDmyz0tnfU+?+xgt9auVT
z++ULmz;}JhBSu^eobE%F2`70`Eyc=3QIY0C594?_Cb6->^!7$WjGkE+&GeCufsV>;
zW0@VnYaB)mPzkTe*zHJ`aC~A$L%)kyWg?Wyw%8k^7)Znzs|#F#1F|dvca$l#>J^99
zS_Xp&7LIN<7AH@AEWwLU1FJUTY-9Ug7o-2hfR3zeTi#DfT&Ni>5U~>vWr3oco{|1|
zKMTE2($kp_2m~lY1_eL`WRY8%roQ2?$STKXEw>s3wEX+IQzQFC>BfFyWCb-cF)=Th
z$<1hxlIca7CORBuSkZ=TPQq=$8$g!e60??S`sGlD*&=q}fvI9W>EUgrmsH-Mg#unt
zHQajj!-k*1#XA0Up>UA^{!@Aq7QapMBXdK418G{2c7Eodw-mHG;++7?tU;^YC|rKq
zZ-3ZWW}wQG7MHpqBd|a3a3IJ5KukQ7PyV9+CG9F(aHoHbKEE@stOKW7SbHbU21u#c
zEuaRnyuBl|Zjv1P$h6%pew>MB){~K8{M|t;3{v^hfe#$SI+z<02a?M02MI<ao+zNG
zn}U1_BclH2nzi^pu34~^ae$*-KBFr@${vj8pS}|iV7zi3ZnY6V6-(H6@R)9o2c{@+
z!*QCV5b!BuMz1H@fR>WiTIm=OBg=A-GlsiYb;hEW%#gqK;_F1Kk8)sllean$fd4^Q
zZ2;*IUolT_wF|7nIzWl_82Kv`=cIro^*H6MrN&Z;UQ0%+M>L=Y+nHcmoeK_@3+F5;
z_C6|9GjzIVN}eQ6eP7=$-654jvJxK7dfwNUNvC__a%0EOwpmR};nloiO&A$vh2duf
zK_HqYlg*5aT!e<8JQR;KSaebjSz-^LcKZ4;`n(7BS$UBJN2k2)dSCUzGnGR^z`3=O
z?N0e`H$*M|ZRM7Hd0hhEmtGTUIn+;o-3;29cS@;{uk)d;!XS0b@N^5n1bb^@Mhc|&
zVe_iEgZ*QLSN^*MMT+C?P07@T&U_;VT42r|c3E!OoLuwjm*?mSQY0Vs`t)a6W4V?3
zOsd_+SHwTmrS>qZ-{eYm$y=PxH`ve+qEGNS-10X`+BcF0?M1e-_fmoOk$Qvm-HOwx
zl!}Kx(<^17?Zp6h!xb7;8mV)Ol*Q!ZeIG!a@1*6+?I(Xx=5q`N_Ey(x`tS?etw^$`
zb56HFklQn=bgCxOt;~T>l+(0yZj_`irPJ*d<m@TzW@3gsTLWR9HhpHTxe4aTz{Ci>
zcC01=V3HtRw-Eea7)u-)ZDl&0Kl>d=4ih_RPUQ$$N}Dz7i0TptkLHZwve#2qu`BeN
zosf6_y7U2+w5dA=vs5y@_II_p6g~C8Le8Jb!r3sasg*S4&bc<cv}^wO>?h0;D@b5}
zo+|N^_mE@h)$hqM;)pB}#IJTwLRlc1R=k*@pR9J4xT}``6F-zRo7q^pt(3qIu<nXf
z>S32<GFwcf<3q}yOUt!!|5pwTAUOecO2u+F@=un^1ww_4x~iOqPj}NgTQ)f&kYbUl
zkToaSU)(0XolWeyeYg!Xf;VPODDlr~MAsyoS<2h!!TH{-hvUQ?kcrq+;ip9>Y^NAl
z!}gr*>jUpa!kgzN(@8EjbKVRM7&5GI1skjrU)muiELKqr{_4SXeagBQaLFPmL<qWe
zUwcO=PjRKFK9SEbqe8!qGGEVSkRCW8EOA*;<I!MrT=!zf)Rs(#)1@Eo?n*Tkhv<h?
zQG;4vXPj)werD_#HXTA)u98BZD#E!*W;DYxrM(#Kt7#eX=3-Qg1i8p?TdmziTsyT0
zP&aUPVh0p%N?1_XrOcdbtSw$>E-cT(6ru~$zLsdlmJW--EM0pZW%4Q2`&Iy8HEC;D
zRfTxXz=Z%n_{ux&onV{w%FS@NjJ?mEl$w~EYK{A!-A7Q3x`BUl)K-t}AxQ=A5_d&!
z$3ADmWr4Mwv&TLi&NlTjLXC_D-)=K24Bm7X3}y#9Ot?r`FbwQ(4bjBVT>i52m?R;!
ztLM4gQ2v+LC=3N0#=&-bUn5m;MciEJ9N$<<PHhBzOzp!WdE$Z<S}}#+a?s4P?J}y8
zT*_;c|GHm+NFbd=B2~Jbyq3;7C>I^=MOjzNu@*khGbrNjTTd^b;@8885dOTvyvf<~
z)Z6zlsVP3P$`?O-F4&N=_N&Cll>e#q?wtR}PA@H{e~$;o&*H#KVZTKIk~DpKH2!B=
zTj?m3ugCk}PG*I3?ZCtfy1Onq6VaB19To)2&oN^F)yMrrXbrrOM`lZ(HQl_<J%(Qz
z!B3NpM6_MS`#W;R&$LKKD|sx#cPgF?Z4#`jVJs6SCOn}2{(iup@B$<B_sLby`#*9+
zpngxD-3PIx^{(;M23SVE(66CLJ=BSd0}H9JG@T#m59I$JU+)0qSl6~~w{6?DZQHhO
zP209@+vc=;+V-@jZ5w~jeZS9B|6AWzUs9Fq+DR&@%3jHJ?RBo>knZ-qt_)J}xP6el
zPTiS+P?pb1W)}Uy7pl0;a#HC}!hE43Q#LeQX?dcR?W?*!6(BJD-2dkdQH3!wm?D&`
zm|B~)**|L4Ow({M<)^^Pe2dGm-LFWgF&uRJygtAgb}XVELp>fyxQT_;(~zvo;_|c(
zEcCH~Y{A_Y%f_V%HFu_8CkVf<M-aMaAr%c!1Yk*(0x#~90~7ThKyvv+0(gejr3>;S
z;s|1Jj!?QhB+qc{HJ@Xl5v@|n<dj}7Q_wcX#Y1MmUlOG)7)LjKb?c{#p_JLw7b_H5
zXV>*`HD{E9!~_OJ0>MRj5EF%r9iB0EhIy4Ht+bH?_4I~tRYcZuyB{Nvq8uy3Q6M1`
zXBilWi*Trrq*E)SsnWHKAmd6TLQzrxQ?)7_(@nHO69l4foEFGa6FqbF7P3ZZXfjay
zHH~pO2HnB_U7)}e^A7jxZwi}^Rx?pmiVm98XmK?{&gI|LM^RsXeW2H2*A6*C&+xRt
zSwErG-VZ!u6&n@5Z5;PiSg5dmQzF&;#izH%nr}f1c(MP<ZZdTURVZ0E|5w&h9X62#
z=p}zM=}g~!KW<%4v|eIg{gN*9+hxK0rqDz*vwmyREtR#4b#Z)-26kc__10ddGSuMj
zA8!#ei+P^5CT3k*EG8R?6BI)UzW8#w5F<>bi$EOq|K!mei<xzYTQ&jye^Chf@QH_~
znDl=jO%9!ZvD|H=UX)BkXe?RM-@kE$5}^km-|CKEpbrj7u9x5>KJ|YpZm$$zp5Ha+
ze%~d)j{kAkFj*V7m^F~7&<mQ=>}UzdOqk`pofN=O5yZz}Fn_t*1~o)#$;?^-99<k=
zG_S6SUD9BtiVf*fpj`xItSvw*#FT_iaAV}s@l21FORJ%-U=btrsf~9ug$ZY^IZB(L
z5!7QMfad%ehXRB7R+XBR4xp)VUl-s~-FJ!Jzv*m-EQE?C47CUikvMK&J|C)`zL4UV
z1C>J$k`6iVq?}YrBR`*_o&uw4Bpa(+8Sb>i#s#X!N}{^Hn(*hd{U!BoNVTVJSrB*J
z646OYKIu`I19w^M@dG}<8DYTn7Jp*yjDA_#YmI(wY@@ETirBOCK^_zo^>g_(xfY~s
z8?^5z_wzDJKetW&lk^k0WiKjCJpcCVV`f3$z4LujsfsT+#VzdXra<Z|uWz)kuFlg>
z+s?eORFuPdU4(VkOh<9wnW_&D1}w1X#JU}8TI^|G4rs2|28A7asC$;HyMEeM7+sNv
zp0)yt{99`%W@D(CLsYi40$(*)s2pkCklbpy!IjexiE$LiuSds+glJAI0S=7;456=r
za}9cxg-|O%iV;o6pof`%^Bn*AORz1%H{;^M7LVk<Thhe=)`oEd0%<tVr8X1z0?0>I
z49Rm?pz6;}Z2x7YbQL&Q6}yOHw%xx>cyIpesIAU`zc@)@0mf{C3JZ+XH~ZtkK@Gv?
zm5UvmC33HvweHm;_<N1dIun#89D0ey!sQgeDqi<{m7l<fZl})C(qj2C3q||zM0q<4
z-e42%0qj*o9WsJc0h)v}eFffmm0RXB*;FsT{<wVgWn6&|xLwf;J^Q9jibd&(BNr^r
zO>pQ@bdvwlg>?NL1ByczM~@IWg!C;cRrvOl(*BnkF1^(q)nsyA41}dBTT`KiBvQ0u
z;UqDx_k99?ja{BA9Pi&mU@yJbeZk->V5ASv@&xj$c$H4a9`nt{1xf=9r<#5JtA<J?
z=E;Uf>!C3-5#1q`Z*G!G1iuWIt3`)n+mhy2f#R-a%b5*M&-m<h5$(ChE0#$#0l_ze
z|93mPHuDny{$x@OS?|8&zMfJ>l55DwsRa-sVp6=Xi?Xoh6|dWCKj1}MafBlNEA6?i
zEbueqKR*NiCrZsfjijCsikl=kqPTb-toqw`_YdSSJB|Aa{2R<yOE^a1@V^bn`&uxP
zP(Z@@4DJxrY)GIx*TKbST38!gp08k`Vk2awW<LcI4Iog!#0eBF{+aBOG=WMHGiT7W
zk<*F!ALL;NQAzfHV&#u~iGM{!|KLCW&2aq-c>KZfkE&wh59_M}5o4SnQ7P&d%a6U^
z9Kqyzgks;bzW@SK9a)EKGV!7W=C{m9Oex`gWPi>~uz@&l-y-uS`5Uk@FsQWCLmREq
z&;Ce}GEtxGv0g-`bHfU5B!Jb!<x~In-0ru&1Z|6}zn|+!M~9Oc*eLz#?FJMX0D$z)
zgJnOr?;&Iz6qp;&*CW=Glt82JBlg$+Vg)^$q<*5nuv}giJ;L86R}f*pC{Elr4wEYK
z=Az!C^}9mcv}b54fd*r<!cQ~Rd1KfZqc2=KffY-_{9n$Cr|yTn8G)-bVB@mnVXfqG
z;-)fxpnrJh>>RHbT>~*K#`-^_06M=JLf@Bo5C9pHZ-ELtz!t^PX4eXpGb4864gpVq
z2vwW6OwPaaO8-EVzd5VltnzPKHj>6aul#%S+}imP^`%sW`WG_~P=6}AAsZJ;twF|a
zLS*mwAXyfDF-46zArix_o3T8b#562k>*g;gD<xYjiq>p~DLd2m8YD1g(+y>r63gA1
zxNMYyPL3vVXlPs(whU}b(z?7*9q!?#iv?W-RYd~|p@?2!%fsV<M)R9ZoKgq+nkOVA
z49|%v(Jh;$1sy`#%1lkyd){m}Hz3;>fxHhduol=AI{DLE_*PEw_n)jrD>Mqy_FHoP
zw-7o_%*hn(_7Es0%-O7APKCL}hZ%g&uvXt+XZ*vk8*y%oB3lGw)P=pn<(nuFHambc
z1&ZlPq_eY$;dZ~pOdW3Ll?BGCwHiBquGTj=9R<=Tu}7`$4i@Rs=&Hv*r!P_`vk!yN
z3EXlR6>%_!n{g@xx&z-zEu<hqu0>6$c+16vVpO6r!ZIB{0qNd4IYE&n>O+{1ROO<V
zN=nK53_l_$Q9)uY0Gr)s6x(;L8J0`FpB1R~-077ytHq=Zhx)(ond6`gl0w4Q7St%g
z$#L?WdVp!(vNmGOdq^5fzKi1kU)6wglfNj04?6qrtDWI?f109^v?FHt6WSVwa@GED
zOq6#DaF}2Wc^q)iXaukud+vlG9^MFxE@rFLX<fhW;WZ)ASw>MfN=*i>kv?i#Goyg9
z)FUtIL}J>S2jj7R>s9&YBOE>;6_%)R*NBm9V)NB+Tp)nc>UsX=`xT6&sM_B05nM0W
z0WSJ`cx(XBEhL@U|IZs5sq<!b2mvF>^*$!!%)`V17$DNl{c$sto$mO??#~WR1J1B!
ze9sp#3hKD1a52fydMq|UCTe#Bi^<mXj3Z=Wq1Z9un<qjjGMIzfo+YP)V4}I<j$o*l
z9Mp0gDKQCJsK)kmV+L+Dh92zfxV&_|7RXIiexK!)(3sB`6mgn{NZKW4w_{fl!#=JC
zDUDzEpb<dl^R=MelCY0U2Xt7C6B^th+?IRJO21}|T-(-Q@RUVDlL1^vLZ-yn<$u|-
z(Y4j|EnbCDUgO+l;@*oUjDalr5M1DR+dipFKw9(MMhJ6kJ*{a;7R-egXYiCz#A-hd
zb0uX<|E7BrcT*KK^yLmR!zR{l?po$u<hG_)v1(gL(WT`dVqgsp%9py(Z(w)f7CxAt
zDsP&Ee&0he$JjV}u;W!EQCp{B_)`1K(9b@@4;zdP#fZ_X7nhPve5YVviL3q`z}*`#
zLI=?-T503HibhUY(&TB)D%ayiZn0b4ejQGx`T%i448f(*VQ`x{O>WZVU)wH5f(D`x
zTMY-qDlD>_b5|if*6tFjvi8ZbJ8{44;LbdNv!%~L)pBtAwR;-(^6Pht{}0hG*>sQD
zVB}$UM`>8kjER_+TlIu0wYKifMqBFf9oRZPVz!=Cna!7oMjQ4g$Dj0_Q!VBbZp#_A
z8~T1~mp~BBs8*2yZi6C}6#?Lu5aryAgKEf#i4X3#%XC6av}}C>Xz#LeXupd|(1()V
z1<Kifc^#MkpfoTCpE!pXGMN5iMJ5{J;DEU?Ab|qPFTkLIA$RbG1j0^?F68++9dTGl
z<Y9rK7jR<;$`BY=1igzn08$E47#=UOMv_RXNTQs2js>ZclU{-@kh+CgnZ~dLtq(R1
zu>`Vcvd@GAo#QsJj5B`c#M~7qG&FCKw2tgrjoNNXm1>Jc#)fOi44`3V=9ZFTWtps~
zrC5SE#>J?z8(jic>^cc^2RZ@Cp~K^2&^a3TJl?1}R9UB1t&WIpr>`4$J^Bk$a#lf-
zG$eA`AmswsJ-o*bZ)3Z7F!WHwMgqgqT!tA1u@GiFA7;Sa{6{)oS^!VF#cyg1s5v4E
zDjf6L(3&&EBfI20b-a;MeJM=JLh{UxJ3-pW62J96ex(m@xS~%sGrOV#o3Nu*O8B+}
z1QPv-Y$|T5$*t;*WTF_l-+eJO!epwck0`jVg{SAJ(TW3lMerjrjIlP}%pPVnf_iLI
z+|&1;FY0-gY|}V*<%dC>&>F4rs8LqVdMTs!kQ1p}F%6Skg)HH23;ibuWLf<vIg^Y@
zK^d&$6Ds>Wpq{^pPhH_FR(SVJoO?bdFMi!P(}X((a-bX91$)32_pR%NdgvJv-WCfS
z^IxZx30!D`wT;=qvVspN2$Q4(2vV$LnKm*TzY7~rvZoD)!z7@$ESm4$N}cBoZ>-aM
zq&JyjbdfS4G3`SyxyGCN^uO8QP^dmmu3>|I-LWBig#~Hx>F^Qp<A;HMMICre-VWXp
zJFO85i<PSKKpM|SVyu8_^Y6Ud`WJ7DiER`=%=$O?)W4ZvKN+q6+7YxsHeNRJ`=Tzl
zXQZ$Pt@kPbd=jSU6!|pvBo)<dJ>=Hx(XV$D&K7BE0Sb*>HEpvT^&R(3k<ejJa*fL2
z?P?Gal_Wv3k($j{I7G3{`wc${QWBv#kyW2Y_r>5-G2oc4$k{dYjuS|sBNnahpLD}!
z7VKvUJ#$i@)&zm9${1}dUrbZp4+KDU=uhCBkcXoM(nSi9$rRjzCKzl&EiJ48R%i|N
zV(@aBqQ@(39Zth28)S#RZsJ;Q3uet-)YY?je1$@|J#5#Jm0kPhG1-j1k;UM;m{4EA
zJWjHy@}g{46*-~JHhLjE1^HT6Q=nw(HbKpp@t{dzDRw>(LKJaSYm_&N8l>v#Q!3Z(
zYtRO*?aznMxB&+olBPa#a(7sD?uWK>`z$3gi(mhnEfIx|`kn8Xf6+fa`s`s(w1bW<
zpc6h&5q3gIm7FZu3%%`-hRHCzCEktJnGU*lcSM3_+$xD-p2n(+EyYs*R>H2XU0XBR
zM%XJw|JN2nDe{lKU`k&r%+Q@{@-KG=ZhMMXje9Kas4g9q&5$$(ng$ECgTfr^_O6SG
z9i+}~TnrqBVVcW2FjC+@O))L|YNsIzJb!B25uh9q;Iqw5Y1tq~a5gHKhZMz^^GOV^
z4WM^*$~&i{20z;6<>>6l7Bh5?cTrIE#p6}Fqp-e3hU^r5zu-9}x9v=H-cX8aBSmA7
zQY}*9+kLe8%%9|9^r%~o2f1Fp=q-tn<P`Bi;)HOVCH9q~!Vb|L8G0tyjufKyQ0IQz
z5oxCJoo@vzLq63qOvaHaFUhfpMaQtz{si866o+n7Cw_eVW5`*;Pday3TQw1Qu-CDO
zVV@@MOefjtJ64LUWTwL?FS-hS9n#b-qISbNZZ{#?F=o+YI|%^|M%Qnr7%$_zntO$2
zzb~y&&7QV3%V?)B@LIyaDlft;aCZO!mt#i6e?Od}2b#`}oq!xju>)?u98vXCj|OQP
za<&Im{Sh=0KLon~q8)Isoy3;QZ(lo$=|pI*MAkWXoQZsFI9Z*x{Gq}q5@{$Lb%&-A
zCCM0v)uYtXIM&C7$gXOQ#*R}FvsN=To&dZ9qx4p{3kXs$fvR^Kh}77QMxE_&R4rvZ
zfD5w>p<EsL)Nh&LYKk6fE;^!e_(nDnyqV0liZFokOgp{;yB9yb75+SEJ&u)Yaq@#d
zvxojl6B>?1trB*o&G^i>XNI}nZ|<glE(n5<!!I`MH1q7!Wt8`c_uk^eIhyAoy592y
zh!1x!Fi!<3<upvXt0>oizqNJ+GOjMK=JPi8`dsNU8UMi_iYU%W^uy@)oAO+KvqH-r
z{V^0%A*d)gPNeS)0?YtG3a;;XU%)z`#+pDqzaM}ij*#Oxf=nq5;XW2v#RG&0f)HYL
zpl%96ih2QYQ9s7u?PoNofWOjpRa}@sAecmE%e@&=74A=ynm|iq66Hr2gG$T8ZC;eV
zQPCt4>LpH@@J7N+u}}sz)C}pVVy$>%$7JiDr)VQ8Whfk20MR&9<8(7v&P|m-@ghMw
zSfwI~B%F}99^ELNo!LTb&wj(e$rem`rJCR6wEv_Ea2D+jN9>M=VQ^jqV@nabi!#dJ
zcZu}0H2>7SSn;UiS_<uy#Q<X1hLACs$z6a#^UmVX-5EfP`zdTaBz+T|K&93NZ48|o
z$u=01mOpInC6h`q(`uk_5;@q(kw}~~^|*dsqgDmaG+c`X2uI*Qra{T*`Lltc6mhFu
zIcyMZ1+lF<znZ68cd5{w=H#GCgNm?g!-9flk8Ja<qx?^WrP~Zd)Bx9r2}-JywwT(r
zqJ}spn}Tj#6H>ll8FD%V0tF-jfDX#fC$qYeiU6eJa1bthL~#hfdisXYE|eJzN-3Ju
z-&?&N46ParBktkGwO^yQwzgS-f862SJ*%6#F9QWjP9k-+5-1Pp<7qKC4ke=qTh935
z%pbopKJ076J*~TkMB-Nlk*Cm33qB0jGlr#GNgMLp!iqpu1AYR}e8{obu;?Fe^2~3D
z?ow&lU$r#r11}-HA(u*r*5T`qEe%x9)1v=gb+4~Mwdtxj<!Spu4IGGv?x~dNS~I%M
z1}u~`&W@F{$@m6fV$4Qj+sHoBbHH&H%{;S;yNk+ZH5Ig>_AqV3%!U+-3Hdp^CiqNt
zo&fYMtIr)`*pnBk{D|G*p7~K_dwm*oVnc{Q0<Nm0pf^J?2G*$%WBEnXZlg{h0E2-L
z4aPKDhy_QP8r3brR$^#1({$s{M&a)UD#pL!4aw^~fwRn1%SE<IWlJ0ou2|1vsG!J!
zAUM!6<)|R;@!~3Y`|Y%9YXEyp+o)vM)8`H)wovF2$Lv8Yt#RyvmO(#tMBltt*nX~#
z;Y**j`B^qywYxOl!Wn$qsLmRL+Rs|S%(Pv6SkHL+TDHAz`<Usre&`RYXMAV1CrDKl
z3|wF|k+{WEywu_>2At(wFsNCXRhWz2c{pDRkUxHD`t=;n?HVa}<{TTmWjB@*t(Z2$
z&;*t7cvzju)|AD?X@ycbDO@8rj<qt$z$RE|`rW=D-Y9SaxxmWPzU`!^GoFW{R;W7;
zsLPK>ObAhevesZ|TyD2$#P5M+jaD;oK!P~ObZ3o8D~u!3%f6xPV+9^171Ct4Zdyu5
z>+)WR_Vp|8%IL;p-sl`@25AXhDOX!nR3>mNu6yA7D@J&Kfm%Nr60z<1%)0Nsv|_HW
z5mRf`$r2XpMz5E#f&T&swYN-K-R7oR+PXj+@-pxfL=jAppO72mSprxo4naWJB-{W}
z!WK9+0`Ne)5?D_h=<m`Am{sc6&=YqDB^uKy;2@$VBr2q4jBiey((Kfi8Q<D?l>QCA
zL5TS#!Cm|CS(KB~Lf>M|b*_EUTHD1ye%kwG3;(eC)q>RXc&An|<BL7&|Iy&X<lqMl
zv&C;P_IUu%_xWOo!E%m{ig6PacK(F7-(6?0{|1@M4V;zBzw!!8pZ(<-kv1Lo4pSFh
zrWBpoT*+uErW&Ps=lii26RQ_{b!dQl_m;i0%3gNb{Nc>zU_m#y+u@NyjDW1C8iMM<
zpprX`0aU;hZv|As2H+Z?)(1Vry2ApR&&i-=X9yf9DA-K}74VY*3l0GtgaCnLj<Td1
zXqP7fp*222no?o{uJyp6R$0N+HM|Inf_inbwn&1JP@|Z}#i~*`r*N@HU_*Up{S&X&
zhBw?M?B2rX&z!+1lnD3MU`wodVU8_41s*+Tm(D;f!8z4HEg=^Y3c3Qm!+98}BYKc+
z+Pw*tkw<-GU^6vyNW2wgA_*$dl?W&lfIy)CDewveZ*Y<Zu3m;BtAZ8^>f{@&Uf+tG
z$psd;YL_*>!rL9@F_(rogKKjvAPuC~8|5C#q9t3Qio%Ot*NyqgCf!LdI7A#!2?wGC
zhiGQ6U5TEKK#?>JbEb|G8j!+iAyabyNG@!fvx18xVUgsl!8MI}{@`!D`~2BmY=kua
zq6&o`5*l1*LX^;unvhgX$m4o$;j;)5L!roaCA4FSiER9mb1pF=4We{jC1e4AgnR`z
z3XKg#f^~VAN9X}JBCbcNS3a%q%cP&J%F${7L~ks`7yRkovl(t`r+nLV5_=4wtJD>5
zum0BCItCj#k4L6QAs2ME=!P#TZx@J}0+6{W1==0QEl|Jl*pVHpdh=SJyt%=mb*D`9
z7CzC}U2$Bh?Df;T2r*?X9j;1++R$jSKmlqH^2hl}go)bP=BZ;5<8O!=8L<eS;s8bJ
ze&cMe|A-l`{TQ?WMqpDoJa{MKtwaif#WvzIk|q5VBkHsQeyGy-NJ*AY<cvJ3$&_i9
zuzXksgIU$ZMd<Qul!1<AE=8xy0$$xEv5uj^7O}@G{>@I{)Tg6xb=eSxE2IW6^ahUb
z2Z_Bas71)6MC;AM1a4;%)QK>EfgsqT;<$z!Jg3eCk4QW$4fn{zr+E{pb<zK_aLnLq
z*;FO5Bsq8A3!lSs30|}63^%y|zqPTnOzkmc-&5rjXPahlD6_B`Y$cad{b<g04!yG$
zRmd6lxHBPSDhG*AEyBX}ql7)cR`UMxz$&Q}pbHmlW1E=ZlNWl^?efc}J01rRxJ0i)
z4@9^E{n*XpqF8<l(544WQTTPu*l?ji(vUx*aXL(+!!_4Tp!TCB=4Jd|I&JA}jedF8
zxx>%T+{RH)tIyEyN2}?)=4aa>{lRxZ*P79H8Re>dCcusrx4yBdRf@&BigTNgzK-mp
zl;%?So`Ua4vqdguS`&C%PkCQ52Y9Jm>mJ5)%83V~m5Yx!Y}@VZn71H}tx=?RW~yv<
zP(e~?1sK{y6Ft6K@r_MBna-ebhIX`u@Zra3;XP$ZYO+o?2F{wZzB51#NTqDDu3Ozf
zfes<>lb%%A5lJ!vUOg*;n*m?KJbKy2T6KKn4yK)FeqZ^pr7GfPzspwTf<1+Gx{s@H
zGP>)auuEgCl}UBeIIM6y4tvbBAjG=#hGl8P4rfZFdeJ-q5S>f_$t@ed8vH<hv)#AT
z!no9aX}zuGS$+S>htIA2-kxQ{iOcuw^V!5qit5`Ea%WvQQ$O+)j9UBkxS@Gaad+zK
zML09dR)V<rfffgMQS{Lj@z_lt@&yH2{>!W!d-g%ajpz_#sp`hb(&-lW@{@Arld|)=
z7izK2fzIkycsBen)|>5VqJFNg{+X2T=Y15vnL4uciy5?bDEhS|fxXf1E5y?<=e3QN
zDPL$+D77;F0fY4~@kdN0q6G*0K0F&Z1vNBdv)4ZJ3NHS@B?|1Pk2R(AsnP34IPe<x
zYemxDz4^~s^8jkUKWRfVcTIhM0SQ}*#{zrRA7$2C<ilQLwi0rYTLz;7fOGIym~R3(
z5xMn}Z+2?8U-;5<Z#YnCRqP%vE8<(*<e&o=>|g1!00ascC}3gawIdQL2s~x{fI-8%
z*QG(~s$<;0fer*APEX>PCX+D$LIAJr2E#=>ZU>XBd&v3qdS|_yvYz(w^kceLxoj65
z&eMB(vrT$TkFf$#Vd)zHJ42y+Mk=J7W<S9<Pu?DMyM`#Hy&JY(E6@5`htj;tF!1p{
zYkfavJX<Xj@sS$Vi+ZS(VLN~3q%c^`2vJgmA8Ij&ujf;M6xsyZXV_<eCiR=lo|HI;
zP}Jubd!iN!A*4tIS)dS!$_D$}X3wz)3xcItu1LolR0BuXxYp{^yEY(fSn`{t#Q(Il
zTxwZohKZLTVXY3H!Z8R)SqW6)N_Q8%P^5!$@^I6^Mu}5Wz)lM&$CZdM5+DUu0Ro6D
zG+;PAwtc=mIJ{iueL2SRY8L~j>5H7=!2;LF>Gwx11|qfO?$y^!lBgmCb?m2$pXGsw
z*bP3^l#t=>X90rI<`mRS68Tn<iZH=DIZZoe`R`H{gpW5H6Yo3C_EI<<&#0D9izsGz
zi_FJ5)k1*dIdu%MfirWN;H}dlWjzTwhWX0z)e>g}<(XYur21K~ID*WZgCKzu`jiql
z;>?>PAVm=wDB%R!!jSZf3~``I|1_Wrj0s6HU<q_}eVE6t0$E7dav=4xY4%<A6(r5f
z$Ak$5)spDnAxYJi=zk_b(=80p0`3uEW(@+w*l}^ioSvS3H)^$HzpsHTGi{&8a?(1a
zcFkVk-g>>hzHZCgo`JrX;qwjG{%|o%L22>#Q1C*FT+c5ss4bYEVJiITc9?f@-1oGc
zgzxE%?XC8}4AgPpJqn!Vh|oa$#y^^uYmIw_xvF}40g{*vc+#6LrXJYTpCC?MRwqnY
z+4q&uRQWNjzIytSaMKp`H1UPY2Y&=&>-+}|yTr(nq^vT{D994Lk@$<EL+Tw}YQd7O
z)b@|`3I$6ma`+7H)WNG@kI@D7iO8v+*omG5q?B5Kdd(zZ5QF&_rl|DYAH|%J1C}~M
zf=e2K>Jj1zG_5`fWrDN4?PNvSR_l=_TVp&@-<DHKUN(8-B1X6CB`<t;yXPxoGS)in
zaVCUpyrV{;)wTiLfy9M09Jn@mr^Z%}czH`+N4Mcmtjy6XX9;lR)HfWzAontjcedt^
zmR#XC6uvlZxobZ7a%m&Ry7aX}Zrlw|Q_tTW{q%zb2^BiMEMX2YWZ<yFNpnHz!@2PG
zlWjzyN_ZD}I8{3hTR;y`r=4QRE`48?6xbed;KHF~LV_R%%rSf?qDb*2E8=2AaUf>D
zJdxb@jHx`Sx+^9nL+4P{<-)4_VRW<1=(E)YL%c(BwTD;eM6rh<K>4P`r}9;bg*GdZ
zx5AT&hY4(IXQCuqYuLN@mOMY;FIq0&%BF9qS!j5O$mj?eDLZ7ZX6vuR$Lzn}0-D62
z(N7o`@JZP<z4O00C{w$)&p-tdMJ*b(Zs6kN=IH9|Kj5jYv9-Cq;N|Iq5dR7AWEy6i
z6DS0`%9@NR=8J@2Df6Q8i(*x1Myc6GqCOJ)(Wf$xZUq(I$_5sL9N6AsplgdcNzNXe
z(+q86sA&0$+6G)#_gysrSc0le5r5B<i9rY<8VLy};e|lTN9FIih6^AEzhPm+08joD
zTGj(n9k3Hg(-e7jil1+$7sZ|P@m<p@61DCE!yUkBW-<5dZS1|?wx)f}1#`OqU^$-M
zHz=NKJT`ZNgo=tn3Z@59-Ul7J>x;X7-h~$j0Oav$D()?{2kJ+FX&`h*BM$~NYP3)R
z%SpnHI&GsUvcx%e(Gu_J*`lPEDUcxCNH7v11IUf=r}PK(UNr(h0@z{nA7AQHzta27
zHK=v83##|2Qx-qHGY|_8BCLS15R7Bjegf=hi4X>MFo3RK^JDSs;Sl6jm@tZwP{GCl
zg>g+J6qpB?4*+JuzaFF<cw7(^1K52q9muIMo926#D=0x~aA%lIvpKJDOL<8Dy0&mc
zdC@iUTWP=|49V-W!CzNX4$(_9`F%~aLqV}8zs>C1%SHJ+Unl%MWoN@y?4R$RRU;V#
zQ?+E}v{@2JK-MH`3xXCUW|}_B$%7Y0zT=i~k-idZc#*!y;3YOOi%B+Uiit3xuu8?I
z1T;<>YY7apVE!zf7f|Ql4b=K7rpljinqI~N=jO(hQ`EEIk%|Jx+KNPusR^7L0U!W$
z-KGL6?>-)~edQ-QmzYjtWJGDHohoq|{_(|wpzy3p;}RiUfpW24{<ZZvVn>OOe_5AB
zSQU63&n=MmosBJuh(ZKokK*A+{|+*<=cPY|HQu||`P=MJ;5L>jOAp+d4U`t)Y*M}7
zd{K-wUi0_`*hyE2yckqg4N$9z)+I@GqtiDPogL6o!D-vE_vx=Sd(=i1&hc)HO1>w#
z$<WKc<6i0@^0H8Z!zI#dLwT)~<PnVsxTlT&oF-Cj09;Dd=Dc!%9O%+*sGj57`igq*
zevH<?fQ6U7n|yw#jjAR-tKeM=kV;7-gi<}W|A|CMBs_?^d64|2Ijq~@d;*#?)DZ2O
zV$hSh67wC#lpomGb+>@=@(BpoaE{%@BazmM8dJ5I98h8Pcrs3%u&0?gx0AT@&u;zc
z%s*@g7<8Dd0vRUVN&%*l;)`e;PqjkyTTO%~D?&BX38T?V<@13Mupa}u&G@3;qPTm*
zbfl_5C_!#|yx(hdjWMM30I+*`Rd;-NzTU~#Opz{>5<%(cw>(#1_l@RS7B@}Dg9ca`
z05!RS1A9Q23sOMN!}D1*WI*)2#4fyqWKY}JP2b)DG;bnNiO(NIt@BT5?j@*o%inR@
zGE-ja{<Mv_#y+Z=`nKCWc26D{Vu!~JT(ReK3}kWd4W2eQStExHrZ%`6!7@?jX{RN_
zEzl$Qf2JvLN>0XdJBx>Ziys{0BpElcojK_&AGu4AAN55Ri{8g7_<Ej>JRYJNpF@an
zzo9I1gt!XsPRer(B2Qny9QD3|z2)y4Fxvv;6M)=d^y`R#+>Mz$QIKb=V)RdV!^|ls
z4HTVgWY0pA-T;I?@NJ{v_<NI)K$H%mxJHLkU_&pd1%ZaB4^Ex=l$ULA(^=^HG5^?B
zkbI-FaY;~Q<JK1bQy2jZgn$E=mPVcsuuqyy_nawC_}2HpJ;oBN)DfXo$VOT)CLrRi
zZvoJp@WgUfU{^HDwm@quy08$(g750&=!95KqnavZYX0V?kX629g@geB4&S}eZLx~!
zP!rBpXj{5IB4lGMdS;1cJDi+5LbE<;U}mszAI3U(T<uz;+qGDY-+NUo5Y*}8T7N=H
z6!Fqn5Y)rP;$9ULBs{nm*dJ%eHU%}RLKEj<?(@<9%c+W$kuUA=(6c1lSK~>ulvOs0
zva*^bHdd)3VkkKn4zdV^=<g@B6@6P}3o75_yqKDszK$m;z9SOMlV8~RqaQ~Hf`QGS
z4%CQfaV7AEQ*fWAYxC5j|1rq_(bp&FQKjVePsrgAEmiHWPX?f(`CpMwQBqS>RaRG6
zSz23M-zOj=EN@XMtybIFY6<m<-Cw)rNQjEv?~bP(#qA_>dc7Wxr`?4#dw$=KhrU$7
zKW4NW&GcHkl+6UZ_i}tdP?=b;0s=;g&S<<ljN9SgZ_@A=7WhYq>U*bg4mb%KYg!Q`
zqka0fMKc$EJfnxNFdDjkIt*g`<kD$D$&I{o&C};&sPHhL8tg!2W-G|4liJois7Nz`
z@kX*DgweTuk4*bV$MrtFMz95>6VJ^!ct~%4rNGM22rycbn!w&WaZ)}t*DN;Xl*{}e
zLWE|jpaBF<z{n1y2*P)=13&{OS3snIkt1EAz<Ak<1}Kv0^w=nxw3XuzBtc2Ali0kW
z2SY=^FHA=9!jn~}JvpPppF$u=DS|vLFT|tX!(?yS^P6|$ZL^zNhpGqpcL#ff4K901
zC5{eP!(}_Cq^GD&Q&+jIK>iNz80i|T9PRFZ10rBi!Z!c}|5#zam9GDog>Xh@gW@$;
zIomxjz26BizW;9lNJN3Z!6X);2kw6(;f}?1(j<`~LEp*YsX^-h#(DmR&Qyz*PX4tH
zrSx7I2m}vef*4U0grVkMg9i{gfM5lYBM2&B-~bvpx&tAGjO-W?g~VncMft0<$TW-~
z{_uvDp)JWxanr(=vomrQpH8vjZp-b?%I0lO>^E^;^>T5FU_Q8Wk$qrIX<1Rd`ng{*
z=oB-KkfxrBLrBT|i;0R%__1Rjb1ah@17A{ZLSB05UNOcE#u)F6V}!R?beQx2b&2%>
zHb%6>^Z+$vz4JA6r1CVg)5%!c>-UAN<Qmx_+Hxxxx0hmev8G;dW2LZ6hl=Zhn@>1p
z+Ipv(D=p^4(13xZsjV?~@IOyUR{i@(vo5~TcuA|?g=H1v^wZVu$-%{+GxP7m$i16y
z<=d$EKS@29g+|<!JKH)P{iQ8sPwSPHI%&W;`F5q6C2Y~ACA#rSJFN@3wiWvCjrH1<
z^DlRtbVY$&N#XH|l8noH&_w0I_CgGYZVe8CWEqV@2AK1XYmjdYFON{^O$EiDm&pOf
zwD0d<{xfO_sY9q{4m+CYJ7tB?{7wBVSF(0#oHP0^)==ZCR<CSc8o)74(|+VPe_InZ
z(=O%~(dg_Kc`|CPH!8d;I*74RrIy5Aw&a0HVOdwy%zMs$xcl<Hb$YITc)q0T@OgBs
z^K^gRI=g>hJx#nk`fdM;QR&Q)rD>h_)V{F%Qs6+6FJ^ubVnm4<MiyjCqeoFbk)fkg
zJMF0Hfb(^|TeQaad3xHpcY5{kX#2RiXXEp`_wMNRdOLYLc`@e3m0KC@%4`J`L<slc
z%aTUH3c?++)LXXYpSGTCneo}W!gs!K-tLQ|BaHqVe}YRJMOU)?)1LeAAK4X>lBIFZ
z%B6sJWr?k%hp4M<LG9LwcgNOc+@BXu{3BQXx~HQz*cmZ>X3LdNV)B`|85&4(A}#=)
zXsLUyE6t`WXiszTx$q7|4=QK;B8i7(8r$)hn+^7wlO;N$#=tnQ_d8$jG+M>^Ai}&;
z3Zui#x;)+7+<oTX5`vyxd09WgMYLzSM`~(uej-_o#fDqZhtJlsL55HU@euYHjgf;w
z-hjwH!TyTJp~N1SIYB)#C1eV0GeB*iIPnMXt({vN6z`o}gcxb)gqXeemU1T(PvnFR
zS1lzeW$Y~6qFHORqvf^U?3bE}ty8MTOsvgq+B|1G`GX0m<01}tF5{d&PN7b+PCv~{
zs>l=$FX`W9gJJVca8nVrMp0ta)NshA$-(6@veO(tH76yq#Qnn1U03Tiu-5Sdcc%4g
z@5ahHgAi8@TQGDXbsW2_KT=3QJSM5F@6A4lH7ja3N0TdTht5({p{8)YFVw*|;K|~Q
zr7^S8Y(l-yz@33mUWswXnI?jl&ohZK1om-an=Bz(!bI2CzB(x4G&?4n83WhSmh^is
zHW0Ab5S(~Obd&IgtK7k-87x{G5HpBA@7o{`ws^dC_ljBcGDBGB=%}1(2hu4E@%6gj
z@4&4jxz?>w^R0GsFFR3tVF(ggPi(-H(JqrIteEf_lvRSD+wJ=4d!s%{7QUf0O$P6V
zMeMb+Hd2R!l@L<qsz^a5R{BtOCv3AvlA93*;&W%xX`Y}7%ulmZo9<|)?>7bMv-)I?
zp<;f(&_pCx7rLRmkR}E$0{wWTU;4T*qd_b&pv`?*tw6SK&fd^{a+u9b;Y<9(BY!%w
zq++m}euYCOphpZ^2DqeEdPr5Y<FbOrg>unZ(*iR*(0LKkR=@V8{*@AA#!g+36F6%^
ze0KeW6_1QZmzY5VzGpggQh26RZZo8O6B$r*>q_PRQ(1GfF?E!OF{WK{Cr;I?HyZPy
zOR{UJV{ajqgPsEW%5-U&@^P1;rz~4OolaL+I>ymIwJ*kVEp^6ViR#P@>=Vs<&)7-<
zn7VEA%Jj;$m2$b(`3AQ==ap}diUz-dJ7jNe+D8pfhu$7!Uc-cqw=G{>!GSj)9h}vY
znfONMWq8;?9`Dn_yoj9#HvKD^*fQ?0!)n1`rT>FHEbGjF+Jqxx2_bi`L84KQ>I+*6
z*mjBAczb4>+1FxLyl^fy>ohz~8`b|~;|<P%_a(Y<x2yNDQQUiI7hN4y5Eth4_IAH<
zw}wo-^$=GPq5IM7BhH$mDgo}<1>kcGpm5hzN34GwPT-Y6jN9k2#jyZKt-OG$2R(*n
za2)HD`hl{Co__%`<&KG_RyHfQ%HRS}Jah(+3-YAHiN*#nvLH~ZPCuFtj^qTcP7{8`
z{u&SF_O)$)lVLO0%_YM;6sPte(Mp?mhx#)Tb@+EdA69Bw*mcpdw332wJQ3kleB%9H
zAG!N^FFL;CNj#nRTRZpqRq{Oa{ga=N2jNA0R=?H$+Tkxc0Kl9EiswWSwUqetE}qer
z!Axbwat*~LM9*Dpc@tgo?Do*2A;JV>+qf`Eg&3RWHr-WK=q-vrO#v>m09LePKsP~;
zBr*9+X0$~6A?pV8;>Al_g)E0s@+>;TP#%C!EV6bZ58@QyaFO*Qz%Rjy>924-`o0<Z
z6%+g)*e<lh($*>yL?fyzX7nAsAvMi_(rB#4m{!Z<4dwjVk&=N-CB$^tw4#C&vvW=~
z%|Q4yBtlgZb5>X^#v<ylFsL7;Ze@|O0;G2Nj%{<n>U<2XF+4Drfe~=el(Kcpv)_v{
z<+U=S`E^e$fM(8oEC>^|vYxwU@|j}ie0$RSbh5c*9$P>6F=!1g0{7fEZ90wh;2bfc
z$=wn0>7~POw8HO3>;l`|vq-Kk-EIK!6A#a-nBOIah2&}7wdx+_-mKc8Sp|VdXLi^d
z8LeCFltVwpTJfHc+kRlf{5YI>>e1%TVQnhnMz3_nt9+W!8Qgp?nad*>q2XjSm^bs7
zl+4pNo*MZT&FmpKK>4aDsLYrWQEFwCD6_yqo@cv|;N%8UVV0KU>6@ibm7U9hDtq<L
zJ&uJuwCp~#QjBc9y!f!Ue$eH9s>4rT;F)F_@0CG36Dd$eJ%2KTRM+&OYbp4p4#%Y}
zDtA=nw~M7`EZK%<MivYiLkZY?xCQKT7+^h|Jbo_O34SCI$6%O2G-Mcyl0mBFi=tiK
ze*UeC9jC8qpG{CGN_T)_-g(eSzeb0GQkzk14?m#LY7%%6gW2n(ez)1`YPWIhYNe&S
zYO+P`qhFzP?7Os&<5D(>>pP2dny5R4VXC=!`8lM&pkI&*=O1Hk-02kEQM#T!`e&<^
z;tS_a>BE#D%RrzrFu%7Pbdcpo2-Lb4N0{}(HosrH-WE`v;+&VoG|lIT%i%SB>m9KC
z2@k((*Bc58h1MnFgt|M?k)CbrgMzcoDGdMR+DDc!oFKW4EFVq9yj*Y*l9z{<gHa6I
zSGbR}l=Wr=GooDJFSp(!O0#T|CQkAxojdu?_8k*VmhAIdw<9ijA99ziSJAbX^X6;H
zcq<MLKMXm<OKy^Hbza{brK|RgCEvb>P<`C<KsP-g<r{R!8~ohWm(=Cq>kG?)r%}T3
zs|D}A(rP!W>=)1Um4T_-Lc%C2?v>0FWzO_Acm&7SS054XyZP<Sbx4g@z=g5l5y-O(
z(|InKS6k>0I{uB1XkXQdGnJX{OYm|juJ3r>QFAiK2gJ%Y{8+~;ZFpZd0Dwh;GQb`~
z#>;TYb0|BmPcb}lQ`AJ@h`I4gBEAqsK?xZwU=TxO63c|?+?>}%`Kd16=-tD2dRC@m
zad}iHVX5h;7hjXttIunFT;uICW~$~Q=Qppy^!Wp#sgA!ZpNN9okGjnUBfU{?`LP&H
zz25f%2NJ9(@<0<R+`kp$e1;7j{y(K7-3f0dFf)YgJ!442D5^aHCu=lyB;aUN2(Zwv
zU{a{TpSjTT{wdHy#3opIkxaR&t(^PW)_5LA>LjUSs8%ss1}Ku>u-yE=(dQJcqNEtK
zu1A5Hbe2w%eU!!K@0Ilbwoxnu4HUN3cmCf^i-!IRKzMMVfTXCbF!X;`ll--J*5knc
zO~A{YpHLA-AI<zz)K7@Vqf9xp^Q6iXB#xm_#Y}%oOaI{`TV8UzLQw3dU!lS%l^X`*
zZUHDsQJ9n9rh+45r)MKNlVrxyl3$XT!O@5iC}IvNbHl_l4B=>J-^A({bhJ!XjSC)4
z3=12b43$Xz+1ZMc?_ZK$q&CZ1eCmTLaQVQ>)LQ52^!y7)5vx*u_&y6rlQ6#jy)F@f
z^xIIbi<VissJh77?2797O7gwqH$tf?^miBcO;hwHOkrF0D6N~YkrNdzs3@r^vi{$7
z_n(Is*njHpoW3qdfB{5_@4|9;7f>XffkxcpKNO6AI!eZaSV9vx&O@(+o9Ac3|6BWW
zeu|ZSw6}YGfBSd?`mI*QL{|btio!bMA!sP?IR8oq72(K{q$o}F)H;#$L%;wM&u9GZ
zc0fY<5dr>ks=gEaaAZoy>68sH-ll(&|9-1&KNpowH7&~?cK6BHe(dX1d=npjb^Tfs
zrpElnNS}<$0ue%zrm2~AOt5R{;htq$jXhYMgsZSwW{k5mU(GXHTtMAPb}ZL5O|LXX
zj%ZocRq;LWW62*zJ(&4%#FjR_7_DADhW)YXS(_T2@agjrFD(aiYdODPw8FM+`+xKS
zuTROV3*s+ZGr;8Vyid#KeQ*EoRzO}@SfX#I+8B+PnVOrNogSiy<ClrEB_9Gz2=SZ-
zPl61nAqu%=>L}-IQ$c7c<q76mM?|-G(TxdL7JcY}6>s!HclC1Cg&qIjjSai|7Fwi}
zv526gGPyiXY>3c-1Phv6iPFHoBQ$C1;NOv|+}lMRJdY~%Jq(skz6UCct@;~5^d8C7
zZDF<0-*M|q{e!|a&i#UM`{n)p?}7Ax9yb>@IZ`CDjg?|CR%xvHjI!UT;|?oE-4d3u
zlM>Oea4Fg5<ixrB9y(8`=2N6`>Exw*RpOfYc)RJ%bGaw?v0qJkY)ov7ZS}1UKO9(?
zSee@xR@c|KIkYr4Rx@yQH*M|hXV&pC^U`y1C#SLwO@BWcXRq)ct{-*gJ-v<Uylp<^
z^wwInP_xt7ZFTw_*%fF|saLjm7OheJ?FIka6WV`VmNHI%FX6C@TRHk}gYLSwKf)X{
z(_A;=?y&xLMcZlGY*RhVZb!Es18w$S7Caf#hf#(dTJV2Z=&K&gx;Fl9oV9AtemfZV
zhX*Ir>$babVZ{IZa$(b_Q6J=(n&@1+eEjGB!upEWU1s94as$uvvL&wfjhlssiI0(&
zxv!psg^P`kF+C?sUn4s+Hv^l#wt8mcq}`13Y;DSs&N=JI8?XI-yyyp?$L}?-O_z<`
z3452jq_VoMi=0c}lSA%lJl%GehY`h%%ctJ==jWHRr@X$fKmWF9M`s*$Zyx;H+h2e0
z`@TNBu%s+~zGA0qFLSqg3#(5{7cN>p=tzFT6*`q@Rk3H*{M~o)+6m6Kstpbo@)Oa5
zMyM#S!q@%(+QR?fQ^)n${CfNHL3=Ul&zx-{$L!L;Js;}cU6Yg6n`_--c#1u4B<WB<
zft5Gzd-VXPoQx-HYi^$RsFj!pN!q6{+^R@Wkt0o+pH$z8s~!hAXo|2^c{gAg7gxle
zPICDf)MSS$`iAxC4H@cw-vYk0U|{VT6|chj7)xfEHc!y+(7PDbKF7}dFvqHpA#)f+
zyui|;+~aOM!Dq&2tX;`+AhmHeG+r+H5T>SxMUeQ52SWwx5q{aiI-jKSmzIy!5Zh4U
z7uK?elbXM-sAyH;NImq0*M$G18!ft)k;^4<87%Z>c&xvHaYdb}B53x<+>TnIZYaNa
zBGo2xpO-<zF3$3))ev0FSvdmPu)W<yAeCKXjg#7<_mcef+Jb*g!jCP>^A*c>E`D*J
z*HtTZ6rtc?f2@P8dFvhCPO;W&0((&5$?`k{Tb$j<EG4V;dxz27Akq^MHc?h#T1z!a
z@dT8HnT;P@RVQaqs!WXpB$<|Z54C{br(IFj)<3cEWU>NKYHgqzi!%1KqCO0K<}>J4
zSwO-Dnca(2pDpR+nfNMq5DnJs6Kpm<m(GfwZZ4vb2b=J&WbX*|&@-X(H!+1YCsWXf
zHetYj?0N<?j6sT#HPB{2t+>iHP!<#&r0@B%yQL@=2@TI_U?I=r!V0d=_X>GX`a$KY
zD^PKW_f#w-zQVA2a*G~J?3LQSE8uby>iF1_*hPTD-)tCgiorj)`hfOnE7qh~kLP*z
zMDE@tQD`tsUW+Q%Sqp}h;M3zxKDf}En-$!=HY++V`Ap$4_*i=WqOvyGiUpOE$I+FW
zSvMc)>wvT3O(1f#&eDXjMSPhANUXBSvn)F(r<J7Mut546e2_<nLo8N-PKp7cU0wgG
ztY%<*q<QM^K`wDQL<nIe<~iy}=aV(=2y`w(qlS&;*;!Ut<bP$ira1!!iBJYgxR-+&
zLsA8_$un{Nq!!c_nV5^WdP?@oG+cH_A5?~#r(^Zf@B?6cL$Sf(rea)YuLf&!#5Ak|
z3RDo}p%u6cw9D0Y@ZKO~JfOHD3>oAh|26!<_?}hF!7i#bB0fCO;6NRUi)o|sk@MA^
z&|TAxjvEKk_zolZDBq$VTnrVjv9+m^0%K@dxSV+`Efu5`!oAc;x;A*+7(#X=d05^}
zv_&ay?hjP3HoVw6-(1)4wrym$Fk&4-Z#go#kc4yK;XG*H-dfTA?Qia)4ilL=(`jOn
z2-#6Su^FY;$E`GGxyt&umtQhxFueNJ!@P_iA|@y}PdkyrSQ&yW+sAtDjnCxsc&>s%
zC7SkFJ>2n0J<1|H<0Ow#R{*DzvO&`Qv)S^8gZ$jj_;k6#;u9^cPdcT_`3D{gD)1jY
zDS^yFIZV*Cc2dSmz3{ZGk>wV(TVwL?XBvK}3MK8{>vpG@O{dx}q8!52i3>&-_#bMt
z(-O4xi%2}p6v#!r742Wz39aMx)Vjahz2;U<fpHJPy8Nv;zUg4Rpu6R<Zqee92_j}L
zDPxMQro!`mM+E_<4JV5Ux-7(22h>MU7qTHEa(6X%?W&6HWNxF3-0f@07*eh)V_RAs
zO}vn`EkDcQ{4xn;stWX(%|Dk?!p8Jtc+(_E;hWgaWeFQ(MT-^mZB?Ep2eOoFx1Gt(
zf>X^0s*i6=pC5FLg6#~!l=Z)y8zt25AN+J5tB_98qVJVUJjKN#dj}q(%&=+B-Vs--
zMQ)Y&gA!X?i~72Jb>Vo0*C6b=4yrokoRMC$I7tU<JD#!+U+E5fs!V^Sl_#^u4%62j
zv(JXQLOr8d!-GQ8=9LE@9BJgHdqZy%v*0w_1At$d@zp%Wab5VtX2@y9<~PV|kq(L8
zXyzY3InBjmc#|RK=cR7t+$9Ookt!>>%VLi9g#C_w7WxLYq`8@rZaB@7ftP&BQcV$o
z)zcE|a@#ixTyZd4+k9B-3f{AbpIcIhWJT{gasbz`5Jg|EK_ph%-S;${V3p5hkbkey
zY$uO_AptU}J!XcV`KYLIP*hWLj+P|HY_D0>viOZ4kVcgwPV~#2GMiR+FnQGP8_7!V
zkvmOaz#nfjPJS~|rh?LkrZjBWKgLW;WZHRQ-z7ofC%%Be>|(v*!Xi@-&;5$XMlJ#!
z5fQONIPjXDv@g0Nyub#_(3FC77t7(%yz?{?+>VKUA$Ym{foTrBCG1(i<vm=kc*%&g
zFIN>Yt7wMlT}a4dR^=e#Mvb+y44@nFyaBtBsACD%vCLp=jn@h}?IY$WUhV@8bLQ$v
z7DG)l7&+cVO^>hyF&MIN+egGgjfL&+=qWbUQo+y!QhNbPTDr{@TWnm|rGR}QWo1Ju
z9$T+^=8O(R`zA9tV$JLkw&Z8xhDi1#V=DE;fMgDHyMtxu;qmdri7CN9<FLUKBrOUr
zZkXuqn2tMkW|w0rKAU|`q_m72q_%)yg^yTaMFG1Y#|J8EwL%2>u`-Nu8xobe<bI+3
zgJ4fqL?IP#U;#O;(H|5dItePs<DR(49~7u?LFWwg%oni~gIJ&xq?Zeqe0NI4b<Giq
zFwBhv^^CI_ce$M{3qqMT$k%Lkp>p7&vNN&Se2)Tw1dbebm)%JHVyG-N^?7zQIDCMX
z&|9f25a%QP*yWjTg<PM9a2Vu1QNLl8EcbZY3<pSYv_!y@Lp9${Cgx|H3>aq3&Jl1B
zZoQheJ0MWFFXk16=7d!jjKeH>d%l(!iVhe8gC7yTRJ!_B+CDruE6KD-e9^E1@;zRt
z%4QX2;4?BG2USAsA?i?m5flq$C|I~+k;yzZBZ~k4n?bSg2y6D{>V7=}uT%W&ubE#y
z@5lHl{=wCBZ)>8-E%WTK{qkjg+Sr_%v&?F`BA4og$NVXYxq8Cx{EW&eT3a6<HFbBx
zJ<sgVq}@Yl_hQ}n;G~#jcTIlj^w-E!N%_yu1)z;)1-Z{E#t`W2ViLrn(>`Q(^xuKK
zDxeaZF9rBiyBIB#&(7azp&6xK^tB`^7!WC~d2QpGD=Ke;v=5(d`b}Y<S$ceTLSZY#
z8OV9+Gf+ud+umh5m04^!cb!zI@3mCawH2Yf9kt3oZe!W@GY~3ZMqqZDP10Gl`*BX*
zv<_wbDq$uxv}lt%`hgPje0Url6fi$)zp-b%p7R@KI923*JG{yUneJA4Ih-@ohig`Q
zF2=6vY5yMpc0h^0?yL3m|DiM2eCTvy?FgDZ92-zSd+>|1*Uauj<ErjGZN1I@^x+)j
z%{BuaBcyW%v5up4T+4C&x1!pO8<$RF<sXT789eUBRsYzV7yQQ>x4J)XUnRTVxmWLl
zzu24%TxRvsp;LO*Vd?Ohyy{1nj`;nfBR~E}=6$KaPkw8E>zw%8n9j+Uy-wBtDC8&N
zYXZ?T<6j`axlIS;55NK-4S<S(>VUd{7|<Nh7SI_`0O$!Q1Y88T0&pGR7C;eT2w)Uo
z0$>_o4qy>r1z;Uu3t$&uKj0|f9>7C@Cjid@UICm0yaV_M@CD#Iz%PKm0-OmbKq>&B
z@&TyIK-C1QK2VK;YKc^F<<-_)XKQM2R`XiYs@Auq?d|PwCwtde(|zk_YaqF!!XJxr
zczgJ-V7plRPLvqzFj)Rr@7!ZmM)CG!KT&}vUO4k-Fz$F1-1G^j^dXk@*os9q5!+Yw
zI3!{iS~xn+V(Z1}-*JfDhp>|mR|P_yIVi#N^#UgAfn@v&N*Ig07I&up`FY>LFNx}V
z=KGcg1QI`BpuoHyo_*eX_2<RnM9rMK+E?Eiptxrz-vF>@!#0Wf^mKDx8c65=+5rGA
z%aj1)-G9b*2OW2xM?B>PuQ}~KpZLlTe)CV6fQgEfw?}ViYH91}>X}%!V%3^;8}{rw
zaOfOBgb8I_Nae}17q8yD`!M&}f7yZ`zedI;re@|AmR1N8%D4cjw6%?`oxOvjle3Gf
zo4bdnm-hnw&pZI|+3<-E-PrEf?5OJ;!M?g&n?}P*!$vt+%>ip}Pd4Dw5!pDLS(3SJ
z)_CuV37d5N&$a)*k+eAR{uZ9P5;Hiwqtx!<w>euK#2S**KR}>sFt_ezBW_S1-T9fn
z^%lDG>g+$x;(ADpJqNJKL$KkQ&ee544?UY&X%PC|$5RL%qk%KPPx&?~#P@oH+nd&F
zjSzGD80N}8S-V_4Ou@P;F3(bi75hvGYu+!&PMg1t7Iv7guQ_!^4!ifU`C;0Qd(G@x
z1{u=bO%$`JFm+}PTVQ%oK6M$v(yZ66!n5&TP9W=8`2^8MEt$J2i(JRfq};n>@mT`h
zfpde&sia_BYum>8`!xuKl}R~7_lywiG!9CV&OUydk+wzuP57umJa+b!aHH8&(t9+(
z`@fX3)@~mAcj4jk^e@JDjOd6a@qA&eZE=XWM&FFLWo{#-ZZbLmlHf1&2H6D|Jk#2w
zG~i$7%C-e)a5s731DeElgR?asNwu#R2+YsCHyw~S9rRwClRK5^_e%eXF?&XK$?Q(5
zBky?!6Y*oyr(E6FRJPWvKI0|dWRVljkhOk?JjaTS)kpo!hVq7Afg^oF2D;#!;3;$N
z>>-mA$z~rMYRB-~Ogn{G@j1EP?q%cGd=g??*L}rS{M$l2Q}H_2j-fT1ba0P?zG;oJ
zfe3j@{uirhlk+5nXMWzepQ-)}Ajfv4tn0+tPXmz`6r0m8xSGiT5QOHs&*vgfgF7~2
zvhCW!E%h>|6oK5J+Nij}Z2}L%Czw!5-0oN<r1#3si+4Fvd=+|?LA#G;_~hJ$k&9Zz
zgomh{a6G9LdR0IFq()^|DcnrJl_slvBLeaowLg1C$I+Unv*I?k+`a>pIe#f-&;%p4
zNiDZIzSy{YxK-KA)^?^<uv{}+ssPm)|L<sp%BwG!UeP?OEmI_dU7!#ThZG{dGrMA-
zow+y&n&FSqWcWX6M>Q;`nKH;0H12;%1m#{!0@XOsH7Jq6T$C)AZ9Y|;Q>uk~zcCVR
z5gIR|cUC$r*<(8_#;&ZO0yVKzSv^M;@`>}Su?PwnjmTOcHNr&+87EciY^aT4At-<j
zQ4cB%wo*gfH0S3`G|jQSLP_E{qM{l)b$&s+E3dF7@XHz&QXZkTINbFsykM4q_PcQn
zR>HUA700cU&k~B{D-J`B><nA{g8=}*kMt*n@-|tLsE5!RNZi%H&?Tj<KPF>Rn%bVZ
znKG0*iN?VcKtI7EvIub)<|Ug`u`}3ih)n4<D_7@KVqQM0(ruRb6B8@DaGx{*w~`xM
zhF-ZUx=9obR%9(~1;SRGQ*bWP9Jh10_}wC3<^|K(3D!)ocJg7ZNwdJ5PuV-uZW-v0
znMGt5RR}?oXEe3ZJ=0JaTU?$hiImNe4)n{#Ag{ELlnyj+5RWt1mJW|$bE378gcF&K
z^j%}pIy*mx6}F=MuJSwC-3z98qTxO@HgJZ4ba9o#Zkq0ij>H8sKEGwerbwR+es_7F
z(zuLJKe<QUxnT1{2EFSD2h`xgn4sSVA&CsSN_MGXc%O1>gWl0lIssIAK?C5Wi^YK)
z(9+Mskzdy8U?CzhDmo@ME<PbCnN%iMC{=2WR;M@cf?r8Ikwm6Y=?o^*zI+f0iI6CX
zkp%g=HbnxGCK-|=1yUr4>My?^dz^8{8-IccCz^PYmCB@`X2WV1rw2SD0R<H`9fL68
zB3Zc^^h<=1s$PRW14C1nj~&DEfzZrnl*hIGaugI(l{d2CN-MdA`+ptL_~-oJgr#xt
z6I<1*(Uulf1iNybJ-Bh_ZM?4qE|sEpxmsG@y>BEP@9~-_zo?{gf(cf0L5HNnvB({D
zB35DPWN#-*=jxO|m+Nu`U8!GEb+v&BbiKiWZZs^=N+a%}n|+c(-Rg_9YJPy!Qc*@n
zK>{a99q$?>VEnNfI7W($nVAzian7H3Adx(hnDkfT7@0Q71}VrAtdU)#qh4L_X1FJb
znB?1J3K?}D?Co|NF<8oXwzt3qBFK=3d=#Lp09QKOy-!*h)E?0#eI(OqR<a>|bm@>=
z95RiejFHA1@Ev{5(q1mej^uHF?MboE0RoVg33tRN-wzR7Uh?wS-~f44P=yEy&1f-W
z2O~s;EIIN_v%qm|Py}-2SD1v>BVU5RMnE+UsL|05PLL!i1{h_EB`CJ{7|yq`S{gw=
zrGBsDg&<BB{R}hDURK$3<9P`T_z0;-fe8yvd_>9oo)DjCjsk0(Ksk&nK95RpefA)1
z`<(k<iV2r;Dyc(?k`~%<;D#hd4}FX?!!pNn($4!Klu*VV#K=&gXX?I;3qJ|c3^Kwj
zE39*36EMeuM-l$1nvkQxNGn!61PIg35ED$Y$Ue3>`SX#v6(;9T5P&%3p$?R1vT*MN
z^TwYMtlj3soo@#II5$1X3>PUbF+VOW&fkjYW*vGB7_}$&|L5*pA9A~Y8HuL06O`Rt
z{(r8|7pW#!ahAVV-V`;OwCXZobbb1hw<{*iyzf?Rp`71+?{|h#g3w~di7(-OcZ{VZ
zd8$Y2gI~{>xW<w_hwV0=`<CA3p>WX>q-ORw<D$fQu3U{Kt=Tnhaw<OVj7zS$>0bRi
zKZ>7w-@lF$s8HCV&d(AqDJ>HRZ>7wyk{pG~)fj6+wv62Gs|2aC;XGH~YTB$xt1bgZ
zecF>>ZZ&VdTeXGaccxz1XY6)BD3$h0NB)eYn@*q=%KwSW!Qcoa3P5A9I6RT`pr_#J
zz%P;9TjOYr+#36IysdHeg7abBLa3N@t+BO2f8<q&VY_vhdCQ0dBbuohx6R!3ZH~(E
ziiu`gXsxZ@@rmtzvfE(=F1qP&4^*hu6#g&^E1`uE$&nddVo;>Tuqch1sEg*98e8L?
z_$0Q2K}fuCzj-lTX8*DDLx6D0AMKU)e)X<v|N4<##IR5<>R!5hp<R>hI@-yfm21bS
z>eN;3>}sR_tGBTx*LA;MvRC(iNiOOEb6@`tvGt&9${RkfgZKU8+a7Xd6+x+}HFejK
zHv{$yewM%M*w?I%{jce9m*Ps?fqU>6o|4=<$GZ@MhmHQ(J%;D4e~!9_ij|o7!rtzo
z5)eY70%{BmE7fcCTC-L}9lG=w@C@z1Kq<b25=$$!>~hL2ul%rOR3I5fid1RRE0R&M
zOj)w!$dxC*Fxv{(S!P-L|67LQV;}jF?&`TZ4Vn<NXw$A!w|;|dfrS%<gp7iQjuApA
zA*>HXi6)gLn@o;edGZw~RHRsmQqRPRmmpD65tXdVzyH-8ZX4B?a6dci9AViPw;`_5
zhPphL@5<T#x@60RQ)irYfs3T1zy0g~GP??{;ts7ZTPP)k>N<Qpm_)<uTby`_k|ax&
zY4s++!XaqUsy&YI5gV7R&H*RV)u`zz+1F_$3WrKv(OOR4rrEjAAyGKs*0r)rq@u$4
z-3&!D|3LwvB30cLE~zB3ij<2`{Z4_}il|ClhDsI8&vpmq@-q`oKttOFFD}6;kSLM6
z{;N`#nJfn)>wh~~cu4<;r#j;b4m@u@=-6tq$H9+AZ^5$<nt$-F&AEmPU!kIJKIm7i
zD{vh*{zvZLEvd5)D7N~-W4z^|2=UZQhlB9}%hpgt;~$m-J&_<&q4L=W#DZ9g<UeYN
zlq6fRN=>s5xDy&nr{IrjFmgSIN6<BUMc>sRJqcbyXJf@qnk;UTc<~b?jDet9jaqf;
zHG17p%)p>TiBU8ii844WEq8zN4=h{Zz+X>|{RjiBA0?Z--obUW=o)E_=dQTM`}kMp
zx$5>hXPt1W+7F4+L5Cf+?X^Nhij{corBY?eRdn1*zrFB^2-m7N3@T32N%vI~Dca7z
zcNn#)YFGHG1vD~5XXOvjU$g{CwbomI169@@v5vaysk5&7s;Ra*@e(~&&}0oY*3|1b
z+R>X@1|%JW#19bHNgk>gu`sCvi7{;qG#0`Qb=<3exEy0Akv8Hq!4r~fX%!<)T`@i0
ztmEDGUi7k89@clrC|_Dx<$`@tna?;Xh(WkO+$3$FE7t0v5$36@UA}(ns~cg5CbzB@
zRm!8emmD`dL5gL_^m_B!5Vh;jsY|yWz54XelvmlsF42>Es)hqH-D0}xp^cTW3)t~#
zrbSsyVtV;=jmI9Z9GI%vqH!Zf>Wx*ohlT_cOUB0`<yeJ|yJZeN*l<%h4$R>;e$CT&
z)G}hf{P&XEkF0Xu9vA5Sal=0P<g<JQ3SsXL9uIR67V&ubgPwn#f9J{5XU|`}eC2#d
zxzq+oENXp#^<U8W?dardFd``S?cB(hTnNFe*T<&1dz}l|IOtE;Yyk6fH7E$l6m~9d
zp4YAl2+|o$5mAYfBukMlLza#@8)b~~CYx%eS>~8;p+#Qpyj3^aWV0={X0<L3t=_5f
zA=S*nBPEqknH@kjEc)ie^9X^l3@dJ#mU&s1ZP}M&6|A8bB&43qoA}~^G*i9S7Y{H4
z2$1lK;Fy)COOm_#U*1sW<VB+-{_|ey%XpbD>*c)Mm-q5t0SJ(2GALJ-E!MK6j3o~)
zy>CfJm+8uyH*AZBJ$bFJuHlue@v{;X+%nt|=w7f~AYtYTLxj_qh(%x-N{FjpKjzx~
zMOUenNY>R_8cVdB$g=VaiH&X`iP?R%Vp#@^=K=3b<$J-eK+21Km4<zf^?apod+7Kd
zr&DlHSinhBpxOSjjs@xJU)ukIUHWB!UtT4|Rkkf;RDokt*EEXhh>GwCMnoV!Nm@UR
zmCJdAVaP+i6cQmw<ph(eEt){}b_9m+cB_U30V9&pdzLj};;O+ZHA2^$F1ohqPH`o@
zZn7E%u(o}vY#RRe;z8*&N3tttji=)&Q1Ga7>CM{rsgh^YEo?%)hWzV4W6MFH{^B2=
zx=Z_a5Q2dc2$FbySQK-D_HzgjEdMhDpoFTK&14<sSfa-!+wFJUIal5Ez*BGeEC7ih
z=*Y1Xr|$U_uXNe+7Ok}E8f(8${BW?&=Cr64t!+~S?e1X58|_n*&G)_4wxam$to#%V
zMMCj|I@m)v<ZO<u)f|HbQZ12YsSL~Kbt`09X;|7k_6>a?FKsMO-F^<uWbFUjL)k-8
zB}m_2WJr`LNtR^Ud~&47-Cq@q4GQ;nMPsw#{X@zArfh6dJ~nO@te|A72*o0*r+}9d
zag<7@d|snMCYAFp!{yRE?<W(-d?g=}z3?nN2~>pFpkn!kL*;_L-@)L9DH@g-*ka-E
zz}@c=j5P@NM?_;i;{6H9{(x+(Lq67`n7^UfKQYZKM9!<biwkn6G|Tu^020WEjT}=3
zX=-`RoFiS9ocR;zf+_rHW;p|c#im+fT3R{|H~mI8kO!NWk^9=H`K$E&O-BAMGk43%
zow9S6oZKTf_bSZ&it>QsJftKKE6*cQVI>3#EuS48Srt3vtJUeUXG?TU_S&iJw-KTI
zobn6GFDbWEent5;<qki;VKcwug#4Z(`6Ea3Cr-|vT?#mH?zRl94-7A&l}^l1lT)-#
zsB9bVYa5z$VKPTG36tg1vKQ+e$<WGpuR^rrHrfq$k9yH>bX$2&2Hf^-ziq#7JGWii
z?k7RzB?$~h0RnJ<2Ld#ygnO`za$TW+6hG@91rx1B2Y>(wKmi7D-~=P$2KY?71_%vf
zsTcw|(WMZBZjs&86cV#A%k)b2tsU3S1sMIych&&|M!8ts85OGh0oug%!IYPl(Sw!J
z{^zs^NGNC+SU7kDMC3jZauhO&NT6$ujuWLQbS*ZX6v><6SyC#k^fJoq{(GzV@-Rv#
z0<bJL?kR`o`g@_zHwGGd5zK6&8Cf~F1%wqUQKnLjdQDn&>b6F_BxweLIH>aAxz@b>
zn|B$585$+^n%hS)YH9P$*Thttclnf4B%-A(b!kgq#xnQHoBHv7)KB&QdZ~m;SZG9m
zz=LSoT?;!GzmTY6r7Bdb)2Ky<F1<ulLn;Av<FQVb9oRkCfSWX&Kxz)W<`H931zN$W
z>$gVD=NSGnzV$qxy2ImsO+?`TK<;wFwdcuXUvstljgXzMjaYU20SzezFkP`WhX7MI
zt<ZcTN7MX0N3}ScREgdiiO%vfA1>t(;NfsrmIE|-OSv`Wj~>Tq3wKbvZU}|>frDaF
z5HUrfPTggp$z{o+Yy}s)_mBb1_-i+9Xv5{mQxf^~P)IS)DdAN*auqRB<o+UErflO3
zH%yis*`Bb^0mZ7pZdID|*>Yc&{2D8+uo8Xtv|j-9PG+g%G4k#0R&N{iFp@6aFOACR
zr}t^^TBk>N7bPmp2N!~dvZdT;3}cG)9g$?qoTa^;JL@~96IGV+wNjFuH<IWNyxDI5
zN~f@v*>3V8cVWB<#$g5};0_Sf%S6H55TJ<T+)D(&PfPr)?9_9V0QUJqfLEABz#(9U
z(~_MjratK@%h)7Mj)Q>Wtuf$?3(Vy=W^cbQECP$ca<j}V56j02utKbE)*03*)^*n3
ztT(KWte<Q&o68om)elU#r&!r8c7)x)o@MW0A7tO<1aNR15{J#<a)cZuN6Sg%L^y+-
zrJPM%C>O=WatT~2m&KKEW!zY9AveZb%tP}y{967~0T6%$Z~<C?7mx*O1X~4{1Xl!4
zgg}TAR*8D=%jLEyvo}&Va{g1}rqm+;`Adm=C(y&p@@w>)>c_~<e#3st{vGLn!NmBv
zz8)4}@vzveSeET2Cc;|7+RHk_`ipg!^`7-V8?f15Bdge2b_Cn}4a4kub~AgPy?;#N
zS54p)a0WPYAm#)LmzfgfmRQ*Q!e<`L`3uI~BDjEC@BhWkKnAlRMK0iZK#!B9j>!2R
z|9qafiY0mXM_A4Oj$LOCuNv!p6W#*(4StbR7tnu^Z<*ZhT#m)6f6POf;RTF8G%x+X
z6lIB9-i61MUJu&6KOzwde|Yk3j(^iQ3(tl0&94J6Wp9Bh2VWDw?w|V5k<~c%;6B73
z^1+@@KO7#k%@p?iAAQytS^o1yZB@s<d2bRou8jwlb3ze?@$N$x;!Kf?nw?82w!})8
zG0uF391jU8tiI>Iem&n}@`0|Vtmty7n(4|U8t7@k&OCL|tf!G%s_5&LL!{sD6Z5B@
zjolKmE<UqHt%#8k8`<`7Y+JqJnB!AQ>|2vTnO)XT(4Cw}a_YC#YpeI#yiQzO)=6E~
zlY2@}Jv%WjXI|DP_Le@mpE-G)&;zBo(`OV)98&C|(PxlQ{+P&b$z3u&JZ166k_4v#
zz9JD|4JcrB0GuXq26JS^UUNZrOy2JDp#}Zd)5oVhV|)gadS;B{edajPXOF=?Yn<#0
zv^z_*Kl$TkUp;R1HRCo`r?YZg>)VG#Q<V_;Lc-*?iI6}33v2I|=R*4X#SHdKsk51I
zE}M9srL&i1Mz74)rkxLI>eU&^X~z3vr*N2lA)x>82ZII_45*t_voAJZ960kCH3z7<
zXLnTi*^0hX(6bFw8!)qxBxWVpL=^j+63awIBGK^v-f+y*9Cwiup5dftlaORW{fE0g
z;~s4uk>?4y9%pLPi@DPcYG5;qEw0iPG^qGyHM_wjlvq+_C705iQvZ-mY@WVtEWM1&
zY{>KMY3qR&l-a_DHM~Vvw+kCxR!ho$o<ENM+lX>o+IualLwPN4d~tPZWeXZ{|GE0U
zxicUC6MlmA@4rSUQ!L0Hmc5%b7?$OTy~tTFan8$}_X=@dEoLT656#T(bEM9#UX5V#
zu`B9F?zH@F#n<#l`eW|;^0>AlA;{Rquo(=V3q5n=FzPlA&-~1oTMpZM#@19W+)YE_
z*nqJUKwFQYb@+OVi{2#Z-7CM$ChxVZEpBb^x32E3-xc;Pk7WX^#Pt1wgjJYZO|`qt
zZF(~@u+7cd)unTGZtU9HoG-t*^Q!pjYym5Cy13=tS}!Z>-HtZ2u}ytlLYu$AbGK`2
z+e&Qv9c@iJ{{(ta2INqC+S|VNci``rJ3{MM&=Up9ELc|A<&;}q`4v=nU-olF6<1Pe
zWtD%qCsDXV-?PqFQ*CwC*HB}d+wvu!0cxqWw%XhJMW005clrhDZ0D7<tKIGC!H4~D
zJ?v4Bd(z)M?VtYbzn2+l>{(k+J5NK*jF&oH&dfZq=h@5t!almz!FTS}ob;1)5>N8M
zyc@6MWS>-$;Y~hiy2E?+fs7do*7NXWaPBTl=E*wQC+EU($9eP?J#cc-Jb5o|x_r9I
zZ{x{7*n>L-r|=Y=VsldYeghAlYHFzUK7#?pZ7|^KsHcHOns^Q2vhPr`+IuNVb*!><
z7yfz*S9CTktvjWa*sTu)c2N!r+RbyA5EeELF5be%>O1c~BUp}rkXV`|%MSiu{Fd<!
zHmT#DuTjX5l3n-BLqiO0@0BsO$%g&^HPM?6JD}RL+=ng=s*ex`Q*WXl9Rm|SSeFG{
zH%}HysAPt+*W<nOYkQ8`ZgOW+QRS?>kB3>~Cb)n3Zp~a*mbaaqbn@4bmq)y=oFCTP
zGy<Rt*Y4tN>(U)DCcAtWyW%Pui({o#|4OOhHPtoO-E_-scl@c)U$ytQBKQ2$EB=FR
zd*Hr@9w}C;O!<4S*5s&atM`vlNseOOnsV`BPl+e54f<%j^~O^vJZ%x_GNmsvL*~M=
zWXyVPy6T?McgZ<$RbBW8b?v%?uEC3N)o<T}U!Q4`Zw$tC3A*Tl`^GK5JEl}+n9>iO
zw$p_w>^i@#=Nu3>X^zR1zjaP&dww@P+>?14_o#<C=W16#7BOPQNg$y_l9s%v7>iVb
zg@11FLqs~~eUE~M{^m1$o1Qa%f1mpEeIS6~31&&el!%9d^11nFEIxxm-`OwE%YT)q
z7%%Z$KK$1qkZoTwRcT*TlmerMjTSC?K{3J?a`euk`9DIF8<BJ3D4rhYOo$n=uqVY%
zS5)B}QK?w82lx24zkl_=0Wpm1gCBnm`bUjo#_*AcHm+gOnjlP)rYO^Z8H`!%D8rb;
z?F9pjz)s{K*(7sPxTxGTTgqR&ef@z)1+L0VcZXq{$)|>||8>4Gd+=Vqv-j#fdY>D@
z^+4>8#TC}>;&3CdUGj7vXj|WSH-otCnK0cOJru_hZz92@fLlTB3G8+-F2T8m;I^0C
z4ap-E&j4Pbd57T>mTx$I;rU0f=U%|z2}BYZ1{Mw;0TBrq1r-e)0}~4y2Nw_jw|M`Q
zkcgOsl#HB$l8Ty!mX4l57^83zOd^?C?(2Spjs1RQR*Mt}TREyKSVP?{G=dSTVw250
zNYxOBf{KQY@f4(%Mq25lrxp4j^z(Ac9y9<9Pfj8W#<xjICTyJF)$w=a6^p>#6XV&+
zV@)~ii@DG%x!R7Oqs8w2#i#!qeBC|V;q~nAPz&Z)fm`tk-u>Qh6Nv5x=E}1m5=%@X
zPP_z(k|ax!Dowf!nWVC0lgW`QuP}`Y6e=Oz`XxTPI+k~-8IfKx-Z=9)OrI-<=FPGB
zaD2WjESU34;=+=-xD+ncf&ORRyT;|cWOc6~?=@?C!}{K`F)TYH2_=7%Z98P&PB~t#
z`0aYdcgr7l+j)B{V(--0do}mJx*Jk&pVi+N4faQq{apf(DntPcK@ki^2@GQk7><R*
zv9ty&M_}zpJZ#3(i3D1OvDKJZ1Nt=~&Q@;NhPmzBbSoBiU~dn%?B%w7+;Mw-yv8M$
zxa=}lyv|i`@V~c-ca;S1lIT5>y-$j3T=M}peZ(#QBhx)z`Wu|56!=HjEA+nIUxc00
zWbL$AH*MArN$+&nFccf7%ckkEdHQUb0h2Ri&y1K_3g4E)!g5*MLzec4@5|%I9`kcg
z_%($=`_msFTY#R0=v#z=#lS5AVJS$<?yKv%+t+<}uIKJv<nCQB_dU;PFWl~nUdsJ<
z5AOeac+c+9Jtxv9q`3vg9n#&tORoNEZ`jpb!_{5myrYdW#>k_Ox{yn{)JwVaOTM)A
z?!}(()k^mA+Fs6OUG5FP5tn@<cW@meu4`@UT>H9jz?I&Nn|;%7*3G=K{j=s7W}1F2
zGtTT)GtDr|bfws!M1dMPCqIYLsYo~)hC*PDW^h<MCYR0kl7yH{BdI2GRu)M%AwjEk
ze(SebM-U49fss*>!pW)g6v$U7Z^8V9MU^O0s!&X^vaa<vMy#3w17gD|WGbmruJ(qO
znjT6=!@$8VK+I2o%$2i(9J!~Ne!MwGs1Q*utg>ANUAuJKpE>8YrCYl;T{?Q4Eo+u-
znQU^iWE>U%B;k)g?$~4Q$9z*x=sK}Rq`U9eLP_D)I~1;IBQ|a+OI^~^mcEP)+0bQf
z*gCIzHCwRJNb4dF<*aS@euH9RUsqN(QR^lX2W?|2{j2?}+e1dM`-R4SShp2*_l&n6
zq)VTHE=1FT5W#5S*-kgaFJ#s$NmCO8@4W*DNN?$?*Ya4u?if+1oZi^9BQ|{(#dGJ=
zj}|>f%viDG#N9K?S+01(Onz4Gl(L;h+qu=Oa<vO@)pxJ1eq}$G|608#z$YXnBLWeV
z;HY5XETBO9lg!io%CTgUR<IeHxzf$r?3HcK=5F5RuOypo-Xa%taIVQWyZP@SVXbDr
zFTRcz)vvwvZ(pA`pgY=H{fcJZ&_XM15akiBUPaVLEYFA|UJ5@gxNid>vug(Q*XOpx
z*h6g3u=n7HYdu-;Ka1)xFlm$O+|<pja>^=afj`*iK!2OY(sVMOm9?!;4|aWP{K+tJ
z*^2n&5KYt^HIl-6>8ZbRpcBxY7Fl}pkJ98Dg2Sgo=K<)koNDY&sMr5diU(sycIdnZ
zdI7ij1Oj-80fb1-rvV0aEFO$aK26Qj1YaC2c0MO>-i=w2*h(HxcEU2AZ8>JOz7)Y;
zk7>TE-m(bO(u4^MJcuQL+x{wwwyEstB*nU-cS#56FqW(s2ZEdpNTidT1564+1k3BO
zU~4PkED~50-901c0E;G*vyPj)Mir_Uqi1*Ad2xgZUz8_};oi88X39rY6538>%hjEn
zELT`OyXj2l6jF0-Ex;yR-I;)47QoSR>9`4y$BJH0ksETxMSx2QSgBY?|7>bh#6|Qh
zx!hdl`Hk^7ajSqY;%#r}Meu2OeGz~KffZH8deLG`E>57WWP*B2T4*>BP_rtBajSFs
z4Joe6(wJZY>eZ@t0R%{yUYhbMOd@$_KHv6%5;jJLps3CRr35)k2=uxx^;TjrQ*H~U
zV2Nv>jH28eSlZ(;o;MriRWuHZQi~QS=bOFM?0ufEQu44LfeOCaPH%P(u+E=Lt1?!y
zK^eZUtuURDOQZq<)Cu+2@}FQi2huj_VBJd1a1N};(Y1)BCA`(qeCk~lLN}{l;j9H-
z$&ObAUfkr1^FlNLHb(@m36b{GnfO2z*IF3FUZR3UEy%M-+F+lf3Uc{fv9*p$0gK~p
zt#Tp3>K%6_2ddei>Q11B4SA)u80;w~!eSvRHg(0JzPL0LkH+G^sHq<0BcNIFeQ5c4
zw3us*A)lHgmZYK0kJN!4S&zI&(WC5X?osuiee3RkmN5IH|6Qnf*37=%nJc!XRXNi-
z*8bcWh#u%8V5GE?7phhtSQ{3+l7!K0z~q{}q>V8eJ6*F#Z4fBe(P9;!vbk33uB>lB
z8`rR8uss6CP?Uk%|5)pvpZC-rwAM7c9WYaaR<iy@0=zy5w6ni31Uk?vh>lP{Kqng`
zReMdnRv?e+Gq1)aD@(pAwdo&cMl4QU)41mB?SO?qEi8Y)@;yoE&dJ!;q+x^!S<7to
zn<c@rh*1#3P5qIc?etTpn-gw+kYrQMF`D2>qa5=tZCS8Nqq9XIXzBN0s2m$i)#I{?
zs=7~Jx*t#c=4ukG#FqYJ23}dB{(>Ba7A+0y=<+O;*9vT}kDdqw473q00C_gHIyeWP
zY7W@+pOQ1MldQpp2Lbz`3OtL&Q%ismcuF|T1;VS=Y$lz04d&gRcFrY-W^Oa^t&Ud%
zFLjb{^r~JV^34RC+*5K3FMYG8dYT)TTr~9-`)JFZq#^gskfwJ6?nB3HMR+j%t8ee^
zuz+F>)?vlS6as}v>XW|+EcF-=z@tmEECkk~X;7aal-8TKuWP)VGKS%QidE!+=+L#8
zgS8({UuS)mj}wN_bRY9)y{%LobafK}qb4y=?S7&O-sMb>IRa$SBG@%Ro|?2ThoO$n
z7lbdNc46wZ93{xDeWVM;CKq09M7s$|<GzK8a46F@RB;crGX{+}Elg--l{$pp84H6q
zftOVZ2q(@sIQ1qtlT|uLxNye9r8mKqtkN~YjWafGy$SAQl|Xtlr}E`%T%Ha!`F1Z7
zLf<KVlrmH3dvN`$E0+I8I_()Hwjd|IE|((7Y*ZOMOMFvqMbg>Gn4{he$4Nc}^oP?I
zSe)na=$80{<3>{bWM5xE0N4MgxBM&bUxcE@Um*Pf%4&jq{S5#61T=d;$<ESc&1s>3
zG_&XE(+aqLB}eTwjnTqlH5)nnU!=@C>QoGy@2Wtl_M3PiSz2d_P$x!w1vJU_OQA)J
zUIW>KaIJ|q0hXw(4WViqa-^bfHIyD`xrwO8cLV?+Uux$zY<Mw>C6cNkqIPN`VA0gI
z$VrYf+v|@$_!Mh80^#8pxc`SJ+r(jVC)PVHc;wK79oE9gcpTn`76Vg(lzbHlSq|B;
z7oxd%k86tV7N7a{xS-&bfSlAM{1pBoUQAX}#+&d4PzfWT9w%6t^<f!Lq>~5;{$qVy
zewYHaL0llUHw`aFB}_wA=|G}vh}<2QnTP8b6`G(o1q0<{^ErpgNzy>LH>^Bgx{O2h
z3K$bA#Ycqak!uF)Y)ceX6j&f(?KTi+WpW7swYV)1RktPQ-s`PF>!)^n^i{onUv{NB
zWg@+KScB-~IrG-D;!%{ts@Pm41DQ_y7eXok<&5GIyR6CmnW(UD!5G($R$MRpJ)J;o
zzU%k#6JXfIPFohX$5I|eeN%XJ>JaDQ(i3UIBiPlTS%oyB@oh`dz2P3%RP_1=JsY^`
z3<JHHKP`F(<0jF_2t7^pd(v-=4yz-KJ9D!=?pG%#U~>>l_j}stx)8?}T79?yZ+m)O
zwAZbd|J$Y6zcgwW1i>S(;*)SxP}MJoz0ynMl~dAXlU;PBn^q1cT47-4rJ*=gDIU6~
zsR)`BjPQzrdaa}dx^F^ktJ62SQ)775S{jkWC=ib2a?Qt1!yV&#;P8TsGH#479VxCH
zEJ1vY?!pjkdr5v0Any{gM-syTSTrIQ&^RsCyA?pWv=q$1iUNgAb|{?!$G<h;sNH|5
z^<urOy{yAEK8gb~_z--?H<+54;inYgPdCZ3S=o`*fZF)eAnWS=yx47)KNr$ts1GS&
z%kYP2!Lt~~7x43JSY_5t+F&>rxk9^gw|oDN=3kErB!oGvv$SBi{Vs%*(ArxdNU}Jy
zR2#Mda;PyCu8^4X<nhncOZK`mz6(9PIqb8WtUmo`X6_VDnd6o<>{eXe-@BLNucuWm
z5%c@}a*ufW-D&vt_{ZYz_FE6HVi#ltv13~tcrtI5^azYL@UV;4r;U4Q|FTE_cg~Pi
z{SBX*r$6D}UW9{Qo6v&=0(GF3(OibCGT<Hqf(A}WjUXd83{ORLljqtHHz~DtOo6!*
zAps&}b{hdo1Z>14afrq2GovC`f1n-broH)nW<1B#INa_k&XM1#%{==0YSF%v9L)@R
z&Xddb+jxv9g|sM*t`EgD5se732Xs2A>W1qgXd#8W-Qz@<G7=%wIOih76}Yx}#H$K;
z2v9_6I=%*K3YXj^gJ->l3C~*|8bjFFA@(^cl+q>*J$9BL8sj*hKesGiz3-?DhX?Ps
zy-9?d7!kB7G&^U=&Z)n>@%eSUzP43kcL)(6AtywE=nbDndWo6uVWA2{7f}r_Be~LB
z<ci_Jl1s>Za0_18K!6|;f<+<al{iVHC8lDH*r`<)f%dFPa!)FdES72NfdqI8=%q3(
zyh17))FVz8jN-Jv<{Ox=h{zG)F8pqHSg*HPXG3z*sqc{=$Wc5BQ3aWy)Ec6J#4!S)
zQ%Xn###9KFLS^N#sR5vH6fp{*r4>PhcrK%$336q&sGR*A;D{A$F2(wrD1`*xe$Brz
zSFQI;-}NMRqUPo?jc=P-I1G<ZYcEXkR*Ts0dB!5%H@LQ`ETu_&pJj~0rh{N}aa-9w
z95;2eI$v2cX5P~V<Q{JoOyL3>Df>ky|J2p8qX{&p3#N@PRyK9IyIeJP9w6S~e{)hd
z`xKmP#HYW(Tu$;{>Q``-t?by0HSlu#bDoH&t=BoXV0ICqf9Si%zK<f2H!aIJp2Z8_
z=MfS9x@lq8RBUp)=ym8<Fkc>cDbXWOo_s=>W|nM6w{!UkM)DG!*bSU7-*F+OvkP-Z
znmKQhhs!RZ!&icFst|jG6{Rh(0dGn%mx-MQNmAHLdhQOdJ4@3xVveN+*OG;T0jz-p
zsZ|C60$$PYE;Lv`Cu0f^tU6x^c5|hoYGIPXS-^ZNeRe12fAjDj)Q-ha9iL>(HqPQ~
z0t7|Ca8$8%n0B2%8sV5FUz$CeY=eWU=)C0&o2X?G2-KG=OQ{Gg0b-o_+fK49+JqQ7
zv;BFq*;X?>=(K~-S?<s7@S;pDLZ^S}>UpJ|!TaH+m7W;&#|^}5$Z~J8;O)S9AgZAh
zuIxV#$JtPQ-IxUroy|+z&Zl+k@Wu64Aa-YGcE2~37rTyf5L(2hhtI>g-!!WoA3uMo
zd?6OG78VV7awY6u{CMX$bunlkkIbSKKNFVyf^Y3Rn;H|M^Jrv60U@!z-F{bZzI<%d
zW%9H2o?n=$+)a%6dSQwsVkw4y76nFMhv(x?+Cpsq8`+ZYn?_(%cnRBK==%qk81%6C
ziXO}zzKw!NScGWxOnD)vN{uZ1K~9XF#{FL1QHtaQgcyTBH~|4ctU^R`fYca4I*^Xp
zdAuAdb+Ih<j2I;ndt?hEZWV$-Fix?&u=B5OJVJEAI8d(od&n)RiA#`>NirUr$vAhI
zWSp3sMSK8eJrfdmNt8@bEei8AGYDt-l7yU)altuez)(+Zxn^bVjU`QQz!=TLVjwTH
zxW?U(1Kg)s(ltE>M3Z(avAe?VDtBc>4~Mp`l(C_(iA{hUrdt;y0kk^yjAU?SvJn+q
zcP51A5^4dG`!beoZ@yq3X+ufVg&bT3DXg&LL)?QL{_r^y#B74^C7bQnx7~7SYZ(|L
z147!&7FjCw1PD>j69TA|p0h_~R!+r>s*)}yk-DUM$d{vz$QO16Nj?SfOs%MzUW!@a
zP#{6&)H4Nu)`hmA6n@VuYvTyVF@`y@eYE3I1$ACVvS<runD5*Lp#4ZfYyrq!#dw-I
zZ5sxdG=eMPwk5Tzg?yy6{1_VJPclku>jcl|88<6?zmiMpqRiunjyA#K9_O>?N3pwi
z`?k#pVhm3@bZ}cIz}4%XY!DC#^y8DaTrPDoT|fTew*H8#6@LG&@5~TZ(2gb;y3w3V
zGPKbL8MP9ty7pG7q=SAdB<BGa;q{komDN{KjRxB0Qj)vOK8(upOqLC6Vv>%izSW<p
zSJWMKtE)EDg1i{K*IQpy!<)|8FlK}9lW0W;m3oY$jRkX)j209(ZPO7`Z4O0D)l&6@
z)gG)tVBMt-a=Q|^FBc2uGDmO+X13p&j+?x=N|l=3C5?^BzyyE6si=$c?Eiw}$1e~f
zp_2%RWgZV?iYJwW)stuk`w9uII|UMsO(fs=4j}fQv=GU`Ui&sMc-sDL)H*6g;V9@u
zT6GahH4BG|s{5z;5+P9!z2+W}K(R+&)#VO9lCM?~Wr))JJj8jJya?X$g`f&{GXQHy
z(CNq+T1K4L*wca{R%MFgmt2DKlA7uNUph}l0;wyk{|6HOq~2lwYyCe&!f0A1K@EpW
zH7%e(5CufEx8@|XrtV_^T)P$u)DR9EGY~E4%fb|gH0MCP0`@O>x{o9f|7gEmo2*wv
z?7&s&_B`qFUY>GLIw{v9To*&gMh;QhE+?bNPT0R?7!`WA618s`CAQKeiO`;^lCE7l
zbz3bz(~KSUi0*_@EX5E7Q<L0?AM!aK?zm-yj1KZgmR(uB>;9_AOU#0)g9SQJMW>@d
zY+IpgICVmz?J?Un@WIW;+paH$Ls6Yy9uVS(MLkv>KF4lK$zKvam&_6Or)9Bl>emu$
z428Rk<tT~?BD_$vnbjg?RrEkkE0+Odn{;C+#upFDE~-$RiY16OBG!q_5R417wTF?C
zQYU%%(m3#P3HG#yKQ5VO;IFqHs7X6Os16Lml?WGRH|ub7f*zGbqo`v#C3!W}Ue8i8
zi{&>eA!X%k@vI69SslFI?qfJmKfenq(ge{M5n_The>b{Z^oS#cE~}Sgke5ja@QI9G
z8|1I34v{mkaQWgI?n>CBQb7qfL_bflb>64hs0?jpaU)4;6KgCw{nY?l&!%o58h!zb
z<1V8idvq$r0=jqd5KoQUPec-UMPga8R!HR)41iOG-E)<*`G9<w7ebMjWcc+S>nnqE
z;EX_&2+!w_gjL^*7V~Npl$dke48^=V09mo-!N|(Nfcd_~zMcrcI{L5#e%v_eTZkc~
z$j)BqhI!a%a(rJY%i|sAz9WX^uPR)1(y^v`H4QaOad5AMcG6my*LWFHHl^0NDE$cH
zQ3iPx<{C7trrDrJxg@YqAkD2nCF@+5RH9NT6x`HqXM{+aXFze7kR29dS4;#BDR=aA
zM``BZjj@FhtZB+iQY?l$A3TrtI_hq@E-Fzu6Ismx<z?~-sduK9@FxcBB?-f^fcN$v
z*W(9l`vyddA|WN94Nu)KOc($7$~m|>jXg~;eP+6!y-~qJO1d+B9irr|Anq{O&h2Fw
zUj_S7xKJj~9Or++bbEV;xlZx`nWx={GcO*l&My%%GIZek^2$Vm%hInpzySYatsGL5
z@?zK!hpSn2DI>%IVS*I`8YJtw4aeKeuhZe{QXEGom};$;NZ|^cP8vmwT<~UJXqqb&
zNPx$eo*Qc*%`Mu|(Zk3ffHv_4`pGbH@l1rUH<562<e~<@Z7t2WRC8%$v*7bWlG-9~
zB30Drfcza1qjY&MUw>Cg5g)@L8|VE3iOnVCD>4z(hwDq@Aab5vNFQoWCs9pgJRajQ
zdfvPHC4PZa5L-4-gkhM+>#2Yyzqk!&BMOrJ96>wEZ*|xMqVFow%+o7_w;TbOsth8-
z{xIc!i92<|ksx-j-^N12<cKsIzn=_L3e63WfRGv}&bb)ru-wOZ1dtdg$&*kc?3lno
zPTo#RpkBt>(SVf$Ernf1P{?wlc*zbHDV&v~bdO|z`D$CTGE_Diy)nW#YC|7$+eEyl
z>mI-D*z?ez!b8|uKhqTGIcXh4jOJmIjsSalr>4}xeO#3-?6=V)@tJWicKfXBt1vr~
z@-M(+P0r@Mos3Y{BxQv8m7{X!NrcfE508imh%Z6hH`(+$q8JV91;qG)HU-0p?zhSH
zR}&EX0p#?<>0Tmtqaat9naqi2=n&13pMw+5I4-jGET+?&eZFSQTwZ?c+~$>b6&RZk
zy9#|~%pPblsnJgPSPFw~j%;|uZWYV<^YfmS1=P1T^7nk+?-Hs;NsigEP8=a-7spzj
zll(w4386N}<7S6^GdM2d{4&zVV?Ewu!=0uqtk3v#T*JHhgz{b!IwbTmF|U<+mC?!l
zNJKfwoQ>u|JK7+ka$HMJv1vl|cz7ri6jj9;yIni#he!EK3xBui%ns8=vpj*zpNhQ9
zJVv;-@WVNp@@&uNv?TVaV;v5SDdioD_SzjB7sLi>50Kbpj%vYgXbr(qSBWXqUDZ^i
z$^~_CQ+%+?T<R)<0uz<eV+4Tq3Imz!K&F_;E7vGQ_%Xw%^dJHUqeqv3jfM##@0ZK0
zRMrb!7iWFq!c}wfPzvv4)rx{LQRYwFVqnU#VE1<vPEHnMYCa;5mzc$vQ~PQS_>yn*
zMaz1gquS}L15xs!g4J6_m*qW3<nx5;+CQogRh$FSBzBU{sjznaUPN5MLheGuYP|4$
za4OpAHX8*|{Z!8To;GRDE%d~ZQaO_L3qw`j>m0powcuGF&mW;Ph!)4+$$wCq5!q^;
zSwJWdtwi*vGUObe%!ehjr4M*a6i(DLFsYaR9r~D4A|W4@p6(g;9J=4<ctVCHy$vy4
zDou&dg?BOkgX_F{cIqGxjVy3|HHV1WMIr7y<)v`!Q@tOl>$^OX^l|&{(g=Fc?IuTy
z$i4=SNQnvgvFndhq`&o;3WnTEh(JoiUL`@+x#rcRxbuhp&b=y`*4t!t+V6Kf)B^1x
z7t<axSEk}71)G0!^{IwwHCso3Hd@WZY};2nZnM1hCQnO~RVSBwRCd7Xl8|*We%-s`
zLCn}`Q|=)q4_La0wpT!!PhuQ!Kn>4|gaC*stWQ)DISIIQAJ-SbOGerwh_0`zFtRN(
zp~U`RnqFNz8W5myIOoV;%Def28=V!S!2FYjwPFmyC)RZz`B~}C5UVuL1Rx;`u%IZA
z4+7IePhn@{LrEP8ozz3FPCg1niYGPfi*L)h1oj6pIO77hMaQPzBpjB3fxJ|Nxc5C8
zM2Pqhfh9KgX4M-IEyE+@ct--0l^d589|z}>GuGIwE9d$vZL8?S#foiHsqkV*{kEEj
zZId((k|uCz*Bqvh^Gn<dCCsJtWTmfG7%K!7CoE3B*Nc6b60nVT(ZJ{=x$%1nO9#aS
zn`h^vpgGv0s<HF%yHWqljQ2MZfJk=`BS}%iTLO@w*v{=m0NwrSOpL_KDoJ?}T=TMj
zy_jl9RWbX|N<EAU>3sC?*AL8;RmoNyp}AC9wo;p?g=AkJ{TEDI-~Za;N?rDGCiJ80
z#Q=;RF;pJSeXzC<(Z0@JFGvIu*ECJB8Dp4KX+iOR;4Q6*eS?Hrl~U;`eeMO?d@Yj2
z8p|YdN_nDs==*8vrL2}G=ylVAucdB&&W8Nz`|!5?>2@+De~1R6>H5f#n4^QuP~zP-
z{`%bILg*W7{X;9Gq0z;P%J@Fkfk!L!YoG$WJ-RzC6wHl_tF)?56H4Y9BB+Mlp3l;-
zlq?H#42oHQmH2`!W3dePNmZlaPD$HEP|3XDLBgERniw}gE}4h2iO=%LF(4k3o~Fnl
znL5WM7Pe}R%2xYK8H#meF^H}SQ~Ev8z6pXTk&(Vs7QPUZN1=j|BMBu*sw)4O7o)}7
zQHqURjnDE3LY`3v7s^G<jnksa@^(pDFkl;aB9rh|TGMFKUeuH*_X4GoZ(fyYaiDRW
zrTmG&Ht9eb5-)^)oro>^02wFDkz$7`vEQ=QW?r>ar!N`lfi`iBz5)(nBEfJ;!MBEB
z|HwB^6Su@P-=;AorwA~}Pjo%dQiiLZwnfIAXXfnTtbSXR=Mvd0_Mw&Qk#@HF44$iB
z!kA0ae>qFo4Y&cfpz_ksHhxOLR_6S$u`L>}{1(J7w8N9a7MD+2<6S*umhOx?mco<5
z4580~N@)OM5ofifNER}VD)-`K1kKFkBePhaA-G1uH3%=7q1zS*`@2i_B5U34o3twx
zm8x=|r=?7gC`@riaVq?`k@ORg{x9B0N=a%BnHO8nO6#E%&@$h<jYpH24$*IN!YAeE
z%ez4<4h@WX8$%Z}Of%%UFV6*h=vY^K$7q#kjEZvh3;95r5XmZR853he65`iWa*&e}
zuQ<BjV<u#hB|smQ_3yHA62VyoLLX|1e3XE`wTXJH_1@7g5!;M!kFn^hP{^fmfUH1x
zuE1thQR31AQhZNW8;cYWm#~a?!J_D`6{P18ui)XX(zI`xrp{jA-Afkw;iSiclnRQx
zb~^|b47&$4&{G3K>qYEEWIbU=cvuFzJXsYOD-+OL@XH|I+OIi@f}NJrQ=&3j#K^#3
zLRpY}?JvdfMFxq+i1y4vJ*L?wq3G1HPqh5)V!^I`;obY=gI`eI2uWSk%6}OKv!q^9
z78=4@?$G%RpOyof<w##EbdAZ~(bntFUk1aEqt@@=^U)E(f%>DXlu$y30(iq6AhfuH
zqd!mm^CS{qWTg+>#<d*nfZ0U=?%o+UJ+ixDvR=m{Ta6N-$@?cr0?1b+s47@W>alta
zyot0tZtf}SpofZ03_wn!#xBQU=#Lgv$F&uqITMPVI0qqkQpxQ9q}kPD<k+=zeXfa*
z0%QUO?#{c_EtZlM5RGC`H<6&@`kq8TD<aml9})%`nb-=mYg9#hZ&#+ch(ux845X!D
z;EDa!wml>2Fwcs>mL7~-;ug&rgneG^R8MTpePS(MkW<ug9FW)nL3oXrC*99hlN#x!
zW`*!4lQhd+xeB|oAM>4&;k;Y3onw@O>NvmmGkD4#9!xO~yjE1E(s<M2nU?c&Hh=+`
z{=y)t_43|kpy?0i{2r1gTKz~8U<cFyR>=V2{}{8{QzhxQfk8FpqCmd|DKzV^2GZ`d
zuFl18AP=!}@^QLky<vKUJM4`aS+SL(SVjpqd54Uc9g-@m(|z~ITnSf+GN3FM`FYNv
z_&S{Q_6fN*VL<(+G=~C%Bl_y_h$3w}UO1kqyR*R^6#ZLVN3dmS&h@0na7HN8)4_Xl
zKAp@hNUr6ZoE3+Sg`*9HJ-xABMR@rS2qR>CTy(CdYf^UgmuYOE3GNk<H?QTITK5jt
zhEu4WPdHdYBP+(KF(xJ4D+VsD4VQda3N)KZ)eRRQpisrQFFNNs427HXWr8H~rM@p{
zr&Te!HXOIL&2l47C#;_;vTC|DOe(}3Mop=M_+Il`%nFfF&S4>&jMrkOIEw`QRH@ue
zS<ejk+}j5HsWtCoGak5<2Qq>*@Bpd+E0hnw&4NcpR>8;#b)_F%3lEk+d_^qg%HPTu
znB8W#o&$vTlSRP}g6-XTuAsZ<BVkVOd^1(SzHuOSAN4C`Q!eLt9KCsfxfo`@sck(J
zdXIAfOlZKdNFi-m!VWI0o1WElM~%}5?cC_}QO;($m5*vgqp$lK#{ol*+92AzEgX$b
zaE}CVAFXYRlq7)w|B2c};@X3DG0vj52Z|4dnNzdsesiztw#*x38(4lQCxz~?V^+L~
zk3S=e-WT3YX;PLhT~KpU3=nxEJ!Qz#q`>bcYs`7SluI-^LU4XtkaA3vbn=ikaaIpd
z7o?%rQb02g2)w^!SzmHqYNJ*?%VEQ8MKr2QHLCzUK*GOAqcnfMel(8SlSV8doJ-Qd
zk9Rq4h?x!$k}3iV>9CLisr|B$NXqP5fq8%AY!t1{0NuK^4bGAsByNqoWNC-}OI9Fk
zJ1C_)rMxxC{Wm+3zcPzNa*rg2Bp7ntKPd+9g+*c+$;t#Su9Msa7R;KLoGcAxG?<?c
zZoBb#$Zuq#KtpI5QA>5&^K=#kG&Z3&0i5G3@7ItzLhX{Y8h3_?HOL;tl3XBUXH_e;
zw6^_((WG@MFMC9iyV|s@Q7-oW%K{j0lf1$z5k3I)0Xe4`f`Q!CK<ixqk7dEf`ipi*
zZ{lmQR@()rS+LWwP8`QL?q`f(1l!mGvsrY~yBcRATXr!!7KitmI<=LNUhRO347T(h
zS2cqhpx2a>rxE*x+sm)3Hw(DK`%sELtU~(k1^VILd{S0fOp{g&rwR~U?9XpY$YrTS
zLS>A57Ge}@_Oyk$Tlw5EDqN_mq+2(O=18$1CPc1lt+z++U|}!eGoaAmc7Ly8H+oYo
zE|RMOP)F!}R%<h(kXq!9QffLB+$F%g?P0J9^bqWzRV5+LTn<68>EB{FB~=(}Rw<sp
zS}Ju{C#6VXREF+}_-{*!(k?J&7ArDPi>#*h^`UTwxCL4_Y__bMx=!E;N>r#Skwy|P
z=}MdZZJo*Kmjs2aEXuP>jsy~W#pU@em5x&9aLPRy^b(1Mp~@-E%5c)0-~(m9NoR%I
z`^)>3U4oMCoxR+_jcc?h3)$NHxHOct3{JFVWr16<mtR#dx{}y=F9ULEwXDb)(XsOt
z6bW5u?^s8yvkz=S+lp!xbsYKIM80hU`wf9-X@v9hFx)7&NV%%;YoHRln)6F|IXA32
zR>tIA$lQ>XZ8{3EX%gu^R)w}iPHg_Htle)QSfBt4Tpozs#^r(m{cSIsiRBXz`m!RH
z>c$_~oIiUi*#s-I#znN(aW7Y(p%s4)dT5i};#5^w!y8Rd(bSILS&|@aQoRqRtEc$=
zIpk`90Db-p1y%uxRI7)#NOK2dkHni1wALRpGA%j&^+0Ixp=xWvX2JDa1({Ue<WnH$
zNm4E0p&Fz$G929#_K4ebJ-Hv+*1$b9X@3Pc5Ei_+7sQb3RC{zs?CDZt;wnhFR?J<+
zQ_`R}@=_Pe6BJML{<t#2z|)dLsK&vZ7No{iwQg2jrPCKlO=4Xj5}-srVs^>`yxCB<
z<K|`r6IF1=qF<vfy{;hxN!8I|PxFEXslwytNM|9+Bo7ks4r9{~5N6&^N*rD)_WF);
zJv-VImBH7M3eUNzOqz9PJ$`L&wEbc7U?Z5^?Gooe28#iGhZfQ9x}I4kn?X*3yxhJ<
z?3q5dT$7gRUi>-ikxOd0%)gp|rPytHg!~%ouJs8+%qoJ29><a+6KYvfUX49)hmBxv
zv#DJb`*!BP3m|1z*mVerycv$gzip|4g|p^eN~c|y@7fUsoTk*DqqTIYbX_1rp`yf^
zTE%z+Gc4s@Wn!hB-ar!{nF{Ylh&O8Jb}MnM2s)FbFPn!ZC>PpypG?k5AvXhMce{Is
z=(4eIuf?*Xz*`kWQciTnO*K$#k??D@shtoH!K^?RCxc@0R(LSqoV*#l7prr#2YF=u
zb&l|*Ia3g!PE|n~EfAU)?dI(>F?TD;`TUdoihaP_f>^$RHoGwM_6|L&Tm53uY&$Yu
zZMV^!gO@ROFK3f#&dcfTLP0mB_O&$?PB6KF()eK}QB5<K8m<c+qRr-ko_(^?Xq=MJ
zs^JFmouheb=2<gFOjfu~gCT*J1f2J(7T0i#;OKZ-L|&<#gvhCkajwr?gQ%}q;;jW8
zA)hmo81~{Ln^h-_%WG^lU$(5r+qE>k@8MW6FYc?-q|<B0g%PkIdf@JWow%n&!`zID
zh{?i{uW=2F6L+T<!ZEYwEpJ;_;tHeVf2$QK3CnoVqrSvkr)LmQUHB?Od3%&D)Owbk
zT6LuN{@#<Bx}gL8L<OO1fG+40MriNT{im}H6JuTK5UK`zJ+XNBk7K^j05q2JWc(|W
z(Xa^%8MZSjPA@Z@ky#!DY4t683j*16ux^-cwTb-%;mAN(7?Z5l8E&zQjRQS!GZaXo
ziB#>HccuPh{~PbOZw6KyNL38jKQb(b_&dXfSc#|$YTf7Ogu~o&)Gs2GnX@reRoRtV
zv{bX<Tsbc*gu{gvk>kLiR`;rg1m3}6h|!S()J`e^$apYizZT<$96gT?#X`Osv2dXn
z!iSI2S7~_(yc+eex0%2zAhQM5ibUzSXdY<Tfb~GlB~d18al$5?<9$DlglLaEeM#1F
zBNBG~8@|jJ3z%7JmK*K^8wq6=J#x1e|NXbzd;!i~5bd^$y?Sw|u##l42ik64f0?>2
z7@F*uSbHqFDW?(~-r!^nh<&AqCqNfp)1CrB*6WYcVWD>ZNhQ#_XWZ1sH*_kJ))Q(Z
zwa?YeqOe|(?jpUdO*}=?amon3Hx%8`v%nHBVeG*gJo-_i)NF0>DAvWeP|Z#Ik4I}^
zoG$5gt+Fy)gYfyv72~_BWoL|t%Iv-r+cXSOjIURXoThjiN!aDk#_t#P!CuX;cZx+v
zQ}KE@T(v;Cz>@A$|3A$eq}C|n`uGlXaN=q%c02)@zr>N|)~kxPZ}w)n8y~MclEzdB
ziL+}t1fn*1XI?2IHtZrxR_?%HB_?k64#S>?l)W7Wh?Te6Q0PYVXv~qcWRh3@Iuy^5
zd=NfE+IGMje!_=>%Jb^2029_k2ns!YD|eSk47lvuRoXkBvZ+Suk`VvM9?Y=!p^BqC
zLZEE#B4)Ozz6&V_K}Eeq5N)2m^`(i&61LmKo=$}1EPagmsDI-J?2J)UN|u3)59oYJ
zPzaaD&rZLTNLC@15h53pFMc$CH`5oIe=YKxU-MVZUlw^U|2fS!izkljytt?D`fcLd
zzg;EoRi$glN|dk?`ezXzH`SqM^$00>rf>wqX{-Z%t!&c}OE!1^+k3tBKtk3{pG4$>
z2ugNt1XYV*>ORMhH5>V&nyy3OpO#e0YRV`eNwSW}`8n-iij5!JyPh%*gvYIt0Ef&t
zhwv>rTTls4!X+EGF3!j~L^pv3X??}(Y%4H_5B*b$qNtS9z+#f8r&G8-M!#SRGU<Jj
zOVd!uRwe?QETpUzR*Cd_zho+yuLe$mDBAPpMMa7wRmby(iXeI4hlm-I*nQVq+$<Vu
zhxJ|bE3v5RwCa4QPFl$;Q<ov4gc9QXX8PCcoZpjj8V5sDeNno1;>heE4*i*`)JwH5
zWvR#7V+BYvIH5P$ag{+sB94S`<ZBrNokRVwu?lvVG{V>Al>dm=wwIcC*RJC)kp!*L
zF;`6b%3$P8d&v5AMA0$E5=`eu_Zhbv2qoM$d*gZXL8@>hkIGq#yBK)v5B$g!Vf6C-
zrPGM{hnUw+FB*D?>y2QPM-d8JfTY>B7rPi<DItv3S#){4QT2bIp2+X7WurA_%|Trv
z=dvOR%d^G%4+%yy0>tXLRagGDwCRF3U3*OZr(%Q<EbEa&svWHd3dlbMJ==tE7hkr)
zl&`g|L!fPLVo_~&I=+ZJS*N+j00YnvqUQVWrg>Vw@D2SotMY=jVA3yrQ2I6hu6Zdd
z@^8gA8HE+MCpgOH@7QTG^Dy}+y`LhCkfQ-;`4FUETpNXkgHH%tljxPHmHM;Rob~_n
z)nEQ+s#@k4pxZ>G$$X&}s<4`3a;mng`Ty59|CiBi>Ob%;tR#^P{uSXj<`Vji!};FW
ziAHE-MQ(QAvrIQXtN#SDdG|L%S371BR*yqS6zfB|tsJ)8iJbR21mXFt!v!aiJ-}N>
z1(}!}xz-dxNs5JtWUPNwe<BS&eQud8{dj&t71{=#@V~wBf^qw}#?~`2`nb*1wT))H
zjc1796%>jhN`<#79-_dU<5y-09WZXT)5d-8y`9NTrg7GB-#N=KBsI@7w6`MLbMjt$
zcMzFgfRL>ghB063VVk@*#9{Jf?8W}?)p4+|9^A*C3ES55MmBUz+wKe*QjNwV&=)d#
zID4|VrGELxlOh0hN@RjX(p(Q?g}~!<WA@omP^?iZObP!12+B-qI7VL`AfXOUG}qaY
z?fHg$`}y5AtICCcc@cREfCNevc~q6BcNmV}F~Fe;5`CAh&L**xTEba)P+XhK#SY}%
z0Y{YMivk1JNPHz;DMJxOIK!>bhdH*s$8^Knrzb`@CryvD(_Y*mtDXX3xd&E@<^NbF
zvwMxPj3R-;+Q}vF0C?60n3TxuuAts)?Kw@KH)C(b7uBI+#p38bBSjsm*`kuo^c}RM
zCw-D0{&Kup|1%)gvn(9WqUmgCaew%){m{dQQLutsuoLvEZHjXK*i|Y&KHS7raiCaf
z%-1zut$YelsC=QQ5^4bO#;pUP$yJM}EwdF*kRu15U)5^_)F_-yfMbJlYg&7>ilb0O
zZYZZ^8&w`-9W<zqIlcu%a<ny9XB7)Ca@q9cu{_J4GT6=17x83t+Ql#O5D&6$9XG@I
z^k%7Ww1{NdcMF;<Jx0wTM&-f2PF`m1-p99YD(D(NZpbi~Ob_sIy%5Wkn-fNXSt4Lv
z0evJ2S*=UkD$(T__N$Jrw~PyLon0X+wF7z^3~V5F`XKq$X$c%@)RmUobe$XGQ|V2e
z_?-*EP`3hs)6MC0y|gj-_f1Z*nBJlKuB(9dp4!6tTks^D3>i{v>EdsMfup}rc``<N
ztk=lPsp7Z)VNP6=K6v-~lDAily(AiPKDnzgY!Gp`DYcjYK{oc#-Av;e>esH&Ur&I)
zNcGNf=*vjR=1gBs!g5{0Qtmz9+sRWRW83X>sj@5H8z?BqZ^DG`QQ0!exV+sb6qc>t
zSCF?RnnDe1`ze7?9MwpRPLu>mb<^C<UQ~h<C?h`HNz=X_vf%vK>W!=sA{)|D(i#GQ
z%s~>V+F(x)1NjF9@AmkF&i_gY{8nn^jt}oELI>mxR1g~!$Usj#q}^-B`Nr~xALPi!
z-E$1xd9`>)7zWusa1ma>COzPN2x;t({fS{y)0C;D@MZ*W+YJia&~+RcBjq{wdXjh=
zwv<ZO$5%U3E<XK27`zO%3=cx9;;omH)VLC!b-Xd<;kP=$^*2CD_{A^siGC^^Rj2La
zJOCk4_@<3z)V<7&<7XBSUSJ4A&N!{{Qz9n&@_zUUgG4pHx%~Y`-s6h3dC$Ikg%YsS
zkA@-ZdR!p^u-98210OZc1QmE(Fqv-_Q+SrV7XDlgeKKlW_858>A`1w&0hz6(yCX8m
zTN<&DL_T1veO-oSl*BYd9HNbM^gbkmg)yN<17{n4=7xxpRN-8*4Ee=?p>S-byxU2q
zC{k}QdrlEph++7-V^|`!P>zvhk<R&eK0J#W*1&giHTm`$7-@hf^ztMM-F5bvnL5%k
z-@Ik7VZ{yC{CQ@tv+-)CtSkg!9Xx!kn~w7?29{9z0O9GzDh?&~g*jWS^lm@HGmRk^
zOT6*Oq2|3KF}320yqX%B|8sx?=nd>fKXQ3&^Q&oYGxqFVZBQ(v^V#j*ZHGpy2{B-s
zu9inTzVxh2ky5cEd3r}p)%4q|g8#i`(82X`Kt8B7-ncW=%sabiv8QjUp6k<GDwV^O
z`PtEG>q@Jv?uNBY4RNX<9VUhnc}90vcZpc6HD!vN-D<k<(Ys?B5PLW@abxL}dDsVB
ziL>=HKR}`+W^iM(G>MTXTVcSVSbZf?3)d21Bu?Mp0y~0ZFa|(_B;-_1$YARFU!Uf?
z2#6_%mty;LKU?pssg>g#|HTu;g}1je2^r0?bA}TKgPmB@33>xV^#loPq~Sve>xEZE
zDlhg>Nun;OoK4`Z`F3JsZB~rM^8<hBQ$Hy;u@yLvl8lU^mepeE&>_sSmti1|3H?6@
z#`*JvxVus=KwwIs0jgf+9A70NJdt6~C|dmP^bHCGN{rX>)|J9W2*XdX^?`5sKasez
z!gB51m(lCC@i)hU(_^T?{I!nE%K_P|ge=F0q7vFoHca|bKonw<T|-)gnUJ@cMS1VM
z#DM*fARlE}`DY1S5byQM=L6J97MQZd1uG57tV?F$2d`Gw2dm6iDoe5Wd{EK`wMUyd
zla`pivrSVZAGQ{mFem$hd-IHON;GG-ggJMuRBn>1mlg3IY7}W7_$*xPQ&qQ!0g!W>
z`WS+L)7^vjJ~6(jmH!NPYC-&1tOrs09>D%dQy;v7e5g6QFkMz+oIa|_u;j1i>ebyh
zX-}P8JJNHBiC+{vG6E$qBzT%u;0?ND&<GI_Oq#``zuZ>ha~cK?w{CAjd>B?x)xJK+
zT$$`*M+*BPZitWO<krYq9)~h+IG@^tOnI*TWC|O3N|9$LVlHHJgL`@K;zjiG8#(|7
zd$DK~aA)fO<=P6lnHhV<J2wF_Ph#H@M6X0QOzqh-rdzRDwQ8mKFTYjeBO0R`Bnqv_
zuhkgHZmC0Byr{*lV_~q@=3wu@%8lwRu&~z9@Q2a#sf%&>%OUz0_VIXDRwP_17>60V
zCg?Pd#yoD-vpC^n9=D@jtsh1-wFzM=1Cl8aCN&i3tlu5O$?KO1dKBs(R;Mo^MnB<X
ze0i_@;4uS%T)Ocxy`eF+q}4bcN412rfw%`?W|-~mNESZAsb}+J8GXDxLUESGiZN_#
zOn)ZBmluyrCfTP)P^DVc-9gGhKn`5BO@%=iuoEqn-RKD%zd}?Ewf!UY6_Scd)wYs>
z^!MM|f289;dhFpG;QL@_qBR3?;MZvOPK;MDKg>~cJu~;zYB9&3<eZL>TOjpE>m5~S
zr12w(+oOa`KCf%sl4jtV=cp|j-YClunnPAm)YgTFoSqd@Z@!!bQ?FVv*(Es=vVo;W
zf#pFZ9a1*aV~@Cpg$IoGvhg33N5jfGt42-Bxea_mP2*tJZj<p1y}Hzkv?Iw6L6ftK
zOh?L6A)eS0!b+n|qS-9jzd<ZZ)Of^G&}LPB9j9LTTEpXf^z=!*)#hbdMWUfx+I9{>
z;;#?MUUL%*feY=)ivBI-0`?I3^LVNHW42G<EXBnM7`3ITD$5%oAWmW?DZd9T`vudp
zGU-FBpl{z-oCCcX0G`KDiI7@4BrrR>^3~=DzSPmLmy*yOP|Dt1Uqz>KsJDnH)m{0l
zwcTE%t5tVUHyi(@li{@3#Z-4cn@Fu)r_H?Q$bOSdMmUQPgUmy@Y%0H^)4^BBOLD*r
z(RniIt4SUviv4zUKr;Uh-}HCLn>Lu3`05rIA4~cM>>n|rU}~Br(E4fXHP|EHnI=wM
zRE!t`bO}QS8TuwNQadZHtNRSCA*|8x(R#{09+aC`i0^iPfvq@~rz{pW6nN;I`lkD=
zQBk9%jYa5?cQNZFDrGzv#QNYDo82HB7#UZ}JvGQqf8o_&RUE0ylij?lfNf+zfnm4r
ztPJtTV$|jFD$=DtP?OGWd(+38-Qqp0ia|GRGtTlm8ce5d*s#@^n>OtUOEJ*SQ`fiI
z-WJ~h0ex7eI{d^Gv1EHTrjhIKCO&W26?E=UcYj2Q5xf!%(R)29TK!yHgpp*5;^b?I
zo2Y#xyL48N@R`X&*l}*n9$hecq{tNd$;H^lrJc8id8@apt@_m2jHQBdRxh^lg(B_r
zy2O<d1TgtswSQYPbrO?hjr}*!td~boqg4?Sqw#EB0;_3{9>&;?5nRWsF|Kpa2`iJH
zoZO5o(90?U1_Gn(vO78&L?Mbmf<$mmD_*aJj|eMBsk8axLnuo_8^=+UFyY*tNHLHS
zq!Z#yYhfb$vRuCxW&po&62B>ChH`q<c1`neYR^am$L(ooX$Ei7AcsS#cM@qpg>%Is
z2u$IY(H4LvI?FLYC5?Cg?&4upA<k1|QM$v5)P-w}eN1Fd%_Koz6uYOW-XZL5M<kEm
z7(83;8GOirluAm8%+>guEGx4nBu~A|R<mR-`F2U^vz9Q9{oiTfH+7?yM!f7)xZr7m
zf+!X<-vWo}E<;o3m1EV?bNV|vkMo=4Wz*F|tv??;c*sr%%((65CdH!_;))89NfB`L
z-L^t5ihvg^0M7tfR3QWP$o!S>Fhm`tj1<c*JxVyI2*`*I8RN5?qLUxh!;~uxO$Ycx
zFrn)NTsupQxkN~}PFWpc9&a`{<9{{o8W4)H?4=vsb*pGipwsmIa|QK>=+H)pxR0xy
zaZWjjGk3Bo=j@5`?fFY9RVtEP>G;_D;`;*Z+J@&c>y9YCW|}JS2n9<A@&&{u_+gY#
za0dA`9F%TgdUJ;$`nQyiH#tR_C&wZMYOMxp3dTIQT@_<G7Zi%Bb7Sy~O{tE7)F~sN
z?WH-Ek@X~Q_cvMH>zLG7V-<QrJsr+%uI0tlSScyfNQ*8Mo%`y7i2icPWCW<OwkNou
zUbP5-#9SpQqNs5Rfrd10SFT`RY)TD-4y^jiF!=2lDMC9QaJnL8FRd-j6H=}ahna5d
zXMxP`R0tVgb`({;W5+<KK(YiO?CMKqVos;Y7B2$TxFOGKy<#7Gg`Lw(FxED)W+CyK
z7-<k~3*Uy!A|@^rA%g@rk%uM(GULMnmtv+6L>uz66uB}TAuCW8?op%LS0cp_)`u8j
zNb@Dt2V`@%me2>DBbDnnus6d{=UZ2ep!Ydv@~)DDf!1<)SxZUF(->AUE1XdGHq%_#
zsvSi3?3~W>q6T86+egrJOatW-yozcb`uXbpk$nSrQ39dCHfdHTgdbKBF^;#gJ{7Fq
z#yjIPifBD&<Sel6u*zqiLG^3c?Ve9!4-t-HI@AGQP}pxAQ76}_)%1a6^*xBBjtJ@E
z1?xU;98X?;&(Df&+^~90ETyd!`gMzG$MOlBYVvT<iXYrVLqK|S;lHv%{;~+6BD;EA
zk{B8e$k{g>?L=hZP=|WCk}t9hPmv0~Jm8X(pZOk2p_8kj0-AZD)^xS0#B>mDRCh!)
zPgvORhcs1sa{)SHx>Sl!BSm>?oC!MV)HFjiGE#Qz1Xe|t8lt-%w5q^|Ax8griR<p@
zl(N!-y(WVaqH3G!6jz>yR_6|YCBpDySt+uy`m{=cc+Dd=CvqYfv<f7Mz4bYc=(!Gx
zPvK(rZfg->DP$m8jcn4kQ%VbIO<~eG%;d2-(X@s$UwVm1O4@~Iki)yEcH*fJ6wkq~
z+#DETg}6tk9_l?nkQMRRChP8)F{%7|;(}&!@p&z%7@nwya5-HfEZMvRj*_>^ZVNNi
z9i~|Q(8<<9FO$%D_+yW<`GApAffv<C@r_(+Ad8semkgV>PFV|9KV}So3y&>O9S$=4
zTx`yBAPfKcf)0Jm_TIbfp9!-q8y7F}UpDX}{+;gwxQD-by<XQ?ILD2C+iu<#ycaa!
z6yIoH!R1Y2Xt(T)$}2LVhwpNOMP@s9JcY7`>`EbQmxJb^X3Q|Pi)U~AvO!Iw>~%3v
zrrQM(85{<)aB@WXaGC*LLIN@jjJxVM_C$XT3>=h3gKB`qx+<sE@{nbrs>$a<17pF5
z^HCnv9yEy*iMg{<(AoRN3u<BoTl`?D%#f2Jq>rZ@0?v?^7<i6|JI?W3hru7!XO5=*
zGfgl7Gf%uy&Jy)vTH^>3`omf3{+MH$4e0N0+9iQ|*`lU=)JZhh&4WuqU%7+V`P}L<
z_9NYRp)*|^VpMdzk~@vff7Y%_qlNx9>o?xJD4OHHYunA@KN*gKg)%{ovaaS&slhrL
zI6Xh*C?BBm4B%*q9t{K;>ohfuL+-;usE+WV#?puy)b^_eb*VI1<`bX}iJ2ufB6{~+
z8;UZ9@^wvA-!0u%b>T?CAG_e;?UW=MW?LT<-ag6?O_Bs0#9iz}@d*PE3`1U^XgeCT
z^hL?=D8Jm|%Oy8#ifz}CQ%`YPpysAnK>3LJli3gUL}DUia5M~x%d&_5BVqUq|4R<o
zxW*5euq>o53*y1L8o-ZWQv4C=Hx3BSZv#4z^dhwfyiMf`zLmi#f@C(J2jK&XuL+D)
zqq4ZzuAL7tVShwN`Ov5NTQ)PPfol;b->6K@2qJ<JEhqRzO%2^>Ql`{s9)m|}hzX#|
zL8DIMsMA?ybqJPR<dYg^(hrMeQ!%qAE>vBwD#petK1s2O$vVes++ZJ?n<JsZW-7S}
zoR4%^xN`3!XD1?;SoLpcmO7X$y`zz&te|Pt`u*i<GwN|1@^nqFZsFw32g2g8HZ&bJ
z^>JRfP?IR|v!PSC1kz_>w_eRJ)Bd!9JT7*S^MDDD*UY=kGPyLkn<V3yho9<Bp`%KV
zA;XIBEY7WdJJmY5IFyY&lMqyvD(E}Fh*2-WA5J^&nILn)RkUS|^vLzsj=*d0y&jC-
zl(y~41T}hSQFAa&%mUaMlK2{8vKT@`+X!L1mYWdi*QcN9>G0C&YJs)o)Y<RT$a-Qt
z@-Owv1i-kkad++ZN;j~cEAK0td`q;7rsl3yWtNwB&8p3lJh3L8Xn%2jg4mxM3;jYz
zp$PdvA%U^sociusf!4z@?mz2KHpH*o-B5Xbk|jUz^gVnl7}JrbM4HeEgA!-rDJl7l
zWszDioScl`q}ZrR#<5jxXUK*kQIoG{35o2|6<A9~EV{7EHHd4avqR|N*!x3M*%lNk
z4^15f63h3GkD|2aonhB&43&7aOpwhA7<ye0S-H}_X2O`vhn`?7${zvA3v)X>2(TW9
zVkVpD9{<JguP`*t&u+Xu1(DET{haPDCI--Sr-JG0;%JblQ{W)6HFAU@sYOddh(31*
z@R!|R-$h{*n%$Sf`lQ@&6tN`=J>+1#-iWisF+gZ{)@#i>&@guqpnqQ?^g{wf>^|v<
zv%WjoH}_%gdvx(p?pCxoRlz=KjvrcI$(g}a1mv#_A+>(Em}sc6aHnUC6r`QHbCd$!
zLJ1*%#Iq7}kd6--{)`qt=u2vguq%Tb<IzGi4<&el6{?ie1OiT>4!z(JYQ-kvMW{(0
zP=DAnFh;p~_2IZ1iyp)!2G6UN#Q>0DmD-JR(JjZ!>rFhzO`>~Sq<_bd&N-cfKwu%C
zf+B2aB;A|l855P&{mwaFK$@v5*VnuoS8D7cp<9ONr&m^iFw*MvE4&?qYzmOKFSvI=
zETlp$Goq=zNRMo%o(T64>EPZiIC6O2AmFeXT^$&R@ZF0vtH-UxJwbBcYBLDId2XH|
zdHDiY1>SF~adJ3!z<&v~&TG{0OdyXd&Y+LyTF)Yym*(MwO*CBFp)OJhQrMIx%l})c
zQ~7{pZS-bhV9pr9@p{p^7-D%8hB&5ZB+BG`ZDsL7RYT30y2H7?hmKQYw*c1#A!83>
zJs`undC*eA(>(-INIcHG0zpK0_G*QBSYfSQ?~}owognmx3hU;WjtkxIY2&`!J9C!e
zx6A4VB7ks#XCPm}h*cm#ByP$+@cP!j5Jsl^gK{2W3nQ267RX6RdgPivItQS4^a2BW
zx{6cQ!cG$+b*dUtty^1q$dk-N>-M(V=C;qRNou4Zf`vO*A9bFnt3}isni$Yy>mG|{
zhw?^AL3d9EO{UrP$kBSmS7|(e0s2fkJ4dqR4c13xaxxEVO?E^BdhFG1!oCXP4}8Q@
zr!`R=0+ulEr=LjKw*yd9#?Y;C-~(~SCsHTuDlK<`qZ!iW&Fx1k0WBIqTiD)lF}8H>
z9nBH@Pl4D8v8ccVtaQP9$g9RRDM&C{inOu6m4N<)a%z@88{yU8`T)~#zNSQUbvvXR
zdkr#WJ!SjdqI59YlEI9Gq`NP9o<Pg>Vns)UuPh<Mja%+8xp(N8!^gy|WLiV_bDkfb
z(0P<FgpLFq-fwEfS$9>!2a-Ac$0sS5^ikz@RP6+3yX|eY65xenTL{s-hDhISVgVhv
zCH0ShZe&T)06*ou0V(cTSSr#;+WX3im0mKu(fGQn(+uK#SOz_@7P?J|qZIYV%RLI&
znjaxej-Yp$@G9%~*yDISg~b5934#P{>8d?)=KW4?LJ6}~;OqFHaa-@j;T=bM8(J}=
zMZl?~>dshhR=NP>ID-e`mkEJ^L{=|BxUZ`~rAB(n2uw=!)e_atlgI<>hZeP<b3!Rl
znJk}+jpY{0(Ng%n5wtLMj(OKN82NrA0n&kk>!Z1rGO;@|R7b-{?2ERKWinmb&{SwS
z5q@I;fwM?j5MEsxHJ%7|;6xH`j<Mr)5s6D8>fR@fMZ?Em9GXE!i;8dq=76lJ9;J6=
zpay5Gde=KVH=`1$c&8Larl+VMX=zO@KJw(ty6g-@R>e(9U&}Ge9f5uS<C8aqL5ai%
z-=JevT{4{26A!Sn3sv>jSsu7v%3IoSB~m@ir~RIWB>|v@RxvB!vNZPwo-1rV@pC|G
zgil!Tm~2)kM!Lo^Y~4$c_z2~2BNA=^n5{Yjk%pTDCam{iSVZIsXh%kxq2pO2=$qgH
zbtF0%j8Eqb@M9&0!(DxeNvP<^vk{7O7GE%yO9ZIc(Kl4J2qNEH;;%kP*Z`~V)8!8<
zoK$$}Dwq;lEYY^Iqx@1rH#rxvWuPO}p55{N;wb^n^4Rd3#5Q+wG!wBzz@?HVDn<!>
z0rZv3>$hM^%+BSkX?oOk0h+=17YmM5=%HS#uS#=?W#6n9o{1r9Eb~6Q{vmC(i&}GI
zfWX^*m}2fzgO#d-Gt;e;tpca4P#E=2Axrx+;kJgSwng72Zd3^Qh@<v#TKcDMeJ_pi
z?yk)IvWG0vwKawokW1&44X(gu1|Pn!Vcoi}>y{&s(`wPsb2}&ff@`1kM!rLL<v|L%
z?r}E2eJhPYN*RgF7V6f8qLk`BnPgl;gb|?4g@KJL)fyuU0v|h5uc#nLd$<S(Z?^sS
zXB(s3?bXcC*`5;vhI*^BT+HlY{cNP8j?<5LL>TI5rFg6c>ULFIp7yPS*aM0&3Jg?C
z2X`snCjrDU8-5JsZn|02bGi{#QXc3eqUn*=JWPiKFmEIv^~v?3GPD{#0Y8u~gy2U9
zGQT@1(Uq3=<^ySsg~*~LU||9Oz^~BZ6abzhXLC2m$QtHX(uGGZy}BYRL+G)hVdU_I
z{;pM=GTqgsCMUO<9Y@2-1eknN!G(HU@@lH$m}B#ln%c?Nh`e6LuUbk>Fco5c$}3=V
zJPPLLtVQ^6WBN@wgx7b!^Insi-@ovE3oKlRg%DGpp8GkD)G`HA;g9(!D?l08ltSx5
zO1?DYoAt<0P+Kk_lIEQ8scbm+d=2INRv~ldK530vV)_>Ttn1Vuku9XgF2VMJHRy`@
ziPS@ZQjf&J8Gk-XgQ!(?H=BJ_wua4?^JCv*B|Y*6b62X8HF?1GuDWKu6~BFlApb>(
z{fEddL%7r@2QV%H9(4EPp#F3>NePr8Wob_y1iOD|i6$%1hB8_@2Pn!kSyAc6(ctAC
z3;JI|#95D1Y;ob&_@=^WM5qYVBdPSL(#3<eKyekPs~O9~ZuIJvMc0W*j&N#w;dMc_
z%USq!3sqL?aT})P&169M{jAY9XigFO#E#-q)JVp{wwMjR7Wq5?f?P4S*UTo43PZF5
zg{7<}y9C^{Zg<Q(q7NjX30?h|>D<%V8KeZ#7bi_GsuqO&Z9QrzP?Z+C-ND+SXZjAl
zh6P2OS`t>lUQ#len$R+-G_ap-!y<Pz11#f_{q=er$;tT*w}z{&Uael;{W5UUXRJdO
zQxMhH$7EB-$kIoOw_^q(26#QIdU`6ut>K~op%ylEblHE2Zsas)oyLQoKFIxkqWOJZ
zq~#Z(h@KxOp)dt=cV38aOAGJqvK}wg)ue6JpOlvGTix^sWsz4>;m!(tvQITZGtCiN
zR_e7LjE;rx4Pw^;`-JJXRGqb+D4p*)<Q}25MRiEUrL&N}GCQ>e)6t}SCRa5tkaH5<
z_EBIB&;}sj6eLth9ldI$j;!hW7i7!01u#~wo2VPJkkKzSkR>mXceM5$#JLg5@oyH@
z<LS-4{I8J>6i4aE`&H7S5?)aS|IYcCpWeOXkR;mTFSg?;+o3HdNPk2(u`QvwFhH<s
zhxfK&712wJn}052huIvol&4y2JRt2E@`MAop?tOr5BTsp#j(e0Qo9C$?+L*Y?YL7_
z0KbpAF1a?txSmxvLA1J6QbGk$qQah=11xPjb~cy!PV@$mbArN^+0TGqd%gTcR*4|v
zOYB*C-wYx4=wbgz<J*>9%rMC+bOl*Y2&&kB;MCU)X3DFHgG#!x`|^PFW_HD`5n0_H
zOieZuD9Bamxc0n>3o?G1U?r;_ga84q8Dq>2bvOpB17)f<l<@D_QxXj~fcur>R`#hu
z+#-&xk1s*&WjDXVZf~AQ!aAzs7Tj?29~qH(K{7+JU$$uA%#4v^%cBCejy4xVZo=bC
zi%a*0$Cl>>E=zDp6IHnK1SPcm>1H^ro80O>P8G>8yFMDtgS*sBb>9>+?t5@IK2Ex4
z-8-=l_6O-l)fawN!s;$Q>Ys)C6K!ox)rp1A4cG{se;qLrM~I5cS?X!qy?H-Ap=qKc
zTsBC<B867cIn9UBH1Qmxd!3gPG({awBf&e~$VI3o>k+F;fR^50CnBA9*8Z>ilBreN
zM|w5x&}z^QPf)AG-LUB0zZd#(u|*r4i}aW88?%ype!J}Y#-MIiswmQs?2VG2JrR^|
z%OB&C%*~N_dG!$a&zUksFm=eErz*Zy9sdeuGw|29QId*8MW(83tUf#VC85uZvvXea
z0<qJ;e&jeAnHDbkd}VUen1tyHrC9yye9CdrT;R(ZMEOPDV}e^*YtFAhB@;i^c(~3&
zyS|o-x?W3D>#-+_J8G*Yt@eFx%R)~Ov?A|sHX?So7WeqN*MQ4=#P#oiNOMs)w*XNO
zmG|Ud#`3A1Ph!wspj2+V{wkubHNT#QIB%5AnQYv#nQ~BSc?OEse6tI@XpYM)-bi4i
zM!c`36#2#2qFm9Jsk4<A=>4Z)9Gt-CB=YsjbFxW|s%b>NZ%AmjG6;|&<dNe;wkB>B
z%RZXcbQH_x69u|uJy`h8&xMv0`pdXkl6lqMkM$c8u5H2!mZN~9w<P!FilnA}P7*ex
zr^P@E5k}II@9pW>weG#<F|3%?oMbR0zYRT+Dxm_O4#uM;|9cblfF0jR8lQyYKFxxR
z@tjdU^UIkCs^jJ|h31_J;|aNn$!5JXQK>>*Olo*>n)9Z(Bg8BfL8iFse0=;Qo94&S
z6tB~$n4r2C$2F-~&FmNtu@llRs$q<}n_m~THY*>%3N%$;NE^y@5J|+Z%hV*q<h^h!
zstupK7QdVgdg?+tKrla+(0i^&pY?OttNS?w-Kvw3Owcjh+{no-NUqivEEC6A)+=}f
zveH2SEv@3_1j#<07)YgJfGlV2q!vTYfmPzza7b-2Y6X%nz37J<T?C$nECJ0h-ifdI
zjjEz=GhKGo+OV@Vb@_Lf!bf1AM8<C<)s}DNl;(Q|z3jm@dMg_Um66C4-1hECRqr(q
zkNK2JI83NjxuT4WQC_A5&yfmdl~bDLW(s;d<_2C0TQ=nx)?;X5h4+eLS@X&!rxtL+
zO3Wa6+|r_%q&!y|6IxKvjw#5Zl3GlD(@2Z3N7Hq_jh*&}JT4k1(L(=nFG*^~Zgo7(
zgn`+I#Oi}e-^N{yaPkFYOE0uX!X_`2pQtNni7an)y^;XlT#8e`pn0?ZMsfYFy~Kfk
zAg;G$am;s!jv4hhsrTmgqaeR0QH_Peh;ixM7caX6tno_|`etO4SFUWz&2MiRQ>;JF
z2=s;x5Tk27#M8Uru-Pqb5#fQB2}aTB8x=X9T5-!#(8w@Ng43XJV^+-k!q{^SH57@J
z@Z5b~T=}E#AOFXnYd9|ohgga)=$7=>tD2UPt47_t8^)JYw>yb8YTci3E})S&D8YX1
z6$Bnthl^9xe8)tVV(nv;;P%{Zy8b$Lwyj<eYwhQnQ5UETKyJr5$;X1e!F)@(LE5ja
zKkxQlq}<DtVzrfBjzvPt-dCWe`a=OSJCeGFv|Me<_b5@NpH-hLYTaq2cX`$)WkdhB
z)qUErY-SsYw*CCIt3_O_i03aZ(Ty;56y#n2mvJyL>k3F(_lN0ogswd7^3F=xhT<xL
zWQy@Cr<Vh9Mb*?iM4?pBn}f}-WlHB3MS?tr++u;#O46<Y#qN~4=7LxhYNqX|Iv$L_
zwC;L&>h0vO^#ZF@UapFLym9qT@bBvzKX0f17XT#-rVTMlu#(55<F2m5hyQsFvrMMv
zNg^LXA*Vb3ZeD_*xWT3^QnqcEOw3^HK*kZj-@TffM9R@u$mv+!K#@!Pz@#8!qRNX)
zAiBZf#ZHq3Fyx*4RKb(tgBm43VnYY4Pyh#PN8UZgVqV#1dmK-4VjfylS~7*`aIvH2
zeerDL_%K!UMyLeK4FV?5ArRP^29Nn)Ohg&n6E*J~i8E*1Il#xGQ#O)pskf$X<YnhF
zo{e0YuXaRZ<B42qr~#4(Yr0Ydxt-`D&Lex~j4dY(eX+w~DG5D8vnVySMno61RFIlt
z*i@7QCZwr|i6Wc~kRsqsow)(x-{h$<TGD}v1ySQLb^(weS&SWxV|-WhCSxP(RltlS
zkW4SnccoIb1)Y(51q6{rsYKI-=0Hwwh-7csn+C&9I1e9@-fY6ccve6EV<+LIra*pS
zir$`eh}mv>!CxF;pnr?3vYD5_{s>IE-yBjv08V_tH?N73TsChV{2&x3Zvzk^`-1S8
zmF9P0kHYWIm-S(Z(fOIw&Me%+f)kSO_YPDUw<vPYp?WBPt0nE6NyvWzwme@AVu!A5
zwioGefx83$=t_+KFO}@IBh5^zI_pxSZAsG?*BYye!ucigu6ZKAuhN~ot{Dn;Kk^dp
zoaXv=)tCRWmrU0tGAQ5H{1E2HT;%!pq(hlS4kt314$#f88cVEPN%$iX$96vLb#3s{
zlAhWvze?9~jSzahd`9*wGk+WuI!2x#Gt&FDf@&zro1~HeodGp#OvPNfg)m2Mm9P+0
z`wT^|xH{u93mE!8d}Rgugmm;8_#9KUA=cmK`YLj^Qa9WBL(gj(Bil|M((9fcXgRDL
z1ys?ilVJ^^x>A_<WXu!&Gi$u=d6ezfH(!(&`s42EcyDC$(2X#UvQd%V9lxcIkN1)v
zS482kPiL<TW;Zf2+*(gVHaXQe1_sgT58pP#zLhN|G2E!)QO2m0jtlk=aOTSk*4OuF
zM05R*`#}FhvK0uP)j-8C^vs!stu|OGX>GTNIcN06c>L2}vBP~m@XpiVFLcu-t74Q@
z{YaPS9-+<q)U6%-(p@gg0b%l_>D3R}R$x-;f|{?2*LCkLia%PH*xd)Ws&eyVl{i}U
z((+=@Hj4=RACuE0eF}8%M13dbxzdff&f*?3wQ}9t+;O4;%{wdU>2|48B@81KmQ+Zg
zZnp*#c*{a+?5eyr*YYb(SCT2`sR5HD04UXnWzWaO;P0hUe>866a7?e9#AY1K?0UMR
zlun3JpXq<(F*RxY^%Zj6uABO5|B6GeN(B{&{aP|EeY|SM{8{|25)WG-Y1s|a_Y@t3
zML!wszHmMbylXAtN)tkNLf7Sz))vbV4!>$3#Fip2uyDFR5(|t;A7+_DR)QYVt3tOB
zUD<@szr+~fmB}<#a?0|kh=iJRQhTN&zU}5uA~FOS#s?od6xWXieHYX_H4d2JxELW=
zmlmas_GGn*h{+|tOsAX8F>$T8S0-ZW_WkTGXC^jW$A_=x%se|@uYlt`D8?%hiyu!m
z(|oT*XVeRH>0X#Eac!^-hSbgbjf*69#Jm#yYcbm;j_k15Ne35<j(~1Xp7O|gjM0nh
zy=b^ljTEf;ZINVyEaiRpL`Hku%;g|olkD0DyZ9VKxj$W68D&dxQ4gCIU2{$DP+oZ`
z`Y8jYG;;vjGpO<qIwZ2_P#GhAhm(D#;y{Lh*#>YV*#ixJf`qzhPo#7kqzF=yQdY=|
z>6FKB9q_ngWs^gJJY2#bYAnTE+C=6V!TdIDF?}zKv|X4rq!VQ;Pz*P+W6>?PFj~Hm
z;MZSJnl@*L!8;6ayB3FFOi<q8&{RAlqkt%o5?DzL!R=EH&WI0L<<?v&VddkPGoxVW
zFu%0IL2k<?8OXw=Xt=XBrw73wWa?4}z`a6Y(5n~X3fL~bvFNriR9z5Q3j7&Pk4VK1
zzv;mk+j^|Q!~&dzSA09+G^IMFsz*h>!&0nI4}m#rmLwgrDQOeU_L9_Nnx+Y6Mpoty
z<6b!g39$ejH9blL?lKK`o`im4X;QR=-^sQKoeJHk?Evh8tcI_y{a?R>z$*e>A<MUb
zNhA3lxE%V-X&0L?!aUa>w|YBxOw^-l`pW`?W5-2jpKAGLQ7K^_ciktP8?~Dk4Z(cG
zH#wVp@!sP+SnR32+J7ee$}(WHl!y{nI@ZZzTp#+}Fpdd)lw`rj4;b?X`=!q2h51=G
z?L_Qs^mS@#KXZy3-Z@nY;c?Za-!!Bw`G*<y0hJvMzWhoCf@@yG%&`8*YC=wF^29qG
zuD6K2`Xy9^VWL^|zfP%1h{x6JLUjC8vr%+7eH7975aRU#-;3Gr&K<?aB^IB@$c-}a
z-}}MvI^ak#x!j(Bofc~xK#4AYAW}s3!@qajlW>p3?lT64&Mc**xK!QmN>D<X3K5|n
zU9^8_7?m$)p^|$lVVY)d;ulTh!t<zpNSwVnSmNfXPah;VLY~1q5xVQcri}6}+(0_<
z{V*Cn!E?d<S7MN-)nx?3e9vq3!f~J0*TKISzeJRIXzBFWin7PimF9=hQr)!W;e9|{
zSqO3HCa1FWxKjE~Yy|7_81@|(>Fq+q@p<`>Vx3X-Nt)!ef;4?{sRE_H|Bw#!J}gI>
zxz8{!y@>%D*FJkI1F$nKP{3E}HK)fSmy;Hl$sYtPSIS67GDkn*8`o#~AfX|j$E6y4
zFL9WS&iOusOXP3U4{5vwR)=H%RX2$18kXL)5p-RaA(G7b6CUJJ9U^i(D0BouDg#w0
z)Z8L@;y2K64I`dR7)%tVJ()ORNS$;_tf}W8AMz&8_|40MGH9`>h1QTi;TD>!kQyuv
zc|~uR8x3v~gfcl&`J6%|T7msB3L?VCO8L(rngBo}so$1<;^pkg=ZqF%t3g1BQV3Uo
z3x&?Lq|ATf3DM~G8W$~58SiPUnoPLxxeMafO7mqxm7!b8D5$8p`QPNYth;IVgiONW
z%wtTE`{8y_DU<ny*RCV<?}!dL$;IFe8y#6pawn+!{g3kqZkUN-9&yXvm46D4=HVmC
z6_~4mM*<>B9^7~N<nBkv6%n3{NrrIg@$@?PDJsRk-!s{cFYtaRiaG_{a*D+xZA>%(
z1eCghiVMFeMrf2LES~dEPFI;0rHBIU5Yj^3Fi1sIA&U^x3E2{vAs~`7hfG#|v?8^D
zeq{Pdp6<wDoy!?`6&x87E69(O+2Te-j^zB^8N@3zul<cq+#~3-Ta3BDWXMJaJC{zW
zApi~%5cfy`f#X^(k7FVM$Yqca$snPHv5h!c9p;D}BqagRf=DjkgR-E!(UeUvK;*9;
z4Tm61phSM4K(v5z+Ql5B!?D+dNsmc|$tt9uxt<b-UV%bg&UJn)kPg$AM?zrkK1cG-
z4#DGG;kApFSrM4lWpiZDjL}hKbws__2E(J~02Bq}&2eT<LP!k}iseimqDDG59E2pA
zNfMa?K`RNoR+wMXVvb4WZ%bJxEeNL|rW9VeQ3Io=RQ9M7R$5~~L~F?%v;GMk&5o+b
zc!~Z+&3~yS*eY&J>y4?{G%bvWThO5lf)_=2LQbtwFkxrI!l8HKjA@uWEsI4!`FRb+
zBpgthvh~^{B#;{vK@$p?c@UvFACQJNmk2;a)ysmQ71bONFQI(NVMpD?QxzQ2Fs!sn
zOFEwh{G>p%h@UGXDn-+lqSKI(m|AH@MR;oGAp-goi-Ib=idd-ps&93-PI3!!`uvJh
z%w{(Jo{q4JE+#;w<7M6f){j19O~|qVk@se2B`g_3#>{1S{>bVyrgju19GQU}s}S=_
zpr{k5;1U#B5$co=q3Ub~%8qRTH@3i`qLW&{>0qc@!{dY@6l=tOGC>DWGMSu#eU1{)
zK^h~ab;tv8ay$hGt_zbC;99VkwJW>#JL9qGFWg?uzqgTXWS2X+C7Hvlnq11k-dCj)
z^zH<&b@b?9x{^(i8(Inh1V7DnrjGPc;<X#DeVj!F3ZN(O)LMN<NvmL@DSz3V?6QOL
z=>O946Q!xuU!<u+Q&qTVp@#u&tKLmsP^RFZdWN%P-1NdDF_WM6rjURsHRE6OJ8%pO
zihys#MS&4$<<h%Hp)Tmmtnp7E0RJA1s{jH76M%?G?)1YYe)ij^`8n73KJd=WU*_$f
zNHS-SeU&{lzQNlzstF?AR6o3a6@*Pfx`(jBF6R<Tlz0W?d!|X%sH=D6+d430Xug*8
ztKm(WbRc4g8-D4NaYWqzivClMt-qI6RJy%Z88)Kj&7w<c(<_RvqfWQMk?UkJ@-mf9
zc0iDx#u@}CkNXe(Ro^H|Y3PlNE;nCvD;4=PMYtfMB#fwBk!2P5e+Ob)Rr+E;alS&o
z(jUZ%glB=OU{5tr+d2qFv@J%f4X%q*JvO*0dG(Gjap48NuGM`owGSKwCWn>c6*G^M
z_6Hox%U4~=F58KV;&N7zD1kUgcMk9=Ur!W%p5C+N8c&;SU>TdC(GltHR`_^p7{#5f
zstPw!)I<d5km7AhW>lWZ22X`==;jhu1qOiM`oYcwr4z>>3B497L@3$?Nj$cYpro}U
z$N!kDd^{*I_kX>_MShXb7I6E|cbpAl%*iPxyJVI<TY5rgF&)cwvUe`RH_Z0TmILbX
za?bxt|BA|2TPd$`&TZf<Gxr^{^N^t&!Ecn;DAIBb$W<maX&o*t_ZBh5_MFtb51Ddj
z@quysFhT9~A}r}Br`w?1F-iRzB@etEDu)p;K(VQTRY!vJhA>C73N<%Nt7q})wr<3+
z&2!W%gl>?5UH~gW=5EYYeQhUoV=9P-s8s(kHnP&Ca>z}kU}e{D)!$=}wl1&@qdC|S
z$jyWvpzP&U;(>7%k{`KPU$>7a<HRL2i4^D}vr9CM6oMBU?i~!tbR2>JzLnSjb11C&
zdrQ3aizl~7Z!43={yy^7@zs|?ZEJ0Z@UBFv&Iq6n+`DJ-ZoL4aRvlD3kbT5>Z6WnA
z1YLG&)(Vc@KMrbOdWd^9>bVI`W3pe_&C%Z(411yi3`XA;ZTUsbw%`rLG%XV~IQGF!
zL0q!_0i)v7;B}h%2kJzPcsjV83BZKsqHd&1quf$`%0cw1u{@TMR{fDBCKKDriXZnD
zvcu9g>L+&H)KIfAA{%@Woc-q$wRj7S9_)-)J#iY6+B;JA<7a(T!-7>kx!uP4)Kkub
zQKgj;!}cdM6M_g<pzzWU1XYf#e1U>&8ju9$EAnnOloLl8U&=`%=fi?gH!S7PdSKX#
zof1)f#wfF`5%062V#(#N&<!mTZz^Y&bR%Z?MxJ)kDTL}Ba)VRy7*+?qUvusXP8jl7
z$jK>VLiH&WM7IQQ?70ni+Nv&svsMwzjye*~{~@8h<5TL?8NLc+8K+M7ARX;*62c=d
zrrj=!+uj59W26)mL4_2Gy-j#pc}+g~HH8beb5^i*d4UJT3F>1FMK^+)F8=oE%7gk@
zM9HSBLVO4LlP2+(W3opn9V-6Bk&^pqWm6$B(c9R)mKcMbA@wAc;v7Nx2_+p(P#`0@
zscW;h?Rn^S`u`*1sl&C9DzTK!^q1=oY`x)Iof6O;MI@9l5?ZastR068fJuGl!6B%&
zDptUS`g=0-S_}elE}qyBH3wZp$l>waydr;*;!tVvVM4BYNI##Rq~1y^?f;~y05L$$
zzt>H7O2m<yx~oh1p1~nn4x#{?!{zyS)groNTaNU2Q0AIdI#~;TAMvny#d)(Kf}|(y
z<Ncs@(W87s8ZAa%CO{dF`o-NBAyv4R4U`|;EUzA~V~}IdIBPHBHSpx-&3q;^M5<y6
z6NRmz_j-4%aT*#ga+BvnR3?PPq>`$__?=9UN*)zv$zLw)IS`wXYOO!;Rl9>2kLI={
zd&l(WZz|n<mEY1&zEMb+O@p5TWG0T94*dDCkMEf5+pW!Pj7LiTH*X+`*LKNl{mK}$
zg^$9uM?Y&V-Wjgo92IJPzJDyRY4oAV!zMLRQEw7yLPr|$xW-};9;VlJ*EkSEO<^R^
zepNiJc$XN1)K~x)P;N`K&fSInOQ_KM`S1FtUKM!r070Ysj@`YrZO{$N`+<5{?Wp32
z`Yd~EQg&D2zeHp5!?Pk}|FZvf%^JT0v35$zHv8C|_cv}NX58FnUx~Q!mm*j^o4B!!
zTJdiZY`g~{H*qDVT8@@oabnjGZj&IUoUx8wTW{h#o=Ggyv#dye8aD}^a8@<3OpVPo
z3DhC+sNF0)Yq6-zQ&b?bfKDkR^8~xV#=9s+e52zTOVxO0YiqWU4NVxY?f5-m?sKC5
zS|pnsK&VYpHQfpMgeOvOyXmA8plb|xW_jaaVlJ3vYOk+P!MSpK^_i%59jP-#=n70t
zGOOltp>NqkPFw}OElX@@Ll@{s)mm(>S)dO|N1bL7S&NZno(eIBK~JlGLiO6NGwPc+
zc+5;Z!$G&yvr&=KEjgVISDn#m0QE}ig;rd?A18GqhWQh9ofW|qvcCrW(3?y#zG-!A
zKl^Z2k@)qob9T{1G;^995uJ+1Wxu314C2Pt0sFbt6djt*0jsi@@<NKt1M9Ln@_Xg(
z5J@Q1fzwRc(8tl)GZAztraGAu*{>-Y(VZzCBfDNS>mog`>4+Yu0tB1pl=MRe?ur{c
zf+6LgcZ4=RFEbIkuf%?)@(d$kP&6+kUNV`F{|`q&n#=5bOHhonkH;z{O|zPwHSxns
zy|Oxf>f<30cgGihGoH?Iz$-u&ih{lRtL4}ZKp(aGpfg>*NSGO*=~>;e;0C5ZRhHv`
zD01L{v6`jRQ)$Lg5zDrL6}g`UZU8Cvxo`aQ)BCB|@C$1pxXrTsarnFYjP^U5DsQhb
zJ>S*u&wSgr>U;ZuiUDKP1erWM-C5<Aka1C8coNd*pekDpwoKRjo`e)>Dv3HBD#GFs
z>rbuyV2<y|GK&z)l6?{_eIQo6Nh~Ru=5s^%4(U7C8BJT-R}$D?N%|{S-OdN@&tG;I
z<!O@-g8z*2RS-Z}`Rjz~D->)i6|v&}IJkxkXJ~LLNfzMWffN$W=lSqbC!#-s3+`fD
z%=t8PmGm#QtW{|epDvXvc%fJ`?@4k_sAC5?i!Ectw`ynaVu;-x?0*r!f5v%k7NqGY
zi51bE*2dPFpzTykz9UOTGfCa_D>$KK8Dd-(+snC9EEQkPtlLd#p#2%_&ZDKvmp)&b
z4Uj0_F?el|I4hU%Q7M1oGhoRI@p3()kgvzoDvW+ix-+dWvQV}ue_z~I#j~=~6U@T$
zlZvu#(wU|x*}m4o1N!)D9aR|#MVnoow<jshkB?@MY~<O-jNjVdY_2f~D@l3Lk4Zh2
z?r42@$Q;mma~$)W5eJG})!C6!w{&(BP1dM26rn^SH%Nw9l?{u9v>3V;)A%ics`Hwf
zaq5*CAMAym+H-Vi;T~~ztKvwVXKOx{*OO4aLm!$*Aog|#R2<q=yy+mNa9ne)l)-nW
zZxXT+U$Qlb&6zl?31Q3>GeUcFV*%n`{51_*RoZ{LCcbLb33(z=tyFe=tx5--DL7da
zE7icGL|H@B-y2m?ylwgEHv;M%n9E$j;lQ<eXIfYfX~q<claIJxj{$Q(;LKX?4~_-O
zfnKsP3l#Au<X&YwZTgUt@j_%p9{z?%*^1|`fS!cN%%A|6qrnNhkUg%<)bavG)M1q3
zd<LK`4g|NDe2NIZc)lq6df*fSYsH^o3GqE{Oh1C5$S+amcKta-EYbrM{EeVg5_9TP
zBitTYR_$2S$kQlbMY5{IGmyvN&zEOk4}@L4mQZ}J#nVJFg3jP;(p9pBbfd48;1goc
zw(e5Bv{qDcaK}`SDDLuyYLid2Ux08M9BwN>K|o8D$zX^>9S4G-U5+3aY*V7Zkc<N_
zZzcqcRy!0!cpel=W-%ryT*G=?t}dp;sX^3Ph0beexOf?1Y>}Y=+t`@a=blywY4&N`
zdQ&4gqRGPOtIUche$M+V7#k7x>GiEy`dE&P4RHtx9D`uk!f=C*rTB!HBcNDXU{6uF
z;#RKmD=XoV>d>k*fcK8`OIH9Ch^<fk5)?NW(zBou5*-$QcEQU07L&J&;YVJ0saUDi
zYi<Vp?6f%9%>v}s6)H`7&CDpCSOsr(rsbHU9jHrDl+(ZJ++@<KP-(X!u_>>47-A@M
zV?yRGRjO-KJPEYS#*S}w|G*ek8i%ZJ>1rbWHuJi(%Y?Yfz@Akhoy*Mb?B&&3dJ^q-
z%k1waPH-H~)En%ed>sDnqi0yU%ClLeSj`irLNpAbgU>3UCz@2JujJV!SW^zKlQ@*=
z2Momj<Ohl}=k*Z+liwQ%)IG?As(AxPR%)T_cTz%v{zZOYRV!G5jt%lORqEml8R~6R
ztSm^<2U1j0lc=-GwVo0VZQ1*eDQuFb+y?CqX(NZ&yr5pC=<O-KAd)p7CS@47g>0QW
zY6K5D1o5+hWWE$L-a8Sl`%A^u?pZQN(UkWm_;;{fXvwc1*fTno*;P&`mHho}ZjK-H
zLVxBlS&p(HJ%lt-J_zT{-`CL@OQGZnlqDF29N}eHo*Z|vEJ?J;CQbYRZy`5Dd|BGC
zi!P>FQWUU>z6)10AlqlwLCv3R**-0$32T(8&qhi-J@Lv=X6sz*;`$<`M-OD<<m5i9
z9s$02qT2{H+Earv8tbXO*JjH^4@f4p@9B&%nr}IK=%gYxllq0tLlMoZ9a5mHATCNm
zwI95YPvlAt$9}kbqGkPMs(ex)-porvYFB)#R^c*fAu09NNfy;=?QRu`7%^buvqpYI
zsR#Ov6S5q>o>__~|4;<?7&BGCctShH0w2h{;KG;s`nKj;ngQ8<cbnoXWDJme7muLy
zr5q5YD>hldXM7c(-7|)3&tIE?jD3axjdGhE-=N6-y8=y28I;1Va;Upet8<Z~nRM3x
zGoqL>!}H&F#=`KT0*ovd0PUnreQ$~j4cRzBR`<_<=ri~Zr#GQI87yxj$~7W5CwK_!
zxbagbLNlf>$*bzRp(%m;8z$rBk4tNOQC~R{yqMQm#>$janAvnmzY7VA`3>DzncQ!E
z1!nP@&dG(*{HZnNg?snyD%=B{9i6r)9Xl}UqZWA_J-)#)Fn(|}2W2jjNtCLqZ4g_a
z>j4KS4`k7s(z$c@FfR4=Jh1T6wY6Rx!%2PfAFxh<NR?#(r)5mF<~Ho7(ez1K#u>U!
zfcCA$hEhFjpc~(GAn(Rz|BzG*38UBJTVuQR1!F2{#i(x;PCrIW=(-g13UhqtD@#1H
zrzK7)o<_j);U%saRjS#9qz97y1>fn9-|0zqjvq(i(=(x>TVrSM&Md6|M!c`HGLw&l
zH#)G?Yc6q)t6~Q@r`BoScF9+JEXxI-&E#H)auNIOI_0$;`rVA4vr1-hj%c6U;<d(p
z=gL}cqXq`bx!PmNhcNaj$p_(9&ur^fv=2es%<nk>g=yLurI9wk!KG964lx691aIWa
z3&MOjjfCKl7+76p{w<7Hc1c<gVIg-o-!0-1a(SdLTjh08NAX7fyfDm9(8vi9m6YBP
zb*^OyDvzqW>Av9<ga(JFlW$#l%=<B=*Sm5X#-8o$&}d7+tXV^<(?}i`h&Kx3W9#_5
z2&qH*_Nf8S!A+B;#Am$r-!tr0WvjrJSvs}@CeoJU)p|rBPbugh&%Q6S(BB}!8n)u$
zr$!&(&RlERrHqSFTbKfj{ixFJU@`&$(~~_+y@6g~c1hMGv8PE4iZ9K9(33xi;H?$&
z`@|gLhn>`95K%)`T9{&$uzhMi-u^Q|`_)QWqslyUE_a}Mpl^BoPIb)5k+M?+kf5%f
zC{R<k8+nc*$uqALX?*cmVmaU~wNo>b_U5@{j~{AK?5csFvV1Gb)o<17*4to%b)s1g
z8i?2I;{~EICua36$g<WCGN^~c<9*~QPnx3tXuP6}=fv3qa?Mii8`re>;D>fkY8pBv
z^Hs_ekV{qrR%~UPWa-lNal$m0owi(ljh*ADOEm$UHz(`XD49lt?CZ9?LFz9+<;ePp
zz#_JMonF|i`d6o&tNSZy%S!x9UapNFuxHK@X5Qk7Keg;yT%Qg+qdc2+;#>nH*5c1X
zDD-3;2km>)l~^(9%FnDIO;>aoR~5lp@KT?E-YVyl8@!lukwc7<7J5S$QvyHu;=4rm
zq`qYGOUiZausr~Eo>vl)3rf@%<4d7uxEJ>&cYT+T_e0Y`+9CW=d>ZsLEjx8RvJah}
zb0{bM&V(RUk~@N`Pu+{YM9kQd5JvJXN_&(=?$KatZkF2LEIfwm`Ob5<0BwK!nzm}r
z?esOYK13MrQSxKZeN~S8iN0CN-+!!6@57$E4A_`kT3a3upP9AgH*BpZ8!)u2(8s)a
z()y)Ow*vFuM;&jDgaVDzxyA@TMMJY=d6+Gid}WP8l*9-hPhw|#^lMVdQ@sbJM;~}N
z1ScVWK*Hg;Qn^!t;SfsLO9l4`<}Lv@wF!tM_It(?UCESYkAc#f?obH5r=93dp|*PU
z)aDGE@#&sp?M|OhR-n{4<wfcQ8aef{HgA?VIE~m^_q+~2C7*1#5YM~`gBhLAhph$(
z;$>_6uZLl<Rw{LLdNwnpUZU2RS><%ILYI^?Iju7~2F{L4H|oHLT<T_yAA*)(*woOi
zTcDWMW>97#ONzu}e~h_fEn2HQjHRZ!TkZt27-AQX;i4DYMC`IiT?(GAn%^X1n9;Rg
z`v84}G2yl<Tz2>cSeVk|P&4)Fyh};)Wc&bY<<yF519cW(;l{?I_=sYMt{5-3M{s3e
z&j~h<Z9<H`X)Rovcn3;#K>Jd@*7%Rqzl~4iNnCuoJ14@Vzq>F*Zr?KCa=))SQS^UV
zb-tlu=mmR9+`UN@tXs8m{o)2%co9z@O{j=rq4J&DC|(?v$^MU<ZNfbx19FlCBIC8F
zQpYvc%^mGK#~*{!#%7Zl-f=cC3;&S^(5t6-_o%dcyzFTj<^H@#)C<1teUUA`D8U02
z+}p%;ARp+1Y(z10MG}cj;+}z_PDwb`KbHCo{f_H$vWwU<o1eJv1eKf1Smk2m;_VBm
zF=`yge#l0mI%0t`yNL_mDr64kOC*oX+Gk}yVv>rKjs1T$0+ht`_YI%=#<f3OEFfgs
zwtkq3k6Qv_EV%FmDj=pm5n)}YNDM9>#}CL0?ZaWyj_B}@kC2Y#5I7j7DaXQ<S}*M>
zC(OiT*1wG7IHH3R#ifqd9?n?RxI0O%@gWdQXaCjkKTwW5{Lmk&sw;s5!$kDFg7U)h
z^qflq(Xo^It(==&9P;J({?r;~52$Jz@Ga$Qqp`&{nW!X2Q-T(m8L2KBTVj`DOJX%8
zDB%i?!s*eI6&i+7Ua=CC*~(4=Vk`Pks5)G7$wQiqFLv=6ZhFZLH9v2b<XcmFlF=b6
zKqBK1aX7pxDj9Ps@o)+~jd!Gc&(XUVquGoU9*y8L0QIpBbRQHTJ<`TM7vm0WRIV@(
zLp~JylP-AmV=AbKXdoI9@5I9^mwtmYurWOQAVxqG(;btYR4%QG^YSZ^qgs@T%9;2V
znNtVHatj8-<aFN3#3T^MR4jfIsNh5Yn>z@JDPA3bGGj3A)HL|G9GHJzZ)5LM<b4zh
z2UARn0W$0cjT*)q)pu}QmMn_-kQ6Jk_1RcoFiC~VMj%IQxPV@H9z6%U+G4vn=89m{
z&zVto>}F#C1ic}5$_}3VctX2j_g~s4?PF8bxb+U>^_pJ2XRk?fi!&E9y;pq(q09Ln
zrjDLJ)#3iCh&BQQt*ZXlgp}c~&5p71hCos3T))PKpLosSoXm}a`Z#XM2GFVv-+;tp
zLrTY{a-Fua8%uYV;e2tr>x}s_#~FLfWz*yoz(5p;UO4ybj$RUM$NRU?8&g*RT-aWG
z<E`fR8E_@;e}71L>&D-xv>m;L+{Fk~TUkI^wf7q&q@*wC`n1_72J~ibC4_FI@4AXy
zsUCj<3Y6+t{xo~UF4XR7U&Rh>%nlc-Jd`~7mi+-p#coI-BjT;7iTbKq)e(2}5mjYv
z%Zo`M?H2n9_Nn#pE>u?lr%qLcLJfC$nwD)u0l&vp_&IpULoYhW&|WHGdo4cD)Rx3d
zku3^m<``t&d@}!5-ZLlzDqZRW#&{t~{AYQ$Kwx$q5#pVbvRF&a(QD%I44s$tj*3Ql
z7daQbR6`r~00=iUj&;Tc2v9|*bi;TE{rh8bQm`X{D*P0K0%tmy`j4)F21?d{MWqv5
z$>;NENzNrSx}PqI2D0np=(GTr9pKmvbHCtTM-kKQ-fk}tL1tu(C20~MWu~LdZO1Vp
z5$5<dX1|G15p8ZF0Tk-c>kV+1gHjrO1$q~iEVf!?<|}q(NxG&31;AhmB`@wYok3Fg
z7!UbzN;2Q`M+luPPom%Ed8UzskL2R_Lg`zv`~hI8>tvkhRy_?bji>c-qGbe*v(-c;
zNIcX_WoJDe`@3BHPDF>V@|5Z!J%OI=y{@>$^O{8u0sP{=xeNK9C99f&<nvnxKH4s3
zMJ1_oG2&=Sge4baS@t|lE>7sCm|3zB81#Tt_*x)-C6xA)dUU^QL~VNgk3T?ziKS)b
z_vj%$d|&$K7ytiNxf}Ms9zN{;$877H=J&rp&-#NKEgygFJHM6PhIdY7h|0M&4__<5
zJ#j*HfByk$lWKdvS=rqUxZ(52%I+LP1bZ|KX($_IBMfu4RD%=d(~&j!OxFWOm!f!0
zLT0rYU$ScN#0u_bH@)aBt{D&=AC{olbSuEhZ@HDM-v^wWt8J?~ao?K{gwrsnh;oA&
z^WI${!9&|&m?6z-c76upufjs$&=Z<~Gwgt^68%f#^|9=kF2K_^mtnNAP4R}3_h6X_
zcBYH8U5W0Zeu@C_*eyIDKEQQcaDuM;vL3TQh5>+_8!Kl&8U&pDRS)*^vCkCGPq%3~
z>)!;csOmi2$5Hb8awugNVWVN=5-}EX$#CrN8#UKRP^tbcU@?S6E!yTzXyNbRa{1d6
zWE+E`7X1xlr~4#3<sZHyA$!x&LG9SLd&4*J)HLr!CC6%*-kg=aA#A_B7&!jx!3)9v
zlBvB>FRLnfFQ%ryiMux(`^BraQH9ckYdzbZvO70NA|n?mJZ5)qqh2dfI4FB8oC-58
zr*r#U`Egmutb(|59mAhr9zJFMSOyA9*D8J<)JgoYPN%6>wWs;}m}7!8&EEE;c{bNi
zV@{QNs!qV%&n;^YQ>~(<6aF(Bd*%?c;*aYLH)JHt363PRR)0FSPfoOG6F5gtrhJ-{
z5IiQ>y&;nW`y*PB3eXSSy*Domn}wzMuqqdBB$}PyAvBl~B%%=}P-APCn|Ba}Ddx5v
zD05BvtBC*W+hi`BH<jSos7~pZ9F-NRU(cVjpC&Baq_a$tzjWww(SR)v%TNXKWDroN
zuJln9%3`9_0E_Vrq>zpkN~cS1uwCux)nFaFvara-He#vntnt`yL4}5wN6tJ*%&OTY
z5ydEd*u>ZiMP{nBYPCL$X;pfqJ7u~1w33|>!I5XcB3{zUUkHfvP<X;9RaJm)QmOGJ
zMsCeg1ug#cca9HNkz>G$B^oWiglVm3pHeEm8Ejt>v#U!`gOn`mi(?f>@JU@~BH71z
z>)mI<<eM+wsB9@5<S{(?RV;7e2%v^8&Z&3*ocg+K6<c=h*+Dgq=#0~tcWY3RT};LJ
z)7OswHY?r~OS!1soUzj!FW<o$v>1R8n|gBrD#e3~k?WBaN*%6N>G7!&zhIjbE^MPo
z0<IR?{nWf>rS%q4L!Io#g_3cKQV6ub!>$vx=<9->Huh#gyy93-$$3py%Xw`{kMel=
z;NGVbhTVEMwhU%r@JV66Y8)f@+&$xpLyM53fYZ~{5*-jj$CAm;&G;;fs>$dKx0n$9
zTfJ3bd{$|>X)8Id^`Ls3%YRsiNnz{snQWh5&f=CS3-|5Xl_pe6;DgU`1d_-EF50dS
z^RJIiX_r@zER&`Ay}lA>y}T1M5abPUycwl<lud7t$kf>ulA1hX6Ld}Ag#6a6sd<0?
zb(5PJ)WP70Lh>3`s_u>Q(fy=^vRG<sGq|?(a8k}rV3F8G^{Y2t@j|+^5JRe&>&8Yh
zISNke{q_55Z6J?)(c|woovXP{fTd|kk?0IIGr|#z!W>1TB9Jcv`=K)Np}>?NQy>g6
zl{NNR(Iy#ejr2&U@?x;o*|}io;E^MIY15@})r$n^xmkkN(BY#zfbg9q4k_oBTr}r#
z6&fT-^xe>zB36W8&C7uvMr-$-Iaf8Ue7iWlk-0}a&ECk+6~XNcBhv?#E6_Fe<1K=L
zLf;aBb`X1W8PZ~E!<uzh2))BDBE?*WPQ3a2liRAhAV_`jv(pZPQW`SmE%Un)k%}Uc
z!iK1k1FGfSZu(D7E#k9vrJ5-+TV$}P=delG2i2p$GYp{bkPq~+ehtWA-*Bjb^y@)9
z3Bi?Ymdf<{tVd6wd%b~i;PA5d4j!H|wKiwVXmsOEH|Ch1BMQMJTQ_q>PYPTIonH;{
zd7e7At=@yM4m?|N{o;Wvb}_gwN~0})>IXG`?nv{V`wuZ}j7U@+Va;01sxhOda{*(e
zENjtzTg{Llj8KYDPNu8RmREAUN1qGXXF#S<U`jQ&mTm!`Ww?+sHFy(w+&1W{zA63N
zHVx?Rh3_P4<_tQeNIn{|&InU|HtS`biK)p>0-0zsIm_A2yD8(|2mF_;5;l%aMaz!{
z61_#+W)?Do9=j~hhH{No@)hekV~#SC-jEdZ-T>E($wH8Kn8C#I{%~&WI*5~w!;>(*
z(vi)lAQjrQ*L-2*qKxj@O2eU|eMjsR3*pW133;}8$zhlr`l4%|Tx$hUlTjaPRQ743
z_zKFb;k$szrFi7kJXBT|P^^E4ejSc=Rtrl5{+SVlVyYAA>cGtR!y;ql&l3E1=jNQm
zWEP*mS5{L`7O00=$9S7265qeXEkS$xCib9zm*wvocZ0++IaExt{*i3uas3tSohN4F
z(sa$GirOP&Y2%Cds!HNQZh`G)SM?oy9Wcb}ez7F<5v;H%0+;GC47f%>XG5IpiXn)e
z#3;=sUpqClhOTYRjd9izez;kjh-iou$xanl9j58cIos^8Icf!m%A+hQ8B-jOe47MV
zi!}x?PeXTLWr@;YnQd#x&6?U7G{1C*dr}Fnh5HT0(ZIogfC$dBv1TGLPJC0c%N8L@
zh!Ht57o59PfTqFzak+!X_meEM<qkX1(gUOMeG}<e8X4Me9#VOnQaFs8ODtty?r*tA
zs{r;5boqu=YHxk`sq9GhPGM!8go!{GO&K<9-kM+=u`iuQF7o(#==4QEGkc5yCfjqo
zloGq0Wxd`t4h-OFEHFvQPxMkkBjblxfLq?aTGpxDJonAMI?;L1Az!;L{B&Nf>qcK~
z{1&_b*3vyf{T2)!<QSezQUoyaFl(s+_v?4Z3*!;{saFQ1YxCxJIcxNesDCfA@Q6$&
zk-Ui|Ysmo@>jwq#cO(3<sg|*<?|lf6oiDe5lO;%lWVVioOFd=F=<Jn2L)f-0EA-lO
z%>GohNz}f$6KeZsj`Vau-wy3xQ^=7souo1WEinzlPN5QEd!1`kfPJN$XQp;>Nj?8;
zbxSvcFW~1=NPC&0W4QyOa=rMQ8HqDqXX{Hei@h>WLheNbUuiLCVp1W6f<$DsCshSD
zvhFeqP7w(|um6Jh6sexrY;A-Cds30riQb4pOe&f=b3B;%oeJP|Z|9|MG08ujZfL{R
zOL%GEOvtzy9oXB+Iy$9mFdbdp2d%rX?47RRC<pspstZdG*#pPGbj$weg6vTADBHDY
zfZ~wCnVPdDq!ANnmvZ1MJh0?CITn7GLM1!t(ccvz$Up3PUDR~Jueeg!%9LpK)yU2S
z6h8+6_&=B5C4s2v)rW^;^_oXr>BB4or}9#81MH?Hk^KX+FN*qs$xGo7$6VR%Ig1?&
z?igkcW!_9tU$pE+*D9FC0K0rb8Fd!dwqi_NdJ2CR_BaP3`}(Jt8BAyIgL$!}P_6vL
zo2#LAw<I_$7JG5)Ppgvfzx-0G*N4n6I&oO*n{{?q?+jRlYDvJKjAUvb)0?u7c~r#W
z$C;AgUY@f~s7yeEN3w*vgY`uh3FVYl{R$_k`VOsh>OU?0JDE<oxbTs!(p<U)RnLwG
zqu&5G4i+^E`2~Z*VtqM`f}&?a4;(P{*n)c9#<Xq^dwxOwR(^BSZGWvx5ios(pg6x`
zGwh)tV*q?Kw_q`!?%w@StT)&ZV<7N5td4H;U9qt-&pNPG7^k8Wp@ayKLIJ3`28fz!
zBOb;*niRb{AE%S&>Wx$N$r=WcQiz*H{S`9e?sS2o(i`(8`63m>4*h=5tCW&Tfuy?e
zfAP5j3zSlBEan&D<=Favnzn>iWr5<y@xs_`(xmO4(a~+5MJmJ=A@n?i=h=`c+2Y0v
z(I_p&MIgKrQey#Mju$K-6<%p3tI4!K7x+d-O)J-sXmx>&8kOc&;#g>~)w3m9o>CO{
zk6-e(ySf@lsPK>UB5+|(HMGUwLxAOYMJ#Q7avt*R%&m|yBNrW)`z5t~yZpUFApp{_
z%e1H@GO~nGO{35lDOOp^qQ41J9C=enucpvEvdGvTA$5`3(L%NSBi>Md<dQ5WaIeTw
zrdoc_ucPaJsK_7Q9=V(&3%undW~$ma@r&<Sm!w*kP&d>pl&GzOREY+nyWGqR202%w
ztiT&~+f@{{4t$$-M5#xgTp=8iuBoksd8H1z+zS~H4ugr<cw22Lpf_$_<y6I0&{@iT
zp$s63^h*m&6W3PJ>t?y|_Ab`){4+}tEZ~>_HH`T*ZpY5e$%hx?REO8Zs2v>KkkWHN
zPMTR=+4uwo6D0<UNx7U=9?bO~nN_Ck%CW01^g;NZ*);K5*Kl_ol7!cS!O9xU*xt3_
z>s-@f`dJ8n`GtPv*tqS|r1c)m&TP}B6PBX8g5x{cz<6CWE*l0_;qm234b?BFC*JT{
z`+ueGJ1cl3Y20^8t@gLPiP}4s^jx(*FhP!8fC+3l^?5mxP}=@qERqbDw}h}3=w4`-
z+5c(Z>>Qex<9_-Gf;f7HOlyv!WvY;7TXotQ|6%|LZEV78!TmOCNxH?7ixJn0Z`s{i
zTLz@}^^Ks5wB1{(_52F@ko2_bBGV$Znt3|7hhI;z(jXkZFzvd$mw4tRU7I*NaRKC3
zmKF`~=+7T6E*|LZ9WLChQc2>)Rhsv_KdX>uwG+^ON@A{`WKVGBfbXI7EZxP*@}ohS
zbuR|j43g!JuJnRbT)6dgyK*v3r6l}&889}uve9S*D&3?ZB^a#5!iYUoZy!c}qFM$@
z6EZ{84Y63?jR@qBz%id$iq0>H)Cig))3s+Riw|QnTh9jP_ey3G`}>xf{AQ^xUKn@?
z+rvQ^Gz{Ca@9s3MFah)$8rP@*KTJiZJ0I3M1R3HVoXbM#{0e>Iuz8@U(JWF<<g$&_
z@dS*X-E7Uo96{0OG+9ISeo@=By>dW}gM6L5E;kQ!oImys`^oA$pmjO1?Uzz1;~M=X
z7Y*9y9AcrCzhoQ-+sXlHKdwS<S41G?X|IQ+6ECB*R$iaK4q}eLVIwS7wAsM)ku>DR
zpO08u{bu^uX<sE)ap>pK^#2V_w6>oM2aU^rPnkPV2&(-*kLg?2QmwClmz$h^(>$JL
zg8kJ9maJ?on8fEsHjrXXtRfC1sp|d1R95NgfKk=dU|Wx;kxG(d!a`ZE#`hShvt39A
zpZR_36i6jS>bmA#%`s(49@8)PvGticc1mj3LlA{qym;tZ9gR@jn9AT;wIxb-XU*1k
z&NI5gM%W^Y=s@LOyY=C11|avH+DZTN*y-2J(`i)bU)$f0)?<Q+qn!q>kEFa8pUJHs
zU|3UN00Rm71v}=XuDasPj7Vb{EN*`4Rv#mI`p3ph%4HLcl~)&lW#D93NPz;JKJv}(
zoY}#f$@7_!9$ceT$80ZhPgA3gPu~ZH!2ZR5<9%O~Wu9?lyq}gw^V3PO6+XV`Q~xXa
zX235czYP>8PwHd;d9#fTng>YJD{6UR&S(+c=eJe?BRFXrnmK`N`?B+9vp16x7}+Pt
zB3~~A>}p6&ZLKt8cob3t=2=Ut%2Lxu`f5oO59!A^z;lG$+E~OD0|}O#YJ3)#a{g@~
zPYbeVm_H(!Aok$q{D!z1r1kpSn(}#{Q7YxG8W4+LGTD$Fo=J;>6a%dP56*5G+Sk`N
zw14p3AqF&RZ6185+04jn?nZ__F3GR5aoHW(oDurb=4|U_a4*ptml>XtLLfc;SWA}m
z5}>(nd;#JZ=U+0;kxw&sae<gPahQ{kGRx3|CLoZ8Sl3n<J_;W3kD6)?f2NY+OkTvq
zCL!(?C=6S?IBPpVWnvn?CIZ#!=OumtR(%A;v+2K=iuDb$SLgkrSs?(Xa9aGj(0Ze}
z#aL~rez^cFF`lBr9nniWE?SExWhXOQbhnG9@5c)`HOZyIh-^j?`a3gu`>D<Qwp+%H
zjjEL$7~iKU?e9x-QD@*(=^56e0Gp|qqHCo)aq0|a-9Vp)^yGnq>ScAcaTZ7R!S-!e
zNBkZb+PP?=y!CjlzLKoH{i2ywvGMaAX?umSb*J?uBWfuzmZeBAseD14+ho|cGVbC&
z8SC5KV6B?nu*1FTPgHH#YKy%o_j<b=vT`@Eb@=DOY13DnNx1}fcSxI15+>Gx3h;bV
zRbjy#BN@o{;a$+^>++>jZ=Y7N@0+h?oN|wRnWXTj4^#K+EF_RXWem9%LOgfOnOOJS
zdt^i{a*pMQA9$laS0l?J-w|BANnrNCdCkv5KUH3<cwO>32`J;231IIWQE1n%*LNX1
zT)Z}@!9a(LM|Lp%F}2$rzo`buuK&m{h-_FtEGP?YP~d`@Ty7w9cP$Q`<;v<aWM{nx
zC==QQkhc#hw(B?WNH@EfZFy{-YmAvz$aedqHz0s)+klEpJqC%{6y)NK^j+M-gq4l7
zp<r$EBtv-XNbBvV6f6znL2T?0wkAvFnWl=p+-{4BSSz<%glbm4HEZ33`Vik-BNJFT
zY8l1GLml`YsEy@Ya%#QFsDBmCxEhwVwZY+K{D@K%Xj{ZZA)gLT@QX$uBLNgnq+13s
z0yC@0T)?e$nu|F;mR!`8u(bz{=f9vseKGpjv+OHYUD-kK3d}r~j0UE;T=_Zsl?-NG
zK+6|q)`~qjlfV8NNkMV6YB*Ttbiy&?G~0X{xPn{ZDAoh6n!?1qa%E77hB$1ni_>lJ
zHBm(DLj*H>QVi3?2me(Ik`!Ww9x@npHB&aGgSzlLfF<a+t;#E&K|e^|4~E&_1A!n{
ztG_!Sb<gh#8{P#kB)$>Dkop()&R38Tnuvh_1i7ZLNI+HH{$Xfqn+Sy3!%l*r`!t3o
z9pS7_hMcrK3H+)qC)#32KL|u8SdhpN5Hz&;+GfzS*LvC-)Hj7KgKa1>z#eEHfDVA!
z46bTNwrmHM>)(kjchwGVglc<s_D<Zm0}E0+4y0RS;kbM(*uoMAHb&sE7Kp%n9N5wV
z3pR!a0?gpMqNb?5TkU1Q!jwRLL)llDm&o@Mi=ZD6S=<w1MvZ(Us8{TWni4ew|KQ8Q
z=8Z?_l)Wh!@FjuxAcwq%Pvwezm4~DD3Y!24k@VYz+^*MEKV~Zk((jGYcSV5TbXL8F
z$cULU!|{5LnX4QN=ffgZW>9R~n3s2L4(w<L<;Y-<#2P7jk7lI;OnDfQV&IQEa=pYt
z6J3Rm<|Xh{ex4L*OTe^?9aN%TH;b>K5DWdjaYsHoHE{^0tpH@j5)ye5uQDZZxHToy
zSdWRjB^JRC&Gy-&-d=U=mdGH9WU4M@2$7oTlSc6a{`4Mwdt-6jj$vLRMy>z6|D??!
z**rAJcJ$Vk{#<X-3z6ZOX844RJpJ28PFf%S0_~va6@EZ!EEO)6hwsFwnVJIc9BqYg
zL#XzxBm0nsK`V&}5)#LH5kqcw7b%H|z=fcYeX&f{4h7b^)4eb#+_0b!!=<x9k>$2*
z0NQEk_9#awsZQ!^YFp@|rxWvD&I1n-s5W+oruC<RBt6vo1ZyESjwEDL)s#q4h@n5!
z;!Jq7S}#zgq1H!rMbuoMP`^@S`Gam7i;Bm`GU#fmKw)#NcA{=aB$}j->4mNtXF=t$
zpjwbwxq2H2sJZ#2d*S_LFgSicT2?FDz>Jh_lqK!=iEjWL)(2;GR$Gsk7^0UJR(^V*
zB;%RhLgTLi@M5~BU$FcYs%4?cTSq0Zqd_b<8H5Vq2e^|_ly+Z%zqMKMYWyb;6u7&N
z?n3A%dzi6hA{N|<v(9}W82-up(F&0yZ2q2I#~ko1sxobf#u0PPWmS%U-AL5tU^1sV
zPPExO+B@zh^zo$T?WjZkb=NY(kk%ORNfH``oS(n6p`=^YqG408uurEKOd-C<#R7Jl
z{IACTNo-nxER)GNc(y+Mxdry-alOBAMW2LQlUN=Ccm=JTakj1ULSXLTzrvBpsFyV(
z;_v%LKQJ4qRqAQrNR;c2f*K=EnKCo{)T~R!XE&prP9(WsESqWBI-PLEJAHa1|J+Q@
zpMfO*Bk6VBG_JZrs)ZK>5BO1~QAB?VG+yEb&*CS$!_AuYmK;k>wi$>j2l$^p78ier
zBrVy6&*&15izMoU1^EkDVckwrgv{%)rf95e{OsZzg+c2OadK6DoCxnkxj4P=HS>OW
z%hUCkV7R(^NO06uQhM2SSWsOp7<N4-5x;>U<*?w`&`YjEKaD%&dbC<x9`$H&^dCWq
zYnx3qJ+;m}X5G(b6LwPTQ`3hTeKz5)Ih!g*a=m%nYA4VwU)K!GWWR(mJODlDn1o2Y
zDX4Sc*a<08AM0eFW85ja9KG7AS!vJ6z|M4K6~5BSSYI+rf6^IfL7!dGDVX~x!v)nH
z%A`e!YmZJ<6-5LFqY=EvcUzsWD%4vx_jl`g1pTiJ8e5Qm!2={lKQ)dlO)d>HmK!5G
z?Y9UPTbo+yT5ar-ZHZQPMs9_9F1P;K*lJ%Xt^BjBr43jkqFY2|?p>}PA|XdBYZneS
zZh>LjB1og5hHmhqRdz;}WF1i%(gfYXF#DjVo3jfC9k;;oP2qvXHmIwY7^ULMU_@@T
zR~9a{%VqdBu@X<&u49@0;Zn?h>7lMbfxm5umQ@%G^stC}3PuIkg<3VcAQ<dn;}No>
zf~<nWfo413y^=J0_4<{WxgPrG*J*tHriy@$0rTxuI>f>P2QgwSNrJ)vwo`Ci`g&()
zPYm4Mm7mwu-IZUkX<IKmhU2EsA2UZ`-o|Yc(ZG#-B7yU%2)K}j&nN(-qNfU$SA4sr
zZkCiZaW*l~?+$HcKvmQB89e``lkFNb?Egm5!NX4j4x5VZmhm_p7K{y=+%YaAxG`y(
zEah)?i81P`|7Etwj?n5_SeG@5ddIT1=&EQKfjR*8tqjWd&($XF_e$wLLC2~kgiqpN
z&`M8ShJ$onIwJ9!ot_NZfPkx76;pKMpf)bg|JG%K2lr@0SD=0bnd=U>I(5poG(BX8
zMs#;=!%C>KDg#q6s2@mxB##YY#+5Owl)^C?6>gY>xZFeEd~(|A5S-cMnqHvp3Wvl)
zIfX}QY0H#z1M&38)LV6GR|UZuWBm(qS}^4I5UV`Y0$!`$E!C?Wkx+!KSs4e3DNDCR
zk=ziG$%_f<J*;dY_tpWZTDu7iiU))o;oT{@$G27sN4W40MtJLGvUr(FF3Fv(`^_ws
zZeQA<|G{nj)9~fehGWdUr7F*b=7`AjCy9^}hh4(jLDf>dFOpyP8o=Sfc5xYqFMy9X
zF11ejf$uq<QGA$~W$nQU)w=M4(BJ6sN;BM6JEOSRaPHe4p>7V8c{9*avdtrSg*mA_
z?dj1>-Gx4d`)_)zHZ6em7opQC32~cCV-DHn_gUcZmblCSBdW)-Cto9pA%0C`tM2*l
z?@yC0_;@Q^rT|GTOKUWr0WT(K)dvWqbpZ<B6`Z4_Kw7V*`&e;}x3u-{a{)c_V73kk
zeCI#>LE~j`QuJo32?tqaa{k_1i7GP=y7H|c@Uj+sgc!BUDjG^$FNG89c3S-7u(#a}
z;;Tv)JWvO)W@RUE`iJzl_CYR@7_^nA{eruS&x_H<LPFUSF``jksA~<c!Jp$<m5dts
z@STWWSX;>k+n34d7~;(Qo1n2&D|bvRnHF$7GXilbcZ^Qwj*G>zvAxr{;7M9}tT7xe
zZ7eM-^+>k?dbf-A2sRjwcseL=qwMqAe|Rfu)Xe1dt`qVVXE_Dq`+MGGzuj*08T6#Q
z5PsTJ`!B7S8R4hrX|(iwBW0&qdRX{L`5Fy9FS0@5$n*%1P32#8*1Gy&giX@&)GhX@
zcbd#qWN_*&a#yCtzmb(VFQ+Rezmh*KQjMFX=D)I4Xh)s3Ze!_q(nXlIZ5A1(jaQ>{
zspiXRz5&3q>`@bbyJOoqdV2j!^!9CGw`*#{R;$ceT6+D<wBJI9uYOHVaA^ypAB5a0
zJeOO6FYqfwLOgRVGqM85<yPUG0qX&PO;1gI@-NL2e7b7=U=*`zCl1Jlxb4)tRapmv
z<4R9yy^wOZJ&zTtviIX9WoI-HLB0FAJ;8Jxh8x85cz(Rhk7UV@T#JtM<9NIvP98wn
z)3o^b>C^B77RJ&z<-vhl=zv^(#a8s<A%M5!1Mz>{s;1gWwys&v)`1N8{ME02x1_1^
z{`)!5l>=XvS~!`lVvn9|h}$j@dS_VT5Vw!!kE&2a0-nlcZ$wokVu9E?Jj6X&AGb{)
z3~gY?2f5w)s><0)iw<<l?g5J5v@~Two)BG+Pjgy(Km`r-2MZRT^rr{w5ts##&4v^z
z7iQP8n(|x+=i_uu45FEf&y$0d+4vF+f&6n%1g2E_(GdG8if#`mF|W&bkE}{)w||Au
zs>VKuec%f^3f-yJvK^wtD$aU#lK$90(X1+2+K^jJbn;;8XwF-M+%&pM62{52@DfpV
ze`_wKFzvrKtCZ>8`IcX5`apiMPZUn7K?K=?{D4gAgLCn_g-ns}q4D4mi8_E;bnbZM
zlp`XYX<o}nFI8?S<*WDg6rR*3*B(>lcgv1f#h71X)Ntn8aTb(!fbDcuOYY85)EOqP
z<B@^JIn?4yZhl1_WVcBh$RoLj!p9IaYE4UhWjQ-lLj_yL9H=D)Kh;|37bF}Smu|R2
z;Ii5J{13KB96DR|YYg)A;~a6_LTjXAeY@l!Hx7)srLPeNWOWPemLYs-a}`xIm=e92
z8x@%2R*d37YGP;$z*3DG+gQzY=5I%a(m05M3k3)U%Yk_5CzN-D@Q2syL>l!lEj}t+
zSIAYq(2;XU6<59>&1#bD5(Z?o5bI@iquEtHE7F@FVgG~U&anB}WzLv}w>YcM@?lpN
z_}airFOl8j^qduF|Np)hE?2V}nrU)*6V1~hyb{QPn?Tu2^V)$(x#{3GhV_jGS>XN6
z|3oE2uMpVtr9drwaNH6$J$sss<2tA7ES;^9u3h*fWW34gKFiSlPuT8id_ysf!!Dv3
zJ4ja~`QjRiXlza~&D23gAKGUw9!4EDBQsEM^$VJR)skhdywH02J+SP1Z23me@i3I4
ziJdzi$BOZbp{0Bl#1b>*(MX1z?FDCdzKw|bV5(*5+t<X8vZ71&39_r?n?nrB2(6%^
zX`7nzV-%7AEF)>f56F35Mu}*I9t17tn_X;sAFgD7Z?bjYNcw($Y|SouPGP|mB&wRU
zi=>{MMo^xyp?J~|P9lfe@T^RyTG(%tdcqId3^hEEl~&qN5h3Ywj+Eguf)o<)3hJ&i
z*mgYGJ(ICrw=!lmrZ_jO$?YOMn7>sG<er-QldXtvJgUrY6VCIbwktE$XNYyG4p1e<
zFQOaE8?d=j1=<gjsmh2dOMbPib#$;gE(twnlXK-xf<Z2~P64W*g(^qE24h_L;(M+K
zjK72!=_<}-Yh>>S8Q3p*g*{E85LzmS`&dF`P%iZ&I6NOpDo6OW&;3_dSUGToafX>z
zuG(52qdnMHGOJImJE1P@RvfRuX0_pKg=@zd{-=Ot6CZ)9j6%{BC8~@p5|xsTLBdo_
z3}KqgD<z3UWh7IGG`&BXoD>+0A?FnCNsNp$B&+X22w8=<)FS~=eB<%PhVnp@=t2eV
zhk;}G=G4LvkoOt>mXZMBr@r*-0;P{W0b~bOBN6p?Z(+<@7#(Y{57Tl(c|3t1@hyu+
z!RIKad{;|a&vSGDopQU<spk6fn0zn%B^C}XWw=L9`w@f^vR5w%f#@7phJr#jWgDR%
zN=LZs#Xkw;Uray`0&=Czgy7>-1hYykviDH+l5YB9pkD8Qu7&tD!a)usJz2D?W6)S<
zZve!Y`1a&SfYEVX(gj}lMI?hJ!WS8}6<C?RSupBCz~!bKf7~LhCA^>jr_-r9pt1_E
zY^aZ9@~LqcIEqLw+PPxs^bR`3Z<*5Z$2WX4L+Z0nnTHD4n2<(Oj2FvFuxc%;P$<OL
zY?@y^8Hn5l+)o6U3G#0oe~<cvcHLhQ)el`&N7V9xxrh<NG7sC^U2?H#q5Vi$6Evtg
zm<Wzw(l)oZlQ+M+die~rL&GnGiG)QkH6P<(@L672&L4I*E)ivralB9#n|DhY2WcR3
z$u{6;1z`c1P9r<;w8aY7669}$=Xz!a&}{*YNkX|)iYQ(rjvy40d@q-fs3prI4TDz~
z))70wKGW`_76~l0tL2VuBA_^po4Wnt_PF`--iy5nVDz7Cz7_DFTnbHbIs4ayv()Oo
zK6}KJ%7H!{uAl%2{C{QNIPIv4Zf@g2XE1tQcA-_59nXU=%<<ksA7($FiM-eQ&03jl
z^Xn=1XYf5gOZx!&sWq_UU(DOV+bvD^qqo4><<J;90wuz)LM_XY8*Mz^cfyeL<Hjuk
z8jIpXtwm&^0cGS#WZ~n)BZ*GX8K<@#u@vZ^fjTAuHujsPIH_W%#L5@r6^D}?dl2MO
zFV8Rg$y*$%3cnCuai~IgK?wRb>&@$xJ=1*qibF8}O9UNvYAY5E=Ynx4^B-^`#_rU<
zE((dyI8^kHU_k5bEB5FeznIW*U~9IzLEAN-1LCLJIIb;1$&@E|&+0RmxC;JO4pPan
z&4DfM&B|K9CQdv|4(}M`+v7Xxwoy)5<{X2i+&=9C8K`tR5jj#(Jsf??CFQhA-mc40
zTQ+8=0d4Ca*F<}Gnsh=lHHsbLNh@RxLU(xg?IiVjRLB!UV|4z66E*L$+JGJ&E{NIW
z5vFNihjfq@LD%ZlHNl}ShDJhyIQ&fNOiD*t(l*~vWeEvmh9`(bkz><cUrV+*1AFr{
z!bw(5v@R@_gAF}jZ9!uWz4G)&5<b|CK_9wDKq4@$T?CuLR(Zcd;CNO<m{mb%46=CJ
zSb<zFgv{{A?%M?tq_9U4<Pr?}sd1lPfFB`DNMuH2n>CY$jDpk#m<y?zMF=CyXqly}
zmuIyXF(@o(Oo|V0J2`FI|4Q2uiMjdXllb1qZlAPTNxv}L`fB~w1!h{&IL;ou#6pvc
zsP>I;libY%(`y#hRd?P1bjVE=iEEQ2dc>ZA3QaOniKAzNZc@BySxyEN_X_BcN}O|3
zT=cMg$gR>?MIw0$9lH!9;C35J4lTcVmS>*Kp+~{Qf*9v6nrXBr;pXd_Ug<dHmP%T!
z27!`)zu<28hi`o88<2Foiri2W6LB{!?PqDuEr;F@U0o(>vMvC9?(%Yrwk~;Crb}9S
zZT7;rw?1>M#~_qHzgurnwg-^A3qe5=k>K*ob;y=(e3BQ+m$!rxr?1tJ+LSQCnF+5i
zPbF3LgtLJ0pej$W%RSeTvvmEFe5QPPYX}LabqglwYxOm#jF=6i#;>x&=D4!EH$F~E
zDxgDKVjCYe5<S8ojOg^Gi7Bs$IZl|-0HnsgBNKHxJ;*s?&RaK<=n9z7W>4e4RIzx+
z&w-38H=hE)zHMY}DTlRG@RArVE*|}Tb`;o}knTZ{yp^T;g6W2QkQ+D?7T%dxHQ*<Q
z6<Zs<wif`AY9D^e=@H>Cs9RbEEm<L?gp@!=h3_L`2)57RnUV{}q6!w7y~*{f%3~GM
za1~SHS^7U35Q|>dD3D3afGnrL&NLWmwWT^5Tuf)a%&q*YP4K_A3upnIz80%0VnUi@
zJ3e`Y3uRAXhXF9V^*?VuSVhGbnMH0v7LIm!>n3*>ZSA8*nyWKBl#~||08H}F`U(<L
zR&5j+5NVs|{bZv!M>MqJ;9Ac+gO!v&CYp*A8N`&=UOziAwe?V7UDx-uB9h{wVpQ{l
zy#BurT}RH;)sm>X36u?z5Zxjw_WW`HD4cUt`G#SI&c7L72n0zkQ4n&Ci;I2-K9uSs
zkACO(aD=NRE=~KQ&^6f7^rs-3?WzNP#Zb-hWGktBOep5U`rT<j<DV&u<MN%@=gxXu
zCf<m5aVA1{*&Dz<`jo17JLyL;gNy`c7ZP+A(g60syG^~0QK5CJs)=;gkL=QNAfdDV
z1~A~wQE#KpXlM$guB65`)QpM~?C}j#6%}zqqCMWGaSro{t-6hg2W6Pid0>bTFd>ef
z@W#Vx{kEJN&;zcbAuEO+5i8i?8z~kR`Rm_zhqrO8O+RSG@$5CJW&XFlK{<Wf2$(RY
zPDTgmo>OX-3~xv{^9XVyNFv=`V9;YS#&&uLZVMA_(a+M67#1Z1T84BBvT8EITjvp3
z_!nh972r=Z-6T*lgOgx~ex8MpP+*vaBvqL6m#xsw$G@lqzR!+X=f}cnT<1c(WPn1w
zsd8q$^|{ozuDQtz=)3e77aI=O4zf>0s48>axP=t~+SuC{q}6m9d7tF_v{+mP_cctG
zc?uQsR5v#7T74&!?*fjiq!*S1%1~ODzYp=aVpu`I2uaWI)o=>4A})HnXFNdaYt^H-
z)YT<kV{hPE9T+Ui*3`?!`w*AKw>EJwFGQ?3G%WffhUKbt55!3aE=2{p|5=x*-w9dP
zwVT0!)YYBS9pr)dESIO>J!0ug!{ix<8UhutR?C+dGu>D81Y0lO%#E?~$Q&HnJCNBL
zPbibVA}#(=RF!lYj2^~`q=Y$^*f)b0ukn~m%a$zGHV#w8?pF4nwcVn(mrg$bV=x)v
zuXJ>r56@^IS)}}B;C%N2gP6HqUmFvr9>xft7pm3FysFT~3R1N(IetV52sjg;f*b`$
z(UEe$atG$KppbrgY$ps6m}85BcSAw5)@u7itnUs_s7s1D)lIfT)2p@jsp-LhL^qwl
zq&%bJ@Vas^jguBxKdgfI?>;s_&42N)KckYAl<X@xK*=A#&cs48Y*Pi<XMJU7(25?^
z8|7c9rK501kI>wB5LXT>>7B0h5kn$4A=biwT9#exDOimvi_<JQ4eht4)eyXveQluO
zF}^8o*0eXE$aSBclkKmfb)+`ffrpdjkq=D{cAYCJZLXN|%|B9Y8q}##l@Gs?Os^m%
zr}zLrK)}D{y~_bvtl<dR1rNe6w;*)z*b#cMCVb@N%syQy*T4di)X|d+AtQ_snu<2b
zW?g~9P^D&|uf3C-!W-)W8$m=S$sCjnG{zdWDE*`STLy@EdEO$3SaEl@<e+Pkc|<>x
z93_R)svfB*^LUV`Nmxc>QCW~i)w3L`|EX~i;QA%gF-052`-P3pcfLuHYIV~9llXM_
zW9LVm<If)90Ftcu4XUB+8`b^T9NuPxDYFOm+kE$`!TT%Euode9STi^O@j{NH`l&3b
z{;yydGdGy(K#{nba8=4;3_72Xh@&i~c|`g`iRvFEAC0W8iVgn+LqoHJDGs3;qEU!k
z5{>c4cMzq3+I}_m>6YkkOLV`5mPC(2iJN4a#2v-akw0~S3cT&GR%q487j05T(I=6i
zsWUH&A4-mCDn`zD>y@dmzcr>m`-Bf@36rp6Fy*CDy>nv)S10VVTOkwGi>a@4#(_w~
zRjr{Je~;1`Ku)S{#J}y;X$yps2hPl&0l1{_nd37cH2m6RbZl&*&KTELE&e1%(0)4y
znLPaXuK4y(*>HQUpBn++TehXm_qw%gxTfRP*E2G{9&>9|@G_?j?{+!c;xdj9wX%^2
zGf6Q7Au7cnknXZ#fct0<LKya}A_%gnn~v_P&w|dTON~(_rv{yZjrT09J#wR~5z@fc
zNfT+}X{&6)49>BGC~Fvnri^$`O+gdDChtc&nQlZXyfpYAX;RQwQ?k{;Ii`s+oPb1X
z8u@~0_AA@_u>IIRFinEnHoY?4hXZ2wwiE8y9iKs0Y`=W}X7?F)Fzxb?iwA>crb&kS
zX8JZBbR0uq-o?*ox9HV6Byln1%XP&h90s4dszp;}q>&998NWbVbxdX)!Pv*N855mW
z=ymu;s@8F~4$kQR;Wf;0#UzXl#%D?{fNcl^SN{ydSqWpIVOwKZlaXVdMgF>AtTm@~
z9B~f3cEG$4p>BPyts@n>cQ3;^+7feFkWfBs28N;T3veCi>kgPKA`!Od<l{SYc7j)f
z!?lY$JLFg7SEvZg6_%v1t+r-^HhPE|gq77kvlfwRShdAOqr#?&01F!1)hrZFH+^VD
zNrD1ms%aaALV$>NXEZ%+HnlY&$=H!l&(2m90=nbY4pUoWpU}3}4S>t^0<`=^1wlGq
z#)t#~bEmC$+D+|@L7Ru^tQCNg-8M7nu&58O9Xd1p!Y6KKDf?{*n-c{%+XZQBf=h$&
zmu330XNF9akh)udiOXNQ)^ICbhixenDGohW`r{ZgCNjXXj>bccDZO@OgNU}WPCLLy
z$A0-ZCfv}xwcMcr#`HXQ4iwEd4q>_&Gh{q;$h`>p$I0op3E;FY!$X{G1Y8?;=mOLc
zA>6_p<AI_v$8ZlOSNj4lrmm`rd7&M_7hacV+z~9a+S)7<{_=r;<jVSF-MpCD=1(%M
zK(<`aw4o`9)9^x5dviMt_|O{Q5n3jH9G(7{6c+(9lp!+ykC9;Yk=5SoBhz1Oh>uoX
z>$^~7k3PkRGR|22EJOVA#F^_K=18){+pEF#<Hlr<A;p)HvG=JB0m!1!Kc=I1RNvsJ
zp3bo+W0B^MB$&Kw6HQHv?qc+<oPtm^iwflwBp!4nH9dg1cGV~#@i<eG)SdUb-hcR4
z@gS~#!@&K;umcb`We;o_IP~si*2cI<?@e)6SOG(smTR_`vcI*UY@+xB*!y)zgCVnj
z`rjV<Kk+bf!fwEA*lrIpW<zBt@6|nT4~KLXaL?ej{jL5|x@OD71q?2+HpQ8IHpX3L
zp?76iKCnGr2oQnRd25dcz&Y!v(f|;#@R*!ybGJbGIl6r2Z|$?gO^Z*9SRPGZOm#`{
zF~q>wA@OTvY=T;rJ9wv>X@{UBUNgwg8XMA5M&$rPawj5@_$DzL84q&7enL)Ye<Kn%
z@n)jE(3Qi;VkvBx0y_<!Zjoi8x#}dwD9fiuogo0UDeKy@6XSiF4>}Y$EMmd~P27VC
zh}pKH;{i}`(MBIfW<%yg@Oi%+ap!Q2IUKnSnTs<yYT}CZiX9He4zjX8Kgk>gIC$&5
zBIJ*`g$I68iVn@uc8I9URgB|wd=erFG_(z7o>zhKnwAnYGN)OpcF1zJD!w7*u5;CF
zx`8ZDV&CQEMlzY%W<@qy7?B}B0<ztKAE{W(o&1yLyj8R&B*Ot+M%-SAMED=MgyYfq
z5AIQNA~=j(gWQWI^WWQE0@0Jwv;-%*I5}gm-I9n%UXO_YC>*9d4?|x5AuWtY^<_jn
zaSm$)mBsYjIeip7;_uXDpRnyWexNMub6Oq}mJ~8hn-M%1%7E{uFTXd8l%fL^^{J<#
zh?p3URq>4(jD@nrqrp{KAp5kY5l!!-n5c`0pp9_Av$vkR+Z6+>6*E%C**_gZa;=KN
zS|ct{Cn156U$`LEmXk1!F9;J?d8NsnE5GBOEJXj8oiyy6$IM-j-L>dn03_BoHO)*F
zH7zTq+e%SjntxjI(pot^jz$-hr7V(NYL@|D5<vpSbZ`J=$F<G$Web{y3G|dQ6w(6H
zQy`F>wv@)emnJVNIZA6^oLTF2?kx&u2KeXF)MViNOyGlo+h{~Z(=m*Um3`a9dTacf
z3G=yBU)5Cpm!v>GUJ2A(_MYgiS$f5<_pkpw3UmItC;Su1y7t@sd~@K}e-;1#bL5Ua
zY2W<^LznUIwNp69wm@Kr6~^;}{xvEw0J&#k4M<Lz*EiH^SY2BEnhUDQ<*aXN2Qr5F
zfLGT;&swd^81o&BjETDwK0<k0GxKWkc~jPL9}$=5JEsSD4*pOYe>Wo$U|6=LUn6y_
z37iOv)klYm&k|b68P7KOH=SKK_$aZGA-3j*$yBgkrYR*F^Ado5TZn&&kqCcaUX|Ua
zI^LNly(}$1*)jGZoPvlhXTk4=CbCUKqt(vJ&wyU6Xas=XLEB}99fr_qelUN~>Q9ex
z9cH74eCly5UL_0#N_|}ueK57pj7NYcE9#!;WaX9CvKIy!H}NDf(^I{uY4`kwl-;*t
zY*4`F^2W;SQ6T#;@`MtD#2pd-%N5aBMw-4Jmpmewl52h2<Wk7H6gr)pYkohLZG;Wp
z9K=7Zd@nu|P$R?dD`g7TmL$IF*Yvvj-7>h*I#*WoW9ds<+3i-qKq#P%^F$+Dws(Rh
zE|N|thuhZI_~NE~-RvFO)J=<pM{g#xu51;^pE~*XjUIi%>RpKXw8BCN`H;Mz{^Hf+
z-!fZp5xNeC$b2#dbc_$(vAy0&cDFV?e1X%R%H3D%i>gxi!rFrdj+Jf9b`s6HsfnZu
z=vHfWmXr_`4*J9=N|G{3=KKb*QxS&Tqz9rylZBN}P6m-{uxbh1ie+Lw7FiS8tcvES
zQ7fri5>r&;Rw-I@4}KjdaYVq!-uC|NFscib_fk$h5#^8-h>LN!wD`(DT`C1HQr|3^
zb_5?69EM*B`pbiUNUUfT44L(4M!XQ8a(uCdn(1n{<zaI23Ip*u42a&!0B^~iynm+-
zyu_vJuK32ja4r7K`EmSWS{!)o$}X>MWrMr5<baT>F*Tltt56nu;Gl8B7M!+<rgNj(
zG_I6-&1v~eLUCB5wE7IW+LijR&Im?cSGenDHjZPbY(C{+srXw~wc+Psf~7CluH}uT
zc|mnww^S{FxbnuJKlJG@1g4i?0hOuh5k861Tb3`2_-h62dBV<<y6kb@r8cbEwlK3E
zr87d{i%SSvC#J{w=ZBf5-_7&*De~~9LHowrZk5_<@u1c*64nT!kj?o2>WnTri&70*
z0^%xYlMW*rJ^z0?I6}{5!=Or>?|{%0LiV93PE<q~kUX05il=(Q>Z)*H{&(ueyilkQ
z#M$2;;?XsFnog}=uqS&4*%2k=nFtV<q6Q+(SG*%oS|Xz_Fx*kND8qp3D}LuUqyjF+
zWllwujK2j-&muzp-Lpx+%d@9?epw=tto<K-a^tizr(Uvw9>W{rMYRdK$!)k0hi4W>
zI)Y`!N}QEGs;~9M%A2KITVHh2hxCKmFG@=@1Luo4{O*viP25dwBZfG99UGggu$n<E
zi65#&Lo+f?9Rvj(uN^Sj+LC^~kd)utF*%doHp>UmrrV5-GvW^RbS(sYq93j-F+jGd
zslA(~U%51h<(1C}BFk}W*%urJt?wYf9F_7)PIT-<GTaAPFM%5#1Bt+RWj}L#$euQk
z3->4waLWh9!|0Px8!{8Nq}F^oI&;qgjL4a^s0_iaBfAe~=x(Ta*xfx_eT7sL+$u<G
z7hfp31i6H#mC$7xC{ftXYA7k5)*m3OOi->Uxa?+=Qt;(|UcwRu;3+QIC|(b@C`SlI
zeRr=zq#U!+JNeX59n4-%xfaW1Br@Q?WxciJ+){=AxLm_KXL+OwKv$)--)OxHaej-!
zZsH$j(`&Hv>o}^(f1Y{pTZdZ|4q%h27!!>A=#}~MCEVy4ppoBF-u$U3IBACT@3SRi
zf40EXKr$N9#aueVZV<G=JvXKJznK(8<lU7L;=QGS_TfMI<ABDN`XyXXzu<T$gFcy*
zct9yzUX?p{4<>qWyC7bnT$Ryui#;B05WwwpF1pxgY#^BgzHDXwv%e=hNs6^sK-4a=
zO2CiV4gUOZjMZmxZS4X3Vi<%`a%#-g%3p&(d)9*s`IYYPqN?u_L$ivT#<j-&OrgD=
ztTn-lIYNTl%&!8=#a(HREyRHh*AZ$AaJcPoQpph@)MjqE(e%kqNN-(5H>k`p*)<(h
z&XL=OhN4(js8Np}c=qSrBUOEfT;EpzA=W*HwSXd%Kd1Og%s`t+6$1_6r~LA>lPAJs
zJ#!RkrSeeMIs4w9tOGb#S!kX`P{h+W<Ifbbn0|H2kcw3eaCExQ@XPY?InM23J0_;p
z7Nf=dDrh0sZILbgdqWDLhFF^_Y&+{L7?(_QC&$dc{U3hqvQL!=1VK*0YQ<p|5GQg<
zzg(Ozre)WDFk=W^1F{LpVU>X4b88y~fA5xfn{*_fKt&GQgf$?9>XE8`6<tTEw|FZw
zS7fMGtFMAJ7AZ9BoXNQEUtLq=CeI#F#NiA?#<m+3u)8&}_7Jtz%m#(LHw_CvzQeTQ
zknLu9Ip=^!1V^DnJ2^<`dzUAw06pq|r<28F;o@OFpXn#7+pAxZYReI3-n<p?j4om-
zM&zt&wSdaFztfL@EOAaA7I*s#nZbl)`P)XX`+T<}B(x}`5?TUipnQ~?Z^n2tSkYao
ztYP_?vd3QMBzaRJCaWwb%JkU0@?SqhX*B@7x{kfg&wnhQ(tA64#W{|`!fc$u*~PDt
z7IsW>K;V|_kfWiPpxYqeRXDb|{kZ0;kY*4iXS)XMEvLE(n=Y{f9tPt&1ct`j2ZhK4
z+i3j1Um;)f{<U5>+0E{_t0d{Kv(<kQc3tu%>?e;pfy===n=^^(m`_&##6_Lf;YYu9
zgKIp!Fx`R1u%&8<fa<V_TO53tPx$tZEf3M9S#nvNvQ?>ML47rNwgM5W8{SaMYFRyE
zl|cp6LVNfU!A7875l0>=`)Ejfl62-xO26$N@3|pyj!R>^Iai7^se6Q}=Cog8n&N{z
z5A}wUpx!AlJVoSFr@+-H1W%`2C9G``u<hW#(0rc%0q(}y0s+YdfL~rg_Vi{<@>HV?
z)}{{C^Xw#VeOad~5bk)L%30D9d~<M=^qN!o$6X-F;}HvJNiP9nl9mJSyPSJ3=@e2!
zo#IXlrr;H25Qx*mt`oKxaF-;-!!Brxi6`T7o%>)bedq*+FM%zJpv2dmM93tp#cHQ7
zNq>X5@;v;JVrqpDprmqfBg<hrHf}2~sk+Ebo<*>92mq>6<GdqvDhrD2c1Ka=Bv9WH
zvDhWb?vT&8Qme`X#%38YVLkxA;7PL%(_+HhiAaHPUtIH8Zcov$nF313J#S1t^nJD!
z*nBfr+Edq?W<ZW&H0q<jn3mR59Yq}BKy%#{{1kasErSMmkGyr8PS8b}^V+ih9>~Em
z0{+p1Q>6HU6azuLrLrpur?p2h8n-C5Ve4BFfVS*uFVD>=9eeou11OlSDuIkYfXZbo
zIb}g575i33$#FrDWW3IwV{c`fOVBeBYwK%5CDra^bCeAHKS1}U#YLR!ZqGbk`vF}M
zMbxH=gVRKjg;}eT5kopvkQPA);X3p+V@IdRNKvNi_N1$sR&zO9P6lQB#|V5gtx6#$
z1$BxbC5j5dbeNlb9nv}sl)};Gn&)yX6u@$Du8eQ)vZBZe1uC|4^+y}5T^+0-57m~w
zB(1pX7nIsegfm%gM2LO@@5{4(mna*nNoSdp`!r&@7A2uzY!2CI>4Ml6BKHwj9SK@a
zAzbSFq_vvDu3tI;ek};WQXV9jTsW~^U;fNp<WERo=Wj_08o-u=0S8z!Jyv6W*8l$}
z^gcSD3%oFXW#oNW-~kZ?fqr`YnoatjBJ)M1Apb6n&F-EYEp*pq88+p>ZuDsJJ|HMO
zh>A2>_f=hKH)bJBCHL`!Gt!t<xhCcrBk+}>#s7KTy^ua~A~D(@efLySNP|jiKop9$
zT-Y}PGn1vN--Doj_rb016Yf>W+K#&y@d$G#%q5|OrR@td{py*kDw0%Ek1B8yXepBq
zWeFxpJR7-A;ZqGZu-6l4rMDT$5sm4pPHB~A{J-~>ny6!_%A7l~Y-6Q4fN>@Ky}~@Z
zIGVVeoM(>BC8qwt)O_T94(Pe0W2tr&uX38yy1gH_xVtKoUVzm}y>)53#j;lUZ4Ou6
z=3u(wcXVvc^Ywsa2v8REF;FKz9phTt-)?t!Ln)P<*N`x}DKN;k^nj{M(4k2-*~!Uw
zh;ZbOt<hnQ7V$>oi1HVZ>0-HKM{ID&J}{F1o40~XmV1;idXi~YVuINnw<%9x<t|{s
zHjX5+QnTH@l??$Mh*nyJE%Pi>lmNG%6ot;9c}3(tDqnVBP4R-hSXPndMQ9QCyLbbp
zyNN`|;z$aSDiyLw!UlQn3b@LPX3G_X`n&n^KJAPP(1AD1vmkj~0@O1I&B^@jLNonc
zjcZ7Ff>vbXIZ$1Brsc~h)}0YcwV{+2oJuUFbp9Uaa?OkL$5Tqg4Q0Gl^Mc#)-M#x6
z0F!M)^1cy7NEEnImBTM5Zzp0nHfXU#fewBjLItb-s)5$fb)*`jyGT_#Uri|}qmM>O
z<a<|3Pe{`1PlyW|<U68V`ao!GmEm|qXfT9G?N(-HWZxMCsdvj^q!-dF);RdzPH^*?
z8nBxO-BFt!NdmaDK%JAS-jSdRf^G;G(wUS}L~KTakv&le{3A}0Ss|Vc)VNYo66m~>
zszDMPcOXcsJmc55^ndeO7g@Vzt3hi7h|_rvbdL8^vuFU8Q+Al0X-FsB>Z;N#pKLqs
z@%UfjhIRxPbum)AiaGr@&QI4Li$pV=h7<tha-eh7Mrf*)FN<J3Ks6h5pH`vY%9)2n
zr<#w|0qOpg>tied(NMcO)QqGx?SHe}w=kD_n%u+*SbOltvK*Nz+~|-#X%o$X@(@2e
z;Tasa;7fOK*{45|IJ5p6SifpUvsiR=vQHoDd!oYKTF^>W?k!zB<s)E}isT(QhSZgz
zB#AT*%KM9MN7!Gdx@a<&vu353LK>!Cpie-kJ*Aa*5r_%ZvAYe(olaOm9swIDmx?EE
zZUijbQ>Kwr!laZ<e)@FE%}tF)k3r>BXmk|XAwOgV#){)YmIh*Pwj#E`k(J1&JQUg>
zCwa9)pYz2Kj~d^l@TjQ~2@PUC=S2#|UXUC?%z{0pFnKh8jo;|P3T#b0V+hqIo24?T
z++{%~$(fJ|wP?ipbGgN7_p?pHL!?uCS+43<bWZ4-UN}9nZ+3qTHty}6o@DcB*F3~)
zO~mY%%U;z2Nha|ezDl9sDLL$?I|7+KwJ{9KE}9Z>%L!}Q+pmQN)syTNQmsP6X!aMZ
zq0lUAsF4BsQ26!;$!|mulT&Xr1NsBX)t;rG_<x6~5}M2q_6MhB{f40h>R;-%ZuNpv
zNIRcK8jRX;6~JPk6p)_cq3D(LVzXT^nkby*L~@%lt8hVKoHqNRAq;dck;bN|vOlcm
z<6rx>`04TwxI;iMBjTuDRorI_SE$F#P0yNsL*Es$XZ0RP9!*_oV(uDn+lf*Bs_7AE
zhd&{ek<B<e={5hn_Nc72`y;0yTz-B@9aV+QywkSksy8V2@b3P%4I{`96R1_jZ1_9_
z`u{|Hc%ed5f>kOaXo(!+rqMtSrbfp<?_Z3BIN#C~Bg^lYF!i|r5roRkU)c3iun=hg
zXk~LlbMNKeca{V0rZZ8cL61;Bs>=!m_=uM|uI|ZFp&UG;L>`z3JDr09_=XEY)!UqX
zoT!zq1g#W-QJ+Jmm>NO(e=kw_xK8vjCC=cE(1As*eSQ_8yW*W-U#;$pp>x-2L;IfE
zE`U&;mCjASTG^qyu%D2@Lc1nq5Mtlz&{433$>{ZaddSbzapOu4L^*uP&-$NoIe6R&
zT?B9fn!{sOWSJTro0s?EXmPEciG7kn*$GUy!UEY9he3`do1AL`Cq>kqXeouF!0e(@
z1|b%6&HWqdYpiMYCvd7)mh)HCkuL=>T?$YL$~5z3Xm$C58!6!Mxva~VmH$Sym)3Ab
za&NY0kdm2y1WdbHn?B_wg_7QIA#a?r%50`fTujWy4E0nnncc}@L)Ln88cuDkT5@Wd
zo(WtNQBD>RFgW-+WHS32g<NVBWXknb0s291&cKkd)QKybv1+y4@bG9^nGZJSE-87g
z*~cAbokH^#1H$C0C2I}XcrQY3<VsDoT+Ny?c42|Y3fiTN%;WE}p&#G%Kev%eovCx~
zo>Hi1Co8HqC=k_81>Sh?l?UGkhZEKMJYbph-T&92oCQQ2Mlz0Qkn2g<7q@zczmfvX
zbW=Xt0`Btr5dHpPK0HrQgkP_<v!Nl-(2_!n?Y3pkj4?luZsFW2ojM*ARyFVT(_|F>
z;MgTcJXVeO;^VY@QT2CuF`zpM*&`9?Mb4Iymr#>1oLk%lgwzo=U>xy>2*|K(c<Pf?
zTHxCT6~IcYCLy$U+(6l(i8$NAY+bvcQY$UUrOU%8kqqo%2#GPbv7f+(pHfD{ED8N3
zf~3R=s8AHB+HdT{Z{Z>>Nsju+)fxXaeZcW|52D(oJJbx}f^lb_kD+D%NG0_ZM2yf>
z6~Y^#;UDcJ@RJN(*V$3Uv!fz;PTJlM4bE*Gy-t3lRkm9k({#>SGO9dOQDeSRlX?iB
z#A!^f6_&_mpxZEPy!QtJ4@e{`LTL@e#yHE=@s@cvZe@r{U#YR=b7WzX#0BfHoTXe#
zqwtj;A~iz~U9!i^6dZ~`X5)e}wT-<FZzRpzx2uK`{Z5|94U!{PWf5&3;^qldwk}Ww
z(R@zHdjsi}GfLOUgIrctdp`}(<$7@N6PtE54I>N8R7ePH9F#u0U<+OfLVqTBf93iB
ziBHPwEYF-Vnr8S5>1ZRaee*>eNg0NiDF%I0n{^A0PAW={38K=(?1ev=*^{AUFrT8y
zTt0~MFILw!&o{@ED)~&G+{e*p^3-T}1J8s1VX)E-FHe&cZz9K;STSDQoEO;Q73vgo
za*dx+usnAQQSXNJI0|5Ef;mkTr@)qpiNT@BVT?9)$6#GB84+0%?EI+bbIUw&-WZA3
zL{>B{$v22I8V9IiE2WeJ`PcIV_>WcAxBz`H!DZ6F;WAX4G1SDf30!;`G&X#-)UbMI
zf7UTMG3fDYKM#ymC=otJ;O!?ao+b4!<0K4l>C*Q(RB#`IlnmJ@hHciWPCj7vy6jR^
zf6dY`Nn2>hG+u8^Jx^_x)n$ZH7RC>*n&+~&cX0a;nPMv`h5}rx&PM98xT=Z3haRL1
zGbFA4`DzWszjoMcJ<f1hSq#<WHh~53Vx_)>pi;+(as#}G2W}$3G(G(Kna3*>rGW=$
za;FO^n*wWR=F{mt=voD@Xf|;MVk<(o-&EI5y4VIwg?$=_rcr(jS5Nn25G$I&GyGeh
zu#&t|0yjUR(w5*A@)Dd<lOJHx;FSt~!NQYopji)r_NN29PNkzU<x^E^>D*eSyRAf9
zh%hnd=ph%UH8|SxnI6^0hOl9s+ZQ~2AtaY^scE}0n0@r*o)Vd<yzEOy_;v?~<qGbJ
z<$kZjEF8Ho8})X7NyK`#x2ytY5aK*MCfv5kjG*9tFTcBfemQW+VDe%CarI4A{#$`(
zqyp~0CCvCQxQHQtc7)Jn49gF$DP5olU%pZVZ|w~ooso*rN)5849oHKIwsOV{b<Zyr
zUk#cl=&x{L?1j+9i{1XKT#=4q&L9_cl|noMS~n$<K|efq>1YxnH>AVS@|;D~v%Gj_
zkfH#y>&anz0|eY1y0|>xzhE3;4WrW81<y{bhlK|1=b1Hj>_i&Jr(Tn?_!pGwa!%#k
zFVUekt?LQhsb>~j7D<r-N}DB5(Y%_`nS_pZShJ)Id8g5+1LBaWM~!xJ#+Mx-eIX~;
zOqXXp%8+GdXWxewp&UU!^{quJ@OdeK;{2Ang67t&&gqqPppUUUzouTgdSoxr&-2)k
zk#Vd21Z24@zr$$EZ<jkG6tN^qfjrdn?cE`FMah)OXMy_^uSa@w<IZmL;Z>io7EY>8
z)TODeb~T=0B!{+%X5(|O06gglP;YRd`${y|fUGxq*u$CJQ`DmF)6`5qXNW~c)^klN
zG@Nh&2D}Ge89LwS8+qWclbKeh?uCtG1^lB)m2<RcelXWaIvN&sWp*Q&%ZqHbCJpkZ
z1X$P@zO*iFr(?wdV8<;cAKg1-vnnu9!POp1Ipl2Tnv@0DQ6@QjeAh_@IHstNnE;ys
zaxGtzb2`hsVc3V%MpDw#b9+9~pz2<cQP7X(<(2U{FGQ2t53`VobSSK5QT8+ZlTzNr
z0Q*jBq%V3xn~+B@6f7qroRFM$LtVnNp6>oN&%i4vM^*MAPa}m#AB^HX@ORDIcbg6W
z3-@jNNscyZ8%1a**U5`3wiTIGH~tA;o_FBr6$svoI2~FP-}8-9W^*yRVp}nWTvue@
zMoBX-{xQb_y0^C8tkHKBsFphwU6<(tgrIbaf&O$RgCdot!s)oBlRB$WZCH}Mo~I7N
z3}e7&-o#Idp~<v{LMPzagyoeM31D@l{pK<lwSF7ebXc2BnB^u-iPJ@TAL<u6q?Z;t
zqeMb2)|@vz$2vADqTk98nzDzja@iz~I>1H}xOtG~RT+N`x0tsZTq@jeUuV4f>v|jm
z2}T1mt|Qccnmf!gs1{)PvRv!3<up^Z1H~g4G8hS<B;X`Xh~nX>Jm*%ysG*9Y45QYg
z$`$mdD+Deo6ahoY$O6r%s9a`F2N)-AwVL-Tt8Q87T{NO{qt+a#>3Y`H`b+2%ARQ|c
z+Lkx(jZ)Pybcb@4Juq5yM3-8Nv8Ma<OcaamP{#_*=b9PIu{|B|3nqoDh6v7F8@xiO
zA`}^9B``i8qh7}CUL}NAaBX@<%c^eP0aP9UlYe}l2xph}sR;FXYso#Xk8{UPM~rZf
zbA@&6g;a9#8BnUdvSr&PlXb76xFTg?^1c9kZsCvj`A$KWrj~Fpi<Ij9?=lU+S(W;P
z3bN5>Eq`nKTu7R^$$T2!Ek4g#pu`a%j7+IGnEki%a%w<4-Dba0UV?@#e#K<+5WVq(
zsQB-ix@iAc9tXLzKX&NuuZiNks#i3nzO0wIUlAWZT-!lO#o*h@;G+A6e&<?^H9r|>
zT99ioE)PLI0InE$iCq{Z5?}^-(t7m9CDCyp+jy6v==-kvL#SkUHazwJpLyRL<c*g0
zR#Fzio?5uS#R#X1h-GfmimSG+Qe~J2R##<#6=eJroEMqK$@|viFKDIk90h)L@m-UH
zMe`ZG_Rf<+*xCSI5oHZIgt6h5-qLT$y5IBllzpS7A;E64NsI8Uif7vuJ#y>5jq+y`
z%I*-)T|QS4#Lzd7AHQw&l-~>Nq?b!oe2Og>x*ABb3z>-xsK(T#Fl#P}>+)!4TEl2_
z{IUrl7xM8CSDZA1;fC>Ts?F;<D*bt~-Fg=+U*s|-gn~X=PngVdW-RZhIF(tOQjIB*
zjxVszE{B2-Bpzz*=)zgG`NK1Eagu)s<ompq!<ZEE_c13|Pf7^x?^+@<FR%m=xg;@%
zyVcpqPWa(}drc`%(E-0y*<^Aiy0Mh2Wd3k6o&@<F&z%XQ3o+4TV&!RL`99*N7ug$1
zKabcwk_+Jte6Z75_4wIusa>1CrfwXqv`1Ej<7d96b#DHa_8MA%_+v+&_wAa_?IdB*
zHbctzF*Y=!95G{C>UKl&*ka*%BxZf^={Xf9bGYTlstFP$#)M>gGn**EUU(@p6ke=z
zw-Q-AO4`FXJ@+ti=#Iex(%21ROAV<bChH?yd)-}P^R<79I-~e&$VSrxp1%?9_L7)&
z-T_!zDhA06hRr@v0;_pG4OgGAtjNUe2pbri7Zf29L5r0>=7_xB)vSz$1Z#IMKs+W5
zwrB<wHH#@**$C5uu<_$9wIjF;jLrE}?wP~}1}5Wn>M>Rph8DXj-8BRv#hKwKRu%QG
z{&S)IRc!dkQuJpJZS(UP`s5cI-N2(kl8@Xw|0#(^jU#jP`{!WFcT!WvTY&(qi*mR%
zahw?2^yrEWbcx!5&2o=<f%?1JpWn!7wGDkExzb&V9}7F3<Tp*d!ZkiOoo=nNQobMg
zT;!yPsI{jD!Yvd{G}hUb`#GrVgmk4|xW=GmxyC(ukrS`a$@F8X?HObmD?PcXxlv8W
zHo)4XZxdmJISMyT^{EzW0*~P4^5I+}UP%zB#i2JoiQU~AuHz->pDB_S02JU!@$VUy
zDl~rZzY^OvJ<+?}N1WpV`9+3bC3ElU25UxwL*h|fH`w9q*J<Yv#WHh%X|FLqnac%e
zvGXwMIs!BkqKCmr$!C%krT8EtDnaTTIu{1qlwI6Vu8`cq5D0Xvzr^{ctNDZFcMNM7
zeBv%!%)dS}s8&QJCK_5gzx(g36CzC1fWE=78}A{F&EcdZWa1<V8h61KxW$J)+T303
zEp$Bl+obRWN3oG>BuB;HzGmt`p6aTR*Pui#8~tz(kH!E?d{yhJCfrUrT?It!Rau4r
z)`GX<GHehJ0m@39tHjm1M=)|yRA!cy@`7bz@$H)xZ-XTgu_7~a5=WZ@Bu$Yj-&B3p
z0Gy*DXS(*T4|yH*(tXwb_i+`R+Z3Y{bHG22@T3_X4>>xIE?K9*{bJw)o&qh=Qil7S
z5Hd&h^utA8fW$AOqIp?!D9xlJ4ja-5jC5&j6l9V_JiJGTbU0GErQ?txZ<F_)+VOos
znhrgzdj|R$bl19{r?T$WI1L`re-b<IZ18G4IE>MMltDQ<dLMPbFl#Y%0no~vb+`*y
za(>>CDBsHBEOIHyEGzw&C)9kiG^L4j=&&kZ*EjFMpAFVvCvNSmOTjsFi+!2KUl+h6
zxdPcI$g=$1Gy>o3DZv|m;qTGNfZ%u-c0wERj<erxlr)?=Ods4-ApW%=vcT#EAtw?$
z%=v19fKRoy2l7QZ{2H&Ekrs7KJ49^-Ef0HUfp!qF<s^p}6EiM`mb6@?l{R7*GNguU
z)%8cInN24sd+4d1Vl6H0S8kZ6PYfZ*j>$1w@Hu*W5y2DV$*pt%QExV+#a*heU8Lkr
z%Qa6}q<)1YAN`m@#^mS=sz|t<wL5W(#2u3Z;CgV0B+?2S-%uI~DrW)jt3Jsq9R=-^
zof=Ajli5|-#{n@9_jF>p&%2Iy$aNeAP~)23LN1-s;0h0^XqTEVj34*las8AErYFT~
z6HYDGNCE^7zmNis+0F{g3>rb}a=L1$?yJl|E=g4$$-st&We}ReWBWZgc*^n~>}CR2
zvszc#UDw1|Up<J~{uZESELjg<I3I{cdGCKG_paaEE#xuL`>V+{)%Kr(6T`MZ!+PeF
zPh>TF6kgA?dGh+nx4c24-T!3#1#Dbe30`YxJk7{$zs;y`q>Pk}rmGvDdCtAbXlNv#
z_>^#|GQFb`tM9aqgVM@fZ?7T-sVa%Y)E}_G1{J7bC0j3$D<lx@gdB?*lcTm55_~;_
zvR(yfX;C|^wMX_*qz#v-)%Bzk(hTL*(#Auy?7s_#`Qo<UK@?c(xma6qIyk@cR&ZSf
z@vu~?zf@Pb_`D}?2G>>+kGc;?%l0>n&WtyfRvc*9wQsBe7zU}(k8ETlJHT90pzE`U
z43t==4l9wm8AfW`2DT_!wr5CG8tvIESvY0OPvi1CZs9gbTe2+eSscExwABVw;36Wz
zaxP_<C6_LcgI|9N8RV4t-|9;o_BOHT#9Je!z$%{qk*j=>3d{R=80UKgogGJEd|uwh
zUf=zj<8i<{;OGDzvG2*vsedBN;#B&vKI&*d9<<kN+QpLV$kGWGV*w>_^h@*AHw$Yy
z0xtJ#Vrfm(CNp?{Mio|K`^@?jPx^IT?6_y($$%Ly3H!~~?0X3j(~epH8^iXs6Pu(f
zEwCjK*p3Ja2}h6JPx1DqB1AGRM_N&^)lO7gyCS}TBh^Zb`9gw~b8Z^m)eQp;VVbD)
z^y}jfP%Cv%`@VnjyvK42;F?nN!C)((f3pE%0~F}~@?St5N80ovv7(MYV+5`rIQcO*
zD{7Ct40wrHSxY#b|F>%Co^oK0UIhQZc|Mm#<#hVH#05{2`&>kRYQEM&D~ScRIwy8H
zf06^ia4SK`GscIzW1xN}_b$g5{_ncoX4`#l-*Wj;ktD*z&&6U$<9)FGWx&{Wt7!3o
zTPS12D@Pr*U1T65l_m}Rxa-1GkPj`F1#~MmRKPnJjBHT}_=80WtySS4`2taYM#k;{
zNvV-V>IXpq|3^V$MJo`{vQK`S=88}KuNjM?X0TadywW)Kv@L7uYZFi6_R9DfsZRkT
zZ(fc9hRdS1^+`w*eG@JU49BSA;0UuYI~X3~M8n(RoA3^>0X-xR5fD7ojRuzCPv7`V
zuo)Dxu)NC+wIFE8tV{uY^3v=PZbC6JE+<+SlNt<i!~(=c7T7s1y#KvB&K~_pO<eWP
zKv(rf<W4YCHl2m7&{)TJ>arf3;gUunAU|}m)*0xX6KV9l*y_Q>v{m$P?0Lh+xCX^r
z%2?mOb-NUqbC7r_Z(&%m_F0<XBBxOiw+#UdHV3s9x7{0gd>ke~P(B*HyzrONc5wu5
zLcF$oT_H&mWPl5}QMxf%)Fyjs(M38X6ezobRZzJdb>NOH73F}<n<AnR{)2c8mwt)H
zEzZJh-hz%NNZY2!8Ec`5nIu=S*#*2fI3oTb19INn(2*&ikgw9BR=aaXfvhW5JR>bm
zilK#?SOVzJ_{|Y0EUm#*$EFRVbp!k&(mvG#oR$Y7wbVV|Dq`;X33(!3GSN!&&PJjQ
z@k_}_8jUSwRf}c$#R?rKx5Bf-DXwh0Q-Viv(JAta#WHublx->gyD7+sjP_>%^-6rN
z>5be1fcwlE(f%^=I#rxN2b>ig4LMEO4P6EC$MI|8Bb)@tgvHVv_PXloosz1+_us#t
zB39X2zh$q>uHA)N$>r%$iHo%C=G32<bvpPabfO-~?Gl22e~ABQ%OL?;f5cg5kp(gt
zHUnXi8UOs6w32s;O!L3A6EJOeb2rsV`o>6`jr(sf=aFxW;n$&poAf7X0qyY#Q}}!B
zZhpj?>`jhSPHN2j`*SX17W#MgYAk)F9M#65c9%U4Tm+CqMetFcP!gu8xB^<+bF(Lj
zGJ79M)BJkktfUcOl^*I<(!-MN*=npjUP9%k#E8qeD%E44ic{I8iH;=9q^w$Kohp(S
zVSIKhS^KR)^V86lm})4@tB~iYWa3Dbs<WASo(CWu7Mx@pDJ!1lWpN&JvR0dACEVd-
zwDQu{aLJ1$`K2xWdQ@I;XU?5PJh1Si2P3DVEQ|Py{MrRM03QNR7%SP?Ick#Y8|Rmm
z@yC2AobmF~b-bMX3E}y$^ufAOc~-8RNRDRWs7V?wBP~Y{Au+$ijFP41BSGqD(~|`a
zQFG+U5fxDdFd++v{RB{KH%OQjR(&B(VR}QJNr!T<AyZHeZPB-m158+EE`~hs-;W;8
z-iw0mi&sY;cq@G~{Mxp8Ut;d+NOXsv90r_K&5FUX9lgMYYkD%;ra>m`D>srUO5>g~
zd=92<!?QW$jlFxLdd(fI>}~$u&AMga6A|xT_0G$rV2d_LkX-qQx;R^j&jtFV^gKn_
zT%u?Gy?exB-2dj{DWrtOUsRI;U086R(mh?1z#(rU8Cm2o+t<E=rhA*nEF)<XGyBFc
zfoq8TXW;j^j;vTEQ<Rn<Zs6!WG@32mH##!Oxv=cPi2%9>oxPmVN%&bCVWSA>ZyW2Y
z++{EWxemz&L@d!J3X^A<9oIujZH<`aq#yfqd~Uu+(TKLD{B-OIup_vf;}`c5q*JWs
zv;DJn>q6&LpJ|H6qXG{<`J7siuQkJcDs4=i3S7Jh5Y9X}A9uufzAp)gOf<4+v+m60
zgF*7fl!7+0G0vwHq!Jt5U;E+!(QO8Zq}7j}_O)yjHmPY%k$oF?KY6^G9O%e)E2s6I
ztHsrB>q@eba&}CW`_^!5)6CMZ3$z>(Kvv#Zlk;W>2AfT#PIm3aVOX?~zRmCvGykVF
zUaZoXS!JjaZd0|3rQwAeL0hPus%hc)Agl;#Zit6p*@tGA;*OMKs+mVlyonQX?v>l7
z3kEzqv?^&7{2D0%miO}-E@Z+@!!@}NMqsv`w<Sb26*kZZ#k4iu{4pJoMtB8v_rrJ`
zbuwS*V22`bw@BokY$>9876D0K^<w3M1D*Q1d<m2>LLyJ|*frq8E^Q09Og7ei7@R~<
z^gu(*)0HFpM-9S@ktC9$*`QEv$O1XN{Ds6Dw~9iIzt@M--Ug^J;p)!}3{TTj9R?aN
zjgPF0Bn1$N7ugi}>|rQkH$ufuHph$N@vr4c$bYlv{}5#UF+MqqY0pOg2P83V<%S9~
zyv&Dxo)^V02KogS`|Of563?EE`A_Ir{fvQ@E^Am09-l50jWUxy5(yXC)bHEK2&;jA
z{9=th%)uqv9}fzM8A)57!uF=N((zdZhn@oE!)iaka+uT-9Y?B3$&q%Bfc@++HqJ>*
z2yH>221Vgc3-7|q_ovpdjsX8-F$D&p@(y9?;5KPFP=XSWpP<K{-WADey<DkbDx98^
zQc+oqx&$pYb5^Yz8?yoY(A8cjlIY5u@+cHqI&Mu5AWeAJVC2#fnT|YtHZf_dl?`K(
z$d5*ENv&qT3ff>dXbfjhPV2s|<ecb%!itFPh|M8|XxPd9HsRka{)>7bx48ld9DK&q
z713ThkBFJfXD0#?`UILC_I5tG+=yp7Mw#-+3KOnlDkNNa<%lPChDNyi{DAsxI)O2E
z@*!OwfBPc@dwQq?U8+f8WM08l%Z>#2(n~D5e5~B+;<`yHE=`jB7)?+X%E*Y6D=Y!q
zz4P)E5I{GqvaK_9x;rzz>U%(gdvGSYA>tMlXQO`7=o97q1b)S=?Wl<@#@SSWGeHwA
z;mn`w{o>KgXd6ow^XVnuiibD6RKl|{$lETSO{H>?Lw0t4u0v6bkz0#+YCFmwZj7xn
z<ZIwsSCu`MRXnXd4Ullcq9BQ0dp_eh;5lxK*XS9Z5#|i4xkRLPW5VGob$PnB39SIf
z=spZsk|>C#l-MYY6ob;sx-N58Wflw+&7-Je6LdF#W;3gCA(ZG6?By}U2NNDUjYG@g
zxdZX`jPA8H&Yhp^U=nNyQqNL-Te@mz*d%l~l0PdUIist$5q#s~9mD_V<_&Anu8}Xb
zcm`vik(F(iM!9l*M5uEUiY+2eDQd{fg6nfn_JQo>oUKP%;tp@Zo|9(MSuk)3v92w{
zgJ>NrvwD*PcSW`CK3<j$eG6Tt0gGP7E*|&IiLy^~{cBQZ#UtxwTbgVT;NbF0aZy=R
z3SFSR-fDz8Ysu(rg|>9alo$M70K575+dQE?_RL)4T!mK7655@Os;|WcF+VvLuz)vl
zJ<%CM`Mq;2WE)Kp%+Q}_qiFO_7HXKx>J?t);k^cBA5)&kwgtv~cv&H%Vsfk`2VIo|
zW1VB8X|$OD<1Du&3;z+(EM2p*yK{5AW>n3^-6#|_0&~Ht!G)Mue|wSt<3-Biz|`r=
zoD$G|walUQZ+L`Q;5--yMuRAkUMOh>Z<VYB>97P*M+7aPmHc7Ej?*AIvH^4C((Ow}
z@?Nm#-X3uM&d40*D@?D#=Bh#~F{`x^JI|^?9v+#R2U(wv8~r`B){U<A84R`Q+5K7J
zWwG93!BAGRU_<?wv&yF0UF_-{R<lhO-cT9YWX#Kc(mLA+k6UrNQTQnz7e7%|4`c*%
zWxp+yR#&zbE;+2S6*n$9-IQc}TYdGr_J!4N+dILgRXy+M1YW8nN>Lr;+lcOl6=t0t
zl&<GyI{gORb~5{qmshVRjVVxRn?vc2zC-M;MHRveLJQcFfSZt(t;JPzihX`@Zk*P*
zerP<lc!STQA`jMPzk^g`QGavd9RA4FwU9Ot6|jTPmU$3GW`m`>F0hYTsV)eO$aUkj
zVYa;LrPE*UGq&p15g$dMk0Y(D;!3lefs+<t{Lef?djcpkv8C6sQ&uSF38gnj|G?rS
zk?4x)#~d{&5}}73GfU|uTD1#>3yTx}e4>vv98<+Q0`Mf*?|+~}`r*natEHoIBKP+8
zRK|PQSFYR+pF#3E%mR4ktspWT-HqG23mdE~3s*25O#wcl*r_YRE5_(?s1irxhW+k`
z`5PkCnZ%a(3lH?B*#*mIhO0aaxN18lY(|3c^#GDNN$1v7o7b41ZEIA_B*ZFicvqId
zFAURRSIt@lNMiNRY*V4NlG^@2G7$6FFO-tJ^He+*FRWd#!=amq8rJd;nRk&$_$bF~
zye4S|n?ZWoD2|7nS_!_j!Tc^hi-b5D-fvjw5iGW}(!1tH^Vz;xUxpKbgHu;}pDSch
zjEDG*x=Ut%ZYfUuZ7u}A5udi)3o{EYe61mTxKPkiAo`;3k)_eHuWy$x@JDYt5=#}3
z!}QqUn%4;Y>;woBAXgUlYV-npLXF|!#y<^(hL1MhF#x<c(6RXLFU{SK8@X@-|JEWJ
z?_A{vk!F8nk{4g@zmtWu=BhF<92in*K^HXXU_~VdB?n*2g95-Z^&VMPop=#!iPIdc
zV~UJTrCc}!4{{n;g@742Zc^#vzx3q;ku7s90kf|Ii}&KVEjN^^V}U1z3F&zS714Ye
z$rtJ12w2ZA;^LgbgpfB#!$FbJX@zJJU>MP4Q8huQaOgUp-E*V78+(>hnmC_;Kv-zP
z8G4=otFw^CB_G0~`Gt4kmm1$?aQg3S{ueg+I7X69jhum~KYey1a<1q)3vn_8uHyu9
z*al1{e)8zW=R)q$xo2ns?*4DD@nY<LfPjR<Y72tQ0J6;0S%D>~`h-}fBEU95JWPzy
z=@9nw!3WyZbd)w(e{W!IAXuK~3aQ0bDT-4yjhJa4^^IK8N!TPH4WP?EO9QHe_#|Kq
z)SsxnuIUnEPblIG9<dOnl2yL%4GBdR#U8*qI83qQ1_C+e`BB*N$Re&_bJCHROrxxv
zBBQYer>P4D7CylFUrqGMtQ-N`+v-e#_yFgF96;q{FYV$`E<bcp5r_}H2`ua^q8%0p
z7iODK5HS*siB3&}*LmUox!f{>$SN3cO^@u(VZCR7+WsiQc&iZ#reAV(vi=+^%Td%R
zZugz)KGlE92=Fa)eM`8SNUTpSip=*oHl!=li62qU99nl<rQNJjZPu#(T6gF?`3^B%
zkug8TBMO^oB44zyhzsC3S^NnK`g)CyoqC7E=7rP#5j$0Pa0gLL02OvU2SyDeqD9?^
zIKElYk>IKzi3&#5*J4%<BPR??8O*Lm3(-VFa0-K+MM=YLMFktsbpt0hZJ7v!U*`cl
z#3r(uC?_XGyteJt$RlCPYnIU%Ac}nK0##*i*L{={;(_(_UkkZ0bp-)?YS|V4TWhIj
za4;x6{q<C!L7nou6SraoLa*C$pFZUWzre-&|A;i}_H-r&uSi5A`*sBe6JxlGy|6j`
z*Mj3Kf^jGNZve2FEOcV6#X4GkhD%Y7RYwO=-;1NpB2Zb4@9F5%bi}{HON^j`3G3gO
zx-6K)`VH`$Hw0+!fRdD@8$f#nK%GdcYjZw99+nhXQpFXOs<iposXX#c#}t%MMV2y^
zu0R>`^RQE~`CI@^p4|IVJ`U)?3HC=rC>VP*8$n47x3T%G7Z-6}CutsB<Sr2)o@~&l
zpyo%{w%@hDZ{E12f_AP4>FB9=zG?97;l*!qm6LOe;NZC2esmN72_#<h>Q}O$XqX>d
zegJm@6`Vxg4+43rh(7w(my<6CoslJ~^K0_ldD5ep-pwkIId6Dd7j7|NjC#rRMDoz7
zHzQx^)HF~25fqR$R`J5YH!XK{MjY!!JmTMuuL2R6T4b5P5p#$W8Lu*!y-Pv8oGq$E
zP!-lex+)c3laE%|#TaSMnSl|)AcKJXKjhbh(yQ`Xg`M#dFHTA3c}|7U$pC^EtXwc8
zBMHk{1}h=YiY0jE3J3e-hemvi8b0oC5Y@@2<-YD?odf~Wz4K(Cf#e_>M8V=4CyB9y
z<odO<{e}a0)YjLzG=5_gXlbXLt&Khkgo8P~r2odWEq_lU9jg!eoriAQd{g^CICR6a
zgEMuX&J+LMpx-JV@*5T4=+@=wLwX?8KK<nJeZZ|yHiT#|>$L0qe<f!S-u9UfdK*uH
zeZ|?g`xW{(8O|F*$9dC^_o^W4;&|(P>-hH944^}-ustaMrcV48$S}bFm92w!oLo-?
zz)hXZD_7C{rmS?JqdA?)tC8L(Op(-$^pY-GTOUr;Gg2oWGykXibX>E>z9`~6snW-%
zgH%<cK5Dd_mZ$?^VGPrqeGi%Q-|zz-7~}_Y2IWCt*+K2ayHFp%W@NwPpZOTDd0(F6
z{1KUB9st3%=wWgRmJLp2rST7pCQ*|~Zt|k1aTA1eiG}mbwjSYeqrX?KhLmqw<Vkjy
zkU0i-rWSy;6^_(c-UV{F0Ae#&45Mb=@|dGW^PPf+Pj}$^>1CmzB#YGY;qKwzB;E#2
zcWbqdh%2_?k0%ubAB=5(!)a}O6EW5oxl)j<y;8C5s92ij0s;I4b9(M$q&iF_{xpMP
zU}tdwS5Wel=)#*`1E|fY0Waarpp8`aDE~MD#Xr`_<g4#t?r7EX-O1d(N8Ktj4Pb`z
z+FlD{@XKUrF1Gc3msoa%BhTGOvg^Qaw;$8tA6JgqbA+e5Cj-7e;E?zzL9kzM^J1_3
zS9+d$yZzC4IV3|!9e9#HTbN~K6}JK!^=pL#zS4H-ep!y;SV_S_8b4c<ovV<U)0qS^
zxxp59mCy_U(wEXyJnY?M#LI@6L-9X$48(0Zc3^YtY8-Qgyg^J&R`D52B|q!Pu(%5e
zjDavaY6>MD?+4Gng|Dw6ozKvRitBZaEA)1wiuk7Qs^XaQhH9V1CdT<=Wt!6O$KR@#
zwbkZ39+ZrzS@7I|f6MFdQMm&~Z8zz4je);^Iu^t2`kFKNJTQI<C6tCnKq4~CIJJ@T
zgAN7jHj0<yuih@BWd+7s;@{Mf=VL(h#NHkap-LQ|PG(yQmUJ3#MYjFpO=^E?u)V~0
zC*c)xWTWI6&d4VQ;G{0?3SSNO#+%yyyFp)x-$3xe+C2?30(PpC7#AVTw}fEmS;S)=
zd$mcawB}Dpe$n3Lp^txcv*1aXt$Jic4;dt5jIN@qWLw_Wo~lD9GNM<X^a0|?+3GM*
zta9>hzyyRK3f&$=o`~wocX15O_dftRK*qn2NIPFiUC2!nFG%Z$XtBQa{xWS&RC^#R
zh$LR=g7tw|Ss{22wc5pl2B%7;cHt}C6OY>FS1ONHfRfT*0x{K@4^g5%gqifAeXe!7
zb;0Bh8r9R)U^rE!@$C4DBbZ7;t@<a3IOY{3N|5M93sYQJDaBUuzcKu*G95BU#d=o?
z6rVPXyDeTXdVND1_ho4`v4w+fQwc&6nk>BG64-l16-{h*D&-mIWsHv%r$--OX%BDw
z{67Y+-hBxY#O36c=z5mqDg%%!yTmm<;SF+;1p%Dijt3yX>XSyfC+MGfK11#APg$9M
z(y#7Wt^xkq<MNOzVl6iFpzh)492m?Bb-u3thhpr2Z9R;-_Aak|in!j(gYWU$&6)I#
zTC4x<bc(!lP^Dt6(_H$7Ckztp&(Zj;AL9+>e`Ww10s$qs;$V6Hsh|>j0n#}ob4Yod
zGY`?x<1+)@ZE%vrI1=hOW-2-L@BGH6!N&aOY?vG5M*SuzKGix12r!LB^W;3PH|caQ
z@S2d|l2@QhDI;B8OO#Rjy_N1^8LTEFJY!M_RIBhsb@DTs>g0Cg!DEvmaT<wf9RbX?
zy{M@zIp=Z$Uw)(&KVuq=fcZK94#R!)vC5p4|DNjGV&LZqBm!_qX=;-*=IZ5d99GYq
z{pJcOnY(yAuJxrGfI612VfRG7IlD8+bc%DHa}98&Z)9>VaLQE6US8O7EPM-4kBlda
z;Ka%s-tD!l`$OAkZ(Byrv-3Fd2~EfW{3W_Z3W3l}W)_jVlclt74z~kM)P?iK(TTw{
z%}c3ZCK~ACcLJPv#PMSr$aP7N_+d5=f^kE(<j;1HYYBWLo6_Q+y4r>Qz3?l=@DLgS
zUC{4nP=T(XYJ?9eu(9jZ6HEdE1LP4<M%3-+V&%`v-!A)=fl5~JDK-MpsJTXLK#6kO
zXg0`s4jS?rSHVQs=u*lmUHjFgiWyH9ws;Wt+6y-`jHXB68p-FYL3OK*NTVr3?o#I9
z?Kq887@L5bBl_Vlq}wS+F-Q~(Z(<jIF=St-22L@H49*WmY&Q<y_B&;EQK&Y!PN;hP
zBsBSyQDtt?b4bPS!C2nI_?~3--^5z^RP<1KOYgynGZ?8dtL3w9U;F)0nPVbu;iQJ!
zLD<J{iM(QF&wiohp-F(kzKaE9*Tt{>fcfb~7;txu%wqeBT$b4SBo+<-&FV*9#-Bk4
zB@Uk)6+y@1&YbBKeeY8MxIvP}`J;AEy=wwAFbr`5=t}}_FQJkWisWWS2Q>6Kjz~Q<
zW|6QLnCMOaFT6;EoUkb_S0C!W6izDWXozQAwGMZt{53otq7_XMOw-;;u77E2N%cXP
zqPB(cM#xU{;f}T*kU3l&N*m|J4vU*Y$)*C%D`dHjHfQeU$GLlOQQ^|J5kn+YP5Zmq
z{o2%-XA#FvWNlozWg~igW=Oy*wUg3pvgy2ACCKE12F~w<ZA|H{{$RTFZRA`rRARa1
z()*57r4LMhuc0@ySHs_p8H&kGd8=~y(dduC-Is#GKH=h3ctq%4baB@rvntu-$4xIU
zgiRb9NOq#$@!=*E1jsYuJlUqourUY`Ibhz$L1Fq^{gRujGf$wq=;sOtJ-2j&@U*Px
zghE!Ky{2h&5%})h!*HP<7-nq6%S)q4KPQGRRmU|wmzPdkLF7_hk8nQ<ItJd_A-TCG
zbA}K9$#nUKwC&*_1bG;VqfX9qtp<<4=y5zf&Di%_7uY-Bf}&xSYEwNyZYF>SPNyO-
z>wA0Q)#T(tndxsn7liW252bTAXk5!MKI=U*z+DO?@`G-P`Ln**UL5=ib#?>-dZCq|
zX}Zv5`#~CS(H23-D*=G9?^Wmp?+A=mi!2rkkP)r225o>iKe^Z65?h4_;8AB>*Q)^B
z^pBZ<23aT)AqwT{@Q-}#JrDFel0s2^Ci1ORPts*Xm>UG*Q8ue?L(tSIHoOrvrFyqA
zr&DrJQVMC|W+DvpxDJI$7z=V!{UFSbQV<Gkk|&igqGqxD8|d-Hyv<?~G$t39<Z0dj
zH;zU%F!+p76bMt|(0)ztYB|cSr2E-yabR!IxrJ8wQl|<;`SL}8IsbD+u#%fn{#;Y*
zH1R(Cyf6V;_WzPP^_wN!nz+b9*qQB=37xPi#eFbJ*dTAn$8fZGk`>_^qs0W-L#&da
zlzWrMG70s9N~>$=!j1bILrNuMFF(vO94-sYdF&LZRe^su8Tjv3ZvyA$2=*mo?qQvj
zSNB_?wz8lk1S=Dd;<L|P8|!z{|7f#TdhLa^1HL71z<B*UWfISPEGB*7$it;)L%}JR
z&WmMZ#T5<1jN)-H<^UaUT&Rqn7c)Ok$vjBivWiYJXa*qh3d<sP&(q22N!csepVKp`
z0E{JnzOe1X#OcI0rrq<<GH>g}=TEwytmMi4qq4{r%06+n<VteY#$YzyyyB3Y4}p}H
zen3|RlZ{tFX$DYd$dOk?*5#0?@9zp-hl1*dkSFuk9AIXVweJaH@@w8NirCE63?!z#
z*4>H_^e1CzN3Ng!Hv0FVZ;a&sMi-i7YRm;AKYME2I^P^i6(@ej10!`t`mVbNi^l$D
z6&tk-0l|8~?&G_A=+=}X47Yv2U4*h3wgX!!aJX9TQ7=9xc)#d8M&B)T%)G`tC3ZYu
zV2a2fP(g!}>3MDEf%F0FWEEG|W+7pirj0<7C8Yz9Osi&txtUnYddXy+)JW@lcU-PO
zr>2@b9q)yPQgmxTbrU59ijtF>$`MKd3viYlXIT}Z1ZTWpSE)8|N>whi7qR_hZY@<C
z7jKVL$d8uN$Q=ca7J^pSPIJ4ct?H=jm=1sc21@_z!<7{dEHiGwm8ucYZ3s&yUh}}H
zS=X~3-NpT%4ZIs)`u0o5xq2ceEaA>Ksa5VRFpGX^dVKP9@~I&K(az+>gMeE7eEC*x
zD~CxAI`w%e@IGw0m<xW6*^$p}Eo3KG1NydxtdPi1r%i%DP?>O9FGZ(!wK71z2+zpq
z@LWG=Ez3HYv`aPgM#nH1oiYednux!y<kpeP5yiJ%dO})N7<zG8-kfrE3ytD6&Yh(O
z(_T?MlmiIIV}TnIGZQy<rR<Z4G2m-odS{7lub!2#yixD(!sy8(RB?x7-=?@j{uFOX
z;2<7{q}xC}K?kUoA=iS)kE)NRFh5*yZfHx&_LU>S{+CiJX9?x97_bhUZ;~2!Y|%ZN
zLk7|(wyDgy*yvfJkf>RHNYgfi8&Uq+$n^RNa)fSkHL(JddXONwTGc_h##~34vZx)q
zpSOR;pb@`(kRKhFd9rbFKTm=;67Vr*lcBaVbFA@rNAI~ynjCRcZoUa_@ze3^oeHvJ
zN656}$sf1Q7q9xT?|RpRcEG+tSY{>qx_TewqipY9(VO9v^ovDMI&ao2UU)mRqTYVL
zHl+4fGwa~H0aaLJm&jtzr_d~jt%f1AJCC~Jf*@JU!00`Y%_^I=m>Ze4BgV9v{pyTC
zfpOBiJ)OrhDKPxc5Wz~2qFR-R`AG`Q?F}K!)x%^TqsF?q?FKyiQxBZG5GA0#X!S!6
z{<4<#&p*V)eYOU^matkNR}8CiMN8U+SM(B^W&0&wBdE;lWLk@6AllxBxwto!V~i#W
za)(*ZOFbSr&#|c%8N3k`uuFv5@uhukBgxYNg>%+AuKxyU{61b>=c}~YlXL^YUcAwm
zcAhp-R-YBdn3*4%qn^ueg;Zw-Cr}kJipq=ZvYgs6(v_ARbKSHroCwsKtvS^~W|(<o
z-MgmT^zhwLtC)l(L69TpT<2OImN8K0mps^S>__$9-N}^g`!aB^;-x`I^dq}E4YMy;
zO2@Gab(x0i)fq?W8BHfmlQx4D5C;f5uZW~}V%kk+LaW|Zgy#vzIy%6{_4$<Rn_Zr7
z5EA3l*Yuiavxna9Pv<OA>~vd9>wPJuEmd{PGBKRe@1CqgZvWo(+_;Enb7lNA=T^fk
z)BEPG3&o9jiIWOJ^g!wbO_#6WrMHzbKaC}~8~^Wh%@S0l^8}0(_vl0_+u>yrmJR{a
z&>K$nsmXH)<l~%I&(*sl?Z4ex*Jmi0cXqjiwx3nh?$D&JD>uKK0<V^Ot701MF#ta9
zUiPikTaN{GX0W8JlXd$PxPJko`QDPiZoO_9%wbi~N)PMR^}sQdZo1dNuZOYyc-`^z
z;|AR_XnRkX3qa$<)JOdhm23et?f-9o&%LxfMZZML_BL|ptEz29mm@b{gjC@qYWlA>
zayXK<c%Zwi5zkF;+zcMjhU<nql;%Kr(0?lF*vU$tT#;+c;X3ekXKh8gYHIaoiOD)t
zsFE$oC0IWYmn+41ww5Lx_AIb|@;kPozG6G2{DfO^xpHo^a56~DYh6kN>q@E~R!(;m
zp*|LWCl~F{L0`WYzs^vQxEw9YJ|mia)HUo|{f(V*aKrL&cq}ZO<;he^Y$R?&FFuSA
zmQ0}rqO;iCoii|P&FWBV<erhkszx0w12K%n^@=pHE%-KV2R_8N!RHz%sbD=r)b7!*
z&AQwRZ-bD7D7dzs&@=GbUPSG^TG`P_XuBd6PNlc^Rh*fI*FHzp78~Rronm1RgE7|l
z)ktIs^vx`+ae*?WD9OXgxlSEb`+fk0txY|5L(Gt39y1CX^Ds4Ty6(Dj3`raF)G|IZ
z^4!%FaIl$odjG`q+lRZB!A5iUeSAlAn|ypmX%TD+0EQU=uhsWL3Q2j#x6zYWeE!0F
z7f5t^?4{=ak0U#b`u_Fkg^bHe0-z?Hzbxs6R8Nc$)yj4MInUlo+6YO9mh~EF`HZF-
zCSPz~EIYH7wFdMjqx=3OZe1`_GT&jjV_fO!32pkf<AjaB8MS>*RmuYFaUFiozbH(!
zM6+&Zv0kZR$J>MVhAh?7l5+?dxHaJ|!Lo}Ht(pXI2pI(PGp#Q^g|3S_IFTC8p^-fl
zb67eB<!2Qw8AgUYu(mLxG<tqrn(-f$UU|`>$(;T2ME@p@U=Xr^$N|;XUR_^5NsG`{
z&`q^x{{RHA)|eJWcuDq!?I>ZYGtR*0rdn>Y2^rdxDU{`VQb^tGBC^6Wu4>2kG5MVJ
zTv0PqB5$DT<0x%P;G5NFQSDxf4BTkR5ci^HIidIgVro%nYnXk{os4(n`X~j)eLNOk
zZ(pN~W9WBX;Up%&83Pu30R2>RVgf1zyP`WklvCTS2H8qCKTkY#9%JlH;)lQ0Dp`@X
zG8vATT;2g?IC{Ih2Plc*x&J;jlsE7j`Wl!~4M$0ZZcBHnZ3dtQzBw#(10$}VJCi8D
z@1z#ido?+i-V;aI{`5AbIi@5+R@rq~Ur!di)|!2Y^0MYdjKbNI8!~%VC^rSMA%WB@
z4Up?G30iYU!glC%>MH{7oj_dRytcBf8F6`Y4ql@k;TGP9+0RN<l$+2wYjeU*p3(_l
zd&<;x_Q^E9rEA&bVN;F&^HEs#l>2t)>zlso+Mzm4Ii9D92hTnZ#OE7m4)1gb;UErr
zQ*+97$;A|x8*@uYa>^wW6f&j(wBFRH>nqRGuYXcP;oXn(w6C8gV+jTA`ts^yo>%kN
z-Hu<H5V$eO*A2|?wl?a5>r#}^|JuZWy5e4Lz(!JHpI}ZZBJT<*XmBbs24U=~f5uKP
zg3N)rLjoBeOy;^evHJ?;%j^NM%K1ewvUjm^BV3m%X}3mUk4IwUOJEV2We6>Tu#EYu
zqccHEdG<>LJ736^t(OW*Z_l6Yr_|Mx{#^+{7D@A}?OBmLJB4GGu(5ulq86jY*b<Et
z1#-|gvZ6aF&HiqNfOC_p`?s?^Nrja|q%a+uh_>q`6&ST;h`1PoQSVL?am>ulo%inb
z=zwT_1b48v_?#i5@vNb=N1-DPyBdggZ7%0(vf128b~`PMeqtVsp3CN2bz3jAD&5~M
zftlIzUdXMGW2coXP`6Xmz`Jd;z+SGp{dHiE45X#KE~Z^|s>5?#?4nE#%AUkXEM@c?
z+@yF}(DX>w-ck_P@)}@eM^GQ*>n2?oC`V#`BIJOHURE^C6|iv&|5J(uz>eBzbh57p
zRum2(hcL^(2l~<h)AVuR_wuU1Htkqy`-FVtm89?Z#{_zS{M{L}%7weyQ@)2^u_{?S
zBi|zDVGJxormWE5Yxd$*I3SyYy~&_}JRnyuUj)V0Zc7qMNP5B6by9?1Tn$%_o+`IX
ztu*RnQO7A=mPGYWshnYgK$0{jKgqK#tQxi%@)>PGwc9tbfqy6`dQ<L)JAY1{21k_u
zt=jL!uTOOTfk#XTYNDd<F~P&&VT+Lz{I>x{;JHyIxxgt!$FF3n7Siw;)q8OeTDEm8
zWT<6VtQ4qxsg?}0Xe`94u91B=WW*w!zZVf46*JUKos!mDUbI`7Q8~{}igJeN0`>@7
zSg&s3)-ydKwv``g56%fU#6sVqr}agDWlB92#%c3<8>Ox6My6NFDG;gsHZT6G^)3c!
zlcN<%P=XPVwLT1={MiFa^@q910Mezs{xsI5BbZXL#sj%O2(INB#SCA8w7S}w+#*JK
z21_SPDT<t8VM^5#6snu;z?UoO(+PY#y~AducZK!LKng#8wYMYOX^<Z|Of!#RGD7?C
z5MGX3DQts=k?zG_KPwbm&;|DyxvLWb;kMVpSFL?XTR#=Cm^~qIXDt5>bI$fpF{5YM
z@_S;{uiEVnZ61t2#xFxL7YF?OPz+1Cyy<N)aDBeF@H^x|fdKpT(-tbR=Nthd$Z@?Y
zrkaPIKt8N5!Yk0m6zln%gomz^aLivk@|^{Nr~&upUn;K9;)8oI$~36m&Yv+%2lC2J
z4e~|;tG5_MFug>6bQi|Nluj;O9fmp@b$T~`0pAP#GD}>Ag++_@WK5~~gw|8zYB<MA
z|JgG=Cju=7B9q5JG%rVKQiCiDtV*D8K$z6(cqQTm@VqjBkMF`4krZg@${*F#UMtdV
z#%0VV9#KO%5-VaHjxC<m3F*4j@x9!TthBuMVj^#a;Fa}ya||b+|Bg~BvIb2hz9J;1
zmCKz;+Phr{UO_j(sU?J%Ok&ur8z4ml=9w63v~F|qc>{1VR)EwKad@x8&`ot(Ruf$&
zQkhsr2x?S*S_tDuXwb)vT|6?k+@C9l<mTWQ{OS)_ib_O#nk>47l;GgD=!Ha=P7)+X
z(Ltn+c)`*|#bk5j3{2`~C8#nE(6kIbZvKo|C%e^8dfe^l!x9X^%%mveDjieKJ~%<6
z4yt=HO2W<>@^L8>_5iNE5*|(BhPA5Iuv&>FgqO%8M5z&0!V6-)l4=syX)96E)KXuL
zh89_dkrtD5W#j{j1$x_|Xi;F7KCfSUpdwNC;!wlkkc|Gz5qS&zSMvzg_B9_LjcOwc
zmvQoMFK<-?k#a}kx@T=HQ`}UNP9sdu*>Fs+i!tVC%1>w-&@^=Te>Qe-p!9Uc1ONQa
zA!2b%&wS>h|HFm`$>(EF4wNotI;D4f?tgkLI2}5#p@#cv`L^kny^@O_DK)Qp6sZ!)
zH21=Ynq&Z8NO%qG?JS53VjdVGWKX@EG4ZyS;-<X>*vzSwikWMc+37Z?Ejv1S;%40J
z8wBF9PA|poQ|HHYH4p2?xs|(|Z;#AZ|CH5i`z5!&ZPOUNoX>t$?INp{Pv5^|)4Fc^
zRbzYh96|HJXvU%Lr`0^K-Lv);f9v76cgiiQ`OA=v#iElZ(x30Ee9fJ?<#n9z>;KIG
zdlW6HK-z61toWFEHi4h_ssL6Jv%M;5j7wuWR%s~j{g5Gdj(gyr^387}1@EphqTiPI
z^LGEb!`nY`5sdQxziW2g2is?i?+UXQmVi7z#UK3E`ghGv+x^IBLLSJNFHU`no1bZ!
zXa78P?)#$m<I~&Rvx}12<;)ZseG&%_tbF=wH49*@(kE#Iip3-C9KszW>*JLT-hxJ!
zKK_r<!ff%p|4H%fwf8xd4S5>CArkj@yv4oMp8WL%i&aT(u{?dubrnT5>NC0$w#wwU
zZxgS-`^KC-tvQF+b?k9iJbBcaTfMuj&tIIv<h!Ap5flmsYt^&Lb7XJcIk+k0X(HCQ
z$LIV9!=LAXm53aoxuTqFx(bBLkcm2ZouSsMM#oBqqJO26J_4K5q0<s^dy}DnH2>dF
z)Icb=mv%5do_a8{xZfU<e1c|1qgyfaOx3}Vs9xIP_yqdlsNx|zGifc|oJO^v*RHhM
z|KD@sQBh}FPlOYP>!HmxYCLIPdyW17ys8n5Yfk7VXtPp#*iKxIk1<!T^{A=m8tVrL
zpOckt#L4J|I4Vynmv8QE9Ljfeq?;ioL;)n6&VQb*0x5a+4Jlh2=ko=}+RYG%jUsH0
zf@;d6-4JvS6SAf!?;(9l<F-z$2%Q_#Er>~T<g2N#PvQy5$+aD2l3S|nO6~-?49T_Q
zYHbR`eqYvi%s9UxY4?p7c-5ooAGS4@VcM4BN^{vfPQX{JJn{o(S|Vo=0KO-3THf>>
z45_?$XKbnNP-E9+q<j`pxfRVt`AWA|K1675JRDbR>?95{4;(Q6X<+a2-XzAP3O&T)
zoLa$_);Q~$TyIhm^Cf<2BY2YKm*9DG1q)rT2TUIkiUAe*v9>+GN_NTfnhm?+qgNl#
z34R9-mqG--9X;uLCBphcrb26Nr8y(*_uUv6JJ{QjUNd~6w%3j$7u%p@Xxxr?Cm3*w
z&TsO#Ug%o`40%-4a7gJSGG%zcj#T`aD0+pH)<dr|D&?Ml*wb5lCy#jn)6y$)Lmng&
zG5uhTeXSd$IPRZte&;@4e+o!lv-8wS3zF6(Z*7T5dedVi_c)@og8Tc%)y~HjKs@2$
z3^foQ9KUxi=f{*%#K}%Hli`-itt4W@*^e`J3mGJ-oZ&73q|e@q04Ih>Bc&??K*aQ0
zpRDHps7*h1oR+3GpX>&w-OO>DKhC_A%7W#mgJXAHMM{{3kfs$=9yhqgh+{SuJ7=ho
z1jF(igb#|jAFkbadbi$8Asy?zJyB3?>O!z%bR|XGk?&J6ixo_`TPBGjWl+U35K*4>
zQW0HUtgDrz!BQ_p;`U?MZ~!;{-tQ&@-v{vp9q$(2{?C!Y|5m8q&S^-?i+>a7N>9+?
zrd<P-v|$^3TZ9Xb?`3Xdz|DIH%E^OP#5C7K$PaSQKvM;$ld86c2@>ZxP8^<xKF8ng
zVM#-R1F6aUlT~@znEWJvZ3VbHc&b~%5(oMFfhp_1`3ungiD*2DOtA$DhC`iyz*<{|
z=pH_*VXa{ZMW?{nnQ@oHd2ZgawYG>!+|k5b`mM6gIdWWJ9dGppjgjT*S@Af1aY8lj
z61Q=N5%29}A9R$R)~h9U{mY|T{M(L@wOYtFJ%Ow7YN3V`K`x_)+uz&Cw)7U`5r3aW
zKlEuolUl?r;8eMx2hj=A*J{mN^WT3#Q3&6ey{<FJy5o>(DD9Pd+TA<cAOW$()ej_u
zsmZD(Jlvf#clF5mQqry`+F_DFejuFcEI!kn6}a=@NaC=XU8g$d<}N7cQ8MeSVg-Y9
zY1P24hz0ACOETH2l4w(`cw^z}@tw0&c~e$rmk6lFRX7g}H=r4?G($<HExJ9}<gSYn
zBAXWNi`UP5{|8r3<&Sb|^>c+i-`;c)E%CI-CP6|2cOh9QJ}52Pr4`ey$qM>d_jFk!
z-I>ozySz2VnBOok-9m&HPucX@+EVtfAUpCdRT`509I&xHh>mC&&#{%AU9H_!E!LkH
zsyIf@Y(B3q8^j%HlsMjH)q3yh;1J}GNMS$t2(cP1Hp-Wvi`1$@q)-^aDmCaRPXsTL
zsUsLbIU|nD|B)5WXdCFrYPQI87%<n5k=!Nkkd0P^E=P|iX4s&1v`A!~fM(c;_*^~D
ziny#)VO?}$O*CQKK*}LudcBbqAz@pzw0ma2I-Xd*t1(nD)fT@Xh%EsLQlTB0<+}jN
z3qmMoATp|huF!b|-XMJ-G>ksN;dL-{x=w~Kgh-Avy|c`9Dkzj?%`^*mnFce{1e7&d
zh8JqDS)k7RE+>{;^Enz$5s)!fMw&Oo7+FZjlt(gBGK?YKOe3)Mrgk9pm}<<%2!%ct
zsh#rWMYg1^6%K11nE>8qn<2cdtrTGOTvpIoVO%wY%XG5X#qErtLT<1y)nsTSYwd)_
zP^h_5&ae_yY>Jk105PfN+-~1r^*{Yb503Ocw+U#xV5ioe)e*f9tO5Wu5&454LG~I|
z(IxYUq$5UQYSHKHKc;QT#RMaJlS%geknXI5M0aMD&bX*?W{rkfmvz`89v@q*)fEy1
z{3t=A!xr;-*dmQCisu&UyII=o88sTu5Dav)_4?dkp!tyucC&z!D8s7#@FY>nS>&*s
z0DDoZ38#m16|LD#c2;&6JJz;|Dt7W(G_t%BRbfk2KnuS#q5tFks1&=6>SVy~3`91h
ze4t4K<mw-{R~AhC{V_y~!R4d%x<i~PN%UH}6|SR8qN>1S(Ry9J7B-T8DT}bWAxdXm
zjBuDaCdi9E*!$uew{z21ZjruI@(P&yh1Kg~qOt)xRGY_Fa@JCObe3HbTk0laYBihx
zk||SfQMxiT{*9}|c{?e3`?dVANPz_hRiww1v8V1MmmRi9H*Qo^S}d1}HVieW*4raw
zV`#`aB%m%JLRt@jW65iP?D)SucQXz@)Q1c&eD)k?!v6yH>eVoC13Y%s;pF{k`|I{A
zl*cxCr-u2z*MIt~s%9=vXzO#0DIHLbN!?nXbjq_}TZ;P5*jl%>zk8$hE%dp`!2f9A
zq;6i#?XmhbQXT!*H>%>?dRj<LlBmlc>u4paxFLvq$K64xexBZcgUKl%W4mc!H#n1L
z#tTEl2nGIgn(C$BVFYxEV>NFYP91$nTR9`VtW|VrY_INrmXzawOldpzH~T);FvpF1
zYVeTXX#!36><d1+^}<%C_E{~Ipz)XnSx#|h(J1qF%FRKPr2J`EG4WRY3T%cr`;5Cz
zO?@DVZ-B%}kCHx~lczCb-pdc&n5Xp-#X-d`8o}h-at--1@_+gcwvN|Z8eJ!0FH5~Q
zi|uAP{2=2vEA%#0KgA_hL!apquga{$Da@Y}xI~oZXn4IuxGeR-Ot#fD_yk6c8<=m_
zO8#Xd2M^@;={KZR%n#;qHrwFu^DJ##4=R}U0ClRJ<!mT?ni}6NIFJx4Ix4F;#>iNn
z^42`oTZ!=1&IG>w{sK(>sC?x)r;Ok1y6@|>GPWNFO8xvbR=&kf%2ttVn>KaiRH;+8
zmiyXetmgWpR-q;`Qq<588w~2UK_zxMuDoNbV+-la!G7Fjyw9|L8bFxqXh-KqhjlA;
zkFOt}s+_Vmc@@}t7F|IwmphZ%QrJQc$?Bo}B|^#QP#yQ8vY?d+iU$-tRue0XQF6*)
zu*Izjj;#e-NWhcvZkFWYkP7b>2*vokC?t_vwj(z;eaF4giMZ?^clcCQ5S(?p@hNse
z=Q7(k;M<*_?Qi~eZ#vtkG={}aW+oeSJJtNuRU7t)=!j{U1+*tX{DD<2WjFBmVbcZK
zZ<=+gF`t!6O~4xeX+q1Z#T6II9)I{!1+>4z@6#x1_G<toAR9JyV<U^PjV>cd=|!MO
zz7K?hO+DTm&)XE9OI0z7z+r?Bj4gmouXq7SK45<`rMqPQddjVR!FOw)Ds{`6Lu=ym
zdu^Z}?EvvEIl#j8bIFH3eADj!re+Z=Bfgp6DLJy{rGcPo_lK`5OTL%f0^5jh=Xc-y
zQSvhW@1(WdtK&j@hwptKm}H|$f2dwaI#dbH5kY0r#g9Pp+?M%nuZm5F5`12b>?<ey
zt9a1f*+U$m<gedDvR}S$vQvwEgd%Z&nV%n-yr#_Fjz}CRu_KFwfUR@$p)U7Hq`1@#
zhq;Gaknolfw;|kJ7VBwOG>^D?&Q(?dwCpmf#|+7jAOvqNIy)ss&6Bx?qNtlb(znC#
zs|}e$j7bo+vjTl7-$ajkEb6CX)(EL7j}E^c7oA9;{Tu-s272T3XBtVf&t^|G4$cE5
z!*7>OrX%p}(n<gOo&fnp7m}3l6?ID0dbCM0A&0j5Os2sqNbYhVhJ|+$a3y%(2#(+c
ze!BK+rsffq(3dcEpuMppYM|C1PK|`$1aWGRb_low0_p%CvE4XuoxG85*Jw66T}Gpi
zPR5$eZl}q>zeBcfI^6@^W}}xz;abc<QN_kPrts<iO_VonjY<<B>y?EJf+EkDOkw7G
zl*%IPuQ;_aXh3{vZXr2|X?>)##lPwox70&cI8X$xWfPG$m9!WmlX-|WM$-^SrnkRR
zRWn=!mbT~aGAVZ&qC?#oV~%pBbexGQ-ej=hD4~8H7ZFxy3yHsO#vq;g=c>l6M~Ax;
z@2aX@#?w>sk5D`l(ys#Eb9@{P?vcqOSSeYP-n{-NtbCuvmZapiC%X8(wsCK!{pRoW
z;%FTFTMuH+b&tlQ;r{O!r)q#x#zodCRueNe?rE&I*0Z*A;k|(@-CHH8A7d^MJO||=
z9}Ax8v;zli_MPf!afhY0f1#X6(`Vja1PGWh#`s`3MVnqSTt_*{4hRm9yGfT_*&NDo
z9#tO>e~OLNTD2@KAU;OllGzoU+)^TCU>bHymCL487ooo1*yBcLfACvdT&7~F6~G%~
z53__uO(908ZxH@$!HvACs=}yC%qs!6{US`7(7qA`2`0ZTP~EECp;J^0r8dHnR;*)@
z)Ono(ouUM*)e=j#t7(#)6^TJM;JT=Y@UkHE`?ojZmHGzxZ|zl>uby-h`TZ9!1Yv~R
zVAg#h@wOoB`=2l4725jW?{U+rF`r{HOq8#GycUEKUj`!9rL^$=Il({Z4}zc2|D>m9
zwqkrt<>yE7JgH(FIho$8b{*5d_O3Sk#Or(Q&57)lPgLt6E+bPC?IoLiumP5BG5Le>
zu;LHUU&j?khQhr14+`!De75)zb(fWq+0F^5(yIAV`9xwWFGvR}6VH#<&eP+|#vWEP
zN}n$eLiWn*0)aYtFH&88-da0Cn*+IcCgNuY8#8lN_T3Y-_QIgH&Bcrng2BX`(oSik
zTDIFpA1`cc4=Ua~Mu+1km1YMTGjsfnw6ze|zPaeD!pCQoc1RnBws+w8<gb&A{V_3p
zT#_E{f<kUTiNx&_G!sMvh!N2TEQ=NhWxfiG#VWxJh!T5}#Q+7m>y*m}v>Wv9W>s!#
z$1R?s*epF9l(X+$TT({V#QS>eP31wYlZ$LkhnD8LAC6tOsm`3#yO&+Hxed3--v)5G
z`ySem(yPbcJGh^>F&&P}b3GirVN-P0tC2pc+J`l2G2f_jY;dpH0p8a(-F9~U>@*-9
zb~e4L$<m?b_2v#AuEDJ1t!k~uw;#_}>pTKvH58n9a-yJq_2DOn3jnF=^J!pCdQoUS
zcK33uADvFkbMAPh234K~uAnx}7rNw)`PfXLJU;B2B537_OeN%8S3jiZd8+z~09zQZ
zvSGNWqMC3NzC<7ScoNJOZJ`GkRGYCRYCa!hEE~NYalo`NVUXYg%ZC)}fdLj1<($o6
zHYcp+A27=8!P=I!>?@?IOF{=O%aNj^x@d}sIPt%<1)iuWni7$X6Qbm9`L+IX_R>;a
zIME#0lqjW3aqaK27@gKS6d05d$!skw1i5w~2#l`FZUqpDpFjFYHOK;M<R5x7pgRKS
zv}9mwze|8zs*o$`Oo>4(5-KQ%z3!2%{0O6#)?h_{>+u!#@+|gVjwebUqBGd*Yze!T
zOJdQa559(h!)?g+=}WpEuj^c2H#)IZf=(KTLV_~riDXLFdh7Jsm5C04npWqrtR|Su
zT?DU1k*d*&3QBlQz2B^leaxY6z$+AWc)Q-7CWITn<#mgz{LW*cy6E9Akk8ZWJ5j_q
z8l-94G0*if!!4$$hNz(pCD*r+omO&{gpCOZ9eNXH-Cz?<6#)>_a@}NH%h8MmmW8gC
zXfR`H6lUfCPteDvF};~4%rAS$3D@6YbTau5`Ob2gkj+*qx!)|3V`O{>N{`1=A{%^$
z2Hu}#)R6RgRFGb%tyboma}6bKIibFwpp$CXRU&Lkeo3aHmNLKe&&Z@Z(UjbV7v9qi
z@RDOEgTUq~Bz~qwo_>)u@2~w*ApGK+Po(l>e8GgB?PRpfeN@v%w+q3IYHGDfP3iQ6
zx;Zvu8{O_Db{g0z0f?92-qH6sJO)X83p}mqM9L{#Z}=;ZXcc5x-oA9L1RvDo^llBj
z;sUbe(QplJR(IEj0p|lI4RV~ySk|J<LtxPw$qX!?@C9)iyECO$tH%v2?{4F?hlbj$
zO*dp#YHVz3v|53!f2&qz23Xdm>02sZX?YoNU3H7<7n<!)Q?`IcD-^%kl)W@AYh`Gc
z9I=Bma4Jj49uFgbH^db9@GRa%CKI8&ej<trwZ6(@Nq>FyaK-~3|1OhB)fvn>kxb6a
zc<FDzpO9crl5@|7r~!E25U+F&S#Y`$24tl3@|ECpfytbwgapqLgo;Pa{*umBRD=4o
zXEd;4wUQ;Kw~Ud0O2riT-kU@Y4N8dhJqIy)CS5(=#%<}J1#Zqw(5d9l2t}q4fE?dm
zhI)w{z6i3)Zj)>G6{;mz`W8?3WUYqI5`M;yY6-GlgwHpLrw6JlNF7%k9^EoT7B@RC
zKQ!^dl12cQ6sUFLnFwUR5Dl2~$s?K=V(s9owjxl3O-X;Al}nb+jtpu-wVTe=h=giG
zM5y;%xC{OEpKL(zENjLcGSgyp0jq46MFYXKXcU2RL@ChcF@a!sVf}~iHcB7>Vr4c?
znW=>7(E(Ufrg2slo9Tv|&{nu7lRI15**0zCnR0m=uU(f%E{vgn7G3qcVSnY1N3p-v
zkSQbnp0L06*MsPS4HX{7T&`IqS3dvVML=^>7h8f>DBvO9QCA_4SHwE%X%tc@iqT6s
z1V^b7h!To{(n2oId~8{vK=>b8W&>0;kO>`9)QOH?P7p5A@dZrg|F?#!(X!@Ixfrj^
zi}-;Bw2u5~_Jd0we{YZn-NU3Vinvm5ynXDPfKs1wy=7_2;mxbw&ET@`u@zUAZ~muI
zaaNHMEy%kGv4<f0Thk3mk=!UFV2J#2j>d1}(f((HwCG9gOG;;?UVr;om&<Y;4TLgy
z%c_^Rh%e5Z<lq$XNz^qPpLco6Z*h$s9SIF1x;}AY!OK=P*C0Kq|7b5?E9<>>vGiW4
zhAhY>rTmJ>=jJYl5u*qfF$CfgI+VInm6!KOdf#$~t%^J%JPC=F<_Y}HZR4DHn&Wb;
zyiA2YpYG+P0Z*1F+fKnx64+$z!ac{nDMip|X^>-i{y;J@ddUH-WebQ!8V;o0{8xOC
z3#xf&0J#;{T`|AxS|e=Nfuxo&>tCkXIvV1|Bd?$grXjb7eQOya;5TV3C^EUEM<-Fh
zh6gcp6|kdvyc-zOyRCbue@DWWs**@qS)^w9y@G%fUg<@wkuZ2j0Rq@uU)nKw-lAQ~
zX6&civYJiX8n!PB1;B&nPo9kTdOQ?h1+AF^=t`H%WCS1>-)4@|<1rbo-?S1R=W>+;
z?aPLeG)vH`Z%fZyT$wG6v&Qzh*~3K)h;rLWkg=C1242lzBF$S5Aw91fI5}ezuV#Ha
zNoDNS$zx81{U_>PAyn<W0qn=d>yr)F^WQlu`bie4)Pn1Q@0_q78?NuEcN$zi@P<8{
ze;xY{sBiD-Y{>fSWhesS@`dS{tWee^D;m@d(1S8T21K2&D<19Q^Z}~!OsBG%)Vc%8
z5PTRN1<nGQpFZ3O1NaeF%cFh~TGCY8pgGYbbYKE(3AxH?Z6oXDZK$Y0-VkqUg{^xY
z>ysjAaYT6Mc=zXzkZLns$K_3?S4HX%QP;bP0Lzu0`l~(Z#Q`D5&tyI}UJy9x!68d?
z-dh!<mm9r9ANk=@&qMo61;50mtVHPSoz#K?LcQE=C^6?MbG6llbW~73PUFZMP(FiD
zxbqcP%$Go%FhTr=6}MQyym*QGy!W1NuO^sLJk5F|O(d>PAA#ZOpm@E|&94~vO*Su#
zSa!b0RVbG+P!A)tvr~UM9#?hb7mB$zlWFN=^CHXvY9OY@V6G+Vu<neBDH@u~&hO#W
zIW?w*BUFgQ5(ASiS1P1ZIrNRMVfSna=+a%w=eJzh>lk$M5Iee;W4HA3e1)_gt(Deb
z)cO(loDU*4q)%Lb;L42Hd`NpkR;=8+7&&pkdEkTYz79*Ls#pe<cxa5OglrX^`?}uc
zb))W`ZMleiS{8+zNM}Gv6wa^Kb&?Io1xmZVZfFDEQEoQfZw+7XNa7oMEnNh&X*I!f
zorcsRpDO<!ag~{bMU%F66W(4t8I{<%yL!nc80qSJ)Gy0|cvAvw1F_TYZKE4)-5gJd
z(y2C4tBvXqoJ?PbpK=3d9j|56u)jrUnVUM(xX;+fi}B#P2><%MdD{uOtRgX;#s%%G
z_*1PXmtnCbS=NpDGBwrwU)yp)V~2e7mr-eKXLCUd>npe~D|bu>w5+GIvc=0gx}*zQ
zI=_MPlgV|eo4TMQ`re4NtnAFTYgwPm<i2d$0$Z~Sh~AgjUMyWj^hm=L7yAE~$a+`z
zpFVpM1l>QuN%y|w?cAX&4-kthGoKx<K1i)U@4~a@n&A)CYtIzVqBvu&4s{Ty?T|Xu
zIUKcAnXHbA{1i%M)LNW6icD5ZiNLj6WrndfHx%Y>i@{FQuW}eP9{`;8g0x<Qrd{_K
z)!zJHL7WDI?Y#i+-Dno}8P;o3HViSNfDi_w)Tfl{=jNXR(nxIySxRklD|yIMrye(p
z`jB<LYM*9ewH^CLN{_}pm?i;ulWGVWFYUToe?Z()5xhn$&_dsKp9`eI&!%fxzr3w!
zXYWIywH`Ghwm@Rc+h<I|*hBAEs*o3&db$Y%*19Vfs5zG^3<58976j36xy%V>IYJ_M
z4A3C3sVCv^d`TxJQynx-y_;AIXFGc!jle-pEguT^p&tw&L)|%sQ0-_70@gaFMZ((V
zhCz;PCx$<r5w5?ccqvmuEFi0>C1Og(taHPLrDQgR5Qi8s0=;q=k_i&MmT1YAh*3Sa
z%!{`qOZqYy{JdAGZb<+ppv|~wUd-DgfTnL6ek#S0UlBov`mdWgNMjH+6RpJH!Ky+F
zn9eH#|8DA!0FTcnv#^z#m$gq-PI?zs52(J=29LO5oU>5|G_VsumwPNo7J$6hC`*t=
zpC`fZzWzfDE1}#s>k~o74zx>6DUn?f`N^y}Tk^-q<9Pd0m!bnco=s(z%5vPLN%Ne3
zZ{J})=$-^HXq;O2X$86OpDd!7Uv7NWoU-XB<dGz*5g*d54e^<yD)-|np8@W4>j|#L
zp2nf)Q{>7v4KOmf^0}Yj4(JCo-VQ<gj-vjzq(}YlF#v1yFf4^Or>76j&7p0~fB|_J
z4r<Hc64J;{AyHVv4m|*|y(m3R(pzD7w_WV&)pfND2;{h<P@|J|D8tbSM{>r`5H&X0
z{pK~bUms9{&Y>r^{}=%l-0O!u_PllfvuER50(Z*);b_8@=QmL83p4(BKE6WKJ;X=4
z-YZ-cjilT?TQt_l0kV}9y~zUSTEKiFz1R;0*!ZmF3z&pb`Y0nmdVXiYl3%)}C--}4
zXZ#0p;=3N_=#&PGQHc(5>2R}w+XnIMZL;>UqM&;y5P&ZdW&KwG;@lnfkB2-Uv9)SV
z`NwBBfTQEvFc#Nw;**6Ru&A+_G>ab-k}5KP!+ixKR^iy(xy%lif%+frst#e?A-l6u
z2*Zx~Nw;Or3jRlVy6*Jsb0;buk><{~)aW$pjQX!Df6Zsdoc0|?-d|{*Y4RiauhAtD
z*rF4A?x@OTwSp1foxmRT*mDc-abg_@vRzH}{WPtj?4+xIg;RR&j>0Cbl6eVFThHUw
zIU5zS<imTd_02K=7aMSk%WVpVIJ9}|=0D>O-Vz3FJ&i+~=l`CQkDF$tx$<NLm?J;E
z<mrM<8c{$t@X3Ruy)P{6VBe37fIu!S9A(?@fGBiF?*3G(i!KP)EWY*lbM}yytaNmr
z?W~t+NUrcBIiR5dAOmHxsY`ORK!&e&kAhcJv0<h(bfA3mL3-|}>}Yerov3^_#5y*d
zb6i}xmKBjg5S-ks4RavUo4*`MjH#q>p^<Z1d!3_zJ0Pu~#e4OZ4&K=O>8@^HF2?hv
z&b|rmBkEYfMQ^i^BKd1#FYg@sjjhl_D;l@To@x40!xE^cC0K5&$aaQLsO88;QY@6n
zb2mM^%oY*=*|FvKWe8_{jHD3dQ$7p(O++d*o649+@_Zb$^}zlSY?|Zaru39VeYlP4
zTrVvV^Y%?u>P!<X_>RTx;PLRbq~yNfkR;(bR!YqGmk7p>adSZBP8sUgh`JqocE|hi
zh3}`$OStGrBK6k;%*P99K8zi^$qm|O_>L9Ql|=X@*9fawvD~^j`O+O)gwBF?QW?<H
zzx!EU^fH^MRvN{=X3m0(Xv*s2CfNtO;$HN0K-*3X%{^!;Sh7!NhjY7#g-Z?_(X-RY
zjDL46KywYQ*;8W@^h{B>_z;SoRsMWmsQw{K!BSwT#V0AhU6VA`Y{bJ$eo2c|ga{lK
z3uw|v+-p?azKop%JlKcp`&~CybYoQae5i1dTx^%|oKQyG3VYeJ{U*X$g^m9<?(+up
za+nEoZtCqdEnT5zKC9j^qnQ)l0HM&Nqe);A7T&XLe!tRkyYJchz-O%j^!qI6Fy~cA
z|JOA>^9$uvze;Pf0<gZ9h_T=kMNo3WxlBanb(4vhS%WA(xgeuw(<@pZ-Qlj{%u*9J
zhx{fU^@fLd3MZ0Ja%S`Z$zbTk;Y{eTONie3qABXTk|MKgAT<cT5JgVdNE!>XO^7`j
zwadd8osz1?g;JOHg6g`R;K$R%9Hhmdt*HJ5aJ3N02)GEpeQtTbSA?}b5}<wA)7ajm
zi%4o^mzq4=Gm~x!{~~1max&8d@Q|pt!>}lpTs7={CW1*k=xx-R?n1FC=2^aF>f2WV
zPeT&*pm%2{)XiOOJQ|<Yd?^Xc*3}T%OXL)LwF8*>+E=w5wdNdI5=sK@)|XNz-HX-a
zA_4-)hE-Q40i#l}g}F(G*8e82VAXYR^KeV_D9+O5cGfc~I19>m(XjOxm9q3WDFYD4
zv*Gj4<qA^z?K>B*TmJ9C9gEkg$I#9;Z#SO?zdP9AAn0BVU93XQ#hb+S?ArbLc!Z%1
z-D&W^qL?w@T%Fhb<L9Qxikj2A1^q?V+`w9f4pjMGoKHoK`3Ct_w{Mv4;(?9M0nPNj
zW$Zq=ms?R2>wz6{J<$Jmc2X7==A(XJz(>X{dhG^D`#?L>ii@`9p(%%rw;$t1AC1`U
z{H;I2;w^zgdG3{SG(!D>-+BCS&-3umngHe=+Ni#`a!M9+HaZ7X{VRE6NXJ9&rP3}$
zbtihg=Zzq4<maKJ6{$6DaeEJ5RKv7}52HutPSju74ecppAyI}C8(`AYhtXS(`R$2c
zKI$2_n1dkwN%-4$)#aDJi39&Sj1RO#)H_F}SoYocbD?dLd*$Fb;fjYMr4L|QLsMO{
zJ(|gY;XXg%G>oqNyQ-befjwBWgh*EG*C(9RD+biD>q6(@Q~A{H+BFX}n0LRW)X>kf
zX_{tM;*++8(y7aBnWA+w_uA}>>P6>58+Y{3hh2J{b!wubCJ5OS-QO>on^x3FeD1-Z
z8#m0(pM#&6Z7?M3K5~7_OBX47t|f2y<6cJMo@<Rz-`~LK8`t$R{v6syVRuTCU6Ro&
zUslqioyZ^|bH(tQ)m6%qaY*@#p_TGW<T^Yk97YVes-u$FZZRC8j4SAhH|%?p*!Ax!
zNjn<x`#9`=F|O<v(1>QT*#`3Bay2zW)xA=qd-Ia)7AN3bNHDFD!|2g@2d#0>nNGiY
zHB3(8*0kDk+;0k(TEXAFtHyDuC8FIqn%&f)wn^TVEH26AR0KDw;rd&1;?an>w*QH<
zzwt><)j{mbpI3k2BKBeTfAoUVxu(mXk5^`J6)k&qL^6XDX9+{Z)%6`#o>zFMFgQrq
zW#l)IwmBO{{rE@A8<(|H{5cymLsJzHw|^nsb~72>_GJ+nu85Wu-SEbQw@G@u{r~p@
zi`vjk%a{N&lg;M9Zv|5`G?V+t`dH%WEMXqpk;_3Hk#c)5bow}^>GHd<sHCkG4k|3y
zu2fcBZP<;@U9FdgDY?+wnqswGdU^td($CNLJ_4+V1U&dS27kLm`9OY8=rK?hVO#oM
z<bxIrJ$vi}u^j1VXJ4N%rJujp3oniHRKkQf2i!zVDi8;mHsvCVU~8rf+(1jeyWurr
zihtN~QS4b!!?6!@DH(-3J6_@)5O(d%S<&RLgbn-hkIjICgcU>Og=@5pYx=49b13Ly
zrJynzDRebu8rnRSaDCBo@|9g53n?-Toj%;)7@=UY|Noy}Ma{<^CTZW`I9PGat{6t2
zaDw4J3oUfqrNwG{*q4kXjQO#)d%E?I`6unq0@g?R`EPa45Y|xpiRX?D^@^QqfPjrp
z`1!tA9;wNGs_VH%HtUBo8*1_;v~g)avtfdTTKYQ+w|_T@R1|@!z4MWbhw@XQ#{r8n
zFBZwGL~*S&Epds65DN=S9LDmC%OD``N?Ja3mq@-KYHmwkg<5GJXlu`C1U~hF;}GUt
zEV_svDDRB0pxY;h0iVB6!+t9MoPjoUN2{tnNvmp71!_;3|F6OefCDX3EgVYSHa&Y~
zU}M_~aPglu-?Am;VW9ar%IVbGkq@`{Tq5wAt!;iU^4x0?c1udN{X&%ux4V&|KJ4W8
z^-G%6%-Mk6r|NGgPt?6Gz6|&!zRxhaV4(F`GZ8rK4j__!PX?Q7^;*CQ1mh5%DvR6C
z?e!IxGMT8~xw^^9NiPO6=pQ@SRODn~Fsq8jD|VmScW#=CFmzog>dWa9ISWyD>bX6*
zxnZ#2TwN0;af`pj^X|5h-UR+^#wtJ!B@<t-u)%(nnNv89^gRRZWII?JVt#J;w(&WW
zT<07PK-{~3DCc9!R(#7gdd~nTLhtvpPC~vxZi795=6k5rG*>tKiK!pf5VjK5!fZLt
zzX!?qwZ#;g@k9fI%Zc#zkaZg@VAO57d!5O3Ue&0Uh<A+f@!;AesZM>Ox8iALeb!OI
zRvYFgz{G^aMMxIXA9Q8%Ks(ns{Ng8LwsDMRXV9_!HbeTZg#-D*^A&&kWc>8s7s|rI
z=ynSoO>Z_is~m>%blt}gX#It_>e2=$ntV|mjceXzzfgYM^uWLH4|qn@T1Vx$y+(mB
zr_oTl_0pJ8ZR}4L)pN;gX0*r7gHMr7oprWF%6?*dA?da-61JtJNHWwP^#36TIN#Kl
zHX65H`VqI9GB?_ee-?H!Yb?FpyYadu!+UaImNKBnpF_sZf6ay)B7}^R1hodXNP?eK
z4UhCNG=>^Ra(w)t-DekO(;#W<LB;^ENK!Umi|0cCJF7<Nn7nNZec|^$y0G*ZB*|Js
zCRuS|g@~8O?U~P+<~UTWZ3?`eRcyW0Y+md(<*%~6r}^?->^pCZ0-I00f84I3?O?7O
zB%x)J$UIIl{lRxlFHDbkes}4Xh27aeZ@lufb-e26$_f|NxU&YtVUJG#2x>BxrM_VU
z1LCx!(BL?8gDF{Vq$J)xNc>yL)$=)7I*g|%)(&0-;j8CsUSvGa_<flvf>^S6DVMpH
zb8v0T>G{!ohHICj*>1fftNM+zZtws0KCZLv(IK>C_QT1EH@fD(8$2iPv~!>Y4cV!P
zSZxtr!>L43HPE+4<>ftO;-5eywKK$aj&E__@NZF$Ub2O545&GURXRcHZf+@4Q*sxY
zWp376swn?@b?YH5czxG41HZOjt)n5ymnfWVn}~l0v!W9f09Qb$zl@4>j!2BD$PIWy
zG%tHq1co&qIS~ddbB3;u@9Dn~xdsYnr5s8^`W*i3m@VDEnOB&<Vf%ttKPl}hAGa82
z+HkJw$daH^;AquiAMQG^LD3Op&Y?F9E?f|Wjmh}Dykt9&w&hXE+kF|M0Vnd~33}vF
zrL8*oQ~Y1we)#Dl^vM_av5RC`cy{Oy#yPI5OWHF6@~@BY>F?o#)Rs5v1eUah$w>#9
z(>0sd(bH1S1!0KMO_Fm9-(30B*tAvEi!I8bj@kN6Z10~`=5`eh*Oh@TSgc~GARo=W
z<9@k$y19A1xpq3jbDRG4LD38!4XW&4?>FThiiaoIiVSTRo?|YzPPb-muv!>myEIOW
zt#-bt4&U((ZdDWewL`sy(~|m2`BN@QF+Q{|G9ZCrd6ta$KC*E*TQ_G)_3NXw*H*CY
zbEL^@$wN>XGaLNe4bu&0*GJMUg5zS=CN)LQyqHShcMq=mcw_4h9+%ozHC=V~`$%?N
z`DWW#&TppMgR}4%!g!nK9J8-_y1Mk=F&oUrC@E68`W@5@I(HpHbiw(p1ld9~Keub^
z`qq-^lE(GME<kNjtzSIdb!&abgX{O#r^dQQ*R%n2E>S@?`16xSt_yAA?b$A0;omip
zd;&xiYAZP+=TTDO@|)ZHN*1!<T6ZY}>_{_wQ@i@zy5-UG{`HCbB7dqN5AgmRL@R~5
z-KAmZe7J3gow^U;9@e_R+QBj&j{H=={FCM3!&hwmwI9#NDh>OjBmRdo%0A!wRKaXY
zbuUwpVCIg-{dzkrjjQ8pNL>HpYAi|XN#kSQd4ykQvE)e`+)FFE<}jMLyY|V|AnYCx
zC+xXrSnN5`U5RSpm2-UeeXHm-H>h}SKrB6FW-egyq$71QyHCe-$COfBK3#rRZEW#G
zF)vL$H8*V?-iF|5Y9#BVeO=G32P;?ztcA|&_azD#1Kjl<NVb_f`7P%aP{o6arqXSN
zvnp`mf0(QO%eV1W!-ri8tv%ypZ{|Wf-^|<x2qD!DT&o23<8Aw5*j0yvwl&;kQ8rzs
zVyK%};$z!@udF%1;wz`)&RtQMaDFGKn6l<$*s%`K(A><idA169)!J|g9lbfOZ`Xba
z!I`}Wro0AhvWZRO7mZreR9E&i-RQ7#Eo)~Mn-wxqH1bAX6lw&1`}~YDOpU9LWiaRc
z@RooIXSVAC;vkq<o(zMoe!XMW8uK(^h)Y6AVuItbB>o=2HHOV$EqYO?6Jy&P_Zjir
zSdU~Vo!0G#WNhdh*fC9kX!bmpEigT3bCmsT^V+Og{llt8`p6Fh+<cS+RJgfqa!jgF
zxlFNAm|Py-vG}VZR;OO(KK&ND=?Ky;ZR>R_<Cyr0bZtd>24Vk8CUe^Wjh7e|u`=lR
zCR5v7KdxbaP+|1~gU5n3ZBhfJ43hx3ubK?1htyj%2W@aOypyz5c}TfBm`#{%2?&l1
zZZmYR##n&F%-Qfx&sY;4a$xlRz#dZN+7h5ijee`#r1GmqH4-ylG$FAT_I;^i1HQ~2
zJG;n>lwSl@tAq%N=HRD}vJUEBW6Iqp&!ox26MMF1RE<$|1g>ZF_515YMLmDRzD*nN
z^mG!YT)lBFM(;6*iW;P+uLea~R6%W<y*hN9#{?F2P9Nrbwt_?hlc5Z5-65e9VWUp1
zI%)6b$RlYMaF1lK_2g5BK1$J24~veV*kCddI%|Viq_KfcYgAZe1&XWVA1~@5Vp*%M
zIqpnkrLigWnRkM-bMYreWJunqsuve*UyV^tlVS1pRmcs(8$iLsunCsst4`0l?Qdqf
zfsGR~Ypece5IWd_X0<SKLJI*ce|*N6-}=8PtJ-q0KtfpWT?=Q4Pa*BHCCK|6a3(V>
zla;~AQz^3wrCk}9YR#oOvEY(#dm7uNdN(2T(O<;NYTQeo>VEBFU=lPQknB(Lf)A85
zj;zF-jU#8q%^)|r7$FVpjF|~4a_ap{o%zuB1wymd&9i%nd>ZTlZZkpUvFK;uOEifT
zzuP{nXj0I)Z{e)f;F_(RtMhn1<AL4&8O>Qk@oONX^N0X-j$r<Nnwiqv)J!H5vu$V$
zwX@FqA1*x4=eh;{(x16)nZ9FXruea^=e-i?v(DG3D+cHSrjJRU-cX=k>YFiUaYRta
zhs7&gd}`D`d3sP^M>uhaDRg@}EK~y{1`HC3a%H%v_W0Ux9aBW>c>X%ai@s1A3tk#H
zf~(H=G5<WUU$R%ef=7Lw>PWSa4)F>bw7UVjfuuF}szWvDi%FGNcf``VoAsr{>^YC=
zxDx5wKj+;I5(2jpzB#BMK_GFD2#y^T5h{7Y-($R)ZI;v7w&rSu>o9~L!GWrT^))5l
zlG?|bHe39tvt_N<5pA~S`m*Djmbp`XHmUkNW;vzctXK7f9J@?!Pc>VG)3N=s?Q=Mf
z`c~_7?$^YrK7PLl`Ez!WhZQoR-FGaj@1u$u+TB@_R!QVIF0<q`oL~BUl)kmj*Jy!!
z%OrM9b3&GpcKqc?zoVC>ilwc7WqhsU`Q1gY<xPumqKmT=(MnscR>8ugrk?Ec!ur_1
zC~)NA{gs$vPweo2I@9@V*yDrpSTy4aZ2_{b%&~PfU-6^Hf=->RR7b!L!21o=yJhRV
zzZ05#JH}&i&O&r5ie8<WKDB9N(|h2;E5~{SHE|F_B+(XAGy(>D_&ixzz`J#P?p{}1
zv=uW_4ySGUXe6rE=P~UX*oO-+>YRizT!B$s>7{{d;nRd1xNu%PWZBliJm&x@VN)aC
z*85lCh(&Tq+9_Oh4!*7PHHMd+oL_j6g2rJY5?7K6N={KKaV`C{WLPdq<U0jLu0qS9
zBF`tsxDNZ~u)8vGuB0C6&$Z#ttcv~c9L>4B@eZY$?I>gMjY{35q9M-=AE$Vg^3hRH
zUMeKud~}B1xQjqX*!LjV5BR(PVD&&w{s=pFTmk4>$2S28!Zfj<c6uWlxa+L#sG_Fb
zgda10+KKUEvV|1C#KSYD>&Dk>nx?@_5yj8gKVe(t*m`yQbo(4Lo+}Y;YoXO9=FMKS
z0nDydZfjENPaM}L&X<hU6Ggr!K`5Fv>*Of!F2^TOg6KpZKe7m1^q7TV2Mmr~2jDhK
zfd*xVG?pwB{&ILLF$yoVCiXbdh(1i1LKGIXE1P`dK_34tYLx_2@~Jz74ckbx^Of2i
z+!A&)fSd(JNpgwA^Nsw>eM{|b)+(np-eo>Xg|<CWnda~74~7n&L*K8R^g*DR&bo*x
zu1Fp+r&TLzJwb58l5cE>ZbobaYAve`x~W5c)mrYYugE0HI%*m9=blCCU~)E^6utf-
zQ~WN?lTJSACGf&Mgqva<?QOH~;reJ&3R@1-@u=xkPzzDB16Lliskitzt*Yt-?def(
z@)Jqv0WjIeEGKuxsHJryEbE9q-xzBW+1=WlE>GA_*QhVHajuOnc$2(P$TvAVrTl;|
zA&XK#2u10n^D}DhWGyLOi)(QQ0)iN=TrDSrs09SCdBX!xfEWS*LswM!Il(A5%E1zL
zsTcs|@OGDQAAevRlUCAX_BEokjiR+pC0gWBP}X>tS(D|uJcVsO>@H})%-?6{2K%x9
zG}xcSD#Xh6&Km1+VTMRpxu~<fPZZ(<0Erv6IM%Q<VnCI-tKusTB}yQJ&dibkXc)NI
zKvQlcBCtiq;9bK}>3|wDKPk59**S`PPVqaG@R$<!DCsBV{FU4&<sGN|*Mxm`HQWb`
zc<`k1YHWE8dQ(x$I?w9+(i#vnvZ-{u?u(is+cT^n<(H^n!)NlIb9v4<9Vi*6UQV~t
zXPN~wPVuC5gzLitz(fiVd{n8dHAeVH2DCW*b(~uC|1WRE8$#JaF$XwAvR-YMCVs2K
zm8~k2=YaC=Q}Ra{^0Rh%1;o$<h2dggW(JR<Z5sn5YwmLHN7vokFbltz=uU{%-YeRA
zQMC6~(Z&}=OOJ~VekNLZPPFs6{pL9+JBTXgyu~ng_+vM-&RpzfwmHku>~r{NHkq1k
z$<Z8g>1bA&KAK(b^vs9K{nj#kzp)0>gmqM@#H8AWYXaZ$u|Dsp3;+6TH}-H@SrZtd
zIwq(d-CG8LdM$!ax{kT=m}xX3jY@1xrJac_Hxe`B>6|ZauWE5ncHT`s$zihPCYh`b
zU`;lMWV>zbbf%FYAJDyBn1)W+U&IgJF4K34-*Juo(U|k5P}L{GfAOo&rv_YyYEDxv
zRCo7AKKB>Q41)P}EN_*Opn6+qTPJvQ)oQ%SHNL{(H~ACk@w*rN!;k$*-THe|w?Xu{
z4f{5-Ip%hosBr3WCN`(%qPCwCvnCtoM|RGgzICnjvU$tE2{?>!1jkXED03>_GH`<3
z2%XItMM4X0bev%Hf@{2aKdZLFu}`Lbk@%hCPt<<t{ImIA%SV}sgH{-FWH}a_gyeMf
zeUusD+~%V7x-Ca~UV_4GgnlN9RIh_Ek^i?2iKisst}6iZ&=(S;S6Q%xehPSo;!OHp
zkXId1KuljRFa&R5B1zUEFM#qhT~fcfruWgpK&hT{M`+xw{u8PIKS*QxK9Kj>!8g2Y
z%uUv_gM5^f-psHm_O!Qo_Facm{{naabgx)qV{7`ChODfRNJ@@<`zk42Fyt6p9ml_m
z@q(C&0|xE`K%A$5!fX6|U{BCvD#5awUGvKHk|Kg!zIVNA$miHZzhK=KpG$krCLWEg
z(Ryu!A|^R{y)Td65aydVh3?$Ed3_jIYdU9H!TH^^BT!;~=O;<EoUQ>hDM5L#PV%Ry
zM7!<+V*UmU+PfM_$aH}KuS)ywniTN7);P;w?AiNhdXUN@r0qi`dq)_oib|RRx@we>
zY9IWbsL^|!xaELpywU;VnZC%=#|2ov1BlU7Pvy}JV#~~5ljKiw32Lm!u1R`5D3P<n
zHPIWL*Y1^F*G(5@OIe)xfoT$C(*SBBWK#g*GTd-(T5;#5)7-cDAZc%yImRr}odl&P
zYn(iIy&l6m_SZNnPl3NMVFS2-ejYEN^iE7@MG-C|Ua1K<)BlfV9H6^Ax9vJyY~YbF
zH1ErAzv>wbbtY>YCj`YbI6+c0!*aY<Pv4kvLG;wKHF>B)?e}JNA~3tc7rV-Fc)@Tj
z?qio}(T1c0MVB6Z28<XoW&#~DcVAtDdOrJB^q}GM#nxeeB86mzU?oGwSMzD4?o_Dm
zRmkC-VcmQ6+uw4wk2KwMv`^j1eHm5l_p)2LAD?<Uo3GuMQ`Dd8vo)5)q@1jgG_X$O
z&2|3Ak)Ko2>6C@M9#td4;n;4i{`*X)Uz^G+?Y=VJpQNh#QBGD^%3bC05|T*-z6;5$
zDyG9~y}YTbPi@KK6}8N$#XbUVt-yCRnN>B#%ZGQ>sco^>e@j%A&NKt|UW5)>Jw7xn
zsyR#*xSZ>O`EiUN1qLi!0CWHIiBxPv5)~SB*ou9T5{DvvFnjoqmSn|z&*>7+*?PY7
zir@G}O8Pg}b-#z*pWw2)S}F9PkI2h8$e#_<(a!V3FvRQ4mKrFNq5CEJLey&7rtX>t
z>WTWzh}y0Jt`V*wE)vlB#ykD^UbQ?W9UC3pxsh;xJ&2KTuj%OG>49vB;Y0s}QEg9C
z<6(CA;jmCi%nzWzK#ev%XRffogMk<2VM{XJAMG;ZpvzISQ%Tsxpje1%5r!f77SEka
z!f`)AvVu+acG<)Ztj)pwSz&z1oxors<~^ih!*?jqpu;wge=F>-B;@?(an8-117F*^
zTCpveGSi&qdt4QAX9ef+8^1`&aHb~SmWKT;Q#ZBrFZ)H5XQO)uR%wEy^iHf1P3xDY
zZZ#Ox6SeETYv2!z=$t09zR=KFDU4L>iV(}nz9QtA&uX<|yAaiyX_`sQeOH8<REh{3
zp{f^QrZ~IKAX>MGtQ89_P*V4iI40COTuNhUmWV=>hV*e!lSLGwv<wVG)j0<!+s(zR
zW+^3I86Dl7k#K+At&woA>FDC=foz0f4hDdNmpynIX}0l-H@xH9`{LH>+lHL|y7OOC
zSQf$QKYPi)YlwV(OW9hMe)(j$^y8g`eouPZQOe5wsC}G@x>bRCqJBL@ZPy^=8sQq^
zBKcK1E6lv^W!RrgAO?5-vbza?1Z^Ho*eDW~Jf7sxXqPDnJ3H9=$43l_T}V`NkVsiO
zoQ>{sddijcRQ8W$?|4iZS)|H7jw*W4yX2h_BFYH1pNK-9q7svY9IEBLmE$N+s&^^s
zrA~&NM7cy>la&h1{b#f39bdVECfNn91!?~}*Pud!4%;o`=PqzoGH0UoZxw~wPWxP)
z*$Te%;5UAel8#Mvmu@2pe@l&9Rw~EH?!QK-kea~WzU<#>O8LT8%a!e<@M===n$no0
zzo~8V{yTwbqU|+Zb&RN6y{IQ@FP3ZIyGFRk(9LvK@$M3RDOgUy)a+%bW*j*&0mWps
zxxcQ&39*;8khm3Tge3Idmiqpdg_a{#U2#tGYgP><=6ZuG?JY}3+z#w}L~MAP7cC`C
zcNd~+s7RFXHnVu!W~<$On+qV0l*))-pS`9Hrbgt|P)u@cmq!N%2@kDp2GWFm3sh*(
zVJr6KwlnTav2Dej4)J0&sh%CBigUDniJ875cI2%hmLA`VfwBow>@G|ao`jXqLXz4k
zZ79Ph@sunXk>fG(Tp~@ZPXwvhXeyd<)RevLN)n1f>hBb0Eel3b$h6Lnf>dlcgJztw
zWvA=cX<IV?gj|I<O$OX)BGscp-Wse0B<lamOv0{>YZwxdRd;JT^{y4QLh`Zg(};pE
z7NY7(<1~ItGT*X$m**$|D0Tmzc)~MY@|w52kMss`13~g<d&(<j=vbTkj{P;iwjg<2
zquO2FCE<VYzplCRt+>*!#o0Tz-bvU;|5s<_Sotx7DszbhT=&xZUo6fLqXJ+cg2e=u
zsf8faBgtpBV)riR8k&TiAVVGmS6fmT#~Ix6NE^L)ln;q@oY;Xq%q5%7BE_10NRS~%
zjTSwIP1Y6Kk~vIsiUWZ3obi3<1i$hNlni5P;w`4Gx5>!4l|vIG2hU}#j*9pJcSo0o
zEaQK0+*A|eJVTkNk_l4b_3}8zL`6`X>QuxWvM)=Ra1l@TZkRF?q^%b%4ta0PbLyQk
zSz<SkV0HRcY>%qioIF5blOMe213%(9Pni8+K42K_jQ&7|0X=dgfn^1v@V-J2#<pa(
z`-1Uaqg_5^c`=RS($co%>(8>J=Jo8-1BTj%<)yMte7GpKFa=0|2XQT1eDNQf@-I2n
zsrzUPFW$6Ti|FycB=q^0j4<fD9LkC)^#iU;mqHa|uz>lMfFZHekeFi1>k3`uJ}#L>
z>3qMs1W-=FyNXTf9aKo(Pj*%!NZJPHOTAqVdk4lk$8|qpHBBPZ2ExOV?WYl|WgiDQ
zN-<IF*1i)sMKU{<zQE%MT{1kL{iIR#>=J_n8A{Y>(c>88xMZ5T&NMiKbNH2CphS(G
z1CP%wKI}`_cP%k-t~Z;gn1&ckMpM*9J=8{nO&ZN_#?{%ASirlzq|y7V&+IRa1r*Zl
zao!LXt{CU$)unS@;MM*}kCE*g=!Wb_mE0f4?5qCQj~>u~VUL|&+Vvf1c*gTcs%Zsp
zujENg-=xf*1?CqwE5zb{88r=?FT6_g<^f+xJ^tyT-3tN*K4ks1cN*E{od@<0t$^8~
zJVW+S&-DNXqOrciLjDexphf9=c)pS}PD#V^|1_>#S~Bk>^l9BWU8xugc(<3uv~g;4
zsfj+Cs_!uIcM#W>pme?1JhYgkZyl98$V&CQNIJjX=cLD})JRlJB7@pbJ$o-mkfBD4
zo_cTXP`iAy5=l8EsVMO1+<GUWk2glF=H1(d?%Y=To!@`_%)gH%`zNN5mx8qkZxbtc
zn@&7nx-?(u02Ddnr=60E8Pm<)<<g1-8EOdf+O)I%UQclPlGpb{{rI4s0x>i9wYHfL
zB*;L=RT0Q`_()%zVhdQGz-D`)YUACE&6x!#<jM!n`M|OJCBNOd%b&fP0~m5H=K06?
zDm*o17Y64pxv+NzLqsk`a~X0IR}2ar-}GF;{j>g{q${JNyE76Vx?3aRHl4-Ola0hz
zmH?_e;}NCLH$Hgq#*@z(^tKJ}T&>Hp)qlt^t9L&KNu^sB8zOn!wehcE2(vJTWthUs
zj6P!oJv`gJm~VYV8S{+~-gwTC-_&DX9K69KxoQ}D9j-sbMkNM=2ujyVMC!ye;$>(n
zI)AF~lWXpu$tda2=;%(3=#Gu(&W%jBntBi;dLScV`k8pjw4d~#M)bfXK6nN&%I`C4
z1Cw#a*f0=iNX*TuF%EHr1s$p{OW^Yh)W2@D1eQN&X3haMOvV{w!$6=RF;O_cA&#)1
zLygM@o_&QZzj4OcFc4@+OcWM$toP6Qm69HfPIwECaD-bp!!umrCETB@HtC}8;FW3T
z<50El3uv<&)BTh^0V)0u)l?!Q@H<5s*ZE{%Lp>@w^rM2M!KpY((R9a0%4z;5?<xQV
z$@gH>UUM3U6k&IDehve?Z2PpD02I>nq2JkfT}6X@>_+FX$PQh%t8<al5T`~PXr^0`
zYe&5mDXVpclT{mL)U}cSNc=q`0P5vr-|M|sBDz26D~5Alwq7=%o~0y7wkzSy*x+YB
z4bA)#hMrB_P8Gmyr!Dad^(I3`L4HeO<ns!)g#j$FUHpXYM1r}}i&@wu2I`?xZ|h_}
z%7VO?BVSgyxQb>5YKgtt=jE~*{`i(|J^b(6x_xWOrvA5hrHtc5QHZ<7x%QhwIXjjg
z4I>c0y#`g8>@{UZ!ahR6UQWXLK%!DFQPC&dR=a|3G&Vuql+lYeU=hoFAZH~7tq*ft
zsY(L5)Ajx|go5O)*Ns60?|c=blV3*tY~Zn$Jc#9YVx#`g4F(_p%+lhwobZuYz(xAX
zpQggN0K9wAXdlD>Y|UkcVcrc-K~sAISq<T=ny+X9Lr><LB}nGd|Mu6%naeAmmQer=
z4qWlSPXI?O=55R?klgE6t*TY@oB!^la+;>Ns)0|fsZf|w+xt;}{;at_wMNd)|2Lpk
z`eQP0WcZ&D`1OCW%vU~}KV`|#{h5({<B#viruhE-FXmGF`$tsX{@-Uk`OEroA25B*
z`P-(l_5Ya!g4Vi!d^Xc>DJU!8)cvWUAJe98RzLOEANtWieaHP5KAjVOb|c;b7(a|Z
z0iYN#zs&^V@U@^G(@nb90QRqWi%;Zp4L4y12J4o~uoGDenEx)gO+Y`b(bB`&ou?Bt
zwjHJk=Bz56_h=wkHltRbRV&vEGe?-BZOQze+FXXx&aSLOL&Rl$_~_cpK6%>vv}da9
z^|584MN|OdyeVh(^o&XY=F|NIcJ6L!JGcJ);VA8g&~s;%J4x~gVRBdTwSVZ{lDmVC
z$C2y&zArnHAFxe_$a}cRkb3S7nrfCS{x^87sRio~hVB6;&yD&v1Br8oh7HC}ZWD{g
zS`GhT<f`&;PE6c`=S~C>3;AfNvr*S7-UME0dN>y+H!Wet2d7y-q}~{AW{%d>nU?1E
zuRogDJ9U=jGj`ief+Nq~_8&a-iMC!LY0veF7s6;%yYD<Pc=+f|JK5n%=kDcwn)}k=
zgFR=8wn6xh=zz^G@-(k_i0~X<za8DrgFE)@;o^U)m~HNGLPwk+7Du-AmN=);$43xw
zb7xE#a6=LK%vR5|RoV8_CF%wV*4M=hmCJd%IX<fOWBWSM`Hrtx(qFzzKk}biS`Qr^
z!2ECD=k(0%Zp9TSajv5J>pVbgzJLB(&P|#hd-&y+f<Zk27VR^W25g?&FL(AXahAmn
z7X#A6%y@{%bNA6Z0nC2Xzr9Tf*gL%B#D-by++Oq0^`1Yj_OZ;6boCtrm%4QOiEGd#
zU_2&YbmNh@i|c+u<%G^UK2l!kYqM!0)$K9T!t7L{khTkIdk8qXsJFDvmakeV!ECMy
z59dTZT=;%3LTKompY&4Sm|12Ewd46HYr(#LpjdMIT7)X&*F+N=H_3asrMj9O-C?6a
zXC;27X%hH(s&j{-4JPy?y2-x@d2SxfmL>0Qw@Op;e5V@~$ozDK*B-J@d&u>QCAUAq
zgc9~gaeqW_Y)AKoA(te&`P^)n&NLe8M^i0jkr^#g7bah9&kH9$VGj#RrXXfwF4VJ2
z8II0P_kvb+b>h4hwvC!<F3CM&_Rz371S3S{#*bgvz!MQc##)|~Fn?bkPVI8AI&@@o
zujFXVn&THC5)w<#oMAimtvRKYN<A$b)k2o=VP}MdtPHgYm<BWU!mVg)%)b!ti{mBC
z=d7MNo7qifM;|-mE4rd@MTQ0IncD!C%w=;-Z3)2m<C>*|%we}5N0OG-`9r$^<L}!v
z)*R)vJ-&?k*u9a7VEgD9&{l)J=5480&z<@t>n6#Xn7wBh$?)qeQ>7`xXH^4%EDtel
z&xvq0h-k6O(L9B%dPSMs6IUDG6PfEnqJAQ~ZS+$gZXxbuz60#pFg0?tK1{N!GJly{
zf!(~0kf6taL6#3wU{1?{FQ<+y^c13BOsSetg!MX^F^Q))OL^q#-8FcH!+CGYT=sP2
z#bMx>0CRg!3q7hiWsp04d}!wyd(ZY|&|>=tqq*aUcjeY35g2EQ9<F5;aTXjqbFw-l
zc9tGo=Br!pJS^=6rDq<L=7L~7cMqzK1UBxg@`IgQmY1sv@r_iYGvpJSkY=VV_f|Hg
ztu*(uBuhu{qyEDlH$4E&Z}fa509oJD1NePw|7y3ZnmV_7e?ndHQtfd@IQs=jQZBRm
zl1+5x$e%m*yf!iYtYu}xP)|{PpD{Iu)6%)y`aA9_C$r-{@b9aqd%@6m_XF_ZmD6}s
z?qrt-;c|SjpV{AK3|!Szwv4h|Ji-3kPRiCzQbFEaW@@~hlI=HreUHO6v1p&0aE&IV
zpGsqsTzcQN{5NOZYsvp?Df=~8-y1%eO16d`cwues)V%CWCwhs;G*5Hg?ns_DTJqbP
z>aJb>d9B2#j{Pf}_*T^vFWWOuT=s;frYkUHkLE@1mwn@s(6NqO?x(Q4Hf^vZ*5+%J
zqJC=CRehRTR`Nw>ttCynClH%LTaut1-|2|Nv5H5!wULLY85#RU;A?zKU@^3GjN5s=
zOF%7U3+##$$~)J;kvXL*NT_BN#?JI5xQp#hXlZ(WZ288%WuMy7xsxq>6dBv2f9?;H
zUGZ#DRrINObkEPv3_Uo?r~95>L}s)29yOvKA#)`4h?<en%3rR7bg61;X+{&gQmrX>
zyDmqER|V*Zhj<9~-NlYe)o$VDa_mtd?s_mezkI&;q62}f>@<f1f&Ns+3$x9l))8w)
z0vbVVb<yM1cGsuh)ld?*yUAL{jYbv!7w|H!@G8Bly=$@3xuV>WS@lHFh(!Z%pe6Lu
z1Oz|Cmwqh_M$KRZJ|_@BEvYMgL4j+Ow|d$aDJtWLioZ88iwfc?_*)-jyn+en^hiGX
zK_<%wfKqZXsWYU{AWZP6Ot6Iu(CLvj%p$G=i03Xo6f|tv>7|eQyfrU$3id2S%SQr&
zXhFX0`WV5O5b|s5M@oTx(e1&{MyOcOD(ip@=fTwy)A=YQcAnsMEPZ9!T~rp`9-Pp-
zy~Qfa&m^K}Uj<d{QlGx}ewEsQ&}r8yd}}Mo*EJ=7LE+c6<jsZa&em?L;jbcP&lIMl
z_E35m>R1ji9tiYOilu3q3>CebW|7A=A(h_-B$3N5+w1DWQn<Qs;MWjFBA*5^N6@RA
zXY-G`FT6H_`pyJaQi6~Urh{gb6xoT6<=&xybinO`cS=JeKmn=dQe>-&RAy#Ke1dCI
zGB6!t2iyQ*;M5_iIWudCf_cA@(nU?QJN~Mig=e^>^&hg#rHAac2{ku|FTd6aW@uMd
zXM62yMk6axU8?5qU9=;ZPb>IxYQin;^n03HW3U@{q6shXCFhwo8k)meBjY!b?}b?H
z_fCG>c=GN;=6J4H(TJ2w(tEzLxIG}jtJcuL@7cjb;=fnIe-F$4D~>R4IBV(nIRaDg
zBkyjQW2%?hD<QMy1tk)-$97R60|*WXcJSz+uoba*sL(6q)Ap2LhP$hU;v`bCzdheE
z#tZjls}tc;3|ZNvLPLm1S_UPyuTI2lL><_@U<BhF1&e(&7;q>!oJx@fw@1AeslscE
zcTl`rQ$`jT20iDrEmXP1od^*qR=xRj6bP(Xm!{_`mmJy8naOEdkXiwR9xhA2CxU)O
za`b&&mMPS6G*6E>tHA8VhEfIy(b5WTBvLveImBE{B(cpNjnJ68y1q!>!d1T{&I7Ng
zC`@G5Qof{TN7{qlq5%%HgkG9};HSzrY6RoeQXy)PS^4!-g{k!-STjs-jmJ__3-{Qe
z>gcZG+&yNc3UNy;IsqK$HH5`-6?icLs%0JO>HX1;1Q!kP2KwBKBaC7h3<kgpS_opq
z1PZA=$mETOq!t3%@13*}k<vw4>COCVE|R!t0A7VqBN+B9&tH?CwUlyFAaW1Npit$I
zBma$cF@h-#OkY@SURtjfld0CT5j2=i==CVCA>Ecp>vJq5;whAiQcpGB6Yq6bn`%ZX
zwheD@UZ(-GLrgUtMD<`~8TW%xV_0ka3fuybCE>kso98)2Bqwg1AB-9!5!OhFWpLNg
zu<p(-RqYYrjp{HeaS2ASRlGZM0G(d2#{BSxW(|9TjZ7Uy=++Wm^D#>k_R4BKo?Zn)
ze`V`U)j}itmo$4vpUKqFI|m0v8J_J=hO>|>>w)-`6k+@!N;i^T1@r<@zYq7R_nAIg
zv|3VdF7|Y)!nmqVfG8YhFX{yFs&UH!V(d`tD~IwFoRvVtm{+D>4RIptrr{Kx*L+k3
z=JR}{_NDjH<sT7DF+`m#kW1vH7@Y1VCz(=K>2M0G#mcSloM1IU9+tA|94nnp_<*hy
z^J_b<4#+p-!1xc_Eiu-rMA_D$dcd=)jfhI*C@|JsK@>)zk`4{>=oP0GiQ9m<TA<Qg
z`eq_Op?JBr79&hQ2lGgnP)XLFVCyJP$z#hi@MJTEr>=Cn{18)`)l3`q*@+17i?W_(
zzMkWZ=iYp_DWT-B&>Wh+n&+eVxdM+e6dvc0^XSg{`Cul)ZVSI{c|(gYS??DsN5OkF
zsLkbe@0kGwr<kAe#iQhS=d?`9*8P!2%WfOV-qMy?u^B|Ad1Mugy9o?9q9W)oRzdYF
zj1t!s#99i*(#g(Yt&4S;%GISrbp>QAF$SL6JE)|xa6A!{?`Bgk**k)aOCvP8e@WVU
z^hMSwF6F30nQlp_m15i}zvPJJl7>Km@v4=Q<13X(@hNBuZ73WRTM0s@k0K6fdbug8
z#GvGaeE*TQ{oX2ItQoFiE4t!xH@#p3y2Et4=uXh>Wf6q#I3@=DvZFH0O?95hrY0c3
z8`WV?9~d226mv!}r5U5pAzhfj3!U0fn6wg^UaCrJNFxySK`NE*@k~BIxG7^?Ec#Ca
zqOw>uh#TOcP#d>c<Us7r|KR|H*_}Y!)T4{LM+hR|s|(Q<l?EirfCX@Xan*k>(c-jO
z_?`g1YTO#ZpiFemntZ}n3zpWsP?v2vy*m+CFxUI{2S3$a;?r>gOnEM!UH@Ef@1(O=
z-3ey$fgT5Ix`4UfZ^JC&Dww)Cb_R&oXM}itmZT>yl3|kc8bE?F;eduW5=;kX*RF_N
zi`fj5;^kB%g0fe|l65*W-kC{WayChoX&zPUNGHancgQe_m*X{f&0Lul91goOD#1!c
zuv8K+ry}vGGVSfjgJQkKTU^4vjmNtK%;&zumfq2LvYWL2g76w<O{08BuaLZwh$Kxa
zwxzMG>_&$UZ;#h}nn#)O?I*QZ%22s)VH5n?i4!vTi43Rla*F4;Bd_F&;ikI%A`h}n
zE1eKaJINr!%c(%L0wck6#@MwgVwW<TK_*^K1#(t_XhCerUzWT{41n8i*>NE~HF`MO
z3N@^|VoWF<PZ{>ntEF>#*aHMqvHi6);kBU0g>d@US~0*L*g6<2W0CT3*}2I74!Akq
z_gfu?s2m8c96VMpq&U2Fk5Z>*IY$nF2oAV60a)*Ff&k3k*Msiz=+&&|(l6xzw(Sr{
zcK(taV5c7%2Ay5SH2c!|)KgRKM_H+eV#SmoxcQ1oXrlLc_WI%eR1rx7ghq=qxrZn4
z!<WVrCJ7&E#m0mA4|b=*;d*_RUgQD2*4|;{$d^YK6pgstM`t+4^K1F)`l&~0IDaoa
zLaZ<NvkSPidx7X{{M!!w-{|!G7=>p6;wQ}#Sj^cfgOWW>b)JDs1P)g}<%V(EeRywq
zM$6y24|j810Q3jk3*(^jM=w;5%9Z}VAOLFK{iQ}->(KkC|AG2z0>G*7uB`p}d(WpY
zPrZyz&fNup4`VZ${r!C(gY*Oc`OyElTk4-uHk-TTo!F){Z=(GMxZ#oO7xB6lx)SKx
zh?bfN!4A;7(R&+>et=|7_Xsa^l%}UzRumcXzNfZII%-x2C7baQqK_cLjCl&q9U_|9
zV3uB6BBc%+kzox+AkKT5es<(RU8h60hKlN9x{49g4fUxO3b8iY5`Z!Z?$Hpp4sl(|
zw-Vr~F+)(GK!JquL>~6YpwHCTb>h_&Tf2fL;M1i_GY!cvZLBrVXl*qt^|g-xTH;lX
zJnyDhP&b+JW>FltmYnjuQI+RtIyq;CD`Iou<k;!{5UG%-Qb$n$<xvgA=B6E2lXDb2
zky@+`o4_6|)RBa?iX5PY<m&=lV@exJ_h__1rgc(LC>l*xTI5Y9`)j;84ZqUJPnN}7
zfgg?^^ivs59NQow%tmH?m$ZnW74%EzC~gQ+{M4z?=_Wg+TYTeq;b7!wv5t0dJt~JT
z(z$bvKtYAg;!rt4Xs2;J@*&v_Xo?+^I>ZcBEjQ&t#1s`8!zBz)+3;e5O1Vy1Te=pI
z%7)Zy=)eZx1RRH>&<}5tJqVwL=fP7Azr=%|fmhk$c4hHxfv!{~UwP^qF-sx~O%%Dv
zu{Eq4C$rAF(^h-;eTgv`Cvsu;9o_ww;Z3>9J#mATCX=$gxlWi)R5<Zk?6{S9vd@<g
z^BIGg!0T=makjYhc+{rX-;!H-v#W|Uyh?CbXNZrljAa`gpMc9y8eNBBm)esf+jP>G
zlez8mX}uR!r_fdMe>6AzUgcZ_`n5Yj?0$m2?^oJOjhCW4H%IrRthVTFhiNO0pX$5q
z(mwjUEVaDXyC`2JV~*f`Wdcs5NG2+JN^8IjHn47UX+z|$BX22fBp`&jf#V+F$?UT-
z5khPX`L3i@5cMPL4_1!RSnxF=+$pekCX!(Fh6|xPXX~U?ZM#sw|3zn7MuJuaW@Z*-
zmd5bu6v;~)iXvlrT6qod2(3@13eG}73RcM`dM=Z?EB}VuvK)*X*4MhLkj-*bW=C5j
z1ZC+|$egp3S?;XiYuQ>p7)dwp%XWyj@E92<rrMObH`r>yEs)zlnTKFErMh9(`iQ^_
zIO?KB5D>>}KqXY+($VO(TTlB+#eK0h<;<W(R7F=Rim-U7_Z~EslAcc?3%Lk$MT<d7
zSrUaqgau^8p9WbqS!=7v6aFOdrcr&au|!R4>{x?g%gG`zJUs@gOV71Ru(POv@rc0@
zQVDux;^^FDOv5=5RvlS!lsiN8{ej_m!un079nvY=j?HKP-+gkC^YhL3T<2lAi{+G+
z%v+wat%~bQ7N56({eYx#{IwToj?^__IKFhgi!Oo6tmO?oL+{y*a$D59S(b914XQ3v
zXoLC$^CA-7qi3OtCU{hMKRS}f@FuU2Icycqb5~GkGrAW%dYxDv+f8G5mXtU|^@c(A
za`sEH9u#I%Y*Gl-5>91MAp7!YtQFu2HoZ}Qb80Y36vt})3+8b)`8%+OW2N^P<;FOq
z`sx)OgL?h$ik1wFNg(8u3;>Sr4cymYCGb_03bWX>ao;fK7XLBIJ@--3RhG}1-bW~F
z-MS+=PI7uCsc<8b46CPfCCsd!nwz)s^NC$9Y<kRXIQF9$@ZM#r((ZazFqE{B8mdBE
zgxIA;nr)s$2((immD2Ig>b45kJ0aoiwgG+DIeRzxBAfyA><X-CKdTfBM{iMJ4AO=$
z?RIWY=l2ZK=GDG?saP`TI<?}sfo`Ya#b}{2`2g)6Zcu?l*;Kbg1p;CD02B1Hj%kqP
z0cZTtNe`I-REqx(gP8e{qIC%p_2%2HLB$gt%0)N&x*<X(2e9aph5?RrW0_BDr#Obg
z&!A3Ziad9$B04%q*%3i<xsF*r(%C|p2F)HJ0*x51F3he;Ic>+V>NK1cY2k9bx~NHJ
zG&d9K{39L-t=6En0%{rX;MH8T0zwpoB`!X-n1B*>)Vf-K(CiJ&LwQpQ+j@5A@#i~P
z9>c~Z{>brsH?&R)Hx}CHsFh<SRkK}SdZtZN*mO&XH8>meAzHQ9%gMW<+}grjrIez`
z^`k}e0?OaMe3;JJPS0-1GaIynrytX1LTlOtVqi4Fcvv;65X5|pZPw#}YF@!v8uT-D
z6jAu=_lH>+gZ(I&$H=Jh9_P9-@~J7M27La@3~@a{+$L$K5ya6V>pA&$eP<%MFIU^%
z$QZc~^F@eG0N)ixT1%cVVek}h9BLt^!geU<QOu64LUC<Xah2Iq!!y%eRq(L9K~_g#
z=V2Zf%u8K)CGE=6nfegkTzRgW&w$+O!qdIqT|Qh_s>)f6j-awXOPp!Ug9<NBoh_gF
zx57emC@~)=qj@<jO;$=KG>Ea98of>BCP?3GXf(@6%Yg_OQ3%74cBdDCO1)vVgt$~<
zOG_r0NGO<sY3;G!og1`6p`ZVRqsyuwqy&iNM?sDh4(H6;t<>x3!^oCE2SV*dEs0W&
z<Jo@bb}RHVQHs?>RJB%-{zjbd^x0!lo+5KM11dvVOEC1z?g=LdM@PdZglc^FMpJNN
zbWUng`zb*JgJ*UQI+tP!$(8f^#|VwmvU9rDo^E>QDv1g-3ri=7Vehg@9U`8qOq%&?
z8>q36MX5%HNH`y6#8~MP-ktGs=bY9**?OGbD<yR&wRu{adYY2U^x8G_ms!^i0sK=c
zi%xs!5q^O}HAa%_Qc<D=YZn(!3Qq7$InNN-Jwo{0E!V<ar>!i=Qp0i4Qj-vK2~7!w
zajp<L_8cQTcQGn0(ftONK+5cM2*No_Ll;Ytdh(p&+;b53Sl~<M|CeGDG_Du=dLQD>
z?eNM((?MJXh#Q9yp0BZWVn|Gst7y+EBGwfbMtzN9XzE$W%wBIm8bN)nBOMSKJ#_Yv
zH4(#Y)tV`~wXj7{d9h{T*D!m9%sYP)E<Fv}QnI4agSrk;s4J}{V|QTIQG!aLoC~1k
zA;M##UySQPWHw-7L>PV?n<%nHSnjU<QR5I1gomrB3KYcVPPs9_v|~_N<wOA9Q=H|w
zof52;ak065u7c)1w!MaG`S>b_Yd*mXZomv0ppGc<q=wMiL{SJ#cb`z*bvHyd7`%1p
z7Nsj=lU?;5ih^`)ue(>3a6yD$edWlJ&OM%r_KI~)F2Tul;rQm@+V$x48v*ZJ4bSA1
zv+PsSmmx|Q^G0&N)chseM|Y}o>djafIzhVXnRpxYBu>+&S&A<*&Uj`KYXU+f$Cy99
zf`Fq1ZXey(BXqx!QA%l`ck&x+r!t*nHLqPo5Ny=jS0;Z%S7@T)s3fPdE|G@B4{L9+
zAE~}y!pjR=enI2m0F^8#?9{h@>dl>eIlzW6S~_^|Uhdy9u7`aNYz9oPKek??60oZ0
z9Ozv(-Z8=Ui@FOU&J=lNA`18md+O7HReQt5qU37a=_h)(amR_m7#|yslJJbKIqYsR
zAthQmp&YlQ<9Z4!33xM~*qSgsF_@=fDb`c5EX_vdnmynu>&Tf;Tk7?@^npy<EQj%`
zF?pu&VS!v~&W2cMrt|2{14GG$$Mg8rWL}!gkfd$VKElq%0giDa4~FD>tgrU(zdAjq
zvL6H?86r-5=&>O|Xi2c+l4ed?Ur!f<(8kMvjS1J<o};6XI$@UC_CV}}U)uJpnS^0X
zqsDtpNHtqJcMJi!`IQCv$l;u1xCDqH+4)I#dLT*KHz@z;jEu#X&YTkJ4{S6un~VcN
zONr$n3ZTK_ECR|X#3?k2Le32KEV|6J2(1U%v}&sOr9j?`<CEAvJsQzqYYE%SI#{<g
z1p19cttsgk28)RC-5OG&2SAJ0JBRrU#iudj_QL=Rz%bWS{t!F>*I~hM#zrYQMbxwC
zIPD#6cy!Wax(Lj7V9V7lpX)xy#lS9Nea`^S0Kjx0MwXdYa5_ouuL5_vHfFvA;74cb
zp}bAm3ks@@?3-*5J<1vCu;&}?rmq!(9-COB3g#y*0%hL{5yxd1R)6TBq4dn<pHWTP
zVPDPqZf1NK)R-mTjHnMAdnQk0H{efR=Z14Qnpxu^cA53Q9H*-`kS*iDw(v)AH(Aev
zqxlcHEF`eb{j>cSyOXtVt%I`{$vvWx(d{Z}@MzZz*U!N(RA(XBoyY6Y`7M(q|K>>_
z;OhZKE(^Z(jL%z77k(~C#fja6cR-|N)~!Xe;a=tGN@jtRCzy-eS_n%yr(&fsYN;f$
zR?MyZYzc-~qkcs9#FgO^3CP;NqoB~1#e6mT-K`9l@%>Ma3w6Yu^<wv^ZST)Kdp_SL
zkyJsn)GHa;F$xRoGJd_slMKF3e(k9}KKOTzO3FRya*d|YfsZ!pGzws;;Uls4tJ})7
znNr)CBE|^F`Gu@MOFr0QHLj*?Huv-$*1FWe@T+=78_T;E{br%8YRj}03n)jR->Ctz
z%0T8Tklh8cTR?CJ2ZmJL6Tl43gb_(ON`>>tsTfAI;@wU#WP_OtCDE`F2juMI!y=7R
zKwRTwF>@lw+V>KEiCfGP>Aevj&Wu1_cgXb}7Md!0XE3~pj1nPlA|!m?L`ZnOiI5ob
zrGJz;1UmXJ0t!^)e|)5JQBLwOa<UKT2qY1+n31O(G*mf>+*EmLXNItzd~y~LT3V6Y
ziN3H@UnQ`K+#A+`OlJ>ea*zP}aUj#cTx;URu8GWLGxa~tRD*Rzf;uq<e!%PmdG>sA
z={QE(mZ;F0Y>S>guL!k)m5xy2_QZeh+mN_5{4Zr(_(ucQ!}ioIg58R#Xd1$H1<krC
z&Y)jyEdsV|@fz-HJCq|2(1CQEe2JN#H0#!F-v$k@1d2UdAJmEC^q8)txfS&acruX5
zOEF7R399ejob-nGmETehlynPumciRZ?=b1XlR0Z<e@o?#1D-|^JNtckgux@P+B4VH
zK2}Y9tQ23>api+4kg}Z7IhJ>}I!ls1Q{txnOX97;U6<*`@?;MAP3(IyE7)(?KE_;W
zRy4zxzkZCa@>#U4j>!nH*M0RZ!@|1d;(@EiS&}TTBgGq^G2Dvx3;}OP4^95K_Uwg)
zA6!rUW+Q6ar^zahMG-Koo=gD+cAzdoE-L0Z-(v+rIBH$IeE)ILP%G=oGF?m&l)_FE
zB)-Af4j+e<!Kx6v#<)BJ3?7*fw9^%PbmPpq7nl6y_MtA%&h0Fzj-_#b{K(p&^q#^o
zP=PTGI^Dv5yhZ(9)0eL`*9J92gau|9c#4A9h*U>@$|+6~S_&-mNnyWR%w`x87H*q^
zu_@hr!^(Iy8FJw<^_f~5Ol7KtXn~%%iahO;45edt-{KJzRFYojKy$U{_$cojrzn12
z96XE+3ug(EaY-8Ft0yzooI6<*;2=d?sb(wZyoPS=32DVuFOwFg{DexsU32z4L9s%F
z1n1qacq>6F{wXH&sX21iOT-w(C+0wR+>{|9mzK2yA(>XFD(#_Xb2F@;9b$E>+=R1v
z-GWLPlxq>SS3L6UWt5g5Q`K#xMD+a`qLLlC4J-q!tHPGZ*@CI5F2z#HA4;IClfS&K
za-!Cv@&%a@5F@eie@8;d$dQ(Q>_x~`KsHN_G*d-Ml?3Yvy$AGWWLK)DQs~*Uq!QAY
z=n3`I=(Nc<b?dbpSm{nJrvt~=Z&gd&pr1-4RhrJ;j%6DVtF{YRmcNu)BwBt<t5@b!
z3*!AErKZCCSVZGmUuP@~L6tc~*zXmW@&i?@iAJvVwJs`=O97JtA|(~!9Mit(2G=>u
z*ZFZZGza}`Rwp&eeN4-=L(9*rOQgGwCRc}hq8V3hL=!Jt2i4i(7*eHduRSdyQc%EF
zVp=d}2uM$4I=~jVM1N{oP6PX)t#q!^E+c0sd{j7FJkVrKP1O$DpkZ$pxj7i*ty;)!
zx)67(7La9UP^4|T+)hdrT|;b*7KjHf&^v*!c}+l1L)nTWgy3n;V>G#e!^sdibDJUg
z>?W6vK{GQrDxty%#m6e`Ra@o+$?G?olyQ~hc9bRHftP(2bO=Y-xz5PCXi%-D&13kq
zg)5*9r|Q@&Eg-by-UBr536I7Av;la~JAjn;yaQzRSN;V+18YqbXJ-j7T3SANC%~fs
zCEL(eg^k^%04aJ8ko|KjMnHQt0hvJedq8Hd`!yg_D@s85TU#W0G*;D{fb<E-%#dVT
zh{Ta_Ci$B@5KZ5m1|&7alspi?l{_G@B@YNTy)J<<c_4x_+1P%X55vp?5zI-pN!%&g
z3h0vu5(tzB1PbK=F^6K+Wxjt?p4&%bYWWgW4I=2x--bvOk{!n8v40$@#}%{A5~>-<
zLk=Z$L)pfe$j0eRLs-H(z_ke+VYQ;qt}&wV_r)%?cl`7(W<5*L<}>i!woxokk$k2+
z76dQkfp|v$e_udE<H6e~BN|5J3xxu|4~_EIE19r<M5!K#DBargAT9s=7mWY+e+PO=
z`+SOPRJ|(P6S0>A9OO7BIK}DQNg#Jq%7cXW!!*xG?v7uD`<#)=15q2wjAo{@DSM{l
z_cX)7FrAR&;kt%cNre1OaS?D+VOdZ{>n}NAX%4w(ANHsFK)DxP^w5vRW$Z1|5uD;~
z;qvHtx7|!{sr;trUEN}ZpbOA3^qj*9o<Jm#3##WpAQ(Y0+UjkMNw=Z&R17CbN=FaV
z`2v;#00000000000000000000K(2r!yXo{gx6Y?CX&*#HL`1x#aX7%W6=(tq_xPLm
zJa4P(nIpzL3t7U#at`6(Fh@KVd7N}z>!}twZ?SMHsA+7mgWe%>YUJ!LJzXuv66|_A
zr=lzAZRmBk<vF7&nH=}iQU^NET1Kr%oibX_W<ox#AfXFwtJv-RvH2x8)|(yLVzmE8
zy>3(X-nZ5S(5RsfCt_hj{Z$spL86>8EUawoW++q|y@0RICkU5qy_iT84>|&h5lKN-
zQQGp1C3rcJmy9D5Aq4<ac)@Zq5uB}Ci1QMG!r(NBCHpz)8wWEth1=Xox~^pvZ94Sm
zGhoPwF%zcD00a41xMvXaMLn1W;1U7}1s%pbICzEXh(eX}%8V~Tq0;CvV6xbpYg-?l
z@r5F>M6Ot+0FA4gyNBocWE((_1#IYe5hj$mTu7x2#q78%ElZG_`CreF#Vg~gm9-#(
zCx?6rMJb}BJS+EeyK}+!@EVRdocA-j9t80Sh*J)6jv4BP3m7^IH<D@@TCBG0A}gw<
z_X#G>Wt>QeGY1f7D7HKHIyO3X79dvqzm|n(ttPYP7-liUm&Bx&#$`a7C@srw;yegS
zELxe|J>SELo(Z`!|C+~%^<Hn$lG`YHrs?ak=)B0kUoqF4_*iSJEA{rRt(@JO@p2ew
z0xo3HBA(tl2^VrHzl(;AgSS|1c3Dw1ePOoz3Lv_9&_|$5r1EKEG0_Bxy-&<04KPrl
zgq+ndf?~LaAm7*i>xP?dyK|>~IR8L^-q^|>xG%ywWGF#naCicVOrg@~3?_@sS*4&=
ziAY1PxVd}GXT3{~n1B2`|Eu@J-z!j|@M1IXjlFeT9y_ow{NV2HPI31_p=fb;FYZop
zx8knFwYa-`ad#+CoKoEFd!X$(=e_s-@y!o*v)Lp&$w($Md3N*LcJvdE4MH+{y5Mri
zp(Ol?rKqMwpO1c#CSTJWjE&OeUrEq1hQ#7iA^0(6OW{58@?o6oL`{t-m{-&~W4+vo
z4|=V0OzPtF=`ZkKTsIXrx=EQCf0Kd2OCPz^8~Jg&rOJ7j<jQeh4fTilv(m+5$zT3Z
zYo9u3ZX2|c_#pl0>ipJ+eR|M<U(DbqJTm5ryV(<=-QlA>a&0A+u$RMqMWanp&ji>A
z8wfQ801&MpL7fktQL(Hse41<#@>R(Vsj{TgAajI03gw-o$9ZNKS6S6z{lrqa&v>oL
za=q2dpR<}H<R3JC;}B~&t$U0fZ6?+#9bc#yb+C|*B`l5@5BWY>t{@`Aq*IAHKmO%G
zuLt~EKLdk%)AC^A-)(FjFTZvqmOMr2Pjmh5OEQdL18_NPXEwSmKA-BHR*VxB-18Iu
zpJtQx;9pv>{r;GFxsvcXBqSscqZkOQ%ufrtEe=e%b2u*gHjJORRoaIMA`_PJN<5Q}
z?M)2oj&U0<9Xf<bZ`(b;w<ARidp?g|2RnJyPV<I#=`mrCc&mBiUC#9@_yez!E8KA<
zN0LHpmE`1FAVKd9<*@O6`)@9YB0H0LO7*Cnzzken;or1=oDBSd7Dy}KN^WM{ZW};e
ziGGEiCyWtd{xI1~-1tE4<ig9?YYzMr`nLcHwYOZLp9KvnxgOv(D|4xuG#9($1B$0T
zwVD~rg9lK%eL@8TV2prb8R7J<H(t^z;-(R-hOEu0suzeIJmd>nt@Wq}!bv_TwO0kQ
z!dyU#ld}X$fccU8qM+xpCev|#X{OI;;Fv4n9~ui$(r&+dOb$aFJVKBE%0tEuH*H&I
zWhizhV_*wTPMP;jf#oy{o*SA%{z2*p_hXZ8a0d9(yqcKAuOZ8`cug0sj|9`^hZyA<
zPEkt+bMJ&d<1ohBij&CCgw({6(laF-@P>^B)ClXuUNxo^RXdEJ_G*coJ@tTM#?jDQ
zs4SL+%uXr4waH0*)}SCPv5B>Ih!Y*E-SXT~2@aJ4iP$M1_fI5zCVg6OG~T>h5NFv2
z0lsqOjcJOLBu@VE1;};!soR6(#^r@tQzTqtr70r5A54ou9OeawopsIO?8o3m$zFRa
zi%%<Sz17BXpl}U0_f0=D1ZnSj3o@q}no(ERK?YhL29$9xk8UnEz8l%i{xnJ&_``aZ
z7EIg*i>AN%@IS|OwKMC6wNu-tl921~Q14(o`Emv`Lv<U*+V4|t?)WAmMTIg4A9PC%
zgdTAU)12Kp+#NC#TgP=5cLlG>MeaQdMm;@c+%9fe4~OU3G1(a+xyC{c-2>)(f&<#&
zat4w5B3IsPpF6SA!g>0!b4(-hk25>SdNxi5sVwawQpb%m&2xCJ<nU=cw_uJ*o}Pd;
zv3RQ`jz`Q^Q6F2FygTI4tgUdUEwQ+qK{%am`?bASf)P*)8>bRCm=V&3zfL^B-9;^P
z7@6rb|B>%x`F7&K%__eO)J_M}IZUwi9%Hi=9MIn$BfN!vJ;{Cd?$>SFiTf?SQyJhJ
zjc&>0a$H*s7$VQF07aRKxBaCp5A$GXYe<g@NVYnA&TAM6jF%qO#?W4$&dP)`?`s;*
zg~?ga`D3!yvXMT&fLZc^WWJM58+HNGu^`aEq=b-yO-5&;*82zq)OM>~_T^gzFc=sZ
zYJ3H*JljDOohbPyetOm)!70a6j3=HN@3(%cGLP2*-^6ob@UX)2S?lW9ALr5&Yd5nc
zz&punsL6v3Rq%yYow6#|-e2aLTl0`0p$;X?(v$2B?;VQ=O2W>5%=iJdK}g8ca%2Cv
zkq7<AoQ6h4#J8oTEgt(HYdv?81+~L+-Z=N_l(9zTEp(3zcvR)2)*0In1FA!e(R#5=
zpEW*WY@)_0OtCy;mp^nm>8@Oim)SI)LtK-tQD!1#JqxPp8uv>VS46)>tQ(!+0qN1d
zgEeNOFd&OKMfolZ9Y+%T6@4R`z|Mn&9m>=}U`D{pVZ%RcJ%+OBSSY1%cPgFZxB8Ai
z+;fJE5GBHDQH>>MXZyp0QWDy8^-ppNCX5GA&)MN<)*G2TXrtbnM7n1%jERh5rdjAZ
zUQD(jBJXJ7cVW;drIJsS4P`K}d1Em#=<&f8gzHTu?Xm)5wrbtn@I|9d3i9V7*ci#a
zv+O_hmG!N8X}}H0u|ZW<AqVJz_u0ng;3WQlkY`C9!7LeN08Zji)9h{lyqvUMcSK*7
zn32MXpgsVy-z6lO-$$<ZQ}Dwn;HOV>Cf@7QNkoEYEkvB_z5>9Bm20#TA2_F#7NuGz
zs}zR4<x^>xV4@FU;{GT-|J>YWnQ6V3-EbMfIetXOzR>=*>D|1OzYXEJ2l`t%o$kg?
z5p2XWl3MiIRJH-1E(&J(sYYyK>3GaV=`T>esA2KneyaC;z6#Jvndg<UES|j#m3^z)
z$mkQ#Mgj33!Bqs$Ge&>m4dA~IGoS-@H!9exx#+&ReUGdYv;Vzp<vsuVSf-gNQtW6-
z2{@=pf^*#-SIRAk^0u`cS1Gq75IvtCWi82HXPiO6e=;IhmU;Ug+z#>UA+KsZLdSoO
zFW7&?<v$v|F{|g8L#K(4uE7<RgP%uMY!}29w6&R-Sb~?XWu{{csm?KP*4Id9;CKHd
z<4RJTFTFwkv?_56nW^UuQ*W6mXl6`Zr>f!lK7LEU3>m2Gm-fnZ{iHvsDE|j$nKNOR
zce5E4FBKHef*6y&yTu&e=RS0}Q{4f-8ihS8IeIlZvDx)ve0-OiXS7sCri?e+_GMRo
zofcn5#RuhwhZjp5HkS@^eoWM=ZGp>x$0gG+r_javI)r>ISpNH$I=R==I~9`D2rm<^
zeYs-uABfD9^*O3hPF0sUN>I^3rr?&t1=kl$;kdgkD`Zay0<z3f{do&(&)aV$!RmK?
z>D{M(RNwLifW6UhZ7p-zUHJoR(AH=GK%~I^35(ZHr*E*ZnC;F893g6NNTkkk6jZ~W
z2AI@Q>^`@y!Z?|*dD45-Vt#HL#FRj#iKze8ui!oS=~xUPYat}-ZORxm%OwCUOB}1=
zJW$;a>X(Nuk&tQ(_$&ksq{5pIp~h;F-^XO)4Mm)qS3Vv6JoC$-wMBlx%FQ2Tp=aOT
z-P+;9xLMQc<hw#KWD20UxXMHiK%sQBO1<%h1iT7^U!G~uw#)nYaLT2qTX}~n5Ot~d
zUyH?yT|Xc+<V8$nx5HtxfWnIAX=jI=X1TPG#eT?BLq(vBbU|;Vu7VJ6La{oVS*gyy
zn<sQX60+=vS`9mi78Hzkk0WPeVx4s>`-$uh6RWj_6kt53JatPlT1q!NrQ*ISj5%6o
zEle6gN)~DeI(uIr?4M{n!WzjBiyLR0a)o^Wy7Yz5$BFgeQD$DbX?3<@^-!(J97L9G
z2@0_*t~RT@@5mYBi=5O2HPMFOd9($mcQ$KAm`Qok!1rBufbL?32HYz@jO4zafQJby
z+~t9*Rt>eqzd3)-DjWbk!$0ZHAxPTgA)u{SSq%aJFp&dj@m}tfS^~nC1c^ejvN$h3
z*IMKT@fS!>WoO{wu%Lpg1(XP)7*OM*h%2GfCv$De>*;@l*dL*5B=lYZy_qi~@JAQm
zz41viH*7CVzz9aMv{Pi&UYE<44m9WJmi#CyE8Ze0V6&GXm30@(>4sNBhx1ALMwgNm
zgPA}`MBtp?fFq*)*TvL)`i4{KjkvErMHfj?rMt`&;~d9^s`&%Ws#<vd^yUEnn2~hh
z_M(*Y9aCqQ(L#Y2cYoHsmUUnD2RKCney3)R49@eqMz+Vjy{A~Dqvfl-2&ozsw-giO
z&jY3eV1K&5js(;q$N+EvAc%m7`#4)cuGl=noKUeR-7G=IvxGI883vSY>M?r;lSsB7
zAe<+0YRHz%bppGRvEb*pL)d<W&InCZsgA?(Gd;>;+YbAPYd_DzxuM+|jq3zMn&9TX
z^E=d<*g9Bw-Z_}2t7_uL6o);`3CMj*Sx$J3l+;fAfoGb;5wWe9qh05A9|#t=ToN`d
zpWgg~;YeF!m#iX|?i*}wiX!uS#DzAl^{VnbOkd7JpMhpa12nbGWn_JHXklsRBXnE;
z`EyLy$wCMSfOS5cBHT1M7$^X_57dY2bd#VE@Tq-Rk1)APm^9`Cc{dXP5^`rSO_sr9
z<Bg8n-nhGZqpAr!yjH*oG1Nz7Corg1ybOPjhb|5n%lU92#?8wi+xEHVWP4GXqCAO1
zhQ1P12~^P>d&(S&>{ZNYGj>m>d?qw~jI8WkXTLYd;#)AYc)q|n$Fz*mqSdLP4S_FW
z8(cm%K|alp@wXnwJ`~j-9cJyjV!rHvNK{Y#k5akaZTo&(n{x2(MN!p0&Yll-G^t1}
zrm{#X0`=Qp^`!E+efumW&p$U8|EIR^6frc~Q0)QZanCLDtKP!Bec0!%Os~1z!8@7_
zrWz?ZUus1JoFgI!QVaW13E01^mZ*_|x=y9Opb`?j2PSrEavR46Z(HtwPqz{%3P9ky
z3Ss@tC;wI1&;J7F_U(_0hB{2m7485k@JQkiR=eTjXR=}7VuxA|U1X9?dOC6Y)t>L!
zIO(}Y=y+FteW$WZl=`D<Jywp&j0-+GsJ5EP#C&g)Qgu+dypIH$%8R~AK|#hVb3cwy
z>^!ect7lQ3Uux^I?|QiT3S+r}ECZ-$J0bD#Ud8k`b^w4SFrkP0_v)YX0x(yTWyay-
zO>EI#V=)yZa7L8mZ#}U4r^Nr8@Udx1m}XaXnD(@8nbpmZ+me5FU3h+)_f#byMY<UL
zL46gEk-q&)=kQou`zke4L)JXpmEuYM(tXTX$EV?vS=`2yxkadi3%MJ(K25maau}fw
zAxGYBG)zas0{-^aZ45^5dg8};F%lC0l%LrLQtE0R*SFxPf&F@RH?S7ztmdfsLnG>_
z=IL<h=iSR^aV58bu1%Hdn`(|CZb7QQ)j0r2wE3%GXlEb=fm1Mm6u2Tsn66H*KX-V(
zo=Wq&Acd}R0QQ^VZ`b}1^X0M=5-{?bEd?CG*UOiiosb*j>j$!bHR9iT|3A*i438)O
z%UAVJJqCn-lK(TI^}lKLw@Bk(3-NEpzvtj*(@9vd6>B!Z&&7BjO<PEWxKOl}9lw?=
zARw^NnABp&HPg)MN{pPIVNE=L>=P_fnwLP>sy@&;P;h6{Ea7mpm>a3+9x2Z}?-<ho
z>3`UcnyqZI1qD>KgZ_uX|KB9U%X0hw0oZLA9H#!xQ>5qm=i>2|$4jB`94{@P9t9u)
z2!Y2=Fo2I$T~U2xhHrLE)#tA`wq2OuOFJL{ANpTpp-}B|<cWhAR@}URm0B!daZx}x
z@aTgA0Mxf!Cn*Dya^ujcr~5WECpLQ5BWp8>I-dQYfX?~@glXWLz6c_Dov+h@HU0+>
zYoPSf{}$UEaR8uK8)Q9UPWH!vo&KSh@R=h0Oy`lQCnK+0%uvl>yx>>0+NihHZHZSX
zBX352`SkfB13i*u4|ev#dGQfnx?+`~I)C{J1QMgc<V7Ee63b)LA!e?VkWp!^T;A1W
zo+F$wB3)l=g1-goB%p}_v@hcKgUlAkeyugv?5Z2fVgU3&0C0NxulU%+|D9|A0R6YS
zpg#Dp|KL6t1x(tL`tU*r95L|yll>>5`ENx)5iN!IOTCFB5WoWBza<5LQ#Ww(<_4gq
zcQSd|mNji}wc}K-Qu8xj(r>i=btU;M!8-=O6f~0qY`>g;!+$W7`?t-2GsS-m?kxPj
zg#kYH|0FwmG3TER-f8}madHKV{Co6Yv(`goAD&g_vpXw78OetL`EDJCDdTmQ+TUom
zy)Ut4+pI}xsSCjG3j}=Xu<Zrd3?Ac^o|tid89<a)A;Lq-$mt`=pt`3`j9e<JaW`Wg
z&P^{pU%z3g(1NZ9zGFKG)Bwt)wt`SY9e%RkH|)h>Bq8+M$VCMDLjD11??*%uKa^w8
zZR&+w3Bvz6<Fun*#rDHrXA~Tl7v!i_X7F#v-5JoF)J%eec(H`t)+|E*X)&beUr9*$
z2VVQlv_>X2KT<WneN`pvxpRIhvUYsx^7|n#?&?4AuWXHu`~`S{-=hdD?DLw+`b#z9
zKmI?7KWJM1anAMo0s!l1$S;L`Hi!X$WN=V`kL>%GYXGwBpTe(Km9NgcdaE9l-7gMf
z+<y<R_kai1e}L?NJPP;n_WDc9kcLHBofoQ57VoeMuy{Ts7QIHT>12*b7^WxlOCvr8
zuPn+H`kVI9Bmu~RTwABW?>?OCyet{oadM!<o?(E-_Er|#>&n7Sm*;<a7Rh~HngRfT
zM%XKK{%#Ba_)DI3Y=dy-{=WyifBP}U9qjU_yRVgf{&W{_^R=PBBMdyR{sUdFt!KRu
zlE&w?819W=Em(vLR6M|4X+Soa%gny^BIjiD)ouGCp8&wZZ>MN|8|WV*5d#1>L;r2)
zrQ@%?e>pJt0_l?$_*xY>M*lEMO3WWGD8--A{`C(ap8mP@?a!lr&m9+k+5r5yEB>cq
z?B9;6{8bTu3!wZ1^8Yg1KV)VV@?Iq&TMInvBvjUdrT&jdAYuHAzaaFaF7S&PA=j8M
zlEdSL^RMXzlm~DOAX32L=Jx@fe`}4`C;fL|OaG!Jnl4o#QO0`G&Gnh)MU0YxgQ5N+
z47GDFy!A@es@LRis=6PyU9a_^z7m`AbxePIm0t@sl^-?(|6Vy+>vgn0ygHnJJDuxZ
znu&NR2p<muh$a`Gx?xHXeR+00ggG=oKzX*f7&y3B&(Gco9-=8`L`R8J@~U53K#n?&
zEh;EpWfgEv1)RVfUnvW3%eS2}UK6^@!nMaI)nU-6Fyw4)qN_xAnuAQJKyGb5;q}QK
z{|(d2Qv78K0|=o1yQ~sG4?zVgQQ}us54-_{5YQ8Zi+xP+0<fKl3uK5KrcgNYZfu4k
zQ288TeLd_iQ~>!s*E6z0l+T0Jbi<^>q}6oQbil(fDJa8VvXhJd6%ND`xopiI>^ikX
zXIUt>5nXQK@rldbvIJD3nR(!fQ@{_z7Wb<x`y?+igpaTO2@EPkj_@tzg_bs@6gn_^
zWNf_KemZI+4-R0m0UL3Dkk~qH0lB%qKTUp4B?9=si5R45`bTI3h(m$B5C)Ei57wQ1
zfdmSdgx<-A;v!QG>`uyR5zSCAig0opCE2Lw5qMr!KB9SoW1Z*cU26!<%F2J)@BdCg
zX#QXMz-pC0Fx=o59>`y*@G^3L!AF<luWJ081pxT}A9?5hJFhcLgAvi=0-%KY0R&wJ
z14SGueb8n5dioqbb4Di#9v$D~2*(n-ia}6qOC+}(lYoo{_`&wi4a;&3x%&eq?53Gt
znGCUM<cTF-XsPGLXF?PL+6n)PV&@3ZJfZu`@&97>f29mc-b{!8ua5nXk`wF%x<gpF
z=IOpz^<|UE<rYOtzvxePd*2iLY`|1xk77c{8wU1+4QJBAhN(Xwsl-49qB+8!=+5tz
zb=AxeJI81QocJ#7c@`p)<P<O*kQPBT(Ht0*CP3EL!?6WC#7sgD4Tu{+@*}=MD+;?D
z%v?YQ(5ayiLw8M9>Flkm9}gtwLsC3H<5c0I3v6d&fjan0QipUqB>TyCRIZdqc?4!n
z?0wUeWSZ#^LtHoYZozp9h`!R*DF_qIdA@HL@O~0MnBo%lhx-H*yz15AdeF-r4!2-0
zi;9Uf;3e4Rn`x8mamw8oVthG#<XrDknNQmL$u_njiK#}!ML^<6iqI?Jqb(F`*Fgwn
z2}tD6qP-1yx6_%<O(~>juI^O{2t{qT9~Lfx((153gZWtH4{%kd-*Y2Obzl9e7?9)&
zW!M!He`11;=-^=`=vbPyQW4iBSaP{oH+NwF8PsFz`MB6F42pYKtidBNy!`VW(XjU&
zhG{Tbu~BR{>enO~2{7I}HIOb`x1j|Y;<zqcHvEe#WurC@uao4B$?(yzFoBaSFLVRn
zw;r*E3{xp}H6P{8N9rx}VF<d~CP&ObWQVe&p%_FN_PG@mV-_b{d@ojtZfI8N=izw!
z3b<@UXEfPIv^4OGT6xe6yK^c@=gaowi#618ZF(Q{^&-T(!0|a!-C|1($SCO|1t`#z
zm}&Z5nDXLSD4hE#1gz-%$tkB8eG%9sWC`P`dTPc*E35m_R6DEtRG7p_3rl#u$UlG<
zWWj~6>QT}ht6Ovjl0aynHtN~yz*$OAz0-%A5x5O<^bw2cq);*nrqxPQGV51xMDRH3
zFE@!_na)&ql`@px)uCk%&ep=ek-9IVV9DhWA3n&N!^RV~R3F+zwaC#+*aY#aluW0L
z>f-_<Mybg9ytj1<E4~GeBO4FJQ&XtW!;|gKnw#HWtS<_D+YWgAi3-oOb3=YGwB>pr
zdMLJ3Z0v}S5y-q|t_0s<8$~gd(Hh%+*N=m5(Q*A=1#WJ$NybM3OehpK3fnF!j+9{*
z$z*Tb7iLq@6&Yn#)ol#5^PuKd?YZnfvcgRz(rUwf4MJD!Mz2$DQnm2hPZo3I5hSY}
zAGtARNJVd^2&Ps>F<)#=9yX<?H8HofFqxGl&dV1K<lF5I)GKgStbjS}4f>p}q~%Y_
zT6CyxhSAKoI75b;6hxj}84&5~h%g^az)v5c$XC&j0KhPo*q^=7Jm-pK8YH^*^1;oI
zW)_UhI+FY(>kGgG$%sMgC(eM5&Y;8+;trFbFZbsu*m6di-S`oG=%w~P(Ze&>+sEYi
z%~#1E$OsH86!^~f?pA9^EkSl5?oTc5v6U`dS7-+a4-aI?575t_<KEJx&N4O}eM@=2
zHFbBePHr>%Y-t>J;uF85ULB;HpY=3GFalmemKqK(!2XuzzFVk+haIe!0Ey^{1nk#b
zeWK;SFSVYy^zzoWfX9i;WCy26h7xLiEugIUEx2CK|DebLInRYddVHU}d^fafF~H0j
zKU(I2G1MCtMW|)fTx&&Y)!|H!nR)anJx~UWz7Eu{YSHs4QFdM>L{?la&OivE5~{)1
z4x5&E0WN%NHv9-&p+#zOmmqaMr@kxmdA$N8%DDGrbFN0_4B4SJ=&greCvLlp$&Wo5
zvX;sXxP$^*aH7GB8&HO9Gi7}@e@!;`aaSt(!3{*)xQsCSN;vo7vaR!(E0EB0V<{OG
zsHwsR3Da$i3D!650T_bnAR3jjY6i~6-q`Oen>%&!w`5Y?&a5~{v36)A%#ddmzDT%0
zq*=T%n(8TYhbgO#R%BG%mK2bh$~E2W@EJsOnd2-g4!?UNLR)}U^9{ep*tZJu!Vq1z
z3-jaD{`f{|@O7}cV{0;-mfsAh;+<E9w3E0GY*)}(gi(+%Hg_YWqmYbSF6pmgqn<F8
zuj>6vGx?(qV|!f&u|L<R-AAFM-(l52{X&dL<cV2~5KptLh@n&)Cwccx?FR+*I4Xn=
zwz;0^nMg|%p7%s5$OY!-q6s&9LUBV+vcp~mL#>R!pwNW(PofK%_UTM5mB#E_EKJuV
z4QGjxM4&7^tc+YbTWJnxFzPiziP0i97r<X*G0-zifOFZXVPBnz`{M;M&m0`X*p{Mj
zhWo3@DRE~~W^vE-)){L`DUrQ{AGlh;a?ISPWa;2WHS2*F^XnItip2Vcl&`L#)T2=3
zTDb{ZjA561;E;!gXBAXGr?}A*rjuZ#(D7mRGvBd(&#;?_U=iNR61|6?_<>&N`yDF@
zy69{{uwAtlOWXkEw=?#t8`7yBw5Y1Yi);~rkBt`;CHK$-CBu#LmxzySPc+o!b+X8i
zH5C+|-)uJ2#%iKY2ik}h7DH+TMdsy`5rXi@;<JeI-tTImmkLVra4R&ODHQed;n_=L
zlK@}*(5_8z{z?6Te<H?c{?n@0x8qQU4k#ZHtHDC6=``71#rM8M4-cLApo00r87R9*
z_5t)+zM#H-u|v70qKsJZwL42PyBK`_Oy8L>LA&7~P^3sx)EhM*+!`xFo=6GPf&;Py
zq^R|Iu{3dI_cyeC;GMO^tWvO<4c_-=Z$|O645fb{*=E>{pk#2<IAvb_pe<<m+3q2(
zz_8s#p|nb<cz!Bx_(c0i${3v*jX8Mij%WMJ)}V#8U+GNs_8_}dMuG}PI)}E~3H#Hi
z(MmhFb0DL)uU{Z67WI&Nc6sRP&-UOZEC*WIRb?fez>ae#Rfum;-R!@vC(=Pz&a*mk
z&1(;*(1#COf+G)F^=)-^Gr_DZ+}|#J1t~})u&K-rB4eL2wQ--ne|G^~h+2p94-8~7
zN^{IQvW{}hd+6TJ35L<11~2nbC1W$yFIi-+UU6;L=0+}B!j*!`E@mCohV@+h@&_3h
zV$dZ4w~{fRCy|Je1BLcAF-CGsofT5V-<PNLOE%Yd)|fGPbmkPx;<c(Nt6w&2XuHbg
zvfUf3LhDGs1A7kqp5lPT@XU3iE7)@;Z!bnpN|Kx7Z9s;YBz7VmYHZ6ef)$!?pRZBE
ziNChs*Xwm^%5m=F?_uP)hMqETBu;wLp6I-3Jq3IlQ0}QAPZ}dbQc1~S+H%YNrSW~`
zGQXD{r5`9+ia>PZ2RT1raE!K?GBj`9B}ce>g*fIXwJb2`vuwx551q>;Ueiid(rl)C
zTu#()rZb1oD>}vV65~|35R=P67Zz7hlIE0x^9b(s%)|(g|B|P!6R&*a4Q`Z;_JoqT
z9`&GH!vhma$(~Fkzpc4GU~TDji1{3H>M=(>7tIq%LsLkCCc=hmkD}laRQvI5`2eAi
zpNL(o@uuL|_>g7@CAYT?xh6svbm#`S_$2&rm?1{2W#|^=Qsm+7d+a{()NK)%H>eG5
z`FHwXc8pf9dQKhNwQQ~j%*&{&@9+O!onJyC>+8huH#j~rp$;`hOW+++5`7%Xf7-t#
z&YSAzA^Mp5-3^OwvC=%EZf>zNh@+Z1t=^U6dt%MD6+}M~;n%Jcu?d$`G;*o<h1~%w
zTFDGjqv9E}sRGH&?8@*!teCHZBkI-0!-PS8I}tzNB9WODwx|f%j;Tlj`{_zg)T(}<
zqcjZWZ1%~@IWohbVWe@1+w~<e72YN)*;D5ys<`18QRWjG3{%f1N~!o($C=R_soMoO
zu*Evyf6Y(uVjHKk0R7S=$jQ1$(QB;aXIxFQK3wE8?y{L7P7MCFu0Eu0-q)+Yt|i0m
zkW9cpk0}SHKa}8&b!(FnU?@@eii>>n8+oXMX!_(tz3B+SV`RpTDSRj0U;<v*7~_Zg
zFT~WT`rK$9DM?Ylz%;VC=>r>@SwHhAE`+>-wEsT$a1zlroB1Le{F{sdJfLGIwD`qU
z7c%`}hT-&qIDC_Q)SjCpovviot!DM;uz=6;(QX-@4O5m}abJp~5}EO~Yss{JDc!n)
zA3L%?Zr`$9t$Z%+$l9ALV{Gfa<F1sKyBNZm0pOLVUf#+3>XilthU<U0c_EA1fsXcu
zF~^w`3)b85<IC<2UpjkhX@6f?%Z7tFyLdRe6SY^|yS*d`nCz9dS|!vO93dY)>#q71
z1t-0n{>l}PCYeN`)x~M`hrxC{y8{CTPY=c92IMVm5@j*mgRi__fLCCY8|bgS`G=|c
zs!LT4N1Yog(wwJM0xY2=)=J(@Y6zIzJ|C6uLg}NwF-ycUQs%UpNBY6WSaNCHvP=|N
zc)sn{!Y}Y|lojY!dzFo0XRUFhZYr56I>w=5>!sgfWc9Z%rGLjF>G0^urF{)Rx>Bpn
zA0EKM0OZW(Z^6m-U%lN%1UX04g73@yFjJ?|msxV%I&DrFPc2XT8lnpk6B?we{yX|8
z@0njoDn2!Xg_mxfoOsljK@`Bl(;ypb>?*I~H0}JzBy(P^@w@`yM4U<Bpl!QcIzk$l
z#z}*1|3m`~ig(cKlIcPY8_~6S0#5pSr(Z$w*p<O&B}!E)Wpfmkr~o@xcK=C3<2hHK
zot=@^nx-PB;;rHlH)lI1hd1-LC#@jJe(W0QYdX7r=k>>5KEDoyH_(Y?C^9>gP;8yd
z?oo%b`Lp+`+%NnH;fG~X*U{<SO-ZAV3+UX~agh;hf~X0Ty5*oBm;(x-E-^aDuUci5
zWZGjF&A0AON41DNZDioEB`M@)6a-x;AJB3A`!-;NQBwr-7vFO6aJR^5bVaS9I6}tt
z?by0{_yYaqAB^k+74qjy+ghFOGFI7Mc5y%?r|3hYLqdVnBt6Q+C|HXHs{LyFK&n{8
z#?zB<bbNLLn*D(;W@ro6h+biQ7Pm~shADL<l&+;_kpMsai#F-O>IxrIb7d;Tl=PjR
z^LAKZgnwADtN=9WX3Nwri#@Ca69zj1JpmtBt}(sT2pxhAQEtxoLY?`KiE@9%LWWgB
zrd*60lB<#q-&gqqdWd3~j578p0WehSi)?y;VK_=y;#hQqTOb}M!{zBrQ=5Yr1riAw
zx$M&^ntSwRrB;>*&R2+$GGh!4x~jK_Pm2lm<2Gn7d+&s^nbq)Lwg^)z;gTkrX=$y_
zXnL6x05`okf7^KN*~-lBCklm>z+vaNZC$1;nx%m2MNcXju%w?Sa|2pFy*bD81yfNV
z021u?RY9)^5;iCU1O7FA<~47>FuZIFIJ*7B7)~pxI?qx62aR&;UxfN;EvwRuHo%Pn
z5h{h8*eEZ7LEzq*=}(IqFRp$B9c%Yn?<2|Aw{H_m?BL&ZcgPxq9G#sx<DDjQy=(V+
zdg$rw?jj=w&UaZk*=Vg_$A1m%-lc{l2gHYe@rw;j4N8p6c#oZH`)YQmEiRD!&mO0D
z8CG#?z3|OvU>CKrmA=04q8?icy~^Bwaa{nKn0}qeRPd2%75`<TNgOH6w4Uu#2*DUN
z(u8jqFJnHtk02Vi__6Lc@wI@orvfU?-_eWzHCMKHVHdipH#~B=KN(U<e66h-3r^ng
z&NTsl_H6zpokkxtYdoLR7S^-BNepx#N_iPc1GfXQx2&kbJ_y{v%D71yy8c(9`HnH>
zziS*Jo?xsjpXv?dK1B_GbA<Fk4$s1tiDo>95MiYQ277^1cmdvyechVnr~97C>h!q7
zblva&mpTf{o|bvl1h7%bn3GbM@bQnfyy=Yd%a0^+Xs=S@<Q9ol)YU&IRav*JafH5>
zUKZ{hO&lmw@gskk_BoXIqkB3fdWBheY<yBxfNE<Icsm1^XB(*p&5m$L$>@4&W{g*l
zc8BYA@DG6m{VS6PhYd{s9b%>ZR6(5e7;o7aYd-VOO3}3W@k92=r!HCv%~Fe@3mrEi
zI*uz^<BB=E72&K6{0WzC;|l!W<-)iEMU~i|br#y{=fw6iLffkO$a=^rz9e33h*fB%
z^rD5D(6%@R$~i|7ac7bPnxbh6w!ajDMK@6Gp-HrVR-r0*aV!g7s3Lz>l7njY1K*rR
z7Z7|SIKe7+wRqFFwAna`NmDR}sYjJPgmuLBfZ!ndF7am&PfiS8dx1V7UpxAlBxc8f
z{oqYCMhf?kFes8+$X8L1`~pX>e6A39Ft}`0O^Kk2Ps&YWi>hldH`^6{sueN)8IW|X
z`6Z!I%LeyT?Hw0ejS>fU^g|^{Bgyk$&hFdwy&wCB@6MPN7NqaXiIpZ!4@eZ(N617j
zRujLXVD~9mI_$6Hy}3jyx*OC<#%zTVq_H>>;*oEtO>6I&5Dx6VM@^N<t2KIisMB2n
z1xf}fKJEJqeK)GVmZS`7S_gE+c0vtEbTMFkD22qYb>{WK2YR)+NjvTad~G5_mvhEH
z2Ke3YmeM|%;S2J97<Yt!D<5%RpX$NtnglB*WYvD_Mk9mO$};=Wr&Tt(*f9}c<ilH9
z3XU=J;&YyRqpjSXiW<ctz+iYf0i0e8BX-gZj5&z06cWm#kM|f+tuVt@9;)w_{co5k
z*vCxa)>}CG<_u-n7Bzd?6K*ap3*&SQoOy!;-6Y113LDTR+1X~TGiMFCGIyCVBSn^q
z9i_A3qv5{#X;A0Sd>ZO_*3Q?a%S;a>j|ye(GpaLqn;|&4^YEp+DkwrL;77CLKtA(}
z)Bd!FJ?b5$AP<&8p99ax?`X%1V-Ws^^A^>^n_L;^6+?#XSO52KZ~X`ETcmBY760d%
zA`g2R1h*{0h-;YPxJ0YDVQ;7Ude|(v$TZv<c=Rdp!$nvy24xAG9@j3MMPtynw^Je8
zyjLd>BOOZ>C*UIdi)C+Ss7RX_>JzEr3%{hwM<}t*w^5APH!E!4!NOWmOsQr@+Dy};
z$6DBS!RF87NqlrJ6TF<#tlphZsjIFGCX0I(=YGGMhOi1pu+8~q>Ir-+XS`@i9n@%r
z*dS6er__EhP-&@pRk1!08f;6D$9i^XWjhZRm^24k7;%Xb)Crg0RY(*>Ui|%Kbz|JK
z&aL%MMN0B~p3G)O+g#R~=s=Sq@hEiwQ@0Dl7f8I9t2~T9yUwT1zcdZxvA@QNEG)hO
zV*oEh2boR^^jwEXzsF~&N}s`31vJ&;H<;&fl2A&JHY~(}O5{tM%VGf=6*d8(3PLk<
zOcX7fJV>rhl?HB}u?6lEt5X@+3g_O|iT?ha=IU@IdSupMkG!ODaa~Yn9Ldx-aWta^
zBEn!Om1a+D>}P0Npx?*n?zZy=S+@3c*CA6p(xsCx9G2B93<a?fE`HhJ;&i_U#q#<L
z$Hk6|pRcb~!^RX2p;3Ax;(K|npzE1AzwDZ)my)V?FUJQ<_g;>|D&;X}Y|MP=MXi1+
zB}Zd8Y*-@<)LDGwq$M3r*GZ}Sjlpw4wK1GNXA~y%A^RN3B<s2UX0sp1wq{8~ZYHaC
zvYq+Pxdy<f;rN<uZW^A=IXLyO`t-aK?3(SCE4Afy_{SE2micnTSP`i|Lx;}UKy(2*
zr}6Fb@tTmA-uHsbF&j^;Ozxl8TVhxi!|aFY`PYQ;AfY6e5<`+zH9|E-zZkkN#x4ld
zk`lgD#W%E=q>m>Tak)9gmtXu!850*g#uO3xN#Bhl*kgFP=vvFERop;)Y)U*W%mVE%
zCAjhxaS1!H8XpXZfizFPo4FgjG*b3Hj-_bT_LqebzXVU!lpHPdmdyzy6osdPixx0t
zn6V@poV}PVlYQ5Lcnc|0gOOh;Aoe5)3~}{8QZFeX;>ERKtpq6Q-<kpa;%{)fl^~5%
z<WGxEaf;}ms(0QvC@_$C@_#tOKh|i@jJ|8B{Qg#N>{;CF-Mg9b=cl{dBHiS-Ou>r_
zQG&dOeI{K>IXuQcw#?EZo45ly@xv;<$fu`DH^$Et))B^-Tkgpi9&ek|TM)*UG9jmE
zQ=4%Vhf~X+l6mChZuT;%crn0k#v|%0Bx`24io-11C}t=Hu~xFMiC^_nSWZHGlk!f3
z_5I90FFb<>W<V-_Ah9wHIs{bz#nX>WC~}Z$0my>^QiFzx;uK0RVUpKyF#sUTa?hk0
zuNAJ1NO2^(=mgR%K&(87l<#*j)zUdLqQ~}0sL@DpssIV)9kX19l0Z+O)(0oEp*I*m
zmtG=ezki-#22_C>7Cs9OUhcTl8?wQO&+aO1*G8EJB5|R>ua#E-zd1Ip=wb=V)l?aj
zR_m)d7N@e%`T+u>()>lFz9FbUS8rqDT<1S7e{37MlrIH8*0Oe3Vx!k_UR=GgzIw1(
zFVc<K0$JPnDIgjkgO>Q1`hjV$QC78)T6+o*_n3n{n^Pi4liQu8+c!E14)5D7@bXiM
zV@7#7bA+JKtCj?qB&56Rn5<kcBAM{%mY#JGA@zQ=%szum*jlEkD`Epi#GN|2?J>)G
z%K>&Xmg%PDFGA&?hj>AZPFTI#v&A>ZS*dmv=a0cU^0|ABk4_~PAw}fsCq^~r5)sv&
zNq+<3SwyDyEeVldi(e9vvnECr2}r1KVachi$Qa}YZ#uf9%L)oqU1lRT+`ji8n!~z`
z&+;SS13~ua4A%li-0^;D`-)RG)Xjjy5~z&%hZH<J<3Tn2Tv;?!KAUqM7<&#U6$<er
zdbS~p-46FBS;iT*dMF8DU2|=4?40QwS)cy!UhS}Uzl8dJE@m<;A%_uR1it^x)AC1q
zPODQ@if=ST-eQlByi=)}COe$mx`(<pl(ga{9jfQo9adP*b<gFSCWjVPUN9ZbRkBwN
zr&(gcCfa-TE?*^ac@pc#Oap51Sn639aQY9&`t&O7l81YB>bV?UIv#1-JQJ*BoO>s0
zd1cHV7DaizP<x1;Pk!3+=gkj$@nrcv*m?yv=&K_N*&tt4Lh~^gjy}v*en&4_Z*;cl
zJenSGjH3L?1R(r~3h863`u@(bGvDE9F5?Yz`xjTs6C`A9IEHaEXZyW$?tHLo_)^jI
z(n1`?MX~rd7_m)(`O5R$L+>v2AHIc$dbT$do+rI|9FoMIDiAvi*HvE17#Xvz{<5t-
z%D(lX?U4qlyr201hc;kRI(*YIiK5H$zJMH>K^GM9{X4@?63mjv(6+I~LbMl-*qkHa
zQx_#ui@cw=hXYOIOqwTl2b#x{>%C{Ryq~j3EfEPS8^3K1<8LJkg-lX02g_k0-sA)g
zJgvTG)5d%o(_5tI&)yG9!m%Y-EQy4I;vI#G67zen#P6Vf-fIL}>9_E_*bf@xPZGB=
zIlVw>Js|y^jq^J3yoLY;UZUGue`D0(SLr82Z8<q-SGsdp$Gg9TJ2v4C3%>v&M?QTB
zu{o&f7N}@w|J<xExUx#S)%TH4A$OjUU9?TnU`~uo<$-0|<Y=dK$cT*g@C)?YO;o#x
zMiG1zlU~m~63kD(CbcLBArgi}pw!zO7jFg*bOE{-p5}@SNejoAy(#ZJe2=FNOJh|B
zq9n3H&ngW+)e$I9sAJTLkqjyprv*}DQOfT!^~1#aeR=<!WI>B&=;r=SUwTDw(7UM-
zm37a%sR@<e@_GMYh(G&7TF<Ee^ZuDc>cQB_-2yG;d5ZtAm6P7pSYmmpr&IF}o-Hk9
zZ|`ySHqC*24BPtBx{C9ftlE{736bDa4R~fh1&btZ4&MdM_hpfX(#QE^iAf<wC{_m7
z_u?^%`l2mYZZ&vCW;B$AuoRl2E!iWUi>;)w7rR(qbZ5C7SbYAu=(4W2Whr?$(3jyg
z^Dbbbk?6Nd9(C7j_+RSM$305NQA(0wm8YAZyuIFS9za-IFw0<z(p`#wVk3<Eb^c*F
z?EncEIkC{^`#QBFmrg0%Q;w7q;?9v&p`Tg#H#q4fqEQaNHt`;OL#9L+6}C~~0=UI+
zBc);u<*dr&2KbgUXt)TxdPI-XN}cJ#UCE&g>L~~I`wxq@DSJP3rP>W6f^|<0WS{Og
zr>b)29T5|&h{^!6P3j;6Jxr!rKTi(0#b($hn*)Z`u-O>QrjLc*6%?(5^N7vEx@mk_
zqW;F;Ow8DbvQxnoWzH)$&7pefm4?ph?LW(X9z=>y_dU4353ynu68*^hrjdDzXw5`n
zEJ142`(b8btD_?1*qnV_XX*<|(mMpOAD-o3Z%cozAJK<>XM(;msB)YV5nsLw_M(;L
zIYx^hox5TtP4V>9k;<HS)?dlE9N~;bA>47@VEbvnIxzYWCFw9?xBtnN_1441q;?L%
zQ+}%rQb4jvo76`SIVJDhcvBunnG60nHl<5HS@))2NS~5{TcWM^;Hx9!WXxovzHG)7
z4j$5v;Z~_ONa`|9-7n1YbyUJTmKs+YdlW`}2YlQ^QE}QW1es9FN@~U*An3kadT4?1
z^L!dUTu{=Q;F1dQ@eNVDJpFiDzkgS#x@}nX`E;>P=R$+7Uw?seyJr@1;l}M-F!LM6
zCTxmrj_`fst@d2#CV?DRyvYO00#oq~7FakFzRavbqpJkQ)$;XTGdXW7eVQAyM+eSw
zMWOZ*k;C)PQl8#~+rEw3tE0_pccHE}@)yFMzZ6YuuOSeF9k{->#k^4za?f0IE55Pp
zcpGM6+ZQ>4SrDiX=B?CZGTWuT9kPRTZV@>Q&D=vb7Cm7)0r7Sb0Q(C=k8|C!I$><e
zZJRw&xk5`4ap}F1z9@=a&H>$9A9>?hDlL`Ncl5du`AqrhG3EG(Qlkrv8@H``W7j&(
z6KI|{j;eXhywIz5tA*7KR#|ZF8VY&_1`S}~u)nU|0x-`jzs3!lTI#NeuF`ZnU5uT5
z|LIPm);I2DKP$XM=uDIRXr2vE=(XzpK!jU1K~18(At~Tn-D7r-TWvXX!pZIdd5xHH
z;f4{TI|AQcFW~l$JI_$B4{m^UXF=VNvrO1DbM|KDn!n&S1p|qog=e^&lOXe}Tc6?d
zlT*%Ga<^B9v&|%6s$>l8R?)}?cLOoJ4K-@tlkOX<Y}zc*?v-4>tjkTR;-`#I3*Nk*
zHt9FM2tz))4c;gB)nZOL8uXMMP!ez-o{242c?2Y=?=8G!Tq1_N%IwTtYaVKBLOvaX
zl{gQciF^*fV9LZ=znrm+M8f$P9G4V4Cj&KXcDF${(FH2dMUt(*ad!hc53AbpGa|_h
zmr!dwf2IZ_SPV^$OSuWVt=-7Z2^N0s>%CKD@|jmEQGdE;A_T*z<$>qeZT0=nYZzBj
z7ShU9A6;)yqW#^eB_i*t#8#!Z0!ZPYgh5K)ykYqjPW$l{MTi{M*PX7mVY$K`kxGI6
zSv5W$i)6Fq^XPJrz(ov}+h03sf0@H;E62Ktu_ofW<>67hJbY8vE)hILz^qG~1H_hm
zY5uKCBAGVEd|FoSxvLXM&*86mvx*NDUxi!~Cd_NFS}q@3(;hc&TNuAlKmtE2>~8R*
zF8sS0b%-5b2HLJi$jD`gN5FWn^!09(3O$V^#5#r*=U~-BPVJz!!XX&O49)vPg;|WB
zm^Y+`9l8u;#g0*I%_l1qcybypyTQZVsvP<fqDHYzL9}V)awf;`P>L(xmo(!)$_&|f
zzh(KU+^Xp!|B(Dk?M43%Sj;dpOJ*Cg3mpn(GPv*DyLR}!A&rI^(%+83O{E9W(D5h=
z4uZ08Q;`?1RX*DcfA2y5p?ac(jk7&Ff&OH~-=nvj@2_qkI0(KiN8Ovd4CSfR%q(r3
zy+ZiOWxv;vh)b8~)`HLDYV+v%nO;4Koo&DM7nHuCpS_x^7A);zU~(gaK)|ix&GBN5
zr_56!)a|kQ7&j4;9AO@2GN&WFN~ybpllN!H8G^RDfM@>81|>LTVCACmPxr*hV!nFO
zfS0H6yO`13JQO<+4ESx!+hPE>@+t0b(QQ}Dns32J=>KYJmLfoKz{JAB76o0sGEi#A
z)rdH-BTc-9)n)%m>3pIZAoHnD2Os<jk<lq7-n^vi;%au@(6}^N#f?M0>h5l~Z9F$~
z8Y!|L1A1lD*zg<S;Xa%8_xJM8znBQ9B!`vf=yIhHLUxRH7>TC!ou4o33dPHnMla{M
z)-ZPEoCxOM?5;`Sbqi3<n0^f%AUUyC;Dc2ML55)S?c()5S=~ssVPr^vj&E@m<71{4
z>hid2O~OLubzM5FUda-r!QML(@1r7i{lPkOOvQ}ZhHA>mX|5|eaY%|%9#pb%!b|<7
zvBc%%hSLHuEd4_^?VL{~tgD^9H3?ozmrF~jFAO!|gwi-gwxfu`83jsP7!`D{wjx|!
zN~)IlQ#7HudUUw^F-{J0xhkd>?vZ#2L8tX;Cqg{QOp2;|x*Cz+N8idc7;7q+nUJ>7
z=<XGOh9Q+cxB2+#mT%c|xKC>X7jk`d4sPzM5E#zS8{W@(^4YrO@wS+`%o#?mRPY`J
zA|y(&N-g5KpGc^2jszZAQCIFYdX&oY#S~6UY-!r(NQXPR>4{*=!dUMt%n}rt3pF!Q
z;r(Bh`OO#c3b4Q*1ua+`r;Ng2Ln9ZwZ&}B9cEWPH{*E|awKF?ooyvE0L?6fJX<}<h
zeMYP1kx%TYQ^ip6iI1U>*F{!<<XsE!6|Gb_SVy*JRIX?8=xE*L5TjMw79$=zOB$xL
zDQ`hj?eiCk)Ga9jp0~fzmbZv=l-}Hl-V#NBjnK9Bo4(IP@qCI*Mlc;ag&KweozKZN
zndD>PyoQL-sM3`=XV@!qUhi26b?+z<C&_{4B#`SvnnfJie^%dAYH+0I>hrQ!`~kW%
z{4;`Yys=z-ifwRJp1Swy;d0E8;CfAs*YCbb8E%iLDec;Cr{Uq4AE{r!yJG*^=a>lV
K9tODP`u_k}#rD(y

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/lato-normal-italic.woff b/assets/documentation/1.27.0-rc1/css/fonts/lato-normal-italic.woff
new file mode 100644
index 0000000000000000000000000000000000000000..76114bc03362242c3325ecda6ce6d02bb737880f
GIT binary patch
literal 328412
zcmcG$1y~$Uwmu953GQyeT?coE0D<5T+$}f+x8Q@zAi;tK4Ne%`o#2|_Zb66O@J;et
zyL)%<-QEBFcuu|b)?25#r+fP8Id!@kPgOZN7+4q>7zDT_7;I>b+?Dma4W)noC;wVi
z0|o{*2nKfO0p^+8%Ep?xq`Zcf6b$T05DW~a5DW~X)!-WopsEH3Hw^5zR_J(>U&Z!z
zH__a|)ENf$I~fcNHZKeeej%kDJ-zum_ZKj*N19L{M`+m*!mE30<!tQ$)q0^Hs00QE
zHEj#;`>D058+7dXTd2?TKNT$Nx87Dz%^e1gTLuQ6YT}zhr;d%KsRax?Eg0&<_p2aN
z@CVpHMW}WPZPWfL7~gPhY#iLZVBqQSU|<NYVPH5!F7<!}_Li=WFz_O1Ffexd(Bp@z
zTP%Wq>tqfc`^g3dhTH+_CqWtvjBzmaa)yELS%7Zq#jk>%3cKTI>R<`gpxb(`2LnUM
zMPW#o>g?p^4g)_5JvQDg7#N$Az3^*9XID#S=y?`^j?0IZCMOhIA+M~_Y-BGDt(Gr3
zLYBob-1S;yYi@AZni3LL*creVcnNy4U9d7TvRRkU5b$a~zRwS$rv6A>@{#(&fYEjz
zi_zibH0+e}t0}%$b&ZBkZPJ|q0h@xmLc6ydRo}C}EZSGKt?c@*c+%NoBT~t<rqi-g
zTXlAt7W8Sww+dK)vbkHxvIWS@XJCr+E1_X=iO4H3<qP!A-Z29Q0{!sW%nto6vE=eb
z)A_7Z_wXJAuTG!tLZ8IfN+Whhv7~#RC`limW=@~1U24U010hdDakso?j|BrY`FURQ
z6*!rFDyAC@=zR?v^pk4t`2M{TTm~`t8oln7{QQ35Sh>a`0T1u4ZPH0vy+jO2#N>Dl
zUCz?EFE-9@N(tjpQ;kH}JJvT`9ulJm$Sb1<HkW&J_@5(~$;@OlciadG-FB`9ESs-F
z;gHaDp<1JZKRi0Vg|~76JgZv_+3ZM5NsG}3F;7cOi)p+N8^Ys6_~2p3SGqW6C7kIw
z-@%RW2F<}`5Ztg`k=jyuzh1_!^Lf4Fy|xE`@2T+<skx(pOTpnzKmT~Uch6T@hn6o7
z2~T4UEp5y0k9XkZ#GldMC_9?=cJeV$ul45RzJANG_pRLACHH(M;`TlDdu!vW>s^6g
zUtpsX_+f&)T&Q8s&tcbvuw(knO|Gf!0yxG3sS%<)JenVO@U2w(&i=5T$L?^M>*-xO
zqDt7YdikSLcAeP$$I;1L!S^G_y331ZhhwgaWeA1uw^t|CAFVa|XW|>(?_29Sc7t-N
zF7HdNU8+8{A^!ZZ=yWV9`)oACiPFzxaJEMXgYb${!8UV>!E$IX*nB7UhtRvO>y8*o
z&Vb`kLtIkT1>T!jCUFt)$-1Bh=Bv-XTR-L5phV*ndEn9Hz&o)|qKgqvWmag}i9&T}
zqb}8sJI%#OR(t_=7Zu)hb0P(S5l;e@(}6!VrvUnpT(M-p?$W5oIDu&6!A-=@3eVLf
zp`(vvrsqg2|BgdA+}abzJAW?FQ>_uJSE>EAu#+<@_&Pal#Vhfot=`<IYoy@G$E0gO
zsnXx+=akq<@h26%cRkz#=W{|M^Pe9re|)$^K$MjkF{ef}+ZLNNumZyCu{$P2^u?Zo
zZCE^k?`oCn)5L+_EfT%dADN93#m<;p>9aRH;+#4&Pj%8UQP<dXdv&9W^jk;HN<^5a
zz~OpA`M1L~YFC{KL=1s3AJ`e>xvcQa<=7JT)trXjmu$Pb%*eH`(E3m24nM0wvXDFy
zywP83JJ(&3Ac7AueU27pL4<hK<xB)iV~SVUX+!kPd>xhuY10%=IrJqb@u$v^Q!EiQ
zjditj`tiP3glaDFXV)%X@2hh06qnE_#zTuu2t?59)``=5+;X<FcD?RJMz;?M1*|FJ
zjl*@e+QB-epR))X4O{UWrTwt4>LC3O)M9aWpaJ0`z%jobwx_1g26wNpONN>B64N9V
zd-SfwMHbnahe0Kn{<z+KAbWfF=Dsy3m+<_;&FobcD3|ce4QW>=I@|@ehOtu4kAe`d
zZNsjJgb;^iQ*&&x_p3{X+h-w{SS~p$lFc<E?<IlPG5i=fxg<y<+?!Zj0|J_Urpl=p
zo1A)Y{nRP=#)2|9QLTCaoJcugo?9xLE!ClJt06_FVujt@x>SKYm7($LxVi|rK)(KQ
zfy!{+Y67tc4wG!~x9g%V3j>Y-{s209QvS&D7~^Qt7}A?X`oUD$elop6G=h2N<gJ(6
z4Eq{idN8hu1A>iB8Sd$S4710zm|`A<`Bzh7bV>@qN31_53o}nZ99V}h?0Ly4jcC!$
zH2D7QV6Z`Tr>(#<Z)bw@JVh(!+1E77idc43@XR)+E$*557N3|%BBPiH@Hiz!c!I(w
zp8EiaKN)SXXgFaz9gJ)SY>-Yb=eOB@^y=q{Ji#PjdnMiXR)c$$vi~YK5&u)rJ^f>$
z4Zc$<(gpyHT5Nhk;4vkgAeSzGvre}0nyft+m0(iQ9ZSu%BQi~LGNnQ#h;-XNKY|r|
z+M?7;^%JnjHQ38Iz;=)N0?kvgW!-3>8!d?ijm9#MO4bLhV7ojV$uf1_)O(myOU&9!
zh8+Oj_72gRlS5AlQ;Q$mRGYTov<n9396j+J$nVE|V;ALe8bsit90D$sTXKF$_M`p+
zAWK;7Cm1$a$~>j=qYde&PoNH=e^nX%q>Z@IkqkR|V?5^5oPLdIy&_-F2?<m3<dov!
zioyGe&Xm9Zw8x$r#bPFg75ntvb2=-dI9k3ac5&XhL9voxgSkmf-+74Al0v7J`%NVm
z<4B5QevxaMO&J7BuBg~1e~GP9Cp-#q*q%F6jYURdj<)whDADXdBn9<0tvdcvnwV=s
z;&M#Z*kD7<QM4XCD)I8?CAz~D(+XSjF;;xc=<;+8d=}k4VnTtQ5n|Y}lJ!NxbZKfg
zaIj##hEEj1=sJqfCojF8OBQed0@sjbq2dk}k2^>non}jKC#lb1jGNH^m3=-$ctvU%
z%#(JtO}vwge-S)t&1SDVGF`E4J699#QDI7MuRB2U2Ss<N$a_^^(h<(M_UY+N$SAsh
zjPsy)!*uRkttmLszEA0#^UAd&FO!uMEg=(~LeHWEriyhFcsqLz{>EJSC9B+jboPAX
z+X!5x%{DMf(bIOl>?_z#M91M1B(=kBo3zQ5rqVBorA3ye@&I#nz_()MZfd;DTg?Xl
zN@E27$Y32#r(_EypwdLgXISXAgJR~?*6)gKf!a`HQ)HZRlNdC-tS;AwOk>VGLG%We
zg|#wxZi3(&_QTKGH|`16vhrYb$24}A2v)4@j{x^z;XD@i<gk3<C4}2q-}5%3iA=X!
z31e>+$fg%RWcN&z3<-vq5wZIP5t_6KBW({S7&E-*Ihazen^7Tnk`uAN`x$4P%Ya)}
zrwjGKOEQKL5w0*n(ZPAlt{zSh$RC~pLHnih?lqCf*mzD5gDK+Z@0-`xw$X5F6AWW<
z)bSenaks*aXhIW;*5@2&ZE1q-)Sum7YYQ>5kf(q!h82-4i$ZFrB=z<`RzT%5zU&1l
zU73PMcGfNjMa$TAk>TbSBL%m~#L_14G0C%P$$~1ogRS{Fh&y<^5v(6ZHVK0cr)~B2
z>nqf%aBmP8)pWYQi&$eDbAWd9Q-|u*M#8A<=*Az2#MbZZ1uDbF*HLwmjJtiVQTRIN
zs}o)LB}Fa!l#{}^DwN&=7SMf7I@}L|(V|_O?gGeGgF$}W-xM2l!Z!shyqDOf@UIAn
zANW{9Wvk(Tb{Z`p-L1org-TmId=1i${jo-1gV`vBwD<fkXFcTDnGh0`GlA+OO}U5q
zu;ys89DCIXLxgeC*-{O^8-SVGeV2eTViH#I>3iv)tf%zT-x%NHi*b^`&|DMYqoCY%
z!fX6@-R!?UB*#(6gEI_9H<bXI{2C)!2#){;!wYimbvz46zO5kH=9uDjw5-0U^E?=o
zF2ugt30=4%34@q-jJtOj&hJr|)`C$^rSLVSVeGn(wM{C*uu48kk}K$ae9kF>*DJx=
z`!X#*2zet9mM2thg6M;U1{iK4b&Bkbgpxv#jKX^s%N$qy`uFAQBw&Kdkh$8|w$B2C
z57(`1P=CNIGyPcC-h&}u=j%L7QPJ#XcV=)8IbI*$)Ao^2-9u>0qg*Q+hF)@ACPXMb
zFemD#><E7bR)lf&Q&vl|HN9c@&bmE2!(qJ6a=cc>43udTArVBcl=t#Xe}(Iy_u@=m
z!Q9ZFnB6t+bX1PckyDgbl&Y@7Q^Z!}z_6QYn1u``ryeO?_~><VFG8{R_|-UK>mSNt
zR$rf@Bm5UYLl}R}H|#b{zks&d=~<1?9`U&vJs_W3J#ByIv-^d1vp36fE68z0k>9B(
zvvKOH{{KI+7K%la`t#jR6j_rHGsa+U0ZgwiW)ZHP-|-m0o#+%LFdWx;IAx)dr38o?
zcrwyxz3<`ZBO?$eut>V_&s$50c_IiVaByC{Fg%;N^g8fqMc(V&AnnAjebN3$*TTa9
zgA|Sdvd+*s;{ME#SD7cQRt<24KDP|Jdt1rbTbSKAG&5o_=*?}4P2wP+QA0XprY{*n
zFV?&>?f$hGT_a2i$vuan=mYzWoZL-1_7o9S1a{meHVOG_{&Oa;nhR_lz($+RRB$C^
zZ1*ELF6R(S=Ni<MRd}~Ajky|84*3`%PPpg~-e2A&JuU}KV|(l#kb-Y@AjzWpi@p<e
zhvX1FE0+YlUO;rtk`fzWXyPO+piO6#`i8TuIb@}lqs`LEYCgGql?5@hDj+0Fbyp}i
zz((|80^>IC^3sY2NR0lNNqm{W6rST+mPa_SLdG%XENc<2fsVV4)<b)3{>ka_tMb6m
z<@%z^?)8baNHX#Gg!L%9zgP?8=4fKKPC9oS!(UAJcSECY?zg>rUH5nPhyD*RLT5`|
z{G=%Ns+Kv`=i#2~_Qp?WI!i&^3H^kP{pZD)&x0SugCF06pJ`$4_$J2rqpY~GvbZs;
z<4p@oW7_w}?b(4Lhcs)>?185cy=t-Vy15P&<9u`0q=$8}my7+kZ_WL`)QEj&AFmfI
z<C_2O_Rv4Z1VlsT)Bt5*Smsv8W@vL3ya1G$$-T2mCR~)1oxI~W=b<dP={=!-vlC5Z
z!`=w&P|z~K<UhTZvta>D6iP3>r}#cHyP=&ST~#?*ZVx#iX=_#-FQ2+7gS0Y>RzWE@
zDJVdvXjN<9Q|s37@92QmzKfQRK`ez1{)qyEe`)v}3pn{%`0=@Qk71_@>DRP^8yp^E
z$2}TPl3O_5c;T-!^kVfVRO|@7mL4-+8MwUopDwOn#u-FYXcu{E?Hg+O=zwyx3RGwJ
z)Oc?-K#!V5;<I}kS{u72ePdJBWxdCYHNuLyrBmW%E?2|%;9$<@h&@<DC_|iR$03QF
zDC#CWF~K#bFfk!#oUruWwCQLXYm#2iDZ)!nYe)I}2S4`<n8e0b)Fkrq)%MHfJ6Qas
zv9+h|>dqqA3?f@rjB})uZ%iuCADTpS<q0A4NGQN?oso<a8dO6PJm3sq4CD=fXW6o=
z2a~W>%0-t?Zu~9X<mVo^X7fW@?a^L96jz9C*C;rd*%RiyRr$Z8TDK~oc8#J{_5DW8
zTQ*RD(m$fNAJrZHdG9|S^Pj6vYWsnjx0Ikq`J(?$wGyXnah$_uN|s3)^b6kE&p5_@
z`>fWY<u}Li=1D2{2Mu7Tax`*NE7>qOaI>*UU^(n5Y1Ihdo0n}6?Y${sX1~$9FCwzB
z=Wa#7!E$4V5>+~b$*=fsJ<Gw5z<F4``*EXv>QvsDD-DCvaF*FfdIQ;QW@a7aSzl0r
zR3M1v92gtRlHT;5#5=4<ZUC!CQLxWs=_jqV82jxYXu}aK-_8&|ylob9FCo%7zqyS=
z2Ik7)PZhmU)^@JU%QOf><=|KTWTc!Zt{%NSW5zG4WF8`4$*(!ci&*6s&m!Il5_a3B
zFu38ft4uCGv8HSZ^*>4i|2#K$wcztD5nhm9?hz~H_bn7&q`9<?cjx!bqkssm))5{I
z7?mJF8%J&{=D8OXcUe~pb*!f2Q`!ECC~dEi>f3XfCvuo4J_xt!?bDG=6Vgo*q8BnR
zDR8WYw71cSPFX{KknevNo@(?gbm}1g;U7I`HEFDx*Aam2FFKCmPiScpR$D?{s+p*1
zn({7B!rTTyr-yffL}(C?Ssn#MBfCUZ9H}xv+}xQxf!{oY{5v`<yV~+?``Eao3_lm$
zPIlL|EOI=q7T*se)az^d0_}YlCw%yMmPK5T*NQ(UnOx@sCytyXN=!JHh$rg+l0e+1
zfKeqju7C=3f~zM+^=VLtL;e<7FkX@G4^tKSN@fk66Gl|!Zc^m#3h0bsade7!VZV;_
z$~ZGhJnSt$C27U@>xA4(znzJoo4QGX)yjW0kpt-I-72FJ&-jB-TD)n-xzWIWZ~TlR
z?%CErco$hjw}l>-nh6#HqMAv4UJCnpYnB;U!dllj_F=yxqVst=+LF=?nP704U_4Ne
z11KoZWzD<`DM2`os`gpk*^R#TDb13kdlmJDols4-SpIY3s{H5Qks?E*ygw7a{O5=&
zlV^VDq{L3RGvn`Hx=M{^o?oQjR7)I3c`F^qduMJ+#rcFErLGPfCua6!xV|6QcST>U
zrJozU;(lTL&HS^g;@gZYtiuE+^@iQVm*N^t8l_96n#Y>Vp3ER&&~Ucmwn~v}vHE{1
z+b!u&QC$7Ez;w#7mH3;KFc{%m&*uqPAt{DEG{d0mpc)ovNcMM;>5KM$UlSO#2ucf-
zS)nkyY^es7yf?+KKWmiCF=-y+m3jO{Mi!ogrW$?+zRpB(ooWJzw$5ZK5<-8TW7oM3
zTk5cE)u02n;mwg#;A#NhBt1ot#LG{7DB3GwI5Z`B;nyg^d1{+?9xq(jU=btV6Gesz
zG~GCn)deqA{yF5#aYNt<*_nWQBLzn*m1KbXZn1m|SCIuw;y%!py6G|TM&<RlPUAHn
z@UJ7hRyDYx5{$1jr7-LfX%6>xN59x3*_q@WEwE3QpXdB99eAw@RDmGDQ`Wt)N0EW1
zQ@B>Ns!nmYyPNyBu&oIHAYe2>-ve#9#Tj=BUE@H8Yl1iDtJTK9nzAWQUiaj0gHKFZ
z-iG9E30eL%M0cu2eb+;=fO=;lP8Jm6{2ZePTL5L?1$tZ$vO+|%NjTbIs73<9V#2c~
zli+D*#Pc=QE$LuC4W>{xlQ8OPNv;$L;w&T)?HXypHCZ68!5Si_W)R{1Yh*3gM0Ipt
zZY^XfwonNK^Z=xnm-tw8gc<o%h-Q+oxV_TPY@Wxip$Li^e9m-x3(H0Y3+I~i5@cVx
z(b2EbxLNxB>{q<#9F~Q%iuOSo)dm^){Ok3vfPS6%#wx_!&Li1Jc&biQ;UQa%68`{x
zb}+0(pQdVkciK%S|M~)AD~UJenBsW!^YpG<bj$3(9(By<YX+dy!7{6Dlv5!cjYjsF
zG%&It$5LY)q7ztI@Xk`bMFncpyh0`NH;Gr>sm^o{%SNh4u%_L2<7<X3ryn%$x5)jr
z9!|@p=LZ|MR$o|YNIf>tKH&^@U~H{6Y#AdJ<=XV44J3rT>Zu}m&}s*MxtKUtslQ{f
z4~X*^vv!CFl7d5Um%2!fKO%cphX^ZdWB4s~U5$PliXr7P7Y4L<#<Y#<20Fc3EqdyY
z>9FcI27DK=I<)+9myu@?ewbm(VPzA4v{Dr*AOi=uM+Io6o7O%WF#_BHEr3x+%DV4#
zZ@4qteDL;^SRpNR5SSaN87vZe&mPfRRevbob@q4=U5q)^YKao=K6(9f2k03cu%4)+
zh${3F^{S`ku<w>hs0e+ju3J=mj6z%{;==aYqq*|j^!Q2V_^H7Mo2Qnbg@!yTdvQT8
zt)rUVUN>!AH|=t?GF{KVuUXl`>WaIrMut0c5upS^3N_sVW4(g-5{czf2~V})<9xVf
z+0b0NZa~y28FL>|S+DN#9vMa(tY^-s4|}J-2DKW0T@E_+VFq55m)o%y4#pi0h7iR(
zS+F_A%qkPzEoM!-ZN*7i#fc)>8gcC%vF0fq%5~iAP3&7@hNOcZ{M@=3y4s&K10Cc7
ztuuu+drqV~=%$;bV}<KoBIuTuZLQw)j5=Cb@s3td0qnnyDnskKgJITTFz^|<M<RPq
zwvAl^PhIqoMZ~*roI>|;zOeRsLvOTQi-1ZeRs-VHfq72Z?3K4p*`+KmE$6rJl`N@f
zECAiMatpZL5f1_d7M#P#a)P#A@I~GWhnhkBtt}{A-<)E8W<CyA?h_N6&1_RAVn-8k
zMPSEsZn&gua4n&R?Agj!W0Esra=VhyoLFzs#AJ;RZpXZ}w!oyZzikPLc|<P=?AaqJ
z@Fn)IwCT?xk1-;?;R$~vDSeEB;VAe7IAD_dYB|Fy_t|X5PVTdnX6z&e*EcGE9=SKs
zlx++wMEk5X*=B_Xa#P0M=Uh`S<%WSvH^_3#R)r{XWhS)z7v-NlcN<2(_C!*KtvZS0
zc`pxtU7XD_ROT~^CJ`x-H1_AWZUU|LLKBAI4|VN0=z`@j_PMdGDBj@!7kuwHd!eRJ
z8c#>ht*zXw_^j_G+Py8<#7k#&Sl)@}OvYBUEAdFZiW(N(5VEZHLOFSzQq|{S#>Xxq
zBl7%LLPiS>H@>rg)37jdKtOElDmRq)l$90d%#3UCsgg75s<+LobkB5;^_bfoTN>RH
z7!^*DpPN^#zy;Y@$lPq(a9LV=)$^PSRo)9uKHZ9l?U-K~&m2A3q)gY=OJ+$ea7V4K
zH=(3>9YL2}S&c<7fHk~#6kFOXQ<C9K;jQ%=hWWz=dx0z(S57#<EYcOVK0-h5nS1E>
zAYUz^C{sm3FfIhNKc;4!O+n@>#j%I}ur>um->7M~lNLN+;m>mUBc|vgB0|ON6d=OH
zHKA61&(sNI(V{jg4JYaU^KFk1$fTIAJc;$J=Hp+o6v}9Luk;=Sv@cM!Yx-7u+mktK
zrTPQQgY}N;LjHA=dSV^_udxj$0Y#7tCk1_{OgcPA*GRPj;=<vZ#X~4+C;Ey>W7ak@
zK;Ex#K9@_7B^2K**p=qGF)<H()0a~ZY_kb!v%&YBeDP0B?ZHix&vl^xk$VtoE8Gfw
z$m%ZdkJv(f8R7eX*E9=W_!|X@aY%4j7p2urjUeo8!$DkOnH7VK*d;g!Kc=Bhn8W{}
z`7|+?y~1xZ_=|zSIn77iRHHM?$pW_Y8CKNOB+0gC7H>4TKf|(U67Ea82fo{%eeTd(
z5bIUXwL*laQ^!(<IzJGdOJb)=5240&q{Vfl!u^n+iRXR+lQ9ANLw7<&dYkuP4@ECJ
zynjQ-;c?#Tg3!v%x=_4jJ$JPKw0N<en&ELU3`LI9x&M`jFU+#SL+%p(qs1JhcpI*~
zayNFeb1yCQp~Vsh@)ck$;3e2t{h`jKl-7V5IZd%UFUh%tmW&xWLa{qB$+?i0j0su(
zA5ev-n1$k{{kqXDv16Vv;kNUs7;p=wa~3Tb1M<MjZkMG0fxcX%eN#=c>=G5xRJXtG
z@wB<p5`}DVBUC98$D+DBtm?8|dRgfQs@1Ny2yNM;r65>-a{nTBa-1caQ%AXWgq-EC
z-&QA_2^l9puzvSAo$*7!O>-;G+GXeMm~yG-&O~)SM9<S|Za8<0Vg#B?{|Pfj(YLrM
z;A_!Vhnvx0Bz<z<qMP~1J{Q$1l&H(#`k64w!;JP<>rAyq<u`%KIEON3*$Nf7Q6AL)
zRAfu<ix_<<RcLsLadP{VeuwkFj`+Pxe$0W}H^+sT9<5xzY^f9FOJN-8!76&wT>6`Z
zKbcnc@DbW*C0kwQ;1PxOJ5@l7{7_T>mciyJ>(K70a)c|HoMR;&PNpoG&hdC)V>J96
zAox<*gdjOXmegvJo;&)>EvxQk=pYG0bw6_8n@#vRfnZ)0lUQ8cKhu5(-Cg)O!C(&+
zlWg4oMuqKrvK!XNzByZqQhV}+3HwF~`v(6)rJY}*1GVQIy{okYxbCc%Dp-IPD*}Ea
zL4ph?QX0-h;ROcr--%KJh|N1Kk1rd3WOTi-I;91q_oICRgiu{l2l89542qqby4>ZC
zDX))~3)FE~W9*Eotz&G*1N3pi`sp8VN6^u)hWrB$VD!1A3KT9?*DCA<?X3!LjY%Ih
z!$D;SpMbZA9<`D_>TMkC1wyHlddJ8o5+aF}LeaOr%(d|)F_3~loATs(*Hlp5&!=om
z{_CCyHJRza+vz}eBm01<h=$mt0f^yl;EhqPbneg|fY_hDZft1J4egdJL~MXF^W`t9
zEcd6b=^uO_zw=K1LUM(U*<{B?hUH_<=H(&xmWTa!^3y+l7JnyyHJd3t>&qb0g1v#j
zyh_Hrs_avb?B0qwaV92#aQ{B8aXMFM#iBkp=4bN07wN|*3rKFvWAbDmx7ImR*_Otw
z;ndkrTEe8EFbh|zMO}%xmG?Q{f6q3$9XdsmG0g`fxVC!IPf<K}y=o50d%nd<YM4*V
z5S^QjZi7gB&HXRK!;R4=TUIR2sWSW&=qZziBK|4WGes(^5@Y9zIc|hqc6!!qjJsSF
zbv!R~WuJe?JNfWoFW{AX2l`$B>BIxy$2$j!tM5U7@?1sya|cGZ<VrHa(e!BIgT<Sz
zWG?XunoqJnlLjXDRCs)X+P)EM-%D-H5~*$hMhPbl=^@Q8pJbTs8eH95*3Ji;o~*Wd
zp0*Q7^H%F_8HV<g+w)YXuG$b11Nb;<=h-k%@*C>{(IVl;n2VwhsL2xz?}r9k>Tgwe
zA_TL{F>W&|737Of+P)ghldVWQ7It_}tqSj-WJ9i0ZhaXZ+L9kvUIw20pU8O0mgu7G
z$rP(hMtSmn_(mb~>*!v%k0=+W&^b=DMWQaN=n>NUBP8I$v+Mn*2h(DbsFT8KxPnDg
zWlLFzXB;s<(4~N2kmM(fEaXY$Hjv?=Bl&Ul<<m*wljqcv@cvWwZ`pcAZfp@RK(uQB
zc(Z^cu=syuAQsEmzj?xtTd1^%A-raNjSvu)eM)-tez_XyXSdh_CeqpqviCjC@NwN-
z3L%@$a8v8F=~U1D^b|ybU3ZNqD_BGT_2xBQ^g<6F6Yo?3d>(<+$M=XGAt{nS`JpCz
z<OEz;#jELHG7Hq`ef$*p@Cy4bllqU2-q~ws7C*37p{mUTW;00JOP58Y0-s_I1@n$p
zeY$1CwCAiE>8!fTYeD|6UG`xS4c$F&)=fQMGdNKfsCRb^sfC9OY_7dbYw)N76YM&M
z+c)+%WUhTfpG>Emhqm~mkE)-}4%q`Mb#(5h73Yr5RUtaNIFI^TT31*PS4P0o1ahzE
zAo?sqLgVijYk2r;ePQeY1j>Q_6`{BIVa1o7G|d}g&$@GePKaZhu2)EnogXyhS|d@9
zA9n%d&W}<~iz^^HqwhsFHyC&VQj8w7Sho2mv#bfjty6l4cZq!UE#z`WI-)KH%Cuwy
zinlgml(SrNgy(a;>Cf+^SA51Rcl0vC8C^6num`qG6X_$OlFv&96SNccJQcE%SY%VP
zSZXbG5@}ZPnmp8X(+6w?wX+gWqD2ICvp^3r?e$S`i~4xOcfEp3gUsTDvga74<x04H
z9t<+bDd(-+i#l1mXJO5LrfHZ!*Y@3#X>f5@xZ}BlwCCb?XpSQBiu6`Wd~w{lG0W;t
z37_d-37=uxN#ntu$-}LsJ&r>anX0sTnLs)ud8Z1c=oR?Po0Z1uhGQ9MmgekNmZlx+
zBGrKOf^Q(q)!}Wh0lvPWCpF)Ts>siY5u4veJU7EfOkHT!)Y1{Bw?BcQfis3`XR@DY
z$fmLvidEM%CuvSFG+i+69k+SGNocfo=uNf?iimCO`r*uhmV(eP$(cSNEr1bbL4g^P
z-;6tKv#6gja3-q@cQR|qq;xpOd~zWG8W=eMrfiEmemo8>ZK?mT2Y4k~G%|zga{<PL
zY`chqNpCMMMLA)P!-D;su+YM({6tgCxzR%I4lpvpdm@{aryo45m1(?1P}Hw|+?NHX
zi74X3kW37g5vH%3r#~Tk@J-9K=fEd>ui%aOCJaEQ0)C>P3ySr#0#5W#&=jM`6huIT
z3ip-jFyAL)ksPLEW!0ff<vOo>p3zkES8i*1UKlwM&|Ju92;n-N7qL;W&N{Cb`AQJ~
zdKD)nL8t!d@7$8En2C>kYQ{?P#Ve&EJ0D{MTgB}&?hLy(>`BU$k@~MF&#!5`$Lgh)
z%-=9wyrLXg|D?J_HO=fj3@Kf*yj89Td@fZ2Koe`0#?yqZF}B%R7Pm<QhwCg0FvdM{
z3-Foiq&H>z`qwHL0EhL%-+2{E6W?sBZ?NJ$9H%Ttp{pi@N8zH?gg?6i1YnTXvB<({
zoblo$Nys8_6EKRmO_Q06Gk9)X?zO$c1fo$bHefQkmETz>3}w`kLGzQ({34&FL>l-Y
zqVjInv-ZPcY{KZfzz}9U;bs`i?0lEu8o*%$<tCl&_IgtoCwN=<5fJCHlhwlOh=s5i
zf8-O9ckqf+u6i-Ta$2@+;YCGk6lskgn(bDfWuN{$dGIHP1-)LN$gPr|Outj?%IKN?
z0(0~r1dUrXL|I%Vm6D;yux3WRRyg@+g!YbmNbJG07%(IzzPQWqtM#Y4U3pVka2~8U
z#udOk9h>W7FmU$A$!Tvy29``;to^#Gy41ZW)lG>fSePhZN3@KPaMy?bo_`PalhoFP
zzpbDmwIA#xnf9+;;`!Sw?cdI1l1)+mm@nc}1k0O}C`Sww4nQvuSk-Q{bY#^oRxc8(
z5wqIL^a>XGL*P*Je@2A}^>(Qb4J@)pAio#>U{H2OoMKl5flj&n;L6uDuF=F8SUQ3{
zPU$NClwLK(eH-qyrhkp`rSqy9|4SEUwP9-dyUy`b)O!@+b^Zl}f4<7cHsj?N{3M5R
zSyj7Z!2^dx0rm@7p?K9qJ-ymgWsRYFEIk719=p=ds|kj)7HPRh=NdXJgP*V#HDB>P
zEbs0O#l1N&^?n#1(U=F8*vrl|P#?U(_V^s$tSw{6l3$6hHgESga^zoSs5kGQy`i$S
zAq%yB02h1Ozz_jxh8c~<TMJ;Uat(1K);_*FmGvp;tsfn!@eP)7X}=EHl7o<EOHvD4
z>@^VGxW;8({tQHUiqG%)2=Fu-%}!fm;q&VYud3+RskjElf(GNSfyBm4ZTG$#qT3_a
z!z1gf8$`;K{CEdXU+!emX^s0-YxQc}?|Z{@?}Ks|PH{;C%z9K+))|UVlhN*JpNYF{
zGVtBgl8O)YtJa<+zrCkz$;q{tzxc&6@qMtxGf2;po1QvVcQzQ@&i)wv_Bsk(yk;Fb
z4!YGpZ}RQ+OWpwW*j&v`hS|TP8=b0T*HO@2tubKS_Xg(*oZ=z{{Cnb4-rwx#AMX8s
z6TxS=`~e&Ns!P{Vq`wZ@@xC`U_n(VqeX14LQTXCD8w}d_y}(@EGhCK{|50S>Q&l`m
zR=+RA6aNn>^eX^DI;3AXcFNlgRh#*3iDWe7j($_JvP{yl9x5@nm~pbuKwR9S&#bss
zpv!O%MH7-j%w`CQOG3Uoi&NxYZyW)}l`KNyz(9~kb!|soeo}i$(>{$Zm0X54kVUy%
zhOB(AfDnlCbnFiYD7B#99^DcFFqzP6TdDUeSAf6iS#6r|?b6iM07#MQYPfNQ0Zi8P
zIX3=3R<X|v*gllY9+IaEgl2BJRW*Sl!^-zmTsd7k^aP?}S@73rw+(&>=;+5MZ`Fu1
ztpgdT#opkw2a@V=^oJ>a)THRt;&ukPL!aaGx&V@&fq@yvz0#f=T`$jFlKc#4a)~K=
zd8aaphFRz3ol<rS_`9syuh`y#_5~F9Fp^?Jz|L5N7)cQ!g_|#K1Qf(DlHx<QptPbf
z`SRTcv~Eh~^@P^YuCau%fRFH=3IpU*E)niaROEk8hx|}8oTx6?EZW0H8xw8_xL2ii
z^auZ4(ZQlUcC<0^hL3wyZs+@;A8CdY&4q(SfMABP%1&DH&GvsxDNt-*?d;~May<Cr
zW#r25>`rzJ<Y%!A-HXh)(H#&+XyXpvi*So$e&v&?<F(<NtC!2+|MlaEh>;Nd%wi3O
zSU}=mrdDK~G0)OnU;r2<{jj3~LBvR$n=t>ncq1Uu?iJ^lpWxUHM9s>}6nLdwV(}h$
z&g=REX@*kjY?e_hboi3olceRx=FyjU4Ho|yMaq`rkfUZyIU|l)<7Xnpfk}vAEoz?6
zJtFp)4czgq_n1XW^vtg+CJlA>*(=-$wVP2{mSuyEyA?f6i(0Cu4B_|wB8P$gDnq^D
z{^SjnsU@J^?;ML;1QZ^Yh>khMHm`Tt&1qJ@!{0j5#ivqfmgXzsYn7F#%YvB8G}VfL
z%vw;1B-SS{j|6?z2K*u1jz_a#-I3%{N}BgKaLu4XJ4)mVjQ#}lp>|Rwa?swg$=9*J
z-G2}L=h8xytr-jUvW!gQnu}Hbe(&be_4obAj{OyF{1xx*O%H@~xSSp8Zb@oCEY-R-
zTLS7IUE{3Ri+Zi2(P?^7_s?Vkh!QE~dIxaN&enB?km_hina9`c9sRya%}C2UyigO5
zEY>^aLCt}Nret0pXlh$(u^!lD0#PSdr67%157hY`VS7$gxB8I**ng7#ruR4HpoaE7
z68v%`#C~AA&IyY&>bzpT&OunMTk|FG8-IVIcPfh7Zr$~V2-x(s@*9si$v6`Qv|IOI
zjb7&vul`%&&ePykw=mfxUu_Tah7$VY!g{3KwR&c>Fj*W+uk`g)L*S9K3@RS|8683x
zxr`~2S~^mg_v?QhjB7WPwEc#F9C~MTEbSJ3X%*K=`2V`7DnuhD+2oj_ALh#Px{`cb
zJKum|_);AtT{0i<(^k?5945=>Zh2kv48d2e8W%xWts3(e;3DXJG~qz`ERi>+P@G>r
z6Rp@*G83hk4F#cxlIf^Gi#2lJGYtNf8p0FjO>)Q9o>))tSzMdffKkehjI9>q*Qlwi
ze+;oxON?LtAK)`ikyd`aVv2Uu6tmhJI>mAsTM#2uoXqa>t;So4(9}g7S$}qo1zi@m
zA=Ek=KXuReH9qY|?E@vpMF9_o;zd3WrQ${2zXSPy4EsIy--4=0SuT>6Rs&{j$1PlY
zP`=>uM}*k@V=oE^kX*B2dAm;Gik8|*S@(%Y?DLMX!VZ>%kqk@hS4}1M6mw;yMn~A>
z#17&Q7LnL2#5L*ImvOUwkr^@R6gOLCk0>oH>RkRY>O+hex4Bpks*#TjGEcbqPso!`
zp?iT+5OJ!1PZs%vY=jdL&p7JED3-t1CIIk^G~N1`ywoCbd^049RQDt_1$#FL5cl4p
z9yi!Zk0x`AST)>ZZ&WA$qE6mkAmk_SAwZ^A{Pw|L(sf*R>}E(%TyU3q*I+Bl2;E>S
zF`CRZQJUR#P!^+Ukcv=ni#oz!D*-Ap-5v^GCCc}h!Y^U|&o2~Ud*OZRa`!@W5dSra
z<$Pw<t-*<!gJHiK|MOvk&+Gxc<|nQ_e|gafu?mhoQq77|MZC<4>Umy%UCG|tt&4F&
zU1Fq~Rm*fnhwztE;fTx=L8Ry@1+d~Ir~esD)HMsAvCCiSLA(|jwXXC<SFF3s&|MiC
zmR>qoTovDyW(&K>tq@O(H#+WM)Ha1k-8X#5K<b+>DUQKb<=$YI6Nvya>t?=@<CQnM
z`D{949#e8sF!frU<ggxho?S-G*1%G{(jRAj%nGw%&bg7*oDy2aKk75)bBPY9`@|K6
zPv#5ih(^^;QCA&&$}8j11cfKhf2`n10fpC2z1AifR+QGWWn@9OEXw;Eky%>LlCd1k
z5|mfLouU<9JN#Okc=+EH;ViX2R-mM41=lja)<zgElhDIwEPuZ+k8}6N%vkBjKFXi1
zri$)oLvMTPzbq15Rdqe1=z6eMR+1&Wjlo;$K)kBT8&~KerRaIEKaHr_vmkvueQ|6Y
zayP$*8}cd_NChFrT)zzi2T)ZSM;;Px{3DvSc1!o)9jrHR7r_C1mASEp{|T+?IH=KN
zEUD$ZCwc$a9GuO1^uBSGNvWqpiSt8tfV5^{`bl#S^GOfjwj1Ugl7EpK)mlJ$?4g&*
zXJ&EjF%*5`2H$P?u6;>j4F0tje!zb7QkuchOM`VC<CY%72@UOy=OBZ9EFGa<P+Yz<
z2g;RPKsn9*u^ZTPG1A)c{jF&9O4XkKVBku~y>VMRp~N<<CdJ=Dr?}yDarB^<EUHLB
z_+FMdoxNTkOu#zwooyZ~P?NHaB(3_r*0uDjwpF-AB0ahXeu=m>WZvco;CN(ow3;gC
zfs`B@s&Hc1buLDHd)lNY_pOhd_{g61VH?sVzN1BaD-x*SFqFk=O#!3QZl{d6*MZnY
zKU_MyGh2l-dOq^I*v1!*TFg0du4+7M<2dL81#JfE6Y(DvPmjruM$>`&qIq|^RqLE^
z#}UxwjeFFQxzX26|2iCsyO+YS<98Opfi+>$P}bC84VZ(J5S;&Ykx=;9Y{2jc98K<7
zv&sH$sV}Z&!R3DzpLx2hv12Ut1-A$|6CxdNbQ+R@qyJUW#>*J&cK(qENwHkY_W1OU
zbJy!FdWWNKY<DZ;Xmo8W<482_z3YwBAtX_J14dj<sJJdoOz^#3t3?2BhH<QGE8{@)
z{|+IpB8&t74^WJ<t(lj_oT3rtTJ~B6f4EdiP>Zn`I9f%2QQjw7kuDd|tlMC6y<F~x
zO}H|@-)2>#smBKLL#s9`Gqt#Gv?HmdW@gE&#rYS2ge9*A=RXHEQ_8~T6*-R|s#<Mn
zWkNYXp}4Y|B%n|~1i9r->;6b%GS=>!>Zk?py@2+MjSzNs&7LyN4ei;)IOXV8xXKzS
z%d|^Pl7O#r^O^`MTG1L>8)8LZl@}G1LUm7h@9rzobMY_g%mTDW$ALF`T;eP{)_wn$
zNcm&tV>U^>M#ww62^I8jrINzDHpPfP_WVb@v>VvUzeQ{P=qZac(~_?#8_}J`uCP(n
zhP=~;u-CRHRaDU)vJBlS{xdpN7|0I!yQc$DBYT5JrICz_Q7W%!zq3TfWDoA~_Nr)(
z;bMz7bSr&6RcE-LL4GPy^~R<Wo~*$o|6k!L_eazh+&uDAz&%_?x5_p8yDrCtXTGMC
zM-k7Qu`s$!1>oe@i3+=11Yq|+=0En^JlSkz=OhgV+@RqLT%216JasWd?f12=kNrqt
z#6JTccpF@bRQgcpeC^Y6bJ4QjO7>V>SM7);K<~ws;fUTNrx}M_jj_d;#K}y=8Xx8=
z4$%RdWVq58-$drGv^5bg_v}%~c><a<2Xp9ai+lVxOm+nE*xSE+l;<aW`m(;tm!GAS
z;uht~t~N$D+$1BI#<+{KZSapo*8D8ll)6Y)0<|&fVLchaXhv)7?SD_i2p{ai5+tHV
zlHM|jBtuIKp>pMv!3aNfB7Jm_#%9M`m->$&&of*;vb>%DYuaMTi%^uYd^q`Q&lIG|
zh}ai7H2WRwkMu4zE1>A_hiyOe!;BBv3l9sF;#z;YW~u$;9u8;*qr1D161{rDo8*uA
zG~gg!KyF&^w72qZqU}fI(MZEn^t@GfRhKemhf=A|doph_kAstt4^7F>@`HT5;;KI1
zx2CVu!;keK)K>+{m9acd8SZ=>Bh%cM0NsuiZPf0@5PVY58eFfmQ?tMTj!Gs9GIAry
z?l2bgH1Hs4?R*?2)658Ac6)7!Q8p?G5-j0{iuaW5_PRmLsIM(y%UC5q2qm>JS_B`5
z;WYJ5J0A7OmUG|avprn!+U~u4x{GXDU+p>}32-PTV#D7=rV#1ET?8CdU1ZB>$WNv`
zdP<^BreMChf#{%5CM&jTP4XC=ag;TnH5{A_hrYHKwEMctoMAwhIr$Fot<<N$l2Z{>
zshr3hFp#-n**OtuZm#EOBlU$RjO8P-%0iYoDzl2xPC}41ofOWZJDow_h5p&)tTXy}
z%dZ8PAIj_VE^bldt0G9(<iN;|Rs;@$UqbXPa`HrXmxnhoY6qP&MMz%d$Ws=qDm=?{
zmnW2tLX%B%Wi@~D%h^PzmTnTk`mweLPYCwTi7*cnA^w4o%NqIfB1^Gd2VoX#ZOs0~
z;N}}|KA~PU=u*eD?MV;!2=$y;Y;HXBAjbW;s8j?lt|@%nk$Dtxz*$>>pQubuJn`@*
zbbYeG%7BZ&05&)OPC$+@bd53)txw3(v_dI-<2a4Zg`->P^us8ie@eq4m3`C6y#V@_
zmw^C-bU*4^h$69i{yO3wt3Ccf#8lcQmRG{Sb@(}z-{|J->1S3QU5+9QkAb0NdK#W^
z`U$*%d}jT#m!vCd%Bd-x-g-7>hOa8hqj-61KGDz3Xu=wu4v8cie|Yr)(z{#G0Vg8=
z#43-po>nJAeoV;Gn3oTy387`Sv$fG~q`VYyw9(K}n28_~npuoI9X(wY_(4yY4_TCP
zM#Cm~WpP_~@Jw&klxxVtsXFPZ7I;$aL*A2{8u03idC@VKSXq_2;RmjQ$^@;ZR4v<X
zyCcn8V7YGaVbg`~@wx4>GmIxs^y0YLj#B!Kn$;sRK-F|-J~`gQLJp0jU0~CHQ~>>J
zj@2h|&JoJNq~yu(F0HONG=QakG#0a4<S^pwm>;wNGvN`mN&+5_<P3u!Fa^6n79tPS
z0teH2@|bs_lXKkPbYf~hsA+QplkW_M7{vi6c00?FYGp*G!fwzv76<w~Dr_Q~W~=ih
z<ytyz0$jOrp>s90anN+k0eZ_%g?5!L!Y>8>r~|Hcag=34G)(0apJ^&)VQUGpbIdKt
zE8fBaCZ6cxQMA7#fY`Jl^9vJUHUuugW|g|V_~UMUu9aRnEX_o}Z+=x4?i@6!+-AHq
zLd0iqG+LbMOf-wK0Bv(XfkSyCNp6IWbgq5VJ!>sBh1_jIU7)F~rgq^=3)y$o)bF&n
z(!t@gUcm}%R`pl~Z%xIRX&kyYT~7s2DH?gtD<dD%ECx2H?ZMqBmDTTAYz(@F72$QG
zNOlZ*va&}P`%$)Vze>u~p|Y&gf7orRebnL0#plP0K&$ji5b$bhrieCKpv)Y4wxk-V
zxAm}WP2D&`QrXUOi)R=no63dyszbigXl!=850duI%+!=XKO-zmPXO$B>GZhcyjA7Q
zT|iT@7hfTdP=^8>8{N~>z9a$&4aT&N+VBEMhGOIr?MKpQz2<fat@tJ;)QI#7%o76x
zw-|5u#yJ%jk0Le;E>%r#wz;f+3fb4CWr&W9G7pKy>iLgVOhJcPZCT0TZ>>>T0a6yx
z7?9is+laST%oQnJ=&%nZjzzz+GHmh;IDatTG9dsM$zV9XK;lmdDOL`c%<^cHz-U*(
z5Mxtb`s#PQ^W4)dM))Q{*o(>)>BJ4Gr)hZ840Ze)BlEUrKCrSy?if#UVyjBCk~ROL
zpi99ax;Vl%2$4jJrnZRd_PQXcNiX*yQE?|P$?#)RSc!!g^CF>UEk}uk^)H^mp+4lN
z$!#n!{OfH)=q=~h()O^+4&64t(Vqs_v#XV^nEo?jw<Z4J6cE+hyTCSqgA>@FRP6qy
zF!RMHP4|ki$J`x*C;6U3pC|9ugO(`#u?7TtH*t^DRfb0Q4BEd80w!<#V(m5Xr8Q;w
zwI=1YAg}TLHDxKGR2HI!?XM|gTu6Oe5^5dU5MQ=iaNsXFd!cser`Zb7Y<*q$t*P`K
zRoOD}%t4H13rER2F-T&V*jWA&jixB5j8LkJwA4oo;`*U%R~m5aqoq1qPEj@{DP27A
z`d2+GsM(F`Ll^ToMNhK__Yd2%C%t_W(th7xyrsQ~<kzNGS-|a68e_y<kT$&cKnR+Q
z2)Qna5o0chAKok1A@<jlqa^uU$Q@o1V?AL#m_pS7u<T}n_{crl4TsbvVD3&-fKH~v
zUek$czQputmjI!u(Mf9#VQF#8fFNpA(l$%cU!)U<OCB5Tm1jCCxaj4+N}W*2jhgl<
zQ8>tjNS<>6{ob<OCR2S!N7N*zS)~CGBoU+b9522Hyb1ROGp88KIuW3Z?-J+@Kj%%%
zRu?>Yz`FdDzk;deWOseS5sUWJM)NScj}OUbd3_{>*Me2V9wQc$6c<E1Y=I4|oAM0X
zYms8C1U@S2q#k!`Yiflt1Hl8TO#`ZGp`>(PYVQf5Ao(1Dl~z&vHZ2=GtYTovP+6P&
zXvvWHO{MS)Zs`vhyOz=*8-fvPYE79?NRDj09MfTg6vUh^t_Fv$qW7+%*GyZgiUw2>
z3dFS8YLpAGuLxC)v)=;u1CMCOdC%`Ri~$|Et9w*BHPn=K)aAN~@p_3p6_Jm`C!mT!
zA#DqCmfCcDy-^^mm8_y}B93-pXx8kYUMxsW4<DqZriTskn;xY5F{S7{A3a&zZ+Nm(
z>FGA#(sa1Ibm@3}OXTSv(<0VyNV!?51hxmYXipY~)ARC_=Dm!?e?3{)kK)H6v=Q*`
zcur-ByjL_9T)gf@bqhIn7I%qu$MGfnz#84EaR@vT%vu5^>wTXriEVEVh1$Z-M;%g^
zS3QzanhADhnbL0`dil_;8N2X-&Y|39hnyr98E0bqn4ZEOM~@p8T%J0k%lK}deM^R1
zo@To$N4?{cM_DtEt}aLb4yzr|=u*$9D(406Xlp9*JhypqUbKx9Sfid7g2hkj1GGnP
z6ZpB~wNDO~jNy`U|G4A9S6Gcx;Qc7$l5Ls<j%z8~iYo&bFdvtMwg`4D&$u$sExknc
zbfx~13>N(Y5Ga!0XZ@C7Y~B>TIE*!!D$KO5QU*?DJ}w-dk>T0;#TAbWlZ4Nl85-7G
zUia83nfX_RMjsj#S+m+#KE>9d&559fWy_d0F&@#PjKtp4HDvh+H{$kgp>YY~YO6Ov
z+>k7nB#AxOXy^leukevP{uCp87S=)$HZWvbTuDW*mG)Rh?7~FH{_ePUAUnl{!E)&(
zF&ERO$}oGmQoJm#RRx#6C?)IYPqexgNM;@bO`s$@VClzokI%{g{!iJ;HN3`6O@gwT
zu!aRWx-ZoP(R$H+GIcRPd*nMa-#GH_4$oU+EeN1&&sxS6KhePQBOLK<56sPvqH)Y{
zV~}$lLj~RUfL#iN2TfK+S1!<?6kYA>Fjh@cR4og_zgn*pe$8uHR!wYFtzQ&t{ih6A
z9MmJVUA>pf(KE@mp<?Ao2b{H;965^TzAG3NQ{d5plo-yKU-RFQ%hd9y-zm{FbUX@o
z7t>UU7s-nusmW<R$jqv0mPgsJVSlE}-)*WZSkg;S$YDtG5fxLU9mjbooCv8KL#S|r
zy@k}yy_;(ex5;7n&>&NnYBPuP^-aE>5>I)Q6>l>nUn#bvEFac|$@<5oPTw$%=-Zsf
zCThEcN8e%D7$ZF5MYcELAU`+o1$thX$rf)o+1N^-=zeaD5W!^k%X%ysRLLDf4ORbJ
zW1fYtB`q|SYXoP3w{80sN*(<E`&WhDRz+%0{3|3I-;J#N;)v5u-}-KePD@$och|Lv
z=o?2c=NOV4r{kvA9PhNGyU+nvNW9UVR{H`c6EorppOhuL3brc-<4gquw1+D~67>#S
zGTmYxpBIRC@6p8^KaW2$*}7N<uM!+TJ>IZ<-R6!@ydcsWSD>Ux<Eo8KRAPUyM3!Tp
zGgRlXoI&w#ysUaOqoNTan(T^fxIAxqkIf#*IL8q0osB#`HRjb7+0jCL0dM|+#{8g8
zq&J;`=z_?+nP~cJI!Rpx@ER;O;#zseGJnmRG^w@jpD)@9aKJS(eVENmisaA2JQ<Kv
zas%64?<3L{#GuIY+|Lse_w_SIM5;B};2kS{a2|IUti)K?v47fM^=svU6I*@XYByAu
z?9~r)1{lt<ts5D%kwsIC7BKjR8j<<Bk<oU<`|XJE=R-bkt+2Z~5jGXi!!ii&(yeB#
zQ|L-+WN%qjf-}gb@8lSoKuV6=N%~D&+U&omR-(SvR_coPHQG%#V;~L+PxvPR6S(?~
zGibD5A5OYu;6k%Rdli|P_c@FH+YnuTTNbmAQdK7}d?nRw*YX7AaWE`&EmWu^CsBCk
zYlU!AXG%1rIn@dMsDJQU?ng{qj-J3r9kF)&=xyw?$|d?Z7bk|rqKxeaYNa<l9p2W+
zfjQ+;S&|^{DOQwi0++a|OV2h%??(hZ)}!?+s%V+Ws>{ID(l{Gp3rwL#1jM<dV+Z!-
z?*<UFBK^DY$P=n=!$@Za>ZP#fp41=wBdsWV02aGsHw~r~E9W>XKM69fzZlr-#;C7^
z(QRSR^QH`ms`+oTs6A|}s$DsgF#_@tqv_S8uYKTSwtP3YW=e)c0%RU>c(VuMUB-$!
z)bpS2K8$RCDdC+WZTS6vYsmeO|5(E$y;YSW6Ub~WQ<XYh(2*c6TlN1D_a1OfWb6C*
zUArP8NUy6bB3(dwTR~(MrS~cwX#wdqiWI4_(5rwD2)zdaiFBn(uOUFBmrz51g!}{Q
zz3$$<yZ7$B-{1f9c|T8{dCoiMyk|0#nK|>$NtW(mxWg#N{9O!snZQi(fphWNe4irr
zZNv(t{{vad)HBwsHtmrMylJ}8c08Z0AuZNr4p&lV#oXdhpH4btogKLwy7zFTV=Y#$
z<zi67dzEvF)e60Z7M@vaGR{AbS*SWc2z~S3i6;)J;{eBVRb8<Atm@L=GU%cjF6z?r
z#P1o}&=2FNcP`?QU>%wAqe8b<M>@7pBF(ZgF>r?!j-Z1gpkJqvXx|cUPU;{+cG!rS
z?xE0fKVl!kn$U)@L|*M~kf0-SEXM-z%0rpA>wzC@eT`C~O<v{rk0Z2W4Sb(ioq{iY
zqI7ybK7DE7RB8s<#ChWkCbv-7+q2t2CZCu{lZ`B#^*qTaG<ovmQxOn8f3zd&xmA+O
z3+S-8mbA@-xr3(93=<emw6m8+w@CNj2x1NCf%;#w?xZ<)>C^u_GmU=oRevO=k*cN{
z$I2VLdzB`x;ex~<lu9;4^%0F9HzSiA8p=5I-hea@&r^5&3V>+kl(k{+lI6lKH-0L4
zR*OT$hsH=-@aw!kxoh{Y*j~{6S=jax-_s)Hdr$AY-yn9G4)-3);g%&)M-vBuZrsj2
znl_^Wv-yJSzLT&bX*vdZX8OOsh4)tQ*0Y@Tbb>Of$LKH~ZqpIIj=;+NW3md;i?1eu
z@zXS3zsb!#e*X|WtGc2=QKl^Ofq&;m*ue7@4c`(b!u2#CdQfOv@{g>HKP%L5!YPk$
zLRnwc&!~puyvkEHz`!W!>zl=|dS3LLj<BTx-nDL?SLaCszb<<BdhKmsQr=q??uBZt
zm;GAN#d(Z8BohEyKe<L@_Ii722{ki^nrYtWVc>B=#zNPsp=<5RK#Ft2_JPZl%{xg`
zK71~fo-UOXU$M{%I>ZUpu{T;aHnOKF8e|+c2(kAMw6AQfjGH#dcP<=)4oX1>&q4<s
z#RsLt2RX&HeN&dsOw3%JFy~ScBnRUz+vtS}7c?{I%v|Jg35gYNx}Rdk(Op7iqj&F2
z^2bNQ3@bl9Pqi$0bJ62<gNo3|y)#5P?Aj^Wwc1a+hrrjOiCXHS>S{)pX%wl&e%28?
zMX6;(nQ@If{Mxmchm>OSrB8FuzHI3$V-7aBk$mPp*G~%7AIB`Mh59RgvHkGVo5Xub
zi$6Yoh1yDciJta}X6>n;ui2fL->LKRPq>x1B24VreUoSzS9?alo!n%Jv2H+wG%eYB
zhw=0H-$)w6Q>jdVs4D0gikdUPPa<AQB*EzKZm-3LIWUs(wKe?iVl@NxW7%sw{O-dw
z11-i&@EHxyH_FI-W5)e&W(NfMJ;OMqV%92MYqRhvX}L=<-<6a}wRNO_B}s(ChWFQ6
z&7X^EMUW4gD^!lCv5RW0s)rdk<kB)hT0-nLQq$+9<a$Ev$}`4{PN=w^hxTziS_5X0
zYnNr*7uEV0!ab_S!342Xh;_()eJl!$s3{+<y>y#t=@+J@^Gr*OOm-ceA?>4TNMRD&
zuAfXpsTn%tMu`qsGcElv{4~@t*ViGJV0<OOK|y9}>}F4;SsM9H5V<>;d}jeMs-_gW
zytA_-FruMoxFl)_X^ZpejI*oGrfuafcS}cUp2TX!%M6;UR<_(Xi+H$WoD6Bn*<ahv
z*?$3+i$)U;f^H6{*_DD>pOB~6t5%L`a`-~9y2FMmc^t$r8SOIg{h}6d&q^MxFT?{h
z>NLFMjU6~yG`eL}uIk#AW}~_aII>i;BU_a#2eX!d<Hj{TM~)0p4qmG`wo33C$w>Uz
zf#k!A>p=O{I@MC!!R)H(Rv>YR(tLvz$XOBt+UQn}X!Ch!M;H&9>&iU(vNZSsQGVn>
z3xl*2*&RC{Q^vjY5p8zj)c4wV#a}3?+TX7CPd>lrU{aF*Iyz2C!XWK9CZ^*6X_ZKs
z$!S~6GV>BX-LBgy^9vF^y{>6l^U|aO5A9^*L2KR0QEkWnn9k+;C1q_sj&9eL<ThQ*
z^~=uMjQzGCJ*@6sl(lK3G+Pth?rP&P_?5B5&P#IlxND^y1RC$Gn65&Oib>)j-5TVz
zv36PheGl!AMckv>959HbZtTkcfq2+pT-jV?V6Mwonjbf!t-J!^@ED|m*@gX%{F;~p
zg9P7Wv+fH`+%~)JKT<S?Dyl7i><gW&vMVh#aLA_}hqN5gF^7E7aY$E{U3uZy$SzWN
zd}$j|TBu@!>NhPZWPKsqRrjV-O5b-NVj*Usus3PF%hp&tIkh$Mv3*QZRj)-qVmE;T
zVVw@n{OByW<q+1D2<P*#U&)@19_gM=8d+{EEG6hI{4Hm1xQ!=|z|rt7%VSmc9%xXv
zX=t>t7se<{+wFuChX)qVRFsrW+p8d=`!~pmhdKSi>wGC;05q@PSsOI-eB%7JQOen!
z0q1A^5lv^AA96Ac-ND$8Ft3i>q+Xp=dohU;mon;u0xQN%iHf9$<_An{>MlKZq*`r4
zjr<S`iv6JSt;xl<(NV#GI|G-2!0oj}gr=V%e#BM<KeKLxAN#~cblgtE^_3JYzFp{g
zNS0}w>A4rK<EO|2&s>FP!jw$I=WyYK_qq-<r%ek@_wD$wgAf_oUMY*SAsZv1je#Q{
znWgD^h*53lP3!sGZSIo81M}^7+Y{W$5fyg<k4MB}{NpNn7BtxQ{G)n;R%JIUWtWD#
zqzy*XHWV`btyv2lRPgJzRXygW=`Du-v}}=VB7_kt-G_34qb+6wHf3WrW$`_h?tV3~
z)g07GX;>tYD8NRvj|X)UZ3Nh|`r|>K_*rmzs#&mz)UcJg^Bia3mAI9VL=ITz>(mlU
zPV2ap=1$d<>D&4!DZ-Wa@j<ukcPQ<j5Vlnp?3PO<sEzo~fQL<zMZ_3c%O>LV9#<kp
z{N9Rqyrt1eI1JNT1wT0baC`dYX1(&>WVRnhqhHQDZ*(_q{h$@t3RoXsKNwS`v{Uj>
z>Y^Z^HuZz@5C{4zZ)0fpZ}4xK9F7{A%<&1ho*$X16j&GW3LaMRU9I>65CS<$ET|*P
z@`e(NS$$9a%9c~a8TsO#>J<YSL03>eYkcn|0O8v3l3+R-J=sybB-~%kvb*oMZ&%Ib
zRopdcU*2KT>l^UNSGIg3UiNSvaq>JyX1boUZubt_*sN2@*%ArKmF11LHmgFn@|&4e
zs8WNlEdkTjz2oa1b?g&#^;a;Bunkt`rze|IdvALQT)JeRsUVF}OX+lSmBF~Be`LVX
zb~jhouN>`(2fNaM10(Q!uu|5R%Mbj`*;lW0wFQ=N)i&xriUQfEf=b)6-(o#)q!9`4
z$kipKGsiCQUrn@C_(hRPA-#Ca`PRa!Tv(Tv-G24yHP^73wrma>8u|R<IY5>iSEG%c
zT*nKOnS29}MJ^bYC|hL#6{ynGo4=t38y@g4HCEupmX%zuGW^hN!s=sDtmXx?0F_8%
z?-K)Pux@Z&DSvX4`95g;7MvCEo=F`x_?Qh0Xf>>>_fI7jcEe0pcQ@0e3{PLzegs%y
zM$LMQi*<tZyThH0PRmklZM1D()%297E|%g8AKcp?Ol4UskP_G)@~4wKm*pNGbash<
zr>;YqP`+-96ler27wvBQo2_=D#-PQARi7|PFY^${e$Pke<7S*H6ifH9B^7WvX(IsT
zAcdFDC-3y;xssv)()dx{O9-1sQro!;^a_+5fUFfa<&n>}BjA-Z4G+~pIkdOtl5=wZ
zDz2Q$kG~+5Ca+#kPb{C`(t0rTA%8=%br-hID?u!uYr9*rbqnOaFX-2}1!@C3Yd~GG
zlNs(<rbfsp;KH&s=F01G6tj;Ff}<d{9<Y!=7%KUoj$0pPQn16aHTjpPKRJ~D(8)?>
zZ%s#lg@YATn+)XvO|Q&cnnGQuqg$1nFUp2nxG>9xfY4W_b;;YL2tUaNtD=Q*yt1KJ
z*1c0+2u%Hy5?O=0rqU4a%nhfCyXB|7no8>*r5nG#G!xRFr7*Ch>+LRB%s)4%U00i+
zOSiRTZerZ$Ts17ww%ob3U6baSHY|Z!Hkw)_^Y=rw>`MEqL!r|LQ2Je^`CE8d>_&)O
zGkoF`RqELK&ns`pDOy$R^jQ5%rZW~CSY^vHI=pKw(jPB``5Sko4Sibn^Y4xi_rKSh
zHuf@1w(k?0@!(5WIC;0&lpj+n;7z;?t5n7`sCzdEOx7Dpvj$>J!`1@BQ*)dJw4n2%
z4qKAr7N+V@8xj2Ifj_^UeF_b&<b8ss#q)kb*03lmgMZmZQ)xXDD7?#2T2eA^gT0i%
z2ntIb!1XTdM77=372|&~6BUm(z+V`i_L+Fflw}o#@Tk2kW=2Viww|EMrkUJt9XHRX
zPD2AKw5AC)8y*6%lgiEjoFm#F%7$oT`xJO~{l_@;)q?j;dSOa2>scy>y&<Pqo45;F
z84Fq@f9j3C<d(rCqX#nCz8ZW>RPW-+krxlWm{s2k7H)iWwn1B8Y?!ST#CWr-D5cWg
zJQKfhcetfhs8#S8U+yCwqeG_j*7ThCkNr`aD%ECEX)Uhjrs2?K8|e_q0Sj8|PzS%=
z^`HGH>Zpnv)4W7T?-Pbdp^KYLykxLgNx+j@ipj{6S=IWour6s2w9`hD0%n`gfnsAZ
z+pB9@(x)W4Ekpo&w^WaJgz)}#5kHnXD&iUV`GBx3W&HS59Mr-B?~wA`Tbyow+Rx}I
z*@m$n1s&;|7Qfg6oZ1e>Q3gb&Pf^`MYjn0*;kan0o)|sj*$_4gPDj(>I1bP2q8SIO
z7K&3$<}K=2#U5RCYP`nV+66sbJtK-ggNT}>LdZxnA}sb_DYHcpFDbilt~ClxMEREV
z9*hLFZ72;KF2$ieCpM(u3<_Qsnx<ak&fT3Jp=To<eKCU3=O1KxP^8T_=6Ib;PP(>Y
z>Ax0fT*6}#f^=4^(Cu&NJ)3+ftjkIA7M3y==+!^n8}?ACdFCM|f+c%f)nWhXmY>=*
z+oB&^bk}3a_Pyw6*}iQ`0jcX%3jIo{7(G=sx;PR4i)?M2&eF1Bs?+_Xw_+lCrce2?
za?X&6pXapThriHV=ST?`K=a_ZRhoty*&mv=E#l6=!@iyRMX)R>QLZ;B=4Yf+KxEEW
z;SreWYkq8W=(D)10YPkNPUtC}$Nkv}ppNzamwlYY_O*SBJ&ozfMd2QH`!!(TGgB3!
z)!Sh)<JCp`OqryjD7fg>FoovB;n0R0CVAUh!LicC;a;XBrwh9xe2p_NooX3GZTbtL
z<W)9rR!1#;MUl}`C8rQg8WUl#l8c^b)`<vI=unQ_+tU<Nw|UzX^qz&5Qh}z_D>BK?
zONVIdMTzJ|xc`#L!t&v+z~gqalV@(`4ySF`IJP?L^?xoKJF+K7W@&$`#sTuSi+f>F
zLMr%RZsnq(V|S4kgF~f+KpRhq6!twb!$!rX!cxW4p(`a#&!>Ce7M(J=fR*qsjqm(;
zN41;boc+A`96Yzlss84e)b{usp;y+-c-tC$U=RgX^i?!%k_$*~Y8}feZ@zRMS=zK7
zTq5i7T2w+_Ea0+|l4;?A-u7%QTE<`Ac918ywm;=?c7CT<g}5n<19}%Qc32mWI`*oN
z$1Ye!q0SMaP|b<rWT=Kw@v~&qTeHx{e%%=x=mohp0cS^BM?6hY(~jPY<dSm{F0Qtz
z0Y)WRl?z)SvNB!#ofg7rrFF!CYv;lg@r+#C1by)gMtVOS>&=VZ$QAsYDQ*&|JEJ{v
zrMP8s`a=9u)4PBHHbA3n#wf@1rT8FM;}ao9e`Ks~=WRj!y6*P%UEMb`H`j)4vNKvI
zdT@2)`H+`ds{Qth`DKV=n-_XT=YgWq8BQ>ZQs?}A*ws0UsQMd5l)i#?yOiTnZjU3z
z09}Xe90eYxi_1ohMg3G1EzB0?bu_SR4q@cp_27#4lxB~SXXU%I0eQ-(LwB}~?KYP>
zVEX0mLaEVy(@Uzg)M<vhBJ;c6wLe`NG^VQ8y9XK~2vyYFxkR!-6!Vi>^E;|;1I6cb
z2jrGeg(~BXJ<DvawcHa12uAyQKbBf)<g#?u^s9Xrf5B(>y421a?-*{ljl8839gtgI
zynNS&h2crLY-E-~_mHXMc)Sfp%)jSjhtU;&&DE^(vvm$UhtyBVyP(utE(`(T9WJMJ
zW+-v=Oa@24qGUC#VrFc041fl>7Z0|HbkVZ{@|;TbqMMA`o%$Q|i|6Ym%#jMtH!d|z
zi=V(W9ZcJ!aJT)=$s$@QLiwVU8s<lEl;F0htTb8LwrLC8U1(z^{(=Zl5nb(ky}QxV
zS+u*M?&g>me|OU!^lx-CFdQp?<F1Qfg*lpHgB?#V*TAt(aIB-=%DBn|3_qPQs{U?N
z{qrTIS5nN1YtGa)P2U!}-Kiyp)ju04y>ev&ypJ-oM;E8^H$T)1YJoCT2U()!&|)|~
zr`<ZKlAltRbA>+tj+KG4+F$-3+w*8{3Q0(X)IXWnU~pBAPiLdUt+$jex6Ce?1kqWX
ztve;q5-rX{y&9RBs$L-+?s2!b`^Ff9qEwcx&3_;!?<*8>F{Rla{iKu#PK@1Rt(_C6
z?RN1?><^M44Yx7honLtxKb1Y=vfn$(pZ3PpK@x$zQf&K>K5{6yOI^q^GrDA`mv8mM
z5G8p~+Ctdkc=uU*gdoeq5R_D)F<mm+w!)SE$pECe+x-;m{j08Qe(Uos{1iOQR@cFx
zAD5eOojuhdEF5W1?j#f-VZ)Wg<st&O2CK@w)z$7-o-{eJKB%VAFO|30W#{ACw0KB}
zvK14l*MA7m=}#Wqw*E$$x;@fd>$;^?(<8R<2Y$t_4cizB@L|_#195cRm-uSj$0oFc
zNsie+e<OFHwH0*7MvV0eQkr0BU=wsY3UP6@hq$r^nAlw|y1AZS|FFvw^Hf5)36~<(
z%OFC4Rcl*i>fUu%XEqJHmOmf9(9yfJ@X_}6Eoz!f)LnFGwUTGcr57xp^PXEM-F;J<
zWv-;uqgXl%h_v>Oy6=z)w;z&~8mjjg8t;*E9(q=O$p_saAd8!6>XuyTYjToXnI!$O
z0F$gArinrp|E@_@3LoAS&m2IU=AmGdH1DQ7VBUDf&M!F=!oDWAlmIHkt-NvdBrHwa
zq`0&iqsHb9>uo07=St^?Qhj^9UAxB*>Xdt+%XQ;DzWaFnd5lX#2Hk|)ZET=|fD`O<
ze|!Ockt5!3AM8lST>A(>B;Yn@Xnc)Ii8P_6J7f8>ut%7Dl?{|YvCkA_GCvKs*C3bf
zxznwSz(Pz-2(9_5HTz<^fVx`eu7jezHIZuL^39}`O68)iL%V8wox`Od`*@?>xMh`%
zy4Ydl6J+?Zj%j@D+D9f}0Q#XAf4$3|w(0~F+sX-$+|KEl+>TA|hA)PS5jJzO#rP0h
z?#S@u5WrY%u32w%gh{<^y5d=0A5<oYZ@)bgGg;x*I~d_)P~rA!i`M{dyPDaV8K&67
z7qBrSLyM`$IYv+z;6JvQ>ic15I%rK{xT+Q&f*cID(ZU{)4wtCi<A{hu;UUSWCtJ70
zfKzj-6MjoH2PnUxE;6UXN}@{r9);NMMBVgUVf6sAET1^((UDQj?Amd@I>n=d0<hP`
z2im{E=)?dQ30O8c948Jv2guA0DFf>FhhR>|F3U@X5!JGu<I&YD&f~q+{@AK=rzlj_
zRMof>Y`02@DB*g5L>R)iN2D;duBZBm$jV`3LrflQKJZ}qu%w4gh%a8+E05@NSk3&y
zCeZy<0!~WlX%~r%;3=4Y5G4*$KH35{vH$#>{pXd_N>4qznSU@R?kGJinH5laip&HA
zDP;jdlq}|L=|wk@j98?>XV~C8Y>>%t$~!*Pm$x%a-zHSa2E)u61w519GVgps7IbCf
zbV^XobZ;$~xVAPa;C2_#G`?|ZXGf)u4AbiC{I^SPdy?lcEe-rOp<a_23Ck$(9Rb(Q
zF@?NU%G9+@&ol5~;SI-miK7$vp-j(#`0%2)I2+xRysg&({1J+7<si`Cv;;$j^>2U+
zjO?C1fL}IdEbH|%qTOG?7o?gdjqWk!5NBZZ%e60);Hjdk(s+9epkh}li@fMca^1=v
zA|ERNbQfWfnf2Mmn;QE+IJ<o(_!Gg8?2bU+iN(b;UiUt<nlQdDWofD%Q8BY{paa9a
zC)4^7r^hMBJNk>;CNns(XTX5wWO?o?P`?;@4^?bJcMu&QF7=b2O@Dv2$SqaWGOrYp
zOg2PM))MSHy|6&&FLZuTQEo0{S<4_xDLRmPS>%D(^I{w1Xhv4|aOqlON!1!m#h<)V
zA!Cj6YL=yE0c@ZHIJbv5mnxa5<*A^T#c{zPQ?2@^2Ll9tw?QOL>vEj;9x|hTjddO&
zc5whn*XO>A-pwd3Y8emsv@G*^k4GMeWS{g%1_?fEt6SCXm0Hq~GG0dO&)3}p%N*8E
z?)CR7EerM5)gCUi*OE`R{k%{(zOa*iF0Zyr77iZ3{c>YC%17=r2EbcT#B*17AS%=n
z83eM5=)cFN%i&Nk4he?Ht~vI)xQ}n744)sne!+ejeN`JpJv4y0A+1B4DX9$zErB0$
zTs0>4y(~oaB0Mjo?!ZEx?Z*c{+<|!?b~N1~@W_`1P^cpMyiHg{hY+%E!)$E(%W@1p
zOLDV|J>H||ySMyYXRQw#o#x4ijcabe!a>z#wdH~U412_Fz}7tntcOy4*Xyn5gWXft
z39uP|hnD`y$@KLCuyOa2!Yvye>Y=Xi;HdH?d5<9nRm9tm)+}i6^z}OQ23HETq&3DY
zW0j$=-1N$r4MMaal~DUh3??G!<zZNXcFT9Xc(R;GKhzb_?yaPDZgf<UI4MbZ!M$w9
zA|@5I7IH(f;3{n&x%>2Vh)=3$hmf!G$fn%57rA}rt{8PD1>T~NZgrigu^d}z;+?b8
zZcvN|7+_i#hNE^vx?2yN<pMx|eoa1UYO`Rwvgsz~Q^H!mpm5=_!?|U~vn7<t>$ojo
zOO4BARUbkZeIVvB`ljiu3~IN^W#I7-7V9!jZZ-D27R*;h0xwi$V&gN8?j|ww>cir*
zZcJ5Zed*B4LoLRvXu*LD*7BQ%$@QXc%`Ce!zSBD+<6EfDZlp^uOqfR)8~rMq+)rcd
z0k+$jII}~4ukAh@Wp6$j1G*Fjyy>HhUsx!@Db?ZW1*C=+!@516+-O!kZ#ZMxn1>UB
zf4Q$@zH)S5Srq2_FvWfbb!NDkg$Yd>8trVV5vQ0(ObM6)=}=9II9Yydt(^0|0{)y_
ztE%()Bp0qZv=E+}%y|!pr>jJhZYYhI(jtlNi#wA&<k0gGCG=uw+KKS-bte4K@R|ph
zG>8)*M%ZPoYQ{7h>xIBvDArQpV2j%wbQONzV5TEW-{4Te0RDEC?0*OwQCFEzN4Krg
zKeT;>qAmS|L)NK78lG)XMmBD6%Z6OLf1|1N)|wt8ifSMIMulgDaeqcznnh?sZf{pO
zp;6SKtsLk2L3A)!LsNzsm1LduL)43`^RDaH>gc7WIJ~$#ns4{o6UAgT?wj@xyGX*H
z0cI}xk=e|Qi}QR=f<G^JximLzloEP8vgf%WV-$ozo8$i`*9=;>z@LhLzXAXF%@)Df
zwZMg)hw)PN*9rhfx1G*30nw&Y@i<PSD0^qVG+@Q>vz%p@lTOXWrQ()JPOW@Un(FEF
z4JJHoHTn{71Ez%9bB3R{2?;&BI|DDNUEIxpEmGJvob<Zfv2j^v%B-N7-HW==R^bH5
zj7G<Te8`;TwXM?G9ALne`dqG1a{BjIu8!WK7Zt5Z`ISY5rd^Nk8bhf*_K}o6z#K-}
zfJ>aZyGyRluY|`p#HDOKsXGC)pqQYMoS(>ITZ@vFoIhOPt4#l)YxHuT>zViD0!!yu
zW)QM5S^5c%m7)gKLoZ{~!#xUQ;+Rbq7j?~4>u7zwCznfAZ*h*%9RvsMq?a6C83H!$
ztLhQYFUy$`I17m1i3WccvkHmB`o!V`&o%#;<5kS(CY8bxec9X%h^a$B@DA!RVb_3I
zKLjk^LD~N^jo(385j^#XGOt)Q{$}w?M2PT<iM@ZovLBx$-@X$Mg0n#5RDJkcWy)=?
zz{-Bm+9!;CY$e{l`h>%}+p5Wf<Q(GK<JCha0=H!LWvUBTGcMQC$b;p7>6GSI(70Nl
zevT`+Buiee__D?YvwC^22UmZhmXDuV(>NbCQWSUCAzy8<kW?eqKQ^*9(u5%HOg;#s
zn@Hx$xL!MOXL!4ioHXDH2DmS%T`{)HRDS4|AJ*I{ljLK))-{mBq~vaK&sdsPO4S&O
z&5z7%|6upw$%+uork~@xfxGgKZY}L*KZ+LFUeD=Z*WNX=dL+X2vggLjm=oT?C-#C)
z+~XqA#H^n+gm=U5=f1pyl%NH!rm55U)OuiUpj0_DVDVZiQ5E^G;`3kKLHf<RYN>Oi
zLVn7)-?~(^QB|~C$5cQZukU8j3q%ELyDJysrTnEmxnix_XVyODXi#xy8)sMK$9Tk+
zRjpB&OwR04;Gk@7X|pEtR{@^E^KvVTvE1{NfbuTH6))ZbU4Eq-@sqV8lWhjYFn;MA
z6Ds%B3~-S`wwoj<Q%k7cy}r9Y)Xl9dQ^K$pU&l`u4zVtTEUJkZyC?gpfTS>NGK8Rc
z^8J*wX6y6=&EA8h5dVwb0E;^eQIe_+%h7v!5tBL}+l;YgE`_qw79%rzZ*sjRb=Z_>
z#xvPtdtSNs_#owcO?&dPE|1ZuWy;d-FD<Kq^p~tW=nDbo>UW|JS#;SRW)ucQ&y&uY
zke6fB8Zdb~-CtHOJT8<sAU!4BTBE9s(Ew@O=gC&d9>|K(IsVina>t^@GZQ42P0_3M
zL(6sD{k{^FCzc0`!<RJF?X?FCXa@5#b@Fp#!k4tw!xjyT<HU`_VH>&egKOu(GqGAl
zaHZ589~0n*+`P!7B@InuJBa-ptIHyBn$;zoP`pMHp8(gLfL=&>AGe4&*-MBwtWQIL
zjX;}Ai8bJfF~o#sk%#g~`bJ8z@(T|Qi}NBw*{!vtLGPJPRM&&f@X*Ts-2^G2cLVzO
zQ?m#3hsoAt;?*9XkBw7%9Hu`UT&9tnKxn^NG&DA7kZhowTPb3<dae@tq%uy!9%;vy
zF+_C)wbmeSliq$qFj3M`zBHS9oUz3t#$1`ZiYB~JwKUs$%}m!xO_sc<iCjrx@79g<
z5YUVsb0}yUjl1Ionf3ywH-kz4)$^-s(l>&1rp;V9DwP)9b?uap;^}2^7Sww&moHbG
zDZ!Yj?*~4=j&r}dPmtxmTi&ztWx$iajYf~UHTLoS#GIJ#z^?Xzm=eH|J{;@l#qFcr
z<h<QykS7|cC}4j>5hn7$$An|7(#*cXCTm$8t)l)W{9)cm%<n)v<ag!YbNyc9%N+>}
zFGR}KzBMP~7R@%-JccN6&_=7kw3Z)(X@jl{BRr%S?Z*3J?v_ck{RWRw=+TdTWZbR8
zu|@fbAVs~%WEZKm_f!*1RCW>>aaaB|)MWlqDQVquyPAi5oC8nf{}aeJP|2MQ`gb4z
z{D)p<l__c+=fA=W#MKxy=}KL?o-`~@$Q0wAALgEa9<!AnyA|EON3+q?lpeFS9J6&0
zy9Gllai?Zw`3`I?4{Wh6?YZ~w&K%SYOY|=LT^-ZCH-FewzYk{~A}Z{zNNox1t|{j(
z1|_Nd0o=ixr#Dfg9A1`d1Z`X~3bY<MVJDf9bLGz=bii!}2=zoosiT2j6bRs@>_p$a
z!KGSFV^7GkiaRo|NNUg>T)U<<oca$jzsPscy|{Kwd$@k7Rt#?BFZbEEtg)ZMf@9^P
zJMvehy2iVZWs|=q8ZXr<8++z0^SdLni(mupq}y<f;XfBi0S|B2Q&xvuaz|zyg%7G-
zQy-RDs#P-H&0S`7M_vK)Q=_j^Ctqt;qiY?&CXBIaj#nZ?Z{<|AeO<D!^L^k5%3Bqz
zlsOjl`c>NPZB_z}H-uI~;?ZvxW*?pn<$D-9rN$i6<Z@~<bQgUR_oHkO`-T~FaMlJT
z^Yf!$2s)j-eQiiUEW|W>N%y~@g%H#HrD4c^B_!Zi6r;0)guo34J@faSv{8jiFm3;8
z$bTpv4j$FO`Jb!_hG4XIQXz27K~KoOiZ&{5NlM%Q55<Rr#p*luS_DRI#NEG2!CHi9
zNPv<yA`602ALP{X*X@6E6<NVhB>b>RR&1Cq7L~mT(+Y@h$0Wg(-YqM?=`w+FhR$G;
zYCJy+hs$N-H2)4)!sRk>Ujd=K;mLK#--61<!KjJcEx?2sIsFZc;QX$cUpJdPD#al|
zjmWiwDmok=1j-XQO$Hc52LOHzs(<r23?1L|&?<*b7XvWk$_xnBgF8{ZaCL=>^h|%I
z$>`sVBufJiOob$=U0v?GS-Kf)CoR~E%UEW8d7R_Br>~aVdo%>GSfkQIw*2J*x}t0m
z=^{I~b>X`wVS}=4@p=2{+&iZ;sEyZL5!WJ>>{EuE$ovjD|Hd>34Bf}*5*HJdo~|YC
zbr>%uqMj^k5*c>VlWUAi-r-%_<?`@vgsaJi0^+&y@VY${q9Y=%<5QQ~<%C_wAKl%n
z<{`e@RPBlZYV6s>0*g0Qd59}y?FiMQrB!UxyUiYMV!@^=H?iWVDCP*ZJ6B&ko=w*|
zB!SkU{wyjVKg>h)m^D>9M7IM|m)LX(S0F(7o#BA=$NinF5%*fs0~!FDPD${>jod}w
z)_^B-*w*+w0@~UM(0MqEZJoE5%fr68FPFbP%ta{Z>)|4#^s(vg*WU-yWv6THp}B$e
z?Wz!bS$j_|-X#{5x9Q3)2i`2_Mrh93&;;C{_T<64Uy#dN_oWU<Z^UTgWG)~)3@tUL
zK_p$cS}8}%UuO`k?SFsJMw^fUk<DLng~;YDy*Yy6{QUw5MtkS6cDm+{#1U{p_DO#t
zppv+SCGJ$UR~#K&kB^Qtl4ltNXf%k)TtXEuRp;(kK-e^QxU>-_gT>lAx{&?zM{C<_
z`D+|4FKhX$4DROd2WS(2I5L#5=1%3f2&ocxh%ERh0PvC~1TKEm=ur*FHR%i%C)Xg$
zRR?$T_C2&w*(5i(?x2kp;eF?7`f(5kTK)(Ko9<DhNqPGzN5M&Gqe#CL`TH>tjDLe;
z)~axI)DUYbU)~bQSL5g?f3jcIJD(3PSn3e2203YLCsX?y^nz*p@AnQL?%V71+R*qP
z!`;6#jUz@{q$WK?C&B$*FtxwR5hH0f;j;M)<>9i~3kTHx>6xh8y_`o?k?OnG8&B>3
zBxj)<=<aK8a8$*r$MCyMRqlNfsG!#N?<*o~7Sy-w2l0|3sH`~(?JZd61U5;1>z+uu
z*4C<>Y~h^mpdV@H82;S3TD&}nKRf7GoCJK(Wi#k^x66k3Mnn#es+$WP#IHZ-+Rfc#
z6+vxz0xV3ZuOB`iPXwuL0d%$i8e6dZJ-WQT-MqcjK|H_RA&p%Crw9U;#CCWV0GeDR
zj;!{AgZS<TM7&02ey+Z;_gf0k+Kjpnzx`3{#@-nY)Z5QYF?c|X-}Bc1wN3J0>m*T?
zd+*&J0^|=%-@PU^FwFHQb^KEcrr^(S?#t%=JAf+uBd-9hkDRf78s7j9ea)u3d5<Gq
ziv&a;4x$|gF^w(;-x1@dw&}~Y*A$EQjqy|Yh|2qHkJ#C`z(Hi>NY~t~9B=Ye+XN)R
zAL1jf=6^1~FZ*x6pGO}c@FkGrX#P`ZI@&&8BH@<JpDF(>1Q@m0Xyc`{@IEvMla^xL
zjb-iMqY^afnj8NBpvFdM9xf%k=YI+n;i~yK613TaBHLoQWeaEe{~R>GxWIK=b|JW!
zaE$H-fg5hxvYU?!pg|SS9BBL9Yl+wT0{SiS+J1iqpnRMQja<=8n>HRA&ZfIzMMLzN
zMP}4V#dwBpuBlD3w8Ip<J#Szx{l_9`b4`6xrX8l_y?X=0I*ZJz^NsNYZL08KD*g-T
z>|9-BII2vzUFuixkd&(DB*ue@-0Z&b9drU0F)WjGL);ktS!8w{EXFf_b4_E?xE-eK
z?aB3Ti(M0G@aLP8x4kiM>pT-`WMs1I%G;&#>wIH9i+|mlg3UF}Nr~B1jmgKeG6i+u
z!&b-Dd$XxplixsxRFL`=R@)CA&H86<24pXFcTG%A=0gvtJvCf7X*?yW^j*Yw)~s9n
zC$>#5j&Y<&5Okko^JU~uldd;{bU2WZcZRWU`LCU{`wH*ZD&DKUu}I5-%z5W{7y48F
zV%&mqZxMGbBs2djXe(Aj7IbKgwR=0X+_V*U^A==jkl@S%>UD|%K>4Pz#MZE6Uq7&)
z0~{bGj>w7}E0no*z#Tgdd15%|m|yF!hIG=dCiGh3%(giJ=)_M2cDlJ^Ly1Z(`>7B|
z?aDV0j|aUvG^-~RVL$g`dBz}_h1_F0iiX-1+KMoZ(rBI`ofd-w-vv<1B<(8Xj^VN_
zbJb8P!|FS3Lv5=FNC9`d9g-tM;dWJSo9qts!D%No`oarYh(l}%<nR*j1|}QIM4>29
z1fb~Jkul3}#Dz8D?h&2><%lojwcQ2t_#sP~5PnE|CWQAG3}O{4vAPM=&38|is^8Y4
zX+CjUUHh{3&ZlBlJ5a_jY4SGt^3>L*6P0S(XSLl)P`LC~o23HsoVEjDw^wa&$VW>|
zXhGSnRvT<<N5Drj0aXjheEZhFOCxyyMZxd8f2WGj`j;!B9D2nJx9$H`CBOAKycR(+
zQb=;$U(60TBqY~LMYKg1IOog~(5+{{2Zlyscm3n$g*sdlXKOk)jjX--%cbM>(>i#2
ztp1|BWMu8mUoIK1pW0E-ZKX3Wl<%52Skt-WP$_9x*sYUaKKKvXvgA-IX;{!r8&N(u
z<4`JY$k(lNOe_C29cs0?8SFR`ZL`5FZ~I%nA>3L9JN&Fk*wN4{V{wDMLWIbec~q5N
z7T=I<KFyeUaFt#L--hQMSSyN2qzg~T7c<C^YNh}&@_wq;OUI<|!F1Uw#j6bxw8_ft
z%yjrVA@2H>{P{yxgS7<)@!HE}cE&n|9Y-Q>ew<al)u^3*l|fwLA5caFz1;h6$sM+>
z$LUv^yzghBC%&Zxtt;cN6t#*#X%UU?vaO_n5!#vSyp84)k%rDZPECMy!wJ^?f_B;b
zvL47vIrqV@C>*!Bkge1COsDfck99Upd0)8x<CcO7a~%Ugp2CFKza+n@GVjxQFcyB#
zQ1CI&b;p)>g$Wfjnuhe+Wa!HsnRfbGd=U^U^-5kyoZ?_vt^uv~?}>vs$&HX4MV$Xa
z^|^h%z<`LisB3?T0_P|{UQYzR-f5$Uw=bX{swxR$ovbiAUm^7kxgmr1N%m@?C(3TO
zPU?<Ux96~2#3`If=?QpVu-mqXT1>boXI&<8aY%?DJVcN;U3u#4wW2T`GV(F)P-TQl
zDl|KdxVKnSx+Tw#?O#7TH`*u(OhGc%4^n!=**E=^diSC;w^$TO894J&;oY9pshAsM
z(>Ekh>Td9?g})d7e%Ym?wG-0anhPY&S*Kojzs<5LXP-@rj@gwo*J3{1C;3Em`13IA
zI%Xxw$Ty`?M&xrqKe=~Ik+kG~nulMd{oq@EpL}Hpm;FNsS?2Cty1P5Q@Lt}|=t<^P
zDiKBBP$|;$NgT2_S;2QZZeg_-J{_`9XyWr^yKJFMEt>Yu!9YM6t5owD@r$PCK&>hl
zKtn8)X^?{-qub6;ht&2c!3I*p1wuD!`|$@%Y4D$X42@lH3<hjU9i&blj$-5uZ-_86
ztd6gLKY|g8-ni#?A-&aRUEl8#=hT)srRn>7;tZ}EiYb9dqkR-~iU22E!1i3LzPhHx
zNjT-2E&h6Uvp()pcdLZn<u#`|X5Aoc>$jv$sHBfCS_CRO@d<Y{C|LS64;IfqmhHl|
z)_jzlnQ1%&J5X7D_9gYL)qY)V+aOp+$9C511@>|H`ta<ISh#(6eACQ=HawrlPgfUL
z6peG@-%U+kCz-LqnpF9OXXccY`ntB>bbd*ru32z#;|0@T8u$esKN=kzcjS@r#vl9(
zQ{q{f3ienh{kfnU6OQ+wy614U9C)yTx_#jJ>5!!Ycy{#*U9AQltfB&jM+yj1w!}+g
zh$~nCqEO0q`O;YJa}THVLUCL6OJgqxRntL^Bc{5(4!v*W5%zOy9z$<a2LZZ#75TJd
z+GMMcV2?q0m|cc(<)<P8TauhjJElSAm=|0%Aa7`w!B_by&cIgrkLA_WU~Ko|k#*@;
zb?J*fOn=yK)4x4>%m3F@rr)M#dsNsT`yl<_p>5lvg8m*4(pma#Nc84&(ayKz!nREp
z$M~ODDI-?<0I=<Geu9TG0x4u$eQ}KMxkty_?`XY{ZSlo1p6A&1w^==Jzgzk>&A%vl
zpL~q_N>zJMp^#brgOR_}?Qw2G)qO-^9{{{P&PDLJkH|87lQmux?cmBhh;`QTea=2M
z%+hOOPPz`FdyZ{+>n~{g9o4)zM*Up0Woo+@^N)<!Z)t$1q0GZm26(&ug&HZ$#m(*?
zzrvG;z+1_jRqM^CRPjNacDp(Lyy0!p7aU7Lp=l!<E1O(k({l`M?GILXuF}BX&(?M;
zUog>#W=yHZifdaOYCnOy%rkkyXSS8cz--S;u}}nY|8?m?w#gIV%EC=XsWWZCoHnd-
z`B>VvlyaoRcxt(@M-^~b7BbJqX{+3iy}4u|D@k2%-D@A+Y6o0?1ly&xd2eWOcDf$-
z(&E6SA5gyFIK+!v*lwGUBM6E~U>N6(m+S0PJsaEJYzn$bC>?BDc=>ZUgfXV_EE`G8
zw|g(5g+a=df*v*TL*573W2oWu09Ze0b7hrvmf$~ekYA4y2)dfy_Oe<;+CP7G7HYn4
zbT&x19trS;p|F#{xh?PJ`K=e#xR=$?iTSM$+rEg-8h+2Bj@0D<fx>#^gVp5~d*7d-
zf*x;o53XL95*f=dL){$Nb|5{NxTn?jTvr0~!?fGH-VAembM!VgdNU0Kn$tUHZ(+I}
zdqAZUh22O(>?G|fMVXWf*9s+FA@KTy4X>>yeN4ol?hH(2-xEMKD0^=9Db-hC6SB~y
zU}kU|%aL`gNYT`Dd}b-uj80?!V!em5Tb@CI?6wV*6;tO7oKNwI2O69cCuRR!6{jYG
z*;r;iuS2suukL4p4ygS|&!#$ZjU`E`)$8s90ZKR~+#F)hcsh_B*zgK*lK^X+e?Ww<
zf9S-J&3_q;L&!2Ja_r0Uw^FSCJ$+!Bil(d0%FJ-Pf8C+tM~5n>Dn(uBXO<~nkC&KE
zUl%B5ld>Pgst1cyX;vYfxN<Ld7>aQYtnFN4vqx4>qb;)=w=q*`pn2fgYK?hx-ofn~
zWrJu3?Oa%AzZ{wO5JaYSsH)af0_6^!+#+r$h2#z(DY*-D6Wp=eS*d`ede@Q7cqJR#
zoo&SK!bRX`JXq}<x)L@2`OsyJZT?pv;0hc)kyQ3HhxaWPnQi+qWh}n5*J|(V_{-=S
zuJIqOnBF-&k8yliMy^qHyIu5`(&=+d(Ix*Q_{E}ieiXzjIwE!SdIEj(n~}(?xUriS
z&lt!$^=u1d8tuR2+&d`JsG?Q9&S;K=ta{P*Tn#!QOq)>pKJv6R?@fzo#0n+32L(uY
z1%2^Ayh*mZ<Qt`>uX<l{I)v}0!!t9oi-s=_Cfjyf3`^N2L#mrxt{<w@F<}~>9qkDX
z;-^AqZq||JU^sj9GK-)%E!#<+7P)6fr@3D}zN_(?#`qkvBj)$;7%y7hz(7T{l5-bm
zZ#P`Kp?B(Z#M?)d)c?6i#9<s}urEQVXB;?|wQmU|!*2idn#cN$<MiZTz2uQehFoay
z+0LZkdiUzKT-k@?bl1o>v1u1PrRt;0s^-FJjW?OEpxNnz(aL@o6=T#|#joECyHFM4
zxMXdJSDhZkeM<uomLHj*&fs^@lpT-h5uGi6xc3{H<WXkh(aJwUBhcjJCFxK)b3w<b
zA)H6g<up&xO`GbQvh%ZEr#;$O%_hotnnlZ=Jc}hONU@m(Ge~^=&=e`%c?2yVyzh1k
zKS_JF6`5l5S(+Urw0VOB$AZzL&nMXF=xg48IDMD@=96cy$Rht)QeSn^mpgjPsATt#
zJkwq&F?ff+0@ME~d<{fZaFd#yLYM?}3^gA<DBk54I*Nd}ZsB0Uc%8xf^{Y09J%+mh
zaj)94#!P#pM6~q8dTQSkBwHeXT2?7tqh6lV_l$7|>v@K|gAX@xv2u?FmFw^t0tnJk
zyH#fzWH!WNgX9`YHAnIl7(POtSf<sheqVcfh_A%ynLF8$)QFIVb1X-ftx=<gSkpc7
z!zbJ8PS5e(#87Y1CRD#a=74A3Tb)wvM=zMRd=tnz4IfROAo+;()OpYOCwZq^Pl6M7
zAAg|}KcTNPh<$|KYker>^xEZ3WU?hmx+J`I^M41_Xca+H)N>4CJy7q~E@7uM7bOPI
zm~Ze8bt^L2W<vT`j(;RozlWY~<-6(h%!Mq{@X^ExG%fwVl8zhwzOJlDsdnhEparTK
zDfRy!eBChL$M_#ge-yl8E1!_lE0>5!L(7S4Xj+Eq56~9k)P_g|v5n2t)gr-i;$Ca&
ze+(=(6E3a(Auj1=6E^g_4F90|t^RQ?Z490%zYEnj*JxXjjZi~+PcpPqBK&j!_~m!s
z`>*2Yt<A}mb%?Syqq{q5h_27@NZ($(KA96n{P3R8Ygq3mN9#*^YDTEXvzSE&x9NF(
zgF{Hf@e-%L*X!Uv1tEw`$X?sJi{FVh^cx(tY*f!wIgVN7{k+RH_|rGePe#Q1TdZjL
z%bgR0J9v$(r-jJk^`V`Ozm>kVe(a-8@?XD9Mp60&ej-yXbB+zp=QXmL<|fnChqgCr
z(-wV|ET_lVO#n7iZ46!q53bnUa?!bBBjN(OzP6`)g(6hYnqSBjh@5X4l8oy7L~uvt
zA~V_Ad5x_XOA|#&Qzay3ckmipEiOG^0{Go#q9}D+1t6Vl7KN1KZN|J_XLIWN{0`K%
z_YIQP?y2Q|uz-H1Pka~VdC4j#&2s5p4!`iuPnxPi-vHEg>&dIU4sxZCLUOiNb#X?v
z20`47=oS}o*6(vz{EQh@n(3UWR9cPvD8W<8>+beAlaVp;h}%qW-FbufXd7wC%p!tI
zTI5H}uR3_&P6m`;uF^j@&Ku-N+bBwAmMlulB3bq)0N1wR1wx!W;#U-flft-uz29>d
z;6a5RZ201T;Pd($g}KDP$nFcZho2U-yB%q8Ig7SA_lU;uy(l}aUiD)u?+ZaP^Ugr}
z@*i6d@0No^hFE26zn=a|XtbrH<fa)On0?Jg{oeU_y}rPNiXX4@y|_na{_jyygUd{O
zFQRCh?~<8koi6PS9Ko^O@*NGlVR+e!EYsodVYSoV`F|~b-3Z@pkN<-HVOIn#Z(r2E
ztU%lR^7OB%7T*iVY4yq<A+&b}19J^7Ym;T#-TuE2srg=Ho>s5;F`V{JZ{Q7s%Zg-~
zwzvOW%$3>P^&m5c#jZn-tOR*~#EHY9nySk1{CHu|s!pQ^j~VP(KJ=`ubKr>7KX0Ma
zm=Jr@`iLs>WY}_07Y1d<s->)LUcw5L0bda!gym=iN`YYn<rPzNBGp0s2%`Cr1N&7<
zHzQs=uo;nSI%L51lmJ5r!YhASlKXI&O>9XIKW-tL4zE=wzNNXLj%BkV9>Y;Xz^8<>
zzYB=YLn|z1U@DpSDJ$7q<cSe_0`JA<NypQ5ZJyIpFJG`w)tZM&%5*+nje~$fAJX0~
zR(u)Z@3UV@`=s=Zv)wPPaAt^({Kxw@5L4h;j)=G0x^jGMCFjoY21d~~yj4^yJ11&z
zDvS1Z?=@RsgKCGE!6}A_A1x>?c>^OAUzVN|qP^XE?StMI@uJ?TleD+<u>G5h=`lUh
z@+l%OOV0=i%L(@Aon)~8(SqEv;Mo{pC8prnYZ0}y!?3;jj1S?8I=p4(uV^9)^ekJh
z@zCm*{uOD)l<*U*Ih;d>x70k0M!7)GyoHJ<POtR8k~&MwLuiBx63kjI@>uH$Hia|j
z{443KzROFR@8LHs_YvCyUK{_nL2akw?_qE7M3>F{6I?2p`5VvwF~sSYc7|K&@Rpk=
z(sUH)S+@xB{HZkZF}xBHTyjqr&^MUuwsYOM{+L!O0hY`<Sz8@!Iz4_DCO#xEF}Si@
zI9YZ^Mb@~?agK7d@(Nmq2`WeGn|BIX#4(h2CRnxd3R`pO9OSvD32sFu+H|&~_VRYl
zSw!EQ`#=_8muk_;Y%xbK+?F8G+9_xqE$AAV_*W%~#sv0AeY4IB7CQ9hjR`cZ1vjmO
z1$lle%@zmPktX1{U@^x)^0J7OX#E1m0mKQGM<!Zz@>*Ck2zMmtw{{9yA4w7o30ER(
zLIls!le(18;3{6L;YoZTfMCM(emEPdq$m6_2~=YJT4Y$rs?Btb<%ykMSB#-eK%Y!Q
z3{6f!CqBqGh>PcezFGSPP3uIVj+mwg5{)tJ4<tHcEFL7<v=4qMx+H8B&E@(a(W0GM
zb1p%sEk+`zQ}Byq)y}IKebXwKRLh=J4xZ&pInCe8E!rnKRiR1=PXb9Eq#C6)=Msf_
zV!U%Yg{{)Kw*IPg9CJGgcYgaEsrlJs_&^Lv|9Sq`;r&j;f0szzJnris0BIY2>D%!Z
z(n%<5Jlbsk=h7_cuNU8b{aSvf(P+V0dd+_Vt2nOm2Z=}D$MH9*pVKMyzm#TAX{y}(
z3&5CT)D&~_fyDb?fxdOSkY<rJX$PxG;?fnKwaYQ;ipfuWBJxEf?SG^_@heoKe#pm1
zrT?t@ee=H*q;e@g&^K?V(u^jiR`Cj3C31BTqsBJR=kN;8ifcyy4v^wME;#N<vuP!%
zH_^gYVO*REPlC8eyC?}vKE*L5JUOZ9^r)TuLCrHRv757Jawgu#9E))YW!MBiq_E>?
zR}AvOXwU0pJt3L?I8do2g|ckxYZ>0r48F4!vp$Zb19gl*T6gYDt3&!?JC$K{`7G{%
zZrtdTK)$vk5G$EIQ&oVp!JV(-Ew_?0j4rWS4Om1vNOZ@c9Y%@i3+?0%HP84uj)Y1j
zC0H^aCg8R%siQ?C_f>&q)e@^PK4k}e^A0M*xRJ8vIF2gb(!VG%+jO{8F%y}L^{qRE
z4C6-2I^$-E5w)A=tNa4_(s95KzE{?B+ILJ39`;#tSf#~Av5PNz02CRt)b3=QK1Hph
zb^W$t14F5uI<-wNH@ATr^ZS`|b}TRRPLKWkEUqf%by3yg&wW2x+K%O{+KFL2ixtO=
zk+sAFVyY_~ld^17zh<BPc&Htgw!16cgE8*<x!SFl&)7|w4%w$zeX)=4xm(ANNDbmj
z{f|hYUycL?w~ot5p*z(Vd;gE=gX)X@d`)g0H<3cWPw~X2+J8~>Z3Tl`D?VgdoRhwC
zbwRe_P#>TDVqB$Lhe2)j8>hv0hLVeMD*rF2)l(;iw}xjH;(n<84{06{WX*~c!XWf?
z=X&|J7UI0!I;3l@ND{~?QK`B!%kVpS_G;~K%nGME6#MH&)wZc+vajzq{i4q~*Zycl
zd*v!&P;yS9Y}Bi*N9;-Qp6{r6_lx?w+Qc(`l$-PnpLkVh&zI$)H9vO0jh_;g&?sNj
z(7D@YA3&)zu<RG?(p*y(#=b8VjSG=x1|xRSj?vP;h^qTiX!=sL#eclMTwZcw^3}up
z6wuqE9DW@6RPZ?M86%gflCZ5u?+Pf(n}3$HeD3wUa`+dQq(vdYJ~xSRo}fdd-N&4d
z=C2<^ye8b9dky$SlqAmo0Dtu=h~Zw$t6MGgSJxtxX}DYf5#SjCs_GWgi~EdoJ#b+H
z1)LKpDu1ygidw-TKFrl2J_249mZ_^084dI}VAy;Frk}mcZnKh<&zdD<K0qDus#r7f
z{tNXV1i7PH7A^})ZUfA<?nQDxG)0H_L9enoeF$ahb5`J=cu6Mqxskl)m@az`lN&*=
z(mDOoLY@b`N+b4eCPZuEWjK?Divst5E9OdiAb)Nme+<1!F7|FZ<kp<QKNj#`Mbf97
z(+3dKlj)G-I7pNfr0m2?qA9$XJ8|BR>Ts*4Fu#F(5v2+{E2j0%RQUZzsI!oWI0HFn
z*0iNjsXK!0h~Qb$i?MYDqC@yLM9)V$LyWyRJ^60tjEUAnM7XcIivahUVoQB4l#b>|
z9KiM%M-=XeOhkm(tGn=V7b!MX=0a&{hBIdjw2UIc?Oj@iaHJFpxuTX(`;BP>KPWBR
z|B{jqXHFa3GKwG@o@uOvI`i=xMJ%fh;Yc6fDSw5MdeZXio_y)vzYw+11`rp%L1>(v
zk+MipHsi1c!L(pQ#E7(6dY$<gk2Z@fl=fS+U&Kni-x0rhMkN&<_v;T<|LRHFvLO2n
z(!5p28~OKXu)WK)ff1CJuBhd|r@!CC7nQhaEDhY2kp>>_$%ne|g%ZVZei@8L%H&1a
zXNEPN+vhb@4on%?IrE7?<Nhsq0o4yXJ6v{lSR=@utFe-L+92GSPZ1h-%}BWySXTwQ
zFIUtY%;PeB-v~-YcSQ3VVh5(~+c|THKwmTZldB?bbx`?OCaG^=UN0}i@@dT*Z+CFz
zm}!Va#hNC3@VdePxX{5qXP=j#W$80_cDu8BA(02YqZ%Wn3b6zRJJK6_i!Z;R%oIaP
zJX@Pc=G_Zj<#sv4Qp?mnZezp8ekNiocb?rU$i{)HxIY{9lCqBUCK+iyC`#dVO1f$G
z>oe?5Ry5;};K2rRq5mIoZvhq8vZs9~AwY0<3lcm?<L;2)?h>3}!CitwuwcQpgS$J8
zyERU5cX$7qoOACzcjnG~GxN^7-nE`p^{Z#s-n*Oby}PJg|0)K)$OC}+4TsCOqZ3&?
zfNy$2Sb80T05e4R0?gd}11==i;itq!{#W{J9&bq6@UIiD^(Z6pj%*46NbwsvXiOUC
z>xp+~gUwxVqTBA>i9!xZJ74Z_O;bMy@){*USBjyKt(s_uZ*Fzrg;~5a{56#DZS`Wr
zd0a17KpK&pY^aBv6b3ECBJ4_~$yC%JXr(|~G&8MvkE;+!*fxX~(P@gOhLXMAfqUtE
z8VOo$8w{iB*DVg?4bk|O2jYonPM&S_X|}Ls4l*R}lZMQ^t-NbP>)75-oS3r5Fzgr~
zyjAOba{%RaCnylul8!sVk~Xu0hqH`3byCEhc0mlhqXOdbp~v@YY_H>pe>cFVlJ0yT
zQI{y~-1|O<XX8q=;Kzqa^!&x`Z4rkmcp^{ni2}~0>M$2>@|HlfCCsY``t=l`17wXM
zu%p>74)-#TL-UG5Guodjme`iQ8jm8*Az%2w(Gc<>ejIKJ41Jh!D<BsK^68BvKfMbP
z#L4o;W;l6mvixc;E(@j7hDU`hvA~rs&JLh*s;QH#+@7dhxu9Gsm#=yhb%7EEMu~Dv
zuRy*|!n=#xZ-CZ0k1ZC>joV&FOLQSq0*(Z&gmzR++QbhWpDp#W50^!=6m9M!GmlY<
zJ7JSs7#Qi`&E|&<4)-<y3Z(G5(9*h0n`!}1dH|yWM1t82)ApkZLA9n56Qzo>j9JcY
z@^l=LnL9+z<dal7ju_{zRS%6oJ;!A=qH7gcugM@i$5pk|YZWT5$&f#AQuyAS)T<g5
zwA)$AeG)2rZ$Rn=4$?bU;Pbc^WAp+`5jOqKL-o#Aa2BY$A)6riwHSvNI9$&mT2A&p
z3j?&>&3JnpihQ3%08$UvE9z!cUBf9n@%Fk;*K2BD(q&P;VoK5pGr>s~?}L>FhF{fK
zx2*&j9yKB@qoiJo2si>~Jm{?TobS)-_|gxAd6%JD?bq-SPQt8tfhZ%}5zPqgA$s&-
z%?MfeBipUdr{aGgLUm~s=FNzlY*#qV4xaS=Ml!K9wA^*Zb>b1=!Y`0EV%03}^`#lR
zyUpc;KSja|41ILzfV~x%1Q?EX85@@QSGDa{Ohnc}JYV-KhQB5<A((W;oVvf0<u6s&
z=ckLk`$Wq72Bodz_)U}WfjgFJ?@&L_aS45nEVdF=XnsuBM4!Q~5wl}O0=I^AD!pn;
ztZ}~@WU@O1f=}cgR75VCuxV31xsJ=9{}p}*Bl8wR$?dg{bN5=q&K|sNBr>Y~qkLTT
z_f7v6QRMbI#&3_SWO<8Yc9%QHxlbTyMVeNFDyJ2k`@VA=TahcpMUyIR>LawRqR=y{
zbcW<Qu6|Da?LsiR6tXjh+}@u%{|n5LE%=VXxZ4@Zoi8ril=mC4SH%!cvI1Pd!Uf8t
zx>cx*n!z|1D`K853M9G{LI1!|oQqYlW)}s<>W)9qs0oL0H+#VCBuke&5Q1Hy&)Agr
z8*h)Z_?z-j7<W5D|3kdJ`q*%iW!;oVz_^=Z{&(yS{VV1d{OyHu=a)e+hIS9~@=vn<
zaDOgx{T*NN{0;w7;V<|z60+N$XLD=(8$!;OzxjvT9jdw}R+xV{=>j%yGGo)N!e`VB
z$0>%`N*50<d;+>7k<({u7x({+scrwt{YPDpjAX4&YdQ#_HQd{NOh4tCgX(c8#M^##
z>HeBS;BhF@`)mz@wZh{%%5HIzrSQ;8CVqz*R|ou@2+ht<0ZXuLA8lw;WT|iwx5ng#
z<HH?%UNs25)XDhDu$;5RnZIjY(2!hkm{ZXBjBae6AH0WBllu>IDjM_mH<X<?;ud6#
z8FMS*m1YO>H#d~+IVPLFn(IC;xy08?#;N6>2IZf=Q@+trzOwo)e5G*9%&fvq=JOWO
z1jO3aro&G>$p;=8mGZL-%I9{p4awhh7k6|v-YK7>7r4HhoR?v9RvMD}wL~P#SRCwH
zs#wsN{OvF&t8q=r7-3R7J1JgiNTr}&l1(jtllHk>sB9l+UZVIvFbf<LEz4V8JTLr)
zZy8`!Mg$;5aB7vE6~0&!x>(9g={l%fAsk&2a3)Sc!D-c7A*;g;Y=37%gXp)y^h&(l
z*oI5{CGZogHk{f^`wVR)!xip?k7|j~l`pq|%Nnt+HXQR%SMBf`a<%!nF|1=B@pmY~
z9iqj#Ka!{ZjFMFpq@u})!5sYvzfA${5dDh#<IB{aU;h{EP8llO@sIP$1{`rSGVh#}
zLKgll65Wk}k|pP*|7qje=HOrIl|S7#=671tmM2T@=b-;5Xv-B>mm;Yx`;H+OJzgnf
zAir}%dDV{gpKZK>{ICt>ZaZ2-uDJ4)esx)6`dq*dr9bV{C#Xe@V#PR>f(l6$)%<>1
z6^(4#LS^H)f};P5Ns>bgQM`PdR9^o(<qh-#J2;hk{{rnaK~I^C7RnjYmkom6`Tsal
z0WLMVI@P8BV@By@0*%MvOI2R9HKmr#3UPPcltA~=oYmK1N1-F%ORj|~@L=_@^eB^y
zN7~_CB-rWrmSHg2eJ|SGPhafSQBK*)<bW#qKRgcMBQ1m|FyW7;*THwcz{fOP!T(fE
zI|>wxBtskh`TNHtL&k?4`WL2|QihBzlr$78?P#7L@Krdzh43F(1aEDkV&mAueWF`G
zrB1gv;`EZ<KWK$nox*hG_)p>O^-*zkE1f6gl0w_8o`2(Z6C-NQiqKV%D9r<^O@Qgf
zcCdC<->E_~4xsV@m7DtESJ~=!<fgK7mWrjwi=MT%O|$b<!LHN!ixm$Sr5PBpSRSI%
zHq@PT@y?ntzH;yjUZIbSiFOd)w0^f^f-TYCar)J8N7z}$$OPDQ_tAK$F@U%d>%964
z!`#d*hnGO@Su54}4xh!-+@3xiTL+BOhp!BySPeqX+b{VtaYpwnJu?{3{T`WKoU>ho
zoSGQwJmA#$3F_&k4_;zI`UGZKHZ*sq{*>W@C&!%oi*WhcDaF6&ai!tj^YG~f|7*|i
zmcWCaV>l1^+ayn-xe-#G;r5Loz|^r`#REQMQW||IOMen0qKlFUH#LdoLg3=0!qIMo
zHzS^9;QKPHnl`6ifBKo1Jo-3BBFLPdIQD(CXAtf_39Jk86MlU~?N7$}rpxAy<T4Xy
zCg!;XiZLM7Enc=+Dt9qk>1Zt9d1s>0VONLyf<XtwFZ3_$zt*-w;slGEMU!f=RDFdh
z9))>&K_itPlI>J^KKmXO_LdEmK#PY$5N8{HAtQd?NSkD*qvrX~gc@gYU<Hr>nFu#a
z=j!GtF^=cQ?@SChfPqTT_BD;t6&&${e7|O+9&+Y(Q{!aKwNu^imb6nL9S(Y_1aEcY
z8OpV>69fA#$KTnZtidOh_}HGBjvMVT$;9zUbM!9cd<L*wCQT?7gv6UGO0mJ67Fpe@
zG)GJanDnvVi2zcVBpA?ZLqH)RVM|mdWvOtLpK3l}+AlLCP~`+S&MtO5oOR*alJK@4
zOzYRHn>DCwTj0|!0(8i9S;H|=5*aXRlNn6iq30|*3nyBprDM9tc9$+DK>0bJ4N5*Y
zxC}b*3}Q1TYzBW0tBC@$1Aeie2{VK5U+^LywMjBFAL=txws2@uECz#c0b*HR*e7VV
z#ftQlv_To7(p9MlTWvQsFYmD!UJrwvqCQk11xS6uMGQh?LTB(BSb?uYFYztZCkzXs
zNO&`Co6^Swozs3{1H?6KgtHFRT2`$?%IP?;$;B1<DS)oSIe<M}A(oCYoFM?*ZhO;k
zVhQEK{t)AVb4<@Zx3!A7R$!L;nKO)ue|pGetE7x+Dd^g&^fBLR)%4aX){7u}NqnbP
z;eQv4y@=Q)m%_$4*lu&gmnOE8@jaD*U(C;C!dvpezfBP0D4lap%hjA;1)YKuL;vtv
z%9Z^vEaw(fPLxd|uVq8Z0hXmi<}sM*hcxG-t0zyeC}osQ=OReix`D`~k~Y<ET%Y&(
zcsrSp<4Q-KcupQwKFEvj#4Fqy$9myq>-}5I76(oArbq**V)*g0<#zcLLE?nj65=~i
z3T{TRx;WX>VmposZaV*E#BY`bPJce<4%f{E@3Fe2ii1YCaqu66fqG`=2;p9tU`E#4
zfd4C|4vPHr#h3IMnS;d##wC&)(<OpgDYv`@V)NRdUk8~^?hpjaY?m^m^zZLYE9EMX
znyiJT;ZP}w`6(+rOuD}`q5O2Ga$X_P^%h`Nd;%BX7P$VcWZ(OBHK$>zG*~Zudkc4C
zJu6-NJSOy(svXlVO!)Fac4oF?i1@b9P|~0@0?ygZfjqLG<53Ify*Y0Z+mN_B6}s#6
zYO**zDsyGVf&?Yxal-l`)#c8x+MUCZrxgrZQ)o1FbVo7#)mdqj`3pU*uY<+az)=fC
zwyf{5hqvVR0Ail7VkCFbbudlAn%D#dtBHC?;4Z&GyF@N`4sK2kktJ{^)*m5fr@5UA
z*d9sK3Xsr#o7}0lB7DuGvhnv84KNuT_qthDyZb1<1Iy@$8W%~eU4;pzB(U5DNgHA9
z6EB4@y7bo&Cb$y6Kd&k%X+MG$$~ru2AFUPk1mxO|)Ub`0-6wBHL7l)bfyBFX)&fZ=
ztZbhGv`lkWc{VcTaG3EpQIjyVvxl6ML3ecNaUG6wr-8D>wFDAMO-8{2%Pe75c_P*V
zKXJ#=JY@VyAt1MzGHm#6hQhOn?aZ^69cqM!#sCDEDZ@Ol;o`>${l@VAj4rian|rh=
z`K3O}4fpGpfMtnmIIlpxPZ<BnE&s;m1$+kTw^o`CNt!%)m^k^agn~?%^OH&6_&d+#
zARy}3xBhPtkw)JrnE9HRy+qQ?M2hf<)lYtbkwA*P+9nxS=0k*@f#48eJxb*E!Yhn6
zU*R2F!B6qHiM(ih6-A(=x$?&$C)$V|R!$<A4h<Xj6sYZv?xtVFffCCKE{ND|YsVD4
z&~hU1^ggD`8tU*PZD(bOx?gct-nroE`lziCLFO1{(IsCJoV3XJ#U_7%pXY?6+z3;k
z12tLVV?Hfd{inTOT(s%F0&)`}*+zH>o37&6yAYAiNYa*I`#7N%UPRxh#OKk?6W!hC
zSw20hqQqq`U$J<E9CIbncL!W=UM#!>_CAQe+wV#fx<pK1$TkT_2TB9=Q|Om97*;eG
zAn7voMS0T9q1<_cW}5;nrzEAy3_U1gF;?k<9Y39oXEragN3Z8{<kt-9oj}GRePOty
zOI=6d`5G={!BW)8(Y`!nrUJh(Bc=UHn=8C@5gsIx43M}-MA5GDz$<0pX33}iV6SZW
z8hPl8kwLGXYm^O(r&2f3SMGsNYno3))sH;p56<Ok#~XN)3%|GwTs~kh97=1?t21M&
zS#>FB*-oeuUc8;J#JaL<=hLzs0nK9cSah9e+BT^YmSX)4=ZmqNExHyoZEIEk9ZC(i
z^&y*Js;wG5MZ~0n`SG<2v8K(tsx@tkRsR#L_N0)l@g%kE+=mATRN|f{pAnIYpM>Fb
zwh&nf_EgGXc4#OKp*xSJ#xCvK&L8m)>Ry#iJMKHeuJIO*r(K<DQ-!99T0u+HT{yd=
zm>$8-x?{V`867F?d)nnTAFUKM?66pN>XAOeODGzgs6iAAI&HkB`)xfJgzvFdOHsW8
z{-qUmSR#7@3XU4u$NWnT-28vJlN{-z)36yP7pK(xb>sCCPH0y(@0tuKw2Sa^*HrZM
z;K}Dhno*vB|7}N}K-jJQFP+epiik!+zVQn=+2PIFW+Ko5fN&=MiNGTwYig$w$*)Mk
z_dn42h*BQvt*H)(Ov(m}b}#m=X|{L6m8@s>&@Zyy-@?_>dTonLYZ1Eay;ce5SM=VO
zC|%?lHeKji;DqJ)aUqGU_y2)}y-S^-7pmI>=gL;tE$fg7tULa|=O&%{m)KDs749-g
zSk;|YS|asqs6vNNamYnu&t|_HdG9~V%xoH~@JLLYvE@61>pPuOyS3V`dnXjo5Hs;?
zNf4j-k9|@pyI%AMmBl#&jcB^XE-P5uIidMW(A|0^sx^=Q9I~Uw>1^u!;eDTeBz}XX
zc%%%WCx~D8A*RV7eFCe!EzqW{0Xf+wCvzs(AiyS7NZS;38n4q4#`b>;Z%or)W3@X5
z+N6?-k?6g@FMXuQQ_6SCZQEg*xy~6uwPyC$LVWOk>=Q@goDiQ4Q%xQ<$I!GAE|f8=
zhAU>zoTRM!<^ODslX(6@mSr|FlLcv3pbYJl*tiF6I#^+!CHpO15;PEnTK8nkDReLO
z8<rHwcXqYly$v-q+9}-!L?jLHx!0MZL>8NQ%LSF2>I9{ali+OH#_^T_YBnzjme^aF
zyWXa;glsj%Y^5wlsoXjv5i&iNblz{V-Ft?CKf+&3)}Qn)fOeP~80n6BYv>=$<s`P4
zi5Z7CILWz&nbwkK)xvh9y3dUV(NuA-ycTwJ*Y5DbPE2i&oDLU=2|!+H1-1?g;hT6P
z__s3gN`{GQmb{f-GH2Flu1-CUT%I7m?s6hRo@7JQo`{o?J?D1^OAVvUa(BN9Wh9p7
zEy4^UnUgnX>^B`ffPT|1fsRB=kH;gnM66kJLFGDFjf-xnw)29Pi^#ZOmq<RfvaN5I
zN1;r^o5Yv6-NYR{;s)9(>}gU@^liDbYoCdy19}|SY<0pxv1jq{kBV*lu-uz7ooliz
z-CCnwIfEC<;@N77_WSNc6A=lApVbP=4X#ZcCXkyo42In!Pqf@AB*V#{ih<%iU6+dl
z@w8H_i#cmrznb~3wz*gmReF?JN6sLRIYaBG+tx1e-FMOG*V8->X;_K(%%%w=7l!lz
zH=!NZQVQ-~C-Hvw#vI<WreTGuPpT+u%m;J<e&ttuJ3V}6VR@|VS!E|p4K483?^~Ck
zy3-mBM;ep)t{iwviTx}eD;9cvFP8v3UI<;?v2#(3J$wmlH72ZNeP}8Xb@AlbxJyGP
z*eutS5JmpNvbU}0HHVGt-&E+i8VMzGC-DaNGz5Y6IWC{l9yrRL0%u(83?lp26?j}H
zh}Rk=otz2)w;pu{Yt-x}efR?iz`~Pwk$YnSZ>}_~h7u>|!8>ro5$jEe;bSkecNh(?
z-iXpAL)d|5uggS>EL+6`fmpu*i$Rn1SVB|>2>e0Ao&Tf`{%|OCX#Rw|d}Oqa>oN>B
z%v7VR^5+Tt=W^Qo>FCoL_xkgzM%VB}c0hwjvh9Imq&qSmc{#xnD}eBc=~YB}y+S_M
z*rNIbii6pve2-UZC3z{3z1IDbuUw<=pmzrFs5rI5*i+f`a}7fzlCG>{Boq^{F9g`<
zUrVGlFx90mLF2NEnt7j&dbds)CBaYpT_E^XA}#!enF56XTGweXbreZx$0>tCKUaL8
zYnJdMt@bIU0{IsV;#sMQes_O0*-x(#q&wCna>`GQ_Z&~*_KfNfHrsg<Et-=L_-q&l
zx32DH7Eur&ecLZk+C`3;c-sw$jqh;jeS2;^%RPkaRe#W}y+w;Qs`sp;ua5K|_&MUm
zrQLR*(E6=w__z22mr9>okYxttmA^%G%0q_@QDck2O;p~!q;gFNA3$$Ez(YgK$U`(I
zBri79Z#z?66(iAPg<?x;V^27)I!k*BH5ETgiIH~ai^>>z!OEL&&XpH7h>R*7rXKBk
z<AZAOXK})vP8$4i#8M6P<wZe^bq`pU-_u-FU{(pTgMzKev*v=g*~uEhgQw8JR-z6B
zXba+^79oFFf7$vQA*&!mw$`FSDpvgnwpKcf&+gYcwb+2FSNhm-RcvqvH&<PT%pc@%
zsD-lB`|wT5&2rqR*ot|MYMIT2=tl>^G3C#8t>c>W8LB?oJ4YtGoL1#JV(YJ;ZOG?e
zb9B77p__*pUva8~I`qe5!Z2yGOn`E3(@ubOmMVQ9uEW{v@U#)2{~B=oqKO{rQf=8$
z9r;UZvfx7v2ztWi4&DWJG2rUcyCxJ8LHr_L6pd1k*B0vT9*CU-k2D@IokOzo`<+9>
z++c_vp*`UA+NO_@em`bdK0ClW&3pJ;!}uOPSs&pqeV#MWv)`eRXOP_A;#~Fv$)q^*
z81J?nZU9JPJPPM-b`OTi&3G!gp(4s*==E_PdJz>Y@{SB#Pf!Jmeg%;kyV}aluT>aH
zpQeHPlhp2T{a(J@sA3DHz(eJ=#<akWH@J~XAEW8$Nd|b8TVBU)Wu0n2=Zr!dQmbik
zpKV9_SSQkae#Lik^zrT$0_5sZA7Q3jtH(qZ-D6MYWsQ<wW7P4X@uR95WBu%Kv*~+B
z&59GiAe1R3zm1OB@cQ4O89uy>Nakm1R-}NO%u!a%q(I?u`TwrDL(NJQkOLfbz)Xq|
z9#=5qhL@4Z+_{9^(7l5^=i!BqY$J0a#O}cOjwsizbj<p*72O3UEg<`tkQZfO8T$7!
zuEsEU--Td|zQ4pX68x{>di2YBqgHdkCpNsYBt&%?m?BCj)tHxseP1X4f9((NpcMPQ
zDg)leA^wkW((A+KtkwoR^Xo~|EGMMwX(dphyel-kz_)@kh110Zl+os4g@*#x$}DC&
z{QpTZd-0{KAs{7;sQ}xK`2&Nv!4jdagj&dVZ~apS(Zzt?TGShCijm#ETvS&~vPj`|
zh2VKOn%k=``oMo&Tg%a-o^KX{Mm=9INc`_7{`IA%hkJ>4ZksJ>{}I;iJt-~xbN}H0
zy)#t<*I;!_eM!WSBb<He(#g_-!1YMU1`F9zDpv@A1mFEjru~+}+-aVbYxfiF#gkHm
zFf%axC}SX$rpM-|0d*z5$r1eJC5zun6Q))~n1nW<a<?$8A!#M<Cv2!egRdGBcb<Y^
zfpG(7-j}5>AHHcIGKIc0VQ!^|N$C12bEFnyl%Rpg5~^>)JV+my*u_+dYl7V|Xz<@M
zW4HoVxiVLLBl`0CD3hh(6j>bORdR?&V=i<VcK{cG{PTx&g)$Erpz|acn;NRJBwjQa
zyCuDAPt+7hW5dK9KBe0$_iUz(NmMmy_>((jO4r(mi92!%U1Y+rVfvZtJv8s5u<JyH
z4!eep$q&h$YGt8n2MzPOr{JQRx>@wkQtw@iM}5yKu2-mE|1^iID2~yW@&`>0NJ>Gm
zMyn0YFOeb8<Iky@tv!0%@X~bH`o=|uV13tcTcf`xhCP`#H8eJkmsl%_lChm`clof&
zjA0}*FM616<e~KduIn2k;RxuF3)su1iimS)(o^jrF`j#yT*Np)`7Vw3k!SAXaiIh4
z9VrU3aJ@1X%7oA3t|0=Vj{@WqgQ2i@hb~&bG{2Udnlb-5?G%Pr)sNr!Y9SM{kTr=>
zakFB>zDmU}T_o${<yiAJSg*Ibm*0!3g6egsA}I)e$iUIk#m7k7p4uvL+yH1t6Y{@6
zW@0fh=HpTkmBortA~0~QituRYi+(3yM7j8G^$2~3olH~cHPBWKy%>%uWLx@2+%3nO
zPCbgAE<O4nO{LLmrX7=?#h2_i!Plaq>%tBRp~&{5`V8Fjz0}I$<+$%3k={G8UGV=1
zL5|PtAl<fk%bgO2j3GlscsJ!hh8UZh)gkJT5RBaTXYQT}DRbfx$%+TXfc42toe8+5
zMT0`NZJ4<Czae9At?8zmJapfg1+6%i#M;ZK^%;%h)~Hny(UDM$r&EmM04KGpk}SAH
zDI_x#WyLFF!29Z~$-yQ;8MC6#IY!8Yju|`J5M>smJcl(zsVQt%@($4v5b{A*q%j73
zXhg=1d_bwG8Q~e~gaNiD`;{8zBv(xs;}>#Sy<JQ9T#O0!K>u}sZ_0D|{+EmqHf7e5
z_IYxsmp%Asy$-G?O$Zb+ILNlm5jE=y{oo`9(g7dofxoET&sAR6ny#hA=i3gfZ`m@I
zc`A5Cl)z@~m27iQyQO(dbBoEA@xSc*PBtR6S8w)UUX>O)WgpjQRCu~q?q>W{z96|+
z4%m2GJ7BDKzKGTAEOu0zc}2Y4Oy}l2D<0}&#*a4SEOy2+>OqzyCwg{b<^_`^Cwyi<
zdT+-H!X5JV-`vXhS-$Q0#*M^x5hv>k7JN6f{a|v=kJn6<brrDf32^fsB97ux26g2f
zc~+$-%hP@leDdoW$dkvgQoc2;02>Lf*;c@anddMlmz9j_+{zo#eX|q`FV0gC2^pd;
zhlZ}nYQ@H!@qMMG@CgClQpm@Ox(pAR9Vo~MZz=9GM12g4ITQ9OSs^3vxkl*cpXZ|?
zv@-FP&Atb$xBU(~><bJFKZcY`4iqbmDu$x(=y_%jqaA-(+I#>RbL?+9y^PF{9m*@m
zdsmYoiUdhIv11`CIcUl2BhXq31r+C%L1TGE!h<Ay_T)2gpxq#+ct=Y>FEcu51?eyg
z2R-;bMBs7heTCOj&}Z4T5OaN>CoAHJUobAO!}85S$m%_HF;;eUR>joimr-$rVroed
zKKy>Ld_)fY_qcu>I}-EHV(*LdvazbGvVN#ejD6G8l$S)1{47ROOq~s#U6m1Sf?0tU
zU@1yUpwKIhSpnAd<>5w@rG{3S%EU$LGRw=xt7ZlMFqs$&gX|fK11Vr5#bIWkBgIu^
zMyuMU1-~iG!+8+(`+zEA@ZBuXP<i0>2@d8d68sICqov_yW#UF;9+ky=fl#j>M5`21
zCAdahy*0R!^#^f<?;Q<ZD0oMj-Gywr+hQ}nWk4>87wDP}eZ7Zin{@&A0h@~UOK41R
zuL;@chZYBN4t&d=&KGuXJJP6bXU|r?eh^%<7H{dnEp9h!WE#^AtHL3F@Qu1O`AJ|%
zzJN}!gKzi~&uqgK900!5uWH7%A`zbp0$&<b72;ae&Y1ayIY9#ty3HDyf2HGnmJ|OK
z6Lo3y(-YU24!GY&_<&FFnM3@Rocy5uLnBkarufd=8tBeTwG%|VgrPSa(T=lW$6AK|
ze8w=k>u<=1m;fat8e@7U(T>CwvgCWbMyWwX18<-69!}u6>)<C`GPP*OL?fLX+aIQt
ze6YjDeD1_|DI;s8ok!t5Cu2fZ&fkq^e|T&HzaEe_3BxJ(O9N<QZoT}APCG05MO0mT
zX;CybNDFz5;)06$-$L?9{0eg<yz1yM&5sl2eH18(>!dNfMq`qIkK{3z-^K7;qR5RD
zDHCIbC|!GhS^{X2rTZyk0Do2l^!`Ky(D=DE2mDr?W^)|(g0QObca>Qq6?Tm{8CByo
zKD!g*dY4G;CJBbwIG-PY-V($LI=}t?w~c^=>frYZ>@oVp0D8aKfwvvJMhQWP0~8%o
z-}Nne%h-%&@Bx-cX=@)O#1%gG7D!jn#uW8a6axAn@1Z*S8DCB41)a!#Mc<)ntWanr
z#{5p|MsRC6y?NxAzgJp$IjSAhJsO``oRHHyVyHaKxfA9ZazJRyA;H^;23iYVQqZ`v
zouHPOEL;?i!2i~$IK#QiU!X)hNfQZVUsFBhvcs0(qaHM<qv?yK@c$gW!>tdHVU|I|
z9>2)h6HED=^f@V*Lxy94rYMIir%}{*hjg3_JXtjpE8X&*<vqrOG-Hx3_Jd4mk}d{S
zlDRZ7ZQv3nc5Z@1vP3A$pju)nwrNr+8&!z?AjS|zm)_8HB2_5DkkXJ+*U}J2;ukEO
z#3QC9QU<mWrV-SR!O9`~PMb6BGY{smrqTPabz}G6Z_t>#?-N|h>$+1cWwApxa|h)@
zDbCQ(Dh;x3xXz>uDqQPb>+8TN=3Y|sMqWMl5p`YnX*W=|g*PH+rK`wi*k{-$KV6eu
z8(sQSjEB)_Hgz_&%R8G!wBPA6kucwN(b|s^Vy7pOZ;F=>&l_1|>m_Kt7wJ^{k^h50
zw0y&4z-qPZ-B2`TKYii*Lb3V{!vReN{g1UCq~`Q`8ZGF=126+H3KlnQ6=E&{J77{W
z**8(9k{nB)U6~kgL5d&CFE&hD4q)8@0$=cJks1b%#-@y0XqvTtZXNIeYi^p4IJ_1Q
z4t7~8MppTIZqt^Wy+Nk8eB*ZuUP~9=W!^TeOR@>x?a5U8TWCjV)Uv!+ohtXD7jr#$
zb>^QOmT51EZg6_^s)WAa3nar}A&tR&rn=bJ8dMrS1bC0;C{@ZX+1y6vl59xu=nxQc
zxD2+c_@(1%v#pm@!lv<^SZ;OAG2*%Ipu~$i1ZGE;=}tLTT@;jdC-gWF-5t)beeC;4
z7tR0imXwC)^A|-S#gB@vib&Vd_|XwEX|5tuRY>>y^(X#XUQK6@c!tBooIt0|)<l%y
z^Pz^6beYP#VO@UrvwglRKF1~JtGPqa;bSv`8{_qy?+u61`)gOo>S<ZfDhTZe7}#me
z$5{dKj7|0{1+a?`4<mjUBq`Uu98YdfBm$?A-ks2aN&?~=_qihJa;g`h^=IzVxkPm2
zjW*yOTAuoC9LH(t9}8x6bK+dxHYE)_lM8u=qK-J<?mAUk3V1$ti0vMhFK|r_#31Ez
zN?HT7SK+zTodcB9VG*x#8~GPjsvCJ0W~&<;$~hYj!W!TtY7^a#F|DnUAp)X|NjNx9
ziKm+Z<z8=NSe=Kk4;%1#W`*;EyLY$pP8x=y?0APQX@@PJ)51&#^InJfS<BxdOqnIr
zewN9zG+wJ=x5ZiIcvpc1eg(H{o%_9bc>A@{yj_P44Esvdn6VlZ&b=fqQwq%4TdD$R
z>anc^Z_2yR<u&i+{}$KX#l+%8UGl+SG&HfqzWasXqBi_?PTb+u#3DP{SyqBjJQ8Xg
zZ<eBz@@Yu_p2Pf$DA(9tUP&WlKxwsuF3Q<1sid3pWTSbonQQQmAhQE<P2#K#Qca%c
zg6no3G1&<<5vw38@jLuT^l*=?C^^>MU~wXFZ*Jo*KbxR3uc+8j0x?--T<<<P;4U~U
zzSkvWkiWr@2n^==8T7_=JHpKraTE{Aq5B2eI8RnkL|$ntpMwC(0;Av+!sx>*2ha;N
zk62`N3D_ba)D-yT-u72w?u;PhZ6QNq*3C?)U7ZoX?sMxc(p3Spll0(gInjG6vPTTG
z5%N`6QQpYlEwmF4vP05U;^)Mzc21&`&!LW+Tl)pyRHj5EXFR=IWbc=Ep_kEOvRTb3
zW+*HdKSV+<A4G4o$=o<Bz?nv1vI;Xajq{fp=hzyok<>$^p_FJ*$$eS5>Yvl4uoon;
zJ%zDlC_`1F#m0NHpi?HRQzn@JrU;4lFs5;$n}}P|X_WRQRQ9?iKN(}V3j0!Cou9Cg
zr}lh^>BI<gs5gr)6k{PIIbjgLV*u)WW#3%s$7WhR8tqY>SO2#2T6K%6UC@=JgdSS$
zhp#ncqoR#5P0Fmtc_ropy%>)acvx}x9IC1k^8ivhvoWMexiK1c%REV2SlMTJC5{#a
zw#nA+`gTt@|BF_2T@NkpN_x#7Z|f3!_@MZ5B&A|~wFsqe#Kt;ZL$Y3nCO)e&yRKHO
zt`;*z3x4=L^wtky<>|FWMVl`)5U+|8<?4rUZ2a<+BK`ZKb+($~V-!~sw<eVL!yU!%
z1tX=vYfYTVguaGSLZMQ&pK0o<Fj=`!WQIjz&U&|N`?hOsKQFD0wTJ=F&aaLuzUg+;
zy5SXW8xPJ{vT_rJ%Sr&p!P^e3+$iD0BEYkRp^=0kS2Kq+E6hi?Kxv`EvxG@k&MHho
zP52~F0*;y&d|tl9YFRzm+qN{w^w4|^U9Qc>9@Z-PO_3UDRKwd<!rKGznT#wCI+g*)
zd@RMKhR94(g`);;xp6{EvUGkeqQ@~a{mY(N*h0xi&YE~ek8S<SB-`cAmSV?BxmZ5w
z;DblK^~H1hQ~YU;i@l`W@&f+QCB{$g`uj;)UI+3ZlRQ0wiPDRm>6>#4k7*^+RpSq!
z#~eLF4DVbo>l`OylQ5~gWc&PNdoDL9$MQI!iQ_Il$`~8=I2-X#3;G<3dt7&<XfLD#
znueZAhe*@>MEm@BdyVPRER*4E6XG0*REbTD2-H6sl}Gnx@z*GlXyu3A;=6HgaRvNh
zkH0u=o+vo@Lq^w5=93Va{6+czUC`wvmvuD{R$~x774~Fjrccylh}e0M+iI!aUEUTN
ztc!oT$5qVH(0XIKiuzX-b#hldu|@a3EAG<;sTTJ>XMvl;cT3IXUJ7C@YH0Bb>mFEK
zdSV{@q+5l(H?*qy{HKd@i+e1YV2<4#go||xtQ$?SmfdNlrlOix>qYS?7txivr;}1G
zZhdNuH@j4N&Dc|Wou(WovoecreHx5hg;(Df)~$$K3-wMeVrqxhtyEIP%x!H^M?9T&
zvU4ZKm3DV%F4k?aT=(BaHm{eb^IpdEc%9by@|JvxoBV)$x5ILAp6GTf&F7i(h~gHO
zet!`I@)CQRAbI|;cueZitxr$jW{=9ddA&6LzPN(O5bL6+u*gJJ<0VA2&g5LWVi9Ul
zYbxt5SX_t3*3L0oD#{Kd_V*agxoO%cF?(Lj{@>Dq44mcrI*e3VD(43G&DTY+E3=uQ
zg1n#L#*8#D3g#`jS}idvFE3X0)qT*o7$0(Zt;34K3Ft!m;*r*+m~U3e^)$WD;Ks}4
z;&T{{V<eVhBuG#5G<b)CS*xbngYj`?-UCCjs>Q3Yg)PF(-eVLK30innZ327N#|-TZ
zpInbKxk!>MMD6)mx7O&h%!VU3@0lgGB<#IdYvG1&z$qj{2O{?2X2Yf_C)C6o_?`!X
z7LZO-*i2kn$fU)}1E}2RnH|y&+af{ye@SM7kv+GWLM1CQV+JhR2C6bXk~CA`=-iHG
zkJxzLdXq(zr^mvMnvnlO%#;!MHAvR3VOANn7#+&*X*L!~2}yz|3BX3=NtU9au%ia#
z%|Cs06@?h{<rjYpnUy2GugUCUubK(OCIB0dYeMRTo0X%zXU`HN(LB%W60e#G#`ZJ=
z2Vp;$F(bUU77EoGUB#}dgMLQRs)P`17VzrJs%?o-uRoK}dRYO@i6sHO2xJ1VKJfah
zhW9Je6ZqlPxTRuhYy!G(X%#&1xcFKcyd;f>-ej~1zVMWZvYbD@aHGNWvnaGtC^Nxf
zIY>aq$U|@x1xs28T1mdmMVSfu8K;51G<l!kX*r?)s3QcL`L-dh-NRECL10V7krl=x
z-%V5(F<TcwWkXbHOC-0<oz`K?>$9frKkfn@bOJA#=&P8M5t~VEthj&sL=g*s%a#VH
z3i8)@al*fxC90Mdeve@={m=vaancQ+pLnMgu>p+zNNtQRi5ICj9Hw)26d@Uy6-|?8
z^olm|t7JpZETls8$L@aG5D*b)N`S_x*jsU5)7x2joX@Ek#4|}BVE)6G&Xq{*lv|P;
z?VV#!Vv}EzwXh6FW=^sfWV+o8b^Bb4+o8Myo`T(of(BrLmf`eyqjS-eN$*GM!p3rQ
zt-gavoBO0k%n7!ajzi))l?v0AhGNq(#VrMeu_E5iI^HkglYQHBGRkPEEfx109%E&v
zFK`}AE}TsU7tUK3Qv4gaXf~~Ho$HeM0b9<<xv<ElFOat=2!~(%)<@=`@jZx*gPf~2
zxN_e0rx3T-ZQQyDWl;!aBawsbVaZvTX)%BRux%mktPr;~7WtfESP|7lEy{Vku~{Sa
zrNAVBRVOfq1?+&AG^I8_HwwuaL`KAJH8RvVG#!BoDEN-!DutZn7^&6YDw#7U0acnN
zDJp{4c%~|H#uhIg_J7Unno=8~anp(Di8=JpHW*?pl*4<*WoDCADgR9OOnHPX>R`;K
zSs*TDU9~PQ@%K944%NlPXtT-U6r&{bKV+NbzB$0mOeL#Q@^|_+DytxI9$nx3%G?N#
zyHAuVahn1o)hH`Qn!JMeQ5AvzSS0wa!}8)oE&g;H-L|jFcIF3)(Ffgk1|(}E{l})d
z_cM$R+z+X}_S=fiW7&sBk?x44dCtJ#6Oxq5uqQdSo|djjt9vSkq<Oh}+K|*xbrp2j
zhr2~5JO9*gA64yIc<|D3iZ9qB$`WanMikg>Vyy^`c_dspF5Pq=E>iC}SKDWvl$KV5
z*^Hc6bgCIPg$KB92_yJ}fNFHN?&WSa6YLQ)*aT{D5|-W)koKtS1A%v#7ZLNKPfKcZ
zZKX4k`(4-P6n#EPc)M8g@~i5pRkcvV^b2`QkEssMZtgVQ#Mk5U+YZF`jYVCNs>>2|
zoE5MeuN7p!^Q%dx(~0xlUd(>DyVFaohc_wlO)UJhNt*ycn%;fZZw#G~>E>=t^IQzm
zM4qtc#aHt|dJ|n}+F|vodR?KFc=ic=$`!!aed>2Cl1Nu>#B;V`2iJw*0eMH7wLU{$
z*Yjz&SnY4$q!g@Z3f^yQPv)sUfgBP{-vFl+)3SX`^KYQyeq@a)Dr<g|lv4OiL;GGV
zH9N0T*%_dm;)bb8I~*BamV)+!S(wjx09PN2oSvK!p>IIg@aI}$DaBg#)UEe~inw+T
z&r9)wt>iR4<FKkQg&&Ui#&|$FLkHuqh+BjWL1ZTG2T6@Tosux{j_bJOxmJi59r(+;
z+hWlcimC7c(dh`ZJ==Xu5kB#Qk$GZ*j%uA=Ac~FGO^P0W1U;U_4{64db?q}QNz$#P
z$X^47rJv=p<8#KOmVU;!d_;r~7JA9&K*Y=`h=>fC+U8SJx*zBIT6FY|b6h7`y88Os
z*XR%l{*zuR;+sy=bWS7GAjH-0LWF=|5q{fVD&*hhI!2Jk>UTN9Q?4zjlrJru0cVrV
z`pgY_L5I$Gr8xLBN8(pknRkug2hUD@IAEc^!>xPcR@U7e_~Bvuf$dy3Y%vr(9l5<H
z@r=&sg?OFjFlc&WooZ+&Dxw}(XnFyQp?E^!+kKTBr~3+N52g_{KY(IfnpGX|YHYQh
zOz;cm`xR>JVv7ll=_F?R6|z>jBjh^}Cs?4+Ox_9yjRrUA=4<Yt;u8t4;USNavU2-B
zY9hlD2?Is8pG+fchTXYLAMAD5ZH5KxhY2{h(i0O=Suj@T)$9(vh8ITay*ui^tj=?Q
z*;pF_yAj23Z?MI^zDJQ5t&4><1xJyDJ;-qeC5Dc2omZ>)TW2!6qnR+a@9#M3BiU+p
z(2GB|0>u-$-c;i1W0MaW_-lkQg`$}-3sa3gjz+rGfv`Q6gTC{Az!?p$7q|q?1(#v4
z)s`QEUSyMa!+M(RH@|UPpsDr`NG-V4<D;cOKbQDboFVu;ihQ=Q&=xBL7SAE+WY=Sj
z51kVhx;A4O8?&My#d1s!rBf2cIePS@@5OEIOG5ATVbX_~7r&NnMt~R98w$+98k0PI
zjQcB0{NCn2J-*_3q~QHd$(u0Tmt^=Q)CULOn`}ZZ+dAQ*m3H|NL^i=>Fvj5q-Z>p?
za_}}KSwl#$HCa}2@TcUJn5+~TU^zE$=v)zahcmo<k3fGdSv}I3kYhx1pc4DU5@}mR
zZ`_|#>%kt?YgNN*mAC!dBW)Ln{0UcgVVGMlw=$u4mp&%prUt%(S;E<v0LM=sAc<%Q
zX)NxT`>XzOwc}fhs&;DHuq;S2$fA6Pc)M2u!Eaeve<r`T6m2g7&3s6|BhrOUE3nxg
z4yCxWY%LDfa{!Z2zrhhS&-J+OX&&1zZaiIH1n9aZobeC3PJ<iwwihI}7vjzjcQ554
zNMRZ<z6EEN7u?;QP3yfILk(^7KEI)HlTH|i*{t%Brl-OfNSq542pK;a`M^b-OSw8B
znvxW(H13U>3$r>Qn1Uay1Z8V3NZunLA`&^7P6N`)rSnORTarlumrKZDPQc3gj^|l!
zl{ZJvg!x?Fd=W4ZgyE`vyM?_z@0+3}F96uWS#R<^7-_u;-~usi;cVWwr|5k@L$LD_
z5_{VGjIiv*33|JQ6E@`f-Qy>KWrQbTOGossV}=L*;)?HpYLyYSD?WHts=c4PhEO8E
z!pn-aBs+yt>zodL!pCs^<U~yw+cxk(jo|8R+GLJezk4CA;E1t-Ky7Mm9nf)=E)J9W
zP5{exK6!*sz*g?vl?Qbib4l#PfEzfFY^}HRby_LH$sT^AU6!+-E-z>i?RJ&pmKosz
zJa95?u{jE~-v+Cs>Xzc|oVyLVaZ7w1MicaQbclG7O5Vx>yF>UAVqMr(gZUyrx@Q?1
zrW#*n!!`l>LFZad6?~9RWLo2|vS^>)&!f9Pm`r}r1>MX|TZ<c%E)<FPIBwT5TqX^r
z$d=9)b)YEY>2y(OZPUM;YMC_Bs0Qm>IuJfwBz>GO1@S9+TbXP{tmQ_JS*ec){-IcC
z&ZOFGlGF)cjGKdEr0nif71YBSTVfB7!kq=c!sx4`CEE>H)QdHWL}pzA;|6TBm2l}n
z9mRjAZzD{j+>bp~qf%s5s6MAU+Wg9)^u+?5;1ztQE>J@P7NM-Bn7v_|*T)oFU$8BY
z6pO702gxqdZ2gLwwT~?ePqS_T-pUU6eemt90RZZo1XrcBQA8j7H;1HsON>!794_K_
z;Sz<!=8KGh=!~tV+Gb582YUP#-KS8A2`>fO<&Ig1HgRf_m(^zId$elG7U1XJ#w<Da
zjwtlGNFjrce6;JkE8-9Md;Nr|ef@Y#a3ybe@IICvU~?qVgWyX7;ZE%V{HS`2S4==X
zmfzA!j}qF$zkbc`2bK3`>Z<~lFFdn6%nKEfdNl0b6Y6FAHS={ZTER5!5zFFQlJD;O
z(D%bG`(Zs^sNXV0t&Olb0HFklUE!C2L%Mj`6N*aPgv8MVA4!u8Kuwx}Wzp7!Me)K(
zC*OwMDNE43wyYO---yn-De_ICm{-e(XO)l(RQ8V0pW1Uhd%M#nYTwhjo@;2xcx^(k
z{C<#Bz`l3H;CGF#K~GPQp^@7O^|Q)iiu8gEd~+jgt{n=h%HBSDJ3wg4AlV;i$HkQ>
zCOZ`sGr4ZW_KYnbWKE)CG@eWK5h>cTvYX#yxYpNChH*wb*>A|W5-%F}U?3;PetsDY
zR08oa=>yNNb<55~nWY3zI%;;%oV_yXp>Yp(pm)-EeHUQoh*#f`qOBua!a$`KA5%Ec
zH@UHHj$NN5_NSroyChOF#oU3<l^}x5-6urFRToM)ND6D;+eT=|6ht^k23yz%!7@%K
zB>j4(9bG|((3|-0D;f@Jtg$!zhpTo5N3v{-Tg9bGbEODx5Zrg3ddBqNo&uN%N`*MX
zffs@=Ut(scX*c^-q2Ewu6|2=#lKm28y`UWzjXO~?zE{Q*Q0bP7J0Xa;5E#(pi!qo5
zn);V`*uFAH%<Sgwwn<<nG(mK$MzQ}Xu8eL#j}^ATWC+$<(rHsiW-)XO%k@1`2Bb-L
zEA_e1;>o>JKth{DRVXI6)3-I3@D}i~b|OP$)qPi(?mn}9;ULyrdPaY1ai+z6+lX{E
zvA8yOcUL+V4l{4o3Q3++^f=ty1QRx13Tb!!9$c^e8mB|P?lnVzJ`<sM>vOE24+b$b
za77XlBi1^}gk9oe@f@il`oR~D35~MtKOQI)!~DnaD{2b+r<e@T(zc3-XLepG;xukI
zo48H5zP4ef1JW6H1Xi0-!{v$dyFEI;j1vuG>#5LG0nZS_WRgIfw^)mS7PRuAd$b~-
z$Q2C8oTq-zW0>NtY-<UgBI(68vQM<sH7o<3BcZ;s>GE1MUBeSQi`LLCwOt)U8MQ_p
zW85QxS}A7`wLZ~V`W<|S(<p;-YG>#TB(!O@o`I?_!#Q1ffhkCe>4PCD6adKcr_Bq*
zAMH^?&^`7ci4cC_i|Wh7Do8Gx373=!&1x3F&IzMf^Xqj&E21qbit4OM<zL3q3(9Rn
zH)o=p2Y8K=z_h~I(DoP{eBt@q7<#jA$Qb$rwK?*yPL{t%;H3HIE`R>u^X?dt7eQ);
z%Y_&+txZ|;8^*SQWB4Zcqt?b_;!$X;aAmcrM<;|%A>Nr*WETVX=b)>fKSrf$D9;1=
zM{#c32oq-m>J7!1LvAnTMs^QO2`C%7_zP=62j;dFR!wyRmm1Afp=}1i+LXiJExKmM
zNQa|zZPTPVB5@!OR51L8YHi%pq}4XZxeomTj^FaWM(H3w{^mek+HNsc*n~W=g5-js
zxT16EjiTCqSBB5;ANdK%gMQo!^zCIzhtj6rYhsmU1+gZ23{Hm3-dFnL0tZ5RroAFr
z2y-Q)NDcPhC=YW!#wFWbH5}(rU0IBCUZd%Ewv4N<IniL+^=3>_Q(jY@-O<?4*2)>W
zH}KNJbf9v@1XF}Urd8ua82&*QGAQnoPQ~2^3GbIO9?SulDB)FhEzN8li5~qu1mt&6
zYd?|l2Ux5zp#Zx#P2~xY*e~`$pT<umyur@lIL;k>_g;*HL3hhu>MsyhUPhcezt6Kf
z@?+{X*RTV!;T>CbM7dU_^I}MV;*VCAV|x04tz}nr7)I1JNLYgg`kl!OlF15Lrp6q6
zw^g)62`q;M-lF4s<u0I0-q(}Fg<C3On6Ls)%|q76DCo_?SzWp-U=An|<Hj=!F{^-O
zFs7a_4zxfPGgRBJc}8^4?*|&%yd+FCOrt}|Y%n@o0E~E`TrDA--4JY9dcEM(D=6t`
z3Z9D;0oZt%439L4x(yA8s?k<-+@sgV+wUtU${3fhfO^){{Sub89vz4qiCf~ulno>Z
zPePB7{MJeBDEaxN9Kx4`9%K7`uK|ZZQ^gRX6E@4pvWtp~K9MPVn}Mx<;FN_?^@S!b
z>>4Rr^ru(S{vVmJN`eSJ;m^O}XdALYn1`=zbEqRa{K}&bGw83uL;(4|8YNzQcKN|f
zZ;bdH^dXI{uJ=3a14(!5apM@K2`>K_yXe!B^RkXL2$pWe^ZLcuC#<4CxfK?5guP|^
z4?!2le-7<?Z}~O+n8*XA$h=4kuZMjGIq^F*&nK$=)uToqtOzz7^%ZrE6?M8y_yV6g
zt;nwg#|%@NZ(h;y(m4))i!T>{Az*0LI=%ckmQ$lhU1){<LgeF%-5}uy`8*QHq7^%&
zC^Rnb18y_r1u%KzpItn7HjzvdYHuH*uTP43c>Vc;&GNEAZC{-ghrd=D`Pe~1T(;U>
zZTPiccn5?o8{opnw`MaTJ`ewci*MVofe!Np+q~0;UXQh73k%qL5t*xv!eN8VQP~V_
z9WeKadmh=jHC51yW&%Gz6DV(iX&w&1*=$=7OjXEZQNB(5_v!}%<XoR4Y07ZZz8blp
zr}_TdFJ5ctF?thXX>XjvcZkCOjr!p=ikqO0`i;0h0#YdwWuv93KIX(wjDL*Yq3Cmn
zHrkNVDD;5V>!>Yz$=>b^Ah?PRckl1!GhR!pu$7yw%e9<WVn3w$@7l`2|9p__ggRnh
zbel06slVSjGisK95^~bO%J%!j*!>^iTUg{?A1J%!uY{a`;!K`t&DpX?-HS(foL8R1
zPH2b$QtQlfOf?<)ufzNYmhI|ZmG~Dfn?HY_Lp&+Jxy(7vck9gkF^1JYdD*1y@1NDH
z+v-d`0!X4m@ayjh-<Wu06`0)W`~yMrD~_$!Aubzx<oOh+|6}a9<R7_t`N#Y;xcolP
z7Xxg%NCSOYaS-FO)b&3Ce|vxY(UQD>1!+gxmRqsR{dc2&m0f$qy{qCxpzAWwAx*Fd
z$aRBIqj~(wbA0n}VPR-_K`<J=bPP9)Eyi7@IG;==EqyqHVF`W*o2zZZH2<7lB)ApS
z+lGBuA;qha*Z{w7GI^!T(uNE-3f<7(<o_Hr2Kk|TN5p9Zi#+cG<-FWV1oyC!>HpH^
zRmvME{fLy*<2ZWhYkcIsPdK*(3`9pkjra2Fy&mOS*x&f<N@wUeLLch-gYU;Msg}x(
z`Z(Uh{v21dyeBc@vgq8H+B3>@1k6L*>!(c=IafBr9tQmFrtN}C>>IR#M*KuQ*YgRD
zJ`l6MBZ*YE`jJ{y-P`02VU9P-d<f@A3nf^oIAC6lg1?M-y(Z>Ps$OryiK~{bZmH`a
z&!y`Z#bOP6C_*uQt(L2FGUte!G@`=l##w*0K@LEcUJboV``yPP`NMcd>Mwo8l1US>
zaz?<@{5N#zA^66{xP?VANc~$`g{R@XpFq;{pF!G1Rgos{+1I09ah$VW#dQPx5qI4P
z$$TMm7<JxRoQWUwq<*G~{z@#9tD#tjlM`++ljeL&NrCynTbMMG27B{Kb$#IpN9=KM
zEo!UfsXnT7H`oJ(><L3*Q6zR6V<T0x^~(?%R1v@JE8s%!Hox*%XLwkVs>bupRAYdp
zt`mCy0qSg1f6-$wIns5m58Se8_9gMyk?_QR^L=NNYho?m;2iPhP*2lM0td<2rs1&1
zU}7ZK8M7(>=3r0CO#%yv{Xa}S{>_0NkDCNW65zrxwVp}r2u6prcv9<!P~6XG<nIlB
zign74+{gt>1iScm4i)K&JWE-mi1%;e6e$7>a25ho<GYGz&(w8x=yCz7vZSiA#zhIj
zMX?a|tJ7?hOTw3P!<Pa24OP(FcY<tgNmIPu<dQt&EUC8Bn|Pvj<9}dkpiM66{O32$
z`0f8Kd=%JkhI3Jx{Qro13#hoZWnCCTa1ZX5;O_2{;O@aKctdb^f`%Z$HMqOGOOVjG
zy9c+%{w6#7?0wEX_l<k+f8Tgx6qB#NHG3`AqI=G&npHLDgIj;ddW0k-yf8#Fsf!b-
z@E?gCBF!FQllLVpD99|(1PEio5}t&z(UQ}KNsXZ^#URwMLR-Ac3XBU*5T!xRrTO-H
ziS(fT+P1*-tYGDKwDIxjsZ5uP4|#Ceqx7<D$7>nMBYst0#y<Z|!{n>Q5AZ*0Ub<-e
z^D%V3+g^R`X#a(Wdyp{I1Vx?|mMSS=W4P<obZz$s;Nu>5(?`PhyitrqQeUHTWcnv^
zH+Fw0ZM{-$e5uAL5-+2;^~#+`g<s;>Y@%7~!Zsl^N7AXwbkPn1Ig7<Q_y|~yuk(N*
znXaH<J~6BX%+&z5N>D+OO*L4pX;>VA^XJ%g%4R7+ize!ujMcPU$;P?;gjACw945hy
zb&EF6L$Z!ujo&?!7C+ch)+b7xUrVtLx1eyIFEXrdKN9b;d8~e;=L|8a%q<_Ox(I+|
z9UkIg{h~EZ8fcQhApJN}V8&9U6=8{;lWgiiyh|g=HGJhqZyH#QyGAd`9gaR~^e3DH
zP9-qm&!J=^hlnGasdJ_1b6fXjCm%J0)<aA1D}9#0G(m^f5*NY#3nsJ@)!-;y70*(3
zPK`tIc5#fu^NRhdHNbb_n?8;RP8iLM{uD}2PChK(eDrYA?kd7(Q@_&TOu9JmAYzZP
zh;$r=dX($>fWfNIGVEDfU6AuL=ASO%_jvoln0Daae}t*z%wnrq0>mc<xIYRkI=<OG
zzF?1soIuh(PnN4l>Ia+hj4l{&Y&RTDuCm$}Iz8zlTVj>)rxakaK{8BAj%la1ec!Y5
zPv!g2k_HJGOrsL;k4+Xkoe@$gzj((tfBI%4{=>cclSSwYHqB7-6nfT4T5@Yd^t$E4
z&wJu?>e<#5N_BIDV^32Fw&dR>zBPu{5N*S-8rZ(QK%d*D9LKaj-rnZtOy2SAIWMeG
z5_<q)>t&ByjjnRo5-)T+^7pw!k4k2zy#0vr$(9_@d@3)6CaSur<PcfPG%<||>V{~5
zgz1W8hO_lgF=R%H39-5Gv-zXyfMlmdrk%C%vmponhpu-d+&)LyWzvALD~8#O*~=(V
zDPuFaX4?QBg7NH07Ew_<WD}vm*)+@qzY>8*?NIpp9!%VTSKK2(=PL|u#Cj1eR{kDO
zOD+tYpR5vX7!qy1C)wCoLyLkdav1g18uY!Hm3F&tD6rw{+z^>aI0S6!w~39T%p)RJ
zAFtfmLK=TRJZHPR9}(oL9vgdxi_frpohWF*w8I<rSwY478A!v7_0#`Dg=RwbLhi0J
zP1AczAJ}EA@WbOuFOmcZ%b?(|*=xBbL&~hCG)Yx)vRal;NP;0)id#B~BUeo$&h^^#
zF7JVnKK&)v0}yO041(r;IBXjNBd(}y%iR$(E9X-y8<)(#2^F4=2~#sS&g#W(`Z1#f
zkHoF?0s3p)>X!Bq)8K2vU=MP)EQ05QVD28fE`JN%%$bbMgNn_Ajm?APPr+fkgL}q&
z0ZFY%Noj*4%Y!4%EY&W|)z>W5*R0h`Bi3AO9$eM)-6hNYC4ybg?WlqJv7vf%(iE{-
zZMp*g$U31JKt5jU&=A`rv6t8kKv_N8O@GB4E-<pLYPOA@{RB7R6F9&`c@}<2Cyjnf
zOuizv=>eWgVvfnq1jO4y24+^u&(Z#cj~TF&+~guV(~-z-!&6#GEwFnv$Wa=4BTBw3
z*5eWCii&<rwk{yv5)yiic1rwAF8n+4-}d}h@{PDB{PXE#LT_IEb^6<Gbp4pG4xfO!
z<Q!aIzVeIj>yb~1eRB_0MUB}fQx*{47t97ySZ<uZxZxLA!Td~tFn|p0ngg*+?aPI*
z8u{Wk{IR1B=~(RBsMfJaYaocloPm(206mibVp~OItM;2rk21Q%@;=$H#2@y#F5*n*
zCD?Kn@xg`Q>JV-~hv@_tN<#`JW5x{bw8w>{FvN@qW?{w#S5!-ca9m}18{BWm$Pf7|
zS7s!@+(58}v=u~!V3b9V!8A;$0();Kwb7i@{ytn=AFnWF(P)3P4t62^j7WuPLu1KG
z_F-@W>!8s(>K?_Q_(RL0VKM|p(p+p}VX6$~j*%yMrq8R)_Jj7ob|GKXH404xl5W<U
zmkHhZCwQK=B?}i6@jcPgwTlXnIMz_KL<cBuzix#gV=8t+PLbjpW%Blj5(0f)3*c)r
zIk~e?fI)VKSe~%OYv57>-hmt^81}>nJ6ZQg2L=MxzN&8n^bIJi{l8a0*S**&wO>Yf
zZo<5m@hUJDKf^a0aG7)xpLFP*h;qK&Q-juBe~(E)85#dVwpwWmt%y)GUaSBB$AOa7
zM+W2;Z^d}^iFL%2noW@BK-z0Y3>2zQa(Y1F?bTBreRGN4F1S7;b^l)=;k_P$z%@|7
zqY*CD@4+a1(PKFu(Ce=)BOA=O1<w+6q<Yh;urccWBHstZ8R8`fGdObhFaHsKnI{2Q
zL=!<r3Q|3jyD#*ld_l4ypBAi4LnAQBF@nZFvsNj>5z!Riiytm3biL^D@@-%Wb(j3f
zp>Cwx@gTw4K15{zJpxVQ*x9dp!h+-ZA0Zqw&I=H2OUzUts+zZUojNEHNASR1tEBv7
z;QoX~$a4gh<h;B8{v;+wbeg<Mfv(#wXn>cjN<Op%gM1-yfSrt0E>sqSeDV)CkXMeK
z2+@N$M<IR%7b75Q5{>o;WDzxqK*OUD?}Ll^FGEf^rLVySGGbR>O=jEB^nx{3)m)LW
zhgoYHk!%>nQijL3{|2jyj<0f%1#3D(IB&*bNak0?2s|wUP;E}K{!=m^80!%avd3fh
z4YucD_h0d;Z`0g^Aj-n{7|i&)R#IzLbli}W^<6gvE?mH>(5>x5hTHYM4xTU*)UGK+
zD^liH$O~3qJ(%%f2>1Ve(zi;1SjnLS_KpnaY!za&n~WM_yIvVi%GWI$oREXr%|h)5
zK^TI8_KlShiUw*IARL)3Jxynds3`)8MW~3JO$K8*@Zw`L#1f-$J>vKg7?Pfiy1>C=
zbae*WGm{a@4*2Eq?F+vzfW3^Y)uEjxWog60(h4x?pSyfhR6>(ezWKvnO7dhtoVfA3
z>o<<*h{zIA4z0wC14z6lZ@c@uPp8NEeeG6}KJBFW7hh#cY?PL%&mM^%&r<f4PuoR%
zpAa5>kkW;yEr+yjye;V)^>pEnR%w%HzN}jALJ+Ot@4lWCH{X5ne#>kkvcIXD!6Zw^
z?NIRN3V2EmI1HgxR+K;}dV5Mu_;u{lXHTWTt?)i9&UKT#!eDxi-eD3sjz)c*gv9-!
zH+k-gB+&h_Daqsdr4h%w=8|PN<M80ZpJ36L#L}3Y0upFU_TRL2;bT;Po@V4g{yZ!P
zwT7+dLg!X1Y$gfNQ(`m4A4(^<q+j?7;4L4#q;~u?_eTGlpr*K2#X#!!2Tv_a#=I+T
zn)5=ev+r9DpKdj@3<N1;=ta%6W&5t>*%-ofjqtjhsdo>YWIumM$Tvuroop8}SyFfp
z2)*;xG7_L=v+>%ZtNZ0YMP^2`4Fs!mNHJq`!Bt={>a(4%#Ejq9p$WF}4PX4KY-!K8
z2#K+#bj1Nnyy0C%D2B`yjBggPL~gER%x_*_`4FOO_eAB1SiH)oiM-N{dO}g+mtny0
ztz)bLWx5;YZ4mnnG-uZz-r)uVf<xbr1HNgi!LqZ^&7E{?M{^aZ;E$D?y>K2l@qu(a
z<Eooqec%dif&2vO!ODE(us`$V3q=GfQaDrlSE6Xa4&$qssljZdrg>dAw3N>(pKm2)
z?B<tu4uh{7O}^-|zGF;!{Z;l$F?+%XX$%X5@0mPf3I+?WUS-8rNVSP=tHOlxVQzmC
z<)>vc#D1>IY3+);-C_J0DY{$N^~EoDaU$$kho>ucdI0nZe+#(&-^wboCX!uOes<JZ
z61^H&(Rp^T(XG+l@OdJy3@CG;BA9&Ard24Ql5o0=)BRaM#zu77;pqhQpZ{!gpYW!7
zp0g;j2!Rc>Qowxo6p3&yh;aUROf3tGNr@ixj$gqrN)mH>mqan~!AHb!xjnF}<%thL
z<(!Fjr20uR$PGKljWe4$M=5cFdSv%WC9(Y*^PN)S1NDeErkM~zHA&E1bl2e%6oRps
zp=Azp?b9&A#(g*f#<>)x<VTE@0+jkyp1L7xk>1zNL&pBnx+X&^Mqhyum)Hdz5}b_G
zA<~UTL=hY0Gn!AL7(x8b;=xP}SL4cBwtAG&s;vp1kIa&+2#{je<P$}mIO31qGb87n
zUoTl7`*|3`EW%!QLos8Rou<Oh3BIgeGko+G-=05?Sy{jtEWL6uP4}Yld@;PHawAQw
zh=X|PGM!xZVV|0j%L(IBRv@$7;=?{uSwu<rEb-Ubd3HT^b~)cq**lF^p5fTj#S(~D
z>ZJ~LArm`jAVSd$v0X<9FO<wN$O|4{LD=yf2oRxUM)$5Gt_@1&cgTqV;v@LhOs)$*
zt2N#RVvwlNE-KV23@#j37ij~ywpS<f%iu0%Toej}*I*|jNSo@n-cj$scnu&1-^2;&
zj!;NHNdWX_8jk5n^kdT$yOR6(DFiREaDTUjEA9h|(i3dqEr+FdWU_wF_DsRQKx8iz
zjmI;mQeeR;howj4yk1V-Ou-QtA}^t2E*RFZ1abzC_o2<>iV}!f7{l2hWkr&KNygyu
zUbH4$Q5>;dBe?fSS>a?KSxjaQ9{!<1_#@Vdz#P8hGU;N>Toy%yvM_{TK*|h&{Ky=E
z5<Jma@m{E1l)Gy~Viopbrlr>&NtzTwggPJ=yqppj0F%GUo(j3oSi|Id1wGyd(S##>
z{Q?NWuWgeoEmu0Q`me!Y$>50rW_&zJitb%wTrZ@YXu}I;Ut*Z?ZU}c=VN|GHLkIz+
z%n-;LW?yWW@h%8$T;V_e%%K02M1dLagy6-^oJLZ%f+=JP049o9j*xPgea2^d8;SR=
z4@ueh4;ri8x{M6ULLcG?G1ChYd?(vMa@Xrc_YJh|7Br}z)Wuz`>W(I=iGTDSI<nm9
zjtJsZkNr0xyw_C6zbZ!~IQ0PH`feg-bR152%5Ka=1eenrc6N8(h2}NlpDT!L29zV~
zl_9gE2|*2wqKmp@wq>8S4vnyz#j9j-{&gHlc;JUc9C$T0On>UXIB>W^s`tgCSM=fu
z%dKRni7%I%@1ZDEWYSRU6^A5oSn><D1|O1<g#K(|Grkap{^<1^C53@j?&kXfXlwn1
zpn|U80xq{vofFPzh8RZ7t{~9{MK~OUHBmBM>OjOG`z$mtiFJv02hz>cG0W~ftx#`L
zg#YT)N-sg9OC5xmYoCS57}sUW@a0XN`Wf!%Xms`Y#^F6TpU^+U;`5FD`vzX2veD@O
zBIId*fOZ>rB)><_b%nxqe3ElTTn3wO@SYGPT~eRl$Q*hIKb7UkH6>0ln$?DD9T}-N
z|5u={l3*D%iAG#B-B3T))<)PFK;l-KE@~2gURbB$)jXu5*t;&%kG@fVcV8@z!<Idl
zlY{|(`;#7i+Z=Ckp>qt8B7y+S#FQPS_Raix&y$*b;tQ2EMgvA_un`V!N1(R^T?v-K
z%Z0yu$;vml37rn$_0ZTL?h;W#buyG<G#9ndX4;<jSnFj70F9ubde-+^&?}vmH^kn)
zB!<ZMFRjR+y@Q=9h&hF6zjZQIpmTPb&A!m-gkCV<`}@pChIr)*d*zQ)Wk~W62PHU*
z3IZ9s*+ZPIp{=4|ZRbBLR*jj8d(=`{xKSeTyFYiiQ+-Ko8<0d<W#GklEbI~FyUR(p
zB-MoD7JYf`gwwb(M+p>nkPFUXfNoIxEs##jU|P{?pw*He7^tmCkZP|?tfDXs*3d$<
zVfRG^3ZhY*FpngN00iK5l~AeP_tyD{vEXDCdZnGz6|qq?r|h2rA!~B3GQi3aOsA65
z>?i^7UmUXEid7TLIgVWx=-g2mH=3RIL!u??BNm&zOF-ODqs$*-K!Jm^I1!^P2evT+
zBryYOq<|P^1j%k(+~+EBvc5WNj!GEO%UZ9)J{ct@zKs1ah{>WZi<KAt;5^!<P*Y2S
zZgVJ=l~~P$&Jp*TMfO<(j<pB$fsPOKRwGt+A~YQOig`9j;+OBA=2jLjciJACoBga|
zKe-KIPP}c@2dWTb0)}9XiXL_NO*1Sq5A*#i!tzqL5XrSa#)q7^EQdB<XI^;Ur$tv^
zI3{?HDnCWAVq_%jCBA+lvwTX@u>YCEeLSD)LNVHmxU&>?-WGg5IreUga30sARhN5U
z8UUJlA2C){%{>GU*a@0~m6|8vfNyuB@;;~Aiw5P>M{B>48EdTi0ENfv;iO`PqSmA0
z%e(N=DJp1<b@N7<*uEqVR-D0jYEE`P=RHtV>+Chh1WTm`whG3Uq-8e7I_d2lGvjS2
zQWEb#T3(bxJ)rb<U>|tVDY>8h`4&TO=B+s1@$h}etsPa)6(&<RT@_vV1>TI~ftBmN
zTVBfO?hNCeb(0(;*Akgfmd%oEtg9Z2%>h+w4I9Tk-dbofQ}e{M!+f&5jw6G@(9Z<u
zGn8S1DryG~5b-o}6#-jGxxGV=7a>4uOASC9<=hz$;GTzx+BRH7VY3anbY&MDyptvt
z^e`oSz~H)sbPHs0&vS^7#?5)vXW<ghGLNZcI7ft+LpUmciI<a2Yy7Qz>(DHsio&=i
zB<Jupjb+F<;!M2ud^;kxAuRHKxdx?jCA6WP>&#<PvJZbGo*~k*+rk>dS?e`s0m@eq
zC=0mAtVTj9tG-WkCQ)yh+Zg!tUk{a^L`@c4MX4MS<<Ij)MFR_N?o~a#X$6I_GBU!(
z6nb~^*XeS93wUqC+oyvJ?v<g&#Xg=D@baNJ_!DP{ARE+dfG-;Y9?BbV%sRYk*1TOI
z%+9XqT|axfh922v2zs2R>hb5}jP3P0y8jC_M^CSY8*6+umgK*p`!3a6A(he8%tXSQ
zrd&Vij;3Yj1?_nLNd{ts6)(zX*aCi3v}&f5zTp`;j8#spo(LN9AJ`b(LWw92PoGD!
zXfHQZ!n4bQ2n?7bVkWa~4f#G5q;@?NT7MvURLk+dROw7uH|Fpx367pRsnqi<`C6pz
zqjARl==A1Mt-IaQXC1?aX?aQ}UMI|FDzTD8EB#AQg4;>Ng-&|BH-D)&R+&d4<hAN;
zoKABO)uM!ImpAR2vZpP&phop~bD8$}U5$kouJFpM=9;hvhEU%`lj*Cdgk|0as*nFM
zw*JE~dYP8>yN==S*o*O<tAkbd2E4psz*RF?4gBr393s5?({Gsw6)nQbkK(un|7+RR
zkeDCpd`-(01-s+CufA<(qjzUP|BL<{PS>v}jPgz+9%MVge=FY~QQa0F6>hNAJ6$U9
z+d@d5i#JY-BK#YF%iolxfiL(@ev<Dq=URc-&-Mi=D$0PehallgqfR|IDc2Ubdwa|<
zKV54ooCPSfKvr&eGPvJ^D&FTG<#5a*n2J(#>NhT4-I**-qR&<YDWtY2IocSI3jgwx
zq*u05hQ<F|n3tJ^(3A}h8F-E+0ju7bW~yJ-0EvhS9kC~v{K)6v3d!40yjft?W7W+S
zQZJCpfTacA&T+)W;Ex%(0#h*9w1QAD$S(J*cE3#NM(*^f@_}oiQwxw+&yt9#HtPQ(
zEstLN|5HY#Ez{zGyfpttxakT3>dG4>-}<!PMOJ^oH-Ezc?wuMB{Nupzu0{pF?}GML
zhX(fv7RoQ*M4{tvFW+Zxso&Eje?8dI=dP%at+pUJ8pU%wAImqU=fS#ORoo)>9>5^|
zFi)6WN3*QCB^s`a%sQgSIy=mGb*8e(hm}GxL$YiuNZ!4@!D_ABTd;1~M>cFgK~icO
zZFL0BSZ}DaL*5uFs7wv_=4kQ(NW7_z%V+40!1^+(2WSj!-CP@tI+qTwOb2jRwe<o<
zxfW)Ny-joKYAT34n)_yRDqn?EHtAyP>}!qI_UKYZI|P#M=$h;?L~ECQ-AZkac4S&#
zysY(>0epSKDPXR-1-T`YRPG(_GBKmE*sFBy01O~hYIpt?l0#%Lc6+F$AH!{-yO2a|
zzyv$j&5}!{rpYuB+!|N?6{<@<Qc*GzEmM+P-YZjyAP)Z^m}J_=>+<VNTiFLseNU=8
zN0m#HA*3j!4i*%Zki!jbp{jnuD5o&v`0AN7LOWCs#ysr7%IjFF!-q8(+)#p<*79)U
zZ%G#}l;4Bdjz{o5#t=k44TtH@xEG(!s6T>wUGuz6i>CM;vBq?JpAPvBwt~{0=0+(%
zSdB9$1H8KT(HH0Vy7%rI1W8FCEdNN4=F0<d#NL~>tu)nFSX1I#E}#ob(I=F|(B4=N
zw`tC+hoHiIU8{ZQnc-s|dA-f~VUJH26yhLs^7k84Tfi`R@`udbPsaKY#`-}jE5Rz)
z8^Ct7{0}KX_(k|p%=k^{S^@_Ajvrpcf5*Lr{&|deuHaDVCSbklovbTcVun_X*AU+e
zmMf1{J@7#L%M$KHbRhU?MDVjKy7^>-@gBU7&TrV(@!r#~`R0YoY0v|as|I^*d;gV}
z<_nUJkP~$J_`9Qwj%PJ<qjJnJ=w9@4fZmD8l}yKM;;b>7;h`>_mR|Q(rv{sUK0dTL
z)?15OzgIyhAmfpnRpwIqyZ|6^p5?l+cF_ZO%e_1o>9YJO861%19cfuDTs~LGeOY8f
zr>2uwRE?K&{f1&E|2TS0KO<|NKFbm@qg9Y0=k`s!PT~-Q>=t&O1ENY}P~l>iMb0BZ
zZ>*{vaMGxH<n<6+FUl=f%qaa(<|}(P=cF^a?1#)*x!$xO`9nz5bBpr(kQ02Y8%y#h
zh?oo}loOv@d&M>;l);B=-@A|`o}eG!WoOC45*N&MmgEHcW`)dZJbg!U-3J8nVf(sY
z-ZtD)B)ywz`+m=YfAZ-*#0^@<QvQ5~6}7$%<5|+9bQJ1;vQ0;hRR^2o9Z4j8u!B9y
zV!G&VybOU{Z1+17Ziu-HSS7xt1~4x?G6K$tb)xzc?Tkn2S+*B&&*vg;tv$*{REYhg
z*4}8sfpw-6+7_7bRi~tU=LAzrja^8AHSGqJvXC}=sLU{0M%~;O${`(!xc|WurpQuQ
z{~|uYolnuG@Ok@}U_P)W5#JB|Ctbo`XonxetTW&QZ6r9vkF&T&EA2m@39B@{AhG|P
z0m)s79%1Y{j9f96{p){K_YFYZ^1h@n&?^EjRv35}jVQ$57J9>EbR*onXbX%#!MZ1E
z3$|M&sgNdCZ4a0_5x9pC>cam&%#EGINuLl0r_7TrsG|^JwHUFWbq&I@!122-xK@^G
zx>NRzZQ69z-Bu$}VFyab;UmE&XVyHHH~wz<l@2p^COy{!!5J~|mul;m)`Ic3f>VN8
z>8gB#Tm!*-gqIBHZ<3Q$Mu^Eq=C-}oSsl}RY4No&!)eQEFKUo*W^^buDMJAXNeM|t
zEv9v*b%_RUi)RfDy=QS-G=O5$^erAhifPuCDa+hh(UuxZZ`DB6TiMzcLpQNSQ@7!>
zghaE*`o8eJ>EROO-lb{DX-cEu+Q!--*N$WZ8#*(s*b<F!p6QGd8uGcO<z(9Qil&mi
z^$%8cPVKIv?&I!nTTBG31?ctah%1S)$~6@<yVso#$~nVb7ZNP27zC>>YvnM9tz&Jj
z!;!myZZU1!g@r0Wik;;Wz2X_p9@`Dht~T~2^-CXd+s-hZ!}v<nv*Y0E`i7qXnTyiX
zFxvWtng;eO=Jor2rmL1BuDekD97_|`*4~A6ojxIgjNz-pqdB3E8%Z2GQ!V-1>&fZW
z<wd69W2Kj?a}U6?z6DFJhRp-V4M(dLZ4Z&768C6b?@XoRVN}({WVLelVlS)euiWiL
z=H_gp4QFkS5oW_<tsHiXEr9U-9U=GAl*h%Qdh973PuJd#z$^IhixdD8cu`>3FJ{4i
z$OB3z(u$+Z$)P#_(x$i6D@6#9vg{2~vng6s=CwY+9Xl!uTi{^Yt*`b;d$_CD*+CJP
zzJ3~xe)>xC#3c0S!z}dJK3O^gJYZ$PyKI=e!Q6i-H8Fc<OWUX%Rq>VL(A=*1$k6TW
z-fK&`_u{EP)Mn#t$<_BLl4%0OIUaPr9M%T5rm;*T3cQOh&+o6F+-TlAmAhz2SswYu
zwFF#&y_ixfXuqtbai$i?&6sb_d-Qti?wI4Q`*ZTz%#xHdJ20i7j4S7hj$%itst+Ua
zLf^yD#RZDx>PPJu5rNj&_NB!!ak9%}zMtF2VaNRG;v%RynTE7igq6`YC>*WPPs8yd
zF;rp&A9yT_W)?(%>=DTcIeCUa_Dmm`(BuTE<p*k$Z}-%uc+zgKa)IpxZiKb`){nBm
zBjE2C@f~>c$1U@j&w0U&WX}A+aVe!y<{>RxflvOyCP_zTTGoF!MadQB@~T=9^Ey91
zw*65R(-#~{1-2);=+n<h7eWj;`A1fwE4)OB#nOhYWoEq*#lw&O;U<R!&DTNwAcJ!D
zCtx+i`5bSpRRPOifz$FC`HmFUvx3B74elljNnRALOA!S>)qnDYE)|j{dJdX;HBfR~
zJ|RYJXn@w#B%ZZO8c!=XqC{Czora<~4on{gxc!7{kSeQY`Vun8yb@!0_1UnEqWh5S
zFY%NLz8!sxNBV3!6pzj-n@2-685jFuXpnu&B-w#gjwdNERaQm*H!c6=gM86a=08G1
z8nDX(4#0!(vzNuz*Uz2;$v@?rr23BmX?(4B6m%a<-b9vsi-~8i`tsi-4XczBOE4+v
zf(E7k2}){uiBOwFGHX%DPQ%4=bp3)QZH%%ekrkleP-UEO@BNf6(O<{*`9$AX1rFjH
zI(<Sa1kbRGPjCrc{S`=pep@HtDww}U(2IC~jV_H7m*>bpAKyps@js0VO(>yG?YDjz
zhD0SH$e$5DoFG~U%2nXib*S5Sa?Vl=6YA&CWQ1*ufG|ctlU2g^VIfrmp0P`s1RN$s
z!F3V@#X%Y+(i)ZX{qQO+ix^s`#`T4DBSlr~{gNsI<31{YN-QCK0;^n@;u4UOuIW^?
zn40>-iK^CRcVxnTan0?e{y|FnSIBdPA69y(1e?x|Mf9xs03WUedc2Y<gn>^3w4}{r
zTF{$tL*SwY!qSS35OL~dOd6F@MUQ2N@8Cpw5y%LNOVE@FZ%ZY4KtH2PFdfLNltaCj
zK>h>LWCW4%qO{9X40Veg8=xXGP;)bAh>YvBzRi8Wpt02f8vS8udCgismPfsPB&_7M
zL&p{Mh+iY?f^EFuUF#1kpZC~v8UsgH9IO^Akb4ybjI~7rQ&qE?THkOM2v&{gB0Ool
zV$>ur4vugNoeNMZ(O_3Zn~)0dR%4*|pI5wZLMt9z<M`b~1xQ_rZxu<a87tS{0!(_*
zQQayAVi<-m<E03LdW;E2MZ2{uHV>80E-R~*e08`DJ!Q<==qc^&itk~9mvsmt^mo&h
zV9@8L+_ppjAq5J3sOu8`E$htXa3^80E#y7bsIhAYpVv}i*D&ILW@F>E^|kN4zw|k7
zUU_P@D*$d4<a6)SL?z1mXzz^$5Z=Zu=ik(-^i6EDz0x0?BxH!r*_y2Puva3}RrUXo
zWTSyDN5YjCt(FUWeHUtFuN-nBC?RS(2EzZ^PktPIU`$wWmR8K#|JuErC#oP-P(U~X
zdp!SOZ!%+V5(xy9$*|2+m>JLCyZFH3)kM;t<J0_s;-N`tm&HlkwrjAYzc;m`x1_LS
ziQI_*FH3MPGt~NoPD}U;wB;8_ums0IT4vsJ#<gQ^37K+t3<EleM<3pA@KMKZIk-!-
zC-*Z&45Fz}d0t&QKpzd{5;fLrprxx^r+DlYy6hH8TmW@0fO<MsjnT{V3U*Uj^;Mxm
zuI?iu(Y<s6o8=ekh~#X+#FHAFjMyxMmkmFSPUop`LpCmSg`X(djFm>w5iad`0f88V
zYur-Qs!fAzKC6@Aycb9Cper~p9pROqId<2R^&z_p4>4oDVY@5-Z=bM#v`btZdxPpe
zw+V=@5VIXPO(J%QJSFW3u|2pD)lR=#yI+}au5{l=&)NS}u6rk~ztZZfRebQsVs-=;
zcrzP_BLQ5k4dB?JKtw_Uv(;rSCE`TdTaqMDSY2M$y7Z*|#QyzbRSS8trXGfdrXJ4s
zl6T~z?i{H{V*R=9NgBXStagFw{mNvA5;|`6>Ttqh;&SWnbUF_7LB=%k9tG;As3=#8
zkpi<!JWXF86hIlR^;37*``q@nkv#Rq-1T%!xUuf-T$G2U$R08`8phq|_<+DG5W0mI
zQfYMKrt6;9Y(y(((_4~hbEdDAUz-jkOqup2q_W^WEKd1y#=`_&SHSXlRAjKN-_44B
zcFXuq$Dx-rMu&K5$9_itz(=$-Vpy%@r!E+~amk5{Egv<PVtmE@6i;|=8Rf>%e>lpL
z0vIvdIV@F-%Y=ZW4%)DYY17mByr|K)LPgf28IqNHhwrpSQ<pzcz{W4Ne)ckPlSTzo
zhfVXFSyff7U)o~!0BfwJXWe^W3ZQ);2*I(R;s7pT9WJ1uQ+d&#<Hoc!R<ESn*lEjh
zan*7$lY|Sm2N?zsklWBnYRmkVov<H1y#s!q?nMZ|pUU2!Dgui{r%EnRoj;$W{6qKo
z!qCHoW?>=QN56D&Ri=$JfsJIIZM#B=!QJg+1CCv*-iMAWDew^b?t4pu&9jfD;KR&0
zZtJIT{;+W1Nc(`wc4Wn;rxgUobx(qYql$q3$vLxuin;GrY>n-R&gb*=1KW*vHv}^Q
zPy&8X$m_xZ+~W`^?4iG4!x-sLw$MAIbwL?GhR9-m@Ey=TLnPH4cL$I2UIKS$%aYI>
ztsk!k5DZB5Cfs?qXhvhp7P`Riw*YMCLhG?fSm)H(;0#F6V>Q`>nt{Ch7Ucdzl;P7k
zzuy7UI(I<Bcjd*rpX^S@A2Ib6U)@3j3ggc!U<z}K^_~vj-FKezUy&{3o?uu9=O{*)
zkI#s_j!I0^^B}6zP%37PJrZjWdPTWm@-rSk>XJH2t$D!xQ!cmqLzr_e_p~yh6-`tv
zW<7pSVZw%L0QZz~swIs)N2m(&{=vI7RfSbBr-qzgw5H0DS`@4@1te0N?pb(ev$bv4
zCvSQPT>1=6d_S*u@&ZM5Ny@n&W6h+yVV0DU(>EL$T(nGJ#2X<C?9T#f#<E6)3;2Z#
z{5%<`FlO?8qm$k<n2_A3_GlSC_Zo94UR3UW($tzjSj+-RE(@>5D51_UVV`#b>Us*p
zUBqq|YNpG{Uf_3L)gN&InLa{WX1IU2@qg`U2j2L_*nmDF;FKAXGW#*sfHhOg2w|a+
zIWhu(y7;^-#{bgM^}F%skz1i>=O3xVOB5BbGintt5q0cr5uEKq_#LqiX{?Whh=WKR
z9c6=}ymxB_BEXQI7#vB9F()4~*HFmQQJGE5b)Wx;JPqE`aaHW*@3VK`xe(XlsU2;r
z`nHyeK`Z?aj_LjNM{sHjA1P5)5|#w(*t9e;Na5+#FsFX7%~+RX1%#eI<_+F-r~52K
z;b+Qj=Wu?DdXX2`I-=w?{?p?y^Ih?uUuuZK?!wIoQ|%(X&!qbp@N*o>U6g4T*~^!u
zN*{Kn`}?l|2tV5I@<B!!&+A2rFg{{f%f3vCK}?2ke%WCKSk|lxO2W{vssR?Ee*0*M
z07a<vEJ|<)z-l0`BF-0+m>-b5qTma-|2!P3Bls9XJWeo>|5r4Rv)kK7D9WxhX7H9&
z?>qPv^SYNhJQWjBhrCWWTcBiCp>EIw{c}%P=mWqy%;!c-)~}-5$^*JX*TT=g5Rzm>
zOtJptcr{T8NU?sb;>^OCFhWbH*FoUP0wD2Z$pUDovqWK3SPiH$0}-SPem6tE<IxUt
zNF2f8Jt9vfw5TY;f`tAr4BBXe>|Z8Qgn@JPSO^1N!9h$_JG>B8-8ZC$MV5z*k36G$
zOW5Wcd-fS>>0@TfFJBt2F|6^SK?KodrXapDY_D#Ra!~Js10R-B;T~sW|3_F^Oavzl
z$ap0!AX_%H^eJ|=H)6Fn4x1O9)69qcGI?>ShV126$f3b)Ky8Vk6v@_jTKUjOAX7@=
ziLQ11@R)e;BAOeHH?plewk=4fG6f_cV-_Z`+Z+P=Snm1Wweb3St-)c_iu-_c)IETk
zwEY#>7a_=mqI8X8|5TwX8R-s@{}4<4WhK!a9J4di1<?p(S7hYydHr>xWhPN5L4U19
zpR3&9?u{oydlmm19G&e>Hitq}!M0Pay0NSecbkS*N%uqeUxsZI24d@Q<`@m{7)t!X
zL!T$AP)BqHj76~x>^HIBEB3R<ztwr+>FT2Z!jn$#fgp<2kiUDI%YB<G-?{x@6o#Z?
z_jh(^Y<>RzIj}k1ncYGB{4>~^IdLb-SNAra)xYr(ZsA|t7`O56v5T3@NCAd$NPpy#
z{?kI|uX^&oR<bEO!BNNHM4d*dU*<{!!O!0z94ZTcd68XT5(n{|;J)tOV8%)JrCOtL
z#RoqDW|H)v9Ro;yCRCNuS{0lsFD;;wK6>etM&lDc{VRA?z!I<>@Ps_^McTFqlxLCE
z*1KZ25fS0iF2Qgq0Eh==Ef#velvy*@g!#kG6)<K9?Fp&hB|Wb3?pF*=hmb-1z2pOm
zdN(+q^d8P?l}Zzl=7g;z;IaZznGD(6FR}ujvm1LBfpHebW77c~WHV%~_o)AfwQxIg
zK3?82p@~Q8{)pp4bMsVASHzyLE}uUw$1yD(#nM(!l$SRpd)hbOuf0jDxKk%y&crp4
zF~YY6X$cMnqBvuBnrE>rr$|`-Vcw{Y4fdgGB@k@QB&5uuBuFF}o&kA`U*VxH=r+di
z?q&2zkFV^PJ^9DjF|^+<O^{Hu7e@HfEIyHl`*~H~_dQa!K-+cSRlF2@4l=!!GyV3F
zOgRCKW;irXMSKXJJU8wwJjR<s@j?0QO?IWKI5>DTGSHn=b0|`zI#SP)j~JbFXc)5+
z`ZoRbE9BwOU{mpK)@(z(iHZ~pO-Xio3j73g<mOL*(Gh>q;NDAr_KvWal>_&FRfh&|
zNKPjEI`C5<a|~LYkE!RQ2GQ2!O0}{QFJBA*Ls|nlsF-H|6`2AW5lH%aOT15>d_#?#
zB5gp^MP9~2V8TA}EgTxO9R~D5s6Vq3a|AV<RNK3(=o?kZ79k4nK=c`I$+$(OEw(6*
zbrkd<AD+VYYQ0Oi2<yZcWY(%6P&&9`ia6L4z@MW$R1g;iia9n4oYR?|T}T^QyW5gi
z-RA}<zq)0Vz=)&G5WuePUy@wP@rgDH;I}V4R#^Qi){vP-NYfJ|N?tdV52+pRk|}fH
zl1Z_WKd=GE$K6#p&^+c=kP3Zt9uC`!w{hMZ8>266LFwLcqgzS2pxxtQv%c^SS@Se0
zyI&P`^g&js_+GXWUSKNDhOOX+|FmEa;q7M~Ifgk(Q942cD?OD{w{>q71v5{kjRj;#
z$8>&6L5OxQy@rF-F~qTl5=AyaI{J7IIw6vh8`*KkM{|E{vf2T2KPhlwkZkA@{=B!*
zr&_DR<3e|nLe~Uc8)Ams9Qpe0rBb<O1mx#7(OrZ|<?S;c^eGhPT!eWKVKRV+7G<rN
z@^9r>#2m+kW^(kRJoEBtd;(SkC;3XoCAT6Li|6fY|1hGkGG>mH&$EQx)j-0zsH)FR
zk*A)EDnoBhYJx<R7w9rIbmOR}>wR{<r^<!j!KNsSBI7FxKzq)uM~UaB*)n<S=vR)L
z0zFsODpVWNo8hwc%<J_-K40|12g`e1FZWIQO-=gWnDhtr{ID?EvotECs{}@Q?t?df
zR!M3XH+}q4TI)IdSlzOc&QM-;96K`?JwWW-erO>?TV9JZEO_<#Fs%KlxmEY7&T3KU
zO|!BV<F_i^x2BDsX;0terXQBD$8{G%&MQNen0wcnd2>*jVZ{B+ZUS5e3TBg>mj<1Y
zmiy@Hy|Xz<KYO|GJmzTE<^Q<*GGrTk*4Uz^MMk2wu_bo#Lpm0|H&x~+vpkt2dY(+}
z+i(sL^%M2Ziqh!JVC942m_h-`d{$;75OuI%Hw1_pTSyX|ohJcA3m9mQRRWR>G-8OS
zTT2tg2tNye%Bcr!KlCM#Ge*~wDU2_Im%Om5o^Lor_I+l4s>J<Rc3Yz1J_Si`U!q}C
zRH-07)MhvkpGn!uBy+r6#p-qDkF-KA$`qkkx$l2^i{ODoV@fXkQcI`&PW=e`Q9Ffv
z>WVI&vP&@r0yNEv9wxgvfkR_rTRT~2=Zd#(1^1My-o&&*sPP#gLw2Hn(fohW;NDz+
z_6E}!v_jEMlmQ^pf5=x5DOkWS{{aG;Nd1}&(40hG{O967pX7QB-c^+E0%AL9{yEj>
zpZqxx+s*D2%sYi_ul`qMUdg;BXVgL}4S?(<$+sWj48&V1VEco8n>YHuBDm#kqz^zm
zCS~))!8*A@Hofdo*A(6ymZW+pr@n=K0@mn5j~r0mg_1c^?&xe@TL4Ncok{`Q7vP(!
zLJ*`Ub%>%}MD}t+kh?M5WgpspBpHxEtbi+6(GDqV8CSHGCD45Xem|1xpQ+z{U++i$
zuL#n9B#slby(dHS>Pb{ikhuxMoE<^B%9GjmVUrGd?r;>7_PYVI(g9tSL1iM@qr_UZ
zkFUykdOdaJ!I^6&2@dS?6nG&M2q7%k8I71<S!NSW9k<|E`&vzcyiJ1SO#*ABnLZxa
zIgsLIvROWH|1`!$c;dHw<d=SIbJuN(tR6{FQM~Yz3>G?&ZYijHOaoUq?aOWF3dcW=
z_M}WG{rH7SapVQRC~i<s%<9W|f)%7A+6<|4tJD2!w=Ds%_o3YTJ5awMMuEmArZ{i^
zc#K^XTmb+6$l{ThPzJpzgXlKm{!P?3pN;cGrvOD85Qs`>IAa{7F#*CEztxDiw!<Gn
z9Y20dmGj<ArkB5HW&nBdfR@zv7}j~ZWBO{fF0P%@6QXlwJSGlECiY2G>0&hG%yQ<y
zajx0l!m;VIpet)u`Ls`H8Ne0beRfJ7QUOTjy10#1Z++ROg&b$n=J7{wRGwwJZw@BH
zDls^B6X`1;c!{UGD>R@OeUMpxw1URGz&@C3e?@2wDV&E7)x18c`tIGgF9LPANfcsD
zgZTY}_{9VGOkX&>DXne>@bOF{39I^MOd?$d@by^x0IYreHz(aDk&z}5Dkc$_tda<L
z8w{+H_;?gS5vLq@6e$s>0(cbhBNYK9nfh1&#5sdM1Z$2oNcIFJX%+KX!1%K$<y$h0
zk~hzCFN=MXgtYnw>RaZcj^YkO!8tb24ROB(+KEv-4N(b9IFjw_hVt5pq}6AR(iEHn
zfIQGn@*-&}iaVJ90m>~E6cTVa<>c7{fsx5gN-A8I`;z}%@-iz=5C{xO1}UnLSni9-
zc@-3*a)3#mf)6N`$pOjRng3I$XPFROP>91(o0;dNsKR8qFCk}@mB*l@!c-f9!9nzn
zK?Q^3GCMCsY4S6uj5#Y0S!q(GV2=jKj?5t^CO4@#$^PGfsz7!u4mk-q6{X4lA!I1n
z!~SR)UO*NVjvIGDLcJ@bG@hX}nnu0jQLt@Jy`>y?W)pYDEq%*5)If}NkA)Q>b*rA^
z>}|{hs!jKvj*q0J2?xC)K~0W?{cgs2M{$g$-&x|VufLIwSL#zwzmzzb)}z*U-RZ#`
zeiypjXYHk8hUYQ0bTUs1a%1}G!o!=LN#TO0k)1@b!m*szCb{gFcki1wQkos+d|_(S
zgO20C8Dt@+Qey_MeNL=h9Z}8Kq2=X29kDY4axlwL?3W$=`MS)N2P{qJP)+B-0&326
z`GbsC;4tLF*lNY^9*W<S8a86CUh#xs?`c$MmI1%kXDW?R!v|wb$A5&yS7XRla-yKs
zj>T3`%p2etdT^k(b**4ck!91cl~S^ks;<k_BFWLRqrKaN8Zx|v7y_{rHGNsu+6es$
zE>5#}(#^eQazT$wmFk!76_m~(Ii@E$wk$P#HUZu_t?~|OCq*p!NGio)OKf-A=%R?u
zy%wQ0*|ktlyc~N&_gJL-r&zf9u7E$3T%RB1hHxw(bC6q+3xypIHaX&%YkDTeO$aSm
z|Kk4WXZsiD1b!pk%urZKY>?GR2Zz}zen3MXX&DRDOroC^()!<D{rzz0b7vSpq=>FD
z+V_3GtHr1*SuvNs9KOkk0O(y2sf$&W3t=Co9Ax(s8uyA<0u3(&cEgBE#8JzHQMa>U
zOD6)T#si@C`Lgld$6p9EKq4nb!i*S3wGR{ee7)sYAz@I0?PsN0*Yq|lV=yYa>@OTK
zZ@V;XYYk9o{P~5#Ufg?>Fx99hTTQ+vCPKqKTQ=xS(D+zsvme%a4AIbI;wr1aT*p#}
zW`6F`mV~BhPHMqC6zb~kNFPBiv8;9YW^4U}Oq?mJef3zK54@Tk?1fLf#hvvOVEIYh
z)^Zl`W{g+y^lJ`ReQ%Vncd@f$E&No12BNAC@e&7UaQDqb5LP{|`N(D8dC@YqBiqkj
zS(l5l#{r4Q44-10Ucpz*p$lItbvBm67TF#n7Zf+_u&&or`l7jaIJq3|IIAwxTBod0
z6=r0M_X4`KFRk*XELED@*hU*GZA+U}_RWCJ*=E|UcL%w;)2mf<7v}Fd*Q$7s(@R>s
z`eTyymWj;t9xu132x{%vgUkgU79Pi1r(~@zHhH-0Hc%GLcCQKSY%fe=%XS`ow!XXS
zO{JVBQw}GmPIxr#CFZH%k6C~WCgaScw@UL*k2B52ICWt0`4>E8&&zM>E8GmjL4ED8
zDL8s-vb*WbjB7Co-LG`&q%EC%inFI}Ec1F9Eiok8z2`WaY})Hk`xq^ocZUX#n(Ery
z9u}`Ui}MbiGCsCGK549YUiuF$3$%Y_YIy&Uc6w}PYtAd4;dn4__@W+%yxwVXRP|Bq
z^tvhWz^B>i(EEEBBVeZFhN7PF{Zp6C0CfGE_tTvj4NfGp53R&g9zau%(Nd{N;%L<e
z9g;C(ou~1mj|x&_@IGgC-)7)!k1xsy8s!cjOfy_)ZCei>VcUFCgWE?bNN!JNKwNc~
z`UQDkqT9$wj{5XTUQ-c;dKMM?4Br^vJ8?dO&>BCaoh}qTERMxfoz4ci9)9F^=54gZ
zBIYBCPLm&<7a!#n9o3HRciyO!Ii1aQJ+$U`<|O8ePK^)im!~rKis)zTF~(W1oIIV~
z`}Jl@Vm^%MqfTRw0js%R1TirmYIIsi|7f@Ij@qr7rCz*#?)F;c`N{Je#QwP8ud7A%
z%l8}SZ~S#CUSd9i=(NcG(LQ7IjmqlNS?~$}xcuMgL5+V)|7&l-(0;+U>3m>$24#F;
z0RynykldKCr=-pYrzV%S(fho~pC-*Wi&d!}EaVt0)cE`i7zPSe1`6c{3g<R~)()0P
zJX4bLrICN$`C$3p=FIbB`*(M7X2*NW1%8x&zq!rLkNkB6(MNs8&8M@r|5NA;ey|IP
z=pd)$sAOK{gZ-I)5@{zrKpN#k%I)1r4i#9)XFjlcOROdaiWP&3mV9p1qGX5;4yz9-
zvo+d{RG238*s<z6kL+P((VYP}3w!olBV7#oHmM=(PMh8ugrC|3UsMZLNp^WP#P#KM
zW;4l~zLqy_0C;amuuZ;9q)yfl7%RZb{s8nkVFrg7e#%Qo$}Z#}{vytGFeS`kH1<mF
z$fHB-%?g6H7=Z<%hA7|aV*GQWyk8bGl4RH4Jj%9Ma*^Kqk_R~-yx2>l^DZZ9^m4(C
zVDhxoB*;SBJ2-(Wd#bXAI{{l?E}SW+7gRsTl;8VRN_#OBn=89lZqy3E&JdN?J5j@(
zj4d^}ZlO&m7j8ANu3f{KJS{mnZ=p>fXO;88hP^a0uXf_UPU7_ZXb%%6QCery%Po)1
zi~jk&=F)lIJzQxg?G>UaX_c}i<sDE%ROZvYnVHpQlOf|(^Ah_f-jhUnvz6Yy+N5oQ
z8DyRA$C=#~1XYsH`2AY1Q*YK{Z`N2hCXF6+hOsm#>B3W;d?|J_=Jvs9Evs-rgoZfj
z+;45PCEpi4VQa3OTVAy!-=Lta^cN~9tT*8d>5e*SZ0>980H*t8y|UT?$c5iyimh!7
zqYrp?B2yimH{F$kVh$G5r`sDxm)i}F_3fAQd5$4=1Qr@t6Zn3lB$21L(X4Ay73toN
zVB8+rF^<ia>)(#-9=|i0H?Apr`QnWI&bivIzRm9Hu2bUrV<!i2HujF(gS9OGs@cOq
z>MHIw|LWqnv2Ed4pWw*IJcVe^MeuGkJoV@i{9_wc-F#;KwCLnpoaRC#a6Naho7QSe
zyyN44E>v`p4efJytu~Xz#L{Qo7<mN#*eybXlP?mX+rPhN;>9rCA0lpok1ga|Ahx~>
z)0rTEbyR%fkR;hQurqd!#8JQK3tR5dV;(jO#bu|0`TmKet^ba4p<W!R2_xWVPbQz-
zL|PsQN!-I|JRP@&3g+mO$o~u$rmi6~W)m1{H!lE@SEkc!Q0u%T#6XuwrM2VQbfvYb
zHR|cC;Dj}PXMh}yaoo`8M4TD<kmi_62tcjrASuUdQ2Rl`>8k9hjw-5E!}!>o{8;F~
zgTLrbAJi}M#2uPkc~xPNskw!>A&?rTA5+_R?c9G|*Ku8^>>kcdZpn?#p}og6|4L0u
zT&;#xLsbQP*dg00&Rv<Er7YQH7KkUe_X5ittvI9exJ1fiW@W8u^GVO9XC|o9l$Stf
z=RM+6eIhp#@uNM`$5(70eBO^{vmGg9K0wix2Rz|yh}{aafAeXYBvD(Kdk2ixrOH<N
z)@83+*9>(Om9qq>;fr$apZMAEwt2(CWzp^L9QQnt)H6%?pO72Y#Ov1h_MA)P8oBL_
z(*LKfzb|y4QDaw9f`(vo{9qRigb^>IIrHexORan)T1=D?FWU2e8`(BH1a-(knVpVB
z2e(@ct6H$L)puNb#by^i(Yeu56{wMLGQ=F8Q#KNkm=cm0OXG9uo*N}pG@6Z#pyJ=<
zTCD5#By}c5Q$A1J2x<fG4qq_fM{BMf5f-Nbpxi1LV2OI@lekVqpEFjE7jS2+>_0jL
z-0^rsbg#tWw$I(AIrc1IuGxeQ<izht(8*YAt%ZAUR2tceOE{>~=gh`ZT)yyn&!$TO
zP)*|wYuvPQDxZlkN7+b<b=^J+7E@39Kzprbmi#jc+ziR8fM4Pj3(ggxBo#%S-i<!?
z6*ZO4bx$2;5or|>g9Wg#-=bB>N~dO)J5-{Y6i-{NY^q+=bAbhx5&8JJLRLOCv-}}&
zdAc;(Y86xGqF<!C4OF#~DQD4$Wc*wKD}kC>&XBcgQY7tvAWNv+$LBS*31qB{Bgbfu
z{htSW|F05KMP#t0>IH%GlMX@B1p=iS7G4ySaF2E^Z!>%0`()ET`eFC}*w@r1k|{R+
z;6z^<l{-~wt|NE3k-1e_!=I4Q|Km(kn^<Pp_=6igLv-#ldDZgo*njPcWz#Eehyh+m
zlqGYNHEsUP^T1lVPrCnOKDdT6czXI<ElW)uWvR`Grhca;mvITkg}&<#(0olBXKA_I
z!9seypq{bz4DOpsns?wLHvVm0M$akSB6dnHbpo07m7whJ7KT1`?sTwKL_N32<|Tv?
z@d1?%%<3rGYu~WspBv;4L9wTf%-$${W1TlV7HUYPmJ-F<lSNH6v@zIk@Y_|66kclF
zJJ+C;7Rp%7PbO2=<iVFVCRct;=So27`_ZY%iz@?byk|g96p<S+U6)^b<TNw*Ph{ms
z=D&Kju7A@=y$JiMnsyNus|S!2bSuZc)m?a3&P{<|avjF@gHGPP_Z<><C?qV)Dk%(M
zk8c33JsK2>QHRLCkeL7`wmc$nME72i@}3Dgz=bq>t8%2?r(BKoy?9smT*_9Zot8?c
zAKE)S+R7O$1(H5=hjXLp2NgTRvyL3u1u!1vl9*Gga9<q*w+XWVn=V~)5fl+SZ!v_A
zuN|X-p%fgvJ8x^{G{S5N*YKlOH{qOSJ&3Nfqg$s%l@xLczO?pL&sZMT;(L4;)l1gk
z1r-nM3-n?XZ08Iii>e_eVx1nc_z6s#MQc>_)6E()TxrIhm-M<#8%5j9ZfqT%I$X^r
z2-I<0Idja_<tGj;Q&!fy8p{pBsIe=rs1RHMS<mi{#jlhzT7mhst)o_@S#Ucw&KJ=5
z95HR_-}Ga<ch4z%ydDrgT4fasa@TOx6bI~DmpII+=?-eC<=ALAm`!n4zZ@+gGoSWl
zvl>X^_!ddT(@e+xETbcS!;gXKPMe2(tg!n}G;%Usw@whO;cGAW#BjQir=v##K>v^!
zH*g_p)O|M8{U=j~h%i^g=qwD5-5d)LRkF9@2cHYK9F@o`H9qr?hc^vCne7?Dh_u*B
zM^<O~KKU6cs*O#P)YORBSU}iz!xCOTene~+cdr9VTEumFQ+289(_YwHfl!J~w~bHP
z@XRrZsUJH*8uESpgE!oGBvcz4CZ4Gg(dX79tehOU1XRWwCf2DDk+GEkR!;f8zQI{;
zyl0Z1X@z^wn9A$$TXfn*Wvrm{kA8X3>^l;^e<Ja*0Qe6rU%eUo_TtvkP{ai&7{Li^
z{K5LbH2q4o_M%aIB`BeJh_MU!)_5`(y!MRQH$Ldirj-L<7%Or5cVa_&ypt$UPFw^r
zeZ9TDkVlQ{<fW7aL2@7X^)>7DUs!G7wf}##y#-WT&))A{ym+Cwwn%AlDQ*=C#oZ-1
z#We+jLyNnXVl5PR_W;ET6euM)gy0e&NRR-5m!AK5&b{Z{=Q;OX_qlhiZzkXQ%p`l(
ztew4QPxk)J*9)42(<mtivz{~M3!}CQo8LC$X}lX`J``r59}fjPFz=$B*4#JC;5~iP
zs@zF?7lf3Cpx0b1Hu#^P5QOQq5W7T3nzN{c4!Lotgp}49{PRDS<?Cjr|G0(n-$fe8
zPL`x;f9h~9Ys}b3=khXWN~5WFB186Mm+oSA{!Rl-xDQue4~_N4A%t&_I&~5l0N$LV
zw-ByVk>cwe5%|;%Nf~-y=W2m<=EqF6PZuJ{eY8?}-*+i*@r3iNV>es+_LPz^yU1tF
zK^>>4>9_jm+SQUiLy}*q@0r#~su8zafs}Qt;-(?)$aOu>6G!G>%L|mmcRTYkBrW$q
zo^k%KQH5;$Du?YapnQPXaA|X3hm`f_d!WioyUXSqUj?b36Yt%>nKG2pDR6#~?!V+y
zL2|v5i%%U)Iu`p~yDYBN?;3UU<8AJ;m3@$mJWax@0oI>B3^r2H;-N9Ddy$YY#$#1@
zJy200CI#9A%e77ubTp0V@bwQL1`C92%{enoLRhTAVTUlw&m^!|S(juqVOd*v82J5b
zfWKzY=9zh}I7N7`T!E2<9V1?y4!0p^lZSLf%)X*`=@A1$KmMF+@G4Dus^v#+tiNe%
z@h8GF<bo1ahMD>+06S}pZ)cWoC%x{@3om{DqT~@cp)dNeSx_YOL_h>@ZhYd0pYWw$
z>KxLbDQUb6?BTcG{0_9=#dSQ~xz*``SH0-o!*#A;wzHNdo*`ySRsB=Y%y3XA<9;cg
z^G4}#r<V=slF$3Q<9w{+u$i08ribrrJ`I^oc7#L9psu7&gh8a0%-!MVC4(~0*^i%J
zireb<dzw}QLgr(E0RwF^R;J5hGs{r=67K`?nB7>NQ$nM5E)TQJppv|sYlk$&ORmF7
zo}<5O|BtufIkd?+v}w>neoJ$XQ!1cO`)KBjG&eqKH4iYFdy@QhSHa-}n^C45mn3Z5
zDBBMit-Ch#gy+bj@d(WGmxg%5j=)a@Rg^nil{@tRmfjgx<vO)Lx-)|6f6J;X7qIIt
zQ~^BC4!fMLh?AN`i}vH}{jBD5Uo6na;N&;?<X*14LFe#mh6Qdb$Ue_!Hku&CNA?OM
z!{lX6Udz5izAlbNm2?Sp)6z(*^9bZ}I%BGQJNqOzs=1+(PZec^?AQIHH&&PVWC0VO
z?jj}vo)_`aO;X40#0(?>$aj_{?f-$|maor51J4)!s-_o;w5R<br^-&W@ulaP7;#th
zXNT01!p}XJdKxcq$}Ah{<X*>?*dUY946cA9;!mKi)?3e;W<s?uyX~hl+07o#jG)=0
zE-=WMBk8BF$coD4FDv~CE7mfxi>@YzeLR+zhL6k2j|SRj(7XmI-UmVEs!$^&Vxht5
z2~T@eI&q;*8f(vN*O{zY%DIuzRHB~nH(g@;sddibFVzzZW`Kf>bdlJGhQ~b47q^M$
zPYyM84C&7+p=D*wY)d;IUVQ)jKtxpTg`CFw2V|7qZ}2GH^}QAcGzSCdy&1h3-6$9b
zH3xAhH7JCYUc9izSH-*kp<<8mf#4znP%QbFoA+ew=T+x2Lisj#R|yE5G9ByO5?9YD
zgBBOzKpKKSQ)x_MIvBlBB`mQI5n3&E#%SdE(u4zP3ZAFZSip2Je&I}5@(0e^>Cvd{
zw`*J}m!J`)XdvXq)*;9v#_+2rNRK8tmy-93Fu}VxOrwI}>8JnBwo0sQ6QLO$m$nE-
zEmAF?7q%p8nY?<&TS&ptupPGI-!5r#A?k3?IpgJm&9?<!g}~(&o9EKTEVo3vnJ=Y<
z#4bM|_w;|#j=_ki-NU)WdQp%`-}gT9ZMn2NAX~SA_^~NAr^)r7Ve9i6u47b-#fx^|
zwvry(FNnt#<j&?VR*EZ$D2Qosw-*l2Mi-!dm*r1<<GeA_J=Et42`F)t-L13xnY(QH
z^Cp2p#sL!Y-hFnw)^bk3fwDkPzyYWi<GcKJ{3_mN@ONXZ=E$tfpOof*PQ*_{h2u0Q
zY5tRBR>sr6%PRpOzt8;jEa=-AsrFSA&*sJ0j(Ff(P<&S+Rn!EFfDxN~Oy9dC8Xoe3
zH<k@=WB&!F2rw0$q0eebV#rNi;16hr_N2nBl{9{Rml)g3BBO+5<(y?A@Qy28{L6)x
zqnj?|yU^F+YqXYrrsJ`{n8_|#zq_+G1h6fgk<H80sV^wJySnep{B{41eQ5Fyyn6Dg
zUE$sN{e7mdORNokAKoYYIv|^u{tGsC<Z4l9L>D}BOz0fgr;(Axh{fRuP3e9H({ZB{
zW6Z`F!?p{l@9{ZI-u>_qWwS26_CzTzAM#Wwt}0)C!t0N1Q~wM6js9;E1GOj8hmRU1
z5{%-$==GN9R=nX`R2<ERa4Y@WBwE33HNi~K<+wzbsd2bKZ%e?1fL8S5j{795w9D~t
z;n9L3-z&)TgwLCrlTr?!6;w}3?3si|trjV?7Ni`q6r4{=oS7O&3z~c(A_?=Gnt$M6
z%QNdm3PBfwosp0ochAR-UFq}cMQ1ZVgm<kjt_>3D{(QgoTgPk#$Mp$1-v)W6%A|j5
z`!oezE)RrUNb<3*enVkeN^Wy9Q1b`Nd)&DV%=??gOV>N^M<jwp-KrukN(=HNB!pHk
zych|^d!w=~r0iM}g|ZbH(U6I}ssdS41z9^MxXIL71=e~6`WDYlnlE5_EE`B+$2e#>
z=s7(ZxLLs{=ID5o)p<Uo{f<k2=H{xEAftHg<4S51Ut#CEY-0JZkF|^;M>wT(ZnXF)
z2zTD+4ek09`vuGN{+%XiHfi$XN#W7rBGg^C<$d1Np7eM4tgd=eYA<s~nWIacWg16|
zn@|vuy!lP-1%HPub?1}6U{~}`wdG~`r_ZGMe=OI#kU{&92>TEP`w&H>z5rS``=EN&
zD~NIuur<kvYEY7?Oja*n|96&0Ktuj}?N#gte)g7Ba+A0CYG1JJv_jQ*<iDf*h18|q
zE(A#Z(DW~lblo_tjHOx@v+R=kS^uWXE!Pk{yj>~FA09cZznneO8dBoRI{U4;C=a;0
z&ZQR_sOgBDni@!I`z+Yvm2Cy7ZPYndQ%l^6=O&Z32!pP#3mz`vqN;2@L>&r=f$&Uo
zr{9bCsQt$G)!I1%#Ysu~zMSOf%Tf!6lEf#0w1#DoPZXA$Wi&P8o3$KjKDn}qT}kfH
zIlT+qz0AFEGrnwHD5bO32tAdT3zB<Q78`~%T6>^rd@dR4mqOqhKUuB$9i-IK<13PQ
z{dqgrljIkI9;>HX`rObVCQ#0KhOd<IvJg4xBtnzfpihO+gj#{>lU~zr{{CKxWMd_5
z*d%hkkY%Q*Q8$JzU~J7eOVqh?Xkbf(@qXdj9t)IS-x;f4@;p^OpfqoUZku6oB5}`+
zO!up>;V&smFdDy*K;Y~L#2tuxvb%~0IUNYhTL{80)ok@Ej}&j`#G1|0?-Z$~s<YVD
z+lh_@46C_#Vjs0><&H*BeX|<hQQTDZg$uUmj{Z+|B=x5MA>#!G8<N~pdX}hZmpz@H
zA{3)-UV?hD@A4tcej0Gk@l@Wg5o)f#J9-A1E`LE>f|I&z%YCs1iUP^={5o~`3N50V
z@QeYbUA}bHRrabhDiT%Pe3uE$*Q;T&%S%gEG~!TyYc$#<yr+*by)#;te17`n^BQDZ
z_25~<s*Y(^pbJ{<{CQI+3DkTc3+8MJkAw4=ZDsu8n_SKu-&G&os>$E-&HH`@=q`r|
z^T#<?hv~LW(-k)xiXH~C`aHNMlfq`gO$b)#v4XjqIx<(o_XUDA9TRXkFuA8>Xk)R8
zgSC6?VP0;yVh^)%#&EZSk6<QlOc%tT?v3G52NU+lxg|jz)G?{Ul)DRIf^On1m?roK
zp1D(`H}{z^Ny8Mn3t$3=Vm_Es__>%tnCfA6-Ssf>Ln$9k*E#?u-(-Cdu6DQ1A;ATq
z4`l~#QOHaWJ*>JLwO`Z~(%ik=vjAf}<Tc-$V-6<m@j4{Cpz+7F4bC*Dx}fmKwGA8Z
zp*APEAos@s<Fdo(4|zTjD%C!el{Qf(9WRU!{nhKavqFqK#0B|aNq2-W<=$akGpBNa
z0FD7t`#0`f{_m62$`G|OgRe5o14ax0yj|2AQiaEZ$Z8HTDgzs&rJmwOt++nxmZaet
zgAF@XW*@ot(-_vu)Zzh2_2_C#+=KpXFYNm4g7Jg`3T?=Q0rDRI0|u;koUm?lerzI~
z-flO3%vkJ#Zg=zNVob3Z9Kp3PIX7~#|Fu^|LzY9bO3{cO9+;jR{RLJF<08fZws(l%
z(ev{i+|yvQys=x;36pY&a9010qex7agMIcJcrNkpOc3wb#;QrxAQCha1FDC!2dA~x
z2vX~9ejhe5$Ry<Qw6Ni=_$eHR24pbw&_a8AR5t4j?_%oUoOJsi=0KfL!8lGZJd6j}
zk00RDK6+>!az8TEsoURmBiQ5@K}T`35h9GVJHlMz;=VtT42Dp*3O}JgfecoC$jSN@
zUpK=c`vrkNu~N4v%$T1#HPqK!=7NO#9$^p5p|k<fC-zEq^JfOQ>0yF3m`+wVs-gRB
zJ@XiW*pfZGzwY0Z(mQ3CxwePk`GovO8!iRuN0#F|pVVA4*Iwgt2VtcnuBX?_kS9br
z%Y>!f$IaqhAEsHB-Hjy9Cx?L71n}kf)0y6f=MwqH!p!bCi?8Ad*5=PkBDfZ|3omID
zN@|`?#1rHU=Q!tq{pN>Ke>e|wI!I)B$JDW}y&it-I7XR(!`Y<%>^qMVnPLXZ8Q;u4
zwNXslO}PTma7F#ApmC{MA#}_KVGr*SH#DRFrXN^XG(dKM&VNa*m2<`meMq0?Y~5>a
zxwot|9#Z-<q|`~MZHKL*V7^n$)zg&<R{(FbW^^r_R!rTt0m)#{gX<`o3yOo<>IW-z
zploe>R7#gUe9gXk^4aAW^&75mj-6;cUBOhkkS@$p6sOXPuYMMBBJ~ULbV+0vQbH1H
zVfytwe6FV4J2o-Cw}v<5s6Y0{!5n{uqI|>>SDdBvZ?Sjh4r>p5FXx^XB!DA8fQ_o@
z;+E!Z_k(Xt>(ii5TQt)1o{I+yQiJfXxet+O{+_UarBf`hv6ud2`Q87jV&fqT=s48U
zK^lKX6MqJg!N}nBiz&K+-}nRDjY7z@Ge6LMV8?gpeGxd`KF_6NyQb_K;H!FgsaNu{
zC@3Zw{6<kWcqZTtKENZ8Ll8}$7?dy9n7XZ=3VS`4xK8vq9vsKoH9o;9KHpr%2wb-J
zS)Y0Q{#)KwGfq+atAple1C9*X=Q7xNzl;we+yhH3>aPMWM#!NnBH8u@*8}P40R9ri
zTlwjP;{}7klUsZV-mZ_QCD6C@72k-bHKGZWG_RPi`!nuW9^oqZ6~A%p;I3RrZ8Vb2
zb4em**ue)&=TOaUtaBF|uVWc~i>7*px}DS3AuYbG{<^QUealyaR&7`zY*>jx{!pB~
zDQMWBZP@Sv*?e-Z5wxF7M)I)+#G#kFE9?Z;P)lP7LFWnfhNH@cqvF{f;oO%XE~~Fe
zW`3DwSK;qv!#>YQc4_r|`V=M|n@>H+|Ab12ir0qQ#F|*c7di4W_9NF$mZy_;#;ir+
zSLzA%bHOKOHYzGsD%=gtB~JsIas`g=S*<E<Xlb6f+P-?`nbxXy`g|rUOBdi-K39U9
z)n54u*s&qEK4TOX<;mO>ZuEMJb=uAHSfO%4u0!3(DzZ1PZou#%#B=)N^u{hRTnWy2
zN(z@Ye&(N=V@1?-H9JmUyudeKIKb@(W)$5`o3Lm*@gfwa%hj=4wCu3#aC8zBX`Mgb
zU1`gi$*Q~V*4>!jsc4lxI66=~Na$2IcFqC>WC2pL013~#pg$hP{zQotKcC6S%30uP
zc0IU211hU@fn`-_?s$YfU>;l-U>YI7c(8vs9psjcUiRCqQjI$34(-a9V^7`0uQ<DG
zn37SkA22se>APF|_A@$aE5>3fBG|02L!lcLE;N$!g?`owc$qtdqczOq!56hI^sQda
z;b@PRTv1Y{TEcX2Lrw3o&3i$7{n~TRv#R8)oE#y^z0ST?1>F^GB<~nlD4=>Lz9GWH
zU^_P5&!fXP)f|s~_AYLEv9rje$U+XFe2qa!{O)#}TD7qwI6~Kcl}TAQv1wjTl^pUd
z6d~@*rp!njZX}keo^=6z0&b2&RHmh$eLH!S4ftaGDz7igQ$ORD+Ox_e)m2=<^bF84
zz6sL(1~3N$M*RUj{#_qXV7bv5S^k*}!7e^?wPm6V1D<ich5Y5g<Gg_}5$%OW$oujm
z<N1BuyD1xb<(3F4pBLjWC*ztkg_^UtW1STTQ$^<)%>^FF`-kkAa*9v1l6ijKQvO5W
zD9#vESLomL-8*X7;-=dCKhvRUuXoi3x)~<nCcWGma&C;YT)x`1U&h-V2k&$Q^<8=I
zzFEdREpz=U@#9>2fvSAQU$(|<;Ed8Kp+48VGkd?>K)vis^-J_nvuWqv!q>~IKpl)_
zwVUOBa9mlnYqLb`#6_^Uim3~U{&*(ql(lE-rI64i)%7^~g4xn!L#X&^Z??niCf9D>
zCg4*hK(`1*w*dXkwO0Tsd>?d5ef4gm8Luud_Od*nV%LRKTYsT<PUcnro@NE};Mqi(
zr1Z?f`1biN@lWlhTglfbY8s2%SHQ19NzlDpv(qC!O=n16nz6br6Kv}InJtcPN%60>
zNnPpz6;Wwr;0&USDK;81SyOC@L0=pE#-Q64boIDVH>jv-;%ecvzya@_bvE50YrOrZ
zwz2z%Ob~6;Vz{@d-L}LGHh<Eo@+aM5`1qm_Qs><1ur+W7{V{hVxA!u`U{K$@Di9)_
zcm7dsMfPxxd~=}i5_m3H^GbGisZ9SWe76*AVJ=34As?y<6XU02ARP#P*lmCgN610d
zF*(BAVH9qhV#L`bWB2Sr>$~S*4E#*lgkxA;7!SK~V6XT!t9$5*E#tIn2TE&_gbmho
zD%?4z#V8%KqlMM_|FaU2I$X!>-S(v8CG5b#%h5}j<+}leL8Jm80mszh(x*#KU4RcK
z10&wmtmjG>=D<&Df^{%+x`_o7kRI`8kiy8tR^Ra+l?^HG5rP>WG6*f7badS_!{!Ug
z=*jD$kh%J6h*rA~JjA^yuM%3u4#IK`=?ZJ^k!%~gQ46x=yGMBHaCZ=N;={8s$BBgV
zyni)g@pakqt0MRFXA(!AHHDzr-$Yv^JfFrL3`Qg@r7~__<hCst1Aa2O)(qwhXo%_U
z(wYRWG5Ghi{^Y*v1|4cJif-9o-Q#Af5RpMp3`Dw4W^QIh?wasl$rd3v?yh&%Cac*M
zkcz-WunHqlq$R}S5_jq$0|_XE^@Zy%1$CW(o+Q}Q8w6>*Z9MZm+)%6TTJr}qMB%|-
z&1q;z<b#vUDa1%(aR<W$VA%Xr+4t2j;}JA?Y8b_#lifQoBDW`EgxSPn6V2sEsauxv
zdp0l+H=LH_I#Zk~+!WNU(e9}+w0iQq4BkTwlXrVKc){30D|_tcM%Y5Rh<kI-1<yNJ
zvd0wWf=+6~TZ|!XQRmY+htKU|Ofy63-%Z>gr+eiAOCw_BM896ghQMf~7sb-I-5wyq
ze3|oIpUZE59eC<S0<9_K;IbHnpDOSU?|rV|XsfasXu;PIp|<f{Dzj@nfHb!sY}Wf3
z2EAQ|gLD9!AQe70>E2tu-Hob@?h)9yIl(6aGmIdN>d=|)=kcc!&`T%ji4(klvMmy~
z;=m!#j9f%(*0~?jAE9C}#r=<ATq>Nt1AeG2e8~zBMe|O3$DpdfKd<q8NIOVn?lFh%
zz*r9jK4I8~8p5;>X+IIm-~ocgVakV;7j&t?uHDUl#+ZcNuWIi5lTw8V286X@_Vp;$
z&{a%493`ls($K3X(5dglg@j6IkctGynLnJxP5y%6geTdZV9qg%L)YW-<&-!b6W0xc
z^bj-8%*C)9H}Ju|mk%&45-|i{Qbh(o{edfxh~@E;E3w$M*(glp5i><_(-+2f)f`5Q
zFBE>^Q~bFY6jSeVMB}R5qsEkq2a<ilreU6DhiP?-)zWZGrv(dGTDVSIyAiigT~nFh
zRpE7EiH0qQ8FyF0L=N%XBwMf+@eeS)!~D8CVKQ#AKKK5*g8A7^B~;U2;V1w%`q@TR
zUnPvAf>Rx=-{WZh89W1G?7+AoxWR>D2I0Aed3XDPGEZeL?)l#@3QOo7ggxZP`iWiN
zT?`ZAr}rlT-}CIwfN>oPKgC!McI`3IAlM8+!6a+$abw4HpPLI@U~pq7_XyT7q=ryF
zs*<hK3&nnlSKjSVgR2t^{6fxuP|2x5Orx*IQ-XDBjx~E<B!tJDYqp5mK(WS@ui<?#
zbB|gL;q%ZS%u2fjf)*s^0<ly#A-6e}?ET<J_d~d)N8<n9i*(5LGhS&5()zx<Lf1ou
z7ZlcEG(RSoQJ#0bi)RE+z$^si*J9-A;*6Jt>g)EDzwa(DJ9-}H^I2X>wLpR*9!LYO
z;Sgg$Vk!hfza+SHFFc1i(;bQ^cBqoOYKJyI>sd&JIV&BCu=`|@cc|h+i?IJM;rM2I
zjV-N%lWx~;Y_Sy-43nSC1p7%X+S0TD=C`ZmMhnjf<LXX>tZ}*tfBJblbBJne=yx^j
zQmgKlto#q9!E%%i)e3!zwK}w)K}#tRI?>*o{gP>`IZ8)=$2`zdDg=@iYEK5;@$8sX
z>6j!(G45d0#D#p(;y8NVcsS|cW8VlTxY$Vx7F_YAJCqWxf}?JqK*dF&#T1BoY=n0F
zxqbH)ch6Nt|JC!=0Nb{kKJeYO@a#=KZx3M_?4#1*D|Vl+<Q*FLW+m8sI-%5@f8nE7
zg+5<#$E{7b;({~Vu&cFKb9nUSl@6uYeR9dA)bVqRvBy*TPM*Vj9gd`g4`G}>Zj@3j
z1WYD4q*bAK`aNOgupZqz+~P{P*i3L>jB{QYdZpJBP!0p@x-I{E9B70ySP^Qa*Tdue
zX$(;!Ram}~KIJyz&|)L(Uq>fnNSt@Kz@1(%NBL1~oX>!~loe}kE!p^Nq@7crkjN@6
z{eK^SR)!Vb{Q@+KQhbKk%mkw{R94yVEN+K2mRTJJ-&}BpQ@8Syqh!SnYjVEKzW-C3
z4r5n7OlJ2PBJZ%qH><<uGYrk(?os}?c*AGNqr+O<td4=tFg}BOP&s{#o&GSH_@7%>
z)3zf~F8K&tPlAaT_WGV@(v-Gq)1Pw_^Dk-!{L7Gn7eQ{%#c&x2al=;3v1xGR!vq+%
z{(d6*`^3u&m3KM#W0-bfM=&YVu=A=OzZqDk;~`Yo2SL~2O$=?vMf?k9gGxr7tF3mX
z_#poK_P^N1f8b6k#D68z=yTqFzl_yR<s)dJ4??TM`x&&I0`dP8$DCL7`^~I&I`VK-
zTM8Rsadt~+;D5SnK%)=BsKc8F+D?Tq{YRz$fv<!*&h2~<Z~illA3^ihI_*~foibpZ
z|02i3MSLl5^6{KLPmZHS#Xr_GW~-{-b7r;G@o2Hp=Ky!;aQ9vImjQBTHGVa{wcEIM
z-X(^uxA8)WYYc@Qa*CdjiQp%%F57n6lJ+L0(Iyd31zcRwq-VZa0np7)fWp%`-`t2(
zr||+%{FeLb?AKk#fSgPD<&w>vgemW1r<rpI3;HQLV+j@fnFD?;QV?y2D$Ie@4{(%u
zpz#Z3(|+fbPQ$q!_!V{GYhr5~eJ*@tSxZ~=1+K`Pd%X9kL!&@d2o@+uNK6m=b<i_J
zM#xAHB}~bUvV~3sccx~%vE%m7S##@_9vQdEpTi#!mSmo)HXCqC(4JQSoKQyhOjMBG
z!!nfpvv(ie{xu;sE5Z<aj};X}ffx*#@NwMA?fW<kSxCeA{)PAl9?lo(ZOk?TYUS_!
z!!S!5x7xbr)G@vNt8TSoCfp={w`p#*f25Yq?9WZY>>1cAfx)cYJxG37i|x<-f73dN
z`#WvO_*XE==#es)>r?Mmy48Wi3<Ex=Of|x+fo^pYVup;_+$0<^y+f;Rb#2c%xWZDV
zdWOi|>aer9F*uaF|FRVfYI-CbToEa0y+gw*)*Ehh9%6>#*?-~k@D$zNAx@Zenp>T!
zTOEOzVPUPFYeY={ise+*OHjKbn;1qm38|z);1%CoXjcD<E!T=I(B4H4Pn0VnE3J2w
zbH#RK!)2j;Zp-W@=q(4#&gQT_n(DfOJTN^tj~!-*e_@FEzuJw%dXFvpl%3@dhIsnM
zbD`zzFbDh=qfSqKK7SqzfO7W?`C%irKhKKk*XG{2Rkx-zw<ZTM;~WHU=aRQ*3*I6j
z(?1Pkknihh%<FCSe-V4(Nq4`5ng9C75F8JQqYxShd-{u+ffzUVZj9^3{bgyi$NWAG
z)&U-AFy4xH5H@K@L=P)WbH!g#3_w1X@!^F1UoCBRHPM(p?iN?rNm>tT80K%|1{M?p
z{CDw{8(1uxk7O&R7q$Awy0ZV1{-=`vQ;V^s+>Ii417m0N{qO8JiZKQ|+g1EO(?7TC
zPct|8+`u3)fOK{>)0jT#R(Zt9R4;0G#sBnw;NpME>EF7#fhEKMjM>#BWBPbo<zXjN
zJ*ZunKk#31|BAo67=U4nI^yKNZ~u#J`~&}29aGIPrcbiP6>*Z*iyB_>-*5wahyld2
z|DR&IF@55#^6(SgUR2qN|CAfpK@1?AUH$(T6NmwDva89*^zpaKKb+`(M{%zBr@4WZ
z#Fn4@(Vs%hF@21!^57HQZWJfXpVAHd*JtkVzkUXg!%PB;z`Ah0o1ITATyyIdW8f#j
zi|xg@vkqeB!VEQZBnHHI72#M_6l$AN7G<p26*<SHJQ5cCxx`&+!;NT?ONFh^V8Lvz
z_FKa7BhuU7o-UpBx)=%shn0{MFMzi5#$0pP0e-8hes_=tFJ+DXym4wBeYPFXZ2O*k
z8e9}zshfN2e~a3Ebenb44C%RPMk7jkuMsF&jfkr)l!emG=?$ka_o1_S?uqfs&HEfz
zy`Q&(j5kVLcDv4s_2HHCC^Uv$Cwb9YM@Gm#i0PW6kyNu2n(ye<>2gnYTcT5|`WJp@
z{OvA@+fT;5{cFq4db48DZwV~~&$o?0B0wl-XB&!M7p7pRj&fbVh;I$HI`{zOOg9$C
zy4of!bgCBL_&{BXEC#^iKq4iR8{A#rI;KEaj(NMTIf8pY2s?<ZbE|@9I>zwH3+Kxe
z;hhum1#w_9sBoMuZ%=7I=~6GoN~VH(m%T%OTMI3M;L<v^Lt#!R?atz(%Tm#7hoON4
zu`|`XrI0<oOA2Y7Gs8vyzD6fN|2y~Tk;wpL0r#4!^P8XwN0$gyh&TPRp?a3{HxALg
z<y^I(U(3QfYp(O~l*XNNy7@$jVfW_m@*58?OXF{wm<~Vnb(C67wCnl>XypbjzvYrp
zm{*|{g`-kk#5YPHj!%J%jb^RO0?MaEtNeD(Uvo!(+fULS-_BejxQpQ#r;?Y<egSrN
zC-d>htC^ki*2^cv52p}C3n=A1|1UCmw@=_#+X;o2tkQ1*73wx!=i2+(F7SQTK{fRF
zJcSb42NaOh@Vm<PN~LJuvmo$wd~NHTOqb2VjAdTAL0~_vqt9}QY=M*GS=k%s5u+i^
z>@xtj-l1-cI(TyV*Yd*`CS9*a0BpwI6Zux93-Puwg}5NvN`oY(FtwW~CFTj*XN20F
z!&{A)p3vrRiJSquoxaX*Vos{pOq5Th3<1e?<46w2Y^tP2)I3TR_T<W>pLSY1-NxVB
zFJ*LZ5|M*kyL@HnXO{Q<nCUS1dbyvr9yyJ3Np8wr2ztPfkNDMjDi)9=lj&T56uxZk
zcnE-teoko3)>}@l^6NLVGoCQ%WoD%Rrc!9mdljHQr$4a@Og&YW4(jr_NtaGnEa&mq
zgY3{sYs<76a_6XLhE-+obm7fx7oYBf@^9q2dV~11pd-FPVOF9E+GlUYJOz0+-jS60
z+DG{xYk^2gi>$}Lo#BjIj#uv(i_M5$pOen7Y1Z!VQf*wn3@Rxuy0UaBiyebnwvRQ-
z^yl7I*%em$%*Zq@{)Qy@IrDs599M3?QB_wuO#rLP>{NDHi|fh`ZtrmzyI`Z=r4*dL
zMSlQC-SYn4+CBOmI$o&6a>f41Q#M676YKO`wX<M^A>pNCV033t2Hi$%G2^ISTYdjx
zTAg-=1h&XTdgEDHgu_1FHeE@y>0ldfId7Fkl|@;*;|IrYyDN12bd@CU<J@z;khte;
zOK37~N-P1xcXuQPf$_T=pJ5UJ#+9~Tz^L7|(eusnf=;duF33HElItsCWYuYv?%-wH
zWn0-xa8^K<epo=z;Zk|{B@<G*DE?e}#qVX@iRvj@HSQd}bWRGabuB_D13x0@m!*K6
zu8q}7OM45jg}W$TOGOIO=9enk=!u3=r_-9bVW;w3p@pnB4$+2AOch0$(xZ=eojqg4
z<pV5o-{n?pek#t~Dz6?T995pOJRvwCX#CzW?61>5%JI_<;&Os>G9Es7U5*m%6}fc*
zTVbP>(aLc|1_RCVPb$~kc=%L$2S+rD>Sk@Zx;)B*3F@T#MhN`~PJF|oYZOv53hR95
zIEy^yn$sLc&qO%$5EO^Uzo5>j_kLy=Qz80qfp^ah$baQreVU_NJFH{sV^dny!E%`8
z!q6yL?F1@~h*p%PMNZao!syoNzL`|@ATy0GxnJbPY1}Ob0UG0wwwv^{O5KqNxgmUe
zi?h=;soMl60tr0n+%BNzs0ow_$W#QFmAtBos*2k4OoFpCsd%Vbj`UZ>h|jYly;MN+
zsktO?)vpSRmwrzcAsZrc!P>Oo_H9>cH2Tqq>?M;;-r)8XO~5T1T-^eLsrFuiK`<WS
zr_v6vAy|BP>x$fwzn@N}7FWBXhr+R@2A5g+CN)kK+c5lR$#K@)Yy|t6g(dSx?wA^K
z<qEb(dgKqd@FUZ(Ym+^7e@KxU<6Ci2*LPsY3_XY$>b9)1@U8UC8-9)uW!5m<44c)!
zrUz-g87;2)<}{dWV5!KtX^<Q(p8ic`Fu4XR<B}-r=+{-ebmK$i=*T6xK1(AjW}FI1
z5i&Bznm)Q$mc-!(Va64YUsrrhGk9HO@Y)XepkTIuB(0c=p$KFJ41gpVjBA$3!WGKv
zYx_NYHp-7W>L9JNz}(MYcoUZ~+9EgDd_VW}cSw{fLkd$j1%Wtl{jzfL@788H5aBUx
z5=di*)Nb=#F&q+SaICuP&2VcAq!w;BUJC19&I(M21h}1C`8Mj49v+wC`2zVb=@iOX
z3i2ir?r)bsQtabyDwuiHiy6&{bUqFU3<#9XicO2@0R?br!wi_6_&I1<W63z3Vg==E
zrAEYzGY5>UDx+!OvA{m1H2K0|;c0q!8bCf$c|cxnAY6IiwcNl9xq)Eiffq%wA!CBL
zEP}WaBQ*SdmqPuQ#I+Y=Rb1<tB>L^|9?n?LSf_2YjRA9Z*W1i;Pux=APo`bpqjPJ$
z%i(%cJ-}kPS{kBl0VwJRg|}t!khU^uIh!W5G3heRSXB+u0E0YoiB~`ar$l++ZBX2V
z@aSpVF=*^8yRuFyMLI>7ew<k<NaN)=W3HqDbf;C@#_!;Gv9JwvaJD#lDV^)5qhEbu
zk|+Yrgc=T?jXg2Cdo~P?jtAQL%Xe%*J<{N&Tc*Wz9l}t$jdS1$P&>!}b--Xb=5iDm
zpF3#lic#5au_=X&KIu;GGy>AG&C`NVqmif4KmO8>TI+QKL62AeAtG9F7g}*zK@X#$
zA4920DbHAo>tnOWHrqD`hpoo=l?{3Msq0NvrJnV23+b1ccs90v-k?iq`=o12IpW~?
z(6}j6E_u^sq|k#WVZ&yp-oLLceJa`}cS>!;c)wDObA+?0t!^(J^gVn^8`uCcRH)fY
zxs<lIT)bPl<&}b?SgnhKW2$iU#yj7GU!Nc+LKXG8^o||Exf{OI*i(uJCfnAg_NGI}
zoN&<CjU*f+UEL_i5*2&5@*kkV%mT$(>&fBx`BZ;u`ZDX3WaPYpa@euIl3=5G+Azz&
zrM9VVF&$Ktd8(dfWlzuS-0oC;JeSUBnQ60CLPGw=n<W}r_+4%SgYpOuojH7HhdPqE
zVOVtt`tn?3xWwC6DCg6h=tv-r?C(H8?pgJ1&zkH+Sd>iBgGz9@9XUsU>bjfsbv?mA
zI|j6qh^dJdmvC?zes*=^Aa?N90Oe?&<kn>Bza_G7T`HDWt=Nw}dNuQ~THIg?*(GNz
z=~cjgo<lx5br{&~b8v5?I{buD9%Z&lBX=TaC}|Nn<9?&Fs33=5zBEC>w=;mn@GT`!
ziSj;u!(<+{ApOBO=~geV{==6}AGWH2EVfO~Yd~h6`s8HSyHLnFM(Wv~i|VQR6d}^?
z1qD36n$#92AKkhFbs~#y1K*(68oE=IEY&+@IxDq;s?@Kd&|M+;<KBrkL7iq53F~NQ
zB~wlTE$KZZ@6u!7^G==N4n+>qZw7C<kHj^Hw)*%SBROTQP{i(+!fiqofgC)y#OV5P
zrX?1-p-U{LHQxZ?EuiJd*1Ik~w%?z>K)^@MfjMSoFP&PM(mOEqz}myc3fQyVLG818
zue+RJlN?^m3d)K>)hMy6nUMLa-(72H!uXX2i^3YjGti!TLtepyG;urCTL9scUkK*6
z<C16aJ`MHlT)dkbj06<XTBVs2QaD~P@8~d$DZMVP^UP0Qy|`JwNEro&euCb73;ZB<
zps>@Ad+Eu+>h|+S<ePHjY17-NocqA4><QYugeb<SjgcmT{Dg-=`4xA!8lM~Z8OAt|
z?>aJ$z8(gQw|f5$?bS81aj0EhetH68RDZ*N$yj_%9&~HQ@&j_=rBkQ7C%Vcp22fWO
z6*J1XhHLe%sLt|9?Rb5<Fg*NPb@(-AYNaNRenmsHS3f*@MwYT#)-Z=R_eSLiX%|&2
zYb=HKnPK#~^z0wJmG{5K_P@5;_3yY6+I@9>33o__Ggk$bIQCcH>Rls&tHrL}>f^ei
zpslq^S8~~a`iq_Am^|>CYh)#OFd(6P;pZn>?I3>1temO+&GU<X$v!?Pd*G4T^{T|_
zBPRD0kdFUK{VHMcDq(;Fof*GAnv!o;F(C9-QYU~t*EPfk{BacprXJUSlFP@N>ssgo
z_Biq{?>nia%F}-)<Jx)ALFW%Wbtv~~mmgf9eSG)IjBgfV@oDd(^Nr6FnqS%CjD0oO
zOS^XHrnn|G*i1_;1|DsJ961kc#JdVrz4y;@?_67mUB=tQRf;p-u3VllR+X9w-a4~h
zSm|(@ipeO94@QN5K(&2Dfy}`Qy^45GE!lxYeAQA9$MwRdO8E~bw}CNc-nlhvHCB0d
zNsX29Z0)nXSyYaSPaMA`y}Umq(Yb>elfjWN!<<E*g+(6*&C#jcdr@=g#}!*t>CMN-
zWeX5yv9bM*SGy!;W<U=AISMcX6*&8`zqs~=NBZGL<l#oiY~JIFN%o3K9=&%_lysIK
zAJ=|=s^^3EbH*Y^rnbLi)>7lb*5JYxJ0=yd5&|^(E>U2aQ)EyKs1V|wwvPsW{*$wN
zTQSKuy+Z{jiUH#G{k_Js=}b%KaD!rHgRDCl8yM>tWGQe@v8L~mO>f?*->hJ`p{~+t
z+G@7y8POOA5ij>2jZsO8^vA2#T50diQvA=hsqYUp-kYU5uqE(5i4nf~*pB+xPWycc
z^KT0Mz7#r(<lwX(4erVO4*UKe68z9(Ll8DXj!RAUH&No+N$ROFY-?33XU{58;2E#V
zg`Gce%YXA)2iMqAo|L;v7_PSd?m<MO)lw8Q@dSla6iWb4{*Pd}q?b`Fo#bzf$ltWF
zM<bOf=8RScrD)%v1f!4H0)M8HB|m0m1LS|#VVgCw?0!#<Wvfi|iFKNR(lI_tSfTH8
zujObaIl3`zdpvb}oP8qi*+ialewRtq&HUTN8F>~kX4C}%+v-Si<alBv-y<?WuAFap
z2~(4tuRP&YZ~7fI80V?Y1z1Y=0;}LAGC&rYE;)Y;O=+j7t3~p29FvsKrzBmm-BPq6
zD8XG1YlzLT&q(4^K7hPwQEc0L!Cj+~62g(UBdHg>#;ffNwDzd{ud{;Cx=w&km-$lE
zd>y-kkeqI<4P+y#$#P_N<Xq3MJdH;phKJ0AD+*?$h&`k9oZ6U0>@|y6@43RVm6Lm_
zh_M&d-?b|F`XAnlYQZbZC0z}<m9#xRS<z%&??pjnOd)2R|LXN$YM?Z}6N_A)TqHOz
z@&Ok4V_f!ENTm<&6hCaI-=E+i%LlN?b;(6mvcGcTA+vPMv^lm;A4)NN0<g{W|3^mM
zHd89orjA|YXL=_4Yuj}HOv7UvsvjwakJN2Lq-am}t$#MB`0ywUyw@3cuQKpnZs5Ja
z-&E9RgF~J{OP+zl#yj%R`3IHrkMwPBK<jme*o2|^%L|c#X|k@L*Ef?vZe2FFgm#9+
z%chSepw;n{H*xj*76`oPrJEExPS2Loiv4Sp^lfFmibJgoHqq4JHeZyn%P;B!vl76x
zKtSC=wfbs3H#+g4`RZ)x_7|CS_EYz4upISv*acD~=QRXs$Xp$CpfW}|?_2s-eO0V@
zP>(#vKckH^KjWdMv&xiczy`Y-#pyGXz%rAx*`ngY`Mis<)^tg%Gg)R_@aMOy?VV#t
zn;76$+Xw@m8)!>u<Zk%g@tcBpyEwaCi`?;sxFcUS{VAmN`&u8CHZpaSl@S&_7YKCn
zWp}BE^tBEcE%+~icpDAgU>kD?sN>Y8oq*G4sLo7c7?o8%wb`mK1=ejDr_1LTo%V(D
zu;>_hQclc)#`IYQJPRN0OSoq~r4yFbju7XW?ow@h!gJGU(g{-E<!=;sg{gZ$il(#5
zibq;=m71Y>rz1SZR$W4!zb(-gZq+hL1wrcTH{R3f=72o7aZT5V?x*xtpm!Qm0mqKQ
ztfxrr2IFP394rVHKp?O+c-etWIs>bH*1@}&%n)z-WF~8vJ`OK8Fw2^6@)JH=WboWo
zuDz8!UAx2#n8|hB^X!W&g+sLvlc(aN3-np5tD8IsNg+J+($naW6y4gK8D8|`&JB|g
zuPPip_=nlRf}1!Q1!g|YeJoXd$mC$@>{g2!1$Y?cav6Yi;#%o29aqz@qjQiA{8%yS
zeWnxy3ck4uVK8z&{_yRTdb(f#bSeByYh)gM<|?tAkHzHt(LwKxmS;EgbiwtOk*B)(
z;8gMC;$2%jC^#U!p&<<|vjqR)*Dw&!<T@v`d)}pmUcS7-KP~^*46Ir?IL$1W+!Lj;
zhR0(u*soMS?X|R{x*bv{EvbCg=p7&JWdAuzIS7?~<$n@^<<uS~USL@IU1r^X6vbM8
zek*?hKD8v%;?TsqJLT*U1>c1xH}L7t-5;eD^^-bRZz{;G;J8&WwB0*ho-bmeCe>Tg
zF_QvVrBr(g(vi4j6C4pal3W-L&m0sw2-;m=Ocp93PSAl_CVfEVv`G(}4kF5}jk`s`
zT6Kx}66U`Jvb|a?yix2cCeDkdNw+AS4qrZenDj9=aago2mYb!{i8b$CRpo>kB|T$Y
zRaw@=(smVy4v!YEv^VZ`>}wsqbH4*p2-(5TL4pq8oa4Z-EYC0gic7d#dIp^%F^%r@
ztEJmC+chhbZ_#h(g1kMK@Ghj=ukx5F5jfyEaNd<WPdErFb7$&Z)3Woy1>u&}OBF~J
zK<1z=qE%x@(;&wwAA}x44_H;*r=LG|GKJcma#iW|Dm@uB5z;q(S0y@A9;NqHw}iKj
zq@F}Or2=F69<UZz1*~f8Gjgod&6wAp(=Q#_8#+VpdR!%(o$R_?*<6{PrlP^7WoFG=
z3(62Dzsydp0LP4l4Tq4<`6>;<eWi9Ko+igViAD(YovW738I@m5!?v}(&1<7MV7DGr
zh0AqiL)+Ll(}A8(nca7;EF=Tqyk%3)h*XHYne7L$R^O98QD^ZT9kF{b%(>u3?=o%A
zMk&}4p1~sn;$@SjPS33`+<NuflNM<rGU4+xl1y`pMjYv0l~kTD&s9JP_myXI_i-#B
zhNF<~ya9`9HuU>DJ2cWunj17Zu`DwCPF}X1vrldFc;%^^y!uHz`bmtU80Gp%JZi(v
zQ}+Xx(O`mB+3qJDvwdDRZL;45uMGx>(uJ0U(#E9;xsEK^0d+T&O_o+%o`!tDj5?Wd
z>4a0%0jeS>f*92o-eLJ#M5MuJqh+RL#%+LL?-`b#QL*4snt?7wd6}(YnDd6Yv9X~`
z?{^l1*@Oy&7s5Iq!;cyscOXA~8?~_!xnUEz@v;BdC~Bj%@3^k-n7dZWn0uURq`v>y
zskS51z)X&t&zPH!B|U>DotkV!s78wA{guq#IQ!Wa`ITo3+P9_)HS8E<$EQ)$`OB<?
z+b;<nR=3YSTgcpQ@)h$v1H7SMBFtdRA<d$?M_#CQLMhFrdQgkiz=3B(Vo#X!jE>9?
zC`bX-B=kW+=yXHkB+?zql+2#_3HQnSMaMD4>mF!)bl|A|VzAz0nG`{DUHY1s?!_tj
z2q7H?Ye^e@ru>uXO#?FpRtGsl@4f1<Spax853t8ae>GxNv{Kkc=Umg_RM7p@{8svG
z2ImUick@yH>v!B*S=scNG#k-^EKc%~k>?;9>DgQJHFKwliEPY#@zV#RL#&^*Nhh+U
z^2Ph*JnPuj9=%TGP!=Q+lne5Rx>+Yj55aSHbITSFL>FCa{3p>*Mw*vg>%A&ki~Vrl
zFD{`ouY@SQ#@~<IqCL;I%CfEq&#8C$oj@eU;JzYKU`9)qW@TR;VgF}RAfFqb23{+5
zEA`P5^P=)>P^n+$uxGVfwRzsuYy-flt-!C+uX31b<RI8azt(K6%E}N?H8?HWB3c8U
z=u~X<bbartm$PJCd#rYVd;VT`54r;FDUR=N9$59RJ(vY?)SgxyEFCOyuDXAVRM~@S
zFiP`QEF;|Sf}qq7!jI~fj$y=7O@n%Kxfr<^oa?l^v_+x0E4eEb35T)f0pIMtaVAcz
zp2wcW+Kvn43UCjC)Yk8F_^H|MtP3|}bcCNJ&pb%)2<IMhysvEbIz6`5-!-RM&1U$m
z<YN11yDCnnqN`SGCovRPe#v0jAZ@LE!u#RKmH&C^7vE35G$U)HYldbnW>sxj30Vo{
zy+1{Nit31-JUn?gHIVHZICzYAf|rgj^i^<Fcaw7?oh-}VMMSiI(ZNMGGkw9M-fO_E
zD0amJ?gn?8(v$aS68=T^<MOQ|+X$ot+|#DnTA5XmHGBIK?mnGYlWUH)hug~p^ne~q
zAET#T9GiEYuAEXPXqto!nOxO%WN1-EvHq_I{MBhsB1XhyKe;pMN6h0(egzG^la-VA
zQ=r{vv~JiMd3XLdjoUW3>g4RH#`<=3&Os}pt=GND;)XYZ7H*sB&?DC)ke4?bHyfPW
zfEB=3mYWvYDnT?H4cGkv*r?XR`Kdf8wrL@|iKzJQu*fHncxxOaXYalJZG9oA(3KUM
zyTvcbV$hNoXp}HBNIobtc$?POR1Z`?n_Z+BsX5CAOY}3$-K5p*(nrOh<)RjlXb|m)
z%<aT)v-Cjqjo6vnJ~QTF575bN-4oj3Nz!X#)U~bjOWAMLldikX$hXrRZ>LXRNxwL^
zfIFe9I(RSp1rMT@0$JLw=3Hms>OmF>x|af=wQyumg1CP6Bz#%KS=D_XAU4*q`J;OM
zUfw~}E0KfS(#hn@l>jS~IdF-+qNLeZyAUzp=fNw=9cdYex){8VHh!uza+I5`3D9v{
z`}y28n$|WdXFn&Rvqk)g`rei5+~uc03-xa^EF@-&4Up<zC$i?1@gkyOr&*JCyJk>1
z!rRh1D!JI|mK}sMqM97hm3h8!4#}Kf<bitvb8b>9#8F!(sOnciUlCIrJI3N|1%_-p
zofxAVC5g^L4Cp7F?39(Nj`4SMFY_mHL5T6%s#J2;;aSVtu#IOpb%xrPO}+?f>p2!J
z)woJ&_tccF+~~)pQ@HX&DRttIRiC-5Hz#9fvwW$Z4N7psx-)RYkM?J2Dz{HM$9G2k
z0G#y`Kpya|&Sht5LazI6J_6XZov}^Ys{LYP*sgg9WQ>N%*tAT|fx3UAAyVY2Hk&ej
zuC8WR`nsV%%&h9IE;|D*r4s`Yhe8T9BrU?a-{0MZ-fPn?6#sowC|+W-&g0<ZRE;Wn
ziiSQzGpTh^-~7ZVjUhQ0LjE?q%Be+TC?!o3Bi}8lMi@J($I%XY94N(&<lQ=c&bqM+
z%5Q$Yp|C$B@9DMwVZA|@tMR-sN9PGZLfOtwnGi)ieqC@$T~&R3ohzHhUc9_eVA^y@
zaP_omtW$`)>s{@JN<er=*Gavdbl6)iHqA(u8=4BDD1PoJey1q@>$~|+X|it5gDu#x
zT595knLNV-c9O{6H3o1xtGCML<rXTV<ba_zjbS1&a^OzvWO2qUbP00LU83GedB{{}
zk8^FE3{e8Lt4fSL-YltYXei@jYK4ADeZ<CoUlG5<Lw7Q@{Byd=RD<?hkyg>YEm>Vb
z+R)@9rZkms{~?PX8G9eqlA9CxXbDlt<!+(toJ7ecAA6F^`As}1LCRI%-IL3I0X!(>
z6{}vUcu;=l@mT6jE{A29;CM^SEDhQ7B`)S*4jJE97V!(Q=Idi~EPmlZ!#!kis7&(u
z?XgERd&<h&A!{)sL0XW~lU|J>>%%f~vmAC?ktxy+!8eGz@b>EZ6Mpk$QyoN6B@4=O
z`^k}QopO+UwtS{%WT!MyCDP=Y-ieWI8kReO<jM)@25n(|zXRCP$C3;r9@Toq_x*lD
zuH2k#&=%MCyOmsdfn3?{Eq4yr-%47^-!vyZ1$~m6aAu2kVb%0f8XQS_Dxsgh9d?)J
z(L@eeIu9yQ1k}wg)>?W-#Edd>ig?$|E`GK2#ETgPQfI+=MZ9BYO~A8@=C!RgvnI9c
z`{&8A@%}>#2zFXVRC0e3pYK&CTSh_Gx<_oX$z8!J4Z9&j7<<qiaV1Ls8K;@tO6HPO
z3wYG3jl<(n+>zYB;*wO3NaH3^t`oCN?ibLh6Z-=*xZ@LJ6CW-Gy}!+*S(w0?Z!c~I
z=!chJ-K}K)j&JvcpC+Dsw8Sq3NC-(j36cy5yMG5F{{{jDcm4B8eB>CnId;2WXyQpk
zO7OpeghZBLF=^t>M@l?+0DPnm31QL1^LWGfgA(}Y?n_KG@h+n!-0tf1$}#?U_@@Gf
z@!xQGltkj=-51n%wdEM^-)%u267u@44jHhU>aLpC-S+Q$J>dBg_YR{qA7?$9Dv{Ob
zh1z8xo&wqS<LDQpn%E={-@w@Z{)Qkz5DDvf*j^{|tYtW5`cJI4DK)9I^yiTD=Ray7
z$9b$k@j)Q}k=Fy9uboft5BfFxHJ6V;8KI0073&R@Z_QLSQa?HkRpCd26M4i%UbZT;
zaEgnd^2NLkrD1+Afa(5O{zD~08QGa?$wHHg9#+SruYbPQwVQY%@itclEDm89PAA*E
zpFWsbU?}nV4c<`RpSlm(>^8B7GHKb2<e7)EY1uM`!q_}*YplnJGJf7YGwKzac%8Y%
z7F5)Qsz6mp4Esa<a|=_HCzrEr!DDR&;S7&`g$vlKZBy5$`sA2*p3VsiXevr5#jC0`
zB*!P)KcwnsQ=mvWO9nnvTTWUj;SlFJ7`Y#loXo1E6u-Xmft{3tyG$wGdhG){{UG0*
zSm4lrdocpy_B<mSiKdG`_DFok+d3`gXkz3%l*RzY99rQ@{PPCIk0F>e)A__Ow2mJ`
zHEGsx=XUX9SW?;~3to6-nhc$AB}#Q+4xwt<wg!{4^AfEuC}ZAF${$}xvyWFBc!b2K
zntUmEGbt`77z$F7|D`eE9sbtrmxiWq_}ll1`VCBz;2&Tun`m6A7tdiB`54}m#4Y9M
zd~~v)9H~bX6GRR9B`F^-t~O&{S=UbUBf%TWU5>I}?<T@9^YJL}%9W5`MDp<($)um^
zBfnVu&6Q+Xvrt8PBY2_GfQ~EkqXUbhgZ})7jEFo$UbPyM@9ehw_e3miv@PW2^8(&{
z+KuN+z}2po$DeU=6iV*rUfr%QV^sOymLOK9y5YHic#<0~n@c}Wrw+XXVuO^x<5w)e
z&Xfz+%qn(4Kv5S5c_k~$E#SxU{6l>4^Ag0#kYuX+|3}wXhqbu`{hpQ<3KS?_yoKUc
zytqrzqQNz|y9SE86#~VJ6WpC3#XYzNcM0xtIp_QCfA>DmKC?5klDyd@E5Dr?sdLwZ
z_w#OTP=jYzL{!$ZaY|C{Fn=5)G`2A3_VJ9b;Bjes%dbUX1ZH&Ce3ay}-J?Y3@v?Xj
zo^+q|U4Ke-e_k}T5}HiS8gjmS?xM)8CFbN)!gI_F?kaieuv+)qw8>|tQg{pjh7M0q
z95lG3^R6A&uJh>B^IeZDF)L9t%JGh&-Uje)aDxcF;jW*!E`-&(%*ciZ4oq&1@7m24
zCt3F!)FvlCsnjeE7d$@)Zdo|8;+1UxV}@t4_8Ru`x9&zSu2_L32_W~vCn~ueXk-4N
zdV;>+*~;Gc0g@7Y5~b-g_t8mmk9O_$u|uH}EiCL{xs@V{aRm9do#NXt1+N=fK_$Py
zW#)}Xr0w>xOO89$os^I5#kv?O1<W2TG=k=ZHuK|Z`)yY&)?QxSN)*g(^=h?teM)6!
z<&I|`gr~NOFDn?Q{q8Cty57h9*0<?YQU_jxjqs+(4_`XQX3m6l>&@`nx1!`N31H|i
zpfyXMlw3xuj`T}#HrBSPXr&~+Yd}E*-%;BquKlYKO5-u4ZTurZX4x<X>UNnGuSVJC
z9m^v`m)G-nupG(ns{OQ&=>X`U@nhe$7AaS5@aUo;dlX<^#Ia?Gyi(lMT|mIL_s`41
z*+ei<AW-nHAeCSrb~L#X6JJW>Ip+FEOBe^@G|6iR`?DSG71jFrvY5~HPlV)(95flE
z>Vvq2UxQZf$9a~o;}Iq+v``{wg^$7g_C55R`Gom``3!{6IlS*|=x&&57;absZ0oE=
z-fP_9K%G_?4C*R+0S9t-#6F84ejnjGw>!66V$k!&(UqlY3a=S|3D`Blwb(V)wb?bq
zwZJvWwO-(SIKNp=fe8{RX$uY38QB6;V>hf#MddqF!?&iCnlgwPVs&HP2f!W`s(>wL
zs}gz7;-A!2_00bz1LLEg-3z|qbx4XjbaLxkaozn!;bE#(4srEOlBTi`B)@KW4r>zz
z|K#hN-Q%s`B_VEwjE3H?yq~dT1WQ_%8EYMtn5J;zI~vEN{H@NIkD;r;XZu5aJ*(q1
zJx>kDXd5)W_#jx7wi~Xu^;ATuj34=L1|#?{Q~rqlpG5RO63PFRk@81u&wc0YbIaka
z#~-N*w1_#9bUtKCH6euEBS*m9qjo`o5(s|n3utG~H5sGV$`9CmNEn<)<O2FR=NbdI
zjaB*rs*!WO6#)l)@-mQMw}`=;u81!3RaSmPlen~IF3zGa&eBm6R#g*jFY*;qeyr98
zj(^O#n`dUX7$zX%ln%d2rd}|BTKH+@Jer1I5fU7Y*~E)Z8q^BMTKEy=Jie8@ANp{_
zIwxjN&QiSM0K2~ngU`Oa=+9kHPtJ86ZZzTp>?T5TgJ0rh|Av!aq4|>i@@|NbxMU=l
zMto3y<cr*&l~ijtZVD`sscmP;d8|v|Z;X(5b;yKf$p5d>rGq7B#+9(n?oW}cxI`HV
zgVpi}<%5tgZ61lKW>Vz??MQ9FCo4T`<pZxUZ9?3-^132dTZys*S}VQs|2TfNspi+p
z2gW%wWGw&bv~p&ebT-d!u7|eRUh)fqI+ib1de9<Q(2Mku*~#-vvaCk3>^wr-JVJZt
zrBrUJIc}J&pvYA!Qa4jSXCA+Q2_~1=@;XHn6ZetDx?PuC^@3m3EFqIU?ILl0^IeK`
zOdS7GghUO$%&`L_PF=a?RCA|Os80OSqQ)2ZI{a|$9o)K6yt;Dmu+ZC_84T<?yP#nS
zB+0Uu`T_sePa9V7e0k^uA_k?YX1f;-e82wE9b*!2iO6=T|I0fV5_FPuiq(x@q5^!m
z?#CZ^5p#C`pW18um%*p|-#Y)d37=ur?oT916s8Ykm6|Rc{y9jPcw`QLc7MLjK_VCe
zxkx%u=*3$EkV)bm(xn>G!rtga(!6{TI~8+K>v0t-%U+5kaHGO$=JYu`M{`ignNn9f
zb5Pv~6iy6bZ@j~3<|H{gS#prIbC9%i{?X2POv!n~z-}AEi~cX^jp1#L;*FHI1LdM^
z;+eTrs`I5HBHV2v(;=U8W>Rt{F|ad6msrgi<Sy#sEUZ#;3QQwn+@f|Z0wtvRwOwj+
zC8bH2_!bOdu#kutZV{JSqnzBWu$UQHms<avTuBLOYbri%wd#@>JgyODt5ky*4=F{K
zS}(oS^_LG4axu$I)m8!lWYkvL6v~qkFChVF(H7n*k2gmK%;+5>GvSaO{eZ#HB&5$H
zV$32452^J}zBZXu$}|njdfx3ZKCw7$9XwyQtNGAc*KE<pe9u|MaOzWQ(`OnZ@_ZX}
zmHU+R%@DI{pJpAnGmzV|38763_n-Nu^!NZazmKR%Ja6+q+02j-5$01`y2-MZPY0b=
zG#N0pU3YBPZSVN}Xu!bPuuZ&iO+42fyr@AMf^3NCD}@QIE(zC*X1bkf?w2~a9n5~+
zow_vBYLQAJ+&{m7)pjVKy-8y6DzYm>zf56<Dl_dbN`Q*VQ{e31pCwnsZ9IcBi;VAV
zJnx20B+>{csnC7ZmkamlaZH))PT#;N(rIJ3pLrPD3@ju0Jp;UG*!F$Gwe=HsaD_$}
zY6d-vWoou_{c^ou4#x*i@9+jeXs!au&-ah1zsM?Uv33`=YZui{be-FMns)R%FLpN4
zW=FyKH3-x@px{!IaFj-?*LAE{MHJ>p|77ys4*fwegR4C(p|&Vp-C+K#^p0i!d5cxj
z5XIN*aLjiDpmQ`vYSK1`5Ng8F+|zeA&d(}N^I}m&Hx20Ly&Uj$M;n-#;t05|Mm%Pf
zo(t2R7eB9Er}NJgPbj%Bm~@h)h-wR&Gq_%ldJS-=G+aaPNh^AmHP32`koH>?X}0|i
z?8lr%v0OB~%rkyPQ4@LdLnd31jv24T_F{paKksXOkF+u#lr4>DrAIrZc&(Q+-?y|~
zl`lA#8aN-Vi`*uo%$01l)th>Q&Tv=UGiARZhWvV9X<UFE@`Z~9?nBy3prJXFAS`j<
z_tORKaoK&3uy}?zrxwHw2V<ezfh=s)tI@#Gn1C{gCtOB|7Dr1YO4LWxMnqy2j<FcJ
z%ufn8+Bw<HYj{=Q+3Fd<J40%o`C7+^^!S=|*gk@H+Nb9s^0xRk_3xvhZ`L;^teE7V
zi?-YiU7Loc4%H}S!rE9`SURzqvD&d(v44j%L*kFzzI}Yp^mo){4nNA0W66x@y;<-|
z)9l{I@Q^^9S18mITwlt$ilRp*!ezy$ijlAjaot0{tiM<O3s8&GhIUSb52#!#dwjWK
zr@lIqbupFsH*JCE=)`k!es&9f4)+$rIRK86i>uSvvPWr}mzpyj(BiZNeHpE!u0N5p
ziEno9_;6)AZbsWt*PChrPOB&ByQANxFXfL~q)K0q(-A^EOmHvF(=N>~#j>IVu`YHc
zKXxS|{crLK?D7%s`d|9@U*41BYP}UR3j<A#E66@12!Nb%1qiti2@|@}R*Qt@Xg5mK
zeU+^HrlN-4UPPe3N83<D@L8FeX|E=(h@ifR;7GD=m#J71ur~zH(cX--if4Y*X7ZA>
zhcPaM>BAH+BIIAVaQ*nn^_UvP8~|Q~emtX>r2IvMSXGqU|Hz-cBxzxcUg7$%?-vn@
z#yraZwzzz$=~%goF9c(Z(B8$DWWI>_xr;CO1+eF!%<LsoKJgN&jNuZu=T8M4@@M7u
zD(=rg-F)IXAA=;=ELbB%NtEAvMNZdamoR@Qv1N`Bm1W$e*A@j-Z3r3nwe`g4M9MnE
z6}{1uq~86)AX-rLCO8LYGfege9fN3g(VHU)YC1gdCnl=w$f7rGKmk(9|I|%6ICv4V
z<8o>Nnvwjz3*oYH^bDf3M7(+u)E2Z1qUHbfLdwAK;^h_<6CeDiq3Dfg4vq^B_|Ffu
z05N6MmlorSY5{gHI_vlqXNky%OezVYlR`w9bFVo+>=j=m=D1F;l}vB(XFd^w@H>8)
z))mq9J2=klHJGlYB5DVYV{i?=X|Cv=1(^n2C&e#GNjX`EhY8|fdw(Ig>i1xYJ6)3P
zb!H?QD+3BNB%G4|x@pLW+IM3wUK}X0qdm3f5BI~eb8Psrrtgl<ds+clUlB`rE5?pq
z`-0VesS)8%d5dOBK$m#akTCpK56H4h=PW86?x%<IoQm^IPJfDs$9cY^e!3j;SxdT^
z{dF^&bkoq*-JU`Hbi{aS4;`lO!MQb)+f1X6w^xj8dB^{KbMZUnideXh_rIK3PLTwZ
zXiosgT!Z~f{Sj4_ErQ@0zb;|!>PNWkd7^US?h;`Ip&CWWvF!ZhD_D>qN(Tj9S@r3v
z#Li#{Kn2qjH*&6$i^O-k&-4!T=^f=Cd<*o|!za7dA0j?$2rOiOY{T~-QNq$5cKpLv
z*}oDk{bTpaJ>dSus)YVT;FH^l(u<+`^@|PGy!1oagY9GRliic}W8357W8eeTgUQ3j
zgZbUqxzdHfcGh8gr(fi=;`8H^^n=oE*0s{9(s}!q-`I22GsiRFN#&Vxfo{#<pyJg2
zjOT^~sr)DYJCtgqGNdD<3?#wVf=D1Fq}SrFb6=Yv6(Wyf%D<CG)5UJ&c2Hfd?^yOn
zL5h8wiP`$mgZe~j^{4~IpU8g<iQ50xzsJA2qgcfB4@)I=B~>N=F6v!iN@u#EZ>344
z+{vn8g<<<DTc=SctTQ2?5Ty@=^_@OWD}#sL$@c0|r*|OM+pKp&BtE=1RwpB?EuDLv
zTAjR|_JQaDasj8SsfOwf;to0v<}$%P*@kpDR`^yV4DVgh$%yyK_9=+*h_Q)ri3#~Q
zT=XrBcdN%Y$1$>X#N0!Uu>^6v7%qG)WG%FJ%f`L4W5u(Ap=jU`g5acJob0;n)bWBJ
z;zewSXgX^S-}smKmV}mgm#CIFmUsj{349S?5a9N)x;Z=vI>|f1U$g$p6Ks#ZLgxGR
zLGxzsBytVVWgoPH>GvTM`$<3-CzC>-lm)#44G?nBrPIaV)xse_^b|E5l^*pF6+@)Q
zjybvuhOut^jxr+3<xm{_CTQZ*`<5sfs0((~>m4C#FkebL{n3j{G-lSCerna5Muaev
zANvhvqkXyk^Oi`CeVxdfy_lUFXfrey&T(am%t4h>#=dAqVCFU?z**yN_B<?_LdD((
zj2RN(IBy*ePf0da9Buu4o;1wQff)1oat;~Z;V1+u4*4*iw++W~2oF6l)Nnd0Z&wdX
zY%dI_4lAT!q(p0#GchuzgEOZ2N<bPrrQ}+IHFsth{lvex7_4n(AX?_;3jL{xu97o#
zT0Ex9Nv`fQfm*Sqf*F^_GmKjHz_yG_(V3{yu^QRxZFA;Ph9PaRdWw2-9ksRe%yAg)
zdMr@NiSjl+CY~iekgARHk+M%BL{dsxF(RFuh@$C})A!Bde%JUkss`!fXaPJ=$}^kI
zt^SgD9x8-XfwY<AwgfbqDU2z+o64F}Jsu<8Ha<fc|57p#CR3|kYg_wuf!WKV*1gux
z<%f%ei@b~O#qh2tEF3nJlaR|JVIK}BY7@Sbxq$4R!{}j_u!bCjq;QNc!6Sn<u^yft
zfr7-Wlyy#84hF2(22c+s8yy|B%UBj_adwM6%$x_+pa8K3$iaf#_fv;8HMBsbK`7<@
z!eLsq{ScJ@zVooJI&0LI?H+u{Q@t|!^vPT5YG<B${=A0JJlV8juza|D2>z>$%G-Sy
z_q>nYgtzKJvrjX5uCq$N%D2kI_^)xU32l#JY;>&Nhn6odpjY$UNY$drbuW2@AhtL6
zmDAz$Tw0a8$)rh*v9s|?FF|)w_j(mqRq<TNT>acADR^TDbz8zod#iSYet0j**+LPK
z{=^&T^ptfqiXsrPzyHkP?#7dbI&Z_B_W10_lQv>jGjF3I(H$0+s3H*&CWDO~Z~T&d
zrc}wpi>J(&q0fKO=i#Z!)2m2G<h}3`5)pXVRFqPAGM@CkCuxtFp8SNfC&qQ4dm-U|
zXW=o=(WNHmohRPwvBRy4+RLiT28?Qqy6DR2>gYPIIhw_Sd9#J>x$Q-Q`J@GnIbvID
zn*-Z48y#DIn-<%98x-4-dXswG`pJ3?{u+`anwII~YLr7|@2<>x_v+dCmPPOR`vsIa
zl*Q0_=>_S<zIob(!nwjl^ZA_x!a2gl<axjXU~zVVXO3sFVcvb=dhU7=Yd&^P=aBZu
z{LmINL)`5*8Fy$Owo^Chcj;c(JZu{F7q$o+V;g7dW?NE5eBAhm_`Ugi|M%MOqu)E4
zyPE5o$C_IfPNmK^E;f!f?uSl?uA~m6ZltcH?&(hHu4syZHGz}sF5f_-VI0Tuy!?DE
z-&%OR`R-qw2%_+Y@=1S_=I!GnNl(a_Oy|gOPCw6xOqa`GOphMr8oeA<7%dwm8(kg+
zjRuaI?Xc~j?pT_aL^egSBn<64HN7q`VqBAL;cMF0UDj*U1?eH_2I~FQrP9mQ+t9_;
zQ`Mc+tI>7VL)VSe8`5ReE77yoBhgLMTh!&(^VYrB3)Pj@WiC%B=P2iH7-eo5u}fRr
zz-%%(&g0)WK0Mw(UOPTI-XY&5Unf5<caL?9byspyavgJcfp(o)U05Ai-7B1Unr54L
znj0D$THKqio3R?PT4I}HTa=o{yxzoiPIj7{eiIN<>c+j!6Ce}R6Id1y6a)!8z8naN
z3sSw@oiGu^$Q;PD%uLDT&AiQ&%*@Zk&y*S?9`hQb8PgcU9J3n}8WUBj+4;Q_v{PF+
zJ=7{yF<^b!-1^FXD($48Eu+;Hehk-#L*cLBop2*~JRAmhgonfF;d^i`coY0Bya#Ry
z2g9e~b#M&$2;3H)0T+Zn!o}fKa00}41d)B3(oO=%ENf)vG}wpDU?Ta{^~&|~^5pXB
z@*Lv=;}qk1`o8z3_nzjq;LhyE?0)-};4bMV>0aYD)#t#61f=tF!qnp94MOn=1xbVY
zK!rZ$j{z&Ih}DK0GT$uW_1JsWr<f;}mkBuYN$Bb6N%SfE3HwR;sp<*&8TickEdNaU
zVsu9Ntn!TJm+Kep*XEbtSK=4y*Wj1+{HJ~1Z`iNPZ()Vl@RdmiUL~@wzsM(InKu*u
zivG<a*CG`nD;+;ORy!&?`a5<z8aui>5<4zBN;{T10y@?^syhZd_B$3jLOQlP>N`d|
zGCQ6+vOD5M<W_;J@_(3%&<91G#|bXph<9p!B^rLikJ5td{l**R{w)e}=$lZKgFusj
zjlhHe)j*Dbn!xh_^gy|Qp}>*=g-+Mb=uYO&qfWifwoatZzn!_A8=b11HJ?8N-?_fi
z5{rpr#Y628hy3XKk^H0K$JmdoAJ5}|#>dCQ#*4=1eu!H*S!i3BStwfgS}0psT1XbL
z)zZ`o)za5;)l${+*Rr~Nog(EU;KSx4v%;vUWV1oj`CIPri4=pjYtNz3L9fxf5zuJw
zA>!fSq3HqiaPiRfF!qr3@bb{`u=5c0aP-jfF!gZtu=No4aQ4vgF!xaM@VohOBhyIj
z!|p?~L;#cA4C6J9^q|a^VfqyXq|BhwqY|WSqk5!7q7tY4OLZB~7JnN5JsuKI6h9yD
z86O-^9lsT?9$(Pk+~3=u)PL1q-Vg8h?_cYO^`G`b`sdlRhkwju536j`oue8rS}p$w
z9@~%gEoi+%A8HSII2a2%59=ztM4;w;6Dm>mjM{huMmz>y@&XQcJ$+(^Yo1y;pX1rZ
zt!xaEnw{fz%;}dg;qOPhSM^VLPZ%7?)|XJ+-mr=fVyrfNFlV`8;l%P^K~bW7k~0K6
zwxBU~ijKdR^tJ11bD34#Z4p2JdV@Ru{>5$O=NKeT(Q}%KQ}HL<urqVUxb48OTU!T`
zcY-=GB@|*Nfi$mgwNE~Hym6#)mPiTv9s^GIrD^;TspN?(9N<F+9GtcucX_q44kvc)
z-WD+ljarBg@uy?lBN@-Vm}CC)n_2zppD-NUtRGov(>D%)x5mC05<*1N+spIcnkg;H
z0a^FQemlCJ8uid#kr>O{M6@QamG=s?3KjZ~*!x?I#Cv7=6pqY=<a_RcPZfXuc@#N5
z+V4>QRQI>S>PVv*8KQ@J>$I7^Z}&mv%Ab8*AQ<nscY0Ao_Lk{Juzbs)q|OgQu?dLl
z%80|-h%U+qiW3@?NbZ={s1yaYF!`Y<iu)vf%@w*4FIRVN``J^wQ*8T>5)h@+yhGY?
z`kx#`4I*G_G7ANP^4!rg8;E5^uZl2C7MIEb`=XB6cQXE2>8tZ=jSOSQd&X4Z7j3JA
zj{lL$<BHo@YO^@P35;R~cvEYIuLJ@%_K8>?|1Pvyp}j5IA{KC@{DuTDnhuU0{{#F8
zR}50Xg{c3@4|f-Z4{iDHSS-nThGgIwoz7v%Jex)Xja;G|8Q+djt<GkLi#>6;<J%8P
zIlWACte1oCB8kFU<X)@{Y(3g$I@-J!?w<e_9P92=sUu0>(aU2(-t&JaklKGm<R)%4
zwIBfIW<(18Ih9OEwWSqzDslR@9MomEyIT$rwL<b>o$g)WC9t9%D+s7;vq8U53-qA8
zC(3*~^hq?yH%CyiPE2>uC0XJz)r&=|pG8{;vNc&Vhv|^0E&FWoc}hoJM|w}SqMfi+
zqh*lJexrj#RFiv}QZM{lWdtA3@naQ%Y8{7gD6-{#|F&>hTipUf(TL_J)v+$se)ipd
zJCyAC+<_gSqCxa;HM`v&zJ0Jn_ZK-ajkY8ERQ(-M-#dpgbR|6H_I*;M8L7Hv+S)UL
zG0Z=q5ju@`IqrQrk++}LRmV&@X+pBsq-?8^^UOiDF8w*hwkqSY;c%Iw@NN)q>Xk=S
zf>M2gqIavqAR)GNstfG4^`p?>DR!Aa_`ZO{t9OjjZAwRE0+2D5?RU|9-nCZMUatIr
zG~TJ5mw{pHJY|Rpcasr(xoKd>YG#+(G#uS@L8&q{O}hv?@f!X*&{cEEI}9t~V5v4i
z;nK2QBeaVaxOTQt!ipe|Ss8?F{?d4rO{!ow9Qpmocz0(`-<P<to{h}seID1_OZHNY
zISs|X$`3y`8c8vv!=(n2zr_p~m6A=Q7PXZCk9a-<D6G{0XcPuvwOz)3JDcfvEFpxx
zgU=l^k*ivY+XzsYiF?eoGrLv7Ow@kk?FU+e_m+<q+cK%Q={AGm-`TZ#-hWG@+B4WL
z-#+t<-Y34g9qU_a5pw6lvfk9G7)_bX6m>OKXpP+viBWPo+fOesV4(+Tcfyzwna(3f
zF{*xVp!24>(ZQO3OO3tm=Wo1gb3nUiy`pEZ%*4Ipv}BPe`Re+zlAavjXMdO%u-6N0
z##OQaYNAvbWzCd4gi-ksg1?T~TXwgrZg{fM`nsV}n$6Z;cX^2lJz7@d6{bAQ+ZUGW
zdtw~@HIxp%G7sV)?kOf!*q%()oe;R<xOf=FGFzrBOV;@YlEcg<6q=xe-&l@#0xU7*
zt>2Ue=d(xeN3Elz57%J0IJMHggdMEP`p$@X#dxAaDy`?jXTVa0aMwrtQ6F$lA5PeI
zqBhJfP`>n1#Qn#zG%IcrZufjh;6ZNR_D;c$q_>>VdZuW`=DZMc97H;Etb$MgX*(<D
zc^2ditkaGg9zl-zCd#J{;zBLYga-_Ma!O6^ic`Hi(mgF{^5(@@4kp8Q4FatWeV5j~
z9y@8(dVFS>#=mI)Jv>ykxgzb_ei!}xae|y|P{K=rD$<~GBv+x>d9U;6LvCKPv~&qr
zlFl!xX5x{!htQF0He_5zbmpg<b-cMFA?I8}qS#T~HflV2{G~-`llR*{GTtCyeierl
zzu5jU1~jlzB`+4|$Ic07>SQ_1(W6jF51~<Vx3Jh>#GiouCmgBo+M;2#1%K=*#&@f%
z%fwL+ELa;R;=Za8{R*)XAN*k=Lt=$N^w%^bCS(XB<2~RbA4xf<3!AQK5r?kru2rKH
zX1@_HL*J$>FSYsR!4~u^`b^}O<m|((Vw1i;gYf5yM63b(A?Y_XHvU-RuQEk9y0*m3
zvvHupC2N-))Vd`P)9>2A?VO4#vuF*d?(dROsS?{qyJWTyvgu{VuPLrwZ?gWWARt$J
zD#s?rH$z_zD(e~&b6>;Xs)((WzHJemD|xuYze4pRfU>k^KP=Oc;=%Fm&=K^0NI_VV
z2@V{-*L<(q?QK8Qv^!^p859bAdRe<s$>U@ZW)YI(rS-T64IEls*&3mxbr1)cpZHBa
z#t8P4<IU9U9U84^UA^;`@Q4{Pt_g}hWV`x(BGB4vZyY&CX~f|jAxPcYuTfJN%xpt;
zpHT@G?9=~HUnN{A{EoGX%qFxl;mE84jkRWW?x2hD@B{ysLnG<AmM-f<!K=&@K5HZ9
zE}^T>{PYhg8ODV{?Uj><xNCp%@JbvcRGv@~vd9CUNWo|Mm|fn#B&$&=WLO5M(i6p0
zWNy-4c1&HCduDrPYwdYDc{)KH6J!$(Ylw;EiRG@oiH3Z8^s))038XIC38nmev9ybz
ziy({srwEPV1mb)t7@Z)qAoI4IbzXx6?|qtTRf6Koz&d_2Wro&aDI*LVrstB+m*xQ;
zg*Zn54qBUk&Zz^+TI3JQTU2HxA5zN|XH{GEXXR$4NsA5&4`|`3f;%jjFr5p6Q|>lB
zd&1EDWv_OR7NJtCNU95-1ABt@6v33@VSW8^du+r+d$uqgyv%;4oeEy!2k?_`ReFwp
zN@N$lWql+%^#!Ft6?{6zJI6)S69ruvge)3I9b&)DJG2{>-^l$H_<OJ(8Paf8%EUUB
z1n4avW*pNQf+jVv*b917A(~o+s{%dw&-INcHrrCK8Sbs&@YeRq1W)@dP{-&t=(oGr
z;1GYxb$nvhbwg`xen4w|tMjj({wPnC8UAb~C!&pB#{8eB3>)ey3m$c+#1QU-6}5ef
zhlr{Mm!_)NQ>i_M4Tav%6Lr1Wy^Hw=(eA|U^vi~=Lz=9Y9B>m-+Do1o9>q9hA_Nbd
z6@y!mT@h@@rO5H5Nu2q(GM0zDVZ1SxAKshan?Lbo!)ZfyPjo}Iw=fUVYe15f1hsyM
zKINHk+0fq5-ZR?p+VHXrIsJL6u!p^&)7y|Q9W5P&kaLcrAXbt&kEV?-%zNAW%<jwd
zICT?#ifj4(%1<o8H~ukeJg=|Djw+w_{QTV1Qqni{LCn(BR~f3V4ffM|s#8&Yy1Yfo
zCp<&h!uq8@NRciqwU8pr?f2`#?P>ENW#aTf`kYXfVuy9mAa7{QAiZ6ic86z+XRr0v
z`iy7K=QizpWlG%)RJ{vLy&T9n$awbkjXVx{z&cmjhh{!zjkxd(cvh?Ph|~`#E<4;}
z-eNAxG>O`cFH;MD68=+?O!13i0wkA7qcj=)iz10)W|?^`(R^QO$a#~u*?Y5Zv(Lq3
zQ~gY}*?X&StFHNeGkG(k`F?A5OZb4i{|T<o!+US7v7C5Fq_8ahmLE-jLIJ;fXgFE&
zBy9$G<wwJESQ7L~_G4*~k?coE5KQ)CVNiI;ZLm06DB%oY3_YpAH;9APT2$A3@HrYG
z0SmpZeq(VZ#6fSZw~IM=5#1gCm|5V5N8^db+G&?+u(?9OfZ@Jj^>0#|EPCUJG?jvw
z0+s^1g3JP;f~Nw}g6sn90_B3L0^~{HB<H03B<ZBjB;};aB${fjWwd3RWrAgiWvFF?
zW!Byw$h^z2OP9;Sly-MSlw<*=b$kik4?JdBy!=Q${Aqkw)_wJ<1`83`YL1a4RiqSQ
zG-IkJXTF6OtTd-d5<P-|keN|itG3y~78a5-BDomhMsP&GVBk`;E2At28_401v^C4n
z;!YdkuIVFX?;HN^-1~xLOfUUiT3i|v7#HXkSkkp8HzBvr1ZG-g8fDsMn(JHW8^7Eb
zHnn4~;IQYkXS3%)up_uAzEW^ga8dANv1c(8L}2ugMKJfo7#ld|ebY~8IM!UsZ`5%d
zTNmnij6}i5VkTD>DE6>%6hGZux9s7F+`$`T)mLk+^^kNlIZa)^>`9AgAVAQ;^;#=#
z3>}?MtJZOQ3L|xxhmC80GigK);Z#a6qslEz45*mz+3lI`SrZu&*$|l#SrXY2nWtE!
z7^m2!n5I~38EV;RnQ2*S*=kwO8_wIzo6TF!o6Otu0(p%stI})Jt7_>(<XPB~=VS$_
zvwvxRul}Ms(UfQXJ@yxz`cW1+={-G>zKQ{R0nle4?-zucL)I*Lm{Ci!IuGbMQ2eXl
zmn$`iTz#Sq>%4k(!=}i<+OJ&dJ~>5jdL5cZU|ry}v8yI%CXCBYL5p9zMYBcATl-$~
zUI#@hR9jk8TB}c+q%@&yvXrCDx%9j&vQ(~&u{3&yYvyuBVWw<`Y-V`|G!r;ucEEOk
zdSGd7P0z@clqy@6Up^sXS<9)M%5tQp4OnQa1z4_3yvh%h3kAn8k?HZ3yBO~!PVD8^
z$nGSu(CO(mm%5nl?N8L@lgRQU+c7R{H5a=0?PX6;<um8g%8ez~&%1EXo7K<Tkn8jl
z)KJ?J>6q&Pbg*>nb%Ym17C$UH=(O2J*|ysLvMsg^v8}hww9U2+w{5Zomkrd9*2C(1
z>X++>>Sx_L+~(Y-+?L!1-DX(kFs?A&BA1P>=c%q51x*na2xEj9!V+PEu%`f0SWy^J
zm{M5VS1Q#j)r{4SRgE>UR<qVsRPrp$&do0J%r`8!&$%yN&tom59rYd39u^*zVQzor
zlgBLiyY=o{PD~Kh(e7rEvy1zM(}nAMhxcypougc$+@hT2UF03*-G`lqU6~x1+?bq8
zT}s_bU2Pm}+-#f=T@D=&-ASED9c#ZS@{N95NbHnzOU>Xe>?3mOP5*A*J3l`^J^y!p
zaej<<oVS~INee-`L5fI!*#M@mr5~m5=<e#S>mKWF**KLu+qu{|+PNP)9lMe{kh_t)
zlDlU*WxArW1eOF2tvfaPl!q}M%Qo>fH#asnc{SfP-nAe%g)~bwN;UO16YD1EP3m&!
zIqRP5Me54wG3rK_bG`WcP$(}eCo5kr2bBkwo6WM#qRv_ZO46F5?GhIE-I|b&i}=?R
zTlkv}mX?>>mO#r$OM%OOm#CI=mp7JhmsOW0mur@sm(iCZmxq=ZmrItdmr0h=mKT@!
zm%W$nmqVANmza+ejyaCGV@IjHhso3WHc&l{GxKOS_73;<_ty4~_I8MNiPnjZA=go-
zQP=Wk@|VLW!&k%SOczY2OxLAnoSrkD++Ot__1<otS6-MNnBFm7G2V)vqh4<-Iu|>w
zPx)Gf?7K;>3tGwA^jeo&1=~Qak8Odi;%!u|xveHI76=1y%NKVCyzpDNBs?FE50^p^
zBfJnaFUCrk2s?xjLe#$I`uBCvb#23RpN~}5fca&U&ntte<db|*hL0=s7^)A2LSI2U
zp+?YnC=BWd4TsW0_g?&OG(q1&d!VLJFmxJP2gQJnKy9HJP(kP;R2)hLC0O~sLS&F;
zu#@~~);@wb4Sitqo5(tKzjD94KDoZSKF7MiI>ox4z3;o}yQjS^yfeQse{r@%c$a*W
zd=I!ydpLL?dDMAWd~A8}enfc)eUyIedn|k~M-uD!u=}C%4e2X`PdH&HD*iG4EdF->
znf^llPyV9*+5Xu6%KlaUAsw3?wH?D9=^YOpIUN%n5h5mr3Wgv<RYPk-X+w8IgH^*n
zybeqbln#93#6VG#alBe&y-ty@#PV+@I~6;d4X<CYsFl^9tE;P(tNp9HtBtGOtBI=@
ztEH<;s{yO)tJSN6tNW`9t0Ak~tM#j+tC_1$tJ$mZhH@vs6ZuN!JoJIj&iw>uL1NjO
zbVP$ee4))DUO`@=cfrUZAweOb`{E{I8{!FKs^T1CHR9)D=;Cr>L*gZ33fZpN(b>$|
zN7;JWZP`fKf3tJ5H?mc;Ym7eIymNo2(-l+6N{ZU|7vj+8knGUlFy@fu@O<*;Wc(!T
zr08VMLEOX1L)*j5L(#+6L)pX9L$Z;rm8MmwmA;j$m8zA$mDT6#5~&b@5VjDRU36s_
zn{k9DRk_S3oair<doqPGdU@V?fINGk2+#qj2?PRNfVx0qpe)b}r~$MCiUJ*hT0m2v
zE6^4w4s-_U0L_6)K)=l&n=*OSPV7!J6B-4K2}8rC_3TPoMNAq=OhbvTEC<>%xuxz}
z?bZIK;)5Z{)5+2FBnI3N8>{)K>Uq=iL4qV^dL8}x;!=o>-h6L0v+3fH8~BKs|A$-S
zp~d`ZwW_IkuGrLvqYrfwWXcAdIMLFouoxH%%np_b6M{X#L}A%5Y?v~v3Kp`vxm&wC
zyqmuJu$!|xu^VAw;-cUJa#3}$c9C{*cQLpytmXA$@}l(OThJaIjNU46vTiC7_(9IB
zlvp^#51s|Pvm(^t4L%~bt7k@AR729qv5Z-oLis*kx20!ITj+y?$*hb9TF_=6+uM+{
zk*&o+_ap@Uih*y@gN&!#?Z6qwmMxo}d`yZ-{cl==h#unsO_~|rm)V7ChJS{Y`z!Ys
zZUGGn5?m6BG`uw8H0(68G(w$^IygGyI{4NRWsxuc`Qf&)M-fNSWMO16WYI4n+aof{
zJ|ymWgrdm>=XL?GAz^?#20jfJ$gT#gCPzu~IYJa)oKZ?Gs`#T0><3$uv3AdJ1TX$M
zBY`?onWi#Kv#P)t)Kd^qhR@I71~@GFrU}z^EM1rA*^8L@7D=*E(8zThfwB(spv;VM
zkC^Rg>GSTn??vfG=?m?V?v?KA>!Ix}>@Msx@7d`k>?Z6>?g8`y`eu81x_SB<dfa=j
zyRZAOdSbhE)@e7)*KNVgvP~1ZmL(TzAq*zqfkAoGoxyUjAcHsHs)SUNH_yq#6twkw
z@D!ZDP^d9ll&;5H;bgS+Yj6u(!jQ%=t8Q1i^kO#U1lWQPB7s90V>QSt1k^pbKYw{2
zj)^MQ6@Nla8SX&|-u=D%Yd2{(WjA3r>to`_)Q|BW!5`BsWaJg)<%Z>lzYi-h$ucRF
z%5c)me3_x;rmm-P`{G7>MU6?5ira@ni&KbOrd~RzX<A&Z(Nz3e9ab!%-dwDzuBU!o
ztgj9#K~}>kC)VJqwsM(nEDl#!EiM3z6sPLc{jqYKt}X_vmz2zC*cL75)|FYAPiGcC
zs)rWGsMV=ul=7)gCrwdr<?&j|dHu=;GNs6y{mMwtOA!3kmhkusDM9?#--OEnwt>@u
z?*otlqJjAV&w=0p>Vd5R^?`!T=FQ&Cq|K|%@=f@r|K{2zZ1Z#zvN>;+z3^i>dqL%>
z=t^C>cw-u}A2Y32+@gM6daSzK?)Bqxd>?x{x42J(M@^|bQ$w)EOY!nyUvgTm1fa&F
zQ3266XoGlJU&ib&Pu~|~Y489jN`#a_&COgrD!qyHrV33e{%V|HnS9j@6<5eHL>~f$
zyn=K>j3Dt47{n104xxwaL9`%EkhhQ?h$#dNnTFIsUShsOY#|vCLC7OS96|+2ni`l&
zQPYVomnvtQowE|)%1+f(sHRb!Y$~u;h)soaJz62pyoV6!s~T_=nE8z4r9!wktjuPI
zOSCj=^2|J6KHq{=S1uCk`YD@=dG(rxZIO|+)LgDUYsKkw1$0aCX7PnzZh4?R8NN)#
zeEx!#yq0|Lg8RJtLX`Z_0_i;I{JsK`iG<0?364qUiSx<G3AsteiReA9y~{m?y|O*B
zz2!a7Uf|yLMb$<4#h!~ba|zc>s#RHC`GSaTEw^%7`H`9qV6m+pV7s#LsxHtvbULP#
zOpm|Z&G;yBVXv;nYG;O}NKdz=)Xns0f1$39#ENIuu4GxOrO?gqD0_jbj=7H3dTgrR
z)P;!GWOR-_Q=SfY=nF@R{Eqyre5^b|zJ0i3IBxhv9%LqO=3}N}W@RR2=4PgEW@Pr=
z%+pN0fWC&MhOLIWMzDslhR0dt!&n)AgV6nuee}Baxbv}lmZU~ZNmeaLJl-8>O7nBF
z(_Vyv|2j{MgY(Zf#uCEJU^BsQuO9T1@(8y-jk3v71nDpR^TZ?v32SNK$-Fe_4|Kc~
z&#Td=N(=p#xO2P8Q$u`8-9Hk>@uqazSk_%sHQ?Lx+xnl29X(;UpnmI)d_yD^p?^|#
z?3>&@KO$~ayM4&_K7ri$<UnK|_{LA<fY?vl*B!RH<RV6|Ja{I)G?B9xZKL7A|DpI>
zlNs<7yU-HGD(3qJ@Qij#u#4g!MkOBzWz@t3aa_oKHb8v@bU^9;4xO;z);baRh5mLv
zO@xfg`?tP3!&rT>ni+rboUU9piFfl&hRd7a%;N||q|K#MoIl35x^J<$cK>NwhUW+r
zyz|NLr+J-2o!f`gc66dLMS(%^1VR7gXW>_#sF`!&vdEWnWZnE|Q)c=@mL)u98!{^e
z^?7aB;-2gzvUSMmf59DPVOZ5)!;%KbyKpCEaQ9>^o+oO?g|T=`w<MOrTgXG8#Hm!{
zHX%|$t*`H9MFsTUtCR$`zGs89$4dHWB0GX-RMi+AIXGofvZuo<1>P&gf8^x&bIUMz
z!W4G(w+N&CZDxQ}fREsD@oZ*!eUPFW|EEC-0i@eE<xhB|Ia|_oI6&tgvcQTUUTsFx
zGTp)US-6~&2u+JWd0&x1dM;kv;)*E6Pa)(c!sGlK;3RpWwv?Uw=WY9<Hy=X1`dG0O
z78bKQ+x;t%))T@ke?Fl1Hv*bbiOG(sBa^X4Jo@PbrRa0>l_O2B*Z0cCbHOS;*jENV
zlGcAI51VA_9pg37i>V)YjdKdWZvOZd?n1t^AIXGs$;3d-x>@mq!oL9R8accD^#j3$
z8aqim6!&iWlXd~!pV$@D5z2ma>~r-z0SYfo?lt~6+{Vb#M-3KQEKz8NHZdoVq9{f_
z6^zT#zw^F)23ijO{SEa?3m;A%v0o~QH2FW~)`DV(m@%)FoNSTW)E|g}5x4I*g@5RY
zNVVgJh!vdXqk2*a<+oMH?!RSqa-^XQzUDQ?!?i;R^>6RgvvgpeLve9t3okjrV=SMc
z1Vtg%KgTisB^|XBc!wcnzGkw7E|))Z87PCx@yhWtA?}#*N9%5i7X)jK-Y)9g8o^?e
z7gzl0`JX+ko@ok7GFjVPZXLrO7goTwwPm9JHdVJMh>f4KrUO-12vRO>T_;Xe=Y`K4
zjS(6J^N%iQK!(hY4@V!8TSYK2)Cs!2&lm#lvo_)BhirQuG33G}+PpvRB9Sz4ng>jY
zJ$2PhuxQJlI-OXZC{~71%~J|QmX=hardoee_4ZYar1A|s;KKe|R7V;wg+Yw5B8v7K
zBZBjI1q)*vwaYH9cjdnBTi2qtx9Uny;DiXt2SsPLXH2b%ONq5lGDo+>wHTTv)ko`Y
zab~7!LJeXCw8jGXy-qWwABa;?37tHp6uVz55RCV}sij^ET{TvGrmJ(_1m;|^Sf#kE
z?yrZw{6zK3fEH#iLxi3;6BD1hEu;2p3ioX)K-HchxZt~7=%B(+LF~-Uxh`z`;!&iE
z@j)#QEs~b$TO20ZT*p_rl@|*AsENXpR;pyd*Ww{{gze?g>^7ucOL(>gBVWyNg?}#L
zo~eDX#&E>C0AeuIk+P!_AUVsqamcihGi!;paST6L>eDidKUl}V9svTot3-v-bpMQ?
z5=jZ7f()7oPGQ=b$U$3$moZ-g)Gt^XlV=n@ng_S9>g}>n%n^Bt9DUWaN6nYm`x>Re
zNeisy{$lMMGe`h=B>OTX&auzdcnumQhknn0GvRTKc2UdF%@<$<>VyY9VLH6I`B-lE
zkEL(GRp|nob_GVzwlpWlD`n~RtPjF6Tw-43SQ9=2uX*1p&TfBsPw-pA+^VHn=|F*U
zM9fmYFn)`AsfCcbK4Kr+@#6(&U->_l1rbE?e1+8L4m=mNSMx=6I*uPE@=`u;OTIsl
za1H7r)d>LMR*_GEV(l%}+Q;SdA4JaIZx)JDh4JD4?f0ZQ6XyU{hiby&)Unw{C-#+o
zf^fg;kMB!q_KpDc*N-I)HfCKI?l<UvhfeN;dtJ7B)inVjmvwwB<0LTRBX4c*ZF+%l
zyvlU~gIsv@4d+6a6@(FQe*;%!PLTT}d)bul+mRz}%pO_WD@qVPv9_@BG-TB8c-%^1
zH?U;o?aFI|RiGxf5k}^>=SgaD#@Dc5_fAq3)2Ia2VJF4%nY%;Jz0DuXYnH4EvTMd?
z4yP|5n?7WIXROn!tS??_Kh*bCaf>G9EcsVw!y>I|F&v0gf%7I8jbZ`lD;Y4ASGcrJ
zDhIQLl5cq6wvAmo9&%7^-sqdUg1J`?Kg#=A_ubnvvrmhcEnC^$(rH31#W{H}z>Tvt
zb1+@%oWeN>{Ph0uP0ZM~Mdetp**bj1DOFeKZ<XL9hptsqdJmg)#i(=G!*HRXO1d*)
zt2M2Pos!?$h4cJiRolZ4RFgM(O?2(YCf}!?XmypEBqvJ%mhgM$ekBJd%xSXO`8YO!
zvZr9*2bFE>^c564r7`6${fMczsh}`%pY()9s=AK0^as4;(T$@ICNrLA!C6j5Pq&me
ze6-HjnGKU4r|4`pfI^DWalJ9GH(RL+5&e6-5f&u-vI&jh+xBrQJDiA}?(CFjY`amB
z?r$u{_PTo3s-!Xd<gAYGXbpZ}J6&(Xr}g<<X4`njdeAbqHz#CkIoI{l<-4D7j&O?)
zhfdj}FD^d=H0Y@^hMX>*@un{<dnK9EHGG&;r5-+*Dhgm?IFh{dgm*5<5}b}8X7Eco
z$IDC<^B#MARSta+F6^)%m&qd|NkuXN7yg?0bU_w+U+k2*&DXsKeFJe0pKZLQJ=ObA
z^TYD(>}a?Gsex5!EyGHWqorbnrBx^=MdmAbsxx7JO=4sX<IdikAc4hf{5G7?>34~=
zk6WOIwa;zQSx&lB?y_9z(-f;N<7eEe8C7?uF!XP?U7IGOqfN3aFbngaR}7ZdW^90=
z2SUzu3X$EniD@Tqj`ey6n)2FAwc}yevWIiy?jI<<U;OZhDtk9GAf_)`w*|<hNEfgQ
z+nCm^6zyVJxBLCpC$yF^As8nw<8W5-3544ed@v+2A&+D!Ov<mgzd%sJyhb=x!4+L>
zP}&2yC99<9dkUKbx5%a<HoH4@0dp9<XcGYB1@$l|FUqTypoY54oU3Fr1-sat%ewTN
zR+?F>48n8G7-W8u^^LGtL5Hi?<v0}Uz;z#H%re%gM{~*}a)HrP76pxVLg7r@o%Qb~
zL`Tb~XLMy!5{H#A^6E-5;)VMjcs0YM@0o6Q5cQ5ZY=4y54e+KlcN}>F5QT7dB;T1R
zd{kLL=nV-*Zp&?anv{KIl73QURyPIa2VsAj0L=FB-ezr3(cO;8Z9WX;hY2RI`qvs<
zdwRYzeTtxYrj5JmR-3Sic1-mn(n8r>GmW_^enNbC929#5y?xx@h&)%$y9$OpRR>%>
zr*T%dqF>cz>t?m(kQvX0`L=gfPWJE05rDq;2^DgR<ldRaZ5Le}B%;USwbT|CwMYJG
zv%Ukrl?{jDPt1xeT$-Z3JnA}ZPIiT6*ISf@4LZ&$?=)axCvKlAe)_(A;z^vP%9{41
zozi-TknF-66?`9WekbN%k@fnD?#&&(ED`4o*IUqldVA=42~n951S_*ar2rxH+kC=H
zHz-)mujv&D3(P75>ThhI%!AbpkU`B231Zy~h}W~+HEYy>eupZMGpw*Y%NlmgzWpwP
z9^laA0FLWQ85wdkt4TQF%5HE79yhpc!J*}8dDp<;=h|i4<*;UD6!cZJQSmpOJb@hn
zxylnV`U<WY<E&r714z|E?MVu)1l->80!1>4wVf1KDt%-<B*a8Z2omqY-ipcXVlxUk
z@jtr;rO&5Rr}kJG;g6afe|W(fgOfG!OK|j!rc1TwM%YVpPZ(NKALZwUG-Ow>SrZCm
zC$;=9!Y)8&NxpQCabOwYc;Bwl7aXro3vv-O)$KDutoK<CIL2JP*KDOncvV@h=uUO7
zeC0!Vul_=G^4<3W59uEP7Y0V{)6d!~-7{uNG}V{$3E_uYk0f{QbLV&Nm&`UTPgIXY
z^>WYQ*+`4lbljSA*y6#TM`MV~Iku}zqzYjb-h-NEQTsC=H+oB4tZNG2x-R}pScxh)
z^a~eL1UZVl=jZx7LXWvNGJ4Hj5hPe2S7zKfpb5|MP{7m5*%+~1{5ddrt^San_b+Jv
z+%d%QUt({r^p~jjUqaI_oaAR?5eFEs#<(6@+!Q7*7~tQ`2-!P3ID7S%N^7MjgaVI=
zPSfzlsPify`Moo^9!7VJUtPGi|F%VCr3U;}2^Ae&DS<i!u9QVpkku><DrIeAmhJb7
z9lR?Xy0ag=(-`!^AG(Vf^r9cT+viJjP0D){h{H$MnUe?ApUa!N!!&A8*+B_5%g<DL
zR~W2e8gGQBkfZJr{)&x(rn`3Td#S2ZJ=MJ*YROXWscvR(eg2Wfwjb=bK(L0cVCU)A
zi=Mb0F(~pGlD3a>vNJ#tttpT5HgWpGn*kUgD#X;z{O*i@UUlYd{<Y{hJ`;oH7d$)x
z{YtUjALE+iUo;cv-146Z-bsp8tr9Q<C+BAo-+jCzCLl@rSWjF}1m~#T4EJQJ;H#jq
zH-Zm7Fuq}1R^ew^#FR)ISNMPik`1H#TppB&!^e;viBmo6#gH9~bH`{DhZDkJ6oey1
zZ&ZpyocL7>bu#g*DynnhR|C|@#7Z?(#>DZWATC+WiXa8qx#A!)*}1YHknFdjATw%G
z)h<-(bPchRPrrZTM9F@o?<{_kjPqJHjNx<kn;x?iKKg7$)MfCv94ZL>RRlE<{8b*6
z3j9?YbtCbsGOB9gS3T64#IFEU^u$U{)S>sc$)le7d^?_d={xz(ng1W*d2C1E1#%)B
zG4Ru-iWyrAa{En^pgC66c5}&lcQujzr-v|ec22*1Vf&%*<k@^oh$#xkgGrA5l_!G-
z^Bhv`hE>c8#TCA88B%+(@TYVHk_GZ{KrHg(P#mwH$RXO&G~v-&7u5eDO#E4?6rUa3
z`j&l%S*H1wr7y-I>J^H8_hg|+IV`ikl9tjAc?Bs;lyr0@&O?~<qJ1YDm?sRh>|lx2
ze!VP;Ql2Do{0~k1HhtW==9l!p)2!<abisK2-q>K_ClujRI^Y>l?Vp$H_d)HHSV|6c
zAxp*3=v}gQwByjH_cw$VyU`XXM+&V}j}^b{l`X}e+7Hn8bUZ2uYuT0CsF*{cZ&R_C
zrm;F|=ui$T!qvwwU<)Lcc^^3?E|{v4Hde3;QKXCej&$2Skl5F2gah)&|C+qZT^Kl>
zlqk#4gLsR4cEi#ND_Mc++Eq+WBqCF7WyA>=7Sdvu9jqYszWapAYI+~HuT0_|1PRn`
z?1k^gTwixHK(4ZH$u^PqwHjrwjy`#iKA_%kW>N;4j(4PH?9d}~Cp}124Sg04`*!k~
zn#*c0tRi6Qml4vuh(-U{6oCbwGk3~^REEl;deUF)mC`!fJs8tv#oqQ)AWC&&y`|&a
zn=<J*1cM_L57fc8bPCpq!iVig{VmdZ06R`9l)IniM7!EhChOWa*p0FaHzCNk_zZbp
zRhzfyD!shmv#QcC%78fmFut@~`-JyH6OKDoLEe0lZoBq6qRvb0e&fgx+X6{=f^%x<
z#{Q!VD;O1#6)7uni64BHefA|*Pkwwqrqvyy5zx;WS$KDH_lh%}mh~0auY&<OP5&0F
z{t%1$U@6K|lQP8~*H3ldqgdCi%8(@m9+yJnlwNipz?C<aoPHuL#iQycM-oeYbtxvF
z>ex0TmS01M!1a=h=BKz0{Fhq09NKo%znAOIj4aNFqrahddM@dxBHme*CF<pav2ry;
z%g|Rs^L*nV?P`Jey23rJsh6(@oQb4>sg_{}@d2T7?NL;R?Tuh>DlgU4+g4;>LV$2Z
zdks#x*}(PuY&;5ajh9oKE5~ew_m9}0t#1y|D4!1%Kjb?O*b`rR!R=G$vT9H*Bsl>_
zTZW&*VChB$3@S<j0|ORVDqQB~>AJ$8_yhitPa_vk$k4xnTS&|bU<8#Z$Lu6YQ&JQ!
zx0a-<TZBLy?KelZ^#{_s4c-3(r9fK0Zpp&`jcYS_?#26klP<$u0dT1Hj_T^>OZ5uJ
zPy*}`u2s_r3o9z!jHko$OSB5W$VlGe)Y$_4|K4N`(3{AAoOlyt-hW&dXn6l|ux}!4
zh%y%Z<iANX1ZiegPiryWuiQD<fp$I0Q7K)FUpcB%1IYQ96KPHH3iO<30h$Ao*EyP>
zsH?NxT72<Gn$;4}HiSKz<rFQPjQSPzTAkARLZlh~9F)T)e|DGr*<JEycgdgKC4Y98
z{MlXdXLre;-G%+xVK?S8e9Y0FId}D6;^B_wjgPgH2R?^12g52%-NXO9{_ki7P47kW
zMR>$h_iZl5BOa}<`8e2xKF>Q|Zk!AH$W!;d>pp##nhx!pd|AHpXr|hi<Gpywztg84
z>i5E)^~BOo$N3`u^+fEzd?7D;*jwX$?a{8dy7tWVyI0QXc@57vcrjl2Xg`71^yf7F
zxjl!A_tw`VC(VDS&%T<R-d&@uo7B}4@5}F7+NxRAlZLpQ)3@j8?+I<?uKM_ULX*$)
z{r3#5!XVRk-ihEiPIDfi|20`2uD|eJ0;4%sbM+VY7)UXB@-e%ATBG{)qrGn08@aGo
z!FRbhv=_&D7*uyu+VL}}ejntXc%E;;i_x^>e^A|v1{tl0|MNW(VuxS#OGxtnu6IJ(
zFZ$ws25Y{Yba;P)>i1mQ*Zo&`E$pDB%<$`u{{;_*)cZ)rUiX*m%@AMN{xAA8RKHp0
zdN!o5)l_%6UJgfm+6L0Ri2sVM+9iBz{x^9)q^|?*_&{X$ASbkY&v`av^vx7scGPc4
z7xZ<geigc)uS5DxMXtv~b_Bboxqc7384`x1A!SG#GKP+ZPKM5gE`~ZoSJ^Lz<cM4*
zm&<WEAy>;aa;@A=?k)F`Z;<=R{pFkFo8>|Bt@3dBF8LSoGWkjQm-2S`Px4>nH|4|f
zJMvliW4TrSL~fJM6$k~33LY<5R`5i@@`5J|RunWA{JLOu!P5mz1se;VFW6M@g204Z
zKG!L`;X)nG*Y&{px`8-fcdPI{;RnJHoTj@Ar|G_p({v9A+0%4WaGLI6oTHnGb95_l
zj&8fyEFKm9#1gDZ*u|<@8t3RP6ZW#J*<->!_9M1ftYVL|C&bIy3bsP*%vQ2y@k(|?
ziiqQ-tEFqi-%8g?J;im>_0sj?M(GBrzxcc~KpG_eUK%V77Pm`7q#@#;q`Rb1;tpxF
zG+NvxjgiKPuSoYv_ldiu@zQwlRjEOmDDIJdDm96(XV2p)bJpxhyszRU-px3Pcek!Z
z*TP2YT6L|;95H(;ZwyZ5-K)Pw-;Ld`-=N>9j5;sqUu2W@Z|L7t#+7FMJ4%1cp30kn
zQ+cy-DsLXn<1I6EH{8RPXT1Zm-C6H|tR?FmP)cRJ14_g5%8hx_IGonI$rv$4b%SwQ
z?>3y)yAP-J#^bc!1f14uz-hh7IITA?ds<KTzVV%WyY8c`=RAEh|N8us`pdFj?(}bD
zPwwdtWKZttPh`*L>HnJbRHtvvp32j=;Z&Y3>!Z$K$oi-=<o!Qme7S-E004NL-I@t_
z6jipz|EK!at?FB>A+m%35fK4#2zyw9EMYYejED>dWC>wwASQr;K|u%(0wMw;kjN6Y
zAQ(452&)@7Gi=5M9DR=8Jl@QRz8Q5CH%8~w=?;S!Kcg^@@qP8>_wTN*y7%03PThNM
zcR&CPO?7jil6oW$K+MQ#Ss^5k&Kflyn?l1UPech6UxRPHK{Shps;Guqh(kkMk5=e_
zuIPhg48rZmz*tN~4raiBZb|JLhZb^QRoJM&cgLbJnxZwjp*L<uDu!SL#^6p&$IQre
zn(wTRI%tGnpbfg9J5q29(l87Ykc}z0`@AhxVIhc`sEr1QM*<R&guWPvUt%Oe$i!64
zLKRr4DShM6X+Y{taeOvBh5#J?BnmOO8rPyZTB0LvL@)HiZ5WJnj6)WFh1rp-2^CQp
zHBcAzaUE_zTeL?f^gw?Mz)%dwcudA!xHodOf{RMH3iWUenxGkvza2WGCvL*6xC5gw
z8j~;$_h8P*;i1WaXko0dfv~Btm9V2QY2@(iQGsM(s&J5Ss4!hPPMDb<8ap~LRX9U9
zTR1O$;-m?IMZ#smRl>ExO~P%$r!%sKj|}V*z9Ia?r-~BB3;PK}-0*NUU${iLN>~t@
zIAww=6c!1$3yXyZg@=Sk7+I=BcuM$=@U-xZ@I&F*N&fZceA<@K6;={P3uA<Fld{q$
z+6{$Gg)M{$nf|Apgh|3a!v4a6!ZhKCZ1%Z5MmSM8Rd|muS2$m|ID72G412jSUsxb4
z6c!1$3yZU}<D1(Dg@=SkgeAgL!gqwHnJw%y!jFYt`qY-t2&05C%$B;ou!*pRu)VOW
zu#Yg6*-8%<4ijbwL&7X!j_{uBDI>CVu5i9^v2eLCUsxb4%$|~&t&4=)g~h^y!b8F%
z!jj4CReehMj_|bbjPOI@S>ZW;tSx>fV}F7YzbY@|zK7A}WJP|)ZJwtbe$s<HTX{UQ
zRpe*B3eQMC&rdC$+v=5}6k+vpvs$@%Rk>N`dsw5~yjsRost~2`WmLIYznrvqEoktQ
z^jcnHf4mZ}Q{`p(M_a4htXVEL=Jhj;SKAP;pSf6wWyr?{Y{Pc!#fvzC*YGw@;{$wx
zbEK#OMN=#_pr+J@I#DtWpfpOS5KX2TluHX~8RgRk__Yktpoor(=)|yEz4!?LZ0k@U
zE%34GqYC6b*^MGPIig3xs^cTNHmpu;L^p)hO^E2Jum*F({g{s7_vY!adT#i<H!Pwh
zVXcr9(VbzfI5?t5!dfXaqJNZjtSV!w><^!*T3^nnsA1JMMSoDeefVsR=~5d}jnfhR
zI;^#~g+H%-HmtE}5slar8?iffUPPBfba_Pga%NS6az?sao$>B=KC3uG?{X%(JNUKc
zKR&1uUzNo*+k@DO$MFQ7;z&M=-PnTzcuwW2x#~XkYjv-ht>&ov)jYLGJ*XC|htv|a
zR4q^s(_Ffbeogb}ewwcyp#^FMNA&?(L=VzpdWe>&Y+9-&(=xSCJz)P8JA&s-fctHO
z2k;nYO%a~NGuVk;D8_yqq|VfZx>7glMZKvH=SyGeM=8{wZl+Yag$C15x|6afoAYN1
zO{Kdiho;eV`W0u>-E<Glq*-(?&89h&tEQ^E?dCcu_?5AEgh{BU&Z#feS5#zIv8&pS
zUD<Z+plxhVomKx(U#o9y*koI_vNaW{&(!DY3%i0{(XM0%Y@3Q?R-M3EoIpup(<sWI
zF*KIOaW-dOIAU7LSzSa=(bKd;RaH?cT4k%rY8ltB;ioddPtgD@mUl#cHpNC-{^52n
zYV{KD^?MKS5ydt1e17lSgez=Msa3umybs_ND)lmXD%`HcttRuk)XOl|3+*M@bM)uG
z@O%)s#I^&RXGNSfm(ogU#u3N&a@a)t9E979W<U17EF<L=UY)h8Mq*sres$JVUS~2c
zYY%1jRg>pMe@{4u=fQtZZ)Nuz!?oQ&-XV|UmGqu}d(UOt;IEB?csC!CefRwTLo3R*
zr!LpJ{$AeyHexnc7t61RMP=I-$5ptWk(rpzmCquqK*1HZu53H&^IjpG%`<Qx&*`hU
zJ}df<v9xTP8}RO?^hub9C0tW(;>w`-KhWxn?YGbwb?j>DCG~=OQ5{z&)FE|D9ab-^
z->BcJ1GIrQ(k9wWg|vmX(&Or&dQLsBey5J8qx2a0HC`QV<EPK?;rTthYXK^ATNd|O
z#AW6Ib%J+{m$rWVYgHQ<Y5x*e5Z}HFeAx-H>H~E~y-x+SUj487RQ*-`O?{|7Qt#2j
zw45HH6||C8@h)LCt)aEFPJOKYu0EkWdh`;r!tYrs!XK^&FRlhJL(e}wTP~&N5L(h`
zwO(yd8)<?n_*N~Qb5R{Vn``K&)gHA^?N`sJ9csJUsdlSk^{m>Z_Nq;4vnu3Tdk)v&
z)6^FAnA)ngsmHmuC)AVbDelX#Z5f=DWBmOb+ZTdj8#CFdb7>hgTelC@ed}-y+ZT;%
z#m0u}5w#AD`2JLWy^b=}DwU`5)uR+rE6cstSgqEmwcMNdChP%jQL{zk*rE_kU@I~y
z7moBFEB)711*(v1eDRW6r=BY9nMbv<%w5L?*3bgB#P|0zw4HX)PI{Jh(QYcHJ+znh
zh3(;ytvK%~@l(W07uu8whog`Sm&dgXQR1Z-vGO{xvaxuniP+jS?4`1HKNsf$$BXYP
z^$7b?e8S!>IG+uEJV%R{?xg8#(Og;x!`D?sl*FVO+x|Fv=?RYRHGJL67;c_5yXa%H
z+Z5B^%^tJY>@)k#0dvqiXP&ofm>1|1^CEp}UNVR1tT{}d(dYC9uSXB@{Js>+@G!6L
zkMJtGl2@pFJc`v=gSA-4tLl1Qu{QDwuo;EeqW-M@qE4!5>MoU|PN_H5@6}uCZS`M2
zc<!w--j}FX)oaM(>)-bO_<0)6vz-48Taf2U|GTxy@;ga1uHw3|7HV@v5{IjKer<q;
zoR^K!1lP0YZ$Lbnqb)ih5kqhXS5O(e;)XB*lX%^oj451C`K#|d+|O0j0xXp0wVZp`
z?_^flPj;5<D><vquLAuet3V@vRnaMWl+Mtj^;kVlkJlkRL9fv}^iI7?@7Be7j}!0o
zaC$nuoj%S@PO_8dtammz8=XzgW`Ca6@11XT%muAB{-IX&VSQYm(68uM^=tZd{f0jI
z?S6s@!4AQW!NlN=!Op=h!LGq>es9hy&ZrX@rTcyFk$KUv`a8#=GLKUi9q)bL;WYcs
zk>aen_`vb9j$qQak3b%eryBbz1<>hw68rN`or8+(t2MYvZ`XTJojr9Jb@efQ67}?(
z`d#+z8GQ!L^`{Qdg1r`xPEL0x88<ouoB`;`5z0d^r@+~Q-t5H$+#GDr-b)R34<;kc
z95qL|ZvNMfFZ``g?JH!5#WU$4_6!1ffpswUUVAU9+Mn5<BZ_00f@roThx?wXXX1Lj
zKrcX3j^G;HAT~AQxE)4Yw&`88<Ji29WU(g2aUB=8JJp@)NOS5r^)Q5^6px`|-!P6>
z3dV?)W1WG{K#X%jP6*?jCC(CrIC}Y*Aa-XuMNScN#QJG$eKMv8PX<ro0k-}aSN5fu
ze<G6kwSVU0xsti)ue|el*1wY3SXy`foMY&Ja}|vk9?7ZmS^58ATvuv-YR|s>(X|Nj
z<a?VRz51&xsoV*!Utw{Tk<9T-<omku`w<eyL{PxrO&ZJpuZCHC?_#!RE%*8)cHtn`
zTPHa3@8U1`5TEl6E>)qL6i1CHo_7PCsTcL9K{Sl($q-i=Ib2cXa`mv7_fYw~w<@F}
zu1t&RARVG3R6?id9Xd^C=tDY7=Pb)|tx8t36=TI&4Xvi!zi(YUx{BU`TSP}<fM`1J
z1%1u1_lu6kAki^M6P;nL_mw`vU|&_1>wo8+XxDbD`0BQDtBSTpU(vR1HPHn06K#hS
z(e_-=_}T$Ci+1E{*VjZhTC}sZL9~loU9_vUS+tv5Lo~^~O0<WyNwlZ6QM4EDz$_kJ
zXJ#V0Fz-Mg=1APcOvkOv40|7QG;U*#v5zpv<96l@`#AG%Yc=n(Kf*6z@#qXJ9verN
zM;2tZMiR5F>oF71o!JgOnC;P%*#W(n9nqVa=vH8Mw$?DaxRsb)tpa8@m-q2(e??{w
zYaO$vwU*h-{v9*ft;xLAKFS<uA7gI+)~|9ie&BbxFa7e4Do_;XPhDz2O*n(vP)F*@
zIn<8^(BN<uVGet12K(!X=m>7r*O8bjnr?0Jl|FJ$`N|%6-B-7@dsMWodrUOJJuceL
zEfH<+o)GQez9QPueN{BkeND8B`-W&&_oQey_f63x_xGYb-M2)0VWuBHcdtA_vm}1^
zO8jQ~ak2{i2)QpyY+mxC;_j2E?DwPM9`K{$KJQ1xJ?KZpea?@H`+`K}MTy5DKOXL3
ziN|jw9>4V?;rcP?B{MJQI%^Loexe(p1v;{2{{In0qorh3D?fYC+P6o3eQR_6)hIv5
z<W<i3bIrMh5j=BPNZ_5vP?X?J`~iPfX@NX{t~76$<K~2U#gv#=&1>d$_iFbVx4s+a
zUgtJ)8*_{P@3=$o3eOVn;7?XA&%t?4KF@>a>w2fq+2Yo6W8B(qtXs#e>(+By_`d|w
zD>4JcaL=*u%I?iyXJl4~%&Y;quOxC`>92{Zw0HUR)$^^^^uLi*X%|^ce0GSH`)!ND
zJ4>YV(>2<z<tFJW-s4`8_l&p8+wB#5d%V56zP>>>)6I2D-CDQR?Q{p7sBhF=^!rY}
z+k+$4*VHj_<{Hz`G&0wlcyFs|W!jk@rmyL5ZZU(*?PjPMWyYC_=1w!kOgDF%S!Ry8
z&)jbong`7i^RQWI^357kU^be^%)92l&7aKs-ePZwx6WJZt?^cSk9zsudT)cb(c9#0
z_6of%-ecZ2Z>jgN_lUR8d&=A4Ju5rQ5uB45c1^psuB@x;8oH*grDJq$9joi;t94WT
z3mvap=vKOoPSEXjN8L$x=6%R2o<~}{eN3#WXX=}4&2^@UX=a+6mL|b;H_0Z&q?+5z
zU^B#|o3Uns$uyJAG&94@G_%cIGtVqAi_Al2nOR}-%xbgFY%p8QAIu-k|Clr81M@fY
zsX1#tGoPC;%$MdXbI$z3d~Lq*;E`u}0q-GinYY|4@SgOxdprLLQkSM6000041Qh|0
z00jU51$YG%0003P1$YG%000BJ09gVi0006H1p)#B1OoyC;Q#{vPyp=z0000900000
zba_xr0D%Ai{{IF_{(1qB2etvKAOHcM000001N8-&0000W01J4W)tF~=RkyOoC5<$r
zk-;|2G~4IcV0!4icTDfSnchP)y#@#&w9rBg1ky<8)pSDdErHOD>Am-oz}<Fu_vWtk
zKD}>mpS87TB%QVN-`e_VG(rdvNw>--q)5C%Jx?b2s9a)&6dzmu@0XGVWDD6#cGmr5
zOW9o3lC@<6xmp&M(XyzlC@0Cu@+&z-PL<PiUpZaJ${Cnb7Lgm}dbvp!l&!omp&-E`
zKqMD|B1ohVsYGg#Mx+zzMMe=W{31d`ip(O5$R@Ij93rR4CF{s4vaW0@tBWP#6OmWs
z6GcP`QA)HFtwmeWQFPXQM0e3c^b~zWtmr5Di=kqy7$?3I<HZCqQPz`{WPRC82&{@V
zgvD7DMmcF9t)(@zj^b!NZ4&wEF5RJf^uQLiMQkx!!gjK~Z7<u$#@fC%-d?nqY=Uek
z+siJpt86T5$R=X2Y$IFCwqhAplySm{P`N{HmRsaj*`4RhopP_-BQDEbVv?B5#Y7&_
zOApii<u<un#mWudWR#Z`WHF(z5=K)F5hi-es<N6aDND)XvV>eG_pzZla)s<D%gS=1
zf@mrm$(pjXETe~G6`YNgaW2lpt9T7>;1$Y7*-dK7O8uxm#ftV~g;*=%#7410Y!<u3
zcClNm@@7z{8tj#a#7J)*s(IFM=n4H`IE;shun3Onu_jeunXqJGhr;KDF9?6*OXCak
zRr1yJHTE_2HTSjj4fCz@?eU%TUGP2fJ@>u$2m2%aS^RnZ1^vbSrTrECt^K|IGyLoQ
zoBi<-CL&ct+6aF{WJH#T+!6UBYDKh;7!xrk;^#;e85Ef^GEHQLNMB_3$efYUk!>P7
zWKx-eGeu<XoB4T^h*D9>qJpDRN2QBe6ty(!NYwGDn^{Dbl3BWB9g(Yht^v8zF3zwx
z;`N7j`hBMNA3l6Y`a1n$A;iL97~^S~4Bx{EJ<ii2!jgx*_p~hZ312#&-xuwx^HED{
z-$-AaZ=dh9FW&dm_tG!?DLpND{Q3RG{3Sgtt^B?GvHperjUTmy{6kC4i24zuBc^=R
zlETxHJ~I5HmYB%)Nm~4wV=~{({NcZ}EQvbw4=w$3#pH_hw4`0^_q2%j{v<8`Sf%j8
z|5&fWZv2_}ycPA&1$n!w_pAKBE!8Wj{%v*rPwlms%Uv!n6XJ4(%Vlq;x;*7d@qf3h
zN%%Eky%1MNB>m@Y!mNazNmiySAwnd)PqY)VCHN9T6VfMyB%Dq1mwUZJE}gp+68|XC
zKNFT%CQFl8;^-tD2jm!vq|B5{2r5i1Xbp!awz|9lOT3;}lg~)LJ^6val!2jtk0LO0
zU`*hF!0UnUgKSW)pu9n4gJOgT8Xhz<XiU&p&l(prK4@alk)W4<_YZphA8kSRgB}KB
zu>IQ$PMvrMhkW!>Ci;obBs<GL-&AmDaQJ`uA;G!5GJkMUuPho|HmUOeH~EyuokVVR
zklkfv+1TS%Yca{=&o*!LZA6?$wat2f9w?T1+-f3gid}k;m@F&k!Fq@us)u=ms_YRb
zI*FggBj`+=<?&}OUiq6o!g)l^nn)nZK{@4G5lXR192!Wogij3iIJ?#(?Rt;3n>-HY
z_egs;iM2&M+Ip-N#XZ{g@_5_FV{NQlCwh6jjZY*lgXqf!tI-CmP8)?5x$$#4k7MZq
zj-z<|f-d4DQ50v0VmOZ;;y3gN=hI`6Oq9eqbRW0d^!TgIfIDnP+-XB`uZR)Bq77cR
z#qp*siMMPiky5n7+oC;z%}?6aAhNYY7fNm$QlM=l(u!{8j!7v(L|4jaJ5adoOrf?T
zzZ4n7r<BX~qfcyq%54WE@|zml1=Q3oq$c)Tim^Xa8~cmMBnD7hyM#Wq>#3_4CZfb}
z8es0yAbXhx+bcB0UZtV-n#d}?pvm?P&1Ow=Xep<l<(!I^aY`{neX7dvQPoqGRlQU>
zRbKVRuT=$AQT0)MRV7tfRZ-C@R#jEiR6kYSgsK{9fNiV>s+y`6_g1y#b$L_OQG--n
zHCWYC_0<qAtfs4>s(~7&8p<2;mTIILt0ro=YN|%4W~#XwsXkLPR0}mqeXaWQ8-A;1
z^0R<L0fz&QP-;qJTTv8cu|2UR9l*!792K*pXoS5*BkgVa%-*3<_AZUK_ta=?MF+7p
z9l~LBO0`sDaF-1uwzbU#lR(AoXt&JlGCOe^PN&<r+lH%Fsx|p-7pzH}aVVXnT6Px3
z&~Mm=PT*2&aGBNk#75&&TZKy4nN-q#P0j3LYHoj`G4>gKZl6*+yOg@wb#A%(91q$Y
zDn^Y}ZPXX4tr~}I=`b#*KdF=*L#6HKRK|{_vi1vF$N}n0HC{~+ozz4%3ESa#N}wR>
zsV1wh+*&mSKU3|v5U!xV2yHdhUQJaU>>|}sO;bzMQngGiS1Z&?wMwm4Yt&k`POazb
zDo$-M8PrA_r8cR}YKz*cwyEtVBTulEY)kd4+M#x;U23=5qxPzOYQH+54yr@ERvlJH
z)KPUz9aksRZ|Zk-Qk_zNxYg>kI-}02bLzahpf0L-bx9?t%j$}{s;;T)>V~?hZmHYq
z4qsMx)jfWw?yCptp?c)jx%KL?dZM1HXX?3np<b$2>NO@)Z`51$jw4|xXXczR%!>p@
za9%Fp4!DE-f?vTXZ#NwcpTk&Z9Kshc&WkHn!IvT~U^b>O*UV*e#a#8GhY9AL`P18X
zCwV*XS0AH}-ChK;9j2H<FqN}#F3#tUz%-Z+GvI5O3A11}rZnI2YxBMN!Te}`GK&M|
zn709Q%}w*h{A_+POUzQU%q%x6Fc;>=yjT#6x=<{RWwCI;DlCbmF~9S<NEhX@x*P#<
zE{`i9*0=}mp)2GHyP~GKJLF2ZlCG31?aH{a0c!$Qx^e;Yusl|9<y}Qr#XWXU+*6m!
zJ#)|bgA)PYx%(L89tBKwhh4O*>Z-XKt~N#l%m|q2-ne}3P5`({PP)vlxT}XDnASCL
z4OIr$*fn!4T`kwz#ke-EeZV@`(RFfNTsPOl^>Te&tV!nvxIu2H8{tN|&)qmT!A*8k
z-3&L|&2tOH1M$#QajVP=^OB#7d*VLUb_&16{dkw=aZw(RwQz*kC-&n4T7mn-0lY(2
z9HbEPi9?h}9H!dh2z95q;wViM$HZ~GN8fNw?!>+LOa4xr5Wk6&;*|J9oEB%qS#jPr
z5EsNn5ic&;f#R~bBCd(6;<~sYZi?IDj<{<s@*+Ek7xH@e4t|7r?x;HkOJFgqf%&k^
zixgMEH?R~Iz;aj!D|H@SSm)J6bUs~F=hww_0bN`d)FpHwT@rqRpXsu#&S$)c><4ND
zt8oH+3oGCkv(>yZuW=E6Cj<DHwA3E&;{!6{wRj_w@o7HEXQjY8;t`G%kHu45D4vPu
z;syUMUW!+g77tK9@s8@?m()Z2Dc;j`@j*(dBuFidL`jmRqb)K}2FnyO6+MxuWf~d6
zw`5wGPG*o9?O+*hXVWF=W0Vp0y^NHZWt7Y!v&w8TyUZbT$xrAhJ(Iclip*)3*#fqV
ztt!*YP@9kM^KB-XNtf1DWpbHEm(kU9SzTS1(=~K?T~k-kwRA;Yn~U%|@m7Y3zoefN
z_^Ga>>*&h5uCAi%xm)hGj@I=}V;Aod+*NnOG%-zK9bAF+aFrU``QnL832|@@Ho$e*
z2sg|#a}PGbP1p>#U<=%at#Ajn!Clx6_uyB!4?Ez2d2a5*PIyR5;1TSC$FLioz#e!C
zd*K=EgXgdxUcdo(2?ybo_ll15RX7B%;V`^`Bk&fE!aFzyf5LJ2ixdu`V>p<O<8b-|
zw_1P`@ZOzu7x)BU<KOru{01NR6yN1P_#V}?GvIeE+&OoVFYyyT$ANsFgZKgm^F@9H
zC$;2wehjCyf<H9CX|3T5-GZ~)z&VX@UK3o<7A|Urc<tbl4uAxm3@+>B{DAKOgM$D_
z2FW21f*=@DKuSmjsUZ!7Kw3x#=^+DTgir{BaPWa2A|TSmK_<uyQIG|)LN>?_IUpzG
zf=?hf<bk}95As6+C<uk1Fcg8JPz;Jg2~Gzkp%j$n3>?Z~PzK6EIrc+&j^eCPfwMtH
zs05Wc2Y<r3p$bHE9;gb{pgPomnotW3B6=GHGCHUYbua+xnp@_!d2c>IJrpQWL45?&
z&;S}jqky9(j3?T8&={J~Il5`dX0i26xNT=Ywcpqu?HaenzGTU1>8M*_e8z7g_=Y=g
z3!A^7seJ;?pgCuR7SIw}u@72v1jIlaXbbJ2J#>JM&<Q$27w8JzpgZ({PrdVAFX#<@
zps#mU>IeN{02hRTFvvSM4RMRy52}P)jOj2vX26UXieYZ1`^7EAA@n<rqSH8<&fpk2
zixcSzPNu8)6<xzAblqGxH*hN5z?JkKSJ4MtZ3V8e64zRV+brT9>%&7fCmy!B@QD2c
zv)kNw)aJowwh%tI70B5-6kzL8GFy*=Z4*jin^H>Kj8fU=l+MObdfSFF*tQg5yHcd>
zMwx7P%4~a3IXjNZ+b^kt9ZwbQ1gdN2P(3@BTG;QXrTv~-*&nDi=AaICId!xvsFPhu
zo$V^>Vpmfy8%MqE2I^xsQeV4Cb+Y$qtbIUV*oQREKB6z}V;XOt(**m1CfZjt$-btq
z>|2^*-_cb2C(W=Q=xY|Vh?CJuPED&g4Xx%7o7Zl(e{pix&aTC}v=!^oHmpzEu>t*x
z4QU59qMg{7c3~6RjZJ9}Hlw}Roc3W0+K=DUbNqo`;E(hYf1+2om|o-0^ag*Sx44Af
z;X_*%AK8MG-wvSyb|@9J!>EuQPKE6VDq=@cQTv%Am%>?>(y>eBoJ;KjTpAi?Z_sdi
z(<O5uF1btV0$n;6<kGufmw{%oqWNs;TXwX7nQL)9uEPzuHrMC6+z{JiXY7bwu>*F&
zPS}k*b2skFJ-7>Z$91>?<8TwM$Bo>F`*SQ0<i0$B`|%(=hQH$pJcY;cB>skf@Fbqf
zU-5LF%+q)Z&%hV>24CSje2H)IHU4QQ+OO<nJJn9IQ>YR}Qx&R4m8mL!&x`p-{)K<w
zpZO<VLO*gGZ|04>l{fGf-o)FuIG5&<T$W3487{@;xG^{4p8P2f;lVtIXWQv^8n5IP
z{3~zg797K^xGlHjHr$%qVQ=h*eQ^Nx!TuPF19>=);*mUtNAPI=j6cV77>^e)0ng(l
zyoi^17w_Xee1LcJe%{Lmxe{09DqNi_b2X0U8r+PVatChC?YRke#Gd#m_Q3Ag%TzQ~
zOkq>pRNyao7?0(lJPx<uW;}zZ@vJFnN|;jo4bS75{58+zStRfSzQ?~zSyS4S;WfOP
zm+?|wz~AyJUQWNz&$O6+q6VhCDQAlDVcyAycn2S$8dRMtaCxq1ikc#(s;OqGn`l$R
z)HJnBZBxh8HT6thliTDmEln#KZSo~%o%o%3U>+sqol2YhNja!8rhsfH8_61`wH}@r
z51Pk`c_{N#7BWvvjA^6Ka3+0LpVQ~{1$|M+>)-WBeM;Zbx5a$<wVWwu$=Py_oGa(a
zZ{&QrKz=J1%0==!`Mti+={cOUbAFhk19gxN)+uyK+g_*AsdXA1qSMOTvZGF?)9Va6
zqYl+!I$Zm--|R7a%|6*v#^?w&&-^A=n&0Ir^M^TOPMWjklsRqAne*m^>gHC;{qmqZ
zAP>po@`OAh56h$SnA|JZ$eMDu+@T|7oX(t>tJ7I^Hr>+nG`&o3)5r8Rv8JEtZw8ow
zroGN?2Ad&rpS&aQnt0p7T%!7_Gaa#8+!-}Xby2fbS2ah?RXx-<YQ9-%R+-gijah5f
ziL#0LI#EM3GsDdYGtzt}#J>QLpHT<^004NLV_+Z}Yy!e=hHloG3=GU)85sVpWZ(8L
zjCJMzk1Q<zKS6lNYFKA5fB63yp^9}mP~GQ$E5Pb%fiRvSo~<6JYBJL+kQk7?fVrFL
zE{c2(^JEk?CCuF@>X7Z*h2p9Yth-p4VeSF|eOFB~004NLtyXDs(^eFfyd+LSmXd`Q
zb$Q~&X=*>2ltM6ILXa%G;4aSAN>ExUcG7);mKlD7f6bL?XXrP6TF-s5O(01-!<1os
z&$~K$cfSf5N|3P^_@NN3XU5D{i^g{D1$5b>)i62~y}f`k#rW@nQ7}3kxo_Dv86g>-
ztoIGm@FLeCQ;~=c9m*)t74*DKxs`kURddqwJO1|lz?Qbv3k0>>flZsCC8)}%8ipcC
zNpY7}p&Fb7t?~0UW<GBR0#5W|L6hwuf=2MONk;38)*~wl!_XqL9EOsNc5o1e4rP_V
zJ-K2Ghw@%KpuBWxOuBGCBr|d-rzHFm-6X&73VxCr=U>W4euuIp8+uRlL=Sf-YxyF=
z+6tn!6>o=u4DobxC%_|%gBn<ND6eSTEBB2|nwl{jr7MwQ>Bf}VKP0mQ`;;#^G_C|Y
zIpuYp<&1s7H_&DjG9{{OCkv`SK4o~mTe3&Vo=`6*e=@zrEW-s45l6!B$(ReFGi6wu
zO%fKI9C}IFqKxaQiK$awr)9ilST905`qCMt1L{vrX8pjnq#c%Qho)7M$@tWb>kiE*
z5QU&K-d%njK)NAK^JyEWX`CFI#Wiy}B?1}fz%I>rk?2K&W{@<8=2UApNOIkJxJ=Ur
z@`*!lsMc1{+DVm`4gI{<pH+!5>+J=}?5sy-?9yzRn-s0<CTI9(8b4$%p%U3*J4iTr
zh}P|)yll2)OT0G3R{ES@LGQCBL?li4--Pz%Qk_!3#4zS1vgMJn(Kk&~*J@rFiIMSl
z1Dcht@M#K7IVsU^u83g%uemwXm@!<p7bR!M%JjHwT|k-^5Zip&p+%LLESHdHmgiKG
zW%;H`axC9cNuK3-m5i~pR5H%;ZIu*QzN3-}mLDilA@hMlB@G@rRMy~;L+>hsrpvG4
z<9qP&UED3;BTE}Tvb+EvSxWfGav46dEW$^YEAWx!`|y$FDtu(Al&I-ea}><ZMZ!aU
zB2SkC<D<CWDvF#kIhdr2XyT?gr4ll(N?v3C%0MeQv^FY_xkMLBN#0!a1FRtq@WZ2-
zIsW*P5?8dpAAx83$BkgZPBhMXW9d(W|J65SHMwLiBBINP9}b`FFB&_pI&?)<&ea@R
z|1T<<umk#4l*Cvnii&9R@FJCWdcCG>V%h_&b*x29^tx#-F2H^jTV@FZg8!OA6JGhC
zSCK;0dbsP_i^rmp-a$Fs36`LU=Y4Z4c$yJeVLi>PWY32#@4y1Ksnl%Q!1Q^qj#9*X
zC|&j$FX~FldT|$zGhS=~N4$exeJ6%XSj@748cJAbAT9`P1^1m`M5fy=hXF_K^Ju92
zv0HH?M^w~K;J2M_xfixj^6Q)f0Zo2okONsmYHnyX6)-$PG-Q*FakXkXWgNgDqsDGf
z5jA`p+2esyurI@uj}>vcbM)(*7V4x99#lqh8{Zsw;0;R?@#p!~5QnAQP*PMlYYi;s
zT3AUc<^l%r)=1qxs@{B=eIn<!qH6iXOI=0R$~_q7W`VcIIVekoDxi9!4jX2dn@ghA
zD;SdWx;mBycKB<wV)Os%K6an?OHE>h9I3Y*4t(@E8N>J+9KS6G2^hpN3b~1p7t`Uy
z*Bx^>U!lvG#g9+X-@(o`7v|{-@Lfe$AzGX@A9)oGe9DG-`b2R%QVZ}?)yJLz_zb{g
z@VV-nTGIy5nl0w|0Nc!Au)`b%yUby*$DG>$UoeNkm&{=hFo!|N91q|ga~Rxb4uh|l
z!{7mP8USB2hru_@VGuEgLChQ%V4pb*I?Q3vWe$S_Mb}4ZKI8*!0DY^`EuimoKjE;6
z!}p4AjMzW$L9>6<h}l1B#MGY^)kf4`_@Jr3YQ)svG-B#QMK?#(M|{xK-!)?D9~v?B
zv3fd@%MAZ`a?4aWpzLz{$?%)v`~#DPO>Y1J00IC101tSayuAllTi4k*u5*X>-V&0~
z01bqMKuBVXy{7>)4A{mPY%q8m1D<%#IPnO!V`mSij#q}0*qL3)m$qq|w%?beX_}6t
zD{1QN7+wD7-Yc;Tw)1`c{~kYBSJKsa$9eaA&bbVX;bJh*>-cd-EW^i0Wn?lKvMkh_
zWIz;hAtnMAn>7pbC0i|KA!0GxWXb;UckrDRm?WkE{QFLmnqTD(c9l2`F2BcuNe20t
z))nv=OHv&vb{$W{UzFuh+Vv8N-mdgy5%;6N7)?q-7mc36)+()fi6whpN}xL3X^mAa
zU2FC_?d~+YH$$qFDo3v;WJ?SVmCA0A1hI#{>+<9A3}oyj1_L_*ab`1=3<f~mz$OGN
z4uB}xP!lQyP5`{<qHVYk7a91(KTzW#jgDCvdhQ`ktm-c0#TOA7QWI6=h%3~EE`&bO
z$Uz(NfHVpYNRCZBj=e^W?U_8bkR08Y><>%<0xUvQAy;~nvJh{QYBI=5W0R+{w!T0(
z6*8DFRk&i*R-;@e<Kuj6GA5&MsPu(t!QQwDgud(Io8ppmMk|ZM7BCnjelIc@%wI$N
zaE2P<C!vs&m{=zIkH*WyLfeD}32_u@L>N*+ip0r7X$1S{Je&GXv;}=$3c-F7ldTUO
zK|UdLhY8UL*hd3|EMTCFcF5nw5C)f_V8k&Pv5-7c227|7^@gtlVKHDC03{738B$!m
zzRJFNnD{trf9A(E12y&y!;<CqFG-3mSzfwzYthbE1_;N6BXN~|1@l)DIJSxqI4hRr
zbafqe)%KSJ*S43d^oLe1dU$;<gbWz%W1nGP;b#~L6nxB^q>QE}!41Jn{V}8%s#x>~
zq;M+a1_XIHx3e<f(D68YET`?u2e-a)plr<>Kzh1-LuYMFHd`)|+6#Ic*1mqEKCSEE
zol2w4sAS<aohw@&{_~zI!2iLJHmT5A$racW?5$6Hb$t1Sp<KuhhzoI&!ljhKz}@Jq
z@Vygwia?kzP+9_%&UlmjkZ(4mcI|VU^JmAZei8|D-#?@-FEC}y@mO=C)GR4eAl1t3
zaYZ>o&Y}n38=eK@2w82**;$gHJ0{JpkO%`(7KdfkoAn$hL*)G8S&++oh6a)+N0=C#
zKNCcfl?<sdp(Z%Vc-G3-h)*6Mq!+-yw*UHQ^(+3aBdx^G_XBVLPYzb0iI<7D|9c&N
zy!pXD?O%3oAm{qAc|Z7)99sy-E`ei<8K#Kj&||VpD4>Lf24@L)Wyp&4KR#F)=p+Zu
z0xbgKp&)n@0;^j2Q{vP63CWx%1y9!84F^6+f*{y^p-~)x5O-6+k&}JMA$oqGypmGG
zBQ=%;1pj0v7PyiQuFD8!CbCvG`sM}HBf}Yl{xBgNp#+_r*T<>f#ZLTgvO-5sX#Moz
z@}_99Jgn@Y;mJTIscvpqvm<cB_;Mm}E!6N?h*}={Tlv-SAjnAQ82JNA7w{M;e_nV$
zRB`kMEwH)KNkWJOWDxBDS`AL-`&Vy1IA{3R$7)u;0aOpy?ONUxn;~*2mA>-svZ0?J
zu1Q}u(wf{{T^wV7O)5u_bD{TbX*OBwqkrA|9PqwBs7uPXS1Pzdfg?7m?c7&)uY77#
z9$yhH2l)ySBf@*UFv5FC2mJG*CK+CM@oIIbp!({Ct5wLAD$<l82Scmy<DrenHd0RJ
z!{3p17G<bNs#vC2OZexcWROF6Q7_gRDli~d!0M4L^k|z83GTF9wIEk4FIeuzgx`E~
z{TeweCR_och`*43VVuCvsj(R*hz>AZJ%5$7?(pNWuZhR0@AUAyndh1$0Du`MIN|)&
z^D|ECcU|PzzZ?4u`52B(T4r*Vpzdb@TKUOI@ggflW&QUq^0y`kP^p}!F*)_gEhS#w
zx+~zl{>vM)g~DEu5@+G&%1tfks}uZH(D=fk`~i>!(g9#XyQ`uc9&kg8Pcj{B%C)!@
z;4_8WaBt{GcB?v81TNekYv2*PMRsRR&GYB4pk|p0F-A#4N8A#wNf&BT$dC+;BGgAQ
zhk}K6Qoe-|%OWQL?UaQ?7p|N-eHuT09jESL!+UnXdnEKdtbjiV;GMB7CJRT=9q|7A
z7sQD6;l?W!V7Um_5RYe^K8?iB-x9^2i@X`y|MJFY-ZO-f5w=6<O8gaufFXlJCn+h1
zLVB<$K!dNB@K`Em3_n_x(YlRB1%E}v<r-4kN|XYS|K0mx#3<aE{SYq;Er(ek0GLid
zG6=dzl0QjG6*S5!@(VaA%>IiH4x=1q=q;@~N@-#dj{pSO`tXIl8l@1-V{vh=oR1_+
zv>I}5F^k-z9UXEi73dCig8cfs_;G=3bVzPjDC}}{hnzo24-^#qX>cJ>QX^VbIzi|d
zLIGN+QSy-<1Vy%z5F}EpSZ)zt{~dmuFTehrDo%>Y!}Cv^zzgsZhLz;^B%y+G3pqa>
zh!=%{5yv}spvF~b)3H^2eyq8?MZgN(4KQT$Ll+ikR05<Ipy;ND9(Tvp?3|x0k(Mb1
zqNU3MSenWuzy1|I0ugvglc2z`?~ajkH1=<NKeRnEhArYNCR-oMV@xtV`2LlzL$|U0
z?W0wz{tL+N-~RTIs+Uu`j<&A*@f}rxB}ZB*?~!zw_{IA}ZI6Dm=Q8mAe#897K0eTU
zaYO$63*VmTy|5v#?fkb?9O523jK6@t18s|nkq+rMfN=Pc0HvOWN=+*5Qy^z3;gPvP
z7(JybkcC2R`Jt!3n1pLF7kh`RNKBj#baz1sh3dkG@_IGtQDtve%%Lz|a=xI6CzUD1
z3*NKZASNdo52rP|6G_|_p3X$C)P1m>!agZsk6r^f^?%(@(U9(6A%M1mlIxDKYpj1$
zJo8NQfnhF<d#J#8I77{+3i<$Kd+*cRiW8cLYkQyBR^n;ihGwLLZzKdO16d&({hO}&
z>tpM#ZYx~!?Df0u{_k`ns*>($e=2lO_xTO^i=HM<_B^p659_BRx<9Sn)bik;c0C9D
zA8tCb8KB2$eZ!h4zaK^F8;uvV9v~ddQHBJ`t{-l6oAZ|x{IV3puX?Q4UwYup9ly+d
z{ycInxpixKT1$>4^ceCFf5-m0D__`M5&8&^jGaowjN@Zlrw{E#5hFSH?)|?kfkQvq
z=Py0@iygl-L(^me50ith*%tZ%@>l<&ef29}*i%mY3qMYL!Jusg@!w%NOd#cumbM6A
z0dtB_Qg(#4j^>EWMPv|}zij;!>GZbloCC~vTfB0lJ1l%B!onC5TPDlso`L^)?npAx
zFIR`@EuiSN%tS9sNt)+z>x{VThnrk`_Pm%6WUC(S^(D9OZ7?c;?-8$zxF#^iZZC!G
z{m|3UU(~xg^d9o8r)hI#!?AU>a-|L0as<=JLyzKA>>wEX4E-(sD4D5&Dd8t`Jl>q}
zIgme0Uoz?6lq&RIo?Ixgrq>0tI|^bvm5Y}wuJjacdw$K9*K=~&YN0GXzoV>Rc}1M3
zvSUd{r6+s+6U+K8q+(ZuB8$UfFKF>47kO=tq|zm&olozsUOcynCv*i|@s+)~fs&+H
ztEY5XRpSF2O6y7}yCon_Qg}Abi07>FaR4S<--m$U+DDhp93=bu&Zm7(x)waKvz{|k
z&^*LlSa~yYA-#Q29`?a0Vo@;~jAQ~PY(3F@`uTf^Mk&U_Mz3So=qdW%E%4q`@LtiR
z_>T-R1JDBe*#{f~;=fy-pGUkc0Ip=}*D`FBXy^+?A%E!uXHK0W$JjmgFWdsh(9jl!
zH2rj7NM12vGPI^<XJ-zt=Sq*L<DOp(4L-LnLDYSvho>v;Kb+M&(u^)0y?f~GlZ}lh
z-yVY3Bh4dyS=6}1!_>G*ByK{KHFJ#QM#Es}$OgCc2&;x3YM&u!D$7{^%xZT8bPbIZ
zeth)qo~uU}%cloZ>75Rw>Ev635sYX|NxXWYe=UZ1Nf`{7>C*;t!ky#Ap_DVkv11xN
z`Wah@!{itIjUB5dT`PWED;s4PE8^lRj2J_rgJW%EFjz0bvErz)!Z|*?m^x@Wm<ogS
zV(6(euOc`MQJ94Lv40-c7?6_)hVT?TaF!jTc53walQ<LQNIBpz?x28URbs1LZWUj@
zh#%L;N4eTeqbWm+ekIXS@6wFMH0m84n_h)-@d?CBN8v@9FD46+E{y{s9-hJr`34L=
zCRZ|v-?4Z^wIEvhJd#RWI3t&`0R!hU!7`pg^a_fPUWd+pl|&eNLM}!^$UQ<~=+7J}
z7kniW(sI}X;r$cBlhH8~%~a($`N(}mSBi+84{LO+Ph>p4UII4oOzM+JX6T1VI@$)4
zl~+@}TAv=tl0;GXe+0+d8kTF4qok7~2P1W101>c9k0Kw+N6l=6&qjMgei`~xyj7?a
zTwgYlE>!Zdqof~68oP%607GGX>4c+DZXQ#}DKQ(*e5f>AMaDut<ljoCB4b5+b*k}1
zVq1N&P7_nx+7-xXFR;35*WB??bIwr4K#N6#4&bP*aN(M51^>?MJ=#QklD(wFo-l96
z+~yyQY;N@`w4?DcTGG#WiO12i6#T;J@MSaU0{k4t8-Z!4A=jp%)i{G{sN>UPBz)Nn
z2v5T{^vCIXV#*98DcE}1&u=6H#!WJqFRsU!Fs{}z7ErlJ81DdpHkg%#LQ5;7V@c|N
zl8PYkhpT)rx}pOT+6+_Pj47u_pr}K7)<4qas?14lElcKrcQe{clK8`C7TL?b_AcyP
zp1tHgo3W{*J8{RM>_dP50b5kwlu;k_D5Xlas^Q|2-T`IC6U#F?%i;oi{(cDzF7uS9
zyR6Y-u9yuzz+*DzBo!CLmM$*^pSx<;m9S#G*)gg4p+ItZqI%V;tcDa#|N5e>i!$+y
z^#dk{Nh%D~R4=HnYm3co@}@4U51?Eb@8n6j-lCUt*yMbsLwR}&<`_~&d?bR56f{{>
zsguk)CIydPfLeR}$t~sSaf<p%PkT$1-ehf9u*5%n$Q*3y-BMUH>=d%q(QTK`{odz_
zFI&8ND5HNvM$h2}AkOM2vR!?8&O=AH&iCgBbF^9rm(;T~h{HlCQzQoCf<pPU8!Jdu
zAu%brt!;5y<F0uL6?<P=xp=oXg(cw$qvCVC1%oX<T}q8VZ(f#DArn25TJDl&^d4^+
z`s2AJMfrJbt|nSjHhifwYjKgyo?w^I@S!gz;TKK!#mKlYqc`!$=(q=V%z{RI!rc0%
zq?!G2O6kf9TbK;gcLRd{<YJc!4bI?nH*@oP4%X3xF(Q0q`Is)Ub^vJMB$FRnZpo`i
z6-23;g|pFMGW%6zqCj52uUXg|Rj+j9v}Y=L<(JAuX;rQTO;!4wix2ZHF25;tZn`1X
z;<n8;4e?XvD@v=6^|l{usao5RrDmaubpzh^JLZLkkR9vSBsOoU3jGbQSK15`SJ^^e
z>QJ)5cjL7AC(kSDU740M(3)blo3U{|6hb~MnI=z@2vViP#PDYIf(c&1Z*EHrbz!n9
zSIx~*0}NkkP-sP<T4+?ACI$@AVigy7jw|&Xg5Ya)=JX4XLe{04N!D2{Du?X0L^wjK
z(QZc2(ffE3&>)c!t1VJ~w4C6J<ltU~fY9NUs<>zw$-cB9pV*<EQS2!`ea6gUMlqI8
zwt?f7WUDPXTq+A<eu{YX_63J-lCa3=4f_~6ec*9u?Rq(z&B0?m8-oj1z&wx1%;*zJ
z5zYyrPtHl2n_9HGHj!hr+03^mMs`b-K$qWhsJUTNWi;Cecp~C+(C0`p@KJA~NGf7;
z>Ya(*i<z>Rv;^>1xx7f>d^W$k*y^e2S=;Z6j=zOeF|)P~bXU54&1<uXZ-ygwg5uX+
zTCP~PvItZ8fd1cD48_gc+PWxpW-F4G+mUa%kt-&^hg?bjeiLA|%r1*%F4;^8zz$*I
z(p}YIwyp23im;6^-DE!G?q?$NvEHY5%_OA=BQSOiV?#e7CZo}bvIgy~Dd!xB_-M-c
z%21}YCs4Ji$x~nDX`ff62bQN>Eozyyc~MV*@=<-83(JO_1*qEZY&-gFQ~$<{p1T^*
z3*QA}w7<#iE_b}})SQQoZEf?X`w=&Ts<S{GZ~;|^GcZ!7R^nv0gA(@daGlPej&CLU
zZx6pIg}hM1?IBC^YbC`m?~VMjOvR3JT4cvA2)qF=%Zp;x9^Yitw(K}C3AeHxPc1DS
zbQ(^?YH;>DQRkwzqs(My<AF<Iw2-dryT{Sm@b}BhQ+;0>jqdl}Bk@WZ`y728-wtEx
zoNz`qQIn@jRFQHIjTTHgST?Ia2uZNHL69s>22@HI@BcVwd1IECYs;uhDeIr(G-uX=
z9W`x*yI&iw-P@5;u<_i|h4*-n^75CAY!+{;V}6Q(&(}6SSa?p)LL~#<-pBi$HCeG4
zOAplKb(h$%g1Ub{{4nwFS9?->?w-Hwl|%LOT6X`qU~j5G%bu^ciny`bfH>Q`A(gM^
zQv4-jl@%~n5HeCBe<R_d8<9<paKlldoH-s9s*tQ;_nb8GiRU|vVoS<3Z~Nlq*$sOa
zB%6Zs)*h&-SW#^89~%7$Si8<smhOr*ie(~nTk^c2B3WW;Zj97sRD@D|Wl5^Eo{_f7
zll#{<B*o{?iOpT!lq-k%)y@M{L?<EfgYh|yU(Gc9BDv{Juq3S#%R9MeI~8p{6_*!h
z%-yrVJ3Hd>W&3KT_6Mesa(x~dqo;M+(|hi|2{nO=d9rE!UBIXrV<8{n=g96EKxq}E
z<ii^vO|6Q>G?P*#g6SyOw>W|4v=;2_kSY+)AwDl>(dN?3WC`ZBI7?D&Y+gu$E*yRN
z%@`ZjAi(8{;`WAJtsZ%cT$9qA)4B!na?Ti&*@pjyk<O?jBdQyNVOqUNV3r$kQL4P?
z)OZ?wYsN_V!MH|y#-h>$7Vm4(wJtZrxp2=Sxe{R?=5g~^o^0>BoG%`k9&{sL+!#%l
zGDVJx-n_;wqc4$EHS%$pysWYQ*oqt}a$P?)8YgABW{k;x5YpF7Ru67QAL+g5PfRoM
zT!>i1_XTKwcLU{2<!qEYXvzUcOoTcUDB6i`YT^oachF4WWiQ-RoaL3ELZx03SLBan
z^T8>aHQq(d)n-YUIT?24O_)={qL|aPY4k;sIW07gngkg1M0M26w{qDCP$oCzG&PYt
zW3rgwMy`cr5VzvbF|z5--1lJ3_y;WXUBD9)qn*@r?;?8WivU|dq`%#Z<SK-7m`jli
zWi?E4fF$`I0WYV0b7_PT&f*j+8~t$O=nEtrt@O)00o2{X+NtC;_R@mQWut(U?Jx~Y
zW)>yev*Zdl6K!gSe?4PD@L*h>J)^xefenTE-(A!^?p>r%LZaY|tq9MUc*dZ=lqH-+
ze95Vxab|CaI5*w`=kG7BOzkYh)Z709@_93Azn?rt<d2E|48Ov#M{21v&d|81ful%Z
z;Cwf+DU5%+f<&9eD;+q~BemHq0x2R=8x^&Kb%`AG!_jDT0c{oO2}o%@(U*zhEW8<_
zgTxf~l`$A&W26qC|HPkWm>FeMjPy9z&Y*1y3wsKFZlu-+&4e8oPwbhjSgM=?UA&0w
zM#{VqR5vb;r#VcbdQ>Doy+s};<|8^)b{R~?`?xaBA{4swVVP>xKSshhze3_XS3u&t
z;gL%i-X>;u_j%d8?KlUQZI=Od1aIucNq9dA?xSAG&kw`T$v$2&*+C%#`$#xqK=5hr
zZ%G;2C(+py@>rc%tc#T^Y&r>u73*Ua3M=`ERiTL0i$ln*sl_>pm?*J0Dn_BS>Le1K
zRXOcF@#^f<hv~gAiQZ>Odc&WeoAmj!;C@=RVEjPJRxX2qPwo2OT*^cwN5&%uv}t@%
zK)(I<B##Aop`3^s-X32)a4T{2jYdyI2@(4YX&`0r))IJI5_b~;i`Y^L<XJ&vjmP&g
zKJ-US(rht7_t|b@!?>NfwNp4vGgD%>S@;r)nGZiCg{%~z9i#WazpEt9Z8vicQyF^b
zsBdFLKA0X#KI&-wMqi8QH}e|&Jjkf}p43j_I!UW+n(9Yrr>B8fa%<Y}gR`_*5hvmy
zI(2rbPz<U5Y`STnxo~S2IWeIdHv-pWqe1h6g-_zeljz40o5B1hY%{uUZ8Lb_f6p!a
zZ3$&GD04y@5ok`PfAaNzfPuF*HwFI-j)vvwACq|a4Eo-<oP9Fs^JmdNMC=fyQ}Zb)
zn{6f1|4G%<Gp%9DxBLecaE7%||7)G3?Hc3>seAt?&HImN+W$(ksChktz5(Yoh3=oy
z4S9rItrNJVhe6-i%6646&9fw_r6^aVk`(6iRufz3D02^u|18c0{qXv)GnZDnxZDLC
z4gyN6(ev~?wDL)$XYeW%u7@cZtRwx%3^Ftu{x_Qt=x}D2nN^Uy?mSE4Wb!uNwlJa}
z-Y7St)fwHBslIS)=^KwRnPo86&Y3aKrV@agme0r22XJ7vEI`zKiwgN8arKT!E&)^Z
znX-b>Q?u2;$CKf4df0bCdfFz<WjeSm8g4J0V1Z-cG#T}uX!m!u)tb>;Q`g`~pGYn!
zE*0z{mM*5Jd9j>g*9_DA2Ra>KGjB=!?Iag8Z!jDFB)v9p#ySSg4Cdtdq=GrlT`X>H
z@5sX9t-<w|p19xD7QgmRG4s=DvlXa=`0~Mb&3FvPJ-jQhB`jav5N7uHd??ew1f1LD
z`CZ^%h(X`T!ixR*?H8Z8&(-E!cc+L+=GNEgQVKM19dx?3fK;42rl)HZM^i`)1rY>O
zrn0S>KNH(%dyIXDpQG{xlZ=$2>2>}oW&T@9&&6_FA#QU5u8{a5lPuXM&?S2jYf{BN
zNVL!fVOKjz&RyeWEkvl&OQ^yY`XNXc$%qFx65NUEyJS-FeT>%r7RvO6t6p4aAL!x$
zMHedve~!^PD_zPN3HzQEkaxgS6vgp?FDAasnzcz0BpT_2dnd6hoOx5U-#Kk63n^c9
zLKxx5q%z4LKnCQ<1Dgo`Ed7WOJ=ODWGUH8sH<VEr=-6w}pZyxc7$QbAW8U~mw{X=R
zBwKCP@%lSpLBXafYznynQ;ZjkQ6<%w^arL^z`<pIZK|QE(my9v-vCrx_V$-IW(+LP
z?X7TvIu>r(EK`~7W|d5D(aS*Y;JMz0I~E80ErWXw6>xYmrL`?1ZE<<Luk%>Dzug92
zPpDXs*w`Fj+U9L;BMeb4xq{~@k1sB_q*Y?_^ccP}Iha(PpOGGnjY>@L_=DD>&F!f%
zxveSL?L}@S;L058=-fE1-dei6w0K`{u2xIs13KaudIiH7QYtEmtOud{4YG)X^hegK
z1;_WO(5(^p4f45lS-?9N>Y=Qr+&#asT=&sBUdiB@p0)QU#!I6mG07Eax!o0Rwyxy4
z-r%DA7-M?flA-*n;W(wpg38m9oF(mj>rz$@`#TRcgSSTuT2Cy`EcRz;ql{6`vLzXR
z+juakZBIk>={tw!B^L&(V`zVn4kzy!{1s|-{Y<qaFDRd}By{Q0jMbc1NM7j4F`4f%
zBn$_GAtO~G;8js+j+I<Nh0X})O->Yl_{+y%-Nw_fmtahoyI`{bW~!L1x87po3sEM5
zBcrEgMg!93gm^p!uT8ViW(iR39u~~IKuOgriz#5Gmr5Zp_x$E6eb&XjCq&1!m$YAV
z*}fN%Q2(HJAp~>?S<$~Hao*Ny0>S!MzVl9YBBYtjc`rdbPVZAdEm706Aka5>e(-aJ
z#idroo8)qHyh`mdE6^`TdFYoQOY5@8<rbG#>$WK5mIQha*IUHn)R=lkB7@<beHVgk
ze6Jl1?!6f|C0HT+ToUFa9A*m4Ax8L<5C`pKoG5;hH1?rilKUm7bzme#Gy!yfu$DNA
zz6tS_L8&6M;z`t#=;7Wef#QS~P-_I~&~X|iAWrQxlZdL-@f70V^w|wu@4Ve@=3KQD
z<IDAmlxn|`EzTdQ%7(MYFF#u@N}ZFtJLSKoQHni1iM<qQFOTx;cC~p0+!ihiAexk>
z;Es|qa^V89J+z^J&HOrS@CGg*V^zcv@B~Gp?Z(J`hDqPaa+ifeSq=<ki}HCpK2=yC
zJx&rWC#1_FN58!O@}!`=qz22LK_UPJo8-T2hMZwWNHYvf&SNT^tXH94kb6aL8u@`!
zw+h~##$TB|`g$b{>lKLetzmU086+^BuY#~n5gYVIkrKihAz_6eEK|mXP3V`zQm!-%
zOU93uO~8T>0J#<wDTYwVb%hGKh#ZyWOQ!anAjP_o*7J3bYaXmPUx5Cy)5OaUF_Fuq
zOQQrO$YAJo%7#PcAeX8Bwq$yDn;hb#gvVAnV|dZ3_*R1T<oPG3?lB4CuY4Db*i`&S
z&=*4M=aqSr6f7$9R8ap<vOtPS#wdNTF;iIfWP4Y8*$YdDmnq9HR0y4A&id+tsGJMs
zB5RqasVZL=M8C>-YU9=e+xG2v?J{Zb`qwyXhpIv7UGma1Z`+*EXJMOu8N%1hX48`t
zAg$(S%d!`e#`R*kFs;(FsHIAmc4@FN1Nn02o^gA+I(fma+7JQ3Qgjh_QRBu>8u!M%
zCQ|^hCIIDfxycPfbK*0sB3z{6#ahZ51l)qjurt9p@SjxH?rclu3hI;+UdOT;q-+W*
z;q`jYQ}KpnV&`dirP4IJ1Abi6U+-SNq_n@z-PcHV$E)|h&`Z7UdvRm+j&t+(AE??6
z|G#5j>au$}w*2u-JA7TV`Hzn;qU{=I?5F5ou~-I|A!j5*Xv*>JC1H@N@kMcT!!Qt8
zV5JIB(jH8yC>d%>6!3FXDoY2O61B)OtCK`xLvxHWU7xqZ?yTPTLf?iKliX-*zSmW;
z<EbuJnQ?)u99}f#B169Y4J105i3ZKnzJrZh{`h!%(4|vC+)~G`;n!f?A!C>s4dE39
z{z<z?COY3>Qg@qP(>W!~8eheUvA~(ib+rjBOzJN8Rc>rdkh@FKlJw5%0RPTsmRM!>
z4C44eFWKg{Mw4ysq;_&O=l#}#Ukuj_);Q|#da0-9kR|x+`kbXDc2!Et{ueh56mGiE
zowuwau6+NG1`_7x+EGD5<K`M^Qd*7)T0$A&4ll-(P%Ajstm+*|U%b8eq0kdeo%7~(
zT7peJM|oaaVyu9idkJv{eGAULl=Se^)@lZ(v~R=0j#|3|WMkB!oLfn)=ulXjJ9<)v
z@1WbTWrI%t6Aw3LOj@X!-hEfY_1vCvN2Gb0?k5WI3R?Ck__wuI6dhkHIt77hy_xO<
zM-Ui_OF(UgW$&N=z(3Jv?Y?U+5M_20StsGJQ)^|ZNgR?O4&?f0DZ_n3ym{jSXy{|9
zrN)`mQsb&}Pg`BFF4j`h)b7h@FSNR9*ODuW2QwaAAyo@7WMW<M`T?@tOT3>xKR;&j
z`r+?>BT(psw5>s2gLsIj&bf+ZWkxJas=c*yS&DJ^r&%fIpl&1Y)o&~kseh3C)ISI(
zsl{MyZ0s}SOE{0I)7P6~Gw)HsBC?9S#uoF1ri6TttJJ5@YFpNp73jLNdEwE7c#c9M
zHhM}@5~~9A7v2SX=FZ!fgx2zT$|#j4KHZd%;;^PQ7Z+|>m{#D=7YKD0ogpdD>dmlQ
z0*xiv{VjpaWNMxI7;%!qua3c(1rgSbXy0_pigPyfTsIKpY1~{j%Z`<*LC5)-(axSu
zWKRG5AbX}&vm4ksR7?Tq0RJg7iZS?o=iqy+=|jT?3A+66J9E*gS`Am1-M)QJ-P%G8
z+YC4&;_HlAQ{>D(p#<UFU7$qc=cJUbskSryf$uf*Y*xmW!QNU=a?`pT;@gcx)GT@O
zr!sk-?9b%NDSz|2En89|@<Q?Q*o?fKT`>M%aM@PcovWKsoP6N_E%(!V=jDn@W)R7N
z{~zXrQ8vcHa_}b@bEceFa&!5{BKrkdlM6ZDs^)KhsI_r(wKbt&PC<e*yDZz8we&z`
z^WH=cM<tP%-PxYFBCpP!U!CtxES+1LD0i16XZ6;naeL@$O|L?QvCt1%9^F#ruU(vw
zzo6LfO|e=M9L~(foVk1Edkg%zd?92-w7(?I6Li~?i&L^13(~TyQ*`MbL*AO>^`j$H
zIZ=SiWknJCkUv8DjA8nelL||dt59RStOc7&jj0+jRUnHi@WrsV&;_(*BwDAiyoOyZ
z9v-)mESYOl=jC4i(-cq;RtdD%_v2Zl*9&A&`-n-oLvC6b+lR84Su3Gju<s#@T&+&P
z6%k)jWj&8Q%4U$WI2_EH2xVybOY}5em&uEu_aG~GTM6Oxxh8!d!~;dBI6ZB8oPN7#
zAs>w|MRm3k%-ctDYRpgE9?Fn+F_3qUL*50#ybFTxdef=6!haUl4EP>_7)GrVD-iA}
z#SMrm07EpUot>q>SICRcPD1hQ%HPb0W7!xJuYj^tGHpGV5Ru=+?nIEER@THA<Vy7G
z;X)-5B<q?9GnO^`L{fx(B3uG}WulNPBFmN~sbtwQQiz_tZYh`L%c*kj1Jet+2&0U6
z9P6fX_Eu6}rj{6Ftedq}Z;N#FU*YP6DxB39h`L1zSFGA*Qt0G7T!>1en-a=v=jJ8#
z5VqT5g!9G{4B^@|dYW&F^XiQ@7KhExrV2KF4z&GtxI)fv>DXsj6qLb)NZ<6P{v<N5
z7{B|8Fxs=!r6=Q!Y)9KiPk%q0zJ@qK`y99d^ljDLXZULGjdFFqg4P#~nD}}|#imHf
zA{u6-^Q9Ybzhxo)#&04z#(D_qSYLRh>Ey=1WR;t>cXE5m7=FR8OlylkZQ_wOW3)4(
zmpAFKG~Ax3f^+ay0(tu~mOEAVT4&N*$<4WRqnOaFruCS40qSudV;FLeg{p3%xBn6T
zO}7=yg`ysO#^P#D50Uzx<0Mirt$ImXz<a?=)!O#|0Bgb9Gn9L2-DEC+x>-w|k8@L|
z-i{%O$mB<7Z-ZI4VQMIDktS!=e}oG(&9!6K&^OU9soEJ#oPB|*C2Fdh^X6b<j;Q+e
zZo1-pv0Rv1<!*1T(gn$4c=mI{J0_~gNiEx|5i(D%B_5~7O`7#QA?r-AyeOJAgTS>G
z>t{sZ;^1@{$z2&IikktYQ65ciA%lVb4&pWQetGnF1a^e@?vPxK9b>Xlo>l@<**Ym*
z^jC^PYpkW#*isv^U#x&*RWca(W%O(EtUz*Kx{cg1&t#Fy+HSFB9=}X9>{2s_5ES7F
zh~EjLhA-`aAX^a(@U%jpz;%*RnG#urvr&$M4*;&0kSLgu^O9(Z$rPGnM!%FxLTfC!
zMq{o8IV6(HMWGdz925DD!fosoNasV4PHkk*JR06JAI8lekonUAk`4r?<to;T96s?+
zo?3bm9RK`Yxs>@hPxu$H_CCZI`h#2qjwz(XA)y>GfnW24#Dhu&NYIhIEGEvNe}FKQ
zBn&zpozBlcgz9*D<+k4u-yT-V@dt4xLhiKBX6r@hm*2gwkb}eMa|&^2SP`dCI2Fid
zu?*t=Da1V=j!V{9SW`F5qxoD!!V5hMJ{N}q93U1TWrPAUr(9+chOGNa1u-JzgZ<EU
z?nQ&hFn)%?qxM6EC6KDdhwH;+dv2y(-Zt<>?z~iOoY7qrLwxFApPyLbmN663BqA2B
zaeI8x*>hqW4t8U>)o<~{=tV*ij#VMj=s2y}V6}iHN$%KSt&7;klO!sPN?t*}y)46u
zSX1+*3aN-g)zgll8OZ<OkHPrNG(&twCCQOS^6%4Hvn`(b^~LFJITlaD0Jpg@J3Fbs
zDbK+li!E4~F=u;gQfxtcMh$!oUEi~|tlpZ}mQq$n!P$+Lz!-dl!D7fE92+T}B7j@W
z3BbY%AJj<1LYZUp=YXsQQ7qLjl5n}O9hg^O&Zl`Qfm-$SA2oe_ToF=5jW-Y7hY0Zd
z84iXIW?xiFFQWIBB}{Dl4+7t0ZmPyvf1-6=T+l9J0$>eD#5mJl;!Vxh7p`kU0AQJ8
zqO5w2h%d(9@#e=#qtzy#4zI4!`%2>l#80{67;{WUx+%wNMkIiRCnpJ|LIL+VM5Hpw
zwHlp{J_~0x#IKgQg~4Z-A%0|?l4d27MVIR%8E|+<dq`r}rj|Rb25%J4SeB4i6PweN
z>`IoiaFL+8We`(o<h^S$QVh|JMr&V3;kvnrR-;wOMLr>ApM({S-$$N5HD3E*PBU|p
zdivk7xIB(XVNm6iCAp%^8W~TF8xp#__WUGWOhHGsze0z{u~>Wozo#=;B$9~uuEdz=
zv|3-z%Gw00WrDswiat}g2FeWcR)&(ZIz9)K7J{FO;?!y7adtzJ`bRBgY805Oz4=u!
zIgLJ>S8l=;T6yp4tQ3PDX$;AfzF7D2j>7)A9*qi!!myGceN1ZqrJr8<HkrQ3`}HZt
zf}b#LNeQ_^ZkjjBVbt(MOuY)4d5x>gA8jpMm|nLC=Lk61TZskf>1D#A0-;36cd1Qs
zc69pOlwe;?!qT=VlN5)%-HaXvzhe%Nwo5j35hJ-P#S+f&f5q#qml%XxRH2MbU}FRP
zHOYg?Hh~yn72wY|FUIjKA={a5ZX_DPV@y;i^isWzLgam<2FfrGdOWgc8xavmnk?Ck
z*n~8ZepzJE1|>1fi2@2qv_C*E+=#S2-~<Qb6D%?CZ=>0lV^BnS0vUPFG0~`a+>~1G
z6sq|eXLfnEGbV3-y0<h@<#vc9R;$5mN~?@F_~h9AKDW{8a~tf$A7xS|!1!jBHpYWk
z6BJCgT;?oD)S`$)CgY=+%oS%XN--(SZneWN=IT}YG>I(JM&2S6P;z+~DS$GfxS<zD
z7pj3Zy1->ivG8%nfSqZy>XS9@q1FMsU1!!OmpF-ML9r)UrzUojVh-hC6`YG|<|gv=
z3_6Pn&@2fP4jh?-nfHs-Mu|RFs5VISc6=Kl2A@3zRah9Oml{<<2i4mrkoQ3q97jy8
z&ZjE&bR`N3@3bN9K};PNbQ+@sh(Kb|<H7qP<3~&MHhf!%FsHk;+*}@Rv?ItANHqQ3
zkbd&CEhY;FXW`}MPQW6U4p1FC==i{o#acOMs86Uwn^BQas~>C`^eOlv_BKKEa_oOp
zBChs2TlgaZ^AqF~Vh)pcuaX`c6vMG2>j8>e23nX~LNba~^!I2f)EP^d_jHqqZh?mR
zKQR$WDxfgryIfw5zS&h>!nY6D`DG>_(=p({^;T89JYg_crbO{NW4zay6yMcGPECh5
zk)9#7k{CvCHG^79P13vo!bPzkGfL3I<F=w6ekNl?&+cPLsRuhe6@I;=q$7iREnbXg
zm$*IIr3v_b#`Icm;i~F*V|pF=>LkjR_GaXF_h#hL_NWc{J2D6Al8~fWHhu~nNuh13
z!KLU8iR0Az#2C55V)1GaOLcO7Rcv-svfV4w4%U@vP}1N=1?ti=Q=;{yR?-|nldDzz
z3OT0=+dl}8)ZH2FUto&$3;4a@HL*hzEOJ_mUd^L*gL-4Ro3?(gfSkio;|h&pRZlR@
zs0V$aIe#_UX!B>%8^{GMj5Tnse*<Af^hm{G!r{j!4{E$xpBHD6%2*<{RuJQn+XjQh
zQa*xbczmKZG48SxFCn;4N{&^J?gRgTb3sNT%yCySsUka39iOO#gV%XNj#On(#M%sQ
zXd3i^>g2?FjaeY)NtH%zoITp*cST2e%M+6-Rk&Bg6>u$4a+OSKaK+dQyn2f+K`Ian
zoKXt3RBG_pVsaAo7Cj}W8z4SEWcn$|pw^*GWHFJ_dOBc1TMN{vL@JlFnM~B6FSG>H
z*%mjKk1#9ZnW~_C6K@k{R!2#2W`;^to(D_<ev;sz;z4qo9%BoXzd11WpjQWlozs-1
zFUTAy-%MaCO|+$sn<Jf1lYozet}C5Jhd#O32}+2|q&)%y<XKlx&g<ZqQfkb}F*fNY
zkh<&3H!da@siP>u7IQb?avnJpf(v-WKeQf|+M@+>UU)z87O1Oj_;GSC9XXu}av(Y;
zPND`4(AgUq)zgc(U{t@QLntu;1QAGkx!S}i+>T&~wiB20=f5*wjJYuc<KhEcc`H65
z5)#)`4!O+*BvCrzGo?d52Z)72NEe9L>V<kC@mnR0M<%2R{(wB&3dq8dl!y+dZPc`o
zrBl*iJ+N)9P>7eKEUb$u<@f$*(>ehUt3=s&D_^=Cdx-d#kaLMGWFF%P0q;9D=Lc*t
zXSa-ou?*@>BZQ%d#OVQa;z%osb&bRYo=h@t&CVX72njM#T)^B6>4NNABNP1+{9ec<
zzKDtv>V$wxF%afH5N{?Nb38`(hGTR~0AaEa9*-bC<`V~*fG+^Zhj1d21zH~Q^894B
zS_tyzlVboKwhvhXV{{Hx)sCjq6mZ#~<My`7RJ`Z$GYZu;fe0WF-nUFH@(?Q{e6LDI
z-}{)sAiT6ruHuccGPp|OQ(Oq5DVo7SY#$mO9-Hb)lg<W>{z9mgwLd5_8Spa%Arf3u
z!CVQPVRF$&=&{3j40-P(#M2Uue9ae9qk)w{{87jRQYDw7{ax%%R6w8g8gVZ+a@MH*
zOsF8T7YS!$^ll{VPI_Yz&c*2ch;WSS5N07uGi3~Bc;dZi;d-7y(1PFy%Gn@|=B>GY
zn91eH58y1E#XTVB01-9D*ANdUefC>eAEN1_T!U2Z<^0F-3#)iCyo<sG-@#IF@#Dld
zfX&5s<6MXh`9kta332IwxXdz6$9E%F`+0iad?@ZH6Wby*@>m+;-$2Ba+zn~O*!VFi
zlN{$XwgI^V{~<##txJKdlJHsT_!z!Xoz;r}P{QHpQ|Ff{g&^E#`4l^c8t^?-4I(Mv
zr9(@LnPs6HSV&JEzXLZW1!Ijqw?mP~>%>h-*)gVMw*z<0O{jwI!mMxfRHc%yG;i7H
zV&-3I&zFTvj0h2mjCrrZtPvrL@#w@nyCW;vt)bp`K`^=YxS-d~+$_<@NS#%gF(#Wy
zN?uk|m!u#1jwwMKnAaj_zuscU=zCJ5L#4DwOQq3vrOIKH0yw1(mC9j&cA0#QmNGY!
zC;3YZc9j}_5ARn`dr$M}8ulhC#`CH81E$1)frtg6f8qISA@9vhADX~CJ^oz+!r+I-
zn5UP*??l*sN?sN88pVJ&azG(u4EVgT#Vca2#h6h^Hd`P@hOJ@7=5=EGoh9u7Q>tC1
zvZtB??Ilh)ju!H@k|m*Z9=Zy87(W~ZAck#QMVl~=!5>#!#@-~nm&qR96`N{T)Rb=C
zOZsk5g!Le=;=d2aBjF}*_+&=fAyA<aD95ZR1+lR?ZY7S#rW9FYgD&Ml+!^mk#c`Lz
znSxv5@{^*XlJesm`JSjKPrf5QB_-aKk^*6Dz^@@6vgX_p#uhxrmt&5}bjmTz;?Iq-
zq&pQ2c)XK@5g+GFVcu`cb!)ZmT$?SMe9g8+V4$E7TZC?91t=Jfn?f14I-m?vQV?s+
zagj8o7RAyuh2cT`!EZh%&C)|cqXE}Vke3)0l{iiw_!QbJ{=cEULcwPISLhq;^xMDz
zAID)EX7&b6<}^E`*_@PZHl;e`HMk?rkplT@i}Qo8i1)=B`Pw(2xnr(}7-}@GU~FtA
zxe_%qHZBl|bNPJW*sq1m*Ps<dKmxR{4^j42Hrc|O#;=fVzZOKv^G`yez`;>rl&tb)
zi6NRayJ9{xyOi}+Qs-TRd}x0{ENyr!*7#WC*dvd=Bhtt#9}qeW;8kKwtd}+YSn4pa
zv|kDZe^#jI|08z)X=EGK`?^6hk!{mgBjer~)*%CMnW;s7z*5gR#t)`1W@V1dGzQ}-
z;v}Mk77gYh_-yMSykN(SD-?=4%4b+E@IZLn#{mH?Y}Ax}+EAA#ngih7NZC}IkYjDW
zVQ;lLJJqWYOxrvCdtwMYJ9ZywyYVR<=95w$TW-<vpzW?%Am;MS{z^YI-La5Qk77HK
zon+oY`Y@RnNxiFo3APhx$?+C47+5xp56DBvslC`(LTLZ#s~6A&9RKb*`~v2L<hh<t
z;CC}v<SF?9Q@DI;0^XmX=toQ*u2mtD>muaWXO5x2P^Fl16Rw|vccbHHZ<A}!owU7+
zz2ynqAcP>Y&=`9E?Ht5y8aZ=2M{zR%`P>ogI3!0x_6*3FgeHP6uVKfJY4rG~Y!R+A
z5h`}9>KO9+8I25M7|Y}8b4D4GDELd1JUbpcN?lQ$05FoG{>Verj><;OGBigzYL)^Y
zB9(_e!ADM?zRo;-8rl6I&1XEHs`1f13zE}EubvL&LtbOv2(Q7|H3(x1ytGiZ+Xme`
zjB=^K4gQhJMu%@4K-N}FEbtFkvBjDu|BX_NAX+2wxYn(W2}U6!5D^Zd5ra`;C!33K
z&<~_I&SI$o7UGE2B9X^gi6zl?5sn=$RK$r9A5zHI3u_M3>q^VU4&d)Fc`$!dkt_UT
zvv6|ZiH&MU8xR#Rpwx-wA{ax4A14xo;fK3q+w$ftv$y>~^QFGaJ4(q5kTLvU`${^W
zB|`V8FRF*%*jL>3JOC$Dmp%lJlFp$6<&F2OD+EZ>$m=VqD{KYQa`G3e?;?m-SAthx
z1ugf$HvoBMCGtF(>p>p=3-TtGu1wHJCI)0w>JELJ3I=3ZC>1E<{|bs0J@CN+=T+yv
z*Ec4Jf*YcBXn?P-+S9S>>Z;DWyR-NKG&UL^A;9Ke9I0ax4}dmi{gIz<24mJJB6s24
z-RVs9fzdWRqx<fK;Ke8_rF&)wzZ`#*Tq_Z4B1>H+8NGxxBEKrsL@u5%jh`?VKEerI
z1vc>zyPoj)>h4&Y;aj+C&f;@hisQ<=vy+Jgy&mO(&5H8=+W7A0zPn@awS$#8{f~5>
zUKnKt7p0}^A6wD9cfKcg%hkb(fu=MeQDu%=_@uIK-Ql`Bubo{`zWaq0tA2E%S3~FC
z<oRMA42N=_8(wvrHF3%qU?MCgxvw(pgC>^RQpZh^X$JIBV3%iJU4?~(N9E@fZfZ-Z
zLB4jcD?m_1ydzVB@YObbT&hKaF8oz*`uzOZnB0~XTMBa9f-!8CfF)Kdm7=YQjT<X!
zM%ES0+5cSU#?9!OM~HWa(iWFF7x9!*o+ZB{XZVn-Wp8WKnPZ!pz3%FsOqEBSQEcNw
z{Kdp$=mp4QJ$XX-_=)-CG4Fx#vIXR*EwW~cIq8(Ya99oy%Zgyhs!F@Ppv|8uiAiZM
zcC^(7>VxsZv*NsEBa5qt>YO`Q4{Xg|`%p*mo&-7Ba?Y>%y(clywy8L~HB-OaoWG=~
zagl4$sTKI}Yr6{*YL*9gJrx`M=uqdyZRP11kNzUYj@&`%%962b=sWmhl%-D%=jjy2
zfUIVt5qx9)lPf#YiKA(OQq?_>x30l!tsJP0X<VHbm7AN{zhsUEY%f?=YOC4vOvn7a
zE%6H;{a{Pc;v9pqcr~(k^k3<{BdvK0JgnF|Y;}!|aq0QFdw+9y0n1jswrKdxJ1g?H
zKEL)4pyS&e*6cc$Z(&RLT%<DM42GlMQB@gQeXNL^a@`~|fm8*x2V#cdalM-lmif*m
z^DOC&*?KnMC}MPVYfEDgU)!8QJ=dg0zufZG-`?vW=76)8faBNef+Dqq)Ac&>?n{;D
zo_lG&h2DGS8~Yr69DfA*=fa8S2-s*VGUMUz6mKRej|%)WxT4NuPAju#uWj~41?pg8
zqf`p~#dUGc44c$h*woro=qw(7y0`7lMc&{3)=`>jj<4Tb7gIa8*3$1=w7)U0r=i%W
zE?a)ABeko_jh$ABMN*N}U{{(_(=tou_U^1(_2S<0;PNALUkA)gLwas`f^S})mBka$
z{?-9$a9|iCZ^~JvlMa=gb{Hhot!d{%B7cZ!XkFkc+AuFUI;%CylVg{77aeNtI-cO>
z%LM#rPqEKm6VPdsN)kqdBf+-JXpN`Pl~J2!mngUg>}gi1t$1;kr@qK161h{d4F0a_
z#9Uuc!cpthQLapr!Dm&jiApMTS~B9*##p16!aG1bg_c5F32hZnl0gDa87R_plT|;;
zY}sfk0;JYZb_*>5EOml4dG+#+3YR`momAZFSEMIz=4%xKp|!xDzqG{K`r!LpgGU=H
ztvZB<wBl`|D2vCE(6fHq!I5fzb-Gic38ZBiOLvv{rExBgN)i(jD^+FG_7-jV>mNQ?
z#}UTL>q-2Qi8JWWAzv-w-T@2*Cd%O6iLDxbs}p3P@!o{;WHqzuM_tsGje)ZRK$KY%
z*Hl+#DEdJ&Hz~u8zO1$A(&l9kZX)+-jK-k9TfaK4qAx%69P;O?QrfTeQfE~@27R}Z
z>Xry2jglaU^zvBYXFN@Mwgpfj$m$iP{m}HX(G|UA{mtn@u)Jaa!sN<>uMIRGSd?6O
z=)aJY#sbSve^s*ojjihgnXkW9wChJ3kfY^yzP01G#Kn)+mmm7o&fkK{kJeLqkqYs+
zia*TYk~SL1l`8V6MJ7%Ka?CJjvNuNu)l~P6&IG{}<v{Q&PqHj2W$uzv<T4vE>gR)k
zy>IPr-BzXJt2vHT4;#zMh%ffYIVv_kuGC+%b72b7|HHjyj;htArJLG=JnVRN4MtXs
ztNvW5GX0cz`qS;%Ywln0QmH>zXNk&eFM27rugcYY1sHz<Vv4$pG8Y%yeajx~rPd35
z0WPCoknt2%DjfGIf%9kQaT0SYm`IevuTQN>l(Nw;LWYWJzf>pV+DkgKsCevyv9Hi4
zAP=0>b73fwr^IBa8;uwygbaba=o1{=9p^4djT1JonLrv%{E4O49t6KnW6BI}b2=Lc
zv~fmTak`WD7lF^;Ul6O3dfO_%P(q$Ar66=kEJyDLYQ00l&k?AkT(LDb@%rD>lSx^W
zL%XOzza-;|aa_n3o03U2peGeWsS8ZOMsrhb`92exbF^`D2EcK1qcs*k^<)*hx^d19
zZ|$XdoXqqM#VVURvE19Zpw?DxCjMrR!5N_~U2EGLkq1Kh%3?}Si=bfs4Dyl8`4I+d
zQni$_#puskiBEpeGqzu@K@YPyXzIecVk6rmMZX|EB+&mszfg!mJ;p3!_0vCkbE!d1
z+xcYTX&AnbgwM-%0^0dcvP?6Z0lG^TV45S=z>2xGHTkP*Tmx%r#T&|(msm_WZCQ!=
zc4?ZQv<X69lsl$iZC!$~V0rc2N@wwWpUkElu<9^2vKp^8T3nS&)8{PM<1FjS^c1Ig
zH1hbQl<2a3r9N4l+oO@13{iYl_S}`lscV<ks|~Bl(%P#s<VZ|(_>7ArNQVp35sYM;
zR5>2GO+vh=i;cUr%}4Jtq&242iaY8DDq^C83$iB>z>RXpX02{aHkS`J&2P;fc%l~{
zDKc92t&J~FHSKYfc4Z}&rh8P<IB%+n!aF{}qm~-=T7fdXZgpkG(6Ty(X?J7WkuE>P
zmoxSa){FjwvbiL>w5KCAV?6saLH$N){igNVLdv)aTZEc)J9#oOhp)D%VmWAGQd^5m
zA0r_yt9@zNdBs+~M!^R{nJza!PyZSR2xL(b^b&fv+LYO`;y_1HgGXGfj~?2Rx#6z!
z%g++uyfR#A!Z<?CK*bp#{$UwUCFj%eAp-60%hY~w+oWC)?Y~4|d?h+U?^624zBa9J
zU424ypvvQID-Up=5LFF6&|b4=QA*L~^GnLMxl_*qyfi<5)1~F5y+syB-PT6d`e%l+
z(w9Hbx#|5!78GU>J_>FIw0T?5&mdgV@=hFjOU+v>HM@~OE}X?9t2z(QcdcDjJut^1
zGA0<oM_kkr`_HW6(p@jCYQC#8Fz5I?yU_0J^=Etb-<`MVsg(&0MPB~SGL1Ru#G*~V
zy{9Q-`Mry_zk6yfB}=)`AGSk(lQew~#LO~8?N4%XBtoIVotsqJU*~d^Ee!@roYFMk
z7SbJZb&2+p;r7&m;VbJp4ke>`T)rk+6YRUYp}eCoQLS(#rJBq4mieVlcal~bt=9>)
zxgCd=_WyijZhjWT$3ONhx*YvG)&C?ji76&jW}<5}U6@5r{Jtb?PUC#EIV~kV<f0}$
z@+tbT-W0k}SrxXdi?fjCGL?zeojGHlp$|a2LauwD^0i5Qor#AJ(Ry+cpa^I>^h{gR
z_Bu1K>WM10+*9UB?rTa#5R@mDa?mgI`T0TR{}8{uT;p4GunE}_8cJ&kn*3XTd%v!r
zq}V7{37NEfWfEs_0pzoQ;U_c4aC*dKStdP=fy&$HVhFUb;j9vQx#OOt0Zl?de6W`P
zfc)|OHCvlKjrV=9)Bb?H?}`3k>XJJfY+Sh{Wo~-3tzvb>8c@08VrO<wg|m6#11ED<
z9B<t7=Z9MXaT%0=qQQq3c0F}uWlW*m$u%@CA1*3f-{b>i43Gu!<3XE3J{vS)9K)%(
z?GzMcUgXE^$Cvo+)oaTiXdi(WRcp(EwD<f#&fHV)li2m1BQJlqGwFdfAZOhpOG?(y
zO+Y~Ix<|W8`|CXbJ%r@0d!%FMJ16RB>~i}bUQE3MN9fwbS>hzR8zsoTBW?f_*%?aq
zv!;1N=p5)~P&xp}E|J$~;vgJ}PGQSWb%|H7W!x{BQK~_3cnwDp9d9&o046f%=dX<F
zfnR;dic$^{Th^xe3Z!ZQE^?HlgG0JxIZ-ZDBCmn_NavU>P)oQKEyNaGvH~0vszTx1
zp&arp9`el@mM0-bpXfO~{f2QADZ6+KKvCeXS-JCArQ@vQ`Ul$Fex(*o<3yLQtGMs%
zeGNx@gM0)vOVKa&1yHo^{P58=r8Xw<Bq)=NzKdv`8X~TIpux|<)!%*0&e-zi$<mz}
zM*2B3jGVF0a3A#7r4d{Z+GS6K=VUq)k*vsq#YtjsvqG`Q{w31NxOr>tY4q1-*tv?d
z;wE4I@+zmnR}{CLuNI&pQ-(`xaHr`Ud0rFSbk@S;MhEP+c@<uPT+L^)Bq}cYrK_uF
zS<<1u+*_yj6+4~9K7D%MJqsG{J$gqWM{ZPlmv6YEwtiKC-ch<V2qeVs$z6?coo9y=
zyW8sx3WJnvdx4j*4ai0OHw>~lL$edSw763v<Zs6|fF@`HKBnW>kFa5M3H~0uPfP8t
zr0)%<CE-{JpYjg82*(ldw}T=?7G;u14GJEDNTW<rX|#e%B*06vRANwYsShROhuAO;
zaf{5X5s5TrncNa3f-$~)+Iw<6!-MFrz;pPYA!eU4c3}5Xb7L6uf@Dy@5R-WaLLLzg
zQK43l04Jwob)pckbqQKT%ttjEP;dwF*=jQ{iWgH@ToKnP53dg+Ym&<-9VM;f_%nNX
z;}*n1J<qf+`+9YMm2Lfw^J$}f_jV-~?Rs^PD7}ErlOo4M*W;>J7I*X^J%l5vX|QD3
z#ZCG62(53_`0gn+PhIF<vgWBDuftLI%w_&=;(1syZ}=``zx_`7K0rO!0~tF_Jcw6P
zwY_L)QDi127YZL;VV8wpyjiFg1WYJ;Wj`@DuCci_0n_-gSnUeu^}oa-R_%(+orave
z!lIH`RCW3=w(47AFY)Q+G@?jj0IkHk@c++5`5RvXGO+63-(80`<8=mu^*nw&yhrth
zQwyl0Gbz)NMeh2xf$;Mq(}8T#!C?5e(ZM)ZPz`(=;`~D58+lsd-8C0$jwR+9h#_Ur
zu@U?{rpjaWDu|yQ)+g`)Q<WCCwc=vMup`F|wn}~a!)SAyPbkXthVF`qMu5W_>O~G)
z9ig%47^KgeDH8hPkf1?J@LW1%U1+b)1-{f8D4X}?*fsQH{1N(z-QdPr&eYv+6XhS;
zZ^PL9$;SWQ*mhS(@}B;#<;A;R894H%;%tsuC{L_dRadofuG^g3o_$GnHmkcb-jLpu
zR@z&gEYS*ZSz$$DLx0hh=i(jrE@?lzwX|z)1NCGy*PPWwNp%_K6Xx9cnein)y*ZBT
zQZmMCx5vqKZsBKh()C!X1q?6g<*Io8`Kudnu|VNghT_B?{oV`ITUR{tTS)@-Fl_W%
zTuZX6!Z2!6#^T3Eg>mz|O&RFB%GfXr@;Ry0T8~N7iH4s%I6h}+ZgPbuQwy@s=*&Xm
z6RtuRqrRu+%7rTxyBwJ&a7g0PokmLw)WURs=q`gEk;rsncBmIW9@-n_0HZ3p?>_eI
z*ylJ(ulpeD(OiULI~A28S}3+y?bXx7Tz6ah;_g)$ULPvVi7BhBuALi?s&Jh62eE|s
z!{sGbnRK0T{&^4$PSgE-gdCUENa?O?{QQGS&lMy!_Xb!fzJONb>)D{9?><VChltYI
z;Flkvbvtw&IX<r2GvgFG8h%bI>nQcCL(^<Hg&+ItMe$QKDqm%TlCV)3BB~}m3iySJ
z8Ng3G8#r`?w$+i|hk&6WIRVHgP({vIitOSvO*~LK(h&g`KsGnJF79cO^2m0_qO-f&
z6zB<JC)og*(h@-qbLBj;$5FiF<@G1YrbqtfXI3G*$tOKdZHh!>STe2u(Eh^d(0a1}
zz?iUmJ!79^|AdzYYK;XNo+t8Aty7+^=EeRQsxsykmD)2>Q9(|i&QVJ&eO#ku|5M8s
z#>&Bbo<)U^TsNmxxMXTwS8~xY^joz&)KgV%tFR$Q$p@|h#xjUg3x1l?t4N`PGF%hu
z{rv&-tGMk8^)XTm;d|}*>d?n$h`aC9=<$ECg?N-1`@_Okj3*N<_4%%M;v*XQC}Jv)
ztIMP2pb?J00e_c@^}JO7b%t1Pyp55CkzEX7+r4XYUG;+%7paT7!Ajs-{oK}q_?p#s
zJTgylQ32l+x@y)Oe0ZMX637NsJ1(@B@9xS#kjm}n7gg-;%mU~&w0{3{T@CjgSX-Zn
zJn;niZb`%a2iDXjB9BpX0sTcf<gpM+W7tbXq%Yk^JB2@8xOy7defsLD!?X*)N8kj(
zNn%8PFQI=AP}AfQaLIY1J_faFm&Xxv=^@}RmrxEQJO=#zI_TSW!{3KjiV8vGafrYl
zkYT%_Dd~IT+`f4>Vaf|>{J?=f-&;!#f~+vaAkGCRR)DvO_{9SrWju1<xP4@8hvU)D
zFAtMqlCid*|8_r#gyA&&&wPp;Bti#;2c&~_j$S7=jSu7>>m0?4_-~g_8si3r&`d$d
zXGw+Q`l#7-oOHjkaYIu%5i*=2w#bn58O;h~gft;A)`2uKP0)sz0h5v~305~AtC%Rb
znpxm_QN%G5)C*T;gh&Ad41DY}>@@xunXiuf$FQNGy3;Ugr2<<>)r3>D+D^^?%N@gS
z9;)bmiTLK;IlERi$JPnN5<zr!S#wJ3nY{~Sp`{Y!F8|^?n(7AX{SuJ`$G)m-Ykl<N
zy_bofzrVo{s7k69h|Ebwal!VN2M<#A#pbpN$T*d;2;%flh!fcp950a44=Se1W*BYO
zSf=r~I}50=jjdljxaDUD%2xgah)y4PtEiYQ6Y;f{gq*o4ZIA7ouRxATL(5XT4%Vf#
z)t1|YCc#e^uWEVtFMFN`z7K{L*3IPzWIB^hmb>w(RR?31UmD648IvqLmYCvy``9&B
z54A@lafW9VN9q|76PrQCV5F(XUg~{%xY$EJsrcz_@O2xJuO4{nqa8!9{(q#s2Vfk<
z)i{2$<$CYEN_VG|PItPhdTLhhy*FEyEy+zTa_<d{4Ynz^u`vc?jA_QSPy?X__y|cz
zzK<jX2%&|L5PArfR{xpZJ6V#=2jBlkV%_fS?#z2{-psst^UB_`;U_8T7`gz|tF=#^
zf2!`f{s$*cjNH4SXyBpA<D>ViFU0m-|J8l{-Dlq4`#AOLyPLc3cz-Wn&Y#=@mw-)h
z4SWRh#C4D-xb!Km!p4}t0wk3o4f7?jjNX3R@ErwHtlLhk+YNf2tiE5HmYSxe9#G|{
z8~}$L<*EDjl<j?X19%df!iZZA4X&I7*eFkvVxx+nj3xBtDlGS|UvzF=5$vDka10n>
zyE80_XB?Zw)3idt6dzw6=fXC58)D71yQz;GpEyBXFUMb!Qwy?jZ-N~Y9J+`EM~+Zw
z%y?fuHAO1oHlr~(i_&^}bl{a}0qb4z?5Rz4W^vY&S;Ca{uODlC@)qi_9RH<)T7bLF
zc08^B=H-+RyfL^jL!CO=k1B_K3D*PSYkDmG;5rTYJxF__V-r^zQ#+|g<e<v%qygL{
zqlPV47+*x%fp_0MFh%pu;;Ao*Wbz%BB#|p<S|{ZMNE#)@B<E6WhQvu}6x&j}t3NW@
zU$wa-qZibhOw>Qy_YRh(>p8aWv0dc_OY6P%!tOQK)Ya@>kR?rP*#5*ee15}@Gc5-W
zwO#vg&-zW+rcSemlO~R}jjY`q%U@jKPVLy+Q-AW{#;#Cg{OP?7&%F5b$uSM1Pk}I=
zq31{hW8x$?E*OJ^wt9w!XF5U$+;!n9+i+3+w$2Q5q{>^exi1qO784e|t!-d&Mzk?v
zXuILXWp%sy!X;ZDUS7Y!$M+XEqzQ11CtSDdzTWcD5_|3Gi}zvMM+|z7KuBh--Fr*#
zgVaYaERHTYxoG8|?p~Z3ZrZx2Ewz!(!Sw~+OkfaBJ37^Xi;4<vxTDOHn^3MXN1>Ot
z>@)Km{S5%13)M#gZH39Y?4Dv#$I=|7$efXsv#2>H0|SxH0!QBR6TKZ*_xO^E`_~<)
zE1I8gG3NDypYi0pg5fGR0Lgjv-lUjYBpQ{ahqH{T6st1QzrBiwnZmWfk{t{4vKJp}
zYdUpsLwmrURpD}1m!LomEcMiv*k2*+In(2YJ=blNhLs&ZBw})m;^2j>#dYcF)dNEV
z)#+_jf##wNu~^P^*FLwPd{up_uX_HX`PIJCqO|Hfub3<6IBj*UodjlxHb%o8HS=P*
zd4<X8`39RoAc&P#Bo(v-B3<=m1-UtSHdjPr(sCu`Mz2N6$m@Tc`Zr!f{43%A$wrEy
zgmA{FgW#%w*VMjP-li<k9$fFTVM29oqqx|5c5k~!SwZ}Zx@u?{HGa(ziDIa(32b`g
z_WNpS{`v}kjyw<hEpP??iV$k~6*!AycV5n0lV6+$#G?bVcxt0xSh@Alag7AWwG3BP
zjKsNWuQYU=`p@&vQNMp}I68WAG2*AJ$eL3FZbGGG#rKF`v7aGu))<;+$REr%s<tE?
z1S3(D2oy>*WMT^$nVo2z!}J{O^1y~;J0EE9<Ee|s)+`_Lcw0OkzCyrNXiaioXIZMm
zoMzIcShYO9g6%Tp7vvd6HYGdK``RmYoSX9DN2^yXf*+-(&izR5zU-rc_DU`1CUCIn
zmTT5D`z(%1sgT3tRA2q`l|@}yI;m1d3aX7xE&u4rg^xEx_8z;lr5qb>I=O#!i_h$+
zlnDTb$F1H6-|j?jO97i-ZFFh*$4)MMtRZ^U@w2Uk0MhFVxTh8q1UhZM6jKKKp-naI
zBmqfg20`@<3bCE8F=Kt-lB~M1N{1%g66+m^F1>wZ@NAKnR0`zotfp9OpxCjf*IeZw
zMaHl()}3dTdy4$|Z8=VnK*q<%%^|1SRnU}{R8<_2$X7QPY?_}}kXONzz-8Q?Q<q*{
z&Li!GaN7q={+JD!;~8uw05}pTXC?fcG1eY>t;t3)1MzR^Q-c^z>qaHWcmWwk#qGEp
z^pP<R=b9+C%i<5@rdG)bog+ncqr_--sI$tnPb^ILiEog_JR^~NHr^9$Q<`;Z0bZY$
z?^blHMSP|41*KI3`yiG@jaW<|<_apQ0{k1QKu+)_YGg(`^#L3wf5X3~<3%Dk@c3#z
zy+w*)Kxl2<`ryVVHr+F7s~oM*)+W{UEGzcfF`>;@91UQmtq+ZbCWQD>NB!=B<G<Y+
zkti0XEjY#On?IQPlKdm>?~H6ErmaY@OTptV8IVLTYdVTR3I|pA5q3poWI<(`(Bx0@
z_0>h$CQDUAvpdq7XRX`&;QX@1g?dhnzH+R+U=DO<YxmyAHgfL!Afq_izAS1Ar)Yys
zi^HF}i_-N;1>Mo^JGWFN758Rin`T458X*M$-B%dWU*q2;;&`B)B4b)WYqG^m5Q!Kj
zkIv10Zr*fTJH}^I)qI0YC)KduA$X+3?C=<QNyZUpS$?MW8hH}uR~!MsmhizwNwOUO
zZi0(FtMqFo?P9rHjQvTUrD`~S{FWxYdEHkNfPIZbJ9(ovRVlGbv7H)b4yEHyz6NP5
zV8!E%Fq?k-wG9_CsjAEi8!iOEBLU>W4Sq}cVE^}{WIS|ELGo_8Z!&(gZ}Pz<UBcp@
z&>2RmI_tp=4+g-)fgh#)hm;2bH3&|?^)?Y_QUIkeFSFiG+cJb^8#7#5Yd-;CY&3Ua
zL$*W$#zt}$)@MsWc|71G9e5J9vT8SYQK%DMcYUaPQ`u^PLU8a<uzh_g_^(9lNfe8+
z<>bDV4PLY_O2qWUP>wq0o{lj}OLI(YUi=$;Dn4#z?(t{(1!2#qLpcR@twqiTLW4V7
zN$oi?aX_iZZsKrpzDj^MMCUn0Y%Y)JPfnZo75=qaJUMF4F`2TgkQUi+Kio^_)O4Vj
z5Xm!7HQ5~3>_si%T0T1z;_R^3^m>YYZ^*Y*t*%eeq{dv)Ve4J`0$bG@c$*e;8KS{7
zDIk2~75R%R-R7+Nq4o13%_bKa^t6Wjb4o+7wCy&fyzBbMdtfgb0^S(9d91g%Cr2;R
zCTXx2(lb)K4lHOnbHkSIklRH4+~EV~eHp2pblKMKP>KmW;6MqxSWVPvLIQcwHoa%Q
zaxe%u9}<#9xJ5JEGj!#k5Equ>JE<0(5%gRsG{nTXmhQi1>NGtcTUgU^CzvxSMO<kx
zEBHikZJ`^ts7F1q-fWfN@(>hFV;1T;*km0R9yriBD-=aM=EKNzj0?qOCzi04k@XK|
z<)0ZW>dln%ybpRwt|{nDYp%#vy6Iv2c5P=y`}zv7hPuX8oME(NHv~XEjYl~g!*9U4
zJq#ZCaW}fSGu=$OO*clqv7tQ%=;*f#01AJ*R5LsLEf=W0PJes-JO;hIhd1vyuxtPB
zmw(0}mfF0j9!r|sl+%%ILNRbL2_1{!G#dq`&Y01EKLr?gDOiMC)gwK<KNY6?N8<ha
z<A6<E%jAIl5`PxLCZo@8XYHlc3S@pfcQ1t059pv8lSTT=Q{gn{2n;oan?}oPq}IBY
z4o|Q-$7+h!FI-<zw6xZv@K%JWySQXZ5_oJyxOI6pn&>i`mSoq~;VFZ!45t*OYm*AQ
zGs8=VI*OdG#;t9Id#^cERbY0}HpyQSkJB-})wDhp`2b)*pTG6~*eV$$9^Y_b{lvFF
zVH)nakBJ>J@vk45gK>g6qk{0@`ShBQ!eT{#6q3oG1jCOl063FBoe$g2fpW2bmYg?7
zz(blLCWSA0(C)5n>Ix3rxF86H&Q*gq1cPijUu4ZF4HmCx%@R>XV(>Vy7WC!^t20xO
zJc?g!PB%*n$L}26_=nrN%S!U-?9Ul+7rm}xO+%W_td-C@A(U@-0KyWQlgoXUtd4f<
z(+Y6n^3?1LuR`z$#D>(uVAi6R0y%g<OjTi~tk!IAX(YvF5YNf8UN$er5kPp-n^u;r
z6X`{<#nm2KNhFKg*O5*-2D5i|3}!RHXZH+J2s!BW8gD>Rb^E%|U(oxls%71c%~e}_
zLRGsST2!^MEd%^Mdhh0YBbytpdZ7R6tLyhZFtB$&cy|8T^(C1jH_zYp!M%f-Bgf|p
zH9{yjeoa--GTqx#-{LnwnUPQDT684LuoQ9GQ8G)vjub+S=?V7!Yk5rpRe#HKZ*Mvs
z-fm8_>4gW>fy`X1&w&Z;t~}kCCO0M48qucp9A1QPbLEs-E1JL`CxqZWq1vMS$eCf_
zOOy-j&byO*VqSVdO-f{WXBHy^8L5ZyTgYc=8~SOzBC|iAlYantr{z~&7%b?|xBTq%
zuDX>~NmbR(`r0a6@x6QRke)H!YXSvQ>KW|M{i`y%cGUlaihLa1_|C7N?_0gaS<;_1
z`8H9r=b!)F!%EmZ;=dwgaJ+<nihLV|Fd!)k#T^9K{Di@i4U}I?zjoa302UebS0(td
zp#=VN>uzAAKG=OLLzi!eeYlQ1M(ea_m%D(P5wPh<*=#kSk|W7#vLDKtY;X0V{4HAr
zm|8X<2oir+z|D_c8K}=PuNhR@`{?xsc!}lM>tyB+*Y_WtLn9(uq(Y2vWY?zm4)QR$
zq=joEUKAM8Y$jP!mRsFaE;AJd==x0LcX$z-nq425uFs5NPG=-p#qN_yaly@7wr&$*
zDtRBtF=nuv<nBVhO|@X@l0lWtU+9)I^Vb*Peu%G#$<z#ma|iOBz-PEEpsoP-m$Jn&
zrEoRCNe;X8S%uAO(0ftp1FzoTwJFGBlh1iuTDwD`?$#DB7W@9c_37woI(%wZDC}O;
z*2$?aa4&h5<wU!=8PQJB$qVu=nGQmunA7@6TUFa&X6aa+$5-B3mnTSGE5O24ZB-e4
z4VjHOE|EygQ7CN4^^a*&pAI3?m_lxir*dIV^LSf+PC@F;cls*|V-;O_wVmc9GhcY|
z<Ygd27@vYLZYS?a<UgMihvAaQ2w_ggU64{{ToZ?#?XbH*$xIj^Ot)H^-AE~w*}AyD
zQfywr5s8HC&O0&zLE@O9xU?u_Z7wmTaFf74W`JTqwGh_|#E#;DSm%b$d8Lgx!}jWi
zMi(~frX<4jtU_CAK~^ZQGNZVLYeKn1s4swt^$#R7X&4hjHlqre-u@SgtR6Rq;Drhc
zBj$9ARF_fe{Zc3uI>RNYpd{ieQoDj???7Ltlg{@C>pPDBiDd^7Cltp(CTl778L}yb
z{E`maQ84ikXZBKPZWk=OjKDbho($06yU-qCZXL-#a(`JH7<Ppc`%LDvUj~QaNAA%)
za2Ed#+(Ukg@KmIuNm)ayio}>2*{Z!_!F^o?J^@#t_UeI#BT?etm0Z1ZeaONUbHze^
zS<66BYT!aT-h{sgZYJM_6pXRX6JODLBUm@~9IV?8ve6k5$Oam^9KMTPfbTlu@4|1u
zOXwRGnEIIdjP+@p?q+1^;iC0iG0cffYc7Z9A2Yzwm9^5~z&21l7zXRHgBaa*47CmM
ztz&HmkK(70y^ey-K_|Ry3BaR3V+NdWrBZ=l1z)7e{TU84Ar&FR!Wxl4NBu|R78t;8
zHP~ekxR`qKU_G}n^#BfvVHH(GqHuTRL`TQBVbrH#6)w3Tk%)LJ_!3PvW>ixf4Fb0Y
zaI`|97H~8!fdSD1!h^jC>#>6Z8qNabLl4Vg{n!P%ypS$01hk*S)TdKt@DVs}p)jI}
zAFSknW72Fx1@_;PfVDzrwUfUz*=ZP`qRxR*auWGLDuOb{Q~UOjli%ITtWQr)KjSb@
zW$@pV*TDbC$%&7s_a;7M)`>GyXRvcjdrWu{G;f`$u%>ds;xc1^OWtEQeV=8wqIXwd
zVyp_I{Vo-7CEEdBkyBCZ)M51O6-<IZhV4&0`vdkD$)pwAznS??LRMUQwv~8QdNIm8
zoBELY0DEPs9X%sCwkY<BWHMEJ*Xq^iyVqHN!5_h2rg?YH_<22NaBp?ZRSR=+7G70T
zy>~DNYf9YJz&rR9em@MJ2G?VMyVCc=nv}5FlIhlJ-I*41I7NdsOy5P2b3C$tZlT`B
zf^6F7Re=uJ5i22?Mvp}iJBcyupJIc@AW%pfJULFewdIC2Wg?-Xa%F7_c)aq~Q#Tiz
zt^D-XpFQ?)(|&*=JXmh`@vWwn?|)8RM7Y02y$v3Q^&?#ZZN&$93mqo#p#YPPp+O-B
zX0a*7AdpL&QgV{z)@IlOhflEi6)Wpf@QjL6unm)y?`wPXv4@-YQ~##Er2cw)Iw_QC
zBrE^+4ZxW`o=3fhttThw_y~xnkfuTcYziB;60<0eym(Bh!MN19cR?%pxKjV0mkr8d
zjse2=I{c1|e`llDWjaa=uz_Ui92YaIj=peIt;V>ZoqDfWX<%pSmBoy0@_X0_{4RFM
z&Yi<nnrW38qr9c%Mg&A+MM4Wtlnz7_H<ljZVHUous-Gk<fa3;ljxCaJc9@G}a)A!x
z2j&gUvs<0k%&@4k0>|<6j-9RKM2%9qYQ)#k*5ppF$#(Ok-TApISFOn}ZILT#+-38#
zi`K0g%Lx@NUb{&hj)v6(M~9>In0teI4_sv6O(aG_$|nwEo*zGUq@yWDqLGj@gfz3v
zVJCf{he-0lyrE*d#c7E|L=}}71gL#iOF)1bg$xQfX7py;A_Z{4E{@5BI-EyNFc7U|
zAlj^oLzG#gkgpm^?`(}DA?wc1Sp|_OX_YE#AZ_o$2e5C*_t1Wuv6Hg^q!Dr<T1HVy
zHwi$yrl`{g5R+<<IL@J6ZS#Q!tCrhkGK=I;;E+Vi<&(M=9VrnQW#_DSDICgV%b_4$
zPQY@E&lj5E1LASM5W@t5q4Gh#QfzYm@+Fs1q~s4)EEEVZTs2g&kgt*0lYjY=(k2tD
zVL62Haq4Em3}td#Tt|kOO%RV(YG4w?B6T-9^~WAfs;nrrc<cm+x+zkw^y~Dgvei-Q
zCJvtNiCtHg<O&6o@HcURfa^15Q}ZUi7r_5;Hh3!A<O4bm_#N%b4_NbIn|9cypWX*V
z<89Jjt&lqO;gSpO`Dy;03&i8)H|5hH+~{_L5jNrV#159(ATVKjefg1mj}7O7QD+K*
z%InF$uFR1VL{M>b00H$7^?bJ3hiN%fx<H@?Z*a7j&zueNK+P-|F_v>`C!E{wg!{Nw
z8p?1Y@S7P+#AiyRG5BHALH6tba9B=GAkwlZqck(Sb14W*G!mPy$nUF)nC1<w9h%qP
zpX7}UUEe!!%#VWS%WWAIS%JE!DW#~Ty`?B+U?@2~)PGG|*M1*(-P9V+m>2Pz9QC2}
z;%E?utEWL@Opn>q3o|n-2g|#zOR=?NRc`N(&WjX@ghsp36f8+e$@RNE{`|(w_5&_^
zd#rH0GaQRB^UlhtD0vXd<j5|^5m!(rHq<t9%by=T@d)+lBex89-!zg{zU#3SxQAqY
zA0=P;K8p7QI=9qx-m;pWPu|28gyvG*o48*U9`|+E?2u`>FNow^q3#!4t@0|cXeF*t
zib207Rh5!Xof0dtJq$dn!AU{^=R{<zh2n?A*8<v{KM`l)yTWpCD7j>)AiS`zHMy_?
z984}*SQr}WYsD6}loqe3PqVsg&1LYyOGjlv^*)T>493VKEELoRXLd2Jr~-^7*|}!3
zUW4Ju<PqxK;}*N!avY#<;Q9~0!A`?(?4XNY|GPjS?(h6L@oTuZ5YSmZ8RnpEB@v{)
zOJ}#!UO|jIozunWMo^BV7&BQRo6cXaTII-V&geT=0v^6WWznjHeSIJ9XuN8EB;2#P
z+?AX)d_!l&n)(#5P@`d!T2F3DurbFv0E$wgB0{cME9ox7o{c>;lG&DPX)UEbA%#lu
zhPENNJ#MHwu%_Emv@O5!&`8YJxV%6?iq*zUugO{56&l-0EiO7xDp#+1ryt_fJ|!cc
zBx@kw_d}c#F-8-a>1O%t04#xU44}D<P0T%4pOsOG$-DEOBc)=;Kvp1V$j#2w>@^6K
zX~xh%Rr<UQ=N9h$>Ss&puX}0yz#l55IvF1qjZzm+9sc~@zTDB99)4}<nqMF9EEzx1
zR@zA9?<x0}`PA0@uJMD-`Q2_jlUKI#x{9oFWw5PSQZo=ylx}@sc=ZG0xoh5_{&LTO
zKV4s)@8jVdDKA*w*!R%XsjZ*9a%N3I-A#YkxAo0iI;yJcN*%e4{@g8V7T0=}N+{v1
zocfaOBJW~(SfzAc;K<x?omV&xPG(Ri;#x`~3a1Aq4-)epQ7sYVW!<@I{_U&sOE#RH
zzw}5}Iw=*3Eg3c0Wn*=zsnsK~P-!@IB0to(=k_NSE`0L#J$)f`{p7-hPoV3;w8oYD
zZ*OluePC6icfmb>+qLVXyXS*H0bxN=#k>u74K6&lzPLEEkS$ajG~VWQRW<7yQ>7Xs
zweZQ)yZb|-{@tgaTsZjT?aVc7q2rG0RyTRQO{=fFqhrsf=NB$K|0#=@#$5<UUyzA_
znXrVGB^F(H>5zdL$f3DVF#~zj<9KaegI}reRz-L1>e$)h@wD#l+Ik#_X2Z|mbUCs#
z5wKtAeFe_syi^T!ANa4->cx54!*%J@v-qZq&(4B-4}%NYeL0p4_GtXi#LdpirswvV
zxT%@h93AhXnd_$^>5ta<RPxla(5_wgof#RCX$2qNXp_9k)$8kzgVg^Et{<q}+0Nw5
zBsujPaM$Jyy*qURvyysH2hznN>g4|qlrh#Byn@W8<EJ=ji5|`Ej${<06Gf{-6Lcb2
z;iXV-4}oVzcjT_ixr4Z|Y{V;jU1pMrmBdEOJ5oL*6?0c|Nm9gpS|F8@M;1~V@X5l-
z2f@k;>OO;51nNqtYq466i29YrDAtNVP{g6<%9D5rnMIyqg;)*KR)uq-8FH=^_Yh2j
zItx<T?j-mNQo`jc4K9-}!<LbiVKYUl{r(2MQ6S^WwGN##XbWToY?iEsK&aP99IqIL
z$Vg3cBYz`EA1Pl1aT(*1LJ34gg1^e)$yBnaTW3@%Y!R=kG-9=xqEewml;%(ylq!2T
zHLWhkp60*^gl;)R*8u8gV5`$J$YQL+xC=LtcQdiS=I&;q%GqWihl6e7^GepX2ZQZv
zOXiKY1vi@`6&_DT#GLpg78j4V1p;m3#YJn{g2A>mg|O6u^5J+YqZUiFl8)od`U}A!
z`eB>M19VOsz{M<d99KLjtt-le9o0lNwD7{_Xuu*zUSqniDK9B0ugRC*nCHMsj;1Zj
z&RUpybH@?0-DW!4N#75p9qnZ9u~X>{==FwlUt`SSh&58mqv*l0uA^y-v$BR#k98ik
z*lp%xT}RRu!-~?5Fl(@M>I>p5l&uQTJ~ok{XQsj)IVHj+k-1>joEg?oE=M#Ni8`_m
z*w)_m;)>l5<`i>fVyP{=r@ChEie^3LCvmfO@;_`22L8msEE;N%bM{c<@=C9q$7dHd
zy?yQ2eQRU*A>m$JxD(&L^|foO7qk`e1kQA4Xz0fNsLbFfcSdB!*WUC-yaadN!m-91
z-`KXGlF2RPfUv8HA*88eV269nY2evE33fQj9HncG3-;YNl-W~LV8{@dB@#!lBE0Ki
z4|tWttSYLH<N&Y*$E<4VY3`nN1>HqniC7^>E`4^xz)g#?i4FV}7@J&%JwI?_Nwy+6
zY!3=#dW-(hUc206F0eafrUOUpZo60%s_%%cymg?#R$yU#1H4l*qMSWM+ojjCSaCmL
z4IZ~oM`z;9ICSBRtsE2B1o`pAWm`?$J29VDcVI`#N6YM%aCwTZa#ekbJ-asT*wA%B
zzgjO&j#Os!6l_@#E8X?f8arlH7No9yGCz-}7t7NMdgcwq#(T4hHa)o9fSXkXq@3+7
zZuNQcGm@o~Ih;WK;@q@Cze9rCg^k$-CcWLpp;W4j$|ZGu_v~)sJSaE*RWQG*Rv>m}
z__&x+kx{k0vFZ4_D)OMhgvP_hDJX{$AF;UTJdug*j(m_b)BgUb?<~`SG^4X{y0P=>
z9{=hQplR6b3-Y95p*b}-_4<OYe2+xUa~D6i)J~cpHjR7x!!?J0v&&AHR0a4JcFFkZ
z1-ouj;adgy8My+UT&v|wOcEBmL6Tcq#krs`{gqcTcD#Sfo40o34=b2Bt7uVL17*k@
zR@@gi5o$?{J5c%{bRI$P<`cX&Ek1H^8$OEIyWPTz_{}+H>^?3g(wJluIijR2kCB~p
znhPI~*@SgF9$4D6u{~Q}1vhN6q(E7yaI_)FwShlkH_A*?tf~<Yn^Pe&sKqPz7GH5X
zNH3Ke0k8MWhEiuyS2#^bsErwRWoq4u66#xIA5Ps$43qbvm_z`FQeQL@M1Z>J+)a_B
zAWdT?dkgl9hXT~aHw2vQ^p^5W*@fe7g7-fjKVbb)h+E9Q)`~1yDkziU*re^h9`A|*
zeRgjN_InA>QFix>&-58J`kda9J2oS|6r|ImNCrpx4cZDfZc~i@Hz%b4?7_!CL`dB&
z0<G|``(77yw-B_7(BBC4>OrlE{5@ZY^K~-NC$MV|V=ER6FQA?Qh42S=X_S-C+cS;E
zEE|?5qvMoqg>4&&Ho9%b0vN8NOv};W%(fZZjh+7%Qtu0a3H~)5H&TBU0E-a*{SWoc
zE<+OMm`F<UjH-W&LY8ri+dsemqmSSptj?yOHYG*$`lti!P}*r(rGM&k@+nAX9xKeM
zV0F;@&>X<na9<Wa{xW$KiRE)c({VyGC3@lwfl;&R;sJq4z7>4V=X(8Hn^2gQoJIQ^
zs+QP7q(~r8TK%q!mROSB8%xe8wv$49WzO)ymeS?5De$)${(7$NX^D0eIQrn<d^@>O
zApd@sNP@5BW=FIA&8tg#Z&{fi_T;nqa<x3Ac6n)_KGUSL5F};kJU&*C(YB_f^Y}{m
zJ6<_|rKfI1>HINI?Ft(Ibu1RQ5Xx#OpKT^9cdnf@J~yXrkWS%>HdBfC%Mm(28Yd;K
zB4n&C@s`8Cdt&oTl0w~Es`3`hOAd8!o!ouL1AS_vaPkH~U|a8apkJpEVM{Rrtj1a-
zllPEeM?rU1eUH5m{hj;}NuYICEyzs#Vq3mnER_=l8n5!=x8zZw^5Qe06o79;b5IgQ
zViz5aE=upJgN%la(Xu$0=pK%QAqE;e(_<a^+65UGTWsp$=tc0kn(IuycJxt$nlJs=
zRdss3VCBVC0>7zd-wg(}K=P~6Pn2Aj^R{um*HpXj`+YSA6Mr0ENj(ByE;H(>N38BB
z)t+hvJ=D!fW^k9y6$MrB0T?w|QRsVzi8@N}{k|rm#NsQ*ES(!GkBIi(@~h=tu<LqG
zz~2)q3-3*<S`eAHccdt-az6YWEyi{n|LU&x;>{0@9sl~Sj^Zs3k9Y2BOU>Q<i`|_&
z+dMg&pGE%EkWfQJ50u9fc6)G!^8tVj?K`^==aPTZr-(AZEkw`7(|ESptGP!`sH@P%
z9PY~{a6wxK*J2E8ehb|zrabt1`hLrs=pLWS!XG2L;r-Tc(K*By@cBA8jxn(9Y1*%5
z>I?i)vIO35|2J(v2H!tVKi_dbx-W&#?|^$@4D9@nJ|CFM#5Y6wU|`pasDJCGzQ*7F
zsr16%Zaw_-#ZCJcWw##u`QpZF7v<b-kF|y>H+2N;d9A^UO<h6k;MwobHs`KAzxvLL
zceUiLePCJR#)g!6dtcezxW2(%wCfc}uUjC_D<Hk3C|(SlfG$xih~q0HlerRLXvTT$
ze`>sfRB&wX`fb~`VdwM_<6SaRUIi=@j(D6FSkEnxR(^Eih!k*9FvCt>3>*n-<@iY+
zi2}mRGnoj%#ESy(LT*oiO_P@I3ODAZN%%@7DI|MUwJQ#{!+op=?qdt63+cU%n;p8|
z0nqJhZR-j-3w;JhPL*3J1(>XA_h5Ef-Lk^cbxRgxToecym~vtN+zw$Xo^eupNx4Ql
zAF1QMM>M3-xe&YVRaGxP*j_%~<lVJ)(fp!yXBPBqZ_N-jIg+_tOSn3cyRgDzE*h>D
z7p-jZ8~lZ?P(v(D!h`UONbEZVRcg(WqHXuP&HIO2j;}4vXkTCM5KGkVs%%GU&2Y?L
z6*8^El8Oh5)8?gX?b+2S2pz-=BFH<>L0%(KrW-)ppW2ww4p%8V(?8f)5zgmMev1<V
zOs~AbbJ#QauFM3do#$^}1f-Z=6Ese4YgcNhdqJ~aS&g?$Jk0bJq|1|#FTIS89tsJO
znL7$3m}%zN9V+lA`GnI!4KL_wY2MnBT6gs$Ly>`|VqK=htMm-dD_z~_HD|YFdl!Tj
z+()#vn4Hv|>R{)lid9eVsn9qBhIulP#1;(oZm$V8<yvJjGd4u;<3`|^cm|Fc1@dZ~
z>+_^wgqJxd*zxrCpOlO>q*=3@Li5HNyymRth|DJOj^xZ6Zx2@Od~k8=-rj&VSRDq7
zRAKAkwc(ykWtpA%_GtHbex$d=h5cUXQkbm1j_r+$AK6`<x#(bf&e*DTh2ZCUI-c`^
zsVo9O8X>(SXNLbd9TbrOd{Q~NQxMQ?!8S;3^2r<3dR$1fH6}YQUQk&Hzb;j-*DXZy
z@c@lq4LzpIu7Kf87X?_Zm>D=GGDFV?ITySeTU3$a$gNEc4%TLvqV-Q@b;fL}w9<^i
zo*aY5S6VnQSi14tg66$_p#xXf)y0+{?WkVgl0LpVt$ulNR(()wDIII{)o0s?4o~?&
z)K#8o57Z9$++|_Q<iBhOMh9<Ok>_jMRDI+*XVUJ@=7Xbo8O<vTH$8;<X&;=c9)oj}
zj6Qu(&a!y{v=_N!&hi<jSzvTQ!ElA!9If%ihALBlTjx;(x0J`0Hu}pq-#x!!N2lKy
ztq)N@lljeuuzMD*3N|mz4mM?5(wkOL&E}{fJ($+KzINd5E#;xUU3JCl*RC(3nv@1)
zr3?2?+u?f7L}Z=e)-+?jOehs&Ku&D;x2(D9NKMCyHS?e#vG=B$j+5gh52jWOW;GsJ
zRpO}_%x*Zcx&-gI;hX0U_WCNWf9D2t)#t0c{++AF&n))Uou@v0ZOxfQzS{FZ4|${=
z5@sKHg7IBt)*3NL2WYj~_rSgTa5ni@p~0Zxq=7rh6W<RK^VR8^mw9}^7sS92oc{^P
zAn!x?F>u{0Xg%;veU5)j-yi%Px;Mi09wU#z`$He0dog_eI})y};PB7TeJ^~jqwlXj
zi|(P6ga0@E{SA+!K3fRslS}&(((B30KyW`mq1@hEf4`>v`q7-8TYop+cEf1y1!qx5
zpyHY(Mb5(ZK*j#0MfmW0)Prv?DZlQ`gYSXbx0jY*_lLb>rxyAe9-`j+_1LMw^ty+D
z1=8j<lnV^fMm}R*A>-76E6W|S$t)SrZNNAL#7nP|5^3Pk1E+TG+=;)d^r-*LXOjYU
z6&U;eW5(8<&_g^ftu3@%K6A33wYJa^<o6g&gm7X%2U9A*pNp4Nx-F5)w2aoWh(zLX
zwCj4d9BZxJ-W!VcY%HOcdzzi6ZTiJIa<>%xx@gUs^=09@u)&&L@3(8%lKD3cg?t@b
z8@i9~-C9ho6`)*m-BX_vN(fWImHkt$w77s7@VfrUK(Mtl!&N?%zhXt>)ep~Kd~J6~
zRBH|M`1(+LS;eY4kGXWbUGl(P<}d`ktt>2&xgCTWfs@`mUQxfXJ0`auS-SN6#^S7n
zSJhcWLcO7`GL+T5Iyb#8+qQ|g<?3K<P#;Hwu?>izy$9r}|8-q?t`g(3Cx4CmgqT`>
z(sxt(<P%CQ#=*Y4Z4AS)PPDERERd?G-C(0y){fsg!Q|a+gET=to4)CFW%lGf9g2G9
z!a^ANL?}v)ED86f_8jQ(wcYsQvYf^36^1;OQIVS0l2@~(!*9v&%g<Pnv-oN9XjPJ*
z+947kgtxwaxK5W6F;!|U$(HQJ*R^DJ7beLS7VJ2){{IZ(x{`^LoCrG%C!|Px4qwS5
zmE6fXiQl;qd(`5XY?Y}nF?qDcnku<it#=S-G8}r@YDBZ2(KNg3|33E(tr<ZP39Y$J
z!J-unUQncQD>8SK7O!a!*6ew7xNTow&=jc)P&>r|^GW>qv2BsAb%j|y#YutAEmXQO
zsPlOJT|1jb9=ob8XZTQC<(9Q;izq^-fwCtxrN%sfV&UM9sSl>iwEP;IGK1fN?_k-P
zMA_6wQ)Wy_zjx<!*>~_;IbC*k>ce>1U*LNd@GUI6Yx=!!;d@fL?A&x4d|1Y(%kG|f
zKVIg9-{#Y0_e{Ts!S^I|8}}yKV5P$MRCL*W)9-1gHeo`rmW30~PM4*zs$p&CVA(IG
z+ptf4gQ2K`IPu(c8H>6T$gmz*_UmbwU!rbdy@@r!vfnW6!v51weTS7|fB9*0HC7t#
zTvHHei8(^;<As5ie8(2K)vLD`g{*RGs?IqtXa*0Bon01At{kfxyK7k_xoRvHDos;Z
z>aHFMm8B`{jaNb5>x3=+3;Pot7Xi+HK?NgKM}s){7oS=qxFNz{uduMKUk}&z^z?v-
z)4D}`UgYV?os91h=7;dQX3Tf_Aa2&mW@fuYsv`-A1i|}C1;(RrHYOB(Z;7}y5s$A>
zF4XIbjW-STFR=uRlAa2BR;uJx9-&e2XG3OIw%O|sq{>COaCl^}$y;5VZ@pVgj~NA|
zl^3=hoiVTd(5&WUCbc+Ft_E?qyv^^c3K_4?jQVRAgtF?Rc3ze`nT-qdX%2fNSy|f3
z?`jICWfaJSIxQv&)rSmvZ!BrQS5^|u?a8<4GRk~fE?364n$_xLzdj?Q1Ivr0dHpF$
zAx_&NPryGp*dOBaSM<{Sg)}Jf`3nr1F)oMt1U$pRB%)^Zh?@G9Ob$qJcwHt?ex~qh
zsV6D~k_#84!Wj4!g%klSIm9~+*6U8#t#Bfj&Kzf-!UHsIVQFk4+4*XE)mXLD-?S{h
zc(FB&Bj*XV)-<avD^+XEZp$ej#{Lk}J5EX@fx3)>;c8F75$5rvN~tO(*JaPpVKNmM
zhP~~AZM$IGm)Us7T@~g?z!65P2$Z(06m4!KDJw;t*R4udnaW&A#UV>t?MN)#m}Sn)
zd5xc>UfQln$+AUqwJ8xxuoxWHc+_g0CcVU$HCT~q&2GpjURU&Yp^S+u2x;2|;Skbx
zZ;okk7wh6v>#qX+0;PyLBamWz><?{|Td_2mQ799(GJ0SW#K8mkMiP&9&DirKut?}x
zP-xo!Rm2q+)hMiPwIS%%Wp6b5tg?(?VJzUzjCiUR<%U~wt<|+@sjhiF(e$dYDb`+H
zWJuQX#n!MpH5*G++R}9?;qpjQCiR`NIudEmvl}u>J(Y_z%2Gd)dkwz)<icKhPJpsF
zmI2`vA=yzetpkFrthmCA9?z2VY*yG7b*W+*#r5OLB$=_$kz5osdn$)=kX=P?@Fl)O
zwF3Mrkg0YCO@X{R>bI(7rA)5#%}dSbD)m@0tJ7=N=YJ-U(d!e17MG{VBgp>FHEr+r
zfyQep!%rv!Rw$OM$u5(Hp6eD)eMf4^Q!EF#A43-T4sa)H0ro7K!?90Uj9tMXe20v`
zQyzb3KK;%)>`fN4CJwRA6G7qt?Kc?Lcp}?$!a*$x9|%*!Qg9@^KLn0py;K7@zXRMy
zHPPSQi1p%AkX~^+zB}+P>BODbUr>^0Rv+taA`R}91Srl9hX-6d6x3gXodeM!>X+2A
zdT@yP%_5Kib~a$QQn&PgLF(onFa$b#s579WhvuI_*0V%_Kso<Z^eGpz*q?RM<(zHK
z?OcujTslz%j;NCZMy=Z<)i{F&e@^?Q+knxZ0|5j#83RtW-0aqvGLlrW$)Q=dG%sue
zPY`l^U))|2wv7HA#5<%DXS4Bk$;4SKZzuT8PMQv%vwn`BAvV+bCxXC%yEjk%aucz6
zq7a>pf*ts0_;V}+t)C0f2{JAnL%Eo7toVU)Jl&Y-cM1gV@!ar&zAm_<^(XUXDQk;D
zgS}k@dd3&H*W`s3^mQ}Oq$%S?;laKxyiKIk36}WN(E*K0FB}eL*ivlNd67yhSnBiI
z+%}O)CtOUIGCXjW^>_Ru*k8)HTtqTK*GMyv0JuU$@sA{!Qc2lWKD{ng0nW(9m~7I^
z1{l${Ri@*Az?YJ2iQs*{Ub+n&jw<LnAAog!4(pWDa|fE2laVEwD;ec>0Qe`^#4A!v
zp#pEK()EEPs!J}yB-npr*UG77+oXE_`vM7Dp!|TZlWnDzqdsx7>WKp4JfyP(<>`Rj
zz`4Y(QPlUvgjPxodG~v%5eYcr+wc3`PV9r7)U{ycPOy>M4eQth>);RvA)eY9n5yH5
z=HtjEgWyOom4Qmr1Pl=uIHi?flF1Y(<l<#GDVw-R9NZu^3VzL#kV3_81xD!xuu&mb
z$S0rOi}u8<di-Npzl@G}9LGA6K$=G<oBxnA@fvKw2;NA~jHFNlI=EzGZ%#Z+*N&5!
z)Na(kZxsTe{MV>{YA>oAux^6uJsNN9xPNcdhW{(+aMEO!1n-1n^Dn@<gXY~eQ=hSu
z$UEVj?PV-U5l@+bjg0H;HONsT$vK^)gwWW?Xz`{8mX1EStsMWwM1IA-Uv56}W!Hdz
z<IPX4xR3heh2bU71M%%EpFg>w*^6Cl#1}0%x2d#Z`}swp&-)(Q*SvOPY01)R_t*<S
zaO^k`y)+i;+kNY!0|=HhxIg_5c{hY5kI}7jXqkmJN+PF4<4e)Q7~s;eJfvdBzRg{`
zs8+t@!R=+)lZ2<iC5+T9Tz^$%Zbz1}=iKMl14VKqDXFwDOLM)hdBxS$g^SBw)<QdJ
z>%IN0EuKZ=J4=eoCd;@A!N|)O;089ed?2#m!qII3v0l95rcS3lzaulLV#h#cc>N34
zT6hvJ<g88>MSO*yqUAzll@f`MNJhRP19WVBCXj#`1DDbrxn{+s)WmS2n=MU>SZq0&
zQG+}=Eoigm_-&JBcpovylhQ);J)12}4r8}u50+SXy!_4;*}=N}fXXtjwmq0Vf1VYU
zEz1tpGi7a9oxj|tHHS-Fu9C1>>np!*#<d?k!=xGQo2sifb@**rl_@EeSvG$Mx^K@&
z+@n58nfi)Q(K>*<cn*zAD8&UlP9jb_jSxC_nvt0LX!h7(ixt=UD#BG8yR!vcnYYyK
zs;q7DH*ae&Np(x_eCO)=Z7oScasR=`7Clu;a&hh8GFNfLBjU@sTcaz^tx9VuaK)D1
z*j6}HnoK-l@EFCF`(NGmDs}#=y;-A2`&PYrL+fdKp5~?hQtFgKISWkPN!^ZL$L^)2
z^~7<0{D_ivJ95#0B1PaHVbOx^RgOxF0Ou)ex}4U$B<@aO(R^4|WfovOrB$EZ2Fr-I
zh7R|7g|aH4h>aPtdx|cW3?1(Cilo)B02p$5Q1E)>%|&*wFCf1p9&?_O4{Xe7oGRho
z-!VxXJokVhiDZLXm5x}*AtB3QU0kz*ec?ZK*fFa+suojS)*_oBY9brxob6XrcadA*
zIxm=E3kjuFa_Q4AU-%_OynNy1r)0z*Nb*0Y**)mrVMv4DQ0It=c%D7mrF7)+Tsg$w
zC!PiuIFq;Ih4PE{b1{(syM?myNQ^@?lB~&`&}7cBLa|AJ6WD~vBrat3{`;q{hP?14
zoKfkljC2M;xLh-5jSyoVl%01`f8&bTq?kwj11Nc7k}c+fbJY4x)CRC;6ZSM#s&UHY
zPR-;KlTR{NSjog|cnA;EG4SSbI*F&zY^wms#RN*q=<HbqrAQZjTrL4iu<Se~Pe#4x
za|M>?km~RMp0hlVoB?cdt|Er*z;g1HDRSz4pP9`)&1D<?)L-OoWdXBpjkC%)gTymT
zetG0F65o8=!l;)}WKcvL&fw%rs0m=vdX%t@@BdD!b5;bDsaon?x{>XZFXb!Ua$wRr
zr5xA_N9xo93*8K0Jve11Q`kb<ZyTMB1C+N&C3DD7Ko(ks0Jj)q3aWtmtKY=t-j2T4
z&|v0cdH5SKB@b5ZcLia~{~(n)%Y&%p_vAcf49jKkc!;{2L^%{ulr<<S!5tMq;D=>F
z8H(gWbDD-soqR41s5#z_#H9f?S&H)G$>*`0JS7)F0NcqWmEZp(mu?4G6<j6VhJWg7
zvW`^Jc*tCKXIK`Z;ddoyhW1KiUAs}uHdlBi7O%vQdYatYEIYMWZ-W>rC;ouh_27oW
zfV<f<F}w;t;;FFUgxb{3;BWxee=k#iG6%7eS_Of3aAb_33X|@Mym#fqVo!yctv0sf
z9sq25YOy^_>u&NaLKQZ<1BKKQy&c2d?ItyWTPi#Z>~I{`kyZwFlJ?4u_iq$2E5aob
zB<m*r2h|9U+Ou^j&2bdyws7~vA3>r<{OHPwVThW)7+kNn$6=p>u+#MiWg67IN}B4L
zL|&?h+5!&5NrS#$3_;ap*}+jn8r(%AvZN>jQU*V=3f5i;DFZadj`$crJnEUtqjCP{
zF#`ix^!zV8d+{?%GBYG5Uq}oXg-uGx{})EqCoy9MizNn;!YrQ2+%)bNAn&C?{!T&g
z(X0n4I+MA1GufU7-vY4D5}YW9Rk9_J-`}PAJ%(j7BLR(9t&8T)eCqB5cgi8iYZD^?
za%LWuH~A7XK<MFragW7Cvn-uQ0}K-V*ctLEIxlTpMUCufkd|TQk~C=Q45s8Hi*d3f
zpskYxJQ$`=mYXy(6jOuTr!gq(>4uDQMdL1xOQ&)0_&g@x9N0sCf&GzVnvT(_zGC%z
z%)P;;1~yq9RMrcEUK~qGQdqPKHkV7XKh+qDBfe~L?l8x!)EKz}E|<&9t$!j85smC9
zlm!j6rTTP&RwlG=GNb)LifPd@g>;BX)w-8d308i36nyiQB_LC7l9|oKA@S8r)>ilf
zxF_E<69&_PxDUZaHlNtYxplgYIT>7Mv~hVZSMcT6=73zWQD(NxN$a`?wP8M>qT87I
z8s(XVc<|!U{C$A7HX|>?2<S9H?enM1dSNGc>oSzc0Rv%vQ>{Mm&sq2|v@+3oXir_C
zjX4;BLQPOZx6uXuetCM@SLrrX2i}>Rrk3ds{8#KzNUQWK^+)uF`RfWD)NHEs*uqIN
zf}9tY6$yf23^Q3JIu#ssTw+d_ozfWOj-b_FCQBRSxb-T;e>9WO{fA%Vd;(!gyHfu}
ze~>4y(4S4_^3<Yg4p|zK6$k=h3^!S&5Fj)J=JfALjiJ0?7C5|1Jd3xppN{LbFQbv-
z@)WkT)O7^{T_nx^LgWsTrc+rpVr&s<$tZMta{Q@!l?_Vyb7%xCmnXSJsc+*nx`vy}
zvM^pwSB5}wdG_LKNOMMU%B8HjLxeR@?DoWh>3WqN?&_?UQIH#@fp9ZG)J+31`McTd
zgt0y%_T!!GTc8Y$j)pH~vyITnY%k?p{kmaEo|3(a5Ic+f{oS0^Y)|bPp!!N|P%Jnj
zwwW*Gw{0y(*=;ddBE2dL14=fDzr{5(W8zXq=y+@Dcw_im)H#V>(et6qZl)$1MsgMG
z5pHdN{{VNG?XF(MH79aLPk!t!>x&jOHWo$u%G_}rGTA4tj01it6ZVyGxM?~&_GKtY
zm2|djK=ae55Qpvr4$~R4d2?_8H=E7k)9p&FfcgpquYiL<O?}1{0P7Fn@Mb(?z|0Zi
zn>n8+k_aRa1Yf`<0*6b4SuKaNIH5Op2Aaw_aP`pCgI0uK!)&C<DUM64NumdChQ?44
z@s}$b%n090*eCj|o2!HHr2RB_XcAzWKstscInbiQ;c`elTyL7|ne_%VAQCjpBnqd6
zV^(R531H^Y%a0jRBtadT_8&spps}n%yO_%|E-QW@B{le}VKk;>uZEZx`u$}-J+Ydd
zTDzu^9<+l$IH)hr)C^w!q14rJI-xPm%rmpO;fEl@%$IRS8$FO0{@_4olQa1Rygm)l
ztRW6%pl7IS!0D;ASIV^uPAjb*wc2e_C@d*zwa2QMVrk)Dh1G*H@WS6TX6~Fn^#yyB
zoqTCuJu6l(qvEE|O=jnaRcn}I>u@NDJ&4l2&PW4G$T7@ay|mPkJUd<N_3u|E<#@C_
z0dMTu-t+&td1g*n@`xZ=SiYe*UtE5sXLh9YRf|Yna=KosRcmE~wCs1))W6u*L736`
zY#c&7k)>y5cqYy?jO_gwh(ZX<B!eej-?-uNai3)5$x(r^a&1Gyo}og)=##p%s;C7r
z=L&W*grsHP{0NwQX5;UUx3?ev-9~(P;%Mj5WwF@Oqn-Hh>p<-cnWy2wP~11-JaH}D
zk4EO6djQ6ZU``q(L_WZP772nED%LfpFI!x>wk3TT-hhE?b_zv_;BWQUJiTn>Oh$es
zPsj^|H`njJzi<Dwb?EPPgiK%)>^ZM<Hv1AG;I{qs?)hD9!V14grPRng=_oeY)R!ay
zVN0Jus~?C?#<>I&$-*#i>z0O|_8*8-rmXCM5Cy};wGfEPjU6FkV(LmE%kJb>hZDfi
z`f*}PK&&8t0k4!Odaed(M5lA1GRhEIV*w##;)gQ+aZ$z)G#cat<@h1-#Bz*sj)d#B
zbog6p{qwu(Okn%&13eC{!r8fCG`i!UJ-=h=w$jQC9?Q+iI+FWG!~KR`dzRx9Ay4~(
z2Rqho&KWt>ij7{pDoOv}MI+TIPe0sv+o6q}!L0DVt=9Cn-eShaI@TiMS>pUp^H*8d
zdgIGuV=v#>n)p4LH*#%5!*wHhc_Y^~G+aB9hg~!CG5STNdBcgfu4S>LtR1Xn#1q7w
zbPPcU<nSC;8LNra#~Nj=W$k2L$2!hB%X*0Q4APNCn2@QEGMfM6^~`TMKjE63ah?4C
zP(Bj|Y|yUJ+U;76{bz}b6Y!720dIzET2!L7c@h_s^ApdGC*EF^xJb4$FWK?qiPtCg
zB_86^#D|k@i84%-xT3C2Jbf}zL@Z${vkNtLSmtol#ea9j%Wse0ga7`K7j9*0PPAa(
zJ>wev*2dpY{FBFj8DH?JFNjabJCQwVB1b*WNoWldUSjz`!RUGk#<H6Oj`_xSAFLeM
zQ==6`<idGlCx?8kP8q2avt{}u-J0z(WhO_E-d^hM>1?UUQ4BwRejpDJwbfg@0@d5j
z^-vuLhHhJyEtPet1tgo?b<HVoHg8pX#Fo=Ie_7VV8S+>j?WcbI|08T2TG6}}Cl~oz
zoH9Z`4V%8}e}iq(_lw!E{T}=6<*;SKx%dSLTh<IcIAitB!DqqB*oUH%1jdP%V9|}w
z+rMSV=z3yVzsUyFej4E25MYl?y6~3Q*VSLQW!N1N%DLhsUw-pwN&ViT0)Z0$J%XcR
z!>z5<OZa+=nfju7Yd1sBCk}6aerK^YvpTI=$<;Z%PF;HEuGTY*4x@AG8~hYO#HB#m
z3mUsbMms}B>{8y<U_b?GYkxkN*Oe(3=y(Eu)4ImAT&I|nXfUDLs;Fug@{N*cWlCpj
zjUoH&`r2IV+dWsI+^cWaHSXyR@kNzt8BXGZOB%jhw<^@Pw`p<`|28)c3r53|7LOSh
z?@D#NCuhPiofH;t<!2;7kgA1A4g^5fEC3`4a3f0+5XgmtOY6ahGXQvgHw`3(;+3RN
zeT(maaQNoXWV*X(Q8*3|iYtwX;;(&rFs~c7qTvfmm*3b~w7jR<9OX;7^0cCX^5xsb
zc1dOh1ghF7Ia6Jehy9yr@afi`Yx^^_?x?j{!gKrFYgd3I1lFFWtFeuYj&tfm>TYlq
z{ten~1Zi(6#&M1DGNHr%ph$K9QhAfKPOH+W5RyVdY3=aWHno&kH=N%fw0QzXtCPdy
zii$L*((L@D9u(D(rui=X8tg6hYTD}ar}?d53x1+E3K9D;Hxs)3>#?iYOVGJJ-~?$G
zSQ`hl8om{Mo3y6`+#_bQ{;-646Z_*5W<A`E6L>a+SAw)|V1})MI3D|9hM@sRLo1<#
zjQ0!U2?N-^z)T03zQ)5#wMk;)x3p_ZDedM$Z4=ILeJNS}MD%5m4DlzVRUd2{%{f={
zhrPrcGhJt~s6@tBncT+AOm|*so;$f@eqO;!yN{Idg<6}>o|W&;Ez5N~3VX712Q1`A
zN~uDcoo06Ebnb#+q_4~qN-gB@RXSBH)0U*wxC%3UZN+YP5;K0c;@9IUNIyAq&NAEK
zDTu46BWoWWl_~K7l85t^f?tt(8GFg33;Ux?OciS)CR0QMo)$9a&JoxbldvwNGgQQ5
z;3g6c#>3y{gGdel-=E(lmJn+&Hg=v=2sZ)IJ-fvMe4OBrxABzQNGY{b%mWINOHdR~
z4939%E|>b2Bj)~{X=fa^^8su}$(+aHw8n}CI&O{gn0>e7=WApNvV$WaxN^Y}wpKPy
z+)I574B+Q7@z=^^nLJ7PH4QebuM*aGAFL0>*I_fqJIJ{xYQyfrrPMI!5=~MZTm+6%
zkBGpR>}-{4^0U#fN{T7ySj5yewh;Rb`&!x#0e(y!BnqS#pJiXWg9X6j#8GU3UCr1i
z;12NVc*a_GHC2uFVj=kKBl;O9{uKRNxHe-g$c?`S9!9SsA7J7d>}m2G<Z}hRpO5PZ
z9Me~r%535dmMC<*o6lMFf_=40jo>-*oJ#YhPzo@$8mR^_W(@3M^Krn@&#ub{9Me}=
zx!J*AR;yHrZu^rtNqn$Fp%cHt(Q8y6h{WG8e_7KyfUR*`zBzgf#q5NESJGuv;%b{m
ztxDF3aCqfbtCRJjxmpddMe9KuK(ysUzp076KIe1TZt}EVD&7u0dq;~sj%#di@0hF;
z;<$=#!XP?%*>0AzaZV%D%310T$RqzDj${8O@1m^>(8A$}T-qaJiqh_&1n%59hJecz
zO;W&}d-A-6<Xx$i1DAH@1C^<eAMPV+u)S=I*2*}eDB>C(W!vd^i#VgD;DATCfJ<`q
zCIgS;k=_h8rZBrTVK0~4S4#}?MWm3;Gdk1tpfI3znPl|^wKo>gI`u=a?lrJ(J*~-g
zc!0}{(*d%81ny6mwGdmuiFw&P5|=3zY=Q)UVC(Z^JZ@gt7a)%W3W462Y~r$oBu7AM
zif*hesHe{ZSf!K@(@wpLVylorq!gtcBrzO_RU1^)t0E9lZFqad*|RIoGGi(L-zS*&
z;h1nR`yLzkmijN%2BionH>yB{dI-ILmVW<c$ls&vN;-F<LuL!xu+gp5{ouF6HK1xW
ze4a)L!8fozG*W0A&L9rH5mP1NQz;wV)TR|HKrQtknq%W|!uLoAbGC~KPPjLw92bKJ
z?xY?BwErQ44}y<A2j<XmLD9wxe0v;%c3gBELV0{9e5KSw@O=jw$7sLT1TKiF`nQ?7
z(y0UBpHu%pR*+=yG9fYwmTVWYo%!w2l73|iUx@PrGJ`%Pi=!Ozcg%BF*IP)SF=~pl
z>AJ3_4q$2Vy4Z7bg+M9-8P}bnw`*iPT*$3;tt!c^NtdxjJGN#Q!%6^Ysjqg=>+p}z
z_9#>y_-yKaI8H2A+WW<A0O2CE203pzVqSexPECp<$E)l2IK4TZWPcX*ZhCdptWC>H
z@>WI6+EiGWQ5bM#pfh>^s3^E=>Qg#q9GbZT;~C>BdcFcvf1@76R!u#M)@2gW7xI9@
zhAje$H418*V%&<2K5+8nNhq<xcc-Y|((l?)>^a8SYZ_k;TTNTsq6>{0%5m5#OgviS
zEtDIoyv{tAgoACwNuAA<#KAXWY@ONaBC$&K$iig1Jy{p339HrK5CDFcS?vh}5b~-S
zndoEcEZrs-wu#$N{kAB!$~JkUP&KXs+f<d*7Ypyc`)+!^guI8DAg{0)Zq7&Ck4GIG
z@G(^)GQqxi;+W|z6D3^o@hElw#~;)6e@FcW>z;ZTjYSekLJ^LgEx{Z}E$L*;%;0hb
zep%FjZ6b4wPBx&?FlWkEYZerBB^#=$D;un}n9t2qsnSBA#@bL>YG>ALU?J9HZ?m&#
z-qmnW<Of$&6V+ga8*A2|$T_j0YQu>fvg1g_k;MPuH#ZV{up{i(>A4}oOqXb`VKas_
z(Fph+SLqc5k(6DPDs-pA*;210$fT_5RAB=d)A%EK4p)(1zZ^Innv6)E9mTy}iZSr~
zocs)Xf{W90+7;@CBA*@C7?iN`tjaWDN*bK)4Jv|kWL2e#Qc~C_G%ioj;mS|bEC)u1
z#+4ehyYo}kO96^Q`UVljv&l(1;}tWq=s*`t>Sug9%mo@}@I7lrL9!{wxV&Pi%qq5~
zkOQPGP>^KJGc7M)A~A|=9+KSYtIM>gB`4C4as`1je_fVED?Q;m!r}Rm;&|%cloo$-
zY7kkv0TgEtGA<nt5V8k;yN+%Aw}2`Wyrm%x{}zBJ1l0Qyzj(|1`8y;&@s`0sNQ<1w
zkFh0F_c8J)npPrED#j#=4T{biWU0J%>hL}HP$m<F=r%@d!melM(sLf&iP-fY=bYSB
zO?LmK@}`?AY1*zM4nz4NMEgy|mpKj!<EIW{0dKiqMUt-EIxpW7W3&Ap;xKaU^3_Dm
zy}8k7F5=za5o5TYt%h?z%4KWiW$V}wuC}JAR1SKzw76AhX|AkWny==Jl9H5?jEw4t
zl^o%uH;xnUX;RE`xj99nO|i)3mK0!0s~s)yR)kHaaD}&Ev^Jj8YyadFcx37+8b`>h
zQ4Nr9se9zp81>GP@^{~1;%=OV@4Oa&ho%E~?H_rkx71PZyjy<cNEv+=`po1Mc4+EJ
z_zvWH3;h~Ete^?P%1&>=dd5%0K7FL*op;KP9HIUPe)Y~fH2oeY?!#_p*V6PuVFOWk
zLxwNG^PW65$M4}oGOF366Oxe><Uq3ZGDM7+5o|VU1=tGbxC}Usk-_2*g!x0hRF}v3
z13s}%tkV{|io^;IpAZxXaVcLTuG7|ujZ%qDobN0U$>9TGz5wHL`D$^U?pZDm!=?VH
zpC^}^t^IvgJ>03oTP`19JZ^f_%T<a^*8YB}K_rxM{Sl;(?4fSJ_D=nV*0<5tuJLId
z?(`fpt}jI&o)Nh#uE+&%+uSCD!)1QW?lSA`ZZmLM0(QC1Tj2C$i&e#5YrrAbr{_CU
zv&5=-)F-|qy*)k2U{Cyhta1iS$%THS(_&3lCkIW*1<W<-gBGG5`!jn3EnhR1T(mL+
z%A<ci)F9_^n?C&in0xQ|wyN`g-1lBx?Y*sKZCT5bC0Vj8d2d<Xd(U{rNt`&-*_(uf
zOcDZw5eS4PjL@)Yp```7XiHl<fYQZiDIZ2kTd=Nw=Uxp<j%oRPf8Rg8yk3b%(7n$&
z=Q+>we)h2@0r-O6i9IgiUxUID-ZgyhnV5%Cv(OhkJ3K{^Owy?JCZ7sHE*|*XZ(duO
z@d{?aKEU3`O1>E!df_MUVo!)Ih30jwLqo0W%!L;5!a~|hq+6*7`a&848`7R44-vW9
zKOp^%@(J1tewP{j9bR*QZKn9KFXK7YT8f18ulKPpiJa=UNhhgf^sQKgJUWjsK6##m
zOCBnj|HohT-*@`R@!LC(-om(<|A#mFFPuIa{Rw^P_}wa-$EIrQI(DzhmV<v2y&FFz
zJx1lAzl+{&Jp0(I*QiMnN)|#|A6?(e&>Mh@q|mn?4-CEV+Pi3H>iY2Bs+g2Y2J(tQ
z_{Q<%_#6P9awvagga0D`-b&t!{fR0R3n|-&_KyI0@B;utK)k<FCtO9grx^+F1W^M<
z5g`QXk9h-dM-t%ec)VMJ_r4=wOj^@~Ay>yjwJt6jsD?tbH<(^9RtG~cy;!PA7qb{_
z(zn`6opQSr{Y#b1QDj1~59n-_O6_$kbF-8%i`mZPFd5XlNfxa|5}iZ$I;jipBin!;
zw#2<%U=2%r6bVix*cX~d$ULRkoXezU+oU>$n9d^0EyFfbX|`OO-{uK*kZ4RQx<RCu
zb6u`ddVUbRm7ZzKkh{a#zJW?}Z)3WWi$-msUy=r)v*f?ylQ*N*q)$kWZ3B28v@vHo
z=cqFyUB?nD*m512gEc`9-=((eWn86*X^1}K=U@$UU=0F7OD*m3of=Dd$x`M_*B5o<
zfUh!rQ72hzmorQjja|VqlWhu5wY^}t+^FzW+4Dy#jM!eKtJLVuQ)HKBdT@7O+Hb-6
zttT6ZEb7H$Ta1EueFAvBuarSYVP%m;>rydM-D*9m&`9m#OtJwBGH4pPR%S0WLTc=t
zOq)am;SCOnHH5($jBy^1IwzJt1_^9I88j-JFB9e#+e{Lbh)0}3w_O*srK|Hha-C)A
z=y%8zI*Z=j;VoctSj7IjsvZ8JDvL%P-M62CcOD~uMD%Nm&WMY?5v*YeM-qA-`jV{`
zyNb1{44e2$Ln(tnLX>6pK!w_0XV=+yO7t-iuXi}dAxnp;k#!83S!En*%O9_?iiLk8
z?%V66L3k~ApCFNQgb$b`N~UnHAhb@FZ!FKJ>8Ew5LXGd&s)kkQKc&jSF!o1CWwuF#
z*i-P4=-vG}X%J}!`=yINOS1UH*aPEViEbs6QlHM8MUypH$_nYaRXTc+(uRUJ(F5X4
ze&(uNd^zZ+=^C5SX6$al-`8rj5MRUs><Q>4CN28j*T5Pm;QoqY?<G1q8I#{MlAfni
z@c3jFMZ!><dD>OJA|4Y$e`B(<TREsfi@guM#KPNY1K#h1J||znXEH-%u<Z#;1DDX?
zFT@)ld}`1TS;rU9Q98^_&&%+8C>drd6DF4#r~*H4nm$eXqm56d<O;>5fq%0YcIIZm
zkp}$vzXP=11bCHC@G3DKPm*xcxZ#`L99h-P<k}GgqVgEy2%mxTC%)7Vl|F^Sr~Hu0
ziq=Sg=Ntsj!Lh4^V2oI<iO)ok?2USr{xUPcWRXfxN+-%?41HsIf=MTpQmA!I&I+{t
zBNp{6hrWZ#djCx-^#q5#jvtNXeUn5(8p-%1m}up?59s$)&qeA_1$|IX|K9*k$`lE8
zGA0bZGYLidbQbhISd;)yLh#SvmrV5jZfti?qa;(s;{h99YF6|4YBOY5@(b|xUjsVq
zNpzSXN!-^TB>+nOsW${24jn;6_={q%G!l3X+mrH36QD!JBpG|4?cLbVWABs3-Ve1b
z`9;(=>c+TfZ3{ogYtSe$t5Fi~7oBL!ED^etkWd%zzZ`ELjmtSx7IJ^O-oRvVcp{!$
zV{u#L8FD-qfd!%JOr=h#F{v}NGv#y!jZSB)75ok|n?<8A*krm|qST8yR5CD;#R`>x
z$6;_$U}(}&jYO>AGbj`WUoHVg0++@^Q4$0(`O%q<5RJ4A;i6ZGdy$lEK^z^lkHnJe
z__|`Z4qZp_cFdMLsvUePy2_X(qozB`?L{*!PMN=_7(8bJVDiH;OdiFnf8Q3q_Fe$(
zxi$38JD~&?y+0L;qWJ&ni(%0hKm2C>#@nM<wEV5N0EUh7+9<$~n~6EJqO`)rD7yv`
zEEaJtDPGqIVu~Z$^gLRhhx9aTYRKHV8+*UtaQ=IZn;SCc_VCx-GoEb-tq$$lUAh0o
z&6wr9w5%^6Lm-5uSVg7!r_Ya^ved0A@1Ma?(i)6wshuhwUvbLbys^4){a{$4I6gCc
zabpR}RtK8gTpdH8rApOh%Jw6}IfSfUo0dj;5YW!Tr9~pgLW59}rs$gRdi6VdcQ)!(
zMI#m1Uy5na>NWRI=TshgWfx|eeG<~&RCKCjbbBznyV4T*pbEZTxbl|zsb>x~AW!du
zx*{K^;nOBRCfydD1ubx;6zwNx^DIt_GWonSG!8{o5b6p{e*1W9?&z`3mW|ChJT?z?
z_x$<D?w_5g&+guR&$lL;4y^9bHnSl;jf~Hs?*7KV?wo#ft|Zfu$)dHj4E8?o?x8Ke
zd*<|bt}?gY-M}K^mmiax$gkmjj1sjE5Ha=*nDRHYh$W>Ab>(~YKJWq3YLc#MU9-2|
ztYc{TJd?1Zp2;er3OW4D^6B>Vubyhn8#~%sGFs;|D;P8;skrYS7k2&dNX_gIAnu(_
zCkoINm3u~leBPj(hLXuMW3zR17NEHI%ICMO2E+s5qZU)p#?hIc`~Q5?v-n_Z$fU>5
z3-B7b5u6tjkIW^V7nGP=y*z7e+W7sWb-uAvz1U9<LqFa7i_`TpFJm9wi}7#dr!(E(
z`26;jS2h=ac`FKa-TTLbPhvlRW5co>1miIeQXnx$T@a0Yz-|c9#9&1L5@>wzAB*Pi
zIj77YD21CJ#X>9YnDpjv|L*?zyvQK$6pWre?QG0bqogm!a|Ui|8N9He7<%JWR4)Sc
zh`b-26>kPcJ5ij57i#(Ef69Z`=VK@z`Z5qX!bhBEp-)dhf5v-a)h>KW`UiR$(Bw&y
z8aE90CfZ~#c8tKMvY<?D^RA}8J2th5=g;_e9XeLM`3J`vMxVjHxNG|Aj&g=bB|uKV
zaL&ld-p;*4<>^WmTs3lGU17nx3oGD5{w8mF>xB<*eH?r3?d{cvUfxj@&SXj)>Fcg;
zF0}h_4;7SFx$p_88Qg=)l=)ZjQBEnHDWe<+RCUTYLcF0m^1gF+*Ui;!x6PK>n`bL?
z>$1h6L*Lz8xnZzD?dHhnJWIuNQ{8OXXsQ?~_%-jn_B|bTQ_bqC%BeaRo6qGiUd?UH
zk+}ztc2(_K*_6)rmW54Cx6YJ`&3XDN5d(;HOJ$$iQI(y3FsE%*p0}smq_x`_oM_Ld
z1wM9?R1D4p&vL};`;a8(DACji56fyO&@%<FR1kT;7-G;pZ5zVDMzevg<KdU3jzxY5
zaq!VJjC5P%qxQxFgI@eDP)TI+nsGNed^VP6@G*HWxToc5L}g*31$R=0Dn33lzKyZu
zubd@Unu3}NIcBjqCp=Lz_v4dIft6?bJRSAb`plOF0+<EeR_a~5<Cdn~uix4<^J7SP
zx&LfFNgtYR_SKp7bRD0YDJ-vNk*>E08Elr>DDS)S`PrFoZZBnsRYIs-#GQ=1Wy~`P
zdmni3@Y9g{%`JKjRJmtGP{55}?I<S3>n-|-djb%?0dJX4U>yn#($EN)NyD)YBA~L+
zy9Kg`$s8)Q1uB@AKtIQ-uL=1ys0;c`l>W_I$ZQ(qFe*PIGf?PS<T<zw32``)TKI8Q
z^uBCdxDG?HUhcT%Kuo}mYD>m*hZx?fMk*q=`qc%UUI7)o?aNc`%>@#bkZNmKL-c|l
z1ayYc`w6R!unwajcyTwQQxT$bOrWf2Qxi9|y+r4dLRsYxO!=zh3Lp~MMxm!&i+w0|
z$`n>U^uPsu1_L|6wOHF5pMCUMM8{J@=Leg3tUd)W<0;v8?4Z)bpy^eS9-$D<m8D0f
z!6E=Xn-)Hy90L266}5{@u_=!PmV@O`>cqoX0G@K_kpVY}SNnr?#Ve{EOvB*n&G|pO
zqMmwgiYf4S=LgsJ6fsAiA7xPOZ6%XWm#;w2elg{OXb)Y;Zr@bdFxO-Ot5P5X^LMYi
zIO(q3d36eL&HrT6wJrJoxQ^HX|8ubQXgQ!MHXAb5zHpgKkmHNDG!&rakMv9A(T;_i
z!G&-(%+vtwp{MKd3jsKcOu9t0F<b?cwgZCV4GQP8JHYM8;qwLnJE4@Bu^d=~_C{M4
zl1NefF|_ardNX<n=<sx+LUpnFvoKz*O3^^6vJYGqNC)}GPxX#Hc2f_Zf#*mLUp~+$
zLe63P_r89rJ|#aAK1mlc@Lb5MeJ^af9Z!xd+wsI&_+bBo@7<J|5sCBq2zD>|z2thx
zl)TNTFCaB<Gnz;j&)v|$d#A4L2?6!q6#I(&4@y;e4DK<f#WMB`7P({FclTF1+PB^L
z)cD5dN~`Yas~#^D(;s{OmVw8<ykqjpT*=_o`P-*1Zz)EevQ*_{`0O=LPCSkM;GJzf
z7yfu)?ycv}O!`}DD%xG$yBogfPK)VPbQN(wv(jSy#f^Zs<0!})AK<)HueP=9?zA5~
z{L^a4y7s|oZ|KNt`(7(~_C}=&KjP`#6<)VD@(uU{@9@p7GtVEajr`>+U>TriaKT8j
zpbr3g49n3&AtnheUO);gXaz$4&`sYeg#_y!nD%&v4z+7UkmmuH0Q-cgHSTddd-Yi*
zOm((xs+^vQyahku?ATG)e(Q#2p(r!*QYMT_h1f3ife*l)!+T^s4bCr+==%MiM%*VL
zoask(FRt#ssmD>UV)udFD+)GD)vRvx3E4ujt@Tek2TrYU$NnMR9d;M=mOHp?J_Qw4
zh5Z9tOIIEr%6B@-N9zYy0aeLnbhfSV4(w|fJ33sP<0>1d&aCogXf0X}-WLjpR5Sye
z749n`>O2YmLh`X_P$t%S$8&dH**%+l2nd(-<(DYw%h558K4r_HwAI*p(h=}XSu8&1
zO$pE8kOSyB*vazMs%=b$2%%Z)vsz{f`838EtX)822(hlSIm0t-mZ*l$^Yrg)Y$E;e
z&O5)vo%3mH7CuIQ3!YsBo*h^Cc)1!;bw|-rqWzrXfY?M7#Bv~_z7KEbOoH#-@{?Oz
zYW6%bVyrh{3rxhMgx+C8jFz*rWd&2WG>treyu(~GUdZ4;?<g}6CbnQ~G={dcJH12u
z?|p*XdhU%qdp~$~p9ZB4%5<Ci`7@V(vw8B~X<z8%+o!wk+0n-C->j1jQpxg(TOJvn
zdG&#PJ=xJ5l7;_4jerjpbHKorU7E~Hino~}8%@YmR)e#AMX5Tp^YZszA8puDtKe*U
zb~BxkS!yr4_1K=_07GU|^UQpKnuPA<32ZH!YR+SCVn03I=v({P7UY-n*5(Z%ZRyrW
zf4gu*U+7R!P?RPoXqf<ecL3Z6ZGx6$orF(!O-gY=9;`akFEtwtB3y&BjbeMX4(q9S
zrUKi4zf?|rhb5x0wPMn5R}P{y7OhKxSIy*lBF7>x!39W{R2ccOCZJRW)Iiq%72w-_
z;Os<+9Fn9w68sNoD<Z{qK^{IfgU!O9^5-=)k_fsBdyNMjfmTQKeB>3hS*^l&M<NSn
zt5xZ6`Vr{21irz$o05#+*-pYYM}eZvyBG7@lB^_atPKx%p9<y*v8om4#&WuD`|-Lx
zzpkrg@W>1<o1IhLozuR*%b~B|*0G-kb9vC+ky`}FG}_G5^RZDRIJmQF?)x`~SM)V8
zNE9|dQzOb7+EeA~C^j~5)Ewy0S-d|Dps5bf<ihV3QB9eGxeB6XWJ$<1RxBNe9EOTm
zRG5C-_|bNgzG|v6Zz!D0<MSD0F164)xp7bFzyouY{w*&Yz#iqHFcnz^(BB5|-Uesu
z+LFBS`YgFQi_fN#7)`Evzp8NEy~Dlt&xH`^9N)k#kJ<vjhLi)^{Asbi+ulWsahW}f
z_C6y=2S{m1eAMH^cAsgeTzSug$5J!4X<ykLujN-WI8+*&!m*e37xx_Kuo|n!OL8~o
zjlZGO=b7X%1F1)A^-k;%H*fTCQ`7M+L#6ul!yyKhMrLQ()Ws9~%KbfsT7f_fix7jb
zo1k+T-1jkXZwiPUgcNuhXWJAc8}-UTZeI-0y3zJCQt!GbC~chi5dfw2d#Ae$g<KrQ
z)=Y+Q7@N29wkV9{{D?1vnb)~L0%(>Ao!6X!8orl;NYfo9mZj*GDasJ87jgUc33>h4
zKXKd#aMs3HU%6CEJb6Mrc`>gJpJIvrGqcfJ*y0vD8dq&UR2JISs%NVr<&Doh`dmHy
zT>Z1#`Jv{}{?UAAu2{!VLdf4(3~P12XX`Jo?CZ+P8o6iPzalf}*~m_K=a&n|54PU*
zry~_%22szFmWy2?{R_PaaBL>P5MF)4P9sqgJ+t66Qapba%6bmceScJz+m>(d?QW?K
z2*h|sZ*|9>Hp^jb0Xy;M%x8WxsMJ6wTAqIW<HNquI)^5R=jK9Cczc(tWbJM3m$9E?
z^S^1wu8}`hWkl@{>_H-zI3sN_mss~7GKcSf_Tqm^68_>BsBLLdFtOH3z}IWQ-V5+K
z8*#j3ifV;KnG2HAo;7MO#-_Rw(*TGzASR>N4X1~9_U1V1$8yWJ_2*`W#^6;VL2m!H
za^H$@R`}?TcCLJ2ZJ>DNk+7$?(#(|VrTZi-woDH!K2PDA=4=*&Dpv0^)o-ZJ>#WR^
zt4iBv!Ua9~Dpa8F$?V*}BCJ-HcdZLg0g#0!$&Q|$uG1(=S|-XY6$N=pjl|TK>uo9Z
z$rME`(^VOTVkwa`zVHFC8TW!U8e(!ZIh)uOn^mMq$hbLFJbw^jvw(f%YTi(14Ve_w
zbUM?lHs)DmC^~<c2D9kMTtp|prK?u)<(_e<pmt}khsUoGvp7n3rPW-`Q7}n6aen|0
z=&@bEoL~}f*HGdngCTx7@xYin#^P?0IMTvm$ZKNdH_+H!EY9#9uSF|!Sa<R63O`#5
zU#@+&_AdCg@p$FU#6-LvXW|IFE<*ev&UP3(f!+@E7N6+XLR6DLi{dm6FyJKj5)l(2
zx`|WbKtw`Xop)kl<#&#^xx2Q7a;7Io?a-bW0HKqGLx0~s_Kmr+_1}j`w@f@(#v>_&
z2OgqEp$c7$keWMtx*ow6E>1nTE~pIlmqd&Lo@Zcxqx+ueHBGnu?%-=s>D%k;hgYY|
zzc^b7Fbq=?<x4TpeRTvTHhm2Yif<vD+X~=t9EGm*cm@x(YlS!p6=I*_C^YnJ2<%`h
z{6_+Zu8F*j<IwF<94ay4IFytwid=-d4#H1FYrufs4*?peX=?oJqHzYFfyfWl_}tO_
zQ%$V<It3ZQeo?~^kXdR0<i~zd`b_cj*n8Zc?Yuu-Mj3`4zd+YY@BiV?xX7D7&<2#s
zfc6KNKk_$N1igF^@&Nq%FNn&MV?R2$u#k2TJB;c8&uH<;SsDWUi70x8(>k!*N#(?z
zc>n93P?iCba2CEpHyv7n({mn-<Mc8LD>tmRGXTb<+v>m(7xC%nLpN^N#yD`tH|$ph
zBQqS97>Aw%`x>q2I3d3Vu}i23tO4(F=uY&k2gD&!qXCH-_{4ky+^8p6UhpCY*&0hF
zZmr)$<w{iI2Hak+E!NpZ(8m(1>h8$*#3oU?k$V!WO;<tfz*-No_zV=c*CU7c5?Br3
z)2)&WI!&vH-up|$y%)yuQ<RPyueupA%2u1_uikjGu}AS2#ji717YWGAJEOQ%;QDW_
zWFTU^>v=4BLAW<>^4rH+eJhT2Hg9b4@;E%y)r~unPu6F5?Yigr$@6bl<8EY5Mz)rp
z@FF`i*|hfNL7+?zZTa2Pr^j>GuE2fBcxO!HZLlsH;RA~~CXu%vng6K(o-K%cz=x$_
z+>Ad9Mb5%gQQyp9%vVZ@*)4caICE58*22%iw-CzkP+Gih5BVATB9I$CaC$_ia8i8a
zI-vl?@#RsHh7sVYjuah)7^l3Ro^Ze-!Yj~v>XjN}`@pz2UV7HJ+sdX&Gx`oy>C;il
z0olXyU$cJwc8=Xvvtr#`aO2kC)X8>;TQE{-dhS}&eW!Qzd&>%oWirwxqW)|ZL0=xA
z?=AF&G&aFq@lNJMz*3OXk`@q1wi50@l5V)TdSi=yMNh-dyqZAiU4!MT!{+ksk4$#0
zH3?bz)z{#UIG>jJN_RZ9{^)^*5IlsbL+#%2vx7H%aA}~XtjB=9u#M<j2HyQXu{T*?
zYj5zLCNkrs4{S-$EN+W$Ne8|qx5T%^!ltIH`nNv_(RcmcySNpTv8^zsZUuP@R0QE?
z3ig3?8lA>tYDxaws0?46l4ShK(1HZX_Vo6x$m=-J?Wn!!*;U!~Iyxn@e7MwD1$3U2
z!L+D?e!4uD%xAFW)?#=0Tu+W7x6x~_@R~JpwvhdVKWyg*r*G?-`{TpoLVjn#OskvE
z4@sDup2qK&Qt9a#={38rjuxz_Gzk<Mg@703FCU<r3igmoSRYHO9G59_#Q8hNEkek~
zDIZbVSRXBIR9{W4Y+SXYqGryT6M2CH7e9<hz1F_dPjznG7MwcKj-2_TW3i_3zFT+o
zc>`YP(QOb!%w_lt`7U}dz(5rQ+DdU5EgjGq&v;FSMJDKV0IqUmzLvb=HBAm(pceZU
znl5JgLrq3ozJX^g@9OO=w^r?Wa#i0gL#|g}))!|h&8_>o)eSApS~yP<T6OENf2=Mm
zXXr?K*<@P<W|DH*TsBW>6l?tcU`6ZX-sbh+JzQ6~>Qw7X*k|Rkocv0wcc8+I(%D4s
zlLZF09)1PAg6}B7hLWVAI+~O!v{>nq3Adfx@6rnfwucHl9MopCRQilm21Mgv^DF4|
zoQ|!H_6nn%Dq%A9x^NGhH9Ra7!_<?cviAKwPGOq_k@~ty`nJ#iq^WUVKaPGxEcW=y
zHHeW(5(+EvzTUtV`4pTpp6tF@h@4b2g~ak3Vo4_Grwxp}kz4wDch|`oT8Qncw-0pI
zD~lhydbPR!#gW|`#ad2nSML<39=RTwYdbpP^Nk#7hs2v^v%7ZIM?OGbjI?an{K}Kq
zU$^bpu?^mb^BNDkg#4I9N@L;p%NOgh3tsO_H1&?5Y0+nEUb(d+RO=k>ZB&X(-7BVZ
zi-t;dh0`Z5KGv$ga(_p#Gi&bb<6|8Yfyoo?UzAMMnr+P+LIV$-+&<Q<!rnk@i9WNy
zK15yum<z9jzd^^vC!7*0aOoYTK!e#9fs6-Lvo+E?u<h&&9#=w#%;!WZ`sa*vg)?wv
zD~;|Yjs;v#a4ZHbI2PnXY&C-qb@KSw3|B^DW(Y7QM*!U;VqtRRLx3Z}(FnlNa3)sb
zeDd<b=g28yu3nlUG21E&%1N}(CQ^TKEgjpT49F*;2!NnNPSHqN)~ss3ncYh!(WM;h
z&lIKn2=tclQR!7KnV*rR&7(jpnN@A73RoF}C!|k4%kp?PmK!8|cV8`ZyT&7t=j$R@
zxkBWw;gYe^dZjs?S<I5~>0Dz;c1PJ*+5DvdK7%j_utN(tGa)hMYDwh9ohs=Pep^Az
zw=04_W~j6BP30RqT=LwuKxv0Zie9Gr$Igrno)~u3AO6;=zN4Ptj=J(bFPFac@-`Ha
zIE<!{9ubL*N^WT9mErQ$wH8lphoR)qnyUP@_l(TFd2z5TH(2EA+1)UYB41i-16o5y
zv?m4^@YhcXjGgyi^Z{|?P^wslfV!OYMs)*_YJ)(kX$&0$V+q|5nzMSZ+(#E*I&W+P
zhc0F@&AM<KoB6ia7FQF2iQ{b$3(xF|tBE`>R*9B2KJqM&9~QDX<I^Ki3?N<j7=9P*
zs~^`FNnX@gSBoU<LXK}YK0*23f=4E6*41V@>xRdN>zplhSrs`Zj)<WO-ZfaYs>bN7
z8<`lXa|$iRc5iL2nXh0>dCQGueZH!(8n@YyRbcalByzF1z*k@>?#!tiuFTFfW|w6v
zJSM49tCSJ6RbeOKyU_yNQbD8X`kr{04UQsgT#h9w4P&9DB$4KW?&s_IgKJ<2A(IPd
z*nF6FM-3|C_Sqmh2m41pN=6{3S!PrSsFg~pu@v0xuu)8rF&GwAULJ!&LMK;{1^PS(
z^rb*pDT4eQ0d`>*#x}cDOvIhd=CR)^nrX=v@G8KTwzU&9gZ+E~V8Q(4SUz#Gak-mR
z85vK5T3i<b+4<SUjV@)aR)lL?jYetLNh#bEdNY+mDwT#BoZAXxYb#iTuk93_^kPwm
zPs-zzi<um;t1)luBC#Akhe~U;W+$(R6^`xmCDI(=0o@HW$A+N9oSDRMPxxJ4c5$=Y
zRsaZ0XE3yCl~)>hilLP4d>i}hv_wR@kB-uW45Y<S<dk!`6@U_z<I7V*F?1YxM$C?E
zve?8{Vuts^$3QMtApgL7FA|+v5qHd+iDPjcfnkvfI?QAI;aeQ+6YSs6XWWR7260&s
z^=Du&|BQ)v$UnjY9UFUZ6ZYic5KGU2LYpAv&EVM>b{Z)~t`nV}aVM#mlME?{Ov6Q=
zArN-Hhv3_|SPrm-N#y(M)>LbEtn<|Y##J)a85K?axkIN%+&QZrm|0+Q5#;&-teLO!
zIomc=Y`jUHA(s`)vo!qR#F56{J7>#K=s3q90W`dXorFIFG<cKzsbos*{JklG3vW~n
z0SOzc2>dH75@T<MS6Ay^{#8NP!Y(MX+L#O>iD9jC6%G_@Zod>7D^?B;oTQM_AvfmW
z!sn20NVI(H3)EcF?!NPR8AXy|5*s}%mbi|`Rpr(>)*a?kjQ$#XX??Cz0A(B?&K_F$
z2Z90`bJ7w$(37z;ag~yqzY{J@{C~sYJ%UnDr#mw4_13Km8%o!lY#6wZ<EL}U941}w
zsj&Ln{mP*}W3zGacDj(EHOLS;ay_WC{+nhhAMke_9nNWN@G;12x+X(nDsHydcCuIs
zXe|Wk1ogNa%>fu}B?$qT-WTg*8udXTi+Vb7gdT4~W|^R|!inZQ?zv}%)m&}vr|zK@
ztBTtX4SF<%J?oD&)~>12d5_J1A6mbmYN$M0DrB$q^lYgVWcy3>e4|DLzv2nIBzaS3
z`s!}Kc~iT~R@!7NUfo$DWQZ91kC<I%fLKWj4`HWBEO2LNX(E6kM$^(HF|evJ5dHB@
zMtmYfYECW%2zNsC<Hfj22v|n3YHfU=CnAZCRZUHReQ48~oSrH-JA%P12x3rYADyda
zL51FCzpAs&+vHca!&4Npc85T!&D2N)N}W>B$DR;3u07t`dUzy{)XwQu?Y#e)4jO|m
zG4%%XMr&+2qqh!uhfLj7VM(S>ok?br<#wR})dlp>7mnJ2?2ay5sL$Qi2U7wDhS*c+
zYA6c^3JvmXhtpeVgx0y+iuBroj+}MHt#%4aV3uZ-SY%3LXmzOS@N|hx7R|{x0C@ic
zz*kO!uaJ~rLdrxC0#x8U4}U;`DReF!JKwdp%~HDasSPX7xgC5ZU+=2+RjzBY%L6?{
zx1$h=%%DM2n2(2C&*Mr&0tU7k^|a5Hk6$}jSK%#^f&1v{-qYx632Kc@4vWozt{jNQ
zrG3~L(p6w1GSU>dXA_OrEC3jWq*@$HTksoA@evHf5Ytpk#EtyOS7>q=!v==`6tHw-
z=Ez`ogK`!@V0*XSQe>566m;d4^r;o;JT2EG&r>m&Fw59EIFW3olwJO3fkWf68~q*<
zHz#hY0BDJMB^DvLK+e)kdrPs=pJTO3P>$KrY_#-we^EGAow;bi!1j1w<{uC~+~#F`
zxX9P_;rhIU4;OkI_fQ)O8|}WKkX7Tahpl8f8OiCIEp&F4TgtaRI@Ni2z#SOeUS?}7
z(BpYYTZK%zSfS1hnX@~~tR$FBB?;8)O?B(*3j1pdlo{3iTbukHc`8)LF`3Q$-kV0l
z8dZ76y70<Jx0bpA+@CzNx?Za+X__drR2Jo_G!n~z+t*s2i+ge>E7WDObPeFMkFXO+
z8PFlxm=1w7H`+CE=MGYaE0f4m&}Slwv1~Y@?9CZ@K{_?^LtM4MH3_W}F@85$yO-hm
z1^)fbguS}(8FmD20KCMC#^=590FMen61+oDg7@2vv5pZ~I?$vyNEfLknN>Pweh4N(
zmQJUu!onqyH2EFDJ(YAmoud*vr7oFT@X+Ojv;qfLC1Gdkf_|t#Wa6tdI)Am%R1+|C
zb2U6Mm8-YZXs7Q$`w1Tnc9isOAd~3$^t(iL4n+(o5~XtUB27T^eMQHL-{4HGuhdD!
zDB0efWh#jBaA3^D5HoNlmN;cX7PE+*SLYn=saND(-O>@{H2!F1(O|xqfh`nfX<a7W
zM(D7;L8s9xvP+CO>pHS|dVvIGTTE4&z_~%_-<#HX1`aewFy!;#_x9g}x0)a@bS8E)
zd>_Dm3>@#H#KuO;NKIe4z4%g6u_5$aW=O{hW_j~X-(7aAxk_TIxfFW;DvkiA-Cl=^
zx$Rbn0nk>lNtf?0%u>6zi;RhV59*11r}1=_8l87f0|E&JWg;lZ=41D6CuGdRr{p}s
z7o<yTx&i&CikU)asdGr@fNu~kD-)g~!pG5|JdiA7>Xol9<2X`^*anKR9XA?c(j_!!
zDSJ5Ck%aryyq=hh0p@GlyGtBw@^sXEYd-F3ipv(i7q;PRbYYjsa=>T&G(90*mRlnU
zFXp*ni7|UW0lkPdBDGQXV9XZ=mb6W56$RG}HTc!%oP8}-iXRb6*%fma*34OaYxq(Y
z2`<((b`5!gL*+(drhQlOT=1=&MI&eu7(vHS#8fdjyQlmUe8ul1n?wOGR>2Y}*bo-z
zFV#D`_qBC><Lr)Jw+Nr}mWEw|KL=}UPD}LAAPi1Y%&U$=qGSkX%0g2W8#z(K@+w=*
z);P+X_E3(ppl`ab0FP4vMQyU>Xp~tvsH52`&Do)RuTt*Jve_N!R)LbIaaQJL*ZY+E
zKuvv3K<^$n*w%g6g)~dVa!I-^pmF4yjd@*FC7b&5DJrwVp%Zdg;t-!N&Z>0T115#S
zpvspiG;)=z)M#=W<Vw9K>?_*X<IBgBP!~P~HfjLqXJgb4u0m6mLtc#UBQ8`Pc|1H3
z&h?jOD{Tyh7@=9KEV&H@PP?<P$-kclbJ%b_#^b_IBHu8{BP!Ti+ZlF6sZnO<7w2ay
ztC(62{60S8zzi5jfh^#*M$!y5ygALHj}6>vv#M=kHrTwk*Oj;8P=n%fX2bqLuOheE
zm)}>B%@xv-VU6D+&2HaR)p~M$o8<3M6~ouQA(U0;S7+!mVm?I|c7g<x@QSNI+@~00
z%cMY8Dl0CAxZqC~nJ~M*wORq?S!=V(dUCi_X1cDad)S-8cWc@7Oux#(q>D(%<^<0b
ztUl8<e?q`>w#*cd{Wu?dAeqhPyJy?lxh!#%)=MNK&|_3Wlf^otXbiaboUp(UT{O6q
zL1?o81bv2*VH%%)1eisCImLMqGcuIoJ#U`<A^XnylVTxS1hws;Dmh1>CXq!XvWg(t
z_`3NuA|Z4VHm-xzBJP(Ft^nw<-vJx@0{TxNXFYiIVzG*Iu@!(Ibutcarp2mwB%fBd
z<$FVI`Oy2ekgaibv4~EGR_U7Tcpn>2&$jB)iE<_V5X4G9r^{qA1qeyAa-_I&dbp(G
zi_-$0r+<HA6LM3!RA17QTf3tx+txZ)_vJmKzhE=*+~kFS0$%wyu%&Zj_EWSeczhNh
z-WlR6<^hr^ZVLQ{$RZ}D{6SX~N`y6kGZhx{p*Q(hm<K-L)eBVK8hkil4u@;eb|!`c
zRtF#C!J|Tp2p{^Fm=DN5klE1Gk-gl6z^TjO15wQTKMNnh?*g6WC9=Fp%a6b#N3$zn
zfj6e3UZ!XRRYlhPm8aX?BOR4uKTE_l=hk|1T7w#y#pBJ^awz2096n6Fqn4qGDJR75
zukt$b+e+I`P6h#v*A#F8-|Gt6J?4O2Z?YG*1hND|Tr;V0#f10C*n*q`cm=OXOC5ZU
zhkYn;SOw*CvG25AX~n+7g9<XR7s1~Rm+QfA;Ya^<FcN~FIQXxF@WIHYgM{4}z%G!a
zK+oY-8nIBGV5t`u=M|E449Sp8^nN?c$xC(J77qcKkiQ3OO;<p@@V-=sEsg^s816g8
zE+D@FbQ_lQoeGkoh;bJxbo<ne9@F2wI!acGCwnIr{ifH@7v^tY;v~HVYn3XY-ngq2
zyp}lEj{prg#uO$nW@^wdjw@l+1X&@T?2BBw0ZC%D_=6J&lE}YCeosQvn7EG+ijP#o
z(+2VONZ=)SA9?V2(_$t*p?M^U3H5GB6Y9(~dJ7pe_y-v6_HzoKl8v%6STZI=X3|hi
z$#5}l$r{UgeIYs<Wdfr=kE-OuGrFNNqa$1_^8k|Onb5DOY;r(oAR{P=Byc(%0{38z
zUFE5=c)RNg)Bl=LtTWY_;nN&E<qXe1gC7NYBPGrVKe{dQBp15Rgx$%7M%>8tdFBDA
z_#kv&)W--`NZ5i&aYpzzSdstY){AcF1?VT33%QQ<L}hmV!lx*U@Xg~kfBb%v<1J#r
z9zcsmzeJ2*e8Q%Yz%Q=9YtWLBQ;``AGw-G6w5%>`+})ks^dN>kcH}1qit{E;wChob
z#-@7Pf@*Ee`sO)${kHr1OIA17TL&B0*BXk~p6fXH=lgrgH(wkYyLM{EP(hc7xQMc2
z^`5H2Rc*QWlG7Tohk#vm4PO(Q+Sv?`s1VUTB8Zag)&*uiSa!nihxD-!zN*t1ZfYxW
zOk!JB*ceu0#lb<L1g0J53eWElTDS~YDJcrExv+0DPh>YrGc_WGknt;K5z!ZIl^GeB
zfAKZFiPV9|RYF@YUL~P@T<YYiZSxsSjm520n<#k4Z#b=SfkJu~(5oggsfcU;)pSw}
zMD=6_9P4j&61@J(f2I)j-*tW?Q%GuN3fG|$<~rmL^BG@7oEsnw%C7YET@*@MoVEr)
zn}w*0(TLp3P#23g5MlJFOC`~^`V@5MZ8&*bW8@8s#4z;~hmqI5wp?Y+5YrAc38jp&
zoC=4G0#npVT7RWbMn8-E0h(9GNo;4L0%6V8zCBF_lqKeV!ek$V#O{_L6cUL)VQ`{z
zxp6vA6MN|W8hdy{+orFzjf~1(4~MduM3!Y6jXu4Qw1r|UAN^0e36)u^2fY9WNhB7(
z#yePTO-myYwEl(c1GHMw3UCYLztc;JH#0|;G)6|3HcCDX7V^j>wk@`h5q!f>bA;!2
zf`u?)g`}v4jTHTbtrU));Aqru@)UZZ&>-h><p!Zpui!xru0k&o>ha&`g(AIzo4md@
z7I74d>-)_+9L8&65w;6_g2TZ-VNh_n3WI3L&uOuHN#=tyYX8c6xeRB4Er8>m`TuZX
z(fip5KcmALZf+}eOki`d<zr(jvZ9QKALvOsqiAq@RlbLZu*FKArP61hGNHS{?(7g*
zI1E@JCGK<X7I2>p(oFS|`#d!NZG02DqhGr4v#x4xKhWzG_R^^^B=)oycYNhFkMbx5
z2J0_Ot0QvCbjbhN%9n@$<Tr3G2b#PLRy}Hsu6q2xullakRl|9ApWnm~AuUY7EGlNs
zB7fL1fBt{D;-#{qVSz%v4Xn2k_vGPgSRyDmOXSIa+Jj`FauyKJ^v5O0!Db*qMsW#3
z<-%TQ3)qLaw86$l9K<){LNQD`6WxabchWwP8Zwl$fhu7-;|%hL8%4}ETnwddLMLmP
zO@LM>L{apd$*&XV-1`6ToNo|Q|96g>RN3R<khcIi=1h@e|N9gFO8G`H1NoK@PQE*B
z^%D8^zuSR?;1m28!G~|nmL$Q4O{|EX{Rn>cCzqbR7vGrksT+gKMTKze1V@|Eyi^Ke
zKLb)s82^pX5R;2vgEu<<&%`B=mo?Z!Bn7Zls?*XmU)8G>z+71PAA*$$M;n5i!iAcN
z04XRgEIS>zuyjpfrUI0VIF^f97Oui=nsZ@19&3g7awZogT9R1Am|qdUj0go~LMXry
z0Q+YCe0)vhL9nLP%jkd`*BD*LSFACJI}}qE8DFa|Suy-I(ZIG$JBj5H0ovGNIh5qJ
zV(rWB142pJ1{?GU_{!_G!fU}zOkZr2`}$%-+>{;RC2z>r*(xX)+pxu6yJ?C1xyMOJ
z8W*o3^d;rb#d8)G^B3_1chP5JtEl_#P386B?B3QYg;d|%JDM9DsxaD{*WYq~XYrQc
zre2+Nj)b%xdwzV==KPhX+97t)cqr4+y`OM^^teSb<QIAwKA#@E`x(NY=t%O@#3C`c
zk2hyY$ORbG@O9&`+tXPSFpHXNvU)pemG94u>B%IDp|y9!v;C;HpmXK+@|rn|kflfD
z9*Y%s3I;ZA%Nx6;75ZqNsXtBk1&7KFao=Wfuv#DAhi}Dc`Omq0cp4#)FCqz)25512
z<FvHYWc9VzDm6=~5O8#3TgMC}((gQ0+&{S`xN#eiq`}D_E;l|;cqIG0MZqcqa$R>T
zeeq0w8qd}K8hM4wq>{iXX@=ePN^R6Dyd=$Vj>sly%~VjuY=&7^+s0-l`HFGxFd#I^
zbxI^1A|Ixtli;!BPZ1;7JDh`3Qsm$pl1YdtL=K(DVyo<B?uNN$tIFS!<Ezgz^F%aj
z^J7zWyZdv>c0Idk@Ko+23}(7Ay=?2{@v61;7Nt(fEvgI$XYN_C=k0rYN@Fz(1q&`@
z2)vt3<m=%(6fX@CB&RvzvpBvg5R!1%4oa*RD>zqo*p;q-kj7)PGwh|=wR3G*4!fqj
zy3UeS;Y`o!*x4vB@EBqSB|~1!R<Xy{mhX9f)6gwms7svFQG$pweQKQ(`Wu4*sIS;@
zb!E?-u5GqbrE-^<3MXrA2&}8KOSmXKIOWXx?k&6i_~0P17&y&`ogk^u7r{Q}r==zQ
za7z;)-AT^ML_$>b(vVcv8b@KLhfiTijU9s%i6}tLHcQ#V*JuorUu9=9#4z@ez~RZ2
zN23YZBR%y>><IzS-n6!SE$P+5(P~rtdIWv2^NYfg)^09GNRrEqQhGFSP_XJuXFPus
zwE|w{F8W#*qp3IW<#JOi5Q=eSB9#+RQbDk!NkJ8{85SbJY1@sdo!cx-MB=r@BBemc
zz~&^LoEI+1?+p67@p<xqPuG+1DZ_XdyQIWU36${E`LfU?zYB56;P0!82MSF^HmRcP
z(#?@kcDmG6K3JJO*j&Kg`s9uVJ2$&$Pt)YNVW+9IXJRII_O(9P7TVt9k!HFTnp~Gn
zgnf%=%ra)y&xSchn>$!$@(zcyD(5ct58k_bs6^8?5ane%pl=%y$HOx>7yCslnF$|n
z7ZFc;c!eT#H+u7jYjZe}YoQ;mY(F;UuiE>}On67Po5~Tf;Ry)Zvp&DO%*hi`p`(S9
zHI~fKWC`^9s`~ud2d8%Y`h2H*=xA4#PeJ2pdFSs@=~P^T9{s|nqzFMzO%gq5oG~e4
zVM-j?5Iue3zDK9!`Xpiwlwj5uNjyhmet1Kp9f2Ln$}D$TCX0mBLpZH{ds|Forho;n
z<!u|u?<sR~g>;L)b9l;IIX76wdzndwsT7S{rKL0YDAZ?Yu5=Wvy?d~OEiw4ZH6kUI
zOU2hwHona-%iz;Vf1cflFQZ7GYZ6-O*Vj~Q`04pM6&x1c)6TN+8G;wBm!~cEB3rh}
z#gcTPq~;j#7YqTDsm}?ya_T%XnXB3{$(bnZE67N9mfHf&K?_ezGaK4_`mCYt-EM7u
zi!0M_;5mB__qh8TOQc8*mnKz6)2)7u%4?R)%3T#!UC^4Y(yMp{##{qGvwFPH)l%x>
z@|?LrW!_kwou6To;eB5hu9K=sXd1YEcy3d))j&#V2PJuwPKpm2Pc!<;8U>0EIYdFI
z2#K#r2ir^+A#_D`mbctMC&54G2wR3K*PpJnbvIYba@iuDCcE12?I_TWPEN2VyzN1a
z*jAS1t@9a}Ob#_8@9ycwEsbXSN%*>09F%2g1zeWc4bCdBLM>>bkY($d!&_Rj_{O}<
z0-oBS&hUk7rA_P7vkHy!Y=c;;l+rmR-V$?Jhr^Ij5R>ztBCmimQ>O*v^)4wX?D3ou
zbm<tO=*@w99N`?LBs=UGKGJE<D47VA_6HRrYf082Hk4h}=AF20Wago@{+e5Uy1!>n
zi%IOPf$OBUe1k08B&phQWu$y<gDt}swySf^(piskLw#sdtD|u3y~DfSy0^z#-jSuP
zD)j+671*t$cL?3xa3iK!nu!k~NjVGg8q7r0g%FPb@2vE>+knv}Xb3y{JHm<(&0H~3
zn%Qh5^6;`${#*uc1EYG&rK$DzWZUQx9#8KH=ao*@W>FQ@&rBB%m+94kmhri=@HQ(V
z$a7n(hgNOKo!RXjJ=O&`l+H9excmwci`~(BXuiDn-0J))Z;-{3tL4_3@!$vBj=K78
zYHv7ye6HJ5<d51A1q=T`9z+%hq=e^L#QUG5go~EcmqOPIdu-`jxICB%)>`}6x}Gyr
zfyNU*+~V(VD3ax|^a6p&U2JdI+m~ak7@kWP|B%n_!&c|!ly1ClaM!QzXcK6i$}o@4
zVk*R(f_3){*KBCEf&DgMCy-Z=>uD@J%i6$>c6P+0Sq{jT$_j;0Jex5dOn`coTD8WM
z&0<Jym58*(eL+{1L&B07Wi{Bl#|0Ynn-ql3gn~2${{&{$xqFSq+?wKyDqS_XaM&0e
z3tP4Ru*FbRSZdydq=`6@U+{rQgsmJ=1j2b%2jt8f2nMi84Iybn@o^9iC<?9dK6BB~
zi6og;u%$>!*0l=4X}(z@Gpe{5=^UBr_tI>CsYR<{K@e4~&NgfLzjO)t`r;nHqsp0X
zwuO!|W!fyYnhKM62Cbzq+rS;A0t-z76&v$ZdM8_MmOFe!5SHOkbLl)OtB4`hr(?ex
zH8!dJ1C^O-Z>7mQ<sXBLQoWQ}#FFypT(u+PU6!1e5zWzU#x5a0iREwtL;S{3S;$W=
zK2~0bhkFV{jPO+=4AkFMrz}DK@x?b`?}kn8!J|F!{>YY%v(By^b+9ZEGeE9^`;(cd
z|BW|Mj7FH2!MZi^pi=BD(O}b-RA^h%!e$|&Sb%A6G3>Mi%tmPdJcZK$5KT0z=qu*D
z+&~MQnEKL7rdq2<OFF`Mq7l=Y;rBDxmFy^SisGwVQnR=LaZFj=ckoq!y~-_E)8^8F
zE6M3-orT+$r}T~ZQt<pAz-*V%7t(}8CNI&IezC13US6m1c@sd`4c~cZ-Q~Lc6&p2q
zVVlt}^j~hj6MK>lBV3hKYDj10I^msoDfCc>yE#vtE{1*?2{v-IavoQ%6&THUUk>a9
z^d5MhI0>bu!qWGwHTDJ~EPVO$qf~ZjSeMCQ2@o7)62V_|?H7|JE61bp-ZVdU68RE5
z&lQieB~{bhm^6ro-iTll@+Fld;bG4=ZLT*02);45D-@JE`AWXdS?Q}>-;yQIZ4Yjx
zzycanig{LExpu{mT(6cGIM_7R)3Ul`?5RTye2raRjHeE|d-pcFngSXhN6COL&YwhI
zz&z2s?oZL513r)S*oh8>GsgZ-o(#9x00{m0Tt_}T^!V`D5EOoXeD|~@{79H%t+BS%
zSICPW2~!|ZmeJ8sU#2L+$K2#!+p+8By*KZD`AK+RWNza+Ys*{%Y>3PSI`Wjx&RvbL
zFq*4<A%zaX*P-Kqj$nSxwUMtw#}^Oh!;)Ql{|g~_{PzU<641kWvHK|&#p-tc(?v-g
z&lIeAd}wT_=3C>tSBfiHRBP3Wl1}2DFl?$|E`w9a1~j%dl*@}B1$eo}+0js@D13NJ
zM?QjX2Rn6m-z!f>9vUm0X-T>y8)tE9Bfo|B0ddm3rz!F=F|-L<P=UMrB%s&2tUS4q
zXq>>jcrqJ4&M%hbmcyc2szwupW&o|rne7O||A^+U5h7)sXW(EnmNk}qf037ivAFpO
zk~KOzYVpo2pMaNCZfzw}PrO_jvvT=#y9zeL5KBM7FBg$-0z}3Qxpk3;X4~6{l#`f@
z{Vvd%qO|0`QL*-}xc>|J?$%a(X6qP)z>UYZwuuEy=o|#Yjd+BY&4IrsGVvl)$aMxU
z5)hmD@Ub+a?{y&N&w(Lj46}WXo&Y#OfZH=S^j{*1IPk3h)XZm}h64ShYGZ3wMxf1G
zxv|xe5om=g4Nxr?`=$xHz>U1hExIt!da%zO+WXCkzLQQq?B(q&+VH?=`Aog7XyZlj
zwZRJi9sBui?A85yN@_|r+}*$9w|8|lR~<VLwX^)-PFnz-O1w*EazABL0_;QjxV^I!
zXX5?W;eQ@}{YX{m>>XXsx}cRM2~@UZSFf$NbUXr4o~BX&Ml^NSy7H#Z^sasGK#jst
zpfwje)l~6iF^Lr3dv$E%4^K7AvWkqxqAXd_>eFqz-n}vsIbJv(GCN1luWH-bX33qs
zx;eD6N@os@7hbsn`1nT)pTM2q{&Ny?2r>D@csJ(GEuBGLX7A{<Prc`Rg}Fea(DMJ#
zwylaQy`1y-htRL0xeWN{kE1Ux^ZDaf6QAGxa={w(#V_&`pTG7Ya(C?Wc)k#Lzj~2>
z;rJtxML&GO8gi7hySNmFJhOXv!b=eK@CG*B;8ocGpAt&I)jCr!{zl_$DN7P1az3!W
zwIj}-T<jA33Sp<?btw{xksKEten98ST=kys7Ysjq5!}Atv~8>8O26Ux=122H(H)d#
z1$5${)uyHSqPHscfE$Y7eMRd#@_Eq*?*4wEi_OT)Q)S^jl~8M~gSd4LaC_frjlSaQ
z->{D89V(CBvnW;=0u1#Su*ZOq*65Z3d<w++MiV`!V=hsqhgVOs;B$@p2RwX!jhM+E
zUm1N4UL*KH^f{0>+SVjtoPpItISD07w}tGDtBZy7rpxfdgbuCY^YJzckx|@t2=2B3
z+--WaS9rWHfMBsN000MzNi)atT70th&UMy@Tj%Nx+M=Gk4Bm^Ut=xO5>9Sha#jP+`
z<FB=qS7UcUe+KZ<7Z`6T;PG|X4lUHo=U|iIP0@EA1m98d4kZQxedDbN$cs&8qb2@$
z>Jv0PJ>Ai@#s+PX>)N~R1E<Ha_qJYi)yfpC&(kfZcaIE|cVg$EPxO4{-p<O6Z4Tr*
zHp$^b&Dtm*{uP|>m*DQ!F7-7g=9#7TtxOC*Tc!y@HciCis-4wDzGXq*%Dw{kz)g6z
zrJc%UCZ%qIfAEbR@3PnHXf#7U?m-j5sI}5i*6w6c1&^@U3Y`K^w{!<Hb-s@3XtHGy
zlaZRSS+R34kHc<i=;d;RfQ4LbYYHw9Yr;Oj&cM&3_v1O4H*nAm<+{Fa({nnvHrgtU
ziww1s5~~FTzY{ZAI$doyn-n0*Jqae8nELX6e2oVOz0tNL<I~Z-{1$cwdLQ6i(^8$3
z%6v(<?)^BfV{B!Ygz?-yAwshf{3xPtrxQGi=lfyL@Cl&Tj{Ixo1cxQ6iQ>L_s9|~>
z_rbu}zp$GTDtI>wx91VCtc2@uNhulyAp@qxyL#a>;1jK~aVsu2E2NMWWh%^aRu;5|
zs8R;oBBx5341@M|`BtG{tMtp{43t6c-5qSm;*e3Tzs}`s&{0X)f<Iqp5~xf<y%Q~1
ztc?BTJn#HeS&NQG6Z16OZhf%EWUTh<G%7=8y!R7~$C`+Fgklbi5KRSq8bP9*II(wP
z2{B0+E@AUv>K!!<b*~lsoC7gp(IUA?C8W@3BxClr!ok%D5iWv$A{11KuvfHD&u-|G
zOt*@KxLh0ohemCSg>`~i7#XLd0o;QJ0Ui3~`@}7&m4uWr*RKdBTWcJpT^=5lH8=wZ
zquq{2pn9!%q2cEv<%AH9apySV6bLKDP%csZIRDeMs7?DRDFE~U4SzEfL!D+~9&vnN
za!MB)D8TmD+xt3el~@`4?)u!MVad#OoVBjUT+oZ|$K12f%*I(q`_?dKi;qYi-UMC3
z+VMa5dP58UAY}m=6O8UV5v*HM#}bd~YB<o6PIf-zi*z}Oe!IFz?QROFTW)!7yz|sl
z(AB=NOkJcpM@O{jP#cS$GZ?aGmiKx~HuvVroh2p-a$O~9!&?Imt}mW_;pW=>RcAWe
zZ{OY{MagXv)yigi)#@YlWn<+!N8izbyoqKX6(2gB)&+3Ty+8-~(~|quB~T8a(L}^>
z5;cK|K4FBrnPsW4RSo#1eRsS%RXkB`;t0iLG79gO3P}h_B;mD`7tRgkb5u5k+Dv7N
zA>=&{%h>={K&ihpmG=$o!|zOFb?t5UPED@~<jm$P#mXvic*ojF@0Qty+ulCvEH(3)
zL{lAT;Z<<!`oTH!aJ_|RKoBvJXxX<L>AzVhCEdy-Gtzn3%TxvbC^UZ>F#F-UN<+0N
zvYsmfpM(~EwGcrI!FTrfGr$dvKV->|cr~FQ>c#*{04>}jlpuXD31Z0D*xyh&FC>t_
zYf&mf6EU#`RLR>5T{<8o&%p>xXG40ne7BGXAJ&zq)g`*f8jeuNfsg4*w3-rqlo)NK
zfve_fH1NY(K-c%d+WOEM+&;a5u4r}((sxWGBHf3QVXA<Jy+BoRj>DH3D$$<biMa4~
zp;;ud2qU|=0#qv&VAJ@SmV##<2mB|9`a2R`{=7comO-C5FFLV*oe+yD`xrb_tbL2B
z5}kyOVr!wJ@TiD~omDucSzc(IEse_FzXQ8u6L_9BN%kh1(NKuaREwT-WRs21HcTod
z@=GerjpyCd@DzRMpIj<K7gS~8t$GM>1@3NcEc3n^Ps~414wMdot>A@^7K)Ldg7-4g
z+;LqUPXvkkO0CdhbS#A=c;DENRxdJJv!pwWb&X9HXSr2m?>f*~zz{R2DtR$e!o*6b
zFp~{8U;-ZeJdGrYJa(YDNM{x2v=xo)t5++tOHG9<>+QN4tAs<MXLn>)vIs(}jLL}W
z|H=A6c;S245%_b$$5@q?CW+}PqAY%qL>%nIwN$D><4vLV&D>stWled&#n=1bLO?l#
z!@%z91e8~mFom>Spsq+1)Vr;!e7sz%$#2UUIqP?T6_lJM;VYm+lVAm(sFlGgk5On)
z@JWAJTuj?+>DZGMQkM*9FA+n+(CCc?^=3yyK+{>(x^d~kpoJq~ap%x`(lmg#7mpvu
z+DXdHv`*hMGVba)IS~j<pC8V<TrqXWX!f2B`F#~mu85A3O#!1IXYAI2v1=zL<d_c5
z<J4|E*K^=lh9O#y0j0Ho=RX48qbE8zd{u*S2|&4fLNnpahMS+8${y*imHWv&2G^Y5
zmR~#9o@K1t*jRoAdRx-G`e4njmv5>N7z3sPDh<3QXT_=hlC>QHX5{<Cx?W%S9LYk@
z5(xM!T}dW^8(OGdi@)yKDHriNwlL*w6_=5x!P^eh?0N;f&6H;<<RxC#8DPT1yqps3
zJhCUnu21Q#mK;IiM?nEnhewu`wgN}<fx(=NV4KfV<uUMtbhEy-yT{tNZ@^P^=tq0|
zkGPRiIx{^Zz3DORgO^5*_1H3u8QemAyMx=lbKu8N>F?K<72tJQJqw?pe1N6!IjMLQ
zc2U{zV;IhpN*2U7EX{o4k3SVTz46=ot0ta~oZR&7eN~sUd-u0YKefNc)w{1{)zkYz
z*bfC7n^bC53j}JbRBF=*kigT}58v6^bN`<YJO$;vv#t03KOI{6*w(V4Cl=DquY7b{
z>CiPO%^m+lx>X|(XsiH3n1O!8eMl<8i?k$$6GMRkh=MG}>yyH7&?SGfCtc#I^9>#8
zvT7?PDvLUO>FxD<*yc44&g9k{d;Q?kmo>qr?95yp*D-i2^jnQDWY+mDlB(@jR^VYA
zrL#bt7n+4FMY9)%_r7&k$Du90z8W8wWpVoz-pLkEEXF~)gY+xBSMCix-<J=0L{kis
zTa+UYE{$vCe?<@^FlZ*pz3oM|yo?N*ibGFl*|Vw0wx#io8>1pZzO%d1%4W4ms0azE
zEXC`cu`jSA(7(~EKwjB!`cu)h`>XM^U`d$SmyEARugpa8v<%17eY=D8SsXNurzz-y
z#H8d&OfH$ksNhNr*$Zil_?mQme){}mS&N=aB|x<y5C_$I3p&fsFiRBK1~FfiDOR|R
zvH6+5#x5blK<28V`Zm#$B36nW*S`TsfDB)}(qrMvx!4nIjpR;fceL~ad*gPIiuO4(
zU6B<;u77b2{+P+b9^mnzTe#_ThFSn!XA7}@F$;P(QLBJkvnbvR2S={(Bro!Ztru4w
zK8#$SKa&=()%qn7+bj7xvAyML9^p^LR#84tT~;3^Y8-2+*2)!&;k*pLk0HL0D0A!_
z%84ge-Pa{F2^VY3Hf_cW8{w|x0Nz7i{E{eaTnO}+B^5TpaI6k~;ZyRh=!@VxA)e80
zfHaJy9k*ho)S4UnZn+U;46ebL-My)uw~)u^Fqaj18v2Yo|Mz8DaFsvoKLr0iqJ&Q*
z_uzv592V$V5#!+-8gao{m?xSGL(s}4BHhbTnJn2;vyNijG?wcg23A2{N<R&ea--m3
zF^WJJbMP=iZsq!BJdBWkfr7|@>ZPq*uFDu$Vrqvm=ubqLVKoV;<npm64>s^MSpXfe
zlOTpKg9lxiKe^oU-FUvMZ=sl?0qbX^vC}f}JxIc8c(arxJF*OV^ZJ%OMGdie=r6~H
zbvls+K)J}X08KKVPTdu_JO=P=qAURL@^OHdAuEweBmZ801K{t`5EdiyXaeoQ@3tmy
z3ASMw_&3<F?E0&O8g@h#_0^Vv&3G2rxl%laY7oauY`s1m5$K4g7~N2+YbB<cCfmXA
zn+3gvYJDJF7Y^v9lDG27Y-fAPn}$|r_c529En;h&rA~Xut1Rqa)nDisxntEYww`Me
z(v$lKS$9L}_Cll4WsoU#Ibolz*@&^d?fF`ypC`!o6fG&zt(fb{$?4xyM>O4u8PZ@)
z)z}HJru)+h(?V%CcHUX0L7UDOkFO@%^>OQ4pn;!{`+wv#36o*a)%39UA~*I2BSTcz
z#?ss-w~!i|#_QhC)ko{zRoEe#FI(nuT6lHXpO(0eUQWl|l{`U6g1am2MRt#|d?)~~
zAhJvI@e25eGgQWtYq;<pLe5kzxKJZFGaj&RR^hlP*7?RqWaVm-x}#9UE_X@_PD-Ah
z1u`XgIXY5wnIz<>V=5H&sn{zO`i^?+4=}~u=+7|dBo>QRN@h}^!Q{S$R*SZxrom<_
z%aZz5+|og1QyC&6n@=vU%q~3OPih>6P-6!Vz0lCL;)oks70b0X%iGuO|D-d*7iao3
zMw{5%Spvb|O|&_z-E0J=h4TL+?LENbsLq99otd3&v%UA;d*4;>y;n=JEZeed*_Lg&
zcN^Sf;|92Z!PpeXri5k!NoWZnA&^2yE(u%`AV3J@<|a3Um?U6p^q(`cl2)>ld!PSH
z9<!2m=A8GGx3{U7KVWb2qmaM#{l>zwWNs;@?5(iXRxz@28+C&CF7bF?Q;xst1{M2e
zJV!SSeMcSN>B#q(60d0g$!gkHRKe#b=I!VR6uTrWiJElS8+(Pk8st|R9%$3&Kee3t
zEgjxoeQ>EviSce1kmW-+H54bLtdQMbpK)_Zu)BEL;q}9o&hfznU)ZIRlEbUovBs?%
zl8X*?Q2<|j?Ik8}iBKr(hUmcc0fjcxU%sG-Sz|lI={>}EQC)KDOb!1+pqiaPe<MRK
zczx&H?MnW!M-OsD(Rmf$FBvQ~XHh!7aJ*~aHpX^qi&lmhR32Mc8d`F03}GRw|LPM6
zS7)Q}zp~cCdqT&SLs%cq`nowx;r;1A2dMU2)2xRXE&NOAL{ZJk3LWp%qo=rqMN+I|
z;+h1%!YJVSl949X(^s48O0Z83(sa!T5#=4a2CJC%9MIVe^6V$>-5j3yFtWK4Cw-eE
z6CZ{*SKtD$m)eb4Kp*{yN`a%Aw)pGBC8nn0Obo{L7ToEWjMpzd#l&P3s{{*47xEmE
z3Kq-X8mw865OD`Z`E9|4eN#ai$xU>S1}^NGCl)DdWXSDNF_D)Ouz_GW!7@S^3UmEJ
z|0^K59wU~KcDE!YT%q#+1lwigOoCre**j>b=aZZNEv(lHrv0DT<WJz<chdd}bgEhF
z5YD6!Svick3hQekNS07TUcw?bskB6h+Od>tR_+0RdKl~gW6FGsHD5`cpbjXd@4qk7
zAV0|Dci~+@u}CaBDn<@T`LvT$o*mc9!P*Fe;XQB}2Q3ondpOu2rJ%_E_%6Opy&LPt
zo{+%dzbuVWTftwcH<1eyu-=y{@hgWI8LoKpGvWe^ohQiC<qhUk$5Mf5on4HYZO+PS
z$gw@963kPqsW8o~+CppoV0+O}eN3?T;U%6%OttmWNU)_mv7j-*GaJ8A)Lj};$<!Q8
z@8#vIwyTOBUsJTK(U-pEzrF#suL{){hTT?)TpWlGkE|(PexJwEyL3hL!0lzX|MBbV
zgPoh}x%NbvBfk<{WI2mEVs+KdhP4fU|J>@e%0%h5wuRkYgU*V+L}pcY8t2Q&vuBwa
zv8i}NRK0$E$-Inq%eLB^mz1#39`I<}<rOFyshJqGtd|Sb9Oj^2hpAbu4w<gL)-<w8
zgI^_@qUx6Rr^Szu4@(9;$46GSw2M18H#s!X=ET?Ii;whD7tDKk`#N`<61BdPx~*+{
zurH|>mM$zU-(@LmkAymFQnJ9=>digT$u{ibbUfU4d=l9JoY%Foonz%-dZ%H(5%LNu
z9^bU!_NB?zW8Ymje0QvzBNmBF;o5ZV&VhupVt&d|n2c(qAMxuN+sZdzTDI%0dwQ#j
zTDW|jNmsP)fu;2u+x>inStZEk44}9vxF>=<EwTX6UN>u2_4fn1jvM|=+pVu`qR#IG
zLyPVj&41Wlxw!a+ffri$4#cstn|^tw8^2P%;lAOTb#1;0ZSlGX=yA=6PQh^{$V%j#
z7O-)+)p$;8MtX05-nwTXPLJyTli*Jt;6c;0({pAv3pQuQ;h@XV@YG9-sAustaJEHg
zUhw)N@M=~Eo1|@%dAW!K8l9j?jJ*F}lTLhVCsr@PS23tTV+Hcb{0--^Sg4O;PHhp6
zX?7cvS^7bIs&W%;;%ax!8(0u%*gZdCEAEOjk-A6ck6em`r=xsZ6IvAIyF#>L_s;1U
zUj>P;b!MD0ckNI?vbQ#YqIHW61<PB4mB|VTPh-?*11Q4RquH>$hmP-MLaX62Kc@!3
z5L_$j$C?+H$4QVAt%@#8!Oll_UQxTFdX-x*QMn>Iq+p}?3+ks?ZCP!Ip-(SOhhLri
z0$hXR$!K{C1+}EI{z7>iJW8hfwl-E&D>+uuW^5V|w_gHFx(_al%a@qR6<e`WGqHD%
z!!b}lJ@$1qYIDl8V{lOllK@Ch81=l5_(pR&b8+XTq*r4Tfwat_yA`Xqi@63h<&a9j
z&2ljXHE^n3C<Ut&Qq&6_#jC-2q>Qf3Nz;KhcpBBo!?8!9-W|DHge%4iFU8)2wCy$T
zkt1Ndd83L~4Sq+hSvRKVj#AIiH3PoDzo6qw+}S&yTdrhI+y?#yyonnZ-91{+e(Mi5
zEWCSl;Uo5{#l=l~79<^&i%VK=hI(?*?zirlSGD!xqMH!1ZM(RrW_`QAWc`Juwd-5`
z#p@q{`}`%Gvy8#@^uMq9p0!yIh)J0zQs}DMIhe7P&CgG_WSk<QkO);iG&FE(B-3>0
zJL@-`P1Z_35GagFe&M<cD{9xb!K<Prxh;j26<aPWzWMF*y{!#30)&sHc{&y!e-Ex1
zVy1k~opDYTlR!dZ>us-X8@_i<LF;Wl+BSTCO#xni@y?fj^x&N@zY4y+`zN<HqsA?}
ze@cJ8vG>TckM2A2EIga?yfZ8z{w|6$b0%hLB-4GZl!}?oR@r(hZWm69^<Jaso_mK+
z4@C?HF2S1@jI`eRqwQ$!!JZoK6{%R8E^mq6bbDgaE#0v`J1OJ}Id!R%-Fsd?)|gp&
zX3^1~wbgMUCTz)*v0Cvjp-d!UI%d)<DFssn&FD5j)66V|YGjlG_0)#L@2i_0yz|^p
zOVNX;>o$h5qk1vU{aW4kHlx+26O{rf55vfZYQDW1fff#8FZQ3@cciSbdwlN^op$1R
zMS-FGL}e}9kA*9rs4nD*WopU1(}g8yqlPY3F#NZ4@^j)JEFA8?4Q1lyMm3>+9>h$w
z$|>$TrvTfOH7Gq}VaNa3va>g=2sNadH+P0Pggn$V@l@fmwzS~(Z;iO*?qcd{Vrbc#
z(&hKLt6$%XBI~<ve`)3DZT8Y<x0Ww&aH}%|N58Xs+v?iIwK0uMyshcT54MHoRd{N4
zKe@7URkN2D>b<F57A+{ZYW!9?_KQS)ShZop>TQKf_tjmTc(ixv{QhP3(s@a5Q)OYq
zC4}799dT!CDf!`jkJEmy|EHcXQ}qP*hC53f=6JO;*k0@~L@U8}L;`1NSJ+t*Go_cG
z8f@F%;rG`qOxTM<dagtx-6AJRkxCydvbif0W*my(Y`Jl(Cf<^C6-3-}WvHMr>Me51
z@tx{YZSg>DTBVGYbtGGM_eGGBTDP(#U#$og)`tucpGRp>7)x~aRKO{fd6N}BHKgDs
z<gW!^;eUYq1I5GTBt|nLtA`Y)7gkoUYKxOkiF?MM7#X=|iCYZ5nt$tXGC6$f{4L)*
z)X;F~dt2Z*^^>3DZ-cMsak3@O<5SU?_}k*1{g01~oE!FtpCZMXg;iCfa7ggg)|U>}
z*B^Xo>-^i6Boa$*o1f+7PFg-ia^zGzjeOd`gZz&VjBM`dJrMpu*Y-A7eCeIT2ZEP&
zg1>GVt?#C8#&A#l(&F}8mZYhZa2T53ybH(l(_^9tu57Ei_>^fCMKR<g!(sJ-jVMe9
zbnME8=4kw<fkkAI_70$s9ZUiiFIimO3qHOk0C$LG)MGZVN3P==_xILr>5ia#(+cPF
zPQ@WPr&<=~^y7sZJ<d3V3xOO{``6}orS-ji;J{Am6DAgEet}W;(y4&>0#~DJiR}eL
zbSP2-zW$oPQ9eJD4MhTbY}8{iF}Q=_VJSGTE2riRs${05em8n?l=__%`z^lW+MW1{
zBU!)H<Q4o8_^dW7N29Vrxn1SJcM?5iK2GDMMzU_*9esTVdu(LGrACf4(lqX_SyF@z
zO`PvLGgeYEcBT*gTr^aR7*U=xZ;Tbh??Bpx+=-YP!V|WgNIPRR_7I2gizK(~wJjUo
z_`$>rDlAEP+cvjQ<@jmPTfya&+&^;XdHfsLL;miDLK$G_jxTSFI1I-`ysqSWZa24t
z$BpL&6*7xgt@4;<GP6ge_F80VWPMkAO)@A)z)!R6*Ea?Ydwotzd1}L)KVZ&(0X+OS
zc?+wS^*CK~jsc59*KtCg5@(uFr4V&+rmZR@8l#_BwIsXr#Z6-b=j@5S>j>^oe?0LM
zC6?N}gU3I0hH@yeWMO}ajUXR5OU0F}$NP)f?1FQHD|d+sA6#_&5DuOMSf-)-b{BX8
z@C{Md;1L&i1j11RH}VZeMnc7wavJp^u8qGz@$Z<}qtXy3I0BYHCjv39S%D-j{EA9C
zvCdFow^tajTg4hW{~<4rH~`1;GGk>U4CW462y(*&;=}=J$sOBp7DkW+_2wNHk0|w6
z55~f{Qa%u}t%|5pOROdcOd|Rl+eS}~{Ze2Miw%N_0DeU&o7kz0=yXv9wqLA)AnjCy
zbV)b1U!rDwCVztKOVfVpsUCsZs?vCbrI>gIT#-%`ad8>eNLi)WW&E3Z-2^dSp;2R3
z>DpeC|D60g_5~BqG26tB<e1oXT>zcdH1-7t7fGm3YL-=63P+B%ul!nZsnjLoS%U?(
zOn1If6>dyy;$k8Zz^RoI{EJeBUPN6bLUjYt_FINCjdgWUhSsSij*|9(Ip3$Pl<Gx{
zOs|^!4Eq$)<l?OTFvp!btzMOa96xog<i!Cm#}_pO75?ce^cK2qeXA$ayCx}&^pv~0
z=TxqD$J&OWpe)e1iX-}%OO1-rSEQ<)75&Mk#l=qP3Q}Q?c~jNd;`R2@o_OuNv=xP@
zPJRUSkJC6sXCP&5bu^Fw%C$^R>Fiowa3k^4Olr=&=en2wvfpMC0*q&|wsg-AxywS@
z<kDOFn>Mz3{7uV?9L+5amW^d1wT$0dUERu;sYPXcL&P0iGP*9mW&fg-uYO5E&5`}v
zlFpEhKkdt!WPDi+4a7d923B2yniHg*#}P*WlRwVdKx8+Hk%{A-$JGoTpa7kpaV?5n
z;O}=RrP%HIa=X1;KQTs|JaS^mIWtx)y!OG>R4JSf7f#QIA}3fS@JG6yn+O*JJKPnz
zEing?TI894QUXE}R!M-YUU$!s>5^&Dv3XW9IHuF#F0L@xQQC5;rEIX&!F8~#I;c^c
z?z??OF>&PzQM}^zJ}_$2P;Znhs&W(9wuyr*ch%w&5Y?b~pkGe@9e)_ktzuwg)5Ra@
zqrqhmIf4(aqQ10N*3`Fj1bPW!K$}b#6c$^sGJO3@)F-d*tkGIlC`z~d0GMB6WFj|y
z68jE&6<jmo^t2yU3}%~;02L*;xI(%LoEVWRa1-@eC83or2a6A}F8xjF*T(IiQ-78U
zPoE~`*gI%U8-5c1AsmySyUEIFgA{GgKv-;_G9H1eIH@FW1Nqn|!rx$kC8CaEf9l}s
zWlO=M;GZJaB`~P<%c(Cx|4&AKKKhN*A_?}+Dw==nhcG_|$LB(=%Q_=faO9k6a|s=h
zmNk~h!EJTLiOe=#scvCaT_PpiHd@uV-BmMEMosqN*BbI&!M8BZn}roY?~3_Nr9(Q?
z>UdA71FZ$m>&H)Fud-Lu_L*Q#6f$F<;moqnuxFcR9&#is;zVjYe<g1vzrwJvvLT)l
z6wOQPsv5UBYnQ><RsG!lLi}%Pchcxiv{!dyhCkF+grb8Qe~F8RBQ~$p@pLu#fH^C;
zZd?G@EudwoT)T*C$}A!%Tz+deTo%A;##(%b7Ig0{+l2~Q5|REhYl^XV!d)Bdht^L_
z`dZd9as%4SLvT!Fr<gh;WT)uS{$BWdEpP~_o<8t(5jzhZ0(}4=ZxFsSlzj)4Uxceg
zMHn$I)guH>`bFwDBJc=)a`fjTKUqc3a{xbrO|m!Adl<*BGb`O7CLs;J{GB6zcUQ&g
z7JtFYlYN~V93j#u5gToOV`_edLm#Q~d5etFHh~Bu@~C&b&S=l(nt`)xOOw755tro4
z#5{lNSXI0u-y{|t6p>Tw#kE=3aR$jzbSJLuKj5Z*?jG+OcY%nTy=uY@N~o8ycc>o%
z6xfls4?hXensJnsCXWN&c>e*o4ey}uLiiEz6ZoBC%3c8(N{+?icCNd;HxrApxCEi&
zYGsKcvfu#gbn%jEr%>ThXgM_<;MY^IiQqVTv`4XQ{W>-i=AL7_07XWt{O2O0V*O;E
zT4RuZd$U@>IR)>Y$9<sh0FkerlnAMx>jeTU^>vW|2t_3I5(JbvYZHx^sD37j3owbO
zjeQ3iS=bo%&cq#4FuVw#u`>IE8vmkhuWo!Mt%m8Lfyf*FV&CQhjD`PQZjo8YQvhHE
zoBEbYWt`gtJf58YIbR{Ack*q4K}4-EnZTVQgMjj4@31A*sM#sAOTZ}!d)B%9>pUK9
zf0aberG5`EEWN3(Mk?U~Bm6mqX5b6KM`ELpD#PC4iYTqrCIT-o_j@B8mpeT!S`Sl;
z7TrO*8Y|B2+nB-#7PUs8l2r9=N?~jkI3<+IXvkj@n#7b*$cGo9N@SCQPes{UGw?p+
z1@J!0>By|>>@}_&k2YRVxZ<{Mh>u?Q*@f`(mIdAEzB2p5ZW=YC{b$#eMdxj*?mxR8
zer|3UTJLLJTQjtdK~gMlCB&Tv;2NYTQvl@Zt*U>cwx*`ERui71v@SDeyc&fqq&1~H
z>MF31$JP1^EZTrg;b~f3UC>u-HpMF(8lPFN)GQM5xI6)nLpfU;uqrS>V1!tWe<86Z
zojQ-zAQV}>ach1I+amEx{S|SKMC=F`y7C9g9fo+VKi-t@lZtG<xYe6BtHdIkM&mZa
zYiV=@j3Of`QDtcw_6SYO|FwR2TTM%*sNXVP(qCY3HjFj&Sq}8GCfXV!h16GI%#>^h
z6b{#UC-V?CPK|k%9@Cu59j0hBLZ|RlhfT1zzPYfd(X_d=KVRS9t`_gvY89?v%VaV8
zfqp{LS`kY84Gicbm7cEMI+20;oBqFqB=s?kPdnf|_t3mEo2d$E;H|GU9cX%0h$)C`
z6L(@O)}lLjCw>^`WbYtN5^_~D6?mYwk4)`PaTA?u%FCCOYPs+ieg!LUNf&sAYAhdX
z3!*#)^mFGheWy?0Ct1C4JomJ`j*^P98fX?b8EJhQQ(3*#TU*;O9OLqSx^?SXJCVUK
zz!7r4!PZLMQaMq_#@Pbm0_5xTwf~%_5@_U<2z$p&HA<Wcg;N5a5y+(?s?q3G*v04<
zX0LC8cQZ=d59w(vFK<eQWpmt2J|!xPjj?A6Q?aKKY!Oy-<5fPHNn=asS)PV?rpj2m
zxfcUmn^W&HYQ+KxAzir1SLzY7F;`kDWwBnw#A>TTr#0xSZH}S>Yk9(kNrj1+NG1~U
zyzNGK4+Nlq&(!<a0O4wfa0zJq%m%qK6d6aypDnDF&C`R3@tVY|EokyMY;o;_rHyJ9
z%hnpLYIT(NCW9#jpQj;|I>nj|#Tl~^j7?lsMeTvH;hHTy5sT5NhFoDSqz9G61Mto%
zkada4xJyk-_3VG=$ckI%NdAnajqzi>i?d{AO}JFBo!%~8po%LJH0qrudW$5XMVVxY
z$kLT`7W*}*^E!|x!xpbz&X=(bq1DkyyV}0Gu(Z}xv$>bGOdE12%S#(Esm`u6=u2xh
ztq{w_LY~L#^*QWbW3nl1u*=v)ZIw_W6!;>JXd)FUE3#Fl>^R)hHE>Tu#C>p$f$0^d
zowJG&%~_87*EmOE(?%*p)JN(>I;9OZrOfV{#f6>21W&{Tj{LaZXV#KpHfz2nV38LV
zeWtN0xaPun>9RHLp%sIAtBerW)QF@s`$j$MA+P->gdvp^qsnGtEbX=%bVf?$6h#7W
z^8`GuSY_4tf<8~0pBi!7bxyqsPH$Al;t{2_Bw{ECxeSI>QzX-<AtEH36p&7%*3{mr
zw~M7>K@fo_cP6c=8mTm`H>Q1BJ907P_2I|BU*LU9BEQYF6?du<LXO)eHC4MLr`gYr
z@Nyq&otW}j^oDd>BHgI5a)n&3L}j5tP4ZHSxZAFG>Xi^yqB&}pJCfFDl}wh>TQUKy
z!x&~DHR#Ok9+%z@QG#UfvkAKd0>oW;$jY0ihwP5SY(^HY4Q1O(?-y$<Qlm?(F-wdd
zDDDyyS09v_)grGEUObU6%SW;Iv1+(JcTOzF>`;!ZkDOuJYGAb1N8I@~0pTJ{(b|yC
zt&+1PT&_q|&G)d)E@M&~+79uIAm*Fh#zeiJ`ca@hVd9fXF^|0fR7Vm94Rr`3P>q{z
zc<(TH=C0|z&E37ZZi?+3lFt(>P3nrqcu;TG$l;cmLMvjPs+iGPJzSP*Hn8%z9Dz_U
zx~#Mo?Nl&kH|KXHD%N#|opw0iIO`5<1zf8%FPpzOZ9xUU=Lhl&D)_rO;ktoTsw1W3
zu<q#Y>FF+BQsZ>iEGee<Y8QSCTg1A9et+6_O4A-}5jR*1U+he&IJ?PUL4G;Ox}#*M
z%IT~cD(UL!>7w5s!7pPwi49Cov8?HfRx7Mb_Yi9u+sVUKZk67gZVXUAmw-qxA(v8*
ziir)4S~ky6?u$0WbvqLYU0k(;Ilt|YKDB4#$Y%(kdnV_e5mu*KR^sht4O$#GmidEm
zp0PjJUPpSid&ve{g6-Mv;aD8%pdw71frQXya>WDjz_LM5Pkn1R9z`FCh*k}D(eswV
zz3>wEBHI$U-kvanom2P{$GmKSlNwdH&lOo3QK`595Hd@f&uG&}tG%|gOHmTH)|>D@
z1o=_{$7Qv;I07j@sI>+b$2>K0qso~umF`Yivi-IPv5&D<_68_Z$KmanstK6&o6htD
zyB=lT96Kd)7_Bk8Olow<jRKL@Ymm4s;e>FTc-xwAg;$=R$>clA<|S&~y6r5zPOS+P
z+D&d1Z!xJ4*?gX^rL5hz>w^WR;)M!XPkywo${YF>eZJTqvE{@)v~)6MK48+l&>e%a
z8vF@cE=yN6It|-&KxhbBr39{Xgv&irpmJIDBwHyY&g5_1vOfOdZ>kQhstPJ}vH5#i
z?Jcb>4z&cWdkpS-9eZ82Zv^8Zo^o~M(9M|&|H%Y>7Ia>L8q{SP#9Et76LzXdl^w7N
ziHK|Q_~jP0GhLc?II9;IN1KxRXRV>di)6uYNQVEhzr_@Gn?<B8Ru$ABanUU$xg=L5
zmRp^{l8$uYaJ|=@X$pR)PLuJMb>eI;3&Ob``y;M^xJ}YoGN=^TRIT)Bq-HiKTP&ST
z`(Yq0|6R{wM6uKkVja1pB~%~RN4hswD%LA9{iSwura7eJi1~qJO&R_Pwr<!QgW_3m
ze!H!(EmXU)JqYf<AJ~g~;)#LAe0fx4W$6}IRJ3CZu2``Tuma*dUC9xd^s`|P2xr7#
zDnKn;(gw2g5|FJk3?AjE^)fcD)T`ZA9WTJ*5sO(eQSYlUzRn~i0M1v)6BT0g_XPy}
z`z!crttP6Iay4G-1+kv|CRAfqK5tS5`4R!gm%1R*lTYzQ)HyoNhuREY13@UyK+Q}&
z)ktV|Re2^i*gh(W=n5LcZeKNb8{1PpFXgLGnVn_530ILyx4pxp8(mjgP*aiYDY04#
zx)Nn;yCQn^o0F51zo#}~2Z28i$D1cNTs=bLPuJw<Yz5uFu7$~O;4t;<iJagB1tVI~
zVYySB*L{5zojB{G(v@^iyJ6JRjymKUTHI@`8?CjaZks@@>>^EtL8nE+mv95|p=E2z
zYPJrRi8_A0iK$<K3gR$jBZ|lIeTn%yvhD8N7G+UEy-)0~>~K|#^=EtBDU5cbg2zoK
z8)IsB>*m(8_n|yYZ2!d0EgMnq8YYe$L%J{_rfc;lvecf|rqoVG{S4u5IvNe#$8=6*
z3o+73@tvZA7FSzSttmCMaB&hmDA~Wkec4kyI<h>!;Hi@Q6nD4ez}i4gi3??6l81_G
zAm_O_5b_Dn?YUb@Jp($0p?F9{;TR!oue<rI6pT(4yLd*>QIGB<Ir$kr3E^CjH@lY)
z#&q$a`>BZV8wng)b&)Z!(8f1NVWvf2yfi0TI8@gk(AbRzNv4R6i4}|3#zbpAhG&+Y
z=wEy)?B}T@5=)dxG51w<`;2arUS{x{WjOP2yd}dzJ$?ob$7g!{_%a@goF^uU(y&k&
z>8p?PNVO2<k5{LvrnAih`5vQ`FB5U)7Qb4cjP%yU`EvbKr=Pq$eDY4}6#g~1elet)
z1CWxda=Q}BXOwODN5-wsqVwpdZz*nb(;lQbE%A_7f!hDluA*&Y6|0;5{O_bXn688w
z<2<U8$Jf|AHl`&ZsM!Aa>Up;=O{WI7-*S5ukCdz3gGB{Pn*zyYcP>sXc2j@i5_YUx
zMMjzfb&a;dX1_j2Eu*^;&JQ#!jQ1_1w(0UMvG%IMqHHU|5?9Th#RZOv1(~v;x}b_g
zjR-5fI)k$jH6mP9q16?-_zX?j0CmmFkbg6FtF)a1r7TW7ja@Ds*Z)mFUUoopMT7Y9
zZ+?RjFTc$AN#CMQ;9d9^Q1Yuq5fIZ10PT|;W&6>;vTo$?hS=*yX+hWql`CdwxMfAD
zG2I%gT-z4>kb`ka3BT#^^5RVAP-muM=Tqwj#^?FVH(eYyXZ*T?<+t?|9;kcOXJm1$
z-kO4#N>|yvtjJjw(tGQNS>hs@23`i+yuMDeA(3A_e{)OE+08YfmXS=|%`3YMO0Pd`
za1SnB9_0yv%~FAI)G&F4m89drkj34~neszB?Hq>K%*xWnu2M}rt}NUfkN1@OxFCLj
zi(H=led9e2lDA*HKXEAzo{3$G?Fau^gWR0R{aI5p<@~JK4bD?T=wCKR{4-WJ-75s?
zw=+57b0%gOR}x_%lR+5=<)WpF{C#buQYwc1^Pqm|p3_Zz2fD1J@Fww1@kis}bpS97
z2M*b0fMbBg+7HGy?Xh<pTr&RbrbKed@xB!_BnpqxP+ebVvFMFeRi&yxhl}=aeVf{V
zFC#9}dD$pO+z)P06v93wo0oz)IXxWk3eMq2JGQh#Y1v*#*9yVd{yJw>Z$!Wq10Jpy
zkpbIjJ+Cv{F&%~83rUCltR8$zmqt<agY63>LS>Ci7VlnHvI!Mq_+=w@ekR=hmk7>x
zAe_jDU2?r2?s|Z+IRzfGt!Z35Oe>{6Y+6%eO)fvXEV(Ko=ey^^YzWDXGIzQ)zjQ&7
zX>jxq8<UVAMunyLm3oy+OkE{B6}^e(1B=sI#dt2{|52fZRLEA?8mMf|NK|~(RhF?I
zbkOz#CoKic@LTt63Nlqf8RW_Q_Ed4$rwyrqz9i_afVyISb1+`1mGIS#WsNF=<u#g@
zjaF1DbZrKUy|^=iLa_q&s0t(0jLjl|nQ2+5ByYO+A*z#{Be2axxaOo3%qsm0x_v>h
zm?suXd5>}UB&`aSHz_4{hew@`sY8`Pj*vs}2tuI<afO_Cp@UJ1@K5YUk&LT!nm`o?
zsYh#87h2p2ld#BdE%0lB#Gw%LFpfE`(JikpTiY3S*=afR2-eA73h8noW1E~w&y&wB
zU#SkEF6=HS`Mc-{e-lvC5*?_~hFwN3KN_+?F)i_-C*-PMSs7?Z8l7c*$=)z-vyaHw
zJfTN#mk0&&P^W#qg5Z((AC-~DlryOf7TXKTFhO8jd(SOH2}r1-sYP}EvP7ey+(W84
zYLX-jT0hsKE%1;^PBu3I>gylD^UcrE*AeHxzS`&w6n2;Uh@~svTjp2sRd$`#<1A`)
zD?>rQ#LJP8GPOk)h<bu)G8u_E9U8k<&f$`5VzJS#w1>13ht<dzr##-WfSN0}YJwzG
zK|@ZRrQK;(o1hZUCTX8B_C8n!^>*Yzv*(odqBCgXX-NCQ{30_;<16)BbOKB$wHpa@
z5m}_!rYU0W{K{4s)bT4w!s7X=_mx-RcsFDJ4e#@rtQ|Z(TRKCflRCP#>&;a`cfMUf
zc(-}j7FtDzET!{(qtzI%3n0Y~YUNt6m9a^m0?XJp!*fU8ifL0C+C4dPBiU)MP#h{R
zZYZWpjUKVqB7pE2w;2k_LiKjyL!VJ*(TIE|WMrWJ*87J)^gajS+=d?qop9Y^crHv{
z0;4sipV$^;DGUJulNoH%k_4Byi#lnsyMziMr>A1d)_)3k;2LrGE@Y4YwW)LyehOpJ
z->rk+ErjEe^nPZcgPYisHf%Ozcp3d>eVVoD!w+lTf1j2&zQW!Ecf$3NP;<?vyUI;v
z%BvXP0h1yh2DxdcY5BBa1?|Tgg-Jl_BwC&7-t9?3E#b?!Ua6eRi56OedJ@N#)__iC
z72~&?+{grDaEUY~+^V&Tq$askjjg6ygY`zKL#`tUk=&)UdK3z`NzUhLvF|Y3=BF(*
z^!m`gb+MbEoKElC^tQdSy^@!l+O;H?-8At*<;<pmyjJXW(8k`A?O#5pf*kUVfi^Kq
z?a6n!d=j>V%aIARN`e@fzr7v*Y=@;dY>>yrT(;Bh!Tvlk#`s&n{qPK?eN5nf0rlI`
zjdA>oA&j6FFt()M;*AjZQdwJ4*4zo@?K#;&C^;x=QkrdBGM4#*3C1oVumg-R#%jY_
zw@N`scpR~)n$L0w8m&pTXS<heu_IFjV`^Gpa>f0zz{nu=TV<d=Y2@)!$lBxp*5O!;
z`ZlObhBYc`FS0t(HWR3uBAbbI250`A#iV<?L0|0p_x6&G5A=>3nM+h)Hxu{rbL_XY
zoz0s!x5nS~*>t5~wxtcu#8}pR7@OV^7updnS0t|DvkG%<ZE&fyf$bqt&Ndjq?^Rh_
z-*2%~5C&h~+*(S^0hnhXo9?2Bozi%9;Zi3_V2)h#9zF$}1K@%xv4q1FVc6$<o-tV;
z5CPA$na`7j>_3eQ*gWx+%zFx(H%+sU3sk|Lc0wi)(VACQB$9HU!7%GcS+Q8i{WgYK
z;4WX|k{~S7lGJAyi!GpD7aN5@z{H**zTORaEXq|v{W}?-fIZFd_PBda+W4pOcu_U^
z`9GrZ!WzL}`y$OLBa~u`=+C;Ptd-^U?X?YM^-a~ESPDDiHS5~~mclOd3AO0F_1J&o
za`x&xHq<WNS?h+&ZD$M^az+rEF>WAg`ANs(+Vb@sLv`g3W#*UL!(HoXiw5&!m3AHe
zDK@&WvKhlxEUIq8z;nP_+?}Xe)8YpYJOHdk-N~x47XMGt-Zf+Ig1^9Z*3Pz*->`-l
zdzSE($}K<!entp*JekU*bb8FeRM2cpw<TnDDNcyBA|012#qo$2Y6x5w*Dh3$GL=Q=
zbJGv%6OGYWi<*dYIea1Cu2-n#GE>musg4^7!r*XoNU29@3>RCf!!n^n=+`SXGMOpj
zMs{#yQir(k3&;b1$=*nN8=$trc28Y>bu3K>*x>0D>LoanZ~7Ub3zYiha)(7hNI8TA
zvQvddh`N1hd=(L;RBn;NFSs13$m%5Ui{6@~83zEDB*i=e;4E_>p#$d<y%k;-4lo`!
zCE~LaKKd^1gmm)z>@;l?qIYhJ!sgOTHcc8(MkkKGM~zQ4ESX%c;HG3O6(picr%D0=
z<4Q$J4ME6csWjIS<_j=(i=VA7RqQ5rv+NqZ^q8e6Y~YeHh?Q2Ci)g9@R-qs!Jg&UZ
zJLM1F2l0Z-)W~H{vJ|nktX(&&m>>p6Gr3ouBp81FoqR*1hBb|oM2sKPZr5GbZrA3s
zHoFmb@A;j|Yk{a(=XZDg4E~Q^JANEH2ze*6kWA@`Om|&+6J|7TH*z^=>sir)6ljmM
zWXvje%HlAWb1{wdDX9{&u%eJL?pFIulFL###wmj=E|T%p58=m6sfK{3t}rNM7fX}}
zS%zStEx%0VFLB4JI0u!IViv9%EXp6Oq;;UYWB4(wCrcl0;8*SPr`fKJF1D+vJrb!4
z%h4|!4}PU61@(fTMOq6imV(v@{P~R(W4GT2$E$)k6VJ<=?NdN*B&N_6XLg~hY*L^b
zjHsPDPr@vScCO5?>(Fs999tk2Aq|ftd3L=n;nQj40x7{00pbLgtq){OJ%@)91HH-7
zGDDF?A(GfhcUdN;NrdfHODlppoGYebS_5fd58QhhO#^d7GLhJd^-QeUwNxa*;;8(S
zl-y3p1;kwwS203JQh(Bf)#|VYC`chgPg}5`Vn#TYD{pR{CVQGmrH_kQGu1DRT8|Q<
zHiyNczG7n}7qCANfKl`l_0`7&04#zKX@pRoffW4%l4lGTSu6>zh6FW>5<)GPdLhVR
zJH2)XTr^{AYlX`B5bc8q=H*Q{)yDkON{k)FcuvDIt#N@)nadl{W}@m)RnR1dic6Rv
z*`Kg6IpBOqf>j&@(zTxkVq%HhD#t&Mmb=77K5L<0TPxw=9JODOkZVBgLIx_ENhlA{
zby1|)Z^4HU9w)sY(|(qm@=RITpBB2U;5V3*Jk#Ffs99Q8)U36WN+|1_wPp38)I0*0
zo_|vSmJq`d9r-ZXTaj2$>vQNMQm99D)CJORh2Z&xi2odixVr_?G%h?*R4<FIK;4|-
z1leRpHfOdB30PoZNsEXLBEhmI(ZvNT{7s{!gDd^bqpWvDCh;>nHg%I~!9f4kRiN_J
z(KU~3EWYFD>PI%B(sFrE!@D!i-ZaZ+mm^7~XPX4X0F2NIfKA9|Bnd-O8{S^RLjJq3
z4#^T?9#<r)6kx=#!8#*H=rz<q@DD50*Gzm`k{Ha^N?L{A0$$JM-$^u8PBs^Ky|hj)
z0LF5!T_T5)ieBK1DBQ@5C6Z=>3CRKp5%hv`G}dlNe<x?(U2M*1aonC$-f>dnGq@5a
zlEvogiamCTf+gV^NI1S{dokb;QYF-NIbw8kxdzCE;-&tm7|s{)fJ#bS?6T5Q2$uIG
zeiGY3)7sovlJu0H2<iSD=KKl)=nDnx4xjAj5}nJVj&~HCFWscp3We+?eA7z&v!GAs
zIQ<WUKvv;%l!f&e@gkc%t<D2Lg8vHJ$8Mzi(IPRJb}?YJcCG9WY>l+x6?S99HZeh}
zu+20cq37{G)6dIu->}~3UGT15EBym!_At}KfxOlDOQ4&L)4obNiX9Rcl$sR65Gu+^
zky$}HbzEGWDr-`ke8k%vt12<JV!*;P@NMbicb}_e&iYTRQSe>jeR>>tz2G@;vU(AC
z#-AYwzn||c3#tf~D^uel4rPLYOqV`V<@Hs?kOG<aYxw@7%=<{!N-;5&h{gWSpHC10
z=5-d~%+xwr-^~PqnI3(t%IB?$=;`@?0Pp%T_Ii}>C!ggylIOOU`9Wwb9B#?C=#x!R
z({|^`qD;czvuH^Pn{A3X^vRZZq^}`g@>dWRkM$N6i=-k!cI;ztY%?86GE?)5JtJ1p
z6~DUc>ivzw8BHwemwI?&QfYJ<>guJ=0<UvBYuvE8u41Ix!Bto^K>-|jpxc=68QIh?
z@|YN*7~Tc%8QQ<87-lweoFI;Ot(Pi^F`kemH$2DH$+v+W{di0+0u8#LIuN72DUxH$
zm~;3Tj&m<F&U9YDOuXK`)Oi1=>(E#-9#12B7LEn6?QU$DTm;n+zdED?^&)hspxkm7
z_%XYgj(3EJ1zL8dcCwqPCWI4D!T%t;GJ&*dXA0^AR)ADtE2x(G`MuN|Kr9XL=79)h
zG*Z~#jleKT!$yHaSQxuN>xOI_dj705!0!Q3a1lPpz<(Pk#x`MpqGPI*)?{27mtvbJ
z{gVg4<&7IbA@$0fXY5k=|D+Y$^yGmj!SAuH)GMHHW6m?QzOS?=?a6pDu8h;qp+|px
z?%c-n=cnfUHGH;(wi{TL*4x1EDLvM*k^b&c@HK2VuE^8D@6t48TyJLOJohDuV;BcD
z^|AB#N}M!Kb(^^xduE}PuOf?+wb`~Y`PEiM3BwOxfO^(NNYezgZF#2O#|_$jFrG$q
zkXc`29E^y>Vv$Hg^7=&rnIr8q`t(AMNF}x%T`G{Vs@XWfBX+Sxg5gg9ep%;}N_A$N
z(QekdVoFPXKr6TUG)kM*sVM-PMEsBC5}u6vF<(Sw^NH?<0M3W7p*@CMY)x8|*!<h5
zw}6kh>#Gq$I*$FT=cGB$;jfQ_n*YOd*e&DO;s3*PplTd{W7c!%E@hvhYM6({2{{AX
ziM+koWB7Wy4wll2Zqj2DzaRg{ChW6`12f;RWAdxuWO1n#dyE<#9|xzwOVrEQU#Rb+
zTJVz}PRhakz>|mLrIQ;_e#zt{AXp(BXMY{?@NfV9fjm2ro;;BEmpq)v&wCYqg1nV^
zd93${3&?hmrALhAmTr;)FuLby3PWz>ZCHN1e&4bRc5LU7lXdYVCN8f(du*)<M4wA*
z?7e$y%ZXhwMcK*Eo_ON3lVu9o=D|0q$FERp!4E$MB|q$gb1jB*l|h`RD?nJ8I0iqR
z{YU38aKLjVpt7(ns#IH&IL{P!Q{QiT;YmC!Bl0L*;mUW$V@9`{KXIBka|YeZwQ#&Y
zL)hiC1z=9yc+Q*z5ZsRKS#*AFNwjZQ)1q^0izB@|y@O{)3l?1Z^zf$d9cn}+;T+F{
zpOkHXVolrL`LT)}Ppod+Ge3H_q<7zg3lIPI*B3V*dUn;GcOP0Qq~6T>-{Jf|xE>*s
z&yj|N0*T(hiru_Tuabh)1PeR@f09r?#;!U{SShY{m?pkQzYF(*_z1r1%9|DMJ13xc
zDya#N6CXYC&4W0fO|?p`YPQNCpneQ+eEgXw&udj85aNmmu7U(#<B3Hw0deN5<*Z6g
z+DLH~8jS*cY0PM@zDS%A$|;jT#V1ul@Bv@IK_oM8DO|%}hzIFf=uX-`kEAX{C376-
zbQ}y)Wg%#U8$cLA4BS^V8c!VR-uBk8#UYB;9yxxd>*!l28a&+x7Oa;k*?duW<v=m!
z9W10)lwijso{3F(^)-7!8H^McN`SgASQ%7z-}BzV6~B1%tud+2B2JwC*4ta{mG*z`
z0k`y2Q(NhMT1uT`-9voN=ycPbWI7F+aqzp*Im=QG+ToRz)baS*?;UF^8#~=q*B_S^
zCT<dFl_G()B)a0+!|m&S2t?=0I%8UPgIa9wIzoW%dq2K)^@XkNIz_Ue)ZBi&Atm#N
zVmhhSViK8F-}}o0PXNa+HuB^qr9lvCNE%Szh2@i<<L?j;!CUwrO#Bf1y^6(RIwIjS
zzJ%E|H&NEYOaoLk_K~@&vP{3^p3zLrvA1qBL?bbyjB8a14bG^oe&f7+A^5YHQXbsr
zFY@XI1~o8{5<XG1_JL)4-+y3$#TD>sjZ%V51Uoj>Z`Gc>#Nl#OM#et(C4@)Hz$4EM
zyvVKGmO|MOIf?Yi1LkBbW>|k|RigR$k9O%x%gPN>uF)XSx(oa#p3zZKG59Y_#c-uH
z<}wLYM*Md?0hd*=`ToIUADrzZ_!6?jsDdzDzJDvHW<z@bLMAoBy~>~bob>{65$@GH
z^j<09?@AWN*eEbjZtM!Yfk>xvr(`7{1g3+H;NK7)u#|0!BP@N~9EDdtmgp-`*cNu%
ztMn81Ey;cn5n@5~h1^Pifi1!xyi83zv$jOFS}0VPj6HSjv0#U8V%z-70DpR2_OEL%
zPdpat&|%1*RyO$=yB+@{q?ah1A*UaO+dAWvMlw9p(KyEsGZV>aN8%*j$26sw-xTKv
zCA<llK4g`dLInnQS=7dNK5E0h<l|=jBQka6#(R2Gokbo}Sy0!Ps2XeaH)P)C0fAg6
z0jEk=G<bc>9^LD1Ypyeg7O&b_-@U%t=&T&f2SMsDSWk!ATz#za@CWC5kS)YtmoOHt
zxo6S7kCxZ*)$(ke5<j&Z|1OJwnq1|q*fOS^)l@sXDRRu%3ZP8Pk<X6U`O>|qpk`Bd
z*qm;S#1}ND$P~#9bXR#7MiMoCxyl$NqLsnU$l$I0P)AFOTem+j)PBp7Ozp16mNkw?
zfV{4<Y};e28dlfZy<K~HskW}Ql}5hYm9j;nX)ixG^6*X;`1;mw?kFi7dtll2w;vd+
zDPrOS?xY^ZU!waopxZpV{(~6I2`id*>U=4WXNru|01q~$`H#&2b<-0gjr+pdv*NRo
z$0R$%I{?d(vPr9UKQ%T5AZH4c-S1smR8#cE*8TetNrLyegnF1DA??QUKBez72H~rP
zxaPjDmjHq<p2O%+DE~@v?bgRP6>Z6vaja@xUs2m=wTtBZPr50rP?;h)-w<<t+WHu{
za?>m0H4-UAa7lXEiTMRmTf!cW7@R8J#8%XQ3eNc)9cSX2uEvw~XI{_wz$^7zx<g~j
z8@6<X)>sP$E1hjeUtHaJcsNtL`_W;~W4qc8JihSgvDW?Yzqf9e)h;{GcJoIM59P1A
zXUW#LA6!XNPt!Ezuhc{M-fXVxEPe;x+kp68bYe3&gMOmk#ST*sL5}CaK7t(YuS|at
z)(-ftJ(u6n3WRFLRz71eV(r*@cQ;E;Qs0x<HCiM20l<ly@4ob~RxS7jS4i*_f(fZ!
zOK0mo>*)7TyA^7+0_<`3JFb34Gzt{d8$uPy*N8w^A)wF55BKXme3Fi?%;9sk8}T_}
zhR^*F)TNdNJu55vztL`T3cW>}w(hE4`^bg@XY<z1VVcdU3rdQ@CgA8xQSTLDq`*4y
zS8(xjdyzUAFUW}1t^RVq3e^Q!`=cNHXsuLh5nDSJuityJ!_{hkXB6z{uApv4H9)AR
z@ljTk?m~KF9#=wBY^I1kI_WFE=CSH%rB_;zr1=}E4>=kS3>Q=%{Nc?l-2`NA<2Nrk
z+UEtoYg$?t*D8Xsw5joEV@l==MYJ-j36k})CAY2E`om+*cE3R|*d1ATn8CN_sN?w0
zi626GQTxC4Le7SlOqXLtA!n#QH|82m%``(EV45K>PwlylX@=ai+h^vvGIc&uB_%Po
z)~*o~5A!^Q^<GjX;{)ao?<c3*A{VVZF%L+Jhij+XBA4WUUOhjd#CTFsRBX@qhyX-D
zyT3)%{YmCmAhu<E$Tv-$U<DwbDTA`s_4OV9S8k)8;!P|i*Ihka>8x_AP`y~6sVJY%
zi$=RLDnn<pA*q_UZ)l1y39(Q#-dmv5cQqMOYHShwB8<K`o-SF}9hb^$ltRgZ_9{jG
zvP=JS!CI)C#femfqYwY}YxY7Fc5puAT2GIaDCxU<c=Ahd5*wv$4mrMNNTOf4CqXDJ
zDFV|vd`ef+LK4_0)#ma<q*^J@5Uuji^nWpRfmqF+$WzmvOgh;Lp)b<UrW@X(v><tQ
zKV}lovbBeBR-06UlXvgF>1F|@lr1DUhN#Pxaw^$i=a0X2`k|eKM5qj@CVY~J@$i!`
zpkIRl>@8_nf8-o{!m3=ddeyMf8Y%b4WS;WKmv>MSumJzuH;@Q6o36Q4PU5a>BH#RY
zUlIOmmGi5w5X=jpT)G9)SpG~6EV{wXtnydsI1;FE?54IYt?sP{u9kt8HTRB0YY)D>
zood+szVv<l^LkJsrCzq2^0lq28(uSU6}v0ex4nMV<=s`R(D8TQJx)zBvOL5));30#
zXX;?t>H1n$4#qA3O;YOV&KEl0kiOA`8)XDR1&&WFz%CreMo!YQJav+lfbWL#=JcMp
zF1m5LfF#EX)^t3(uwzeuxaZ89J41_n5?rI;D)n~typyBF#{BMdWT3mzSOE1Oqio_{
z?DqM?>5WhCe3bg1?<|wZ`lWJ$Lo}X#_x1(*I-Jh3o*3mO&YVO&Ca4RX=b*j`@4Pe4
zSlMX9e>RQmhBck(OP*V63NUd4><@pH!kzjtf1@uYqW-BUh~C+Lx&4l4rHR_1D)sIH
zuRB^JuDFu==}BXl1Z;JIZ%^~(=Dpr>8`vXD8c$NC=2Bm<RCAK5)tbNphZzH2*Tib<
zq{}-oX?9?1;>BW7(ub9rbQBphV4Ein8-m~q9aNHhNs+iX&YTUpze>iYI(tp{+#*>_
z2`yI9Q%ROnx7Ocbu!*QY^OXjN=AQQFpM1XgptslxZj%NL=c!<#IZ~|4LS`~zQn^9G
zomfrWHE~$)1=rN(iOba*QDG{ptJP(55}2I<Og|?Sb8BZHK)LkU@)P)JU9mk{tOojr
z(yIRvM|{=;)?M`UyIcocrnnZ2N`v~l@CJKOC@e}%oG8SkE;B}b1|)F)GZRNZKJ^;Q
zU<cPUw0{xh@e^N%>qqwSnHphJ%SV~baU}N4Yy<wE^x{C-!?QMEAN4aSh(nxsLi&Vt
zW-IUpdZ801W_AJM#(VD_r@mlz0>Lnrm&XPW2K&E)A(?Xwtk4bTKSv#qgB`i2aD%Cd
zyfa|x2(o8C2KQbD&pvzf)5*|roES^NgC6t0(>_tv{=$<lv|=x`K7THIsMxI&>)>|Y
zjNSaz)hV5ub194C9BWQiHRqCS;{3T6at49O^wrgw0jBQZNzRskgXgO2&>a0^J=O8-
zAVT!+yZ&PrLUfi|AxQ>lG|zOW!voz7rh*sGPi#H^!jr5#?8N*fvk_f7h31aZo+#xY
zh_9|f7!ZwIGWi*CAJpB&biHncN}ZBT%|0i0kJgW`Z~rhiv4svSW2}Zsd}AiCe67e3
zGJ9)NW-O50TvW8LwEn)X9j_g2TJ;*xJ#L6bV@5g0p+@Seb=}LicBGfx+Usv|CM%Ld
z$L7^6t1!E&7Z*9J_2~w++K82Hzc1bnWKRS;%iYP9_fHH<#CEsKHE`+ohrbOH@9$*v
z*&rlr1CRal?3yRHmy=}ms|Sz%=ZVIG;e$;}pT1{bLQG1`bROFp>H_NsypJM8ujA7<
zBMk}me;j?8CR@Ir-$V7vSfreF?dqM(m0(>vcaAyB-H_f-!hJL#n;IuuwI~hZb4tko
z>~Ua{QXfX1i%=g)fr+GUzNpdhJ{Bpt0;>{?kT&(jiRUooacUblczghNYvmJvGRHOA
zm>E+@4A<U9a`Oui);}}2GmCy@Nih#hC66;xvV0d)xC`FuI)#c&y~`n~HlbPe9F|W#
z`LII91$hLY4OWp#@%Jb)d)3vbiMwdxF@*%1!0r)=CO+mtDeCWH(Zniduh_0xIAo=F
z%1Yx9+m*&#kXT;*_#SFpj$f8j<43SV=UzOY9UCI#nX4z!wL|;18Ls8)a4cO8K0;+2
zXUaDL+P%g4I)jzJXkPP^$B)c+i!v`32-3$szPI!FsX?)|CI{wUboW~DCKXt^Eusow
z_rVE3-bQ#X2jTeoylj14gh%WtU%8qgvvSr!NKFgJQnmw@MR$(`#c%@2^4;!ncXX_@
z6Pdp-C~0%4KLRexx$xf2Xp((5<DioIAy*^C?#tRD8{j;08kbEt?QskNMi&7$ul~Ws
zJ)IU|!3+7q!0xxsbwaX$drfu-^4T#e2;N+}Bck?CEF@?<WM=Yn;uGQ_co!QOD-|c@
zU;?eP_5mf0n+y)37=IRrQNnZcP^OFrEZOSkj`Z-ZfTC~LIqOERZB_`md~PN#*!q2d
zonHO$#$r?ZvG=G~-xU7nk@*LQt2GiOJCeWW$cg$5FCFjZ;>m?|K8=|myUzaRptx#i
zM{S_B$WA@LQj=Vj!J&-$@QXnC+S-C8`x}Zktr~1hkiU2%m<|f~H3gjsZS%>uZjpyu
zi$Z;cjO`!;bzNp{jsJhvHkF+6|FpWrpYHNL=3R1OOC9I`VR=iI3aO_+i?H{^t2?Kb
zh-ms5C|jJNV<`}C$Fn3I)y9}3yIE(;8hC}+CTl&tp}PCdH+T0hAcO=<rKBae?%S6a
zmM!03P5ph2(1AB7%tB6N>DRX3Pfb3vSZ~PaB?>m1UB37G`&NxN=ot1-^F9+DJAZ+Q
zF}UEQ<#Q_^qpciFi6b4vW1NUV0sM*cR8MGdXz9xJMe!sqDt9!tv~~6ba5Y3XC~8B2
z^}ng*)Cb>M?vl$kTNXY6%-}pQ)A$B?8c_x3KtvVKUHDX;`z(tjsva<0`Dy<kTfj#A
zD-kSOTo)m$ayjN#zxw?b20dDm)Yh=22XoDEPlk_gg!71}*D}MzH=-rX;oy=R@bAsk
z!>mIL?LjdnjG8is`mhc?`KldJ|Dtad&ZRzxFi;;r^7BXV-u2{XTGnJ=WMnPpluiWL
z|I#pz?g9HEg#XTc7>_;iAG)wkZQ)W60u0-G@$xNNwFu1T@Cm*`fW>86?GffcSawBN
zdu^8=a@hl#u;S{kiMxdIYdaJkrP8Co4=4nT4%9sPIqM7JQK$nYW^9o&eJ3zBYbG;)
zDkG709|J;Q>)g{Zc+b`@)wMhG_Z+^he%p_4Z(H^p_0_$rpSr1<RGQ@Y2@FdPpIp$l
zf2dk(6k>J57dDiZY`Cx#JDlH<(sp0?(;eTS-gtj^{oz+{Dr@ox)M4$0r?!<sTv8!l
z)8yn|S%{}#SU(-FI5hcJ;wbSjl&!RM)C`IjnQGoUB@tP{Y`7uS0CtdGermzU<y!`1
zWM<^_f+de098}_WQ{(&JJk`4HN7SDm*#G9~*7ZLIa_l5uL9TvsXJy@im$sf=eR*e9
z)lJ`Aj~!b0(5JV2i~8AnI|d*8<d$!N`1?Dv=g30+s06d+0}gop=noj~^s6UnUGD1f
zESoz+>vB%0%N>C4*{1Zs_zhY^OsR&l0+5hWKP~^hk?XEpQt7O6DS28x=`$DR^LhW(
z`HA$C8GZ4yKbI`4b4%sbDxqXSTh)~I$jApLY54&84sJBvzmpaG-_meB)x(vpD%Xs0
zg1h#AmmF??4YkZ>;2CJI`galpg7J4y2T?#6ZM45W2O?BiX%0|U4&DM9ADRUN_y_fr
z3=C60o(o6-bW5?XO$_7!@U>&u@>~ec9AkJ9^0z7IGu6-3w}h8$robgCYx#WRvBh_-
z%-E_%sxjvi)V2)|txk5F`}o9(^5fXj)S`XO1%s6ig8$X>^zgBswJ#oS##E>l*yI&r
z7>*sFtKZSlbF=_G?aHAwWG05X1WTX<WM^)9aXB#zATge|y=i2x!qT~9ZBf_wV7%@8
zAMZX;@%&C%NmY9n7sr6dGO>H)+-M3Vw5Eqzl6)&RlHTN5a&~2Ud~345!j)Niq;tdf
zjzFNUsqQ_o^Cn#~WaHRfN7IWBv}6XWoQc7kn?bh5#9D}RRm3G)>c~P2VWo4l|4oTx
zn#VD+e|8~66$CxCU~hZX>Lw4SFBz`CQ}$@d%9enocz!|cXiHKml5%Z*zuGi-dU?uK
zJyeu#PiiEVfT5FKliPv~XV(x|bY^wux*GG{wu*(tC}i8_wTZ>O)lJc!Ej49p7u2cb
z6-&nFRrMuR(@SI4vKr#67Oo|lBUh$e*R5psLVy^sw2X=3oseSFv1eqD(O{R%FK8HT
zic57OTh}jk4c;-5wifrMmyJlxS@9EWym(>;MxV{tTh|z!x23jZ^@2K$@9CpgncTI>
zzp|_0oru!(j5C#sasw_*(`I@*U8y*`8sNMaAFN+nXB2Gs7mWE3mo$Zq_etRPVP0nc
ze)N{V@5mzj;thHA)hCKu!?Le*$)JsEcO&{X`8W1>)+R80_URn1Ivb>MfU}Yd_I1{;
zt1}3k6IE?At9`!Zg>f$56gJ%_!7u<IAWP|kT#@$mA6^7PkpJE_aTB)l>NCY{A^BBZ
zA_Qk=Vp^9#nYSI%`xvT-ougjPDv$>8!b&%7%fh#0!%u+vV&}oJK4+20t5zi&S2pf=
z{bWb+#*546-?_d)NWCtXV?r#Cl#hPxt=(rnJ>P~cdltms+ir+ed0Lcwk<jbZ4?h0)
zJJ)?<S7l<^nPH`5Wyje++}%8I=~Lz&t(p8A>uA<a!I?f7Pz2yM6w;?SwNq)<Q90GW
zY33ljmPLRyvrFr#d2-^ebJv=4*PgRI_}O!CzFNo!JE44BJIn8zQ+;x-&P^A9$?Z!J
zkE!uLL^kd@THkZm#;RcF#@b9vRMl|!``c<aFK)BM#X7#!SF^gKWn+`eT{B$rpVCj~
z?duJ?8^`J(ZpK71iJ1IRrah^PFFxL1w`Wy{R+g%2a(CRZu2SVKaMUSDtJ~_U9gK(T
zqS`~ro;3xjfoiuc7$n7lyljr<Ng_zozUf+;v$)-j#Ll3Wwu$GkoeatSpMNcf{&*I*
z`PULDqVt`Q7Lf1^)p?n$y&9jkS7&=~O=;1|IT>P%Zx&x56JhLN(@5#=n@CJ0T};NC
zoGGV@0HP7xtX{ETXr?1_)8!^nersr`ztvEBc_nd|O%ZF$H*FeL*cP_QeHD?f{z!Fe
z4Pe1ki)1D>KQ^$h4HI2EPQ#0Q|Klti>er~hD|@yXC_U|8VrAP&F#+!!JE&&YH>8Fd
z143iO5nkAu;uy_M?OmQ!Pm#q@-oJWhdEN4I9jD?R@jar)MURRf{Ww~g?p>2MCcT<?
z=knyAJr!Y{qii5uym47~vCUCASb#ZqtzEkd;Q`c1ah!$GS{u5BXcIYVj&nLF9Hk`S
zYG(J`E;_oyohIgV)W*TbiA7B@F2QEo<E6G|MAQet_7Z1rqrb5<rcm-Y5{ZP}{QV^r
zqpcA(YT)EdRycnk2L3=>iKC_>&{Px>ab+BrwY8_8g{gy8LA%*nn2u@mt3&!!L9sPd
zsxs;bf`!X8T7FHvIaTi$o2B-$!lcHqI;=~kGA4IQZPakZb%vl>!r*v5bpkiySI~VW
zt~adXbGiZ0HyNzTUsUZ<xbq$Q{A5J#esmYMNJ2FwQadUtmsVO!)|~10b=cJ`g^YCl
zCA0498!F}(=#<X5iFz5ovXAO3sEaQ=*mdaFcXi05wPG3VQ=I$)>I&b5=e`ly5Qu-#
zc!bu2nd{2VhUn9^ROBLJ3cS=D2Z1dceM1)qEkX76@w5Kr>o$!o^98$oKE9mf$~8t=
zxWCpfHU*4YuSLV-%h~P$c(+#$cs(n3I_;r_y$xE<9i{NSjcZ5Xdw&1i_jI1@d&bhT
zVm<xR;@$=g=MHdN=eZ-By256AgG9jLahh)V&iab^`C6#h5o8m!2ckni|IGQN&$g!y
z-gT+F4qMTA{^-W;u*u#aB>{)WZ8{8J=tnO|0Gr=raBKK?onQLx_Vl5%5B8J;bcO}g
z1^jLN?=){M!D)|{m?;dQmgm^W@DQ-mN*9hUD7N1mi52-9Wh|}Tt2`|>nCz<jTFvgu
zBW#0u<^RXqdq78ZT#e&9uWavKyV|DJR%umsrCqJG>J|0gE2>C<=v@d9GDTF=iwg!!
zF}SxFaF4qk+ezG=#4Y|}$2HhV40`&{dvCRp0F!*@`<?&cpttY7c{6wB&D?uuZfkMH
z#0vLH(wzO?dsg4$tCQ=)lsvRNI^8a7RtmWC@aN@573@KppZJETQR_g9K?l-o9yyVL
z{zPO*F|J4{V$kt*F&)H>Jm;nHq7MCo2vJ8xG)|BpvM5VO)Pq4eA0j2+uS;_IXQ`g(
ziHQ;JW2<zLvWR|Te<DOEX^ws%T<4JAs*Xv_j6#17;^c7gNR0YPTx1bp0zmv7Fh#^H
z^fKWU{PZO&T=Rw_%}JW3lR6zt`Kx%*0~Mk!knjXCQ{DhGak^ub_ny{M;=6_S2v3Sm
zYI^K3s)L5O_`r=Zvw2iRHp(KY%OB*daKnq_sFFDOAWn-RPOcD6=yf=eXN~0dqtRJ>
z&DVRPd+M_d5bub=AH_EM+a097b_k!)*Xy79ZiBbnLcBnKxgbgueK?K*I?nP9bOsop
zdB79NL{ZAQp>uBVi2MA!5t_<_4+#q#`2n!+>Q1^YNMn`<Z62np3`}?*Q9SS5v^tP>
zbm7&VQx$}06}}F>KV4@qoiN={Wq=O*R%d5-Wk&?*k`hx$cs7l{JqMDoq{wi;H%@9h
zH<u`ycWwxF@a2?is8fi5SrZM!3nW@(t}Mu>e!y_bW~74F7fc-*Tp#N%NX;g_<S997
zN>@O7zEFE1(u!@F%b8cgSDV$Q1hWim*XCH$=fx#04^(XJPRbj(w8EIGm$7t8o>ox4
zswyfXt3B0W_4s3}m*fUo({wm%Nu$fHG6=&}09-6x?+QH9AK`bZA~RbE5r?bOYIK1`
z$9va*bgY@f%hyQ&lC$bePvNpE7boS8j@G^1iLsUQGgiJ{Bw->-@;IN70_n0A_A_?I
zUSe{Dr+!U_$x$kTe!WaBoEpmh)+bAZQAJTT<+<9-`-?@^qPY6<obdE}SJkHqiyoTY
zJG<z~z72Dgslhpej4odiRlT}=`~&h=T+>M9`1k0~fk)P^-?njV^rgqf35Zi3aRz-4
zeg!#wu5?|@dhmn$Ts*NwuEq|rxd=}q0f{V~bS$0d2m8@Sl)~{nrVOJo!-UKeQM6zd
ztnWiuAM7wb<;Q+~wcu}m6#Y?sPW7VbCGPdr6JhG1XP+IayS9a^q}VX=G^EjQqd!p^
z_-Q10a^p`o=Jm-)ml7HJHo2_&TZiN-){`7Q@pqnDdITK$#~pGh^DIyJg;;YZap1M!
zkjX`0zd}mv63P)1_ybQ!99JqpY&a1`bi%%Q;re|Gwi`LE-6=tjq$cKR!XEY(y`Fof
zWV!(Hz8HC3{8M0>WH&NXi~|Iu9LRJ*j{HW)(X+5!;|$%#wB!^a`SNTpM$VI`{OKpV
zvRad*9M^*`oUQX%qpN2n%k2-$nItD4mo~=Nubc&z5@WXP_;5pVg&UMpVk3jjjnGez
zFRkkkff*4G^z@+v6;-%@<%9mnT933*Br=F+G>JzyI#OE0?dVTedEjGLu5#Zh1fAX}
z=p-J{^b~+{YHh$an_!zN#tnU~;F19L+}m5TI#T4k*au>T36+&Q60Hxcs?S6m3pzcW
zJDZ4&V9kmp2ks!=K!3`h<lpFtAF)Cz_EtG#M(nLA4Z)40aD~EO2Eb%MA5@**Um1+O
zWlkEOEfsLMoScB7e#4pWk_823@2;y<2(F?Om(?hiid<9#uDY@I1mLMjGcyGWF*=ga
zOa|Rbrh{(P;&LuqskbOS9;EHu`r_!EN=w#Y!}R!D5-R*w^1#7Xo|*^6)I4`sbWFUS
z>KmMkbl+<K_k9bxIl->|A37LaQ`_h<lXS_M(_du!KXucU8>eFupTenGC&=mBTzO4*
zgR=GGke~afWb0TkDS=S}Maq=yfnFnIKj?4Iw@2o7XWIIFkSqFX?Jm{986sO)jIm%z
zWpv*1qjl!=NHGfen)%z*rT5IsYDm)Ih>S>wqFAPMQo;yw{s<=@kF8o>y5Wxpt9iUy
zp-e!@-=D*8L+00+Mki!+@GvyATlJ9$qgWJ4BL-S84VVfC%9GWRWi9iwT@eW16r1gH
z>y5R;53YV<ZgA0}^UUR=9Y@|8_KIZP(VcfL8GdMC0woRv$LD$2CUrhc@0Dk0il&ZW
z(C1eQGP^ccThq-<4vs0LOukejwdeaCT<?_BfL^}poV&j*io?@HXoNBpN7aEj72v{@
z6hX-|=+D0@&!9ikg!j2*qK&Tg*iGb_d|1~2T>lmZ!{lShlvM0$kK)F34#_~&dW0iU
z@ak>9iTxE?w^Ar1-s8&!Z16Aun{G(&g6EZhIF2`?|Dy7sPxfP);{$1MCZsd#rXf<_
zwX6)qo2ibr+*glqnM5&HD+v>;n18}JxJYkyhI1mr`>pxuN$N3aB<pn+4`YhBV7161
z-8cDRk*DQxs__V+R4PP1(D)S<M~>W9rO~hW$5p@_6RF4dsiWi~qZk=ciLZ`LOfXz<
z4?P6s2n2bE@~_!W>_NUGB`M@HCaLpCfzO}ENbfQgBZ`bPED!FjLte6ET9j)dHGBmY
z%?tEE3Lpkc22y$|Qp8|Z&Gw$8vTaWd2Cv|^d=-D^?u5ow`AfKR?#|ur`W1QLHUHe(
zI)^_!+v%Tsv}@g`XJ=Dmsv?dfpTT{8CcV#xEitDY3??_8A+e5m&F=oU{=Tx9nBtC}
zj^dcQB6oFGyih1*+sW<JoIX!~V!`6_sMumC@f63ByZKbtwB5YcSLsV^D9K3+q-I)T
z(zPZn+%6Dxa9_1jp@__=aeJG}^D_b|siv7bc)&=2<2V6vZoT>0#0}#X-1M;GFaP<l
zLdCY_bY@%ftxC3<$9L!hejdNK|NqVT#pBb@xY`{5#bE|1W9>oD!Sxt><FmJ$$Xn->
z97lFbAU@YBXK8pmhXHnl-FkEB>xtaO6)u@HM=l~y;cg~{QS=o~@)v1&h}3ya$HnY3
z%|OS4c75_cx6f$2<DVkHe1AFuPkjU4A)HgKf_K(}V^htxk^I&-@grV@Kg|#`av5|y
z^iaq|pGA*^&TpxqBEu(ASOlq-*XK=udlb@xlxZFCm91@vt0|+bkC7$>M-j~1ysj+0
zH7y*mwas0Ywt+N8o<E#dv^py1{0JKh^VrHO*eHSmn-NueqgwYp-mrWqFtE3-N}J;I
z$Vm+c8NRl3eY5A%!<8rYuW$9HcoEl?57PUKoYNH=a9=#}J=O<lM-IGE{`a~WWpJnE
zwfYjg9;^qUH8bUza|&%h<t|OC6VCD0rJ5Ac*)i_YWCx!wVjI%$ZY^I?W><QuQ|}WS
zqjh(S*i2wGBAvcv)M>S~ba{m*%O+kz2ENh8SrkgGk|WOYq}#G;Vj>E2lf`jw#AjGV
zzvNa4%{H1=CqX{pg!sE}u8*-^r;tINy_g=dqsJ}W_Qi8(Y?ZF;7;kBkg~B%F)a<h5
z<#t6}iLb6&Af9AYvBfP*G%hmWq(!L?S3~>~vmDuVF{XkXzf`xie-nLH{rSW{@P0^x
z12gp=tQ+xtWO7!JS`ac7SU()iL^ztcgM}tu4!DUdfK;=%2Dh=gj#O}w8m^w8hAXOe
zT`dv`ZXh9y*Cv<6DW+xt<l7L}T!^cUwk?^omA_6$gHlSkToA-AXRye`lTJIFpm8}N
zx&bP?C)qpQ`jr_vH8NN01xRP3sk51BTl;HNHFRhpa^%np9L?u1^c@@YSL}Xid2&}}
zW|&71Dd(9J3gXK~S`#+kGPFzdvRI7pz&}cV|8e&66CLZ{yRBYsj?rXExI&g%Ey-GW
zcFw^&M^{OOt&~1};xhVMT1K0pr=rZym^0Ln=x-4e^R{lN$Qhhv<mC{ziP423;<g+X
zTkkg4)CE<IJ(DV!n)S7aZDeHp{h7lK`L<)?AE<-m+l)U3<-|Rh4dUSb75&Dq$c#1>
zsp817P$~{CpCqtc_R}|)AfK3_=J-`f5-=7*`I?6xr_Mi3p~TC~n`W_wwAO@OA(}0q
zL_$1l1t%rrk0z$&kO{3Tc0RMPXHR?vODq)XV)By;sD#$dUUP~j0Vzbgh<7#+Z`=YN
zl4LHvqiy*8+Z*yyO4!^mLs;6PJ7*UxEOWBC;0!6#^i7DdADF!i4wN=)f)p6;43#RB
z;?9)iOAs*|8kBqup@7pq(j_Fg<w=lEI)SsiZYt^=CB@w;k5cp1{J#eZ*wtG*eN}}>
zQ&zt-pDh>hR7Pj`mxYUx*;2Ncn^E?{IxDJ|XT;`aILK>q!NO8U!yO-wn8-T^N5au~
zR7MQ`#wJh<fGc;a5Ue?T!ST0;Hop?U?p77KYdHc*m_c~u30_(PlOrgvohy1&ruz#J
zKO@rtxp~2!2f9uG^}9PXw@Y<T!!Le7O4*k7L)tx#pP^|Cl_!lnD1risl}WpsDW@{x
z-N3RIIAW_7<<wOsNg^v7+T!)gPbaGiyRsZ24j;>G{ptAnSGN}}c@;=+FJ9AA8JP}y
zF16>*t6Tc=-Wp_H*YTA_eB`yHKa?-Y7AbCzyZ6)QxUq2-7GBY_u=(WYTP^_apI2+#
zc~PZYfj!pVa{lKjU*u!>0V*!T<aC<yVKDd*L^e*CfR|6aY`JK8h5zbWG)jt15a|br
zZ#s!LL0l(>9fb9;U_EQ_Q<SHmhxBBG-z=!YBI5`KX@-cjnPrjjZ_HE>95@Ro9j}Qx
z<uwP6OOLY<y=tMHU$*{%c~z_H{n8>$ltf~77bIj1R3xxv-~$0+lY$Rfs9r_Xi@Aw$
zx_}P3mxBmYI?2@(q1o>YXDUx1)w>g=;YV9fuFA7!H6=##F=cpsggmNjLGEpxyS<X|
ztwsG#CTo^Js}wHa8e+3!9w)~GCv&0VTc{X|9EN})qoRJAR2~++<FJ`oK031!%R^0A
zI&52T#Dd+XebT5{y(}z~_|p4(!R<o;MTz^pA4znlH^QGNSA2|x7!?b$_Nc=7FB508
z4`&_Y-zB~ihx_#fIs3zuf;T~F&f%P6e3Y}Li+BM}S&+PC%ilq%#;qhC*pevKjejnd
zf?vizN5Z?dBuI5gG+#b`8HpbMLnpZ&yWsb@3w~ET7~z$4+C^n1${U7^?n`@hkYAZ(
z!r`z#;L4$kI>Kynfsc0Hxea-LL{c~Q<ce(>4=h^EU+o5PvptvyMv+~cHxWO8MY1(R
z#O}6({r>SQ=pCJ4UwqqGBU{X-Y`RuY{DXOz^1(5av8+Qm<w9wX=p03%j9)VXeq%Gv
z20|LHP{cOGRWnlW+PdX<_P-aMnwO9;duyFZL7Z~S-seYH<`iDIAI}mh1mPBUq`?y@
zcNf+bx}$4WmzJ)##jurPvDV^sT9YhNcVT^@+gY}_uy~mj`82L}MgF`6<9|XPjjLZ<
zTDO0Bm0V#Tf8LH@VT$p)@q^<mg+w8d8k}mg!=Q^P@TU%xxssyOc>-maQW+T=W^qDr
zQL1ltQFNk<0arsk{IiUjM|>!ghB0&uD+#0Ll8WA*qBgS#kT(kQ#^W<tJT^MDBOaPw
z<lI6{K97x_TWD}@O(sC1f5C}{|3G{tdBb!<g|IO}xZr2W`IIwvOA%BOA#8sunfMYs
zyIz2D5TSvGJP^3dM2yP!-+eJaeE8N&*~Cx$%d*#)aORD8ZVfX)nLcM1ZdbL3nSc{y
zY{u>CO(!1VqrIm)KXJ|TC(nxpIj70rgUQK*F8I4^qq)iDYBK-NX}ILZPaw_Y|4w+L
z1Fx$UL_4@ss->?o4dLmcZL*fYb#@wC2S+E2!SK+reW0XhHld_dRxkjiNw#D=!aK7?
zo_;h<eTLXQgdN;5{xiH!yFFcf2FxGA*4=f2KmhU7RTj4H3cLXXfjo`=LesVi*v8VJ
zO`dYn@dSisK3tzu?ms5je3TaS9gj5fh+`sqRC&dPif6^ompoBY7iR!JD5LdvjQ@`@
z9PE}Ldu8$C_siu-8k`(+k-a-e|0B$TnAGy|C(V)_RNH&u`g>r~J{FQ;7L*`JDc3B+
zeHI^1or%$I2miDIt%&$S2DBU`T>5?P1wZkP2*_l_H}GEerH81OVO$yH-%lP~ap1`Q
zVu_W#Vf;<-=H3;1j_!eXoHgJ$>79TwB*Yo^Kk!3PZcArWQ+s3}Wid&!Nh%5&JyqcB
zqPNN+Q9Km@+Vq;*1x<I34hlV}8M%D^%5IC@ard8ze~l6Lu#OF`o%}>k&naDP{`(z|
z9$s!TDOP{^Kzc)QL5wjPFITswB=xt<QiVB++%ZiRS@Op;?HiA`R&T2hGic}TJY8Qj
z&%E?O{7~;D;$O#(5&yc_+rWDKQ6vx-H{P}Q?zpN$?{3`qr@I>A;)*uRxiYUPH>v+n
z$DDmFQO>H>6};ZNm!{`zcyiVJOJikeNkly9d-^T04vWCQgnTSF$bCb*d{W%FE~_hb
zq1<Fi?G=kh+Uf#in^bRCMJ4LEN!D<0l=gw7W~(vXZAfljk`ic6H$?<0Vzh3HD!QaU
zHN~0h2~V(<9tn({lv$cU6=wI%ZmMxqZdy9vYj1OuFTXlixjj8~_?GP@^Y2*_h^bp$
zoU`}nv9j2X{-s$h2iNvSr`wyl29hd{mM#B7H8@I~up&p`+`%Z?Jxaxx<-z_$Qz!0l
zrjT)?;9nCth2e~abVL}M%s!fwD<O43%W)hb8b#GhkJ*UMuncfOuy*xI#ENj2@z#5;
zys*-HfBPohCh=zeCI@i5@RINrJ~|kl7O{qSd-nV{5!OI6@ljTC>+#2kS*WCSO$#W$
z_pTOd&2~+QaXXap*i`)Ppj>A{X%!$vuYAFv8bSGumicUCk_kG58EKA#MlQOvsc7dY
z$OVJh^S-`CZk18;T0-w#gUJKW0nteVVt|6$`bRR;MGmFhm0solF<jrcE8lUuRF2>n
zyX)LHyC3*21`&>bTvCc456g5vY3ASl(vpWk^oPUD-BR7Nyyn7cIZwzpo5Pt`HlZ#X
z$We$X-V_CCLS&FGJ82&tFiCX*#pi<@o!-0BnLlNuFof0+AC-bV#CIP=<6K;*;ekZk
zJEHTgyTkP8EF$7O+oIn6`rYE+RS}m(!28Rk#UNFL{QMa3{6mvrv1V$BJ&&y+Qq^*B
zfS4oEg6Gyewg$0|f3Sw8RqarAG~lO6yBirk-6(t7PMOJ4v1slvb>uZesDw+HJl+C6
z%bVaQPg<C##FN&N8!Hw{S?1Db2Aj6F#Q9?OMEuTP>jKpgL|RN)O2o>!MS~SSxlqoG
zuK8?T`@Wt;T|&O&q8TV+nxcpnbbQp-S7goc=p&pFB4K?&vA1bOR>$UeTa!;?mo+vo
zS0?5*rZm;Nd@docp|(4wZcRznoSJN{yQxrVS1h3C4fYM3H{59%qGxUh=-pFrOArNa
zFqcrv;FDve_E~)yU}f)7e?D6#7DXhM_`hc-w^bHe*;0;(o6-Ew<2(yFm)t$a22&Qk
z2!yxm$+?6xv9@zR?r%Q4tXzsS#Em&nz}MUD+$*<=jqV6i!tY*mzfAYFtpASRt^5s0
z{L>n+ixlbMS~O4mi2nlT3kS~mJc_CY9bL&ac!RLB)AOKB3p0De#KU+dPpevUWjili
zHjJGU%Xk`doG~LSF25>2&QUTiXV!X~n<eEzRDHIb{8$K%wH5ScW)GUL*8Ez^Vth4E
z`pZUv2q~3`rQ)P$L!>6mk&&3#mgh)_%4BmD8bzij!lG8$vi-5OS$0Px$i6<wF<=~m
zo$p3ppNcJobze<bx@;Nx`qeW*pGeGwRgm0UHc43}X31nAC5gEsXYIoa7CgK*XQ`)s
zOHJ+OcF$5|RqH()ii<bg(>i_&va0l!4xg{%meTQC$aT3LC@~I}0DrN_m}W9MO)s?_
zc@Yg0UHu{%4HIAeG7Hs+uYQ62bpv>FWc<qwv@Ee2uIW|q8)0yUF*u0CB$JpVz=!=r
zum}wOY4i#}h5@<;EFyM{bJ5hRspxay4}e~Ghrn#~Q{)pm|2B)%kNkeT*03-Z)gY}`
z!7y0{1c(eYg;`7KK7%KR6lbLR2?E;qoT^s0xk%4LIdWrIa$~CTEc)G=i(4AKa64bj
z6EG3Sz+*dpDJIVpz9a^~U-7ren30yyl%XS&NIc-LDLtEt&4px5GNXp7>8%UjZb{&a
zi}?a3AgjTte6ka7AUdWH*+a#zGbNgs!hb)_%s_O@;4ShH!ABj;6Vx;KO;E=&=81py
zu@45HQSVXxB?FK#h2z>~XcMBl@*NgDD|>@{KUjteQ3h)m*P=}XACoL2>mb{P^^?!3
zxxo}(J-H0ovkcpG<vSWTs{K&xGSqSPB=QCG#FdrHuwd-WQKFwU2ESR=q&_TY$`Z<2
zIq3v4nQjTafu1S!lQniikTv$%dCQ{VVRu1;M}fu5MTYXN{mvDu7ns)`Ym4USEw$ZC
zvr{_?V)?e7B|~ZL+iP^<1s4YSvgGE}z{2KC{+x?*c>MVKjQF<tGUFor;4e@09i5ZF
zWHUKROSnSrDUMgeoAC6W!tZidHY7xsFUT%lTx!eT^5S}Q=hcOsdphE>mfqEYHeWr_
zux}tGu70Qly`Ajq09-4>__2__9=YbMhT8W~PDsP|Uo07T?(~+9#Hh9d18R$ei&>Q^
z74eGv-5>4^Iw<NRfURz<oAf}y&?<vC(77S6ZBdlki5#Q+SNbXcL^|6T>7Pi+a5Kj?
zXajM*-=dqBvH0|&l$JPiyh(~V!bQr&#$0!cw_tWg1UsH@S@GT}%B9h!H-o75!-K?v
zrk$M$e6HFWu9Vwn`HXx`N^=(2)xJ7W7E8N1LY#6YzDMtaye*qCJ-+0%DyQp|O=KP%
z1<96CW2C$9=s@LAO;k$9n)PcsQkD)-OiL`KnbzKJPfEwohM|r?V~xAaZv=qD;~-)&
zy42O3p1QUtGp2knW6qww{D8l>uXy&nNnVxMK3d*2)|s2)FPT$P)M)bMSu|FioGq4d
zNSX2!{B959r)Uon3kTpPKqp3{q8=IO^9?fK9i;5&CF0M74gKMle;`MsQEQ9RMR;#)
zLwSxy6y|7bZIA84MQKI*^Yr_XAI3%dF=6cd_T?5$QbUH#meG);u`F+&A4}4*xf4I&
zdi)=BP9qR8We-ZZPELl-4K9}HhGEp9(lmWC@*Wwj&Q-Izr2UQsX)!fxz&i>-SmuIS
zQ)yX&rg7)oS&EF0?_PRgB)8+9ug6wiT$erT@b{;5MHQ81Pqtl-p~sTv-PTz>+7eG%
z*%uGh#UYg%NkW-di(+W(oV%CLUzxY|e9y*DPqvia`u51%VAf|V;1iC@LfKL^!Ldun
z4^a6%sN<1o6Ogh_F=5ff(xD4$4%obADdts)CEl*;+l?1ZU>o}LRWAB7S7p^{#jcVh
z1K<$<q-~ex;-}G{s0dq=G{ZVot%{EDlzv_6N9A?&0zW-p=<7bZD6^#~$L23|$+2X;
zP?JC0?aaw4a20fASvm6DV|CrLLD9qQ8|JEt?<*ELi>zfu+1kwei`YQnvPM<R%F?Ex
zKV5B~dt0xY&E*1e6@<ZJegifClu7M{XBRKqyl&g*OOMgk-%-_T%8|(N(LjB&F0Of`
zDww;2v>!T&0qU$9HOsCyrkk>)lc6W?KA&5+HzjAV)M>BX)EZ_HvmlL#pB1Oly7QvC
z_En*mf4L7yR4J^L8(WrK+*p92*#>cH*ZQ2y=9KVA<Ssf^&+8LEqVHl%hKRDg31<JG
zo1x7^gR=^oN>+$XMnRv6U>da!z(+-MU8dgL=ya!CY)(QVRDMgiKC$<3cWk!XX11zr
z1(MCCv3_%6v?JORkyh{1F!8j*?YTWUrl^{=m9@KkOaYU{6Dp<1$rP_Qpo)xE$SgW3
zDD%us@Q)VHeeqzULT}M40+~bG6^2NIB7ga9wfZEDH#0I&;&ivoas`rjYQ8|uXTmYn
zPJEAif??!tP&Q-pH<RX|*U=m@$_?vr7N3LLD^`}Lb!3@ii)Z)DE{>huklvabD-p?<
z218~0+@$iM+L*YKuHLSaxZGs3->CwC3lOmo*&;BR&En|#{Af!?O?>X`0*}+~&Wy<@
z)0_1|ez7(tLT1hHOwFC0=XTmXx$)j~MMO-PDuN>v<J7l#7z#vhp%aiA=twQv47#H<
z&}ZjCvV;8XL*fBcdgU{O!!gx+;`nH7_9_QQkh(3q2II$i=6Hl#!JmkTt;omn{8?>=
zf?AoZw!qLfD_>5_PID)I#4!9#I1h5JjRzK@HuT8M^hZbqG_?u(ReWAF)DYiVSGuv?
zI~VDY^5yYW8Llcr{))DIRYcSLwK*Ac%Uuzf%}d8hOGZ2Wv&LTC;HYy)xU@oadEJhO
zTUM^A*l@CD`)<5JDR87am8_JFzdt}a+(k8PYAL^c*XpJO@3Kpqz(=6{=MffD7$&83
zjc3s9H>EM?5b@OBb9=gN-UvCCs1gZ0-E{-r^InjNwq7a19^t5LI*lYQFIEK}B?`&$
zsF+A)aqyoRS}M~qCGAndJ=tl@CzmQQI;s`9Foak|>Vn&z`e^y`kDh|GcKYwUHSYq$
ziFvQwx2rcPsdv|XugrtLclRbChv4(u$+EX!^WF*KlXur7_3jQ8rG8WNVPN8W)<(#O
zDjAF^C*EreZ?S8%31Ct`2Zw<=-2u{RdrBMjvOcq@);(u`Yjo`$pKV|ENLJme%lqz}
z=MN7wuRY%FuE_SP+&medueAqUO*>~N+`74DPior5G}pS?h9irzjA_jQS5~Zv)Xd^B
z8kbSpaOkzgZxIiEHPl>P-CS|-gDs0bc<%V}EUD3@X%=(T;p*-uh<_e`{iDJR@C(7r
zD6Dx1$S$=X>i1JhTiS<u;(O*-P)<k>_H$B|g-wRQoN^8hZ5AiZ0BPkYazs1)oB!Fk
z`M25R29c*WMW<FIHXd8ws6bk!<0pX^GJIb{X?`TFDr)@Zw$;yV$_K<}qzic|YP$8i
zGcB{L;O<ZsZVH!W4L!VQ2UpIUf8XlN$&F&q!lo0SZx)6NDWCf-blfw@>t2Sk4vX9k
z0hBsWLTMWeGRlt`1fyJ+H;8y*z3^e=qy6e|eCxKN2a7imf8#`|_alFL2>Agl@l`tu
zv~ZIm3X>t}<NJ_-@n<AjI#vYSZ!y26;<Qs1Wb}c>^^F8|#Bgu9q=7A9iVVVskdF_L
zt&J7atyxt2K`K#N3_Dx}z5vY+lMQS0oHuA0{@n*V*?^p)dBz)5ET01mKILDfM^$Mk
z8Osm;m~?S~TXzZ>8*M60ouN>LkcXr?l?da6869fi9~Xl0(gme%$-@0AJzmWVkIna{
zp=iZ}l>iBNi;`p1PqHoQ{a;0twy!KB=HuDuom!W}p;9><E-hF<@K8s|U;&}fO2ECo
zf+z_(J|DRil|&Wzh)RhTd|fbD>_CyB;JC3}l<#lg<~Ywld2&9PfC>AHRHqc99F5UV
zVlDtg*&v0vT8GzAn5UAMS0H)Lyp#m>(<I`53vWpt|A3lP$oT&r|1Se|+VKH6@*~I^
zdOy~WzJlM)Xoojb$F{*-#@8i$zTv^qRJ_q(Jol;4on~YO!U>O!RN0&fk<UJO`wm?~
ze7q)iUWvn;-JUwbHMYbp5lLAQ)o%{9?eF!inp@kQwf?CgW4tp`=J&~>3lh^8#QKU{
zGKG%l54WngP##=3f8#bLlNnPnH$9;`*)ZLCRwxR3&#rnR-m$m8@znZKoP{UGtITRX
zS7}c&xm<MI%-O^l&I$YsocUVn3~vm7p5k4zCr;vjhO)AOq!^Z9$ipCAqz{>B^HP#n
z(y{AoLH%+t&5j;LD|^qb%5oGh$Wvz9>^X|QdsgK*OBWU>GOdmr<aql%-)xr`x}x&r
ziym2<-Er^tJLLJ!=vndw53R}GBkDi*x9u%QSCmWikq)D<|NK`wT5nrXCe}yVkl|Cr
zr|)f*Sz=s~qQ2wrt~~>c?{AfwUD1)E{uA%QK9Dqhlr@{7U_>*98C2exsbt5PhYTkP
z=!{&{ccwY9>VHlBJ(Ns5llC*Qx()qJ@hK(j0hTkXJ~6r|FQ=#`0dD#Y1~U`qGo2Bh
zD7#Y?lNa}pF0-i4J!fAV#U++Ml2!ZK^4>e=`*kVJ!*_MND<PNg@T5~*V)y2OyOMT_
z<8x{gNiJbXYfg1##hCa45u3R*+8bS%?W<2UDohrWg1BGIVq2^TV$;|X6J6F^uOZ=o
z!$%gi#g_Q=*KiR4=gM*HXE;|9$k>fH8Xj!AlU)jJ=!kr#_DI&fwxcMqWAmwJ=M=B$
zt|Im8VqTcZl~I?x<mJ6J{@xumG0C=YaiSkJD*IUo(s<(2Ekhq)+}D>BRI5`wqvib1
zhX(Iolf~w;iI}i(im!D+T*}eQl&xh@^FYnTV1COeIuHrvNJ3hLPyU|NVNg~+`3Q;v
zPurH-9-)NmsZz$S&k=}(b3El9883dZR*u*uS%pz$8PV(*^3KNQ7!o5B+6$rtYB_pY
z=Jv!($G&>$d>Nmgd7;1mLKdGF*naeEBN#KuiA(#wYI4pS8qEUB;ob9@qeBZ_p4A5*
zUy#)(R~Ul!%TP{y7s}HqjH!HElX0o1IV?`u<p<;2(R>^`$q@@h#+Yokue~Hm2<{XU
zv-SR}goGlmO(GDmE&9^NPIu{swgm8?@6^!UiTBHER~>F>+n0#W;_*~Em8)uL!CF<p
z;&P`hQpe>b8NCiwVDQdvwuDWjqL+!1*(X=z<j{EsCZ2^v;!!x>Y%1alJ<jymYmiq4
z(@r3((wID4pye$^l17zkyt5<zw)mDyEQ4|svE6}iK2@cfBU4qMjQ>+10RzM!*iGyc
zs$s>D_K<e&%~Tr^H)%r_;>TD-8jEa;zXb7(Dph!AyZdN->qR(xqaP4&#KS%ZKsVt1
zYOC<?And0Cd>!1sL7C$)l`}ZRi_`yGUd#}M$%QCe8E#fQJ$@PNOf2!+L=CqnG<YgU
zZSh1#AXw5-9|8=KzG#bV1KX&$<(}}A{F+4KkC+8Hud<rWa=F=TRsD{5ifK-%@)8fK
zg&@q4pywe(DtHdz=@T5pmk{aF#HxT92T#y@4LD}ZTx!h7tiF^E{J+6@8Z$=kG1!>m
zB<IuPKaprBk!Z_lv=bst6xt}T>OIkR*(l4P7(FY`v=gh6;OKf0Gx08oeQcK9o)t@B
z9;izEb<CZ~G9m?z_$=@k$%CIGI*{+MamG@TR>O@~a2<zS8R*oR^g6gUBKEXHx5-?q
z*D-3JEtmnrn;y&=$wGb~7AacfDfWaZ;!2a8=?=NCdsn@)KocFGn=1GCyei0R<qCZq
z?kR|Ei%Rauw;59#Qw*6VlGAqg_ltr?lsPfpQlEv-7qblsTN;ja$->wb95zqXph`B%
z^g=Fnr$(|?5SyB3F%{$_OGGYzmYF=^<ho*GVjvG!I((29Cq;3?lgbl4wHc8dgSXI`
zTXl`yWo#Pz2cB@9KrWWd*Qr@}1<AWph%>C8A>D`|BSDh98&gtqA!Xtu7QkvDM^6dz
zZtFDGt(@fCR7Uqn#vK&<NxqG&P3_9HW~VE1ozeO7wC+4>R=Pab=_&$mXRkQXPV(#m
zS<b@p=p6E{z~w5EXAhP|Z4}k7yQ60AsK(@ou?Xwd-%0*9JLABkOW!^@Ph^RSvGB9{
zch)a?`{aC)EiT^1&z`fB!aHZ;C%gjxn#vimcsjoZH|5teJU4G}urq1)5@goEGqnS!
zwrS5&tU6H4o-5qaA7a$NXe1dm%Msy@wndSQdTrFaqT;zZhU5ju`>KcI(zjO^FDbRT
zIuFk;>M*&uA|6++wd(v$84=C(`MtIwWpzQIGv8iPq>D1Dxm+O&BS`j~vtVc%bG9J}
zne{EfWywo4=33q9b9Ytj{`yp7s^6cQJoixBiocxebz7^1Y_U|Fx#poo!(*knxuyQ)
zj}8rQg&?+&^4Go#?Z8mdP949QjbexwlgD4+c>SiP*pjVJE$rUxNn%NOLTz-WCwEnI
zqRv<8)yG@a%q%bIN#~GT#lpb6L(Qu{y|*tvCz~=&EZXp3Pe$)7JIR9c!*rk)MQI-9
z0*@jLB!SY4uuMLLAtq8qNW$8+5b`mkrXJ=R_>1z%Aoaqk8OfdX2!72yFe75Y`1fa|
zMkv|a4N|GW4kdh}6wHwtNLinR&{yV~rG(0^my*^6Dklkds;;?b1aT;1z6Ix)mGmXQ
z)&s<1rcDTggp<;WUQ+~=kO)je2)GX3zlbNrdr=mKvGGwh+|3@GjvBn;tFOhU6tFq?
z7L1GI@Pc!Qv)2}2FedS}Ge2Q)7&^)xl|+sr<g))Xa!={Qx$|0NYTj>-{1>D5i9+=Q
zUkm_Y|4)MmCdP<EpoB3(=8Ex{eb+_B@}2tZ(^E=1@>RA?74qd6d6+W5mFBAWqUH)%
z&j_q1m$4~WkLkL4?pPxRQo15b&a{d)JwBr%YTot2y541MCw+J!M%U(7^4+pOj29Wu
z#qhZb43EyI)4gwhwW3+XSLI42?%D-u)9Z<&e1We|E)RfMaD6?zxcSp7>L6*ame`M8
z#BeAh=fhQL4t8xaB_L_=;FC?4os}w|H)uJ8PWS63y%O);p{ZD~qh{%`_-Ls?YECRp
zZXK}@&k5kFvlTwplhHTJruSF$uFNSPjaG=vy~_ZC483BV>n&MY=8)Txt+5>qrP|u`
zo&sBeH=xlPwH3MZl^|tk$lW|#nzLniup%}uy*%=2E)?~UtI6)d75j_hD^pBSja%Cw
ze<>yQvYVL47-l>Y*~NI7f#9<VlJ8VPcpC+`ApfM{$V|8$dGUsDC-S=+!lRMLZwPlF
zKi?2;{gv`A<f9wHZOHRCghwH7-4Gs$J_O;ge_+)OpIb0P@cFAZ?mznMP2YE-FW>Ze
zH2T&}pF7aEZ~EMdUb^XX7y6r<KDVKd-Sl}B`p!+CM`C>Hxg8WvKBr@4fV=Q#NFG62
z2xdHV-$VE_zob(#%ZiEb(QzvFt7r18e2Rt1XmjRk2r_M7h_Lck)Wt`nHTd$E)x;T6
z>QiMAlK4gG1w+k=Wm_-JZ`|3LsPR@Nfi0p0{h?uR+lG=rN4CY^zOKLzr8;Cn<&+!E
z?$*t9gHLa-NSSx2HGRdZ;au>QR87+1-ihxq34R*lWuxLrU5nW@T146O<ZCknIWr-q
zi^`*HS#@zq^Xk0DK*Q^qUD;-3e5sENccbx?WDP7V9({an)80P+ZTspQa#oz2UA3{r
zJ+d;kW_dwcT~e5-Xmx|9Hr0%sjVYZIaF(P*#+DDHM3wkW<1d;IF6lqJJj2tnvEtYp
z4(ra2`ooJd6B<|MjXp)%UbjwshmYZRQ~ii%<kHcpXL1f!!c3uInl;XUD2e<zxqVG$
zQcJeQ+cK1w)S7L%MG+YvZqH9N$Rp!*HZoZCa$dM<=*k#3T)q}ZQrcGsi?1PzTQ`x#
z?D+}7;)w=qMd#supQB_juk*-2lB0A%fx93^8Bw^nB0krpFy$`<H9W~LqmXlLCml~5
zCG%myxpcw&7)3<kqKf!DSg>FboLlk4X|NU2WC5vb)&jUu^9WHE4@|RKBzqU1jSIw5
zZXbd(S<I{$S%gcgaYe}G5iX6^6(ImqK&-zbP9u6(O>J{xVsmYcYy4B}&zczWX$<ug
zmZr|r7N8rE+nHSq6x_|2k8Y%38_+e#Q3`g7F&Kos2+K7yTOsTuV_pz;EBsI>87B?g
zi&)^QFvDj_$WyS)Y2+maeO^b#V*WW;h7l~2OqIDCc_CN^?xS!Oeg{=1jVg1BF*{h#
zM+|z8`wMXd*$l_TM(z>tkgg6R!{-R`sdEPvdd(;yn@vS^ok=-^716P?>PnM2mL(j-
zT~L)5t8oQPzN&zYr{;VsGsS2ohes1*lKoMaU{jL@Ruzk@0*T(pBd1+i$w}F@DUS3g
zr9M)xz+~5sCX1Z2Y;?w)oyS=J|8m}1{(qm>sB?OaK3IgVF^{Y<j;ith-PEuAPfG*J
zVp|D5V=ev>Nt01Xlb8L7{7CRwZ~iNefiaGwi719Y#$Z!2Xf9(~4qG}77A2F$Qg+`g
zv-a9-f3j-@=r>(9li4ZC$PdIu3z^9|5@rm><!Pk_vFZMvVwWMQEG~(<maa(d$g?H2
z4&{;?@1(XNY|N!o>DE4y=#0)5az$g}#a#SWu#RxXR?bh0ugkE;RnAY3ug$O^C9aa*
zl)?=iepe}VO@ixT1et@hB3Bp)D3CS5`#&K4=yS-I@O~DLyuStM$J?m;LM3@W2ok|N
zST$TP84M%iVQNkFLfESmEEDchX&5Yr{1w8?!E&%Xh?^>pd`LZ`%ft6Ta`4%DL=Emi
zvtfHBYO=leKnnU4W`_60+#B7m2mi*5XcN3|6u`fX<?u_qjh}*4owV=Q0uK+lW|1z>
z%UP<-%er<IBB`K{I5_?s?zoP0kvuqY;(O$ISg(xK&w^>|f~;0H6-kkz5mSlR5E)tb
zw6+eA6vCIYup&CLa-_|@OfYM8gPZhojVsHDlVay6$~p~!E5Fxy;P#`SJGFFCZ-4%)
zKP5HR&(5%>MXSOh%siT=^-M$}Im~J}2BnhxiHV8J6OrI`>b@)t-ZNSz?8vQ5a!kv~
z`-xBCeHe9LAt#?#!TZ(JeI@n&U*Wxoy00RiPuvgZ|G)7A@H^cL0zo?3H?aqQ75^QC
zwKBwv4U;}ycrla*d{7pkeXV4)a%6JWt57<;=Cx+==pr!8M{PPHE}?q&oPf7uQ)TzP
z!v)Ub{)|K-R;Ne#U|3PSyeg{yH~-$X@}(W6nafV~+}@#$01rqDSDaY@Me?|;;ft$E
zS2iXKiLwZ7$HU6%WqYc3|8Ty&c=M%&i=IC`H;l%+8Ol;*ZgK=${5g4_2k*Zp^CDtP
z{!D)7EXYH)Q+C=u+S8FfDG#O?rQ$luOrhXH@N3J0&R5j7*hC+pqv6EY-9QQcs9@VH
zE4z<r6+F?q8%o2pyaD3tdAxXS@%j;sf-8Q!`wt4X)jBrFjtMVa50vYR!?o-|bP@3g
zcsXCEAs#W>d_-N85wsGA%m#1<-h!fna1H3!nTUFDI#Nd*f_+d=NH7nx2Y#=<ugN|Y
zO~}wMvA@FmId78pq(Sjg(w+?TQ{U-Mc>iV4KZW*-o6ILM85?<e91G+<px_g)h=5N(
zykb3PAztADpNM!_0OZ8uhr+^{zZZyco>2kXIA-+`WMSuuPU3aoffv-KmXAMgO*0zP
zEl5B@<)gO3w$}#pF<<ZZCr$!C$p~Hqh~pD)MqZ43g!kw=R7K`f^&TX??jk+}mM%<m
z5cVks)^nWf6DGBhvgi=J|0CtQz^7uV-o)=rNx7XN1^XV>5F(Qce82tH`;kvqNE^01
zHh6#f1B<rtx4A*bNAH7`$gW+(q|=#j-7v9h%IR$XbC0lvY<h28Jn;jb4)Mq&{ST)b
z4@~MQ$YsC`UTH(IDFXr<L<kPEdD+9J)%U!&ZuPT%w^St&+B4en>h`Z}(jv8_SK|2F
zd=z1kzX%`ZX<S=cF~2xou8<~_elxb>@wM65<NWgon|Tkqe)zSW#jW-65=mrKWJ1rr
zjzozrw;2BEIoj`Yx}7pl_rl73Z?EgL7MRJoZii#W!s_7Yk>}!OmWQ6}tk7I1clT!2
zw8<WFu%w*7WK==q*h_UUflD%u)v~Z|p9W6#H+o9=3O<6Dzgo$S)0Gaafb(B^U)_r`
zIM+8;aa_96Id60o!Kq$}oE-<N;e;M1C;D4FdARuVZ{S3aHCcV*Z~^=Pr}<kTHd6O3
zb?(y$=k>jK3WLi~kU54XE&9=*239uRvY$R6Cj(T)fZ!Q}Drk@e`+;O86vwL-7Pk)f
zS0!px4xe#N>5wg!BNg()9eziSyR$St(7(6N(dBGA5F4#D2~6<?35D+V;#ha*?lyZT
z`UM{0$%qV(GHH0@@8K4IzRln=hw+e|yli&{U#QgUSi}LbEl{6Xytyxn`R)h2>hu)7
z&T3(UVUabpF*|cjXD0r8@;i)9M4%62N1-g?p7L)YJHrgREeBnAQK~zkKGYX4EV4FK
z0;I6t5hvFO)TS8oXkt-fq);efMMRWV*G1WSZMlmpUD?BrF1Gig+3eiG{f$d*RiOpE
z^k~0Ys!}t@<FIf;7?&GwNifUMxBkG*oU^lT>C5{YS?^NwI}Q%~E7$;)hj4~(?W9tZ
zDFQ*iS|;sQYodJ2%>8JDu3W@T>Atli&|2UYdU*<gKq^(5J=S^4#Uikbg&38@MX|Kg
zm~KQc$<_M=ff}A-D<TUsFRwYYILDM)=e4nTN|Vi`+&!`~Q>xprqngbgn=5LoyO+WZ
z;)KcI{GFsF)IT%rlEeaEIlxgd(WM3g9`U2*oaSEMeY270rRdAVLnF_%zw=HzY6`|R
z^TIy93Hun*F-~?X<T5<7Yrbn8jnTt1I){S}E^&t#%*GL;f_M{^&NimeT@(hYd7Lrs
zn0O3>j~el*;XxZhU3FEgGfQ;gJE~Z8XA3IUMM!l~lVd`kf%d?@b70@4P|hI}UQP4K
zB1xPMcpQKtezf-%I=)=@&NIU?Cu;`zgEnBfaC+tV8nB>y@w(gv8x_P(HS*YjGsG6;
zv38JgV7FQ@yOPkf^!=8Wec-Ib0{?e9@$#Q)KL)QT*;dQyx;sdg_<m1`Ko03d*`KR;
zv5-z|fILxjq3&%3BqiIcI5E1Co<H@GbfW5iK_?(@P(eB|0O<sR9lu2L!w7U0Twe%w
z;sx>^G9vU5_`MPAB*iaR!2T&<{}3?m-{id>J}1a~>~8A0kF<-V%AW$1ycHaK1UpT&
zmpSnRmVlA`w^vWjr}>Od^hu0E`jdblXQhk+?<G#gZ;K~Ri9sX0f<|ze)Uu9%TZ#G9
zIBx{?=ovJO@<j=GqU=S!6^~1O)L-!72zX|MDti~OqFc}s*cTt|>FiTYV>>qbL<s#A
zIPzzWJIcuBMGkmfwUy;ojVH>;5k}5Uj;XCIL#R7$<Xmqw`AiE-azqyDSt;_BK&Ir(
zi;gl_3<9~DHzz(8{vw_f%2hL=MyoOCZvl7kXVG7%yhWk)NsAg}*jME698f7HmW&RK
zejx_Neqy^AoL{$U_ysYt|H8=EUyocE`Q(!kSkD>8A#^?Z4i(pw4kL@R;93MM@Vq=q
zrL;-FBH8#3CW5>vLu$D~CNAXu^(a{Fm4MYpgT6ZGVGM)sORlSd^u_zL%&w4IBw&eb
zd<@p|x@;Unj)}+HkbP`Ej`P{SKMHzaWu1q{)gxqm+hBd`LiMqLk51BRv-mhvey+8w
zagPj~mf4jGi-g!NMV5_+(-rRW5{Hlep04$sL&R<4pOXDM5BoO?`^TqN7_83gv%<;%
zIt-BUcqzEY5$lR1c1n@O2&`}P$Y14LuKe?(#3;li0pjv1W`grZ#9)wtN&stW+U1~`
z;;T=g2SmgP=Qbxf`5L0OMU9Lg&u$=2frbsBjUfFu4uH$(K4dw$*Cl7&DdbzxxCB`~
zLis8&zCaJaXDkvox?*%QFx_ezKOsiGg|qkvAR_xPo3Raj68$4N?>T_Q0X7cs$$$zO
z1e{*t7vgjUXeK6l2~bplc!`IbK>_h-GbjaFEyOb*wTY%{^BD`!r_gcuOF_mDpfXR=
zy1U8!8#?{gI*ew(?txZ?IacfPD<k7Hsz|M{65eWD$>goe2YUfV!s8<qX|C|NNQETa
zHoig|yfw?|oXw;M7gC432ix`1G|n<f;~<G+QB;klaK7s)9LwXQC>&TeC#nw!M0hw{
zLbI#_-e9_4B4fw)#j{N^Uq*^d$mVr8=ZfKTzlUXz`7`FE`(!fQ10Edv!XuZBx$Up(
z6^HK#Q@pMWw~r;rWOvDxuf3*{AEVb&0;3hNBMlT?nT((c7ZIZWZCGd6v)t$5-{(Ng
zn{T$f@dj0X7KlM)U~KZ6)_^B@L?#$(p<=)@-bHla^O>}!5Io5zvQ6L;m&gL1W*}&x
z>fui;WZcWxN&1edtaQ2nFr{r~$yl;54NGTqnInucv)j0u$zjX2CIzr+jnPiMI?3-<
zQT1pi{>^v@)&tkDZ%SDm0ZEKmXBDaq5}hSrj<beK^(p}wkH`rTRUrb>|4nwo*q^GG
ztu=mUs#Sp7SJ{~smnl^jvobv+3<nn?V|0lHQN-h*AT9y!q{a|jLw)BMMlTYLWWbd|
z=H`|wrzyTI%8;uo<ydT^yXmv}D1Exhr+Pg$QeoFi<17lRUJBS!ximX3OO>G2xa9ST
zwQR0jl9ijS@`NWiYQ12VIbITORhT^zowdg7GzQegX~hDekYAEkEU_z$DPhHFMFOF=
zG=rS?yosGi8k)vn!qLg2C=@9LqNGQz)fUu>*;tcOE$yco5^O_4;iUI7sLD%8uu8M?
zz4mw5LLN)3(8;3>sc|}ML2rf#D1<JRuSFLvknxn^kzuihl$da9ZfBYRQ3zucaXBhv
z8Sb~69YW$Pp5e7v1R$En<_HAX+uSg#*XC)?i$V%{^7)+D2)|e;lQTc%gxQmwuIfxX
zNaxGCxDG8j)`5v#NCdJP_Q@0Kk!+ewJ1q{+bsZ=wu8DX4!WFZGvM_O;)*3G7ir89v
zXQBv|i=veF>^P0BXl||;kqe{Mwp10km)+HplEVY(A{Lj65$8~$n9qxLSnxu=Y=9Y=
zTpE`?uOb#L<I9(@O<|P3A>0`w706$xY*j(`-(X}IV4f89X2z4D!pT6<&;wpYRMIE-
zxKb{+%7K%KnAC)hYqsIy5+;0N6*C>#t;tcDu|}@fpka!XdZj;?CHfT9Dr8+Ij}phd
z(uh*F-Fb^cAzK+&oo<mw#DyDWDy~e#$@8xau6G8q9MUAxe~*lrJQX(?{ttyt_R;|s
zz@mN3<E*>b$D}Kz$JuwW?qcn`vqvIF>rosL@DH-o;y#d;oRYkAC;S5ri-p8xp-E=Z
z0X|O#+k%_}X@_l5+-yc;q%7@Ff5-b?yqCF8GAe0gHf4hQ1jyXyW)J&!?(`#KGG`;C
zF-Q#@%Rn#=kN5g8Jmk1h75~au8%tQFIMZU~FdaG6*co_UsYVzaJSO`u>`z#qV5m~|
z8yus@-GQTU-1Qtd?wn$f<k#7=LPN<#`1Dw2<@$9BsdM_E7t_2Z2IAZg`;0+~N(ydn
z9~owclA3W!o@NE((^K*^5O3AIB~rebnVkj((q+3=2Mo)T(pYJlN0u+l097kiJOl!X
z=eq{3f>%@C?rWuUl`xQrf5SHZLRt!6cRoNL3q+C92t6n>G7(NcAPAc!NvrM+<aTP}
za6XqO(KsSzwX1*_12V}!5Da{Q0lDM?mY-#bGbwpY79Q(dS&-J0W<ZKqxd215!K)cP
z1valMj>(qDB=r?qo?K#*YI(BSCb?RU;vTQxS=5*2mqY~pWWy&m0~eZ3(Oz<st%P5X
z*4X(}dh+XSW(gERNL!L)oQk+oznjYu6qEx_WLa5}Nv>o?H2k))WaqYRMJAR~KJQy<
zy?rt<%=i&ar0Ptd0%N8JlQObwF(fP9#1bh4u+9{hQyyEI0_zm!SAa(&OUsI3olH~x
z^NmH@x9u#6U@7GDzN2LCmFOt)0<(pIVoxy!(NPL^7y22pAO91CJ<XUOggu5mgsjKK
z5cW(6b`EPsw&HUj>{%$K(y%qi&p?mKA?!IQiO{gE=voj#!JZGbu^Amg9%gnkP;eqt
zUq8g<42cUk9fGZg<&IFWGog3)LfBpkb~e=R{qWtFDcC)scelZEhp0Brh2DJxmb-(3
zoez~eivArrjQ<wm_d*D^5|tz8n9o7jiy_!qRDtXwBf(-Xg<!CK<SDW~?Bx*b7=(RJ
zjp-{P{DvXyO$zpEXj~RT*mKmouZ7;d4Z_~1%Do=Kc>%f>d5<dhMyT9YQ~-`JpNFvD
zg<$0<20EBeK-im;?@oL>K}Hq-nf$&JpHJv1*bl@`#-54u<Tsl5A_$w9P%#cru;(Ys
zF~Z=xOb`WOzn%Cl2$N2XB4W@=j#a3>?}+n|Pc@Tc6?)f1+>5ZlA#$ujZF~mnO9TWt
zRx{dYrto_uRPHi_<x;R$L$EI)%ul`hTIgLVgq2d|UJv2&`Gg87rpmoB@oBJJJMuJg
zo;;I=bG#OLnu3j?dSn<6qvm*B5Oyc}Ez*w_QFD9}whv0~i?I{b9G`r*6Nv{nT1L(B
z$#M&k-vAB;dp=Zd9c*_V{El$^La>F%<H&9Joz%RaeD?uZE)PFU>1!up4G^}8DtC7X
z)(_v^NWo5pU{$c(tz_Tenwf<4!EzfY*qKnfw?Nn}6znXcEeJaV-+hpR-4l9u2`sms
zYU5l8b~`M$nSz}U!A4OVGJ-RxH8TmDjg%q#aDrMhldxNna%2UbLamueTxwu_r^x!?
znhAXm2z!J2Mz4h4?SZhzDA=nZSR;g;quzaO3Ks}_hAQ{^wDJ25gxyK4nMv4UqyTKh
zC#W?u2}^=P(=7ZaYRyc-pg@WI34ewWfh{8W97qE9BO{RCl~3g3AK<S-`WsLAGSj+j
z6^j(UG{EZvW(jQ&8ay&cl-Lr}fl1*(({Sp9)kn&oT)<=@YidT?Gp!P(Ey2J~Y0Zwz
z+xojL;OToki5#Ou?p~DEzOK~RwW13k_ilwHGwfozWLp+h5`QZB(T^^F_fbvF^2VG9
zzHiCcxdn$oBGCR=JDxzCwMGN<9l0{5abqorj`@Ip`RbKc|DzvX{`P~~+LevD5&Wbj
z+s@5DOuR~b@nbDR$cUVHlZoRGFl4Z2T84pPX4n`}j94gj`WPvY^JX*Zs0bP})PTUF
zGFzaqkHh~!!Ag`tc^`%Uf!XH4p~!E6|3RWpf%;S|8T^k<vt*&7CW<SzUmTcoVOwRz
zwhMCxE^V&>Z}qa4f?MiKdclZiM+%UiY4Pk&S=7+jMSKjO5Uc7-dx*83?J2}JXIc~X
zr7Uh}?9R>{+*e(_Z+=F`{Jk~R`vx<S=LRlrtEkv^aiISKdA)$v2dio7CjQjNT1KpD
zpsNWGe-Bjy%<u`grJ<B=nsAU+O;t_hb`ks+<8<99$vmhTO5-+*3b)}3OCovFA!DIF
zDtdzrK&VA!NyHVv2Ow0&Le{DsK7+yQP^%qYgTd!eclF3Jz(50WISG+^h-@QbC)nV;
zho~_=+4!}uyGNc*>}vo5-}tv4@T774UGOiW+5_$}U26QwhdfW#K-EZJQ9gY6oQJ42
zUTXN-*VQM_AYbMukuP5|j=u-~NmM6*v*gpHZuoRs!zOy4KZ=f_$;>5i49qvOmavA*
zqSFvGIc3hSn!LeM2fS9pt8+_BjjtiY+y?)qN8s^|M;2zp*DcL$JhBL0mle)l<Sbi|
zH+!M8bOE^zul^7A0A|BKWT1%is+!iDj&tzeVFk>8Q!qcEau`f(BKCmG=w&L0xEY<a
z_(X!CtLTVv;PXxC?5M(ld}Ewiin2v2X?`v@eV1sL@4Rmlcy#<qpszHV%WdJX5l~ox
z;A_FtL<Su}0$j!)g#9(#KyPiH3P}e#l-6*u$`Y?p*>n<>&E2=fdoFRiXovT_Z!7j2
zsot&(_gIyracp?JMR|3cC<Kqvt&s8}4-PIF|AQAiBMR1vq+Y1HRP}`LiLy&&PavmA
zpUy#K!}wb29a8`J2JH7W?|^64_)q!Q@YncG`G&yTL=1Sl6Ffy^Qe*WYu@oG`pC)~;
zZx|cbgMwq)pn2?M%=A=0m;dY|=T45iN88BeDM=gI+4$4HJV(t5A8{-0#81IBP|9FT
zdO=W!0Cb3r8`!)i&J5`7V@-=qOq!=gDNo;St+9u*l>)xQTv8(xtmg1+e!Yv&QzCd&
zQEYlcf|MmtTkAXKctdf$*F^C&ve<+qZ7>peS97@zOTF)cL|QBtiu&etU6p6mG>Jv>
zT$#jGxhQuL_Hug9EZbyk?|`rA9j#T(rQ?97%{$OQ&-oPM5GJ5<f)q2R=L8A$W~Rg1
z^_f9LU~&XhNc!}2AmDD&-nTAJz!oGA71eERPcWr7E!|#mO=1v>Q7jWh0|PHIK#qVM
zLq`&t$Xp<PIv2<lKW!!46=5Kgnv@>dwxZ5`!-OE<UzAlby+?5phtQ)KMp5^hCaom<
zaD$IHEqvLu{Flftr2lzjVxc>+G(n?r&x-9A%}H-fGla$EMyFH-oDwC+q2`$b`WPNh
zf#Om5RyYEDHYcvbRk*gv6Omf&w)-uTxR$YIPg_Nn8ZDyy2g9QLCcW38T0+LlFbAT-
z^pSc=+6(0^Q&!SNa+!TrU%I<G+bx#FB?WZJy`?UxAzDNCcg4g{SR-67sZ%};KI-&@
z+(?VSl-UWztRd&7^fPdU(8opyzhUn{z+JyQ*O+NI!bKy(K%Ib_*ijU1%Wd&yt!z!w
z#%0;K0#F;KL3oFaSw>G)im`gfMPBOs0}b^@);6heyhf!TsOA>T-%*y+n`e$~+tHrf
zU+H6459n1jOk7^ju{4WJ2h0fiU7<3FFPDlia(y&bI`7(4IM!Xs)jmyK!;+}`YF3w7
zA~Kqjg<+g$_D6}1v(=hX_uWH?*yJyX&MhQv2cJh~Hv3Zgs?)?=jg%OU098^E(NFux
zHBS75deM(5+qnN|5r=wHdqxZLN4ir}yGQa1Mtf2p(I@0sELm>7-koK!<Rs|9-_~7P
z9SE$xv~K-H@_KQ7-=;Eyp=?uM@Ji?41AjyRK<OvQcw|0EKw>~Fnb7J!bO~3hRkLG(
z9{t1BXymTwxIqpFaCs?!NsUv@#81e3=<gX4Dysq&!R@Bzy^|+Chw^JwjwF*M*`ZW8
z{A`|_qsz3!G|h^MtzAB=a9L%v*Zrh8!EoD_rgD2mv?@F<!xEVq6$ZW%YJ_rS<gCHM
zoRy7<?&jf={9R?hs?$Olu@>U;HXJ)q(7Sm$HcHu~4>$EGZ)VR6_LY@rqmy*Hq-aff
zQC7Yr!efr`L`d@6D+^<)mgeU#tBxtGO3#QY9!O80Q{qe?sm-zbBPEhZzdffGd8;S@
znT<+i^@InCh_kvCRapZ?4oA^IR@DlfetvOMd%oSC-=0)FpIjH^a1cL&IFtEc$)g$*
zi4F+H;r#!YdlSH@illM;^}A*=_hjxQGs$F<OzvxvOzw+7P7*@6?<3qdf`A~m9D)a;
z2%_MHs2qZbD2IyI?z-N(y34L7uD2_)?y8V^^Y8BW=H+FM5b*o{-)~(qGxhp)S5;S6
zS9e!ev9Kd@KzGg~EmH90-Z-akkya0)63a4e&1HE5Rq_<qSVh^0xfRuO+p?0%8j{XB
zYweFE#?G$Lr|Lmca$Rk|l-mB~<yHf0ZkSb{lm-WC(U^|b)DILYh(jUd+dZ%kQQkas
z2`{MA#A^-#15)NTILT$%#h)j{d8`BGG^Th)E^o+cA5d!b>f-dy)S{Hc@=RN_yE3D^
za&8NFmAWY<{SAiA7&yD8Wz}ep!I@!gwVG{aOIA%<Qdy?emH_^Rcrg&-@e1TcDcUoq
zLa*UNM9f0KBDAwyh&PxqmnipCg|}m7Ma|Uul#cpgL(&H=Zfcy-lo#C^pRHt#NhRsY
z#VLl)>pCYilzG~;j9g`kCZ9*FNUa-NFkzm>HgiPfoc8RL{u4@EDwRc@p5};2_u3l=
zfHk0{p{k~$NU2kh6h9}8fPY?uc&c%nQOQ0$i!NTWt{_W=zmo~bffb2fx3Rsda?tT8
zoxHd{cT8huX2+t2{`1>1boTVvhjpI#yU0gd+HINTi47e?xOFOv(&ZX3v%YrGa8Gu}
zq5(NWhYZQ$ez4nkJmTP=pJBf-=*A7uBf)XvTa+eOp%Yz^1Rg#33q^Am$&_gQjP2Y;
zT`a8!`}Tu*Ak*q~aMLDfOy7QM(vKmh`R?WQ^dwm4hp^6Q_ycjD_qRp&Nm0;S@<WZB
zJEh7@S_KBGWAxk<y_I^e&6T0?nPObz-)w0Hn|?XAb-v+lAS`SX_CNLLU6$-@w&~Yg
z+=jmfK6^zr9?t260j^-6%7JSaxMcBKDrWU-&0bWnX=csLjRowz>#8RHS|xjDLDjl-
z)$soazaylUT0?FPoC`fqzNqz8l3Q^e-hI?@u$B1@?*rp~KB%Nonv84`a%Pl4sg5@)
zl4InQ##_~5ailYE$epHw`7=f*M8zpw-dpe4Q_uU^!FtGtU_FUUK3an^`M`qtJsT`0
z=TMcxxl^)?LI0M457k^+I{KRm&d;AaAB=>5P(2`?UPgYzmJlR~0tW%GkDf}dW=`OU
zCpex$AORhp5)oQu;4xq@xZEtOlE=7=GLk9ID#({Jj>6_#daFv!$lYlqsj(*LGrY~U
zY4t_e1_zJQv&gl~X>`T~B-O#X-K^PSmXU*V`=vsmuPV&SWazvCjf!+6xF~v7Vo7sa
zO^r9hRY1AZ<Z=_N>o`51e3&^zK<y5A-v@Af{B)aEy^fv_DqMCSEVCGvNfyeuQL1kP
zc%_Lo#Z0%+^L=&~_Y&-jf6<322eTQ|nveYQc@swn)<BZ8`l&jZg#4=Hgu?7JQ$OWY
z#+hH8<SfWeW3q<jv=ztO6YV2%+e*+U<UPoxr&1=&yM)Nx!#0Bf6p+!7i859#GO;iZ
zF|jERJZIIa){Gw?o|&NDW$(gXq9lleef7l^+Dmp}>VXsR?V(OH!S+hB3i4!3d_i*_
z_~ZBn)?}L+zCC4^9r?0>Oi0@p_IcP=L1fwj91O&}K#|RQ5f^ZR=WaoEx+x)*nFiTg
zgV>vDs#Au?hU^g7o|&1`R+0d1*5MepSyU93t+)u%72x`ZdHvEfw7jN(7c#Aav_l~S
za>(&@6DEWT8;FC_1S*6!5d9_`fiY|w;i!)w)`0DW@(?V@)KIEXpV;A;`UKK##?i<_
zaf14V5xW16xpfGQ>Vm8+h(;kK+>sCs$Bkh^BWtqG2yT;6E1htZKrOP5UO<h&<0uBt
zz5I9+QrinBP)v_s;P&xTZBT*%91IDmCX>siqR7BEE*=8YOhybe$EO-iNiiyV0Vs!3
zz4MA!X~W>dkL_OZ`JsU^*`~yRsJ`O^g`Ru4PxyRA-$V7s<06aCxfZHNs9umG@2FEv
zW)kwMku0Ra-k-`k^LQQeayMr1n;T;W#_%*G*^~keNj4QbX?Q>x3F5)+zcT9od%B*u
zNWVqtm^wa&t;`7sbf5Z1rfxB8Q%i59)XXk%9`FQWH$t|7e-9Yr(XxwaHa6ew_9hwV
zMQn0EsF*SuCwZME5c|{;r*~3g2F`Q0l(_7F2CWAy=<aQq5DCazv_{X`(ybI-k~E-H
z(XcHy&E|-2z`0JB(e>17W*Kf<79iB=74jFmfLW1eN{&@ivVK|Mf-=vPgud5h(hrPM
z$EL=X<qIE}#?AB^YB{qB#|}=^&@L}t%9~}bqHL19CAFb(;D~8eD(~2#ZSBMJt{<;i
zOsgFkjMbdzPBhQ4B&H@>Hm^)8P15~O&yD|EeOm6nz&P=JC?blKC1c;CDAF4REP#<w
zo49vDNhkLj_scq<;m&q~3XsLU&<Qb+ujeiTZznaLTi_>FbKHXyz!bo&=6v8bz^>-H
zz_<zAZa<30EGH)VbLB(X3}_p<h(e;C7)i_`ZX|9)s}5+Ty0G;MKPvg#J(Axb=(qEK
z_&GhgY-G7(WqxH<-bzRL$g&>4eA)PCUR71zjgGRB>=5+x#{8;E__S=~rO(Bus4)GP
z9`9a$ptq;7i50^O%PT9(3x`)EvO4Lnu3x3Uq~E#nNKdFuk)A-_594l;SFuZoSfT{3
z9hMN=i6@BHiLYVT!?gm6^pBl)(5iu7cv%4JhAUF|058P(^JQeqQZi)M;?!QU{2~up
z8HuY6F9nMg;B<|NtV?im5*8q!$YM4*C`%DuKmnmv%1fmn(S>hh1Dxp*SaAA0lx)hA
zkJ3V-z#QIu98wrBzyKaPeA;<blz)w~$Ws(Ll}h2tE{+G)d8QP*4m1~~j~dzG;^yh2
z7z)rzlOam)PD|4}K%y}#E7Rb}iC59SpJXhMGf@tQjiFdNr@TBbE+bBB&8kU17x9U&
zOCKc%l*(iv*~H;4Nrh@=6Hw9`xhAWqB!*;3CzTjKG%;1>b_^Onqv+3YRAMB(2_ll-
z^id-^Tr!4I1;6G>RioFY7m;$cCd%%JVd$vbGN6x3wU(4xvue|Ptw2F*<?8Ihl9(vH
zj*QmBmkc`EYQU|r-?2(Lt7dqnfa=`L3S&}kEN05Dx#Ba3OV4MJY=zvQ$%Lp-Y$D}?
zl^V6Q#fU4tv{k1NxJfdkbGR!WxYEYDG3gX7XTl;%GLc?V(Rf{R)URhUSrw56=UD>4
z9!CMB(au8@K>jZv#SJA*&)=zuhd?AnC^?MN<RtHt%XBFg?vv<LV-;CRmR1>4qq)y>
z?W|nmFaW1M%~<7o(f29>14mK}mrK`PevZyBo98iRSh>#(a$^Nq;d`~x7!?idxo*$A
zvaYXm(3*@#Pkb+uW#|caJ~^ISx)$m4WQri~qHo13USUH5%4nJ3i{Sz}nf3XxQK~3U
z;Ruq<8@G7`)oMz~x2sJ?i#|PD=~T9^9F+%G%uD?``Uad|K?B#iv1ng1S={AAp{NX$
zCzjub;g1gSo*()Mq*`zqoY=#PoIYsjpwv}sm6h`=k5z7|I95?mKeOI7XJK^bwy{~s
zP4k-8uC3p2b{S=*?WSrwci#~(*+@A|)pw@1&h0;b0mp#L97E6Nbl?J~XL6dSR!p42
z-bv>TUO1p?@x&HO+_nXiA6ZiSg28@)*?B+Cv4Gdt;CtB!<ogNW>KTWncYDG2&y~*Q
zj%R~qb4%HKo-3LA%P(^8oKgaCMzkL1%Nt-(xa{^?WKK&qcYJQ?bMPgwjJrV|HMazQ
zpM!EZ9Obry1MD!o4_SsXd|84{*YsEU`)KgJ>#O~JA?R)+IW8D5R(dDW;LPp@1g=Ap
z#31fY`B?S=-uK*45M4<odGcuo8I1x2lC&!^3ECK5qoYU2+CfblPX80gZoL)A|9N^t
z6Z*yddh4y+Z|GM?-SR{4U0k>B;=6~I*TL`aqVMm)@8msU%L{e!WdiSt-|?QHh$EEo
zVB88Z&h)Te>SiAZ+oJFW?>`oZ>45qdpPlyHS#}5QJW~<yU|zf84)mE`FeRT1>`DiA
zse^W>sg1poLW*>#q4px6#pEDS?qZYPqmP6#-Nt>MBe%xJDi%>sZ0ZF$`abSbnNk6w
zqUPmh`o>Z3lk}DN+Ko>pzU2kitKRNwq%w=Sh_@B_Sy=<{es78^VlUrpuXUbHYA8#}
zYMWbKF?U3nVyr7gt{RwE)@;ixOXPmhYssz7IPPLEWPpV##RsXa9b<~BrZ=V~)z4}$
zvj%H<dH>p!ezkSU+&}cG`ij}HiA+xK)OFKVN(_UvnFFE4knv)Y?9yff6zVOoOWU27
zM;3`p>W*lWO3rB8JY@|NI<M<Aq!cHomn0ckWp;dPbY9bp#-_!C(uWMI??|biT2nEz
z!>a(UUMQxPP^3bqEUKufYG?s#z<@@(H$BFYmaev_RIZW<{Zq2r=TwfEX|v3mP%ySG
z74d|!^?l5s{nmUWZ5n_C&4qRuJx-IS(34+O0U}bl0cdDy`+jb;o{rUlW!q=yqq&2<
z4US^4%i*<h?~|RrU1RiUr&cqGp3!$1%qE)fEgnmeR1v!pySs<qQt_h9JCV?4=5eJh
zb1Ta;D&5g&V>+cM)v1rud99@b+Ory#kMyK8&KY3!#3g)QoXvgH+i<#<i%zgvGs}|F
zYO*Y5o7viG&2Sn#qgS=m%pRD*GH;}(kR82K*WCx`ys0_ZD}Xg%_j=^5Ej_P5H{iU6
zNMo!$sU*#0PAg4z7N=Q;?!GU+K=)jJQRd+5n;Mr4%gJsWot<1`k1{HIlQ=NgmQj(E
zT%8+d$*fKtG@5FPwR7j%Zm%D>YD|9NsAY9c^BR-PMoo-{n$q|Fi^jV!=q%fbEHdO$
z0WGjzB&^b^2fOt#YVO#oq)Zj)FV}GUdhL<rdYd85=5xDZ$nP{6t~QeC9XndYjXz@>
zjd~zO(g9TWT^DGU8M+5Q@}HOXOG-rbJhFLE41f9-JFu+=oxUZy(CORxs;cyXGped)
zwPaLRbu?uUxxT)BaYuI3&%O0aOK(SWJr3g>Jr3%qUwUN(C7E}4O)tF@LSg5Zp5X&L
z`N*n{L^So@pvtOtquZNUF>v5r@gCj7vFUal%DmdJs3SA8aZGM~v0N9G+ndr`FmOmm
z13GwX_dRU014Gu3AwzQpEb7Si3|~}RKXZV~rL?H%3BA%q_pl2JQ8vgcSq44k+(?6r
z{pN~hLf0P2wEUmnV>5ttS3Pf2VoWqOZyENW%GnnZnd>C@`(h<O9=;kI<LXfF#yeA(
zmHTLM^r_dF)qOKRx)w;N{qO&PDMDpjWe;}qp%jkB&TFzx`ot1?(^Z=)+=G4O&b62=
zz;xBJPK&%kc1#lTxQ$@R^o=9;gqk&7>OPVj*2E#F{EqRPO_cLFgZpOnB=<>s)%V>5
z>e|pp()(f#wOuVEy89N{M-@04T%RqZzUhR)eKePRclT8(^x1X-6R(yZ-Et94B;afo
zq1IHNM1VGjm{wi2eeUUCGYecT9gIi^Z+8tOW?Z}F)wh0bxJomu>yEzm_qEz&;NQPP
z*Qv!BvTv4J-*n&meKOm8b$y)y`eehAV}1u8kX<)~n15xvuCJCvB;Lp>u59x4(Y~1f
zd#pij#Q)6p2V9qpgNz(Z{T#S=u6KIjzj4&hU8+Tts_SR;Wih4T{iwEryUB;CCwM<4
zy>lyR^?eQP!mm+1o8hwu@H0t0n^B3yAd7ns6}ui}^7YIk7Sq-A0CYBJ2-;DdH*o!v
zQ>Hw5)4+i@q0jXL$#Li}f==Z>VOyKP?c_n~IPXsyT!T00UdX15#?F$G&gP7aX7t&Z
zu>d*#I!iKaflu<m?#E3T8BLv~fu{+j=o7h;cA4nIP-T5YL=l7@NA4&}a&GVX@~`u9
z-T)UsHZ$CuQI)oI=p;lRK_8~R7s@8k=su4NWP=ND=FI==mtEVLk0uRWib6>uUUU_p
zm?g}|$iGXEFXftC{2`a6{Dw7KT6W*D?W3=nHm<s%lD-g~>@W-+z5O9wY@&hS+qs?k
zGxI9;4dV~Z+=a*<C@Q4>{Lxp98&)l^EMLCn=9b;tm{;LzF)qWchGa+dP!yLB`7+I7
z|4P{S=v<**2z(TFG(39oYXYX9H8I9X`!orTP!}g~fb(nB7cE94AD3A<<&(ETo}}@%
z8P4e7p@gIS?!2#p4}_0<N@p`%|8um{vCouf(~?t|_`H6pX_W=pHvD@U#Hcnky~>j<
zZ{t4Guprv3<Z|`)r09&ciX^Ao8I8UU!e3$g$j4whdj__TJc32qaBPt2n23k9P6t<v
zT@TnZoL{H<$ztL*E*9R^iSGuYn=7%e!k-+mD1x~~aWY$YH4vm6zUucwjZ;Wnl$#-!
z4-qZIIau2XJnsAuo&({5I)&61IKIZ=c!&DfVxvXv&m{?!&o4JC%-p{i4T$G9&442e
z^<6!C;F^6%BKPNf(T9ZOeMpjRYB0Ln4~8<u^FAbDdRu8pb?EhuREw1lJ#P*A&D*qy
zmlY6q1HS7-fZiN&5HJ2AHZH|T^ktzaqwvl563_qQE1<#sycpfVi-Y{1EqlE$crXZ$
zZ(x&dlQGeXnv732q9(yg_!Xk$vO?tGH^?|E!UOf0Y>e5B+I5>PX~>l(%@XwcFEg-D
zmV@zAugF&8*!hxi(Gvse74En$#<2M3=mZD%AIjp&u$WU~)f8oRrJF78IJGQ~`y3Ae
zMW!_qofBnRZCOsE(V2y0?H76*mBBuZ^9cwZBNXq%LRqNbWC9-2Xi1HObz5DTkY{lk
z_$?{R|J|-53zY_xKY(K7%uO<rf_cX1%8H4}K{;S@Vq&sf#(3^mAXhM(7zM-N4@jSx
zRZyLBUAVTHFm0EalQCV1kgintjkLHjLG-1ar<W-0%JC#kQY^h%lc1Ev8J!uBMtqcJ
zgNqC!g`(cD`nwr9N^r0vn&s!38|ewu9ZVhec;lm6ASYrJI!5|gkm9B8fVEf9TAdoG
zKTc(|TKM@%8vLySCO|TEO0DuSCH&vQh24K2i_$A$8>c}DX`_Z<|0RQr0!8O<I8P1X
zvKqj<7>8TA1K?L82Hp6wNS)5TlAIvkqL&$kKE`N+#+J&K=FsJ}7TF!%mh9ZYHW%}O
zJW6Iv%6FKO<8+YK6^ZGM-uO6cl?wazBHg-JPC*@WoNxd=>~TJJ>u>ZHYCJ0=5{ZM=
zXzab<p9SqC!2QL)o$h4Lq4`NBxI&kK1=jM|X8NyYXTpSHyOlM?;utahDgHw01br5j
z?T%GU<!X~H<y}R(RAV`Pr_pxlL1PSxO-F7c$5K`?uf|xt?+ZO;-MA6ra*5Sb!(|5{
zjwc|F8i?a@j3a`7BX7d`v0nf#<dnF9Juk#l4!JcFoJqpat<j&qawdtvP~jUUJp>g#
z6Lkg8H}De2p-IdHaYDGRmAm1(i_gmuD!*4klUf@p%G}!sVKa}g86&)cN0iqa2w}N9
zSh~3pSI~2iw_hNhW8NO{f7i`(P{+nl?Xov;UnGJY2tSMACi*zeec~dXCS0Hx!e791
z)oNBjUY5l`88CFue{k@K-^f~rOEI_AU{*hH&XJ_KeWW2q{U=$B#q@<*^B?{%@^er?
zIjxfEQEU?+xV{OwbI7uFYc#9qC`VCxN3(pDZm&##^Qz<$x2e5x<64ZvU+E(dx8-oo
zvq!L3pq3^__EXJZozN6dD9lPTRcmIkE>BIevmh&#`<T>gd>5GX5jg|B@phMeWOi#Y
z`ULHZ0%K^3>?r0*JTUNM2>yME_R$o3b9Y=O^xwZJou=z26QzZJ*_#&}SitL=HQYSX
z?ng0C2?qHhcuD(L$6J=|KKkjWjk|aAW#+>&D*rB22B45e7VyHd-Q{0D#m(EjyXn(U
zc{|(Z2gm)VaT)B?0HRm69sjP9`}ppLPd={4WgdcMUKh&Xn+D+Z?<*c!*~WeRNyFWD
z*JIrO$fc1Z{rB;AO+)QubpMXO;_=4>Z$oNYV{t-4absF)gEyhGC@0J7&B`g_K1=VP
z9~+zBKRvB3H#Ro6E-kaTI5VplB^x8|p|_B;*d~kvcGe(gaferdcbE^j<KTIoUTGOv
zq7ar@#T^Fk&|5(BBJ><0Itvzt&y!6~xGsft<g8k>2t3anNAKSSpU>x?1N6F{oX;hL
zG3fs3BGAm=y|~Qnp$-0%$Pa{pdItsJf`2Ja)1_1c(@+!DY#jE}f&~W-91zP>94s&E
zF5g`k7vyn&g0qq*{GC|$xnwvzip)bkdRckS#>W1tyu{rwX{|O#v$7M;bFuU=@@IA=
zzRMkCO`yx!qzuiXR;wG$tZ+`VT2t+sZ%b#DGDAgwkZd%QW`E=J33qb9B-%|4XDh<h
z$pAMXTXCImp48yk8rB)70W7zv7A$4Xpb1$rLDzA2c7WM@y)3<!{GOd8)Z5b@fa^9=
zfv4Vp0e}!r%09!n)!=VTCko_d<2_Jpuxiuii+Nrhpl_j4nS;2WC=^YQN_F`jQG-uS
z%t7w6c}I9zNTAQLLoq*-O|HUZC^HOwj!U|Wd-X23B7A+`*)JNoWn`gGkRAU#`W!hI
zm1j)JP&SxCkDfkv`Gvbc=?->_k0iNijo)z>(fIv_UQU&=s|goV1V<ps=TS`TK>0j~
zr++ypJeLX2H{<6e#EU`COWB(s+}q3h{PXpp?*oR;rYhM-;9UF6e;>rH+(-OKP_UMJ
zh#!ULRFCJI@$(Ym590GoXcq^bd;K>H?{7lS{ayYG^qnX!Hd%8S@ur=-6R!P^<J$$!
z;5+J0iVyzj&ITwnp5z8KD+70tMQh|)Ei?ML@~zR7LTk|vs8e3Yt(=;v%t#rqsncj7
zqwdri_pCOiYn3E4GMY8iXP4ivn9-W0P)vx5B0<w2>WQv1ZzZ|u(Q3+M9I)b%CuwG!
zPCj!k-*4^Qc2*B@YsLQDk&p{U5{e+ik;FItwZPdEYw8^7)h>i+&+O;QlcK#sK%1K}
zH5-4KjPT#CP*zV|*-%lSr!;1}KE2+XELVZOTI1eT#&n&Mv|Fm1)zoJ<b`2_@DJAO&
zPu5r|bsfVuj?FcWRmh<+TQIz4gp^tm0BEPM%<}MeTSM|)eI7E^Ck0RSSF}iYU;JC?
z<K#N#7@m=XS|Qh&Tu?1!Li;}vj^M0B6XOxJLADF7QgW~!@V9Yyl4F@&f^8n$PvOj)
zxf^8J%|aJM!7iw;Q{Dvjgsu&!|6G1SA~22ZbTxQ5WOaaW*vM@szkxX9VvjB41PsJn
zib0n&k$s2qR(iu=Mt&nBWeS~w+cRqYu=IYbpSgbaJ)WFsdvsEMqqqLL!CA3oW2$#E
zfM%6ZU>4`qlXrx{`sY%e#bi)&^O%C+i~3JLzNvLUQFTmgd~E*cb?x~>$`eymTD3+A
z4s8VcLa0G`%YUMOVRm8<2ech8A%u5=mQaH3HKNd+^pB*@$jzR;b5hoXz3<HLx2P~f
zZqX_1ZcpN{P2=*Mjf;n@S5Wa_gYVh<P9LGZWIA*%BiBF`jaoL~#+NrW#Kq0js}*WR
z;n<Z;d4tQHgW}`Cqn8O3QJ+{x5cC0@k6g*yE~r6dneU+fW#pzWKDC&eN~apSq7C$r
z`??yb6X3J^?t^r|X@bs%?;)vhLLPf$E<Qjjx?zAbXyDA1C}=GH;iMhh-l|gSHQj5D
z{i}`fYEZD>W8i*LC8pe~JKS&1kWwvY*MalQ=5@#Q)EGveGIzknd3#+-r^WYjDoNW+
zYvR3axf`d<--`9eaM->bwvX23$ud^P$nalENcfJfZcr|#LFO&0BGDgU@Q_MSt)=3)
zzefw7Ns}6ukE@6x6Z8vN&Cty!uj9^VKCPu~_eDRgqipxJoT6@fd}V_2{@Wj48LzsZ
z`zUMZvX*FT&cY{`*MKRbSH&p@Zy&Q7{w1gKHp6mm7pUkZpWM!dVRwsZ;LK50r7}HS
zJ~?6#w-tORsV5{0+?KLoTVfP09GC$`Gic!BIjnm#G!NV$ZWmd|*Odms<fa3+b1w`7
zx0!o{-$=KYmnwqL>Px=73A+DYIbR-$<|X<to|mexc4kV(Yl&>&)&dq5@m$kP6*X63
zh?)$?w0^C@vhcf|eV)2Ja^-p^iZQG=06C(=&oW--ETI-M8k+bNq!2F<I&YaR9yqj6
zN<17>k%`qS<(7;jWxOSGY}fnKauB+kCz;G-)EzQK?VOzx8`e}Uee%!)S>rMnZ_}~=
z(lTeY3WcL&T%%bH>U{TiJ&!OPp<)ciX77+4^J`S#(kLd0R&3wsUCrO;ZReKLZm9ng
z(RnCboxBVl72%hd!w^22hm&r+7HId&m|9HFuwZ(eLaq!M>Mb#OEiaHMZgdT!*ST88
zB<od(T$KZn`z|=z!kBd9GJrzE{anGY6v#=7Nwpj0T3K@Lja3uplYnB`DsIeF%$JRm
zP&eM8Qr1jf)dVMOQe&~}Ga8HC@*Yg#5<r>Oz&&&$r%20ps3=dKHd?D6nvpki3TsFz
z%>jPCTgRwSw@$)y_80~1aa-}I8pxL<s8i-J_n<se;0WRj*ysN?5TnfhE8WFEljNy-
z0mVfl-y#UH%-3PdJVu_Dl=(7jna9cJuUOAP@;OPFOU(VaOa;N`#F{9y_4*ad929Y$
z<NuY>K|PAfbl@_N5(|VfUkGKU!7^H*Od2lp7>cKcasFCTMjy7!LGml1OfJM{A72KX
z#$^r=LxeKu_B@ioN!;ViR^~BiZy?<e9KS1&G#AHyi7rYKGu+E0QfUE+-syLaUGnO!
zZN<~>8hiaKx3!TK2_th`I~q#Yy>my~!q<S|f%Wg***5mkuWvS{J54DG#yEqDQPJeg
zIY(CX8~4O-_sluEqHg?=-!7lC*awuBPDushANg|A3E=s7#rQ|R+PshZ=Z9O&Drag=
zY(k1GO0MSVYxe&PPT=u&j^Ovwvat?Mgg@r+_Y;$4PJ<8(7KKgXW42P%9D`3=vRc1N
zw@$xqz^MTr>p#|guKzrF&mQo`#&sLXGT$rkgL?<+;D4ex_$Xf*UssBFHP`~{bKui`
z53f%t>Nu=*h)SDZCEqH~>_4X15Z!cYh~BBoua<8?0I$()DB81!e4OrISvjR4l_JOa
z2FsNLD&P;doaO3q9HPgmlQd0eB{xNc)AgRcA&L9o>CqXlG%gvMJ#Tu`k|Ei1fgJZk
zV|nYk@dbmno|)5eb7yhI>>VS3DJ#h;_QQ>XZaO@E>n&~T;osZ1iMS7@rqboJcTHIR
z`D2qxX5Tw`-X9-WU{N{K^Wy?N0EjfMi){4IL3@i9sHuubgWC7Q_64{Pp5z`PY5((h
zohas>1w-TG6f-9ot*U2gjFz8NS^)U{mwlwhkM}c~?h`J}ui7}{v`4hggeuOjRsCc}
zS1XCZTnnIZZxc{Ix;8B@T*0-VxP+X6sf7KMh-x7ylJx)Ww^vbK0?t6oQJg>IZHM7|
zFuaC)lU(3`4AyhZ-*G7c+r3}=FH-Nove7tGBMvl63+$KSKp{v&(>U%m*1Rc!oh}QU
zoXw&rxB-<itEga1OIf;UXlw4IF>Q8d%J2!(`50DnRu5=jo1u|g<Hv1NDhH|-v&kim
z=~|8caGX}1oGn|(CVLyxjoOb3vof2fT(`V@$%^t>+lK>PWoNzn^zp$D-?e6ZQC(F{
zObmUL8kO5#nn2z5PbMQPcTh<J&5voX|04Z1q(g`30D-KqeAF$xW#Ptgxq61@!c%28
zIlO37Y|1RJ5NK=C=r%j}4r8a&ZXWBh8d640p5+w-b1lzsv1&FzkX{>oIF41ZkRr-j
zl);DFDxY=7aLR!&r7rJJiup_J%$Br3V6L(vU?)j|pf5=>gU^RJ33l34+^;5rkJEUG
z+=cUTU8LS(wm|p>O!KkvB(@1Ja{DPQ96z1Xef<<SO7<RP^5dZl2NR^!+^zCtY>G4z
zj&K)C3=V_VKYtMq1!5dBjjVHjZ5CrxMyHl^R8~&x=bARo(d=T>afNY}V=5fc>9x64
z!^=|CO1&aEZqWGIC2b3uT$aM2mE$I+wJ&YU%n=V1&Itz!@%buHUC|h&jdR8&mbGQK
zG(<6pHBO2F_S{M*S}n#p?EuKM6^?=wv%9(@GpV^>kv4kK5bx~Kby{;{mUt3@a(wT{
zIlh~S;P_vnNkR3XPQoBJn<!0+PNhk+ea98I7xf!mnPD<$GgAii>z|aBD^jA7a45>4
zkR%MJ3dJ<wl~d~7sX3|oqV&qFIJvn=#9G3J?)2eE7EW`Ik^31RoX7fuiFntnKbDav
zNG-LR+)9v4o*w{MK&QXQmgSnrAN_X`iJ&>90?JG?q4iJo`+<)73)9Xv6NwZu*eGfZ
z=)~_IV^s{r-U>@zB0WT4ZuyC_BDn(|EO#D0FPQ&7ke^>Ok01-r5C~tyhLaL0AHy#<
zr86xYlTQtKd*%4MrWdW4J7Rjpb^E5LWrX3U)h@r~Z}l}%R*f;YWx<fPmBVvfwG%6j
z8xB^^Y|Tul7+u;lyTzlAQ8R{y=Dguc>X)C&%eZUe$Ol#r*IMe+gIMgyQ%@N-QmM)E
zW@Qdu)Bso0&U+GT$5&)F7TOcj6YWrbCUg7Y`uQ<*2ZE2MCRhPsvc%KEk|`n^$c=0M
zd`t79KZEE!Ei0yWBvs3e+UV5&bA~Ve)15<0r`<ZVc516PElwGwqH9|Juqq`z3<E4N
zx-t8{*nA2UeX=|ze?Ug7LJfsz?4keens;P*tvSJ+V3slM!)EC${e!8s=L&X1DbyWk
zOeCUp1hN~5yskH(++2q61gJX_$-|d;d!hlsiAnwo^nW1_64CB7f&+u^sAT^y5%2$@
zdXf>G*an^lpThF!yk;zT6KO5tN%{<K`*w0CrKBDuC}t0#>$;VX+Y45L5#&!$BG>y5
z`V1Jh6Wj=9kryCr9fU<=+53`PNo7F%;8N2P8mZ3{Bw@T*<p61rE%(~cEaVnYpwO!|
zj;uP*pyeGIj*=mT-nP;-y(ucA<LIo`wc`ux)|^^8s%fNjvHM(wQf0H->Q)?_-mtJO
z-R`pMs_R?I7d$X!-Nz4(iRahn|M1Jmi*VgjLEv0-{NyOCTBNg0j};8kIcT#H*=c5Q
zn>Zutb=hcb(ti}I6ek&-CayEuL`K~%u2kr37hb0*efs~pRiuNT7b$KHT!)Ys0`tp1
z)r`^9AS_6XXf-l+HFuUqeb`74>>nYIbwn(>jf%p}mqP4{cq_n^j1#Wose?iHEL;YJ
zFEnlNQZpTB(WPE|eC9QH@=Y?{lMVmX0yv-kv+a>dDznn0$!N|PI;ejvM@@dXh0&%o
zH>@h4zfg`Int3EuWmQk!*OGI@3(G1^N~-E`aiV;ca_rFT5fz%|W0R&$YCbb#?QF9u
zK~CD^Gr^Nf7G-oS9|Tso<5HF^nl(9Q;+7QdW-t)A<G2Oj9Y-cm_%49A(`zPfO#v&*
zpSp3)E$g=2^v4rZQmgqr$7=2|>K#aPIJ?K&)9#U2IWm+sPV7WPEwp=PdZFD@o@O4_
zitPnc%Bap+#cOZl?VjcvGGet#u}7n|%0nh-B8a`IT|J^)V)m5Hykq#~+F31W0jsC1
z=%aw4Gx}(tFX<TMZtH&r67p|2rqTXXC1sJNuriYbS=cM0wPxm#?Mxjzb#`&W+CNn4
zHQhKFQxAKh6akcEDz<n;1^M@(H`Z&d2MV70j+F5TFx(OF2ycD?0NyOe^8O^m;V8|Z
z{eOcbjR7AawI?zX&ON0l9I?DTYk)gWZc(X{TrFeNR;^0J$e_(S;O${pk@vK3m{1TM
z-E3BArq6ycz!Gi;cp<<Pe*B&HUm(vgmDmcTq&+8DFPH;+3grN8+e%DYl*5M%Y(s#D
z+&y}ZMSBRjsj+T{Q5F?Nr{vvOHE|wE$=GP6y1PH)7HIUO{9d&8Fg61ywA2Ldr2x8~
z?kxj(RQI029W+nDR|aFf36!Ai1(dQGoiJ0^QUAf&|4?2GVD^Y^YH;}RdFQ->u`Bko
z(@R~aAoWV_S8cR9)~ctLu?YqBSqY`F-+_PYeBLOaQ-c(Jf<|Mv8K|4sl+uA&X${VI
zIFp|GPm95&;hsh*=PVH8c%6znx1~v)qy_V%lqyT2Id@QLf=v(DtwQX2;uSIqYLK1&
z#h14P;@N`+kO^TA_^%USKl{z#Re+*0J?vj3z|O;RuVL6e|MddwU2YzD3B|aln#6J+
zbBn<zzzt!|{v`rz2R92m0n#9>m2Vf?!bJo@lgvFtIxz%FA|9Q5u2S5a@RwQq0r=RW
zZdOLIE=Gi;U;s|(D!yBUU*&&rGbSgHxqu|)I>r5rQI#7{m9P}6k?mwm>T%q~30k^}
zq=7<tKxG6kLD+Z*)6rE7h*BL?8OO{-uahJxgRd)N@*GqNMU(J#iX!id=Vn{8%;qdB
z*rnFmx#>A+#!L&?q0#wfS;13Uhc>~%wOY5L-xlyxf;}OgYqg-)W?3`M=1lln9DK`?
zVKQb|`1wAaYa+V*XYl+w=(kTWtek5CS`1qkfN?wEv~v@R`3D+(Z}4_tD2xCgj^08}
zhx2=s#Pg5>CmeCu>ri=;dCX+FsMZ1!$}RTuf_7wdSl<*XBa9E%uFyjnK*%5_b^iOX
zUuj@Z7Wq!$U0Jejk<t(~j%HCEtId|BKi<#nkSjOPs0Mn20m$&0yoS4v9N^y{K5kP=
z{aBBNy@6(Jd2V-6l965}OX)w2yDz<QVv(~1or9G)izYUv!+PSmSI80mdr^EMCY;yD
z-hQf?Y$EURk!tFvoW&;c9v^9EMNf~MR{V+Z@^#Q#i2abCY9y_E%nL6*Yut~0f&f>p
zA?YE=Gw3no_yZQNupkn;{zh-{`}y}MrwR80=C4!3d2mPUhFwxjYU!;2^@ho^0{5S9
z4s354d=H(#U|z!JpthKX-kIv-G-MfkkKUrz-m=(af#o%@e2P$>&qjlTPT4riO#z=J
z(#;gy!uuqFuJ2*_F|d4Wpnm+0h#o#Jf$fb!?QM7hR<SC8Y{!kTt`~*YpM6%V=J9^^
zS&PYpeZRWS!Me8zbyIw`Lj6LuxPH$z#JSa|{v!btUxL*Rxl!bzT6^*&M%ZLIc@p!}
z|0vi-W|4DoJcuxX@QS=-7VGlXr@O053gR5;vc+tYw;?^Xy12k@PiM&)NK4w2>{(dB
z!!Max{F#WGyMyfX<9x=Vf1z1CCG7n1{=-X@MrM*s#*YBybnX&hqnIr+6$Ae=QT$%h
z0W#bFG?HBgxkd1fO1!EEjrC(ZTG_ImvOBdY1B-6D#gdLiHv^65)vSvAS~eA~>n`DS
z-6g_G{1xg^E32YbL%0h<b_!395P#+KR?s6UGc%T;NG*Z#DI=Td0pIsDfa4MSAW=eY
zxHdXNclj@c_%Ana9XPrczkfYPlc~@`p+J|v_P5zsZ~xtQ5gha%g>|z2n%}13a#J{h
zbopO^Fr$CKZyPbp3+IM;#J3Pu=%0S+4CW`v?Pdl*o#Mti#o(k|VU}D)IHC*+_U<$=
z1CE{^<m*2u+uqXOSw1*7r8d?oi)Pi)F^1Ii`kL~zBd6QQQ*F$yOVh|(eG6OkRoO|U
zsV2R~8!d~HrPvegQJa}vz8lGPd`=dwi~J*AKOsjGlKJ!-UeEUP{{*&C=OAy3wRo?F
zm`wf)^1K|5(@hN8YkS<6Am~*atMI=pD~GTHBJ41f?J8XEpa}aDs~}#*<qid4zDx8r
zA`8+_5r@Tcv9R1!8OjU#gb1_1a?QBh5fN4d%dN-dj*2i1eVC|ZHlw{jNqutSCiZIx
zdrEBAN8dv<Fv|&wtrN?|uzF$%dl8m9F2bVew}@OEJMU=`R?8L=ZR{QhJ0Zey=&b@B
z&xo*6*zR1J9>Sg#VbkbY{?AdaCgP+ByO+5L4WYphc1nb`LH@mr`S+X%>tq$cE{lP%
z=OuhT?th3mhE}X1>_axj|7RKU6Fn=^`#!hZUqm2Yy(ob_4lNxuguTSWpuK_oLR0(f
zZ_x)|(7yOvz%leZv~%u(vXMyeJHiKuhr+@S5ig@p0d6DYgc;@a1{9t{Wl{VD&S$Jg
zSu2I<mF4s9!4Wih9iw5i4i)zum2kT)j&1cl`*2jU<qq<>=RRGkbg0LW3`s?;h>lk-
zy1bn<knOScY3T#vd`Emg*o<Ht_h57^vui<=@fJqL$P~92qkvY#6UtZs&!>pLbmI?Y
zDgZxDye5I~5#c9@w<PrHMfkJCn-ch75q?TqUS1}`&!GCDPQ!30k8&LKDm-_3<3%LO
z#WtCPVw>OjJ^l}2n}2}t2d~uTto4kV)!J3ux0G|6EskmRJ@c?U#j-8X=76-cux)Z%
zFg-$>;5>0b!WX*;e;3n_PAdqeNw!yzkNm5UkYv1Vj3(aR_;W5qR=~xd9r@9Q<$6ba
z-^6CahYmW{af`_;;0x)vALE<Q3%)qU8lH8TtCDT*HH*jc(*2GY)oAc-pXD6n#nO%s
z&8AyE?kVs*zR%0P5%}BhD)=jg)70X0lU{y12EWt`{%?ig+~H`*sBMuk0}Axj%KSo-
zvM1<lCLJq}qWi}GJ(k#p>fCyLW~VGQ#^j1pL`BI7u`lH1n6@GusUuQfgxssbCb;3M
zdIlI7M_#|Q?weOr>4f}#sp*xT>=;v`RZAxHxx2_c_-<Aze>aQ2riE^7`QGc<eTYUh
zo<#jwel;32*ysMLdhHcsLb}<U8gDSfr<u*^35LG))h}OJVOc{$x)oh`HzZ^R#{OQp
zLmd16Ky!nr6T9Ib_ki0(_@_PK;v54$55O^x0=n1*b@5w*?)ffc4oZv2K|`3OVlOQF
zA@l}A#L>Ar%$*!jCms~>K0$l~G<fcj&M|LDo__&ykhLJ4o1mQ`@PpX{DGxI@F?*%_
zlUc<1;4JYXv>>63`L{FIG3ZVnLuj$Lo6N(wWGIss&nbq#l;`Ag;<_NO@EsT``^-fy
zx@_oO(?M1a&nS@mCFT>ip4){k(hOe#Sv3Nrq3bjh_}8Z6paLxafM?RluHl$R6?W?!
zxB$NgEJk;2#Chw4h<}kkH7vZ0dp#_?oI5I+yPp@~75*Ga`O_lYE5M(F@LfFIkKmO(
z>hCUJ9ijfJ9`zp*;l&Z)CI0FNHpXiaY>Yn%^1f6$$1?TcO$j`}2N%yb{QSMJ&oTdc
zd5-xQ{9L5h#q%@d{nO%eZ_xAS;PY<&x_JKL=kJDnzxoR8R|VCN?HZOt&*f<R=M(Qp
z;1>gMIKJKy>Z_3QkyI1!2jqZ#AKS7FZ_AS3cEfQ$@$eJm&)9~;a0cCFv7*}<SheWk
z(v<(ls~4w?8mDpSxx2^_BwWlzlj%lZDJOqJ>9%g8#!x4tq4M}4soL(lll*~;+s<is
zf-SuE*oE8bgfvWpZ7ASsJiXgX#ff5>3g5jw&(B>>1KHGu!<TYjRc@{Ls(o2|>Wa1c
zc@Ip_Pi~yov>Hb)<<gFbu}bNMoEjx^nKo^ER>zXY>P3@UEcR{lC+}NYi&spOAP!Tm
z8i$5KOWPvhux8B_aHv|0aJYRz00;lC5Qo|Dn+C3t@+COnywC<uAk1rW2p-5AiEInt
zV*Z2vRco7o&X0fyMksx^e)nPlsiPZTB3DJg2@Kyzof3Q|=qa*jC>t!npG%$r<FSv-
z7R)mN4(FtUypILfC51De5_j`(bnb~|k3aW31ak3ukB8fc9CXt;x%=SP)!P9v2r&xC
zeUkIuasPR!_rqZ_GsG^~7C7#mx}cXcVP;uRLq>{!?N#6(#=-sS2pAGNOZSZec2n3n
zTcE=t_Rm=`3POQ+UY*l->aLEIzM+lv(LOkz7r^;kiEqV=zDO3tM*ein&8PIHC1+9m
z4OkRg9HVQt;Jr=iD@UsbVW8Jha}9}lgq6l&_T?4q8rKv16))G{k7j&e%E-c0w5=*g
zN7Fw2y;6(NE1!`~-J?q~LWE<YyOuV$brUpX;GgVPFs9|%nV77&m_ld?{6EE0I9_+t
zzrk@Ch0b>Z*VD@&!>GQvXJ|o$%|hz1-ez2c?z2DZ8@2e^Rds#y)EM^B?bfi{imZdb
z{{HLJQIj9~``RnGY>b;HuMD&ANbtIzsf6QI1@$b>ghjG6)S}KnraC9(gt}G<LIx;P
zx!{l74-azDN5GHk-@j|n*`jH8j^*Ci3OvYJwKjA-Qh6u1_ddLy*){5+^IK;hURHB?
z$LIt9p*Kbte;6-Iz~>O!u*Xr7ZP-6crM`$z&mQvsfZ^Xr;ZV;8;OnGt)<B%#;RK;D
zb;F5F=FUL7@|Pv>t;}jH7aE99BZTWvM$_bg8;BEokptdy7c&k|Kl7Kqa%-!1D&j{a
z7^CJMt^#jC9<?p_1NW~7IQ`&b>SOJ9L*jQMHgNK}zAlD@T-k&fMDCtT-u{2nrZB(N
z;(19a?ECE%;jI$*A>vVfyx{US2({yzkTR#RVNZq3N#Il&xNP9q3UaZb>#ZYHuAwbt
z+F=OJzMa$Tgys-Xgv>2sTaKP>g%Qut#xg@iQqme}iztV5Ew(9@!hYdi34D(TKS4Yy
z;h$cFKidOt5#eWv`}p|;!C@aOdr}mNz64iP-!S;zYYd7npd>c&yMEl={tpS_chni$
z_s>V*fdGd#Pc0rRN?|O%AfeSR!rvtxm(=sMSkF@kF6f|S*<LI|?kh=A_jX_?JypGJ
z0!9|C?u|c6!2N!RizyhF-nRNeaq*q*ZG%sW%xmHI^mttM$-cpSDZUb4B5&jMg-^X~
z-bLnH_zgROhw^fWcLw%Pli+RW^A=qw*6da9%SlkDynWn?L--@P7Ia$PmG~aK{ni(5
zza6~k7MaH(8*SqFiV2J(W{*@Sb?Y8xFM=a|0BxGuz?r5%OT<&nU`@fDiEyyVEs?5_
z2<Mu+(7s%Ue>?p-v{Na#21>xU<j^863V0wYD7=K1w@HOu95NHNkF%HUxxQ3MzQ(P7
z)4;v`qZKnVY6><yOKzc96|y)F;>L%QZy*%je|6`8mC(A}Oy8)DwfvO~@I!7E`LPLV
zv;d!O7vU%p%eTZitizuW^x6)oUV}D6U@iBi6iyuT|8OZmuo-J{oDZ+y37#VOe-wH9
z#&GJgX79RnYqTo^AwjrGNe>*0)B|f!56JYZZeF`Fxg^!p-sJo7O1**hH_qbu;e^PS
zIxY^MQ+^QyFZ1EJI^5eq@NypRNALl7A4f^!{WT8n-*KNpcnuHd_t%7aKEU;y7VD|@
z@%xzX;(88=^%Qe<3_lkHFX5(0<`GVuU-DrOcFR9no2!Mj`Ac9tzb0jp;CS{B{lz<)
zL2C<lAb+|<A9+KU)zl!cyRPWERksda`~Hsh>;4QZ`-W_sH!`_g3&(L`%gpBGZ)|Tb
zo4s>v!KgtENvVH~Hj<z+^tj-#?<04q+c0+j*Ec^4JRjW<mtU9KYEo#_Y00tU4*&P=
z1y8N)r!vJGL7hoU{UP{lQ=kWpa}94}fKs9xZV};UK|jG}Ud|+8A8Q`|GN=sfH3)ne
zaCLkMvx9yOjF}x~XZ>n8Lw^u#vWYw>7im2NYP)%Z?KK{L0<;9|S7t!B{fa$4uwREe
zr1Jxw9;bPajxf`W;N!u&a|E49^L82bEm8JtDX89_wP0UI_}*ZAzN=O7mR>5f^sceK
z9yB|8z8P+r*RwKh7$dqz{SnSUgf@|EY6aOe3bMHc(;&dXdEo3Wk8MuA{Be*Vsi#7O
zKLc99!@N#|^_&R6MV<CZ5WLKXbv*ayAb2?s_YXnm)Ohb%i*-%~uhWpOW16t;(gy1~
zrauqwq3hnk^`92&uNHJ>aQ#(6{cqs<4~g(%&Whn@g5V`wgD@8@mGX_LC)K=e$M67M
zE}jqF&$&;6o@0JUp8q-Md3n$0{vq&rH~uc3Klr(x=M#D^^2x>Xsrxziclf-UUoOb6
zK>aG7Z@B%_V*8kHy|iD|vwn1c1AK$Wzn)*i`1=RshEhu4hx}9U_#X}bJc50eOa$SC
z!yxp46*x{mar$pzMtkrGN9|02^}UAIID9)#`T03(JcOUd^321J`^CA8ybbFm9)7|<
zL4-epbvzG$)<08(N8xeA!_WH11=f+^4ZM4gslYfh!hHWZeD*i2KlFnBaQQzJ>UyUK
zPB#SBkCE!a@4VRKomnEh60iC6{F+ao&&6%Qbp_z({ha~5OTLWxZsuDFb1aJ+{w18o
z38Q5oozT7@+p%4&=j~$uFcG(hyLrj%<#F?G=H8UzMjYdIUrK=GN5LOnd6NK#_Mv|p
ze_qS?jsF<t&k3=<I!=RS_p=~)nGc^Ia&H8|%XzpT?b^P9WtoRpaHhbRhviR;a4!$%
zK7#PqdAOi!`1;=rDqk(sk7o6E`1%E16NBMzAvo44dO_Fl@SAZxhs1hH_;xY>R`rn4
zK_dKE4;h`(yZl^9w%{CXm-L5$EW-QT|L|X+UW2k?MW<0f5~(9#l!O_y<N|H;lD(6Q
z#^$K0Xrt2R%&-@XY4j+sKXpEIli=@5PTW|n(ah1B;c!lDT{(t&F=TAxJ69LTuONQb
z2w0E{wJq1*Ke=d3u7)%i6*10?IHApOE%0@I1ZhKid}v+dl7-Y-1%%u6RPhmWc#14f
z>W{XaYCA%1dpfw0lN-r3zE#3}v7F)eJB_>zNE{9H2Zkf-hZSPpr0_v+uu&j{*e?U*
z-%?X-$r^Cvfn<l0+oVm+Xm3CH#HoQbt}GL{V9IvvrLwa1QHgQBktPFKZZrAjLW^Lt
z!9pg)qAPZS-C>fUh=ypVS*$r+y8#oE<Q2inTCo-1%c&{WWNk1W<kWzkkgM@-b0Xie
z@6K$!!r22UQF-X~g3XBWDi?Wkh(CYFwuyvi;5_k<z?q&D&U}jQ00iz+<9bZO9J3_A
zd&xa(l6ZMGKNg@gQxG4tS`lI?@NpC<YOcYjZQrK99ro)x`gbb!>>;<|uH49}dAxeu
z+dfZh4B$&m#p4vgT|69**BJr4rSCDH5?cc6T`7L7VTCvz*^}Mn2?O;WKgV%*GD~o5
z2os0kQ>oVivcxXo<2j&CM0bW*?3)kx>wM_6iC6Ea<2~$>qYtg6qFCQMG1;+Zr;K|9
zkmQ<uM{c&6HDI(%!6=L>vOphWLl!3OGUmo~EzdBUsGF=g#>?lJU1~$ua$~B=lxn1I
zGOGTs+voeAU4r}HDy%&o49Eq9TSWL-@Ib)!#rO(vX!|}dS(B7OuE%3af+&FK$Aa$2
z$pem#wZy4?J4lTDM4MSf&LSytO$>KDaOQ*v&_~k^MwjmLKbT!A<K<^9>Cv<iJQxV0
zENRyY+f9woZiE#=cm%BB*9u_~Srxi!5b$BYg7_3h!p9vUo_a*2&R-$8dL#`086na-
ze`dHG+u|lc^1|TRBLY!G<hZD4rQGO>Q6^X`+aqCeNv2aM6N_4lpp+(yI(&eTGd^tV
z5gUxu1|gA$fxXC~q5F<jWTI-iFK<Qa{-*+$x+LwIVY_J&`#snbK2qy{Goe7C87MYj
zhSi$sGDgC|7aTH>6xXJ`;1S}HACU{iA$z_N5czFduxlkRV_gC+wurbmWzLB0cfE}x
z$V6=P{RIN=xgA0~?uhM#+>wh+_17Vn=OSV7t1swM9p0akUypIgj)+S*J1inP)c8n7
zVI-`&YQq|C6q*BN9ykXg*{Fz!T~Ii<*bs54i-0LPG)&~lfAv+CxiO*PC@X{H8_(}Q
zF<bF`70a)cL5VQ$_k<q;d@KhZZo_v`N&>zD(j7xtP(GT_(-LOuf<JLTJh=Y7yShVH
zy%30O6^L}z5@MlK`6swHKUzL+|CgHsfvav2!dl%Ugt?-w53^4S@x^O#o{p!)eNqI!
zD8i3}Arkl=5q?65fx^?R7vax>MhQGdgg*~bgniYYgt%YszHq5eJm~`mFitFNdm~=!
z$6n^w`t|58$p0x$NRMvC`_Hk0ol_v;pIwB%3+f1z=Lo@{m+ckgtlzasTK73|pJ=J=
z?dbUG#ZP*dM4<D2A+~>?=;`gOxli=?p6%`Uxeo-<Md6R7MS8vw`e(?s^-tvU>TB$;
zUXHM@zW*ZKMd4|emt)%Nac;gV(%$zo@4k(?t3C$r1NqEDeLWsWJV4`FoCgM8TmJ{2
zn_pwEe-&(2U437N-en1z>q`4VVYro1Ur2I<@s#Vs=)5Up!9?-#Ch<L33sHwo^t{e%
zj5<l*<nyaZqHEhV2A^aLXIy^$cg3F!np>GYD4AO5T+Hm1&guA$O)TECJpsn>d$wp!
z5uYECJRb|9u}x6Nuf_3mi#V5`1;ZrpHze=P=kMl#5#9C5TSa`<OY4(U;(N!z2%zWN
zle}jZ-`f-x?t-@0M&37pfA0Sr&*LY=_v*L`4A%w0%Y2{mXYN7pa^Fc@{;wE*T7-MK
zTnv{%_!b^6>@oix*Yjae`D&q_Um$!l-ZPH%@q5Ymyw!gamp>$yFX8$}u)SI_JlnsW
zIfHG^IKk$01=fP}NVo=2;m8SMfH%SaQA6VGLb7`3+7a1_b<_L5-2^fhK02qU>6W){
zdb{@I6XfB7v1?jN$JDrdkCNXNb#5KD;LN6hzAs^o|BH1Cz6c{RJq}?{ag*qyFcQld
z4?jzwY(XSZCfxhb@%iZjxZvv!J@CQKo~<HI_A~m^_8xf6->2V~-HqEf8^4w!NA1`M
zR)}~^2;jkZp=3TR;fWUcoB}=rDUMa+b$clxBA-R(W-%^QbpHW7XWmXr8hC>PVX=Ny
z{S6%hhhheOm3{XFo<Ho~M&LtO?EJ2JTf^ge+yjCBEx~t9#6Cy~?g9@*CLn@0ZGF2D
zlDdCxQPZt&-t>0j$tO-Z!9GOjqIJFl<kv-$w+vlyW^)VoBeRS9Sv;?z`{RD#_i7H|
zI3<(-x50K@D5g(n%QAC!_;-jyxGM_TL)VVX+PwL>I$&71e@<b+q??B)m_Xqp9s_q#
zotV7739{f^7$=9%a)&RepL3n>@8mPNBUiN!-*J71(d_0!!yA43!(Sxi_mS!Tc)!po
z?BO4i&=?b-k=Zj)O1oZ!@0}xsTf}<K5*q^hk<$9XdE$uZ=h+{xi=4u~@)3T0B<?$R
zN#A2WCBDFLwf_RGz`Rf7dEd$JF+e!=0pxuJjsn-inVt=wL4XzGWQN)idzD6wKBa6(
zRdr|oq}<ji)2FoN4p?_`(ds|d)XJ?ILuOrPbN_h*({o!pr+2pIRxdp?d+w1EYltO5
zpVDYuX|B}%V+srEJ?^yprs+*nk8c_zMsaMNQ|oQaPfp2gn%y?y!4*wI8UYbx9Z6{$
zbhWgFu^_III6745u7NsI8^*sz%`K-sVD^iB`f@-1EJFe5eh<PcuDVC>RT{Orl(L~!
z)sursM6oz|66dz2<+e_qF&U9~aP~Y%;?>g=kV)7-77_omH~M)vw?#@9IA2PLGVGD9
z4#1hMb9w!N>iLHpMUrmEx$3Wq<}2m}yvBa#KI&sS!E2EQ{gpEi2KXrQHxZm4!E2cN
z;WNZ<$Ub@t93L_w2K$`34A4pqBl+}FZq%NW_i`hmY2`Cv2<W;@(_Qz4^#dU0LOr<!
z>!T!IMu+k;ira>8S$E6QW`sJgp)9u>mqjzTtoMjPPA|R10ISK3;L@3ls%LiHcbN|B
z!ikzB{f|Oh$&2rCTQPP~c!CP}(28EPzi{7qz=xc+{bV-xIP#n&(}%#?sV}he>=Ses
z*9q?R-R4^i7IPhTD|v!^@;+^><?j^cA?_!O$iuVO@#ADJoC~^ni{^;+0=!GgbLP{P
zgaF?mg|h|$zRCY1<HB=83cvS=?(m0!A0qyP+vnjn!iJ(yCiDBefuyhS8yof#<f8Ts
zQ)`s7PR-JG-uveA8=k#BM?3S>EM;8N5;7%3|8K9HvvU+RqwDVF@9iEjV)uK?;rE@R
zcFwJ2mW1*1!T8|4#S~$0Q7(aB6ye8#Mgrd>!cR!c<2gD-*jtps2aE7igkJ)W5#i4x
z{vbG9le;jVQ-nP>DWB~k{9VEy#Lvt~{0w99^uo~U&_NoJqwI#T_6?8IK>=5^)^ZAK
zxTx;u*e@qVSR0jhKPPD6xf|0|jrOJbO4pU*D)mP9q%avSKe%#+%ZR*@-FeliFT?TX
z0C7H)cinOW*VA-3`Gf0e0nWWCl_zLv)?nYLP23JCoHYdG54Ybc*0UZMuuaL=|GEg@
zBH#l}QKkWppHzPQ@Hsh&IZ%!paQ&%*e)#~yZzKrWb678=31<~QhJ_y@`Lk>uZX?oB
zER`rYzwi+*_=zSEY7+?20=s{Dl0&qJ>^a|4kG%*rg-pY8*^hp|-R2;7!_HQkl;EH|
z$(muaGshT~ii(Z`+nF>gmmAhGm~PXh7>y~q%SV}AHe;6}rXs;v9z*?CABTUHCM1;N
zU%`$?0UEJR;b}Zhnk2MaMEF@U3iJF%Zj0<W%)>OEha}Fu?mrC&$qx`7hdF}It5_K(
zG71Eataw+SU%?HJ8qF;C51Eo1q>hh1NtSR&9y3PE0l_F(Fk5NTo~4+s%N8}cP_OYF
zGU`Yld9Oy}`ywh@0sgDi5dZ(T2MNdRVSc0w>zYRpKX^Fi9}hoHJcju<3&Ow0vXddq
zL94^U4-x!*OdgK*1e19W6HEpl@f8yiDm>)<^{48&4f||yvL6gem0b^3D4o{b+=b9f
z0TsTN$TDi2)#!V%#1m6!CoA=_A#u%k955{z0xdhR4T9k~w_RAwBH$6WQOwK!xW0p8
zJKy;>V4u;j?ISp}3%<uPmm!SX`@4CG$9aY@&UZ+7Y!~1pc=rZEQhtwE{si%Wq`XCh
zpCxX^eLD{0c{%`RyuPRLeid5de#gUweXJr3pBq%Z+SiWZpW}9)7vWWWJ;>7$mOmuI
zi+#H>ygdkB;`>Jg{C7+6*NgCHQKr}bg?{@A*0&bRZYIEM?j?B5?f(+O*Ff3TBD)-C
z>kEW+j$nT;Bh~V*yU5RsU5Rp1C8y^2iVV~rwukZQ8LKg?FVEgtrZKDNyCUpe2<@Z(
z%k1ty6n7uN@qSYXRuNDLYOe=v&d^#y?{P$^_xVt@-Ls{hgAvgLWqu8o`Ak9Pckr}A
zTUY{TJ{9ig<@+yE2k<#)7Usd@#8DCcZwdS$icbSS5&Q{Qk6yS(i6cDFCL=yQ5^wA9
zDQ0lGnK03de==v7%I8lSRFZH{-ngL+akiw6vD3WellrG*bu7B=;ZZfq%a@ID*?=jK
zM-FzIkV$SCL%9b`T(qwLPZe|S8p-`oJ-snCXY@_OMjhC>YOKc;)0LSNLwE3L<QN5w
z6UmA6{F&J-(sN9>pM~K6WR?fuY#nh%gulVmiRGV`!2gE%$itr@UYGFkV-bFm_(K3r
zH^{sq{4|2YF@Vd{6y{?exY$>o^@%|kFSsT?fMdF5@p}sk2nijh1Nee>h$pcf3*ijS
zdWC+k?_<x49UpxD-Dep{o@>xe<wam4V^TsH0RQ=Se7@eeLho?&Q5-azd1-(jK)wf^
zg4=H~BlCl&i+Wz5tFUi$QPOkpAPW0R*IO2k6`zEU0)G#ouuo($E_@blzU7A=<Owv<
ztJqmWUyZu9z7n>H!X1YHj?NomZ%TI-Ch2LWu25gA^c0e$Jwa<T>11*_eJ$O2za=)>
z<w@vqEH0OeeM>9YGXfvRUK<}Gos|C$CR}D5xix8N<++(QQ-Vc9PGjQpYEsk7ax-E~
zPK$=R7CwOZP)AU7SdRGs$NI~H&aNWb`y}JRH^{G9i!Tp83<vwJO|5e;1|5kr%fjn<
znq}`3_1E8pd(vo}f5P4?!apMROW+@h@J}RgKa`yS{IdWY^71KB|0ja;*YmRgiV_}}
zA1?~LuI!V<h1t^Rt7we~lRvpnx?^-`%7MUK$gT*`Ob<o6Ux0rh!d-AKd><6!yUeF0
zbH*`oj(Y*mag_gle<5{|K1;}<C0T~nTYL@=3Nyq4yaETjLXr|bO;CV2c*l_Zo=Z>e
zhk1~}GeiMS9ZyY0)Eh8U23M@tr5elMaX5L_7~RGh+GI;PHPAOL8*u<k=Gjr1L0&gk
zsYB$yfq0U6$`}LOSt|$ej3LRpj5atgd$_Ii5<D+g2lt+sc}YZC(v{s=ge~O7pzZ@l
z0vUwm)d9SFbmoj3y0Z-jbzs*vJ^@pufOe0re1cC%9O#4By6qB>E3xDL*2BIzD(SOF
z18@>Z>>-Ig2z&t<;3}l{0;z81$D6@_fmw>n=kRtSy2C8O>qPj|AQ69JIL#7jA_m<{
z1fqwB7a$E=Nfj2P7<doWK)OOQkd6uKAU<7jcakd^YvgOd{XouI`pC4b)|!H`%>_~5
zT=}HNeAU{=CZ{(4;+Z&gUiI|*-3cQ*XXf2>d-d(#9*}EWMwSn)$~8xu<(A<`r_Wht
zE<ZG{d}?#Lck{PTf*WS%wv=V1#Oo9~IrxN0Dj%HR&_B6pUK99tR>$>?vLsJ+Qc0c9
zThNkcUAVAvc(HBC()u-%E12@7%baP>XpOgh(1f8w#wFK|^pwmV>ZKG0<?h`^yUT8j
zk|Q3K3Hc`zQ3fGAZl1xsD}y?w8xC!=`Gf%PlERr!=i_x0gzpmaSk^?&V@YbIe#uBy
zp&+wj^fh$7DN+_oXZf(g=+L~{aw<13klOOe!x8dVw%>o}>fGC;392hKIGZKI@2#QS
zY^$;S<Y8J4PULAq@R?AaGm#ce76%(CW?2eOY-llrOi@&R!MJf#N+szCiz8$-><pQb
zo-S$0itbKF*e@iFA+;}P_Th0}gmJFwE6!n#+4_w1+)(X*MXc#V!J1#_gNayw^L_9_
z2Y-eX$eWkhM{4?x`W5lS`vWWB{P8A@^2DOp(?VKY3y?+;6f#<Ni!q)+5HfrSL8uXy
z#3Z8DS+WQtW8zw3M^yzfSz?4+S7becCXrtq4utoR@}+17Ii8Y0&1Df%sfpkM#8B(I
zJGTI5uteDBWPJxGknx^XO^62D<3=0jw`csnz&E0l+fChs^A)ude7r!O8IkgVMvM?B
zCLV@t+!n|ybN`q~X+d*G3?EYvJ~m)+{oJM$fjD|U&O_td8k!okurbR_R)slbT&?Us
zb8Cl?8Wiabl=HSb&o7kOd|pR-xh+ySw$FHYmozW1c+b$w?U2G*1F;6z=jC=`xDJiw
zpq#n}k1SM`h9=nc1ZUG-xxpMpi?)WztlR%^&m_9s!l!zu(2!iZWVVn8n8!Ii1ZNN~
z1#n2ZU)S+)d4Br`W%NCAsVW=-fqs!q?dB)3l};4({CuqE%P@Z*7kn8Ie7yvIa0+in
z^W{;j-4c|GR5T8<1Fp+F5rPe1WJMbw%sfC=R?Qq-s=Mc8XM)aEe9<#$%Dn2~H%};V
zR*hbKOZ&k24X&cwyIuv0ug`5R%Sukr8MH;AOO$m5qnFnk@=9uxqTLB5UvXh`zNK{5
z&T*}~w=Nx?pIJ9Jxpv;jTBFjW+;9t?<Mq_u;Pr_>*J6RLmaC&H%tGO+32O|qVz_$B
z=>1{W4~Vu+*w(~-$<|FEBz<2e_VLr>rSM%M{FzZw_%RXw!l-VWU_R8V8hq2I@0`1O
zHeCZx!pV4BH$7{md<oDA?Y#NerY_@k)f6fHr$zWXL#6P|V*SV3_<artrypRw!dMx4
zwWB5SCf!x@Ew|U*x@#Fiz3ttVAbtpR_q$5EL2sLQS4}sU-|K$fHH@%%5q9?i{T<ED
z68d}k@9gj1Hu|ob5h+)><M+EoqPP7&G+y?zX9PaY`kj1=xDoh2FiNhtBlx@d)Z6|b
z)<fc4JN|dhw!vG6*TSFR+4s(n8#TXsIu3WGS+Je?Ic7)?K2X>c4$FgHP3WG~|EuZx
z!I_Z>&&(MydZO1B)`AYAxNBil&5T=zM<&;sTb~z8SBDL;P0;=waBcN9-kUQLal~N$
zj1m!L3FOqpHU=cx?G>`!QxbZE7F^vsc3`HX#syU10eyNbro3u;#@e(3yMi8@l;|3@
zd+E#NH+0jBg`sI#&R(?q`oWdLvnFR?!i{JJ23}`mG$g4ammDZpAoAsUMT#!Too3dm
z)+Y{1DH_*SW97aZC{T=KAU*XnxGZb)Y#79|Mz1|;v<2o)yq}BbPG*B-PCX-m-xPpz
zJEU_nYY5mZ+?x{k|Hs{Xz(-Z3{o`|Po!(0_$xM=&$xPa$XC}Q9(jW;np%Z%VAOS)X
z1VIH+5K$J<T^q<E0_vjTzV2GKShng~*Sf3j+E7=>o&P!K-nqGxOsH|+_xJz2?>gao
z&wbAGJm)#(Irp6BLGd;Z{g8;(b<l3s;(Os9*<4vTpJs2$Rr1<RiCoJh*UYS|n~<kt
zR!~e_uFn_rn5dTq$-wCS!On*C^oGu0Qc;S{mQs||^Upyvx&G@tkR7qEc_54vphXtV
zX8=6~Jl+;!iTBtnh?fcbW+`B;41|tw`-%7HN5p*Gk;&!zIc-4`pNRhZXvyR|O8fe1
zjGDfl&puDpL}ZfhaY>vr0H~oj+dSeEj;p_=e*yWd;lITLKJIoK_j@X~7nhxoorg9A
zpj-@93~|UmFeQ<E|KfQRPG;L!E#c)w!U1dX-5cT`$z1o$ELFO<ZhNQ2O33%Hs>an1
z&NKRaZjF)9#Uxrrc8$tWutYHbu>Nqtv4W*KA|GU2IQz24N42YIlewvI;++f2NSdX`
zDdhy=sbAPsz>VzY8o{Y<QRmbH^hwBbld#XbUBv70TD6J)UJULPWJI!y<)Q3HMA>5`
zbWX^A5M*be>?d)QmwvJXaqonQ5d5DWZrzLwB>1-JNbuWr=7Sr|X?isgZ>wz5>S6!8
zM}JS?Sa7+HC<m?!&mw`xXpq2bfA%OvPtwchE?mb=?B*)L+3qmki~+YzGtW2quQ1<C
zZ7(i6L3+b&#>|HJFe%?r+D_VXk&TH&!sf{fMQ0~-YlYV2=FZH-(oHkl2*n<ys&Z;~
zJv3BOYjqgXh6a=6YH*NmY(t9Atv2As{^@;2*wi|Zyi>ok;7Gv^)Y#b<&LG(*U3d!p
zjMtDBbKOX6#S>wJ18e@+s`f}5*mZlsI_?$T1o(DlzQ^r0if@1N^>F($x8U|4#kW8C
zPl+DI@=%YTi+Ze)&^bXShufc70P&$$q{m3Z=%+>AG`QK9*5V;(IqNNHIu#KgQ`v|t
z2kLLPemB(LR$hNtaT715KZ!|+niF)y(AVShPaQJ;9^u<~4t{~Vjr=1%XOtitk4~Qo
zH@<{@8vw_AuegH)SSTXe$fqo3CuI?rWu(=Hrr<y@oSlT<uM75Dmx0rPkwwmq;eioF
zj<LX|lwW^#UFqsY)eDBDgHbH)UT?CwQd~9@9Li0gy6cezV{e%e3{2?SzH5j=WwLrF
zl@`xv&M26<w=>Y`+uLu6242h>HYKNhTt?%hym6B_XPn<`QDrx0)Hl0}hg0SfkJ_4F
zk=t5ZT2hf5my?wpsPGP5-&y3To>*AfIW*G>l%~{}gz7ZA!`ry1v3|#bYP<c}J{u^Z
zkf<{k`ks&W3@T+3{Dg>~t&rk}MEqC9vM9P=IH<ah7B+G)m48$JO`IP?`{2d?-wFi1
zJt*q)$PlTXYeoDNkIUlWI_ei#|C6xo{|epBfWJJxUuNucB0<<;4F{<S^adRib<8g|
z19|;TocP*1KbSWLc4<>vbLQms=J=0Rsv5c;oVVhhoD5@v!IM9%xO(oeOnH366ALP)
z)p`<3M$KMR+p;Oms&kk1-}5sU=fd^S!j*+fHU(zx8VCMxVaUWg7nRiqO6_rpap_I7
zOaHO%=G;l!$F?5ay=HuVT}7+s?kHyxcv(+~IyfubPYLTFj6aTbL-067W8GYpX0AyO
zS0lCT|8>5p*D&9s`|%B;Z1rDSk`h4nmj(2Mmy}+sJVvEXbCeb<<zE?xul&ih%Moza
zg1#bhospjf+O|x|znHieZt2(eMqFJ>Mca(Nmc|<&WncO#+7tY=-^R4q&mI)}*^!9;
zS1aPDg#HJ;4e}HlE3@J6D8lv_TvqTKV>p^tv?0E^<=N>~on=;4^P|nW;uimujuuDN
z@kby1K1wtV%gWVxowtndSwn2OZh6kQ4J|$Ypq~Zp(c_e3e(*Py$-?+?LOdrR!NL2o
z%^3Hi^2~Q)`IDhM84dlTzd#@LBrKm7U8;**5zGTk(S-93aAVN>=%djjjGh7FSy9F>
zB{DuP+}B2D9(rXY=y#X#-=@=Hp%V~K8lZ*T!MtD|o5#X=0o1qrat7qxqG~+es4Z^E
zoHA~BeEFk0?$qtKAGd#}lovcr^sMU2n+mzzMJ!&mJZHkj7LK4+EqVR*${ff;Eu7mn
z;_<r^o!ghq1b@VKf-*Ne3UL(M1f7)c7fKB*>^j!<wZ-j^v1OnLX&JT{zso|NyPzV^
z^$UI`3*Y(0G+pRMJdRC`V^M_WbHA73vJ+f4&ht^i?Idy`Zo=_vC3T~wG>Ipca1dAV
zgc3-X@&oz%w|GElU)Qm@-My!gsFM;7?TF+5{2&}if@0j<d;SRNVh`?P(=mS!h0<jL
zPBcmIBOyL^paK4;7ROxXBSe~#`!86L_Q00@(=yiIUH#UE=mrci8h;;|F6_+&F<uDq
zGW`7o<McBE4pmMJ!~LHxe=1Za^4yB&WgdS#RD*FS5z)Yx|CTS$$EGVnamFL)7l!G8
zzhK{JI`12Wa<S~G@IMo=>{j81MU>G53x6=mu*h4_eNonCTcM4dBF~}v?7WTKf$zs5
zU2kIE7x-|)HkbyA(OIxiKJH8CKJgpyJ(RP-Erj!c_5xnIq2O4-O}d)`#{%2HDeTXH
zXSoXe4(zXBI(&x|B$y7_<yqs`gYQB+-qy<twBsbPjof&z2kV3YAsj;|bT6dy*IqjT
zJs}i}g$T89w}GSBzH#iwOT;b&3oj=`A$ji7p$Jjk9kA{XaNSu^`j)#7Goso`q;<i%
zH{M&(kEx2Kx~0Km!F&7nuO29R1ak!7wN8YFKz{DMd|gc6BKJ27)hc1Nb+xLkpZDql
zcK-glXlxxo7qA_OW_%|oxqsbJJ8zVh05?VH%>CM;PtOLS*--AUpe@B=`y4>)e?J^W
z%gc1jpq3AVQ_*#b`YyMI{3V`WX5+s3obVk0_G$8$Vq9?YVu8W?#09^5uG3=IfmUsz
z?I5?>nV`2RLH2&DL&0%sd%UaU=O@Aak#WK4XD{5XGJvrL6SvH5R414@wayHFV$pE%
zl0^ZI3?3eDAaA7t&nTuhA1ks5t_LKtfcJ$x>moRZN^tsJA@)EKx1XXQo{Qq%M~|@1
zi`)OeOOTv&hg76v{e^z_9KYQ4*7$5_xtoekyY$M{SL9nFma?Lp&%$;mWPGe}=;{+6
zBDtxhg4`8&?D&pb0}dnk1pK*BES3*h>h}=uJFb1Qcf_#~-MVi0-+jcPo+-qkZsOja
ziI^4#$1MphIBwxOWF)tPScvY>VcZSzT3pv@frsVX1?hYAyP+nG*KvELIAaR&<7Xz6
zB?;o_jvX7`wSq3K5N{o9GTo}*U4E>5vu?9#i*8HpvD#gF(!8&m10dABubar~d9@qS
zL1X)~kWQjZmS;k{iTt-oeEbMD6d#A$>m!d%)@i(1%vL6~yv46D$!m`d*BM$gn;2hd
zOQy=K7)=^ze@0GQaUwww89f`A4*u_+THb~#;Tq_AiH>K2zl7%j`Z<b1a~kA4*TP~8
zvG9Qudsk!@$>OY}tG!IybfR-sXVX)2HqEy-|9qG>y(xWk>yWsrpEv8gP1zkSwec0?
zx22D*+j!IF9a~;FjaHGXmZy(g(+YatK!0YB-#nt{3x3^5KZoay`NF>R`tW)Z;wMD>
zESM5rGh==Q9J~*f^Kx+e87IWcaSn(mT)X>A*S}ZL*Zn%GERXaNx$J0^z7bW#2rY1Z
z`UvE^JXAnGPd$sXyal81YOCOr1+#(v4T3*x6DRfk*qlC%NVB|)KEd6Rp4GR7eB6EL
zYaJo$!{fH~rA|<0j(thfr@cTMXEfV|HU4SbRtxyOqY*OE-#QKF7Czf=RDUbi5^arC
z-1gh~l~a*Za=ckvJUn~agqHZ?N4wffiTwTxC*s`J?V?ArEPu)kBYQZ=Id~`PStg#R
z?IN!y+67+>&KIY#{qXp6BW05Ey|O*zl;S5u{H#c4hlEaV%o619NO1aH5#KAVmycP(
z+b!jQcqYo%(0{8UiuoelQjRG0$G#A$L|s_BWt$_n86x!eD?zJVSgzaXUx@O;af0Gw
zji9scPh$Nn;`I~OLm&JI!r^;7j`nBWDAIm%#O|!E&swbi?IiH4hE=087tL;5H7avq
z`^X!o7q;$vY61S;@iZ9TZyB<#b;~1@ciz-;J^b%2JBsGtHGRY1AMAv`)7Jm}p=nf~
zlYAoI+eN-l%#zBpCX6$+OQd+MSpHN5zF)*2m*C$@^zwALub}d<y^&rnrIm~6;Nk*H
zdHa*d!>1kp3p~Jn@+7wVMf{p(n3T6OBL3=1yswXN>JcU=*iFS{Sk8dQ-!5)L^%pzp
zb}4fj=u{iU%O&vdzcl|ByNh~J{*PSjz}m&xr!RIk4e39XnJ4If#Fgv+BFE9Lv_UR<
z^z4e7XrNPO;r4n;kazTz%RA7qvMUw#Qb)+HNZx@@i(#2jpA^RCpse9iGP9SwOL|dR
z<NIA8?SEV6;=+A($%~_r^G)EAtr%r3a?$3R)qgp1i9Xi<gf--mdkD`VB=j1pgjmXv
zUo9gdDN9-)PZ~&>+}!hTEurTMBpd@dj-lL8I(+lw{4nQb^Y^v`i{BF?#!#kSUU9xi
z$~ZR_2T-1wLY2<nKP4=|q8IL2VpAuj<;L^jlf&aRzC((~YihJ~{$s@Xl0FnMFP;$R
zp0g`^@n48^&|TDrL1CZgZ!&)s>1~dv=V1}w9)Uk4;#(#7>k@oR1Yf5GoP@2hIVxTf
zUbpqZOC#_zA|4z7FPCkJidROI56{u0?9&MRs93%z0+*~$#!BUSAdC}WLe%vc=qclI
zMd*3*6O1qB*KOVW+Q7g)NWKc^Ya@<{7kL*k7`}^0VV6``)_dm$^CvWyrdr1g$Cpqn
z-f`3C6>hr4Rnf6vLtRr>df@0!+e;<a3rptSI`(|^yynz1Cr8|O`^L$Ek^omn4=crd
z;rcOOOL@M8Gh;k{Ld4JJVSYmgMSk-x!7mPb?B+f6%i`O*M}Mo~sNs6u^;<5*|B3GH
z+q<c{(y$Kq3p`a1%oFU?QP%rG=5kaUmsjskk9HTSo+v1|xW*fA-QJZG=?;(vu>pG9
z-->pXFz<n&FKEN}dix51Vm9|-*X%P5?`m)dz2-hFd#WcDkLns-R3c%IWezp$^G#c{
zq9}sJ(GTq3oO!hVm|1EU&<`WdW4l<v+r^ur?@4@z$9)uosGPL1UgjbmXHm+;nez)1
zH$7ioh@53`G>V`3x6$i{>S7+wf9z8(J-UM#3WdJn)(|h?bEGSTJu5Tz=TwlNH!1$h
zfWVEoJA|1U#&fXzbj42n-T99ctk$g#w3me|&D?U5KX?Rw*(>)8*zS3`&;FY44-~gU
zT0eN7&q<5+zlb-npMr3g?9^|?T`<I7=w)s{@jQIbBhgkgL&UrmirPxqAI;%B-qp)F
zQr9DW4C`B|3=f25Ai!^B5?pLkfWl+Ra0IR|NH@k;@@-A=eI4O8*w*}wvWVM|RP^Y$
z)WFB7h!^B~wKgfMHrwA=;3%Ioe^PmH*6wjrZ_mn5SPc5a?1sXemLUHiZ_4&D<9Fn`
z`tN>^RI99Uw%Cl4q^!bJZ}GVLx(!o{hXiUh+IV-oGq=W@SDNAuwl`F+nh-3@=lZT&
zc$w0%OwCs+Q?zgRS1wc_$|tHTlZs%Xe9H>K{&5cbeS8}}_Z)A3P+p7|U8%HJA=(wn
z5w<<z9PV#C-)DaiY!db>i9F!_Kla+{c7_#jm+Z(~{MHSlWF&r;$ehCYOr~6^yktZ?
zXWO8(^=Gz}cnwL$xHD`qsqtF)m&YHv_V!Q4-<q<}Hz)oZSVI3TIZ=nAZe8I0Pq3~+
z*e>9>g!J1l!a0Sq14J94_-o{sZ!I3zvS?%2?T)gfD>I^^+5X6JPA<QwP05-<Eb(_X
z8_K-^XF!<0hTqGU4F~HW-T?c^J#dBSlC9<Y$SeGwU?X>cI1KTjGFh+`Cw+sGRuFg}
zm`q}mNQpN9O#%&R16}|JJ4u!)U!pY-^1GU8i+*A{Q0lmIWi&&A?36g4)66Oql-Iwo
z$QJc1NKxg`XBd;GI18LNnTJ|Hk<P^3yOGnT<~r46UXISFlPgC1vgooXXG1m{repaV
zU_X%IcIV|hyN)0K8=yT%<OlEb-=1Z5?gEw{;sAf|`jWSw@43BFoH2dLuK^%^NM|?n
zs-X3l`kkTZqb#JPzFO@KM}pTgP{&W(_)xnx8y^pMMIVLbtgD#1h=|nf7*(kk#o<M9
zd3~iy57spGbE6YdNked&&6eUcUU)h}dFeTGXY|pqJ3Cx9%fr3B5zQ0Lp#t(Clsy;i
zrkWxwB9Fhg!$uR7<Rf^y?@>nBz?bXM$AO-+RDY>P%rX29e;-JB@n;}rn6%kXm}4)z
z>gmILb0hbb*$(S*;I?ZFeL*e5ZM_luEoZ?OB3_K=bd1X$0<VQ}I3xDrN5DUEn<5;*
zc`*xn$|zWRKdVRb<qJ8l#NN?=qNmhzkIv(K<yh2Idy2y>mn-PxY}kN{2|zMT#X_Bt
zkl%?kGbx?8{-gf0eCLIOWGAN{pxJuNrdl&7ff_n|yx%@El7q(n8n2IMKuFZbdAv^J
z<vs;I74@OT`_epqLZZJOywA+zk0V^rlOF4-`ik@vW$|#OiaHl%=D2K4fhVHQ5peAL
zJvB?TA2+n04+K5L;j=L4c@Z81Hb&x54^{Y#41P~`gmCd^WP0^Pt-@z7nxdWs;TPza
zsXVx3CO_(P1Z&PMfun&NblZ}zK!dvEUC|DZ@D4!c<*2cndrg=#aK9_Z-x04|8fw}O
z$o&r8&MV`7XZTdn74Rz9@|)Nnz->qX@S%tw?i~w2PcP0qf^A|8Kc-OWBEANf-@=b6
zlqrm}BPI9|DnD!kY$5C`BV{x2SK<i$M5yO-JJCR64*k)Qd0Y{mWV3ip>R72Fxv`h2
zW$=ig?WKQ>GAv28ZjdVdvU*@?lo3nRUlks+czr)Zm56vH9<zA8o}#ivyaA6{Jbt3L
zeONy3I*&h2m5A*y9=F5HL2ZX9W7?0<5a*)}dxOvtQAR|5ykqVYZQm_BK~6;XRbd}U
z3Xhkt50v-n9z7Rye*+#5`S*@cv-$Cm3WnQ&c^Z$0i!OIOyoQz`^O(LzR_EOsI1<>R
z+nPMc%~P=FGKbWwY$k40c)W%BE0>KQXuQ2PZ9Vd%X(#HCeGR%0Y|V$q^DX>%-a9TZ
zfA1ZKK@XLT@sXjg$d@s`72D!Nt+J^2kuH9H&*S^~JS`{?Qh{(`3uoUDZawrLgvpn?
z+N*S}FV3y(EVHW75tE{p%+7Hw@fD+@o=L8JV$+tq&YLF?*Y~VlwLEvi=2k)*d6rS+
zaZQ*<rgpNF_gaznQ!}Laei45>0)Jb?pX|jcQlf*W2cj>;pc%>SAYaDkbhq+8RHwB3
z84<@ZXd-l(F`zEvqU@Xwtjzh*&p1cZX8%*qy}aUYLYP--v{XlU4BN_&VX|Ft41+qK
ziDaRK=dVIp{CsYffouba&K*C_CHEB%_PRbr29}q*O>hZqf{O_JcR&Rgkpj@Qk1cYu
zYT+GWKT!A`P$OHzo?h5X91dVd-j0&i!yj6~J=C{=R5$O5IvYDZY!9a-_JGca|K^8y
zjQ?JW%T9!z!SlpOZf`_+lkhzZ(SHShhr{&g%@J+#u!!Hdh+lt><aSbbLOPk^{tb$$
z7OgQNZZc4JiZ>U^qO1G(+%>(|8MtG@<%MXv6t6S%+W!M#J_#^R7Hy0HJ;K;i2ZetV
zuVJ>~esUsRz+wM-6YFOi-@od3d26}-Bsz2NlgW~!?M{KdDPf4jQ_;4cKH`4ZWsaft
zGICO7H-I8}yz$09$F<0FR$b3>Z=*N4(MRmm^Lbi^$z=2?EXQ_yr{y6bms4N-2*9yM
z1$;k$CIw|q@uBQB42y=!OQf&y^<Une;>O+(!>l1lLZ#u})W&UkbPE(>B0&L_T?;I9
zyrI!#C6>~1Qeja8KsyXv)FIbJ95W;sl9GBxxX5#6L(g(|bz)+*o7kl@n{_>l-Bn5G
zUr^?L<1jDJny{SE&r6fYe?pZ1Ea2yyVcZV-6!~2k2k(P`r2N}r`6m$_83;WK|8XB|
zUwb&u3@PN95wsNungXy<OMvE}*~UJtP;;NDVvGmC{;z*xHZl*Xv>)p2hls?Ucg;Gm
z*J9*$Y0X3u_@he8-D|agta!Aah3mk)-pKEZx%ho99$yp2nc6sh@BA#ZxpR=GtmtP2
z2VxSK$Y@8o*`E!}IJfV&eT;AbF}QSY8rEYy_aON$w!0ntoE|HSiXW-u=OG^7FSDYE
z5eoh+O`kp!#qh{?dq$}o*3EBn|Jh?T)A!O0fwJ{f${jjm6a)L=EsGiKA)m15dp23p
zES7W&v0iWLXG=UUYr;G-wZ(iN$2iotbwCa;!p}gpi}mdf*9Wrm!@Amm>*H}`qeT)O
zZWncU!Xwq~8IjJbX;QpaEPpCXik}eivk~~)BK~CY0CXbimFUY8y{(_-Z6Ne7C`>KJ
zck(u%#x@|};cvHWWRjI=YmizcVNmrv4!+j+1QkH9A(}XgfjAy*0n%)8YkRyq8Z{mr
z@y^aD3lEX66Cz({`|*|3pRfK`Wd>mD#wZ3E$yMJgaF{1(1GU%&cJlL$HjH18;`F<6
zeoXimcaU5Nac}f7p*Lp@FGc~mP&_vv84C13%K6iRJll3Y9x(>c0^ht80PAc#xr5Nq
z_sCN5zBK;!phFH3Qj&0*30*)gki-D@*#u`O5WI8Z%Cw3U9Rq+jXwcJ4N<&^zt)p&b
z2LS-<^2B)^u{yP$em$=?&6p6AR1i<MwmAwKGc?@uO1;PBDJ@B=%5xD0z|#4-TBBB@
ze1g!~lFatl_;|i8UkSy4jUZE|LgzzzD<%a_1xCe4<wPLN<bU#pq#B(uuKf6SC$37X
z@abp*@@SwKv)7j%TU6s1x&m^kX%6#9g)5E&#h6Dm_iM<b!ERKP7P~N)nwgkIthZ%Q
zZzGuvGBvV&6Fz5wPgpQ4-+bY35khe99z%+~s5#Z^%!^YcHf7bcC0BLi`}55#t<$tl
z=%Q?~<^{`33!Mq=iQa|N>sF4*@g{n;O5$@gj-k2|=tIax#BXa%A4jz}`UUubRjL#^
zi_=!sl<SXk#hO%l+L<*gFQqm&-ZNx+Wnfr5oyM|ije6e9ilI7#PVLX}BovP<s9G{I
z%j=ej@-4*jB?&jw8A0_X5}lzGZ3B;};CWqIOmTBsiZeInxd}}%ByhFn)wX!5+6#Pn
z<|Nu;H!oOLUg&fX?L8)IL2~Az>2<5dWXIZoPN*vv%E#dQ-T^))k5oQs3}>uZ@N34G
zn^mn<7U#vKCdR6CjKh{62*&!G0tw!_sU@SP(F%=%dNpTANlBA-=n$<ztM<nvndJ#3
zV+t!4wq?zk6qjVAQJ$!f5&R7JVBK&YOO8@E=vQ|!laiBNrBxQ?#ib>nx}BLz@-mu&
z2|if!$mz5~D{s#pQe4u^SFFm+_C!?6pf+7k?g4KytI_(z6d6W`KW@T@+<8s4V6?%h
zRgxBKa+aK0tzMqrmG9H&33dqm<hU6$U9Od<m$=%wcJKg0YPEUTH>e}tBHCb|Rzc4S
zWz!CuCKSt*pGm-xk8es-IIIe`RHpZ%HWD}x<U^~31A0Tls>sN4d*J`pxeBVBmbmO-
zY0VQ18J9sP6*Z@8W7M(fmCcpuo|?%ed5t-?%v7Dh>vg)4iic-73(V9#1(}K7f=p)$
z_ji+#0hHQhvwN}$Z<d9Tn@#CMa_l5wFqzaOW%8$ahZZJTT$wSc0lm^;a}*m)Wj<6y
ztNH)Ed_eY7au2Z*_B~6#+c^BuDA1lT#P2I~sp*u}DNLf*k#EoJn$Sge#=9K(4e8wD
zpguc4K8D+dh7YusgSK`9(~Zxq;%`hrUL}IyU`pBQ(tC6<i3UfqHpXdi`smG^9(?f_
z9I~}(4r8KCn~Lca5pRJTAss!s?Z)3h<tHmRDD)vYt%8b4t4L3b(-0bi%RyK4q2I%~
zO8j<ZwTezmA&7{Y(0I3pm<#2P6K;OOxu*oM3=0<%!sML}Shoo@6j;<c`DRVRqMsUK
z&5AV(wN`Q*sngmWT@#oM+z3YX6YJR+t<rv8u6<6!e2&!t>E8$Su^Q43-<@7PVKpq@
zV+ucq^^=WoJaP;A=hI#Ax3`2g=xvN#8?ZQQ{r)_KW1PRWK@FQk-IP?oq^?e-9bQ|8
zIjgIp$x70r5;OABb2Da5Ld`QhFNbfX7%R7lpksQ++|jUJlPm#Qb>xPINn+(-OZKpU
zBeh|ADgLdWL02|pW>+?5(T5UCM&{KmZOuq58HIk+xu!V_N^9pXD6Qe=(+@)|cpk*_
zb(k(v$9DqhQlToQ0#;Gclnvs;q+wP0bxT?^xW+jPOKWfyglrP=Phte@n_8qj6Q3hM
zm>7ML6C>7Lk3KENk>fF^y4`uPgu6Arwk5f;BR?h2WbYc)6icFsF)lc&xU4Y2(db3f
z2Amr0w%3S9Y<yeY4cjsV>kIc48;g!Kij4z%b(NzwEx~MN^lY3uIos^(svK%k5p;2O
zP&Y|W`%}5I1g$k9S~o!bJE8tjd=5sOW+f+mdXHxGo>T!BR9c16=CmZIB=`gV1V^wn
zKWDVvtud>N)<k=n&zT7ag}A(?oZJ>0ou^Z3l<qjQ&17`?Jt;%-9PaomqeibukF&%W
zjm~VJrz*$cc3|1ok~_fvFac~0E-$~;OroxUrikzs44R^VuA)Tl&Qz)iW>^Met1x$~
zx?QBfXg13khIBgW$Q{i!AW5Un)!b~kx1IYqCeA=Jr8Yr_8=%}H=sScc8p7n>yXgaa
zH!%X*Fawerb9_Z^HJyrwo%n*-Ec%X~^VamlR7ZY&I%wcdqj3kUhBOzzK0FH2G-8_4
z9SStv5u?s8S~mlQc_T?eu2-(5%_>BSpfxJ)Q+u{8Cfg3oDh<!y1F%1Ch3k1?_t+=o
z?Ine+4+|p9yUMxJO31CRPu5eJ1OaFTvs!7MICi?$kOT-qV_cxL=fu$|uyRJj&ZNz1
zEC<NY#%r}sE%#?DLF=^KSGH8M&kqc7@!S{IG_yIy2J~7!kF9JGl<yWOUp$JJC#;r*
zD<wYMD#+(S&ifxXuheMiW|F05F-G-*=ek#DRn%}&PES;t7g6_d|JEuVm1~*33N29m
zAXhvr*DJP}c;Dc7C=t90l2IMW7p=p3u{v^4702Zo_V&msfb4$QSNA{}EMfmRNcN^0
z#m%&b`?<<wn6P5&JgttXU`SfcuIHO-xk>j5cw4LFzOg&B4lPjP#sae8P%jLmsSA5v
zd4db$4iXGYs8k&Hv6{P?0cs5(-h-6#HFgzuc5=QvMhoy}JP17_lTimC4TEqmUfAiv
z8zXttfqk(K`d@M#9iPP6<jJ<Z#ETEcnkZRfbK2;t3o=6-d=rGef;2Y3zudU*_|PSK
zC(jW49~4b+2o(UWvyxcwslVRsEjItjswW70BKMFz)9$H=BknL>a4CpbJ-EPal`9Da
z`HqpMS=JVGbGLcj26LL1o1KuNqp3Z0mNY$4K-8%n+O|EsjVzbR=zl{Vgoq7jM9L(C
zCOnleP6AyKFDJ30>3>(~rX7Cgrt~xEJ6>FurK?z*5KjixF)iDtFFmt#=DxY*>L8h%
zK;OZE^}oMu6vG_`lbF%B{cb%7dE>b1sr%-ZFy!G2ljzd9`=)}Y<Gk4C{12?Z8RzSL
z8LtaJ<%&apfqcQ0E<J+2ADuNwMt-F`$;3y-4W}ltkx6i<fnH~yYb@ky(5)g;99(w6
zs9WZg7EHZi#EeHa)TcGit<2}L98O9Fx~<KtMrO=?;)h$hp1*l`)ykjEJUBJZ1&$jV
zuX|wexEm*DS8q7eHEeZ9v6gFb#Z5h79kp`LsNG*3nbN%Nsl`j5yK{lC??hnUPltJ@
zYdJnXKz1LzgunO7ecA^v?RgoO--~dZ!<Wa)xVaer3YR}4;z6zv;~5Zd;&DDlut5K_
zKIJO~`YZd;ui)v(%((nf5ijH><MMCx!Hc*VxV($I4&wKV_)voXwnAV$ESH<tL+|rY
zTA$}7JwFJ~X<jdVo@2e>=ls6J4)k2)-wpLMS^9qHEByW$@j2F$<hd6<@70%^E)Unw
zpOfM~>+^nPxPI^hufIO^S4inYn?*TQvgtp;v7kD9(+&1pF}Dg}2o`pw5<W~EUi(YK
zrK5qYoXkt+`y99-d;F+jZkCR#t*YyuRM<v*m$`BXL0U3W%M64%#^*>YavR90uPrE<
zT$}8vp0Ieskm^Yl9yzOF^)Xhfj@vq8W~^3y{l=X3b;H{3SUGgW&L?KBTTd?k8TZDT
z;u%fp(^OWY%3V9XYSS+Ngc~PzJh-=eTwZ4DyfRyMOliGOeFNxlJGhTUxlUubCS0{#
z=m&(q(eR5@SpM4OTnJ1iw~t}ea=Y8i5_F+IKUYpW3!1X8TJ(Kt4K4Sj5`-2y0_nk~
z>eQhDbVpxC_0h$&!PZ8uRR`cI|5}v-S0_fO6qeD5N-4-eN@>giPsixg8z)a5T;+hF
zZpQ^s`rpt|vfJlH3yEvi(I<e{5i%SL)KQT?KZm6g@|$wN3zO>^OYF?S)sgCg!`-VN
zIF9i8SvA-;6uu<P^xhE;UVArNJYY8ir|HDpisZ!n%rr}43O$QX%B}Jw<!7c?YE^@)
zL1JW93v{krj*N_~mZC)HdyMTJch6vbwqLC_eG(<2PnL|;W@WEgZ69aXz!jIgqQIX)
zQ#tusHQ`KjlUJ>km9C<u)T*jrx;vlrrOM?NNq-B=Kl!TdDXInrX++`<=G3HWDS1^s
zuL+%!a6nA}IUJ2PPnj}!8UgWcM-M3LtCtRRD`wF20+;9XAPqy@E!nlmL@M+BeyErN
zs2FFWQ3rr&N&{nwnKM|Lf!=CT4;p|X$DelDvcc^!Kg#G6y&D1MM;Lhe85EJyf6)2=
z`&#elHOhs%#vlwDI~y5`eRk|s%e4ktJoi7nbHw&*Tf>q<j5K85Ve`IbA%9<^p3d8G
zL1wC@Ml}<faV0Y2)T<U76pj&WwmrM02>nX@lUl5Ux~tUz`aFH@Yp>@Cy{6~iS1(}8
z3Q?Z@*Ea7bN2K0?&3o-u`()p=JIhfro~vI9N%QQWygRrpx$CHGipH|HUUgfd({ZQ_
z`c`r6qjb;f8x2fsS`0}QdFqOlS1s`Q|Jj|L8tY7`Zx#FrB&*<0w4#hjgCVWyNAgGe
zDB+>O_fC7&L$4jcQKchvhJ3IkKa!_9$QE>Izm>ajaE$C?ZtM>#i2?rjx(s`?gRIL-
z`?uWCA5oXc-IXd*(4)lf-SS`Yd<R#nSLp|H_8(ExQQYG1L!#ot<7e1EoH@Ab{lQgl
z^o2fmW^lCEZ*70x*UvsBe)NJL#giUnd%U<`&E4@MX-;snB^^9cf5_in_~UrogRH<y
z_}^UfkD@`r9q+F{iC@0)zu=kwH@fe|{Pe*Z7%#_dmkf%Mb!FJs9eYh)yl&9#a_!{V
zu{zCWjvE{WtpR1Q$DXh6H!obf{DQYX$np!mKlk|{$&a@JqR78}aQzDKW9$+1aVo&V
z!QV6J^(q)g-`#^yNR}G<noPy91OJ52e|@UvzkT!g=`c>$ruX7i61*fMdil}_{EUbP
zC3t}ZFCU<MWdttaGXg&<mM;?UeC|Q=cewmt`0{1^c?fjB;O`WL&t$kwdA*^r1KxBH
zjyoGZ@Hpvc7tofrrFD#Ib`E`byfUveMNazjGMn>lOzU&A&^<F1r1$1^%hHA|tnGP%
z_@Je+#_o<Uo=~}_8%4yH@^V_>1;vZp5Cw<2Tok>0sc@eT<M=x@U%qUCwEP*dd@zE3
zFJ3Ohf9#7_4nV(R!2r6PAjOZ0bc$p@m*Cq)yjZqfz^@~JhvQ%I^oJJ8dT~)+H?N-o
zpS!T0@Y5*oVqNupSCq+xbr$*V8S&j<)OvfLm-D&727F$5iMlKL)qPZaR@hIbqat0b
z*M9YG7oTJON}e}`z5&nS_IiUqa}zQNamKzOHqw6+@y~=D8L0ee@*8y42_Lr;$Hm~W
zBjXi0)x#JfE;ZmNYRfUo$!~g`!&(Ezc#|@vVP?6EkH_{6cn!WEi_R?ezKudr@|i5$
zz}kmQ+!o!I+#|Vr^tS?|gxp`d!R_3<Zb63AxLx1i`%EY`EE`cS!Ak_Z7~+HkFAX`x
z@>_5l@OW7-9Z3I-hzEu86|j6fkMn15c-_g;VfoJ`<tsy4;ePrzM3;nqg+NCK@!b)+
z#`T7thWHZPwtV?&)CRD;9^wlnbZR7gz91=I81hK?@5PIR@<vFf8rues7YpU%AYO#;
zVe$N&63Q1sJb>?!@%ZBihc;2eJxJAxcY=U8OL~1)bgUI^w23D(@gG#JoT@JL4arZU
zD))}9n&1R9?dtG)sDqET&@E#}T%R}c#CT<S@!EQuFD9osuYF2dim%1R{UgOg%X(IJ
zE}q&>+}q<AUM~~Q96d;$#qIeXw(UTj6h9;4K>;5T`hq-+ZT>@kj0#BcHDR2ot&-w@
z6U%>=B*jmMak{oPI$km)I$kQpaeMN3Sw#6WA|4z7FRzP^R}MhGB7)9Q5w98muO5I-
zO<nZzg#*wjiomyvcyR<?E9&`F1ioLyA4fR+E#n@fHE@p5;0WB|BZ0`Z5yPwTXBg3;
zz@QBpBf5_T*KEYu>37Wu#%2x4s2Hg}Y<_5G+s1L(?T6mknsPX0;n7tUMYDI0^(oDU
z!Z9TYzG2ITEeFH59G_V^Z&>=csfQ0#E#BY0{ez!Q1l(!R0ETw`bn2|fZd>B1Gp8$^
z?Ta=It-G$H0HA)+4Ef8T@4)APog|72jM)Kwk5m@qd(mow_5hLunQcq9?j4?bB=!6|
z_UctuJ6WtqXkIz&(2+x9Z(mTMCP<f&Jm(lvTVdV(-u=rPeGGR3G#M_uLD<t{xwPih
zV*?60=7*2vr5j#8(73fUF`n09Rp<-40NeaO`Eecq34S_^)3pQOC4h*Emr8ML8$4bX
zQT~jG2M55*0T~sq9DsgB1f8QIUN`_=6oGFS@!~MfT}Kz-`;I&=oHyigQC>H%pNl-l
zdb-H-(rC{`x!k<o`n`Wfd>*{SbF9aUJg>Y&{S{H^9~GY$UgCLC)aTp9=f%?Jun$j#
zPWXJ-N0i~)GyL@nRd0aABvTR#7FM2bUDe{dZp*Ra3k!cTD`)5pzwF`~e@>1!68n43
zr?oDrpT3Zo$ED_WbT!OB-d#)IaT{MhqF;t{pM8Pt{-|spo?Bm($=D|u4&q-U9OM!)
z68x($E;~uMFn%ud75Op7zrlQ;oFvkxYndL1pX2EO2U<MwI9n3NWe<bQUYxmG#7|4h
zGhd4MN#GW73+De@f&Y*3Z)fOBdMEuL9Q#l-61bK!qmhlzzAK!JW|R0kIRr!T9;-3n
z0d5eSecQxY$G1-~stRY_K5^QS8zx!EJGrgb|KYZlB`<QHAHMz%x3?^P37CjIO0#Og
z&)3$}Z#jG2fd$9c*4C~+wUpR4`GJqOpXPr5)|yH8f3*EH$a{M&(!;#a*VJcNpBH#N
z$R3jQ;s?XH?6ho;1pi9JPfBstF5=G!{>Dn!j@wXqzW>4Ud&Bx?k}!^v-@0W6YLuWq
zKCc%Y`hq%$^a@zvy&YJu^PyfR;Cgy6zntu#jQ>9VB{_;BWJdU;8m@7*zyinVAV0aV
zzTR`^Y%(6w3F&44`u8UQfY|)jK<?P8<k;egHJXkEC1#B?$5S$ERJj364UDUFmo2($
zQpfg*S)Q6H*WJ`o-C2<kUp57tRu~nPbDB~BNG@yjd&*NZnt6uIf}(g!YN9zXWn+_q
za1;#B8?tFeSuvcTMjqPL)t>7rYVf5r4=F~nTA_``qkHebfNk_hk4&)LubF4i{0Yoh
z)@*P@g0BhVOfACU8vRR1M+@iGI&{~Q6sJ;2%vWg;Tzq*cKM-_+JSz^0%d3a+`j*7E
zPM%-XvZT>%D;QlqX=-r6;kncAulCbsl`*AgWO@128uzS8&L%gli7$vRpHSvBrd4NG
zj4knMR0buv(wXnI`YK0ec$#VgI^*(Dm1{f8D$5!ay7;7cS4m4|bG?FgRV9%$aAcP!
zp#WTQNe%#59hBi~ZV#!4GE5vu23C3@iFZLV!R1P}EQ(~_2A4wRDRpG3l@^N57@Az$
zo~@Sa)Hc;M39M8!;3zXg_((Jx6h_tMXaKb@YR5R-z7~Ex`!zpi^@$M$vgb>2Nt~>)
z5*+7M+$t$2i47GI14<IBO7Q)QWkRkqVB_r)=cWSq&V-Zv9%oC13nO&v2HlzA!^pz5
z8orBOP8frIqF~U@wfD3WN``Az#u;MuHs)<gLF=6Ew0MOley(?DMPbYiqlf(+tD+d4
z60FfB8_Dl4$ceM&Y+H{@Ycy(!H|#~0wgU(59%*-8_w@z9?9j#Z+#Zu|)+OqR%{D#H
zAIin{TOrRaj&zDrT_%~x-*z1@<eCbPcOB0KCv#C;8SpBXMV{lPfI~=L6x(Mm*1Lz-
z1G<7QqoE)674-zfP0&*+leOXO@qIJJ@KK9ITMPEuu5iVzZ`xK9<ci3)@}Z%uwltLY
zCXG8q*Ea^HHD;)t*`BOPEkVYS(9|}{7Z_WX*mA?8okM3=+1Uw?5XbnCQ7G6GA3Exh
zu1CA5JNrctZpf(#wl6Gn6r{xDjhtQZc}h)|-BUF_IN|>8Mo-P8Vv+)8Y0N12BKIdg
zxi8d*3fe^})<+tSqg?xv43D))Pbg=ZL*|p^;QRnWI0xA6K;#{~T>dVtk93QF5ofLW
zC6%t21S12~aVf=SZtGnaZZg}6y{w#6T2#$Whhq8=Q>^072NUe78;6^1s$Y_A!CJ3|
zkt?Vv$r%@ZM}A|~_RMpZI2=WZ)Iy8xE43aFR_j+99bBcrIUw{USONQq2FDaYH=^9=
z{u3!_FVqrXMIEg*nAOVxNwG}bS(D2jXZO3zW|!X{=XaUt{XM_*j~+82KYzlQ(SD-*
zhd<df(bG))6qZIhYU92H2go;|jsjjZMi<H!5dVTU_$2u~c$)qe-Gqjo15}00iUO2t
z2`lnv{^lez$5&>l6)I~+9I&xE6Z!p+?VDHUCnz*>t=c|x^wd0k9Ev%E4#TSHcVuo*
zE*nFA4W(N!8r8d-d=K0XaT4MWL0rIyBSKk(!DrxE^bGQ&<hsBC`mA^t`M`%qKA_Kj
z|0G+-ujk-%auI&c_VyZFirDzU(GU5exHyn4CUkTIu@ljPYrLfO)JyvFL1O1R{+{d(
zdL^X@KRbe-Q3{m9G;|O50kI|2j-JtMQjpl9>q*x>uzdOd!ZX<%@D$iXe1hAjk6p~M
zr4~373R7ZYQVJ8C1*tZoP5f5?b+-U~|2DE1JWb7r_Wo_Kgfk(C-U#A1$lv#UpOVdm
z{>-o8`dc9@kTu9U@U7w!z~4RW7ixozh;)x`2E+NT?|{OJ>7md_M7^bov#mS7Qx$Jo
z557>!{n_hB*3N10mdx7O)-*pUpVp{U=EQ7Y&ggQF-Cv%ZQ{$r5<kFHkyGGY78lDP&
zN5S8;?Gr}_J1X6i;eRV!^ct1%hwC*ua+SO|Se!j-`H)F>FRds@t6-Eyt1)%>qPpDH
zLPu-@MRN(`4lJq68M|W0xC2Y!@5;u`rD-jT>pGXD4PT7y@h7r>l5bOE@x5J^VQDyV
zz#)T1-{OLKLGo=q>Eqm%EPG743H;1O>wEkRAgHnHlT05d^)#bXy>Cj|0B#MU`=x6k
ztutX-_;d+6Wa9NDqdS*?JV{)5QBRmG;4Mq0J=epHH);qS@h9SDBe!sa-mZLKrDIg)
z50tTn_1q%VkKh`enTLD;A*S?EFchyn`{ECSHVGad#=&dS^32C#`NzUIw*%tIV)^$0
zAOC+_=-<pOnEr=Cy>eW>FaEIX8wnmC#$mmZ^0?j)g?a@X)_V)CmoNW5@=ZcG_Y-vt
z&+{Mg^ZZ;{RQ#a`{7e`JuSVe8#quYn2spQcI!4_rmVbYOxbC1S`Z<Vy%-7o)7Zraf
zAjSU@#=)x*<?j>Ap9tgJ4w}OC^5x%Oiq{9+26h|qid==qLO4coyQoV2`LlA>X7r3v
z6R$8g_j$(Lyy@cafe#o9v4edPKg%QCgk@#+D)vPVC2IjsP<Iehnda~_@af8&RZKJg
zY~c3@FqyHCdi;zP-bDY~1xtXEl{qU>G4L2F3d`ohIzGa6NXyPxm9q+z3e|~ae<ZrH
zZPX6pDQGVW9RDNQ)NhG0x6=>ynZPlvt&EZc(9esYl?B}5Uqrprtz0<VY|-5FhSQ_n
z)nSU&zR22bmJc-AbNqi1osX!UWFfO2Qt|PtHsQQ*0Db8daxw~wHSkT_{4z7MjM93m
zv!_g8mosU@S2U8=q%^A~IaWi$zf!E$WV?pi89voJrUsqq1>G_H@+~GN9sQ<5y_p%B
zoWOno>qWP+BkCb}F029*#1o_~DHRfqRg<IzR}rT<*fzJ+#LSfspE6~td=8V+yo_Db
zrxI>y%FxNd>JcNVgOi7*AY1Y<F{F$2;20HXLU0Fq^Gy=v=wLIujEp$gJcIS5H%#q4
zpggr99ge5}p$-t=(GNtYW5Nfdms6~SPVEf(f%HZxoyPS4gZ%uJeu;RLU5|IH(9SJv
zk0AfyALlB=xAxza10bj6c1N6oR?_}#nlQt)aX|(vpE8_&PpP5Rv?AV@83#aBuGQx-
zv{nwky&BR!N)01!U<iRWbUq<%#uZ8Xq+BGep#3=vVM3(+a{1)p)O19eQN(*Q?Gcn^
zKQitAS9S6<<ogih+m54#^&Xf?13o8d<3lhI#T8|8wxS?2ho&q2kUnWJn;D9R3kjBf
zsrvTem96Fe+$vzt^2RHm5Uh&Ew0A?kS3th)d>k|hNu5|1v6wCQGnk|akpvWDuP9f@
z%L=k`>3x`JvO~^bqBg#&ADeGk9j7K@LNCdn+e+u5th!0?|MCbDXf0h9?j;QfSi0U?
zeE<E6@8|vGTv(ps%ftE1T><ifd2AB+mivvR%d7$BH5L%yPN4GlW8Qs?iujOy0eZyf
zTm>XfJkpiI{YC?hGb+%$gfBzgOnk^RMJYqw42CTpOggd*P7TgM{?W_?*Z1f<G&rZ_
zhG-9^!m?`@F9yT8M`5{ff?i-bnvcPrM5yjcS(AD|3x57H?olADN$UiCpnU@&1te5R
z9{BbERK)?!0jQM&5`Dn(Ct!Iun!9aqJung+*K)0I@w76zo51Ix&rnQIIwI~bKly<9
z8`X@rqCGfdig~nBO)6A|ID2XlYo43kQJd1-nm_|vysf4f)7sA6L}UoGn8@JpX!|P<
z800Cbc9+edAl35WzGXuShh-WV&8GFmHIN9P6Iz>7YCE!V#<3M#8TeP|5g{&9AI~L-
z!<q3LXe-<$O)2hjzui+ZEY)4&kDZd{^_Qe2XBTnrWHtw#F&SkZe^bC2lMcb0s$5?V
zN-P5a7X%N4KE*y4S}Ekh1%(B#4?yS>SthXz<iR;zmW=cZZO)WL%mStrCT@diWg;=}
zcR%^bPXLX}a*q<rLZ?t!I(pfkA3S&vP*+^`3U~-{uVT6`<UjHs#zmd8j5UbD;-Eil
z)<6XymJ!-{!~9joxF)~1%%@|CH6$II<nXZM8iI*+Ci-Zi(K>fVvdfhmn?J0;YW3#>
zknM9?(+U8{_gitF41LVqkL#4fI?1F89M*<dmeg~*+OpCDHdq?DFK0aT&_j5Q1nr-2
zKzn8Q9*oXnB#}Wk3qIzCXdKW!p4{*Fn}bu&|9Bqv$j2XJ`rmV}5EDX=q49@Co@Ib_
zF*?GHvTu9&$XPb%T0URhMy#bv;=R!6LSi@z4a;rQs>dhCH8nT3B@QRDQWO?TMm`vp
z*w$F*@?hRU1N|*2XHVh&V`F`+4`l=m+KBmG&8zP!y=!$-*IgydpZ7KF-P^ElZ{xmw
zjqsfWYBli|Q`GOBsx`w_-&Jx~7kY>8*w?Tx{Qv*OdTyt-68o6n<FPuxFW=Dc%-~FW
zP-Wl;(qcDJl&82UU7eB%S8sMRMSF^x)75Qsxh*?T=Jr)*+ZO?^+m;h3bEQ;g+7}Qq
zVIKGw@uZx@b7K_R<$!RJwm35+UeuVOPR)R;&o~Q3yNjCAHL0o0T{d4@p4(TEVOs>^
z-8Nr(o-3sy-MRoc;COL?evF*KcH#4H{K&(i3~%D;VJj4z<x{qjGw@MFXL0=E`uT<g
zZDJ}jl|knb6H6V78s_WbHA$&7D??`rt-8B1?~to<@sZpZ-GQuqtRfpF2avr+1<7K%
z=d$W6rW122lN}}Tiy9Uf5@CJxRDAw1vCOfk9@m#f)0-peLkAgS^mp~v_g|JT^c@#N
z{vtFT$C|P-IsgX^pBHv{*fq(+u}u7TDsHIiZ#FvaI~90R#l5e~)^>MxZqj9GyQfcw
zZC%pyF)=@c_Iltvg{GB2ZUP{5rY_UC+YIT7cJ9`PALbkm4%x*4`ai_e?BjUe!$wLx
z{YlB8b<ND{??Pj4z_zo5T1)I<N+o6Xd|YyHZ8JUL-NwCp8)cVE=U&+Jce2OPnJ^%@
zCvY@CA6SS<nf2Kgn)a2p_?2npG@G5q=$ye}Sy{t^&Pk=gU@3b4I_g&F*XBoiKi4mP
zpJB4os9XEJe{J;>GLHV79MA57b6ILXAFH3Au!}&xmBk&aCP-^SipAowtLs}9R9M(~
zv^H%>PEK<mk)F$DwXI|(g_APG@V~&3F??R7zoEe4C}{9k&KsV=`>21QmXO(u_44YU
zNm>(AEvSAtPN4dsOW6qPx5D~$sbc+^BUV!Hg?IKZQUCw0{6My|Cj?H0&R`pZV`|U_
zjNL6KKP~6p-dF$5+e2}gdtsU13T3bzg5Q2tc5inJ_x3yW`}UzSMCh5G5V1S-3s?q@
z&Iz~}Kwa9F2Z`O=O-x*QSNW$WhrIpv(0%*3Kf|})ejD5G`%EhFJN7r&eqdjRQ&^DC
zg6anUN-JZa(I~MQG02RV8<5#d3L6pP?J4RgxStu0&qPMP|2%JVDrm)4hW3`V_-R#1
z@9X%UCfe6IN*w0j?_2->2=xmDN}~|CcK(yN#b7;LYvsVX9L^n9q`FMtLsyl8fgti$
z(2^65j9DNET??BREhlhTx(Z+eS=v}_Y)p->T5DpJl&Vrq>XkNaOH7M4UayPQR(LBl
zM)*Kop(5mRrB&M!dseO>NPTuNTVd2Y6Q@j0w5yGB_)obK5DIx_&@VS@9f?z>=;JhM
zgFHKc_8up4w-GmlUV$xZ!#U?9kw4v%zmp|tH6!=F;cDcqq!dS-+vohP%jdMaQk=k-
zkn1wW`YXL@#ac^^KQY&Bv}aa$(~Gp0TJ9fN9=j{k6Xy#5er)mPI+Clh<Gl%q$=2jN
zM{*_qH)?|o^zYzW;yalJfAv7o=-m935K_K-q(LDc_0jGTMumJNYv)eb45vV|&2SRE
zH=1fC-ekJ^zel{eyA8eY;jR%T_(R_f-!q;R-@D5CWNI#-Z3<1|Z3Uf*W2mG=k1yyX
z$)DZu>FY1gPk4b#<Nm>Y!c{+3+IjZ(A91IwX%(r<Mt63OUY1&sW(|d8|7J|`Otwr$
z63Mdn*>~_B>2uUxIf=geK<sg*6JycJonzYN@yr_#OA)b`sK2pa(i1Tjez#va$h(nS
z%@%Rz!{3BltWEd*C*1i>=-JzhUe2)N@Hz-LJk@&=kU}%KoH73W&y(-F{ifXqI&Qv2
zwbS_CUnbvs`_25n*s9%!9R57NWAymlhn*P(8O|}|__672YLA?u-?~b=^mDrpIWzJR
zxm|te{z&}3!eq*IY&$;}!Xeui@FXQtHa3%_R`BinJopRjwK3qC6D6HzU;c>sb7cEs
zJ;$<cXd`Hi>%=iU@eTm1R;viTHl+T6(9@indxte!OzhgJn>yhf@)G@LqMm(7=EYz0
zao}0j(l0DO98Y?K@&k(*yRfnmbCL_)8rqes*TQ9QMQWflwtUub0uaion50;%Mx~{m
z9$S+g=Z|4K>+M;UKAQVPrFA+J19^_ZOb4M+k5OyYD)~KRnk&u5pD}oe>LBVF|BuWM
z{h`3mKa>&tj8*F(KZhs@KmW({^9TAb#3c4X=pUx>p2KAXlD|MQ28T7ZP%Y2Nh;heT
zl^P~4ZCZw}CMV8SHYUHZol>af%-0rAoIW?VMp;%0wV+JRaK_~|=LDw=O`X^l>(JBT
zHP1L=5|c6b_0uaO>rcr@h+6;uviyId-vW2Y=fbhfAQNJoGm?1Zs|pqr+?<^d>(*G~
zwQ+8CC)Wm!{Up)vvFjZcb+SN%nhNe<KEF&FjE)-t9_dG85cqfv>T(U#r3rgd{bF<r
zN2&PRbkC*LX2*Ie+Y8{Y-Ba1YxcqS{Us{qsUX#i`7@yzZFP}EV8=qhAFPmQH<*s+2
z4Clr1IW;NyMYt|#H*28XTx(rS#%0v?Uy}>S-hku73icjZj4+=^3u?V0Sff(XgrhRe
zmFrZ~?nNFtJ}Jg;O=0ihN>$3F_$0f(!V40(_fpes7BCdkh2!7~Ci&{<GRcsxA}P*=
z=_YdTrer|6^*<)RNaxK^=a-i|gh-=R3c1#3Hy2iA_-sy#0r$!Aes^g`Y+_k^VRmgS
zTfwkOjdFZ@pj@rfC{xoD;&L0Z3OgIpk`nnj6WLTVw5h?Xlm2ByooEb#bryBj_tyDe
zmy?ja3hUe@pU3Bb>6atL+b2m%5S-V#thrS#XF`VcXlsp1MUjqLe@R_p(Qv;z!{A^u
zEryBH0-5$$Lf*4frA$po?i^D#yD8mj{*<o|>U9_MufeL1K91@u$inq4Qz=rN-ahsH
zSLFk64ta}M3hP5(mU}ZU^rpR7W-s#&DN}eBxas&rWcLeO7qZJ^98;UQ_do*dOJ?qI
z;%43+{y<G7mO@=!2`&0NOzZE!nab0;NjB(wy+*%9j)Zm!N5D8B1aXg^VFLfYR*3Z&
z6LhC$D(tOkwG~SDLbtNgkwL@ilqJ>_V+x#co>M8D_C&we?;Sq^)j29H4gXk7+{tjC
zoJx*_eez;CEu>i!=3cbQg_te+tJtIrZw9Ip>TGm+8ve1GxKrRcwc>wQ-j`vUv2cAj
za9)V%vBmCqgOS#<HdSJ(!L=}0X;1@pjL)wft)r8ZxR0O|dQ1!25)0S9m!!pLB52XC
z3$$F^C*V1a{{J#xf1>{kzLlrR&;|zfekHjkSVod+qN6CEb*9MG1XG(VHx(HcC>J;w
zx6!1em4rIBnErE3$$vB|zk0Rlrq+LD7#X(EjC`O!Q61o0<|wAmNDqqlsS9*Uh$X<f
z5>g}TqW&(>lvLA~|7)SoOpZ?fZ?N6A!}*zC)#0=gXzM0`6WbBn-<-a1yjt%kNuagP
zCXFgIBSR}ye(DIu=a+t}P-7afy|%-(gE5kZkR4A-L~c+aDrmicy3%KmN_^1qnViqD
zFc`et4{2<JG|)E`8y?IVKD9)UPc6YG-2opinWNTF)im2d>s6f(FPNiNQZ=l6xJo~R
z`OUvH^8GsH2D#=Re`Dph>a@!YeBZkt%DD~7d6l%)x*2o}q<x1@xn8dM<V`uIZ4_w#
zXnd2hcj&F;TJ}Epmkr-B3<A~{c@in|Uvnmbg2|tf*2I+X{&AwujP{SguY|2!1ez21
zzgX9JZqtM|TZ+?QaHiN|_$0(2xetKO1yTyKjqzPJALYG#nB8`?kBs>6AU+6-xVatX
zgZ}B|^6`H}AAp2>v`hH#0UOCzDcp7kk^kD(2zE5ygwAY1K4S2`KF<fY8M1_GkHLKS
z@Mb%G?*!02o_kHGFGi>zjOqjMHu6{4HhxLlT#A>80xzOY%!yu$lotWyd7->lz{~$3
zy#Sz~){%PpQ9Kt(0)Jxj09z<coZING%5&4p*g*U8Az2MsMmfFEn`xKFW)1OIE*X_=
zFPcy_h;(kF|3jP>zO&(PAcSpQ^JAZsFn`_K@a{YOceXjyT4IOry^jA*^7*>vlOLDR
z6ZST~`!4^z?$UJl?<7Bs{7yonqCw$1$+Mq5*0SmV|D9yWTW{6x+lT!Jbfbv!vazyk
zSq=7DSP;Gf7fu3dbCTifD>y<5&IGCg{W7akPC{?y>Sx?Jt6<#z-!0qx*Wtrd21cdV
zY6}|17mVFHF3Z!hu6?V5&>O&^o?A@hf)PL5ab}gup_)uk1j$evw23Nuq`_n4W|E~-
zH`K5B_0HxQlSZg0R%=X2vJ`i2uFq|+^0w*{b>PN3z((#%pkoaCXgSK5z89r5#IY!#
zJoFt<o-2^%%2~gBKA{g2<aScqC<@NGwSo_$r3AMyC`okgEAR!wSwt!9&A?ein&_N3
z=be_9H?FB9)iSavb7K222RJFFK5y|b6q`JH;`IFPn_cA{^Sg&Mtw}R$JhSF?_vSt)
z<MPwen`SIqQ?hDZ@vK`$UwBZ+h3>gs87%D_lKj+TBktR~aZ;eFw83-XmT)d~IOl=T
zSELupkS3Ew+^6HeBBF#{y%+S6whNR7jn?U}&1+pVGTm7;svy`>oNBNr(nlVjH+<9N
zg4&J0xNhogg~wFtSVwH_+9R{;m$sxi+zx%^(B{%5_srP*_TdRNe9WHEd02Pi71W(I
zh;{q8eZ+bCrzj`Ai9bKUpZ38kT$BT?Z^GQ5$sNq=Q5JNpZOa(yjhEZhYLB~lf~I<h
zen%#&479Ip^VdP#s@AyO!^Ue1cj|UhC2d<L=NpVoR<(A{yq*ucxoyF=ZBqjX(dcF`
z0570BGTc8PFHb>UN}}<S6eV+SU)G-K&(?KdV>p?w*NT$)ra4NBmGaM21s!WzBN&Zj
z@<M)OZtvDDlMBM^B6}GFCx>bDJ?NH|^sXkl5=aVLY|!GzcqUAro!h==PD#mvyQh^L
zshfA#%$&_D%O=%j>n%!}@s)T@1+(@}nRW8k*>RkUDAo;Ib?1Z|b|oYy@aw$LKj9$u
z9nKvLeLD&1EYMpk&S#1bSKOQ!Q9-Jt`h(NVH|clUj@WkSKrxU>Dk_(7F(>Zc?lWh)
z`E}q>DC1#RH#!K?o29DnjT{>pu00Q|Y+TZu(z^4^yqxLdhs6~!29-XwY)sj(HDfcq
z!&kK>+@RlTJ8Ijd+YR2fja;;?Y2)+T>rCDfU%6ZXIVqTN+vMt{?Ir4vOkje*_b`*m
zZ)9?uIS+p|O$TH+sbV_5&vkg#$}#O*vYs2&)#}Zgv2Xeo|IgNfFIUZL7|m@U$drZ|
zWo_H11-U)sH~gNGkK98%&CHjvcm_nDjp6#1KUtr|@)^(omqW`*vtd5Cb(X<QI=L@u
z=vc#SFm)UCv#$;5v3c&VxX%rm+izEyh}Y4Y<$6f-D5NQe9z#+ur>uz;P89}o@g+E`
z5FY^SsxQkgTy3wgPp+-c4`^1;t8MD?*3GKqLLKCV#v-r(&jkC2l4^hIobk;Sop$Gf
zyfGCXR2PBjBGs@iHP(p`Z-BoAmClDFAk`(aZy60q0Rr7*+BR|Y+RAnK8dLVTI~JA^
zuV;-~-q5+UC&XV#f^CiX-v()-?`PN_O=58ngE6rmYCenw9t}6913au{WWSm9$~@xr
z`RJW3<PIXlEXQ~G^T>YJwtShS<knUNA7$=8?|X{6M^!Hvo?bk6Pshk*o=lZPuXDK4
z9f9%Hp1ADVwA50Ep;fIVXc_l<YI4q)m30#iEUqX>E7!_ZN~2DZ-m<7RZ$yz(r@cX|
z3iD3J3cO42yvB~(;^SWNZSC0V1=&7kevc27bH5~B=Y9=}(R-W8J<wI1kMEzLJtoE0
zaa*7oUPsR|$sOP~@R?c0pDyvisWcEC0rS9axv#3dFgFLz%rsmV8S_h3#apP`%cc!U
z)|gYwv25K4@J5(7Eu@3KndaqI@HgF{8Q4rh);(;(d7#vhWO_yGFfR?sY%%es$5-0S
z>}}9mQhZxFw$MekkY2;R5~o%taSv<NK%-T0XCb3}yE!3!e8waR%1t=6-13esO%$<+
zc)e$Dn1`oenIu{G&N52t=)yOag<Xu^e1zmv9V?3oiu~4;XiQYy1^`jKqGN`^$nH`r
z6ei_YO0xlL@-OOmEjP#M1pBn{YA%&{ozZji5|WK>J-AKJM6`=V*l+iN-U`vRP}D-T
zdXt>{5D-LgMMs@MF9#0zcL3F()PTS192%~YcwMgLVht`WIK%f}B=bYKuMIpV?5Z1H
zSUN6oYx%h1_~gb#jU9<w#!)@3P1z;f4`7kApfRIldVOk0hFUvJ^8luqAnm=FrqEn`
zQd~rQQ^T;5(kAE1ig878<JxSxjn^e<<}gNMu6xTkTHjKgng2DI5SLw(GOF9Ijpx3O
z`-euweSq6*4Xo!bJod;y_&oM4FEnpyeqKYE=?gvkh&hXq?)H&4lB}RRJ_ePrK*!%I
zz~P}Cs=)ODdH%?SRaMg}V&(83%4$kBZ4@}kHB~KY_4`{FRiVE}PRDI=E4hbihxB|X
z52c&W_K5d2B-uPmK!hbw?cATQYb8iRuK4YB*DZF_g#-aujr;@?Yw#INbUi~d(1U^F
zA~uMx6jpVNiPI9VCvZ*rWV1P04^FC01})d*NHx24=pVcvqbL7FY-XD9nLxBbiL-4I
zL*22)PnZ}(<FA;eY*$Z@%1W%nZG*~_pX2f-=^IJW-UV;EV-26Mkz_=2K=v6m4?IJ^
z&7U>E=j~X*yM}AcLYhubS0-2btu*B=tn<>_3jG;{qu{8NnpT^Oy6`o>{~UQ6aTBu?
zTUj_QHkwl<xp3i(>IS3h8`7Jm7slk~q#IHcI+exYjjwMoBp0V9cTrp8SJqe08sd?g
z6Jz{ptwB3sv?D*w!EmqQ7z)s<qTWI|DaixapZ>IGN9Zr15Q-E^y@leA2>3}9$vhO|
z;9yR@iS9I#2l$w9J(U=ri0PaOm!~TQ{0&U!84<7Oc?8!x5|=+J;)Oj2F<#yWFY0*_
zpO@kJIVkdTT6U-xXAL6$1doT>`tTF%c@W$7RPJ7S5uXP)nKy{uNg$7;7X_$f`=a#M
z+j?r-&iwpL3vs697kBUBhQ>O<MB<j7CG;IV8;A`*oX2$!3w=eM!#a9J(9s`d!o65}
zC&pjnaWE2(8-DI-@(f(ND`i9AN-*qAo5Eg?WKv8j2h!D>u%d@657Ga5fi>r~1<I!V
zf9;)lcvDr{!0)+R(xge6J?WA*N!xUxG)<b8(z2IDKtT}@N?A&26%YYIMaQy;RRmE%
zMAT8#(Q%n^+(r={!DXEJW?W`ObiTnEpOJNx8I?u+Y;*FR<=)(zrD=J-@%jGo4<6Fw
zzVAKvJ<IQX&pqco7e-9IaxM;``ijQMYg@uvlikQ(0l-bGhqW{Z&30|&#6K>bd1q(C
zs3uoDg9q3;V)3MkvWbgFN2k%ir^@LHw{4w0xIRD2>@z?3u*dJo898CfuvJeiS@Xd~
zZ%OeFdcG<YgWQPo9k4GjB;SFQ5490}|2F=fXXy7csK2m=AJ455){yZ@Bd4?X*3+pF
z;0F#}jlCq#z-h)*fv@#7_G0|Gc@Y2bY(rjIUSml5kLY?)fZXF6fsE!TbVRNai4Vyd
zPIgb(gbOabtaF5+ZtkU1r_QXoW}b01Z}3!#I~=}%&vB*GSLSnW>M9>vOy<}(@$0!8
zgj>_=x?R$hUEezFy=7Ef(Y7v_;0{587w!ojypZ4y!QCMQ_rgPPx8NS!Ex5Y|f;$xM
z?od=c&N*+~9;aXTyZ3hg=s#U+@43J6ZK+yw&#~6rtJa>=cXS|vwI@k)!M{cy{N3@#
zOJUL5bF;VB^+EN#NEu^MKSF3F_CIsyG|eFd;dO?D@8&y&9H3~);X0c6DqqMiVwSKi
z&K$XXU6h|L`n{L(I#_*|!?uzW)OVtmuA9JCAB%@AZ2E`CUlboBUBAm<EJA#k82h0e
zgQGmQUhEAh>fCq%mCb7U**vG1>_YEp_Brrp%1-c;ZoR5dz|({yr{P+UA+}#gr?kZT
zqAh)H2;z-5PCrbXr7K{Gip*4ko^WXUd(kS3Z0ei$xX>R)`cs>nB&|Js^XdBy+Gw@{
z$@M$GlmTs6NK+}oH-+T>Y0_Ogynkux=XHGT6Gu+#mm!|?YS|mfH@q=Jz7V@{J`=)5
zbm={mQjQCN)DBB-?U}KxZ@74-6-Uh$cqEIawY5&C*t3&y?=`h?1wnqGu-?~ifmUv9
ze+bD80yeS1!Mz^ia__c;3l9*Ovy_u(-(^Y7*Oc3w3cw%NjN^Usq;g6xv{nCW<6zYK
zd+iJ}hPfWcmlT{|i}xA-`9eSS`dr`JrxNGo%n71*^Wn)3WGk{nO0W@%dCoXK^D)iF
z?Z}A4+QTnV(cK{M;5C+dExM@#*rrr1fCaYeGN`Y&vQ3|3g%Fj7QB3CUJgH|E8(97D
zrX@KjviabA`I`$vUA11hP~wRs9YiKJ=cftB>U(c?cM40q+a}yS{FTn-$8ot1$pbKV
zW-dW%1CK8<1nX;kzh3YM)p1;V0vP}RCkw@6u+<dXv@5U*opQgP21L0W%==+RuWp%d
zcD<n&DZ^%0OK?-E(vPMZ4}rXEN^UxgikuV-Uwd22ux%Fdbi=qP+(~CXTd_5;szS+L
zusB#f{gcO|8~F>C6WkQyMJ16Jb8D>J2nk?v5?h4SPM^`sMrv#Jarf?*vr~MS+CHIV
z+35YBsNyCD+13}t-?k}z=Vnd)Rn*@5DhI?J$$vN`yE<(?HQwhu#w>CXKLdq^b!~Sb
z<d~=T5936YDnDyC`eGmHYOM~5Mhi*B7Z##Wi4c7xBnw@8KZ~VPaifQZT~I)-7DI=J
z-WB@Ud^Y-c;!0ZI_P9$M2yETsaQ!nd{fYZt2x8f8>|t~UPMLw<cr(78V?vLfQDfKQ
z+IUK4Mp^Wco_Kb<=yqN+30;E=*G@i0*-V=+^xQZ-{3YTEuzA2l;rN#FHPEt{6g7vr
z3Jbmz{oHq6efmDd>*Z-ub$*$YV7$LC&QC2luI@PPab%eV1RD4G1fkf^#Gz3$@ld}T
z72PLWy?C}G%U)j*J!ivb#}Z-j$hTd2Z3T`i<cVukPbI!%e<=>fa7BjpICovO^c&y%
zq0W3?PQmNq*vF0d32Kz%F5%{$-(meDsrZqCLNw1M17q#_J+tD(mjh1vEW*)V*#lvL
z>6q*13#0-X88GqkFKM$FbgCWvH_oJELem&(S@2$0^bOazrdEQ6=$Va81@+EP0E8P~
zQocf$fyq7<(v(O5Sc`qFfQ_kwJ0PmU$Ib-Vz9(1B%R9oTKVGZI&x7Z~4%xbM+n@7k
z`D*pcj9!9V)P^JP#JV8<M5vP1YXXFGg<XDOP1j~YGEv@(ty~`L4S=Xq9Gl7hxmlIu
zZLmC7Yiw=Mm`ZCA$I@v@vedA6^Is~jKAI7}Yrz)V=I$>`-L{9PTukh~*p-AUmh?Fm
zaQ^EKhi_N0t0RH<D}ndnD5zHI-IIQ%@74(HW2*0C?fxn^=NF9|1Woq88SgtF-jMD@
za~J*N$8{mqp7$ANbG-}iEI>Ih$@30ivT&cZY7IV|c)Z!5J&Uub)8ND^o{I|34)X4i
zv#PyANH#UHuyPgr;K;GKk+Vv3fk~_N3mCK8t=vq$rex#F+eW9snm~C^3Hhj<rpHP)
z=o}3hS_4>}@2|Rknb<9XZ=~dpcJ1=A3bJd#6Xr4UD>#zOfo2#=-;f@-ft0A;9My*r
zOf337@_?Rw*pbvtnV?C5N?czJ5n|yuaubqH_6HKW<s;nV&?b<joZIfh7Tb(7^?4ff
z-zR(qV8wf5$bX!PC=Nr-c`NpzN%=3CvA9A`T>}4E;61fY<Q);m_NNoHzhUOLJk3$t
zGs9A|b%L8OGV@e`o;va7{T>|JZ>~}~lvKck*U7=J)jn;hKb9}8t0skC=@EX^b*8}U
zNY2;Wv?vG6Bn#LXlCLf!_9hq%^;z(w(1mumDcmrYW0$)TC3*EQi=wjH#{!k7*#Ugv
z0b2g);=3CH@X2Mn^}DT9(<Zw72^Z}|OwaVpEs-4`HL!{i#hsOO`9;}`TP%$5(AkjY
zhL8Jy*@)~^sg4xYo&&Ydm;-1Oh5D;{zVM>xHvbIbl4<<Z;oG!E?Gf?vX-ZlJwa|uZ
z@xFw}u}xkQH1x6LRvqWKo#LehD6%o}QdM-%o-z}sgUovFWEZYBJ%u17fsCA@YoI<v
z3g&KBDx|R^&zqpJPW>?+a!Mw2P;j-<X`G{xLS;uT+lxLKzwc0#P`QfC%s(<AY9MI|
zkpCzcUMMHlFcLK&<=5R6v7?J?OBQeEv%i;b{^lJwT}O`7%vayv=D#mZ@;<ONDSY>^
zMbh|<>5_5>a3UaRK`@Y=+;6XBs>iBVS5Cm<{)U6T7IGYZv^bQFXz+5>eM@`z6^X~R
z)VDdiB<2*%{+up{Tv;q52b3jYMHHHMyvj|Cm=ykO2xYqBvk7WV25ZYYPg#GEDMUjQ
z+Kig~quykt_y&A=|NLmoLoSQm5NQ0}Fy$}Og=t=EO^WCNz7I%P8@1wbw*Lol=K|Is
z99MY)*XTB7eBz}WPNxzbK@jQ%(K~udwH?LqD`$USJZKuT%BC%jkTkc9iu}~uAPI7|
zo-SDd{NEqL-VvZ};JQg9xIxeWc>?(3YcO)vJW~VQA=MXZxlx2by&ep9!$B=xMvR+3
zPN<&|pq8;pAu1+Ks>*M<aiA%KZ@KGN=z18qhEQQH@SHyGuKR+t7X{nRIs;A$!*}8%
zw(9pu-=+R!`LJ|<uSBB3KTCZ}w1PERt6|cBHJ2)-A+s9KEdzMFhm|CPgn$5$6c#Qr
zIc!!F4W_I9z9u2LLDTp22J&OK9Yn7LplyEjS)3ON5*3Xn;V%HRHq&w^Eod0xzm_b6
zfoV%I%+7zlF0wx2yuu-F)T%<`uwFoU_!_qW$?j*&G`C?h-CzEqOX6;1W^O@1;urYY
z6TBDraR4*yj(9XX;2AkLP40~P#Coh7P$_kZh2zaF@S*YSjft|2*PV<HMeixL6onWs
z(VGnpZ(6?OAG*Q7)VLnQ;Y5AnmkZ#WbnZ!>K#U`OZ}!_~ls?gbUO?HlqGNhZaRbF2
z?Gp+^X(Z0c+FfCP_Pp>?BA8O8wB;vI_B1X3<gpH2pX&DMZt5hRJ@Icg9c&|(4`<N9
zqNdR7Vw08o!P3)?^ZT#+XiMI-4<8b%*nY~?aRxzAjpF;a@dfaFGZ=@dYC}Kd<g+s>
z5YkS^c;j?3FsZ1@5CWythx6v%+&}<OjrsgIM*L`8AZNsv8;LJBCxM}KK(y%hpW#*U
zhE#R$GBi%4&Gx9d{XRw;Wh};iI;aAn()Xkc_qD0$_o9ACWu;Qs0Ut+pGbUS!Sx~Bm
zl7&)X4hORj8H8C(z*$pzVs}QG+kGKR9t_QW<{EdRfD11ZW$ew@&YZ4M_G~~8*wGNJ
z__1N?nHEuM5k`AR$%-(Y*X<-0)x%8tx#)uEUX>V11PX(0cPk*eubqrLBIStv$lT&G
z?skL6jxL>^B#isfiQ)fN^XY^$8?7xXNFl97`6U>aSYg<pMo#4@_Br)?Bo<x$WXYaz
z3E`H^uO1LbY6%W1@(zc+m^hNBMQZ+4!h)!^1l*I$2_-^)5GU;<P3p`zjWNkP&mC@K
zl0p;z^p+sRZc!(ReO#0e`23aQ1ZeqRzX~^}r<VQf@OtNSs)mrqT@g!LD=eWhsVpPd
zS-2U8Fbc;mw~3QS$9;jG@nq#&)+Nd>5xz1Oj1oGrV3bStOCYAst2eLFkMHLJTjtNT
z;HC*VvTw(U;;0ipc9>PL8j5!RI^kze_b@)m#Chja#Xl~gg_>hz1&VYa>Q{brAH_e)
zBHdYU640R!t_~7oM#u`DRGs1rfG)LVp^RO7%0^8l?Ci375p_xuFe1Pedu`A%Z#k)m
z2ndJxC%7`+aNGi@1ZbaVkHct>L4?qxBb8yb1@v&VG@-+02Ti9OGm~ecJAr8vHHgS3
zx6Y6ioIOwnBiDZ4!7|55B}tZOSRyscLK6QO=Ye_b+qp|t+H|wG+tbhJeF1P}M{JZj
z!F*Qv4)2`kpx?%9ZH_o8$(fH1@}<LZQ3Xc?zSt_RAr^?|DKRd~s}Be0_(xd<hT?4R
z)_x41B(rQMOC$!*Kjz}O4u{npfNdg0Y1*hW8Ozm<O0!MT(5vvfF;LaCE7FjY`fG;|
z@G?W%;tLehHH>*pa&nhG{Hd&zAseCtlpDa&mVQ_IK2%e~1qij+<ImEp*=6}liZE${
zi2KNSMTVUmHcr#6k7%~G3dB6za@J7-P!foI-$H+U+e~AA1%I&G<H{~3rOC@!P^<P!
zLE;p-WP|i)!U7V4(1=hh?PWW@@=zil6U`WhGb09i_W+s`I}R+=KeyB<x%dI@Cr>}2
zaWi5rOTI|_2{uBHV=xcG=tiB!iOnG-Kt{?RTyUlPc1kM#&##Jj;9EYP%|bXgcmx}t
zPEJgl7<;6#@GREDmkNo$+;kImMJ9i&K`_gj&x~V9Ix}kO)aHV~3SCy9jn^hy$=A$J
zq29V-HRI{Y<7Nx84<s77rhoQ<9(V*!^Edh1Tn|PGF?=?Q^}y%w*R3vRtUpB`b}3fy
zr^f8baJ1l0rMA4~ixc*}wi~Z$k<eD=D)>>G*5Hy|=(EPt@4cmwT0CxeqWjZ@A#n94
zgde08buBUP(AS-I@aBJ8T4Fk3)Kv7Qv(;FA?<bhY=;!Sgz@Ps<v&btdw^eZ%di*Z}
zXW>n$igse!G1v`vGBGAaNF=eFM2ylHInrX@-1-;qFYqS|R?+HNHS*v;Od#HbSt9dg
zAAEyYgj)er-u+#?+{Rk;(DC`8dqpPSh}3<ARe8zn{&-8A3TK}=>@fm=N+q%#EF4Vd
znxye78Qd}Dtx_*e*4saq`M(H|k0QHwow$iNJKg_w12^JEkaOY7P{-ti-wY=5laBG!
zj?o!?3?Ffg=_bxIW6Gk|Ml~OTSH?N%<Ju8*7Jc#=%2mK&JSP&Zzljmcj+F0nv8of#
zZMS07=&<Ytj}5yha7ipm{VmF^$bc1;iexi9y~Q_KTg4Ju%nYRvtqq2}S#|o7n!SZA
zbN!YfoK)0|8YCE0JF{hRCD8lPCbpV@E&muLkL!-F&4AJdKKQ{)1T;LS!X52BqoT$>
z33yHNY$x2#V`xY^eAG#8vumNF=}$QIDSU%$MQkEmH47I$*7K@9xp6u3DP<&_eTR|g
z4U43~$s0IwKdg4y@Akw$LKU#;#jeM{WzYzgS({1*0-&Tx<#7iaV-A+Azn&^D-J%G6
z<rg@-fW3)0=@`YCAXG|-gX$0j@o;D%0fGfu7%~E*TQ<4fHodQwo<R`djp*LWwZZ9O
z_2bf_O9ED9l*{Flv18ZW*KN0m$V@U3kn8VU5@mNF5oSIIPP}8|>HG2i&TxGM7*NH)
zpfj@E@k2(W<{6v#x`GgxuD18qp=TWqR^d^x3pfkslG=V3x~%|xC%80(t^<OHus3E@
zkW<N5hB34Fj1*ajC07m?vN`hT3vFa)?M5n8xe<wtz=lX#C`_|9y5|Y8%(J%qoeg%d
zf4g%%3AKe1_naQh_<1OgLc_H=UB6h2)GX)D7|~S`z>70z{ltpI*dwu;(--<(lG~j7
zE$$}Z(P?cf_V~TOe$z0d+5Qq%XMY*0TkHotrsC(50;MmNd8RU%e@j)3`n~YEkybIX
zT24<KyD)+RH8fJs;`$fs$|xZQ;2jEgNSXf5xo3N^m$|i$+1I$lKThvc6<RDmj-~%)
zz-IP>kaiaR#lxZCYC&`Hq4|OM*y)o<>PsdoES#hUW+x&;<hP9N!$F{WR5oIld9F|f
z1$*k&BPRJuY|vGoZ$BfoO(yj<piAa)SnT%o&Dpn2+L;O>usyYzf||dDtsPI85SIE&
zFL;DWnmn~>+p#h>sw-JD-yyZXzj7jif(AeMv#R+=kCJ9#i-g-r--=Hx;c>d{;#kG<
ziZMB<@qCTPg>R9~$;-LB+t7KlIx!hbF1l?c+$ZylI>KS_fIyI`Vk9?;(d2Cz${g~Z
zl;1>u7&u2(25w%(jT|z0*PxT>n87u9M4G9^weCJ5g&E=hqSIRO;p0@7^h3y$4Vnyq
z-E&q!qpR4_9<;0;%|~V1wun=;)x2eDlQ&j2_098A-fBIy)i|*B5G{IWZ+zjXLHFaW
z#&1Uk$Om`e`c#H_zOpQ@Ml{Q?6f8dzO$<--9R=8Ilk{&M)8Gp=`uXpE)UHdZRjdae
zrK(TMW^Z!N$46`V6w^%~u=ATAP&>o|Uyc?YH~RgUP6qCk$mA>?&$gITSmI*sPniKh
zXUPsYA*1`$`<l;oJpP|P!enc49{1+e$;BpiDR%nziKxjt<wCjQtZ>fVFt3(v*Tq=x
zDJvqgsosigwVAP@waJceHievb9Y0}plI|pI<X%{xoNqN<Ik24R&M^7N`9~Ut9a#Xq
z?C}Y;KdtvriZ&5c@`?_Aos#s|IN<p3PVYT@GywmQTp1_LpDK-wmN@<J*ZT3>2{sjc
z6A+4_xp9Et0;LZPk&!OO>jeK!y}0qW-;7ukqXN{jKpO#x*p$zPE?7(R_ND>N_X~V-
zl!F7#9UBn>I8siC>lX@Vh4Ha647(L6?&*Q-SSE%KS}`l`cxb*}{=q*2GwyXG(EJ01
z!vuOB&M2a(V{lw!u!S8DTtVKZu1M1_9tET=wwh%cUzG2wy|raw<n&Fqx)}yAYR#@E
zvU$1QqN;rr<Liinp7dHjvNbTyQB&7|Dppu$_b1LQA7R$EPl!T%kK)DJ0<NYOBZz;Z
znX9jUOhr#@F~@t%Dip?85IBG6I1slWAc-W0V2+zQkza|GScNOIR}mg&^P*z#t%Z;o
z>JJdmOir7Ze0+yPK|RO)n`nq6dP?oYIAyBF$uNU`EpIAW1Em2v`ZSWy&LmX@2TZUU
zkh#am^N#q6FIj~nU311(DlbjvBYMNrv)Q`Jfh|0c^dLWHU+D^?d>~p|XPn>Uqo&x%
zj4S*5Yt^3s&woBT3O!m5`g=VeIhty8COgdAy+0UZ2iIuK(!5LFXI-~$#?{=Qun@&0
z?Cg^PuD|)CCoes)nttu{Q`x?6RT00jijcOmw{jk4!;$l@Q}FM5L&+2UJ}s`X{vl#y
zt}xJ*6MQ-ILRx~kV%cF*U9GjonCgzB1>X9cskO@xU)?8cg2}JV#A#bdBTsT``(@ae
z1EFC*5MRSMK9;FIO3a$|S}zBbrC#xoZM+8wI^PJWW`M|k;^qY7yP$lu{D|f%`~|Ie
znU`@wmG_+n)o$-daP&&Gqz~EviH3sR)7QSA=>;*%=b1Z&+aD(iu2l5DzuYwbzJu>*
z39+^9S{j*4vmjkbdAn^<A!UKDDx{uKYM1xD5StWA(oi2{X`d^JSV(M}I(?=hrWQRc
z9ltSRi(f5K@iz}QM1@7-CDI)3jG?YM=o4}NhW^TYxBziDTL~%KGZjkDaGsX;2MfMk
zi$>7yw`SX1Dyep#^8`M&FqeLv#7ge(>|X<letS+eI}NM+8dbUIxMqd4x!ElS*}1J#
zEe46VPd!gO>m=CPor-)*uzi{0dyA;-P9~HUT8T_1!qixFsek>QS|CoJoMEErCwT66
zL!Spm$qsmThnZ^f#|HAj2?=jvbhFL`SnC&$=Fav=6;66bCSg(v?PrO(I4aM4cAtUs
z%`QMdvQ>{3smL<NZFK8Io8G3kp6J7}N2AiaGjq)4b@CGt+YaH68I`+LQS&-28+OWn
zHiqZgF|d7{qibyL@<U%=*0uaolI^XVEj$LDI$*!~(9tw?Fudn+0(U%JU|%qq@0&4h
zb$>0C-j57dN;<?Pf-Pb=lzuw}1iLEz7DnG8T9o~3Z<+Jryim__tC^R0#?z%^wovE~
zsBx^DbBIc|&;H8DQ=4P=R-`Xu+6~0pN_kMAcqpVsAz0X=1PUB6VNT5(503iz93Q>!
zM>_(*a}m}>zHrRcZY}VWTc`lvF!eMhGa+`vjy1c+bOpRO6P_?Vo}|Wg8{Jn6NSTMO
zvVX@u>ZcF6&S^}n)mqIr@bY|I;z{(rdww_2f-KFJt<Sn2Xj@^1+_&tPL&8qj-x!G=
z+{O9u#@mZJ=4Wv>J#5=Hc;|wO(?441nm%D4jbX?#Ja9A*S^5&LE)EY&<9+D?c_EjV
zZoqUoU=R^m;&zprgXpNCNdbAek>up}5h4u~Jrj#QeX7rtBJ1q^YT1CT@cx9qGD+0x
zhgB#lHL?#P_)p6uHZm#s`me{;<LzEMkKYmw#txnK8h=jQ)PBJbq&J1%E8J^ZBNH}P
z)ifH=>PCiY1_H|M+R3?7D=wyP|7ruS%v}gRk?{0dQ^CjVZyvgGN2m_~-hnn94iXcY
zEUCv`EivtzcG{EPykNhOBDGUVzpWV!jmChVUv8~gu*YL5w0RMgv(kBE3t(bcbxa^)
z_(Dx5#@t<c5{CrH`4C)hB(<0wa&;BL;n&pG%%cKlJFvTv#zK!l%$Y~Mudl;VlZ5c?
z(jm+E`~kDtu;bgg;`SQiSv(6Mm1`eLKr=Ozon!d)_tI`92IyK!v#?o}<MeVS8R>2$
zlD~dB?DE}%IRvA0@tm2}UE^`}F%alj-nYY2vxMeDkKF9y*twz=?2o{&1#GCRb=p<a
zI=xe}Zu7h9ui}p%&a4VgtaixQTI;w>G?*zmeKOxZ3*oPSk3l*+H6@T&=lt15dMMWf
z-SSV*IXa9m%~VJ1&D%F`-oU{xoMS`TjIf1n-=HJ^eP!NE9h7+fb9*R?2_bmdM<YP7
zc?0(b^>zKn8E^g}ksG0!Z{DCDLkRAt(Fk78yMs0UbKgG&`XnfGEgiKvW^Va=jz{IK
zpZ9qJ6Ro(dndL|gviUcw;mnqrCMsgiAXjzfgva5$gW-)G?o#syHR%$Gpr9aib5>On
z6z^)7;rYGaGEbRH)r|kk0?c5+7id%I(Q$0BL6Uu2(Ew00EJG1-$Oz-N)Dob!IYq0N
z;2d9Pgwn8!J7=W#lUsx}1v6dzyiq}<6DRo1;Pz|Hu2D9`4_-J4#6aT^`bee+Up9D}
zxL(A&TOd6%ZZzUASLK*W?_Ats0JvxyMd+$mVBZ+dZH{-&@myf#RWtv7XpVjKq4e#-
zGwH5eB4epnSpnZxb^xtx_)WB_oNShhK8@^?-Bo~>%CeMUlKUk?LFLlt2McRb82P5$
z+f!C*v(3i%9(IXkF?A?OY@y^eX7FpcRQY!P&C=<4HdecB&Vov4x1X`IEQgxzmpnf8
zE1u!#b)@Io#3yv?^U9`5a<6dO<AH<<5;@Fs18W?nAwi4J&f=`HVcd!4%TzhydZl^q
z|I*V{x;+f#r(RBfCJ4MQ)ajP~GMJhC-jW+4nf@$U=&7$~{Z0pwrI6q4+xcG>+CQ++
z-_y!V9yfB<Wh;wjM+9jFF=J*&$Z5Gkhecm@S<g#WcMF&$K&eqC3I(P3y^j{DDI1oh
zxIyTn1_Eh9<hg(XnS07fBI2_S8uIq8(T;wK3#AdtEG<B8l-D{N=ie2^%2_~l>M~6i
zWpPhrkVg+OpKLo04G6GlX0mL}C+5X83@-_$Zzh~J#!wHWH}Q0c^Oqea?9btqn~rW6
z3%q>%c)jTte$S9NzmOf)FOLqZ!MJCTWts`7P13qbznWIg$^F<cJIyPP*bsbUUTW<%
zOj)mz&|x<HnWE7sq3gS!n*A5S!lEbrZ>iq2J@~j5t#SryY9wNIoof^4Ot%o%(rW2N
zM4x@jJtOg>hJ+{b8~Ty@b@i4(g`cjzLJ?hmCn8B57SfJSl*NEu)Rk!l?|CU+b14{F
zO<Rq=>H3awW0W!h^|@;P{fCqDOk6gWO`$#UCh~^Hj-BlN23dlklM<nAll+S?=i)hb
zv_)>|#}@^Y(&7|ZaswT-QZDymCi+|Ij1y&nK0k`6tozi!Qg{D?-)raCyCTUy)nU@p
z&eB8Gq+?IHt1<>({vzAAuWb#I9xBpw6qL5;CqP)fHiff`vj*bB0DFB@&n@9*P+Cs5
zyJ6+u@&t?%+SYjvKRvx#KUfKAd~uq7-=R5ET-mX7)y|v3(Wa8E6}ijd5CSYP3<~?L
z83I#P(LIJ6roSWI9dn+BmL8AzG<*(8MXj4KViLb$^!|Q9U$}#H<*G91SClS;=a#=#
zkWdgW*Qn=8<ryI4@Hr%#Wf#)J8Ff+2zUrNNc^mTKa!UH0vViniiU|iq&|LUbP<i1e
z@lMtoPsN0vQknr%l;A#`=^+W$l<dn6bNowA%PLn(p-;1+bl9zZhZ2=W4I9S>QPI-Y
zHp<fnk@M~QAlz@C4Vrs{Z?&c=_z9*>5|)?)XQ>WtBf>c53e&9_25u%3^!%yUZqsss
zPu)l|!FqW-u0MFmzOi2WR?SKSg4Ak|{pe3Q8IjSL#Y{>t3fncu!J6*CP3pg&#$D*n
zvn2PlXbObt-r<L4wD;=ty&xB2pU!7E+y(3Wh1Z9?eZbo5yRN~h3idX^6?#uhN%J=;
z>E&*EZZ;0BHR1)?#^7UDsDe4>szNrCQ-%d))Q!g&wKm3_$v1`8{ow^-?+z14wZI58
z>_fJq^uUhT6+xKXBfTC(lu=7cuGTU+5B5COD4&Lx-~XUtfiJYPV20HcAe3Mpp?1zZ
zt&x*lwvOd3`X|AutS)Lsa>qm?;4UK=E1Ri7gO|8eK;9+30{LMuLnZNC;rr!M=lRVM
z%SDN9=(^$1)6p2-H=u8QOx-VQ>;CdyiK|%3>f-s8KI2W5I1iw2$2?0<y-v*!AH5sm
zlOJ4$W%V2&o}V|W1rBsDd{DB7CerOFO?Yd^s#LT1D%J>Mxe0J5l+D-$LbPX)S)t`=
zQLZH}tU6~AS;pAb?mJv|Ra-`@=f=9UrI;Aoeke4_kW<<_eqUm^L1o&e>IZk*+~>Ps
zG}Qc<{P>sz+Cw>gO>Z8WN;*f|)Absu?#zMH!q%^g=IK0F-D<6M#az~Fb?9aYKV#@{
zwwe3zG<L6pb-ckLjYV+BJuxH(q95{5X&#kB?U9;&XEPJ`iBFLv?U?cTo$JvT*N;5m
z$I9128^p%3xir_0E(IxRAA=z_hgP<fTm(Ra0M8K@m+z0-$<FC`LuVXXzjzaObZ-od
zj}JZ_)Sca3$;cTK?##$fC5bFHK+*QRWJk)!I5&7?)#hPEMGQ8c($85{X7#QbZMwx_
zp=XsAQNFTTjj^eSKbxePk&ip-L{h~P$_$fjXcGS#z!On~Q@6$e<#IF}c|uDg);MPU
zESdjqjNCP^i|Gp7GJYoaS~ByhR9_hNi_TUwF(|iUHYL;;mKwKozMEyY#*=Zp3$K@T
zrH5Uj-6+_b%bqlI%z8A=V%xS&&$=Z7BmK&@Qj$3<x(NOldq+4d>}Q!)aNOz$j+)9R
z6|F5_$JkWkH>iH;D7?`rqm>@5+v9_K9yP>U)C&G(lLU*Hy{E9O^c=89(FPan3`~?2
zv>HD*rX1gVJ#wY^S#RVmUmpXKKSiU{DW3I_Rf&})<@({^5w{l=U*#2Sun+6AUl=<j
z0jiT6b3a$g7DRvb$THv1QeH0ohGerz+oo|JFBKK2r>MI8h$5g-r*vHC9;z#`CRF;)
zGa0(b<hB(ujU`=(3ad@qh=!@AIj|PIBu~4y)pE#l`iZjDQl$Gvy+rpcXXWnym1<!u
zZ~ZCiQE;%A0RC9Zpq_3}ZdCA^LAt9Yt-bz~jb7ZI-M5g+3}SCPL3-2iCA@ZV?suGJ
zYw$D7o%i&wE`yBSOUJ4ylAO+-w&eP|4iv#Fd)ps_QEA`qezJZHzL9-SS|0O`JblWo
zbg)p!u3eekC=`0plT(x~1_nbP-!HM}wk?166QtX2m*SlFM)Kv(xp2B!*UwI@av#1B
zMZQacmSJCpt0+mC*#MPRCc6#Ew{4XMH*sv|1Unj>k?$-BZD%rMUvo5=7<6H-fy!4y
z&)UhoZ`lrtNNeoc%Hf>b%BTb9tZkRsXjKcBvFEJ4DHB+m9_Dm1s^iCAUl(+`Mc9q4
zU#Yc@NP8~$-8#TJ13XpIAk@1zH-5&to0lQ2e(SErd1nuQcuqG4G!*XKkO=WwJ3XW{
zRMz#rzw|HBQi;WHTbfh-gmP-76?<P;s1@hiXKT9;fb1&`lUkH9%RguC!R)%-?G^aP
z=yK#ztdA^pwxWlMvOnIN8L_E1d3xUJvQ^*z!ng_<R$bi9il4(;3*<SbdhTd2G?`D3
zj2mcW2MU(lB31~F%?W!7Ff7t=k(I@*MXule;Xa9SKIkxA#F?Yx_!93(ZX5mtKH2w+
zDuqVX^PgCy%k;<qt-G5`%+Z#H;Psm6cxbOx+4?(IgM4R|m=7nShH&pba%rM@W>_S^
z0Ig09t5Rume-aOl&QopX9+YH>=oDWR5BA6l?t`-mbZ+d>?=mBI{Y0t_0BNiqPr>E|
zk1`<{o(TZiI9g;krF(`Yi;2cNUJ1KB8G4f@rQDS@-P|sk4q~%Tgy#@_cZzNPDI@wq
z$k1a~(`fGSw!4mb3QMSia38OZ5#-W6?Qo!dan%2O0^ml{ib6`FCorH-dQggFiQ&?g
zNc&9e7}nS#Zy%N$dn;0VtSQH()?IZq#<5=)W+sxD9igb51~by3po9gwceS7`kr}in
zIIxO&{9<v#6eJ)O)-YnwIy77iU^r#&K-PQV?`%TL5{Q6xq(2C)cVJ{0yeA)BAA|(|
z=HZ+rJlrSDQ)ZB%?teTtHZt{>>`b0=nl#x+wv2TZ6!@Axu23=nbqxXTWj`C_6283V
zn|lhm;BehWN;6w8e4#fsTIycU%E#+y6_^5Cd8{Zx?Hl;yKG^aO*u{tbAt44oq597B
zlhsZ>yDeqRCfGxDT&J02xlrBn?LSB=8ny+!EQ$g@Cv3IWVQ)~wQzIWlQr}fJKMhly
z6g}YjbbVj@$^Kq1m(1o_bJQ=%?Sa^KG{-tn|IWbw-IYZf$8<nr`+6tgJ*pir>yzo*
z)~473c8bNw;eC!8e)>M`X$Oy*dHiU9O<l1z810$u_fNB@$oBWV@*WOt`k`4u2!J0A
zPy<f*6?eYlMHGXz?3ga`R<&x`Rw156Y0l*PMh>>Ya?XRM>4T1RPHm&u&NeB)&QeSq
z^4y$rQ>W~=(yeJNg1(8<@IUi-z;(Ih^5nbRY<t4Gro$m2S#Hz{J?onun?+!goXPy-
z`ySyvc+XLcIA_Z?^?|+4$u3EIcXtfe;Ltn)ee8z3YU1#YO93-i%=7&sHkJz!mwK3@
zY3BUiBfG08?lqI_U=NoGF<bA~RJiIO@9ZHHEc0f_re6U)cOdCv;LeX<K`fs&n#qpp
zkZVmkg>w6>BH9NQ>rd!>u!Z1He9hk;-uKe>;^m46p>UZ{DFhU<^ZK0A5g{n|5fPy&
zw|2T%h>~{tN1gj%YXaG{ke~Bf?)W(0wP4GV_;L^m3O(71)G;W86dS+ay@AuZgWu#e
z3}rQWSr!+Wi-hK|xES+|2ZmC?TZ)F(w0CYo$AQP6(>%lyo)k!A9NxKlWeg{M8Qh#V
ziLVcp<iu0|^c+?u<!dulba`^GWWpkl;YR*c4CMK&MI3w@S7DTQvQUF6Cx^TyD{!<v
z9n#SH{!UWfx50JZw{~BGlc-HPH*ZDjZwh*c)>3(O0J24{F2#x1ULSf5zLdmdNc+*0
z3vIPC&#JJU-|NGnch8b4pt@Lp_d2JBi;ljQDd>~NqCd*DV!Nz5m~wTX9(c14Xc9r|
z6x?v2b=xMC^MZ6tPo3h87$m#dsQ*6GLDc6jYiplKXSsyY*}*{@JU5PFzmqQ-XvHzH
z$6pxJ)?e6)q54_b$UTg?`?+r|Tyxc$JcZYsR)uG^P@U&@q|g)xpV!8YKLx$8Rlbfk
zdtrG9%myo+VNb52;krLhjjeW$cgU}F7SD4k&;P3L?VvIP!#8378T{bV1>F8?wexA6
z4UHIw3O07Ko8zdm9)ErL>N%l%^E57?+|_uuTletW5Ilz&0bXEmtu>rB!w82GBGG&P
zzr#%#kgdA^<TuyrhqBUJK!gwG=Ko^0iV9!^U2+angbD-D5er(o6ghvmbQ63Tl{k58
zHKx*qR)Z2^9NFk%b!u;j<1m~Jc4U|4iQAi)@mj*`(eW_SnMn0lgf+cPRqyP6VzH>5
z5Pda;wHht2!;zhqP<MfDZ-~*&WByOxEGHg-<#Fv@uC9fL^m>oG%x}zDzmpl)HW~89
z=NloWGlH7X_U9=&raS3#?kBoAdsVF^w)T!Yjt<#xYEqIVV?=)A@3Q}J($h}Nk;)CX
z7+HD`E-LL%4l6z|p8Nu)(R?vHO+h=e{Q)w0isNZiP83dfd9><(u1TrhRwfuQWa+x^
z;HIyBKAXE>uE-ys8UE!+FdMQu1+t{CL)i(HQo+>Dsn-sz-}`KHK%RWf^w`9|svW%+
z2%%D1Zh(D(Zm=GInbd@k?p6+Ko-Jzw*VdFUu5sO?1y>9v43|cTyxICE&GwPEncOLU
z1_n9M()hXDWFNG*{o2^dnZCr{Z6oqnxg+$q+~D|Bf7fT3XwFM>-|gP3XT0Efua!dW
zZuALx#YL_W<X*Jw0V&ln>J5eF-@RW{0Ac%(4f6J`bj9D-Ya8B~+~#|HoyPR~3@T2J
zmawhJv_@RglR95-40WciV{xu!PHiCM!L>(mz=M+Ulv49x3RByCnYe-|otWS*_3a0w
z-?@0CSY@6qxeNEaWSa%63lU<4LuB~t3yRzB$42N@IFT#Th@I?~NNs^0Rv>HPgkg%&
zrc>-4{*(njM9&vHot1b&%9x8{=+GVQW|QfCY7e=kdq^!|Sny2#eR`Ml$@(>!$fyNj
z!N8fMOM<=8aN7IT3@B=|_u`_#$pFfkRsHtaH@5C|(B%zS$AgQG1^z6kI;<(6aewzU
zgKx|8M&!G7RM?~Wa`E`B^UFYX%k#na*kAY4`;528<hPHD-hmBX-(uRnNiUQ{kq$ml
ztm_#i+}Am6Uhkk!Yu3gXm1Wv`?0m~Kz-hbZfuCH9g~`DVd_B5nFHRbj8-J&%>W!><
z7)5{q5bB3umjcQ2Q8RUp!jt0tt-=CaclpEv@>cy#yBhe8`~;Fg^2gi{v|<gEb~=vx
z*<`}iVDiT8K%Y>$7^~9$dx?$ONr7jT-Fky|-jnE_4v75<TXV`}fHg^yJ=<A_jdB^v
zd6!Lnn9Yu(j9Tdld5Vnii|Y+5Oz12~?h9=71?s>d^W`Ng54#(t;Vk=koQ*0XE7XoW
zC@c0ezW3)!b7i7v(%XnXUm~@0diOa*LN*E!y|+{S`$(*-G(-Kc&gI|Tb^;0dyJ~p_
zjY9pyJ=ymcny;h7Dw+{k>PNI6RAf>C*X0kf)0Yd5j?n!F(e#Jw!rej?2>)jV@;2s+
z(+3Z0vsi<lb9dTcimjzT{Js+EZ@n)vbHeho$L|M6<PEK5v3w*W##{ob!vy!Mtg!iv
z-Z``j9ahFmPh8`*=o_kpa}s&)xp^$?`$&#AEw=lfhIdPw)x8Yld|Y@+lzdlprabY4
z^hlKXeY8K8TKcN}jdRNNA<DHT#<ddGb#mk`rjIa`(9x>0OB!r8{UsggO1bw`r(=7Z
zE$4A=beR%BN2m9IRD$q_3j0xu^4iindqa>_GG2Di&YJ9@o$u%GXXSSf<3XLA{`4GO
zr27tuYy0$q0kG)$6f4sv^Px4;o5-hmK9S5+Sd`#(?Bm42`dw%$wxZH13Hfy)s!zSM
zEcy#?i$29qZiinx*gl5zBYFpAUc=IJE>|T@_!-U#`g=awko#TPhAbdY&AzZSc;<_)
zrIehU|NI^7hc`|5;^`8qFP<~*1M^P*BkK-j>tyV&JJ7RaJ8w@G>aFN}kV@+{6EOu)
z#|4UNNZi|ngGGBuK4BElY!;e0vGL}Sk&+JcTgk1V=hjl(=-*F1XC-KOCJ2-8{z%Kz
zg72{;H_&}Z)8nfV`gcCu0~@3#609Nx6=*hOr@xFmd+ew@2)cQ{=SRz?b9n#Q_#;v6
zyHx;ozpz7NJ9*=X@HAe}qxfG#Lu64Tzjs6N<(qt)IdR85Bi+hy#9#=We)@F^$~A%?
z-ewa#4AuPmbw0{5#e*6pe5TPr%T3u82WR)APXDMA^nI<+#5tTN)_$PV8R_E=m-+XZ
znc+9f+wwcO4+*fc_}BQN*E6C5M$u`*g2qKQ#oe*JQ(>OlK5wL!xyo8UR<BP8{DM)F
z>uh&v=8P$x2`{hFAbSkgK5uWd33e{}I)OywI${J?J4(_lGmt&fX6lf7?P?-_->HbC
zpVipCVE?)g>{$a7ei>M6X?f-ub=vQj@2zbLg30N5v2|<q-emAn@U#gsd))V{wBX8#
z$%ABQ6QL73FCX?~E&ab@u>#4T;*~@!>_R)(MT98Y2+~99NPmZga5YJdFr$>$&}C1=
zEHjA55sG?+9D=9{HbUCpOt(?7eZR>Yj=Z#*+y3$h>zdvEatbM)4dmeZB;=iiBgb3C
z+@n{McqtTGD~x?On29!IH07v&hB?Hv{mEsDf+)vczxv1E)MMNd-XpIz(q+Ga&H?Ph
z-nV%k(IHDtE6y%N*VCn(cybetNwi&X>-7kPPq6m-PjhIYl6gJ%wT(;?>}`?v(+DV&
zcFi->+`<zIGqgOg#<lW_mr|jUS}wukj@n?un&>9Vmr^y?!sU3I65(h$k%^eb_inc2
zJ83w5T3KCN<2ottILa9wGJ)g^m98Dw;x`TDukY~@zkc!EdS~C?=S&{AD`g3IWIcOT
zm7nt$Ga|iykddCGk&tp)t_A`EhEBae#$V0-9Jw7$!1wUt`I8h6j^Hsk3SRal5eKkS
zVDa4~>gu|`D%ct%1?%lLh^Hal;-Ha61aLWiS#%li=C*IxZ-uhJZ`e#eKU*OfQt&^t
zL($<pZafgre*3nb*2k;@Kw|#h;BxUwGbFabg*y*~&MH`YfLRD@gcYC++_nYH!ydeL
zSbaZPbIJcQ1Md+2EX^AGERCzc(MN{<;Zjs+MTWpedkBfAHrVb&!v4vky;U(*A_i;V
zItptWX*Ddv5kGcNq+6ta2vO;9<!7hj|CfTiTz=?ix;9UKAJK5bf28{#2>GmkG0n^k
ztgYo+Q7$~61UOD4`_Gn493f{*@ZH}LydToklPFdERG^*AfJ7voJ2n)d7T9dJ)n@(W
zPiPK;ec%3F4xpJ_xsUwryno>)hy3B`f?t`W`NOP$wK4Bm5B|LX=c^*0t5uE_8>>%p
zNSd*$QF9;#0XCPud0GsZP`*x^3uv>|FmcFh@ZylFsB`k=Schn7tPU=}?7x#*h=$v#
z$0uFF*`5dRwOcA{*|E1dcp&y0SV3OKRvQo0L+E<&`4tG`*pT0jgZA>*aob#HHR5St
zfJt^|9FcI|%|8!J5N<ytk;t4OHZT>08ZfALA^%_jL0gY78mQj1dvJpw`Qe>+J8XN@
zMA|%bfDCA0b0TyX&o5mlkN}{^Ht^C*`fPwA4=W0S;7_vZF+B_)<5L6kho?Y06Sm&5
zdJ(~fP(1s`U~jWszJm}z1>8Y9Q_yR8f178Ihg7XtV-e?>H&|OZ_TAAS{o%Mo9&(DL
z<r@hfTw(sQmP3RUhAleP2E~*un@ddXo~}OLUj%K3&I*5z*3571mm}v->C5fa0_Y6i
zRh!Oa*cydDUr=0p1Zlu@0vraKHdiiRzxw?H)=)d%M(_f-0Yu(Ox)FFj;NJ(YJ<vM&
zNM&nED##al-5fO5j7wg7*!Q3cA@U=0=vM~c=M(b0yji&Hx(o&Jt_R+4`97HKEGdfg
z<WO7LdErp>=4`^ilb0qCBZ%bA0Z84`6_+A*2#gP9Hk_K;t|gUL2Ga@yVtYzK+4->p
z3}7da&kltTSH+#RCm;FM1>_%A!m+pFI$U1!QLjimq5m|MYKGHXH$-79!di!eypEa-
zua5dE5rnrMmD8)dZFN!q;0b{P^s;T4v?F!}84Xs0D<3o<B<mqYLk?ixODqVFA97oB
z2nStJVL$h|vdati!aszxvdhiCM5xmBHn)d@9_%$$`0ra0yBB3Wn4Wl(5edi{R`4&Y
zy;!f@tXAG}=|fv3fj&uOhX|f*gje@;q?*KN@l7VZ#y!LISA**_imUM-F5h&J=2L!<
zf7eu9>+35-|CMB&VAe+!tSEL_xykmKj~*h4GK65!SByD|gk;edFSazSyrl@@@<S7e
z&gq%l+P_2xp>&0XUcQHXIoO=fJ+Tfj>e0I_H+=bD>a-ELfO``SdAlBc-(QaYNbyMH
z+Cc@Qp>P}zB=T+jWbU^L^*m92ogVfg?}OkU+%+hD+4LajgYjxzoaTNzlvtaujnU91
z-lZ%EE<0=%BaKXFi{Pame#88E6dDPCzXV10K{pKkm&uTS)d=E_X-BFaIKEhW0Qj&$
zNdeu=Rs9XWtqDY;C<bCThc2Zc66P|M7gcdu@v%c@)Z)}x0yxlg#QR|Vp30t#Nvs)X
zb2`rPJ`?}cP#U#y_8~ZVA@Bq9d`%3dtttA-A}WS|{%2;WP6?pplX-7W@KJoyunO=5
zd+z`8V4;DAoULVL)Hx#oN4XM!PPpr7ar2#;{xeh63;u#%gpJ7S0k~yD+vVDQ0z5V0
zA8pMT95aqq)HjNrc;=c)I~8y3${f^u{}W35mb~md_Zh48A7aj<r1PJIif`zVp!$Z`
zJ-O@uDzeJX)qRVP1T{8FpOof2$~x6<{}bvk!;teL2YzyBAxQbEuKRFUg_pAjpKH9f
zoAbh<uPqywFIrFB4{G-Sc~yyHc8y3T1LpvS%ZHkN_?T)_%;Uvw`o@~*tZsSrE{WU!
zu28>~*Xa6h3f_>TYP8H4j0S4FfAxCsY}Zv|?Z=$wt>bO1{|48pT$@<dPUSq>rvIBT
z_Q+d(BmW67cVE&eeG4o*SM~khQ`u$z)zZnU?yn2xw#RfiUsnOv;S!gHzT|nCM-cC6
z8;2v484Zxk*9Iusnve<xq#gZNON;Heg&8ZU%TnstpgzxD9Y;#^e?s*d?fk!4zTEy-
z3(MzQyMUSaJWcZ-OqQu;0T$q-O@m3y%)!bR7o;kT9R61oOyJ#xUP~0cHfo5;pzceJ
z3KMeD#s2q=wRp|Sx4vcPYQ8x~&*~e+Pr`HerJetK%3r<&z)w#6O_Dy<G=%@XHj?44
zftKfj#=2XQhrz!??}fQ_w+0V`Qv<DkgP*uNLW&mt-jJjliqF`5^}<xF&O3Z1=i91o
zt86-sb<bP>9ipFmIe}fxL0bP&$F{yU!*_h-#OnlU#{ayv#1GjQRW9(wG<|LVVYnNl
z>$fSdy4f^{NBvjj1I}MBCHwD}s)RSfblIzfZ@M)CfQI7Pklp*b`0U9a&f@*RS(_Uk
zO;|o`5K`EDz<H>D@v6W@AXFzn1cS--xO+|79=&~km>2GRfP(+36I#_xv2v~E4dA<4
z?5+$f9*hWF+4e+I?gJ4%X?o;2ko))vIbR^g_g!Ch^r62nAhQm7U{?3*_LYMIwM2gK
zO4+}*<#QAi&9^05{WknZwm!hlw=k@YuoROYZBE!l&4mAGHdrncL3B{xondUVTSdZt
zmgSrK#*L`+zI%#CCGf3uC*gzg9i$#e!FScyjlF!$7N2i50FCX0n-q4I2J=gwp$RQy
zUtjn<v+>mdKzYFGeyvSO=`(CdIgJMr^ftZ?-pCF%@IZ3@Lb?yp^JeXlKlQJ4>72-3
z*e0#n%Je5(=sO_2tb^7DIJGvrao1XTz)%CcdpBnEq}9CdOy4g|etq>$0vvi-oG75c
zPU8D*5wP9`b34gKghOA`w#b&?Mb-oB|Lkl`OxxXlzi;<E{>oKVIQ719JA(Z5h7BXL
zspEU(KU|a_<sf)J?y7*P*d-|6dRR`k|4_!(6GaEHNN~>JB-rZG<zFrWto#4QNuY`C
z<lx)A0}p8-+GFRyUO@^rWd9%_Kp8_wh|hgzC1Cp{5uPE249myIajP$I=!OBV_=yco
zsIiOd0#zEyalt3lDT4DL@thN+?4FHhn-k`bKfS%#Q%v?K2Br|4RJ)|DR$B2RfyxdS
zh9c+KKNCNUL)F2W`w+FE95T&^zHB=nS=H8KK=CH=%Qc+G=JhihhL70JMb^tc;(D;h
zkPFsE;Qb&AIaF0>|HAiDF4W)l*$;v`*fx)iEn@sE=7Zw@US#qDwg~lv{pb#@CA3Tm
z4TUY-v9&+R`xLxVMu^2iLJ%8B^h@j@01GyMcYeVE@jW@Zh=+0nyj-LlY+}Cp${{@u
zX}lN%lU*i!^UF1FdA;1!gjPbPKp~iu*rUSjn}wSW{e7epu8^^q_Kz34hQP6GtwrG>
z@5zDdr%5y+5qk$8_M^_ryk_57{@O(8j@SD-_hR*`#5xX5ipSOXz<?%XWuVYiWy#gB
z$Ei;2Ie80(_d_HU6&~Ax<jetemEzv^X#uJRZ*!Sw`wcApL<%3<&lL-p6A^Jl;N2$j
z<Ma!eYBS@NIuBotUXQ#VIwpBR75<J*JtsvGvmy=C66%}Uh;@sF${r|Bj-Km00$IAO
zcJC`7*-0DqSKgX_|3CTvOd<YU5A8L={#?y?Y$*OL{`F3Jt6i_pzA&zf5-key)u}E<
z$Kul&yCE71x1IbLA6v%{3N^8qN<jn<+84vhaIt+1D_sQ2Sl@*Ayai)}=Sc4}L#%?7
zZ?&~M0{TQEy?d8Y&ezy+ns{yd74O<VKnT2T`}kk~*W8!3_hIBbaNg@S6HC!T@WXN#
za@h260s{D*MeeA1Pq85{#wVxe;&7RSpeUd+is7?wbHwm=$CLSL1Vd>3i|_*@8HKRR
zBA&1dA7{mS4Y{!Aj<L@tA82z2QzwbA=c+K_WGn{D$62%-5!=v72w_0ecGE>$^V!^U
zEg`X{>W&{|VYmkHxpInPs2<UGl42F70ev-GthxtNwYocZ0jz2W94(jjyk)Eg?9L5&
z-a4t?cV{&!H<8EsWYSRV533>DpXYFaj=;vRAxI`)E85ohuTciA`$?2`KIaFP%i&GE
z%e!I6Mk@s2Vwm)6f8gMQ$QlIACh58)c;JNi30)m5+<IUMdzcFsthn@Xh>)xT%DTQf
zdY3@00&1V!=bFkp4Q@}%9JGABO8_w#b2JXI>aS4vQ}ZjmId0-s_K*E}UVNPDFp<Db
zHHna<yB|IK(c>6C&W=OfgU}r8GnD5hMEjwcizuiIyoV&<HW@Uos<k;6Aed!Ue0}1Y
zJ(IQXy3fDnspRp0f>DmAY?!O>41qNI4(9FaT>9t4n_hk8n_jQK0%L(R26cgysEXwT
zb>X(R$6%s<%+sBJl68M+SEw!1D&_jbIs5-0AFsO!F`<Z^ju*kw5j}(ew;AwK055hY
z>%~mqKBAxH#a6cirXdk%2uup!c2|vQNb&%DhK)gQdm`arD^Mf;y@kM}?hS!GkHBhd
zAx_6JFuJs%5a<io2n(tRmPb~`65`TC?RWu!SGzsn_mR8Eo7o?dx+T4nk%V!Z$>vwk
zc{|L(*MV$gYaGoSj{9JFcn?f_G#@C~2&ofvanRlM8#WFOB8=($a3=BuBW*Uhpwpa?
zuUJXZ=4Y#QHpG2$JOZZ~0%yvtylxe$vk&LAf?6p^g&2G$NRcK{S8|Ai*e>z|34?AO
z=fQ|#m&4^3N5hWh9v5?)bJs{l<eKt-1uK$=XZ{C!Zvxgtmi>X+(yj=oh{)cEiV6y%
z>`PivQ4tUkP?jJfyATxFLPA7YWS2(vO+Z9sRrVzbvhM*RAZrK#5(tol1PCD{FW58F
zGtMy6^MBv>=FK<FNp79ruWsGt6sfxB)U7J=zEJ_8agOOo5w&UxwX2w2ax3Fu@YM$-
z_*dV*QxX0#+PtI6WLbzFd)nXhE23`&(VF2kxx5+9uo6>!nckR8wqqXhJHUrKLqA?C
zfDE;27$FnsJj@g0{+MRceZj$_%3^|mws$y62>lpDA?=y;<le$b9=bL2q~AV3r1GRR
zLrwyGovAg~qdSQyt6SI*+>sV!&p8Ei8j6e(_P#Sw_1KSlbQ~k#Eu3~>+}E{MLg8s|
z-7R)yUBpKG&a_d$De^t~BaLi!ZJi5!l$Gm0Lb)(%&DMwTEONY<+IpYDc}_$~PQg$8
z0U=Yes2Qa5BLcmmSY8y>(#X-p_YHa&GCdo6u24n}_^&qEOjby3FA5FEMDEu3OaFuc
zFVdS(I6?CMU%Q&kTB(y;HQ@dhvss=SBr7r1{J4-IUK14*^{-8eOkiysec@%D#Kf4l
zL2dOnHG>$zDHBq6j&Bn6yj`$~Q#VUvMcPmOC^??Ko3$4f5j6>-c+roDfA)LG^t?Rr
zy$ikBBw0!*Yseq;32Mu3@?U?%=0fZ!s;`(F;auF{Ej|6M>7Sh`Y7k|_E=(9ZXjgHl
z%;PhgRrwtOgi16-;UefEt((oc4$%<j7eb1iyMvA18+FI~ZM~F$crN)`pw4NH+kc`C
zYAk)IgO{K0JO_STFDQU`Prh=TepD1CC=mJH?Q)>hX;DM$%e^{xR5I%i{QrvjeBfg0
z#LHG`>>lr<ebN8db~f!T64l&1`}D2g&J|KaJ;c*jw4f)o79vK6*<l&<Qe}=`lU~Eq
zlmn0c=Jy;IcZ2*EoBeUo7+N&vYmCWb0Q*-zAWWCxA4vb4(gcYu)q0%N0zqeQLB@se
zg@mKbgEhX9t<(X@zW`2-h!)e2K^~9p^P7Kd*1r$&Tm6thXP%Y!J8ykbt03%8Zu2Vf
ztDo3Nk<GftBV^>l;KvQMa;uh=e@XhxDNp5MUgh{{r!jc`Ezo0*E6L$R80hn-<o_IE
z5Toqz<2b_$0AIqUdjGhB)@Qz(^8YBp;MGhzv_oHKGyRKehrdzeo;_IAN3@vrD5R;G
zf>UMS-LXIp9fg8%<veyKd|jrjfi{a}^Zest`5N(WIX)Og)$#tH9n@Voqt?xK9#Z&o
zJBx*p(VLNw2Fx2L=G7aV^8BQZ|7qnxJ{3f$V!jPm^4EGL&+X0-GaOnteSlutoTI2!
zKyi#P;7~b^sqZ|J1|0uNnZ1~|`ljEvXHL^$S-cd?X9nL@F#f`X^gHPAJTGs%iAa|B
z{R*TExn={fmkHz?gE1`<D^^0@UTi)t(kzI#R**zQ%92~kVNUD*tn<P4L3msmHrAU-
zK0SUPr9*CRjp(kWL|1AqHMDX(HO*w!_)0PbO82W3XYXMP0iH=T!a_tfWq?ft8S*2I
zU7WEt8B)7VuF-Tdk9?FV!*qry0>g_wBR?aXbji0NXArzrQJ}iLEX(;hjt{0#E6P6_
z;Va(+r!Rhu>0O;zr+}H#Onc@wzy0hTYymb8-~G)W1Rr)^_k;7N6^H9R@3@z~a94@q
zu6(Im87@;9syq=)k@_tJjKt|Zo(}&l{Hn^-@cV%e3!4z6$d5m_s+Yr=l1-SW{dhnP
zML1=0vcGbZZ>+yML-5y;5BGCH*U;6|T<K^wph1~0GB9#XG=1queNk0WI-Pahzl9dX
zmok?w=KYAB?Qfv6M5)7(>2F9~FAPfA*Xa-Os-IUv=sFpT9AXa<Kl2$-j?eA(JgARD
z&%@NTxYCDUP7@~f>qfr%o<T<I_B&lk008-dMivY>QP_%AZ}1q?fC!F@p)??T<0CNZ
ziKt1RAX3<%BGYDM6=y*H0kRpyZklUg+tdgWo26C!k#5~qlTsPM$}O9q8Kc7L{hE%&
z470?vX6TrfNFIq0Q^E9!eVAJ7pG-mw+_nc#o)ZbODc})t%Q97NDsedyf#0O9go&;y
zXo{TrQh8mx?{YpXY`c~9x+qCg5Jd#YkeQWm%IEj9&B2o^hWG#vU#cOfdBfX-E!6O>
z;&k<;u)2|`(ZlotDZp-Kp(c?6ms+)vQ_!l}GYYCXoCo@|zvLWZV85LdX{rV`xMNKN
zGOx3Z{rM(dP(rUR!)Vw_vGk4~{Q#b_TJb_!htjX@Y%T-0nrUuo;^_3<DSO3KHgzp*
zD`2O1aLekh?dcBe7;;;;`|}0<bA|odl#qvi>(bH#f+zXg>g*@ZuN(QBr&0~XU`w0;
z0WMVYVUzf$2YmNF2IqhMwi)+P94BK9dC|L@ep!J$?w!3^7{{I6q}M6ZbTli_pYN;R
zw>^O3=QM+*kw3n<>3unZZ!7p)dszo1W|2S17vi-Cs2Q8Z^nPvFTyW0HEG<t(t>}H>
z#I;+Hqe4dpzpZyu83;8v#`VpYHUE{C{F@A9Szq9<`vLc@240EH{1Txfn~h6;3}{}4
z{Hf~Sw8ECvX6ax2HJMk~0a$I5<!=qKYS^o>X*(tP!UayFr^uV^H@~%65!RXn*j)F`
zY5i7y-L7b-%}kOq>{qd{)^>K(E4<vE(O!V^rYnW>WRgB}+595Gdz~fC2|u8@r00Dg
zDkIp5NK1bsNfAEXrG^&<yH(x1H)9WMTAlPT`xxXCHRb;LWylSB@)H&M(KKwXN`yf}
z4(>cTaRa@*LaiYkOlqUV1Q?3}dGgej#_4-(m$1bj8l+#h1=}uJCqnL?kcit<v9H>&
zDGF<Dck}Fbu$ou0D5s|utbKe{@;lwGSlce{o)3PcD*B63t#W?nEzXxLbg8;oGkMZC
zn}{vmj$_3)$;7@7ww=Yk%BHlsQ)*x725ZL!EflX@GX1vfJ9|V+W2x$uW3Z0vpBy@V
zh4Y_+k-Pm=MF+mRbFH>$T1TV`9idW-nHn5s1>0aPkSgfy#hl7I$IlyVe8>mJEVUN6
z!twnxfq}+{${QG}?)11ftTlgw-RV<tZ@j14u%})3K)FXUxcsqZ_2;qxyiBLNy7+xw
z$6ZYOJpV}kPc~REyVl#~kCQAL$Y&~2$!2%gIG3<@c;yGi!b~RkBS#N-i;7D;wcwTk
zEW!?I4f*I7Lyxi!XdNe19yamQKpCB5hN-&^ub{~W_0^V~T&@7l0UL16Ezg~mOHG;A
z$O%%c;^drij5eVs2_O!eczc8HVxu{sue~xFwS&iMIm{?R0`?r>5wz<O;3Xdx^<b>H
z9_ML+bvB`!-NnjrGp$CDFHH}act8Bc{aOlyl=acnI<RE{gSCld!)+$_T9wofUV0E5
zY8@Di5;gIrGdYTxb)b$bZSI|Sd2xM%Pd-^u2685!><!@*#M#yqx7UhWM#D872gg6)
zP?D$y&%4-*m{)jf^?b7FPEHil=FiPQ?g^KHbbZUe$O&`ts7eflm6i`)s&84SEFY{N
z=1rH(UugYRHGRla6sRa#I2cfCcL~Uyr);5n7aq-b^h*64&xi>rslVp1DJh8K8ee1|
z_lF%(W%_7@TSbZv@zYnL*ZhOI1b6zCVi$Cfh3rWlQZZg^rB-TjsM6)W4LdVpq<#+U
zI^n6ogCYRr+)SqoO`B{k*`FPzr?@fml(eM%U{Y?rY$5*~YYmoaB&^#I6w(slbp<F!
ze?d1_^G8>faZZ~a8=TG!awcbRLKa#ItT=tnn5Xbtm;*WxJ;EhN0P#UQ*jM}oan9@N
z+pPrWSU+(x-QR%`SZ%S29iqQbQQx7J0|QT-c?@HoNv-?wPnZ7oqYlG#rHlVEM1IKJ
zkzA*96esuf$M2^}6cR_O5e5IrWW%dgSBNwATt|)5F_g2moWbXK_P&2SnB6s*isy`6
zz45Al8k~MYF1&|@tlDrcJm5CI{>cCxb#jd$E79dZ`a;-uJ~i}!_Z@a^bW4+f0H?}@
zJu;`s@Ra}o0dMF-3qvW2xm(TE$%=`|mD%!!P~i|v;E4DUlRFbloaFvpL#e1RnbXD3
zNulew&6TO#_Afcx$5jFf-~YAgP4C?Q%XP!n%FOK&A>lHo-Hs?vTpbO_^1i_Ofh8Fv
zp!n$?Mu|9L2OY@=B`>>_AY2A2x)|mE0n(i25{7W;tvJIdzk(?zj2woJWP<(!q|!T(
z4dXwX6oPOJrT=J>0pe#U{YR5rPz*!qKbd%X*2eHxYC>2gxQd^-P=s{;N*Qv>XXyY_
zl#m9mL6i5CYNSR>G@gl+3YLf{a{U@0$DK}2A%iNAqLee}0~iId-xkr-T5y^viaO^5
z)I{aseU~9cX{3HC9E>oPBhT#s!t3$`y_dHa0SPfyo1a#0F`o=6xu;WsY|^!K=A}P>
zmgwq_{H0gZh3T>orL;bF%(rkGnyUimSlPfzr6;jUxU3{DRBN!#+D^ERzBsk$@sM+M
zcEu`VfHO;I2%zXD0p!0^^KJDy10Q7}4vSa#b*j}Q>Gn>b5JqH^D4?{`YhL@4=8&h!
z!Yvl|>}5(P#p@IoaRrjkPN{og-DSmjX{77a(q^vJCa)$;wrJJ2Ld_q<PlCE4el7PW
zzk{IqWQq~pk-5+BFd)jRPMdy3BfMfFp4>qf_=k~7vM;52Qm%W4ACfKT4=BdF)=C3G
zOw0B<&P=ODO!hveBYAy#vndkuY)oD7r8G`W8E46`dA6!nII>ZPY)U77#nNRw{gGuG
z>X6Pnoni?gPM6&F2fJ~(HsUThS$^yCW+3#*o%5S!3h};v=gg+^+f=JfBgkLO^NQ);
z)OxDN9`<v(xQ`R~^A^~wyr>aM=c6C4{lLzz`!(<vwE^IU1lx><km{YuX0^PS2-4@(
zNhJ1%{0C!r=6<D*5n?F~J{I-179o)@k-9>^dE1-`SDU6U#KCZU6xZ5aq^5OpOKZty
zHL%bWfz90^$rNJou|y@B*-ciLn>h_hX>7rrQwc<dnjYHh+jeOR#e1KA6Lr%<knJ3=
zPKT3A^!k+bQ9gd3gw}@3;wP5mqk}^<ZvH|24_RVV(@lpn_8a3&^+Jja^ey_6mQg%R
zKTZhCYn81+PID_C<Kj&4vmPGRB-@MtIMW{%{dX}&u6pvJS~MHDt(z9bfgvPeV3Wu^
zd-wQ}D$YbkV|Houm=qv<grfe+9|l_QqH93_z$kVAJ6xiUZxVSqGEJc90ZqVLDeVP*
z(#Km1_)Kt8hGOh}fF;0EL<n=H+fHC6Fq6l<PazIl1sAm_-`~ML>*+y@@D>7!4}4wh
zZCr63<!6<Z`Ccf43pyJH_S(&39k@q6QnOOYUiPbm+Jzk!jmIsT1uU9G$XWDr%s<Zv
z$c)TV#^sRFbRnj!AMdY68;LEBH+ECK%0U93ID!A;ZW<4l(&!7X>so?gsKpSB{+^V*
zV_*4^sR!u+EQ)^%mSXKf+N3#CGk^7Ww6fWqbpX$xoXHDXJn50BI(x=3^Hi(>e07R`
zeX_!6JL$78PCA^kNv)h;{btddp^t4^o6gLnDvpyuVm4iXE;16;ocEHGiz&v^0&*^Y
z+_(>57GO4ORyjg!2Ic(dT54|u0dZDLB(5N3fsUJ+3|UksEeyYm;^kb8Z{cLpI>fo8
zX>@g^k)w}CV(LkgV2u-;eid`PZJ}R#2pioj^lq5IX5D~;OV$RPC5=&HHn-mlSQv<G
zc9+vaumCbuVRIwfV~S1L?<&6>icgxnZDipTs;l=n_te=x$UhA7&;J=>f)h15r>sx#
zo%cy-Yq%+Hw<P}u^}l3^_~0sy&S~qjeC|F89Ss)ZGfVP+Q2#@gD1H?js3ALLEy>62
zbGNnOlKA1JKdApHOS}%w){vdHKE<c&bGN<Wws_o9@gLOxkR`}JGnbKdG3(Mhw7AnF
za(*n}YqVl>LtF`M{&XUYGX<7+-D}d>P0lU>C(!L~>xTBHb0<penw0w?QuN4@6Z3do
zo!2m;d1aZBK=*y-ziVA?Z|$jv^ZuJ)b8Zmnhn+wHAsC-LdFuefa}p<9z_st6&JE%e
z2dJx|q<MQ#R=07%0t%H`;`b-GB7OGb+Ew>&mXH4k__it}YNCidNI%Is3=59J9+>C2
z*IfHV8zo1diBMD^N454C)bU3rZD!T2&4hVQY{pt(k0-Q7*v~+p^T-8sC5SqLs~~i<
z2jAb06<ZlMDfe*a-^>kK_xI=D2-`000uYZ12}eq(+@5}YI_HjRcKaz~{oE%vVvRne
z{6YOYmT*eBje9Me^F<}Q`IMr5?&BK~Mt@NM(h^Z$yx%rUDT?P(uchkDY23y~t3`eB
zdD|`J@dx#<Ex}6qqMF@(%0oZby*+s6VjU@n1#_5i9a#-91zd2GV;#XEi?uFjNK^#l
zkV{$@YD1O3QV-Ogdt!5EPMZ^A8Kte#?I02eiJ}%*J*=5;Vi(2gs17O=F9F?=7J;9r
z@)l2v5}XL6-+%}J17LwLv1&?2ujvTlh}8?&3s_kEL^j<FB8CvhJQHBne2wT;e(?O%
zV$(YtGw&G9-ybQN*jHfhps7t1GDG!%g9gr*re!Suw^6#pduFIUaNIyiX<GKOY=OO_
z=6@Nbd{dnVt=~|JmS4E=hx-4G9j0EN$hn}J-F8Y(-|@+f7^9?=zCWmcWeK0RZBlyT
zj!W0Vbj&pRCZi8Wm3qHzk~$;qNcn^M{g!YMccflR)*065n~7G6D)o8WCG`jOuPiar
z*gx}HDW_C5yX%yg{;b=LU?a7ZKJ07WoTn<;4S!JojwNin#gbLM9?gt?OmuIt``-qR
zng&E4GZY$}Hb5;+%URYa!2g#~JIv&I!2Sc=rNB4K+Y1C8;6D@p+o<S)uu|aL<)a0H
zj__;5D`s+i;Qux%bNOIFyaW6)@wk~>FF0gCw-or_MmfT75^c@o(BQ;@j#A*eWrc$H
z|1wIztf&VZI3QCB%vj!AVCn$BMEq}~Vh8d{f!WKa3rrp1H;Be&MSbA^G74esmXDNj
ztA%;qXM!|ck3j09b-1D$aO*|;AfIeF6Pu`Y1?2{d?50+phE>kv5!kYeLVg#-0nByI
zZ8gy>tH{w}>z@`e@<*bEihEbyd3Of6KT7A^P29{bF`v+WJR<ju^YpelS2Fi~W%`a{
zk*fo6@aFx*Jh;vKeK|Ln7tmoZMXIm_c4#`5KnmU%qr)=!HlLMYbhTPr(E7LnE1kgg
zrw5-<p8d@OX7rX7`v>n>89{%a!VYKatk*e?3g1~r(P5>0`Inp7S<pY-1NGg_YU8<#
z)DN6T%KTf2<p)eQ<DVtVY_F%7&yQ#D(7KQl+ch5iK#2@*a%##r$Q=>WrgFPk%JG=s
zvXsx0>yNkpd{J_*_Mz<`uRT9@_lM?Bw%m1Mzc@$7?0(ks=;KJ7?a(jB4T~Ph+}JJq
z^TCIAdorZd+`iV5@ad#^*_E1f{04k|zH4;8tC!UG*AhIoYP||o`2r~OQTdW38_@@q
z@WlK|e*Ke*y%oiIu)bAnQQP3O$dcY#97MfSMN>Ztjide31vEhGl0-&Sj}AeKc7U;a
zOPED7WSoS)*192)9o45ZyCuwu>TMy|(9SWAK*P1JN^Av72<*l~Gpv(YY<{DJ*roRx
zC!8M^<a4`^cH->BSH%<;)tyGYzEmc*bZNNGJU$<l?DO3k()-64LmVQj8LAVp9x2S(
z<YM|8gC1!DKWz`=N9c2{t>AUWG3YN^*VEq`^hwXg(6)rVIRqoxDaIjasMeMAOoOdp
zl9pcjI|FpiESl!XxB%S>o~H>h_CbTRw9_+CJ@$kxVK%DIezt^mk0A?<)6z}f3W`D_
zwRF<6P`!A9J580bC7h+wd>9(gG%bVl926SA1w{O8^+v8okibpb!PpM<-x6M79EC<B
zu35d6>l2&}qiqR$;|aR7<BWsQ5X5DxOu4OKBI2giJ2`axYzNJjp#a?q%FqNDd!d1d
zOI8_0J*I>$VRliU>1-a&m~k2!i@0I66%>X>Ag)?v74;4hoN0=TE#WMY=D|>drXuvM
za*EJ{TfvK%H=rJ6f(VU=u@m|Nu@(GL^P)iyKkc6_F2BtIh0^3#J5mUV*Z4{<v~!Z%
z;;}6cBl2TCK8+F8r}CB**Qz1fh*OwfqSG!LWJ>qO5U$gXfe&hiYzZHN6*LpmZW_Fk
zM#s#y(YAs)eMYmnv^(I_nz3m&46?U`5ouQqvT}OS1V`Ehu(0M<kaV3r^^P6GLbwH?
z0;&M*x57XDr7PBpUxstbjGS`@^b1nW)XO}b7QPH;m+3mk51cKqG^;7~bX@4;5a!Mm
z1Fi*QW;JD=&I<#>1so!3K)gWH%(ryKVWD?8t4xPO01Mz|zGW*;3;n}+Wv0$W90F>#
zUb^DAfF8~%GjL8H(Bcph`^-sv?#RyT5S5J=*s-Wj7uw0tdVIrb$e#~AF$;fp_!I^6
zY6hoiqcZS4?gUlZmaxx#wu)u}KC2m@ri;qPZv~^$bWmCNUMj(drU4e$+zPJIAYd)c
z^fUuh4jxUN-3rRR5$xe6?4WH2{{Vjm{CO+L_~Ca8UVEdWepJHN;mW;JQSCOLt`4+U
z%UcbA?-6Ya;>&=)DQfRMZV}%MTr7BDwyTWSN$d-UxJG<6AX%Vo7F^2fDAuR;mO~T|
zSQj*y1()$Uiw&sdd)y@!n`HPJ5`c%Q1p^na{F~}!xlF;{Fv1nuQSbryOW;=U0r(s|
z0eDmHogg}Fwu!bCjPKDU9H$)w?|}yZFUe(W310(m$Ysa(>CR@;Zi7$3w}Q4b1+Wl2
z9C%eOE55gbuqDiiM|aFl)1H7;;VD3Uxh){$!0#3C4)}B6#iBQ+Ju(CV+TN|<Y%J{t
z_&EF*;Ps-nrhPJ7!7D|XroDLtW7=u306Y}96?6hC!jph{Mej_}d9(ert)K+=GG9QI
z)y%QIeNlnn*V%?aU^?Wzj?W$O7{yN}18tr~q*q1lgHyyMp0#%nU4)n&4?GB{U6e7{
z<4jPb34^zUvt=|h@ELd<P`4<1u+Mobs8f_R*h?gM(A2<U@JQfR5DeCYrvVL$at6`F
z*=5>RP$K8|igJ$#frqve%mw!!{~7dVOBg+V4fIyIPh>WNb`>lI-wH|-ez(j@|4zvv
z{9e(codEO0L&h(IGL?Ii30pyc-tQJ|!0#1Z!0!~$J7sk8Y!}TAd>)=Sese3xQ2pKF
z!}z_jgYkRi3gh?6amMczTgLAcFgHAK{1PamqQ{(YhIV*sI9ot70n5N+$8UhLEBeg0
zfPR6$SH`b`vMPE<2re`wun0V2OXvw!ho_F~gK{d+BeM&%t)N$rIzf!a3*H5PF@BNs
zW-GW+Mu-o!UW``_F?fqSym9+nXWz*ztJ6V$Ikl+`EiQ{K8LuTlED@5J*PynFhWWQ%
zed@ERG<~o%JZAhlX$#00)ZVZP+B~rFzJqCQx?>7o8t~eh?O96+`O#&c^vivr!4PA_
z39EQetMat@(t>;q!IE|sEC>%9ze39N>fI9Rk=}WsYi7r2u3%+&^7vLz9Lxs~9@i#i
ztoHa4G-+GHKHph54G5Nl$B*lhvRAi)QR6zKtkvFi0+gl&mVj>sH)wuf06cx%fRwX}
zUZ33xO1$Cg*+t-@{lM4;eWvyEmhdO&E3Io1Z~6Lm&Ay;rWNZbILUV?TQ3|D*`LA`R
z&)t)9wzW(!Eh}`g?63adVNComU|f)A#vvRn(bexf^oU6ViUrPQgQXl|u)5I0l2|?9
zQ9v{sEGu;85E&lY#GnD50ueLiQdftu9u8qdd^ez1kZh)0=IS)|r8<{G#0{J&FgL3x
zb#)x;tIqb&<q$3fBW4w4uFhiv)de2r#BvTnh@WC>XflrbBv{L|-}v)sEl~A?;&<X<
zKujCZEbuj3EnRdRLs#c;2*d!iVBKuBY|(jau)4^@ibHS}>@wpk6?f3=0l!)Pndr|U
z&i$PPoAH&2J86CazhAyZ%oxxv2sVo<6?fF^1HWCqMvNYiD$v;^oHYl)`O9~S9|vp-
zTFj!#I7BZvbNMncWPraw+RUId&4ELFSiVEd9WW}$F*7JjbJFbR5I2d51Lq6u%}}Lj
zj+$ujyXBkC7Jny~oWGab&fm)o=kLYL`FpwQ{Joese=qvZ-w9Eyz^in;7p(Kw3f>G=
zmgcNE2rgW<AXW{y7vRl$i*jLSG#QE>f4h6C-jsbO0vmpG>TEA5xM82Up~;_r#b-Nh
z3%(bDg73w+;CoRl_+C5;z89~u@qVx=(X!yLluS&t_>Cw(9bvn#p}+Y`A=*N{BtRBt
zRQ{#?rQd?kw4u+<fmSo2vP>&|7WgWyqfNfS<n?dylk-<(z87Pe??q4Md$E-HUbJPt
z6X&pj!v$x|%uCB1TzZEy%dT(;ZZkOt_?zYDf3298l{>lg4}T~#cFr3xDJU>AFH`tC
z85b$n65>RE{-*8j$pcCSE@mU8<&G}s;df<v&dCE|W^zvO_sf}oqd3CfF8?y1YbN)b
z;xaf~SZ3*5GvHaUU^Y@#?#v-F%Cwz>2Y3s_%+yOg9Ts|qGX##=f|$?*lHOEcl?!gf
z8u9uo|IA8bxxCjgKgCYiYx=Z2%r#53bG0osM9+G0iRoI^vOd4;oz7fq#MeXE%?=6d
zuj|a`Olej%2FKS5OQPRNV0YrIUQ67Z-+jKtcLod{Z@!y=d`*9vAaMgC+sW4vb&NN7
z&2a5wV^P2w<)je{G-(y+V;Xsdl(=+DE41*!G<#E3sqT9%Ee?o9O?gi$*Qb!ZZ|k?s
zI;6c8in8ao+U>5-lBI;mV<_}0WOqkkV@rd@O~_B3$E)VoVhQ_<Of-Qp#HBI99V4ZK
zBMmo?`JIuvHg+f^_j+$<Zd)%i_f&Lj(rGkPQ4?J8C7d938xTi-l#sr+Lh9N^=^)Gw
zcQYY<c@X6@Llu|!qIrx@dZ__&9Gs#gG`3orOQ87jUX@-;!^B$sq8DP-xmzjc3S(wO
z1SV`(Oxci!iH=Qo0hT-A?`zg_nTe3JugM4A<{bM}&%8~$$uQ+d?w`r)JvLj^0Xo)K
zKl*Z96{i_uT0bglqhRiLK1tF>RxKhtxEJ2xeJuUzU@YaPe(UwwLfg(OQ5B6@USAas
zR+*;-;@y=`sWb5%V{cus(s)<;kl*2%^(k=_zO|Noc9aL;v8#dk%3ezra1b#vMm7?(
zYkx|+>21*9I`@w7*eU7eYNx%@K!XM$QF|%&B>G+EJ`@!#<kdiBLJ}%$e}c)vPLr+_
zjWX}BWZP+SfvOK#l2pD#SSwR|MnZx8YAv`E@PDQrv8<_l$*`}?h8YPZcJW$p7vTR&
zNhrfcnUAS0UH>l?7~s@!?mAYPjg_zPox#_WzOG}9FIS<hR$E0A1rZ|~<n{9qsERxN
zCg<BuHkW~j>WkanrVYBW2#>*>#S(!cxpw0<R{5qwAT>CuArWxE?pG_W5slVLPBws|
zP9l#Xg>C7Y`^|(5GQGH08L{C6q&)<7m4-QgH8F<n_D#7bY)j)V-CPs?Pl7OIT~@m7
zyQxu}@zBRO%11p-YrhliXRK~A`{D|cmkuJu>=3fAkTIP9Xr52!+NY>X9ZNF3&PwbM
zrqP<7k1;T2aGJ-*X#5x03ATlwE-RZ^&XidbTeDo#T!XH0t!ew{uu_@3*7(<uSvO%;
z7wj4ORl19DzEi*|13yd8HrF93U)%Kgc&;b%oj0Z9W?w6$-hOA){`5wo{wee+Tea+)
zIj=X#pWpGfjxq(8%$L-cil#BGq;^spG8PjLcm;S3lVe|GUA`*)YWBxpGd|s(sQ(js
z&qFo;oBx>H@4oO+Z#hH2efv4-{l6v)=LW^y7tW=>N-((ADSd2){~&cw$XY;Sib3bv
zuL(r|ftK{S^q2(nOVtQYvUaBta{7V(iJ6E0R`Lm=^y!gNoJ;!?lY8B#JMP)4=E>T}
zPUnAun0-pQ8^_=A<iS0C*^Urf)sM2$anp_en6&VXb4EQ`xL2szQD$GYB0HEiJzVk+
zNlV9anJ&-lp~4Fzv350mj|LMKgi9=K%AGqsBZdmkjVRjHG(Yl^9}(;H+*M+Er97|I
zQ(&m@=!o&dn$Sn4(F><P{UZ`_gms=0-@v>zX%(<$y%xQB`2BVi4qkh_*49`Qv^IOv
z2zA2me5bpiU49^n>43%@9~YT1I4HqG%?U~8b60_|C0vA~`RYws4(PiNoD=x?KgvtA
zwS=Go)*5k-qofZ?j4oxpF1mtx3(*8aZ^X~9bSh8%{MvC`)kP9qyLR#Qtkui3>ui)b
zyO1fjv^o_(P3i!=vWkYCWS?vgM_n<ErueLV(m2W2*03b7wqs3XNqHL7hKXaFu|(ED
z)5sX46dTUu`*iDY+k>?$YZA60vaz<kxpuERq&{6TX+M4MOjJAjn0e;;HiuZGG*T93
z#qwu{GPT!qmhwL7m3Q#2eSqkBwzE&OlOa;oMna(Wip-isN;#9X<h&F$&3?r;V#%#}
z3>~krjbaAP$3j0@@wQ%ElU{P7wY62ADC!VddRKcK)B%Wron>G8tKZJx5@^b6dUXoZ
zPU?{0ykt(@dZ*IS;sgE>yB}S?FST9dz}J^`SAYD2`WKeCSb9K?DbG;0vF7+Un~T31
zd#amxl`cAr^;Tzj=nx|Z#0u06iEJ*PP>q~z-YKzzJ_%9N>sp*Q>G++<y%U;wFzeNs
z<x?H6ZX7oZIC}c+r?R~LhS%dh-<Oqa?tEqY=(tcw$Va){m!EWOF%=4z5OPS=s)`>H
z28+b0&G;;?SEGm;C?a?~O*(*01$DC{?p{166X0!qPA%a5YZb9em!v-4OyR?R(tq$^
z_nK2k;e#v{@%riID|WlrxL?*>;rn<xKxS?)(ey-U>Hb2eqrAbl>cIZ_`wR6CIswrd
z0nP=M-0Wc=$wQ6VZ#JIKS;Zgyf&fMkjkHfbEP7QP=oRRuE%H%4K*T=aRzOhZh<2q=
zusJyBmh8nkgn;W~`_P)RSje8cAxo}V)bcLLQC{Sim-}xB3RK1erB{M)oiP0>r;QOS
z?pVrt1l&D+KQ`DBad)@CeN%@s-i8OdQ){dF{f_&1^}>{0*%=GsRjWO>6ZwqK?il?b
zuw&F|F|RlE$Me@C=GLx&J}LzWGjl(agxwZnU=pc{)BSI=-l?q;(Oh#{*QhTBoO*AC
zwUm7UUyIP0=%2x7EzPNz>MYuTSC7<It4e-B54KQzpGPvBl-w4t4~w)r5+G7|5lY5K
zWW;jmM`DiIZhYDd22EG~jNHRc63%+}BuQ;GJgJM|&>Uq~nB3t4yf=XnZ7w0FdCaKV
zr=bV&G@OrOdc{gDqMYy(0ko$kTfE|JLALvuE`1qb`J|5wqVx%S`=}sLkj8mzmhe?)
zxa$HlY!30VA<P@mm>l0Z(IIaY$5sH!QHvw0UFhhm=_8Z<15k6tk#-kTlU5h|!y}1d
zE43~~cDtO55?+|*!<`0z=;XmEWaOa8T<s6*dd{E^>v2Qg9nhBH=Rp;Z!O7!Zv`I_q
z%Gr7Sxu?INhlaXKJwJ{IwvZ@TP0iW4>b&YP`bd|bGL@}0Mk0=_Ggc5j#6<{St#3jN
zUuV~@C9Su3?P0Cw>;n>7lZFQ3%Z+)`qfyq7d1lLi@2siZGPoD5%LmBlH6e7Nv}W?6
zgccgm2*p70WnEs$#CH#=ed+caj>0EFKN;*CHt>&q-tm*#F6sk$*B2Dg?Xcah+RU?W
zliKbe_@+m0eQh9%zVmA6YILiV@>brCGDsC_tBBSRZ%Q`Q5OJ~7K`WV!+td8)#GCJm
zgi-IBwR`}W0F#Ipd>rlMBBC5CBaG}tyKxRjf=MbzX1lX-iM&$qtXndvIkUC;E$3d8
z@2gcHwDpADEO|An#y{gdepB9*-vSodfv-)thB}ra?E^eP@%=?OraxgHD0D+s+@MU0
zhcr9a-Lo!4wo?Pd%*f3{LmFhoQIjL442nSbP%Xo((-6eFIJ8o-7Sn}(lx9bj8%eRX
z8qQJ_S*@DuZhBm(1#5`%Dec6eG&~T-RP&UXys~E%+$mNQ;a^_aG`oLk`<T{HBx>(Y
zVDJu-=vB821V5CuGLDMl`=Vv!;+3n&?p@AjfmIh~mJ|kuEK;8ITRs{;oZQq@EQl`t
zDl1oxY-AjKQSoK|tcTyJg${ywP|p)_*%p^TcbPBuGFW?SP3wTzdq78^$%nFoImUBE
zPwW&6@+jtdgTjN(olN0%43T1{0lP)oMF$XCqE=v23!Ef#U0TC$a!n0tr9%Q&5wV4X
z`1Jnqx-6b0<@Y6qtgCAx)9j;cK{c4MO^gtxF<Fo9qQsqS4T`SWkzSCNT`=eRqKb#*
zd3R)XBtsh6OHanz=cHiPsOq%<Iwfal1N~^e9Fc70J4!l-_nnx}wl89=JB+r(LuZ~M
z)8>`Y>y)t~!S$~3AI8OtVYgs>OB+AcY8UcRX#2Z^r^F^_B^CM10sC<BAU-s-aY$+@
zlF)QuUB}1s%Z8!1PS@zUsum5?7TQAPJ+1K>Si|sRu>Qo8`XPR&6gSu}Ins`RrV=Bj
zy6wWD$Q-(x@QS0o0op4Gfuz#}p|CuPvH?5Jy_qFMO>RMJIQy_b>K#QT8X7XI5?~f~
zL)9<6VOGNmMV;MlDd@m3g|Yf$!tACpQ^IPrWoi39-gP-A)i`O{RJcFvU{n5n-Qu+3
zbB$-6`5&x>hUV|DseOI-@PoB6Jn7H_(>sT#m*(4RuH1NOIX!QzDrr)em^W>)(5d*O
zQ0Tye!FuFM>0nW$q-Saw@k=El|NU{^;JcE<!25!QGT`0zAUEiXG7*u$yV1-CPhSeS
zNJa*K)tkdyZs>w*&mUH)m@o@ZGY<>#kTe+uQ>c<AnN?rKAB3#j7?uesTFv;nP!xRk
zly7#woJ+yYjr}!Tc=ePs>e7wvxyIu7B`4!sC7BEX>(M>9?lMV}+!t<(XOl=tCzmeG
zyC&6gH?fRvRU&fA>af7|SjYF542%uWoND~V+r;wAEu2=F^NHZE8+(o_Hj3ZE{h%oR
z+B~oLuD}Dn-t}T)u(f7=`mnsX2g}fGj?6q)HSYDm!(BUHTx_}T(){Dfs1e`HXA}0&
zwdKdI&wRP6(*mf+FlkQ<Gl*ALL}s<6Mn!Nv34n-xztFTC3qT+mJ*VV97=RoPe4vNb
zY|tiM`e@g!jPr2UQXH(XUt5utB>_I-2@vrje3u!wy*a^0cl`{uqP|2R9oV|><G=uL
zYBmf)*5daKaV05yRLU&Ss)!xbkKip<tMm&jG{qvFfL4La!eT|eG_^F)mqRMZwsqxc
zcoVYX%hLNsH8Y~aS@nAFk)a9-tR>NlwqfZ*swPd{w09p90t)&)#p(&7T77H1qk>k+
zgc~JZad(w9YACFY6Wd+AAT@boFVe)BWW+(@XDVOk*e>vrqyZpcRWdw^)}XFCFSV|z
zX`|`$#mGRbnQ8;wI1&|Qy<A@sk62j}g+3?;qX&}>;9Wq8WkwxQ+rVmhJu%yFU0e1Z
zoK?84J}5D>4Zkyi;y=eX_4#M&>r3XL8y8FWJ@J$u{rn`zJ2H4e^T(Du%%EzC6G2vc
zwIZG=){p0uMg^Sv#UP6;7TDkbUk?`?H+_(fRSzQBbkdKk+Dt`EW9}w6+MUuHyWp;&
zAG!Mat{M#O^D3i7i2kq|)d<yq;?@A4W%cTa?&E&l$sscjGX3<HY83VqwRP(?KUQ!x
z>YO=*fA>DNDOgtAE;n_D{Rd($LtP*}w>EvJy)Z9&%D~7g$xr{qxiO2I@#j+ug&60x
zyZ0s8zgN^A6DqdrQ9+M(ejz4afP5a2yAN|*&;@oru{(??>1;Qp!<xc|itUJFgYq+E
z7v5CP6dMuzBlnboaSQ0$&LR*wSsIka1o@m#$55wH_>S#FRh1d~dg?edXZ%u0$^Pz3
z7KcA~PP-RYS9SaHg`61(K0Xjvch^j{F%DbRSyDZUnRb%Pf$s2=$uDSx9$%DsY-Q^r
zFqYSU?~FZ<xbqjfII4_MX;L6D#eOyz#bCz(nQwK7U+&?VVCZ_HvWRy{bYX<NU-W9&
zy$yjVtF`Jqt9pydxQ{~PhbztRKT^b*cdaWyM|Xm1m}2z#TWsYdzbse|JQZBrk!VRH
z-FA*2-{>X*Xfy*NtPe5b{;{QYo}yl6id<dtN*`YTGS-r{LHB{Z6l<is5mK3A>}Li0
z`2N^zSQdqa-t58^M&Z1+FJ8Z!!?b$57sSqKVbx>hpv)0S3bugVVq?$jPW7Kf&fXO-
zS|YdO+|$ncc&98sN;AgEGGQrf9VBXv$X@>HQ!Dr0%RddK31jzpKGuI39QnZaWy{sD
z21#*}(4=ATeuHa=;M&Yj%%jqc)O$$g?bZ&=vBsi=1Cyo$dntJb8}s+e-MSmTo03Ni
zqALy*7Mz+AcnVD=5=}zJB>gn!FI@?w2I>cUTOSFGX{z3jl+>Ge+F&NR8bp=!<NWkx
zLWeU03CC^+P?g(j4&aaO2uL})+(fMRJFtFbUht#U>!8d;Nxzt3<%$DNWBb@Mwfm7x
zL*|QzE64j38^Z*+Ddw}a0`Zei!t(H`KLJz9C+|HMY*OYP)$K9ajy#xs**3%V!M*5X
z^jBXk-Y4!>j&8o35K?<O*W~)w<JOoHY^Ak|Hl!ZQMMRtFDe9VoUkQ-}e(-o1fA-``
zu(y!LVo$vK{kT}8!*;6n9jfNtLr(@ea*Y@Js<mPpDn>OPYczIr$RTALWqQp04FueB
z>yks~OsDQ$u|GX&5?!c1W_r8im+?E3KF57yy**9$S7N3|$EqY*5~GVBJ)@YubZF7K
zZ~yyI?bf3D_|tS_!=h05X_|?@@s)+sPR7yZf$_!@#(_q$@y3)~C*TLAgBl-h7#Jf=
z`jH>(vOcJOa02G_-HBlLcivV68aI>)yY_qE(%W##eGcm<6xs29SU6aEJTdSX&^szr
zIx+Vc;y5<_E&e(<rLp9grhYx3E&Nzw^qfXs_v#$jB6YCe=k}PpktN^*wMuQFf6dU6
z^nqyP;cor{rbsBd2#dJNj#zidn<Z^{kIS+B)>b=U+oE>e*La3|q2c{1$ZSsI?M#E4
zc-;E#6rCxJqevwQiNNLe>uM_f*cO{waJWf2AElbs@4`Y#R-D!J=>O1C1SS)E%?(^N
z@#67p75%6@%8wH16CfyzSOa<n<4OaBSZVw4U=;%f_X8VnY*_C#1Cd#%l!kBvC?8-z
zEjz`7s)JsIB_~GP4J1#ql#`-ZAPwSt$x1q|!<|9V2tS;etyS@4WyiW)Le>D&H@Yys
zbD-nN2*J?2WS|?fGV}fgqo{}R0a=twRSQ=pfL~aF$m={r5MeC27HSkV{+c>7%x*S!
zs=cymKIb*%qjP@D5aCrvA6dafvm=K|!@lwMshzgcn#2H@G(?S37PCgo&q=lRh{N2I
zsD6)W@)KMiKY+8GK-$M)vbua9Fg5L~)zHSNg%>=QWuL}kx-6a=<%x)rUQt}<p1$af
z7$l*oT3w_X(qgrG?c!n$HB+5u4C|Rw5)2ow^d1afy;Zbpp3i~Z6AmFTv{7|BWZw@M
zqpmbNl8vaA=YYCxtso5inbDX6nG{-FxCug8fD{=Pdo?LQArcW{wFXUHkjatDN7RyZ
zodKc@?4SYgQ+1o&Pxr=HbXra>67!OEfrmWG`|SL)94>Fbt;L`Hcmks9!!EAu#L9mS
z=POtK8qQ<lUc7eX=KB81T;>fArT&s%_5%8;X`#9wgmWw3sR3T=G<3GQ+3UPl-HtJM
z%zV8P&Cu*)U9-QccD^q$x;wnD!O$skron-EHSe4myqBRcJR0e_avq}P&K~;2mUa+-
zfj$Cho=^zt{@5KkjlFAMi)lu8+9qvWpeEaCc7<mrR$LfHcQ&ge;M_#*K`HRZE6qb9
z_HttEr=w`>TQqJ%CCzoFZ(|@kFMhG&tYv!NS}JFm8ZVUAwhw4G5u4!|G}Jm_6@;nY
z2RT36`Sv)v>ZWGrTbKr_CGY%rB846mtUgXv|2+JoGk?CG+lo7iaamly-daIF25T^b
zemHz0IlB##`oJYrHSs8DFX>&+g&jy)pL<K6rfff>o~JjlWz+Ps-A{KL`2dVb9E-#@
z=g!!Fpc+l<WxFKVKS@e)ge2^APTFvE(x;}}#0_0gMR)Z*P1E<%YzX&OjzYclI>EME
zdhiY|=fHR_P9jj`9;alF%lg5Z8iu+%XBHlr*%K*`P%V#qt*Fb+DF{!^mSxcrh2XeH
z<F?dOB6dpYpO)1|!fkP>dLtIYGkr>eq^i;`W9PHsp!;1VGjJ`|88J*B<%}40O*vhe
z>X-%s{h-OMf#x2Sdlt_nw<~Rx<;`0w>aAM*<o;A$t3M@`NV0%=%_hllZ={{MV9Gsf
zKGk^?e(&<?(S#}${A7x**V(bEr}(~9j*=GUXnB+P0C_%aBTjZ;y~)n;Ttpc5tde%v
z^cn2*L2=pWl7JT7`)58PFOMCcV+_2MGj`53)9p8Nf^im)Ekbd(&7fh8@w5F3aI<%&
z2;Iq!dASl~C+o?EmFr?0)uGDA%ynlR@$(bvRLyZjO4_uB+2<^QZwWnLo-N}5Z0m@f
zD{6E+uAk@qvE99Tn2Ho$ar&BPT@(aQ3eM}da`80nxF=;Fk)rry;4XU{Lz?!JTlLjI
zn0ggxG2fU1Ca76Vi30W%$smoC?p@l=0+)PBOIxNf!%--2cK9l)8&v1ZH7-IPudCtl
zcD-YhB`jjSG089$RiZeSAd|buhb_vN++_e2OYV8+%{9@8*vS!^OESU*H?5>ObizJ4
z#f4F$2dluATEZ$iM$UrNi^_>4&yBH29Ivx_{z7rNHj8%+Ng*lYVeZJ7RdvU)>kazC
zo_)n(L6#b1p2L`F)eTDwyKa>ay3vr&^dCvD+-M6PTk&kbEZiIF!jIABAA9nVRx8Je
zqd@#hQZW3&e73cm+^T8~Y6v>xD514Z!03!<4X<F!`6@QR2npl{Q}zDFHY;Aj+7Fex
zu;Kx}`xh_%s`P-!7m;DXo$ZpS7Rg#(tVcpzgBx#hQv*ab-%E$K_%cc7zJ$Nep&7#j
z9c%Hx-;~!YS)~$L8%J0zWIz!695ZTm`5ZH{2Cz7;Y|9K#Rk7yPPw3@Oqww3|->%0j
z8dL*(X44F$DQY2ur%E2Tr=%!I=S(xRb6`04tEn1yeY$7vq1=^FLmG_kNuR^0lBX%z
zI0-x|G0)v@U9{Fcei56B!>Oip&r*FfP*jRWm!JcpE}c6q3br9`@uefoZh8{CKQKfx
zG<L6{2J+gW>zUDn{h99*S`Seh)jk3)@2QfkmeuP#;N0Z;SnKjy{&Yzk%1q07E#DHT
za(RtAfDjt6-}2tM%chEZ4E+ZrmllLAv$_@MEI5f~6Jft)vXs)^S_tauj(#~6ZCU;i
z?WdNe(WgKCC_d=I+q+CItnh;`Ut%4urVaW@t_RKwHs{LgEAKSCGkWHWT&CRt#jwtU
zd6(|o0UG*Td5jE+OMVQ`_Iw#?e0cea$YZt36@Bh9NY{c>6Bw|@<t88ey5i}yqn;tP
z`(sa@oQQvBwcYRNnULax*2n8_%u8O~%{VwK<A{6<#pD~dJ-n!WUHHZa!`l%fKtT<7
zYV!!?WK+%UTA8k#zV0~B@(c5QwK8Xl_K`ZswfkW0Dn>iw6)InUp5`50EcV=0)Lwno
z+~mu_F6}$rP*v#39KLC6Jl@F1zC+!7d}xUln^W|>cCTI5^P%_ml};z{V9E`zI13aQ
zmzwkrr$Sa!MaG8AdkjNNV>|C1SMh3tiv+X3*61wwk`aSLzNzrRq4sW*IP;<WJMStK
zv|=f_;Rd#l(>Nm`eOt(f38TQs(@*dC8)s+L<%9|wTi*%9nk#?!fb7pdUS;qk{YR-i
zS3TUZ$>%?G7tJ}{!9V7Kueb>H_Yl`7Fu_K8DNbru{HP@FfvMFEZ@~R>akrU^_To=x
zE)JGi3_h{!STkcVUM2D6F7HPml(T{<&;;oy^3(xQsPEONi8~`6E^1C_L-Ta;<%&qH
z!CrezhM^d=&?aauA)`eD88tg-!&p9Y)?>OqD_cAT%>2;uqQwzX&*EPpjui3bXo+Id
z453tGiQt_o7j9Mjz{`{3GVzE@OT#fTjq^J14@0j2JZtFvIYEqpo^Yjr-u+jl)*_~q
z`;xDM(bu|~mqa>1vg}iX233A@ePtyEs>GTL;3Uqt2k&^q0N49t)QPk(&gWgFQd8Nf
zLcM;_4R@oY<Y5rl5#x^jLb_xG1aJ|BP?+;fhpRg0)slL9Z$>302ijw`h(b^kzI1dL
zJ|7T;rY@N$AmfV789WZT@dXwY&&S&HYkMyBd=<8Ht~JkF&Ghk$PM4d-=*n9KZG0+=
z-|#Dq9&BDyqLodXn`?~JJGG>HG9CY%*kz>Na{wJ4Zg48XFDzGUA{P3c<cc)Y7S{SM
z>hFRs{A{#qy=a1UTC9jd^+*8qEWaZ-XknDXND~Vps&kF;-QAuhdEASn+>zMk)l^bp
z^R7zR?p3J-gk~0y4m%1C)6yVm>q?}pVtpjc7(IQv^f`Lqm?@hvmk#QBFE@{vqmPF(
za)+W$U{VYLNsP}V`@`!#o(#^Xw?C@z;gL4Tjb`aYowg^x_{8VyE9A3iw3ck7-%1V~
z(7myo4dCJGoY`i-i=Ha}Gie+A$o-u=3A5W!joUPZ@6YT?%JQFa_zAGH@4~Bh{_;EP
zulYxBm)dc4Z}_1jr{r(ne_OXn*z6C#D8KXbksmh|h)`oZCkY_^gxFWE6p*9sCjOkd
zKP9+F@iHlxfZngggGKKj4kDk5HOPhBm^S)=mof&Pj=J4t@gXIH#uupgg>`FPdx5VE
z(8-X8igO~V-pZZh@+I=&fCjp9=bCj|F4l?9%dT>`p<ldkg%e~=k-#!{<8^vgPeBpL
zEQ8tgLq*ZGlmfAc$*z;*;R?=Ko%EBa_LFQt<bXS7tk(euwOcsvY?B{h=o>z4<0F5V
z^pV`WbU&XJ6?@)<)Uxz6e>`UvD!kxG=DZ3ct7Fx3sz&XGsd8#OB0cLV>m5}&6*)W8
zUE%)PdQss^N1Y6p9Hz@~CvzXlEeJ2K4TI|FAhM(|y@v0E6B)^ESvM0BYg=E(&n8kV
z#Uk(x-s`w7jQ0_K`g#8%euuS`Ak^bE(clm#gFEh-)EEncNzyT5jAN>-y#gwyHT{9s
zyZ5*nwWQ}>hihe1N;>rqV?K4pgNP2N!*kR4FsR-;h?_CWJXV<Q-U~?(869+L@}i#_
z5KT$VFgWk6*1*~a?3&^{$`fk6!M#C$UMQEc-nS7yGox#PxI@xS>wK=*v24on^O!C2
zq2FNJ*QB2Tm6r`IAw1b-a8+7YZ@lVL+vNU7!zBf_=p>hcPt)r`k)QfIn_UXQ?p?zc
z8yi7<nAVM*@jj4^f!ej8$eDF@cAphOc4B0^hag?EHAAX}32AvjA}qUzo@unn7`*~9
zdpmQ~!hQLaX&PzV;UhS#-zpQPn}6nG`Iq6_TCz<(iS}-ZRD^EUG&!F7NYzqiqL6Hn
zU-!AfuJqvIX(%N^sK9eT`C)1E%|idGpmIeT1QdrDM3zA;!$$a)V8yJgwe<rmgW9{n
zcr~-Z^_uauW$?=R2tdb%(7;X&W%5HVafC=#1Q>28r#wjutF@Zic#bZzTQUW*KOmFo
zh>#h*8Q&Oq7tLh`WrzA=SEfWn*@-`z!P;qlz0`1+S@FIs(B8ZgdzkuBV8vv(e6mUa
zgh}aD!dE1!W8!)}y+^vHc<sF^$NkZ~%U(Sz$r_kndi5b*;Ip3f!?}x`K@Fve)BKK&
zvn+NbiFARbzfJ;^Yw%<~VfM3)94f4SEMmm9cIADIP8z7iL1G*sm<8=#d{KrP+9+Nj
zV*Qp^(8cKpu5QtZg&)j#dmy*EFQ)J=(cTE}T3*`E)b1924sG4Aw&%sU-R){{iy~kT
zq=}zv(DC*PkkCn`XdV&sfE~iyEJk6U?2EVQ79EVi&57ch9;29hAO_?fFRQ29EBNL0
z)o?X(YO|f!$5ZMTUTdW(yvVtqq9m9zt6I?QII5pV6<mPzF2z^Fs@Tc9U?c324NNV7
ziyAJZ$%Weox1XBIC9cc2XDJ(W-$Q2E_p8d_^R+f?;vmvj**)t~DX^&&qtz52GW1Al
z&a}oT)o!)cM+G&=4R*hXkxMAyu4IL+BWWyM5)$kgJsu_xQNJoUTT^-ZSO7B<aZSKk
z`;zR-(9DPgPS7Hta@|`e`h-$&!2352N3Vu0NJ{>2^^!}kQ76BTB=%F%_Ga6}OZtch
znN@BlFx9Wzs?Ns`9!w1wj>qp_mWxlu0R8Y(ul-9@IsP2&dVzt$SFonVS8leyI7oh}
z?W@YW5mHzW{K0t#8Ie?&hqa_ut4JIyY%2I^amQnLWH-?+Fo4(*`Vea&IT&chUCpg(
zrE>AuUNi2FQz;?`UEkn>#GeO=U`JniMYlh=dhO%~U~hvY_5|1!VcuF5Xx~Ie#Gb$;
z?`bNzbZL)s$SKK;scQBQg1O80wsHP`*tU%uwQY9W{%uLyc5d6g?bf#Y+q^jZ4Cl+W
z?Fa9a1ycjiXtO}N$Dw<_q+0YHzRuh9v*sPA(*LKnw~mS<`nCp>5IlHr3mzc2Lx3b$
z@DSW-++Bl12yQ_VJh(&SP6NS%Yva~96b>OkG5vdQzHiq1X8xUCd!2jgRIQehTf1)G
zv(F5&LYodtUnxp%hy(nC>+u^AMO=Qw1mAB9E!tP_R3FI1uf*z4>5B6PXuh0i?=_rs
zkOQt9rBRDCQF(gSx55`7xavgH5>u0d%O+^Dal&zr?$f2U&N+AkXS<UaKB+N=O3L_z
ziJJt*pWhuhJ97<}A9b&*C7;wyt}_nX9c^`IysoYr2wju*G3&zt@wd^Bwq`?LOPc3Y
zfNaCG(57<TWaPr?qlh`Lj&8U#tSyjm`>DP@^1W~1zZ)dwZpA%2ujgM^Lvt!lWN-bo
zDjs=<%c0=i>oqHwQ6S~EfZ*a^-Q;=QhBMJ&O1r?Nzh=p_&`CL1^tn{y<D_xkefN4B
zZKd3;l;_{AH3@;Mk+SwvKlYWKyZnw0IzQ^OvzWUD#eA8Rv$~xR&5Gc5;rE3?g<Gu+
z{|9rgCWocoaof)dpVa}!3$5D_*msr1(viP>>OP=B@^`0fOeaC2fTGX3B5>O>B|QLp
z$T%najI^O5#8U&lVXSzVT>96jRtRtJbGhvaVX?cZedpcg!h+!6=kvuz)+qo>!ap8_
zzh_MJZ|Ij8RO%d<C>0HJzPY4`=$H2JrMLE8!67^!ocXEzC8)$jcREA`$dq2amkYaY
zPh#0_USEw;O6@Un=4&BnM-;_+y=P`r<yAYs(1MQ?pvskV#b|$%)Fzd^t52Ag@n(4<
zRL<?r!9t(nN3T$5^)^Xmo7kkP?1{H}YLNI#QTiX}`dqn`^GCF=a5@R*B0Ysk;Ej8K
zjJBosxVe}Lx`jgHmEAG7*|gu~sEEHSDA-DHVXMgGr>LdGeuwhi1I_v~<;OnuV9L@`
z=AdeA%`v<37)_d(9Ovy8cBOnipy17IhOEyzX^?RXMY~o&QWNS#sY`A_%}~&vPmHue
z*-hqYtlD-w*zddDs@QUCf`{8I>^SUkw?#cz4SU9)W@}*YYGD0q5NN2Gh#x+7jyTp_
z43a=dXsX0E9N{}0=q+lzs&o@bsV_oKFIS1-Ftko4OeO6}ElLk-v`%B-#gsfV-#C5c
zqZvY~G;PDmMPfMLZ*cnA;7O-z8E;o`Oc2Iv4Ap_JO+AJiD1=Y364WDaiiWUzh56P?
zd9zhx=8D3Se=)^2AjmrFg1#jcQs_<N2lMWSO~w6{<eCgiXKi06VioXwsSz|+$mRLO
zsSt&EOdrM9+2-?_P9%mI$EONXv!FqAYpCgTvx4Z}kd2H+UyVmIksb4@S!GK~Pw3m-
zza&}gGi(J_Jh4mTa6z6qrC@aQ{K-AO>_c6{cWKR^OBK$wHZeRlCfL%k<1mb$y5cV4
z@w@opIXp$z?3;c*GESMO`0f#-F}sIx&g37!8U8`9RKN&U3-=f~zud;G##WbC?S_(n
z<xytEWeJXEb(eaD$6^xJP=q>l+qi*!P}J`8cZL7KiT^LHcmHzxP&V&xTS2o_*3`NX
zpZ*0B#RWlwn}vwuZY#1v1|7;!PV`E0U(D2WOs$$1T4OrDIoHQ(6r1k|JBgE^q4UXp
zc}{pW*-*p3^_TL4>MIw?L5&b5YZEjM9bYKoh}hfh)M+94-u3#$CEM_g2s{-!yugg0
zGZ_s^{-i}_7?K^Wg(LG`GV^Wzteq!TdS*wE(x;{q--X|}6@JQdxN|uB!25y@J2rQd
z@RB*`&O3Ategm9}9q8k;yv+A0bmIwEtbW)NJwNZDM4u$%ymNwQY;b?L$L~^$TJ8qT
z(jC!$_x}(Ow|+r(EoRqg{@^I{Fz5&PV9by2-w{+Auc=ZqDA9*hA(OV;j1dLzGJaEg
z_V*CqY4prKs}sI$7rXc_roY^eKxI)iAx;~3dXaiQ@=8U)*RX=iq>rd}P#ra!he%bA
zu-VV>Dy{-$X|~-KvGd&X^XAc4dWQVdx0ddrr_Z$$ccVmGOuSJREfD^DdnG>#&DTPz
zVyw2p7idR{yM;8wELT1_4SY2`t<C)L@ZK#i@S8~A3+wfLV7EqOoY$T7jD6Ebw6N|F
zQ&PV1=~gnY3>76510EY0NyhN%FrxDH?2MTFTde}(H=j4J8PDg{NksPb59*n|eH~PN
zt*9D+4gcLtz9MfbWaVU{tVUJA%}sk)X;ww%pX9CGyFW8>hI19)?L@Ncy2n^0;O^kd
z!`D+%WNW3Ek}mu>NjtZY^-hN6Z%*G_vIR|BbVp}FE0HL1usExY$f9z7VDB(~k6<=l
zg-^Jrw1Fb4TRV2MDr+EWgUxx{$RyeuyJ3dd7t&5T)5+Ij;`LWwlM7ibo}x6l=e_Lf
z#bmK2b<5z$BDqW)7fG6UbJ{`X2uk;e4*ygPFJkbOS3f?`oyQ-apc(6o9yFGpwMxW`
z{s^IWXQ!8_YfYOXBy1WFcclM{`|(4?k{pQOpMDna(jS(|CQ6(6X(ri=QVpxPAUNHg
z%Z!pmDTgvnB{-x7!a8O8%wmS+J+({6ZD2#RW9fMG0qQn$sqqRqj?p4q_p*`bwvxV_
zMEo*Y9g6LR16ldRL>=DN*<8XDloKoy5Gi07kCT-f^~NAmOVg>$(@8%(Sr;}Q?Xz|z
zP^<)9g$8)UIbCIIXH|#bm+o5Mvt*ksb&%VY5P65-{vy2hlWnp65=C5-k)<Njk*JZ9
z2@CsHI&D$)<pjG*Xrp{kgj6-~C$n{%P(0<|AfD75WysF139EGgDnKh!UVN6NGf>jB
za1KvQh0b2wRhLL@RCwuR_YfU^{i}`-Gtcz=qwdzd)z|hie*Ag6%GLt@g^zG#O>1Y7
zOUSm11Ssaz+1*B$y8JMDQgs4)#h*T|@jT+d%s^D+{~HiCt~W?};hpK=hx&6_@S@2f
zk%`5^(o$!7k@Mtu!9jtwaJlFQ;=6%wiy~e+FW>)uwHG=SKCmj^JzTt<tgs)AG2y2e
zjTt|q+C5pL+O1B>tjv7eGCqyjYR;C*WHQ*KI()PLW?RWQ)l<SP)uptqqAs(p{ZA&b
z0Z_45fv7lYKfx;A`C4@%J?1jjpmOB5&8TuPleLyLlA;2z6+3IWXnAP4X?cmRbcxKf
zW)1Iq$u%>qq%EgqHLU0^>t>B-c`PqvssTp;6_5!S0Lx<?z+0dl@B{9FXFv$>0q6nf
zfjqzz*aQfH@4#nZ3g8850axH0z#8)hq5uV8c&ycNRCgR_Wl(o5HcNZCccDu;3umSE
zA~-{YQiQUtr7qGf+byfE^rE3Ijjw-U`Sv%*vS#M*Wz8&(<=N%g6@g`em4@YSOB;eK
zDprb3_M_8tV}fIiW1eHWV+)SkRmW9Zajx?o^KSEALe4_&a&43?lx-Q!8Lb&DX3L{1
z9LpRlmCKbY4$BTJ$IHhnH2|*4^s#H4>wrjg>sHpyGNxnGMY`Bz7DC0-H&bYtI;&|p
zYuU&v>LPAww|)Ow%t`E|RedFE<*C;MwQKl_;j#@-1vml#Km%k0M!+f{0dxWZ00=w<
zf`RuyH$VsE0uW#WAQ&SD5&<<}65s)902km4zyu-zd0+@&1xf)MU>_g{(g0mx0T2ON
z03YBMKn0MQ)j%J>1QY@mz&1b(qyU=0EFb_h03N^<fCIz=%D^bV0aOAGz%f7#WC4c2
z3Lp-20RF%OfC7X9QowJ30mui;fGvOsNCMP>X@C!?1KfZM02_z~6oEegJ5UbT0fzu3
zkOAo9dXTuSd0KjsxLSHtIXikfx;VN!y3)AQxB{Ml3#S{Wm!(_3XpX3zXr1u9n2<2_
z7#$#{vL53+=RD`y=;i4wD|#n(BZe*(E{aq9M-A7lpsv~N>s^&wvs=Mkwp)<fkGsyh
zV1`VTtk7k=tfZCr<@gm<Dj?t>U?%_w*a+AU*bX=j*a|od*bO)V*TFpy0Um*y-~qS;
zjz6qC{C=2z`17#j_ICc_?dAwDvN5thvORJ<vNf{%W?e1bXPGGbL|)Y=Sg40`e-tr#
zG`cx@FuF4ejBbqXk8Y11k8X_~j_!`0aI7!ybL?>-Mi72meuv8kZ#Jp63^v~!y*bES
z&)myI80>KzacokZWFBPh8z3@)%$?;OjsuPz4uE5WW1nN2<CtTM<B(&Q<D_!Ea<39m
zc{JNT5#0_~Y@aFjP5a>+))duL)|B4V+Vrids3~>+RJ6Tlem})%yYjelEB1WuYVKn0
zM(|YdQr4H!htfC0JL5}+k6HU@2S+<cM`e3uheNwV$8q~{N6jj((GQ_9$`j?&){e+k
zMyJ~Ot>e98#MKw|c8Th>jDzDN9PiN81fiqjP2~&EE6)qho9ol-%j@&&>+7@YtLuyF
z8{AXeOWbqZYuq#3E8Gj*o4C`s%eeEn>$tPHtGJ7}8<kU)OO<n#Yn3yVE0qhCo3Yce
z%dzvZ>#?)3tFeo*8_rYCOU`r7YtA#yE6xkfo2t{Q%c}FL>#DP=tE!8t8^=?}OUHA^
zYsWLkE5{4R8{ibU1kQnL;0(9|E`S@FQ<_VfbDC?KGny-!3!0nk)9lM^SI+C~>+G}a
ztL%&H8>3UBOQUn6YojxxE29geo7L0R%hmJM>(#T>tJRCu8;MhiONn!dYl$<7D~St<
zo6ghD%g*!8>&~;ztImtgn}E}R%YgHM>wvR>tAGn|_W^j=c-Vi~eo&^`B#g)ZfXR@F
zu}LKV5_1rP_xp&nC39VZ?vTB?Cog(h(um9s^F@Nske_)#?GxREH_{}`(Frm`rsgiS
z&vn1Qkx6C#lVCCAYVK3}OgFJYT8mkL@OwlrBOPmLQVgQtRe6Hukgd5#Et+mpg$zYO
zD8D=ltGvt{^I?LTxnV7hZjSvsLB{+cS#z^m%!Ooo+5UvlArf=NTH=Ltd#OgIrNrYQ
zom!NA`mI54-eC8nNOQt8r7weV<}6c+MF|p9szu+khMtf!N}2yW`cRZ;IOJ&VRg1om
zbR=`le3#%q6ks0c`a~pwN*b3rJV9y*f^c?yF7lm9CXRU^!EDF{;qCfNBr#K3g}FFE
zeaHsk?usUolqoaDyqn-Q<b&{YecF;>AkE4ABSCS<0^#b4+Vb5%riyt!!EVR{@x>LT
zC2?8Wk+~^Bf5-vh>5ATxv@8QK-z4}B`6B|(pZFxaMV3;FPmmijL%5tj_xb)-CYyOY
z!D`42;dB1XC$U}Hh`BmJd&myqagOGb)Go8ie3IZb<csh>e|nqXCoRF8lb||eg>XAZ
zz5VVd)5*M+;56ig@I6PlO}v*5V1^|a4>=(M5nku$w@LRhU=glIsT^iuvYHC&RcS#K
zn)`EVd8<6WY2CdFcR^9Htk5y}-8{ExpS^Z>2~kPIAkL4ZdDzo3dwK3Wt-^*Oobo^N
z6sIlrYTZRz-x>y2ebmllpQgaEkv2=8NS?Eib<>;B+$(bzXcaXKt&*S5!&!WvQJ<7r
zpJzAivG=-_(=fhDRp=Mx)TBE@E6>VTM+KpLv%MX6>{h0gC`aX{+@-1Gy=(V3E5V+V
zF79u$-nH#Zi$<yxiH~u)%e4|67phy+9v7?ckGTioPSJ@fdF4*;Rk;hbimikK@;7<D
z)Bby%?vkyN;z2YY@$%58rS@_!xxWaDhtSB!=gCc*?bTcge|ak&oc$507Bj8BSBg|^
z5fu;3mLJcvns(c3K`N0*Amu|oBGomf7555}Iu;^GNeOwR4#c$GUIS7%LA)avsZx+9
zG_Ai^iA>-Y>j*_AM(24=`|fohlZ7Rb8NMHB^YEtS_VO=ztm^ry`CwaOq{3@rlEP~u
zk|L6#l484Jc+&&>L`b2fm;UKU{i8ypXwg14Qap$dsrd5&Dbq7KzfXCo{Ex&xqf=_F
z@MQ94AN^A5AHl=VfDe*|Ig{i2q?d~Sh#%4eq+o?>lPCLlmvaAz9@4-MfrYTi$H}#Q
z+Dp}cqz@S)BNj9aF}(f4L?c$;SxKM-_KX>kqa&7(y4nT!kv*;;OGfnQ=nmwf_7;9`
z|FrRyegww|2_(9<558%S*~q9L#W9)+`BS?MKetD1q}PwE9I<_4P7tlz^I6M^{Eu$8
z7Nop(7Jgul)5xqJEue#LSF55`8&x?v2g!%G+KV?zECo3X%GSlg`|XJuS(jpBAsKZX
z@Kk&DMuDYo4u2ZWmg;Kk(dYX5YtHPS9a<7CFbbw!L8%v1Dt;(K{3~*lEyU`c3J!jQ
zb1#J{o3+)hzyW)_MwX@M<I!u#UF`!LJbL2!N-TnU1Q!xs`y0M-gyG337DYW82N|f{
zf}b5d_oNq#%o<UF6xU9}_m5t9GK)oLjgCQfYcJrpN6$Rz+9C``I3Yi3|G>A8usoUC
zq6|l?AoI0{@T(&<PlmS0l@UisQ|%J`_z2gNr7e186oA~+-oYP^o?gH5jSwH9fyCDi
zz_*StuNi%##7DCs<F&i+izC!)df&*75hF--?L7SO2<MvFH@ahV6>?I01HU^$xu&~|
z@E?(Y<kXJCcaN~IneL+eM>`>FwI}eKBlK&AyU2%;00^vh4gLr}Il{YUxr=@n)i1)h
z5#C7V8*5pY_+fAs6u-`JtK?^iEQgUY-fy+*b}Djf;O8iTm-AzMV0Rb$6!rFlAEXn*
zIGL-TbXW0|>GrdqP3H^aRIY&^yX>dLw+en1Mq708-XlcW=c41@W7wToNU^kj?OnT5
zfm^-yZZYp9uk-KPeh!_uw0-m2hi6x}Xns->=}x^uI~k|Sx0Ze{)-s*Cn-KbEmA8U^
z`kmBk+40+Ar<@XT@w-IcLOFvhXG87bCxc#_9e!9RTMvG0YiW3=?<IP}vrun2{V3K_
zPWrueeNV-2jr^QC@z#Ev4BYIZpQ7Bpzc&fMkW8lS$J>=VWw=!vn;g>|GaF+Vn;jDl
z;Fs(tACKQ2INQ3#M0Rh4l4&_Ts@uh9)3@aJO2~qs89Belw|CDjZc*<)1Q5V}8uxH*
z|2X?|OMI^oKnzPa{$0I2e|C6_b1xe}1WQ}%aoTP=Te_vbR|z16Wvu-^*}gfuyG6Nw
z58?;@l-#@@qV)iG;?D+diSFgWmx1Y$zjL<7&vtLIkv%D4;DS%jz9-FgwQ&4}_O0E$
z2Z$D!1nXPdIXU&Z^}Y88pFSo8_Db&LoT}bh-MfLPkKY6PU^{E4PPbn7z97nD;$v^%
z4(!zU*6BX*-fLGIM1M?r?0Y1Ma}HyP_!WZ5`SmpHrNVR5uVk#2gnZGuy%nZ{JZ(Rv
zMp$<U-J*SZ+f5~SU^-ns{XSDZ3UBt_a*z;WN6Yl)nex;$>wI{_no6h`ZP8n6DpJ#~
z^S<J>79o3dI))6RX<~%Nj104@T7+hAnW;cctBzC!>l`7@Bwc!*dU772U9?B<>zXPZ
z)e0^_e9EXvQ-+!vxU@Z+pc``(kEvTt82qz6QzOYzghQX_81`7*nA@1Z7-LNb8M`OG
zp=l-=7juLokD3x;l1w~Y?TGP9-^)pse|;J?b!7OVrXOEK8}{<ol*5&eIIr=2qdIz5
zO=)YY;i^YmxcKN%p}pOk_%0>FN>rS2_;OMCy_1_{E)~KmR9q^~5-(Yzl6r?WU%HeD
zD`#?!;af%3^)75uxl{?OW^!@jlZtYQafxz8MrRIfnz}?bYZx$dl4?h=_i1k0y2LhX
z8L(853Pn)%DQ{Z3L^o?LGdq%cMTqqoZaTWeH)}7m0Hk=r#u4aQV!cwEkh2JHjknA+
zq^c1ted?PwXEEMdZ&|WQxgtpW6gMq)&5(6lHQSkuNS%bmM8(Hc#$Fa{x3jLg{_9=Z
zq&}<iR&D2!z^9Fh?;Y4AIxGFF<j2{GZyZ(KJHJVJR{2-Ok1GIQGAgHce3SI7{IBx8
z>OCj&j1vuvgc-=)AB%M!`bwOYj{5=FYd3|}nORw-V?ngSp&&+Jfn<_oon*9Rxnzc9
zn`F3TvE&cQCdqioYRMc)7%T|(3zh(b!XjWLu%EDI*jHEqEE!f0i-A?ZGGXno5Lh1U
zJFM3DLQ3-7O!7<}23U<b1puTV8(0R~BA*Z_z;sYA;P=UCMnJLgzZ6&_EKYLRc;0y2
zcx|m~ZG!gL3E_0)wCQy4LQHCm6SN%T4~&7ez`|gKuoPGWEEZM?%Yt=C&aHKyoDbY?
zJzxejNlxY<RIh#SsUNcLjRK?Ac5m*~AF>{v22RkPhd&tJ+kjP|BM5*rU^Zw3u7VO{
zRbVF=0D{PB;=$m1up6Ws1I8T3XvU1jvcX&s0&ai=U?QjnPJ%pO4d?=%ftX+<C=U*S
ztY9f<1MY+5U>c|kE`TCn3+Myhf~a5^C<FF^Okg2s0d6DfhNgg;;4CNrHh>=B6^H}I
zg3911$N^S@4&X6J4Q7qWfrj7;C=Paj{@??M0)~Q8;BSxt%m>ZDEszLI0@cB3kPoZ_
z-M|YF8;k}O!9O57SPt5Ohae@G0qTQGpcvQ&`hs^LIv5Vhfde25SPWW$yC5m}1JoXq
z7+W3d918&FK_RdS^a5{?HF@JfRd5{S0;@qM@bP}_LGoVm0d@~7WH8*9r!O`Cu1M$4
zTKGMficW4g4Kd<Mva2Xk?$(y6JjRLSqr)wTWmg)J>P*!!F46>S(VW3BM2{;$ONoIJ
zCnu7i4i_S(T*+H13{*I|v=i8eQxL<o%u?h-I?TK&9%(}cB(B6QWd_PsoJjUM++Z%{
zIauTtca&UMfmn2<7E!2TpHDjcgM;|yTEG0!@r_Vo#_%YDtfgi7gClFxcl|#Oh(=ej
zmJTX*uLMKaOe!vxK}QiamG4Ow@ylueqwn_11(v&Qjg~s9gizOyxPJ^0{4M3n$^a*l
z4G(u9R$XaZs+Uy(F1!Tv;ZQ{PIlfQHTO}G!Bsm_=M@*iR`Bc1Bq2W?ZU>QzA44uF9
zDSNA&&57j7!*z&-b1I*zx2oA(TnVJZ(TKh=)^kFi(sm^yP9%9AE=SCsQ}|T2s~B-P
zB?t{?AV$wge9GIES2>Yfdbka-a!%t@-LAUIMVo*(9FF*XPH<b|rzF9Nq}Id5i0O0k
z+X_Dw2`=LVuHheuKgjG<WF~1RCz5FoHzAhJsc)<NR6DsO6KIFy5d-H$$jpDG08S+F
z9<D~rpHtpeBJVC-feDhsIf(Id(%bTTW#l2|MBW>QVaS|OwW{-%Y8pI!DW5vOE0n&A
z{lqY<WNRr9ovt}rWU1{|A~I`W>nISPu02}3qm5mHI{U#E(h#Ai!BIq_tysb|``Ol}
zAx2M&qc~NYy@YsH!PY`kJvU0Df-t45by%Yct078Hv$9A_+pa`lR<A5qR72gP?6an=
zLqi-z;hg4S>D4Tnt(1VCLxG@HMv3yQrEScjfkSSihJI<~te~xaL)M~Etfp8Ar+`YV
zHjzeCdI@vsP?_9uiRb4I+o%Ke2ivkmU7V8l0tMe@Ic?JyHIIutwS7y(XN_!~8sZnV
zkBhIh(MwQf-yfKGM2Koo7vXBll`zbz9awwBh-y(6$7!>a5Y5UTn0rKtYGxIwXj_%=
z&FUW5d&G%qXBCfWla^r5${d(_M7C-e7IA88m$1)j9@u)swrUv`S7{5CP|hkJSb9Xa
zYOWMHYI~K4%^Ds!dc?PCuM`8?cqQnwQU{Q$h%XxAMKs!~B`mY*2R2tRU$n%Fv$eTO
zNM{ufEUu!yXm%7CX*-n&&FUXGT*ZCS?kHZ>rY*snl{+xIiu|YHUnHSzT*5W0ePDML
z`%lZixKmrQgmzZ-!0IacpXNgmSR9}oSRy%Vd~ni*x!i^Q@f`}u>AU9vuTY4ecSo3*
zbE|W^aVv7$aqDyYa?5dBacgsXajSAWaT{|7Lf=76pr4@5(2r1Ss1DQ{Dh)M<YCzqg
zN>F>K0n`ur0cr~U40Zj4-SY}-^A+aQFB<drG%vf^y34w4yAQf4y3@P$-ZSiBq`$ZN
zgr*7ggsO0}=?Lj?=}5v~!MVw(?O)nc*%R7R*ptLy3gR_lG`?uWYQ$~CY{Y5AZp7<H
z6MJsh-E88=O}B^3jFuEK^j;Ne234P+RKolh0-D%D-MH~zph<N*LlwC>-~w<CxHy~v
z&If0Qi@{moLU1m)r0^?YZsFI$!orNg{K9X9-wM+U^9r*GiwZLf3kq`zO9;~m^9ZvF
ziwH9b3kY)viwiRd^9i#HiwUy`3kh=xOE$l1=5Bu7EZof4%-{T``E4_OGjB6nvuHDO
zvtTo4vqUppGfy*Xvq&>jvp_RPvv@N@GhZ`%vsg1rvrscvv!wScZ*K3`-ooCD-u&Kg
zyx)4$d-Hm;d5d~8dkcDVdP{iIdGmO)dW(3=ytuiV(R-B65BwZxe4~<QFV#BMT=kTv
z%y8o{{)A%hgu!Bsu{A9~0xh;}!rPt$$Ae&>eom%`g)EbVZ104EaAjJ5&LjVe5_4Qu
zNnk;1$szr`%p_ZFIwya(Qqw4Z_nS$XVLcr)-^+0&QVOQ&*DbO`0t!`XuCd?kk`1QE
z1s)8{5G}bAOaFBD=E58e8M_f@$ax9j#Y#uVt0^jT3`aE&ICi;d`LD-hkN9nVwY60@
zl{<YH_g-DfP6FmKV{r1*IX}!TtqGNSNb*$geTq&9$lOPMhw^erMMi%vC%s{>skdk~
z<D5)hv<9h%q4lM7J`08T?B16~De<M;>|^d(veN#KhplyL9OdpZ422Y>Rfz`_^5X$I
z^B+B83yLLYrfKH{C_B({jY2=E29{V!jJPMg;Y-2~Z_Q&78<CPIv}>oaJZy6Ok)fTg
zP*sXZkILSHPB>wY<`2Rb4b_X>8*GR%m+W0{K9L&3?1q~$4OdgeS7pWRr?chNTL)#6
zd<SJi#gD(mhIm}5WG%}KH0Vv&sOgv`@skVYwt1B(x~ozj*^G*<bX=v@gLSz>);}h*
zL6Qd}DVTD3{{9t?Z(F1E>nKxR?v@-J+i%OsbmRvVB)=WLm>-z0u;C8<)j~=&={zO_
z@*D>b{tuxHESK(h?s(TP()BXjQ=b%}F+(uOnjmUY;!i73EQ3T$P@wrZcBrqitq4}N
z9ms+u{<0*7{W7jQ?qYeCgW=9F5!=OO`^@v%+7$cK_toD5W`eZk4F7m0Lr!b_ty#Jy
z&?m{VVkTS2vZ5zT$$Hh@1!Z?l-8mbQp8ewy{Sj1c81wv|@Kn)3>{Pi+=xNS#ccN3(
zE}<Gf4sj)gXJ1(V9&nJ%6B-t@c6G*xS*0(EPfSZf{JhpaDTXlr9DwLQr>~S9-UtRs
zLRK4V=sv41o!ACJ3?*l(8?s}rWMlth9skRw#`3MGln?3rH%^xSm$URA$7%IH_GJCP
z(L6!+g>pbov;PZMlVBAmzicpMTc8V{`&rCWqOO+{n-<8O@)Z8$=!re@XQ#T`=Xp31
zhP6hx6CBb{%9KU7a`GA?T3;h3>cQM0aTFr7rHh|)7B}mk#*?dZ_sjABR0RivHXSQO
z;mNlG6MQ!33EYz5#f`=)dpUFSjz%Vv+?bF=6q4iAExjW~XO{XI^Sl&?{|BVJlh|o{
zVM>=Dn7_~wbtFU@4N7yF=l!2yd78S(q&xI~a5DAl3|E~W?jH`NH~+aG9t*B0W{i@A
z7)?r7Tjy!>PqL@)5i8ect6+^*OpHX4)YWTE%alZaB(356&u&Lvz|%5S*s%n*F`vx7
zQZUSr<@QhP%9Sw*;|R!>@O+5PCFPrqPCMvRx-u>L!lT~tv(#urgUhlE8Q!%nL(XzL
zOxMWCx2fPUjU}*)(J^~h+ACkkPQg0)F;Z56|GR{fy8mj?zjoy-pNxYG!P#AhvhgL2
zoTk$MV}-JSY#GlbB;&v^<KVa8Y`8-i-jasXrUq?esnMfGbzs@N<m_S2!Idgsoqx|*
zkz-EU2Zr~#;m3xvA&o}pBTp!UsDqeH^jX4$y+7=&&IP}~_=39EfZB|j5tJ45YdYdd
z@ca`aln3i4)lWg{_4%jmxTnV-p9arA?WFGFdJlW{P`1JuWgA3b(q@>f14kbD^nkAx
zcU>{*SI?nO?CpNw>#@a5;#$f6G+TAO6l)rvT%&pzJ$}33vf#t@q=pk`!seGDiaW)%
z_@2ATJvCV%I<n0Yo2Vj!+D}LKsElC0(IP`r`+6hnmJgph{Lcxd0|B|$gcTVw!_-W-
zyRXq7PP$r!j{SCnaJraxnmTYHzW#bwq9%6QGYy;-c7{6hl(|(x9}EwBTIa$%DzOib
zJzF^S+KQ_@Ak@B$3X{7tbCWkO-Gbf36nM~CcV30X6#m49QxY6SzwU#pkGL$-*lD0k
zl1Zvj`yH&SqvweJo#`&dC9e!MTABL2Z1oFUj4fo6w0kV_7bX3mZE~>0i>udCk9?Ps
zNOL;cC4{o}!jJAEF>9R4uLhm|C>TTZbqH=0lqHYKFE@#PuK>fBsmCbtS3dn-35F<J
zNL&=wX;@X%uX6gM8Vpf(wl3OMq#^a?48e`YIt}HFrdSUbCx2fogH(rd*MGi30;!h8
ziNUL-g`CL3+X&o^XSn@(#wav=??@Ix2uxo5d{PwT(e;8G{mp+JYUOvQ*xg*uVfgnS
z{y&{+q~IU)`SVANdxq2aF3D&A(~0d8dbWn)$8d^t(ALQO%uZvw|A(^`*DZ<mNOo^_
z8vh^X`Tc)7Ey<^A&;5u_mETD|eRzK9V(C%zD=F`hb*})~<RF_a)k)aQ)cePSJ!5M3
zLoz37_k+D~0U6%YKirb!i&oY-!2xLhP*+L!RG)r9{ipuRKlmEwGC%lCpsN~bxK(jZ
zoq_^T?kU%&pX8wRuRVdG{ax^f2fKI#Iib%Lquh&i!TwL<C)U-3;s-&Ih6dAT?i1MO
zl;nFPY=^P_f;gASP4nc+r%z}of3gkvOq85Hp_FAkAL;quX2LpaeID~4(`f~<TApE~
zC)3`K2|p%&<H)wOPO+D2h<KYe<;CT#F=i87_zsD-!x5RmmdecJU9-Z|!{ug|cU5IB
zTmChg*ct8z2%0~&M9?P{6D25b9K>eWml{$<)N~}Dj8#70)eLca-F=(1zAW!N#u(;+
zj*O-}Z*&cDW9s(#zD^}?!p=f%jYlaGoXH4%AcXg0+QSNdZw4C^1>k*@n(7r!KQ-gu
zfLZrA1z&ySe#F!g3a-pD@&AtHS0<QK?;qD-^8DwMxu<SjXeLDXf9X!8Vu(E7Kl6RX
zS`mn`)m8P;IgaH&AF7BFz?iv)Id=Sf*CWJDw7VsfKPdd+=Q`(i6G`UgXhvuQ5xgGL
z(;~z$&E$qjd4$x{c&fKufX7L>0`DtN@F^2q1{2`N{K{9_Rb0mH#AAZ>^C=0kzsU;f
z3Z3S`+3>NMk&QcXa`?mg;9t4I52ehOt#3kJQ7NK1i{kJv(QJM^IDbtkPW$-ReQoUK
zNGcYgD4jXDe*;9<@Alu}{l^A9vh8a;phzV(jJK70NymGJ;&{f>9_*iBw|db43x(xP
zZBBkd8OxGy;o`2pe1EKh^5R=<U+(^eCp*5i`Bm;^eQ=qx_3d7{{F5BF?LWB)+J=2e
z(>sP*NkXC%>+-J{_*MFQon&qFoRy6sg6z3{!({l2SgpMM2mOVbBA?`$cCgskx-03r
zIq15NUzJLwA0#j@6A~`tet&VocX-u%w>%Y^yfK%!-k3N;=izZ!*6<LdvDKKco|>@k
znSh|9TuPr_P7dSzoz6OX!Od%7Kir#K%DQyZQXuY2AWNC+ML^ZZL59K{#QN%VsUx17
zoj{fV;z=LF-1A0;O!MnP6nE?Ep)N_3z`rQ#e2#{rBZE^Pl~)}O5I|>&ZNn#z8|6KU
z%;kUNr2y++@^Mj{=3*~svD4>jPlCp5#yaIdQ-iQdx&8Y`TmEa~2GqwDzav<A-NTZ=
zGQF1e);Il#bjR!QalfLf?lW<5De(@XR(;LsyVkVFFQTrt^Y6Tj+k7Do%<59}J<dBW
zD27{J2Q)p0)+93yq22`n6S4C{N=25&jifAC>Z^t29;4M3Ot{xai)9wIl%p{f=4t5@
zYfDQ46JI|4{ql~z;d(8id#?G5{%;4(m?sT=?D2k;F?x8hZ?`QOTM`SForn0;DTZ6f
z9Uuiz?!B;XwwRYBXiePBVci@r93jrwu}hy(ie4y_r|}9}m=4b*d#GC$jVRkV$6m_G
z{$pTxNK6C=KL(l?Nb>R#g`v%l$iAdl9$Zfkma{BSGk0bPr6fl#%AyJJHYaw+;yBtn
zn}t$JwOLM#kyq4I*sM}u@$icvU}!K!j!;sGy6z9&8+=Qvr%Fo3gi@?L{_-OiGnY&P
z{_@JkpZVfuJ`ac_rtFk<tKtOMcHE^@&EkZ$=6(`-8S_HUgOAALcZVbN5N+vb>NVdo
zUuXvT^2oX+nh;-eTKDJ+M@#1=hGCp4g4WkU%`M#mgrww=(J{R;vYYe_E{TcFgC7md
z8990XM_4U!auxGIYNwdoIYpb8oXSxS=Ro$}l<K4=?Q64TmKyiN;T(Y-mvJ)!(VY3R
zxfh9_RlTwpW(;3z2zuZc5c{v(f*;5z>0)B>`~O#1IK*TI-?0?JYDaBrI$p4ms$$F9
zlPHFFWA{)WEzz`;n51`iO`DS2p<nN0sEKZ}6lLFi%~8sB*6!bA^S<3_)1T->>}+}J
zu>P;N(c(4TUylO_nMmvgX3Q~eDP&*<N@)w#{tpt?(zBi)#Zh?5;k4zWu~rH2lQOi_
zBrd~0I@*t)FYC1m*Ik(QUYblacLScg_*)!iWEcWu+5$5ST`$MgJ3LGoW?a5)K^=G-
z5goWcpY8;qBDpyV6cdiA^K28|i^|37(w-`8q)1iGZTlT-z%Fd7q329*!@HWWQ$_L4
zg2%YHa4t#kqZG=f&XwvhU`Oj<S(og9_Zj;elGiMMOUVxD-CO^^5fNzGE6KB&Lw2Sb
z^Or^To`?aABzWxo-(l)Z>8rH1emp#ncn62gs<VGbys9|F`LRU*3rX-#kvJ(xb68hD
z%>XJh3!0lsG4q%c8q7o3WSQLGh1rQzwW^_pTcd_sgdGZV+7oaR5^y>aaK0qqbXL<>
zpwRV=ZZyHwc_O$76@TC$8w=xjOQP>(@B8jCz(DKqi$ThxmEE29mqU>O8&uwFNh+|q
z*g{}yI&iP)Mzv7L&ou5^FBMLt2!(x|bcF7UT<76ucO@tpElA`;pf9N1l<Jk&dZ~ya
zMVJZQlo)q@ejMRReC0=7lu})-E!rG|-h5aPX5YbGG->{JNcM#?&0aqrWt1#J*x@;m
zuV>AP?2E>4D?(Dg=eQ{t+-0McC3tj{f6gm^ef7aWg5KaZzsQ5}eeI(54D@Sx^NY%_
z8}+5X3pGy)4x7IIz@wC^tL(+{t^C$PFlY5|*W6my`D}2b6SFcD;um;0*}UqRPnIsg
zX>n7v<=a-Yt{k0t^=&;n>`p0jVY|VIp^bGtx~xJKJ0p+C=&i5G+(uaW@4FuxT_esW
zmex5N??%^;%eVZgPYzG9<|eBgmvkiru_j);IC`z`may(M`!DtmVvrM%`%X*c`GAs!
zZ77Gby84{5P5xZ7wBEckQI<^}pR#*V<QV@(p1m!rO6=1V3KX_5ae@Iok0Q&Q0wnss
zD#T)@P!O>RFl$6%vTnq2O)E4yF15MGpXBhWz{aI)k`b4pN91OoiZKZL1o#@?Cdq~r
zHT5wqkj=3^lc?c=P4`Ukba1`N`c?`tvZXGvEZrlRODrH|7+`h0YMY$nZ->l;+rFsh
zq$wJ&$W0nbW_^@jQ#kUp)**Y!9Q2dWJ5SO3m!fyJqIagEce<kYPet!kMaof!#XXL^
z!nsGix(V4P2lvL&;tz}^A9{<+7IvXw_;h8q(8&MTIT9)A>_e>VBdqLWq-B#6Z}O-g
z?`A<a!j%x&qyPS+D=EX>^j@^7o}VcGtcUYJ$r?RVrE;i=Zinn633-xsIr?beXMRn$
zf4PgYO#~<KR!{6-+wIc`)4V9A-!D^tw(`~&qY{#om4sPNX(<bEc`p=w{!ldBsFd>P
zo^S69lY27uTKlxm#Ggp|nc|3V<kf4QM<#j<Ci|`0$kMKBt_`1<_25_}66Q$hdNk;#
zw7)gt21M+oL?AT1k#!WzItZRt;3FR<pH`%MJBsIIr3R2!i2o+6d^lmUT`|91oc@s~
z(6?u(fjxJN9-S;@7;yL)Gaat}B3SlkD2Fwsj&hizl$j<5nbvfUlpljTZE!Ev(|)#E
zZ9*}n^^N)p{Pi*{{Q=+Sjb+c=2~NxKpOi;M#oN;U%767Xf3b(p_TTeKwMyg9q?XGJ
zvJblvPD3%u+as?~bQHa_q<rgtW7F!sA7D)OJdJSGim=quYU;ffM+<&!6}D$ZymUu;
zkkxf4?Mtcou7b@*Yqi89)Z<ZC$9*m8HPGaeRXH!<VN3cF1ug88V<f&KIg8%|`6c?b
z_g9J32t;a)%m6%*m4cq0P|(dO6f*d-2=zB7K|4oMgp;-K8IBeHEaR0R)wh`t^t{%>
z6}w1($NAqqxI7f)5{ni81}Brk^#>-pPLo%wHgf0w&^)+4Uym_$YIxEbMd`W_S*3Tp
z7?}+>j7Y&CKz*^%5@$=&Lnb}t^woR~W2hrB%a4q@a5PuptUXJ0da*NsvA!ICyo&In
z^fSy4er+MLRcw@jW$5|nzWOAIX->662=Mx1@VvV@VPf^Gj8@9rmIKG{7^f+tT4hTe
z-i+DM67{cdB6u5iUYI{uyWr)xE&8Sa-48SutkqrkIPsd`BNv1%m775E=Qj)S-HeCn
zq}TQdqphzz2lcTXsuGA{qF+#cw^b~)H&D<{Yf+oMk~WLMui;rtB^TK-&NJs$a7S~A
zffA8hMLZ3Uc=#5f5QY&Z`%ymrNH=&d&}Q_V^y8lw;-eGO6$pK@wgjii>`o3aO`@eQ
zMzo@#?LGUryqhbY<?|#g%KVWGKXxfDxa~KOcji95Kgq}D($sE+@O;bQ{(8EUSkV>^
zWag?GgQ+E-KeE;`l@VSMem2bOh)oq#=xiW|F8-tC=oF|(o8utjefDUe%b17F4xiNm
z4W}z71>d(FCy=PobL2^jN=NcX5bonKP0=V6h$Vk?do5Ps^3<<@FIjMw(5oB2<_ub2
z8baPk4v<X8iabw#^-*o~!>LVo6+j*<_El31nPqk?qCa5BRE@f2#ZA)xIFMbZLa=w*
zT)XqD;gH)8-pXXZJY^|D=gU#48_Kz}a;&@%>#^rpEp-z}#vs5Oe8DY$>=(ilvq!j3
z!$g(IM3rDcwADvlX}>t5>1{_?!7x?5&h7AiB0N#^o1g*SeR>!P9;yCuj<tBj9g%N8
zGT*nXg%#Uy&JIb=Y$)vFEy|UiU9iqd>ip}0vmq%RmWLD_-%DO8y66yjzBfw+kBi<s
zIsEyt;bTZLCggs8?KGXVe9739_PsfOt8`z^@gKwui^tmgnf}Do0Ao)*J7g+FP@CcS
z^owV&>T5b3pF(98_Jek6RU&cx1R91{d`+_OC2?Um3XHf!hi{~8a#3k|N!cs4KBB2=
zi6Aex@=QQ!RL^>%{d$Wg!z=1Ub(0O(^WLgRfY}d|?)#$DUI8Jw6BF->LdHfai#>~j
z!PzQ#EKA0sLo8zqV`DEjm%~<BAs&=~Kp3~dDc3_!M@t8vu_GmNCBQjL==18lMCP4k
zeX+fskT<<RRlP4m&A7wN?}MtMy@Ackrr1(2Fe~VRyXfDeq}eb{JqA}Y5?Omf%W{RY
zdRcozmu6F6=IlcRNVsY}ey(}4n%pO2{?*|KG4I5>wnXKtRj5!4<3_VA=<(C~*jjG?
zcdf{Bwqjw8{PNLE>3x`<6qcES!y8OON%1#oXTjGLI3w2Yf<vh>aYqQzEo`P=6gw$r
zVnYVemr}ddAFV#>$~S#`$&8w6sM|Eob1TR<xrip1PfC~MEK1X=A*a1@!HxvBZ@tX}
zN#8LqpM|3W$5f(cf79?paw4mlI&+Z{l5i7+W{@rSt{0&R2{e~>E8{rYI;)3fP%O`^
zQ#??S{|EM_xrvcsvdknDX*$;Crnzb}Kub1h#G~`l3o1d&_0yP)F52w(Y7Iy4Mr>@3
zCH!<JY>uUT^}GBFrx!hb>i?BfG!IV2@0~(p#BRICC-tp(Kd6vFy;yr#)NtHu<FNlz
zFf>c}SkjZ;yL((ikG4jW=u{}Bg}7U#Q-8^F`51OH`g{)KJ4Dg<mF}pS<eQo@z9zM2
z8TF{_7y-Ej7P3dHf_I*e^F#AJ&>l2}FwGukX%-9#5<z9Mwi>7n>~w`WLJp4M^t-Xi
zrm|TSUci3m6Qpd_S4^&EGaVkBLqBN4(0?8BmA|>9eteS4AX)U-3XfWld?pUXdwSaR
zxR~yGnk3_shI+oo>W;ewmDb?fD(9tA=ettp!&2x8`_V4eU0d0bPHl(Uv+8Hme=W+t
zRc?vj*Agr3Vllg+61CcDlpPvZtwTRd1)!dop*op|A?~r}oKWp5LQ?d*TPuHkVPjO+
z{>WS<YX5Ul0^KO?3vPhO-;H67?JlW%*f0mp-|jwx_gH0d_R=?j_X!ZxM^99kNtl>R
z7#Awr(F$9AcwAWGns~k(XFUy<!7RJ?CY$#Tn>T{Z@7bqrrE-%-&BQFGw*wY+AKvDN
z;21)xHBeWjJj<UQL*>|x8p@#Fzt-yAgXc%g<F9H)Ma{^Lb82L+Cx$9QU-)<Jq7ZX_
zC(cwMR=LNL)kanR++9^>qO0LNuaV_>L=vJ>9QF%cNHq-GU$cnen^pS*?&ICH*g)U`
z-y1Rhcc|eC7SzJfuk3JU;<)YM#n%(hHEpQ5y4W4YYy5eAWzfW}vxmP46cxYuR`v)>
ze_|MlT^OQR7{Xo{685Q^x1<8E#IY?X%bv9SnNgVMr)*++VPbkwVtNr`&Lv{b1x@4-
zibOjmv15*=1+1x_wsUFO&R71M6INnYuio3iNo9Kk%0iL+=&GXwwf7*ejHwI`CNW2Z
z=d{1|x)to9c0kMa&VqsCIzxa;Q1Az}N)ThCx3GE94T`&hFKgo(#e!3reVp*B_BFiM
zo6oM9p~MO%aJYx@ueInJ4;SZBHETK6>QpNAn)1VQAY*W9(uX<`Gof*KBw4T|lFH~l
zELeERT-*5Zlb4g1>JLY&qtcmx_;8WPBN^)KqbWU!L18w<pX2y<Q=-Ki1Z;}+T$MJE
zhgzsgLa7G5TWN3O>zXVDU*FK;QfX#&8zN#h2ZEv&9G~>bL#6uEg^2bdz2Z`tqI$^m
z)C|60ScZ6&<_@c^Xn0N5HxgyMj05|0EgX%Jjs{2XIRc*uk2vLWG>U$~s^4w4gyVVw
z6;jr>FLzk~5eh1eert636PCe%yD{3AQy+0w=tQ*u<+NV%{$g&eiie!u)&<|af^X83
zM8Fscmf$AK{FV0RozpY#FvVEnuHMd#X8po7*2w%xz^FAmaZ#{BSeM+$<Em~Nvt#s0
zF4E<v{s-!{y#8srf93`4j{dWMrx*o48xMrNRpIcME^jTIfY>$)Sr!QX%}GzBa8ePk
z(@;7&Q?|)W_ZT28bm>@`at<SmAH^w*vv*6nn=5O`S@<f;fZdWv?Z;qyzNsg`$1eES
z3E;o#8NuqTiHtodH6p{(`WDMlW>mihH`<#Wk9lsT6%y;kG@aI7Nm!?L!rjoyTGMk?
zRJ!rgiK1d+YL8z)ilLrgL7k7k;&P5%ov#DBCMKxt<gTJy{*|(TJYCOLA)^9PvQ$mQ
zF0~TSrlVW@=Ca^nuC`-~;qD>O9=09U0=I$HG#E{P3%g!YoK~;1;&aOx9q||ByJO<J
zSr{3#w*>0a5;sRa+FLRT{3o*fUt7e)Sjsa0XVW9nX=;)Wj#8Pf*N3imm8b^8E>^tJ
z5AGFNOS8J*&HLRzT8&4aPY+EpHmR@qvc@+b8<F$rt`9Mm1I{`=*mb&O(}{*i52nkb
z*e&o0R!@(hDVUJ8jK`etW&kEUd=`&?RV`tNpd!0!xk=7Sm0Hp11EayL+0PLRea@17
z5i5OK7yBc<uZ8}J2~Fi3GNx(SG&E(WE@z^&Oy2vz0|+yCc?!D)U30?GmJU1^#C*)5
zu~tGtpL68U#CYLqZL!^PFB->k>{IkQ&*AHhzT}k4@b!K)A;IQ;)g($uWygE|ma}Pu
zEXyu(xoH4`5EZ)k*>q=#Y+bV`TgGAyc4e#F80K3N50?i$9RFu{t9U3@a3nT|SxApt
zXpu|kAEyunr;sRzklq`iFYH3;Y(k<!LNu4l5$4(ddss$xY3Dy9GgW8lyZv_Al*$>D
ztRu0@+p?>!43L(@)@AF3WgRRZh;wY*XlzyjDcbx;eIv5v9_0NlofJ(wkcog;wvFT;
zd!*L?dvMB}Shg06K{qV1qUWO)gt46ayC&HX+lNrQOB)EHjN4U{tc5McfLOK)i$Oaq
zvAkzc^Z(DVT9dCJ9&|w4b|vjp%;}-AZS1r}|IgTIZJ=VFjd~Ddi~fMTX?N(O0fe!N
zn^2o9lD+m?zg&OONhv30gjjY5i@_}{v889w0AgOn&8tn8#{S=7yDZtE!J&r-F^|~8
zCi&1xud@i`aMf0;?_IHSpt&-QRFCD~hA>&|Jn+kSaxN=_dVi6UQd)YgBeL^rVa0K@
zc9sgIq*$I<|Ar>S-<;cxbF7Jq``J&0a*^s!MXtWg<Rgmz-G;4qrrGIgw=?}~Qw9bz
zV+2}%7S#)?7elC&<nYYKZJCxd)*4>xU}4<1kyM>jjrQqOn@1H?pK|RRodvZ?%mh)j
zp!iMG5|L;dXdqe@njjjQ7MjYhpFz_SXz0Svqj`#(?KL1r7%}km34*6PrNQ29!W3j=
zx>TayrMf~A->r8gjcklV#*0SjhQ@~T8$!<l57AOrW0hWTQtGN3JSqPC=JCms{|gYK
Bmp%Xh

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/lato-normal-italic.woff2 b/assets/documentation/1.27.0-rc1/css/fonts/lato-normal-italic.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..3404f37e2e312757841abe20343588a7740768ca
GIT binary patch
literal 195704
zcmbrlW0Wjg)UH{!ZQHhO+ctMq?cy%mwvAo3ZQHhOb)9p*zW4U%{?}_{MrN)YF-F9S
z^}ch?Ct|tEi!lKJ0ssI2eYgQ2{(M6AX8wFf0ssPD{`vL)YS>Z7dN?y?U<LpcBoKaP
zkSXYh5KyuG3Q@D>fNVe{z*{`XfxbY{TLJ(e1fW%n;C{3AFn*lcA}cRG-;^a!+Z4p3
zSW#l(CgLt_jk@E~Q)HlOSwO<+MEU3t@Z@{c04GS29lj(WO$i^(n@zgE1p^~bKZn_K
zdP)@~!b)9S1llXPf=~Pa1ZTC{rB@Z0hOSCRlH>C*jZ}Zb(#u1rHtGsKegFS$CP;L$
z>5UCfZ(ag`c60-S_DV!<Kn6<CA3e3ceHsFanWQ5nCQ_|MEJ~S*sj^2D`YJfoltmcS
z)bKzEDlaOhDQc?AfhxF9)McdNpt8%0>>w)J^u6UkRyI(joU)%<iA+(Iq%D=@;cK>{
zY4^Y-Y%p1*=r;nR>PpszOPWU&W{v&Li5G?W5U+>2m<Z=!yoL)t0PrJ(jgI1zw{wZa
z;=rE=x!#7P&R#bN_L+`Z>{H+wh2;%A(zu|d!iLrUcH2Uav~`6G!?du_^EB|mF#yD<
zQB;h$f#RM>w~Q=JWwPtkW0X|YJCJt?3aFHptTmGOtBz=<l&b1j@>F-j^`+Y&s(QeG
zs6?e?B|0TYkXaC)a(cjI(<6&_$`lePO(>%hQBGN~m8gsZEDKg77FQg)6$s9uqP5D}
z;$9s*sw+Y1Zp?ktZhJ?Tl9f*Xdc_w9Sv-v>@}=%8`!U&6!K>y`oz*8#?kCq-JbZvI
zLie&1xsO@JyC+)KlujBD&^QN=%;kG!qs=2Vq0lMEKJVUbI5+thjZA?Dh$Z=ZNuW_q
zD@rqJL2m5DtM;(F6qW{~l#K>*=ucLJG_-j@1y>4?qLIfH`AN{K+{G!yMpo7u(4Ozd
zRVi!93j@!4+>>aUSPEyVr_wU~9*IjY*K9+NDnzlr+6ZN{9mvQ7Nh%-!Lp`>Hv(*c%
z+s|-@a5+zG6|G3xK%-k>62w(C1d7z>TLQNlejykdW>S|u)iG1-63`y>pkS-@3sx1~
zC%5Mf)FK;bhHS5I(4<|EZ310aOaKiiT?djLZ0NMiENaR!ILL^;A<9K8Z7I*Vu5sB3
z5FFgJ7zQmGQ3L6T&u?5(8jUV$SO68vh*8rUlA4Hj<G_)$;!Bao1p{|O3QIi@tq2@R
zu-Z6OoSWxbgS?#hji}d+b2)bAo(PH5E?cw}`x`ttXzRh)ZY8-v9O!biptBehwr#d&
zx6_gZ8tOoqaXo~lo@U6%OED9^T;zS~8TG{bUHx)<6<Y~oC;|#u2&&&%B@0d%_R)7Y
z@4Am6ccesM6bO`%10f|JuuGJ<6rFMrpcxEDMVybDqcJKSo{@WoBT9_|o+owkQ@C6;
zNi%?Fjv<1k0SeA^3_c>DKV?TZ@_2_MToH(pa@{|kFVywrB9u|Q39Y#%S#3t*u`~ol
z_KHf3no>ZU3Rg9q6r1}EqrkYxZq_UF(IB>PUr;D0hk!43`ZxQf!93}Lhtu9yN3C_}
zoFp&G&Sx!Ecnzx!a^qY^f+MP}6V&;Up~zA{tObl_1Mp+sFK?=im`ifPXs0{DN=aV4
z!FW8jg2Z0S-qQ~l{jSxfJHe=2zmEHf`a<&qe8`Ncp<{(I#ZK_SYz}kpsz6w?<Js3>
z^iaM7A-)eHDpSjV2KAD39j{S7-egz#Y@x9ueCO~ZO8H(q@XPth&p*+i<jb+3ao5BV
zNpEWK%zV;Tc3T~wA9I|7zG#u68Ox{zLFSq$Y{`TbEEqBxT9HjmZ88r0UacL}CsNkG
zlMdpHs=E|grVN*FW}WT)tV)~we?ymMmpcH;6<8IbWux>YG+IT;5vj7R8z5Qm?XR6r
zt=xJn;ox)TskizhZ^FJn;;(kXRCgMJdm=p_Z<Qw75uH;2_?ad*--?-*ME0^{Zwob7
zwMXSRzT=uUHa4oD2ODApPmq>|U+;=5qKMMqmT=T0|J`-}tLNUpTDgz=A=d;&p)IKj
zO*e|~jsvYZ@!;0BbiuF+xE4XWiWC4t=hkZI6VTSagP0vS#J-Ece|D8M$=w0T+X)`E
zqI1z#IeCrBm4Vx}82bM5Y2)p$#k4gkhBhtJZ}kA6lLZ$^G><{4gtLCkQb^HHtmFrO
zMfO4HHLq64;|`O>VGq$rFS=P+ysQ{FMIb7bQXeSA&q4iZXfG9{`#3^*Gz_)whfBBp
zqBxp>tr1;G;}iL+x0nH6gg4{mf65jT3WaChWf<la=l4MV<f`_N5G*entZgsMIbBcI
zXa-DP<C}t6W)8j&$r6+8Jrn@tKAeB~TyXla+8@Eh84%+1Ok^F?7mjs9Xw&0Vei8S+
zu1N;-(CW)C^3JR8gl6e6^au%c1%Dxfe(bpw3!^b2Jb6U7?%yhz_1EnS8d6KHq`pGp
z)IdskKmSH?U&1g&NIwrt#DGqjc8#$)a}PfMweZJ0wX7N5z%;wqOR#idBcQ~x^mN6;
zwO0JmcNJUM(naZKLBUV;Jd;EIuE9ov)7m5|I~O-nn7KZlIe4TkWGHpusbbqqSxX4U
zs6PVP>5}q0w5;}c?DPCt&DA(!td3OkSmfB#6s*p(Y3?Qb_=R=j(Nn+0r9g!*1IDd{
zxA{DDRrwk<nP^MC>^;GFQ4XRKRIadCf6!lTmo>$3oar=qVFCW**D8-UHKi{Y1r-jp
zu8j=^AJUV=^I(uq6!mc`ytG++)9ERD?7UtT39u%N-<L?<J*M)kY;0_IEtdW$r-NwD
zOswvj7Xk12V_-PQo^agnlm>%c{rIM&UBI?LOn4k#XUMOoTOch2J9e$_5Og8eV>wSN
zp5ngGm!xCTOB_!?`l3s>94@u3I~q@bF^U#kYZX$0(9JkJf!B^R4}YL(_%<;sJW9YS
z>{ZsZoZI}wC?l+!tiWvJijR^MKxHrKy*CZKey2~}6p9GRycj*@NvSHGI!*FR6`cB4
z$zYJI^92k4m9)^234bCH{c|xPzhb~;x5iXdRW3UE$!%#Axp7&UeO!yhvm)iBtUmjm
z%*7Qwx8`@;pMp}QG(D`AY@46lS#AS&UF$55Sd*v^0Ihdy^eltFEy!xys^};V`fI3s
zXfhmF1KU`X>OC3s<gt>kNjHbCB$@%HpTR^C#2BhlNOiw*ODL=|Vbp|4@<)<}7<EyI
z|6PsgqiLL5_ejp4%W;w2s(@N9q&iQ8BNi8xANo%pjSkemSI7=?!)WN>vMIui;`k>6
zGc{2(l{Hn+#5`u4CVDg=^?JJNOSveGY~3@&;}dT8f4U`K$gBr;%7(vSl&^JhTHP?1
zOI%cQ%{PxaruzE|rJc#-3A6EK@p}Q?rr;H9T3MM=+_OOm;lZgWEcPjC*0+<-_?T9{
zfO3gwTTaNuF_Y;P>(ZI!5UWf8d60E@+-5a_#$fXHfi4VUYFzUrTBt&=3p(PM?C7pJ
zDgw1U1lb}TR6cVZWz|U&ZmE*J3298DBW4r2dIO4D&1TZo?@*Y@@$yewaJl2jrUK3|
z@aoh@6=6;h)@QsnWmt2cl};f?kL8K0YjWnMDtju@k)+cg=@GGI4pILsQU(15t^o@w
z_g^5hBd2I?#|%_mDeTw7Hdfv~;3^$Qc2JXBG`&9o&tmK{V!Y}aEWT2^xd`+uC#Kdt
zba(P8-?ZFNIDu&H%g3U=>SOj%?um&E;6CKvz_0jRwVEGMAJ_K$Xk|%g9g#7->R;-6
z-6`wf2@g$o`zN8=e`jrYdgmX|Za8DC3O{|5ql>vC*Cuh*0(2*R3i(d)ze&1?sK2ne
zj%dD6)6JN`bBqx76pz-g6qwv=1$E{yI*iok^N_UIFys^XKfG?6v7f?h-Zi~)^5_pJ
z=lMoIXX(4;n4v^3`r#NmWWE6J?Bl;PKC%vd2z;<#yT`wUzjE$;lKEx6^zXitzhh36
zZt$oP*_OQ6U!4y03BEC2#mDUv_|?2iK70=6Iq&EZ`L(`q{lWW4u?6~aH3halBwoKq
zuj#wRzpC$)?@~t8Un7dc^+l*YWnZN;UyKjVlkdKDXg?j@jVE38m<}1dGY`fOx~V_q
zzhXw?^e*Uk&GK*`gohkxH49BFi`X&YukuHKPgXbFeK(@eXeX~((_7R=<*Js3zekqO
zP)gf__-(KU2z~jnU{kKiyE&yle;RP@ylO0s&+xEROZ0;Eir1m{pwFbkBj>u2KBxvw
zh@&vt*`4E~0syFx1ehc)nJyMp+cL=LuF+_ktW(wNUdVz62kk?e|H`Xch-y=YKa=b%
zWgicD^R<6x{7Uh-UR#%8)7*&>F-2<{S|}?xmW;s8&e68_!G5nG@rcARW-y2w@I{=X
zQiL8l0VJmB0kA~o1}vcKsF8;!mfW8L0fvuIP6YIB{cIm}S+H|$-pt2J9xzxKiM4<%
z5<#qm`r9*R5B}Ay@9Ev{{it*MNdASmh=3_X$WlKuf?z3<L6=P_nnbj5U3O+u=kv<|
zmWyB)A}Ictrz?+5T8-9K)qOAm1jCGAH87|Vfu&DpEgpIPE$poNPL;Q|@T{8o5}<NY
zIWOlgd3FrNOV{-g@>`fhoPwZ0WH_fwk<)3u^0FPVk=--~5wKI!1lrJ8l2Hw2TbY%0
z-~Go|m(Rxel_#FF8B!{0$-Ls%HYw($8qu^*H~z(P*EQkVWPB={a&?0gB#a~r6K=fE
zEHc2C)cEzX*etbqNr$?LxM#Lt@S=n)tUq0@d6!q|JjPRqA(bsI@BzS^Ut;~A<f>$s
zXo9Qf<wyAAk%ds?rznCMLpt7_;te$bz+3(vdGqde`X>5z`Yz^TeGXG?@^Cz5n|(VO
zN`_R7a~Lz+HaOZfAlfyhQmMa;?s)E!dIz06^*oZ%6W_%#@)CFH%dO5q)sDQ2Rm1AC
z+Q#KaZ~Ou~bypfaxX@MKtu~O8kC})tXC8IxRun}PiS2Vi+oH@6K9SX7MW9>0Z$f%u
zt|OspY7%3A{dkAK$!b1jYIK1crrz7pXOUTLn$YTR%FQvDVG>yBgV8zvE=(No>+ybe
zl%}U<&LZ>Pwl0cWSt#T|Dk>_XplS|F0%jQq&5D`nW3dlZn=k&!?%-g(S6XPh2c-uc
zAHO2~#K?m603`F>>)AuXZo@tWXgw9PMzl%qMg@KNbLDf)6P{1;^E#9NmM)mJV8M!7
zvj0Q*(_sy9v=k?;2D)wl8d=pFiu!P3yKsVmn3rgPf?;6n_oQvF(rxemwuIb-HigIH
zhpwk4kzn+E?00Oo@K$*VdB`hY0!l!cxfQExasxHniy8?<LrBAGorN2V3J~6--(9?#
z9`rm*fPCLhGC5n6nFdY@i%BucWebmRb9;UdP%{u)mYJ@U54@*;5ho9p){ISn`|c8X
z^`f2&n~NjhSFl;0#v4d}9tt#|)Lv7z;?|q>?b9OO?cy;{QoX~$M1ViQ{@sJ$-+f+8
zbvrvSgp4`oon{j7={-!KyN01Sg`AC#z;yuC3Y9!`U-BoHic)!j;?%)av;!%m_xoCv
zl}h&9)f`}swDQ}Qdi#>P2%dqU7nN2S$=1om4TY3&<TcMbNI#hnFl-_`IXAXxuITT{
zh_2jeY|Z__(figEx8ueX_hnl`onVw4#{A9JG4uk9t*~SeJqc`52PyJMN|+F?lC*4q
zib%Y{+S~E#@L_Yp=vT^yLdMX@6^fJ#dAnASP@aPG&*ltfr}($5Zx}e)8Y@G6j|evq
zvMI>eH7(=>2$Lh4fsw7Ug=eK{zQ)q#x)7O`aeg8IJK)=>sqfJeApxV+;E=)K3K(xW
zIxfsgDF$l~fEQpu4b*)<-CwUr@9lE<$Im8McxXhQHYFHl^a(r?WD-cgCb27CMD$ow
zWp(W*5}tVAWK{{C4`te|W$w9o=WB0+6i9|(LO|c3T!BL1eS=CD3V9%sk7s^gA0c**
zW{dQE%k*N(a5f9Oo=I;DIuWg#g~Itw5H>@MUkV$%nR9`U8(6J{@a>nxfy2gi#JDx|
zcKV)lPy_i=iSB<zwu-GHWS~GkLUcO&n^PPLRx64y_rcwg$%?X3T*m`n4)$VBx;d4b
zLS<1*Fp^=o0&71F4F!Ve`f#MxdA9^&$zk|V-GM+ejdbSD|2}4b0|Gc2Ed7$FEnk$8
zBeC9q>!S4d^1Hn`_Flq+%2O{5FbR$VrsA>iu>k(l&8T01^UKo{Jn;a6uLY~S)n%r#
zn!eidtim;C*RK>1QqU|lp?Wjvhe;SD+Hh`B5ytj5RWodYoK0;p0EUHy6P<I0azcMK
ztq6oUrp{AQ3y>)sNMMai2$pC!LxVrOe!>&Ot;iiJa`X>>|MA$CkzguVMGF@r*aMVR
z@6QHG3ctLCO8N43veys#{B8H!YDg}M)c^M7gJy>nla$kfp9FN*Y~!<_@%VYr7iCKA
zO3m5q@OO>{5#rvo2*sc>F{?bR{N44F27F*8AuHjA@}rZsRs7{B+OEPPV<fmKLphdc
zkEl>xLrY;K#NdH<_5MBU-RRQl86s4GAG}bAfe^i63iz?KRcY9<E^-ulrPgYx2g8@F
z2w1w){_e3DX|d=z{b;VBLe?Q=UxyPD2gkSyGDE@L@R+Fm#l>O#Y@TIkf`|kQMK%)t
z)1DR{*6gqNJ>Z_9aDmIL)Ee*S@+EB?K41X<o(TjQ1X0Be(xkboY&MZ?c*-?Zna+$k
z-NWNz2QbJ@qc_uR9@-bdx4QJqXw|F08Tz=)Uba<Cy57S@<o<!%CE@vE#{%RpR1h&r
z_;KFEnjU!#Qad>aRZYtZo1(D{+4pDp96I3=I^&Wur;xIKH))7?av~#Ph9Ppo&_IGR
z5JX6$>iyIzX0YI))uo*Pp~wWGq)!0toGxweL;|WvM`o}GqrkwW2@Z927oj4E`V635
zWQ85M!cWmWkqw?3hE!n@&Re$imQ)u!QTcz{zs4!{kAHgnwErCS-)(7)f`x4nFCXUw
zi3yTo#S$8pQ_{g4sUQY~bg?`<r|!_=1B#idmqc-~!q+!_3FrLXcS#p}zjuXyBvsZ}
z%0AF7t>di&JcpyN3==4>_K<FJa&B+z(D-*?KC$vtI3j<gu(6Zs@uOB}Fl8?tKnpTD
z_<?h9yx8q~VLMlS%sfUUPo}tK;Gi1`MVR9-KT^2WW5>~i-85g8j4x#i1`=CuS1Uqo
z8YYW@+3?^;^V(Mz-uGf&nb}@ZR+hn#Yp?XUPf0^`3sI}A(fsfhis$@&G_2G7M~5-X
z#58;5ED8}35m`uTSZHc!>d34{Y}#&lv9!|P(&#-?<LuRKkrN_}Oyyl3%2_YKow@bS
zOpezBoiiP>L7TAb(w+-2Mp(hfR*u>4?VfooaS5_j>g6z_#{T<BTa0vvB2-q*Hd4sz
zCv*|?ECMDx0ujYTFBDO9xSQ`!9jNDxcp$89ZIuCbr#odM{fJzNeC9@h9gHvcE64oj
zwVi!W`~KYep5R*&s&YV3NHYY3*h5exnionG{Ej%`@Dn7{qXNE#09w9vR2=ThI9Y1S
z%dUuQm^!m1V<4@nY%Kw2@f2?a-M1XPIL*5k0liw)%_3b~g@GV$FMe_?OK8^qWmyt4
zlMR_e^PB5z3lHosH@*$u%63tWvAA2olvi?XtgWLhb1`EYxS%+%JfigW$-kz&pzXpW
zwn?G|!zy6i)tRHd3K#+zz{3UnDtT7(5n>EHL+-$^+mg#y??YY<_p>D!Y@n<dPI<T9
zZA>)+`j3Iq4%7@sbAzVBY&t}F-=`8tv|+Ini11+|qXe0M6NA@tLoy2L*?)VTII9f)
z!BM3#nB8h_K}%H(LLP)^@df8%+!tY-_&p6tdwO<}=^`f2I6O*IZ{g#2NuS|uSznp9
zKr-sw9B9JP^WuN8QkEIslM9Fhmn#Od`N=2pp4V3fh(>YUqH=hCI!DbUm?ry<{`C;@
zO0QgP2q!p4U|GY~$cIQxq-KMFSWCplTe78m{mL~2cc0@~n`1oOHq;{$UE2by_9pce
z+f_(Hl+U}?g?N*8&{0rwcKYni*G3-w%13hv<4mL`t+@OBeSFltwS1gwS!@I}x}i4C
zR}b&h14t7vb(iis>Irj!{}QxaE;A5p(G%}1LkSC5><}7t(qkGE<l#Gl2oVo)h;KAu
z+kfzfr7V~zn^S65tN_J`1gr{JEb=rkl4`aDfF=Ka9yuNeg>9#&F~Z*U%Kn9Nb7Shh
z+B0+Zmz_4)?KKRG?cCF0NCY|7#!e4y_`gvteQww9+yX^(_9tah>^TPiHSx^a^z=lg
z?^=z%?op@Y#b%a3fg~E=z~;gBvE=Ovjz4V%`(4DgGQH~wtOZm};zHdEi6ul|V{LzL
z_i_nq&)0Qab3%hGE7wVj7z1SOX(JAi?Myo&Q~cr!A1Mv=9n)m5mbf#&ans{d+z&p^
zexoZtGoepu74Fe?)}agj`YA^0ia6fG+ROFIQ=M7HR=ZSDSylbUU6f$vEat_{fFNN5
z3I-8fGy_1rDpiAjGaoM-1E1tJ0vC?Cg262fvVS}P%t?`*Z^05SR-lN2QU^`AwHZQE
zk7>d~@107hOkQ|W4^VP^EK;DFr^4%KMbvlA%qpS6yK^K@S(K=RW!UTI55Dn1_48fI
z+QB&$LQaJo$fu)xaBN}<VRz~v#=Bw$NJdKlL)8O9ewaHdMTj>*>ih=0TpG>E5Gyqf
z)B2BPS{WxRy<$JJh%t-AK8pe|D-;whY%gbE;+2=_!BMwLWz{z@2&BRs3_;UI?&T&b
zw?A%Kn7Y<gu9|)5>E^jQs(=b0fhGZEJ%AF4fF_Z|sH|_IOl%!C0ARReuL_1Hp^Mbm
zZ*L0UctE9J1p<=73Thbym3T^L0#cWH;~6%b6~am-v6Qyq!;mGsQ?^fR_VQ-to(Ue$
zEuP#D6J_+nyg1J-$A3K6WE3XTWt*T;8&ShzsRNC#CQHX}y!r^r>M25vQUs)BodG2+
z4PW4=Q__;`I@fzPpCpMaI3!|(b%UGFXIbjcJ$l^ZA~I~xBH=P;ayV2k1ZWbFgb4$U
zrII34MRiLAd3mfam~pC%XCEwQ8Fa;fc)quLzn$6mdIJKsEA7AkQc%~>1@8|syxeH+
zqDO{YPuA(NPZOngkG~T%hDdL2CGQ#rOL^*<{muhNZ-un^lT~_x>;EPTO2p;^Zp4nR
z&vIaZ`lKu=O~ESpw;Z<|O2JPlmE{!Dwxz)$4Pz{==uy@KMvKJ~qiTld#=iWOw%QFZ
zpgw$xX4AQVP!yNFD8tT-!GCIhom^vzArmQcI4zn0(w|@?$xEkF`GYbUkv~wQmFj!C
zXdG$n(~lZ`vAX_yTkE^}6XcEi+o7%t4gxceSrzt_+rf|TS8Dm$g;RM+MR5qe9Do4u
zxyYD>s*~`2zBdn4ML|FR;GpyN1gr9x>WB|x4IH6iXaxv>r2vuup#L{J?ci1`(9{!O
zcjtzm3zQXZY?>}neGVNEFzIB94$JqFt-XHs#<Px8O5zi_%K(|~49kU^Q~?Rd(3q*(
zMk-dCVF9-!I+BwBkIQr9(ws#Wkm1K{|M&7))+f0&d3$0l)2E(!u^C-6euYpzMWp8M
zumu#X0>4}{s;JISJlY6D1RB$(Nau)hVL!TgkmMSrB{={DAq42@eVsFG^73t7V)Z<8
zSjrxsVJh~<F+l4u{oksi5X9`?<ywugrm|}XtI(VacPkl2s=A{&0N((802s-FbG}l-
zMVRsNM<gXN@KWGF4ap##^@#_Y<fGUo?g1CFigS_l0~^kauIehw3+i&SDdyk&pT*ah
zgH#6?VJSX$DNaYX7Q5-#DwcWViDnB@Y4V#yFc6f8TYdZw_0_BHIBKuD+BKz=fsnSU
z-xFALo-%EHWaf%02N1|;)(#m$7LkezKoLDYEx)*4Z3$zXnuZ*p2uqEJWp#j>wOR?R
zVdjWii%8H2)MS)Gl9EuT5ad2VzWReE+1$@O%=X**@@}d40aqqUr%LryO$BkuVYGgU
z89&ya9nxz;)3O+cN7dSgHq}X#c*)ZC@IlU6OY&ldXGc9x?~p-EzO>{5GV*kx^VxUl
zQW*SVY4z3$DA<K{pc75I{4P#*c5bW*a+N&l?9uIs-XSRbHrM%*xT_j^8Z>?lzhHSS
zAMz|xPo2{!voXDHG%8W^hs$LF15()O{*E}!VsB~)Xfwc^hAfu+@)a#Iq)}YD9l0Mr
zCAX#EV4;E77W8^oqmJr`|9%<oGSa6+Eu!3{EFwZf$%YKP1hDC0z))G<hV?*{cKdFA
z>TZi@afZ<Rbgl>_%HPI)Y;}!&ZL6RDjjkLKC=+J2sMQLL=d=GkK&WW>AQ67!)u3<B
z*DdcLCPu-3V+T&H<A^%|iY9e6t78ew4gNi<`~?lsmsMV+n53Gv*<)Mhnfhm}NF)|%
z9ZGW-qOy#}>+miidqK`nRm|+mx5oRABg;rT09G0)9$LirA5^(HT6-8tVauN6@z{rN
zGI@CLg!5A1LQfy1wH`1IyzC>5Lp--o$gjL+LwrO_nkw-DqS)A6bPW*%fw$GI;ut%5
z36>#Wmy}5p3VQmAQJvY8JQdaN>vk6Xz`@jc3V$J@MDRCy>WuMns%KwIWP4uWkv^71
z=T3fx#cB>Q)^O8>OycPCI)lnZEuiz7o_<F{t3NO2>8Rg{wjrK^!U%|ON9)hulxj~b
zs1ee?Bm)t}F!I>U>M6tLAB%6>$=%ZJ|Jdiujc;XbhW1jX3!w->7)BCDX6M{;xF%QA
z_)vRQ*?(`Inr|DmEujn|^buNbQ7_qSn-BM!_6CHwzat{X5lX}o<WZ&<Tads!e_lS>
zcTuE9llE%w(Lxdt5iUPAE?GBkhi!k$3PXF2zE?F?ms6>!s;H_w3^ER3IErqge`ORU
z>VHBGM{z9*hUOy(J%krqMzWL0Lzx@9blxSc>hX7ZK-&jkI*YvoV#rj9_#Urgdpcb;
z$dUHb(;N_v-^GcFi2PL!xw$b{y1a0gA1<#IgG1a_FQD3cUHbC+&e`UCe*WUy)>c)u
zMMP9ZM3jy+jnvTQdztXKtaOV<@(&~s^be(p2$gulmwI!b&aD2UP2hRiXx%y|#2^Mi
z2*wCuD8tuPrOZKI)?h3nlZY-pA$v-Xc_afzq$E;^5{KXq5(gf~SO(@Dl^$N|=0w3h
zh%`Zs#i_pHQ!QlwR=*nfNYefpn+R?L@gy#O{Tg=4{k_=Bv<F7R;&krN6&n-*$UOVX
z_{i;HdogCejU$PZo7*DTB=B}kmv+YKBB8}KR5N*FAmayuMSrUQfYAK5UDp%7`JTDr
zp<S*}WF$$-l;E%ppH{*De6@To8YciTI0qrC3o7euw)OSmbY$$j>b|!NKoT#|7i-YV
z>X4hd(B3U{b6-M;sw(xO;w)1Vdi$%nkxgM)zg%dHfzM>g+ZT6{amo-;ED<V$#@-HA
zRsoF=n+J&X@%x#U7oF-UrKwsBxz12iEC>^vXch=WAo)<16#oyC*5yn$Z{=3p7ly_~
zst>XKZ-1$e;h-;dfF5e7H*RomPm%_H5SW+c>&n$xd5FIo#y74tgK|1WXd?Rnxk*@g
z7CVRL_>VBbVl!qr%y=Nc3wq>6R%UjFmPuI77!137C;R|sZkjgLe<pl4_qH#!`SEuI
zr$<?@6Fs+yVmzd>9m_k;65Nlkx6P;3)3DTH-zax|xAh*bL8R{8=xz)vpgXyRI*vN|
z3w-uKng{mwr^`)T8sT06x>n@r&%ZN9WcQCOB4P~dS15KK5Qx9p@N!BR1R)*w5@K-&
zwB}^b<h0PNRHZ!(UP6@nhUHN}@prqJMG2uv#bxm`IEP~z3&oF`AP*^*C#E%=HFOyM
zOlUMl7IBvSRN3dOOW>8)D>n77i)wO|&>|5{*tYVkl{F!zMof+N7!3p|@vRVgLpE+h
zyH0p)Wa9NSZGNcovSViqdQIV(>zVlK^ce}S?Ge1qT`v_gzvgsbOxEyq6Ri4(jd1Y<
zjp(^Pt`MDJIO#ljZU<0mv!b@>Zim0nMVs!12gR%!(MA@;)6+JJ2fcEOhR15E%FQ_a
zqv?((wH84B+FPtFy0Nr!+?b5zsI1Rqa4gQ;++$j@E_3^sditz<rxRPQtc6(pjejeh
z@E)tR<ziOAT;=`<4iv#}sJ(t$^3)5etVZYm*kOHZaUOJ2LeH<L#Gd`MC+#+WoudtY
zo|P}AI^LqiFH*0#vd-Kt4PNLnPk&36=Xy4<PhC_rj%kj3WC(_S-?#?{OAP1>vJZ*;
zMsYUT9Q&+Lw{3wZwoyMBukIFgB>)%PAhlq<KLXt}nyVbMV?VHS*XK9fualjeSmA+Q
zMxw%yi&f#SiKs^Iwo8`3USIue=Mc6@MnQo!kcdXF?6+os5H^W@syVP+LfwY0%1CSl
zRz@J;k9>hJ)sZNQ0>(EQD{A69T03rYWR_0z*1Gg%9bv91v&HAGLFZUNl*?>&s9bm7
z5ZpS@q#wklf#meYKE7V|t`Y?ekwPsei=tLlu3nB-Wmg<FgVnH~krY-526n@D8N)~p
zn@r_nHeR|m!DX?}!&cYl4{Rv!uVs~U<I<gEJM;3UOKsb5(#r!kZzg&=rkF^}e@L{E
zbJwAwQf_2!d{x?({GBn{<p?0jNHa{H8Y#P+uBajlk0BJ;d89j~yXt4TI(4p3f~Bw&
zce(K4+53KYrjBQM;`_>3_a(-g##E9f<7Nh{x$f)%Y>+7l8cAdTGU(u6Xc2tqCdi`w
zH{M410<L7dfBrJ5n}lG=L^o&31KXxy^r+Fa-_y~*kibYII;Gky+mfjhoy!q*N4@;D
zrJg-;?+K%8%tAB3`5k7{+tJ7Uz#nSw^Y63n^jBx^qaB{_`!`{c4%K%j@?B^AN$2ui
z*OPnfpAG^!4l*driqFk+JMgl6FVZZyle;L?Ht2X7jUosg#WiLvl$$QXhstSBfRi{8
zEBr#o8iKk|=D8gf|GG4o{g9UMp)=Bs;jX;uy>;0SP6i(!ZEru@*N%$rkcrNfwQ^6!
z1FA#XtA?uOf;W%*db*lj{g&E^;s~Z8#nZx9pEXhuzWMx|L<;B^Tyxch>2wL`v=VYu
zGl3CvoBZNVL#S%LJ1)XjQl|(#oNUTN;_%jZ3ToJTV4~}q4K}(DIxxBqFvOzf6%9J2
zx{qdNxxQo}FD327FmyB2*LJ8bw`hJOb~zm6(>bp&wssg6YKwV_cq^;~RMs(%BFCqY
z=P_fMGR`35+>bwXJS_pDS?Q3kQn78|0#IM7Ls~YM)TxG`7j&R6RdL=?FczJ+v9;*h
z+Aj3LIz=qi@VEO27~Mvg_Zt0sC?Exy`KI(PwHikmK0{UJNTY>I^W3jwJRRy=OKS1X
zbA-dvznn~Csh6mOZA1d78&qHR)viK`fMX;|Xbf}Y%25;JC5q;fvm13lMT;V-#gD*V
z{JqLcRB)8s^?38J{F{9ZeWM1lfyL>5+%m1jnTN8pCYZjOgAEfza#luzBif!ig#s8M
zl=zQIa?wudp<a46S%@zpN<U<LK4vm-2Z7Wt%2nmj<TghBB-!|BhpzrxLMj%#el~iG
zD0MK=fjAR@I3(5J;^7{~@pymBuFGYcMJqdZjt7)FgXo?>Cc46KF?x^7S;iH&?x2fE
zMEV3@GQ(KbJD{1e*!hjJx}%MfyCe<^S?tNHhLrY`IGA|d*b{f7iy>1)rIFrLhY2~W
zL_6%!!oGj!Ic!P<|F$YK@9=x_K8Rq4=8K&+GnKjK-=<G`7&|7f{#RLUM<C%9f)&L?
z6Vb);E(Zzlf>9emg-8O*bVE)(1i+u}M(Z|mXgDJhGqoS-<r4P=TdvCGDoCnYH*j?V
zGWa7z=Ki=3%47`=eds@eas+GR*?SsGyP|5O1JJW)@b_af{NJie#8K6w$V{ZGx()OX
z{zr`h|FdgcJXdG01=Fy<w&pqq$FC7evkkPLzpWuYP$qw0Dg1>b@|7y%07E8~>>Zui
zfEfo=j7L?ShaJx|5Ow+)bS7VkD6)FHR5UU+e6Uc4yh!M>22-2i!zZ`>Ycc~wfj~&p
zcpOo+Md$fCT=t+Xk*1ReupSE_LJUF1%>OypNwf-*b(Hr0)4LmI&!AzI2Ce<PML>^&
zQ5Ycxe<Kb-E!&htFN4s}CO4yjaAbPPI+U`xLUFdcxfw==+GPHHyx>~{4UU)GF&-=~
zFteJO>2z4_aoFE6pWE;u(p1Db$qF8<wdy&0TzPeJqu*2YF@Y{Z!e+dUW`TaAG)ADU
zIu=^V&b|5tankbo<G=KGZpT4<^|&~c&%_fg1}BuK$wI0zYadhVe{OT)3<z5ZeeIn*
z#M0^O=amtxMu2<0yVQG^w7D{)hd^ID`MjmwJw3=sJ;V0=*?w2Yx6VS)9xAsl0PmvJ
zd;M)3A6;}qGw8w`G^y{-^}Un2eEhq|F`%mMILge|d_I{tMOa$S;WC|DGY!0aQ6bBo
z<@I7VU~^Zjae)7I-zGVp9c6l8c@D7vBY7V=Ge%OZKHtj2PzS`Yzv03KX-+%pOH&Uj
zRzfszn?Yp$Mv><X+K{Goxo{9&FH)f5Y)jwS_3zzz4)Ef=e5WRCWDfw=KRcdvEFDzS
zfS(BFFIS$T*eZajE*Obg0aNxBmOYG)&#R7btr6X+Jn<H?B&M9c)h@P>mds^+b`H21
zzohmo_M!)tOjV15@PAqTI#f*kks`W?Bp3o^a99D2OR98XgQ3d>MQCa)b!{z)Oi}pg
z%xFSBg>3QOAWS_@icp>X$RBA5THqN$$b7prWT<pr>ms08f8lC4;Xui#SG1z9tN9LY
z8Of}XNl#|=oKywiQ(6TqGtqzNHAfG0J_&VsF?O+Oh0wA<-Ip!6HmPpyY4D<%D~ENN
zQ87}uAt#?84Vhux&oJSUWdq`d));CvA!Bs;y<JU)$m^FaRIqAgZ2@2iLWn8AkV}M{
zX+-}VeiP+WCcEzWtwYb`KT@C;oTV9tCh`q0XC(CBBl!^=0;#4V>t+oOl^V<N&oKap
zst96;03ebjO8)BeuIf!jFY-`bU}<n3eRtAVqZUrPLgfA(&Md}#aS~I)WtH?4Ggh3z
z^7GKeN*(;u#Yb=Ui>y+U$?Z`DDO&R`vKNzuU3*vIpCIij;cKk@&)NaBp&5)pFxE!*
z_u&0>xA!J6!gT9qZ0o>BZOqb1{l8xB=>&*M8I-ulXWlK>0~{tz{YOvt&hM7QgSyM<
z_S!=0$ed|wd3Az^7*yyvYSL{I$DQ}GCl{U9O?A=w^C-~Wn=6y@W3T7U->#cqlP+Fg
zH&c->hmjs$Lp&VSpTD=<Y_>d{yDZWvmydm7CYG(bExBs0;n;dM2Zz3l&$sq177+)v
z8IR)zbS>#(+AEI7h%a+(*cwKn#{bZ!PZ53loMrLBS{7({9g})HHnn>^xt-%Q?Bd+r
z7QNocooj~zyjFHxI{}0TDgp}k;eq2gO7c{^^vVOWAt0ohY6dfe{UsM;s&pH%At+Hj
z$#c%8g6*9lvRMmNz&5;-Fn~ZI<5w3M$u0;SGH?XQHppZi%}i9`mapI62~xh*ez~}p
zjV=Ub5s_R3!`hr3u7iq3&|ckhXwHd-<Eq5F_@C57Y5i>a0v}wNZ!5Sha(2VC(~oa<
zsbq>ovXFA{mT6+4NUHdqfl=Sb(VXg*jpU^cSvX(F?4Y!18e?KPpuu-_3w=9Ak2!!g
zi`s*1>Df^mQH}6Ytnp>i#g3d6h7XN6j#tqFhOM>gMf|q_^*Jxkx_m>9Ido<aWcu%6
z#}>JZRnq8kr(<-|>hsyCc3qX0)tb}C2=CK{UriZ(7|sB8UEu#%p%Tsx=zsqEW2Y(W
z)D)nogdp7E@qbIT7SZ8O4Or4>A;J+!M4A7cus_|uWuIa4RMh@g%-Dd-`-xCQMHK%=
z8Pe6_75#4E$zZ?a9Q7eo$a8v1QrdO6c9G#{m=2!vdV|3H_`3kG-M3W5y7HF6{as`P
zKyUBbY(q`0$PTGEKVTx0m><RO2gzRG)D*1~5v&_#aLrR(c=$>r9*E<O9BPVMr1>AY
z2`2soU#!VsmwuZNk6*<jN5BC1Rx>FKvWZQRmn|E3_P!8WL;_j9goH&jAX!5FB=uXm
zHn6dO=u2AM$A53Ult`caD^pnl5Mqj8<p0huf7K|-B*Vy+Ll-aGuG%7B{awMDr-4hr
zo+a&n<Xl0!fabDd>+%z(o?`h6nWK`Rf$H9g@^X7?9Bv>&vCEHg<vhrQQ#IQ8ty{M<
zTj$B}#14C5(ct(>+5U?qUax;wYbr0i_qw;=0$u!PWy1yEi}Q1|<tP%dn%@pS-j8MR
z5g$Y2#QS*i1i9nJaw?;Xo@RzxQgKtpnncEUrhD`IvMqO~BmYj(7;sKa=cL}dlWzq|
zT<1|E)u$J7rhd|%{_);*<-4#An#3<QU+}}Mcino~!t`JiH;*nYMWx1*oJbnd((Fh&
zZV2~MlW2goeHs#VjQpC?+PkmUy}Mv^hf8a*SdB>OV&TgqAXLg~h-1c(JrN-KWwks$
zR2<>9Rl(wS##`2?6J;@0bT-FTkrDr+@3c99+I#UtuR*Gz&Js58zcHrv5;t(v$pKfj
zk1zGOzn>g3g^L+8S~1fwje?B2&D>L)R@dsIG2wA@lZSuTvfI4@otVI_H9^uI%+#L~
zx@rLg<z%)V>Do)V#<6h(Oom5iyvn&d|G<c95~jGd=<$G4a|01k)9gQ6r#5}3TiibN
zG#eE39Z22H9LrsUP??IKkL@q*S9|A-jIPdfEv|HJ_H?U<-CPA*IgIN^QO`$}tjva&
zGNX9d=rLL7F$MO~<Y3L{-rOFAyV9%cI&5z#Q(6V`(W}tId#B3Akffg}FEqDzt8@-e
zCww6|+yz^_^qrowZS=C+S!|CM+2+Qq#f)n+n2BG9T2WTt16vi0ClRuJXQ4EF7nL(<
zMmUPu)J^*m#23CgYIwiF7u_`aD%H1cK4A7v!>BQ|6D=h7iUg#KF85`wOJ!e#ufs^*
zb8h7AaVU*{x35v9-!WUAkyzi13s~?=FM~2S30Tn8k)yCjY-hH+8z(&xDK8i6Y-&$i
zUj(^_=FxS-3~<BI327_{Z@egZ+X2eySvElJYGuK&MLeFVlH+b}*~A!nu!hdQ71(0<
zl4OPj8307dO}`OkKf9-sichCj$R)-DG*=;O7J|#s77CE;(Kl-ZUQt+I^Jb%FfBo&7
zo~?TI$ho;U+`U!)dUt1@wo=z^aqE34?r^Ks24`YS$ESeSq-pwt&d_^mII|Kv_%=>n
z)68=m8xn+xXN5$OFo3E04dXjyh$Gx!gjFf&)F5HCsK#~RY<7w?AD~y@^Sb134Y~+d
ztUN;YMA2k%i_r+U1=30|6EWJR^p~PnpzTWLQj@8bs{f;yr+t3jlvm5t$QsEk$;H6h
zNoRA<L0%U}KUNEVk;m>x$HX%W-7~3-D&iIz0tzyMWf}*Tl9MI1iDJ}LI~AnR00D`g
zQjKa6jpqFq7XX)K?JSM3c@1aXuRACmjav8Bf>szl^-$|vr%hP)&0n6ca3_^yHO*p`
zTv6#P*0bf8Iosqg*2oTMI(U1H=zt@6ZiVOg@D99W>^vP_a|baY<p0ZJ!2j_r(M9L}
z>g5HBY?V#RR+nQh%F1UEPyIspo4lC9oH5dU-b-Bt4CDuvRH(A>u{-PpXa$CU^4e3I
zKq$p=1x&^XH0ws%@;osApGpN#P>H4gR|i4xUmq3T9HU}Kk6zW0HzGfOu>QVYVgj(F
z-<BsBsi^1G#LWaaWfnql3wsx`;Q-Qpa=`K-lYt{1b_5dZ>5BL3P4K-LZcFdw`pb+Z
zSKs(+El@Cug~&v|R_L=c3i~Kj3Vs$Q5ZwEuA=IDVI>{V%hNnP!+Y8mpi&9jBy}4ud
zJn!VVng}G2;He^*)FuShO;tw9Hk4vjma%9TQx||s+%76UU*J?SEwDn?+f+5N@MkK3
zpPloJshTo+0}2uv#+gm4!=uC3Z=W>Fz$Rh`CQnYltnl5I77Qv*p9Ei;IKBEuM3g<b
za)rB9*Y#PM%_-i6Ir&tJS_Kbd=30T^0zbmf-7PWx`Aw|bWf!1lvblONQLZH@tB4Gn
zvIJ=gR+q_J2`D_M6RtiF$o7XAH<w%02y(2PDmjLtUYj31qpB6B*b=q{(Da{$VGJK$
zi9^{rdq2y^d=2GiSpc6lDnZk?s)qpvLJN^kNa~&7JS1`rucoXp;Vj(d0IkGlSZ8(!
zY>`8<MKYLFMk%G=PhfYZ?f!Ctb*O%eTg0)Z7dzH_(7I{4Vs;3=5t23g9h$Z<5p1!&
zp+<-h<x0Z}@4?zmSZh8hTQZo2Q9^d~K=X9iJr>4^3kOdbIGG$Cptjs-)vA9LZ;el&
z5P3A5Qw+USMHrx2x{l`EhpJHx9;C9g=h1&Xz{J9i0fB!Qf)SyWD8y$1VOCF}4pQ)C
z0M*W_1PqK_Q}K6d-p7IFMgtJWsiI_+R)lA67@0%U?Q}OrDyqqC^dABz#reO$9@|W>
zHqJ;kApK~QS<Ol@FRAH7p@g|WS_uAuX{{<~2C6u#NqL1Vnj+b96yp)_3*?m`*LYPT
z{4q_`pY-(4_CiV#nK~g(H}`bh!$ZwED-seC!p|G&&3Y0T+fhPdq5gyS^o5j+fP#c(
zj>nayFg&lfVNjAzy+^yEtW>ZO8&$Nz1vRJwS4HCgY#ni_aVJ4JX~ywQOy31gQO3AD
z%j*UOvTVm_sCcUo5>P}xKq%~EEiFN%qpU5GRgpRkI4^Z~2dca=&Y!H+Anlh?9fE#z
zq7G*Z5$j1Wd&m|{NB4dAeBhQ69&)z!HBmCVxdI!xtzAB>^Rw_${TeAcUx&#rUPdrJ
zaR^&uA;G%Is)=3|<91Qy1-{?S&m?MEFANcH4~OgjUpg<4!DZ|+0rJB!6v9MTx@314
zsZOY&JBszf4}Da$&R9rM5qKACvzIKZRopit<;K8}aPKy3rGWjna9DA^&w550c@!}S
z3tly<Y!W3c^ZS34*^xq{n58hniCCFxCF}rV$Pm2{;k!R*17`fz-=az5pHvK2E+wR7
zotj5ublwp1pQ@hs7h83xk~KMqq~Jh}&SA=uMezBFdg#q47*&n=^p^o~o?9zR8(>fU
zU9`roUXtg)ZQ7xKkFmn}*>i$XNl(dcaleU>SrpZBZJ)^z){Rc47HWucZ6fv#I<>w#
zaa}&!B``lmGP{<~_`{XR`8ljPW4wlpnyG=Jzuj!=7859kp(7E9TsRT4%D(Zc21uER
z!D6iGgjyz}SIz)d#P&3@OkV)tXt1AOZeQ9;&EHc=Eo|`>;$M!{k(MDxq|+^0E<@jl
z+sOo4*(TXGrnY>#oF*a)!wl=nG*XYGwjcIwutpjgr=H2Ct9YY=4!o(yqh7&1ntA$Y
zQ6zkGMpnOg%0kBX(qfwWq?0P9D{dvFHuE)U4qEpnS%}6CI6FaJ1Mf=&{L>@62R?<1
zDOl+1bUz4gx05Na5-XD|q88V{>fB?IA7>4wCYozQeSG=rvnF=e=fyYYh9_e*-o@&Z
zgrSrF4z*F=XRq}%{pR(A!#M{rr_*U&{LBQG*Ly_E3A6j!M3aP4q`6Nlmr<?DJ$6>q
z{k1fY52C0NmXJd<t)%e*dK=fiD43-~h=`72nV*KXaP<efO*s1I$c5AblS452Y&O$u
zV+hArJ~c{-`8mFPHu=PPhI8I!@OSAy;A)@z<AiIl+l)WRqv9)SL+{K)W1WFk#%B2O
zgz_JF@`H(K@7Jd2YvCw__3y1X(noZE2}G9{f?PVOXsQZGW6Nvek?+cKk9O!YKkx0%
zq#wa&kx7{T3Q{6f&FQ|kCvAx7%HiNJ+ExEI`0)5j{8zj((5~M!k`LM&tiNzXe=9bd
zkcU|}lds=)(g6z^`=f}LhO+?aX6N;=OwUaZ-NM`-f<o{_St6Gd*44FW)0F{G1gVCP
z2Tum2?*!}<hYbV`Ifj7k1cVT!<zdEO9y10HJVDEQL9pGGob$)0W1alA(mfogo7h3M
zyE(&aiT=1wf58sZcc&quqm#=ERi@a}Uub^L>{#2Pui>}*o-g*q!SUpJl9BTMr>b_W
z{bhY~7CYMYezU&|X{h)x|AV3Q{?~crS^QJ)kRyc0!w@JfumlBL8X9p|iGu?W$x!SI
zQQ4+l__%}m{vWuka70a(U1t1u+Xfyz#5JE6*U#{T|3{|*;s~UEXhEBy7MrQ-?xs%!
zKih|+vm1|MGEFsMrRsR1Z!LwD3LEZZ*Y(Na>?;Z&BGRF8#QwCB*~xdHvPMZ>{aw9l
z*N675K1Rg6u|$Ey5gq^`v<g<%E{}O{sCK_5f~DWBeB(|D<gH?$T<}y8U68n4U>eAR
zU5@oIqAr(zZy;r~V$u@|1cVn%AG4Srkx25aAlx2_?1Nz#;`B>{my`oYEdB#=VS5ZC
ziJF%yfIK1}s$*L(aoMQAHRa5ole(BGJnrjf{eV&*DZa9nC-POBKqr}v73pmEO<2dQ
z0m1V24$o<79BwsLRn;H>00;p<fDRys|CU%|G!<R>tT%O5l1fU)CzJeyR0e>F9ea>5
z?8njHWs3%u)VUIo2}aRWaw$f4^)j~uFK&LBu~fTB+NpM5_|&g*yF5`IZDn>{+oRMu
z^SZZ*#@SFlUgfM}OC&rlw`n7tifw5nwY}!Jua;HM?^oxfvxmJiiGzPsgXxA<%uLTE
zZW%sqs}QLeG-*}s0HX}-Dhe`A3hci+HYMk#VKDq`d|MspUEpRA9ynNMK-TYVB&+tC
zB4!|H2aB2!k<iiFWm^i3>a3jXK=s^hsAt0hgPg$%!P%D?)m!9Iy9gU!UzuY=;sVKl
zJ4*;2^3M6VJTI!ZePHwPC^_@?R&z}15vLdx$v?Z!Y}&ow+g>M)qcswx*O2t+;gm@3
z{+o#vgs6o7Cwcu_ic<M=U*iQtL@^#vBs@L%9~RoQ@9}^_(Dx5jo=X<Ab?p*F8aT8-
zgj5%iDo<7&D*#Nq<*O`r%-TM#W%sDmMxSHulOZu7L#>t4nTMUP%c5%@hVE;J&w-29
zXes>{li~@Gg#Og?>2|5fvLBJ`-?X1A6`xXp35P5OS_&#rOUbq_(Smf^66lA`g%eLa
z40;ZDq<%d5cTV&*_fq8FF&8CgCA-r%lp(8Dd!Gh}?~qU4gdg2s-#%9f8-EOG=sM1V
zScI6K0U$JU=T2abIibZiu%;^W<Ghca)Khl*w(rD2V0`%BLQ23#FPks?wGf&9Rhw6}
zo-hEyKgliRFBE=WjN}S&i8VL|8b3+Yp?@LSkIy*X!c5<dcE7Q&#GOE`vWlP#8o5z5
zG|JjmS`=4sF-g=8K&BDd;Sl{U1kqg5k&-yt;yTwj9c!M1J_HT%!t4PvEZLC{$`r%c
z2%$Y?#XNZ$#+(2({&`xQN9K7401yZOAvXg@C)UL(R+RWh@kWPg5o#ce|KgH=)9rr*
z%>{OjdBFVTIIf(;z)mdThYc<S!-@khdPOEX)SFD;FLML{TdH=IFC55}7b*Rp12pZ2
zbD+`vM+LzVApdXHn6dA8!-jqI41rf<C{hj;B{j?>Nz+&CAoZ+MUCl>FMa%^@9F9w=
znSA7R9bZb6wI^IsJ_$mp9Q5lKQG;4m?`x6HsOp5i@h9XPJ=@i!UqMNM`C4C<HGxQ~
z-w!{JNYaj~hWJ0py@_ZM!oLou5b^JrFQCMr0{n-@qy0bg!G8ElVNqtC4(sO6V4wc-
z>>%3R43P&Hr^zJwmuUX)V^6}d_N2UKCQ#7F>BwISUgT3GEfmm*y5%L2hjfPj#a7Gg
z$CiUVl?25@2I)Yzteo<$OUiSnZ*0p++Cm+a(5ok=8rvUs>|lYK%-I-u2V|Avu4lR|
z+Ar=*m;C2yURl6M@qXlt73>kN-{8t)rycR3iPf9kd=t#;+>|Da8#4Ll!O4>l>0#2B
z$~p@F{Q)xW1GhSajxTo!??2EwViPG4H7R_ku3(1@@pFX=q%U+=3BY4!{})|f0o7Kw
zZH>FT6?fO-?(Qz7xKp55ad&rjDO#YoySqzqcPU=rPufrJegAuVFp>Zn$vHdg?7h}p
zbIxqO`+X&q@u?WoiTp?301#g^V!-?fm0BDKIqO$?td+}Qx|ST8{%WhgBxt>CCKHM5
z%k)p7h}wfyxpBwzlK3d#`6Y%V`P-mn-|SUq`Qd@Oj6Qq%pABR3?+wG*sUQJa;JPZ|
zbu7p9GhFL@!&f%C<l$q6oyCTk3ch^vuc@Wf-!@C8?D^l@Mo=@Mv+$44gd!~T2pm7L
z&Qvdmz`~>k!Xqf`%{RkwO{YO7;ZD$Jj$dTp+g3CPBdhcbtj4KA66k~aA^buyj|9*0
z_R|vx<st%ZSAgK9(+vFG_V`mP0)kiNJ1|c`5B+_TR(RzfbyAn2Po_bAVbDjKVr6vq
z*WRp;eaRRV$z^HK%GFH8lu?^xkJ))YCr5T@Oun;wZ-8VCs&MH@mgpd@p~j$JQ-EHM
zKZxl-PeA=Y;=|M_y!Fw`#x|Jd(;G2*wt8$bVyf&BZnqj5>jaD7;R76#_Y9Z=UN`#-
zVL|g?s>gm@YsVu0Fy_u-nXf(p_M<vjx)haEZBJaZlR*NfBFx+)l;C8tj_oNvF=FkP
zDF?ain3^J-rd|i+s_&(a^&2}qF|L7)C1rmGPnAGrQ_1+GeZp8j4u&>uMAZoS_Zd}1
z19u&Y*DUNkc8VQPDIaZ+E&d>u{TIw`28`NrI?lXGBy$3riNYHd#o~tqcxX%%X#_Ib
z{oDW%5tmOtk>C-=-xG|8avqDG9$_Xhn1Au)E8X1+k2LxZAn{KVVg3#WFA<CR_eNMM
z4iYburu6R;Ce98Y{RdYC4~6&}f#p0Xm@1^O_fcF#C|=-q)~y5G94N0=7<d0<plMME
z+JGnod@*03uZeIxxpY%S#&zRSw&WZQ7j1&xyG$sCAAxDz^L<rev>_|ugmYtq_8BXv
zACbO~p2<!H=j;_e*KqOqNs&qxseythv3Brsn0BEt$xkQLs2r+T&eAV@W%Z*+80c(d
zxF<@|VRN{&@#}1OeC%)7?$YvZ-B=Hp)RFOd=8)&_xBumBwAeCpTaopYGBQzX=LwK4
z{xyVFPspWJBIsLj4ZJkt*5@-_-`(poJ&Tyyj@PCP3-dPo2;Elu_&ZYt74xSa4lg?j
zwp4$%Za!ql_&I*_853!z7@2h4wZ^-2ERJ?WY(_*u3AP#S5-+RF5yDJ7gR?*%q06He
zDGcUMuM!z8=%4v3zj@~goq!=QGK*cwdMd$p{+x?)rN|crVe14dU2qabV4r;%fXx*(
z6m+aZ$D<%`HKqx=X)gM7xJQ8uh5%)cg4whMOG7^p^B6W2v_`rO;#P3~1b5aSy~TzS
zl2tfUn4e|5!Hk0d70_)6yaV?~P*R74{QK1Zx-Z?qy_<dI0d_K#$z~W)Qn~>Q1Rzu4
z-(0X^<n)m}-BrfgKeHN~wv0j7igD~_x7MKs6J!sDpR^cWNTAxo6I*89bQ9VJ3Of~_
zm#T>?r&Y?=Vz$+vZik>P;fa@sttC)d_O+_|nRW0rVv<)3vZ0JP%5OrPTThR}TM&_$
zOUh=MG9^?}{zu_euKQAWYLMJ0V$F|CnJ8)z5o8(ocOaSLe$ilV)hMDcAQ$I26U&#H
z9|Bl)Tnjidx;&@xYXWjMTvNQ>1v!9H`LR@=8l7B)U50s6Oa$a~p)Iqt)tlD4wtqz|
zyepScAE=q0*@iS3k>g9_8p6XJm6>|FeKbW6kxOc@*|Wf~Aud3`MC0&6gkT_eN60@+
z9OPglG8<h&HfF<96VafH5rM~V%A|EvAZX)>(6#9%g~pq)Wg5aq=6SxuN9-;Yz9TOd
zZyPQpI#vi{Ce6*L%+e?A-e9hb689;VRpnp`gGM~f46+=PgXY8%95*?`LYt#mf|k$a
z;T--Fbwn%>ehNN1iSV7~81W9Rc>?#^SR?#q*Qwjs_NKlTLI>9~GTo~tUdNujETK?~
z{MuP*RwpWPqS2`+G4z+4K&@5yii5sRmdx%(nT;Wi=4kvrtfwLi?X+-lT2OAd+&x<x
zMTe-m3}5!;0bDm!&$?X0O$_1=J*i=pd{dYYVrLPxo%D_bl<ge!RIK3Nhl%f@;NBvS
zxiwcK_qJB)2d_dUM{c#ctC+@l_bcLRSK<eE@nl);OwD}yZ5^;q$MfF~aD<O8o^4&<
zZC-hF3MqD88+#ak*Ug#Qz_+=M3i{zXKDm)B*eYl5x{5yTRvvU1cbBqFx6@aty*Jqz
zzUTvjDs383fZYYwZx$Q(uzeBn5Ld=6sscri%0{R)D}L9uWH98S%IYERc}@#XxYzRq
zvH84=IXnnEgDtYjP$4AIIQg4nlrcO(D_e`$fKFpnqR8uLz^rL}RH$EM7(tM~zYHEc
z<|;oZgG%qY$EDk_ci$Z~(e7!Hr!Fkj;uLAmoTW!hlJ;`bb2(%hy?3AJRgu4L6KKDz
ziyC6CrVvF8WLV{5+!@RSf$+%MQj=JcwbW?h;Zk8TN>bU##T+vK5F*BQ&+_}p+05B~
zVlE@SGhZ7u)5{p`D^%ONUtz0DdcAoAp>%o>4zN9m-lQUo);|_;SL(|r_efR7xyb6W
zos8>zhpG!V3X2{yQeyd}>KlE0Dk%F=9LUI~T@dBoFIKM)kl=<82pHL9XWTXWOOEX8
z+_XXctg<;T-6bTid)k>e1EY+1v6{Ta@0jtcYaVC301aNps#zUtp4xu-_}DDX!}m<}
zN?-+D;|7}HK#+W?V>mbbc7)o2ZT*o}X*PZjGY6xSf_D$k3HScBQsrgkad_Sw@;a!i
z<l%OwrbiWac)@CxRF}^_=0h9KtL(K9)Q}yveid58A@#FMJK}0#^~)yW;D#Mh*m=RJ
zSB|1B&ij*$CFf;mF99%57R!-m#f-~$C?iTZVV}acZY3=`9Y`tS)5EurGa)c^OUf%W
zM4`Vf7<>{r&Nnx-Kq&cMu6NhMec;+M^+^M7QYRzo-CauS@^xoz^%KDknSK6*DsHgs
z?EBQC+{y3W3iA47Yv6nwi1IRhy*W~%UIg8diCn9J`w4EUCbJN1X)v`)IG#np0rc(+
zvT^g&90wH%h_&22rpq!R=DkQ-2Sd+b&16X)ZE4C85n0+PY@CdC7W+2``dxJE&sHA0
z*tx%CNXz3r2)|={qKkgrG_mX=!g`{_Kx1WIbiYuw(|)VGo0ZpZ6y@=Of#ENtjUP6-
z-eXOZGoAeS!;CYxdQ!_9$zn-Nu?>xeB`iC-*ufJ$kg_>R*!iMGJNKJ^g6u9u{7><!
z(rxqNVkW^$uo)%@Vq-GsJd4SEOK(i!=Vq8*96w~yU0$8j{Q0c5r#)TIf=Uj96$i#u
z5(<L#ra6LfXUV255YE}kag3aaicHJ19T(R#$4P-`MMLiq9}Zgy6@_%$INK;nRdrkN
zDs#fZJ<V&6^{?$yPzY}{#Bq0VNQN7=`Y}o6OC}Vts=lN)g;WM%^pYRthd7r_KNYoy
z9xx?M3+&){KZJ*RDn{^sw;IX}mq5(o;m>Q-nm-&pEm@Ld6%t$;_IyS2J5g}#b+FrB
za2estc55_l8PGpp*~#`I$f16s@#&kF7t@i~sWF-m%Ozaw{k22NjvUR;RAe_0iOXj8
z@c8(MIX_TOdOQw=ksL&36z$+;kRbz!II4pH1sZ8CZ__eOebpTNjq6h+wdzWC9sZJj
zg(apF41746vQ(_vTgrDz!vu!KDKZFgF<9zY?f#~{y4*IL{fChh1<<S`AEkb{q|i(-
z4A>;f59|RnVGKdp(_b;Bl%~;`VLsY?G-COl13p^lPi-UxP7b@&9jI`q>%Ulnr_Lj~
zFDqqzSJKS2m6b;{CacOYMZS`%_MP%)Yz=0fkr;h|h=;&0AEro_o>r8q4-8J>?i1{n
zFyeTXGgu^15=Ce{ClLCTGvUIx1)3C{#XlCR%?dlymI%6>QSE%2)9fl+O8H^a8tO<0
zyR=$9IB_^(z>lCYl53YSnHFPCEF_YVgDd*0m(SxY)<>Hq?9gTD?xC8P?v<@U92VBD
zSaX#t74VR`f?o3s%oR)t%<xx51Sm+(vr1lYd5%mp(+~?W(t?-P;hc6$vCtTwuO_G7
zS*U;4b4f3EVaQZqUGRKXo3mQ1mVl0V7v?$WIZl`{vLy`G<a-A}$*;EF+aI$QeRKm4
zV|tnjGZb#XM{=@>aK8Gkr&w`*rSiR@;Ml$B{*0QV#i4~X&I9v+IUCE7hOtyTRt(YY
z2UE|=_;aGf^So~UWB%JMm_7khLM5&I)M8yjX*W62$}9fk3S1IaQU=0DR=On4_X&_A
z*(uBLEZtIrn$3;8H(DnB6*9ynAmaY(yEi6M6!WrQ<s(?9wFqjm2Nvt3&u8l%#I!pm
ziCVTKb^8I@fBV%)=9eIyarUPBML!redFj12Wp^7k_hJ%H5^od5Vou*z^dnBf9G+YA
ztzvata*SFnj5L+4BGk^Wq+w#R6k3Ew#a6pHJW&B7q26!jEQ5mtjeQMnjpEn3W?QPr
z!yGcGENpg>@?+Z^)ijj*N^+#td{Ma@iHtYQRJik$=kGPP=|wq>j(!+vhT#SI42=lY
zq2hKs)19XFO1Vd$C_PYd30$p}qL%8QLDP#S*)+JcDMb@5k`t166BzJYGqj<8594#l
zNH9ZHmw-#&em^14*bpS9Q#0+Q+>fJr?Fc`!ZF<MUwvdXyy)<k4^E=6Kjels6fx6&=
zcg#U+Mvc6vC@(G)n#6}?6P%vQka}y2>XU<D5<AL9#uB}lj1OJv-nxRwa&;yv-=Vq;
zq*0Bo8vP4xf9^8iuud$8cPIH0Kq|>hrPJdcT9}fOr1gTM!CXW1M^D_<f+Mq?AX!U)
z0poNdG+X7*&1x2RVQBl6nhqpgq?r8+H~!7o=roA=x(V*8XF6rRUvK0Kz<CR!&5a!A
z^r!3eLJe=ICpo-x#>K-vx+j7OFSOOwyz(_hRE-+J$me;Y+i<m=p|(YnV@uj+n<YHS
zvv$g4Q<Kh$nmTY6loOyIs>}x(ehxJ(Wy6)`sK4g`Uui}$Pu5}x`>0ZHX~Y^#a*`Ah
zZVX~jq+$^{O5=1e2`>XMo*DqjDj=7RxA%k|d(5h|v$&f?e1_-tVX#_s$@zJ1x^jUi
z7_DgaG<THCKzO`(U1wy#PQUnFgdb)=O>^p&w%8Gzmi4<HSsH9F8|>`p$*zs)xr^q;
z36*|MVldXY`b@%|2+<2dVOsEw57&7lM@Y>M&-te9;WRU<0z{k`y3;Q<7g`$>t(?(v
zTO4T^JRo?kbC&8g>1!);g3o$#jC1s2{F$+~gQO-nn{Q{({z-fC$6Es~LX4SZ!m@uZ
zj$QqKGhJM@VC%egrn*xaLcYa}m4GQV=v&ZSl4Hnoj%k@08!cMZrw>a0UE|~OMkn<<
z(LVzjbiSHFtOof*!*Yr5V_iLoXgD$EX6_90M+8~7vp)krNF<ow1rX#FYPj?INk-Ir
zp0m&65*apCQHne5pg|y#fjF=#CPT`(VnKL_D}%(3ui-6PE(o(deJ*-2*`Q*nN&`V^
zE3BiA03SQvA+Hbw{4}EZ&s0AJBDbJ90n|m}R4*}d6AX2vly&fnFHQGtm86cSaCVqB
zQOCU0cfknd(K|S<1#M#P#t!-%h=_YCZiA$`BeGcLXe0UGX7uz2Dkk@7pn{_3uRY)L
zBG3wsXmfEFhO!5Dv)8q&K8Y0>&0Fn5+i+M^ljxBRvRdWTj2y+`)^STt7=L_~N--YI
z{N^B$ozuAl39rdTGa@UkNqenY|GqV?mJ>QUmlgnS!sN4{y$4Y3pqs*BJd#|GT!)9k
zOnIMuhTr9npTB1C^JlaNO?FV%2_6%`K$nZMX=+T6+4mNVJjOQg=W+AL;bxZ_PeTaq
z&>2f^j}ZSvTK>eTBA)HBL0@Vmc)FLbsJ;f)E8TiWv&{!*j6h$QTWVP3RRm7Z3^543
z)*BFU@WUY8{TWG<iyYch#gJLxYYa#@d!=L&9vqe@qDOI$Z#$qJRzczMu6CTs({v45
zAa+q%KtLm#s<;d`vWJ^#g6wBDQURKT1dXM#ac5FFaT<=CQ6xKlW_WG5qojBz_>vIE
zLTY>g=f0ym|5`v~he{vi1Yu&&PA``6wUL0*cmM}-JURC#nE0~!9xd|#`S;6qt@7C?
z+c}5}7c@V}*`?Ii3`kcHeY@?DNl9xrI*E`0R;IxEGQ7|{f{hsPpx<c%Xp%J{4FCen
z&d<*QZl~g=pVSeKoq<m?6#NWL29VPOMohkk;iVg2Hg?Kz`_nlm72&{A03tker|9Mv
zV2pgpI(~sF_cm-;a(qlaYMP_QpwIp=LdLXFwRBu|uSeA)>ZBOPGnp{h=za8^#Wca?
zVXM5?L2E_uImse=zl=BgD$x7pYkb`b56QzarsT@rqi6oh1g6_gdn5W7aVO5WT~Ody
zXks%oimCAYXR?FlAZa`9xBMAoiT1%emyr&YAuqf=fzi8YY#xh^NS_Kj@=1;iUTz<l
zF||Z-Swe#c#Z$dlPjFLp?`tHwQpp;Ars&mvyG-Y)y3Wlr)TZsWoQ6Y4i9Dmnvm%k}
zT6z2`Y2KIIN2(ylA?<=z@1)SwmG#>G(dn{I<1^&D?6#5GC!Q|+A+BF8oJ{A&o{TBq
zPO{8iS08()<i5URe~a>1L{4(xyQFP;NALvN<jJ{(f2$2k7yi6ZK-3-aBDn4`$<#eb
zHTEJ`9`(j791Q<63gqC%NuTp981bBVt!p)2m?qRY>of6fJbDwu!^f!?4=mWYl4eYr
zt%>^0CfgoQm)n^y<x2-`wmB@SInp0q(vB8R3GY8g;?MKQ%{rWl`BRSM_kXXFEpIa|
zk6WgDE_<mAn0kNvMlaA#rEp0$nU3bPh&pnP=>GBR$=*}$Fm`#e_<KWUt}S@mxAm1Z
zfkl`ninXC5eMT}6<Z=(k3G2^e-V24FsB?mP1(@pa-wz5PH(lX(nWGJ%r$^}swmC2E
zKvgb(d9Kt(q!r-gY>b-Feg3w(+JB-VWu7M`L}Uxyf@IL`pu64NhwKf<EG9%O3_&JG
z>eVMTpd!F3x*KP!H^Bl2DwCU7t7aFP21f@QAzQ{~#WfesvtMKux|bu3uLr$?`L2rR
zB>4mrgZKSc`DXhG5U5y+A?hjgLLY=jPB)$G1Tch3TxKZN3CkIZ4|*K^ZY_l1*PgIj
zE+5IIO9-5etQfNNPxhapKAKj@p__f{a3z*#p~=FnKCR@mTdK+NO^|e-iO5+rIIOB@
z3m>+R^n2U$_w!PN(frylQbk;~Nq51PesV5qjoOv#2&G~NQ;G}$Qa)dR8z~xN#4*5)
z!kEWs`I?RxEF_F$6iO0Y`?}jh_Q<_cHfV;h3NvsZSDJ&t49Sehnm`&02?-w4MlyMr
z@JUu^bVTFZm&kPFiqYT&PWh4R5OZozKNw=v9x^L1D`6rrxKQg|Juaf28SwSN&O-aj
z%vE!5TQFYYrU2h}+aFplk$CGowthwV-_1=Go9klK;%scUQ{0YjzmfQU6*b?&D*q!#
zNUIs-0@?8W3oKiX9`$;g4LGPHHLL7;E*ro4PGL-y!|xpGu!cazwHVYgF=w02i=5r&
zc9Vw8cBLK{xpDkRw&^sYt(K`ld!b*3qn=}DH9=ml<ox~wWyZ&wi0cI*TR!+RPBsf`
zfq8Zf*I>Wgk`3If+1OK7Guv2Okdx?Ao`mG$`QTzEy1GIV_pG~j^?^v<Xx2U5VE6Ju
z=u&#<4TW@T2{Cs+dg)A>hPH-}*v)-eb}L@vTqT3dbL{ZUF^5GaWr|DzgT;KY{-8c;
zva{%TN5lSH+KH$8Ydc>RwV*80HbtuJJYJ=OJxC-aia$IH79>E6A%h5HIO+VB_(V4y
z@tswvSbuK;@w$aFo*<W_u0a8Gie`)oEQ;$w;`7oqp~B(|!aZKG;fiD`we8-RjLLxE
z8znuxZz&g7oZOHrqw0zH!h5^n;NZHwXZg}G2rb@c!b8q3af|{BAXgg-<?A#80Fnf@
zd<PFe^LxTfX#dtA^lEN+-uEhY{<<6dK`45o{s@7HLjDB=pi+?2naILK0>~JEs)VK`
z#K*hC`H~G^VbS0y91gR!Kxx(D@l+1;_532)gRKt@ZcR-vFU&-U@4(Sd`uiWSVf6A^
zD77xc*EH3fitsYFX*iXay$s@mtNGCRIXG#E)Ur+~o~*1{!zd$KUfKV<S?vaF<w!ES
z{_YmyA*yo9!K1G_@PC0r`As{q98Fy~pX(Nf;?rwL_HKuiq(7sLR>`FW`TQeFVOHBy
zieO*yzSHkaS_}=Ajm=4T{Sne}OPq}j6)?PR#ekz-c3E7<Q7k#$fHF}(!p`mo-BV`m
zU1W-G^=0$g*62)Uqlze+luS(=RG1OhRU?^3xkHE^_YYT>g^M=j2&5(lcAu!9)deb4
z!v=}TQTzRVj`sbszOD+*nUOVgn=DsQX*IEO^pGj66eB#fYP*;M^NDYmIj?kIi!C!{
zW3&f6$IIVZN?)I)-_OsTUh!f-A9&6^lN1+a3Kh`+a|tjORZ|IN4t`&B)c10uRTDL6
zr-_;AnMuT*OiLN4?&kZPy}$0VKPNmUvTY|VmmJWLM3OH_opOKLWu2_aX%*$0;#;+2
zs%+Emz9r#z3c~{s1W4vzd!OaB&}w_c<L5M{r(^cA!cP$NqR!usv1vDbFB|kw9?+IP
z*we?*O+L4Ea%?4UTzoxq%0OOSr)}X4)ec^r+b?`qJ!v<k217ZgG`>4gHRfbtbVeRu
zsLfhTQJyGC`vl@CrOpoLnAlu5j*iO`iH0WZSfe){TErh1Pm1~VTiOf3?hbAhIG<@p
z#^RCS=)tfit>4X&rqjo6e_U7w)!;&L1_|vE8P;@1L>~0`w8C`nfxD}!tZ&hC<k;)_
zbV>V0nLeejOb`y5DE?;z1mb{RjqPoSsxx!?7*K^!9`#?+pr_~AWI-v#Ho=RGlvDL~
z^$Rz*{em1Y&`@ByOaJ{hfduAn0*UcKB1Ip$CZMhPr7J`PHz!wr2x~>C%J9=({F<YU
zX}$adyUcHbwK*IjShp0-Ke{5b2z3CC`(x{~yIV{9HTGupqX&p%JL3Bllbe;=Eq-hO
zr^GiDs8^D8yeCw`cJBSoT=Q<R!2CCBgCwb8O!rX%Jl<956$$sfBhkDUl^Bu4^>2nX
z#7{C(l7h`=t@d~JQYyBrB(3WMn1SWtRl+|tvmWS|^gohqXJ797+`?8D%HzTAxp6tN
z7x8^nFIOvRHTyiuQlDWUpSbJrB}2-VWP{qr3@`CpWApxMg?q)RTYr`i!mQ`7_Y&=p
zEb_5ImKgml{W7%}i8SUK%CuLl;gk6~Q991)I*$CI@Kx$ni^kcFd@CJc72lsk)%QZ0
zM9PiA+Us;e8=NHX>P4OlAK5=o>@j}fPhFIi?IcVtsr8QaQewVjhxnx=`NVi{Z_97p
z_R{XQQr1Dnx6RFT6lQTP_D)_<<k!UqwJudSgHC(TwpW)&a``wP8#RxFXK<bF&Lw|U
zuH1gv)S`44vCOhry%|ddmiCc?nGauik#}$Ta=tJMQoY*z#QuJx=@jvNeb;&U<~A-^
zjkg`e!SyvLCkA9s{PCjA>;r1fj{Tm8N@AzH2(qdLr89xk&E<M$n*DP57Nh}Z$@mGf
znNx_6XpfYe=ppunB(g6V)jN>qc-~YnB0p($HI8E_=e&**)HD8<>kXq974%xY;)lk0
zZ}y?e-7n1{MES^UG#gePF5}rSInr&7)4ZD>vM)8N9mf#we<fdyY`7f?uB=G#TDYFI
z3qJKIu16$)Z}U<jTn$}y5_sq(I<$3r{|nzL167S0Retv#&%#1D^saGrHL6AQ9;YX^
zPO>HE(rnS~JYcKjT*pE*l3Fvwkj*_V2Q}J6&6H^ose)?nLtERA07fkv#np?4<7Asb
z+okL<-Crqfa|-QL)DBl2Ps*IB>giLduj*6&D<Zc~gr_{s@_O6KeXcIfyhZmX&DWnb
z2a#eH0_zJuymWtft*vjzTQKd<U`WO!;^;?oK*c&YU|G7;t7UNI++RM^nuw-_QQs~T
z(KwT%zLZzb9oTV9@Jp9Q-sOtB`T#La&Ke|Bz!rRKo#LvU6SLNhz6JdYgIMUVEbF5Y
zISD2e{9dYP1~!|q3uY|bunct(eG)vg>PL!?sLELjp*qK@DOg7I`Poo-+GA+RwUNbh
z2z7iqzB<h|gG5)dWvBdPG!VmZctaH_EaXO7E4^1$Draq<FdrbgMSnGGAuI(lU0(U5
zK}68wh!dB|{Y-SGkA|>89Ax}KKybCzP3G=@-QzK+aSx^*sxhp8I|9p=Slp)#kRiCd
zDRmDBt6Io$MTgyC=Fl^Gis#Si*6LKDFh@hc1q^-uwYk<I@R=__NCKW8`~sa+s_np&
zUcUUflH4|*C#)sZj-+8ZK!3$%I6KrJ_qCo?lK`)uc`nrm&1^&govn^7qZ{ti*im26
z`rfkhNy3WO*YVp1G9zrm3o8P@%=OB>;(e0K^QlJb<w?44***TGI{B8T3Zo8HfhsC{
zU)*J4thHQTuRbBd$3Xf^J$}Em*qf&mMk@C8d+JaLlt{-?;Iz6e#DPc~xx3j@z->3;
zQ;OJbd)TY_FwJPEPd@6LgXwPmGdw^AiC>&PW)WW_JVZKG&(cnR7oPej8cER4FA*|(
zq_nIn-UAw&b~?~@53FRqh)SG0OWt~thWrE1O!{ciVQXfeS^{UriQt(%05)m3vnv)y
znOIU^CMv)X;nx+f##L0b_wjy=!Uv2(fACAA+l>i_@d+8aI%n#B8S^TAHeP@0UwMCk
zh6K@54nMm=K~F~;XZ1&}nJ)An60>55*5w~6&7{Nc`_DsH<IG#j=ZGxeG8dg8U>5Ns
zXKCgLU?lS8<j{bcw1}vDTr95UFFyFpBHK9E1|Jm?Gn*r;gO?_bA&D^*QbJ*`ulf8n
zblMM}NOHY@FeA`3z^0`MS$oBp+YKg6`nj^5eZxsH>8DneVFPkXfgCvtuoFPWbiK>i
zefK~hgyAV>fd}Ln8uRAts~5Mw2DI||tkV;NX+r=v5S9JKWO3~xK#sK>y~<xg;7$fY
z8)AS(34&0JjJ4{@f-~kt<Rth^0X0kHBlq^WQKzDo`bWVTFl_?$N9Z{URv*vfM1~P-
z@E!$g;L4v`{W*?~1)oGJ90~=XFo!o9_MwNyCzhVR$5Vn&;ur?-?|yR}RR88Un6=zs
zTE_Z@JxFzlb^RvJR*F^6%*?2_kiZoJ>3R*b0LiJa=l#}fH>&Py?`Z!YYAp!qUmX7L
zr#s8zAFY@@0}_9F8uTZ{LG#CqCzvzsiH@4TCi^sNpO|;3{saT{Lm_~`>i^W^5-oMR
z-FZIcLeBiS(TN3pURsoJ{qCz5MPS|v4#Rr{YDOryr!^5xiD3--rt26ushO@i@|NV%
z>0HqmP%_Fft#3x~&n-J3REV~!>5<LF2}Bg`Vx6*F4*sF6w<w}uzx9T+97NdlpPuu-
zQ8<ip(M1PS&|E#KND;FN<LAptj2VN3Q)5c)VDl2-8_6+)Ofmj&xS~~zL!*V*I&Y>h
zQbA2~k%98J_MGs~v~P((<M%|RHu-Rws5&oVEC1c4UH9}^KOPqAE)9M%(<nTs76fli
zd>K6C*gJ6c_GWujE&a%dW;hTYk5Dl*DkeW+cdr>mi<%@7gWdPj1{MRkzE-i+p_YGP
zTp_wig@1)To8;{t>+YT=1Tz<As~E;PT_c<$txQ(ntd5Mnh!xFI8j1<Mk{u$O(V(dw
zM0Zr*6J(&(nUet)NV#Qu<#?M*E>b+=hfY}`PHcS6XCBMxy0y`2MK!@jP_X^A?nfLj
zTtaS@GwNxaE|ZJIRZCd58y1h#Nzj@#0=~@UmcC|^{mI$*Qd14RsJ&Ynn~J4<sFi``
z<<>Sj8^yVfP;lSg>qDHuc!i!>^XeVSE_7HSLQ4bX4(qK0G%a*t|EVTKr_dz|9@gM1
zV{#?wk`wVC6`k`AC1>@)Gu94Kl!SiB<Q6c`q%0umI6@-uaIua6SMwlI>tz@5X65fF
zf)qsaYqdIw5}8<XR3b#fU87<it0cn+Gs}`GspswtwNwR~skeN5`B;lb^&beIlgb-k
zxQ9M~{G#A&a%B6#`gWRdmFORlK=F<?n_{nj+88z3O&K<Bt!OJ7F=O?fjC?!WQ8EvL
z6iyrTiW#cSg@${Z>WcF*fTj$0)P`hD{_Qe!D<V2qAI>2ut?6pgFAZdzT<(OYGcL0?
z3jbbkkpCnwRqBUAq&Bs_-qC(^|4yxg;$4tfs6|a?v|NTwu6V$^ZrPgD_jU0(bc-lV
zOcf9Qnubqsewq+6iw>SI??6C=fGCubWj=C=L=j0Ts8CT}g|elEwbZArRIN%7DYsxl
zUg$v)@d7!3Am-;CQPBrlWv%@0avvdQX~zUr%zug22HCuQ=>&&(n<g_do?fOe;qxUJ
zHEAHG4o=~avlWe1vjP&`VR8Xn8~xdL+c39tSsU;1bVgSxF8I_;6SUxCrA(C+RH*5h
zcWdRTcPMmx;<UemBGXSA_&aF+vxG7R;ssGi{!y;W?P%PXMCeJ^%GdC&@%8E#Em%1F
zt{c)P)ZwPW{AOrk;fu4`IQ&SVG9l+KYg6K)$<iO0$H3PnM&0gN#bO;1^Un4*ifYo)
zzBM`tk^csjb2fD)%+Do4Hbi>4T{Bo~YA$FC>G{~}dY|DFvpUJjboksa$fmpzb<!gM
zm@ZoRHxA&m0mo%$JRnnPy7<nV`@O3g(i#Z!fp`k_-;O^j8$*GB98TxwmW3-BRUm*E
z%SV<~9@h<smV^I<`bXrRY-)R=_?#RnUMWsB?p#Ag0N^)27a2eAiNlvr+r|^q;0g5s
zmHrfQ=hA6<d1_x%kTnK}!J7Y?(KPno98A`^U;l#}{iodAWcp2SDF~ZK{0o!@{~MHc
z;eNETk?@2dNyPbwGKnJo@0yx1iSP?fu->*d5);5e0)97>m56PrZnbwnu&<Ll-HP~C
z2eK#ETUrGj;^HY~iG{oFp24i>KG|cSInx!K{T1WGkfO%$(3RwrZ+u#&KkLsmP!#`w
zPzjbyw;HL(ZM}=q!NUtz233oLg+R=`+?6=4;q_@^KA!h(id!4eWF2EA4Oq8cLkdVz
zCPP9%8kGvsQvz{dfM`4j%<=6PelZY`E_ECPDGUHr3dK>%g)NlX<y8lg-e=-!rV0Vw
zE(flbL{FNWYd45v-`}WF>zfM8lH^jbMCv%&HO7;00JRmlun0`TkRM7A3aZ7FY_|6z
za%H5~TX`0iR<WmWL@IJTt3I=Fx=g=W2wsr?d)oj3dS#Y#WV|2+kW6K|uM?wR^36ep
zaB}^>34DSTt0(VfLYb@aV(cLu#+!zl#cD8Lg`J@&_AuR`9Ab=yI)?Qq|M_tUj~#{e
zfENQ60tx{l*c_RSDhzX%dE%4wrx+tbL(BKc6qTX#JGcF-T7>z(Dp$qixI@k&xM7g%
ze8{&_H^ml?(DCg$+-et>x4N(WA0~PynZ8l_lathc6hK9sRu+`NGM8p1&#J<9baIc7
z(a#MrVuvmg(P9Z|%y(s8J^;UF$17UO#Tk1H6bM?t!Ty!VOrz7E%Q=p$#ZC?%*~N3#
zRW5=xMNNPNg)S(>srO5#20w^p@Ev+=hFpmuj~RqL)`7$X9oA)IsTSA|)*4dx@-4iS
zlhSVHn4!K@^(wGb7y)gUo=I{m4j~9%Fvld}Z!Kq}Ey&hiPdp~x_f&a%nF-+y8X-p9
z)BXJ7o7bJbUt$^i=IHW654noxN6Gru-b%@h<d}BaT0lZTU`vXbn9LVEO^lay&mS`C
zwFc>cGIQk=$z00~COQkov`wtMdJIBo#TPo+oT(e)FGW8<DvT`>BLnr9sK3~uWO>?g
zIO(_1#5miUx>b}0^daH^D`dJ~*zbhGvPPM`7i$sRT|^?jU<5uWVP?5VFE7>9Pb?JP
zUUG;U{qdqcM~JLJgHi!wJ5Fy$74H4FBCZWIqS9euOJ%ow;wwNe4e$d2Tn<2pe%}Ia
zn*0e6q>#Y@m{SFp^2q*VED;S_89R`v>%bqv%pMOcyX7Q<zZ!i*1N{$5;(uwIFX=HW
z7TkWXZhvc=hiZK*mcqfN3c0c1_W&Kn+7CRJ*F75IT9?@XV-G~2fev<Gyp*dlr6#rd
z%`GF>k_*d6Oz##J`hQf7-)%y+F#%=<M8a*<!yu&MQBYO*#X(_bO@#c=e;auy+@rwA
z3?c%~qs@akq~4XcszP?fFCbzt0qJlQWNkNfD*z>OO!XAUjnCc4o36W&9`x#~R_YH!
z6o4%v3<)S4Hc`tZTs?lIVd1ZpyCY4)WmO$Z2E}AZ^_E7Xs?Fw!$xBrbDo{TN)JW#A
zNK`Uh+2$dxVKQB<2?th%Xpt5)Wf^VS1C!z&nV^2>d0Y;m`uu2jCf9xi&H5J8hSGvA
zXGYvZVa{#G0;n6V@>%#nS@Z!3pBJvVLMG2?s}baI8y>ilPoV~x)co(Qzr4RQlU)+7
zyKp8Z;C7P9veX~n7mf7jYuvip#ojqR!HH*2kKanvgvSG)?nZ_BXwgXsO{ym;Yf8>i
zf>Fj?-3PajThCXi;c)hZw;)%S0P7$biVXsCKBf=<QGX!3lGf@@Ck1hNO<T*0aDs+<
z)5Lxr;HnN!bnDyLX<}3GlYejRGX+AcTW8-RQGN#699*yaUwE;RU<7!f<iCOzF7Z0O
zD^F|`wz&W9!?<50GqL88(0D)l3xeG}H@7IR1&e*sz(UnUbC{6jsZbjiD{^edi~3&_
zW;HUveR4Z{DB*&(UZNbHS;L+=c^MZ%2I05Gip^g>G6f?MONB~hb9lDQ?Et$0c61F)
z01_)tniktyGi!-l-a-1hMr~xM;>eblq^V!gE}d4WD9;l9x5Pin2@u&p?CF92AMA;j
zk*MQozm>@QX|GYxE{0PeZyItM9Qf~e0?5+ex%<w<o8qP9Lg4)AY}7~Ye{DT@G4g@Z
z3Yblx$3|imA>-WUlhRO{)W7^_l%vN`Y9!3xjsX9`%%xcx9*V`M)@}%Hw?DiW+<qb0
z9^dz5&+YYXc8R@{C|svL=-j}O$KcU;epUIX>A6*QAVQ+|l`?y$LHdLEeuSA##}|C$
z)G5)gSwA^D4TP)0xp>>pdacN<Ia(A_OMg0cIz6ttwYvDT#1cttRmR3j{12f|CR2L)
zF@Iy@?0r(8E8lc(eY8(>UGol`IR7KuL#Um$v>jbk1FQH)7nmq)BE<ru*E9I{j3t$l
znJ<ra$c*JH)}u(Vb8RAEYa)+(Q@*a#@bI6`WtzEO+LazLI-6W;Jrz3~Tv*EY0<E4G
ztg4j_(=7?Os1E`rmcAvhilm4KYblOYb-?#eHufocnK!R~I(J_q5QJ-@40+uA9dp|t
zfKu>}oCILNV2~2~c(w0C&J|)S$tOss26X+BoFXEFH3ejQZfb6mAXKOTs~8)q!pBcP
zkETyT3+8Lctnr=BmYg<+!fvjsn@=Ts9x>QBZ+)MGt3qIP>l82OL%52YPbyO2s-!uO
zWE`xE(md(7AF-H?gSl830s!k%OfDL@94XM%XkI&C+g$Y6H(heo|NI>vac3|QC=8gN
zKLmO(jEr0@eNY_9P{}emx6)pcnVKAZmjN*rTRB=wa-4=!gU)oh_T59)=-mO!_B}xh
z+2>ROoB!z!!^_yXND=5gdH^^>Hc0}JGT*=27XM`@0oWQm*0QBOYkqYGo%#}hiXayF
z=kf%Q?;({P)!b2AF=Ub?@W<@b<@H5X=~gH~#PZ2IA6Rh&@(n)0x|pq1rn!KG!J(dv
z1Fr!A2$Xu>4{!i%I_bB`MfUj*?wdQhPA8C=`?1y0M)AB!Qb#P6`Hm_|X^%!|&w)=#
zhUBzd(J8PrqpIMgJZKi7xDXmnUWO#iyXK*N(XI4iO?n+eq%k40xe-@K^pMUP&jayU
zXlQt(>UU?*-&G)@_MQ<Dy<kIRpV*tb6Tx%VThKF1l$<hu)+$?ifG%+htifA^=o_5(
z%@wI;L<c;TItYPzK;xQ$QKk(i2$UD%vDPO{9jkUMFo6r~CDmuwDN7+y6h%WMFP~TK
zKnAa`>l~eVdfYTIL^T^3rJ7o4D+m;2wAwU!H6!;@y_SMc9-D9_SscjMTMk~d+R<$*
z(Bb2|7K}C`i0CTZuDuqAGSh(}G_jpDQ($K;1Ta?1GU^iqKklPuZ5@Z3RIWgGIva<n
z$8N%s(n4=&oVsVuU#=_cif@i@2lVKhNQsM^(!+P5Xyp=j2a5HPo9td#u=II0R1ie!
z)$&;!9j+2Zvgi9s=jAKvjlmi-W2Yi(I9Mrv3{s|^OGpgu`37TX^Yens;Vk{a@FMX^
zfv&2xMI`~2<m1Qn_2->sX}cQNn^Xu=L%)JA86E%$bu=iY+E>&54HfIG^?S}bJRB`s
z2Mm!4j)t@$fYaB{)IyXw-g#H#o312C-Z=D2nK6LSv`ZO@W$>{$X2>zRA{>PRqu0?B
z0w6#c0dVH8g!sXQ{<sgt(k20t51<D4k8bJ@wL}?!v-2xd)8ALWZNJI6Cg}jOlmC7K
zAOiC~skAh8V6X;U`&Dr5p#WCBkG3G8VqpP_ED4Q(QcD*$+ze<QrluAZhJrz58NByb
z6Ve&^;BhGOApC-z4+I2U016bSW&0~I2`_fGIPk3k0pB)awchr8c|?a-_P=Z(|1DA0
zq$uMc)OnZ7nLhUCA}XB63YQO2KLB_poW?m_g;NLdwl=l6C$r)u?~wI_0-iMbc3zYU
z0@E!Vs*F(GclwT-uY`-m$-cEce_!7@#oq}I1J?TCdc;T+fC`!Q<U4qZVW5PP42N4S
zel8CE$3O7zb!$xVnEuJ;BvS$vVA=$zm2ia$#l)vS=UaYDeKD0&tg^ATpRCMRmR6q`
zt9YUktH!lW%*yqNZ&KJ-C`X=eA#}8|;-mEgLrLttV+^QZkOZC1Rf4~4ZmB&?si?&G
zDOb@K;{_H*&RUboz!AQ|tOpMXB}ojh@VV<)shxFdv1d?_D#0_SVeYHYiTsSUXkW8(
z*P8braii-{ORvmas|=JSDY3*`0lnK$!~%h$KA}7jjsMHL&A{2c?+mx}w|AR9(7Ubl
z-#w04CYqKBLqP_6(arw{Ux0`b0`y<Hah$N3BSeV=ZmgA&m4WU!Kp4~kEAIaY16b7m
z41+zTZ~1`u08W;KXeBV)8z20K5Vh*i%)bsophXJA+{n2j)Z{q<N$OjYS(QPXN>ORi
z)zmRa`#*?YWrLC!4}Ah)WvrE)a9*X2$frUhheQR0d||5`pu^dC*<PAOD_W%_QBMb{
zT-LI`>hg3i8n;xhZZoc6_l)V{!Hrb6w?8$%?yskVoO-#(VIu;l>({8z(1CiHzXw5L
z=%0ZS7b;3WS_@(v39#@rPIVd`>~^_ny3*=AH#zl|&tIC{c<HJCk_o;SwO^IAc*S4c
zXN1ZE?c}bFq>BV(;-m(+lij`?b=MXky=97h33gg?uL#r|lWjU3IYJK~<cl5_#rvHK
z{kO$Z>z8*m*Eu<F??jRTmoor>x9f9`C-?Dbf&!TnN$i;Z<0Gb=_ka0_mDUs2ihPXA
zSJ#1xb_;D%_~9+>*S`g;EFMFxAwI|6aNS#`^hb~a@X-HiE<*?Z=gcJ#K|y|(6N!J7
z6srxks{kAUO`%OEBMmqNu|lYJ6IW-kc;DVu*S_EMdcA=86O5P!29`ibI+Bo*n(aHg
z_A2*wt%fx{p@4|G{N^J8UcFS8djNxqPsbYZH{Yn??CiiLYGJC0uI}yA0~ak~p;e{E
zYQIo?k@jWf-G}3L+LsR{op*(6iBX|NkwyIdqktERv!2a}-$?Ft##(mG&q@Y2Ec>LS
zy<wcE)@1dE5b!^D)@PQtFkALg4;e7PX$3B&K%jy6j-l+oC5bts0V;XGkO6+B0F$53
zHsIxbHSy4a=M7k_q(ETS-h|_EWFp0^E72>R(U=kr$=BWRvmORQO6M6F8Lt=^xy@f`
zsD6?tO#y5G-5~lNkT#fkpeQvWcDSMo>KC3UN`9eP_cGt%&C)CUnOzW&Sqxyq92J!&
zB9tWAR67?i`+)Z!-P@9F^*N4ty3oq*uT}p-*EW(+ecf>|H_0TbL&Ee{w06&UZ;+5+
zmqD8E`0>Oco~quiGU}`~5OB!hK{NpmUocU8yFNRU{iIc^|394Nve?#5+f2fL;$qTu
zsD4$W1u--O3}EF*j%x-r1X2V8JVv(`TM%Xv5D)+~_t(hXqxtJm{1}MgAYf`3;e|WL
zTtT|F${Lm*W!uR$SOsa@nzexx0AjF2&}k(Z%n0DcBXz=zK*qGn>f@4fG~%Q__Dk1v
znNxw9_L^743icyRC_SgH3_j^|eW+HSGT$BEf|4RQ;GHOK)9>P2p9`*m;nv*R+6p{E
z>E9m}h?2UxSIdvJAAq3`_~YM)2oRG4VwuvM6C6as0MwAFfQg9juzY?y&-Cf}1d~AX
zv>(kZA|R!UQ10+PUcN}WNH^Zn=I%|z0u;w5u)Wl^nxk<sgS#+Yv^k7PbzD}^QsOB=
z$`2>xxabRx)iZgz=~<$>t+}t>8WkJye=ZV8Re%GNV`Yn{yg;|tP)AgZpgQps=(MI{
zT0*s)JE%--S$3zm&agYRtRLs(Jg+w6zGXTF_yT{rQZfb>IlTt%j%PAs<}tP+!KL)3
zsZQNiyzi>`vUj{13r>kscmQfSM{WSjl&G)DlJ*dap!+}?Piow^6en+d11?w*O8a{P
zHe0GrS|;^?vqbxQs(=&r`%+EA{pWY-bl_jwUvQbAt=;4xW9oEZjN4|KUa#^B3o&dH
z<C|tJSOFz9(AiT%ms*&IJ`}LRmfa1apOip7x0AfFAR~T87&GKAas?QZCGDo`qi+x`
zB+Gcaf%dCfm6?q7!}ed0Tgw$Fri`imFc=<sO~j)Qn|IfXpa{9kuWi>@Ws<en-#XI4
zrOpGAFAR9w?_~4&R*%2_5HVUN$D<Tm4!^CF9i<#nvc_yo_H5ag*Z4{n8k!kBVV+Jj
zA?mu4#mDt{JYN2D0c_*KC&YIJ@#=-$_Su07GR(EvXs-B?1W}m#u%o-Vl=q}9@ga2}
z=rU;M>c;wV@D&GC1p)$1jJby#42?{hmBz7l{D=&j4EeisNb#U=9GH9owHU2TgsHSP
zoatA+@U(Dm3Kh)Ypbs3%1*KSku4#HrGSN!xXHmMJ21X3hQZn}D-$P}?7axN9*1YjN
z+tk3YK=J~4Pcu|8wET<K&)<y+qr^90PrL&aK87gNdXY0vfAPHzSm)maXQ7h@eaA{g
zin}o5O6^Q=>8WM0E@c4|?S}FHR}S}IY?GgE@VzB*;sG^_qEfhfsy7tzpG+>bqx<=f
zkL1Juwf<*zFvhI$y8i;8(~!QmP-I#d%qnpIIN0rKJ(2_is80p`K+{;t1sLB@Q6vdf
zv)_adYltuZW^?EmR0U}Oo7+DkbPc4hmo({s$N)GFSf$VX?v{BX5dY;jPy=uV+(AtB
z#Q+kIDTiso%Zf9S&zi16!`1&kgFMGaIWnhido&O!8sMPEis%>Nf@F&wMhk`vX4f|%
zI$XnE{W!Tz3@~N1foh~9qTQ&n1BCk*@~??{g?v-_qCTDA{<vf+pn#9MHas?*0ai9I
za-;!n7)(iDP&kk~jRV&<p2rY&yo5bv3(J~Y{41M=KLTt-1qsuLowWjk6}%LMR1xU#
z4CN(aewz_<6f6jOymncqVzA(hb@!>?5IQ9Ki~ho+39;L#2+aVt<Zqu&pxy7^B7H}X
zAb3z&nC@uc+-TgAwPJsk+SpU#He%I9!65ssaK;t`0f@yj7CRgA%10d3RzLSz)$wL(
zzG=TviM`;rU#xpR{KUk})ln@!0=Uz{{L$9`t-qG9860+1j|mdB`75{TD0vP<i;Vy&
zrC+=}=1@KA1N{W~LIJ$Q0b5roY!5LQkYN`8hAF9@k$hL>E41jn*(RQNtk+A+l=!Wz
z)Y9T8dDK)8)*3!O-V!!zti;@~Lhd5A+ZKhiQ#y+B5_WP#|82Kf_uQfSId$d#b1Ev@
zGql`2!Xe^byy8OTq?Ko6W?@MXVfhrQxfH#sa(%!dH#7{Y^3pZB*E9;hs4Ho>D6N<B
zv*l%`Vvt<=1EN^ouVYy>Ju@2WEiPPvdF^&-sFS92Ky_11Ork{BNzzQf@jE_Glk(Jm
z<g`-6iq)Tv$7vq6npLj-TD`a!Rlug!BP6GFfB{JH34k>SpnuCy!fE;LtE$O}g=JR4
z%wb%ZKG>D1!B)L1L-UR3z9dIZjLdk-K3mTUGNIHpnjQ)$!(;-hc3^|vWZ_u&cGAi<
zf2-q2?YnzaDB;`nJ5N)V%60V*3!A@ffN2hJ{}f8Bnl^dgK5LNzELTlpGG{f#U^kYF
zDh02Tmjn6$N%2N$w-tHRO!!Xcl|A;kU`LC|&**P$==+u^MP(jr(#Fi5Wv9W`v`&I1
z!b~iSp|*&X<g1}JV>Y$>7O1mjm7j+W$y+6gLOxVGes?5$wr545Ah6Z#ULfbl%w<dk
zIN80&Fs*?=KdMa|sr!C_hkTQ9O<$ODK*6GeI{e2bjbK^zF@{MhLveH5$%rbIyA!T+
zLbhW>Evf$j5+W#2JpCXl7y};<0V@O=hM1g@L^|)74aIVJ+T<|u+v8wdQi5jb{AQWk
znAbMTOv0f|dlNa`w`zp5^*pXK;jP{hU+AW6+D13G$HHMEWW|5j1W1>ERM`@o*55?u
zortF>f4koFR>dS<u0WW1`((}p2?<^FqlHr@OOY0mB*<k`i_pY|=LdTX`s!iZ#qeUk
zPE*vHfZm6<5+5qxdDB(&w$zp)q>#@m-N5}}g6WzMg7-KrG~~(9#{jkZqV@4VQD7YW
zF_ewcK~bc&zS29kDmg;YisnyQI0G!-+5P^Nzc7XV7l~|}sTSWypkHq1(*JoP+Osq*
zE-1W(J<r%sqk=QQMgo~)a2APW!tL|o;b0V=zvXPH4Ud_lLCV@hdj$gM>lG<QlJQta
zgH|NsL}prsoA2t|QANrX&aX%!Q1U;BQK+;W8Y|jkF0)sW&tFM`FE_O!9_z0D-b>E=
z0?(ZX#aypNa+n{{KB5B1@NS}u=^wVU`6PE}!oPNYI9hmm27tQwLAW1MLA&m&ePrHP
z&~z{hbpH3e)?>{;`M65u1T6J7_|5`Wn*9%+`q$d=Pu+&L#s}UFt0ER=2_;1Sv8c9m
zJZ?a%gcBC?{mlQic(*5#YI<;6V*!#AAU%S~o>f|rHi6D0NbRnU$a6QkGMLh+G4uij
zF|XH$KW@@*dprqBjS4;_s3NgIZf{Q+o!W0ReluxCK^|iB_3q(f5=A!VF8lf|0+wBW
zSJwNNbfS}w`@>bYvI5N{K6@&3>%9tno#L=x0e)W&CT|1p`c79OLmFIYksJ(3U@S?a
zy1hG#O_h<yFED?R9@5*+*XH1P9$!O<b-&L6?1Y7EmYdV$|C%teoKc>j<W--P9Qfx_
zkY}U*Sgo~UUGc4*weU@1@5e4%?3OBMKN*OFZz=To^g<lpXmp>=h_8|GE(Ke?bJ&WS
z^JaXLvDSDo07;3c(e)PZg&0K$_fL*VeMdv%^7~UIjxgv98eO?Q<e+A<j%mk^cL{5>
zGU$nmS-0g(UPml%-(r`}F0qg5evP`$@v{A<l=)_FJ;eNy0Sdx5YPO24aBTBDHNCXD
z(CGj9Wuy*_pP?ae%~1G(__;f!|MfgC2mQ}Gc9A*W22(fyEo6sqTS;Z+v-I_T@Flnq
z@PQdA!KMU9`)SuGm<?3kG<$`3&u%x0RK=@?97%N!`1`|(pb&M;a<i?*I$y#3`sH+x
zkxgQ@oFV3Pj5_<xC~P<;V+A+bR1oPF%z8$>fBv+V7D~|0vo17P%SriCJ<y6<v|#=S
z(HAxFAMgWcNcl6B_uSj+UM@FOjP&XULq|CLRg?dC6cy9@1+{8H&Rv|l0JkH_fVhZo
zz{jmkR0S&ZxPaw@D3|q@=dde@M3^|IkT|=l%Zura?{k&kG-=+xm}RZE`K818o~)~@
z*lCft?#7teWs->wm+_5=L&5g+wZXT-@4UwKN>lHXCpoE%s9}&$7!5>bi&0lZfDjsY
zLbbqanI;97|I(+5Y4FsU(F|KK)hk+T@6C1OMSeyhKQO3DaX{<~A0el7#CXnH+R9Y^
z5gmIX2Pe}QA3@k{d9_o2|4Xu**I1l7SAxxm-Fi}u3mlTp@~|a*nm~-II$}2@#t}_V
z>kvu5o>rjfF`Y&kCfdP-@T2&yJTnQc16H$=0_fIF?*W5n!~<;)qqgHj`=R~ZJ@~fV
zFvlY7TJ55{><G18{xq7(eo-ddQXw~kr&{XB_m#;ZK}01`aU~wh$JIJzs(0Qc&jWqg
z15X`cC#G$%FdNT@u8=0?H$=)0YNzW^{!LxRvm18rAU=(B@{-s(gP<#sQ_&jjj3ydB
z=w=%gZrUi!##fPl+%&b`cEBV4M96-vALB@E__(`f$&v$SX&U*VAsxFelphzj2ds&J
zV7tp@GayVAd<_d}bAWf^i+t;Ns4bcrhI(h(mt7+#5Gq1QZVEx!fUttg3r7?cl0|D$
zUY!j{3LXqp^D@2h6V7Z{{vS*~h)N4`_#lG_AKV)T0k)b~YEi%9hx@80?@~Q!s)~>t
zqt$J-0!h!#)<+YYd}lMSX#yY|?^c^Y#5K9++Zy&x8{3fbwEIv9#@x>rENAoy7~LpV
zil*3ds0)n#A6@SlA6FaoZO684HFjgOv7Iz#W4o~%+qP}nb{gCEJMDE}&&_u}>`%#W
zuxHP?_PPG+I2zj{P7ze|g)G27vA6JH7|wzNqYkvhpBE1ne^tF4I3MU8%Dz+fhl{Mm
zd5zz{T~@MMU^ztZY%A+H8W%dyRvmtKO@)<)uAr;wT&F{4SNjIU`T62}mL=}wpwY7~
z;lQOih*DOa87?G*L!9CP6hJF)?ih5N4o+$fZ+alXAMS>dwCye@+Zs(mfkYhhMRmPK
z@bLHb5%i?)RqAGP@93;tJMRqIN_tRpB15Q<3M6JwY=&8@0aLiQtJ{!^HhO0)5W5X2
zRuqay(V1`tqpjy;R5>A&5A_M$@;1d683^~T=3vhI$*+&}zLajId=)p$8|D<sDpi0L
z?nGtbat`dGdIM!iZIq`#mWs~UBx-L|>W+zNU5B;I(OQ2~3T_e0(48o&Un)9Tp*~D@
z1~%!RTV&<%$F8n-r$5Z=+|ex>g~q;Q#KzuCc2$WrJsraZ5Ljo5Q1fsiS@18Fwihf}
zg)QSqCaK2ehPc}>3%fHAenQ3ygzJ+AY1-k+!O}ij7rQVj1((VQlWwtyJf__-J%Mm%
z>B-Bofzh=ZUo7D&s+gmdZtq`FmTjB~y=S|ICbzB)Mni8KqeY0n$Vy1=3kBk_nQq6L
z@B3xFbZH7|IiKVRh9PSa|D_E%pU<Nc1De494ygj>A;MGv)GSZGG0Z>PgvI8)|0YI2
z{!NUmusxA}+r0uK36%yeX65o9F>u(yhmnUnrULMY{$c4Db618KZX>|_4{po~^TDH9
z=Z#Ixkh93dj!((PYSjb5#=2rv5w+mvCm%{UPoiz^a_#t35&FII4stR&@0$+i+Z{uv
zWN<vSQl(G<^@7R-H@Jnjh~Z}eMamZ0u`7#Y!s^OyO3T1t+F^dw&mBx%-v~T4!ij4}
zt{Z^>M+NKg9oHJ;%dA}pUw?7g0YZJ}`XwLG&yfOSroY)jGY=JW#c(i)|I|_ZgDtCQ
zY=ZRxX7jx*p2Si`NBU+=vn*;f6b<*y?N-?-Pz<@^g^Sf44+3bg@Yu}51~S$3Ou9{I
zEa6CS?zEcZsL#88f-4$<Iw-zoilrUY<}h6jt5ZHKPew#>bDnB8%tTQHQ-e)K*#P8M
zdxR;TL~J$=Yj19@NCQ_GPPhAVbi^VX`aX`LEA#f4xNlUo8re@nLNJlAF)-3N#)?xO
zlLY3k)EAQXfpe;XruR=4$mmsTYT@CB{<)K%;t`-BU&E}6@Jnt{0Z<g?U;%`?1LztG
z%8QPID(ya}_1{%nitb<T3?<Rm)IjXfrUW%Di|n2$(9!~=g{CL`{2Dka!9_x!K1oX6
zG8j9H;buqm-X6D7Tc@i%eTAs$=?Fi;qtkTO8!F6b1y1>=-Ecbgu{NC|5aP0?H`jh1
zXwb~k2M*BPeYY_~_j-8Luge5x!V>n5^2%h#UuSgm5XWkYS>xN5wRd^WbV+{rLQlts
zd=ofV(-5SzK1cB)DVJQkUJq`9^wVmuojwffcZ|#JCMq~CIY+c=bDN;YD#?3nfht|o
zLoES&G<Jo}OK5r47+Ye%;elR65otXM3E0bS{^zHtMavj2s!$5rT&oF1)>4aIGu@=8
ztXS1m`yAffyH7jvm}iQ3{V)9SNA1x^Z0~A&rq7z@w5=*3pSB17GnY^Fs|B03QwQ0Q
zA!uU;PrY;JO{E()Wn>2jhW?^H%u~^=U9PXVv^Hq{T8aF6gkv3di(~M!iTt<qW10#z
zOVl%qQv=iPg-GX(l&RI(l8-E#)H@j_6*Q|+Omdh_+V2U)4v$NN3z8pnl&}KlXIpKJ
ziz|Id!3BMkq>3O$bAH(ihMW+AI7k+3yQ)JXQ@!(Rna%+R)k@AK>LK#uwElzrMp!Iu
zULlb>k@^@*W5p$4U*ohaFF@UVji8U|dnwO`XFEd(hbWEsow&N)i@R1at#+kRMZ%0*
zzs8Y}z`{TfxUo%z_z^=7#)r?Eg(r%AB|EUtz=Th^R#B2^+&~m?EjMEWHKH*#_RElD
zsj%EzpK%MAx@&eVQ}aB$JA2<z2|tsQZLpbdejN*0Lu*N1C5E@p{wf#Jz|pWzn<oZO
z;~^JjUdy{vEt<THdL1^*@y*(ABY(JEL!d`9eF3CZL^4wa;tIN_u(MJX=fIvy#&cU1
zIg~I+DH5|*=QS=+@$#vuY$9~%{d3&S;;suK=Z-33{xZD`^vlx_F<c<2qR))F*<PAv
zE6tCqcj&g&W{Ek18_30SA`)@mQ<jcH&K(jt$by7T6kJuRMgH--oio$S>+n;^BbgD&
zkr7GB*JEv#$tzb#Ye^xYo9W@fq|0Ci6N{oq1<lO`5<D9{n(pg)&!$PKP<;RPVI6*L
zSZu+P2(BWNHkmP@p-_Ur(p7ry^5=2cm4ai|hxE0wYA#v5)hS0I$h~X>s9#>0+gO+f
z2&Qvy&0Kuj_t=Y=$U|X4l6JDFOL3!x^6=n)9tp+~0(R_D^}85D<mhEor>sU%r>RyN
zJy#I{Rd~Rrz7_?=(pM&m(x*6_n3JTQg+s1$!YppA3tygozqW?gV0^6=-DE)1ZP!>u
z=Hdqy`eL$&H2iauhj_6w?#3kfl5YO?zH-~WrH5lcqoyu_NE}#s2kE3Tg`|&~*^nJ@
z8t@kUcF9kY`<r@vU<Fe6%L8h*pf53z-*Uxhj|3&OG3&NTc3ui6-GP4>75p3(spJr@
zBr6mC=0F3YX2IdAlnT9acF_B1&lNCV)<6QNBI>;_$;CeJ2}~txh&4kK@Yt<V7Q`DN
z)QclYJy&=yrD1dnZ@os3OGvU-{OOYexhBeMX_9p$3vQ{a47^oT7{Fvh!b>Ww?Orma
zH|na*dv=XqLWVnTq(CO4OAc9Xw1hnj$#jEQ7oRMo3o+G9DV9zqTxuJe-_mH6jVx+n
z#~f#j8)t|!^g!Ip9gf|Q{7)Nl^2ILny}|CNx+?L0`FGy%O6l+E7LrA)ed#)h{CV|+
z4Ab1xNp{EHp?z^K>2AVrP}e7+7^CFfs*CC)VKpim({gnxsz(s%75{;m$VfNse^#fh
zbiw(^?<4+EbtUR&V%~#+i2j-At<XumMXd*2VQwt0s+-eA7@Kxuq4Xa0GHSErZRzZF
zI%}rarP4$m*|MW=iAVD?R+-WIuCw$GR?R(g>f%w%cZPq_an!}fhm{rCRnD=Py12E-
zZzE=I__|mrUD`e!DRU(XRa2dT{7g?9#hiCj%xfV^%S_7ujb2;DF&)t%e4)y@yNbIL
z&gaeUNuKlV`%PD;pU&Ysn4C5r+6P(08+i{Uz}3RWCvzg-_23+s9BetuexGc;e}2iI
z;KF-pzB%OSDuOd3o*ol4e9;pV=qkaU^-y=%Vn_Ft<NVZhJpC0hh(81?N+0`52J~AZ
zM%By-`3Urmodw@LdZVwuDfU!tgz0DN*!rUffolT!WAiE7;}eIM!K&OG@PP2UlQltC
zuzg6>FXp~)!~Jb7V(NT+qr&zCG8)_4zdjEVI|>OM0%^3jVbpAYcmLcqP4mvUde^y4
z<nqR<(dWDxfIr#-h~Bzj@~|KSgwAtM%Qe(P?!GhVqvtT3Q(CRV{U-8%?_7LD>#BPR
zK@}IHi1HlA6;C-zRAiJ2fMRuw9G*n4<W{8y!OW)V?K2%%fX~UMZs1tMe0}>AXa5@J
z(SGK?Mx2!el!GRW55hT}MoGIE1(^U};z7->3c#8Qe4$-L)kVe@9|+G*1*cOlBAw0a
zWPIlC@rlvK6rG5c913C!mriE?Vy5MQNZlp)0~f=^unt=Mb4|>O0spqEKi%X@mBvlJ
zwxQ0TSE7c?(0L&3(P(Z__<;7~XX65->#dno<}~k=`GHrP6=A)}z?!`cI^SjEVQNhg
z_@e}V0g&<CM(n{HdL6S(T3A#`E%(_hkNr7SJ9Iv_v5A!bk!Rp00vyKo2*#Cf|CS<X
z7&g-^rVMv8Rp$x_`TnzfLsvc9$K>dRudTWnkEwBU6oadFMJ?ylF0pOz9#KpQ0*3g#
z1Mi20T%37*hKKNm`6L%Ks1b3EX|;WDP%FbNBrwSwF-vFI3bk_<g{k0+KdLLu%gQUZ
z%@MZJke{dpECpdn8b~WQIXM}&V+eL-5b-DT>V_&0U#A$XTf1H>d|b~7H9aaIUGJUW
zKHda<<-^SR!0e^DKLb*;8k`{BUlZ}C)GD{RtgGqwZFe_mbIUY_!e2_&*Z9o!go1<C
zr*bIEPC_bdI9jrn$9eI-e-988mI;Wlb^oxZqGDzgN<xj_v2k{IF)R%Hxr6mU4FS=F
zetrK*1uT<>K#V;)dBrYfOER)&aa$R+jZe2ZWAEaq4@-HbP&zewXROirmfmpfKp%7~
z8yp$S_BC<n&WECz?{doj_XO&@_Y#Ye#V%g$zNVdaM0B)*!So$IvsFH>&fUr6YKAj(
ztAKC9xMz%bo0cl77pT)ob&Gga<#xmX0>ufQ<(1j7qCnh?8EtEk2Y|fh>*q%wNbB3v
z=+nFW0KI@2)$A8apQ3lih4ZU2yBbDnjZ-t0j_!L*dG03L%g})DM3jt2jWjsBN1qr>
zn|z5O8-3t-%q;>IF5+cDu)W)zC`KMb)CS4@XCAF}{44M~xR&r@HQS<X?v~bZnKtRt
z2)y@cJ{rLog1WS4g_v5gpgvo@Z|`T9{wUU~Y_VRzooGz~_!CCjf+g!+J&cIB<eml>
zj%+>3k?Nj%tl(4~6ol~5_dyl+>N|I~aea?O=OMl{V+k<s4E=HQDrIY?n=f;q+-UY_
zcIBbZWHV@ktN`;Pm<AP`?v3NrQ)HaB;tM2?Dz659Qfl=5aFA*PGu15lkqE6?g%~DI
za<dp`5+@-v4FIZyA1+BN``KsznV|Y?Vx8c|eR606B7~er=vRI;fLiN38Te%JA8)Af
z%b6i`GGzDl97hfGBt=7d43*yx3>fYKCeXtmIyV>Zt~1OW9|iaAhb-CDbaSUd$1FxW
z{T<m5r^a0QnJS}?9VAfVQDi0(Vgb@_;GGB|i8f-Vy0T+7$|7&TMM1jGK7!wzcA;V2
z>V$pkQ;|uM&mpZXM;)7cMrdqQbVZs9DB5{$J?JIrQuz0Alngmakx<OXTiSi3^P$XU
zdf&P#k8qkeedLi~2gg%97J@D>3H6z3ep_k&$kfOGOc-<_i{`aE9Jvi-!f1uWn5T}X
ztyZCe(u}~8B-N)ET50c;*H$RBK@*UVxi#!zxP-*5u|Bf4_9AY0--f^jhXp6E9#sU3
zR}?*s?zJ+IQ1_uZex&;pyF&EzMh$_6P^Rip6Cj#Lz{hjAs8s3!uq^#qAU`%ZoTs5p
zB1l_MJIvAO^X1S8l%8ACMRt(a0}4?Sc+RrGC(M}&<3{!zTYI(6>vn+AP+?M7=USrx
zHzRzWgf@f113a@UhDM!Rv<R!Yy<ZJYX#%)sk&$4ihI5jtUmDWeTkcdU%{jrVlIu|H
zVdP&`QL#-`<<&7HNY<Lx*_f{mC%h<O^w3zD2Udb7IO%)KXqRPEx*cGj`}Eds+0O#s
z<q9GudS9e02D?I?KbM&~(NB#`%bc@Ksi`hvObO_T=Ds)pcpGlbh>4@k27<DF#xUeE
z)vmRy7R(EFz8}{cO9}(_3CZaocWb6Ury(-NFCm9t?I0v@8j{0Bkv%etE=|X!v@q&&
zjT3P)9f269oE4ZhY0MSRg_~J}KeG{)H35%Sf=-JHe1pzz%p7lpV{G=jCL}zkwO$5{
z>LfcNmt5XGNd@4tvAb9%L`-~yV4Evf@uE0Tgs1alJpl>0f4-<UPL_0es-#6g8SLLP
zp3HYSKG%oQPy}|0(IK+Fr++183^xQem{QRIJ%2nyI1t2Ze)A1S@!Bcuxz>r|9S_&K
z4V4jb-2v7X$O4<ZlXpYJ<hSP*n`9u0uQ4PcqH(_tDEIsW86(SdXX4Yr#h_txdnLh~
zV0mI+v52eK&5)+q4!igAiA)z>vtUttkP@bCq{3~8mG)v?x;k@XI0qM}c5eN1g4Bw`
zzkkjO#Ld-|8nDps`_-3<%0l!TS&Xt7pr=)c?4e}?d_HU;D>HlFsEP&9=B=Ep#x+jF
zA|(b+RT&e)mVUe$QCpaz)5AE7%!>N(U-*8G*uB_A8Gh<&T(k{>#?j6cBu^>jk4yN|
zag7qujLetfkBjTOz#xYOu<*{fIr!DxfArdpzQ-#HFH*6o@>%MfXx#a>9eIsNc@}{@
zS@b0|o@*HAkBaa;b3-o0JG*weL=pRXuN9CBeLL`J)__{^(X>IKRR|iVKIMopn?7y1
z4v8_6pjO=pI<7Tf?Mi%fpeBoeWyi0>h&czte6A=eT<VyBC$wYP;L5Of+%v&D?8G2w
z*5s<RPVh5__ET+IX4?Oq%<$qb`OOOE#D#1@)(5MwLe&w`y`wP(rK4+^NJXGNcZ{t+
zxUi#Vnb7*|Dc?b<wSvpv2y&1a3A!QWvT?d5uGtz}Q7aRKMW%mY12O_H{|d<0joPM8
zyC#vtSp5DC>OYxrG<r>o!UN?oO1>Ybt3=)kC?ozK27?`!D>iBB=7&Cxr|}P5VzaE_
zQMKg>dT2q;qBI`yDgcTtfAOGOCUWH3H0Bx0s-=5zu}^IUjH{e$N94<=HW7#g%am5}
zGIT^-%bYCV`-lm-9F!aoqg)*;3!nCz(Jf@nHW3mOST7MzR$D`w#A}NU4C&ZtR$TbH
zHuF^cq<$}7x5my(6T-!&Nxx^JD4BnRuK4qLUvDq5q(NTG%K~v#sf~!{<y%JJaPKs4
z?s9(&C<cYyvg4#n8JUj(s}mL+iHec5rdhqJ%%l)ne7S*bkr;3VUP2NjCk3(`hC3UB
zTBdSnyEeTZJ=MdvWdC=$(l*vd?M#Drj=-A`2S;7^GMC$gz}LGU1XR1ZtSbiPFKi5t
zF>OMEocnddZRP6PWZA%bN<+vl<{m6-o#P&16Ef13(-9wx*IhfKO}mNaO<^7QC(miV
z)57Rk4)4ijB#tPmtU74ea1eQ$CK>mukJw)#j-jhU;yE0kVKg4<_K#Y-GlmP)n-2)7
zk%FLxjYoTObW(DE$3rPum+YJ=S0um>M*Q5y0pS6I65c}xLZS>sn^lF#9bnevRLz!8
z3F)N?Mj_2J<FB0<AOGPeWIn-lbYy62OoXowW43~1Kvc`u{~0%%{R_&6b`)C`rtJ<t
z(1fRV7<-0=WYuDruW9?jUqc4tS_-yP=H+NCu2bsi6WgbU9`ZLiKN2(8(NDK`*Ogi=
zr(=rRdsH0Tf+;M1%rjUaJruHj1sL2Tz&j~_PoGYn_XH*96n#)eQu@(W_NFxAVNABy
z?S}h}Z+^uhe>zossmYxl&RIW#u|<O08Oh{_W1&t2UDR}+xQ#mcai6!d2Pz>S(yA@*
zlFNn<jR7up=LyRQ$AGcsXhg_}pWjb$-89pBG7Zfc64lq@6=NNCGKaITI&gAYPoBuO
z#5{LkcWt2OVezMv*)Pn&w-|g&pbYYE;^8TJJYQK~JHPw7ZBboP-fZHVEtIO1vHw`D
zH=ko~-qZq=ko)fY5NT+HEg{b1{H9+gmjaaI;v=3(yi9)f7ILV;hLLlS6W{x%{pjn0
zY{xdDR&>qzp`R0+iR>8AwxUoB^^0k(abVX<CRU%WkLl#R8_uEc%F}jpt>^m3JrkK#
znur?8AthcG(!EQhJ`RcI4qdEQ>?@RcSsKL+*Rz{tY=o>eB_=5ghaeGBh&!pE)s2?v
zFuCNM&MG9Rft$E3jz+>W?Cf$6tK9PR!~RzFx7Smm-1e-1T7RA{@Bo5>e8QyL7EdS>
z1H1)15Q=rNe<l<C1f2e=7fn(AcbArSQuo%M@O^Jd-De}{oMi3Wp5!Bk<QnLHV=Wan
z!yZKNT=UMCk1~p{rSQzV1t#a3E>N;3d*&g4birzW!cWHb6ZrfOgFh1OB<~Kl&-P*f
zUg!VR0b6H!0+Q^$o6`jF|E+-p@Bq{Ni4hOR?HynPpxh+iq*;JSplK3Bb#ToioZL~J
zmH=`TSk$y%|BqYOxC@X9sAcaFz}jk)54fm%+-DnpcXmfxDbm?pf62ABtG9RgiOFxn
zS~(^aH>Boity(aZ`q4tGX)OOI2K!`4=J+QDYm5CSax}=2{&>Ia#)omS<=x2jO%(kd
zr;^wVSRQpKSwI1Vf)Yr8F_E5HgtD$@=Z+L)hOBkI3JWXayEC+E4Z?D9mzRXT`Ap9J
zFB8hN+mdjYCocyNlZl7AScq!%Kj9UFn!;+(Q|t}#Xdr~(vfq6ck%Yuow|W-<jx3O`
zCXZac_+O_EdSt<LLzZ)QA;|Y($y2wV95t>VU}oMzz!HLO7rOcBJT4*2tkAx!a&sbH
zLm1tM0dn(1Bvr~0O}=te&+bb+5>C==p0zplR4oQKVky7;9B#m$^d{uUyd7|uzfpBD
z*mqZ*iN+4VMwnxel<~(RILRkIiNZMI%U8Ae^5Io@1ymz<dwY+oCn$Z$#2m-3<xYPR
z<xeEP%2B2A{9oe>YHxkUw1^DC)3B)YAn<Uuc3>#Dc-uFCEqFX2_l0@CNeNVpv_5pH
zeC8IRlH5`;MjJlQ7sZmCZeRXC<2^wz?||6v1Yq};7$Eorjd3dU708`dv9s$%5|qV5
z>6KKm2PB{5`(p!gQ|d!vWo;N!X;l~58=dWJIeh<@m-<JiYyw+`<dLmV_1R3VJivs@
zNXLy(B!NC*3uu$ZbkI@(EG0GlMt>wcQ^5Zr;Q{a#2RI2xv4;U+cs0UBIS@~hc*z3z
z{&ZE{LaMT2vGWsvB&WxyriBN-voNtSsxq_lXHHDb2u#${LirDitRpg_e;Trk{Y&M4
z1~2&ivOyh?p@0}!9PS^_&Gm=?;Ts^Jx8Fv8;*{CG7Isv=mDxyPP!bX-v0%|2+459q
zFp)(+g;32RC^yMAQ=rhej?f!BpWtYw1MnpN&5i~u+8K6~$v^+`;V?oF2%aGa21KAJ
ze~1eYb;DuYY1HYDS!-M_EP;A<FbO>Ad2D)nbGDp1imt0<TlT(K%0C^T$GHo0j!u7T
zP$OC${J~AojOr&ur^fRtWFi8B^aWrm<}{^~#uN4anB_ffk>b!`Ui~VXekL7iW7@E?
zGM=e(x3cl-C+({#<WY!h(j>w}QK)7!A{F$-3bSjHx({p+W(EC`=&0f|52a<mHG7w6
zbr;4&IEpFGk0F`H<^Ih5tTXl=f68PUqEO_}%KG6<F{Q&~tJ<fn{otDZAxKBCCCpBy
zz^B6b6=NXBHozD&$@6!KHlg3`@2H_Ouvb=yXP9I(YSmoj6nhhNY7ONwg{HDh!|4aW
z3p8Onq}vwAPJP$WYty?_^sq_6JtztQ4dsQ5()I&A^lrigQ!6*kftJO)LeEIamM)b*
z)mllqbHyC)6Q*AT5rA?=1N2rJN*VAb0mAYB8P4KXTXdW%!yqpIXKq3Q4oUb=YQD@N
zzrKf(*qi7}3I=n>qwgU)-Cj0C`X}a>hkYV348F*!>08XXeFJb}28}&%%Dt3}R)U*m
z3vUV+Z;aet`S<U8+c*dWc^kT}30gdd>Az8i$;x$vs(cw9uMd&r(h+*`Ui>)dX~s1;
zb@ww<e8=|~J3>>S26C9Cl7F5d=9pszpbC=B^!HDV)Jc4AGpq_dS}GSk-Eyhc>aB^e
z1fPTm_W5l>MBDqEMYp{%i7ft?Ov-0@w1I*C&teb)1W2l_vgznHyV>vidgP`{y$U%~
z%!-Z+IY+I%y?$1@d{fnaxk4w%Gv4ReivuDfKh><nNPXl~j4ioykCX~SkpM8TGV3WZ
z4c-}QLdUwsDfg9rdnWGFJiV!$quV=l$Z$pd_*4m-8B5HMheY|^yHUhA{d~E{yEXDQ
z{mPUh$MUp|L&pP0C^QXKL}F(ECt1NW2s^11NCek@t<)p!OWeQr?5u#FpWM?rWG*Q8
zFj;WF?1gQBqljcf*E%?dK?CQyPwSU;Ck`b5*6mtq>=G9o`Hy-YP0B9i-+_$e#B<gv
zE14d^yvN^M;$Kk&fXZfP%x^I@1+Idz^FT7c_4UilY7-?z%llalYWRB<S-YG=*VNAX
z;qxYD&!bcB>x=s4f!inUfYJD?{w-Uk{gcEo(1(xYM^2%ZBGHbvOhpo?uhMsu0%&1^
zFB18JIR5)A)ZZ1cPKQ<f{(wmxs>XksLxc1N{89KEc6D2I9(|h&(qozSoF?*qxkM8E
zLBMfYa$OXNZ!|s9-jwLI?>l2Zd-hy1s&;&<R_R!~wyZ~8-ox;{Na^Oq@z;HTbFkC0
z+<BTIBI-M9S+aI{#CV`Ia-Jl0kHoPCWn448+_<qB`7x06q;sl=Y7pEQ8?SqjYB2+-
zV{Oo`^@5Z&Qsd+~89r9qkzE%r5~3HugT(hCWC=8gwP%eCZUH&dNO!Oo*?!W>%lH&{
zwOwE!MqAdFF&u~{W0?OETs%*`KoSR+bEC&pYeHutoBhR$PrIr{E~)!L#2>uT6pIMz
zQ4Pp?WI1Ub!1pljW<xCag=?E<AlD~|ki<yjvsXk*><LV&u9&ppFHA03<sXW+`E{ew
znty<1b$Y&DU;Sr&@bAfdDj50?gjYEaS8PHq&&{eVS6I^Wb1uA7_&z#_KTunxONk8n
zfZ0ps)U1bOiJx&;;=ao<(eVs@OT@r8N7U?+r(dDyIRE6wv~O6_q*V=yu>d;M)73^D
zc((sa)s2b9{Rbjg-3j`L^f%uL@UT~1!fBKK0p!@W^6+fv8fI1pz1vDF3AXH({iY#3
z|FOWC=V5z9u}dlQgCSSTnDd{xYr*PcX{Y_WG#i=S^9G0GVLO*3GIXwb+Ojj65zhN1
zCK*P4A9&6L!i%Jnk|98lXk$6R87~ZIk=J-Ol11bAa#?}RPa6BbB7bvK*4`}rWz&XK
zIT>>2qw90#aDnom|MMer{Zos@S}C0&6pi)Go!{G+mT|@hQ?vI=`!^F24TJ~$huzgg
zL0KQZpsX;RKbJfAhB0C?k@0XOyIx7VS*qaF{?m7@NG`k897-SD@l6LA`w%24xdzkG
z@x%2g3%5k$CvTAzJFyqyKHcgq)zfC$V+~^mC+CnXumA`&8d)-<2v0wme>~xL#9p{4
z-qD}qir27>wgxU<clkP<%ci3>ErW?55u;!AlOuGMD41|FRt7b=jiLmm_%q~uyb(3Q
z;U38lV&yHqHNZ2e92NJPl-gzy?N+kVW8@_qgx1W%{x1Dp9}7uc{rKC}_{eE6{pfS`
zutqqDlyreS<vvnyEKK$8fh~hQrndjecl$9NBzUqrh2VM+MUFuAS5(PplG5+OQxq|6
zPa}-%OMT)$3U8G&dW2|#f8jh<L;I6mmN!YB3Lm_`0{B(BrEOKwk+lfyFceBS%4YtL
zP$5RypHY6&i-o`Bk0TJ*6Zk>v!IEuY5KA^9B=xcdT6Vx-7=REtqOc#>D|vjj^8#h-
z$HT+Za6#IRLy)<8Jaqr7WRO~E&G!`R&)EC5;J>V)L1*ocW?tQGPf^8K%z?BIUY4i4
z38(vg^B>iz@f?iP0#LF;Oo@az7ZUVs+6mwho;nGaNtgG9wICa`=S>}FPUosnY6Z`;
za59IJU4;BTz}*wQp5OC}SdN`&hQCI-Q;WuUj&jb8K`|{un-TjoOQ#C)qQ*3CONFRR
zU|uyJde|VVM3piD8lc~SM64I`vB;H<l_-4R!qP1WV@{#%(t?xZQs4fs%NFj&WkRD8
z(%_L4_&AQ}Q|beNYz6o7rn1O!iX$YFjNNPJ%Q>SDrrU5`lEk06H@%?hLs@w7uZ4h>
zZo20~=BpKLvHF6QpL96^7E+1X_9tk!i6qoCFYK=-e+y&*q56?Em^30x`~Nd2Rh^Bu
z+v7^1Oag^lXv}@M?I_Of?#SSX^bfd1@h`Tdp%!Xag}K|N19ZRxx|a_Z%!{E~&}s@U
z?k@-V_d;1L@%Awoki<YZ({M@{@1%0nfls0R(o_I9{A1zWRSA&b68`9@f%Om5C2pOO
z<Bc#Ubvb@>E9;Sn!L%CB!^p(033rOz%IrOO3%}spk50N=cCC9ZmN#SJNs4^^0Hcwv
z+gY}Q_5-UW6yqi}A`rtBGlW-;9aO^QukBkut{5I8pR;UWNqhFBdnuvOFZ0ir5k_44
zg3;1k20}#m`(yi5(TWa;6MVi3)8^-)-Xzg)5$R*W{Rf_MPyI7`Gzv1^bj)a^;R1sP
zhW|=S`*+E2wBbFO=NxNxA9DNQ;_d-tVD<huISfzTT{nvCz09GbBbI&*-A<dDLChk{
zEF$3>FgK9FIKLH6u^^$8%^2x@+eCuz?(?M$MNBgqI`+0(d<n$J%zMDgLgdx?f@9_R
z>(fKXgR%a+)jgxAnlW!ZFp7jhSJJ5~ULiN2&z7NOkMAws#dmR8pDA=_InYhLQwL3K
z%?yTLn^-_;wi(zdZ`15*!BeJ@&Zz#R>Q(eO`~c`KK-&F3?q~m&Fzi(xKZGA6esu=n
z{Uxf~rT`>l$NjuV#E2gKc?6(8iRH2Ieu`umj)4K0sIn}&3B52;e*>Tf0Kb={|5bKN
z1^7|-CVbn4^wU>&jdXcDEjXg5YTHEtAyEKi<^x^fIDmkDcML)z0RefofM!@fas4Um
zfh1x9L<uGY9^`*Au`ZSqG>4067YKY<e*o&zgvij?`^0ZRz*i|$wWhj4i)9;SUo5Pj
z2kh^el(_0rJ})0H9rID^j5o(%iFchF4IXeKQ$!Kc>~$>ao^;2GY%q*EJs)z<667GY
zA&Lr2G2s-Blu<H(ylmpqwP&8Z;|_FPgsNN>E18?9c1~k>2ky+=Vj&O9(4|Of%EZB0
zBd+BlUP9M;U^c_G=K_ght6qtubcMfcdl}n;^XiWe$B`-;wZ@;$N8m{(zw}0_1&*jC
zl&HZ|CVmTka~wCjS5Qdd=PT7Oe43#Boe-6hS*_zeeASXwTDZ}U+yphZyZ7SWWBcj5
z?#}Swtyjlksq)^(5$SN??_tql>Ut5Fr0cO;;ZlQmc@=%fet)u1rdIX$XtUr!^A*0Y
zkh`$x#eNS_MjwC-EhU-A>%zN?c6+wrgxPfEs~d^F&ccn^s5cj;=aREDHgkO?A*GKN
zx}Z^=_o6_~yiXylS#Mf8RBCff=cQX}PUpqlfWH1g+*D$vsiDe79u=lj&ocxIvTWT<
z@pD|e?ySQVbsNh32bA!|V%}i>a5sF4D>1B(5vnpxa5T3zeT@qq==IMS5wt6GidcCp
zcXDwx1&$yoJJ%pJ4KOiz(ExEFm5WK<TmLKw*f~}@oEwjyAeyl$DNQ_Mb-ARLd|*eT
zTPyV>kPZei^r#7MUz%df`UB7m^byCJIS7xs_+7g{GpB^#(qto?LkYD{P{wYZl|Pxf
zQa81(ALWiGlDk0Pn<Sd?Mccdb#^5JaBMFMGFtI%Occv#rJ)X*@6bJe~)mWV>3!ml)
z92pFQ7AimWG7_G~8efXSp&ak|b?;B_sUzmUJrqgz#PY!48jmW%99$gSIcT3GPq@}%
zKZqea*iNAI!F}!al6@iy>RGyaLP2rc6ZEvWVj>+U!)Do|-j_8Q@HL^0eOsK}@%7Ng
zr#~*<C8yMuHg0!QEl}>VMH*x~Rl1R*z{HOn+Qze$Clo1KIC+K#-qleKEVU2weID$V
z0kUB#qJbI0*-!)CHJGU)d_CO&yTRQwRXBh@@335xBHEE~WYz^Oa~oGZw`OrFZY_nv
zJy)Z9rK$E{xlC4p2*V%v=}_m2rn~Zs-U`952dA7eRAPd1j7QZpp!=v|WT<9rQEn5H
z*K5o&&0{N>!mT6Kx#Kvm>*X;;QstDRfp2TWqdoN==gsoiCyQ3N-6D(Nt9;WkS3utb
zuy0>xaGw~;BS+IPc)*72)><v)dHmeu)5w(fb=jD8^Ks(ZMe}LqD*+ax*>E*-9)bH_
z4dr0_!-%P#^z)Y5mh|hzP^ue%m1T#J#rHuX5|)chCsy7}hD34i20c_RHbIeBhs~u`
zUFK0U^+CY#K&1C7EA?BACh3%7I2Y-!F}N&_YvEts*uQkFQSa3M11|z*@|VS2TIdLe
zG^_v?k-coo=X*HI3eTO9Rb!4#Ib8TNKN6@{F@gB6K=H3SSQ~kyR|7D!_1`pc&O2{1
za@&zdTl~9+HeU{=^Yx?Wl!fv`M8a3u%wlpAI-@Jmz1qb^!4tfE!=V^1FN{tW^L52e
zw>#A{hXM$Zf75pqPxF4pU023?@U=7SC`Aye!R@2|G6RXu-h?VjXBvP;iH2dXNw}@h
ztlXO6MM&c0l$cqABcrK{jm{ngx8GQcaJAu?ne&>|+yJvjiV0R8melB`($BEt=288q
z?)4e)oU@T4B=Q)m(HL+IkH=qqCMUX+7mAqxZ&xN8Vm96RX&*C3r_mFF2XN-WNjISb
zD`tset)NzkFyFKplxI@2$!1{FdM}O$6h^L3d|H&F9fVhRQU&h650?Ix$<ED`-}ex1
zQ$lgUApz3yR4x9PsT=>CpFVqSZ4YhF{#<-hRf&`*QF;h2hxOnMmei=A<hmDfi^+W<
zJwtc(pu5(Uvz1sDRv_Fefcl*p$vERE0-5Fd6&MHn%MpcRrt?<dryg1n>_g&xlaKCi
zha0GqPTOOQvfX8tib|2^X0n?31-nXf%We52VbO&n@oHR1d{Fc=19c!*5A+yBvQN++
zQvIplKJp$>o61e@zrMmhA0}xZos_OIT{)nnV?sH3oUJ_y?P-c>CK<!r)|Hx3V~^6Q
znE8}{&dD#a!9@hJ*@4r^)5Y3@84pDtzQT@+xT7pq8gZ#E6v!$-ndnOzjrsEmEd>2K
z<O*u*LYsMh?C^#g$C4Iiw&%^gHV}EM6^SRKt~xAWLN%G1n22KtM15<~@6WWmtITUn
z2Xt@~SbTF=Q}`fG1h{(9qIm<bB&PS46=XxYjRIOzC{n_op*BU+?XYXaVDv(c!!0`l
zvWa<WV>ok>i&BZm%?n9n{w3b?tgz&ECkoX1nP~Q-sD`F8olZw%zu(K0ms_~*U9p7w
z;^<Syb~6bW#-JERth2k!f$_#kpQai|x&7YZG$QdyAES;T;7d$0u~xY7$$KgHT%s#K
z`Q(@S>^-vw;@kT=B#z`ee;lgt(t=E{SM<qupSaQ#);943@S+b7uL#%(PSR)8&lz7e
zWyg%L;>3J2tXnx-jq}FWb(=g3=hM@aA65v^;JyBqFS79RY=&#dzL~=t%8C&#pN5XM
zxXm@%LyPQVLADRe(uMkhsqmg_)G20#KEetKcavMmdY*#Mc)FPPcqab>XL^RbuiBrV
zfav*hb3W9E`WJ)uCwBbrh#>OUK!fESv!`JJGGnAK5K+Mba>Ua_e`cgg&Crl6FS#<V
z+Sa|BxxtsPS%3w5$xz)Cn2Te%V4)<i*Uz?Hw`jYFn`Nm1Al5LGWm~Z~UT#Ndu$Z*K
z6}_d1Q4Nf;^R5DVX>U|nV;D;^#z2AUyg$@`mG|KbPTH+~r2jpHc%E8G-3!<SR88C1
zjsSX=yi{`(>#NT=A-L{e9vA#?m9oKB2Inhxw;+P<J?nQ@m||LxV$sZuF!TukKNSG%
zQbB@1{)eKJJJ0yH2k_q*vm$i^)c<+=ysbhbRPjFv4#B+oS4*<Y_7?G7n9Y|IQ@VGG
z?cq<Gx1ETkh<XQeyqQurp%108+VkVwYxJbrsIE$zU*QIHA+Wzm%O>_&DfhK<xYAQP
zU|ysy|1kKaETnpBe~1qAZH^igRffJFdz!78B#-kjmtLt=$Dv1`_gE$9!{b2e{MP9;
zveG<(FkOEMhVu$n^qsHe;dN)nT7Kg^@<%4v{FkDP>$t4<ouz}6Q!mi38}@7XE*lP8
zpr8=&*zB`oDk}Al{mDyw&u8IZK3`AL%(vc)O)x;a)zkeicb>vSBtAmF$%JB%vhRj~
zEsW@UX;vO%42%3(6cqMjSoHVZ|Hm5e*WL{^{Rc6H#+Iu19|-fq|A#PlEUKpig^wx$
z4-^nAueUrQ%CQAXZ<Rc(xpNG);=j^))+J?LgcgXUO8c+ASUgy30Ei8ctVbk55domw
z|EwCSw@ahzuT9~<Do*XR@xD7K3GOm+kv%oZn@|s7lV$AYGaqHTvMNxnxWTj0QGXju
zR<>>hQvwdJ3?C%X<?j7{vcd;EP?RidxH--BJn8aL5yF6Hmxznl867Dx!RuQLt}+)n
z=>QvNUEwg210L){pM|@^%~AOCc;*FHRQXf|EsyJccI9@vUHGUrYBdzH|7DHRxdyaN
z((2JJJ=fdySL;btyO4XRY`aiz6_iluVeN|OjHgu^t*9RPn$mV$F3A2Hjk7`}g5+I6
zh>=PNlmxZIxrjP;qj}R2cJp`xiXDd_9(|sHNGjv-$gg6X)fV7&c=uctR}CmEqGf+O
zGjsSx{hageH4x!`is5^e^@{vx)iJ5#Hb{FeRD6c24tNEQE@S_@HMbxyyP2!m#*-Jc
zn2sN7nOi-tzBn_96FzpItt*OYOYA7;NYYP!wN(u*c6n{Nj-B|8{ekWB%sEr(_wMc(
z>1#DRnkh?{2+~mRIm1&s7gP_dH8t}r#&3Ywmx^oMtb<BzWLN9aO*0~SLG-B?FR$04
zmaQbD4X2S_mmGUeU)zO*^CLyklK+Ki57q524G9(de7{xEVYCGTp;KbovMW=Q#tS@W
zaYCo80HN4>+>;0sy<e);Mho`kwLEN)EC4YBqr;VGqBa%ffv~POi%;`<P8Aq7)8EP@
zkzx8Lt}K<w9`mkkGjnCYT5B0XCaEr1gwt<f>6ZD$A#JUF!f&{zo@!6f7@9S<80T`d
z>90#|nNy7*Sy+GgC&}GdhUJkV4U3v;f*%<TS`t>L&Mi>2r%L5tJ5j$rh}kA+{zP~O
z0wQC~as^Ob?Wnepw*TiO22GFz11sIvFR;7U4Ufc6?_RF2_ofu@gO|$*Wb&+=f<VRJ
zzudC)@*NCUhO+#Yey62eQCv@<k^8C_t20HT*f$ZTgF4jHXLWoCzs?X@)=U{jpU*<X
z*xV9jJTP2hBIj}g*U%?3YsoyF#!)=p;Lx?9*hORFb2SATIG@F_9>Ossl6u!ra(?n|
zGK<HN6mBo6W#R-L5b{eDAj=X>xJ1j5E(`*+?AlvfC4&F)bIbkPOG-JOY?Az`t}U%V
z&Jm_A=@c&dW(c|{aLZh)8W{Ec?iOPoi%-5;lc(W~is!H6BZIza2==56F$*C|-PZaK
z@xh+QSK?pZ9=Gg;_O-Y80tpL#fy?p}5iJP<=0Si|A$=jpD@k_;-gm@L_K4X7-p|yd
zJfp0IgBf&joxXaddIcvA(q!k9{U1|MVmoNNo)X+L5pU_b9o=2mjTZb9jW!!={2T7{
zh7XgED|C!<H_ANlt~6Bn$gwSu0>dB)Vx}BZ8jL%Oww-RWi|^PPb$GL(nCT>RNd6*)
z>UKjA8U90glpG#CmhS$qU2m{WH+f5zdLO@@aPgeyQaF;HxWrV#7Lx8pLKDuibC{Xj
zH66GD^@~(&i9Jb*)EhdU_v}hdgoiu`Eh<n<HuB|=c(#cr6p5_!%EXbmk|GbU$A-4E
z>a%QFp!=n-a#j@v-F0g`(!XAe_*HsPD-QCP!IdncFS0dw9dTRr!%?zyc%Z$|bbWp|
zo4I*Z89t31KkfrVj1o%E{*>O4T+tquAumjS)8Wm@_%iPPz;v^=S}}im^ZP1ZH}t)k
z#c90h<|Q`wvQz38s%^ki{IkjBn|Hz&va+qU%@`UNzCvtFJ|XEiO+|_I+Lv>GM8D!A
zzUU9o!XK0y@wY9;4KI!c4Vh@FYd&Y?M*J(B>pFd1mjvhR;TX}oR{e<8rSgFOc{MQ0
z+UKLm*7G&Gll8Z@=!Gno%1<JX-+b?xEWBSQ8u$|+w(b0`(v;rywrSoz^B>;4E;3A}
z2w7d?_E#3lgSzOtLA!+BFN{>Ix(k3a#k)yk!iU`@f6Y?~lbet&j&(Iu2V@E%YRGyN
z7<V<n^gxz!@oCoJ)X>k_Qc0gjKXmHIQEz5)4hUK$YiK0VoV_4w1eKxQ!*%Tvisz5>
zj!~rs4zYYt-C%~}vt1=IQ|L}MStFk^bv10j4AL7vw&E8xR^RS%yLbd%e>onvsI1*#
zkF?qE#ng-DPwQ&mMh~s+;2Tvq1sV0y1S|5Qss7b7X?f235d3mM7SKpLTTy{xnF4_W
zM6)j>oTS%O&kV_(sGx$33QKC>X*THw#8O5Gf^4{@wsFCtjKCesms&m}S(3<@T%X)l
z349Bo7!JU*Es_8z29d^q-4=Cx5TMG|!eRv`JCwzi*|_gT7En-j)uC8NP}hF&11pdb
zMvwJz7SMmUW&nri0q%p&dS5LY$3cZFudvUnH@#K)@znP3<LtN7JC^kn69u3FU+N$`
z7LL@!@pCL#8-TypA)_2v@cH#*o{CF|CUI+ykU_QGYFBnR_s>xG>BSi(PAnw$@jBUg
z3fkjYJd@0y@_dwOt6=P6BB7yRASV=#Ok-O`m8Z9ZU{;0=sj)gw3yq2r{9y89GRDYh
zE?q@_Uk{0j146ZM8HM|TwG&hA@nHT-xUcLwcMAtNdhS*p3BdmWl870wb1Xf|Q-C~$
zB#kHVR=>WfG-$NFK^L9Z((fuF&9A3jN)2zvLenB(e2!kDGc<NE7DY?RYL*0gK-31d
zY*Jdz&2XKLR)y=g<~&V1WvK`1WI%fgx_IC3LBK*EHd~+&;8tX<G!KY1)ua#&Q^}CZ
zrFN21_-!8p3?8>*tsxBKx=IA0cPLXHTf%y#R}C5WogAcrLSJ>QFRhHz>gP)gD0rYx
zWR_>%Qkr~KZP}>7o2i6=yo9=law^4t3|;5dV{<fU(rijzgeP<E>X@WME{fr}NnUG7
z)hK4-9>?d?OjvcqS@SlmCXB@&puR-D#DzFt(>E^*lT&<Kzwm}<X#ly-<U1|-AjUR0
z4QO5k!Z-EjM@AeP=(XbWG1#EUt&O!BoFZZ0<Y=qWoxrsB^PnDg3=bK1(@xjZN_PVN
zB1xP8AYdp1wwTw%I@$BHe4qh=l~FsWDB{43vIYeU(z&163PZz?AKuyV>HHS1_N}I1
zODzUMM{?`5{o%v9j4`;RrscjC-!!&bih1w{iO6~>I1BK`1%>nw?sXleNTU~0Q>}--
zfB(LuFI_Vnwp5zfpG}z^u-ax+8Xwx4pgN+a78j0j0PD5~eQW~<@#mr1CW1nEGJMLj
z{9nE{ygqL;`8{I7L6hGdjQ01?o2z$zZAFUB^bU&>(8ZAqls=pqgn|45hM%VJg+NVB
zva9WOknDXs;Vu5=Hp~UC&3|3-{%8hN1(B_G6rDU<>8j~_JRu(;4`V-YZ9{0rY5}JT
zL=8*~Rj)NDLo7=wK{;YIAT$d9g!x;6{D#<CxE+y)499<9`{x5IG)qiBx$5i`Vt2Pv
zHJYYv%Wxh%ey!?{0#GT_czRn=D%FM^#O1Mp*c^n~?2GtoMfpK7g~55+)pZ4f_Y>Zr
zZ!q%}LqN9v>a}RXhgSr^K!ZoOaG^Z)OzL>v3yzn_bU*eo(|y)pIf+Prjl@9^PB1${
zq><84R&@uK?cjidk=UxM4-?ej5MQBpraXgf24rwY0X@q@@{EwS9dQvk`kjD;W@ef)
zf*?WL_5`SsG$96@hu99Sy{#`%GN1X~ev>6eKR{x!r_1?VMz3e>zbnc-Hb1*+LE2`8
zg|dONxqSt*jWAo0peVvT`+#QQl#A;p0uS+LQbC$Snq`sM+{zsvK=?XV%(Wnf3A*iM
zaej46mSuD><cvD1%k`4MoRjB6G9~$|uBT%g74t@ECdblg$$10+7uTnk!{Ul8Sen`G
zVvtFOtsAU-lOw*gnJ$H7&$m8l8*>W_rhSy)jLif+Me+#kLFFlimdBY}4dR(#h`CLm
zIKzU4j-nzUE_XT8-Q^%qt{2mwOh`FA_6Mw@eh?ymdJJ{l&BH!{c9d&NNMK&fZ>N+u
z=1G?$Vf$U6&n-U!<_ECBG2wAQQNNdPlaH&MmtgXPLy9a)+m-ZwEO>+@nCS857e3Qm
zueK)@`OmTWWGUW0HH>v(6Vx|NxMui@QAU*>m_O+dV?<Ta`tEuSCQcl-Q;&oiz%~Ho
z`qMO}W-#*EDY3x{Pg~u3fcn<i4r6GK{^`W9GXf6tdY~tfA^WlaYwJnO+kGkt7XuD`
zzn>6-_eMsrLxFt%kRCkv>sC@K3QNMmnjFRVbNF`NSqRYC&6C7g0?OiBXXnLZiiYUe
z#&c}+n@O2Dkk?~I``uw|85(tky93do4AwfobD;~J7Lt$vho=M-Uq`4SG#**L$@Kl&
zbsi;C=LTbE9qN^AG#qi?rI%aHt@M7{^I0WVtva<Fd{VA^ah`|Ti#kd^RVD0ord#3{
zdJQe2^np9-^CWQr1{e!yA}6z<<A)qa$DqD&m)we|jg)=c9g1JbM%^|O{EI<eOr-Nw
zx+R^clLD7s4`kgPG*3KdWZK2iLG`r9KN}u;vCVt=Z&aal4?gF#ym!2#o$@W;JP7YE
zL7PzaSK+B=IgVjl@;s+`PF%tZ`CvL1EE+y6U~mP(yz7rbE`~A-nkO46d;_8~kA~8V
zVQI7RU0`1vgtJ%$ei63kV#}4b7hakXFIfE8MZn2;zQzr;G6?0`W`9hzfHgifpBMNc
zg~Uq}u2jg6c$BBhA5nucGkM<sw6)VN=T1)oFUeKUBxjUB_ad-~Rb(m2L?-zyV`sP}
zA?+2x(F6_?Gik4Fqyb}u3k(<OM?jq<2MlE@PY_vm`qlC^ihE={IeJ=Y_gLn9!B(H2
z|88(KjRK*;$ZC|UM60md^K0`V$z*i1a8u&viv~187jZ6`WWWG9*%xIm2zzYv$~~N3
zZI?corgdGHMlBgeYk=(vhs}I3*Quf4GTTLP=!wCmO^;q&OFaNLCwyGV^3zAj(O0e#
zzt*ICjF0ei;0;^4ydpYcdP%KC7cX<@)iGIX3e@9vn3^I!fq%Io=d@^G)=Z}6S&y<7
zWIA!tLqM8cUse(uh$H&!UKkiios5)7%UAiA2C7L|3lTz(^;&+7SRGtO&%yBM2#xKw
zvehV=P2@H#w-c*rXH)AoIV2XI;FLgzf4q)Qgf<@4B3_TCK=m4zeEcs=wVtA?Cm2Eb
zdcOO)P^yV>uFNwV{FoEGSbw{^;_5`0qmU7d1##+#%bXLSN-Aq#6Gh~78T6}$@<}I)
zqaw>1r-y|Ooc4o*I8TKibwePGg!bO*sYpQaf37H6NFV_FFHy$`FwOD4Jed3=NaGfi
zSUcdbS*+l1nhfwapz5CiwNg=h_}HXPQk(KT5mjXGuSq|&4@i43ZvzJ?$@{L}S`#E=
z1rz^ayp6mKbuT|Z@5bYA(g2pgSb)5YQYVf%cJuaQ(Ofz4FCk!d8wjq4piaVCvlD!q
zq-4!r@XEww++H9aAlGp0`}WDtJIn6z@O9kmHH@$y$sb%E0tm%18t|_O!K467<kj(*
z3>=fl3?$&?0r`dplKW44(tvG_@$t-^i=ss*{LbY93K%kYbj1e)#u~7WN?qr^XkuYS
z4j;2zwghIFkvbr8_$6fUby2llj`)!uT|}MGQI6<c<n3N?vy4RYJ0#?9mtJT+pg(os
zpXczMkE4{+=Sk2o3{;V(kjC2ehx_x)-R{lj>MQ5c2BAd!l;vyvBu&u~19|0fv~8y)
zsg%J3N$!k<{j(OttPQZVFW$4^LAJz4@Vg;|5es^v0WAG{{8h^~XRN)+rnQ$0_dxsI
z%IPVkYhvs=z)*h7CH(4AV&aa<?Ci@COu6RI0d=(`AQT9qFZo-(J!V<v8}UvVA5|=3
z%ETy3fnPG>D@bcbPc7NGsa`u$#d`e%<U)L@=2(6>%V6ld2PoA-w`7hn-Rwm3pS}4E
zSaxQP2XzKO<QyA$Y}$!0!p7;7u~%v(NRy$29+7=}ep{ltK5fWi4xsXATgJ0r?bMPu
zvL_Zjqsbe6i)Zd_^Rc6GOXqu;>pfh0oZ1a#%!z<4sjors4Ed6@`tszJQGY1}d~EZ1
z4fjKG0jBh^X_gY_JXOg|h*Ddmm|n-7=9*Mx&crTugQVLDMgkt?&nKDmwLdTn@(b&E
zbtypcq1Zs!GHc}l73&93>*2$_eFr5r&t5qbpK*(;#*NDQeF-uD;3DsUQabGlo_dzH
z0FRX}CN1xRR^ps`qXk`OGpxQnU!7l&04aelvXV|WwLc>Iz9_m>3uaC^9pgC!Gg2t;
zOJG$ZTgAyuJcBF-%M$45H08W{375ibVJ%@LN6#^BAf3b5<YYWCr0-Meqa_4?vn7OG
z{6QB0WR!YKaH$P)iP!z9lVeliq0McUQB6Z3*D}vD*n{=*x;}xb5J!g!z8v;Ja28<%
z*GA#Q^GfMM!NIbB+dAfel7|cQ<b5La|FQLs!LdbK*luiFJGO1xwrxAvv2EM7Z5unu
zj&0k?%|7RR_tvfY{&aQskFKs+tL9v5jPX7Xqv^OEuFZmRo5c1*g~4KP`Vv}L;`Xn6
zfHtH~_d)=ZN*LAfY~ww+WfUJZ#Z#BuPv>BNp^|zD8?x&5-aXvW_Tgcvdw39CpsDNX
ztB^Vz(W6A2@rl$dOF-4bp^LAUH}F)JPG5@_m%ooAC|olbSIYqphn`*?a=-1Szn<}-
zDme|c7bp<AVJz~|vX7U}2iMqJf{!^7^vX@1U1h7Ng2F279<Nu7dy@k_Hw0J>?^_vE
zY&E|1^fupYu*_reAh>j7Qa$!<`#Yzr)?qt<&4OS%^T~mo3HM(WY+@YPW9%mcN*_PC
z%{7v27Q3_CE~jI?Y5Cx>KRiI5@7>QAn{#@NCq!{fJ2*IW0yi4Dr@9K#?d6lk-xzq~
z1Keu+9^zfYEiLnGG5!N2G&i+|2mc{-SpHZue`amh^MCvR8}7l-VTw-h_>6Nv$)=&Z
z+-Ch@*fGzxyqS4%LEBLur{Gl#?3K}B$s$<>t-TH4p_ga*Z|KB<d<j21{TB?jMmP9b
zfWWXiHIGT1c;Fv8F}Qwo95guW@*cgd=fj!P(EQoo_}_{9Tbe!5ZGm}Q#(&4$lN|AO
zd9wo^=<qn79~|7c*Iyv{fSM2>{xgA;5iTKE68!ONrf5lR-!vF3IZs(5$;v>Lp_+Nj
zF!PL>#kEo-+aorep)%aZaJq>Ru=J&7wP<Y`)5<A_fmaY^is=#P-eM{jXfbcAplH}*
zv#i3MZ!c&iL4UxTYTq<Ypl;^Ygyo!S+Vrx;CamynbSk;o1<|Iud7lX$(c4@Vw)WP<
z8=|F3lR1<8Dc5bOu=~FgVNsuJRL-rE)zEX=cIH>@a7bk&|G{hizrurms*mAE5`ziL
z+2S8IC&9nHtvSsVMRxvwy0k(IjsM#~JRm8?{|Ji;7pg3qP1d8IYB-%Lg2wbb%cmGH
zKMgefuXh@27%*S}IUs6P52=4=jntDb_b;k$l|TcGkX@an&(5OOHtDg_KX>KQGD6s#
z$hkTG^^DVBU$v$)NtC6QF`JkcpUCr8{me%(LUztUKTU{%ioKUGXZ*O_|Cp4D6+r%v
zH3WRF^1p@Vg+@)`U6FS%c&PVq`YfOOz<yh4x2SDoEA8!$g*#p5p*j)(05EYhRiD!J
zq}cLU3v^g}@NX9YcbfK7RJh*CRpgm^YqBW+uDH;B0y@UOTd!0@!9S-D$US(f4u`m`
zM8(sf({H_BZ^2FbKWl{n!S0@z%$LTbJmNRP|M%zm^axYSJ`HOmbt4C8TGsprlU=FI
z2m9BVAqxAS#8l2-!J1uHrCAUnsI<?Y&naz=>0d2DXA0LPl?Ud>QFIjee+uwXKY{|>
z>zQru$Mi(bY=>nIosMj``C`ntPB8XTU~m)wfFV2-c>omoM@V4B(D;}_gE3%#rbAyn
zZ>G!NQ_N3v5MxvShlYh<1?*_?6J9WcOyGTYy*9;5{xbjhC@b(quhQ9B=R}zE5jcU_
zX5DuzQI-&;FyAM%SWbscKt!WCH)I<qi+ds`$IBBMc_ig1v`k?==q+Kb?hb71Yb;VN
z{*7c&tCEJNhg^lfW3xBgN8pf)?z@WQsE3udPdCP7^50g4+FIktlqy}-YYRi_Ku=X8
z)9G^e)daE>PxSC*Tl_Ou>ON9LuV1zEtIxL$HX_^TQs(w(f8Nb(w;5xdyEC6b)$ux0
z_G6?3#rV_GGaKIZrN{f-@7SKvp9ok_DYRE@Zz1G%>UAaI_Xpej{dc-WfT?v^-^Vcz
z78TytqDJ|%J0xMV<ijx%X0L8KkZAm$&%%?3q_md`XA~TC-45$R;+VwWf21*~qwFCk
zlRf04tBW{P!_9Nb0V0F1_L$rK-IruT<&~N4YZ$cDbR|KNE|k5)Im-Kzp_}jf=OOO{
zkDyY}vqXR*a_RWHfs6q=Ezp?H=Lh<TbwG7QY|!1rV|#(NQy~C{2Oa~Po=J*{G+L4_
z3vAwSc-9o&$Fa4mxSFA>>)p2lhOnf{52buqoo?;V6K3=?Qfi`h$SDYDSSU@zvBgm*
zkzU6zPE{=ysjH)<wL#;kD-UULsc6I14kyyp(<3P#^+Fs;7?g_e$>eRA3yq6D51=I+
z2zFQOAlNqBSA_}s#!F{?z4cc5-OaGg%QhSMGLAS8?ghQ~M9o_ShMMn1JpWpa%RS}r
z@POMCj9S;H5Q)-)G+Iy(e7!|1sN@gkasZ4~)N>T24tc)OymBMpJis1QZp~q&GM<qO
zBeyrz#l-QKgG4<Y-`OsYKovbw(o8$|NM`=^>iENiYr3Gx0^n+lc0WofCJdu1B}_PH
zrVup^n#A^(T{k+mEOLW}Mh%)~z$I<_57fb%ag#J_X0TUPVOpsPa{mu)ef!2KblrX7
zbQz?xuV-=GEh3Po`wG?#qu~7%y?t(lreTe=G5~e!*}#5<v-X%XA<8My(KWuy65lM?
zsMLUyQkkUA{MAteJT;TfGTtZc5Th>9Zw8PqjiaB-9VY#DhqvQn)(f}m+FftSx&m-+
zmDCQ5XW9(KSZdW={AL$STOu&bqlEY9gfiQl%8zWQi?+FNx)_lD&ljBIuM(P>!RV!5
zfe@>K(nB=V>YQq7E14wh6-RT*s=d!(&=1a77VWju^B)affF|)CbDQNe%g)b}pX}y$
z>EJYOMREZ$x($Fi>?V606~>XrJLZ5u`t<vXhz~Q<sN^a3sX7zvGj%#zY4f=;$&fvY
zvH%cD1#++8T27GCl9~(WkMh(mkBTv^rmU^DS)?++lOApM+1D^v_k$ioPCoDrGWkT7
zkl4NZbY1~5UWmv}NYfc~$Dx15In_CoyzHS$znUmAYZgmg(Pllr3|eM=Cvlr7*YF(n
zaokP+MkzO5SZ*_R2BxgbEo+9Rt(^hIXWvkZkX7%WL`7G0oK_p3_`6YG<P%MO*+A$G
zf<3YsMLvDW*!CuG?$KckA0JB2ys1|&m>+100}@H1DD9H6kh6hIn-S|T3d%-ALiOYj
zMWGvz#-kysTEsUqn4Ak+*A_maGmrw61egjQolC@OKEbXkbMl$B8X<1SNEPTAn3-5|
zi7e<qXR!3UqJaus4@`$d(AX-j_RmcZWOEiCV3<+)bjBN+$sbA&wBoPX%9x}A*3l#Q
z#px9sJPL}C$8-!QokmNBecFm${ash{y*2ohcfnIp)_Od9Yu7w|J10f}1mMU1>pUNe
zI?q16x*#+YB`C-Ogf-eVNQ?r4hQ_+F+xpSw*@Zj;JGiX7!Fe&<AiS}`@&1J<5mSRG
z6P**!pPO6T%V=aw+=w(jgxJa?Ew+>3_=b8b8P!3#)SFD9L^@etD5q8;lnxO$S_d0p
zAa8)$gswDCzWc32%*<(ug2u`YCyPSsqTfKrSOVtD9-T4YWd4rEuY62ZF=@=a`2phj
zV0gmBuRlj05g#e7uPn+$N~O?E282vnFOv?|IA>X$QSFbt8}`Deh=CbNo(?_FNM)$l
zaaLc1kn})|L3}S_F>lq!UnO%yZ$6AP*N7y?L#FFV(8_IK0%=ji*J)-!jZCkJE4T<H
zV4kdQMbp1}YYW=V58WPD!iNPB42~5GajQURe9h2=2Vqe8*=Eg#zNAZH`=mPAb0Ed{
z9_Wg{XNlrqpQad-H{lSLhzv0iPF3}>Dd8<!vh(|N2H2{JA<vgzRlf5Rei$nVO)-kn
zK$-luhQ599^1>Hqd6uK22fNR8k@y17z1e7!T5}e@{t8v_5;g#v4Ss+RB?K%+$V?rD
zD7=5Q2QSwq_-d`+Q8&Z6=5YpJntx@PA0cMnk%S<js2i-#Y$`}~SyNxHN$p8WtowUO
zqN(H^yLgx|jZcTD@ljyp>(X}k%kJ0dl0QqIFgZqb3uk+tGX*xZ>Ex?{<L=Xr`(2N@
zx1yH=Y>;0pz|DAUf~f4E8l`?LHB@Q@Ac5YPn2}kMfft5jgtZ0kJCQsMhF>2iMy3aD
z1SptXr*|!Ov313|@!%=1$38F=u4giBHuHU+#h=r_!ehe0)1ts*-V`RS!v)*D<8NQo
z;6fS71%W&J<Pc+QKU1eSwwKa1axL*heJUN{M?xAbCqw&hGOA&CNQ%AK#A&R)=;$wq
zSFs}2rTvog2=lsh$=8ARv24mEq=;Y<GP8q~@nk(63E}3fWs*Jq9#Jc=<46!n5){>Z
z@LQT&3cZC_UZCm(4IZmw)-eUs4n)Bd70x!jCsuo~jrdlgNhtkwEqF%m@FNT4<Q9cv
zQ@Q3&PGn~Ek`^v2Vz!Udf@qN>acZS<dnuN0n`h$SQhQ|aZFF9-UTD;KKqN-i9Y23=
zQx`hX<g_iUUnd39ZYW%hWxMZ!N0!-k1PJ(m2&cKype}lIczPJIX!j;om!(YYbM~#t
z3*%5hh@fiF<Gh=Z&3?w3Wj@Ls&zrQVzf$GhUGNeU5V8jR8Q*NB<Us9CT%Ckc+)+op
zXIu|)YGlx(C|PJ8jYBmLJw;jao0ou;%H2tq;;-@*9$r|nTwbVd4&RxX50)<XjgP#U
zba)zF;&2ShK_#3hpmj}HJI?7{33$8BVje29j)n15sxo#Ig9VwT=<11SKX@Ahqs4^Q
z6_KKdV^+nmD*<3F9$(i_YO#`Zs!GvdKY|r=Yy<)rW!PQ`g5A9XO1D!Dop|24Dei6<
zF?1i|iucBO%edy8N<X$hxvGjm6F1Day~WBHyUc)Tr1}dWJI1Mkr>CQuF6t@1#VNgZ
zQaeq*s8~gW=j#CTN}&WxSQ&qHU_PW9GZ-n5--sRZs;G=rDpX!A)ah0+Y_Y`t;Ml5N
zY;>`kYjw`^Y93A1jN-T4g)=dv_+DGbojx|0O-8EPWo+l|SEgj52fHk8-Mi)!+PR)J
zvBEP%Co^Zy)70*JR2a+`|9&b7ve!N5LUDDqoG;g&w}0ut@w9HZuGA^O^E?&#?#)2c
zjlM)ZuJMBC<QySzBsrR2-qc68IcBXd4nnp%Dz29%qFdnrhkYYW6KM98f9_Jh-9P7k
zDdGJIc)?^NAQg~*N^RH<jsMgu1jZRF)t!-q@i;a(6c;myk@e>2;v*exM`#-xuDeXV
zA5TL=z^K~>TD-|ibz`~;|9z@UZ}2x1Z;$%|(Z}Pi^pJw5iu)3^+Kg_)X>{#=YtGc<
zXZR#rfi8vpHpmZQU#uq-Unx37n%XKLAI}>&$BG}5p*buM)XxmU-vj`^-raBzvRzUn
zL8yDIpW3rpieuc#vk(;UUyTeP2nrbGkhKp#3`eBCUw3);UhL=l0OR=agIt4tzBsnH
zFg&|?W=_T-BJvR^Fy@1kDRXYd&j&H*s3pjgD!_5apQl4k8Lh%<gzeWa+GqSaxbFwG
z0})epEaKf#ygtC1npm$#135Ldi27!KbSmz-q<oBf2vXLh>M{mu!Vqsw7vqb?8U|UF
zJxw5Yu!SmUYN>^o!(IzGJSs<<#!%!MmOvRqDrLfb%N5FaH!UakMN}1P#I2?#%O#pR
zuLG$)1KL%6_nqRLbl3U_Py*%~LLX1sPEjNuz3~DQ6sLBiWIKq#x-wOPhwFKEVFs2W
zWx_Do(ixb->gsv%gces&XjDU)X_!2kWG}W^#Fp8zE>m_@0dj(LL?f#eLGplAG1wm4
z&u_)8TpvwG0LhMEU;i!h_~t+8?%?qnI1k1M(}_$>&o(u53*H3swk>~rGFx8D2MIk0
z)h`h5lP&9SQ(aqpTPA>W)~DP=wPXgjcg0c|H7{YmFTZb0KSaLw99n-TWJmZx9H0sq
zw3h58M=}s55_cvD9oK23UYb>~q^i3i%ympffVsFJN{6CE$DXLkbEJDr^GONz-4{#h
zH|iU+=ilS&*LD*^2!XLC%K}Ag_G7!KEt;n5SP&`QV|k#m_h$4vE-&Xd-KqS{<K(5e
zluG6(s(Tdgv5Vh5LWga;l=3&A3{;QyQ79%%i`mtgGt5nii%yr<k42F(Ubb<s?TEhZ
zLRo{sgyzoEV9w!WDl|KcT#cm8H)q~wpI?Z!G2e53H~mzEu2v_|>cVSgHHz3YMSBJ*
z?N~LsvU^43RxbeTm$z5EPo(u^sa#!}#&uh2*cV0~9}jJyr!3kVC;`6zxCOx5Rz}70
z#ALFKsm{KZ40hKnt*Z$2l{ij6du>IYx)95DYQ!poPl#4Wf5QyQ=~+=zW`Hv<nC$m>
zb*puqNaV?EkCr4ZgC<sh*c;*Mj$X@=f($E)a#-WjH4D56i1CmEJ&#zTiA#dWQUY?;
zaqeF{LS<@f8<s}`DJ=wvyMFw#a_Yb&U9nu(DUViKW(pVz|2>eil!vKf#B$h&Ozn~Y
zN6<5s=!$FK1xUs-9q(tMmaOihL+(r%f@M|1EP~XNU|@^r?moTJE?z-&q*&}soRU^P
zDi)|aivzTj(fC~>Eh^?#&8`|@6QzW`KEQL0YR#B0vx=SKs+FrN#Q7(cup-wfvYTVH
zl^jTNOEJdm_@ayx2P!kDWjgQ3PK1+`C+9ZtB$;QUl4h89i3Dfm+TQGmYyRs?_Q}_|
zk$(l~ZJC~Unoaz&qJdk-*<2IHTB@FE*0lDqh&vgil#?Y)DHW{9LWXPN!Psvu$~b9E
znixBS+BE#6$~d{L$}I5Z;+QBW>!|aB<}olV67m#Jh5Q~_NQ191>GM9r(T7+5>a((?
z>;0%lhAV6+Ef4Qp{;P|4-?2;|c&tg1azmSP%}n_ttx?60E>f$2JN0joM`KiyM`y$X
zmb&lATlH=F-gn8NP6!)OW0bk=5%%T)HEWH@4^Kwb^su?z=i16Wfo4jJ&$b3fe&^=+
z$>kBc;fSn%nO0Lr3{&fytW~0JTF@pvLe9uj-?w%Qy-oN^&|St}$eqT&1~5>JyV4np
z@e~9zC_RCO%EA@AbI36_kGt?7ZY3!?xbJI>MqV>-g1|x^026;9-Btzexi-Z8JLBw&
zrunlIkpmT0?_*JZ(HD1#tmyOb>vz~2{%(IzC<3meI|joEFe>w`{9~z*i?66du8@Rp
zd&2XIx4^9ymCCml-@ZuEyRYLn{zu{s-9Yc<MX{ADjwZK=u&{=zu?QH2dL%iWu0)a`
z4+^=EEo?C(^`L;LGq9=gNM6*m5b6Fm?;;(k859!J#xjh9sc8x^-EkgsEu&satA_H2
z?1V}%9Gmx%*4C0KBQ(J&$dO~$pY)uzuSx8xcO$DpmovgKh~D_^Smc$bOgY=6E2rg{
zr~QQ*3Av>rgg{S>et+=GD3K1k1R;gL5}Ms7W+85r)31pvK4+ThULhrksvRH-t4kG?
znGjA>IEh{-fv^x^^5p9IXA5LiHlfMQJXE9mp$(~oE03<BI@|=Rp$A)HW^!UH*~d=~
zOT4?AR=+m#$z8T1v{yV;J0>DgRadUaJGp!6hy`yWUq}$Lt!P-rC4W_>JVNqxvHOa1
zCelEQrNzrOi|NgazEZ+fDA14L>R6foY$%)tQl9QGM>p3&8F-i$L`BZl+S=wAewttm
zNl{4zc3IfXk7cvQRinaJ^+BWKqDm1D!jc|26G&g~3Hu}=@D_ampa7sJ6SY_Yxx_S;
z*owl|JqjG#kiJT4ubqzG!+ZmOPf5AMZ*VReDla-VjgL1qmTJF|`v?XYh@T^s*EAg^
z5-hk{^#~YVpvxYvgU2~(Xs5YEuP`Y`Mftu5b;>_xu~l5(PHQ?+)!egz?Ak27<KMRh
z-Xju`g=`PUH4cN{U+YTpFWax%dbW4mwRyyJ*3}oIOZKs<>IVRTkX&j1Cgn}!7G*zv
zihFogpwczxesg^MzMoUshOFP_D(WR4hbQ=Yzw?#dN4%J;fI#}z{_bvNJEgH@T+wQH
zezNQGj#n*u4mc<2yJdC%gDqQZ)gV9Pll*JF#3TyvK3=JNGP!o{4yerGj;AoXD7f2T
z_ti-*@2G_<HN({%p4YVMme<qS0X9%q{We{#xq0(>r&$a4wKCw`vLJM$G5^5&X7SMm
zN^YPfx<u_c=4M)kcG``+AtlFk3_}K7%s!_ZEEV0qhy6PU1pjs~QY+?}XX^+mVwWw?
zV3(#*n90%H*s_O31Lu6~zCigKDvzm5xXMw$0)S1pmMomKzXczM&#mQJ{#P6skv-O%
zDVJ|eZP0oqR7v6Ms_|z(ZxgyPxq0=H{MUlN6p|OEoRD5MIz+h-bh6fv3rs@JqIp9@
zTIVK@nc1OLA%E;eK7zXgJL@JF4H(Ngqn|^p$2(sVHiOuTpEv{Du%CEBELgTNsGXKG
zK+&EN2?0t{n~_%+NP1jjA!!$*+5_uYFCU^g+0cU|B{a{=m}!_m0QGsY#kq%E4+~;&
z%X*b-<+a>rIA`Bgzp&X_HIn^$W1yb3i~jeW+ZHA#L{&M;K&s83j#3lu<z#&GP41K<
z2_sxgr}FOp{SB+E&_JeE2tLO|{NFOCqu`rv!~9(3rYBw}f3$6EZ>U@CAUCM*BwZ&B
z1@^eJ8QK3xy1jSGx{HzqEEA<GgitLcfZsC%4jMqsZz%w1aA-x7!cO1zT=5Nt!Tl_v
z5DB*foj5+5Nm>iDToCja{9D}>E_crsG^>w(zvk!K7SFF4;4y{)Et#->P~r4#7Sk&?
z$8?Y&n#<PC3A#m<_{zhj1gX!Gv3>Q<UCqW}eXv2uAM-rrbP4ba$9O3oO^hQq-`S>U
zpZUP7g!vnJ7Wk813p8XxAvuR1)^1J{OWT}lgZv;AOUVxPDCdj>oO8xtb_F-M6MCB4
zkfYT3+RVw-GsKuKIy$9+ne($)9v!`#Ztn>VxS@S!r}lOJ`&zHf=<iqDC<R5Hn5Ic@
zKBl3XQ+_r8Hh$k&4^0!7^%kvpf#chlr;vE34w7H=957B=U_8;#8T*lgi1V0=E#F=5
zvz=>MnNHtd_g`D=vC6IuwF;V4$;&gM#q*P^(4FzDGsw%e4doWeU<LmBQOw@v^rncw
zu;{l=))KEvsIf@w9U#A8!Z6G!7(H{I8}YL7bUFAuFWk92LDeZ15}BJ%htEWELQW&w
z&<`g<sI@s=Fy&VOpwgvZ2(5n|5yg{#R&IP%ry*`!KrzxH<CydrxoS6X6so~V+yS6!
zV8OddL4KXUB0zs>3yiE9O2~{UhlQ~aSP>Mg1Zj)o4^4$clWi=ZhAokjE)F?k27sVB
z8ApU6AR)90bH}fy5n9yx@}ze1qN57)xQTFQho3S|BpupCQ8WJt;PDeUI3muXhK^9G
zpTXFLJ8NgHnd!0%_Ty--IRqIcqTAdL<}8ULSV#mE_gP3}6opvJsSPT3LnemCS8W*;
z!v{=3LnVVH(HzJ(2AmXIz4Gl?j+`lYGH(TPg{9K3%atog0Sjpm<T68ci-qJeqddB%
zAX246Ui#}+)1uSg&(=!rPMp;{Y1EE!Snl~)^CtL3{>WNFQWCmD8Oj$=I|XehxFK18
zJ31w9^3=L*Uh<<BL5NvPZ9A&%ArKnVdEkf1GtkQiF(e=xR!Q78IwAPUDhg|zW$%Bc
z-?`27IDMyghJnW_=R4o+5r1W`exDV3-Q+;g#b7(K)NfJyGF0l|s+u{WW594ag`BHb
zQJexb1p_piw99rL)cqa0q2ftHP?PL91Q2NB-CQDPnbR9#Hp}+s8^KD7y{J~ZNVH@p
z3Om>d{L^m`=O)EjK*uzxn++JUnjp#9Kpf|Wy*uX}*<MxM&H^?VK`Wj$!#zrl%$0HC
z$$;1e19c~}6F#J2J3|DM&XrGwGsU{v%xK^(^<<GnWDTYoa1C6IAJ0`sXKBK+CK&`5
zFyaq{O<Ht*Q9Qh<!P!}Y0KyQ!H~xk1Aj?T!H1*`ZGo|1wINpP~*tV_@^HOr%r{Krv
zJmpmLYjfCoZEazJ?YWc}?ofv)c?LUsegh{Z&&ygb(2*)xqHy5ymJqaHu%s2Okf5D&
zUR#O4qGA_?Tthi#1h)tpkgFY1F_>s0OX77*OiDqxSok#r^3wO#v1Y7X&~Yw{Bbl9%
zq2R5M0+fI-?GwD{4?Dt(>^O#tA-pm~wffbaL?}rsd-c&l=nSOfx_IH5<l&ey;1GP4
z6d<DEv=0G_>h$K&nAoh5G4zEoa-n~xayu^5Ohh^altKk(lXG2I+^0%DWUl)*creV9
zO5qVfAfMCluCE&eO31*@4G4JfFQDLl#P<bJ)pZl9%hI}MH4pa8+YkJ+NASUUcgAcU
zBG--}#(xtMKdrXM4}9uMZ?Y&C-k~PE)h#eu_@g4}S1%UWl3nJE+R|HQ3OCaOSFPaz
z#|tz=yGYnOlon_$6fkHzFB<`83CG)+>T(ybO&!3kO?=b9egyKN6INnjlVkS_fWdA0
zHm)3N$vJe}IuSJ>wUH7d9aP)j6}E>j4j>Dsl*24MO>E8PT5rY)-QxE2>k?ntK+TUa
zQA{62U!9k-ajwPWopVjU0Gg2ZXgtO8P<6};E%p3>fe-+O5q^W?_WGSMb-W*)4R*>U
zW{#t0kNYJKGsWOQO@(j^p>35UjGlT$WJzcvjhjYjcm35|%~4Z!+J@}y(dynxaQ}E`
zqAh(6bKFG32M|Z_aqPj*-vR;xxj~fY{}UcfnoF7(J`=Kvgq68Jv_r0+ks-jzH|cJx
zCmlbN!S$;oR@<qTJFzPNv=D5$Z(^MULb1HaHB+$Vtc8C?Mh5>Z43G3=Euer#-3|en
z_0=GYa;I;sPMCUL9vM8s85HldLlEz09K`RZCgAte_mh|R6HTMXinh<s2L=#f;*5(n
z2<rxp9!(v8VGIWl1VsEh#Y*&@G4CUfyo6rxoQF`1PIxKktb?Ba=b<$BllW%l+K~d;
zxZ_uR)#XKpl6g;i$J@>B;xu};1+kN2kV;GrO;>ygQmXNOR6W^3SP=KU5VtB27?cd)
z?`T>6X+@eclP~{XgYMkp$H9-@XW8ZRzb(XTh}Xk2&VLKeAT23~@RSXMcycpdpjlH&
zbBZns3NtkO6Oq~#g9CD#>k$rZ_zxxjhAOa-Z&VeT0d)sq&9WAuDrH24;yKLDS>DDF
z;uoABpoS#D7CGLP1+n1(+N9%}`%CQ11<2V4>|UfFWQ2>}e_bXw&rjk$)V*(_Z&=iS
z*Y&-%QoAA8EoM|Vd(ADIqOUFWY%OeX`jT@i-OA&w7nJr@iY?2!=|Il8gm`P=)c7j0
zohz|b?NRh@Nc$J`6`WGbxEqA_OYD^XhUzv{2nSe&U4D?Rj!%77B#%-*hYPQIA5P&Z
z!OmJs<h<t;I8+`92|X%y+nD{bsHA>0l)s_a{^V)wTYvk~&s_92wUbs8{-u(rexuMu
zQ-jJfDGlcZcxY%qhEku$Av|oG$g_Z7R(BWB;dbVtZyk3%knHhj`Kw+AWeL%B25FeF
zwu=dt^43)J`q5A|ygcXW3niK4I6#;<1<8s+!t&W=;?Xn-gaqA7pr=7y0<Uu-1v%!$
zTOV#BC>^0IFCpe^`qC+AonU^M-67k?GTGyA7brz{5%<}G)5V|43jBG*3*1Re=kxNO
zQDjY3;&UTrZbHK;yTm*g^)_T)wB%w5y<q?N{<fjYOe8th8vNr*dKn8@DKMrew6}|X
zKMp=9<0tp87_+0FaOgA6)A2}zf^S@$qGCD2grSqLVYo8s?0Z~cDJHI?O5>gJgDf+V
z5H0&Z|FH(3zWw)XZ=BNlxuLu1Qq0tk==<HuQARy+*?40fUwaql;|RYM$AWFSY=s{9
zbPx2B6v*+&!0C4H$@=0MK89ymJ`NvL6(eP!00coK9$aoP3(~wEEiphiw#3}a74;Xb
z$IwX-D*k8%VBN?=Mw9*Yl_hejliC9)D#~_-4cYx^_3}LP^rvs+PRO^dlL>XwctZZ1
z^>XCk;0{0c_NU6mpB(iNtVx!AjzfJdzIxmHzkGRhWn3H>;BW@y0ioQEFZQu?e;kx@
znH5ku;S58w9-A@I@W5cj?6sr=4NyQ*Ju(MSsHLPOXxh84l0es(aiT?$j}{&DpY}=R
zQF{!!X}KVZ1gGFi_t^v1A($Pr{H<oz*2G-X01S4ZvIR#6>~RE)XEiR<SuKnD&?9v=
zxo<Y2lmWc5n@7QJ-12<D7p#`STJmF-!2<JV3}tm;3KhT#LA8%e8RM59L=Zp(W>(3d
zyfbDK)i$v5A;Tk$fKVPmIL_k6*$X&g?Z&d@kWPx%vLEH}hw5I6`pH{{nH0w~Kij2j
zWDpC&!qun~>N0b=prY=(BgH+1V!9t^e&cyPY{K(>PS~YObDTnSHZT4#VFKrI{{<km
z#Z4Hss^DT|BVdy5dDpr(-CNXaSl563m*)Z{Z^5`+50JpS?Ib!a!63q*<~-P-GYei{
z=3(q#k;CK5&#~EEOk}md8Q<Bxyb>#}I-3I{n&P<(K5=?=qAm!>M37uhJCr14<2{Ai
z?wbAXNmyxiZ52C9-$CXjcUMrcUi1I|tu1h_Mn(BW2Kq(^$6BT|{iHk&fn^j*VVM)m
zWx@#zNOpz!d|}*sYNZ1IDD}Gi0V8iCCn@T53mVlmashcPVqhYs92O)wle=O|qUHl{
zC`kD@3TYeJ=?&}Y;C2Q%0DK4_F@sxTN&twEeg$(<9Dfjzym}DE=<swhwLnmC*oV3x
z9-Q5onSKdsl`<Ew#_0h`!|J*fbDb#Dbj3ML8rOLc0!;l7)E4$(mYiKw-al-ttwRav
z%ZA0(j40I-tjw&(T12<Xq<R&sild=ekP(gpYGV{-WfrF=LO(L`6m%0*!-}(#OGiDy
ze{nS@El$FMQwR+;xy4dFd2*3t&B7&#27JmSN{Q<E3C{l#emFT(5JEzuLj1#n10&Ic
z6tapmbdyxVRI)Q#CQ1ISEsqL}M999zUyimmkJp#r|5}7diW+`S`X;*|<u&!=W}aAF
za51Vf<yyS<WzI9%(LRt6!Z~)JbWs7&e9<|hI%;7?7|5M46i)FVNk9eUSEHE}Cb{2Y
zX6WgP`<6{@8WBaTlHg)y-Ic;M3nwzFp$*JPpb{xrH!hGA78)F{2*VN?hawumX%!t7
zog1kLO0><78{zpLjwuctwt9TE^wJiqG3OLCMFyG^uG*K7KQn(bOc+QRYO0HKe-`GK
zkpGwRloFp*jXD1*Q7nvb)^hWzFjKD&Z46ATEzjWoi~kXz;#1gE8PWL-6&zVFjjr1o
zBOxw8kmvj3lB!p)*IBqb8+zIrc-RbA#4jPAo0+y!)5glc9igc$heGoY&P5?l)eoS7
zXE_MXj!gjx8LEe)uu38%fsOZ#MVSTnDPVAiPw*>8fK(?;^w5@-#E5E|lOaS9J0`2z
zH9!R!rfV0wE?`P425VZCjUK&I%3gMeFT^jx(YEjAkm)Y5Fb5ZgJJ-n9s3?n6AU~%6
z)CX~-z}gLqaZ`wdjApMde$>H-`{!&?i(OUgK3OYiE8RKI>t<8Uv);a&?<a;OjcH5D
z3zBq+RgPmeIe-X)_7R69Eco>7)ZCPuO4@=*l5<t~R;264RT_1sqy9{6IbFTK-Ld4*
z&o_6y8tW3&sV-PF(F;9Va9l?xy}2U=PxJ$xn1%rAO!TG)^i#fgmp|h><=R^7yBVUA
zdV+gBJyax%w-7u=Kf7T$TA?>)_^y^TQZ?a|!F9MbTrMxQhP%e{7WC+2Jh?5Fls0bb
zc+w6QFUZI&VL|;*TKI~u2OD(*({!C!_7&eEx&CY;2||gDgEoa(>6O$)WU%TD@1HRw
zF+YfWDRIwZs?NaH5gkbaiR02FwY()lg?(bUK%-j`Oei*NEEfS&^ub#EaKLVdgBi-*
zfu(Syhk;I^M;MtfZvjP{NDn;29UB}q?UI-n866hmPm-7JqG!9tHtWAC%>QB$9j{fs
zr{%n`m$apgVUNmJYfq>1(3%u`|B{q=*=5jEA?n<6_vZmT2*FFt>hs59Mx9p85n_~x
z)tzoWWf`I&EDfRIQhiAIi)w~j;hDJNBf{34FQIxltB8fDcbzt>yw~<pJUhyZXc;6Z
z?N<NEEii8d41<Q5ejaOZ$RUbqC;&qj>_>_Y_y%z84n=r>O<CL@d!gB1M=7jGlKaQU
zODIF{G|74kdtxojM0sM|t|fSZ3jbp&&KaWVl;WeP_0wX~RDrr}lj1#skaG7#1b9^W
zAXWyelu*zl(c0U~i_DR*hmBj&u`{w63@qr1Q6-+3NhHA;fFQSGh)it#WDOQ39Cfe_
zu6M|SXEcgxAjoa*+hj-ay9;a}lepAaZ=<*X0z)f)i{rEbf8)=HB-zkVor27oHGHaN
z9bzc9(SGd=p(x8^e}4~Gd-7zYL7;D2Ktc#Hyg0a~o5>(XmBncc>APq}j*;kdM;J$W
zpr}l)6WUL{3c0S~Mdv0ir!4_nq69a_og$`x8?Siu?<}lRuwSZYKKAMG$);^x0+sY5
zLKkbs$m>e6>+kY(iHM7Kr3L6yLgxpASFuyYtU~5w)WM=9)2<tY(dJE!CtQRhoTU!R
z_jVphW9zGuY;Mz!9AT;jNOi2L)j-<}PiB2VBVlQAj@&8Nezu!2pI9B|yz}|DXXIWs
z+>p@;i=sgj5M`uQw*6uT&O3c4P0y76c?>1huHW&k#Tg*HG3_rO<4Qvoj&8ECk&BDD
z*4&;prlrvfM6C^Qq&ru7*P87zm@Ov;tf^ySNq_rGP0)e(C}y1At$}Yijt5hZFPt%E
z20OR*csuwpc!{#W1~XdCtX?H-vVZGGlVC5r-#Da}hTY(Jsuz7}M`L)+co1`Y!QrYE
z$}L_V4SMPKA%4`M`=oH*;b#zi01p#-&>qb^;PX=F<t%bGqvt3URxTnsZ10DW;FVd=
zMa3PTqZ8{F?)LCdXK^0-*wmX8aaV-5zi-UlzjPJdg@ko`biIaA<rXqcWL<SZ{;oS9
z7A+!Ac&>Tkzei8Ujq4ky$fXCn1(>wCuw%kafxnURT^L#eyIe3{SBg|L^qFI^?}%#I
zcrqpVEClz;l<Js+E6R|KHEuF~;_n;1v%eIVBd?+8nuf_5TahAsKly~EAFxgCsDyX-
zpnNCIwv*J~0nnrBuBxT~y5lzY4S|phf&5P599YV_+~8OTMG*o4b$X}UpWBDs&04~!
zyM6nEXoQ0iMLC&(EWp;s<9k)z96Ak~^0CIYYD00^pAs*{qa&&-a3Lquk}YXE8jQG@
zr`!=#q7LTQL+WmNixi}{F}uONfeUd8$Kf{p7vPuekC4td_F89Y0sQSbk~?Rc(Pu&X
zn*gS_OXb@w4e*cf2y2Mlb*3jgk7<<8P*A4b*0Fn86Z01d#+`p}wC2Ykd=@}r+B|;7
zaw{ZW;P*ICZy0Ls4*glMkQC@#2q_Ad(lE$LDBpvFrHh=DlDyioj-1e4OOfIU4ma7$
zHj%x>Xa)W5uazA-vw9_xAjTeBK}wsddjg;m?Uqz?dyt_bl%^=fpBI>^tc~UIc)R|D
zr4R}HZqZX{=(qsfcZB#oOFn457md$gK5ke9H4v0Xl|1b?U*B0QJ?X_m!u^U!Z9Bar
z5<eA_`NLxQ?2e#zYk+~vOXbCGB^vmVH87cZ2FB(4v98pS7`=3ea2qpSDVvt&KPFj|
zAI4`UANm3l(9rjzi5TlIZcn?aV%ke7rPZF#D+}YzXES^lnuBMIhL0?bAwHI|_)&Pw
zp5ZL#VcL;b)>bSCjjlv87g6nX&>PL2=EX}o4O>Sw>=E_nFF~6-u$?6O7cKVnpHzrO
zJTr@=y~xmU1UHl15Ph0qB0%Q^f#m+Z`S46y2JmF>2H<dm{)JP)bP{Z75xglMxeI-*
z%7e~m7+$kS#&<-&3khZCz~cEu5Ga%_!(b?9_bh%-vp#@soKQt+ts)v82n)^xr@(mB
z+20c~q7EHW=L<5!lGwP8m>>8Kwt=U!@;tO?z@)Q?{Vc+3VAVSRV~!-vcu8i5N=qRJ
zM~l$mfu+q@H~d?n<vY8;{hQ@nfIvAt-`=0`Z=x9}arb+I@X+y8X>BRA$ro`~UEO}N
zK@U<D-e%R-r|G619=n>)U!G<PJ?>{)y76B=?<5_MGn5y&ZPViPc>96z1~}VWEKpOi
zHLW}lBlwus9MduItJ>r<#gJt|v`RK-DT!Kb+P5fFteGA#sx9H{D$)bPJnfv*N|uM|
zx?D!0I;L0As~^;xUQfO=E1c*@W`!TG@X($5!;<Jgp~2<GyOxbK166~VG@Lq-Dqo-G
zV#eDS@4dvMGpT2c9Z^WkbSNICgkM}l;F(9=*Xv%31@ElumWz^ff33xWT~xMaj#SQr
zR*rROnJl`gHr5Wy{bpFGTB0vlN7FVlJ&GI68fCGLI#Ql9b33P7YBOWgVur<n%lPbc
znnd4klQLKiTmU<iBZQ?g&1A)kTZFVZ!`ER9?N}Y?`EjO6WYG}J3Uk9EuMPGsLnqog
ztN8FXSW%6ab&=zYm%I*`+>n*MT$}0oM+d*HKDn(N@UCes@<zqNMW%(Suk-Ibb}R#q
zKs1E*08{u&N{ozmDfkT)oMvLA4Twgi#Z9V!iP2bMsrie?)klFQPHUcc(PgxnDhi6t
z3=emfnE(VKWb3<%fbgSsQEc`=AW6(s<5&_e876slwemzm0hw5{+G?%Lp~R3+wez(L
z^8)0FP8ihD2su(<9ET-&sHL{Rr|<z2(<hotEtij`w9~;oMNQE#kOn1->J$R<n8m?F
zO}VK+Vg`03l)(xX_(=o+S+WLjTI>PYZixTy_k{H8S!*u0%$m-B^<$+r_7Shourdbb
zg*ny8S12n8m%`tqTZ+|VNCLI%72zl2%Mn1p!2<n)0{nxa2gqd?sOcsshbm-c)(?>k
zCyHBg&guyu5JLJ8$(etQ=l>Ie`-T0Wc?P)w5ex(|N3$?6!Am~Cag`%9)#RWdkp6KQ
zAb`c=Pzo^7oB;lT!^h?c_~#K5733A?=N16N{*$!<NG3J<1&v={#&PQ5OaKU_Sfi@P
zNYlKcVh4Z#;$K+jj)V#TGPpy|j2y!sKscukls+;vl~@Ux^zgA$#o^fMWRE0;YMI?{
z{r}x?YLuWji$>}&laT=o1rHMw7aJQN0{mAxp8yn>sN4|~X}}>3@K1n>$ivD)nNd?v
zlV4n2S;`kRl6Y#}qh1r@pjpkfzS*T0;*gQ*vVLrH3ed;SzH3DrdwUBU5cDr>FaUr=
z9BdvkjPviglwCH4MEUc!5uHx2+vA-UqL5vpv5UMCp^}ruCROTRl*qH9lJ}6EIZXsf
z5Rk>0egLS`zdt|zwtV%qc*(zixBj;LRK^Kfst|dx5&DPFc0VEz7nNqJ9}fG(z8ewa
z4+$fZ=kW7X7yu<0oj0nl5oU~m)Q3pn90$=XUEP+KMQLe~m(KbWGegT*JhEi&(1;>o
zlLQwt<Ea*|T|A#z1!rPJKE`R$zLUX)>#?hYj}bAXwCYuk1rcI&tK31MMlOPUYMrlb
zb=2bAH+9c21G#;E{CaQ4o>ek=dHY7aPX9|b_3+8vCf7i-W#5zcnU}k7(kn$tlE^ek
z#I^lE!H!vrKA}D$g2qJNJYx(7lWEjU#6Dt|WC=f8w)3O{RqH9M?QW-fHgMORQP1YN
zw344ZWn9IQEW4jsr>Zsd{<0k}TG*I_U}k#q?hqbnoIZKR*hv8=DBPG*(yYPZzbmRO
z8)M@2ec$>6Vf}o4x5Fs)&}jW+uVtwH&2!y4n`V{!{?##BGDAG6w7}HR;B<c%yZGwZ
zy@@xw;-FjmeEi<|J?o(ReDCx9nVojBP!J~xCV6~hBBU@<VY^0qh!EKz>9TnApW1*<
zx;O1j=?f(1DJ*$mI4^|JuTFN+SVSf?dU1@ZF!I0hK>h{(Lw<-%+^X(~U;r>0NqzhS
z5?N-oayx}yVJa;g2i&Rc<K8()2uSg9O7ja$^*`?t<CPSg3XJp%auo!n8RQahP;-tJ
z(tTBQ<jQ})cldlpiZ)s|b8YIXpqmt~R;*>)Zc<JB{Ii;soZ3YEc)-LZw9DC}mgYvD
zMYE|a5^6?LD?`baB!PSjLMG!WoLm-SZc0*K3Kk;CNidb-q*7LI5~;~1xs?Z6a%xJ7
z+KOsBOB!-&TB_QLE9I3rWlaU0^|_5@4Y$r)3wT}6Yrd<X>$O-Py;g(8o0Fl3je)zh
z2o<7AvgO$+TMcd8Oq?m2nkx9zRWayee7!pX6P6`(lWHrq(K8myWkOPlLKOv(Oi2O-
zmIN$j%aj$$+5w;-ipm5G3C{BSt4H{cWWM&Zme8E%2Da{NC14>UWG5=E-(+gQLPktZ
zR914XaI#NamSYshG8v6~i@Xd?c6Q9tG9|||nZHIkYTrG2n@724tTtymdl^=EpS_RA
z5Ki8vZGL6z@N|3sXKN9p{O`srPHib06YB!E$j!*hz{11D##i#ct7OH6@4EGy>1ge^
zr+0gyC*8(us`K|G_*Sd0I`!z1XXB>KJw0torA7DZOs7GX>7|=|NZP)PAoV+88;sK7
zb%GP41{&N?e!qLeM^?)YlRjv??NPw^3w~`!g8{`Q*)qOWlbm92-^9q7TzO#8Co2Cm
z@eRk@Egi(hEUzW0cW9%gXZ6vWrCe^3RH^ZIc|`RP!uj7Ojk$7XluJrB;|VizQ?4#U
z*x=gIKYx<(JsyU|mK;yQ|Dc(p22XGugCk3*i4_mhQnR5*Pc_Y&P%k%+6rqWL{Y^yl
zlo>)M=K&tjL}MfYPO4dx_R!z@tzEI3QRYbhMqVTU4ONGxmEJwQpF}*imwz@jZMEds
ztZ{TQp5(|Vf{q)~U01MGtHs*jp`Vc`2;!o*P0$=bf1u5j_R%(;gh;Zi#ZGr@blh|*
zbIY7-LTbf!G?Be`JGn1IpN==bg3t3#I}tX)ro4jGALWaT{+K!l+uCetSp$+dw=nc}
zM*`-HR=XFV^@LQJnMnmh$t=Mc1k-RrNmZkqfK>&QK*(4=C1+NECEu$_{5cCC5jbUQ
zU%?-XNL1{RBn#1*V(HUE@+-i{2&5J(Ozq?(vS#_In4u~sAG3huVr_kbg=8a6+_J*R
z^uu~w^M<U$+#V^$hB<^jwv0sv5-z@o8>rr=*gUfUzU``h44*D$oaU;6Ye(&nQysln
zo;)|jb2a2a3kuZRAx9M5nlF+*Vg>d6K%=q%dtNy!t_`6_ae0z>9!ysveEs)Gv;TxO
zNix3jE43eKRZ@zkq({(0G=3GoqeJQQlNvb$W9SB>C-92VA2_%9&-k$5^qD5o*Lfv_
zL6hI7aDWSYQ}TlRa6jxsh{BXVNO<KxS?5~G6soDPP7#v>6R!S+PhQv^n#UuqJ2}HZ
z)FZ!Od)N+W5dK9DT*T_Sp)glF#%P+00)^Wg!0*3P!ycKo$SWHkWYXM+3Q_UTQ+c&D
ztO1*LBlk8YQp&^$yzx`wkUW3Ku>uCn7MrV&t0nUR*92Ap4gC#ww(Jfve*AD73mWkp
z{fw-EALh*KKKDqojf`x?SB}1(d&0jKt$}$*Ck%<^|2E*;|5o6Oy%YbgmQVC%K1IwK
zn6L=qHGZ1WWEPx7Znl1WR2T_i@Shf1f&p^d5uqZ4pj~@?ixUwh4+-vE;r#=i(v-4|
zKsNd&7K6L{Crny>3bNVDJElLhNB0a27}Knf&04C{d1!iEIGF*2Yw7nsY9RT7FmqS@
z&MC<d)^gK_=*%F+iasQBm=z_=VY_>Mpd@;gVWv_MBsw8WG;zt)gr~jffRyN+aSvwh
z6ok1V6E4QzbqRh4vLUdVuF^{O=pXb_mBmQdsdbv!@0-5SIGq%UzX1&anA<Fx1;}ZC
z&uK#_=ZS&ycZG&0CJyIj#nr}rJd;NY5P%&SQV;M`P{8R@%Gd?&<VZj_LNj{!>8X*n
z)jcSQhKKA}{j?TPBHJ<4FcJGHu_T=}Dj!h6GO`k7gKGxqH?>8-?*~kNEHqb~*bzH-
zkOaACiN}w!`qi_jyMR&eo*32!WwmlkQuR5C@ZqUwp$lt1QIZ8@5(&Y>@#7ReMHEhK
z3k3jYoLVB@UcX9bDYOmv^}}y93kKpUa);QZ?kD5>Okp#+Ph3c#5yL0skXn`M_G}g?
zUXr0yH0-NF#a0XjlO;imI!JGO-!z3I2N=5PV=y@*nv6VNP&dPL`Ug#kxrW^JwEk9c
z9V<Q{A@+N;Ip(HvKsY&Q9?R~Sx#wt<rEs;!slky&_Y1LAkBIXZbnjNfQzP%imjE%|
zufQTf(<&*ubB^?<&yQ}=RLxb92i2X(Kmu2D!^b`<yTfot>R{j@(<Z?61sk+pu06L+
zdu*;Q#ZHHgZl6Yn4jXs9>e6#HGIR>3CZSV@S_p9ANXfVr*<<2{&^nzF@0a=&P7NfB
zE9wYW!2Go^5fybp(kTbW##OLuX$Q6|)T29Qh$Wnap1$;<XvIc~l{eObr2q5g1{JzR
z_*`<|0fQQ0Slb6STj`qIRj~**ZDgw?nsvW8*BGhc`_a+=R$Ho7ypjWVvV-1mPNUlT
zi6PXPc)h39HD4kzRhEP*s{8GMYScmFVWWa0A}x_)6$XF2MdhpA-E?#eV;E6Intq^R
zfnLUoM>hK8P8>OXoRavlHqOv_vqo_XS=HXlh(#Cc?5Oq}`dbL4_9?XZb+B2yV~i-V
z=m(>(@tvCeUCH$DZmFF&1ebcX=V98|lhSpKWSarkr?bwAm1FC9#fg-HIGURni_$6+
z1cV7Qr2YHJ&li_fF=6a?79aU$ZUfsO+S0VqENkP!Oc%u(=>XRv;7xohGv9*5F&~&S
z{xw#)T(TP6+#ZDZZnNl07%*M`ec-n}cVdS$)Z?RGUKAoP8V^N_>pFJeGP{NDQxfl=
zY4BMl*n4qIj9^5EuM&SA?nWP8c6QoP;5Mb#^Wc<dMebi!&2_e{=`)L_Ba<dLKCf=j
zuP9zi7!Y!j;B!20?pdq9C_PG@J2T1AH$Hg^^N1u3O+{og%}QZ+bu{o_Y8wn*;e(WO
z$Sokju(QTT+9y3Nd?!eDenlRTSfI~n?eOs6QV`Vi?yulRdkF1(Bd|3v1Y^q6cT&pd
zG&`81_Ku-6P;0y`qJYe}JR*Hn4P0>7;WD&hm_j0c)87>A2$D!{bf78k_yt>YTqbOp
zw&uF7h8R7@&ajDp7FCs&2_g>%A{lI-ansyANgo~dHR`uee52-?EnN$57}2&YiXYWQ
zMILzY(RL6>HYH1Ukx<<t&Yc5ft7#>TJV#L7z=w#f@Km-=<QcdhVu+G>#MMwdt@pJX
z9nR160-_}SR`moVcRX_w>3V||=t%8icCYNDYNEHpmb}h!hnGTtGqp<;RRW_H>~yEo
zcSKb$Y6=L5MQ@47J~fevpcMbq(zw5rah%$?XyYYZVg{CEo4AJ2sB-s5IgV3f)etx;
zt(|5kv9|Y55-!{32VRO`j(8c#lle%8!JSpPL+Z%cdO<UT9wxz_-s=jf?AlC{CCzIv
zh{~kpz(2}UCaf+QB;i7wD$OH910hGkDI3w8IvY<z)bsf86c?@7!;&UUD2Nu{o=|U}
zZ)#Q1>j`%f{5l#)oBJRvO2MQH`B;T8gMcb$xd1RkO)&Ahw>vb}sO6wQs{flWT%ng*
z&bo5wl3he`$SBWHfojm>=|sb-l0vG}zEq75`Zjc6ZkazB^0(b8A=SX?gS&o$_hljk
z!p?x_jbN80b}Q8J#j|Zn_4}o`=P6Y`a6Q_Wv28J+W^S{jL(8I*&)x^<5x*aj2^1yW
ze36tOjbOaf)EI|kQaW{VD*LVgXgGaX3a)aU<opKh2S>3gd<`@hJiXO5(xOP$UJ%(i
zm8@LgR_(NDKMaDaz`FT4mt^;Ni0`)_Xgl{iS(w_^)7wr4$Tm$$oBBf2o<{lb{K~M2
zQbIs)Q`0-rt>dh>Oc&T{`mqzs2t>@~an_<BU$07y75rBt$A*`T@_m3-)DaCqse{?R
z7dLYbaaL?9R`BgtPb)pIUOxWojf;<tfOof^?|?hID{K5@aG=gC86jY15=i-0>W~v1
zXi3jjeD7LB9RN3IUn4*lK;I-l7g%2=Ko@FXC!iNX->CmAkRDhMq!-=`#f{ZYY~Qy3
zcL0DnK;9?79D(|~$o~UfK%&2+y;>NP|G$ay>K`Ue1dJdd7@~_Sv6RxwDmMuAe_!^g
z?u|45VnLQyZ02hFp_|o7F%6fX!XBtP6cB2k9{qZuPTW4d;hC;WO1Vf5O)QAj_TN{8
z?Jpjwcl&h*pmw(O2`F}U{|l5meg6)62&{h<{!}tl_PB2LQ~QFgz0-HFpV@xObH&XM
zFc6C+UANjdm3uUZbNs$8z#xc47-0XCa`VyYTAkitY})`LOeo_*DwEk_b#QcYc5!uc
z_we-c_VM*A|Knr>Eo~iLJ$(a1BMVDFm{7)rRGwbmKEAiF<p0bA06*=k7-Zk#x#HX0
z$Di)qe7(Hz6z`{a&Fyv_J-6F?-238?0fOI^(f@?yY51Fs>Qm;w{q?g|#DjtXc_@k{
za+~>6R)XZ*Ur^~;_&<s`(d4TK!kPtCmXfP>Il=`JPaI-m41qE|)})|{RywJ9DC1?*
zt9*2J=dyAl)a>xLRduYP(uWNcq9~ViOoN2C2STh7F*s1RTc!VgO)Dy{-HS1cBzYQU
zEdAAp(t04pNEB$u3wvZ4WxkPVa*cRDsW?pIM8Cn?aCxSASwyoA{8i^5UF{jvRE{Jg
zDR&Q>ZXMB<YiCpFBmvWGHEyPe(1)r<-9tP5$tbdh-mMAExHwww@?zQxTFBzc+-5Yf
z(SKl>LJA(7uePq8sVStZm<amsNqH*m$@{`*trYj&qWl<pz`Av;r_UCvd~8$`<bzPg
zVr$c!Xd6mKD=m{lf(Rq)DKTNMWJZ-Ax#mxP)R3YSr4i32Rw85wGN#lDm$qZb{_=lI
zeJZjPqiyR;Vt?Obl_+g?NN0Sow;H4d8r9HS)(orc4C0o?R?7Dt)5H*<(-n-mYi*IQ
zAOhjgX!__FgJepOR?dj-f+_?Vd07z_8H6f<`pBp>EC$)i22*QLTMbi-Fc*ynvmI=x
zu<rSS=U9%8&Bfa%Cn`$AQj*p+7^s_aA`ODxK(kAJmp)-l@e<Y8K!HA?JKo4`g<WXS
zc|9jpvmL=;CDoHIt|^L+f-Ly^PHxCZjwyOBKG`nVu!f#rHiEAe+UQF>=@Q+c%fa_E
z%|njp28eAOr4;y=8&es^+n|G=lxA^5u(6c62VH6fw_Q}Du#+nE4%RzlTvR)TGqnr)
zu>Mi)xADuN2V)4iE9=Y|s!HzJRfjS6#xE+>n>8&(QJpBm;~6+%6@~a4kC{frcNq23
z4x)iLrc4$F6-;7CokZ^YL45Gr7UOIh^%mV|865I-D86!mZKX@!{*9qkxfeCD{WU~h
z!xkq6u9PnL>D!so-2Jd!;>tTQ-zpD)8)kODoNV3>5l+7S=*Wg<cMSu5j)Bqihg^3>
zlHzhu;E(pE5rmS+jw|U)2a_EH6EbpPAHUN=CwmSDmqc+6>zHzy7O;;d#{wO8tfz?m
znlHC#p3u<VnkvBYcQ7!T<YZ>UM+bd1EYTJNqoz5EK16K?5!Dk}G~6q`1ph>zWfzN>
z4dl9f9eI0nJC2Nxe7?TR4ks~z<@)}v>^n}+&Ob>XrQzku<}f&0ckx(2_hh^c+0Vzz
zmG`OKiA)jxZE*8Aq`J1q74L?p7qvY=)%#j8#b1oACoNxIj<6SNwT`pLg?P@L8_Ycy
z-s?7<$IZh;KCTiv_{)vITsPc_)OW6!?%nYE&hIGO?<}_b&UA=+v!9rAj~lmNTppnO
zS<ckXNNzT`fAMUV^gllF%GbNcrbq0x;(dg`bD_wF9H0gAQ0F_GA~wnN^Z#p+14Kbz
zi*pUPrVHjWWe;O8p9a^L^>TQ#hdr2U=<t(?{>sq^W4WJ9LWXxtCgiH<h4F82Cq;*R
z%H>M;%@GTYGO7H99q)}^NafMRn)@x04C8_AuP)CppQ|^hhQ9e2ut7LHwYEQwMBM{+
zS`xb60r`**1AF*~&vqs$h-<3hV4p{wd`8;OIm`#4{g@2qDK=z>&)z=$8(Ydlm0^=r
zS9@t78*8q$_B!jX7Z#t8h=iPyhK_-skeGy=l8T0&Ng0>5vgN_(*5kK%f2=suz-VG|
z=W!;7D^AiZFRoKf2dtNO?apGk(w^4@gb`r}4W-u963Nz8Q`*ShSCB)}DO7EN#+Ea5
zqU4WjAFlJa#mAt#mj{eb!0DeE^jD`#!dcGIBcuCAl6JnACF9iy$SY6tTosXzvZ|wz
zQ`Hcyyc8j?@>*>%3Dq6b4fVt}4(g3lsKK~ULvg2u<8_Wk;uBwuCN*W6VDS>RL*YRM
z2IW|rLp#+)x}3;^%i6V{_X~fxJO{18NNaIGn|F{TusZCLBGlzyF1^eih~ey9F(4ks
zn?!Oqmd|Sv$b-}~{k4Eh^j7ZjlDB*mkiV4r*I4R6npaw=?RT)?uJlM_?^$XudY8+K
z-jmdozUZ@kMdXd_)1dTpytVrGTMU5!KyK#D{+~Ukq)w_8_v-$z08mg7&~S+<7&-XG
zB~_`_q1%9^X22o7{;K(z{#Dwmlp<hYl2I}Vh$)x-9|<&lmtj+uy$B12yK{9|q}0rO
zLdxXSY0_`hxY-Y*%atNnHW-AotXzUpDphOMXUK%*u!_F=eEgaFoBxN=^?mr&i(ydU
z(H($yUdO=6BPy++Mw=cZrmcLzwm^u;tg-P)sMMl6;}({Y*PvOiF-xo%{z|||m^cLg
zx+r&7&&Devp+ci}od!*sGyg4Vzd!V;bn>vL1<~M?dUUuyz>rfk+}LsQcbeq>O!K`k
zzV@AQxj*~JIA5g5kgISk%iZ#EpxSu*zku{4X<i*(>sLM)H6%(IGqn@B4n!+bu2!S=
zYwwe<&ET;0W73>u8+P}j@!su%MF1j2jS>5J;}^HYdVvseclXD?B;|mhO4}<YH;c)y
zy973H;w1n|)EMt<*P8|3q{)O<q<pM(?&FUJ{&ZQtI|e<PpRLCN<0jkJB?!Tx&35bY
zAe#>XsW35f@_HheA&*gsN_AuXWYTC6qC|=JO`6OJJ#AE^T&+g!dT+xh;UwlP+py~>
zdw#kv_WQx;xLEbGh+N9j3H!gq|0=ac3&9AA;ecckJ%4A^L>v@4<2z$I<1S_FOz5qa
zQ^=iJT+$iciS_rMjh46c&gthS2ZR>dPU7<8J@e0#bB~hBge3<aP-1+MCR?F$c&%Dg
zuEc)F^&todhL{pcDYM*4_A-+!bI2pVP_coW5-<Q#TA(P(Hr5~p(7yc3jQ4*1eKYk-
z?Il>EKZk$p$dyCv$+b8J*JfFbwUx`-9+$NPTfLJ<+{yjaaXR<Ui2gjleEnPE<AZKD
z?O!|(KE>O29da{4bELn@`^X0X9{G7J>)1E3j{PTj+>N*ykK%DWgXe7D4-gWlmHrgW
z|0}e90tN~<wZrLDfMEp!1PGA;M5TvTXn+pub;L0zo$<3@{oz~*{mI&O!oLPyczX~S
zf<od6L=u^Tp@xM=L`Fr^V;He<@d=4Z$?j~_U5#OJ`~7_D--|QiJhM^0LPbj8RH|01
zLE}fFMUN3TUi^fK5+_NTEP0CbnQN%ArkZQ1HBW7|*HLF(dF!sH-k{)+Q1|d|`uS4F
zKNltDQf~XdAolHUy9e*85A1bsdfPkoPrF0jR=cZ*_V|P2_vPNd59oAjPob9YpVRre
zl${&rth~xxxvQ?;?H;5AYSgY%-*yghn0snAcJ5?QBFiJOkt+T=Jwj?Q97H`_TrIP*
z&w`K|<jd2<ivqLr4>DF%cRwfq1O)_3G9*%xf?Prz*xxT$Z2<uTf<!Q?U~c9WKtAaz
z`T_wJZ7Ux^yq$c6`sAMV3=oMfrw2jQ=YGellK$0)1xYd!);BkFj5bim!Jm&d-0s}a
z{K4A}nmNqa@epuxL%+HME7DkSICB4k5_RW>6{8c(F&=*);+J2r7~jmeVaw<Ort#Ox
zE_|WHNs@WzhQ)j~EXlv#;3rJH6xoXI+_0<R{QV}$6#RNkghXj_m8doB()#`e3Bg6*
z%^vC#+&p69yrO*k0)pmBO3TVCDyvqv;^Yz%7OAJ&k!Wrel{>kR2NoG~^S0A^RgD3B
z$ZNyV;V{s2*O8uuXIi~EV*GgKMTY737;Ig|zN6zrk_GB$T6#uiR!&}iL7|^*RG;S(
zfj1?lK@S&~%dEc6B2s4A`HtSn`)+GOBJF1D=IDmnX6Swkhw7M`Tj=WR85o-w8kx!D
zilC70t=$$CRW)_n*{h{JAY0w0@|kXzd(xe%9=cog!`Gt&L#($nALh=O5uov~5!vH<
z<hjBTnIf(cU*5dDYb;}PxZPywF{7f#7jzpI(tVgy#L#VW&vd71W_7n_56N-XFtsbP
zy+ScOfF^snwki_TxOw1kG*T23i+abp_3Afh*r;)nrp=n)AyF9yBw|r6PIf@OogUci
zA=Q(i{Y}p<kwMZtv#Aw7*Ld)8$$?&0qJoiK^^NH^HB=<v=cVRaK(f2nVR>}ykc08y
z!N*}?@Ot%hDwDKVd-%Wl_i1NMIZ4f5PG<gbb3A~Elk5CfMiUubly|D)W6Wco>~vdf
zwas=r?6k{nd+fE(0e3m*ki(8R>X_qBIO&wr?%pr=t39yi?OA*FuI!;byhrxvemHDw
zq;Gv^-`)4@=hCBJ+5n<e%nAk;o>qfoE&?JFDjLRM<l<d6q^HHCWaJc-RJ3#~99-%(
zYSE!fpMHZzj2Sm^@>XAKo%J?YJgT*Ut*)cWjYF-eL`rmtN;?5WiS17VNt7IE#VXc$
zAKTc)J`Qor&nvJfTOXCIVwI{=)w-(ZX=+XBXVdN=Ow5?t^l*9Sq~k&@X|0PT-r`*Z
zzR#EIct_B4pIaUb#A*|eTRtnzPh)c#d-~}=GdApDqQ^fAf2U=W@@Nf=Cr?c16`xcf
z^pu?n7`NKaV54IDpc>ngm@d{*%z4HE*W|^Gx;D3=Zq3)yy{67lt%oQZx=@DmNNJ=d
z<$Bedih`$GNs9C)KsO3koyqE(lRkw#wET<5hHw#xv&*`W7k)zImk7B=SB=d9K1pva
zjA=8)oMla7Rey_~_yuH=2&dcEjq$KYy>z_lAjQBS^U^W0%B~f>oX|3>`aPQfk;`_x
zD%lMOvLA`bq26~mmdhxTd;*Vo3LBGr>*%KHP!P2i^`cw<Fh6!J$7~$_%a;M7O?;=y
zIgjJ<sDUoUQ-EOb{kXrTV=^_ZU@5yiBugq~Q@baB*1jWa=Z63W!U_^`AQW`ufnhWZ
z1Padd0l`_0N@H2y#!Hd`twgm(62cTJ9Ogi*5fo9yl~h_;<xM&53^U6*hureHG0}yn
z=)|;~qKX>znzYJWI3TQSrI;j1^=%7=ND#wxb1k+K_GnLF2j8dVziX7!Dz8nYj`NOA
zRl3ymnYF*Vpr-cJ@zr@~I_J>Sg^|L}5S%n#86ZPY4$7|Hp+<ZikeGXQufvjapVZu=
zXC0!fgC+E)ax0Qi9Yqv;!CZ0m5*k!!Ja1c|py_;Nv04|N6U(Bt>$wZ6Z^B-i3CO)R
z5|G=Ptc;-Sw8#m`3kyUPM1^9aX*Irfo0xXH*FKZeVQSj!S$kF19@X=u19QLj`C8{3
zH}R*x#mN19X1e%0fOw1H>;4|a>Mx2f1?x^NomC-%ZZWUeLazDhet@)CrPb=*wvJYp
zCjN7aKZltUJQFR%E6GNh$TE4M*oAr^%z$u1)P_YFnZ1)HXN`4uc)a#bmvn7f2X?3K
z_a&)rXh$-Jz@e}`;c_qX<vmw)HC>Ce{k_Nv6ghvH0TQVMi5ESmVsPvXhKL%CO<~&j
z+@lB|DPKn2KcjBgnE-k%CKM5)Y4EDsKJ?|zdb2)BlRhD0;t~Mh<#XDMMcCLzH@vA$
zZ>Dw**I3`}qUp=<#otvi+RfIxzV&ZlgBx0AAc0tQ3Mi#L9Yq`<7AjH%O6WpBQ~ZkP
zw2DbgM=eZDWSp6C{cOPGY#i+RfM8{>mx3XovJbU&LFaj3Qg1uY=Qg^d@nkwXMVj(W
zYU?BBx|M}9&aLwWqt~Fu>>rmrwys3&jg_xR8I4*E5I71;AXAwfex+(h%z5d<Y&i^k
z&y{Spr>xWzRiC%}L#TYqfUUaDjR)3)VWD+Z<f0U{Xk}PNMK2R+so(lLKArcc)0C_<
zF_M{*E!naoE5MC|ymWW-6e?AvM!hB&5`!lJ3^q@Gsw-uuM+&0^&9EFVL%n96M=ZC(
zz5}$V)f;H%fGQ@%g9hmPH6wtIx_ixgNw*My4<rIFZ#V=(i$L?4c{72r0f2kmKQYdB
z7A#Y+tS^35sr-`w*h>MBfAmHGCqeN8`K83C1BTTc7gu<H60ymFpL593S>#Hrdom$D
z%9W?y$QZ-Rzf`FnN}0>8i9UKcKE(7$)v8d9?#q-OxLHVBO45;$)HswaEO5DXX6Z_S
z?><NX<MKlt>4fj9aUAZ{&51caC+GB>nx7NQ_>9f#dAs5jtz>0euoY|G%C&6OKHSlL
zv<;@mnJok5v-5Kmr!?kAt6b^m8K~B2XcqdDq>4t#W^3niDHko|yjWdBB>2qP9q_-s
zR{d((9;*s*Zr;BXi1^Y+`MJrlDtP*EWY?1=y<}GTYX6F8_54+|teN~O!YjRBEscwN
z?4>*4D4nFEcv8-{^XDv`m9zMWJfg$+2tS^W*W<xZeNq7GPo&Ochc0lm0LAcY0QfA8
zWd+0(K+7Kz=XmDfj!H~^rN6>@)tCVP2-EE6dl})mXMgc!hI>wOnlqf`9GCb&=7Udu
zK;}z91+~=Eq&E3OVdq8fc}nl&7BY@m4lcOijvwvXI#~>_-532U`VZBpO$iNYOn(ex
z@4#M4+y7H=uzk|@$=can+`YTuVtdt!dqNlDWl0*wcMVjlww~@B+vZQd{WxV;!2TpM
z;t}7VWF(JERt75~32^PtwQOlsvtWl7#S`$2&yI@Y48Ru?39})2Qyq;p`^i+N_o++j
z=)v!u>T(FGQHg*AcH%Fr-1GhU{{Qy+yFi8UYAFv`DIwwRjtBHdc<a=^lYj2NVjkuD
zIrHPj%rAyJ<Kxz&&fUn*;`43KWr7daiGNAIJn7Nu&m>p@KHdA5{^|d(v$Z`v9e6*i
z-}hH`*`ZOL;Xd`iuw~v8|B@*f{qt<)cvEdZCICjr8p8RsP!HcD@Q4GehmXlq_7!()
z+Dd+t&!YZ(w>P%oyUx#Z$l~PCXF9NE-*<j81HY@@PEQvW?y&(@9S7z!j}mmruWwz~
zGyDnu=@*&Sr!P4adNg$Sop{dMyK$>`G%RbG1=*IvFZLJQCq1K9g32pprL>ZR6lE|F
zR&?rx>N_ts=d>*0#4bY*gkdNR&esRJBwxOTEWfJquT&lyd84i-by8@YdF5SyH{4D4
zpTuJmZpz0q`J@=1;hqyY5GiPP>Sle;&7b3QVouJfIXyqePcUOMo@OZ#B4CmNWk#yf
zSS;scW}qK-FLDnuR6Xc~@pI<J&QGE8yG=8En`h*<%)`5UMsH{0yEe()Jn!z7nYdf$
zeT3w9<Gi`QukHO~?e3pzf6uMMz4Y4&J|OS2mEIRCzb{u2E&Y9U;DE=VFDwWJ#}xp_
zKi!7HvkQagJe2hQ*RSXyr^jgdVVH_xygwe30h3jiqNY@}sk>cjtjfrm46V-0=FDvo
zi5cv^6^h*r$nKd%lsP@`n{*xr`?(rVs`d2o%$hi-B^?~Iv4W$k_ZaFq`e*v`rnO34
zHXc<y8oGv`aR#PFO<34CxSH|swGdp)ggn0*ZA8R>4J1A5wMOk^I>;$>{^e}6i;|bB
z=e^NRL#vxk4?Tn48DmB>$6NpYVl!Sveg}WQ{~fLLWsDK0j2mwS6rHiVU~X$FaIgBf
z^@8@d;B6GLe>a3_XT9wl|E}K~s8uwNE11)uA9=A&dd*+quld&`(dX8+jQc9DD&u7d
z?jXOerMXdNU18p31tXG;gUh!8pBK+#Bgt;K*PG6GQ=xXyvF(fWu9qM7hU(hQn{?Z*
z`E9=zw}VB0!*-ExEy=C5r)%rk+RJzpz9~2AMxVjkb7Q^J)qFIJzkT=9hr98D?z`t?
zTbJ!{j2mQ@6;bx{XE~9z)>eBRb=FmdWVdCHuBYDjtiJlcZ#D3|6VqTr4L8#0_wBdo
zNqtoRxk8dAWK&ItKigbvj+`%@D|hoPwAfP1wM&Xy>xQ4LjW*kAyPbC1YrlgIJL<TT
zPCJXMX;PfW`+Jlx{~Ib$u&4XOzn))jk)p+lmnhkJ7hV3n`Nmb(-Dt%PJANC1jad8>
zkid=P=H5qHg}FK0e94la5|Yq_ZHdT<q3}eA48@7uqn)I2X2nHW+QJt1=Zk`3$5E<G
zxr&VA+LLwwsf<fPZ?Aaoe7#?y8nx=k((3QU$?SU6Xwj2N=dU4~zs8L2G)8bp&cw{w
zbY=IJ?K>K4#dM|K=In(Gzm7huXZ9-gjN$lf+4g{$^{jP)3?~;i5AW{WV$XN^N3V4k
z9TUf|NR(l}C_bF?$YyE$H$e|&JbXaV7oWw4;nb+F7P9fNu**USu2IYRpgNuS<J|m}
z?QYg8xKshf#%$DlA}zs+DzdM)z59uJk6u)&FQ1RS?#)ejp@dEM${nB0kN9c3@wcJN
zUAfz)?_Tb&J2r5*I;?T-+VJ~(66&7^3afN|R>$3)y7<;7Pu`x{t2^~5k!VV4T6#ui
z_Pmsno0mVIEG#OHmz0_vDJrXGy05Hg$9sR*v@eoE>;Z_#b+~FmEsiQrU7$G!I>JGY
zbg-iw;%J9D#$k?ixZ_TlVn2IxdYdZQi|x1!UqhK0t=ivi6ds%{$>$SHoPF^xe}M2a
zYT256eP3=kc?nmm@O?LkpuRr~I*L)+7g3JN(SHYLG`=19{^%^n1bbG4`@!v&m?$=i
zi{hh%C^1ToQW6iQJjzOCst=i()TVBcycT%4rfk2y(|OlVEW1`5RbMuH(t5R~__QH+
zpbw|xP>0UfHlFsobuZkpJ9CWLaYq;5>`G4eb)Q?Tq+aug6HpOS6VVXUlF%K@<I0$s
z*YV+Tam}8di~-1~M4N%iv^GWKiNVdS<LakaPsa+ZihCwx^y~%>W6t@&Y2q?-gFFx~
z%!lx!0=Bv2qoCbd2q6b29G!G>%GqfbXI!0ibIyIeB;S#ghYOxAdb#B7vX3ji>toct
zay7kr4ZVFm?->QZ@9x)bq2m@iQ}ox<RjXaE67a_e_&V+N*n5?cR^_B!MNi!;kC1eG
zaC1bc4p18k^_^=Bjpi_D4U6`0=nO%3c=Se${zxzwDcN?3fQJ|oNFjq93VHy9U<Abn
zLPbNzz{JAF!NtS>t_~(7A|@dvBd4IGqNbsxqi0}bVrF4wW9KN9lZ(6bGRxxOMJtZK
z#7YDjFNlTR#Hy+m!EKrtJ^>*S@%7jD8#QRuq>VU>^n%1WdHJrtSDE?$0yP)sU0*H5
z`Bc=u%P&_KeLMs0-fa~L?)c_{d0XGwcLj#;^Jy!B>V4rWdIyIaUO)e)J<J{H?{6{~
z8m*3rxmb<GYhq*PP{yfTg-R}NRjSpfRi|EqMopTvXys{^rP_6vv8<ZjSnbMu)6_~g
zeIp;{D}d~(;KqeC0oA0K7RB|)r<TOGtOL!J(4KHA?h5VtYryuwWXC``G-5e99_J?J
z?}<A<3FfnQVYhvm%i_Yp4?F=*3<M_?0w)(CEwJ<;GJ?tsDX%EnP;}uH6{|RclH!y`
zGp856N#5KL2Gg-LUCT1Dt~Vw!wZ6B1iRJqtYg>D7TQ;_5Yez2j=4xMV_UG=v|M%X7
z+N!~Jn4OGvi}Jr{hs8K9)=8h774N(R7kzP^dcff*F-MNEqsP>-W9IJ{mq$hWxV_s=
zrv<tlqSs+BJ3_ysUUiH?#~F5lQ766bFUFl>(rH=!r*%m0NTy?*oiI9uJ3~4*yJtS^
ze)g-*VKq6fHmB9)y!u?$(Bn03uOd-{YQVH^mv<2QYxaJA1>7%C8la5OCKxj;`qgYb
zEm>o4thq0;rt3}81!rMqWol_IE=!g78b-+qivL*iszh}E8#ZWMzmYp^d2gIrfW|{C
z458{$P}-|=Dv4m$y;%%3RW?(7`%h2KkI&vHP&`<ygLt$Fd2(Q6L(7%_a#X5S4X;X_
z8ug?lpeU4~N<*zqtxg@5O1jUNs8|t#1}3b`>`ZJd95vKZQ=S@Yt+_VcX8H&v&@4eh
zn+h*ou2k7F<+*ry___Ja3s{VYLx7EsOGr=0$)Jo@d3DuRQ+4%Yj<cMFH3R(h^E0Qq
zYMTfN+XIV3XWG)*RJnC+Y<ju(T*Q>*Y0LU<&7Qer+<``WcJUh9xtWzh4=wra(WG0W
z-lx8TGD>e@=H6VLD>E~$nVspG8~4o5!ocI1#W^>x&B(klZ|3xj5>Agk9ov}v6uQVc
z=jo^JV{;*2&oAZNyw%^%1@#aV)L$GbFAX_w&pUm*y>cNT2SS0-xp9}=kbZ}yjZR1t
zyW^)T#{&oZkRAHdUiIywgvz?oCIj*Pi9zXqjg*Uqj)94Vjf1N_wOhNb+vO~?;&o~d
zsknz#(qlc*BR$!pJ>FA2-GjE@7OO*D>QuJ|G^k$ns89WBQ<*f>qQ>G=WeL!9{~s&i
z5~(-s+%E0fZtdP4?b%-K-9BwuqV3yAwd=1o`uEzT=T>^QS@o{#wiEttTPNAh$xgAO
z)BK~0yQE9ItZ`jV2;rm?M@9#9V1Mi&9KF@Eb|iLt<{$8u*ROK9crm}VT3_kyGi~~L
z`R}v$dJlI$x}RQTXpv{R;RrmcfA&TT@tqlo_V1}{9rC%k)+5nA`z&?rdjnc8?Jos&
zPw1`Rb3k6eWu6x4%LVA$zrde=X6kd&mwKq-GDEb#6tnj5JzF#(0Jp%*CP#qKnj#3o
zaTp=czW6OP{X9ySU^d;GZv4u@LNnZmleHWemqxT7YulG1udV=bzfbyS?wb+ig{BO}
zev<^)=BpR-A=h6j+^^*KDNWWKt0ntsKrh9BlYCH0go9}GLABo(jB6Pt30{)u+ZHe)
z6eg3ceP=~duVjq(ZDBFpgR{_AqlPX0ZP~qCi>s8ip6goEZ<K6h#EdudN;L}QxK0*f
zK;V-jAZB5FQDATr5KBFzI0WBdz$_v_0&b^p?}BDVVK*7qGF+~c*{wtz2^~PE>2Wah
zc_bL#mnj%@>)RfxRnsAsJ3&}UgU^zN@La%rGY(FzpO8Np1vMm&aTfU0+GoR5ROUB2
zQrg@ihsHvA93mQ=lox#TlZXy5BvgJzg}1h(g7(chbF|Kg0b!bhq&?w0|1fk`4KG5M
zWDyfzwzAXDq})aO+W&|JU)J-N&5p1M>#4S9Tj5}=-!2-%2J?jB0ct@sxq5T71RR-k
zsIO%=TmscJxE5I&3x<;a^qVmRFB9ES(Sqi()4XRtZaNs}-Npg32}odggem+a=pWdy
z<jBUYj3G%=6iLVei=+zXr{-{(bfrwgi(Bg+pHG@QC1Qtz?McJ|$5)&pxWwTW#UqAS
zJU$8dB@&SIB?GnKBa&_Sd5-^E2eHKaE}x-<2oj!VMw~Gjos3P!Cliy&$<$<edXO(2
zS;9=`f`WC$42|upX6y<x2KiWfsVRbjQ?N)0(p+9JTmQmJnERtBj0z%U*Kpy8k~u3m
zrnv;+%GIk_rG}xRD)dy=4X9y>_6(K|I%B-g49*icz4Y9@wHID3@yC%m)M+m3%Mvi_
zUql*cZ*-9+m<i+_Xe%u^$$H&Wt2q#h>f%qs*W5O?S1##13n=NRS)z`sk0WgWPN-gp
zVNN7IIT(r}bpxF`ouMqX%Mw8)K^VkKu2&wf=VP*2{jwQtq*YT=G9gk!401hfR-sIz
zsa2pCdJe+6Z*c7QhfIWh^GVnG;}YJ!Hwl_-=0D1)n`RJwAvnypYN54C$5Pf;6HNQ7
zO8`U-*G8iPpu2Xh!a49Umq=HCwK5-;rsb@A5$ScA5GD1iXW)!*Pigw*!i85_(;hBz
ztIk66OSPsYhsxXxuixr@dh(J^sxf+%UP1EZM+V%}=@z;^nq8`=a%0I5rq*K5Znlxt
zmDY<T_9QauI?Y-GW5}AvpY~)#+X-4tM|6B(iU$gkw1(LgK-p6C$Sk^4mc;|hV(Qc;
z2uW)5o{wCtCQ=yweKC(bTy(s)FrAeTM_=cJA|Jglgi3e8GACH0)FDmX54x?cj>McJ
z$ia_XX{lRe-S^mx9PqJdEN<HotrvE$;GCLT%?1h1?d(UPxY+HU4x=O1fq?m&VSymq
z0*vM_SRh~l9|VGj=%r+$0s#~BAP}aPvWW`>%<zLigkCBpDG;zE4+2qoshYGvz?41+
z#OS4F-q)vRmm4VYWjk0~Z%0?)esXcA<6P<s?hj{OJ#c>^(d!uKjYx<0^XvU1XOQSq
zfxZY1-{&{`&ku=y73dEm2wC=*cDoY<2luApbRR$WC|d1{z}1!(C$lO51NI-r{v86a
z^Cb`fN4_Ki`#m1S+5Qs$!<R?k9KX!KNkFLZ`pf+@1WhzE%HGeu&(duK1Zr0_Di++J
z_+IMqt9Y{kX&(r0FX{PCos%p`kPca#11%BQWLg&{JIL<Bd7aOJX#tcG)S2+72wJEO
z&LgOuoR-TD0v3b5TCkymww7K<O7M`}60#CX3`Gk9J&5rLYu(MqBDM<mg+P26{4E6B
zx8Rk~l<lkqj~sa6Mzts^z7EbuTMS$gsXdG+li0a14joTIb3QG32HBOYigOHPr-ve>
zS4Qs%qQyxH<-5vW11ezz5;2)IbKb(^DcKYPW@)7D9{w?cRfd2dDlY^tnQ3Rb9WhE=
zP#inR5G5W=^iY`@^inWTJ#IcnP&Jt}2<{zTmX{TZ9<ne3@foHf$S+*R5HtttYR@RD
zQeedrmTm=cu1xaRZ)d}mgWCy2_3fhB;BCgaBf{8{)awa8lFkEn(i?*{n8rdRZ(^f`
zqO7Z8y5tN5MD3RXB*1_Vh-X-ND+7A>QDF;f_2}$VO65cqz*zp@=i?nCP($U5%?eL3
z6!if>)SKX1@JU4Kc!aJEsojAzrpCVoFuW7I#O4lqbAZ+b9Ehd?nfV?V9U(L?!br<$
zX`yj1#*JgZ+7a4Gz#ihvAk(NHB35eov_q(y#IXfp3H4;OPES{|9Dfee*6}^z4z{@x
zT&0&{#;>8aL(oQE0xrpErY4KMlc>}0%3qm{Uj+n5=#5BxeL0&jzNCz3DgdnMCWa!h
z!XwzV;WVHG90iU2m8t%#nOPtphVH9>>AA>O!CdJBC&N$ENwhISR+}M8B`B&V#RUY=
zfQs10+&I22J*)Nj>8`>LbyAUOPpYiM*e4NTf|3X0MMfa8KQWD9Pmmz$msykm1F5Hv
zy#r{)-UKY`Acul=GmW^S1_S3K7$2SkquL9>q9KR&8NBSm`VRh^(P)X<47kISM^Sa=
zn(RJBM<=<y`TB63vch{gUAcJ#Ju!RpV(^@4<(tYX!L|Mz@VFBb1{{Y_lJP%N^BGU}
zGPKaTq>h;c9Yh*{`O&Ex%$8;j^WwZRdH;K^Tl$P)vWVB^^B{pDXkBYg3-6aOh!6gC
zo@OjmVeg?3$@=vuGDe>Ay=26yyz)SKt?h`UY-te1!jKdB&8LAbb~qc5h5`;MdV$`>
zE8i5F+cE07JtHt<TE?^ZvFYRIIJvr=L^RRpakRWsBD(t~L~{9%%bC1dKrydykwMll
zs)$if|0q_KR%}`<Gznf)e83zFbo%(=U)H}=P>YM#XuCfDMLFXl_h>K6RLh=J5KU!d
zyD0J7QmQk{w9$^WB;zDX?7q%$GO(IMYXFF<sEHV}nk1z-!%+Yt=M?h-#)yE$0UWfE
zC{8b6Q`JgU4eg#T;!=>ffcdF?<xXr%Fx$CKO@t`+^VfZ!$Oz*FL3X?;>r9MAsw4%&
zQiv*!Nun?!-fgK01G*~JQ|wUJR|VF;ewiD@{aWHsN?RFRH+3=F!U@B)d)XXxB~DLq
zoV6dPs3TeyBsYdLoOhHFxk{<q+ikPaFO$^?d9B}_`Lig_Tx6p-7#;?Mm-hYvFP?|X
zt8wt>bJCg;#`Z)Jk=Z<XW=S;=bWfd8OoW?z&#VDzqPV~C%tTj_R<)|QWRgMq?4EN8
zGMO-7el&_UL_JOWOrrMkvOspT>7WD-oLK`5poBVoWWl+mq!MgFhmUBw*4>Jk6C(K!
zemERgi*+^Ux;Wq<QS3(cl!?H)c12yyTe37I$@n<*St(1`YVHA94@V4JDQgAHf$YMt
zVTyF#MV4AS#F7y)`Z3f{C&W~l?L*WEBgOQUYAF=VRx>4urlJ+)RbJk&Vs^7T-mW37
z>E<-baV7>~Cgy#z;sKt-Il4y^rrl<uvh5-1us`11wAuXpES_+w?>DMB(A`)ciRW^S
zW`(f&po_yaEac?*ISo&fXvqULy&T0eKC&ZD^vNCh6@F)jy47pHq<V2c|LUI2;)@xY
zneN4@xPOu1>c^Y4YUAr{a+SpCZZ^A|FDwnJM(dFtCyB_z^sO$fR`U~HULRqZ(pdHz
zb=jP>3nCi2do`q?hihgU^QwGij`{9RfO+Fhl`9A)SD|_dBlQ%A*<xeh`@je*AX<=|
z1z}6^j&7_CgQ6|+ph$_*4yS5)v-L1IO#|g&80t8*k&tpJS>n9LTGDV8zBkgq_Ogr8
zP+o`a`5DuF2avT>m(?(pC+jGQ?^O4dHm@b^qnuBUw_`uZot__atEFaARyxkS^JY4;
zK|sD=ys{{V<-zW;Yx!x&b#J>cUG&wUssWhijTciHod$noI<T9RQq^q_+wFSX;U*dM
zI#um{gNJ)?4@Ih0_g%biQLXfA@u0=hQG69&?_H(KUQCswXuKUq@xr{mt@gY2m4$nR
zqc;|x+tO;8U|&6~9fRg%)MW8P{K_#g#?x~t>EUbth&lXdH|Q59yDbkNudPqaV_xt1
zxyYZhkaBFJXk0BYfqj_+mf;x-t2e}s9|GkSENx!$yv(xt^q}`aQ+aweq<#L{iFyA5
zS?WXXiudne2#aVQt-r0qHhupvy^?I53pc-aVM<?JQ$|EcoG49`<baH7VhA*9HAZR*
zA{Hh@URO64Y(ECiPaoKs5W8@?hb#0wb|x8fj+A1GMNG0lGSF-nScYO%rW@aX?k^4v
zT)*VwT^7H8kr8WvEQQ*UBue=e#y6kbC<T#%O6z*Dx>Q5YAd49=R#@LJ3ZHV6*0*Kq
z`$P;D=VVsd%oYTQkE@15=LT-dQo&f*2thaC9!CQ4j>;|ErSptiIj9`EB8*c*Potb7
zuHmKn#LBG{X)1?`kP=7<)rBj2H{u+i;JoIHiq)AI%i=^xSh1S(U&xVbu6vEVzb5%?
zi+~fODUb8b+k{5q23G;==IJlJ(W+IiQo*)*$v9_tFy}vhJtIyvG-8j3`R0{fZpsmC
zp_G&^CIHJ=PZTN;Q35<v+?WNWsugfwgU_Dvbgzd;W-RhGtZ^;R)_ms=(fpT4kSH^N
zOAZoBSxZ^evuB0w_pnDlw+$f!)+aKSLq4jiShcO?7Hw^nRf%YtS+Kb!G#4lVPQ;B_
zP*!Si+XxvgqPS0JP=hcc#~Zk*)i;Cz!-DpiEucV)Xa<8pXj`M!00mo80EYq;8gNz<
z85V}3ht*|dtI`4%xZpd7y<$qHh-bhMlp-(UrVs|;)LT*fB9y_IJ+|FcCU3n$F|Pnp
zhzr04rANrlaNjVZoB>0rhU8!na8<mMG@9OC6u8m^n(!EKh#RwEz-sjRj>z;9a~$D1
zbsE!?BOLK~Bz*T3#$flX^Lx<6#RqVK_AkDuZzdtF`X!X>6jEUm=%!Nk*Bk9OWZwr8
z0pWZgXlSo2MPH`~e9lU;06L|pY)fDH@R&O(CPJ5#=#<KGw5Sv*YY%*!sG^19^piOk
zMoB_lzx<WI@?I&iigUG~HPKb$T156Q?BW1Z94l7{;cd=xM+YQ-0Ps^S0qk~7minGa
z9`Q;M&k>|^!e$OrqF2Uro~+Z6MMVNK!hDOvW&q(OPXqff&!%4UHn=@{JDaVpn&~2p
z0~Llk6319>4->~rQlq%Eo7?KtrbV`Wq9Ut)3&ED_)zs1ynNR!zSXomt%Ef__Nuc8>
zl0ZOkiA4~_f(S&H{dk8;FV%Js%Q$|%R}{ptl3@}SpwyH?s#Hk^UME)Eo1_J#P(@fp
z-7QbUsZbSu=~wYYWqErRss>%xM1zw08ItyJm9xzEbCyf9QtK9F;6f|`S@2nGvV|%{
zvrKWjH+>VCy6yGflTo7uvoy~Ck`NS6ZMh1lzg{1{h}CH$Lc=v46pF8Gq^(Mwkjrh*
zdUaDg{YQq<G}9wd2bD!?6h)&Os!agl_Sq2<BH;!Y^sN^3*zK(o9-1pnqqph)+m%$L
zde0s(+%OvLP_Ja5;zMF7)@M}?OhK)x+XGPQA~W3f*-Z%@<2=rjEQ#*(Up1R>6q-d)
z<GmF^8HU&|>3%ElSecoISBufjRJx|_jld%*6wrQEy7<(%L%)kmo=Oc;Bx8{SM<uSh
zvScj>bE@1Ts^v-Gm0PSP(hbcU`)!+1-iBUx1ZW@aNP8{rzNKcqt5y^9^F|mRmOapx
z<dIK!131$w17<<CGzko9@(`Um(a_0t_`|LdmSdi#4?DJrn4KN!10jJ(j%SS=<fX}*
z6;BU4JsIiQfNcy40}<{&&<hznfd#mt(2oWk<;RHR`dcU#0ak;!vquaH)*e%cwn^x$
z`T=}0b-bI?rLv_FhvPsR`e!hJUP0<{$%ck7;IJJR>p~S70s!L30}8ug$0=+!di5-h
zy0Izk`;puvIk85>hiE9YM1?Aw>@1a#zBdRO-VUSN7$fYE8K?q}!Ifhina*79SGAgs
zLCc~_oFbn`1x}X_aggG;DMqINi_iHg{rrNfY#9FBG8}=vcfk&a_NF+S1SrxhX0vJZ
zHsUeSMiz)nPT8>5k!Ql~E3Oj@NC<I0pf6y@_0P5-nmdoS;7AbHDvy>(LZE#=Tvdi<
z3Y@Q4w)2McfBm&C*RB5bbcsbRoDm~>D-z5{%`YM`JkZHVQ!ATuc@b`X;G^G^>YlY&
z$!3z-CekWEBN>vRP2Fa2iKXcf*Rq_!3G6?FMVn%Y!nG67@>8zgD-6%4X(c0;u?23J
zN$okH&Ab<G<opA7i`7?zvKrO46+)>kHO1?0ksc#+M3DVIrA#tbKQsN;>Ef6}v@`N1
zX9SGMj!%K+A0Mqh$_ELf;{0mF;KP=U(GF5C`%KODXF|;vRYZ0Q-Z2yLp6)018bOrt
zH`(|II4K3rKX!!h`)<;5PL2JdY8gA|A#v6WB;?Nc$(*3`be1(kJvPJrGTdavOE)J|
zc$J$VTGB?f^z7mj-_4{li>uBfV3|ev6edN2l1eYH_q5kcUO2|hKzv*W6RQ!QKPqUR
zZgh||MhVhc<FG}X6DEx(&PJU_QiAocsDUj*$s0XD0L5n0Bsq8r;HQTw#(%<=_2EzX
zjKu$ux%s?(BbF=tV=n1ZI%<4}d=Q;~kimM|y-G3}6~wY$7rnJ(($CsR_Rrc%PlPUj
z_NHet5afSDUxAK*P>uiqmDc9xNp(vAh{7$fVxdZ8gGuTk4i>=#d$Ac^D=tsDs2lF(
zBu>ccK&l8&ZzT&0&ySL7Es@LsAJbK9na+=ZY68+oi(0DKdIzG&3auR%&x$Bm1CQSd
zlK^a2)BOe73e~Qeu*6fz?04cT&EJID5SKF9nBMNSMkW(;^ANZ7s0zCqQ3Q_izj`p?
z(vSE)$%9p{t2|QbH@r<ASKeT5Khv+nPJRyxXuu&5MZ}=cc-Y0!48?`CImhd2`n4eo
zNX_mb(d9)v%L1$e@RncfI#-I7@MCf7NXUhHG<fO@ic8>o<h)}^r|C2Dj~jxor}CyH
zs*luO=T-P908u<X3m&i5`x`GJ-leo))WnS20@_ar=JcT0my@(KHWr`wVno{te@gan
zX}+mR>~r?Z!DbO4=&^+NWhWbDcBZ&$mnK{i6{B)?Kw<v<6mCQAwL$ivL0fsqH*UUP
zM{}O3{ShP&L=vGOpo7*a0}IZmQ>9R$u~4gbV>8Qw(FIJ#Ktcnvw67+Qt(*hr=M__p
zN876;rgrTP3fb>jJcR%v1-goX9)0u;cf8+-zuYe!DUf7DjQeCC1{nuL1g1<n?jNKr
zYM2pOY~<=)nPH?t`~G6|G<Mwtcg{YwJLKd>p83;HY7#1%5p9=)tN`vV4Weu6oo?JI
zB~c#{+Yy2JrnZW;IRcGng<3H65`=agHQ3p}#%>8aJ1ecv#zi<D_0^FA^IjBWn*!q0
z=k-=r3gJ||(1(S3>rLjxAKw%8DNKg*Vj^R>O!sOvqmF=ax}Gt|%Uu!x-_&t(m=~Wx
z@euEs$+yUzCmyo;;k|7&bdGC-#99h+c+<UF;8-fARxSuZ7adIx7bg(QmsN2m&Vyus
zJ8Bt1dFJw~;EwYzHFI>NNTpcp{6nDRo%fnhWm=wN_jZ<cktrCn+OH7#NEt!Bb+jC)
zkVv&_{`3`7cxM#kl&T6Y3rKz$<FEP4ZQ`CydK4d8pi_BsXk;4N#(ZkznuiX|A`h%N
zN9}eCK0JT6!@geHIQx;1f`zkg4VRa|*{5eDAK4YZz;Qy?djm}#P~|M7HNGG$0~!i6
z>xH4lwtfVDgF?&f0EZ!+f{ZayF(p0@u+T6*^b5z&gLh3tP>h>>k=efQq<q*j%S<oU
z&bT0-4-@v%bw0BI{}ftlr$uoOW+{d=GD=pU0u$*GVyB0aX|ZR5z;W)*?GJ6Vh1Bxe
zg~xBv8b+E>nKaWjS$4P`m>xFZXxTeSXx`M@i~>A(^`r4(5nZBwEN;Ja4Oj<4XuOqr
z_CeNyX&ZUGLi@@Gpx7u?4L2bd5bTboiSLv8kZf)O;=RCdZ@qrWa=+{akdpl^AD1e~
z?}S?e#G5ZUl(HY%x;c4F919nFi;uq94L~_kPp?`C&>oomZ8|=b`PA$5=f%e}!-v`~
z6!>zMMpOgHoqml5Ow<^BD#}KZT9pQE8BAAuS$|mRJr+{*4n|9kv3IigXeFo`dvO3z
z)G1Oz;$SJ|$(K`DRULh_F+iVBgqCiZgXYc@BwySRnxs$nJlxph7Io8m-Sx`aL3!K+
z#eLnN$xewjwX;TdK*!E2Sdt#5<htLMTa0P?%!&yZ8IzrGU1`Uqr0J7@HY14V#UR=!
z(e7(;BWVFS&N1KiP*Ut7CYw70fH(>s-m`b<IIxa{hE;;VE;cN{d=uwu3s!bGfS!@h
zPWgrD<)q*{!<~!}j@5giY?290f!QHUHRA(~d)I8fVs@yEycrqEL8ieix};ARs|*0l
zcj1{NYSN=#TBIwV(Y{yaAY$SfvFC;-wvCGD77$nx-hyv~2AuLDa2;X`72b+*3}9LK
z>jQcq==4)d_itJG=j=AhC4|O1Ht0mT2Zf~cXxqwWoa&<811I3c%nlW^Jf|*T$CcCD
z|MG4-w$FiO8;tTh&H7)_{l!(1H6C-W>mk*j6019G3ITSQxG4a#&lojiO^$;^-A^{&
zA?UQEH%_@Nv^?ZwnKS@SHy^7e6&1Oj_5t%|yJ}LY-^n(TRgpY)!o3;H1l!%nF3PJm
z%7y43vt-enK)o#Jdz+_Z%Px%kPn&p{3mSGx>e8}<9ZdE1Pj3Wb1~ZA?&7NjU{3M~3
z*JG`g|6@IPNsmOEV22`jB8|0sT1Ma=AjH4KQ?yF@8mm^{<(w+Y-ws5sdvYNCu_py(
zX<clmC1yb4Al}DOUwKi%sG=kP{Q>~VF)@n}K_@oEneDg)C6b~<oV|dM-2N+|415d@
z?LxN1FZ>B-1&bw%+$W_=??j^;#>eYs5vH)&rio_KPM9#a`Wq=q56%Dmv+x;*e(Y54
z5)f#gU7$(mVbE7Ns91fz92X>7pK+bkpNQ0!`(#_XP3XHV1&eU1y9eC2szs*D4ld)A
zAG%?zHWZ7Xz70XyLnd0Q&!~iMT%*$F-m!^LUzk5Zf-m=tO@699M$jy}Sbc^|D3ag<
zYL)wDH)(HED_QIPamNs?%bUe@leZN;1+<{tTx2>wc)!#+GkAprI?OiNuTZq4T_b6S
zO@y{j{aYU@t=;BvqveSIz2y#=(@CsaBV+k}&@$k~z6xRzOi{jI2RQ(rbyR7{xQdju
zah}z@B9zKmk3?uLd#ikXom8xzMAWV;nd_DO7C^e>q_jB{e}5%IXq1grS6Mteh}5b~
z!-1GJsDktH|Gz;|(%fs^m5{$fonH5kAqtcJ+`V|y?6%_@`N2=*d31R$(w;&<L46>D
z$IcI=AM+L_;q-m`6D<j8sg1d)36nXtI3<yKsQG)BaN3QeNC41ZiIv0W0|b}jHmK{z
zH}YQzGe&x-{rI0+?T-3f50LQ4+<gUu$sjvql3i^6H(X#(^bhbZ!FLO{%ybFQaF}jT
zm<i!gxFx1}S9WLJ4XZJ(r!H2Icz3L5w3BPiyPRZfwXQ2lsPuSTX<ZnIQ^3j>AAw8}
zb4q*&@k?-{ysm^B@y1ekt<85I*l4|7uRxZVnVh<CF7~ajhe_xFn{;b96%+lsG+d;d
z5>IYX`&Tr!XiMdhe=DXkfAV|v!g>*Y_Q=kx0CQAe=1=4qXXkNeNU$7~g@hM+Jkc~z
zu@}W6O>Bv1%h<`MzZ5(J=28ha*=oG(Ilk%~rZ}${xiS}U<SC+-NHi6wZgT&Lb=wG%
zr3a-6%07ms&a^q2NK3MURpa298<-h3&kvHHDJ2vlkJtyVjv8zW+_Q%ex$S8h`4}+}
zquG_7SZpPXr4CFq=ZOPE>`kJoGUH0LcP^FAZlds{Hgd{#{AWgNS_!TkKtdYPfjAL6
zHjM<)8R~$suy=YNmXtx%LY*U}qr!3Yy%Uz!3Ns9Hs3VXEXr-d<PHJ|@gTz?w0RRbH
z@Nt)Vgkav6mB+pevL(tRACoKq&zCS7%B!aYhcJ-7fWl2t@LdtpRd#p4jRU<sfIV-4
z_V&_>c2nJAW*01_bVpI#pdMah4gdvdNuvFo#tR0gShnyTo+x!i=|Z}Cu&fHqsAZc2
zx}dguk`~;K9>6e@3m0=-mPcUGl}s|gR3&_cH9FT?%Q^b7DN4*R;R4rCBv^Cf-HwLr
z2IJcV_p&|GFEee4^rckkgik~pz{A_lJv31p+GHxf*BH9ZB)PFWf4#cZwdWSJgbQDZ
zIWv-!l5ZQ)fVO0ZL=D*)&XNXD#AjD1G%H03CDx26x_{$oLGcV`5&GEwlw`t^lF0hJ
zFPD=)%-cpxLON~bU+@)&+aS{w1Lq6N#=xt38My)*6j!zYKt84?8`I7BL){j)zx$=_
zCSeTQiP0kYlX1<UCvHcy)Tl=yXIR=xtY<%k5b8;RQ|ZZ{oc(G=1Ag^VYg^f2&2~&6
zN?ow9-A?sceYx#kHJv_YHm+Y;i#3C{sN70X^&=p!DDD_cGH$miW<6C^>826fY<6*{
zqliEb%qb9VF>BRW0Fc0uthFMFqEBC`<}HJX@4aR&Wpy-d=K|WZX9WhHxW+JiM!1!q
z#?%bM&rmS)or|+L)A9wjm7|dT$@#!0xnbY5#g^rOm>wP59#NYGLpR%^jbJYX@BZu!
zlCkhiR!yQ$vPpzf0h<i&nMT=PNOn2EH|2;NMR?3kDIinio&DfEZTX<hBZI#n(CL<i
zh!>JP`r*26FlsRb9f$SEx&=a|50L(Ka|A0)q#j+}z{etFH^S?|cMd@^C30ULb^Slq
za71`bkqZ+20dt3-kjk@ug$z?#ZuQVHzlU<q&u7{dVrGw{kWHmcd05gq2=e=xvV!rF
zJD@r7^hG=FEc&lG08c=$za&E^1P3-g^>T6(evdXFXd?=WlqE?NJIKBYM1K+kN6HgZ
z2UlRJjC^4<+oFrRGAZS10boE1?PirW^|$dSBkd0>dsvy>!ZEy+aAXBhb;HM@Tm(q^
z&=e=NW>brc=ZigK`){p|CeH=Bo2-uZ$!sgP{I06eq5!o<1%-G!$HYB$vJ4oY7Imq*
z*9cY>`2FQ^<EPBFEc40tasg4cfXD<Tp1~tyAA7(0nuM$Y+rY(Y($HHu=i*P2b-&F$
zX1;JKm$DuncrlXElfiD@&G>B!$sa5|WdSExfdvt(dHueQNS=->!PMwH>ZOk-{3$p&
zdTb+wl@T{_F;yQrx?I9?3;;hOuT75g44g8ltRiovQot>0rEYRUl4!r7#o=~LJ3gD2
zZRV2Z1SbU~K>;Hlv+=;WisEuw73(4b=l}04a1-%V&s8kYD2LglDTRNZ0*7fTiP>k6
z4E_{kxB8U1UhW?3eoOIJ11w*>|KO+$d)fY5D2_m6EvljFRzxhov?Pl0QFU}U%e!F9
zEhBm2X{~lYy}&1r5YSmwkdkPr-Il8Nl$Qx_7(iA^kjsdk^`}vCpY~gn@cf};9DY{2
z@XPul)!)S1GNzey!>U}S&P2aa`pl(GmoBa{58)&@>*dCawc*c2Ne7;jGhCu*u?`|f
za;KG7sG(Of&a>j;X_)(ftk01iYm5a)3){#Nl?=LN%RogMFz{n@(HE|;7X0@r7ly2v
zs125~iPOP^dB6?=`aHV#p-Eu`V_E_X#W!7Kk)V##g-O0w?o9^f$mlT~>^^9aI@`ao
zVdpsbffB?>LF-R${u7x(yp*j)s!Kr@!X`zXfnRUIRr7w-O|{;$p06!ZlAepz&~^1d
zg$itnP!a6<@1>C5W?}L!ztg3}JehPN%1a=`YKh@n&=TO@v9OY+ZJxBFH<`dY!e8~M
zXf18}%~rUd-W6@=98KXTU%I96X%Htdanx7^9eKMP-Tm%9)&jz2hQO9rYC+rQ9^dcK
z3R>bav_o6C!fQTeLH`Ym4I8XDbue)oMY>)@?zNWK5o=fZir_UWKDTG`t-p?cSN51F
zLf6S6<?C0m7bCZ%7eFv~@75}0Hq2LFnO=XVR5P}ZjzU@>tbNbzocJm*1YC!3<jsy(
zMj4hg%mgtkWC**HzmC$mAnLOZ-KF8riYxL!0%s7@NY%B@n(KMRDY+|Pg=Bh`jqBx|
zFw`@L+H~>+XMR3;b%XwKGKYr!`B4}ztU?cx6xHyG3R5zJ58M-vGgMoVp<m`4`%?%3
z4rU9C@BuD`4|GM*&`CB}kBDniQjFHL%MTRZdxYUaVk{|1A#a5LxPY{lgb3S+I~U#M
zykHSc{^Q$<8%O4P$2ciU{eWtXDlsn!i>N0_!>`odi;jvG9B|-6M&WH}Lt&*}Cn3kz
zebhjt8?BUMDHy_iaGMkmRC#ld#?lXsL#%W>N0Fi@+`pdiX(2im+y&XMF~E^Gv8(BW
zvrXqB`oCQ}1SN}B?jFbtH_-31Mih;9Tp@IpM(V7-&_st3U-v+Bc-MkfD1Ii*yTio=
zSDjXDCx994ZAXgmSz8YU82Db9JuD&^$s7GDxnj2p?0IBSI0zE%Cb7F$qU*Iz^PT>{
zbM?$XWX8~Cq3E&)i|JB7*EEa8qWC<CzT>3{&I3>ME$B+4ukWe`<)oS5x>v+8e*zD~
zKtz0xSlI5d)hi$W-C}EnsMXC_M?Yp0n3pMH4$oRgE&|hDq0kX*=X5{$pxY8v!@=J)
zy<v~HadC!7rl9+Y1%BGAzy$Ub3|aBIgeyvv^vqJ`;b^nBh_bm6y`xx6Xt9us2H;Tk
z8xUz)n(aEdY3;82VN27w)bdxF#LCho#F@=abpXRQW%oD(TzX*OajPOL_LZPjsjdrH
zmvh>_VD3exvI7MQa~jbl;}$<u)<Q$CYy&>K;HGL=C?X|_h#hWvoH$QaAW2s`Er-4n
zZub3xx@-ArRu|J|t@h01uC3OmZ|1hvs0N$optGs;YU|MHn(r;#SeXn+vuivCO%u=`
z?`Q%NUJrG=pVDU_9h(;mb9QM#&X=su!ZZoMuT2O@UZ490vru_|UqT@IgH1>BiDLPk
zx@#uWZnk@Rcbx{!yFtmksKrCp<P~o}$K2{+TdLo*UoKyLZ795%wzwp#2nmdfN;Hd1
zbZf2-p3=u|Sw4k$x|qBF#i=Gwd0+#N2$eYTNHXCfgM9k;J+SY5;wie+=1|{zBhOAk
zf1Bqe*78N#WfJ0Cq#-><J=AC7+R$xTTI?#57~E5W-S%Z0kUiX*>f?BO^m6d0o4sqb
z`D83~W;(4abAcTDb~-@om6E<3f^|)thn`9=R@-KgHr#_X#{Qk&_6MI2mX1R5Xh_j^
zRPMU^GG7;mpjbD|i&~OXlpcPXk2ojsI9uf9zi{ecz2EefRpdgb%$HgoE&sxN^^NUp
zYGCr_b(WE;i_A5?8{E#NepT<h`9Z-mM}G1OiD8O9o}F)GhCax9f2h|Z{rbcD^7&~T
z8sG|eMK?7NshQua>YexA8fodltIy4laA46u?&9&AGDk+59_X)@=#Je->S)Ba)d398
zbw!Rge>+;#za(wbfpS}hZhE1k=B`Wnbqzd94}=H}5M6b|8W~H-+Ev^-S-iH4T<cv@
zGXFOoufRB2-UJO)2eLe~G{?C#v;AH(#CtW|8JTQL9mEouyS5enpFg2@8&+Juen7VP
zEw+noyH-wK0FuL4xKsia*A{5Br+{7O*SFwW+Z<-+DF*$Z2%|<6BI-9iAAzEd|B-iB
zqHdF>+$Hnb!u}H#2&hU3(Pyg48F+ChYfj*%%AJ;G1gBJiqJ>C;JaoR(0P(R!rEL#m
zkIs+qp_l;adW;cLU^rff??zJ%Hp>QXWC=AlfrVl&#Afvvx&RbC`M~R-lk>&E+GZe)
zpxzC?-toS)qPg)G(_^O6XCt$kX}RbudDn9`mg}s)pKb>KMTU-C?yrd`gN$5tQruoh
z=NN5tCd<z)RsU^33E1^T;H=8uci^JQa4<FiRFS>To6zE{xp>_ap(HJvUn16gOtLy@
z!yCcs*oS{Ob;?J3gbQlydmn!LW!*b`tex>)!><p&*3RkbB?UAGVzI)19mHh{$tb!T
z&1AGDtTB9?<2?N5Di~k!FH^R&l&Dr%uh^)qzL!3ac;wL8z!gUawr9((z)WGf28wH|
zSE)velw@dC!GC8%DuhB@uPbn**gBcWZWf}8`#p!MjW;pJl<ebxQ`8M<N~}alm*u;m
zvFVVtM6|jgI&PrOMkFUTw9<JRLg*u}6_Wr3vJU8{geZenbx?80a;XK6FCV}vsrMqM
zwCjU|js)O%b_uH*4wcUa*9;T?6xQoYGz#Rn<7bO<n-9T|65a*9=Cj{p4su~+t9-1~
zQpz_CxvN}>twP*U=XX;HS&*7dn~i{oKBlW(e%nWrfCfk?BF2?^h38_d={J1#*y1cm
zukJJ0K@7(1ReD!CNsV^a8S5+&bkQLf3m?;7kIwc)kAsbX&=boNi&K?K(+dsoqP6c|
zUV6bn3@miQHZMa~T~;1Qw!-0UbeSo=OPH($nfb221>{E&+uFl(V@Fv1x#~MFi{h0|
zbI~yb(?sT(NZdZJO2Vv<6(lohH`enox%)Nv1sc`Hrz@bjus0@|)uDpY=B5*4yHoe6
z8!J{fHsWx@n*8iErgoUwQ0f~YxG&aSCmTXcbtus9y}TKTBfe8DTB60EeJ6e?>jL?S
zy;(>iX5LbJtr=Zvt}0H{DhcelQ%J2Y-Km!B@tNgm)!=adO8K~wBS6>jZ%AwY0^jTQ
zlKt&dl)v$2+oHw;@37b`vdUxp@9P83o)Z`bf0`?4nP<h%|9a(W_C$D5Gs$+8_{Txt
zr>zu=ezpSd!I|Dd9jP&|Sm-mKYERLuycS&mP&AqE%mbV64#?x*-@Eg`_o-|+O`@)x
zy!+_K0&*6Zd0zret-s#C`>TR~cfQW0{>?G??+-n8mgqXx;bftA?XA-w=Sf~LZdbM^
zLMm_JbF7<f9FKy$UxX_4V8K~7N?s4=o1kcRazeNq9OFh<b@_3n6!-#EoUPWW&2@;s
zr!QjBo@g44KfM9iD<#)srQ3#TvB*Nc3&%mJ@lJUs;0{yTJFZ)4T+m8~h2{N{qe6<K
zg|uhn+sl=q;>JGVGiAf<I<&KJGLU}=LVtn9d!ykT50~)>%lSr(91K!`>6Nupn&`@+
zfmr*?J;|1LptgFV3%_p2Y9-70VO0I|MCb3;>`igIyB6ZNjaMwfef)I*Q>hSU!k2A$
z@{*)MeQ2buq;82eJ@8rNKl!dkDcZLadDi!{PELl=fGi7+Tnwr|7iqBIVZs*o&yZ9I
za>Q(H=eW@_3%$niA-HurVP#acOK@&U82~E<xGGMw2>=GM^uIJfh@_3`(c1)oJtuLa
z8g?G0%V`O8a?M=5Re;a-g~z5_Mwvosqcmj_;A_YdV0$KhvFJJsKI3pYC<ugm2!+T;
zw;ONG=B!m~s=6tkEift|`%kaIly+h8SQ#T8z3(bzKoQ!-AqiggaAz5x>K)A6)aC>V
z<0s+ijCmn#)lDYOaCyd0K!DgfNKQ1|Jo&*|HsU1!aF<k=c2ge3-$GG@f9*;4&MpY_
z?+~q+F6$32Xs*+v0oXvYeGFdIRLbPb@l`8!`YIr-?9`jUmIF5z+?|>rj~mv|bPGUr
zeq&+6vXvgifozh@mu<bk%9`kS*81ti*hm}IljD2V@Q@5{2e7c%1xv?}u#!HYfDl98
zVEI($P;w>qP8La@X|h9~?(o5DI|F`VtFG?YB(f2yedH%1)NU)+s=Cx^CjF#R)@IXZ
zMGT(dC|UW6YMDy_mEM*yJ`UO~bu!6=%f`3`SM?1Vx4C*k6d!&-fkWltNHwk;f3VPY
zaE#}?ck*%ZDdhe=mLUSE<SEqsp6|dF++}%rL`ZLEh?f9&Q$dIQ$zQE@KT(HF#-7~Y
zzb~SO(Ka@5*(G)Umn=2SrEVE_)0{&_s^V9jX26fAADvme-N1isGf~C}pR_Y@+Pm=M
znuFk!<4H@Zz77M!yuY7NV21>*4R%{PP`5J5INW-ZR4i+*45RrVy7}6A8|ZQ{r=nuL
z*sK50Kle)|#{}z}5$)sV!RtgSF;Dld2@fg2l+n01-A)&afN-7c696nhj4KNtXOzx+
zMEcu{^CR^mX3t2DA@roU!>k)|pd{Jo0~I-fXiG30SjI;igcN8Z>uv0k1ksHR;>L{r
z#zl~lqE3g@t<MWs3U|m_wG;oxc6O~TvR;~-CYxn=jSQ%3ZCJ-yeSY*^T8)&gdjt?E
z6v9+;bxEiexQntNe1R0+U=gTmu!yFE5VQ<9KnJ47Lwd4I%FySqG<QQERbuyOU8nY1
z8t2jyo=bc6O2NZXYD<ST>#XDWV^#vD$$`d(4B(ca3spon2bCYe*;|KR|79YST+W<e
z$fyzQy00Wm*qRvBRGvQJbntb2K+F-jfYVV_JDY?L_PT~G?)UcE!5-;O=LNuacCJaJ
zs~=aHVB_sQZ%by$q9pKWoPE09&Rf#*j5h~YXf3;5^D!Cl%;-Y@qUZ+Cm`qGQ?YICO
z!d#(BYIDvDt-)>09d2j_!{#Pj#qVRTA6|G2(aokZwG4e?1n-SY3zgktodl(gii{vi
z#lA$4S_nG&B3-XqK|Hj@BvRhf*<{XT+Q$L-$)m6!RKS_eYbwit)s$VVEyis*y;>bP
zsE?Nv=lzHEl<wbEe|A9?AMZf>B&kMxm7-pghQlSxtESof!>x!`8k6PF+FA8egI|Cp
zLJ%4P+GiRm8`$hku=I)@zMyBWy7jbYvv-!2l|~!h?PwvP$g}Hb926?xgS(ScMOoe7
z*byT8<e_}H%%mMZw^JE9bFb=oF=PahdfB&u^TaI=JZV2y>VfI0F?@q!A+V2PB`%V}
z7E?z3sWhHj^iXx=K6XOJb}hGe>|l^-Z3f}b!|hD?!1-`IeDc82YyYX0gTMyuk~C$4
zN$dCB0A#$pmPig!(X2S<-UJ!3#P<kOHM>Z%0-#YTGeaUxnR70)l?fcARFl8~m&$pt
zfjCP$7U?y2?1C(C7W(U3xsD$oEq4b7HNg29byM3P9hmD|YJ=xF8CcKLjzqA}&jnsJ
zm3KfK%yBp%#P~@yl`i<n&ipfF)`z3z2^04?Vg6R{W2{^N-YAcnYaR7y3v595!LETc
z@b+!J{K5jfVn5LW?~=H1gRQ5^Ty`i?`;f{H@`Ca(<gH|Gf<23hV-7Wo%DJIH;%SbN
zLO74Sux`2|$!k0sJ<viYLA<7YhbF~PRC1r)tQ;buYIoKt29Cn$n835z{kIbtRsR|@
zUrEvkn$9x(e1Sq%?g|FVa~8~s=jBnS^7nXgM&n#kAe)_0ccDY|6gs)vf-jJ^{tHZa
zHKM6YxzH7DU1;xs%83$lxw^1<_>h+fNg>3SccOUMxowJj4`83JD=Hf9-*ZR@9rW-4
zVmHwXDpr`#=O$_A^A(?SA}Si&P<aWB^hu2)YczB8`VAhVs3#oQ>HdVa0nWlfnq}gr
zxGQ=7Iw<i$Bl>Z%rxYNfjoWEXdoQZDhM;<fRNoo3KXCV^xKFeJcoCgG<;wv+BJM8_
zuG!ms2`8nyFoNZlm*K(A=rF!pU>&z;{Xc=08IxnjkGanea$T<QiSa$}p!f*?0E5_@
zMc+sYeum)jN^A2}+KrT+qjMlj^upYGMOx+N=A-NL@mT?JfX`+3s04Y!8_UubWaT}q
zwuOY+^Tj%z&0*4Bvqz8(@@vqrh%wf&AwY^no-xhFxqe@%mdG_fH{Ga)du2OvuCA6L
zcmkr`QB8iN)tb58`oA3s1b|Pc8!Ta|O>$Zqj{vmV*oBv0cU^Hcp3!D<%nNe7-AxJW
zat0nuV{T1tweVZK-u`ybv#P91&p5dUKvbGRyA2q)nT&V25I)<l;b=>wYgg$h9vq^8
zg|-?FZRzA^eMjR%=7^bGRTKM$B;=b~-33_2W~_%>J1=P0T*^#kG(tnv?Qz!TUJ4I;
zIrM(i+4e<AG>14V{V`4?hQ~?cRXc@sQpo=TUOHuin7CQ>?@x)*!$H9sMH2&mDWiZ&
z0VSYmGnzo$+n))d_2pf{U*`!rjO_5QQyv1P{Yeom;Sr<!F-uFu>GbdbUkyuCv4gg`
z-z@n}4<V$Ty}I&&o3RpQHL%RH_RHI<SW8H~td=h<KIfx&$ekk#Y533n()dln1}F#n
zAXvFW6NB~^LZt7qxA9QzqiyANC*WWRD3V-p4Z?@+<vFYlj1}sXSDe@}tg9a*N4jiY
z%nk&ttTI?Wio)I}gcDN0=kfk+etIQOuo7+Uhxk*)Dw&*Hiiz1`s8-^+Q0hCoTzhf_
z#_3MK;9Umv#_ZXzllW)nx(H|6K-|&_b@ZX`!jFpJd9zSmL%Rr6#^6O5`j0A(Z*uG}
z9QzJ&3sO%a-_dJK-#V!%qKM}|TMvzfzlS2vvjkcxUOuw=G?PM0<czFh7Toe|$sxNa
z!Jq9adgYU9(1&o&Q`dU7iIqAiPC9;;8S@u^2bm-4P=uKfq83-u^;Jk!EFXqvy?a`Q
zD4p=s3XE5Es{mx0l1ByV6wxY`t?CCrOceH9AXJ?un8$i$<hI^vKi_>=l%IHHH~`YL
zIp4rxYK;sr*oQ4?f_!4yKkg<Yx18*iB#g^|nU3`97sMKsBMNes-6e?`mPpXbzF;2w
zKSodPZAxxnWUvfK$hIy5BS4%0Fkl56pyx3Z6xt8DMKF6w11x>uY<>jAq8iX9pma&7
z<V7>or55|T4ALqg+5%9!g9V=Eq*nK?#i`2Nj3%TgbXJDgPI~*D?V#%LWSPz4NWfCX
zP@&x1#y%iZdC2V99b?F)o&OG_n@g}eJ8l+5R7grB8C$7c5rkb>=X@i_KULqE!tmn9
zWDXkP&++gMkD`7{Pa>UK;?vk*^rW9OSh>1%p?SrbbzNQ*p%Qq%Aa{u;R!8}Wh~Jgg
zi3g;|K>dCLh#tQ^v1T{67@FcKuo>r}JT6hPbbYhuxgrrGX4=T08s{bF+R7^wX(;)O
z{NxjCgC<IepOYn;Yd_W}pd1s;^=^z)QDSMrC~FLpgLl#W@Wt_;h*qvKZ&0YO)J+>&
zyc<7VFlQm&3TqpIzlQ2>;K4YFEoPMseQp%#R7aQDFm1xqECxU*II9X7G?iZ1BMo;#
z#Rqdp-t1=wiw4PLbM;>*`NCxipsC56<)Ki3lykJRJ;|9W2T=S7HDQ!y8Z$CIAN2s5
zv-Bk$TK?$~k_+6<2*L3T!y|a^LX&qU`+|YF-48NUJ}BDIX5*F)4X{FPAuYemh02Wq
zAKbfRW_!`<JeVHH!c=Lf-VV3^Xse&rO7Bl74LY@3>lmqcD^W)jNCPH7Yyac$>^UBJ
z=)nKBuNAbDB5G}h-HFyID*Ug9p&7nsWYd(PJMjtw;Q<>)a~o-Cpnh^gr>4t{9w*1>
zG0-5&qRZ+4@TF2%Y<d=`tf)xv`p*VWXK<}k%9{xZBe^_DQQZNg$Ii1CRi8Em^N7Nh
zn%SybrhJ{m<~~Iw#uUmxN;YQxj7xOm1Jx~FKJ>hfbTCJfttz?Ms+qU+YbCnIR5oZ5
z@eJfTCr-+W&!hATmMMqh4*uH4iBpS83|^F>NgsY0{-1L3h_P+`urz<<<eu~Oxuf0W
zay(!t)~E18Va;c^uC#wHaxl>;%qExkes1>2*r(7VXD7ikI-tisEi|6<ader^b?Z!l
za!rtt{Y*-?m{zXxd71wheeE*t8qSLuE_1rP-J<sN*}PPn@eSkWlrq(^vtLv;K{EG=
z;<7cdVXbK&{XS-hdj;K3c4!(u+eH5GZp_1x7Bw`5kr;%Y&26A9u(zwv0%M3`++L|b
zmy1uLG<t4uFu{^f9Q?)kxc~|RUqeOIa0rO4@+Wkl<$CNj$BeDnYu3HsB~MfdEGxB9
zsq=;B1$0g;B#=+PBlKI>jq1~;(6}VFT05|5tp^S#$`g@|d-@nCSMZ-p0#-}3nYfa;
zH^zZ|jUKH$hxn~+21y4~?nAgVx=uz?d<;W6);Qu(hHMKAig=Mfr5yVG#TXw93R1@G
z;6~?PZDy5u+<jv&beTbn6mBg@%uT(T^{!7<6;D|yz1rV!OFmWL;rT`b<c{&=e^@q4
zE~V0mSDj(g7SbZ0F)xPo65leTO@REL8o18V3J!HmNW1l*U|Gpz6+NPsG-ow7Izn5U
z4a^D};)Cc;g}z}4mVjz8KeTbk@SewssPsR<j-G+!zkVskfgf&nOZAR8^>^Md053?6
z$_^X@%-V<!l3B6)=w=@E$T%Nvh5R%YtGzR8YoMK%FXN@o%NIkL@s<aT7smF>829a`
zj+F&KuPwI&wPe98kIXhNh+q32v@pC@GvNiGesI%$yc$^ipp}lCnm&Ow3hB7oGrcYZ
zSjlOl04HGok%Sgtp_?}+Fm?c)o_HgLkJ0Cw6)dG7rQ3%~|McaXd~@2y>1`rV9<|3e
zxa9cgMHq#88{bn;ye@6Rt(I{ikw2Ua+I4jGaBdx)^ajUP91hyYvq?UDNXDAvFYHua
zdXRzfWw|GJ==Ea_EVnV>w$Jb=RA*S!1{?1f#fNb&Yr#9e`aTdp{9;Zpzd3<3fz+oi
zu0V1JW4{XFmTwHCGwz6h1itP{F$!WC2IIr|M5IG2l+M@MRAkUPR*==K=5KOiiq?4=
zfCLM!ZuqrUmYwRo<FnKitg&lBdeGRTjR+(dL8d3l3<@Q*trtX8Kx0nc>Ta|lm3~V;
zbb~4gYQ!ZImn!IKM~nx(jrW}|aWhwlI<8I-qMyJR;uOx#3G%l@jxLl+)ji;l5u%~B
zih~ucL)CAbLI!zzUQ5cQ0!8`ovu1|o?P767Utd$%B;cOJz?$H;yNx3YrKH>;^i%iR
zgkr(j+Y^NkY790vsfAwgzh~p4V^j<M$)!Uswf_d?Nw(a$5|GLY2@aY7Y(%yJ=l=4<
z1pAF&L8&h~oI`VJJNTt?g~SM;HMY!PjEeTGW_4MfPu&;rPvVR)AAaf}>7*wj%zRkc
z84KxXn%2fK=ZcD$6JtQ^P;!Z2ge;Lz;ENoSfG><V>2S@fC$!5NM!cHZgrwG|Ee(ot
z2QAWx$a|{X**ptdtwKO-N5oY3akIt5+rh29<>t7|cZUCalV}}Vt}dPpY2rzLG;`7P
zcg*2u`(X3+eA>S986L#n=90``|4N0(*4pmzR>+2v^k85<>Ck2>1%_#iotEuzwFMCZ
zwCH|;CPSd8HXxCltPrCeJH+5icmknXL7r^#kVlR@h3sianX#J}8Hz2O$jnA%a?ks`
zJ7mSKZ-wlJtK<%iy9;a_ooQE=xj0o<=*xZNZMB|3mmLprB9I^9>R}}XjEO$V{w>cI
zGOxT*f<;{ei#DbdBj`=^>6C4^%!b9T5zp7YxhAyx<jT=l`e?y<qnGH7M|~?9)VIs1
z2)wx$>j$_&BQHX<22sC~w_#d&xx+t+8j2`zgPK)(Vn>)mbKT$Fz2^pZqZWhK)Q2dZ
z=$U)`MiCETXLdD=#Z@cE<U)V-F_$m?Dw;5Krz9KPm~5n?o=}g+ajzk@;Z254cCJlG
z*!srwbQ}22<ZX}dW$TY=?&^>jnzdm<W<;CRJu<<_IjScbl*_38a1#mAjjtHAbk#tQ
z$TYFwRPjo;hC_TJnPtvZB4LFs%C{_n28l2D&R`igF(|XNJ4BA)A#>pW!(u*OvY>hU
zK7rWKhl>R;?A?NuSQ>}JKB=XP?vLc(DUDK67$GzV+BhSN04FfI5P?St33v;TzSKD|
zNRw&OVX8F~WKJoZlO65v^0?`&BcUDaO;i34vRtg)>T~1eA1hEg>nn-xU@NI_03h|F
z<qZWkG?nNfoGQNZt$)=N@?S#y*A<s?Y84sN=mYap{P?rAjI_FpI4#+2rGu|i#4BEJ
z1NruL#sLq&XRHzt(hv~_)5kBD^!C@E`mpJ7j%*Po!(KrolwXxM^%o5XbN8czS_RK4
zP%2z~9aiC?dAy7wAATVhQ!KR_t@@nmc_Ys{7pWFMNuIT`R*gNc<z7Bf1j#NUv=><M
zb1I!BQfP^`!(DRiS|#r`7L*+s`vn-w?QZiuQIa^p8j)q4?2|POO-+71p-=aPHNc0@
z$4biB)mpj8>iO5XdWXRTpn+#UcU0zB)K~;X$&xKv%5*q~-B<zK%KH!L*tg5Tvgx-M
zwD7Wy5ws_dCC@Urj&>s^0-1Yjk;`b*B;@oJ*&Xm}VqCk91iINM{=myR9UJCKGa^Y5
zBmygagcbhdoIxu=d->Skudbm*ZPUV6dAyFfmP^edNPZM%8PV#thjWO&UpzX!Z%il5
z6lJZ4SjZr%NDsc_!EV>IHTVgD?(~1uzXZ?`Qh#IM0UT75IB~jP)5^b;MqF(CVkC*C
zS`niV|1=E;?4-o}<yb&EM%MhKh~PXl#}rz{Sa%)aS)5+*>fER1kT7)klAyIIs9mJp
zzqkT;G#A?IK<tqTW1GCc^71OZkAY%At*$%37vqpvHocyiat_j<l!($BZe^X*<AG{0
zRq=grrlP>@SLtgga@xn_A%puD4xiH^=lo&w3h;`%k4=Np07E!i6xj8cqb6dUJRrmC
z64f`Fs}3b)sm&CM{D(ADYfG{C40%0=ycYH4Lo1uKm7`#%2zH<z)qMNl@t4FQxz$|C
zv*vLTtIa@t7(&g}Fban3?X;@e0bcd{3<&JjL!XueqWE%((;-TWkij>$uJ9&e3XCGz
zZU&8nPti(j8p~uxpd~Xe_pRGM9WOQ-47xRGzX`@Q!Eh1N0I6$DSqW!8nhcQySF$T8
zVW`&<97l1ZEk-SwY2e9r>CM3%=lK;I5l7epo!$>+)G$|{M2P99dWz#keM%tnYV08{
z*-%wpD!%4jK2=2B4TXqqPJt0?ig<!hI51|39uZ2c69g3M`MWgZn-#xH)wf$6^0I;K
zVWO9=bA&ptD#(7YLEJo>ZELbJLcc>5hw4MAx2~6kZ<TImBzz<JZihDA^^~M%%~*6H
z%SYr)$$8QRgWrHC@i~EWL<sXul#{D69>wmfg<%hLRcX#geC8RL``3{HUCv}go1Iw4
ztCq$}qz&~+)7h@&f&rPSRZlL5umk<1P&{1p3SBuIU6~c>1Hza5H-x3z#s6sY@$@8J
zSndh-z$CH&TqPAttGjUX7hdLPxT_bH-j?hi5n5lfZUEHa|FH?>CbAPBNFT-S54`XN
zwF6~FQdzmap26Ee*E(bpXQ)2q4HpLg;|!a0_52XI5W)GQsRE^jdeG~?wIGhH5nn>T
zGL1o|3!0d=s}5pFJV!1!z{R;el#5dkpOUPvZs$^I^4pqdK4Z(BF@_I8le7C!fb9ui
z##pHvrs55P_$rh17cv~uw`e0YSRQ=5&x=o=nt;?XxRC;obxg7bYh@jL2lDGqx`NC~
ztpv6l51sAF(yUl_&4}(Y<nHRhWH7kTBomGsVvz*VK-JlYpji0(224hC45kShE#%QT
zFeImFQ}_CujqV%NqX64oJUn2tbmtq73czZ&NzkCp$=*c(BUtbPU44OYzUZ*$VqxbX
ztQ{PY*wpW*gX>MfZui>B0`o9AGq98NG%=!49><aacu-B{+C&~Gny8RJrTjVl4Wpc~
zjB0&g=)B<y0=;#ww!UdR+osj~b<`<c$ZJyJSV1|X9~;L8CSv9&qmP}`3u-E}{@c0O
z$dhS4_Pg%-K+)_wZAruhgG~{<DAX;$Hb9*YAMmu(Sb;IG2Ib`$^T_kr76RkDh%M9-
zM$cmF21hl@;Hq=9R!FI4;mfec?cL>(*FntITB!!s3F}eP#%gH?O`j57H24J4;rvh0
zSc-VaSoeDQU)2-_E(tWlQ2(!krHh3H`qIaEziZL|hGbY)&Rv4}6MVO?>%pHmZ`=QL
zD$eGcWOy;|{H=r=HBM(sIAaCFTBD8w4Dj$l2r<ZrDY)i~ot<bgS&w*FhUcN1Oc5%s
z3Jn@!D11e(1-A;CKdCG>kM4T!E>xrSbpjll{y0Tuf29&J0bpRk9u0nwuoH&dLOlk8
zfYCVzWk&iw5=If7%f<lxLF#&SD}xCE{<`j%`f5l}7CMIG$w<Hq6d=@fQ<Ax%0@FYM
z7#MRT7>r{j5?K$R!BC`j$R<c^RR_hmfO!{=*O(0ci8svmE?9tvxeAnhNObN_>u2!c
z1f2<;(ge?EUH@kiqs}S}1k65JTG^VOnT-&iTV~tL*ca@5W+(!`WlnJvqd{NMTf>KD
z!O?HfUk`_#MG#h?zvSK;JsM}oc4a~T(I+FPGg;DdMnO{m-$D+`GbVd(D^y>+BnJ!)
zXXfDW{R`4?obi*)-7`gTRuo4Re-z}&&dQ=Jz-G=-W3fi%WAhf8g4<>!VKlJu4sbC6
zQ{MzmY~|9T8{VV+0VVE5(5whzqhoE*rnKpuUbT7p2zf2N^eemaJIDJ^?KcT@XH20|
z!L8$hY?@Y3;IGzR>@s-D3UtND!<b@#hACUzF-!WOU=TDqG{$jcRPSQ0@!ZbYi-wR&
zav)b0Cg`KRk2|PrFb5*~9>Gy13ziBVZ^vcQ><>c1<X+OM2`=nCG!UvQniVvL8-(0&
zIK-(OS)?PJ9%hG10PU2V(7go?M23u^It(HhHK5*uT2w78v4G*vs%<3Zi|tRP*Vw8=
z=Dvz1nLSs5S%9Dde*T5I`}U~^_D@G2A_HU@YF3a&Bx23R$UqSkLs0%|=5T=ZDUKRE
zRT=B~#=cq=HnV+RU%kQB`K!HC8#dY>`1X**$9qaToq0$X!1y@q5Bi!Adnfp6hmVQk
z0EtaADqGA0hiO5?Ey#tadwZ%tIzSSkDCP>A>l%g35hNKeH#0-V(;DgG`C485ZXhrE
zC1+;$@5#CLK0Is%FA{7jOppBC%pwiFC<gJ<hVDle-6X<biFW?uK?@jsG5torXzf+h
zabpQ>^9+X(zLxFOcm$u6H`3=u*@x*%+{2oDSgsR3T}2b@qSJ47>_BSk)M(x7kSn*k
zF%On^gSH_npp19+ZFv#_i7>dSkOyQufB;-jKoP}_W4XE7$=IX!13^*kbUTKorIKNX
zAaxk|c-a@eZvxL(kAEl{HYR^Rlx^RGtZlk${@4-&TqV_jz#F7~K{~Ceo561cw)CWj
zcoHF9BDV3hwwXzG3^3+lk&h53l};+a<wEYiXH}>x-ks@+nj~|o2ZPAXdsV+Js=exY
z1#T;Kav^O(Q`pA%F=JFU{H6aTJA@y!zW6YuQHnY$W}19?hjB#N@~=lefn{P;VWyTQ
zh2~ozbsIz&k+|EJ;N|{OKLi7;?6*26nmo<bDFduG60Be~mHUpWSzs>{&Vl-MsI9}s
zR^GN-*S}aAbkLaBmuj9|={zBw8g?1$8nkVsOMNZ=)|t-_BgpQgtjgGOblA0>WJdFb
z-d!z!$00c;$1cPqgSbK^G?MQd`fqXbTx`^NSfqxY0Vl=dXi6!h*&se>SRbn#m>(yf
z%sTpO7OyJ>9&5@=6$KfM>+-}+Wr+-a8)gX7bC@nsb+eL&5G|V>GQOSA*K5H;XdT>@
zyK7B^NMO`6&kvoV%Zu1IV%$b~2Zp_)=3Y;(nhI_U!|6Cao3(|&1!26R(O)u=DUF@_
zo24e@42=K4s8xXttzaRHqoHsaDu=gXDdQ1#RK9r6Z>F0sN1hL?aT|3oVXG>|K}Is>
zJ{W_rF7{GPCuY}e3GETAlA)CO8f>V-2_Ycv88Lc#mB?y_>TgD$Q2?bE)r=%iW+Sp5
zZHti62k_RpIItG52r#bybq;GX;AF;G*naJC!WHu1V80F7pJa>!GP9e$>R=q1jj$MX
zuTAQ9&tRf;ri4iMVE$!0Xl8-E0hpS>+ns{Y({Av3ST3A4`j3vsVtBiVzYa9qeeIMh
z6I^f*dqB|A9Gzz*aKHbfVP2z^L5rV)$iPd`9mv^SHtOlsW1yf92>`MzYGB;O)V#Co
zU1;nC>SY!&7Go&C`eN(t5_>}V6i77*!lKmJ;P5PQz(38`3ec(Z^GURf>!{Ka&{jfN
zee=IYJoy1`@s*bCeCoH$%kF`r#0WT?2Z7k#@&tg*FMI>Y<$$o!0O}UyK4*0+)%p)h
z{3l9-sLmie`DugR-6!T)mX7UIIk5kknU!}^#s{j(Mqyb!F$jKgjwd_Ii2mH&1DL7~
zd>|wmk9+7x-)O^gS7?RlI~>-fG#=8!OeY2KxB%pv^zXrYKSF@A5l8nb34{xvgJ*m*
zi2{)JNl^|ak_poa)*Pqjp~|>^)EW%9yM68tHYNPM2l;kSy>GodR+Qt=*pXR=>I2tF
z?&W9n9e*l(dcVZ&Ynay)VY&3mrlXrX?7wm1?J$fVFMNo=`79HHa9Eai=W*hqx`n@R
z^i{+9rUDd%s74?i_YyElbBeU53B|PaQ1sx}5+E?+;pJJ<)GqZM#DG6esy6L>i8de2
z%zx-8*YL*5g4d<<$oW~Gq4rYaGqTYtJJlxYMX_8vvu7p6h27-@lpN<xDZ;c`_cUo`
zj1&D9zEO^IA+ufqLYeNH!Cp?lCH|9C@)>f5BX<BN;d-JI$4xe#REqiexZ|JUMl<JU
zdZpblA-3Q<$X)t#IaV1&>)H%OS3_7yRSiTgpU<-EJ6ZIF(r?&S^taK|QmT&-asegI
zl6UuQfrPqHG4UQSTe;=%npb0s#>bw);aW*>_uT_C(4{+yE!z>2bDV4}{c{Bprvx9J
zECrCc=^~8s5q$mF(fT23QW3h29`N|}tYSasUm9tL6-8Xz(rWu~F)*65MymuhrGKmx
z9{;J8QrKrxmo&P>E&WTyLw}z8Kh|bF6i?+uYtPRX8UMbF!&Lu#Ce0=Jbj-|-{**{b
zilJnvn{C^!@y0ES1Q!3X$9hy`6*{~7zVj)O2Evw3b&mSDkYVUK<NGd5Nh((@;l?@m
zVsS6A{1NKXQP$jx73=JuMpNff@ml%kfXKa+C&P*M@B4-S*u_8oIW<Zx)cL>9$n483
zf#sWu>(+&Iy#i4sHVp-3UszHeM&`9rC&ACca}sa3e6NjS5@H(!B?u!()KIYSxLzm(
z#wjK;4G}QO_-*g9nF-C%X|LBs7+YZHw%tAPY%&DH+c1X&?SNaXIDsUlCs>#gn-O~|
z->nZ;^};{%=I#;Zu_$u>rz5F(A6h>=o8?)p744whs;rLUi|JMr<{yYWy+_2Y4%3Q<
z8IQzByP%ua0of|qErKLJG6I!`3#fOaEWd;WYvi9El6Ub-&E*){P8T8thm;`Z{Z4=F
zY?PY-;Y{PV!96`qzKgx{_@ymE4-4hJyUVqYF>AMZKn<xam!h_e6{Z^5`BwvOAt-zA
z)X}uWg0OeMH_%joliihXG>z(6`&5pHz}=kcaLJRy)T-{!+VYi)f%SsN1_q?qia6{9
zbB+=}zNfIyrxldlD<cOgel_PNTi^Ev$v$+K$>AoA@Com-ZVYA;++}kO^m%}bOZo#z
zmtL&ISSWB=G=z#6Orevn^XQT>i$!bb;BD~K-e9s~I+N*4JH-$x$fG%q;M&6Nm0z&4
zAdARXWz^IYNpYPhs$a#?AojH>t<2(P2&lOcA|+rnzN4(?q-t<ht*wQY-<JXfel_P`
zeLnVoJiM!n&K`rGyd6Y!xq#(NqojLF_M;-4`k}_@gZ#>7rYBNcLFNz{uNga?^de3k
zZlV=q$tcUpwRM$A;J4MjO74*gz&viZaRaNDn_D&=h3{)3QJz(wFNvtc+=}f4&fM}w
zy0Cj5k1pa7*HL<L+3npz0v{TWlFdL$+d2p1H5fgMMivm!TtXT@s-~FQyleD)9>^wl
zb)+972tq5kr`}IAP;dzInlZbN5A!TR3>PgA%iczXoV>QD22OQIA6qqlA&HV&M=W0_
zD2Wx61Is2aNl-c$NMFk7ygWuel7}iQij`Vs-hV4Q3cg{l+wu*;dp+*C_3>+bi6zZf
z)UO*->mCdJF7)80v3Gi0IE*mVXj&U~s4?B(HRd;rO<vvqrFh^UEv8VC7zQfWhL)Z(
zje78)&1MGvnNvV@ZpLor15uX5OuG&6?yL$oJuU6%p(9O{Exxsv#Dwm`N1cTFzF+Rg
z#8KYVSER6+Ppz(irN-1s5>26)=u)fADMahDVT1Ny8;0r9SGNX{e7Y4g4mgRVTkEZr
zI4l#bo{cYr8VZs;3Z|nGc++!PMSOfltko${Z|jroJQp&NiGs5PIDMPY)6n9b`>~@<
zB@y8iO=h+)rBd!tj#%j*NSF{Np2(+mUTnwb+Lku=k;}tEPI}7GEe&~q<ZmI{g1KGF
zQOUgD(qDH(K@ba)&tf6ui&!CP>;Fy)6q(ju<!HR*`DL5_xlv~RwNaTXo4c<-c%!X;
z5AnK=gQH^DWB|SnWAlXA_gna$2(@PaiA8FxpIGYr^#~)wtx!|p#S;2{tg&j3`RXwT
zS6ZOuL{ZOqR;Vf2%NmfMtsHLsN?6&s>63)Dk$LJWIZ~U$R(r13mW05DhE`Yn&D6(n
z`_!ilG81=7rAnmF0E>=WM$wPUR??EPB4;g0<_@3jq~C)55_zyzo9-8#e~N&U2@1rx
zpgNB46k&*xmDZ8eiix0Y(8^?D06I76HJH)FDM{?JXpq_Y2nVEG3OkG@>&)BVeYng7
z<{FP1BPz^9#$pm|2zKS?wX2>t0Jf{|r`V3x|M3Ixn>BQjTn+&;2qU{hDAK*av}Fgh
z91VJpp6bU0r#lq%MV(W(R@Au^rERuvZ&6FtdB0KjMpLyKO;x*Hm>3>)>2^bGh$Nnb
zZqT7pE*BMM99rJLsR`8iM8XpO|EoI>9(}Ong@wq08*+unn3_}LuYVfFKraX?iiTHI
zv89e~UUZi-bQTmUzNzy*_ejj_=a6Mes{F>-B?}m@CMTvBcey695eI}bgHwlfhYrPT
z)x;f^lh8Aq{AVaeU!U)TbygI&-}$0Bw^!3||4Cuk@>V^&d7rSW^qm)do01-2k4iuG
zzGnT*MzIw+xlt@oYr5{Geec$*|2^D<F=~`{7puOn8Cy!&D7AJ8_Nm(lv}pTI<rdhH
zo1DLi!A~}}ozfet;{RUO66q+YXczIhrgzsu1J@tuxjpESQQPDw9hy1W2o3?IEMqL#
z4J+rkK{IMbk1o_F&m{%(@@Az3r?g)YyajACeP$(cPZW>_pK{<oZ15au>tCTfy_9N3
zd_c!JW94~v1aXFF9ix^1Q~Cd+MOaUsY$E6^XHNSZz|JG;f;+P2^*|EZ9N!{mkeKec
zWUYEU2<GiUj6agn$8E=z4ci!XK8o@xD1H0ID8{1$nIIEC{%ngjHvyZw^i;o2fMveA
z$%2ag7c#QvMLZ~(s2M$cMMqyeBdkri)v0n_EE#f1Q;V-sFSLFH`#FVv$;g4V?$VGw
z{+!0WPaacZpYC#J$h4tXk1#Y#rEXxg`vM*Yvo@GB#C$eG3_?rZ<LAy~l;=%i+;X4U
zx7dhRyniM0hByw9Bul<CdSG__<VB=5e@cT3FL$CxDSU=68D>GAU3D+gCIQfQ0z%z|
zC6b3dDOxzu0P4{bIy52~z_e!o{gx|kGa@+&1u`#4%#a<*e6qj=f{W6Qd{^j@?GUK%
zzU~kFHKc$dB&(LW`7Phlf9au7qM$>~dLhbc6H8L|<?j41r&T0gWl_fFxsbv1oKqew
zez8(yGb>m||CciyTd7A8tIMZw3If0%3F09Ia=VQg5}MiEDRD{8pV7HW#f%dDwk^R;
z!PSSABVnt7r%6{7dE{7D2WSGfAIlUVROg^t3FCd-9v@Sg?VI5fNU2M3N|M*DL=qL3
z>_p78xB+U@FdY>I>=eup=w~38V7S<A6;OPPuo!BDVMP(fFtuGek#$Wj4&*`vlQLKg
zFaV~87mI!Lh`TvCHT>aW8!B1KhpefZOPiby3+GlYr8Jg(l$6$J@OXOD;Xpubp*0E=
zg+97NXHV|VKqU2;9S}%xPN$>9)wV5KwUs5P4G9|Kfz`4op_NpW=+)XmL?5m>{1gGM
zRYVqmaE;?9uk@BHVu;$YyN6g44M(|P+%S<~-D-7(>3dQbnjeDnh9+~<ze?c31{z}n
ziUpU?Sa=gHMm2!`Ol?(P?mTL?F>=-?2P})!CzoF<@fUtLy~o54(9-!l*<RMp+>uA#
zf<l4K==~KW8q(?(c`0)eNeKTeu(S!mKxndZ(FoII1h&vLa`n2VJAbFjhZw9HQTO^o
zUBfd0DdtI;h#n~C`6~*8f}X!*dH+kj4UU^EkE@V6#ddW5s>V=H;2j5+{OmQ=d|-U<
z`^#cx?8?0(d$>Vk)FP%mRo9h^I&Qr84;&NvTxjJ~+}A}_j!}Z>h&3Y@mwGApa<Dmm
zcn}SLIuW@XTsUd#kFCg30A25^H=kSm;yLiU9<;W?A>g@*m4vZgpc{RP;m0|y<Pa0|
zMyy*;W~deI>7}>X0V`@h2Jvb;m0~g~@l;abRq3g0PxPUR!}Q9pTFGX96v5K>oH;~2
z>c<C`6@P!Y&i%N%aKrxO4qi<#BwRh_6^O;GIj;|Ff|A8)t*!GHJV@tJDWAv33E5lW
z3d~)sIequjFG)tC?Bx4VDqUse3V53U8FCiKG?A<vvu504lg%h3t4W_YXhiP48cR(#
zJXrrpnY*eC1tJ$az$}73??<aK&I5bGY(u;<6rIr-Lbp>T5G+0(N%m&5E;v=wWl-9v
z!VHgH1beZ*FGM$DM&ip%V4$~#(y{iD=~s==qC07I>vG+kh^9TL>v6C>tl-YseTGl?
zkQVK8b{})8CBG=R7!?#CZL*LHqcZa2>Wg1{p<IC7bbEGZeh@{D9LPwQVvGp}Tc8}#
zYG7+55e|15*}8D&&_mXEH_$_JtPUUh?f7s2&o3IaNvX%7{SA8b36@7iGj2-6jvg_w
zk2i1o-86q<MpBd3K@wlM!iBBw#MGngxiP)8Obw<56w0UUJ)*JkV<u?ynD+A0lU5sj
zS3UrVM~p0C?R1Z`7$s2g;wMKSZt%6$$C|Zgv*@v&h*o-2_ZBhK?V45kvnF%Y!(P!c
z;qm0MK2BHGCD=Q<+ajhNw#!qfu1a1q#LRwu;D9=b0oYLsDzyx}E=<3vqYK=-S&R}h
zy&WRa$OVMGoX~<xLhCp*bmJLw6fsr>Ii>bV{?$BMC@_2<ojH1E1OV1AG+GgSS$}k!
z)iFI#F-zxo*rVJxV^1K%__KZvb?qG|`)}A2neFYDr`wZ%&m#1{1<QRkH(B0|5(#)#
zi4H6!2F^t!KQM`hiJuiEn8+*Qe#;{YAt?4R$X~sXg9QeM5(JBAFm&LA3rT{MEIhUZ
zyfaPE-Czk~%(oHHBa-KY$2#qgDP8lqOQ&=f5bDRtcb4Iib0hCF1ADAW(X`>iD$S*m
z@R~?vhs(Wkc{UPv*k6I~gsbxdX%pBGsLRZJCpvo7Z&+H1-MVBK)0#1!l}sx$d7GJ5
z0RTIZ*o?yVH2sVW>$(ZcZ)4VAW_h;^OlEdCX*+`1=)jm*%tjHEN#I;InZM_hNNxZS
zyyY^a?JpmAkYebLFeszoy`{ZN>q`MI4@-h3<oCI2i^8xsSUl<&GKwB|0Ta5|>-n}r
zV-OLKhGJk!W}{HjvJ=`pB5$g|&jtj4=KM%L1heCbf;~M2;hWNLmil7<g~Ep@J{A}e
zHckZe^~}JG@Eo9ghUTCW7mUIX6O3RF<_Zjo=7>ZJR5S&u0pV0s_9yXq!vHJJd7t`z
zOT3R?!G4`6qD2znJk$&8Gl6}<9<xd*j)oxwks)MG2sgvS*hWHXz`scYY<LMSogkXv
z8@K1)y0R{nOggF*SVw|t1g-~rjE(e>L^y^9B0Nz7CL|#hE}BRJ(`mpFiE#}zva>S~
z!y)0rlCVtxKqa072n>@tWSX!fn+O4&OwGOmNbW#9Arw&P6AzQcP*IYMmLaHIc2^8n
zMb0E3Oa+yzVtuxytB68kkk@jG>Qnu+tsV>**=zf)6c=kLHH!17_PRll+tqH82-T%+
zK8)QQACKtB&Xe*@)932t;6pBP*)m!b$Veg#6PZL3+0+ovPCAGiOv8}DQHx-tMT}US
zvj|c_CTs6uU^iUSv-iKb(~JPsX+dlNRYc#Tsn7^63t|$4Ymt7p#o-*k!{cX*t5j%;
zSv@b@_pGu&7icrPLR9NJx@an(SW^JYn3~7SmclzzVhxwb#1>6mi2;vX9x@%<SwtK`
zox~kkcX+Jv(WtTNQ%B=3$9hIj)>eRfMWVVrWda<}AmkTsM8f3{4xMzt_N9*#X31zR
zv6C*lt>UUD83xk@Ts2you&k3F<5Pd)n=_N8efMsLH<psX{i5u7niQWluhQ(P4Mdcl
zMmWN=wAS7l1=0NE7q#4AuWHP;C1<)->hyE)Vl2=#XYwtIjr-AA*<wUqD8EF5;h`3D
zXuCq~<e@xj$<M~M*0%4&J5~7+)0$geH3?Z$13lJ~@P7GFi!T-0u3$LXw8Fw?1AorP
zghj9U(nXnm1E`llVO?1$wM%p@*^XU0Q=`j!3zGv^dkL4zvy$xKjN(&I*tOZilBu_-
zKixM|abj>k)zdwZ!H2N~d*GN(8p9ldQ1^P%fZKq2We^S^m}UwS`S)b1%W9V|($p^F
znzN4EM@}}JGKmIru>4vl`NW+=b1U%w?hG1BD|7zyoVCMb7x63{+zM)uOK2&Q08v1$
zzcz?Z)m@B5P0XOHu0LzI2s6V`EE!z6&0mr8JL+KX1jHlrfZKq2We@_4xw7VLwH0g?
ztjvM6I0<J?Vh&@}MFZiy$Pc2UuuUe(P7aoDwok4CAXTRnA3FQl#7wd+a9u1<6rY-s
zIeKUvz+-lc)f4ke(yF#=Td&#0tk#S(hK-$Vvcm*szS%qjfp0jPg;@yVmi)yZGri!2
zZ(yjJTOlBcY!_J;tIQyuHBHWX|0p(b15M)Vu{qO;+-q4G&TZSuW)EHAfpwtMYAa;T
zczAW$gQaR#)O#+Uii1({vVqGPXcaji5+Q0aYhBO{H#-U$h|HD}+RD<#aL_6PI&7HR
zy90yjwd2eN`|3YAM(Op|85ntvcH1W<e50C|%o&STY4kyAImeXpDD_c#UH_gB66?>(
z66Lyf<dx#*TE!a|)H%-iXRZA0Xy7wBy~G6RwmJ!fA{=stP&THq0j;Ly*9OI~E21#2
z3Wx^`$((u?6Y~ipOkQIS*6;us6niREV~3Bl_6{oc=tGSm7DSk<`=-DU3O1JbP9k{Y
zX;n&XXN9X>qPv*IiCmUV+g1n=Nx#mbFbauUG~sq53g)y?dSHj7>EIACqXa-<v+ac!
zC89uuIt-qSYX-i1(gVJ955C1gu?}Y)X){tfC_g1j2tl*q3qb@Wg|lVwfi}6!QbHoA
z#;v(TN*5ThqB#vtJ-6pW+4=Eb|HCm75A1BMrJ%y~*+nGU@;W>kv4cC<Rc;{3ZfnTo
ztRpt^G}(%SrS`E2GvV^=hvC)-&j+jjEj0XJ1!@$3-Uk0YV13>GHTk&WpJ|n~t`-_;
zv4qlczTAV-TbXFd^YKd@b42A-Vux<~xs2ccc^SA4c0$AW1w_=Gex@Grku9nI1t^&u
z@IoPp^oY2);YCndc9EDm)T8TNp?M;7W|$;N7X5}EaGfa8Z_F5=?vD)ifQRZE<K*oY
z&&LmsA6esPPG4h<NaC!NQ>pBepp${Wff7HD;{}hp6){Ux+|0dZ`}9IQfhmgr_u3<5
zcCYRG=Kxpq{u7_D_*D1ze#P1z$~LFd;|H-zK!nazptUJvQ>bdFWsFw*H}qn$=dZ8A
zD>3>cvcXr=Up<B$DOjVd$dbEamF3M*e?+Co9x>|eFG`giUR`n2x9Tl~-Z(hE(odbG
z;Z$$F4-vH2k(%*@?-#CLaW0|fxa3*qe2LR@53!nq$?CkYPW<;#i6(g|=@mgjqr^7;
zOyaV0QA^{4Zs*c9^FEO6(gD4eQg<+Lw+W>IIp@Bxc;3(Nhj<gI5;q|(=%H`|iA2Mm
zDNjz1d5SWEj~}PUvY7%XkmK$46<R)h6IXWhdj+ELq2*fK@}r?ok9Oxeok_1;@+zot
zPi8xGKNa75CS(x|x|g1OFCV-((dT?dJ>-x7B@x+FSFx#ZNgIz1dD=lN!l!Ox%Z~gI
zzTz^n=5nSVV6ea*{fXQ5L;h14Zq<&-l58PMdKwb??YwxJtLqFQoYVC$g|L_`=)U>0
zKbtboP6%1n5%!RH9w%S<TH^4@uvc9NitV4fPpUeRZ)4Qz>;aIg`K(isC|8x&(N)uT
z6+`F4mPUu&FXhy(`V}+>LPrGIR5IgPoFfLvn|31L;|rm^*ToqWE`&5)XFEWcNWMY;
zGC%Td4C;p(@dEjTT8XUN%10dr90Esf0gD0qYxw8!hX6<!nh1cd0|^*<j4F>`ov7LC
zahTnxACS4~EEs4)e?2|Rz>}vagK!rl`1m}a@GL*Ut-udV$t#T29#ymYUcq<Ur`B?B
ztgG<&y41pu+4dkMyX(N5cM!kwlf<_3up2*tRrBo~KHTD_5<N`cwLu>9;=HUR@))`+
zJzFv7cnwVY$FSSr!FgR6k3fFkw`5OaAdb#P)_0P2h+sW5j!l>!$GX?L&pJBNKSVmz
z3c=t5GkF_ecBYGJe3iJnHFY$&+_H<!SY5oFYChiz^7&)D4I+FxHZYTO{5F+LbzK(k
z4kDq!ftds#R<7nj_4-M<vWIF=NwI#0a=Z}&3E``2YatCCh-LTbJbb`?_#TA+SQ542
z3Ep*ID1j63x$Xw|hHOw3wBJ`~_so5q=IE-cisdImUUcp&vVZmguKLKTtIB1kLS7!}
z$#XfMUcDSpbUmr;yEo+fihk#F8P!XEMfV*=?>!;k!Q*$A%6al{TU$}Z+D_$E<40{J
zuv=~B@9A-!HSZrO|FDJ8E;O&#(bbJ>7dIISUWLl?hOc^94(zUNcBaWbcp9Ii#QK2w
zmb^X9O_zgyP4-xyjjJ9FL^fS%X}Ti%J<)4(I<9)m@9<=W`)A)V+y0aNScqFCM?Z-x
z{=If&V!pQNXu#9<0~t;aJ^oQUwEN~V_ioO{oGR6go(u9ugQgBYB6BY_1Ozo@(wD_C
z*l&xcP1UXREzw1an~UuiWvws!Qo~>(z^MieUOK(9=dvgY`&IFjsiuWKD+iNr?6@F}
zH^Hpebz=~~TV<GrRv7N-QGUo_^;r3!=&Z7TD{=qoW#JB`b4J;OTtF3(H)^z%xUNXk
z%t+_MLQeX=;wepa6>TVOqwYv9+nkNg_$|<pyU~Fhy6Fs_J6jwp?|`$V=FfYFrA3_1
zu_~#pNJ$XpGSSl5DN0COBMs>^F=9=;T6%e9`+?BXk!RBc7NNawFgasE=p0n4LJ_Pw
zg>LjSiQE)9D6A0$HNY?H4Q2Mq0~OV$W4V!YIafLP%gR@Ay0rCVRAyZ9yd2Xt{qbj$
z+%zI|G-CgEAMDw$gRoP-HsMwv0JZ90$J6E^O)}SK2jibxody+kb0-hTBp59!Z*@8Q
z1gmfz_)^yVH7rzL>#GwhF2q##T`QEWtA9jkz=x*XnQ#YVRh-ww2eOKtFgG)U`t*&d
z<;T*JGYZiW;_}<CEz!CXTfDBihN>b_&%m@8<Q;o0?T4F58^%Yd=UM0|u&j$Z_6}W!
zfi4F_i*kYK_&DeE_-15WC`U>NzM-O*OHQLtk1wO%!NV?nwRK|GNH^0bzZQDrCPkeS
zBB)=*al}RHH`McgpcQme0S%>xSg*I4pss_pHl4XQ;=~8sLDzpnC+;Soz5ln@Y^~1u
zZCeWc1UMvTJ8uNK=S(O!()Ojk^D<j^;3TrzwI7b001;O`{Z5VZ<>gQCqYpLoE7i`g
z51+%0odz1HJ%5l?R44X_bUs!)XDr~;3Z2Pm?gN(@T55W!ywfeOMly?RYDo=zB03&-
zGGcVJZlP|yUhnJ6d>Ar%J&`?512ph_!3sqNzJ-={T|MF$a1#%?#O42t2YQ}Y=pJF0
zJ8&|+JS7p*+(KoH8i6WqfA(xv%CqE7gnR{fGuy5o7P9$)-_Nj<5@Aw=BIw#T%xk?9
z8y#fUQOSM%<&|LNNPo&3&n>#0=<Y<1gJ<S`{gH&1%~o6W=gTsidaAO_4%4~%0$y0C
z^r7trc23pW{2S+;+Cg~4uBsJ%wkpEu<B88O@INa+(X*&*93#u1P{lbRSsSs>*`4p#
zlKc)=k9Ip#%}w!C2CHN>2*%9*`MC&_L*8St4SmXCx~zOOunk3>>@D^p;K#NBL)Knb
zQ^JD_;W*j_hrW-nmRPO+q;vLgMp1Y=Y%jKmI^z>jn+^*oRMw=@HEP_E?p;u3k!27J
zMh)`AX(IG7(9=!;w~)DK@*p$LPEPMm-y6%Ui^aG2)%A$^C?P@vl75nS{PD^(p`XID
zkrv?k#Ka}vTSa?p?Pd5Xt-V@1T&VSCUx2GBu81#(nXpw#4xi;SvEw=fAEc?!q&XWL
zr3<zn=M>t7`krR@yv117QEHXELP@n+{X%GYy0zHy+%D3J@&hj=F|w9D4vl{KGx=a!
z&($YC^OtEpj+3u6YpvQdX%t)VbO*d8eN}d)i6#1`<q$iB&1)si=Z%5%rik2tPu%42
z(VX7>m^U=8UBof}U1M8m8?4(90&ir;HE_SmM`hpxWqXPD9QWZF&^jGh0cUeYh{g=5
z9@@d_YKs(@sZ%KU56E7_wm@CIW>KXt4AL~!(2ixrv5BZg17lrAX2!T17r?WRo$>I)
z!EW(22!_P9Wm92rp(nLgRuT(YGzAZ9{f8nvbe#Jm?QV19cmXX=we(<^l39;^S+g&$
z!aSgxZ@>w*g^#ChN2nfCu-obBH@Lplbpcg9iaE1?Vb9b9<I;Y`&_yNsI7j@gfHH}c
zCw-4%`7=Lr8tD<xqF_@GhAx@4+2=GnQ2Zq=tDc13s0_76@=eR$-T7I{Ue;myA1g%j
zLu=om-QDJp-U6Pi^o>w#ef$&X)_r2>jU0z1nBW?^FmvI;(mJO+i^x@m^d`^G8&3qF
zrjMP@Zpw999X-qyRj%amn*Q@qS^ix$HZIV#^rY1P(RJS!W*u9uY;WKW-QIIxBnExZ
zhowJLeI~~;9uV-&J}!fyhTVse?ZqFkby$mO!t_6E#(p}@Nsfoe5wf7L*=FgXt|~)H
z*1ZSgD>|%mI$5e23kJ#zB9SSwx$39yUwA|mqOG)N!dA&BS=kp%hq;GzBJkwK<>1zm
z!)br0vcqoap{&4O-@OvqY)x3YY4On{p!$>bO<ux_>!)}uXs8f`WD1FK;1+}pZuL&J
zBn}akE^36qKp-S>soi1+L;!c+!7Kw@JwLJSPQdAsodp!i(=Jsc35{S8-1Y~m;b;9S
zAHJ-&_-yEMY)T?6f)K0R4%fiUfgM8y>)w=_t2hQI6*loqXe>X_Y%E<Y-jxddlkKpS
z+Txg0KVe$p2w36!5WR`GR0uVa5G&gbSHP{Fsied~qTCIOFv{KvKZ@nENhYBcB0$*h
zLZHI*qNssV2Uu5{ioN)gazm0f(iU7*PY~#ul9<#$%@^ya-|^uJClXR1lr%z|bURF5
zEuwlF5C+Y*1IX$=5i}#bfB{5UEI8C|(RKv@E>!GP%a-iQ8K69Ee_|l;CnXiA!vIKP
z<LV7I@`-~1nyV`K`JOjGwfmI<H0)y+$kLPT`V&b_V22mFJ~p`yAoh*b33tbKF3mgc
ztilJ{5Km&`XkQh5BIYJxrU<DCsw{e+X0XD8J!K*~74jmq6WvKTvT|nwVRR9n&3TAS
zjn^eLX@7PYfFrw7nuV3Zjib#hMB~?xF<_3vHY*5^2T9DvXZuC4+Uq6!;{;fKxZGNR
zy6FE~M1bFl>ed993a;4$R)!djYB1e)UXR2IYQGKafF>veK9n|dKe+|$2okV}l_LYY
z&Ou_uxVGV!F&F2=`hM(KnoIIPIq3o17O`RsXb;yTsh+s>94@0!V+>}Xg!%no*`@LI
zij!2ttOR0~w1yx4`TpY|e#$mzGR02xO9C+()*C-3fYbj3O0euw)+RKyII$qF9akk?
zdy<5e1r!N72z7gdep3VU6e)=nc{K9zf$mY=>>;on)s}S$O<jd!i~pJ1(cG?241n64
z%x#}Abj<oxRovu^@5nE5&g}dwfQEmxidll4mk&mDsRv>#Ez^MpDjV|P+%YAP1xI7?
zg0$1dc~V~`kHYANZ5=R^Z%1FjsyA6af_PksfKScB;haeY3|F>g8@fOGeIv~9<JB2i
z1pUc1Tae6_#4Lfo7+Y?Q>W@LB)RtnWB4<kC7?`oNSmITQ)YOxvYz8FQ0UG}CPN}=r
zpX!yn;Yl?}-jcK)^SIfRq*J!yzYU$PETO2Q&YuVx+9o;W(%w!+wY3FY^y58Jj}k5;
zg$J2Zi{O7T2o|e&ut`WR7OGwTkT(&Z+@#ar8pC=@gnb{Xh8Pzz1J~8RoFmjMA*)Jf
z7u-W7!=PaCm>z?((v$s(;bciO@ff^I!xbpyOI6LH#xk`HBO*zN^#SY<309gBDdCBy
z^CO}H+!dR@ta(6q&QP!ajJ2k)ASm-O+*X0fUn}dy&k*N>V280y6fA^R?eG-x3d%&P
z7&a1@(`MDVJA5e&KdlbXATV7onVG4Q%c2awunFI3ZOx1(t-U5&yK0f4`}`^-^*Y=b
z-8q>*Uq6~3-yhMtLB)a#N`-U|y&I#B<7=i1z82M7+nDDQ(246|GcjSsd)ya9YHFN)
zR7u%rXcbBFDH{-j$_sKjyiKzUAlt~Rr;sxjZ*4htxfwA~n&G2Zcp)AT!1LQi{|PC7
zyh@!;V9kv+UzADi0wEH-T1Sm`geh_TyA!&;Vg<T>FYV4QxWBC)a(Wby`6bBir6c#R
zEhZIoA^$doyi2=?hAM{aCL<?tA;7zS0v#f!0p-3sZ3FcDj)*G)eDxe<0(YKILGH@d
zb1RR`KqePqDf+2+#kAhc7b1IcF56Yx6GT@D)yA>UrA!D#tMO1l{maZF42kh`-h9xl
z*7mGuy1~VSJglj5ZBT=^5nmhUsc@z$7?3CEp=R$7%{=uI1vx>j$7bPJB?X>PfEGT+
z(vWHD3y|^O>~=B02eibgQry+tbNur^${{!=&=%thcN_9_2?(jn=_c1lg^7P{&+WZi
zoK-NlP9*C+7jy<>tVt}am7VyOY+bzL7{ck;_WM2o4$+~nX<oe0OOl$4%TqG^bMum}
zhg!0ldQTJgN?R_-T2QU>_5{`}*JUMr`8tq5bbi<bYZbL8NOq03Mm)xlxl^3YXAf(=
z*^w*o4K8pIpjv55lL7`;qjriRw{5ssPV=6;l>B|{cn!>Gn2c8RQH{!n6H%tn$7F<3
zpi<+Wb^}ZwR6+^UD-n3IM%<+{PpE!S^$hfMNxHPA@pp57U!lub-eNCvS6V~alkQCm
z$$6i}sr9?nwfRsAaDP@4tmsqQC$zgVtRTuqe5wJhvRCyFM_it;x6h2(5>uZuoXra<
zc>@j}$#j~<Saqe8KOftW{~%jP&L419K)6fBHNfe*kWQ&_kZ?}lRV>0asMHBGT|A?*
zZBb8F*<`3x!Wfb^YEY<F>k5n^gnkQdk6ncgPUYn$)?ezlGEupr-{?gSNCa~5HYevk
z+ds-}4K}_|*;HP|(YK+-MH}+J2G1Ri&1qO{XF1)@``aspwPkWQQfop-3M`^p_7>YC
z952#_nUIBJ8o42<W+$jH*qz<h3TxuuTwis4&_=NY*33RL)JLM1bHwSuEL@f9qNNu-
zm!kj<pes`GlHK}j^Ki!Hmist6tlMQ_b|dO7%64aR>f)<YsqImdJPuP2xSgREmL*CX
z>|#HRUSv~Ct;M1-(0i5P*%tNqfhRrafc3FyRNX*W){xxIIoarNX1CWHm+RX`@8@U$
zN-DDYZzM_Yt&l`Y;Zar3o7mh|m^FwzHoh(@V+?orw%YW~%fS~G!o?Ie^`FlgLsq(&
z<!6e-)cXq42END4*Te*ru1434SzSBpgaY!5nVNXD(#uLn>?(MNDzp#>?XOJq>U3<c
zccBSywK&rw-LM`;ucxuuIIfZBJE+pC+)jvq7ZZ=FfpMRU^0ywmAM#Nf@leq&Jo8hc
zUs0VxUXEb#N9nq1WM}EHX}FWrTM8FZ9dp(Rg~<h?y8mK9s|3~PP{PoUNC^!`=j+$U
z74{*zE(;H7B<iXlXrN2<U-8&mzsK+&@C!aGe<o8orx(|34(btoH}qrEVy^$Pm9yFK
zXs(>}NNA;#hz)p-wSuCFNi1xIha|BU7W^cl(@LuS=63cPOt})JQjYdwY%WC7N{NvH
zn3NE1bxo-f28l}UY$sYndn@@Emd~Wg1x|<%8b!~1kB+Ja&bxs1zw1NUt_J?!MfKu<
z$o3NjR;@qPBN^T&xdBo1$@fPyM(r!!kob02q7r`gR0iq*waH})ELKMG5p77??F8JE
z`5%;HB!qbIF5-8Eu@5#PKyUoN?L8D0FYqw}B_E#@=_hE8NuC)H<+f%pQ$9Ka7a-nC
zP>PqR@H{5l4*NPhewth0PVZJ8GRO;f=lrjtYQcw6(5gqp#YH9MysW*hoAkmgm@i_D
zh(c-Q@~r9?p(xWYrQ9LLO6~!?!4$+9vqe3TrCox@XBDvS_nI2-O?tF%c2pkSXFVA2
zOUveH*X2LhT>6&>Y6E_wK+~;)_u*7+iFK^oHAQKl_K{yoQfud)lPax2uRaPoppU!d
zv$&KjkR&VN)pno8Wnu7DW$|m*kO!PATe9mlP%qDo0M4XD%+JORO!E~aUkhz~wk2Dw
z1s5UerL2tL*EwpnV+@Hq32;+v(~Ig_K=g}z7}SOGih(P*#PmPQTaI=7Hb87~@9368
z6r#ga9+=f#zXuQ0T7IK#Us_I;O`XN2Myxr?p1oq&gdi-n5}UN{4R~K6<{XvwDxp7Q
zH;zv*v0FF$Ap-6qfp!VlkZ=+U?1Mv!R}mZokL+yOiLX09irY12{QI@l1eEFSx{a?t
zxBf{x4BWtP{HNF(PLP`K4PlzDZ6{?(j?Vf!GAC$bKHbZ1p@9+o4Hk>vcqZu17j)ZM
zs2F+gqU7N}m~OyPl?gXEaSP+L*p<eqY!L-qQQnQ0=;Xo=aS?Td0ejk;B*DaoOA@A_
zTp~f0^DDXYTo;Hg5{b>Q-y9!9quz@EE56CyD6C}ieNLlhJSwr9EO&T>f?%27Y0!*E
zC-#uzqv8uQ<I+mAmm(2i=md{d<uw7Em<4AyEhnV=YWW`5&q;>0<fa$x@?sUq0iJdU
zfH7f-`Yz1(r6@%$WCPbV7yMUfWUCxT&1X2c_!w%4(#f-fQng}qQ*q_drpJ2GA-}}8
z_nR=#D;OB+6~#nw9l*4Zq3v|Gps#~B&BLT@g=_vF!zD5@O(9u%r`KX9(NeNYovCjO
z!fL<Q01m@1--QVJM|O|w8?UdfB(qfom|km8s`S0b>1=8|gPj*GHwgtTL1U00Fsnru
z0h1(svy4(8=xeW7HN&90o`^~KUP^)cWrnJ#%yc9qgLQc=HX@xIpMwhnn8Yh#Jc*u2
zv%d?Iph26&P%!+l6A_+pE5p{*nTO}IootJ>l2{Yc`v_cRORcv+u;NJ=K*<imb$uaA
z+UwU>T5-tmHyXQMgl&v^Oyh7&ef&4QB?J&sYn9Kejfru|&#W2bE>;GZ<po}ouBD(p
zx;W{YYh1JN$UY$+i(@WNP_bcc7nkFq-+hkN`E^E4BC!2TFPEFiBW`G-qHp%UL6YgZ
z%&SJGNjT<~6cvXNIRU(><vV{9Jh@AdD37DSNhH{KkH;z;u<}g1zpny#SF`6Y8qc5B
z?8bel_>E=pSm{5NKfu!40KB8w+lQ<<@Rfz}79@@SB$j<O$a}-S-M9}Gzp+`szq~5}
zrta;pt8CwBe&nNUD#sI+FHkh2cbYB<!SM_+<O@yH!M~UV0MXfy@UE(P2RMEHBcTO8
zC3fzyxWh&otxohvFe-}(CQ3ya)Q$DsFT2en?{iA^PE|yy$Vh;yKdcpUoJ^xZCT)%C
zf>_>1fhllA7s5nc7Kmz_czA|Z5UZPd0)60w`F$A`9n8Qh?EC>XA$3TLC(@~C%sw@g
zcY3z(u<;3`sOy@@GYKjJU^<9@w$Mu1!wr=u*toQzsl3QDQ$}C?U&A9Xhe1RsR_A;h
z1;9BxulhM+@EC|`FePreLEJAFF_p~gogDuN7GSy@wxWWlxwna2J0tVfRo@5qIc71;
z7F{7NUCH0VI6*)Zs{W<PI~Z9nkA+|OV9G&Jxhf_(L&R?caCR0sIGsQVjENGxcPfAc
zD=iQ}MEsJ};G2fBBm~<VMXrRdtApF-0Fi7-%k-WFo+6f#$wO=q7)Qw`k@CiSJf>ic
zx(yJi_xz12pNR^iAJELOgtSP{|2HncE1ih|R4|r?%71S#Hi)6%&lu%m*J<g|0!d1i
zD>O>ho}zI<s@~RBVd*JJ`7y;Sf-BKG2qu6oUEhRhL4P2UUXaw7s&`h=Ax%%fYyT=Y
zIOZxkBk75{r!V2^0Fh%XwEL(v*f9E1>w_HB4^(fEQ?9wGsEb!RApqC3r`71h7Om1(
z2<3<=_Mr<}!jIuffI;5P-aV50Nr7*?=b9EkKj4YEdt)cIl^8nzpA(=<Z~g`GXcBKf
z`qK+t2C%PiDp^UBgyvtcq`w$|wq?+3P#~G4CQ&n*;XR1APbBmZ*+j%Q)jfn)h|<4N
zYk-~|e+wDk4rxT7{X3?Gt{nYQGO;F2oB){T(f&ehm`8aKch)FJh`CUL#yGt5l_dm_
z$R@EnU_rS{v0j1lzB@K<V;B&#Rt$utO<Sy`{Kz#HzS2Wvz-=A65-s&V4zK9R8_3$~
ziK#=+u<AHeixde^3D=x2Q;FaUg^YNyjw$R|;$z-rz`9&d&iSu_5?TKpnT$mKQbfv`
z@xRRiN@l)qD1GmPAEZAulD{#1pa85uf`xS80DRjj0I?DTaO6XQ2^b0&?XT=4*-w$l
z<Z=s&(p*{Y_shc=fR}(aH#DO9>l|lpMe$8>eXL?GY3SfOK;+nNM8>crA5NswUm*%(
z@^bMqSw4dJ<`PlZgi@VSCJabrPn%nK0IKjnAX}Ic<dwyppT*P6j5L!kubi-DHZ&Tc
zx?hn+@{qig$Qtp4@Bk_139uZ%g-4Y)`&gFjdHvtdT8}31_G3RjSY!ayNo_`G@+%Y8
zk{WMXR!sC47H^>2Qz}#}$P-#)>L*S4%HM|hQ@>k@Ezh6sYc8o`%QdY_TM5j4KNan!
zO+OKjX7J)ienQ`80{K?@+l&A95X475z23$+34Z;zA0PMRGeTQ|Ml<brOO;<9b9gPx
zs#xQ09kL^B;PzFi<08vezZTe=t0Aj;ocnTd=is0sQ<-Szi4ns?Dg*?@ZA0bMTEL&y
zv%tR43s!zV?3fMk)UZxi>Wk6SUaD}QG}G~uRcQC!fYWTEoj$5nfY}l>i=zMJ=loEg
zKVVl?tia3_1X!4}VmUsx8N~E!_>~X)mMwII{f(U%RUHR#&~<oV=h=iQ6Zco91HfkW
zQi8yU=w137Ir3jIgr!TfM-Sdw<@nTa3_J1=8bI9q|F^>?L;bs1f%*@zLqH#SA_6PD
zYNL)YzmGR3i>2&JE}IL*0hda(uEw_P7N03{hD-<*HiFJ4bnO#eC>d(kdgz#T;eLQp
zx3gO}g69*u_6NCjutV$NqhP2E6nS75Xh@H_|3}rgys&oJ!^ob}M8!i?T3>oDs%A-j
z37+o%YM58}IY$sy%1TJqjNMTh%U-w8`cKBxx+@;8ZvG0wYJP;z;sBPcRdsM5y_NN{
z<Bmw|f;h9Ad#o^?wmC^TrIELv@zoE5H>QHoJqddq`(K9(SLnz1aNn}bi&A1&&e)0F
z9yQqgY5&>(a{H%FOMBM@FANn6ZkLar$W`Y83yrpVt*M|MC{u&=C9AZSfJ`VGG<ddH
z_NUkChluTC_#<Up$yDCP5K;M{tT@6>zfzQ4gqg`=V1q@1rqNgW^E|vtac%i#MI7w7
z?{IBxvtyVd^?UFY5<&e;^-CE)$&pG|3IKX$Q=qNn4Kp<L$ib)p=??NdOh$gh04LAJ
z0|Tg<h}{z~G0n;fyJELN-Pw}xM!(ZJ?Yjfi`aXgwgNb;iTXz?8de|dV)#;VzOPh{K
z)8sSuxA-aR%j>6k%=7|4BFO(_y{{5>a;$xnRfP~<l_K_ljY8PG7+zaWWXre7xwL?Y
z-{q^>Tz;K0)U5K4X%H*Q5FL@R%*Bp@IaylO=0L)T;y~GBRqD|{AGI_DrNITBB87^M
zwMJZRR=|t>X1=WNx4PH8cO|K`Gcyj~!FRCY3#MYq1VuyWX@P5@a;#eM44doosH3R<
zO!@xMVWxQ-3<;ht_h~koT8LX>g{Ad2YaAT@qg3LE&~~J`<(HeaIebahs%TYqk~flO
zLSrm;<dL)Sn*-eJPIuI9kv3u`ql&>tR&?%>=6Sce?E{ph=(9KUZg}>J-B~oAN<&Z5
z=S4$sv(N~(z>R1m_^`)CZF7sNaCpu%!Wp54+$4<BC99)-_(x#Xje<I7l(*;>wWiKB
z-}8q%%t9freg%=~IZ}G#Lp;nFkxL>jF=*Q3G0~r31SnvGKO@NaA~|Qd9-Flq7+p$K
z{m4%d-fcaR?%-ImSGhRMxlq!h!=!SkZnGm*qO?yraOdb3#$}ht*r`bWazh}y)*;Wr
z8zUoiuhu=f|FEI#^>PDk8gUsPY_122gGbGGIiv{~Y=pj1+k3k<L*S$E_EDQ4OZR8s
zF1r@0!r4}ivCB+JWmAzjEIU>G3>KnOI8gxkBc_i;@O1H&LP?k0zQuOIpaJ3$^UoJt
z&Xab@98>m5gX)3hLU$r*tKnMf&ESyv&rerWIp-27i-zlMH-m#0KR;UmxVpWWgPC2$
z(*yXe7F`@e;Kj68KZOL4f2KDAPy0(Ye|NdLN73XFj~47lSSXJ|d8=)d0HNbmPfHH{
z0lpb3BR>kEA(~{`7>*%ZU7d8@g7vvm4jyNB21@EcKB_DYwjq`AL7Km};vl>lfF~Dw
zYMwx4TAg2GNjudPM`ueVBrYyI3)mYfppxL5d}}Ul%-n=hSN07>ix4>sCQ~zbo7P8v
zy4DS0l)inB<q;r2J~cRQOy*#Y@M(w9O7e3;XTYZ!hy}$$F`LYwtgGF{;0p@Njj_XA
zBRDG5SDLLAgMs)rz~%V**y^$lyK$n~-j+RZDgG%m*a<oSXK*o*k^b+Nw{p<;7CVTu
ztw)v@^lI`XO_y^gf-W*MXJgZW-ju0)l@=as#pzSHT8D9IRfj2MrbZUQ$m3<zE)tI8
zWqUMl>j)LClwyHx)`>SqyEq>Fh>BY?d)LFC+~F}*5L%+_;^ts&#H`D)ur$Le4#pPI
zdbwgAGO}HK$vZ$W3h2XQ5O&$CwD_G{yUHw!1bYg`>`-{6$$L=h7_8b&#_+yY+5D~*
zE^FHcQ@-5wod|hE!L6RTBfC-TZp%^I(!A1+L_@F1p6TVf*HkGhmnzdwn`(eCvT6!2
zoijKGrWrby7L;gRM$91wf=VfyVy^8QaX~tn+t^z%wXvL2jsfhWK8=3CU<o2*TyzK;
zT1hCRCB?`6=)&V?pc42~?5)_H;1AGKJSOJI#>M7A!i53}w9za}myt3}QdN#I0@IuW
zhgGDnOll6e?Bz3d`vCJmdY$b3x{dd!GF4-td#>kZfCP4TZ1<R#;7;ZAjE#(h^@t3E
zs7pmQ$ySc+lb<hIVSH&R@!gf6@zy%U8*LK{vBl194(9-4Z)!{Vow3Q=@^(PqEbK&t
zp>99)rBL`26{ddNN{kE@j7w`tU!{p~2PlVT_rqpK{xbT76~V`7xK#@XZ!~YzH#x{!
z%&L&wZ5%x)FApsSya2Q1gcFC3<(9>1wA$i1Vn`fuXjb7Uj#r8S)^EV(UnD?6kQkkP
zJJx)0?_8MDF+P_oTRIQdrYFwZ-zM>{|0KqwtQwPjx%K8+BOeJ!UIcPeH~wbAfJdrQ
zf&H^GC(PT^1-bQVbr6Fql~*VFjuO^xUeOcY;Eii0uElm1o~_>SFtHVo%s(0fpdUCF
zS>9W5I5~rLDP!4|!e|(RwcQ>xSYhKt*rP##i0-7ljiv^GCrgrnJs}yL^dp&KWOtdR
zgP;N(Oa{9{oqKpRLxSu|n>&aq00%F~)jI22*(o^E)>d(Qa{PW|B-Q(X^P!bpg2U}@
z@ZP}E(d)p1<qgLPA1J|1BX<+Y4D^g8_wR!KY4+0MiTaI{j&0ABtX>qoo;SwNN9I1h
zLst!{^Ibi|{jlZ7!+BHW&Sl4eEczP~@-O077Y|xJ4x1V(nT!pKMWra&IVt~d%m+WI
zw|%MI<aM+Bn@}mcCt>ZRtDy;cl$jdH)M&`ENA<Fb7bhf$NyD^g2#`)Ly`iS#>tPN0
zt$xo-R_%|BWf+;4O*#AGZeWCFXVRGi9Bn^lS5i#TUdOS(J{fBe(({DP3vG{lWj}2p
zQeM=mk{n<r>{;D6JZ|k=N$U43yaDECOWRRMy-eLsIn`trQb+Jp%s29R8*1SIBUO`T
zug-gQp_u|OVoiN`D@69P^wP~JFz%6PEglN_76rk5kPN+i<$^aey77@{&_w{gb^&q~
zbRiYpHnQPexaP8&MFT<VzYzI?EmWYt)Z_P0SUFl-hG>a~x|=5N$##45SN<wpc@?QQ
z)+jr_P<u?Mxr*=~OTaDxAE%eR(pQgevFkBqYy}*iWtA<XxkdJ8OqnCief2A<(|%VG
zy+!V3loOFAdW-X?wub_tXh8aC7$+Yt|C#JFbkIoGym`Lz;=5wUrWuUs0|>CX>=uU&
zU9>B9+0jLBw}1xTy!KX}z1I1kf}=20jMCq4*87w@A)g^DyAap6F&ULn*t=+(Vl4rL
z0<Q_ZDXaBv(>f}tU6GNs`^zn=rICYODd4GvhNI%D<xkRsES1*vv#3m@+T5x%mkr=7
z<@mM;rBvbL`gwv&_@y)6E}q7R^}29q?(r%k4!^HdCnJMVmq1><^E|&WAd{cPXx9@m
zD|J0SczbElaebvi0ue3e<Cd}4RgQP`o*M!q%r{7qIscv;_Nlp>iGF~?j7X1IkSoH5
zu9LPlFDsjtU4Zugw7Oxm3gp(L-$}Mu!A!fGnW3xQ8Le<$CY_hm=_^-qG!445S%&2<
z1qK0BX6zVGf8l>rCF(r`s~5idDxIek^Z?ZjkKp&_<a@sJ=Bh88H+k+GvK)Y41cM<q
zA+Dh2e57Ml!V#PYUcqdu!Bc^@ImH!X!@kM(3T5tWqOd^AH>$292Mss?q`5H**rWga
zWHOurk186l2&wilO$HP@yMxyB*B091l7E&{#R%1#9GTg><1ilqc!-b8ljiG^i>Rm!
z45-$CVi-Gk%PTgM#>WQFOX_#1dw<LZs#v~>Cjzvs0tIj|zGT9;y+wwbj!N(4szDbN
zT6=>_#(mpbgK^W5>R!GEz&C#`*1i_iu)%+SXAE{<SkFl5LVlxG56Ya`De0~du)iw?
zxBp(FCG)ur(@*aLInQ>-+)lAllD?3tS1RnL9w?Wr!9S0kWfS8~^k$j+jF$;S9eb?Z
zGcPM>DteARt2LLeZ$#`gsI$C!$ZZOdX6{+kJSDEOkRJk;sww1m3V?t*#wHleVxBV<
ziTH6U+})|3L=u|Sjn6&JYxYd%*07skIc>2={#ZyUO^7EOy&tf!maodl&lUYEFDCY%
zl)dcQmu3IxeMt48Y#XcI>_`huy1N+cl_#GhOb3RgI34VqR~^B(@5T-fA!<zL(yABy
zapoR`S!KngKtw>K;dEl!Z$;~u|6Soa#q-XCg^qU~qPk_{<)lCpXz9VFK!z+H3k)rI
zmid&gbw+uK*su#Xyqr^Ky-<BRT2U+y+Q?Dq0`KTw0*OER`}Z_9UJUv<*<*7mu4>d5
z*>t(7=~B?Ivp0F3jH?{;&aWnqRDRxl?uDv#`dC8S@xTh3wwX@XA8OU?wZmiO;1C!i
zc*WVkd_tN5YxY+kByeQ&<X~Dw>tx-Z)W2&wOWi-UzcBQX^fU9`0Yqw$<6tMFZ);VC
z?D#^(5ufG;V8K<*oSR}xTZ+kC(B+LL+w&mov{oK&<&+<du5_CMBHk>A^_a<O?M{WZ
zv1q43t@Y)3*XxK>Y2Q-P3&b(L?9g@CO|5*~%4yulO7PFP@&e7W6yWBhv=8SQ_#>F1
zQO5s3!l#6cXH=u6_43}HfhOsI)jqG?rKs}s>-wG0XHVfQG^i;rN2Rn5-$fhfPj+>-
z$j2pIZzD!mg_}}@mF^Mr*J?VPvj$0O!ek$3-E0p>KWcF*Y~g41eBYt4J{!<sl=xbs
zC^M{ejBCGFii+w@l6WbeHKXw!wER80wZXt;|AuCw2K(SOh^Wl+F8UO0g>qLVb?L;(
zjC|d=+1yLplTj>rr*8A*i~@Zx^K)2)X2@Tyw_b<KfG_t#ePC!xra@VT)MKqefwNqq
zDjyzAM2e7*?5fm8)nV5d__;?q9FKC7sgXZ|;Wxz@stfP4QU<AWG(T;Z(_B4cGj<ZT
z#zeyQ`Smweb=&5262HInYlcXIiWWE}jckCaDq?5QwPw7`LQl~q)IM>T?{lb}c&dn?
zcB}Lzx{#ZYjG}2~HPR<Usq!|M&Vy0v8L9e&&M&L3^gC4c?@dfuCXrG_zIz%4CFhGk
zgjQ)`J1~H;<wJ1A9Z_^RqbazVGPi%E$}~A05hn9w=_I4SzxeXh+V)uU(|A#glc%Bn
zj^d)acA)#$p?w|ZRwU`)J|1nc^!Le3?tz}T%tN7%^&7$x+c%eVMbc87^PCNA-T}V6
zbN5i!SZTx*CSX#O?Cs{fLkdtFukvY}jV>XZksm4cOLo4!pB^>;iy4-{i5IJGzW8?5
zFnfCSpqg`yC4EELRv3$Iq$<JSE_WrZAG2qud$gq4T%Ce-kk8v92ek;F5pIT#F;G3f
z)HlG1al)5y4LmetznRotSP`3|sKA1q004o?Z<INBMGYjjWC)?~l*yIlk$j^lPybMX
z^^KYZjQ&3V0jIm|sE6jnaibN9>D9}#h7~1Np2%J%R;xQeFH{LFXZZ;p-Q{oea)QxI
z4@_w25nlqSR88NXcyx{aDj-EO-~Az9vJl{0raALj(&bM)J95)FYJJ$N=h{xS^^f<L
zc};(npGBY_+X~sWbl7|>8cV&~C*KAj1~9uTF3uHRFmyh6Y~EMWwt{!%nJ9b8bY<)b
zvQ@AiayhZCi7r+_A)pYCNLMiIx_!X5@v|_INXZD86$NaQrD*q=Zyb$Tugx-Q@`XRV
zlKATJCK@V7C3uOMU~#99EY$9dr+_sufj`gFt?tiP4wc!;Dp?OidJ|`;_Toa}K0_yD
z!>kri&VPqo_`bGqgs?h#_xmf?VxuB#^&i}E>+nbES?jE2<|_>4>s&EzQFr)P?|)oM
zbGo{5B^9@_Gfo=JKdja?eG!V=NX1KG3y)c@%}MX<=IU0@v9f@9Un;B$KHuYda~Gw;
z<GSU0+Pkb-@V}D?D6+qBsMj-O(ATp2(K2*9JOi<{aG=K{q}LVLJs4@^xl`P9dG-S_
zO%B`R*I8fGrk_v(iez{+Rea)KHuX6<wm4D6K#h4ICLC6vCl`B(<Mi?6c^ceq(RSdk
z@?%d-q@zyVcIkeFFxzwYJEks`x(Cy)(NC_4F*or(<z9C`c-z#lT5{<t^1{DmwhB*;
zTv3CZOO+QLb{!3^4ZC`%60=Eim*?vzVAO`Qf4t+WMRl)RNbfpq_p`xh0Pi2o9b2St
z$ys&o>XPlJxS&7PWm+2knr<(jXc0h>#qn=RIWp}l3P-k;I0x7H><D14TEeVZI&OX7
z9elhxP2?dlHMkzAT-kBS_Jm_ak6Q4O6>PbUE!80<Ks_8nmN(>hNwC5uFbB-XbnDW-
z(<IOw*DTFR`ZK*ST56sGRd3(r*=jU8Fed{|o>7$kL+Y8kUPi5*)t@K^*bU|?BUpin
z*o)c0#MV2t#w@MDuFYy=E}3&$)z6?a{|xap<Lwkorb57>a$Ht=Otm>&W)BH_;8K4h
zLQ{?&DhSi3Ea!>_jQpx$&6IFINYHs3@n<FZAHx>r3ug3dy0hS4-uGwEN~zA;V7!s#
z#88uWcvCtlN7AZQZ*{CWlu!~{3foJRHd;c`cT@zG$`~YBs#v{9`NJsBH6S{;!=taq
zR%QyQgKMy`F!?#!tjbE);I`h%FISnfm903*1(fGLCMvYTsKTnMKyy-9c-L~oIu!IV
zFm?C(>-DN>>9(ZKhK^dldYx)&MK>8NWOx7e2ho;4x}<VB7^NCwy1S`6QySvWnz!ys
z%~16*t=**c6l4zKb?1|pc~33QnDzoS(tF-3LYxm{a}|w7%dPvj=bP7&^~UcT8He;%
z?e2LY$Mjv}rlmqb0Y36XYvJbB!y9kQt*R($86&B-&aur}0l1$?ROd(11XZL8J$p3l
z-QKh7UN$?6r&>RdTx1_tl`03-2%Sh1R93}__@|-Gsl%AQjYjWgR140P<qOt-Ltfb*
zY2jBbl9w&A8CzQ+Hexp8*&!`}6MM^zh-C@OeCe;?!<D)OtD05WJ=c*C{BoVc`Qcu@
z4&W63MdiD1+RCvvF`4m;gNX!lt1%A57KU3O0uaDA=MaWSrl7GZ?Pm@=u(z*nc(@@k
zNEG0!%3=ifg8+JbJiyD1GGi?S*X1#tjR_?du(?jkheTV@QhaV3(k8K9sOTc_$$cQ4
z)UpJyI2oxlSS3L+i#>$a#?T>$S=|}2S}L^mm$q=0R=|%iv$%1Am9LDFoGxvH!@x4I
z4&@mn-O16SrO-R|H5zRy@kbi%$7X^*J7`0UFDGG(eP2f!paflIN<Y%)c3OHX95v!9
zslxCsJ+sdbQ6cpRL#3nskR<n4ghEs#z@GH;ky?cY9+syQ=hV`oX=of0@c#KX2Kn1^
z3A2Y3PZI<gM5>Pgz4`JpLxr?zy&=aPU|5%&nh^`4m9I4b<`KZY$sy_QPQjuX>zVPD
z_ufyV0&CA!Tgqr=pvl<$tqXYepCPbHWQopi^51_QI$fZ@ayt9q)fR5#EO)*+1~_aF
zhs~BqkYDc5fBDbf?T?|q%w7TPvH3b^&r?~Rd51OT0SNAQ7XZ;!KS8j++v$VMLBl}+
z*Po3UAE+Tso(?if>j745KZ_ka3*PE}jH>wv%pG|iUGp4xb{f_6hCvDNLPRiUIyG&|
zE=*0^%i5Mga4=^oEmc93oU%Jwy?`!Fam|_tqu7(h#n6_eU3=fM*S3Ri_e%`+(pH-<
zrP0r8{tB}~tL#^~`>?wrdpLn+)DollNZ9(>BbL13)=z^!nCSvI-cF3#XSCW3o8uhk
zuLx_D+J1%8fKk8%>3w1q+OJg~j25+i6|!hn1W05D@UID@NVRn*!A*!26_WlitOSIE
zG!PNtUE&y$ZCxYjPy@XR5Hr8vIKoeGthBK$s?O~IS%K^@JWBZ7G}PjDd3fjsejBU9
zBlDXp(m|uRAhll7jueMW{dN(jThzvBanN#UCP+<O-ZhY2PKt}Psa9h%$INN~t^OBJ
zC<1IrD_fdPGe1a7(KVQr*-}jAxJ9K;P~$HkBM-~v1X*&(qG;iBqfn{G<>8_m1={|W
z`Yjb{A&cxlH6RQfpho*_c>8uhZ3k{?eN$4qJ4AU(PPr5K&&+Pv=2WKqR2v_YPXBB`
zZ7<)__NKgUo6)NjKQM6UhQ1F01^$-37%qoPA;o-5k*kM(LwA;b!4E3^TX=vF%$U#4
z!hOiU+(%)9VOQ0T)NDXO-wM*-L3vCVycemK@Z8n>7x`EE$!u`R6<<6|aLFq{`YYt0
z`6zr<FPs-I^gr@N{^P{5tE~=q3idlQb}AD&n~|qiYamiSQ(`3K)2kVc`V0l+3o<(9
ztuKj`#%Fk5U|BP~VP=;l91{oSF55z*87Wz5Q<_H9s_kZT^IBlZ#<$puO$TidG1wVm
zW`HS?p$C0!%o3Z-tP#3VGON95uAL`T+1x@yXQN}*sHxrJdJYQOzlTsiH;GU^M{FHb
zEA>Yei92+zYSv)N3GSXR+2=3B06t5`7`AElw(1nE^nr~>RkiJzGwH1(;19wVGy|c+
z0H-;q3u6VQ5XURFaN)G52?!S;9w3Ah8pGT}2B1h5vvK%kbypZP8++qA2M4@(q}Z$N
zQjcqy`er19Y&l)wFTF$_BR;DZKGIO-wSKN{%C>85HT2Q&P}*E#>3|D_B51;4kI}j{
zGi%AEk981q<){cIgb(#wRNcEDGS8HW^59)ar?ItZNVqDcndgu!T^7`XZmazuPzAW5
zy!Zs(if~dZYeDQr<`@cg4Y{bvq6IWc2KSjR8f95S$|3x@tWxp0$+F`P=bE1_dtb?6
zp6U&~(>L^&w0!<8Z?XE%Ch%&rli5L0hQr%FD7Rix{#mok<Lm4*!y9&&{_T@D{$j|A
zopHCi>iyp=o7^88BQq#BsodJtArVQ&|Be{0<zc<<j+&ZI&7xB2aS_^qVBOuvTQ9l#
zo`{wN4g`vOD~_e9CC4W#kNQ)ZR{ZTMYUm#%=>=Ry=5U5^+8m}kp~3Vd40V`_EEYy~
z)*11?+Tpr#-RhRLssjdR`*p)wRqHC{I>SMA+M8f4JQ(xvXKL3P4y2|zu!q9?hD)|&
z*DAGD2bDt+#qEX#<wRUt%iAs6UZu6HdXcvIp5(W{7(M0{M*Gi4OiaEYAu(r1Ha{QN
zBv&TTH7-s<WrcP^WmqQIHG_Fwz@TnhM9b?xnHame>XG>`UI9bq=PokhS7II<F%gKR
z&9<F2J-eYs<E<O(rX&m=`z&~v_v)-w?E$*9W!DVuav~0Cgktn4GVQqIRi*pa8^mE@
znWi4sij}_*0WZRa@jW}z8zjos9#B)A`escLr7NL%x@JND{Z|Trgw6%NhQe((B+-e}
zQB=^TCQv%YG=^27Dkf2++}(S(V*?B7lzF5iLS%483)T;7i4m{Qm{77zii_f1CEQe9
zC;;^FgN~0`rU?atV>DO;3-#B&(z<{QVA9M0rL)r7NtT4V$hJyKXFx>hC|J8F(qJdW
zTDiQ;2rxz53ON*$Sh*IK{K!M|Ds7=ySqh-zb9JorRydoGCKudghta(R*$WXYVycY)
z0xLZD-RS6{bQ4Z~8Ta(~SZw^t?t3N~Ha5=r{ODL*-0JSbXx7PnM8SZ&fPJVdyE!@n
zimMuXjk_nFU(<V1S~z(z#og)`_9P@@^!6lj)u|~%UAt+SX3@&H?@}N}Fi3h=jroo|
zsef_m=3qoVPGP!>gDu4f#KzG3g?+;_<>kw+>)Q2O5%x7jJcMi>2-Q~@`dW6a%bBs2
zTitlI@c!DOZ!e?K=GI&qefI7F^Zs+b*ayTT!37(J_^JPr0+6}ZkxGH9R46&2_HKsN
zj4(j=Se3@V!&N@a-m7Dsiq{XNR;43=jKqVb^-7t))S|(B5CoMkQcj8W+jP1zRE-md
zryfeN9)*pvoQQ>R^ZyfR$%=ACNsRmJ#ai1yjNedJB|SOcG9OVIQ@RuT55X({q#S-d
z*<0z<tiKBdnfsV!Erx^{ua?<*;;cy4BwU}axDd~e%I{}AAPN8(Hs^?*@lWg|9!zZ+
zUDHiSYg(pH7;t}V(e<4~xH7$O3YMvJFP`zq3Up*&wV(6}Np4K(4!`qJ@C=7e`KwxJ
z>q&L$HwRZ;N@y;^@3y~0amX<HhB5ERn;2iA&{X%=jVZ<t5H9mM^#$x-$O7BKDnoib
z3_k&3;l3jmapMvd>BB3kwukaeeQ=wP?IbD{yVmQ0Y_V(tjn;$Frzy=42{-;7poFGf
zd}w!0cmGv*d<W;{C@N@Uny``!udP6}>EmQ?ns2r__5a}^gi`S(!$w7u+gTpL<cEUL
z1Hk>|&WV9aNNr_%2BhGem|AI#*qq^zY^9tLUh^E>XR*8kG|bpfMUH@#m@kN2R-&H;
zl?$Iw7(Qpft2iLI9{vT7U&Wx<_spMI5_ewp``Y+~9kUfk$@<S+BzHyV1Lt1E)pIs=
z!@HmRTIXg8))M78czejp*_~dr#Vt!T(Bdlso<kt)mOgpvlv2J(5D8QAB+uOE+R>>{
z#uW?x=Xm$^%)&*FDjXqcDp4JwCMXgr!$EhhjitC-Elj(tQp|4-2fQu)9j*}Znt>6Q
zDVfW!j5gTx3AYpv@~G6tPEXQHY;s8gR^!qcrV~;InJQO6E>4t#d5GCJdu_(`SCJmu
z$vY*uSY!Xevzm%5=)MX-lPvz3E&1oeX=32C1HO<gxyrEY{(Yi-I+V7)y(saYV)dar
zj;VF0mK#b>esLjN@(n(4x(;!mEPMA$^pJI@emDSv4R1}BWdMQAWBV1KCr_P^DR8a(
ziv}t$7ERQBnK*Smw!pQ^Uo<GVbha!WJ1&V1U>M8=hid>wK)Am~_;_o)#h5tSk5+rr
z?w%1n28fCJxWkHRu)+@S3V*d_u=y`r$pJ3lY8sf9|2KH@P-LcQi=%vkeYSL};z$3f
zLs6N=d1r*gIk!14qO{MYuRziG(_;IS?p$k#dz=B0RNl1EIj%nkEE&s5Jx?;=7^c&*
zzJzzvNhjCx`Fq#{kkJRgn6r;{(iQG;B>0|4I9w;Mv~rzBL?rd$uT7m~{O2qrUoP{3
z`JeYyq-OF{6N9PSY}!Z*R+~mQ`DDw|L#?4M@N>wIy9xvhoc+RxCng3`7j4>TC&rk>
zHTXy7XUk2iS^f>(a^d=t^24E2&xlr4AoU=@Y#ClW-VIg8RAr2!GPyj7u62{pd>^%z
zsYZ4CHna-Nequ0y%V*pXkdawZ-a8i3|24-W#K(QXP&XkBF;Wd1E=h<XtPsY`72DeP
z19)lYb#$aks%js&DG4|NF)*{!B3Mm{b7oocLlkp0ra#uMy}7n^k0_ntBO65`-K-1a
zqx0Sanf8)!JJnE+8wqwOlJBo%a#HMAlAU#04gOai&_dJKVf!PjV%@>435_|#(AVNR
zJq)zTD#;<}Q#$%j&u1~Y%yELPiZT+Bsl2?hWv4XLI%P3+kQZY;a_aSMiEf&p<B^!G
zWIOPRZ7@TSg1iyBffLm&Ic)nUoSH-4X$A@bAC!1kE97OUNPt}?xs)PfGaYPAh}4oL
z7D~ExC5cbQxjAHf4%cTv!Z`PbOvto4GDk%BX;6{u&jJ_%tdAR9>`jyIpDH-+bmXVh
z=1OXRa&_@o2Ujf6uBwURFXm^jI(5k&k~xQO^$m1h1axOJvfF}!T8cb}Y_z9*Aa<*v
z#1f}UkwrC2PW6uPQ@nb)yHR1t5qr{p@Wf2*iAaiJ)Szo1j)w{hddyvAJyc=zbn)Me
ztsn|Hc4$6D9V_i$qZm<(s&_?8w+9|9A50#3tfYTIIXp1;#LBh@AM9)|=N}ej1PN^U
zu5|I)Ank6M`C(Cdkie1cN|l@qQUNJ5iSVDCfv!*CdcvQa-oJTGR`w$&)F2SddZGy4
z``)#jGW+&O_JaM^z>`FK($(B@+Y&Fw?Hz4J+<m@jb^?XBK9h6N$9SnB7o^(ovJL6n
zvVc8j9y{}N|3X0xIP?ggW%~b~HSGVxNx{Ews2A=}1=hS{%;Ro|nz8ycX4?IWe!dMI
ziVkE?gbo$w75TVy6-Q>HOMZAV!quR2lk0ZOs@Dwa^oZJ2MI9=4GgcGZrs^c3t!r0A
z8Xy3wnB+YGhwzRZsWYZW^hI1@{wD<{&Aa;Z3}@GBcKcIm=dFe|>NHZEf<BOT?xTtg
ziUJjkwXw9d=yoRoEe^3exps8_y~Ud*I~~v>zakHpu8s$w4INtLBH%G?adr0g1lz}K
zKmm>!zt_5Bm#QP2*@=y@X<)0@LZBnS$Bn`GhRWPUIkjp}0#>nTHMS9^L+h<CEFU}>
zlFzN7+N5&RX-{6HFk|b<C<b3N%eHqC7v!!`gImx5t4y!L9n4_dTmd4oHK?$RGo;Ae
z{pK@oS`j+&5o-&Uhuw-lbjbJ<MWw^_vR1mT2Gi|h7aJX-ER0GYB<rhjgT7aCic!5Q
zl<YtU(N;qli_BI(w7PvRB+IthZtkLNjgb@%n!3_mWZ}#|mr0COAmkf%JQ|nRK@;fB
zLOze*l4zwKi^=Px3+>_x{-HR_r-51j9H+5pY^s<ulkJ$s{%0MH#Nbh6tZDFlBFw!3
zZrowoHBp&>`zChj%h~SW0pOD&LOD24c_+^B#<~CQy^X1?gW@f6B2|~aV{*t3QINT_
zJKfh1G~uBFy~tNld1$j$B9Q6)nqz2$YNc;f_B$Hy2xq9nvfeDQ@Y0N_iU60EFQNK)
zvQ2AZg7oNfE9cm;s$gY)I!kMX*=sf!ofXMKCHX7#{qADW3KhM_)pTY{9|3deKN>`l
z&S!h*IDoMr&DL9$F1LZ=L8O~V{G8QF391FH(!s?#fu=UAYC=~sI?2E8>7v9#>VG-H
z#n0YUZCbW{ELv-S5TUjUAQ*U49hD}GL(Xvn9dahMh+exbd?(<qKngOBPUd5n8g`N+
zCExJ*ULjk?*-V$}#FlQm@aCHd+sGQA<^e2vVR?tjV!y}51jNsVFbjY(_|+;=LHU;|
zQb9`3DrwSE4IldSqk*ltAJx|dn#&R7fOeD0%t+A0dDT2#wvv9H$&xD*)tc-}e3q6-
zk_6apE;E%+*S^U0b$NhC-r2W1;hpWGBFY0hVVSm*K+EzyFTlcxG%5kjP>>V!F=-gh
z%@DI|m@2i#(WAce?+RmhJ@Bbx{!{cI+noeYD2@a8Cwli9xAqcX6g^|q@%tW!@5jNh
z#|e)Q(s*!so3p*$%?fU94|Q*Cw{dj1NzRp3VQygb#bNY}!z05+vQSnbvf+hqWR^8o
zUO@RFX51;xEc6C8%XOHsIJcK#QKMf1y}h;;wsfQh==m6<fnQ>`z^j&Z;(6J2o>$`J
z;W5LD(G%Fpl@qoiW032SI=P$l%z<BHR=}(0I&l0fJJ&05aq*a;Ma=}JV&%B4$P@(O
z^b5dE6q1Lqto(=1#2=QoZsV_iO1;Cx^t?J4t(6YkMSa-JhHaQ04x0DgQ^~_&TITv^
z)H4{=(CY)h+;kW{^N?@TXRUCBWy7M1yU;U7tvePw0(h-k(d``7nb$66G7cxC?0Z@B
z4-?h<rUqBKwZis9r?%+<ZmhJ%Ae>fxJ^0GytD1z-gBQE*X_G1)Zwa1?|5CDxM`X^T
zvePbSsR@dXPgk$c4xtSfqV*$@ZJh>Bcw&B4i7u||JQZ2H`=^@tKA)5*nQGjbn3vR_
zC)Yo5A``xIA_sZvFN4CPBgY+9Dyt@PtCV}RtoHyK6OY$gUwt5T7hBtlzL4H99yk^f
zvSt75-yMdlN7R{~4%yK*v^0C#&Uf17EDpnG4%VGNJ^G=3NEe!qYQgW|=qk#~Sv-N8
zrS04<Kyq`VgGn<Mp|6GpE=An#WBw^X<!sqR5UNT6-8N3?52enMljJz&6%`)0>5og~
z<31;J0)!YB)rjXk4erJiq-rGvXg^f7JxA{TYI`%0lPTtYZ6}U?Efi~5HZHZmrV&>a
z50%=QNU0>>P^?^FcfEUyIXGxO&S_NS$bS&==z=M}tB<`5S3?BYuu>W--#BqFTa4B)
zj3`pnGKGE%^E|qq`fP64k)I#7b%xcm%ssGGgc;S=_-y~Oee#T(p>@6*M9%5dbNQws
zf_*zG*suto67M3^zHKdv5v4$&Kzt0BDCW36c^)eIv+P8O5K5bWh;LT5qC|cKmony@
zex=#f^yeBq4OF-<+ML-ruxV_EVJW9ln>FcGc6?A*$m<iI=I#lve;p4h!+M91{feE)
z*7^q~R=vM~U3eR$86e<!GF9=UFLo^gB4FL!Vm_t&=x0xo9wW#CR^<%}YvPS?-#6Ou
zEP`a=4d3uL$~Ofm?ZyFW&?sNi0MKi*6<l%X(83sf$RkD|-0&vg81Qqfhh#}HB}}kK
z@DZ3$j@t6CIJ9G|>e=au)T?cPWczHWFox=Uvh=I}I#l9{V!obw0}^onrQ&t!?s)`6
zTJFVX6hpynh95jVfUM_BFVFmfcMcV}BJ_vI2|XkHEIXs5c-piBkWUk&8c<<4ec3ns
zEm7o7+pN)|Vq@Fm5u%~CasCpTKLivqYHBkOdqEWWR=DpnUB<M5P<)`!Ihr=cnpIq9
zl<x%cNi#{t8ZAve+SC_WYMV7yR1_pB;w_bM>Ba&ZJvG3EMB1`nSXhaX;-RspHJ}dy
zRb0r!y%ut4f`?ZYt|2z`UmRB^d?!z<34HBQ1vkXm&#X$I5Rc(|K4|kfCi`$R+}Jl)
zo%Vy}Js_*sKOIM-Cam*)z!wC;^c-1P@;GS`C31udIhO^Efp)k6RP#4C6*Q_MBeG~g
zHoi~_uNA+*CKbj(UusNa;wmC%sZGNFtM1TBraJsZiE#5;-1_r_fAMf$^<wEwMuoLE
z(@#ymJa~YorF1No+++frD>)lB`1s8=jPbd+o_F5SEDwmiE@ZQtFrMa~_@1vGfLqCV
z%N4o$X)z6hr|CCVh6ZGUL=ikF25FfmjnOmW?-01cl0^OyE8h&FVd)95Stpf|5(V%e
z8Kjk;G{yuWc;rrK(fi>PXKDWxu+a(IzaFK*f6Kjw&4@#FNPz&AxaR8)IvnV0HUZWv
zE;tgTDCe3>HM(T!_F^$p1g>Fha75RqSZ4BQM$S<!mgiu2T!O!{o%D8$Z#KzVYl#t!
zS<(KKyaSUNQ6Wvf74J9>bUWy}!cen*7{;4E!|LTRrsalrBe`t6x3WG~m@@eCmSl((
zc3Y9&gscrob@C20X7_oGFB<@$on~O}-B^d!61&eJvG%|%`AS+xCXI3-cj7298NL%+
zZ^qFmiikX{lYkl7(u}2ueWQlZ!vT0(E3!WzkO~RVS5;=QaT$@Vg>#g$Oq`P`ili|^
z0`O{u=J0F`pCRl30t<yr{%Y(^i-}J2%ou5U+E_y`p8H`_^=>cA`a)whUEQEZA8>TW
zM)Gxt71{WMIR%;cxQP@w@;?_`><oLLa(z20`NCIeun@VVH{oflkfO?hgohPwbnlIA
ze_AZArX62iOG_Qt*p4k52D+|tX?_s7d2@R5vdIX9a|rzF8z}#|sF!z0h~ZBen1SJ}
zsto~8)QG!vCUmFx{@&r{i6d!(fl&a$*|n{SvInWqSh}e2ncgQ-f4Iih`i)pbN}AZ+
zhD}6g0~v6E76DQ!`zq{%RDE&uH7)9dnJ(Zrh#~d_Jsps8qi~KvgW9c{r@tbz(6rD>
zoTaB{D^s<+XJ;2-vfq0_tftX7Z9Qc1Ue+>$8rs{E!^85YmoGmpFKQ*Qu!*gPitK?_
z7KZcYv$E!$vhoF|s|$5FU;!?GdC*-Jh*f>LX$T>*1OeWQK)hq9AxI(1L!?Lqo{D{*
z>YS(g<l>Ydeb8&k3J$+Na@wBj^DYbVJ#YCu-N|ul$zXCTNdETK<Y^}1!TK<hFtrF<
z2?CrBtX9={acbF{Nx^9Zj2oiKZlK^$$Z!`2AH*UDAV4b)u~v-_P1N-3_|20E*>KKr
zxY2YJJA`ls_7COlv6X8q7(Lb*nnh379d?XrSw4@Mi(l=sF&EyZvK8num7D9Zo6F^X
zPLnidDdE5otIN>r1!0*~^)mS=5)O{6(3r<Ht^biwr{XV9^a8JYh8f%vt?do(WvImL
zgZfXal8Ta(h$v!+f?CnUK_ru6x1oE}j!!mS@T=4>aJ-h<L_ghhnG%@n`r=(Ax1K7^
zOsSmJmE&*~;V?+0gIjO3r+GQ`OdD<iuBW~U4S^dplM#yUtEfo~6!zK|qdwykg<#@i
zAjU7KT60?*?J!sx)Km1hBO8xFM!&{;@&Hp_U%WvZsN@$ClFNSh(`kh1te>wIb}P6g
zay!$rK+_i7@{m*H>RIwlm<r(z%@3%SwR(Rf$1PErKXQ&d_$N%;=WFeg$OlIz44Qec
zux?9RjQPueYLX#G&uo-xG<+WL!*yQLORfpHQpEC-J<6|SfMf>f556Lce`ibkV{dOY
zr~<H|EBlS>hF>3_(&2CH_dDNZ33YfME_dE`I*-D;1_b06&#-Xa<Ml?Yb|tj&*#OGZ
z^$v_Ub5Q0-^Qpts{8VZ<J^@(@{ha0Y-qob({xIpPDb-4hReMElB&WzK`3&fC`)c2=
zn0q@1OG>dm6mC_naN2l&K{|v3I1FZMO$++HYbiccLpZC&RY3-joo8BF(VI+LV2r%T
z{;!${y?|k#F+ujRP)81xVM|0+_fj`#8wiI+zGN1sbpdjxd)%iHoB>&16cWBPiW49k
zeg+ibf&e`#0PM@Ma?+&=K+a8en^_*0Y#$x*^mnsQwWWRvz;Edv*V@7y-`M#np3r#D
zV_HCXfQBKB<vj}_s9#vKILvUq(f=$CKlk9w;(|Uh#Vpc+-cEwkH$7)+sz<kxv*`z)
z2a1wv(>nCnOX;R-rewa`<9*NbD|;9G2A*Q`dHpO8?OXKLtp&L+pa}IhhOVs_5?vkY
z+4a<HrvMghWlJs3LOduW(~~93Vl@rRDPKS$SWWg4sAA#;vSga2#-u8VagW;Nrn#1(
zqGddtiHHV@o@yBs5RYm!IfpcxJ0|ekVyC~w_@l@=&`wpO0s-PccfHiu@e25rLe*W@
z%VDW#3aJ6$%;d11Mrrn=>MjJ(Ob`}LAnW$~Etvq>r#q2{RxdP)a5cj1ZgBz0WHqWX
zbb09V4xOMW#70^|9=#jD?wLf2WciU*;CP)KrNK~yWJD!psU>&@*4_xITM3M15n=@=
z<8&0^_TQ776axQ5l8z>9I@hH#hcDoz6j1fZ1zbuV4bX|lYNc|}aR~%jSte+RayfHT
z12D26E2*w0q`?b>X=^1MJn392O5K*#FH+9~kNTvm`bmyeFMmvxWf4^>Np3)dh$qSc
z4FSLxU*?fj%rCVJvLD<NKGpZ=9q_c&Pp{aZpDvEl9ATOZahcUZ)jYc%s~#=RmbNHF
zu5#&-I2#a3bW<xyQP0Z$5qEBtR*l3(y?s>BBl0Fmb}BP+2(&|SDi#zOdV|HI?sTSe
z1j3C8$Md`~vjN}_UBN5ATc43rGAJhDK#}FwStRutza6Nal@PHZjmsB-foTq5Y9aq|
zSsM=LPeiR6cSHV0xim_XuRhTc?%7NE6A|l%U0>`sz^|49`w;Xz)uG=P!Tr~?ywjK;
za;Bddd=Lcyy$*j;bBM<;yF=ji#QX*_h4G6=?&7<4Ru3n{fIvE8#bNzUNT#(2_0=>T
zALNn07ajc%9}p8C^J4EblHmB^{X8=F`yyf%ZPT-2BV8Z1LPV+`Y)~i5R|Sp8=>n#i
zBTv>h<Lk>comc=j#JejUboqm~54-|_n<oD}^b9(>%V`q`=v7zVf5xqBoq1<gWqPrH
zx3cE}U@AbEbJ6Ml@L`^qBqt^tv~cx(6!3pp>PW|xrg}eOwU79=Nx@y7;3{vTSM%3I
z^Q{n@E`z>x;Nw3XxBiX(bsC>{zyqrCvT*ulc4Zzym;~>UOuB{nCk)v&!h-APS@|pR
zI*sM+E#6Be0S-nJk<^!d^5o+WL;cF}ICvZcO<euxAD%_u!%$&4pyE~z$ima7iXtw5
z-Y<>Fm?}I69AM9nPk&9kZGO=^M+$9xChA5qIrm8N?z~4^GwLz#%jPeLfCsh?0ccxM
z0{|?~KZzZ9vihcKJ!{Nj$YFuSGP-WlCOO=(h@1a-?Jd<hw{eCYR|O(^2W{EYQ8({>
zG<jFvU2rAXTm|d)HPW@4ziLxz1;9e<deWAG6?_pMR0r=>zZ9rfO3H}1>lN(!$=rF5
z1A5>=x{(G{s8s;7`f?K&5)2aWx*S>^ts|0^B~qf#lmiY|&N0DXBAGW_gwWx91dft)
zGy$FzcWQqM14pLQH|9%qOuWS@D`5*%a2xV?^Y=gj$`%Z5HqUP8U1j_)lSV*AT#A}U
zM{@w?TqTCVxJQYqDhPIuqyVQ|4@zo8#V0sC(kgg#KmYDpI9*J2$xAQpK+>hOIY5#t
zVoVAV>mtl^pZNT!2ZsY##dU&W&UGI0Oq3}I@R{QQQ?S50M&pD$YK@)oh$-TJ2r_=x
z)p!P;aBwGut6^hpPOyMxQ5f7sz+rb@$B;6pbwN55gFO&C1CcBS5GP&ZFAKT&LRPbt
zUtD2TrZ9NI9-WxCfTH*^dW#p}^g&gEq8fe?_c|AOCejof(9I11GV{4E35LGkIuXjn
zFx^g=fnQYH$_1IdMc2i+96@GBb_*WK8(@yWP<+Z2Aggb;O|oM`)1n%ZV$%>MEn0YT
zt@*Y9dlL<irB4#r>G<I2VbZ?lVP<|Ny$AZIIrJvY7)UIy9LZou4CTRe{eaZXy?-Jt
z?{)(6ADHhymOM~D_;kiUrbZxutuJf&Aq#oe#dmi)%RU4?K<LhVnR_n_x#~jSI#8==
zyMS>5g!o29JZ-SS^=%l>cBhb-iCejkMArUaOUO!}f952I#JSTzg5!qw@yK~!C+XJH
z=kEuk7M{3vc2?}1Q<1qY0B<%W<^I<$A5UTRjnC9X8Xzf3l$HCy@wxi*o?K+&OL%bU
z2{eK}%3TGWzUA>2QcP$7z;t4s)cVrbaJ|Jsa`r`&a}WqT`EN3_5j+e_GYmf5vTWe;
z&z%H-svn@gu-Ozspi&93%w&5ry`^AkCrUMP+Sk|wNW;#C6Kg6d{pAlUEa&Q@U61<z
zbAR{!kf5%WeIvkByF9D{twRk3!;ngy<Wxn57_IxU^}gD^&^T_iP)HgU^T`Zn49JeG
zE*~o1guOsf{OgNPQe}qJ*x<5b`|`-c5HZVUoy$$xV=My>tWnep^<mhclZ@7TWUXi!
zLqLuL2ksSaa98)z7D97m53lPy9ol#sBD{9Bg{@oX2?vJY_^;Jhu85fq3^)7Xnt?M>
z-&Xd!oKtHSeR1Y4q)`pxk|83!rPlOWQt!&kiG#h?j~R7oY~PJPuwwa|j6)Vzc8XbR
zv8B_EW$%M<TCF4Fj|HW+aZP3|ZiHn$LxuT=iL!J{Vl}cIj?@(xYFm!aK16E{0NFzE
z6tL_Y#TP9Xyfo40d>VArmJ)Y4n;yLZP*ip#<cYv)p^knZS$B&+UgqQXVC~-J!?rQf
z=TuCwi0+rDH?~(jVRSXpXQGmM2W!i23EKXZytx`P3T)#e7MFSc@{_vtr}Wbj?5ZtL
zG7k~t9gHX*amyQaxjZALgQPO^_O6bG@J`cw3UBh+sDY!Q|BUQb+dlk2ul7*?&S>4{
z;Hi2+f-3SJeu#vLYBF9(t=#T5RgWueW{ENneHys;o&8o4Hewv4@+#N#O-<tY8WC<J
zBB$LT%WX~3Neq%oVvOxrS9sj73hd1CNp-e+_L0w4z`+9nyhg4u-Huj;;T{8##0imt
z)QUTp_E#}YMok5-$<81d;*tnL9;q+YC=2f~FyW^Fg8{BL6#Nnj6}KTF8m2c)$&)(i
zYNsAI!m;j?_@-Pqsb)w`HsMIBP1<6Rwchv6ecA<$Ivig68_tC<jipf1Y;Y|}&iXdZ
zd<M_KhScr#vn<2xA@KrUzVg+?;gjJnyAKrF-@Rv4b*^z#a9m3#P%tJ=Yv-CQ8vG*L
zx=#xGTt<+lTOiedZv6bR3!>F(;)>bNv)`6hU3M|Px)N;I9=}4w%!}Lg^YIk*GQhIq
z3()nsaI47}H4GxotZz3i(JJT?d^1D@P<XbVAhk!e$3N+4c@7iAo;Ea{r9f^(6KHB}
zA=Fd%`-%tF(>JbP&w08&&*iT%g@$dK1xpzwSpLIJ4&;bH_1({{EAb7H<duYOgiNSw
z>WdUu4*vBSJ~n##rKE)&PedF3h^woH!Y^tFyM`+-Al%@f{*en_3Ehy(mhBZhQO~ts
z)nD{eR6t(u=;X0R^0~z?m6tAQ!DC>0%@l?fn(Bn9$hPdW`bDM3K)L)z5`2eZb_{%u
zz)S}ZXY}=XzAI->W77rkkI5d})A5>7Uqr*@rlyPHpA)^dr{b$dz25is#~|SA-rUS`
z^8@p^>}uA54yT77Y1bT>J)Y2dH1J7#we|ba^D`p{vi4akm)ywtDM9J}N~NNPT%jk8
z!X${Sjfa5AcyGSZpsmA=$V#T?yDy8PFki!vf|gkM6ZDcV?Z(M!!HX;_HQD&~cSo8w
z4|P85$4cK*GNq|5P+>x^%Tb_#yUCs$7PSvgnq}R69YLI)H+lt-93eRJxU|4EV>L7q
z`U8#pt!c@l&VHL2)@4C{xXj<#)S!ys^yWrlGCy8n&s#oCYiL?#Dr=-ngk|vO(^5vg
zZN?dPWdVLw43*0fso2yKBTpjx1cQR+0h!RxX;@JU7`PiUyRt-GlL8C+P=f_D@{oYJ
zB~|hW5+oDGDUYNv1mzI5!i<}MO5p}r$IZ>S6$t3$6m0e_aD?3PLe%iy$eYbAlGjZK
zx3#1io71syt;8f*fc3FKB`86eOIs~0IUcxOmCZkpox5O`x7~~lY>Rm?9B;N?QdeX7
z0j@;%d_;e0j_`pHVGv6!zqiY}pxK&QM1LlEYX0Z{ubMEY1<Y*A<xm`n)rJ-2in|kg
zW9;EOTVFc4{AyUbzL%jME;x^Bhm7Bthm78UMZh~H3V$h{xzpc2-E?ot9rr)I!mX?3
zjlundxIf(iyZvrZ&PtOicOq6MhdK63VK?GPc&-IDQ4qkr9^jQT5x<eTspOIUQAzFx
zG!+oxB5eleesshR^>>4xd+dG$6}jXGsp%0zz4>?UV@J;bUpx|X&+h*5H0_-p<xRBV
zXuspmSoe8p$@p7o!5+2YWbt&w*9TXEL?uolU9;MzYbK0|>|vU;U;u7kfJ)f^quM%)
zaI1MBzyjm5H(#u0#OwBU^=j04M5~_ztB7dp@u1yLS4js!MPyLS7mc^!NOwpVYmCll
zI_mBiksWANunt#g9*eaVN%n%6oLI>K;FD<rmCWv4<Dn^F-+o(VJ9Rc90=-pIRqgK<
zO$e9=UM%$tL=`8$gu-sC|GnU6;pGVHro1t=n27*4xFK3m!xLG1@Y^$(ZxUE>1?2Vk
zU}qUnu}Qy5IVCTyDurQ!=Y5qmQ>)bupQ6I_OWAvWCA^NVgl>YhAP6l{&ZdTS+`>6x
zK_1qjXrITkBS7AR+`v`PX!))tECK7IkW;uMuW>;Ade}^V%WT|c6*E47H@Cv}8#E$T
z>oa|F64-^1`u|1w2IQF*c0k;olT7B-d!0{u18r2+>_kuz091wZk*sTfT~&YRc8PLY
zG!+Cs>Fyp*hv_|pEI_?zd~l+=U&pH&^T}J$YcVtHt$^ZnZ$FDRRX&JX^ifMsN+uU>
z8n{Jy1MXB(1ixuf?Xr4=J5B2>;}EoISv9*aSTx}GTA3}$3Zx;%t7ajd<Ar#a)M1%a
zrVXeh#f@zel>^_FY*3xvsQKHsp>N92(7>6BOcyNo=FX+0C0wIVW<u2lF^SSy_P}b&
z@tY%Tla-O62#Y)n_S*s<V~*4qEq-xhMR*AiVRODN=0q(Dk^%I$SL=qe?oO&!p#Y{1
zcMcxXXG~f#L}kb2<~TX~`3aZZ4G(bH`9>Odo<ml^9rRTR&EBq~b|115-Pc0nPkqrh
zvi1;mXtlKXMzZ*H^4nh82ZU3RZuYIUS&dJ`4csFKCyVWm#T5^5m8M2!og>_U6Ry0y
zu3UNUT5yvvX*Oeja_;v9bu}l;HEV&p9hXY|?mW;b-P}E$76wuy*6V};_=Ze~tYoqY
zP7ni@Rzzm9oP~oz6Hp}>6eh)I=cseZ+)p4^9CyPHn0?rR)lqYR8GX-E^4wa!@zxI$
z>v@Y)euV1+!p&1u^z@Z_ha=R*sVT9S)<G7~kQ>f9TtT-3l}9Jd40egC<CDuRQJ|5#
zxk@Jti_p9Y8BAk8B`+cnGEuzpV(L&qC77V%2NDGM%eNnO+GQr9x5%uKru`h{9s@sR
zUnhlKS!88G*c0gJH!9;8dyTuRGNPC%|CyM2sZNH*`K8u$vT=>UX;-#gmYTS6oNltP
zf28xdG+=7Uq_N>rl0-Udjqw5u30}(L_AjrpU~wOOzep6i*1O_ufGgEP7MFTGAmbKO
z1U-PiXmg=k>9VpL__;oyhbu+pi=lbbw26?<7~MwZy$y>0WCdCn!dREcG=zJotgo%D
zE^JuGR>b|BkNm`YE0d)Wx~dbkn%o(DUAyTXRkpKLi4YT9PjU(nmPg;CY5*FLMUJaG
zOid^l$bhR}jW@F`kk9p}t6-H405Ejl>uTg0-HRQw2Q%`?T0&`%y&u^UGzTbRF^Kas
z6chc4kX4MLJOfNmzvJRp$YUvOhBbwTs$wNw2-xL^KhsUC2;!!{+8wtEPy@aVXSIM=
z-A)yYZB4Wtscw1YW=#&yp$*au&4jra|FSx}B`FoY9n?<_nHQrCD1_y4nO?TZW`9?Q
z!yU4lC3Tqb$TIL&Q`g?$eD8wW)=yrNpFD#+<?kjiLJ9*FjCf04Iw3W1btNX45tReb
zL@?g!nglKg!%YpdgfEH{*_3LL10sZbU?SuFMe5@XFuidiM%fREpJ<>f$HZRj7HX0j
zkj-E!&yIjsd@}(W;rpR2aFuO7HFd#kt{*jvTJz`NYF?I4QiTq@C@W$s%n>s-fnDRp
z1Rge!9CCW<hi2I63E=0q3h+;BhIhy8>Wo#?YDfXQyIYTjlHxC(uckhvZroLBGgg!>
z>x}y<PUH@4tKHbKBO6r&i{CuA$<RC70X}q@7PsnUEy`qL-=jCspZP=5k1I%zhL(05
z?=hkjJe!3~zJrFr^rp!}8x~*?i2oQ>0b9<JIEnF13we6b%)V|t<B+qg=BeR2Ov7IK
z)M~u_ULU#oq93iT%l-Nu%YC|7z1YnI6|cE3K(4+TKwOGB=im%zfUFHmqnAtrCKR?|
z^6Auo{D?(ef#xy_RH~3-3!aA1teevdRwC*CZBF|zd4F29_Pwr+hm!KW^8uF|bw1jV
zhfFtMTD&ae_D}v}&Yu!(b<Za}Q=YKGrzo#3&%!c_42F%4<g+`wCO26wM7?@6(rP~O
zKK2o({j+dZAYM;8yXoL6o~m|{t42LZUkKU4ikhTGL=ZSqbYq);wyF)T4j?@ixu!a$
z3{YyM0ij0qucbv1(-Nd)WqV52#s_;>dD)^(<w`HyZUQxdlq^W9l>|i^Es>!s%v>ZO
z<8y?})<t~G7I54O>Ie~^kMJvG>G(hae>`4A-<Z=)7gT{D^UHc}i{IoYi3KXWo+NGE
zg8;2!6y&SmRsi2}jA^U!GV~M*T8M?hnByn&VM3YEPn(dX-6{P}xg*8j$p5=A2+ynS
z$RH`8#`94r0*#SQO@72Au*SC_Kn!DyX|8-Ccl}eeh6e+fse{90mg`XaxU|*20T^*f
z_K)?Lav0^o#E9hCSAmFMK~?ZRGm>imZ%FW}#f_N$zqMw3y{sqF1w?s8X=k{5XlB$!
zLmyg?M;~BPzYef6aJ@K|eTT!*MVSj%(01pQ91Rpk{WtLNq6eU^+Df98!=hCs5vkl)
zW;N_NwQz%aQ%c%<lf;`6SlmQ{Je`6yhf`>ZkA)?$l!!F#`_^y5^1#(1fwhpY5;tjm
zOP!u$_L%GFwiQ5&{hH(Vx5J%`@3GF>5risOUS)Io=Lb`^8>LMLGmg52eM?s4L*uq3
zEHXA<EoM=fMwO=7?nM}p?xuqEq5&<aj61>#(gGcuDr*hKT6Qngu+YwY#()@0*~tl6
z6IlqXF)OJOfPZ{qp|!}5lIY@cOWC(PcV~#YRV{QE8I&M?(ngx<CF&c_l$4~O)9v8P
z?YF)ELz*kCkEze+<H-pSaS7ew<3+V~8}*jf%B^fw#VpU^Vrz^xbX$FqV43-_@_@bu
z2`ZNarghi3f9Fn-@{_rmUMyr*@A!FB^FX!kxPz(^-5#nHU0&9He{gx@&Jgz}DjiaQ
z;nJC$5wf8MHx_Q6uQ*$4BG?~7R3x5XpFQ&&rVTi2zqx#8V`9@F1WM`Yc^DIG?!ho>
z6Ri)$>BF&l^jV%c^h7)dpZM2yGF^(tC|rVSIEP-(x_@xJKI~8CHk<s7%?J|-@|rTX
z+9$6?)-?lJXn7i3vbcoBniQcUU0H5+t26w&`N?vH7t^0*muS|d>1BJ^=3P~0=_cb$
zoVs20@$XoFi4EPBY?PdvsXph=am?y1b(GPNY|ctj{-9P|dNa(IZxD29-#HRwW$#$k
z5YLaq8CDsXSfxc0V{S%hJ>nduu2{;67EiKDaF7odL3q4?+Y&GZ3iA!@V-^&uU{;9O
zga+~A-TlAtH=Br+fxpR8j->3+8L?Mpj?bQ0V^Ri-zlP?T7&!j(F&y5k!1#UG1ut%?
zzEs&Mw{oiSyWksCGk~j5EBC!M%cd!3i^~wLq*<AsPVjg<n?Sz5hC~xb<WZ)uT<trY
zTL*^y&PpeOTkIh_5mwKi=xEJ^J-L2$0<MRcDa2)$_FLy%u{O3pUQ3_{Zq&^fcH+`s
zVV~dhxBX_d1SToHr&Wf5;R40`h$4rkJk=)mAd+hlfVuWjTL@5<>8gEE=~g#hFex%h
z1|9Z<>e&~aq)S13!qg0l`8H=bw~MEm1XnJ38y~~kA+$IPj18ScSEEuwly!~yGm9!H
zlyG4OHy^={sRn1kjDF+D`2bQFzt%S+>K%Tj!6EX)Xj&+&Cs5LnH%X{fF^yq}sND_T
zDW@EaKVy-9DPU6csN#E$0u>j-Sadp%^nz31V>3S<%>Vtocg7qI2K^jJ1FQ0n%vdj>
zX_-pFA-2GBrJKeQ`$~iX{w{D!@`+Td)}%@@?N*haOhz9?fD%P<iX#y$CQrhA`In{l
z-^bxb?0zVR@yWxGS0B)A`#=$$dRgvTD{H6l6!ThRCAm9lVQ)_>-CPlxUGQ$klv9>4
z>1?f}cg6_?qNT=SX0eGa6(pw;7U%@=9+BB)9+0mvbc93s>yj7(vzACxU|JvoL^buU
zWq7kw5`Z&eY)2r3jRs9Hi^OV!{(^+dOu)~}QCC{*p$2@Ou^ip_7=8T!EK8M9?nQ&*
zyV6W-7K`Wa=(-0+<h=kRHQ`k>goHeqSy|B-6!E0&$(&s=3{Eyc6*OcH`krSn11RQM
zr<sg`&(#VlXgrryV;HJ+43HFoTC5~r*ay=<5395wYU*n%*j^;Wf(yK<7VgY*$n5E?
z(Q$KR%~)R=6MO$6b`PeXjmVY=40xN4juz*Y{5F90hxjx?(pojhPdNmq%g+}Jro~pv
z15ZS(AMh&zR^IlUtYwGB5G30qGP8c;OGM1P5*d`1t>iyqtTv*TO**KNP?V|1)0~oy
z4-oGs3LWQ63Y)jYCDs=&%(S=izVl|fBTg3c#pjzvvgTY!`+Ehzw@=<tQyzomRCa39
z06Z^=a|1wQkLvGMw?=K>DLkv*QaCSGs9s&C6!nB0%f}nY$h=foAiL|`wu*27a5u)v
z?9CFykeE>-@Z}%sIh)9A|8-*TjeU84-4$McaeVo19r+`hL-16b)u#;LghmxBBa$O$
z5cL6#yP`JsO$iXhf0Zecvd8L9;(!9UFVcpO7(KOtM{P}+PP0D*-o9|u^}^J3gj4#7
zqu^0ZY5d-hqyh9Hl^-->)P-=UB0)aUceHnKP<7<gk#b4-s5icqv@^D&{MqydEyKl)
z7yR3n3XZg7urFsW+gcc14r9e)CLR?hT5Q}1XH4W%S`)W)FpW^a6uD_&!Mqh~L=u)`
zcCB5AB2GV))P@zF6`KS|YgBB-7_c7TCOl1sbM_az^aLw?G_JU)q!k3r3~0#DZ_Ke-
zH-cIzt5@oIkPK(}@&{ZSmxo7`Fsh&*uhd!!8GU?}x+Oa%1rPmw`#aE`aF1;)I=r=9
z%0B!~-oNlMnb3c}qu(2l^(i&7H%7sIvQ_yph_JqDR4YiGfQut;43&%awfB<jd%+}L
zxs65XXovfPAQ-g{uHGfa4evaE^za-Zed~)abdB%T5jI`-hQY*VeqoS4Z7m~YmLAeg
z9Th$vbi-jKZ>T*xM#&<m(Y%SSM#ZF(%D|8=rL@NS=1mv}aL$TPIi|S)f^-|Kv4>Jr
zAQp1{x#%aZs3B0y`ji<jPjdJ$kKnP>J;c{WS+i2F4IvYomOo(Dv^*RQ=>TZd6Kjhj
zJk}(Zt@)TDYOgw-GGN}Y0kZyanCi7eg%ezKR$K<2^}OKjmFv|H@u3aPoF`jVA4P=O
zZ6jKTTU0ELxH6ZdqHk=!<DR2LK&$hlG#^yMqiPno@VN$KzP5t~nGt0N2^Eivz?9GB
zIl>qxO_0DOe;@8Z{nM<16kG~uDA$RADtmJ-pF*p{VHazH1XQgIBgunFU7rfI!u-5r
z>bHvFP`+X@xX^{lsz`P_&As4~o|2@-%Oph@$ui<5Pp;jd*BKzQuG6460S(G9wV<h4
zTDg+s2c<pX=*|wP2yUCLL%qOMe)%tC_hJFZw9{6eF#Fw-U^%UOW0w$m?QE}NkS<O1
z33d^<PjJBhhu=)WP&4%kXVkq=Im6<yTf5YTg`2F-2lf`g1#@v@)|I<(oX^-9jmpN!
z;8GU30U&~(vK>pJ*Vah5aJ-yw>D|*vCAL+ZoG20v;l_(A5TU5s=Y<ribV_XO$DGO(
z6}4KmIW#?2%-r6Ch0os}5qLh4qaAgahiLoN&4C9EYY!$=`j`AQK-1efN0#$7WT8KY
zDj?<b8xu-5z3qaBp<bW&qmV^YQp*tjLT)0V?{Q;!uw5?G6k$?XtY0YsNo9(wpdQ8=
z2qMryqUc=5hYbSQd-UuN)2&(`?{D;f(lou0R2f+CCj!1!$+|d(SgKW0Ww=(b1ld}W
zb4D2x9>9$s!FVGLa94yjXA!E$puTXk*lB}aMIw}hw7BTR=Pp%@p}-L(2VJgy?Fv&1
zXe|^=FP2OxclBzQCWKJY2K_*jzKZO#T#(n^Q7=(I{#^p02cEK!a0b1uDrzP9%f1n#
z(tUAu$1Mg4OMNd>DR8FBCjxaoi80M@N2#WhuX4K;I{ou#p@c!P*Q&-;@}8aHls@7S
zRWjm$Ut?`@t+1tp)%>DdQ3X8Hn~$&4D>G<Dv0b8$(dy8`_=n=4=R$IAi_Y><*0G#=
z@U7;R2V#rVLlkE-Wj@}z>l+cO4gmF7)wHI}%gGY+|HYDefJYUMsdBX}L*NU?`TAkp
zK5eVo_Cg?ukjW7CASK#zF*7z5>QI>8@jzq^V!)Pfz9^e4dWI>P=?d{(>jMQtT)o;s
zYYB+!2@K8@+Lso0q$-~l?I@=Vw3SE=P)u;5Q2?N+l5UrVKwPA;97?u`%2{H98K-c`
zL^ry<yV65{g@KPURQym=aD{T#rIpyo-rj&{rc3C-VfnL2XOvRoq2LuxQI1?(zd3>^
za!)I-)66Q31}{#}7AkrHYvp1-w_nBwPs?LqgA-(;?T17pLJm`?fJr^+*TY{rMbi8u
zCbg`$!@R5#DV;c@NN!uLy-dW0M~OJ>91Z(T6R}d<Zm6%Lf(!`^EA<f+$xwPFKqTad
zD2)*a<V_tzxbu*2o}m||51?!s_^Kf<pmqsSMN!@2(yU+=ndVrG#15fOrv*S;eY#q#
zGT?<?H58~yIH!GN!d!zUEtSKxjO&#2?k@A1x@`D_yJ47hAhj`mzi;iOgtodSxgv<L
zsmtITjVR72o7O;Z^iojzL0PQLn|MqYCz7^=j6s4}YQz|b(y=)N=mEnmR|7X=HzWA7
zleyRp5Ts^23=j83a-i}!_+^KWi+Y7}L4(;)gzy;13uG?m9h>S_{MlWcL&=SqTZ0ql
z<QldYujBncDXEz69#|$-i3DhT*u2X$LffAzg?EOG0W46Leaj?KjQC<Aq40gh5b!9O
zyR)>G7!dRD<zAHs!^`0Cz9vcK@T;r1^gZzg+Sft4pZ2oCCR*C#kvMM;ZshtOupwk_
zFC)&vPJQ3?+R$dvqldriP>X(O3@hky2(q4A5<HDZ-r(3dO=&VNn_%(ETu62rhw~dH
zEMdgEABd&Ti}o!e-#0eyVKRYOHs%*}$bae=HCwz7vw)Ldg6AhM1f4YFk5>#*D)X(x
zdAK1lc}YTlfLjN=SL3MG3>9j8c>q!Ip!q^3Dqo2p2atU04TG5Gs3lAmRjJCdSZ%uz
zA={Ywd5QMqsP?cW$st&f`l2H#nlLb?(cTO$dm=1CVp-ro!^%|sX`{vuPx$TB68YW)
z6Gxikly_q$`ou~xOwTF(`!a<hS^pTG*QN!&5LdJF;H3lDzJuQ>o<aDJKxn82e~lV8
zh)A;F0v`V&Mq>`4Mcc|DJqB$K9`V;m9$MMC5L&@<;1t}O8XEz1PnP(9V6riasSZEh
zs%*+y!t3gQ;^z8oyrq94Zy0Bsb-gHx7M$?v#SgtKuDiHAHN(FpK&-eq6Q0U!xmPtB
z(3Z?1*XE>sRQb!YJ)p4QeVz?fv{m8}hSZbc$ZZe2I&0_giz4~UuQaD!loEn^l36_h
z#9LM++-S+%a-bYiJ%?$Dm_lSxbuuM^4l{~!1!xBWx45$o8V01vw@pt0dG|=s05Dy}
z_zE(87Tp}l6b?QOXXYCq;%6pu^8Ma8;RDhkl*la}Q{&DRvLv;`twIa=gLNXGIvkvG
z!r(o7PU`Y7(j8m>jx?Ht**<<!kAjtM241Kabyb?j@ki4Gpe=T71(w0tBuo&F+&Ss;
z7}>WRD-mW?#$!yN`&`1ud}v4GNtS7!qLZ>uRj+ubdDZT?EbsQL4TxKGj_3y(Ysr?Y
z(w_OCot+h;=Sr6CkBBE}Xpe0FOT9g8WulRJ!<E_r^m24#;l;KYea8a>bul#@#Zoj<
zt5LU;_vA;jhkGn5GSkQnOMi*v!lb02K@GmjGN($3JWkDA*6A7bKqU3|P4-*5CqLq`
zsl09=3^u0Ja85Njp4#R8*5w9}NlqZRCqDAp=y+z2*IS6r8gMjvdu3sW^hz>WiD~Ii
zsG+}U8dlRD5Y<AgE^u#yIG!>ng_(smGxS(Q7Ks4sLzh@tLkhybw8`Og`S<z`=3C*;
z={M7VqLgQHKu*L@Y5)jRY)<d=eq%SCAY2lQ9r_azArnPOQZ|n06F{8{ABRbelQF8k
z2{{@!*Fo1X;`ro{2EcgX1V!WWh8Px4i;^^E?3?nP=fGxiK_s`9rdCQT<&JiY@BF87
z4NU7TcUidj3XiFlzx9ds(S~7*-_~Y}7U&|~4(djyL5r<FH|Uev?9LXffAZ(`JT=of
zUmb+&YP2k?D`^Cf+iu->FzwM}OA(FoaiCQ;K&2jlFO?RJhZ>+dq1)AkV?qd#(RvsI
zXI7GlDrEC)`ayt5d0f!3W0b2XWmtpJRxP9+8ih@V=}pryN&WQcS@cO+HzdiLEvn%u
z8i6kZ)>d;2+$uqx+o0H2tA-6BA)cH-WwKAe%RaJ&eD=Q<pc>;A8SS*>0+tN*0_)A8
zuU^cVv!@80pU8R@>7on<WgHEr2EyAn{9UvgkP{#9D_z|@G1Ihi%chNjHI0eRF{ecE
z9!gRvEtRiLu_zP?7vF3Fe0NYfI0!h&7sPVF*d%wslN%95AA=%#OIx;oVs2Rbsy8IQ
z!-c4VKo@MZPN=W=3oun}U7^h^BSlL(%f1=aWU30=JPWA-XV~J`KNM89k0h{^hff!3
z0sBS{(U%b3qqbM7`wLYMeNpD}8Z&8SL|`<zdxU&^r<up>2gV^<3OrSdw&$ILEc>~C
zEV`9PI6h8?ufz1%rtW!Jren$J?&q$=#gNydYr9<Hocl{o`(P?@QIs0l05isXpdx~s
z3-w1<2PN(@27M{PUC*3Pa?h{S7=4Ty@}q#;{AyJI5+`aTvSgHc`zZx}*ReC1Nwbgf
z@@m9*jB|25p^?;FV~%QPj!}vt(Y~N)lZrS*ZpGG_`*Q8l%DyuHn)6|wZJ6lookqAp
zXh;GWXgmt^ouUgNDwQ3la$(o)oyVM98U}KIfO&?4>sb%%4c7~UQXy|db{SZ&YXJp+
zpmUrw?1IZ}fQAAR({rd+XwU4BjU#sl9OR#7ZM;fszB>edJf<0*a+e{_ZDeKBMCVov
zr#|cbjM}$|%Yelu*_D?8V!9e^EXeqUSgwb1Y3%B6S5*iTuH(C%(4S`8{MQ43Rm~a6
zMgc584&JxHO0{el9!yPSLJY+i3X{2?K$lb|S5<4Llsfl8BLB?9!}S8#d6MS-haqg{
zg@>W9{>8K%f^tla=}*Szc)k14wT`3SKNuwCW{_a8LYv_J3l|^Y_$OPE2C6{CH5sS@
zulfQW(tT4raC(D#d0amLlZR^H5?85MM#M>;mmAZ|c2~KAYV#83M~e2ChV9GhW{5(c
zkzfysYVZ{8He+Q6XGc;7=W_1gU70EQ><2ReZuRJ0GIbYeXJY%x{_+t6x$r*>X`ior
zC?>UJRT1R0w6W||cgK7{4mpT-iq!U_y)n>4Oy5a4gD;w*S=;bSDnEE@%GSlvBP6yn
zfRj8BCAHdvQ{Xf>2q_yPR@;vDT_&sr_Ht6|X<+1$;`-m2!?$fB7s`{)8zWDpF%~@x
z6<B5#hfNpbGFSIGEA38^3y+npa#&`lPqbeM^4t8u-=!^$Jpn7A9OfR#aD3>|uj=6?
zhihAp2R&=wpXqq*r9#cJrHAWUdg1BT&RpB`iPe*VsHTUSTkn(nzpcdXTw=|HKPqyq
zx#f!Z{~!S}G5jJ0x$b`-o2bNJ*IkkB1oDj2Lv9gV29hU(RnjzMrhPFIH;6f{4k&F6
z4NN|w1ikjc=8fC}bxb#oYLcSsPkHJ`nFmu_;`jSkU5)9uwzX5^Qetu_%NZ#HlVyJz
znNwX&rX2>rPSv*bXPe(&cvIo}2%|nIy-8My5h(Y(W5^fYdb+I1AjOsq5dr4^%U5es
z+OM+^=(1{5;2Jr9XcQ`>V&S`~!_jiYQhqBX`(K2TjjU~1`3TvKKUhqAC>k&$pWyk4
zGqoT1xbHqjPd7-&D^0IqKMH2R$R|h-o56imQwyJi?!(x*%(`v4z>`_(e_V9Z5i63n
zgpHx07e0){ID>RT^^XOn{--6#OBvCx1I!!O#~&`nKTRB5I91h=_6#P)-#Z_u6u@lb
zRX?N7cCg)Eie=|WdkPhaJN_#Nv^pp3451py)s^jCdH9HNe?58wSVd%G4ZbSinzokm
zC(^CAX3hMungfbpSYHD5n(5Az66|CQ0Y1Lbq}neQ_vb@)p5W#ZPH;XZMd-SGykF)E
z%Soc>Ab$7FU(g`I<Flbpz`Ko?6Di;S;fd4NOQ{;Bihr0bu;38#_76Ni$qlUkMw^IG
zw^agjI?1rPt5WVJ5f%NzZw*~zyi}SsiM+OoXHV#Bb?q|NzFsqKlr?0G!9<I7Mw0lJ
zb;#X-qQzr26^DVYT-}RI3>K&^O6#E#8|sr7l{~;uOc)`-{DoxgsM|2i>@tY01`&lx
z@J}g1O_SlL?j?wwyTa~#2`V;=b@`OP2QZ?QEFiXy2Kz4AiY>j)R*y~<K8C~=$Nb<B
zMw)(U!V?H`#)tV@iZBC-O?rGTACF*6&rY5?)UK513USE{)~jS<T^l*BHuZu+3r#LO
zN)(*AI9&NfbVs-_;iopo{Dn&MvICCW=Fw0SXZxI{ewT_d`*T?9^Bs9g(<nTfh&Gvi
z1{_!z1=WYdLE{b4P16<D|8{|AC7Wo^c1lN8C^2U1={H;E_&nf+gpo-bGP$6y$In2U
z%fm@lWa_TR6PFc~@873CYNI}QgKN^PtXq6CB3wi!q`4^4627m+wcA(+#OYt_>cIbD
z7ET6c<qKVT<xmw&a^+lg<T8YF-U*g{u8VF1vMuUSX4;H$zv4u6>;!Rv)NT1fA%L@a
z2|hb{G3clnBRJ@J*6vnkOYa%r<RYsL`T>dXa`crRNn`NrIwDnpYJmvr|8KROmBD*8
zc2Y#XuTe5oAjiQcBddw$NEo&6n&|?>@$@J;IY1=Z9-lC(cBmqf<DTP{8&2fe^exMt
z5LkWCn)aaf6|s>qxwsi9+Y$BW;fwd%cYK6=LolO0(-<Y#Nl*kt%zQ9FKy-@^Egr!P
zfXPkzG2RQZnPoSupFitxh0YO<HjSWp8v8e+pLVOnm}Kkkvgt-P_IgL1ug{M+vQB#K
zyvxp7jz9G{M>|y~!6BUGh*guC$o$Gf!=|lwVxmLLS}M73pu7sK9NyCM#%qfX@OrJI
zinS>_P+lR57%l)kK*GPHJ!jyOyD`0r@1}uGomru(N{!c$Jdo=wR@q@vEde3dN|SW*
zw-(C->^qw*vs!IE^uH#kWInqAc;|^hryIwoJX2QY+3HQ}q#a4G)xOa)aX6+Zv@>WZ
zNY#9ULf!c{kjmstb6rE!18Q-3yHD@LFygidQJo0Dq4f^yUh5k@8C4c&czPfuY0aD6
z#@e?jHL$G3uk)e#hZ9~dgf==2LzDyHrPk1fUm5A2Y>8L;4x#$iG!Q?YZ!bToUhkG2
z^KLn!YJ&L`)v6?ygA<~A>ZbLWKCvH^I8Dr@P+^eFDs|&<K@iR`)o-WcHBMQMO1uyw
z3qeKoElNY@5&xpKkAN$XC5oxsIc74KLZp^X8S1aGK7xxT*fwByotoJ(UjpmmC`A{L
zZ0G;5X3Fxv(I~bTpx~?yZZ=QFD!VBvza%}=K2VyNPw&5VD!DtebP`zS7k%h*Z!hNl
z5PeO<llq|-nJ&4L8*AlOj9bl-G1r`P2qe^eaJH_FYFgj8%%EMw>hpL1bjohw{X&C?
z9DF9*ObK|j&Y{d3eG@06OMN>7+1>2JOvw{u@A!$BlB%7-+#b&1&8on%)_~rJ;R~0$
zjKj2p>L6IFUmNlY@iHFD=zdxI0=*UA_3LIabDHBBVjj#2DsA=XYB20v5p^({oOCY8
zO5^7o^Gk6r`O>?X2a_8TH``YpiYabiPdh5Y(nP>rQy21Ff8S|YRcNoRrkA~@1UwJV
z2=~}IF1XaRp=<Q`zXy?No-z-ZQ~QC|vq=4ZQ=1VLrO^%V-?BPwxxv;*oRQlXXfI6}
z#K{&agYMW2$s5z>`+CkuG@-qgnr`-LQcwK_d8icZ27+HF;+7~?UYYEpiF3^hE7#5p
zi%Rmo?)G2*l?6m_Y-^C;<ALR&@1iQ3an^z9=UhY0AYp^8r*;ImKjc-D(6CYnM=WW8
zXJ1uFzsfeNo~*LYP)mk1fgzF|X=I5AKLbhw<*HSpBHd%JZTT))AJ@I?kQ@yYnn;zE
zhemj9!N$9?AxXzX8%GbEJra`*+a!($9;~KJ;YO%ObGFzV;nIo1CJh}yK7>q@jf6Y~
zD{5_wlvmloCd6wSf3fJvFso<T5*_-GJ{@21wC3hvYH^&wEz2>!@b@Jbqh%(od9c&I
zq%miD;f5f_?~u#uA{sA?LAZRECQ=vn{8gdbO*pmwzJdnZ@b?~!&5xpCXtJ2Pj0s-^
z=xsl68R!LPM*~e9YM|*_DNC>@UP8B4Jl@*AO`K7)E0!`XK8`8}T$}zz)mA(<-!?1C
zsM#G&ost|wc`gO>zUX3aph|-ER9y>YF?s?x^1h&~t3hEg+b7jMPiRL?B6U%C$Ys#a
zq@}Ew%T_C^cfs7gXg6%qSW{!bFSXg6hR-0^cDeX2!tP-9Ui}X?m+6|X+9|_jUe;6s
zWE<Z$#NOEh=~e}WBiA&-LQ8ua=Cp#E6vuE!8kSrByiPilueAUj)?IWFD{5ma1bXV+
zN8m=2qe@)Kk_CE|{-cJIV2`X0<?nFms;6A4fznmDHs<zWsUg*`ktGlSlp1!If)ZjN
z!aq*ym%G{ycaFZe@}y8ZYnP+Xf14EX$}&YKM}vD50KVIzPdqx|(4x4*p?BvRw4R0Q
z>b_XeYqmuWl$gME`(_4FGu-P>mRKP3f4862b_B#rPQZA(K1-YeX5PMKlzSf#FFLJ>
zgT03dfP0RtU%|Zuh-ZK^x#-;b>j-9Qv60;3-L@$QA=F=_(%!Y}t9wNNRoH#%Yl|aG
zuUU9t#Ag$huZ_SJzjl+>V^#CS(x`S|J7Ja*l4%F;6XcEug7fa*{M_6~$^;C+Rrh@U
z-;0#hCn3I)>}x<g!nE%M8tk`x_Pf8SCDM|xN)#z}=?wOn^wcdDS<j)kC+G$NF*Fx;
zW;H8MDVR5sDvPyWNhq`yhzR@c1MM#(Gwf&c*j5V*MIpLtYnZ-4Kstgvn@Kw={Y|i3
z>q9zBYKyPHYZ3~OwSUX;0=7ZMPzE0l{4%8*p)!CvYZ)WRB>*<f*l-cUN5QvUOGim+
zB(H_Um*t(%r}rD<MKCkNsd+QkC!ngQw%D}B@if(fNuO*-Yoo}3T_&HEHg{HDHVRc5
zngUh=G(g*N@MLij4p$6v$0^O;ZCkPt0{uZM^&Pu`+HZteUQZ81PJyS2k70#m00R7?
zMGxE_+&YxG%V{eq`Z8t5RJwDX>aLQlaILa_Fn^mVk>W*GDaGZ8&x0$EM$mf-UIjzo
zn}v~bee!|o6q`c;QgXzPDt%g1t&tjXaoRFStul`>!0xi&_GDns3IHcIW&688gQ84p
z_-PPdfg>fO$1wCA@g`hl)7u?@6PVIAosO^Dte+PLdhR7M{avj~x(3-}8!o;JUp~7X
z?>zhV4#NQe(0~UbPlXLpl-Evs!&^V^s>&bah*YecklM+5r@B(ytjz0WH5uTlP(`&s
z0J6Ug=+qaE`H$yx)6AR>n11!Yy*=?}UqQi3l~5rQ5lV7E9;cO3f0sBI=t-t8SBERY
zUbA+`LnJkvkARl5J*-wU@)n#bYCg0B2MC%Rx_wRbGEb8SDuLNL1GYsn1Js)@km;XO
zE^(0cXD$s@$fcHTc^E~xS6%ztIj%v&8Gz#gpR###YB^?qBS}+%=?uHs>sbZc-MU;G
zjs0-;^p7{k7@O!hdbuzSiv+3pvOk4%Ov2F%n6@zF2Q;8_=f=I=$}6TAq(Am{8#kXq
z$_KFYvbOiW2Q=|`4KLu8*veTMA=HY1JU?y<msQAu8*J~i0s`ko$CIx9d32so{C|GY
z^bPL5sPY_s)ple}O%{q&+868JiWk#1$Y1PU(~>N}aX&Zq?Q*v_4LwpmkEn1E+z-n}
z3_yl%x5{GQR%5g3Ht#sx(#Tr<Y0V)gaICoeG3YM(CnzJMoMYZW0<nM88hr_H1G5hS
zt&>flQm4m^MDA@*7veCIs<+GDyUn4?v`a59Kybjo*wxqY4U~-k#$2|1jGLbualhw5
zSY@D;&Cq!#7N@XSB<<+#|GQ2w3P|~6LqgC9liKZ!TZ}*j6)lhoWhC#`uUIAt>^WcZ
zWL@t?N&w<dS8w-2I)z4|YP#-oGN6I~1_tX?q&}yU6Fr&l?O-h%@|4^-M+}Uhl-0%m
zx2E3)R9OTssTC0pc?wv+mL*g==!-PE)LcEN&ujXo0olfTF7tIFEj=SPny{=i{p&Aj
z=A;3iMivkOx)g}K6-Y3dF1JKGAXGynt82mueF0pBgc^Ye)aNHm?h67TXP^1om7%{-
zMA4p=H$PQYyj{rFS}rqTzQHH!cU?(n!jZu^QRH%+ndwq`-4$sQ4#3(EN&K^CcPOmF
zZ*`c%3K%ty;o#t7s9|a+&jw0Gw&URP0ZkP_y_rstf@}-m`MKbrN~vwU{?$w?5cIe6
zyM<+`abxqnqf`_+1tM0Eb(zJvyL(WfbTdBm8O5fA`tYQrRE*t;gU8&XSu)(QQd9?`
zHc_B`wJ(wb`P*%k87uqlwa<}ebmFBAWPzrTzTznuUJo>iH6=saErZh&u6>xxCR3!^
zpr}#9EoFOnv1odT-pRKW0jTN((*{p^6oqDgkNzRUHdx5R3)oJ!)glm!2XqRat7z@v
z*P$G=%qle$tbE*y2#*I?q;_@=7Wg&+p36T)r>->14bq!y$_fI4eDUE1S%dl>1N%bc
z{kXV?my^$WIczTjy*EypOUmQ(2LK2g{5XS!iKF5-J!xW>&Di?WUIuPoPG~MImoFGV
z_dNxL{z&-2RKbY0$}BsOrIAUxxj=Lz6><m=WVw%DuRCi06z)U$Z!Am8n){^UUktq+
zz=ab~axsZKga^svaE5>-FP5<gC|6Cn_fIH%0~G*sOC*h-@#umzD$f-Et4RS!HRwDE
zm&Zup2PteygDMoudsi}96nKc-7==+J1VV3Y-7c6?VX<*&6|)m_jf6l%>MCdC$b@tj
zG0+Ey!IfG|e^@*S<lY%1fB#T|NoldOsTK4FAmK`&N~xvGl`oK!F}xOK9*z>;uf=C(
zp<?~b=sv(CS>ofTq``@omn>AVgU91WP+26L;E~9uP;z)MUPh7jFb8n!{~YUc&emN3
zpMISPE7@93B5FnYAJe#`NcA)TTZ}J}P`CbVlB7qWSVa;hI@Xz|LQ9Liq7*q93SeS}
zcbw^XL=uXCnSRF=j|TbBd0hv8v*jA@_VrMJ3@zQ1T)TAZfQ^toXO1b(Gmo~iEH*Mh
z>k(I?Xq^7M*EK-w7^CEP0$s{hQNhPm)OSIk^R!`=Qp`&e3U+eRs5+z`I|9;LxQ45x
zYmQZhCILk1t*f|N3;nT;f$sR&mnc@{eiz1$MhN~!!QV8~1e_C-A!z$Pk8QBb82U$0
z?nCj@1#FP6Qa!pq2=bPNpvmY<zxCo49<Y%YaxLFbsQ8oOrx<dEa5%x)qSq4SJPb;r
z1~u(@eLGGB5Xy_&H;%%%vhP`P0}W%aD3h#L2l5^-JK$*bi=_Hr06mzOSyPZMl?fO*
z6_B+Ci*?>}B}rFoF=6(nv+S;~9A<!pFye$WG>azt!eX7*TuI`E7(LnkWD4k6{_lTw
zc79K5<u|5$W++xTX+~PSd@Glc$mKZLCZj;u>@gLHG}6In>Z=-%h6T7Ct1&F**b?r}
zWRVYTLzjwrFfxCsK`f{3xYfU6RCe$`EA|R)@o?p<Z3)8N2v54Q6QwO*zrDI_4;6mm
z2N)ML6Nl6V4dtC1rhuisb=TB~ErgDz^2lo5RwiS;DxXY!@&LNGdAt~d;9r!;Z)ICm
z>uXf=ZvXCb`OP^=A>drf@Tz?U7_9q%{NW&8-s&iW$^k<%a#!OA0RMK7se^N|()zhQ
zn7pG(qt6LRjfHlDJWZLQkwRsb;db9Po4$D|_<}E7tjDDOqh0#i4%`x<shPR;Z1RI?
zT+F%;G+uPTbJ_G@iqfkusM=AzZnKjB+|f0YgpY(msN8C)+Kv$_3RWB%ca~Kl6F32L
z`(A^i(tC5EbIdpcA?1mu3aXFYNGl!?nlmz)bjBu=q!jGM85auSS`xjh&QmZ-sEUV}
zv*Jr;_^5Tnz7QHvNS1i}P0{XsQL)X(Z<2gsv2Vdh78=f~PP-ze&iG}TE5c6r)x3~=
z3S$tZi{gUlOmqXT`<}noCQLR*XV`g0PGM7)<qsO2%+9p6POLsJyAUdJPpZ@@Otn?+
z9qy<*oJ%eEymHGyBXYi}Gql(#CmnA=a-RnBIv<D-`1`>gC~G>+ua+ed)J&CFumSWC
z(-i4y2ur4~o`f*(Q0XePca>q~l>N#%yMgsCZvo!*NgZt?O%`^(uDoIjV}J2`JH0P$
z|MJr124VGtQPEN|57#1Vmn9D_qwJZ9$rp4WL|H!0OyS^KWdO0a^fj0!z>|B;%dy+i
zPKK+xs0K)a0;cD?9Y+XUePXoqNCXRK7AQm|qGdL@0~99_okoEUv&LytP)T-AiL_F1
z_u_`6L@zc`m;!qISEz<GiNffrN}426Uy04AF-~M8t((hD4b*$M67MF6L-?Dc;1w%h
zX%VEVMO(lwHS(_0#Y%C#wqd5g{B5%ia~;zLupruKD?6vi*()N5<atwZpzPd-R^~MR
zU2=pL<hEM1Nen)dt{D5+O%ZsaRAd=I!oJ`ir=vbW!(Kht?VS;d^!1LCXlml>erLP7
zD9q?2yz3o53O*nyscbwD!Xn?QJC$M1sfY<+&BA?sOCsW5Q=hAhl;g`Ksm93UWI{pd
zV??#8r`!sk5hd4A#YzQJ#?<N<aTX6)g`sPIV4Lt2)!rQE!qeqj<e&cD&%YhPMColz
z{;HDz$|nDcWU&)It*fV|j)qz8M72oKlIw925`O#mnr|IFn8c#wJ2Yh|oYtda2J1~E
z7#1NC<|YpE1L8Ku15%*I6Z)4VT_ctvuvcY0;WlT^sVZqtX|Ap;a%PJ5!8@Tbo;<_?
zfeEb>EWuip2f&7(7-g~2f2sHvOK)eVe`x=WC-{xH@MV?ZR~~SiBl~~`z|-TCmW>`t
zOfrj^ahL=y$y62JKxle-nfInnfJBTl3m%uN=n9ou^B<P)Cl>(bO$c{(%no3pR^q|x
zgMAv>c^OIm?*O539XzhKC7Nq;YRxp8z(!r9L4v+A8#u&pv84nPGxb}4RPg{HbCZ3d
z;y95hJVDleAOSz4=6f3Fwunh1pL4!JF+^mZzaOk|ey<7J3ecg?2raL|uS0(j;KGUv
zOMF#^EMO8@BrJZ3Po|V9C(4+_sLE=(_D>k*#p;E@0K-WLHd<JY1gGws|Bp>MtEWg8
z?3Y>8?3Ce0TTbva6u`ym45EffuDhHm)39983bbg|MvV41I62QEI0D=Mo7X{4d*=_A
zCyHR?wVgT=Rvm>QeQ*eOFy%K0e47D8<Q|VN4;8Dqq7KWY;lgWPyr<4b->KfG4=*&r
zf&jF&M@W$yc+5<K?B}o10+QUoWhD|NKgGU~c`OjX#=i{L^7T}SWop5Owp+p9<&%P{
z5RV-wj4u&5%alfmx+$k=#fShxMX@*nIDknI*>wr^`69rKI|N;Y1yK`k6S<9y%ooSQ
zFT4|0Y?mQ%epulbRMZMI5N>Sx$y^+Bw8ke^qLyDQwR?nC8C?vpQACwq`F@=-F5|0X
zJTz8saSd{vL-);8bIOWTvP~xRq3-zs-b+YuFwBDw%0w6gaCUYs3JRqJGO$BFh8$yp
zb83DG);d%VMJx<SGt+Z&1Q3y+Buxmi-#!JwOl9gO&W9(EE!>d16+Dqr=<(rWfg6m=
zDDftJ?qv=2g`I88{^bTp&^%iatCOuzqTrk!_X8&mZKk*bcM;Ps%z2;B%0Fg}Cc68P
zlmy0`=(e5MIBc~yjT-yerQXR-FhxavI6y*wwdk#YlbfRzi%5Gd!z58SoNsU;jZQu!
z=L|q5w{-^OqYB>cW2m*8Bjz&^vAN|gJ3Y@mSb)WvaIYC)wDU>ZrW+|)snMuNc7zu4
z<9i8^je4+KC?GQJ{TEdxv{_0$l+%#ig+5kgr-T5^7hRRaF))yFd@84#D91E<(vJ|T
zUQ^-m3O(^>GW}>rk^eP{K{+(`HXV?V-!UTU>W8U$AdHFo9U%pefw0S1lox?paxWus
z$mz0=;mW>Xu<MwP_?9IW6Z$Cz4}t*}o5qYkIl3tft}2LVFk?s-LJOQ~!K}?1BB&tu
z8>%2`kmKHTjtRpO_Z+;2P__bC)q4gE^c9u2W-6(p)C|u-x-|}!Akm%FaNMt`U0TfN
zpOBW+^D52VI~Ma6kWpOzWVL-akDH7Sk=IOlJdF5j)NNDz-)$2tMTv|>MCqQz|AX0~
zga{87V1`!&zNC{A9s$<d0tYnVD=w=nHSREy_{&vH1^#=X8D)|RAI<p4=hh!JWB-q@
z^P~n|Mi76xNa$0%pS4Ot0I6#hH1;(Ekm!$o5AjiixJ2;SrLR9XmzxUZ<#lQUowLf@
zuakU}8hR%_WqB9F4G6a+V2jw7+VSIQ$|uXL>ia){mNwhHd-00fyfrtT;q&3OLf4_C
z7T<(_mG+XC(pQ+X0fv69!jn`TQv{hre_tXBqoS8pk>(=+wET#LOk}x=Aj`YpnARqR
z*>w>PAm_3_%4ZYPMDz)!$Us7Ajfw;-rRbxELnudA4cK`D#=?~!I}s5H07<tHF_e$X
zMVRWiBnV?65x(ajT^lf<;71ik@~F#Fv`KMbH7B(LFroT3oG2AhY`*1evEzWab~~Yc
zD(nPo>9NVf@TIzF$QbgB*|yp{`$b&^5EH>Q^h-4$_%D(>8S~o?{TuRVck~}yVBa2O
z@}&H?9Wdq@dr>xyJ`Z4QtAea$!Pui6D_d7y_B#%?uG#@M&w4SqW7kf8&sigbqpI6V
zWCmzjP=ZW!@WQe9!Q?QBHe;z5K(<`G{RWFI6MI3|@r%~=#ZlhaNyH%wD@8>kYtB-L
zwwI$`QM*gkkRmtcrx7;t6_J|H;vOK=J}=b*MC>>yEgJx(J^20nX;$jOxtYIX*|0Nq
zF7y{&J?IX$@qtnZocmmD_;cGdIQPe}cmIbruW<lz)ndmTcq={5ZN3kB+w8Vhf9M(-
z^5Gi9xa3ZsV!giS)q?P%ds_be2c1uopRv3&Pc_B{37t8%>mQ+qju0&uQEgm$a{o<p
z(_%pn(X)XHUJRCBOIqovo8+I(4<n7n#t)FyO}l*seY~@IVZ@P`_<j;<sRF$klRakJ
zsOqYFyK&3Qq^|L!vi3ES{e6v@dxO*GvZ^33%R^xKJVO(T?)@+A82LN6WBvy;$Xpun
zzY1**AXgH1{DH)f^|SZwcKQ?PX&M*`T*>?{$ttSxRjVh}H^dtH>Gh8~|G9}n0tA?K
z=%3>~4&_AyHmb=tJX7ue+di<34dZ70dX<Yw%EdRL2KS5aw`ZBY9CfwjMq++jx}bXB
z2hXyW*Y0)R(yCZl?{{$5H^uUv4zx-lS-%Dt6h1AFM)e#Feb%4nb1=VRITM)&5*$V}
z1}n4AJMiY{7rKJ4(6HOl4-GO|*K#`#hFxpjUdX<4*`Va0HzF>*H%gN89nzY`%h6^H
zfsYN}3eh6ieZ$uM4)-AQKzdW?LC@M72?I>uKMbG623p&1B3&*A=$45`an^EH2U7kW
zs^S~!vbK%Q7JJ*LkTGf`0L4CiEhT5fG@kI~bW-;#dy|iPSDcBcE%^LD0s6W@*HcEw
zsf-cD$etb4H6KtFUqJ#nZ9aVvE9PaYUN;~er2`*!tZYY<HgS(m-FXo<J+u+|zP+QC
zya!*)yP*6THKSydpJ;4riC2*A)~UZYC8UvgR{>YYJ+J&FRFwxzh0E*oYkM#o^fDC_
zr0ttd*CEvyaMSm*R#t8Uu0O^esng_7wtk*xk1+XrlZZd%FoXC<!!1}Qc~02ne^fHL
zU(QJhToRlC)L7cpYmPl}$#@GI1iQ*wjsgDcDdvocII^)y^HRd;Tmn@el8sVzjy?j{
zn9ji!kY<G_Unr4zVI)Tu{s=cVUCJV}p<<O0MpAB4>N-k~qdJReTc}pOj;oQqS+n+>
zB3(5Z`U(C7+_()FSnM&XRxrcMKa`6TD9?V(tXb97=SPgwKz9;VAAYi;^?X1XuM0DR
zW%mJ;ep(DKtcM|Khi`-HyMJ_%Vn1<Ur&-vfq_H^)@nuN+c`Ch!k=wqtK2Q`cp9p&v
zv{LqF?bO+<)C8pTJn&vj$!=9bGMzj6<iQ4pngtR6koci$MSi~lqC4fD@x_B0b!Ppe
z2K{Mqfw(Bl3b-?If>w3;l5N*hl1|H!Uw*}>sK8Sjf<8s0ai6NmqKIlP+N72bxu?uR
z9vl;NV+Kglp%dxiMcdh`!t!TiCo0ZF6ok?RRr@|jax=Jmj#l+3eFT&%>}g}!+aB5Q
zK7^SoL=OYML}lioBp9JcsGCH}QGJZmw#AWOmb9HLz{0)fA)!wAI9k|?S(TDIZ9RX<
z8q!f^%2&5jxjNs_+O5$xpf&^0Gs^U?9EgE!6L=|XcwM@r*zd_f{u<*qs9NM41v4=q
z19U%KN+UFWDTePzf=VQg<52<{WT0*}kS<p@d?^M#4RcW35;O-XVv!gdAoYfOqpW5W
z<r!gms8~l<5PC>q#*v7BW$P|TqN=8v%MMJx^7ri=G^BNcn|?g<qjdeHcy%}+yrrl;
zFT~CRPi9XVwgm*0FeKO++a*Mj;753P1PBTLWmcgj@vgW$<UEyq_QSsAiJN#nZQ^d&
zO?@y&ye9=y{UN6JA?;q~eectYHx>Z6rc(Ab+0Q~*#KDJDztj$pOVaeBv=Pu>P#%A+
zRb?D8>qZHeYGx|1tB0<tYY0`CZD<|0jTk36DMV<t#j}^4_Xib5W3IA%Ig?@#nmx*j
zC){o~B`Aqkgvnr_`_c`k{bnLYv)r8^SCxI#o2AuRAW*w(7tN*F$kLk1xf()%DpX*@
z;@fXoBA-{&noe8v-(g<-8RUjfsu|P(V@I>nK{%_An>%IEl>HOZZ#WKI6niQ!&@AhW
zh+zlRgZZZ3elE7%I5@p!1AboTB4IbdbkEglt>Tq{%0HHwW(72_emku1A@7<5uO^FW
z4L6eVy`hB=6OhQ>zKVXdMfsq4?AoC#>e{tx1H@FS>TiL|VMsFw%x*=+%Wn6GPkl?V
zD7}5meY-Nkn$yl%g&G-xH<{*aBi+T`Z?QbIEScvyll4Nx-N#i<Kb_EhLi)UGe~!b`
z52)4mFnwbU&)@?4csZe$19eM_9!uyu7yfNx!1<iIYQY<e)xecTiSMcQ9>?3sgNu?F
zS(q(sg-*%T@Js#^O-+|W{1XaXc$ggW6*^E!|Ak)6I=;2!%iJ#uTJZ{*1m_u;h+$@0
z|3T5W&M<;q)J@2ZlqF5i@DKeeu7SiI8RrZU8#oS`V@GOZY}&LeXDbSTQe|-&(2}=g
z-cJt9i`>nOzXPUvuI|*LfnLt*SlsyXDFAWL%9*`aI8xEqBj-d(LRIbAKR~hZvig_-
zRmD3w<qf#KsFu-wK{sX84{k*GEr|02B9xCKRs&Q3oy)q-+Mw0Tmp2x#BWrE1F1Y@P
zOjGpD65k+A^5utD`hU9>_+*Jq*K%F^<aeQMUq~|H{mnsrAg){-;nwq6Yn2X9A)saZ
zM~UQie&XQ@!mZO<1v~pU*_v8-;}Wl;=1jv}{e6im^+!1J@|lZU655mwvqYI2A*d!w
z*Da6eGAyL<MjuP|Zi~7B>Cnkm;z2c9>?9zxU#D8RDez@l4FnZ@-owxWIT%yEEpke~
zI^`FV5$1o&FcO28Z5rDoho;u%!LE~6lj@xAeAP1&9}_7~dP0OyZSiJ|+D|s;`b=hs
z$7w8hxmK1mc-@%GTC%LOzn!EQz9QcR<kf3%qDAzxFN^*0iUQ~TH9kRNDkY`J$^&D>
zF1RHCFOfNg9OE_a$RyP+!)X?C>wZQY-|TaLur1{QJ({H2F$&FML+8b^K5JfKgF<{R
zB`#qT!SX*IKHf>K{?#wD4?jp9ggw{yKtE{wi_gel^#V^8pWL;yZ!{S!;K}MF;ON_t
zin(p{u9g?}g8@VXtzaZdRxiRO%tD~6_*KNZFEG6?Yph^?&(?k9v$dwpK}(P<7Dvn{
zNyeLVU|3#=c*qv4(-_?#S$|sTVtw76#?GZV)hI@IEkm9<2OjK{q|G;vnOu#`v0(R7
zQ$SP=lkzR_!<-1$luVneTWNFAg@&64I-kjgwh4$prLu+zj17wlTypfHoYl)vcaE;c
zdwz|G3kaLxJmqSOsf{ulS)zM<W!D?oiq*cv8<5Gj*i~K&{liWDu|u-V&@u?Dj62$$
zF==);(I-M&i%m9huAG)@Gid5*!!R{B0mv&u=HGy(^~9`Evn<$%RW%}4^R$fg7MHXY
zs@RPq87IebpNz+S{<Bgc?%?(vglDUgye=*CE^8|)=v`p}ygBIhgI8L@gtP!<GR8l}
z{_7l5QIHwbT)<bby@9{Mx2;MDhf4=H&S96%CJ$c+{EseGvQjYWfk{jbd|6WK-Jvb7
zWOPL;N~)di0$3A9S6{{sGX4f_+E7fVB<`7o8`I(f3|Lh-i?Beb8+X;P11G|360{#Y
zp|3&zWljt!gQm9`16{`Ol8|l+7<V9Z%&dsDpuy^b%?OJSe>k*{S=@8fa6P#CCbTRu
z5U+dxDPs-#Zz>_Q47#z^7-%uUU&ZC5uXpCfDPefqo)=4M4*N4*D~5)4#VXQaxVu55
z0DL)qJ^R)A@f)(bwJ#D@o(O#jqTD!c#S}zwc?O;hq$ijYQXhvE+-WHw3xQ2|eLuGD
z`><izhGmrVwY+j9%Qe8~%=cC2GMU2TRD`riszMV}zaaVKnlk|&Qj;c%L6ALBg5Ru+
zJ*7ymX)FBxl{AI`AKNmY(Bus}%#FN$o-oRwsIstpH>&FZs_q`u=gw>6Ie@JyqN&I#
zC7CfJ^6D{&pUHb@p^Y5;g)pagWF`cSTcuEvzNb1e=UYB~n@X2SZ;4Vx^-!&e$gP1U
zmqe5)g*5O9LsX-ja3Iw24HpL2vhm!!6>jfuZYqmp2!67}FT>frSr|Rr|Ff02n3mG}
zCz8-(dmJ{#X+V)UL=iQVOht9L?&gi{4v)tea3zs!HyHwQu_a?_hnDXzgX~(zW+`Pd
zciD{HY-iIiq;DxKP~3HHJgqS+U-MUNZAdR-kMR>{YR+|uylSuQOt=2<{&KIz=4U*O
z@lZD>x(-d-t8?^QJZw3ii7Z;oG5qpWx7)%Cl@G*%Of2BT<A?CaQ}Ze^{qR=3r;urM
z*GW{}Szk+@KzE&>O{wu+@8*v_{m&oBaSI@V{7%QLtp2V7e#+zxa(MYU$Kyis8Q$&=
z=WMRq?#;R1Tg8Ply0JO!XZ5FwKqWQ2=W9bV!CXne^5@xX4JZ}|w}G*g0=PwpOKhNT
zLb2jjddmxE%NH5q{O|QAi{^|WGku2w<6osMM<xS2)K_{~*Q$8A_{>-;-o5zafdCBQ
zQ_cLls=SaVTjwYnW**FF4Bcy5vyf0(^32`V{C<6$v}Ub=bW&{W#T-wUly>@zRXBcv
zR?b?LtRyT&rnS?gPLG-|V>Xq=^o-t(lRR!uetyMBjR2ZGvx|GYtNSR{fM*T|<`;U|
zpFx*;`T#%9(v8p9j-#K>brM=!Yq^E{INMeO<Jy5Iaoym5<Qu4(H^|3kNGDF8OMey?
ztx|!}bRXc#S_>#ovoT0}dt+x_|9cXoy0arI<M`JUGkHPv(phu0#MsL<HP-o`{m1x@
zt#T1OT1=4aCiRpD;b~*>sNRpCVss+$$EMVvw0GC53qXkukPK%I?rBkqd=!qIFgzny
z-G9-RQQe02tZ{yq<0@|Y4!UMWKu5s@#np;zNBg@f2)E(T)|D-!Oosjf!CW}CqG6L%
z4G;tpC*mKU>XnjRn8h3VVGfZCFO4F<&kE4z8D0?lPS3|el)r`OV8Ub38`$BLSp$%|
zfU*WL9g!{Xi*MajPT3gpWS$?)9%P1?f)amcI^+0man7X~^HDjr>t=o#b+AwoHs1Le
zq}#4GWU*c8vC#GM(fyGzuy5Vb7L^E>i0fdIo5T~EQ}2F+W*tt0PQ}a)?Ue7dz={3}
zS#uMa<K5A!oR%xaU-RQu#JoiKn2UrFTs)hy#jFyhH(jp=3V<hXtDSP&?e5xO-P-Eo
zW!pP&kcEt%h2$XY;!6j#QrosQw2|e5irPe1TAlkGGrMqh=ueh`uTCP!$i<?8e$TMM
zQ0+lFLQFd>6TVn7(CZP_=?k20j5PYZyvOS7W$sR`*CIdU9Zo6u9o<Tr7(G#v0aM3v
zkf}c2cx;ZY&Yto*BAx8uqGN-#JVSb@6(kK<0>eZy`9LD1ALc#N5#A0|ee=H?_S$CR
z0Vq@2=GVJ%ymThsKoGa?MS%L5CYKi?Zm>`5HqUwU$*UWyB3)$Cjc=$$;J4RATo%Ea
z?=G#?yL$YG+0_{Hm0~K?_h8{@k&rda(0M#MzMe6nB^GNMMtT!EDHV>WeV>75@w$ua
zs7e`9nmHIqqNDKv8!Lp3!E9iB{{v(mlu}<UT#-U_m2b@UC2KIO7*u;V!%BM*#Wj>%
z@e>FcBGP&*GURnVL-@%?Z*!&_q4gon>M}S_FUhfA+Gcab?*F9)Ya{9}h`Q8>f<<!y
zy>+GUmxr0J2~&eqjqdh3gYd3V`lO#9tnB{C=qevS>6@bKLh1ZStGX1%(TI~Qe`TR*
z9nyuF0+p2=he|@@t(!Cy!6+(9hT)a~3@F=MD^lFu4b%QWFjiI`7~#udwY;`ECTS29
zDx1M=Z40R4vg=WQ|E<}uU)83=`vsmwd-d7<Q<-c0`CY7Q(yaz2Psdbn+R)v~7pOMd
z(;jv6+Gv`~!IC8_eTp9HiL9|TtJ`Y(SE1UU!+fH{J%Cf&!Q8O_V>YcTGWQ0pB4~NO
zcx2{Y1&APKtOzxhDn!&lv>y`Ks>(yUY5tAl<O6#EBP60Mc*yn%VRQOX>lap;ziops
zL4+NZamgDneG<oum;En645^K_S5>cnyKm*u*rMv~A$X;%^DkD7>)n}$ffN>Zn(rE>
z?n@DsxA?R!G=s2d++ni>*rZ?WcT+-IE}&1v?~P~ytFj^sHW#EEG+(dn$etB@z;{pi
zlIr5y!tx$oN@CKVt8Sp0!-|Af*HRfJE_KpJlD6E*sZWN_u^tcv>W}=v|Goa~@wH`e
z_$`B)?b7XO8>+~AZ{F{1qT*JXAi1QEHDH7CSq{#M-N$=5fOKse;b25%t5Te3y&2)k
zikM=DmbcqQ-sC9y%5s}yvu;0=j*DSIwNNvG{vnsZa5@#C0AA|<`BNJ=s*S_tfC85C
zw8Msd0g-YO@?6&fyBIjIW4HzD)3EQ6iwL_USQ@pwYDX+fYK-LwsF1n`_}zDrDYvl$
z_teJkkvE~gf$@!XfBm(Wz7;AOQ-VQ(EVQhLHh>@$pXW5^8Z!0Zj9YvePhxv?!F^1J
z(c4YU!LU*;Wo;;WW^Eew0ddGzutYw#^UQzIeg*4aLOy_S9L3C8BQ*J*R2aanPz_I9
zLWBgc>+u110AUCIKCySc-KhV8F$!1o9=>MN%$mj9`OR2!<?8yZL)NxMkKY9dVRbbk
zFil?eYB{5=ZJ^D@LsKD>K-pTq+a(z6JmzQe=iEp=K=d7;?tq!-iaB=v?Yk(}U)PBS
z=lwC|SbRx7l7Qr~txScA%(3y4+<9#uPMaRFRDGaHOikS&l4B4p0cajEipRELbTQw>
zOt7VuZCGWplja5*p&D}Pri;cY$H|Y4AdS{%4RdcU2{FfJ-8XGYnZmv8EA5CqzBK<m
zmGBj}Y3hm8M&vA3pp*GNBmU@xS02-gsn~x=w{Iq#_DB%DoN&f3Au%!KSKO)dQGD9p
z&Gwgus4oe|tNr^A`D$`}wAd)~)q?gzepR{C>(9?29Kcxn*BcO9I@aPRy#JeY{YQRy
za{=VF|HLiJq0buND7n{vtK8B@Hs=TX0rV5c)~(41JtX|NzQOChE(`UUrR$;#gBPBZ
zm0hP-Z1<jjG%j3buO`!e-mw)k3^dk%cs}|n%0pklEu)P?1=uU(UmE>wZn$2>Ekk+m
z+i}YaM^rX@QEh*46K(~(^%l^m_n!Y@9C(NmfLvp?W+UX$JfwWX+mzU*n9+Tfd-^<%
zg*sH9+;7xaaU^W>PV!uKd{6mJ<L2#dI^m&a?H6%7JzA2A3X%x8Lrhmi)DoFrFX6IW
z7I(LNjcldX?vxti7)q*Mrq2rdGW1vBQR$6G=1bSP&G{{Xm{IBxMmxQ!_vWUq>5y1e
zBOlrP;w~T!nYn;%ET_cWg)tbXjGAHf7N5l{F4W3(^e#lkpo^?_uHl#WoNkga6r9gK
znNZTs<rW!K6>4r@Qc}9)u{>;zN_>ybDy$=S_&wNFS#4eQ^V>%K<0(N#z13jY#S^Ex
z)?f38T)%%q0vB$`t^+2ZIiX2Ait5baI}bPWn(m@r_0eBNx@TSey>OV1aPI`%vqHb_
z$LXi5oUZQB_r<ouO=~cnYZ1mZQi<%T)3XL^+Ym-TuP$kY+)QmdD|t7#v+sS26%*C$
zFKbMG8{9^e@!-2=O}q{F)2RpY^7q)zmhS1XxOEp*cf1rcfPL2}|3m|PcY;7s1Lqe;
zk6TY83@6cXRhQWM%}TZy#W;x1!U87k@0`@t?U;;v7N5ndgEy#xyN%W2t2a^A=j)FT
zQg5?GyFQp1DU{@HJAZr%-T6|)USwFc`7iE`VlF?dA3y=W7ng~PD-wuY24Bsp<1m|V
zyM5xji_Iou4YAwrXG~un;^Fl#I#*R7Z$-wHx*jXP5#q>U@*ED=Qd{G#6#H(u%2`S4
zPl*a^4d$?D_PSlHo~U>u-t_Rg0-)D}BgKy>yUqrG8mTkgDJrYc{X*UeI=bzOa~03q
zdE-*Ui-MBK&1k=TC`XAga1=Vjcy4^k4F1Q|hJG(vkBHkIrtVucZhuz(Ui+1*14E8a
zJus-g3t*k#TLmC5=|6Ksa<0!bKaB5*-wOGRN9;5CY8>KY;;<hBsYa?y`oB|fyg4at
zL`h;J2DeVonU|P!y($eU2@9xY&jQItvP?{%+lVApL|Ba!1|ld}!46@yy^zA1uCBWm
z%3^?~?OyT8*~ZJ#!j{4&wgNS1I{UPgNmbH}Syef01|y^pO(*d53o2^VF#jqQJw~Nb
z^TQ)_pbQ)Mv*>5h*CjZ`b^HGlo38=DHPL*A{dz~Nhv)zy_@Rb&!*-4^&Pex=C_=>m
zc|^Za?K&yX&AHkKN&{QK=a=W*->W+o9E1V|!t;+)%yECE0iktMl%56v6Rj}-y?X<I
zmX_m)ATO}xYifbMaIpsaMR~%2df6~cPhbg#g7$>+FR)-Ky9dtlL27)v)@MF-nB_K<
z4nc-WDWa-4xW9u8dq!};2+ByC$!>XfX&<Dy6jpbbVRmDkPzCEpj(<f@$lgH}yL<|;
zjL?h_iB;`w?V15Zg>^9;HN!lEZh-jq&+C8eN7(V(-K@1leo?*8)gd^5u!5Ho7h3Iy
z+Y!sQ?gB@k^J;7b?Le^_0$T+l>9Jd>MP5)}bjxHKto5)~(q`3#n48MZU9y~9aZ!AP
zyNb+}Iu4-*84Xm)TDQvYk(Zgv4+G_nL^+)hfSr`?4CxnyXQ4Rdn4!_(Mv&M+u|$uA
znCApDI5+Glmg?OIhNwC3Z<AVxP`ik*2>X`M-oi~;m*+hfu}I6m>^2WS-P;-7<;^h;
z;LT;2h_{ZjJt?DKHsa{C`VyR)WT2z*2BhPpqJ_poIgK-$lrkV0wRc&4Np5XQ<#1Ri
zTJ98+RTAGi(+tIa{tg@sBgVhp{^)~U6m}WN0w@f>X0}RIncNkuA=+s=i@0jv7j6A<
zu^wg>jaV5>?sBVkHU>0(2vpSCq)A&{A8&VR6mB9av5%x_+Uu+v<sZ(J;RjZ92QcxC
zaN@IAN2J(GZ>C#$nj&p6Sd<^XNnO<?KSFHvG`&|jHGVMEH0yu5qowJ|mJM$cyC>&U
z_1pYcny-pPJ3skQG0ox^>5C0TFb6uc%g6=%!LQwrsjp=phsf7aiB6nVl!N#iqlyp~
zf>858PT)=Bz&TJu{bu!ajX{-pcUt-`U8Bz(tAvSR$ObX&X(x{Y%pEkJ$`7-K*dbs`
zI8+D+p?Fbime2yXKox`&{>A&pW5WJvVA;Ygms^tdGvQL8()U)NQOkG`gjTN1i4-K7
zexR@*+7?ocyjD0ym%BCrcI;Ppe)*Z8qm{fwC}a-6HRb4WMJe)zym=u=nJ4~PKdj)~
zNs_rvqJuo*@0;(UOBvX*9Rm3g;N1<<9L^oRbca;=<uVUA^poW<Pus$32wY>$mgUl(
zN*~=DrzVPsMP({870Gd=QrB|3)-PtWB@fRZ=ERn0!i+B3?r4TB_Qtp%Ng9TU9VJ3J
zCDELh58{lKi;jw#rxS7yy(`B7_qXKkSm}qsku@1v4_5E?35A|ArB15$CqO?XEb~iL
zIs$dum(5y7rH3Wq|A0l~6WFS+!>y`#4S1Gx25t%C11_n?pOgm4)v};OttT>d45phy
zm_3*WjTwagKAOJc|F84zgOCSy#&hX`?>8H>3vwz6<W*Y(y&%f6@^Mf3hKSHok?7S>
zE29+IYv9vz0gp3mf*-$Y?i~=rb@(d=3En|Ql0any7Y8ljc;~}cNh4H!eUoSqCh;~1
zd>kw84Xp<v)$DKAnwrejU<&K>>}?ZZX;%8iOYS=d%bHW0+R2QfY{YA<ZHQDIBHMcD
zS7r_D3o@lkJl`ugd|>6_f_t77OA4FVnp$w!dA|acdQxy8)PVBC(~LK7GOCaFpLN-m
z-oGV%o8^37UdKAtOSh$;b;(nO0|x>~y3}_CmP(EVM{(_}QmiR1mRyks@BQj&P4C2>
zT3?gZ^jtzk?Y>Ozs`YMXvEe%&#}n4gmLK$~DSDiU<L)NAu3r-BboD-!VN+Z3!-l{^
z7Y6Tj$cJK=y#8A-{7dy>t7AQ1bkT=<B#F7^<*H@zQfQR#AX~ic05ZP`YGK{`{hMAT
zwyZsw>}Om`?ln*w;{4xXIJ*9@uVE(c60xBnZ9V~(iHMlasx%YcFs2=&;mCC44W#x|
zhrcgeIek37?O5Qm4pfXmQP{RwR&;~Q0aNBLu_a%^BmbgD-q~Gr@8bw{zh9?&NRoXq
zkv&Z=>2*ggvU)zY8x)iz{`(-(>Tei9@9ZkN|8Z3RkwK|hLSFIg6I2IC#MI{rQ&)fj
zSwp*&`P#Xy<9o-HYxB>)KF-o^mTHpZ2o@arc7%LS5P9aLA?NEr45K90SHJaA_#g=4
znZw7fTX7~HIluP8Z{^Kflb}?jO4WnX7HzAEA^|`epqM=NJ8xm^`@%oZFTX#=Ye#+~
z<$@qeSd8fh&z4KECmlEwkG;(N`sI9L^txEOg9GN8e+Q?jzUQ#S#pv7nhC{Y**T<dQ
zS(ra@S9c#h+drBX(1%xNPz@ehtisQ(V)GA)+Nxz~;P9e+9lRu}x?9uN`*5$VMH<@P
z6E8fvyy0+gZAsLMBQ(EEmlL}$2toI$gArZ$q^C_yQiLqPlr@@;I+0a%%J;fgVYW+J
z(X5lEdi*eCJVUDMOgfoWbvp2-Piek8xS~Z1rf9q{L;^#6ux`4Me)874&K_JAPlZon
zDX9(U%Nex?{Wt42H!;uL{?OTr&0s4r$y^1s4t+7J`jG!7Xqww;8&$YWP6fG87>gD4
zR-<h`o{d9K<`bn{u~5l16KNkqZN7ZPk^3%y6G<p?TvGg)6)BSWMgW7f)8YIC@d23i
zWJi@!OLmLtd1^c_jNWmNx$*;UfO14-;788dVHfY_|NN5yhJ{7fond_5GXpM*|0nuI
zytLlG<9d%to^;kazMnL|X8BacF_)}ua5{8n)HrM<6*Pu8{xcfKX>I~nSY3s%nzav`
zop)WH-~$H8Tkhj{u>k&v{cGjvjv0AKb#mf_JvDos<Wkoye^BWA{99C(Lbs@2j@ts)
zX=h6eNl-E!yX^Z$9DgF6TREVZfY4N3ZU-8vFhBsEV00N<oD|CxxGLXQ=m&8Sv$}~u
z98=8xO(K82??<BKT9oQ6vjYVl#&{1>xU4p-E{mpR@tLN+w4`S>K_3M>IivwH<u(Yu
z2B`bg&@{+J=abXdVd*;K&K-DL#o@_{oq@Qj<v=hn*`EI-dd7cZW~%hD3v`my><!fW
zNn2MMhGL;7?<-O(tLfL(fImB)|0EqJac{|EXILipk+)8YmGfm{vs&*A*e`<qLGE~?
zhJU*n{J-Z#tNoAclI%qh`;ixseS!dW*(^`~d2H|$X>qV;?wpcfOnEHWk9mC3`J}cM
zljFV-FdL<K{~#`G3EpFuhq-3HME)=ru={4;^Lz_`xcCk}auLA-^uy0Y#8I4be0z1Y
zc#Om&C1w+pnlFj1n}gj1wzdV!sU)@2w3i*fmkX%mYpD5;i)wKyH4e!V?E~aWv0Dy)
z+kvMEq~?`OK8pse9E9ath7hfpDn2aMk<FR7B+oc^7n{V9%QapY*4@gGSr8Hv6{~tF
zj?KkVp{0%r_6`P5E^RZ`*AI}k|4}G}4e<Lx=brJ>LiT?&;Ad;YhUZ4Ne-xY7xXOjz
zx(*8iW~mobV<f}yz4Bbq#8(1;6egLiqCHHDmX3&4%X5VjU)lT1Fe!Y^D|2OjuT*R}
zma9shR$Jky${C0jpRNwO5L+rng1lW~1ZnUod@X~Hi1@X&m<5oO{s-bB!TN~%lA71f
zWIv5Y|Nf0r`L!&N1Oh4^noORsB1W=a4`7nK!6SWks$@fjxEHz@K4^PWFm*I8(>%oc
z^L3A>GTF}7^di<&mAH>mw(d>OSNX`%xQM&HM8JL4s_1OJx3ZsivAEtfTNPBTK}cq^
zBsq<o7qH4EkXLH!)teLabDtXE3AggVQR0vI?G-^`wOL+{WMBduOJYQ(Yp(A|*;0$%
zhz0&1NFICwRSV!JbzvbL*yF#gDgQN65DnjvGf32jB67}*Kek=u9K`#^9_fO2ZQfG>
zF<d>Q0SdOkQnTk?Y(TEUjKF22wb`yMbxn-yuJ~wx%)$&9ZBOnK2YlRY`tN-J>>G%d
zIrX$Aku!+9PFgAvVf|!DZN`GWt-$rbp@rxv9DLu<@ruOE>W<}BEATLZ%USdY3749q
zBp0vP8&i1t0L(aKlgIWFe1JU?-FGld-3-o)RrgOQha^f8Q8cg2a3n5BQzaZxz?-=`
zlP;(s%WDxsX-UzHYj-A6t?wa7G83W0#K(?iK!VpH5oGUkKjU)94AGcE+l|^Gv&)e6
zY!#<j<uQY1Gu;e$e-Pgx1>O_srdu0Gqrsk~R+p%%oXHtynH!12Q8v_SmlY7a|9Ldu
zlp=m5cZTe$r%lHcXdheGvk;c=T(H~wXlqKJJddfje26Jo`_&T{#!>*@7HK8u@|dn@
z1w!p(TB)SGYOXa-@2j3p52=T$SdiDZ_@?4Tsj^xp1}=na1WZO7K~z>!@4!Y0rE0Fw
zTF-CUJ(jIHv8sHZr@D4YUs1;z4_|xW!g4c>$iAsLR=jgb(P3|jY209}CijFVR~`nc
zRAnlArz)$TA+)-sqGWj_94zs80cQ^|Wmb<=lqzpt9kI{kxS|Wq*gP7K-BwP{U^=6U
zOxavIo82;DK6!!cjad43JwoWtl+LHRud6cq*a(|O<n&A7%?n8xY*$nfpu*M|R+uyn
zyA{wH{6%V{8Dqh@c61S<T&03JKTToL#?K!~oUC7S@8!d$I6z@B2N3!Qw%TVPv_*|p
zuEw~dnX{}Eddw)D7GWDLQa{1sK(9JCXOb&tUCKk`wxFKj8^?=mu;}+kq_X{vtslih
zYXKY(U<g<wXzl|7YhXNy_Png!+NXd8Zn3In<%GcaVS}E_L3`xMsq`DSm2R{C*eX?<
zZ5a`bT`001cE91KR;$W!O>Qzqy-W)y<vBH0;NhuSrYY}Ea(qf@5>f3?T1FK~11zaN
zT$Tb#4koZf%@cQaX4Q<qeBtI9TfmclFYL4fItZ*(1ySm)k^q^>972x6ZV9=xg4Xit
zv2LY|{9HNmzR0Do+HNEJy@);kyyV)7slR--yT6>#^$4Hb4;=(s!SOh{q;3d?KnHY`
zUEw2QE(tIX`f>lc@3{k$a5%AS{A5lbU9gxKif6xmh7dSY2k*VR`T#?6@{3!In?k53
zw`VJ|8aoc6qh-raH`64$e*dXW@;V`C+JV@TpEdBZQONRBBm>Kg4%OsW18)@)69eYt
zZVO~ohi81x$;b%~Sgc(~%$#Mql)5kSs>ffyL%08@R&q!9$mM`104z6_aJ!dWi4;&!
z3yVA4!r23NT!s3f$=Jmpa$@K1eroqmr4H@;5!KjJH+11iL1mh^YISYaUTfV2cLVh7
z+eO`Y^8MS#=b&MbDgc77xMJKr_57B;ThfN<V+vOrHr0wtZvR`!mKAmw+S;AVbZccO
z^?kB6NK&MNbbIlvj#|GfE^CmXEpI}rbn%%)NQS8G`@-&}`^syV{a1AAA3)g8lLEl(
zDd6zIGts}!ENF1xhH7r>S7w-=Q4w5JTWgTY%M3}`XMcyk8~Wpz?jiIr1SiPbgazV(
z3!HHvCL%ueJW3DgBD|Ptt$O>OHT(x4gq}M}c^ij?g?w+`bGoK25ga*9CMm97+4ZBk
zF9jd)`+w@Dhe76gd)kDV#R0L#LDKlt-07^004hM$za?LEH0oxW`8!JZO62>43X>#=
zUXYN<n}b$~R8E2}ASCy<1h#sWQOK*QKtu_pu`NMm1imA_)V{5pluF>n66)MrzKiIg
zt>Cw~EtiCn0<ASU8J3036d6o>EB+wwS_bbme^{H>P>WlLDHA<YH+)}QaSZZi2I%gI
zf}o}7E|}TAmR7tikj(RNK_^-LM)XwNAc=@kbK#_#iLIEKsJ4k10qy}Qh#AEWr$qko
z%2+qGD;(MIa9){UC7$U5?5eY7vICfzljM^Ia1}c5#*9a38{Bd)m|$`W+Y4+}am?B!
zOODq!rwq4<QXdetN#Nn+h~IBL0|S`jfPx!f(hZoN4Z1R}=4;}K>pS3S+E-z;a%0o6
zdaJGz`MraPszF30@zC_hAf<iPkU^l$&^{7;QP^BZs2R?A5<I*4q5Ri_vl?P?FM;=0
zK3F|nP<Os*35xT8>CYZTyj%BPVT?xI`Ne$ltAxPCYVQ04zf2EqCw!OzBFfrZ7ZYr^
z_NW+#9*ei#*5e}{Y#)A)ZhG&0wA~HhgEuszbxU>dMn}Dzk)mQ7ggQ0?l|1pS4OOXa
zP;*k9+tso+2<iBVuPv}@M}wS^j3bGTNkCV619J=_4F}lUop~^e9_wj&TieUNKsOn?
z9vtl*nyr7Vsr&d8x(PfXcRQnwYKm|D95+#<v82AFnclz$%S}6jG!>-%)yFkes<x!w
zO~I}Ge7P1qb1kq$2h``)xLwm%O{?<~RczZE*s-#d&*(!!{)-Dry{N&iZ+X%D=Bz{E
zr`U;N4G`Gx3opKIZI7cG6V2_5DpseA#__$2fq;`W?@>)3fYr8$a6xSk+MW7{1{86s
z4p%f-Q0QGQ4d64o|MiYL^)<lU76BEWiZLct@VTMYuvLu3aGyq@e0MXvo#B+xtX77i
zzeiJ50ps3o{%j`l^QXdH^vtVQ#k?n`3%u{TVN;sbJ2P$fR_bQBlwR_{->jZ)HlNM?
z;<t;QpRqRe1>UXnVwU&wE_f0{zaOy1oTgk#Rq;41@kz>s)N9QNkU#t|-1rC(oA@Zg
zaDyB22+a5}fZx#`AII(*NISY@$i2vB{l%b?<KcgRvu;=dTE$F%SpE)6X93S1jEusw
z6E8&}!3#q~Q;aXYbk?eLvLZ@AQvkO_?2kFb`ge&$!tY#?^gSZPjK|;#5%h$VFFZhY
zm!<%9*&`;Yv8Y;BNw|VQVM4+e#T)U3S##yVRX~=MMjbaJ<e6|5UzE(lAS!3xu+Y4P
zfP9yocd)qr=FHMxrVd0yL|Tpc1r-e!qw%DgE;r$c{g?0v&m}{j_0O+2-8#TeAu57`
z0P^LFhJI)Q!SR>StR9G8NI=Z39xjQo?=R&+Ou(DwonIm%57r-X1gB`uE=?(ypcM*A
zIF{%h7s39brnHr$>bSmvASp@-VNk<x<fhKYGr{w6LI8gq;qV&iG$j$E!fnWX1`C$d
z#8M`MW8J$J5#G~?GWjb!LQWEu@X7zna-WXGJyqT&xiLev$vvNd;h8()*7vNNT#K7m
z)pOTZty^8xJ$z_99b1{ALEr`WCl^K$?vd15K)Qx<>jOObM|Ay;s$uNBR(Qq7x&$fb
zkW~O@vZza|w!smB!jNJEGkn;pqHepVw`q?RegyIVIP-}oM@D#9Y#UoCn#GHM3cU*(
zr%D1C?RuK$6;uW3;$<yQfl=(PKj(osHuqHXp#N03Jm;P5&bvNWQCQ=J2mtC$F`BQ=
zfz=2etA)P%|A>8X5ZKnp;x*c`^;k|Y4EqtI_4&dbPQf11QH7l%_&rDpA|@sH>2Rg1
z-0hU{`Rp2&s!Iy!x-)<^aGbstsU<33F1ax^Xr+}s86TXvU^5upZRKNET2BP!>V5zV
zr#RC!Xf09oXvvL@Yb-Ug+wszjIqSjTKD!XN(sC^@SN|iBa7Uut#^zM_1Yfw{WA4f2
zSzTg>LHzOjl%hm5EBLN(MaXe8?aHT)iX%6-Mf0%PK|gELZ{Uka71m{VO?B~jv}I8B
zZUrLvi}v(3==yb0u9Ud$`g}3{4t*y&I;*DvB%`O5CBiLn`5^*KeNNbo#qRmAoVx3o
z?hWDdz1jNf6I%*d4L37A8+w`r)po`lFKexfp{RFuxQ`Xt+c(y@hX|#Wr@^gtlX~sW
zlzVu1w94MG*y>RRB}-W!L)GkPcONYlFILCn%SP8v8nioP)gxm8HnzEo-i#6~59BX<
zqs*m{7pYv1isGM_x8zafmp!%pf@NSf$Shym$t>2aonUrB0aQd=UyQ8A{~^deRb`)e
zq8@wGUi;A3Urk%P{=j?B_1N3bAif;J>Ga<&6r>@m3BUW0oa_KOQE;ytUw<=e6P}d>
zEUdh57LqRd*fpQdwR`*Z%WGnqdMwEOs|xFuc7L3N1A~fqy*p|v%DcsUY}Ogt0a<*2
z)Fj9h8Tn`xt;CG$eB-od#&J(C%Dc&AsZtkko}7=Ey3rLMG^l+r-FPF#gW%CCHLkBr
zE7l+aGmJ;4*IEk>FQMHY#-3szNykC)D+8uS_#a2eADw}#T!22{1>ZW2M~6emWr^|z
zf(vzq&RkSc67<dW@8=$c>uGObZ9-CfpKd_}$$z?iReI=|o!Cwn07!7_3`2Ep??rn7
z`|lq4W(~c9M0hv@PG*x&WA1=Q=aPz}BuBy+1W3<j5U2bl35Q3boPg+vg9KthjMyo$
z66h9Bz?7RL4YD3)k}I3A^8gVe9p-6}xip5hVJ2jKW!@fAuz4SsR(hYEg;`SYx0@dC
z?Q%l&`ioRJIxzlw9&6v7&c>q+BNp<VsVRzGsKAi_RfFeYwPwP>jf^?Urg%3S8a)qX
z@TxTC;6x`J&Z&2xJq?-kDF<-?3MbOoWO1m>US=ou$rx<voef~q*ROA1XPMSCuy%S)
zmF8Qz9<Zk+D9WivHE)<OfiLe@am$74*Fs*;x(%NY5aFqMfjo+j#3h8D3P%@B5$_}$
zYOzBpkiKXqz9IV8owE|`SQ09;NKnUj7t)LBFYhs9mRXc9`vod_h10Tlgjf=MTA?R9
zUS%;9Dwdc;`1-7}0|iDpQKq=>Y5gWex3TaCpS&asV@b&Bk(H&D5_K3|WmUVIfP)8&
zd<t?GUEr4h3KI$#3L#Y_7R4o8ve0p(A_DFv#e??xf~*O~r}m??QCy9OK`_{j5e@V4
z8!%r)5s=WWyt}SXndkR#k?cN<JPB{`sVPHM&OVA<rN>LT>lMzLKa6nxJr#(uy$cko
ztQ=MKmWAh?Jf`ZqQ=t7@7{^?nmDR!cw05K{0CyXG*@!ILLN#^UE6~+t`VPD@Rtr}I
zNmW!0|GRrriEgZ6KC!(TQN(MNwgD^jpmCAB67+JZV&@l<`iFfu0CY+w)AP$Jd%0!Y
zjIpvplDj<9{rmi4kmTaaL)f~A2-}{uwo}son(^8!raeqdF*8jv)45}~f6X}K;PrgV
zTvBo98qbc-#Jav-_O=Rh*fzp&ykoizs4TCAvfr)s|MtKxPEYdfGh^Dzv2D110JJ4e
z03Z#^S$uyoyUFjZX#ya12QQ5!g%#6HSxsIayce2$fQQ?UqiP-pB<6zYnv>7)1+ZG7
z^RJGR@J`B0xU$UB=*<FT6TP|pc|Uur0MLtj5Xl^Jd6nS;6lIlLhgDACY3Y23Fj^!F
zDT_#eNLr;8@p{n8Xsp03FyZ$~>^IR+7fE-%nF;}hZph24rG0w7=@($WFGIzHM8Eu6
zDzAIqv7v>aT4cn8dCxAx6C>!99Z(dJj|5UaU1<23tK<TB@el$JPaNcc1q=X|LuDrA
zWp@^?iu{x4msg#RoV^jT8MEm6BoWt{sL?V4jvmU7HAD&A3b3rbWD#%1fNzZzq?VS>
zMD%vjIVPY$dHS1v<*9i5SQvjK`)N#jj;+`y<pFpG(lM+F-@<Xm)@b(m$gKltU~2=n
zn#O^W{82IIj>vB|!~1xVy#KnUc?TYoToM{du-A=r-xm?G(pMb-?3SXSe`J1nVH!6u
zKt<V5doa=3D&!!FHPsW#Tw8}1J@kKVv7QsL0Zt+D{!7kIAh8~mK0FQ5J<Ln0`)c&$
zej1}<nzsVGK-D2f#uv}yux%hr2jGY!Fr6+-c;*>?wx5ju6>bp}y*Cjc;{a)xV#XoK
zd1|qZS52w}HCo(cGfykg^Q>fYYr_o6JI;Fc+V+C%S<FMRQYxzj*RQGd^nan*D;o_$
z?x<CUw-MLp<3BC@O|gpk!8d#Jf2nmq$ipbq@@~@ArXgohNogpr&Qzp+sLEv1RSfE$
zctW5gsS?(LbECpuVCtZ=sI-I>!4eD~p9Cd~#@}GPqNKlc5dO^ttkgkwV?rJovwT?f
zTnA?R1CTT~zfqt{8zWIiu`7)})YhF~UAT1|#A}1dd<G2KR)7ycz9;4CiG8ex)}d@K
zqSjRM$3N=$*qEB&=2suIhv?`_K0acbeAq5#V)q9_K0>FodyU&sn=X6*X0(Nd!R3H~
zb+z~;?3~CvU4^q2m4$O}>Xj3F**%M_4aH5CqE9&f2)%qFzGWL$i35sq@jpfZ{5FKU
z<AYFZFS{0LMqbj@T!D_zqh>8aroi?zTC&l^12jhQw;`vmL6`tpi@j{eE=3t8<v+H{
z`{^pn7}LZ)yoXnQ!IfvNy43F1<Old<h^35}wU#ao?6cF-Q$bqoV7+5Ts|7k~srkSV
zK&T7V?UtQSy_>7!@IFwtPA!X<g<bx>P-}GBvQ(X|w#IT?YgmN7(~KH6<sA9p04(#T
z)RKL3Dt@2IPZRLYzPjSjp|QL?6#(sEU3QbJ`WtrwWJk}cgS5YC?Z)SZjpya|0v9HB
zus3ENOl2C0Dvnqh#>zwzGEi2wNer2MK0p7wRiC$M6NL9!>->D{b0#hHiS<zs6009j
z-?(vJ_(^khX6CBqldyTdGOuXXG|g4vr)EWTMRfHE1tIf+LyNNR0tsse>MAcadLEL=
zm>Z2Unj`o<xw)r)g(9ZfD}0?am|Ds5|5j7A|MXZ%J`uNW`}KC6;-4EDtr(#T5%EWF
zxCEs*MuE#*nOu>UH=zWsCV?%?sfU4eS#bH18%YmxAwMWW<kA&FyO<aU17BjjhH?!z
z6k?v+Tn<1R?7<7KEt7l^;z=#!cq`?NsvxkU611unMF`y_95d{iZ#?<#Kf$bAiX|qg
zg)8D6cwGkF=(gwTEV(kWall7|8^hu-Qs}A^7{d$_S16tuMFKCY(VDd8MM5TzrcEDD
z$GEhIG3{#9<unVM85ST(x?z3HwK6sNwDjLR=G&eYw{vLa2}tTgS6L+0(&#j!FV3kY
z>mg%39?zYk*lQ?5Ng=!;s&2%{sPNs)OHW<z@JRBiJ~uSf!zi5Tl5yac&HK6d)(wMZ
z`n)s#l4K>P;NL@{bg^kMC>T3b?&>5fV_h^$HK8Y{#7ClXCyYR(l5Y39{h*zxF41I&
zO;*d2ufy)rUUEiuyPk9LfdAXtyX?@KD8fyJNvY0Uh*<-t@0+w}U-lglOE7&Z|JU0n
zNJ3kZvf3oKL>0!I>1p~d!i<pRl%1nGP{!ZBrzzq;$oN5BNJC0zs;HD^<z?Ket}?zb
zqjv4!#Q(b<|Gl|_X~LK_GI@L2*o>D(+bPCMY`Y)C)<vbRG7@K`@AvLvzohcmfg*O%
zIpb%|{n*82LC!z27oTg_qeH9O@srN=qXhx6OVgqhgJJ74Nji*GG91@KaiYfBtQ^R7
zSrb}0S}}wtv6)FXdmq80T*t>+a3|(%T+3yA@&z+6g|adBdP4c^XcJpAU44$TkGqg)
znS`UTrTpTpm#R`o0un%j+bM>FeF^Bm&Et4n3NY|~Sbbr>d8bSr-prQycV>G!-6{>6
zy#i}?x+OZI${>cFFH;#mlug6q3b8y^eu!N<XG@34pR;k_eB##$fKtQuf0&>1Z+YiS
z37%U~ACj$)na`|WWiCWncMqce)h#dhKZ)DHkKRen2z@S2xPNO@!nW=A*S(UoVY=zP
zyjOvfJ*CCsR%==x|JA--nkn%&Sg^&jv+EejTWP|#U%&^G1pD!y9(-W{o`<1Q=)bLm
z)?cusVCaTRl9=tx&O=|ohZ6*e$Vl*W*6GT_@=~Vz5M%wYuc-}(t^w7AHt9c*n0No$
zg>4~*Uiib%c%Ya)%AKJAj$k+oVFnVJOM4d3n0WF8UEyd1_lE-3RoB-}(S+IcC=_Y4
zJVAxw!7fQ8%I+i)Gb6lLMWnp<zJwzYUiR0L;5qM;2wAvyAgNk1F%$27z<DFD)tv^N
zlJ)N}p#^99JsddJw2FI>94SA1)6~q!T_PbI7j6Nb`T<JQrCa9a-TX^r<g8r}&CR>?
zxBoCermY1vMv;ue&&P(in@Q7=TV`Z8_Y!uRyy@_4GA6wORkYdt4dxsiS@eNvQT$u<
zclJZGqVXskgu^z$0D1-i&wqNgD(KTI;E5Z0qtHc!sL>Oj7^L0Z{kJvfr4-G5i^WHC
zJ5*2tMaG!6763z&2kvJGQd1;7xFiWMfXmNBWM0t*<(Db~4-hp|F#Se8Q2-+i>%(`R
z@W(N*m%%!mJTHreKP{*_M>ve>^|*MqWcP&@1vS`N4V?zv%V;w<#Z&W;FH4zP)d)l`
zJ_BLv_Liv0l?x{3h{oeRL@LVO>nYPn1Z+6I=wywF9+%XP1u&DkFrh7&%q{4KH-PDR
z`Do80si<c?4d9WLe>bWJ@5@KKA4$aAHP0~kSY|Vrk4oUuTR9Rr8p~KF&qv2|=*=8)
zD+;I4;474}DxxOGujOWhbojAX#I?@svFz$2cWA)iw~yQ_O;iD%$R`8yZ%8vJbBo+H
zN%1G6ot*}!nttN6w;TJEvwtjt2mc0KvI0GzyG@}uF5WWd*W4#{rKZOpym{@W-O$W{
zFn%ZpmQu(~N8ihp$OEH{o^VNn&{#eJE|W&?IQpWwnU|MeqrLNjnR%`L^@S&QkfpbQ
z-Z8_%=#i0+2-`ub`qsVtW5dtgL~C|BF@ZZ7sdDh3StYZ3+>QIq2ui4Wr=~kYbkuD!
z@GvH%LPExlnx4qnD56UPu7To_FNZUz$0K-DaH#I8*^{amuY)uJY}pSyHc~)}6$l>0
zJaTJZwLPMkSdcx(V9g0;xr7G`GPr^A0gz5dGJkd0zAs06)yY<k>j@85-CosxIjB(F
zUZ9fK4K=1FJezA?re0$-)sY6{<Puqw+rc%jf=SdrwoV7Z-T>!#aK8jFBL5?Patxxl
z|9Y$JKEK9~ag*=8D!>=VCV%dhS0sHN-FA+ifAU~Gi}U!DgU2QZK{R`41-f^eFc)ev
zv&BC=L$^KCO<OzId>>{o5pezeK3h;;&2`RdY*(zl5mk1qJ=%x!<as?%748r0NJCO<
z{=!<#0dGkWw(Pzd)R1F#G90^oE&)BPXk3^yd;{2{k&o>@Z5Tf;SW1#Cj7VJ7!UmaY
z<p%0ySQ!5xBXN+hPNe*Doxqk5`Pk;bSq9RP#imvCqWsd>jSQU1LyvtuHhGZb|M_aS
zLiwpQQVwgeQYg2Q)IiS4>Yu<K&NS@4_x?Hm<T3GwXDUXEv0vwj&K%CR)s^67<=}~s
z7ac%Gw{v46?byv%U7f_j1rRYqZANcy5L&7%zSV%~uSbtH?{8xiHV3%hu<%1n+ruY#
zYV(w14LCI0uX4)f%jgVm=Iq?8MJNcmkSr*KSAQcn3kk;9m$GKItlF3eCagk4-+#FB
zGa##kJ*?dJhf+FY9_C)^TGHOjFMa{<>6|q?3uCfzrg^`)sR$p^LICnP#g|61KBf@*
zAHE*|s9E2@_w$5`6F)xJH3n-JI9{qb-_ginnLF1ZL<q-tRk?m$l!*y{71OuP@Y!<%
z?%mwts&ZY|@`A&jUVuVA`w~OfGaB&(x;*Y&5}uqDBYRArp$z;4YkD5O6a2gwc>PW(
z<pRc8cn@+Ja{Zu9mtCRg;bEexGR|(XHu;J*SEUAdj)BnOhzsD0loAH>w2jzoeYE^b
zZ@>pn;V=UTHDO|#VqMj;wxW`LwCeA_-fwG@*X(GH<Lxi5KU|rSJjG|r$@*f~--7nu
zP7AaM>{m~m_)F^CGUg!GT25$>Qp%pXkIUbKJEUngzju$LPwY!zfsCM)tIN*5^fZ>I
zvg=Z;GKq{Eja7F5Sdli-;z^PHh*r_LY^~L)fC8HwLuwKDcdNPd=P6j#KZUQ2U{8#Q
z9}S;lw)1NAJI}ofxV0=T`-p`dnZ1Uv1BZ}m52{lSi3JSlJ8$_=JvERP<R|!QX7gNZ
z%LR$>0yQ*ve4{mC-VWz$A#@5yCq&j7^OEqhE?21#!LkHj-IhET?}a|(Nr@=?qaI0*
zRcQ~NBizIq@)RC_p13`JIeCWp2~?MMQ9F&aBHM93ZGDv43(X=+?$K{(f<IXT&WE|Y
zApL>@m(OfxRmv03ku*%ur<Pg!v2+>t*9*`QtC%NjlOqtMz%Mmz^|Wp44IDB*!<TSh
z<N*tE&VfHm2=5D=!O1cp-riWOv&z_b-0H1wxo0yPHn#x!H;VLkn+dT`#ntUiGVuu<
zD)6%2c?tFvhS$m5(P|7$8->IWTmBtAG$!+gkeJDNi<M@kchg6A28SkjQOikaruQyJ
zaoE1uEj#xSPIj+>RbmXoPbhNn@YbDs3C3<3$;QahaOXd!t+aH^(|Ym>V2XFrK{ap_
z_X3W<s*Xftm!j36TW*JVcrr`w`Cfkw5E&zGG=+=0;5mi0V6v&&Dr~n@qk)5eR)9|G
z@s?6G6>N-Cy`>uQnLPkb!ggQ_JZVr`Vw$e6O$9#dxu7KswOlY;mre`-wr*IkYVRou
zEp@z~9e`YpuUmTRctxf_X=tly_5N-9*JSiqG)3&6*}suKZXz2dVMO=pDmbwHfLZFq
zePZN+nFD<Rlq(y{bX_tihWu}{GX}FFx2y`L>jH~0@&A^17NM6Xg4Pv3>aCg8^B`FM
z&9fajlBsCb)~AUQf#?EoOaO6yf%H0Wh_#{nPtr{30!8?kMb`F_dDH@rE>r3lAPGFU
z9p;#IVO4{{po|$mD!dXJsHOK7n0@$JVG@Y6>T9Eb>m-Rj9lDUZUl{C>AF3~M=4^v}
zY>6~X-YLAA9q5NiC&~<Z@A`{{*Q^7j>L&ck+tT49v?WqYyDb_hEtz-qjX<}c=d~98
z{rqpchw{n}&q`&V`VAuWga=TLyZr{LZ?)<8RW=TMhsUT<9c?>c^v*nEblFG($bC6M
zd3)Ex%+Y~D5-6Z8Cr#rn;oDDR+D?&=ht$2B`r-fQzlVABer*2)L~$KgG;7wKs)#~@
zwjHi)ZSa%O<^yi)w|9e4)K%wjMpWK${&a;6)YruQO1=|rd9TC3-;-AIntbL&WT1NA
zvr%k%qD!t)Ud!ehUshMZ9t&+WgbcPP7;sYjimvf1;()H%(dD%J7Z;@0=pe*q90Cii
zIZhi}#scXGHuh}zniai+3LDzgio&zSixf9rfdV*ZQmt1wB_-KngTQ>lVR>Ak;xg!z
z`46`1flu9^t|}X{2V0*zU;p$XZpik71^KiP&jm``24nI2TW6p*YV{vYw(o!TEp6bb
z!D5lo*o;ud^kW$Qmm9o|^~l2A9QyRM7bnGIoyb!+69NEjTm(m@19S?mib5*|8A@^y
zx4C8;9RJ4nN~O3LfKx8wDNhxtVUtOTtK&8Mytq*R8kDf%u;Ar5t<k0ehW&#(h<kV-
zWHHKM`gevjT=%o~K3xDR+RB@m@!f-LE?8DB1a=Mu=DB6mE-_~4s4I*zN16zyNF3OT
z=^tR(^LXj2<cjBK4CkmqKbI+LE#4wv!}5sk$P6%P`pNVDVK5b+*p|QW_W+xL>&SF;
zcf}fP*znFTs6oJ%EMxk|(`xW%K<0E@+b`6ZHF!X$5ddt>arVc<iP#~?tLeB}c?_r|
z-T>oS>s~0&VtAANAXs;(>sDSi;?2V$XUwch5p@cz<i*`D++?aMrxCTcF{(|i<IT*D
z*0a_O{U17-OWy#=1k5SNzBf!z{V?@5B6S>$ULV5rFBrWv5d!fY+4$KVZ?x(JblETc
zt)#n}c+CH@xs&kVq^RhDrPsjN{M$Mo*_O#5<B2530{kBjsQ!d*t760<{4=KfANh$h
zl`2klt{y5Bo~q}Yw54}vSik%FO;}9|)n!0fD+*|*(xw@<K#mS`89#M&*W&OCbiuxQ
zBgn4j^-=b?dPtjH+e(?1YatBavHnZcFTXkQ(Hu7WpjC6l>6)NPb~SS62F-JghAaJ^
zcXV(Qv@UZliB{NT?37QRat~~+GZ5slH1Zym#t)uBfvc4z6wn5FgF7gI=FVyuA1Xqz
zp-{}Cn{B1YVfW$>MWHoVnZu}u0A&g!20{dc-JU1`HV#96V_(52T?YYgaFi}<gxeh@
zz}~3Cr40V4cB;w9Xbaw#Fb;8sVDOExU?I6o@&KRtyw?vF@9Ed*9{U5Z7$(2jd~nF{
z9<K538`owyh7<j|+CjwtxEH+`o0^B?WgZleX0pqg`lI2RL46;3v=<++aN~U*qw;!P
z+QMkYpKNy1zji<{TI&l>gg5SFWuDK@cx%%EiDh61e@nQT!Ss{<y${*lwY}P*67<B$
z#M6Yk8{dZ1>Aonh((B@^!pzr}Y>uLvemAIlEmE*dylI4kvo#4Nx=-BP;#`px=OU3Y
zcDx7m;e@83q7J?#@{W1Xp558`h4HcGXSJ7PN&`SenrI<f>!cnE!8DoK(p^41!9y`b
z6#06bNuAZ|1x?Nljh+{jIB4Fl0`1g8N{CVcflw}?E76j^jA88dZ#EGgiRjPz#L!N!
zp%yzI!~7xI`ynRKN%GNyo4f8O>ArPcpbs-Wqt}r&GRRItDc<~-8JH7|-1!b?#z^7Z
z#CaWFB4)&zs<rFhik#a758)K2ejYVhya)Z&s>emf9^Qqp;C*2NPoYs`|Et+i!U?o+
z<NKmnk!(LT+4MZoBOGAt!ZENmVjp<s57SLQFMvuSLuq#b@IMDm60(XjQ@>w__8v9v
z+3rbGj2Z;K@?zs}_v1>K0Sjf_TD13w>DYGXW2I()>s%&{lLqDCY@l+RA+&eVxR1Z3
zyBSgh^{^)^ZDHQ6dfSHqgFxe*j~1yP2H9j5pUs06z)n!Yb468+KI0Dp3)z2HPM~_6
z%>Ihaq$b8ydkqfegECI?t$;Iy;&-LP!pKnO+uVjPgzHgAEu#4r0?p$w9f<rBQvL*x
zhC(8^AWQ;PqiZ!I4DqO4(A|%ao!D$(Zi%KFI6vyEel?w5wY~=ML~&g$+=1}?m+em$
z4jbLuDbo1dTzgIddJ8w2j&FBz2Oy&sW(8t~OCSX1mT((wluHeNcDn&Gj2p<Q3P%`^
zZ<k)r8<8a@`PDEr6^YWo_Y9Gjc?{EG6Xx7!SwEgzClMGGj?STVC?C#mDrT5Va}A{i
z8r@E4nLjLCn*Lbk%he;{tM65D4mCJuIC!t!Za{@$kVQjz*(8+f|LwRL&p+Kd?yU}3
zpX;Cf{&(1l_5$~!KVm;K;Jr&|%b4kJhcNL$r9}bkx#0RQu%Sr%$_!6`EzKl=$c<6+
z=pk-|!am?>eWGW1+4l4~;|@-)%#caVo)(w}b?;9-@+>c|_q?++Hg*W-No#-D9Ul$)
zM48M-$;qy-p;>OZ{%5Ey_8chP<=lXZq6FddIy$FE1<jcyOw^V+kv0pzQyr!yIk3J<
ziycCRmJ>@O!(VEqKN5>I83Lt9oh?ECkXHFstU(91aQEq*h-rZF$dAU%#GT8~-fh@9
zv-Y~s&Xo*RhUpz|32mGGoS>@5Em|wrDNh%egnqGM<s!|YNs)X-oMRV72pu*q&qU5X
z<~vs3bXVleWRUsnyazF63?PNR&svvBnwX@->S~Mk?#g4Oy9|4_X;l*^=}%ZR04!u}
zn}+XAmA}mk*h3oQ|4RVGn8;-NdlxZ{8abD}<?P>wo%eRLVHM1FpWcW&o;hve)HL0I
z$>WYZoo79fTe&zIR@2AGQ~(j%v9n|E;{!T^DEzzYE>4iutVbW=oiH$td~_KbFW5GK
z!`4A+nf-pM+oc$-N1QLwfyd<XE>)`H7Hf9M#?C^WGn#_C(fIQnv4AT{nO}d39)@nB
zZsni(r~jnPhd?{ZyH=RO?i^^Z5WfI~CtU3&qjfj4#qVVZYes>$d_WQALVx>JD_a7k
zvi}TeGg_;*KwY*!8|~CG(9^n?BO(fr0;c*bA_1X>W&unsT~{C1)H_yD-r|u~{ByKg
zPIaq@ZO;C^*}lM+m|I6~vbmrZUlREJS%3*7<vp6;i>W<YqYX$=QULqH_~1(l?fA(s
zJzAi%al7V7&lG1p`%|NyKJ;)$-QS_*D>==dfU7@xYR1bic<_;1Vx}AOeHu!UsI2^|
zky=Odaaumz!HJEbhAAB#i$X%w$>om%pvjxs42?*MjzqP+3zMQjtE3Y1+24Ou$fhRq
z+4TweNPTNI&-QOXStm*74j?&F*eKOS)<>)gU@<-QX)<I%7;lxwpNvrnkQD+}4Ka%o
z-3>sLkL&m&kYPj0Unqd$cB5?O_x=x(j}{w^bW3V(^c5dKB$2MI<j-LuH03skl7g#3
zXAHIkYHCc4tzGwuN;^DJAmI!a;Ba)5E-Nucq28|9E-t-&#rMIZfCq-_Vtd$RHx^~)
z(p*(aZg!M`R?{9F$|=y%p_+~LONNzEo|IF-&7q2C(wB}JV5yF;#I&OLC`*>13T-2d
zC5?~hA?GF4=IR||WC~=;lE$$*4yERy{>Dm_+`nGI5!JVmgh6A|EGTrvy;XBr1y6lX
zWv%hO3vPXClrynyq$%NW)Ch!2qDH`?)Ci6%az;R@)VOuy;t2Sa8iADjvJ8SrjR2VT
zk0X7l5fsxc<Dg*5Cl3tZ?Bk_89N#{Lai@lVCSGvC(o-W4qgf$x*VXV#TDl7&PK_Y=
zE-Q6`(JAY3t_nX=(<JB69OrM*hf+^xSH_M2@@%+sD7yv}Zq|k(hr*b*!vt^Mvuk!=
zio@&t+=n6kEnPvK0Cn@@xN!|IZ4RXf_XlC2u0rks&f4FAI3RyXZ&O^z)EYAjnYgcI
zP~o6DUTHp+UZd-8AwVR%<zOvfup<qPy1v`B8G@c5nSDqNNj+{GmH$@XWD|5_GxqA~
z;C2APoPk)-EEKcIObQ7n&{t}9HpU2D=(qHBLwu##Ix#ad=nHTuzO%%ZZnhc6o9y?$
z@xjaSPhr6>&@S^y2EY@MjFZgFDyu;KNMD=L1rVfx{U(;fa-s6kneUS1;Rl+xl&7k~
z=qUi#r)6^Kh40PD2=e<u!o)s75V;_8ffe2onZWn7-wXrWA#>CM9+l(VfJftE8x(z8
zciT4nBvF`Iexua!gXITG0DW<pN>1ei@2r)g-y8B$`wFHmu3-wX)lmNLj=`cCD;q#R
z`waqnx5in>=;jt}I_L6hN5zCsqdDPoYV?3Qv!UYr%Y}zv6V&QfvHp1!+}LDc=!>_3
zLQDmyhH8B(TvcC!HzGY2P1>rsVln6;Zs0w#El@UX!&969v-q3q&=ykKCkn_AX#J?J
z7V`|xmD`Y}_oHfO(L^VV`=vV?DmVRc`|jhJ_s>Yd_Z-0e13KDE>=M7+6AqwRm>4Eo
z@JSUisyf)S>*?7p!9Zz>4b_*$zyy*eNd^Ut9)kmU{P3VC6P|!M=k4oUhKL3$bS6Tm
z+E*!1MN0?C=^k3+a%a1j`3HHL!DAw!!14q_BT<<kEf)cKtWRUAz89qV;vL6DMImq-
ztO9$%s^+5_RE1n$brpNesS7EHuimU0NhI#rKkR|cthhKdmFF>3>+yraa464g0J?B1
zF~$!UOhl|2fNx|8$zJgPefM3=UlCoT{ZjIw+RR)_LPT;!;?66%=+Lg3hD2UOF795l
zD1o-tBa#HByXi{gW_)Whp_eR2x018)^Y)X-T5+ON(^u^e5)glfB>9e!g!&ANa*-<H
zQVLtRs2)4f&cE3AmFM$L1|UfU=I+YUaQmV>Pcf<(F=kTL%czw00Ih+@w5h_#D_;!c
zO<yvi(UPMuWsQm#_%_TOvmCNtV7bhwR21CV=moeGN4VJ?MRMP?JG$~voyp$ygx_!e
zsYdu3KL!}v;cgK509F*((a4Rur(5#PS6maV%}f4>S3zse)h}pB+UdrmbD&1zP$mUs
z>!NXMo{I%aVuDLzie0(Pd3S>*p(7}vm++Suj=(8Z7h|6Ps6op@xeumJ2CD>0wZT8-
z1Fux_^gf+cK#nW5gquB(Q)5lLRGd+yZ|t61{1qVwQ-TRIb1-FcGaQo!EeYkAm>*DO
zVo&lz$sSNLUE-u`O8X!T{h)PHo=Jn2f(DsJKP*ld5oAJZPHR3=6L$Ww^D0@Jil&px
z0$yJeH_+rwJW~8fuA4kg9WVOREMwshh)y`BPR_|gEir-8lC}0umH&qOzTLmCC1iYS
zW(Y!gVtafbJNKs6lfEbKaH;?0-p#+V682-Aq)+fH-sBRN`%~ZPT=$)zbvI9Pc$)9<
zt)S3Lcu*bdeWCJT^qxVS>18h*T1f9fH;F<o0V9Zl-RsBO@^-iIUS0a|)kAlYSkz+f
zX7h`p!7wBfJ~GAt8rl7U1~ZgsolKoK!&K<cJ@q<HiLGRSFBR2oazu+rKXsxkrsXsO
z&Offc{4Hqj29-y4{sFK&-GlNj3fEt6$oTn2cNh2gdw8gEB39W)(<f~MC^g}-7dnv9
znw*F0u~CBkI$5k2zkTM6b-ifsBKgpaz5Lgt{kY`znW6u;lf4V%L$ht844}MQad;uv
zuGoTH`N?VhD3i|m;TEBaB=U_-$Q#=mBse#aM5QG?%@>*enK?(a1L`j`$=s*-V%dA2
z7L46j310LFrrbK|1R%52fx<a_k3t&F9<qt2ljxqIkX}MD<tGWh?u)>LsVGG>M%Y_|
zVP%d05pX=9&g4P7ong&|6(DJ*<yFEbAT%q^vQ+0p{~NNGkcZ5hJk$1zBUX0BR_DHY
zzLmmyGOx#k;I6n1;s}ss;1Tl@egb3&L^0oP7eML0=BC85gpF0{PvFB<P%qNij>O=8
zoUbujcsCw^yCb=VNR}Yn=4AphxTja>7JvXfXxzP1H~>c8sYi9!3<E>6i`S22e^lZd
z?zvA3xT^evoQ3?vPtOTq-6Z&Aq4<i=1y;8hQlQ!NBV=^;iZ#W6_Gw|INV=~k*Oa;?
z0xL}Ui8)=#%>oxuGASONw?{U9uRjX*>w}yaG8g6V=pfm5lgZ>(3yad+0rv+6!95oD
zTR#J9tG9%{)o9#cg1X8~6|l=mGqeHLuEd0OU;%uf$1o;qs8$Sw7zBmn4cg)i)<ebe
zZ|Q4M;}-|r##2!+?9BuKE>)Pqt2x!Ou=N+fu5ATAkoo1+l6U}^REd$6ur-{c2pmC*
zFFH{~OZ6b4)Cf-z(^x=|CV(>J;~+lYG&PwEFywN9&AZfq=MX>qNG&=f;MVL_j|g)(
zA~BExi>6~BY#rXx6I1XSbQy$otpYE~P9ti;{@AXdJyQD%GZR#B<j94z{>n|^0oYK6
zXne(*@yp2dv_4KA7-!*v``NZI!N_EkBdUf2-0BQqjH7Gv_}a4CO94suz1&{$8q_@A
zQxbUHIsvqGSn^L|L|!$C8x(*ozM2vq-Ikd2AM*+$O}FZ$|Ho!x&#Bk|I2|QWaX^2!
zx;~yC0c8DWmp*SZ;Le*#TL^2HN5z-c3ZzyLt^=I$aZp+|@Fj|FSr{?Y{eADf^GoNW
z<+5dDdc&8)NA+qA@v~tc{hMVYU#fb()*~|RmdA41d?1R-P~A)5{x2EURc*9>&I4cW
z1+oe$je)9=C?DgGL}e~ms8dzcWSLgn7H^|1ZxVD^f4OS^{PpGPmKx4C=eK`8s9Wb6
zIl3#&MPKk(Ka05>_79uStQZu1J8|UK5cFcOBqk@*XJ1kKtRE#mF_`)|U-si(sG;jO
z%XrxzbF-ZmPgCCN|J$^>?05ojN&^c`BR^az*NgV9rBBNv6G782mx*I=O%3U@qiwb?
z6ajy27oW#QHRR<P@;Mo2+ian}MYst}{(C<g-$Uocvf`keg-IX!@0A_1y>hyIH`vE~
z_%}Op{uaB1$jpgvH@k1->D9@kg{MdVxj273_whjZ$98eTOgvNnYm7osjX28+@_QmV
zS;4a$$PET=H=(HKU5Bf0EQ2=tO77P+{K(Pj{&#~h`!haWVDF&IcY!lc7C&7~&pXQ_
zl^=frrO;7bb>P2YRjPxC9DXiP+5_d)SGBfE0PcXKY1aG~pAsRhRnR)=m6RH|s+e6M
z97<;WH!H}Uhr^Z|eu2)fkJl&L7Agaw$5YrA#Hh$7><23%=|o$#)iz=D(;6x!!1MuC
zt$*LO$KOOD4j55Y1qpE#mVd<DDayn6fh?P<D9M1!A<Y7c<(KPHaSYV)+RpC^@kx|t
z_6!QYozU(6#xkevE$W!{g>TGgwjYSS2PH2tXd=^288`dmL>7=2UkIJ9ZezM>_@}EA
zbFGDD6Lm?5-kS}?QIz3tfxdB1P~Sq_1X>O3G39OaJM;;b#`?C=ot=@H>%QSf40=0J
z>s#AH{j2`3R1XSUXF&6`VEq*9mp~6op;P=I3UyT}xVm}bG+z<J1sKf1{1vKa>6x<s
z?!B>t&{&b%M|=;xeWhZYS*}Ht(%|$3i?EpB`wQu!itU6KE;Yzh(F^k;{&z`${eeB8
zZ6O?OjVdgORdj5RXN#a_T`XA`v2=nX6VHA{B-||rRvY%;0jOBSE=Wp*MG&zEYa)|~
zjXobWNglsktP08heJ_H-J`GVKA!--?dOuVIlE#K_x{WIShz;K@3i^l%8tW5#QcmQl
zaN(tb#{Q?r+?0N!^W(PJATqBMJLl*E?iJxno~KaT=(hyuwu(NG8ju}hLlM3Llxa?#
z-l+Ja+NqfKtL^T=U+2S>yoOo7)@k#WsG<0ON4i4~B}EF~B<WM2XQR?degcK&sub45
z^tBa_QEL0107VF&Zwf_ci*EF;YEF2FN%%jtePRpd@mVym7@9s(VUnQt2{II6MXwX&
z5oZ02-c#Fx2mW*<oTwBEGE>GXf}qD~@xHSR0tN3wDQX^gKB(|dB5{Ra*M|L{4i$eG
zdl2LKmLh$28DdPb(1@>sLuWY%|5(q~`$EcpWbB8B$Y%4gfc%%}e_~Z&0sk|>zi(CH
zN#pzYF|R6Q8Du>H@{FM>h|XH%kJhRC&xJS0T@b!c@t=*%Brp4YpOWX~%^CP>AWy|$
z#^~3&AYVnH(Vz_lhvM+7B774SQDD=Uc63*w^66Sm-O|-_R$)$n(SJ}IM&cy-UVw)x
z6qN*<iYKUe_u15PAAb#e#9I{%v9f3F+Bt>)Si7pZ;lTyGMY#9-Ck(1n*#FB*dU&d!
z<kfCl_!Wq{9aL12s9{PG6!An&)Xkc^51?0Ld*{Dcp}2J;SK)*|KcPie0XSweV|QE5
zC&k=E?dq=(Z*Zm<O7CXR;#!F28~-{1CGpKmh`~ElY2u%cI^Zc}B~9X6e#4T2pg<q~
z<Z>c^j&bL&?bz1+{x?kt9KZYJ!7N^U^wXs>#%-N1f3xGBdd6vE0I?4<I~Z}Jj#$Cy
zkr&8rQeodX%gkZ6H7K_R>v+GOM-=!!q`^>!3Spnom+SY&nONc_hhJpDrG$DtLcce`
z#E>ot?+@B}sZCvK!w`$^ZzP0ue_*4~z4+*zsp)svixfgw&r3y>?xPRCc+y~pNL!fy
zs?Vd*lX_j8)c3zuVH8NoPwgRx7c=UBVz&)EqU#rvws^6YfjT{$_jqD@yadzL-%*z@
zL}2j)wLM<EG9+9xHG%AiJ8E=F<1yfc13b>r5^=ODZPT^*i>^#mL@L<~$l)&6)165i
zv3tlDgk%}HvP|kYX^|Oe1pd^v!xSJo|9Pp)s!%2hSAnc}88U`PP9cPS$*XD%z|9Yc
z$=ce*Ak9KvA=I$z3fs0nB<qur>8@X_W(-hjvZIG8x}qK$)1Xja=^`i=j+u6HANoi}
z)nT$u+@Yu)xd~u_w!tcDH2{&^AFQO-0MK3u$U5L<(u!Zs_cHJOl|2ohnNNo;Pbz$2
z)!eRkxj-WmCjip?;FYU;Dr8%K$DZ5zFdG12QZU~Na_R4P=YF>mXA#QI|KoHoOR{UZ
zc;F)OKjw|M76G)4@m(w4LzJAqoW{`dJ9an0_e`}<?l{TVI1T`?m8=)(_Qoc<h07ER
zPA4&mz?kJSh2Mh5T}T8piAuyES4@6x;3)KOr)8%KAOe<U$MPg6m7wuI+_5{^{3|z^
z2f&6p3$wYkB%Y<B0M3@!xI{B%TrQS$)8`bk2tYd==Oj=_g}zFw4HE26?RiuDQX`)G
z=J+1%TQ+Lj3nl47UM(`$X}uNiymEX;GjoH9)Oa-xB;n&^rPaCXVm-O367JK=+^^Mq
z9mzi0tLIy)W1;sGr!Z9mrmrrDwn}QcAjNe-Q?pal{Ejx<DFBA7Y2tmnmGqQ7hUANS
z+-E^;K_dR7|0L0FEoiPZ+$GJlNwCmbu)BD0(i3^;q*6@R)@F~IHYNF);JdVWq{nvy
zrx`~T0gMs=?sZ;mjV=mdWMQ~se?^S#iOr;BIN>RAVO|>)8X!VLWR$gWvVzg}^a2Zd
za4-I~*nkchD=<#`c^u8!b9w3hMM2qTP1-IjZ7{%ntw7<&=Y_Owl9>NtbwDG;f^WBH
ze+1fqNSATp{_ujV-IUqdi-F_~8ab%``Is}u9Q8hf?(+KD{6bfeF8Q0|x0@#n@ad0G
z2~km*$Sksup9hN@w8nfXBBgAY48pVWYFoQMky&5+)t$o3s92$dW-egGHB4Rj#EPPW
z_NK9i?K6uk>>b+R8Xi*2^izA2%F4kZ*Dj;6Zr%98nBwZ(-cdj;Po~}95_xmg*vp8a
zZ7(7Qn^0TUxWNrHJIUw5A)V%Mg}WErCwI2*phXkS|G@}T!%9BfO1G0-Htov?z$s7z
z5b}lM7Z9fmwX#>OU*aXqPbb7>4OV7m4z=nm$cbtrI-lQRo2L2+Tf~W=D@QkBlN?8f
zOw+^D%=8#XZ|5XOaUBeh=CZU{0668<$)4IJC%JwKJyYvvqS5p9bJ5D!jCJ?P^8emM
zz_$qeCm%mR(7y=YL&z^ceS%M)A^vM5{F20X@%goPYxm_n0En_@i95+5xAJCLv=&3<
z&!Pob=m~6Bqs%6{nsLA~p$vMj_*G<;bxFDC-FV3JKYdwb<uIGleT?x0fLM^~VFA)2
zv9S?)RxPdAU~$c&G2j2aqV)7{i^rz=pV7JXqluUR*-~`0ZHQq2W@^f7dwwlkSsInG
zt`NuIE26tq%{c#aF#~YQ7H~XQf!bnuEDHL#V<_Sdc+&$=+|^LjN4Ag+B|Hm--3rA#
zv_&Ae_y$4w9uzDdL+<%Lku>|h?`FDqJMj#?ooI&NPAK(nCy|=B6He9JiDkSeP?XCe
zQdP`<luKDqAeBdXl;u#0caBgnDF?9$`Dk}`ln$_j(owl?7s}=5q4V0$0<e@1&6Hkc
zXA-L(VU5%?TqsZ3b9^$~biy-9k`_9f@gnIbNE%1wy;0vzyx!k54~|0XXlbK!nCpgX
zz4{wcMUn*|GKE4gP`UqH#p6eVY<`FBm%|PT`qM(z2gv@U=cL2&KQiXdL**&Z@bUW-
z0FWY3o=}k0NLjq|X{u&Qs|E9H^&HA>p%D{izPD8Xg%eAcaMwtqGn}<pZt<%%zWMRj
z5=Y5MC$p{+rrNN37*25s+pk#PCpV_1YjkBH7z4?yXW{6syAM3@$dk|Bddb2oZ}HwL
zG<z)vPRj+GFB<-seBpJx>74fQ?MeWaI!D)1NUwaXz{8tVC+s5t@I!oF_#xG{90I6b
zafX2e71=3HQ9&?3^sE7lR_~;8bH<)VVkMGOH(Y-E!}a>dpTUj~!p?b`TVfC@`OeXc
zm-YyEd=w;#ty6^m<Fp~%^V>_DZ(QWVH2e*!V<JJg4w<saLF(=~JRFV`-CiHvLYprB
z4<OP3OrHZmo2jy!=b$O-C~(X!Y5dZk1BpET8ooKGNE$zD{jTrVAEO@D??OfXe%ca^
z_mlBZQ<#!}Kn0>_Lht;8X4Cj9FflK+wVHoes?4+iKn&{)jamt?$viPm{(MR#f}LA}
zpi23L!^Z5)X<t=_ee&{7M>nuogtP$k3J5?Q*-fO_)BJ>dctM`c!+z5U;8ZdIaJCHs
zkN_seW?lp|BX{TDzP#1<cWZQ1CBPsLJ*C9PA|wRy&NOD{#+i@r@%}f+_EG+ggG~MD
zNd{zU(Ka2DhpIk}Wb=3`DdMFpGV--*va_X6$@ct6yXQqE5)yy@M1+UZ=I&)6FMVB(
z6-ODwkM4OI?n@4No;?rPpEQ`#&uYue_|cygB!#x*=RkWC+x+VYwrT*i`vN5K1C~PT
z&#+s-{Z|5DDtUnb`tt3^FB;rK>k@cDl++qiGs?8XZ;$ATKt5q*H$)eS&vytE*I;lH
zCO7QHwkJ7H=Q4zb1iKAcS3@6dH1(xaC;#p&bh9k~XPiA_ETje4H~FP!;X`6o+wJ>V
zSphd;n(O~INbb&dr`szq(^8n-!a3QQb}mOPsCirQZEufkhI)-(6=z*rLv1)Q<h$5-
zEx3SMa3Qq}6m{lESyH|;JY=A1oi!`0sM~5Y@&*d*S@!?IXbKFr@m^>jh1JulKDjMH
zp*?NqJ2=XGj6a1XW3vsGfQpw1u=O@BP$o2lGcA_R+F?HBen2CH-+z2N5q<z$Y&F=4
z=b9fi)BO4uMgD(vmu2PcKMIyrSkUNO`B+S&{YIJ{u-ta|>gqLax>@N+ydJ!Vg6i$z
zg}I(yVnVyqDOYouPA$rc;LfSKU}5)wugWE!S1bC8>Lp@lh?blrdAga%C@kUIjre_(
zwvP#;7ZSIhyx-~z6p;%EhL$xUt}ZRU#6{wNeE(JLVf&iQl6f(68O?0gCa;i6o+b0$
zE<2y&tFkKJt1^ezO@!K1t%1$eGEm+rY&Jor4iw=C*`Cb_C2<k83{tI61u#`bD2SD>
zvMMlC9!ynKST$@YQ8!z_vI6$}a#C?aws=UWws!l^9AyV>6!ibD{gQC5dTZ5zR%tHY
z5+0^tI;Cm`X3I1u({8D_Rtk~|XJ<|s*i7rDCRUbFjFvD62JDp*9$lJ{V7A{b7-DYW
zsFstWzhpis2&a-X!wNG)?L;pR@!!hm&E0GN2QbIo!Adqep6^nHW#{&54hR{mxxM&R
zBmyx3!~+I_lGHq$*fU^C^x`ZY=AR%yvac)!g=C{{x1X=@fOB;wSzT0iCq|JiT9dhY
zamZoI9F?Sv`TXQ2tuU{<Bj-*fP1F+QwB4?Apf}48i>ml~DONC@1(-?gqO4@vxqQZ6
zDY(pky~<xmq_WCANjy1hm2fjoDyXF};fvEuTRJ(euXY6x*hA#n)2le4rS?DlxfA^E
zC`?!(9Zm{L{8SE_(91gAZ)e%CtFcpapkKdak2@?Zlb!v2>nUsL>AvbB!*KE^yUnY1
z(@L6}pu7&ZdlD9gAdi!V^V$odPmlvc3CRw&oq&xQYgVo;1i-B;=}mI&YK}GDt~c_x
zKJ00-XE;hJ!4wiYiZzWP8jAa0&{3#Y&UmeW<DB#b<K#Uq_yiCe4oYJd*09AjQ=zdi
zKK6oKltLWDaD%H+AX*8<x+4EKHCR3>v;`TAy#sipP17(s@y6yx8=ISrxiL1jZ6_NW
z8*Q9yY}@9>wr$%!vv}V3`Tqa<&N+3>)ZJaxtgh~^u4|@my3rbvr}aJ0iYfVohIohh
zMW(oea6?4Wz@cgJ)m$H{!j7R5X`MT<rn5_UG|)4iVyS%w47ItirBw6sJrFD>noJ}O
zR-`QEoILK2?F)5K!Y>tHh49m3ZC)ON!kEUN4zPXFFQ=^^jA^-B<y%u6j%xP3il<J6
z;DUd)<Cyrt2h0&_8L6@i_smoruUsB~BD|OOy<#j%Lri|A{$9jRxv@Bgx#$QAuyL1i
z0<G6$yt=xUi<-PB(?;&odtAOdb~FI|q<wP1{Nna`ZP@Nv7WBfqq--fk8AXHw%HS*W
zCC3U{{`)I~pd@4XnQ)(M?eL!neJM{Lxj-{jW{!l^-l^XgbW3C_$@kX_pf$5(DN3l2
zHG@nt2e^+g+TIG>eUUK8yy};y%y=(=8h_9W(o`>BU_XX@z&%VH(>iG}f;&FrqpJ$|
z1mop_;Ef$l<6c-KjBdoev&(>M$sgn)ONE3J0%b3-+}Q4c`c8AjpM7+lp~*deQWxfh
zx5h?yzj2cYX%JH;xbDCcOFN`TWn<TADSlgYvy>^9HG3&RySd6$Jl&z4^NRJL!M1nE
zGJ$n&&c+O%0VK$?_c^FjoCOh9<iQX48v|QN_jQz~263M@6Wg8W)@nI$sFahT(;#_h
zq8Wi6TSzU1$*UHA5Gk#&iiF8mJ<eUg3G6i|nANlBRBm;QQWVpIM6yS?TQnto_w5Li
z!$Aq_^$P82l)g?=cJdvVuKnDy?cv9<15PrNM~&34_n!;ozEqgEpl<KFZ)K>T5xL8{
z3L&v%iziGOpdXVh^l)!FCbgedJ&e5n*aFZU)g_kPp`qm}yXq7H{pKxA;&FhKsOf>s
zEAnB{_R(-H>#E{m$~_`5oo_nUh}-AYMfpt&h38B5o`BvB<tovGaT&F@3PW4j%rMbB
z21ZItYV#vo^jq($Hy-=r=uf0O8b}-7-CeEr-iBsPaK7H973<zx4=sIp5d4LO&1;&}
zrHITiZQM~sX??_8@!)v&w-_m$q`dglG>Pt$1Hir?(P{ib+u2J`9w=ASm$_iN=Ej_m
z;}GF^p7E(<wXfoWIdVKz3^AosaD>Zsjj)I<nbv0PuOIDV&CL%}dDo%IJ7R*3<nmpV
zl_KJzW|P}T<WkqD*l`d7Jkg6N6})ILEKxW$jM+5JjT)Q1AV;n?^n`}|^TyhVEI_kr
zI~tc04}@&2%Y&bMp62<s@G*#T77Z7_cA8wekB#?X1l`UUXYc<^>fZ;Yp?oIW!Gm`C
zk>|=ZMbkHiP*v5G5s|J|Nb;2MiFv9skocgA;Zl1E9#Uu-T<7vF#XQxsHS0zXltB|<
z#003WRgYDa;_WTkE(nNgf$cd_uX1zopDk~Op3XD--e<rbGcj-A3uh;ksz&fh6X5{Q
zUX2M)*+E_o`tWG4u!^7wk#Bp0*~EBl6(`7&sbA@foGrcj&oL}&9)u*%OjcpiPh%wW
zj-r4)o1+L;I&Q-6{4DxB^$zS8_Lp}G@8EPzuL|jFD+k@uZq0D#4dBI!S=`%bKU+5M
zvXsCLuB8&p0qF8~@i60bk5}~PD}4rsrSn7+tYp3;Et_R?8{5(=hKOj`m1qFp-O{<b
zB=g<@V_vI7$J*Z0ov{SfmLAFInx;hTNpHKi8nL?RDw*q16x22rj%n~yr0^B!Sij<`
z%TP?}ac-m*zO3MI@!mkn&1H|dI!D+9HM)WVt>lDx^ZZv~$0Fs=p8!Guw6i$#X0%<p
zYzXxYv1)A%_ib#<%kX!80=5a^TT1dJXYMAHu9gY}rpNg_zGdv7-Q;7zTMdx9MfVGx
zr((<d_M{hfMjS8W8s8W?aTJFwy3PETv1VSVlF>gupx-#7OZjDX<*=Nvu&nvnc1s*n
zDF8s;Mz%$a7SA=|3x(mnhpHVupM*II-`}MKEj^(>7u7RALl-h!f9Go(jcNfk?yCe}
zqDe<hdOB8q{_M%NXJB8OJi>lGnaZ>YDv`oGHhXT6Wkl>vB_^f1q*oQu+RIH(xSqHd
z9)TiXNgMC+Q&@O7bf*$ldZ3X>$vb>UB{}g&3@U5R5k@1^&!9q^F6HwlX(;Yj@mI-+
zc>P=S*I?Xrw`v!x)Msl6Fll1tO;Oiut2FjRB_b`fi|ZiA9`|q2kF+r_tUiqJUroC=
z)371sE=om|-j5@d!y1BJL-5)UfcWnhE;$(%Gg5WqJfkN(O9S$po5q5d>a+{5FvdON
z&;k4a+ZXUz0NVw9D%V`|OH>x@bWCXI#+UF!tJ^L?0Or*Xgm2Yg-_IVK4$?c?Q;Yd;
z$i2U<?&)K^Zg=R8ypj{H*NZqOpeoHBt+l=_iG{z3o)F-Oys<v5En8?j-;3UKLM?c%
zq&5}wj-L4}cc#m?<Gk8^Zo3%zd{a1bb=3^UdcyBzoz}3Q{5A8zZyZ<o;wm~#%Kr{=
z%u{<IwOz~I!}6j{G2$WS>4){f6W`0X_FkM>0*-3$vd@eqnj;-;YG*f3Zv!qWXwBEI
zz~4|$>_sand+kJ_9HyM~+#cRxKD;Q*8-EBdKn%I<ImYH0jjuK<eZo6OTv6N^Te4s}
zzCABWG+YGrbBfMQ+4MPzEa5A%y8k>`x<PgVN^_G`HyTQ9xO;LpV3kJP-8{Wm7PM&T
z*YY6~qxfVn!+X+^JhiHNmy-#wX|JBWw(>Bpwq2`GWF2Gh$Wsq;GEjyKQ5DsL)X3xZ
zkz~2`qTMnB5Sh!rmA+kTf(L^(KPE!-T{0SX;XXeZ*1%$XrNQfB#8Jql-pn9XaMy)-
z(KtNkhYM+%qrweHDLn4BYxlVW7z_?=L$nxo^3yQz!ltzlP8VFLP>&`6_&XIlq58G$
z6#_UF>DNTvR5(aNS3At3C8$HhW+mpa)s~5>rzEfFfiJcv@afb?2j`?1wr>U65(daK
zs&pnTQ3u+*94sa%UflNsnHtMzFD<7|Cm#$VFtt<O;L|JJ<~irQR`b=a1GCjz2Jqn$
z_mo9Ax~)$Z@1LWG-;}HgJgQ|mUsTle+EZs+Ch3!L<%?lIPLCN=%800p@P0S+RHIt5
zY#LjsUYV(y`?xf`Wb4AKvUMi`ac$vpq_uLK=w(r<qTESpEyIMlvAb7`d3WHk#bne1
zA)NBV)J4q$Z^0=aHNrjMQ-x(t5V#zU)e(K<)WfL5w>OE_Nu$*59x;@Gm9J1EyH<s6
zeQL)q`m?8sfI<7qdzPvie8s0IcJ)V9_p^_;5OTIl#pbkAmK}wBW&Zsibp4M9{L_YC
zmKM3bo!(yc($Sw-Gw;DQ;C-xdWmu5aH_r^mxEm=L0SS$$>v?T{R-tSH?d@qT)T7nr
z;>Zd`h%si{kshgcw$GPbD#J8h4#@BMz<hEK<_<ONiRzn5r(O90JLf0Ha)`VK6Q_=J
zn{#sE_0K7)37eJY_J+7}$9gp*Jkm4rS&g+7cG#oxatjfAy;S5Awe}>hYST@<k$R~H
zs~=+5&u7C+ParWOF~w%VpbBwn%F0YEPYO+5wU1jP@>{)MqQBaob?8=iEiIiYO`V)A
zy^Q9~r3%Fs7s-qeb@eVBI^P|v9=_-^;llQaMbULtnt+GIil&f|!676;+h<dB>5aoJ
zg^lMg8EoJ&0U82oZs!`S)E1YF4ccIJ+ph$hUz9&WDjM+R!}7~WaVMAIFuY`o55ls{
z@#W-87$O9qoiBfU@oE*f-bj295Wdb;e@Iz83Q1+j58ZpM@FFPeal+SlA~0GD60<+k
zw!Gx!dUSOYy%(2s!sZH)yS&RjOw?J_2<q}Y;PMDPC~G*yYsdAf_Z0t*ei_X}fE=|g
zkv^W`a{X@T2WMk;7+hz!H2+P^J(G!8a#J>B-|bl5yL>+OFEB%i8eD=$@TG^o)dPT7
zGT0LmN~8%sj&=GEeJE~f$|nUSOA=~U(ZR<8QMV%gWrlNQv1NQE5nRQ=U%!^OfbskY
z4<bWcVl*v2Ob!2Z!V2?aRMuXPf^&<Ky40}x3)2C5=mY%7RZG@;R@@aaTzI44RLvRx
zS_UlYI0xBn$0SZ2>{IUdi(U(7D_Sh}0|uM&gA!aPuR<rG?e*A>)tnt1#fF-3n$jcm
z8;efGAwMY61K##X<c5NUuBPf%KDu6qi#_yYT$d9Zy-KBg6XNF-#=L5gtzPPwV(~n9
zJL`gZU+}y`_=-!qh|X=iH9iZ%X&rPP!?}^<X-M6)(%JIH({Fqf<Izl&R0IXW_=CO8
z;wS2P^z*B+1QSo)9SjyMW~bpS)Vdo5s>`f>&c~6*9}><mQjupfeqT<G+pk$Vc!O9!
z;)^C+JL&esW+fRt{NQf7OROr7Y-BCH`yg6&fuT?n+T3|WhWA#n7N9M((%HJNLw~K(
z{#=<eDm1^FE^*KLaHSM9=MNfp+0S!ajqpUW;<+DGb`wP@rR#DxupK+Va(~r@2WlZO
z`#wH80Mx_fxc1$Uge3YQk^^s>YMNvRyd1kqqm|e|UCn5YFO{0F>9P-lyD!=u<q(&0
z)ETvB#dcveMDIQ^^^!D4s&Fa3YpxKTKbwPffe6NTLvf#Yb89>6CLLegL?xXegHm<%
z8zM}QkxWeE^qeI`P2N!Uv#-*+2v_kK0l6eUNasEyxCP&SOQhf-qn=U=Rr>N(dPd#1
z`@0b}!t2P<n0~k2IS8Hw<#Un^`b4=HHE0E2Zc-Lxb^y(fl<NY}(&n76)UF%_=s%)s
zHr3WCTqkihqZ>s9c9bHD@dZNZBJ8NUgB6gig*oPp{4J4BP4>_<4n7Oe`SbHT<3LKF
zpXbY9jIWiN1QIEYQLmo@|F5;KF8ypuO{@GvvQ9DpG)WHsvVZs7xba))648y6ohZnW
zh3>!t=VG<&Q8p9I_Jl}nCTNsms~}-i8NManPdUcN3;Izv(yXRs6dnhR9)mrdCG$#J
z1q2Jl%{sc>L*yT8&80>}syW~0Dx382^1}(an#m^R%<yOp65S`K@ssOoPq^8dVc^bK
z1S|1v7{?k?u#Pw~TSvS-qDR$oudAy=e$IW}%L+eWH=AjcV?7@f$N*OnO@A~I_J$eO
zM9-5_e9O=hOjhA-YcCL%rw_3j{*G%A<9LjM@U*fqeRj|!3&5C?q$nvJT04@{wf6Is
zQDLSR%C6s)d;{JN1p9C(5Tx8baKFu+grDw+?wQ!zx<?%Dynw*1Mjx6TK&Y`JB)=LP
zkJ|Otzi5niE7tTf?qiku0&@T{K$>F%Mxb~IFHZ7)#KmmM{sPYhcdfXFk9uvxE0)e|
zN35=(qi7@Q`{A+q_uLwjI5DdxK1&x#o~Mw9-Qycc_9t5Ww4du{bfD2YO_&V^9AGq-
z30(Jgim&wB>fI31;``Vf^J(y`gD3f+NqEow!j~C}Da(Zrx>%Uz$SIq?ogF??%u%C*
zgsE-()A=pE%OtVsBKfr9o$#t;Jf!&aWXZgyohhQ_!Mxry^igHFygr8cIyP0Dr1@s;
ziVXW0OGm|y94|TdaAdtfoB<P=rh4>DcyxHV1W;X`SDnZZ<cef!B<n~nca&osP#Pp5
zG<uQzMBdv^wyPBL@@fWaNb6z-cZCs$q^gPeb1?h^M6NeEPq1&>jkKmEPKSCORCOzN
zm^V$$<;Qk@(uwGd#SY^cS88Co-@Vkg3Mqu$`qj1Ht~{rSlfBvv9HNQW3Befj-yt}S
z9g=}{@H6Rr5s5?>-I<jkO0!DWmpHXV4=7d+hl01t(a5OkthKD%#36#&ztS00Vt#*@
z!yDCoFhF>Lh~p<pdLq`Vm@ATnD{mzU*JiCOwBr~g4xXNS$r-kvkM!(UrY>3a5*#g+
z>yl(wpZ^dA?|UBZ6ZcV5dCXoJe<4hWO1}DiF@r=T=E6bFUFT*{wLz3i{}h|}&=8En
zk&Z^8#f0Y82UQ;hRV=P(wL`i~wS+mavrVB$_1ad5<M8jU<%meoqI?MhH^iHjlftxq
z>oXUy{AJ3YXI1^Gjpb5(b!NM!d#ArBk~(7zb=7Hz&<DSIT?UpPQ8?NL>Y?v3L%8!K
z#0qI06zryE+fL8WkJE~CEyZA=;Qi>H241bptA)+mveA_JS#)F0G@Ofs054@8DD~?o
zG;YqLx&B}}Y(B|r%4Wxo;i#cyYg<}I@(rE_kb}<o4-&zTKJoTEL9tB)^d3KATJ%d@
z)BQf=h)a%KRmYAZ;6#Zr3FVgZ7v+<0vd_91aibqmsuRC2XDGq6;@-G?zBq-k!UBPQ
zC;Dku*c&vh7IUT2?VY<!AN|khx`bm9{8|i0b~yMnF*ydNeWlR|n#hG<w8qcrFBPf~
zO?C_*kvL^FqMCh=4UH)fmoV-NTqGl#G;m}U*9Pzlz<=k8b9n<aR&jL?s!?FTKj0uJ
zo4xC9QCXrIKa_umQ*wxTXjnVJbAu%Jc=2Mb_}!Jg`&NM!ve|cn0oyI+3%*H3QS;0Y
zq&@-dfX&5{?tRb+<r#w3h|0&}br;#`?k>M9lSq3mrSZ+{n=}QPfMzb2cP;*f8G<r$
z5!2BF@Q7i_opy$DR%E(Vh!VIidv)cGy=L>J8HtU4p+yBSDuLIa(}894xnC|6>;ji{
zLa{tZRVj6ilBCM~gc@xIE1ADG=Bv~=Ge#Z9<v{Wemy~m-7>v)PPq8W5dbDiEq_FFI
z`zOK_O@BB?a{j4+5U*Z!91Jd~T{XVq!l17plZ)W<tphdhvce=PS4wT}1FfUH3EdQ;
z&ku&UZ#!pEH4ujb#OfIxMYkH<7%S4eJ?62R-`Rc?hzJi6B)DCNxVv5yTBK1ErXFiw
zRuogpAm=9e{dn0w(wr<mBwgM<cAll&#T_2)Iz%F45Bm@!;uwyc8pGApC5s#RL2L}i
zm8AZNT}$JWUxWbg6|QJInTlE(+LUKMrKVE3ZX@6}EYfSKo2XG*>{#}u7U2DDHp5o4
zyf{cW12&llYC)Y{KNS&`a+dAfL97x$wdJ-J)x0wvO~ZmqS09UsAOrKbCD-dh+)I2d
znA}4x1x%k&Dxi_4zszl{AFr=r(kiDAk=BSiRdAEEDd+gLBao%VRS$CnbaB3`e3Q-d
z%G)R{%od>MImjI4`0O)_-|c3nb)2ex-%2$5$R&l;!CQ~|IJ@R`hM-;h{rHWIYv2dS
z{b2cb#G04)6WY%eoOOne^L_vtKx0&}*Vutw=kA(U_uC`9X2RuzYmH~RyYV_kZ!r}P
zgjsVVZ!H7fh}@UH&Ck&`5=1D^8r%q^fLyRJ%F#$_GOSU!t9aemQN<AkkZ^YSvrZv4
zx!E&XMjgucS9g*;j8EW<;NIHe*k>%eweeVitZ%VA^r0qJNmxBtf{!5?4+xS394!Xn
zq#mMLWX@dfC0?lRf*4kMbAIo#2*u<{9;)esH{>vNc$!VRO=#GQ{H1V=2Q)}xHZv5@
za-f>zn5cE%<>C-3;nH1HuR9ofQrLQ@50Be^talUIm*}QSi<w;E{w^>m7Pb_ghU!oq
ziA?l)9i$LGR_87FcH}&3b85~zTYzb;-~#K*b-uxQUl6*nK=M8#lnomytX)lcf(?lq
zhhF{#2(;e%54|nOsDYOsAE!4`$i`JT`Bf|zE5AUgffLI!6}h6~V>8YrSmAV&$W1n0
zQ}s>5Ut|~&)x`=vo?aOc(~@&z_D@O~-I2pSnd+xgu$1;5HKThJ<vewp>)M_|yczd4
z{-l9>iq|Ge0Li^OTP-d(kICMK{Wwo~kxemvf-fts=oRhWz2d?e6n|vyZvCY`i4-7t
z-A$ahubK}>S*dC)hW6=Ea6F4}c-y0r4_rO9K2XFx2mC^bl9Z&CcJ^q;h*-ZtI5rRb
zfE9#5XG6q$ot3aYkpT)5G#ZyVBtd?$x|oxyk5sk*1Ecd(t4!<)-cYcp+8Nh#Ud||{
zk~il8ZPA-3MqICU_~}?%Hk^p1hb*ozDP>$d?xNEZKTG+y+pa}*xP)HFLH44O&s|<Z
zZ@u0x&cu~+_?&nCEhzX*o#Gp2M4|czEhH&uQ|VTr+iiu*0wI#Q8-2*iNY5ly&%9=Z
zZkT8KG0H;AT@*c4bKr$0Xp+olCK-IVRC;)(sze$llkS8UYHTEI9THg(=|rk1G;<uO
z8@W2kTd5~x8c~tc*}j)aE?=WxQjJo@k1<D^zJ#F&_jHrI8y%EH8BWL~))VSh?R=P#
zK2`){MlSpGf$T}4Y=4<SG&3lH_C5vKR}Dt!MkOH!body6?1|u(I_2E0N;(Y)iAQjh
zQ&fj1nCK8q2E-w%h3T1Fmz;99S+gLkQJ~@5!?tJu0I9nZc3m=&cP{y-Cu})lQ?WAT
z#GiR_zcojVrx{33arnStMV);>EvxaWQbc-S*?i`H7Ks|2zBFFy4U#Jr^TUJj{N(Py
ze*X^oF%UPsTxd5tT@oX+@r?6oC2scn=RqM7`L-gub!Tszh4a>KD=8gKhRJXqV$BK6
z8Ca<_F6ORoTPKC;HtVmE&+|-3o%0SumbJoXC$(#`S{P<-7moVni*tPBu1pO>ODLKK
zvNo$`hRx2g;j9IMvN5WCsq0>?%yor<c9O6|Olj}li+nR(3(WSU-G=q>j<P;-+)uB5
zBj^%g1y!r~kSzeiBO_=myO%9-=})(KChdnshb`)koPKdMF!*Se*v-t?Ocp#i?g{@W
zK%vjVgeI@^upglK+0iR=XJB{nL^OaFx>+J84-~ahY{k8J%z3Pz=Y^tFO@>=p=hXt;
z+yQOtRML?q&DK+K=KQ5G<|=F=8U#=lH@3L4P^52p=gvAec_-~xd}Hv|o%<&FdZ)lh
zzsT}2LWL_@{fIAsXd}sVWk&Ok_8{CEXI2ifeW$Kx8J^S$Z7*+gEH9r~Pw7dd>4i`S
z$4xhC#iy=xfLJrkqHr4#{F&7uX41*Hg3zi9MRS_QLFmJH#3MRh@pEo@JoO@L4jtpm
z3tO#g2pqpwa3FGN{duB-ch=>zQFvaUD0MeY;2w*x1(wsSTm<|Q%%Tlyg!L&E_T^W9
zeF8k?X_BcJe{^Jy=R$#!nxM%t+X_$!UPt(Q^v8IY0Ug2}M*2SeaDsY?NK-FnI&W~f
zBI?BhKX+5YJ;)G<g@SZp%Xau{?(B<V65hi=>z&Gv;Me?}9mZ`vOF|!_Fz?Mg96DXR
zi4$R*rO+nkQ4=uV*{9q%KjGLk2ocUr2DO=oDrAvISUcM@&5J$Lb>cn4kHRxY^``hH
zM<b;wH27!7PDpKrfr_Bwim<th!JrEibgjY5K?(4UWp{JDJ`0|fpE9<bZ>gjrjwV*5
zUu6F5EROxMeQIZQE}od5E1!Hwd<5feASxVbL^y7yQg4>%IA~oF3r&h#XOjhM%qT9S
zfjuE6?H!eKD<VsgN3F$iI0AET3%c9kI~Em0&U)SBED`t~hJ>~IzU3>rRgbf?Hlpi}
z=5gQ1k;odQY*99-B`Hn0VQ1%(7bV0qn;+Fr1z{K(F7i;5yr48{<m72OOuQ{}e`2~Q
z6fuRM8yXQS!3ZTf`tHd+t*QK_Or6X<d4XUwu~8%PS}OdC`g~EwbjF+}fzKXgS7NFv
zGP<;}Vzt=<hP)aIh8bjwX2yG}y`s=$pZB>7*=(dS(_QEynW8S@^&ZAx?@lDI^dB00
zG0L%QA%=$6{CoHK#di+)EPB-Q;IJ3PN3MdU!(CYpx~n{OO^q+*zZ5zJr3TWYn?~op
zpf6EIqX!eIqgL^?m)^zC_)d5yw+wgF7#Xf)Ry^gf#;`$#<h~`9vL+eoMTMcO47yKb
zM2F!rQbqdPr4}Bumqk<NR1fOYu|$ubqpoL4J4jL%fBqbxGXUac<+{)?A}+3^M4(Ua
z<WetjY^)MJnXs94%Ugb+f|HpgRo!0iMU?rXN@K|d72{y57@n5NoEBzj^zt2}Ub;%g
z8hwE91l>V=e3Hj4DOb5=TN%77dr;%Ybm}n!Y4z%1&vwBo&0?{Bp9)s)$>vCFpyR2Y
z-l`h!F0&)e>`TuD?*^1$_h6TrH>=pPD(wP$%CTcHF_OJM28JxR5VAnchJkSO(K5{t
z@k75)c6CqS;MerZTap;>judhMo!)>(eJqP{z)BB76G@^cnuDz+1zH*zbmt+zrKxU~
z;%yU(m*@CvACjJ(`ZWB~(|C@y3z<kP%QV`GEj*#wU`HXM<rHc;&9E7k&WF^m{YbE=
zqwJp*fZCd>rP0fcCqN80X1)*DT6rfG;O3l!u%q$Q-@K^u3Xf`O@?rH}l0Y|$++Mq(
zDGOzm?JURHe=x5*oVat(&L)~@GOI!09m!8`5)4RlLz{dY5iSk#N$?4V-5{jQa@Qh$
z%A<bKtsz8&@<=2F=y-)<fof7&%5Nqy{2ujZI;2;4v!3Mp#r=I70pbH>SyBBw-KHlV
zxiNg<p!}zGft`0)lIlVLo8}5?BHv<KtgHyp{!whBF5e%tmiMZcS}3-&o-W?vdOvYc
zi5J?tdK9$Qdum6%YrQwki>qXwD^PElXpy)@@@hVqk?msra&swr4R4;Md4Vpp;x_$!
zB4-eH&Syj?_#{YTP(5~eoN0+gNqS4-Sx&0CMU{rWSi$<RZFkK-fr#k(U1Ng&g9EYP
zo$xFqeU=0nm<Wl?=x*$QoQ%P>(ApDqNPVb5cT8^NqEZe7TQvq(3JM7Gqt*wAh7+v*
ziZ_Gcw<j`}4i6ui?h=3#KjhAJ10a_Xmd^A<ycuYQ&_F9%4z!!q@o%Fg$YRu~gT-rY
zc$Jg0Nboh@qu;mLt;rKwh4wXdGS>9y$(xgQZt9^KCk-3qLs5&$hkPW$(|+q<AWfn+
zFvz5c*3(U>;8!RKfX<&nICfzejSvdGl*9c=$oM&s>=hLHj(JmPU2fJ26PD#RsA$L`
zgulD1x>Jfm)oAEZ^9iqpPh`#9sigiQ$?6E5nn=_^wwBCyD(%{bz@7AM5l21JZQD-3
zeq%fdd3Ryv*>y~9tU#?{JWnX9rx8QMk!{9$VJmWSIT#YXPK)`>+MQ*BLsw*Q@l(fK
zRjmN#6bkj6P|xms%QrP?T53fX*pr#?sMFaTCpU{V=N5erS1Y-nIZjEI29;8%sWUIf
z*{<0v=0BLZs|K~zO0Yi|QZQJF<3grn&aBtdoWD7C&|y2zesy_Y<_bV8)4dZj)mT{(
zGUDcGQ8Fe8t~7tUMUQz5T=>M$7mqSRGH+&-D3w&ojs>WvV0gnw7z2@sz&jywn<=x5
zL~&d~WDgeZ(T_hnfK`mo`Q~toB5g9^+q&7lOzfVWJhg9Bq7O|1ogiNaI{kh?Go!md
z1oWQN+YRI0C&bbyXXCpR7yehu%$NH_ePkyp!p>%G%~e-juB?11JabH)7x_&Gtg~mz
zzM*&G+bRlBwej+=dJ;ZwZ!h9%=WkDLZpK5BN+UE7F^1H(PnH>^p=jF{igWn4ZzWC^
zF`q!$lA*rIpW7g$Jy?c`Rc3{0ykCYYXK7qV2-Rd-`k7~aKjeFwns!K*v1pdgsdu|c
z2piH(^DWyrhU*(f7_EvR{S0F95}dAfHbFUC#LYL+8tR`l8MHzg(8#+O38Dby_cvjy
zemrz!Xt8kio82L#Y9owa!*K2UbPW<FGtfwKVxqi+54iZ6LEdjR`Z88xI1jP6wKj5+
zkf)q}vB-zWJXdn5U6$C(6*`l1Kjkk?-KiullMJ2DYK8tXFHmy!LoaG|V(<2wS;=@R
zi~O^aY3JbAiQ{8<gkS~zL{pU3Rj$n)?N6<(E`Dm|`wrnFSTi6~^*K|IC0Pcb-Ewu9
z=1#mDj+YyhE<QWzqdx-1`~nBCuUqUrBu)-NUU}oTO|s|~Nzx#P%llGY%o3e^c8GPV
znwE}6_ERvX3z{8xWjy<kNio3NpiA%kF;!NBgDus-Rhj_J#_JuItpuPLhdrmHU#~Af
zE0)PlT0g3_?jV!(a=lO0Nj-!!I5|jlO0hn|2{#r0<a%2$yYMU;9(lAs#r6OfmhV57
za^n!*b1^=gqBf}-NyUA=qrJ=AAM~73aBv+ymsm|IWA(FH@lxi?6W*?bS79Hw>)T1b
z7dnKARAq6V0fi9_yP3jZ;(Q8Xdt*7Qqd>7KZc?A5yEJhPXZ4BCwSOYTLn5ubU&9Cb
z9aF;xt5q0Yk+9^j&qh=8pL-c<yr8zFFJ)6G-9+OT)b(hlr`A`qhZ!@roWe}?hMzXV
zCMP)KWqnUJ<i<Ppa?viH%OlG#^U|K!gWU`rNH?Vi5~W4(sjvCsy}W1Q7w|NtmwFZ6
zog;2KX`l$d2$4!%%LtcYN#>;ywAb|Juk`n}u}>M~`nts1ZMAp3XfVhcH)Xo~h%w45
zB<<0GMUWsHF`{)LW(@gZauKc7X4&=nRAl9KRQL0RoB8qhQD0d0_=hAr;uj6i<)KkK
z>GdkT362}61P4kM9-foPE}p4_Je4n{a&I^8YxdL$EMzzFQ7Y!~&n;T|Cn5>%&!m}6
zgDujwI$OQd_4+Gnkd<wgD~Efpn38fO?~^`)<r`?Jc#X2TL?t|8;k#!R5)qV56+Sd#
z**4Xg#vHqGflzhfQOuqT$&V~KM%T)nX`L<69&-#QMBgkvfAv@~QR#7L%_zcX5Ba!c
zM0RF2D9pa`3HQBxU{Lw)CnrBFxk)Hm+DbUyxa>#FJ|~QQ1w!G0+ZBxUgc!<KFOBHn
zSRG>M9LXZoi#ZbX=m7^xq7JXO7}@pY=FBQRQ)I|7lm<Pu8eO$!tXg4QyQO(4rQN&a
zwRWZWax9+%$LIiTP(+E(nm<ci4`!q7#Lx?|xC%#$1)aT|ABSedQgN$;D89*sIL8vt
zGD>Vam8JsJf=&8SbnO}NnS{ckkdfW5@48oo*{7dL7^A@H+|CW0<y7gax-3q<4&~B7
zKy??Vw1JF%3r#HDCBhNp@}uUU7HdI)r@En6dajCI%mjV?;lkeWl`*hQA?0(UltaCV
z_VJ0}vVMhh!`NXI(gjL3<OmlQs+ID~?HBlp;5ei2X9Eh#k9LVL%97E>_VMJD=KM!^
zx9W^HKey<R&JXqi4tC}j`MM2b858-F6{6mAnQfuf+u{W8!-o&<X&19?4D*?X%&a5h
zDmp;kJt<Zu4v^~=U10w}EgLJsf=3=Q3++&9VmW`vPf)692z5->ete*qTq>&TD@yT|
zaPs(??$SZZyXeQk6b6Q5i$TX~4%I|)*jRT(PKUcMo*zcqfJT(JF6Wt_pA(6Z9?N(e
z!vz+0x9&L}*63|Zr&HF!+|i}jl?}}t0Cp}dz|FGnujT#vRe&jS&E+wEt_NMGzN`lo
ztGp7>P%3pPN9~R2&52}qzXR4E(0<GF4FbvBS@)w(%DZ8%ryib$v<7d24u)h;ge_lt
zi`~<<bFJfD&$j3->U)T=v8*^JZ^k|Xgft_+wL#lkW56yS+NJ|BLm7MmJBqD4R0k%&
z_7<rP<R@}44udSZA8&qu>K1Yov<tlmxmichyMXOc*$^Ctwv>E{Cr>LdaAa6F@GOk4
zcu}E00H~Xor_PUC48U|4nqZfGx7}Rch~DkSWkjl-is43Rp$WYQwH*!II$s>l#DZjW
z4(a&2-!9(rue3>;yKd<5wC%6yh1-QHO&APz`{MD|Fj?EEsWCn^!JI!qOFEQps&z8%
zZLV74c-WFS7AkIJlJ>ifeI<WyKsP_Saq+35PN9Q1ocxIHdyutPUKAtFxF~k4Jwty!
z&S_0e$4`LDJs=cP?YkdH^SAJwARSCaQ<`0iO{8Ah-IQiVGF5gaPf1J9g;UXatpu%{
zO09(lVOmCeuA87!XEOr=>F>i^g|fCp)C)fqR`bCnYkQ0P)M05V@5<PT<cRZb@#M8s
z2HeIzW!V~3+%btr@Alw-|9s&*<a(u3z<cB@=}B*Kmh@7U4kE##^8up6DlrwZqssK7
z7BY*4IWE}!Tht~sQMk}>?6OPdO6KdzE>x>b7Iv7ebpIePM>znrqlKz_gqNL5=Pmzj
zn=o3Lt_r(#@a`Lx64x+#x-|H{SiXf1eP92+|2Y}@UdveW{awqIKuMnOgH^c(SEb%d
zL}l*|z!M@Z!w=V8O{FPE_u2;YOzCGZ)10LV<ouA*wXTEv+1Cgt$711?o;W3Z&<_-W
z>hELcbQz$dd&-RKeHvBVG(${cCNk{~Ccz-UzIo$9t{g2e1AYUVo)k8xe@roaCt2Xu
ztmeR_DwZl!@-LQ6NrPRILSJ3J1MVcxcP%zbyaF6vvyX>lVOm3i6?#JxgTXf#i$<j@
zN*P4{6f+9&u70yASUn6a6xP^A@Ef6fV_3yxVfCT~8g~Ot)o^mYj2={2by>!Zvpo~@
zmGK*&!5C>}6_2iugw3l~!y7)QMm!z5&mK?T?4Hjc1e8mV+=rCpJtWl~K`{vUQ*H@R
zS(aRV$ZLsfjdl6Peaf);LzsJYPtjIb;3~!+&9rKl3o8lbO5HXh@y^7!6b6z%3dN8*
zsl+9xX^xOAXlK~t<#L^v4?JU{HHjuC6=6harm*SUl3FH1VCx*5C>YKg>BiH@MNPNq
zV~@DbRu@3r=>tWc1ct4cD77W_l5HdRDmY4A0<t$lX7qBXP?PCG_!4)STK257iKF+b
z36mdESO(UY$XQaQ`j^!Tm<-6!F6(w(=@p+|9oyXjP(is9o@J&>#p<tax|N;`30+G~
zD<3^}%I>gULD<syGMgB39>C{nG<m&|i6pTx<xKTc5gB(%k69Qv{hz!o(l-W%`%_dI
z^>aM#$q%*z>u_1qAQ~Q^UrG5;JB1988O5sP?D~~PONb;QB)&t<u{UE_Ad0^zvbR&Y
zX=o2cCpjsnI?jTYpkff@ml(cRh`}-{tWA+3<)hW<^o4-Mpi!y#C$KVf$ODXnhW?jU
zqAPW|-fZUhp62UJ_J-#Swdhs@bffUdW^c8N*mMy%%t%EGp?G*a=2JFQL|Tipp>4zM
zJM^zz$3s&C4wc<s2tWvlVxbFb3@!S0Zk?M25uC^Qzug?#cgtp7VQH6`5jA1O49xAH
z3EjtW>uys#%v=6+$#ujdiWW7zv|2bdF`<f8TijZn_1!L5AJqj_`GCSh6nkO5aD<f?
z8IQMjDqU9>SN>$#kIBqjJ#R49B>Z`vftGWW8;}I|OOe-K?WnZt@A}uWqe;YopTS>5
zfRasnpY8rl?h;L?kTd~$rYKPyeESLLHpSlluPUNPgJgQk4a@Zt1k}E!xK$h){K*_0
z`@4*2lAg0h_r*{MA_3L=nGa&o4)NdsZ?}TKiAbP-*D*n0xbI$}w;Hwutzt{$^Um;D
z?Uo~uGRLs5@f$w~fDfRN?cVLC?w$_{09s1=0KmK0U-_s%DH#fxKNh?bLMgNWzLxTH
zI0r7PB!F6Q5)*mwzV_G=PF{2<+&-c!X;@Nlco>KT1<{zd-4?YmgWef#+<^-~0RY}X
zK)_|_g9g|Dn}@cRPAzM;2lr)q^Q@B7%_a-Ot8?|ZGg$5UWoZ~crJ!eROzC!Akk-=&
zbSpG@aClPQNN;es${{v!2SwIs`wBUVtqSs_W-lyb+~nio5p*mi&UfMLiT(2YFM0dG
zOAbuGYip~NtosX~dgsX$mPYhk-qZtsk;i^_!gS$2fR>|XURpcb1pfB?kOXUXmTxu{
zX0G2zMYzT^j3Q=8Luo!8Uoe%iFo)B(%NHV`U%}S0A;kPJcSDb%%uo8rI&cz8^~wA_
z*RI~e9uENs2?k3<i5A%Yr*l;Qe8`mSU{U<|QZa5Y@+eA$#e}4x#oi4RTS-ru4{@Jn
zUHD)acjVLw>}6e7@5tqMk=ul{>cW*vxip{FCSGNqVWY++o@Ec-6u9$o-b!a9rd3N;
z!EjcUu~-@lZ<X*2@MZJo48OX`4Rsw=x(?t>@7*MS8hW3>k9$eK(8pM^g?!{uidxB?
zWj=Yp-iv$J{V<vv&Vr0@Yeb4QKzb*>pk-=g$dwbR`PTJFrJ(B_@vLN&ng~%$EIGL)
zD+q-?65U7BoGPv;Z24w1(;BE_(Ihs@OTP_#QB&})ROqfXt6Ig4$wrEWtSupf&3I#O
z1b)3-a^<w<!l$R9JsYQ;t5chFH*xjrx7}K-<9>acO+P2b_Bdbbr@H1%Kn#KL9%<5B
z9IZ`<i$Gk@<0YZ*vPu1^^8VR~@ssA2z51HqD!jS+>+pPL1iCr|v>oA+l7&0D9%^5F
zvO+xuF)Yj{M4I^X`|l28P_qVJp2oDPD^Kh<rSE?$Hy?ilUc<Ur$7Lh^3ALJ6>2)%5
z=Y{da6*R7fJX$>M?1i+zbHV1v7QNx+!El5dEn(%2q%WOSE#HyjM9u<kQ<Hzd_jeYJ
z@aWvhwC;7@h=&_haUHLd^Y!Z$a=nXlZ*04_({9e&)=+2Za<l4|@=5M&V|SJvC<!k{
zQB;_!a_PA@0J9?GxCTVHp!<zXOrYaA&A@qr`g38h36N@+BWY`fejf`SftxJ$fJMSf
z4%{})P@aJota=16=yZ6SGEYYp<KikbC4%0l(r{oJjTXIiVinZrAFw;f*ehbu$r9vO
z@nqu9(bFcLc6+3}I4vQVgxBAqJf1vFled$$%vTc}xbRWUrbbYx%7U>0q2Z@#4BX6C
z%uhUnm`#LU@V4_sl6DiHu!BollE=OUE6xv)Bvr;?_y}#mG>ReCo+)dfg91+BfX(i2
zu;8FRd<{0-E2=kM<)jKwIK@O5vaALL_&*F~DY>J|NanSpxrm)bNl=2nefuW3+4yJ_
zhta<-A7=&2bGO^pQzI9$_M@u61<G(rbVxRlc_hr9$)GKJULTwNN+WP5<fTts7F1R&
zuSis{;EQvK9Q#kn)8yO_)iX+84C%Nf@YmAk22(sNOoEAz_J_5&7YbO315ved47p?_
zGRS(T;OM~ed&i7104nR)%h)#%8a{mM;%irRr9X*RKT)?Ve^uhr9wiG%<8M6%sdoI5
zY(;Os;%u#uY;>yA6WHupV~x$IzDIIC>qVQ15U7i#l>cRA>>ahDic<iGgyw@%XBFAv
zPaaIaBz8MIs_&!Y)049ktPCHSJ~7tTRMnZ9AX;S!yjyZwA4g8(Baw}bRm?jKNwpR8
zP*;Ejbc4ymbZ9^7DbS9}Uyz<we^{~0h{KH7ryWcNc%H*2d;}G83&IksQnKsM!)2a|
zTgAz|o<A<7>Kv6q9fW>wdqJ0}?=ckQ;gpGu!=oE&^zOHA0}&zhuaFuj>^nd=`d{KW
zs2aNVQZr^@86q=4zmbG_KS@WUo+qnVH@RaNj`@#CWi$)`{`Fm0N>l#GYI}Ai0UJmT
znK@{~udcV#O0(ba?2Wi&LIIcPnRDXoTAfT1az^|2ZsyF?i=`jN_!qU`sfqE<s{8~1
zOsnQb7y@dJ*`7$Aa`OM|J1cUE{{uYE?p+|k0QYTlB&MyO_yj4a4b#=Tl`rhAp}nX}
z-vp2{!?cIA`hFMFuAQ=ftpMDZ1J-JDhIZ^4HRzOE7JM$*7bC}AXN3Q~`*~;=%f0`V
z@(e2ZPr$m~`_k4@)TGrcdywCsNo#19QSt+=TS^*ynXESwE;%2-DMjNyO-t2mWTum1
z5n7hZbDsam%eW-oh@oa4mHhpQvnT#B)wt}k!OqEjuip~gad4Jnh<=y#a>&?Zc!{m&
z<i?kCQ!wEhw4p}Lay_k#y1#?23c|TB#Xv~WL7?dZLL7CHF1sfzr&_2eleegBJx=6e
zL<r<JawIVW7{1&IY)OpdYL{;c5QLKhz_&nzNmON-HR-C=ZH2JSHa0^?XJN;0fe8Ln
zTxsuo@*69ux2I3LohB+Q+-p-F70GvBo9G7U^4ZG5?+e8BNX)D#r6h&Oreg{5f!=f_
zS^Vr>m};c`U(e^zTOU{GlCU$Bd&(A0tT|a(uP{Hg%Kj2UtCnJ%Pf<}(Id=V8t1dud
zmI|XDO=8x}sn;*SiTMMAI#P@Pi5cPiIw6b?$YLDnexrBCCj4D(zRbK9xnY$p@ytYs
z`#qA<hgWa_UeVW*GmaoBraQ}Vp0%Tx@@8H0p>)fy-<K0Vc+Y@}mz6jQu+~YQt)@#j
zpAH=FF?8GsA)N}tXk-7?VF1iO0SLZXU@)WF0iyr}U<RN7Mr6Em`(Vp3myf<4Oqa8@
z&mCQ~t&88aA&830121VY!wJo8U13QrwngP_ytLCdB|Ffi=nVpCGK#uMvpVZ}f_Z^s
zm=APVwt`F6N7dyLMXlQ2-92fDga%}cpGl?tyivR)DQ}v=NT^r4UA--89L`m_(+)8&
z;bf&x;$>FLu*hJluwGR;b2~9xIF7zDI&`a_sA82nrL>%w+I5_9WeZGRt-32-;pD^s
z=LHeK2)!cYv#KF|LT~DGk6SIT6{wHD`d($(=(J`zrs_UbSMT?<N;VSteb)#CBKZkT
zqG2`lj(S<TRB;9lLuVN`ExbteqbMAPHtW`wv3)1=?aC?HQd4RFnE-}lkgB*4`wg)Q
zwi2UK1q!ts4FmOuc%{zhc$}!)FkJ}AOrd>>J;e^udO>VX=fm)9WiNl&$I`H#-N#pl
z(8EsT93*T+u-lb4QfKh3?`VehO(G1l3D9c~i3(_FxSeLm!WB4<mEC9xHsDjnT;$!f
zJ<+w@{GH7@c|KcN3A8Dn_29wZ;|gxzLx?aeF!)0MeAoN_)Lc6F)EC*g79*2GnEDa|
zLZpI-g3Y(^w?dG)c$J-%t-4`#Mz2yZGUM;QK8NeX&9B7*b>j3GXU>o4_?2Pw+xb&W
z@jBdVT=0~h>d0)wTJvHuL3{en%eg8QVDZ&$t(s(@_d#4_7x)rE0x-Ka<1nF=d(tZD
zgJ+CxF7z?P&v5-!wP7U&-B7a6*`I?KqL?sNSNmjrpp{`&Ilnk6-@Y<FHgs?N7(yM}
zD0WGzbcovR1)OfK`LfCGHo=bo+!jK3!tlK;<s8kc=u5BSxWENu;Oak7ly~W%kc4WE
z-S4vyt?*GL;=POZ4bp8azPVGKOZ#QBUrPUDS^tVflUQ~;V`jV0KSLQxVBrY*Gp#0B
z{W8>_s^3zTW2Ak8WNt^^QqIC@+1DU{nZ)h*MDADdn58UtYC}(c3SD<8WIzku9;oq1
zpu_wm3{V}oe`iHS76t$o2|_?loFY0ZuFFlE3bOK1`}X(|=XZiZwR#lfE<3Qlseupg
zEJ8gMtAe7OSUIs=l3&w(hDmoZOx0eC$AaU($^H}a{(FA-(~m!x^xu&`;lg<le%1b=
zBo{@9Ifu=Ux1jm_%))f#lsfB9=Rb-@AXSYT>%mM+T3lhL)&pDvHb4*nUy!(@BXbBN
z3qMK8#!|?k3Ca40C*Z+yQ@CvPA+~{_3TK!Q1x1lCZyTu>bgIFYiVD3GEX*?-e_ylP
zO(Etl8(_gX*>-(=_x$trx#}?g>A?8&Ov3mhBc)TjjwJxFU##xy+ph4pBj^9wDF4&5
z-vJnJ0Z_n9X+bjT8!n`iJrvOpM4sJxXsP#&()_LG$?pG54d~#|QaMg+zMn+-jPW>F
zEnNEX)R=6Uf3n7Suz`Jywm|!2%}ccuG3(fxmOQssOSAp-h&R_RcExEFGrr!71Vh!}
z@A;J><8%^NNbvnp$F~GK-~ptuPJk!&)9iz<h9xYrnDP>l&o|N2av4ML^EI&f&Q~cD
zzppPorE#vpLAGK_3L`ZZedv`X_U%NXAx0|UP)N{OB-BND@AGDE+je=O%G>$w;wk@W
zx&fey9gqP60JuaV{-%BW!!a5Er6a(I$*=hMJsz!>&%YGqPon={_;O=!83tIv{|2kh
z2>%-k0O-gb`+v#WarM9F{J%IIIN0TiN|O$C9F;n?+2m5j+BCGGG(n1{Q=Z+6w`Ch{
zx5cNO(1%P7<KO$pC!!)C8k|sF*Wg+|pZz%^{Eq^8i_`v`ih;7>1PbZ5(*XpOkLq8k
zI+T#m5sQk<%}kGmhsYJIPlt64jcr5W+)37YZ-6K4UqI;d=lLt_jr0rudGMJ&0sws8
z#&`c^|7ONUgUAqWidr#FLLI~Yru?s{BR>XU)XW+|te3=s53!ZR6<AdXLnJaYoAt%E
zwEAkO*Sep6ccictc4Lhs2xv}(#y{0f)RGl+R^YBf$VQ{r)<acu5|h&`Wugc%)AZfx
ze1C_=LcII4QId|*KgT3+#~BbsDE`L=xf-n}JN)gR_|qJ+|F(*x4$tAgu|Fa2?lP+X
zb66uE0muK@&Hu@uqyA6mpC`Koh{gZeaY6_b)S*91+V5n+!5sfpRqubs3CLpjSEc`I
zV#mLPobXRYz$fZ|!x)3r+pAoWPag8Ft}W?(i#bBH;QIBmKSwT%E((^qcF&#N$vHPU
zwSyB#g3pX@FGuP=@^Ec-MO=Y_gAE|U-Q6GJrO!w)Xk2~ssvICoHnay1ZxC-Q`*p4(
z=P`Ew+7RyJOnjxix_^~>;+0t0sdTwmDxhJy^MS?xoncFS=`YXCEt@5P91PG=#{2H^
z_5<Tt#|3x^Tj%G0S*)vxguk2ocLko@4Jno7k$8`?O3cd4Ol|m&(S0{y+5h$joWR#0
z>MfV*etkR+fy!s&u6{|0ggp4udZ|{9CksBeH6bxEj%k6331|~HKfAGUJh&nQ06L(+
zC36)F`h!1`z`MU_+7D=ep#$k0%D-Dt0JIW|idYi<?h!6tM*oH12}J*HgUc)b0G`or
z1`sj-2Z;anM*MGTK*_ISVF&?$sy;Umk;_P@(|O>ydc&F{A^!tW5&Xb1{>~==;Jn-3
zWqkdOZtpF8|Dyz~pnuiERdogeuwY<o=YJiDbmW0+4HX>V*M_F#q9L1T6YJ$(4{a=Q
zL`CEj`fpzsJ)a~bFvDK}&V3;KZDI6ZLB9V4@s|zsXZ-~ltMuy>y86DO(6@aclTa)=
z2UyiFCQUem`^=g?kOCxZv#9><rp`aL{9%xY{nLMoKclrI^IMrSehGuh`%itp^cYCx
zBl-^rV@LML@RYy<x0_mI;K__>;Yf+V?6)$tf&izCGa4|Dwl8qtit&Dx@y~`n@LMC6
z>Q1O-fd06@U?cyJe36lX_d@>zf9eMC{Z6&LmLy*ws9SRNLr$DBH&#wuDibB3a#Z`b
z&rHpnJ3t(*m%|JD&!KP_jY<~l=-CkHPW#3Go6&xheJ{m+^l!#hx3ku}RX5%M@r-<i
z*@vOu^0a`7qX=_+HA@Boc>fYWQN{1E_WnBn$-im8%ooL%zly%5A^$519P9a;J|2q1
zdaORwicN*jz@wr0!f!Wb1ZpGL>FFu(VldqcCQ5?VPb4+}ky-EMFGpv@)Dm!~^giqO
z<&FFU9sewPe1C`SACKz7Ujb(N*8)m_-2<*!9UkfSr@$+Yo_KzB@8QNUJtoR-y&M!d
z^Z4RSgbxbX6}3P*;N((F<2a&7DS#K*`Gt*tW947?``$xg3*?vS!}J<$b{KNAF8<%V
zZ*kc+S)Xtf!+!=Z+GzY{i2Y{d|7O_y#^=BByWiNEN@PRO@?7axhV^3H0My#f-{pPI
zutWPY9jNm=bLOBdo9ufIVgNuv@dg#Bjo!Zp$+K*2>@xNohfUV)71(6s*ScRVDry@S
z1u8HB8VF#%&Jrm9-;(!&h3tIO%B=+<H`~cC%dTbm2<%U#<>04v!P3}flzV~J@;`7!
z4gvuG0g46mrv&QW>;2IvB}f}KT!e338|Ud@f7Y0sA}RpZ#q>=Z=~9MFFw;(loE0n)
z&>>7h3H+M-0_Ts#FI&RK8c>0*@mh}K$O~MO{tsY)f(C95d{zG;oBD(3AOHx7eiMSA
z62Nu=oBF?s@n#32T|$)K3>^e-UoR`?tHS@w35ca%&Q(9>vUHd0QVjy3G|IEimC~vW
zsXgMJPmhs-_kb?*4ha-i8S0{LH4s=cz;ox<#O=L=BY-%q@r{kHty2rUTNF+9{Y3n<
zvA)CE0|Mv(^@dF0vvK>_%Gd$At<3j<?;Q;vj|zb1xQ%}6n}PmqW{Yk-2+)U46s$mY
z7Jm{Rm?uz}%RPG19(aa<{e~9`F+6{cDbA+{>L5`+m)t0)HT6UsB)9w}h(4Oh42;d5
z3h0^AshZco*Or%17g_7*pYNWYT->F-KI!VDEkpc<RCm^qNzCOVnngib9A@@eqIm`Z
zq^9KsipHO?5Zg&59CI6Z1a}>%yd7#Bw&*Y5;{aqL6NCE(A)#Tz1H8?lY-FPeB>_>O
z;6S}6Tm$yELqj}z7kKWW<@&wOk(iF0D&JmK^cl19|Dbouc=`b~j>@NwUw@x*LauD2
z{qjn=i6L=uKKX30pfp%&6I0qh5(@ONP~S9<PUjNDHIEgpeO3NK>Q<PWe4~>#I_^#Y
zjX`r9!T4*i{+@rf|5=59(f&UGi6g%F_j>xTbRAS9SB2{*kJ5~0kU_zywfA>!>scrO
z@9X(oi*(SZBVE^VP?U5t8{_81&p03dpSI31x{@bq_Y+Puu_v}|+sTP-PHb~x+qP{^
zY)+hsjfw5NC-YzLU3cAed#(O<x=wfR+PiA+=hs!?p1Cl+ALVRoxNpPn=CPebDPbfK
z9|C=x9oRd+5B;+OnP1qgry9-#=$1R4926?h>_-Kw62`?Jn#8JqB!Q_lNsqDmuH8xb
z;*{<VxpL-H^o8uU*+U-kBOT(c>q(Ggek{KUwJHw=Q?rZzytR0y`KneDRM3Tyk-(jT
z$L@Ik9Hr%{w>*^PO^><Of<bSw+54X2vy1QR5Q%R#vH|<8^XqW^nT@RP3nX7D%Jb_|
zQl$YaeIh=lH&jdd57B~3?3&`y70p}DFFxxKZ*JzG(#|*>oYiX#_S9BK`k2&I-6*y3
zNwggy3yU1NFLJ}1?*lHif(MYcZ{QfwsO-yqri&O=gar<SzxQ!p#_tdLFOET0@;1X+
zUNu8yyOQ2-s``Cx4mvqqIp034mr#=J0xv@DXIS>qBt#(mnyS&<ooB#sk3p>1*oR8@
zHWDF{eD#uIX9S}V!eKWuw&g62*EZG62Rm-R<8rK1q}SkL`dVy}Mn`FDTb_BDSfgk-
zK&{gAxfLYE%@KMK?I*6c<}n$y9NODa9Bb_H>EE|4|4DTaCfJpVbMjP89LC8)5#f=z
zI0pxiNn<{qMB|iNkaWa6r(rljkvD=-x@AzU=!Yj-nZ)8p#$aecJ8z(`vn4eRxOfR^
zr`QfY!KnOf2UrsvfNfF^GB{lp3fdc0aBod1pD2?Tb!N@LxCl&w8btv}LuN-2OPgI8
z6%Td9sTf~;<xg=4p0>2N=CMi>DXFdQ$-UeXTlY~eqofx(yTY;`rN=tzS<gJ+qLYN$
zRYsD00ry)}(UZFp<g#R_6qN8SbEMAu>r_<`&rK?cB4Xo$AfjI1DQ^aMwRqR)-DZQX
zMyh9*5l=X)Y)#5h-JKasX!H^NF7HmqHoIG<y9%fZr@~S&9MtZ<7iRTf38J3+Gz`EG
zgz$WLK?2OiMDwv;Anso0)oPnb98B-X;83XBmF~#5=qzGVsXFm>E87;~n(0mipB!<z
zBBatFn$Gr_qnI&LwNed7%RO+tMJEcfC6Q$AG(v4_;*{K+7Pv$>242&>5w!C3IJY$0
zjK0J0iUVHj^$g(-u8+<7JXB-_%4UO7HU+8?c*PQ<T5Lo~lO@v->b+;Dp1^%vnRtXz
zt-FWM2v8=<Ydo;=#GySWKHlJS&W8q}a0ySTsg&7A^hc<}6yX%3e|lJ)=4FbiZlC$n
z9gA-VQ1L^0E%NL2{QS7M{+i=+X&-#rHPhp1N7G@o+3;c?hj0=I-~IA`T;Lnsnrfv(
z#8~;2#k0u}QN8z?_Dl@MT~3|y@Xv%@Dt9at_KMAwnO+7}WxfywCk@qRKHJioq3thS
zyO)pOxta^ANVI;R0ql+&6W=(k1X<4`Rda6?%rO#<uA|p=Hs4<lyF?i~?^=kmylDLz
zLOedE+t~J}TOQG;MxN$AHeDzaqXV&Deq{u?9Lg!TQ<jM#-c_S@3D+(VNbwD{^-42O
zKsLj={3=IA=Ay{Y_&NyTfUES-F6~Gi4$Gt2t%F;VA!_@}rXm`lGgo&=jE+qH8~)7#
zXQ`4z%#NGm<pK3BF?{+dIEk@`c_czP@;Y0L*8miA6C8ZQ^q#iU%=dMoo`r|W!qtX8
zGElT+T|6{}F?s=jKxdEv;RaTsehjH+GT99gRKDC6M0)4cs<M?ls@zDfzl8G;IhzqI
zz2c3t)9SJ)R?kK_6eoBxmF~BElBy1}KWh5*xSMU%3#9Y-TJRaB`zSd5GqGj@!(&>c
z(xC=uj<OmElz4C@PsfU<hAHWB#TPe<Wf38Q=e=B`A!amThz@?=MsTZV0}ycNh`*a^
zRPA6b3{ldKT(z8ESI47yY4TqGj9toa777;4+rJK|uvu=jf21yi&Nrh_!)d-|rYsrb
zrdPKhpna0)A8GX3LjfDfpmxk#*jvLtUkxCqKP7UU8WIu|9TVs#j-swYVF*lK$TcCj
zjO(4{z2QWo=uenGTORLT9mz{}2P1(_o6J@F5$`~04<h9^$_#r<lf%%I&oEp0p8n+~
zvULk*7M+7?vIHtt_**i-N-30TAf%p{_Zp4NR0d<LMy$^&b%tBe9jV}|?*_~=Ins{L
zu1MZ_*59lg)jscpbv8~=rnK3DipM&VDhb-47)<1Xn5L^n%?&CAtokmnS@!6Q5rX2w
zRXD^c#Wi^PVXSP02H~W`VFbJ4b&&*(VEqpm*o&|z(lXCYa+MT2KzBgDdusV|c?=X-
zB<smiYA`XUS|s1c1Gfv?^FZqn6-+~qok29wkYMU{dW3|^h_*N}X)?xx#i{iPngItP
zF2Fl$>J2yI0}R)I>tfc-y!&yI9^@6_>B~Jxc}@H^#utpA17*SLk|LE+18Ri};fzM*
z<7&LU1;tmAsdJO8$e>y}`j@!GC=I^q7DNNAD9A4Ga&*0#p}0ahKSC_4EGjH&P6+Z(
zD#w@dp9ZjZRB7s7c%=B{)9}vY@I=>ke|+P0Mg@c5MZX}RAktONHzOh~=v0YSj&x$o
zA&XbQBmWy3;qWU(EpN7a1>|o$CDcowueEv*qOF-ydAv%6LWNvc2M!Gr1c`3{n>me-
zUJidOt=cakn^prf&*npLkBuRx4Y`Y5xF|brqXO)8%nQ}MxA5<q;P|QsU1Q!`1rzl<
z2WGzKmTwM2?Bcj5v!`V({QT>KDIS$$X9u>vEzJ!T9fw}FK&pIehGDA4cA@SnOn?D3
zTEr+pX^z>RK=otc8`z>Mm@uz5z<yJcO2rCrcV~s!;grR+4x2^bj^gGmna;B<!nKkk
zfB>iEiWE}Uls^$chiv{6ZI>=v2I>7+hAo92RXXKwRr&WMho2$#?fj-^iWpwg)lnqI
zs4QX;lA;Sv{lGfk9p;y~z@)J~7}Ay?R(aM$1Ycv<H-`>J#v?Y<ddLd)0S<LVbd&?Z
zMEgroL^1n#Q+EYb=Q)=*JDx21rB$~jTh&XqG4}pLJ&B?y=e5aeVJDm7vaw0{WX2`F
zC1!5yViWG_!><OY<mSm3CMxXKO9;Cx^c8^($p+wqcK%N0!8KVxTBaUUS(cr}ANsUD
z8~<_^bx<;WUo>nEZqr?iX>v``T&#LUiTZ1f1*;zm@dMjq3UI#{yvWu?>afaW@n{hd
zHfUTh#1#vUR<{vN0zy*ak{+Q&&~LQ3ykKAJMaTSq$~0N&U{1Mc&_luf?AwAOfr+ZK
zZH6R*?p(oR(y)S08ODGTH4IZe7*ulDpHXh=Qn6*xI+JTz!iN*z9d%;UqfxufbKPXV
zxO)QYmFGZ?8btX51zi2Un<81Jh}n%Tg&by3F|Ck_rQZSgDC6yvXCxl3Kw#-iobNW;
za?xoN`tND|{ArU;>q+|Gp#dCKFb2kMc#2>!KD@e|Re6$R2@{7P#iGR@&K>~;2@Mey
z8F8-7kY6#pU0|Ymv8R7E<78#(Xs@sF@^p22hmtS_Nfj`s(y)b$?*d-F<w?-QjqSl7
zM>aw7>39GHthpi<AR__$k<&u?Gc`92t+0MH*eC69bH2Ev9dx|P8saAnj)`U%bC(4L
z6(zO=v(>M_sry7pmW}yZb$-S$PmO0sB}nO?=rHmmnUb;-B7e1HicoGH(D`MhK17P@
zy5<IlYbXd&Qj@~5_TgeibsXJeT*4b0WF54Xb*>eQlfCm&C9}6T&V*57w-RI5lBew5
z_2}{c1j^`$hsE(fvRGgBz=1u2@^2kH`hR_5c<#xeYw-R8DtsGU^7r$w_G$m!or^Dz
z-bKv+iks1Yp9C=n!-g5#H}}lZ+3%shh{?l||0_^qh)AmX{Zl~y{fJV+5rkk;^6#?B
zDME0;l`&TaeKN3iMKtn?D!nhYu)?NRuwsEiH-^>0i)PG>0JJfxhGx^gMb}Sjm&tR4
zfA>QBx45xxDkSyZXeh*RdGeAIgu{~+gP0InS|lGiASggw0QLT!4F@cN5rxJIN1La3
zB6YXmcZaG^;HyRruP;fVv40R08ku&Wgu-6_U?>{7uD=M36qRIrkwlW|Xtj;$*`!*o
ze4HVvR8m%?0~(c}-Gg!ycGJncB_fGBRHD2=pJ*s5sb=Id^UX!<>1mpUV+>!8Tnz{`
zviJR<8o8CS!<=H#({^yi^FoGRvK6PpzF_}|S}vmMzb1PncWgRz!TiN!)0=)Q1iPP;
zUOlYdY#uKbsNvI|XB=slK2NVK3~)|IWQYvAOqo!tR%w_Gc^k7?uQVGi`HM;?ciB&S
z&XN<+^Sy#Y5%~q|7+&%s6UhWpFe0Z3{U;>%pGjeK>~(jXss<kV8FFlmo2=3!m&sJi
zm(OEY$=TXDIk?z6Gq)Gy8R;7`wn-nViipU>dpsELp(cJSEj9mfe1wIW*8Wq(+Sb;5
zW}<IwXeuvKsSPGcd#zmgUj&AXN=I!}$Yxr-dOe>Xtk8<lMZ^RR>P3=3#SR$Uh896i
zo0S$XW#I}K<*+gR^kLfJ^&T771}!?4z0BuewS{?BmZnCCrn}df&+K$!t#39wAp*D-
zGVUb{J$|=eZftF6(8+q3^cOz@hQcNJ)WSq3;s<yAQ#@Wj_Vc(*9w9*mNvtr%xFr_?
zJ2%j{K#@GOq(l{EV7m<IZ_`soe<OV3fzH|yLVl7o*>#+OiFr6ayfmF7QY>%o1gVsu
zJ)R8~zU@aZT&+V?Cqk7#ok+zx-a0Fn(@oKG7W2>1f8+jNPXr$=H$_*yDU<5Zl1mro
z+8q!}sf?Y~Yh1?(OtT44!$=iDZ05>XHM<usHpCKE3}uVHfd>m1*oiQyl*w6Jyynhe
zE-q}E|3BBHY3C^`s3<M{<4By%^Gj^?e;8XCS|qED0AGmxCl&UDcxWQ)PW@u98*}(J
zd$5?3(b&W#V9Ss`K>$unkt{WA=ijJqjXGJ2LmwKyPPjVNoiCONE~!`u4Mj<fUB5Tt
zS^o=NOZ(*IC;)+QAXW&TbbiJVvtVYj!_7#v6U+q13n@?`vrt1fQDq$nb>aa0uTM6f
z4=PKLNIr!D*pS_0ueOczn8UwsNTeDHtm_Q4tM<J7Pz4;44V@Gf?dBamm?iES>`?za
zo@!G#28-L~H83oJ41kr&W&IqP)?hlFW{GyDhu|L+fljZ{Ub&uLquw@FUQzW95C(d?
zYkSwbJ_k0SxZ%mL%~1Putl}HM`kP<p2Kt2%Q?SmMDyz4ljYokZd5lCQ4~RiPC}=Lq
z{=-hs#18^`x11;Mzd{89&3Nzi&yXB$;J{DXP?cGn;AH*<058z-(8N|(cuFiz2vRiG
zf1?jE3NtMA_m1V}v)oTFFxZ8%E&w+dSwtF_9vz`<C00C<YI3@rwi5akmS(o<>)Yf=
zv8!AyM2gWuwO}z{u2dsfKsKq_c>QCpTDXKxcirO_2AKw2s+3`yNTiw{GOBmylhu_0
z`R4?Nj;%bu1SpWD3z^!4%JR#LtMkf=sy<`<r@cWvYrfgw-E?}rg4QFm8h|@bQTq#M
z=+Bk8e5a!(kCB&GRus!up24JvPS22Y+7CVm!)yQY!TMEZCbXABEXwlQw;Ca>HY~L?
zO!9xBksaPE`2S`FSJU(|6uW=P3TKD7@QL)tAOsmR2`GUmiY^BZ;Bfr^8^}LLc#Q?w
z)w_O<$?<kU27f~iLB;<@(0`KwnQ<5GX@ou~MO>9C8=df-AZO3FUU_rivaQ&I)()S&
zb~G@;Sa&h8r5^wAuA5#s<^sJQQkqR2$JN88VMmZ3#FM91B1Y_ZDHAE<EjsQi^}Mo|
z9b9V5jzVwGK$;Bmby0VOUUm;Yv4RDgu4rOJ=Ufjrl!^yo5L1uN2OdF3-jbri&zeL<
zs&T=Aab1-yCew<(_g#zyWhu6ACe>GG0!20v@gDagBiXL%sm_G7`J70X*|Wr1xDd93
zC<#}PVWz|_vgI%5KTD8h_a;@vjv=5-)E<%YB|&3h%lhaKd2szYMP+O?t~E3%w}pY_
zNvMq+B1Hv3;Et8ZFc<M)&`sba<aXDTZx4TpeF7BLO{k$DHO;>Ismc5yI~LRc{k{lX
zIZJ^XL7bQ(p>nb4OCx(hKj|p)y;(TbDiXT*RlHv{Dh^3t^Vc1$L<wx|5G)IXVRg<i
zhl8#4fIqhT_#UE$OpJ_{d1NcgNmaZk_ZvUd(a_^mypDwCaGI$3MDhCU^-Y#*P=87i
zNE!J<(uQc~8=nS!>llxmA;LEERIzf(n374y@JT2KTQ{Wlj~&DIq{p47vo5i<rJz!R
z{`*x(v5dlcWvUe+P~{uACLD5M-@Dlndv6(F&cs3A2dEnOvBS3}5G%mcmL#o$jR2K_
zIO6M?ONL8XsJvda;!&+NU)7T6ZXATSTN<AA-&IRjA73j*Tc*4a>JT@?ifZwrH&B^b
zb&b@EF%v-?2vrcNKh*-tB4DlDNHs<=B{dP`8cT%AdL<gxl3_EDg^>bmPpBLreLkpW
zg}Q#F@OhUxQ8)KS+5ZEQ4;8jH*)pn)|L<bKP{;0pPib(a*)8OQpAQB1<Z){CuQ0ZI
z16tSNn>&s{q2TXA<+HGq|NEbO6ka*m{oYbL_av|Z9I$hgI`wB!-fLn$ax}&jy<hsD
zH2<#O9Hqpk0S|Y|EG%OIx<aZheIYCY3`J3EVPHYGM@o<rVv`OLs6H{Kv7>$cPrV5G
zr;8miIm_8kS4&glZ?XD(r+;u3$91$Iq+N|n!FNt>2Bk>cEf%4VpeRiE(}f19UA}i7
z{N_K|Fah3twHCUcspS^@^!u7OC-*2qhbvced(^(Jk))?Fk$LF{oq2UzHEmvs5}H|g
zb?%HRk8^+2m5E1?kRk-00Bq5)rIhjgY0!$4^=L9bhh<gei+FRk&rmz-a4A%2z$=;4
zSPmuFUcQI&G0o44afek>xydhWu~J&i+{MEBe%cblSw;2d^-4iN!!!Xi07==RM5zz@
z3dAy^Pf=%4(@ZAmti}XaupE5do3YHqgr80em9B6$`7GTr>Y<fL9&#i|`A>b;eEvU^
zCMvc^r4f@g{ZoC^HDrM};Afe2<_Hs5auuP0F?0+&D>Uu^9ckKcZ4l8!$uA(OkKpyi
zo|TM~%1At?qgiFWx(5Z$EM<h~Lxjo{Efp)+K~n#Ps357T(a@DWioM|vWKWBi=_Fg{
z{t4_k@!S#dvl{t5q2k6g^3ZHVtYh;^?QyxKVB4uvvscc9s_Q;pg{YOTq;ObQr1fcc
z?40Rs)c5N$FB@GlW*>fgXT0pEvY9?>EZc|sfGd#;z4g(L+Z%WSan-9*Dm=l#f)ckq
zmQ}~L;XMfrZFGgwy<2ol7!z5=3WPvu>zIrxifV61r*5d^h6QyxP~kip@;0X<L+hbQ
zB;TGQUfx~nf?bL&#g5TBpkC!^yS8U~NSlpl!fAApJf`P9`TLD&`CQeg?F(Jg8Ci+S
zXw|rH$}90Vqf|O?0oJ$uiw`8<dRvcH&+)@Y<+pxf1eM}uZRQPCw-^Det)LHaci)7F
zDz%r6O}}5cI{F{01}9;YoHn4=f(4RS^7eLa=JpjDx~Dr)2EM^h?B;?m<qxX^IW*?^
zL0;Khw=g<GCLIG4@MAKlV-9e3W!CH~i7QI>5qYga@@q`$kxaB^0fRKPJ9oM23Up1p
z3GxW}Qk>&jMVk=H<yoEpQ7RM>&dX+6*BmUh%-NklT-nc_;8EX*yA-)ZDX;=DbQ|=A
zY}v7ZH~FL-TfCr+yboCxQtplgk17VGrbOURT%5-P0j67+mv9HPV1t(T@DH@+P=r>b
zd@TDGt=9W&3HpRB*m}6MjW`!rI@0Sx=EnTM4$WqrrZ(_z(OS@rO>u6#Uu&g-+a5d{
zX!z9qwT%gl3Ja%hVS7W1Ny7@3${Tf3W)(Ay-k3*f5Wulfpq^kds_NzAro&H5_cYY(
zU~x~6Y|LFFK8jhg;J$Yh1J`Ct-R1;EQZ(VG{R|lkdvDB06ks?9-Hg593A`vjKSf2A
z$xl)8%PZ!PKCQ66j0<mAdcxnZR1or!OGw>$>LC&p^?gtiJE~VZ$4D84l8m>rG8nYa
z7o(sdMM(_}3?$kAiKU++=&y^{;+XBH57pPOiFfle&$x_|pJeHH=?1IRF#2Ct!o~n>
z0#iZEYvH_G$#XN|lYNi~xdK1AuyaF!ABUJ(g|LP*Ierg&se9wbm%DLef%mVmW^>$<
z&7hCt#mA@p{*mJ5q{SEpyHQ;4hZAQRQ)y)>CMH}Z{fkHDi3uUKo)&xe&%AT$pHh3M
z<r!`%`;3yeIC;1opz~#@^v+wLAY&I_=?<0MygMR0)%o5+CwKyv`(!}2W_h&2do2@m
zEu_udG%-^nlPn2uK+NnP$Yc(QbHrMiaIf8|<e;AFIR-!t_NYA`H%RWR>LlJUE=_}W
zKm7r?Sf5Zx_xCB#5I<i0VME$_jQCGq<+yt2-eTZ?sRp}vCukNzhQtI0T=t#KUq~Nb
z5Irdct*X;J_RGDh`QrI-jlf97nc=0HdhTv471M<FhE(-&{HtJm2sru<UCs2D=)7VN
zf|A1XeZ;u4I1fpV_7}7MGVwkH+mHqSfpLDlwMEP$L@VfAdwk3{-w_HgMHj`8r@Ra$
zG5|uDt%I-R%kNxaY{Ka+F6a5Y6yTvNa#+)GGo5qQ)eVSwP<Ar#-tSNGn*L*w1^{pg
zb6Mg}#=B?#h{^%<n%Q(^){>W^{pjjm#@d-I!D$3!9@4Fh<AtnuY>Itz%?Q>gUfgIr
zz+Pf`=cMd>5r+G48*lK85q|uz;^)f?xb1oh`hYL!mKfGj_+uDHTd^qoo3NB)3VGHW
zx+P(HA|_ZFZi_RR;mehL7)Kw-<+28EH~GiG=68TrzvF;~5D4eG+&6DaIijs|e#OB4
zKN-pxZxX<C<8+8{S?pEfSgP;9JN;SW`sAi$Z!}>Q)`)v(W9adv>G%79nlDt!Tb}oE
z4TuA+1!V);OK?fUq+XR-l^A}KoTr=$j6psmsPj)5?q9qMt$3iT`vD6vLlh0N-!J%^
ztkyz~6E`s8#RxQX-XFs*RE^YrMCg-XOA97t7@$NZ607Mr6tx`xwnWLM#SY6v98WOJ
zjAdj=$<o^-rLa>^J5_;-8=TQ*<h(-H-5z`CAmYcC&BHiq-S^h@u{`IX6`8anuMVY_
zZAaIm{g}8h8P89)>|a^0t@&&E^4!?Za94w2e@$Wfm*piidP#<_Vy-*n1TgH!eMaf(
zvmn{G#`$=k?z32I8gg<!U#V?!UIq(T(VMVoO&%P_AuIe72(MR{q`}_&yLyjMk!GRF
zc$#l0zs>!H0G@Z1)!X}*$AY8Kg)r;OZTU9c@otXHuV-vq@vM^R3m;Xd^q%&q1Zz|^
z?pzXAYCEB!8EuzJaiR!Rrr#YDBIv@7gYa*BV1JJV`$q$`0uFb3FD7>k#%}r-!Cp4P
z?ku?i)f^8bx1#5(T`3jcOf3_xq789Wwe#CfmpvqLY<@<7+3oRfwDjhvD3|R^lUS2^
zt08TMynEdFlM8bV>p%|W7}#9`hT!jPwVrw8*4DQ)lL2iU$Mx@Q*{ccDyFw+GUEXAM
znLclgX}`ojR*m0x&2-_{+1@G@(4CPQPpvd}&7b)*j@`56-ud*z`1$cUu{%xqEw33t
z<t0y3I3h(bOr5_(tD&*v@mxRh4#v^I{JN>-36Kt(qi^w{x*5NdU}3-5ZnNX<!quA_
zZpBO=dq$+4`pFv6PZ9)S&UlcLf@`VZ7MCOHjH@Ri08k^$AjDA5eDg|%#B0`UUP>xE
z&Z?7v8YZx>;;T^h+HiXF-aqsj9TG{EXX(O=;E2an<h!aB%-q3<SC49I56k#nxF#N-
zjAbIp(>Eol`Bq9zcuOKw_}StwI%q(*)NkAu50fkB*Y*MBnU}kVMR$sCFW&Uc{5coJ
zc-r1IV4O+#+QW0@t{<=dPpR^+Zl2>MD~RJ5IKv6_Zp83PTZR?&Ik)1b`0DSNy>CW@
zj$!76R@(@rUEqh(>Y>RQqA3Xg@P-M+z+MH#LziWNT*EJ!UmYSYoL<4RbSg{vJk1=A
z;5GtLheN4nrceELXv&EZew#nHdlfMUq0HVzhYnppOjkRjWMt@pb5PoyO$2q7AmE?I
z4sngR@kc8A#2rj+N9!i<Sh02BBZ8v&RJ2WUou1H$q~n_1&06;f57Q?+oOZZvtv{wA
ztTQmab)@P}JOhGX1sG#rJ@6Lvu!Xfy$;--Q<7uuA8|gJn$VYt3wuw_*9}8P(pA_E7
zq(ccLEnUJ34`P(5I84+-{D_0h$&WgTWp=$ceG9sMah&sq`%_M5uJR1frEVwafP?$X
zu+b4-JP1?pjN?<um`BN;N@Q2!IFg6Ocj?f<H1;-I@)em^Fa*7tqF3d-__-j|_2mF~
zQpEKKQ6GAe3hJ_K&LF)OjFDEPRacr?vQ84`0-K-|b*w0=0wv1!?E6WCasDADeD*Y1
zwI5k>#v^^(NV|&;Ox39aYV15uX=aM#H?s0`px`h8{nuyBlmoB%*j)5VIBqW8Ma7#q
z4(=?`JBmreI-X`9)?%Ri?JnJJWGZyyuT1AWYZBUNobxZs&zv^>7+ekt4F0%~`C8bG
zOEJv1mq{6-qSOev1jdCg_ZG!S6Wr9i6<k*5uQN(WF4nMcwlABP!sVwS|K|Q(9zcc%
z$SJ`B;WxuSfzqmT0E3J`&MlO_0C&v7p&C_VFbR3xP|_@r%tGQ?=JISf6`SSKh?}yM
z&^A8Z9OZ;?^5_tw(4!{G^v!pl_jK>0lMB^`+pM4?Z~jV!NUp0&<bawJN@)k1v`kH6
zovj<b!<RGQ3Qts8oS`6Yc!|o|^^Kv9^&4O5T2<<si%!OyY@lK)+-wATOPTl&eh-eP
zTN{|;RS-Y*oLL#m<-;`4;<~cA$4>nrSEY)Ywp2LoO1}2QZfL^`rN7D#?Kk{E$KAc1
z1Po9qz{({Hhecg?wF~r1Pl_86jv;t>K&EiH`X)Ak@$4}voFVAKIFh{fhW^Joo9`vm
zH8LQGAb7{X9<;k5#|?AowzeXJAry%MK0naz__;@XFlvKDM&@l76_1PQ3~cKA@N52V
z6M6Uh2jF^PV&{i*2M?5Bq=0>_V=HL1*H@hSFNkLEOecWl$85y&2g3KpF?*Z~JOO*b
z0s-It;BAQ}_Q7XNYl7@9)c0`T(r$ND0RpjHj?kkvKE!7fzgPzBTp{t|x1NNmAK3GC
z$eFl7ee1F%a=V6yGIT+61<FSh5mDBmvsbZl)%&uHOqh-WgJ|?G4h8P%feoJSoje1R
zjbOFJP6y*l<_r|71G6f+=|NpDIu_HW=%=X-_lEh~CZ;)So+huXueO#(rA6l$%*|dk
zw-cJxIi?C9bdOHAkO2N2kvTCee6x3dN**vwJxs4;bIOI+A~&iS(+VeC!xoL(L=WzT
z5U3$VdC8=b{wwz}&pjK?+AnhYsTg=ri|u9z_70`8fM>ck-aRSS-}Nm_z-?$EZwGLb
z8e&JEvy~y5?}eO4uTq7cl4ey-rD{tRR(t-&XWI8J9CDx^4ZK34p!S#4|Ly+GO`kS(
z&>^6^A(k(=v|B6PB_-NusS6%VYm$D~wy)U3j=qF*ohnVcb|GFqD#oNFI$%jMZw+Kh
zSUgI@`<x|>mvBR!O3mX|6DeWlp$WQ9V}j;U_xZ6GrAhKSrHiS@`No1M%F%BXthC6#
zQ=(ic4@N@TI8B~+rOi!_&6%f9JTxlB9v=-qdN8FQELD)%Sl|LrZ<%jS2}DVSe~dfH
zNyy_<rBA5W2nWoJZ&+{_l*+Fj-r2qIZGXq?s;;FrqrrldTFRm`5@IL@QFA>~>wKo9
zXc`ZQF{RnGu<B5?Jf+U@37b9p-77<EAKnik7i{!$l>iGMWLK5Iv)X9;5F~n)`PD2C
z@|S7T2Hi&-nHUSK1E3O9o&LDeOZC_2b>iWJMw>$yUpV4x!9fi(bz3~Tqi@8C1V7}r
z!+^+Mcy@rY$K!eKCWP8TR?<yLxNS+eXLA`SIBzHLP5@~J#l65U-0JFKs!*m?Kk+Ug
z2RQqQv-199Fh3c|hJQ3-2k<!TcAOKEwq*oG0v3@#|KlV7Lm@w}{EwjA`xjTd7*q|r
z&uePj_&%g*4!<RZ(ecAyz+}kBRk%cdWSMYH_t1cb_7yiR)@0ozfz>-FH3IW_A*!ZO
z{c={Nge&}Vv7;~_{AkQZJNEZeCZqee$;`RT@&#Pk6~p)mM)k37SVEES8BD-pM!5cG
zjt&7>nncBwjibg`dDaGBWtl_Fy|;O959TFPU%S(K{^n@4Z!=umS9*OS&>5+4fG|Q^
ziLuj7bjA7j{No2a3HC`LHl2&EoTktM{co^MsQvzVT`&4}jExF}HB(4dkmN^|RMKv!
z!EQN?OaB=&GM@X+mVz-d#FsYsGYA6t+Gf^rNlrcu5E3_N<6^~+?le4Lo1>dGch2I@
OA+8o+g0|)wi2noZyn^8X

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/lato-normal.woff b/assets/documentation/1.27.0-rc1/css/fonts/lato-normal.woff
new file mode 100644
index 0000000000000000000000000000000000000000..ae1307ff5f4c48678621c240f8972d5a6e20b22c
GIT binary patch
literal 309192
zcmb?@1z225wlx|Y0*z~c5Zr^iC%8*+f)m``-7UB^!3j=qcL@^Q9U6DHzmq#NckJE&
zzM0qGs@<zr)#<MO`kbzP_O5DYIdO3aNC*fBn7V!lbnr8R80c3WO#k^IAup!{0Ria)
z0ohXn0qq^7@a9QDLP<p!0<!Nd1OytmP#IS!dC<!#F|t5FPMd;{*ZWz_?m(y?E%j}{
zT0aB?x)1~e)|csy>~|lX99}^{f{?*|tiffQo2oj-*v7;Xta(5{z!pM4ASG>LE}WR?
z+k=lidJXOa|CjR8<dds0Sfhi0+(&_cPF~e^ThTE!(l>;Fp5q1gVgFg+Avsh`!6I05
z0M|*u<u%GFa-*rGg9}(o29IM30)mk@rU#$a!pP1F0{Ykn0>Z)%{Q03mCfeFQS%1`r
zfcbC%0YUT%+)ohqCgR3Y-^B(3#sw4nT3`+070PGG2`ha|Bd`Yk{P5Zk5IB6_-VeU8
zv9@=BfbmHH4<i}^!rWT@x+BKM&Io*L-OtYf1eXSDL^E!e^yU@>7bTU2Z!JG;Da8zb
z^nF02$;Hfh1%AZ8@*gbqlUEQerpgV$tSEdH0u>gG><5e>8=>;^>6gx<r$?}yfTWU%
ze`^_sO1&$4a5qW>oZh|lXuZB)@!v3{w7i<PD0f_%@m$$`?H~;A@1m^rQXd))g@oM7
zYrSV~LTsVHSl~7S#O`^vxYI3&-fIz%Ko%e(nqfl9`*f&L2w#3KO-UAbHXL7_1;~JY
zc1C+xp*(qRH=!K$5=TaP5MVfY-tc|S+Ay@__rCPTl{m!Le+Jps7gFlr5cF8t3W9E>
z`NpMdu!%%D#wCz3&_Zkt;*tk1w_!(K8VuEL^yNZHEKNqvMBT2yMv=-)Yw_?q?9SV+
z5zItcJJdTZ*6+=q0v2jFa)1_n_WRIkGYGJqqVGClSNPDr&OBa^!V%s)o(tgwSj|8k
zE<5CqqIB*Ax|6GlZHg@qw=u_lBvTd3RJKxFRz;<O9qf1^hJu1}Y;mK|6^+lfM*d*2
zSZJFYq7tcVneIB##bG4wytA^wVX~rXqbU^rncmt0Yuemtzs1tZinZnY_&1b!{_ky;
zmb6yZ18r7ya%Rth_cE4I-?-*;(6TJX)_C~qzJA<^>f+(Y5dcn1%FbmFoJM$O^f_cY
z?<6zGIS=f+ZPZ3P94vkVT8hmCH}RK7PF-G>HPzTJSna1yPrZ1U;9sE!YOYw29M2W*
z)U+exUr6uowl$qEWz?P@WiA(79@5{JwzU`q^J`CVJ3Vd9vVOI$Yn`~WI&lAH?b!D1
zF=&}*y|qUqAKCl*>GL%sZl%ZM#>YNhL$CUQt_|Ylx2@+l#R&dyuw}xMCt21uKXOo{
zdpulHqRPHcX*?+!HoMHfeBXSbygd<_naS?i=WtzpXgr+7>}_0~a&AJLF=a8$%gM6e
ze;`!t_MM-{WG-EsHSHAr$(9%BX?2zD`dB+UlE&`+qm-Ocm3}sMl4JMq%LEcRHmclS
zlg(A9^D4y2Gnvuaf!GGl*EL-9oBmHxaAlsx<Gt-BqYPedr#R(=I*rbA3$%63mG|FU
ztq*kA9Hw@s{8dNMRz030uhBl8AGtWI;lz>)Z;_(EShFiPrIQOIFiJ6{jt*Bnt1+c*
z1Jp@{hs5iK7HrKJ#M0q}=V{U<?Q|oiP^b>Rwf*o!rN}9uJuh-M@R9Vo(-fDn4Kd{n
z35v#>a}gbX=gqX7w5`|^h97v#SW!a{CsIF%@hH*6z6JASLpubxfM7D#WI<5cYYZS%
zzHG`xl$LCc3t#ta#tZ)^CWsfEEllt)x;&XMgOEfv9|=i((1Ajm@1k<`-bVOVGNBUt
zNw^%kL;>{3$}_rcS$G+)#rYwnwi5ayg-LERIWZgFr$;Z+?MbvU%8Giul8)8<LVhMf
zO@4iLYkl)j=i!wFBDp0hpBuG6JxM)w^@^DxTIUuxX(VqxlF)HZh$h)^>~md0&~c92
zY0wgo`y##_-q{buOm_yXr#_2g64${Niw!hz*~HonrNfw!_}m{Kn|JobE|>Rf_xq9`
zI-gXJUg}a4ZDQr+&gOTAw@6aDito}%C7_?xvtWpK;Nrreb#$G;4=1cpSL=PNp|aOw
z;6*!Mg;l3&Q^f8ta6yRE53Lt-P1&G5p`i;jI>D#I(N4f>TprwSJQ|d&6m}J<QC-IT
zo~YtsRr?^hqVRdw9rC`=J8^?sqilt)9K_gfe@E9JtKr7FDNMX60;v^1mXcp5$gG|N
zLnx1Ev<j0X&DtGC5oBzTlhY8wwn%mur0MFF<}x(qw`1w*!INdtx53Fjley!3(tyfK
zLcbLBse#@+dpPt?IzY^mAzIWkXCL!2uS{)H&A@hY2B<%&GtRq5!2d*l0H_Ps6op5(
z%T*37HXK))?~Xso_s}hkvksrKD=$lXyC2j))i}-~$DzvYxZ%Q^vH@TcYX!P1dKKEg
z4=xkF6F!O$B$XRHCmj+cAhR&(=hq;<s?s9(rrH=<7AQI+474c75%j{o%va7;HJf=H
z!js1O`1Cfs6&PAZVp@$yjodg6%(SBGdv3yeB)qcLzgf^=Gk$|-5JqRfUabBq9B*I<
zK0k)>OSnQ9XV;fcIF|`fDJ9l4R%3mV(XA;V;~Y3M`_{e-q5-Y7^(rgxPhwXe=WuJ&
z(WNwGcuF(|7nQ|pS@#sg9a+jtE4-y}au@Jq`sUVv{3cvIhPLGA3XU5Az%()-=RTr|
z%E=&Y^O<<rLfn4ut~C~i?V($`Yqcp2a@B{oJ_L9<iNi<{7hfE9kKzP&UoZ#9vZOV9
zVZi~|p9b+#l;G9AW=g8tgx!uG^r-4g8`wJuw|TEBahBQ-8v{eE@%18Rs&qkY`VeS(
z*5sHrc>cUQ&n7~W6459t{aJwZj98qv=OK8vQL3&C4mobY(aQC`8Y<S0-YH(KuRbL$
zqf_j*wNOS)&FxdeTJ)bww(M%LwGMT`C{^cFD;>qM-U+k3h#oq3d+;@{EGS*)H&-Xc
zA)m(`?+sBYmE_8uzxbYK7+_PJoLMEPsiw1qTDF3vvo_5Uuj5I%i<Tp4h=W;(#yo~;
zu!dc)ts2HNn}IrpzMiM;5XS{%T}05%rgiXdGAsjM`hrb+OCF^-7oYQhXp7LEIV2as
zkW4R+0)?1xkNio&*MEmiJqfW7oIXrMfC3YKFN8VP#ww``F0t<^6C`n9sNvH4A9NVW
z_aB+?h?6MR5t5-wqml<tsgrwmFxJdmUgURGpAZhO>KJ#@C4WEXVoGxN%-rCe-iA#^
zW9)?D|J+@RbLN6h7nJl0?{oXm31Ty%lzs{wc6o<g@d%dkak)}cnc?$tj98<A#@Ffr
z!VIDo)YphX9q-=xq=<s(lF99blcoASh}+<id@X`(zQ<5hg@lpOX8UY4Z#!m|uWeYk
zK19Kz&9z%_bh>+ZAjLkDdcbJv6MPCLssK23^i`yt3;1ROJJnYz8h#Kj!+6Eytx2pV
z(~T!!XAW+>eHUyW19>ZYV3Y!|N^DrmtKtL()=1O@OtUZo#kWQIMPTHDP1d-QQ5N)g
z4tz2ykobd^MDHAZyb|{z)fDiB$xV@ER^NmKr9np0nraDcARgtsg{vuBM644+GDY~B
z%~s?4&4#DOpMgnJHExP_U@y_|QnJd8LZd}dgYi58r2>7~U#0?YIT%e3=^w`3K2KBn
zwF-_uaCFuF2C6lnd{uK6Zl%ME69O(zn+qm*Eo4~1D<IbfS+>J0r6k=K^9JF^tBmL@
zf8_pvb3GV<7R29vo21&Gr~~C;u&G|qW~=0Zf1zlkuqf->QMTkE6Xjuv3xi5l1M%fM
z;Jj||%!L&5;KzjE1B7t{L|~5a5D-CY+=XZ}BG6STBBn5rke++iKHdWuo^KbCWk|8#
zN_-kQ#jeM)@>d<hpBHwohvtSFDQb(iZ4^`ky>J$it0!<1vIaq43+jU49`#=>A{lZ$
zzQjfB(&Jo2Lu>bEf)a<q(-08f2K9Avy1)|$N$BxP`@py$zv<dIfsyv5)TiNvop^<w
z8Dyfz&5JbJ;o*Xg4Y8b~3nR5^<N~V`m{);Zh<HJ}>ZneAeqr67R)Khe^{9EmUK;4E
zNAwcMZCzMS3lxgPXDj5GT0qHg(H)psKjsbJ9h5mc1|V=V5Rv-?3Ps_o%%Nnz_#eb4
zi&>-<2wNbf>_vBICg(VS^6q%;6`@~OmHIO@p)biA6`}uz4HWom;Dn|=0i*{izw>wC
zgu{zL5NGOurTIeFPl}dCigWgg1aXy23!C&#n2KyjGaI*59txEzkj2IiiN+|l6_HmS
zMXiH2ys-2z2t&itMvywe7f@^%)d4+agViig9*#nD(~c%Ev`*D52=Xoh^aq?Bo5L3O
zWU{2Cn;|KOfie&!O6Yi-@5stWkfuq9Jq}rzjW&j}LP-Rsq~KKy<Qk$`TMWlB_tudn
zdvFSI%aNu#iOttI#Wj208H?Y3mMjHCDZRIxj5p6GzLdwjly~3D5h`5t{h(AB$y)eE
z1k~z2=pW(rd9N91>NZ1p$5}B0M=^19oKM|7#k?7y_I;z+Re2+$u$M<6(!IeAT}_~O
z>Qd{G|7eSbwL&q{8P#1|7DbbiNO{9qA<|i2_1d;)c|EfoOLNd{vTOo$J0nkRnZKiZ
zURMp0(RM*Yj%9pd!Ya+75cNaGZ^iiX;@Fr?rwn2E6Mo+_Zxi~kRXsb;-4C;iya~|z
zg7J9ST*?e_Iqt|z2YkL=e77HLhUMS?2^U{1K<{V9;>&U<wM9r8gZLd#JVE$(V{8{W
z7EsQ*b#Bg;P`8V<;Y|!^s>c+{$6S;7X3EDJ-U=-yx$!mL>MgqYZf(*t0J2dSx5P|4
z93lxSn$mUi$NG8HuZYtW*>h%EYe;vWJ<rJ0`qvP*I@}stRRvg6lg67HHN^_whB2Aa
z382@#&oYIi-@W=Er0MFrM2CL3>3jgP8qcJ8MlD-}<QC?Y4*1*2KkkO)f|xHv#)~rA
z?%;x*=|9H=mx*>^LvxuGeK$&}lf*XZ;iWwzNa-LwqjWU0gyOk{pe=wKASqtenrnn@
zu`kTLH5tgCP{m{DH;kMDHQ~aWu_3K$fIS?Hqfbhgv##5F>KH}9X%%q&C2L;BNcU6e
zhi~7^Cv9np?Q&^29MdHuw{yjnipD4VIn5$Ip*ah}f#6Ta5V*TCY;YWciN^p(K{{gu
zckO&*ICnzcxDe25I=C?YYy8Q`6ld}MinpOG@9q*hY)FuO^_d8dg5g$$a7oc}o<s_t
zU+xJ6-2Iid`P?yPKVeMj`rS#%dn4>I3O!N`LfvM>!60o}0rfZ(D$=NCWiSukAUXkH
zn?n7TL_4gu=u?WCQ7qP0P8dr4FBS8il!~5}_XHB}<o*rC%2NJ=)_;G@?<z&2+xt8n
z#iAtTy}!~>WplE`)OUGr6pQ|eVm+&#TK{8H&xFd~^=1i>l=-3vD4G<dVT=85sbiRA
z22in}aFUwl-_T8064zyk%<I@4&;K<oXrr^Z2$X*xRRV>k+@*3NDbS$N!<@0HP2xHu
zv3wcp?769(WqL)TUBjrYD^S0kA1K-!9MX2jVf8_J^7F$-j>zpnHm!yr+8LWIB&}Nr
zwGndGEQ<4lVAEq<UJ8qTZu$Z4Ijye=CEDAFY=$YH$`rd)%<Cml)QZ+<*tGJ3N+z@M
z1X6BGnV1@*V^!#P;8u#pmhU+MF6C10JBRgjugZf%LpvTG3vplRVnA;x-aRLQ_H}_t
zx)BRAU26AmE64NQd&AR?Ndyjjn@y!7w4B~yN6ZZwbZ((wgb9x~Z1FVOHK?kQs@YF<
zXw_1vSqgufT;6ca@^WB)1R1Pf5*u9d8`Q#8atEke%9J{hv%>+>G`hF-4D6XIT}djr
z0%y~OKgp7^7rabc3i)1np;0$s(lajAGbT~{CE8qsWGXdt_k~+NwldQ`DCNT#Yi+iP
z`Fnv2jK?vl3lYZg1-dt??k`K~FmjzI`f9#-o5}P{_}(l?T<ytTnRn4F318ZiPstHZ
zjlQhXV080)a{*m>0rkD`K1~t*YtE6i<kCt)qrm6JXY6$Ya@&(vY<C-zpzv`J=7mdG
zW5xTBC=~&jH_~qaZ^GYQ6bO2T_~ySvs%s~*W16!DqXP6gIDEv0(gAW0bsXi$?`RCV
zCZjp+BO{2uE`;9(?IO@?jHK-F;)QMbB5D7c0n;L!h~UDbK4I{A<NX?>%S-Y0cet>*
z`pBj<czvfoT}A!jQ$ou2T){|+Hv@291whdhL3Y_!1e7t6fNtb%E`V{zr_9kr)`4LJ
zgUs|-IzG22WZC?&-N{H>?gszt8cM$|p$yxy%TXsyidixVNwkB+^Ky{yxmP&l*Y>`x
zvVsUB>Oa+q^4~OHl5f!9AoNml=GtRGD{NBV-v4CBnIdrNEJ;FjF7nHT<g#<=*Ggst
z^gkhx4s!(DD#AwOBjRF(L~MCHfxX9AfbjI$4N-$nn4UvFb_4mQ$jv(|w7EfBf=@}B
z!cOh7v#=yxR=xKyUZG6W+y_{<X0wV7<eyR=*bmrTIX`jrVG-7X?uCxv1<2}PfJ}*f
zW_HlA^`sAkBtt$PDI{JgAEpuWSYnIGNrAN<V22X5;Ot%g|23jK#J446|HVsX(QQBt
zA=z>>g+R$ce;f411|Zt?T`+>WJ6Sk_`g=ClON+s;HUu?3p9OW~KZp>RBGrlTfS^*{
zE!#7m20QpyH#AqtXAz$xb3I3P+I$$-Xm7BuI-Dy=P}|YD9@KVtdN-78@J9p@A7IR~
z8`im^95crI?SHwQohuDSq*=63NSM%#@?))vU_U2O(`%=2%Pv^)H;;3hO|1ioE!z+6
z;e>T^5T&iLLN*F$fRAOf!4$Rjl9U9Vv$|6OEmdS@$A#|!P(VxtD73=({{rfWUlkRN
z^Ff4=Ey+7z!zCF4;RN>~<6NL;=kMoH@X1F9(d;Wp0|sdfv(DPh&lo_qQ4AKLZg8Sq
zXZf5VR`e;#U){(I54kpC_I7a>H1-Z-7ZQFS`jdaW!|-VXo#H$a-(d3lkFFuzV6^&`
z>oa;luXOU?pk8%B-Vmd9l5)}kieUaLT;gmBdtz_)Q~Vxt7_xgYwT|o=tCjutp$8o0
z!SN5h`Nf1XDqN|>c5hX-Op6C$L|PZ6-*Dhb8n$*o=E=X1EsX1`MYb;7cKPXC0*VBG
zM{bD1IFou_1|^Tq8=m<AyFkMN>8cp|n`K#s5ie5pO0(lbEz#4!j%z0mDlHrrfz2j8
z@7544&8+chmLJX$3GXs#$wsyHyA79Kp3S_o&9JI5EhM1bi(iqATk#@mON?C^?6>~j
zZzd2kff_qeW3HSQ7^_jLhs|2!oZL^IH!SL2=ZTeBhuh}<evSe8W)Az|6Oz|ASb+t<
ztd@W*%kEsA-eBW3f$)<gmUR#Q)0WSiI-(D#J60orHkr^B_4PWwQ+K%21*sKDEeT|~
zZB%QD-muV;ozQ5y^)-Nj9s;vX%p=#EM*C}Q^F2v0RCD4~)CXvA)dNTU9QV;x*DX~$
zdn7qELZj=?X%`!u`Ys(AG`h4+Y-cnU9nqb?D*CG_`K!HXYpn}z@=m&IisLB<K9zm>
z7Z_6DS77j{hZ2=`qpBLfl~e@sINQ%0+x0oy_h~HJzI9%t0;zM@_c`0t`8O=6AE~+@
za|H7|Ml|u#8Pw-m*Au`wD+ztQAa~w097UY1hC0fItX55NG}D_N>i$0LMqYizv`=U3
z5uvd(fZVLr!lA~vQ5;!sE>bp6x*8unWY-Lmc&q(JydqP#DoUs94hCzfN$ZyMw5D{u
zn4}^qUcJw=bc3UGqnb+c8BWZzqtVL9sV{lyG#jW|{jDT<Yhk#`XYQ+sQ&;j5gv`vm
zJ8|LOYu4|%WEyf}Rm6@mlqF8W`XBp?9~I_AS<K)rbUW@C3_NivTf@~?#HcLEEO<%s
z_=0{Ai<$xY9h_sg?rdjF2AK90mOhp~L$SQmP2eCcY=%A%5>d^CEwQC7v9*?Wl#8Lr
zq(E8>KJVMO<I~6iP}$Jk+eLV4ghSm|aqQdF6xC0CO1NPzaZc}Vi$*<8D$JDjc04Ru
z_EH_a8oDNjx$B=XL@ZhTh!xgwj(Jr`U0ussy^yRyfjAClg41<?JY0sry6+>r$C@?-
z40QppmB!^YmfeVPxXN;fdP&x$%GEjhSzVS|rC*_z509B?e@&Z76oFOqj(n;Nmqt5A
z>@$k=Jz_G?)?&1JsU%kZ%(Q1DPXACYVL5D?gi9Ye{sZsOUVO-~h6L{rGdJU7P0gyQ
zlXx|2DhKDhnK%y-;n%qF=`ezntUz>oyi;6qVu?Um@ulyDlz5k~ax?WNStHz16&RU|
z6BWL8a20>x_}&kPcl(OGB;vqu^Vavcpn}yLFZVO^x~({!UUz&%@?c0}gnGN_RD|kx
z_$1sl3==QndXb%#17Y)w%i_%gmJx=J3`WB}nkFsH9hdW>1(Sd_e2g1ZWB_@B&9_8W
z&-7jL#<bjI#Yf}uu^9TYod`bD(t_qeJX!t{&)3?br+0`tx;fg^56SiDj%>mTkqYu6
zo|@x=-oY-&6pvER+*}|Zc=TtCQ-dH7eHp-Wl^BHdm@R<p<7>mXFYqh23=?#A3icZ8
zn}3Thts)y>Mg%c4VfS{3oG|f1ZRkVsB0Bi5GbbZQhZpn!m|*iem6#%<1;BSagz6CQ
z)9bWqUeb!Po;I2?sD`Po%ji@}N>4hXZ#ZiA&}nm=hLt5H1NZ5%L3cLI!5ey~@JF?<
z*LNI8wb<7matSE6_uhnwHNIyOJDA|3?w!^ih)FRJ@27J?Uq=5b%x<#?uh|_*O42E@
z-Wc<hu&%?2`1n_R2YV*)I~HqanjlUkRWt3wD=TCHva$&$DqgG~F6pQ{ub_*&Z$dsB
z1buTK6p9L7Wl9L!$NUvdIk16^c}}1?5o9B2L)0mR#PV1T&dR|quy|z*BKR378kX^f
zevsn*8Xc6DL*4C{pSewF?W?)QZVKB*Rm>O7rsB9+NWCxHy9=eAL$C<Tw`K)`ZOQpd
z&<+l>sLhAmL@3HMpF@OUQ-~k4U96ribss6`UCobw2qzTFqsG$g<-o(TiDn1DJ3WXy
zao;(g{ty$b<WYF;t5133rlkGPi2!JoKwKyheO%<=e{k?30&P!T@*+pKgXhv{VGOz?
zwVwU6Fm>vZ9)c=F5}LkXh8L~T7Vuc#-#zTiU)$l?#udj<oNzabd_5uVqjy;kK0*H!
zXjwt@n<pj3_5jBTRTT4L*9Mj4izG?m54hqBUmDNsKSSg4RQ7I4CQsFhrpo0@baPb8
z^ZyWJ&}s@LzXP^aO8VZbFn5xEx3nJ}s7*Sb8{%|$zeP58ZE)3+>{;Hf=6P`If8dH{
zlvS@o{c4{b%enFyMZt@3@Hp&DGv~qOf(e-qS@^OpC$!6S{l()38KyRJZ&KQmKvUHj
zTA9|dvszSPt`Vilo{OWB4j0qO$bog%_+B`7mQnhCVcv!q9Rp!FQr~(f>o{knT=Xe&
zA6JEsTlokTrvY6QZa8`GdQfG(J{<#2_)yQfR^_0$0?AHTPlJJNnYvimJ1t7=nb00b
z1KSMs->4BjOG$LYM$hmkUT5AEp4OHTWPu(P1KUJ(EedS4&_AM&1VH+d34dg4MzZ=Y
z_#-Aio&%}OP_j|cSQCfM6sog`sHQ0RWk(oiq7Lo-Cz~1c#oxHZ-zdMh?auFNANry#
zj5A>ek%Y}J%1;nDD!x{&aB!`xD%gkUpa+{@0VP)jC8h5B+JimJGa9i})IDn6++lO}
z{o+8FXayO1={p!&jE+B`cS&Ldk7>R%1}}?Kq?f(4-WpKg!>R#ezhO8Yr}9{IM-VV?
zh!5AJvmRljpK==WhT{ozMC`C`*#6Y4Fw<>wSATXv&|=Osx2OVL^6;@^W#H~Ah)WuO
z!Hc+HA*Yz0d+g&pM;-TJJ-+KoiMBJg7-`O8C0QL79q}k0Nja?lIYsLS=y-?u_X~6j
zCDe!G^=8N6Dq{c&#q({O^Fwek(f!F11gOYfh;?WGRx^+nMGgxQLSgRiaQrtqIx`hn
z&}DNb-r=SWHgkzYeNtb2(l<xrx?rMc{l1U0r?^hML4QC)eAyShuLY5*7Bf1Rs5@{A
z`$lGvjyziQkf}O&RO>%(F&YT2MPVJO|89h+FY7G=e>VQBkyqx!R6!G)`be3DNJEo}
z<-&psor;PLEOetP){$4Z^b7mZn%jUx3#=eR{9{vW8cu^>N#p<A$9(dVHIq2PmuvXO
z*BcYM<vDwEB;o>>yk+p6J+2uZxlDQWy%J}&$g3BP&uhb>>2pD>5_a4E>0BACSw;57
zgw6{QO;fDGB*ocqTWHTJNiW~C)8+sxUfkEj>204)*rrp^K1_3EAb802W4h)YA-hiP
z3T%M`b=&#xRGWHMyuR_zU1VRi5I$d)mVhijR7}6WU>{#}e%m7RHY_^7F7!8SBaVxT
zA*ENqN}38;Pxvk8!-CseWRTp_Ou@K7m$3%?Su|6iTfaZh!k|eD9^B5Ua$UUURc4QN
zks@1;3#og(P9N$bwXR#E-mgvP*K>mLx(mYvPsdkHpPFumK`q4TLeTa?FazYPlRYo<
z1uj*xrzwWmluhMW+AZ5ixs`R-_wzWkOb*;Uy82Y?I^SMATA>`f0#=(SNsS-BDQxYa
z{$2KfH^@IO<ngtE0Cj+CAQR(Vj_i#f27ipGz@(p7A?%~P{ap_Bg$O+;7`Xd)5OK0!
zrUa6<#s*lwR&XuPKGPA>o%Cy^;-1B+&1MYC{~f7eZLh^DHaeE65VGEPn#3jKPAcS)
zr9M&p72r2fK)TDtzL1~?MSmD05u5lQu%YqZMHM46F~Edk?H5I5LW4^Vh8`wA+g^h>
z_j?@Yb>N8xrAb_T?}FT(+Kt|Zz0Y;+c%niWmF%pJJ1Kq5OZz|4A7~V*wZywJmC9{V
z8*Z}@1Z#Y=FllR^HxS?2|8ZJ^cF!?kyl`Jtx<Td-W?YrJL2M0bIYIG2x?km)MT1*)
z=Y$W2;?v^&1s=D0rwf}y(AxZXS8Z;vg#_A66fwgulmYm(DBbF1FKjZvNt5v|M_};2
zDB4UY@n0HT*I%6GJA|sR!1ZxOZKSu`ew)}L>~m}_7~;w&pj5KS!d!~4dO7t$-V(i-
z9>o=<?M`^Uv#Fn?tEtmgLm!v^kaGfY{b0T@u`Oyoe7+g&VG0D;GFp0lGpaVQMbpsM
zB#D{J<Lx*Q`{R2dbwnzj!;qwS5pv@e-ri|UyK^w%m*AUpVqte(>TuQ(yIxlvZOrEU
z?ast{w~r$<*q04K85Xnkz4{|ecD<*oJPKB2AGf77PlzfJja_3kbT)_OdQ2{=QSUV1
z9!vebriBFdv$Gt>M!7*IME@tU0q`Qs^`eHc-NS`>Y=gU7SRE#OjpAJp#R*F@RC%YO
zIs;=kR#k%6tc-wGJEEz8QsURgfDiCHK{i(XEW0QgB69apblKOAWB1%3Poj%fR5x9?
zmU92)8KL9--(+E@F3KN5Xb0JFPGitKAYY=3c2qY#IKB#UV6DR#91qB!=%NGlP7ltr
z!k>Ruh~yv}&FK&2umqhJ2%-Q%ssJI*(l2se(8~cT?Jb}czdC*TX6XGdBL5IKfH=|~
zZP{;d=DRN2S-xCs%5<NxKX&_FT!GH&G&$k&fYj|&J7GHrwEkPdZ>39!69#9~$n9b1
zj!>ic@7%woi)X95XQ)4bd0k)VD&^{jCG5xGMwt=-(Du+&iwA!us<(CpaoX~FeLmji
z(5(K7y#C7TFM96pU4rFBdH`l0@dPrx`L<Nf+<0C2GMkA<>DH6Q2&+RrV%s*;L^Tu3
z=|oeO_r=d_4D6q7ngl*9`agKU-8Qh@HlW?Q!rb1<o}IrsJI~nM5!&2Q-P{T8{|@N?
zj<C5cG4P$Q|GUU9C=Go7+TVA&x#4nV+k8dL)SzB6urbhcx;gD)XTjUx$OHy0y2R5b
znWqR!>)v>dje)e&&F?l8@mOX)CL96cW4N42={Tc%J(X^@r8<NqI5=7@^{e-Qc{$u(
z*w&+Env>dVPF2RJsql}N>*_7_g0OCs8xFo@V<@2Ne%I5@W*0jhUM|MWbR4;naLS#Y
z`1ADvu-urr2_Hz96GM(^7a$xZ-;a*SB}^(o^-F|VelF|VbG}C^|K5Xe_WZ+Qf30?B
zR*qcfo=B&O<3=US;`mATo~tw5citq6ZYu)Vj;E2XzZHQz@~-IKb4Dn-)>fR&#D%L1
z<7S|vdN`l%W~6l^sr(Jh%9OL2Ynqx4VnhaUdgPVkH*4I5ZVeO8eL@o~J5~K`qy@?$
zsOoXA>57obaMvkUokVSu7xQYeh>qO0AC_rH`X9-}P+yvzY1&5h;nk*z<v-MMG6Dh>
zmS0QT`PR#)(Nq~`_J4j9jq(snHX@0o)ePk|!@8|Xp^91R5lg>~)1qY<`V6daYN=Oj
z62tTjoWUCU);ai5^Dw$|giXqjXRVMP(WB4B`4(6fto3D|x@rF?sP#-oTL8p(Jcbg3
z26|!FoV4-kHo&S-dJH8AAxCrTY0Q#^*}?tr^B9pLPNUKl!jg6q{{>*StB>Em+`KNJ
zg{&ZmKG4X{ZPvn0WY#W<b~ES%Dh1$G>m*fQcV+Gpxkxf6h8l8!D59VIKxN0dIJyB&
zC=o~d#PSmV3`PHTr!u@l;(N-Q2@!qfLMFX_O4p#<0BIG#Y05ZCO~mQ6iHnxuvWO=;
zZ8d%!^Zg>)E*+j#&-hT`v2;G`qS}==xX<2#^>XywMduK^>$_bW_$Ey<J_qk@u%?R_
zZQnvRY|W-CttpCSHa$rb(LAI*bIpzmoP$qPZ5qnySkYBnj=g2*nk=!iZyE2gs-{(a
zc;8Zv#G!LgW-Wi$QmvB+Bc2iHdmlJq)?CK8bGc#bjoW_io9@gQ4cDPJ(iD9jG?|Yd
z)X9Wrj>|wmaI|v@&Fdx4&K$9N+CQ(=MKw3d^rH9gvg8u_WYT_r%NG89s(h0#X!i`L
zALKE?q%_Goj8TVYeC~oej3t9S8vZ%RmDkI6W*A2Vg>jIu3yNzj=JhBZ_8@DJ*qLUR
zfo(KtgHww>LNnb0zD}$&KKRT+k#cQD*74t}fYJ$0JbBSf4L~W;V=LF~I<H%`R7W~)
zZ=5IV`j-h-;Sjb<HR|scO`ISc_{y!Z>a=BfjwT@lLEV0w)T~wOk>eC39ru3!W#}uJ
z2zRKLz__m9MVr(`Q#ULbPdGkJn(1iH)7v4E&?kJd6}e4ssm&zxTUpz{8BAX>E3$Rk
zfW$s_4dL!A^7Zoo5jTI`@cyaG&&PX5zNB{aPs%|8i3*WVY20@!ljF~CI*~$8{KgKe
z5<pMP4rqO&tF#)DZ<|64)mC}*5DjH+R5T<paWKpRML&?ns=oVzg<(ca_BH0+`ODv)
zX_dtXa1sn}fmNdURE+joBc~`X0M%0uw)8LCAkxP>2`<?HJf@$ij$~;2HP>WHDHNi-
ziI->@*+19g_(XjCxgf$B1o@A*^?$z>N0ALV@NcP7NOJvz8Vo*FV4viLdMGjN_(ux2
zQqkx{Q01Q%i%8wfLo)HZq?2K*^-+fdcl3#yA<oytz@e3jmp_-mrSOBWT(CZOvSh1~
znbU-%A_DXM3X5L-PZW9o%S^=|hQccd_<i|Ks6AfX8<C=)V`0skkx_`H_Q;6})AUIz
zdu1|+g(uK8Mi3J34A6@PW%b*j<1yF)!`~IYLVP+isgiF@;x+zyU#-6Rnw4unT9zd~
zzPSIr%3o^5WRxng@x#Bj{gwV*Ls3||vY0Fj08%31_6!+aKH@H1!JB!HQFVFzLH3Dm
zWF4WwMVLLaf>^Esj&F@O^90-3ybmzgpox^Jw-)8y325yB4EkrDz&h&;XK0?nfaMOr
z^ag^Mi(g=3eFP=0MkF$C&g&B%9=9R3n~qe0#}~1oc355&hywjai6a|u*bl3k5AA*=
z>L<`h8m;Mcx>1aVYe*VGx>S8QbT`5btuf(@o9jpoKdF4+PpWbwjP*;cqOm^-Y!K2-
zzK7FI4rd(h!J!k<tyo3E_UQ0qR6l`5YSrrizlI;|U&JWJ*;81aR=qx)gBw30-HHt)
zCy$Qb#hOy{|Domg?m2`%$2E8wXy@^d^bg+l-;U*<#DD*ye^HfHqZku5khX4wxmxA_
zO3_>80~j&aki>3;|1_nz5k_d0_hU?0MfwkE!~C&7I{gW>+N*G5;NAHdOsrkZyMfn|
z3;@!;&=_b@@i(ywGKN~+0AA4^1R!amX$1hKK;Z_#BO5A^1fKCFN6w_3@`or%4Gmk?
zk`KMbI!0_6rQ4%HI5)E%r#@?9w(<HoA%?IeMN)gA1j%At)fLR)2F9^NbPOy=NYzyB
z8CA)l^tidV!`*|@2g6@{G%#6_2&%`<tRU4;wrFy+^3phiXp<ZIqzOsmX=fWc70PUU
zXmM>}kkqI<(LZVJVyfN2OZ0c4ht<z(l&N-2mD$wNDB#)zIi!<j(314xv4E*@Oy>vA
z<R0eqj(2FQU!I&5ualInlQy7?jh!)Z-kAjP8{a5^tjtgzVXjUp!9R*AQGkS17>ZJT
zC9PL{i?olNzIc>O8!*P{?Gb=v4P72tJ>$s3(n_LVB9J$Oijiz^BJ|ARCzYf8R~k<>
z`g)Kx^h_Ga``=J{(S|^(x|dtnz(wH%%@8{z1uN1)uoy{IhrY!QTog}O2(cqjup%F{
z{9lN!#Koqv2|KX4ixLSt=v%HcKrK+n8L#pL;Z%fhnoQ^!FOU~4a#|#p2ES!FMw+4$
zM&~o0sQZiYOraW+mxq6v5`;RDk6XQ-j}&c+HRZrK6bCN7tNHU{T2aPO?lRfX_gswn
zcN8%)n*>ELEFmE@WI1u~PF^AqPacy`vjZR#3)?U*)m}^;3!m~U9~I!g%Q=4x9Z|c-
z6JgCLZx}h&l%z!4&US#Kan7;B!SegOGNM4b8Mom<wIGrgBl8Q|1&aOoiv49u)Q10x
znIg<8F!q%Z=Qg{$lo2KR!*yR22PSb%f5rVd6E>6Eha^j4?g`}(|Em$=KMO#Ey_Jt)
zECerwJIi@RGO{i5Q;g<aBbU38j{!IK1NbpFe^roR8-6K&-b80yhWH;GU^_Wwa7xf8
z`BECK>+hU$#PfC?8CN#-xTHfzE6o|vHl>d;=;{ZDL$&IJQ0jEdglFSs)!0ooe+{rF
z{Lx(&Z8!s0x$i%F8T<=;H|bbe)$6v{ybOsM<-HrqPR|fc-Vo7JJsXOr^~%M>I4aRd
z(H2pCc|bqMLOmiH^<c!2T)*>wrPDco>j0+bg{!<j`~FTz@~fKEPP&vIn6Lz-d(f0l
z|A|i7uwvOO)x&-e{^^3gLggOBd|-iXlkQ+tIvM&eD4TIkFWqEvAbz#{M{M(9;Yf`_
zW+bpEPV41FYhDBFm7Kg`1wV_^nwNHucFN~s2{d5|qy=QLNkpnnn)ZyAanNC)-)L}}
z^ZMYUWsCEe*W~_r<7M1ADt(iJAi%n2^5$VUAS>mB74YXp9pgMVY8(<EI4!@Ow>*P+
zEPkqksVnYOE_j(&xE#JWB=1RGeEq`wk#{nku^iDdAl%~t1JmvZYghDEHsM$pY;=Rp
zq!e0tZgfoW5E(_*MzT9ws1_qTm#7v)J2R*j@k-Y+T+-1<xC79p9!NYvUmSpwB~(+P
ziW&dbj7MTDQT<mY9HWJ5{GZId?)0eI^EWTqZ8z|`*Jku2!BB<-kno>0;-OXvp#R8t
z%uw#ZO@0>fETt}eB~N)@gjW87#Yinhs=!oOC<|ugdfF>9M^Gu+v^@ncT_x-dqpdM1
z!@;IB>y)A7DvvTK!GGmEHFSFs+*bBU)WN;X5`coY219=1H&wa4!7ko!7%-83xc({k
z3YE`<hif7Dn5F~$ZWTdNFM%?Y2=3G_(4`38FqF4}E%|;ZG%`+ih5UZ2g*jMx;Klvk
zgK=z&p+6YV9nLr2h{GE0BoR;kxYR}WI>}edYO5{9-cS6A&@DV;P5*^)hjl9#JjMdG
zK((l4Un5@V_%73qxx;eP3l&h9N{MOG%qxz64*RBDlLw^7vMl;@5?N-;qhD(`U`&O0
zNgfhw0i1a!i>_#s@Ylt$+jAQ-SmN_7KjG2vG&!NAbaHSKmJs`r_PS*DnMKC_pe6Cc
zg2>myoarlh3-`iWzR7uFb4#?^Z^8d7nX*u}#MBSRy&eh6GBKMLP67DhSp0mYq{BJ&
zZF%jBw&TGLZNids0PTkw<@Kga!R`amB5`pU{Ygf=OR_M>N^!ObkJMO!t~I_0j}QeU
zg+pp(_pr-5WVKO|mV){p`d>}NI*jjXt{tG&>wF21w>aP778<E44V6wu0u;2^U}3Y?
z2eWdPl?tyh_xQw+DS)d=R5zH2{DFRQIscyOkt4DL|0{!o=#-=P&*omY>uILqneD(E
z<v*l&9U_)2z7ea;!<b9R)!jBMe!)L0SdT?A;_>LblWzcHgGo2?WZ-_{C-P~?dF*&X
zmS>nLucD=6B;NFs12$t3&iY|o4gGjogoyut@`vxDB`KzCfUm~DDe0QjP*v7(^EZE1
zEWT7L3G}1+UO4Kz9u_LEc4AV*0wo~DCad!@mg?DE>qn=Aq~B89l}>T2qv@Oc94p%5
z5u`gC{Z*p5aH>1SZ0@!Qpe5COP@E;zoL?B<&B-oz%dDBl&D%i+v8g;QGw*DthO25o
zn@bgnTx$fSuJ{zYvZcrrJEo<`_#YXuaaByq|JY1>g9egLH-`?Yg0-(IhKQZ!x)|JN
zjnJA7^pp7hya*{#Vw{9DOTjiqzXS8okf6<|SFq?CVb+oK$)h=7iL}*UfU%z8hEI{2
zij>HDoTgu~k~+qHw0cLpAwXeh_P!*-16J+)#Y!%JHz*C4FKZlW%m)j_^w`t$<%3&d
zVu`k}^@kR7QNaA@i4lxf{z=kx!F}~Lw0=l>U{^-_nk-YAy>EGEbi8#8#WWa9CA=5<
zM#jNoL0FdR<9}!_Kg^uAC6$*0BTGy-Xy)s~*vtNot~=>0j)X6`+VU`3?erWr*Jt3=
zo&S09N#MyX2Jpx|Uj82$+aiDgXBe%B8Fqqd=#PW?VcAI)ESG|UmoiU35VZIGYF5Tw
z<O?3@c9zC)BzECuX!s6!q-1k|7lLXvX?sV2!UdFZ1lYzj@8!9KoOG51r69XOd0D(c
zY7s6YssiM#|E(BmN24H1F<2zZl}J^9v84=5mrPI!ElF6X$uoeU-KON%E=|Qw`;d5y
z;t_a&NWzGyd{0xdWl}q-yZmS*_D~v-m3UH(;Z+=DTN;!#HP(u{VZ!$Clb%%Ld#QGf
zn%`)k2$Zb-ABpi_`{Iih;)|N%au(uq++#EP;uDu&@kEo;uE?k!39Ayn&acKV%SPLV
zrD;OCAem_mDs<InEBPoP*V=x+-DWy)R+3qBJ<w9G%r&A!c+zp`yZq(uTDu1K)H{a=
zr)0~ZR;%<gc;jH@2L{!l9`gou`u~+E%)?)^A@VOq)d87yJ{2p{L`<_9xTHSLTnb`Q
zb%3FrPsBQWdE*t~=+L&W5B(|NS`Y9k=z0x$77DxyrvmF+htn)1k3NnEa?=`M_GdO^
zGq=*WJTSE%eO`_G49c;NGN#B&S56DzK+>Cg+LuXmz8_0vGpu;ky)j?#@I;^l@5#Bf
z?B@AAY&}=SxApmLi5cS6(!6ubW=x>c^Tf6NL~w&B-w2QveFoO+{_EAm-6G|Pd7nn@
zN{|JrSK{ORwM6vB<ph*&6U#uZ(5S3Y06=Jzp{u&KxV>98b@n}gC#6?*9<Rkufj+`q
zUu|M`>aBQPRmslW)Om*vGktyan};TdX9m4snS+W@BKFFzH%_zNsA;qM0G>|<{~}I2
zug@erg?i(xuD}*{MByL&r)G`U-LU)leDi%mcFTS|;O5Ck$k$8t9tGJ%V>h>BPj0{W
zaXqNrox_y{`cVtD)!H8QF@62OKixBC?+|`!A$C<x(7T^XfMw82{MJ_iRk1b$XwH-8
zIThc!EIVq6Qvxl?MbfWQARmrUn~v(?EWyA<6Me*yWpxW27UxPSe1kIeMM1*+mKJ3z
zy(7c3kWzO>jjGY>B-}2@hH-L@szCUjmWZ<sY3hsZWeL?Al%6j+$u%cXMZnaz%JKO#
zUhx~bgp{4g$q3bY?8CkdC%nV)X3yb+%sGUBe=*}7#X-AF&_A~tqWpDF@2_o!@B9K^
z-k6g%BbT?ARA7GYu&5wZZQrlJSoY!2$0`kCJHh_BU4%%T@?61|pJqg&=eCfO1ZyXE
z-9tG&I_%Gjw4%A~O>C}b@TnI$?{zEur&_)12>IN`awYCFWDD1*+;}62z2Tpp;_VXT
zi#)$`pE!ztCn{%BlwI|7I@}M&rh#!^EzthqPZWFAGC=Jp-ft2>Q>m)V68u4<D11Hj
zayP!buK=GZDTt6j=%XoFImqf&r`2nv$M78vp|`entlcN|)ZN0YBNpIocV%`ZZ+ERW
zT#+*C0#vCQ+4|VWu-jTQKJtXbyEa}mAE6REuX3N>T-g={W%^(OuPOW2ZNDYtOoD?}
zztE$XxGhg0!IR)4^7Qh<U?p<;YFw*42MKKfpxj4NN4Lj5+95y{noX`y?Q`I?&)~<b
zn&3OGC*)cW9Z8eqm{z8YVKk&Q+`)4u_@wO$_+9w$&5tk4(8AY0I>_pSclbpgC%NjQ
z*?7of2S=`QDrTY)^jJuA;T8o&Cbpiiq!1h>wDwz7y=8$U_NQi%5L!YEQ|1r&nRrL*
z%aeN_NY@Y9bg_$K15g;n-`BJ|fPi-44UKMtc+V>vG^GqfnWyRfKJ}8_Rn{7gBS9pP
z*Tf~s?MQ<60k?1C$0tt60;94u<WZ$nx-Y``V?qQhTtCDJB7R^x%HIJ|JMhfEFDOi~
z3J;bmOrTCCM5Pi-$XM^DPBQ4t9RF}Ed{muLSR7`E7Tbb$STc$OC%Ga93n~VQG<t;e
zuV?tX2OW*3bo6Uet7+;)xi>ur<u$s(kd4LWX}D^qN`0bu1c27mse8JGj=O3zsSQK6
zi!yM=0*NW8MxQ?>Z*c@cxhACaiV+n%h7zQ#acS2#w<A}ltX&VEAXhK+l(xQBthu(c
z7rxGE60y-DM%!oHV~($0(>9dloO@#z7GfY%((s{?^h4%$STOSZeNUulUVYSf9m}3c
z#GQXx=ostS2l3^R5E}C0#T|=?D?a;cW@jSuMAjd+;&Ve<6E!R7l&O_*#M>Yv3cd*A
zk2R9(CzRq7>zjn+=9d8?_ZjOET3!8Y-S1#?o5u6Q6Y0<hs9N;>>(?Jy60vG4fZ}DP
zk8gCVufS3IIRn+{A!Nj4A!=5ekh_kOE!$dyGS$JUu!dCs*dbi%tk`1QfsuD&>8^pS
z8R;5?_4iaqPvqh^>FB8T*RdT<D_6ly0)^J3!u9v^;)Te|k9CWW4ei{^gBb$fGu-EL
zdLp(zCU~<(vxwilzVQmbdKv_;me>P&GOm7dvOp@4CkmN`KdKS1Cwgs>?5yz$U*g5n
zx^HOH%v0DbjMKT0YEFd4O-f+&k^?h<q*|TE$_OorHGX3FON53?10_yLReXxp)6ntw
zqJ*v^{FpSz)iosrlNpJpx?i7>fjRz@ag~2ca`JnGefis_<DGOeZ#{u4W`ZQ_^5HL9
z4tm&(6~)xU>#wV4yXp8zGn-2XsEt{Y*>a$;(T7cuPaUFMB#n%#9YhLUCBk|e$JfQd
z6JatN*RZsX!5g*EN?zkr(rV5wy54{m3bOJ?RW|evI&qe8laM;C^+SqvOX8?=rc?G5
z?fs6jCEun9!_R1}L($1witCnWmEY#{Fwwi`&N(~Z<uIMY4nMqP6&M~)V%~=`ZVA&s
z)9b$PLDi{LQT7dX>!-aA!@tpZ5)>aa-fEknUX)8{{!&7T1}gL4-@PTs9tb)RB{wCU
zjde6EfU1g*JlG`TY3P?dj>}l4_(>S5;=>P=-#gjGCejQ@GE~KdM{JUjH}s1$RK<pW
z+I&Tz5*Mj8`~%~LdqCT8CA0K#X)I~JiUhfHq3ki?%N75ztJ5;TP0-5dnlC4K%XjP}
z_>3kC_r!CH>npNj40}fz?-@!{C35cS71&P?-Z0{yXw}|3j!N;{pD2{RcGu`vXJAPT
zm%e0385GO6i_OzAEJ9>arobB%3$lyNp`$8KKvsDl<d%e-$JL2<#ZQElA5-LENP}a(
zD41`T6Nm(+ZZ>g6Gy}?sAYhnu9`##*<wJn5j3GUNMhQ#$Bbj|(T!Z3(R*|VOT&hN(
zF-_w58HC1xRMqT`VI|pH<$$2Degm<vE1p+Mq)2w{vKIuaZ>j+9!r1olJ&T6SI2xrG
z87gr-T87MOW7IVL2H0=ajBXUI*gRl$H&Wm>(Sm+$7AEH$h-OKP*e1)xiWx^7D~$X}
z8~RNdSW?5mG_7H*40=g5dqI*VMGiD>$vs#iZi`1X5@j{P21f>kEGlSkY=9m<W<}w)
zl!w%T-f7Ey7~y8e^+9_i#miw&qTrX|clZz@dkC70mVE?GMDzbN?2pQ_wBz|CmUl(T
z=3@mUo_7s*FW&A+<UaX`AFuXv!+M*~l<tdd@5w~Y1aI&W)|T%__Ga{+rP|(Xit_U#
z91;mi1aH}0G!R-gj%}ZfDREAjal&bM&=Hiq6PUlqmHBDD3)k#Qq<Pis7X0`S`s;1^
zAC)y|$4yYDrX-6?@WH6rlPLLZpftrlE4f}j2f=0f7S8f+97sZRH=a%M)vV3pSgQF}
z>cUvUM8{!U%tWWAme8_cEQ}=MW;~R{^JYAlM0-<yDLuQ9OUTjQZ*LoB>N|piVyG<5
zct6A2Dx}B*Ve%&A;4PzzH3^bHQ0`05S@0phj{9k{xPdPsZ`dMnYqE@7<A?+XqZVdQ
zrw*<RoZM~OQ}&LoR*p}$xp}lyOoE*s8@uL@oRA&9&3Iu~;_%FC9({Dau4=lUT@vY7
zEI&LVcDm;I2`6TrretmH;j;Nz6@n)7`w6QjFG`MQeM*k%@U*!e8mG!VMsRU%y4hKx
zHMzd3aCe{m+H*%Rm(n&*Uq#>K7_-FPZ$)HShgzixH<y=t@I%3Am#WDjLAwgpX}8=t
zpQeI!ekOYXpxe-$MEz2C+yR55i+;0HbAZHh%XMA6#E5ru=zLyR2=Pfe_G+XM)-z2#
zRQZTM(TX(7ij;&e>m!BY={)VGESwu(uujI!E|$lHpNUQ<Bjby==7~6oJVhG}3JMEj
zq%AnkiCx-THfmg^!vVe0kdYY$KUfB(fNZP`dc9`Dvx5=z!?T?cZN}f=QocscnOE1C
zc`wCl;HMbjS3jg`czvgvNCs2hF1oh-=+lY5o0PACb2`S~Op*`rj4kwoR2L`u4n~-o
zSci|0t9iP9qYROAdCWW|LibT8Z-%8y7->>`2i;u#+Cr7wbq&y588bA9P_JU=v}Cp<
zKSZjGq$*dx`CyqC3dN$4Bs`rLAo&Gy-jYn$Nc51=s>~RU9kwl4cnDZfTW-PB2~{;>
zG(uz4T3r9s#$OU>8pKnFmcA5|Tm!SW{cY0p^o-0|AJM7nnDzX8coE>#7BaS1!Oc4I
zu@`Q<0Kd@uGGg600m*kIoFf%ALo%8b(ZvY1e0WQxSbpze(MIxQCkQ$bvYci|CC?k5
z^5p!RH+})L{nXL)kcWWbFnL4+#|ciMxFW*ix4ntvrfGk-hWnDzI~CQI5O)_pFwoEO
zDqmGZ8;ieXHDDvxxsyBo%woVr-iUXKNUmetP22V`jU?VY9D?QR`9Laf>$r+~6xTEt
ztKC7w4BNJy+5vBEz9eKr;z<_3y1W_jR)JByBk^QdZKv+pbR{rOZRa{)_2H~ZQH)^Z
zE2-os(f4fQwx90@UUAoC0eCy+`fMZ)Ez0|B`!?z~Y{eI_A2M*vW|k+6rrxkrzh?=A
zuR<3x3C*q+9l;{op^LQ(yq`Y0gizysS@sy!E_K1?P1MIu)+7E!nV=>MWR9y9{n&l{
ze*JpW`vZ=_`Rh}cv*`U?f>&fl#q!zw-GWLXun$r-3HGA2ru3uX>|?5L!WOo8$YkGy
zY}vJ`ld|?m-bQkESxjuok!kZ&McCys4e=_p@6eyQ>nB;QZJY}XRV%ai_3QBU>qt4e
zsWxS%i@Zn!U!0`mminI275Rti6P(jEL>BmccaHjxjiBv8IY*?~mO##F3&ZTK(o34V
zE`#1m@E_hhZUSR`S=cspqUMi36VqIfcDe9lh@V%UvXBO(GH<?5?%fa_8TYy#;5kbh
z`+l}NhPHX0qj|cR!4m!dc>4;lIFfbk5P=A;!8N#R@B|xVfZ!V3CU|g9(7_!BcMA~Q
z-5r7i2oT)eUH*Y2dv?$6o_p@S=l;)A)V%Xnb#-+$-SyQcH74v7hm^s=mOS)^VPBU+
zzB)paXJ#jM3V#zPfnoR18`1)+PTtK8g7`f(Xgan<QZac3P1}`lc2k1K6Yl*9+8%4*
z9gh^|NEh>t`i^%ERxfyxR=&Owl;j4o`s2}02=R4Vdafd$F?Im#uPHlxdEC6mfOkQi
zFwljO$s$|BRl=b`!*#+TlCVdosk7^E+mRGTk6j<13<HE+I}T>9UC*;S1?QJL2~Wq(
z-MC%k7nu@ojw_(0%YNlH*S6<rp;!*rlQU9otowdoKU&lZ%CRo_M|D)tEk2AM2PQMI
ze#D&>ImMcKIB3C=Ed9uZdQ}bt+Xs_CUD0g%<^B)rQ!?EY;uaC2-TBr|=?V>g+ktqk
z@+a$gtAsU_?Zxp&BAuMwqF-E>&7fOJ{fZxP(1^Jg+$;on2o1>udUwo0w~>)<mWOU|
z05c)?+wLCl5Gu4t6-KrCv>yvW4=k+|;G16?Hf0yo_U`@gSFuO9zO0y?e0YQD>|TsB
z+Svh(j&!|^js(_Wzb8i8Pq{}g5PB(M{!ypU9bxmgjW(v<AY$yt&Ca-MVxOw*x?OYc
z(mZg3tKXjaaC1{xgSMKv?zVH%uvx0NGXf)wg7Q!XMPKBVj9%DlSbcQthcd{IU|?P&
zzlMnsRuu^q3n@o`h=)DNT$&N_R&^-CTlV9thhdxPPg34I@oTt{ny|XQaoXk_;I#X`
z5?_{Bqt0+*7Ms&GeQ|IV!OBT=0BM(E4ouL);qGF!4FlyN$c-7~Hl0AC^IRiHJ|xqY
zY6w0alOcb$z|~`5S+kU1Nw_$EGkdVm(Z1Ejw`V;Cvlh(V$@C5rP+Nw#cWjkzWtslW
zB7L$aw5Jbc!zoD7m{T=>Nwhecv{NGpXM<BVZ;7%fDy@|-2-WzTRc`UhsNO(+ccNM}
zZw0lJndI@*r_CyxZ``@XcA15C1X??J-P1A6(^W}z1=LQOPn~99j_dn3T@=1u$c|qe
zmz>xb?9{~leVLPI-451qJ>GHs^d|HXJ;B%88UA+RShDhcV6*{}??$I~ty6w!K0Y*7
zoKc`Jq1h8vA4TUvr*^JdepqI*X8a9WAY47tsaYT$1ykO6PfhOw9djclww6D9q42i8
z|5OiVRW#ju2DL?v^3GV3P^WJsC&hm(kTVGlE)nMI#ylfd)59<C^!cqy2PTUbodKpA
zP@x<`Wx{kYuJft54XEuO(}pP*NoVj>t(T`9^2vnGtQ?a=%|9-`t*>Nf=^N7iX2Ht0
zf~FG9U_&>(DTaNdM3+EAH{OA3$HXhAHY=VDWBbvQtKpLRtbG;fITg*8l6r4L7o>r6
zg2X*Go&{t3_LKd9f;klR7Sc*@fCWPEEDk{v8;`rO{ll@{$Dg4E2b%T|Pj(+~&!J2~
z>-YdHkb<>b2%30#pcBUL3IK1(3bG~kFrxNscu*Io-Bx5O@g(iJpO{n3ZIRU`cvgh(
z+M-ThOFz*BHe($;4p>1^?jvQ4@RTN<^QT6emTKN0b5=ribva~UW7xf-IV3EA58JgR
zDAI)n=RBE-2bd8&F~7<3oDps|KbJ<mhC{tZf3ia|_khefY>g(WCpF2~jAF@O>?|g|
zHX$NOtXq@x$9a>wSXd)&&mKBZh9};P1>i4BCYkF9*-Z-BJ?_*DQY5dfW1j0!Aa}Mx
zt>=8gALE$>Z04YtD+q=5*A?qYgTE)gXfq+%oL%T{oam_}*`*n(E60-tU(W&ZpI4?t
ze)%9&8c6i>>kSqv^l~P}et+>d6#q03&<Zy`x0n6LdUu2LKP2ns6WFfV=HBA17+A!s
z3EZ~qaeLv%H#*H&;k#{Q&P-1<^F*%acj*EeC+*=#nV#<GuuivJXiY-zf!L`IYCXi0
zf&2~z!7gy(1gsbp#-=sB3xdt%#K~L!^+k{q2Y$(jF(R$$O%SXg4Vo(@z#|0@!TUYy
z^X@^d+b=i%o`l_@+LQoqZ8B$^CrKjBSfRVZWX>p0G=+Y`!5fR_NlsP#1tXh)w69D-
ziXEb-%Vd}2e;m5o9z*|KesmsCkwuN>+UpjwtNXG&I0txYOji5W+OIY%@;Py=KVFs4
z>U-D2f@cs1PoH##@Mj<e4kLwzFPWRAIfgG)$NN;8(c`F8+cl7pR8_mrq7>f;X2A6%
zGLH>CD=5CkaV(jJb5Ysxxqkj(j0xFX3weexfH)7SEiMnK#bOlDl^FF_r*g^DzBARo
zgO;6XT9$UZ;&dD**FXB(Q^Z`cc?X-M+7xKpIXvR3Y%(<GRXV{U{DfJVikhs$IFEBj
zmC20ygl+QQ9$t;+zLOB5!I^O|mfVBb#M>+LP@#v>@8>X(rtZAJJL3p{bh*fV)+HSq
zE23F8!g#*sZr)Xri8AztT!ddY`N_$?{&qrlU2Jz<PFEdgmPW|jD!11ds!b)uz&o2(
zG}X6z5yuew5T~Q$<4SvFC-;I4f5S?<0Z?Eo=~T<Nsg{*8yG5Jr?+a5k%{Qh41D7`o
zNzesIb?xirL{clC(5fDLbdrMNQ?K5u&|aI+va`iaCB1cxiEUkRLK%-uf4ylLg2<A^
z3D$ke1o(FXu)LD6_zJjUNfYROU!?o}2$V3p<THJ5lWAI||JA3no00sUhU@QY4gN8D
zFUGF1$HH3K9#(l11s6AE@Xhk^cV<Xg<qWH@vqnQG-&y%`k|^PjFq|t1#>~g}&RxS&
z-;DO7xg=#V$8?oRF}I1qO@0aO+_9?k!ic<4#X0*vhcq>W#52HWW=c_U9L4o^*~0(i
zy+5F`jdW@r#RdZq-d`N-5XabKkK&<x24ki8fs>{&9s~KSeJg>s%Cj;VEQIk6oTrkk
z%P1!9nMU;CLeF^oql~;p?WM^5Rt8}iphAnVl(B!bUXGE^@#=@5RnO=_?6+SqzVAM*
zPJ?qy#nNaqUd2CKq&*boKkT?y8}!lsfd}JrK}K|Q9mo`wcaI*EH^2_BUH3lUV!dQ5
z8E|=nYHBBkmfyfO-h1uzVbXhi7KbQ<ITq)jZxD~F)B6XEgwKrho)vla(CYj5gwj9+
zAK+oke`CICCa+8VFqvZ?oW{bl5zVPO?kRXpW-rpF@;Oat*>A=oF@K&!Q*+*EexA9(
zil1S@@6b1Q$~(>`cuMwc48x(B!cE^;g~F_>k0gM<>N~edwCs6|@dK0BX2W&G;Iu)9
zVHf5OYyMAjFr00N$vnEB`lF7KHOCrT-n-|J6KL0AzFUwnnB=1UMh`qvc8fov*iAo#
ztd}@HMbOJx14Rua6OWC757-Rqe1WVsS2byCq%qyS&dsa}1`xg|faGxH*4q1|HMFV(
z?CQqDjLXm}POW_lPV>XJ!~-z`Q!^Vw9q{;Cwup?}a1q1;x@L%!JI})RLxHmP+vw$v
z`sDUO=!vBILDp0UORx1mPUX<fUr3yCeH1ATJ37iUkILxAboR*?6+#UwLZBKC!dD+V
z8E=8FQ-JOD-4EatBaaDRq6)&PTE=G{yyUfgKVfzW4R?rsfo_#J)k{mjm=wt$BVmzP
z;1<of+*9eEYhmR=5TzkBUDDohc10_J@+xGbrX56#trvt8+oMNS;`~8nx`lR!>88oS
ztc$ew0MJ{Zaw8|jc+<9zc)fffyWINNf$_Y6*$?Q)bYKIoqfZ408G8OKOJ&Iu@=|Jp
z{K4Ued%Q%*!~O-Df`o?)JXd>M<Iy_xq5SQm(K8)<FOXW<LnL&QmNyI+2Z|6>*yq6`
z%G<%FBv`HNkxIHqJwxN9gC{<wXmK6PgjrgGF#P~cIZe`I)DFoCV8BsN?YL|VHty`k
z{^|^ftZh21W0mM5wTYF&dJnfkGjrF_n|3vv6sFi@s@N1x)mfENA)2beAyxVco{sYa
zBM+=yl8N~jrGie@uK?D~J*xrqTA78`Ei|jdEUN-6YXUT)Yw)t?$O)@fTrxaVF5rl1
zQSlj~j0LeZds(i;i2h`TzI29sq6`+%HNnHofi=m!^h4qvwW$Ua`?!O8QvSk#R!Yu9
zDU4*fN2~HMTnZn4gI^1xjxr1AaDg?e@{_c2zzw>Y*!l_+%$8M!xHSbBM}-d>7|BYH
zR)0dU)We4NXT0jJ4AC<bwnO>lDu@>Na8*I_qr;Vn)=@s3GbsIb5eNDf^+2hfdFPIo
zn(Q0wOdo?HL7avY2At;NS-KfRMaL@iv9`+eF^Et&Sj3mEi(mTuy~<)F5@v(C$js9(
z755MG@43*t`U7N4Da|l{w5kSkuK1xIBl*7p-{AU1z9SuGEh}21Df3m%W@j6$03Ol}
z3Y!u~4d0&Y1D6bRPm5mkSgvPDb5_0Wc$Vr3J^RmkTbyYd1!$R7zP5E=t)niP9Z8Hv
z`=K7ugny!6aM}|^wp>>|OY7!K|J>qe(kNomTrnO%cZ#SM3MP}0mNclkdn`@~xQm|E
z>^*R8l|IF8&_O!ZNwUtpP$6i1ojwl+$_A4>h|zMDDY3-kWR~HD!LRCED0Pm?Ql5Bo
zkNc@5j<Cfne1Gc0hB>_c1@}ueo8sEX$97*IF-z9D=MoLe2VH%_f^}w=JL-{T`#|)W
z*mGm{W%hKVWW)l}l)&?fJ&NmQ{7VEXyLb1=DH%y&i?T_=*`CQ86?T(tnMIw<Y6$Uh
zW_<>y;mZ3;wPF+)`#S5q$z63)=D>6+W0xJ%h~iW=w0^B*4L~}4*de#2U;+H<=&|r=
z6zhuV!{oyFCxlkq=blZ^-Baw*S{U)nwI5EmbMGUWlJ&^gW2Nm8Om{pFXoGw1vj@4i
zOb}QF(A^#+_qZI%)S~8VX9adpSnpud@-JP7=1$N;$GkVvYXXaQMVk*(ix^Ya*B*Eg
z7F36>sf|7V`uJT>(S4etr<xLiYX0Vhh#N&PxJ6H9bXdw~xlM#g!a@Q}MVo9xhH*Ia
zw_52p+mTLD_~#5S-8GBgoQjYxEbqaE`mv@jg!B$0E<6r`j(BG?lhAeb>dPLy_zywq
z@j?XqmQUHy8-s=^!w|PpX}{7pc`>gInaz@S@4=agVda0SKSEh68buY%E0f&H3yy_V
z-T=dlR;LCZG06dpdF3=W7V`LsV^xyS)AElp#?H}KOdB1NmTLzrroEjTP*zNP9pVb7
z<;hj!em(uAuq?Ha*wfwc<}NS{sdO3w+@%0GYaxo-fc{nY&#T@_U*2BpZGB8!^-|iy
zaZE!xPfe;d*$RfS$A7Q~3#-lOtwlNA$_U?~_WWbT9-@d2`gEI7t<MP)tnS{&-i(-O
z^Q(|0{%L>8v2&En&SaZU5u?E>N$n1q{wRYdS8+{aN!=x*G5g*&QTC1JG4}0TaY-P=
z<!+u0EQrsU)^r8)jvAIWQ`D>kZJUy^w>_B_r=r#i#W~}%TpPOjCa$~=Sd&(AXaBx&
z_nkrvUr_<(a^gpmMGt0lDQvYl5Ia8{C0F*uLdTp`Zdtix5qpCPx**?pQa@^m>d*;*
znT$`+C!S%5a?NczVhmTkq7=Tzp%->U-reMEQ0K+SKWuvG+h74$ZljCtn78$hs3gRY
zn3C?kvgCh;ed6Egckwm7eM|Q$8NM~6%foVwnJUN`#Zt%9KEzBT$?Td8EiH1y7%CZl
zO-&jeQ-;sJq^+-6{eBWVzg9qSp6heHo>Jqu`kA0Q*JpbjMY{7F>t=@gl>m<ytn*dr
zr4(z#!dkipS5CCldPcb8e-=h)aAo*Qt)<FUuSU@SGeq@Yweeqb*X({^Er!H9L?<-}
zqL~h4uG+sMCfyNoP*<O=Ray;8T)ohAT>U^`>Enuh*5^aQ5u>y8zB;+XIy&C88aGs_
zU@Vf#x>C@(f;TgIu_E*MIXOqHx31siS5^<HiV(yq(QQUyKCct%XiJHLq0s5CDvlBK
zv`*l1YZj#My=h<2B8cDfT=k~a(lAi%l<;{U99RwYsCVB-$)b%=icr|Uhu<p!cQDjc
zYt6{;XQ*z?h;`M2=EBiux?gz~5-&Nh4`ER;=*n0&iRxG)w?ec&%jLvkAC(4ZwuK4!
zh^Gi{r9l&a#+M|-L1;?2OOc3!p`X8e<gq3~!tWGpuxuM5)=`@)JRH)kEmGNk%G)jx
zya&aH&l&FE7bTuUbR_(?w#{vA+Y`nbC&+i+-faQ{JEW2tAE@|kvaQX2!WicS>ErEP
zCNQu<vMTba8gEhG)TTdX#Bzf8^Y*q8EbBmNKz@+Vn+Hf~<m1;d|6u>7@^5rD!r;Tc
z!TSTLFU~u^z0*7tbc1hvRr~SvbNF)8NK-ZaNkt#+m($IUYXj{VQPXzmMHYB#k;)Nl
zX!#mn26Q}h2K%a?kO8A+atO7bX3pyZTY#Jz30?!coCdl<wK@IzXOEVDycD}kY^ds+
znd^f9?w29h!#x3O`t66zx{fhSb-fS`10VxSX7s<L6D^qrDj|mIy)5+0*jNVv{%K#+
ze!~v!Z9EG)f2#7op<@NFKP5D&ERUdGdRx5=er7RW%#-}KNuhG?BXru@O+$xyXo*0q
z9u1ee6Fza%a8@UaG@D$iA{XjyjTaWznJ2gy;S;|fB1iDPTTsd&k0(hnQJQ8TD{^I6
z74s@0n{zP;Pz&HP$-BJD4J7>(mj+sNF(uj2Q)rhtls!za>RE&dik*QFgn;mf3m}<d
z41m_H%mO`3KoN5gPi|k^J`NzL7(zWLO(#8P6xuA4y2*cqH7v6~bhEE1aszjB6s}mm
zuX%$}oO7ybN?tzbom)7@@Fq(_t!*d##>1^ltu6f!T6NeS(^2H+#pcX~QlZQI+D-m|
zRN?-&s<WE~L%`g(oOAO;{76H<+0E|e!<z&{fIlDiiEq(<;pr=aWfTtkRy#)ghYllF
zI+>j<MM#}36VL2XO!rVHQh2$NNx3W?gq4}ZA2X@aVvx33?$s!he14oXPX0M2*7tkn
z3XlPuoRgmuN6BKtafCcH;(r6ooW9I@EH}YR;w=FunfPgdhrPz@`m&0>LNjmhxLE>!
zBG`<-<jU_jZgR&gY4qCGr-o}}=Syx&BO(j8$$H4Rww;d^zB>NS`gr;R4gQ!laKpar
zVy#{h772&xxb7R8BCyb9d`<A?;biOFFaf08<ov;~CZyih-SoUkdPMq@+mK27B6b_g
zST8T9?*7y>iPo^eCu33IrF=u6M!nz7eHysD_?q`y-HU7pqwp&A@A|UYSVn2zmN-d{
z;#`a&)DzU19am#)jDF@W-5x#18Vy$C*S+epG3KDeeP?P^xA!qHfxUnFjj`@AxsBY0
z<igAR(ai60L+opDejIPVGn@4U&`DI}sp-yy6~E9mo>1%<?NKYB@N13rr9<O>Q6KY?
z*wSD=tQEnR8})?3fJ|zfnRGD9h^&o_H+F<F$3}J~-PPBeJWw<?gp~y(DXTLyAVv|6
zCx#Usun1XP?~*2K2)PvBZ(OwOdKRYiqF}O^m6OTA?!BsPL;hH}&8UAxuV{UUvuRv$
z{(8A#xy|%w%+cIryJ=jJ>DTf_(~Gl#`o4y(oroIQcbTO?>@a4piy~tEx80!;sMiPS
z>N6U;PBmLD<-y<iTrQ@zs3wuj`0K8YgWzmOCI@Xh8u3}|^1g*uF0Aa7*cM!XwxqEe
zSWlPm<u5Ca$1Yt=PxSHfw57EA?HE_MAqV)qXNb$ra8~smoHN8Y;2L2;)~FY$PhwN6
zdQs_iX;o7(R2Mi67Vp;F&U++TWo;5eVuTh$aPfyQ6fTYbIhggF-h(xXYZLD1<^ESR
z-9<Jg#04f8!uNy}I;i9aN9fx(@==66Gp)Bm;c3K1Y}Ww)PeB|S`Un+BlpBkzi7~~v
zujXm5nxz{ozA)gWzA_kQ@Jrpfui83>=-`)V>76J89Qe{^o|m+8OuEzHCX<NPVAViR
zx__Ohq@Q9@vK<Pbxp^y|<@2%?KL|&5VvP{d5s;EYT{q9?&<9<Fr&QN!IfC^Oc-&R9
z0|EL`Ify;ggAJhr%)I^QX!f$}ndh`g0uMeP+^)Ol%@<36fhsqmiODT^bCmiVE~qXE
zQT*pz`3y@S$AFf_IcE)rSb~M*mcz`Jmk}DNm|G=qZ`)H2TaYa|-nPq}nM<lX4X$H;
zt0Bi18Pg4n;^{w(Mb)n_9W<rw7Qopg=?^DzlT$2Ke{t0f>k#pIA${ZJ8kbacQ23wW
z3+n__eToxftmv6O(@RPQO8zdi?g3`CGp}LSNLziRiV7u6%8NxReg0_f#w$)r5AjdE
zZ-y#?)wGI;T>?v#D}D3TK}CsuYaMO=;)p$HU(OufS51jI0E>DK#8Y^3<ChOf;!!*z
zbc#edY04>AD*FzmrXPLoXgg9zVMDKgWImrt44ynWsFOA0XmlvB{DypTz!goU>)^2@
z`MCnmZ8nN0>+;34{5F`QPXH4lxnHUhifvF*YY_CB_EV>o!7~X2MG!~F-c`+_!@>9c
z!ZQMg5$6IP{m;~<%NLcKSJqAM)CV5KS5)&DyNX^Ld~O;;>ItdJ>}47Y^ID!5GXG5D
z-*@y9X)@?cEXH_yVC_M=nd{p`Mx>~iWnyN3*R^C#k!dS(|Dc>WyW*+9q|m05Vj+z4
z^cLr+3nllNs?WE&huy|!5BNTJ3=~5rq^cm}c+6&-sYXe&G(5N6E451#?J0vRhN-3*
zXKCiQPeJ}nz85;^F&Hfi=+LCA%^Rf8v6fuGwVE3Q(Qv-PIZq~>*$EzN+Iz8#tAea1
z0js+qs<x@i%w3+?8{ne8JZzkBsA_1Ex%xcr#k()23D#;9-$%tNY=&+jVDpg-_i<RS
zpH0s~k%kPzXb5MKs{>cLyapJ-!jW_3%tK$9>(gUUflinshVWs5jsZ3)gOYFLnZl>e
zA?nQrg~UZ3>qTnq7-4DKFX8xydT_koUjGXSRk0=uW1Xm)=mad$mVEg>^xE9^OC0{8
z0bJd;-@z0`tiaViM8^`3>CI#g?*ASPTFn)TExe3Y@?$ludz2_F0YtaU4QE6v*~RAT
zFzH3%9;u>jXyobbxKG>4+)DcKn^``sOv9fS89D;ecWY|IAO`9VESuYvhHGQ+DKuh?
z<(g#RQ$uk*bhRh#{q>3#X_iRVQpg|&5c(0QM~vGMN*bI?kxYt3u{P-tpEz(%6?MDV
z6Nnc<!F%aZLfK^g(&r%iv?7i6h-4g50jm@5=;>$oUK!5BT#e_ml|lt}LmLT)juds%
zV*egg#lRk+eUs8eT~hio%5KhV%EL)UQn@TPRb(lvw*zG3nfVn1$vD_|U6psweyIUh
znD3%AfArPJSSL+>k?2S)*iltZM$)*y7$K_+tE@Cy#a0B%TA1T*9ez=LOg%nRHm#L3
zcAiRju6yq!)I}2)%)$8BqsdYV*N=k<zGV+nWY$#vGEO#%{inU*xku6Iy#+=Bv_|Jt
zrX-_YiV3}t@CkHaTL<J;CCai(brQTeVxY~wtVLh{^IquCq9BwqESXQpI(zAZ;jnY*
zI-cgWQs=dg6$|OQ4UTKF9%BVw2}2>f-!;yKfBSW6QG?MY!*5Vb>kqYlcfc=rf!*-o
zu7z>UQkUP=mJsAZ>>8fX#%q$%BSO<FwT1t-Uuzq$k0|vDKrcmtboTNQ?o%y53hjtg
z39Y-}L>UXE!BrklZsaUSe2atn2ejx6%^LSy@TF-2oW}FrreN8J$gOOi7H`k<*@Oj+
z<zh@ty_bzX8V;i7f591;b0}^4gVZ&rZ+$o5weH*d5oNzr&VhWZ{;vB0W&E(SHt>I;
z`FQU854A_2>*qG?jh8Y5T!~8$bJY0tI8nkGv408p*3RzOr|2w9&yuu1)0Vn^bbtgu
zQU(hv2fR2%y|w2N6FgB4!cg{AP^Jr3ZCK{ZZ{tw*IU4^EIPPg)gbm$_shk8wOceGY
zi0yZaZc!iTqI=+O(JiP^VnD)u9)yCG*BhaTU-i<LXK?}DgmTt#la_SHN1pbk97jD1
z>DIoC%iQCLwxpF<I4z)@SU%mJbo$J0ajnum2ERg}G(e3Cwk;pCZ=pV@USk3!n%dM7
zBpR(^sVA+TNE_(z76N+71kMOmHgcujer=;VKuT+z!oHqLki{DW%Npfv1dIdSYWU?q
zQ8}zV^0E5Veaw*tG2$h_G?mOj+F_%pn4k2JNJ;4+ttqPnZr^_vCaWA{?hK8J0Ne_W
zS+``f-maHQB-rK*L;Dn+Q`#dxks(zBOoOsLv=jQ6Tg?8pF~T*agY;IQ=&I5l^$C6Y
zE#_$37>SzRjJL}}KWUQ*efBNpINKP8D4`qbtT%;h{&=d3Po#z&`1V0j>`{-V42Yxs
zYpwKABz$;i`$akOp}!LJ@vO9;R&~Wv)sQ})rDmT+R@zsBCkZN|Ff2S>sp~$O%5z%$
z*e%V=O=~7{lgN<-drpMFIws^dEN}oy;i4N6dG_`8Q=WrYR4$Lc1eD4p3B|o<@8(fP
zp`%U^nZqiZAo6KgR1TER6)2w-N{|-1{*$u7$&n)M%M8sN619;-b0!NO5|@*dTf!Lb
z7)nmajLRJMb_kGUG0IAMPiP>{AX(N}Dw@bf7ezdb8oLoaHI`92;pgVnlU0{Fq){R{
zrdLGOdiHs^pKGX|tH;?ZhxnYM?fVjT?AGI0Q@*}(`aav2ee6jFxM#Qv#-)=NMipn>
zqN6l8X4D8Ak}=c|O4SphoI;{<hu>R)s;av2CT5&*76erHN%|`w2bSrnTLy!+!$vh;
z-DCUd#feL>F;W|4gN~-98o2pmB7cI@>Z<1S`5bYhaZ(#!BMJ4W`Z(g2og$Xw#1ACX
z&ImHj42GOpjOu+r^&OykI8Z%o-w9FQnDjwk+L-~3Pt_$#Jzw{c!QK&*su}y3Q@m|b
z%l^Zx4Rv$+Xl`E~9QMhy_kP1$@f9IS3#=O^!KHIWrE@BS?CQ<BN4OPsQUoa&hJ${=
zG*a8c!k-UND;DO98-}YH0CDf>V)tqMd=8wdG-3OuI~*?6%jF5c?9h<=FR@mjzMRr!
zR#hwNe9p*G=djUu3FH0@wiOz;Zsfiyj=rjjeU1tmP=)*QyHtFdeIf*|XxIb^kN%9;
zhQrAWaSAx;?PH4lXdMpQVI4+;7ob5nqd}F@RiLUhIo<hlIxZi~1Y_5bqxI5xAER$<
z%5IR2Y%vxWAz08bXDKM|Oh(lK-yuxVrT6kVLM=hGQ~ZXL`%*aVhLx&YJ;#Thx}YZJ
z1n&f?mi{d5m7zj8(6|cgraX=<H3D~}cY<_Fd8~~?d%VA2gTg?T=_F{<cA{KrauhVl
zWy-yO{m>StLTX_YG{qIDmSwrYYL?KRKU^vI>-%!C(Z(p~dxz0&;>zbv7)_Ac812I&
zHJaw?Q_FH7Omo;^-2uj)c(Crs$5u!kjOyy>%K$NyU-nTSfabX9c#<#^rJoICd2N(h
zBw&6XZk7Yh<&^Hqt5&{#HV~vj;ljH2%EWXnE70&uyBuf%4z%C{T40~33}m17V%P9z
zH%kkgH2Oh6;R@i|%#%G)99KHcH*2`H1T_DRb#FvD$gXtHdBUFBlqZSZ)t%iH!p?V>
zyZW*xO5zTr1#Xn?-JhsTVo!Vrq8w2DqgiJ$;Yw8^X^AsxAPqsI(cj2F`U~RLAPoNC
z6NWUF>SUVgIgG<s(w_^kH1x074h`y%&Wop!u9)r>=n_pg64moR7gQ$n<4_^=p37@!
zd;f6S;0iy+5F6WNhc0gEL5w*zRGIz(iRno=)W$%jiz{1*&s``HP#%w*Pg`vS>cX(0
zqiFNMjDx(R(yBvln+Nr%?1f}_9`SoB)Tu4!_C8;)%l5mlxHUQQfY(z~&XId?h>Ycn
zMf3?|VgT~XC`U3QFjl_j&)4THc|KCe5K5=OB(}2{fklS$*|on#=(GG3;jANF%Wyj%
zmvK8LQ#j5k)Ot@tD7WP(w8?*(RY{MttyF$ZZ2Dk;dv@mMj6gRJ8|7exaj@hmW?a#u
z8EqQWP%_8dE?Q2J>{|=s?@c8t*E!cDEMGNMW<2V~DGL5!F;Td+m~;xT2ay6YbMAyX
zPCBHsyd)ivAj~FZD+s;mBg;$wp9-hc&~-frl+BV)&w6RrG1MO&_=!hBWxDLsJ}=1(
zmmHX=*Xp;<Ro=LjzV9zTsy$v{zi!p6^k~SC%q2nSyN`jB$E@J5>wvZ0&RdD~RR}kq
zT(SnUhpRdDD+XIxM{A2JuZ*UX`t)ET_?k}Hr+Y?y@m*jWX1=ezs&V&PpGx^$scmY?
zsK&?_F0f%)bjD|!f5>qiVo-ZZ-U!s5k^!}+d?5@yxmv8u`74Xcyx3n^R1CBNv6XdU
zN69@nMRi4n?-YmD&Lmc)cQzF!EKms}t`(yaCP=d|9=d}5;HBKETLW1_-Sa%o=pBlh
zr=b<(fh3eJDSwPq_WF7n+hO%fv5)RjDoNYWW?<4}H~zF(LE?vUzsWg+NfY#YTh^@7
zW|PKdiz^<~ltqHDrd2=m)4HP7KNLi~@7vI!vON3HdU2j?KO|VLFy)>tdbjQbC`!2a
zja4C!hmM1~?)8}XE^hzF%VGLPUw@wE=-K9-{nB>mT>B>-AprZQHHMgWYczHq#hA`v
zRNO#~P#Aw?X`@4V2rK_kcmvJ(ifny>igmU$YY)Ct!I(5EaFFc0$`UkcU=)ODk4ZQ9
zH2-x{=@3Q!q1eXXN_>TXl=zrCCI}zwa>33cz&C5bH@&I#)qWmS!Fb<%0Uv5rt@R(Y
zN7~VaZ=ZkQz_ZVhI=V+oVG&1I91j+Q1Ozial0!L@F9tz^q!}M1>D)dYy^-HW85ofc
zUeA;capWILZs^c9MJxLi6vFR`Honhm6whmZ=g@f0b^`i!KmOj(;u<=Z2S>6~M@3MY
z3B3a^Njyg3V~qPEs@eRvHlG()NpEtDqQz%I7e1jr&R?YS*wH(66}h2X3ry=c48OCu
z;yab`ySIum8b=9tkbH#M9Dj57|4&-7Ft7h^>ggbxS;lkR3e^!mHBuK#JU8kYLvnt4
zw)4a<F_vrb!Ri4$;l~iyW?B~#*rFkFT2^O_ljK-<-*whQfO3J?M7F<U{P9a1u#=D=
zYi1wEYdO}e{EEgBBVR?Mz?DU&J)Vi#M>+mjocVMbVTMBgZ2x+NhROQ{t!|fEL(u&2
z^$)H3#`C*%4%0)yJ#ue}hUdhNzJsat_DH&VDYsU}4@gzPXwY}#nd8$FH|n0?r6)`X
z!+THomZ}Z9hjlRdT2>%|oY4KWprc>(YT4gQne3odhrYtI<66Q&kyfAA=Ln6b9V*g9
zu{%hjchbsGK5GRfCXqxT#*p?~H25!3Sw?Npgi=6tOaML#chXN5`?YTa>f1lPx$M8H
z51?_rp}rO3w6%BD&ldN(XFj3(a?f9{Hf$(eDrR(A7nH_)>SoEj&`Vi!l^1NAiB4qY
zZFNMrT&SS-%DmG#W!~zXiW}vFk2+M`?n`&`$hkyG6YrbZN|!j3pCd*(WQxQWFl|UG
z--xc06X*`hud%z(x@3Z!&ACq2(9G;$d!+S!K?a9qy@rzhr`M=b3q>q+k;KCa+ZDHx
zi1gS?Ue68IBfptUbcJj77unX)Fd072GY=O_HB!rm0PqUXxhObOb8j-jDWc-EdY*$S
z=IIF_rh9Gp>^h5CFs3VPMR|@>ak-PF+ZpFtKt@od^$c@(JK93kohK!4aYJE0Z@;XR
zYJ=0%qgRo=Wa<yLL641V0&e~KV*j44Wp+1ky*H8cnb<NVzg2_l+__t1M<nkQpIE`>
z!r_&3!#vx=>+Uh+hmqEwSCGf7AU#&;pPcDl*S`-qFzC6zRJoeDSjf|4x~g72U-l3?
zvO%nfDl7f-IHx)Bm{sgS$YwY8UZO0m0i|JEMYnlz>3-QGhweuX;+EaCOC%f7mHhPE
zlRHBx>dS`JBm|06sWtO+dn=r>@N04}hp1f5vgU2z;v$Gn;#idgrhGOoo%Q2gJ&xk0
zY&lOZkf!FVpkXPp+q32baegz&@vL!1mly@FDOo#+FiUkygdO`n@o0~pPINm^Yxr0U
zIalz!tM@r_;*?gXua{nq-C4O{<vw^2fAX4M?ky&SFbt8Uum7^JG{(5wgeAXUT`iG`
z-;c|=fj-(L;9zutIk-pHpxo{tJYF$r_}psRt(I?2d1(X9uh&<dUd$l2!m>Vr*3M&P
zBp#~P@@&iNk+q`VWH#dK0~zZ3Ry}O6`VIsbWRkKB%Ph^{W5vb<^+LZBj`djU8E`SP
z;Kz8Vudqoyo8#(EA8>~1>s*)LGvddXTP8JE_BpnhOF!+i+vS*vE@t%ZU~ebe4wlg~
zfDbl>CScy7f-8ZL!4kBNZgp2GMCr?ey3=#ELtj@!Ap@XWEn-jw(~QNn4fAs~2@U^z
zd>6VF-|-GT0~6jDl#5Cp0w?7}UtV{=F=igTxDH1?sV49H@zKIXSVDc{66*bQ!EHE1
zOu7<FUE}w%6fTd+_Rj=jinLYa&s4q96wsMAlQeoPK8a(fyz$bNkEGy~c2QA%LCZpi
zkTEdyIB@Wx<RJVHgPdy0d<6wx&tH1jtooVRKjPgDo=H5VEtn&0;N4R>Px-mFKkYD=
zc8*H9`?xurL`z!22bDnI_Mi%9B7fRjJ<2XIxi&LusHdKZ;L~zlI9p#kS_+|O{`9eG
z?}bf!#4MBA$jMcnDl-TbWt(%-d{Plt=Fsb$_aJn8?C)4XD;q;I;v|D{GUqDa^1vSX
zt1#LTaTMDw<2&~=LH+ADG5jL{8Mt2Jb=_>Aj=hKWh+og`pCatCCcYMAEX$QtX4n4)
z-=|`JtG{@wpEH3_ko*TZOy+lTn5*JS@#UR|TOo1}a<Jdnhs95&uOr#BhhP;ZlB-ev
zfyHs<K_1kmh5H;-Rn(?$G7x@O?`PQ^+0;Fg{<DoR6zH?prEq)LZ4p2((-9rJQwXyd
z>dmqbalFs<-ZE@>Kjg0!Zk3Hzo43MQ15`MpycNz^{KSK96>gBs^Cj#udDyS_dhT3W
zC|eMwggCDo={zlQ-R5r<vHJmv!skC6S%7pwOK&T2p}s8gX!)hF^J4i?M)_Y+-YuES
zzLT$q70S7k?3Pe{uouxzo5qHTTSlH*KPu0Y&Sv<{dw626?s)!nzK2m}UGG@J;G?&L
zl9)!{RgPatTl9`-JnE3l=Xh!R&Sfz8;K-2k!$lX9{0}|bkNM}9O}7$>R3)gn=6T@B
zE?>LWPopm5$-CY<9IFC$?B3URYBnwU;mifJ9Ag$`*X}D_`k`A@Tk`yl|Fg26%AaC+
zwchtng14ggJ<IRBUYa)3e=6LfI48#TOUp55wD3oDAF%r+PLN0av-1n1Ca70wLTa<w
z?D7NQ9-3=A!zqSSA=X79A)Ezrj_8Af$ad!p{B{&PVOZv-_zZl(MV9TLlHR5#tDS9P
zi^O*>ZJU$<*ZG$9imm$ic}XxV4YpCHl|NjM?#EYBx=g&N+~ub4DVe}f_u@VW!C>s{
znl!@ki=({Sy}9lmz`2NQcg-l$1Z^t)fL<9bs&XU6VKbu>_Rwf+tl$&^f(|r$)T2Fg
zoLLZ$hqsYuyODb)bI-(YPb*tu%ilk%-}Qt3D49WZbN`Mm4(ftLv98=v693BSCS*wn
z*sSO5Nd@r>z7q}%X61TYX`Q`)x`7rV`xic!*nROsK1MCXqbWqqeY3|Eu`pV83cFEA
zfLn+Xw@b&a`>ei2k&NU?*SI&jNe7~HaKgCP_v}+i@ldD|Zst}Amj<0ay+(nTJu@#2
zd%{QYpyC(wae%tNbWn}IAv(yjje-hiI%hs#XU|=3E#Y5Y<Z;L#8VGLCdFt06u|r()
z-R6RNgZ-mpENO(YDkJCXD!-=MPT^n&T&QBU<7+v*!E6hSvjpwysdKH6VlC{iCLegJ
zkb|GMcEhB`#*^Um=-j>t)z?#RRqmw%#yk`(t+#`__~g#i$GC>vqMv9VXK+odDczdB
zy1~VKP3XoHLaOv6VUiA9zdfI7(TQp)66K5Ppb;PLZ83Q4wo)8D=MBgN@Oj8YbiJ65
z3c%9F);t5L)qqa*Sue<9T~JN=_9wud#)O}The!*YD4E$X*o?kaGt2OZa*u*Kuvup%
zy6>w_lZ?`6FeSaFsS|1$1if7815z81W5fnY4G)62syU_Ghu<j<y;F=GC?N>A=H7k;
z{UL5uQPlhe)Ih;3?N!zQGF4A0|1TgEE;^E6+c#dYUqWG%hwm{%E_)!CHsr1eR2qhU
z(pvv2%`~Amgi-N*{GX;^Dn4lXarp1?KQ;LKqF>nch1{ih=IO)CQyAdh1IRp_>hiNd
zUuPb)Q$ygS9Hcyp(NtR7kD!xvU3-Yu;NM7!;XmBpHXBdIecz4;67G_^HV^#%>3>OL
zlL<_qk~8cciDCW)d$qcMrRI?sMivO84LLC3iJal>x4(sN>+Vs|yKi~?T|K1?YolMj
zh64Ml$pRjcIV*RrhVob^pkTk67*s-i@w|Zu<v^-E`pi}wpzl!(vYK%q<UX#yEztXf
zrE3lNo+~`QpDgQN!0O{ay1c=(Yx9tQ(1rWE<1{$C)^5Hktun({6O~zsZsEyt`;7Dx
z|F2+;=LkJ<nS|&Ts_Y*itIIbowPn?n*@lY}pp_mrl~n@kpcvY3nU_SmyA-t^7`pX1
zXJ05y+77-l*>}9q0?R|*{!lw6z~mL43~5r@)X<268FSr>ff&B1G2rlGN9Gzc@>Rl0
zG;<*7Y8k{lJ%Ln1F36saW(J9FU#f5q5A^iq5V}RW?}{keKxpO%Qb`y<tbGtGv|#?G
z&k53Il}<G)D%TiFo=7Um1BksJ#QF$Y#QCWf<th$7&c0y(yYM7nhJr?{wMgk=yhPwI
zrDJ>ox2TL?{jB=5^MXo2-#9qe`K_~H`Dxa-`P||*X+3}Q_9$b<9e#|nc>ePEEQj*M
z3v(Ci`I}%jYw{;0MkG4OG^*ftmnWW6l!*~D{;>9{27ZREa;d~!Gon)ztMWR&*|=vH
z{KFE(ts?|2dO@JdUKy^i{<mKU1sAFHvn!>sz3ehH9g+$<it1mn%43R??%SCa(Jh6J
zD|Uu?XQUYEfbOOcqdQ~H9$q2<xAp_pASOc!{zTdXu2eJ)kvsp@78-lp9WZ88D5DUY
zzoxw0MQ7kU&7V$M0lxcAHmIvv)K~HuNuLhoB3(ZXNq@zjr#h1BjmRBQIfYMJ_~i+V
zb&_*C9~8lATFK8)z8kI+U(?8#cp;-?H8)ege9dp4@1kyamXO_4Vhb_cVjPG~GNef`
zBuW7ACM0b#@_*BIEpEBg^EvB6JP5~Mrr_?CUS6R%uo@VyT3MSqu-<myI^juhO6=#A
zUP;V?(rr4K{d#xF7nmRy!zu`jB_{7f4mSXcv9zXR>kQSlraSnG9iTc*Kl;J1F}GS{
z>r}%tz17gEe#Z383$jViH2790wx)F&<E*9#Iehd*W-juu0`uP`GzI4WL6VbZmKzYt
zO!NhE%Eee@GD~_w$OV9C#F@UxazbFLc~rU97nxuQAWAfZh@R=SCxl1<h)hflMn)3?
zKOt#-h@#{En2FO9f+qk(BqsNHqlaYh{`UlOxFEQTI9-Hq(yzlOhq!eF`P(Gh@p0_t
zmcsaCZlT?n){ZNf*XgCxaT=KmI2|eUkT{G_XvjzO99fKzWKA&L32coNx=kE(pLmE@
zsM<&L1bK~s<oj>@@5m}aGCS}hqUFP?XrZT}qQt0FLL^?I>BwT%Vy%h<-26+GpoL0@
z2;F52sV#arN$78F%egtQp0Dkx2Qyl&J4jgy@p;jme<iN3?p8`%Rl3>d^v{^rs268H
z3dzXSSjE3G8JDd$UZ~09yhgXUq+$$=YKY6UAPcVLs-6#za34KT=ORCk*}+H>!&=1S
zlkt)hrzzm=Tza6+*SJKQ^x_!LW${r}%c0I;c;@kYiIi?>KmSXbIak-uA#bSp^Yh3Y
zuXXy}d=E6|FAXb~!y}U@6T3LyR{?Y0a7H&(-H)efta6Sg-N$Zu6u*$SM)P@4&+k&W
zY@Z>Cn|3}mDQfCOb4MTSw6>(-SQV`?OcGS@pSF{t1&I=7r~}`qRYev}b=#Zi^HebV
z12&%rk24Vzp{d`PCHiaH3k3=943P9!MOe`Xx+W^RZ96PdTr$VLCzcVW<Ov?=V#{2q
z3S?iUwhId+*nh2^Z*#~ca`2t-bo<2FE;gs8a%Mzn%5a^5fVHmw{1rh$#iI7`Bo7WL
zlQ^rd3jKDFitkqv`u(m!frW`6|AN-<I@r<nLDORj23F>mp#b9Yj4wKBmIO2_-Sg@S
zoJuzROS9^Ln<H#|O8I^Vtd-iHLkd97`ykmRyp-;j<glD~Nwk=GFW~UKiS?IgmqUF*
zmv0oYOwU-eYRX?N9vt5KM|l_qlEyTJ_RdloSfI1CO2jw(^P6Qgh+x%M!ycm`h2uOK
z`Ws9CERm+uoZI1;7xDej7iM?Pn9lOn1~Xl5>Z-URyZC%aejfbfG^9uRE>0;pbq7@o
zoRjB9TQGF?Gx=dV??7KgV{K3=b$|(~)5X%%B3Rai2|f~_4XbEFEsthUq1W$mq(AR+
zF-#kP_-u9IIv6f@YIf_U)@A~m0YKO(B>if5>ZDyZr^4nfs;NX~!1?MmeOU9GsKP{|
zg0SbIV)Nzu2rF-Wj^gWMmVSlxG{I-3YjN9JB+T?|434QtYv*bbTpez+Fy$_Jjl(UL
zjkmmX2mV|-(2IFQFzZ|m+TkE7ItXaw%4%v*ltB#iICB)F-bIG1E~P8}ub~1qNI_&2
zuIrpgg^+B+L(e574=L>Ebur(oQ8<WB_dlf(?4ev&znGyW+F3133&v+JA&>BS?;{$(
zz?FRPP-%QUb2511a_B<nG6VP{JaVyiA$&Un7&{sKcc8PT_4N1P2QR^_4w8}`#CV~w
zYbGK6|G~@~$6?Hs|K!Dw_>Mm>hC_xjo<Nct1D?0e&(zbOBx(AqDQFCDw_IhzmTPXk
z=JE8AK`VQM8=Q)`KF>7L5}q9lYlMDAqsuC6^&{?1i+}XiQuQpzN42I?lh|V+rG4+s
z2KtrpV)7_-O^pAW8n&?Sok@wR8~m)H!|$RHZXKINqp^SI{O}{@;{(*M1PF)IfoY2Q
z52uocP%o0E=>1Q3OWc>oMnB^^dNw9ho&Rhc`k`I%&<$@d5}W*;Z2Ragj)w4f;T|Fh
z21vAn82igV0z2>kfAkXRfSQDe&4-oEjHA;5R&&f7N){MqKYc=kVh%wZ7HCVS4=U0J
zRC`-(1#y5;u;Cd^dLTv>oY6vfW%C8;OD}Hb#!?UjkF54}GcH+euqRU3_E~yOlJ!aW
zw(Aftu)0Rfj$>_`{QLLxnmB8_@NJEu?-JEcKS_k4??m7KgIPhyHo@&leZ)=}*9geJ
zx1>8ktdYXEwf~AV8~QE@?cR@?b+<L|`uttG`r?)}3)$uy`VOeR5Va#*+a~?)l3o*R
zeG>YE{4q(Q`->ejsEBBwt%RDP@(QJ{gs+~FIYNYx!dJ~uze}Y0h#fNe5|9tNkW~i@
zA%(6giCQ!G5|9jDkyS?vA%(4Kqw)e%eMGH2ggE{>BlO)S9pr^JiH;OL4@+ehGOsN=
zMbw7yTlPJ@G8!Ez6iV{|{Vqf;IY941GGYIi@ePdtVqwLGi9k4Hk{;=x5LSe+)U$LW
zKB`!0zvb{h!t5mUqwrK$*%4{Kb1@lys&xwCtMvaB*^+JqK}QHrHIp5Y^s5$=;h<V4
z7p_asjz&KUOVyAak@$`Lo}L|tZu3ty|7#K_J^Quaznf_g3m1f>Dv1u#q_1Mg9zLaV
z^g=%hNhOdS5%hBul|iCfCl==Y*<)>4R-m7^*dQYn4!Q8J%lQ9B{$afS>rwbMvj0@`
zUv~a)?`vo(pX><0?_5-dkZPS&*d;wX82#u!O&WpG5kgamWm$#%yhR6*sc=Yy1=IgM
zl1$iRLM5!|Hw9epNx>}j6yvN1Va8)3F!SdfShLhy_geVSJngWrlEu|xiX2_*<SO6E
zjKO*cp?Sn%Y(m8%uE7fmd51<Eyc3ea^yK;l;l*P#PKOANrT*!3s3uG4`97sbA>{-^
z?4lFrVrmUwXJ)56Ws%RVS2#2-Ej7I2cTuT#I`i*?4|oTk70k08iV*%)2zIULL{wP$
z>)R$_#U}58aEVMGq?>*yMF_biU)_>KzmZ4b<*q}c(i5<vP;!I9^udi(G-6n}e)^W_
z&@ns6DXz3ma$=g?)I7YrLTqyKC%r*x>XN>dWDVi~U0{JWvLu|Yk1E9Q7ZKzD@|TI9
z(u*}O#B>Qk>gn(=gk$hTmq@&*KI$Qc^}Y`KCe3^ywtTM(k1XZ^*@0=;8GF|zMGQk&
zuWQ&h&2ME_WCxmLRw1`_UBjvZ^yo=rdPJ9*{|wE;dn?42Wy3f{#}E~5w}`0l$ufFG
z*O+CwUWrGC4(X>`V^h5qxrMH>6Vl=rqHFhVtC)umxmK6QecsA6u34Kf`wu`{rnfba
zwOOv=CYwx;4ItcD4B}@Ne04*v%4_Mj7qG)k2$>$ZKsXKvq8TIpRI+i+>I8kJC&}L>
z8_p+n&`?Vp<6X8<ain1npS7lz!&z;|T}EDe2mucei69g1Z|Gng2e`eRBD9)9T>e?W
zrDsynPxUhh_;T%~Cn*r^)*tuh^!zj6^3DhMhXZcqt!8N@X{~ACaMsXqmxcE<hTsy2
z<eCY`KkT6yczI3ww-V4k$#9EsrjP#(mYv;wLZ!DmH#fkrAy(m6*+j~iC>B)h8LwbM
z-yW01f#p%?XT6nFN-IBLh6=CW*HI``eEn*1f;v^}n^!rN1Pd8)3IZ!=Sc*KHB^;Eg
z5*t&ra>FwW%73i1b93!_a!q&xAl&H(GFvUj@0?tn)lVm}NTmBH47E_NX-6IwiaU0S
zA#tt|Q}8aP`@|oHgcH0U64Y?)lt6M=BWB=T%<!o_WF+E+7e#t7)bioqf_KM+L=)`)
zsiEJI|3+(qijJM)NGfZ@G`xBlK6!^Bkp#s<|9w*XmE-de0@!pPn6*E{>o$T~N?!B~
zpVY%Q5d?lif-;Vj;z+`4DgSXY<q%mM>A#=7SW8KVlip|=4iiw3rIdK8FP1_}74gEW
zIQ>l&diPIKMU0q+O7DeNUV2C*dU2S*B^Ea{SCs7(fBMb)bVc|4fFv>-=oTm-MjWSn
z_^D*A>SoczkrKue^;PB9Z-?m*Ln7{lp}vy6FDiad><JMS4B3kh|0^>02~oto_o%O=
z?stma<9tFy0kcT<A^u@V_@BtB-2TiJvJdLW4c&+O(JV3-;$bl_K9t^8h4!fC;TL+C
zQi*$8e};N5KIA>z&2z1hdkVfO??9zW=C#xs31$53i<Xx4r2*|Ksi2mCe2<LYulkeW
zw-RuY;HCP}rX%>2vvq*j6>)D8r2&6$GPf1!_H!6aNOFz(tAOA4RIF8+#1(Zf9GoO{
zNj6V`az~j1E^VRp`F-}QEa8Ok7dBZYC<gg_k2y=FQ(aKE!i|!IF7%Fi9l^&cr2{E0
zh+C5jEE_jHhKW|$(SmhT8}SZ^G7Lg>$VUPr&u-xQc_?HUd>zF`BvLg{kHWH}h3d%G
zU;HI?CY_CyssVN+UibP1mfkS<IC75kq-Y=>y}xZ9Z~gzCI^lO-=KPD(UQY?!^+KeM
zbv;9dA<z*tB9W$nb2OA4EmCJYVhs2{&3aNbFpr9}qlN2e*Y#x>{2f(B{!3~{WyDEw
zU@FIOdxXVqJ%;<JH^FgPir0#QgwG$mH$$c34wgW+d_qG1y7dLP@*zqz(LAb<`Yl<6
zk1~n!kBsSr%P^w^3=wXnB{4u@@&{|{Fp(G_GkJhx-bu#`w4#$_A~Sh`sf2*UIt(Po
zB+%@RpaYM)ga3nBE=tjf0<R?j$^jSxXyqYU&gHdq%}uo57>kwzLj+pokB*iqDYo<L
z>*HUy!r%5#Zp&8<xd;PA4dpMg3X*v_@c2h?9r)D#5-S2_Z|Nxt(l8;R6orViqS5IS
zt^$EJjBLm!SxYOzc!9R*b>sds=wE*JxawJM<CxNP!id_He<Qa1rf^$F#k$8r1LBms
zA6@qNUuAxN(Bp7Vnj)u9K4c?cOui|4grW9^DfkcdA<(l>V;p=XsKmgK%Z9vegQqrl
z!{p(IE#I501B=1(Kckiv>a?ETwkObrPM!It2n)kW=2!L`%jD%pB@ax|`CY|-NvZv~
zfV->sFEgdI`FHZ_fquC%mTc6YMcTe*kNf-8{XV-$I&^oC?@iMoz&OZ;0NQw{mt~-X
z^B2_FjR?c(&GOOs?X~>NF8<4FJJNLKW&ewjz1~oT-l)5~^?#M!VC9^mQ}cQG;b)J3
z{9|@IDyJ{0`GWj{)8-fc8D3YrSy~Spm;K{LIpR|vE1tKy%5MVNuHPk{IvV;}WkUqp
zrW6hRZYpxd-}1^`&a9zT@X6IyN%tyTv??W0^(*9@799J=4WL&f&r{2*`}y^}Dbmm7
zvkc|id*L!~b>7OZhbPdgpw^FhlP?`G0KcM<C2jJ$)l8_DSV!Wh*8&kG+Vm?$`6U*(
z651#f(gRwT)KH*r388?2rz@Wfy(+fRO2Fg6;H&>scJqmEudF|48JWok%z4|7ZMWIY
z)f*}jTT&g4-)A@BC22QqYiKtV13}kH=dEr_&}z{atv70h0O*_G5sDJ=JhhOz7dRK$
z5`*M3^fJMf=qS-7^UOl(-ryc&OKcK)!B%~6B|J(r@elG3FEH6Hw41LiSyfsWS}WPl
zH*t?1`G|PH_$bG)>^aRD(+BynajderYMxE6f21pjqzf}XevFDXjTP{W91dYnwD7@}
zx<mAVxLVg_x0X)q(N$%))1uP2P6=K8|D)|az?#~&wc+D-11bUvD$;c$T|fk+6O|4E
zg7mIPFQG%ITS4idK<GX6&>{4)5do<ow9rD3n$SY%1Ok6>?|sg`=R5a)=ezg*&oiEP
zzT=%^&Xu)T$zrWJ$6RkCne1g*q9@-3Sw+^%_dCI+^voISl|&wwr|BuMFQRNtk(hN6
z=IAjt+UOUjX0^Txhn^pB*XCYl6%OYhp1M4%6yCW_7fKc#PD9S7%DlC6C8>wP=79#y
zka{|UzZm}Wyi|Biu>3-9cHPRX#YrlBm<qw@r&ZL<aioYU>)<CX*UT0rbx+)H_FXNv
z(W@Z4$^fF3$8A$}bT)7Vw&&CoQ(nmQelxmji0<I}K}x0mqkKX%!wh2@>de`ZJZg{+
zEYl|5r{BXFXhU?ftQnZBZSS7+xSM8mzA)**l(zNNA6xJMm5`Sf=kY4R**7nZ6<eUx
zg#G+G<>W`@<)_tpjIyKlPAh_>Pz9Mm(HDUcBkEdBJgQ<{J~8=exqm3!s9P5fovK*Q
z1;~u3$6mAyxrkL!BZ={p3-D*kw?@=8nt1fud&}jTu%DbI^U|oX1^-O7N7PlDK;=8?
zUNsQT;(R506%~Gk;(Tt{o-)5(F-L+?gti(t%tM)<Wt>%(zicTFTw6QxpzKyYcp>O}
z+KA)>Ftv(Rbe?vCPDIcNIS<l&eFmbZBtxre^jt-SJ10at;icq*1lFth4{{P7B*cYi
z$GudgRaJS;qr%Pc|03!fTW3;W?-PXi^FpzRBJP}990|E0BkVbQ%G{)_#a_@nj)dBf
zxWtzu7hA`Ee(C#T!%F`>TDUVPbxzUdxtg`N;qV|ql(vuYs#SDIwc>L__MFnsFC%DG
zwVv~+aw}ZT|Kr1ucJ+T#453ve9l!qqe(dvKcK^Rm|BKDU#lLi;Rn>UjtHLdDm4hp1
z=|Mtz2uURUQK_%y%RR?_`v0Ah&Lf_y92_}$4-yhW;^JOv)2gaooLv8RF*E*U=80yz
zla15ZgA@@JPW3pI__rhfMDOMNJi`8NPx+n<t+J-vEHoC|AE}f3m?)~Mat~_}o6Tw8
z)tzO4Kex|6F9SDTW!KbTW-e1>e%_<t%{76&Nl|=be?0vL6}u0;-cV;>V;IWHYON?1
z-l$3KrOzS=*_n9>qSu)t1NY?Yc+nkD&V>&ER~wE_QqOL*h$hqS`>ov9VU54f*?R*Q
z_XkoZ-j7MRFYxJpn}NH)<Dieul@#rTp}F^uzyEUlU3jN6X(^O_Ih1`<-JGZ^Sqa55
z?Ws2<wy7f#`yO&*6<+LqV&yy7*37RtF`Jh?d@Gx6{Gm3pofF=*`z(&c=nerztk}W+
z{gbBqXMqV{$t2e(vAOe9ig`-!@0JHvAD<kQjRr~^1bJ`ELaOJAnAaNXL}}@wzn&>B
zh(m64qu&h==Nng4_$%r?!DBqfuUB{9S<tk1tn^Lb%WCi|h`UV_y#;Qz9~}E61L)hB
zW$#*|%ZfT@jZ`{gg|kL9<tN=9>9_FYtcz4K)1JCl?0CgqW+yfVlw)aj*Ku)T-+9o>
zq0XrcD(hwHl4^tMu5sQjrB}TUI4EUPIJ?h!{6Q(Bhn)uhEo-Bzol7HOM}wxDq5Wz%
zFkOZauyBgeS6s7WhkaAt98dzxLvXtYnrNe>MPjjx>=Y~8q9L-&&*U)PHrz6ZOeH8H
z51`Nshb*29;~#oRGqM2Qg+)v2Km84QbKCys7RE~zioa>zo7exe;a^L5q&oPt*zSsF
zLW&P7OJKzHRrW8)(laF^qD^wfE1!eckUhnky(cw$dNq4FS5L@+k6zImxt^mUeBbNt
zwdxJa4bHxSE-CpO*+FN@^lI75Yynl0{;JF7<$_1ihSBGo<5xS%6)SX(x86~{mxR<$
zJWPr<%hF<a#CsXM1d`h;)#7IOFz1T*2G6p*sH<o2tE-nW22ykB9B%O+ly}UjSKCCd
zcu4uxNFKderc0>OoYQ=T{hQ<`>Rh{nc?-$BYA!k2RdbG^>RSB>K23W*cMn5*J~fAY
zb?0kq`Os>4-NYhQa7i;_xvaL4AU&5()qR_5IUzqiPUlr3XWxkY6mvp;c(sUDBB$zz
zyh<v!3LS@C?%P08jbSQxT46PaSB=ifUH3;UNg+9QxsLL`SO0Jxs{h%+?;^4X=QYL2
zdq3bRR&Ax}ZMmAV`E$a^%9>b(Ro+8(D+Zqam4>JUt6dYtzQ@{$pQ}ln-SiJWaQV*|
zWy60|Uo<n!Pb%xP%H%c%_v<ZJ>oz))32?O0k16iHmz?Gy_*T{%f|xcftq=0O<y$+X
zAc%QWH(Y`(sIncrfYPdwg&1ZbO5w_B$9XB5seb`$VYK7QV!KI($U45+)M(H@GCeDC
zcT|s9n~vsNJ>0RW_)+#9+ex$=!wQ#ANjm?kcmFYpIesbmLC=HbQ)dalpv0hCV0}88
zW7WI&*wihMzM|0Tuy!Mp+PON;zkVlWLC^r$X5UK6o&AQ93Ws3Cp<P%oJhV<v_9lv+
z!|J5gGYB+zov%w_j{yn5?PvqqqsqhLW~UzFy!%h=K<&*djO+9JT730Skh4pK!L5pZ
z@cw9ZVAG0?9z%~{d!Z+YI8NOlm#Epl-I|`hv}6sE;ji%SU$-mQh{>WIWNHVrrZHk=
z_RM_QTC)m9L?n}`bL6m>J?;j4qAp~|C`(4f6j)*m2sc=idPc8$T-sMMXUmFiGYd*r
zC9UF^O^1Ce`JrI6c<;3&KO+>7F_c?_g?La0L<vOut_wo?AqWB=Ms3e3RYiXUnY+5y
zuA#5cFXS#^EzmQtoZQGPoMgG;HeeEy(!UOTMqnE$6A2A`0m#Wx93&)L2fU~OH%+Oc
z9P^#)w8hpfQ}=}~WT;n-Y{66?sx;PaqDO=zmn{tH;jN)QHM%WRymOAXfxpYYN0T~{
zEihyo{WE%mkX$Rv>9nk3M9MtP%mZ`TUC`7r=|R0rYd*~yaN$&6eC^JIGHDe)&5{2G
z?d?Oq3D4C_up1AmT>}^)3UtpACFiy<UYG&cs8p3-FaHiyJ5sl}t7I(qTzMTZLWr$B
zV=w!Inh}*M&LH~dh{&t0anCArOGy-Zju{WyTLbv+v$Yap{~p2jjHLa?)_>{fKTwGA
zIil<wGZEwgd0l_@4{sgNw9kej#5xm|>UBl!bk&V?<Mqb#{)hDU{>~swpPT>QJITxW
zyGL*2o#UBw22ndl<ey_kf;_N*rad-O?#x8|=;J`6Zq5E9I|cy%VxiS(ZB!OXRK9?J
zS@T2GG~n;uANDPF4*O^qqG%^qtKp1O414hW!OdU7Z>WSQ_ifrW%JA10E+5p+W-3On
zWS0{HXhBfhQw@S=c)s|^M|P(UpLItWCnYHbO`XTzj7_p$G>@9qiWRg(&oM+>^xr6t
zn(xy#F^u3-bLG(O<!6g>>-g^RGmDB60^xC;MU5?Y5#uBIP9rZK^Y`yVv__#Y=7nVB
z0`5ROO;&YvxCdjB`i!ljWjgUo@hy#f7khq<vaaIsI5l$U#G7%_sqtEuOE15Y_k(VR
z!FafC#?e@~CXeIV*WAqc^*RvPvNg5s89L9<gDN1hJRdmf=@C%-Q@!5LVv4V~SwKge
zaH*MnTpw{XcQrZ?iU4+1-o9J+Q>Pw>FNCTAmb+rmxb;>t!&;tQG|L0@xgS27uXU|m
zyJ0-sm}hpav`SF)fUI3Iuk7{4TG6rAtp&Yn^`uIz-F|L;cM6nBdu}tvxhXVI{cr?`
zk)1h??VB1%;($??s&!F!G>kQH<<2&6VX?MlOHZVoQ`QF)^5}~`=qWO71If-j7tHO`
zh`BdU9Xi{e{7<0{pCr%J9h7;N(e^ZH)YL-^CD&fyhZXZ++gH+@U#8m!hCLbE4Im!W
zUT*#Dm6u^l+nVB)k5X12gNFNxYE_JupyS6BiN<z7U#3mDlaatZFJFq*_&EiNVb{C9
z(iu;=MtVK2sTaP&c6xwB-nX((O8o;uTICuf-$U8|0!_E{lNQ#rO-v)8YObC<<pN#f
z`3-*&QGa#*WyC*;_Sf`ZH88d(aq0t}f{c`cb+Y$G<U2*4Lu%i37b$b_j+)z9F5mv`
zR$Kly{|6wCzuI@>Yv_rE86$tvdZZ5cG79ur1gUi5Z!7DnhaHhpHB>L)_XsGB>O3i2
z`zY~C{eSG?uTsX*L^$w2hvd<4iHv^@5*^YSM?5IS`cb&805N?9A&5!x_@~oH*;Ml-
zk}gnf*X|NACQ$Qmlnrx<z)lQj%?riAYd^6TC}FgGqgZ40EKt`<jo*3lRXUSRl>OFp
z+o1lZ^?yT59=`d3&Mf!#<b;agC|_+{Q&F0p5)|*U9|GG-$~9Ac1^AGV&rJ0)b3%!w
zVd`DlKOlpOi1_&NQ*{F55@V#^{K~ailXq!+F76+kTb?PwNRKhF<&rnHUOxaSi0%3h
zUPV}_`%|xsA`AxiJ7o2~FY67L-uBpUkjW*@O51To3Fs?W{`m;wp%t6<v9!zVs!UeH
zD=}G!+r$zI!Q<n5Ei*G$DeeEX0;M#P=}GkOTmnc%$rgD_rpIKnW4R?$V{$C9avsbq
znq0%-9<&)R3Wq%;!Llz35m*oM3>6!M62_6hogs&x%5XPbgSphJWgWc^Sm*!?%VtG8
zL(}(<Tl#|v1&8T37xO(BOt%h_HqMhwhoXjt&ogq)rR2`N75xjYxHmr%3vOf>7_@LE
zcNb1h>zKX1V*R_65!vW2B=(^ZyLL#i|7PoQg?l&8XYqL1=Rs17wGUlikCD=IiV#W~
z9gB_UE-Tmw+lV<=MsoDW_WJKY@*v@(lV8v9onYZtVg#bPGnzRgCp7(IPpkOp->AL6
zyU_njuyGNuS-zfxKW(lt(UdnenAMe-fel#gNBsy-GV_Qq^I*IK?^>8~5r@!cXiKnr
z8GBq4NZ+Bc=??sE)1D{ABdg|>)PMA1N=6`v^b5A0A$pR5CT4CG0)~V4ZV*%MjCAhh
zt)5eM*-U17P06c4?0ifAVc;5|;E^e%lPu+7?m9lDfjTK;?{VvMJ|0;q<fhwg31^v!
zTmRBttbNH7__rVePQErSYa+p(>|!W~Pw9|MTC`2WShP-e_`-tg)A?tI_BXLv8KTlp
znyB=hJHaz9%XNK*U*k<PpO0d72#+!p3rACKWm%mnizuKkEZ?mgZz-@?6C-RA7&lZ%
z$t_C>%IS~9yorD-2Tm{BU~2XxnnGkX&o#`mD~9#44qtcgdNF-O=}E+c%K9%ZE;3y<
zPudrEI8#|Ns+J$F9-8XY5DJ9%)NL?nL&IVj@7x*E`{zx_S09U$=JH-2vT_j!{$G=L
zZLG7xRu*PW($gZ{-Cdmph6cMD8^y)wS6B3g=497*Bz!XywS+maWcE3FzMrRy<pO=e
z^)NU|td;KvJ#BhVeL~wHI&w79y;U6fFW~U0KRLrH>u-$|E?bw<{r<K}`ex{|MihLt
zN!$;6wfDm+odqTayP6se#OT*o)@~M(0cYI~K<+(xm#ZV{jATxDO}kg9?{86iTy}jw
z8`rjw$6=^zc5-yE-g5By2-tp5<-RS$M?8ci(NQRBa#2UznW}&HH5?HTKFWvw>Bx40
z9kK9r3LzXGnVTOT>1nW@TML$U;$Yj3>Pki|Qirj!c;DlXh@i4jyi6Ax-A3#G&<D6}
zc#?5d7Q5r$^y?YFxNyTKfm}^QAyzo>OajmvQtm=@*lV5NnLp`J55N4LA^dVM1uX^H
zAqO>OTh@`q_Tbm=0<kV2|814)O%%a_5zoxKvIV(@sLR#;e>rkpkZ$5`5OZ~PDVAZa
z>LIkv*N7$|^s!HxWR4tBN$)9p)N?PtZ|-JM)}*kBVY+7RSfjZ;MNq;D`AQ#cgs@<u
zYuPvD<1y;BYA!1wrgmbfq<^4TYq>TRfcdR<=F_or&rU|0N%tADsrFJ7!|yz9s6*t+
zUbAI)VuC%yS)M74XnA<J<Y=9lK0+XFGn;n!V|arz22W!SEV$qYitsx@yW7W^R!LXI
z@QV#=P^VzRO2;4?e|Ic({Ym|uX4u1{{8^C)VpP5Aa&E&#%p$xL(S6S#|EsjRACm}_
zY~t}1I-9UGe9&12cX6m$R3WXZ6=MThs4No0ci3{fHuSTbuof%El=#0|c4sD%7F#WX
zoYp|10P!OkM<H5Lu>#s3kUDLbc+OTJrBR<h3n^MfX)##pbl(O46GfEG@ksHiMfKf;
zxP2{R7UEU9pgUhawLE$tc)gcW?q5^AclSZBmCf$P(SKa}@Nd#DSgmx{u74AVNp1J7
zJoj>82VFt?#_?q^1_!5ZqqM3C>(UF#IXO{+&tr&0vrRbH5e8qT!qxoEsz)~M!2KFW
zpzZFD%N++L^Yvh$Q#7hs{H_gb0CZ~m%h^mUQa>>3`r6rdF1$mV12GTDJ|pecxOq4g
zm?de1W0kRAerb06bR*4ze!YKdBFU5wM%!M9V~7Ra_lX}D2JV}5#6}*uR`JhmvPRA>
z-aPb4g=fMJ;YJdE(sF&mrTf<n`E2e7a>NFmeE|ejx!oyEXMmq(SormPst+RSeY^ZV
z?R@}k4;ip_xmIRs!pzZ9jlp=WKL33cx26HhhHwtoWDg{ZCK2O#%{Sw{Sz$Jk=MQQV
zZ1%%s3$x)oMYvpoK*|3ethp-gJti~Z!&qG-BvaY96|Eql$JM@qcaiVDBG&c|A^>&)
zaWjR(3J5+z<a@K+?4-$T^T}+@$?T7mYxPBek^ce~adHe=%?dE4_Mp-tuSom)-+_V~
zbLq)9BH2{)JwN)lxc3{TpIRxa56P$ef;U>99n9VH16~N;&kh8>&HYo<A7c7{TJxjR
zF%K<u`tg4gme+3{`^vYmey&hj`jdX3taf>JN8sBRGQ);@l=N@Ezkg`*=}(dFUy1)`
zBsGtL@r3b(^-UyJ!}1-Sc>Ye+c?@1%n@D&sns4#Xl!}iJo$-?Nn$*We&lLH-*^+@A
z<@|?aCk?68^#@1C5xuTBMk><x8Z@6(PBBxAzb<&7+s0uGz-2n1+{+lvdm=N&mA>{C
zWtTUPd)6xr(RgityA(SBI`ihBrk+a>e=IKGdW!|;&1IyfL32>AiL2AZRppD;)y^eO
z^f2__$*lTiLLN{RD!5=e>v!I}TMsn*Fx%YI>c<<tk;A=u(}8bYC)7`bV*zKLyo5hA
zE+pSjfy#h7YKFXHVO#iWzm|o&OT9&1lCZf0x4NWAx(}ZA!ImnLiFu;-!J@pt6Zc@T
z$%Wg-WuvX<Ba$rbNUL|A``#1dXwaEntjWUXL9nQkdkn*;blU3vw^PfL7OBir_vD^@
z`$YA4X=~?Aa7*$hdZwi=a*$BfK4iItT%zLHki(~4#-%^$I^$9kd1Lvra)(d<Obxec
zw8!KnoFiH#Ok$*7#GDXTTH}hmKFu&L)sZ)rJ#%*WFX+ds=xcML-~Bq$qWWAr<dtf1
zXqFS!4iC6*whd~gW~*^rIP=|g`k&d(oBcGY>vqGKq!%1mUF(!gUIS>*Yg*`xZIp#E
z9M*j59q3Ze@4uvLEIxLpyzWE4<9A4%OEo`p!}y(YSDll|z9)5$B_{6&qK~0<E>-+d
z^&jeIzU0)oRPviNj^E*wTp=>=QrEfYEGHiZjSFQhBSJxYQqsQdWvn3TLem@R$0dG2
zqpgD8xL30$ar&E^uuMxXKTx0x+<|$$!<c1VNtz%Zn@K3KM9tjsnu&{`$FJ^!jq%Ow
znbClH-Nx~y2}|&RmNBvJxCdoKJNvHqe!<6N#y9q1|3i}X+6DZxt7t%Qn@SCak#NUU
z4PCHqI|^!h?}&<lL3z<mbv*4~Gtjw=u@(5EzQfNbo#V4A-EkZXC0_I^@`kybKh<AI
zX(Qb79I``vbHDrJU8XmVVO2kfbB%dIPwkD-=PxLQ_`m+w<jYmSXRRRBdc@|QaH<-h
z5VS{0;6Od|9;v_xG^K6jn2)yZF;(N}Hcmp&BmPED+ac&t;vR+XuV>0Zxqlxpyy=_3
z3Te-%;GQ?Rw0cck|F_1UhHkr*-;=BFAKvt-zlPKMj^b@G{@@MWcD_AV_N7_(huAvj
zeZ{G_SRI@xz=@X9TDi>aPTR-Kb}rk1D1)L1_RDjcz@bvGE<p>r$F7Gx0xC*xh*9#j
zAAfXY=u6D`3#26R?^aux)m^vhe{>|TQ{w+-H?rJZH3^Z#o5{2c`^+o1xPK0k5J*^j
zE+Js<F5`<ie%mPB9{n}zMMCFuiHGg#(m4MIp&#4~xPOP`<;oW3#H7w0Hv=<j%H_(J
z{}~(s2_b)P^^f*{G6Ob+{HvEZiay#G$8;lt4pgK?9~ytC*5&>eU?8FIe&1A{ezXuX
zy2n6x7!V_n10QW4rN{8?jrU1p9*yclq{aF)*-u5j{0sO+>O=J_?%$y+E1^$cx+;w8
z4r#F?;lr>LzlMeINh!gG{XAp1j=!g*c}B~W71*N^JMg?E+NN&0yNTcC-U9mJK^jM3
z&0DA@d8@(H^SQG8@q|a}G%nl$zdj+7#i|EoJ@7hm%{*a-6D8n8Y`bxlF<-q|arp{d
zcMD|@5VUKzB@@u!nl)412E=~nMOmGCKQ}8m^~Wc&#~!Y*`nlJ)HZ~K8nu0o8himBT
zIspAd=;?}3J7^ZjS}}pyHIDIEPOO@qMab@Yv)J?}n$+`%c0mGyEgS6JZ&RRM*O{CH
z%G}`eQ1-(wiN}6@yWMDAFsfP!PfUdd-7c`}cNCa@Y<W2iy{yd=uRZ`RKJx@CfF0n@
zQ>%%6M_sWeA9@CN8$dzcUOcSFa+|9>2ksw<(l(Jw3pW0BZXeh5Vo!6F&MGCFFN4{e
zN7yyC!|3>84YX153Se2{wZpbA0d?M4Voh)_uncB9E$MWH<4{u%`DKOQ0aYLoW!~X?
zl4$8u?p79eUcZ5SWo(^e*{|gouzsvcFNFE_grzgC$rv)xB%uXd=E67gnD4}!oMJor
z7LDrPMmUw6?8{5<c-G7FZyko5@Ry%j_fH!ToA0Uz)|Bp~wd=s&5W9exJ86KE!FaHf
z;7kjQKQKlr;l;9+pz{{Fbjctj(MQMKij6PGyIZpw98fwVeJ5~aiz|(lr~|%a3|KYi
zg`}h1NG}hCo1$v^P9Wsa6Gp&RF+ccJEQ^0G{c+uf`7&<b=c5<A@|&=<{;~gW<C)*>
z;Vzz{o?VcgQa}DVw~8Y?f0};y+G5sj8a;39d2|nY9e>z_j32*gv|tw7goJGEdn}u|
z>dLN|#p>!uyglueKlH64sC+%(hgUZc9t!GY1;w*vR`@O-M}&^J0(7RfCWsm{dM8IF
z`-nlXpUkQmyb<X>K3!VMK5j!A1oenaThNUD2u_){UT3W!r1YxSFyi3-<1(lvY(Yfi
zq7C7D;@Y%F*2<b|oleh27r#bKPksKvl2e@-3rg%P>I)^fHKP6~n_t#85^rwr>+G)E
zpdarivup-;2Kig@m&?jBwBx+h6r^=s6*dY5jMuAS<!ipXM~N`659pQ+F+qL4qwt7P
z&X$sqthtuQIvI@c?cBaa<GL10$M~%Jyu<lB>)rbk(GGkkyCaEh$CDOz9#-3qd&}7p
z1k3H`dxhDeO;Waz&R5K$=2&W#(3DG!77BZ)Y+*^#svD$t{#bVK9vZT++|0{;72FoR
z9{j??YnYA2mPSB@*-=JXfIv99oGTa$_@t2=56NHD%)yptsj_(yMI=%CKc0EZKDQZF
z!ZNp?-_2MjTqiWFXJzl^3L<fAu!;82IVRYXjXT8R*N->12p9K=%Lm4$Tk1ea!0cSo
z0i=FZ>U1MxPat)nZd0@+jnQ>aQ*r4T`(r>Dnyhia2u)ii!pj300m_?Qk<4X<j5zC%
zzfXdYo~Z>?j^LUh0_>w!Z?8Rz<u#=9q;M!kE{+JCI2M|_QI#2v<_e}kE0UoVcgsG&
zyp>R}Lj^eUjDk3^Pqr6Y<Y%HkCgv=%_9S&Tdc_|ifwnCdN#*-L>5$mp14xt<pn4Je
zciMgy#r^6Wj6o0#5!D2T+ztY;u?4a0jrH3Ls1JGyh%j19l1I@|f8GXc?a=KhG$jZ?
z`mxstv;isBiYO{vxZabNq&X#AVX?>GSd=Lc|F;pjH)EqN|M5AX${2DRMEJ#&bfH=H
zAPWd@dm)TfC0q*tw<($zLNWFP^1+BqV8h3@+xucB7uR}>Z__*HJlwFlNLrg38iE_8
z!B{ta2vn{giN$asraxwlIC)4BqgF=XcC5trfhyj^8GC$9ky{0R7^H_F@#7ZcJp1B0
ze4~si^Gaq_gqX37QSQ|2Z112q6mKj}5Q@oUdsr`77RLH=6}__dfjL8G-P_fJPU+Cq
zLs$vEfH7P<>oJjuh1$68gV%y&Y~U*!5^F&L3wfA>uRMrNSbIdG>%qez=amiXq0FwS
z8gV~86bvD_ULG0P`<+t4f1;tvcIv3VVMD!ESUrabnIkAB;arc+e6!YZg@zpm`{-QK
zPT8u6MDoR(NJR44xGp~|PwxWPG`QW-A6n=${6lmsPag!=G`c;}A6n^~GLcB*vvFVk
ze-w8c-DLHLR{M@kB(nHc-Ix8#)8XJ<rlGJ@#-U$4Z2vkGRH!)&+EbCt637mMP-1^+
zN|sf~Du55$VBI}bYCo;hyAhw4n}6G<Yz(}Q6kH;FFlql!#Q<TXm^)FrJgaAaw;_-f
z311|DOaQU#tFHgGNR5PlCrFq8Lf2Pah|J|#o%`+$f&Z?^ct^3HQBSd+f-1c&xkhbb
zEvdoRsSCja4Nx?iN|-i_5`MESv@cZj<cZH$a+px|laHkbpx7bf@1bLz*^=L&!P4ie
z$AF&0PXEkRoOICYu@s#2U+2K?+f1%q>6F!8Y0VYTV|Y9$^AAblTYRwe{|LUu%SlW8
z6TCJ1IM`naVt69hxnechay>2S_3mTGe_Jf|0|^<~3rs`ZKa0}y4RlqXZ|HVU`$Ziv
z4fIwX-`&Rmm`;9)6ObFB|Frkv>*sPdg&ti=_>g^ffXd;_8|N9JBMx|d_ikCf$i9NZ
zfLU+Ee%$SKj+$iANW*^z?xuDPKm2GdBodipczy7V?H#$Ae_y%|9(dXN-vgELmRqL}
z4cMZ|<g|pi8IIeVqW1bkyZzrsq}+|>tV<H{9#(4+G6GM2_R3Y!-bgdqDy5(7T28Y=
z+Iqeb^Nn1OxAUIvlqS6vRM5^Fh(xatWNRzdPa6HDT05EBMwgpyBd(#)xVcSV$U3g<
zw6*7%d)r)kMMb6^Ls5V@?}ThVd76npK0QXE9w`sCM`}m-@~8(S<OE)WBstUwxQjdm
zZ5XZEtV47*KlQ(^SF#<$Md(E6Arno{z)uLETV*9`nD-8Q+OTpYqJdkto+|pV=A*4A
zN**93+lM3#10r~wHDmQAGS;+-;~6VEd)%+QKb~Z%*eE!xdn`T<Y>&!fN{XEBrjqaP
zj+Q^hQz&%dv+{O(r?uND)$^rt>DSIl_aaKRH_ZefNw#Fg)mN$Bws0}atu_X71fcc}
z_kwK)LpTt>h3IOVnU4wGms_{}bWKaCGZr%U@dWawlkJ;<nDq155z9Ss8J0481Nlfh
zyRnJwsD2wP$VhQ;?2W0j=hU56ar}2~0A6TnsVv+TvD#oS_of-cl&<^u#C^bH=*4-c
zXHHksjrRU!G2=4i<%tjd4)hA`rKYUWcZpy{zsfCJc94mP^;>sE7&5F)dvgyNEp;zd
zXzMpj=b~VQTTJbSvKm#hQ9#f}HD8lJa_4T+_VML|C04(<TCS{Rys=Nq=N=|di;$4r
zBHZWn1}ktLugD5~vC)L*3P)l1%QXv7cCpchtiUBa9jza5VAqE|R&3{p0(8-iWf?C$
z_iZs+T2`Q{y{BbnzdJfO{P5>y2}11lv5?#NA#JEUT9cV211#Px%d);BClDJcQ0+Td
z>uajj{EK9jURL*dbj#egbtSwndj;E<-<{}|Gg&j>(!Qb@uyhbOutT^C3r6t3$c)%n
zdUm<CPbolW!P4k&yV0=xXu$Vl#Z2JRG0l#@rD>%r<a3aw>0tLmwAfAnJDSagGX~0p
zv!P-N`f?a;y(}IGEKO^}Lr&*xt*Ms|6>Hp`Pz+n%oEf(_4G(W7Ar+C|KB9}7Wt-Zz
zx-q_Oz`J6VLJkuLjBJWrV_CPN$I(?nJ*z#t$5Lx-t^tT{N8)4Oa6NgYUC^87o!uKD
z^<>Q&lU&II>(O*W?k9biM;ANMeHAb{*?TE#et*%2_`vL3q#~<peRY?hVuJVvk3RLk
z0$}?B&stcG-QCp*%<Lmcv)|xccz1R{*7$aApqrJ4!f8?{mn@@t%F$%EzYA>KJq+4i
zn#t~;so}_!PYcZ6guLG3bw}Ryj&?=f)dx4)M?t$A?4r_0Fc4w5P$1;o)cJeKxL5$2
z73o&Dob_N6i*_AN9<TnYVj13<`+OmI4dare)F3ToRC7EN;lNhkB%>agTQ|)ikd}KB
zx}v;UgW!X~5tQW>;eU1>72hpxcL7*x4aUVhAq~bF`@{>!Hzc0*d#+T2EkAwPa&FZ$
zmENEbZ<AR;`-oz@@DtBxIxBhfW!W4*8u8hL`*n-kL^*VeTMw)mR7)n7MsW;r8{bsh
zw^1x6q(PoQO?&P2tEa&Y*<Z;xE*!D$OO|@gv=j;A7EzbG2hPZa&p)LEeH#G0U158?
zOJg|ovD8scukJqI%qOr@2wk^$_P`}e=0~Jfze8mrsTJXqp`bBB^_jYh#X{{@yJw%o
z*<BSsDW`+Q`HEE1GsLBeNJA>FfiII9#PP-1vaSjXCE52~<rY3#XfH^G<0yctdz_Cu
zjA<L??@!jO6s1Dm2ROtOAHS?LAG|7B_%p6l0=6=iUA0o1IvRX9mTu^7z1^1TZg2fF
zuHyLZAXjj(y+Bdpy<|Q2*MnUh9imy~$Nt;zQq>#;C}T<*b65I1ghcfx{Q1SpS4vW$
z@8j*;v~~yQmr@<<%c%;GCi?ELT#N<>Ma3v=kh4a+ka>tGp!is2yDD|YeuaE>;<S3D
zYQ80v%Rci;dC9Tb;H!>t(MbC{Wav`662m(KB`Oo8RL(^z$ffsL$WkcJ&)(zL$D_#G
z%Nd|NWanDD$Z6txGMLRo-~$7*ld9=h3PI#q%fae1?@dAbpqr&7MBUAb;BnaD_}LRo
znd!^sd*8;+at>&o1#JeyD1#p<4@gTDQNGXStID%>-ke(0*u@>V%FWEmp6%{aa;A&o
zIqRL#UORO*?cZC^GU|!1XEf&WHgU7xS!U1@&bB?>D&DQwJSQ&P>1GDo0nj!n!@JQo
zX$IYbOw;t;)t@u*cXvg$dJ)IU-MwdkNX<<ztaCjs(bKOYBXn-3ync4w{C-=TN_@Kr
zsCP*aw4u-(WPQkntI}Ua7yJ2J$Kp=BD}rcnFpm?dLvc@B+QIR%?BV8aL=f?$bf&NY
z#}nUPi`zd*Je0C*haMPjA9NOM`Tu50(R!W@?@6sg*EWWpe&0@uJ)1!E#|p5%I?MqE
zU{+{Q5&<K7-B=|JfF(g;6d*<%!3r0eixQ1Tf$3*NEFeP`NWf|0B>iS;C~fFvn>Hn+
z;66Aq;q%Q>VtLc{7$v;Day7R`!1pLORB-Nm0ca|{SKJENpVMSH`@r75{XtOr_`?Ey
z`(9UQ`_V%FOh)TwetY{KUM;J=_HcwMY13z_BZ(zo%8qorrb_!++x=(y51W0?`)STX
zgJ{gpwv%cq@Vm&C)pa5z_4SGVO}UPt4wpwllQ%XPqO@)id4+@~QP&!NyLKf1M*Goy
ze1QcM)I4EQ)W?!^u~+hN$Q7Erc^Ow8pd8~TKG~=@RAkD$q22s&vgUvzsoySt9cz&`
zz289%%b$<d`^>b~O(r$wBuC|(bzA05epol?3{OGk7k&O9gKb0ieB6SbPwpxk?Z|K0
z;}(bz-45yrBH+m^+s5oRh3~!O$x80Yg4aU)(Z8(w)$jso7+G|KA=3!0Xm1@q@e&#4
z@r)RIeWiUVrTqqos(5O6jP;v++qrq$trFJ3m~qHdFJj}nt(TjKltiiwbFaM8<0{_=
zbSxJH@mYF}yIU%vH|9+>Bzc3|>v<!ilGZx+gnsOsT!_!G)&_>#%j4GK<}u~LY1cf{
z&M6%jpJg#ypH%J@cITIuY(MSaf0-q5S20`m=QX)M!RXhg0arZOf8u}oy8^vgMDvco
zyc~PuqFhS(=^Fpj9NETv6>GaV-MDI1ZN;G6I?=vwE1KW<4I4QkMFNyZL;nM~vybfE
zS7#%^;7@stH|+vLL;%lInLe-B=QT3g5pERFy#4{@ipjDehVKO^hx2Jn3By*Gn)Z5^
zG{60@dq3Kf;NjC$GUb}5oS<hHX2>1?aH;V1lHt8b!2O`VTTkNyuB4?UVB-U$UzI6u
z*j@UC|7jjsSnaPkMNW|sAuTpu{-^n5MPs3=0oL0$b((I2ofYzpwXk|5`i|h^a`zqK
z$KL)982g{s;-4)XUg2DX%f2wVYqhk_b;IuJFZ}bmZ6!W?z%yoZ{Ia#?j%Am-|AD=x
z?rH6moYYJoW!#I<sFv9Y)+(5dBi78g$y^n#%)sa9`t43=UZjGj62;8)+Ai(UwX6PJ
zN0INt>!jcGt6cRjE(7RI?MRukzdJYPc&9miBnp3|{y1=3xA$m04llOwz(gh2btLMQ
zb^4=44<6k!Q@7c4Mtw)-;=Hf*3YvPf3t*<*ad{svj^i#nK@G38SEz~bt-pnD#g5F5
zcF$|uZ84L~&q#-<W=yVKrd0t+yJoa-xS7TEF2Lv~Db1fwYVj#H{%!X@nBKpz40e*e
zBbf~Ug^8+IsMAi4wg4iLHu$55thiNtpb9UCO1@7sT1!y0yznlPjw8pN`B_TP)?(Jl
z(W>lOV{Fh?y!{#X_^DROF+^uqsd&XsX%hFXjV|4q3R?eh+?a)&86~`OZ}Cce%(f(7
z*RPP4uUcjc+~$wjB%sf_5wf-%-^3R}nepr;GK;nXTByr07+NKdaCTM6+&p$wiQEKO
z`J5JqZqRHBjR9_r<$Ex%<RUklM*@vxUnujkT+EK0(s3=sUwOaWJ1<h#MRD0$XY<z*
zmY1;0yrK|oVG{5Pm$*IEr7r5bq$^>eBcK(|08ah^LWdVDfMGmI$esb>)vncyE<ypv
zw#4iYnP4_i)540I43L8;Ej311sE)ptC)M^>-*IrUxObhFUx+)s+ZLtb8lU3Y(APX$
zKgg~SYQs6bnQql=pfSmP%PIZDa;SCUGfPin(z?;Q#G%Vj>j!t5m04`MRJ?nn?rNqj
z?y%-C9y)~TpTp%Oa!S1yblEyfKN0mi(i$TAk2k6x>|F6{RN8LsGjk3Lyc4CxW8@gi
zCfpvmxzB!Z)O_G0%Qzq(oMQWEbPg9uE{w3Sexr}{hSWF6rg#;~<T4aJil?!@_vM9r
zaxV??M~VFw6mv!R=4;NNfv3SKiVMko^&%{edDO)%ZG_{m6d2`psfd`Ez@q+ECZP+Q
zxe_4gn!D$(EkYr)@<1c$)=)w!fHrCs)&=X&&BBkodC+)SWvj>(dys0&nK~dJkIU_S
zA(9f#DU5i_88;vwm!kYQ9%sEhBYNsZ<u)K6lLE`PHQ!4PXB7tF826HUgV<JE88AY0
zGS)luQB5Ch&3{hmjf@1j3JD4*eoDFWnC_YN&hquP^o}Iq8%y+8c7%U!tl0WkbX#Ey
zdJ@yW#^rVFMUEC=4SKm3d~rjBjdTu0tRDFYu?Z?BjW*1S2#8aeYAj+Iq-BB&ZCtwe
zO@v6LL9@3~VoHllu$1+^{uggkdhY`iKBru9lX^cO|Hnq%21H34msxQcpq(=t5M^6U
zW$2Lo_W6?+V<~Ms$r`NR<?SlQ9Lw}b8>&n0$7uvub)%V3T;D~M#prZTA7HI>J%qJj
znsJV6$3!Jsb(vVe!@-RQf7pwq^?m<Vc1`*X{Ht;4iF>^w+wQTg{bVzsmA1aA9u=($
zn}Ho2pub+F+Z_Q}=$$OBNO(cU?J|_V9-pk=ZDt+QW_`n{^2(A72VJRpw{E)%3^JX`
z8*!+Q+!~%H$~YYIPi)}~n}Jncf<<i(TtKSxaM4qniR~=I{UO*wMx>{EneVF6zMdh;
zunX>y?RC{eBR#_h(1+Duh^dR+;sRTNJ>vJym}HU++XZ3T8PIs5j=y!E{a)TUMg@w9
z*Mo4CDQdQLGqPrBMoPf}7AL-b01Y5pmeP!e^L;1(kG!jhCmHvn(J7zm_Yw1|;{Zq2
z6P@!)zX}(eCocf9Bg_kk_lcj88WkvSPnmoE<No~4Vd)Kv#6EcOX;fdV%63>Eyy*1B
zhj%!SV}aE7_fDG8&8EPpkGh+c5iEN747#aW7f`IOw60^Xm~X9PU+|@^w4d2<O4p(M
z%a?rwftQ9&C?>XOHmYy1XgaE7@GeqG$4PO#{1r?>H%$wcA_;l*<4!#McEok)>}#-8
zshcpb7{qPSy;1_4_NoyNLVA`67fOceE>+qy>qU2#2${u4mQ)onMwSQ_GP?f*PSdrb
zh3woe1mO}P&Y|h6P@h)8RENyf)YZlnP&p_Qswzwsnd?avX~!e8cu=z^os%3fn0%<D
z<Jc_;usEZKPQJd~tkJdd-t>It>Sp%69A3JT$M`0@%`)ctZ#55>8`5p2<_&k44;|cF
z2(UJeIpG+e?$1XI4l}vquzm<^g*`ZcZ!IQTZ=8jmU%&ORXwGYV1{ga5B&zTD9EIG*
z-}j?y_Q{Z8xL#gGFNf#5eemWtv!#u$ZL|c4wyl-NHz6$xwXkApijF>;8}HQBN5jWE
zjT<HF!BDo@zVSg5852)WrRDL^o?I$eBqXjym>YL}qHT%bMo=mQ5O@pGq!+@`xD$x!
zXEzGbaIAy|TsOV#nKL6~5}%KmDl^G~HpvdDstmEs^&QhNU_-@&?$&3PHJsyE00a0=
zW)i^NP9NRLui}nYz!EAH^N|?mj}n2&i=lsj4_^<B`{}k`3@J{I`COz2Fo@T5KOJR0
z-%HfL{Y2tiYbYpTH!FZ;b+u#&SiVy6eSX#C(W~l4t?EX+=g@b}<*;IAAzd-Nv=Vdo
z%^BCPIx)$qlb(x|e|dNi%q#?E*HGPPbq!-La3e*CzrQHQ)+A0zZNcn}v?qQ8q_c2V
zyiT{!EwR=;vX-tLu=&t#m1IBJt-fEAAgYzD?g?rMn}7BwPw;4aFg43PIQvcJRih2>
z;fv+W;#v2*zn8*bKaB;FPbv#0R>Y{?;3~83KOLrjl~Hnm-z3Qn1rv!++I|y#)o9I&
zWbP1s1zp8cNLcgsyjV`A6JH5w!Us-N;>luCj7YyOFkjXn`+e!Nu{F?XN0YGKDCqQA
z_^R>v?va?Xbo(bC=TAO?9i}tUOq1f@Oxae;W8ING=AO<$i+ZaEViSVX;s)(eq-o5E
zs&V&|U}MR8%iLnpqXDU{`L->>!xAsIS+Ae!Grl=-xy^*ndi_$LVIWfv0FP2H)^?Vx
z9>5oC?MUrjNjTZ>&z_By4Q&QtagrV0dhrOaIK<mtTQ^aLR;*{d7G$=GhsBAD#YvDw
zJu#*(>B2aX<wzPQ4dq1>XSpCXRbU-w`&8<wwThjeM8)g%JdxMBFU{4}W>nN>oK(~b
z^$y%FN0TmumV)MAh@uBODP;$bUklQKk=BPJx4%~OJFjir(KYjfAzPXfHIX~3l4k>p
zM~q6Je%lc}knISK)isw2h{CbXjP!y}1-2FzAQ9&5Wi6bH54OFj&dNK`qQ<RT$1cmB
za0iZt_1tG?*u{*tHHR#RM?O^K6&>@U73TzN&$mz7+ZsV3gj|J|$}svn_%FYh8R#$w
zv6x!b>M4TQ>n^Dwb<C3dFE^nqes+#{rM6!IXba0~SE|*JXZngzLljer!8-?cr3s@W
z*dV+X9{L%qGyyz*xEwxNJKn6_QwZrG9O05T-!`M`P*f|6)Q5p1t>>6I^Rl)YnLvPD
z{AN(Mfp-a-%15$9Lunji1ozHaZ62P`n<gb9&U8SybnEU037*iD%DOLV#sT-Y2zmVe
zgQcacY(djR3N0ZYK6KQ!as=S{$*A#QKMzQPOK^30IlU#lKA&QvUsXbai);0Wy^D#*
z&<FOgB~?jVns!Gy%)YE>qL0fpf~~e9-~a|sFB7rh8=O*guNz4(a|}Zx5Eg<HQ|Hv8
zy10~uLzveLTHs__RQ5~<KZdcYF}}{(HYAe-t;3(Y;95%<-h5ES=#XX1qI-||)6olv
zGTp-pXj^Aq^rDoI7<?)t9o5^Lkv`kom0>c|o1bAa{TIl{m}RKYQ5Z6|(G54J!d>Td
zoI<Og7=e1u02?;50r|5ItqcYoR4D5l)WZi*o8;-J1sBwwMVhz*!=N5y%AT@f@(TpK
z8g-H*<|uhyo@BQtJvw&es=dHTQLB$0o&9nN9Vt~@a#^)wF4Iqj!ld_7Ea+@q=8zUn
z<fiaXye!*uDQo#x_|yn}H1ZRkv09Vf^$SP3%T+Fu-mCg<zk!*z?@~y2U!rmO?K1Or
zazN0m?0H(inHcraO^Va7%Yk1n0TzB`bN$V-+mU+`VKxAx$8(=f>#a_&nHXm{K-Zl-
zTgzf5*TTxWi*1X`WE>r6W~Mvq4k|C``mx<B0I2YDSbNXPeRljOA{;0~3;Qrn)sYv3
z%?$2fTJY=PBdma>&2qT*3>$@OW5|ndII=mKGr(B}p0>~e-R#QOMuzp)oUE9Pr@HkP
zjyFW;ELU7%{LXY6h8f}G<0)Zih5fLUhDzT#{FgOQPlfYYOK3{NZ!b(7IR)k((*+}d
z<4ZuOaP{<L*%NE%;Fm`0?<R|0Nv_TP4JfPGt;f#Z4E5vI7IEVkmX*U+@OXLSTE}44
zuV-qW3cekfSi{dx+(rpL3f0T`buD96U!lhZeM~~v6u@G+JBrM&4ELiar`<~&zXpOg
z^``>Cx-((+Oj=ItB~J3N=%Tut<4<y@6?I5rBz!04PoG%{L7L9?Cw#4#j!B+Uv6l&4
z)q>ar07-dqews!tqzppO7@O!tL#Gd>HOEYX%%f|BBPQOt@5$F<?8by{Gr#H(>Z*ur
z**cUJA9}y|P<-eoT=^0T98*8<L-}t2-9lCw<QcC#S&#9tz@;9OqSBa(<<^72xtVDo
zxG%PD){ka=Y_1l-qTZu@iiwY!<C(1l@qq#YTJjkoqM1Y4N5E(4x`rH!XTGQv8yD$y
zX1HWe%@DrS{U5Xj-Fe_=x-1G~(^K}zzWvbaG#oKF4zK*0RSTM6HU-L-3$r1M<Mt;;
zUG)aSy952MXNIV+i6!5o;vjl_)ih={oL%HtbmttuRaFRkd>hafx0P9(eiO~=z(of1
zf@hI?f{{N#`WVoFlirPaBRK4tQj@?DRD#8ZhN~pT2{cayJ{;U{Es-)UpvNL2J)Flg
z+KQwC@VY3woau}eURmGGEs=U%Z-Q!<O<L1v-j;{y<|4v&bF@~xZ$iNJIIe#gjGQw=
zWgN7WNDY$u;WrR=BSf;UD{SGKM%7KRk>|tU?lYpX*fhk=mp9Nk%*;R9c@M}6*X1@E
z7QD4bNk)90b2ebBqm(-SxqOtb^uj)u`=N}EjFp;-IiGmvL33I6KkKuB{s3fj`Dk>x
zgO50)txpJRevj=d?`en)1|jTm7QeLzRt+#^ER7@tKjR%HV5HLVyB6XEwMPpF+)iQ6
zNZ1_fEmJ{-<?M}}3T0+_V))PF+APtLLz<3@Zqnn>(yMws<VY^J;T8QHudt?)w??~0
z=mM=1i!t+)-}5{Wa0fQmV{REmJXA}w!9VWoxu&7hqJH5Wr9&OF9N%tuW}y{n#CcF4
ze(bqmlX-JLwQp}g(x~bo)~)%*hJm-vn7Q}$fUuZ)-z?G?(H=$s`qVld|7ok=8uZT4
z%p#FK>Re|`a5JgL9Jiy`6o2O>A51HifT_@GkI8o2=SH$E5hySN7-s55B_jsgqku7>
zVvw_9(A@UZy`+zTCL-74J5=4d9R|tRlYzYeYl5tBfO)Wxt<Ph7<kf`W^#P+a1}4#0
zDC?4$hp^%!o53&SHN$!`yL;(P&e}-zwWi*O1G-4OR8yw@g{NYQ&M(LPs8BH#D_&0<
z_l$31)kcaz*Eu~=c^7k0<C~mIhW9fB&<d}lac5hH&PXN*nRU^iqet4iC+u@&iD_eQ
z@kY+t{p$7-fk?eSC`g%KtazCdHk+3S)a#eC2fg5@DPDGl&HfSJruIkug}*as->7oo
zC$Hg~Va|H}-lV3&v(_JH23*qq_}rvVT3Qa&yZB_Q<NJfwfnx*pDaRVZXuB1uLEkh6
zCt-+_{i)_(%vv<ChOyl+8eQ5A)LRsT;yFd<^8QMD%;Jw}<RR8R!Ku#Lqn7rPfuYD<
z`z952v0^NzC@QZYZOo(oq6+RNpVrhSQ6$u<nf4B0G1KSJE>-lkyC_7l(VpVaW4|U5
z&n20ZqjlOU0Ufs0eYt*9<>x5@S*~9pGwU|?3+F_~G}UVi%NbgkcU@z(X82QkwA{ts
zlq(MC&Y48tJ!z?eOLezcZg@u#W2(?X2U6XEJ)&z3iZXD3G5rE#*~A+YeOLZ27~RH}
zmcxdc{xa-WQ@p#_G@p?}`@*5m_3oeRfTjmdWdX(xXvxhPqc)YP_6Ca0rAQrrR#c$Z
zG#qx|UPd%=03a`DO@E-5?vQ7_LU2c#^m<qy=G9Hoyc+u0hlK~OW~W2ZM<|AX^sycl
ze9F5v!jYgm|Hbg6l}8K}*js<kRW6HRT@IVd-8z0M9Upeih$sL)nBL*%CFP(brXpzi
zZ=Hj2tp3K8njX59KoKz?r9G4FA#Roz;ag=AJd+hGwHD}9chmD1wb^I2m=eM$_Mzk-
zxvwLbMnXSkhubvh&nYQQyiN6Iq}eC|@xQ0D%Ajtbq`t3qJU9t*7*u`<ZLWa0BKj{`
z|GWsX3HD8$ms}vHGj&!Y4O*T0`z1*o9W$A3DN8AAc05P|=4L<&Ea;Pf1*Fsy-^iX9
zq=848`op|dlOU*?`<<5PgYY4dU$STpgmZy~-tvG)kG&~y)$cXJ1*i^^+U8jJDM>l-
zwb%+OnVT)7Eci<gX2>WIwU}bkDheUg(X3Rm^EROf3W%f2AE_!LEOI>~p%`(=A1Uw;
zBvUkUupYcbz((s;e>z?CSwI};;0q(KuXl11bU&AEq?P{Cyb+nb(O|4lcI^spb`iIM
ztDL-om6p!W^q;D4Uo*It!~dXm`1yS*(~(;BnH$Pa;U^h4YVXa(9_~uxi0AED`a8#u
z4Y`DEh8oM)kq_KIc3!!A6=ES0^{(m>b$6%Cqf4A$T3y&q$6qKN)&OW8C9>V>o_ACN
zfvu(b=&H8Gr8{H?-gABDaW+rcw5{;@xDFqQ&kUY=L{U2xlesFh+WSI?&FokD?;Hky
zqkMg{<$A?$Z|c75HaxcRv)*<@PBU=Au{$oG{ZmT$va=l8TX_^)Rb8sJQ=YX8=A!9G
zaFKffO9BCalw8uADW8JESWzl~keSZB_)OGuK-@Y6<d~bD->yHs|EfVIy2qM)Xtv4t
zJiB&e*9Oa$*h^4qIM?!t>N!icva8P|j>8i{9fpZJdmBla#1X+yt9upOnH3Sd1f<Up
zt#gn22}`+yP4%heM7}#=eD>_RY^b0GRp|%MO4hcJ3X99@M8?3l&|1UPpM-@KRG_Z)
z9t?E%RYDjK!x_7YBX+eeCs*>GGv;;jq`VpUerz*eI_osB2s(DFs0zzhGkVUXVq<HW
zLZ3WUoHB5IzZX?-XQ#H9qxSv8F!`Ho{@UP!VTPus`WSN5cWTTfnH>7PkFvw`TOoli
z^n0O~9^EMD@JO*ry;R$Zy}yI#d^(fH3g#&wy^fJJv~b>TD>m3>-q45Iy3@q$M0#M6
z;O}$EEF{U|(!&siZOMo4#OBovuJzCJhlSR^mT0+*>p0oIRQfB;cS?g!uYc^I|KK9}
z62nj}Lt7}@JiRjcP7x0o^`*wKx0l?Cd#^2N(SgPiE~U8qr16u0ottV}FWH{oE1vmO
zPLt6Phg9C*F0W1nJ#Gq*a&EdJdk>NpcsX1t4t{&5F_+?T({n}rVWSWJ<=nqc@GiNN
zmFbpzyG53vTk_1a=#ps8ow1Ks!a|yUt>d+YzOUoe8vfg`UjBWN_ua!kr#=^Mxa}Og
z;v(ho>rjggJ%+bTl_v4x@Q_zGjL?5uR0Z6N=Of|=NQa2L<Hp@<-kp!`QnN4F&N_%}
zi83BCM*Br~w<<20LBQdU4IAmVf>j<d6#S->Og{RWd?4iH`z4<ntUuL01O3eU;m6VB
zvPkr&)F+uqBwu;gZRGz)+*?4^v1MDs!5xCz0g~YE!6mr6ySux)1b26LmjJ=t-66OW
z2=4Nq<lfu2Z})rM{oeQe;~Qg*s#$aIf^+KZs#<I9xvI88&29S{nzqyoD@SEBgI(<~
zPFdlc(*rriyYY-SBkODiRGYS`R&5h68tW-XHt}4L)`F2h8Hv^7k#vbYz{@uD@4&eO
z=g!zXK+JWh%l)s<h&>>1H_Y!K+XExc@GShs&f2JC8>?4gd3rvI_?R1GtyFyXZHor)
z;H_OP0|cP4f(yS(c$|5M7uii;?S~NABRc43!3t6I9%}qeYQbU`$o@N|3lIXCbQy3O
zienTq2$uLyYzjV5<NlcS>%v;#1b3S#8bR8dEWkvIF#uKfH3EB})u3{+gJ(Or*y&ri
zzUvY2RYZ_oI#{6mn^stmJ-XoG0aJ8Br%D6etXN35o#4sPx7}#TuroUBqdqA<uO&#G
z{%3DF;iEe9&aisBx9M>AIyE|9XYZ@uV03?Q!PfHaJELet6yHE_74bw(>}Kf1o%?Or
zbwe@8Yl0ATi`_vhbq(Zxd4L&_)@Am9%<93chMezaS3%P5R`zi&bt!s4@PNbJ<X8kx
z+jPGJ@e0V&fwKtA(#0j}bXo-A&`qi@{`wyIrc+DA&$F7q%h!Mvn%o8&(H|m`mm>cY
zI{<=maid8>nQ;UBhb>C&J6x$Q(?MUJ@$^^ci9HXg>rU6RZiptbi4@@xD*M7wMh?T!
zW@rr=cw!lfxG^g-f4ky0QLC2RNLo#AFuO>pjd(QtM$XFWqqnl4)hX<I61yg*v4aKz
z>0kQbQLevy2*eTPuuc)gM=znGH1HcIQx5(fmlb3n7FFU;#poE&MJJ%Zf`INQ>1^+b
z1;2j-jckcCbS+DV)8DCr1+~42pULREAhGiRyvlwdJx?9d$Rd|cQL=j^JTEX!STuS_
zKF+dvmOrmM6s~;jy{2C6P`qM%9zC&KmD;E|SzRM9O?I-^{&0J;$>!cn8?y4))Rwgm
z*l<d0>WioLqRT)TDxA@4A`f0M7VtYP7olHjK6%S5DR`k-P~f6zN~}a?snY)$DM9u^
z(y)=Ulq$M|yegz+__(Ei7)8@_7vVhMqOiD>3SG$F6WKTt<#G%`z|o$+k_Ck}4cGqp
zV<pS}%S!WF>~Td?M?>+r>>^5IOyYWe81zcHIoeHIGWLys>)V?=x&TY`IZ$E!lMYrK
z0$Zlx7dD&^Pc3=6GKs_MFAGsZijn<NYCI|PuaWaSV#jDH?F9wX0vwHY5puy^bfLST
z^s25Av;2C7;_11}RjVIj*__B3{Pk5kYgWfn=W7eUIO^8MH&{Zmk&LirLI5V<BaI;k
z7<-rm5>tb^ziALa_B3;Y3fXz0g$L2oVf1&oGzAZkb_!Ik!`<3?qDUZm^jJcvw|uV9
z;C(zX5JzvE9ZpnRk}JEg+JGMno(y8B&ykod8Xng@wlA)%D=xKEuplj-my$`y$fl@+
zFv@TfSr)No%l`tHR!2Of4!%m{cN=-%wi{hrE265JPliiAEEHNBlWXx;_(O|A3z@_e
z9adq^3#r>_wYwI7HrRv}T6hD+B&(`;T5Qa;AhG@kYKY-zaBVh5=~+hBpS>2<F<+4f
zwot_Uvy@T5fuWqpXNO>{PH2i`SE}&G9yUbgeCqtdRRXy%LreUxDFYu2)I_*k$pS2)
zO?y2hvr9PNGJHBkxc7U!;R~gLVFOpH%-U$mj4ucRnKr|M_Afca8FVn?ESrMkHbr0_
z^f)4+bc{=A84~+uz{~|A-7Wv;d0Gw9jvglo)pt^eHnr>^B9Mv*myn5NF1G(bKZq6~
zK`Kbp;G3}ADQ2lt@UdDBSEU4@d=^s446Mu!bryLF_E985r$DM&j#Q-twR{#v=?I+C
z(Jz6$OYGm!2^f>H$djptxQX<WiN`0|Tn;`EdU?&2pFdj1DcP4gY}+e&jE7FBp0iPM
z8zVgOw)CLX*Exs1Rs8_36HnvzIS^kjCs^g+{jzpA)zw=#u3kQ*n$JR<RrE}8R<@L@
z{nr@LRAFHIlv^TG{&IpiQ5jIHvQJ{taTn22F$Gs-a9qQ=BS}^d9^_mjd>yoNNb!AF
z)!SFqF;{eOT;-`=tXx(BSYotwlOt5&5pvI5t1PmKliO4e*sJY4bOW9tFS>~xLk?~E
z#)k)7Zp{&y$wJZ+d8CDblgEb<rdR#XSN&Os5gn7baR(8P2NA&sKvD><&6eP&O`)I=
zYraQN`M6cn&ybOsA~dmzIxT@;;Cu?5P8o9LKO8^FFAcN+KtkV@99-KK)=vWln+=oV
z)K}BbS8`!7PB}$t^_Qem@)OA>Jo4fu5EVHHy}arsP$xNH4gpgC+6RH``P&UvhbY`{
ziVm{>_glmUYjyxJnJ$c&iXTd1@^AOof)OTuv;8+V^f=VvLU4Ig-6r*PIAHscdQ56q
z5g0;wfm0^Be?pkZ{`v5JsqlU*A^n66lW<+8{$vJ$xX#a<U1VJ3dRPe<LIr`crn(Ah
ze?rI!MPeK}3hHn%xV-7^;`;vqY;`*=>)vRtg2he<?8tg7<#KqloN3k;@XG{po=X<R
zi~rt+zbWimmD;f=Hm8-YN-CZfQaH;ed@cD8>3&+VvoMsWT<{LEu3vDMSmm7(Ih-nu
zU(zPJ3Vc<!`56gSpy3%t?+6N7VM{aqksLv8Hi!T}Kkv|31PC(=3&d4-xK^_DPfw`c
zCvg&1tp_PP<CXkVV#=2u#6_5pS~PTV{ywVWWC--SY&{HxQ9d>2xcP7Sjx46%B-Nbr
zEKGG*Y&0kwZLuBg^Q^39EAH4|?VpEUD@#`_$uQJ02QgAf3vHf1bK)y7jp0T?&V3K%
z(UN5_ml+b1t+j}^P?@AG%hU7sx)qb`W9?2g&echEGaYtB+#MEfmXoP$BU6SPPVlue
z%+|R72_3O^m;LSVgqjg^G=gO+9pWj$c58u9wvv!+!8X1OZC6aVnL(z~{?~qfcB-<K
z&mE6P+^ru2_hbEKE2pzNG6kBYwDzlnL0{Yin=9QcXoh!%npeq^aChzUG_2xBBJ7%F
zX;}W>k?46EeamddFHme--0@`)!*dwBW`TBrIT}&98Wl2?N@U9X@ns;xhJ4Lx&tsfZ
z2d@R3vVc+4J~HL=tc%`t#Y)v$_&{=g-Bq%1+(6qrIxDpPh;EPY?j~6*7T9f}zw&>Q
z68_l~D*hDF=a{M_{>a*;yV$m<OUsgtPK<tVSf&u+bSG8WR(ADifD;nouR~M6K_hdx
z#bwaOMxP359XPnfZqUYRA8INf1YNJ9fO)|$lVB0WI3(!-tChJ;<;+&cxg&C6x-~II
zd{sEu)t%zk!uaQi<R4tdzjJ7k-=J=4H6a1L<%`&4B-+lfGZZSHz-nl%AZ4A9s}L5$
zKot_MmPiG?W!h|x5#|;vyNpVX)%W&}T=|*{afY;sZM(rO+><<K)O-G2mn2Z*@#VOr
zmnK<!%SAFQ@|jbYYi?`m9lS~hNu9#gYFhK&fAt`%eHT2bX|Xx7dGK_<v|31j!vTC1
zMEo6G+3HhT^P6@I3&6#?5DaAy(KmcAHv-{okUchn#ci;?0@rs8ufbeJ|MXGMU_4;U
zHW}{#?LN%a81r3jcPQ<kH=hg%X012W7opd?NEYGOdyviupTO01D4*b0-hnj!JROY-
zq#O7H%VoH1@LO#_Xzbwm{q_&XcTCdJg2Wh)(ILh=5+dN-Y(LS`9Q1*-v1VgJU2XYj
zO{Fu}$1deE*Mr!Fn~1+!|8Y^4%*6Pnx(32ktnbc8dw}4XO}h&7yg_q-1g7&2-mi-e
z9O&fG!T&dryMz&LVRePPE{;TzQwj*9ubLWX=fx+N&ja{D!W*(K@OqoJE`E-`#qc}`
z6W~UJR0d3j^r@WTBuIHfJth}){{W*@s4jcU&Qj~c7E~8d>JJbqJIL|!A*w2QF%Do2
z@k6@A`OaeDTk}Dxyb`Hqd0?dTRO?j7eO)^r>HRpv-v#407@)CT{Sf>5!jG>GLtyLP
zFsdhDNS|AaC94`<OeLg%K}ZpXoY41q_!rF?P8Q`A=Wz68SOe_D=yP0P|8lju5q(Q-
zxahPg5jNd$Eta8bcrBHXDn=ev7}^GNW&(sz(kPrI6&!yWFXJK1^$=+KbeO!Gtr)G;
zVc+{U)_lz1tF34)z;qbDo2>{f;$h!;D{Cg^z~z>U7GNT5+trqnHgdmjx3wu9GwE{6
zPD^7vY{b=;jh5!$ka}9X<f=KG2)1YNoNyCeuqhQD(3G2mDi8!cq-W&iK@-4$8_Zl6
zuRNG`lXCHmb`Q%LwMD=W9aM{;AG&`8IEY698P#wo=c!!Pn6bbxJdjBwIL`*YT*rUg
z=5MhKW2dd$_YEKWXsCPMSNWfzUrL~!QBJZdnGr_le*{Z%YI&J`K`9h`OJxvBNB9~b
zX9LuDwdJk-(hB4w0$OB{j`-tSi$CgMBOv4;GX)yi;MNByO+qf`&Yq}BLmfb8WHUPW
zpV~lO`D9MQx$zSm!2KGM{yKE<zBx85@cx^0phDdySUv6Gfwpw`r@k<}{W3oS$?4F6
zsf=V0#!WAmH~8SSpC9NrL8H3$-@--pSR{kl``T8G2SZf9#poJ2gQW^m-gHy}B@jWf
z+U=^~Y)XLoa<QR=zdG!%?rKB%f0@iXjdeY;5()Tu+;s@P2W!8>M&yG9`1R=c5=O(C
zMk5M$!G2_=IWdDw&#u4%qtNFygf9*UNubYWfV2@~kvdeu<NN{G`NYkd^II?pi$3j}
z$8Mtl6?xPti^p2plTHpNnxQ3Elr(!t?C2(%vE0f8vG@BGh+*RUuWJy(xI#3>s4$d&
z9nN=_)}k>GoMg|ci*n&*uC``lw4Z8%N6_2wolNZ2OQKs&8V7^QDzH}q_@`ITjaNzE
zS8wR2EWq6>DTC>2=Z_c^&@Uajn$Nphm2BZ(hUE0kPtvPr2hM+4o&Ys=@Z(n-Z_Lvl
z-S-u&9q9XCww{#I*F!JW1&!~+4nQ??a37~K9#4HlSx*d7LgLhH<tU}h&}})P3ed?a
zk`e4ThVLb|0;T(pOXJwgM=V>|sR(zSTUvPW^75Rf8aCP!sYD5PrdEa+zQh??k$N|h
zcsI^pCp<blgI@A`m*P^PI`Zqn4i)(<KbUT`T~~n{SyRk)^k2Kw?sHIi=gv0_x|n?f
z+Fi7~jM$00s2ApwWb&L2DC3usC4@X(s%q<gqA6IYdYsE$+J3!5dO7b6FD0{0m;cr_
zc4s@!|2I}PQlgwBU)3*P6`8ArC)mb5zY}j;_`zm~HGM3wuG!`z=J;Osk_KxUoU#3;
z1x>o-<HvS5XZuYnn$@v_a&$!-7R=K<U?AF*_6HmIwfQe3IZwBAHAG|gL^T464hNB(
z@afMS&?E5tPwXIrdJlo<8~7MmEn%1fd1!+c>5Fb*17O$yPY<9P43f7o?5CncH0cAW
zV9iE{s^9Wa0!)U2soC<D$wAM?Hf1Zu)GF*Ym9bCqLjxnl90pY5k=`W++eV2ws){Cc
zlGDVHuZE@90-nrb#b$Y(*6!#HDJGR`Bvx|jAu0_O#eU{0wg{A!x_!*$O+n}j)mu19
z8a<^_LBE~J3dWElDK<QuZ;-nA&;C4>?SEy3R6e8@TgxEH%#?`hVw>!P=e?F$_t?2W
zttFuE8646R_{%dO3)bbDD4~so=BmmvnV;Q8%+p1Vy%x>pa+}HGHWWvwF$q(rzUE=P
z7WeU(ooC6zO(_zMFn$osL<`=r)zx)HOJK!FF33?ZkU`JdaBI|{mKquP5d1jaxzq`d
zu-i>OV&(ENmH9$%kUhnF4BLo(Fs?9?4l76`%9Lz%>{^#D{g_aPXhFEkWYP<l?VnQv
ziKGd#46-TINEC1enHM;%Fyfn<Df*ez-p`nI;J4`XTSoK{h22ap(D=T>o2JQd;)2YY
zP_lvxvH^$eAxbSA0tlK&Q)<7Q8n7mB86B^dcB0M~qR#dfTfQkt6#AASI(hgGtHRB+
zYw2#l-CL#5Gz8l%BYn$*cgt8De!>bcmLIH?oI0fziLI2%_z{X>8hrN4SU%N5zk1Rv
z->ja#!OKB)2(p^QJN3bzM0NXQeE{aUG~m7G{c8Mj3tV+{J^g6;BC2ptRO&Guue~bN
zu&AN+_KSU6Ag6E(1)*j_Oy#fu{PL3ja3$%L-`XV9Lw82@Gw9K8-i1lR#$WP+|Lo+E
z)JV!NMwZYa6y|L*>X7^z2dl5uR2Wg!9%%U6Zd9Cz(p@vFx9}szh9KlsKJm)D!<29B
zn_pem^fNiB_IlvXKD2_v>Aa`<84A5C2vG)Oyv5g1$b2ilgD7N_>mpxx3=5W3lR3i!
zUY9TaN;I0-_rONAUt{piZN5VL-HfRF{*|~&{|Km%X>KNXJ}Jl{&sO^!Lke=*=x0fz
zUJ^#VIP99C@I?b53kJfEK)QUrv!y*T7{PYhupHs5AwwR^QZm{dr5OVuYYKAuD72Ij
zI4Q1XEmM6B6{6(_&783v-Dw?eQ@SjsWNDmHQiQ!Y$V*ZG`}{5sAT3IlMU*U!GD-@w
z7YBYR>UU4n<q`XDXwXs8>wC%N&l!PHTrko@aKkfip(Z-(&H$skY-Cvs(wXwVj>@kC
zlKmX7tQ$y0$dwp_KOz!km_NWUt&e?J6Mm&4<VHovmKXyV5s5S$R#SmG-W0!s{n)v1
z_IJ6{MNsuk<3&iAYX9CQR3~3?l01PSGFb+(_;3{B{{-f@+W)heIUdTH^GX&&0PL?x
znp9inM2g|Av$+L6fqf1NnuPwDvPV$kqcj1t%;7pd{I3RRP8OBY55E^W=)YzZAp8B;
z2{1bORKRI_D66rw0vB{)THnKoe1;(E1x3*VIjr_^P~l~#dWVM*jR-f3w4>_?@edx>
zhW#DreCHoW152JlU+nqMOgq=po4;IVzx!lVhdH$4qUa)h4<uTIdfdbm3G$By4c?$r
z+4yZXN4DCJn$G_LBz^0Rlr3lxtFL@|C%M!H8mUbvDr+Cib@^(}a@TuQ+i(E@A@YDo
zFFnd%VFO=b89wW;RI*_Un><FEXYK57cX~lEjyNVl(bO2CF_GB4?VroS$b4+k>2M-b
zA+017LeY?z{9X|`JtA`Y*mx{av2Y@6Aqq-CtV6n32P{$ca3VaRSVTh6;F$a#k!f9`
zLpr$%=`j@I`7(rFkJv5NhMZ(E%bD-Dy^Bg7l4jvV%tEm^grX5K`TZht`a~u4v9nmB
z|48RQ6q=Zgqh$z4(`$0l8g)wC9DpPu!G4SIIyQF*SssQxf2&TA=Rw3yQP#`4t3M@t
zFA%QCjgGu*?VG@rn^>E)Qlgg~OH)cA+y}jze2}jq$lpi8Udj@-|7(!+lHXK=xi<xK
zaSr3->myMv_K2Iw<99ryZ6#_fcqy+28LHQ4<55AD@YkD3UC9o>#Ia`{-+umh1b$<d
zYf?djR@SgiQ1-Q#mswUp@%FRSk=B%q<ks`0fF!fFgZ_jwtp5QCt;ss)BrV2V_rs6^
za>X}(_xfxuHSm=@!E7$SiCjFjNl4`Hc`=?dH9XXdSs34?;ckqvAM^CR3#)l1YI!EA
zd4AOKWYzwyu?XUE#_!p*>t$5OUAUSn3aT+XlP)f*j33WUOWrk<ngacHy-96mUHZmT
z#?3#AB~hVrIb3#U6~Ic^Mv|$Y3OCW?dZ^eUX1yrq`q3hVQ~U>4|5w#r(<31s$8Fc6
z{>v>Q*G;C|-DtLY?3ZzfJ##MUZ!Vc?V$yuKM{a|hnzUF%)U(o?774)>rP*H7ha^KI
zEkhR!*ZC|4T*sxPS9aPP%EPyDG>OBAdMOsPYq2M)alof}R^Yy@sD5KzQeue+=K(Xa
zd-ftTB!CiwdQ9y_mbtDP_Wk|?;)Z3tTBebaDh3IQJ6f<Gv9_)z@4L<_DO9TT2>uqy
zT0y)s+j-Tva_`stGa9Fd2eyY6|Mt@@ykXa1zp{O5y@=htsoLo6%LnFxqJZtVG42GD
zEMKT7Y2AY6@0KjA+ynmh;;$LoaXsflIo!|AUiJhi>GbMphj+X>h1)T+4S6Nz!p9H;
z8_9IC*5oqiR=#dB1i3jOfG+Ncw`0X4R&(RCL_CD_KR!@Tynp{#!k96eB6TD|>R1@Z
zJ|miOm_JTc_`5mC8MBMdI8E1QFj<mHuKZtxC5#Q)xsReVUeoniOedt0{}STNiAEgd
z3pvJ?KNFerG?>vJE=#B0#1)?8n?ji`e@b<VF2wsUU~FMV{^4`}p*+zck(+V*WdFMQ
zY{T+B=4o_Dcrm!9bYhzdVs27ooI93iN_f76+YybMStLzVOOV@V_C-+?=cC7|fuK&2
zWU~E(qUwAS!i<S2`LLMDXCen4=DN7l=H&cS(vnBfBd^#N|NPVJNSeY(8j>8+-+COb
zO0j>58$Zdn=lExcmv0Z{*bo+QYAliYuHX@yixOy}$4=8N8TFNOE5FuOq!lYbYMb0O
zCRP2h&xL+S^Rb{QYv+`-nS;;MSKCCJi3{?lQ~=`dW<ZPk%HDXYmq5<t{0uy0a6i05
zIRbsw&UvN0@+OAGd9%%H3LTM6&*WP;32zm+lFhb?h^G?($O#Xir~6HpP@I8oX1vRt
z3?Appt~NEkAb?jPBTP9v1?yPfO)p=Zhkj%d$gZ}zNdAlB`@MA-l}_AC$nYFHp^t_l
zOj7~lYcZ9Rtm^mN+C@P@`ruGKMD#uYMJSsBntd_Zo{a2hPHr+kutDJm>D;5}wHL80
zd&2LLd1Bx2ClOzM8*sU19)#&lG5{EG+L85lpB%?-1KuVaor84)u;c5bg#J*o74X4E
zlw&S1<EUH8QMah2T3&Opgyy>frc){0e@|;75Z9#ff}of3Di&khK~!cPbxS*L7PXwo
zYu=U6JSkv$mBR7N1^&OGt0H5h9I3+n&ux$-d_rt!C47H6f<5rbFt<HmXYV+{k$MQv
z$T)xg_@hB=beNN{6xcio;aOt+(!|?EvFGwbcO?c-3JhMq(G-2361K9%Y-I{qi{$_c
z<cOtcP>P}c|3A`k6n&xzTlr$Pas{j<a_I`>Ql)65ilP50{a7M*BVUl7E5;_6U>8cU
zi>5eCUK%g2KweZV75lG@?`bEg&Zwx>ga#B7jUUFu`^N`_WKl4qlk`CJjTouRUlY{O
z2PBH&aTNWc=-c_BQ(oli5{Y-)8o(#)?oZE+kGe9s^k>1^2??Hs^FV>^YfO*pspe#u
zmrSQnMVYKSZOoM<j8~+YPUbx4_^Jwx!1oj^&@s?`J(y!GUq+{9R6rP|_~fa57|#Fb
zw_e=pCR7aDgLT;KrbMQ7xS1gMK}_N7MR^?8g`0Io5Msso^9iNy<Md*CY}q<8;u3}D
zdye<=iFKM*Cmu3E?G~6?raIv@5g3i<fEAP7Z^MHIqz%}@5{!nKAs?03V~ZLX>(bWu
zGt8l}S<_OooVl=BQTG$<b+u+2kgr`A<d^p$e4CYohvCXA;u~CM`*&(cb{;8>cNWGI
zTqLwebTMP9HM<l}NMtczkoLUVB>^#{f~l=Uk#Y@yIP7v$ZJo$d_`~;oS?~I+4J$}p
zJH%VFq8c7m-5GwkM>>-cjb$mS4Z{{7^bW$>Yq}0;05e-?Og<(i|9E|&&L#%RaaxT<
zY`!|1tc+ER@1$7mq@6Oz2H2HFtCKc4`t1`#xX<99aInpCD7Rmix7m4bG;_F~B4&Q|
z7mkE@v@DfzHK2`(KNAt9dpuoeCzqU;+H891wrv1!=c**Wxa!0}S8kb0(V9hQ8G+3K
zZ?`Xd{;2SXZ*s<wzU<5lww`7_a$Y9n$6cvN-+IcSX?@>TiFB2;UaNFc-W%LtPrw)n
z=u*o~XI79|nbYIk4N=?SqCUpkEiSZGXi(08wW^xGjADeH8FE1{&q-!RGY`qKY#uZb
zF=WcGrN%4~5K~<#<xMkT^i*GT60bfInHdlDXsASQ5p%52I?dNRk2}@gngYG4^#Ol?
zQLj%2e;`zMh^2N5b2Nb3NA?O6D-RHpc$_svR=>thP(fCA2r-l3h?=6G_o7t)lIclB
zc-@vaw$hV0t}nh{Q*bO>6QMxwRf^TYN`*K~^<Z8ol0YfI?)ii4#5LTlmtwte0wZ)=
zAqD$tM1u7_(v<U;&s3)zeV0-rl2@CY4>s+CyS7m2`dqHz$sU!M(RpwM2`|8>z#{ts
z6;RtlQ|I2xWukW2u5PM>m<(Y@S1N;Qu92{g;)5(yEZw&U-5+iahF#|w;j4Tbjf)IZ
z&iy!zuZF1NZoY1$Wg`M-(25nz6M@PHUiHc^{<0UQyTsT<RMF(ae2G;x9zR7ZRvi#f
zJ8TVQt>tS2b|{=6bsM5Cu$e)uE|8fC`=gcyIc$*2d>kf7c-e#wph5}Fa1Mcg4Z=62
z4xpStuFG8Czz2M)9p%Id>XhMK80*nt4flzm3q8RG)7J%r2fOQlN(8w3J~Py5?+wxY
z%q1iv0^{gaq(4<QtpoaJ;J*^|E;w5o*e)2q^mTjPmvl(LK#`Zrs1Tn~J}RYTU^Hw~
z(FH*(nD`75n5fXjZiP5M`$!e+yrFsbhUZ^TYWN|XF?)cmcMC0&)YZoj9)-dp``!Y&
zt`iSRhi}ia^nDpA<`L7+y@=N?iMhDa@LxW1wX!buBmt!^)|<lS2+!vQF}`)pn2-Z|
zaN%Q^XZfJ^`5Ga#c)*GpRJSQIqW3%bZ{HX3NreTyZ-$IBv7p24?&amT?opv%q+6m>
zm0<40-s)xQvFNd&|8|zUDM;T_Jy<O=%G9doqPc4AGV+!dpPq_^3Ns3Ojk%Rl4}k!S
z`)w31H&Z#9G?qE8c^GNLbvQz=e1A}X|CXvgqdqSEz+%^;EEU5k14*cIxM=_L7IR)-
zGR+!YCPOCrc|WIqyUT=%2^BH{)&%bJmVO>Q0=jm95<&$<JEA4pvV;ff5!`jiSRqEC
z@0R<F&WuY8i9?3hywT8{<NQRW2fY=Y6?6sO12<+c`7q~Kv5XBviL=`B(1zjU(uo%@
z^5TyY>X2HphjNxm4XQbaG(TRC!){uKlVpS&)=MYa_byzoJ?C!cibpPv4A<9N&PH+c
z&04hyYl3c%%FG(eWxwn_D$mQ!$d;K^crl~A9$hmZ%@?bi>sItG%Q~vfTPwdxLTlt^
zRd|#%(6wx|RD8YA>d;=uoRabWMqH_@kr(3Ka@(KOWKO$$jFVy7S|+-oy|FCs-D05C
z%rvLnHcwQSQkHVuct~w*HbR-CwCBCekURHzzUQT>KE(7(YeqvxgXcPB5+bd6QrVZv
zwU_N_Q@uIRlZ&W<=WW|pm(|w-{9A8skcBPHnLY`j%V*z?cl$MoVXezT1+v39fY$E9
za`eq%)0BdFRF;zKT~}tY)!dJ7=Vnbzi1_A=a&wlIn6k~{6(ki4f-zRa!wjd@l+=z{
zE9?Tq>eDgUFw$9S)oiSqw(EszS!rTRIOU5O8!j0OM(h-ZL&VUt<y4Cm*eD7Vqj!tr
zkrLR0#R{_J1ZRsMWhqF-6n*3rvlZ|uhG)7XYj<<?B0Kj5ie#uTLluMcnq{e=LKQ#j
zCCt<Y)|bNxQt-wM7wbmliIKm@HP9UdW=?J`1Ac&^yFw<YlZQGW3sNv@#SaxCP8%LU
z`|EzbO8F--QRidIKdFflX%t2)M-v6fQk=XB<>J4Si7AD~Cgd6vkS)pn+6szgldWZl
zFNY_l<R2QA`3qFUZLl<86H|(eO~^CYB~$%Bg4qVdWU4S?N`A2ke}UZbqrtKFG7JP_
zd;CKlWGP6*mpKOiISKq`n8cKPL!mOYAL7fQ{~lhZ8i#!(TN3=8rpY!CBvXyKCysXo
zp^B$L8w<>BmSMsS-Q%0mAWMZ4w9hg5S7f~%S_MFmQg~`u_J0R^){G1)kj7h7h`b60
zUP&%x8*(=|F`YEgi~Bw2uwj^Gno?!N<=I_DoKaKdgO8q#tb{uW>@`^(f2OlUE!Vh;
zXw)*NnBmhQS|t{eS0uB^k1hKz<~uo8np^g$tb;KwiYp6d_ts{{d%UnbZJxMcQ4M4V
zX-tts{XC~}YO_|Lnlif><Xiad3K)BT2{jF!L_kLPZ1`e0QMdF|e<}_e?ytuK;^|vP
za{Tt)n>@Alf?YQGfF8~Ed+sy)=V1@5@n~(|M%b8X)3?4I3%l4?a%uJxrgT2CM!0;$
z%rLi_DVRN`2b7v!9lPkbLD7amcI)35#^}NeJ|2%kClVUQ>Y`O)Q;&dpZ{w<qDux=S
z)(Dtgo}i}{cFuM#k=05HPFI8r!R%#&pHI8_H!}^R!5N5HuC*}~M9W$QL8}JLv(J%G
zsrO`PWQ{(%G(K=HX#0IJAi>ed&x~0z^QDq$sH^$vdn0E`Td$fHlQa0lMKt;NOOoPl
z(9T9~bNXO$=_QhAy63+t<@;+YZTwQk{*vBx)*=Bym*XIX!%%hclR~T7<a51tV$$ZP
z$}%nx(#viBz`Mz{&Z1dmb<-@WUT=rH2;`0_?)^-XBa^Hw$oBVK@&V_i8d{3ujP|ZZ
zc<H4uQgeKkWFKtGY_wEwffcDmueYximprdyJ|b&}C_n7NxAmY&!bXU~{K}e%&uFTK
z(bjfRe#8#gioMsJCDcWWrNfD#qX6wlGI?iavud^3l)`4!Ac|eV=A<}xI15<T7Q`dU
zYb~p*JUnP%ccT_9{vh#4)M5Kh6cA&~`tcr+_6$hF1El2v(&_+do`5v)$T8W-h$Q{E
zo*K4^nx%=F8t^Ddh7ui~knD7UXdO=K53EXtfHH<i^m~=rK3NUcVTkm6EYkbAC&29(
zM$f3dK!9r|-6p=)CEN!Aftahv+A)I9rWeX;ySQosX#>`uE5jU)Tll=26FpgbxYKnB
zU<Y;gO$%n~r%CIlDbx<@YnAYe5~Lu#WaY9rF^F+y#FlTbtqT*v>*eM;tHhT>)lCcZ
zkNED}=q@YqBYmaQ_<fl%Ox8c>M&L(UV4G9R;ED|4gnMt(j<HN78g?lp3acAUC9-uf
zIi(UMB1`D1wYh}ej23ahnNG~q8*07Nt>E8Y7@4WpgtkQIQ+IqI7)924KEgN_3N>q)
z%1yE=KhSbLMz9XM333*|>~YV{tMP|sbP5;-juPP0k3%6_b6=Pz$}b+>BQPXgvVs=c
zq&>Cfe3cs>N0bFGO4%3MN@1%?hssJdFH2iq<DA-CJQG&FUfgKT+%&wDo>W!t3Jqjm
zELXDO?}@qN_Ln7ed>2hvDL|iSeQt3w?SDwCc_CTwoVLAId|tYUX&o?;4OC96a(7hJ
z!W%E^dAT~0=-2wxX<R?y`T!OA=&F^{Ls{ofxW&2sooc(xNBO1nV_Xupw43c^gjNOa
zyHN{a>c%{Rm8t#IhBj)qT0F4D$o8wYBcORVJ6V#{GH!i<-HF@x&mzf$8MSmhfj3YW
zHEhnW9Tj7YCXOCPsZ8^w;$Q_+g$SYgIt_0Sm|*mdvWy8V<)gEalMQ68wqKTS!chyq
zb*vu20l}T%&V95zOF9DgZHww4MP*tbRT`SoCs<0tz=W7?jr?j@IhFV1<<-*`1~3Um
zgp}~(F(>a_4V6=4Mg=eIVp?lOwP0A1W2n*`5+rL|>^Q>=NlGXlQxy~g61_;IqjRPH
zuv$^srTk(GIfakp6lrJ)c*!y4%n3&cszbG+(n}o^VmFEPruO48nHu?|UrNV(_JbHE
z$0eK%F={oYWoZt{E@_S41OGXnQ>?+xJ8Z+_o6m3E{6Q$ZX)6=!Uk<<8{!Hf-?XN~g
zHSD-iQasF0LROB>>S6xUa7IqT)W57|?Bdy+d?$m@g9LwUaq-#pw=r~zuS+lzW~2Oj
znTmN`9%qkS8jK-+voUw;8`^I1Kc(j;OJ!#`YB%hP4=A-gxU<m8{c4{!IE)}>DFZKN
znb&E*V%Gmi8VeZMh{6{C{;+gmVbd5}=eDLj@d(v_@YSSmPF3`y&H93k<7)rV6Ys>7
z5kNE+VmTSXi(u5sVMsnFVs~ky{C&GjR(+b<AY<WAB_2QSXWzz2#ASZtUvuUT!5rC8
zR{>g+xDUMAO{foDKjrnEyvdNSd(IOQQl`w!#kems>z|H)$#*~_lNiuWgLLTtnS4lD
zzv7F)eIJLCXqtpCuH!%FO8sv)!BpPQB>Zzd!J9F~`5KL%qIsYgH|XybNf?WNloR+>
zQ@ZQW%G6PG{3eYL)YpN)1q8=MLoC_AO7SD6gFGbbK|!Vab56Dw@pUMtXJ_>6R2iF-
z$q?qy%=(w%&-fTJ$z+v9_?S^{aD1t;fT_qv*x>i}ZiH-dY7DCTYw^Hr=Mglpd`K7m
zk>S@|DilelKojOa)?4@mZz8*(;rpw&0E~J7$#CJ`j@*9}h|#ygR`sCV@jlF=pS>>+
zh|)p#fY0hIs>b2=|BHTxS6!iA@ZZesh-b<<^MCkNPVuP2^8`9%^Hy%-EdcU&K^QBn
zQgxT@DixU2h6d?-xY|v$^dJDM_(P*VKl|KIZOsNSW%r3bo|pXEYfsxldzA3x54pxg
z{1Q^q2E$V*(ri~w;}$QbZ6aFfz_vovK*?Dd`0KQ%R)<PG?^sgKGO6q#wL**~wj}zj
z@Hfy7T`RKg;t(}C)axQB^eI%i(IVSEa9bIx?2k_>`6C%S-wB46?1z?Mfb%zQLG>Y{
zylXGMt!)wpF>KN!2|JdUuI^t3ckdBdNs~Tvx{B=BxAA(3kGc3gJ=c-NhP1Tj7kkmE
z;7=kXK=HLl;|^}~1eFI~+o}E*6<-MVd~odq%4!mMu(jfNWR2JKTHkpyJ?ucv#M$`+
zb=kfclX7bD^HeL<;l7O;)=*G8QAeJ1FquB8XGEM3()<8Uu!&)UG0Pn(d-(c5r%8Nv
zUf~1qjGX^E`2FOK^#)8gn$r{?o?nM-72)^LS8OkN;P=Xh--UuCT?WaZKNV`h*mS6;
z!B88Yfb;1<b=nkf1-7M^-!7Hx*b|ZCy}X7u&Q^e#mykee*6xEnr*R{e=r^x0SDG(b
zq-|q)RpXdON4Mj9ffv!PzZIIfplkX6oI(V#?v_)5wEo1|itw{S2a`KGWba=OuD^-1
zEbaX7<2m0R9KPObH)(iV1*}gHoq2C43%tIv;tKMc4S2HWNfcU96<W25d{YstXv$PO
z{f=;}Q+5^fJ;2jWdywAsBT*a<W&CnU6{qeyN1TT`W9Jda*{6?YUZl+4ea!A0@~4GC
z%Q#Qq(vRvUDF+hjRXG*PQ~g%Ui~P9OMG-T8maTy|)J2{d^(WlR^8<<3x+C+Z-buNV
zT=gYc&a63}`{)SepVBIGC6%WN%S>kU>ksLd9ndXXLO*f|rQzrOPAk?QQv6P93jU;{
ze)R^@^vhRRz}`P^=Fjy-SvOZRnO+XLun*bKmie%1bZ@AObu&q=7$%A$2u-(}I*Ul=
zvRmpW+w)A;4K#6O_fxrYoToCimM^%LFR)G)vz)G`f*Q-*g&!pgpHK4|Ii+#;W`ZzH
z`Ll}qOt`S_!dzJH3zA9rin}-y7An(FSlyfAWH*f!b~H5g&uD!W8#<n*9%-i^X=}%f
z=2h{IcxO7D1yHf9m+lUA`<+yE`eUF<JTSsY!hcB2AL&&XV{3Ew+mq;z4q#o<_j`oX
z6Z`>*Mn-_U=pw$fEmW~No>_-4Yf~dZa(mBnyRVT-=Yc`eCw&BdRKxn5xR0$4-$<p3
z99TrtDiQHt2S}w5H8q=VP)WVdP>b+dgfu$NizMACJ(uHi%!e*3J(e99Y{GBEy+t4m
zy0ds>Yc+2}rX!EJWiNu8nydH<16@><UWg8dNkt-gJpJ;Ej9<@(WO4MV$8@&18Mmb#
zcSIiZMIPft9s^9!Zli)~e5W=(VvKC}qa3n0#s(Gwbv2<o#D<7%H;k&4PtZJFPKyJc
z7&`0msM%xr7D4^fd5wvfepzqs=k_<Eq<zLs*C~`I2ALXo@s;3y%35iVpm;WGQf~Qc
zIbXCry5o==<1*>U57=)*ICjHwvpfXhjo2_q1~Cs7Hm{D`yQ~4_x!ybl#~*lR9TR@c
zOkhq8$UDgIssRq+BOQWzi#EuAY?1%iAh(|CfSl||o$N5%=3Qn%<EF=tp~aHlg_{j*
zD~5rRLv<=30SHJghNo7eGH<*w>x4J!1ex^#D+Ym*0~^nWOczC9jl;1aVb&ov>#Uiz
zA1m2clNtENhp-TUbE;(4WHf8eB3s2wqU*)mHlOTPL4U1=S|HF~9PfwgrH`Bcy%csy
z1|jB~Vw^>;Qp}i0enrVZBZJgeIw@;IPJuY7<7lY{?F~e|)wNGt3TbM^+>SD6%+g#a
z=A6K#S*F`8=XHr|Zi%LnTp7Ibdi=~>!3D$|q48ErM|6?-F*xiK)zC*|^hm;QrzocR
zD-PI^AF4jZV8+>f%^s!{X>I`XmK~3;DZaFmJ0+8|QdU?dml|5J?U5zB#$?qM)=d&Z
zv1ScnN$=&z?8W8ZLJ;oj5pA83xxgS=`)nSm$6_bwd_cW_4D<)s6rGDa!UZ@LoiW8v
z$dD4lMEijjQv9kHYs-pg!*S@MFbHW1e~;6?*&cD$22V=dAu8q-7vI`>R;nQ`r={bf
zS;?H4NGdY2*&lY{gkt}p5;@qscN539sUKfMAL;ikcbf>VCLzGz+WrRruHkzZ^UVg1
zZT`8yw95xm&KRal5gZ;d9BHBm0^*-W8rzR5y1i+p?8*_snJ$1Y^#O@ACOB@eM|5YC
z=)wlYmGu{GRVl7k33a_IYyUH;ZpC7-1dYRwYQ+Lni~`GPJjXVjOu8%^`&NJYN%PoX
zmWGxnUT82p=>Y^%-Bps^)_mPaq?^HUXFZ~K^h8e&L{I9Xcbh~{HYi^Ivg0z*6VQZ+
zo)Z56PQL(<R6+5gg5gOFAQ114BHkQ`J<}JxtNEYO_<I8)eA0sjz)u2bMTYSv|7jf`
zVLD)7yi4xcsHsCf?Xg{e!*me9@I(Z7zja>c>;7TrC5kf!)G|Fb{L;GrbY;4ZtHIZN
zSaeI$#ip~wrlZ~;4n$w+i#*U1J!8ds!He?v<r93Gj(T?}9DPM7@_<bA3?1tQ{y(K-
z@;g-IeX74;e;EVYmyEaLp!q7PtXQ~NUuU~KVY^_~v;_{RrU@xXq!C*4Zac+sAWCSz
zAV&$~(>oNsa8H|^4y?ChiM%Xlz!JVkK6!%C<nqPG$Q6$;%v}bjc1Ij@3tNHO*(OR!
zWbM<?(B+IgOJ1VzhPBv4T!M4{jKb{o8sI{L{ru9oG=E|-CVNuV+9fRmEG5|Py2|#{
zi}iO~_RmVz;G=fT#l*j~r=uJjkT0!mbXJ*}C_mJ_8R_!ct?f^8@IQ-+$qlutFV4ZG
zEZw4oI!ofe6Q_TX3-1uvr2TrHlyMi97+zmdU5j2-hc0d64cBk1VG-iAc4l}t4CgW&
zHms)G&#$!ozU(}D&SlVyb4QTVfcT~6?W+sQkK`zAv~8%mbARVEzk8Q1nVUT<Eg2-*
z;wa4eUO2T)2<Ku+LG&jb9QVby&lCKYS)VQ$C!eaOo*+zK5Se&H9dv(8#QdNbbVje|
zgQz%ztk5Y${|K4E9FwRbB_2PGLR{aw|J{|wz4F9X@rZ-KJ)=v@xOxHcW?35lDi(^;
zFAK%HXRSjTqg-c#%b*LkRtG}0+K)=*6Gr(vIHhO^N|TVI`d)T5Jv{1~$V3%k%5tUp
z4nW}G?b7z?cUwqzz!3fde2cc`O%u91hfiC@#G09L8+TWxl>x1Dh(!ALH#Ci4n3tP+
zFik4RG&f*0H;^=q5SSyKeNtO`N*do+HrCCi{nsHiP@gosy*D^8oy=l2nqe?k0>avY
z!%q79K5pu1Lw0mLq0%(AO|M%{+Y~Xa9=<uf0z0iIKXXn)n2um<wk?!oogqm#MIDci
zWGvX0;IJ*on5A*F&6jMN0s(BliL`w)!0Mw9=%lx^4F_WtqKS+N`?-a<ftBXBzOfRZ
zZ_!QvaT6=eCR~!Wp9G+f8d(D~u=tDiU=2bVINQYH2J{5$-`T(uL~i!b{~MAJWI&{o
z9>pdc9Pobxfwyva03q1GU?=@wAUtKHZXbO)YY_TC^%j;ApeIyc#r8iZ!yU}pAX$aj
zBX#@f&9<=)f5A?At8V(~5-{8itnFg3<1HW^M0v;Z9(~~8vwo8;JWFH^?!aP%{`Y=*
zr){jSw&CAc`>g=_|DJB###*rrKVj{60_bx@*5C~+M(SG((Erb9;4fu*U|Um6Lm_~^
zsz*pu1Ct~&JBL9*b54I+4Z`Arc`Yr23&#knjp|4%{OvaPlqdJ#rW42NlcN`(ZKw?3
zWHrQHCIiLcnyJMNC!r*=_D&W<nO7Aftc7euEPj`BIM%n6C<kyN8xlq)fP|KdWmp`-
zFw2Xr24#2dV7Ah1C%y4aDBCq{swJ%T7@i{J)^-1U3;A$UlSlBFB+pTOswHc(MMXio
zP3oE@$5Xr7QPkpFd-hRB;0v`rWl~*2(NYV##kaSOr&43?^}{&3Je`R~^19{O-73Cd
zoI;LM7?@c6j#HSV$@w1d)wgALO*TB3Y`Ae)2@ukwa3%PljJF}>ZT&Z!y4n;_GSJh$
z_h=Cms;T%gN(d6}mzI8y;8?|V2oBizl7%yagJ2r*)o+}RACF4E1PxM-xVIS9kVVae
zhlU>GM1qfFy^Gi_FN>h~>kin_r+YN3bM%TYQLwt%E<v!mPSxy-0hLxl@;t)w+I;eu
zxh2*)MTqrRg!K*-bG*pxEdYdPcmz-QZypG3<-uB3e6#~k%G8lo?E<-3epXU#%c&;%
z3&$vKurOQ&a(vS7bBdlYVYmVVGUdo~ilQgw>jNU&_i`#+P0aCenz18R!-e*8Vq8rO
zer=8N6JAaZax&R5{@!LK^c%r|^mjd%7r`t6pGllPp+e>QTTXUm9&89)RY5(ly#03U
zcZwizyqs-|I@yGMu!41ENz!u3+A@Rq?H=n}2(PnR9tQ!?vN^tFb5KuaAWddC9gKrI
z6jA={waqkv$~={Eb1*KzWB`Lx3*MGoj;CtNSn|WP|J*sh{Um(1Ied4Hh#MJeq{2`*
zauzLe_G9EMM&vA2qym<3DZ6kfhH&Y_Tps_hdw{`00)3U|fGvbM&%3J+vkp;*Fz+R#
zQ!&DzXUq$o1<YsM#hj-k4|BqijT3B#Il4(5JmEk)tSRA#5V<NeC7xd#TzSsCQ%kb!
z@`Rg<!R8P+kDoUx@Qx7cmN-dlmQ2=kZ-V+d33bi8odPvm?O?1ixMke6cHye%wVN?s
zKDXqFt!5D{yj0oMA5E5`HuoxOYEjd;P@j1>NSAha?5bU_oAqkgV>|7ltd$FCoIR|H
zCGFtsGWX<2jpaP?G|!hW+gpo$ZC)Cy`u071BlENL2ii4;^Tc2)(PC^b@lS1&51Sp@
zZc48e57x55Wv}zR>l=}faJb*gWY;>q$66@0hx7C+o2eqlBgd^&gukwxy=Qg(wyjLN
zw4hblnk$<m^uwHbwKzMbW9l&?p??OK6q0t0gu1~nu3d7Ec?r}id7-|_sjb9GweWe}
zLZD7Kb;7*8_C9ij$NJoEWS1K0%dokp`lYKPY2%@ISbyIt>ZO;2orG3{^fHCz<+AJY
zm($6ro~`7aQdAD^e6BT9t0Dr9B}#2}Wh85-6E1HJGeiW=Jkli9j3f>Fr75;5d#$9S
zE^%#|ORo;c-J3+3(=%UXT1|5&^_lG(EAyA}f`QMk{f0wXG)r7w{@&Zuj|FSOk5|Wx
z;k(R9+_%^F?H86OCO3*N^9AbbIi4&p?wBzm7!zHL41=2=IrH93i1aeH_b^)QoN;;(
zMgcOzoB^F2+$6zSM8O<qQABo41V}@D{1k(m5Ibi~b}l$x7ldq_34qL?DnPgL#aV)Y
zT~h?$lqC4;&?frM8LXWPqF1a4qI8cm@NZy7_rMKqn*O%q{fgj=(<Z&-(7Nf)55R>p
z;yp+3QwIObco%`#&^nuo06D&_*vt5P@BQeGnZb3$3ul~rj)<oWp%*Da@1mHW9B@ab
z-{@8gLfVxxaNJBC;CgW6V{2Cs%OY@nQ5(@}(L-u+7l4pe9g}3aV~Fde+e2#sT)Qp>
zSudU;0M|lVjld?C&k?QZ!dl}!;umMJoELWZz^Bw??ZhNq4vx6)>}p)t(YUfDwWf<}
zjT6)E$0peijWqwy=(~AQk21D)$7xP+t?n=3KR1u_*`&1kzjU8h#N8>`dmQU}l##bP
zqO7xrSO;#a>)t7GUD$!RHv6=ui)l#_(-y@h$q$W`?CdIB*ipE$CHz5eIhMF+{yhQg
zciy4!>&yRkJpQ-P4$-xFi|4B1W?7G%%}sSff{BHlU|>^hf18Z3twp4&va^{>JE0x8
zeFiZxP~*4io<>D9f%#g-=n;KQS=qiEPpj!$x3x;HC!h$d@bJ62O$goqCM`3Anr%*Q
z#J=H87ahMx`%Rhown7wFHb0^;KjM9UM2@d#GLhLaNsol=rSv0%xWXI{jJ?nEwD+K0
zL9y9qRK<vf9RFhL?^t(EjkNV4#ihSA=t|{?%-JNfpqW)`;D4*c|K!{R=Ef_10MV9%
zbcL?yZ9UN9&CcK~^0hMfDT1rv*sTVTKX#9HhvCNRu1egLG`Bcnw(P9*vh`UrdyH1Y
zzV}0AE2`x}Ox~=h(YX|+3+73B_Dbb3oUvovPSwxClfCCY4i{IbAIv|p$7q;+Ej{Bc
zGX@&R5!1o;B+fX+N?IqJTPI}KjHQ7arsc09HqU|O9nsg?@Rd9%*Q8JjRnHe&c##JQ
zj7+W+85xH`<^}8b@HrPOJ>P1(>C&B`D<im*#R;y$*z5b)8mYq?h-xq_@sm*I>wTH=
zn%wa5=N+O?#El-ut3B^6w7qOzpO;Bf%Ym=f`_}dGVM*wOO0Evfc$KXi2eCGY(03gf
zU5Wj11{<GxYf1xuY;OFe_aRL6OA_$?8krEG*B-Y;$}fklvaJ_a>u!cdX9=pU43u}n
z_AFkz-j5!NuSXuz3s#bd$M&_{9LIG~U-}(;D(-K`!Alj`7nH@$G_-^3FHvhE3@!4G
zt)FW5e~i`G76=<3u+!5tAkX^SmPF)gQ9*qk4_{En2Kzz}DFieKw|gS9T;OpOcq;j#
zoT<MZN}<U!A;eUQhNn=_!7|bBZEqE^F1$R~HmXO9e#4N(HEKLj3gI0mlg3pxmYJb9
z(Y;tlcT;|&9lk9Nm=a$I*FRwqR|Q10%|?}kw+hUcYCIc4nKRTRa?ZzMau&@JN50rZ
zdMO*06&I%WuOEesUj^W}Xu)w-5oRu+O@!qb!{-=ZDXVXVRrJ!h4M-k2AoC$%>x`pa
zgBo|*X+J}BcO+Z(<!2CH(-NHU@r2}N2~0`n9+1jj#T9R0*XI31sNWoo2P3zzgl)s~
zSleX*>tvDEXag*v`ZxvUZ*u?(WRd1*1I(e@IDNJeTTMc?8hNahvOxOgF=2!IRyWJN
zb^=M6oue^j8^6ysYO6`ub~TUnR2Fbc7U_;Qz!myWwBvirCIu!Lu3Xp?Cb8tIrCT@O
zb@tL$bMPNH<6q|=+NfKmF{bJTnJked)dglSrn(wG7gFb1PyU7cv)yR<L+Y;{reP+3
zg%xgG$?j@(hR=(&+!m@91vkZf?gBITQ}x13C&-fj5@Igr(Vxg>++aO+OzWG2duh7u
zeuqR@To!3;JVkITKTXBQ^~$r4dle^Us>zUYpy6S~$mp_c8C~R{niW&?pgS7_zORq(
z>G>|;8gBG%knnZH*oG0xtL$5h#}rIp`&L83LSlEB(|M`p>sFeVTYRgE<%jMet_)ZF
z<pTb%4$q>#gs%h_Yhdl66wlk-_ABve(L%7~Z<}&NetZ_O1`Ykt*icz!-m~V8>8}2*
z;p+`eVjoSY4+`@;$+JBzUNKM@m}lTK+MmbmN$CY-7G6)=f9zlGd3o8B+8d9j-)HQP
zUb<(pG3JGu#C%Z8x9M2<3TybmJhLk`sb;T_>bUa5qBZzqgiZ(YcNV{Aq3U($8{950
z!XvGlf&2J6UFB_^@l7yAXZ^S9{`dG}w^+=Has#gWPd#nU6xVyBi@3*FOT90Ii{9Xm
zQ97^4-+BC=g{xno_aC^^j~~ImlxjTi1$e#9ArLr#LVo!4S7>@6RRDd1-?c`#=nn24
zrSk*%JC|RZaP{p!kk9YFw^83@l515%3x(?B|HER?a|TV#j;P!K+mly20f~`chXmCq
zs8fPu)WBsyq)wLzO6Z|egaB)Z<)t(<ty&J8Qt+<}FkQoU<py11$mMAN)q+{K09q+j
z=U*-kZoegfp(0AK+96!g0<KLr9Bd$2QPcY_>^q5UV484N#WkF>=;T2ezv+-b8GWFO
z17k#1IfSM3tVw!V6xUuP56VDUB=^nm*CkyIz=LuEEZXV}`2G%xz`i?dv_?a6oHoz=
z!TqgqpvImJuHnsn_FFXH#CNVvb^~9EhSYbL{hT@tYZ=#R(!SmOf3&>?SX<k=E?m46
zYoWNcrAU!t#jS$0xJz(%*8+h8EtFEASSW5q0|X5kq*(DH!QDMr@Q|N&t+mhEd!KXe
zx&OWQdEV#a9q%{BH}YgM=CI5$_b`0bl%0R#9pj){UYOhxrXs`+X))o!Cd6r5=(L1~
zYSC&t>Q<Wy;Ay*?{AGR#e|j8=!Sp889L3OJ_(@qZE_l~efJl4RPe{R}nyVQ40lrs8
z69m6qd=d(uVJV&}vui6N0t@~{BuuKq{GcEHtl}Sa{Ym<R;B>nE_cHXbV+Zkn9O!y>
zS+2I&5f`ud{KhZ(uL1uN`8R18qMw<QlTNkBzw32q%1Zu+Q8&#e-;p-SC)%lU_@<yQ
zWEGm@Ozj~cz3iUf5aw~RP!{&`<R?htTV)u<&cif`Diadsoh*L8jR6MH$}oeIFM|w+
zAJFqNAw!WzHjJJRaw*k(732pqk3sQ!>2H!Xd~tJA;?rMl-jg59J9dzdPz8K5+MX7%
zt4+)26w6L;(VsE#)&gmK(h@*3K{cESmi!KFa&9w&3i#Os<jT|8TapRN)-a3fZrMZ2
ztO))xe<)A?a8C3s?IgX394=H-v5Vh5PjDE7eA588j@sR?rco%7)d0uK23VSr+5egS
zSFAs1u<V$FD@A`xHbL12CTIPvh^PNfr@m)%asJI5{+R$?ep}V6y1@q-eO(U>3d46Y
zlqN$s{|(KIvOi=<rr?<-wwi8r5c}$gSGn8hJyK<J<wWz9t5uog{jA3X{YqNU4bd+1
zd$0oyp0z5Y4Vq;ro5u3;YuURyv5V6HGx5e=k2q;Ql@Q_)zaJX*-9?N_Iq`JvD&2c-
zrO1nChB$P#JayNkmY%RCWYLSEZFhxU*ztuJ!caKvT$%62J&hXjUV2@c{ZJX?zKyY;
zkn#C^gCOLa)U*p(aEf;1g&Ve0DhsNPt83m1a!r@l{!HGDt#EVd;TZ95H8i}_2xh!0
zc;Eg<8_i)^sCe<iXwYEJ>XFU4I6yKQ1d+lc&Rrc5j(ryOI1ELSxtgLDhEe6u50KO<
zRbvQwDH5(NMZNG=IQu(GNt&Gf`q0$dDldk==xDPP5}~5dASo0L8pz2#ve^^|i2gIR
z&whPqQ!WnRjHc+#>G-dy2jo(GllRaf0byHhcfS^V<gK=C*wkG_F527~Aa8kBtak8a
zK*%+paUhsttAEQ6l?&jcPF5#}H)z(C+V~8&u}kQe;M%tUP#*wcP{uq3A~THc$<NHV
z!kTUlQf1?w*ObRr=m=jZ+R|__Fa+^r!B9f1R%sC0G+en$*7{}v)8%39Z3Dum7>U8X
zEvvrJ5v9Ow4?KzIDnAL1ac}OuKS}6rUxb9T+;ZWex{VvuYI2+EPH51g2{skJ?9C?F
zT^?D8duOogf~pG@6$vq(+&lb*d$5VO_r-A;@KoNhwrVWc?yKw*`cR1DrQ>nGqij`J
zu-w1nL*9sMgy;NDsP%rCCbw$g#Mxn>ShhWjzM^K@M))qegp2><mrpnN_8z~WFI@M0
z$Y&}rKmHgdpHy(6_7V~Z#y+hzzO0EByE)5G7R>^iYSx2zW%$nDmALkvdtU`nmqN;O
z<&HXEs}=@c*`Do9-|2x_E5NB|ne}VtxfZN79()tRB_08<gqxBb7hPOrCTZ*LrFame
z&@I~CbdH!<B3*<_emwJ}gPXJQO|%@s4+;;2m*S3nmo45ptqd58T<q>RUK+_|Oj|^A
zumQ<)8>px3wv4tDnm!Hdyh-;#=LV{5&Lb+11&I3S2=zl&>JrhV5~J4q0Z(D+X!*BL
z9q(?}#EL}76BJTb<;YvXcmc*`7SV;aJM&gRfz+FkrEhl5I{a=~g$I_F20Bp#Dz9y?
zfU6R>oEPDA;>k=ZD=J0=;6NuO_Vg0!-%uK1Jzj>X?;AZKQrQ}G)O4HR5RvYF2w72-
z7knb}y8DGZlx;GW?K+V;CEj652wW99ta0ia(SiW_wKPF5VoE?2@J}cwa*JKJ<p(^^
z_kOr#IM(A+T(p=P!$45I4a32YhYBK&l`$aWO+$Pa$eu%<A!y`j?-N8n40`pMi?V!`
z6S1@Gq<7r_y&9W#yGBe6R~OUk!l9w0#AEmuixdt*FQjHFAoZh(CJ-4Rt)NH~vgh5;
zMlD(Ooh*AL9O^>2yqUMN{gt*VqGHG17zUgVwCv4^VO?f(USzjl{t4Jc4lFbWHbZsn
z;$TZPW&apDO0p|J>bKQJ{f+s=Ba?FEb8C8MW?QGZ#;fweEYguHEhNaB<U~8nTp?_k
z`69a#kR5;d7gSE>Bqk_xXDA)vzw94y9;Up(4Uhh9A;UUR4>SW6M>ClP*ldKMdTtJT
z4aXl_NB`(<TU>ZBKV#>#*tp!L!upq{@S5iy9ZnQ(*E{o8*9DaY9~VsFdsiP|8Mw-L
z*6;XR1vr~2qJ8LV8D?%dVG9MNv~n$IyU^CY@>KUGrJlvv(>An8JgMqsu2N8$vV6SD
zm+U1H?X~%$Ayuy7IMdMg=Tn$XVo+Hu5l3BB@9U{mo8P!QwR)HF@}%53k$1kWC;~y9
zu<Q44t*=uM0w$a~_MbYwT3B!28EI7%U=t2Q)Gdhdko4i{YYpE0)Ka82Ip$l2;eege
zVpWFYfP=4!2MyXa!JEMM3YuMDEt9h}7Yiv%doeNaz`^=1l>hcL_4{4I?_RiX$JKF7
z{}WdQ<BKfuI}BLSA*?NNx2hebh_3O|F$ROzTaFfR_8<A+Hxe3QKrqkB7TW@_8u9bq
z)wE16(C<Gzqx^bj4hs=N(h|17w9k8n?SCgPsG}$jhAkbA+xvpBy;Z%8kQ0xiMZOH+
zS<dmCSr@CQRa6zruGP2fg=Y+d=^lA>wR+U&oYLs-VpxD@#_Y@ndy;s~BurHE<*4>Q
zuw+Qj{?LwNvJ0L?nqB&@cvM2Vt(G8PrS<Z^0>}KTNc94D6+3}s3WgU1#uEizo6@Gt
z|3moHV4T2s>a;8u-$uo42SxI)QTkE4=cskg@CH~z_4#I^!Bw4lP6{0M%}INY>MD+D
z<b0Xrd@<#GY2>ELhhmh^bEsV|8Q?KY;;%b*o(;TLS>a6R)ngy`vv(-H9Mk0{b9&bE
zUdVA8WnFIFLmoY!0vpH`S|3hvw_U$ZXBEc4eflnl-*mx^N;q~dRl#`x>BdrLH1L>G
z_WDY$a=dIvUzUr=*6l+TiGXk<&5Sb9(|lZS!Ez}7WCd$LPQ#rxb1H_mcs@FYkwxCw
z<zLu2pbG8Um-He0?b^Rd@Q8;l@)AZn?R5j^-EOk~O*8!?+f8A5h7plqcX0+k*ZXn8
zpWe`Q(9?DF?|&tZ-emX<IxVSx5BX>DzannFO51oPa-4Oy@AL8x6)mh}7hm@3&DV}m
z*@ANFDFlW6=aIsm^T3&8bpvKG&04Pa(=Tf+^&97n<B4jZT_wA&`WvqLw`)FJE<o=(
z5iI_bar`6u?=t^lsu#yX^;4MYI+w>_0N?{TcQ!fxsGK@VC&$`q2`9&B{gj;EcQ;l2
zOR;}TCWOF_G@ka+MVM`t9-6W+TH&_!+478}+xkT(oiOm9-+(8snZ)Y1@9!p0qHjfC
zr6(cQf1*1q?ca<oiP)}bzQoSwgNY<;F_P~CyJbgII|jtRR9Kg?Uv%0@nft??l{RI`
z|Al#PYWZG1Bs?xfH#H@qHVI&$z!ilYU}~e$o7qjh#|7=IEb}~Nxkd;>>Ar&uCn|Cp
zn-|u(RIWa7&x&16jwY@N9OQmDG&;G^?z2Wv?&Ng5Y_93}R?VREq#0cONwZQGVJS7{
z$L)71TkW?@Qqw6>MDKq>Mnbl<@siH)V~!XdZU1-KN^#o$Lx*Q8^f#}ABHnG2eMR?+
zxVArx5^ld2CcJc4aLY)-t84Q84V9x?`uNZOvO&%reuB%sSa-i+$><M3?xqVKRJHeU
ziMu3c`?NsT8G7kJtGZnxriWDclTPUk+#7hrm{={X@2F^HU-FO!$K3t=-lScE_T(-J
ze_6QW$v51<Jlq<!5QW0l6_y-BW$WJ3;c+gXs)eEK_^kb}n9)xdegV{#gA+X_`AZL$
zBVhQQ;TO^PEA3GojuTBG4%oM8y~#--p4Vc2M?B93+uB#$Yn^Ri?H8Pu*__^W-S<&E
z_yv!Qf;rm%i1d$;e<vI3^uh#I-+OEhp5h5E9zC`jPES_MWC_!VJ1Xe@ChPB&{T>u=
zqVfH~kWVB;O1g2IL^fxeL`h@@fee`k_GhXZzTu*`n+yX)Wr4y}dmCus6_boGP|FbV
zv{P7M{dRP03=cAgk!0;Q`txeMi3oH0YP=69Zkyf{_3=lZ9O}rXGmnYd`co(x$VBBn
zG|Bb6$>v-weKi$_?6kGLgy(?dYb|!~lU6r*@!lr~ocY*R1E`#w2d15*GK(kQ$&z&=
z#gvz1?OX+_h0_5yze~UsvWwQA<TI`^Ok}Y>zIkiV1AR{maOe7f6e<N#=-7Dj(s>u>
z(ojt1{8-%ci;>0g2qR6-v8Hpehnu+bVcmYO<;)mfeJGc9Z;GHjp*P{=t+(~#EMrF8
zZ=cl^Gsjnl3an|22}Ne0;5N@3=`9`ei|=HoKii5`mJnf5od+Q5;i71(0k*x$p0N#j
zZEo1h^nJrIpU4Z|);X;bBBxZPBq@2WrlY7IFsWk+y91cek}rdPi3K>pEP`<ZAd+o0
zYLYZ$AZ6|GAq(gr<H&~<wn;g2%AT~RU+=d$dxCOWbASMehDJVTEubq@68rldsx6x@
z9mJJI>IYqW^1)meg4J3G)oEmoU0A^A?KYj{QXakn8I~WI{m6_+2iV9D)4;l`3_QSw
zd8EH;i~mD5OfK7IZU34@vG3maHh5DZSkL8thC?^{5Qbk7Mb_t1V`5kC$2r%zCJ9EH
z#zgEl-Dr;Y#rUBiPSFdZ0-WtuT#51KNJN@RqU2a}3L@j(7zdW5gwVpe*e%61dZ5FD
zzN;(~abZllZnqsSm#TEyVt7i(HqxLH63{1(bEPL`B>|??*J$-yxOtp^uzKws^MgA@
z#|G0Fboml=seM=E3p8uaqa118$HeP~JaKQmHPMNgn$BKLYiQ@^)L*gIf^kf;N(od(
z+~Ji)nh5pzt=%m#9%E-sf-|E6d-$WeLqHD25t{Tmn$LKk@sdIORB|KNHwDn?e@LAv
zFn9EL3=GdycUHAOGwSt%UqPdq(sv$KUsJY3_`=Z4hU<ZP&d$eIACcELb0pZDU-Rt6
zf)}h;R9&UA^c!ThU_NFYHQVRCY<)f3g+2{|2<srnr+3KCCGibzJ;kOBifCnCP<NrO
zHGp{6Z$>J6|HL}RhCTmtg(fIdO87S6ExeE*le<)eq3^OxsHli#-^G~Rry?T8FhBOP
z=A^<S#t92LSa5N{{(9?L0|B}`KPR9~)o&?T5agkrA>O;?9o*0|yTIVWT}v`U!f=Zu
zxH%}SrETF}kKg}tw)Jz2*m1WJV-8#6xN|>bB14IT``d^7k?-)TeGfowGDT_L2e9qp
z=1r<@t(ID>m`u!oWsq;OguSfI4kjkDmf@b_N6zs!z#V}HSeyE47bU|w;mb;47%2eB
ziBD6PHz@W=IsK+EZZ__-{CQk$xKH-<OKq-Wt1p>)wv6qnLtPX~r-&WaO6w?YEKAFn
zLkYIN56UjP{~?!+Q^xek9R)SrPv6!5LyE*OZxwc76DItO7Z$>Fi$Q}PpCve_WoUuQ
zg;SXL3ZITd`4(%ieM>cu*T0RPLzwE~K(+c1+h<<BO|E58v{=YHzZN=IMb}fhFKhR!
zSh1Yxs-q8q@d!U%$bl)5WN~Ylz*!kC<JdwQjlXUPiT(a>@swt}`RTZ0tj-guaoUiP
zRyrO^f4nt}0r@O1-%70<A;3+OD7)u?nbJy8M*jFY{RA#Fgx-X80>>*PqlE!B6d>&k
zWyFaN>S`rhc(Z@shvte*94j4XFlfD%U_oY|)Q7qe(+Gzyq@Q=<_e^-7!iTmIYYqpE
z`Kyrt_c6}y`eRGtX1r5reO9ImsVr9!EApOPeSo`U@<bOG6ax2+G{j(UrBNjs3!+ga
z7z-h)%CSd!PHgfO2e4{qv}}>-0*SmD`WnW&fn*DA#gZ==-4KfUE3-)_AM;mchA`$$
zk$ZLZp}GMOQmu$k(&Zwp3Qeu62=&>6b>QejS!1|trwmJ%^coGBW}tbtoh2Pnl-lg)
zI8C`_3wU{e^PaBTTc*a*SEWxNr=6<)B^78@rGV|TWDwwI!RVM#VF`LyU4zY4$T}G^
zdPhV>W|bb4vqHE$m#f{W&EHruW8Jg|;@F}+TO|lM|7vViAg(!Nps7YwWJ6|W^Y8{+
zRuO(M@>TWa`C!CME+uZTFYp029qevydG}he6$I|-MgBZ#icNzyH$uMP1@mYosbCf^
z^v9$pdG+T{I>uQwZlCx39?tR-&%f<jx7&9v7+Ie~eNrgg)n3&|8fzQl%q@l#J8O~H
zM^#HBE3?Ps1^NJvVel;IWhzKvm$;qybdr8IYAc|DzkC48izNGF*sf8#P+-mFbk6AV
z36)>4Z%4X~RPkInW4TTd*NL591Mh_GqJcBr>db~BucWqYckZ6Mz-YK#s4GQ=H!ux0
zNZnL}Lcb1}L1W2bQ{X}IUbTjtUorcb?q4j3OQy`)zWy-v*8SDXKmrMB-=|eW^@B-!
zK#<7vw$!2;QHDFMB>Kl0?{XIf0{RthrV=0@kaD$m-gR}T;X)xG{K$>hkBYR8_t0nM
z18M#@_im9x&H6X;+kshu#(c@Gj>*>q^_MSl&eOq>#Pu0No`aXNLJ7_u<8tN%ZIM_=
z0og#HgtohH%g<TNw&Q{pQ@<!8y3$K*mJR)%OC^0Hp5=AQjAoHCT+A8r<E@|e3SWuQ
z%xP@i+2uHKC_~I^I0fcLyIyBC3}09aA0c%)7uXPm9{k@kwv-ob{R9gX5w@=fH5#6b
z?z!JE5;ZU-iZK(EznM0==5=z7?>EuGK=>#~DPFSIkA2uc{>rF&#fMB*)%kR8dAZ5h
zHlk6j91B>_5%b!6b9%cBOcdW366<{y_@#!>sXbZ9r7@*Z2!HSK$=5bl9haGimB=8H
zO*aJf_XIk$mt9#OFn~iq_cYKa4&--i8g(rq?-M~PxxAr-*f6$nJI<K8x4OK6iZAOB
zyEql`JuOs^xDGt*+byj+Am2w4IbM;cO5j^V%m?>?gO#ShXN~=_ekzxnIc4i_CywZ%
zwjMeAH~V>85jQ;`P?pMpIcLIZOqX2&8+w2Zdml;m{Y<{N!8NsqQ+}Ac68L`6rU)Su
zL?RgneHbi5-tRbHqW&(EQl?T=j#7G#l2hB<e9Ksd8%5z=uK;S^pYPGp;#@P?6gqA5
z&+HDUtG^O@_b%*7+VQ3?iz<pQc#kgfpY9M?Z>C14Z0o~LHD*<~GFIqd{j_1w<ZAYU
z4)_l6!zCfs2{i6HMV1p36->)yo-}jSOFE|8Ns|)3Vm@kV-IhLc<Zs&+IMQ(>c)Dll
zEipJCds;b|+b%>ieiywTA{5|&hn&Es^(<SAI@5bMr*Bg4?CP2U-k<h<j*ysZ*yQ~o
zG1M#^s=DlG63DbO=st<&{`~w{Z3z}HsIw<EbIjO;-dBWcOLf%cB)fNsFC7c`Y$c>}
zQ*<Ahv#$V;w#(9^%NDx|y7TGuKe&D<<trV7(421R#W&*Uqr|-GTY(igU2!HVkg|N8
z8Ec>9Wle=6Rrs8EDuPK<=Sa8--Hv8G1d^gNqHrVzuE^|?&%Xg|Bs;D~wiJ#sw)~Ft
z5}cG*(Whs-z<|r=^tJ&%(2NI{U02umXcdj~wRO&v0a4?!0YXs!3R<uDh<V$;1I-I>
z{R|daQ?DL2$Wwlnc!Z9&i>Z5ABB*nSW+xZa;TUg|u<+DY(K8%v&=x{|gd4&fkeUw%
zRN_RW`YWB(CAWzaoMvqatM>SatM;_L0jF%e^@*z_+a<~|_1(6GdtQLTNBIIrj-w&U
z@6U<*7+Vgb`n;{02znce9sx`YeC}`^K!=#FqFi0h3_XEo#_UYuT9b<;`zxnx&FR^g
z4+_wE6~cI+pJLNXNKsN1ui;AJ%jW*cz)y`pcjDfrwwKTiyix73$pJyJ7L|!$73Vyh
z9N9ZSR;|GkdX?TZW)Uy~m9aT_on!*K?m;ulBRJNqxBIWvdF0UjQqj(4258cNON@DH
zxCUy~r0_ar@{J0wSjf{%jt$)U5Qa?F4IJMP$xKK<?@rh0|6**@Dh#9JuA<|9hVu(I
z<RAPG<sbI%u0MH)_=gJ=b!yL*u`qO`W%J@;CBS%5GG@GZNJm$0V{#1J<?+|sQJ8-%
zugSya>hBm3m12x<>5X|V__|=#-kbTB2oO2~64a8<;If2Fx6)sEk<?Po{2IdH9qSB;
zUHGjV?w8Lk`D04rjI>z$x}O=P-JX~0TbSdnh~Ynx+7E{NwAu~KI8)_kYAEac7)GJk
z5ifmS?YVB|4=#+?oFP2}VBcvslNTf3^*&Cnm|SvS*7Tpc*(`*^{VJ`BE{R|3tUgH@
zwrV)V17A*LXI!Vp&ai$Qt)=0d(4TCTEMETMz8!ZuSm*4i+XrycRNpRLo#Qf)Vi`Z9
zwFebGy}*T&dtgZ%TNeHKrE_oOtEk}xUz^;zIYJnBtCj{EH{_uS8x?M7$UT$CR5-FB
zuUe>hC_ZC_1-G^MxCjelD&CR{4qsq%c_xfYM-YV-h}jiF))Kz(7#Ja{XPiGUrU9>8
z5O<NReOGUI`{rz;BXsWQIbRd^xOWjpOTq%X3z4NkZ_>G_i$pEP%xx!3p^!huq<Vox
zPIwbv>f?kDpJq=tBsJq%U2g7GIeZ2gn$Uflrp0QxJKJ`%S#Xb%aGaHf>5QTKlnt1`
zt4$(EjFW#?CcS9<=al{D>I=Rc`M|9PY2&q=rX~)g=6v-#-}8b*1Pkheb462!H(v8>
z#}(Fv^8Bklsp7<o^aZrF$IL0G53x9j(Jk)a#FpL#@_lxn$O<F5pzrz%6e!gNK~;47
z{Gg|}FnwRl`uon1`JlHZlDb*k1f@gy*!IWySs&AB?DEIodu{X<%MH2wV}$0C!HN2{
zSMe*fONJnk5hiztP78QJU|-Y+>v4uSFa-JM5bYmpkzWU{n{V;ADDu$8Z)p@mT7?$$
zZ$^n-hrcSkMG-8s;8#W!A42spB-eymmpA~MuBMu_7?(Vgv>2l*QR~;hjlSk);AX-!
zfh`!qWy10LooE@61D;rmav8x6u2hi3^KE?x9Kr>xfV;O|+#MdDWGQ<`G{fp5gk@{;
zKHV-FJLlFxlf*w?ZL(Ii3%*Mm7eZkQI=pM_C_L788Z8;Eg$vvZ&s;>$I9xK;fGolU
zsYC-9aV>vbdQt<NQrwAhAbl<V451T7P4IM!g^O4%*$mF!nD^A_JHJ-oEwLI#>_9A%
zps-dZ-$)dj51}}5`Yn~<{Faf0j0Nibzpe;oHuvT49iE?z4i_OPTpuz;4CkPlR<Q-c
zeQqA|M!Y#Z#&;yGatr4B_-FSOu`=%I1Q6$iaJLZhko9322Tx|+_a|z?m=EUT!Ry2M
z<I>%t2tu@)!A6ZRvwiCfiOn7mgMuwhM0B&7%XNa`#XA2y3O0$j{yukyG?Ul?YZ^&8
zK;m0esY&7m-Re!nF2I^@@hW>2xV3}b(BiZocl}IJiXWO?z^<xEUQqac>m5|$IpVp}
z?n|YTj<(SyQ@aD6>LRi77bIhw_`X4NnIszo7n`Duiu6W##N2T$y^r_#a($B28x@}z
z<=yAj_>}mhqc@)Ybn_uoD;p0D9cJgdauYh?`*gUSA#JVqOfZE>6|v<ogaD%d+!A4T
zxHa;Xv*rSE^Mji+aaFMLL-<>g7C1o}CE!sJe-+GizCZ?HMuQetgFjj*^HsnTOQX)K
z)p}BhX1GpKJBL;g_<Wb<#E&ce-&<-D(izXYtUs-uZt(bFx-D+HEwK@EkWS%?gi@J=
zQl#OJE13n-w3gn{Mav?8oda~We<h>15_P&2ak>?GdLFR~Kc0$4cz$8qNZ-ChXZ_9c
zz3%nrrya}jORn+<!nr=F>f*{z81nB&YkcZ@@>}lN7q;|Ct#8S#XPKb$FI6~rmfM=-
zOE#Bx-&x~R&6AGl_$5dA13~;oCHlEMTxSh(_Qi&@r)|rRRXfSqmhZ&7;`G#FS{elL
zl|HA|$^6W5BNr^*8Fj(2tHl&B2%;%{PNb6=%Awl!-^-t>F%y!XXR#C$AVs$yxs=bD
z8e%@hNet?3C10?E5op!lfZ`uuuBZ4rAbJtw#U1uzO9J)>$<;pnfJQ4Wqe_bZW4Q!b
zSX!PJG}z)1wN1c-)rVdAqOi0rWNh)p_I{?P&reZt8%&bqmJpWxO#J`f^a(@NeG<SY
zJg$xq(9#QqgUno?pX%Z^|D9ZahveS@2*WG+=g*dwR%*XP_yxb>mY|(=hykqI3FGj^
zLpHa0HC#ZD*-x4(jGJBjpBNsvhR=n5V%4gA+#tGm*ObZlZ|fgf;QcKvA0&IDFS!xy
z4#en#4&*ynXA%C-a(WAxb$<)L(H9f)e@cH>v)6Qx{a;i@3NZ@TfwY5lmf#!*TM0f$
z`9@!6BiM}`s>9s|PF#fd?r&N8Ao&`7sf}QS{|{wch*5|Rq!m2A0Jq=Y67WINH2M-5
z!TzVRdZX_XBN!dTC`yOB3!JzN?>*RB^+CEdUWEA|Ne;I7_y0S%?{EDJw0w@S86<+_
zR2GKFeo+{1v{8s0q%~)JVaR@e!;?q_a$(;#0=_;&wFUH0%Ze~Pv96sFIv0r<=6sZ^
zht#=iktSKJ(I?vBHn<5cKDx8r_%dk(*0-h;gon((S;U%0Dhj+z*y0!!YJck<j#%3~
z9mPat0}7n;^9)B%FN~_OWk}(t1#S|Zeq=2fqtV5cFG=!Fmf=$p`oh8Hn$_aQ0i>=o
zBkeZhU)!5l${`{YnU59Y-@m0gTE>w7F8$^!*;lEXJMV@qnS^6@zS413cr1?^DU0uv
zv`Pva{?TI>zJuV)CN6}bzH(E*;1g`WX8vs$3!=|=(3W5-=)?r!Z3P=YOVg8NyoY+$
z@mAS2T_bf~6N3#~CX<RTvnI1^X`@`&moth1{4!c*$XxAM_r3&$%%7A{g5p(l-C&M>
zC`&|kceYIhRWj!d&FVJ$zf75JD%_swktY}5QPTdv0+x-_%IPkG8<*$vpGn^QY|Z(N
zq4tNTV7u(z?2QVxdd{uQ3U&{@z7b1T4?Q|V3c19NAxo`|3aWa}sHYJ*y-OPv!v9X$
zhb$8|D#$k~sy8YkH!5y8TsF7#Rf^1zRYKD}8?ft5ABSV`k)q+|sIwfKs;~J&MdFbZ
zaycDCHsB!}1^=4u$c-v0QAYt$t|;Y*tP$<(k)ofrS{qgHUouzdFU{;fp*bT<b18N@
zS>ruJ_F5a&?8g8?7{x1y7M^vtO*B<9SEyA))})yYRM+K+uj7ZP>}j(NsJu#zR@U^=
z2DCur&3Mv!@KMY8g4sT%&%H)$BV5QkomP7r;;YIJD8QLD2ff8R#V<I?Hz#Ufu3$OL
zeDCCPn6bkLU^vX$5ly|j&G!4I#^7-a?_E@;P_3@>i*d)lp$^gWDF?n}Q!NbOiqekw
zzeY>$lxTm@2EPQ$4B4qw0q&Pj$o!(bRRF>gidW!{pTFo|>fbW_Z_>X7`=3#+7vO(K
zLJquV$Zpl9+N}y80w|#?(T@7{(Y3PRML+GdY^vF-0OWuYniB0uZLlm@D+gXQWH&uz
z2e+xVs{#o8tLL{o<@CGEU*E#Ng!;RDov9s>4bQfzW&?12`ah!^&4vFDF6ICJ{{{Py
zU4l)ud=-EhP(oUw9j*<Q25V)*|EIEkkoGS`{3n?HsC@(d@c$N(+WLP77oY?%F0%dn
z_fC*Dy-c&rkh9vc{(TgMOtV(@Jo}Jy!bXk!u|D$!7mF`DrG!>+x?Rajy9gr(Y|jt(
z#!@1m!Mbfq(Uu+^jCJELtm~O#ujQQa&URVN^HEbYtw}|3mwA#W>yos>GU*y)GHLen
zxrdha8A5qdMgBdmb6!n4J?E|GFRI-^qP?1a`BUd_=<hPzW5~h{MG(zHa6d2-qLqk<
z&=OZ4X&BN;)AM9MD73kc^7dFuE=TEAND}C?%Xw;}tEFJd&SL~;bKlBoV6vbRGh2aq
z0h8RhZ2MytXU9j@V>3Sxyr8E;tNzZTy@9z`MCzS<Nf3+KG(S{*49KfFahu)SxlgOx
zqc@-zJT!gW;O{&Zfh@JK^=;5+YO-&&9xc&!J{g<ivJc3#);KDd%aj_DQjf4hg&2J;
z)_7Id&?q{97jgV3$+)=LdpiusGCtWEOU_sGoEv_0^LVe^Lw9{zM)$TWCt$OGGyCe8
zGb%kG5`paYJw&-3ek?Tn5TF%pwwH0ifXbGX4b0^pLu|Ai^MJVCAFS>%tbVPjZ{#;@
z(_Wn$qn)X*MZ(4O%=Lk31-tbt;$2M%6th2)#c0PXvzk&G4|P7#Kh`&A7MNMN9xEG=
zcXr}heH?9DSJO{CRyrqFN81Q8T7#B%P0+xmW<!h+C6z|p$h9&u`b5v>d;v=S<|sjZ
z+1WrfYYCmao9P@fM?C~_Ooym}G~TSbp88$z)}~ICtr8~*>V8XyjSCVSyBLOc&}A79
zF(GdO)30X?UoqYu_{nrkv`68aEcpdZJd{`~un%=8!$zRjJLI2^sniL|gB3lwQkN%Z
zO`21_LF!J#P?RSPIF~4zfgV%KWTS^C`laiL+3f}UoPD%otiJQ6;1l=!@hCB*P-MWR
zcE)Q0&LI^(iJ@u+9^F&>jSvEhdTQ`xGR?rZeD0%*AM((t)ScYXoMal%TTo+ag(PHs
z%zjmg$nVM&lDvCgd!KP9tIxbqc0i1_amuN{nN}hZi14^<pbNy&=8aC?g@@4k*gTmp
zTo9B{TVwn=>k&S&AaRJsomEs>zhnV^OV89eUhNA*=GH%t9$EIxV)zCbNi5qLyfElV
zQS94GXAO*ZG#?I&m1_u{DppKqT}3BbNZlXv8kRNY7a~z!8;Ssb?My<y5I7$h?>)v;
z-EzH-3^0&-(51ddKk{MEt7<}Aa{V=sbu$dPdZ8&V8C}_xa3KzoXq|M%fi@ZWw&qmq
zwz<uHxt5noE;3$k7yt*RT{lb^R{POi1SH-(%cF#TW&C0n(KUxIM7LH%p9!crJHMeF
zzS(_39`Q*j1U}q_wn_N)oUS`@e+L-<)Ht55Z~*sy>JymAAD>@)i$;Fg#Bkg5Q;oW?
z1*S@BuQ8nX*l+{a@1Y)eI)DewnxuBe@EcHJPC49}tm$m9qkw^Gp^YRblEVQNf>t{3
z@TzW15eQ=cq!G&sq;T2a5*xRUtR^~X$jNHzM$htBt9WX>SOoxh=S1d(Mujx1Pl-+=
zHR=7s&WP30{LO*On%46^^FDC6_j~8yt+kYmlmg$gsMEAe-wWk~v~1r?<x`Xv@*r(f
zOb1B-C4_2Xg(!q5z%v&P7ozQ4%J_5(Lqn(DPZgN18TXBhx*RDU`3np;PBg01TNydd
zWk>NLo-wMkrUVKxYFMWXra-_){WX1og&cj8YX+Vrbw4<DYLd0As_UnVdF|n_HC*@n
z`uQ1ioKZ6EA9uj(#hTzc-;SP2(W07?Ic;Zwku7VaPGxb>7?r>@jkS_$L~%}Wj%J@|
zXZ_2L5^xFaD8n|zwilC$gpGv7#Mpd^+~@fHutk!{s(qnF=g%G!BII7dY*gO<pRyF=
z6IEox&a`xM%fu5@R0WpFUb<UW$WkyW2&|if9TIx$-?C?{;uL*x{B(xBFb!mQ!JENT
zUm;*wrFO4}P0jI1ZkiorSPM^*dh3>CQV~-ICp=um9Z*==1M=dt$zNpOp<SfS@^6Z%
zN;00}R7{D~dND5yc>0*jdc;kRZA2*Ogh1gk_h&#Cc&&-dro+Lu<8FzM=uu!U*NAN|
zzg7`~b6&659g1)Or7nwwF~|AGvF#cFMD+nv@gQOa1+n4b09#uPfar6Dj2uFD(%s!0
z7`K&g_}dSMDLTU^lT|2zKH~@+>~>5{GYkyQg}3C-jCqVT9v*oXx8Aqs>7Y?8$JHoq
z{Z3=|b<B)RP_R5{lfpgBtuJjNjQPaWjFEVRN82ns;eChvcQa<w^4R;u7T@HnWlcHy
z%M#j>7=k*!g?D^2<qb6RZS)M1uX$SaRGoUPV?vch&?B;^qO>D6xdGIEUqOAcl)2Dh
zJT`t4K<c%iVQj|l)Z1{P$q9<*@`~f4&}hm3_;#G7qJxI`uKka@_P0L@yr<E7m8BbE
zT%47*^^)5ur~as0T|(1%rzB%5x`a>_k6%hP?PFS6d;aURKGp)|*3!yR<HpPOIPdU`
zj@ZicZ$<8-kBj#WJSC4P3nJJS%_IxANG0{Q)Fu1jmj3GS)h%|oykS49f?*qLaj8~~
zt3w=ocjA=Z|8O+TA5hS6R;BHIR6Z)<|ETjt=dIK5m2TEu){N5>|EVVNBkzyA@dfr@
zc@?XLLTTHy@XX)y2A{{^TC<oJ^J;rOBNiaG^o@0`sECx$QMaVE|17|6QY<i5<e$@1
z@V#d?VCgkUH;7^BHRJ~<{R@{wYfSn=V){>I-<Qzi_g=$fn8SEi!+4lxr@Q`?7f;po
zniTvKU78w4@o1YkfI7oMrH6(chxWj6zCaiP_hMS9DMhp0I|U(lv2HPMp|#S`=8d;K
zzuFM7N^-`aTH;S~&S2Kv))Y3&Ds;w>|DM%fWq+H$NoNxbIWG&C_iH+h=XP;>2PH6|
zsnyKIal)U;9>%J{aWWSb;n7>gbt0K56~)=RJ=1!X79^&XZ*pYfo<MOWE<6kDxyzez
zFO@8HuyNYFGK3?TLo>id$tBW`p%{OxAYS$HeYL`er%~u))dp2D%TTZPUIqS@agz$w
z&n}a~cqHKB35C-&5xF|n3XlO%Q?jG>2rI!i6^hp?y`Xdumjsu-?>NSA1M!!+goiMW
zSH3!-$EEL%OI35`wAf(1+`j-$J1+Ga%NgS@ibSR&pN^cCL?;E<0cD+2o%%J;#~kbh
zN7T3VFIEifpN=4kJ2;=zX!995nm*L7u8y*e)N0c+fmMeULPLsv5KltyOci?3jCiD6
z+cu~O@$67|NshdHWYy-R(C6?YO(JwQX=1XhVRH8C$(PgCTJIB!NxaE6&18x147uv7
z*Xf#m*%C3EYA5*Y^O7Bs8Jh_wa79Qp#Qa?8WLFXK_>M|70*cTm*}>ZhOOiBG(a1w3
zp_pSX9Q-gwWKK>MDW?@Q)9I@d!4xNV{BrFaA<%KQ-cqO#&#alV&b{y{jqs_&qA2Oz
zZ7pbJ>tr_OfVOo*kGI#|o0rZs6Sc)2;uyOyc^+A;Q;A@q<gR}n>Z>sy{bUCIYykiC
z1&7-`m6lPKA?W%E(N`^(y31934R;&c#2&$akToA$yKjU@tlgWifgv|w{X3q^l09EG
z`m~m$pLo^}q|7gNaw3PQdK^vzwp#>?Veu*oA|SC=Gff8pyV_*)?l@i3h?MX%`cY|J
z@5G+?A1#(*KnT#V#5h(xJT^SkyJ8&@n>=+XQTUvj(rRsEH$BR8`IA6>U>iV;`O{qL
zXTxNMBw96I3GFkVS7$)g9{ny!CL;UY#ORFPFLg>TaW-dzmRXW(=j6((r_6jPxt#OO
zId1#oGuiEameQ{wOO78=u?He0FopQQ$h`rIY8xb=cuCZ*EXI=85#{AqhGN-S^P8%~
zZqm6cQQWS~YFdIgq=yTFv|e2ubj*3l6YPPj^4m$l9Sl7(>x0=*a=y*!S!mgrx?uIh
zcag^*){n)C9tPx}IEjmXB-P%uo_v~x$o7)@<XCe&Hd*g&Ws7joY#YY2NdBB;CFC&q
zbp$xp+{C~qp*-dF={PZr8S1i|gM#eVs8J6en(5e!EY(}YOA`Qbrjh=skonMcBx$#1
z%M@UMXk-RD4Sp;XF#R07v)}VIn0d!z@b=+$$we=&*gR)a7Q&`K&1vw<yw0=uax4mw
zt<as<a3g=t_U{4jwh^?TE4tNPC$^kq-}<iafD4&!cDnTv{x{9t<)c02n)Q0OP*K;q
z&Q3oFnVBHq+|Q6)290g|0y)7oqhfE3IL;WA$QPS+D8F~2#MPddclK`GpP4M8^xb8@
z**&rW$7HKUy~r{siXzi;Yb=N*lTJuwD_XJ8?6&ay#1^9=6Mlumd{`z*M0EK6f@5ph
z(-X82r6A*Nz#_WjHgr!Xn`x~89DJlorV|lWtL@S5naxxxCl_BpEB#{T@tq~BBlaV9
z&xpF-nOvu8_2T=UDad;aeic4DV(sShkzLo?v(XTvVg?FsRJ_k-;{LF}mgm)xirt;-
zN$rfqq)PbsQXJ(+6(csubH9Ub*Msifc2;i6jK-J#hw=yA;2qPmmFlH9a69YxLY#^!
z{z0dofwRLicUXDMqOUm<fwO-`4C2Bxhf3-ycW4aR(y8XNz}%T(IB%c2cVT26yX_Zw
zWH4`UuySFvd}sWWW_;1G_w%-G-3^?4bairR3y#w{w>!GjVCNG>B=xYQ4X@^nlUwz`
z2LRv~n!bxyXV`Gn)uw3MT2WkbASZ>1IR<M*0(kdT_O8;<NtBJBLKW=tX-cKu2>giH
z_xk0|+9OGfXDH_Qovrg{Lq|_G&N)<(I%aSB%f4+V&9$%=IB5#04fOjb7wX?cF4^!`
z@CZoWxbhe}r_Mg&msz(CA8>vOwfP7*2?v}+$V{2Vgz8%Gm;YGHj%&+~du5i`-|<vK
z=3##L%YpBrt0Ld_QZl4jg(wxO+tu653iEV}m_c^oxd5}m{@+4C`RFsX#wXc6^yTAL
zW)Rcz@ij9DXadZ9LUY$opxp?V&2s}(<bA8>4nhy0w0A#H-=IC%TXjI$p7p4q%t~R@
z>h);e6T6Z7)tetJ_01+hx=?12WBA|c^lz03wEJ<YO4>2Bqp2-h@CHO`DNnKmHKZN$
zK20fh^kk^_@8l1qf@}t!4W-&<i;PIS=S8gb-R)0$lFYC0%=*T$mMua*zGtXaI2T_l
zB*(`FYKH|B^Cmb8T_6?4+GDANQ;;H7;qOt>Jtbegmra{jUUP<jN|RM{<&%qjq*l(Q
z=E@)b=@lt?{u@mLwgZ>aV=%=q#EqFjkfx&zhjevKUd84iucLjq6;Zeqe@Bx>M-$L&
zzQ3bMsT{!>Zm$1^jus>=_`uaccWL5XdpQ?#RDaxUK^3!c|8T=2W-lW7ovp+P0YkHK
zgK!;GY)AQHBcuXFS1e}~b2->Jd+dvJi7jdM1u*|Yc~wWqOUXX|CQC4pfQ2hdd3&V!
z$TyWW`3#4LC?1UqQ_ykSlI(#U!Dgi1Fs;6Vv%^E!P&~s|=9r>~F?M;!ZDyNcII)Zs
z--KvdxkHTQoo_m6+Q18DbBi|_eF=>*%o3F{E`}~?6_3MyDe;m?9BMXE(pe&;AJ$$w
zb;q)ea;p{0H?}v%GCRo*#rnrGpFdVOd;@AP2<T?ji&d$3oMG`svYQXw$DZeeox*j`
z0cw%J+5L=#{|(53CQjsWvotgy+yNE)>URzC+ppudcUXIr*1o7e?x|+(ab!_*dYwJ<
zMY_(GbT#iyygr+nQ<iky2e*^%gi4jtR3PBTWd4U#pxf$B9EWv=fym`b&t%t^voV|d
z^Ata*^Pdk8*SUH9NT_^Ono0oZt;?*IPEQ(M*T@~b{5B|*DCsPpA(T64{pNiV_q{yh
zM|~dQJnqbRR&R*=VudSlEPs%jT3c`3V<$nMN?q932G>$+L9d&kiQfi_&r6Wk(SGL`
zMEXx+I=qf|PSC?fE5158;MV3WBzix<cVpz_LQ03^C*wWKjQr?{qu2lk6)w?$cMRaJ
zqBY;~bo&#|A&f^brwbDxv`PDP6y+&RGI<ntvORY>+eP9VW0aQ@2^y8(%X}FKp4pb9
z4ezi+x?h=?J*<9XmEf0)e0%z-(G9XH&Z)r2<eMaGyQ*$h=;v6hR#+LQ<4Sw&4KV?h
zu5U)4dqGYD`^&`_QP3B9Za|-i0Ii!-GWQaix-Ue-(;+`qeC_+M=m`bumATY@5@+Li
zH@-Zq-#0rUjl0eHR$>@-$4G&&Ccciy*Vaw*mispI-h|v*JI7m%oVPovq=KkM>u_z3
zbE92DPtVKAJ9ZVa+$wyv8R`n#5La{~<yjg;>d=kGlIK_#%iM{xKCQx-tn>R-V1u;A
z^zkZ@J+LVnHnS)@5qaIL&X~VW3JjE{6N#eQ_eivTbfm8ZGJ;v>NTwDXv!EXIT8*#_
zZaN>wT^L`y1QuSmb7ZM8JRe7;;!WCfI~7(oo-fYT&`Qm14D9NaHeAv9ZTVRS>TKd|
znNJzVL*JB27_pqV>gB99BtxkcB;#MtN9^TV*0k9TuOYIuD1Hv(?_65|AIs6h1Ff4Q
z0=ZNkEvpA;c5jFGeuH`MCd5p^PHixzb~TU@_pp_E6lL3*lh57VF)wvNRppMc^YSNy
z7Ef(5n0$_FoVe%hyXR@v)&%-ycYyQd%>Z=j{8X2-LimRL3`5zV@%B*!LBK)p;R+SK
zP|BAb{HlJl^Qhg*Z*`Z9xsS)kYIctjjaS|V%;MEA-@k4#3Rrv?;LbfSq<3i5HWM3K
zmk&d*&ZhQC_MU5TT*7JkE<0kwj-xO87!XGvX#+gvxQbo#o9o9SnsqB)HOF$M9VLDS
zjJO}`S6B>7Lea=M%}YPKi<CggN4Xt6)h&!?RP3Ey`JlrCu%|z!UEHHktp+$lf)!hv
zW>To*gfzb?Q}Lb8R<itBHWpMOML&M<A8NM$5IWQfSF^ZZ2$d}#0#x%ql9l%4nWCj1
z#gLWD$=R~-5d1j#c~90G-hpmHzk<Wj<!CZ^n^eD)A@VSAm0JsS<$iSpe{qdKMZir0
zM;WzVp};6|yRU(ffh9DHkdyHuwd=_1NW0=duvAv(x%atuVcV6|d7%0->LZq?PYdJi
z0w&B?Sg+tQL9ejFio#nhTP?Q=OdQL!>FE`*$+oE6KZ(fD+dt)@EL!dpSOa)Ap2wZX
zi4IXO(-kVaMY#=VS&LE%kArE`<Wiq(VXQl@ze0XGDnF|8?K=N{{t~#*=h39eD4MHW
zc+sA;-KUiy8j&hvN5h%U(ns^XSmi5H$kdC!&uNiNUH|+mdux}vr@upWWONSns2ol_
z^&mlTqW?<8|9e#@L&8fxHgZ0~5UT0hR2XX^vZ}c>51HCY<HqC@#_U*1EEVi?hXK@8
zmU%HU*i$n$rF@?qm{Pp@v&cujkym~rcfWy6hZ%gvMoHgFLEq{pXgA3#Q^x(<Z{*6P
zjASD?rqMxYtb{G}mocK@dPa^BG`{1`&&~{9)C{`r&UyaG+>0qc!K2)&dL{6nX+UY<
z)1&$GX7hmbK!&5E^3X53uT+a$J887RHw$cnF;PmzYDw4Cy0R3Y@|(F&v#jNreR=Gf
z8FPP!JYV~NV7Nm*IXq$IQ^Hw?{BXNGXE~{UaXSS^d5641u|+UnDpNT*Bh-y}<c;oU
zW6n-)3bGcnIqetg^y`L}qG-2|uhI$!@Ek55f>uo4jA%}r6Z%zjq^p<ZC$(!-mK7<M
z7d<O4;w&$6=q~G9H!sq%6Y$dL?oziud*5CZZ1!fhBi7eUOiZ(Us)JQ#C$DlsiL%Z5
zOjD<gj}!iChpFQ=uli;h^~8Iov7dnAtd<`gG;}#QV?V#MwcL>0A<_n0%PO<E>d%5^
z)Vq;_va}$%&!nIlfhji@o3I37TwuB_YYy2u*0}s|<WpHnkOzOgDX)_xGv|4HRICc`
z<BVao!zZCD8WqeLOL49kwy|0V-L>zYb(fqm*DNK@$hV-g(K5v=L}*&Y{Ih%>;5hoJ
z#`typrBvG?@&4fcpz4$Br0b-<!NWmy`YYp$X3g2M?+{%+T8^D9bSJuG>oHW9^JE;}
z+|vAf^_=pYvV4~mO;XH=Oa#9~tE1J&^j0D5d4?Pgk>uL^&BPoIA>^gjH>ZGM32p&Q
zY0)fbEBJ78N3%?VNsPW;?EZM+$H0_~xxM+l`K+mP?+b4}1i+2}?ZgQ`KpY@U>Bo)I
z-q9*s<N9MTYHv@KlHJCAS@hThR}mzPAy<9-J(ekm1fNi?FlZ>~m8QIjq6y)VIhJ`6
zBPCV-r}nY5ma`V0JUQ$r6JHCHN6d8e!pVhVOPL9ug>9Ibh?BcNh7eM_{#2Buvv^JN
z<aQ}Zsm|uGiZAYVuqQinEmy75hv4au)VjVVE8_(7bhGQEO`J6x_M7{XThd8|FK?QS
zk|v(6j-F1T(-_tmR#6DD7+Ks?lLtWXqS`OsZ*tm$<ZGHLn$#cKM+t<TGmnwxsd4mF
z^%SXZLe0e#-FN5`?AIq#n|D6at3?@_CGyO}_j){PB~qDLr&tTW04soe+r}ow16SlH
z<bB5G#%&OxDIq@8(6w5^g#9i%d}hwZS^H)>HSq9wE+s8&6Xpa_K3U%z&hV3G+*4${
zR`m4DC@S=Qt+Mw>VlpOu2H@)!bX0vrq|mc57{x!I1bH-oX^nA2koKXd<aqxiR{tQ3
zkx;5&XJ2kHTGQxkdB2OD`O5Z8BY`@dB0X=oEq75pf#zEDs+wJ0^78fg<DGH3(=?GV
zbjD~4dPOBrPVtc|>6Z0FUX(}Ge!~T(#CzuPN(a#cKh|>;pZ7PG<|g^Z3kvxO=@QS&
zz>+y@zxhZH!{wOnx!Az1?c<SpgJvack=GgB)=$yMv02@w)YnjhdD)%Q<N#e`WSCuf
z#z)jTRo7*6^4HxF<KpUy^5MsK{4-4h)KN5Zr`CZ5Ub&YBfZeFKv-aJz?MvPQSCpqs
zQp5SR)a0<J`axE8iC3TjW;Y2LW=KhMD0A(+iV3TG_?XbmQrZx#^3G++Y!&b+N^O4B
zqWhKZG?)ktkG3-|WgVB}xljOxh{YPM<!^V-&G^lo680D<qo6%M)@iP%hdmgTPR>G%
zauFlE4nQn-+GCWHv^2iTcFtMA7t1{~?1^i5(_?D>$8`ryrzr%NgIC>WmV?R1e!j^m
zl!b$lqo*G&@_J$BFPg^PSCFUtjY~j;!v^nWH}AO8$&%Ih2?I61fQTrzZ1@%uz-c=m
zxtHrAB08DESZExpM#w67B`Tk{{$q5TSvpY&ekujTu~tjy<EuRvzOEmwVY431I9)15
zA4w?TaMrQaF<6)Ah=fSUJ95iMaiP7@vEDp4y*YE_we32v24rgkAs5>*UmlzD)@IVy
z2*_cX4xpZ7<-hO8Rfxc=q~R)NOoD6Y4H(gSOm&q``OepkLav=5WAn?aWGADW3y{$>
zgEZ*+dim>`y+9@B$mjt3NR)$jhFjO}=`b*MJr@>mDRcj+H`}v%z6W|!7h)Bp$jRLK
zK*vXKRU-R#g{-H`_5%1=o9p`(h}=tY9z$?b!4M=!U<HN@->dtI$QXRlurhPTp*O$c
zb&0af(64{{TqyeK5%;sv*TSRIrvr%VFtmSruM=nX$Ct9CA8K7gnO#G<Ttm$@>vJMe
zD(4w5#~aFDhBl|#JczI{p^nJ|AGk|*t#-rWxV~$AXDoOcKm9$zH6Y5#pLF(&xgP(u
z$8zEZ%L6~69;1+o@h=7<f~!5{%sNqy)X1IJ65rLM?-$AyjWTI%4JmHji?{d8GXPhv
z0MfW}UeFineFc0@*gk=N)^TPT-<|Fuzl6G#Na~ah*CcEoIj$!A3)QjA8<uvT#@Qb_
zt|VWzx+yi~7{oC?7+>LENp55sU(xvEkK7M|w;2X;BtLYIhxqI)s|+%{E$&~~)X8T&
zTGo>7t@c$Yg-3s}N48l?_wdx2%^Q_Yc*k;_gsgr7GS-<%y$1H@SGM=P=<a&|n9=>~
ziaBwDf1hx5Z1lr>o>9`H=FHgxF&{<sA8my^2AwEy&T5!#Qjp4ce>tnmZy&rDp3$Xn
zHDkQA4kDF`PCOG)Sz13Jm9mz<5;s~}Ck;>KXLe)Yj&U~*Pwi4z5jT3YZuSq2BRn<b
zMw2Zr0!t5=w?pecIaX6lvy)D<-~Y?roo2r~z4ZtR*LDCmOn{i60*bPur?L0$I9f^r
zxv8^$YRfWLCEP>8EF50SQK#@c?_{Y;P{YTv(0u7l9sN_SlgT47<~Eka<6tJHd+HXP
zC>v_}X8>7d!bCOv5SmEh!|sCj_o)+jUduA;^07aZk!3!Px$#(Ne!qRAii?Q8_U%wb
zA6>8ie~i5aP@GNEHu?~PyK8WQy9E#K5L^}sx>%6K9YS#3#exS2?he7-A-GG(E)I*k
z{JhV5{;E@_zOU-+cJ(!VPtVlU)YiQ-J=5K~z!41St=UCa)oVaesG=v0LLH(o<lP6w
zIz+q??91e%kFs@$c93_Z%*!E>RwyEh8iyRq2wndvnf@q-A|WfA(&(PQ2^_(QO>6%c
z^k0aAA`PmT(rBN*VVu!lRWjZBID(P<s$c!z=PKuK{xWhUGWmp@K}h!4{)OS!)<yqT
z|3}&CwO5V*Xwm=H1|f(uVsM+*{qy&~kPbl_P6oe27(t?>YYmoRAmP>mAr$;SV6`@c
zN_NI0E$`ou!oHHnyWIz_rDEYlcld6FWu(0DIwT}<MzcivyRWo8?|R;q)yK|}bNrPG
zAM?gl7z|~oN89IR?N7~;{uPT=3&Rex;T8N@X+`FnL6S~VI?1d4voiLr9h;>%$htzI
zDt6!2!5Sc3Ru8539lecj(qk$oQ2AwKl73y|%j<DLC~m!`03h3(Rs#{^k-?_b<bB+e
zG^y6DlNBUiMR{IwMC*#79^Qq50*}|PNcXShU+JZyC$D0zhvbFR0=?Q`FlHhT4WbpM
zVmMSvl?)9+yNs(n7;2@c-k+>V8*e4g%g6_zr<bK9qlM5JLR86^Aas9aDM!9rDGxGe
z55|7rwdn^RDHX+1x>`YpQOSgPrRC#qt)Pk@L2T)~febWcsd^9qne$EaL%AzNmyGN0
zZ~3tg4b!~XUm9Zhm23bYhE)hlfjZ?#D^zikQCt4U2Z#?DSHYaT%CmKQtS$wI<-GjZ
zEuqR_u>r4ybxW)k#ruM}@Db)lb6$(Wj#z_zhSp3(>$TC(WX&@Q=O4taE|sZAb}kcn
z*h3kL36e3L6nR@Bl#p+@N4BU~$<}1DDY7$@X?=2QAvYtb?Nd^d3X=-2^BZ8KxKSJm
z^&M2HD(-^%8Yx!++y5(7{}&A8C*p`VjcGbtD{psBwlm+IP4qFK@H0H>-Es)<KbqbK
z6gj;wDYp80&Pb5VQsAg%Ti(b!TEu_UIc+%?q)G7<BIzvan{s1Txly6tqGA6V28uWl
zGhr;~)<1#U9|V=^-Qd<AFO*-AY<x9Ne^1{NV=_@%aDVcmX;L+v6m^#=Z}{h4QB^XF
z((cl%Lh5{_y&ucZOuUL(xEgXZ2){uic}X!^FVEFvy|Y5OQ~7fKp#3toGEAlaTzzvp
z^m3_gA~UzYF$9$muuOVb3x^W$JhS;F`R9oxS=Z;37mt{5+<15CDor|t#OnQ0kk|Wi
zeiD~pxq7qL^#VL@d-g%z2pTDtZ2x^4Br~o?omRN<bTtp!ebPUWyf5B_@bJ$v4BgZQ
zn#jZWp>M3kR``9;d(`fUg;oow!ER8d^QWbk%En7Xr%sGO_^k8HeF|2=7_aq;^nxp#
z)lZ3QKIkQ`t_qU1VgJN&3>aE|%`N6Al)G38yO5O3h6)`v8017vyN_EfjnN;?)CW0y
z`&3W|nM!vVN^C8#0$q+dO<Hf#+dXgIhnCwv(KnWbmcI>jdT_Q@eva`dUBEc&h<Qy|
zb&?cZ6DgNP5y*obYerlre;$SJ7xz_JLIZ{3*5oNAb%Qg&z5}X9qJ+`*myT_H*XYRd
zDL`y_H|T80aOOCLZLJu!RRek39~M7x*Y`K}x-EBeUIpUi`s;6M=@@Z`{K?H)$*$#b
zxQN-4(mSr3qoB%8UF#6q5c7~fA$TF+5S|d%kiJMLHdB0C^7mswi^kQc=@ZOA;w*~C
zcmoFo7bZMH*CZbi%^A6!%AGGeRu|Y8t`}$*N*62_b{Dxjd^`0!ZaWk^nL9cc;uirI
zh!-*!^cR*F1Q*(F8F%S-t-|Y%y;<gy{J?ax472pj^o#L3oAKC8l?m$|(1n6qSnG_j
zb(J97xUyR_k$VCAcG;vJ$#$8Oo|jNn-Sra6GU8F_amY1|UyXP_)qy`DCsq*06q9Sh
zR5Cq3qgPUoYhZasDX+vnNNv?6!SHUaKrgVh?#r;iaj@Sb>mKh9Y0z#vOKth9nevr5
zYRl>W<%p8GrI=~-*1q~R>&*NDEqpE7){5g~skVHW&c)>oP!Go_Zfz6nC^4qYB*VZ6
zAC%dl383M5)*a==>0YPM=wtN0*N%S?Pd#Mc$*oyAB9lg22z??rFGuwTHz3`GPbVGU
z(rP%xRHo_@Ie98lF}14EYJX)^TyO-aA`7L;v=~{E`xjOlA%2e0jIY6vUjat&FQ>|+
z8`*74_BZW>UKlA#RDU}6L4r&<(BHM=+a-iDqzQfm*&#BfdH#UTAS-bme;z5s0voTq
z!d2S8fR$ow^ea|<Bstb7+-eTQSg<p^mn;F%A4{5MF(0XdDSKA7S}n4VRFOeU#!`<m
z7?&GuASU$;Z8j>N6Obb#Mfu{(B+5(<VL=s;qcFs>o?*yFDW2n1Xo4=WkJMg4C|6NO
zYLOU+cG4&TpFoa*BeikKl&jn$Rai;J85$rvypcl2+#0uF=oB49QuO1=1xqTsk?eoq
z!9SX@fEXORf&kHUpeJj@A1RT8I^|l7l&2_~a+sZ5v!oswQM?XvY+YgiV#x+R()Sw)
ze8;d{-2-_dr~5Ck{|m}#NBV9ffiUIka-V`)o>It@J?C<@*ht`2%8`D!RoA(dqbk!#
z2uvB9T^ID(gb^i`R+w7_^f?^b%{~$m#_+FAHI>pp5%gJ{0fjj6-;yu{v7P~C0RZ}(
z3hmDLkI|LVApYM59?6v7IsWYcVI*W3g6Q!6RhXn-XCO#r1135_aK=(D6oDhrh7h89
z1~wZdz46qF?;N|yoFMgmy4~axkl;S2*GHnU4vhf_VvHg-`<?Mmi`K(ZgA*^-*HJV<
zyB*1dlg7Wnl;1nnSoMaF3GdOg@|79XnN`A6lix2_FMuSJlaBNqMgkjC9tt2D`;o(B
ztooCmP?WIQ>28!?d)68NRqNEQvFWnEiYnp%<J0Gg6zG)E$p1&zl!Fe~@bYTM3rX4+
zd62wW6AgktuBI>lzdv`)mZ8jatgLi&`T2CL`KDKNWps3}65Y10rmm(Wk)|e*Zgojn
zWMo-MbYw~7Yb8Jvk7)TR`z|MQW6VJ6`7%I~>%yn=!TY3jH^=W;Y}Y5pZ%VupPoGWN
zxblr_<3eP4qr7pYz_z_yWV!BVab4WQ(ys;@y3toUg^|rjxXy0$8^j;mIfA`2an717
z`d1$#n+@@t*`(SzzIg-Qo;9Ivf1&MPr5gpvw|WCe&ziXDz7Y2>u}4-J;_CC!RxM!H
z@)K+W-}g_cMy99Z67kVe=|u>|^F~IKoegRtJ5yTY(mI5qrsIKYJR`rQ<03jlkbXy-
z=Az#=mG7@&=r6~N)FHzy_(jE2R!u8EkIz$<8mZYR7hA?*p>vE^U>`<0j}@sYeCh-t
zs8@85EgO&2@i_~J#0n)F(b!wd&MAMKE5p@fqtDlqm#q|wG$O-m+=kPbMtJKYZR<+(
zmpIABmZ9^Mu~r~pY)=%D_m@ZGR!7sCTKD>=_WKhLiPX~MITnov@HJ%G(Pm;91*Cdh
z!d}J#RBDzjkCVHA8Kzcx+jcvZ{M=@HSUanoV-?#f{+gFx{U!R1eyq7|ZH$YyRM|;f
z_}}WQ;_#f{+)8XdsJ$>0tr1Da$pnzgAa-dR61jq}@JTu>8d!p>=hoMtUs%7~o6hd7
zk<g}C0yEh$ou>l6BpTGdx052+V0f4dMUiYRm3+Ro)I0AR*Xs<0eP}4vo~>6i$#lBA
zWTV<$|EtGnYV~PbWy&GG^Pd;MRao*3egiy=Tk>0w1J@1F#AcmnAhD_K2}bHmShcb-
z2xfAjk+sYNLz5^EFq^F?GF3D8Co2q?#mPVx&^@0Q6~>_q%B9QjFjQ+6sN6Q=>UnYc
zQs(fB48~I<b|UhUT~&l?;pIg~40$-%v>aW;66h2xS8AsS`zyIKlwl(nXW`Wx>{?ze
z#tVrNGS<8gx++_{(cwQ2XoXk!?<}XCAtN3h`bmnWK(6u2oj7-uKRz>Nl^fhFKOT%;
z6wKznL(%mUq+lUW=(6)V$&^mhO)Za)GC7T#KR(LvVKeK@3VOLeA93>MfX!C-buJsP
zB?o0+n!U8y>TI<WzC>fyiV1McTq?k#;TO!(v$>fa+dlWaFKtCW`}5PTd+nb7<@@h8
z;?sPockAKI`Y0rw9p1HEcn<N;d^g#8E-@MLLHF^oM#@;5M*v=us?Y6ER=SW&D~WZy
z9YEOkVjVWl$vgb<B!fw@Ftu@+&w`TmE9n7~N6s1bE$Jo`N7go*fj>np9nC9*ngmU!
zj#^N@>t1u$j}(zo3#ki8m}lAe^8!<NGLK$hM_e`mUo7+%Gsh==(+u^5b{yZ^@L&nW
zajyf(?e25zlJ_5qrpKLp6PHy`K%V&Z5DD(=al?;0i|LGY>XVhf?9g!L-c--N3Hpr=
zpF-!FLVuYYJu&C0t$8pQ<le<PBSN5SrxI_cLhFou8`O^t5AE`E4hu351DXT9d<k4@
z+KzipJ$L90%;zc0M>0Q;01U7iXx@~E`AQqAHP}2}4IYx^);r2ARpFPXN68M^@34dm
zQ|MNUA?!>Ax_Pn$Z8&^08RgL8W7m2nT*L(Egg3JEtu%D6H1z&o-m}v1N_{Kt-LC{`
z=$@(Xt*ZYaUs<7U7QUMswo4tnYlb$}g(UW(<^613a)a;vZ0`Lm(I7>d6C^D5^2Ynw
z$@|&V``OO>S<m|!-~XBJ_SJ6oNPPRqdHX1G`}oE`ki<Vw+&?hQMlKpdA_!k1NV%SF
z04cYNSfUH#l{%#6DimFNcDcSyIe(in!^!Pp^ndofedPFa;kR|6ztxfPLF@&+U7ujc
zPk{Cnq}jJbytfR!x6EIU`A@t1_S{|zuY`2k&2id2yB9-zDMxXikBPJPX0wgFQ|RUw
z-|4T}y;9!x6V!Gmu68GqcBgm$;U^63POpPf#y9oC>}V%7^?EIEyjI)?VEwBk{;!ge
z_c~`RdYK`3yLX9sp+a%G@6fa7u<Gk#cKD(RQne^n^(todD$>7{(o8piQ@x5)EgG$8
z`li#15ZwOu@mR}y@vDtVG{uGoxg~Ebk0A<N1S27%OUdHvR95&@Rv1d=D}}=|!u~G}
z?lpeC96c2b{SWbllJ+&V^Em#lut75$v`>}3P4&D@<@}ew7OY8+Ib*MDY}8Z?>Wc=#
zrcZipxdv^$EE+`r0Fbu;dcDn#2%B|C{$pCVsfE8$8BaL^PC3T@0EoMr-TRuydz%}2
z%h|u`v-Fg^_mt1|loM|0{`!{|dduCV79&qtwY^E`-gaoCz<ChiJXmnB{X&OMj~_n)
zZAK&&&@D;MK)F*U(ub$OI#!R@sLxisKrOb3*J2^TN2nkm_Pfbv8)DuI^Qb$WlQ9PG
zTUje{`kl~Wb$L^H1o?4lh-Iu+>;YM$`CN!5P=1~C%4#k`Ge~~CATffMe8d*B;4Jn%
zPsXS%GW`zU@C7M{Rl~PwkbF65?HypF+m^53OROiag<e#9E?(xCwGGDbcyFQxpUBV}
z!|3qv@Zj*o@DTHG<Q;kHhXPFcon^xn-h<&1jDnL`Umgo8u=PLmI}QfnJmdqm>;-7C
z@A)h?a;)Fe?-UyB@EP^nvJ?=->hT#3+0qwq#5VD*3`81Ury|CF7qBtE&Vez|+sFaP
z-Lx6$>n|h4w5aG4(wIiHVPxlyJ~{25OzF7N^lOPXXq;1<M?_)b=Ye;L{;CqRxv5iz
zulXZu4cCZs8EvBswo_vZ3kxd?3kqWj+X~YPtF42rYplOpCtFuof3>c&&af`Bj<@c#
z23wa}hgmmTXImFo$5^*nr&(9Sf?+kV7T8Z%Y~eJk;e=kqyyX=@W}!sDe8LC-SOth0
zwi)>u_yHaaQH&xC6buvqLxxO7#RkOypy93&i2(^9%~0QH(O?lEWY}!vW#9$4F~l)S
zFrug^t^j`NFKRY)RL@)_t_l0X0~pnFcCbABeCT*+b7*&HdFV`GMPW~2M`20foN1M5
zpJ|@?B@+m+1y}%_0M-D9)z7Prt2V24tCp+IqE@0dqUNGsM1jSg1?x6ms{z+P#4Qq5
z`L0v1o37)pIj>KyO|Ltz5w3f#&961DYp>C+N3QLz)31fE@2=&p3$KZ;=dV4k<E}Zb
zkFQOxJFXG0`>y|9CtdSh%SS-DMJcfp`rxR-`SIWA4{eWa;d{`%gS|g{$9ub^d!*Z>
ze@Kr>cfap_-~N8`9rpduV9VghV8>wJ;I9FE3A%K!^k?aKY4^k4hXY%eEKn8)4buG^
zm5};w04_5sNk6(4(iPGdbP+;#&ON=~^*=PEUcO2p$zaG6$Fh)`ahHC!?}`1ojC6rc
zOw7(=U|Li5`Abju*9oLmbWh?VmL)Tnk}ZRtsIRj~yIFH~?kibN#ZzSN@>#CH!R49d
zh2`nxf#vn(vE@bKZs8^2ap6(n1>qjyW#I|oS>Yk!&DP=8xz^s+mDb7D>DGbP_13Z0
zMW1e;C7(5)8K1%BJ&3VQS|7~y&V*KfF2%*#q|)TrB-_};MBKQ;<jEM(M8=rjxWMGE
zF@cG;@vKR`v6~5oag52BF`J2l@u5kkF~CIBxXt9j7{x@v1glEBs@`dPp^d|-c=Zsw
zrSIgsD6Gn>+11O%%hSv4#{I_i#tR38<B{N=;F{p20n+f8a+&g+a^rI6a^>=>2331F
zyEuC~yTRSzu5d4E5Vc#bORi@w+t08;X+U1vZ+%ksSi(UJzAz4qRbo%}Bdw*58h!K4
zUWBkvj0mE5R!YE!JQvWPhTilrH}qW+PF7>1mV6hFKfik8!T{*aBqywE0Pi2CE`QE?
zlfr=L6ylJfBUf)RsxBsIlrMfxMR8+sM{!bdd2vK>b8#;42QU)&4cGw80_Fpwfxm#M
zz$#$KYmCoyU?DIL*a1uemIEVz&A{B<AG;;RJ#M3JO_7BAG3;`abk3STn2ib9l!@j^
z8d(lL&9#;QG^g?<<ep-XiLf}x4f%^~{ilECm&)-)+mKAK85uPEwDp-T%WssUh!!OI
z!nR`AP;47CotJMZ#}utjl6|37J?(Jut3$&1H^tdt2br^qGr(EFnZ()4nakM>{tx^!
zoEy#zH-Nu|TfzC^s&GoUKb#J(1xJV5!$sioaALS8oD*&eM}V8Z&aD!h%-OP5$C1;M
z&@cLFAaC2&HU9(P)wLzSwRpQ~Ks?%y<c5vPK<uZt?AhM7>i|JaF`))mj;>g<x76A8
zw)Fs8%pzem*M?4eqqoA@$#%d1N=yQ=5MeH>#38*z$JDmleS2px*HO%!R;RBSg&B$&
z&`iio!;IQ2Xp?61)28Ak>8p<c!=}zA=BDGO*rxO*{w8RXb<=1QdDCW7a8rGgYBO+?
zc9UllZPRYE72n8$y*8yq#h<YUqNvo)pgmLf^NZ3Dgp+Yy#W&@WgX|M;i<QAh38a>h
zK>2-|DqFfCZ?RS2NIs;Hkxf}It%7aYpsvu$Z=?#+!HA-aokqzeYzQj)In8x95g4)g
z_vS(7xkU2M)IH!~^+EKm?cVR!@8RJN<v!w8;a1^c=#J_B^`Q3wc(;2`a!c}%cBg;8
zc)R!@bk}_Eb?fzTbBA-Ea8L1A{0LN0D(#%pI$*y_MON-Btew%Z3$V+a!7j{JX-m0g
zKh|F9a{sjddj?!+sXUaX&YEo`QsC~n-#!yosG^*fR>f)p_?74Gw%;_9UFfHLlSaiV
zuIHP7>Av6k4;Cq6Q?Te3##==2N3le-2FwO5cT9IQcbrS~ODs%OOl(YySoBydRa8}M
zRg7`WakOz9c64^E3e*bh3Jga~M>I#ABlIIIN>oa0N}MdrEHwU9CF>nth4kWaGh)`5
zRL0Rd>&mf}G!NE8qlJPBFT<|75NnxH`Q$iG3Vp#^N9E<qIzwx>G2&znPJmuhouk_F
zeVv*$V9Yc5m~&O%v*yUwP-eNbu3id%4uwMs_?rUrZC{T8H&F#n6PhQgC$=ZXHRkJk
z83!938!H|&9xWb69bFx35_J-L5`z<y6O9w63cU);3DpVP3F8Fw1nmTe3Y`ig2Q>#f
zhpiYk2m-XWt?5&-CnOJz@xeI8R#Uy$;aVFV?fO2O=LoRSv51reR%(Dmo<HcW;XEDY
zHoBX}#cF2MneXp$_v<_k1{iHlgR^b|0)ITZ+?|~#!GNO_GFrowpl@QdLCl2F;rMxu
zB_1UKCE6vgH)2b?O3Z9O+bY`1+Pd2s+gjKv+xpt-**e)u*}B>q+FIMH*#_8Z+d9}P
z*m~KT?S0;}EunR1b#MBrv&Y6xG>Psk_k+$DuUt`gPQRga@6&W^K0t0NT7u|_4Othn
zlGKo=$ijc%XLKnMAFGZ2c)5W=?N1AzfwJgEA_`VPeaG@8!`fntpn<$-OCly#b^R=i
z*%}^4jJCc`7j8<lp}usNF_%@BA(u3l8<%RA&C}r1t<##*lGCNrZ>P}HhSTxWtkcKS
z{L`7!=+lGKU#Ekosi)VcRi_)LA*X*%&rU~9(_JhJb?mC#b$nT$Qu0P^t@C*S%fIRZ
ztcyphQp8#P^smb)4TOJ!WMO-wt|<g;#X9QMS-Qf_ASu}PsC5b(+oDcY^_os=BS-;u
zG8&MA!j_;XsFPDBMnQ`g(2wsb-wyuBKp7>c1-@6zRE$vERcuzAQp{C+8U8W+`*mUU
zeb}3hKR)rE&;OIxW&UI2)WmD5=0`d^Dxi1n>&?xa+`hEniH-fVVE7)qwdApVWw;t;
z-9DV+XJeWx(F*2<>uVT0JSlHhFB2r7@!QQO5($Wx4x0~a!lK1<>u?h1=ow{U*H<`L
zh6fu{>KtS1qC3LHiT?HhyyNik4WVnpTZ35scOi!~rEi;pWk32F>+>IirXDduTJjCz
z&ey&rH*Zxa2*CEyj?nKs8^;@{PlJ(jWh8iSS-Qd9c^`zL#a5*uZxT8cBL3`Yox(#T
zBMVyST^UaW1W@9k+^4csR8kpwTM6a+cFw0`!8dQZupaY@!qc{lVD=Q#FFFpHsUckm
z-*pb-2ImTTtBfmWOuJnZ{RwXE)#>~rlXL&!=$86$j|V!;RH0v{O<-P}fL-w3X8tzK
zcDc+d%0ijzlp>LFnsP|fv`r&sJ(pmSz}|@AH&b|Sr+%h_EQTOp<&$V`d<6>JLRRQ1
zbXs`}oMVW#UXa%k9M+>Qvt1jABR5o<5m5didBfOf;+<QJLBsOTi^`gc@@%dq1q4OG
z%l4iFKA#lQOeYS<2}0aJ`No;=|I@ukH@+-D*Y0Uo!1@8aQqJO=J*?2b{?XJAZac~?
zlSIWqcdg~NbM@XI(-G^=GUJl)d^zJ;Qo0fap+M$)d1|T%m}wCF0pSs0qNHc<$I!f6
zir?BBV+2`hT+`oMeD=aAloGN*&;N+|et=n`Un$*x-K<!M3MMBA{Q5Y%<#YHVrH#yy
zPh>0lvt6kJ!w5C7B>GaR;UVV37|O_J8u$qIDMimi4;*O&b=<bbXci~0Z-72y?USX2
z&?SFv#%ow3cYR;!s@yK5XPeUkfdEpk%02Naz{WpQ)qd|15Bs`4P68->V-vg(?!N_M
zi1CM8g<44@I-p$=pAj{Bv2@%7uhjVyej5K|tP;~9;Drtqk@DA*3nZ!vnjG_~*@?g1
z>;8aGZ!c^|ePwjH*qzCL>p^3~DL00v7SxHwT&l2tymcqGgfRS|g#n{V@E0joG?r1<
znVpsCR!W?s!E#P>JuqSWbpo^p{Pz8UXZM@!rwH_O_+yuD=NVZFNd~Ay#>xMEN?nHD
z2dpd<v<AJu^kv4<W{g<FyMBrU$Wue_eZj$=It`qITu;ciJ@zk9xBPAuW?Lgl0s8O3
zdoR)1F7n5P(kVqmEv9nf7p+kVUWM={oeneBa`DvnG($)9m@}6bz-n|7yW6l_`rLBq
z+9#5X-6{Uz3$v2^em@f&taCDZ5Y=Sc2iAZJr9Paw24@LrzQfzct9E4P7U^#tqgTbf
zW_H*UKP>Xp?B#QYf{-`9GyQoAf?L1tlH^bX?QavhJ~`_6RApEFqrxe3u4@q$ojg_f
z?gF=->c)&vf*Oe^Y$*(1ZgRI;KO}~~WlP$zYNu6q*|F_o7mJ?4DLVMU*qZ!V*^RlY
ztX@Jge|$|wr=}Ts)xmpQZ7oK}zng8~Bj3^$L_yed_SJD6G`3sY&cDvDuz5Fn_Ay76
zPus=$ex}4gkCJ+EE7B%$@$^)sXnOl}to!jY;M`?z0JfI!sfJc#1``C3{x}|DBd}}g
ziJg`}XTh?@Ig`H)?!Z#29A#^H*#^QMMDcS)Dalo#N}MQoD7c>qK-Fd=Op?tjF}pN0
zWqk!aZxVD!xuT+C=$om8tG!!-P;#kjM}~roJx6Umxs)yHGVF4Ot(C*h=osx8%$SAY
z%-fQ^54JtNM49DS@oP+4j-TT>E*K_g+er~_q=ygzCg#|82Dw9vX6D!{wcMAGVR|$Q
z0e`pGm}+Mv_FeeU4eJnO6CZpkXW>#hA_0T%Os$xNg0Mg8l&~D^W?YE<)E}O=R9(L;
zpnq#0Uf2muTgk<^d{3R_211`9XYC(!FWF?PUb+ktb}ncV(&={wEzOkQR;)8lZG+jU
zFn(2&`IFmuzYX_;IcUC!<^0vtT>8<PPweqg;@8W!WbbIH)~?W!?4>8j(w$bxE&T4b
zdqDGd=&mOcoe3cio1CQ#1?qR854%x!J)$pPq9nZm7WB#z>BW+!nWGg&Tv=}5B@FrR
z^H&S~&qZ5!d{pLJ3)l?F$@}G(Ur?u;XE#5J-Dh5PDAhiHe-6+plq`LToZFisV}J<m
zVe#61sUfHQ*^xKA#rO`(I-GQ$A*N2zci7iZ!zoRzF6uIQSrQcCnDpgm+7ZMAnh63M
z%leL?2}_+M&w?^8!S$e2e-$UjX1V~FAcz8#wx;f+a6gg_Rfjs=+1%O8m<7rPe)9+9
zuxq?Wgfc;yhQ-fS&Q+{_v@31Mo}`$im@$SL><i)HZRSiIzlLL51TXwV77c%2t8W{<
zHXLX-lk&uCAZ4a-^8O}~_-IXv{rK~B8<oSsY9hSW48WTzrnmx*Sb`&;Go-7FB<hb~
z&w!7tx}2b|4!bGsBZ2E904uK6xFgH1)e%wXKl@7YwPsu(>6#?xZSkXrv!W|R?;zg_
zms}TWpHJRO-chjx*cb}KGMC7{l6MFJ!SRgcXN6q?mnfGgP&tt>3H5~;rac0yciHO2
zNt-jp`?FT!PdwQwfeO2`cTmQAm3x&saMjN)I<DEqOCc!Hz34r!Ps(%7bB<%d>b~bW
z`MTUD&FX&UB}ZK-)lZa>!%OCXw4;3Z^v$r-%14Uf%u7Vy=%c*ieY?7ZoIEw?7jSg)
zquN}Q2*`jxS|0RGpf-+@XgxoTlH|!E*q<hRfLoYRz904OQ@eJ1QWkL+V_=Lw!v-5R
z9kBn;whKtF-K;&=pIw4MLUuB0Dl%r6Y1?hv?JMU^PV)~E{YbXAp|@;j`d>ATIi7X7
zVH?rJRY~j+Ia?MYMfJQC9cCi*MHM-SzAb%<BBL~*R23cV_-BKAwoAdKKxyS~IeRV-
zykE*Dg(tm2g*jRpdCn&f$h{^a&65-C`xYj(F3nXs`ka@Gx(BRbejZ*2CswHwzU#h!
zM1Q4uWQO(pYW6_+9_DV~B}<y;r|)G<TKe$G%ZN1lf%O~r`x_Pn^NNk4W;C3g1xk#+
zm*xSo-pn^w;^trT23;afYyLR(k(#HQSNv)2wdpGlub*@L08F+66wH4}@Z_5m;{5Rt
zC&}0O@x{W}`qA09_cs4b&UdtB@|O4M_ifpk$9>cp)?cS-$2CiTl?Kum$Hy33J}Ta4
zHFka~fle-BvP@Nofj#K^SBo$fEA%Ks?Il7y0Mt{O2#~Q|)UY(F1GHyp;%gN2!0mE6
zu)Y7aG;xVFJ7M89%TeUCeO$Dv)-fQe8lYN{qUx1?f)D4t62iiNNJq{bjK10F<Y9{E
z5qHdBju#NO_tl{U`mSC6yiK$Vw+sI;%|FYp;@{7|$`8nLyszCK+O{mZDoX2TDN0kT
zj+|8ms8&a5q(57&ut<Dav0mYL9==T7|KeJ;|87=vTf=QLlYj);Da6Fd-{Ih^Z|vwh
z<!<ahIrsU#?bdA;rD%5hVu#MH@b;^)ofC%>cQa2jUUT|thF@fLx?jda6w1WYgv`Lr
zMBl{U{`#G>oioU^SdW-CZ~E(YT`BOw@j|+Eu6_6sLO6CTMDHQ!%;TKmB-mxM!3pc+
zY*snQdC1S2oAn=m1iMGv<?gu6h=UYb3ohT?so$yF)vW2CusubHeWaqn0>e|_DV=OM
zsVFKkF!<<Z%CmN-MyCe(`vi!BQXh;7wm*aFQ}jr0_p{yjxsYGpl)gG;aA)DGA`Wb$
zJ2jBTIpu{$EzvB=Ea^Rd-oP!f3J7k_SNWH&UnG87R$iM_4agreZ7h#L%3;$GJFP75
zKw1fGh?>@u7bQKmX-Jrsl2^E@ukHx&J3d}@aNacad$?X%ZC>2y?6|%@ZftgzoLX%L
zD}hVFWZ-464>%0W2!?@m!Hr-n@C5h^I2$YuegeyYEx`ofS+JXK!>ECEIY|Gm?5i%g
z%v-mp%vyJ~EMC{7?3eyk*#SV{hrP>uO_`>yW%+v@wW<s~fqHxO`NuLjU6pb@oysaB
z{l;2*mHF#36J5V@Y@K&iBBma72dcW3I?)*g@g+<L3E}zEwsaYBP4P_$p3$Ch*O9OG
zx)|(O?5Oz2`1tr3^;q>N^@Pdj$vDnP&e!-zRk2l3RS8bfPH`uZC-EmSRIyZXg0dQN
zQ+i4E0gZ(#hR2oIIuYfT^Q8y(2ZHnO%0%_O%1;c}i+=@O{W!>*r!ODUNvO`z5pVRB
zzdAbbna3zk)8VQ%)$M5VmATqE_%bhAexn1gme2{PxR<@!KXBtA=Nok7@fs(=7^JK9
zW+!kUb9hbDc!+;Ubx3qbL4iv_NkL3OL_v{>n@O2ToJp2RkVy?71ds#p0Pg@KtE8*=
zt5mB*s}!QRqLiXkqGX~34i#Ygae;VpjkvD&Is}zUb5;&Uulc3-b!Hoj6x84ufdYsQ
z;d8MiWF~x7HWm}f8T+rZy0gGuVrX1nVPid!k#QxEY2UPPRI+SRU%m5rVmc!{Lt6m&
zm!T>Fuszu#L=_qFx7M50l-ij9j{9orA%>H|3E<S!gw*8JWYh%I)VYMY<hgjc?{Z1Z
zNX_ugsLY7WC^m67DL08X$u<c#sU-;|i6!wQ-%0ALIK(wJ8F^J!3mQ<A#x2^|0~VSp
zj}2A}oBY01uXHvd+M_JKrZm(QZSs^phOXE(@;U6zO;(%ev^99j9UrWCG*UP;&pB1E
z>$Wvte?0!P^0$%6VQNnB{m*a0e-yp(pJkcx)EMxWWe;T^WQ%1NWfNrKvR(b%{fYgN
z{d@f_{r&yP{g?d}{cHVS`?ve+`bYaS`tSRT`WO1+`%n5i`+NGQWo5Q?wjCi1S4t`~
z>6h;jM_hPQRT&SHzChkVvXj;!;z<FJr=(DbOcH&PCFE~X5=1+R4^p3W0l`R8fs7@U
zLmZMQAel+45YZ$*$U{;DWC+3pDNfqe;<r{^);dY%B2typI@5VS&pR(T&oj?BFFwyU
zFC;)C@IioGfK@<HfL1_QfJ1;!fJs2Ik-3q-k*-msk+YGfk+D&{k*!h4gT~{7hnNSi
z$NTy3sWUqb^v6mMvw80P*^0o~%Gu-D>=~2US68dqry0aqnHl<-g4w?_1hd*Rv$ORx
zZnGFOF|%VcY_kqChqIY8fLYO*w%Lanlv#yYtbOhMdNRl~kev)Tn2Bc9n{MzvrF5!c
z#C_O((tYf5{Bq=S3Ud^5B6d7>Bz8)5RCQu}czkkvjD4Jagng=Fv|_?>*m2Tv>}dRG
z<Y<a=lyWR<IBPPiyuf2n1d!b}sZUZ7GdFO^>%nojvfxp1sI}NprEjwN3&A7wFnm6)
zi~=B(=LA}B_?7PAcCfR^Q3fz-&Uf-y|Me@*18~r^cwDv$@cMD$vVQg}$pd&mUaz%~
z<zXdm7$le+XG5^;*yPa^(4^hu(4^4h)nw-R*;CO|*3;e7*weyO+0)lk&(q0M%G1@;
z(9_ye%`?DL+ta~Q!PCpr?E3SyZ4<2@t6vk6U7oYK-5<w4U+{*%Agz3BUaCgUMCY8G
zHNXy2$S`duoe5K{FF6CWF45hh2@|SOx`FP;igrmQLJIgo&a#Y8=_b@Zq7%Au42N0#
zw2Qgq3%=?$`VoBjg7YXG&nzQ+E9AyJ@f$i=J&y;wBb(Wyd3g(=N?gMd>&80=f)kJ+
zLm}<zCw;AOSJ}~Kn(9y}x56+ySPTj3PrCGV6X~Ru{PAP53;Jm-<$-I0Zv)Gd#xM!}
zE;7`(*c41J+{5FQ?EeD>?!;vYk!GV5j~DAInm}Q3O<r-iRR8%x3VZy%iFfW#0y531
zOr)m{xk=qbfFo7OO9b_G&<L$0(N98L=Ax2c{>eq^Li<1&DM9};gpWT`u#h=)<|JnB
zmzJ*_PyEI|s&5=<g0K}e!x?ZZY1k2SdY<mVMI;Q(cJ}+4luxMVUalw2^YzK5MhKml
z?G!E4z~it-`YpqTUQWtm$fEwV5QAtuvF(X1ii^n1kDS79MaaMX!oF;ge2k~;KXj41
zv>yqp|BYB^M=D?f-oa~RXctJ)e8f<^5A8y_<xgB3G-=shZAqhNoe3ExyWxB!gIss>
zs<j#PIO`nhRlEtxw&8yw7=}MFt_{evztF$%26}Zz(7p(3J);4Skxx+aQD(%qe6rK%
zo<4XON2YA~+yUO)Eos;(FX7#IW8PKhDzKU4<uGQ<PmcnkH?WP7DEk0puw4&cYDjVS
z3)L}iYI953>`yA@<2W&)Q`ghq(hZ_o@&X)@wK6_0QZchpA7cdqO~9K-4MI;CE@Cr;
zArTUIT}Xk#P(U!;g(I3xdCTWs@WYDKY?35GU`10)_u(~m<0O*Mc~1vwf*n86qNKR)
z1pP-uj2EnDeZ|?gBkT>s(!*Y-nnnA3y2Ea5Wo_PAsLYZ+8pkTqn2cm!4+BXcn~0U&
zKJ8G&ivVa19>|vCPlEqXhkGD3<$x};d&{YI@&)c9a-!q(TzJJo%Bcv0l3F_a(-3wS
zm)wh3b-V<6fC>t&ICTm<bZD(?4-l6_Vk+fxD|SWQ!qt!+DRI5u{$n8l#A$<a=6hP~
zn&M<6TS=v<S+W&?x%7`Q;$z%<#!;FE1kM4?<T&*m#)!99s^+w(cV7?P3M*e!I_L{4
z^Fl_d=bon;5v1Tmcab}84w95GeaXse{uK<C=@Yu0PiXo-+mZM_ptH$Q#<OwG#okD(
zWnW0Fp^kiR+}J}lCaM2tQT>fPWdN!ee~OkQlYscQsbbQ_wHaI$m*hj>xP^r?r5ts^
z?<K-YnP>Dn2Ya=1LyhT?%>^hjK#_&7`p!J@@mqqnBJ14qxWca)8DEDJhh&ihq~uTC
zxA=jmj-@>jA#PwM-$o0|)5C)hrg{E1_u(@DCu9p^0&fQkdEAx>v`XeviNuAhu(tQb
z!N6c6mA+s%#0=L(rFZYv1aWyk{>1yNkLngIJ6o{xBjWSIkM<zY6J@uiLBN|!u?`f_
zQa+SD{uyC-EVNatWH$NEr?EjfuBVK)Cf<9B$wA<pvHQ3sre(*JmmKP8r{%`QHkU!`
zH}8wvk`qCN%k7Nr+4w$eVrx1VX-%{lI-<TMp~zkB`Vir$scFYT^M`y#v|H+<g!YeX
z=Ec4>Q{_?t_FkhTZwydO%ngbJy%_2@j<TiZnv$@t@{1qc;v`N2?+_)hpn|3b1vu0@
z7cC+x=xh16!u*3AAME?5Z(QY;n(2-Rz*B#jQ~2MoY<9Q4-fP}<828d*+rpg>EU3|8
zT+-K~op~V|2JR-bnxK3ug1v_H`Iv~<%=Xq;-}{|H5XPgx45q$=E;(8t#`)cQZ_}wY
z`Ryj23i5j)C^woxd6Vb>B`b(xhm+<W=N%UG{+PB=Z$P45EO8T+>Y95V;ZAkp3zdZ1
znJ~5&!$O&2y`tntz8G=T{-<c0(-s8@>a%4v#XR+*lErPo_I#6KI-sqM6I=A@9AOu7
zP8u%(md>hXuLt8hXHhjQ7w6=|178oF=o-K+d-oNQ+>~Ymn|x~j1HN-L3GE+7Sqc1R
zgHO&Pu_OZ!=-qheTVjc@#gStrYa4}hIfI|QBFR~c49(8wL>Q~wLTAEHe#Rtu<L&Ez
zQc&gW16Wfr`D25HGb$8(D>a6|H~vmsJrOWH>g>u?J@(zdg!tas%2q#ec713evl(Y&
zt7)r+Yjx)(!l*%mnocA=7u&9wPSz|<3;vDYdXXu^VC=ovI!C(W?Q73@*r%t9s9aMH
z#?6TDJ{l0d>Eha0ogi7jyg~hz_aWmSN#z0xAMz7%aX;ObPkmflVpUgUyQU%&FzBf@
zP1gz0_7r~sK0cmDKFtv`)nBbd1&WqJ5i(&HXaN^a3Z9S|EQOhDXF@}BRzFY3y=I8v
zl9~}RcoxnkOBLj&+?Sh%tlwU-cCJNNq=4na(wbGAVCMNOw4>BwT_;2h26j>w0Mbdw
z1s;ctpl;R@LCZ_ub5~RH1a~e5%-w{8eDrnvKIEP?Dgyrowt8k%%2mzZJz}FR`q5%l
z%k3$h(VAXt;UVa`gb-&ss0~jEEE3#mj(eSo$}WAgz<q?#H_MFj`=5f&r+>0^l^q5K
zvX42;Zm^#3RrNZ|#?H|lxLCP?ut1v!Vz0m990p0O#lA>E=4rq98Z@8&+jf3R*W^yb
zJEFhy*)jFl(CqT`Jciq=3HnJGUX(wjs}f~Z3Qev`aXY{Ltfl*J2_NrVy{~NNA4r>{
zg*%J?aK$Mrt6>|1jQbpNdiir#855`!gz0m$5fgCOG%cR{BmA;i;&gq~E!obQq{!Pe
z!H*e$?^`z)Zd~IEwW+O6-{M%$Y*S=HrE?gl0no8l&WW*Ix{?FaKZ?(WW$Mq#U8hFM
z{Kyg+=WC<hWRavrwtw|FLE4|_M@j^1&VT;%>%P7C^O_f`9V{0y0XhcmBDkYoFb3Zs
zP!;QbN|^=B6+DtrO5qS%rA#S=3|Zk$!)gsrU;)vI8l%;<?Y^QKy$%|Ud~&gG20~l>
z9aE;v)FoE<^*z?_#X6ryL7#H$?1#A0ymd`Uqm$94Eryd^RH21I2rasOUBUb@7Ytm+
z%zvhelNJAVZ0RGkRtrU5bekbicN?x@>?~>b3B~vT1LT!IPqo+EK$RHc%LEBpg(jv;
z{}AcSGHd9nmnjwuE6n{+g8Aqiw-@L~juHSlo=JA^G`Ge+Qso|DnG&$+c{@qHX0eZa
zgH}i``@-NYp^_8wwu$o(&#}ixswmi$Z8w{ycE9upMTWy!@jo?;$)t{GliOfjF=5@D
zsEggoM>OxZ!+#y8%X?WT3wEk;S%Orc81gw6yK+>GZCXEtN;wAZUeJc=Ez#+u%Vncg
z%{W<WCt{KBwD+s=Th#_O>squDIt`(%0Zy-8kp9BSj;u4DY3(8jBxhb?Cl1JW0J298
zY^tu_S?YoFZ%u#TmbROtpYqcv_^r2=Bs6-TcqdlLNBLx*s|KV_y?qtAH(8vU{8eCg
zS&F!RBrPxTXMQ~W)010VUrUt4MB7NW_YhypzsDcrl2tkvrOtFTeZ0O(nhm=7JU{Ae
z!E2syhjS@X%RKVM>;~GtjJg4GrkIIRiY0#^uRRo{B)UA1T}Sng*^KAmBYq?4rVpVD
z^4!Tcn+;Oi)C(%;Ea*&nejfmQ61p_G^g58_-ovaj=4wuJP81!UMP+Qp16!feE`qDU
zgbQ(|5gr8`BNIQ_?BsmwHm?lCSHjl@0>6x`ThZ7lAcG%97Do(tbNrLU#sdRJ3ams#
zpD`Z-BG`dlJyx&b8c}>wju>QyInRm7)Sgv0X#WnI4dZzZwn4>t!}x192@Hfp)R=L#
ztjP4DoL;ShaLA%9<o!slZAQ_Ex{(F|vbc|RS!^X_@?L_y0hcLCyM$eWRzm6BHqHRG
zR@yDW8Pgnx1igd`#=vgBE<a6G>JfhqKuU>8#jcbiK-HdWT`G67GWqA!uAcIYwMbXh
z*JtS)taYKiY7eeGz3KT@0f_q-r#ObExRWpIc=w{~ZNHFz>E7g>u&?Ji%&hJ?b*R9L
zBCcoyzERB!?NRJKw0eLWdOlhD=RU75S<NW1snw0pb=ZQwOV2oi4v7noTRmcCa#eY>
zRaeph9n2k0Wqj)l9oF~Z`(&j(4I7uyC-Sr9J3{V4nVbCZ*&7~ezMy<~E}*fPIt5T&
z{1WKYkrU|d<dO6Iymlb=M4J9|i8HJ*Dmjyo62!?hFUk5M{apCW;}iD?c+&BSdCUkz
zJ`~T~H>?<5RXH&56M`5I(SA(_hk_%(xtfuh$(mm^Q#BprkI6hN=2A3q<U7c&Ecp|s
zapmbr<81i<f17g11h_>8_Sns{lfgN!wwfexnr5)(cg<KrG{kQ`z1-%>+<M<>REdkw
z_`-yH{msEOItH{A#0zK?VH~}l=4mzhA807wOaJBfZ}ZWj3QUZ+11V<Y%zggC2eflt
z(S->g^MZCjW##XCnV3R=ArYWqXfy9~z?S(|2xVRQnkx?>F$|>bk{)e^sC-p{3`8_T
z@cc*cjkD%#(v=Sowwstx4TY^yweFK@S@g38e7(98teEnmz(h_@CT~aPLNm7x4126=
zk79sLoR>39OtM>usK58r3eFz$iku<^wTY?mstU66u?sy;*UY-~yUZEbvh%8QPjaW#
z#G7q?g$|-0cHH1vm<-#Z6~JQkc#Otu5ep__n|M}6Y;g*nVzGHd2KU|;%*IaQSy;YX
zvazzVgxWwY39Sgt34#5W)s>6|O|c@p2fZbt1*Wn0yyV@s+y&;b@;u~Ywr>hXVvBe(
zMr^SQ?qZ2~j7Dvd3g%-McvgmOF$#`jJ$Y8f_Wmj8i;d?K8QH_6FCsWnWm-yCui?x7
z3>4{^bpM*Y|5kJs&GUb*a3J{K>;Bh9|67G$=!W~3<CDh5w#9`LQ$U;F|13P4nYQ^6
zwMk>W%v@*Q-&nY{nFz#~ZAj=xzO!{5w5Hd1iA26gkVx^mEVY@jg(+$@l`I*PJ!`;|
zuQ=_0FhtNL22zviYkt6xaHi(S_$u~|AL#xteCKB`9xkSd=!?*96U0&0*J_yMx8Knu
zA&UW`I^(k5<VaR-dr0*z&tOtR1RzxR%~Sv5tX-}65USv>{1H>-qpI><mDqg81cR6K
zq!;Buj6e47r%ehLf^PdC-wK?5DhS*C^Jx0R28H`v0`B*VI%%qzg0!me2yIZM*9-aY
z9en#CSSsG6ci4<(*N=H#Dqe3(G<^Ey8`O78efZ^d4SbDzFO);oem<ag`m*XpdieFh
z2+KHD)F{txLQ)3ASA*JO8cH$EL?Q50nZk<qTuOIU27>Kvx~3fR8^k9Ey*<}@($ao;
z2$qL-ceMv%LLS9`8?lO?_5{V5y{SMrU)cTIjIMu&QnjI?ji}!eli`BC8whJFK`RLf
zf^*s@HyiP_l}z&{f2vO-htrP6+jk*MU156a7Zh&YAo^53zrF3l0DSr$sW*ExIM|4_
znG{Et!+9x_f#x6ku}<%JUU~DRI=?Pr^&*kbp8o<*Ac!31i@%R!=YHhACoh%ZBN1)v
z%wMLDm%%R(jMsnosZAjZR4kBTdhfQCWL#|5&_M*+6K5?GxuX*ud#9^;6veiI0CiJ9
z!CEM_G=vuHCzq{CuGb<w)|0P=i2U(tMvf%YTf!V)tylLs0W}v9`JQL!!^0eC587(x
z3183IKV7VJ!1sh)I5*wc%Ss74z54Nz3CMHcvBl%X<WPZ%qlAcEjTMvg4E1tx*)|ob
z^sxFL09hwFMRGN7oq54tv90P)_{kAdU2j0d7Q#@C@LNN*@2?@MLrQqgP(IuXGI$fq
zwMo^PR*L`8AkPj5D|W@WVRUa6@29`~PIgHX(XtIIYRI*{M;>JFFnfnL`r!$@V?;W(
zhX09Sea=)t6GV&neDj|zhkh~D4-C7Fw?Q~HIL>MfNE%UwO1JN*r7|9UCfA6S=_d5l
zaCYk@o8x%uQIlx9W;)&m*t4-cpnJ-awZzTIhx#|ys&D1-d;@k%Rw|dE4Of1Gx_!}*
zmcX#RVIXWNG}nG;%4Zz65Bkv;{97_Q0HoEoSW*B%&v<rugDO6FOpu3w+NK{{R?-+Y
zS#O`1vnn^L%RR(WzfphiVS6!O9g3DIWq^8@kKv|wl6;t`KUa{}Rh-XD$Bn-CCBy#~
z^E~XNh51}!T!COQ#5hPIR&?N&h<k%E&|{p-pGiI^2R@|etUH9gnW@=rAmQvR-_Yyh
z$0vP*ULL$Q_75no=ZW_OY<J`6*h}i@*(@(1$YnVtAM$|xdw1oDqBT{|z0s3P;gZcX
zcbiTP&{aIGUNhdBLwmYB;*fZ;;!<Ly6HG*V`dqP0twoAH(r7|geT?t(C2iQDP1bak
z@qC37yyzL#-lPK6J;6t#pbvVHKiPMP4<vh#pP8(&QqEurE&Arqq*RM9mOyR#rwS5%
z%v$bw1UupzDL_eUo?-wkC~NsZ9{JNYeDJ5}ZDZQ&Te5bq<&G8Y=Dcw!AId#<(z>(@
z?OzwCa1*hK`C}uNEEy;LW-ms6vSaL23vmXdiTT$66)M5VL|o3*Dpcmb6^-l|GInM4
z>riY=bIc~xzc;nlI%+??AMg`#)>n<&tW0sqN=|#GdjQg51<4nsK;b1L^xpnv6Mj8z
z&S{bq<o!N03EnS?d{kUtC*E~j8s4#l%)kDJsW8MRUhEwLkLF8@H2J%1Hq{wBr`Jxh
z5ss(ZlhbJJob)x!36y)!K1|-5)l4ys`rthuoVgv}*-4Rg2Cs{DefMu@b7$26v7D+b
zW9Up6MhU)9Tq6y5qyU4qy0*ln!MiWL+0rSyy>|~`=ettQt|pZ%hzie-zuqY*-b&=J
z>@J!;<>Vu}uG@GL7kUF_md$kP&6tCb`*SJK552$PT07aGXu^Dc7kc5w*|N(|NaWKw
zwzsd#B7qV*mCY)vrxy>B?i)JQH>HEJJ5!#014IM-o+j?A?g5wUm(2%lht9J%zc;Jk
zrCl<cDlcjQ&QCl~u1`u&l9$Do)CU@ek~6upLHW*eLS&Ir+@C^i6ES^5dp`4j$FvD`
ztRX)_R&b)$l1ZnvWfuB|Nfcg_H-pQgLzW+IFQZyir!F`wzswG>ZaYd|uT!W>c7XlN
zf*eALK^<#aou*D~K_(}38p+ft#lzaLU6}Q`uTSXfY9Rg7%x<(^7&gO~TB-(uh0yCk
z-`{P+1yGimgvX302?s1&r>k88gQq(&y`X2Q5A2lmtG3dHPw9-+v%bFXe3CXk=Dv5H
zrk+NU{wkr8OJFop=w9j~ZX%C^@nuhwhi;8)gJy%dg1C#*6VH^;naG(akZI%nHNIeE
z$3SPVO>ORy#%<`5*%6l`K^Ge~fhmDPB>gwZDEa|#ulm`;_D$I00M9n5dD;g(N~U&N
z3HmDhYp5Q$E?u-aumNKs;d=0X+FUDi?qh^XoEH5BtDA!oyw7L`{ENcl-M+!P?>e%G
z`c2&l(LLh&>aQ+tjPsfk)QjU+E$Shonc|w%OS=lX0OCW1w4Lku*TwNGYjb<BpCM=s
z5EyWDGE;M{nYQ;gqYRxd^vW22FGz3hu`h05B0^rSLfw5ZQ)^&yPotM65j$U4?^do-
zc%xdK@yzl>-+b|t(?UJNYu^a!88!DL+&rVx%=OB==$cb?Zls)w71mqVShY+F+U1@@
zO-GMUN`#(+&hP|VytCFb(7bi$8;4#F*8(ObcAW+p-l8g@4y%4g0V~OVw0e(8_lEZy
zF85p2e-OZA{oK){Ryjb_3$YcWBfkW_pH0;7e!@EvfB<_ABw5+y=E+||gxvnJd4<=a
zW`QrS9*4mH1Cc;(zwfozT4(RI?+pk*kVd(qp<1+R*A+1X#$=?S-JpztFJXOJzY*y;
z1I5?i=1oMg7!*Y$N+JOjP!)C22+h$3?a%`+AO(Ywj?oy0AgD`H^90nE`-;Lw0lqsH
zm63>gcpA^5Gm_97{gH~7F%}cT*ExJ=G~!SR)lnZ$p(Q$^3woh1h9VOq@!Bn0io$}2
z5-5dosEGz>f);3x?sy&pkcQzHg^4HvE2(4q1T^iM)HZ?7hQ<(p=1(FJgEA<OTBw7@
zcoMDA0nec)k}(7scombwR}%`NFp47{Wl<5;@HiTxDO#Zux}p#I;U$c~E0`3%TERsj
z6hmn|hAODR<9`Cp@C@3b8(zdf48kys!FWs=&@XL7AW9f3EGJA9))h7uwiwVab6}vI
zFiF@$*hiQw93mW^oHlq+V3cs2aI$bla{92LfjPnj!o|Xs!u7(f!d)pD{RRXM2!AEK
z;!{NkYYICE)41V&DoZ$DxLCM4Eq&xrwNaQO+#@_BJRv+OJjKXRXM|^k=Y;2l7lapu
zSBLr6-|%T$LRVNw7$uAmCJf6+PPZ!v6NR;f4Tk%lHWjuIwh?v`b{F;%_RnOW+o{5I
z;V9vF;Z$Lka9-x%^b|W=xKy}WxKWrR+#@`cnOU=zeL{FrcuIIicvg5$c%E6?z976L
zyzbMngh641Fos#jDJ!fZtSxLPY%XjgOk&n`dJ6jrQ-o>44B=?u_{@?0Go7izEa5z1
zws5I%wQytR$l;kzj&P6gknn`?r0|sR%n0_Xb5?jxcwTrxcu{y&c!M8ni=WBZ@1ex6
z^2>yKFe;xc$j`XV^OWW%-Q(HH@XS__pZOv@BmFQxwRmnTorhAG(fMX%zF92ajJpSm
z=bL3@Ot}hCx+f#@&9eEV#cM&i@1^B=js5OQyiVnp`5$e`e6vKpSee()UcB0-@%lLx
zv#<b5u@+mg2S@N8PT?c`4(IVHuHXhKDnL;bOXVn$>Qhr{M_s8GB~u!Wpm8*nX3+v#
zN^9ZQGDJPXIwY*=A+=ib69CxO$w05bCDlf)miJ^=3hRilo(ic`Gps8^s$;{tHl%KY
zu$~R6H#O8xuyN>pa92o;8#-_LhV@KH3$zI9zK|B|8P-!FEi^o=|10fSMN*3#3!N!i
zR?eu1zLD#rK8<b|I$M0K)J9bNd|1B;X{oKD&r4kmX>6~shV6+B+Z{V2tn<T~9o8e9
zS%sk7XT3RYXKx{&Rh*%(xLv(>__f1-d{AM&DuZjbx!8hj*p8hX$$dD0LmbZ&_>r2f
zURN{J8)}N0s-~%#Dof2%Z>ss~Eww<st!Ar*^g7L;Hz<o{(k!)zW~;?Chvw2edXwhU
zTeLupq_@>5%2spKT>E11T<{a_w?1ZLGiOZ>c3?O5Vm}VzFplG0YEDm63u;Mis4eG9
z2kJ<js52!|7tWn-oIQOhle1?ejiOg*G>xIL^eX4lYc!rF&_tR<lW7WP)-;-~Mym;S
zo#4m8|Kkz1Kxy@jx}m<N9d?8rX?u22J7^obfL%~sQ#WncWLtK?R<>iiv_pNVuB)%?
zLUv)hh;7@NcF3$clpd#s)JiNGM5#1{UgBI%r;OXjOK(#)?V#PXhxV&T6{VupNHt1j
zbNw26Dg*o!b;Ue+N7RZL8*cgj?cUYu1K#WR9^fN_Yv?R~@7sh&Y)`ILz8$;|;1w$A
zA$cm)uEnjk<9A69VXU{?OS0$a#DAgrAn<@~2RP4msO$%7B{$=U<NGjdB7P1+ZAP&l
zJ3W+<@(Qo6*^%KG=e8fsn#Ai&%0ulT@4ia#yy))<Q+Xcz$MlwWzcF0fb>|)O5MD{g
z|HFIE+XjDa?7_SFG}(7&{S&Ro+n#u?b^X1(|82x%t}e14iA8zamcUiGpOM2cmMfn*
zcn7N=v2}UdS(f(-p==(9={%<|=K3t>U&hkBZ7#>Vo7^X12Ig~3xt=S7L;r$S-)+Bz
zW{9(ksrS`S)JgTBI-`E7POJY=|Ec~<ol@`8dfGr6X%lUxEwqics~@Q!tM}B;)X&ui
zw3Yn0#Bm$ne})gu@1b1_;8$}N_ql`1%y-op-Z4Jd`tkQwt$Vor2V6mX`)>1PQ^cyz
z)Tin%w3gPXzp5|PMfEpzNnKWdriJtlEuzJ=g!c%`X(g?q)wD)kQJ<@;w2W3fU{?4&
zOGSA9dhqUQ@FDd4{j=pkdQL+f8m!i-^=bnRQ)}<2q{rS>MNj1ldXGA)j;j-DuiCHn
zsRQb;I-(A$L+Y5?s5Yt1Txn0^3j9^IMQv5vRF2xtz3o)H)Nbx8$hM_&QVyXse=o<o
zImI?+uw!4RY&dM)aYXyp;W4%^8s){t3TlyBgGzjV62D$UscNZOrk1M}l&+TKd#ABd
ztx~JGH}Or#1Kgs+7NxO8=`@V3$e`)a(toV<AFtM`&0OP)m(&`yJGW;Z)sj5-9Jg6R
zv)K~g-+O5v?WY5DkPgvdIzmV37#$DU!y{XK%TwZ~u$OMPDFd3LFdZ(BD;p8wr5LfY
zqF7m3yi`SOO$>P{uf5ORxxn$_`*J<Pz7(IZch}y^20xyI#Y>qqjxBnf<{-$|MIu6C
z63Mo2XD{vK=sw2R{S^JoJ7y7GF^kO-`rIrv%gl1K!mKo_%xbg7E@{@%RkM!1Fzd|*
zx@I=gmvo)J;`QiFp5NcX0=&(u`$Aqt7x4<U6w9z2E3gu)cvW4)E7m$*0XASGHmN_U
z3+mVERW(M9RliZcRlidot8?o2_dWM<9`8R=zf`}%62AVN|Hsc$Kc40MZ`eGZEB)`*
z3d`>#Q7FcBVM&zYiX;JLcz!L13Y?dfQ3X}m^VLujweUC^p$U59MXsPyc*RY_Pz>XB
zcLYXqJ>{>yGw=piRWmV5p4WWtT)&lBc|X}BWM9cyb!!#q6kY`?`KyYqr`zgwy1nkG
zJL%3kNq5oH^b);PFV`#dO1;XBb`#xdZVk7lTg$EOPIBLHv)q~PEO)j)PwNkEwVHZc
ztCjE9s@|se>V0~@KBy1r!}^FmdS^eum|$EmK3F<fCRjH3Sg>5Myx*HUku&Nv2I{)^
zJi6a?O#RleHP7SNUB?IaI^1I4I_kL-?>^YdJdR+6JCDFJ9#16usve-*=x*%K=X4(w
zWM54~F}+x?LNt478{+jIeH5kjaeb0~ds?4HE&W^l32L*~qS4f?>ej}SZbP>rp5X{h
zLTh)1I~UKg7h}*l7|Y&E3RVnOM=z6Oa=32(`;IU4tx%~)WQWBw>HF*%1eOKXAZQ=6
zkD;jjrF|U{9Lsu$Vr%+v-vjkPRMju*myyU3oQ7&*Qw@&WHayNYox~Fyn-9@Wtm&vf
z)1To5eM8?sFV}W$^yVl<qmS6vm*Z6rsbb||x3Sw8L);`c2`{;$-O)(n=uO5@v3t0?
zz+HgRV*MDlzB<MR4+alnHe0`)EBoBcKON5eQa|wVJjz`3zbVM#S^rUHV{YB~Lyn>U
z%~cd)cqC_UW#zxaxE|H~)R2Aooof*+k?(E3^XjigNaap&{R)e#jCLH)CVb!1{Jy`$
zu?Z-U<5z^1|6dIg`QCYK&r0rf2M*u_*ITDK^8bxL;v%m3OC}Ye5|luds3tX_X4IN1
zj2_gNQn<d$;QC@b*AiJ=H)QkfX*KUDa=2zVL?`GZouV^zmd??6x<D7{D&4Rw%e4ww
zQC5tVU{$aZxqsifnrJTiBD#nUKv&UZ-V6GgVxJHlgdU=)=p{PNTIVZWMo(YW2=|(=
zcAR_FSFfb|g=h@gi^jTNipHUXXgoTKmgaiK*93GHEyLBWuVvlqqUEjiq7~d5q7|)8
zqLtjQMJu~siB`2XiY8hcM62-*%;M2CV>ZE4%oovyIRI^$$>_#Rv5zwc;W=ii{d49^
zc!4?2{*d{awUT$)m+?F-9^FM)JhsnZ@yPzlj6n-#tot`+99lBt(TZ6b&oC3vnpp<V
zGRwM`nB}ci%nI%mW<_f)vy%Hcv$A`cS=Cy@Ote-rtJyze)^fjLHncxrHnLAM7vAx!
z+_?MvE_a=?$Dslg!TA$U<){j0P<?7l%{hlUP*>_1$|6i*Z;fMr<%ss@R(&0SX`;#2
z7GLSIcgR;e&fD*+7vpUgjrDej#(6tM<GnqirM+FE3EpneGTvU%vfe(?3f=+Hirzud
zO5S17%H9#tMDM6*HB9j1=Pj2fXrjb#lEiPaA17<GA0cnE9~*Cj9~Ezf9~Ez<9~IB{
zc)aKPy0qteHo^0~T*h1HN5xz3$HUv`$HUv?$HUv=$HUv|N5b3YM?z*^&UMySQ2az!
zLTxl=%l!W%ib5U9s=9vmpq_7!{Q6e^)~kVjj>)Uhx6ak#7W%{Ar#Il8M<4tGzww`U
z)hDpbpDWFNv%~B(yUcF0$LuxxJnea&>p5OQuaH-mTl9a&?Ts_|HGYpjSkrk9p5#vE
zdGJ<U@6K`Ox;H&|<XK+8Q=aV=_kRhbU&ss;!#&5s<lURU&d96|nOOsJ-$&v5a(_)!
zxxLG$zr59I3I7{O)#omYiO=?CJMXY4w6jDqKV5_DQeI^zBKSW}C8vs$=u~%VI<=j;
zPJO3=)6i+`Jmq}i{L%Tsx$1oGTyZWtmz*2U*UmT2P0gEVZRvovoj*B$cK)KHbx;@5
zMYN-}E})C*2py@TbTR#*JK3wsF|KWR*v2uQF{Y4-)XEe$vCdbfx~XOAnkP(S^Q38I
z+M13g$#gd_m_DYTNj8Jb5Hr*aH<@OX8EalM6U`Je-OM!an)l56va{^ZIhkU|*l|u#
zr<7CCsq9pBsyQ{BT239Op7Xf#gwx1r<}`O&I&GbHPJ5?=)6wbVbas-QE>2gco73HS
z&gtPi@BG2J;C$*_)1EG<3+v*#gf6LLbSWLH<8(alTqb%YIlpTJZyL+k#x+4x&_tLh
z6KzVFil&;WY3i5;rjcoCTADVdgXwI#nVzP%>1zg<6f@YQnPDcwj5K4+I5WXaHq%U&
zIbnWmPX0eh19R^H1O!t7kN^b$00npj6aWAL7zKC*6aWANx&T=MCIA2e4+R1O0t5pB
z1K|Jy|4;zz{{R302><{90Cag!OaQ<D0RI05O8$BQkO#H_svrOXp8x;=00Z>}nE(I)
zAOH(^oYk0TbXB*q$0d!lXEXxabOW}}v9V3>z4zXG3t&p<q4!P#gb;cSAta=d5CVkW
z0-^WbtLeQ2LJb7&wv%^n?pp8D`}X!;TYE;*Sxf(|qn}12gaDEJsBA)tq$|SrWU}um
zPO6aN@0S1jrDP%5TK17$^+4H1wvzQ^ec42=kVRz;SwdEkQ{+@RO-`3H<V@XP&e8+q
zY*}0ulk4Rgxj`0|3I3Qofx-$WQi>1}DpH9wBCSX#!bL`rSwxATh!!y-R>X^JBD=^T
za*ABCfvheY%9gUWSR`_bd?LRnDoTpdqLpYP+KG;$v+gIli}yrN(MR+X{lx$=OpFub
z#YbX-_*hJojbv5XSiU0!=EVYna5w>_qSiE*KA}(PGnz+Vhyrw&4$%=hW+QEcjj};o
z(>At^Y!lneHnp4WCi|=1BAd#NvYYHKo69<~g%~2+%eJzESS(h_wZe!9xm9kIzsOCp
z2alB7<Sw~WT$bC#Br%yYi@c(j9;pY(&2ontAlLbmQAt*oC56JAn1{kdr06Yc%389F
zEGtXN(sH%jZEw;@xlDGJ6=X$GQ8bs$WL;TKme->&H;%wuI0}d1Zrp?Wa2JJ8s7X&L
zsU^KbEkp;gM63{N#5%D>Y!KVTX0cr?^Jh?}8RD0F#VCIsYWUU&=n4H{1WbU5@Fg77
z<4l^6vXLnw_eRZ&`aJ4oAYC9bP&rUL&@|9I&@#{}Fg&m_usv`ra4zsL@Fegi7#55P
z#s~8S3k6FA%LFS0+XQ<DX9iaV*9R{|o9Hyr8KQ&HG12kSd7=wM*NJWuJtlf?^!G6;
zCNw5>OuCp%F@c!uF*#$Z#k7riH;c*=mL)p2Z|sve5vSr(#D&GBjSG+aGVaH?{c(rl
zZp4fDQt@4~j?C3P*T6g(7G_!){o?H_{U*zsw{PDj|2u<X0rZ0*Fviz18NP<Ydc3bi
zM5c^<<7-(E5P|SOFi<T}?{6(_0;2+}13LpJ0~Z311J8mYnA+EpH&`H8JXp%t(mL2H
z*e|#sxb|-?>Hndnc67t&52C03ttFMOC1Xs~-&zu4IwWfe#wNtxiGBNDS{B9a{fCwT
zxe{{q^R;AH81%J>H^F2r|5&AZ!v9#$1J~aqy>Djy=YqVQ*S~Z9Z%g%Zx_?{U|5JOl
z-KB1qmI!gF@}&y5o?e=MxzxW~RwiyqTqDGl(aFDgoj5nKcd`|CIo$7`+$S+dVsv6u
zV&=r~#Iwo%QomRD#d8<KFFZ=}PX&_76d96AZ)~!T-Es`ZU@ZD$#3J|(F1Jxht(?y-
z@_SxMIWy&^l)FPxheZ4}ijdflgpl1K*FxTeQfRKwe4*t+6NCsI5jrY#Oz1e@8Xr0#
zbYkfK&}V=34}J0<ZK3x<AB1^f^p_WwHt7jV|F@Sq$xnJG+wuSWQehEcQUB$q56k11
z1;UE?WwEew$(8@V$)|koByp>g>>;bk=0305ib+0yHv6M*FV^@}+o%WYA!4!5troJb
z*rtby$+EH@ribehdZbUNTt0E~B=ghw1RaLMeg2HXU4PL>uus&KNd%%WN+nl`2x^hc
zq1H591jG=ZvvYmY&huIOh0nnPK4}jpvo^w~t<PFf!l!K`pSMkX);5!?MK7PXo0EuZ
zuZzC+Cg!90n4dluTI9iQ^ec9!E!cy$;d`_d`-);XL=?x-bR6HO6Ziq06e&b097#v<
z8+wc1T7lnLi3_d5A4P%)6K!#?4d8wojR$OuNG;mqLD2zk+YETe=EwWCpy-0X+Y<Q1
zmJ}I8H*?pd73oD+lD0Z&TZ@#f!KXzg(SuUk=9I>^ptQDS62Gam9ZhBJ2UNzsPgU&4
zRMk!tS;Ro9W+zc2`w7((!$q7JL9NU^YGb!jg55@K?RIKscZjUwL+WSG(Fl8kM$$C<
zJI%09X}WzPhN@nwJTFzfRRz^YRaBK!UmU6`t17CW>aVJ*YO1=bp$4d$s+Jn4YMUrk
zM-8^6)DTry)#HY$zPurCsRnAOYN&>(MyjzI&f#j78ljq~k*cY@DQ~N0s<~>RMyZx+
zw0cLiQtzt|)NIvSjZt&dAU?<E)hB$y?RERzKKuh;*$U(+g>8rxX$hXR@f5Hf>0P^r
zI@-O|$?l`hc0YBo2h>=sL`$(UEyMP-UbRu<@OumR&=xWm%w-DNPHvLfZnohd983rC
z2dh<rYD=E2jRk1|wxe}a$PU3Ov<9ovYMe%QaXQ_>Q#LoAwz(+U4yG78h|1XsRNj6>
zUF`|#W{*>KJDKX+Ic~E05SQ98)lQ99?bS!BgPMTV=x3ZkS160^OtIceinCoP-gc#N
z_P+X9O;nRaCpB43!RpwHcHmQLtfs1IZl;=!oz%OW0cX-xyl3;Oj%tSLWXGt^YNlGO
zeo{-+QngI|td^@4YNcAGR;x9<Q>|6&OoUo*o!X!_s$bM5wORdYBKbX=!;4c})K;}k
zZC5+gPPI$zR(sT5wNLHmS?Yi~s1B*a>WDh3j;Z77ggU8Cx#{Y(I-}02bLzahpf0LJ
zbxB=TSJYK?O<h+v)J=6u-Bx$hUEZqhsr!6bJx~wTZ|aeo<z}nL>UZ@-Jyp-tbM->K
zRDXCO>Xmw}{$vd!*yEHi5=OyjPR;4u4{i~k;xqnUIu6FdhcKRR@oo4BCirp1GWb}m
z@g8_-%yo0cTs7DH{dSW1)4cI_-6=2?ru`jtZ1*FO%`n{*g&9m7!fD)3FcW6MY?uR|
zz+Cv$OKZO2v*ug#omptUH$Qj}&1>&BbIZIki_DK^vH8g?F-y%dFRPc`%jxCy3i4a8
zuvgN{kJc;d758#G<%}c8E+vM#)GobP?p5?Exp0@!Wj3wck1omuT+l_k7?%Ydl8f~o
zd8NHFF3!cfY+e<ws#nd0deyxee1)%iFT4s~DzCD4(=B${T@IJi<#zeJ%-$XEo>$kU
z^~!q9T~@y4&_%j}m;u9GVOK;&xMHrPE93IIa<06q;3{KESJhQ>HC!!M$JKWYU1O8U
zHFGUoE0^HfyN<4l>+X8GKCZtT?1s6K;(>T*s=I0Cxp~1S#XWH!3-fgxi$CFE8qJxw
zI~Kxs#V)ZM$Iwh%EcW0bd?5DXYcgUVr4#$9usA>sXp}fegTx_m7?05VoR_O}1MbFS
z#1U~+92Y0VNpVV?7H7mcTU?wM7sN%8Xx|Z+#T9W)Tou>F4RKT47I(y5bCEx=t@wSO
z1K+?xnD3UjrLY)&fR*qCEb(Kj<?uQD1Pfp(d<8%2{JNMfpo{B*x`ZyIOX|Y9lrEx6
z>!P|0d=HCgr_IOf;9K~PO2G>3?MIr+;77B`yflB{hd5rQ;APTM4Lpj+@UD0%{*Wno
zEwAGBQeqMD8+H_r#P2vxJP}XDGhQj4ix>DOE};zKH5I|0)KL5>-qK(xq>>=DG}4nO
zNwReGr3{s+WNMj~PRVpKz0AOSWVp;IGs_6uS_bS;+Af3kmW;8NWEL4G<7HNvO=g!l
zWKNk|=AqMcM&{*hGMAlV!)>h1BQwcJo1PEyUVB@{>T<fK43YVCd0k6a(6x0%T}M~a
zb#-N3Pgl|PIU~;&uVj>XBcpi>AJ<iN16@rw)YWw(x7+Q}HFRUs+--8dx@~T!X<=Hz
zYPbq(;2M>*qr_vG2G+uLSO+&?J=`=;&3)Jaw_qdOhF{<gY=XP68ScTaa38k71K0`=
z%`@`=w!v>S6&}HMcnmw>ci0I}U>7`v-S7<dz;oCOFJK?M#GCvxZ-@Qx2ONM`a1dU@
zA@~yx!y7mPZ}Aqkp_Q0GtFQxYz^~{w9M!_Da~pX%@8A`@8;)tot9d`K;R96A4us=c
zx%KWB{*{mM2KyUtw2$}~`<OTJ5jdfNH}g?AsWqI^22N`a&d>oks}as=g7ezK1<i0#
zJ4n<i;F3-WmvsnS(V={Z_kn{HkP<>56v7}Cq=qz*7Scg_$N=Gx5i&t$h=53lf&c^|
z8e$*|#JV{U2l0><vO#vp0XZQT<c2(u7xF=VC;$ba5EO<YP!x(maVP;Lp%j$1e?S>1
z3+3!<`^LV7@=yUPvVuyCY@sqURDr5cjZ<(ahe36y!Kt7o)PmYj2kJsS4?TbT^4N1;
z3aAeayp+(;+%|VS;Yn!ZDGxjijXmRe&;*)7Gk3rQxQ879&7lQtru}r^rm)3K&{nk#
z>_|J_&T=#CX?xYaq!n(8i8e7N3-59pY-aNoTH0gq4z#j=LThLP2`r&41GIzo&;j0s
zj?f7@Ll@`@-Jm<X2R;0=UN7hkeW0&@PU;T>U?2>F!JOVdGYy4dFx<WG#;Ve8JZ8j9
zm>DB55~JKeH^EKBwzL*I(?;w<zhGC|gneii_M_d{pZ4GY+G}o@n>dj6;Vim_v*|j{
zp&R%K-Nd<c3%{m&xX2n@W>ewMHno2SNaMxWw79~H#WOY&p0(NVH(MAV*&_JZ7R6__
zG(NXw@P#dlFKsz|V=LiXTbYEdLTKv{*}7zHJz`s*vf6Hx&332k_C3mBdr(n3jEdRe
zRKbp=igp}TvL8}qFALSQQ>m7nMz!s9s$*wRT|1MS*tyiyeoD>kJZf$~Q(f#q>TVCw
zd-gE(ut%t;JxaaoN$PD+Q6GDT`r5P9-=3!d_5uyG7ioySOhfGz`p`b0S@s#tw$Evf
zePPpi@ix&ubd~IEEJ|NtG5Q*d(>GXxzQvOC9hRbnSem}aGV}wMrA1hde#G*$7%R|E
z_z|7O33LuWrt>(FF5o1(h?6N1r_d#wN|*7tjl&Z*BZb>Gl+h+oCfk-W+jbOT+f$_N
zKvDKxzQa%WE<fda{EYAObAG@tsJ-1q9qev?$S?Uf{(~R!D}Kzc`FH-4hS_WMfxSax
z?L8V}?{Ypa#09tr=jXy)kc(mstb?_%9@fOVSR3ne4X(|#xGvY^I`}Eh$ItK!oQI!t
zBW}h`xCJ-n=G>H9;!0eLt8qQ9!gaU?H*inx%e}cj_u_ushX>#}OvDR#8PDS-yogt9
zPus`#w*71`+m~`u9?DJmC>Q1BvHTH#$RG1Kp1|XIB7MxC@Mruff6jAxKF{MXID&&5
z#W5Vo(H!6`T%3z>eXhr?_#Ga~L+k+CpQrIu{*o7P8Lq(PxDuD;id>#6V^eI2&9N0W
z^G~NOur()e2X4n5xh=oT?YR?f#%;I-ci^wM9k=36{)WHj?|2b^%Rlf!{*kkCPR`D`
zIUDEV9Gr(saY?SqrMU{1;A+?y8(~9ifK5ylQ{5CZrA%e+!fm)Sx8|<+B`&~Ua3gLq
zWlU*PmPhb#9>fEA7!Sr9cpb0dRa3!~Gv#?E&)~^CiAV8hp3YNf3QeX-G?7Y}N~WSI
z$v^SeyqLe@B~*a&a~#KVyeVOdo0_JUscmYQI;O6vXX={<rlDzM3YdH*ziDF<WDQd=
zDeJ@+%tP}iIqy`?6iUuPl{bZDQ`t<`F>Upzq<GLgPRc`>C$fn7-Ly09^%*w$tUjmD
z>kIm#PSnTs34K!E)_25wIY)jX=gLpzJo%ZNFF%)G$OZCC`IY=yej~rt59})z>^LpV
z(_uQ5POa1Ew6>Z~r_<{UI$URzcVuUsNoUp(I#NgJfDY<t9b<NyU1qoJE!*iVYQ8xp
ze>TVEa&yX@F(=GfbJCnP=gfI?RK4e>$~|(Q+$;CXBl4&`C=bX(^03?`SIW9_huo@T
z<ysw|l&jO(bq?Le^frA=U(?U@Hv`N-Gsp}!Lrh1V(+o4i<!*Ub-ZP1|ytzchRaaVW
z=exCPuIi>fRo&G*^_l9aK389upUrZ!!mKo_%xY0CDPJdQi56y*8ExJ-9|-X;Li#t(
z0001ZoMT`h8f*u`Zia5wnG6ifUl|zwtz_T!FN}5N|Bo!J|35)^$ZA+;GJp90`QIv-
zD%Rydb)TW?nt(8gA&IR4sA@9PE07qFy^y(^=`M<V4)bIbH6_g5DC&^y+lAt)53IYu
z?wSJP0|1;eO=<vmoUK-AbJJE7mAoWQLY9(+7Ik^z#c66knUq2>U_y{AyWlR))=E%X
zDR$C*ftDG5gMZDHX=ms+ep=6cvP~dKJHwP=e9yZ&dUwAH8A_0`7x<wNt!Ku}R*S}V
z?gez&qSY`u6urHGGR64sf>AI!9l3AWHW?uqo~-u`)9@nKAybiv4jsxU(G~Q(O}UkO
z{Z(_)^E>|b{lJ#C)e8i*+ks7+p(Uuws2YYMNl9^+R-qc41g-J&HD*3<2Lev?VnLJb
zAc98lvq?tljMgJ73d7JMvmAz!jCODkh7M(wz&*KQ42SYwJD|LDX-v9sKO{49D5oU+
z65S-f?+SjB8s}fiM}CL0B^!EA^h6JLCu{j4!rBU=wiR!Ofei6<b0@$fi-Q_ib||lC
z+$;BuOq!Z89HlFfV(G?|**_$+1N)ROIW(>WJ2~Zbp5=^v!8g!m6fz~MYbOh;KR#u6
zzFV?K$(~RzCx0@%#Vo@G4-rSg@5z`8p)+MzoJ|rIoE&;d*`kc=sfnpmUZ-WeWmqpl
zJNnWYr330uO=kVTwxk`FY=@>*lF9hgjq480C=i99Gu~Z(9YDGvP4j6Rr)iuVn#DD9
zIwb-b=)f+`c#-Huf@Y93hvrmkH%M~bdbmu}2l9zSZ>ZK*(Ar6rmJR*9)}K|0G3)IG
z$?U90X6({znVS@?>n3OTXBt0bE};_HVmnAUd5G5Sp}cIiWJ|m@#8&#8UqSD)CPXAn
z_}_%~<x-tez{D`-C9>s_vC%h8Q`c%<8HthccLSQ0uJCCJO*tviZ?1@7{;#<?)0i<_
zw-+U6$IA4$Y+XQ_77*Kf*`Y<1m@Jo&XO`zwl4bd(N^&gUQc0fWd6kT@v{W+A@@<tA
zSiYl@36>uyQ6ckzLnRF!I#kx+kwfn)gQm-`;p2Po@m<_4;3G>LKC-+3A6ZKH$Z{Dz
zvMj<!mMid)<@@lF<tlt+sg$VcR&x~0&PBpQeIien1LLE(-ztinGC7!}i)iAeIHeLY
zu1a2G|H?osIkYw^kGVt_OG(~b^aHFR4)DXHnK}OWk`h<6zaN2T`p1o6!cH{KdSmHN
zga6exWHq^DE+V4Kh#wB0>@ONSt~zu@RnFBMTK_L9ny>@<Rg}b7DvF9|^6(;+cY3|1
zY+~92taYqKO!T^GE-t`+6<cNr1A_mWLK9y3pjVMX)Oxt<+Kb1clHNf%+zFPTi06HC
zD|ng_Sz$fRtYpuJF7LnswyD%?*}(L9uZ~j0dnjG@887Ne%6f4Zk279u0Y|)pUVSHq
zOIXaZff`C!Xdo^KZ3Xw8U__?dE{6d}?(=A<{IOecBS%!!PT;qlZn+n>Q1a`X0|8Bb
zWsn0|LuzhlH5D*CLNsKPjd8VVI%OQdAfv`^P!TnJ8`<N5Qm`+>l#dm0x^wjFn-=P%
z4jxoSavR?qc;F376Y=Ny)ewiJ+)z?fIBN|o=2}=uD&_(P@YYD(KC0e)nSCPXwxVkJ
z#7kX8*UCK@=4OGn$2llVg({$WqYfKpmzztX)hig1^tw8h26p&sv|{uB>OOX#_e)J;
zg&e839S(f-IT^$F8yvqa2MHL&F$%efkQdY8#Md2jIA5X5n8lAz(ci(&H5caT3h-S;
zS0P%QH6M8u4SdRmdHO_gJ5meqQ`N_w0r(8SWbnD_n_ANb(3&mg_yF6?VX(s-2D{8*
zu*aO+0ADbN!I#Wo5HN>9$Q%#g9&;GnXAXm}n8V-!a~c3&Gl#)9%wZ5Qhe6C77hs<`
z3_8qV&}9yT14Y+IX+GowZ2*0%(Ji3wbU)#+iNp7bZj9JJ@IkYG)QH(XX~fi@71c)6
zU-+P@ziPzP-!x+CLq#`7)JJ^K)ZaB?>K__0^|5+7k;@GKcyh~BIH2ru`^oT|;`{@X
zg-ve&0RRF2{{RnooV2|OT$5MUIGp<|Nl3`Pk%S~9AqfNmfslkH?2GI>vM7jvg1acL
zC~j!oZPnUpt<`E5wY4p@(|u7p(`9D5OgqzQXS%#?zqZqPr|Z~pDtY+seVzmYg0=te
z|NVX<PeO9Gd(OG%oO|xQEP~}=vG8l;QI>_}W~H$*Su9x=?n>5U3b~LF0kh4TMYvO}
zW|I&zn{2WaPvCFxl@%BzMlbyNS)Eo;m5|+C603K3oMu9@KAg}vyw0eSwAj>`NWMC}
zGs~%r(Mcq_7^O3dI)%S6lAMfpj@(VGQd)HqbIz<(Z*@kT)uLLk%H)cRNl1@z`J_sz
za^zZKjzk};QpM;c*~FQjyFFw)3uCcaEV2O7%wZ{5EPy8f8=HdzNRbUU;zAGyfD3>0
ze|SosLis=V`6HSr?hgOP9c+{O2$uOWCdX!I3T-tW|1<vo)yP2$b-y$c0)uc#>KwU`
zhMO1ySBN0HQ#{^K_`od06>_C3ISX?oD^>U-L3CI2t*)kdRlZ3`Go$5plQPM!(#r)T
zCkzXrV&rv|t|~8WzIB|KpS$@6TcXAq#|h(dNfxAS^k)`}{Vzxx$%;U<2>~YzaEw8E
zj0&R+{owb{5kv~9%cKU3j3oKreVk|29K!yMQ+{~{mf-(?d=T%y?L|@k<J9gGU?+8-
zTumN5K}Fw5saQDcNfwJZ3vuwET<t8D1u}=m-l)cmfk$^>^f`J!D}hmhU8q}I5q;tW
z^*UhHuB)=%d2;Z@{&ZvByn++=<ZpRyEyX@&Eu53KYzrkI=2NQZoLQbttB$6$?`d?;
zt<P8J@7po!$l?qnf54hE`W-1G&$8m-i(~^W_yhp)N<Gm?$Q=3&4C$gmuE&t<y&mE|
zad<`3wV`7pLml&<2H5eVUpMElWnyVc{lM&HPi-%)*#5+VobJXliv+|7>gKOlbP)*e
zy%z{CE$XOm<_T<0TgAaY4et2UZRMh<B$J4ygSv~RV+NFg5Qsp4SvdY)TK`?i9w-c(
zHv#(v;#|opQds-h2}x^hR9dw&w$vbDOW0zSL1B-puZTVH)qTysK(j;~{_33NT%WAS
z6O|GzlL)<1P8i3eu^M>&VJlt&#9h;~B0xF~$CSJciZ`64hOEgkHUS6Cm`o_8oRkEN
ze$K+k+vYz*T|43b2c|j!$Y<uiQat!vA9Wry^gTCNjQ!yhb@jP!@@V(-)YVgiZ{1pc
z?Ns@Jw;*gB!afCIi&@5?wlE+SMhQSD6ajo@w@ZS3yb=O~fLB7mCh8;5Z~_p|%!i0a
zPWZoi`Q^JI%s~X560e|eVuZ#<W5$lH!1keWLHZd7@$n%x4ub~$5OH8+AHLFG1vUIn
zCr*qhG>iTYb&kk{-?73MW0pMrT_b0rArqMa`}Ma3A!0*d)<ol_J_=ZD5Y>rE<{F^Y
z4)KP;7c?d_{2#2tD*VHj@Rh_hihsg?C;UG8Y#Y@3e5h~8>qroh(bk}1=`o~Pwgh}!
zu{>T0WFr%h`HQa{e3<(Bw+p*p0OAK54sKYO;1$HGBeI&;)vbGZcWK3eKWyr{tMp@;
z3VY1|L1hK4`DcLe;zD&|zP(A#7YSo5nyN!@Z@uNuw^ur1K!#GhG(bC<!^jyRy5Wxt
z{!ivy8o74q5>6rqh3)nCkw^VouuX_xjHQL&`6v7i&VqtR{>Wkud=(8o`a1ld*gkR%
zC&BzP2+--%5Y(kJgz(@0zV-tGM+jGf2<j{JGbTf@j)uuHLK48bOPAm)!0MpRfj`10
zedw4X8Yhk=_+wx!-Iuh}4&ZgJ7Q&Ah{SLbi!bhCYhHuLP-YfuNBG7J$3%f64<%3H)
zyD>I~DU{NT<h-6D%O&vb+84GJMe5QbB?@Uw{k9hT!WbW9B7_$OU!d^=Ss(*I%Aprk
z(O$y_5}+4HVg_qVtO+vkp*%k7jQ=CKMWKyXVCfIav~m%LlFAbjn=W3&EpS95HFEzQ
z5e8nEInv)u@<lu>O|9@Rr{x3j;h)oU1<Rs9g2z7}dFSHk)8x@>JVX!l1O$M8moR_l
zxKpwL{FFr@=a3QtjJ)$~#OaG*OC)vI>C;&3oE?$;nb;rvdtcsW<Ud21Axop90UVcE
zCNu}b5gGz`kXQC@2;0c$4jdT3jsqqeP%03AXjmZEP@Yf-F81zoI7Z1;iIIsaipM^8
zKocnd--fGrJf#495w6pq@gZ~yr+Q?w!+{UF9oIf1kMdL_`y*1cT6YBAtKx;|tBS@6
z-8AypG&X2HP_%BSx^q<q(a2>CJJ%(U3WZ!e6T=a3v5ZJnI~61F1<n!huDzy7QsV!i
z{l+mGCh{ASp!W~xfF~17fx%MMKhs$mFJmhO0=u=LapaZB*p}ArXm?9wl}drIdy$)P
zO@WxUrMA)U$<Lrakg;q*pB>^7g04GcrXfG0{r3rK1UXbdoEZ1wE1%n5T)h3cl|fJb
z<E2H5E&;)*Q$TQe@#4$WkEaIzbX#TRZGRdZeEYVFire0XW7#%(2;%<$#sNxJD%251
z?Nh9YkW&UN9L1n_hjQVd7(`|rpA5Z7!7*{)afCJ3*W^3gi0CLQ#GAU8)1)qXuDVN+
zp{smxc|T3?%Gc^@<WW&w9~VIq1_xd%uCd1<qHcMo1pi$J_4Rq0^5n#wdNm+AK-4fz
zf4XOxR>jDyee?%zJS{V4$XpbV5u7dD<Iw~?iYj+-3c$YaIlCq&XU*B31!vdh=B_<U
zo&h6g>Zw!vzkYD`><7Qze~PNdXZx$sTyVJZ&^v>J?;NhGI*fiFs^p#ccI|fPSOWsR
zW$m|PlMg-j5`A<$h2~yHhS1Dqfgp;uc&x2%Q)B$uhrak?=WBzxMYp`N^^1$xP<++W
zyj{oqL)e$ueP`x%-M=>9{}mIXj>FVW3)3|v)QjNU^<b&*$fML%2zL(kSGJXwADV>%
zdKHu*6I-(<X(1g50!vW4g4#xclhLWFYb&--QpecJ<we*Z0$Mg0(7J0o<!T_cPEyHv
zzqxyJB5O>BAJF`oL-~aijX6zYFep{3u!8z6jqwjY_%7b@kXuddmDpkrT?Du9{N0u;
z=d5jY7A^K!Y*|nC=B@tE{JL0-6`}B-BaeD}4$UebTu>@g#Lzx0Z}dAH*<W^Gei>6F
zwj$IM=!t-g*zS}-8gMvFA(A8%&MnOC%r|As?cdTrHzTKic*Wk&Yf`x?p}=VO6gGJa
z7nj9kv~SqFp*<s`_r67Ie_KX8EfSexO=e$BqOU47Hr`vmzPatb^+oe$&gP30QPwDh
zwXi)Sw=UHd>zTP_PWk?&dF90nt<+sKtu0g1dV|;%{3<5gU5DDFQ%12dJ3grV)x0&_
zvAR-_J4H~tj_9hpG0Tu=IPVji={yZa8b|@$Mq)GNyhtSy9mG%9c*IYq>CeI3mN)=E
zCklzd+(z`Hz+MDJ)H4^Ur$90DEvmKGug5;^1*cD+M&G?}^ji{6Kge<|%%soE0tw8c
z9>YFq-aFTIvFgyfgM;rLuDa-&yYHB9@sSq1d*tYbckgOyy6fEy@cCHFk;Rz^9(5lL
z&lQ+YIH946VLXgUzyt7^P=nOu_CK~<W;4jfqnAiJtSRseyuP;#p>0NlkVi+3_FlfT
zL&P^&<0As$OdbkzJZ)BD_OZ9t28m&aL_7xbXeo;o2Fzg6<V+U$pSs|G>Moecg2Mte
zJtrSxo7HIAB#&z3BLY)(e0;SD|52i2#>K#5ajrsmb_O0)F&N`q2RH*v#KXBt<zAp}
zC&NgRM^c9_P`RfxW)j431Z<8d4AelBsfdQ^FcF6g=YUv}p@AqAN6Y2W;%m>+)I@5t
z%;szj{<%blUTJ(rqYu84Ml!U?p)QO-+O#N^L?Hs31JJY;#!wdw%7~Gdlxi-unaiVg
z^HlQ3!M`ZmMTMLTR>MhdE>|gfnzE>bSWAS&|E5rdeS$qL6!<SG)L6Js;;)8yFo@?P
zh)2%EKiBb&y?x35<2j9<4~nIFK0i_dW`sql&tn<>-(nefn_BLF$DC;}WSTLDBoe}N
zLwGA8JR$PR928h1Edfa7SIS5JjJvMA!RO+RkuQh{vc_n*w(mr_I8s2YJ^?Aog?_A^
z;6VLPL*4-&OH2W6`IrI)ONsCgv|2;+_l}i%tTt?@|KTM`8b_u%v9d5*@4r}oX?4S3
zOG1?<k}HoXub-2i(Np2bJN(VV^E>jIa}!lkO&EBUFeDe)W6~`WS#)v~w!Ee~wQGNa
zf2~B_Zb`E#jCu14eamKgiK^A>jIl<Ukn!=k)H(bOn$G%3bOy`<J|=)^2u&PgW<u~k
ziG08qjnd{egp0}P=#L8UI5At8#FhUmWL3IUmqSKMBvbR17G!)<a)Gl7V6OKw<dw&Y
zV9kcy24+|h7^B_|m;fcfmYi)i>hW<$fuq5hddSGxQJGEN%=SV%=WPGOi<7!)(mG4+
zaO9roU3<{zxv;i&e~(YB_U|SVDi-7x&d#)ng%Wn6v9WVu%IfD+wKEs3$tYY==g2!0
zDio|CcUiRq&ECsMv$w?FSRGxuv=qEkQ$4?>X@1W7N0!IxT5f4^=%RID+{~B^tE{&#
zt0`4&E?QXZ>zkcHB(EMY+s*V~W2}9nKM;KKA}but=N3I+<|DI-&2a}AW|-l?v;pQr
zIZ3OE4%~Um#>Oq)oKp*$4|KVGz4y-R+T{x4T2~JLJJ0j_tIs@AU9!EjsbI@fEBjwR
zP*qkq+X@jt+o>P@0pCTCbUo?%@{B9l5Ta4^%vZ@33q{fHiqx_d6*hatl7ifNuSKd1
zPd3)iUFe;2dTl}Wy2n;7I-QN@^2617wYzJ7)9eFtT?VT`k{g?DlNN2iw4wK<Jy7Fl
z{BUkY_zQojj)Vs(n4*g0N><^!((Y$w-zsNpnO@AyzDm2jzC5<^&>~-esKjZg-#??2
zn={2+yOCS5{pmi2+??z9VdTd-&eqbg#hAyCFrx(@#*=|*2%jil6-<-p2l!_a&ppvy
zx2Yk1c)_BoUFpNBMR}RCeEJ-3M$&X#OdJEdRTq`qw!68YyD~$KFD<O~&f7oJ-;Zry
zxv4zYuOxe7<1N|s2}QT08IrE&ZNgZwlNYBJu4zh+G(`q@eiZWDd6PO5!jxn@w`T`Z
zd+S(`8Y--t)H8)m9>QdTTq^=OLWAZMwMT1^>I7i#Jt|{3H7wHUU7-T}CEX;jafV0k
z=1V}ML`JPN$-)hCDqJK7_b3EZ<OBgSw)7pl8_K1J)@9_CnJN?vBF8f=r3$irGpb+>
z3QdP*G|9NzW_KrUEnKs8y;$*(SgTHL%q&@2YVmsX?ueVyi#S_~vwi=Z+1qEvf@tdR
zS<XniUd|2UljU(qI|i`DGWiT;=KgGFt<Mx+IyWVAz$=c4_$39I)0MxmJ<U67Ro0a)
z{*yUbBB_WQ#@IJ4lWk1JOLAR27Zed5Dx&F)<tAK2h`uSvxQQ&f$3({!g>%P*=e~hW
zrQbJAR3AGt;8)^o8ck55`2UQv-!LvueSTq~Aw;56THN$LXz&@@2eA`6lY?T0^TbT(
zyWfFsT*$IO=_2c42g{!_DAvS)aR$v$f*X_jiuc`V%4^ST+U6ZvXyu7>?_bimzsuuW
zetLfE_7t4RcfbB@=e}9?>JsAqpR+CfmF@XkFAXfexW6Vl6-yc&ML1yyifUS3rly7S
z={c(r&RIP)Esn{w0P_^YxXo^t+of>frcjzd(P2bY&I6%T{p(*thp}(+Juf}mxqGIq
zx&)tnZI@+3ReR3B3j@nv*j<sG>hFF3eMm#?=#OyT+yV3RJSHRYj@N{N9#;gDlQFks
z<Jhd8Y+$t|fNT_idR0m`2eZvsS(|{1-DMqFWh=^U3DpaL+}An7n$`d0+K#gW#aVs#
z^~`%LN8UH*DPuTS+TFZD6)BLnKT&hPna`DM^ejEIEUqTolH9napk~ud2T_@{;jX8b
z9{Bv^%)I`g<!uiPlr}W(d_H$)s?@|Uj?r@L(OIHQ=lV2>k<Y|>b!c4SoXDkRNt*?V
z#6z6Jq?kvAyUh9RnVWByV$T?7FIetf@Yt5(-1Uzxopo1lj#TZRg(uec73a?_N|Y$W
zu?1P(WwEypQWg}4%-Hq%wuMjKQjxjx>|%Q)RN_QKG@RHNI$+Gn&`}slM@Skr6*0(2
zITKg@#;B9g5oTV>{D(FaO-Em{>qx!K79|f^2n<j>vI<3&DQy<KWY;TOuBSTJS0dya
zEDrTpFbPnl278daz=G+QO9IC^6Sx9ig7z@NfOma!xk7s~Y1ZcIf;0k4icKi<=%C~H
z6mJ!f3VBIK<1MXDd2<92;c3ck-7<2Lkx%0259~L{zrg$>Z!&Z=)lCtrC4``y5ZKZ9
zQ&v2&Ij*{<$$fnkXP<2^Us`NJG+|rD!@U4~buGu1Wpg+j|Gkq!yn=9%qiShx9VB@y
z3>>39tN_wp&T77aWNw-nw2W~*Lz4vh+RZUIOl1=Pxt>RQ3|b-xm8Utk;$}F;+b3{M
z>jJ4KpJt`}BF7Vz12H!xKj?LSdZ@xc+NY#<NvH<(1c(dJ#6Awk;X0Z^gnoTM8KSgf
zGMyMLhRAcWl01A}Bp4#J08L?1S~q@KGgQAw<+Rd6l*g8r*Eto_l0Ka{X<pb|Hn=e}
zw2%P{250!E<cnx+X(B%;%)k)MI;KV@d3(81b27c};T6_u9R~=MM#a!ctZSI64^WZX
zde`zS9<P<h#lWG%t`P$>j1zGH6x=XX0}upk4#A5(omwC{JWrt!-g3`j8u}1Io4V#H
z@<og82Z87?dFVg@b|_xjZXq7xMe<3O7FCeOxk1b5$P16N!cbtfiO|}T%tdo{$F2mU
zPBWu`Vad0Kuj2QIaU>fQ5&a+EA3(MJ{`0&JF}Hp34u%5aHZFgV%a;wx02j{x2>-(n
zznL`*{zFq#M#ll@{k!4&XgwxBxF$G0U6GSsgBwte*GZ%3eio@zAEQ#mMoB@b)BxX!
zMem^B2I)x3b^MTFV_&fwq*8-jHR<)wpG?CdE5O(NG+$4S^A&jiDE<D^A^gJerp^&Q
zINljI)~RVKnA7W;d}3WCGO#@Bm|g`#%O`X(Gku;lpq68LiS*@$+A@WDOd~4>Cc6pp
z?)^poaGimT;Yw<O&LEw{oc4q=H*^M58Ql=&o6`EHw8DU`BY!#*`uOx4(&j;=$!H5P
zSp)Bm)3-vYxpxwMuYB-Tag*?FWVAcOq+x~g3r&c`hG8meYJY#>d4-Ci1fnBAlirr!
z6G9_x!<-a2CdsVaU!ro-FimIJlchOfB%v6|$ELLPi8N0h>dDq0v<Hp_(r!X^NND%N
z#Im6MbA$o=Z}~O$f0JC3FC&Xq#vn_MQ6h`J-YNX|@=eL&rv1b(i-$EP6Jv->o+MU`
zy)O@W|7r9-<2%?-K>MlvmG*N3XL9p)C7Ig6IDdt?P3LhY`Uj-nzh1j<N}Yer_|Wn`
zOwY~E8~W<8WlIdTFSw`m(8j_g<wm!bgN2FIvdX;a9P_nzGZ$1kc)a$oFbtH`;O7If
zp$^l&bH=Y5`|F9j`4PX4;F}!iDL5FHDe|+A!Wc30`nXkfGgZDx5iAo2-nf1@O-PHv
z!0Bsr6GB@?H^Xd@?)saHZEu#5X-6Yv#p9dpWjD#(48+|3OgB8gj@$9rm*A3*qjks0
zy6+0`z-CyW$#?Y}@2NPDzwR;5lGv?#0EeOiq<HG@Se_RSer_i182k1eo}fID9&Cj0
zJvX7xlMqgy7(gP*59F^O@+^tjy7xwTz!X#k<ABlc$U>O+r_pQ4*A*QnM&uKym7(F5
z7!^cVmQxo?mkrq|30sTSY@y<Yry%!#VhDw#1w`ZRlM8=i;rqn;0mu-^sMA{lzG?J3
z&hwDYs$Y|n21y(*r%qsO8daS1`jc23(QTprmX#D4t5<MEJX9TB3)!4b1E=I8z_nzY
zX~s$5tSssf{yD*BiD2~HI@XyIs0@OX1i~f+!Q!q=Ar}E9Q(s`-W{=nFJYJ@x>kU?R
zl`8O!r#3aRchTZrU1}{@W1rEsU~zKl40G|4(&80W_9yHsO=(?wYiDFfnKIh@xAeDX
z<gR~g*|PhWdfRFpZn4oBRaT!ie_wsxibU|O-c#miUAnZ@QRdP6Kd>Zd_-r;uQ{^^g
z#HlsTJR&~N7$(ZAE?qY>K_YjkqAg+~OqtwNl)HXTT72nTcUg}?o}Z>nOtg#bduEre
zYe>*VqWUa#1b-LuFJ$?yug^~ClA%SAIceF%>v7@6#MQ<7?=<JNXEtv04ri}@WckKn
zUo2N8k=lKYIVH<VEylv~=9Jlo=6ij;r{{O>c87;qaWcnyX?V`=W_xuh_R>iHtfR}a
zOFa1kVWcV2UN+yi%9?JI<!^am{o-eLRTX7dS)d;7g9G+Hd6C{NFhxS|0yz_t^x-KM
zlrFNc(FYJ5jvDeD4I!aW6|LK%-Zz(QD!5qm)^MX_Re1O+i7|ZRw<md%(6D)7@_kb2
zK6w}rjWkSwk_AS8ggE~SA9YjH&QzMAwSerLlk*Yqp#_T}@S$VJhLHN>jRp1IdHZJi
zZ^f3c*i@G1k0-YG{{Hv9bhZco2g}IeK+i6OCYv0|mJIz>VNTR&945Kk<j`mm%?kX=
z2p_)!vNR5}TyCb{gTGNJl9frF0}n!YG87%jCKPmqnCu3fy5EE%fCx_p0=J|g(Zq<3
zcp?O)29fY{Y@n4F(KTVU9kA|zT$SQiQ2#L9i%~kv5RdG)le!%rrfJP&)m%?4>6#Rl
zj43ec&Y=KPK&-zB_sYhKhRk<A8RH@WaghK%9FCv8Z?3UG8;*xbBb9wCHL2O9@eLd6
zVut1~vZOoXRI>sMYt)Q1ujlWj5n=5u?e0LNvUFXy-k}$Hy7tY)cKFw?+!(HP7>O5y
z9}a#Q>gv<fVX&0u&o-fhH4tN6KhjY}OUk1>D3TJRNa{VvfF_h7{K~bLCd5oc&h<(F
zMxTLrk<4XNVFjgQ@fw%LG6m3pz5Xkp^EZrAK+cT=5Ax#l;lxE|j-qivdjCJ;!mm&Z
zron|Y4&jP}Mp6k8qkc3rB|xab-fOH<dur$j_3<J6yLm?bjFGRf_o^0X1w~kg{}Vdj
zIt0JF6Rk}VeazYvYgdqd@}C6BRLsy^8E78CLtTY1)M@NnWDOIf?wvh<Q>3zR=G^4!
zjg1MzJst5?KJ#!#Ti)_S{EDTguxZ6yZ*@w9tK-0I<dW9(8+@~T=xP1h8JT{;nC#w%
zxKVfOM1+k0OI885v9zw$6XNtBa=gRhi&IT>b`WP^Jm9?gKEux#%*pN7?&)yE)DFya
zR?scj;c?db#wk%UP1qGGfv9H@c61y)hSvTG4a6;@yVoaKw=7Wprx$Ut)MY~h`S}Aw
z%a#wL-^0s~96o%cytmA9J3*H2ytroVOFK(ScD}TB&BdLiBWquK{E637Iu5iv{u(`Y
zWuuQ1UZR8*1~IwE`>PW{0K6(>8JO;^4v7uu)@rb`XkppPs+g3Ll4a$6RWTV@TUH*T
zrhJ>nE6>#B-<DT|h^o3JwLoe#Hb3ZecO7WCqkU$or|Y(slXI~Rg)h(~nxabe5ib{B
z?niW5&9fqvh(0I>_7*4y9!tZj81GTy03?F3g=`SAD8@7;O;`jCZX;xy$<GYFM%0!R
z%c0Wu>@*eh6wc@=H0{D_2uH<&+|1@2hg1>nV%m^i^13hW>N>M3CuhwA^S8a=Q5Uza
z$gADkogr3_HzH9nuRY#!pd*EmDOiBokLX1*wCdNlW_f>5^y`+SH2926j}o&sw2wMV
z@CgpHt{hy|VOIZa6W4(P+Le>kHy)*g<vh5!39a7tqSad$QZ2L!^K9pSw5+_osy%-j
zT2bCtlbuTCkmZ&Tob>v!c`{D-^*ASD%(-_#5MkS(Yj`*W-S*O^yloe0bcNZJixa`3
z<Fd2(J3;=gTQ`?X93wgkbFL0qHy_GAvmm%UjRGzn9dHHL&9M)DejI#LIxDztUX)!K
zh_A5MAkK(Di~_TJwwb9ta)O&aJkGuIqB2whc7)Jla+YNz%7*9blmu??StS&0SBFP>
zYf}81@heI#;|KCbzr*EF2T^p%p1uVeo7}yO{ViNAvU<x?9K|lJqqMEFt<;g+vA=cU
zLq0oKDUrsc)n=wtrl=jIb2{ggI-Ik2%<Q@+9j{a>wJKGN+h9wv>WneI#>}EMjmd?c
z0y?nNCiqNtuT2*fn>8ypeNl}w+e_0(-9^*bI2DaI(RzJT#K+b3S532ju;rlV*YT9Q
zY^Il!In`c5Zm#nNtTN-lwy?FVHNR>+rfc+>+#oZ#hv@%c6w}>_39b9*wC!w;n<DR9
zFIGM*(nhAYWEU?fj?T^E%ff!`n1?sdFWxdYEwy!Z*7uVWL(~T2+nt?MpJ{fKccm8Z
zOy`QZtbmTtay$5cM@Rl|3iL*rb;$kyr<|c4dN^6XP7nW2#E*Q_=yyahd4W|tHlq_z
z`oz>)OF-cgW0FI$OcsXqbsy<SjLRv@iE~%CR=d+WcUI252dSY{8sjPR#1$oLQtLbG
zQyuwL`3`kzb56n1>bRl8&5x58e634ezL|N+PFIvI#gSMvzp`?DgJWF7axAGuE_-@i
zp1UgB<D21(%1tra>j&ybtoSEA=ho*jH7@Ktq#wFPS+G=sjfHefQRVHVmMzr<=^P-8
zh>|6gx+3W{S0bOTXw2rpz*?Q!l6&nE-WHDP9!xAc`W^N(nS~-9a$IkwF1~=5>4Cj}
za#2OdPf6G+4h(<-q)jfFptv;_`tfMGr)mSm>=U%m_!A)h=OF%A$d}7K3A<uy)y~;J
zfeK)w-Vdb&s^5O>@rOcad8n6qK15MK6)VU)SpsF6%3>KM)7nsgnyH#5@a2?X66SHr
zeng`&v2$Xqd={dx0UEDwzrk2`>Kt(=ox9aSa&M4F{}Sz!(ro<0K$@uzq@AY>vt7+y
zmA)kZPub28J4RiE0d}zG=oCCTmQKOBH%`H)U{eWF5t|biR+up$(%|@;>Ak(b#0Zf#
z<o{_piDS>*0C8}<^C2$ZRJwk{dgJs~@Zp#mPLdoIdjsp3x~v##G68xye}ej17wAC_
zEyVu<k=KiEk{Z7;p`k}`L*fgkVE9L-LQLk4YwUH>pLQ@9_8FCD^qeE4^?d2g>bdgQ
z@;%7}*maYNG^YZkCKtt@+(}EtPG=O1FlJ#73U9tVbzKGh7o;@FVgh=>z5w+&YdV{`
zNtv)O3{kvaJM!3rzjmBynzup!{|0^~xHo&ORW?vY^LQor8w;&GVcwaAb(?0!G1W^{
zrn4+5Y4&#QXX;!7WqH`w3_Nt61B90py7%8Y1z4BFHRZ_;nZ~e*$cDf)hXdfI>qwYX
zVubWSzVPoMJyY+Y!@s9GPg0$?DI-Y$!lhiUQ~(Heq>QOUDn<T2OOe@JWWn}|70lcO
z=VLa8{|9x)hM`TaIJ1imXQNYRP-6$$7{rVxdc~kZ)n_(FJ+)86`-ICQNgns}FvAY&
zsl5svc}c<xlkxvTs-=~34f!@-$|Xf%zatqMOxPo;M3pKr!e47*=qb)I7MQVHMRK{w
zzua74H0DPKh+}yDBjhzQu!jzvLW7TQqLX<Tx&Z#i^GY>$lnCSgFHa@E2Xs>B&nxBJ
z|8gZCgegR4sPifz*eBHTsRx8Aj0^rH6i|aYEyxi{s7QoI0dv^@Ks<6J1G>J>$W^KG
zFjD=G|My|q$ib(nwqq(S2}EMPPz*S1ofN<F^C$8Ma1eh+CG>B#CnVajjfi-FdS>uq
z2ou%b<m?F>>F{C!-~Ttv?kB^;u^9iy*thsuS+u}!-BT(si?NUQqP)5b&&Fnx=U9AH
zu?cS0^4!!;I`CmpyHD$mag~~>2VCn*JoV{%pH#{Xk4Q{PGg)(-T5I#I3)9l9E{jeq
zl(LCRT%t8A>@b4{-AM^1U%iXk#+N23qEvi&tS{D-?=fMPY@bvi5r@&|1>ipH6?*Ts
zVfwli8<lJh7xkh&o4rLdR@B7D*Q}UPUsqS(R9j1)jjLWcqqwgoF0Q7pc*e@=IKO{E
zS65F@SJwijhOrDUf$<vJbBlI1+R)iZB0wU8HZ$A*UEqs6l8v*&^1zyTI&REYF@#(=
z?_YgH{G<E`fkySnXPQNe_#&*DfoI3}fWMLVLU}qT$kP)l&avHpq0(&kl*Gxb2CG*~
zeb%(uQJkbnlgik9TX||;gT8o8bG%(|)2l@S8Jk#&2^Cs#RAgi%@YL$vrSa4=Jc-3@
zDJs&XC%_cSl_Zo11w2GgExreHvNyBB(b|seM*Gqbw-VReiX@#kFD=>R))*>W_8G3o
zsPtM_Qnm)iMd9_E2(?;P+tO01H?&0A%=sNT>7B)~)+noxhy9DTrDVwem*lCjb7|;u
zkYb|y9xv2@i)<c0Ocr5Q=j9e;=%dxLa1l4!zR2rr$hH`>+cGm6&15W>8!ilQsj6)h
zN`>Kx$>!*SuI#jq8L`%AM&>DyM+wcNdAv5HoOVkEIH*X9OwCL4m{L@mD%EUmRIS%O
zBRSHLQR|BHMUZl}tgfZGM5n_V{4!OFCBa<Kk)7UI601=G5yA&~#KIwuTvYiE^w^`6
zcd9KxOsNpuCDg`7x-+>ryVR$TH>&w!ZnPpLHC^jzEwq_(XQwCC`HbNb;!i5OLFV&T
zRu;n%3{O-WW!&hZo`RIN!q_NZQ>qRrDa(Q%0&Cdo==!vfS(|q$%pt4es7(i~1j>jQ
z=k_fF4xzN7dzQ(_P85dO(~PsI7H~fY7YS3W&GW-h?qb6}#H6&&s?nM@2(c^~<c?n2
zMdA!y@3q?4<N4<JdaoyRxtE(5??`Ys98bq&mYL=1)PkIXfk+3>;3<m}X@wEVrA?*D
zrkqw^#>})xyH&1=GTR&mZ&|!CLrt7<L|YvWt2u%CKq=(_lCPKQV&btFr;;5O5oODY
zi@-6VL@ppmRZ5aMH`$=FBx%jbLVmPPl`K&fInhUiOg+C2KZL2Eekjl>a8s;jzO64#
zipz~xZHkMFN>vXGkaKlrox3=WdJ>c*xFXfm9;DnDD-S=!`V7LsX-M#!-if<Y-W)h6
zQ0c{DokAc`=)}e(avLQE-<=ohlmdZLCzj}y0w)U_{Tlm_h9idABP+0~%w+5y_hguF
zNp0B)COv@(WLE7#fl@CCf;TxKc$O*Cq2U$s*oGL4H3`ue@5vCCHn6fwFZ(FaQYFNe
z4LlieenAIJB(D%gkXzXjQRKjYN+4!$;u}}qBUUN}_#v+Faya{+*uSWHHvewbOPcU-
z%@}Of+q67rX}mqa-t3nJ`~dtL9tUm29FRG)@0UI-Ck3h2qy?2rkp)Rf+2V-VNsY5N
z)mz*HF?LO&e4rwNP1YOZQ{r8Y?lv?WbCaCtS7NeSMeV@YYI+R`@u-BjaN?EGPa#b~
z8+F0=Wb_Kyb#q5h!GSBiE#G3vZ%a>~gMQCR-<X+`n?;_o6m@21bre}FMIBk0okbR^
z{A^uAL)}?=j}7)U=7jb_`<n?qbyBHaLG$*u61kgHr_HP4N7bg$t_J$l_{@lb3N1-!
zG_*&J(p6X!p{Joes#f(5_6S|~PJy_@5ZBaoZ})X|Z*Wkatjow2>0%<xo``_~+KDp=
zlX5jAM@`Bj<PA;nSvHA52NwHlzBa}L{hKi|G9oZ`U=PF@w3lGnn;oorzoO1hFhztB
zVy<3jPmm0h!U&U0cczNlC1iq~`Ypy5Nl{!6=YmJz7^IBX2-#B>sXT!i72`Jc@r7Xu
ztyyJ>wLr01wC)O*yWOBCMd9IcttHZ7v%<Hn>ZB5<r%6X9iFg8@AwsE^$&D#?YqmpU
zj!fe61R{Y&6`_&IO{s}d>2aFqz*!C^NYgg9C*+JRCY7K~L4n*T?dp&N-KL#kEhtIh
z32U{aDtFHwwOlC=<8kn(RLb%Kpce>IgnN|t&Z7Pqp%I58*yT{?#N+2RO%c3f;tDl~
z6IJfE=f$fA;^U&cYVxT6XO-O;qf04{1Eth&5|XuQu$rbdjMi)VJS%{kaY$20T#PB-
zSn<amJ!c-9Pm+92HwMQ5f`T?deXmK1h)C7|Azw(t(L!5vK{#=!CN&|thQT)dih0H-
z#^u^>p#m!-I56(!%*18k$p&^k$s;6{xLnZjK!=3W3gaS-L(E|-=8{K6BI;^Hyh0Hl
z0r&!8B=wUjR$dRngd+dXN?;Z0gd&}g`kNBb69M@$F=tjVK8YP@H?h%)a27Kd9L%&%
zC?S`UoH?XK(EI4w^+Ex;1ZR^o!{mKu@k7F}C*;CIVM4&a#tpl`lk#@ReqzR$18pV(
z!dC?2Y%e|`#c*K})Yn{@w5|QEWg-c_gvTbs$VG%K915^cE_w@mEaFi=Yjq;M5a0nB
z#zC97Ja%3M?qb4hnb~awmt{Xt)G{9bhpS*0*%=u@{jS5!)e1poC(7#xq!VZ9^YQ|F
zOl&xaH%19>pRdpezb4NrR6htr0E3^6XY()<$A>;E3-r3%z}H5T<nzr+wTOC^<Kro*
zZ%839(0l?DggqR9P3J4fps?Y82(^lZhlR!{@+?J(1V5-0@Uvnz4_7d-1GxuEI26<~
zqDcAXFC}Ip$47lCWCN*^NAuf8+=gAE&p>1ao7d4kUb=l9yA<e5C%FXEn;vL6huXn3
zodZ@q<mGL;r)W|~5%%`P=AqDLp%A>%pw2^?(dwFwQWEUa$M=8SAFgC?CZSq#$juxj
zA06}rV0O5ZL>VIbh45E};19sT7!YrNbN@Gxgz)v@;p+s(a1OK=AYx1IkV=n8*|b~}
zi49<syv!2NV@4mr#AIt9Dft{}l$xhgXQh#s72!N%MoXSj2xc&Pw~V-e{f6Ad($F!K
z*A<v?%qEUG*p5O)+rVOVVs4B%)8kYXW6LzoJR5vYBpvqn#Hv(-&ZKK{R;8ieEJlu8
z?0xoEOa_#NxyOMDF+~t8CRCXt!k0uO7Q{PdWO^c1CRO+{bpm`<?DMcUNp#WDxT?%(
zqs=HqkJa=e6Fbi(j$tp7{lPQYeqjed9@^zI*3gf3`D~or(Ep3A`V8J0wi0`j{liV-
zbwDgig$=>6DU=WkxEDfHqVsbl5V8_tU~g60&?}oVNX?|z%oz0&Z(@&-1$4{;bLCzv
z%YTV1SVjMB9ovmPz&;WD+d6bI8vDco`fmfoUhH1Rr_dEWSMVq!G$7#Cik{ra0ih`^
zE-uX^9Ei+aK<tex>F^rUAlor%MsG(+9D~0Lj_0!+37xOQ$%g^sfxp?{*8L}TORQOr
zmKnS6W^=dRVo8fp)Rb=8P0Q<5ViDF%e#GR$vXFWrl9QL7UYHo<)hKUqOl(PNR8(q7
zY)r8?s>_q;@OmAI9@1<tNY-kT3+%B4POa8i5F4MG8t+I=MezSb{(x0-YJVC2pA4=7
ztF0)-U`Q#lSqof-W{(rWcY4^TY<US9O+uc{mV<uh*v8=Fkp52W8;+NTAA4gA<GyTq
zUcjZVg&M`8+XY4=89B~Yl2)5E#uoSny1(%6q5FgQ|3>}^*Ksp$3O^ad|2JJyZnPyY
zS*J_Rvqa}6>FQD(@g7gSBL#d*eS|#cW#~ECYc1Ihwc3$wv1G<aM8s!W>|U?k;dX-~
z?+V$kD(O7@Sz-@fK>KQ0sJAwb`)%GU;W|a>?r@V4Jo=+hE1&teSZ_owTpSKvIPJ-m
zN?I3ALtnmzqY1#`jKLav!tg)BIiTUNFvbY}@n4Za-u|@29>vjI5ehz6sF?qupOX^L
zV<Pey8p<S#!$gz&<jC}pW=5tn68TCc+ko*nvMFKk;HT9Q@kW`<7$2dA-)7$lU&-a@
zRXl<f&)CEd)LmFB%stUrtJ5tUyTFAhmvlYz%BEOvy_bgj8Fdb;gkC%n!VTGdlZAOz
zV<l89YHUM|IxfRBd%R})PGF;qA;Xg>6O7kK8NOqwe(>e!Ni;{06XuBDs`#WxEkkoe
zQoABN%;YXlfm4J9ekY6AfeFczbl;{~<^q2|F{hW<0nl_YcCIcezS1iqgxz0t313OF
zuCdSwiNUjIli&+3lD5|vJcvvW=zeoAaD9%ipw_~vnIFN&?&k}B{#u2}Up|h%s4I(i
zl<7w5b?N#vuP2lEmPPk#1<&I|eX^*Mfljx*iBmZ-4wmeH1ONL?oz01xPt3TP(>ak0
z2*_VPGxr+<Es8XQ%+cgz{{5OLF11Jy!4FdksKsoP`Zlci5se)G(NrB5S8W;*&<CF5
ztOh8{9rP22KI<38YUl^~bYjP~H;JTcZ(gPS{?RjMuJKNv#&(=#u|m#U<pkCt;16>)
zFtIBz3;>-PK%ZM?rv0}KbyLD0Ieo?g2N@v~7={5<iZLp{!wIEUdv+u+!Z}MCMLnyF
zRakO#*x#?csSttpC>>8oB#|r*N9i(BN1|iJiiButnaL&~i91V_abhe9%j4@s^+(Zo
z%^2Os&S3NDbIhUnS(x)zY-Z+UF&N0x$7OI7W;b)pgV*iC?_N4IP*5;1wDhTE%)_#$
zj$eJawe{hv$Kk_;*=-lD9((EwP&N42yspQ#S7M-Y$75ad;1eJggYHMZ+P3W<7v_UY
zm%#iB|Jb(et4F%Q)3mHQp{$tm^#kYrp?xCgj6am)BWhsM1L>2bcwFSQ>f>MDdHK#S
zk5_GpGC8|XF2B6|RFBhSfRP(((;J8D+0?zDja`5EjZGNKrlShlk1R+h@e?B*Wcq?5
z?ch0`jqww3CMLfmA4L0iE%fmf?$8rxAWnr5rE*4eP6!^l=7t7_{4!eazgn}WJH2Mt
z<6T{k@2W}f-c#ehs*eWx=nCuX<Gndco*g-GVC2~)IlaecTPvbZcSV{%5zRgH+`@t9
z2C}o^e+!>GG*|SAIkJmO8rGbCeZ`UgJlfv==zor^c>VMm1Ic9tdMytVsG5w9$_hQ-
z8lC$_@0~*xwFwnMn73!3DS`eR?iD5G)+J{ws&U$j+ES8d6(@1Q+MG07NmfF5RAuAr
zg!+SvvkKRpp5vKQl^Y=ok6!4-!Xo0*jM(p@b6xtxjw9XeyPEB`s{VTFH^nNe(oy7e
z6(=YQw?4Ca!)yD>BcPjGVDW#JG$$rLGe!z&-b>v^2*?LmI{H*xrjCi^8VB62;QkND
zg-t9C)H6B3gIQ2#AIOedQiBfQaW$^W%Zy2DFS4!f&TP(z9DeiN&fD4(R&|&5Rok=s
zPIoo!at&Y2%5>H*&#hQgpx>wV%*^Ut<LEfPj14fLNN*n~SaHHEDQsUqqw((5g{c`-
zJng4?p-gqqPl+IfXm1eHpb04iYz}=05z~@qnNa1Cj-4|H47jaiK|$WK+JxlR9rgU`
zh1r_gn*4QbSzPe@;@-;G^1;Wt`p)-y>khrTx?yd(c_B7$)01n`TywV9)~xbjmIJ1;
zs%l$tb@nZPI=m>gb63r(XSNi!ocrO<S3u$)x|6Esr8M16=ZMrf!iZm^yKIFxvIr}N
z%58yh22xcPj;3eAsB2iXv2ZB5x^;1$l`D_d&Dy)TQlC_pmm(t#GW^QspZ@vxc~m2K
z=q#|j*Pkbhkn+1<r9OC};=)re%rR?_o>h<jh*RWgI1?0%p9^ebJV9vTebSbkF|$x%
zu{n#&<D6CVy%~#Yo#x^t;3%$A39@Qu*;`7z%`4WfX!ho<zp$wH(RJCs`AtG?R<x~d
z>nu~_tXZ}V@%3xUYBqLM7!`T#Tj~q@TfM~X5n`cO=&?m-X5^H$t+}JU=X`%b$)<<8
z&i!w;HZ89zIeBJIG|3a9^Q9Uf?F|HpEW{GD1kd!R#bp4+Sk;SO?8h67^>gMY*BxAz
z)6)WTDOpm-!H(spQ)BoNfgn1qE+e(ptBuNPN<DLC^Tw#mnV!6+3>!KyE;ijNwO1`K
zYV41arucFV?v64?o~KaEi-?R+#d`F{)L7N(S!K4oBrSbZ9Hh0DdV;Q<pw%%Yn&e5^
z(;x$&%YC%i1MU{hQ?vuZEf}eai%#h7Y$=F|E}WO!wlZ7ku<n*c3mpwbGY4lUR`0vm
zn|H8$d5jU;M^=QXjEUy>u4Vn(_LUaQDNK|{X6DVX<!{LHMm5CCVr(|Kx}be))2jF0
zdSfv+%qDMQ{GpUOON2u?>QOxF2{~Iaw780n6_&=iYuBp^hnCb2jI9pm<;CF_Ro2S7
zvR2eTJ`#=po#`3JKCLWajoDoqv^zG8a*$4IAatqBO>c0;0a9p%91A^v8bq=0x$V|_
z*t`?__MhMZ&oZWo95s`}sb?5FM*T0!)q#8i2pb)x{(~Kw^Az>X(Bss%Pq(!_4J3~b
z0qIk7=vW8!(R@wb59d16;f6#`*FK^2*>QAtA%hsp1c*U5bAgL){D5bxEkxJBhiOYs
z&Ntk$xS|plL>d+lxUc`|4fAjBbS7qH<oKL5K4WBBv#)SvjRPlkeR{Gfwz9Xl;ZR?_
zia4E^W0!*i_ssaRL>X<Zjyq3%^TPa`zEg9b%lAR&s_}J|K9{?sGCpVjr>Enpt-w;=
zSM6ynu%#?KvkZ;Vj?sT(3j7MH;mJ@LFawO)<Bp-clG=z^k0G-)I|{$zk1DT9mFeWX
zn9}YndVJ$Ye}eMAAD#1P3C<kB`Wzh-;R*Pdcfn8~;v&)#95EGz>5AWQ!*G(%y~@_A
z?f|>y@io!O=3*WUyW^^hQl((0GCQrm*s2oQOEbWql~#!~TJAq8RN?mkl|EL@r+tpt
zmY00(+l&-u|H4_~KFEhPgcdrUw$UfXqdICxivoNg?#oWIS7ayfe8<|$mRUJuvo&^T
z;i6f)5{9euHWaID5v~e%OQ+LeZ-}P;5fe?a{CBO`-qDPm^6M&@GoVq^{^t-U%DH)f
z6Vio1yHWh}oG<QPN_8Go=uj7egp*RApQ0f3a{LPQxqtMp%)-Ap-&pnZ@BTQ?pk@W_
zSq<&EkX|o`_DZ*s(k><tL`-SgfxV1uQ^3Np(RfW$!Lq9OLwlRHl`Snc$5gMX%xy@L
zJFI);(R^b@V#R@_xe=)?xs6T6v<in%FWzc1VQ0w7C~Is{ySHur{^*<*Z)$C}TdPV+
z&9xS9%1(`Hh*MaNdZ99>ZF{S;Yj%a&ys^RAFe6O~EKvoF%~wJCQB61##h<@SF;cfs
zF0troiPiYpi`qIeSKhy1C|=VuV^Oi?@SbMu(O)1lxx1|*!g63?<L-7>snKH0Y;Y}J
zx1XW4bo4550RJaFXCo@;2#3fBMnN>0MmEMw0huW508+1+)@LJeK&LwdFs>*fDn@P1
zcV#rE>$p4~PVL7dtgg&rTewCgl<TuntmNOqq-qJl!taPMrgbE*IlsEtDk#<&V(PcI
zIu;DvG3z1f>cy><Mj}iYwyxqV5MM6itK{L($83f=ErI@1Oh>UH`xin=Yaww?vg?-O
zeRsx|bZ4b?mc$KZ^*ykl{p`jPw54Fyk+dPeEy-uLFvM1^DCxd`Rd&JPOB>KGhWrdF
zEf^b~#=nF3?7`7f25{Oe%qjPJ5V}s~!Uj6`wZz_a@Qy>uxO@lrfh$r9zprS>+c30z
z$?&G4;(c%Kz~?8o@0<1bvzMRBTRXQvw7Wh`Cg!C+v#s~pon?iC&#ztc!r+X6-fw`s
zI$4v?|C~~N=(fs=(Bl<d?R%Q?>XT(iXDs1RXXZSxu_SxlP{^^dDYN=#bZn?k)v1zG
zb1lW2(ewpX#iSQT7O#9{u<NnGio$G2i)Qq{_#o5^Ev*-3<3zV8q0gBx;)6y5buq+4
zQm+{FxC1|9F!_H|Ugc#x<@_wHzEWjo^lj_tclf8!Uzq3^aU9_Ix#MtJuzFnhdA?i}
zR=(-}W|(PshfUdyo}`Y-B#Q($!Qd-<Wp7{h!FPA&x;ytbqZX;OmP}*p+>>j%f8TA4
zq-&SdIdVCar2wsLS%NtT8|uv1HDZBuh^{p#*&HUeSK-c%!(Fbp8Li3rB@f(t+uV~Y
zb83$KdGLX4?;NUfwQj3+2*l!!p5%_(+SdZ#lA~=^+vd0%+E3qEKKOV~|L<?D2IyRO
zP`&5*<t_IN&NCJ(5;?Am8*BG=`v97+Yav~|fqSlQkROhdCUN2J_CuX6SLdPj2gV)-
z-#uJiefZtM@rSj*)3v|3<v^Dg0B_fUmgfCk9)RxyWjkM5z2>D`N*TIJZ+U6W>X&ww
z0dSZek5P)c3x69X^)8sV1xI7Nxhiz_QmSOZ1u1|QRPnbtVx2O!G%rIvM2fh7AvLN^
zpz$}tNNcj$j0p_-d4sX%;2$or)v8U@v#)5f(>^YiMF>eapZUN+Lz<GR6RNORz;S(y
zhM$inv&uGVlRi}mZWF5f%~WoB3ZpXvP-Z)!%o4|RW;~On_vnqKvPhIrdB~b@g^)Y@
z*dLY;?R;Z*Q9n|pl=j^-hpPAX_yiIu8$<<_==MKu$>CDJ0ma<XjTe?+YM~;6PdO^q
zHoC(|)zAOnINR@BTC{A=%tWMCkd~&=@5qx-e~VD8DIJqoFhrJm5lNi!bHpcTHlhxS
zl2rJr(!2N9d76t;<?^)Rrj)w<-RYISO<^h#5hiumw2u6mXh%W3a#-moa70(<JG3^3
zG>j0d!tg7rMp?VpzIaQq#+errljqbF-}2(x-GH?!Or}>x&FvfT^&YG@#+LSE0|E78
zc28-nvHoDMZ=i2(lu|E4%TS=1*nnk_e@18U1GL!4!9jDuGOe7ql-K~8%{uB!Cbn!R
zw&HT~Z}4*(R>Ih4Ex)u7&<J74cuPQ?NMn}CO&XC%W0K3v8WF`4YocW`lUgKFn`E+R
zjhNWV;M*L0Q*PFZL|U_a(rXsoL(qu732Ml%AZ6dOSj0W_cr=bWK@BLO*T9q*$Cd!R
zS(w#^+!OF<ixzps7*`V`<0@4eP;x8v&%S7WBtN>Sq{7~#hz#8Ev4g&&OgG^kv9Wf9
zz(p<l>(-Q+&1I|WsDA*}wio&{=nLjz@e_XYF>C&uG+%43ks`1oY2EwlJMUTUBaa@X
zoPnC5azf2e>F>OR&l#^720p|7`}my_5*Pg`?A1G%kAZwT-WF1)$$!(eF9W1iVr27R
zat%E*Iy5ry%aw&|fY&G?W>D7fcwcE8vD_57^4dnTw(p=JD=j%z&&BKRBzmq;`>F4q
zOs5JpQJ|Ij5dMEfl)v!>AOp+4|9KSB1Y==tIK-7UUgx8?A_tBtg{~nBZ4I>r<Gl<Z
z2|d+?xnPPLzQvv;qi)w0y6=DTK2M>Rx?P%O-wMt}l_kabBB?od7+hk|Z759G|KtHj
zK@{i~r|9pb+9G{+XL*z*3XIq-{^i)M7CS{mS+FH3St6mwj%6COlqg<@_4)Ve;=%V?
zga5MKBNS(*K)UU4{??KYuyV%xh$hrRCT_YJFP|`TE&4=P&0lsddu&7gqPgCdTr)a|
z`PffQsoV&mBE4lxYt_aEM_ldd(wCphTu>GlQ@*sQW<_O^R4fl8WyR&5jvdvD&p1^1
z^<Cb!GwYZ;R2&|MwYVoYwJqOrk3PNLlT@1#Wr{Tk#i8{~Eh~6uRj`_h90!{dybvSj
z62XyJ<^FbIyzW-?Y?EOp;WN680{=O#HN{b>8!@P?<k1l_uGO7TsmK3EWgXKm`VKJN
zq_Mp27#=e5f-Y7{ZP)lx9=dq(c1N}WtP#cOPE%D$748zFL5~S+26WMve{W<gxEf*b
z4;N~LnI1Tg{CD(6;@?bP1**&PFj|;&z=&yp%t-wE5@i)8<~Pji%k`ue#Z(sOq*!@)
z9m#_E=0fU|Cwi<hS-+v}0@S6u>BVyl!Q=wkHWR0{&Fc_J*u1*c<>RLMJT%qK&{Sil
zL_f9dPEC{l4#r<_D`}d{)6x{Uv(6=9&z#b0#4uOcU78a4_~mvG-+28W#S5`xbv19`
zRz6P1Rfl5>0>H|x8XR7{WO!Q@7Ync6_Q=8ok8Z6A2UqFp|HKsm?AA5UY%M6*`plX`
z%ZK`NbNh#uV>{^L|D*+hpdN82)!w<6{VA7-nz7nD2kOCR%zblV%-(EfXtF`Dk2;{y
z#Ap6zwAsb=PB<Lu<OI8<$p6w4=x&k@i;Az600-9ybHHn+j0%Sgjsib2G5R3>U$xx7
zdPYffaWuADLicN<dm!7$dzf<o5DFcjUDSkjc>L$6!MSd`Cq7?J)d%mDxt&?0AU>Wu
zM=D?Ec3)c<xLKwuF0RUi=D!LE`z`t|GCEcRH&e@BH0Q3RKHt*2<~%j_u<O%P&CRDi
z-SyON_|S6ir#qhlMWCSXSX1M%l?51jYHT{zR{-$;#ar)wbJgm%?ry^$ei(1N`>oZh
z-n_dNe~^|v^!=YPy)BlY$7hs`{0utxYdbDsf4F=n<IkZ_7$pI8<ALvS13fVkW9T<Y
zF6D&Zq>|t_kr$z7fxveezcD*--<OQ>O+pa7AP9K85~A<&ioZU8qBr|e^_l-XNMFmi
zSZ~JS=iap(yi3J(u6HWqv6Dgn!x;+R=@=y2DB%qKm%M~EUBYHF*ZMF-)5vMMx%-%P
zrb+ywAMQR#`PIKO-=54i!#cE8=<n#b@kVpI+bF?roqBGky0F$MO_aEH!hZ*I4<Wk>
z!Z!g99WP0Uzpz*nVhZhacwN&*6c?unC!jY#a!DKgj`)hXualnN81rYUJoKfn0S5sY
zV_XFKLsj$FM~?&S>G>T)BgclWHC2R*B@#<n<NVythX!lI{0{8x@Vc!J&6_<?pCT2@
z*u;<Z9g8keKiqpS^~1$QE9Tb;M5d%DQ2`|IQ14^?xi+T_b*>|Ng7@Yk`?&GFxf~cr
z1&F)x&AIa)+FBQmz2#2`s~vo(^Tzk*B8PQo?Q>fSm<x2F>_>m#F#8b_uD^?qIn`sl
zB#PM>Urna>JczF0d$4B#^V|OsfBxAo_8k8Hd~56Z?+@?!;_Q4r_4=ht*WJN~4c_*{
zh4!Gsytru2L*F0tZ-%3_3C>?5P!IZPJ&2(-Ke)_9AKZ_eHyuZfRn?97Gt}qI+_k0-
ze0cG)HZeY4NxcR`rh{OmuV&`v27CUNXV-!caSZsQ^IOw=bMnk16t*BNA~uRDf)NtG
z$s#V8yP<gYkwqEI_@MRZqk%gy$L{GHk9h+3lA(R2_Xc&ay?snGe}9QuPN=91+!<8F
zG41p(Bu4JOn?f;{c65~76zHkULKzwgWYEG-5IDA^_m3C$b$Tx4?)&s)5M-?0ghOw!
zjB<jvI@cvB;{06*A{;{xq<Psd%&~4GbM}-1Uo(yM9svt4g6FCHsZH2^@WT%e{>-e|
zqZ)c9d733cS+FJKtQ9>b6XKk)OUcJqt-KccMuVA0jvhKRV?|Y*wQSje`M0$@iHP!!
zmAUgy_4*1o4=<ZPw6!dK%O4Mcg*-gMu=>S^&cEcCIZ!j})-E@(B&@jqp~cP$uWrWH
zCztg;xuvM!_~^4ILHO_12@JChb_~@pMt{UdY5$vZ-TIMi!Vw68LS0aiQ1K3PWG}3U
zOPRSW!`oRFZz^7j+fz-#z?p3`1|D6|dtsH&F>^zevoXhNtJ%;1o-}AS#Le7XU%9He
zK&Qx=y{@uwU`{Hr5~gp`XrDK&pkdkmS;+j0H(i)tyK8BKA;Oba>rQMgwD(17p#MW>
z^6ZDXF%N1&d_a;Y#8!`m+h*_emv~FN`jp9azQ0|LFZ1Z-&dM~hZO6<QsiPvjZy=+4
zcNMjMV{1)xMtlVI2+pD|sU6wYNO!Dytu?nP*;t(C7RlFjmM$rcMkgIH=K|^B<5<3h
z>nYPPb{oEA<WTS|B>FSNw{*V6gfVXVQ{X$|TWSD(?q^yrRMctWVfdwBz6Eu`GBMjq
z&cdZI+rnp1FY=-j(+v1*oodO*Ln_U3qq#6AEy2XYwrs_|JpSDi12H63r_sS=>o2k>
z@Nq=``j>(F;s`pLfu$ZDWs4vlZ*Xs$bu87wC#PDnu~aKiieWM>wrGRXCH!sD?D-GR
zbCjrlD{?ve0Z)_Xw7ON))x8>f_<PDMd*j0m4RP;<$7%LbS5<DSGf$(B0vVN5DtI-<
zO8quU4^GE>gyD%6uvM#~UNV}&Z>Z7&kfYL41D3>ap(mb}pJ((3JdRl#l#MsjbH?kU
zV|_t^D>JXlu`1F|ubjPiPLeFXC}r-loW%z!ljgNI7?Z=5(pX<(wztt2wQ<wRmENYT
zD6O~F>#IwP76>Ffe4i)JQ98$^&-0~-b(>p@daLYGTY7A+#9%dOoq4vh*{e}2pWYJ_
z5fK@|69>;>7{z~p^8JMz3;$t=z{8|GO2s$I7Z0Q7Fz^q)Nse|aVvoubRC1Hh-!0bR
zSNzp7he~D?Vn@Zgi8vx@9~gSY^4NINgNFTEn4sB1{Wl^7i68JbI8$W5O>A2-JltOG
zz%MH!k)#CzZyePMhXaib{u3Mn8V3u;)+EHCWa4k8Do=;kNDB#ah<Yj9nO`?+uCpP<
zRFt3Pvhc7S_=1bnm%r^Vh|u;%6!iZVDjluc5Ei=@!U_+aCqpiCMLu>C0txZ4r^>BS
zxoR`sdvC#kCTmjL?q+J`R7kgKlk#lQ+0IDnIQSyDerZO*%DTksDWO&d?UDEize?AH
z1NSyF%e3Q{DTnO9Bz`)@VN)l$8i`z@<x<B;?x_Q^XaVr4q!JbI2%=^9)e$asDzZ@T
zze6OIim*lc8Ik@u_*IF@|6PL19gm44#6dssK9s?vyT<YNhbhhQF!%zEJNSUI;#a7}
zOuZCC-(g#6xtXVx+gScb3{N4j6%6p<DP=T{j+PBRb}m?OeV1MVf$1NU<xJW$191M`
z`}Q8^1L0k}b{`jllu0LrftOD{^w7yQcbz?Z7kGX0QDNi0@qOCojpcZZJn-^>3#DTU
z{5|F~!8=g#_o)6Msvm!j{?L-0G%N)iS1G}w?G8<%6LYh`4hQTrX@WO9+GWzkr;DjK
zPg31z$Fg4_<#J_wyvkc-70S7t*0_<kn6*M{i6y$!O3S7O<~B)mUZFyJvV*mB2_8t$
zyi-=w#m&1~6BAo^wcOpZ6F$t|)eKH=e06VG+1^(-J~;NUj!5s^J+pC7R~qRjun{t?
zYwygNyF1efHol##-1+RvmCxQ%Nm7r3YO?Yc^lE1%32qO_5Y8J1p?t2-)rf;=emIVX
z{}yICfI4;%U&_n_@O!lEug}%+_o?$b)l%wwKr5*a#=pzptbqbq%dBAsay2lXtKn;h
zw*EioJBKq?Jh+5b>I)`G%C<gGMg5_qK1!$ouLZ}R{3K`(<LMUp$<GfDgS+8BX6raZ
zFpZd|nSG4egFZ!`#y$qA{`q$1+ml&l*oHO*eJ0UJ+mvovn}T^7_BmrsH5q@Ut;yN8
zyM^kfo&(=Z?QRzB4%iUlOF_fe(lhy#7+eziN^Gg8Dn+A&7W>z~E;!H_z;O=$XlQC2
zSE!X>A9JoJ?HlmH0G?^FjAKAPA&BApwBVtPeQ>_*g+3r|!h9Rre;Y{nKyZGYk$q<2
z%As}Hg=<gGS^B%YL^!Wn)9Q1xdn%o5DhhlgKE5Nh(qj<`#aw(#c46h7mwGo`+Fn#v
zlOfSX>*DMCt2Z3HPZg=+^XdH!fx9ddC#*}3=W|osW?4-yOL{6(^A}boa=}Mb6x&(Z
zlbu_iW|6A+&g<^9EaLMay144T;tkdP_3@AhNyem0E$RC^$=4tqe7eISbZ_~@5Zz{`
zJurT4@9y1u;ScpnSmCOBIv1W_o13@(T+h5yeTAGW!^0cV(TJ}<@%U@ta?gXSvxELH
zXU(}qR2~$48C`RSV_Htfv{u@(0xQByd<KPpPt4)4d(Wj+Cd$|LfUI+skru6-|B)mq
zaRabMXH+cA*T=RTn2$w*xkgvEp|%yg4^8oWm{={Q{tPGk0iT?gGGk_ZN>7c8UYmQ5
zdK~|MnS1ZRxQeT9c;}WaT5WII)%MjEl`YzpcD3qS_1>E;tILus%W@I!y%%uD6$}_K
zw!!pbT8L>OB%vgbKzI@$BtU>9hCnFRUcEE-?n<(3^74G&_s0je_ujep&YU@OX6DSy
zIluE6d5IqP8P7~P#<53?>8=C8`{+Zv*6dGj%G9qx*pm-G{`kY7o4Os3D{B1Ytq-Z5
zp9kkW`m<M;9KX3L6kbSF?*8J7-OQYZVp^w>;{Q6QrPEy+orGM9_QEedpPJJKsc!)P
zJSd``xxO4P*adXdN4qGB9y3OX-Pj|MJ#X4Q!>gQO0GEXfguwp942yV3CU;aWEGk-9
z>5$8Y#Fh-=Gg(r|W0rgCf_i<h&MP;2LP=<Q3dPI7M#&7?4rMA&HiOXtb5w$T@m3YD
zLn2u*IIu!2ndcy0;>V|$bds{h#xjYnz>DZ2zr!A3Q}jCaI(f{X>cp;HCm4#@jZ#N}
z$E4_AxUgSg@)S6v3{Uq?ehJXt6Ekbm*0&b4eTL6+Y5;u%o5x-W{}RbEvok(wz#s24
z%gE#57o9DwbJNo1wzfF2>>u9NxX@D<{S>}UuMxk*?c_O@9a-GUruqRP0v5Y%8c@t)
zw$FB_s5ex$4`$cy=*@5z*O&PS>FQV_si>jUW6rE~=Co#8W7WdLG86I=VG7l_Ofpif
zOLM4PO)D#_7B%Mh{ifq*oP}AzlJ?x>l2na8L9e=U`)nd<esn-OSCJQ@YuT&y7JO<{
zBRDDxT<YKfT00;kr}p%r#XU3WfOLtBjmcFT=cNT(=g%o1@v-<c)nj+>CM8@|USWaH
z5brB<>XW&0IsU~AV&YLI!~wp*QMI_dZedLzJv-^%irZ_j1xex0r6oy*RA;g;*O8Fx
z*6>7PC=(;pmtY?23)DwcjPrah9$=dpp_p3wZ05oSj4>GF**FJJD=6^mT?Vl_wZ!=q
zCzi(%viS+AStd~IcZZaApWfNiHODqN$=V6?-i-f|Wd;GX-wZNYYV4mdeI1mY6?A&0
zkVzL}|3toPFnt)(f;<amHRjmthFUbc6=1&bdvX!{9_9<%!~!x2IxaNG#4x&F_TrC&
z3i5l}4$g%ZowQj5rbIvIlk{;_d43Vj)mUTX1_57&KVEw4iJLOaF*>fXV|a0z!i3^j
z4dIVLmFRnzYd$NM_&0rS3-iTR!!$F<rpwC)9y%Sqi*1DImdLyC8<35@L3_{C^PmW@
zX<GDXF=e;;>62afGckh}z5>w#*rlgV><w6WI-YUv6fH0hY#iochWWGT+&zqc7i$xE
z0zZw;jIBzx2;k{5l^*%ia^N!KoRFu={Qmn)6;F6d2><(3mB`nEZ7Q%$%TH8MSJZq#
z9L!@a%;R;K2l9bb;ON*{#;nqD6!{Xo&Sbz9aN(a*C`(MIqSl}+02wP|ld@PqqMQ*Q
zAU)XoFfTI*(R7A@gXRw`1N)XvFQn58Q96x>c?K_r^8ydbWMqFJ3;atE&{bmXv8l!?
zg~d$1Yc$jEK1SUM^2spmFXxk39^12r41afq>5~_!bD)rZ#$lc!aP*6N_MmqrKBhjL
z_#10>d9-gby{Ij$GN#62?UlNWSn`tD_=DYy+$~t^uvlyayEE#aw+{T1l45r<d)JR*
z0{ks(U-a3dxN+hGY~N=3*+xu2K0N(wBkBF&wdk_~>La{)axQ(=qcEl8%@beTy>cZ(
z+ncNp@F(zBP@kARz`dE(zoV*p$3Rxrz>eyw9sOBYWA#pSx3jt$-odA+Pl0E_aqQFU
zeLtp3OxGJS9C2}u41+#BQ3Z$0=$#)qQu^WdbEx;gdu$P!Gh}k93W-zHrU;4@8~bK-
zSS%LRRt^{F^##L~wIZ>2coe(g_te724W<~+vcLTGlhvy}{pc^_sWB$~;}m_)mIw2E
z2Ih(8$283DqP?vnOBuTh^9TG=U>Y6f5^Mo?I%lqcO>pVF!Qsb6Dv5wh9skQmpRQW{
z$zT7n%tHz!aiYi3Di*LFr{2eGu-%dGtb|^cAtMI_fl_r&8Bgs8i{q8#&hLMtm6vez
zC2~XtE0=m7+#mVIM9+tePreD<PwkIao`WBP#nk&HaxL2zFE63nrU;f32fxWjmUOgn
zII~Yg*MzopWR`@?B!IM<bY{zN$|}+V{->r*C>1Ib113`-Q3)^GYUHt6fBl-qM6py{
z5(<^TpTx#B^?q$ExpSZ;W2mp!Yb{8#@^}ep1y*lw-%v(tzf@l5ZW=F6>w^#T>PPDG
zy}iBtX~pABu3EX2rZog<RbE3YZMB>Qrm2ePdGxLpbF|64h;%|sIZcd?FTW1qeBCtR
zSg<}1QrCy5aM#JD{jE{b6L>spl=PMXsl3*ONbm3M_2$>nw64Lsus@K0L6HssvUss0
zE~eAlS|R|~1aKH~10;VcM4^J-;mV_fW1}r8><=jyq*}hXjpXt*lKWEbv)SZU*@an&
z5;SW_2uo!@Unwy;UVce#77LXzeU<$xfbnAoV0xUyg3>K8oe$Ibu^7gz7nV~e2r2nI
zgKIBiBi(~B7=)$c=!^=^_W{)O*seH7db%TyTH#13zN418slB5(#evVEx+lI>sc;^+
zJ=@>`8V>kWrJ~|E8sITx&nN>$@}*@LvVkcI){+*?>lbOlc7a{9O9Q*ErGQ!iFs5WG
zPNf2$G9_be*P#ZDr2~^&@YUo!aK4%ov4y8?HBl&*+1R^m&I||2*+9Ejf%D)cqg!(W
zZhcxwZIh!QfSH9Vkv&kA=Be^)Q)}lB&#z6bY4YZHd-ioqp%Z5{<@sv;T5rSf=x~F#
zWu7<B)3Kwa@3u_r_rB6#x<OOvPRMZCEEc)G9DI)8an(r~23ydb><W~2<kWAlS$m78
z!H6wdwKLb|4Ed5$d?oYpYu6^&hAJ~h>O8p&Hgm~jfb>Srh%J##wCF<6M0(%5mHPbF
zp))t+<=t>*2u~teKLp5M{t&?D<qYqwZ@Fn81Ld(5yGRfb3=L+#blQC0M-ZDOYR<<R
zAxFx8pRJMa1Y4J37iA*wbb5-)qoIn0a_mE9E?5ap5lWodZ@S92pFQQ=k6kG!2m7tX
z^Yhc@ceNxiHv<Le1{-KDDO_BaVzir@O5uew;(rfV8}Q>mL)&aZd8SV^ZEhd|8ZjBK
zkJpi6@;LS9lSYfhcoLY=yba&S2I+I*dGx$J4^-1Kf@}vjKwX_r`%6S)^q@fAX4^~z
ztiW`jbrpwgpLS4FA*BpW_Gth5qXi?Ln*OxKj}(G$F6a^z2RgqwRCj!Jg}Z5KQBG!h
z|GxIx&7A>a%p~R*Qj1;Q`k-EH@!P;HHWvqzOGg15gPza0y|bXN$kI?ueJWHQoIBzl
zJUp*t-GU~4&4HToja>m>(^$5WYu9AB^u}Pd(~=)5vQhJj4wcK4%l^~@>ohbeVY|s%
zmWb5}>lBSqz*u~+r|qnmbSblY=~o)Sl)*|a0qZ#hH*+;s4q>pnE7#5Og$fLLSzgI*
zIi^c9q_!2>+fM#&_4d#19~gP^hkeKX-YnO1Gz+PJ-FH9r`}fub`ft4N7YjQcymd==
zdd|qfrm8++aAz&DO)uE^vvq~@ow%QuH-Bq!S*zUJQXsDC^2;*j?`z%t#-8H&kN)St
zd1~_hwvaEDCk>S~EP5TJ{A~2q2M!Dd9W~2teqv<d6WgmQtLsV<%lk8%FYIYk$e~s;
zF!>c*L!M<Nu}WCokPH6V5NflWr4UoB(-nuDa1jBy9^Owa*a#v|6q_Bqd%X9KWqC!b
z@97;q8g!9jzR=*U&MaMAmy}#JoSRmXo;;D4*1hfYQv(A}pWfb;me#fX^wR?aPo3V@
zoi>nCziiLxwzfNOTGrs~yZ6(rZKwAvt4{%c1hM&{@}kve`v=agDlE(>V8_BizzLUh
z)vFqk#VRc|@bsPVdzkN?PY?7zeVVz3WwhV5Z@kgzY#iTrSNrzQ9~f{oF5h>CMNHKn
z?R%x8ok(!)9s(1`WJU#%n}KWw1CS)(1v&K|xy)G^*s`U4OLJ0E%eJ}eZvleYbzo|C
zZIx*<u}d0vzRjAGtfDS}UnN%!<zx=mx~QMyYp?u#7VYg!jmVB`>&ox|_5bPm#juR5
zOjZkv1)?XLuzE^nKu1V0$noc=)zdOIN0wZgwq?tOyB92wsQG`r*(7?Er`FWo0+RoC
zmHlgdl{F(lO1%Nju3O!?HIA>BQxB_wOCY39{XeTQ9H;PdvVgYpN}#oIG_G5$2ulq?
z4#8@wB4;u(bS8tgB-_BpkFI-+`1>gLiCBZwAh^gITObkf&j~nO!MPZbggib>slg}1
z;RnHJ1@(|t3u-H<Ls%VGK)o5S*2V$1fXl2&Ho}!gI(debM&nQabVRD_k_VfGp$~i$
zBjL$)j(CU1kyDc6(56>=gTod*Ddfh)nVd$C+mTb6<IwoZJ!x|dc+w)?MY<kOa2E}u
zdaz>%R1vY5bW37I0=q%2Q>bit-o%o0eX=Ek!;{D*9*fSPl-mmYrd+qqq)SD0t)d=)
zb*(Oo)>Wt$YSod-Vyt%Dj{S{1&)}<Ei*|AK=-KXVTV7neqRr=PTTxuRyv@5_?=MeE
zD);N7zr;}C@>Z|6b$MavhE|`i^@akNYA~Ru6#;`GP=U(a%KCsHh;CSBfYAU$K)k<G
zW|jdW?qVE!1SrrRU?AaC0Tr#ZusJHwXUVO1yBl*75^@^d?)qE{R&p$5Ff%xie4_oR
z-fYqxpL;ZAC^I-e<yiYs1H3<m-R`PKuh+ZW4Y?LeZUZGh#=LkeWhfY&pL~4IG5SU3
z!-15e%)G0b{E`@iI#oGZcQRXB(?cnnL#urzIE`w7in*rUqKPS_X0#KW?z5%QK+dW|
z@~)enSXj8Ur@@lTkq9N$-0sSQmyDPtUQLkz{`Wh$LSLYL?x4RRJK3m?<;8L<OW)W#
z{?x7(@!sw5`3`)``d{s<(s)Wzig*H>%l69815%ybp%Cju84}%VuPKaHqk_#X8CY6-
z=yzM@i}Yf7q8!#k4C|pL22uQOrXI>`tAVz$XVwCnRSVP}0gHH-tZmx^BdaeIJNa6%
zI5E39YtI7)@K3#x3gVE&(>f(}GX9<&C4Ge{5}`8I6?$>o$bB0c#M{>afUn11>^V7_
zSyhzAm#Piwo3>k|dQ*ZZUTBf&_U$)0OhRFLeS7xe+xr`ZS|M7`<E-9EDWPQ#(l(Ga
z(`RgvBQ`^1S;_!M&4?VKk}(UVJbG^ejgK709}yb}^%q;L`7No11zov%b9SA3QQ3`)
zi?f&AGZG85ijZj4FUtJfIHAl_+EbKJvSXwmxaju57!a=v35JemCCfF!#9(#mF1E8|
zUWT_U-73ZovK`r#iJnrwLu^r{HLU5Fb82NJ=K-1S!`Pn62ENedad9!3BCTa(Px+pO
z#l(J@{v|;}R!FZl8@aGg?3q-+KJhV&OZN#Hc0^@GYbmBuvnvv56r5>EY)RF4jeW-|
z@JjZR3u7^jG9>P}Wl3IW{gW%;ouW|Our=Mq6$xXF&b*|wyrwLhm@g&q)$Cy3uI4)~
zsbWiMQa^~P-TL^_v8Q*}6A#OEf9L0?=JNTHxHwLjO&BckJPwp24>~7fuoYzV3Vd2g
zv_-W<W+8847JbMP2yNdZ3<inCW7KW;FS>J4&FaqLxH64XE=x=+bmn#C8^J{=`fGz;
zZKe*po3GGHC$i0X9^DJr?V1EYcHX_F)Lt|v%_SgI@h*!zsb*0T^?jLC|L@9CC&{T2
z#;b(OV$8l`7ckNNHj%m=e~7%Fj#LN*1ujjQn00ov97O^`@2VrIF)6UFHbL3SGb35f
z`ut>W`^luY6>(quQD<;9<frhIpb%$;ZSxOzIXi=z%#I@L4H3^;e)h#ny*ia9b6(Nu
zO{lz7nlFrvTQq_LeJYLqpRxmvSh{0B18LN~pqaY&Vde+k4j$H+xIiJ4abq<=&NZoT
z#+J+<9;99ZS%bs#afezSe$||*3xqH~vO12I$tK!qn}tZ33QPLTGG`+AVaI@w`UMD5
zzqo^X8Dzr0B5MCGU1H2fQWck@l>CM7HLk(<{XKmjebm>}kJVV@)K*)DRvWZ}H3|#V
zL9!+<v&+c~EFPR0%UEsGRwi(bbPZ(hHTovhxo0E)aHfsi;B(?lUVPl9E1&YT@~z+w
zJ~!apG`D_pM{0W4wz|4C$u2^`=c}#3WKVsj5%yWQR5ZonKcx5WY;4@wn;!kWY4u2Y
zbGFf#-JCwMnp_hr{b8#>jIZWp2QmYFyXqTu^##(C3OGEeLTWDP%Fga8FspSj;m_-K
z_6LLgJL~Fp^=D-C@2Xp|!xHMu%IYkzY)AUnYb+M`PPlGTz!pxYJym@Y%Pi{<I6i_X
zq;Ptg4WAuT5#h>QINz%>2q&J$@bi5dwHVLEaP0n;fq|B`{{GhTmCbH<^UCt_RV{9J
z%PMLd+ZtYr43ot&BB1ujCvft(Kz`*H8lMv1zo@robhM{;QTP*Y>&nuSRcP8>RZ_aL
z)w^L6qsOE}!kcJ(8$_=K_c0hyXvh%3TY83<S?Dz`!Vt^@KADAH+A%1PKE~Gy`{TC-
z--4$Fq}8^&;1Qjg&HG1Fy+A2q<E7u0vR%5m=7U-_oBQj6Pthx<%Gk;Jx~6ZNYIP>E
z9A8X51%6qni>ID4B?hVXSh-dL=1{j<4d5P_07@!!S}<R4Mo_~x9d#>1_kzi<iJOSw
z>tnvnMj0Y*YTAEkboA2x#zyA1>EW!t4TVJ;da|;5HWU?Z=*z-fJKj22U48Ja9XsAS
zR9$`OtsRT+81j0D?pQo_$53kO&>gTZ*<is{L?<hD%KirqXl?+ostXwQkGNz>HaJdn
zUOA1Ys@&>xGD2Ak2O7A}Zif@p|G;?_0~-i*Uq6|M|BSxh_&pQ<C4+Dh^Wgm^9lFnh
z&v(N<i-FDWqWhl7FY&L*5_rFb{yudw1Amf!zV&r<zYsqEkgS3C+xY0dbTWWnfV{!L
z_D>M60+3hWC-VwaZ+)o0|G}+QRa+nIM}D>sxf_;-LQ5K5uEr&y(9#As=Gyo6zS2_o
z&%WQI-{0@MmRGxBonL{xLT48WbSgW=EuRE`C5(eK9J{P?3;p28o~>KAVy83#-5Cif
zs{w`y8^ZNKF<l{#Jm?e-?T4j<X@H*S-p2HCI)_AtaYyx*iFM#Pe^aKxkWuT&YRR$l
zxiUE^VE4rqjvnc5f_>js)E%UrOKG*-Zq@V*fVoMv^-b<%sFqrS6?VA<V3Mls{h8jm
z>nn2>_RdZDI))$dr%c3Ois(jDVf(H&B~+@Wz+^B>`fO_L>tYKQ9PVzqX@16vk<IIK
zmfYSq|Ikp8s?n6l7p8>f<Yf1k*e$gi<`ph!a9N<rn%SJqP%k90ZxKzN_O+FZj@nFj
zZ>rcmoR`|Rsysm?QaLJuW@|xvTIQTw(;Cc>)tZ@Bn;vh@sC1yp(0wHq%9j|*7l|zL
z0ByHsqFwpX>|<uy1UthfDJ5R6mfv$Ed|qP4h1h}HfD99Aa*W|M9dZ?QA83k~*WgVP
zk0XA}hx~X5${^a;^j~Gv07nPaH0}?LWGrJQd(hb1IdF0~y=>!!fvg3cwT4uoQ{`D(
zSu|FgY%3ovO<j<&U>MtMNuYAE`O2)}{mnz?Ru-u2zW5TUKxFo&)GaN^?kToPBnE6j
zyUu~?HV?}FW!N`lv}M&SJ9?bK(YopsH#)tVN)}ZmCRGmQm5x;<+A9`7RtVio3+oRq
z$}d`T@8IB>8}e&fK()+kIl9JGH<A+?F1LGX`_uAA>zvqcl}U1=C4KNnPsbfAiV9Yp
zA8vbf33x_hV9qCD|NIQ{2JI6n<kN15G@=y#nK=AEF>cKk%qG-I!mTO;(cWT9xbnEt
zL?mfaWE#x^q|c&0|9jY{QJ*cnwq~*!Jr<?QW;*-(XKc(t#$)k${iQZ%Wv@TIr_yOF
z>CX+eX6xgFZMnH~g7Nz7w(YAo<==2;U+?J~3O217910E{YHvR@oH?}0TG$aN>dDpV
za(jvb9fek+&XQB_bhRLd-WHd$KF1RNI^oRb_Pu?6f8XBr&1Vwqw~kh9><R?BHdc(@
zirS|ejzurSu}4Cq1zc4Nv?!mc4@7!0%`QwFnqOjdl=KF3A?<s<PBnSA)mH2r%n99a
zXK(kZu^d%$zJq#0<TM@yze_3a^yYMjERN#tz}g*$a{Zokgk#WpbV)(>q7$9L(FF^G
zRI^;m%o|@4PtkrC^jLTm<P7a|am{%6)ZAmg936e-*qk}XUKt(z<*~UJvj(<TR&GNl
zbK5E_w-01tzkY`L$D?g+j{?~<&j9&jZEcTHUp#Zy`#ZC;cD{etU4KTue`e8fORy^P
z7RGLlnLm*I8$E+Of?*%=<F#sDIygbz@<Tt-uJWi~=EVR$KOYP*e#P~0t`<PrF>v7D
zG*<cKWkNyU9}Ls;2z=fH=W+}jlA`;{$;<ek==;O(q5DkuoI~H={2Dz^KtcOE{r!<Y
zBi>{~-c<dscvDq><8z~np1rZI?#5>qjXrl{{gZ)tt3#pH9f3dx`kfc}sl2%h(((i3
zjbv)Rm|_l`Fn$O_T?(HRXp}NC1KfLH=gyt@n<>us_#_d_sRm1a_yYC2PFOz;q<?zO
zpnLnwf%vL9gEppqPiLMe5=+3Zf}NoRM{%b=&{67%iA}W56V|Ue)iL+fc*xT*l1*)Q
zG}z9W;}_=091`%G%#np-d3jyA24k?sZBdcp-lOx={ey=)>vpYOo=vUi3m`o$uzlhn
zJ)xNvFW66>H0+y&b!%?xn0sO@*HX|Cyz!>W%@_KXo?cw0uGR+y0(;SLedUr$o4#S+
z;*L%AR(sJrzkeR2U0}Bo3Pev@_s+(mk-7|N!UJ3SPK{*+p~`9$#KvoD%DkyH-R{ip
z62~TB3w31Vc4X@#H9`IakdL*rFZh3%FaAgn;s4+(Wb%h^32&9_2r2gD8H~hgHMz!c
zaK2bc?EtG(lDYV;6ZBc}V#o^&=IOe2zL;TyKWn~Nu()&aeao_H_dGM2H$Ko}LfaVL
zvYx`ql`SrN?ebdx4LOUKVfVO$R4%?YE;N2>-qMR(O4LbyeU-*wGr$S6x^Q7tl2mTO
zPSw~@I3yM%h6qM5p%rrWtihQGia6o>1uol0Y>q%H4$CDP@_3y&MRcW6V<k?hlVtId
zRrH)X4D;dBeZ_a3{VAB=kBw{~-d;XjP&QWONUj>r3oWck0=Fw|lECij`U8s!O4i>$
zG<X(HddazV>P~^ja2Nh{(MW~OT{AyWI9ipMT(yAW>e4hRF8}cHzRtT=mlUl&KbSi<
zG8~||G8HpU<V-5DE-=Z$!5Mh3r_&Zp>M=h+_Ad9Z@JLz(Oe?3~JIlf%X(jO6B0B9H
z3q;Zq;Cp@GTbOo!>f0vxUXV_^cdCpAm{w1x-8c1ZEBuy8yD;@_9el5fF5~{GZyVuz
zd34$XlarCOw#l`SmX$1=cz)`=MXXB9#kv=!y)d0N`ESex2$=TbR9YT&H;BVJVcMHh
z<pyAym`?lcB!$voJLXJ&hjn2e{xsbf>q@Q|2nPGmK4xDqI8c$iMQKOq#a4yN=F{oY
z?JBUa`^LFW=iD2+;S2<SZ|bfc%!!N38LX{gexVEw!h(I+dr{rkCy5Sq0obp6)bJs4
zAx|O};PyW+Y;JA_7gO3fIL;+9eimL$>lbD4`%*}=W5zg#_I)Dumh>n$rS*ttpmHr#
z-~d1NPu}9}6nBO&Mx!Ye?H)vdpHXkQGtRA8p_ErA3$(HCc^CM70Z)=tNW?B!p!Zk1
z9mTns`n%aotkz=4uR>UM#*8tIqx|s!ZJH?i98O9>Q>w2a%eZ`dQt@0*uqh{56j0i^
zq*&)P8{9^*#9rWTEzR_Jg0V454JJs3nyk)O<k;x6t`0N>b?VeIcN~u=i81IEa)U#m
zPu2=sL3Wxq&Fzp22-Kcvj_t<Yg{yI7VVRy5z?q>7ZF)q8F0h0B6?jP)+qjT=O(w@<
zK<gU7|I*>1o+#jp9(+(78w77rUfQ1cJ1hwEN`iHrF=pAWb{m==v68_zDXw5!mOinp
zKeKqD)h3X~YRoQUyvM362x<KBwYgx};&>Un8e<H?<w;kuHO=Ceilt()In9z4;&YW?
z#E(!!kiF!0SRE`|#CWJpBWKE$vg>HI%(fq>*LyAUqAa7&A}#jGljPcByS*|i!CKUn
znKdtDX}!QrP%W7&w|KO9B?^ltKC==Wic3)`HJY@#fNxI7ZY}Bz4ln&wK;soQK|*RE
z4U((IN<TAHVl^C+`jj1K=mQ#wf;!8WVeb|Tl>G2ZA}y9+(a2)avKRLC@31N;FCvx!
z#pJVI6&_u76>ilm9o9BOg#|Uaxd;FnK|SZ@#3#lJ(=&p8p*E>ElxHoR7ets9d7&Y5
zPLtQylx<F%8}gZ)y4YBq)8q?bHi_0M_vPgH<W{YOx}t2)_ta+S^>Brl->!6xCzYn@
z^=YL^!3Kn@1?!v->E+YN-ZPNAW!D+gBe5pl%nxQ46{lwx?iA^TaY4PKGRu+xXVr}M
zJhRtzjAv1dV?<7Faayo2M7<<8ON0V#dUa|_W4_Il(~@3sL&1Bo5*9#P8`xSnH}P03
z`;@)h)3Ov@74DU~jMeD|CE1}fvY0)A@5n{u?JNs;5Zg#wNuFh?vFFgZjnnY(@SQIB
zPF3Wc4Uu<L^gH+BG8VHxIKaA}NFesoz7&z&NMt}wBv3;Ks0HB20dNfKpc=saJHWkE
zGxN<6tONfF`zUGycLeX4xC{Ge2mNd_>pg-)w4wa0JYeU601v2m06$BeqE2>!e(Ihs
z&<<L=sdJ$BPoR%F*$w(ZdpC6tokpEPGSkm`maq^Tqgc|Y3^41|NiyrcAAfG50QAnb
zOrCuYsRU<cS)7I&uQde5SVzDU_*eK%5t~D_QyZ-*UEACp;P*RFeUGx9#{W&MXVBB(
zD;x{*aG?MCI6ejTLKoOac~@*&LH!$4by3aWv!$Dseu=YR*)cJ(<CPs>ez}9$&w2o?
z$Nzx8#EPf)_PsQ&__PZ{Bo>hDN78Yr&hN7D;>=5O(gp{*oce&<%+pzxhSG=nyHftk
zGkgxhky`3@nH(m8LLEEmOEo2$sQU#lb&1CXuZ59RN5sbDH0v|`9-@`jpBOtW5@Cje
zbY_HjUhdRroN{nUE}po8lVUmc^B6J77V$rd(TF#KgB9Sw28lZ2lm8*i>tmP~J-*QA
zcvjfSY<4TcyT(7BxFSXwIn_Qpl_wWtFIP~DHi|VdAMr(OzWlE-YRLwMcLS_CC@&Ag
zwh|#Mb0{r}X;B`)e>M@qe?|=-q(;Ea2mi1G`)nsN9oz|4QahRNpJdhH&k_6K_sYok
z*VgPwoIUXaFsVH8@u^Diq((aN1J0IeV0J&}iC_g|-sEe=tHGKIuxhnf%ct}GCCvBr
ztMZ+$r3*0C{3Xg4{grCKlgiZic#n!I)ktB!zo?+Lp{(AF5wS@T?{$<v!?(jA3%?Be
zA4%IXA+NT}N5ffo2OKR-JLom;KiO*X3@eu2orw&$P)#5sd+aLY1TziGt|wF`(pk9n
z!O@Y2H<jVfPvn;G{>8dmzna_QS##o<#TTf*zqnxG3qW{!=?k~5ZggT-8t}osb8Ab=
zH$5;YxZL%~?xq!MN{UCT97|pV{NpEq;N>N0UE6MZya(|hAL{)=@;sy^f-=dW{X%F1
zA#zGHX3M8=tyNJ7M`T(Rlf7cFM!N9fO{JM(BB|aU>#rSHwX-6-JySdH{N+PHX7wi|
zlokY42jiL-@2V;oDzh64%%rLF^n2@*2A6LsE-Vd~a%KDluRL^UBrCbB$KUtRv5j7#
zM!5LM9Gf|>JtLufb5BP4su%Yfcp@%rsYNV`Y{GA+^}*V!cPu!1+~lQAE2nT8X0Bsq
z;c(~TgeoD=t<}2o5)yI)KDF8x$PHhdx=cXMCt6P)b~JZMv)9|aBsXJjRe?@dP}LF0
zUEJdJwk*yKbTBD%!TvaRna2aQAALHU(u>pe(cfq~CQfZzTUE8T-DA$GN=mBAGQ-sm
zyl+d5-ZQe^Jo#@Tg**%Em&@oCGpd6}6*}zdW15H($LK!b>(KJ<QhAIur!}i-bGy@&
z-MqkFQPbj^b9g9Nap+HnTMi6mR_%Ib@z4nm2KKB;F3m_1@TL3>fwA*TosIeS+|ip`
z3+9(tiKpU|w8DxTU)}gB^}xS(1V@f_EqnEFOIve7Nb~Zq<Z5{=iu=W;PUHV%chcH<
z^hg?ycr@XRnFWK@0X~im^=+)OROn-Hp4_O;YRyUDZiZ=_Dw#ByQIpx4W91U>%|F=b
zjFnWz3fNeD=Dg6A;`s-=oC0wbOaSpvPeOeRYF)(J><7_Wm`9(3M8M!>(}8P=x5Ixp
z^25E_L{O{Jk~i}OB+2K3he)lA{owa?*ilnrP${AYOd)f8Ku4A`F;+{cbEGMPF%z{z
zgsLfNdio;8zxXuq9?AOt9J>|$J&xY5pw1EBN7k!o{J1(M0P+3A0G1Pe0Y7=Ap3BFU
zhj;V2!~-NNoRt>NI$j{u#o`zi7U+Zp%-+{7LQj6h5;9R^8T4Ns19b!|$pb!oDfNR;
z#^FeX)C6GZgj|IP+)wqdrTW1wYq4iBwJyt`&(eiI4qwg>84HY<Wa8I&8lKLKOAA>=
zoH@j^tT;Gh0_2PVB8R(BVYJhSn<B6f%gmAUB-Dp)yLT*$RQ~W;)|l6t3QSV2EEn61
zW#!2erPN1mJ)3(cm#y_sA4nbYd?x?ptWr)t@f?bY1XT+gy_1V{GB^Svn0|l&!}0*9
zKm0N(0vO_w<gkn%J|mS`i@oyXIO=`6kWJy2^W+XG(8bxr99RlRY>NX1x){KEcv4R$
zvSVqSCUjg4BA~?6-uQ40K_;RMsK0o0Z0>3Fy^1C?56i)Sn=9wRtUY!gEcpvko;Bt}
zC4VU8$#b!6rXG(_=gDN)rfOP8LQ5uq$WNc?<*y=>!_P+u)kn$^!R4h%k|_Tq`~sGh
zBj+LtU^&^O{D&{H>2iQk#+B1$cqYFlYe_j>4~ZQ?DyPx(+oL=~iy^YMO{-+<%abOC
zmg2{f8Xa*#Gc}|!!5YdZ-oeZoaJazhXiAzGUWOk{DmUPSQr8y65%`+CkICQ4L8630
zHLxul35pzpa!27T$orN~3?-H8*-C92o&<nNLk*dOagN5ML6l*W!&^Wt)R-~c(WX-p
zxS>3Wp`FEov>O@PNje-&q<sVEfZWDJf~cMNJ<1UrGiRz3n<7=9%fcNK?}BKK__3uE
z!?0?eLU2f9j?g{{X{Yn|NmQtL<uun-(YPDP@bjh!YtZ*YkW_Wh42~hz;C8wq3qz@p
zGx*VEF!u_`8KBa(NBRJg(WKcj8j*h<(=lK{|4nAE{L^4%x<vTJXor!R#Dw&}2(l)D
z=_^=nv=hnn!kNNN*Zm<Vdnr)96A^v1=s}Lo6mH&3v8Ty50PLSpNtD7Y*&-<K@6+<0
zi)AuB0rl57J1w1g)cL4%N+HQBqCEggW)2*yUS>K7-Tkj@H`r;BWiZO$Cc3d8`3&;2
zp2kEJfvH^tW&(O!-{p4}CM!ceNvq#sa>(^@QVxpfy;~J8GrQtbOXUq)Id-+m!i(YY
zxG>+>$uF@2jt-3*vWS1`wb{O|?+eWBDoq!)q`Q*sa+6w)GG%|RiZArLGlkj19KBqn
z<?^{)IyOfqaR9%}4zR>@gf<kQkqK(Y1g5jnN1b%|q~}*CWE<)5cAMDB*fsB;!36)(
z1(fO=L<SRaK)8#JbhnG-0q&_k=!tmUO(-xEhGO2~mpQk=wO|}G5;57~SH-`>FHdE)
z<myOxoZC=l`kNF=YGg)CJZ#c~V&Xx%c{DdrgVP3F<m?*kQfBD>dA~_79>+|xYe4qI
z6Z$_Wl{fukCi%2}G3lXW<=qbFm^jv~Xno{VX|v<@QD>$~n;F8dmM%tdQ<UEW>=DRs
z=XLlU_;GQ$wgF0YRj!2WWOXPYDD|f$SR@*Sgu{y=uWpUoRq;}b&*&+Yr1Wzf8U>Oj
zE@Kag+Gc?BcPOXHEEf3jqGeYHD@^*4a<|WFx+ktvGLK7bnc0r4d9WQ{XFtm_(C2E`
z3*<*{PswI;3VU6dQkdc_4*IkzlY&2{f?df4@8VTvWlZ;MR<SQ$8|x2601Ur-b<5K{
z!QSO&!*+MgZg<&_Qa4);{&W4PgIW}kaHe1YJx!K_A**(ZEELOxxDk7seJe{rM>)JE
zx}Iz*MjF`Pwz|r^Ug@exORI1x*PE+W{{uz49JyI&G+i5U50gX#z(F0FP2#CsJ?umA
zS4F^NN>eg1_=FgqN<ApjD*FE*wwT^&TUB8k?;0BF8aGy~;_9REF~grYO1lD~hK5j}
ztJD#p{|)vnKSn=39ryEE`ad$71UC;T;)Q>|4*g;|9UBzDG60*zeifyEDmo|+%%cA}
zlUee+E`?S=T?G4P(I2Ct{>kM7<B!n)2ROQT=)N)C9o%5X*gFNzJXJf;ot_8>bAw8X
z`h*z{@^f24Y2p^J7}l)qs=AVs9DAH9f$os0s`zrhr%cwMN41<;>&SYCuB#f-lkyYk
zq3aK+nK28Pr{)GQ0;}IP#SBg}N3T$6qm&fUGld?pBFYxl6i=RoZJK^vnf%dMoY!e%
z6Y8g<*YCsEwmNv_zs2ipg1kX}R)TCNX1D%-rD~=y*#29*P;#btfY+v|xvJ~J!hw-G
zis6&1(LUO2pl%G8p~#=nxS&Y}+4s?#xJ08=YD`4)!{nFj<!mebK6o8GMaCwa4)roC
zBpu`a25)`15yhCB5pxcIio@NrF*A2oY`VJux3i)_BoU1quRieR)|tWQ$QzYG-P*gg
zbKYGy3zl~2AivO~&}sCl7Df-dd-7lG6OdjSD;_ZDKi3H|An_?8b%7MJ_i#CBef#Fr
z9(rr**0&DVUh?(a)ZTt$kMEMF+OHEzg(GY$B%pFtiyMSrSo_w=wziXRt;Gi?PRu#7
zFeiKAkvaI_Z{!xYc8U-tj>P{E`&fe6n1ad((`G<kOz#HJJM=y*<H+H|N2-=oT5rZ(
z9L~m7ff*Q1i`QSu%P)gOdAu}$Nm}o|IgkF5kjm4wOHaftJ2n&2X<jqG&@EA^v`U);
z@@5Od>V!0<%;3#+Lty(9)5MT)v6<AcqI!WXMi{zlLF0z0=tR}cG!?`?SaiWijf)6l
z*3t6zK>ywr6p~@t`pOXY*%?l$FG>O0gKnAR6TRdmcqK+{q(ZxQk%;MZ*(mP)44NXm
zi2$AS;(wg5Vb7(Gm+U*fdrj-c04UfyV&jR6?igv`Kj6<<dguIko72Af>XEHW@DD@&
z7oU6hLR~rjn<ZCvS=Tpq7H@cL$?_L&tj-Gpu;kr$nZCM|HAp-~Jn++eFqXF5{K}Fg
zuiV@c{k;vjG1l)}kdw1uUw!@F;T&ww%*W`relL7F_10b%toK^hBH~fv42@f5fn3O9
zm9iRHU91t-3f30ZKGsRrJ*-Dq&!Ig={}cv^>VJ7X^IOhOxF%;@TmN6A&!hqCG^^q)
zmN=F933y>P!;4$sKNbtTnIBC_ie7|!&2i`|&U`ZZ*<kc-YxEI*GWz<&?&w2Y9K8y+
zM!&=a(f6pm(QluQJ|q@03FcUpnNF*X{BDh;pN`yvxBo9M+{Tm}E#JIt#x?q_iM${E
zD~<fpW7QLrUy^+C9(tCDY!OPP4t(iJ6iphE=r(E8)cJ<&vBftO^`BW$kh%DtQJvS7
zqKady1cE?d^Ex{mH42x`pPT&r9*G_hFN9jtm1XNM420hrJUy04@`N$%s#x*n-B?EX
zcteUgcTV8SzsTc}xJyq^hyK5%XUp0jqi16I)%4&;u0zj!IEH=>=?P40;t~H6f*HiG
zro<2>n)tls<nK3joj<U`nI{nPM2W$Qo|Tntd;0_S>LnG0%LX7hyAe6rV`Ix{!olRG
zm$nvKavI#NQoc6Plc;sJZ*B&EiV{T$@zn<PZJ{=XdPv)Yli%R)5-b{%eTrA?DgU$x
zr=mDbG@sg&tE*~KN|(2|?>(K8XI79hK0m?I(9qq}vMJ-jT9F3e3!GUdLHgXarPQvI
zXN00!IX|X;9@yMD+*BU+;NQeEdr%Kf;?c6L|Fz61j^OY9XpvJy6`s6XAgq(e@apGb
zH%yn<5haP4Uxz0DgI|PYyMIhZ7|*;}RnJJSuB@d?$ysu1cj>wXt;P(#fGhJ=kJYZ)
z)Ya3vF?iovVf;)6ywbU^CspmtvebxTV1q1Q1PT#R)Ol<T%?3zIHFX|b#J@q<Jkhwp
z{s0YPG8H<QF8v}MI=D95`-o^dbTG-`Vbq^d@ZjKl8v?eQjvmY<nfx>GJ=h)WaXJ#z
zPx7(AT7R171X1vRafx8cAH)w~KK4QycO~l7qWBVss4sVeUz6eAEvDYZ-W_A+u?(EV
zLy%SxbG{x8%1m2L(Mmac))71BC1VzH(?Bj8Sw?K#61812oSre|&atb<UsFs>(oPsF
zXormOuLRO@;Y>e`o>N|WPapD01IzaR6pu~z6uQCZu~NR;>@s9zcq`f}yyk+=?2=7M
z4pPDs=p24qFjwc!&dYY|j5%|H`HO7i-xOl0IMrdcYBjF%9B)g$H7&W28>5I*r1`W7
zaT2-KRpfP4XC^oj82$+%|K5T8lh9`kQ%*UIODOgZ_3k?Ak7JTJ@;q0}6^PCgaT4~z
zupN6>BBUx+L0ygqJQgd1`DkE1&%k`*qxb|7`ve&tiHej5P;gl6nO#CDc@NIMgOtQ>
z`s&kNLIHUOXOoAyimjjHhlD(!6vRyOgkS~e<#MU7c@o~oGU`s6*2(W+88^c+<ctj~
zv!6qsi9}3L_Uxkmvs$X)?1&Mw*&^O9QYBeU+)I55;=m<|@Lx)+OlDL3i>5aj=G6`J
zLiVue@R&Z^2mn*M3G3#vsl8xD_$>h#r;cG-b_O3VmcJSE%cYobj0M7vuz6TDdp{lj
z8h#gkgg9|!K6^hplLvLgG4KYvihc$=8K~R1kzGYq(en2kaSZFBpGB~Q&>PQf+5}9S
zHldfmqv%C!@*`poHZm1seQMQhnO=V%G?`;}S15F`zj(rA5Ix!=j~9MLo>Qp4iWLJ)
zsYHuyjM)==gdKzJn2NC;$-xaQQ&->?lS6p8S)mcW_778%<jHP@LG(RGqf-1;ApC~;
zcX}PUArfKZ+I8gY07uuZ9?ddia-1p&Et-;4amhy6b(W0l<KPMluDIgjlF@JSjCC~U
zGOU61T06PfJ0Dog>~dCLwPfV1nN<e0^r~$HC>!gElh|qUEQ6D$M~lxHt5C4NYPdkV
zUT6*`CkM^K_1c0V@@#TN&vZq4DrmX^NFu5+0UM*w5^NDzwCEVj=zkp05W^<9YE2x6
zjA5td<oJS_&DBIdPe{hHd0Lw*9)JR`Gq*0k=H?Kcr<|w;-@-iOXt}i{0lOYo!K_5U
z#Y7KPf^TzD*)b$XrBQQZ`ReMX%%CraJnAg~8n;!)74ifzs?g0f`E|Ldt|uryHZu7t
zl1Ng*IOky_8>st1gP$rmGk*81cL4Hq_bE)+2zCF44WNN~=nQ!7ZuAb4S$4&=T>z8I
zo5UVaIgacGU>-{%dC+!;J_)vjvOKVX+Auy2Dyhe2(PClFCb5xo8_t0@&ry$ps%0~2
zq0cZCmUL#(<D=h$e;_@O=)0M*?F97@eAkNlB3eV80B=(6_r{rLOQ;*Mz~mRmI)e0F
zXAlMt?$BkmWmPOOHt_@mPpmZST<P)!p7x@|s(K>{RPn09Ak60tn9t3Te5R(;=scJM
ze4xee(pr>a9udoHGAu1e7#rKy2Mgi%fHc-uB^I@N7C;$)h04U*ChvzbZn)kWYuXm<
z6{Ek*kyxH#G-i}1I?DXUKEKBq2sk}{>Z_z;Z+yJBI4QBn6Cdv>N=(kkNOlDR^teO?
zz#EgF)A(SKaY;cBORx^<)PvX?laJGF19=Wx*o3{YifUVpounST^;W>9-+7aMCt)fE
zUKEIghEGxkyng1wr-T>S8}X?{iK&%w>dMr_qSW{e308|`LxS0wP@zb#^{L^VRqd-y
zS16pRz?Y;@B>6z9Q$d$=ca#<q!Q(<%!QKcDtOjQ*sDA;;*|U&WQCY$nNm2MzCW#4z
zzy5lhvVcF`^_Ma599^#<^*Z*O$;Z%X1BtW|8`MV-3X}`jZH)O6+EKt%W!=Jc+<bGw
z1}wpt&s{6*E`^lGRaI8jn<@eDCMorHCjgbE`btDM!?QbyRahT8NXwy$gU|r%0aZW+
zetop!$kFnn@XwJ7vYol2|G+k|5!*2q`!xo$EHZ*A7>FC1rRli<Y}T1|hG4BbB?Vn%
z)ViHXWUk8N&#~A;9?clASyZY19J3?j(u@Koo;<LT|HN2a{C}G-`xccw$!D?WrKrY$
z)}pc}`^=8KWaTJ`;I-Eg0qkuuj1W&jq{(U2gK4m!2<QP)?69}h?gEFg&^W)TPi_%e
zY+!-L6S7;1%mYom5|hwk2jmuaZH7T9y2W*j%lD>uYJ-M2(Mk6aF3*FuTUbUaj!2vA
zr){zjNE{SJy9*%uVkiZKN(ZzQWug$^AO+s1J`#C^>w9}Qa})|WXMKM^!;7uqPq5b~
z@1xrV4G*wO)2BWo+j}-KZ&C;Ey_d-Zm3f6&izTqL>2Zs0L@eR`iW4U)$c_&xjvT3=
z`S1;K5WK}sqv?vyJPKwv2E65M$TXQU8@#TpEEjQ5AE<V_s{{JZ>_8wJ&0Uqm66|fZ
z687uF>&#u(%q|!<d%tmM%bHs2xH_%YpI)1$US_RbLwq>B1!<5<4T(UPQZth8EKk?z
z(#xIsBQ+@z8@Dip#Y{d+*A2=jl+Lk}74N@aLH+4S`3LWp)BF;K!*CpYc1HaJbp5G6
zMeC2TRN*kLoP36bP=#3r`Za(gLDd5@J9!d&9KQI$`$aIzBS)#X;Kv_)K<8aWT)>jq
zH8kIt;VV5lsDUcPuhd4wyT(+Kp9R^~$uQ54mMW}aYB6{dj;rWAp0<cHTo1+#nd~7L
zH)RCHjRA238-;2i{8Mji5UF^=5M0J6h4rR-QM^R2t1?w-WkO`{ENn17$Bn@-F3+9e
z;>m?tQ&*>0D-=k%?x35;!+_M8ks^wR$z3KjO3i>H&Rx_&?3>9q>3yldRJ~|nu*|rg
zMsJ;s*8~Tg3X|P#GTUtLqF?wISgqNx(UY>Ro<f-{<gsNZt5nI^Hcv<<E2KWN8;mxa
z(O{4Mexgo>Y|BbkJB&t$IynonFj;Lk8j+b2>kXm~TgYBbV-VuB)3ilK`%_~J$LGid
zoZ=sDXqU%wipX23M^w_sK$S}J82YY>O5-L^_A+gSOySss$(Udd=y4+NQ21}}j=5i>
zB-ESKZz;)Z?y+}1o}ivmCgmlrXzA%`S&^8Rq(puh#Le7f@&y)-K~mT~v>os;@kg$b
z?1pJcOd8#`tGG&PGHSy+%(?JgBQ?35el||*=km!vM`P-mUBq-mS^`aiT>hUv8GP*Q
z?RQ=1IeFkf<odpzlLyI{58bIxNlVc;&z-tp`au(MKcwqVO#eletNsL&kx+45sBRM<
zzcc3k4Y&;TCl|Q<ntL&<8`-K%&P!a`+}qo{G7*l5G|h2bHXNJy^uDm19-ZL-oX^lm
z68?TIdn@%3SFVKPOYio6gj++jgWt1V@O>H)9FJ_>;{Hfr`zV^3jR}gDHf7>A=*qQ<
z4LZF?^?mJ_1CGsUVhI^zE^y{mX!3@t%Qa?=QplH(qyghg;{;k&oC=7_H12#m^_Lit
z!C=hIReKXPn7TPu6f0oPM<FfWu$?S6JqFPtDgsdim8)UN>1D44>~ngY>0FG=Pt#a+
z3ci4Ak~zKJICn#iMIWs9CBva6Mog}7WO_Ztp&VEcKS`;Ratyh1vRw_i7Gz<rk<w#F
zKhe$lhJBf_kCh<+q9|H4l**5nZc5hcl9P4%WVV>90}me6B_-($NlB42BBC8rLAqrO
zTHV!n$TBZtnnDf&$g9Jc)!_3r!LE?i<Qo|oWjjqdEq;G%w#k&;>i4(gn5b<B;D3?*
z8OV?Sux+#sJ>3#l?e2sBl<);4H$LRF2JP}?30AFJ!M0JE{1{WbS>w#J0TcDUJy|UW
zB~ck`2X8}KZLDehclOi<%j}I2@CX^h<B1h|WiXKC)fg0FzKCtIcDs`*114QYqu*C;
zAfM-OVgxZYMI}`Nk$|6+Vl-s8W_X+Ppzu!d2Yd&48%rZ>%se5G%@QzFW;)m|O^Wkm
zxD(AT`BGFpUVMqCVxHDlmSRg&kPj*(r8U)g8a2iZFXqQ28f>e^d@cD2D)~Q<zD#t3
zNm!O*+CByurcLc&{Z*5jgjluIYSnlY%a)Pf#pyJzJR9`^Fxpe%<kXYceioAtb{X<1
zA!-l9fG5$JA^NY%6h3`Vm0@!RgvxqnMcvXeW6CnKL7gO7g2*So)R>(%r)_QnDx@(f
z5&a}3DrMB;;N@5z(=MZs?v1b?M(L(8c4ijvjxuQ1%elCSqlvX73YQj2gc$jb!zFAL
z5jHdR8F*QMFs=(Aua~p$r}0y0w&pPZ(AydcpTaV8Gi`ZXwkan+g(obJBjs5uRw$$~
z!k8G6jKzq}az#<rcd@Z9!AjYU4PPh~B!^^k7+P~7Z}?CyCG^;hBe9v<-SA=jM+P71
z)RGOz+$e_Ij7j-OAi>MZkM$WkZHD1vo`9ya8?HHR5z8R7rxk(dvD51kKTR(O6O6`+
z$ay5Eo)q!tpExus;KMs^IZrZli0BsZPD%vpc!JO0<8p77ik3?Mz@pEkvIrjbH@1Ds
zHzEKyvjZK^)^N_v1?xMg|45-yqjVr;#i4{sjTHP6sx8xM4pd{vyXR7yJL**qy+opS
zL=RVibymW4>97OUHIVVM?!Sk0%w0B{3@R|248qm{U!;B;DK0KjJZPGgK<`Jbr9`Z~
zlfOegww$QxHFIVdRlSj;xtBp+Wgu~<VSM3uZ+GEa)fSt8FOkK`Ob$n?!wBd11cOqH
z;aGwv-lVm;ZFZMkD&+Hde7-2bsAy#i1w2lykj=Mf;>`*n93rH8wI*IB7VxDciLu!h
zjY2KvvpKO+y+&hFinvH#2ml091+%xY4m(XgO!tSG8#r{MO~{RQxvj{nTkmRKS?OyG
z8puU9mxil$7d!KpG<h_^jsm1tLY+A#qBApk<>C`auOvI59{9nJ>Wn0MH4xDmC*Mc<
zC8IMI!H-UyU}Ve%^}V+vvETEiz0XW)%;b&YAI}bt#*BL^1cA<MgTS`H|Jb;qI^ova
zs9ynA!^&FQvD>#kw<gO}I8b=&?M0iOUP+PKjpH#S2H0ZZB8kjDbgcJ;t+*>VwuurD
z^C?wA{#^h1<;T;y_q3+>G!-iJcW<A2WMLM`>z}Jh701XV0wT`U=&M@O>Sp$qk)HbB
z<7nEEH#vLGx|#%A{kj(Fm%zR4<*lL6mP;Eb;%&g)d&1v377Ps6r-sjAUzV-8b8hcF
zYfA8kc7d+&SM>OhHhGyqac)zP<;+Z1$C*YYR|mViH4?*e__1x(727V3MWa{dw|{=@
z>S&k1LC3GGI`G@=TYr17nhsytK0CxEGfs6+US?;q-((fRn$8YpiIC)?oBx=NiNT};
z*8%sW196g~wkr>vj0U*uI8_7;#f$1PTU>F3KqBMGQ<T+Zc^s)&n%2C&W9;I#it6o;
z4d)NGRN5qBvEY@N(Jrm#7#Tmbd``Md(k~RV0qhEk1{X3BFsl##cI)=v9;l)NU<&B=
zf^x=whHfv{toE7;7W^ZE^~3nn$W-I$aRiNZ3J`R-;E7Y=Pp=WETdVfHv32Vk`>U?p
zK}-xjOMQ389n^Qv4F0GLHLzHOX-bA>#KMG^QMh0fhp(IZd*kv-CIsdmsKk}eY%0uJ
z^Rq2L6}FrJ6Q+WB*}<+t8!`FAVD{qM`kM9*2EiN08J|l06~_KQ5!ji4CCG#4m5G}G
z_E7kDm@{05FFOVPehmE2DH@CSE3$~Z0Q=$$Kl8vf0YVwVXjcxXtlNPsYvf2r|83)C
zu~)uN-?;Z=-J$Ovn?LuyZ*ST7?rn3}LX`ynJ6^u&@ui{RrcipK#305>dv9Nwm%HSS
zK5TbZQ+izg^VDB2-b_(HTiAU1AIEf7C2!B~ZYrgb15wx!*1+VK#6s8)N|5|bDX-D+
zGS{9v!3p{*$)oiEVqwbCt%qypKee~XQL!LY(vuxuvhC99<Ns5W606}$ybWvT)Q(qM
zJuR!sKfltxr8POVb7xEK(%MuZSIiR&eidv;*91rJ7|L1PS)r2URkb;*b`9mUmR2hH
zCcDX++u-uo2edc2s(QTHLsiKpX9}Og6VUU<a_SI~1ls|{!K35F%!aS=r^95h3abu3
zVyj(IZ%lKisMH*bT;^2Nl;X>XD-{1!_|}G<y?&A>;Pq>H1QK@g@F}K$cEbL-0`|{J
zw5At=8Q{ot^&_D4lB+$jrn@eUAQ|nu3eq1CB&y?b+gCNNdU1C}^`1-PnLRC4w)bT!
zaM3@$?O6LQ)WkExgFge}vkUGm1A5qjb*U~$Fb=zL3{5ieb(@?o5<0A!+Cy({-ud?7
znplNF4ziWvMd3f%Gwm|E8{Y+lmloJ8F$%gH(>0sw$n;sphj5IYOV15ZbGM>65~yFY
zIXqzE(W)emK4Ut-6|>*r%7l0Gq@Wkvapia5p76s@E9HFf4*0c1`{ZG^hzC4!hvc(Z
zK6oVjB-VhJip1e+>=8Y~zXvA2#(Eg6Z5dh-WKH`9Kk!0%ZEIX|mbq|#aRPb#%F&jF
z0+mtDb=EIt;t!(u-(}<(+5#~WIX*HNnxg^frlKCg76&eziF*iEmfO545SMdyNmiXf
zig?EpCo6;P1}ZFbY7D6=%ym{4FBfqrJzo)Tj_ba33Af4&;CNr7M9>Qvg^_HJliI7Z
z^JA=r@H~<)iowzZG65R}qo-**JNYH&BE0r8>mGMx<rnoHyUO%S5;?Dxa4z<x#VSm-
zU5oQe#^)9)4fDp<<t{$IH26YN&1hlavS!Z<mg3>kk^6n*@gElWE@pOyEVh#Vywbst
zp>)?THsSjx7I*IN@uv3d??Tt@d;9&zZ^l2O`@s!lKBUJHS%)!Tb<=zC(Y`>7Bps}c
z%<oYdL=!Jyn7M3eU1qCms#o+2q(UJV&%y8r9$kjoqqy?-hMhfrsbs2$Jc4rsF;{-6
zNmb(CGWy2<e`3dDtZwQ~j)}(g$hwXlVFaLrHYB_n9fw&%(JM0SUkJgYVCC6C_!|nX
zJd6Kc=EzA5%y$-+cAWp}$dRw^?dZ7ot0P<9X)HY5SF@tl@xnFnn(+q{%hL5}Nu6Kq
zrQ<cj&KV)Hv9hGaJ8w(<4_(nYl)Rnpk1kfkThTTf&icAj=&r^Mttsd3``h1k{&HJE
z$<AMF{@e4{OrF@oDYc72yH123#y-g#ziXiX%*w*>r$0J(J~3%0{z&6b+h)=N(1a90
zoc1YZz~HE`qNYu)DQC~Vh4<c<uBL93*b@(3y7bo0mpA2l=5A?}8iiO)V&zcY#?9f6
z!n#C^6{n!KkZ1oM7(6t$dh2k7ly5+|wKbEM@yoEyvS!Aen_l=UXRQ3$Go!n%uXuUo
zf-{S=vU=8TUfYv(WNX8Cy<aYj<7U+V?Z%~#tjW*ng%5hOO!-}T#XZGNiCE4f6=hZV
z3vaCI+%zZC?aXNlEnDOCJ4O7CmVul_C+D@TY0FM^=QifL>T@jSM6*Z)>4V%M<6#@2
z^`I#dkPS5m9fSo$LJ-7Lo=eXc&dbukr2<b!H^A{;ypj0Nl^Ehb%H&Y8+9Q@*xYG;=
zEIoAtu@UAQ7diLx&#Y@CqV<E-O%}I+AIFxZG<fH%ud`BaqL=dcdKZfXsv4;zt$TX|
zskrk_dQWijGWiM25Au<WPUy6IU7Fu#QZPumQGM5reC~9BcJ!j5b#ceOiKj;kmfkwg
z1`GL1f*#}6?-|Uj-}PvJ|D(I=GY9w7V_ba#^%q;Mt>e~Z1*1<-h`S&B_Q<kd-MK=~
z=JdxWd?4yQ^vr_w&#ueMTlehx1<xGn6@8Ep-_K#|SKRrlWk<e!up82Ne)3;rHG}aq
z<#~b49z2OCk`RJbvEvo)MqlfOdVBuT6Oa93pk;SY`t#cK8gJ2!Tb8wWV@+9Zd5R24
zGfr-k$TCK68$3+?`{QS}mIanQv<81`BBf!x+#FnZ%Zs0F3v`t@*lfCsKw1Fg(;g`A
z<|$fK^i<DGF%jzs6|;X3z)$BL9?&=wlT>Q1SuRdddCQH|?&rh*KCjX9L77y?=j&v|
zJEMJQ((TmoNHQkF7d{kz5zE3m)$;J~EIE2Zj+s7FgF5O8*iHzYNlu$hMBPG>?F9Nu
ztWZ#QgDR?$I*zAZd5zBnE2$^I!=P&7V<L{MH|wdmLlpN^l~^mlB!|FnPes-?UlLi7
zxru4i876fz);e^w8M-WVe2z73esa0L{phPpDt50Pv{%JQ*nFu(9H<>CXxTp3<7nGE
zcsf=Lc8A;X$N6%oIpr_h*RbT`<`R9d&ezN*xI(GR5uet!ydc<Hme?RRiNTgrWfCi6
zL)HOl>Sbt}sb@0oudw3CMgJPbQmG<(?Srd!S1ft;SeyTbi(9B}c?|w|xE<^k$DSVC
z+irKy-QJQvT$>@5Ncn6@%&&ZPL4C>Qi%S~zjT8{zu-qysJ4LO7v@|4^^#%);x2459
zTv8#I;6s|S;2O{lX$mm=<EH7baMLH)S1k<@Kn$A+#ACuIJwd8v%-Lw$d}&jD)83~C
z&t0x9j1h4q5{bWlQQ4d=%?@|_ruv*sxr=YJ*+O;`eu%8JrBeI3+|cqny2l>dR5CtL
z!{>;Eu4F@C?()3Cp)#9HX2RsSUEUedJ;~2uAIYW9=Vv+lM`ZMBbu^t(M<YKHANlz`
z{u`#$%IBb3*?e&A0vFOk)wyk}nrJQb#-ER8_BL19K7v}P;3K&bJbMqQd+BObQtd8G
zx}M%SrjYb(Qb_u!|1kEYT&Ob8o?X*@I&!c*6{Q$w#&hO)2Tm#M;=~qb{eoO|+kvNg
z>-G$1Ph5Had7OM6%<m{%IX6AGQf=q!+4$!|en#ioq6et&A82z8+%f*|@Hlxqyb0Sd
z!P>VowDYwa`{(l`zVS~`XGtr04@*SH?er%w#^n*9ji_rpo0zf|T=^JKKHKAL7%weY
zKGK_vXD(T`Dm3=Ms{F0rP<Op^30aaJs=Dy<U$<7SYIa-l+Wk+Vl~vvL`{&(7efa&`
z?bNT?-y7ms5u4Vtv`wr2{}A^c@NJdn{<zLLTDGjc_p&5Q*0QxMOR{BoTi$!`#CGh&
z*?aHh07-xVEqjwvh@rGlxIkOl(iU21Z=2H6b?N=}wzQNI{w+ku|MxvdvL)LAdOyGa
z=U<vQPUQD}-u2Ay^E_#IMdJzx>-O;MED2$K^+t%*Pp;CmX&BY}hzU^21h})e5&dtP
zmh>76$<tFH`=vL(Xv_Hnu)Z%D$CeV68!TqO2i;$Pu+I}3KU@{t)#oql-;aE1(s{eK
zMXL^tg=$WJ_rQVgo~j9tAFYN)gx-2e%4dlbzTWMz@JzEyA!Z2-XAG6owXv~=h+0+B
zFczzwt~Ag%?v4KXZM{_*U3~5F-r>8}heGS`8tytgQmfU}4(@6Wt_>Kannri&U~NdH
z4Al>n+8fn!V+ucUfqD$A4|WF4c!<QMi6HtVmc>A*$4m`7+FUJm5lzNoyNtGoMR>iR
z#l#$tKZ>sZ?CvKT4h?z*f<_6Oqw-YQERa)Dx8Gf(*M2%j>?aM#p?3&Bfr&umq(r01
znA*b#Vk96oun38VI+fsfM$Qu18p!6Snl6$V98W#<D*EB8PocMsr7|?e$5VM5;}_74
ziJRdsINvCKfqoLm8WB-PW7+dvgt{!(Nr_6${FH7WrJgZ2_ly@$ef>mZ<&OIYinnbT
zwIT_7TLDxI2Ckjj_w#%DroQ&knJwSy#t^0G45>Rv>C|R>xkDPiaP{1=AD*sOM}}hw
zt&r~ns>9Wd+eW^IFdlvek-a?LvSyP)^-0_4CZJkCngu{ky+`P#mK*7VaEtUQjZh**
zn^sW>pLz<pHKh`ol;|IpX@rT#(at&aYk|oNef2;m6pD$uu)vO>tp#&4DLQyQQc?(;
z2&t_1c}PU0K3T+Cj7{S&Y~U$b*$N)w!#{o%{}}(_@1KT}`4;4NH#7C}C!YQt_Re>V
zB^phM@jJLb@i&x@ygr8%$VK>dgvwXpZ^CP_ut0eTzk>#QFc~Oh@9$@kwtp=UyyY&S
z8^gWuuD%zmC~#@}vWlX-T(JOFK&ij`>`l6RbR&l?X(UgLc1y-?k^JW|+G)}bO!mi4
z+Qvz}ou4$MiCXT2?d+qSHmJ6=lJ>Ab<aBkv@=C4QDMWrPvg;m9yel$^l@1Z|;w3z;
z&>>xfEgY1Kp(UI+E0m%tg(z{mOq-Q$P$%A}l5hAi;tdOzdUR*LTBB;q_0jZaidVv+
zGan~H2>@RA$A8a9dmoQ)s_%q8+T%$dZ3p3_E$#mE9bZC_Z>$}ezkcV_*Z(~qZ3Vah
z&yn@Kkd&j3k3DyN4t*-|3|bG3<hzk;ccYV}&w{$2=w(Ami9G6lQlg<}36XV{@W1?P
z;X`UR?G*|KN=p-IoF{b*U#1$uAP$j)=826+Y2ntIxl4xFaHRW4p!C71u5;u5@Wuz$
zj-K*nG0a;oUcB=D``60-FTXH$y3^8Jd$g{nbpMO{H@$eeAzsmErta8u_39?Fw>6bT
z%y0Q3^FtLaTCla|+$AHJx$8(EdjC{6oOu(R*^|XIZ^7~tCqIh$Uw>ijT%WDE_E=qa
z?8qzoH@-60QeV+;roD2QSoi+{^X7f=c`ZT@GElfU?@_qo?z!ZOPx|1BzxBZ}u-??P
zV7;kniS?p;VKY;N(gEf@N81SFORIU%SGE+-@PCrIbl83u(PrG&P!!+XV6io<uPAE|
zm;{oX!i)yvh243ok~KAX&2}MO#>#Q)4GvWfb|}iqk!$3>@pIk%H;s6-W-Y%gz2!KM
z+fuT*)58}wNZDMOy)=)IPn`=NVsEGRD;1X}-ATe#^46dWTAzMHuB<a>^U5AxpSmUk
z$GnM?m<^+r`@ojX!7anzGwo>{E<gM#*tK&lrA5eB50iS7W8ojzJG2MDJFX(MnG6@o
z@<xJ7K>sw81NkI0-CAI*SzlW=U7zo2T8sY`lS$bnt$kKUsYMXz*}QXePawAY$>~i`
z?JE7+bI#V1Tua-bK0{Yup9L)zmkl54sN6FUu($7sx9l5jz-=-fhsWV4^rGBIC>kH!
zar^MZ<vkU(2QH64{+Ci^FxFI9*cr{GWpl`wHS~+27imutUKI|KETENg6K5o{SfDB5
zAr~S=Z$jNRXWR#j68!ght@}IO4d5^(Y_`qZ(X~;cxVND9U~@$=txQIh`Mb*o4qZRg
zdVJW+7c_#yn_P$8l0y@VYDc?H47f@AXKvvGdOkQuc#2C2qD$d<e#-4c!c+P5eCN>l
zvGMam&MDYjeSW^|?uoVo9rnq|iAn5QVt41c@c_(xL?l}d)R!eBv{w>esca3bIoFB*
z&+dKucB9A1Gn@mwm_=n!*n~!vIzxJ@;vCTeo6t(7NOb0vTRQY5o&LUy!L0IUwly3b
z4n!u;-t$=N{Iof%H-GlbLnEQSh_<<Ick{5T|9JPn1Lt;)H>>eK(CSUZ8UdetALusD
zC4VgtGxVf~*1RZ$mc1;x7>PPXN-h%RXchP2XOvojnvI;jN2<@k=ecT)XFlx!a`MgX
zUFaZ-k96^c_!fgOM=Qc}xFX~pF&kG=L*NvAq`o(~4${O~_?XH8G!+v1B-s-PGh67%
zc8>(u6#9)*7g&n~qznk?p>hfW#_DL1_*pI^i}x3rQhFzH()5D)c_m9>Dl}GSE1X7a
zL%Cm|f7$#J5|We#_tcoBTw7fT`Muq2H7Cw;q}W|+E2k^!HC8#RoFfykc$V_Qo~r4p
z>sLZvh&chW`f)0a!Xq+SoJd+TLtkJ;wr++k0qB>hXS#@--AnNvC+CW7_>RSt-L;QJ
ziVn2aPFES{Ir<`-quz)KY!NbZ*BPr-AVqs8%Tr0arJ>@|!hypr*BRKqYz;w!S+{s^
zz`k*yp7WV}di4Xnfvgxjy7Dwv7aEnNxQBK=^EknIRxf;j$-th4Qt{Gd-oUhyx%4IG
zF2!Ww`7K?i1`C|^BjY3WPL(I_^wjz-JZVl|@dFd>NBUggU)F+uk^7qc;pSkTP{p72
zSLQcNmzMUIyDi52fJNgqNu)}Nq%2Tst(%CHbVnWLTt_%x8_ZXz3@V~;u^qpFzCbI1
z6#`Q9kuf5&F%KD{B91r}2}x%{s7~hB`8vY--8}I_R;rlai{#?JDsii=YEf2`s&u?2
zFK*|MLM0l=%3&K~Bc<q!P*g2Of?Of~z@fyw(GsqJ``;y-peU)4=5RYZAYJ(jAE4g=
z=jnhxL35I((#42M^5BxZF%4;je0%4i-8{)7I{yA?XQi19=Qf+7A;g5gQ&OO^YQ#(q
z%j-PMJHDT!<2Tzka`-iX3wCyYIYkY>BfkL9AOd&lesFdM%2Exu<iuo6S|RCZgAD~R
zjAM_s2b@)A4z%sexrTrUmuD$eN56p&-YHek5iXC#=3{N9GPjCLOsH{udPyWh&STF@
zIf=vhPKN``39KwEj$MQG-(YSMun~ZOB%N$Rqfak{0yEBLz4aFUlaEnbg2vAI_^(L(
zr-|R7f5RRV=CbiW?Zv-wrjBjoAvJpu<yk@>#Bak6f-zGyO(mJGt4xR*baD9(pl{+#
zq*MNM{rYNse)FcPNNdn4RP(Lj2X}6Jc28;H)IA&U=eT0*+F86us0~`G$HUbd8>|YQ
zLRsOjtlas)VC%`TVj6OWXOR-`z<^)Glz;|5xh@(Mx^zZ*9wMpGkhwAlVWp&!vi>RL
z<A3fy+Mf5_*TW4CenW%IAm`J82_lwQZ4TwdyDvR((}7Lf?vo>~1dhIeJtnnsaGJet
zZDj5#30<r*3iAUr8jUS&&f;WIcW<0J%HynQZtN-23K7LwQfCe?T*LAJeZe$eQ2K3O
zROgd*m*Me~ej>7Dd{h%w_n+x^M%JBcUiU)G$K*1=|5^DZE$(1Pk!sHtYfs+PR+fZi
z5i0l$^s>W;zlUz3(Hu=1Vyy>zT&*odEC!RFt=CHQMYVa|<7|!w*@z(7d{GuqG8~Y{
zH2~e}N8mm(;j0j)n&U22_)k_aPR8TGx0d&f<s*@U7X^tbL*LZKz|_-+YRYzhb++%W
zO;LdyeF$^4ZL29CsdDk8EaY6tMBIAoQRJ6-A&ap3^y^2~J$IrZy!Fu;n`-!`L6<gH
zE1*y*H2eZ}4V4aP5CRE33|=SP7=J0^q`|6wh=IQ3tv4gaWRww@14Ql7%>K=Kn7Wj#
z^I(BLN0)jK7TsFCw*2f}IVftY>=~PM`x{vZe`b@qsMYUpEmCbl-rXi@-g<lQ<lXB_
z8B=?tT@g=7EE?|!uAOU-ZFV6d+g3wx{A_D=S+r<i=f2%zW%RMFssfXwwsb^ema-Uh
zh9qLa?$|Kkh{NWPamT=hPd{~cm6^?DUG5#uO0l4<$lk5Bo$asN)!|gDV)`s@thsJi
zr;~56YqeZ@j@;8(4s^8-@C%rod{>KpYxA<c0*kkp$oM+C{@zJXbk8%}c03fe^3_6X
zur*S(sX5<JwZ8soInse=p>K-0$d9R^v6HQX5ALd}@>eLpqp~$_tPYRYSc2fjK618R
zYT*&JBJkU2>w%8Orl_EIjkYB6G)SiEEfu8%vLuB|PnK&ZdZ8~<%01MhMWGy}RqcrD
zC3X0ZGxT#Tf57i=@hcHUabL7?#>^74IBL0H?oo53*{tXzGijRpm5+Q@fkDo*8iRi9
zpGzA2TMm=XXbjd`EcGE%kym7uNSJ(6L66xs;GJq3T2k%N0(kH1fegL+f6a#|C>o3B
zyIa;3d-^N$^6SQsCzT3!%XD$c)?R;f`=e7+k8UsZ_iQOCo@#L`GzTR-CP$cGJM4FN
zMooM!lds#YFCUN9&32Y+)fFA<t12fd3^c84lfPkePo-8LUvr|L@FA|dt-tr^Se;H=
zJG7@IFyS}IH1*c9v4#?rGSWB}wKk}UvVeg16yxWy5pa(TsTwqCA~wT=2y<1j5yDnW
z6RU}>IXP$^lmKj2;vKZppOU3)ZbwHs6b0yS&ej9jkT8=v_B#9=`Yv&A9LsJEmU&Ms
z^rc(k<9m>6scT`7*6qjg2mSu$<VCotTgc;R<bJVTDwSWko;vno9}>0`XI*E8XFXsr
zNSHjcEpGH5ZKm}RdfOarGvH}#=(Sj#7AeUf(ywer{`^v1gHuJ})U~bMN7Cnm^z}#2
z^)LlYcuz%;K+;43Mgm7)*EZmXcFJ`xL2@2JGQ6IKU@agyVjAQd_)>5?ZE=JDSTm|4
z%@^#NX@e=8FNFpSv8Qf)4pRX=icJasTkBY+YoVUZB@Co*aaP(AfR6L96%+IOpu&|w
zyxp99Tk-I6;y(onj|3?q6fdII%!l;530qxFsa&o#TQY6;WxkG8OnDFXHo+*8O7xWs
zu94>WnLOtU81>7I{3~fb5%UtKK&zMhBOUb@G7W#o9Y{X-IQ?!aMy#Xm-&zN_Kbf`l
zNzXOVzi+&j$CnYFwzPuQs<0vpsKFk6_TN`uPYGDSkynZJlosKY$e+Oa4!=SyNNDmI
z`XoFP!4t~y$FaTOU34wx6j*?S4XozHkR*G@CUrV`3gtiuX86z8UVGdgYOjo1j3q@r
zf05S4l<)<4K=ybWy>dt0(AZF&!`*+pbNrs-yc{{#9H{p?YCK9u-Qd_@og=?>PZQrD
zkUN2asdqxZJpP7|FLu@xI*Kg{Wv;q{&4K2GGi<O0ENY##q_3=ay2V`@D3eH(QfZz~
zYw?=Z`n+&gB)YL9z~JaaDwk16c<bR>Ltw3c1pLpGS}Qd((u-(lsg?ZEUgv1u&{fy9
zspaN$uGhY6psuFH2g#EW<az45>pdB~5A`+l)EAPIBCwYt){ZSeFGG5dB(agd<TnD3
zHAmICZco|By_-tB1BV-~G#wuB=2lIXmygyI@Fh9em_BHe1x8P|)*qX0l>84;n_bvA
zRp#$4GXZspPx!;|OVoF%3~)F7%l%=Q(UZl86!52qPB6WD`_kP*UbHtB)=b27X_s#7
zv@a*yyv`pr5N>&l77e6sTjD+;-`lyV<h8oK)T^l~Z8UxQMn?y^4=BZkKR_J-drv3g
z6=cJ5nlV|v!AJ%yw1_@H1}u=5c0ns<E3)e?d^=O6I`aI7zj}1<T~Y;Y3OTffq2|x+
zz6afa|5v`#X-AZ->odT<xgE9cK$KF>#~<^=_<PW&dLGETA=*DFEQqEMre)48h9EMF
zaV+h|PpVs*s;gUD(4X2H+@1Sd^QtCe>l^dk9Xo4kc6PYB+RgbnYzdv3+tJb5+1cLK
z@yU5I@_@bLv(-<RRc>msJ396@eHvXi$zj9XF2MJw0or54=|KIJEc%=3;RX9Cq(x)X
z`*_hA9x;|Jw1|ifUC3{f?Yv%R<2JNC5MI{NYxg}wN3VeE>*$y$PXrrvE%x+c&sEK}
zuGZ75>y{W1SFkVq6|(}_LUtsluHM0lo=i$vk|oIZy^Z~i-lDbVx&pIn+EgBvl;<w*
z33@w<b=rbxd9*;gD=9^Kp?Qq?L$!f|^6|#Tqr*OlHJ~r!gIlcj*E^lD0<*;t?TWb4
z1qktuhVb3k_kaw66(%wp3&T)?7+sI_;SbH@55X@;-#pTXe&wUNL?e1-?xQ*ML}J$*
z^uvKWcpi+QT8aU!=4qs!S4-FbAk)2g0&i2OkpcAB3a=tc(g(*L2V=ut%lzd|K2Iv*
zwB+ks&9$fhy;{0q>ymqq_R94yXFBvQkYuFXdSE_MuX}*d>qLajn;BLjRXH$jVo#>_
zhW`?dv`lM5p<Rl72<)yLm~F7wa|xokV3~Mub79SApi@}VTQGtvD_yD^j}%n3dkefl
zJ`4RdK6c+9)e((^k*(z@IYORDUpg2G_k>i2NPEFXpvg0Vg-fHUgy>dXPskA{^{E4L
zr0zNk`6-h_4~r~xjE<T09rmJua#L=&+2QG^4oZKkishOctms*?=DZgW{v=p`MjQ%#
zGI1RF5xxsK0gDQqMT*ZN4<voD(3VPzLt%ED^Odh4A0j`*z1TH;fI{{s`jEDf&=(8R
z{lm#D(Tps?0IYbORR1ye^zB3T{OW<i^4dr4zh&g!Ez!pN|M~dCAK%~P8937HVDosR
zllg-erVeJ6P2JShbY#faG5o-#`lHWG?)||nO^s*%V^i-vN7v|U#4d*Cm3{Sx$4aw^
zGcLd%r<T&5gZ#s@=#q!&4TSR+I;b+MEosv$G3og~fxh|MPdW8!MRf%_E)ZD_k^(DH
ze~Foes<iz?VJ0`;jt#J(hyK{ZPh^ksn8P#2uWQo_GR0t_rs6ebZ20=U#6H3P+g}BA
zDPc77hLiycVDDu}7U2A3C7op?&ExH8|3h!?$&u1Ff|;^5(xj}Nt55@Hrrv@unT(Sh
zKA&@v!Ca(c0ML<3;zXgtnoLi`QUn;&A{n&BGB+q+>o6*Ei1Idvit1frf|4tcHdp(0
z<oU%SIJD<z90~tJHunrFan}cul%xo3+uxDTN!G?$q~{)DUkW~FUsmMjud*@O8TDZH
zsiKoN*csXbE6T)B30l5I4-mB#3n&eg6*U5uS0oiO7OMz<2IW{2Uu71HOe!8vWfF<a
zDn3%nSDD0OlbXj<!>=lS{x7)(>F_a*PJjKIE0#rlPMoXc@szn@u|>t_t1RMW-y_rS
zayV~D#sB*L4VFtuy$$+2*lVyd{b#&^<(B{^YA%MpmM@TAnOUMtm8@On1eXI3Ur7sf
zr2=B#Us~IZUQF7JX(K{ly)vrQ-&59*zAj4Y{xEc4O@*){v;N<u9?5)an349-7oi(J
zx|g;1{A8>hKYr*7Q%$>L=|STETwDYFS6~f6xCYN>(!T0@g^wfkPJgl*<&WN{br=>O
zZ=**_K3+UbJ-GO8Z$vrqnmL@z*9>3KV@uCCc@8<mIn?|w&S7QojW2c(gDdJkeer`>
z$pI)N4`2iV4=ALBDb1Ae|HWFCn8NZxT+7+V7hB`+7FolQ<y-@QZaHW9!po-zNS1*g
z{2bl__=XM0)H{H_TSB2^a*E89dh;^x$+EJB)H{-_!ISv7)J;TwxY<6};mRF{Q_hoK
z^qcG(RXiL{iv=ZPMM=#!Q}UAZGPr==UZU2Jc6FK;|Ne8=v2r=|-=%RnFU~4)t85w(
zGmAwd*MnPcv_Rz7gp&w;G;N)4r!&9gDw$cyWv*OxGE#?xmam<7hlhb}axc)wxMbvH
zsgLmTg%ddWw33@dV_Nr~ugnxE91(-7sj@_~W-QhdbxDN^rmp?f?VU$@oQ(=KQ<T@x
zHdGv%XmG?X{`E3yr)mo;Y<a~dzR*~x!#C{MskiDyoM3Zv(fC{^dQu=8HU%wWefgS-
z@N8#*O7x!k5PO@j!B=8ZRw<?o%qmQm9uJ0|LSES;GpV33w79d(7%jHs*7@aimT6z}
zqHn4y+GI-N86a+Haqd)qdUGbEVF^D(;2Hu)x?o%JOXq5~7O;J%$JRcuDeNCV*FE!S
zl$T|m2Gk(R+Gbnd+}I1R`(k^eRW0XU*|`7J!{x(GdrjCi)8f2DJly|9a7$l2BA!G~
zeX*c8L{hE9I23{NSP$-ujY7$EXswKi6BKS{^0-{1zoDoOqL}J8l$W&^<qD*%!q{sY
zh91~iS-R`WmUR!7evQQ<@Je$%NxYIE+EQP2{MEgi{^LwzMQO5b#)1dC9n76WWRNb_
z0A-|n52+lP^r%`!xMVTW6s?#VFLcW679(GVn9_k(H8ELnRa-%*E2y-0>}{6VL<}~A
zrcqZidCc<ZxHU=dj@n{tK;r3&V(9Ax)XKl+!oZRH^Ln;dsg2<lXVGva(1VSQb{UtN
z9a-mA_Uyi+A0n?RlWXb3&r{ze{I}jO=vzt^IUzku>0Zs%JWJ5Kx#(6(17IcYBHc<q
zTyiTxXY9YOr`$>;4vZ#C-M>uQR$jJM9$_YRd9C|8-Hl6#rj;PEboww|`i=Ya=}fON
zNnb`RHHBqi7|iL$^D-w(0Fw$X9*m5X8@I^?(M@;t&3<)vS<RuRrve+N`V7#!;;I@c
zui4h-!qBOsw_4*9C9^8q%wt<34JW?7?#Sz>s)goI9^q7R4V@cag^vGUV!9}$4xH64
z!lnkAx^OYjZK0(uQF<|cf51fU7V%Co(rGT0sL330;%2>%XiJA;b(`X51VKmD@q$pJ
zOVpNCw&$y}8}6Mb;49E`hC62=jeIe?P~SJTDbRFgOPBHoyeyW?qB0m+*)lrPm)la|
z@D88q;A%L%T!|@IrIToiqHqQE+fJ1zgxP=GJPTJ4g^SB;+#0Vjh~;60Loej!NJ$Lk
zKd=t4uF|x+JZV|s^wq$W{<Ig4NmzU~J2%)CDryZVbtT<Jn>Qcar;l{`qg|mq0!G;}
zytc6Q{D$acud6IiSTK5ibmId>SPd^*rjkjmevQ7!D&5`}x5NsRNdTo;U~Ae~)wM?_
z@Px~BzR|cN=7$*Mg^#FT1GEAi0!iP@rE-!Ch=0abb^bxD#3F-F!x|G!vIE$Q*>GF+
zxo}(gnmXb*-eGc?g{{T9ijC)+3f2sD=nHcsg1k^iX`s7Azwf}7EgSbK1FeB@TQHZ+
z=CksG4{RH{d8B}PJNmH*Y_gNsWFJ>zF0RrES}_L7aYdV4RT~>^0&}r7%Ga8-N_Wf>
z@7vK)q4DR*z<y-&D*Q1=eAp}HM~J)M24oZ$tXV_&w9-2?XT;BGL_>(>UG33xLo<qC
zUu@`DyV=ryY^Z!FqLO=Cf_EYV-D`jR+Q~OgS5=<;?va^GBX&Vv8QR<&QwMBvh$-v6
zX^l_eDzliPZsks&_W0o39Vu*?t8vt$i53@-Z?g-(Nc|1qVLVEG8s6=OOl(E`Ke7y>
ziy7S8YpT}AEr6?)0I8~rP1F=N5`kQ{%MkUK?)>V;ee+=(S0}KAyP~zTag(mHp~u^Q
zVQnDA=4jDC;n10$q0>FK<~l5t4E0Lb+|G_qU+BAYV`+`Q0)o5p>nFkoED@We{Lo9g
zXI?nfR1zd?@|J~bfZq`H$$|7sC15R&f@P*^q21MMoTvCgq^ADs`!+m(qQ36rt2-m>
zdh2zCtX!$s5sG^n5A?V_eftk6q~8*9M)8><U&E=FHg9?9WWCVnRyPT<Ic$Z5;~hTP
z-a9wyp`Z&N;}@_$VAp`&NFvX~izT^TNFXzqUy3ZjtVr)I@|r}(lISERheB++TdWc=
zwLsX0x{K9W0<}1bPuwodWg_BiI+KNnm~!Fm_>{@frjuB8!eW13OMaYTEh{Qi`ubv~
zyz-txrKc!r-G@;m+{CYiGN}kPawQ3byaNotLl(e(u_?6#7fH1Z2V^GWMkJVufk`vk
zh?gQ*CQOr{{^w$Gp;_mZiSp;guA*v((ZoZIMsJ>;`)bUn)P=kJMV%q7PG9ydzAn#e
zG$1@vuA?gG5?>IqSt2B+_sMNOheKVYiy_ywE*+mGka5ac(p)+Io3X+nTVY43F}I}6
z=^Sy7BDu0$X%2zo<m+78-zs%_CFz$rf<K160rp-@<lgfawewT~H0+HlgnK>J$ppLh
z$ur2im93ebOOpO|3I)3g-iUb#H<j+aUq!D>dhX{*NB(j>65Bxf?-P4cKK+&Y;~ajT
zm@@#q7t3c*FOsnmGMyxAZuz81l62+ZJvM;%C}pwT`lx?uy7^QvbNb&`wh`1-frsZ!
zVJy(^k(9#wq6fdd4s@~{qH=1=I}J9LtZJO8i+PagEU{5pSWp#0zI=JUJTy{i*7$1k
zZDq3g%V?sJr&sbl2Alm*;wZXT9ccDA>bxq26!}FWoZJWWD40vMDBpbP3Lbhi86>;X
z)nT@=*%CVbwPYU7tDo4&09Z0ca)DY0#&LfRjtRytNY^}(fBWt63&So5X4?4>;8|K>
zUa&1vwW%pzU%ftll*dH!amM^S`i6*$yul2Q9BCYUXis$#&y?T1xjH;rWe)PxImo@&
zZ>PP2dr4FiCE17Px8Q!-(`!|j(@RxI7AsYdH<tEWpb@fFCDqN&wFgy_%FdC3=KWoc
zE0bgPrjT)dbTGEb1;Y)d2}95(-839%^2j`+=lbDo-mzO7?hV5~?b=yYg8n1*MjoL3
z4$xprzLC$R;CJ)NNO^;O?Ezx?!sdNl&iTnvdsEnWWo$6E5lsKdlgNAefc5jHC(f1j
zXA(1<1iWT+l2~!2Im_zt0UOdAJkvk1e~Faj)n=ze4M`c?n2j!I-eQxL-J3?h4Fh!D
z)W7_C@7SXa_l4n;+`Y3pl3)`yCbDn@zC+TEOV1r8=~ziBq|3JmxFO%aE;gC*<RB@d
zDPT>C2VDPMIyuxL6S+s!KP2Z)-Tl=tL1{^df3P<I3#VMS3i`(%)w>B`!`Dd527P`d
z%qLMqnl~iR`^6&vOw}$)rpiK45B7_0k&>PG6^h>8E0J(e6N<sx$KjzbO00s!cI+BU
zkSLehMCdVyUxB@_6ksiMAZ7GPFM&Uh%I9Ae)k1QZx85{&k%_R*pE-Mxh2+m(fgt+D
z{#VG4@4Is4zR@o|@x+&qx9d*6vLn6W6(y;6eN1}`$TT5*@ylzCm>7CrrYQ#NIS@E-
z)LFTq(Q0knP+2+KXtOoWVt+yscZDBcxArkuZ{)GH>mCoIYj7_zi{En0J94_K^Yn-p
zeC_N4U+HJg)igJpesR;rmrge{*UX*8ub#kvoQ&!HopuLUzlu^!S*$gc3UH=WDG#=K
z({rp*;;3+%n#=8<Uc0v7sA$P`l-niq-A^w()L1-uuHDyD6A+1tYP!AcbCbo*4=*5h
zlup)JtsO`D-u%wDe$;!c%Vw>cEPV^Pv*(T<ZJBuLP@TdZ%gc+o74aiaui5g$OFaZX
z;4b_XtpjJCSvQpAk`l7C5?Z%bEurSP&yMShr8x{4$FDDlhnymK^b+MA6WchPV~QMg
zpv8yoUm6qe-T%dyv{ybU%^Z_T)~n`%H`xK`T&hJHSvhLD7oa0)_dAa*o8n5K)Zos6
zaGK<!z}Kd);M4CVt$p|wA49)SWf1E~0`%$09JIv@a=-iR8eK>V7!b#AaK}R~;XGU!
zW}Do`;U1Icr~)nC>sDI5M46IF=ZP_4w-(ZExP0IhiK}yPK$d$hZJzp&Q<!?&oaFPz
zu1S=4CT9gQ)tiVA3#lO&3Fm$tT*_C#eFSn<znTiO_sa4NEA$dn63A4z$!RzS9sHIc
z$3T*m1D1?3z7eVG>>#l!!laO%M=wuL0y-K<5uKP!`VRqvxDA|VHo+M(@^`T$WI><A
zqkvt0F3?t_oLPSu9k|mj{v%7J?!JsT*W5B_-?>3AM)}Hu^1POI{K3TEj7XD!i?7G7
z+3MGoO<mH849n*-k@gszi@sEDk<7;x`hgPu!pw{^&=%N_w90g|JM9Cvtij*9+^tfx
z{wQ+Xd7`5wue?BsKY)CYE6`n<Dq9z~Vb|~(9v^9jiV>w2+*8Q&nkkDtahA|)@VbhZ
zpKk=Y0s0O79Y@Nw`0IW4CCr*<<feX4ugz1gC$2EZ9=Fu2DN$LO(i;Ka03TTnR;$|4
zRmkVGHusX(!_&FB<lY-%-GDr-#cv1t*uxOVCcLqExF`@;sG-Zhrv?{q6=!1l(-&J$
zjt0{1*g_34-=j;oxs(jdxN9r*!IU~Ev^Tmt_bq*ozd+tSYMf9G8wCRR-KWnI_Y&A_
zwfGzg>nyRMM@3rb4=kpDt+reOVgq}6I}r<U!hz(6{Jug@okSmZsIAJJ(4W$MdvMiq
zsnjm^%QYOPfZ20Xw69o!DE-ZT|6o3L-4`@kd2)lm>ZJwJ)$;3-=A(XN+-Bl~12*sn
zP2sr3QX4cHbtVVNPoxVUq7Tuc#4BQ8Bp64}U(u8mGAl9q(8E@`u@`>_F_jdk^E6^6
zlSTJB4_6YYMaYO4|DFNqKa38SmU4yMEM_N+l_V~Tghb5yJo+fDgv4^MNUdLv&^nUh
zv796q-klD}Do<xj*saU3S16@u;REVf@LrjzS`dUPYBHwPcgrXSfi>U?p!}Q;BBf_Z
z^`~{v*ACR5y?f`8KhB>;-Wmg@UD@|=r)hm|*d~Ma-q>E`5xfWfBKNUp;Tp9G%n5bV
z#TrbDh#MG*{EVti*u9!kZRu3Kt>M_S6O+##Yp~T%fxpl^sZ$`EJw4@SZ_l<^Y+H}l
zT;A(JwkUMi8ah?dvf)I0?GyVdEB8IIHhyA5i-bn&k!fGcDjC{c*|M`KFRy85OXcpN
zlC0OXvK~m|_Jt3zUs0(9UM@Y7Kp5umIuiLj(5aM8Bl&JDC?&tnHMqM{*?Q*d6D>yu
zJUj%+&OWY?VGKG~8;Co?8#+89OC--|&tl7{*ne|5rPFhbcYOF*PtnFlHrCG%`nN_j
z689Qc-{Y~?ZSmab{ulSvkA-Bc9H=`2lMDL*?4JP277}+x<joM-ogVCiTO=wPzK|ne
zG6ih>I$b3^gM9g32^T$Msx}&{O^IzhG5BeOqF+eRQSc{cavY2thsY9L_ARUmBqU*A
zka5$|vtl*v)hrH;DP;X8O)hK@DQItH3z&3H_IGG1(J`cEPLcIH1`C#&{sT*W0?ux%
z(CaIViH%&5h>PBAtTY%Za!FbYiDs!wDs#!uCk=oun3(b*El$c#xIUP>O0JGTJYXNf
zWH|iq{A>;n{})}&KZp9VRLY~@kaE!dcDu`#IKmUtv|=f~fw*sA9PIuihAvgvDzz9m
zAnLx1-+Y@?ne{!6EQ=}Qe3zk;Ttd#^+mJbQQp(5gRu{_Ug=%D!D^FsL&r_phuEnBU
zSq94!FPRKcM_nG28;SceKzdeBIT;m!su2_mz6`wH8-&Cl-)Lx|j9LrkV-b0&OYtV-
zl8ZkdSqd*@l7fCbxu(!5x96Go$7PY)ZVwq!+SlC6$YD@5>PkABfosx9J5wIC1tgx1
z(($8BI%BBW5ge(q80u{@F3^m+^Oh%rz#OJK{y)uOx_?JS(&o>r->@Qw38fhDb65b(
z&xTkOT2iJE?@~yn2rdZ`^0=0y$O_8(!y_jD!Mcc7lph<Jxo67j_wiI5zg*3s=P&{%
zTDtet8xd`!KeG1W3SDl^OwH3Wq!W<)hM4nbjXGHEG>9!4KKcSJG<Kr7^Uko`qksY>
zN0wu>*eW{m^Xh{7?wVM4WZ5d<KIVeOT%_F(y*^l4gqyz%PyQ=?@8qn1YW{GYZ~Xkg
z{F+-wT=tgjwdG?qZoVXkM$ZeGg^`_4Z|V8+!2vmLM8oXzwMQG<_IKtJfN})pg=6=V
z^B}261$5Y^>rki^D45R=oFDhq9lkQ<pPlSAcyc6scg<LN-L@9HYxLrpE6A_p0|)Q!
z+4A(x$YN9~zjJ?E<I%O{?8LW8jQqmK*k0Nlq)oaq@<5z`h3`Q=BBz=srh<V4enHJ>
z`NhYGiLh^`Ph^eqH73myk2D@xTh2klq)gd_--A62biw=;ahi<OP*`AyCm@WLX(HU}
zsqr>#Z?f20w#9?>-dq8TPcPKB4UD=bp4eOY&p)rduM{gI0;|yzKe_qR+eboLvo?!K
z6tRdufS_MTdXaH5mWojZfDJkZbQ_4pgR*UTolOlQU@QwyEU$l08yk4+uQ%WH{$m3J
zkG+4>&3}Dt;7V-w<#kh+ca@j#x;(Y+^6nV^xX9p;%j|lgP;ZyX9R?Bl!;E5}ug=W8
zivQ!j<3GQxrRBDtA5VQv{|PVxj7=<jNEI%|PL>5tl3G~^5ic3d=B3yc@{3@LSFVZ-
zl@A?jw^-Vb4aWL|@|mGKw;%c5iOQ<eZ=8JX#}nPISf0Q!d<pr5(j7Hf%3KQH8W=kn
z^~!Alb*y<O>PUGP?wA`quH_blN;RI*Mi+Uetw2wBocfDY{gRBrZ)stN8<jAz5K1KW
zdI8HM5j%_Ho+cu|a3Ef_#(9b-L~6`!L(`=jo<9+<J@x9&*ajEic_ofAqlB*E$+U$I
zY~S*jgIxM;A~K<}D%q*n1lS`-N6f<Ebjz7kdS#4)E!5%XkQZt5;2!7++LuM0kaVpV
zS*hdt$UJfA?Lvy>4x>n9bjTGhqgZTo;lJ_JN)4pi8%FMedaejEC#E2)=UiD|FsbJb
z<YV*HXTi@Yz|Vo7cPSKLoKKqkDc#qHj5Z(h8{#%Ik0}vAZ8ubJG1n2=t{r=p-2ZI+
zacmvnt6EZSE~cy_kbX<DKqLm#P;A{iM7-lKL&Q6>O=b|P*!Wgh%mS%ra`<Ad2fOyk
zv*`OQ0sc5&h|KB4ES(7Xh%3TJSR4k1ytfz!K%q~J2J2QpZ4>=P;@QhL-;7<meiw;V
zcr1wrSb<eo4G+N2bU|Ty*Y+he%5pntei5E>|Jsog&h!kJOenx7y~z9V9uf*L*IXG+
z=D_`w_6h}B>aY_%#LDX#nOKTskI+?8-uQa#ZIq6omc$zwIbzs6hn4shYP<gE3ZTLj
z4B16v(9qwkNy`d5M+oFI%hTI%ZxZKmfx#tk9xcoF&h$Ald$nHiN&kH&!UC=O46*){
z4CzSxd?n}ttOY3gX~>Ib7ZaB&{T0gPiObh-U%5b1f>Oablrdo4AQpvB(NVfHbS2s<
zheEr7{&d6TBJ_hKUI!>siIXS|14>iop`j0?=~#P#j>V?aNF6Kj>MBd8WawLbDwCRV
zrZ=yyfvvIwi#Z+^un`GhJ4#`^*|g~82pEa-vMb#rL<NFnMkVPc!`fQc773FM4*lQs
zv5_*giY;57*{2(L<it;pK0an%GCL2Mdwt{g6d#w{{3?srq|)0;`^&1riQieuJsR|T
zQs^VG__P+ES);Q?IwQrioxXz3?G>nY$vou?N{YzbvJ2EFX%ADfDb-M-CY_IZ)93p}
zBCA`>$lhwdDo|+S;@?3+pXWVs@2Lq7MD=^Pl85t%$|NB~SX<6l>iOuNs~L`!`E=*q
zjKgoP8V#c(OY4F9fo;J<+Xv1jhoYd2Wg^E+q}@$cH_+3*7><l=4YwTnnJgk}TSAs4
zW<nubTnC>w{xj?w=`gd}m@K#&%&daR&1wi2-&C{f;L^GNr+uVo`hhge+4-_6voUh1
zZ~ECvZ5sN_+OxfSCHgEp?bZZhq0<M@iL_%D63P=oapC9b9NLq~s#~8EeEm#pbD<QQ
z($}?-UJ3F*9l%N_9YcicVjh2aexq1<Z$aO|=87N{EwDP{el_y6ISU&xh4W=Zq-HmH
zpd`~r@7!`A9!p3FnDSs+ovWT?Ei9NCMmYxF-V3ys39JyGKnQ(qj&1V!0j3ihE&FNO
zgG;5-e#V2Nz5MAR_@XkN8FVC;6h&|N#;6BKS$iDN`eVQ=lQm)p*^~-Ph7h6-^N$HT
z)s{fx+nQ|ib>(6pqP~aGi4rkD&?rkM8mRN1HdU9P?-KR>D6`;_KTp&F<Pu)*C9FUA
zg+0F~@x&f1PX3M@#1EndqyssCA3}l6zpxYH322WHF^4of!3|uI>G*;ax-jMbT7nz=
znhdmKoQ_W3q7N)Vfk%n{g_!d^^(vS%uq@8;nG>hQJ*ZccQ+^gDR{~LeMhN7E&!TEE
zA_Dgl`gz_Xd~>i`cFG+?=2GYxq+14k^f*(P#S}7+qc<Owsu(SJODjzyIgZ@&B(fKo
zkOU2eVhMgHepJH$<uAE1Fd7Q}qfq}&=vgq@0u%o*8bgmIhXgkPR`?O3mr7XDod3X%
zB8i{t@KZBPz4S1eg}#TgbCJ#XJti>xKMi38e(>*S5agG939RFj495Xp*R=2foknF4
zy*B!mdPS8I@NP5tRF}ir7du_1K^0xes!3_~@LzS2uA<0rrIqpcp35@@<1N9_I@_AD
zvYxUe?)#ZdJI@>ZPws4;n+o&g=r*deVO_McKVs&|bKLswv31^UFBT~~r+0)Zx3oH9
z7yfz~xxZ|-*<o$mST##C7S-6gnsRG5)Lq+tz?g3oa*CUq*Y<T!M0Y*4(W>e@(Q8*5
z)%*xFvo~!m=?*B2Rns-$E&U-XShpW6{&BFk9B^j##r{+IWQ#XBxJpYcsOU*Zq#ib*
z=A*@dxJx`Z`P~;@xaW<bH6v$wY+XY?D;PN0g`d9VmLp0>u`b@Zt#vQ@0siVE_3^`|
z^8P@}ex2(ZrPB@eg;w;zMVkqGgi0ajUfwov)iz349XGq8WPbnbGY2Yak3KiM;ju`N
z4n%}8&>E@U-svjr+*V;ND=Lt2{>Z9}w?MmR^Gm1dtHUi!mO`T_96Z(4eR`-cOQe<L
zEXJFtSzr%xh|c9?&<6&X7-TF6PD{<IJ^sRG{2+30^9#popK^BXsek+J`aNAv<kL;h
zAFso%)g6C+W9P}C!i2tX=p^|Ts3I^XkBlp&6jUOnoN5>WJ1)VUl-2L;bh$eB*1wIQ
zIQ}-Aft>B|;WJ>gE;ug!oiY4Buyt@6I3e=GG32!r7Kust+9)Ol8M21IFeZ{Xj_$@i
z$OioUnKS8k9ijLa{(<>PjHqxawL49#&IG702U=SEX%J9njDUcSY`Q;a%}ydm18oFy
zG_YmMfqk$aWm#t!B1f@x;0i7xLA~KJEkuHr`zmjQ9EE2yiT5FE!1`eCI|}sbFYkOe
zH~$N<(W#I-p_jlZS2&Gg7<|UxkvpL!>69leO6aFuxQ6^CiD4k?k}OrNhQ{k(Y;C(+
zYU;C4fgs1Cvz6JUmytCcCx<=4366jz_qB)6i>W<_cAsj=pS_}RFAPm$zqnneX5l~L
z81&)Gmz@eD8?o_o6&LX@tF<<*fRF4K@bCzB4R2-hk#%A|-f7};lChg|Fb56H!6$7?
zhR<6HZX(|V%SZ7sTH@IqqOr?Jw&bImZ$`F;cSy6m$cK3U@vVyN1K^k;zTg_Qj=(!u
zR_0hP_v%pV;C<Wt&0}?S$G*9F@rF0-f!A_RL-L-#bh@G8^h*Smq4D&K@V0wALnk}C
zP7M_n4xNI%62MzNN51924Qm0X6&ds2#^J~cielFCZC!<~&h6DDtpOvK!=ncykIl|L
zccixBz%#S^o++td{V_+P6=f9;o$l^BHCPB<F^ky}uC6Dac0)_Njz#1-P-N7#*l&m`
zT`PLZn^Lee!j@{U%|waRVsp^d^U`<y<G1v__!@G3mPD4!g0B@7;A?zKQ{LUT$G3vt
ziSy~AT%xYS-X*HndjsjY>3~Tt^%_aOEsGgDkmJmM75vZc%%L(`D~XABf{E)YTeCmq
z=QyS+Z+-O9TPvp=94;e=7LPr-Wy}2Dva-GNTedtIi)RrvUnpGa|6tcCSzv`w2S_fa
z6iGf#2C^iPV8zS`lB#S3NPxi~q&egtzq$9}k!HIOe7)F*MSoEFoqcfq7E?P%$fCVb
z@xnGpl}_8Dm7?FM+X7cy(pWVP*Y8enZmXz;yU}twSdzsTN_oAP!liJV>JIqBqKKN5
zr7a5|()SbjQ3}|T%anm^$?U7PSTu84@91>!KlQ1qsY=7CxicpX6_eMGYQvqRG)-*M
zcLCYB{pEn~)sy27ZHq>CJhJx4Oa8(aj<ueh2=V0TW~u{7(nwF#ArP_mdB@K6KJ)$W
zKht||%!`;(0u*@-Lg}~e*tiE=3F0d3+%UBd$j(`-8p_UOzCbs)+hgE8{$Hubg}m!-
zEiqbRoi2N0vC$ZALpI7phG0X!tE0@~9lv>C;FfW3UaZ><k$hs+9uYT-#WfT+<eSS2
z)m&B<PrXlUuX5*?dGkdgo3AY2U1b+zI}Hs+PjhL3SXxv&Qd&9Nl%L-;TUpXy?UhJ8
zv39??B2Oa{y49A5+aloS6_n&DTtbnS<TsPZCsY?WGkyxYAvUJ&FSg_2ZI^ESIym=@
z5O;-q^6cxcKfB|VQ+0KxUfDq*df9wPbs?V+KbzVB4~ZG3x>7K$=We}p+ePG)oiCrL
ztv&JbPIwS0tVau>GfI<q_!TXckRQ#gpWbls;`sStXTiw%;ft4%e@u0Cjp4^p)YY-Q
zre;@{8^0Bd0mn0e@tlj;5q|2$r~H913XUw+<3kT0T2BBv5ZmQ0wVL&w*l{P4Bi3)&
zX&=004a!IQ+X+Yq@?Y0k$OWzdf7*!bH;A+l+fi>@IiD%jZfLQEp&uB%$yg+?b<xB7
zp=_L4k2vtR35d$9UV?vgr$hW6ORerYfea96l@4sfb(Sp-K`J^Sn9+zo#pfXx$(TNv
z&zn{=0@lX#;@^D&|1PG+)?B{}TXQq<xq}NIVK0Ku$&<Gg+5xGG#zgBLR2%Fq(O(YE
z+%Y_S=S=XjzNGJrxoRYgjwJ5sy);`|I(w-X{y8*SWrp{IQcs=1F2VVQL=D3fJjSOd
z4$Y#U#6HU1P}>t&GnWK05(em{X>%4g_TV~bZ#*+K-FT{)<PmL@dfL0hc=?3=x%!x<
z!b~8baM}0BRftxs?IkANjUL}}pdL($|0UH$7dE|xO>mcezY105#K%&dabd6ABf`w?
zxk6%J`xe@$L)51UoNh8$houwkOedeHrH_5v5L^Vnj@;A_H)qFQZ6paU-Bn$ZV1uor
zW~oZ6nw{xb+Gi%l@-q;t$yoY(WGp=kF)j-Yd$9NLwRhobPXWUUXNj|z0@ii9S_1VU
z?3$FH*sZF_&8<+O$6;U?fl`w8Dv9@n1yz#v+VVj|Nah^0SMl%M^?ztgDwRR|pS$qy
z+$7b|zD{G&XgSQE0!yw?s${;+$f47+XkVx52we<)ovr5c)$D{HyCxANj!OzvszM36
zn=1!29TycSm2NS*n+J_Mh=#-}2zzAF&QFFrv5IVF;!mh1f$&gS;{QSaj6K6qu@js#
z6>=H+(ODwL@?%U3eimZ7#i@d;s}?j(V!KPhxEPwn$3O1a-IyDjy}4=PN=Yn>OUvSM
zS-GB=t*AYymIr#HhgqC!cnx-~jHBZ(&|LAcVEeJYf|jO+ER4?1Q7Z)cV68PbVwcwe
zlKyr!tp;*QdJSYW;9E2&GgCepY2XpUnJEiDv!(0QK!Lwwo!8wJv#c9jDuq1Rex%ps
zZX7M}496WrE##J<MaUB~r~Q?%=y9wgVBk$<3)J@9P<^r(a$eO~aipP8!<l4B41Sv?
zV3n&3Dh?a&dEUZ5s2ZTR!K{=_uxW(I-3=@SU6XPygitjwPs2SiJ>&7rOi#FTO+3Vq
z+uGCT@OGEx77U&0?mj(OkXzd2wfFV3<{JDkCqry0G8&64Vwk}Z%T~J01+zQ$m&G=>
zx!rA>V`ckyZYVIjmDwpBn?c4_NIr)#aL-rJ-GDWoCs;lB4AA4T|4PG^WCB32|GJQR
z27Fe6u8|x>?z~IFM~{<_AhDb9E~M-8j3qA+_KV9n=POt|IUUhUmO7ZM*TyHSruo3O
z5ZEa`5q|c-s5c*IF4V!m`uo>iUU%P2V2eVlEE%o7Ts>Bz(kOwZf3fG5sR-?(k7$vp
zTY8Wgqa6Qn3G7{qZcm)1n#+eu5VxGb3M#=}eiqCpA!(u$eb<QNzytw3_Uu>itJ%2)
zC3PLHKCj$Y;K)_b(e2oVm+}Ae+MX)8e!U>P_1lQ<2ZW5`VHeP=^ck=|X!%&6mc>Of
z-7?63cX2p$4x<bC`7~cj_u+5*sWSdFqM4&U{JznraPt3xzt88KKc6E+ufj1A>;iTk
zj7cTrHby60GL|KmjMO7GN|9gZ^MrfR0|>rBf`3}gPzWcH&8P-{NVf2yjQTJ#=&|DX
zgR@Ux;PB9^v#(9RPRfP}K<_ayb~ezqOlb&EF<(sPAuV@E@R6NnkA@wtIXPWf9j&NY
zTc(M`E*dMwqWE911%W0{;_|(PB5xM>gRU8+r`qA^kQxrSnu0p87>uIFE}{?6*8^K!
z4s*niMHWFgL2fiD;RQi%H+i&duC6fm<o4}g^3qCT@`~HY$;ZdBYhq)*1PB&>V|5!U
z{jab;7#vBGpg#ync%~Y8m-Iuxb^i^lJ7>{CP5B|rgd4(-{>?XfvJL+qMACM0)Hk<#
z`s~^1-PDEV<HLURs(<8o^NtfZ?Kp9#;aDCp7BGy2#4<?Fz~2)IB!+vDAJP(FyJx|!
zgU^<L&$7tRLPiT028)@YEZhS=jN>mMKf*4|zCQihEcxz=uruh3^sPh|v4_9HWwT1$
z+lRdVkD{Y}&BsRqzOlKk-b2p3EFh8f)<V6%vqWzMY{FTt>1A_iDE@P+DKK`brS<e^
zz-Nncn5=9ehnX82EG`)-H}W`#Ijq$B-b~V*blF10ANuAQ{41wVBW?7VgawJ<-$JkA
z-$RN>y4PYCC?9~I!N8t?kAHCbG<+CItR!{@*#`bilG0(#mJ%dAkptPL3HOFoJ~c{3
zQ4S|dB@Tv8Q*VomRhnr`QND=9WmL2vS5vh86pW=JaNMc7H_#&>OtLA`UGRZUD9`#X
zTP5D{4~bMKy}ny6&H6#MLYjZ-6fK<1zRqLgZ>iWhdi)7a4wA!R;jf^J;|sv}kT;TX
zX93=Eib~&tUQOId{yTO6{JW0a8*cz=y#@=ml(8X{ENTn~c46=E^g;vo*C@JcQXtIw
z1)sy<G5?b(5)ga%rbdrXXtl^4d>scb0DOdpZ#3o#bNR?kJUWGveik>(4ME?m=8IWC
zUq^P;@C7VnFN(skvpLASaMW7#DwBh21V$b*Pxu7Ec+W46$M+Jc{qO}qfGrf7=<~Y}
z6hF=q^Q(8GD6*F&;1jey2gEaO;ADeCZ{QgP$nQB!0yB!8##G?G5`KY|z7TWTZN*gZ
zg~8XA`U+l|uOqC}g*$x2TRS-(433{{Zay_$R5X4Hyf|ZQFccarGae`2unWA6NkF@h
zsBQJxcB1+7%*1+KAWy2uFV?BO7QjOSNDiMP&GTvWA&0_Tv##RQMWrjE2eMqo7LN0B
z7>q2b#ixde%2^BsTZ;XYt#KRFj$93gqc%Cz2DgTdZj}aPxj{!RmzU?Sau&7}Yj=*@
z%RLqz*W?bH6)v@u%hrmNR=tv)qcYf(d~FV2y2PJ0fwkSpRucnTtvy~-6CWS1o31h#
ztEX$mPf_veNO1*@BO8n*ogQCL)QFRBjvVhkVm#f_cwz)<MyV%~@=YRAq@tmwwyqO-
zdasdpdzM%fJoTISx(Z!u16z_s6IA>Cp}*pXl>g0U;eSN0YKt13bsOYN5mX~7GB8g!
zA^#`{k&y^^TlYJs-$A3ae<kij*KPry8Ng02-Z|pEXP8S8<V;i7DO=;FDwyqks*6e;
zX+xgD>th>Q9FCR^G5F`!Q8<?dyFi6}7xq@hmUL<?4Uf7~rKWm*zwd6K?qGE6-o1a=
zYG&@C0`)qZHb<57^8`}b94#AY+tfXnoP3ji&X(rnNV9P<SSjAdw}{0SKJt|uA)kY{
z@k}BS(8a)a#2(jUr;r5gKENjn32$$*4oiArGWxPYHH3U)e9vE#FEne-0Y$!5lc$k$
zIRd(*`=FzyKoJxO=`4}S>QI%pYif3MQ(r_mVkJ+fRH$C|xH&uyJKNf-@zvRpY8F42
zuM}igSE++84UFV?!TaFR?*BLH(je!>1?r+0S80)%1JeBsaz?hU*>9^ZRB4M_J?=6E
zogt@*<ifUIdx?dwRU<QrPoxF8c4Nh8Y4KRCRi{$QNWB8gjoD}q5b>$z#mW<zA)e2O
z@F3}GJL$M0x9Y(hxk=$IX6*FW<_j$bS-w`#sj+}9V+-jL$4EF-CsKC??e#@k79Vji
zD*}dmm5{~HGT1iy0z+EuhSK^jVjtJa97b_jxDn+_)jWfat1UEco!|<&oNTMrYPXp4
z4bk49T2xcP=CWD#g4_bH-yN?}huu09o^>JETQ)drCeigGg_c>Zu10bxmIv8NtI8M2
z!Y_-xfnue9pfb-G9Vjkn4I6U!NR(a|(d6spIb0^SS8CG<!hyfb^&)0&)ntWlpej!n
z?kZA?8f(Cb697R#zP~cr2W04X!2C<`Nzx^nsywk&0cxr6#A0Iv<V(yPCR3;|DIE^4
zI}{2OxE*S<N(?5?6&H9tQcGRX;I+BTN^iU%+^M0ta_FoamQJD6w;QzDJdS{q<C5!z
zOtH1t>?+~$qZ*~hBF$BkGRla}A>Rb|E|3}XKvu*&{Ar~nl7^baC@%DPq_&2T(Pg$8
zl-_1<xI?36<YW=_+5x@A#eqUVuSF@&;nQgi1RZ%Hvn|XQMYL)kq@#evfb`0hhBl){
z2kB*jGb=+MqWpn&C%B#9y$S)ZVWb!JG`H=)xj@fTOW16Qnx`)SiYh(v$=!MvTdd*n
z!Cw=-soT(ZQ7KrPWvM6kax6kdqNw!yy0|yL%r2EUYYJ5PGB%9^Y$RShKVMfQ-`^l(
z()x53wXY^0|AD>EugPWwxY_i6q{8V@$?-EN9b)<|;H-ZI&f2^<XZnsUcl9^Wv$L}W
za-$*^tq5sMGC>ZHnQL9|cXyPUU=`L-mywDwm^tj6-p1B$xHYcA+}z5sXmF$^&uoNu
zi+Vfi2Wwo#KZ(poqGctAP31$y#Y5$})Z5!SI@+LKX09BI5b-YTEE=HRzM6j$4VcOY
z;g6XPmy|^#)Z0tODov)!v68mV&Nd<rgFS_|(zX#2Z-sk`@b946x;$dDzJ}B}J!*1?
zs0+G!uPtVm9>}-riev{G6-iyG0q`Ib?GDn8Oz}H1%i2tc8c$OCBw+)lMmar8S>`Gz
z<>utt3uImW``gXl{kA-%Q$)K1a5|IP;<YPsrL47sNFDyQVYeH8@i^oXWDlX&&Y^nR
zy@Wi<@Ucgb6o6+bOaYygs2<6dNxhRU*Q8e}%SMFywmhp_=8RhN${aGc)!L>PV&BZ>
zvl$kH!NOqkv%#x#ZzwWG>~gt1Vl3L=*2|MQx9EGQ59nQTh%ywW>VPc;6p3TBWXzvz
zj3PGvMBvmJ3Uxebu1lul`2z(upKHG|*bxded88h9WxX!k?rnDOr)m^ZiK$R+aw)RL
zZ9c!dZH!tnUTxNSV+LQdP&8U$Zz;)j{S59s7yTd9PWv)}59MH_1yAPg6cTC|d@QJ)
zZ7+%$_UGsw!CaxtTv%U}n=RBUMRb~oO}nFL*RE}zU;iq0e5TSRQhElDH0L(8H0Mf*
zSY-jYXD0e4aL>Y&RBe}}>L*O&hfCG0Qyh>a0I>%u#0H04YS)Xn8t2bYE-%YycZqZ=
zS5-@u%Mk4cdS=wn+HMW?4-4I%LNWG!JeFIOZ{%jH^NUSdzg3Fr`Pobs(0haii@S0l
z>gz7c%`NNpHE-3+OACwZFglY;oJ}Fviv>b2a8k(H$}4ILCtVzX##B*Zz@>lE(JR(l
zMN0jS;Wj@|<{Ztlu^q4;`DBMKo5eCadRnkQp~Ky#kX2%E^tW0n2K>>9S_^XDeTb!M
zG&FG1;Nj|M(w3se0Ti4G1N|+E((WN_$z;VF7eeQf#n>%S4fKUcfvZJQmXs7+B@`8@
zW%*`3rv}Szr}DXdkG62MK<^caf_2gwT2?d0=k-3=#Zs%Wl0qe)DYNMx)~lWdCdc&G
zHDVXMzqY_bdij&t9Q@1QmC50r#PRKDA>st~x1K_gChNy#@|sklrt$mIpt`6m>T#Fv
z*F}1Z3wtUoP#v*Vs`j_2<!!w^broekVA|$Zjz*vsqLlxP=vi9`=2$=+6bx&kP(CGb
zNJkbvpdTXYVL?y$^5%bZqn>nIrX=U0R<g(@Am^a{)>u9aYh>}<_wR1KWu{apPxNE1
zwyibgqg776l;tt>ty$+j_U&-}f9`GF*O7l^a$?}Vkp2uhMHbBZw6;64<uO<#>)a5m
zlEp705F_K`Tb62|tmzovjr=Cn^LLP_Dd!_R;nJjHNfQx5#)*-ACg6Pvq}3*Xl}dcb
zPs(>~-(E@rpXPS$xk7w<rL6GCzFq6g*&KZ>M8oax%#XRzqimPQ#l8$n6Kp>EWgh+w
zq>=3eN+wQ6sjSxc(Ytxb#8SP2XTe{QeAcq?0ksOy*GI|BwWX%c)gOX9U=;;`;8E06
z3k_g71IA!p1ZDTbyxSze%~;&f(P`o9_@yDPXdDsb*92(v!jYT$*L@|N(Qd*RZtU!`
z@C~UCI_iQs?*0><W9cclhJswBQZ1s<iXCjRtGmVvbZ0S4$F1})CE%JoCY3@hrZI>Q
z_0)J+xz1!RE=Doo7qA~t=@c%obNkaevJfFD46c2tu0NJs5|LAs*%~xyq%Q6Zbikv^
zv~E=YX{#Qbnl21h8*A3r)ogCE$qd2qGi}wSvC#0ILwklpWxJo6oqc3OV6fHU<LTYH
zcstRkYLg59i|w!JJ*cpk%uWT1PG=~ae1=fIT<MNoZ!T+rJ*fD31-ZFAT9&x5yQ*x@
zP|#jC>WfcmMCCz=%Vp!)&XAp|lrbYC<ulj;<SOY80)iPRI%2&K-Ejv0`<XKc7s|@3
zS5f*auaL6I2KMSfBA#0bcPi6PPj+cbXVi;c@BnyxdLokpd9!@BF<<MeG}oP+h~!p`
zAwN;@;)jO(6%#urDoS@fwQ22_ru?CqI|g&31uD<L!N$Oh1OH2&9+UssSla0=Xo>lx
zvXX{=zpcivrQWKNF^pZ^O-fBsY5n+-uEsO#N<5vLO3Sv5HLHYXn@epO7#(xb7$#i>
zxd!jTN7VBKZs`m4MaMdDrM{#u2;+W8<d)#{okZmC=9@1g?_ItH`FS}E^}!Hed3h=T
zSbhlkGCl@>!TJ2)O+8IujbQXE700)xI-V^~28>=acwT@hc#tiI(r&+_H|}NP7*=vI
zt99>}+J|qO44gT01;J@L4rUPU&gOHn(eub`us5PNHXj{5@bw)*-`KgHNn-ZyulDFw
zMHA!Wu&5$Mh;P9nw1)|<LpmK+=FEHjDV=vk8H0Zs>vwjtm#4@pI5{5k!^;aUB9jnO
z+uz&=6Osi2nDh9Gl+Aq$eJ>qJP2^W@!P>ySlw{-+eqJ)aIWv*(pZ!PL^MdQ|nTSr<
zQmK|~JDG|}FcVv8Z!9`cqS>_VJ{eMwxQ@Ol;-P~yM|@35<<4%8kiRFL(jSvNL+z=`
zYe+WztCw0i#Jy<+cA^{T(!{+HrpdV*m1q5l%x7^I#RBRAF-uYA_Our3RGw;^zgfqk
z%Nv1)O0}yswLQIULV1fyZ>=3GE*-5f+Kp~0N|%v$wGhig-Y4{pP|DXsAj#7eBN8<U
z@iRsn;WweXkPH*C*x?X~viMv!;{u(Poh6hT<*}$(l%vhH$z$QJZYGb3(J-o|fWfS2
z)<*~bU(&t<zNzc_U-vydZOPhOvSeA3WlOSb4ez}-7#qANV3uvn2D8k@YzTxA5>^Hw
zBmt8^(xe2)YSMHhzpf-r(xyq;v}sea1A6}7`<`UWhNSK1pHBeEmhL_GzI*09=X<i!
z8!Y%=qcvhBM-giPc^r;FBxtVp=F1!bld!~_SqsD#xq-#bNH(l)PU|Xh*kUO=ZU>gY
zniazLr7pn6ivB0z@~PaYJ*^E|Ca4}N2f7F<%31;m`lMJTCeHSoJZ4Gh<+Q@h>wHc5
zHgjgZzb%KKoY1Z2umu)_T_WK|dE4U~v}`sX|4i;K^IQFj*d%>vCC2q0nse~Mn4Fe$
zcU_J(-&?8AjT5NYaz39hXq}vBO<Fu($)<eUo#0Z~w*`}p>50{glYLv8-D8}d<*D%M
zViV)Nmb41H(hDt1D@!6!=xheJCpjfO-Q#mPbyls6!xgZJPD8B9?$sG`rQ+;FTe?HR
zk()Jc0d(5pOvacxvtDC@elANu>tQDL9&kec7G3U!#1gG)1C+Qx4by=$Uuw^B#~7KI
zP--*e=daCY4t^7p<<jzsc&zBSZ<=4EYcngczhh!3<LS7tf3g)M!Nlu~r5@yUt#u}t
zQZ!KJ*S@EZF?dUz$R~0q>(pR5e7*_zJ;2Etf_AzA?$~&=36UqWK&v-I*rVf)w@_tV
zl)pAFZ*4yDKKhBos1$l)(C^9nKKZ2inP(7v)%b1@fNK?@xW7a`);!i<y*49JqKlR0
z7ZOLwd-ClfxrjX@pIXy2`~c$(xTesZ#2c$tK}8nw71JP{iEunVwRdA=fyC@p+3<hn
zk`F#8eUG|3!bji6{s??<O?pNgjVKf@(@O-A#})1tK3;IFoV0jg5(x!rzFi{c3Osoh
zZ;V)Ka_Q~Xb+4$RIU<u(tI<CoHYkKbg+UzS5h{)N2d)Z(Bvz&s5F$k!at!45Xqj9G
zUJo8rnnY5qM5e}mGI7J`wNZP;D*v&)VwDH~GGVXsu{VGRu2D_-3U`#xpc^3I5yz%E
zRB;+E5yjysL^{R7wfGlnOj(HrF3%_CvSMTG*k{2-;k^et;NFkjqktXct1IwtXJIU|
zor<fxk0(IB@`m^-9P_(Na3xg1HzCNP%X25?h}A7gGg_4H(qvtNMnnZ#B;|EhKlI?W
ziE=8~(rSbryw}y!hQcj=BbT27>1+Xook<?@GAQ%9H7aroin>to1ME{Oeqb5rfgg(=
ztkY&C{6Oen>Yw%2AC4Tr;YXjs-oGQR^g~!@6x7*krV1ZQn_WvqlExMdp9EZVHC$>_
zC{zNMMFo={h*&TNRP>%>m*_cv0OKqi;0hzWTv8|Kl1tsnvFH^y6y2&2OE}ypCiVrN
zO9i9-WAUrFP<ZRP78W;zzX#6(T<eh#<^sB<Q_9C~%i!K(svMDw`vo>HH%i3+3P<K7
zj}M$t1_AjE#$pS|H=_-JpySLa4(o-wE`)6+n}BVWGAV`WF;+o#Rz3k(d6}67>@DeS
z1=es#%39FQTv1k4RaQ_`R#x<}wYWPgyQ|o0E$+(B>MpiYb0tBUILhj!=CX%8d7Irr
zd+RdV8VNh{DF4I@-kRFdGId#Pb93#o{QerJv!*|PSwSCq(O0kx{}gMQI<*nQ8ft4B
zF>nRgp#PfHRb)f{``GK(={-xt-UTCYoh1|Fy<xLC(gI>lGJufR!5q`;`v^XltI%0g
zvGLZ_{8X#XU*&b!mHH?>mm?#%$qA0MSh10a5<s0~)jRDr_#vAnsoWE2Fc3)`Hc!Zl
zRx33!x!D(Q%W-M>dW((Cm&Pj$o-9*g5{D;@5?WPitxO)1nrKQ-(4wd?7`+T-W-n_A
z>XRkAOYPQpofc&~{#x!VPS&|KBBq$bkw;l$<j$gGU*gzX{NeFnX>vR!MepRPQCuQ9
z9`02P_H(d_m4bR-+)Z||ED;UAq3w*W?8Dszz^0H)<1xi-j#8vnNtNkEKE7z04%g%j
z53A*TF`r8?@!gb|<NKnxEVI?dsw@OXk<csJp*+=0{#~slSOjg0IpF#1hG(5aNf8VE
zm~xPc8M}WOQ_hsadGM74C)B4u&8gO~Ii?Cf;_;M}wXdwpVJ@|~llAJ_KT|yAD^0M?
zcmw`NpASF28>@!;E140hDG!9fa^M2P@V7MVHnd5o4&8RzY61DFZAJEyOlfRXnNoJu
zk)g0A8}weQGShKYsw_3fW|r8C+VR~nnRUs<^VQI^kSKSut1`{LSeY!=XU?o*?^H^%
zS?c-4$#t1A)cxKrOcSyl?smVIk>p<yomT7f)uu(S2;kqO2S76U3(u5vlPP_Q2fYp;
zwaO@l<EY`8Pi9Q&nH>SMqoh!Fl#@VqfI=Oo^W|AZ3FX}>4LuwH2%<wG!C0JRi^d(R
z;EJI?AtiWXj5xqyS<=dERjcY<3m4j&efkWuLgY<MsxuX(Yg6jdtu7Uti6j?baPfOE
zCEQ~vecw1K9}rXiV$mCOL^5U<M?erl&P-e;B#s8Z$5<jhc~j$2t34VZ;*03#m4LmD
zrNOc8z==U!*cEhV_HksbG>t>$NVAB^54fCfz60C2oG-qY>!Rcwj+lvkz~>>}i}rIg
ze30KA5NSB%wH@Zzki11Um=~*q&x1?t<d_5U0}wHm2~>a+u4K7fVHC9rO?H>g?1_$2
zIt!dJI17j0Ou`A~_gv1`-%=#uUm3JwWkPaNt}RMtPS8aA>`F<DT+GGUss#B2@+h5m
z3ws~h(nms`(d0VwkOA$3%tF)hbytfyuQMlaMzoQuMAAu@Q<PrVDmnNGSS#W&w+VWx
z6YF!VvAQHFU&JrW_UAbig3H|jiH=X}ibBYXMXaThbcLVR6_e9lUmyyzG71S+QCemp
z3#p3OSg0y8LaO4Owf+5T8<x+RvmE4mT6Z?L>}>OR+IF@y?`-u@&vyYlD;_wP^=|t7
z4$wcvr^Yf5eT6}3R;9ayQs+z&k0X{;5Z#8D3A%g-ra~f*%SSS=h00;Ww}WY8_IeoW
zF$~HG?GrGqTrOg=)%h-)oCD>kQRGOJAk`|8rn&v%4hi9m1Gynx^K<YCJewBA#M;M*
z(IP4x!6%vogCoN(Q)NUBy-uYODL8EEd~(tGT;lSEX9>P(HM6);RLv2z1;mtmjE=}l
zNC~@C$R}1%5)(lJO59FIQsVPMRkBZ&T$6fs6_mL|3)k3--?W;{t^?m{Me-`IInANQ
zSkJNf`_(kBy@J1mF`@m7`UEB`>6}Fwcp=s#dWuj<sy4F9lPx4epv0Eb`~p9Z@1j00
zi~NT9Zr=rDtXcFlp_Eo_8XsnCIKb$|UjX$ioVpJ)A|6AHb3qhvV}TT4k?}>*a=ul|
z!J`7Xl`3OA@jJFz>Fb}{V&dv~F)6!`9xtKSFpD`KxQX|uap?P9McAJJZciZKag?Q)
zOetj!Vq2=qnOdjw6guJylXd93UGTdJ^mk>E>2>h1cSU}cc{SDPN}aAtE{t~+dUVvh
zHs}}KVlAfl<<35~;Y(Ya!ke0+P3b6#Q+tZt>wKjyMQMJt%dF)~SS$m&$2Mg(XU13O
zd80lDNo=zxGp3?kBoPUyIkF+I$U<}61#^fMf*iW#F7{~RirZ7PsVQDXEGJ5!iE&2f
zmnqz(zIDt^QQo}j_{`=kQ^-e_h{`KsGCgKC`AdW=hkNh}c+QaQzDxdU#WIP8eNHIj
zux0$yERB2(C~d_(vM5lXLxNjJJ};7Eb0>~-x18__@=7Z?GHEc#W%pup<s$MqG+2@r
z6pE1P%Xpf37^JW&DSy-}u{=FA#Hu7K=`#o=BqpG8a-kDv4M1buEE54LjT97!Jfbz^
zQ?GI43ORc%s2~jn68l;N{~M+D^BUNO39!?Yuf>W%-`EkAD1sjZ55iB<=V>p<!j@wH
zpz?GSW-6A5EhTkNZUz^YECCthOOrkm&gEJ9<mM;AN7xF4kgz1;Gn4#g>T~F$Zy!It
z<o^4^bG{8fTTQLktT68dACWq&dP(Sar?G>$ngLIpY+}2Qhz=EdgJT^$_$rpfP?3~g
z?UA3rE_X(B=J3<KJmlGQju`ZDvY{-qQMfRZf&b~&l<@h5ue;b25ct7<frLj$%)S_l
z*DNM@5`p1obA$?_k6_^}ZXY2O&UtkTkFS)76ntJ3{+Zfh&_)@2Hl@nuHAHFk7Ii9E
zCgQ)xk#c3?_xK`m=Mtq|q%>%>GOOG~t@|V-vYD!jr*kX)W<S=vm;5b=CyspILrAuS
z`pn+>IZ4Fl@He)A;{W1v*!C^h@PF|+P`CyE<%G|nvlRLiSxkRu3n8Ov+t1j5oyQkN
zVDp?0ezfJArP$}e&Evlxi0r+JohRpS*#ZuN7s%__zsMWZeO=P1920<e29D>Aj^5f%
z{cJ7Mjh$khgLcw0j8hB?kv7`G_!k2wG8oUnf2kS`=3B&R%C8u^Tn-tyBAiyb7`l2^
zrUz;cZ|pG|dp6!%6G$)i&+Dqoj=dh6UDq|=Urel#$#U<xIWltdo?Mx1Fs@<8i{$8O
zascc(4Zw>#8sgA8F2lLt%4s}h^O))6#w}DHy8^5PJ!S2wN(?^j6cA-ePascR#}_ki
zkvz4hEQzm@@(nf>FL;<ZazBN;!(b3r;tbR>@#Fc6;RH$cq(T6R1$(~Z=z@%l1xGvD
z>3^}MSGScnp89b6@Q0@w%eTF->>Bu0%G`U~+wPr{nmXs+w)T7HrkslEICx`V^;<`#
zPe1b3>VX>vJ4NK1bZrx}1Fl6#=kupPA%W5&ff@ULjb1MT`0Z<8_8PrTNCxp7Yc!UD
zYptf>%Z$)I5TB0aRgC3~PD(~q(tUw(FY)PfOq`r4GOJiBQxrK9Xa3}jMk4`x6+(`f
z5B73IBB>A^C}yfQJDMcq8jT#>GG%FRy-FMr%E?%*g0B{WcX&cJPR$SZpU5U2L9rr$
z0F`J14u#*)qh~6m3OU9`;A(*sI=>SNdV)g21Rx1Kl(E2<bG&WKpJqkdC0Qjq51eQ@
z3ph`;ZQHR_s^PJPaWhKY7#822NzR;#9TGXT!MS+xEsIYP@6JjW168Z5(532rhWz%y
z=g7Sy5}jG>-u&RzxpJ#Cw#4%FW-#omG?U8^oh{^X<`D4(C3(Wgd2}6<oxU8jqh~A)
z#8P)V;U|r&`>$*+uiO38xvl*f5|?d<JeF&%%-`_og*mgI0oZ-TjeZqgC6;or*!p4S
z?b2;8uN(U5)<(TLv#`Qix;`h>RG*-*$Hqv^D=vL`|8amlGm9%TD)<r^+g+NZg*-Jd
zdXs4&&cYM;79Ecny@}6a5)@i{Bw`xfs3m-%%Z4JG&MToVXJ?s8N(v1tu5K>L+x+^l
z(H}@P@t9_nDB2OQRxPVb;$Z6F$Aa_65_6qKfkDUA^Tj-(c=PqusKXeOE8vzHrO-=G
zn6kKR^@($AHd}?_1dJj`%XCPKJ0iXwj;xObG*H|0aLKC8-jp{hW5?^8bBi}$U12ON
zDT(G1I)lLI%uPJ@m>~EGrs5>kEvvEy9MK|`8OJ}ANUC?dFtGai=3?jo^79NTIQh8~
ztIHNoNq_`Njg;I;82z02De(~8qqk`rW%S?74kk|ZwF%uyz>|lNRqX+3AXMXo$b&yZ
z=U&CaSddm`N1`vKtJuoVD=?&~gO?ZOlxq35j2IvF<5*sPKKwCOwkWqmCxAa*yHF%l
zX7xS(%~@xaHn^evNx&HC&sGiyMd6=nu(fSZjxt6TW-BTEW*PmQbqxPIl#gYM2yA<}
zUFPvBr!3%A0P21{;-X?aG0;LiZv3LsRp5%9THq3?jN;ojqKs;hs{p~>yObBPPYs4k
z7H4|Tu4#eB(p0%3wY1SUZC6ja%kpQgL@NP@5$L_SZvTM0t93?f?2NWf_rU%-GlIUq
zc@vvfr#4T&)VAX4*3vNged*S#E80h<SMXJG0bIvAat>1hpSze*$Ov^P7?Xy0*cOP8
zxG|wj+DXYGAlbX6boXIYnU&UE9?#ci&nkD#_T|<kD=@A&$_t`QUTadLZ`O(a^z5Y%
z&+Rz7rVMo*Y&)I?)MW)PUhdq{6z`~6R7U!y^%v@S>cnD~Kq=wttx7J>)pK?Y_<7Gm
zOLGc0{B%{{^E+zF^58QV{ggZ#qTO`|?RR9ep!yKXOoF6tE!}n4QPz{4)?JoxF?&gf
zoQ0=nHy=tne*EI0LlbF=oVg(5rJ;TMhN!bzOFl{rKzWQY{z{$Ib>vy9FPY;`oNyWi
zX`<#@m%Q-8`kak<h<){41&#gLD!?gh3P3$3iAo0Im=p&|UIbsQdudCtL;~4X9GJDY
zDNT`(Kejc&RTL%w+y^by=Pfo8!3sr3?^I@~hwi!OP~|{{^<Z|({@H<oP{nh~?ETFb
z*Zl0#Q?H>`T9<ydNmRG#!hF<Q0--_9zqqMRL|%Yv)RK?j?^C$0lszBTU$_}ty#i`2
zfCaNb!*YX8^c8lEd;}`6SnMOHz`jQNvkTIBJcQ9ZroSfDQjAw^Fpr;Lv&pwaX06sN
zBHv<jPClX4h`*GHI1>JsQCclkb@_y?HJ%)zG}pTLR@<%biAsTj{EZH3t|;J8(0+~>
z&Rfi6AblXaQ*VW~=1#o@>ADF@eY4%(HRUs(oocj6d>KmzH<u6pc3*`#yD@E!RLx}x
z^%aGQ7-pFfAm6RPxN2wcbMWxzmJF54la>m#R&7F_Q`vt0t3zEQkDZ+^)taN6D-J)?
zC$&iIQ)7SI2Ugb>kZX}HAfLjQGQCt?=iT*HHWix*=S#uo3wYj+9S!+)$ugv@tO9dJ
zV*A5u%JSCzbZz|%N>OcE*S@X6fjPQX*QFX%$*FlzPi3bdJ!OkAiu9$6pV&0>p%n!d
zCsI-^HTKGWO18PlJxo6FGDCoJwXBhM=aX8DhU1G_fGP{551Ii$0SI!FmKN_hymift
zp_JT{a~t=}^k)v7n$@+<Yw(vj1!}oaAFJd>r&Nr+MvX>aef9~e&1m7!mBoXv?Wrlx
zCvO!s`xS^Gpa_8sL9`V$(eIPt`&0+5Bgg~Hm!OWwN7(EW!_G(s|7V>c!VoYR^Cf-u
ztkSrOaN{<!TPH~MwG`S|DH$rKY=ROAbQIZ%)O3|gKCVQL__7yKUE5TGD77;uE?=H9
z>(pOQm{Q~uG>Rf)&O?7cX-bn*8fBy}8-<P-508EaUc}~8u>u<JYs_PM_*AqdO=)o|
z<1!rzY(80QwIxe*Qm!GnFphd&m&wyCf)#|eWeOEHq0Wbm3PFbz6TmGpisQnV<aD7C
zWhtVnef+jeesufxqjK3Cu_e{vNVSNufy2))d5FoD*yO<uk<+mEI(%)HVJFaQR?w`N
zxnRLeh1ruACzZzKdA>VF@<A*9eL}0xRc*K(t+EkEZW9Tues{GI|C7r0{U{@hg@|le
zs*l!Kj~di@JQ6Pmy0XyfQD8TxEw8XxDwa(n{{~bWe>#{^F!bCC((&b&*FXdL$WdEC
zds=2|o|$A~hthg>*L6RzFq7##@b=pWZd3VjaIRIftxbaxStu+b=rH^d%plKR|ME+`
zonVm32ZEj00|&64Bgn=k?_r*U-*HWfeMeNvjr$7}>Yc(2R_5)gUvPELwCY_iF729&
zvoK7dlw>B?ZtD!B&fHO#SefNjT*upk-8kD~%iQ+v$wU7*JzZ}|HAv)=)J0FOSbKJk
zQ>4%dgWHHBM;IZQb(%8>>BvQh3&?_yM56GF!@g4DER6e#o@69I59%xlpi&u((J#)8
z&z6w~bw&P%E<YG3(vb(H+3_2|qo#_agiJlzes8o_40@uA+`BLDaTS_CkJx8COt$GW
z<2{uokaw6Y(wac4)dX(GTZ0R+z1Db=X|iIyzU(MbARfz#){#+81GXf%)8GXE)<p+z
z#0Ny;EFYObuLqt{VmDk*>|NJ05mgA$OzgJk7PlB2QgX94)A!i5YX@C9(O`L0g5fk-
zlT_s|GlPl{QPD<BXpasqB#s1k>K)))b#!o~NGr+;kWR*!-!zlHPli4h<&a3IxC)vV
z)ii?%`$f!rJl#k>u1ZZD-g)iX&fyrJ3e<=a4EK|ZR2kMlX>=AQv>7q-3m~K?1u5if
zOoIh{t1$*gVqHQ}W-23e{)hv#zcv9wY3zVcUNv#x@$nU-LvA2Hykp(r<<bY8{BFXM
zsd=G6&+@=|O_SzDVT8$tgXKAIjH9OXpSw=Z!dmZf<)ZoG4QI$|O^(f97Be>Ct^3C}
zIMywsr=y=OOGn4%!q0ZBSk)_G>EP-6$L(9!uj9n^&?Cck2A9B{8^YF6Vu5}}>_3Kh
zRbh@8fc?i{_jUT)kU4HK#=jbx`v4~melPLA=2!HG;N<NNaqNv{opTY?uR<ZEIM$yM
z=GYrS-*x6xoD&mb*)x!3(+pz8WR_*zVn70*Y-@);K{xR*l;MpbEk2%$8d+;afsZ5a
z^DgLbfeAnaC`C2g(CL!ek!o&il{s?Vv6(In_C)HM+=9d9<qtI-{N_S;*Rw$IXvVC(
zF<%flvt^r}?sZMI+H(`N?&)i$Gz`@{7IizPm@;cLsu(8r=(Mf#rW%Xh-I=wdDaBf~
zBB+!^S>kN=`PYEx)F~jmHeU?Q&P0MuRPBFr)0Q{)Rr2|co^^+t7M@#@QM&rk&Iid`
zEm3@l$w)s#BYB#+9&QCHNTl>j_|z$|C*OgG;O}H2vy1ultyA<NV19l2H1$0hl+&NX
z@9C)w&k*8^KP=N!W9*6j8KjY~Tq9orX~CQ4v<3kvks0_ry$lrdqBV~NZ(`~L<RI95
zU<Mwql?A^v`L$ZV2@{A7w|`6LRh}k_;5;!CWl%_za_I>}?7;;@kww3_L8;-8>p47f
zn5U9o0-urgYYI6BEQ8OjlcS7!hO~mMp)(Dwh$gip_)C!r`v7}JBn)0xXfT0D5}Xoz
zg5Dnk<dcsk@QIn)9W%`*AHn%<Z6;^o-;*=3pWg@#3%Tz8TgM6TJso3iforINV`w9I
zO#~>E28rAVs4F6(29ETPMZbUk{(+q9Q_g(zNO&x4fzg6FJC7{{|3@Ztukt9J*opAC
z@EI(j$3;U@mu0N*&9RCWk`m^U8|#)0_nco{e0|%_;lQdQDz>>GMne7zFmZdw1Iy6B
z8`m;HKKU|RBgIaHd7F6>jxD2j6k4{(_;&+3-36>%^y`uRb5d^<?Emy3$mK3bqO0TB
zLedHTZ{|u!Vz84qLdWKfqc>UQ#CZmf@>Rn;J$9WMQA9A_S->84w!@8KlwM*_#{7F*
zW<IdERPd^J&e@N4t$+K0CT+}Z6<#*<^rEhvGYhn0H7DJ_e$UY<`@Xs~m&u{J@k(c@
zq*1jc_>8WTi?Xu^PIeEybE2vK^k;|D;&!~btJD>633+81)BNg=XMyyBGNlcfk}^Wa
z7kErLNfiC$*%19j{{{VksxiR+KUUEEk1ZoZzdzpmzbs(pY#})Us)P%!0Q|u_7J=mL
zVZs0(2#T#iokdW-(;d>5X)#aK>Ue|BlDBSAS4mvuju%%ViHmF`X@<9UYiGck*EqXB
zm3%K!$>Wta4WaW*S#sa3-S6L53uw_R_02!k-?X_k(=3eC_Y5%l9psBYK)Q60FDP5r
z%)=;GfQEO`0-0Gt`~h0DFOxP=VnO|^C3%7L;<)P4T%V1HPdki^S7;0VgPccx@YEce
zOg0$Z_BfP2$3ZmY5K7Mwxo~_6cmFOLW=vlZxfzQd=?z(dNT=lY6kEgk>-*m<y09`Q
zq(;nT%j&S0F>OZcQIz)<HMWLvC2BqV+>%$ulqi3a3Pp0^Y$X3ulEFJkGBB5X2Bq*j
z5rP5nFZm%94gUiFcc*9w>2`KMZNpf@J_Mkk7Jzar<QyTSCG38<$&ce0DOV-x6ICRS
z_2?e0UI_jrQ1N(5A^2Ee(C(pDz%(d4n%nDLE_{>Ub?Zao2v2o;x7w%E`PKM<iiZRf
z!lb)N6jD6n9gnloxOzr_0?rY&)O2i;iA+3M#{5H&L6(#XZhhxpzx&vf1K&M0yZNzi
z?pyzd2bx$Sl?4AA#Vh%9>+<~$NwgR%={m6}2XO^9oKfdj&%93l<;p>l{ON-FQ=c6+
zSe4uzZ|y2kn5-rR)f>?_`fp|i+?Qm=#2zYl#b6rCfXC`KJhLp&c<*Zi<-@Cb?3FwT
zi!YUkQ)=eqP2bY&iEG&1b4nlv!@)-UX}%m^%*<V|r*`1VhGJvd6mLDB$q`B2aXMea
zvb?meQb(=WECw6zFO^v3RGvlK=)Z{%iL-F86jUuFO+`uwtAq_gA$k_vp;#Mjg8&<+
zX4A-m-jR(p9854};}i4dKDlA40DOBtAfBB)`&kldAM!SO1(?|0<<D*?EZp$y@&gMm
z4(8<zUR;Q6S#X2=;^c%@CpQ*^&J9yZ`FRs;0R>ozEP;O@$Lm%|D}{U>jA4U*{7U#8
zCFLb}@0R|GPx9m5iE!Bk9&>>=2aLIPhd<ArT^2{Tmu;GoKhe{p?STVCJ)F-&#g^}!
z?8l6Q`Uw-q6nNMDXG>w*q1VC@0*ay^u^7%H`k?PeIOsk-=15}DX_`O}vYH6TH3g!8
z%_p~W)v~9+v*f*?kDNY6MF&?YdWNh41LXa1;zosxn)tv0Y%!eqhEhe%yz2mb4hWy@
z3+mbF#_|3rfI)MJ)lkGB>4RzOW;o;P*G~th$hK`i+niUt?UfB59Kc%LwF?W1`l{jy
z*7rR*OCFpx^Wl{Rn1X)B>7!o}AH%W5RNX;je;WxAsyi4*B%me=rMw_!LSY+hDw@_&
zv7j(_R*4lm$`?O*dj1|$+H0F<o?4tuk#K!#Rci%{#fpi>K6g)BR8-Jcoe-PX7yy0S
zO139nyx!hgJ2Q9b>8_qfR~2H4TR$D>UNX;|?RN<DG1R%xLq2)~+VMpU28e9_j=0%A
z5%6`q2%OHGfj0j*sl*6R?3%H5>Xc1wep}_@su#g?*>frr;;Q<Jrw&vnOZ8&U)ZcFJ
zyRfEUe&_n-N=K%hBHLobW|eMtH|}UpcDC-BS+}Cn@_;eDE|654VTy6Y7@JEg16^CD
zEI8wGy>T*onoq-o<mdPud_xRvXX+sDorm-%M%aibz2`@1Hvr~&=yHE{=;)nfCQkkB
zHbiD$_mV9krUgq*@4FjSy$`wKM|OTo<(Yj4{h@b4wnD@{-c2>j#~M$ejbmLy8#gqq
zVs&HEUDdVRo)X(sj`k`Vn_0R&v2nOPIbr(Hbo|O)HTbP3(yBai^pFD%zMjG!yFB`D
zwjI(I7osh6tud}~Bd&B1No*lc{N%$GYZ{Y6N?2}BwYYNZk})FOBiG^~37{~nm+4uJ
zX|;azbg07xpp5>UxCmu*@>q^+SQLlv{U$(5K?0~kJmO-*sgL(OLjLReyq>E-{7C)&
z)$`mbLWf3^-LSH5<%`4R)%$<BzUS1!O!9G=3cE14{r87zC_nBD5M7(6Ni2wOkn^KN
zaaL{3fnRUf_M3aEeX|aBDaC!%dH;%eFCCjfzW2nHXH3{0KXV<KB)3sZmr^X&%@<#I
zxMFov5}8OGIemM^*qUjEq8N^PG-pp!`BYGEE`aMVo^a<m=Jej-5mUGt5zy%9$f}qN
zoQpQyQ#1S7-F0#0^YV*3Gj+wAudO=rZnaaO<x7%lS2xuxsj_;euPpoft;UTr5|Y}s
zO|My0lO*DZxnkk#kUVW#@5wn?3){+7vYg5WSLOCOSu;v1lzg+@Y|XB92d1XzceyJ&
zlQSVFm|adjn=7QxG}IZtgnQ+_i_Sp7X7gPQ&tFp7qTDGW)Tkf2*`*VZqjxt%e?G1v
zR49o2!$v73Pj^9Hzew4=8KKzkSlRvm5dAHY$>X3zEnH9$7ZCvlZ{73ol5<R)E9H?Y
zzFEFt1ij{hzwu+_^NAxd^5iLLMrfHN%VRwG@iJL_zUTXYl6q*HJ}Gyr<T0XPkJx~J
z6`Ue-sbppmb_6=&`ytIPs9)Zp>Z&7Rz!4}*V=-WKXNS%8*Z8$cZ*9i!e>ZnegU!=6
z+(ZsuzWnGP|F}Vyly8sC@#x9>z{kmTeHn#|rzPUV(7JU)$I)4X&j?={x~r0)Wb-k*
z;ojf=_TuHs*j~Jse1C}agV%?^*=-E^j_LrupYFejcwypw2MwPP8B?NsSlmd)BrYtT
zzO5}OYu?^ETbUi;7!EL*RA@JPr{`EKxs53~HO3MAt8L_g*to3456@fjla0k(zEB}o
zh@xbC$Bf~w=G7G@tAa!XLpn6j7g$HvTSmkxaNAh;7oQydm5qgeY51j3fKSF+XHfN4
zc)X&Ql3He;pXDl3y%gp33<91u-(&Nu$ZvOQ;|0G{X2;JsUtgc_J3)eWC;6?)Z}a49
zFKs2KX$_#&XaX74WGZ+y&PKjuGJ@02fJl&N1silK@&&U6JWZAtf?So3Tx(4fhyqUX
zFQL6W&Fq3}uuy*gI7Qw&7DQ2veJOHlcaYzyebn49Q)K&OFD171j*N6nap5<VdNhMj
zn36#Lg{BM=gDAtlh7{0qj*c=D;heD%c$wqDUU;U$=u|jO3^Q?+CzF3#l4V=jH!{+<
z(%=$}@RGGV{vwA|<f-&AAj4uM$nOA$p5>pPvP@c#tJachZEm5^?}Br>;GCs&Z}#w<
z5piC0h$-l&h%I224x*K*%3Qr8moJZ8z1kk1t^6Imd{w{-myZ@^i-U8rhWh)5UbdJ)
zF1>oRzm&`#WxfdKG=}H2MTB@K&h;WSS5iygMe;fDbw_Q&??o>7jK5R+!xNz$Trf;M
z#E418p5cBPfAlV~UFLrHkX|RXBdE`C=&*pdNgHYj4(@@>PLBcY*vlb4j129XiOXcn
z2>oqrAKrWW!1#AVyvRxjVcq^$j7Y<p{$Ua?VmOA~$%}AWyb@#lM{a~v(O9e)V;a<5
zC!yTpGpdm<s#Jv`@h1UkjVrQnO>HQ$I}Stx9}ShzjfxB|6lZ1S735^+fzS0NaYd_B
zQ&;78J+`haXXVAk=6o}csaFY%BGehmJ$+S`!Y(VF7GJp_zo2i56Li#i(zRx>LB|AN
zcir#v9cyi#(;a-8%QNV-hH%yok6&h#0?a>icSFm*nSLg-=!NCgtEM?UGgg%JUMm%|
zF|{FNH{!nw;Sx`Z-_|~BQ1!h=4&u+@y+JMgpz+>qw9J%~XYqehI0MLAkc<UxL*5D2
zbdg-JU!h|GAe6F28bGjgvK`svd~guItP%x}#}t?g3b5`dCCV{_W8H*fLC=F2OWE*G
z9ui<}AAWf8!w>H=F1bK4bnV*Ev`ItXE~C$)5}s!lEgvG~YB(jC_VZ*RZsh_$(*;lX
zeCXSaGP#_8K-ca8&`q8@r<8NP<4E4-Dx%Ji=Kw!+^i?9TOQhqI4@1X_13nW8$xQ|w
z$Q4OQJ-LWU`xfMBV%7wHii`mhv*0%0K2AP|bIH%ZCl^EG;`4`xgL;J1ON}uVt|1wY
zp`I8629YsfW-@wU8$LSMJ%Zv<;gP`OF%sX#C7_1<d0CxFqy;|<jX4GC%H=ecIvxLo
zJ3k@*i%Kn*Uz}RAvTA*ccci{<Wl1B-zyOac`M<b<8H)yL(Vz{}IUt7o6ITI#Hpct-
zCA!B4iv5C#vESSce>vBE5fL~tf)zv3HZ3ME0xv}xlu04J^N-$SzCIZ{#u|=>s_qg$
z4a2Y5X>1>60)-oMP)Z(EilU}Y5mu}?+0}e(AXlmhHsgtPOG*nmixVYEL9)4J?!uIw
z$JbZjX|pSw5@{GX<~AK)$nj&1_x5Gq1w*EA)AhALl2~6DSK*{+hR=wmx!}L28L;Wc
z>Bj$O!c)(+!h<?}-`vdqh4TCgKKU1TF6xCf8%74k>8I@=l;`6eM-Ca+)Z^*}pDdBF
zys(h{j#Anor6#qhrfqEUOf-*V0{h=w%{$tf2g{>FI-FKOx;PQ$n{#wd|K$xO<6@aQ
zPYk%Pzk+mW$6}<DV523>UmbXO$z}2dfu~?vbEl`?7gJo2?X~i-EnAUoiqE}9e)7^_
zp;|YfE*yLbXs$sHK<nL){~?^4bT=(CrnT@tBzNp=iZ2>ph0WorOfk}W4Dv+$f_vK&
zcr@7}IbW68GX*>|QLmk5B3zcc#Ce%#4m<*h4=YstBy|e;6w2u3H1AK0^G0w#zWg=F
z{LhXtKh-PfZTOh~0_>C7KSU4l0{$)4=VdI$d)Lh3koc7lFTg#1kj)}baI_M+M8_eI
z5}cEJWU)e!sgg=mARvsD?V;$$PU?${!F!{m(kN`cu|ywi$G?@Rf}gv+ekUeYi*N6t
zc)V)#CjJJ+FRpQ1M{qY>$8gJ(&nyL<2n#A$9McS$cJ76t(!5nq^wZpdJ%}exTS{?<
zSj7jsX<h(tqdq7l!>?_ecX?}7=8{JcFYIYUydWJN9sQO(LiL@%u#Y$>o>~Xx4$7+w
z)vbXEHO^oHVc8fEa1QR-bq@#d_wU$w4<96;th#Vxkb<=%;8!OvUOd@#-??-5fw#&h
zcIGLkW#vxzYz-9F4YHHQ6)<ifW03xR9T`bu+Ly+4cSAm18a}sP3K8gTr~%`C&$F~E
z>Ix+}6?lI=?g%~ilL_(3F}H})n+KT47EAu&Sm}=_(F8Q99Ysr3$p0<y_TQ;dWt{KF
zH7a-OPbP&*Cu`P?#;|5x3Lt%{@PYl4-UsspV#b1{VR}%o6#wVB2?S)2UjvMMX95ww
z1uQZcF)w&y2s|7yapMp=xAmhpiI<3L3^4=2Fh*d#B8;ND1T;gfYbVCLa1+(9)=|=t
zn$lSoj}7xAPoAE$$Lzg4F!TPt^l)ohIXu0g2;q2hURzOn+Mi2?-6PkgH#Ig!wxGQ=
zoK}^nSQ-)9g!`lz{haw{c&5X#P1bm5)BhvAtPmjl1d^GrpulU{niiinttofWqSS_L
z6Y4UPF)b}tD3tKyQqL@E+0~vTi!V&Nu80V2qHx{C>+v;9%99Hm(q*c+G_x@fr&jCL
zJaJJV-&Nl3HRfdcB)*s2IdRenF*_CHkH;bH$&=!mKT0@?Y~qhY-T3PA^@|pzG-jDY
zWLkv+DQ}ESXNkA7KWrp<Dq8MNSbnBYY*^oVjNVJe=oiE{@XRGmiXl$cNE3ICco#k0
zveiw=chgbu8Qa3a>mKT{Ce#m2$BdJeR&e^{hl_mQFNxRbUMF<lmQZ=~55+Wz3j~+L
zeByNZ>LzbU<)G;kbK@ign?M9uO7k;RGzojcYKWfMm^RHHIXCJHFK1$O++-5`_=Kn?
z70ai>V@!G0z^PfwuWzS%y=O0IE;l&&R;AF9Ri9QpSns<0=$0MtNo3&b`EB>kO{IFf
zU)^4*uq0{=r92T^qn7x)cQw3lZR0YTh{C1Tjef~2qHX)}_4`BS^`zsQKrQ`D8Cp8@
zYRExFc;hYO>qhZhEN0ub;CpDvbd((}cytu<{TEcOH^%sF$Syg+yb9+|_yPHN7dz$Z
z#B@_AiSKH(OcaE7HD6HvFtpS1iPKbEdAvp9e`qxcZ3Q!tPd88mZv?lPN^Sj@))j?2
zP7<i&WNJjm$s9el3hyBQxRw0P4seOftJwOJ{)Imst}f1)!r^O-8ehlu`srI*Jsd80
z80ycCQ7I9{>Y;jEOs6u5RWeFKMxhj8Xay6fNe2?rD2PS1)d<z0(p7=%Kr)4oO}$1)
zKQ#SzJR6{jXce}~Qfcp1d2}M3XrOvcgJ(l8&Zu~8SORp40)@RYRtofrd~L^(`DxXA
zUt1jobjo}wPsTT->O|-_ii)*?T$W5MFxY*TxwR|PBoeXUaXud~yKyD}Doy+Flk+Zo
zU!a`P8#N*`ya(8vpUMm%%C_Oj->u$#^Vv1(V>07az+@hj8Q)V?dK-B{i7r}n>l#1P
z9~Hs?nlt)2p(4(r+++#>gNjr@!!qCvcLM$4Y%o;_ubgfk{Q^rZ3dEE&$GR#CvW$q-
zs)kz^kKVr6MU^KV{(B=@i_}-Qwgu&WW%nOxYBngDeAm)yQ-%urn}*-tLmpzvqZ9N|
z!fCS?g|fUv*XMWDLCWnOJIeA}d1H5j5PMmvJ2ZQ-D2iS~DTBexA&yW!+}P0?vnk#J
zK@tak^7R|9zKSO@Z;{#elb`pH?}FGKrs#eKt(%!`#3Pg^gwlGE*Q21~&t7u~Z8#gJ
z(Kswr+&ZEZ*%lHU24Kc}$TD!*pd#0#B^%NW*n@n9UV1w-CdXsAe*L;ZxhK$jrmuQc
zYmvG{>z2zL-U3%nN3IE6#y;8}kQp{s^tuRkrAVg|E#}2|i`*AxqaPn`dvLJCUfASw
z3z;gN+aiyz?khYB*G(|m;9u`jxK&(e0m`TdyIJLxp&r+kL|{?iNV#|kg;z12O%~dj
z&`M~-nSv%%Fn5rzSN)ZR<L5uGx=CR8W$dL32GyFws^}>49dgS97cX8ksMa3UXv829
zEIe@mXKyBF=~Gm%&)&Ql^Jsm_4|+C3f`fk%%fNTRzhL^=n^UAlEI}v_evKsrf73%@
z<-omONY#xBskkdD+R^|ss>DPXhT*s*RYs}ug0GI>FCx>x&xrUbE9%x_-)-iWthuyw
z?d3gtfPc-E!93O`Y~QYR<d<MkL3h51+~0m=UK)Jd$7h2>{@I7SX?%xYkAA^Mcl|s#
zV=H64m(5r}pAGkbPQ0a?-9-ZFuzmoXG%U2Rg1Vs@&PN`3=9z6T4`q9rH%_zaK+j`-
z4f%@1?pSe+C1XbkM5cuFxZDa$dU<7ey2UYdSylahPaH=s5u2UaiT2c3X;#bpmMnYa
z!m`>eF6=``#hje=8-gEVPp8Z|&|JA`Zn;bm7ktHmG1Q9Sqr{OQ&gVhDCJmvpt2E~1
z;-s{$(zsM-zCftdC{fcihua+OpI+)|D2NNV7;Hu-gTelgIx7OI$BqGdQw{WaVOvz8
z1R1*}3WVR_-W0RdYp2WM3AUL!LbwGtqd$JLojyM_*ok?pp91{~_bOO5<ger3SD*KD
zRD710L%tgSO#Bm1dN>jePsQ2)=XmlL;7^;4Yz2p-VB@TKz%i))dE}S(k}n+o<q`6I
zz>fc;LA7V;A#E(P1I(O<+ce$q<y_F!!L(|2F1>-zdT92W?u8i{11^yI5PH2hGjp*U
zzV2BW+m@Kv7W=_N0jV+gFxH6v%zg--MDT`2L3V-%q<Z>anU3`KARGDTkdNME4#5+t
zMg48f$;uEWhgpJB3PPw}X35Vn?^EYax3`h~%$dPA;LGR1Ugpq)r%5Kb-QISa#~iw~
z?#vl*n`AzZe+}hIH5_+{zPAkLIordRJQFj@sS-*RG4zPdA|m4@v8Kh>e)F4aWj2=_
z{864@dN3F?=%J6^qPEKvax7h`z=QqRz603O;0~z@Giv3*YZlo7o>@!DLpU$<NjNVG
zno6t+LSd!ap~9I7ztvArP1oqK>7PIh`5uT-OTWEFegt&nM;gh$NjFM@C9fSBJaXhn
zjU<k<DfoNvi$jBljvRvTxa+`CDlHbCq-^pm*97NrGICIFE`Tzg*esO4V@`>@#-Mvf
zkD0$&0MPZKDFGiHfQ|||(rg-98J;lH<KOSM#yK8(pZs<Q8K>#o;Mybbd3zo<OfUIE
z=hH`*o6U;BPcGy%R+hO<3B(jtdq(QK)-sjGQIYI!o|-Setm)Wvrmb#ggC<(HV9z5B
z6@8Ya7l<Q0&y(MtJV}20Tu&qW%F|e;#}k~n_#w}<Bfs0U>Ah1;kawKXb8q#Q7pKlU
z(mD5FYeM|A!KwVn`nv2CGMUN~A%~#O_ykJbvT!anK8EXyZoMYAYoq=N*Gq|THXmiF
z0c@2%F~_2dm2*_qB#kyPR#BQf)#Pa}cPG`(O-=8qaw%;-W5Sedn>DY=UtHXvcBGnO
zOA9hpzuG3YwgV+|LE*Cbo$maFv)erdojK9bSuMA->h|R3?>Km>v2|~!H?d=HXU>-4
z9YukG_5128*7r8s^9nC^CwH{ABo?meZ?S*}$WwOgJ_ZxXW9A~N_Fu?QQ2A^$#J)m?
zq_jd3lG4bPU_)14G=7UjOKhdei|671knZgp4;#oF@RBgOdS20X9N!E8zU3a<7jJC8
zd=UNza{utpn0<JEv_+&Bt|b4jbKdJ1%U|wRkbi`xk|nzH%+q8gF6vy_38tKTkcz*w
zLR+nXvej}K3_zE#s(^&P*kIE(8eKFUvdw6F3~FaPPD9gBCl6=!kE|*5b?#`u9_jsR
zpDIB?8DpxUU+$~wdJ14CD8oy(>#eCMc|jQ{@6PWvn`a&?ACak;qwM<quMPG+y{kiw
ziGpueS7F#inc=2x?KA%vegJS^=wt1c8L#o$%TOwVz+%x8xAx&KJIF+743J;uL3z*<
zlEKIaGP9xQACj;DHEW|=Q<-Tn8MvpYo>}IVnHBgZ@_H7yLO%J|8jhUDm2tr8yicDy
zc~Bd}+7|qL8xgBHbn2-O^Po{v`^t+igC^{YOThO4N<g*0S8b8aUZ^9FTv|`&X%t`|
z*)P?DtLrbV$85p3*VDFB8}zr^p#4|QV91E^a)621H!3!*1gw-<JfS^HC_loU0>7MM
zJ&Sn~Q_Z>UIYpgCZi!x;SpM?zc@GU_xNRfquWfY+V7-cDB~+xC4sEPmIyE2{sW_=q
z|FUz@$Y8F<l@<FNHAr_g#giU<bW3bYZhU2`8Kv&DlvZZV-dbM0#2Md~u5rkk+g2!&
zva7vwXSxEeD1OWIS^k-On*0r=8ES7^g(6PTPsiok;F%FpXC`y}%vjOp{_ugJ4R~5Q
zK@%Ql_l^veq|Vw|hYdh$RwO|-x^n#+`>SVP0gPiJ^j5a`>CzmwOdOSv+mgS4m)kR=
z!YUPu1q8sS?El4vML*fuB8#29=y93hukuyTeZ3!5E-V1MWX6}Gnv0-iYmAHI-MTNz
zloUf5<xGZp^d`$f;d13d+jjc+?KI@R2<#i?-TJ14am1lTbJr$=L>W(~UVrOvJiTla
z^Lde6U~~jx^9s^u%$kvIFPmRjv(Musr2MEDPmZ&+C?-%`UL1&tEt-{Ay4rc`ogZpY
zNDK<3-)|C%u}ZmEDo(b?*z{U=SyuA&T&pjkfWud46lrdKtXiVbyNZ(Isxo37u^|7>
zriOs=B;0^C_#5MxA<Q+my~~y@!{4}l7M<4t`1@?;RCEtC)?J*svZ1{aiDdvaEMItO
zUEwk>^!DnvcX*d#tJ=<OsI1&@t}VC)TUEWKGbN>SOLcGy;>klmg5P8!<aRdIr!VY2
zz(0rZmfL5-f3Ux91;5=I{OeYDt_C3=uObe^C&gnhxR}H&lR!%$h504PCJFq@Ew=!+
z7T{~Z0J%HJ!?SK@;Wxnl0h-^Afe!o|>_fVzrUC^|zX@uV;w@OqZLpC6Kqi@sXRxMI
zy-s}DOxo+hLu&(>x}?HsZON7jBOm9=O`7zkEYqX-zg9oDy(yp+iYxg-7Ur0LdH45~
zC>Q7xaz6N&coSiNS;vkFo%t*Af{!z1Z>_YHqmg7LEj7}wfAY`mK7qJWAY=hF48fvu
zihh9^SR(8I!skKJN|xxm7g)KN0byBSBcuR#u+C7wL#ZZ?Wvnyb%;6jk{f_$HSpQI#
zD5zV8H)Dod|6*=s&|{<Thdx7hQg$p0>hNY#z?3XQW1zX=_+$96EYa-;mthB%F}L3O
z7fl;A{}>Jp?zsIR_7UsMt(D7|5_-?ilJnVDAV1ZQ-JOI>8^(h`OgcR(bS)Rk{E7%k
zjm1P$B<w3GJ3f0VZg6-<pt{2^1zwSai)pHME{d+1(Og%mUHxc}%QU5PQGW4~<^pAO
z>%!I917{bdU5AcaLH^?Uq#Kr^xyAF(`-mgoztDYnP5@`(TxG1DCs7Do#cnlqZKDb_
z=0Bg+U1YTt&&(<5$&W7C{>l)(_x8fJy`9NPoqOBS>&D$P1BVabAEPy9L%x_zoC;ym
z(uwsUK|qTM%4Mgr>}TIt`Tn*07iK#ewsmOjQl3O9NG*+*OnHbrPuI(sVhG=YM^|;8
zSeQ-V^<o(x_e`0Sx@1qLJP|ud<xbD1>SgG>2UIUZpDqeKa6Fzv@7o=PG`{}FSLM#~
zRb^wzQE=mwz8U#}S(!ESvb7nz|9&B|!e*d(Z?}(^kiruy1dgI49Z!?ioDcT24f<q>
zbkz-D%!K-jfcmQdVT46A(h;%ls;OB1@m7OKv;EDL?19gq^U!R6YV*=nOPf;<ZmL~^
zG?N-?rjK?mx;U7d+PZXbS!?Q&xxOhWdejLl3hz(uFU?ump6+c~SJASuqcAO{uqk)(
zU|1bx^&M-iU(t}85-4sfm_FN>oD*Y+k5+QTaxTJ!_$%t$K|BH_3F=qQ1%w&UT~>UE
z_GmycseukeG4shzvXj~L{V-Op%|0}>px4{oHa%9YiLGy&>Fq6;dMHPGANJRv`aY)6
z-P=BB)1)@$IGs6-sT$j0d#@Ym!Fi+qCJKm~w5@85h(%M47RGb(D4v)IuHvU;P$;(%
zdp86y)ZTuyHzT9>DAs8ZsdM^fSf)>}(Rc0ZPUEM&|K#wWPRwXL_2=OOe>+((OPsdu
z;)>|nhDIAaVq$Q_*S))`aqp~vyKzI^tm6w(iAI~sQ<kiSJm8vja_PLqHM?J0y8N{R
z(^{V-PxiiYZn(=&v4>R$pEb0Zn8i@;YD4m50uNKUWoBkES$*xCGaWjzDPk!XSEaU>
zUAzV^;$Pkt;9v4oHUnR(6eN{-)PPNX2glq<E+GDdf5oVXlnu6saaCyb%Ipx-p)FE0
zD90oNZDA6Bat>TO6kSwQXsGV+Nda}f_0_|Dy6n6hL+enDC3Q#3?6n3(aeWunTzq6s
zm$N3*a<LmV7stQ4J#)d)E;qn1z)>K1Am_ywC28S%3`mli%bJR2%xz0W9n8CSx1e4y
z%U4BbHf5q$D_0a}V_#5lR`N7{g^5uyW=al(FD4Nij0*zzKvN|6m5Z$>^6IvC1&%zd
ziIV`nM9FvNI^?l=O@W0c@vpvr9P_Ca?zv}I{p>ePW)TtuuBx7l`eo%Yu~g|CJX`Y7
zoA|$(Y(^BLhK}ZprxeloU7?f2q>)8ISk(G`lP;aIsbdems_S<otgLqBCCKH@0?a0H
zn>>DZ>#lZhMP{PYsdE+acgZ#mShIY|zD!%7DoGWSd1Btwl~dy!QwM819xfnw1dA(F
z%CLtr{JwO#DGtG*%Rx=@Ja6g6IUSF#E0afCqU9O6>vqedW25Ds87oVdb*2`^6-;-#
zXB0XzQ}{}OP%aGNzn6}Fj<+xgln;D|d<nM-A8)3I<jYvM7bIVvR~h1_EUPYCGBv?f
z-rn6_?lNUg_ZM{)C(88_hq1PMQC920IjQc7j#(WQZgoP21vPDwiG|n}Ls^`ozStFC
z+L@Zwke3)|bEd~xGU8Qwi(XfwbD5<HQwEANrsufrw#4iNW0FNGGbgBZW^R<2#uy&G
z1^K0q$zT{zrL_a3c*n(zGMX+93rQJZ;R0sgtzC^6SRqK9o8oIK+m$L3rS2?i^rp;n
z3&4sC<eTK1d!T(+T-IeOsaGne7n{1uisive;CG~hJ`2l6Z!*(}Uoj-;_HLq_QI20n
z+wK%IOlXIXWiq5-GfMj_?e@z4(#l0uwxi%%p@@x15^HmlTI0$WPxG+7SGKjDTwYkb
z_Tqx}ee+A5(!}18&93%<&12w$HG$5})ivvzlauNOa$kOpn8t-%XiJY%u+!JRva@5L
zZ0O>=c~`bpB{vT4J6ZPxh<$4*n<Y|9srulv`29aFU-0|MQzMI<X<_-Igz{zO2x!Bb
zZ&foda%uU(Ps(>lz*A%eb^n^h77|}GbW~>uTACumor#v6BBz*vNmV4qh?w<R3y)uY
zclq*nuO45R75Ta(wP)`Wul4r6_Qc+v)X3M^5%_`o(TDG!^hNmledx3M=+A~<qchzz
z`Z<R|JdAw4Nrh^W1>p1(8jty760tOd@ruGXQi(Vm(6KXL*XLF?2e!R1m{zg-jSWM;
zuATPlp`kbSRHO}F+Zt%D%+<&7B|>4erzrXK`Ikr952xQqKiq!lrN>Su7ki?GLJ5y>
zYh5Pk!W-oG2QQF+zdEzMzP^3tRiL<V5U_46l$u=H4lz%ySCb!*|0X{n-!IPx|0c!x
z6~GKM(8n=Rx1e<0#OLf3Xb%KX{yy!^h3*$A_`f@V%f?+jc1qnBkM8>P(V1NG+V$%o
zPq^TTPj?>pb3MAXkR(lA-q3Msu!fKA4=&);tUlA4)j74)f^IopoxP~@!ncR0de7l~
z|9rHydm4RRkvDi@;J}LKh6=}AJIIrxQ1>sUaBa~k3!{zF`3Y2PFpNC9Vn1KShyU-#
zS02-vI3FLsa^z!njOG~D`Yd)6%+;4CBvk0h!$FZ&j-{dwy1`eadb-XZVHLbW%@Ols
zbA<K<`h-9Kfw=%qTCQKm)FApt=7fJAg-dV59!7IRzl=2v@{oYSdNJatr5}7qblNcv
zJ#R#So!Wjn%t8Mieh|B^wCWXXwnA@J0^993m{;!8m^t^#9BETC$}s#2D9M<b=8zpm
zggvh>Y+X|yyiGh3yj{Pxtx%6Yq<1Gc)M`h9TMv4^|3WVX=K>`O5<ED7?ZqSsB>}Qt
zst12BU04~9W2=Lk@%XC#GJ3B#XQ^7U%>R;JkP_ZFiflqdk<FsWwnMTnAJfFJ$H~TO
z-DQ~`*%3tcbIKWM!L!iB&4;9){Vz!0gG=H|Y0^K*sMiJi;6`u42E*i2IkEHcuOKg@
z3+8a@QCQ)R*LeO|WfeYd{wXE`s#$Och%yJ_H1V!f`=T>*lMZdqo}X5<pxmBNyR`g{
zGAs!y!|K1Vx?o;gpee_aJ^1XPCB^Mf3@E+R^NLn@3mSbCbQn2bZ&mT2S!c@a%v-ib
zYA<d}&1}z)xm&r`{L^k_-t@US)9zhTM6ihI8oN%!(<K!-1PU<^-E+5-XL*T`-(wg$
zfc*I#tkh8K=RsB`@g*ag!ib_{v-YqBN4NM!3I~})GzMA-!)mNR7XMY}eSH}jeaAW#
zg^u_FMc47Z%*_7dU5WySBOlu^<HVna<z;SnseH$WCmR}0eYitj>T;FIq4nGFfUt4T
z_2tX2?`aT4$Hqnr8}?pbu>##&!grYXp4(Sfh^<biHEQ`!g9i_iSC>b{I-RlN<yUV*
z`sX0o%<iVJKNmA7%>MC~kW4S|rBF~&G=5U3WsF_*ze{oNWEoC;(RyIj{6K#B!i|eP
zbyKF)cchY0CQ}T?5^y{Ycf7~1h|hPu1_ganSkMm*y;(c;&7lo%?1qB=g>96eckrN~
zHz7g)*h`m|o=Q6CIkjx$<@2YLizq?QXDxC1on?iK)=;I&<YN*xC)S2x&S<MUH_eir
zr~}^rO%p6??--b*1rT4flc$;A!gB!~AmTrQno!!Ey5Cx;O_Lo9Us)gddqWOeDwg`{
z=_~7sEl<z)WI6Pb6oaaljbU?N0D?PjsJFbizmmh_knvgrq+=<Z{}Je46fnXyhHUDv
z0dxm|1PWCEPc^hbS-0WWWA_PE9?Tk<+ELwKJU2=v$X{xeC8gz>`J$-a+<8^;%MI#z
z9r0y>=;eBi-e2x=R;QbV5}{m%e>L@iY5mvE9n2R9^PXSepWRw(7V<N9-uGxD*lm%M
z&mH({lVic)raUkR-`&XDxVqn!Fn8!kOHONnGfJYP@^!u<{Lp?xx-^^(fZ0Q(DnF`D
znZFnD3o{>EIqS@dGR~{#&;N{Hz51c9d8gB<oDH+DIz4lCbut&)NabvQO;5Tl%a^DU
zeatVfm|C#v>})az|B9^cKC?8hBy%c<uQh7pD*B5zR4kbi&y`0j5iTSj+O}12U)fYf
zINDDZ9qOE@MzN7juAC>6c4ChVtMu##`cBV(fMrnb0KYtgao$noTB|&72ftNHz-)3c
z*hL<VQd4=07|IK0DXH;MW@SVuHFA7eNE67s%(b0z8JwvDdw5uh<~g<Cepa+{_$l(q
z^XI|#KRpO%ODebKswT|_|6UB&Dg&RvIT2>@Kk+Z2E=mpSqMSQ)k>&2n(<qD9NLehY
z#w2?>_;Y;gu+qq$7Zu}7w<iGRX$;uo(w#9;^Vmkkj$JB$;fyqLGjkESDXpO>pu#Sy
z?Xj^6MQp5H{mSjF>L{Rc_@F6GW`pa1Z}2(Dzd=f?0(F@d7Pvx|5|+&RKxmJigL}lG
zYNe@b<NrkOB;|?!!<H=IC)=J1zA=g9QyB1=0xoM*FJV*;?-FO)$r<O*W7Ekk%*Eu!
z5ZRu>`1nH450hLSmnJ8(;Qp3@r^94Z7?EALmO08;#Ry{~j3<gmHc7t|Rx~28^+Sn$
zDfS82;Zy()`M%KQY0EXqoW(w0jaTdI+|`gc#gO2st5Bw7q-(>vF_}`h-r0$Ti|ajx
z^!hY&xh*g)&A4XW;>9Uc3S(_bW;lh>yQAZc9=VR+O9-ILTc^y7k(;9AT5A;koyc2Q
z<Dk+3#opX<d;Y>&H_vACCqu0p)}A_>ipMkMv}C!eQ%yWwVy?BOZBkaDCx?BLAGL-f
z;YuV6^coH^O)G&qw~jo^X@EX)45OdA2j0Q#4Amb!$UMZHLF4>c=`KiNeMA)%{0EJT
z_b=#OD6dHLl*#)S%<q#`Bzda9L#gxbZAY56Ox|{AZffeBgKe^MPhz<oCEab&UOjf-
zHLX1{(Wbq2?ATSUBRLsV_FmdtE3i48Ho>&bBfSeoHrGMf?6C{#HeaIXZG>{|1>zr2
z$2u5&Kcr(>6I854HL<|!2NKulvlG&;kq!QsueI$*+O?v81JtflDeWpUo6ML%<cXt{
zYeK&39!KBQuHl9_->d`e&HFMl_cyoSGt(E>u%l~Azay3-h9<hnWt!c$d}Z}q^9J+W
z>Xpm;X2YMTd3-UK8AOV;U?4)VT5ZIbUey-byi<msnLBu6TWL;4Mo#Ir8-sJ78J^;`
z%@A?KQt_25Pd{H(TwL}1(^sy*w;U1VlREM=z6L&L7t~>_yRP>R1&Y<1W7<!zD9l-T
zVe$OaIf)!7?qmH`si-<EzN)v-<TOZGg$7k09}ic573Jje1sbD<D*xKk=|#G;kkXxM
zFam;@kGfk>nEfC~>M-BX5cLc@nMbj!tkv)t+EGp;n3U2<OnQ&<x<J0v<WMQ&qNUR4
zIHk&Al7cnTXopJWFiNFH^l!8@coEAEUMIM!IP|kPl`0;6I$kyDJ!n~q@Jt{L*IB=Y
zG{ho_J-Jhi)k3!sP>yvGnDl{PAsQlR0*;5?9~3BA>p5I5XFXfVU%mv<6hR{~IGLDg
zz~K_xIRXJ^JHaI%o&4*Fz4{ZiS4scHULm3>A^zX&7+GUBi4M+IXhom?=WV;DQ2kpV
z2J~In=&#8mU>Rd8(tBP@%AJJ){&&89_o;AYdN?zG>r;{WrqnpE!EyQ-JLqxz<~zsv
zzhPjVJkE}1CXd57K_0=18N1Oqh?>cbCj2Lk3G}X*v9`5TTiD&N#pO6vsOPIpf_lD=
zkCTMPvEDgM762J{j+4|oah!GvHyKJ(CX12G$b%ecp_5}KqMiFE3ZfL0(x(S(Z)B!_
zAcZ;Ou%x)}aQCu{#a6aTE^!ugl=LoFllOrYc?ajV9GIPgQuw=f`guItJg}8~)w8T*
z_hCzZNA`>jDfI}YCMQrLlIdggH3b8|%*{?;^ytFwb8AZT(u=IO3)mv||KsgF0NW~(
z$6@Wh_axb}C9BItvSitko7`ks?%i>Z?YO5pj#Hi3>7<ZG5~n8w(i2JuEeQlj=mbK@
z9qkAm?%<At3*~?V4np`*Vm*Dk`<{wR9CLU7FJMV;-p;()+1Z`heY-R8N>=K_ceX66
zHkacxk;q0=vwOsC!lME+V}Yv#uLvO11qZ^d@anMec=+J3@I?6Nu<#_fb69u+e05lO
zEWBq}cryHWSa=*f?tu$vFC4GuHQ`ye63ww7npV&TNakM<M=wf(aPZn5;}rULGU9b`
zPLU@|8TLJ@tNPA<4n#Y50nz7Y`>OC2`^(Oq?63H$v2^8w?_6HL{_@)ot}I2r-^Rb+
zLBFX_O<83rlPVGu$1SNSn_m|nqK^-|TW&Y(tr?pa<+P|93i2D^p`AcHlqml|j*#a8
z-rs+-MVZIUDKB2!YENohJSMrhsmaEEs}F_u*EEDC=0;UCHVtWS>Ijk-YG1H=_;#nw
z{QWnEZ-46k5%CkLQzPC_qV5~<e!_L`$5JOoyq`=xGvfWYq4gIqL-c0;|3Gud`4XoH
zAFfLV0pP#aBl^p0=@I+qhp5GY;o&-QGB7~l|0AuU-tA9>cO|Cu1_XdWNe&RQ?|Rj2
zkd9p;GL8o+UKs<yt>~kSIq%tv0Lo4?=YK0;aLOdXT=(~MDv9x!I`kbVMFMRPI?Bf%
z4lk})(r8O;m|s${xFI37w%4RIhuBwCv>sYiTCwi2d2=6LS<*NG%$24ZZ{LtKZhrBY
z1$FVMjq`HK7LK#Qew|HYwq(t_W5%=-t1HUZJT`ywd&|LBicrojBc80xablOthjOL#
zkFtZ{O8;0-15WF!gs^l>Z*5#^BYr*Gm>O5xJEm}Iktrg7+L$rZ@*_+|Q+M>;T)yUX
zclYVFV{YzSuqc1w9i3C}T$sOTwY7X&Zq@AK$jIW^Rk_p3t@Ke#aa&sI#PWoM@`<Tw
zZN(PXYnId7Chwn<l{IJo<ZY)d@%JsR+d3mVd&btf#rI*|Zgc;e`4@8^?_ZR0(Panv
z6r%Kj?xNq0rt6f1Z>P5|DlA#toRZSKxTJJ(OUl-W)Z&<!!jy=Jl){*p;?xMZF)&=a
z?&_BT5vui!0~g1$r<CSJr6o(6Q@P?rDdFKMMWi@g(6n(vO3H+dO)Y&BQ&J}OwG>ax
z2@A`aSX?wAD>O7~0$9cEW&-1yHsFFAnp!sDf}2{3CuN6)Wlt(D8jlN(M|!o2Jq~Ul
zxeaiZG8|(bIscSeP7TQKkOc3ig#p54=#PF+8D$F(vqh;?QMRyfTa=PL4)wO?)`{uq
z6I+{Yu21QYF_e@_!ljb%_)<k}fR)1O0t(zOfYb&u=9W`8!ZHFo?uE@p<s8B(2zH+r
z)`l8s9?shb9)^>U=9$5L?jPVeROSRlUQ3`d<58J<zDzn_=0{TIeky=3gXyeh?j&Uv
zlQKwmc{(J-E}jFjN2pjN4=X;6z<A$_(gnb-)ktaIOH(ZvBq1s`vbt?nZe3qzrmd`@
z!cHre2hs7R<H}Q_a>m;7TJvIp!h+ZZN>fr8FBkM}QogHCkJToQTUuQ+rzRsM)pY2-
z<f8PH+;O>yWvO9?XoHpx@f7F9iue>^ofW@4KxgL(*8MN_Hs=3#y{2ZOA_b+3T2fM4
zP!Wz|k*`S6|5EjfuGck?U(T{fFS+rUvdhhorkV4<;8Y~YkD5!_;m^#IB)_AbWH0vS
zc;sJ9kV!}~Ig_C_%awx%$HB*&PueW8@yW^Y+0pWZ*bs43xgwyH36>bD*JVwuh>fk7
znw2@VJT9($s<UiqTUuJ%(z4PU+U)kW8|ZD8@Nm<r$3paRq1J4vSiUu6VIZ>`tYhQi
zD?2kYr&Y$sS5C{!?5vE3b@tXJB_&HR9{z5%lYX%Z&V=2N6+loWn1HSyg|n!4;n(Q8
znq04ivzXK5x`tf$00%fvx1fGgEC>`lN@(mruullAL?Gv3s2uzf!OVO)R34=I%2Q%;
zk1LPxKo);*CDeg?s1o$Nx*+_#w?Gc{1oFBd7%Ld=dKLJU4yPud>xm5d6x@MY;~;Y{
z8rehfc?hLlIb=9{QMX+8=HRXfbHQwOzv~Z7?BE`U<D`C1B_WzhfkVJ&BKA@A?Vo^n
zobV+ma)N(h!hR0|aoi}esWa19wX7{{g`#*-Q%Y2Joz2lylq{!D`i-09@mJr&1B7kd
z!m^SXowLeb`YFA+X+kz09CW5=36a-ScNDlJY(e#}7nP&yI&}RSxo!x-*MD?d(3o0^
zuE)vnb(Px!o+j6gLHN1`-8Yi!CNaJqi>{-{bu+&2zKrz$Exhj=JPexov2>RER$(&p
z7J_vkz)fWSIfumKKTcN9$RRYj?@R%A-j2lDGdTtwE>JVKMjKdB!<J5G*~;Tx(~hq!
zb9QcSV8w=LaCgVyxjCH=|FCP<<%g!_%st$3tSiC{9+wr(+%>8D*u2cldB?gZ?V4F6
zW2?*&U8l4in@>$&`~IPpmP7BaoqlR_hxQc5FWx7P_asAl$z_iJ@989*D~w($!s9-&
z`Shb?Z#!NKHc=*Sk2PKakpVMlUZ>Ktvpvd!nptTk2Pe5xA|@rt(nDpl7mI)$JQK{s
zShg0O(d(FiZ<`u|H8LSp&R#4RChO~(Z;1#MieD@GGMI_B-d@2Z8tR*Xy{S%bVk)Wm
z?9<?tYJE8Sv?(r&Z4XjK$iaB_wwOq89|C|eRr&}p!w|)e2lra^>}_1##<>-AkZ>ky
zuQ}i2>n^vN`iTAlU3Y(guTxOnTJe58FqgDbDZ0MI#c3z!1${B$y@5~tA`Vjukj$P0
z&Fsn3+!wk`xg*RZ2HA?R0I^OEvc;y*JK=&EOJ=fff#jJ>W>B%AD%Y!)BBQC$0yE?h
zIHnGNZf^K9j(@{D`aw1O7(V0JI^>Kas>4i#zXR8SRwZNK6We<MIfp0VGwgEb@W7CB
zc(m3IdvAMK?)nJENFKcZk5o%vK;6ctmi+PYLx;f1tAGjK0C#U&%l-rwY+lFio^pVk
zz&kPn?0@S;?p@q?_YcezWNXWD?wH};8)021VP{N3ql|O!oE&ybx+C3b9{+}>`|c0>
zHhx@{B-hAgDYZSd6AmnCP{Q@$I@etk0MHSkV*^5J7Vc?pTT+v%mZ&AU<v;A-@ZOPW
z%0Hb4)CFq&>ObwOncSA9P?!_U_G!0vI2C$pe277oDc8?DG&4OeHBKyX%vex&>pSab
z$P6K|aag}mThl7K9Z3%FYcPxKoPLYE`i)fDEb>!tC#T*{?mV25l!M1U$@vF3DM8A8
zQ_ejRp-jMM6?I`zqU_JIg-QBxHGN34B`@TBfD7!)WfJubRbP~iMT(sb@Bam?M9TXM
zR_k{XO`m*)RN96venHCq9a8AGL6SxPFYa8{a<__loXI6|mMeX4zbS59jpW~XAhz+b
zW_~?M>pj_Q_df{%3o^%Lgc}^?vBeoR$(nHFnM}`H-jVC<+SMwXDVzOBjx``u862C}
zk`tb{bW(Qm<n5CYymfb4oLDXmj!G*{zJWHT6-Gy=Tf&225EE(3Hkwk<Z@oOBWJb-H
zl~Zzr@Bc;8T#zRV(OaTLU|C2)+3dRP-nMM!o%aJv(~5(o8iQVl+hCR3OuaxK5eUi7
zWA2?ojFci38IE}h>zWo8Zr{187d&jNZJv}Qohxm*Wp+;9l9RpYXTz$r_&~Kxs<%30
zle6nGqGe%ns!)3N@ZLwXVv8e6Nxk__VAYK$=gc^@u1@&p4<!Y*oZujZPA7C_QW23l
zmB4e}j{1(Ci)WTf-|=9NlH;9^df+)#%pEE=Ir8xt-LXc)goMd^X0JP$m>!@;71bFM
z^5U2Gf<t;OduUQ*z7gj3&(0rr5Guo>mo^_*T)JjntXQHkSxlPUYi}q~>Q`@T5{Yk~
zFP+kIlH;Wa@!~>y>KP}<e`W_iPMiUMU~_?m{qW4WbI?Wok$q~@^V8macN!J72e0=d
z+$*RandIyR$Ks$f&x0%FJ1#BCuv1qEvj-0vG}CdlZaOijS{v9K!3I>dhbQF~-b}b2
z)40m4)F%wCS|S05ZflYWxE@DGpgQrhEHL0Sn(q{v=gjc8t8WZuXCn{BR4}#VW_WIM
z$eS<Sd~)SVkkfs5RtD1tew@^G9z;7TY%2ES1NXDr;iJ<)aa_Z)dZc3$a89QGx}Up#
z&iNTUiH+EfoQJUy`*(Rg>gQQM=OPQ%P;)c3U~lAnjtktGBTUrSSNu|e`+4r@`#BoZ
z+fhH?hx$3B@A-s`@u+`1fcgid@BJEIPe*lOP<ul9J}th+HpGJJ20^cp#E3xGa(qqS
zufo@!_J{Owfd{{e+&@9)pp)D`&@*UkCui4UU279eqyA0@kQ~n@PjE-MiTXRc@fLOy
zSbhsw2`=MYxtqZ*b^$j(>;uizX)1!8xAC5~>7x?+-^G96qs`!@O}N|<B<#afJ-2TX
zpV)S4{Y-|H8?=<yfWwa>90?|IsHrDArE~K5czt@JQLH!3D@f~{+#WZ=J@{>~QWLNs
zF(EQKGFYjT%u7v<jEQ8Q3sz|Z7T6Nd?_d=NwM26Ltq;v)PE%J&?hw2KLS%ND9VWaq
z@3f2TYIvv>^s@Cm>w5b^UMo8nyf<g{oDbmMCpUlf)#fKRef;qzvTn7XnoIqK$Pou#
z)G}%`8&HEslnJ`j81RhC3O|6Yfij^)dFd#)u?nm_N@RHtYOmEu{*)j@AaLS0TzrBk
zf_@MDz-0xIideNeRso*IL^f@L2gE@P6C{4)D41Ray6zx!o<ekPA#`Ls9Yi1ouP|9-
z98X~~gw!)pNt##%TZX9IQ^g)W`i3kJQF{9hB8S&d9qvJOz_Fn)HW&Cc#zEbKFrQW>
z>U4=Jb_|?U#csIs5~>Ol68Onc^lapZP@mAz{?GQQ(s-(`e+AX&Q781^mp8K~K+9$@
zk-eLjKe$YthATX|!-*!r6`T3C`HVV)?%}g!+}WZt2VC8h?K2?V%$+6MO1((^8OuE;
z09XTnGXQ7<05y|+jD2(pa;MHsK{Kv`4)%Fay&YYi=>RpLsDnKR3MRAX*vHAcWI+%0
z3FSt=wD>(F=3(%{hJ4U<JGH5QIjB;Y62n4mCY8!$3k^#&DF$DoT7X*-0L^|7fctjc
z=ml^Xr2SA2fnD$e-<aj}AG1V$W0rI1n1xD{a$w7hu$fl^sj%=g-56B}Eu3e`k?R=!
zOg$5+%Cuyu<czQ*v>O+28fb$m%QDlFsnXI0@bIS3GgPWgx`?>fA~pMO3sb+Q)yHje
zs+4!Cw14`OPIU)2R!oMaaQu*b@TC`KzVO1#3&8fq8yy!fa&6iJY%mGz@U&?Uc%Cf;
zJ32^Rdj#*HdtVG3Ke!V3FMSG-Pr)=My5|cnqn?HOrPjiQ@CKgO`9e{*SguwxMr*9e
zYRS%6DUyg(VI~zwH0opR=F|lV9>4Wh!B2<=;@RmzMFJdeGZ}3*qsdlgvZ0@eiTt@l
zm=2{l?wuz;F&9ICi~Nc$=SNX>nej!5+SLh(MrY{iVyTP)&qmwyj*0~K2~e4wrq{9C
zpfE^Aa&-x2z#Le_tye4kR)O(2$B_L8R*}_-s^+vhwIl<VQ;VZuiL~F#LeZ?-94eEA
zn$he#R0bq9n$+<0__6ub;i0vKHHjHvsjAw78gu~~l_p%!<UwF-f~BD~sEos&SX)pX
zE)A+JLKo@rwVZER>Ao3OQUwAr@-V9ST^=6aQsZ+i@m>JpU2>_{z5W^YB>Y`8Fg`m!
zBqBx=W=af~WF=IYOC2Ut!NeS)N}3$t?2NJm$pbWoxNw!Z*kLs0kI!M0vgClY%CJbW
zL?V`J45|)cPKwH)2@!!RN*-pE$0o|OlJNNaq?D#YD=ZIE&kIb7%8|)bD&eKT2wO>7
zY)y7F$PZFY4~!2>mWTqRQXC~|rh7NcgDa75nd<Q^@$ADB{>MM+4`!c4P2>DaFrlC_
zC&eAp;SfTFEGZzd#u;fUoSY{D=qfO-IKmhpm&Qct!(+l!fwBN_QruWuF;=RGx6l<q
zs%}wy@q{er<njb+Y>;Y^C@L&5L@Q<=fihW;g!AWMC;SJ_m7uf_O}~wtFdT)}8>~iX
z=KZ#!+Q{7YoP^SJi!>!bDwe1s;*8Fmk3SBPt726kS|7^lqs+Bn-3>@gF{-H42ouAo
zb?VZr8=9t?(liW{p)%KtW8*d;9+0;U=c4fi`(7kkv^VZ8`okhna?@QdeBGg~2M!!q
zwQt|PEpN|`k}PEc7+TCMX0-Bdke^$eyI}+R0EZ*lU!-Q03b}9MASD;y6^=*Gz<#TG
zz(cU#YXA1zTW{Ug)&@?)InQ^k%GtRy2Zr?Wb8$Ew$tPn(`4AZm77^yZ)F-A?u}4g~
zpP+vxRjk@8r`lR@ddy%+jX@PjEQ<AtsxG&f>my?jPpeQ}@Z4I@`KxBN!;a_H4Dnah
zeC%x;F#%*1REl5ylW<IF4p?0raMKOhEA#UoU%g6H1e&sPmz>T`e{kBoU%@MR@64S^
zVtM}x=cD=-3^SJ&@=;oZDqL&)OXCaO>X}EQLC|5g)dZ$hb!3m3W3mY)0fEYhcvEqs
z3<N0T--1g@`IF%rqiqJIBuJcLUQ|)gIVK^XsuYxgiv=?(tQkpmG^8ozO$`web$}w!
z5Ft@LpwubF=^5FvRkI3n3<1gjGJfW|Hvu(Oh{s?hnyP7pGC&4loGA=3eIhMMB9UZP
z7Zz4$q8~|VpljwUZ7QwEy!flNYrb9-C0483UO{xS5FG_iC*5MTWE61W>_pZiY{Tv*
zbh4@n3#+nxbku5b)S|D~to>@SS)^69y@LE#C$#}~2`33C`aEhT{@n<536?T{N3a*X
zupasmn8e5t?1CSx9l_=x*dM&GN$`r`M_P+ue-r>7)=sSwTp_R*-EJP1N8JdgkoPqA
zdU0bsynqt|nuj%_a+w5n(u+F|!5Rqc0q-+f5iSRNP(bmpdQ`54JmZx28I7o10f9Z_
zrPo1y4Re`4BK}_X(yO3UutInN!Cvu}n@Oo*9)tWE`c*HzB1Eqf)1&|7g{2_aTq4ug
zys#PsYay_U?tUItieS?T?(5!i#R#^XlzYQlE}mKi=aF)6x?MahpOOHr@DB*~miL{O
z6Tw0V>}@yefw>K^3;fKruiL=25xZ0Hqx%uAjd<92w^r~IfxYN0w*ldngG2;-NucCm
z9qtV<7fj(~#ltGuQ?L?Zo?r3e&SD>e`QRXtm8V=0qSp!BoUC|Q3WCig{JrLdRU=q4
zfn9W8<zb}=Hl5(U?k!i0V9QB4Br6^k=hh;6ZXzoWEDN54GnfNJ1`wX(bzF~hJe1RM
z9@ayB1C!_)PRG5lJqUIWr{g?qB1{%srp6KZd0_4ENx>BYLpsjG7NX}m=!-;tfQRM5
zC*Tz3PEPN6*bG!IjX8whPkM2y5v+=oyI(-@uu_CuOkl^o<-$<8c3d}b0*!(ktO=FN
zBCwO*XEY#KJ%K&o2RjF=3G6|)i-*;tay8@`r@ZBwQMn=ld&pal4k`xq83CsUJggGd
z!AgeZ^uSxUdQ>hO>w%Z&VnlBmrib*vgPVe2b4eS$=EWU{U=s=KqPN|AxUaie9ySKS
zR*`aVcySZqldzYRd(->eY&ZreN&kJzi<^UBDgt}k`;1!=mCu;-f+!ll(WO8(SP9o7
z8&>ZwXFg>9gl09VB*KxDA#Wf=*b@rFdA-d1sb_xr?T}j?1;C`XQ~3<>2%Xp!3<N?E
zys>$GN0CLYv8G1`<xDP#9<%k0E#Uc6c1M6wu1Z^&-?4VAv1?fufTy;il7+D$T*)cL
zq$G1L`|-bB`S;(Nn{OCj8WrSRyzPPchtT{s{BnycojqYm1l0Q~P15)cEg&)J!=Nku
zS0`sZ{?{wteb~~ne0*6{Q0C(85A+;j|HOWNxkVrqgu35keq$a%wnQrk7eoroWdCTg
zz>ellImoJ(2wF+xjR7+@VAq;sv?42m{(xHKP$JKpLVv()wKK^5jzNFG;Z#$|1y`a!
zYLLGUn1&r^yJtVMeO$x#XJ&UlyQ2ZTHB-D4^tIK_1nccPbAamjB>TRch3(_J*pFt4
zmar?@#?D|@+jr!!-yWZwzBgx4`}pZ4MZJ5Qn)db-7WV9EZra;h1TS=--QLi!{cQJ~
zXYltkR2xrb!gTiUvqVeT7400ET=p9;8DK_tKwtY<?$K-<Cgmf&7yB^5qma`ODJkug
z8EDa@U&~k-b&LaukV`0{oRnE<2UdWfG1?dhqXtfZph^*3q>FV%Mmq7?H~bx|n>JHb
z0J_`QD^94ev&BXj$BMxNcDBX%Z2P~Q(`Tv***$F_DAV<w9Xw}r{TckiHl~9U<SzV!
zj}rN&g8Y%YW+CLg?L6|cM%Q1!&ukNqoH-rc1>NoJl}!BL5)-#pl}T--B7}>P49vsr
z46yiK=Vwq6j?T@Ejhj0ip6?wix*g5AMq_TXqk9GIuHW31mDRPmzJ5zrW@gux`WrTx
ziznygOfE9_;eOb!rcY7dFdw1uFY)Sm?j2#jnt6@-MtGHj0R!3V`Ww3kMsoQla2NFK
zbcJM}t0%G?jNEG~n^$9Ugo|K+EL1tR__o{5>;-37m^XW@EikYnAOM2O2EeWZ=h*_T
zuINM0oI!Ps9QuA%=@+#QBzX3&ge9BRYIE{m_Mbj-<n(^}F_oFXkW-%=7G^W6`dPLX
zobfyY@s1N_PGAmlYXClqaKdXBE?&Iw8ob*z5#GHRu5+#7=HK`f%>SXf4k{1+Z_9(5
zH$S)qyve43H)n$9*kZ1H6T1ZbipH|AYvjJd2T#DSgHl~3g$KQLdeaBq&A=hL#Ddrk
z=KOCj61lXn2N@l6KN>kI1cHIPYUTbb;^g3ne3;F?gN_PNCK5_Js<<PsZM`#g+^Uw8
zv588dCOA0W(%d?9U$Cs`-g&J%yE6C~+rGHk^_7%yTwjMnp%|+Pmd=`Ub;-aD#1j^c
z?eIn0=J)0tq+cg7?2826oDW_`{rMb{`oXu2SxedZoDb9=c^<QF%;TclKio5H?gwA3
zyh$ILI40|K+VU;0uE*!`2W5WnY^%oYirRpliui8yp6Mq0-$qQyHXuC1FnhV-Gxl!B
zxLbM(XN^xTidCj|-qJb$SSC599-Y;glR3^AZp?4XT)1%UDpOu-Mqz7CtYSb_JPj0~
zR>jxNAJe+hsIcc286BO~w&IL3azs%Zmtinv#%Y&MsJ0fThDTcb>gC-oj?XH(f1;a_
zp5q-;o`7mn5~v{qO;~-qA&6adpxL>eY|rP`THyFuk8Z4uubEvCSzvg`7zP&E$Cp^r
z+m{p<FKJJ=l(gHy!Z710LxG`SR!w~E#>XUOt4_|S-qh28Ci(5U$QJ|hr>rPzSXLh!
zTfeNKY{iuPfEOcm?F^%B=;^DTadK6e=R6#>5Ahhty@ByWP{qqoo^(<s&&C}sc*5D3
z89sO3O>okoMD-Vv2z}cFAZhyU$%)H)Oll|(Pc4aUXl9SO{%r<z3K=_(`YFC<PSNZG
zk*X*XujVJJocf6D&ART6EUG+z#>VpU4b$`Trf(=O-#8=xu}FJqOiZ!eV6Yd*#FW}2
z!B=aaU74G^^4YcP&f@R0>t=1Li;S$>G>iX6ZIFzf^mpoAE*G2MwpsxG?zi)G$Ocs+
zo2l-f;HT6(0y)WO$p!KD?o%3eYbm!<a?hA%ZCs`)Iww}6j?ETJQ~~;;=%k62w&dnz
zl~qf|C1#{P7m{u~vSmVjY+<4nZwrggO9%yDOT&Vdn&`^js?z1-9cdHS)Rx~|2Q2z<
z9Agmi@=qi?8GrKGpBs(RFZh4DWu*P2;CNkacw(krpP3j|UtLr#H`&cm=_Yx3M`Kk|
z(~|P?rA<lIjfI5?HQfaTb7~R_*0+?#W<|^8(OI#jE%2@C+z7ixtF_o8a;w=B`elv9
z-PLh%)!oI7%k+kxn#_*!*x2%p%o=?BN-zxx@jJvbj!ll0+r;g@rMRukB4M&$o(&m3
zQwJZ>8(mAJau5)en;2T1lR8!+E1ndX)7q0))Kh1R$*zn(Zz|Rwj|!igCy$kb=$O*t
z5=(JeUQTL|rlPw%I<9h7LB_<!v9a$526@(ce}d;w8{+uzc;#eJqwx!wKBrD(Rhr=K
z$<9m02)k~~yh@9G{K^VjLs_;iLlG`F#b#JAYYJ<ALQdhl8t@{u(Gq`=5hm2mEvi{F
z!Hz?<jMZsEHCkIyTy##NF4PFV!+c;}`T)ry8?PgKlJNM#=wL>C>6<N9hbP6CNJ?2(
z1Ueh%<Q2{=w=|ZwG{x61sj8e^m8uvUX_E+5F<J33PK&Z@QP<Rp9DALN5eKOi@En##
zZ0V%*j$Uo(oVNUV4M~==jx2LfkTy6z&JY&w)K`uH>p)FKK~Y|YBqR`0oNv^DK3+k5
z26Lyc{I;GeGp@N`J;1kb{4s^>8e7f%jux=%b?V`FiW45t=t*f&n=$yL4Io)zxCJn^
z8D}L$ofp~rUnrWr3@r-zoLksU@^D%X?!6cEf<&ED&(7+Us=xkPEuRQyx{h#q(1r+K
zL^Kt69a7~<XpGOT;;mQkqEyU2Be6xV0ky$la(230N4-;LPLR6PVP^P2Xq+-szLNMl
zU$H9$T49xE@1r&;Nm%tu3g-tEp?fcirr<ngN;IQD!ws5Cpeck?Te7~WCuw%U`t=3t
zZz>WVSzplmORDG<3@AkZWB!i7VCo3m<#{)9gc7&}a2L0KYy$NdC}DmjYp7&}%>c9p
zAOlGdNk*=eNF!B&F=1j_<}9eu8seFYVv{<3{_F|HfQUe|bLXMk%enW;hz?wY=tMDi
zCosjNgA^j~F0c@eql)-<FEMHc2N&)F-?0kv_vwO#^TA~FfoUA0m&0koEHuy5VBSCy
zJp%?aPjGP!GlmIbU<QQ>bxaHtO2t_z&eW`YoxRpUZx0G)#MU?n)6EIa>f*Ta46@M}
z)9Xg`&f?gHz#H&_yq~e6T5Hsx-%)E1&Cg18reuZ$(J^K#-5r%x9amK3OfaWY);Mv1
z3e%~l=fhOyK>-@c0r&DA)E6xXR|U?e=Yu@6-i74)CHnaaU&d<5$N@?)wKq@|wy=nv
z@6wyu3#d#leF{F#Y#~uy@BvV7ObwCQbF7Yywt~5#$lEaIWu#~;U~gDTu@(JJW^D0^
z$#t2L`Y3%{N?jKICh~p=$?O3lGXvRKGOX0dJ3i(4p|S(dhN%MQ%_<&FhM?T6?+3Z)
z8Hdm_4qoRONO-u`CzUGx8Oa%*XM8tnUZ5(xcerOr`t@dRtk{8`@viV3SxdNP>kk!}
zJ<U0sPJlhb$xvGbhhqXZdIXzXmu1wO^{t4X`;qS4NpvUT8rq}eqzaZGCDIWk%8~`s
z7PF-vYsSo?!MY??g9xN6AdjzaH>t0hcooCaAHKFjboMXTs_GD3hOt8`N_aVdc-e#M
zsv&P8hVp_e3&S-pnC`1AdAeEwl4s3F&AVXm<CtKH$%R{&66oj!6eN8kjMz@D4-MY@
zKIDjLY*8<gWDi(0<N)q3_{gc2J94VUM^5PlAQx%tf$N+t9flXKuU?mz9rFT};l0Hm
zcr?5qrDp#y3SPJ~x90?*0vnlar42VEP}gA%(v@&tSW<DUIX5F!Qwe**l8dd;xfv-Z
zuYWFA*x5QrBiQ?{$M*kzoE9vg-+&J>r5<~=fE=$bT|(}yrnkepn1kLi-0tyBv8ce!
zwX=#MR!gI@5)!haq^l!}X4BgfDm$H~EW~hZmdV*!$-k$c$u0ve?kBPDuC*gKH-}Ga
z<(S!LN(ysYs>>^OrN)LDBP+P`!dK{WDv?=^>!?(F6Sq0M{@!gFNTkY=R2ZJ2i8m@0
z#&{ilbbN4lY<RYvd?8mQ2t8LsuS0Y;6In$`X|p4Z1ngCtk%tH^2{qMq6MIT?y4o6=
zCOFnEU!#dhWptV-Ym{c5HYzqsyLDAuc67-9(3btL+s^L(o>@W8$Or-eBLb9F37i4Y
z36xq2h^SNSw_s5lyY2FxAK8s<U=>i{uhr-hENr8uu#4Oq0bq}IfvJGm!2Sw$0%jxo
z3+U)#?{Ev&3&euy?i6vmFah~1W`RRcE@&5Y3swns;aLD`2{Z8~)wr)H2VH|f*QWpR
zeR@hxd#+)1T7E(5YC~>&&VVad61hw*C`esp$Y~cg;mcKN1^MW1PWx|{1{9{>8*q8`
z=ty_Nqw-oEx%v6Ij@G;=VTk`#|1bVm{=eDWYu%wXU+WH%{aAK~*eSe05H83PGz;bn
zb_yO4yd?M(HM<5cr${Nh%|Ro?A@nUsl_)KVWrAiN+H?z=bnu6C$c#j3!HaD96yEQF
z%W`-~Su(J7K^Pfi&H}h(IZl8T5>a$U3C;YT9Db6Z)QD6VQ<RorM^E<)FAor^#gRl=
zg@g#;CP5+`4IM}LCwqEuSx>a9CLp1uVrgPVb{G^w6EsIQN5uwP4E0lHXZ)%bO2k1y
zf#xKq5rBeJwM8FN?TjDa-e~>|1ky5buq`8tpixng&F0u(tD%1K?2HHG0SpCbiCRes
zO|51Fh>D$TH6%v{Gf);JW&#X`P=*rH$+@|y5eX489h%pD5Dd@_y&(+WNI@1B-HO*s
z(UdP9GJz7I7*G<8f)Ykya%MzMkI8{?fgyyw%t%m3xC4m2cEle2MMxme17sj#A`+P6
zCSfLmXxH~*M(X!0c|@!(D_dtPj&tRCIUj@-%rJ*ZjitE8v@nXs6}ARhc{xd>!eEA%
zQ(;PCo+>&eoXAP^rso#oap0|Aegm{ntPD=#C{kuWif~^r$08jtfJ5x3JmQu!iNYX3
z9F8`EM=zWcK}yaw<0c0dD^B#uovDaKK&$}(r!G>P;B8`2h(*hOtcX<=z<iippo&$n
zms0dXvDBahCV8By!1aRbMGOXp=rA^gF24F4otD#US0(7!e<;POJecQtF<%v+0QwZG
zy*H=-pCQQmi^O+aFTfmphy64rl3jKa9v81d7aULT5~y&@4^PUr96r34`Rat3GPx|p
zK2a!2ZeQO-jjha*Yqb#?ORUNfQQBLFjTR$#)2*N{klX}PG}jEr*%@QJt7>MsITYIE
zO0ooEb$DVF0WKVonyd}tw9Mpy^4pEeYNKzvL%R5tR~A>yE{ocH^YT**GE61YOK!Wf
zblo${L^wwQyB4g)--mEI#@=;oF!+%Trf0BP@D;10V+&gB%a$?+X=lf#M#t2q61Cx;
zz6ty0<~*m=f5#lWO=<AVX~8$5HXQXHpcyOKr)hP9Z=TEUVINBZ%X_kghn~yo`T1wD
zb6&Opuqr$U=E~zFvS_O7)QU{nB=)hM?B@^?SkA5x2lQm2-}CU9z)kF}V4bjqto!BQ
zc*5H2?4-Qj^`^l`ZGZ3e_k#|y!O4RGll%|BDNRW}fbZ;ECA&x5!k_&g^{M|#{s{fB
z$Lp_og8x4{j*oTP$0PDp2lM72Jkxa}&=wvY_K7?Ow=c?bejm55H|w--CD%I0`=zeI
z2Xo=NE56ST8~1?Y37+<>0((}42dxHEn?|e(^wuL7jaJAr(i&h!0T8O?cKNkfrYqP>
z$zol2c;I5{q0J*ON8iT&mLmxS0Rg=!iLS}iyO6$~Tz&i`kaM(ALXp#VZcwDvaIe6~
z5Q0Wjvb<_BU$c>K(ifY~M^|RY*y?(U@_Jfx0w)#ABx6%^s_~*6`?FjMw;A>9k0Vq9
zEDQ>KKXz>6#EgPjm2uJK-4&Xk)SSGsVoOPJX$<=}d8|BdZg>=vJW4rdlN=}-PpB|#
z?A3lNqDepod@G{995$kB)sfn!P$QEqtFz}+Ozm3Kg&dfe_^cR}P-2T5t4OVyU0JoH
zKEA1?ywOrVvoLQ?qcaegN2o7#0|f&^BpG={1r;@59T-!ocgBYq;^Kp~K|$uMjxtM9
z!@T^qIicF#j`T^Tu~;Hh=;-?kUf)c^nkEHU$;^1xZa1m%2EvRyaLrn-0aBW}<z9BY
zoDP?R<+sd{E7%7{>KK{efZnNN--TVSgA?U=WmMWp&mO)0C6S2ICQ6&(KM0$ne9gnX
za&+Q%)z@O1nZ;(;%qz@E$hRu6##u6AP4aL>hAz9T!B(+yyxmecZ;Z|!VZ7u_X1^M#
zD;;4K#!y{iPIO$6O{)pj=*H?2OiKHNH8n+ZYZHXb#dr&B9JzMBHo)(8st3Or7b<ae
zC@D}6*zkcj<2ses>R?sT*|BO(Y)&+OHQ0Rkh%r6nxzvoraZ9Qymo+EbDkmmI7wH33
zl94nHj0;W3i^j16w26hW^%JP7a6S8B-Oc5-YbK^S#xF0e>aC2{D1*bK)b!D}pMuYh
ztFfD~_r)iu8$rXIIypEj4-00`tckWsK$%#|-ZNs0tdxf;<3e3la~S-WG{Ia4nUT5k
z#arUuXHCE@VDW1J%9p(Y`Cv+4=f`IQ{oBQI&7pZ*b$uB3rYpR*4!`M2k22d$^72cC
z1qn5C3JSVw5()r?KzhFm8>^F=mX?<<X-ca4X{2_k8R<3HfEQne0WZa<pGOn~<!5ua
zQQkMFkFrp>rIZ8DirdqiNHee1aIZDw7c{6X&ZxYxHG2(q`Q2gh`jGg#`DGPL#w8|J
zOiC%sk||O~8uAv@HZ@k@S6mIQyF>LrX=`d~P9C$kG0EP#xVU`I7;}_bM|WIL_visW
zfdijVyPj7tz}{Y~lL<e)u8Yuro1aM@sZFozFM##G+h+T>C-Djg)XFrPDl!ZF_;-c-
zT^##8{>ATOo$~WFvPeFq(RmxAYBXl`s9cZ!1*2@ZQMw^i!hb4*Y(a&f>p${LMkNor
z?{~W?>|LXj&41#u0QK+Ib9#Ue6OD5>Uc-wSokR`}b!qy8M%#~vb8q1E|Dx|E339m{
zx})=WVn#J`m5tv0>F*n5)kotB)%{*U&;xv<JQDS5)ZWqP288-ix=OD7qa6}P?Kgp`
zzgHfVpC4r;*(8Q~QlnA<S~bM2>MtI3OAmIj!0)XGGsx$v70mw6y{^%<^O)c1g7xnn
zZF~Qx{uuc2zZmO+z1DG5UfSq}zPCo>vboAeJN}Qxe}fbM^DzPYbB#DY`1Sm`QF;*9
zl8Y$!`kvmJQTY|U|BVmGw*4=bJaFC;B*byl70>x*xygzCCgb#Vi>aXgEBMC}Dv*0W
zw*~BnN2!OncdK&K7N~Q5iG0B?F&*DMKRTqu5@2KB!Nrz>M2=3cU<qAFkKxYO4O~I(
zt=({X`t;KqYil>+?+vwZGXBKS8QeE|)_QO=ypMW}+pjs8f^*PWi1i7Tcqe>yLP9nE
zu1r`Envi8QWhaD&CS;q8SqY)=F5m5{goLWDY*QA#n`JU`r4Y|}zdRbMJ`w~71acDj
zAtTy!YyTI2=}o=}z6VK6t0ti!Zdo%<i-RP}?XAaUjWj;PVg^az``44_|K*GRTbYkK
zo0r8EB#?bd{ps}mi0<F<9x6GB`_G4khuYi~>$cS#zGe4E|E$`yW<@^zy&}e-Y@TrI
zv5@d6rGR_R&D5Wm7s>uB{@s`Z`vDma>Q5j2v$Ai^%KY4w>$cV$-p#y-(8A2hoyr)4
zq8Z0r!~2Im5&lIGMl$yezk^6gcG2PPaqYcCzkVeRSI^laH5rH5RRm75ZdveUt%{rX
zHwnd5gSZaKC64pUNQMSG<#`3~-Bj(}uh76g6B4do^Un~oX@%CT3!0}(E={zR=Ve4_
zqqIT2p-JefA~!=^$Nobq1PYCWO_A%P6$y2D(I%@&fq&MMpXB*?Z@?$QXVLTVu3KN_
z@H?GPy!BuU@SXwTv#dKL=m)Ku-L%Am`;Zsc6R})E;=Jp<5y>eIm5(}3P~C39a-oB&
z6>9`$!GnTK!H0<2lY}3g&;jp5a6(g=rqPmo+yL)ec;94}f4Wv3CSzZo3X@!Ki#357
z_B%!jBH7KevF)FW+V552NwV{#_?j(vy$v7NZr4NC-|;bAgG;or2D#i2tJQI#=5>Rv
z1zddiH{dzM`~Q<z`ohfXu)toyvGf~|?B5W*Hd-DS%!3U*QKPovCtB4S^h9u%!hpEp
z>1$#Q3fBqTTB3;>D~4G$9{vVhzc-tVy^Nd66s<+=ulMf{gP%=hvQNt*RBOLPy@35x
z6=g%7HGcP#s0+14sYI#lC8GO*i9Rri>OpjDGQAtVAbcFv(=zm&4MXuM1NdAjxHIhX
z9=A!t$8C~8=*N7P07k^1|8brG=E=clZz9=WfH;uZ%mgwF`NGex69&S!#32GHmluwE
z7Kv(Lw+`Y2zV+R`-`x~s3R)2qv^>}pbl$&;h#OHT`vZ^(<@*(ieF`C^G9`HKgrb=R
z7Z=O@8QnqUGNokanM#O5Dd0`HI1-8fcM@<=xez8%GP#V3_`yJhgvcoUW$rrxLZ(zA
zlN^_ze+w7-K92{;@v$JmX5c`mt;7Z*f6oO{7qhQZt!!L1cpu;Ylsy4k1>tyiBje4H
z4$V%#Tpno50SYEqWzgE4!A83!ICElAbVPcE%|0nI0tUPz4iFWl>Jp<=;rg^vi?t*z
zLa!}m#N1xl2B8>!Ag0h*@;KgujHJxP;G9lxgTD%~q#qcA``CGRqo7Fu*l*pp(&5a9
z*cOTSt;IQ@O`W43OD|O!ja?arP@y_pOXRoD?VvW$=W$tI+*#N!jS4O3KPZjS<kPpR
zLw`G_4#Tll;Z8V)3iIU3fMZ-wQeoS-^E_%$-+BP?_#{5biFkb61E=!DRb(8D^@HQR
zYaa_gMeqj%i69%nA0zNOMCUEB6~Q0zr{n$+(<gLJx?l36vs@Sn?-O0*pPP)}FA(?w
z`dKt~--zH(Ab2K%;}dVt{Q%O>b)qm-U!`wMM~dS81@;-^q<dOa;nLT?F~-ZE>QF_7
z{3;65sy_>s{=|LaHt#}h@{CAM>@dF_i#KB#;O3pTZI#F5+idw3`PSP-@~vxPvaD*g
zH7jP*O#<EyKQ3H}#&N^7ck<%F=b9rmyOr#58)h&byO`6NCag1}M|im?Ii11l@bqug
zZNeSC*f#jTYHD2nDf}ngvE(?nZ|)e|3p?Eha9kq>zf*U@&W}H-+`sRUPd=$Ud|2RD
z<{-(7jswMLVd%d7m7jdf_8vZ5^~oos%s*T#40JzB%8-}yp!aaq#~)X*AMHaWE6F}<
zsmleOd>OJ!9Xda*I&=t?`J`&!zAD1^%WNEMci+aH9USWaX*{WLgfAPN6|r%ZnMPw~
zWn6596RCT$&FQoyXR!Z>FG~v#Pb-U$E5+f8OXCtVGZSr@_z0lj5b8_a!YW@LdDzXK
zS_9r<-e(^J=eYX%mm#s9VD}pK6nKl?2C5h1`-stQRG1;L?a)LE(MVpicriG~K8Er4
zqWkl?`&=G*IG>FH6VdIW#h{vdMm2kc-tT@Iw+<smG*CaI_g{UqjXE-hy#x#=PWY9<
zZG)eqCMCXKjBXPeU$Ht$>Fy$Z+N8Ex(hE>`rIhUVY(xYLLf93ZH_4KvtGlpVchN1d
zSJ+O@;102fP8{KW2Qmm`yeH#7G7y&*GtJ%&3`rQC^c8ABinP;Pv=#m+%p0B_1FQhN
z&e8K391z3q83*Pv&w3xi8JSXcPa~L1c)SVj7IyM92U!s<j)&@Rz%V~wBCUf=ml|2B
zP;RS4C_YJgiPP;udMkXDdBEEa4*05TDU>h|uzz2CinOzl{!rLV<QJnhJ7SO+82Upt
zdN2FpUNnn&t@r$AmF#lpaPfNK?xjD3J-9rhjzR6tIP7xz!>iBl1=;(A+guQ`Gb{ha
zUgpN7mGG=^t-#D=x|fpt0@;FXIKKcIryk(%Kg8dkLGI@Wo*8uitZ*ZOXN`c*-R~F%
ze>I(i@b5)7<0-*iJQx2KP=w0A`TKVbxIdNL&k>yU-oGFDai05G?oJ;6268{y{XPA6
z9J3deT*b0UW%p2*m?yBmWtUr%KpwD@?RZ+Uvk%929CE<eB!6qZChX4rTarxru<}ya
zHRzl%+eA$YX4I<6jrX1m><kfi%<a4S?tnwb)XDxkxn~R8(6fvEpH1Szlhd41$Q=W_
z4l`yCL#gA})|X~8FeN^z+Mx%pjKJV&HkaqIv31j=6xDbgt<7jJsvVJIssnM2`_Ou1
z8*gJ)4u3Xrh^IV#@CI^_N%mcPyySS~wO=o35_jH3fo!IXd74<p!Mns|gL^HL?RQ2S
zcUNL}+)uH4U=)d4JkyPRl82ENV)*y$K`If$;pe1|5A!)RpK$-cI1n7~$nzw~^W`7%
z<d$`$JGoIAzx|-bt$T8DM*IF(7wlRd$!O&gqb=9c(l;T++P-t<4n3IT>bpRv2Pvo~
zI&aptaSKkbD9r3p1P2BMCN=aHWlbryj58U*(W?w|utFZK=H{trFr@E8e2DN#a3vpY
z8GAWhbO~Gd0$V_rTz!@vcUONs^)UGA*fGre4G2e%aPY}}6LP2RYBLF~h!3oinDP!j
zgA(~|qV?>yG3AnvK2{ywm=Fo>dN4hd-7dGr-G6q+@le-~P_Df9mOoH;Gr=))%eKwC
z)2vN&y%dLLjOxCHlecxv+s&Q7LeH#0&rBd=lS+gJ9Q-NgWR;P_y%;jdMGiFTJIJTp
z4*mkF!`U~<M^D|lN%lzj(y|TbZ)D$mCiE`!{|nTf6YGtVqdQKnH%abfKesh5t5)h#
z7M@vI1ZGUx7#`fbYs$t5Ni&>6e8%V4gP?1qoLa9mR30No;Hwj*LY*WyIcm6^T7qTl
zcG!XF=sa|WoS=TDq;hXic#_F`9NLPHLvMOBwjfa_3)WOB<o1>Y`5di-a6ZRV9B>Yk
zp9{Rl9;*Zo`LPw0Vk$`=!q(uNVZ-J6`fE23UN>hL#N!YBEE)T<f6wU0`Joo83<%NW
z(0<*)F#86HR<bfcB)?IuTlw+5qZu6O-D1fGu|&B+3HUiiD#^`p0rlH<GG9MUHE?it
zB`szi^}_!M!w5W?UCER&rx1Js55JFtyT4~1A#^72bWRgEPHff2<^BMF!*{@a?!$b1
zm<jG*m_|M?h(o~T1-U|UejKOBFu|9x4_oFW{LQb-xM9mYKtaDURl}A!1zEmK8!Ch2
z^9;>Fa*`7Jm1!Hc%qc2}FH?rf%*NvbDzlN4IU$JV%jo$s<58KFe3{9l%t?We=Q+Wz
z%%Wk-oT99JnTe>3fGY$3Man!V5cBoIo<CU^VDDo-CAokK@d!UCevIcFhm%|P#%YXc
zje;zZlfa9flq%5`8_zCUe0D=c#fGzs7oFW$0pE?BXm9T-$vANJOy`WJ0e$=JfO&dG
z+tEwgloo?BElz7t1v63xzP915-L<v5-`cR@?cHO??tc5~Hm$y{IAd}Q(|aC>Z$Aox
zFU*~Lf&KC5Ue|Ls$Rv?5i8@PyC_og1?8hUhmDI>4MhX5(^y)D;H-;F|1<Rf9!9F)1
zFc63E;6n1rDYpNeN6^3X@1uXmj)7OVuig%`TrZ(7_5;oa1tQ%9h=zfqA><}uhz7~9
z$<NL#Ryhs&->HOa3>j64=R+c;@rmF@y`wrw5hXu%4E|Nvl+uu8f_biGVo8E6r9R6j
z60)IOOpN>JP?{0Q$QwHqzd~RcB=v#$76yo15>q|DX5XGY`)cM_$AEsrBzs#|S;p-9
zmKKz*KGWNKW>rbX^jjt<twvR9JTGkU+xVSR(_eY?u~*YOclB=~f}UbwYBxQz_=fYF
ztEx7izoGk)4NX!>q{SA>NtwuE0s9+#$lZ(Q_*&0ds@+RCIsKbG23NYDCw{Ikf8zn8
zDR}R6b-47aLc9hl10+w@8|>Y%!%fx|81Jep?D$F=uIk<!Y%&&*RbmZ3jwE=TtpQHb
zs)8IKH$T2^9b1ES`UzIW>?Xbhj`c@DTJYyzUqbK}Rz<yo<4FmeJiL#<=df?UN8Be6
zoipyMzmfG{_wDY>bRa4lgimtE_)?|{MUH{lRz+yAm0P?saIM3x*7#cA3JOw}jM;Ty
z)2h~W&cdU!+jn(2au?h+y=#j-Kx|nQByB``;jFfW$j>NM9>oaNTq(|Y_2s7@s;}Hw
z)mFOh$wez)-BnjzHqk;qOpi~k&o)xK{t>|GiV(+vLA<_zc$Jd=IUo)U=Z{(CI9tuY
zU@yb*JTL$ZIEtB3h0L)8h764KqL%Y)YqY2362!KD=oear`J%7h8?(|s$_t1P6V{pC
zpEC(IGWI-y8sRh2PHNJM=fN)5n+U$%{XO+MvjxHX2>guTcA`fa?7dV1>JJnB*2^qb
zF8%R<APCn;f9&lfe6n-TZWwNvt%zS{GscO6MXA#}noVgz8bw@gYk{*h*Emd)<G{GA
zV~ZwkpOT6bCr|B7sF|7T%=fL${h6%I#pFwY!kQgdB#*R2hNl!;t0xXhWSmiKtD0gb
z`H=N%CuL2oN)OUC+kH!UICjvz)D~3lG7@8EAlr7IAg+@I7qv6B#lEe<k?rGA?5VRg
zWTecvMNQ5ag(hfcez`PsT$-0PQo-na>9w-u;-E6PogYK}|9QrRY)d&<i+dL+C++Wv
z7XTS9S5YxrNwv5S2%<nO$U_#W7Wq^&5d0<7YeR%pf+z~d5}>H{U_BR8Q5ZnKCA=Ax
z?1vk8d$!a410}~g1xS1VkPfyG-HB)KrNf!~uy^5!fsA8UP(u}AfJ80B%qa$GmbI(l
z{ms3P+*r~*)j7V%?3{DB%bqoyh^2@AuPsxold7}FubWi2s@aw>ZfVsY&gRXoPKd4P
z8Pl+EY^owe6~HJfYBD<e>gV2V)0Q-KIh*z@sgs5_qz)1L^p=SdnJvR+shCxiIk_a}
z4nuZRM(Vg6V^my}Gz7=)VedsF`f(idbtJv<+3jKV26rqiBdz;juPtq8wG1(PE}xt<
z<0$}-9Q?YyP^b)1q&Kae*!$$hs@jc@%`TkTS{);ohXlPmu}2bCn>4Tz=3E&u;dk5x
zq%U-LHnj%^TT`sHx4gZf@9o_+GGl6#EEumzx-S#`kHX$29w!8+`d>%zGz6cC;qc+#
zxOMDb2z(0iC2_r@@M;(tSGKzz@mphvB5Mqo&cg(L5S#<IGWR3>%ofCh*KwplK|Fny
zi}?u;KsR;2fI>do>i(Ss)(KXF1o#8eL^M9Rl-!y+f+Z2yMh=GLpU1AH79#!%{dA6N
zfZ;Ol4pKBuyR3P|FZQ6WSyr(8^rE!3*r73=P-m6N%o(+rRk*X(^pq4eWkxHs5^7dM
z&6qyaG0$xq8zP%AFtpRzB8h}_)E(`7M^)fhwy0~mkZ+zT5SRv-hij~XAfLzI)X70~
zkc2l3GTD4}_?@W}*4CG1(J(bGsX9XsqS;Gowa3VX>A)`(XUsk$6OT@^;?b_7bs23%
zlh&~>c`O_|3AGjSS4G_<mtm*?CwSofAU!~)IR+^%Z=BVPio`T0ewP`)B}bp+J-Jhk
zqiu2d+_~U2dXV8@{xqvIu`bs<<>iI_x+Skn?wnjaKbbkOc=;Lm!WSo;Nu4%xZuXg;
zZOhkoTLOYJw@;k0CPGuzGBvG!Rclfwc<<pGRz~Jd$nA=>y^)}gTd}M>uP$`q0V8_{
zsEXCI3&5)(5t?AvKcOIg(UOCaV0z4~vbKd&o%QKDd*`l+w<OFXzQ&#Gaaux)IQ#AK
zHMs3))<JsXFK@Nk;nzrV?C=$)F0LTSk@H&DI|B;upWB9w_5y6Q?P{f0^qMmgkK-Yi
zp_*ZL<C$qYvGrb2*HN+_+w2|4X20xdg2gZMeg_R>IG+wVYg97gIi0-!Aw!3dM4H1n
zzx@4Q+zbQR)M&wxl<m`vIoe>MPMQ&wQk|2m3{V7k*i&oI$b)$H6p9&o4Nb+*S|XKg
z3=N8KHl*K2(HvI{djgzbIKIHkns71){|gf6d88*Pp4EQ87<fckuEp4^vEx>^q}2N2
z-3{RAv^<#SNF4$X;MjI@Wi6Vq&+2~G$Ic$`JjV{r$tVN)F&ZYHoS)?U^#Q%gjHC8&
z;kHP|tO3mVym(5JbW_=~b$$%22+`adN2%rGK@9uX0c_@{M#LG^VyUDiA+>KcfIK^2
zDplobkR?;H$JVib^fG)`VZKZulM`NNq4r!#{e;i*0K8U)nelG5K<+xu3xtChS^PF#
zXtYY4xMFFr<Z_5USQep?t<oizr^MBoKZWrwCMXD~&0#V_XvkJWMr}&`*yszckKw<m
z<I3n@_BkO=sH4H`Y2@tN+p2=iAz(pBkS0o#+K_G1$^o^Vi!B@}_!I`A5#WG8aCJMM
z6D<;K1xW~Y)a~YBHEt~o0Wk=6x3^rNI}&OM>>dH&VU6qp=)lTL)p*M(*rhNT#35L%
zfb!t7b0Gr~5UieqA&p0}p+0903*zzqIpyHs^5{zAy`XUHIg1rpT}o(X217{hxnYs}
zU!55xoX3b6Mj~2CDTC9D!ezl?I)GU~se`Az-YFNa3lLI5W`jrr1w%knuZ2xfaG#M~
z7@DNjCWV4qr7{EClNP5*3<bNSa@QOkIAt(~M9SGF-FE&u(kLg_1TV}+@NU6)y=if3
zn~t-CY&A%5KgZd@Uq9jOAc7?k*hUYGoezV-%{VR;sCJ#@{IsDkq=W0}Z7>Ac=K#N5
zGZaYl?wDbYtF@Pd@k9}DdlitMr||6-@Y|UHUl?X1!oi{Y4iFu7KYYP`JI+$$SwF*>
z703!2e1TsfW5o20%CMCm-^=bN>t9SDy+H{?7=JZ;1m5L7KI%9j?2+N)g!Hl(;Nyso
zP&~I8K15R$9QK{=xz+*ia?N@&4&DrQ!Wh^?&dhp=3H>7aWH@0=cv^X4LRE3D!4wNt
zMA$2A2^B?ok;Yg6XXB2kkJj64s5jyOEqKbt$?Fy*uR~bw!|VtdPVO_X*aL+AVkdGt
zf#miCmK(!GxbWN01#YgHJy345Dif-v`ouQ1D#7h`oe>7WTG1@z>-Q61AAkM@>7avd
zfp0Ps(F`ArZOpx-?+RRB(VN|OaPO}@Neb!BSC`>GcK#;t_$H#i=U4_#bw7ouu}FXC
z5!fNukFeW)8qpIY*en7&#sWCaeICIy2)3EP=D7`Me)A22IR%2>o+I^K#2#h}k)Gl=
zGUSzz+20S(@N>hRI0URo&J@1Tf7PL$G|re+pAuIUDHqCxA=*fFd_og)pI@LD=HPEL
z;da;JYUP*=V|uhwE_EtI0ividOJv{{=AdgGT!VPIf&C4>g6wmY058Ho=8}+`AMId|
zP#=&r5WFT&2{nS-2%iR2=w$>q`tK~@d??^=z2zG4ZEOPAWXP;dmZ$<x2gt>BaBF1d
z*d(R)bO@D`NE8M_S1Bc<=yrU;K$~l=5IsA}{XKk2n1Y^tBfl1R9{ssp)97vN_o&}f
zf)o9paN~n3NEqmbqFe+!>4CA3-sZlQlzYHi?t4`3CsOV~FD#$l?Y@iT`#j}^rK56>
zh(ZzUp<&8B?1d$J%RS<S)zPQi`<N|wCBl!M*!`67O9Xq=3oD`zx$j_B;+lD3sX~qW
zA>m~Nd)y0apx<!sB5{YF@WR@K4)-SE?Fjay7dDyR?!Jle_mme_ik^E|BuB8Py|DY~
zZg&>W6CrrU3p>qRb|;C(A=p_j>@dAe5KZKF&I?;F3>37A@ZOx~y|Bylv+Tc_r|}HQ
z3;RD|B>S~UiC`~yVQ;gC-FX5ms|#M(1@?qH33=(1;16C{A$^nk3iDS4`_>DqrMIHC
z#Cc~^eK6)1_pL$}!R+2P-^m_xhcYe%D|dasmwN-jCb*wRbFxppxDT;+y9;rDWIp3y
z0>CbE-wU?W)`9z({whz`*Te1*o3TM{jG+q+W=<E_Tikb{ag7p&`t*a{k6@@xglb=#
zut(fCq46H|9G`x$7u@?uIjyga+27o|@Omh7$y*mGJ%jz0c>=*Q{b1b)b{4_1ys#8{
zzFW>bh~JKT>Ag(PXO9zD&QQH%a=ox!^bGfQ@{Bw$Yz2ZXC$M}kY#xF=Dm;f^1zy-@
zq(^HBFNI#%G6Y*pV8wp8-8^oQ2iE@!y}*5m@K-VntaM->A-HAU`o6&~b3f;P62U6j
zSzOx*j-mnLbv_<9-c5oWO*DOTP_N(2KFOX03&Yh{@jyuZ2n>B8fBS9#PLLlC@=@g&
z={Wl|Sg4H_e@TYVXJAX8M#0Vj&tDJkF7`aaixK}5<AEEgy?t7x>rS|RD4t^g-tFuk
z!NRaO=2MK9L%-i=(Dq-VnhBrt`B>v3{&`NV15UV^y{E%drR3?TMx-2}&&U166D%t}
zo`j`vMI9BPVs~_a5|Dtg=%?O8K6B}G_H!V#`r-2OGhs|%BCNf~A$9;MdE7;U_8J)D
z;msc}0AV2uPw?)+SUqClWg@~;AO+){V?^)3G{H4-d2t+K4<KBH_zNP&rEmerLAVkX
z+e6XA;5z(q_p^r)u15G7#?7QogG_`f)w=Gd-sGO!Iar=bIhN=C)&JrfdszwFMK)uR
zvgA23t}I37WnQU%A+~5$ra*S*YGCK(TF&;UbcztTxy1E3l-T`gNPX>sNq`v4?p1X-
zPoW%WiGY{<Eri3ra0Mr6_TdM4+J<1;xyIp<r??64TR6;vaO+S!;3Rlju5o~b!FWC2
z6A8}&$;j!#sB7M)mipliBj0@(ua}{Sil@Ql7;7aXX6MqCoO~w@FW*}>c{;`Osjj;a
zhkV%)<omhM8X9U5vb#1R?TIJSdEIrNIwC?%y_DMjDHW16G7Ze{KgBUxo<=S(5E>La
zSE=J@oCiOGWqve<Z6nlqcnWn$Y*@}I?`b*wTfT-5`|~ht8}Z1~ekS!V<uE5vZ}{Qy
zat8iQB&RV}&o>y$0+MBNj8^yt{S3E1!%xNzkBo2L_Bk0q7*S0B$5bQN9ur2C@uy5|
zcvvjM?%D=yoDNe>{h#TKMjaCvbM+Ff${m@8oNp(d1{yVpgtp>#;%J<MKY`WPrGeXt
zr%?)2L{jH)J8?8_1)svRel)mtatvuFo<b9#F@<m5({kwJKclV;kVPQbljmzCwv5M|
z{v$@@up$|yfX|2Mr_UlQz~k?49bh~+lK!;|q*%Ff19Si<3c<k`absR)k9L5CKpDY_
zn31y=yFeL`Lq9yJXB;GW9`p4c`y7YqGhqz-1wkf;%!e-<i0|pIFR*WM1pLfdBKtF;
zz#Fw8GypS@#^dZqJPn^|o9ZSceD-Z14aZ;_53!$dG<;_6@GpdfpRF5Y$3-~9oylXt
z*qxvSlzYrqABePG+m7=_h!}slA<$!lBKxEg&H#<Z{#(2TsI^bW8=sNwII;g>R*&)7
z+ZUnX4bO0PT<&Mbv4!mV>tNgH-&d?6f4dW*1lYhPg94x3kpocH#r_O!c7GavV;V<-
zw>vxq-Xp+vhr|B@Fv#%u@V#Ri#`Zb|95U|}z%3l=MKY|9!Y`Ol3$J)B4?;Xg3ExA8
z=X$pN2)hsA%EY|w=>>TRHAwEWJtNz8)R4=I*)HCP7}>VtF^xB_7Le()JxUqeQtWb3
zX;~xF@Qi5#{R7VSa5TPvfyDNV=pP`pALt)o+r#1i;R<JaM(-bhQV#PVu|1t5*dDRS
z=N%y1BMQW5Yu_QZXVUPthqv#U)blB>yU+thVc)Us;f<pOr2A|SwvZ|PEbYv_zI`9+
zBXG8dqwyIfBerMMK0+SQ`)m(K;|1^|u|1QnV|xbr2;XonLQ4NF|Ke@Wq-)xq0S*F(
zHJP(LgY=o=Y|p<|gV}tq?<$7N?ScXN%=`alWC!dxPbikOn?1T34ZZ;;mB#?N4i&>K
zG6fV2*B4@VT#pg@ihYVl_gbMVu0Ie0A!P31!4L7-AUpS-hwHfSu@`v)epV>Z^#vi}
znOcp4&dcnF9y&ftl;&~~Iv!IrgpOkfopbD`JRP4kn#KkbGG22utnHWk*?u%;PDkU{
zTyNQd{aA#aio<*o^ChI&-DqAyF%UHKCQL}N&rJtKkcJ?^I*^8E9)>6&7eelJA$qiW
zejvHXzJ_pB{5)(JAA);bEcf~l2-VLJ3fa#wI%f^9iSO@1AbdZAXk-5m<9n>)P#zqE
zXb=|y(eN3^srWT`k&3sFL+ml`qaNdr4IZ-oV?e9V*!96y`v^V*Z{&PF12%Adz`)I^
zhF>orj6T6W02W56J?1I0PfIM*$abIe7h*hy3AqbO-Y8wq?qdr${jY;<pVZ&(11IA(
zN!(;S8dUi#5}uH|si|2b;QNL-4xjfLIBP^E^gqKyWQ+#zFnAq7KFm4-wnhXWIStqv
z4P*O<SxcA-f;n@<ttAj+;lmSq><VX$TxlI(5fPOIE}G7s{Tnhu!`OPqAX}eCOg&vO
z?D#f}9pVk89u)cP5V4kQFg-2z`nG<kzrfic&f@k{X~YiwUVnkJLmZ9Ip@i6>&g<Br
zf&Rib9(UowPrM!Kyrvx*;4JX20%wON4Qq$~iKeIAVC1?hg*u-#(B=pE?2yL{{mkCB
z2`myvYduz|e{u@-x>5@TL+mTDL4GFaC-xBz)oX#i>c5pBd)D&?+4uk+-_u1uWiN09
zd=>~??tg)h@Xmv-L*sq+O`e9&`pEh}BQ$vHGnj^BFpbyP4>=k>%ahU15)vNEGo0O*
z``LX8vRx%`8R@V?{6BxI^F4bDGIO*<=&?C(yVjJz&7wetSezlap0<*EU4}r9$AH@S
zAVLjMAd54szd-89kD;8ufN*^l=O@<%g6^Atb&f1+&SgL}{H%_|^*JHJo1MWlhRB+8
z7Z44f)k$;p6B3?@+4XEZO!+Ia@t(15kbS1GjrYvSg4vxNU?!O1F;R*@_Uv?!0~go_
z;s*YI+`R{2R8{srKKGTG$s{wA$+S$8Nis9(J((nv-bg4RK<FJp5kWwzil8(R=@x1L
z5yV235)naM4Yt*_uCBW3y1OW=?&_-8A@k;c%X@F$o05R;Z@=H~e^*WNx%ZuW&bjB_
zbL+YOdh!rAg+83mf)Tu%LZ3A<AR7-Xx*ZdI$L)n*n)p=(YAqTQG#dD|wR!S>ocG7l
zAp!i-@90?WALwJNI1lUIpOa+;Q-a^=<#0bC0=(zz)}N!!5_;xZFv0J}R@2+cL(R*D
z?}QH0KMo-73yuR&L+EZCK-Lb1gT8{xS`CuO+)4gTiF6zw-8V?X+XmS21p4!m0Dqo_
zmgDg}sas!;Tn=%Db}-oQagam&h1p%zqc0B{3lMLE#{vp^5_C4*jVA)f0|lVQ?`^PC
z{*lV1&V?Eelyo~D_|m_v0KJX>+X&)ogpmN(B->OV!vN%I6hUj7g0H!_9?Zph8q)RG
zR900bU)v1fYrf-ltq1eij5xv9TuDx4qpXRP^t;f$ri(j5J{5h<Cs)Sej|E>dw)?*8
zOYR&YAn`R9u57_1L|@YbjlXg)^E5<XL;Y~&SxiIpHDkN)|K8>PNND(djp@n-Ov3ML
zf_=L|;@hdU$hSX>4JydDOMT6k+<kX}xwKv*_?p+d>I&!=BTXva*Mu1t7=&@bTximQ
zuR-I27cB|c*NpGp*WiHx`quAj{)t8g@N>Vfxtg&7qT%;7;5#%nfJ8)J(}Q2fV*^CP
z?`!bT0Fv<gn(qBN_#K|l<AxWwJ|purEQ=jGxIyqW5i0NPaPk_o77*#Lr&8i<E^%An
zmnyB`ZQk*&fFDL`cz1J6V*+R!?P$tul<hYKwJEHg&$+YYQ_<t_D+oqme$|67_m2le
zj{}DTn1V3b3iRbA0lxf8v{aA#rSN|IqSA;a>eqqkqHEG|&rAj7^vUw>#sH*4)uV6u
zF#vK;hA8xH6*ZS1s|EOEvPNJnA$=)XBA5?^fd^V3cm}PI1AYJ!c8|foK;YkF0FC?}
zgRmAC!k=3M2L%3ohBV1G19E)b`g7#Xpogslll`u2HS=CoPySp!4j?XUHN6#eHrFr?
zAZ`ne15m>W^65e20De8-OFRrfb0U0hg!9>yqxf?p=uRo{{_J~%QnTc4nRp(Ad%;rS
z97_*~EKI)MoSw*DG&#}t!r2i@*@Vw62;Wl5&+y;>;WJCX$*iY3Q2YbM5qwT7huT3o
z=~oafg@W8W01j#g{R6s-pm<iei@-&2OSqSOd(lnWZqI;(Ix7<5Oi8G-Cn3+M1f6Ap
z`gKrG`u;$-ck|99_l<CNETeZ#nT<a=mf5@7Bb*$wr`SjHKS?|q-z6qaiSBRCfo0I_
zgXkPEw22Z$F7+mGqkbV3-L*!MSKhpp8?~6)m3#mF=<(yL$n$^TY>Z#ey~CfEf!{W;
zJAB7fhZR#4k9U0w3aTF{Er!2$dIwQ-!GePEieB*dA@oT6J3hb0KIuE7+MsZu^J~82
z{5iIV2p`;gz6TI}bdK$EHO5XcZ9W^46};^~bH#q^bExbPdq?C=!ENV0@hyhfMZqq*
zK48C9+^2Hk$aOeQ6pC$tuDjevf|UWTg^Jo_a5+>i9G`5)0gL7u&Y^LM%xdo6ENTNU
z`Z4w+?%&EE2?j=BKJ1X+#|a;_!-^MK@TkMl!c73nEjB&(``<a7h7I5s_7Xtx^E8$N
z=(|5d{!8F@D8d6iBMjM3gq=M4<V7xn%1cO$X1`^1Ps{+3CYXO6Eawu*PdijXs5Xa=
zOMM-Q`<cO+Oyw!ho+6>xu#T=grPL@^z&;^fC<A{dvgpBw#4XkpsLYQ)gJd>|{2qP`
zs_u38i&DetUj2hkNmzgVb&E!W9v|*%QEGsJ(54Aho;*2vE|4$L$C*}|V+nc4B_X>1
z5%|l?%0xsK5l1X*EYClW83$eiUFo~XB%n4=2e)^0%s4*DGcZ46=zu1%xep!CD=s}7
zFc$uh@fdXCAO6H=jFBxf)xM+3M~N-_?yH_xk&SJ+KryCxeeq&!%LU*E{5$E}YJA(2
zDbSWXpe^6SpVQoh>->+*dPODdSCQ?}QroM<K^y^>P9?XXh?EC8POk+w-DWl8@9JQ`
zy@!0q+X^}B?3m2u0el+$pd(q=Ld7u~06LOxw%&%n`x2I?hu=wU1=gD$eX^WWP_^(Y
zX1!Lw@g_40O4RirEawH1pSKmnoTHLsmI*;7sXDfJBMOaahWUp=`V7n;WGA%DP8d|)
z_HB^FZ33?|Z-BH;@Wns!h+a$Be(W);*^Fblb=?SQr}DJrhT@SJiaQl)?si0fyTIZ}
zM1Q8JMy>wQM=`^MJUR2a#J8KoC+ZqO;tzRe!k_pItnY|I$a6QJr#Fc~<lPk_&u$W@
zs0TVEPhA)~6PP?m=MiW#XCU?<&liqJ1nGS(=2;n#r=CPL^6r-8S))8G$y46dz|$Ei
zqa)8#C8q=Z!8G3m<!qP+eT44^!Yjy>q`f9dgLKgSR@rxr;lJba(|jJ}SD}Ms8)2W|
zM7QVBC<ACh;zwn;O~j7@lOI=pF5-{N@Jk~8gbd#!;!jF(l|jVM%J3l~eh!%ZxVlor
ze+N*ET#Dd$zJP9I(0L$TsiMhE5(jzc-Ay0=yT+n1TmDWT-WHdvUhTbowbE(ZMpZvg
znW#Q-P3eP6y=T2&#+kqv?va=TNK7b?JtCI(rLVyE9xRW6cta26Jr<(8xUD^u$8E=Q
z@a2JvAV#7OyNJId)raZ<5r0>vzr7;<z6}3D#6OVYYO(&oM*@!c5$oSY>OYV#b)xv)
z$1-|;{BJT`v?p*OO!=S6$~TDRpAA*M#6C~R<UAsN2ki~$0_{=tnk+pZjV@&AaROa-
zZ)kgE_sQ@Wk&pAh2vJ6%gtLG~7RB>r;e0I>+Dar)xl|rENXItAn+zEqxqv&KMAf8^
z&wBl`En!GA$ZNnxM7@G-h|A>8pun81BcU0syo{oAaw{nlh~+-t(EKjgeHfe7l}E5q
zH6+?*v+dkjFg)Js{aNAX6OJnd{>yxrf8T@vyqY_P@qPh#4UZqh?fDrIuk|HJ=${ku
za)SFt2H<r(ojw70Lm2w?GWthFyn@G>0K8I~|62MTZjrS8vHieh2`=ctMfB!R_e}^$
z$NH0`_X|j`2}nPP(nWb)M4v(BpA*x|<>|hW0qJ!C^!o&)H}p_`eL(rRzf*E3okQ)<
z&9^^-UlMTGzW8>@RY>(n>4|=Qkec!<>}OcwXXw6u9M==UpTvh=DIYXj<v&>zGc;C#
z<8iAZaPVvNuh7#v%=G>V+5{c<9F<#1<#{hwQIor_6ng*kxF#)bGxa^q!4CJk%sxrp
z-PC7X$_~!D2dv>9Hrd$rJ*ceH3I%fz@8_5mS>l_gE{BbB@V}PGBZ#;h2I?{N#Oa<r
z+$%sa<kmrHJNB-6W=Vyk;kw2>5A<4bZV{&xpEX5Knx@o^EnRj~dvV+Pk<zzJVWIyE
z%2&hk&*JqY8@lT%mXG2gnGFIDj?^F~P~;@)8G(_PUJ_VAH~#|JdG=YJp`#nlQn!cU
z2MpUlpTYKnb%OhKCANo7*rQIwF@CmVUGX@$sQ8BD=PpZe_5zPj@O{H-vAwB$WL$HP
z1h<L!F|aEnenN)Fi1>N16QV$jIgx|bKKP&xpoh2`%)`-914dmrxwGr!<Q^hufDG->
zY4c}x0^Nh*V`ZT6PX_ceBcPv&6k`G5mrs%axzO#w>x1Nw0+|A)`I*F{eDt<9xiO#4
zfUG$K5g&!QgX$leAja}QJm3D#u;s`BeL8FmW_{8_y~~gn+8AYxL^7yNk<44B1jOI0
z<4xl$s!22tC`9ju#}aM8GYQapuqYX61LCdEMi?WZL=oty$p0E$PT+Q7n~A`0zljrO
zBf20Q?h@zK1XH0$2ovm==MDa3k0In;&&<2OczATraaGX798Jl8*)Vagx+=t#&?OP`
zp9RdWZX&D*?Toz_+j|5*ezHsO7!f}Y5@0Wl+Sw{;j4e10OY(h%@z10<dja97Z{zbv
z!M+9dZNNk+8Q60;P^>r=y8G+E9Sj|K2b;Zj+F9<(9`6^F6-S4A2}O_N4ujz+lH3=8
z_p_;2_i;a;yPj>o{%P*#eXHKQr{&7Nmb>5Vs*+#ZCUR+R_w%X9QECJ{qDF#mV1LB(
z3h2Gqefa#LL+BX^(`JVOkbrkYBHS1LbpeTUw*YeL<UR(&_W<VXG$={e9`EPRKYu^u
zX%*s*i=NNXOc&-Bb58A?Pi_3Km&f<B*|>j<B=bSV1w|<Qs0_D>_%X#-A@LJZ9FGqO
z{)7zQBjQiW=om!&tPGD4@$+ydhWcNOlRbh|l|#7TZD6uN*G77QcMy7NVb31u=&|1?
zV_+1&?<E$+o{v=QCbK&31f10=ekHwbbr?!^=)<zHtwr)}h?3B;i}*W=e@p0mF4B2i
zqLaVixgW{@E|1$WoxLLdz9jz;Joh8`2U6XtMgGA@Qa;5xb&<N3@Y{~di4(qK_lB-R
zb|3x@>XzGu<xW>99AR(6`*rS6Q7?qK56_Jf>Vi56!d!?aHMB=T`(E{JW-jA7m=Z_O
z_rSIT5Pe4p@rAHB>;r+@>;PcZ{P`EacyA{p-L<h2IlCX}1zP0fyuLHsd)yW9uiZPq
zM_2amiED)(Z4h&sj)4=brXAdFi9M(-qWtS5dZ`d`7aWVEDn1ZwA4S~e?IKc<Ah*7t
z2o*AOr1}SThkgU~{vz!Gah<*)wLL|L!h6|)%ie|SOpjtD;+KNb_?Q-@CG=HQ7JcCU
zO`G<tGo;nzj_EV{YAQ};ShjBEU8&_6=E2QBf89ehLg$l?+vaIeuf4s$;5GkV0eH1{
z3&!&T@EU^q@-co+#LGE=^H&Anbv&J%0K9>xGaTaic+MHg;JGNrV!RROKPu+0<i<(b
zF(<Y&x5O^8a68lTW8Kg2SQm{sdtqG1ue}`=$D+M(`_l1qS1BGN;^)B;?6W6uOW0mG
zE*imK0HY=O{q#@B=v0aLQShK2$9=YrpGzMV#|m|rj-KapuF#j_7#PBNH-jY7#d%3Y
z3lh8nw;kVnalK8?ke=BFd*)w7D~PWXh%XV35%Ke24nMZpj?3V2*w4-P=g0lHo?p}C
z>2SNH`IQzhQ^DIQ#7_&j)J|o%#7<>6Z>QWQT<$X>UQ6s0*)Pn0PQ)elE5jxBE5jSY
z(68s|4;R-`^fJ4y!E}y_`75~*ydD-w^}zO{MiV_?T#(B}^x#kDdIh9oeMr*t0@7;&
z(l?=Wk$)G_kEHy3{QWsGy<DEoRRyHi1<=n4NN?z&{Q7|Mk3d^}5Vs=(85j7LV|~FH
zD796BA0@c&uMi)H?bU$&!LjuU5ub|vKfxd8@sHpiW3XKk{0V}iH5sZ1w^M>Y$>;wX
z{?Qxv8w5Yg=idwY+=AN!!OySr3GEl$%Az<V3I}X%;MVi!*>*^0BF2x1{C~+QeeZ?i
zryDxq_(w0QzlO&_7zgicAo!!)cCZfH8Nn~!MdbP*KyN2_d7&qxqVV_x<LuthdSLhQ
z`1jl!RHaBCMFqa|vV-UI_v&UIhko1FL0%N%zq4ZbP7B{bJO2XPM{xjN?Y$G@Ndb5b
zk1s<wwkLwudM{!6$vFQx5ich=mm7fB@pS9~ctaTa^*sFsod2kZSMYdN0A9&8T)TaR
ztN*Y#9E(6dW5IYlpF(2e)c_%+KAaYj{Pg{m3l7Ylay_M_D6=J|vZ!Ht?^H;oYs8}8
z-O)S2UY=ku$7Bq<V+{S60`nB>`-Z*~+KLswbrzDY2aUEUJ(>8ssfR<A@VAvw4#Q1R
zQ8yVJQMZ4+7knL5+`I_W#+aCmrU-zJ!J%@ghoMZ?aHWPWCj?=lQzXYoNDtYP%N$Ix
z8t`Gw>5(Tx5Ps*K^CziI4+Ie3zkyojUBUP1OW1te7EJt@L99!RC!?A{@t5(#71$f|
zFAC!~!O&_Fn}5I<Z_=x{7*k&UsLsxQX?aHQ7gJ91L*9=~spj}x6C0`5P~|qWcP@0>
z8;n*eA<pF89-9=QaoTymn~&SIiTB?*qCd{Z{ilf^pE!j1ij-&QzZJsTpcH2>@c2&n
z$ETQ%8QaFubwd6nviQ_5C?3JGL#w8LBxnBk*zqK8yn+6)>+L6>?0n;m{rjm+Sce-p
zvp{RRloq&%XhB?uaNLFv?jks9OIt;rrQfj^_;i6Ddb^x|H7aO!K!4ixb|?5Ia8|H?
zKihsq<NaQ~CPLbq@;yw`F47EXqnI!|F_fVa;-DqST(K-$*mZ1&sLyFkf?!KZ)So-Z
zm=1-Rg#0_xfyImr3Iz-$p%T&YQRTWrG{u>$`3d<}PNO_@cU*!Nd>v)gXe?Urk0^T_
zK0#|Y7udR%=jPI@N^-A!!nSLyU7KQy<Ks(W>3LSo|3sO@UX|;xoy8J+r6L47hIovK
zpQnt%I8;geTr9B}N-r6=qP=e$Z}<GT72~lYegZ7^<I2xO{BZ$?ZJUhOY<$~ZC>yU^
zv2M^ABslNGT1lj==uJd8+@54j(sw;aQHQ2#V{|$-T}{zQ3DHKT%vNCTf`8B|t>((h
zafKH8Cy}=SVp)g4N$`+}8$|p(xYftW#^5%-4c{QPVF?b~@GPM{@H}UP<vMtAF_ak7
z1KUe@xqjwCwITIc%twA$K0-IDkjyYCq5WDojzar8()LudaoZz$p2qt4x!kwxC)g(A
z$=DR!6%s!x!)+pd4BY3(@z^w;w=pSxNyML!;d?~<Nhyx)f#7Flc$|noi*U3?k8u1p
zNxHDA>`Y0MJVc@jc;lP>1TQG>;kwWQsqpB?OTwch!XqVUCHcGaGiRO$+I{{9M)(Iv
zR`Cy#z(%wYmVW_{f#ZE-3|x%Qh5Qfmh2omx@_Bv1_H(a9k9HA%2W*z$4~Y1?GQIB=
z@%Lr;7b5<F6jzIO13nUP#E)n<E@C%9eEIF_1WAYA9l~}(!xq&9HHl7sU+oJt6dZp@
z-b1linR4$Rsl2X#1-(S`6nYxvx`vX?-yE6XSN`}zU*8wwj5qL)qo^V%Wyy@LyujCJ
zHlasSO2((5jTU;BzfyK`+_MWbQTCKfD|#qJt!9JmnB5!N?%91Z{D`PG*iQKKE7J7i
zvh*0z{>YjSPLC1wdLG;>!C#YoN6x)S>v5pS&uS?>H7$Mz`2dE%_Kw#!$#?5Q;%LqD
z6|&|@(tUk!dpRwB*Bd>71LrDJ0`O`te#4d<7=YIh+&2j0=R~}m!(&2jTmW9j(`gC7
z8+bbNFn(0TD+nFm&;Y!Wo7qD@x0&xp6Zn2~6Y&!Y1+x(E_1n-cC;w`R!N~8e<DoP)
zVd%1vIR}sY;~#5YURB@wu9sH+qmw$BGw8;KwL85hsn2Q`K6KsGM;7(+evbC<{~yrg
z*CZEW{u2rRiVlSzj}h_nil==(a{i84jn5D`Bs|~~1TsGGw$)som*=0CaP!=A0zZG>
z@OLRg^yUp<vA^s#p=`EX@gjIgBEJqtv8@3_d^8<N_t5-{A68Ym5;H*OHZ&qN7+r>G
zH;q8W-?DJr!a4oMLVbLazI-TB2Tkp60hbX6t6nMJ)c<fa(X?FG@nLoC4yo-<a41;a
z+&3sZH80x-Sl<p_-~MwDAK?Cx;3pK%3v(3a13Vsb@N<+a7@v#t#|b#QSICcXgNW~w
z;V~ke^NQz$F{qS2oS%Fv?g@Q>{kMakw|q<dxX9OK>34A6@*Tz-;Cz*|2PZGzNeONf
z@nec}A@LIe4(DdXzd3PzyuiOTh4Vwa7Vp?gw%?WV$4?mEgD8a;bLcG*X1yV=X;M@D
zlwQutNlR8NnN(S~q+|YuPY0K&tvanEtF&p9r)gIIjLNp#mfzM^Svl|FnTuZN&z#Zg
zotaKo)!_W9L1mdao?(kePk4B7Z~Q!qIXNxaoYvG<SwFNaJ+pMgiis_oZft1jE0HZm
zl<mCYDXjAbIJc9?1}@&D5c7YpS}x>gH%WD*){FQ(igSKCB7G;O!<T};gRO^Ij&+;D
z>z2HMod|7eIj*}D-looD-QxWGT|Bh#4t+7RoGa+$@|nrZk5@FzkNdAJAGZtVb9J{5
zh(CvOQR>bxTS*0oELRY6+X$Al{|b6v-uH%YGvmd3f3cXW2pqWu9~(1}8v&I-Wv0(_
zm%&bMS|@im+V7)sAnoW#wB<LC`H|ZRrg{J9Ed!lgM52xQk(#|<A8*~+EYW3*sI&8m
zPFx3xu$@SB3EPRF<I7SUwvY4Jj)nXxo=+@((8NVlXIJ24h1aiqW&+E5*!MLXhud8m
zKhDSZ+Jf+-GTbKO$3Uwe$K(7oew;7GFNydQGJKDSKPkm=Ka|Fg^QHI@5kCh8OYk@m
ze^$s3$CYtdk7@jPa-bx?UBus!(ecZ5LRRh(9!KM$R(_l%NylryY5e$QQHb<(G5tgj
z-ya6n;B>!ya9kKtPjFl)$o+;?Zbb(efcI|&eb~ekgwPEMkMg2l6RF^L4*oWJ!z6d-
zpv~{BTJ_GBL7nbN8^QWO!`fLjYugz5`mXld-q|&3)UJ1KgTL<_vu#$j*DIR@i?R+B
zd0q`#aa$m=yei@wd0G5-2r_t^vJzZ81E0ayEqQAxNuf~vjBPfP*fKRYBz{ze+eG{r
zwZxBOn<e-YQXIGCOnyCvtd}Hl+f_efelq#>n8mmsGr_js1#!GejVAm`74BIg@MUKp
ztcEgO&suD1Zn;{+t<zXdkAttc^iH!$4Q^KHz$CRre}+r7>ZmcX2Jag>EA=<(j85x4
zZ?;iUI)k_Mzf}&D6PJVK&*J;CpRoKG$ND1p6N;a)zR(-3A7i~|lloA+7ZN`z!)+pd
zj6WxXaZEp(r+)$K7voTF6IrVR^3}OYK)rR|``w|q#7NLLCNVNH!2tS1B-;*CmEISq
zN_v9L<bB&!os?AVqH+xhaLoS=rguav=S%N)v~Lx<e1yY3`D0w~*?b@Vv4r2x#r%&;
z<-mOp$^VYx6G{F(V*V#(`C~-<yyEXj-`uO1&vOFKmV5W0{NCpS@H#I(<L-Sq0B`UX
z;yF$>F83J`uP1cSGo~>AQ4z23uEqFA0eGeN`>WvJAmV5FdV~LCK7x8P2GkpGsMH(&
zYO_aLT%eEI5m0M2iIt70(#ZIy1kzi8?J0-1r?(`yO~g+qK9b-uB7R=+q0fi!1w)*_
zH*Zn_;b|i@Oj%&+`V;NG@_MA2&h7dK6Uz>EBwg9KrzJW;%iO#tL|Mm#vY?GDz&4V@
z+sNN}{IV2>exBg<aLm?*$9TEe?;jei2#Fs-I4p<YD3(IGq8W{CY4J#@@Uo==_v<=Z
zcn8wMzmbN!il9FK<dUPa3*&ODUHJo>Y7@Pk!_MD4eASq|L2(IcQ%1|Mi4~R82jn(v
z`S;OjlN(0Y=UZdqBB(VIr-0v#2ES*LiW;*rDpC!`l%iy6?%>w4shfs-7a44AspaWr
zN5geZRdYsom_aw+>d15$bzrK*S*S&M*NXCX$n>y8#81iaMiD<P!`nstj12!+e4SH}
zW=+(kyKJk=UAAr8wr$(CU2oadWm{dgZQJ(L_s>kkT+QW)I2V~2d3K!4wVt&Ha<Pc|
zRPd1eJYh4I4YCvrc=Q@l{bCerG(xz)?X9;%x7|iboPu{1J*FdG*41gjccmNV`q!sx
z^-Kf;ffC?ml~a&Sho<kpu(UM2qE=gR0CUjAB+%KLi@r9`>eg(hNjN?KDxIzBRH{sf
z{5_|=BBVQg3I_}Hz0dP`NpBsW-&h=l_FfO*S+UE2{_d|G+BPMxet)JDF?bRjLN4^O
zM9H8HGeul$P-FKbM$#>?eMUQy>TNH7L!7M>@dExrR3~EHU|;gC{CZo_x>NjHZv%&C
zlRLMEnno~XEiYoevTY9MRdvfi>*gqcFEpjBBAT^|mLDNs0fyT|kvqhRRn@wyb|T(+
zOWPeWOecdKWPP|?W)2`JRg<+<YUAoVqZga1J9-+M3i2D&%0`!2w`<1p^m)oVLltW$
z8p=UV+KlvL>DBA<OVvOTdc)d!hLx9odGtiqrDXde>qK(zOHVdwG9?`vAU4&k(vTQB
z_HFQLzYE}}V`btXCFMxU#vjw8xW;&2?h*f)S<6p=QD_g@o?qIoT+|C$A<1X^$#7Py
z-tZQ6a2ywHp$ovDiAZRVcF<zbTpqmVJo$B~fsiM<|843qh5lBW>|-*omQwRZ^KZvM
zbPnx-9a3K=6QI()M!U?#F?%ElLY`zfka@LZ{bQ5RGGnR4X>oNsHgbM9^2=cA0F{zt
zSa0&w0>!yJHM3(JE7BBSubsiKSblwUhA@<Ra<jx~%`$&BpzoL>^GH^a`R@vuk(erT
zk%F1nCZTGTXB5Yk;9ckLU=oDdDQ`}MRg1U1mBN>rDfZL-2KZ3er?-_q56ty#Xp7k`
zjYH7-cYF;?Z)iCX$LIVkNY`h3-LCQ0REy}~F~>+pHxTPN4~mg}T)LVP+LZCQ2jHnI
zLjizNv8*W=8^*t@5>o*W$u4s5p5o07?Ol+qDn5*#><ik5?Xz8*=J4gsZOa3^B=z4u
zkFkG2*^iGEMT**Tf%wSD!3)QBBl%a@75MJJfo$O`MhB&acp)z6%5~9taHf!R)?7lp
z*heB}h9--v&0EX?<4Rk4MAJU4@U~Jw04PxtS?@eg?*w8x0}QE@ik-ubc@K|Ju%T{$
zIBR@_XS67@PU2^-*J><LA=Ko~X976vZLc{h$LHy+jDNb^#Z2y8_EpUfMQ5tEysT_U
zzo&N$9jqx`Af25>k1_9ehOiWlSyykdJydD3S0_@mdz4d+hk!fE(_#ChrHg;y=>aW?
zmF^Mt?RpCa_P-AJ;`LAu?s^;YRS(B#a}5>FwE6798GH~sMtrw9ts=8~O15I{sP|Jg
zlI(%Igs?q!dkyQf#A)xAud^9FY${2S#>kYlRojVv<76|kDgv%A4yP!x+Lv(iWwmAk
z@Zi2aSB<JZudMMFTlYr6yt*wiwV3>Z*Yz)~7SDzoJqh2~Vx)qo4Z3f!w^nFJu(!l+
zVz48J*LN?<IPC{>{F-<r<{)nceP$R+0}Qq*=p11I&Ou^#wLXe@L3!svc$GENmEv)?
zJ?01n#qj);QXS;u4#ZL6xhgN)6x%V!egEDMIn=0jRbUpFzRfS+o%EnSX)mT(BC$pU
zGTliQ2x)X%5hOY7>&8nymj%kJPHhL`3EItPEHTAEmXqxSHlM;s(8B8q6iyoy_&(z)
zCgTxAW=S(oITFH0$0#(2)`e;BoxUw%L5#3u>G(TE&tubVveW>^Wl_<Lmfxk1p=U|!
zgX`7_+olA(z;}<Vwn2D%Y<7QK8Gzqx`C`{Dfc{&20{~C>Db%Y1cevtLb9Le~IbI<U
z96`iNpnqsy0Lmq~=8D@syqS>JV;L7WnVtB&@G>8x7qRD~7p>=GM=OUtZknlQO6T1|
za?DAc-BH4LQ@Ip)^P^^j?#C8$YjZT^$LnSulMIpmwj<L~17W-rt8f}}pk0f=6!~ww
zm6{2Jy`Lced79E99VwMR^J#hm-gl3JdsYvXlXxl1N!8&rWjT+_RfZr9kjt;~6EOAJ
zlF|5rrRPFBVu<j5$T)*z(}PvXe&0H#yFgoX!g43BkCqj>-7KM;=fByEs?CNX(0tA@
z@OvCCsy$p7Sg+MN{Z{^Ucac6$v8fl_fxHV^icUU$GPP9iDJD#xH9Vzo*}C6V11-Y9
zPmM{MuQN07QIL%C=cYY|7I0q{a1Wa}(jwg|F?K2p$c@|cWiv5;REE15`Y3>g`GCwV
zt5}|6B|EXS%WI49gvH}Gd5o~d_4Do-NPIaFez8V+QtVlYaN?@_g6~drNg~+M`P6I~
z{-fE`j`F-~*XU^DWP<L}F4Xt7Bk=HO<5r`=fb0=>qH*+C@6gC@!|F?a7o;1Be^aD1
zyL)7LT3%9Pi=yu-2kx)x()O|m)v_hv^mln@UINk(Yo)~1{v;f4D(iKiv7%Bd1b>RE
z(3BPM?Df?<IS>0-+uHhF`}Ypu`MuCPm~7<+(X;Wp);;juf<2V*v$2Q<`~D=Ju>eSC
zWd^IjeOqpYr-n64UnHW+s1$uLn46L?{9qH2!F;kID(J9W?zTwdWDSu_qV{vmheVnf
zN32ks!_)g;89Oek5W66_d&yyMrI5#q39>;j7JdB@#1hFMOzd}tr0lO26}V7EAncLy
zOI)M<rw?8q%alKG)gw=@R<kE>DJ4MSXCx@L{ZW6IOdq*e%yz0g7RnZ?D)<!+XTda}
zHeh0nsUiP1_+IzTy4cKHStaC=OlQ~>@b#U`uH@EQ6@5ttZj(eyx%)lpVW$~`4L-C&
z3q5@C-oXBozk(~z74f~V2N`dGY2j%gM0(~I#CC)Ui;U?R6+K5eGi!uR*Uha}KBk_Y
zqIEkv`ckbhS?5W5H!*t#TsS0~saIhh##XcW1>r)(HSy<LPdM`TQgA+`qrJFu<Fnp?
z{8bEByEke$-C<?78$Vtv2e~jZUkVP};2eu()tI%^xH0aF&w=<G0I<Va5K=ZU)%{lF
z65pl0K*%EIW?9DRX|cb!TN-j~=1q;D!Bye&4Pn#aWy>43+N~_wK1gtjq5D&}0i6%0
zXE6KaM#p#r%y<8SJt4qXee!Et02|2sX^J|4y;~wMR$oFx*uaN;VIyDqWe$ULT=Lkd
zUv{c#;Ic~H-Pu>OLI<o7J?!;B*V59<ON>he*0KHR&O0S$o25mx5VJ->N&g<5jm;U1
z?U!?9??<mA!Y<R~=WA0#E-J8Y@Nnqo=nCQo;h4*6F8<hKk}xeFZku-LtOr+{HaR&G
z;~l-AjUM2*cKFfaptu}JRw0uMpQADZr^*)4l!@IFcn+4MEAXO7JK$+U;LUIk+N~`6
zGXZ^5C~u0MAor?XwY;fOXi(NdTgm{R-*@9G2B|Q^{6yvY<$;x*UnH(Kj`CeUU9sx2
zYtmR1GV@nVhXxpz=4Ky3{w*fUll?`l+&3ty2F1*$4s+0fBXSv>z&Mj^>&?YKGp;T}
z2@95mU{Webns*=CY>*XH(|3cuT|QMY7gQWCKn}08rsa)e&=i=`8Z_k7=(ibiLwTH;
z8=|sBoff;lcQ_IH-5J2|sa?2Q1cCl_Mj85A*gn#ge1{E<H(IZp=LYmmi>sJQZ+BGb
z@l;Q+lUm7(Vmd)ddA@(f)zNnSA)rxOkIp_`YWsVxlyy~Owb^(uv3cxmknCu}<3Mye
zn4pbhHa76!tADK224{($&rfp(er`FU_|s{4+kO9K<EuDg3qkRIk1$12Wg`#S%%qv7
zIxk?<!e00UTN7Z1n_xzNsHvn_m;os@TekHWMV5NZEJu0D$1}Q6v5}aYi<aHwt9@V9
ze}4fr4N*e@&FNI2CNUE`Eu;8fB^$f>QIPgz@=tNnb|FMQ!eQ-DZ|B*dtTfh7+~_}{
zT5a`&>vnH5(f-Y@W>B(+B50Z<WY?99fEm9M;y$FE_Eo6AvORA$_Akz;^4!78iCq>L
zIoVy8jVWuvF=(g|oxe?5$ht5$MbqN7cx0AZZhcuOEu{#H6wL}$v{`2#dk+t|6gFrA
z%FQ}FV{CGj)@vHmRMU2(N6z@F&Pp01osDYHdbGID%bS8cm*FKhakUYIyBi8NvWZE%
z$y@w$``+>(r^xGgeY078i*J@G&%b$eSG5>wgsM#^X9ZGgI}W>%e;<4(6%vC)mjR2_
z7+!URceijmf2xcyD^V^O-64seXWNi$jxD?Bi32!k8=8U$eT75WB3~>5-{JfCzM`j#
zWCmWKw$<y^g6%t5ITBh9<wCkhDBx)+n~gY!<$b-s5)S-;ML<Hk%b;R2w!>awMrG+&
zFWKTZNrEZ>N$<AuT0O^a`QxF-&J*bz<~Aax=|mqCxDPQhLfp$XSi3rcn{E0UQeDf)
zoUqDdJrJaaxn2H*@f7~oTrUuN^LUAJ&WB|KHlZL2@>(r!SbJv&(Hij;NnCC@pyeB3
z4<kbcIp?ggH(NqK$qbc#L2O}dPFwh2{2y=JwlF*}+qv1%E=+Ltt)KnM^bmW@ep+jY
z>{Jk+vfXyBhr@%1oHC?lw%Xd=<I>+VXcFJQEcYCBNRwcUZp?To%(zO1(?Dno$f;^=
zbq}}lq7(19y!UTCuFu=x7KRboDDQ|HF!QY)=&&KkZ?08>&Ve<6Tkh5u#bhN}3pLz+
zMfFG@wG`$<K1Xm(#rI4boU$1JvLmni@a}ZN9$hh%6{-6oXo$20UUP!JC5G#GUX;4Z
z1#G+YAX?eVqJ}eJu3CJq`8{vlvy+pz1;)g@6;O4<2HDp~_pb#vg4dBp{W6F70$QP4
zBm#4HZ`BB@310n(Ux!`A@F$adLELe|9d4TKu%_rnXlD4P=D!h_YLdQyc0K=nQ{y;+
z+gLMG^6lPt<b7R%p_%hwo+ItJmD2WI%X3p>_|?FF;cEvHxx65p^!BsNjP~`hj3K;(
z%8M1c0gq&Cw8IxD4&0NPd)<F<^RIU(6eNKFPoqxWN2@w-JuGwF+`4#$t^?Z+utr?*
zzVpC@yqzT?(h#>jU!)$)xuc;W*)YLdyH8(?-D8{KS<<QHROK+xs})*Ah5NrkFuC-_
zgavYL2vRt-om_QUdkBhQ>Ig(bwnwI>f{lNftNjw<a?RQp%t}N>4}-qmW0xF4+W{3(
z>Nb*xP^uAtXd0Di(84LcwUqn>IRA2y<G9T@PnJInH8+7*wueeiL4{=nZE4F(1i}7u
z(*=9@3BM-G-P~`V`DJUyZ^7m2d=bowB^uXSqbKMW^8R+(+T&xuU~wHM81xSP-g(+N
zjZN~#jjWcn<1I~daZl{rJJ<%j%N_C~+)Ny=LoH7+3v@zmHjRJ~^skdEIAbGr{#6jf
z&$I}ix5xGLD(LueC!y9rxU?6w`fR+t6#ec%XV2*ei8E!tsTH-{?d_Kl!R`eyrAg~`
zb=}0b_(cRKY8x>BJH>d9bsQX{AX<Jo*$_O{0NU7_GciMBWSl$sp=$%#-x%=*!`&|@
z7(POPJ8wEKy^D;^E;MQXy-TU=T}}SIYd<13^`EanVlMmz2I&sx3rb6N!K}}(=nlx(
zE3g;)ETL`e4HL=p@7ON?d5Ue07ahj+)9d#j+0vkrBz+@!oY<-HCTp{qFJ}G<Hf8Xl
zuq({;kkOhB;qY;gr3;Zjf?4zaR5Torc2#Q)fkUtDz2iGTzFjWC>^!r*$O+Y|9|Lv!
zW#C^P3HESdsW5cT(?3T06OE8ItDz3_sU+%|qSBO>T|UOT!w;hzL4UPzlgOASCQJRq
zv$vQnzli0m94fu;Huq=Tk5fq`RE#QS?4mFp%bzU4xJ<u8-j_5!G-sHQ|EuKC>@B$W
zWBWUVk)z@l>aV{BtQ<hA{)Flf96%e)NFJ$_qv8?_cyo^w1%bk#<`f>3#H>A&>OsAe
z1Px`HjIateP=HdB1r`;G0gb}^62-MCp#{A&x5e60Wd^6oq|>QwG~(C0T90L$4dg8L
z7*WZv0ul1(iWg|HNm_kU{CDk2a8<gAGYNN08EY?>xqrggTQ*OrwYm3#wK!|N%AUP*
zN$9H`T7z~A4;1FJk?XLD^Z};f%l9etKR?uw&dpM%y$+wUb#X~M_MM$l0#nfmAH;+$
z8<if#T0sEQh(eE(7sc;9Jc>+8I8IYWjwZ@=O8hyYM_pfuB~J;y4ye2MFhbc7O}tdC
zU(-Yl6f<kOC?2yBADbk(sS+!#3i`2ywZ6@@_&aqhv&YP)srETh5&dtu{pa8M;vbNH
zIbk~^&zv`FY<zc!ADsz&iD7bjV0t4I04GO_8eJ*5sf_giU)PDvW|Q&eRF6-kmOwtx
zcH>YR-Fc7k0<-0Z^OmDkkrwA_i!05CyZusKiX89f^kF?yX@Z}$oUNruZnqI*q-{0j
zti;_ILSN0$mZ+BudQK1U^I$^uN<E?oh}js?b_M?DJ;|}3xVx{k@5{Tk%T}Cj@0F(_
zPY$v@J0U7Tt0Ktl@`syd#l?oE;4bg^n9a_$NsgEtY4QmuIA_s)kPlL_U7ilHty5dt
znc!m|S2i*RPyNq%do%hGtpX;GY=m~zY&SQcBTY(z4UH(P@&x))YEaDFA;zWsrUqM+
z&QKWY&G46FD-NmIuJp073NDd=bCf2I?j9P2hi*xYem%ic(SK#V`$*H;T4@ti=TC+a
zgvQ&R+BZ}i1REIh&>&kx{S39#whHVLzo<1i4^tp|3dB67l~}f7tGGbxdehi1RBGnV
zpQfq=?+AagwXZW#lMK^9y9~El%g-Z*^^QVLHN*OKWTaJEs(l^t5>ZBZjw2R>SQH{C
zGz8126!5&iLC5=}lOH3@L^!yLThsA3)i@x>0_V0dx{a=rcf&-yyI}n^2bP2Tt`l!v
zGzYxG`YQT&Sn}V!o4H|iF~IHOcY%0+JdQuUhnlf8d_?<5_{)ZXxZ(GAJTva!x#Mwm
zc!$GL5E<g4B2&xIZm=U35zhH`#GeFwu9Z~UCwew<WnA=DsGM3{2-#IGh51<Rf;S7v
zGAHhrdjd9HSNvpFZ1B}I`)4bu$_Bph;{%-&Wbdj?iXYT*MA#O?PUH9@curnBNW(>r
z2^xk7odq;=mzy_Urh{jTROuzkyLjNVJ&e|`k}4xfh+{d-YC3(OIpO3~Rge|quhUN{
z2>vbwrk^ersE-E{&*}+EFox(M6VUoJlf368U{`y;zN+m2&GtFT1dBv8WKnqOH2aq4
zX)@2xd}n4M6J}*;4!GOGXX$YnFjlFa7|&sBuQ$3S5j#|EBn#s&SF<u7?L+3=%P}Dt
zKhY|TJzsWpe-Zb~qLg2k!Nl#Ck-)I4rK%e(Q|j6k%>=&3y!St!-K;k`Cv6Q*Do@!?
zAKcaokhz1Rv{Y|k%2M5-YRp7*xjc034x6PsfH8auKiTobh&IaEZP1k%rh{5t&z^5O
zHW0bPIOv03>7e$$m1mO4#ed79*()DGNO2!HfJ9owzC%=+MUr|xeFonK0mFNDetEri
z=ga)=$ymT>j|BBY?#$lCR1HPwCJDBCfY^q<8^jk~eXz($-P`ECdf7OFQX*wOMwi)Q
z{t6{h(XfmnAT9J3ce(8~)Uv%Fpg;jQ!3<U5F+2u93(d?O@<)+uSx%BmNYcqRa54TB
zRekO@F;-BrAlk}`nyzp(^_aUH&0sM)r!s}7EqnY$xk3ly2z7@?x8uNW$F|GB*QZw-
z&pG%?pz9K&`Qjp|*AeZTF%{YA7RhLnHU>(o`N27&eCGbM0FF#wXR!vrG>0hv*e*5|
zH4QOkrK6HTT?U%wVGKBg{!P4(rWDdgDuS7-h|s|@e{GXINnYyOVfKyD!m2aKS9Hu8
z`oyo1A;?1>8<zF6HxD3hu}wm>2yvr4X_fAh_m#KC^gks^U66#Wi)4qeH>NGvZl{8f
zoOIi;-0ZlW+<0;Qdzq5Vmg&hSd{A=K*e9ilZRSpt0Kgf|h?>b52$~jXR7F`!OsXsf
zubAmzbvd%KjGLbsfggGjwfKd&+3CdaicW8Pj6C@Wb%mTivg-08&r@SRxtN7}54hgF
zer%YW8Szc&j*xwVjeXM$+*(4xh}9Yt3&s5ck6G@!k5Uaztzfr1JPv?SoUKR;MYV8u
zC3rUPO=QFo!?{bD;re5@YHl({ZWi5%WRl7lhOm=FBEG!+A#HJ-uOfDBLSZJeZ&$|~
zlZxMWEXM<eTn^5sL^j!6&31+KYKhz1WfogV@sPz<<95VZ`Hbei;g*9%us3h-*BMx;
zbn9MnjjbwT|3P|=WchoRYrx21qsy?9l6tv;s*EsDR-56Ftc!2VIB@~g<*G(t(;gta
z?#-jlkBR*1-uvlEJnrTWD`kA~Fg{Yh5{HZ_CuO{_<3dAd1d*6fDrD%A@L@*mY)JCr
z5CH!Sp5>o=c-oq0`+D!bz~6{4Ub-wkw(B519rJ8<>n1-uKKfOuw><G4UyU@q5%^3z
z8ede3Mc;ZF1q4X;^W8Z}rP*Bk2Qo4Lam3qWbjs}VDGtuWVNel-4gF5^kE!10`%8ZM
zhqHVhNvOr%)Oj`B#6>&{FCcN<I&E><x!)gqw%^>8SOdHFLh{2u?n!Ed!3%RKX;0ZH
z(xIn=b}1ITeX^QalRt5tO~U%u^!w0=j6=o-XenA(DY2*iG&M!rlwBpD2QdcsrEEAA
zRW&J(vCQL^Q$Z(e9b;CdR8Q@%mi;?nJ15QTqD`w0l8(zCo!eKt-plX<KBD{v*+6`Z
z6MMTd^aRd-mqkGwaZ~&K?VbvWx<nMmoip9a2>VYW-CX~)2`{A-&1hPEV%nOYTvAvp
z?5V`S8#@u6vo_ivmluw5D(n(?l&P#sin0Y)t!~Da{R9<N#%ofkwa2eC;Ad0eAz6iH
zk+mG(*XeF<UvTX^Upa@=?%x@`evIsh@HW9ai7f;JfL`)Hq*(TzumUuxzMrAYG1a^I
z*rBx82{Q1JKUan^$($YA=F<x@L}iOxgD|O2c6ncIT(y%4cWL3?*@?I7<a?zi?j7N|
z3A^}FFG?Rgu)%uqBcIZ854)`&F5XjSEIn$s{=`3iFh4Cpy|HNr3ZG8hmQ20vq`ll5
zcI$>nzIawDDL<(X+ho}9j_|l6Bi#+4V`yaG+4dzm-sm2JelFDKeI|!M@6AQG8=1GA
zw=3Mna?JW}I=<hCR%s)*-MtuIrPAH~gxx^vWd0wv`es7D_XF$@^->SMC5K@zE2|#~
zUF8AMQgJs9!!IaaebG{~Hxg&B{=N7j_ue(}EmS-E4pbleS{K+$JFZI%aWi#-pMFv2
zCU6-LH)fX9wRk-N?wnc2!P;w(u@`Mu!aD<3RJLPXsi5foWxty^MPYuM1Uh``2%KYi
zUjJLzqE)+AwiIf_ygQI5Pex5OpgCpgrJS((;|sbgj~>{Pq-BRxOE`DR9Um+BN5HDj
z8%sePYc8yy2XgsF&TR&hie!+djY0OFttr%m<xGw!QPoM#mVSNp9$Y4v;ZA1>ooNPj
zxEl?#(DV_Bt{zJCDn*_rCW+H@vPJXWs7okI_+Ph6tSE*{+?Mg2*Ks=*Zmcea_{JuX
zktN|cvcixO<LY#zd#S(EdJ5`il7CQ?ejD-ku;Eu}Z+5G00&XYxIZHsCloS!mE66;S
zR7C2p&ozT6nM)(W1wG5k5{O>Zs~dwTiO;CD8-ZYrZ$!71zaZEyw+S1CoK(f&dZ&#W
zlwRCr^O&umeOtQyAJs%w=t-#1eBD3lqzw9H%&5ONTBwE*<g_KIJ|i%ko$7NZh>Jgx
zD-o<4)6x0_Zjs-==9ZjiBf!rFMLn2=3@l`CEgvDh?Z&ZSL`PO)8JLXB?eq%|ms58M
z1=P-CO#}Nl7tvysB|oLN>Z5dguqjcu#_?J$dZ?Km9-1k%K&&J08bpk&Q%qq0VP9yX
zfHm92gwm<jL%0;w$dg}~cGXVx*8@e6cxYBVs1o`yP#Au-pt=3%OAOx@8ea{BTNM3#
z=(nZSk+S~Pf(zG7+`3TTCt<g6ziKL;$ewh7ZoAbHut(mE8c_MD_Od69bwoyLhN*T*
zi>U`}Y9k&NMLqe7>N~BKQB!t5sUBTa;w^BPOU%10&H+u;=4Un7z%~WIOJaK3_}Jop
zdK34<I;ndXA%=6bRC)O95e{J3dz4|l<(N*gxv<vZx@o=SrXRE18V&m%)_piAKE|`>
zePI_tk>aRKQjpZ(<K!vew8UCvKn^hLlJ6$i^NDlZw;N=IsmD(=(Nu8^ltlAdV_2bN
zPhBR?vZ{uj1u``(lo{9**&Mu_90UYF$?y`?7E`-Zmayg33tL^6XdV&Cn>uAoCyiJW
zadhb3kkF8P7d3}w6LVKD1{75s1e_eaKez=Xml-6NkGm`MA1+R~rD;S@9+f=p>Tp4`
z&=>-vu!Or?9@n6E8mIitd3oIf>If;UovE{ZS@G)Md$g4?g%&;wwI<P%rZ|kI(oTkR
z=?BhgHKQ(QN^hnmB&Da!s2<;4kW0g67rY;LC5X!sn6+6)J*^;|DVZaXMwR1B^4sbe
z>4r?Ar;8LCOgv!yR!X={D1WKM+E=8TI3+PyOlRT~+JEaP`zBBoJ6PJh9`I&ZPz-=a
z=0}557moYojv%u#BeqU!r^_$N>z+|J(_)(|{Y?sUuYW@&Ay$ERFjE_>Cj~g1q|bg{
zxLUR@o72cnI<d%BSEbL<F-=8oy%xnsE2AbW#HcBZlwfJD!lAWAZqP$?INxSKkt|wj
zu4<>G@7IcmRwzvjnxNel?*rztANMJt!&Es6esHPT*C5L2-T)s1G||I#98nj^>(iJ)
zluX8?3el8RnO5)IfJoreqK}1d<JUq@TD&C($}Y@}f=;v^;b7;AMv!_CvMwiB^j}ie
zqJ7y^sYhpq;M#mkr}9VVg!N;%Mr{l`NN82dXr(bZ=mBpd&S!MWu(tiIj*g|ut@4%v
zY)`j?3d-4Y>qQo)CsV&s+yRZsjv1(B_fC%Yj!sU~#>&rb8P+B-E-_Lljw}+zpAC<<
z?JEUG3X>vJ?YAl^L}MuRbJ9!3YM!=<rGBx6b3@$8fW%Y);HT#ZZ|y+YFYJupM$;qt
zjL_6$;VTCZnHTDrbC}Yap-t!*?PpPmmE|F~)r306k(-*vwGXuX8qNn*&)<II5U56{
zlgh}}ex@t^!L5M9uRnEm2C6=>E*7q?ju|$qjIQ;Y7Ide8$!ze?yA3E-Tb?s+^1;iQ
zYGeXjECoTcVV-&;9(2UE3*IUg2F^9xCCkYtb1?!h2n@Jx4jh{n^Con!MuOP_lJ}Hu
z+B3RH{6AIZ2V}3<@dGF+sp2OEqe~&_4{O|Jgi<1y^T=0=n#hH4wf^4h!+}2y<jywO
zWs*cQk_9LR0<*xt<gfDOuL#vexha8=tHFv>>{klwi4#!rPBek6G3+#&X2(ntV!;qj
z3~AQ-?_KIHB#Q-pB$T!+?2_ot?YBx5d^9(WDlb~eSGtWD<ZQ~XXqNz2a#+96j4sjc
zxRArS)!J`|+c(l%rrZ6J!I4Vf*w-96b870!m{?pjcE^o+gK`onruw}*87YVX%2k8d
ztUVmJt49=h6=_Ope!jaXYgJp8;zo+#?kTu&#yx<WfLSf55cpLjRF|TXmrPk%dbqD_
zWouV^b$94y+M1W7%jCgUd3hJvva;N1_E-}R4yX6aOpqYoQRrtnQja~(kvE1VN#DZx
zU!+&8_?$J+Q#pZ$QvNrY@(ur8p|IHB49+L^d)T3h-$l?rxf9(2N8iA4(fT@FCIZ#@
zm47ykVx;jDV>f{x{5Tfteums2t&Q{KJNg7<@j64Le~n@11K>m-Uxraf7)M?UsNI}a
z3m$wcsA8DL#O@QWKyk@<4K1E5^HD)f7HPp;>4d%FkSvc2aL(fckrT{L8}TWd!4_|p
zoqa_Sy+CNLOF%+8a!+F+p+bXBz|v#v)tO689yu#4n7A#6;yATHlx;v`#Ym2=ZwRqW
z5v`DjY+8vX6?0J4w6V>i%9pR2J!>joT4667)kw|NPQXnw4CCe?kaHuKn$;2)bx1+N
z=H~SYc&FRju3>(nS~>|GXjpoCJhvf@q7W>UjJg)8v9kb;(6p(u?K<qM+vqXeFDSIE
zL@#PVH#eI7VzUsUj+LJUv8GgUl#);dxe#@%PvT*1-t=0{JRGUTc%B5G+(7XVxn;Fy
zvc*TL)hTEhgu6jl6X}nPpV*-oKfl)l<dn6`Vvg1){5_{gLQe>Mn)1O``;D!I3gMi<
zDLo9nu7MP*7kM(G3T576tn-UfKowNy;RH3vlDn|LoP<lkBIjYoIXmKNx=dZQ5GOy@
zX??MO2NL^>C!B5*c<v#B)2ATkeFiv&fBMsUk|Cp^>JKAt!24{b1*?gMK(MUbTc|O)
z9=Zors57(V*B>)Z-bgK>GZ7IJnkA72w)(#jl>%JXFMV1roUW_~=EA`iy9AyMw0p@C
zEgXUngf(SEc=H41s@Q&i9*lfOlTnHY-mKjovRlqzk>8?RG!wr1dQJ&EK7EiprN7KU
z2@p_KSMZn!uF(x>PZP?KRpd#Z<(e2w_ljDMPT(f2Rb?8GE~M8`!O)s!iu_PMRBCo<
z&yn-mo&ASYLYBr2*1crCpMzYJBoby-_I^!c(m8D4$Q%^s_G!9G3Q|As9U!}O!Yj)K
zY%|CY>E3kw-rdAi96orYXIno{Xf<YGQ^Ll^G?;a4NS0miQr<RlAbsO9vvPH<Xpq8A
z^51T=+u6nyAd(jc*TD<=&b*=Gr6fn=lZyIf9)3U{ROm5jq0t1@n}7;pnAlc&k#V%Z
z$@Ms!!ZzV~gJ-sUk}jy4uc)yBZ>uF~+Q>l{0@#;cuAhkYO}#Mx8*dpdy?|gPRxcO8
zs2yNZde;K1;Fcto_PbV&o<xyc)C}$e+mq`_^89MrmAhrXVKYdTm<y(Qo9nr)?Y#tp
zJ!!>Nw(jDQrayTjNI%eVC3QJXA<~&^d8OG#6in*+G;>0AVr2<@YIXkhWBQq!`d;Z{
zY6_t1?VA8N^+LE~#MskofVhF;z|krPO{MmLU$%73%jpL?=icF`QbvAv`Mdc(zXLZ<
z2~oqt;xhK5Kv7k1)33ZM8A6Lo<HobvK7X{Y9=Bh0zmK(PxZJzONnyv=`&kB_+r3Eu
zrZ;OJHs;neUvjahY;uae0aONmGiBOMzNzk8KAk(OE??x<k9z9AQ;E^5RtvR)F3eu6
zj{)vg&1`I-qXU=ly%k-01|QYGIzxx~gxGz(!giWAepdom{ttT6!t$$T|8xV>pDj3F
zZ+f0D_#Pka78*|v?$!?xXIriMU_|o@))r~PkAGr2t{vo9FV;bT7GpMuFMAy~KK7A7
zqKE2F7wMl*rexZ?Yr?mL<Q{N8KUrzIv{EN6khyc<lWolStr?-$N5{99=nHgj@Mjt@
zj-U?7z+80uW@=bnT=1HNy;kqQ<*~aTK=qE^UFUZv0qm!z#+SV#F511?*i93mE=fPO
z2<QJkJ|WrLA~k^JCJ{To1pq!;%kVM!iap`PhdnQk-ZSM-3-Gjsrv<kE15~}lYt9L}
z^26@Vg?#;#rE5+Ix)_b$*8Y4#Ju+`R<MQAvKX<rKyp#B~r0tY~WnKP^1U_ha<i?3m
z7Z1D!CWvk1#@-w6X9#!hux{}Y|6aGrUXKy=a-keB`U~pH9*_w<i_#`ef}cTus|`nI
zR9TI4VPVzRM}<+>J@GPN>);*0&*3M$2QGvJe7<SUgTr6);pt!|r+Q`5VQiwU;3C(k
zRw6_!-*{F09(KLu-TqpZ{BH>yF@5-SOIMJQ?RKt%!RKnyW)Wrp;rRcJ!)_VLyDD5Q
zp9|=>-hlA#eL*_>x?RA(xTw4KaNl-`Vb3$tuFwIW)Y2%&w(zaMZa%V-v@q)J+}Otz
z8BdUiXVm78xA;RCPv?5HsF#I2W{g>fnHH<T2TI3pL213q_Z-Ik_V@UQP2P{@@@w{i
z(t7;J7qxEH4Rm|oHwflshJsT?5=64u3OUvXY-E5&rZP`AYsOa}V1u!2!ko>5F|($o
zZ=3a>-S|!ms{;buwd}pxxsJI)Bqa)@w%g|DvYy>Zi#oBxF9=8Vx>6IwJul3o_r_lQ
zb-?jDhQHeTO-Ek0ANURn_ZP!}Qr#7luGGoR!*ql@hurt^ug=)gdyijRh@rkdZf_wk
z&fy4sj}mumcP~)FdV-}9JKmqK_i8sEX%IUp-fh$R|E<&Q0~f;<`JGedu-@>0C-2?M
zAL=c1me&T0@5*)0MFb-!a>oW@RRQD$=3diAWXXSxTSmo8>zl(u($!g$^nzx%YLaVp
z&0b5-%Cpjoe>9!qwJoDxsg;gVQ9Z<M`Gc!8Iv?+54I+`PI<21(t`(l{=Ia9w>OUmV
z!<&S6Jka_b|D)Bo3sjGAuhjS@jPNT3mXBtq_8TfjEv(O~h`qYs@8+|C`9B5>A!s?I
z??0$6?U0Xhuj}7VjKK+W$fzC?cun%Il}M-LkC5!i`#+{t*wbOOpf;fk?Guc~lW2#(
z^gT+MI)lY~*0It8vv_HX1<DEG@v80mcd6x97rgsXKX$8!J}<IM9eFnQ^;}gR&*60d
zMBDK8Y-UAFYz}vq`CXSy6#wGI6I9Sux;kU0&3A07N}QbDU6_|9&@=G~jOH>QkJ|)D
zMYYod%W=g<b_>F)y$>3{jXuSJ72E-a2&81uWPJv`X3~>f$n0M)tSmT$SjO{(eb;Wz
z=Y!1U<wsp)i#ajWmMUzAdYAqO$|?d;sKl5DgeI6Hn##?$wMb5uXV8-h+wRZ0)npm7
z*q8%H2x=@1<UUP0zkEvbbqAws4ivEit{bnaNQG{@m9CYgZxL(UiRAz1vlVx+Mggr!
zIpibTJ2bdyr~e<kz5e3|ZzqJ+g))`+pDJ<?=G4&To}0e&Sw`TioxCjaFfZfjf^f=`
zKPS?rEo}Gys~egOU6PrxhW?bO6P7EY1v8$$lx<!@Z8+c#ubTmMX7Yg0t-0;PGrxQJ
zD;WK*eK#peuPXMI@bRK&cO9;IPZ{bOEWPWU-<DdhkAP4a4}Dv-^{pwi-a8~8nAq6|
zn&$VyNHqpMd+&l+MMuPMyxm?InxvgHQ0-gLII}(uQ|=+ZKdpw?Lj*p}vZo<0al!EE
zQQI{`t$!7J(Zc$e`C_*ph+dNBKE~`sKA@m-;$FWaZV*Pec2T^ye_ZeoXjmbbU5N1F
zBldEhcri8i0fa-yMyv{wLx<85L6R{PGC&q*0u?{EBUi0P@tKj9UHdC=OtCdMIAFe8
zAS(^?CE1777pwg)`P;vQHl4;-Q(|JMrnl-nu0}~7AEjicidCmQW8ZDJd9VI2MD_0f
z)TSX0LAmWVL8hLjTL1zU0Vi|A16=K{c$)#*L%b&^?(jj&)0caA>re}iQSjlvckf4e
zqRRofe?k}|WuU)x=<*E1H}o3%igSvpS1q)i{g1OaUzTjg@y8*TsrU;<R;<pJwU3v-
zu(p8ZN!c-*6?-LE${=~1=mq6#3$<|~y&Q%{M5uz-o3_-?qM%$~pM%TbF+4hb0|*T!
zO;xwY7O~~!={87-(#f#Rs4<YsZoEoHihQ(@MzR85<=|vpzJP7>N1t?cf{us^a~Bsr
zcI1b(#TT0!Vc$5qr+6HB24Y%rAn@~z-H`&#%4!MfE?sbom?Eu9kN%1wVeln=VEgAo
zheL}wr7VK^3i1bJ?3wO&i-BQ2L#f+s5r<2|6`s1g&bqyrLNW<ygQanmnX$^<<v2R^
zP4r)h*k{;VWjGqSSxY!9Pa_K<+k0U*Lm?H1MxWQ0t$T2j!6G%|CG5nx#61|Sx%apZ
zOt4fr>dEjJneatnD*B#9Z7v<qS6r;j?MCNsg9YN-9ZNYvSQzB|7jQRa!RjO&wZ+4S
zX?`<JzZh}S@v`VOoC;m5ODpD9v56Xv<rx3k9DAP~&-xutp1~fb?%Cr)x?RtvL{AlN
zl0F3J);+|33a~`M_jT7ZSVHAuE4cjq=Ead&rY`eovW(8c(V-2ZoYD=PGuKEvQR1ag
zxK~B7fV)c4(kU;WM%<}>&6qaTLLspxvGrnZmPnJ_)Z50NYcH@{tf*Tea%8dyi=hwk
zZ`k#WUMf@6OUwA5mM=<PKg5r+q-_o7ls@A?MO${I=l13hDot7a(C^ATWq@Ik-<6`$
zJ8~v+*ZLy^gQumbVJ_&k@S9oC;=4>v2XR<rY|PPk@%O}V`9Wbu;W+d|E>~-7Ec^{Z
z5y%Ztn&@}$B(PTag#D8c-M{+c#J7x*bKoa5(`d81%cue9%D_hsg#A@wKjcvaEdrDv
zmtFZCuL&kpb|3$1tr>`=2J~U@e;tIh%*aI~TJR%f0Z9s?wJnrH$<DE}8Q63i5E0WZ
zSgWqr_iaR?u{5-JT#mxDDlV^b4j$wz2&MlvYCl*uTJ%XifvC6lg`br3YZbmjIom>f
zfu)W8`tI+z%WN58OQ=tVnKUAnQri`Is$!*Lm`P3vV;)d^uD09iCd%t7l7=VKwX9w9
z8r<ZCOF-xB130&xCfwxzuI|TAFr6sr(+^n4m(B=g4VR%2(+%lkm5Exg!!P?Hj(gtz
zIBoix96mjl-tUPzyW2h=w9}73eYV6tp7Wt^*v2Vnyb{~7{eGgP##al*Yn0q-h#yW|
zE|{c~<C~F+85D?R`g{Zd-bN0&cCN`YCDnBJx{czqPMHNUtQ1>f7UkY+?`n^mHPQf(
z9PrD9WAf@ehF;<$btWm~q%nQFM1|C3^+bze@F>5OA3PwV_~w261p0>DNvG`EE{FrU
zSZ}5V!gred?WJ1*K4`xcl0EFK;&%uUs4{T<<!@(cS+o~H!}3yQ`hyrr$k3qqj2_{E
zVcMR%5YoO@=!+<2FGsa#+)hVrgV6ylEv+=;V}`X6aV<*^*S?)dV>1=2oYFX=$gg7K
zyUcu{WocR@Ut4YN24i;>N5{pR#Ehs_5(S1dHH*U2K_rzN=;`F9ps>p9J&Mu4Y9a&a
zMp=(26@N*WxNKZwp7pA%N>bD0bmrIET`e_M7n-VCHV!S*<uy3+x0<j{eWUhrA7o95
z*PKK;3L|>QNP)S2k^I7k;V~JDi5h1KkX3SCHqpeiDactAZjkgjAj@n$Io#<swZCQz
zk`X$)wGuz~5{J2b1l$6ZE3d4~%_+_DQhoX?r<e<q536R4EoK&!V*uK))5L}?cq105
zh-7jttwT+UaC>jF?@XC}LBDr~eXMR)ND%p``%yq~IzgIW91hJ4zlQrv1D)0hawv~_
zAe;9b@t=IEHX=^_hSJuf?;-ZWOxy$g`yItz9DdR~z1#Ys;Kw&3#y_L!+=y3|{P)k}
z?0a50u7%)(2M|VYoPgoCQU@|#At%{hK5zwnZMp7|oLbWL-0AM&+3^?ZriDIWx;JDZ
zUl3miFu!vA_wP4-KL{B7!s2t+r_Su#^z{AgZ&|I$w%`{nE&Vm4-hiDA*Vg+kIvHiE
zx?oBvh{}M*ybdhJyspl6xn}+{2eGNp?K7{`1TGzptI#=}e4?ZeUHr16)GD$VLnolQ
za7*69EY8Rbo>wkv5#`9yr~_tKt>n+>-6toS7{16OHF)cLl@~DV{-);HCY$iIByEg?
z#7Srh$8nJ=)!DP#;SFQ5)M;47dz`ZnOZ>V;DsjifsZ6g*D<}Xmsnec2yKMxXJCnC8
z>)7e!7p1~)9oX)*6$`Z;w|C0AdaS|G2xYQ4BL1ZN%U<!SRCNV$r#Ik5)ezvR)E1qa
zF{<nBSO_QxxJ|#tY-$~BTS#2i*51f6(>Sx%xL_tV8`f-)f2gLmvUaUcSpDOZ48=1C
znmS}kf*B*BQCGKmV#bPT2CG)TfUmsG4>fZd)vLA+Nynaru^0UFUW5BW)#NA)nQShv
zgMs6H)n5`I6Z?CnH|YmvSj@Sdj1@AF8V3raatIZQmtf*M4%%I7u*e(mD~k*Qj~q)2
z!B1xuN!K0;Ujfp`anjEtMN^E&KVCb3PirCS0maUlV4U9_FF+a>RLQDMu(>ir2J@EY
zafpI&*<k|krs1Nae{CG<C{+uoE2~}8)L`*@zjy?PMeC5DPCagaEnpljH7>zztnr&O
zf{<4wwwq>7C<`lLCdB_FEx-B+yP~{9zd+q#M#-H=1>cy0*@X1`W9aoaKs&rTI}<Dp
zRngeDJ}VP{N(rq3IoGsuj5-4fpO%sf51-59!idLX`t<?o5k1IesIB2oR)|p^lv|W+
z9n9W=s~9;h*Hqzxq#2VU|LxbCYe<G6G5OFH=&8E2L+Q}_t;Ce(5EnpDto=y@gAYFf
z@(G*8pMkp|eN|^N-ivrOK(vz)rhr$RnOW{B(YNPgCmt&AAyp3kiBaIZz(xfKn#*|f
zezW`Vg*kA*n<m1ME3^@`#5?9}j@D|nCpekThK^6!&<azAr{#j&;vC_D*F+aL8Dtof
zNN+}NS&g~x^ULd$r$9*ZH6U{XK9UjXo`e3pmc2nw``#5yWQ|+r_wd#$Xb7(48dz1g
z|Dg3cEE_xW80{x)looCrw3w!1*p#PlXJ|07XN0M|UD7>_p8~{BspiD~R+{ZO+XW|*
zyhqkfJ%J>pG*qAa@J%VCx~ND?eGc3PVfC<=GTlE3#LlC8;ZYNax#JO?VuF~0=Kd;+
z9or^Ldzu`%P)p6yUZP_vw6nNNo(t5DBWuY^?nqu#M#a}#NKRQ*N5t2gNzc$xP0c>O
z-Ejap2C{qm3OQ!_Xzhy*gZpX3e#QP+at)=;CVxB=h_e7_aV$hv>S*16-bP4P%RZ*b
zA_JSua8HShqz6#rImf_!?lt%7m9g!^U^BtI53jvpn6jb|(Md_Tw51laD=B48k_2tA
zzNr13<S84lo}vN0qHf?Ahl6&SY|RP-(^W^!{k4YjSn}LHxWmu%%tDXD{_Bxq1zV<a
z^rD#)7JldR>pdh3=HoCQ#!24WS-c|4E68)wO%e&hDSuTFD~oP5KiK0BPYlkzD48I+
z)i&$q<r$~h7$YS~o2(C@x(eZdySdo!yD#?3eksL7LV6l3ugA#VZ-8y~-1kY$GV%<{
zy5a{Qr^F4JyI1e4SO>J&T({V0^<1uJrd&h!*lce_cN^FimynP5dpG!Sjg7{V_U!t7
zc^&#Qo3a$kcgHR_M7}0OW>`<}p3#;A=@)NW$Wh`a=OzXDQeY?N0tT1VVI(VbPT{~D
zocJ@xHPtmQC(K8p0B~~=+cHMqG879BO>-(&%_U}SI;Tw>OB{dtOk}2AxtJ^)Xc_{t
zPkK^(vfh#`8F<yGHk5^C>t{0X({4VJR6-D*yvq1i@6MSLy-4J+SqBg1I_7%e9KhgC
zt3{7p`bn{IIMq1iDefRrNHiWg?p@1>q8xu7$cE3{4(*hFRLGsX-{K*UUw)H1P~ORl
zO}X!rEfd{z8N>}{ri@G(5+lZ@$n|u_Bmozppu_}-=KlPF*7Z@!gyv9?2xX~(Pp`^b
za))G9t}UOl&lgr6DpV!teQ(fTnw2Z)6(O%jn_fK`#`Spx<|eO`6Q5T+#~WVLZdYyN
zuiNWGaqVWnJ(V0DM-d<02X7iH#EfKXQODz)n(%p;_OAl6Wxq9?741OFsjW;*ZV+H-
zYwgAxjI}&HUFkL1Pi#&v58ph^4j3I+-%yvhjJxwkMV=B*wimmy$46tiUx~#)Z#!ju
zgo_xq`}d($6$vi|FJ}vz9!^Bc3RqfmYmxxr%<cMyIYeTX<<(J55C}_myfoQXwX!vg
z(>rg2JPtG%2#~sywwV@9Q`Tco$H(s$Z4}zM85;PkG~|$BF!mabpq-M(-i{iM#+Iwo
z6KOk(3fF?TD+t4I&&*EY6kGHH(%{s1)*W84Mll3tvgGV!!}JH~PHbKL*Q^!Froj@?
zd;tuF`8@+_KasOREZvD;p|G}JielBIzEbD5WOjE|4%`QE$Dec+Y&%_O22ctQVd`ml
zm%*w|JLZ=mFijV)K`a<_`Z~b%;-GIBe9|*5^h**?-r8hPIlRcb=LLNJ9y{y$L#w|$
zgB~|A;(yWv4ThpHDF2KGg{`O=>_%ZQT&^|(ZWwz8-u|_L^|dzqG9}{4n2mNW@c{pH
zDI$g0lMFK67R~|9b_UVa%29Srs>$ocpp%TaAC3x@#?iYY-aQ=i<=&<U;me&EUs2g%
zn;HJ6Fl#=E(1eDQ=VG2W)IsU!@7+Ql*u8xIAbVj#Prf9K&^!vu_);@FN4yMUVuDJv
zFp5<bbB9_y%D&FYr9wl60^?jyIvxi`7>EeT<n$>RL%ryE3@q|j`Y*Eakx9XNm~!_9
ztOvAo_q-*4Ii%m4f@^Rq`X}544-ef001;pz_i`m3jtXdHg~5%|tQa?G;>a#MLHUA!
z7XwoMx&J1r(5|8#cSLu8^t20Ls*tXtHTynb)XI{LT1ETrw7&UgI{u6`N0aIt#D>qB
zzr0hgK69wp`CaTQLT&aHa1AUZ{&%pqI@J2mU%lHjM{{iA?N|pF3reYvxS{l6Y+k=v
z_Z5d$Y>Fgx9-FTY=aHVe)YG<e!|Y)B-w|ZzES@aeOgVmLqvo8p0ZK0Q7XIu03I9=z
z2FW}2lZoo<`9#1n-KM_Yj7Q|=`C5C&`chjI4`-vPcm=3#N$@b4{$d7On~U%rK|tCY
zW}2v*lg0djmS_u%^MgnF5vClGAK8ooOk1P+D#dH9tu5loin%wR5vJ2!zbU$iQm>hn
zc?AE2^WKTrlwiWXSho1VEX=@e09n{uj@QRZAz4S<)w<gk<JXt+^DI(HrKx%Ka5B;a
zebeN+AK_C-p_H%CpOUSCFJ#_owiN5=8RLQlOkoPL{)IJ;r;z86u{A+211~pwBS5si
zc0O}O$O4n^LJJ#h7jOJ4l|9;2^5@Q34U<}5cd=fd&-&W@eB?WNi$kJ+s4v7FrZj&L
z55h~@E6N=*A-+w4TfH3&Gv^7{!^K&M>ksq+*Ez%ubzeBIZNv`!0oWyv?jwJAjlzL$
zm`yJJHlO;n#yF)wPLWWxpr#Gb?riKPT}`b_iukdA$Ou+SCYGEfJ@D&hXK9=nZljM*
zno21o5UgiQ6E{g3BS-vNeSxnB=@fnMVb>tP7uJx}zQ9K|VQ7>*K&BuYS1Z%e%%fgT
zCv#`U>!~aM0R0^Z;iJ)==btC(n20M{r9Py-*nM$PG*KehK~cl76Vl%(F7VCcW9qt8
zSx=~Lk)UR#%y?Ab0rpk$uW>>DGurqnOBCiJ$*S?X;XW0*WM8Ig-yK76%P?-LEb^AN
zp6u=mW2qyJbGn069mpmnD+(52KZL?I;cRZlwPy6>5lcqbl#UC7+h^qD_V*+n!m-_B
zB20d+=OfDaT%^UAFMM}x7bK5$ja(!F0z~E=P3lJpe;yco;44kQmp(b$2)6-^HB87F
zOyyGGlYCj#%-B{(&EJv|OFd}>NS*}{mgb`QndbG9;*FlbCmA7(uh#+-@Xlg+KVE&=
zoyWmjHdn!3rk6ZL>S9m|6JD_#DW>Ej@yP{7vXu<O1eU?n3o2J&DzCmnnYlp8sVBOS
z>wbvFdsU0MDGFw|OomK7|E!bER~qYOxd;TONMxuG=qiacjHzi^Rx30^4jUKhiHC)d
zs-cY|`Mj+OR3`G+uKWVWW?@=152lHuz^9FiB|~=cLHB>nuQUq@>%&Q&4$-B`v}j(8
z)JpEYr;i60b742QDLW|qNe=eN5a0t$kgnz25*lq8wg5e*@OFiC#S9fLJ{I}x-HBO7
z-m3b)`Q7ZR{E&nd1B5NBZ3cg4R1-^<JFy#j@CCITwcHit{J3lAs&xHZGC2_n;+H3D
zrN8LfMuL=mW_HD==HTHNtP-V1f4T~JA*pNYc7^)nynyQhNHGG*t#jq1!rtgd*+t2S
zEV8C96T>*=v_sy~hYV6qhHSMvp&Umn7wnxCtC@(@N~|6hr*JEqjbT?Oz~hi5oka;5
z$=1DPa~m3<94s9>X2Zz-7klpk)#S7Fjam?ts({i#L`6V)?^cSG2qK`ANR!@MfRG6M
z0qN2^s5DUo>Ajawq=w!S2pBp6Bm@$Y8}*#`yzlwGd(U_7`quj1weDqw{p@FFX7)TY
z&&;0vo5_sXm)C#;%R~Os4quV&XBJ6oKV8>6vs*CMhQ`zzr;iK=xnq+}s9xN^|5thQ
z8_{}*(5q7C5r#&AN!VtCQmQ5&av<G0VnLYWuF-?xdg%qx#)oPO&Re-{Y{iVDLH-qV
zCn>d$!u`3%>{DUucUpq?lRA8TzP3dH5Fg%<B0#*em*(!CVNS8WXd|tebQ`*$@b$?}
zrieRF9@r&Pf0`29S549&jCp4$>+EhwF+UvDZc&TEzh|C(U;Ptm$t@AvIXJ!6KAV4T
z^QTiU7rS%xfd64mp^$>`kB;@{mdYwr41x+heC4+}<8FLvw3Hi)T}n=q&l<PP@B9mA
zfGECDY`_#QHv8mLm))BSwqB_^7FG_W>lIHU?b?oXXkjFP)_FR@yPjLmMDi_Kx<>2h
zJdz%;>ud0_ZHwP}75<m});m@;MqV@C_-6+Kh4Bedshl&d4+O(nDWo5)j-8JC6(cjB
ztX~WIIqZ6of}waN<g;ga%Ny^c4h4wM?8<{;%qRVZ7jns1mfNzqsetVp#9k%p*7Ylv
znF_S5uoX#xL<mWpe|oGN@?Ij~XM<POyYy0cz;{6m!p`2)>C(8fp?Hn1kGfHw%0j+D
z#u!R=<SZ<oLYH1&gAnf%$m{VmZXuWxn2b%k8BViS#L1BJ6VG=?9X(<#K8;EGAvbzK
zvO*L#eXDyqBt`QQ96R8g6ymiQ$q9_W-m?voVS*Lg?y)9;-q8qk(ZzHZxEoq?)Z$F0
zrY>Y0d>?;Or267jZ`P{Ni-m;btf}YznRZQ&10TJ$#Op)^Q2bo`fa5;9E9}9<8@X-b
z?q|q#-|tgtNHvS72i`DO+jcgPg4%`-hQ0EUWhCc(ZQRqdmw4nmIyckFdxiIbd)g|m
znAI`lE-8okEqiT<wR}m73S9|)Dp&S4%6$2wGb8Vdh!n2jGCFTge|zt3OpnTxQ+&d;
zFG-P@tbzjPMup0;UC{g8x<_Zj__zpgOFHP=yDx~Z;2XQ!pQKg?>8c_%gS1xxfWCSw
zXM1x%b)%-m^EUz9#fAz}b+OJ{+zyu!xkgeuFi%)|QKwqmF62R{;#rPtSDmJNadw;!
zpRfo%Aq8$Zv_9^<A2BimeZ?u94M@HKJRyE;Uh8P+4U+RX`B6_Z;QM}n$Zc10HyxGs
zCX;?nT=v9>NWGJTi(oPA4mOu)f5cjUKj?u-ZTN<#Bh{u^&WzB2mWc=4z~9|xCOz3V
z$5{0XsI&4RFrW%oW$Yxz7Tg@5*ucF-pO#HN>J_!sZzk&U@)U*V5R8;xoO$Pq5XP88
z@E~=bHs85Gss*zmU8T_2ROKYredqnh`)je0sqoC2Dw_%0Pxjdc%ic9rJSs}kq2C>6
ztHnMUOl=lav=Dn&x19pufyx$H*MYMPkecko50w2F?j&BQf3&O6OS{bLZ3g!vju>5@
zCt1H3@SGNEgICqx()-xQsCy2d6R?}zUgu=3^Knh~^)loJGD=p13yontj^G_ZO&j@S
zMtvJJQMmjPyQM5GA9XaST8+C0c&&z-&DeiDA<3+8>2VQSaUygxmu&+CnggGA<fqPG
z)$);%a<xCmfPWv6jZ=9`KlnhUR|arB`x4`H>_Xu2K{tapOx{|+JHbil2h>5``J1mb
z@x#NS*x>XxX>Ivl!L<A}sw9Gsv8r6rG7l0L>^@Q&AzS^ScLSH5i7Y<mYi^(A8Wy3U
zyPIuGqv6$GvhjGe+E@CuHI~!3$rVuviwi+;{BRA(w^~a-40W)D_!l!)9Mw46yG+;T
zoAy_vNwy3y?z^l2QJ2INt}n(PoGVZ;d?6Ysd#?3m%SY&H(D`OQnp4RJ^=sT9YJ&5N
z0Q?OfmiyK<rC&=IM{>GVx?0251#tKXJ%9PQc77c*PD2^=-U~MRpLC`!seN{AaQdM`
zp+m2Cfwvyr7QhGDiymkDZns;v?o;DS^<^Y(=rQH>{=nYPIC_xraasTg0%sW()7{)j
z9E%pY)^%}G@%(N3`-g$2m7kvoeojrwpdO%~7P^-F%?PKLEMS((22MX?Yx~!}L~0Sm
zXK;{Vv$K%Gz*#oNG(^C=T#6~)YgGfGZ{B~a+Pb{Q9f^G7DQ<Q*(rP$|7-Q|VQyR)^
zDK*~gxYJNp$z0nSYIotfu-wL{@*nTlfM2ku8Wc(8@<`~X-gIIr<=fG-)-=aQOse@)
zNc`RN{Q|s#<;K%>nhYPM*)U@W4_}|5g$XWtk=Z#F*G5&di!i@0igWA^LKU-7bDo6N
zLO*@^$KTNN^qd9~^Gx*qPpr?CYX~#tCkv;&7&mh<>h<aEa`zkd*uUMAam9Am7C_Gs
z^4j08>jL#m?v=bPXpreptjN+X+AP#&gvk9J;tgUIID4c$+{!b5A$PrJ7{MGwk;r()
zH=X*&)qKhr3eC$B>0-|_Q&qLO@0v;tXkL;sk1-xHkP05Hb1HlAvUrU`IXL7ouQGUg
z(_dPJJr46KzR5_~Aq2xRX0YARy8iRpX-o`dGbZ(;b+hl0%jbJHn?Jm(5G{Ig%Mh!X
zPN89Ki7o144ZNBkN4Pkxb@tW=OB3J3pO?ki<vWzouA#%irgJNQUC}QX?B-!0ax_le
zXhSpvk-|DY*YpiDb%hlOR%5&iqV+DCGuau`(G6#mIOWdJ(hCVo_)vmvnYRQ3G8A+!
zaT|;%nOg$wtTsEDI%r2j!@6b!3k+!y55IkQS<D!sLlI;bWsTH%R2{~8wbwYYzw}HI
zNW9scZhc|PEIfqXuJ}u7>E`y=?Xs$wFDG9Dd=s6XFMX#@xgfOt*g5ExdPMf>NlM<4
zv-YrrE+EP*8f4V9s6{bltOqoEHb<E=V{OFA=pgOaC^{bawPVacbmEf0^XGSxNGv`9
z{WisE&5xopJUIx}LUiZof-_fc-B<B_mDzEAPqNInNt{5b_aKm2{=r?gV80&+;SnsB
z&Y_1-*nHLYEEVdYx_B2r=SF}3bGn>`?VB?T(Kkf;4P{QiF+u|)M}^#716>Hf$D@hC
z!BMNX`HA;*`4KN4P!hi#Us35q!wFWIi{>cic^zsE{YTrk==!~qb7rGPHToKlDNA=r
zcgM7D`d|4HDs7XQEb?`-fP(*)LqW8&p_~+Z__@;#1q=;Qh(dE}|F2Kx3Og-y(m2hG
z$5_q+qe;ZWsn>HaavrIdpiU@$pm)2ECn9c@z>_aHWjy!E7%SfJjZI|ZqXI?sL6GDF
z*{}tB3EyN~;@_wWG532+{Uw~@7L(Z^I+Yqf7aR-s7pxdn8$}D6bgAC^w9Z>~J3r^O
zQhxms`H*;Ex{XFzlVnyF2fZDf!Xu(R#X{uE=*bt)ngqqwpfO6oecKO@-<Pu!7}NC)
zO>BjFD<rmN?4+oH;`>+sD(i!?;t!2(@aLi5x0XFzzeA~-0%5nPe3TboDMw;hUN_L}
z3WY;e1e)(A1dYvHE<8Y${~Ws*i?$>MALMds<+8Q2CT#8U7ogRNv1pzwrMT$617%%q
zk!-!#g4VWzO7!i%#Bf}P%&AB~u<nwZG1n8iZ5^qdv$wJ>wYVBQP$yBM`^7AznCxVy
zvj-8%@zUc<y*`$ks(DSUlfA%V>UkMaPv;QJlln9zY7`F!7*oL0)nGhKd~3>Z>Ug&7
zhKiPUT0|GD_Gw!`ol^wl+TcxXjm7FzUltd|_vaSM&m5HmEf3{=(K4W17Kgk(Fq>Fi
zNKU72mV32nS|ixBmA*Y8DFMq{Za@Dx(0eD`N9|=@8<sZEqdfzb8lcajQg@xn|MBO9
zpWxI62V6nG4<6A|y}K8=r@n9xF<=(tZq^R{<ZRFq&TunQ((D>@=TIl<8tzGcqU&w=
zTy2$16RX3^O~1Zy&HI@4#;yDV<8i?#{s;nA$^MCd|MxRQG5>^H-^y4cS8c_ZYsO^Q
zE;VP~VEkH<2lxLAuGr|JJJlaaSX5*;Q3#onahi~SJ;Jc=B$DY8x|reuXK?iy)_&;N
zMO)9+?}-o|`H)ap;2E$Ighg^a=wGqmP!6MyJFj{<r%ac|g<|u3*vBTer4rN7zr3c+
z#uaOtUi!YUpLS%}&vprV8Zy*(+y{9;?M;BgdGXGE-aGn__``SE^E?|@J}icLdAQ-<
zU*r}O52oTm2<h2#(Fdno+OO!4+>gABWf4x&5C|I3xh(JFT37nrEHv)&@`-TJA$~`A
zjPGbZX>mJ=VFL>M`T31{>-oc0in+AFu1lCZ+O1KrJZ^P48f&gpdYLYFoky9Y?9}Yt
z$h#sT*W4Wiq-+OfKSFIF4^Ej?7*Obd-b36md?jjczvD)9Vs|p)p?jJH0A4U%Gn0p3
z=Xu(SY6n^!wcW9TsUc+{*Jddqgk=FxhAQq4I<I^az(udF1%FejE@^%3XdJk~UUC}D
z86|_5emXU-vedug#DJR=_@-u6{&OEObsaR&yU^AA&_v7Q*^OePU_hi@^$7*r?T5Lq
z9TEBXMB8h6kKT&DH9b4^>{acE67Z+oV}10Jta26urQg>ky7ENFq4!bvZ?HGnG53^X
zZ+}v|trkV=f0ya);LDgZ;gnrdQb?$}({<?^>YV!5N6*Sg_0cg-9n9}Ec{H}aOF?;@
z(aFF+EGSZtt)0!osr$2!$eGHoz2E_TaDW|!Pd2#$lH2X>T^uzVq3$f3;&C~iT#b*{
zLO6`x+N52oiGf`cRjDZ#b{Z*IYhwerl%n}H?d>&HGI=LlEqO-zoYi7_>=HNIWC_KT
znGDJlkwN^F2M1KSta7ij;g#+_+bN~5zBy`bZ^bBkmcV>+6zAu`xcMO~KQpd{P&TcU
z?`2s3FKE#h33}5DqsdegNYdH)zOUA2$bV<a|L4w6t?WGs0x~Eap5dSx`6V7*`{eig
zx~{s6Z#+d`dUVm5e1GZ8x!*C)fU>M!S-*OPz=}o(1v!#-7Z7D06B1`0zdL*6cc#RV
zs*M~Nl(mrI2YN1j0&7LzM9-h=zkb8!%H1e~m+yrus-8wxJ;pw;rzsFFNc#HteUkeb
zuJ;#3p5NJj_}E5G{W0@X=-M5_Zkx;9HvK>9u7B*P3yO=4z0q+-`9Me4rQY<Kch24s
zY*%F%?U$H!lb>JK@8Gtdjg&%&YNlMslEV2Vijx46$B=q;;#>C&=*QXW>noN9j-|_$
zF?YNm)(uf9K1!drDVU=y?0$It@Vx(V#I*08>W|Y=*mn4X$6a)H5&&YuRtnBpgy<y|
zjfwe?$$fb*AM*}&x;f@65n5S2b~ldNQve?taf&Ab^X(d`k3TVHz7x(-_j$xzah|qu
zD#5S!N2OlI9;<MX#m%{-f^Wckrtg)PH@-f|@|5pP6$4W(uSjc*d{+*UvN+<{mtLNS
zrn!BRT514i8oL_xkly@tkFUj%7EztJr=~HwEqE{aE{6Ly!UX?R_rw_QUKHI$;h1|=
zQjG}E<y<<t(#Tvs=`#OA*T{xe5*Gs(?+T3aP(o2pI_|zsx6Buqf0Xc-)Qdg^#`ssR
z4@*vsys8lQS!_8iSLwTYv)_8F@yfWp$>+Q6b_;$`Zp;*<QOh;^7H~!2e4U2D$JA5t
z+mYBi%-K(0tCP0^d=u~U(5qnU_0eM^$4esB0erJLZ|@3G7aMZyYAI$fVS5=pXGq=F
zj0Xqxf>sONw)o?~xc9=jbk(Bwm17H1O7haVLf;&6Sw3dImZ*E9-$9FA+*G3?hLhgd
zJ;~;_vr^y9)fM)NH`+JL5^JLgZ=7y?c>%N<OIq6P<)`(%Dd2G(w*9oqz$)e7LBDT&
zUQaoJMt@;btWCIs!k6O7YTy<Le0P<kCxWlol@NPy_kOHhm$<JG`@rEHU-k+F2TE<`
zeD(?-A(tW}@;0kLhJ_p{q}_w@TEF@X7N3T_{IXa3u7|l=VP)tZOVi61-?M!-jXmFD
z9#1N)B#e5<&cO#^&T(N^zPbgK+>6ff4D97w9DQr8zdo!wRP1nk>D<u7Wfvh@&rER!
zcor-3qoj`t%Qj&^wJ-PXL2aug&u9{`?pIR9=O+|*n!-|s8m*Q6d#@4}m$uNSoUYB_
zl{rq))DQK>UFfUPve$*q_+C03ungnRi#+`iXBO6dWY?!s-}~Y(?c)-XX+y68YJTB6
z#=~^0<aG;6-xrPBGfuwA(;;CJodI#jCY7p%iTue`Ca=;zy~=cW`pUWcxzBlnm*HZ$
zo<-khq9iu;m_4(SXL;VICB5W$+O}u<%D4Lw-s3xyA1D8DQnE%Rq)ly;HAl|^PxBqk
z>EGYXNz?u0rxhrbt9=i_?3XVJ+lSxm9(t&td6jQ3;79t`%RCkdo^++wIDd&$RC5QB
z_Ue$wN`q`(*VnfE>qFta-ah+Wfnq%?aY+$&k6vh}yaSEJ-xO1BH+!>q$o@(ZwXk|c
z`>KdSuXRdu(y2ThS2uc12rkF7Xi22iwnEUqs?S-umhjM{&(B(dO)Ihwq`y*S8#p);
zrf~b2x%$HKMMP#WZ-ugdpV#EG2<!dp0yp!#OoYS}wfPFLJfq>-w?g`o^OgH<^Yz(D
z1Y5_ON<6f%c`v$d)33{WUK2XjlQbx$pFCKTF|mkhir5=MnW_tlN0i)*>V3r2lIV1u
z;oa%&;mQ>{k48nBXRE7q!B&tk(=K_uvguHq?hv!7X0}|KU!lG&fUi;>Le$Q=xtA|^
zXTr0eUyiuQtEjtiTXeBV*C<BXgQ8D-j5_L|{_5)DaJ7g0Wbc$bprwc#ayBnZB<=AJ
z`6CYzmB;<K+~g(q`gi#sx;}S{1u!vgb826)x}*Lv@l>AOL)p&4$WMK1_3Z^+w;baQ
zWzllyaqq=M-rb^{DoYKfrB}}{)`oWv^yvcQDn!B^_caX`Z+`sgK*baNZsu*m%;aJJ
zB(l;<8y`e#0cv$C2}_Fqu9&3IYA_!|b?jvO=)#m&u72l4dmUG}xQ{526e8~m^H7Rb
zi!jTTh+C-$45`ae30u!XoNnD58W6IReDtCA9OlQm>%?wh%afItX|a#^uP$T>J!P(A
zHTz_w-hZLjhkJzpdSmrN(6y#A;-s>+7E#(p$sgC?K{=_Q>R*{`PPc^wAHQ4W9&L~d
z@p+b2VKaV$REj(tw@3kVYkJ&j=u_0Yw=g|-98@#nMvQAcA_4r)JzKfv<%?~1zkpt<
zwbSMr)tkA$|Ln($9;FRG=n!JPDv;X}+~jL8bI&8l_ny-au%S=4-<p$Zua9!iPfi5n
zRVI6b8CdbYcH5Z%RT!o7*<;#_x1{?#;!Nw7g0qn`S#Ukp+v*)xY!+*EDK;CKAJ&T;
zF27WL?vl?{&a=0}8?A4rXeC8H^~d|I|B-hU)ug|W+--bisjfuEfrl~z*mG1tKYLm8
zqijP&d6udvV#Ddn<qfCe%SqWEotS0=qi{K#r-S|2x#&mbvR#wUocXuDv^&tHNRLM)
z7B@!L8Qyj?10fW@%TU;<3e(T(b*OPTa&*di4yMO;@6dkSzB@cDIRh-Sqq30)>XWv5
zTpxTIyW5r7RlxOmYgAA#`2M5}KzzgnMOT4%n14#$Y9++D+BrUa$&|xX>Uqso8@@ee
zQn<;8iTPlQb!(KPJx%jQbuI9*QK=0&BEbG()4fxrbi`=lN#$2rW5U}L>{QDji`|2Y
zx9ZB`6r;;x&ToX@exQ%=B(FOty5bxcdj};u`24MvUH_g-<9R#i8RagO*dy@iSDnWq
zbFCE0)BLx5*yeoR?6J<i8*l!e`UtON;?iRmyQf#BEO|Uwzb}&XPTxI*NYs)JsptOr
z!R)}O)IAW#(-aIoT?CBk&cuI=CYfECiWhQEw`=!McaPuM<Tr*2ZnuVjkLZoDuS?JG
zj!?!F-kr+7*j}+9-pwA`H;I_84M>Nm94^}awZ06V)tMO&^1U(Ck~wUC-Nx?rjhXOt
zyTNiLgPEKg;WCcY&XXZ)E`d=#ReE@F<tVIERp8ZzIrvDYdB3<yc!PArZhDt(9|57x
zd%p`FcHx}qQTV5Cja*UL9Cd2C>Qzpf95}j~4`J9t!=Yma<KbQR51=#6)y?w>HvD`+
zyUsAzciJ2dF@<zlLA0~qUraLJd|?z2;02~|UJI~O93G{u<oD;O-d38Z%{$(q*!1jr
zvEA(8$OqH8x{cqQ!OpNcGAuP{1!N$uISyN&;+w3ngH?JztTL)8g}>U)s1_4)Q<tP?
zn9D{Bvs{E>H}#!-?@=Y(;O=4#J(PCNa-J@Ezi7%$J#pfZiRZvG&GXR1hN(jr!UNTs
zg%~~x90rXA<jEoU>L;Ho9_6u3&7QM)7*$OeI$RTFc&54##azq2ZO3EOtGSpu%Wd8v
zhR(yC70xn_O|9nS_w@kB6cJBp1tu+&v=zT*V701DAJ;)+>gZ##6w_*+whGN|M;VR}
zP6SzjWm0SQ&TSM++ihPoU5oAs4f<jCIH3C8Ot=2F*=~^t|4_Aq=qA?$entx6LVvfw
zV3WeT@g<Gju%YMhRC{_`L*X*@Myt7t$=Df|fz%O+k#R-#v^I(G^rJiQx)wR|W<Q92
zSNq_hWf`vz&4#O`NbVDd!kEc`#-aU(KMG>Dng(sVwdZ;u3TpV7AB%M=c+qT6M}dRr
z59Z!=g;Nr)lBFz<d~ArKXO&ycuQT#x9SIZ*b#v~%-5FLf7Id-YDcmEizj;(63#*R~
zXmKXQCD?ZY+X(gJOhP02o0G~_>!b(S#$DB}+-T@6%7jO?sWntg=PJJm1=kb>h&p7|
zzT;)!&0BQZ2~<TYJdN;qk~=z?{UlI-Eoo#?U{zM>k;&`xM^~#BvL4Qc5y>Ye--?o1
zWEnDdZLFMvjPbK#Yt)l0vOUE&mA^xFBO->*?7s2j-!yx4svf9&ns7^9uXV8vn+$@j
z=+CYI^1R=(%3paVcI)X7$ub3fp=MvTnR<{<rZPvVsw6kseMhi#^cJB8MGJg`82zCi
zIMU|a*|N$#wD7q3dF-|CiG%Lht1@WQ7ZFZF;jdrwe0FNxtCIJLmraM{25(yXbUDx-
zyXFmDj6PM)K}k+21RwVhx$iyU+HgQ$S&^5X*BW|c*sQTqVOCvrsc>T3y}|NB_Wb~*
z5Cm57`}ODZ;a^CWsTM5@Tu??DyIS8KkVKZu=ojm6$|3&VloDM7i@rO;cieR`(7H&J
z#jQ@X`$FdTy~KRy15nX<=QLr?FXJ=1>~lZa_v?1;v`TpoG%45BD-Ls3xk`D|jn&W3
zY9`tz4%*DzXb$g7@f9P=HbeFB=^TALF-<Wgyu%6X3ASTbSFLIB1-8@N`EORlO?7+X
z@4prui|fj4R&SVrd%a$?PVfrz?@17UE$Uf3v-#I<VB~jh{wm^!LZSg<r-J_5&y7XJ
zlEbAvhlM2$CYl;Eyu3Dw3Hg%XOb7T~cxfN6&C9>G$|ZC-JRdAd&X6~5Z{eHxd7r=9
zmakbp%%$_uMkH&ro9H9Y(3jysC>DV&(_NscBGb0gaHXQ2jBJgGl=qBt((tRSnh!Z6
z_#V0VA$h3;{D_kFWv+OB3D&s#@oDYe#pT?MRGO;QWlu@+N7&=}DfAq`lV^ALego?`
zH~Nh{-|RiZc)^Ov-bM|{PEc#Kit5W(gJ|6RK;XdH4Mo1~=Wo2<(xL){1g6T*l5QLv
zEA=aOc?2OFvte$2T~TSw;^FvnJ51@DY49tGr!`YDdWX|j>LMIP$frEs&j8++?S&Ob
zDJ;Lf&}owtbxL}C8tWT!9GaDv9G>-|7?OU?qsEX`DFAf@=_i){93J{vsd?iw*0Hc`
zyrCN~AZ7EMxT}+0G8ZtOHF&(M^#16tFLcDkr`wW%1?VC#X=qo^8g)Gv@x;e|-Ayz%
z^m*hvEY*w4U7CBt0Tc3Hp*42WhPI{t!=92;A(Z2KQ&#k(IWVL%YAdB)Wl<#Xc2mFV
z)N|Vg>i7$D$G{cOg+5>I8(;cfZp_ByQ=Zljt;)~!*)i7{y&rMeQsy;r2XKa-RIyZQ
z<6HF5RQ*HxwmS~yVk*zC`5kS@k44xYJ8j;W-Q4&dAS3fxeE8Jkv!|>%%KU4Qag5Cg
zK{WnAV|C`QQu-<J!{#hk-^vzNn>hgvfYWM==mpK7<f{0{Cj28_C-J_y!Rq%^M+UbH
zIcBrJ$PL?P>XW9XWNZc5=YpMGo@CC9cZw@Lvly}qK|MJ1WWzi9iIom>bI#sK_K$A1
zCJszE<mv`&)Xu99>fwd)TC?c6k(6WpcL&C@gIi391m>~9UO9>RE_o8*<~wbPFy;iW
ziWEXRA;_&H7Z=NU+cjQzg<9f!kq_G{eMQg`BEvU7tsxBWJtZU6B}r`1Y)v-RDrADp
zMASoYxGOvpHM3k*syhs!K6~2a#VY>dtM+1ncgaLKcV8;aT-Wb5<f~7XFo~4vll3(h
zn(ULd2kMIM=3DY?Z>1VN;&o0l9FFc>BGwt8B;^bNRiib^Xs$z}qg-*r=k;8#buXYN
z)g(p770S^oN}rv#J)5rj<<55$I5Vw2RcUQYvdN6~Y~eziDiW{yy|IpGd)*SI4-#zm
zIbOr}<qjmjYrR9N@1+iFejxF-L~?J`x~&hFzUUV#@j0e2dt>N%;t#G--?GTbx1VV6
zN9Caw(Vh}+>65#HL(+U%C!!x3%tN8jfPStWc{h;{5LMqCLyNt}%?^N{w5<s0@j!RA
zeLhX6ds1J1VpHFMh0<wKz-pz%PJA|Mv7`ZG4;mec`xW9v4~Wx7Vm%)PYvwF0AY?W9
zG#!27id#+M;lN6W2(*4^0w4ll0Vr+%>iFXoi?E}2IS}*Rcckx8RVc^CcrA?!D7~a?
zO(7=0Epgu6Plj@$A73tfb)-I3#7gpBFkEjuigF7|IY$>$LT~U1a<Gf)ln(&rJZZN4
zLBg#l6Xn-8pP!b1TQ9o4nJe=-*Y^q}XLFXV-%Y-6%ul~=%An=K2d5wt7DzPMhg!08
zd7=o%M_}#;@@BC#b1m6>6KP4#(K&i5jJ6Msb^iJoc&FpI4m&4Vh#z)Xf$^L3x{7gX
zE%FC!=6I^+gC&O4MvPD_dl9uOsj2sEXLhQ7uDs9Hc!z8bDxAi}{&n!t_xjp1ec!Un
z)-j@d?|0cNh@N$E7XeX)=BE)J{l480p)RA<#mlP6@1(Y&56;E^pkIYQgO4vh#(&6)
z!R*S&X?2cKHywHt?_5}<>?htPG~+bzRjf_yjogJ#xnB`(_Y1E$tL`*wsgyf3u^%+m
zLd-V<@6}Iy?mpgtgn6V7)eduf!a87Wz~(6DkroNk&qYk2O;dP?isZ@SmwN~ygBOkB
zLG#wYNUb|8#*NLsz4ZG{X0cM`RJHXsCq(qk%--F)+|T$H&u_7Q;q0wpz<#e=&B`Rd
z7kovzlDqGo^+4i%jdd}dKj<B=y|CtaEXmZWb|4=1Or+X3K$S8u5|ZGp0dG<3AGYIA
zn2~-v0a3r-vYa*(VLa&LRYDUEdoK4DR_7}LeBa7T$F<q9<bG9`|4E9ZIYa`O4TY!o
z!hJ(*p%9s!&osayLZMXa-Y#w^Z2t@Ojb|eU$Hu2cZ!<?t5MM$MKD0E(lq+WKd@0y%
z2`0XbT<@*j=>UI8^)<yic|UBy&gc_g_Sg=*eAx1!_8Fm?GOu2lRd3c-=xThw?Eu@E
z;=qEW+;OqptF@OU7p^Qm@O`w+)2FjS(<3CXdtEjS=kHtRo7W&qDsGzH-5{OW9ynyO
zQ!NXZ(@iEMKP6iESnawirg-p<v6a1==L06hX%jBWBVp;a<whTeG6)qKmbhCL=}x{P
zUC(BBwc{fmlZ2}f8GA-}=}RXq0=eWIEk0OB&3)-d3o{40vWO9#jUG}2PABbVV1XuY
zxw8}lyS#higtJaQQJ+)_K&7|yu!0H6q8#X9v2EWPdQWTVsZ8%X)d+O~v`(^IyRT_%
zsKeLGI%gi^0QltUP9@(0Y<WXA7`3QAC&P^5VUESJP^%v^gnk%W4*pc>-lm>CP=1LQ
zlzaKd`CPopgCuWO=m*x6uMdwI^w_^W`7m@6Y|*)Gu}9v2plPS}7RX#Lyua);^3KC=
z3U`v?;_dTpMA}aYsq%SGmOdq_C9$viK4P<0J&?&CC#p}v(_px#JV}h(QP#7CBPyCt
zGTe&$iu6>TB(Wy~@Pc{{NyGZzO7_h@j^E)aeATdTLuPUd8-6yub1U5ujoJ664x4x(
zXv5V{iqOv^yuTye&m)+&gMW1VSLi8eS})K*Js)eKKOdquOZvf9N>jfman|)6h`z>d
zb3rg8uX+E1o(g9_ly9wZ?-_){_UD9H%O&v9&Cq?#cT~zo_$!=B<snTs7$&jTN!J5T
zy&i7|xQLQm%s1cIA!IdX9&*A@V#5yY$Cc?wo;r5M3k+WZfZnkmogm&RjB8Oox<+0^
zSwjgX{olCm&3V5x8=JtL)6d)wd_5C9vp<EpN9qZxncRCy(UAFp>*<`@%s12Xluogr
zu{*D1Sxt0yn~P_k4Z1fhK61-Jm8eth>F9EZ-5Kh10a967um;}=bDm<h+CDl052+#?
z&4$e#l^sua&@G!r<X^1CMMp=+M$=BItL5(P@$vCNK|9cBC%K)Tcqna4zzS9SQ7l**
z*AfrG+(yZAkjUF`Me~RgucCZeNuT#}W57b7qh8VAC_Yu%MM;m{-Y{YQ7%(rcBwm!V
zNPU=oC^|=eKb$X)Jx6svJkORE$UZL)Hh1ICk!`wOr?^)KEDVgrKgWpk@zVn@bHZ9#
z%~|JFzz{bF+%j?t6WV^f<QYuUX&a~X+G`5)9XSJ{&xsNRw(_Sj0O-sW=GmHP%f$9G
zy695#C0(cEn!Sj0yV__3A!~`P9S*;nxvPOP5z(HiEC^%!Vf-rMD!0Z|)9Q6@UE4){
z7^O^ksPon<mVgM8xI(sC;>BH^smeo@CLW$P;POM95J8%}C)lOf;+3=~|1HQRL7(8r
z?Dv-ZpQg#|1B0!Cc2B2VN5$t`e|<8Z)jgEIucP}kk?G@Y7D@om4qahJ7E%G=md#%`
z#AJ%TRC+)$<rloE)b5@0pTvnBHjN>QAAbO-Q*Y(SD#_L<f|h%K)a5X#>$0oxf+TW+
zi|9!v7%3$yoO-+D-rae7FpIf@k_zZC?x-tXD4d_NtmDfbJGfby0eQb^633CXUFO{C
zj>92&x99<vux|dwG()t&YgrsQk{-)ztwoa2DrqVUZf3KKNF|QNq@l_sG2MJ+S+6hv
zwGaHNS~ZY4s{$PjKxF)w#nAJ~vL9zzxq6HXcdEx_)g9+}5eFIa17%2pgE%UH4xZ5d
zlKeY#XyFFe(MFdrG<Tz(eC({hiOa<a-FXibrUcm-E_$iO7Kd&>qR-_3=LRm45A$YN
z3Wr~HIlcp-Rozj_^%=L_K9DCULC(7Nm|zSEjEiCFW8N;u{h0N3D7Op4qRWad;blXa
zFc8*=;lMc)bUzQL?9Ltpte4h;p|~m}!~6h4%+cN*A_X*3l|#+JwLSnhjvRKsvg@7$
zoJN~BG3>&q-nE!OA{ds$o_lQeVupkBGzY(OxLH{bMVQFWEJllJpb;kzlz4!_0hoe1
z7SXoUrGdQ%B}?6D1=8ORudcJ#{OIJTq?xmM$!j7smx>hHdtS#N3OGcZI5eFDqG(Bu
zxD_OD##YrlqO5yr={ZQ+JjAs_7G*M`fOrYJ<Yd92INiO7S#7tUla$L$T4;D<`t8se
z=L4o{VIm29J^o6fibEP<a`$|i&bLPTE>B@LK`fB-tr3V0SClWN5vNR0AzsGgP)TP@
zpuwu$xl0SUGMr}<e?iwI5b2tjS1Yn4QHpd}t|5s|Sj?3h^f_y3t~w9Y7`a`Y8rzy9
zGC{*hp{)QV6?q#|NUS=f<<9RnOD!Qz9dbJ-$aeWf9h0xclc7D0-m1Ve47b(#FYqB4
z5pM(rdse4GE5_`8RE6X0sV`Cbj!ODMJ$%){@do!brA3N+ZcTu0KF?CukJ0+<{tv+{
z`V@Dca2dj?8p+ccr#M{1b@+lWw{sZ9f_dF^!L?g-$r*IhtSFy7)c_T5U{9`Lb_myQ
zhbyvH{C9%0y8lRveHW!ixI|=r_CM(ORkiBX3lH)%K6izS-I}N)r>BdOuvU_|sglf#
zis!XgwCM#|Ys|J#03*se0@Ea{O~axG-np|$h&=4!dpM?o-+KZUZlV9vgqT{`5Wxa$
zJ)IZI2QQ$Of~%T?zeK=_6kOxHAugEwrDwtXC;`xhn-YjU=ZZ9fdsFFe&5=EMhJ549
z(-wlG3}_K&MsPz<L(2E9lnfys0amNI>|2GBUHt$)SDk>K6Tn<<)bnQLN$4y(Wo@qp
zb`oc0bqXsgCt4{^LQSD1q*o<`x_#s02-(6s%RyC9oC@DAjA1!EjGs!?37>}(C&)pr
zsfOpmM3I9an#D+9#~enZA;%aUQH#pPReM#JcQE}f$vwpn<5=S*`{CUshL5Rp+>VOQ
zM|rT{SJJPh(%HC&u6w(|<fyp!w>CmuUc<!GQB_k5Lm;~7>MqGzUAy#6dD3r-ZBwbd
z%>!5R$_AgX6pIvcZlyk2TE+c(`9sJXqyG<uSZSZ_l+BUDV*1T_wF}YMRf|%@WJfH8
z$_X}IK4LW2m=mhY0D<*yRzPvnNI4e<mRv^C`pq3cG|9$NiI}SST?}?ks|54ybaT4x
zcFngKt}RPZTuIt#TrjFG5OmU8X^HJRjSvrrhHXXs&8*Zwxj3e~uGN%>m~CAE#E@50
zaRQ?286DFsVlSi^UjTTH+s7&l>J`avNU3N4_yp(l&dAgC98b?Pik_FKcvkKE8LK<7
zSUjuvJfO&7*I+yQbMwCzrq1}L2mYI6c+r2XS2ZRpJhdk|>nb^ueoTMQB=D-b^QBl6
z)@}LA@(I%se~+J~(oo``Cs?w;Pn8Gh{OL-}-EwD+(gXiZA}Whtecd|0m700#Q3-Ux
z4h%x-Xa2QtH*N-a?Y|Uenb&x7Y{QtIk;29kb+h$PLR{Vjd8J<Cn;ilqDUW1)bN{LN
zDx}P#)u<lvWq$Yh&XM3z!2g<f5K=u;CWD`N-8#EvlzHk<33SGO`Io|}v{Uv<pcU5f
zJ0xbNOdK!$y0vHPUkiaem9BK;@?PU0bNuAjZ^laLHQ;~t@`2j6sJ=t~U2<#X{w2Ss
z54e-wQT=;tHIdzXvux>q!^IZ6`5lryQznV`e%(5>HI;s<Pzn5(Lg>Tq#404n@_Vvz
zC#~n*Z(V}89=Q$8cK3O15>2aksk}SXGK;?lrSv~-eGKWR?`Hm8;##9(v!cZpZnI^<
z7GT`Nol^c^Sf>R&Z}kbT=e`F2iJ?=M=A3Xd=+yg9jJLpCfm3RQS-;PJVmu9o^_0~Q
zIVb+Xj7JM)xra)Yy7gQgs_S4gl0#A3nl6!rQF-R9<hMQVKe~=x&SUn)tE9XI`Tgd@
zBMK<%VyoxM+DUCN2}oe^L~EQ3uMWjGK3r8)CwhZki=FaA(7mFQBo&<N<}Slx)X~fV
zaS2GlBewtkfF#iXQ&i`E+3LHZ3m_j$x)47k*}yccg^%9pLDK=KRaAG@hDKSYAr`ZX
zxOlIc7#^-zO4VyZ=%JWgjY?O-O-O%HZoBAB7xVUs!{m6yxB%UTMwBj08FaRV))92Y
zJesZLoabE(BlwniO5G}O?5@f1ljNC`)Ed$5DOAuQl%Cs^q=tFPH^t`Hd2$p2bzX^y
znA6ovMquwMc?XJvW=}*zhGq6Sl@@TGQ#_Y)ELOCY98V{av4@BYzNM<H^U~yzXANMu
z-IFUI$8$$!UkTi@$0CQOiOGr+^%!DNL~D&bnXaJ%D$KLaD}oI$=lDb=_xG3bLRi>~
zzmlXtdis7QVP$QcG<VB8v@prIRFHsq7}+#~<cR>Vw0TfjJ1O+<7R3eRf)Vayp(q15
zzMiAdEv#<%Dh>7#D>%uXQ&4M|?i9%CVaw{4Cz!xmCa`muZ5%zApJ?{-c#g=82$e;~
z;9S5AEi8y|viU?(O~p~FTH`x$R|vnxow1}hxov>uA`Bdt?v;Z=Tx-GUf-nT+5HhZ&
z*?#4KFD{xGw{)ppwMTs^ZwkQ({*I|aPP;wBP@v+vRbP-YktocbTFx6l7ynnN6t1Wy
zmy?87k~p#LL{sEi5{i2OU3*K<LZB{qdmKxrWH6xily<&_h(}6t1ti2LPPx+OT+s#J
z+_AC!<%rEQ&BqLL<gkN@m<}Y3Q>&P>E5Y3>BF>3C>@iW8>j~KV<r8W6Ht!*vRo}LD
zg^x8m5t6ros7_p_moo>cvnY<%_W~7eZpp9RswZ_U+r_l!s`}Tk5bl|}Fp~X>Z*dL>
zX#l(HzCi4(YPPpNooXLl5@@Hh@6q9iaqSqiFV%s*fgO91brqrlPnt$f;&nv5x6Jui
zN?6)cXCQthBy|}xJNylpdGrhh5K^WwmkG_DZ2J)o$GQ*eTvgd24~NTGRpfCam~Or}
zr{lJhxL_bBd64<64jC^Dl<`nk@ENGZsN+zFtH_Y}?Kr3AyD?76Rm4mrB4236Uzxal
z0tk*;Z>b>$==*Jk;COHs=^1NJRXY<yYK!t}7UG%bvCjz&@r{^FoG?KKB5Fpe*)7^e
zkq}E*q-vp~oJzAe8>ah>C?!}N8Fdy&i?eKFIp4zi|BL=tN}_tOhykdwpNqr0bva-F
zlO#Tz9C!><&|ZX;6mO2hpY|Z~x1UO4XR3IeT@~nS+3H`N+O|hUn?{#u%oE&}QyB8=
zYrt%~V*A1bz2(UP#yAqp!r5B66b%fq8dWZZJwH_<r>Kv!R4x^CZ&c2;$FFqN)pQ{W
zlu@&milxHtnekCh!02LCQ-%c;!QHu>YsyC-69r;|u<c^jf4?|O7uu=d*vSFR)8(47
zg39hgRj8Ne=Z!UYoI0qd*OyUUmUftWhh2pagmnwRaL%D;TfA^tNSg?bUF`rDvU?%x
ze&9Kl<6grbn-kw+e+_)p%MiTFb?kr%<U2*`^tj3pZ=q`0R4oZYJ-cGW=O|T<V?)eN
zJdlD#9m3jVyRtYcIVL+849~NrvQ-=ARJNK^EpU`0Ug)%q$zeNy2#^69lMvatmO-qM
z6LbPQtVZ-DM=!g;qV7UN#$~3~(%pxOC~ehpr5gAgJcw(tpZbd14HCH=Djw?ieCnf@
zp80TF@#F1sTk=jvjS&tNd=C3-qyP2WaqIAmt*8GK<)4JHpEOM$j<49~HQp%C6>ku#
zST4wGtkI4p<c?OV->B9<T^3osI3Gc_HkWpEmB_ApU~GW2`4u5FCt4onH{_n<nT<9@
z%TM_YdH)mJ^l3xBy%Ggy?KJ2+FxYSUWDRCd)+V@E8tkti*U5cQ4$IM1K6hYI?2b>)
z!cgU$pO50O3wmZ-sWIEO_F(HD!h;Z&*p|z~Jj&3(qqSq$g4ljHGA0ko0zO(R3fbjq
z7RR-W0w`P8;F)0mN<ixhd=7j91^agu0r%FqR8Btwpb8!V7~4D^nnmT4xOOPlu?Ggt
zS4*xb)hkW5KWmVp(eoUe2LxeqH8CsMd#Ql>*Gz(k*|RU{c9F`_uIcOx*RmEdu=aF1
zC~KCqgzSDIlCYLCdQh7q<#DifJeR{NnA5tgnfC%S{81n68qjYijAQA^bs?np03!F4
zC%3sbed4?uVGRpb3p?d5N5-`QC3F8u%x?f%Uo$`0k>35c$YZ_XOtnfRi`oIQHO`#f
z5ij4)RmU{kxe&1dO%D{Q9JayMe^*JJK}+D3#60v@`p)x_-Beu95=}@rqimD3`v9V7
zPk6V31EU6(ZJ|O$?RFlasP-P>EC?4N%&K8LFlZY9$-nmuXHTI0XU~$ccBpU@p%8vh
z_h!d&^N)>1V?sHw`MZ>^(}^t{oc|e26c3b@!+k+^uU`VV!7$NCT_snLi<>VdA)c;N
z^`c8n;21`rJ#mj&$y<(FiEfxxMHqBDCsZ+Jw?ix3_5#oqe}=nDcKRTubG!Xv#QGc!
zhlnP^{NjmJU;yv5j;#inZ;{?kZ)v_vFr8n&MGnwz5;lx*(>%dGzy$rYKf!i{X^qvg
z1efV*lfy2)A$!ojZg(a3A%yD?JCFyav*tG-fwJB6#Q71<Ek@TOzv6B+(Z%I&{!+CV
zOU7QtCJJ3eDgJ;F{t-yu?PF!a{X5>jw0z^CHc$AapA1Jp!+cR>kZFRSoI8-{V)zm2
zyhiBH?NH=HIqgFLIWd<uojSJ4r6{tw4EU8I&E4=}YQq{)ww;SDW7sclJm#@wJwh01
zoKYQ5S=ZF^CPuJ{y{uh!DRWO)E_3piKDYLo<V3PQuwu)3M0y&TGktROD+8wO6J2Co
zba+1tD9FMUW35E?c_p_PL~rI?+4z0=Q>+gMPnSY}Av(((V>y2yhL2Y^p=6XnPH+<X
z3)M+(Mf4+FS9jx*dDOf6<H&FYtme0jM@Y3)(hy?#@)-Y>a9X|(@5S$hq!|*4#>e*m
z4=}{>f4~s?e_#mlKe2NVojk0h58GAyN3edtoN9aS@-W7QATRRqgba-|vFvu@_s$xS
z$hZd?r89e2LihtfkhPO@lvBRXM58T4&Nrbd`)^tJg}}j#P*-v61flsjqh-fEZ_riq
zm?>l?W)OEx+YtgSK~LA@9Krl`|G*8OJ^k^=>KtQp!(H2*aM}FY+z31qT(ORBecRSD
zO#Yg&WoY;|@E@Rbd&p~5JM6zn0J}W7<-E;M+SnYG{Z`q0-`Mi(7PCs;W>4+!<!y{#
zkeTp+T(W27zspo&@muLtr7Z|UBcgNX=o?=7-(#C~=8(>_l&)|YP-ad0Tov77p)*Ft
zIi%K}qe*9O#LED#r=u>-HSrH-{E>er8FSEftqYd^<L3rv{}fS?i=7MScUjB#-D^LM
zST_TI`#V_wUr-fzKxd^){!v)_Pp%Ji>&+H_3hio^dy(XhS5Nj(9h}Wq0i|m@zaFia
z?Ox=n<LW`)?JN*96joa(TmLI%9hd)k%82+yZ%P;wym9Cio#dZ#Y8<P5L`Hj*_qWZ~
zO>X>(Os4Fw)2xDS8G@#X-cGNWOs0G2eacyy+7<q9Kk*8(`e?O{d5vt2VoyGAm;9la
z@p`iGMfm^wPl0#co-!Z81V~SG1L<Sd+&nQwo$wG}hFq>DTe8c-vdKV2at;(AcM7uL
z7Z~Ewi*~AL!k8Wd9SPra<V4V5pTR|VjrWk<k7zJu>$|#RAe@+KG=@!qYR>x`X1H$x
zXIq$oaa5S==225i9GJ4b-%i?5#r6x3U{2U@4;s0SGgUf2+*RpDwbNw=lF11{FZ<PT
z<c1H!SdcV(VDOa|R$zidqccMb^U?AJoCH|j{H-+D?DJU77tA4u+#OVdxLVGV*b#5T
zF*>-{U>YJFcaMS$<|Kc-=2Dh+zl-B<$eLSsNoojrcW6mT1c_KS+50<WE%G(X85;M`
zHU$%c<0XheDE@S@sz`oJB2IuH1-T8<@~>#vn;a#HE6L+vxI5sVCo%1?E@^~<g3SCi
zrFNXv9(m9yLLMSE#q%SX_B1zJsfoqg{0u-&LM3_n3GjlXgZblA&9tl5o=Op-mZJXn
zRNO)<lcTl@XiYU;bLdS_59YX?t24Vj8?@*KaPwX6;b8zW{`R6AP|Y9&*%m?O81ftE
zaJw};UF12Y&SxR56{n71R%l|W1qzz4IE(9bb9H;u%9X>T^cpO%Fxq2d>OQ{VX5~gl
zg7@y~FUSy6w-Km@({TF$c<+h7n-}Pb+rtcZxEd<c%`?Lh&VzJUSx6bGSqJ5+4CA!8
z8mD?MY(B==)Bw3RNs~G(vn{>lELJiEI8tZ~`vb`TRaP~t1|E=w{ACct!5)|oUPUG<
z--w$?mPGS)WnIjG+KvXy<@g%$B2)=%j%i<7>oKV{Pf@GkX5XPE>NF&LokAf>NjK}#
zN}-#rMfElGjBt}o<Tgls%yG_WuT*2yq&ASLbrtT4I^sM$t;$}Uq9BQXZTQ*p8WsPO
zTk>xeViFw3mUE4h!-YEM6`>r*zX@dmbE+)%GGQWc`G;|oq;YH_>T|3yT74|wJMvjf
z?psu65hZCJ3&)6t*;3@X;MwW|PmkJd6|gt?_{$KS+M9&8-jFT@Rm*Ii@}ao=qqKH3
zgD7oF8<qy{;~&TNyH-rd%<uV`F|#6a0II!I+|!2CU%C2IC&JAzS`|iWZp~fs5OSTc
z{H_ywawJoCgO?=r5)$9K@@ov)zx{PNs&gS(%<7VZ+Mn|Lit#t+mYf_Y3s757SwL1%
zMT|2h{d$I1<oN%%ARoszv%*hQ6Beypl*ojVM|W<LbY+wD_7K{2qH6gkL2|m~#NUsi
zI9C2kCE26J4S>i2ennyE&iEa*3`SP+>v^F7!Cy~BYEyT6*L&r6!EtG}|9U!aKHnwT
zJrkU>c8lC^l^rbVxaEsLu+4$z4Oj~!l*YVb4~yxI_=7;8M7y__;!`PM%et-%art|&
z<y=}Gj(^n85|rjwdx71p4ObVrsM3x5T|XZd$dRf}rN9a*=W7{qxxs~bx)L7y7<UfW
zxN5FBGT8si=mwEz3~J!m5S$kH4%zN*SN&-YL!6F^fhTjgOi(}xx~e&;RB+OBIa1ju
z96(*V1Z6)qYdA6<w#WY|^F^ryZ1f=~U#3j{3rppqJ)JuF!K<6{dvduhTDDP#St^0+
z<f&uxITqSl3gBz}YNu!LuZEz<V)dG2l)r7<_hFojCHR!geL7BIpv`5~7Q$kU%Rd~Z
zh;r2PZC9?EkeBxCVTMB(=ySjAVZWvp#A|HTMH!ciTa`?AwH~fpHtZWG4%05?^jPVr
zty<~ahAi}&;dBVsARMi^tY7x#$r!-_%t6T$#Z|u86Jq85L($T^U>mlCl|yr_D<Afd
zCt$@HtEqdkdve@;StwiI$}Xic)dmU&Hf&S5I{}GDtI+=slKNs%5`Mq+e;*;);g-og
z_-|0Hl?|-D79a)QQ*URAR=q~DK5cA=EumtR&gQ-aL=p*hxEs!@@;{XOS=2jOV8H-s
z$c@<Wqqs29F)Uo{kVF>Rle-*cg|WP)D6gT!=&Yuen!Qg~A>-7l>_SRCR-ydA$K>lL
zR-r}Pe>#@W<k>L%6i$qIdyr8`De&a26&W*oO0X-zNVO!D${T`~BlE_nRUJZkVy@<>
zK~e>ogp`~~+*8}C+H;0DJ)vJA)5Hxy?1;ZI;ilwywzz}!8m}7TrFD2!N8HOLb+W2>
zGS@>5n6v+#NR6n+R(F~qZq#_GoJ&Y)Jo+m4+~k4Y=CNG~`ta4uVfC-*yz(4)FPHtW
z@o<D{2iaU**8cr1Yk5vwkAJM6l`?<fAy{hCGfRH*Kr5JG8H(hS)2RCWWuB$7dNnz~
z;?+xj2H{XCLyzTJ@vkd+<q1}EPgERk@#qNoJrfEnyZx`Qi9*8@a~-$WKO-^~hT!fw
zu?JpRMJOdM^tv1X=J$8en4gR)e;~`Py7Ruveq>;-F{B7q1fbnvRZ$@OqZ}&Ab&9xy
zp9320?qu^E+P>Y1rYZ^(r5~aPvS#t9@Yjifu|IN)5XYBtV$jHX-2P!e@G)i_SwJ?|
z0~l()GEME)Xy*A}D@c9{-OGgLK-dI8{u#GUsYl4sfNIo}Vx7NX<MZnoa8bSs3`LT^
zq%z+kgq^IY8mG0iTjiJuR~9o%`A?UhVj$o%P_ipghWTCJb)OQV1nd7hkfZ#fI`TY<
zijw<*^16VF8`RQ2lH+f#z(4sP;g(pM5LAS?k>%e9#bslO$G@Bh37)^jkOt54WToYN
zr-HfTF)yHQzrLE!{U!L@oZ^3-HpC3W|0#j1rdk^mF!Ax@km`J0a%S}T|2E@8%`n#*
zOXp-sGdJBX5~ctvIPw)$5@~LwDLgv&>*mkQ&vVSf^*L!+;GMw6+jUmBrr$3AeK%jr
z6CWLnQ9I(cC>2b+iIY~8s&k+n<01Bo<vE&LS^cw)XleBoNS@W4-aO2R)lbKA-@{E6
zJ9eCy8i#k@_rUy=(%Rp5Z`CoU|4&t)m>LoePbbsA=MBq9zESN6fFIrzr6RBNz@*|X
z6RDvw3|64yIx9gx?OSohE8@vYg$Xc&{j?|C&-(rk3Pp-n5}y3GAQewUzO4LrAf=yH
zBA@)XAfKO<eqQ-+L5f#0o|OKdCk0PjG)eM1iwQ(eB`d9yVe!4DrFxSwXe`>ruN08G
z2}hs&tXB!#A)R``FLWN%W?AG)Zh3|U4t*PD!^*>pY)^h_=jN=#B?J9a0K@z1FI1EV
zifoU)!U4Xx{~#w`MF8L5gopr`&4sSZ(uVNU<z7}|1GGO2Ckc}m+lUkLkm;anJ5nt)
zqFmfOO_t=2Cb@HM3hvrQS=Qr-Im9Zxq1t<ia&@a|tvT&kLWP8X`@h(G54a|_y<OPe
z5D=wEx1%DU^cuDxBGOa@1O!B+NeMk9l&FY^2yE#!kuK7dDv%Hbk)BWlq=im^;0z?8
z1OmBn?{m-DXTO(we1G@%e&2cT-8^y4|9K{}X3av9HP8IljEd^%Z}mxItxvq_y(;b|
z25rc#-V-pyZ3=ilqmhe0)hoVQ*25(nozHRB#U&s8Tgscg4(kn=&L)zOe@vzuKLpVl
zGTUbz%*uG{D#p20UEEl6c9)3A9l3q5R{7FK&iw_;Jhxc|o?rzI!hu@<)#y?GXNyR!
zHT{Os^?B+K&vBo6YSG0XZ?s+YAkoV*A<k&R7-^BsPlouUay(%{UNyQ%=Er(;=wNWA
zVAT;^JRr{6%Yr0h4{PiiGZ*ut;aKm!AA3=Emr|D{HfF9KVVv7^Sxp=rW}Sf{Bg6fo
zsEj(u%6OokI^+>epLGZU`$F@ge{90abNg|$5v=c6{R-CYh`Z?B#kf6$#)MIkfO9|t
z+k)MyC+3i|-z9q|_AF~8``^>tejN5c^4tt@Lr4ErqT7$YP5t<L0uH;iNNR;zaH&o|
zYwwpOul;D!4+}Gl8QUAMw$wMu#W=7j!*W|kO&9;3`t{rS5Q8I#4;MPpD0*KMsaml6
zpOf9L{MeM0?e^ms5<GUB9{CYOWna%3!5)+xwEARxSGP2mbrhQ%Og1E%^*i^`)%WZ@
z<?w%4bQL@7H45sTbkP5+`1kLF^SxR3^?$mslBHn3Q8QkNau5!RL{RU_Qo8Rv=8G6o
z3%I&~8k_xOeNbU9vmLcEzESV6TlC#V>%xH6NltdrnyHKkQJs^5>dBGAe|PhcKioX{
zZqsg*#pY>OsG7JdbVGMAVVu0ky0GEAs2s3!Q?B-s$Kbiu3#xL%trgw(m#oUZ_g_T?
z=L#a-Zi5-F4o8)a5bA_k7s9{4?D6lcuza<R&sAk`Rmrc&mf(dSzKRMZC~WQ^1*E^C
zE^4jbCk2EBE|2PlvM%NcLuC9Oze?bT(^;tsAy*%+R*&_6syt|Y2m>+pWTj6iJN!13
zTXsK?>#@hdgM-OC@&a1_TV~!WOsD%l<L51|RyG`{QVe7h|J^)V!0i=1f=rP#7^(Z4
zd*m_SFl%w=Q==e!2ZRgFEnt~i8^RMnafdDtp7H%XLt>Rl9;ZnZjCL=~t{xl`LBf8o
z;lbqO*hIzMADjGsU4Ug#{HX2slelL;wkTe-VdyJ+t?`;HRKD`$%Z1wPPUteuW-UzT
zs|3i@->UuHrTFpo-!mW5SQQHCpZrl(#21CJX<5@B+yCZK=(1W~E9*J&+jhI_C4S3#
zc<}YNg9sP$xn#d=h_w5ybr6<YSNZPu)-mqWcK)_+oXccnnc<Jxei%YE0Um3-z476!
z_dN;ivdm(&s<`oYm*PibzB{S@=(#_pGpJwsp+wCxSZ%YAPJ56O)8-wWWFXzGW3Sw-
zCzdpOO6ET=ib!{B+9R6uIFn|N%cwob32meOn)H|We`|+$!4q5S?}|)QE+&LlskTko
zNOJxq{lC-`Z16ix^%^3)ly|>|hNxbcv^mcCm-OGgCt$K6|M4|>;grL1CAMa>Yj_P$
z-ssX_Q$x0tbeqkt<8OJ!N0-K?W=~!??Ql-%KPM48V=1Mv=xoM?DTj0Fx^%M^!mXhA
zzoh@4d*b$m?EB|<bo1_9Z@6_n{?_~07uj1%;(2#;8m^x=x%EE!McnOztox^V{*wOR
z>Ipx^4SD-N&tbAsObrr~|C_NA!Q-#EVc@dxw;Zgo&-Jsg`;|flxFa=F?rUk^UK@6U
z5BAi|9%RYEteH$XBVp`8l3mm8YvpaD67?jg(vQkke_4~=Fqn_8pY4+lX60ewjtFA5
zL-n+?ty>S)5`Lr*t)`DPf8re6{4EU|-S8jm5V0SP@Wrs4kRtgX;qOk!5%J|8jTl{7
z*vm?%RxcYC1vo^?H-0!F2f;7si4$)Pf2_v(i4vnYkMVSYpZAE?#VUn%vjT<DGea-U
zPEp5bD(^qBE+PCU)3DmxMxVHf|JJM@DdrCMf9&WM>nb&?HlDlstV68H#<TfYy`gHP
z@y%gwkV2HDzQWW0lKw?cI4)?gW(8n6Mnm>U$@-;#Vq>@ZOZrzmk&Nk>3^^ku3r}xm
z)3<V@XvFaSCH<?OAZvFa8~dV!BI0~EnxvjZv29ueAU2w?tJ@&lGFG_7lTQ8<VqFkH
z^)R$Fg`c4@KFxDixVPdijx~d3xfl0Yck!QcrV>AVkM(vPM1|yX5I9i0E1nw_4uWtF
z6hu{K_3p&qESyDj=hC3>7v!BjsLEgy%fBg2Bfa^}zkyZovF^(7yMN>0uk*I2f;D}I
zm7c}&X;{--HZ9){R^S?8W9)t>YXwJw!G@Kw^~Ifkn@#&fv>|G&aZz;P$f^#5J4ir1
z#*Z<mk+A=T;f;VN<43sBuUB_9h@FL8Ui|MSMfb*(p|X}v6^c2j>5z5I4Z9G3lFl36
zf=9Q++(u<lPQ{6_9%nP9^KT?cZ0PB#cXtuWXfl6=|7HC!9U?DP22XEibG34$YNYTD
zU^@Pi{zXrC`=!^j30uu9XoT`9V>-q{IHdlP{#8#{TFp>268Ney9aABaQr__NR<^&S
zf7KIFd<aa(M2LtK%`d%?P0ea%QR6S^U-ZPqsr}8dVyBEyzv{s?r2jQ}rVlreo>FR#
zC9$@N(fhxPAPtNHlE=Hb(K)NK4Y}ta`io944F8)+GG(arrGteIj%u1@ese+x;#u#X
zq#N*OEi$)J>6C+U4sTR7r})nk{+*<3%7r+GJXPH(v-5;o@c5R}+o(TDnGQ~Bx@0qR
zLKh;wx3mnEy>y}Q-$&|a=CdB@ow+L1KspQ2UQ~KPxET;R?#2CQsn@FvmANETNODxu
zCM%f}IuVioMv`hADNogK3Vxno1V^<{Z=-T4f06>!49ReFLN@}{OD#j?E~yrhoc^t(
z$GvQ2R<D<K6!JM@e<ANSm+C<LNjfie1OB*$?Y7lx%8od`H<(|hcK?4TF|E7OwEN%*
zupN~W{`bX6ZC^|D*kodS&q}5x?>g%-^a~%aPNDDqf_BuW8j0fJFo}XJnf@HDt{&er
zVSHy@(<N?LJ=@uKY*xAALDcx?NMEBe-JWN+n=B8D$>;@=0@WE*wG~XSDH@HkMu~HD
zDLwRPm2j(Skf{7H#alTv9&a(^8E)bBPa>t%Vi^$j>bnH{7e#5`B?S?$iT@TwA=yiY
zTo+)PquK^@5ZOmnqolVLKc!n$$ruSu@5Kb2Ds}d9?iK7L7oe|-R(V)XpR{p%j&ce3
z#om9@saXAFe#XnqYU@PxFe~V$r(%6?`^c-2xM9jOB=#io7%~yA+9s-1Tp3^j;j*Lk
zZL1dw!!O@6^nSK?VvGtF`&&=*)eRko*^3M?HrV~`0%KFeGe{}oQzB*(&JPL;V)z0A
zG6QZwPNU-qO%79D6#B)Q8B3ZZf)5)`)B-bLom<i)b4=wnVNVA?Beir9R>kQe5YDBu
zD@_m0PCDDAVMZqer(!7Q=w$&{A>!y5LMVT3<E#fFRpfuWu+IKzuq|1$d4&$~yY-ge
zh$?}!+~7oqB4Yg?loz}zFEOxMSd5_P&|?G4At%vsgl1Ab#sFu4!&m<Sb3H8hOj|hs
ztOA|eN19!NBLY#sha3GQkH4+@ZT;U12tpJaMbri}S31{c0%=>)?)BLXS`b1VizXU^
zxhq@Hjinh-Jf!Mm%a4WGxxaOvW#Uev#U4!MK|d(}0#SMtYxmK=_0dW^>oJ`_z2aBM
zHPI~2uD!Ftw99M90=J@?wBu`s0-r;!h-PqhhR$qBb2z(0XX|M;YZn6(A$p=)(S3nW
zAsV9TQ61VdCuv-3ThiG~+Re4Ifw7S5qS;Yh+FQ}9qM1>hjWf2iOKV31UqZH`HMF0F
z$C_ebD#SoEH>$gFc7nDQHS7?ZIYQgNwkz-n<TCp8mNXiogU&MS5}S>o>8za!+=?2}
z&aH6=zJO?<GYmU(XSSp{hTXZd-K?qHvVqAEee_oJVBj-|COVza;V>gZ<6qm7&X&^5
z)-D9bLv+#Egf54zs5Uy2&`Fx{qA9Hj1x7-)qVP4<KorCfolEE@%~EMwQK=5T88+JP
zwH<+vYk#qRy(N8Bd(Apas*7(noTjyQB5*6JOFO-GI54dCigkumXTr>uG)JmCVYZcK
zw<aB!RI6vb6+I9bQmbK|Uff|iBTnO4+mg=a(~Q^72gcQ2x6Ur^GTn+^wazT=?3;0>
z$*l<lM$~RakwnTub$*J>7{3Uomv(IWQM>G+llgWL1#vz}jg<xA<~G1{>4*RL`~PZQ
zTyEuz?L`zWnUl+VoeTR|!e!^+-aUov=7MGNj;<Z7rz&3-*Znh`GkdQVMwknh%RhAe
zI`F3aCQCR|sBfN9Chz3hHIP-V;~c{h(BYes?ujas__ojr#$6ihaeYCQ^jghF8<Q5b
z67$|Bb2Bli)zz!?tbpqf3G^#M3u%&S<CYEmNsv0cW|U|`2oAMSlqMm4D;g;HvrtPw
z=@PO@U0$<Qw7Uq&E$QIw&q6e8Q@|%th4tOaTEuxq6~xPxnDmCw-}GjhM?F+~yYz=Z
zve44Jrp(vrd)GjAxvq0UuVi6knMgN6k9_Hmfv@xT-hsk$3+KvSx58obnsQ&~sj6^Q
z*ejAGWk?HE)8xem2Tl+yC;zpWOX{Z1(rEz*h#DGYNZ5*Q$3C+9Md~$Q2iweU+785)
zbT)*hfjEx+)#{p57GD?JR`iNg2483Rj27(#f(!fHYAbplaS5Afr6-lc*Bw6FK--EY
zbm-2UrX5D?$3C^vkV@Z@##&vM%1-Fgoz14*LY%{HMeS(P2!8BKtE*C(37xGoThiQw
z?$+5UnkPaDn`&hswH4isePVUF__b+=_zVy20Afoz8%Mj2IE{_A(kad|?GoRD){1?t
zd|IUmv|*sFsGk~*6l9oo=Fb?@&LeoRFRZkRx1w^`WGnsR9MkUn*&f<M#8%XKMvf+c
zV8=eQ(kxEz>)4X&7H9W$InS2U%n=gUc&n|bGC~*|X{BA9+1E*)@u6)+!R((#Cit_+
z1%DEvuYVd@qCbla(Vs<*=+7cu^k<PR`m@Ls{aNIS{v`Uk$+Jr|1VRmqvN9~r-HLAP
z`e~fn_*rmo{48WQeijEeeij!teilL-KMU23p9J<X@fYZ8g$}_PcG@1q&Mhfl#z@JJ
z6P~30@+l3Pg|AJoHvdMv<v+f>n%N+=HzDWH(T1%Klcf|TdO%_X?JD9V_7(9OG)tjN
zaCR%o)Oe%LJ<U-iLmjlJJv4WdRrA~!^+weH{9629)T~cCgE)c>BVK`KD0HUGY)Nwz
zx>IJ`Y4!*iY!Xoqx)o)^h7dKN>6IN8GZHjj#FlinkY<7q$Hoz_L$fQpEViOop_!GP
zgEOu)d4wP~g18m+MW|rYhz8Ky%I?A0@3gHbtV3l+n8tzFiw!1T248PUV~9Fn7OYEU
zHjQS05W{XorB=hfumxo-K0!NTM#TjF7c|^l>LK>cQbz9|11D_OQgpAbxzs-b%dgdM
zd~T96dbJ9}&H2hDAF_ljA02XZ@99Ea^Mo=<C(ACDU`8(KwJU5jPbimkw(PAgU<ogJ
zc?!kNP0NZLEjz0-e6+|fOlT>S;K<>PGw?(k@s{gV+9s_6X5uX4!i;QJm{4xji}*v3
z+$&e;Y~EK^<Yd`ho#UfVPVV(7B%Ak@7dcz@RTueKlB-#Q)qen_@Xru5S15CH9PX%2
z_t7Lj>t!!w3FU4Nhrd?m`52LNdi4uaSi;(WfK?|#i_BAKTK0#aI@?E=9N#NZXklJi
z=H@iqRh_-`wm09r_#yV~9|LFeVkd0QQgZJfg359?=i%P!LLUoqMXzh&pm}9E;5gh_
zo#~@Zj_egKR56E@0gl+BrRrX?d9m{!0=d`!0dM5~j4Zi7qd@M@cq{j3<jDOAOZD%J
z`KKe#)|<rsW6Y{lB=={e%l#R7a(_m)+@Db>_h)3v{TU?xmQ?VZS8Z+^9VPu|g6aJe
zOq5-wLRsd<JDz`>@YvMmE#>s4m_r|8{}9CYT9`wfu-Qw02-FJw%~#3*r{V7ETpvR+
zs#mSBvYgn9upqnsQ_zXfCJPtB%7}jt!p!?e%yDv5s?BthtMp2cX5yd>PGq`9TCko0
zCm=7^u5Xg+1ELs}D256hoYGvu2~0~NHguC3>lvI$+Vug&B-}iGeKN95DwHm6g|ps#
zXb($dc9N}QR6wR~qG(6pw-{{zDb+TdWEev4Y-_AzBr^PR&bApg8QMdHrgNovY^LF9
zqFDTz&9tUXWGnIo#G?1f-B?{urM0)ECYa4vcjKHp`=XZ!R?It_S8BP^B*e$8W0FP=
z%AD>_iVCIYkf2)DPQ7aMie8nZf{V;31`frLO?K#IQrD~}14Yp+KkzP$b)(55Lcql~
z_E#S+wNfKIjUKo%Oex!$$-;pZ5u9s%hV}>QF7!$)X3>K56YZ=L9DGB}#+Gt@)K9KF
z2)fkvc4jF@RGZ1}vZg~@d)%0@U;Ul6$gkScIPPil>6H>(IlXlSd1x9YjT4-P$>0R+
zE5#HtfN2%VUP|Z+7(&l%TbqZv(p_i|T92%Z?4wdUbt)K1FNZ}rz2w)bD+;buVy3jE
zkH<*!*exRos)y~ZzqZtJ4c}YVhquO<PPxLhYb8T7s1BUk#iH}g^9N-_(#Aenj1^SZ
zN%)Di!A1<9(naVuaunNES~#1u>x#?7$q_R?e!*jnE<=Z~#MMV_%UQI|2Z`wANtu%K
zE&A$V(y3N<zJ1eD4lVWb@d_-f6KoQ_QZ-dd37a`7`ZBctyUQ@X_y44ra8bke{#;?u
zGjUt(?}dk0n2OGj&bYy0SoDXO&uOQCQ~z2*`W~i+r4W`DZg<<%iW~7x*MNlI`eYU5
ztEOrZs}eZ*!$NLZczSbFcCBgQ=@^+6+WS*}ca9Ij<Qa^y{q=og`$ajZDwLWM3*tgC
zY?5=5QzqMH^DIIbrP?Bv(H3-i&87cjXI@?LxKTgz=tk}JALhV<@RDfei0S@PNXyKM
zab3ax##~KBjCNJ~B_{MmJf%1IDAY5$s^4G4k?AX{%vzEq%9_fkCMl@mX6cjFDmDg%
zDV$!u!;XnwWZsfod36jhXtPOQ8#zE_-8cH`^4DPam|E?7U~B<Pi|~nR;%p&=jA)MB
zS-BD`Xr4L5nspXH)um)$PD!<jQ^F~_6saleW?Ve-B<=+6Jkw+|jp0w1qx;a=>70}l
z>0d{pnVLZsL57=#bll{MooOs<h?9oYjd6*W=;|xa)~{&g=;ybu(>rV*eKF=~(y6vn
zHfQ$B=p^d=*GW1uI>|a+deQdLvN2gnr`k_Bo%yemvf57BojE6?lcdw4cgsFnIwm&h
zzfh8oDND*~KjnJHNk%6{XF#vZKKj2((w2c=lwyo5iyok6Car|hFVPp<LhBh%84p;W
z)$o$DR27@}D@kfR(+Yj;!#KWa$LX<)puK#E(yM-+>D#Q!EO>e%eO-M&6%F8crk~tx
ziw&uYWnE6OGc+mhm1a(Vg4ze3Mno@_zlmF7{ckd?J%<yX%9)*+P{0afi40uk5XJA5
z8{N=~=|Eqna88Q0s7E6&Ft2RpG496pi@vOlpXY4mY_(1heHGPWNx4*IvH2|EZqV%@
zz0Dkk1bvVKn{1pCn-rVMeSm69*iC^=fz5S}75!QzcjB9FnVo613n_@r%{XU=j%VG2
z=$FlO#z}f3#c&ecLTDD7RDxT{HxXLdN?1dF=7s9KdFBbGvv+C#{~Y{d7*Gmf%DPFa
z=}i9xiwAlYE%N=6Di3l4j;~3Ht!vSvF=wTkTPZIX8H{L#F5Ql9N-3TiX)10iZo$PN
z#h6w>`azaKnw!B4`^3lCee+uPq;~joeGC6+wQKprJHEf9pX!N?UB{W9X2kZ{TxCY}
z2X`7C%J`qYuMP2^N1JZWTI!dZn9M2#m!@so{8HokVBT?46><wO@ZMhMN5_usyT-MP
z_B!JP_9=14{!_H`8M_YZ%%sDvIiAqZ+ST!9*RKNHyR-IPH{5lb`!<KCD(|jH_sLC4
zV5A4L_T~F8#Pz`5WM_O;?~!GWC(IRSH}mS7*LMVW*%XiQUp~Zj4!`^IWAhWben^Yd
z#6!C(Rch4CFK|5s7wD11@uwdS?}GJmyM9I;`yhV3jqORz)DTvEAE0xH9Q=AT?LPbv
zHwDvCbnF8k9_tW13Zbto@hJq4Zt{-bKcu>iyuFH35qX0ddN}x)w0eN#!QyLS$Ic><
zhpreOd~$ykg1NZwMfXii>g&9xLx=l<Uq3K7q`HI2rK&r2%iML=`pM|cjn*a!O_-UF
z9ahT!^5_i?oadZKF!QKr%fzkA2D_DbblJ?s5hi)nkEn|HxSrb(?p?-T)gBKXDKqZL
zPac}1Z(nad|0G9j$?tl*QJHGUggWKP>pd6&RsR7;l*m~}KY?YLGPM|yU4%KN%dJCS
zzviCVBrI-LoxHpdpm}+njq-4DyaBj;V{mA0#%QmvC7PUbK<4dUT<yw|htp_a{j19z
z&uhPU3ZxjuRBIGFs%EBXr)U}_>bI9A_1Qm6NwJ|a`dTk{JgMcCEsGsFfHS#N7gQGC
zEr9EF(hzaFELi2bI>Jk+nC{2x4Rm&M`1+TB?<ptgzMM=v_XK&#&-Y?5ho8@*9vkOF
z-cNhDu4<PHk2Q?*=sF8wJ_u+83aO9#bvFkncXsn%B{59zPPAVn7BzII-T0*g^^5b4
zjs3n^;Z#Wk>{GTlrf3<LPa2-|p$?=ii_n%Yl2MAZNgt^p{~AH;;&)q-z_vmu_CP0c
zsG)lC#v&Ptm+FN4615#s`?9a~p|yO<V+Q}s5)Y}ki*}wPm?m(=;)HOR`;oNMbC(iv
z!D@m9zWWH)nG<r!R`utagU;j$ziqsc{A@h6K%U>=0P);(bTpIbV)WhVyk*{M&ba(b
zqRj`6P^Hu&E>G<Rzf-`;S^nMr+}7GEq7j3Rini|jwvtY3xwGoL#qXCNrjjPwT!bVi
zJopVkKlsF$!9~LUHT^7PhX2J*mosxJI_;+vV`zzO!Og%&Za*WF-Jfn_bH^|C7#JGK
z=(o#KQw;{aRpd4CdNr4h^d&vCuV%_jwPhjC6qcs8XTW%|rS9k{6uuWKKhzJ9T+AIN
zR4fSn5AADgXP2dgqrBC+;OI!(J&c1({L5m&@k*OPZN};eDEP9c2<LRG#Ww%P{ZfxA
zKlbnNEB3Gb6%Bo^g_5es)g2;be~>8GZFM($MouZakh>(IOuSW7=T`U;mQ63LbKn`y
zrzhoUpOKPTYR(dmnbs4Kp2f?i=uru>gL2c=dp6DeOL|E@h@w&zXgzX}%DR8&UhqO-
z39Y?OoDFw@+EORS7J30goa(GW;j}@28itUt(o+~(X;r*LD@>>%s+KslEUOBRxUBXo
z+UFCdE#(O%i>(!c{R^eD{i6XpiGuLjSCxY8@FQ+1n4s62I}=mBf3dGtm?$@E=Up!i
z5wn;fjsq@oBZUZ;;P>s=;haW!nSn^q_uHVy(01p&1wt6uKzG_4q|8th!8|T0I=0Tm
z35hOc%e7Pt(rau)1h`14cY;UCYdrefTh;K(qg9QiSp4!pjN#%MHz9C2NK|4ykO)H8
zf|mA93SDdsp7#CK6g{?{1Q+$p<>>UjgRWN$<REzsL{S#c0*&)uF8MS%DMfbgUlN;9
znWgJ649A07I8vq2ch|gT2@S^+rtc1U+Dzv)XMWf9UpS4ou2YE^bn?kvQYl=PP3<m2
zFES1m<3B2868Nd=&g%Gaf8H-<ROXB2;>iFz>)NgfX9R9~qHhlO-eSa?sd5ilpYP>K
zpa<YdUI=t1XfaS5vo5TTo9Ka2YQ31X!AN3IS|1q$w_ezMQp&a|i6rEM9vh!9NcYX1
z*2t{y+92}l`Uy<9?>u^SqZ?%{-KdNCu#0qf2>sP+y3>xZsWpQ8%4n-cdoU}Lkz{7L
z3N=5~nobkvM0#ze&>4|TkW&0{qrQmoDJ36aJ@v_0#Ik#(8pqW)TMbZ=_cohb)oq4u
zux?G9qKcU<V)P9$yFjU+A?ZGglqWZCXvuQ(J-P7)cSrPTotzf*(#d^V+}uY#w;#Lx
z%cg5jL)<a%^=o5Gkw6_eZT9kv<Q>@e{Ti@*ti`69Q=Qo-M~}1ncm$3<1+dm_Y#J*P
zoEj?$92%TM=Op)}@15Ai!D+WU{aRv(_<^HZsXY3J+%re7PVG*=ZzXE7vT%M3qqx}s
z+ns*+LwpkwEA;gG)dQrcuZJJ%Haz#b{HBbmy(E=s-G5kv;Mo`4Ve1@x15W30FFc0J
zsD6PkzO|x=iX!bwZ}GbwZyjQ2_?2hvc8FO7eva}M&8}fcnLGE*@Y9-h?5G+0lHAv?
z9VDk(weL&(Yv>+kf5?+($qyeQ0wYO;PXV>hKF-2LFu$Is6&wF@>Oi2CZ0>-&GZkyV
zmTt)UB=0gIFy_+sX)KNPtzaHk?^%_5oqrq@=o<CE^X5{Nzy$Hm$Qk=166)sY9G%N=
z_&3@oWo0U-ADS=J?8ZtU_iGgTeG?$aua+B=YK-4lZsrrd+mwZJ?Nr$Va;*B^m{>Pz
zTFJdpun`u*=fF9>%HNo4@J?kB8&i#6^L=)NQ%q!J*QWR536)!K*iwrE!0Y}B<~4b<
z(-^_cVS0aksfZtqCX*?aidtLhs#IVQeM@1R{`9~Apgsz+Mw`;NCahDcL@`0cmHIr~
z206+aiCv#qyrpDAu&T3tl)Qaz@4}~*ypGlY{u$~oRXf%Evm-9noAz+l*&ebCn@)Mo
zyyqoc03JfoC3yty2Wd{$=6qSnyAhpyimv&+^#;9p`E)<L#6LDelBdz;Vra^uyVA)S
zfyedN2DHcJUsPt!e|Pj(yjpxo`^gOfscu!n;FLXH1^&_|8+U3WyyPPtCfdAIUoKj0
z!1w9Dw%aj$q}@3~E%B7Y;h|>tGZRW7sB^05xq$PLMmGATy4|COxi;0Q{Id9uw$Efn
zVl-rW@K2}KZ#wd-JLq#^QX+Cejr4x+wqDx`v#g16{~KqAH?t;U-5g}@(M7mh-VO45
zPJc|Sk5URqtZ!7BmfuUNQfv=VFvY7XlU&&~s2lo8Ad!yZHXn_|7_5*nRN-@Fhc*S>
z0}Kyf)0rnq?|jbJqVSPH6(h&}g}Q3i(;FoW({IqZ^)vX^#XD{gXmenA1rMTdbp3jj
z_;7pNMboez-yk__)B1MVdOcNXdikD4IaFbfS6bQ~he#-u><W(LtO%=)e3A(#nFaXu
z_19qh36Zs-ef}RXpbxf|yhNBbs&J?sc`ENWybpFnL^P4SR}uM$YM-jmI(*;6!hN`f
zT!?UOa1b1FRUHJ1TwoQ!rYdcItk2vP)}8)@yat;|X{!NED^WA_CNHMlGhaAP7dm3A
zAzHusjTrQVDyA5qG3Zw9I~b*Qaiyy^0YrB#=T!mJ>Zo4UCvHNeXyZ<Vus4Zwe3`#M
zQ&F^z{4SNCwq7@1>kdYa2F4a;VpN~CdfaL3K|MltK~lRw?(ey(t>xBL?w)F`J}3uy
zcmO^)&Y_Pwe?>%{LZcrhbyE!21D-WHsH*7pnJHQ?E<5{-d@vgMsH7bQ@~1<cHhQre
zcse`~KLL9z#rHLUlN8E$P1W9DS#P-vU0>>9DI{fOO3dFg3DtTrsCV7rgStO6Jk`2w
zlMjwlX7VJAw9ync895+0O|7AdPs6oF#5Ylv=~FKl;vepg_45dAc1&=3VdntLDXKBt
z6z&_>o9|gPKysdjwbSKDeY03Mu_BfAs32tW275L1O_j|Vg?l3(r=C@(*ayb+rua@s
z1#M0dN1~Bzl@<VALWI}_@}episvA-)9zr`|<b-4M;*N^Xxrm_{&S9zR;d2>9jwcb}
zUylhza!*}hKd!D3^pvrW&PDya-{bf`z8hXCLxaA%#|HWKjH%okes!{Fug!>M9gKLe
z4pzux(Gc`XO!5E;HgYcGiq@-RXLgPGzkPlseOe@tZO+>Lb<^QFwzm?eay!<J1xQJ(
z<b<8RZ+NJdlNd+=gT0XZJx=dazj$(=`ty}wogH5^y&<R6rOikA!VD*;j@?bHt@B<D
z;+DLt+hLr@7XrU|^y=8u{g{vG3ucckUhUYyJh96C*kTv@#74ul?KMs3FT-AGj;DUi
zJsYXzA>NXk!LF71y7;WH7Tr7+$Y6*gt}IlZMQ0p1P^;a^8v^4l&hX>ba^NOp&b$~$
z#wJ}^6njBxaFnzUYIyj9H=}0s^80g7Hh(-zru06IFOxa81G(4rG$#IYX%-`zqT3=B
zwtn&hWSn|ZHm)u&cA(1}@<NxN7?+;@5>rwZmz|zUnhFSdDLUnG&d>rrbiTuKJNkg`
zCWl|`lTdL=Nk-|5fP$u)7k<VWnTLntXoZv1iD`<WlsL6U+B$!s_QjgmSGDam=L?P7
zU!M=G)!am9B=?)vR|#O|Xr`gmEdH;f_1z5Q07Nx-LdJeUZ;lz|Fvt-0UMu1cG9Y>(
z)T2PQ3|=X#$)51#><YEFwqJbOYeX)LoUCV`RQO!=s_)C1!X+tnLY+Q#t>~y5zGgbW
z+0CTgrtDGQ69tKRZ8n5Oi*phUmKZ3WYM}(xG8C`rPKFislzR}rkSct03#-aA)6=j{
zjrGf_E(F{%eqdsVh^h=75ka9H$Bri3(jsmiv309OKC_*-c)2MY0E~L=UCG=TDg4zt
zt1^=j>6>}7Aac3nB=Y{)=PvGi!ve^Azt6M6+P0}`&+AWfG#XHpJA1;=Y4>0y6KQQ(
zF${wR6)Jw^o4cyigj#s6)F;egn(oK+@Bzu?;(RsWp}eIHOs<i2Ad4k}!0=Zeqdwt2
z;Dc|a*YMJuWMvH%p!k2Be{9WpRBg4-$jVTJCfkT&J$b+iJ40?D6WtMmi$vPevz|er
zwGT%E9p`rDa~7{rUZWX7s3kAL8hyyx5?KmHQFRg6$^LDGJs$<OwXTdUY*SJCXes)7
zWSfkC5>krlbj;d%Y$AWodMV%#Zck_IHP{KxBV(tl#lkKgUeuYS-W%GR(sNIB&$@;D
z(Wv9z9O<2~>4ihJ7<*1@uLNr^)KlHVk~*uWlY9<~M$`1hjiS{=&%@q`XfBDgP}3FJ
z<ucQ0XKHGiAI9{Y8C-m@)I1l{BbIMyf_AZLMx3F_G!$hoT-a@Y;QKkn>_ndzRav8H
zPhhOG7QgJ#G!5tTg?VK;UCA#r-`2#v@P9jeO^$p!_11UKxBOWYm!oR+t8#7FqxSLj
zeo8NK^{XmB3dJ@?Xy>Jukz>m)ip*zZb)mj7zsQf!T@pc}PqjxOhe@wgkM6h4N_|xp
zl>z52%ybvYUU8JmY`<4V$n1If$^Yf1?dX~Wm%)T_vP$AJWb%4Sj(tJ$dq~t&_Z{>`
z&c3Mn2Iz|g#TA=W$OK&$r9MHIMu{Go)cfeV<K_N`XVz42wqHT%eRhpDGn5Y3xp<~i
zDGb%TruW6Q1QG+64T(RuX0Ql9z?q|ro}=C->V+spjC9}A%Y-Eh;q>de=}KwDS<jr5
z_Je`;O-VMn_6we8qU^g=j3P(Qk0q_)J<;}b)$n*TcZZZ#7a5xWY1P5B>y;|Az8}F@
zcV%FfX5W!w6D2d#{^*i+yU^OSpL}BhX&}8SfTnU<)f9hMk-Ct!7bY?UhY&(lM1g=0
z)UmbihpirwciiRsc;{nq-z+?By3Zq!b<?toymO^D@ETM^y$Cjanq36LDpq{C(7a=n
z&lAGi9=uYs&LW)<k?3-GRV6h}I-$&)vT|RQcQB^Goj0ZbzSRYj(mU<<)e=U_KU+zC
z@(J^Qw`=-v>W2LRsdQHsdD^EtDOql)>v6YbBHJ^e#qvBXZ-^C89`ZvO_ybb)Ui_$5
znuWb#{MgbNEVOGmN9jUB>5xl&_xrmWo`{iK>+v;|cr$D^=>Xbv6sLjX2{2Fh4S|T?
zD;#aOzGgCB+eN=VU@~5M3x6HvnT@3mN?;Cy#<E4y^~QKpCF=%s&pXrZ5`oa3In(@=
zbxF*?#@+VT9`9m#ZQM#-5=DB-j&inJ4L@mp2A||tbhGB_cY$)}d&Qmp5kzO2RpyF0
zwr>vGd$9MdwJvDxUuv>p4tHL<6WXe*L>>zBdDp9C9ond@+B^1MQhje!C7dd6O<Y{#
zn7{DNY_8;<!zcWcv}}3Z@2nHZR?^DqaxFGM6kJ(cwvb^!h~&lP6d8;N6sJ<(?^!bS
zptU(ZMnY^*uO!X&BXlRH{I_&=gv&b>!8V&<rmg(U80?{6CfrRnJOXIA%8*Z9zls!9
z82BEs>=|SEZE_=rvGNeo!Q8o_FqqfA8RSwSm@)>fFijaQZGWiHI&uLi)1K1qAHM#s
z0pjwwyg{vBV~`hS%LcJn=zl^sxm#H`aKKr-pzvKq9c5h+!_#YW$HK-nxSYLL{?6dN
ze+1N(2Pv5E-mamQmU!RfiuwT{K;`@3>^FmT4kZ=Gk<05G1F)vSF{}A^D=I^S!tZ=P
z2r89LcO>tW+KUrncrLVd%Ivl0XcJ0Qx(KTq+V3USmiEs9RTC2A7zOd<gGl3|+Q5?-
zSZ8H81V^f`aUandkzDglB1?J=+aVzp>Z0|VM~RIKkjG15E9gmFC{}P}cop~pQ>d+3
z94-v1TpPv^>&a@%_oD*)o%gN`e8Mi<77Gvk2uHBXu;PtjXQX<=q7iJ;2=)Mt<6NI#
zhxk`=f`NWua4F{|1m++bv_3lkZUljxZ`4LPL_RJ)64^^rJjQ&)*y+j9q;!pN*&lf*
zA^3w(EbIpH@?DN`&qE1>8M+>hKwH<_I4-~m_iZ9+`iaz0-&ut&s=OSrVQ{pn&oeF(
zLp_uWMr<}9eW2F{M4^(<{@u%Ky>6)XVx`pT(r#Ss#Sy8tc{U~O1?4BLTz4Z!J+I(0
zQNj&NXN$Bw)aDp(sG0bvY4n8GLA33vP(A4=q;aU<mJ-<+bTGm8gHYp?qGaQevfH!9
z_Jt4psMp}GK(V%kT?S(A%8$GE`v>e8iGiSL^elqd@T(Z0Ne4EWC9G_>V$dID<O{|Q
ztL$Fqo;P}D_z549#-_sOD>;AnPSrb4o2j~%5OiadYS84TmP{#5P<4$m)0!z2RV($q
zJ7IaYEKu1MZID8B@`8K^>-nqk9X`(t9n_dFIIYP`>;|OKv|tzqQOS=LbW<(Va6MED
z_{ca-xPUr`r-G_Xd<qFpRfTSn;C@z2Hu~fG6~%z4`V|xs?B@j9H~|vt73IBoZAA+<
zn?d4J!_CmON;kwH34R{ULDnT=3G>aTOX<xdbigL7ps1(x*d<H)2lZ21QP#_h5)zZb
zu$E;Mtl;R3a5KjBL8$76@XCk>Q+P$Z?Cv6+6SZjrLC$Q1(it`oQxDAb731pS<OyRh
z%rx|q9FnbwZsD$vm;2V&wxG;eL>;XT>T|*xFp;ASZ9H0WBdnV})op>fhY9`GEx1hE
zGXhO+*Z22}iDcGo6c6B57ZUsz68MLtgDvdc*%~briPsODc(Nno={26&@zf6@SDpfV
zYz>I_>d*IShs~WZ_vWM2Q|g@?BwvXI?LTqitJYVZ{X2p_AAEoQ`PtXn+p8+$c-^5f
z{_AOVq(SEw@)^iO9(y6MD=*Gxq(Ac5`%<NZWhjpuIKaL<f6Q`<Jxq_e*RWOAxZ^B<
z;kDtklLpUQFMn3M2zD}20vREShp%uyy?N;Br~UVJ4&B@rs-ehTmwqGp<NHJ3SL$l{
zma&kL6lN0NN?sMt<j~?afRmTof#q+E9~Tm>TRe^yt>(XSWn4f<`;_o2#`CPxhjG^!
zCl<p$OC845t@3;+z8Dm;C_ZHIl3VqBUFL~3ZZnZ9+*5%!<+OUP<b~Zj65`D5cJqT)
zr}4|8``$eD?~ht?lIibIoMf}RfgYveZoUnq{Q=?KMs;TU1FnCR%qz;Oj!yZUer%j8
zNL54kocZ<6TQA~o1xVUyUr+IweNl(eZQTDM`}-BAyCT_RoopJe{N;9E<8N9#<FuPf
zh_jZzsmE0oH++8nhFNm!r@)uRQDfAjg;P!vhR*QK*v5QSt0|j=P|NMUyT9?=Gks+F
zn0SC@@;dK{+3kzr2kecwtQtJ)s4vP)o?7Yzou<c4no=;)q^QB*#_yjdyiI$HOW?P2
zvRTEnnVnkxjF}eUyx;9lnJ*j+6YGymFYKx{UMze8HC{6AF*UX}4rB#zE1u%Fe#Q;?
z0#-c>Z>I~AOCRFj=H~-TI;8<!WFtkjDS#2&$817Q1+rVIwU;`~Gi4B}^;8ENHF1*J
z9RlTj&RQ}s?d3b8Bok;bO!Xaw%OEZj*)YiMOmp8VUeSl0%nU23@x_eVa`=suq5<!o
zXV!y7U**>a+~*Q+3Lo`pD~UAgz0|7gPHxJ#<s{Eon;KZcawXNt%EkHCmZe4EFiRz$
z;St1YpI75tbAG6W+PWD*q$k)os+Xl@mZMNhQ$3BvwLwc$UmNow1#5V+3Un0nn7U_8
z?jv?Pz&<JaF^{!yhaM|FZpH2aeQu~3AW-M{+hVMHpTWrh0oDS26(Lub%LR!Tm5uI8
z%#E;-jqkow{N<g13bd{Ai>mAWy~*DmpRw<Mx_k!XdY_d1Ey~fM6Q7Z$m10@8@w`H`
zbDFn(-SKGW^2vc9S-I|<<;*;Ox$MlmP5oKN>)JBP$zvUD2a^}Gk|6C1j#rIjl9M~X
z9_*WzmCMaj(r;gMH8Ao@PVW9HMB<&Z_%_AsSNX10;yX-teYh*_;cR4CnV`h*t9am=
zuCjSoXLO{AcUfIw9L7Ypj8d5ymuj+F`J`t6?o297tMnxfP<y@0bMo0OT~o``^CQ$;
zC!i*RORn=y7RdwSU*mHsWXrSjB=lXsYgm-JIadyhedWmYT`RB8!>%2*`Z9B*zLm9D
zc(XG~`6GE-@lHeK(P6IQNCw!%jC`oPmeTcV^G?-!Pg{={Jt`(qchv5~xx@W0jM&nT
zG`1?1dn{it7*Ui74;~EbOH%_2kPaIv{zNlNhh&v*Aww_K_Qiz>r$|%5-$KRD6Nd<u
zerku?j(s|K*e~JUp8eBt+hjg*oNChT$Y&F_ob-O&qeYO!%+#e60l%2~4b$dwv@01a
z7i;S00El;E`CfIzNAmXETn0)NXdXmS5Oiiv0@Z3cD?#OJ_zHGr=5(ck754j0XaFKb
zTeK>0X7*$yr$perl_^{6#K5tY^5Q_7WutC_%UY5#^619YGO1Y?h5bB|Knv0#Zu8r@
zAoLpCR<*Nj!OqJsspxUp!Lrhwv;1!e;`U1~)=U@tLmG=)1b6xWn#A!${aRqgup#Zj
zO}7)MF#Gs7XSkSG7>CCW=J;H+-cx_{{#8v3G6Gh-s2qmVS!G{>pN-ILe|Wa2c{<fa
zAsQaNLt%F@cd2f<Lf*8@!Rd=sQ8&|P6VgMaTz)SvwsH}pZp(DhuZg^*1jVM_L`6+^
zJ7TVOt9_wf3OHK7E?b+G<dICYT|Al(D#C12F^isOR{dok1N;5-MhUy%M^=@%2w^D0
zvYMDt1NoF@Kf^`khQP!Fu=Ch%_mnRQPAGj+kGGWpiF~lyp+mNw#6PWOw5c~>PqF8P
zvYsg!pKOLnk$_bYOX<HFXjj9tsgl9D{CMe^=6Cu0D2I-ePpt>({N4_4nm@ug=9Sjk
z(_JNBR&83fXTu~@t9<XFu*uq>s=pli8Qqhll0pdG?a9|<d9Q-a(fm>04hW`*Q0K+m
zseCE)?Y8aPwy_bmO>R51?d7&T+jeZbvF+YA*tTukrdj`XZrkpc`rWkMO{kFzC_lGp
z*4uFD_2eO0zZ1s+_k<Jr+Nzx;c888#xy(Ch+ojU2()|rJ>j5J~CUA~gppHeo(iHi)
z-E&{G5M|fpM;J}FythEV=&gh8r$UcC=N%~gUNll%`_@eQOVB|6ov0AxNImn|$~S=k
zHj2MX@P=dySSmIjb<@h0vwtL$@kn?{<O)1ZZGPiIi=a!#`iYj5d5_{S3a`rShIGrI
zbJ5D+S>#8NV)PaI@%6<uyIA!HBgK3-gFXk9Ebfw?Ep)w{G2$A)H6=1Q#0ZQXv5k^v
z3Qeu_54Pj3z$4U%%3+k9CN7p&;lg<2ktz1&@IrMhcno_5X9lL>?RT^`+@A^^L_VkN
zby?^v&Sd;597O9oi~P0@Xp3soxm4CxO$qvHrRSwoNAy=#$L=Z4*AHG2ZU2DAN}J#2
z$2p#<vs@$;$F>#SZh^6ZWQV<bT?fwunZ(?RPNv+8s%+t7lzVp>*nP21Y@sG(#0HQw
z{7PdM*y37RJ{cR?b$MD}+w7t5#ueD{lx5aIkm7|#Ipg&Y6gg*Z<v#=u=X&3F338{8
z-{%Z?Lhh4>mc0wzKN)l&%sO@4NnHeeUndu8CAt(9ec3ZnNECf=5!JXZX>w7UJ90hP
zko7X4-^vrX@a5OcO!I_|7^$fbqr?|_@pT3t_(u-h^BipOdA+~AR4<mHFYaRB^(3>$
z;fr{^_1mych{U8f7jgeb{P}~Ht?#d$77f2O%TLHMg75y2fBq3M_Vg%c97j_&qgQvP
zNd-Wk;Hl;94XaQ;{H=PXl{l$2BQ140>l5rrl(6^ysq?146yw!?$;z7e)#H4Dkb*#o
z;Qn8BM*Hk}b4&1AgZN{<yu2^w*;d9%#f8!)@QXoT;z&goBk&($N+w5STXr^XW3=>)
zmQz$P5|3_0u$_+3+Y|8Y1pUn-=5(uGm3g??z5^&P<NXorw~2-3nxS52`|`wR4{z=n
z)hTy3$bM~YVI;`5@n#4T`pqi4X<t*|+f)Ik{^J8*%gge9c}RMAepXKx%oY~3sO~s>
z`hwI`34J*>*G_5e2Zw{Eo9o6d!i}Hs>2*7u6ALeLwmpO4KJwAjz<7`1uUv<=?;dly
z?I%9O4mrm4dYe+*>aZ;Q@ll68s>WZa?>h&|emz{4^*&yx-k-O_z2tVFv%rZPXRtR0
zxR|8V)i-29_yR6ue~El@pre}B02wXx{`eX0Jjww{{;FVdqV5hGH@RWoG0Jv<f^V`#
z(Hsa*D=uRXAK~wf$zdyZoZYe)juDh<b-hB&L%z!8c&xnq&Sl%q?YH24@u=!p6{=@<
zY?xTw+f&ffMK}4LnZUPWe6Fk>_|>Z;=ylkHX4!6`+dR4Z6VVDM5*}?{x~mrITJVXs
zCK0M(o+lR+<n*4LI7QEwvEs{#Mm@2S*=K8RBy{F+_&IOQW1NlmLdtV?chQS>ADqj<
z1g;M+@A}X)iX2t)T0iZNKbYVD(k$l={=hW9L(K&{{{?u{9+!Q^L9vlzF1xCQ%IxQP
z?mRqmr$Jh=>K=Q_M}@|s(LvHeQQ}iUhF-JS+VUYXzse(1-QuUJJ-VpF9r6Xc*xO$3
zcIJ#v#qNP}Y+A^l#-(DnVP8-J_g9=w^{m(l-=`>Z>~t*8)r8li3}elk9h_nW$0Z(>
zz4~~`<43+)E@S6xL=A}1<-uN>)tb*`1GGap<`4A<;Du&hhdeXfnX5Eptr5%iMtYLJ
z<jZ-lCa%tRj}V7F)FYl-Kl(bmT<nC#*Lb%OKMr#_3cU(_sw!Mh-UX=m2eoe^EL%J2
zLoiW@diILp3}e``=h7F&@tOEFgvDk!hI__q^_g(VLfFQ69futbGfSHX^#E57zD&L$
z)nKCs$Mz0cw8#W2o*VXg4+%bE`0a!>kKY$PRVSTMTFqP71K~Tx)5a&Y8{K0L!y38y
zlR~_bI%7vqnZ5#FAgb;mb`IE0B4=jrozrcu-EGP5Fd5pfo(2sm&hu@n4gn(f)r{K7
zNv#JjH&8Bkz2NWoc+MJc>wvPGksLSuT&0}Lzx)(^YVeWA^`sM#O|_4Nrv*Q7{p$1C
zH1^?K+Nm?*T?cs2z4zC<WK^C1TH|ZwS0~+r`(L4N#-kX#?x7wsYiGiSQv-K8ycoY1
z@|b=HD(uxTqw=}tgj=3{B=ik(S5WB(w5Hf%K{~<roc-0KJ-5HRWZyc1-Z{fbo<DP=
z^B}YIo6R%oH_Q1Yo}RRh+q;&tvZiL_BR09jHTMlFir%3@hM)Vz<6&1m241I&ztN8w
zF^-hKXJ#bg^xznxJ~_vGWH!A}EbGGeb8JUH#D(4BJ_1X9ZPDghAuW+Cf2T3&sqbU!
z7h}_gX9_Z3R(U%rmn4++xZ$gx`8@;NSM*OHPaC7PAQw)AM0BJ*U!9-xy{>z02rF70
zaY*^t{`Y_gJ*L}$P4$Z~pXXagh+_JibD(?%cTU#h<oR1)<lPeO+!T{{?Dns}mDRAP
z<&EJJ<?;AsX1io{97O6ZUu;TNkdKT2rtE#`jH^1uLd!$~F>@~W9$&58Qy<MZZy{i9
zJR^Qv&>mhoPp`L{ysRdV*@q8>Z?g*rHs+Kw+TzzS-&QQGy;^pW*+~j3t3Vg^E!FtY
zi6x;3=4US#s8gfB+%AI-qc^*(4bPhD8@@l`TiTuXMj`rbG}SuOhU}drUMDwiQCT*Y
z-=xHstL}27Oc+102XgOakAu-S`l`y6j?Du@>X9ad38<}bCeg0dR@=PJgn&cp2p=dV
z+Q2ys3uML(FEgS&1`FNVcSrHza{L0$jFM#W&l16UkC#15auI?TqShBj=(~k5g7=#@
zkn6)M&`0aqtIQD@COeYAV2fvNgKEnVSVIiIRM)$^6NluxD<n!LPubZ|`?l9i4Xf4Y
zC*5-E*7a<*^smz8OqQ1U`%gWttM+==rZq||xxBD*-&IY4v<ao@kr8oa3nk`+^}@@E
z4=Byl2Fr0F@`bSrvwH6Fo)E8i-@MY7r3Iy_t*KL%K*4CiOu-}uJdiv7v<SR{_rRAM
z%m+-JGMIaS7c~H`=gytaoi3O!7%!MBnD+kg*sI7$F}oX#bl0xV97;+pA4(cFOC_Y0
z51XZR0xrNjAOxfWckx(Y2v7wuKmfo1b^uQR4WJG<0b~I8fpOq45DnY{x&UdQ1n>kX
z_(0$Q@B+AwS9WVKV<lBKnGqt=Oou+3jp(Pb54F)hwx>m;Mhw3#4f8^IrIqGU%S)4F
zzVr{#y9=wtRYI%s6)isGSLavd*EoN0uJ)-MlON`A(5-ZA@9xFR<16sKcr$#z+icNP
z(f3H-K94@1KCeEQg1dsZf~SJ7f`@{Sf>+~*lp2c<7S$G27Bzz(2CE0F25W4Gg;R3|
zXN9IBy{vp1RluqvLy{ypScX@bO7nML|5Sw`;k3%3v>_{42{m$%gqdAdfvSMjMnh@C
z+hHBTo}t5*LwP_E;06GI2!H~t03rYZYJnhN6W9(s1}+1ifa5?qU;~T+TzG!q6>t;i
z1TF#Z0S{mi*bjsOIzTgU4#)$XfLVYaNCM1&en1JR0^k50*bRgLT0jGE8psChfGL0n
zhy#p)9zYH#2Yi4ffE|bc^nrFj0w@Grf$xAYkOo)+!+;uq1p<K$U?&g^Xae=XNgxxj
z1tx$aKn!36bOSO#Dc}WA0X85U&;?onaUdUX2FQRQkOEk6`0)CS_}Y8&dh@#5dlb35
z`MP<ydAoUvc#C)fzJQ0Mmn6*I=Zi90*;!FWrB6jck)3pCMOe)Js$#y1v+|&disH$%
zjkNW&;55y&>h9UIp-Nq5ZAx{4eM&=0U4aCpk5#RKBO4#N@Q?AAflz!ipbazvVjM7a
zA9XKv7|tE%jq}9$;yiFZI4>Lw>5lY9dLn(19!MXg7ZS#FXL>U|nZC?LA;OYslwzq;
zsfw4Pm$H|VmkL#x>i^YNWaTNzzstyKG-BZ@A`_E@Ny3_8%&`5KeykEk30sA!!oo3d
zEFD8nQ^D@W>`uFhSHM@|3-NXMOZd}x4g3lGetZ~S2hW;UMy$gx;`8uHcrE-a-U;tY
zJVDGL-Y1R|4-=z_w}@RtX<`Y{lSm;RAif}8w`yR+Hict9>tfqlv2RVOCd(#^CQBw%
zla=0uUfP^hy)#1CYAlXuP8=XQLWQB0P&H^EbSG33dJ<|2Jpwg?%0ORMR#k>nW>>~l
zmRCkp7FMQJVikG^Kapu);1k&WRtc;rbCW*)YQ#vQfmN|WKbg9QJx9b7A1TbR!|REX
z#M@9)r~(uQ<%AkSrJzu#DAXFN4n>07z+b>);63mVcmuo$x`X?`Yv5VX5j+as0Tn?%
za2I$5JOw@gxxw3@Ea(j$1oglRpbIDj-UU^`0B{GW0iFQwgNMOepfu<S9ssX{=fQ`d
z0B8;>g9vaBcojSY+Jn5H2`CTxf*ha$C<(fOBA^ur0fWHp;AQYQXajPAH^EDw2e=>9
z0nd@{gH9knXa*{QaBw%M1)c`&KpxN-lmmT0c2FOb09`?0&=OPw1Hql3CU_FG1&@G6
zpbY2*vVppwIOq%tf)=0(=nw7%wLvk^0ptTsK?M*7a)SS(wy%t8tLwVOX^TT~Y4HNZ
zi%W2q;_mLni$ifQ(BjfkT!T9yxJw}rJV<d0#XUEDpZELT`;B{l+&_1WnRVt~dnY4f
zWSw>PJ|}B#^%Kq$x06?!_!%D~@Ri6mWbg|V3Kb;eKBri}%!(aXv88QDT^v5L#^qto
ziXT_qp*>H%9e%Jzu77P1^Hzm~Ha>M=c+>iMJ%d5qTh(;hvD9C~XV&QTbOy273JP?D
zX%R&X^g`vS6b4yUQo4+lDUcBgYgJ8VoSzKTMXwnR;;U5U(!7V;t;Ooa7ek#D_~|Iq
zREJBfd3mCo)tX-$rB)BmTT|AvFD5yw52jKpFq6v<rado;S7As~5ZI>`NzGH>%u=~i
z0Axw|Friw1#!j)Q$I4RjVeCj*9ig#SuP0s1Ig-9&yia)?LEe_|z!%D-lEP(-PU#yV
z*jDg(DU?kmoy0hlvNiI2TgHP>C@WV=jj=Rkc7%Le#e+mBCs%rsaX00B1bth|gP<+b
zSc-!&BV}xacw5PXxGmdQx`uHf<!}UNTh4>1Eo()}m9Zsdd4zgf&4aWpXGQuq<8{jY
z2<o=v8NOeps1yxja>~#M(YE5*OTTPU>3qhil-&`mZP_zIzpPFvQ^wkqg%Qea)iV;m
zoKERA#*>um5zKArGlJX9Kq-WVP|DN@>9+D2@ojdXbT{LA%E<`cw)`2<ZPtTSFe4~s
zedN`)`WfkM&Vw}dfo3wH63dU=7YAC3#5jA;gj16Wd1tcr-+Ji^Q|9GOO70eU&a~}|
zdYKBp$}8ZIAT7e0iQK32(r70$$>osDC{ms&-skZ$Xs0sCuaVFzVw-t^;~-;|J^jV@
zU8#=Y54KsIy$UbBc43q78pXp#$(+V;lExyZnWlaFc3hK;8u^7%%4wW^IWMdB=c`{_
z<%Xsw_DQ^y+lg1RU8P%!muHUm_1jU8i?;SY3Wxd3#Cj1PmxxVrddasF9T%rLygDw`
z+MDzW#r;Vutm6A!Yrn=zpj~7&{I}wDVZdzAUbh#Z9UvA;qkvb4IV-*Q{esJ1Q0x<p
zVsfGUtkquKg`mHvSXjP-dLi?y)?WF=JAYxZ@O;IoLc3Ydy|xQce{qDeg91X1VODvs
z7$JNhgitF`L}&!eI_)(fs`14TMZyY*!rNJ+y=p{>s|cblRq>?IcQ#<J3!z5@2nt0=
z{}kfQ%J2QS;I@;tqp=eo^5yu@?Hl}|+cVfB*elp)(wC+rd6s!E4IxbPE+`5i5c6Yd
zmUJ&3A-2L36p0W$`B6J7u$Obee#aja-L1U-<75_ZFZzQ1j{7kpSPAf>V3u<)<AUvu
z?=dP^8T4a)_SIhU1@j&6W8{-k$PdsgV6WhU^G@I~T4>ychCYF3P>^WcE|rA@NZ`ys
zIbdta+h72#a^~k3$qAnr*|GF&@Pl?bi}M4FLfMB&EU_A7p@q)e&4Nas*hkVWl^blJ
z_0B@gqDEoW!@8ElB=s=^Z!K8H^d~E-26b&KfjWzh&fd)!Mrja(a6SV}HvN%#OQ(hz
zXX<7SqvYx-esjwDMChP1Q8UYOLZU@Z13NU`nXQ>`Im%_M*=o6=&KYxlWU%g!Gs>YQ
z(IUhAgg-RNnR$MUsX=^xssxy~h(u{E?VNesTT*Yb=!*Cs7Upu=@xYbsJuql7*g3=p
zN#rwiKdx;wP<qkg=z|ZMNGkO}lI;-CYSI1ZqYsKmN?yO3Z7EP|(c#F;2SX$+Z(!1P
z7wEa@cNFM@-0|6@pTjl-sJv)%<l%$fk!mtfW4i!!TJ%2h_d!J@iGEkx7NF6h%aM-{
zW=GoUz;D}YV8CL~QScQ~z-O_38rx)`{G!#7`xRP1s@Ooj?G(^%(eudf3MC+=tKZbN
z7O1!AbmV=75s=n3ux5J#^j!=%3c5nR{~XjWZd(9UU$i^&yh6WE4I1dST?e`?`W^*b
zp(3(Tf3PhGXtwBf<a>pApY}NLWD7q{XXzDF6a1Cn$<aE+s3!`ezflm6o9egQX*e~w
zbq@3q$3!T74eaimpZeVf1_pN{nSJK$C*6rZmA$nLbniwpOXVEM*cm&ux%CM2>qaq4
zsqJSI-6lx(>($EtldI>KSUaw_QF#WrIS9n*W~x2Ma67{_Jx#40SlIb-D;#LjO=DKz
z)+4Y@`6uy~DNw7M{8gX8uF)y`t!|)GH_m#x+fd7{)h%vkTJqM`E!x@u^O<62&h;tv
zty*V>`c6=1f%=BXIkNb0^bOZ~r24OpGsMH#K)i0|_4tzsgwFWc<IU3pQt)d)%&T#{
zjp(z!n~jHO!3==7R}%=?@w2U)KM!cZbO@RBarKSTv)P;d2kc-bKzzXjVi$+A^PAfT
zlwev=jM+HnM#kCL&98?Sh^!Z9Hc`8=aCUfeiP+MT9u&Ji?zYi#wtRDp*y@oP6u&-k
zvT=QOfAjc&{Pa2`1~C3=Bl&FTX6xbk6GKQGV4`4S>TLJs`~m%mE+iH-ZnjZ-ws3R!
zfb+x@5)YbK-#9tDzPW!ueWHcOgp30=3eKi(b|0{w7~ydt6QGUtvy+?a2h1mWcr1K8
zWCL`zesl7G_rwg3hflx>l0HN-$9((roFn2i@}&}*Wds?ETx?eVxFrd9Wv1#l#}2+{
zTwDK&B@K6NrusN12|iX_WPh(EL0y@?%3F?feC4>}{-2iQbyfOmZ#i}G+2X#+$VSi+
z)+xxa@}$I9l*N7>V71h#%horkqMd)~J%g`0L;FG_uBm^?vQb~Yifx|gFdnBr%96gW
z4l3i!%1>m~zhjA2R}58hW^X1~jyvwZvaEtidd0b0c4oeA@0a0L^opmc`vFzFh#M(X
zzldkCwBvq_kyn{Jlq;WGndfe)fGx5$z+qVd)j4AFAq|KT8!)wWt4oIJ9Wh^#V#c5j
zNN$?D#|UauG2xQR$IuUGY}&gg2<lQXCy_G85Dh49TD!*y>f|!1k=n)Z4j61YyC(_i
z<uXr_lEz>S$ZlG?$F^!4GjWjW#jp+NOqy*v?!IzQY}GYpt|1kOp&U@%v~`bf)mdS3
zCH0LF$z#st*wt{)IB#t=TA}|<d>wl~fVwI9=krH>Q92sp<k+DBqD{p=Up^X&(&rOT
z#qJJZZOZ;h{b<lhhj`i+yD&hxsro1VqfsaQ8u5t`DDHXyb5r_H%8h;?oj7qp?9>41
zrt+V!H->@q-Nfs$Cj)q!@_*893?Ar$i4kEo@M=^2PsWYW!<I<*VZbEsWZI;bxO@Ip
z`BdO<to7^S+J_!Qs9nh4^4{{^H{3MbHQYAbd)|27dER>7pWmF{o!_3{W8GlgVclZg
z$KS-?#oxx?E8i&JDc>sJkKK&jjopsjv)!=WvE32_F6aSQM1V_Pz;$KtgxO-&UhQV>
zLG4cM@7j&p{e{P<buZHo`QG`SHSSEe)WI7WPliuRPxc|yAtoVWAweOiA<`lAAyy$o
zAzC54Aqk*1P$Z}r^cB<uN(5Dd@<3gH`E~Hg#nA26<MZGQz)Zom@4eVl(vw<nEnxBF
z{Qi;UY4Rx)u!ncs_r&p}9ikT^uqz$n8-f?29>N*o7V;{@ECdh|0!M;Nz+c17;rQ_P
za4z_VU7KCmT}Jq`(q+I;z$jn|FbJ3jOaj&bV89Gu1h5Dg06+i}fK@;rU=}b2SOyFM
z764O#bx;pz8Z-=og8D&opz+&Y&`Mh$s2B7TGzwY*4T9!Dlb|&a7&HSK0WE?CKoHOb
zXcg24n!SaB#z4!UA<zP7YH?=Y-N%DTr0ePN3018C{tf;a4ur?R%ix*tR(J%w2>u1$
z2v2}l!E@oA@K5kUcq+Ue9tW?0XT#g!QScIYI=mU41h0YT!@J>O=PmH>hc~ZoU)>kn
z6x<cu7TlZNnBAG(n%%G8tP6{XXyqcqMeL^GYj7}p20j8`gb%<Wh#asA?}N|6$KcCw
zdEuX5^BGc=nA%?c%+O>dA13f9qGGg5<sCEFuJYg)>Of31S$0!B$NaWCJ;a4T#yz*H
z9B)WdvBqS#3q82oS`jl(mW)*8F`Mmr523bBW67E~da1<ZqY8sODdpqV9F>zm-t8kg
zr%CO$dSlrdR=u>!F~05WdJf8Z77=S&<+gNVqonl1Veeo59zktkEAL$y1k!VcRe#xf
zB&-;_(zbjt8ma!p?_t!2Sji`S6&Y3&QcLpn`ATG+k^6>u#C4J0_lt;7he(G|fM9@7
zz^JK^!PQ8xknHcbnA_i|Qu{neg>-(i`lfY^iEZb5aJIFq$p2=$PP-pN-3~i@?FST<
zp<%^KiyoujPC0wy*C;AS!<L*jG)A-?d&b~bFDjeQs-9Ll#=D($_SUaibm&$gpKU5_
zcMNMg@{G=}u2aU8l`}14jBWet8LMAYr<^HUZQ8;Z<#ys3lV3xp>>8_ETFaQocHS9>
zUrVR_8rw<Q^%&-M_!;djFi=LE^;KH(81wc&f|-MhLyOCc3ybRi63!eW-HtzFysZzE
z?PfJgs~r>A&N*YhZ4Q+0W?N4?8N=I-KBK>_dyolc1*8>>ac*avvE4R3$OW^3($+=H
zMqlMF|4Ke%zHNArePRts1C0T;3(h!iTONjPWrRj`^6BDOOIis>^)y+C%Lp8cD2i=0
zc`FU(svP<GI<loF%6Bw9EB)p=9mV-Th7#;$B$`;2vU7!w+)b^9y+ZQr<>{Krl{Rzr
zjzUeHhLY7~x|+nq6$%5a8s($fH5C;ly1JERIuJ)k@1`h2Er^aZpH4KZcKN)fQ{{{!
zbyJO@dUY-Td&-K$xj{#wrt&3~M2(zE_PKONwx*^fIhV?2t>wx(M@&fhVEG@%PY0Sr
z5C%xK|6GzIGo+HKQXEoSQkDk^rO=jk)ITmPsW5@KI{G$6FKHbYU+LbL1wn!xL%c(U
z-%}Ui>PDAI=V{GZ9DMMO5Z0tFPSPDJvx2xEeDwY#tdUowrdwL31#vj=@{SVL$}67K
z-7WKk_#Fg#hqb>qDdN!0C{u>m9C&y~wriRc*XS;kIYGP+{Jq25HCBsUbz91eAT9?!
z-qGz^tHr-{ugd};K?lK?q5kj1ifD9`%j6+e2kw^<{+eRN`MOhOb`Z}4zspbl8eK)E
zy0v9`5T^t0%P4=XuHrS_lQLgOz(LSu*xmb}B5~b<GIfaEf#+r9on}yRx9)nG8^re@
z;4=J9<FP1M7gS~jaXaw6jK0%)EPm33qp86#OeIh#fT5Ulr>Nv*ub;`G(T8h*Rlwum
zx8N$UGx!Kh1<nN<gIB<!;7)KL_yLRp{sfi+_k!ubg<wnYCYTVM3f2Vw1oMFF!5-i<
z@C$GpSV@xcS@@fna0Z3&x5MF%@3C}ob)W0v=wj*O%|DyRK9Hoh$Do!Z_yRTrFM;>W
z^UPPxyUZWW!_E85f0%EXr<u>1H<+sc{eZGS8=wx*8>k9&0h$1VxcH&8d)R~MTj9?o
z^|-h*UwUDRfs?>$l5Si=dsuhjEZ|A71Q!`LdLNhrJZHXO-eP`jo@_p4UTc10USPg%
z4l;+sLSa3yZ!j3_Gi(|Lgq^}-V8gI7*d8ns28Ff4ZeS6xepnG~8}<b@2Wx~~z!G5N
zuqxOQEEl!{>x4bPKEZlng|JOnD(ok$9(D$cgN?!}U<a^l*b=NAb_a`s4Z=!bJFs-v
zJggaZ1xtcW!fIf@VfnB%SU2nm76t>uzQZ<PDX<w>9qbP*7B&Jahwa0%V2iLe*exs)
zHUKMz{els5uPkUeJQ7_#DLw|7h{P7+>@RHzWA^V|p_;h`?n;EbV!30QnYg&;E?bEm
zwPJH9i&r46;~*3V!y0=eLUupzW$W_Jeyz_`p%T%6D|n~u7god@Rt~eZPvh*gyVg*S
z6PXlMMe;Sv!^ge9Yj`ATLf+{7$E*hHw3tE2AQcYZTP_<)oEE%}4GFyvg&AZ3Q9nz!
zg_=gAWZ=-1KvjfoQla3hy4j+znwsvl$?oT3TYhc<YVC%eJp2i)?avI{Le`7Y-7Ljt
zzUxZgdDp~Oa2T54SefwQdK2u^k@U^lGa|mVNm2W-*Y_Es#C-b;?H`AWxR=h+{>^>b
zRz(!_6JB;dluQpW6TdhXsnFX{C{6`uIw08oKHlX;bQaT(h1YXV_y>sAcywD$>aH!}
z=6k^22yP`o!HSS6Uc;r4KrypW)d5CDdsuc&QK>-Hel6c>VD;$yL9S?9!>TU3MUJ;G
zj`!K6FmrOw^uEjDmdjip|8ds4wlwFtRcU^TBL}^z1%11dFTd4<Yjkpw5_><Z{+s|l
zH|dhjD|8w)S9e<5|6N^MbXkDo{loO@)kVwF3Ey$cvg5n1ZVR^s5-eE_DU9~}#cxc*
zs^qEPCoQ;FT$5Gy=bJWT65PB?E|V_Re`n7*c7bX`K5R$i*M!x8^Ci#cT!qz<v{2Ky
z&=Qt`x?oR~Oyr$VogQKHA2@7$5}i}@ft<@+Qup5qWJn4h<Ek-*3HD^{1*AF%_GDFi
zaAC_=FC-fEBmt~FW2aSqBK3I*?2T!mim@~H32K9T#tD-Hd)f(uT3-BeyOv%YO=+L5
zth_joO*+V)?=gPMSn~gt6Y7d0{Cr7O0)V{Q|Fh}XLX)sD<5SI=r8^@;wj{o@i*qYU
zL#rLb|BgA~<bcxAeH!gt*ttQXXh4Bmbb4KCI)`t*gLm?@I<>IIRo!h$UwKIXWah7R
zn-df;^EA=+o>_{kTdS=jN%}X|>i?3pmVepKy0w3S<a6B`*j?3X&xLB?ogCtbL%mRO
zY@x#zN^6crhRPJm^15G}cviFNcn;|>6sL#D9MfEKh)JU;UY|6UL({~%eb`$ABJ0Ez
zOVY|-@<m$fKDs>sg9*ENmwUo`0rq}sd-A(OCH~lCSlCl}mkCkyms`GR-tqv2%z{3x
zrB}=s>c>ucwH6kR<mSY{`5K`bSv3@2DP<KV!~Xxm1fxGKQP<~K(_tA->q1hV8LX_m
zNR<mIrvJmOt<`Md3zv9BX*C+Gg?pH)X79jI(`4k9v2VKM+>Cz_$K)?d)KwU3IwMnS
zuQ}WA$ZqLSTp0hJG=;;`grWWKc}%w;t3ygbKS%a`@EM<68Mjp8_a?cDTYj8>Hz2kY
z4%l6p<)-7>oVFFDypZ^;g8`LG%MyQXErdIrt9(A+p^Dowk-#ZI->RR2exA%dfOkky
znX)8SPU&6he0}-<0~{*2H50$<I9L1wUzfk+I^?evaQ|x;0Fc9igG=?xyHfwh*=8WN
zNH&F5gG7bF>xt!hR_Bun5*4K5dnzC<6zMI}G7n3{=5yMBK11x7D@Xg<i5_+++7XhB
z$mKKqkKQoIOtSFl0iyV$3*(gH+p+?3*aFfj#wk{#S>a>731=K@D1mv0=@)%{OlOqr
z;0W0O{~xyLNb^X`KN%ywys(-JpL|xC*}{5f(sVMj&U$CmbZ$Llv)hFc<6ZtEPxt^b
zqqZ6>FM^W*3i~54t%iEIBGHB0Q@CpS(#PD?ysnokhAuFAGSTur7g-nCDU@*s?;OX3
zLXuQ2_7~>zs|!$=x7*Tf4az)nPUiZRaK!PYgP2`t^<#>IK_&wGiJuWbkS35WBI3oe
z(j)%?`TQHDncbJ3NI_J^S0X#F2dIiN!(WP~TXLAY$pASEUs|bi4><%>X<+zs1s7s_
z@l20MFr(%n$f<qQ70)uwj<|e>&>(UE>!&;-FhXpjlE7LPO<HVp22S-jg)m;8(-V>c
zm?o!zXjw!$k_(fZR}yICFC{T#p+p+QUbJa+!$r>m7<)})U;m&RE_=qq`Y9pK@f(%_
zv81jn)QZ4bR~t2GxTXxF9qLJ7t*?zLHe6qZ>kmyMur`e7BA0BI{p><;<)}S$({oR7
z<r>jNDS0L9EzNvXri~;m5p$=6orzQuN^Xv;k6wj5k4zb=Dlv^E$%)p5e<AgMCAI8M
zhCn2=$7dJx)5#J5l>bQ*B?M4bpLx+wBM8PSnU~dcqU8S|TS<}tj7PEytLfyw1nq)o
zTK#YKLh~Y;R-F$1bVbyNmj_8H%zOE$KBE@rqj|wAE5dTBb-~$m{4Iq1F5~+u_SVF-
zT2%0MSw^^N((Q-_K>m^Hc-I~jb;5U18g=Ekr;c;!RAwd*I3P2lzW8g-wJ{%smuka<
zsl5)qX${>Re$&Gg>%gNV(?j*5)Gxr;6OaHQ-{DNVg$AQuP$FXZ5o3>Eq6N7fh)f5S
zAn@`>TV{4_)Hc+iT-MQlPSEK84u>eU=(!?9Mp?CS4q+5ZaOVyY0r@YZ(1?pbqZ!ha
zAp!aUahcw?N0i66uWw)6*e=DF$;JXosQDeVl0~u+R|@{7R%ffBZxp^T@~-5umt0#+
z3E?}VF9c>t@9izp)b@YZF^C{pT>5?~n?q7G!ka2SHXH+%8Gv5-vxRjleTydCD?syS
z4$D_`Y^K>nnr3_M{0q&WF-%<Xn>-<OR1x*kf}R<chSqF`vMd;Oobm20%^n}YHIe{>
zYCmr_nL5#*c&1Gf{baQB0&{O7=+g6fW){g(=UK&N|0;C)9yBi0s=ud9Xb)c4E6ZFU
z79kW>abhr<3wQ4l&0n;9(LbhPjzIp?liIfyqP;^jf8j7wwS%6%U=>(A12p-0U<z8Z
z4@wR{xJCuYMs(C&6noqITRA(kg=wcc_7a(w$-En_<4u@)TBuMOq1PzkISFb>sE|1h
z5E+X6OcafJ7C$A!-)8&fX}&pkWqn~u6}4l-MJ6BsL-^0<KP)EU)wLgG-j*ckt5DZv
z3R`lzj4XY!q2$NEcX)j@D{)jBM)U435B};^_7wKrmHPbm5%tWEKJ##st!V$d`%g7_
z(E&dDN5==0>jUlg(U=`_xL(IUmjUH=fp%_Y@XtTLGUIq%;i_g`d9Hj0IglR^CB!`u
zY|7g#B}1QLj*|OxeH&$^&|;?9t<4fl2uO7eC9{b?TgqZTb3ivBxANZVjiZVwLh(c=
z_}b&70Apl0#ZARt`4X1%52af7q`d6Eu5iIK#;BzaYe}(&wU0+Rx&V40rzC_QpFi&m
zFQTZgvvAT>U3{X>;^DWk9G&};#p0>eEcC`<$~0m|ZqFn_!X0Zc^tt(qzcUYeykHSq
z=3aZcam@$~+05!^KjKrVE<C5@MUl9-(w%f?yVQsvUCUp7*K`xJeSPnJsk%pX<ocMP
zy<q*2V3+l7WmW__D^RW%{mjTM)u6PC`+M(vrB`=|4#j<KDf*L1&=KgB-J`F4D@4C!
z5T^y-yW{qv0HTo>z7^mf<?qkz)kLFu!pjRc5cg2pmC!Tm2(YmE;wQDx`=P`gHE+xJ
zfTDNT-d1$^#UF*oLac%`jh&HTXHK=3C7oIT3V-%mPoUkxycS2t`)bFvg}I2QwYABx
z`S|Qw%tlKmcp{l|Vr2{8%6zy*NrlA^$4w`TIe&+bm5zor6lxXO^A)xce0`C8;rhIM
zP8eObt-!zd;DphFFcd9Km#XC1JUlkeqy1mXS$MT}N~*Gd!YF<xV_(Zh-P89yrffV7
ze+aR*rRQ0Bl|>#S6;4TR%nKb(;E2O^wf;blXs!&y<S+zyTI;}xIIhkgtimZNSIAN>
zsD27X^Q8++=*>!@jN}?UQ_M9o4$zNz6No!f&{C&rMtCm57o@0ara7B2cfp9D6M`kw
zVp8hck$z66yx|3lvtd6)vq*SmrECqkM5%0SnRujEkH+5!K-<3OQy#Q|CvaR{KX``c
zP_C@Nn&mb4TIG^tb;6x8IVvbtD!_bHq~uBQ*h8{WTXcQyDI2ZBAB?R9Ie7kuTccVo
zfcXNCJLsnqhOzEgDmHG5Iu1`?9QT}mZsg7gMuGXA9Y4NP9;cv?jvzCiAU6UfMs*gw
zP%aDSOfG&EGD@Zd9HPOf=T?0Y|Lsodc}7gtq7D4=H7Xm*>(I)WX87sD_GI6qq4;s(
zrO*9#(a)==A9Rh~vdf38l%Xzc_2|o{ng+0-<rW9YK)1~RqIHqewdMtjKYzM`m(tUR
z(|ufl6!d4L%hZ}-VwzyrvQSDkpdKrfTF|aiyJzZZujbRLMwp3qxf5%Yr&V8D-Np*^
z;IyL2>)6w!zp?L|d$`H*<VHeEjKynhb7P%TD&&%n1qanclqE^-P>i&?f&2gcLf3=a
zgM#l!glnoP(M9sU7JZH_A-gETpWP+oo2hcyHP41q3xfsCc~hTbcB3Q(1^!S)h?1U}
zQB&50W+S}<I~j^xs5@o4{|iF;aH4<E_Y`XZ?+1ohLIK=I1!Pz1*!Rp)k3|3Nw*Ek<
zV|PFW5S`;|Zi*Eda#}53r*Oz6`!Dp5yqS}e3iWfyj#u?`_ulcz?*}a_s|3V4aB?3r
z#>n*ACcJnSPWU7gxK<`(-6-=&7%U{(@{C3n4UglK9RWBke(6YaYB`_@y)u-q$Dgu!
z;X8VtP+i85C0?=%-rjm`{Fzzp*k;Ilb8RUk-zqnq!3r+D5z@szO1`e<2I@*t>N+R-
zK~MNEIBUwp7+}--#ZmBUqjt21nXFECw7Xn0$(b?y1BkZj5%uy~Ta<gkPXz=%e55WZ
zuFYc)noA%(4g8ty9K;o+DX_LpAJvZ8emY5`vPC6SjY$;XQ@1XM-8{G^AU!aze?adQ
z9REu+91>Bt+8-wKOpied>9yk$kPupV42(iY8IrYM#BOJn4rM$1cGx7CiAUMc!2Z*5
zekAG-f$fiy!`O5&(qyXNIn$a%TlYq_gO|;01D_k*X*+zV*O!IJ%?u|Nq0c%wJ_@+I
zE<guAA5BVFS2PlE93|lPUsT<V<EM?`V~u|oKdy61x)YjnN`jh2osf6i#Sqw*Wi0xq
zCy5c+V_@*d%~LVlm^24V?+-1$yG9WbCg^>q@qMD@-Gr(EUonYgIrleBEA}G&ML~`U
zt$(sKPBX$6;foak!HNjS+P;%{c2Ck|+}ycu(mr^tPE-2lOogJ3|Ck)NjyqqgHOGD6
zqM1UmkEod=socs+rd04vTw-~iu8T-XDc`c%s;GtW*C@aG>dcwfM;KVe=rd}CMlQ?R
z<b;=&RBnUAwQ&|-`s)VJjc7qEa;92TKLp&#Bu*RWnekq`8iFcsR%h-^uwH-Bt<vvg
za0EFuA1v`_SGU&%)gBHWuT!_HeOhl<i$lDkn!Tx~IlZW--J+`3`5Po_18nE?{=ztB
zycIu7!|*?Fr>%#=C``VRn|vL>SP;a^(s=(53@kq^^RAWTkgfE?D12#oe@oe}M2=@#
zWVw^_Y;jl*nhYm&d@jaV_~36VD8`$cPp&qFU22yF=1Y>Yy%FUN%qJJ0!Y;6jnp)-v
zw55t1e-rj^2)@X2f624;#(Gd=IN`@<a(P-_ejQu1kpBQN8Zjv4_Ama&(0EZ^#Hat$
z{qGLG37nIiLB5HJ-=m36**TA?lnd_!Iv52+Xazc01!^2zjb~R{OWNF3J*`N74Za;s
zj2cZe_(Iw6M!;6Xb-ZvTQ?`ve-s9hW|8xX?rR*NXG5Zx&>(Qszwo$oqs^faYD)9fy
zy+*jd<<&@6$J2Af$IfebBK1&%h)}sE`LMp*Rxyfzck7K&WVq%^Y#sIcXS88d_PU0k
zwEcPp#nQ1%h8&K7)WCKXsR~QySs^-?yX`1}b4PKL-waLr9?aD$86pmXCclejyxP(R
zXMd?>|8)o>9D7>QpsD5a)CD8Zgv!DaqqWwTgrnal>*b!t@ONFB)iU&ka{a9}Yft5~
zrjpY+Oclgzjr8Yp!KI`?$ILDSmYxtM&TENmk)=*d(M8Hg;Cpq>^t`J5A(Prgc9UN;
zyfkQ;0umyw+F+<xW&QQ9BX9Zc<<tFag8qyse0I$xC>FjzIzec_GX-x9Ff#iIw;>??
z_2w=8a8hG(36J>F@1)%Ck?Fe{ZlGV@=Y|kW|2rmf=}?F_Ml;W^i`?CQ!$fbaf6Z+p
z9>c7bQHGk(lN_+9rbq<S**{PjL0^`YsQO98rHD0F>Dz1dIxA`AsKs8y5;_pt40OvQ
zAv+M;pogIq>3kuk?CIf63Q(qkrwih8xIY-_{xNQvDl<dRV?C|-rX|~<5Tf|uA<N7B
z;Z91<f{A8Jmg_tHcbwe0MyB;0n*oXX;ml4Yl6R%+PVXliaP28qOJWDEL|-;r7LSUI
zqhp9#j&Mbym((C#;s-nE%dx-nT<8<kb?UTl(F`q(<5wr1?a*jUPLM~M9M%);>A7Q4
zC}80_L7)H8^FS)-!-@Z%H9PagvoMq)Z-NL_G;ShrQo`qSjn`r&&yIQbXmLs;?v!J%
ze>K`w3H-EGDjNEtki(Mm(JdKE#Q9zpIFGH|I1kErlR(!!-&ky~%I#08^Qo!SD#fyF
z*6p#t{SJ0SD}u@Wg`^QDRJ7h%sTGs4-g(sF1l&!~o_v%;Xdq-`z4g&2vnO23fR3%G
zYSAuGo?pR0x?`A-C52COUP-+D*e(g<Ji(QBYR`d4M!qFj(InG7ne6eEdg}o1)sr-$
z^4U-d5Iv7NIOA<iPM!813Z~~PlX>yp!A98`WQDJQ!<xdQJ;-k#yNe6+{?;uPC;v(Q
z=i9ECL$pH`Gkvf1`Zu3?+4~$<Ct0+FY00?WYy*gg16VgBY6Zd{dT5fThfwy_Wu0fZ
zeT-|LrO4s)SFYXl!B|wVqD)?Il`GJ7hkfrC$PCj-n_D&~GsdD&h-5u7RXz&npdsP!
zkJ7)ynW#u!0S2@dM`1)UU;E(VHHlyCCDS9>SqHG8PwPZ{jmPzZC@tV#^#7Ksl8Kqi
z!XN6=7?A2$`Jl!036mV`nQ*k-ck#w~(>?C`_`R3Y{in3|wK9bIS)ufVAMjIql@zw?
z8x<)HfE(s+yXGxfZuN@3A@@Pn`{u@iaSn7JG)S&8p&0Kyx)lRP__HiVoLS#$^3fIH
zl9VS>hsu9;)Gb0^pKBy^zI&CQc%;K*%||jU&W5kSg0IMeFUeBRy6)_+UI<j<KSW!m
zT@-12-kko(bAj=voUUPHjaa;dU3f4wc94w8(yEc2*JB){KVtrJ4;vTWhg;-8@6IaI
zs~w}AgnuhdfIT&Q@S<p(xGiX~^Vgn3QvMG5dM}#M4axETvgO^y2)peUi|W<H<_evk
zN58=d=9(5(FCk3pqm87_e0{>Nsh#>W$-NF$KHdo6RO%dwvsdFp4%G8wYvL*wk)^Y=
zzT_^h@9{*g;dsAZLI%O=ZXyRR`M1AZr<hmKpX;F)oMUy2-Rpnh(;OMH`_8Fx_1mh?
zFyq_L%KERPffB#X!*anWZJ*FR(6F{KNN}8tkzNUfMs^j1es+k7s0RXXFNK=PMH3tb
zsp`3U6c9hpv;%muhCESZo6bAbbzsT!ikwEdi7=r6tWO4i6~Iw<MYU;E%!gTR61~wk
z&u+d&!p}#>vhFZI;l+L8=r+nxC9M}g-Tov^hTMYIcCF~ROB7)tLpq%D_5-UvY_7)M
zvh#E<uB7WEEG-f3FecX~m#6vlQgn(=1pg4u&6Pf6^2db6{6=2-uZ&xwfI$ik3!2K3
zs(sBNPdd+2%B=A9VXBAbQ3kH-<Wj5sGBxX@5PHvtWma#jx}<}~(djQ5Tn<q-ITvP>
zoI7c@jen*Whhb4AdB8^z#KK1@pbP2yk>kCK>u3cFx8L`~8_U${3yEHD<k=cvY@$Qo
z;UWQmHqd;PnE$#x{f`eqU>n)$f^0CeoUeYZ1`MXTNw*)!Hq#B%l~b)0IDY#b^07Q1
z4|+)GeQr&PPq?ra(UkG-b0c|%J8<iQd_J>vhk$N}Qi_CF0gv-Di7C|U)Uns+ryTJ~
z-i&?y^|vbbh?M?j?s4ViGRF~Q=iCyDu$9zal-InS3P(PDw;p1@f?RA?1b#ePpNNN%
zoDE@hkP_anm0;)_KwduTe|c*DGY98PT)^8Zhr`L$b?Y{<yL-q3XTpNFw2Oh76{uoa
zB_zjTX<d;KvVGng!)js)xpb2Ex`wZ3yCO^sdX3)_If-s0yyDfcq*1mm%HS86++o+N
z@>?gkP#4I4%~}nPs4L>1L7@^q9`D{pJ#He;oOzFeE<*Tb5amT3Q0V501DhjM-eMSY
znIhyAPOg&PfOv~y7`mSIl^D}%$*~b-kEySuxTGKsp2_I64pkVjLZs7yLc7{9@4pwJ
z%VwThx~k;{A~Wt+!&J?3J3v03=<4d9upJBmf!2So`zkS796uz!=Etl`5i(D_kkvK$
z*P_oui2FZSEW!z2jb65019G27*;)ICe8dQwt3T(;h-^B1%_dy+XxD{&Lr*>L+LybT
z3G9KypkV7m-%{sHyQNuFEunZ4UyaI)x#lc2qn0+eSsq~fz~<o4ux~m|KbK7PTAE+a
zw>cWrhM&wgKli<_1;mPmqY22osQge>RM)~@9aFVL<e4*q&4%e-P-Me&w8nqv1JAH^
zvIvcJvM;xdWS_JmvfiFMS|vZ~&F;bqf9CS3!7t}ZyXErO1g{l?pJ;I{tHD?FgBdsL
zQ62@XboimpL3<wA5vqcHPxJVRe$L_qh5rcWxd<*ywS&#_M0x2xpMR{mkbf?NyyW>h
zu-`kEa82d;NlApBmL(_yI>dP8owbO@cF2uVD<cxqk?wt;aDq5+B`Rn3GpcOYn^sJQ
zMEds;3M?wgkSfbiDzE6XS*)f5o0atI7^@Zt?|}U{KL`b!N24ZI>rcY;20V!`D!yT6
zlvSbNDZ1N0Hp6J7h8bJGId9XqKM~nsEBDtb_dhD#bTZaVeT8<|*ndroOj+l%>Su2x
zU~k=Iq;p}Ub7Q1)W&Azxm8(xF)5gZy?)k}vO1fav8w>gjD4Pw=I=I6I=MpHdbktOD
z`)4|Mwi&C_mLtF!+a;a6L9ry6y?&Ib1)1vt+4n$6Fplw)663p|=UWvK3@jFauRsQ+
z2&++C5g)7>wdhEDJd0dH+yH|j`Y5{#*J$|h>f}?wE_pgN;WwF{qDEv2{Z2;bRKkPS
z#^&b?k_OP87pE_lJ)H|y+I#HrQcD|$NM_G&q#<xK#n2jB8BIECO*(DOUY<7=1Yh_E
z(-t|*nU@Dx!}JPiBJ5&`vI&{_8Pyz>1ZNp@_v&5$Op6zyGj@*EH-<#?Jn@kQ(2fX$
zW5hPLnd;JUIcgZLtWov2QsXX7k9ki&T%s&S5nGctzdlfnPYKKK!gqn_I^Nr;YaYqE
zzM%{NW2prb8i~Hia(I*wiS+hAMmG+aftu#_UjM96O%P~_60Z3S#eycvO)m%)hkUUA
z7NX=!x<)&x4~@T6uymsH)+sn``N;Cm4IloQVcQpBx~XH6-A~_Z)@t(AOs1e(ZCxIT
zS+P|jNgur}j$bisk)S8oafMh&PsiN9L_Z*%?*Y!}LEk8BvVWd4GWUE5)sDP`;H$HK
z-Zp~Hb!je#%q9hSN68$r@G|lQvQqCTE+;^ScgTo$M)KE}MT>rRHjzscpMS|A<V!d)
zX%Z42RIWbAjn<7d;G^+_*ithdGv8m=6P}|1_!?cZ^B0Xj0bTQtxSOlvkBacQjUJjx
zp-GsfzID_o)Y8`K>nSoB&?D5`vkg49fvY)ASI2{_i2yEMJKk}i-6nKA@6Yp!){2+R
zB@0;-eNt{jTC+Q{MYiIJZtt5ysM+|=9Xi7+9xE-&v($~H>bnCH05kZdC9V*Pl)Vr~
z-4WZ2Vv>c63daJ9yK>tAE4df+>}nGVPPQui9dG%%qFtyDjStIgYvcAGQs%X+l^Ro;
z3Y<AYobx@j3URhnA=qY+&jt>fgGTBl&A%+S93Z_uu?F11dK0Hg6E*FBdL2`~Q!bh|
zI%Vp*KT+r0D6%^)3_4r;^E(PVmFieVHkA0)mlI;JHM@9aGS5c+f~icsXXkd&f0`H<
zWwb52$_|)K5agx@+6K;=ljoN$9v-XmVqK*MI2g9*tteBvMn*J-_<wUjk-eJQ=)Y1o
z>Un<z4Dsk4ls+U`0?3;0REnh?xA8tXPuw){ZB5N%Pt7L)jQ+Mi{Fm$BZA3qPtdkt!
zLd8{YOV=7sH_rF<qgO_CdUynHlSERpj#UqQbmip#tdmm1gEXFYWpCFhA`R$>N~$0g
z@ajZBpCu<&@5#Vr*L<LK+Qtg%H45vXTe7=Yq2<Fh)L1T_O;D0&E%1<qhw-B1>Ub+o
zY<=o@K(30fW+6&7=h{Nc<B)<a?g?*@(zXv#k7jkc2L3?z#*&`i%4{2BFpmnG3VQ^d
zk{p`b{7beii=~doK1>i-G?uEHs@XZ4YV)Xy>iu`;<`4XOBv$<Bx<LGvS@Bqm4U8v@
z8Vr663|$PhZ<(R9;ux5MXz|>ot<KsON6!+VuxSG1o$|1c9fA~OWCm2isnR{4QY2tK
pY2zDH7E>h?v?G(FKbpe-gdAd|uO+Hrb5I&+86%ZyzJ((p{V%>O|9AiZ

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/fonts/lato-normal.woff2 b/assets/documentation/1.27.0-rc1/css/fonts/lato-normal.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..3bf9843328a6359b6bd06e50010319c63da0d717
GIT binary patch
literal 182708
zcmbq)bCe~`w`JKjyKLLGear5$(Zw#a%eHN!%eHOXW*4UV`+o1uTQl?DoR#ZlWZqo4
zA|p=jv(G+}t_tGJK)^siKp-OxK*(QvXtCq3wmc9B=+f8G|7Ez5p9px<rVs`|<)l!4
zrqIcl$WSm*wFcq$uE6Xdq@bI;sDZv9u$zKFV1(dRe2{+gc5r@N+DNX?KR#ni9|?pe
zgBZYTB#A+r_MA&<TMAv~4ju=WJ8Pd7$>M%vNkK&jyfkdsr~m{*BM!*OsN5B?F{l<Q
zdpDzq;34x)m$F7fKJbm7uzaE3O49;ZX?TJg7J+li-p|ZF|Nm@1{P%sKnT&h}o}z=g
zzfIu}(d7qJ!WiNs{}|6OBWY3<LoF}z_`;YV=+Ofam{P&cf&`e(?osLZ1Nw>*XELvb
z2uHEY@GNyEwkiN<@wY&>0j+u+UBLr1#>i7$aW4@xDmH36X>l#=I@3z}CNSFc=|BZH
z>1H?hk_9q<-oz(($C~U%hN-0`Oykj__}KiIRY6_PY2@ok#`_!^C=kY+GM-EVPV?&+
zZdENkUB6)Nqwpxp07WV|;WB`upRr$W+Aw6nXy33>3;}zF_%%+MR3sjo$G8R#2Y*;z
z2|;>{Uzs8aClh1#_cY5?UX$l})@X3K{1fZJg4EH$xr#>v^E$~5RvsWKM<>Deb$4Va
zO1^BmoFMCEjSELsTOA8m&nH61p6%&EbEP=tk<oRdTUG2x4M`btahc>srmOev170{v
z`1P<v8K-jUBIPdS->Y&U@gV#mjhqdGEsbXy(fX%+>Egc_&uwWG$*)_c4X`S&jQTu9
zYJlNIaBcTvNFWoEAi8hn2OFgD>O9IU))Q>R!4KZiFotp`!fWbnX&nnB<(eq-*~RLm
z-6XcnCx%b7lS~bXLlT;VbDbpRh|4Ti5`?M84u|d>`f?BL5xA6DBVKd5OY;2}Z6}8E
zR-+cs%#(zFxAaapQ=S%L?7y({=Jg+nQvoVO(hEoB648QGe}TZn)Y(u`Z_%5wS$iIm
zM;Q>o&K_FKu_Ba^%JFpLTTswA^aAoVSytUA@jAmLqFBXoMAS+EE|uF+E_qaIR~U*S
zpz=ftVXWYZc*@EJv?F&qH-i<!+;vS00Eonk&Jax;c-6fZH^OpkxmKREZWhnp;bkQ*
z$E49|$tFC?TMTANDq+iAa~L({q>F*3t#oE!SyCk*X`(AUM>Ik*G3mXyF;+Rg9N#p>
zQNkeBOmPI)-4$MoI<#}+5fu=s0m%^}aDLjlH$uxQ7gkGK|Ix)d#_+={9^gdf&<0Y$
zaH&{jkb-V+Yf9UE7_CkL0pB-2YNCP|o5?r>a-5hUvf&-@{g^(l6#x^@@VS9^sE|IM
zCj2%=q+G*OZYukfmNN?sjHFa-9C0C&<VbGX2xwAMTOVNQ#>0&haIET1fXsvMP;f6o
z#T!NtnK1%YK#Y(DXgtNbT}ys}euq@)@+g5hieklIm^M%1N+JjuB4Myw4^})n2WSGy
zQa6#E-=Hb75=v#!g8#@Oz2I9&n~I~k|ENdt#Ar8*^j;%`qg2g;Xk9__W*)6oaSM@=
zd(4#1qNXyH<~tovK)l;7u)%%#rphhuC-A_!Jx^u7AJdx9t0Fu_A*w0`Y%zE8^U#1l
zl${ThGr(Jt%C5Dyf*}jK_oQ64g(WmrnMZN1N7lXPcdwQ?Ru0RJ$6URJXKycWdBC3x
zuPDsUOt<FxpRQFW?nZ4Kmt$Jyebc}j%z|`gJoX>86TsI!dcgJtsueVCg!e?_IJ%Vj
zyJBuKttpW>^2x`t`T1+tV62m(@bnoCsyDI$GLh}>5#qbF+Gsm^rvsiiWEJ>k&e&J6
zURd~Uoi7I{09;)m^{Aw8`Q@*&7O9Px_`J5rK^Mpu?rah0RPf@bc#aRij;z#Ka?)Hg
zOB&0#3p;47^QYp5GdW#7FMy#G1hXZr6~*Nrw}wlOs&!}cVKw6E7H4u%62EwLm_hAO
zd@m$tP`Hix+rE7Zusb#`h9<kP?nHYC?TGbXxyTQ!PUtEged4HnH;j)e_z2peT~}LC
ztH6j>Uk^T`jVMa*DY9An&Y-36P9JEQqoE{gSyS6X=bSUFT?${a1Gt?$;<@O2nqCt=
zbUE_UoT@TM5R)v0h~mI@WtWz>Z-A4(FhE7^p^CRP8`_cDv;Rg`is^oSf}jT$<ki#t
zlPYuBo$3W{Qlz-Z((zBG$I{08^RIknE5t(9Vfg$EAp<Mt#-4VNV>W!p=*Z>Y>*ifC
zmu&iU7yR?tFc0`qr*;!+NyqOE4$!K5j_SYIiN$zy(?t<OH^=sW)^?Cb8WF4`j#u%E
zna6lYo*16c+%UIzYI91i_sl}#@)AD{#~%<7zAFXvn3Mg8$Qvpd$w6jI=fHlj_WOqA
zHgP!`)yY#pv~k9guWT>Tcpw=&E2}lv0m_Lh5EZ5EJK26sx=$$xyt!aLjJ(@+pkmh2
zQ}qmDH*0OvKEw29Zu`AZz|b(JA`ijkH1KHP3a6wem9vdvY=s}fZn6$~*6ScZvjP^e
zIiB&t%AS?4boMAqF+l-xxR{0Inkt|nvEf88e!o#+sU$v&b&R1cK;JN-ZbJxB*~dft
z)nCx#?&r(7=Fk(WPu5DX+HS^<Q(UqCfdcPURUzLAbHOv3GA!M7V4*q2MS}|jxbu^#
z+z`Wc&<>Aic+{`GnuG>OPDcbCHGY9@qSC=2>5W4!tw)f`nFq|;4Os=PqpZ%BM~iRL
zCt(Ix$f$bjNAs_T#_&Zuq%gxf4{pqKJXw4)unJqDcrqz=Hgb`AX{?|2J8kI%g!=oP
zZgD-QEr7$lGuj5*hVgrZ=UbYJ+{lnyvI5&>+^ZqX8L5W&4gVnDjly2c;bLM-6S?CB
ztNBTEK=x|(YkE}dBAkBTTvPti$~FS0sLcd9o6o2Q*<<@~RopwoU4`QbbCwzQS#IRe
zLHQf03}8gQt3TssX?&CL990s(nV#-=G3;f%ererXx+{@cF6DNm+~#Fz0XWB_Sjcuk
zL89wSaNgLcHkI<~(P02@Ym(S8K4>F5%8#&1wl3|?ajO^WG|@Yaj}4nEZS@<yEM+&9
z3jd}p_N*zpM%Ts%j$`cS56Bh!F%#Z6<<A|7_JmEJPrap;2jB}VF(ouH+SI@@MRabq
zA8xu+Ls9%xHH>gna4V;&is)s+4@DArC}orw;X+IU?N6JYkB7yI=;Y{~g^%BY$yWHJ
zWmI@kSi<oqT_<H%+v>Az<&rfBDi-yqqU{zz?^VJ|7-q2$I0Vq_fFP~Cy2G%eCU`@{
z<M^ercdBSz0It0=o=Z0^$%_}I)_hqo#ScSa3vYMLRf5fzOPxa*7)@-}>w=SMQD8Q`
zIDPVqCv5^;Lv9@~?&%T@1xfnBuzA!?do4PEy-r&8OXcON#i*%E8IyM2dKRy4KJ_Y{
zL^8^IVDH(<vo}CS?L*VUg8dnHk)WKTRj$@YMyH^qBcpN<+fPriy-G4y5_AtB-g7{Z
z&9N!$ns!AFUpCm%Ic}P}PQo-CK~BT{les5b_&7<rSuX>XaBFt^#rB_Di{qpCZRjLr
zl+HMx6R2AKy%75qjwEAXsh0qrX{;G32dTUH?+!z0c4q@VG`|ts8&q}bUw+)$CHUlQ
z1KjE>#nTJ-;iAoGR%qi*Bu^;Ib9Y>CyOKWx-c|_)N-s137$2lpaCd6A3W=ZfZ~FV6
z)SnzL0%LZuUq^HMpY)&LFFx&*9{~5E)aDT%u@6P}jl=5N+}<rSYF8k)2rfgPG>QWO
zqECt!dD}pS*dzGEI^RMIcp2s90-`~ueTsd=gbZKEK~wEtzqO8Vo6z?W6Eg%AMr5>0
zknwW7sB98YVn0`ZN-!O1{8acbiHm=m>iPgU?#WdNSvEc@JWq86!wwUXNt91NE=HSD
z5RA(6=026>Z+bDyl;8L$qT5B`Pip;2e`>t#%AiO#%cnF_7+C{Ng1EVH`040}a=Y1f
zS<`3E<8e~b=Q1W91a|?lRLZ7S0m1X_(?elPq2x7VRfm2^p7C3`;zGNDH(;gH8UdI3
zxvfYR^%*Kl{3sub$LbC_Frsbiu@nuQh)_{6Jt=b*;T7+mL_(HpY^UIiJN3PVUbL#H
z4vQgWuXWSjj51w06cW2X{;=>;bfePF=uda^$MR>Oo159{I4CxX?F(fiLd<b^D!bJQ
z(Bk2{%1gh%L%)c?jp)9>&5RJALLo2r43%kgswWMgYWzeR^I#UebwUpE`QXvc;cU&M
zBRs+tyKR}yw#`JD$#K8LPZE|y8QMk>*rrCXcDmXe)Elf{*gL1?y=_ArHo(R=sJjF!
zB6iR`9k~)dR4n09LPC>KkkPUx5(5$!OA77+(b@nFPNCsf9G-7`;n19CXZ$Zs6uvyO
zu<@T`$={}MJ%0MM<i(cu9l8%$7rZ=qbTSzy9j}dl9=zO6L5b8%*m9!^#h{=KL}*G$
z7x=|ex)>RKmsKA;bf%xx_^9?)x{<+z{=8ng>uU5dJM5eXg`t%UBNPlv>$^MLq=^2m
zFL1?N0~VYFp`n2V2WnW-xKrp2?u&pRRNzI~uatRQ!qa_}JK<$a)Z84Ri8WA$7{R+V
zFuSG{|EjS}`^tY6x`6(Z00RTIyyg)W7M8?urm|bVST||K`46IE+PpIOWg1q?(fhU*
zb-{C!M8Y~foGwJcJfYs>-1rGs{kR5NFsnw+GZpCmaVfA@H_dfph?D8OsVwvyzqxWr
z8Ya8pJ5(>?OJHOyn+wfMOzzIMapW1baW^!4S^j>$9MH;x*Ht=SJaPtC&>Pic&t=+?
z)0oe3TVHD{ZbdC!iB;YX#uy#`#$X;XiNz7PSLNlqhiSI^Q3^ngt(mpCNHw2|6&7?B
z0(^adsi!8E8FZYHrCV_oNbcwpb*|&-(|8ojG{Q_48!p)HW0A_J4t|EZFsKR5JVrUl
zBaYnWEl%fr7juSXjLbDzkO(ti<Po${L#x51+?BDWi$dnN3kQ?dMxp-Z+XJaLueqYO
z<%fQ{HiM*`Ko%>ayeu{Uh4V7tJHP6o&!kV#H$~+5^)cY>%dy9C;3i%$L$j60NVgFA
ziAxG>JR)NuM7iJ2eli1eL~3gvV~=OAW3S;(I3)VrtU8S9xD{i}Hi-Q)g9>hMftdT-
z<Q9w?<QM0DC8p7M+e?RC*g*!lq6F%?-3~fV{rC<NqG1WXGgxA&Oqu1*K3j?50+@w9
z7nIu(>wdgdmf^l-eMG{^W{IE0T{9C1?ZX11sT?$QUvcl1<9$<>1+IaREL3z2S2G1y
z^HERyx9x&H1F`+p{Tn^FpdcFlvG?rQxkSw%dYKV)fNHH%C6!Uw*6yq{Y)I&^$fxJ0
zgXd-YpQ4NgBWvOKeq%7{?VjIN$1q~*l&xWTY(c`civ-)vE8#q}hoL1BVYtySA$9>|
z#Osr|8un`9ddI?W>u+~e8}CL|m^PIfqQm#nnYN&SozD~I(JZQRaPYD+26|+U(n5&l
zHRCA{jFh?!&<J{{s{>3u4<WFG!w^~&9X)M7ZHx<tSDcd-53|g{(PZ^HU>R*eSS)G?
zaE{=c9u@ymkycJSF7#GPPx;$1lR$qU1kJw1UMe6;!Vnmxk~#{tB^X4ssj@*Nd|tX~
zqEVE0eH#p&9UNw&4^s(ixrmB&v1;<A^F+ZtWGy%wr8Ka{ve(!->o>^8&q9lpE?l{o
zPYx(U(<QTGLRS<{2x$8pbO{kDEZ9Qjk##ocPOyuK)(h+CyGI9IZk?>niDrIT>?Q{G
zFst;m4sI&A{iq<A?5X5EOloL!Sxe?#UDNYN7`9=2Pu%C%t{XuiPC~vI&K^o>g98vT
zysH}nA#w!F<GtwM&SNYlV2pHg)8f8<5|1q?G?@CbGW#0Ju)Ke_xf5sZNcrNq6STi%
z;eT(o_P(74XmUzua&ry186(1YfB&0-H@NB+fK%@EBf>a-S)Fd1y!JMbOB_nU+IXIa
z`lbHcCj3&#x@${V%z5kjVkL@WUS<GQ0?Kg6daW6;^LaPi2OSpnjFvV6&r~90#&9;U
z(FBJHS(<b(*{}}*m)+XV(=gn#iwJLa8*R`CIqQP)5$`$u;zw8PjZb_72fOn?@MwhK
zu~zrwA0<Ij?HJgR2T;4f62>C*Bw)}%Ez0Z(j{Zw~yF|2OA0MC~@N0s{rwOm7CSefY
za?<W2?OY`_P?(7XlC0#uw?8S?aa}8!n$lGUR<E`8@Z6Q4H!z>Um6=)xZo^soY#Rg~
zjpsdbh(92;AZVK@dN>szk7$XZ?*&gN=N;|S+gNtbvY4go;_M+QH}p?tYs&`_Fl<^U
zb)O}<yZH=GKtr4oRS~6|p2T+a$lDpGT|kD8*9U=xZ1XB(SSA(db<|K9^(9oO39*{2
z*L6-JW?|Md!?`|x3V1zV#J9^j#&4aJwbGL+`-?Dhg74iF@>rJ&Gg0nqBl}Wo3z+Z~
z__-HuV2X#XjOpEWe+-gHr-{#2mHb?80M6o%cOn-9k|ElxuQ}O=y>NsFH-fG?S%=L4
zG=d0re~vWDa%vZT6cWNY<5>DWet^KPTL*Ooojtw(w@3V^ffFg7KV#1NwUhYAX7VA4
z%B)f)!gf{1`gH;+jcKkJ-`mGN?b=`^Bl;6tA2y|mNK>U4R5t&7;$;Yv^x#D7AVK%w
zHNYd;Ukgm~aO3d_yt6<S&V2NTDPvI^QIFp~W8$ms_>y}IwJ6Tfk<&mb1)&zg>T=$p
z#Ew~5I;_0O(cZ-^W{5#2$)QUhZA`+4_A6R9vo|%@E*lyc8T)u=l65VTi=DnrNvm*E
z9yO97+J40Mt~lN5jI0Yn#60Mi+kCoK;*Fnw8?U0xVf<k(^b1CP$7<vu^V+Mk%yks=
zJA`)};!X|c{L597^Xc#1@!#Vc++L>f({;Y|b$38>n1o~pV1m!laa~-0W(PI&X1LqU
z=r_RWStCP6sa>J0wnLBz^9EH<DUHx~_{urW35x0mthOP}?NEC6(fX1c#Vtk+3GJX@
z5s>M2n2=+`T*MIvBSUI1@a;ov{(OX*$zjcM=gS+3!W#qplZrtZG$je1?Zn9lLQEGj
zjCe5Hf4(VXf)ap{S&1e>VAL_2PzFQVOjeAL$lg#zD7fLO2_U>mtbJBc_F!`D5GP$+
z58T4N`6x{9YbvSCuc^fk>}BRHH{Pb(LeycX!iyb`UNKxf!oB#shWqXL&(kW$4CwxG
zuG=19c@uFeZ>S3$$-KHjR#2fP6Feie?1@X1v4n4~-x}Xs;`WbGH2g&YWq8WUAlYJ`
z>*{$BixQM55P$+@W)4Efp6ao!49^hA98jwMEe>Jta#yDianmuL*_!8pcE7o?y5=QE
zp@pk8xttXvdU{FXL^g4JGgFR6b@yt92Cr-e>lG5T&zbVp@x%R7l!<C5XT)(w(<WQt
z)mq56FoTno1e?I8S|nZu@g+$<+)w}MS>y*m&9kd4UL2coMDRq=7;RD0SEbt1>t4?y
zP-L5)_NQp&FYy&D?UGQu+FsS7>zbf|64myWBH=CNGU)_CEP`_-f&116Ign#+RK=|7
z#?!X5HZK??9y02q7Tw;rK>a(JXcJg6EHtZ?)x!0IE+D}MNFP=8_MZacB6>C!Fb)qf
ztG~?KY)F%*!qx2QxTM^r6fka^Aw3y|h@|33JNML!MTo?>fJ<LS8Z=eZwf9J*n<Lay
zIM5}Q4AKb+@o|cPK&?>(d{7tkt6x~!Zh?HBb{AE6a-^JZE_|yT?t-I|vM|Q@c=0QF
zt8yFYKTvMEEsoE#XaqDyq0JdkabH6ARy*w`yXi=q?W?7n9Ju0Qf3`@iA@h-c3lfKk
z5UM>>4D=SupZgr*6Dd!X=xUMpt|CJg)|4oXcGhlx9iEG&^lr78(bC<A${_~!S}kW0
zCh>x>r#V~R`Rnx6IxVVqaL3eK4E-U-kI%>bqKBxsXNj!8NbaJl>=aV}As{^L9~1tO
zr&#jW<k7<PDbZkpgm1#L%gV}5o4<Z6FK(3y+f0p7$=0YwIM|6+Dy-yepNly);%H5K
zhA2Zpqb)(93r6xeyzTox*Khr<{cj_KZN^CvXgjd{6&pbjG57oHL*rfa@<|c?xTl}`
z&~-I`OhFSsfvAj)NtU$stHj|pO_Gm5hYug}ph}ZNiHqV>cek4k!B5hK<(a4DS)^S;
zfI|(p_U%PtF&U|=FI83b0+Ty-Z{<;TWLA={Meg!Lkt>m&@NFNeQxzsCdl2shh@*l5
zy<O4r$7Ww&eWrBAJMyD7h{y4Er&!4zRA~1M3>ab{WBZYZL+7Tmu1%);03!tnsR7je
z&^2c;1B9@G{jef$QsfmB!Q9KGYUG=-rH%91*YsIfI$XNuZL~hQp<~kIeosl2g?f$t
zDN1`+JHT~S>Lj3Udu77FmlY;9mGTAkZKFu;7KD5IG(A<<f{)223~3`?;v@(pH5puU
zlWSUeY<udU?(|U8tthh<v;nGV16GcNkjw*?29fmc@KA$SQ)j!zg_i^sIRVP~&=12A
z5ymkS9IaT#GR}kNNH>pk(5ySMkBl^}BPeVWilIaFzMCuNX)R%@RWO(_0u>ZLbp=qe
z!_j+gea>k%#hG~n;tHQ87i~k)13wH9*8;<t#SVZY)fpj^Or;iMrx>Qr;GaYH;Hd@Y
z4Y41=eal$I%Bn`*l3Pz-yT1E@p^_dOq`2Q%n{Gz&&d9c}TEpCIluO6WFpMaY84i*m
z(_$CVrC+*81v{)vGz7qjFN?+thoEIkGdqt2Z&G8MkJ!49f^J}B8HiALpibZSBdx^P
zdacJqd2&u}rb)%FSaD~X9W^BH;XVBhaSG-A+|kx-{e;W&*WDyEpE*0q<t^HIFrRx*
z&7^!36Gvb#MMcLqsP>*I|F|y`$niZMgtAbE_Umc|9G&Jtluj`5O6#Y}BR*8QSi}XB
z(e(<Ln5I4Qn9H=?#>m+*6SXCVS5DQX_JH(D=o9?Dk1T~39DShMus>-P1l`4>yiz_g
zUSMm^X>Eze^%xcz6o*OtRVp1j=7>YUtc(=A`|0PI@d4V?---o+QE&|yA;f~<tfhov
ztoN;T+xD>o%(j+$t<kZ=FQeUc1D~JCY<NbcVtYQExt_Fp-_6q;aUVDif11y2(GDro
ztCbfzVMMAxH4+gQ2S!K^Tc@TXFGkFP`NI7M2E7DR79<RQo6~6EW}rP^Ja(|G@QK3<
zT}gpUGLTv+iS_NE_pJ3PhTMj{1_e<4*2qt0#=(}jg5l@#LRY;g-(+0|h9@fT&QVb`
zcw^8tIZfBYmz&5$X5J+{X=awxOy_V$DO;eEyO7qGU?Imh`c5pD-s(yoGl@G)3krd(
zd~n2gZ6Xh%y;bMoUO1gV+b#UPs~&D^Eh6EBvSkEaq{*tan4`+oR<-#Rq#sq-%mi=t
z^MqDgil4Zw%JjHw0mSza>&MlJul30kLHbrz5*fY`)bDbj5-YRw!197sRSOkz#RFys
zAG9EOw6{tC;9a3|F?D5q+5`&}Xc_51)<KgL&}0Js8&A`Ve_rpFL{70cOCKmHuRhkg
zpe`bI6wUyd&Y<S{Gdq!fK;?&Ku?Vx7pQ0$1eA}6q)TQ@9p<2GN_yo7nN)r^CW)v7Q
zxqk#H8OC*fY4$UH<m_1lSd2zpf&N9pszv6lDL|{ztCBTgmI)fdiUL0eDTc$2&{G>r
z!wIfUX~q8cuz!Md@5`rL*NWHC?8a{^WM)W1PK`vKwaxSCUPW?kJTjU0m06%-CU%+9
zGSvgp-d=%w6;F%JtcKCvoLRzT>(9InXp~q9?9DKWlD;iU?Ff4j_-YTRQss5hx`5Cw
zitxKJl+<1z`l_`<VprYAG=Bm}vj<B*vC!zpMP3fE^+c!xhBuCWat>Q4D%iqpzYojy
z=Bs)>YNQSXowI$qdoWPDyzX5=YXL2^__;NSL%%=_)y9&OEY+!W+!qu>9ks}nO~CmG
zW>~kcA_ndC{a_Jz{8}<~$Fmmj$q|s%tmSIlN!z{5pEdwiGpZ_cSVdo^D2m@TQsw(C
z|1}coc&=v%Jn`(u;2APg3Dc|(gb&SV**bW<y7!~XCm)h=TP71Mx*t?j;P^}~`<82m
zL@vzblqR-OP#Gx6^_Cd=+fmC+)4K-<QDTC!RAIxS7OwH;E2b6G=Z~p`N5YMUr}VCS
zQPF+3VWt#A>?9c)@3k|Zr*XmcS<ztoSVAFD2xMe^svoYO##MIu3V{2cDd@OqMbJcn
z#Arn0zdplzmh|ML)Dw=7X1m%$ziwc5l!pdkNOO3uT|?v{>Kb#^|Mn`M;#^&qTJMyI
zBn?FlWgNjcNb^k?Yp#PCQj}#&V#-#aD??BJ2b7FvAd)bY8kAv#l`s@hh>8Umr8A2<
zxw~fn&#Am8J%pnS$Ivn*w#DW}9Aj0{i=FWI2aM0T7Q2^ct*20AWD;U=s~IgT393Rk
zu%joht<;^j>QB$D`m3hZPz+?`8Sw~8lY#k^!;D^7U*$Z$&6$zgJZjJaBb)X?H@I|o
z@pxX=#_pquc`CKiuWlGdFqtxi$G<r_;U8G&jdYECo8-F4%_=L?vJ&eLEx96a#ZoDi
zStG?iqsOOV5<ye^PE$gOkoITm+HTb`i=%{L<)T*?+n~=dk)7$9&&P8&8?Pi_xxm$j
zsqwWZX}`Ub`pVQ3tpbSB4+>;Pki*#x_|p6Bm(9bNSYjTWJP<}KO$uDQ#?>Vx)OU5r
zACI)Esv(%D&qqUcQ6{(}L(=D~*KXO7suL^tABBc+=JKz=W$eW!*rg>1==2eq<GXK@
z9iClG!m>&s^F%VktBQs+{3&Hb{4N1Pi0>$w@9hh^6i?-5DvF_?!b%ZLgN37xN261i
zAQd|f(SHuMNM;C66$-^5EqtW*wJ2ZPrcHez)@!>~R`QVy2s!I$dX9ed?Fm7(Uw5t@
zVSw&~BT1`f;(j1&H%tc$5lfl^l`&I*1(m*fUVYrEeS2mZB1dq*AOL!w)leQT3Z+gv
z_Voh-hwunY2SUa-TxrM6;sJc)VwSC&Y3eWwSy;V+wbtp7^S0#pO*XJvMUw(dN7k`t
z8haBT9lIrTsCQ(y?MPstd&A?~ewiDf*xirpY5K{(j}RJCJ^=i(tS_*zD)(M(dS4>l
zaYF|cNbUcN``8(ZIyeBOv`2e3tOB8<09*Da?vYVJLmYvTgP3wv^&cmZ=kTMDw&$U2
z<5%ob{f|GL_fB_-<%r$|EV)+F6}h~Dsje?XKEg6*cpwsy!Cn-_V59!Z{xku0XC%g0
zqncNVXK=!iETXu=W_|0(j$%HiJAyTX)>yfObON&ib?w)?-m&T#*+bpp?T2DLwHaaq
zr>s5x%P}-Y2Frf2>UoMac>RKq&n+$(b_a2R2e<$zK>oC|WMU0VDJ2`(yD0<@30+?d
zddfp=8|zZ$&~SQ|Pm=+wzu4-oUeAE?j}<|#dfukpZ{9TTG-HM+-sRaOsu4OfqOrwU
zXcFNjgL{f`g^?r<lFc#}GyPam_M+d4dB|i;e$pras)jvL6ulebeSG~O6dp1eIlXNq
zmdhC%AWz(Kz>c9@p%f70s<Ax44-pr*pNEi4<302jljg7u6nl9r>3-x~mU^4KyE|G0
z2#;FjFMc2DVwQ%y!=jg%7N0HoqX?m#%93--cxW<VSKzB7<f?UO%j0m-yV$Q=Z&2CI
zEjKT=MzvhS9I;-IVAax{dE<vT<ybp2?^s-4AMQ;vgKN!2+!SIU08N(zg)9XG)dLk4
zOQnjF+4J2GVgjQa-XFOQ)GF5>jVaF@)Lm<L8(b+)Wr=m;<aQ>z_NhL#ePC6ghs)tt
z`o)robCaA*TUJ!|87~EdnJPh%J`cxeRu+Fm;;ECegaS`#>I}A-fNMx7&R~o2>_HEf
z#a`=Gx_7trDdgw2eoma#V_OG@7fbYzM)`U5!-qSyn~m{Vk=ONo@QTLV@@nd&0c)xZ
ze(u<~W)x<>zbj#Hk{&V#G8MKM-#eb_iFMYu(`D-iPKF25VupI$zCU1Mhp*kQ=->E{
zZj-gUT&mL5gM^gg(A8+5gadyFrxGQaHX)VRJbs&wnlR8`ggq?fSFyji$@~o>oyTNE
zDj7?(#fSN*yL7V>*mXI4B=>4}W+JdQd2MaCR8MlSlDfCTHfy_jNfpDA!467R-Ipk0
zbv?P-xR6^#0#PEmtmfp`GQ(TAt4h^&^_1vK^No-+X~_Bnc^h|(W;Jac%hSGG>0K*m
zL;4SHM0(Wkn>>$Bqywwuti#*|fgi?m@L)2pwT>2~E`yVy&)94Ppe*_;9S>d=xf+!j
z#U7dn(rf!_q$ZG`%VA22?CumFs8L-AVF0eMxzCi);FLKs9oB3-XpD9th2UN?NqQ^}
zM@q~v1KF^u5wH*}lp<2vdb&gnuGTcT1r;}c7Bc#Ph-Xq}=7fG!|M1Mx3b+0w>)Nmp
z+gaa9SPToxZpHclgACyx+x^*6dtL+B>#k7q{`KG1;Rd`yCStsAcB(PvQ-?P4={&@D
z=}=D=e)ASB3kz{F3}BWyRD0-J*3Ikb`$EW^y%JH^N;zbQVhEGU<I<6Dq7wRNQrbpv
zW#OyA#R|6Nsr9<zZv3j$$%SB6pRiP306co4aTCik<s@5Buc`Eq?wW)c&rqS-m@))7
z*Q-I$GKL9B2oTfY@*G+EDnjXKd}o89A=l9nR+esM&P$|TqjU+fPt+n;3z9tmHgD3f
zL5f($rwm3V6=R_tg3TkPDJ#MqJIb-@$G>AGc)(r)+IfiQG9OgsCs4L9J_~S4;W~}D
z!N`vT7{d3_x1}fqGqV15pSj4iyR(axEcqT}=D5ttt^w&@wMks6G+T^JdZ>6$ppcC{
zpvrx4ZT%sd?fTH3N&?4kWp>;VrCc;HOkyFpY}urOr2o8NN~S3fKU0{e9v2BizN@-0
zPj;ZB$KdY*+P7f?i@oT`VJM==C$6Zi)te8r+|(hetOm|JociRNN6@GvC$YwzV!ppY
zQw|P7qg;avBa<abnm7h27cQFr@CYCSbIcYloWWMR@`oS<BcTkAN1Ld@V+f6#J4pI^
z0QkAOKSVyCHyn&`L|DI~m@{%_`+^VLgyyB{@=m`(^onIYPevLICAUT63UHqzl40-P
z(Ne3nYT)kZNh$Lzx1iw$6{<a#$RGr!u)~C+x(SD4DE*$S1JfvOW@G&1_Uhx^z{$<k
zraU^f2IgxTj_!|))(0Jzhn>U##~@voXW6<Y0t$pop5Q=~$iC>%!3<;YPd8D~GNJ47
z{<$K;8R*|r|Cz0Q=N1#O1zx>u+ms}_V%Wkm?kzz^e<RLZ5~?&qE<Gf_0z0JoPJ3xu
z%VTRBKV4A`iUe%a9}l_KWTNxAKFF+au}XdYaRoJ@l-wlM2m7*2X!_At*O@5rT)kI-
z$RggIm<D_FvQ2*ivQk6Bazg2I!>5#R3fdnh(<)c(uHf<M_*pyOgEix{Kox0o=AYi7
zzsaIG)5pU1O|L1RhoR6{-VTK6FYE#yq?2-D%fTG1fEiwgnrnhs0P?6DPV<*5&Tixq
zyaCc_8|)bEDz_=_L~g!IiN4W@l9*%6f*k3tP1KQmF$>2hmbG=>qSl3)@E(uisje$i
zp9&C-L#J-Wm+C5lRy{u}AXd$RO*fj?=7u#c8sW0_7N*;(I;fG#*yIj;_=SvBuN39e
z%C*nn#N%7$aazX#NqgW-j0paWvENNfT$A6}4x?NcjZ#<;=;3}U2<1LOQa+edvt?8k
z(I&QO%85R}V7i|Kok8%bgyIu)Gvtug>bgy}+{5PaRCB~0qPT!j&X$+0wInzthp=Cr
zc>94|hee{zYeL%*N$-#ofARS`9Hx|U3>s+Uua}HMx*3LS1rU<J^EQg%XhYqN!pb&{
zU06&jTcH9q4(+pS9OLQTL0~59K1{xL@_Pv!JmCzU%2DvZFtVBuDiMZ?*}fS<vkRqU
z8YMX*4uic?UTUb}?Jj~@t&05E@-SBe_8-3rnG>6V8@utR90@Bs33l(=eB?FPUW8}J
z?)>@ZW=-G5eCG6PG`QGuSRB5tTHXmYu0bW1CDl~&JodWZA1H6$q!9=Hf4?U0Z%dz1
zpV?)rnVwheA-pvX{$O}nf|9?;lv8zb7mq7!&Sg!*^W*Djz&qRJfW9z>2up}5gYe5G
z-A9;##1@?U8gwol^XNH{B66_gk0rxQHKH&@2~R}4x*HM{O9Mkkcf>iMDvVJg>za0k
z<!)kC2&ZeHO;|v`mY(T<6MINRg;1t-qJronB(O6I+*vcj<kyI49T~@8aN*SfQ>o!g
zd55PrxJLmZ3=;TcR<)&*I6n+H7^QOW@<k)_G^odG)#V}f){LbazMK!iK2!|mSzVro
zv*Q@*neSJ>GC5tffNiWaXPvVIdyys*L{2o4Dr9{LaB>fL_V~4cdCNUlwlyE!UY~CB
zry{^>QpksSNPqlJz5adTXB+Rn<<uXaYFrFnD`hK@vqQs<sSP09m4XSHwxtU?M2~rq
zBG1X}4udpIzH>4}_cc5Gd&GSD44zUV3pb2Qo_)~J%;$*!dHKe{B43{^DvyG~1OcXJ
z5;9fh27LoYgKbd1lxvNCH;@Ec<p<`AI@pE=3$Mso)wX#i%e55?sf?oN%J<p+r%Uwq
z@QKa$bA8~N^FMm;B7q5&ow42JKe%+Va!j{cnq1htM(u5UbtDTpw3(=_5R#fKA;Hq<
z7B2u<?0wZF%lOBpV-yK=P4Ri=Ul3@B8uLAYw(!g}(mCQ`s=Q~29!8OZOhBEeM{))>
zmBego*EF@#J7=KgjKi+S4v_))-zdUXttpV<_4zRDHMh4Zz}3dvEuI{F@H{IEZ%yTj
zP<l9RS*3?=z0R^Oa3#f*kHKszH@rs9ei*7^n5fCwfURtfZtbP62i%3{uu@`vE3CS8
zkI1-i-ocsXlevviE=k;6mkAR&NqI-McyO#GaD;kzdD-&$iWFkH_Z(y4#B%$sQ9pW)
zA7l^UIdPM@of5N9T`LNUN-)PJz*$wk+L-K8NCg3cjY{~}Iqf-h{}T)<O44jo-lHGr
z4AqcOI6;01vk)ZBF-j>$M52;@g&<;S+St*3m_q5wnbUg+*hXB3_ab;OoDo>qkceHm
zc+Dg6fv*5sWYPtPp+niR4TBuE1J;Oa6ro2lfPgtTEp==BtL_L^-P$EY#pyjb=D{VE
zy?wIVvBsQ-yq!?`t87{C+g90kwj9bSVmhB#7EqWG;5aWnnVJ}%r7>G6*<gtUHel~x
z@HH(QMqOc;qkLQ({t9Fht!sB0vsXSkoE?sVs;e4957Yrd=z;7O$Z@&7*K!`BR9Xz_
z1f)_wE4!Exs3eoo8y7=0@&949J77}(;slqjt)>!N^iuIx@5fGrOUv};{?AzQEHi!^
zB=L847d_(Xeq$0>ppL?^Jn2>*fsM_1a5AZ(k&!eaIVz2-WJAD3;;>;cjg&PoZiI-H
zk`~A|1q-K!wYY+R`;h-yk1%bUUhPqeV_*|sbO<h_8BzkfthEw<TtKBAA-pchb_8Tp
zVwWCEcZ0)P*TB5y;*r9~*@t2(I{F*cjJKZHWq`6U>$2Lw=*Mm&3b__LP`?y==1?U8
zm93JnXS&l72c+&r%+B(e$%R?K$}qXjxA)2)ZEgrJw;A;V;Rsk_jbXr_IAYPW-}zxA
z(8bS0BnAXQ;|$`AYPbFOEOPtjUp+H9wCbk9zT1!lF)RMb50>sbFoGU2Sgu+>u{0`Q
z+N(G&4e&dpPIa_U+0`KqhYuU0FeP|i9fhKddV(gnnE9c%XR5dj`$xVC9@)G8iwd5O
z@9oUA3S|7ObbYrrAW8Smvb~@P>ri2h3mlACjE)KfrlT2_yisGVJa6Lx1<)d|Y9##f
zW`zSpmjG|!pxTJgV5pb13b>;r;!efXkJZ~FEA^}m2BXqDh)H3pkev!UQ?geKmw>ri
z$+fG;n>+sgfFmsw7{iNP@T3?+TkTpju_VZ4lC?tm4*IB=a=eEV92ILhsU(p>j&VK8
zJcd7j8|2Qh;{}-GFFtwu-qDqIVh310Fj4=L{drel_@;T~i#smPZgKZK>AH47MBq7T
z#PHfJW9mL2BhEFMF2^y_lu7j{--<~w2bue)$2d8)PNN00t#`meblWB0mdiTj=bdRR
zw#s(4O0V<Q-6AXVI{8DhjfBc@5Rbt@M$M0J9b{5RRhB=ar^31NCD>wvo2i|FY{XI|
zhF8deOb*gJZMvb&+VW~-#u|?U$Dok=VA5w9gmw}$f0NHti|F%oB9O);ho$Rs6k}nc
zazIA6wvB?Cqsu6*Qz>!U65Ek2LEKE?5(!`))>}xI*Gfkh=(U_^REnTLsoql3ceImh
z{GJlTI+r!#t4FCSpHgho!Os(fXk_=FE{IPJ{uQZ)QYUfTk>h)>l^7iCzj<L>Xbu;u
z3|BZv$<N#?l`=GdF@RZ57C*lF0P!?34gGsgN-$T^RoZN}fvnTfBS`KJT)_WYmPj)}
zjo-8wf9>1;g>*|b1=*B~m@*1J73L;-GECPvLEYIO`(PSc6z9I2C|_nE_wRKg1{oM(
zOWP57fO29*6#H}NG&%sTDi*(yYmT8~!nL5N@Qf_&Uk>{hw(c)7Ly%`M9i*lS$?|h}
z%NV_*%{5mPa0z{}QBuj0xOO$fm?w`<V6VXkW4Y@uu`mN=SI_++xH(vQlYZedH|r%~
znAk*GFYkX>oV=xQJcz@6MWO(~#t)npmthA4<X=xuUho3<kboClXE7&~V^K4x!t9a4
zTHBuzj0Wn(`<~zp64|7E&Q$G*NZ3aijlQzB^j*bhJE*5Em@*h>AOyEF24adzeH#r*
zf}BM{V;yg;1jQ4Z4iAh7YtqbM6c+61@9oejlDte03gfj-Dq9FP?=(L-PEFC&SXt&0
z%s4a2cqVm;d>zL`{hM->FJNl>0sVtPcZHBW8ci~GJ7xx|dHHDqH?qOkELVx&`ZuVu
z%%^0N72^^?fc_307>Nty7b5=$^8QjIh{dK)gY*Q;*iyAxc5uQd>0SJ)YAeirG`DCg
zm>U|nSbHJ1woup!btojM?=Xqt1QB=3c=XW>SiN_zi$kQ!aysHMNJ^}Ij*bJ2KXL<9
zL#P>7loOR`$}EME$&(~yC{=|;vEiKg!FR5NrCw6u+v@tB@DT9Se>=b~5ttg??%dkh
ze1CRdx~T3~c5e@^rAZ5091|>*2<at+m^IopQrd<_zK%19_0VL`09;i*zC4v`Ka^`H
zwUoJx;M{dVP!kH09em`+wE^k62PUKNdW4y?`SkoePWqT92s^vzjN2`;fgPWq?0$t0
z_aW)#vd3MHBCuziEPQvUxpcYDf-gA0)BCuU0Et0R6zr>*L$H5KFA~b-@wXsS<SW9U
z?LCa57)MGo4~okAl^T>7nF-qOu2YUX{xiGSiwwQH@$|A$-{inX{|Vf`_fJnlltqK9
ztHR%f2dkVz;h9w`#H_1I0ce!wDL+PmqlimHg*&m;DAGWjnc*%3@l!DNQbJ%iO`&1~
zCkTnnstSq#!k~RKvokDA^)+?1PQILp*7P%JNJx-f#g->l@6<}T=4cS2ga)&!vBdVW
z0fD^5voVQGc@x&y$G!;W$McHkn{}sS9Q58rr3uG4OtihsffmqFS^dR77dteETkFMn
zk(Kxss``j!`pJ)1$`!a2)jg`2)1Xs`Z9^qDkdfoiP~!JhVTN+>SmDkoO?<AOW#^<+
zws%I>xKa;glg@pgf5~Mp+ek};C@am)urM-z^>Z|}iOP~M`F2Yb736Cv-7>=07f;>e
zy;IQoeSY^LK|!gIUnf*4f$!6oirMeeT|Q^HX%gE_im<C6t+rwou=lUY`tQ~Mgw7=P
z`Rvu#(s>6@1NZ6_Idbv@1Ldu_Ewp+b)H?*`NG-1lvA>uM#|D14(&g^;nMlELB8mQa
zgx+VNC2p~7Rec6MrQ2|!W+Gp@4a=%s!Cu1X(tjzKPBZ|D4E;Zn`yZb1*n*-uC>}9!
zN{UHgz^n}w=jEWHyFdduM1A5BI4rik`)fR)ewxfFpi|V24zpt*mVQ(Ples(q*j`c_
z6@TF)B@*V;Wsd2&ahs&Vi@GK;_TYo>fG^1SD#NXZ68OPkVO47H{+e-&Z0wQRA>(eo
z>vx}he2W1oLwZ4{5*LJ{I{LQqI=mer?S3#*eYWGBc2Dq2=lJaGOxuS{zvoS(Kz>6x
zQ)H3+zA{t*U=^v^Y&ZvK>bR~6uv^ONdJGAG{e^-9;j*zw#48ptOlf|cYef(#iY69Y
zA|8qqO8hn2_M9{0GakIBD70;RMA#QGOb9^#or7@caZU*>$?N=Yw(}=Fl?o#xh5_r>
z7mRArn8S)98D=V)rmWPXX1xs;HLNoIfC9xXO<6AGyt2S#;{ZkU%}z&+!AM8VPLzxy
ze>1~rtYobfa$LKa0{>$zZ#uZSw-;m(W0oi4fuKjlkJke%s?SUv1vmyd$<z=7I-*N}
z!Z);*fwF^3omV^qw~z*N7*0N}8%hM%=%s3%hs#!&hXggj8^%_n)DWw~D+~Tr9TSLx
z=K7?n7K(<LK>+r5cA>=25&k0|?0t!ke-)So7A5JjJZ$!l5Fk-0fGQpSple5Q)qbWI
zA%|Z4yQ(mx*0(L-yud1hp_@HHLgHVtxwFS`hX$ELhxYD2dyqC)8;__Iv~66vYw$!<
zuD>!zX*E<ft;|h>3I>+xdb}>%y&5o0r7Jds&K_5RxBD?WpSK6Q4R#<PJgn`&F*=&E
z!<*Ny+|Js^+vuQR9ZjEz>aVKNXlet#_s@XBIThv!1px?!)&O-KJScb;V76c<)+Ev7
z8>j8Qfq(6O(%10-G!d7u5<kdhZXMJPwwH@oLI>qqa)gpn1{@fkj^@vV`c7oLGR829
zM%cXCNff=%zKnK!PL2}`$p~{#0#_9+v`HidZlU8WwHa-j@~~VTC^B9HYHR2FQ*ys1
zm;A7j(u_mWY)LwE2Z@`&F3%OOcpKs?JS~CngXZ#ZUchEgchwz2fCRE!6isn^*xK;L
z9C-nlRNSU!VD@33g<<7t!`W=5L^c0A1RRdmhE&EDKHeYf&>DG4mSF73+Q)a)iL2R3
zW|~&7@t?LEmSes`Gt{3ph=%gRStpFl?j$tkfFZJ+gI7cMpd#Y9ey%09XZFW&g|CW5
zVC=Qxj1MS_^r%$VfLKB8@+{%=%J0I$8C=!0iK2s-B#{t~B50bdq%6D6`t~Fn)*+fm
zIJO&>B>}EkKf%msP1L85z>bkB#qEY<=FZW(t)GY(f-roF`$0w&2_+0{l@%LASN4<{
zj)gSQsza^|1&w;;cN$*R7B?m|&gb?u^=T3|U@XlrW>+fDgEOd+>p<Q|>dmmXj=64_
zKl%|NH%M9JY;*BcdKDe~qFYeeq9>D6Y9O&ePesLXgO9fAjFYCWl)KgDX<oinJeMQK
z3W=%1)%N#L5K23a(k@sWW5=qrn7a>a>gxB7HPM+@iwZ)3fDgS<rNaE~aO`&QhPlXC
zCet}fT6^E@1IPd2v9M%pkfLN~ZDg6mg^{F*Uq5K-72Q)C0#zzlxs8_?*cS^!R>AO%
zLZwO_H&<=34@-W<n07$#ms9ZA-dCblTQFB3d$(T8fHJDQz#uizPPaBQH^_yA{6Ce>
zB9m+vgE1~U)Q$R%GEgg0)H`gK9?cQ<t`~aqkg4id+i3{IjdKP4*rZyCP_vSwlwP7Q
zxnkLI@onsLp`RaGQ>hI+NBCd*l>)CR7zk~$?xJ($bW+a}u^CWyiHoXWQ@A~uWJ|iT
z+z7>8hJqSxC2J6ufW{0z0=1tyOo3UYLx4>!o|rQhi*BQ5S=y_<^fcdX)pFMTQ1B!4
zWV#y&pW}3Xh{ZzV+d`)E&dvu|>+F612?=(ZL6Rn;^&){|O0?V1G(-MQwSHs5;68Kw
zTpfG4jS`i+ADEhOQgypm%@H!A!VZbR^Mro3&*9;OSmKHVqd+FoU+_rl^l<j_QzZQ>
zlS<|mFx#R27fX_8aD=1y`=~nm|B;ZszOtQ`@r6Pi{T-u5q3u0)@>dfzYFxpW#{_Ea
zbNf;qg_OT&&{q~)m$xX{9q_O41Wg;tm>aPcb!N!@P!Blaxs><Rh~pw|0fBc<AT}=0
zoP|j*b<gRLEPPJspB0FJ&_5a)^$y=M)CavWl$$hzL{Gi~rRhXM)>INj6`^(bi%L}W
zs<YE9)Ww&&Ri%4+uPPHRIQt4nHo^?fhphxjp7>WK<`hBPg{3StKasGqwXo#nqc#+`
z??*)T_gP0qrTpBO?HqI^7|RT!<PM0g?zxA|Y(5n3p$mVq&~hx{q@^owFt05wqO5c9
zW*}A(24pbG1=fF$h>Ipo9Zv|w+gjzX0RsXO{97+3`sYWKSSk)o>}%cF-*2FSfF$Ec
zzuHoNn=wFtxd0H5fp*@vCvyedmK6Ns2};sIv|_32q5|d!_rb8&1C3hIyabJw+eLUY
zx{9bDSN6T$_+8a(E~46AEK60iT{&3u@y@J{**Hmu_qUraZ^ez_TB12<7<Q``-ZY9j
za5%{dp+%(3j_$kQ{$hI<Z#rR#!qkRrcswt-f*ft@{S4y`u(Iiw_qI*Ld-xs5*}{fQ
z@ean&ipuhtav}_dsd^KTnBSt2hs3_8mJ4eFwkzoA_jq-H!1~bQ@G6zI0NVvWyVYXT
zA4r#4Y>Rn2Mm>=>)%iIONrDfKp0R&tYYTK;4KHd|?W@LN#*%UIT*>G)+4TG@gc=qE
zr%HK=_bNNNAc6GW#m~&p)!A5o;uNI#TTI*e%cad2HLVenhcKbUjHF7xl<R*qLZ_Mk
zR3YS(*F+eAiDfDGgiV>MqFCO7XP8oU68s1tpU|*=r(`#m&xnAt+bbk05r@JFVMwHe
ze5r{s|1IONAzlA<Max!05ZJ#rY1;FEYJ1TvAI9(F!>875CUp#S6oPlpgMk)~OR=o2
z*2!tSF2RcH>3@=4aPuhc9he8=cJc5bimgOmK&es*I>PB+_f5rRDmPvte~Jz$I*y{g
zG8@QNK8EC`#e)q8%e9oG+>M)>*t-BnEej5eAUK|KeZ_<+Ws0W7Q1;9QxOo*{FQ8;)
zKHF!qwFs9gTQ&3{!@mrngkJ3LfRXOSIT+UUI*j}lWmHuAG6G!v)A}aBdCTJhtehlr
z_g0s+EPYQBn(T-fl6%5WNk5HT*<aT3)#DoOVaG6lOd0qb1f{9ZUamD|r-_FsSKC!G
za8YTfrTyQNBk*Fj%5GCwS2P58cgTIWPH&`x3O<o|{WF^JJjecdw|p8mouQH?$6-WC
zoX=pQQu3*V-0*xPj;EUkLM9XO_eRkwYi0<e$P{Ln>KsoyOf$9lW+W_5urg~P-v0k+
zxJ8N<&Jghfe|f}TG*K;6AXleUvy24%{;l#6)^6z1?`7y_2PZeXZWeA-X!GqVjdt)C
zeHt(r<u8L3EXQC&(ewXVg0hSxuty^MQlmB){lNbgMAjVm?5+c9E18DzhaM6NGh{6B
zZfcCBWK{981<3=#s5S@h1ZV}(s2`5|^GWq4Y7UOWsu&ki4<jzUqfI7B8eRLn(7D%1
zX)z)<=RWukyKLib6V*M{lF{$amF{CHbl2ho{^Oq^L*U)i|4#=kbou^oDQQd8)%(gV
zb4CFp&;IbgN;v;;utqHaFyud63?5Yj$xs-(8DCxJP;S{mA;b|j0DwJUzcL)_RT#%i
z)(jeQ_>z_S+2n7&X~NLwn85{4H|TyF10JWT*^0&&H4l=eA}%AbsvEM|kwi>FjtK2>
z)l_&+yBar|pk66ssFP%$i`U**k;*8DG>w@UZC>vhjo5j?vDSAV4i+0DwM)}aX<vD%
z-<#O;P%EZ;j{B6LG?zu)3j}H_yV2~@S_px`z4OPWSqYNnN40zADW!!fSlZ}6U<Cw(
z;cH>`&>dSY4vhDgN6K-?8VLOx*fj2nG}L+Qy)1}}ZDk0xz^D_e3#!>HpyjH@eN0WG
zS`aVH=R~m>l{ht)mvWwyIJ1N<O$OMb+OWk?zN&|rh)f5{+5}EEhCSo&C1@60;t?t+
z|BJ7;fQqB-mPQA6cXxM(010j(xH|;5;10pv-QC^YgKHo`g1ZwOg8u{L{p8$pZm(vB
z#S9C&pYAQSt7=ZsNjFg>s7vx$`3o(G8C3OaI2_9Gxql<~TMp~F1bU-`>_wqTN~e~G
zavTm*Nrkz!rWf><Xu)ALFH~_3*f!+o7`m0DC*A)t7J`onO7FUd3w(li4!!GrsBQga
z$rSm41hGTsH4I0SOQHfJw>OQ6;{v6PZ}7`N0yrakyUrNyFTp(fxe)5-e<1Xl*e)<k
zrYk65H2tZyJ@~#EI``X+7<xlq6$0(QLd=W^;D0Q)GjU#!N>@K_X&M0*jgZpFoWWhO
z+@Rj1Kpku`R4N=fqLh;OBjetRRRkS)EFftO+oJH!(S?suxq)w#IlMVgI4|bc{Kv+6
zPqa9@a>k_6cR(g?X(=o|u%q;g_J#le>{x^c)S&Bz*(~T`%dj;WJZS{yFb{*loNi!S
z;g01&p|SeaYoU<4@qJpIXei<+_kT=pC^7UKP;6{R!!D0%H<k)W2(6<cvu9%DaT07D
z;W|EIS;qKEj=*klu6=u)*o$eND=ne!)(TSEZt!3}Br{2D8^#QR`(iMG+8vdo@d=Xe
zZEL5QoRGmAgdu$eqg@2!4POU4M@2)h3W>(*iAMjm6W-#5u^7z;6}xR6P+a29R^xe=
zWuLdxiwk|n^nUNZM4x(PyQ5pFbLr-$83P5a(|9|N03DJ2L7V+201S9pCISH9AU_!9
zSaMMZ$<OUnXccOeI*s9Sp4kiTjyce`n;Of;CYkN&$BY>`4*Rx10CHX>06FSb!EZu3
zUw$Xj{bDL;O!v9S71~w_xSug^lVfX=@AqP8S;aPkum}u69defELOA}W2KkK|z2|Z;
zFW!d6d`o{ryKvsVFYR8{9^t$0!pIuiTZWg6-Ex$gxOd;F?{_^F8@zYn;=jm)B>Qxn
zMX1{CBl>pBM2o%!0B4u3J`Vf{1UE;)>8<&p-xcY9T+-v`jZmlU<Re;V;N)n~^Op`<
zc)KkBK#v4Wf_*$Qi`>ED$o78FHRI1ZC*xB16X(=uC)@19<1uiDJIo~Ma(>(@8mf`Y
zG^LK>=edZRaj(dg8}0l-y^?2An%dUO>&e?YKs6pub=U{@xDJ^HnW8bd87l7G)kP*Z
z+(vxtEjo7Ul?}-0X1|Qv#&m_=XWS3YdjB1@=FpOw@C-aQ)hCr<lRsh*K}zxVp~&iX
zuTuu-!fYrP0ELwpV40*e<B(1CDa_{yIBCWc+4m`Q(#!{rn<2w#jd${4>pa`hda?}V
z?({X~G8Ikaw~FNv1jimyK4(I9HF7XtcuH&<OSQc}HNM++W09!^FT%rAXR{FR-p%Lh
zdE^;`2ZOtxUScmx8@v8^Ol|aG`_evs`yO4Kfznm7*7G-<?wwSM9ftU}u6{&7Qa5&<
z%#O0_f7Ya@=IEIqz#;#?i4EqT;Qv2arJE&+sIN%Tyz+_0GmGv91MW1{x7apZ#8|DE
z$WO9d=H@8QZ%IqIx@?zWpq4q71YR5@vD&^T8nT^G(}xZ1f{}~P!IMWy6$Y96$6B;0
zwb35@K=s_F;hHG22+EX1#SnA693A`jw4CtabkU&ks2`hwMLT5BB5D9Ml(SNB=~C%N
z`lOsSYb1btwHzWu`Wf3QTR(pwrGK@AxTt^+h1lS}1OQ2pDuE>G)0t4*PxEO{6J%zM
z@!a8@p`vWYUTUKeDI-oLtT6>n%`yCd#UL#E&R_^=xG0Ej`cSPFiTIh%dQm^n&Q(NZ
z&(%9HzZZRyFPBGT#1*<lBs+0ntGko!wNGKK(x^2^cp}_lW`2kU;nme!5z(P>Yhz_)
zRhWuoEgOq*t<?3d#Ap+Y5pBV;koYOU<bbk_AT<6fT7seeQ~h-?7$dW@JMvZS5twt*
zGfsR~jJs1--WH?WMC;aafXy;HqePak0^E%kwI1gAjeBivc&}!0hws4qdPLCMbe)c0
znYb-2gzhKOF4mNu+caO%mSVQMR-0Y(h$lnm+E~7Bk$myHHU8oEWHpkP;yK3H-mLP)
zc`B|!T|J8Hpf0x!(p|51ME`Czh%1W3(OldEgaAu{q2XZu=V4)Il`hu%i2Dg<-Sp4x
zFny-3e+Y+T1lQqVR=>hJbJAkoQEFKkACp>rQ1)Qcwlp_5C^f$-j+EKJSJl3{d!K+?
zfKf-FYJMe^a41vetI6RsCE)CHa+&3eBkvI_a#4dh;%76_IShT1ju{*cnI}bf<#e<@
zKA_=UgTE^uJE_1oun)r{>l-@3(?zn;WTTz%oSCnUtV>rL7EDG90h%a2;_Uy68iNHw
zZNzvu+kS;7hR!V_s04^ldW$6>Uc-VQrYu4K3OKDuF!c)9Y4%&Hb<0SC4>(#>hl{EB
z+1X$VBXj7b=~G`<<f5L2wnndds$M%Nhc(5n?&SRtfd*l43Rd3?2HybZrBz)qVl{9Y
z+q?uOE~`(U_oo~+N9m&iftUdodE5q@wl1~7Wf*H;uxu#5I-Fi2oV(JrNdVtYE7c!<
zm>YDTZTL%B2QF(DEM|L-P{xhD9@wNhI#&QVTRtXr(+7$_AM|Y92>LgYA|Wfit@qFu
zeEIbQ3nJ;hHFu?Bjr|$1-NP)tbQQ$b@oBWBD<u;v7873uFeWt01nvFWk8V4<40I;A
z7>4sR3W2Sl{b&;4yjxs$0wum`t9=qX>&$a^I~F<j#Y~UKJ+3H#8F7C;VqJEP=W>K|
zXPl4SsB-3Wio+FbwGP--#(RM|WfB{6vnAx%Lfp7ti81KZ<m`}z$JKeZ%MdQM;MAm$
zA*2=}FbzUr9XR09y^>3(!2luBjTUf0DdJ5j#wIaV)wKN2h0f~SYA3>bFxrTc*Azs$
z$WtwWEQ^Nlbvwumn2%}}h<M$D0bN!6B%q$bB;@)rk)eK|Xdgkj4Km52W68pVus9S(
z;&Dp9=wq(n`?h4HaqW((d)J@-LH=$k&#AYW3fft0Nx@(EYf~K!RAroMN(Bx6Zav<Y
zBQ7q<vxf*D*Ed>~qvcz=vxc$twQS{Tvwa>hys0JQVV3IEMC?&Hd)cLrvCn!C{QNEG
z1?7<x%VI)I3{ajHuWl4MRyU41cZL^#m@D+bv0}8`3$i@2(hYLpaIU3|M2W31+J&LQ
z>ifby_Zq1EMJK`gKDM>2nA4*Xc5bCiI3bi+C|JlfYVnT8d7|>q1PK-<{Qi(j@$?Xt
zPksC|Fe&m97^c|sM(M2W?4a;0LZBE31a;~%o4!pWRA|M>m7u91O2J$|E)GYOhH4_0
z3!weH#K5G7JvuUc;3gurZNr=$@{=lNh!jEM(2|!i;b-?4Xe{SLo|E|x<N~6BF|R<-
zC&Y2d3>61oWT;cIH-83)HJq+YNKld|0lO5+zK5=}8UjVojE~moi|O@cR3Y~fV%!Rg
z!bh-oXF8u!5=zUZ#l})}5n!1{>akHdzGL0d<ct>B*8z{;C{AgdHXz@^%*t<OWe@}_
zxs89zt;OEmGx$zTrl7}L(l&deY?cK|ne9xLS~ca;BAsz{1Z#FFoGQ)pBuC|IVDSDQ
zdoY7}@AZ!BrPb`wAqVg{zvM183%Jnni9?xl$HG6qHKHo=3s_;9zcBYWGqm??*|a`Q
zw?R7C;3-jFl`E$N1_m0JmP{C4jdZ&h`O56E6rM}#U)-rH%q0<HD)T?Dz>c$;-=?k%
zmng;_Y%8vEK-Qe^A0>dmGA59X$flzyuu8$VdWNR4Q;Fi#q3qaedUNU(MGU(NO~;`g
z{=!d423dk^!NSmyCeDH9FGBvxu<dr-7j#s)bw+}z$}fk2%rROLu%Gd}G)c@;ZWtFl
z033A7nh`2_RKIMMqDUyyL4LxL=HeIqJRk9#7VIyGZG>6|SZwn6oLzL#S-Ut+3D56&
z;z#B_-Wz>=Zm?9u+Rg7aNenp)BxtJEs1s{pPZ%y%s5_|k*}yWHMG?AhQy+*H+lz7Y
z3p{hnv(>go5Z&o?X@w0dvNS1%KiSc#wM#igCJ2s5?i>U3VPS|rKo>2#{J{)w-Vyzw
z;zNI`W*?;he(c6BS}g}U*{A7v7TQj#en##hiuPU}<{DmH2QZMUC(=BVA7xv0d}dvU
zh`bjRN38`it%z|>)B#21+*e_J$|fnN5POv}*=NTWKuQ{_Dnna9_VwLbHLHR<&U!y|
z3BvnBOih%m37fh<bDD8bCc;h{h`LTrhyzS3s4EOf{U1Iobi=3={yt0n`4~F!C}`+H
z?MsRY<sH;VHpI@xT;3)VA#I$w=(xwo*^P9Gy$f-w&L*C1pZ<AZVLgcLLVnQqgSpHt
zcSQefe@l@|kl_w9dMS63LSXKP(6R8`ABd7)IxTf@@VVFtnc3I^*`Q;96E+~9x?l5s
zXXuJf7YB?fbusNHF^ipw89i|x-r*IRF#DDM)*jFInvapKS=Cor@4MwQ1#5qG6C_NS
zm0B6v;eN#GbOP}E4Kk-j(xfaNs(ZA1Znw_#&Iq%UfIFHd-5?dAP;6hs>Q1Ru)l5m<
z;3X(tspG199mx>|$1>Hn#@2UEWu`wB9&!w2Rcu!|*(AiJ=}9-%lqA;?r`231{<35Y
z`ovwAXT%h%Ewj-|Of!P)Fzq153qKsgcSDOgCU%csG|5K&p5Bj;SNN$^lZX6!&{VW;
zv)_a=s<B2?UFLjkSO>SAc@`?BhBC5{L9G8c7U}c}piL$hR)CyU&eS;3P*XEl#zY?C
zngMr6Z$QZMT^Mb&=oRbW!M4w4VWsgE8)!ix^5;!(7;Y^>U1D^3gAk>^cta7_!yW4q
zZip$@#&4+fO$SN;Qrs%IJ|HSN9I8=KwQSS6M2HLW0!hM^)Yo+0UBN<V8-oD}aB9`C
zD2<n}jYi;-DnGe`eLk?sb7*uBT@bb8bqZCzV3`>BBK`#UK#H{f1`W#@$r*8Pxg!ba
zibmTXXSazP+fKsBIlQ~eNvN?-top9D&G65?{5OXnt6?D@;gOybZY_=5t*4v%7xr8%
zR%@<L4(gC@uWTCGq6*u^&Oc%aU;!H)@Fgonj^WF6c|B8)YUVbrRIt>Y^+t3Sz9@6t
za*p)JDcE1EjnSTCYv;)Ur~0L2p{JG=5{{w~3m|33GyOzVLR{Q=yyl^qY^k0Y651cO
z+VvA;J)B+n3TJFDvAo`^Wm4*3{E_QoecpOtYW$Vo!1n9_nK!Iuu8}0E`NAC+M%MpW
zb&7`qBmv5PfYSQPc`_(><JwqTx198A-yD4Dy$tFcRo7lZo&JyGCHV8&G66*Vq89I9
zvA%r6tz|IRj%lvTDqTMKO;pqgIp<37maXXzWlEG$1MPw050>9QMc^VBpBh>GG~Jtb
z`PmB&JnQ6i2WW_yqBc@A85wvH>3F|E;9XFtNW1cq2$&#=b&r=a9B0*abXH1LC59k(
zJ+tBYnYy)-`pisO+NBo^5S1nmI<q*DT+v+JJYiBMMN^$uNQ72Ty+FJq?*ZLRD<Ivx
zh`#4JM1tIKE7e}91JZ0(4Kvd8Ro2S`;rp|NpP~q@-q+5Xzo&=&Zr?vP_J9x8{dM{;
z2y!Y@dS*P(Vygq1{SVOliuQtkZvb}W1K9R2W((UZxzswuZkfTsLtmx7NzoXwuyz64
zRh#ZHk8pPd!ugP@4d1|n^1?(0l_Et)o&)+nKO8Qu^K$GWg=xB5K2Cf*uKB`n67Em1
zn#h-HRx~|DR4i|+kK^L*Pw^4f%rIIMk<Ukhv}{aC-mg;rT|rpa&p9~X2c2QcIlnVI
z)OMVXDAbL`WylOsg7I(GA@)p16ok@U+9#oZBDTar)!o<;uS*go0AwXyllnu28bQ*!
zWKRloeS`(Q_i<x0=4$Uw`;9qz%c_@fhu>*$;nxOJ@batKc;-}-{`o_yBe0HlkdRgp
zw9CT_Z&E^+9U4oq-f0l2*(`#9g`Ts`WW&a!a{_^}N^h9Ret0}zr&Jm=_;`96F`jon
zwUfxrO6`EUMDslAx_dxL@3qk8SyYvkKMK~90fCJh3ELEq(%Ajmx(Lm_;xv3-nR%h&
z($J6aI5>n%G@U-L_#A(TMjzwK?3@3rwdw=aRdBLvf0ZW1&P6GdvyGopkv`}JUQibE
zp_`e2fN!D+*Wi2C{LiN{+<}!=dy2E~#qW;<WPdXb0<7VnLAc%G6)l||=?W+~^P5_3
zcEukC95eWoRqAvC{RusvJgBaFU51-Dg&fJBj@1gv;rtL$H60l(1|WHNYd@$lD@o|C
zQ!22OZlK00Oeajqm(<SKZ7Rztt1B0yBMH>?oBQbj$Lw$X)_>q6wfAU;l}&SB8*?Ga
zM9Y#tdo_j<#Hv7Xz_%SJk|6%2NAk|C9#}aSw(@5bFydw8wW8F*(B}$&arnf{n6@T!
zaAL%0xaN9vdw?uA%~XVH^lqetHaRJncEbEOS0y){SYCn8`?h(c<HyVKuX*=)J2ziL
z&!qQFp`pn?#ACD5N&9IJ{6Yj$z(M3m<PGt1{9!fr*!^JRjB{*Zx%g6%D7>oy=qR@2
zZBkOAPOVx{dyfh@4R)Lul**}cj>kyN3)Q$yKQByYc8TicY0J$AdpDdjs89>OmDNHt
z)~{A+2~Mb}5^uE5Iei@J@v6{8n&URuDCWvt_DiQ|Ji(nTNGP{%QZ6ri#cvbZ+IqWg
zzBHPLmzh?=*ky#`X)PJ<@)NYLp7*d2>GPz~*;BhbR%R@li+s43%03ZR5rPgQZ>1~N
zGYF}o1i_CnBu?uUXj7z~K7dCLG|aQV+>-R6U624)g}>w;N$bKZhS-BfmfrJW5g7^k
z4}x0O7f<GR5{6QfZOV!ABSDYfvAyf*noA;VvR^QD%NXYOTs@SzJFoZZXql8SjNEoV
zR~I(oUr4VF48dD;a&ZF5d_q@T%>iO{sOdd8LYKS)d1qS6cGAOHrytdy32&bGW{wp-
zDM-L$z`cR^xBZS{bNo=QNWjZL12l;Xl@*p2_Z<=Zn9;S@FW-3L0=9Myo%#s0d@a?5
zjl~UT<=c}T6=WFc?@}w;gO~?k>wiem9GikOP~bZ_3=+6XAJu_$YSJ!#KQLzH`-O(b
z7y>zuYENGD1$~*8)4{JXrV{9>DMoeJ5;N+t=1~3olbciuA-^SrDQie2+3dDp^R2xy
zo}+gb<=qulGfTe)Uh|FW7_N@GOwfV+(4qAx34&N(v{U@7mNPKVEeI;p_AK@Q4lNq5
zMw&2;A(fz!H?xmG6`uS3N;#x-K%`iipi<+ZF0t9Duf+l-?~Y;K!UF0i?{V#7=E~vb
zdz9;40OGr?Q#-|U|M4W3CM^>^x(m)_PaYAyL2mJSH-yRv7kV%OXfe5$aiX<fe=m@d
zzTNktxVX5xB&^n1J^Loxg{ve;JYR>EzlRuz79&DIKnCRJ%kS<m4u>v0-h<(=q*QRW
zecS(}*@3G!M^iSAh@I#MjrIcFmXsEXmHogAFF1hvgc#{5pLLQt#%(2JPw2T*yZh6?
zWwhS1*SCGCxGc#F*wWlvO9=-4gV<NeHN1@|frHIIdy@qmYbKb`ZxsC?S0J3(Z|r<Y
z^U+M^t`^jru-KMJh#Ff)u51Cq{`=dEQzeXT8sug9|2=ei6_Q-Ic(&?mH1YulAj-UW
zF9&{dEfkITqVw2<K#?eWT;I5!&VSMwt{y!;LtMSVg2p9KV{{@Szn9Ts7%Y;V7hmd3
zQ5%(9KLnjN(_gV0A6Xbk6d>o21Hirz`(Je~dbO_{H002}SgC~3H#+j{M1A9Fq_D`p
zCtyG#b0Yr-bE-3sgur0U#a~c6OX$2A^l10U@0(bk#E<P>=9Iu46dgboET+e9!2YZS
z)7pA^qj*2ITeez@iCSJ@1>bOE+YPZ}ja09*kv4u49g%~V1dcCnR%*;#YnQNVDJXA7
zopq`6*{!{-O+2&WBg5%6^W^pUbEd_gwVncuKh;l9``>l5YO1mhcnioXEf;o%ni$61
z@gqAjnY=_5$?kr0nY+QS{z)X1O^smru18i2<b5%^<4+t)zgH7wc=F;{GZ)0mb+G_s
z1E<Y`%s}SjzfbrJ>rp~TS0DFnPT|#@c7t1tBUd&RDZ~r2AJ2%g{nU!9@EiSO7TzB3
z<0JH;iRoi2?ph$>9F+x_Djk7&={HuG+Dem_kT3Xp(NjjoBV`FEybN5~m<2F2#fpHF
zZ(p;;N?X%Pr3lA*Eq)cMb0-u`oOj}T(3W=Dm^C;_HfW@Tn>d$y)$S|#&4pfJ8^ONJ
zebgVuI*!A%;8b%+$8SGjN+Z^(vzQ1@=p8dy&FA7n+8B$sY5Vq%+lI2jXVky@j1S3k
zn{(c6+4A+tM~KQ)=HqS_5h9L4MNjQYwANbqOGrXhL--c0`+PCX?)i-7hNl{6i#@6@
zsH8>O>tFj#Ry!se8;?q&d;R<mXihNd$9&ee0V7bDWNKl@tf^4!+6=t-fR(LA`D+RM
z4)R|muvg9#bB1dIQ0N42E#S|fbfdAv3arb_Gq`lyhOM%ARZbM`!XnlGgB2v)@_qb^
z*arZzZ(6o^&nfg@{l@UV-Dqg3Yy10UW`@PAtmOAJ&fTieFVqN)9(j@Z9(kblh%$*-
z9?VlU=5Cd>SaMvImcaQ6K75qY>I(Y{{DMoIHyJGqU5L<$0*L(TLQIk0`4HyrOsEc#
zqciNZYr!XCXa(pz-8!5|$h9wW7}6D*Lg9HK%w!Xjhw~6*<?-EiT!T%}6Qtln#wDIz
z@iZf0XD#das$T>;<IAl((fK_-MRf-9I+eCG7zXP*EAe84v%3Ot;G~&_!OG8$Xrhw~
z$A~b_AW)uu8=is%bW!c#IHXRqwkG~4@hzL70k;3KjtM`k@Rzk6K?VbqaEICT?rx23
z;v;Y9y?I$DomO(A;`AQ!(?QJW5A#C?g)YyE%9PGGqUkBm!JKi_h!&94y-nv1-R)%`
zccg!zyG*rOeFb{HI^F7NnWew0<f$Z^z@5Xpc^m=fSu<xwQ1YWhhN@VzIt7Uu*6h}t
z5O(coAEbMd)QV1#ms4+qF%zqVx$R9_tfH2kNSvda50wb`O;TJ<2Sq1N+d>;MQX<9?
zSr$JK;6nU`voiyIoND=}`D2%{q6RxdD<*12fU&26H>@0nMwrIbk6v%?!$}28wAt|e
zYOf=U$e-Wb5>{9qaogcH5pu*DW4<h1Zevg4`hCiw<UVRXqbw_#bC|Nhjk0Q1oKas4
z$pPbBcAY*xewuV_JDK`+xYol>G}(iq6=7iuX5ACDMrFcvptL^MzT1h!5|b?Mj~W(2
z&KE>Yj4bpi8(ijy3jgWr6aTa8ns6j}QC!TH9czUD@UbCXh~sQ5w;6?dNdE5|4_j2b
z1=?whb_}MGs8nGF#NEiAB=Mg3Q1b$b1Lz#c-lX*}M$@17_1=Y5c7iPme7-!}qYQDu
z?P!|XQM31LnJ#Cx7_0wf{Y3Tj+j3OtV?D)qZeup)Qtflq4~RzDrV~TnLxGqpObwGZ
zyRi2jc5ChB;V95Tkgx6d0}KQmxq@20L3lp}c|ktiH-(oPP!A)#q_2$<2JnBd@wVwU
zCEImWPK@YANU>=ahVU=g=rjx)ac7v1O0%HJ-na=QKaAMwQ=2Ldj|Xg;Vt;`~ERgF*
zp1}z$!uXJ@YA}<<Lk(5Y_Lbgjf@@8vp|rF%g;u>2iwNN;K?8Zj3?7A47`c#|0}Mk2
z_zv`9TM`G8fl4Z63nIabNz;!KMWJ9~0x%N+mO=f=VWac$KgwFCXPGtF3{4?!O*&lT
zr;?}PTxZrI47hQa!fEM;n(D{aAJ<^9%h`I6uR3^sKGA2gz@{Km{8aRO<Que&`>vM<
zG5cGqCKXccMHrUI6XCSwv={4;)xe)HQZR8D_uF)tKM+LkwA4j{eGCsKVx?d?nSev+
z^W<K4b4*Bs9ym+FSYCC)?0&p<PtTAS<+0ud#wHqMfHlwY<U~X?<OqjHhJk7Tw}hK`
z`o}xhFC9XCGo*vLmFOLqDmBHty&olDQJqUorS7Hl5;$#EbC*cf`KkqNq<i~&El&La
z;d1Y!04^xw3j}C+fsvb(#oM`&X=uB>l9<02NLXzBm?Lu8ua47f>#L_n#PMQfNXXS%
z@mqg^h&NfndIv@XVY?*9l!0pf7<VD#8oVREk~hV%67v?C`wHEXc3mNi?#qlK$7~RK
zB1akkCnOod7mCVmW^^5v^C65vTwEtW0cNB${8K{@y>*>%%?5MoVi*++oIE$x+C_FW
zD?1`>i3zA+ojt=q*RCWTCBYI;KR%3bes{T~VMqTCd`nI;F5=QcAORmQ67&}Fb?3Ka
z>W|gU?*>xAsheGbW0G5H&CU@%gx#2cdC6d(Z8aKa9!)|$f&OIbe_BR=_DKJ85nfh;
z%*qA%LeP@JJCtz`7d~R*ccy?X(azv}RWH?Bj8k_CQ0D>_pF_Z!!Q69IKOb1@4Iq%j
zTInc|rqDvAF<eoh%1Nn9#nUQQ<{FilQ<N%1;5Ho8n`>Gj)hK?%Cith|S%%CC2op!9
zC<5|6587!w5M73YR>1aGogao|A85Zrlf0C3rf}avZY}C8l|)S7Yi!zy50;jI)ApuA
zF%=>N0KhQnffE#<D0{>D<^6G3)<zV-$G6j(x{*(@n-6gzt;}elZ7!U%riga5$!y=p
z284D*nPX@N3P<c;ToF})!S24^fu8<vRK(<@E0t7l^H~943oj51ENpOHXCFBZfJNGp
z2rI7s+CQ}a|57@!1t=(U{CrV5xirZ_?EfVN2u4Ms?w62++shHy>#K<X>9uqcLVw|(
zR$JaB1_@;o&1?+I|CRj`3J3qH>up?GdnqJe=HmNy?t9S0z5c9>`3JL(d?%OU*`t?+
z-KMNSCNHqE1r>1q{NCV&k@s390*A4VS3g9+07!4GB4zc<uUhj~Hr=&UfX;}v0P*aF
zzS;J=5mGU-qu@BWF{?!xcfi$7Ez%PI4IY{)J`A@(Qss%Me@sFdUonJeLC%Ap3*6Yr
z75OS&isy>dQOCHHEST)%BYe7np@&Q&R9-m@iN{c*lr16TPziAj!caL5-ch<O!DitD
z4Fp}E8Zh|%d<%ZUiY2v-CKB5^Tc18Hy@)&iHv#$T1IA4-g^q6BYV<-ewYOfrDTn=5
zI3@?HCWkr8QRxZd@mu(luXFuX&erMML^imnpxb2D=wIu@(;Ly8+DD!fQuC3HBA7xO
zHum=q$mGG~Nd;~~(Xq2)8dVw-9>)OX$`aTa4)buxOy$;2H&=vtI6g&-&q;wXi2mRL
zw!%fsB=jtqSUxx?G3hZr)VZX%-@*KF(bR0#dPo0AgF{1jL)%6($5j#w6OKqzpWxAL
zDfKE(m5RA`j+##>EMI+)<(Ec_%C0s}$IMr;wwlLiru<Ibz+zlOa+a`3mFO9rbQEEy
zW3eKOKgo41<_erHGRvu<t=5h{^c%0jZD&kkqc@>{DtI<*qq%QKN$f8Z^CJ_B%#EDW
z=mM20ip+sjT!qtK2i=U_z{F_JR{I1-j|{BtN7Jo^+X!0gTPOP{;&n7VJzI&K#B&r%
zN(cOkb5bkPa2x#PzkIJKW*e{0F^aI*pO9KLK|2aJLqlWprcf-RSfmF0^a_}d<gpZB
zWE^h8^uW)K{XpsG+9vNp(taUWUbU|0#v*2m2?HtVjb3-zVjHO1C?PhB=U$UKz`afi
zZJbX#Vp_BGAPyLf%xjeSOxCbp-Jip)5K<4WG(fYx>um8HG^Nye*hxbVIZwHc?Kg^8
z)gud+j51;e-YpM4hQdMgId=ehFhXHeVp%-{Is<;W;p2v!=M`7=)R3rRD~<phf%9k6
zjH1P6v)uwezlpsM{l5MLC9OisC7F5MHH8xrn@1!Xgw~y~Te!S)B`w24P$f}%>S>$U
zu$o=a8-{C&H^f663#v}g#3ISTx#GZh+?N2rCnYZ-@$qde@x=q6Q3C2s4*{aY6iQ+V
zDJ7iA{d!K+%J}B??q{T@w+z+(hJf#+86PvSU}@YV{G<+A1il|-V*XxbyGIJH&;1c7
z9W<Pt8`-Cp@1VXp;TATIV=G+4f#2MK!0Vy{CNMcveUdIIZibro$(N^D1YZ~u&$!Z(
zW7p?H*s;lv$8_fP;qi=%e6RNxOluDX-d$<CCxTC|2a8l56tu}-MMO{mLcmBf&LBn!
z`(`Er{g0Ul+$x43xspRabs{&AOtTfQP77pACn&bqxO-fhP;D5fK#VWIsz8vCQ_5?R
z0i%J}9Rg~IEq{QHjE^en$&9}{+p=|xbMgo2RwTbOqMa_I3h+k@wH!T5pdCTc@_x6h
zx17kELR+cimDFz;0%uHz673_<<CBe{ZvI!+s!dX6gYe=Z!eA9mZYb(_XnjR^-Z2#o
z@Yj14p6+oP&};GeQoqK~T?EHx*^|jFxX$aQTY?YgXkD;M!qC@85HuR!Y;twVjL_N9
z;DDwQ6XV*k7!B_5*lhZZ3rC1WTvl)ll}i>RQ3*z10BKDODMAM71lDcsvtmM0MTlne
zV4gsf6hHz&o=)CLXn2T!Ku||GlI4jvX8JWMDO%=+A(^rG7PI|vuBjn*P2S&jP&dcz
zjl@zkdOWq3U1UB%kF0`93KW+kUc6A4$A9lBCN{m>hXVlk<u<+i<(Sh=af*^HLJMO8
zUfFvyCJjzv{4Z@yus96Z3;Fp)mj0h@jb<iOd}--8!i#x?^CH~zU&6C5;daPDRA9I|
zKQ&@oG8Qn!HE7&bG|upY-x2pBM!w4#V=fpaV5Wycp`5#)?wV0=G7(sf6=WML=Hg`G
z7{!MhEss?H9LIpdN}3Oet@o<BO?h#ukj6~=wtWU66r-j<L&^Nc$F{53eUp120FN^#
z>CG=fw=}Y>pUBN6>aO^3dK72~!=RG3yzT&!-NwxJS9<>jO{#u~;C#3CHz|Q*iX_Vo
zSPfn!K3iiq>VlMoIbB8goZUG}bN#Y_MBk_=NJwaDoR6~Y9){Sdw7ULXA5@}~=sC7b
z#tCT&Ofk9BKgab9w`nJrd~>JeyiPHTpFf4hBtE7#HU+zUsiQNl>@J!UL<+nbag<4g
zy3im1wUww+SPEL-m5z2P*yuEfR-@yru^(^@Pdlf=EJt?Nj|pW#Pl}F@t%O%B7-_|i
z9_biLO9cn{ZdtQHj9tU~iXpwO$}7hzu_|AjyX17-<X7k&ayYt`USxW`Y3#4kPhtA1
zk9yEPukeo8_*&~ihOXK0gA8Bbb9}?<`puL6BfQmI)8umL!H8qjRsDU3)eH_N<rHM>
zYG76BbUgd<L#9#S*lZJL(;rvU8W39PA@#8#AN~~u6ru<a;%FEF5S(mqC8lO~G*Kmd
zPlCvk4jZixK#@|G)t-4ZG!JZnj~8Kndddb;R?kK)8~AU8T;v{ji)3jnL)3?685?Fh
zj@@+o37%cbxctBr^N?&5goTcCFcYHwcz;)2pyqre+%SFE%Sw!&1B9>req^#px6)gN
zt5X|hHsZIXC)c}nw1ZxN^!KkilOji&d?!>+V?8uH+fX=4z)$kX%eTnn(YH40NVSlX
z*uGET;Hx>g1p~0lI?Ug|`<fbk67|!8-81AJb}6rFXdSOw-cK%Ivop71T+d%`WnC8M
z2f3o<T&HJF3HC?k#E{v$Nw+?+YnvL{JXQ>9iLM@+wTBM}e%=@9Xl;`;jZ!K98hAG3
zC+|mISOX@=0c?O!a8!OW20_j2X@@;L0C<!*II-TuAtt>;E7Hy;6Jn4T5dd`nApNCM
z^X9ds0yLvJx1z-gLIb4dT$w{`zhZ`QY_YFQiVUdC9AFxtzfSp%7g&uw!2gGxOAQ61
zS}8cPgdBt)Fn(G8D}I&Ay~QufzwvAIt6CK@z&#k$n+^C^*V66RUdlt@7j{fbFAqQ<
zHkzELG-Kkj<IBDCjyl|P?z&m_b~O1g1(4<k3Va(n@CyKdmz>{Zfb{le>b6TQG<(@s
z1R)t;UJ-x-a08#n@nbKCPjpFs3~ipdpo_ZJ3}ra7DxhySOz(2cW|NYVw(`8ZTkkW>
z%M$?bg1dcq`_>!j?b#g?!shk6YLi(`YyyJi6hx+tFN7g4iZ+O=N$k(z$U?zD#7+dh
zAz9m}7oHR)lmFD=<4m!-2FlE}zdx*IzJd4Kn1V&UgjMTt+fo@&YN<o~U1-95x&ill
z>VSro+OMAs)t!pM+UD=RX+@81FF-qnUD32x{kn(z-n0{RN@mp+UX^KIsxxz?4!v;B
z4~;XVL|qHdNQy=7qHvvXF*?GY*Kj7fppw|Hjruv|ry3)(FGu$F#gC%{m4ar(wL<KZ
znv2dW!Kx^|79tgd+)Pi15z0B6kli>&g%k=S#O_|o>?93PK}Ehejj^0Azh{T&PB4j|
zhBiXM=jz=^E-M_}#=!IH@*<i9B>Uh1^dOD7p%PWpY)2NKYro&R(M?_)zdKoYigHhG
z787Et3iN9CLVYI&K=_-XUK}d~<I@?NfZ*V(nStNFst+)IP3lDFQsKzd!&8g?XE$;M
z9D!QCs93(FmJyLi8{yzVVIg&a-|7cMaxVz1m?7{)E@%sLbb>>8{G|C{4KySz0+}W&
zh>*TA{PF1tPOc#`_MZx$-G(`Z!9T%27+A!Ad(pud)bTckHOq!MJm%YDIqU#B{d`}t
zC~JUJ9$PX!XV9BYX-nsTSh!NI^e67|!Tp8jqhhCP>1XMrmMiXc?cOeNpBrphK7!0o
zo$pJkJ`iQH{-W;RUsWr*YgKXvQQ&GMQXk=gG4baUx`n!-kLC=}OHfmGQivGHm}{6G
zYnZ=cJ9)pfL;YC0SVUVN0geenF7|M^Hwt;EUi#xjL}O=rb@hOK6Qf3nX*7p|?|~F0
z9ww=aIzY;DCPh3+8xkc1lXn<IlazaP*4sMauA;Y+3a<0>Yg>xXZAeFJN@WB!{(fO-
z(UarvsnogShb6vlIa^T(4y9NHw9>@%22vc+<V7ncy43*v1l$&_G6>v(Hk!09u%R=-
zlelBm`b*H?wrQ3WkC2}^K%XVeM|@rzD(-Z~x8(a8=Equ(J>74w>`Cg`H5=afO&Ky?
zacUR#08#i^L3jFjU<L$Yj8}lOz2UIAPyN*wL@KpaWyS6hxDzc;F4`+kw%qsqlRM^x
zd=9P+2jZCd1Q5benpj#EU_cD?%JYY&B}HU)!L%_q-J|^b#h*@z&Vm{97_JP~s3p=m
z0q*dtUd#46;`D=6v%l%iMk)`#lY`YgRdZ&tRJA<oZ_gx#{oO{-rVR<!9bTm1uNo+z
z@MPBW;{LjIvqf&y2j5>We-GH;l{!qkcuu_o9vKjvWd*7&gA^CF*)qIQ;M^Qiqs#yU
zG3wml5OL4FW_9z(zygEpuedDn7|30C_;b~C_q@qu!+%5QzCjbPqb?ub86Z|tY{AwM
zg=<|wIXh|RXA5MUKpXL*;Oib?i}@QsfhIm6Y;Ku+?++H0rI7EM@L`>E5~MHB%l>eH
z%!HIhxf&;rXc126Pwl#ckm>Irf}fGR9~>O0SNn%3u|2fzyBRCHRq>v~^rCPeqpg<2
zl9N9znYqonpb_V}E=&w*!J5i0G}<8XeQS{~+}ii=k=+>GYz*}NaA^%g6eP5ijMT3E
zEkfMP)ejMV662d_v|9Jl6?g7H=28PzwGRRv)TzV+XyfvME5bD+r+5pdj7=chZ^{n|
z!4UH;S`OTeD-vKuj@C;B$Wocgj`HJkBQPCH)(Zjr%iM|s37o&rGr!wu7bPo~+&>2B
z62Medlr3%w<;CULBrc#GM5|tWp-Dj@E@IKdd8ZLz;2P}Vehvx=N{7bu!`=7eDa(f&
z<j@$xGJigN$(E5QN-k-vZ?LfFLg>cGB6oT72B!m+5r?2d0ZOS-o$VIAp#R4RLM!73
zVMJ?P<{kt9r7)c6GhJ(t{$6XPS*o>ZE08RppIm6h3jd8c+)>R$_%rQCan<+rA?8TO
zivi+?-_Y7e>dQZR9s8=a_}WV3g?kXu&#9h$Tyq4K{V~K{nkhW_dE!^7kjm6Lx{iM^
z>8nSY?c!M7Z`N5P6sK$7Hi)7#!}<9QYFnW8rka%Rj4=WJtKwLtu`@##9bAfLe*?SO
zOTCJQSQPdTxBxUeySS!3YC#VDR5*hZPHA6K?^Ry)vl^*}3<7vp#2AWJ-1zH*G<&T;
zz1YqC1tsiSmw<ArJL8hH5TiMyl(WHAP}^6f4EUS6Tn31ed|^%<dnrACYC%YvRB-YF
zT^~rLU&H|gw5|~<MO@grNyDB9L5sT?rTAEapop@>`F+6qtWwUxVV2X0vaWw>_*Vj|
z?h54#sv5xh4JZ_QMQv1r|2K!URFp6FC*i<M{>xb|$P5#BV*v$UDx;GUP_J#)zXXXg
zNt!B3<C|Cefo8w#YUN6S4n3~}NryKnC~5R1NB1|UV$iEZg-RtkWwcP{8W9apc^DLq
zJqW>4|1bo32b}uEIHdl&pdG$3V)ygz3%d>?d4M9a8nk+INV(W>Kk*wn0#>G^t}IYm
zPU}Jo^*^`)EmuT{pl^82=x#dQ0i!!E0f<O45D}Ulm~C=AAhiE^i}mG9+PEw>Q2+VJ
z_Umnvd8fNqee%gl0%6VidZ$M*g<$CsoFM@Ki+q&d8)c3#JE2`KN%<?3u9X2I51g_n
z70b9WdOo)GPmgrHH+gsXE*<D3Uz?^MeysejGj1A;BrGBy8yX?h&yp=)Y*^KkLuJ!k
zMqS`DfU&3u^<7*IFg6Jyzedy!Dg=bLx$R$_%nQ`_>TPr*{B$$8DgZ9Tj2giLw8=wx
ziFgM<*3iFl>A0g$cFn?(w?0oW^E$9yNze?K$$o(vmH3zQX%FDR`)j-G{x8?Cg7*L6
z8g?sW_}bYm6XF8?nOj93Ca?$)zNP$JHp#?IpzPx3*D|SVyy8>~@0TnqB>pBx1(jT7
zHpcFhLwV`Th`~^1VT=ORJ4DuKNph))E`7VHNeqP13D_b7;!a@w*}ja0=Zi!bsIUMc
z;ZGX<DH9SQqnZ7G#t3$nM(6fnw{Z#p*DHQ=TN@1o@K5Xh*O2M22Ili^x<kPdj%*$X
zwHArAdb-F6`u@oLY|~XVs{Pm`<_XLY7j>Sa$jjF5esl7>pgq|yztYp1xiQ%MD?<fM
z3Ss$^mYje--T}E3%}-9evelNWKcfn3{kJ=*ErX3?J65zht(Cy)Ik<Gyk)WAtsfyIY
z$Hsx^Yfb=8odmFG;xzuj*rRBnGch)nKHh85jSI6;B0{T5U1lc;_5w0}ll;%l_T`><
zjNbqHfIv?28YkWal>e2W>>)(4%K!6bE-iYUx|g`+q}J!MA)}AJ2YSGzw+sK*-CVfy
zV`FdYNGgQsRaQJJ=k|{c+^vw^|F)o_-jJ^@4cU84%}-W%I4>0-0NVI<<7BG~*)F5`
zf*d@8{IY_#wnzX|0J-FcnESj0&gm@o@l3?Ol{KJ!^a)Z<>g6*5fDaFhe(_HfeY(I6
zYtR-S1qG$}>B>E??W^4L)XCMKWhnQb2R{e8rY0RK9v0!)F!6AYCd+aT)2GyK@=_05
zBkMl=TEW-7u+;_@r1*o8&N#|pnijuy@*Tp{&ib&Rn?5-TP0h48Z(X$PA1%4tHyW83
zKUaJK19;0)Y=QuGQr{qHFFpuBavh*r4)W!g`VgdIB*;-iL`eVRi5bElW$I;GS^=Ud
z$o6K{xZDL5mC1+1)Wv)9ZYCO1Pv(f}0Rv=t_M4LyX!jTZsAhZJyh(Eq^<e=%wBl}~
zsFD)6s?*tW)KVz%h0w1rCz9ZiLb5rgNEhQfJ_r8p${Y`3)pzqR9}h+pwpIX3OH}XT
zIRY@-svCa+Ym{b7JZua3`x!Ez-j|WTmRp;gnH#mrXN;cH;-*=w2henhA6iiu3&WeU
zuBtBd76jjD1TT;IC#7J5AbQ5eZ~vIU%aZ_58Lczp4hCqSO}a5)5Pdr%YZN^|-86aI
z(AztKkAKRn1;zmYXW&moduH4gO&5zGnnN|cB22e4pk-#r8yj1h_BC$<;M#~_;*hWB
z<v7VQN3HBW`faK>j+odLoqqaCm?d^5bo$#cB8%Y%dgExoVX7rJ%*+-22YsqThDGG}
zb{8)l9dHxKK*P(M)wq{hJyu!r34o{Q19!Ft)gVTcr(?#^`pn85xe45zJ_3(v0Q>V=
zDx%a6_E-yq-V~nR%G-%)*xVNWc;T(*n}}?qJl7)}{jZ!j=m<9KEMJ)G0==1Gn}Ug{
z4K{NEhfZ?Nc{Dz6siL?Z1M+D2K8VP)^s)m*^pYx&S4KjLTgY{sSPG2cLl=4R2Gg%8
zBnU^MU?dR33C>*-snFu^@$e5gR;eTnz*TJLiETvU-ZD7jO?i$QBIGA~;xOpG=~oJ;
zynUm^;UHbuwx(iYvQvHM>Ex8Vlh2d6Y{o=C6<sggEI(;ltc0%594L+=1SL*zxpde6
zI7meG)Edl%_?HIqvVKHm;k`rF;{c#9_uGl`7?|tMpemUIS)(F_g@1WV{M!ovasXgV
z8!)f^dPTqf%&G5nY1cj^+!WXB!veZv-!TTqPv@dE^jxyqX~?`sf6jZdGB;q-Jyu8U
zUWI5#Y6)UC8%1W{f6xn$AJU4T4>1}y4GK{=ZWp`WzC)}nl;_B>(&JFPF^5ja4JPXq
ziA~6PB1K51x%q@=);bufBW`j%ie9M4MsWKzLkc)SEq|XWO};}@yTUD!ezyj2+WM{4
z#xu*4@x%T4DCt<u?&1E>of-Wyvp6f1*|KehN!FS>w)u6Yo2Rv3X^HhQfOe@&p&;O~
za-9PNBcZCeUXUl&xQC~Lb)^0M3coFku}c5;ux3_AeM5^eQrQv8cGoT)2Pil+&<W8f
z5KU<x<24l?k(?Y6-~$Ekv#JD3r>B?a*JpT7y2w2F0tNb*XAi?!;nEO5&3lMap~4TK
zlK_kn(1<a@acMon{+s(&4OJ%M<g9MzMXj8FqlA~|%zIZ9R&|{aZ3%p6aG4kbt^Sx-
zgsfV@NV!LO`y6xy^SmBfp|PYy<M!aEMZHTW__RVuq7mvNmmmhbLVXyI-L*X-ieQP#
zrUtwwBWndy`^RVWnFlxrmATA=LP(j}wa1#y5*b&nYy3G>Qan4p-@c$DR|0ukmjI`h
zbIeQPRj5&(OwmhH@f_Mqb8H1-QMir)qur@Vd~mn99wq__NXcPa)D~1f$;02J>y;DD
zy&b6wm6R|HRIlA`?|=71D^+S&Pjvp`06+tSas&Nnt+9u(Ay6yo>Tzn@2Lw0(%rAOR
zV0s(n@L>d=SN0(rUn%Do?vy+gkcG{K{mHm&{I`vHCE=uU8t=`DE0U|kXx(cPns{Ne
z>7YW>)QHf=(f!2DXo$!t;n93q2%58PD^OrThMS80#zZq#>-_%4|FT9x0KDL!0k6J^
zBiPYzRzcZ&W89->yHx>UH#n80pz>s|s4v>Pe|TJX-!Z;3P*f)%%V+ZLLG(1oezXkE
z9Tlig_n@9##lGRCA*3Mb2&+!-{}}T=G*8Nm_)O}m;vu-f0FBqAg?i}%kei%O&f6yp
zd7B_qV0hb}*;kQP1>P4Tq7|F*e!pNu1RbLw7q`g`N;Ynawl$OxGEpt6^<>d`a$9!C
z*cfsRVg0a|gT#DbmQ>k-z6nOo{`=XqxVpc37Yq45Q7lWGK3N2h&F_^2ns-v)vTjAL
z0+#-qt1*!BposQs3nY^=Ol1V0UC?)NcU^y(zBCJ!;t?$fRcOKIb+Sxf0-EA_O-FER
zs|zon^{#p@DaMRE!k{0EvH)WtFfzP60Pp(lKjs|xXq2zlZqsv%9^uYk-{sz`-EI;=
z;1a~sHoVjc^b~U_I-f(7UN8<0-%+v`=ZARyHS$VwiEUUT<r^W8zdp0eJJ@hoQN&WO
z^*T^?K3b{Eaq<-O?15XjpIS|Z2wYxQLE?Ny3XWJ6)?thT>!-u&3COmYVNX(x*HwOa
zTV)O4T;LzaS#{{QB9^*!VdMYTKG_6lpL}2g_To+9ANgXi=^_Xo+Zo96=@g^(rEFI@
zjISUDc`F|s)uDm5ZU}CIYk1RQ2xuQipe=ZA<va+nC;4JkS9tKgc}oTzg%t;X53PRD
zCRF)`tmEmKg%nU92gd%dGgG{I$x#QKs7x#isdU}$%(ASs9x7^IFdDa3EYy2U6O4vd
z=`j7I<xwxbzU&v5s#NQrOSOc*Tgn)%pWZ>cU1W`ETl(_af<A8y#_lUy3l>40I^1+X
z@OQU&qE&f!g*9Ur2u%oGebNmqG2XRh{~*I0Bl2R}AeO>1OJQA+wQb>3c6`QN<5Ssu
z%jZOZswBiD`U7oJ3J3tE@0_d!%~xuDt7g<PMaHfQGteKjiNPZdn?Q)|M>Tn>>85v0
zCw=wLhQqOWx3s2V6G*KDoVGXkG;tPbGJ-JXa6%_B#>E3o3|CnU4IhVsaDaEPTGxQ^
zx0#d8XqCl(_X$J{X-Zz$$(%pT{CsiZ<qOOghu2YI*;HlRNSQ4~v&X*???EDeV-tGm
z+qysoB8#ZD5I75WAn|_;TOkqjLJ|wZhFLPR7B;_`pw6D$lL(W1hh!0ERl@ER9H$mN
zG_uFB8JN3M<j#-AXwV3cLHuX1^`Efe;NgoK__kJ#l9gOz8YcJ)$8(R<1}|aC;LWMn
z0vn2_Q%D3j+h1-NalTFBzJ`2Bjmyi{O^eQ8+ersG>;wr&q4A^f(zNPfIO9R0?UG%d
zzOsIw;l`*g{&WsPVV=d0#L(A}WEUPyFzJgKZo~?RN{I>L%uuK5ik7L-Ia%-Y^@7@i
zZb~h~EZa&T!%cJ2n@+c|k~+NO9$ykuKS*k@{)L?sm$Y5}W$(ayDVcjeL-Lr|zZbC?
z4uLYm(C0Yi&W`PX(>99qYH|F*{etM**UY+?D*fC;^S{gV)W<1covx+YRXFxmsS6^_
z*3=I3q$b9%IxN_@FS!ifoRxjPH<UrVog_kkn9A$PN{t8nA48dH6L(0=Abe$p?2sVJ
zMLhw|O2P7-T(sOMNk6_kUs<0q9D305TI7NN6!!4!Dk_&VkMPIbJpDg0{glsBRa+i{
zyu_0ie8BxAZ<Rv*<d5a}SuZjZ_OLD5TU>s-GymedK!U4wNnz4|^d?(5e7837PiO~B
zUk19jBsmkoNco1+tU79UeO$JlhSPF;<<IGevK~g`dQMH`f2=@vbn%!B*cuTz@7SOB
zF!MZ{DXF@sz&`&TS?5SBr<fF=@t$l8wI@nyEOhB7n5cUi`YglpSd88IRyGKi0{i{7
zvWND@cPUItmK>cNYVKdbhEMYSQ<a_gr0VR+=dt;DhhtiFuKXf4#DCq5>4VqMW;~{?
zJI6X+ea6ciy9T;+MthwT-Qt443o$Fy_u2T;W^lb&@lOz*PptF+0TCn5nH~frS*9;U
zAD)YPF$yGsvtwhF?KIFF3E<R2$^1XNVrA(TP+fh|7uE^rTd*>3*zaQHBw;%yjT>%W
zIs=Np53vlfP0$9mo9wt4Eyc2h+02__VB>v}Q(P$T|I|iG?{ceYpP5b%Ob^whPU7Z$
z>ye`n4tQ@Ns`A^{!{-w*LyY2H(cB@-S#wR@9TXj0&|-kiqJjgx>+@}txGWyOgWG<;
zeR37-UHK)O=x0sCUzL>ZA8R?VYmn**qP?a;Tr|rtl_%LH`Yh>3FSZ2kB+N0`3k&j0
z42<=SKJNl-JMU5bU?N#yEtDC)#FAo78!)hW&DT>lHeXRGmL3?<jWOUD#TYGOIaoCG
z%w2ZKZQsxRa9lN_g)3M13Cmz1+?0%H0>;obLh6`+t|Ly<U~FKZmWiRXA!xieR}m*s
zgRJCwQwz{d@c5oAzpm`b`|0D2EQ`0t*fF9C!ZfJkLEpQ_WG!Ug%*iMHjo26_sG{>2
zyFA-%cJ1x2H<H(G`t_XH#>~J91zp3Vfa@^gL?MY0;qq9Qchm)4{Q|!BcIsxR#-63O
z`|&h%-tC4)?3npK(J1EDrfXi?f7|vSPfm8uVQOG>Z?<5Qs(}ESW6uQJC`wV$e;M<0
zr9eE(@vi1gk4*bs?C^1$wrHT$Bjx85u5{^xPMDp9mB%PpzT}r)w!kDM1=WJ*B#uQ|
zo<G_IU%sw6Pj;$xW>DkJx^bHIc3nW{C8_CZhY)2-q|9GPwxmJ}n6ks3@gH<|!_c~+
zzewPU<A4_pUN~jljIlE}hbq5i7}!{bI}#z$Jw^M@obVeMJuOxwDfr^xZW;7rdnc&w
zps6Fyf;aPod9x+2{WI=am|#q7eo}s4ADEbQGWE`v4eTYT`Z(u;KINSF0DWcb=2E@;
zn+3b7_w(kd6U5i0bP{IHM>0a>yAsjCeIHiVpV>od(&mPy@0-fhCP`#qTP_Ehs~S>V
z#Iz2kSI#PYDdaaBwgmA|D)V4x>ax%q+uLwkiljAz63<pQsp>9?FW6-UneSD5jm0E)
zea$rDRkS!h_{nNQU{35@vymG~5X4FE1ctY)cV0;I#|+1E>_H}BB2_u>WE*5DOeu$F
z9IvxleO-*F2zw`sQb<zwQ2j0cC(S`gSZm+!TDo!C+etXf$V7ka+`0%Wurq?B(jcIJ
zcn=ys0!o#}4xi^DS-i)cy>`LZqIhx;9`Ms08A#&FXL#9X{riI+-Y<=(KiIAG4rw)g
z)1gVE*qb(HLTT7H$~x#9zoLSX@PeyUH)12}z}yndD(<qXYUqfA`oM&nZtt-e^RI?)
z+M4bTU1SK3Jg05?lck3zy0Ddy7|~RQb-TwJp3y}jFfza6m?A4#2E_eFSOY+9c(2t4
zXUBeF<}&axb)UNEX0WznlXGZfpr#S!QWMKXu!`ya;vV`lAo&sGBjLK~ZtqzN9~bu5
zWQ*+!go6jdDYy<rpiAt}@yw(K|9U@*ucjubP#0H3B<&WDv4q?{sR`Vi`+S<3c3F<Y
z=i1y+D7Hqq^WSN$pP?}}MQWbU;7r?%f=L1cW%|Iu$!AO})*JhGqapn$dr)mRP^wbP
zEfSfhf(z$J{~upx9TZ2mcKg9ygS&fh_aMRDgL`mych}(V?hxGF2|<DccXzitB<KC^
zIp@1|_a9JHH9ghSv#0ldp0$1pP1Wby<tM3J1@n#Y?}>reS{PUAr$HVYmsKC}xozHb
znAKU{d|We~3&)}}SbvxWWELJ~Y-Qew&~qLM*uB-UIHk+=P&NzP>2zjv@#&_1JEI$o
zIZMcH&&=ivS>k40N_ZUhdT7IcSXIB64;>CCNy9P-3jkt>ft0KG;4B3$r!(e*GdFUT
zZUDo6$-GoHJmY`sGLE#NNCK{#)R)R9O{hXnGrBoFokHiR)i5&#<PRS2)eeGl5O{7G
zf2DA8y1&>o1s6pZk)_@4W2{z+JYmK9P>;#XI_K2mb|ew!v(Pbd*p5eiOs83aU-lV^
z&a?aG8qcz{vVtGs<T7Ni@^{p#ySUILrCznlWd$qAICO6DA~esWfX|r-nV)_4cch%+
zqOtpKkD2AQ-z^sg3|fdNPk$nS!UFkIJ^MrTq==aKV+IhXqh_Q2yAanLx(e?+xPEVU
z0!y=q#c+TXK0GRT%Kt>9VEi{CWrej}*95;KFUadCICMrK4lD5r@<gU}h7Q~1$}`iZ
zA+}sxY~*X2(3mgQzP3@^&~f81olE7zZW9&e@VX<+5Fq^y-vrd?aGVA%c*5biVx{`1
zX&H_O{MS)Fwnl`Cv-fXT>@`iD`4WQ5*OBbEmX@z^7Uj^vs(&i~GP)fzH}Covpf!m&
zD1P*BVfc^YaC&9v4+nqZyVhTX)4R3T9p)XngIRZ|9{t~!Du_1!&(061>H!vu)2{v(
zqtN)FZKvFV2k&NIzZFSKFq5SS=c}VnFJ-(`sT9aa)|Jcw&(+qPPxu3R;r(OZ`3>c>
z)hom5-j!tbb>q<1I<VNedAQp-1Tz13%b`@l%I&)Lr<L)JYmMIT{p%70Ii07wHx%)!
z@=kwi)hu!R8GYWfMaZ?r@cYboq7Xu=Ocs;cM(mT~aW{qFuk?Mq*i<?J_IvQ$?dj?y
z4(PW_SWef^hNFdz{1kL#7;I~M`~nBm?H2Mi%VTjzxwA25L^gZV@m(4RSkUC+IwqF+
z<oe*tocgZlen?DY;dDW$=0T9|ESyZ#NmPi|u9lRvKpbUU0=S(d0g>Fj_01dxsD))Z
zoz(Sl?znJ@8=ZsJ<QcsK=SS?1V|8>EWOxsC71Q*EBB!W}tjxM>`jd8c_0-J~iU|qK
z%Omzl{wDe38>~&eGfB4GIChdU-}pl=+^F)7IreHNT&n~+dh(}H>fPCLJS6AS)ZYZ}
zO`b7mICY^{R})(L5_s@U4pB{T5N1*DD%1<Rpt#`S1&q2UG1Uc*`l6AojFW&UnykHb
zdP{k01-}8oJV^K4h|8CRpF5w$rn-lfO-6+1thUPeI5$DZJ2EYWF5i%Hiu-s;DY5Q8
zoaojM5qcNxijylR1M$hOeR02vMZfbPd?1$jyf>Ge>him+X4IG9C#hZ>?nGmKo6eq(
zp;ofSvD4#cB%&5{oEEvyGpR>Yk6N%ig$)S(p10Z|S!jnf$)WNJ^|?LBN6o3I;83+0
zo}bd7jENnO5?TtLChw7gN8J^3BhIQ73#4iCb00<f!ehLCXWUQy=5MF!Y{3w5r6YR9
zM{!GN;li~aT+Be?qG2}`iFPN?@fcnE{K4j>fYf{GlfYI=_7x`lsaOkrC)Nl917ALw
zm@YyGB;qS=|5(HJ)5Dek<J|Rhq$~4Mr|AoiL!w*b@9ndFA6!-!1sgh(xp=RrLeKVw
zHu#+s?byZdbjuYLD<Mv<MO7HCcpMiM7dncGK7GDcT02TEIP#oxrR|*Io5GILvTPSM
zNhJ#KMs$(RKb1gkzs?_r7$YFkd5|4JvnGmdbcO$XVGanVOxb2^Bj&GI)C^ysg2FO&
zE<+j#M8@#z?dLv)g;^(Fu&>n4B_PMoj0@6dlcJy$<%dud;!3=be_<O}WWw!lpg1$i
zauNyuIao@MJ+JA1!$ae<2$_(s_7FN(fE}h*TQ-ufLTjeb7eNfP4&`zO9b#kYnkiPK
zYT+6tN)z~r8EM$VGI*9$G=4B%llq~cl>u?y>dOcn8%(yj`&qjg*9u_s&8q*`F)Fd9
zF+G|9=af*B)}G_e$abDx>C6_>9>sPs*@x5g-vZ>u=lZ32B-)O_*YR7-WEp8(R~1BD
zdpn9Xtkv;J5Q&)=BhZWd>_sNEr4350y1#z#<y3z~!d7=i!qpZ2GNkA}K1u=S(vBEm
zYd(qGJceQDtejmTJJjUXX#X6ca#ePhT)U%AZ$bF+X=i`thT5}}U(BoaQmvK&(@ep$
zNwOEIoMd-MrT*|4{GxlRJJaL!oB7GH@i$7UA>%7}{?4ZDs5y{I2w9nmE!a^EJngTL
z6kFlXPkXhZai-xqRU_Xu+L@f+Ot{|)uj?}DYbP8EVNQmm!B7G!8($V-a%f7ge&b7K
zf2WE`RZr7`y11MCRg9N(cQb7WcX)l2wLEE=)yd;3M=@OdnI)w!7CF4?Y%Fm!rrUDO
zQE#KsLR&)Yd3Sv!+v9E3y84XlXna2>uE+JO9u*xv)*uXv$Z?F-w#B{d>z#Wxc^Y|?
zR4WmC0{}FaOdOyhL?RAZN{rC(p)ABP7G^1ZU(&FsgED?(94mF=V*+}i?d*U>I9xa(
zv?BOzpyY1iS4n=Fq9l7MLloo|hSeC-wWv9vwsS%h+9>KJ+Cxk(kr+|kiPueACfy98
z$qzQDcTy>+vLn0_oNCN~r{npK=i)=c%R>|N0L239R{}^iTX(MOhlVSiIchyq=PQeS
z#&+eAJn$eWaGljy8vKrBw!zpJu9`5WDcfx}NA0gQ{!uwBVw1^eIgJX)FXAu>(+-!q
zvl`yDYV|Y|8bP3<A<Jx$foIQ<Bat?0Tz%HRx_NA$K->lJRvvnvAoVd+kygOM(6@*#
z=V*Pdd-kH;ka@Qv;(qdRTePZaPaO%bW20Q0SA7xiT|Rkj&fM&Pq?YlBJAt2g+NgRw
zh<;sk<Zdd?{~?dnHwvUWi%7@$!Xmiq?e~z?WOP$EZ&IJ*3j%uKe+UM;GMYx65tDA$
z)C}lAVct<B!muBl_byEM5-n2l1fr5igQG>Nhw^*^-4F~cAQ(2xVHM1G42lF}G}54g
zkW5g4QIbg+u#6^fAkQKLSKt)e1KL#TesPu*WWj*T+>$kAuRcX82)LB4_aoDz2cPQv
zO#ciysZJu110PhC1^P?`IfibeIFPsl|K&O@aaZ!{TC)^WrRyCRGgXoL@n~R432_5-
z5T6%uHsVGbNz3_$?|JRA)1ME2g@sWdpJ4T21#R7%0XjBYngSO&<dfQ3h2g47l#Rwm
z(M-g0+$x>#I6`0VNBIeB!()EawA;>n<}*ldXw<)?H_@MH#Huky#K>4GMRvhL{iy+o
z_-$u<m_el?b>dN4Lw$lU)={ULuFRp<H<0-{;}Bjs1|*+@iB}8f%<r3N-74M){%)8x
zAG^Liy%9a@(WTNHEHliea|$<tM11ifdxehqO&_C%n9Mh9jZ7;${VT+lkP!&Zn%Be1
zCYn1|kWGhR@m?Y&GgEBfQPF;$4g)nB;Pt8Fei{qb-9q2E!AHNk6W_AX)w&g7f-!wv
z5v=hGBJ9`efcU{2!6tme010Ef&ox)85(Bd3Oi|?y-&IYeOavYw`muPLB^;OAxT$67
z%Hc|9DqDVS2Q#k>Vw_FW!@Jw3bO&P9$W)B!%7ftWd4RKxfa(zs*Da%?eMTc@V7#Rp
z%xsMqedS2et5ZWj$?eO5H1cfhq~Jkt;|J*gs|+Y&NX21v*pjcgVl1A3Z?>o$yliVI
zpd<w#l_Db2QeM81v@L3otX6EY9P?#2TeK0G>U&&=;{^s%En~6u#~U+iZVp@%*nFf0
zrpniG(q4Vw$Ea<ro3Kx0Kkjlf1NUoKL`bL@nSj0%wgWKc=x#Dx>K~#=G@_#g%s4;}
zRua<0g<lK)IB73UcL3?3gET*qXoA;ZZn!%Ea@tY0<Dy*KwyEQzhK@jTmd~s4iiOZU
z5&R6ks#mcwMe?KD?<F&%G!XNVc#T>~-B={Z-8XxY6Fo#Y#^l|L$c2_K<0e(iQ^}fa
zbC!y25l%*0;K6OY(X&s^;2CEiS2Ij}0Z7@?P}kHK32^0<jjPu;5BfSt;6J{s>F93z
z^4vF6tL<m-)jr+XJ)IrgS){H^`lWS&>tZ9&3J=8%dJoH&&ie6C_RAFYC66e=^BA7J
zMHX3yD<V=IG<-Bmzw4+zhUB^?%}_b2SQ_H{km+d{1J_P}0pi?o=JoOAuFEj~syUM|
zx{b-O&vi?>K#YyJk+7Y*TIFo7b|>9te#cAgOBii2aQMXYdr7hXc-T1YPb3Za@a3zO
z<_5q|3EIlx8pY$s*Q>L_+1<ymo!p;cvAq#q7&wrI3z1N^Ih4lwj9Bo&qv}-=@{Cw)
zbcPQM{yjfR_$jdCWR~#>dZA$=wyD%XA;;8LBlH;6i!RrBMTdiCz1TFcAZV$JNA2Wa
zw8wkX0+^e;u7*7wWfB78M6m<K+bO@8@s=-DmtY&qjG;$JZVqvx7f(aVBI^L7ZKeUZ
zDEQ*~Jn_cz3TdQMrs+<L2&foybt$nWARR>}>co~GqpZG$%=JL*@}JB98dG>{qFVtg
zDkkLzyTw)*(#nttnemRTDc28L8uP938zMxP4oCSqYs?fbkd-2F!)gu?u{W=p-83ZO
z4t*>)NGwAH2}l9U47vG?ieZe$nIZWq>5+lF<CNCwo#);6sDP`SEc~rl|0yEEHxy~M
znm%R17?J4^0hb>c0YLJW!V@PBem%eg-!elm{w(OA(NahJ8HhS$H_(W5Hc%14G11f0
zbG6*3YEY09uKz$J4?)*)8n!p}l3DyKY-UfX;SApv63|!+`lAZpmyL4?d>k22FfYI3
z@G4`0^UKA3T9~2KY7c7a>G3+7^E&}CD8P^?91le_X9^h)t?t7oYnm0D;x@;-&4U88
z0}$%L-&;-R+IDRn9oiRa&0u~2klZ?5u}G#^Cc(;yx?aNF?Pn9NYVM|+av12NA+@qb
zXpI{T;su^X9?qPvIgE&gzkUekjLw^)80Aor)IlsyHnh+*GLpnEh!>bzKG-&KlB9fP
zK$DP`mKM$PI1a8hL#9gzb?N7|3mJKNZ2=-j?u@V=os^5rXLcJIc#aBAMjBP{w@4{B
zvbO7RZnz;-CE?SVo3agVbYaJ*rf+5P6K)H_r3UQ4Y-I$a__$9)PD7-Jhv`h+vv3U$
zB);z&{_wx$drI|?Fu}1}ckGx531No$)^{L3I1nj<zI0-+%j79fNbh?9a&Tbe9v^7q
zt<@nb@!9igYne#<2M5HbP4%utn^4mqV%V3{BWLp}V$c4Ap?E&i*!ZB<ag5y%&4}Z&
z3Q`YKT<EcG)t;qvA-y?_UCC{&y3#Q@1)?a)0oSqd{;~&YU%ef<bS_5|LHX_O0{H{z
zTf5#rjxXLfM2NJ^jLADW%tQ)=UE%w=gaRToy--r74?mE~wM9^m2uIymxx2b?AA&lx
z>L$e$`{^RNQUgCB;C(#}UciGMN5a-ihx?KCGN>vEwqUv+s4Lc=wvKU+rR59VLntlu
z@l&RAX}W4hv{~q){?7SS<upUZ9K%d?=dr&GGxN-o7yZ%WQRp&+*@1pAhDnM;vS*i&
zMdQWOW5e4)9u5Xr7|st}6{JeK@wV&&rHEFf9G`$@3~>o07Vs1^Svx~Clz69aOooGz
z*y(UkCFG`R<hc5VuIv?X3_-^Py$oEA=8BiOAaj<M;SXeC90M&bvSQq($91#;<#t12
zT;*F*y;gycG$^=u#IbD>I~&7M@uq_2%NeqX#mI`0vpe-khWC~>Q{@Dt5B-=fo%>YU
zKdiHZm03$Xli=M2gr_u=hYZALeZ8yQ3!-Jy^;?K0Z0jD5q3fOkJK}GS_nFd!R<pQ8
z!wtGhtkG}w>M<82Zih>{UFF@Pxxz6N!JyLGh}oe)uY@5Nc0n6VLa2<H$jk+ObolU>
z)xIcb>1#85cb%gy<%=hC)UEZ|7LFmyf=|(xjr6R#w-pJT?e^QX4xRAp2F}*T7C@!O
z*LsmW$m_jdET8qRn^WZ?DF;{5pT!KUJP!%w_!d+KB@JG-jc0w1UeLo8QM-ER!d@t}
z5$AhzAfp?-v)I1h5IjwIfayaadJhAZwS1i!pU@GI&muGDRFWY~g&n8)yK;7K5)FRj
zKa}H*<>X`AU;k*KAnMEzah=<|U;Y)>xQUgCkLkR)3LnFtp}F}xUu}l?$ycMEBML8z
z%j?z$?WcsH9CoGePlo-Jc=P9zIU(AaO~)PeXmELaG}l?#dm0EtUbXCjf<P{AI8=+v
zy^hZ1+PhXq{2(z2o5H2=1_JZuHu*3~sja2}j7^>`Y}Sk3EdgwSoS#~sCsCbMEfZgr
z_w;gctfu<N@DL>#!ZpU<?~Sa$fU{ePu-a7jf@;wRo9N=OK=|y+SDP0Y0iVS+X=ks=
zk(vA(Ehf8Hzic1Pn^xDyOI@d~QR<x&kW2&oehhk@D=#__6lQ_m>U<hdb4o?u1?Qa8
zUty+&aw*saOdAfIx(msj=9#M3*kF;kq%;<zt(IC=WsXHvbX6|JONc{-!P@<qi@}s_
zv@M0dRi7;uN&Q*^mK|m1Z4e21Qn`yauh8n5@U#4PG~f?LcZ8MQb!xKg9{KLit_+h*
z{V#P_=v$5Y_s<`DiOVvu6;!UZ_AaZ~s@Bl=o6ujGzel@=gf-Pq(H}PstsYK4xZfO1
zy>694-FFcrA|`Deg)4TT-o(A$&tC$}$PPSZic9g+AU@Y1*?n1OaImY146gtqpM^!Z
zHYw>TP>1Dg-kA1;0fpvBWFrYxBL^t58I9TVT~k?Jf=Jb*gL(}M4fm3??FW5Kidzu(
zGY-Tm<-!oJB+DGhK-w}=*v~_hjAJg13_k3~W80<SJ-f&DLffbX;A7xVU36%5+T|Uy
zAgat>`NF5|72~Sqv)-)e$MHm^w)S&GL7I=O1M3<L;uG&5XCB?00y-Ylzg3O?i-Uk|
z&ocof_ZI3>lO&<-FRUr!m{N$CjHl~yB^(_{=j_9G63aN~2=LX%@u52b^kFPVAbkN&
z<^4Ttm}2Fy$hwLhb7Afd)saFCpS4gF&!qLmkJ5ZvA;O2ocDfy6TeM{FNfi_iU<;Qd
zVPdn7@#d}3vczIJf((Cc^+<ctmg5OwpwW|~pi|Pr9r*o>o{$WNFL2TlVKP!+458Dg
zGiox4QcGKWv@Is6&0ETiPkG%eofj9H03kLPEH{I7btLk=2*9dn0(@c7Y_E`#H!$ow
z>5uNNxS^72S><;jc-oqa&+Y&e<fL2v-cXglfN~eoaPYDC^iH75F#nYr`VJsj4SZKd
z@tT$(J?3^Cobgu^${}yY(JAFkpJNHuKn&2pg$E3Y<%kNR#)+Y|sy@sJ(}GETE=ma~
ztnjrwrbZUaP;B<r4*6YsT+6F-v}IUXl6k78?OSFL=FeU%(u!=lK~eYd^Cw}%U4SRA
z-pJ+<$1j)|bo=Yd5n5dT=u>G_+a&HAC6#n`tEmPne9FH%6imMtZ`@y<A)kJwG%JVQ
zRF+;Ss?8rZ?}9-P;wMcn96*y#C6lxl4ANE?aultZRBv5-$IWS;40IOmY<WZJLbE6g
zP(Ehd!yzDzm<z>EF2&9FJR*QdvBpkXa$bp-a2Xu#JI!5~>t#3rRh2h4VF*T(pvkLh
z=rOR}?kOD0lUCp5i{w(;)^de7$k*a>5Wm@8R`PU~!Gv@-NvR1<OhvIq9W=v*xJ;Xu
zD7l+82h)!YbyC0xEC0Wo6sG}p^jZ5}rw)yD4wv`0Wkh7;E8N@f^<b{49TET|N2e<h
zR_@<cxY0myH4Yd)K;?1jU46p@%(`Ji5(Gy8qil~)09yH<U6R{XjzU;7A<}`~Ml~!P
zU?4U%{EgN-J}P0PXF6!CwW`YzJ-im!bOxqE{HOV}^s2dnzl^oyL;GKR20iM@si2*I
z!9H{HFIb?yVeZTFAAh4EP%HPBXHc#iyF{ju*b!vEJ^HOWr+~*q_hd~lAQ&E(L;q*O
zfx8);(_!YXeId5WUg*C){ePFOJGbQ-rX;;^Zx|q2_YH-Ntoj>)kpQ}dUTE-ykb|Q>
z?u)sCoN&G5B?G(oWdG8U#wx1>LFCvdzL@%ifFS$x^rB4kcmLzi|0{+ksFnk&R8(C&
zFBg+pF2;2MW6$<b(eEm_8hGKWDdX7s4B+@pIp#K7lVe^o7n(NMAFn@JA2t@6TfoA~
z%zgo}8e7V5nmtj38UL_U+HroiU0N)ynyluc-5jmY-LqWE`_U9$>nXCCx0?1jffIe#
zqee<5aX9>EVVPvbW<M}0MK`>>fLc5GlBVT)jqT(v0;b}5a>@<?mUc}ki={a2j<wmx
zU&B#(a=%}WmOSrr&&x8n)4JJvRO2ODS#FVRvqPoj`Wv6Mhs(3z>u-A>Qi29Ay(7wM
zmp!)OW^aedE6)oDts!DEoj!-vAHB5D0#*b<A-%;_gk>L;lJ$miGIN%N=Ds7R$oz7e
zlxlXve^i1+O$BE5WQB!RQ00XIBSqfr%rvR9tUpJHC|jDN(_UD+>~u4E#bnt|J_<l`
zTRq3ma6R9<KVkNIoirc2kzKkkGJJ{kQ4bQc-daMJCb$5-T4T=02tpmAe&Ahg9Ok(R
z+JCr|Fon?4<u&ET0)q`-fYh3gL~xcB%ba~<oFdQU@TAipE+5}}`bGjJTS*U3F1?p-
z46owzNex6384;|@W$YA!$&-8t#+!)fEv_(*RkW#YMzz}DhCbD8m`v@HWh>s-jK#TR
zQmk9;bFSDaq;LstSJYuf_=liuC=D4X`M!6M!_UFiN_*&OT4P1=pQGP}4QQP`AEfB2
zWggL&zRNSR%f|X%btk&D>ysgeQ~gn-{YwrN*+H;8OkY2gAe{0MmG>n3IX&`tD)Sya
zbi7oZiXL@6SY6M0FxESPz)PGzRVWQwL%9Cy2h7~{FOSWnP;f^F9|{gdqG%M=5U7%(
zgZQxbpf;NmCJ!*cm-Y2%4%>W9O<*U9PKcX1A}=OKA}dnPdL#@!o?sXF9G?hut??K8
zOgW=xRdYMRv9sXi+qP_Advk(rQZ0i>hep~)29<}Rc&x~fQp$9E5w=2KigPR=+alV@
zjWAoG*x%S8PGgc-auf(0B#vZpRX8RXf+l<-%0<}yqyqKL=?4Ik^$cIRz3^uHL|7LF
zCW(p!=C5YsZ%Yc!@gG{me*(NXwXI`f_`f}DmUDPmHsuaAVlQQhfWk^eWWnSi<vT^~
zvA!<af|Xe-=;mfy;4NoC7k@d-oIF`5m(t9oI5>6w!voX)xNHqP5fVP=KU%)Eo#WII
zXu$sMKz+E;);0NipKA=LB|)-@%2imqltbt?hGWK#)_miZ-i>;iXqkQv0BlN~=<}HJ
z|H?5l^H{yGvAj!vT7B_IT`0Rl;;7qH@UUBtwE4CuhN)zkj@u-0Tp@j@vn#Q^=VcAM
zAcc2hA3@%c-VhnHYiLI>lo_F#EM4(3I48TkbVf(_lFEfDTyZ!+UL4Jsoj`eYIP&=Y
zciN<V#It1iA2aNqhs~cKD3|*eEH~;x_bnmP)C;v-cyw!?wQmRAh5bGeYfbfHF=wwA
zGBEgxG{yJ;63f!L;m<(pMP{4x*8GZX*Q@>F7-irKjw`vZ9EI^XKV6zzshA&}H~pmS
z900;sK>=PtBt^WAdA9Ai_Pe><oq?6_6N+hnqK5IRKzVnv@2k|?tF;V`uNcoiH|za<
zW9xf2t^LuRiIeE6L;g|kvotY#mMK@jI*E@ArNJs3<v3*O)P4$9NTX(giZD^7o9#Zf
zB>e`Z43_m$Czd6??x$<d`@O0#jAU89!Wg}?Yc!Ek*H1_^90ggJ+acyys2f6o!Ng}K
zFdsqf>Bj}zmr`od6TJZwDEKj8`V8>Zc@yAPQvOr0rSIi~&;4&=ic0t!cm>zR{hxt?
zp^PZRZ~^{fsgh@ygigH5)m$lSD{eI-Bq2IrRM7PMN@)^kjQ@U({}z$?5$ho+jkc}`
z#YJStv{d}vfS|g#ON|!7knJd-%A{<Bo38D{BD%J^g+=|Y`>JTAQTbNzgN8l4ef18I
zQWm$wYWyw~%LK{>SAlN)cY0xI%b^!qw|PBS@D32>@+SuOTlcp&F+Xh*i@Luz-}UXl
z<MRpfzpF+5rG@;Lcj@&RdFOyt%<+hg^fL|!p^Qwc)pDc23MIhTDoPk~l#+wyOc0FW
z*|&<q^-O$S;R-51CUGUjCY;-1%}ZtB+Tp29XyNpF<$E4C7JT+<hq&8uQ>lfV(WOn=
z3czHH3AtZSe-V`Q6F8`!V2(=cD>S{lfA_U;CFJ+Pd43--sdQ+o#({a~gs?P4((faS
zTU0{q8Vr(XV1XY-m=q^=^vq*&KX_^IhJClkT2v)Y=Gvdo{)om5i(_oSP{rp!2WM>`
zDH(!Iyc(2hIy;WrBLi7|4`9_jJ%IunrOsE=8HG6Atj)3@q<4g$I+7|`Q(CzDwB~un
zC-QXDm8&TBP}s{ybLl%AVNBO{p$Sy>jH8^>zxAP>56bE7dDKNv3wGQ>34(%-qHHV_
zg(H176?8{R0eQa`B4p_IUmjF+aDV@#LMHlw#{ErcT!uNtNU0q{hgyh3CGC0=urfZ*
zO2qM16A3$4rK8#f%C6BFV3wQ+{`Uk*`;UT6Kf=+flZICnf6Nj8Yh`lQyqbipfsY3M
zDUuft1)K@py}+v?`mu^^Fr{Z0v1QK#S62}J`E8?}ssZJL$91s^|KoiOG5KB$HnJrZ
z>EE#>6S*W2M<xP`X_m_<-%Ev8WHebZZ7t23nfv)PnA_+GB5&i$X52<`nDNg)Y?UOC
za5O)Lo?kOMXTR#Nd&>V{tT~$NTX*}u64Dp@NCi=lSCnt6X9N^g;oHBmeBZyD()lPO
zhDL{(vx@epFT|j{fjpuxtIzT;W)cAK7~y#jX9wF_!JN`(a@6p(&$uR7MFj!qTqhwp
zwU6*SznC-~-FZB8#CC;_a`;$hiv>dsr`D`nUkrDp9EqWV1ppLelhnftFJ~kn!x5zw
zb0jfprV`o^&(#RbA%K`JV?b1XhfIlQ=0*OO+;`&7m&zY#=DXhVDB1qIrc0sbzuN|P
zYBlU0J=vjS=c}KPvp~ye0Oto{7~UV4{PA0XlZN?y;^;vl{+&O7_E0_FAyqQ_XRd>0
zpgm#L<D*(d1@rH=h&(~S`V_#|1?b^1G7?nk`IKPx<A-Y&71Ji!JZ;G9&adQjx{{0&
z7kcYImkSC!I%@fpcTd(bQ-OCY^hw^UbJ|owstC#2dkn44x6aM6_RGYH3mF)(U*UmN
zSG@xTeaZMBd9byq`+g>AU9RiWooxkgN^<tw6gw8!0U#ND9;ukoL^(*yXjq+zrCgRx
z(`Z#c3v|QGF$Oy}6CR6?BkZc`8c&fkq;Qw86<gu;$Jwb2Z-Vh2A^TGKehmbV?@P!g
zHr4$-Erk?X`a;gWW3wov$ilG9*};m0lgr$8+k%Q*S4a<eSImTDna74^#8P+V2L*Dm
z9_S86nurXgY2}Gjd@e|0ZBB>a(9p*%KdLyx=pD>rZOf%3aC=4wrwecnH@dK2U|#p(
z1e0fyAX^Y8pDZ9zid=pBD2p{Z(%+3UTz#klw&TacRzk^}1gck~-^np4YqAmR|1ld{
z4*rthXiGK6C{N6F7B`(D=wXpifWM9$OhK)0Qc}uZN8h|ESZnqLKV1I`E|+R=i05{W
z4RIR?@b;8{WaQA}=E0-)4hU<((*P!b6L$C8u&r}BaK10c@g}pHyjFL2y8~em%UA&F
z3jtu4Xs3Q_=UP1kcM77Y?WVcVkU^<Z<{zCu0Z}taHXJ|zKuGl8^gtS`ifUc)b|KT~
zdf-#6hwqQWbtMY|%`CA@G^lWjd!pN#2%}d3q#f$ULs~B@n$#YHY|P1U_XM}H5AfIG
z`me<B|3HTw2m!%N|Lr72aFf0WVtRi-!r>700@*LaC?@m^tsZyO?Y)dgxJK*{l)`wB
z#8QaqU{Fv#x`V66rzWFDW3I5jJ;t96I$rQdp@h(jV`FB;3G9Pt1cu=)UWhXSm{LBO
z;y(q=eU*(YoZqKN_=)f<NxQ$f2nKO0hBo2aW->@S--0f`Q3k|vi0anO;}fM9zioy}
z9_mA-QCG6o>bihW)AR%LfHAw_j`jh~E%{-Orgpm%`_Ud}y^>G|_C8W@{)G{DIzv+V
zjR|e&;Vc<giBXO6sMOGB7GhBRX*_0i3d;}>0&a^?czm?Jje9ces7jDBUsBp<Ow;(0
zD2ntgBTm@tKK`^QrP%oUTMkj24WrNMRe->iQhk!*+@q1}cCyd*1SA4FjYQi#TMd~I
zViem8_%vn$RtrA!1X6E2JWT{FN%pBmUnet|C*1ILjq$7(UNm(JY`?*dS0#;LA>KXB
zO@tmo<bRPrXS0lLi^?1u?@>A2UB?UJuZuW?>crgfGN2Z>&8_|vE1;8)%KSZuxR&yw
z?1$otRb}NQ#g|YVcspStGw^~JEOLw4&v6`PlryYs`{BWzDG0#^9H%P;4m;V*a_pCM
zZLtyVMQCg<U}7uxI5S4}6J|^-vJaOkxFdmV=_3_4=~Lkd%cDq|E}T@orw+GNw)a$c
z<YI_j0=B@sMl7D!6#hnQA+2*-mu@(xP*Pi}f;DfV8tnb-Qvz1I5`+8UK5Dsnq_;hm
z-uT>WH1(N2J&j<%v_kNcT@Es8w{H9fq&F!#W$UwSn^>&H!GY^D1KEB)`|k;YAxkE?
zw+rg##XfXzpXWD9)X7R?B;M55S_9#Ob#hj8D=WB*gYHxh{iQA43~at=CjZ2j>usDb
z);>V#E;Oewz2(fTkDe`SX>`E0rO*CGO&nfbaOB#ov>{n1!N6WZVj0CVEAt5<=}<ZQ
zjy9LI99Pl7Eai0_Syw()!=tDwzb*Rni!;)c_u1!3M;i$?Bx(lBG|&PGDq_Ivz^xwy
z7(J!;&XwqAZfcC^ZdMD-qyG6Iya~qvmix(GHuA@>nC>36u8!@PFv&_VrZC3$`BUo{
z+Q?MngHPO^0Y{oKT_27-B9WWVCT_o33iLff$Z4=tLrw=fbuIgLey;&x=lGHyeP{wi
z8#EVZ_8wE22~3=rRtk_S+C8j31)wvCi9n)jGxeiFW&8d~i7n1G6_H(O^JH=IYy9SX
zme*%qv~@V<NMf2$zpa&RJ~c7M<}t>v{2C&|zHCr#)wo=nTKh74TYv=q{{$^pzC#lw
zE2m}G8QxlC#y5>UFfjMjGX@6u>RlHJY!_=eBPdsQNw;jGqO%r+H@4qR_kRuMK>LXK
z$7<jIj>P@m_r$Gr<5Y8NyS|w(0#;MyogH!~(jU}tjS3nR5)5pyLh7OuL?Rmy#_OOv
zfQ0nfotKj}0-lFAKD(m4PC_#a!NwAYbMB(*DB@uw?ckw(7qB*6|GlCR(oGh{g#)U8
zps_XeK#(NNNemO=hz2jo*w0Nb;lEDA9TvdL4iQ9AItNrK3F<YB4LZO@DwbHGLE<60
zv75|ie6&HF1ZtF0u6i(r)m?voHi$eOi^H;!e8|g4yvAx8a`?dc0sTq>vfK{R>M)-T
zdxw1z-@raZ!3BrqjsNAt{a`Ja<dkuLJ8bxL_l9jgiZ!c^Pz742Ha0eP=~uB-mEB?9
z4x)zn3tng)v{o!&qS#wJeJ~Tz=fVILU<n&HHq8uL3$C2~bZNuM)~{ttW8<ZjfAv)8
z;80-b<Gl@w>0*js+YFV<)QE->04jqtaJWHB9bhggOM3(5%a}KwH%26RvA#&#I%59K
z_Nl*julZ6e6H&wPXI1UM5?-#D?+SRo_m0uU+^-|^qET}H#MvO;hq-=0d9=cGB?E^E
zX(x<HrI5Cj#c|VNYPaNbqCCE6L}u{h5Qr!`YHQkDRN>FL5r)Mkd~tr2;=or{iHVB7
z)&w=lkR6^!ue`X<A}pW-b84(9s0g3lMZW0CBLwJee4aMj{+Y3TK%T{08&B0jgU4^8
zUWCJ}%7LLLgkEK!B1_gip!f!4T~mrIK3H;WyU?LR`&W<6!mM`!f&!eAh2l?@KBoi`
z)g3NC-qzO}O@M^Np({4?-%A+6z+3C?Ohv&30Zf%=nwtZIf`WSV7_r(xri@brna}a>
zX)*8bAP;PjTd16wNEO0VaRn(z>%Yl&^Sf<h8)c(ZL?OqA%rZR_$oVhuiIe4#jL1r%
z5q~V!le37v4CFdV(L-BaW{UZoI)0)o^9B7(gT4?vVZ<pH9s}s9XIsIVtYuq6HjKot
zgAg#qwqmg0no=D|;r18#lGH1?niO2*FIg}=3gd=jy5&dqo7aBqG4&(qaBeOhCxyF?
z2JJ%BK|!r{A}ss`{xHSK&|iD7uN(&fq8O^cD#72>4PXX`h`7p$GSJbC{Jz>Fl!NZa
zJ+I@Nu(XW9on5y*nT}XvAe~!rnH0Za83-nQ_p}OR87O@NZqJImNbw>6LD2tis2e?+
zq{>_^<ole5!T<Z5hbHqvNZz7czm`uj79-{K1otD2CB6T8ogVO(t6Dpxr}*K0tn{&&
zh(0#X)E|vkvLRXVgPklb4-KN-D!)EDSe>fwJ$`v@Y1>yBIpWq*8RkDus9`z3a|wZI
z(ktNP6G8#=sw`D)<vzg9sb+MH)-d;59KT?x*S+h+z8->6yizd}Po7K1u&U7G8G?}G
zhm|A_OnSIh1=0h7Sc`y8c{xpB^36NY4^NSb`u2~x(fmD$!qvcw{e*)4FJE)Rv4!s%
zxC{Z7tH>HEnP-mBoU!kap*GdiNU{>83ec^tT$5|4OxI3F{ZW-s4w!gg{s*V`XS>hl
z{=Zmp7@KbwTal9-!^dwpUs2-g5%aLVB8#E{c*6YUl1r7uw7+mioMiY^H<h;acXYkA
z=5}`9k+&0KKczm&r)r#CHSfk4%jwT)ehZ*_%Sqxf3WtdJ@}=zK7m^%moI4LaVzbgl
z$B$Q3+Zu{g2`*}nx+tf|9w@zpMzcE6_Jk46Z)+VhcorT5WOI*wzw9I}Q;jMfv;32S
zWX3(o`g?Bd_xMKlm>l?~FVUdST@ByP9N$L7I8OT#QC&dlR24BtEPWVg>GQAfwlnWA
zHk9F9vh53&lnqpglfWbz>2VWEKgV;67M5~TV<q6Z@j1W^IE{WwFjvg%k`<=Lu|P>?
zQz>Y4SI+ig3Q=U++%2*+N~cj!A~r7*mf(}jsoy2@WM*#`gdW8YUNIXV-yD5aY$boL
z&`ae1M27XJ<G9{Y2urI}_9|Z{S?ge5!tfgpI0h6}Qq>b((*z#{Qr7be)yrQk2)eV6
z$BU+FJK`=V8c+m2IrZa3co64OA8<5{WXmqcDkPg~bT0lZV#X1QLBE*@vnb4>z0z*U
zrou~JEoIKfNo!krESS7@_i^=$K>kha4)6<GFwabu6MFEUAzI#_s+i{KD$?$5u9@)`
zxAk1<EdYOMzUfzx)6Yupd)<^%#?#&oD?KNg$$@-DZmT?VO4yN}p2x~Jk1S)Npb8e7
z!%{J{YL9#y0;OkgzGXJux~M5mZi=b4o3a^j=}xf$v34UVuCR6A`WEL1YR!dHYUyPc
zZe&WIl!)tS4?ilsnc@+TCrBTku^uTu6IGCJ#56@sRYH|mR^}}AEos$^CHs;H{lAlC
zv$<7=_K+@QCzF8Q^K}@&*6%#Qd|-v82={;ZxR}Ne_H=ELJGDQS)h+G<Je)eoJzn&x
zqKfeC@dq!t2R7-8SAb$aQGor*9qZ%_^gg%wV@k$mZxsJc*wy~N1BYfZ_V2RJdSc|S
zZroR218_MAE=peaz0lSa&iIPlhuuE8s=bw+Z9)BLY!aQadBC6P+j`m?*`}TlWRa3%
zVLqFtO}jHN2LMR6q94W65jzPUA%i~;QWTl&VkD`~vp0g1m_h&e^anokt_}|vF>q++
z1u~gYr6w)?s+P?tKOl<ygDD2Oo!{XcSB4F{9HB0$>4K3(gvc4lUUF1P6JE%M5Bs+h
zOu+BL?mtKaUy-Cw`J)!orf%oOx4!3t=W=WGje~{@iby99+t<f$$_~0OjTT8OL4KWb
zYlKd0ySBfRVdj3!En-zu5t43~I}AMbgvt0!-zn2NKmB-J-tdYls~+!&ak+fr$vYXD
z1W^Il3IK9o0joeZz$_t2Nt-hXtz*Iw*UKoNFVfxcgHru?ZO!;$3LE=k-KrCj(3j5*
z`h!>qyw$%-raxihEi`cT6T*?%$W7|>hz{UZHp6*(3p8GMD?Yz!9X*lEyclmhm4Bgk
z*hn<(poLvc{HSu}=HzjfHhQ{rb0bigeSSEzqMO{@Wp;{hfB0QfeHo_adnS`1*K+)?
z2#AqYJDv=i3`5$G7v0icm+ROG1{g%_8{cOGN4!m1cAFHw-?xLh&qbK%DH9>!#aQE5
zMAOQSH;3U-VXc&P8EIEFHZDwWc|%<+Uzgc$USPU5Cryu4F6?twq(24--ZcIe2Ay@U
z+Xz1`-*P#XaDF^y8Cy7E=}Ygr#p91Mg)*<^y&kp119Y<EXLt-~TD0SggR&mYP5w%#
z-r;7M{`FZG2@;+{XYFYaWZ`AdW^y3p{u|b#$*F}FMATIVhIBQjVgPQtR2G`wXv^-6
z-qGHa_p#VUdh{w4EltdERPn16%zpLyhipDy!B-c=d(9`!q^Z)MakYWfv>$!ctN`q9
zpyuInkroRMeZ$6(?Ua%@MhCHs$MPF#{=q_nzxm!?uIuhp1nPWThU~%sCN~(fc$dsJ
zQsxiUMGF;3oiSb$8Q`)zmN%A`&Sx1_Et-35Qx4}bK^it?6%|3xEe~FmyC${@r)~#!
zb7+j5>$R6mn#k>(t~}o*RmHiE2y)BhHTS_xk!E5>KB3-6%}Eo$W$U69@lE62-v83@
z#_r6gC~-QFzt=SOuL?bn={MXhvAWNQmf);!bX|T!kb;0KBJ!NMG$Dl4Pe!~V1vwV&
zJja&yAy}51XU}}Flkwow%!|_t6o8GI9=f4WPP+7d;g=pWO1Wy-jaVpZKw$qu+>!>^
z*<D2%?%9sUcYDNqaaAM*{p8PodKPcJ!XfD6FWl0?(cCnwG)%g>%e%vG1QYD7D~Z>R
zBK{?u>oNfyVx&rX?^VH~l1@oh*pGR0i5^2w-i<4~9sSb#fzcLEdk%{oweWq}0hkrl
zU0*R(iYBU-_k1OVn!>C}NG41^k9sxXWWQ09)y7$`Y^>vavDK=c=*4-oVaL}aJsRrc
z<3E!Yi^iS8^YilBN3V8=zC}q3O$iT9N_<KAUd2NfvoZFqY3$pb*j3`k54Ft6(wpBT
zj?OXyM;6yQ%VVt^{Xj`kpgzYmocVd)=5<Rh+SCOj)+iD3ZSLU<2P}d@$bzYfOcw;P
zep%5~ATs;}wD<f${PcfXTIrkfai<PJsERdl%%)D=yWNL$^h9A7C(#yl)sWPbVo1rV
z!$$icQwX>DbbI_c=99p{5dq;EcGvS}xMsv!Mh5!?w&|FemyU!cUCkP5f3v0}I2SR3
zfhNL|ak9v8;P~w<gqxXwvnq60@IInFCQI4jY<^a>hJ=KtB-~H(%tp#7JLrAvIP9r~
zIS0fGoD+QlaDl0-OI|(}xmQXmw>`=`6}k_l%*nvImPQ-bdgeDhuB(%_aL#?PO|~Vt
zgN0Cp3v&KU;nq;~s1+sl#T??*nMHqhYmySePYZDR;xR4{Q3-jEN*Vedns+*R-jns|
z1dSmpP{jyeMs((D<!+E(P@(%tSW%c%c<`1lDCC4JpaA2)L&oEPJesI*UHeLInXuyb
z5>t&!`q34kz@Fjg4Hr&N9fx=O5)`Gc?+Fku1`3dW<%$WY{&i`?APqdUTOrisVb>H-
zRk8;X7cHcBol>KyazX0H!X4=`gU!r&<M^!^A$&(O^Rb14%AODmXOE+b(ziAD_74oM
zZRdf*6^;SeeTQ8A<toJCRVL}nMwCTn4HxI!eWEQNVKvy2)J<A$8edkIVB(D66K%0l
zdZ}=VjM$GlP6mT}nvXiA!<FI_DsVSM$Vo^*@$mqn;6l*)`2R|&6J6!2d`W6ft1-^*
z0Et=fMY3Z%9g^wC@h*`CW2yXg6l=PXg6`gEl>K!6xX*2heQF<Vp=hrAWPK2e9dw3|
za5Qc1Jay8`kQOA6sd8`Vy#0LA<5TlfIhut9>3AYxr{1?WX|~q<Gn6ny<uW>+y{qLt
zwg(6^2W8BW?AUOUQl*4I<BAo2>ePW5p@*2TZNuYfi>u;v<Z~@cI7IsLqbWm6iX}5b
za)VPU0SPcFYxp7>l&UZRw0q;WS(<5}3O877#?y%spr_FYe5XN1Lw)0sL6Jea#Vl4z
z`ze@l=@+q;jcm6;n_wtaiu`xTC_56)MyuUe_r)T-t=J>#Q%jm-#bd<_^PU^zEL?l>
zPG1&(p4r*=m|+(Qr$czDmMk(aGsJ-|0kc*5cI-3Q?AY~zz|v=*kUj@un!ZM`DXi4G
zI}A7vONt@A=hcJI^M&PLyiB8V=E?mhg~|iB3Cf(B8*$yJJb_UWdz=z8;^O=?h|^3|
zTT2FyY|<}y3Io3`tuSvQpdJ8|d=5%JCJZ<DpRnWO6sEuMyc8ZY(kd0vB?K`Wb13ds
zz6K;l<s3kLpPw~3`Oq_9MK_VOp3kl@*GfMl$bD-~uL}tu+z(JmlcuOPsh9ip^YicP
zXh_F~EFE69*8}(LS4@`=aYobT-b``ukZz=d8+bzj3tHtOQtJ>>EiTEXo=Gfu7hV_A
z(GJfi&7|@Kk^U~_cV}rcpTZ?AmEXj!RUavbx^=@VDg{ImMo7lWYWtbTDt+2d9*>Y<
zn5h*j<X8efiDHE*WRAPdqBqMTB5Au0^cE8iO(FYb*j?vkQUEcnvQrF;fAF=cpMYTw
z?*mqROm@9hfpqO&z^<-}<v6p?#jiA?iACEYIq_&Wu`d?Np$m4eT=>Ha2~kMm1m+1U
zUi&U6=obHlu2g@UPDk2u-JS}P6EqM5(|y1T(Cbrz_;X(5<ilhJpHL2Bt-O@6O`q4=
zD*vs{$Vtxf>PYe@^_B70;>lD8t;NAiGrvlEva5B}i6lbHJtdfd&5+cK#ncq-8sb2!
z4OckfSXnK`ui@w{_Zc$~2)$j#p`+!N>6*#L$a;Y+<X6oJZRO0D$<46aE`|)Zl?&rv
zi($>m8%FONT;yuUY*#0v!^8;b=}7C9;(a{cm^W{Awp&TX^zFaZ#!`6bULx;8^ko3C
z12#yPHW>7)IiV!S9hUV(9<{$nRmV^Oi}%*6ePT&o3c;VAHEs&m#;|y_dCw}_5ZSRc
zW-v`GHzQ}7c*uX*zJ~RWuMoeC4T^$=AhO~^27$8Bt;>n0xG-8s{OrYCXL;+#jyK?u
zA~(PIh*E^&-ef4l;GjIyLy1SiBc&Uw@<Lkg|MJQ=k?T$dwsShkZ%M?AniBs|;3QqN
ziZ8mx6cL7m+V(-T$LkVzEL)q?Ab^vYo)Mt7&KZqq-MGpue-&s%yqH6^6RBLbY27?c
z`dE;~%kNe^cO;d0lpxVk^xVFQ%R?m*URhL9pj?hNdg5(!@6<WBRC4oc>Ao$WTof$8
zBw`M-Cv?T{eZTsDnW#+Hm#Ag2@e1<ZE(pk-$l&LS1;g>9G;;YS?k(5$`TJH6%xVWT
zuroFZA6heRD#|fhPUv3*pOy#DOtBe$4;cK(*IMigBHXV%kZ(K$V4uqIAUcMW^G_Oa
zM>tHjF?x`7ZiB6eEIAP(_4kwWUJo0}@!pI(FtlHf9`&T}(HYD|MEVC;(ICKU-Zvt}
zwFII2K?^b%N^z{yOT?pz0tC_GGK0s;2TZ81U~ft>#&YRL%}j@}%>dvv_<#n;_44nK
zfbK3oxUNpsm+8Sj#fo#eJd%>~`lG9wmHmK<65-!S3HfldIiECD9F^oC^DJAd9139Q
z!{nix1e>wy9z%~vSgTNwk;9q3GAg&up9>-g5eEtiHpe}`lq*|9f4c1bS=O^MZIgu)
z+&W_Gih``lCidlv=b`OyafJ-gBroqMee;pSB~p0PU2m{Pu()IqA_ii6AhGRh12Za<
zs^tnT4pi2!$6CFf6apab4h5wrB;Y60Ha}>S&G?a)4JL!!+ToB&r(b$=S+|YB$0%P=
zSSr8*u!n{Q0Unk|B@rLVv|&0Lb$y!k%BbIqCH7uQ0r>haAt`-0om&OqwNBx_>72`h
zLIRdS0KUc`=cXl6y>)cJO^@PWPfC{NE6GQ331}1`XCFA$eUD9cf32_;TatMz2_<=m
zb3mh)HFtrw<4pg)LlW>{hR>4D)u$yue2j?S+fxwTQo^1zLTz-ZJCgg+NLL(qX~sv)
z%3sRx%HaBG@9xMYysx4)56%@8MR(FDnH28JM#gz@4o4HgY<1~uMbV9+DxXjX0);{V
z&a9Yu8N>E#K=o|dZ@?&eTn(>uH6f?-2&GO$4lww2On1?6ITh2?U=OSuz9Xc&3PVfk
z)7iS`Bg9!Hf(h-BFDxyXAK{7GJd}mAE9sn9V6{RO_~4PuHJ1~NiTy=fVRne>x?uWp
z2~37yidJxYmcN<)<(CI<#AM75Nr5cSTDY$HpPQVF7ZX5=Hqd0D@iK4^x&T}x$><+s
zAm`awKcX7Pi3pWcFU>F;+iNsQrj08-g40gNHMnIuot5xit}}By@_y5SS%pv&zy7Hy
zUc}j<c_w%L-J!g?CKQ$njB0zHexw(o7K%PXps4;w-D9se9%2{E#xVNMNuN*6qkZ(e
zaFv>pR~ivAJf56Y1FLj5{gx+umcOsqv2fn-svj!N*W4L+B8m+%YgZCrdX9A%$w8#0
z#$@JK5i!Vl5nqoGM4*lHfC_>&fS3YA%n?;Q32i^mg({9&*vSC#hgR>qm4^pIG|aB7
zL=0rn%<}p|=^W9ba|WIT(?mi~wc;lxI9>`Nv)&$D1>r>vsfcDOxx?>tm)z|5HawQ}
z;8*oocFz+pJYap-?QM-Cdy@t9!io0n8{BDJK0~t?i`<*N-+J=3?F{L@jiim<YZA7(
zKt9;D+8rNB#*~bt1FfBzDnEn2EN>A9s$XHZM`=`)p!M%i%Uo+RR>ElxV*k{1SmTcg
z8sA2q7uLY$(R4^IpHUU0w~?dr>fXnt4)JiXsK`J+`8qV)k_5vQQry5bxP&662e{&n
z6c(KKpzja&*P(jyt@MSd@4_ZJBPFT&CMh7PGS*jQUr9M;8A7vfj7&w_`bM`@r|0Jr
z;IbsS#yt&ErH<h><%21${SGy-@OXv;u}a(vaK5r$l@8<~-RW6}QN<^S?tkFFN~Qf>
z$Iy)VJ2f|Az@Sz<K4W7>ijivt5d`xG_v)5k<6PG7&UwA?C;geyaz-yE5=QUO4cpdO
z_Y_A9DjZ@(%o?wx7rK;>!7Bvcaf`WPmra-<W5(?V`FO^qM?dm(+6|#w{B+OVbvkOD
z=OHTY@;L=qPpa^JKNC`4$z|ECOS%6jH*oZ_WCqcz__NX3jpHtT`_aV^$}haSf4dm{
zn<O`S2s#IC=bg2RcGhiM@#D$7H$R`!Tt_HW49IVxZM)xu?E*U46-1^4tmLj-q(*Ai
zZ$F8{R?;|AI1>xZzm6R21iom46#u||=K1>jHlq=O4+=5}H&fK5Ik5Y_d*M!1>f=|7
zx(h9PTiD+ev!;=iUD!0>Bk-*K3ompH?mXu^eu{L=7W`yMej#;S%!ho>U}LN4)%;cw
zKRz6sr70$xtMSsgJ<w8s>OGHkwq7%;=GYCTx$}Btt=?Qe@DLD*4+g-ckCN1jeFoXO
z2dK%s(1(OUusDQb!{J!mU=ZLUlpBWJqFlu6c^Dys9Utj*Z{Hro*@B0X{ZWsm(MG|)
zW7-XR{Ym~&38`O%g^HK#hbz$8odXj^sOyz~{z0fu->vd)2fS(}GkEU*x_MZm$37E!
z?J6%S#E8ZOO0#H<Tn;({3_p>QSROc8!o>$xlyDL5;c&DJtn3yO&mcY}bdAyA=K?dG
zbQc1B7(T4+E@@W}<8q|pKfh&oeW!%$GMv8}-0A-c3>5%^?bJ{P&g0$6t~39C>BDE$
zs|5FM05&XYcPJor7R(@VTvg5-%XuzD82oQmrulru&C?Y*rY8Bg|A1_24m(&B)klWR
zkm+(d6NAjXlmTf%p!d&Vm;i5=F?mi1aR9k+&2<(rIBgWCrupdOK1k6`rn+yo;4>^2
zqKc?Mn3*%Y*p<G27}+1Xy>&W@>Tasc?&)L8)K1M>W1rnRFq?A21^+}`D^a<=9MZXx
zWbImj6ps|Jb^9N3kSnYG>*2qZFJgpKVBDC9+B;*|1?&G30H<O+Gyfngb`SX?`~OW+
zrCPS|C)!4O?g5wvTQwo;C9eqn5A~tbcIXd%xs8t%@P`tiXl982i`KB`uUgnYk45fF
z^m}-V1<Ge`U<%B8JK*0X#O8m+zDf1Kz_3a)qIbaDkGQ|ET*03lk+oR5DeoYP?{e(j
z1}p($mQ=V*Og9=Iz@}6F4_ogT99i7;YsVeiwr$(CZ6_1kwylXVF(#SVwr$%^-rV=|
zoG<4+-@0~p)mGQ8wg2n4u8Z+@-G+c2{erNtTvWQ0smK$a6~>pp{zMD%w=fe4Y>JHo
zGpaM#Vq#Qc;0ARRo;4F>5Fw<nB7IeW>Q?`6p-WQbbMl=6M^4<WU52ez;4D5!w;ST2
zhtqzLb=9N`C2%M`Rlo&r=2XY=u`7>qxRoI;R9SCG&1R7EBS@)lIGu3l+%CoOmMnrb
zp$Pig8w&kH>UyHLI~e9$!z&tSD_b%6iy$a#QvtnSm3kI!69dS98F>Ath5s7_|Bt||
zqce^${=Hi}uD#+k;s@VHcP!<JORgSk_<z`a|5upD02F6UGLRT7D6udamZE%4?ElY*
zeoPUJ=YBp5PZY-Sv}Ii%1|$A&p??#2S4y%4`ty0`^O-y%=Mw?l=TxPF9kcMe!e@6n
zPvWN>(SD_tO3ED1XBzrIier8y&}}XiSm43Eewik;;!BSBVk-z~6}iZl+TB2%ca(;B
z^QB5YuHQ9$G5zW-n`C4djwz+Xr4zuwO)VlBrh?T0<mk>3<WccD59iw|-%H(2&^Ct8
zH%Uvj(9CKmqTBVM@?to;CzbfK>H;Ecq1Ryqq)$LlP!WF1sW%zFX|+rY?Z1A8_tw8p
zJOQ1@Ya}=To&{&OHXC~C9}n{@<xfZ}`0*$f6IgyRhUK!9^^V-n1x|)6^GO=M&Xa(^
zN-tzL3rs=sI`oW6i3qO^Q<|)J2twde68_5dp+pK7i%6oOB>q=!BfK^clfCzMc+!Ll
zj)#T^gUoQm28Df5E@3WmD@WCdVh21Wo;N8I0kYf>H?YsaC$)xPjS)r_Q-qER0b{Ry
z!2mVolJ5|zAn-2-#EV(5@;V(C`kvW5%}}R}Impw$qMhYdS`F3dy|iL}PJcxUK^;=t
zO~?0fQmW&$wq7%f@{UQ{DnAD=t{W)n5nK*vWFd1zsl;CB;O4h=DpK?CkGhEUZn9Po
z;OO6)3$-wuR*B|4efBn%8x6DM0$4EY`@`}N-KDf}76GBMeo6VLOR*8Ov<2(?O_(TV
z;2X~heeuXZBq0N67jHeA8@q<0$#3P+&a3Rx#>kH>0Jd`uMpjB3)*AEE??8{vJ|Vlv
zZ2fx%KbOgO4<gM|wQ%~%CVfraJd13j$l@TbU$F@Ulj_yLC8mUkA*w5Ax>JVU=Dy;T
zYlfB$O+P12%o|yyQg=efqaLg-M7OTV18<A5;tPr7vOUQ2#wZElyfK-7BQKU$d$Wif
zT<*c|!QH=y;suJ3(<5|S0u};K^J6?~Y!8uz0v}n7;w1oFFd^sR8LGsWfK$qka(itn
z#O34U>w^Y*80NjJI4;~po5z+>-dW`D-eA02JoX}u(>^Bi1QTpuP2+1GFckFJ!SJ`_
z?P02kP058JPa?Q#ix)ehJXx1wi5dc^h;0LP`p_mBck2}3GtmI<EZHD5SL8c|*aU6^
z@ok>PV^em6+ExD5uGkk3P>pc*E1me5y3F)u$hknXO(<}wM04vnpb#7IQA^`u$C)g@
z5L_3h46`;XX6X|Tg>%QTgJ&h>O=Is=TsbHsZT^}SMUIRyPcx-AZcX7@x}MCY14=Un
z%rEP7CUORfnklUDIMzGPb8Xsz13fr7w)0`E*}M`g7<KASUD77MF$~EDL7R@H7YV~L
zD=|vUeFE>1qDk)5xkvutk`<0qaGe-I;w8NvFd*@g2qpvr>VYIiNU5FqDAg3a9foe$
zF9FQ=%Pa?sYK9sGeW`h<2(9HC5rx(!SQ?#~ir%PxiT?_6LReL$!)CM|LWk{nh0I;e
zk{=-&=IvP`?<)r{?$H_H-Nl#_({KKa;i%?#N{luV`{g0L@$5W73&C$JvnXCCO8;G9
z0Z%{q{3>teKVewA+Sj)YzR#r&R`Bv)erft%rmK0Xii_O8S(A@OxfvQ7u)0c(@Ncb2
z&k)1Yg{w@cr!v8W2occ)gO4W#5}U9>#tVa<izmV+Ns9#U9}6>amjw5a&*@_djLshE
zm)TPhJ#t3{<{nfP@*-1CWV51Ywnf~n*@f&DM;)Nwhafw{E-NU*!hXoGffn22-VfJ(
zJKv;g3KXZvf9`QPV1f?~v4I-=6oLLA31W~q(N?ld?hOEi0f|Wrk2Y%V=(|xWlg`vL
zV2fCD;$B-(3HEO);!e01!sbeiuLMMe)C?>15(WT+4jD>Ee6!=Z{CHU>kEDl|{8a?u
zOn!P!a=?gSxSWnd1o<*2iPeNptxK~-qjrS#87WS6zV_*f@6q|PykAu{zt7j~3*0)j
zW>F$TotxBoj~OkjYzT-;DaKm%a@jKf)RR`pJrT?j*+4=H0(&yS;Y3{W6Cu$TC~(hh
zmmAN~GLN08m76M=@lOSb*Xg`4n<ZjbYK!~)UJx#?Eb)`An{Y}(Q%CyKk~YXKQI}^8
z+8Ntsm|Tt9qGb2If8mI@pV03i7bnHih#smfWS7q4@>_!hpryEKF!QFTxTf)1fEg^(
zgTf^v#+3YFG(X}Db>%2>+x|kc#(WM(fx3-g#UyO{A(@6r^Fj<Vd{i(PCMhG>PyAx(
zllT=O`Rdct#)W-$O-!rt>PjIW**?YJ)uLbF$xRG<lq_lgM+EhQyUDaWsJL6ZX+(o~
zxLKNI%L=5!zSD8xeEH}3zm0+9&gYiMv>Xl1+pDFhC2hTQfVy~l7#<T(4$U8g?b*2G
z!`%oddB1Fja_<%ZPiwI~Ix(wW<Ks1LlaTaRK>T(|zIjM^Lq(l1OS^>yFR5AG8zdQ6
zGUO7OpUb+^-rS6BHd!)d)z+p328Ip|%9*o;1S6Pwn$IyEwIz_yPgP82n=FT@q6!Xl
zKvd88%+r&>`F)I@aSD(jkqr+Eg*4zMdB5i87qd7%W)1XJMg&=alyqvm+o=#?4T|-o
zglyRbyN29QfFvWihwL>8k$mjX!rMGZFn^JRvW<rtC7nD?9%c?jfnQYFURIbd^t&D)
zWL2<jbVcSeKP(V<+-EgBs<!H#9^QA|{n&U*jNZ4%!nvorhn;qZKCV^RQ09>09g7{v
zg$G@cg9IKlkehkxElpT&L>}kg_I`1`aIu8;69@o9&o|Kj!AdW63Glze)kB-w15alr
z&JvEBu}lQ$Xl)NnLt_$o6-2RiAOvC3!ijcDTITC*LVDZE1f%z2$eKLEynUuh_fQRW
zIj$Z^B6^#lrtV8|OC2!L;6n!IyZHO`Xt#={EeY%Zf}rasjsU(WDLUNkL~~`n%72$#
z;}5W%)RL4Jn8&T2AUlg(@`yO4kkJ#2ahbeD#Cq+=_itzz-^-u(ay27rR-&{Gawv~K
zOhlSACEssV(ttBJg}~A(22doBd<YyqjL$VVh|%q+v^CdbJnQ2NJ@Kk&-=d4LM#ZGV
zZF=Ad)w#Hm%)SWGu0e)(U%_QrYMd2gS<_t`t|nsZ2ukZir@<ta)w`n9(V=r-h>344
zV#d<=EdQudlu!33>A9O2)tpJVD|?DSer4-Tv?k3X=Ju(9b+iz8<R~hpqDrUK6I*W~
zl;Vxon9&vD9}MlZ7gA_s!2zHC^Lvq8HJVFQF;lhvcHR^Mu<)Z_w<zV)YO{~@CQE}h
zS;2TA#g@~|-G+Sndm%6k&fV5#a?*RKofJoJr-@Ur@l!<;(vak8(&nA-qb3~~kk%XZ
z_{A+lip&#~qk_NdxjW@v2~}oDWQ~6g-Bcoa-Cb@n*rLKC_-v&tgAHzw$`ic}-f0J`
zJ5hqSV$y!>5R>46Ti?yjDlowxS)o!`#@3_9kV*CcWALK<5krYWjF7t{W38yq6|?tA
zt{?^2w&@5L48PGIoEUg>uk7{|z*SRWqa$Een<!Y4-n}<U0KDF~9P3==+{?9#Mz!<Z
zx#wECF2kT>c`kon%XoCq=sl?-924FwO%cl3^`8AQ=F(SvfJlD5;WMax;JfQ5G7$K_
z*Q^+LzK<D~lbIWJ6@t@0BZy3|yq-IIc<s0<wRtNxfH>^ZTgCF5^2)gMPM{?jHg^xS
zkC3yC?k7Xk9KDp3&Z1lu!d#szR>c8hd3mQ2fgQv)C$~&nP4GNIG2^pjGz5mLp$jeU
zsL!@>TvArh1{fy92>7w|qU%Jut&mx9uu*wmfM3ECey&pia9w8ZMfS#j{XjV%AP`uD
zGv!t+O^U-rhj1xk3pvvy1O$RzjC6ua0#JcSNzLkMZj=uyfenos_L6d=eijsB9@_;r
za?!s>l@7NjIB{uIEtT<q*5e9d7kiHJ2#HA`_agikW%RA!omA4yek%OU*5@35iw6YH
zT7)SGcN)7vpsq+`5EhnUC`2EcPA^bY`3EGACD7YJDE3I2c6(HIyrTsdV0#uAZpRjc
z1T*Umbgkeeq$M2fnZ0H_{q_3A(<bDS$jZndP%uJZb$R)&Xj7vMbB}R61W27JiAE9t
z+vlpgs_O|quGP~bQR-}myOjtLin}xa=4y4Az;BB}^iUsLYjGl)XOgu7f>57@ETFU9
zSrH8o<^#qB(SQOnVBmnj+5DYF=jo`q9uqXHoq9h}NZ=iVLC~xJ9OM2$gL8X3OuQ90
z?vJbwt0@;-L&J!1(j4n%7T~gUr)LT$eeQTlDy{Mz6p#S{$EjKS6MFcrUi)0(u)w#)
zkK0QWw&lQqMZQO1!4eme6!nuslr;5h_l9$-2}1e^S8Ai@Odjt{*`8OXFb^iXCZ2S#
zMm1r*ESX80-txA;$iB`If(uFi%qu-5-hA$I@MqT^4jTvs7*Pitu7HxLJ6iVJ=)&c`
zxXvvCz=CUtf?`Rq)v+hJEmK7Y*3D_wf0V&JY+o<Cvw?BznvN88O1jz%ER!u^+j@@U
zWQH(7Ch#GKF6n7-3==cBb>-i<K7=H&G8q8qm)Q$D+#VnYMP_5~Daj&KXff_Tbis!p
z@5-{F7ntspLDpmhvW{sc_bR3lq7THJL88aN8nbtpi!99WWn9|0hpojl+~G$ZJDifS
z=@%Obg*aUuC~y8<Zr&J_wyN>qjQIcv8sE)^Oh5m+6>*7$FarBu6KVnI?shG?UVr}p
zKTui|3IXu#_A%a5*SB>|961->XLtj1yBZ~8FO`BDiR$x<5HEHhkWA?6bLf$Ev7w+1
z<E8LYEnmOvEk-&hiHqWCZCWwix=fdWV~c}ERHuuY`5d!AtyP6flmfij^$Q$B<Y7b7
z6J2da>8QG?$!MuW0MZJu7MB(1@|$HO_U|&wi%@+@Eod!YLjyaKuhBJh<lY+9qTW-p
z4LR|?fkb>~B{FqFR=VX+_=_33`l7Y|Glg{v0N#4(B!8EGxhNfLcKwr0ly4DJbtAzk
z9{qL(3>CQU26s%&M1orqKLtG<bwhUEy&L<VMXpD9nt$}7ogYm?4W0E!)75;Wf+7zX
zpZFmXdmhBnvz5~Q_lbB}0<yS>f527M@fCH*6eXHLTz?M)i@_o%5<$rkVNoWdUZBq1
zpe4wo?nvo-)<Un2^j(*1<Tm%MCO;al=F1^_vf43wlJkw-OK-7LI;2=i`Xw5P+@FiW
zO;beTWD1mEW-F+$(tksv+!4r5_@l{s(Nah;z7j#I5LnB$3k*HHdr!3H8=2=uW~n)(
zPhY(KQ*=JhZ^-P9V$-fWqHFdTZ&}Ujw~e%^v9;lIdNA{P(xlSwI%@Vf><VA5g>%q-
z&TE^@c64<|!@Q9}dU78ln(_L<k_UW2jdTYtu8Y2XNZfn}z=BOJg8Bf#V(!6%2?|l8
zd6pqU3ZWDjhHyd?CqSuKDxZMJz;7fVd(43g+593@#hhTQI|=3sZJA9WMFof_a-u+B
z$_Xq8zTPDy)Vh@S!n??J)%3@4utjzAi5~OdSua?Pdmp>Z^q|Q4Ie`g?-OPgth(tgZ
zz`_xQeRxYwA<Z40L}a<M(DMhTbZDFiMHOqHiY1DX5DA4KB85SK+LoQ|geR;1tQZ2?
zNnjvJ%ElDmFVqd6UUPw-Lra9-r44$nY}NzT|E57vVSRUGb|f~>2nhvwiO&n1!m?p)
zzo1{f1O0fClBtMA5r!Yn_7@Z~(}kqq#F&E|i_sA0Tc^U0!4V-{4C^5&VV4LY*e5P!
zR8`rb;YWLEHKALrl^iYU9D|Sb!`nm<g>7-S$*S3)7$j3gS_Z_68Tm^(JaddQj4|oH
z$OFJAh!7uYP5C)Rk5Q2Qqjsi|3iV@;dK3u}kn*p`y}@4ZA;s>>gE;VHvK{ke%L<I#
z&K4c@c}>U0NqqFjIu}-P+NRTjQT-n*#OngoJ@~^W4JOzSS3XRjUvXW`cs;>i5k2n`
zgI0&N4yMY;>sGUw4Z6w=rGmK()YyOQyc9?mpoqABq!@(j_@)G?QlQf$sUXvWhJJ*Q
zE5kcbeI^ScasDw<Tf@jcIeqr}tHYwm`LY?gZ;Xiq_QF1PKmc6C-+~j;an_yJ`NH(d
z`_Cu?+uz8(&(L}7#^rrZk^XTn?9h3HFRZ91*ijGCchCOfw4IGryPaV1gl+N2n-mA1
z*!A0lFBwaZqlBEmSm8}Vx&F@S6=x$7dn|H>7GDQN7Dm#S0{Pb0*%CM015@~s{#HpA
z;(((3m7A?rEgqc4cXYVYEUeCi@rWajFYQt5q8k*pXianyF!a#yYHwq_6~3v|O_oG&
z2ITf*Xa~1rVm&gX_!<J`g8Q>**|PALdx%qcfze}5sN<7w+l!mbC@}SHeaunPdp&Ol
zdJDwUD$du7vSasQas~)Mzl0aj{P)Vnu6D$S_g3FYs%2Vn8Ra?ZQ&u+ZDTv&t?X7(}
z-VAx+wBGlj5mzfEzl>dV#*9^z1YV}W7lb#YOMje{>oU*2WfmNsRbr-w3C8}wQq0p!
zDgi~BeQrx%wOe|747aOAzx{4GwV~j`XYugZ7BOmqQfjsS)xbtnI_EMrIxP)F2wJG5
zz1>=Bby6HH{qni%`P5N(eTd18Q{L$Bm2{;}lOjHk{bVm*rEE%8K4+&y%9kJVRETK~
z%ArH7g>IWR<H@R>I#@H&#=XTNwa~g_Z&mokQ`Ph85ex)KGXEGMo$HL)gKYt|hR|`+
zyj)|5;?D27k%qyy;!SNP`%!h37`7Qq;eVr-PtA&)KO*CasGTB)Y2QiLYX|~<L}x(#
zQax;2!C>M>wuQ!qJpv_c*DL)pWhUS6i2iE%et}XNu!*gPo}kW0|KsioWg8it*QBW?
zZz`Y11-)>aXzN<_L;DZeGx5K+u)jq`(^V2g$LPw-&O{x59}9l83tYbK8&<2mW(y=k
z%+mR@hA>z34q)v0J8-;zZ<Do~tbKLNg*^zTvH6d_w{rYA7dH7Dr&CGI22@r0JXL_u
zv|EU-ht^vbk^+i8S<hin{a^phae$tC5W$**eH>Y}Z@<0@c}}RyDZe5;kL@u>2o&q8
z)`ngG8;cB3pr3L!W%TonXjosn>Ss+4jv#UlBoL#AWjdP%{9d{KviNWxWx+ymBXej`
zQlLrG-?B(>%zPu)xW6a)mPH9-*`NIGfrt|%PM}n6vWfu~ft#*Jb@TuU<SY;FS#dEe
zM`BG|u-O1*LJtg4?1U3wE<oD`;W*!4h7IPopB%pQfRWKjOs*$^EA7d%W?P$~!BM9k
zb_De*5z3#dymLE!0k!p-#-F6Tf*^-JKQFnPW*<Dv(vC?p5LkBjuAr7R>0<nZ$E=n&
z1$Gf}As;B_%QsD;)B>5Lv=T`INqLZdwz`_v9ofHY#g%U?Ice&n+r47#giYUVomfF~
zZ(?n^kR<A%!u2J?Dt^e&uS9}E#SpA_yZv}GI>xHsZdf;u0<+ipv@ESO1nOr5FcCfN
z(Xyvhaj^DfR?4p>BO|9uUXrpG<ByWs(Ha*O<BiGo1%N?F{zr~HOSz~-@_Ms7+5UGc
zGd`~=+yb}Y(ZpzqB(&!Y9`;2^RnYML(SEHoMV$<057<CZI0O=EHv|#`*@@z02)Lhq
zjl`}rMluH^(iuMnHg8`CzIFRDq%GEv#|_>%ZKonej9;mgn<xtG9?617dnd}cufMNv
zt_9NE<%l=uiHY`1g+#MqB=Yse5B5CkfnsMC=6m-fBTUd*h0uzym>ni5OvD<6$cQp%
z=me1yJV6u-Ng6Y)KuI4AJ~)|@4aD24a<PY6$*mYd_mu6@Nio}@AjxzlMfwoD$xvyJ
zG)AY6(ib_5UP`zcxs#NOtppjC(>(s*>dJlwY`sY)Y6-Fot!)nbplMIz-%d`}jrw@4
zfx!LOt&w}>$Z-0XUk^i5CUzCk5z*x<sg(#iqH}6mqt4LJy?L?d&NJ(F=5efX3K9h4
zkzRof_00g4`^w)}Q0OX==Qm@0GqR29laa#qL2|cWg(K-{m#!`54^i0e!}_agD#x4m
z`ZEXc;vZfu6ka#au|M^W+mEW*Rt7n4QxJncmsUL<y;s`kQ*PqduFusrC}MG+vxr{|
z|H69O-(?_Eoe4km6>Z^6DcKMX6@o=xW?R4<6MjV{7D~{Ab0erNtcd=DB?#!}`}nF1
zQ-n&?0$)P>U~uuXKBoq4QHu<}OSHp%t6uyCdB2qHK_T}T-b4N%{M$riBx5=65(;z1
zL|`NMx_d}NXeRW7a$$40&a?Q;dI9c<W%^V-kzyP|Ao~USfbv~i7sHu<@d7FiFWt9k
zu+W91LnHnNT{Lr%l~G(>))fFx5@~x0AnGV)hQTAn!rKRl1Ic>ZLj`;<e^Ys_DTa72
zYcl(bs6{9ulX^<Vs?Od>1wvSwlL^*zC>UWf25nM5i~V&8hoFqPAMdF@rp9VWxT_HA
z7tZu)OB=bo_tEjcWSZpXBAHx33E8O-^j|bgKrfQqM>d7L+zClDQyxwMBBCQ0A(>05
z$?Kk}{l2%G-V9xfUexA`Lg3ld|GxbO3s7{F?8nW$-~X4#Mi#&4Y5ImHHZ)=@9IO2Z
z0f)tIypZt=g*}_iBA(3qvT++2fakP=B!Smx+eZpYg2IBq5l^Wpt1GN5tu3xDuV1na
z{^uQC&4p<YU4vKIxBKnm>%M{h-HHDBj{ZB!uUG${K%-T7bjVUdhD?n8eG#WQ8lFN+
zBLL>PhasA=xqpaAM4)`Uu>Hs=KoF7El7qa3qbfG#Wuq@+8A-6p@mu3J><;pBqbtE^
zUtah)8j&B~Z1D-3gY?|CdRyQ&2l!(hN%jKuuC8Zab<|6hb`1xvQ0FNnxg3SRO8Dt`
z7FsZd7L#Y-WTF8i2S^2CsFU!_n~f<ln2?bCJP|3|AI_EiMlIdAa#LDvLskh39t;YN
z(9S+O;nD(D2;0d8qnW@;{uyw@nTAjxhyZ*r)4Z&+th23u!Od4vaz2UYtil$1;`juC
znuL^LR^r4`_45*hMlhnbLQpTvj*6|+sL&x(9_q)&<u0Xgu~vNrS@QwZGaw0RsbT04
z2Z9)eeul8XaFQ6BjI@}gKQc;Y7H@a?F8<_;O@-IIK7%`ZuDm<$#Wh?-mNYkff!E_z
zG_)7xNmUltdvT`K(JL(fSOsVxU_m7y@@zg5HlAN@ZY?+rXa#Wiwef2wKK$8(B~GHs
z6_VDJnSw3Q`c(nV(8|H+m~_GxiXr2~gy_HPu<S&E3Ij~!frF@sKT0BcGz9g5b?gc%
z?IfFH%W!iqFLZTvFE^3tspQ}tljY~?Au8X13<a;z)gsqD#`<@9zS#=WWHE;l1}h|F
z$G^XM%NN$(S*g(y=6|n-*9|Y(EctrNKVKy&We~$?XXU%kHtUgBGRC)#Uj2pLN@bOa
zYv@U_c-~Id<1QGPWTGIX#LItGliXJ?*C1Z-Q^f~%A=BJJIOu4Zhsg%e_<^Klqrc6>
ztJ?o<jm_tBe$9wq4<#7o47yKSlX%aPG5gH{j^7(U4WXFmTUhdPi9c)LC1aNG*=zJm
zq5E>_B2X~dCL661q{)-A98KCqq10YL_G#=Y{HaDj$a|f&r8gR0>s07izBlx1>x@?m
zB@G)f-O!r;DF(n1>MtPB8+m-k7jg;j5s&x>{%a7-_K-Q-<(G@=Nn;j5ZDnI;eeM2}
zA!JlX#!NDIhAUwWIl>=JtLvEY;&pyaOq5qE(_y)FjUXKAUM;J)KbunFZbvHKkg8b=
zRgQyQ6a^^O>v<HorE^tIbsM#Q?h22)5TA_u23_K+h@z#cveveA<LRWdq7MhNl#Y5>
zy0gnMP=#(@SGS>YhPkUuA96;KBee3_1e1AWQuJZc5r_CHKg~nzbHO_%qF|AGn~>sx
zc5fyxz$`SYLRrINT;~&+mhXAjzd$7WwU6=%@KmuYnUdny4y{$XmQ6Ejcdb>u7Q6gU
zCl=Oz46Q1)>+@<G8~05NYTaVX`n{kDx$Bk(CzZ$P<|TvT6}t?E^bJ*mmOHgSPKja~
z&1Z{-OaHF+V`WG=7BBOi<oAwyFTK8A8RdiB^>$cbbBs`90t~=zh%Nsny~Pv1v}?l~
z`~&VN3uPn^A!fR1ZQ6VnFEBQf(-&~y_~#d$FK<H<#IHBNqQ3FLcGv~F+~lsOIsQ2h
zPv^lMblGXEr=-FEx??1ll+61n&f?F|axIm_e2T#|W@<h*L;HI)2nkb2DJGYWxSyDT
z__S|UH}dqmV4GNpC#r-vRgr8McsnG-G2bFc3gJp>t+4?ov?=>a3MVP2i-OCA0)qmh
zW=`9xTG1uUAzHdvxx#S;tmqG;+xa~JfFjdR!I$9n18PQGSxpd65?_0HMCF3BEM6*R
zW0JbNClfohb+uD!$NZDuc`XG@uGVN1cq)S;1wo&!y|XwMQjH#6Lgl<`R1KLU*a*vH
z#!&kDeo>ixSf!2|GhnPqMV4Rvrd5h21r1p^P=SXxXq>1R2Py+b>4|vS%O|y#u=Up=
zxSWz}a_7X*>q&1qdPzo}sr~!;Y9stPYTMnN9)6MO2O?$Z>J>aYZSdK@gN2EWm7S55
zsiUc_MIuWH`tv1wi`x@?oct7hjr|pVp8ghpm*3-axT?&0V4TW-r5I=l^f3j}soEwn
zyZ<{jgdjs>lmBIBduhFWt;Md!I@m~4)tkn`v(ZV9Fm|dhFDFSU@++uND-Pkb53*9V
zf^F#k(3pUbqqA68FV&d^nbUFshi4O8pg&tA&{0@|LsMgO_u123CU06Uk3T!M6=<z*
zMy%@&C$@r}{u%K6o6{^i3o~oa6IhE)c4^agh->Vitomow?icYVuk*US6%^^o=lP8o
zGb$2pc<{$CE{5`>*ZbexMKK}f&$Af??2rYFkrO$#ckkvuBm$hH=tFD1m~$(A_VrCa
z%rZ|ccTor11A8$g&@w_0CP_hP=7eC7xlkn4pVx($|M6;Y=^O61*cd2^f=treV2?RP
zno?76<fbDK_MyuC#7BM@ZvV}61Q`bW2N@;v4~PUicl5~7)8{|)SUW%04`>eZzXygy
zo^m_Da2*uFtn>?t%1Vptm5>n(I+z5A6dFQ;P{|S&J)GjdCTbJ6U%|}bPjAS5hDNyh
zk|lKOoHfTkOt$}evdKn;e}-f0y6J#Gf~6W)aPjs3U;DxBY=RP1goTzUn9;=LFNPs0
zS1wt?H2L4qERZCvH9V-CidwZI?cze(`Pq-9vLSZgtLuN}JB_rHXi<OEd(KkHs>I1O
zi`doj3_oLIP@9Z&I+8k8`>lBlKbSJ^?T(J>IZX>|dm}SD8w&%{G)Xh3&;r%b|Cwh$
zdw?KHWnc2Vq_>w`glrLu>@V^BKvbzYn`_b|2vN!@*3wT=Lk%aLyes^QgUmOztj)$|
ztFl?FQBmmp4-#tThusp|l*%4={u*jrp<A(Z#utBLP21e7g4v5n&KQa{VT4qP6DLYj
zRcV7gy!Ufgey;jmsBPQ2UAJK(@@(69R@y)PqSdogyXVL73@5ep(#to(n7#k(@J}Hp
zsZ|=rVNwlhXx+`oNybX+3#I%V?SYuqBGD4ne}0LmLf`zjI4i+SD^bFtX-gmf|NIk{
zwUtGmUqcnDuQP1Ks4txk>%RY+zW4iPl)rDVfB&UF&zt7D9zVa0CY_j=IW;yln#>WE
z%nIYFr0yEwI#y!U&JS6{Db?tsfxwFef*ed`^TfFu#H0TL5=f+oi3?1qWLuVI?vl|{
zUzaZO;FJ_Y#xuqHqRe7g`hXrjwdu8!sloqJT54x#Z8qM8l77Y8KJTS7c#+`p_nptU
zyNpbW@@I@OOxYy4->QA%Xa2@Yf64A*xb3^>ZUk|@^PD=`Z{<s)+wGdJdwJoCEzI|R
z(_;IfQfq57%Drr3llHBwO|RijOw}2@GWYw+k5;C3yaBiPu!|kuSl|DBjFYchpk|Wa
zdxq`Zvw0k5B^y7OAmR@{8R0xM9FD%l;-MsW)y25(P{2t5OzJCJhX;dI3@rHQ!FwF^
z?`=v})=Zw1YoeuCbNs=e))tD|xa|7KrxfM9k})URiVLa9r13=cOT>MMKgI%7$7Q2`
z5Ioyrls(_C2r|OysdjC}F_%b-R@Lb`bgK}9mstk3qNg;2uEcC>Z6Tw387R-S5+I@Q
z?J=#rE_N)3U{y>e46)rO;P$n#1(;Xw{a{)$d~8am1<TZ&L{D$UVjFznWN5`Op#{wI
z5YK|P6#9do7K$s&!g_dfLs&Bttr%+_6W1b}PgPX=+wMY^_NJ<D`&#NzgZ_f~P4D2B
zQymUzvNFsImirc7=7knzg1-Ul6GD))4}lU<RROwRS!0&Z>JM^?Y+wmtTd<<%r>|*_
zD<36CiZr#jOI$+D4anfNFMOpmf#HTu1{IZH@PALZoZR<thP}8l9POi^5rvDN7ijc_
zt>Zp6z-d$N9aPDh3$85*rKjp!H=Q%;=XY;c;3U)w54Z<mqiQX{{~|wUZ{6w9{547n
zo!w5i$1{UsU2A>So5W%ME%Fq7u15}2Gxz1JMgL+iAlY$<ZJFi280R^(Oz)S0qB)|U
zXdFg#w%Cs>6;1mHS_=|FD6f`;00N?d6hO2Rg3n?rt#M;0348;xGA~eBKQCz&62^-4
zD<*<<CQMLxQl}HLY{%@D0$4r_^57>dj@p~u#Qn@$VMaJyYwlw;Ay{u~7KvX<$VtJA
z!;Gtx0{^sJs8TXI`Bi_41~_hb6zs=2GYp8mZQ!gAJN?zI$<KE~FNcopIxuH>CZQW|
zAFGCZE_Yz$%qceUR8l-P*-3yVM2^dCZ4H!Rz4VjoxyjYdc7;^?YrgVvcYqap`|=20
z`SG+)?Q87)@lATqby#6CqTJ+^1JSd$&3Epr3-5obyG&_=k)_h+>SopKlX2w~lFNiq
z{|)3m<m4tLe%_Qr@}8$U)bGgddiFK1^*)_hI03>jukJG+dNsH+)kpMp{f@8x=h+t6
zJ;9>cakg*XEIyUtdQ9(esa~<>oz#pQJ<jH=3hNAc-R0#C0yJLMUoWJ8rrl@^)jti9
zkmSp*@>=5ht{HFV>g@`Gt^4z$t0w)sX1ZY;6bVS^4R$~oe1q@S5BbK8A^zI^qu>@s
z;+e#;HxHdy)bTrB2lNlpqLVA;y156*C~KM?HgU`?$>5qW{R?XyqN{Zva+|~cRG0<O
zsfP7fOsLd#e-=5nr12b<ZcXuZKSVSMZ6DqDo}9pmD?fpDuuwHizaFm~n6|0dPGjZ2
zE)kuyZ33BLH3twu+^9#44R^Py9pF-KLy6i`=8hg;iS|;Gb{of6{CaM?G_^W0?EBCy
zRzzAgly}nOmkbdC1eg3E=iAekhQ{E8;6p*%ZtMfVNKK2H?%+2Ot<S0S+riEuao;^%
z(RBHj&O|`_w|_sXY&EUm6*wV@E=RxuG}jDSq;?eZsvseQdx96dRNAaWnX6*oU<>@1
z6^zV*h64Kb^H{_cj0XWg85}dCWX{2c<&grN%SD^KB@DJs>DHce+9ObtW>Q5NaW*~I
z{Ef7blZZ~_Ux3)~W>nf<k1wvm?mQ4I0pBE>*WcjdoU+_k&*w-QFY-LH-s7q__y{%V
z{=mC2Q`2CY-;!Y(;*qhu;~0#Oe?Vk;Y|0GZD!du@2Y@Gdbr{b{4WD|Ar-%%%h)lMO
z48M#_dUqp3p`N^=<DeVLK-tQ0nk|4_kI~Pj^;mP>+s(7ZTM=TuS?Z8C^=XTAXJ}a^
zY=z&;jbag5_=itlfAtZ&DzBFe)in(qL+9~pXulnwO*6R&jL3gi5Usglo|%-vxi5uA
z(uYXVvr)AFSx3!hFMI7vFMaoXm-SCmu>nR8&h?LLnCc#qU*1l0UFoRy(J=CMliVG_
zU@f(@ny&l^Jr-kpc>o{z(LRVkM4F~-O`ApvXe9@;U&-0t^HfcIteiFe(Q)2x5xeNM
z%=!Il!_(?`S*CJ^ji>%By1-Mtz~TOn14HGl&SkNi<>ePXoJVp{&pN79NC$6drHG$2
zd1Af_`{_rXc&~vK2n`mz0<-e2mAFMfHw*s@$8&EZZ{dxBz7#);R-R<U?Gtr@aCt-&
zNb1bc#l5I#lSEEsR1had<qS4VdSM%+*n)COS8X-s;GF*0+&Q)UDlB?;%8+<%ioQ-}
zB)lD{gWqs}sl2l7Rg-y^gXGFAm$BetK{L;r{NJ<HcrV@UuSyHJ3kR=Jjn6;BvMM1b
z?ca;?viRHsctY^ELxJ~zn;z%DyF4b}tQNR=ZH3$Zd7GB{UM@G0LA9ecfx?_AmE`Ao
zK7Rkq?#tjd?))pBMrH$Br>?cfT>SnF_b8Xu;lJa~Hue|^?$3m-wAWp2D#Q2q`HqVS
z+#YOGXdIrX1Wm!P5qN0<<T*E%a*A*w<)$&*5N_GN!G3bX0{e(z82pQEk6<WdtPG03
zS2Sv+b378IVpMawataw6e5@R-kLLYor??Z`w$dy1eN)9b(~fN8EO=4!qKVKM2C-L!
zd2hXF6z#ovcELV~A_okbkN$M;O4q^Khe-BK&PaK2=tkK;KOb^0mRa9f`(F{Kzl|?(
zE?0<qEo7E@t;^8e76DYmwXXl#`;{YD_du>)R!>6aR-$QCo5Sv}=i@(ox{o<E+AAy^
zU~4`O?`bXgzl|rE`hHNRcg9$I#(0s%m><Ttsm0hg$M{Xg7}?PcwN5pSZ8V=IcaE=?
zI4T?yQUQpii)zu3-sSy-4mNyV3YNb4j2}aGCrd!me}7m__FyDvF7P&FwVVS`zQ=yh
zd&O1<my<I7NBH;p@4VN~FcnSpQ{VJc;J<@G5bJ_T9w=J}`1At<gamtgh=39lfdT>p
z!9ekmRa=ew;z#NR;4OG>#A1PmD6^U>gs2`*t{%;@=Ca}zELjZ4qUfHuc9VGWpb`ls
zLeW9ZZC8HnPLnbV{hm94JxVI|RvR0msj{&?KT|j!e{|a*m|lM8++P0l>FWOerT_d>
z+C7i2W6Ri8oMLIMwt2pa>`JntD}arv(&kB)&Sl!t8$dE0D(g(!MLKwJ-`g%bR-AJ=
zU6k5i#+Bvz_LgYqoxgFk9bR7f%peWtIxT^x>p5@IJ>SpX?*8BuKK6(uHT(YhTmiP;
z>hs^L1;&3gh;3(QmgSjC+$YqcDPUGks1-9>!R%yNHbq7DURA1PDstzgVL-o8#Criy
z<8=rcBtOgq7H62?l2l+5bK2Fq<AK!LypJLlhR*v{1b;p6x=u=STYJYbKJp*oR?4zZ
z3_6d{oT^nxzEs-kAugq8D`h=0sZ27xj30bx@PE#Y6p)8UN<_C$D-t)iaX>}Dv_~$T
z=f#a>p5_YQCZ0W1z*J1*@~3_<Z(oXentXWUPCk=9JxxqSqD;@dmZI}S&)`i>RaaSC
zU0<pE&)L&bOWVJ!sO7m%zJ;wk+a)u1zUNtob9h$?3Jo@!VR2a#2IT|J*mI9R>g_`F
z>UPcBQt6wIy5*v6)XmteHuE(y{`9HQ(#`4)to>mW#bj-;17n&;4XO7rZP979T~lE{
zQs({|5plT;c8l4lTn<~EhF5l;tCr_6*Y?M|8qX^ny!?!;yxeR7Y=zRsS7Xf@^ZP-k
z<}F+I_x=o<{P!=vbT-;!tkT2Ve}6RuzB6nLo;|m&35NbtISWkLWDWn6_4VH{W)d>H
z`EIpOKPtNtP{^JS;LNK|aXPpRq-G6G+}{_k>^3QJiyv11*tCR7hv}3vPadOjoL~3v
zM^r%32Tai_t}?oeT7!t^UX{`;9Q$x5{}E=A&6d7?nJenY53Y`o%%4*pfJ5<3v7+}(
zYAgH_Q<RyM-{GdM|AfuoTW9rp$DRt33bqy>B6Q+sVNlBCQffF4Ky-AdO)2qbM|-oU
zG&t`6+@a%F&u5FWI4cZsIBcNv83V8_VCBuL7UB|fQUw&Pu%v4j^EFwrQ)7n5;uBNi
z-hx{1I<f&;8a!wic@9y}?mqWZVZO8W#2x)+Iy30#ylEvizM90G|MW&SI?ZMfReWI#
zOaKoDZ!epk3vVbYSJ4q+36O0+a@NR_{{_5PU0VrRTa_PKt;Dr`L=87^b#8AwfIE42
z<(xKUZ=YzBGLO0Z8`aJ3;|J3>?da{uYY9CM5{t3N86OVpaEhUva4x&XVOB}+K%RoJ
z>ROUjanG6aceH2E4Uh<WsP-i}vOTIdHA{(WYG0vPR%&I~k2T!Xh2_GHl--Y;J%v?^
zrVpdh2S5X^!CWDCV~Ny&l9@q__FA?L3GmK$7D4Z|J>P8c4z$#J3XVp5?A1S@8t5xB
zJ!1eJCZs&_bWG&rj!qU2)bY@++<+d*I`pTIe1wBeai4xQdbCGJCW|cDOujV*A;*XV
z3ZJ-HTj@YPWKlfn?FVy)!Wb@D3o;4+dcDV7g9%mrUoi9Yvw$ccmjz;G_rP`ppGx-l
z^z7}L%&{W_`9BZeC}iHrNH-YFI~}?*`W!Dm**Rg=<rHZ#yW!NG6~j`)cvS!c$v>te
zYLL-wy<dNFS-uL26P4zt`kF4QA0|Rpt@rTt1pn#}Z8>#r4GZEcQ|FAG64dK>JtuYN
z)1#?J#<Pj4s~ZlA6abC)n~&y`?>yk`YyqGmoOQx73pQMW(#<B!!Xb^c{YHeAZ0IJ6
zKB10j_OsK(^{CFD(x%uW^|WFon5D?ETVhBysnDus6|NG*3yVx++7c$s>5V3;>Zf9*
z^gol*WkmPD<6X~1^n;CcX>)%8^pR)e%k{-a`th*YlZ(Of;3bMu(S>st<5Hv1Lc9Vw
z<b=YeDj52xbV*v!#pj^Pv*ia$Kds&SDdfA#KTo6~(8L~zDfoK@>B`sMJr|RXvxBn7
zJV}Qzk=a$Q2Ve-ye1_bpfKv^8YA^?#ol^K~3WR29%4{2dJ^HVnI-&iE<+@rcN~)w2
zZA}Rbrz!W!$i|8uLY{B2C-AXPc{wP(yX}R&XvvYtIIx@<bkl@Y?t36*vml=6+7NmB
z%Zy+qlRFm>zQe{^S^b&VjrCG+2M6$HMF)PAkJTJ8A)W}aO^d8hu68YD{S33tUj04d
zNI*%mi`;%y|AEo4)<{1tW~Sj<r6j^E**3;cm}wVfW8{7djK~C|M0Ju~@euM%1h)tb
zQ=Q7nH#(u%8>JMl7;Wd@%gmgmsWUY)o%R@tlkH7GBG<#t)i4ttgE@%9$AiQMqKxed
zs1U=o1gc+x1)Q{i?GxQ<*;GQ(MJL!&!6n_ppLr*wQiOi?`9UTrnZTN-i)v|}E0V0R
z=j(f@0d0qk{P^o6f$FSb0S#W|n&D~cx9p5L0<)EWP)%(+k)d`EK~s603)CyF_RWt1
zpTmZbmFzkZ34D=adH)_5FE?!nkOp&C#USsy{C@Qz-10vzaOA5@@;6X=38Tbko!`L_
z=YYwOlUO}G8TotCr!5a$BHiSmv0a4xS_b29RA4Biw8W(Qn3!&E4jxl!eJ+WH-0r`K
zU6evoPm8>3R>*~dbWuqQevcIr=%NtLzL4UL<O^1I4x=jb%63Hyt~JWy@pLnZWML0=
zs3+;3SrYI99qL09QT*GiHyl{EV?JV>T!Rjo*`K+)?EZS;8up1={rq=c62kl@H0$(R
zSH9a<@q9S%v^PI$AbOnsu=P_HMeOYWk1PEQgBvdtw@s~Fg>&TkP2{Q+PT{z>Jy=!g
z)`?YPEl#{|8P=dB?)eEAm}mJAV^dschG$5Q85LAlaQm6aR9bb3x=Ri|SH`(vX_sBG
zd4bH$&>PFq=Q&Q!>&S}19T%Cb1l^zH<)oAA>%!utoCOhtVg6pahhG5aPA#B?<z4^`
z_dWlB*8Y8qM@YTa(VEE@C!P!%&7u(n`pp-LezZIPevF8Pr2E3&6UmKsVYY>#W(3jO
z{FESW7DE3iL$-sVy1e!_Rkz<XBbGQjY^<F^kx`f8*+W(YU4kDfC;NlZ9hIL8i?LGL
z-odqE02#9j!7mt(pxHh?FR!7biL1?Rqwk&z{;#}TUWz2lc#HZ*FBLL6rpz<O?4FIt
z&o>+$knXZ~xQufh>=t|&g@ay;XmvlV8o6`6?r<%e2v@v|?IgrPYnZhO6W&QN`sjdX
zzQ-jLEQj+4p7YI7N#0^9<%U%LU1N*slehK!wrffa7u+~sb9dKW(d9WlSXWPXF~jX6
z%JYKh7}pI3=WFfoP1WL<81|pMsWvPwst`OW{cr36S57|1DWYRP#AmLWU9R>~Z3rvH
zW?IJcVR5mr3?m3JqOma1>TBE46?XTvyU4hCZAp-R(>xRakiljW&_B)3by@mgz`*i`
zc%I$!1pYhLUrE_lIIm;e`2ryGiBM2;MZY0_+;(-_ZY$xNH}f^w%e-vn;82}DpL%av
zR)NJd%)V!mUVYxgDDVjbl?^*$C%I<8<c)EF>)G4Bkslrh!jnwTk%e|ZeCnG<JQ@WF
zP2V+MIw`c@2qSw#)hWF3=>ZzF7Ez+^S<yYwyR1dXYdm(nz<>jKN)auog5Jjhabnmp
zV;fn-)sVLG^~xC82B?4x-JBI5%`twg=&{>nLDPivB8`g7fZER>xvxBOJ-2tIA&Wr`
zj)hdr<i212c84$Q7DO*cyHi~$>Lb3uXQgiomaBHG&Ys9rynWZM&FOeDy<4#N>>o=}
zl0T<lPDhl7<Vb5Gz>$cWh_UF-SPn|G6ct<c@PJajVvo2QnuxhlX-0;`EzFSlOqZ8j
zOEa`ZxX4tiXs=wA&7n;WG<(XuP0n`?<MO1+57PX5fr0IjN49$6<ZQ(r=Yi5I2(gp9
z3-f#+jm^b;od5iybd5DPd11S~)$UGV#Dv*N>nMcUi+UQ2i2|v3;}`nDMru&OOxkbG
zhr89e9<AAAp_p{NRb#Q53^H;`DIAJa&aLPyJPNNxh+j45+PJYk#j!l(XBLgU6ITtf
z`Q&TY5PSask-#_tFE3V_SdnJr4H*7M<2tt#N^uZApVDetaQ@z6y7gyd=Ce!Q$^`u2
ze=6d$Qe4eky$`DpG{~#?9w|a&^>I}Hc)#_&1wY=PJ0X-slK7H76`%gevkPNQo@kuR
zV%O>C7!I+##ucK5R<mNVW*PkYc6^u_C7eZXm(;=+M#$&^*})C~0LKG(*>)gqCIXJZ
zcm;OEfEnOC#Cobg^)YUS0{((^@a^aUU&Fl!_Jo7-qu-1MOoRFG@5lffz`bDiZ~%9K
z-uMO(0DqwFU;uSPyx{c^0DpnpxCi(He_*tN3fYu~b%rbOUY^FvEok*xvRST_Kel8Y
zTEXyMtG%jIHO+dnzi+a)<GE~LC7hoAb%FSN5&G_gkI&EiWiO=nr=>i^>igky@%hwy
zv7ZI<h_L1RCb9*kdrYjq_8Yc4GXD?>|1P<gb4+4KelqZ2_?T|Vh9bt;KLq2A_m&R5
zMgQiV;z?VQyn@nPq7aJoK`vl2JsR7$<Y+CrNu8d$Tj`n0hcMCk!S=P7*#nsqd9Z22
z^X+-s>}Eh;dseIh`Q3Fc`(J+1dA8*;DV^tZKmQ|^1kk{+-C2O|wq<O;@BH&;55ngL
z!^hmU?*+owk-*ov|0h8!>++mi!M^H$n+)LpcRypNe{O88%pXUm{Yg^8*vQJv&cw#z
z`hU&oSG%W&m-{gP#Z~@KW9--Nmk~bD%WTB@;7|qP+488G3NB6g2{eQ_P0b#Fm&@eK
zBQxO5AR{((s{L3mY57{)&t<2hhWq>aZxXHF_x-$Z{hvgyVd~tbc{FXTCUm%Wf5Son
z#WFTCloD+&LiXCFF~XS4ek?Yfd5w@&iKAJAa+)pdIS2i)+$@=2W4wlie%eFmiiA()
zsKfqa{s4)WksI`}uvR1SS1-&yX4{2{$m;}IoZ`IO+==n-q^5Tor#BEWLqGY2z+JKr
zMQ68UwSYERqO=a6vt&t!L_r3a@s;xv@}*J!ANR$uh@k}DtwZ%x_vxYWytNcgb4o1H
zN5WH{jUl%?LCR60|8`buYp*}9@L#mtJ9k+M^kD37lWcFo&U!Dugu;*n(~pGEPYVGj
zx9#}jW?03>klTowO!@vH*i651IP24q&UElKeMW7}7KmZZ!u28u_W^dcEpW{KXo{AM
zd@z_pvQ;|P>z!MB6dcK5U)z}OIRyJY`<4k5K-<10B_-s*7rT12ayhN1f<*>Zzo@}|
z^TAgja4&|WjQPj~Op)`vw?|!<y@0N4MH;+W$(sPVNk~H8z2B;XkY`7en*1Fb%Ly9<
zXxndmM6Vbf2r2Q_uTDF-`-gzEry<i0@OOK=vggG?fBJu`Km?YMW4MGfjrBcsihuLz
zJJ-F_>(B5n|7BJ8gZeZHKyKEfF*LZ;Xxd*4nTTgQjNlwGT%9D?b_-=isZm3KAL3Y5
zrbk;6GI*aBNzfsGL+^@Dr4O{cH86jp_=QyOzXkJZZdd}Qc|)+;uaz2Y3Ta$DI1@un
zVb2P<_hI7C5#Rd|krth=NA{2r0b19bLo;gL{GVodUrum#B)4p~?P7)`1tZ9(z2Uo=
z0@Y7!5iNz&8+0MIWfe*0&2rC>V<5pMWjhBYW_)ucV_W3>O_H@PRNM=S;=qp-UsLN6
z5nv~bXUe9{F^HAQinQ|G8Yp;Y#*s{j3?o4Ogr@{IGy}5j*b5lguPTvy;BC={#S<OQ
zkaP>7O{nc35+>3&BBT^Jmnt!g8P#tBfe)>@cF}a7(S(8ihQ}_llaTRVRq1>>b)iTa
z_0hi|yH^YuNMe5>%u)pbAKO!_`!M1bfOna`#JIj=a}7IemWmJDZ7hATr+nGFlR&~<
zK6Cyns~cl_Wj|M7mNI!G%TCn@5Q9uCr~sx4fjnAFIK_Xy2Ku4DjL?5fyFPofJ36N(
zV$u8>?Ylo_2uB{(I6so$pi7BqR#VkjX`~@f#I*&=Uo*--LVvSJk$<D#do_eD2$kYc
z60eZn1*X<fpTJ?L$f>?QcN9|kMuMg>xRr`m)H!7;rK$C4zK1nGwWDj=!7VJuS<ro(
zg+JRn;whXwV^Em(1}4jRKU>yZAVGN$B|74Da))oo|K(D_J#Q4x{a3Lx@*ysI#L@(e
zwsf%P_b%6J>F^oz?>HktF3|=B_`&L(RMYU%Ecv-wdtdEUEi)X&UltOzBm@oI<umt0
zp{oC$mN%+iXbqGa1(9p6oV6}LW=0GlK$lkbkjwsRfO2PJOWn&<fjzPib@BYG@KPM!
zUQ3!;fnrb%HO4S?z_1pnZ?~sekOJZMG;%GB>B~}98oI_-qT{ZG9{d9E^grM)rH2pE
zpTL%nHgMJ=@|7aXV?<(?3a#v^@aw5(a9Z7^RLqx7XK;DP35Q0b(y4cdvXRN8(yQ35
z`cWa}PKGM!QfpM+SE-9(xLR*<FuJJJE|hCUgH!3B`Ry=<vt8`Mx_k5!^g>D$C(xu8
zSeTjzhYpjGl@*khm>8PxBQ=Sl7HgWK#!5?|u({r4@?^zBE?V%;@Y68BP*3+s=)zce
zmnxBbB@+r9{?iTVj%m%w4;lI$I>fay82=pNWAvipJ07L5fBIQ8@8#w<uR(OHLd``3
zPIc$wRW>Jcx-8L|_+|BIzE;xjefpCH%~yD_eluNJW@da-?<#aS_J7EQeT}(3YPWsp
z{75n0Ml1%$GL%3H=?t^!urX@|nG(_p#61ltDA>}#1k$<oDX|Jw(^emN7<e;m$ozvT
zM45uRNvTA{Q<=y<<dsOrR=sFbt#%HQJ&<(q7f(1%{pf=NCe!u*17Sd(zj+h-4jySb
zS%&f~I)DDXVLGWo$<~d!L8OWy+x`qwrWRH?Qp>EFJgVj|(=Z1FsqL4K8$0f>y(bp|
z1i;#~8}d#3lau88dfx5~EWjR6gc3<SDc~ufoI2Vd!GendH3s@{;0xk<AJxU@ZL=v*
zc;HVMF{G18A@#IEh5{c6D$Lj!4ndxkA~aaizBPZBrItoIp~6Fi9xL4po=414An_rB
zXp$gMLM08f!+?zx9VU7hAsFO!-*1nv`Xh;0w(k5ll^b3J6G9XTB$G=%6;#tg2TVA~
z&|qPJvB2gK1P}y<Sa770Wy-rYRW#8B4FO`b*yv>xc6Yp=|9eBlkw^wP<WWiu%@Cm@
zM2-?8{R}bwC+KW$lAY9vEJZ57AP?AAtK1Ervs#i2c?2rYA^}`c<}IV9Iqwu8!Yc22
ztuP%(yU+VeC56S_NBkEbHy?joYZkoI&q5z9G{eqaFtV=7hh}ACcih?KXn#t42EfV1
z?YXzt=b_NoPi($k24i6xd!8(m2oPV6c>=F+5jqwYTPZ=BoR1>u{l0z60U@)&R@!r;
zv;ryhMHzIVS=r8ZsgxVwd)!$L1DssL{T}H1-23>xF}w`rKgPZXF{YX$P$a&UBk4Vu
zk)=Q>n1tfILAtI;%GgS)5z3(JK|e&SZ0wFZ%keQ#jho>F7q{o$`Yf>@?w_IoAXwOX
zfrHycM&n!(`u`K}L!!_a5W?c{1R|NTB8rsJ=jciOk})h9b;)R>u`d~8RCql?5V&W`
zlF=;**Bc+)Jh-yGe9w)Fa64V;ePhProBqoI)6G|Jg$)j9a|6HqGJI+fbB|VDAmamH
z_{9jj;t@53ELDyYb=nMT)}hZ*qc+;<Y0r9DJ_rB}^RNrY{eoDDCxDK&bj)9Bbse0{
z?Mj6yAQzu?6m0Rhqo|Fi93>ZgBUP?GMylc=smg++s>+L$su=i^qejDfoq3`7tfQV8
zJ=(`?Au$noy_{(3&+J{SCC1E#y}`IiOGgS6_uvWslP;V^y6_8}Md2TUShaecdTqot
z<FH6R;Y4JQnc+5{oiHS~&26437#aqHg#>Wxr1>v<HPu|_26c#O<Q8|h$0M4bQ(!AA
zc4bs%ovM??sr)La!a7?;b*9dlZH^~A=_yaw1<%w)bIp@uz6BO~wo;v_G$$*!@_JzX
zX*~my@y>{<sG$}iA{w~KZSL}rCiN95Hh)T0s@1AfpHibza{_eeGGf#!tF5utI_qt)
z(I%U1vDIT9mu-fbX4U>`X;R{<9sU~}1BhGy)pX4$Y^}z0IYF~42&x1%!aV#$%_%@J
z2{-~uz!MY*N{F!j)nrYzIzfX#>}yv<geg`*_0&t#q?gQ&6&keI5=#wR8R~jiWU)d;
zioIE+!WO<}RCP^)W~8SZHKVa+9N*Fh1a-aEaH?vWocmmsKDb%W%5^XYLg$Y%RI;vL
zEC8fpNUBGPlHMoEnEH}H{9%D=BNkOdFa`vrV0z{sAoG}Wu8KWmv2EES7)58KrO@9g
zUo|9Sf-Hf=s)-gB6?}j2sh%6-;Gwv9ag4oY?l}0zQHAB|#gSip*Up1Uh|pkT=;Fok
z<?H6j6eQ@7`;W@Ws~1%4_4C4b#z5cnC+{@HWW1ndZ<se5|G8|!&IGxfr}XLt#gUEk
zVe*$698AICB7ADEUeGl){qBhBv*1fLGZb){GKAbATqX6+#?c4t#$9y>0@sQ_Cy*4)
zz}+Y;DlRE4uk<5|u^ivM3M86dwz%sjJ+NrN`aR;@<&CN_9|vRYs8G?eneWNyNJy<>
z9N&-`*)7}Hb}ipu{@281gs9(=l2cOCGP1IBa{UicPcs=o9I6w8HJqxPCigg*m@?Vi
zqk4`$<O_t|=ZR=vUkd21b_{SfTWy}Zx$2B2y}=?9OFDGwi}saNCRZrk@mPb77lEU+
zu?7L}YAFcgQq6C}-K6)x!)%LDP~=0jiMb@2GM;352c@iS#ltKl<NQBwri`uKb)~M>
zHREa*WX$JQNtK!u7aIH@3zFi-Ivc#FWq3qN-6&2zF-OmjUHhwwB@w!?rb=`uX(;^?
zZpcLHo-sGpKePrLz3DA)d&j%p^S%#!cqL6a7o&s|n*wyS$^{;=8zu8lp0yUFrehEp
zG%YI^iakmmcvZ1Sk4E0`#kE^QX9A>B?2ORKWE&e#G8Yw;F@&Uplj`O-`1hYG5!C<m
zcb=_RkF7NCf{QL~QHxe>E^BwiRo9L`;x1C{lIw14$;~ZqWtSH;28+WJh$J$FMrSZt
zYz~*l7YIe-*gpJZ*^g;n)@_+q?q^@V>Y!A!zV*cmf&DyJ=F%7lr>kY8gH(DN6Eo}X
zua{FH7Y`r5fMP)<LZV_aDpXluky?$GSYf5r*4bdAO_lfBCe2#3YRlE7fL1lDB4o7)
zMoMysGAh6w@g|@8nPKb&)|^t8rgWt*LmA6dT}?m<N<Ox=6#FOruo~w6e+CRzr@kS-
z<PHVKMTH3sKMX(Oe{U&EU&b<*y`1GPZ}~7-?}0n5p~#=+^UUArPnoarc5zMh4R`%_
z2=;g1sMFuT^`y%#IJH1QVDY)Kz-m@G33V_l4Iz|ksLgm3)Xr+)sQu&y>O8Ah$c;CF
zRW&@wG>9dTJF45pYBWLsjd_B?6jL^J`KB&x<>sF=Go$)yPu}!L@l<=T;~X<99Sriz
znU6T)e|{@;r7V!X9LhCRU~>dHfJI9yN@zcoEkZMrQD*!;seU+{c|arcEwHdG<)9@y
z-08Zs*@u?3k(PIDu>x^`m32*zE4J+1w*Cz{%59sMe%nqZTuXJZe)@AA!C;3nSRVdg
zJzR@xE-T3ya6a}pJ&P&+7yOV0S(+YP&LTse*zGWu%HMs0Mf+zM2uBl*N2pS37+fY8
zOx5r5DLD43G{_!J{2d(5!=(Ztw|K-8+Id3{-x%P3g0)155(O2g@Z=M(<m$ESGGM8d
z)?T9cVy7qNSnOp>t*}<HcYI{4Y&-3D)M*!7b<An+)7y7SICUJkWg65<t)iOPkwD#z
z5GpA&G8hzVqJ%{SuXMPu(?;{st+K&)$5oTN+w~9N^2lf>d->#a0O};K3kcZ-6bg6O
zr7og$|59$E%Xi<EyXRUHsC4oDx+;*(R4+$IQc0~4(nboA3_8V_lrX8*Mhll?9dXe3
z<S_QuSY3sj>I&qv|6vO>SajDc)<{p2C7S7LVW5@aU1!|6OztMrE?{=InBNVSozJTC
zSck*z9&inpTiWmE47n$ibX@w5U=5~gNtAA?NQL>b=v1y&v$+g<VH}htRNg0Vs7RO~
zWwMmT$;xYb?_L!ey}rqcs7h$c=oAbUpeiO6i-yO*XA-apIV9X(+VzZmHhcCtbxDcp
zAxD$5m1$KwHX#R{T=sL2d=7IIdSPCK2M2g0dPzjKiR@n58iF~Y93W`Ioj}saqk@pP
zw}+9>D6(KwQAlhV?M~4rD3>dS_ASH7B@YQbASodd0m6Ascdk1>+T2qn10LEbJLRY1
zRGzBSJmrosG8jZO5|D@_&|u;2Dhr%-*%yBJdFDJXEj^r5L4j~YAQDlCGCB}=DupO%
zCjv<feh1}4f-LBAFuCnf$g+&YA?^q39t`dBc={snK~QJ1E(AXCYphI050$T`k!gc+
zTil#-3PWGt)SD<tvJ|P(q|1;gOHe<AmW{$(Hq)*-@ap~-51$5m($c&cI%pmAU<Nz5
z`SA6`d2PIYQ~>C>(XA!1PcbKI|9C-3!^pzUD<q~yMuR3T+I8tQVAwP>&9%THA4QA9
z0@;GfT?eD|kPlj@C@rZc-jOrU#a`Esjj8tB99vF_simYL4`rxB8~VKenm++2`IKLe
zUi6cGVkr0^T!lu{wninS)yv6i)2T<lA){uPV?O_wmPXX<lMSe=##f*t5CHw)jt4yP
z<~Kh;ctC+TK)|^f@hA@M1vd-%c?MVk;QkL8GXh)&rkT+;Nj0))wCV_mR{@a!?h61%
z^7~5vwlK~Ng28lZUJ>_WJVOQknxkKxOmkuAV3YFUQ8gBrkKvwH7j-gd<yNO3Js#IZ
zgD-m1yE4q{1G|J86`IUb!y&QI;EG<H1}QVUw-O-G*dk`IVrku!5p{N{{T=LZhdLJf
zzFAj2^<6{tt=qKi?Q|-Wt$iiy?_+6eK=WDq9JS_R*Q;9}M`-XC1nRn=QpF=~-Qpd;
z*-EcpIYaJxAvu|<rE0yQB;I(*5XO9P7RZI=LbgPL&1}+#!_}@utIzsmHM@*(&R84Y
zNQG?e>dt1f!3xE#b-lhRbbVK0^-|f(SzCP^N|d29;k<Tqu6j>-z7YVuYtZ{9q7OU+
zP;Y<X4)6tg(8dBhGRv|mx0L>j&)jT#9Po(G<dP`drBYR;U-FNyn7wD>%a>x%7#=j(
z$RUq>npom1KE5VNT0Vk`f-H~+DnJcr0&SpM1**`vszuj``PE7=2~3d5V)B?WrivML
zfjf;gp&zYYq<V1{jzwlMSVESV<?rt9f0orK%4Tw=ji;BwyjH7Vt)g5km&n~)<YL!$
zMPAn8#OwK5UN4tj^CujNV*gKR3;utNc&O}!+gbUU;AC&|bsK3Dll-K;pGyV$YNfa$
zJOV?L0W$pPU!)Y!N)4^tCIBse6BI^tmsSp{KqF|mcc;n~)qd4x#NTzqCU-a)7TcG^
zqW5)m-_H+n^5e;<ep^!gMAfhVi=x0nLSGeC%+Oo$`e*SAetq!uetRbR_vfPOzXM(O
z`}uL7YTeykhF{+Hx%T;TfS+CAd0qa>gDpoOtL5Kyi1o|~@QcT6FWSBT@S&iQIm1b(
z>K+IE=~=k|kn>10c#q!t(_MN)PiuC~S-uPD-<8|@J^;fPLkQ<{@2OHKUP*z)XKHaR
z3~+L+KR6qbn7_RG=4amX=u4kx`Lo7*%q*57tAKU>oi3#PMlc8ozy&~{zyo*>Yy!3d
z+xHV80WDAqIDoT%e;r`+UVtUw^@{k5%tG|HIfUJj^g`TpUuH}z^I?fg{E=Z~E*e30
zf7<WJwdmRX6tec0tn`J3m7BvU7EZmqQF(zEmoX5^F3l0NC08BS3eJMw)mTl{T-QE)
z#I8+c*QZ)Kk%u|tj)m|25c^hm+|FDQP$)j>piJyv^-*;tDDx?2;m2T?341E5ER!QS
z#5JXpHVO={46-t^p<wr~=7zznB=hoNtEcyu&Cb@R-IR01gy*AasaQ+byfj~ybB4V;
z<05shQqQXN9;R{;IydETL;}ofI>J2MQReZ>ACh=K(;Yj#anipK(zV@hHXn8iZQ647
zr`|@UZDu|U?Pu|WIy8+VXpG}%yrXFB_t!YEfq3>Lav<5$(%mB3MbhabXdf6B$Ef%w
zF`ID-jbfitdU6YnYlzclNmO5mYZl#CF|}N4I=CTa%_x`BhRL>UYV$C?Oysjm1&VA`
zG&xr>Iv=_6Ffg&O<>TNgz>5xF(d{86AUytj>sg_eDdw+40Flz8*`ryYazXXHFz*Tx
zszM$ahX|EAOmeEWQ|-BZU`^+}2Y4J0J<7lPv43(p1$i`W21?eOG5OrN^+S9=CG<;T
zY)Nrm&0tD*U)fyH-?JAzLdTdtawzQnk!vhs9>0Xo*U#Dt7piSLI*w=G3qokZZo}`T
zI^f>T5N$?kmSS<87Ir<W^=Iiqp%e<CTP(d$yz7xtcaz@r@|XBxR+{L0`H;`$p`PoD
zow4$znPiYB#V;Q>FG_ifZuvF6_?K{9FYzVKWPw_?F8z{U$`Acg=keVB&JAs9Z?d`m
zn{n5|<KD_sD+;O-rOK2;d~R{7RI5Qdtwz*E7X3bjzmB0nBc`VO_4wU$_9ZNn42(?7
zEUat*c8+r%2gt?E!^?;MsT633r%u1Hh$vW0TtZSxT1Hk*9)bj_gm3mUi9{VY8iNJT
zk0--A%Rz(*FYFobm*g`LyAFdDh~2%ZBais`H*_t`(|5xCbw_tp$29WH9js4wY?I-7
zCvNFyW&b+AlTIetKGO-=PwDTS)XANaaU`g@<0UnBJMD<DBC9^sMt6E=G^R5f+qf;6
zf-@LZic%axi2F|}`~Q!=+LZG%<WNFQNlH_e?Yp*^Ay0ih`c;uR<&<aqwWK*Zt@+nB
z{5l;F*h)kslq2UDAO;W<3wtUR{O(SSU<q72f^RJl--da8dmWbRU8p?$=mS@Xi1U4G
zl!Bq@3E1q_;a}eo@`bu|AbQVoeyHDO%R>l*c?QnE{DQ*e!I_zqKFG2~LK$(k-~I8u
zaCVTSZ6O=*tKTxTf7jDRt@eI=W%iRISHQ<Q^HigY;%K&u(3Mhu7aVK7;~jFM>TY$i
zk2>XaF&4*FTl*TfWILU4)_E6Pbjkl*_Q`(YQ=j?V7yCP3arwUWjqiN#2S54QFW-ZG
za-6n(F<FqsMJy*NNzAJJ%+`{h6`7ON#Aj*dW%-5Fb1deGNM)vSUC>=jxh_fFI^W-Y
zS(rr)$sHAx2eK^5cO$FohnnMsjMMBhaRQF5x64;?eg1ntWnbCqrN<E_?a!?Amt2nN
zam7D3;9tGDS3P~s|NDG>-X;U`dH)1}T^NCp7=_UogF%eNICyXTgDHUtTwja&AOvww
zL{pH18np36#?<xQ=$z4z%uq;!Pfyk>0Q^_+kcGUjHxl35!_hx0MtXQ74@%I7uxHmX
zSafN_sv-`HI!phil`ZeF9_jHO?TJ3qsy^G3xA`unf3>HqQ+MO;Qp35QZ?G@)6b<YI
zt!T{^KM^OSQ_*=IK4Ac@{{+MrvhQbE^z&=a%lS&44stSwqK7iT7~xC^Ye?&G8wi_{
zhdDGe^3~uN(M(dz(kwEp7&cje9J~BQ`e}_^3Y>~SB`#%d6&}_5^iID$_v5#8KYxer
z)rav8i?^EIsi~jU$~SC%SVzC8^9^K{E5k9StF6Ai>cdtOuG;V&ug9(7>Z^L)9v+(E
zV>1G5A8dbw*v}Ch<|vK>;4~tf=NK+igX<i}ZEE#(okTFfupnSVLBqhp!6P6dA)}z8
zp<@6sv9NJ=s|WG$2?&XZNl3}aDJZF^X=v%_85o(ESy=P8|FU!BSMFyD4+XVy=u}D9
z(5)(Z7?@Slg>DOA7a@d;hfhHGDUnJV>12=zhu;T<cV3>@$I62L$q}f9;8P$%C`j<0
zI~^TNnGm7x*mFEwz;g_h-mIB5#%Y<}Nk3`RKZkSWR{kueZR#EUW6)Enzgp*SvfLSt
z`1zkmLZTvCs9QUcl95wTQc=^;($O<8GBLBTvgy{NSD*f(Neyrq+_BVj&#k}q4Gu7w
z1py-M^n3e@{l)Kv+IeEkOT)Z1?v-!L^?iAMEZ<Kb=-=yJfnVz}y<Wf9XJ-9oH(+j)
zmNuOr^GsqZPka?gd=-*h<yUb7;WwD+R?}`R-PY4@JL`Dawv&DQ96QLp!<G<0S0s!k
z5<!!kK$D$BQz+--a=xzQ=W71$7Dl6R`b9A)8mt)izZX3ynOP|wmg-Sy9*1TVmTfq8
zWw9^&dDSL0uC&^v*CC@$nf1!5Pj&-x8kE<t{6-WsO4@|tCe^i~r)`hLv$dUYU!}%+
z_oJ1uyYi+Xf0_z*PvNu_4WfA32!kR{2Wh&<(?gj)>QDyPXlPA_*KA}hM%QX=ZN}Gb
zVplR+PdL&&1L!%KUO3-Nvbm7U6)?AY{^D2O=;CFUZhX~EuAZyMGS`mvrq|r&wU=La
zvzuRWi(YK=NA_3upt`^4)xW=w!Z?H><YduC9eq^MMH2%h4K*DVZDyiJiy1YB&)He!
zvdCeRm!)*MX2>OdZW-MdQK3q?s7lrO$hQLS_(sry@9w2lu42)ZFH%&ciiH&l`~U_*
z0T2+ZD2Ya4km*#W2aF6%^o<QosT3`}d=3rjSG_7bP;8dBdHBS5d;*f#l9!z1#~w#=
z<K*Jw5#Z+MRhS$3$p(vckWJS2HIYEV7Yn7HwzVc&5o|~dx)?`<DTyWKm|~3eq^CIg
z85b&2AjqjW2V!N;l;z$&^K4&gQmaOzx_l)p<Z$H2KY?*90`7Y|46<a2;>G&<1t&U|
zzqm4vqR$tZn^~N8>gA_C%_&cNy3?QGjAuIY5f2`^H_rFER5r<w>h+`k(`zo(s-wx;
zv<o%GTJ37vU9Ed6_f++e9*X*@j(xYcwX^<XBbT4u+h6xL9pHs@JP<(`&73=VL-c1e
z<gfR2Y+_*I6fZ0PZ~l_?$F8dnnP8~g&iStIhE3wSdBxVhbxYsft=-n`-O-(WsskM~
z_r@~Tv*k#>5+8f!^68%|=gwT8@c1V(fqB+<yAC|w$A+sCq5318$`pfKHeX2etdH6+
z5pVU%Q<(1k$2`k#5mj?nbY(|6+ErcMHC@|vUEhI1_55z~B^O=lv6Wtby3~x`<-+R9
zo?CGtcE?QYiCu9y;$v@I>$<LQQH#5w8^=qip&m9QID?qT`7j@OioO=CBEaq%cnj91
zMw<{@Lom;8RdPZ$CgRsmIegy}pi^uq1T^LV3H>0DEp07y@zHT}uedeBTF`f=p#_6?
zoJggjrleQMz8bnEd-HmF!*4l|2#}7GB)$Dd^>yAd+<l6ie}(@guhq|ZCcOM#R+Nz}
zY~DBrr~{Xc2MVC(;K9I|YY&c=;+;^%r{T<1JZ!R<?0t^TT+`1!WAb%$41Q@u>0n&x
zOH$=<lqF}58VE*2I~Jls;2oqAa9YY4>~+jB(n%-Tfh-NuR8Cz=0~RS6ARbpKc?hIJ
z0_kNbDD6br0)vIJa}%bA#H!@3W$k?sRi85vaOs>Z$ep9*O8sCzvl%to<kQ5r8}m+6
z_ENOOU<TjC2eO$WL!pg%C}4DF0EK!1w2>iv6M!8Gv0vjiCcX18sDx!WE&f#{Mwy*l
zI#aqekI^MT2Br_FlW^PZLPpO5!FV%^fWg8Jm8Cpu(vPJObX>9k3MUzkta6yOEJ3=J
zG5or4Noh`>Vg@M1s&or@qA=|=?CB9BqHD~h+s-3U@!AM(UyeN@U@5`tO;Y@$&_ZJ0
z7Oa7Sr$<7_>_DO(NwVB%>{nKwJwvo$9+|fXvDVKxT}3$950Apz-S~EY58b#MxvH(B
z0>tGGjR%%HmVpDIpl*bRy7vX{bK%rPgKZ~P#<?gDy=V!X%+6VotZ#F3iimFwzekA*
zG$S3&4pbo~Z-ggM0nRo?fo;ILPEP;O2PzwN6<*;Wa=?Nn?6JVwpfV_9`TO8xvjT$>
z`dj}WZcW%2&6VWQQvv3VN26lz4B?CsOp(k{EYYknY(e(W5kM{2ho^YycY^*_7qG!M
z$eSM>bf=yXDnh&vfV%*=8-RNNxEFx?0C*7q_XC_Q5gk#~ObgA<988Vurx=N%W^#62
z`==%hp&+#LM382ZLe0uUGhxwB5;Yq4L`8FuQzE-cRkcYpK~T7k7*|4$)#K<Msjnl!
z26csDdkoBQC=c-e4etN+&}a6r#;g6?o+RotBlVvpaFvIi6z!SLla5zKE#kgMhKg4(
z*VJkTY^{Fkb^p|vjbc$W>EF+U7KRH}tJ=xio>BmKNdF6uAIM5~R{c3m>UuP>vSYs5
z^^_nj0F*?wsy}=1P5c>W+d;G5r`Wbr2qvJ^y8-uU(@d!xO=p3Hp+5juUK)hT@>n%g
znr}1PA0_z0ViIIwQ~7a2UY!#Dh8e7xb!C~QE0W6ZRVXhTWekE0s1cq6@@nl^I4PT2
z@|4qmR(%wzSj@5Rp{HVB6=>n`*(rbtBqb`@1-WP3Tu3Um>dZ9}{l*j-I=kJ$w>n-o
zyi`b`+RLOu$Q$)kWuB8*%v?7si>Hfmsv1+vvF~lV7uBV<hO7D=&!By$?Ia8a3_tza
zL!dMu&Ke43(PITgA%uopyaS|K!r>XFT{>q$u^OgMZ3&^UzHtwy!iG1f;r|jd&4avy
zZE-s@AF`|qE|F)BV1!Qlz{rBLC8NP8Zf2B)E1BLv75sKN(URPGMjv`=3>6d{E~%^P
zSjfC-;}!z^#MElq6Tnv9cvR8lYWK4yFu)1<kId5m?fDqXykJCoJqZQv%>x<J-UZ_v
zH9QF!jXa<U!MH?CorIjGJ)jxExJAvKgrep>pasErL@k|!td>2X6~TDG{lbgCOZJKb
zud(@O$1NK#gMTv<@$Xn7DKpiKBcEu_K*W3j!~)3L@`y551rc@vgagq05pAvuBB}`x
zHNexF8)AN<2CnB3r?&}rfCut&=g075zCZV@3h0+>_WZeZLQ4_#2lw)$i^CZXP$BIk
z;$^JA)6CcgZpX`l-TjKrz)LEoXxRR$mFa*=g^(M6qCN`jsjMU+>jW)!(MPPE%A;Xj
zVX~v`8ZK6%UIzN&Oes6;R?#Otlun)_i0bh*tE$~4yNv5d?pOj+3L=z8Q3MQYI<x>t
ztAeDjrCWVzYo|w`AnX?WXS%VBLk6c_uC&Mt9(v7=)FY9x>%7p#h$}{Gx2R%P)3F1;
z6f~1xXd2xX%yPTCC};=}vP*^6H*Q`)R#?VO_F9x^1R`Q)R?T{Q;;GXq2q^s5%iXz-
zRc#0mgxZVS0hJJ^ssdn?wHt1CGEes1E;NN+77QsLn9sg0CzS?)d%#P%t1?ciS1|*c
zV(|&W{S6IZU1}*sRTo%oiPo-xI4F~SWfbPtK~y{57BF?CuN%w3*uLs@Jgd^C3`lQW
z4X!G4A#cJ$yQ9>rcxU=}bwM1UOaFu9uBvLp?N_u|-+Q7$#|pf+N963Yly+<NW*Kf+
zo9RTGKL@h^zF~2)LP+sW_3DaI*CMX%wUAO^CcAE2gjr%EHhx>J>W%1uo9wshTXc#T
zU=A_oyQ_9YTQZWGrqz3)-T)O=XGDbcg#;5LTToT%hY>4kVcO9iX5zF*tUlTxQ=r#Q
zqiDVSe%qPxv3Io{f{-JZ?mJuz^I`AW)Agdxt4v9i&FcPY_Ijm*UY?{O9|v1mX>d*z
zt6XtJs0J<R&4r2v@-4y!Uo@4JWO2m=b<_mtfF9~m3ef~p*$I9tN29(}wmVcC^)SIn
z)_~z9fy0!T1W|iDirY!2$c=hmG)l4|9@kqEpAjy5=M6$RY>)+wuCaF#1O>VaiM4eK
zShgew9+PE^MaeDRG9#++S_1XDJIraL9|=lhg@2P2YKJdsj<fqwjup;02nluBt}T-?
z(X8naeU@0NZVIobHWgVDs75si8Zo^X-K^?Dy)7$nk}6p@`t5#AohHTsJ)5jbp@VEA
z;#|oq8m>*cE#352>^4F=)jLgEmb3W+A)MpZ++zeN^>a-WehXmX0%D6<9F!Hj{<zEz
z7da}2*@OLAi+&>B=5s%8?^%X`rLZ$<<2gBzuae{Ot9h;%fV!#6)9fbcM>T(Yp1$zm
zyV?2r4I8d(>oPY%04ah2><~#}kKqW^Gz-g~6?GSfdBO7!{%$f*F+9Rc_52<9@r!?u
z+t{)309YruCVopiqYN=UxkzxKPz5IOnCBi-U#ykOOc;nW$!L^;8$zxP*g>XCAOQds
zQ=}Od0+7h!r&pF0HaBNXBAcoLrq@%tT7mUJY+CnoAFkZt;iO91@-WN(^T|?y6RzpH
zfBmQupOnP2EYS0i)e6P{OTr1;?;#?p@QG(vu(60E%6EBHu}6v$6HkFl*A>RENy3OC
zg7qFpmMVy+T%SS*ut`A(E=|-4FH!{HD@s3pR3}^UMG(ru&-T|x6%rOI%e4YMJ|;k-
zsxN)2v>uJ!tu9J)1lz@c&<TJ5@adDrw~z>cOr!t|Kum8M-$}?A(e#fGe6(X>+bK>=
zj4%Q~2$YgyWR#;N8p+87(81XGSTZe$Ld-J`al}oNncPi@W0rBJYnsAiM{XqCOsHlz
zd)jOeDbg3VLmv*8Vc4gmX@_T_9EJ>N`f&k-8wR?rg=CC84=~be9ia#-RSB#Ka5ZS1
zm@v+$KuTa-txAMJ4_e~7wOfd&`Zj<!uC8HO1L2#`l7et-^`DQwVo@>8y=4J(R%NMM
z6x^oLo9D~R*7j1kRU~kFD>i&<=wV~(EM>tkzJ(;1cO7+iGjCXPJ8esUeZFo7Vl4Z4
zP1y{$l4kTwcZ_wk`{oBt#ky69>+=QT+97LGr`1{U+EgxpslGPzt2w)~3Gnh`dyrq8
zbtAd5X5$iDQ`6Vi21dwld%K}Gx4jV0nKt8X9Njh1ZyYB<&<2C!Sl)=&H=BkYiqeR0
z7rAqs68CF*s;XiQ0BQIJG|x2FXj9R~H>|OXf3%(n{o>~xL|tz$2GyiR-<a-h_6uRZ
zB5-2?umQU@&C0eWxCvpfTpW7n`_yhNM>f5jG^sb9P9LOY2yVE<z<7(17i+oef(=)L
z8NTigxMhJsuSR*fAiHaY@S7nFGcn?FOB~}&`k&bFh~Yp2oS$9-iF<pv1g^jg;TQ`R
zXiL>~&NO4e3cpYvj7VoLS(<$lE!Mb|;h7zX5=9{;($*M<YN-z5HBGMr@MyCfr`^76
z`NHFYdbB*_N#-}<XT+o1k9F1LlJ3P9SX{~|0_$o$9aUyWjn&VV1sqLH1!27Z-2T|l
z_2+jgi`MR?s@qiRgx?sbS_Yvo&c@Rcm3Gh?b+uYg%DLp5&&`K%SFdNwczZ*CLK@OK
zO?R!}iVTP6KuMi!qywi)3ntbH8OfKegL&4e7NYL{plQB~(8}If->ari?^8HMU#aca
z&(q(FB~t3kXG0hv8Oi?FSq9!0cc0F>&_l8|rhoJ^a6h}<3|JfhOb@xuOsSZ9Y>FTO
z$Y@r8y$;b&2Y?I@K#NOpL8nq^8himQmbI*ggLu?*Knq4lDZq#z>?)CF2Ff!L0S+KB
zjK|fuFT`2X#4CUw`haX7K;+p9Fi}VBYCL}DW_bWqB(|NccTY6YxI_#Ig#6W=iTssQ
z7`iJr+=(J^LAU}RxzzVvAA~JMB`QjiNDaub5HbqO0s|=A4@uQpJt>W=of3(Xst88W
zgvwAwEiC9K`s$!+M=d8+l3IwGh?+TTRdy2AGq=bzGZQ(cXnx_3JSKo-kf78|8e@tG
zEien<pitLLKu*VNrn!CtfUS<IwHJ8an!(0R?F}+bL=Nom)6X^fAS1;KI~=DE^EjH4
zyP=XULS1fR(lt88F5PB?AlxJX!(r)!nK~wsPz61g+PoL)3^Vq0T101zVj~OCiNJ|1
zOr;{sTnM8k9bp0wXi9M71e=krQ;M-tQIFE;$bbLd@J=%D$8yXHHu$(PPd9KJ7~}3e
z@-eqNjFBzq`^?XBs&UOP3g73U*JNZ{i&>0GCM^D{>(zT#=OI_h0cH;z+&7v+=78cc
zC=1H~e<0e?{&<$6J#P5MS~g`kTQkq7`Hqz0W<%zH;xS|vvcY&o534-_F5lc&uTM5y
zIorCp!}IBoAb<#Q+@nEx;czu$#9@3rtU|s6%7G$^n;>(f<T07WogC5a36gZSfiT}b
z^XG3r7kvG`;;>%7aQOV^XYiNfyKc+lgTo!0m$*K;Q4h7)<Dh*4Fv*<$qi>Y*n5>#x
zD#Dhwd%`UXEaJR=hgxC^V%vfve@sR?(IJ)C1EChco-wW+UYSWSc{eMI;B522bu4X+
z9&b6dN{LD=aE`6YV+hXz6Lc^YpKUw+!)+j-)zCXzKr$Di=)fFsg)99>rOj+Vj@w(c
zUK>oOmLZ67IAKQ;+|8qK71Fr*HZBnlgg&$4gl850gACl77=t7BYY_l#rdJ(};e4{X
ze7I2sPf+MCau`<C*aAnh)?!H2ISlg!x7v2h&D(f)mN=>pbgD22*5|6z1~L%kyi9}w
zfgYwAzmgulW-K%rBOKYv2*o|YyT{S511fG~yWF5ITD{y69Xe5lgPfk|Y%H59inVMK
zvXKMVL&Ovvh<*+Ih4~*xOmRGqVXQR@$khN$;_OVc`1@q!=U^%A@iPry8D(&lN)$cS
zOU_tbf`niUaqU!oL{qfJyXqB*WnrZ<a^ouMl{U3?E>kj*Zh`Zc5a=SyBo?@h#*B_>
zCONL?8hLpOd(DJ3UL<s$@_*KShH+X63J)%~No4^LRA~2-<pYw!q74jJaJ;i%!X!p?
zv2i6k<{alDTu9;+qaP3=#*s5biajp;gkdT`(awe~o8)2B@bYf@3=B+pSPo5F$T(*K
z41mV3?`BKEUuO<UR)8zLB1!Ku@i`YM2RPgpJ@4yYyi25wnkgHj>bSwu$!h{*qnQkA
zAAXaeA)#guA%#jtkpvik8`ayjAl)IiWiA;)Qi#&J_y(dMp%0D>Q!cM>J`je@F5*Tj
zZfBNAB4h&@5o=t~!vT{M9&;NN9_M7aMh<mx>Y%2_k?x3;vf1Bl82T<>l`>i?<P1oh
z!hInj#GK`(w0<ww>eFhD%8=0dEwB_z(Tw*W;JE@l6enuhbrW2%+J(DF8uP@_ZB(1t
z30p^*`DrOmkESxpVOIPB{KnngBxf|W)gj6pug7FM`vXA)?oi~7I)N*uppqLl?aoPN
zZ92^lYvxeq;MkGFc+$@w-)#<p97?YY#5v?{2t`^98f)Q{NOFIaT!iZl&S<fFH(XYJ
z5CZK+#0^H|Q;N3<x7Ssc`Q^njG-kWc+F-M3NJr=vb>}=NxFIefxr$Ml${sA>8(v+{
zxs%B|=SvJ~!(!-Eo?z6BMb>x3p(mP#!s!+NyxdBG?LTm>lg;52eoz|eAwq3K6Zv?&
z!PrMUioxnvN`T)dObW9nj(FC3pZP5bth?W##yGnzOIFR!nEf#GvDQ0#JDoa5BabfN
zd(l*alGUo8s%0dRb&9gQ&r$hCo;N`lG#kn?Rv?%&pKr-rSo7{x7kTRxv3<g3^CKtW
z(p5<TRk*ps3`f0D(F@gfC&6kN<yU@)&a?KKT_Zmovr7@0X*6ljB=p^+Dv{^_SQCzy
z^93d$QHJ|7;FIykYAJ#Lh-qCj+>y<Ntj-FBt6$YHWq)MSUYXgFoY=Yr7!Frbgi$sf
zFhR9R5rNkrj||!kD4iDsAW1UuCQdgs0%VpnIss_XlgehVP>d<IgwA>8M4>w(yn>v%
z5s*rh6sciqSf%B+cJe3nKv6UQL_Lm2i!+zc1LXz$6&*VX42-1JXqPX^kL%$0C?KD(
zO!O1U<@d1};0B?E{TZv?248H<x4Qds(bRkJ47nBUK4~DObS9Joj&4wq`C?2nSUpza
zWxx|-4A-5KNyKHqOqWc2d0}9C2wGuDuZ%0^%k2i1@(PzI0?f0X9;lQPc$zLt`P``D
z1WnD)rzq+nZUFe$1TlW8PHNL9R&S2zYiv>?iOv*-Y`0E9o7zqo7wK2IQLBS(N*4lf
zL7k4(E}q??TR-h%xAu|%Jc5n#KHf4N#>lb9=Emh4uRC(f%VFcQ+0U=kp1B?;+nRIN
z?fq2>wa2z+Q$bg12w{<yp)Wp<O{F4s(Z>io06kNWg#8@LTBAt|m33fgV0nwhR`k<k
z$EA988<<LI12~~coLq+jG<>i!NpB6~6uzUCWWYFfR=m3$Tp}bTDj(^S+=hX459MAj
z7f-k;y3pgeiM!PEB$c>9G`Q~~@N*<Dzh0}yj$Pn4qzxPl>0vA4rRa`Q?sh|u&Q$Jb
z|86)!qdlLFf{U>(b*$2%vy*7H+!N^&(EHYFU9GvW%J!XH@Np>YdI-Hf6LsgrMZdTK
z@Th{aY}}LzO%<5is>kU-XtP|jbLs+bc-kTM(+?{uzK()U%hv^RPyGI*L!3C9(9oLR
zI#VcZIZAxB$FS>R(lhxVCTKxR!2C4AemK2J@{9>&#d|)_wmFTCgjFBZpeyBvQMZ|B
z9pXnU{efbLP8EgNus%h@MM_(h5OAqYR&$amOsyR=X?qHVZoIY=qEXQ+Fvd?pS=Agd
z@j&nMdSKA_!zb%w#|hq)qp2&)nxhTC9mJ-t9NSt(k_$TQbzBUB&x$N+VY55Cp3t4+
zfm6k<TJ=??2e&97+?mCYPSY2sxM%2VAXN4mw{uxN;*s<oyFs4cm|A_eTAH73Ra5dg
zHM*yBRAro;`$9CdXK=&?1<co5ebY2{#5~qtulSMd`6R@ejBIQ^a)7MfL(pVWrdMzu
z4676l-2Wr-65*O$<QOK!fjg9m^(v!%U(G-}`Hf1oI9%#=Sa)}ugm)W(>&C8^<56Tg
zyi;MyGgz7Iwg~-lsW!L}=F|O?)q%UmPSWZ(%Xjb5bJ`Hg))NfVDqMpyI8Pjp&c7c-
zp&`Q|*LQT7M6qV`%_o?Cn#t{>Sv&G3xSz+YEp6pE=3W&8T=_a<Pp@QT&PPi*RRExT
zK6sYNzpddd6iU?(HdrAJYcIhIt!<GkfH9?RlUQW3RjxFONmKO#_|(PXk+2V?g&h=H
zHFu^cf<11#U9ulPgRIz!mKaye2uhj0k`Hq`TT}qYS;gWj#WxlRQ@n%5nlUW;;XV3Q
zP-LH;Rw{iLNX<myAGB0q582MNXkzC}Mvx3_yfwymZebqVGhEo3amnnd%vJ;CxxS(}
zi<n-L2Cb0Y=HMiDa??;xg&0spEsCu^@DxXoKpO^M<=X%?(ZexG2injH4^RwyGY4j>
zr75RaLiK89GRDYl<B9BBuod4&z<p{Dm9dfzFrTwORDQpqmMfo1@w&(d(tGli4;BwU
zz-=qE8y=*bZ~7V;QU;wjgBeX9*VS~-ycFV|OS2jx7Xg%GmQMZb(Rh@v6>a@8JP->f
z<1suXY{&$6XRC(1@DejpFVYi?boY!9w5Z{_cNGn&1Rc=NE(gLV(8JEnjlIm$@4DT1
z0!L1eY<AM9K4dp93(jQv_)7yq3>9urF-kHVc-xDEjiax#NOFLzs0SYI$3zSaSQ(Ti
z&ePnai-qap(^IGmPNrScFZ=jHN{bb;v$%+zWIWTVbz~kP@lW;wfnW@9JNvvS5^$6*
zG%FR|l(35~b1qpgIvdC!lMt(dq`nb3`TnM-XYHU9@8aqq+{_)#6300DbyVdVrXBf*
zIb!!xOxc-Yn#7AvCNGpnCZ4NcME%BG!YD$t;rKqb^D$zr&su^rve2YkfwJSRcJSc0
zsCqjU9!e&GZmYN%hZ<w>5<?H=Ez%vp>3U+LEU+K=jUt;lR-(%coOC%6&EFB@Jp#bN
zDcwvE{_Uioh8j>7v1j-fP`<`0U`!Ua$%BBQUajGn^EO}I!lr_<e{N)G)#~zi;V{z=
z3U6%s=moAmq}In-)zu~%cS^z<iTV=1`HfxVdRSEXA<pr+KBa-PB37?x<9Q>W5=ToP
znYu+Zq7d4C`z~gK6oDdc;o)0Hj%<tBsd}kPajv}2u&7}YW7KCVK{XdXgrEz8;rpBD
zp%y@&UAkamu2m&sDY-dhDNlkyJD+ufx&62gcmIEd<HbJV|9iaMVTv~aPDg=FQ7}Pi
ze9movg#0`{c}_#-oggMZss0_B>`icJhfjICZbsC=%{d2k0F2K<r_XtVHrZL+HWrdC
z8O&E5>ii5tf67H&v*M9Fm{z<PoJIK9f&aZF4k8MV8+T)xg9=I6D)H~M!l&t5?0qyC
z-{s?qZIS?$L5wCCXT9{`-BXVRCLOEN<*9te@B;xFUwOk}3uN`}wu8Til)$ST>*TXX
zJ>Hb%2T+DGWLzj@lrL&wu&Ygqk?2JCt+9@LkqVsGdXzz|5SFlO(k7S@AY57*b_gyn
zbCOAO3)Yrh3#O{rq%SJfrAm5VyZ6!~c!J89dR-Ej>NdR!m3$u2RaPRM&s)TCj(P%K
z<(L!+RIX|*mu5_|TAM}>ouc3j2+x%z;cCbz%G&c*^lRxhM{CgPkHP2E{Z?x2(Ra~*
zl%H!a$-!h&Rlw+0!JDKV$mvcMgqw{+Ybt#Gp|l!7i@Q91DSO(*!9X^*miLo4!I(F1
zxLf7@gA<`y^5aX`azM=ibBMTGgyEHW>kx{)lHd%+BG}myp-nLc+`C(O+P#cBxEl5+
zw`XDmSF$Y^dM(m@mR|}LrXFg`s40?mkby=6s;YpS8y*1$D>F3PpN~Vb%?vX3cT*+T
zRc||l^gl7Hd>^9yn!S0m&&`<<9=ALD(wKeJBT3UDxQ(SvN-R7-%Bb~y0U5rdok!;I
zfCtuMb1SMfIt5o)CK@=JOsk~!IUP&dq%(<Df%?`>g{#uepo1VP{}O>xWxUF82h`{z
zIYk%J4oMw}8(+hTqdZYMA0-813}GrjIwa0E<46a(^IGz4&4A;?9g1H)h0R<l+-TTB
zspcwcCW&nvHW!Cu9?avQ%q^r8JKmVIk7pgUpoS6{5YRJ6WsQbmKJ@H-qCNe%H!`2B
zY#Ly-Iv-ljE9Gt^R!lf^O76n_BqMnoj*U4SuVAdXn07Tf%(|JWfkTWpR1P#^oofHz
z<;v0ps_vZuGQAW7Q>7f@TO%Vl++|fZa}h;_&E5sF<bLK2Zyf=KeyI<s$Hr2e@T9wc
zPFn%*%D6T3`%L4V8J#eqy&bu<7LUrq+uz#4_hOqFXSu9(gc*KHxT7n~uX(Wel=xz?
ziS5k0cS}orAZ{S1k_>5Ww1#)4Y(f?y7-EK`i8Ke}?J%uh={2nLtr(S}42m~$3kMV$
zw-04=ryz)`oWWp#oSQSI%m-JlPRD)YGF)F~5F01+qHA`rCuFr2QTznfcjKj^kj@Q`
z3M@kIKcjJcSgsFn$%`KQ!LrNe>P%g_)l^2=rh+E7Gw6Vl-b-XOCT(ci#Um%^LfW}W
z8J#opCMnaGrtr1<^dV_)-iGt1vJ{Qsh;!E}vN|SPH@k>axv7`5Kjvl0p13tmG%BRU
zbjaN3xx4u=hKpOKEaIRPtK4I%eb3c#J3<@7EE`S<?SKTQ1*3DQU?lMNUV{yQ5@l6b
zP$U`fT2Bnwxlcgmv;|p&K6R+$7#Qz$K<x3AtKciEgss;Yd&;XLi{6sVmj_b^rwIJ?
z;zLNfw1IKORS$}Yegv|dz-z*~Syu*ESPNt93T-N@_aVs`__#_HCnvAQcXJI*qThO!
za?KDUb*Qcnm_Lx9xQV3d2xodXxu&F?Ihaf-3ykiZ@x=WHzCZu)3C%zA8SP0gCBk7a
z|5hRE__--H+{AsytN$kB!>5Cd2^OFp0*zR24g!j!5*3EAqelqOUb?|x$-!@bwxMNA
zFBZpQ)#Y6rduxLlFpx<6zol=rvvzD8JGBcE8C^X+8$0*&@-cssR25yCj7+J<g-~T#
zmV@2)jwR>L7YwEsGECiJsQX0s@@Oj^b}Ar&q{(!qIW7N2A7lfEo5WbV0a^*b-O1VP
z*mh#XC>0TKxWJ=8Q+C29_Je<San8e(Z9ZPmg2Tz^E}sPDYMA`zGbM(M;GE*+RiBIf
zS|B{dZH~N0SD5-XgYijE!*JbYS{Jd!!E3_2G3s(vl0k)Z8&kM2;{52{>T*x5166c&
z5>BcOUjVs3_J!+S{-D}(DD@pu4^wO47Z@d&Uf4`adi@Nv(Saj*??3^O4%qJ#Vwsk1
zFIZ~p=CF&PM=@AC2Rg&k)p%($+pL*+zwX4j3I}_t&yY(*_{#ckXB^muv#NU3!)}jt
zmdV8;ZHV*ffbEjj%5mm9`FSdIBuWM#v}lqL`nXMM<u_z3)n%=@hTCNUqOOus=&;e&
z2wFEVqA7h`3qVN~7+7)8J{zdWiW8j^-ofLK83R)|$0J%8b~e=jG=XLjzd3lBxnV0N
z<An6^`4NZuIz?phTlqLXMTa6AO(euJ%#7H))9lz5ce}hi8!cU?Yq5Et`eCRkZ@Uwl
zG9@L?oPl<+nQ$aA5q71I)egw&K?8^GsWjss;rymDE^Ua7+&QGNYmhwgFSuF5aEZjF
zzgGiR;w+Mmz&I`8n~k~EfqN}Ez6H<gk;+habtdr6g7T1=_b~EigxKHao-5j8II%>y
zWlcRH>*)hM#H)*5>QANy#M!)82}$4TyczOs_SA=t;rhG|oYOMXOqq}pSRtm=fF_E5
zRvZaBaF2dC*)h=YrnCB7M&t$Y0Nz7a{3KPw*jA7TC;Z55ro25iEq}5RJI8QpqHHei
z^!IXd@;56c(zE8StBf=5h1?9m&;;Mg>y8XPbYxu4#uNq1=q-Y&Up2pK9}+9cP{Re!
zN-@of)-1FxSY!W~PgflBNY`rAVo&vg8b$fi>#&A0yHId4tjG6U)4));`W9;Z^9!Xh
zJdzqUG!YL+1d>7q#7UR|(KHvE_Ht#E1TLuch3AhRG+RO=G!#4csD0?P6!WrNJBUM=
zK%KgKO!Te-UPe2KyLSh+s+x)4udGQoD9uxudjoDA05kHfod(NNjz(SCuDY0^_kx2K
z+#R9A{V=c=`iq>`IA}V0vv>Grz!htN1%UOzlA2M>y6WrD^tK4QmuT3ss1Kl0$vgQf
zid)dV{(C{<O(bPcVDdsSTnv{H#y#kHQ^Xd1-IUAnsFH+;b0SOq)*X@Y;r`V=msR%2
z+^c-tczbblCXj$=!pOr{q1Y<P$S}>($5T%a3TK2DVCR^nsynT2qK%}BY|y3QS5mL|
zxYclTyNh+@7}`!A>u#D`Q+|tf%teq%4A*8256cdQhHapQ36rHJt53{%|M6lvAJCEd
zcS4)_CS25Mc@d({Cq;W;Q9J%!R81mLi)mc5><bB}Bslj|1i$5Rsv(MO;BE|zd{aTX
zS-qnu%t+7e1RYP?`Wc(`W*wE?L6=v37*ULx-HEt+<9()+vLGoGxwOMlwsZnO@pG9<
zmD>_4ODi1+GH3iekW|FRTiG-tnXi!ix#oAkF-$WC#5!zzk9hoCv&ex^h7uxp;K7}n
zF9P%an6Za$8}t?Ki%@_nAr@3fAh?~@_FvLoi2|5u(n5dLD`AfoH*bPUq!2qRwhFQ_
zHLs=@4Nk90z1uy9t+S4JsV|=xsr&&0KzST|lTU^Iq8{FOs=tr~sxZa?1+a~YGOfdW
zp7Y|6gc;H8G`9WC{<&cs6=4GvsI;Rhwl{fB+FQYMKC_nSQ#_VUD%d`*t%A1!<?{rI
z|5L^)Q!4B(7&zTjc@1@Ub4#AA>-wLQm(4S{kodaAHf^({7%i<L(CtmQSuTVAdWOku
zseIZ;&!{=I*t4)nO44bP0-e$h^hxEcWig#$bA!c=BvPH1YgJkd(>wwX;N+=+3@^O?
z8hj!G@~r;H0|U}+w4DL(=i8aiPVpuHL)nT=m-Il_{HF$#g(Gms(Q@=iDV+*zJ#iB-
zz;7T!>+c3jnbcu^`slPxWLaK#4I!cN>v*tG%Y>%0*<<{0-O38>+;<)WOwJh8riVeL
zE19FC{PfvlmYNQ3-+O^Tpk6~&h6jO1PxGevSOJXp&a*=i%6B1H8BDHuYXV1iNb7l@
z4HA~kMcW{V3+;w=9Og~ik$OB7$KM8tM47scTPFR3T_j0oc^UXgxLtuLCy_1WD|T@9
zrfEo?8BxCV_Oo<YXA8K~G<bUvtP^DJD#@bdF?NQsQup2G$+nIJ0zvtjhej}@KZY5d
z&5Hv>c!aEu4!o|}nsrzih2h%l5S%eGADv^f?fNhbLH|su14ho7%?Eh!`;y_52>?2B
zSDl4fk%PksMKtpAL-HiIk&YyJ35hn}gxc)oJVf4dnzZ`t5>al=5c`c6vDkbK8fc>#
z_C64-j5#P_>9#(on}ItigA0ZHKGH!%8(Ud)8Epcj8t)KzFgC2BP_(RlGkDYlwgsGe
ze%?-~<2IZ*a7mRjOHBG`CWF+hAVAjs#D0FU{#*A;Dnjl7sA3{QM<4d<!Q9Q;xOWj@
zF6Z6e5_J=EY1TxfziCvf8NhPRHp8+bY<7rLAj416WjGjWAAj@z-O-Qu`?EYa#Q(+r
zIm`FiR~^tqO#9l;wcs2Dua!`l_57Uzb>0B`wtdox@supS9F9d-V&(ulK*Yb|%zlf&
zuAV)y)rKrA>z+3Xx#1Yvm5^O@+#<aO#z0FtDy$<#-$<6_1kZt4qOP#@dk_4q-8Q1S
zwu|dFF6COgT95%Aa2f6Cc}Mz6L_88@KJK+2pDZMOo%I%DOPCM9Q`D4`fXDL1E%_EK
zm~K@~U%qYcEXJ0ai)>EfT4Y8fXLp{!eLcvjrsUVc66L%97&IT~Z&2{KeK)LP90oVC
zs7CW<`ZJ2<T8g=ZDWBO{<VxB7VH+#Ix<Bj062AJH*y%XFlZCagrh+KN19xRcZq-D>
z$I|=UoyKu?UL5GS_Ciu@L}hR>#YMlQEc(p*Mz+VG;@>#)ndo{CQ5b<1$NokM;309F
z?8ca{>f?bVi!jE<VWjyY50@01{A}osv<9hTe;tV$j=g&0<0$^TbS6&8{Ati3R5FuH
zcBW&B>jO)5Af^{;!Hr+!kk;dQK`>2Y8maMEVJ-ao&2k2-&m2a1^-*q$^h57(erdux
zm_;)R^5R^`EIGTj<_%E5&p2E!uPf>vMsR@ctgC81?cw~B5d`SGalp+gaAMVjKvlu<
z+q|d3?MKk!^x1i&_7`H+{TOt?kJC_L<irhpm*@!^u{Z-`6y(`BjOTeGyE&iJq#!e6
z0-02i<Bps>6&7yMKk;v7ukOB*5*7R6M2L4BzvBawCLVEBebHwROsD)Hu+swJfg$M_
zY*0*SJiL1iC)JN%e*b?qg7UOI9Q;D_=mtWIY}J_K2+N$t|6l#!E**_2-cBUSn!x{N
zaEq|iT%;KM-vnd(T2`i2qr!`80iiR8h6~<tC^3?Ubd!lOv-Z0Os}k%!V(jz|<MslB
z&B5RcF#ZWqfGo!J_ULe3AGa4mOukxhm}WIyVuWo9b1YUa*P>_xcZYu2LfAYf55YH)
z&XNQWsLvqjC!f}H3a|#0nTG8&Ed85>HNkOIQ3+h{a83$iae3vbauvttl;<uTFim0g
zffO7*pz`q%OO5lT^I<X*e1HK_IJ;Ym9;)=KTd^SS*U_|}qn9J95YLvwPNw~I@%uiC
zv9q&hX+3|r25#MX>VuAJbJ%z>r?Z9bBZ^<hXMs3d0k0*Aq@FcD3!cFc^-W|_tJfn<
zu1(KLaAW|)hbSksgqXwncVO}&F^>9#3Dr0diNxp)LWhe8n2?;7+%=smC}}ik6sA)t
z)YvBRcVn87<iFiMXxn8;=a24%5+xr?#~24H%Ap60Y&JlZs#Y^o3>5ch>+kRpD?ov^
z;n6*#oo7Oy8>>*EVFk_Wy;k`p*^4GUnA8AYbp`<qPYB1${gNUX6jeZo@^rsg&2nqF
zLEKl22|jF@C4ZA+NO8KW^-T32c*xqguj}v{9KWIrJ{69_?C|j8mOx`2Sg@OjDc0-!
z{|rZs?_9?NL(ws*+@ugFeY>o}aG6HNx;m=@zy7I*H^WiIx{k5NY0JP<OQho#E@`I9
z$6gdtmq=Jrx|nryKa7{~bQOvUrRfbw$wN<`hsB|Nd<GVfnTz-il6HdDk7Bh@2jnL5
zWmZ}OGD2^_2-z#n0)X;k)R47T0j;lCpBBqY2z6R-k*iDN&vTwwW<uV9JsyZvqwE!%
za;4BqM|W#vQBb@LMcVzDhN)&Sl0q?c^lKkLYr27JHv&%OjwX$;L|OZu06j6dIp2{Y
z?Pv5dNuNGfuFO3Z>C}}*6fPW=-mxAhGAvhlWktU{!6n=M>Q(a`tg~%%H9t~>TT2?%
zdl!HzPenq7s~Zy(9_;M*y|rLfKIf3e=EznH6U|I^ZTcJkXV*<VbWgsw^+zH$xIjjx
zY+Xs2{t;GnwmTI<O!5xZ&3;{9%iJ_i@9w@&SGGt1&gw*JPfkHc+`6mcMufXkRPPD~
zzJQp-N|JwUC)jbk$PH##HMkr0k~)3bjsU)fsDBCowvsfPNNvTd{=llK6N%(bl=xn!
zk>B<;Qoe*;L5cvW0jdgtFEN4WD+~&21*2vOE5@?gCftY$7U`rN8+t?tVuo8USrl&w
z`q%9T_=%d!2zXb&9(#np!ULDSzRjm7Q>oqw-gZ;&7TDsLBta;Yh}}i-bGvlbEbd&-
z&^;Ch{@6yj5!QkVI;4l&Uky1z3>Ze1wKrGURhg`SJ3y^Pc<wd~E0H*fmN^K7qT39d
z*Xf(w9A9@X!FHP3!GyHi1a>lUW+R4XrQ}K~wrY0ImB!u9J}lP<!w`083ID2)I(Bqj
zw^*fnH#2L~Er@1|v6~|~D~w21`D=)}EV3heB0G{0*nzy5vi>vH=+|wwkv8wQj|K}&
zyS|%}A!Uu7^qpFjJ1*TS%+x`zCXcF>k4hE*n&kCrZ~50`mmO<dk+R}kPLVcbY+j^P
z$=_D|=Uu-+@M^M-wK~QVZckr^%u3x<mcpP-uSGrWx#lWa^W?7i^@vCs>W~Eaz6?N3
zt(IkL%Wku7p>l4Uh5Hz}4f~ZAIUvc0Fn;G~<Kr4v9Zqzc>Bv1mZ?c)9){<>s%nC-c
zcVjNyR;1&uNL=m0gp0LDXdW-*`bnZ~Y_>nGzh)-y6F~nCr1P1Bi_kVnYLMsBMaSHp
zsmLDXJ~=1!w65Qj(dpx(o0-y3fK$VDUMN@k&cnk`+<UxUq}+wvJXnFYg?^|g8y>IF
z*vZkCAj*rZgj~6+531ahfP9@m<2$*hOb>_nTR{nclod(lwWJCy@kvg~R&Sr*A$>dZ
zY%-a3A*DPvd;`gw>5{vjxGn2J>UBZma?$nK1_|6{VK)J83?<BXTTKBtqpW`fVP~*4
zME&)`-r}Sp_rVe--wo>(WkH-O(kuZZZT(35!&FN`3e4qZ*Wiv-z?rcKf9@)Z{+1_5
zVI1r>M%RScxgK6UtFuMbM=+g?Yyk2rr;iycNv3q<1F%ujZ7&2x$wuqSU`j%rQ(ZxJ
zr*U!LDWGglMc|!Wvrg;z4k=cBI%%pvuHqh&0nG55rnt1(Wy1wwv!T{`#N)qUV0(cu
z`bMz0e=Kaw9uc&4Dp~g_&}(uPpm2OxEsh5ZD6zNIBnLZUQ7_KF{w0npJ(|he;Efo0
zTZpHO^&`8eJDeKIZY*loO&4+1^uu}|0}#>P=ikJ6-y%W!zMBsT1r${iEE5zRKG4?h
z`OB=t#{`o3ruwdz+bG#$Uv#A^`p&RuP2x9+)TUd@?QAO8)>^vcC2g;%vCI@N3^xg@
zMPoBwA(AkMki?_6E$my?=KC^MWPASmhK=6cXlQcPwO}0SpKWmwDjkkjqF#N(9SvC3
z7Aegq5#9++w|RY1f^iU_Cps1>`d>z4xab&{4M-=GaySQ>vYE>BTl9n@Gv{cKizs^~
z<I|8qeW54UHc&v91ZW_E`xX1*P>2~w=XLYCH6zE|@f0&Djcr(AqbuY#ESvY4P&h)&
z87rj~SyNbsykv%GEW3Pd4e7mh*~o}4BkHR!!xB!ZQm~y}JX%JPF;uIOme;*WD`hkI
zQKHN`nw-4LhC=kjpfv!6O81nq%}Ei*$(glesBC$=g(=TREa=|d!O<RaxvS@5l=-IJ
z&@;2&d}8e;DTSwQb1**1lp-8hG9*UQ()@CTf>`JT<fdr=#)lT)G?Hj{(q)?@av`OW
zudRer&6Gzou1zUL8ZnS=t5EE(zU3*{x_+7?w)xxZcf`YztfxkcjC7_!_((NUq#m_l
zGK}~{%#PNokfd60mPJOMm9XO)-;lI9lg)y)?u@|2kmxGnvJ`Sf$`Md4%O%|#ZVV*3
zqwfgEH!4_)<!KoPBqiH)#d`R{)h&IItJp%WwTECw+D(#FW@4iHCQKE$O~y7Q+h?`y
zMaI(2%a!XI_D`~Ygu;D3R8c3BRf&5wfIU+Dc2irv;X(?c_A8ewL4l84!vcr4EW)FV
zSYFB5$;eSDlarESa*F8CweuYsEr$iFwco6L2Dj`t8JjKG0>-Y)x!3ro{A=tP4`^7J
z_9l$zaHQMS++Fp0KvN>m4kwqGHhFEyaI55pdeXV2Znli;au$*u(r(KL^0}sq;WnB2
zU3Z8%Wc-?CE&Q;RQDYZKO?ELS76o^KekF`81o5+m;FHXOcjCd%hq~=f*X+P&P#aoZ
z`Zg0iQ$g98&&mVoE3~~@>Qf?{({L>>kqgFxl=W3@FDZQl>N-hKw6S@nO?67UE}6RL
z!}@dxJ|QR!0djmE+lkK{AzXao$ja;l^u$l2yC+3O%FQC%7JFtfK~egW9+*vmU`@87
zcJ4~T`a!HGPOg(VI3z}BG4)?V7^fAPwf{&vg6d`coNxQ#OnnsQcVSTn-W=$GuMn-A
zZHy5DKpYDU{eFZVa{fQLC--@>FbT!q?7Wv_?UPsMskuksi{(@RMN!J@fSjY)T2H&y
zwuVqtO)vpZHYMg9RBQZYU8&24VEMYe9I<YzQCCSSK{IUno@A<@E`;V~kEG3XS33j(
z!b)Gx6RH0>nl6X0lkQwWk`qYcg>U&~nE2P_rZ^8(l8c`P`1ib`VH^jkjWvf`mEPOZ
z&rm>tGxhU76`G<=<bL_M)Hi?D`l#BTq{q1=2-nd8-s^FL?~AG^RoJqAk3oBqiLB`z
z)n*`N+FKL_G*ivCFn<JUwJGVXF4snZRX6IQt|^Nf4>;w^R<4YfwC9A_l9$RdKKl<I
zn<{qQk(?Ew6T)3MKVou!Xb>6B2E9CTJ3NiG;|9`pN9+fHx~GwpWW?2(%)TWhij~z8
z4S#av5qoMSyc?C{^%<>+lsonNR#dQ|#o|_+2wB@<HWJBo#?#D*D-{?Mc02PDw_N0V
zdkSoYwen=#2aXD&wAx+C`Z)kIBAvx7$afyFY9+EuM?+t!>rSz-S>|3@zL$e)kl#x-
z(S&L*3Kp$B@5J>`si%IRa35+}$963BWgA}a$=ChcA!3(yYtZ`*CwxRX?)e;}$?w-5
z-eLRf{X{LCc)t$hZG{5RY=?cdlTw+5fF4^o3teu|k2Vh42rwa)?reVxJZnC%=FVwn
zI%&R=y!5Rf4{n%kMw4Le-8{}H|0eLpysXWp2!|B&(@YLmh(fE2*a~Jhk)ohbWdrr9
zdF?4b4p*L@70zv-2A45LlT$(fGEntiZ-$=eST-~bL!(a7*sCig+`VONTAosVB<o_X
zWeNAp{?J%3?eqC9qxBh9neM|#QU5KbG+}a&u&o{I%H+#>5U2S8VcCT=#XFayc_V|H
zrk@9MVAM^)qs7`}-vBDrThosr{gp>ddhLOB?`nxUhwm~h{1D8B)tSOG2ZZe48yMu6
zlx+1ZF+X*$l7S3L&HGZGxRr_-4GJNNBJ%ueb;F!8@!5bO>J$;kCXGZHEsrD`df?`j
zRNyTgAJ|1Yc^T-@!$I+zmDu;`5PawEc!sg`QzlQI7tN638P^96rgP?ql~v_Y%D6=3
zc7x1=v249x_|na~n7<SZcF_yeB4RxgVmmie%RGhNn<|sgA6o%wH{5FY_jtbc_~~c1
zGL7{Zz>fYjXvyz6P-l?z0LhH(87GZ^N$Kn6mHfS~P7KC^Y)<y?NfHQgqowc>07wXL
z8eN##KvE_v!9hw|+ze*3V7Bp7&iaZRL2XEDWwW-y0jT~*v#``}$hqCN$noac(t&RF
z$X*@f3>BpbU`(+vUVmGV%c7XzacaY<#a?~UcH8xmvT)H0j#Ha4#devej?=Gxx_S~#
zBzVDfj?8?m4My}q!>0>abV9&rhBVEPr7`Cbcn$bGpqjX8Rz%CMOWh`bYfMlOpVY*;
z`LxiyV%hVv6!8geb0!JOwi@=FzESz<IMlM>uTrXArlD7WymW3^7nFU9(5X<1++Y4x
ztKaH?45y)bTE@0vAB)<4Ym(Aw2<$j8B>}i=Mty`uwF(^<$(;eP1D5y3g?9tdoB0da
zCEM10>nPxwEyg!~>Q;zS19zEc!(thmtj^c+h!{O#jImB#7Dlz;t&|=2W3G?KF!z_~
z;Ki!vE}h=8BR8S~N_HJ2KT?$|HfyabNaPu_K6j)Yom$K!a00R!J%a`{BT15HhKs<l
z=nio+K%2^z&^E?`i%=OnIC3Co5uuGYAu#Pw9ro3vyH`919OsaBPhm)<9%g*zm6=&-
z3rUe{+@+vDNOaTI72l?#7&MC*xMWl73|9EYynl{w;@OMFmU|@_9OP691G0sGk)Zh6
zt4}!^NkdDPuFxWu0;zjh;egD4g}iCpL8jIUo!dx;ry2G<#=WWzbqg185YQ;u{*-h!
zh6)=J0nLf6!NA9fs=?1SheWoQ`|HDP>eRh-15h=W$&~$h+Lou5B6;p+x4uk<?gbH|
ztb!X?l|p{;et3BDapUZ;j^Hr?zzdOI9=vOsLRcQ=ZoQjtRyPqe;_d=SFD!TwH8&uU
zf1KMLjD&R?GKADvKu>gB<M^kLw~38$_WoZJ*CcZ0v0Y1=pSl#zX(4y-%%y@azZcgy
zyso@_pRYzW_EeT}THdWN)h~$+9PDxe>d{WyObev}L7Icpt!dKwaysw;1yEJMkQWd-
zWvYr%=Tx<rCf?t|u8gO3`mw)Vyoa+QOKk&cC!64q$2Q^E<L)L%*WbTSFOUHKG?`LA
z6&@=H?zQXK&pydFv@8Q?`fA;`Jo^nwMcy{6F@JlpY6J;}7jP0!Py`aX^BSZ9`>lR8
znH?d(J%QzD{Bwslj!k&bJINKN1gtp(RxQxbuNm2VpL0zzx7>v6tVIleGVnS3y6BQZ
zNz%)IyN5w{bA*yWOMv|YmP+he5s1YN5ITg82!qigtZ>&EE>5k%xh`i|{)P~9sC|ZD
z#OM)1qy=sx&MP~Lfr3KpO-YSuEb$M+*4mx*8+5ij8WUpXGx+$5s9aN!y4}QiGwP24
z<nW2;fM|a=eF(&)p*%sek+b0T=Rf(n|F_0a2bW_#uLT%5z`d#hs4~<TgR1hwUR;(|
z;KRlV^YPfEkblGKGY)1kP*xNy0X{JQ*zFjo2z^oG()%sJo0y5B9`RD`uU3;iyi(hO
zj#BIgeG_}#K%Xs?G2{zm0tr%o;6=r#G6*{WyJgseB9kPiuMhHmt8@*%T3wz+fixfG
zui_cv!hnd}{BOZ@!X4xMRt5A9lBi*_f`P5Wvcw_bQRPtH7<!R>)t_pyEMQ$n1w!ly
z)94BBuB|&Ot+M*P>B3$~UeM+7Dpu7~S8g*>Twp7TQKk;Pd<knXw)|_%8IR`)h~)>(
zA*Gy&1mFKeYs0x~r>_F!929LTD@_t~0z}D~Zs6vRa;kDr=AL6KmD*LUM8^4Z+y)x6
z$i(@e$WVwxfi1mA7SB1km*oCHnpehuhDghJ-YDQHXPe%&+g{uF9^Ra~MsQ7~af7Un
zaG7W1d>&KNJnS|f?YOT@#Jq%<YH_c|vW*%~QIu=cU*sxmxsg8*OO<#Tiyh0v(^B#q
zhirY)O0sUHRS+8pYg8_4_e_?3`7#?==QX+t#Eb{!LDXmw`I&68h1|FXLcp@Ju0iU*
z+>eNyb11lQ8+QZo2i#y-{*i-o0%=(;GnN2?Yyt!~T)D={+l2q28HeuUIk$Csc+{PN
zlWppSCu(=!#jM>zG`kl)HAz~Jb6o#$jtF$KnSj)tHMD!o_er_-q1XDS!xpqWSTmO*
zanIn`dBHl#sHAHo({pj^O>bUj2GF<JY_m*TmID+Kt;X;&YC3%y(4$vj@*4OEh<)BY
zN~-Rqwh|Z>YYRu)csF95L~RHuB4YA00tNNNo(GV_i8(N+)tz9api~?#n~^Y}`~b6d
ztg%hh3^q$u=22jAbU{<i;Kealm+x#vp*AZ$5~rh~3H*H2cxQ`BHdtzArvwuo`bO_g
zuY7!Uc09}kF$^%P;K8;*k<Tg+lfjpA-_)B^j4fz3UCJ}PrZ}yrb;Y^8L5@<$XThu!
zWHiH@CrhLU*`5;0U%u_B@sFXRdjkRX9@r2KtWSDSdkMBVr^a@$FD9{tO8u%KM(E0E
zKVDZvIMu!B`QTY_f?G#rL}&y#3=e%XX^Cu}E*Q~2e7bvi*nJ&$@a?4&OVa)XHvrUs
z={xiz*Ly4yNy4t4gF0%9khpm)DN2}NYHd8a7{KIqN_qWOt5W6%AeYW4k@VuApLZwU
zR8Glq4xcd%-zNu(ko~bQgih){IZzT=%`Rsf#nDE}U=Ob5w|uG>Dvt>h^oURrEs(_|
zI<U>_TrTAFH|vjDUSt-a6zBkrY!AFSlTiuxUg2kQ`^!D*NzbveZf+aN^Nh62eJOk}
z@Zcl7tSUd@DiE4@lp!II3Qb&N5r{T&>IgVgzDSt`b_-;syb9y=GZcgCwKEWp7hif?
z^CfndT`F=ABNN^dZg8^D+Jbmj!i0YxIb#M_P=HzaodkO`aImfZ7GgIYZe!4#8Eq>1
z<8A4QodeJxK7Wi5rKnG11SQWMGW)Gkyj4<!cX$F|QS-u$-!?&eOi#0%wXXtD9wwbR
zCatk`!1~sBW5Kp>o$Nt3G2sxY_9ZTR`=m%6!5O53%Cjq%_rl2p<XdAjZjH#q4u)GS
zxu^V|#2YgCZk6>fpUx92l`^L~ilsyyYZ94E;`tyJS>@%Q92AU-1Y}O=JAAX_ijgj8
zB~fqMPOf6DdP~v1gEc#q&TE&%Nn2>~cAvL&lpTwHCKA(!IqFq2KEGHwq6PchytQU`
zN(C)(x`otl?3QgXAYre1g2^PS^{_e|`bT7escP;ydjvrr>}~3<+0dqmonpc{6J--=
zv9nF6h=jT$L4jKYt4NXXi|BEpU=<+?NyMN8Mo~eM<!1M6%pmS`Z-Vsa6SpZD$1IX+
zdQxk4qjFoqU3oP`Jm8M&-8+W0FId*17oWg(5S387sAYAfGs_H4UC#o8i`}G`az~bx
z9&h4fib+J4Yngaz_MnWc7>wRFLP}37c`*P~ZB5yL+|<C-)Gbz>pp__lDyp?u-5@&Q
zyy_~=$?%)Pp?H#IAtK%G1J{KoM{2{GVb#|IT)Fio?Nl^K9fjI!Ge<l*%(o`6`s-m#
zSt2p1z!XP_b(4eFp#h{2=!(s`a@cypAt`%kfONT;nwr=2p13=UJB_ydd>MPV;&nLB
zhjueUhr#~KE5!OU)+lQ!>c5xzPtRQ93xFO!U;wB`8fG5Th-sj=67h#%a_*no9fDIY
zb(pZ*{5&jolN*{8>vf7b0LxA)d+myt2i{v5q#0Ud4}o}2p*moet;rckewr-hF4$0Q
zkog0>{hk?gFMShHT?8&^lS!$pi>@ECgPFdffy3Gq4dIBG$;SsrS`<^E6z>6WdrIMT
zv+)l>rUD&-j&W_p3?KQd63!-YwFcwG5QXKZ`94%hD>T={wp7*#&T3&(`lwJgKNE4M
zQm6PK(qC8CNXaCR<^I!<8)4tHTfxiHwkfwbA-MpfB!Cs-mTz1f@^%FmS75Ie!54TI
zwzIh_tOV-57_y-mi7+-ctHSvQxT;}z&(s9VepM1NKG&EaQcbR}-48c@n>e__!0ZXm
z_Pz(UV0*$1gZ0;ItjJpp)1}nOUH+>uL2o3y^}QsUea8ExjvJa3B}pxk_IE0qz4ELc
zKAvE#Aebo@O%a&L7b!wD#pXxtx}^br43fSLFGodKk43Ireb`m5R2Hb#T<@nPNRZ-1
zB(q^|@x}v0^53>Z4>?z#?V>0J>g8_{BABirUmxx_RSO4V`sVE*Wqq3v>_22aGD+as
zsRo_j_<<(_l}UUVh~NpiJKV#xdlqnO{pVQru8XKak_kxBWN2En71GOu;U<H%TM6KM
z_PjHiZl&wzxJ$7qz?ze*#{|D9CHR3HHr}{-n?i^RP+DKfU1OdU{Q@}kzcnzJ$Qb+f
zD4#&39xBK0uCQ-N8OczG8ZJ{y0SczeDrg{=R3AVcCu?Hs$_W<w1Pa3{{Rw6$zyuUY
zc9D1`gTFv2k+{gr%Rh9&6ZxK+c|!wglz-a7Mqlc^pL}-JM^wwNO+L1n8rCxwcWlwx
zq+!X<p6B2QD>-NCW-_g!5usWRJIsyxSk^x1I>zTxy`}!aSF<ItY>V0bLo^>E&hVC3
z+;Mapp}xOZ)V;dx{OTNPKl1a*bt|ESs^Hs&ULuo_!SstfvJ~Sf;gP3O`&!HCWH1Z_
zGv+mJ5)(-X8fv)>2LR@<&uD*&q3*?mAQbpgBD}`)gYYD9R~P!;P`^#?Oz|C(3=$1D
zXl51090XfvBCOz&gGzePM+zswKPjC}3K^$>F!ut5(_P;?D+N8#zSS<ic=Y^2&@nu)
z&={}iaCXyBkIGdF<&xzqMTN({PIOmO_CD!*q{UX}|LnX&D7mfvHMiJ-;`iIsGFU9s
zNX-W}6ko!tv)T(~-uPFUpXEp$D@AvyFT%JhtX#3BP`f3Fu32m&tp=4|Aqtsw+@d7F
z1Y+?j3_j#uPs>1oM3zibiJjIlSJ97Mu;$HeT~dDPA+6$_S$T0=YX7oD{tjThwj9N-
z7rm?E3q@QNv$XfsV3Et8jAoV!x75Zc>!4eVHh^O2XsIx=UN-R1k*(tY7|f!{lkugj
zRQRFhiT=G#B)bVP21=cZOHpT*7%pdbQY*JpKU24eTJ;V-GZ8)|id|dD73o66IzqkF
zZdwl04ce6COw;USnX7MVxsxYpf!x7{<Yl6{STElqORF)%q4vOaVb<f@`q9ga-dCm;
z!H}GMC+B)AC}4k%@W607S>;S)amozp^cehpQCeyj9~w@3jJ-96gqyw101t-N1fi*n
zHZU-St^CQXH}JS(vK5-`_7AGcX^LMy!qf-k!P1?qEx9`;hnF@FAE_AVw$e=Z3F$zl
z;X(}j7iJ)z8^B^Y9!jOvYb;3!&QGA_+aj*y0YVHk)Qey<=fEhyFfmJCExAZN{K%j_
zCt@`~JvAJ1XkVk@AC68(#sh@`9k_#DR8YA+d5v7b-0Jpk_X0#sqL~@iTwYLWX!FU3
z0`lM7^#wC>tj!(DiO`@%8Hrl#(I0{wGzyWJ+K#s^FN(=Iv=$_msvTgPtF`xt8y`Z0
zO6)OC6t%{T+kxiJEh*`Kt>$TVB}21`ny3Vo5xUz$ddy3*iMxO<nxQZB+hS`;F4eme
z*AQQ3jD20mip?T{(qeVp*T%L%i};B$lAOSnyEsF$_$r%?>*K@tOr7}@(WTPtwL!Sr
zNh0{zq{GfAw2HMETrwrgBrk~U9F)mi_Z5M=w8<OHDv8LByA*-fvd82`g-97P`E>G|
z6QVVyS}sXPym?!2150#DN6Oo4R~am4hpKqRj5vlzZW1BatnO=4UzNB|jChFXbOXV#
zs_VHw4Qe+I$~Th3P;8M~fN$~1dFn4CS9fDBOn4lg{9Oh{JVao`=fmXF{i}G}>4Skl
zQZ<(NWb)1J(H{X4L*%WjF-a=BWsB9atq|X0&d2gi+{!XC#?H#B&;lgz`h3J@fQHR(
zTIR_cYP4=S+B9joeUpOiR0xb{3$H)f2VQ9nW@$~QRx^HT*?<SFR%ww-{Q~|e7xi$e
z<X1D7@02y|`Jjqx`5Bg|dR<0hmhOEwybMbi1jm#n@Xyq1sDj^krIM3-p$bJ_W8=F_
z10NZ4{VeJCVx!{<qKkIC5lt}anzg>%HH`$VMlQG5p+l+Acml9U?BBf{6_g+N6h6vk
z{r-M>jBLteU4jpO>JIVWw3&k5ekSlO8P!q7$U~MnbxQ+SJ9d79AP~*2FT_4uF>Wjk
zzZE-)iR;Swv1abVa-dw30PMMZVnAWzRHlq#7%<Q)m)D#Z2-e%4B45L>jB1Rf%vOmo
zo(}?h0;Mnb0qm!WI%R5*(9sV)AZ`~)onRD@Fdnut+AJMdz1e0e_%rUueIz|I0e>Id
z>QD<6$twi$VV)4G95d;9x`-O|s_U5%7?Y-sKK2h&6C*WBPlJeZ%$lv=)Te+O4bu$8
z_ur%sIFLx_D%uw#jC|ZW)Mz7v%ed$oAe1#(D=kkyX`;`0WB4G{P-ep+>2my=Fms_|
zP9@t$ZKcxs++)p~TfUSe?0#!J2hHG$VA}Ul5Cmgd9GZE&f&iSOyU?WHD+mb{SVCjj
zo0^9OYHBwb*Bue6Vg8Z!uMyJw<uEwXF%Eszg?<0-gbm7F+<*Ru`oH+Ea0srlO?TO!
zcQfyPXSf%yLT$U(jC`%^w<=Ljv`Vw?_a1!L-YBHo?XrYbZ~YSM4;himbfH(lGHXWc
z*nHpfC)h2qi<8x;cV*-jc$j^pGW|q2pW+!bOow4*jCemjjKRE~taFb0bx?G{sl49B
z-o7};tvd05tlD%792+yGS5u27+^GT8FX}QwNgmHCyHd}ss?J3iYmbHSoiqozL^$Re
z>osTf!Q?g$<Q2X_Wharb*U1Q5WAYJ>Fd<ww9@VJt47V0;c8|5z&hT2BzB1N{D7z~G
zUNFOUBQ?@|z@W0w88oa|dnH#m`HfTor2O|8sqoZB>|E}i;pSr+F*aOP-Z&?mQe%0E
z2#v5keSIB;<q7w#W#8agzMV0r*&@ke1Wr->G}~?01)Ej=3I-a<>!J(kCW3M2Q0>)A
z_==U=`81iQ+2O$G`KS5Y+i8Eyvv^vXbw~7_=sZ2SBA*RLDpF!b8=%yDiqznefVP()
z0K6yhZ9d?fB&x~>Yig)FS;r7XnXn7|D(Ge_lSDd#)<7Q)d8jOSk&kJac=|9)ljX3w
zroV>Ft^BR;&-}yVT_}pg(lIw4Q#RsF3@rz2qmYRrI}o*I{$ND^izmu~+4Zp)yto*S
z?%bm;`%<JUs~^^QQr}Lwsc3L>5#II3A>|M+h7x=1nRzyzPF>o?;SvsQk;wFWp;jG>
z#WkHtHx|V&=8=UCIB-V}<%gt2d0c9CwH~L>XBFd96s)#o<@-d{cuXe!Ph_7@Wa3M{
ziKx$6i&f!xLL88^l72(N$8;c#j6Q}}L8iLl9Io~Dlf~>*r>6C826*veI?bdloRkh4
zbTd}6gnns4%%bt|1vBBwV<jLr$-zm3+$Cibknc8}^J8Avjs5x#Q+5P9X9D-f>ecz@
zMedU-*0!KeX`*sVW0hdn3%mbQ9QY$amnw>l`<jv-Z1n0e)XjFqusR{N+9ae|<L~l-
znP$q#7jSQv^6bcn+QuW`lCV15-3v0Sd3atJ=wx9<kBG%edY_qCzHirD&y<ioX7r;N
zlWJ0n97NE)w$%+>BCPp#Z`LssJvfaRiMNghwQm7K_g7Ed=8Z=IHKjy#7B1l6t8Ynq
zV2?y+_l4vj+)gs<IjBb_Ih-wE&s`M_j@al69y=?sOH}&x7}<}B&{L86+~qjFpS}^z
zq&y=|XPITEG~LB513Lv6C_7In6atdDowjz&>R!HjX8b9gd{M3gw?hhfRXFX%>l&HX
z*#I4`m}%Y0&Um5oL++-%%H6z&)@1r|3YF8iG0!OTZQcl~n@5CvbA;)E(Bv=uW}{L1
z&gaL3Kc8SK6y>8|j^~eiq8ZDo`MHhF#Zh0E-W4T0Uv#c<;q{`0`oGc_BlR2jXDK!t
z_`^8WmAI>7ql#T#ZWx1U^Jg#8h>OiAq*@aEqnb<tq$*b582W%vWwPBzUrz%A`MQgx
z;-h2rU<p+uwk;Xr-u9ppV=)ukS!?=c-9zk~U&VlM|5vkQ4JbD$J8giqwk;N5ln*oh
zVeOpE+_m`kBGZevjHqH1e&mn8Q@vC3H~tM7D2V4<erjjCjOV0Gp-EtV4E)8#U;phw
z=m$>sM7F&Oey!+3K{Rc}QjdYSy=^%^FV%n(LsFQmPbVU(E9&N}zyz(28SNy3eme;7
zZwtVPAYEaK6q}nm<RVP|@e7QvUVz_hF~FS2VP!eMKq1_(&mo=2QTmHNL7A(Zoz6>k
zIaK3z4j=S<VBp;9H^oS~XF?ndjFcHQdr?))^^%Ic`~;ncyzs~OjClld++JEBwjAdX
zhw2@+H%{`D#G>L1my@Qr^S3t$_Wb0D>l3cHT~`HBN0oSOXybHI7t2EdNPEK<shGK~
z^7dF1nHbs{C|D{TXxQq3+l7=DJ<?PP%*83JHuWu319A`OJ+%?!%CMo)Syhyw2!X6j
z{Xh9Yb<w)8j3**8eDpd^0<SkD4CTC2C;gZR0fC?Eo$rp3{#57zI8YE1<ag-S+=&vl
zXi!R+)t96j|CopsDQ^>SI%3}9V+crnAMiZbPELcS&E!9=hhZV|4t8ja^TBx~PgH{5
zIR+?YkWUZ3iL>>YT!3BARO}(BU^8F~Kh<6k29FN1bol%RCLX>tva4}Q-^CB-2Gd>f
zmhxyyLxhOLiy@SzAFJ}>ht-FtFXw*N(>0T%;`*t0DiI?o!~04<<P_q&q(R(#u>Vwu
zsQ&>6%(YmG?t3uO&gl~u8p>4j6Gwc+0=O?!n4U<K#j8Z{+dTcJY8tO?dfe=eb~z4{
zuQsnQ*t#u~(hP)KN=5kMr*1}(NchQLr9_Bq=bF>|Qa<c`_G#x0bd~KX+lN1?;T@WC
zhz*8=D3rNls$JnPmUDqrI(aUMAmXP>JrVM@d{V)_qMz<hf6zvm%AI;&D1y(6yTbog
zmUDsdP6}ocIL-Jy6SgU4-`WflH-KUU3Ec%MC1{PVgLFidXRP2qw^%1TM(bG^CD$uf
z46s1;$w<(J9bt}cH&eWMY_#D7$ANq6>5#x(TLIm2LI+6=HY*GnUaT1)04Np)!T?~<
zZZaNE*AvNqV@<<X!}~Ohp0sc6dwYiTFeHh|34r41Ao0L0mhq(^=Po<`Ng`vV2{)-9
zv>0Lcf`Pplca%LqPaz9~eY5S%P^60z<gAPL8JvWY!Je%cxNutKyDa!X1{iCB&=CX(
z0E&fyV1OaNE8VBu+tOb~%;=78_DL9Kh?xO3GDHf&aFcgzTh=`!v0}&o#cluCSpcx6
zlWaeC^rJDOS?_@{#9T}DH#o}fV1&8@;5J=iMa$O1NVAQ;#q1EJRwITXXy|B9^!9O_
za@#!$0sf$gCYl(`b>ufsXik{8f#SxOf&rOHA0kRemt-JLU1LW*zk;5zgEZs$Sa?Q&
zU29PihU<OH*%2C*2XqG}o9~vpV^2u>V!P@!M-Ca%(_jjTi|{-2&$K-QhU1)DSvu{c
z2fJW6>WnE7CmwS;{b{e$CMuQCjjjA4{%m-J1>uVwb#bUyX;yr9UXT%-EKt{=Z9^CY
zvQ3zSLz>$}SJ6fJPwYN;P&w42%?OuJRmMDh8anN;&r!Hs>+@h(GSt#J^nouOfsZFI
z=PzVSB)QK-M~srs$x7y<vsCw&-W#>EZM<H~tsZ_I8YW43?l>Eht0=hzL;XjgGy_(n
zQC_=%LW72kSn|Ji&#x!(R(-im!aYk!$tUo=+q@YZmjoILgCyNG6M5MttXBAIdxX{b
zs)vzsNAeOM2|Mkwl>kMr#MWGp*^m64XP=bs(|fyGH<QZREuliO6v@l>fXY>Gb6FN(
z2taF$(LQ5ou0YA(UO708x0M9*W+Fjhs0IOUa`J;bLF?QH<g|;(nR8LT?JnE!=`QXG
zf<k83G8Yr(lqZOfuux$`<w?p0);mo?Fl9d!mZ?xpC#d=ir{;3zkEuL{q}u^IoATk2
zjbqBvmz^g|AOXpLRB}RcOoq7w`SJ?lQ&tv{5oW?QNDOu+w1xZv03iqqBr&lEVpuMr
z#4(5kGU1CzEYRy-b#I24AQm_2?>$nVHS0Rs3h7H!*AAW?b(SAH3!y%Va~sYK42dZ%
zhnsd{ILBu?R80<{x5W2b%-*YB(xb~>_$<J8DekLg+!iDNNOxR8M3$$vN2~F=?AZW|
zHJX9pk?~Uu%-DGv#rtIu{3P_*GSZaDr+FjB9ElpmqhSlc^T<ULl(%_G0rRtvp~3So
zPqnW3R>-ZU7hScy-RP<-x`m{Sq#W3d`5_*QU<|KtOZdU_=bY{1#SiG}ZF_04NE%!I
z^nv4Y^>ywrka1m_0|oz#e#zK@sDz~VF%h0h+%{e!rxMgyG?YBC!@|;h6U+gVdN-H^
zjlYap_Qcsn3`V=>pEFmKjnCfU__C+mrL>*OXz+H!o~aOAg0x9;#!qoiXif}dL{}@F
zU6@qN^q~a=T>J!HEES4wkQ!i2%UcD%!64^Qm^i8V0lQGEXf0OC`4LEA<fIHY-a<)m
zBzk#K-Cp7@t!?6EVLU2LzRv<8Q`g@ul$VB^5)dZRqNnDQ(5Uwl8jGU1P;T@dd@kB3
zvH64>BF;t)jSr(L-v)>6^~A?-6;<6aAx<UQ^Lv82QX(BlA$=m4K&toH?~DvuZ+3y~
z`QDdcDyW?v(q#Lw8S{eAOcCoCVd*m|x1WM30y6i+ulY;BCJ*_Ok*#LfuCqF8BqOP$
z=$>VdG@@m}x5F*KW3tNfzlkBeBc(|LpVw=Xb>y@_EF8BY$8ZNTLZcK?20{l(i3Z|n
zgFUV7=$@q-P{K$`6{Rgp@@z-%mB?UC^8MOlU8kg6L7NRrat!M~cJjq2O`-4N|Gt`D
z=|5;CU7AaBrX{Z<P?<V}(Ud`>|LZg4(bw*3Lc~n|ZM1i!{xDHpVlnaG(A$9#e5WS)
zOO=Y5X)42>rb9_2L|dZ@nOQ=4GlOEiV<$q)9mSf{K3`Wqh<e9}Vl`k`4lARNVaC%J
zV-UUg{WnK1`A1Nb2NE}B>>cJ|ogbbE52JoU)<g_svINZ!t8hOQ<5kS-y4viGG}z8k
z=H3qbE-1P6Pfg0@v|K1LN65K>9UxkFCY<AXSc)Yy#cm{dF=<|`Y=G0N#AX!On?JPI
zoXHjAn?-Ru>X*e7;IG;8K>%l0mJ=*Ez|Aajgy9^FDx4}G(ls|+l_zs}Gq5X**tOnH
zjN<Id5^2V!T!d~sT+6^=$A+pf_OWxM2NXG@QmpLc3<@K7WiLmmtUSRB++_zDW_w*!
zGIPIiOiz?&5N<x)FU&5>*&Xg|wou%2fM_=obe83LQKR!TfPOS8CCy@7P+Hi_Zx;a;
zj#BDBvzwJ4_U12MXh5&hG##??7;I%1<|P{@Ip3R4ZB3+ZciKR6t%+|h+wzOHjnPV)
z!&pXO*GMcaNz{7~eHsT%8l(2iJXM{UZN(UavVkIKpctcmfigIwZ1>2h80#<MsEwVY
zF|kWd1@X15=<251Vsv`}*==;aAGv!31du!Peq8hF7#_9Zfsff7haHA&@r0WtX^)`4
zZmmsGn8SIKkdgSPnoNt;g=_t~<t$JWvx&nB^Ac}4k-(#XWhwX&+qG-rL&dO0Se)20
zT@U7!|GnJ+rt&7cs4-e3*51jI+u`*F8ZGut=(=GMvU_e!u5$F9gx}vy^ZjOqaAd}O
z3~tHOUcu(REoS(#G8S8UE)#?Q3jKNNJb+y|kCp&1D~UGaP!D_tw$dJp7p6a@yDfzE
zMt#qz$r+CwA*UogmUwmGI4}+E+dls2^fu|<57#DT+qFW5w&NTie!1-$y6r|slA#sm
z*iT$eDJa#UfN2}ndH0MK{c8_N;y^X*+GtysxyV_xM~&ssw>{tX#_hIsf3*8g;KYD`
zFGTImb{flewT?P{ihl`e_GfGDka}Iq*65Du>ZA73W=21=Ff$LCd_qzD9_;9z+OWEb
z)|7M1!oQ2uVIb%a-*}cpvHAbZTA2B%*?lt_x_NV4!2XpD$vdZCMhBaC_B!-Nv@R)c
z;yH#cs3&%?ZdKQEc{||tJsdSZ5EsZ$Dg@Oa-gDYF^7D+5)sS$s!9&fwTO|m=3j@gS
z6@5{wzNns|&G$wbC+X^PQ|Y=j&$Fg(1iKC42#J87g*vTQC*r&g9NHMaJ0bTJcJvbQ
z!qqshljGHl8&z$GI5taxCAz8c;d2c5YB=XJyZT5_tK}zs3+o>=?cY)PB&G>8K%PHw
z@b&EDEx;+<3wGt8+@YLp^LMQKvtI&NhraA;&mKPf1+XhjZsiGQpRMplHLBaOx)+eL
zpHE4NJmq$tMkl|voCMuG6(4Y9Sv~2n<)y@8S&{QYr=W|Ct)=&a4QolJId}LCqpX{i
zb=<qH-T(5+eKTklpY=5|4jBeggaKrQtIZ0{tMAQ}E0hENpg4uk9&vZ4VEZ_*$(-GZ
ztC|WM`xMLpSO8qo%ejdXT{!H57Qx+Q|Nn(<*DPa4>3VM<B{fUg=*Dl}n@8z_Ns{1p
z&hl+QU?;P9ZyVpyay=72m5`{{297OoN@ousr^^0Mdh6nH)h2kuEx7J0z{Z?9WcBIz
z0tOS8VVb=tm`auIv%I&GTXCmK@1X3=BhW1<h@@!(T27>2tVqpCmG?8e%gkA6NB6Bw
z8~(tXI-j!lc{j}jyrm-<IsX7pd7x;_kB{uHxM(tP4`VeR8=!IRPLch)&NvYN;P`Wg
z0>7lL4q-jns?Z=8LU?IMEOf+JlnInjNSpK1&<pLAsR{oBD;tw{@0Cw};Z~g5#I|}>
zK84ztk{E<u6~9&0eu!s_h?*EFT$PMBGw%@B8g110NE;6zKIPDNFIQS!R`ZfOqgH=u
z%sdEm<#p`aG$y6v&G_iDttT^Dhmvyyfy}!?b0CfX^74$9`i#Xa#YWzC_0#GHng1us
zfd3aJ9?<lR@-9_ZODn(Y7++Py^p5ejF(ejr9^-NN>%gw?$NmNXR8O?NOx|`gEcY0z
z*tYsIrS-t?DgWLd!$;@zxLtB}rXiFyiV8XVjt$H{<3D{?f7+|cT64%RlN{+Tc#~53
zm8Jlf4CE?f$>7Jgq6|3C8R4s%QM-%~Rr>@ur~6NYncKzOcAJPxJJ-IYY*>N?T=IYl
zcwi7!Xm8yw+kS=M#JVx-SZ{rybU`@A!1sO(J@qG?DwLI@ToSH>qiR=BHj57dMz0r!
z`9X;PXr?Zv1oD7{=B&7!ZHne;^@3KsROd=E>*}1m!}k6KiDmF{tk6Qsn;VXUZX6Re
zWZ1AYPaj0-h836vCSx<Lf!88v&=#bbtwIuW$fQ3k(AM7Nuw@zCSS;j8Y4@mxzaBv{
zgBNp?!sW|vN_fV6NcZEv-2Afg<-f@o5RZJB^f606UwOpLk{^nQ-VJ;`5VDFT?jufc
zl(!N}wC{8dUJk166xB6T&*YMXTk)a936XY?4HAOs1T+7(v~Moj7-ydTy@jSd7_J4G
zjqRg~a+ap$XTqAM**6N44h_M;0aD)6;F_hK8#GkA#R(_6yP_%Bu?sCYkF&okv`hlV
zGN-lH2X<oiG<J4~>c@2Gcj-HKLQde#T<DH(lF#|Y{Lp|#eisiJ(*7qd^ztVSuf?P*
zMImF~kS&sce;;9L2ZwWNMyd#V6k$t0-@mbc1?@S12FLfQ7*ZPFaNyQ1@PV8A1$W|=
z$m!%8lZ?#GU+&y_Sk6b%`YiG=_!tHzSM{_te{UWadD4;hZa#i*1UPj{DnF}}s>HiQ
z@NKUz8`wn9V)keEy)u&eTY`K`2Q8!xGen=!Ma}hv7ED*sO*|)-Y3>5m5ZdQq3kJt5
zzc|gh31<3hJwkgXU+^hbW0Mo%a4jq!FGgv$R`ut5-q+mw_?DZh&Gw!l-7F$!ge|&S
zG|k#95JwPYCG^8#`-)lp6dm3#vbE_93=dloK!k$axBZ1nI&<v~e|(PCcEaCh9O5O+
zVVyCh|BdS@3Xyh`*g>?wlb3oY6&|M?bW<tN<lz>f$urNE7e`K5n8mbeBFi%ZGJ4QO
zezsuRXx=Ywvu<|z9ZjV62l0iUf2;uZVcXj26zTe%XHFli-C4?P)fLH?^H@*V)H%Z<
zX)Af3b%6CCv-JR9?(0?NiOa%fKqCOGX%T4p$kM-H>Mp!+B0V%hR<}WiSUkiqNmNP{
zL#A|pbn~{8xui0Gql;IBqBZZ6^mdA_lw@&l^v%ujtR)A<zXAhi!Nuo*g1=g~<U#&z
zgUCl;`e4jA?wG3Fv?Q~-ldI`u?YAYa-#hGYkb*cp>=5rUC{4{&b31B?F}YZiqiQbE
z^{Ptwzbpb+Y<DqAXwBtZ$NI~p_HNZO@Eb+XSRyUwbyExyWp&QhM+k8TQZ&qykz88T
zR<9D`bGk$pfAkCQzz-hbCv5Wv9%-FlYx=Yu3tQxF`{JyQ{dZKof(__QP(P8`(r2}G
zmFem?3bC?dTYur5)waaMJZlywFo047z%C6(w;=Ngqkso5zEFO(vt5L1Y%Un0M>Td*
zMfLEg?U~_dlGyRcR(tm?FJ+Z&OsElkwmZuLGieu~w3<>$E2S~Wn+9GnEnt-HS1zww
zxt5ajV*d`-fzyfd?@EeM6+kMWA{B3<Oe4!DcAhyTNf@l<6d*X+B_)QbG~8Mx;*o4T
z9wc>Wjuhx^LqcgAWu+{Wbu**opiq(D$#qr&D#P1JAq5`0Ltibu09uIkHjdX^^)I$-
z52o@Y3n<raf6X|1kh?8Be4F+5=EBWxz&q@#q!<P;hmh%iJ9GuPZVopzLQrL()ouf(
zIc5o>H@Ty8o&o6$WWQlG=dpC`yr|D}OfXn4n=cn|X03yV6)OLnx!Q{9v7UF<T<B5S
zofQ@E*<r8U^o2W~QPq1qgz_W(Y5PsSKyBY+19du;1#r%yb=`=nGq;q&OhIlLn$~kt
zI?~IyUX@&Pp>FCd*N`{E&K%_((`BTP4j`jsLsUToD|fllCF~y%<*-U9qY~`b*w}{;
zWI>MXFPvcx^h(~8!P=o*l6azp8f%_@&m+>fzHq!Bk+Gh(Kc4l3hl%gz@LF(scgONz
z!g4d~Ai+YlLHXdeSTR5V6NfZyHY{-~@c+MLk6KWPW2D_{!fQufpgDH{EsJJ_AQP;q
zEwY~#;aALsJOtp6c{`+eknP$3jO&_MQ2rGAkhHxsxyINtB#6>m7S-L~qE>S`$yjl5
zP3OQkrGBvY;TVWV8hnUF6|ngsLXR-cSdFJR**snO8O8AOQ@#LKzrC~DKK7eM@evn@
zi!QlPIqSPV$kDqW)^?3<?CNYgT<duHQ_;`#7%y-TuCi-u?{tH;N(}Nop5ZDe?T#IJ
z{@soOzl5Xp<2}j9;-$ifhOd;i0xhE)i+w1=Vn?oHdkE53S=fZd&m&v$34~j+FZ~|k
z^CbL=^LU*Iz2-&oiE3+9a0rjf)V80)pr}z6gpA~D<=6_<ujX<|O?YZM?s^@8JnO5p
zFW~*OogW^4!3>Ije|Q7$o2ctifveCvlElWWoGXX~9TsK1uae?LA&5N8E-YRmsz&cS
zxz&NijNJMqxSfSb*!b(Rl6*|eco8VFF$9Dh!-U5`OdK#5KR6{Eu-mOEMXQ;LBdel_
zy<b)!`H<XjQcZv`6LMu>bW#igq0?hzc?k2#_17=J;@r((V^K(b#c}jyU}}JBQfb^J
zP-%u^D8L+mmG1^H3*Y{gW|ec@wN6ShIh#1bDL{=triOEq7Br@ns|FiAo1@U>M)fAF
zOAgLAf3ESF)w)FQi5DA0_Gcz;HYX~#VXP^iYRBxA2U`dd2>m}bb(1lWwqzodo3zL9
zmDSr@bmrN&I_3!6`rpZyRz*=t^M^wvrP}85F{!~BhO}xfWLHyUenlcI1%@f|YAGO*
zPgF`&`YV#Oas*TvAQ3XBEP;CDxRPGmW*NZv`9A%mjp6JU21$!5l%===C9~Em;MdhT
z=ja(jM^I@2s!OZN6&lj-I8cn+{)2sgp%9r?JCbrc%!8N!XGQ9_t+^1ecX>|obvsuU
zqi}t-tSeaiwgScJ8%M&brg{x$xS0zU<fq`2`JqjlcN`0h<_E$EMG)+_RKaLQ70-?)
zH*ONjTd7CvI@V>=%t5}w+b8LW;V**%EZXxBXj%j;pNdK~W%=B-^SgB;TCS{CdK)$l
zre=~H0y7-sE!tyJ9M>9Tm=?+{p!CI!vQ%(&p=K~^(<=-A8f9?-Y~jkv!uowre3<nZ
zkH4tlK_&n>K*qn@&=>Le8~S{p`pZ&;BtPMkewBQXh>+BGP#^ZZu)LL(#dQ$zPf1rE
zhVR@tw)l}^(ajYOlB1cT@*R*UK`&|^ojV$;E8Nrg3kzl`nolvd!3G&q3$;1&#uCV`
ze~*Yg_8iOJiN{^kM`&SP%za^vXGXWjQ1k|Kl76@G-}lVO2R?HmUp{Iq%aGdGM-jjh
zR?0MLlG&WBZ-|q)b@24PkJCG`!zW_l{vN(MWpFcHvXBWT*0si+{t0^V8XGUrT#@3+
zh;<f{i$ILeCt6!D!#qLq6)5XHXf6E;F4VI1)Iln)aSF?%-+cmVVCxE&*(h@0sbVM4
zRuAyxYfSAT3!BJRg&MgK!p%5h)pi;OWC}~B6AG|1JTgux2782;3krodk~PmXmM_S+
zQ!dr^3U9`Lf#oG%-`jP1&r;W!UapCxYyl5*PL7`jE4I;dibIuTZ5wQuvw;-lx5#N_
z;RxlAOB&(qV2X1M95Hka;_B7ySy4KL^*({R;SQN5xm}Ey&!p>yWV>=xR_cWe<Bo5E
z(!*w5W*7v*g<ikjRCjt$Xu@#4xR50Ai4nJCVK3QxT9~*zMB?wb1go9?>v;|I$vn~@
zp<am;Rcp%5OB;N<<+dJPLE6B(nO`@{QgmD^EG%6rqd8a=ps;3u7e9yTJ<$z$;C(Q1
zT^Fu5Zb(+kDJ!yT4;AR_J-4LxTVyuVCa>xRxt4)mrQ<H=vG&^3_94Ml&*c<nhdBE+
zTdD4%oq>O=?l;n>K16zYPygV>n#xu88Fhw4$=m$CJIr<wu4_$Ho_X5fUmY9~7skQ|
zDYMx^cI%0C1;Jthq@s>fN$R3r)i$!!hllNtGr7nz%BOn3e7?er&RC_&>K5w|A)@!B
z_!NRVKY!Ead5aCv98HAGS%WiwgJtZbdKgZD!iuhkn7G~seHSjUeJ{5c>Wxew3fEZb
zsoD~?sieO-b*no_Ld=t#A|8`UX77|^T6v;w{e{=mLkn(1R@r{8v!4H`-)O|jj&FU9
zZ>ZixN$$+S@%;U0St#3UkUM%l+-6h99YFc&LjPoTk~#~q5&7Ov7OrPSH)2C-wkT~E
z1PTA{W0|;OXopPaA^W3RdR?oz2hDHU%W1H=vlGe`s@OwL+mq~~_auoPp~*<AaZ=Dx
zCs(T#n$ccGCebm?p2>HI5V|C?DfOR)2Z^-fE&YoEfRm|igsinCtHR1}WW7gb2Z%6A
z9mHJ_7-L+J`GAY+gdhHacvC|Q!wMUBbdDd`MGLb4$2Xgr#TNnTSaC)>hk@ZOzl!%)
zmCf*9V+gFGm#p_BjJC>_>Z)3}Iy4!5{aKi*t_^BVQ(Pf-d~YicgO`iQr0-T!ea_X-
zn%UlDAyl>)>(hBj;NXQ9Oq$}6Lso6(zCYmM!scV-0+MH#RP%(@5|xF&_OETvMFJfT
zZUfG;N{+|kki_@BgZ2J^m3pklpO-uK8La(sj_&ONr^QbwVjTl4ee3JPcI<#uNPft!
zX^`_RZOEaP%`jDyJLc<`ap}c=QBDT9@P%~*scbvxKJL!?_{LucW~l?#>_N~+D=oU$
z<eQ>SZUK4fGt~Hs6W{Uq&irlCroA;^&&hOacjGaSKEYpUf;0BCYEbvR*Tx^;%*T#(
z+-%#7pbqonC`(^#5+tQB&rH~`pEr9p+J6dOYVVVH1>Bs$+`Ro+T(a(_cS}vsRKVB3
zo_ybc4tDI<u0Gv?H+XRqc58cJ>0fjAzAKhA-_-yb_Ce&@tl>@bre|%?g<~f7^qL<7
znv73h7KOaL3vCVwNC7S=+nHG>Rp?C2U08p0lVvk`<Ye@*VxzwC-ET8y`dnw0vOOWG
zz{q<|sWH?2DjcR843NB!NKHsx3{~lqqarbVIa2DYK<eYA<(Hu<<2wJ+!ho8f&u1(&
z+YN;&)(`~fQ4+yZN+vpIT(DgIRUDy?U;I;ivS8v?$K4d<0(g9SLLNJ14hI_;(7t1-
zj<tza41=};$C5~mn}zZH9wM0TOi83^A2O_}Y4!qw{mBfSfe%{Lp_U;4oQ(4q5}ct#
zZZ2J+0!4P`KIR&eL|zurNpU-v8LdWH0!~tXKW1e0vs%EdazLdBYq!RzSd@yBoQ@ow
zQDkMMTNh`ksTbRJXmB(|ip_O#ymkiIVw2|J9CL=74Umkn{z7dRs3tduF4uu9{R_?C
z^KsT`PkpUuc$5TJ8atETYLb6~Bz~bM2$00Lu{U>CYCFE0FUN!N0y1{`IhcUJi*0g6
z<<=CZMz+`kEp(H!at?7GoT;o~T!{}dq@6(lf}<QBOoadCny{QZI$O5y-X$HF1CN)}
z>CXeL0mzI!HiwgpFIih%GB&up-v~4E1{-i(Cqf9b+<XzLiI2xW^L8K6<W?v<0fpH7
zUnwG<8Yl`XX5qIe*-Xcsa2>Wejqg0FWw4Q7=A|XvA<88Z1?*NbI|0o+F%RIB=r0-i
z1hIp<gl32pV+!m+JaOL2s-f@8K-K8@`=R$8)9|x#ci=OXein|n9IhS$zzJ1=wW$AR
zYyHpUX`~mC#!sdJkZ&Wpg9xqv2#BeZmcW8Y+wCv~b?w*a;y9ZCUFVeTp4H3Qed9Yf
z>;ZslSNu};7E~DroD|^+${Rnk!_b7<hJZ64?dUc`_zJ~B1+GGr{F9S(;VK@{4qzC2
z%OW^J57=Yna$1~{d@$40w4LI%aX77^oM6V8!Gop>vqQi!Cy%R&1z#sce6d2BLIE4<
zU&p=gYt0ZKbm;ENO5Vx8T((OSEff0_U5}xeZK*8!`;(cP*-i7CO3pU__<(Cdx{?{Y
zjM4$_A}W)Bs#MeVx?(JAtSm~gvFr-W{H}_7SqU5aIvEhVHth^lVI4<cx$7b@{!zh}
zau*W%B#D$n(l)ccy~uc}rsi?7VleH5#JUsRqM{a;xyqMG!s}|;uL2_d`F%d&P`6(t
zPA6B~fjaoY@r{ib!M=g8Ra-Szg<<UFswn`IFrdgI1$utsm{3Fzby0{Z%7seod~WZ`
zYWBF%+g?-1zNC;y54OjJJRxg7P^5^(d%{6M!$3kHpRO!*PH~HO71GyPT2<NUHYC^j
zJWhfqBWtX@;4ueR#-RL-5KSW{z2EBOSa5EDMV;&qgfa(~M0)3_JOG;Y)Vl3I?66bJ
z)YAyxfTgP)m3#OZ6lN}=o2=QJo0{Laa4$n0W|j&Y4DT4yXqLHIRRJoajS9Qt`aGtC
zqC7bFq2g~z1Avz7(EEI?`-8$8`7n670aTZJ=#gNL5f$j_Uz~LSG2_Ui4fkfz$&)|d
z+eie;P>Y22{SvC;JA{In9w0FqW*ps6M_SKLs@=6`B*xngV=-`XRY<C(N30fO>Bq;8
z0a6{(E!b8PUa6)qU-a_)?!xuA6x09>Tf<EGtBT1Pbwt6I*Kl42FTlX840|e5<%!WB
zNjh-$CEs7zmV%%md{XpJvJPy!9o_)&YdJP^{+Z2b;)Li;ssUQ+1@8&96HxtUHfM+v
zV_)8s^nvHQ0Bh`}uILZN7hkDEJV19>VlcNVFzEbs42D3w9*y3%_!rFybT58A6O%A}
zU2!sHceCJ>zOD&MDKuM^ZAV!=YMmqlNcd)+63O?cxb@A<huB)Y#W?1MUYTC~V=50K
z0g{4p>xitb(MUPys#U00uk3Hx(g&(C4a^y?7FjY}=qFb&L?VPljLDM`0w1}IA!>u8
zYvq_ONo*V`t`>lsOr+{SQV|Kt_mDVrh!6YClTL#1TqMkI!N%xX1rUv|ML1~fq~Sri
zHsATTFE`v9LZ@v0>CKIL0Nz-b{JI*62<Ae>)c1^xE@_bo5RQWobJougsgp`FB1}qx
z(cJFQyQ~(yuAT}B3J#v!aO__+d)3dcq4ZAvp+GED;F+ISuI?A_M85R-?krj~`S?n{
z-Z$SqzkP!eKmT}RFVPA|-J-(GfsITEVX$nYraST?PV)?ibxGoa#d(%oM7RSd*qw^g
zbexa_qjL!Pv@-hl?$ijYYGnijuSH=G`>T+@)8w#~tOW`VKx?fXjf|`SoC4q!fI*Pl
zD{$e)P<BMerCAL7*eNXgI8t)_)EOPuL>|yP_A|x59S2}Co47mA^Hs)7EoX`b91Kta
zrv6yL(SB{}U0<!FjY(nd0{-af!<(k+!~Q?HY4Yi$*N!TX0tb~(=Md%W$Ob^}0<u*l
zfm=SGCnnv{R7Vr;(%Ns;avOdneAd5-g;)M|&Gr#_@R53eavF^7&(gpt{$Pjbs9&bi
zO%wAx{R{ikVN-)$=P;i<8ifI<%t+k~JcyY+6aIZwRrsUXxv%me;KKe@D<yjFbl4;R
z5#P`4{HhoLUf2(s8=BuSzt@Jkp85B!jJy~*u?suI@!u~8i-{Q8Sy9e}LbZ>PQ9Qaf
z>aiMkP3Xo=h|Z^B7(i3PAzuuUUiLr;YZNO+8HY4O`YXMqC%Ccg!V;@kHES4G6l?p%
zU2zYTb?m6^ba1#dpdo!%kLe)qOm=VSlY_f{3fs0j=9vE-d2e?0gUrpl^112e@M=S#
zPI}|9HOWCV(un3>nZ5-#p%fu{8(H}XvZ|gZi{k4`{bwoU3C~<p{kZ>H(O>zcongh~
z;jpQVVr?7eK#xQGQepE!j*#jkXhnQe1v>aNI9Zp9EQ=JN=O1d*1Ge$G)CxnW0;f(w
z%ODN0I3tRt39UnEuFXV=7MiwI%&0Ep*d@#s$}Z#am2&4%S0wF>sAf!)yE3{bfKwnN
zZe0PQ&S&H9wss#B%j~^0^Q()19#vSzJKxe1q>G(lqM-@XNg)%WjjS$&KWAO5AfYJ8
z)sl34c|vCp)pGO4IsYkj{gccrr)gT@z2t7yrH+bunk;%E$8?<fq5qVh_2|2&;`1#v
zcvTGK)7X2)0VnC1_HgQ1@~e{DwAkYdvj*EclN_I<NQF>gb%ByeYgiM|-sc&mog;8-
zP77S5BO#H_Z;(K6$Wek)C6U!31FkXZ_N!foi)#%9xK>&tsNUx&r6z4&Z<0ZXz3ZzU
z3O5f8P+*+?EVII16RgO$S5qfND#3|5`)QH3;;g){nR`-p=-lfiuUoz@9Ehz|5qaqv
zURz=q%UT>-9tuwcw5)Y&{EbeoA4N=VM5IS~WnNoheNM(_B>M(5pFvTyv?zC=V}=h3
zx?$p{)<U7qO%x2vkiZ8Ir0YGn5rm=d@7dE@!coC8pjSnBs<Srzh~Z9AUuGLp1xFI4
z`7^}Z@e)rsr(V<!Yi?`EcDltrEFY6kskCq*oRlw;H01iIHtdvS%e9jM#uAK$*ip|d
zz_zivb?-M{SU#7TB3Rv_%pHcWLIqC%1=JPnmO{Tdnr%k6a^9ggH&HF^U7q~U7VhNS
zv?e~D6kK@3C(DH>fN{YCIqKEXuJj7Xl5*vdKh9PxLpgRDk2?o12vG|sDZx$8PtY36
z9rI$M;HBeK)JOC}WKSajlQwPo^nIam06lkVG__qL#lQKSg;|VC(k>H-PnIL*p1T<5
z2#oV$rs4LB&x?NYa@X%qGCT-z(v^5g@TwrX)S$_t*q%|Iegge)(n3z4?S*d)$B4{`
zo(gY_h{~bz^e8E($8>00I#9O#{=x$;S*tM8x6EIf6US-fa|4Wk4RCQ9TA=S+nTD%r
zLPj8X?%lkaO!8FZX?(<NLSIDJ_E_}kjV^e$-x=2@JE(6FL(q9N2$i@D6?(%J1X+#p
zgs)u9!-UVRxSLra+dLvw80Y9&5x_~P<Mku~7@Ur?6m^zxd)-;~y^D|e0+|r7dEWPq
z{vPbSp58k|ogF@m_vc-JQ}QHj@}lq!`?ILn=tC5ckMfD<qJrIFxYmOz&^tHz=j{s}
z9DTOT4yx1B`H2`es?m`7c(Y<PlEjlsnw$D*-t3fk>j60NmWv*)PRsE-^9c!U`n)<d
zKhesv&9~q)QwC|6{^CU)_>xo<=-v;oZ^-+IkeAeH&Tm#r67o6jb;V3}pGA0tm~>j1
zuoRW(E6$Wzz$ta<WbLY)1;9Vtr@2h%^4<`wswtg@<q>4}OK?y>O-Lu1vwTL9+R4va
zomgI4-YXY6x@-okWVCE2tKj)EVO3p;4^)b<>DI9NShD)Y)!Q6MEwTv(0HvZGb6j{+
zw$*7vEt~*?Yit$BqsWTDLSf|*t8JE>ls_hNbjU9?8nF3IN#2BT?*0Pc_r*&F2_en!
zLGH<!gPnbytNSV8H6oW&^!kT}0H5sNLSP?A&gK_7vT83kOwY4Tp#||!hva;1uk6}j
z)p?&<KqIXi7A;9#53Tokhz-rAep(P!fHx@<&<?I#(vs_^dUJTDd<L=FNUhmsN2UBs
zXKdA6-}pTD+jO3u`!hD^dIwj>jI^6czs+pa5<b_l0!*TnWn^}BW?7DXlz6AC?g)wP
znjj~(Qis@6i?yzLbvFZvRAq}mlgIDtRf1oJ$Ac*tKn=6E0+a5Ne&Up%6WQJ*aFB^E
zzu9&4&_rKH^mdh{gSV&}(7)W%c12JH_{-&Ez(<14e*XD#4skDUygjxv6YYEL&zESs
z!dFZE2m@lp2rCKz)U4SBz$V9-HsTPQLmW=mC^ZT=v<sb5hdFHG5TN+4NS^2bSJ+)W
zf=kuC${(w}%qjriV`Lo|s+t~k-DP&S*t`u`iC;63g%6Ko%mUS9Av3UMzJvcL@9He?
z<%IIgy``bM`$D3!*{*8r$}63?rJA(-Bdxse^H$m;rV`5Cv-ge;l)uEJNzaa=vf-Jf
zIra(edjl2!dS{ffPs^uQpJO#NHl7YeHdJ~(se@eR+1E5%`^cg)0Ml96Tqgu2O*RS5
zteu9Y_320_%F+b<LxM!$Gk06`-^S|F>x!u%29;_j$>cOhPcuM1oQ*_IPRJD9jH7*X
zniuZV$JQo(>sb?Lnde2wO_mDDjykG76D)NJPyt+_J$4c5z1vZuaKSO07${7lcbF@Z
z7w{qy7o)54W1<ScopsdP%TkCt^$`FrWywegv{M&h9NY3)zcms|fBefS@a>=u3M1S8
z)jBftPQRB~=qnSVXw*SsY}@~U)JpR9#<1dP-aobMlQ243UOM9PklI>81||mldmu_D
z$Z2G=8iV|*OcUX6%=+;oF49is5KSuF+nRBXRd@}+E{qP`y$GOaVAl!Q6j5Vc<TSMp
za3@R!KY@J4o6Q?o&mPY_m#j;jmg~sI%PG_EcmD55F*GW#rD@QHO5alf3;~Ol!D90(
zHp&0&pe0cbuG!bV#pyC0{~H6{yXKV#Q~zXp#?37q829Llv;I5&{cD;wcAd=?U5%kq
z|FX^X!z=djogN2Hjr`>peg(8QM(=x%Q(tzJQrsf!((8&3xiSNFLcR&))jK_hIt#DR
zOJ<(Qg1&G5P->1t53>tfGb3V+5VH?m2+@(bgs=*%d~NKoXCh5$L?(3vej>ySF{Fu#
zEREm=4Y+lEyN@P+Sh$6^tvBLXkVOx#EfLz|@aG-cV~u&zRe+iS@D!mHE3N81>M+|H
zqf~AW=JkvGug^aUJb9E$5QmdAe)dXm?|k;f_vcWg^_IFg^V2?M1R~Ilh8BC_8oDgU
zJDpG9?)1^|2lCt*|89tC`Sd(2YpM6Al1_3D(6MD^Y1jU=g^SRIB*4w{%8y>^kS$Pk
zAyH#(wa%;a3pybgvH5oCGG9}4mOonGH6N4lpr$Q>H`fOf1Mzg=B7niAm8Mx=h%%;=
zV!xX9;`-1gG`_lgNy%S~%F{Q3<-eZ_BfnCjXTd&r`BXBa$g;uYhXZ#0=epvhPBCRi
zSdk9x)R4)q_11YOt|lN~kbfTN>Y4<=cB($Ynr1OIq24kh61=cKs$#OBRS>9Tzp0md
z7(Tu`_=CKB`x{9;jQCeDw|}ld?!xzI-N?_&d3_>4c-^w?`#}?J>fG8qELY!%hepnB
z;F=A@GuIC5MFU30H*CP?O>OO3YF63@`iBuC7MXeOjOp&`Rf(YP5bg_lKYkqM8K;lT
zI0|He!9)ndM}n0Xi<@mFpQS5!&W*50&sNud4v$8txA@R2NuYS-&tU&=q6c<wNPhlS
z+<9rDqXTv?|4bfS_+bw6tBqGTBC5$jyp`eK&o8!}6pgp~o?BCJrRzUPX3boi^e|uU
zXo8yLR5Vgj*UXLXIH^#OvRxl^T~aPcT<NHop-S7j9XrV#Pu$-m2Oh<QrGb>xd6bvX
z;oBbf`}Vn~QBC9TwbQr5H4tk}PA|Vt?jCp=x&36^Z>k+m6~MPD17;rbcMNq#b`^sT
zDNR8^HONGJM{Xr)P3y(J{ZU1ijMB4br^VMjC=RwD%3Wp`qQUPFPP8VUWfoosCaOYr
z3(e2C=I|!dPG0@hK7t*2<1FAw%`$1P>dhgWEn@PN8RN~>ixN`pApRk0EMr(;DFA)K
z68#j_Jb6>`gO$5SI*<H-8L5*~M`vd`k99H3Xl)wVl*of@Z<B_}Yd-7a*0eK(^|+I6
zDPt<Nn_5W~bnKU!+E{yyX7Tx!kp;RjFfSV2#eRNh+!a!B;%s5(`Xu_=Fj?I<Kyt`l
zBvPl5Eh#N2nzn~Ur+gBgvH?{am1H&foFN*ZNftGe-qJ8UCM>EqwAS0r1!3k8*DRfD
zvY+LvD^AO7&8*W33c8oBZ!l}qe+zWvL0p3t$IHgW4G7C~(U@=W0Cl)M;xK@7DMkYO
z3twPsv1Ah+Um0s_{^V&giVK>$AR-6MrpiM3B!Vz`uQjx3wpYn4?Nsz-3&x*8tS{|e
z+Tyd9fbz?`%0XB8?FUFEEcu$OGGy@1dQVB|kB-X<bNI8^w452aWr$q<wVr{Sz;hbv
zq<8c*%a>*8kRJd$Xqc~$yV*t>124^;j<b^U{ZA3Uv$CC6zIljT_)i$$w_4VWAAIea
zx9}tLpl46-715ERFMEK!hw#l_ve=Hif5?uzpjg^cvzcsl44@+ec&9oY4ZS4E=jEy4
zv3x17yiYrf;46Ko0-o8pW)tb;HjQ<s0%Ljl4EaVJnXj6k*Al6Y&}{e*zUjptP?8g9
zmKwr9F%+sY2JF=P>kIQJPu^10$fN#UYN*uvi}Oei-jd*!b+^$*0dmiaS8wB+JY~66
zj(^EcGd`P32t4U)Zq|{e&`XP7PV5zTp+x|!KB*>V*+$d(nx8aR<VwJ&DHR%!hahxu
z>Q#3Q`S7w@Er<+MI`PSTl7J5$lp83lYq8g!CbbfRl8}&Dtf<Tx`>-JsGCHaS#J2zb
zZDK-Ok(Mh6Ht*PkLhT)r7i(7gP!H_<wi;>shP!$idPRzM!zphhU@cr(S-kb^*5Wz~
zyPtJ~5H0_q>v;Vywt&JG)v@83mgb?E^aEzj8ywu;&^WZ+=EVNY_hVe}*<#vv+ER)H
ztjPmiq2p>p?_nUL$M6_W$M=Tzm@)|sz2)D~P{k9GU7ys&;=iU72<G(2X2k(O33I}h
z*Sm(dV*40OY(G!hOAjgjwdLoGu+AmC4LiVKVEed|UPf?{f~tLu!~GPmsfT?wVs&bu
zwu(wt2oLKM6y37A5<S~NK)+{2E#`Z+nEqXQ)9Hp58Ato3=PV4+vvnbgoie>A@ag=R
zCDG1BGRtHd$v7I2N_qgA(73cM0A$%3_UzEZRkmDu&N@fIQO<BfremPb^r>84HgtJO
zL;nvg03{^DlT8Z)Lv}rL;Q4)asKxVP%lh$kLBpb}3Zg#T0*aFt|1e3@MCLVp{oG?_
zhxk@O^+CEY{34sIe^NHyir%=?6eF+~iZw}GJxuVwl6&eMLsPXbJba#a1MG(#Xi=ZJ
zf5OzA!Xn$~t{$W&hK-amzAAa3AduHbOob>OluYd)g(N)jZ^I>*T{t-37b2C{aHhFg
z)Y6^`?Xs$z;657d-piHro>27m@Rdh`;6~l_ai+?@pO-UJe0){%{iCXvpe3+ZEBYvd
z2Y&9QTQkcM<UCxTp5e#HpQ7)2V6G0eDd9Gm50QM5)Ix8XMM4&I)#-<c@!@_@v*kv`
z(%iEv59>#zm$th&)Fl@gN3dtI2I|+<@p^O!HZO2q>)-ok;f=V_1+Olqh2M;QwKc?I
zTd`jQgfNYztr8;v3IED0TeyL&2x16W6+afFm(av+@{3X$Dk4?964R~NKo(X4#E}zP
z?B0Q_aMXGPbEdJ-Pe}QuzY%<>0w5{)3oG~=NSTY{aqZhmX8W+ow&F91An_{zJY!ph
zRgnl5SQeVBHBIco4lz=8;gSVjin^$UzliW8Q!J<pewDg_umoTf+)cK<ogcunW8;|U
zB&{Z-Mu*%+JzJ)QC{T~v{kC|RIbBSHLF&QTZ78N^gEkUl&CnLx{c+b+X!&GJ!DT%D
zio}$U@c555%;Mnd2&u*K9woS!|AV4t!5xD+LZq^Qo?epC_^CM>zFAQ?oe`x_??dyR
zF4}`=2qPmUbHbleEcqhPEmOl2*$fhfe%Kr3B?lIN=m}e^)FRsS`2Dmnezm*<$xX#M
zAZq%@&pzs85%UVCC+9^lxVJ=6R`B+k`OtP_28i=t`@Xa+*aHqLPsEhnI6iIy{vjm8
zJzCDM{9afV-Zr!%5nKB3^K13Vn}46c#w8CW&%8gf@y4w?*TH+*WU=B4dAYZXli(2v
z+(xZN6I9%ZkB@C2a)HX=hfSa~LR4ku6$0NB*A(3Z#f%j$@r7gQqBw+#)4=@FANu|W
zXIhDs@n9_1G|>_)2GFt&)P~gpANcW@JyKaWlN&KAw!O64+nL=mDa8vzN!suOgRG3g
z6|&fjS-l`5ea7tS8KHNjAMT}GOYI7tdj8u>zKwD;_!;Rj;hD53?Q7B_Z=9W@#eehu
zcj8j%A^?hTn~U_9a`|}WG;82Tgy%)lw692y%VleE(Mv+-W=kqoQV&Y#JJ2&>KEpt%
zUZywx1R9(mhW3-_9aP!0Xqu#+&-7X8u?Z*-JX!_8IhOjol_g7YaEb8fc#IMZwpy<?
ze*JEgP-mEnH74N^4|zij%7chj@jP*1iBO{B6OZswZiGZ55kzWC^%#Rrhn@EaIA^Cv
z&!g|_LBs&;dFipYASiyV*OnvjW{Oo?YkmD<R!{;321(RoY$(1*Cj_J^Y*g^LH|pGu
z_i1kipFokvPEV-J#Nd_3ybL`-DLy4j>w96xM@UIhmEfzT$0Sz(K_O?y3soxlTFT5`
z6XOjYx?>VC@C1%uf_<KVE$rUa$8j`3@*jf@tlYqwgH^0fdq82AJ>6SM?<lyJWUZ8g
zuX)nBT9%0waimfG%qLf|>T%zYdm&YXh&j(?7?<&7eo;{B*J-`@JgXtnY=XpFT0Bxh
zb>2Em2>(7`d+aks^VCtI;~dmV2_=X@VW~K%GI$6MhtAUA$lhw}3e|^G>bm*c_Hue5
zX$*V;U{6Op5*=P;B2-7%x!v3$GJ`v4lO3TYiU5bl#dbuc;oF1Vx8rq>KRg(*7+*jB
zAP4*%MV6ZZ4@Z<#=GOU9e2t&s<XJ#4<Tn9cirR-3$Uy%9O0cA_J}B6gu604cUJZTl
z?Mjk!@g8R_&Jz)NLFD1nhC1<6>?>GL&xRcloTtfM`i+#LPQ_S$6Sgr~RACaOu_MNj
zj#hF@n{${N5^EzyB&lI@7`OV1`Z<(F!>ZzpUMyFd{fGr=Md@7!ji}O5PbQjz9sowY
z|4SAF(6EzAuA0xy=^%DAwg{|(jK>q3L`eRs4M<Kw<m-02%38g!13Ju{v)veMyhM|B
ze-k&i7`xIjoea;<eP^~!y&wk=S)WGZ1bwoNhT~_<(mp?5VsTwx^gyz6pnWF(O_$Wh
zv#{azu}a}Md9PN-KChYF!J(-=%2=*Jw?fj%vI`h~s@G(3oNAf77BndG$KL_2!CMaw
z9djY?m)ku1MV315QJGwHtgdfXC<#ppr!geYUl7<+JQvUO4WV^OL`_J8tPL50NUp|%
z@HxhY{}*R}S-7jSdLrr!DX!x($x2OjM(!dVl*<|;*x5ycXW=FB6P-~zNe5)I9Mqw%
zg-UC`aVI)Bdl21Bskem~hS8JkDbJ77JD<l^+jn9bDV8ezFlq~Ew9b19Nzc7gxRQ6+
z7}`?m*vlc6$bb-{(8?5cr?s7!u!a2Hjlu7dl+<PyxTFd-;iarCpQ<l&1}gjSGD7rf
z2yCheMP5p%+&?!}Vs{pG6k*o2Og`rIWW6|J)$GIzT6Z^wEL9_hu*`vHNqfF7eZItB
zQ`8j-t!6!|J(r=ucy}M)n>A3TFW&U^>~`ya5{vJzt!wyu1YiWqM^Gy6=S#HUf9OWe
ze~pfLvCIxZ@wnA#L}RxIbj|06vTA10GST)o1H!`BeULAjkaStQvYAx8rXKvxZah~w
z7+S-5PM^a)?d5tg2EzIxSH$C-;<wCLKMe-h*~EH6Rjsv(An{ZaY#CyeOGu2?TC0f?
zPZiOYAw(DOk!k+4JRK=gu7xJwBWQsP5rLJa09vnM_2XX(4RG=r_NxX$8IGN}?5A(B
zh_fE)`+C0Z>pK#kz%;glr<VGIIg>kY>m?W&V8=WC{h@55k0#JlJHV?O`jnHef$0kr
z?eF&Wf`a6wW608`mz!Jna&)4KB$wRaL2+E&>tP7`^(Z6Nrkkg9k0m;zk4OHLS3<+-
z)t6lmm$1Fj=Z>E1bn?aC*z>n~s>)J9n?&k+BdaxfMmsYqx~*Q>8b1}M1IL!h*8xOJ
zgNC?vrZaV!kuvv`szG#TdN&-t@?t;)Yt3@APR*|d8rLzWh=vGN=w<`tB}^Q7cwbwc
zk0evbpF_bS&b><(-U+TLIm{{>GVI$R88;2aLSXv(3xW0=frmsQ_JAA)BFA@6WVnH{
zk?#@7|A@dA;+fuObg4h4>C5l~`56guy(5>k$I?5i)U1N+lsk;3R6i($oD?&Z6vN!6
zIOMvIjY}#jHPG;2yYrLN{1&%@-mlm06DyXhw8_n3C{@Q3)cSo7A<5R{>UtSBZZ+VO
z=7v`07&NWWUi!}N<wDGTh`Z18O0DXfVU1xl1#v%2Wr%O;;4WE=g3C>_7ll2`A-j>o
z;Z(#6U)3sa(sk)8nA-cdp7+{+f9$VwkP{rE=>y2GMSUVnc|>Xt>+J`n25lWQ-zCn8
z$S}LFIhjx7Q7{;LlaLo-gxst5Gecg(R{u$KDWxvGOxQvSoc6h}`FIZQvya*hvaE}s
zX)fr7TAXjJMsNh3(!^j%<D@^#xuw+X8-uWZBi6^LZJ4#!%eP_(_jIijzoc34%BZ*l
z^`pSK%z{9=$WmxwEtCh+iYx(g(qvk9lyVN1@}XJDvq@wO<>Scfeh+L_g~b}(Mz8Vl
z#A7#!$!+o>G9rCxm5Yyx(S`F$>?<Bhr#2Jk0TD{Wngg1$+R4WG8>s3i<lM@_zIzp}
zVTm?sSS!AlOd<CQB%M@Yyq<hKi==xA0+G>1QMPd=!@+P`*vuv~KbD2ndx`50cyA6D
zYI?-d9=d;0oai=kPgfVYmxMG(3)wp_=&kE6DKxWK5F_8r0$zR!MCqH;1q8bWrg5Mc
z%#WAspEzsEu@A?SB~gQa#=;fH!i#RS2g*Vox3AP{_m;Xn-jFp>F^gc%U~7C*Y;9uy
zv=o6_f+dsZm0@eZ=rRLC6K&N%$}>GB(SJL5T8$l6Li=kP7t<<OGvE7fH3Wp+2qQ}C
ze)EYje@qajW=FLvSbeXO=>Jn=g;mhK&GP&M>B8iZ-$INIyOQho0RB$vI_jOaj%99I
zNLb7ByHi(3PFp7_FzSD2cWq|beu=V~AaX;wx{5Lx(Gn?}@nRS9;1~d>H8S!v0ZS*|
z+@8IAr91!eOyJPMt|#5CYMu9y`OZpHi*vWFjq@Se1#nIR_rv+t%<TPSWd%X#EGHPd
zFfuXuqbSSqLT3fu(1m5&v7}E_|DJFdjWVYGwnhBSB}d+t^rlaMG2w}HLvqVf|HWLk
zNz2gFO>z|7KSP^_H>X)I8M6*X;^Se<zA+nPIL@w8=>$WZ>LEnelbb>uNT17HkUPNt
z^FW}l0hm7q;W)aAq+`r2br2Vqr8R`Y)sw}^ZSkf1+t?L-Ce=Q!q;nLXP%En4Ca=kk
zYu$R?f(6lYm>f$RN8*6mHB44rl+z66&lA3oNjI1<855Zmea#P#Go_dpQrL&e@rlqy
zGB}_C!-vPdsb=xwyTi88UN$o}C9~l?;g-}MCDcT_w>mp!n2Fuw?R1swSWE9IzMNHr
z&*y1XPi*NQo=yKyyh-H_qqH$(g_jM<`^BYTnX(93-jg2eY0tsJI2QnT&>O<2V(?<C
zP#6r#3!yyUAWjv9do_GsX+T$m27RcYa`|1Bz9_MSoYu*k5c5R)>w8X!l!Zt5wp!kC
zHB0kAl&QXg&|z-{8=uX9{;J;)ocI)9g^Lw^ct~ys_9Z?UAn&((IZ`JiPcN3Zf*d!M
zs?AfC){4|kgEV-AUhwiKLRTy6Dpn}PlG6r3EsSfc<I^D%FT>E{XKlDHzan<)-pY{b
zA)DkNMbdhJk|Oy-Ib*F`q=^Au;m%MSy`{@JN)4&gbs@2d(Gm<5?gkK@lsJ^c56)L{
z_{|=H8^o}+@uhA^fxdBd_ouZ`1>NcbL9mAq-^?E5G6j=S(?Pz(wTG2Hz@8SAZtE8n
z*-K{QPJI0@u@6F}uO1E!*?Ho0P+I7I5ZsWEtLH;Pcb+^&QZEG|92$Dz+?3nB*t#w^
zPN<V9Sy6dYQ*L)bomkz)jE&J<z>y3C*yY6#Oa}4W6We#pH#Q2EeBf?AdsrAUaN=l?
zK77>%5-80RgbtjnJVWTZ&HW2QFP@unx))woS0;3d$y-6iBc1Msk-&kmE!nv<^<bs_
zf0ma2-TJ57A1~FbkCwj#z{tQVJV-!L`p<HZ4?x%1h6s(IBs*;9@tfS7d^%O%z>pen
zk=+ZmG~NbibbPX2zK0y%u!oY<DHwBh;d;pf#Z_18M(fGzjX{|a8Xg@>hkLK0)1>rf
zP7k#KRP4~@(b`rSG%r_4+V-@iA7M&H570B(WW9-kaK?X|{`uFK=aK~phEO?P8G#hY
znY8AFWEhsYI1d&X2_bNvfy--fu^cq2uCXF}=-cr$;IoYaGRIzivLJpV1be!FOPwSB
zo-LwYJhpXfH^B28#suf^Nr5H8+{3qMFZ5R)qU(7PqEBei#yW9GX;`|C>!OQ7H8@Ka
z(-09sOQNbOgiaSl-N_(U?mEg(`P6k4xQeEQxNp;qz$dO>F|J6S+IITD$Da{{s3HI*
z`m4dX*slme1pY8q6@mHnB2j5b6@>GgeMn6RQMBhbp8wjERTy4kgp$_HpYnc<nUJRb
z(-KwTQBiLl|9D~5wn0&`HQ4F+ZS{-p9%$O_LJqWYd}xNTRU)rP42VRC!4{5(jI3Rv
zs7DTtMRjfs^wTmJ`Y<*S({2ki!qRBI{@l9)sDjcvEsGa9T6_1hk8c?yTtAXJ1yItk
zeyrw^1$^evom&W650&(6rp?%A9V1;nez2rfMM|=nb}pVPhZEhqavp4+%KIJ->eOPz
zS_j!gCa4qCgK<<rYj<W>l2ngKy6L%8yfI0<Y0kKv5F9L5JU@3_U-!nJujtr{6i2L0
zPzLb2kyVof+jXw4@I_!;^+THQ4)X*Va!<|wWa&{N(k_0Sai{n^xcBscwQDWo7?!VK
z37ULjFPQ1+BMH;DP-<g{`$VlrkSm+zfP~4phqU3G-X3ZSOYjDWN2G6I*{ODyhn2};
zF(@W?kT_aARJ7C(3F8MzhY|&P5~t23a6*~pMvlM*$~P8eDo%Y}Vw*4mMBdP$alr&;
z)4U8XDZ7xBjnP*N0U{Ax4y4YqP~XMjUW)Nxs;!U(LRob93d%lgU^J@ZuO4cTb|>Sw
zSqB~*b<!L(h9O5YG2p0zZ?i*N3#Cy}miMARfvDDXa52G0#84-I59B?6yH>c|WQN;G
zVLPE7=Hve^mNuuG1}TSeTqT-a1M%{>bVC;WPEVv&Dx*^V*8emS(bIt!9ju?ha@CMV
z>L)}V;Ph}zo$1)wTh}|&G1CvWJPNOKfGPb!bd1mEEbw~m_JxsbwH6fIKyEkCCO=kp
zEPC(lx~ZLrGr$&4S?C`23le%s<eP1E=ktHcA{Sc6J&MiLy~=toqrE@W0VTDbmVecx
z5tBtPmvS_nppWkaG4%fLG@D{lSrrPQwh;6RoFFPebMV|UlOYpi9>6n+0nQ(Dz0lor
z-fj7j>v#AF!FQ8VJR4h3zq^8M+Z${$uND5?^^=ZrJ6~fidG)dDH^eZ|-hH(0sQaT=
z^?jLZ%h&hz6t1m>=dUT&DH4yVo=<Iog*^Y}pcZ_t!aYyv?sMulrfi3|UK!h%HzTrn
z0Zv~Gfo+-kquT$v5F4-~?tKX-ru$~UMw%cI9%~plE76zC%ST!n%Y^}}9>o7gF&Fw8
zPWqSb`MD>w-X+0_=ax>Z&cQNIY|Fg3mZUl`l;Xd70-Cw6@~Zu)puf|&4ZVaAKM5!V
z2_7?ZfdiUP5T$*HdBsRoQ@f;|A^m56pD?7jGD&-%Kkr*xtLb5~Ep`#ZM{()AjdREQ
z-j#O}pm<m&dLk(#4F-Fed>cL6wIdtrPqmeadTCs!kSv=Gz0<1ujReC2C~*Y*{C_Qm
z0xv(epBoxpkF^tzcia5!kC>w|hK4`>Vf+8@d9S)xrovoHXb7uaAZ0JdaSioMm5CpE
zaK_jwW*(Df8`=ZvSwDB$R)**58$N90GJ(5CDOJ>hLFw@=Sv$dg?*|&QQj0mk{pfLK
zZKmHWNr6{Q9ZYUTXebuAedwe@IY2*C@efNl`pajv-GOW93B8P+LaXXQeb*t8DL8G*
zF=GH|!M(<RiY=s=+R0dm)&$U_zJSC*J3Rarw3@A`yr{w!4;FsFm1oEg48lvvWrl}3
z$%0liC%Njr3MV=FJ-$r!vSDk1NXQ(h_h|3;muIvq(p_VOa~<nu#?{D>a<(ygtFI*$
zr-lN&1WH1m_p<MY{$85C4Pr&W4v*swA$@3I7df!x7)(-__wQ^;Ao(dkZ+Ol_^N#tg
zVF~}0$Nfe4Q1Vzj|F=0f?xI5p#$2jn3D9?p;r5<=JwiwOb{aZd>h7Bdra+oGt`yBd
z5Oq<r*q?xz9&HTQ_w4I9mY=nShcU~=mtwpR^v0)~p=t`>ersQdN~1n{<GM=e=HoKj
z?6u9kG`;oL(1eV1)NJ+l9_~Pm@M}*Gqv@u70V<6qq_9AbC?6*$WM&lB*@M(5Dy_Ca
z+m}3EOa6fAKh3DxkY({#J>b{UT-gEYk5W(rwNU>kfwBph)DL{g<H^2MTY;%LP^+eZ
z@5fbHhK%xQAT?~7s(J#^N$whJ^)F&nZOk%fNu_)cMIGBwV8SE_I4O)8uj|UIpMPs}
z`w6X4gn%r{S{R}6GgU*w-96{w;jrMpL$osdmS|QTs1NQJFhg1Mn3b81o~8bd4Q8Xp
zG`Fw$+UpkvW_>Gp3*f=4-;cyorB3t#el!8{W^YW?c3OLq5(-UGpB8DZR_<p&)!0wh
zV(_$vCLtB)HEMnhOp-oAVUMMvN*kS(l=~QsNAkllV=Fs_tuq0v^^i_&<o|2uB%y<z
zUq00XcEz!AFa*AsP3GoiC6BSPqG(R!wYS%H>RnyWY0i8juln{V!$UeI0iV68MwC9=
z?{V;0&Z%9ML|e$~dW8{dr6uE3Y}Dhe-byO@Uu;&ni+Ke7jLF8zwo)>--vS*yD@;U7
z-C%dTHlct!wK+q)Ep~}wfRaToCRzk!<K*Tj-fYaUj&1Cc;eOAkDW*vb(HP}Ug8Pvw
ze^xR3H5P`f5&c2%11GB`B(Fn$2S3+`oN4x<y!Y9m)}_Z5Dd^Zw5bJ{1G=pcu6y6M{
zKI(KDf<aw$!YD1HDIl$dseJDGxjIq)WcLR-`qaZ00H~aZO(2zALPX&%yu;8PHUi@b
zf1%}x*dkNZPf42ECWF_w6*r{iR6OJ(Zt%^Nr754fy=Zp;uPE|9La%Ur${JkE!K<S}
zl#`s6k8gVkYBojI%r}=%ebScWkpm<Jg_)Zr<Z@f3>KC0m6i#5$ZgsRuO4Y;?iC>>N
z8y}kj6>R%K+pGp9k5%PI=HvR(8do1Kk7m?aAC@*uc`5L)QdTaYSm*1+Z@sDV78}?H
zbT>lsy3<tZ+E&XjHUzN#L~Dh6tOmSw&X$WYzNd};5_dQI?DU84sqt81_e4X|o?1CJ
zU5lZPK3>=0Wf4>J&2TUC-wX<F(<hkQ7~=<a5GQY^%2EZw;)JFeqb~Z>^7sK4wsJiK
zyrfB2A!uR$C+n8Qr-%2jsFJRqT06GTFk8%Qxd&mZEtj)eYqZeLpi-A{f4(+nyI9st
zSu*#qZ)Y{ZH51#oE(IUWA8#(+1S2Oa==Zz3Pl>WBRAf<KWs$MbOfq{&r5<AYCWhHb
z-Mo^y8CI)@8Db~)lmPcjs^%sFkx6uy1k|&B*f-S^IE&^4dPm0zB7w<Sk6y>pq%6eU
zNk9qr@|1Sn#bOxCHg9_e6~qbfP9PJTL~<jFvzMn~Jh>gKF%$$@u0GG14Z)gd0;L3&
zcOg<iA4ZqWBuMM6;+4Q28KB$yA_~R~*frVw03qn2J9*GrMvmgd?MGxiP5e{-%tGS<
zqhXejMvMRSND{`LDT#$<=-VBm{VptCBxEQ@sazFVers;s?4~+qN8E(Cr!3_wpHp@W
zd=-1+8Lj(Q=6-#!>MEt8;2@~IB0urESK#?uD(X%3tQ?o1hN8+2p(R;r8~p(U7#^T>
zRc84dzg(3zu4wsDBEF9;Os?9R09U9vqApW`nkq}i46>yj+u*C&bz;kA%eOkHs0$eb
zaW$w(==0m1!l2vQYATk0Ft_edACw1HPW|Q+Q=2W{5Ku7}A_n3jGRUe~%7w|c0T_0E
z-$n^)UnS{I%dknb8!z@XCKgGoreB=fpM0Q<G!4tc0^OX}Duc-B47zPCCb~Rxs=*OA
zEf1dik#$7;hZt3JccW#*O@VH<h6V`A@5}0$2$RN-&t`zCphttL3R8B?hpdpfljoBw
zNTmgd(=_ytWUni|G;tfHw@a+qBhCfr4d3q3fV3g*>$(gJK-d7qMp8%#ek+lgcJT5!
zZ0{n{U@FD8Rt0*zAOOm^Vy}Ji`TXNUZ?&l^I3xUahylYf05bv7EM3aOQlp0%i1Nts
zrTo83&c54{+_O=DxTUKBMqnP?YFYQh^A@PuOa|(C^qX#Zim@feROlc3G8^6bV>lp+
z4{J6=s4Po0_ygTP^n9lHeOX=qKPP5WJ-}0Nf#lUytScBoQ?ciBpov4N0H?csux=3G
z6u66)DnR8JNwy>-F21~u21v$75>U_1erQ9#a_r=WeR@xyE`DI3PCfjv0gxW!^=4k}
zdMrZkesJ#dTfJWQ{g1`y@7{j<eE50F%UVE0{I^*XyXkpk1d;q-CsuRc^9%sX2a+1v
zKXL3ne}wH^6_OuFaWzs+&N~!^T@Gi|{&<{1n5TANqEy2lS+&W-p~76YcQwWwTJyNN
z7GR`qC3-lNt5iun;qk$O3u~b}YPq$hacvDlXCz$)y^I^f`;0c@5ukUyakk|Uv)2eb
z@v3s7G5Qu5PLDpw-K8=fpts^UcUXNqaw`rv&b#k;?!hDFdyj){xBgpho~Mv?8bWH;
zB&vn8g2So|eKMo-@<x>}988)_<1_;4BMgdDmddODLuKQ9wSQcCd_<-Aly>DVs$Ee$
z4!j99*L5dazt$GFsRaeLRyeAqtXhoibY_4UdD)47Ur@B?*of3~2)xfiQ^?UmDiNU!
zaw?Y~RA_?GMO=pGYqyT!FbW47B<iz~Dwacm!EqKKcA=z)dknz8yw6{K&PjiC>@L8s
z_7^B)h4V94v;Pmz72(I|+bsWof4I-fj1@L3WitJas=xqM64E=#YMGd0dzmehChCbr
z2M~>Ig!j>B4NU0JdTk_b=;S#A?5pUr`lfVfK{xcktG$3|vJ-O>w`yQ=yNQoxf-CAb
z@T-p7QvTM?fx|!=ytL)?rGrk~^SB{XmS-!?9AV&FncRXp1};K+`*u^dd&_ENm_bG*
zfD+SQS3mN5Fy@n(-?D30(3h`OWU-&bg5JF+yJw<D{?YTcat0Rs16<yXAKz!OrY8or
z`~ozuO+;VXWIR`n)1&g30ZVL>oh)`fmJL9oZ%$%lUrG4YG>dATi_%8G#f~T@(XY|o
zn#Nozndp~B9N^-prXB?h8qTa|wS0X4-aS3cs58uGSl*M8c4lI*cgdnBAglG0`}ghx
ztOQ~`o#UuTrLi2b*kZ&IfUyT3H2n8p-3_7jZ@yOlleB!K7v*$rR1FLo?hCEgM8N-T
z-*9n-W4W3mzMer}<ASVX4)O=S*1v%<l&nrhW(O0L1~W3Bjg(m(+MS%QjP`Fz>MFh4
zFB;i8`8YYm$Mc>)l$?;&bM&IIEyTmgojiai8Ob5#Zn+mtTl&++$%#KNs$T+JgFan<
zhks*s!z*2Yoq1XGzt{#VEHMu?2>-zAso767bi>?sFpi$|z@nv-U3WG=PuP>T4L_DY
ziJ!$r?-&W-?nr<$U`GJJH5%0QSNON)*OeBZbt&Lov^CZX&jnc53;{F`wXh`Z`en@J
zYrjfkf_z{cuFLI!Pi4Gyi~JR;{fwaVApRSS?<<3Ub2KA0U4ty=?@lK%F!q3zOWOD-
z0jDm&i2}(fySaf7H3mQ&EiipxYXyzHKr1Hy>kt)sj{|{9%Z<(=FhqHR{+fP>1xrgz
z=y4>mpCYEJmB|}}L3Ipr&T_Q1m#`x?lvv#ebdCTfO-f3Dr{Y99DkF2u5KmGk!ISZU
zPkzDlaZ@~TZr_d_DSE#?07eY&o)6?7R^|yo0*1RvR|REGW5P^a>Q7W3fWo-o)4NvX
zJLx9IRTptfnJQKCP5v*4dT2SPIRhsO(n~<Afk;g)G-gxPVem&lj6NCP9$~BZMm0Z}
z>3`;uRobpN(e-EO$@pMnZ5b&gEtj#;Je}(nsP_J|?~b|ADt#3c90g$^Zt?>vBQg>J
zc*6&E78KL}akvnI3C41bX(3Ji%uDISX&{owAZ<aiM@rn4{$&Dq=8d2hn2xnHP_{v-
zOU<C>7AE@*D&oJofDpALax%-)?lS*w>2q7nnpuS{aK^LN_EKuT!_d&{uJm>*C@f(B
z*qE~LMnY_1k=l~Pm!*Ab;?8E;mzvs@0F;T-*1utf&+v8nM)`M;_-#)*Z>2%EF?i#G
zA$djHro>I}gNmXpp`50syu7tSLc*<fEN1u?7E2`l)~_EjY`@2vrwu^`T%>Pogj)Pq
z6ClnShc+}d<>ppmHX_huF_7kjlZi>#@C){|{{rHU{M;k2?}%~z0ZRitTP%a&5Jihp
z?z(Jp%1Ci(snU1yZ(P(bcJH7N-+OWjaz=8FAMxRbgAOVxg?$r&PtJdwuB?oML8huF
z#~*lnpaFy=-I()N0t)IPrc>S0W(TG`Wvaoc)J9ToY#0O(2;n6G{^;v|d4T@>gYGXN
zN(CFRa_t55Y(%%&**fN!v~S<$tyOX+bfya9cVow3Jva;gd1IrjU162xC69DQE))KH
zISm`D;ipz>>$|Kwu`z&R%l2FcMU%-68)@9`xV{l@)!Sr0)tq2d)z==(lL%(prI+dD
zfA79huN1j14(v2>40)t_mQ)iX+*`HPtXtI``?yA{kTc6}&zhb@_dAz3f%w2_cad*s
z_pTRbj;&xSb1f1=p;x(cLS((kf_@V#vA&@|loc+adA?9#Dc9bUx)H5QF&ZgqplEvy
z)o}PFVCQblJxfzW9^^2pmZGR807*c$zp>Nxb+G*xhB_lt=>Rz_3|3Q6SPe1JqK`oH
z!u7&KtO{e@UN4O~WLI3HS79#R9RP3TfL*&^TJ>k$nIFvov`;H@pT<1F4R7De$r+aI
zkBM<q_A7@?L*zk>aPoKQ9@}$iU0ffEm^t!AJKTCBVDv!9&;5jej}sB!$Tc!=S2QpA
zScJiN6GOn!E!(8~2N?P2-~CzS4sutdpz{*FMMvEqtb`2(@{1ILZ4$K0#tM;bQnjbI
zGvTs_blXRPJSj@~%nSqpPw*PR+*kyxwt^Efsyv>i)>0I|w)|vQVgf@*mx`_E%Bgyg
zfw78Att94F{x_8<G!QSnB$OH<Jssj|iUB15bT~1>+Xp9cUq|!3p+W$5HfI}<jCxAB
z1nQe<>{{mKGF_D-tcq^3JUvp+Lj$KVI#c>WLUt}se(7c+eN!XFhae2rS~P@0yZAQR
ziW_@E(w89}Zx3E0adY?c;OjOy{5PjwHsPaB@At`?B_};*9NOmf)cu8j7oge)pkj1s
zEh$iL(AfkDEmKGJsU2u>JiE-zxD;yhAYrN^=8)0M(jmV?MEkuaNZDU|F|JwpcXC;h
zdxI}Grb`c!FirH(ezxw&R?YkaInN<XLb0S^A#9%yKj##bf%x7CB)2m<KF)M$V<0SO
zOy>?Ck(ztyCuQwx?UCu*+eM`Wk*gAK&f~TVe||KF;D#EcL5i&J^psuq*Az@Uhfu@p
zX%<yb^d>9n%{cZUVp!Tu-1o-6-IcIk(>qFjRM2&luPhXnNbnVqBkVlNtMr~kX!xeT
zX6D?Xen5$k{@gkd=D%b4Lvrt=XHQcjJ*%cyKcw__T=(-+3MB_DQf)Os+X!nX1FU2X
z7z&P4AN6_4f1;?C^(@JknyXh~16|4_MsUzsvGVfD15_y5f0b-X{_ip<#n3F@i=4vZ
zBfN}0<^V~+Y!$H^7;V|b5|@Qp>x@j)PZ+Iez1D$^E1OHpi(9^kZLU1dmJaY{_$+39
zi>-mxMktoKt;`x57L5NJsn7G|v&4d12)Jz>B*d&ikK`&feCvrwvN&l^XMOwq;|5c$
zO#)BZ#e~bu**`!bC7I2dQ-)w-{Q{D%8Qety7=>Qwpf`akJs1LH)j2gUXKmh{&r7q!
zRvGEEQ%K+<is*f>_LdkOW$@(DN_)zRq0tgiL)z{h%R&A-IX~W20F7Ysfu9Dcb|FpQ
z58bO=$5YGte&Eoas*{X3YadlSN}e0IyL!b>E25D{vWV_A^h&K|m*v`~mo?6iNKkSJ
zhk7QtBVOTx6)+in>Xka_ktg4+A5M(OpPxv+cK~bW*Z-22$|eiSyEM1+ERFk84IoYZ
z*W9ji@lPFI-Fr7GCKouj=z{)VHP>@m+w%S1d3}^&irIc)Qg()(rR+;9G6Z5Cm3d~l
zA_NQlpy$I1$%0H5DYO<>1u<YPwXz|2!aig0+>3_BZKHdcsKfcdtN%(&ysnnshh>jE
zp!c-}xhg1>VVmXxe{A_!mwh*i`Rv|p4V8cAQGWXho$z2E)NK^Vs_JcBq(Db7S<7#_
z1I0oV<p+U%lw<sp>mh^jzMqnD<z;e3RrP+6(X=#FageS&{$mc`C)CV*rHp_<BjU&q
zU0&Z#4XB4z*+sI#tgIE{Yi$j=ltJ7Z>c<oESD_*&fu=hB{ucvtOFQ333F|a1*Mn-C
zOHNHw*RekC%77RCp~uKrlp8L4j0!+`&#l`A+5^9B5&2sA_Ru&vVuSmv&9i;yfgp*#
zACuV5+Hd>Q-M3o;EUb^4cGTAha(l?<nqw>dp`_wU9baHp!4fC@)cF(Q$JLz7+JrfR
zl|faYVw*dAWZ8kiOll>$mLMEDqwDM9&GGki=zRVbcIA4o!!1zqPhpj>1PD>GuS{VE
zV5Xr?b%~tIRI){vSa4E3oR#Y)76*h(Pn)`pO{WSdwbtA)#p6^EiW|gDSsBj+3K(TN
zwK|%~iAw&V>$bK@{LC(nNH)`#`leg?n5cSPz0q<pS#45LhrB6WK&$fS<dbXTjLeSl
zKCIkUPh3R7)8y*pRZIcpvbIbY!aD6}QY3tAvp(Qw?LEm$Y9;ZjNhY}-H6P0JG{!*R
z8koNuqahK&_H$a9m^4=&;4PT^C{-P27;u=qb3Pe!rY=tG+}M2P)y$6{8+sn_i}hTc
z(2n-vnLW=br$%`nwbszy&2Kp1!)HdRA&a{iF8KGsf?qJ9egU~C*iavbXFSbqXu2mJ
zJs0Y^bx$JZ+@(*_rpQ%ckZ)OL`3$NFVAo?v<;BR6Pt5>PX15a#oFAIs`yfUq`jnn_
z_v75$$jHZn*Hz9SRuQw%q2;T2+q_%4UH)O4d}bwX=4|-G7WO!kq)3C`gS7m#f;{#7
zP@P%s)Dn!qtZR)Vhdy$-5Z(R9Z+RRJ*?5_7S804>-+M2}L{FH&tH~j}MHC&>WRh89
zv)ArBup9Id2Q1uj{-?#9TK%ppXWQI5X;iHOd~!?q6OpR`Y$G&4%`fA!rtE6l5LdE*
za&^eey2}0&!qcnF7nOx}KqIrpE7tvjGXYIX6zYRKy{bGBd)GLN%06h^d*yA1F7@tb
zAN1rIBYKnt-XpNW)#7)Q8bIGCV~A>wXhW1GxG5u6OFL06(4m&^f{ih1e-dzS9y)5u
zvNQ*$k{Om(_f+2)68z<|M^j@cz_-$Ymqsd}VqhjYcI>A2Ov-VXPM4Y0tt5E-^gC1v
zP7Y#k#@6`-qhu0<G1+ag<#6mWl4d@Hmkb>>7UdN0Ks2sMpdbLWik?jcW(^6XJE)R&
zovz3>%n$<&_g@7OPBC<SS7Wfy<5}Mg*u(pfH`Cku1NOMfGwZ(;=};RcbtQ_jBByS#
zpj*>{jcTBFvH0w2>Cgj(+q?&K<kU12^ZIOrxUc1oDsM&2({ozX=DaPY7;y9yGoh=T
z4ZPLgi(7+BpS_N&fA&)jZ#H2tqH42Y+>7Gm;ul0wsuNSpsBE7ruCL>kfms+q;ZdBZ
z%<L<Y<l=LZ(8Ug{qf=M1L(Zgl*m}gCjQcq(3<iQT$@5?^pVwSCC479rAaIQPPf;1y
z7$_!48bNL3e-^)I1aQl;M3@j4htA$GSiy<@+EAuzPc6`_wq9gJ7+-AXNgF~!7tYIb
zu~ee>O?1vAv2j?nAD`Q?G2xk1(qjj`5>oB(&;T}I<w|QqJeS1Jb+J{Fk1TXowsj^^
zEip>lKxk?OU?>$gW>Qj276iKNd}m|#$D0~xILt|09(-54R0KbIX${*fZPy4;_77lW
z8V*~dv!wB!n>rY;`xQKIL0Jh_3>Q{0uB0;>$>p0Y**!?vp%wJxRSVK1e=1GpsTRT+
z-U{kmBRQY}OZxO~fL~=V-~I2ovuZ#i!uIw24|A!+=9!OIcJ<hL^ZzBBckn2`+eqo~
z%7x}{^sVi>uBS*ksMMS3wa7$eF?BgyYBi9y&msvGrqpK+(fX>E#P%BQK>>x(qmt}p
zq!lw)|LB7S<m`i3Q#k5(*v2Xg{{YNy9eQ)u8T1k<>=ikrMOddH#xHYMtluUgUY8x3
zTGQ&@T4XBP*|Ax@6<XG=*OuF>4$yU%WaA2(&jWkH)jfpp)#$J&Cge1-TP}AeVuihz
z4Yhh%{Z~rL&*OINzb8cFjVZ8(A{W@_dLsyXRcUuxWN5$M&jh&*+LZl{a}6&!Y5_M}
z7|WmwE{=cZCN|U*<WZl=`@nhi8LsgwSees!M{hSw;YVLM;Ml!Tk=)QKP4eSJYiF1j
zUl7wK8qoHNn34q87dnqUi$ZQAL8(QhMtM<9`$8eluFFLDlaSEvJ&;rf*E&>G(-5+X
z@9KFv3}~qKIor&<hR)=;C<=4RN|Cay@HhT!8Mm-8t^ih2Sw!@x`016DHel(6RQWNt
zgjQk?MZh~`?^~2~*Bq9df>X;0$W^O-BRSq-gf4<C^RctqJhD=#`V>QV32onR^B1^S
z>2JW#eCo0%UE|b&HiA`9uq-%0`F|3mH>LGU`nRkMpW@-Dx;V>Dmh)HPINNiR_|X!Y
zX-dBLy;BtdBgEj>Z(_nH*CpDu2c0_JysmH>PzMYiQ0YW^ol0CdZYdJ(MTfb>W>~3L
zf(!&io~-2Wb$3Q)>NN6-xV>1s_stx3j*rsK6Y*xcbw`;=JxXX^4|jscp>(h$m5NVB
z6I=97Tz!I;)cJ7*=0m|<4USMC^7z#SoV>q99=r(0<3MZ--z?fd1UjNF|LJd2dM~N*
z0CQS22z71Zf?qEm2<}Zq3(w}B0J+JG<~+qedl<W=g2%Vs#>@Ko>h(5JE2{Rn^2ClV
zfJL4L{G7i_PV9JZ{AD42a-$ie#gvofFcam@JoY*}zkE~qCsB9)N>RZUe`04>Jk`f6
z1JYPR77nVZV6A9wvdCh_60E@;M>Pw6t2f0n;BzvsWEu;swEMM}s*2c#oPuP5Y^hjN
zg-~(f2ZziBD&1(J9&aK#y|1sqJNG-n@k`OJXdeC2@t4P;Xd}XTIT^u#mT;C{QV!MX
zP$cGN&^OsFv<0KhNvv4P^R=Kq%xC3BzGJUwcq(aD$QP9*%)}W%pt{I459MOmSzpz>
z1#DYY3$4MJ_yExwQrL8O<wV1VEEd>*L!rhIR@h}KJ%O?fDA`QFMajISq)1p#5VY*0
zX0~wpC?rxRPt&F$ZGE!9>R2n=6doZ3A!>G=hhGR5x!mb8b{sdOSHvWb?Ps0GHNixG
zCrOabD7W1sDDg~IS+r&cNDjdQ&ZYIG{P`cS{cAIaTw8HTb8=mdE4AuO?}xO{3br>y
z?ZWi7tDebXS2B(xTKc2*0i0~;i<>P*twkm?Sj;B986z27PzU2P3&@6MSQq6}x<k-e
ziqM3R#gGJ7p3>H!<o+78IfZSA-AoQFG(%7OL&MX6qEwn#sJ0Op`oPv;S37$4?6sDF
zB8hpBGBwp%5*WNUl}zeLHu?D>KrJkCSNkK>JcY(d@<z3^4!LlM9HbB9d;+6xE|2s?
z0{lOUft}9Kq^J{d92u4l0rx$O|5n!twBqKl1>hAh59qIX%5BLzzPRuk@t1mfv91Di
zN5fyKsq@w0IepOxV(Paz9loM0Ms}ShZ<+6|;z@!c*^^<)vM@TOW?dnnWcwW!W@M*K
zJiUDC+|@A2<d>JWTrzr(q)F&tqfM9tb1Yf*$!LL;#7tSFN&2dcuWw_>lT{(=Pd9Q0
zAQAh)b3JMEYi@P(b(28VboS%fx%F2jKSBZ)C42Xh1VPj=6EyHK=Fq%6(f+k#dUm~i
zqMv`U0x$5w<|5npl2LAA8F`^y!)=`g$6(qFixxz`QHd|FM%;(4<hvbP&VzE7O7NET
z3}u>zR^w7-Od-IeJQsJ|s^_SV!cMAa%pz|65yjDWQ$=oPmw$Fs(p-hS6rkHsqwp3L
ze`L3=0W6i-C2L0Zq2&)og~!KU{53rMk3*!et?`#uF|i8<2*S6<-l6^_O``)I^W@L&
zz9nGu%U;t~T!I3xexFAH+F1a>paMIs7beFPsAmD&9vgdNpv3P2oaMbS1@9|uVLB|a
zZF)lYI3bx-ryqQu_N_QPelRmJSL&Wj&ZAsxg{PB-B9qbQ`C%C6%Q?HT;R~+I1XZSu
z!vTSO5QWO5V4m>}HGx|AAn~14F&)T^ELE`45MJf5Y(Q?w#oi-Dt#1?EfULLfcNWNM
zyh3~C?+>uZ$-%$<1-AtG)^=KO8)lF(qm8;%fGn7<rW>i*K__r3+^iWlph6XzfeLbl
zLCfh6Ye(aPN*uabsxL*Gp(-<VviHTqzCh<+qGNIjgo1j|p!D3%Gp$T384pzz$ND7F
zz(KufX#J;$%P6-bvLOnq^k_k~7E!zmnsT2btb$_3%LX@Rq@n&_b#>DSRf{~R8f2#u
zMIoXnP?c>nVQ(Bc{vsz`&C;t&46cLuCwB26(XYUjR^*j45qKH#841pc$mTpy+;l2M
z-3}e)kIQxnQWLVqDv!jNN-$?w15rX5UEG`!H$e6H(cG9SUZ3paHJVBZB56#RT%1+b
z!KZl29NiuoDE?JtGt*h05b>42YN+MSSb~4{&NmYnN3c<$(TyDfqaHfxP$vP(q@GP3
zi`^BTVu3IS3fQ89NhzX!`!SPch8;F^M%~}dcNLGzu2<C0`>1JU=pZ-Olu*h4OXD`(
zz(p7NqgZ1Tb_f~OGK|;FP<b7pP1J-I2FppxW=JnR2nvm^d!3CYm?ND3A?e_@8d^_H
zK(hKZ2=7xVqWIn_eBnULQ@yNhVdG;V0)1XrY44!?IXt!+mL0K1l9lf;K2+m8$j42R
zRFJGvwKxMPxBJ1s`;N}61eqXE>ByLely|lOV*$oEsL7ZH?J|Kbz})$zD;#*DSC-AT
z;vVbhRorjdbMxoE*<WQ546=Q3e7V$BR;Jm35GZ{pC)aFTqdSk*Sh(LD%hT7AKOutJ
zf!xzk6De;ri)W5qCe-Ek-KStXS{%d|Xc82URe%YButX<Jo16`e5H@#`{97Qy91e7t
zD(fUixtvL_YmxYn_0>W$V|yQuY@_>^JDqRzpR7N}Z0MoOlUgdiSyy+GRaLqHD~_Pt
z>U72&2OdySMd2XcQi8Gx+Rqkd@q)^^fy`XSFk}f3<tj}x5Tt`c|JNsJEon&}ce>X|
z7dnCL6oUFQaq=i2l_7Az(((t*LoKx9e#ne_@cd4W3s8Gh=1Y2itpTB59pfKY6<;VQ
z9lWHT>g8Ohv?{Lk)U9v|IYsCkmP-EjrjEUgwD5y1>;QZILXy21*F)nF2RY&<BJjFl
zIKc>RJ1qPIll-=mDJdQVD|fA8Quu@l3WZ*85@f&(b1k3Yq}o*}OE4Fh-i?p{+lO^r
zhy`t8_8i)xzi|1MzL)>NMKVd8gv9bdi<CCYj)YGC)$xD1&qfS8cn2FuWoMga7QI*@
zk{jIZ-XtP2QZHL^R70A5I@V8yW#kd0mfHqOpL*Q0S*~iO4{e4R4|4mj{LW9zFO0iU
zWo=Z!bvXLCR;w{(8CX-n!ZB@PF-r7#P(6+4Y~leYAj#CqOex-w2U_x_Fn}JEyy$`6
zX+FHQEj~q6sBi8Ovv!WmmYis;XSt|i9VDj4&;l-b3QFW4Re!p8d=@NawN&x|*1VuH
z-N}K47U-UUHc6n1=Ojv<?ooMcd&j^wT=qq2cde`i&me`m$T{nc9*J~}$7nXQ#VaX=
zsFpF{{}!9?`$ydd@Hl&(i>3Ys(TA68QToT9dgx=O!(%(g%2Nt5Vy%VfA`s#Wh}IVL
z5HB8^Dp1yW(OUXRT!^LnL~RkjsJdM8J-v_=@7on{=F9Pu6jL=G-MMgE)i8Qe;tecP
zk9gW~Q{sX5W~yg5UA)@HD{LyKH9eIWj8K$4VxAy(QP@r+l9|evS}<~2O5tTP>G#E`
zoifUyLKzS)@3Qj4e7jQdv!1uFL1JTNudD>4PTw#%9IlC8y<we$$^FpqFxm{e94h};
z8t>lS*3z{*{eTvgp^oXM=B{a*BlAnZkp83@je3$M5AS0#M74{Gk$A#iQxSa(CIUk&
zcY`Nb9k;+@9MNe4$JD)jg7Xz7!L`Jo6vb~>S1z0I&%bJtv7(FsXnF^*zAq1!8xsgq
zsCMp+AII0%|E!)1wd|~C=n-J46BazYw-<w!=Krv!rg-n=Brwh@M}}B53d%U7Ch1#}
zTB}sHGv?)1-78!A{;&Xtw?Z2lT};1C{F<mNYmeTqIw>M9j7bPmXS0NwW`HBOlJamw
z{{B@;K<gj8so(Osm3&z+i%-)<I<p=0pIUVujmXsepj!gp{4(iry?Wh%O~Tr>c*xrz
zVBbl?Rk4iAzc(<yeu@j1cD&3g0Rq(}^s8~`jQ^(0W_51;6|iv;JPUWOA(xYd0z;oE
z)b8MIoXMno&!4zX2%bE(o-N;ihzOyIprV?cq1feQ;KkZht=RxicIJ)Aw1qjtk2xRG
zb!)a3)uM_Tl_Q8a*|XX1;FveYp9<_S+d)Q(0-tI1Yf~f?rj`ot>;dW=<Q_^FF~^k^
zN#wNNLm3S7w-Y&ON`-BI8kK>1DOgjtE|a;&0TzURn*${xBdmukZlaO}ZvvLmA|ysE
zyKdO5Ii*42GxHY?lw|h)8<GK(Q}(SIdm&qZp{+l#Tf=NBu*bPpMoZwI$0tI~4!H!S
z447L#xR!}1&*pFEbHKYI*(D};e^v*g>T;~JNmjsqaZBM}vOdAiZG^NZi|rq8A}suf
zudKX1DBr@wc$*0WETLp55>av%>_1^wyU@v{>A3VvQo#f$(e)`y__q7amx>2vYEc@4
zFrPq4!8S_T*d0d~w>|q1-waG>9R173PZNcz5Tcu?P@m{5IVn~K4NI)(0C7H2eNg}9
zlP5Ym*%8n2mN!g;t->ZqoyS0`$!eo8p|cgUM@cma30t|-nZtp<k%ND($p%35`A$}V
zP2?P|xHoyQW6AJ)<Mw^QN<%v>e26$}B5hazIf6>g&Tf1uw+t35&#T@+p`=H3%3wCe
zGGI3^AYL6LZSnNpH#K<C2U@HH{?7;rRzn{kg^gqrS!6!Q>jMOk<26=7sgClgY75Wr
zt+q}CZNv~uoxIy<*7zFsNNw2{yW*Fn%_YB@n;_J|@4Y|6Du*Z@If&Lo5u@`pt)8JP
z0LV|Snr+EYP9|&}ITd{;tG?F!-;>el7q|6;8)08y!QokUR+MJhlf~?O`Zm<<<9z>Q
zqD;s@;$@^~EJ^0-TCBv<(b8edAel3){wRTzA<m~HjZl5PJBHIkYj~V4)u^hVuFw6e
zqATMkK49-z6#Z0Sx)3td%^H4qh-vC<i&V+suyDE)wZX0zOWa4@5?e{#T@1=J@$ZG3
z0TuVJh3zYmbVGf!^$3*<WUesP3A`0X<a8de)ypyjSx$DFPgVkz2df%Q!}AIG8o(ur
zN+G5~ZWvANIn9>!w$4S^<lWNY9S&aNqeYL{s&0zNkL~E7qMG8CDx|{Yk;uxPhyTLu
zaLpY&X$yG|+p3srD>%kZ(uL85+?=+E_Q`FC{}=|ICzoIpsZXPtl3HwsSUx6{t@l^}
zhUeMsdLAbP?Pd^g2FFbkZ9X==ji24V1B@M}6Y-ElXXPW3V>5W#ap=YNezQx$%4nI&
zsG?JB=t||F#(*?Gql4#0;ku402M&r6`$L~fUdN9&`~))guTF&fZ(n(v+`j!ya_T|U
zG2Gsyw2iz?`Rdp`UP~UYVctohrbt?S6T*A7wW#n;sV>Go3M9BEs!4Q5UchOdCO1ox
ztf>cZ?YgUw%v+yqLUFtoi4!$<lKtDEHGIk9PEw>ZFR^cmK<U#J%+z+HJKkc|_Rwz6
zd6FA_b-bw5-@DM?5~=92#r{CHt*57}B`wXGomgPu4HC3_6@2xFJ?sE`fe;;}nW*ym
z65l`G02jo|<x${Ha&eXS6J+<1U+WbVhT<P%tZ*rnAO+=09q`8uTbuphQ=TqS;&uWU
zJ}2;@G|;E=nc5(_sBG)go1(iCJLO`O(r8(K|7sSZmBk+xaKQbM9R5l?t3ZT}EX!w3
z03EO9#;iH>z4UjVFTF)$Tf&g9^w>XgoNe_F6e$S%r{G#!J7;A!Ze#;hDL(23)}GG`
zR<`)oo4wbrR);)QXg(lNxVy!l0xN9}*2;l?Ww%?_9%q}0>q0Nj8W6zF0V|~|r-AQn
zXw}cov(zmK#b1>Qa1x9z86v4SL|twy>V`E*((*=5JQE9$TYPNT8O?s*_5w-PaJ%)K
zI$6EAVP}JaimRoKQ{;(t+*A=jZRn(2R;N&5LpMOun0LA+pc5jxXadjulbW4I5DH&=
zwxD?!`2vLnowhO=gN>G1a^2nP9kwxPNR>O|X6I_tvo}$U!XLZ(V4jx3E2O68$s=DB
zyE8u(2<oI6K|r&me@h+Z76+H-0o@k&ybXKkW1_bm4-0T|Yh+4KDU&<MWfC(o$o(bU
zcqdm&T`HuBSsUWiOh69OfZ?kweR80x6jvv&S7XnYlGibrb6WaZlqZR@`To2(gpS8u
z))k6HeO8Tw7oR$zOSh4{w7M1|W?BiP4sce$8!xVLEjo=cqocTH9$E#M)K|+BMsufM
zO*%>VdKo!=!_OC5fCx&S{PXghn47G%Avz<Ai@O=E91#wB-KE(RyjVP98EL?&(hV(^
zmOu1Xbna2R7U|T!)qx_d#R2*eS{oV$rVS5b_e~JV7uZ+!%FZatA9rN^4Rfe?GSCfg
zGpAQA_pff4NLUheeYnf_WBzqaZ6xykPO!DO^0$eUGuO*Y_;)~ynJzGE_lKDZ*vj~>
zm2aCrC8mt7a3|q_TNC4A8qc8VV?p3YJU$L!Mx)33fEKu+za`J|W1GDKJBTm(9E;pE
z_>aF}ag<D|gj^8N8ssI;W}O`ngUc%l)fA!lhqxUMPdfRZSJ0%#3^lcyq#gwsV6kiz
zR~mP7<MCoP`8yU-m9qrz=N&ShYy8b?`v=>&0;Rv*JqHeUBJ%WxOp`O?UF!qYw!Mw&
z9#qiGe>?JCIt(=2@6-pWtsLcP{ZQGWdZ<@)q0%D1)=|HgV+<dYzUv~aMW3h5(h9Ly
z`DPF-IczVJMd+goq6D#!UzSsy_XTj||7B)g>Z&=&va~)M$==jt*C}u|gMsN`2<i#y
zEB7yRp{z~#1;R<v0Kw9P?O`&+&;<=ECUTdP6q4cg$=eJq4<z8Lm6EZ0K#{%*td{oG
z-5@6EE5ZbzXnXJK0F!cWrnkr}g7*<UazHo%r|r45zGeVz+RR8xawc@rIsi(ipBrk~
z#QKT#`-Zp(>m5AqiiRhNY(rncQJ8k;Ut>jx9*VGzXz;5xuZgE^LRTe&NC$BV?Qb4G
z0zT~{u8iB2eyFQwxj4IiWT!P=@~T-<u`PbH<lx=^N8SJhYr_b~R?Vs*&|B5N%ucD)
z<VNM(EwcsOC2=Nnt*hZ6*HU>!J<-RyP+=05=+M^*E^8+HnCBxfm#B_3BF>T-Ol<Fn
zdV(f4L-fLyr?A_3upDTO8Fl)cjnK#Xmdmdq$ZQ5uNXQ_-&venhyWPiFc3w5s%S_e{
zAiCB(v&c0zE$S<kF2xBTIhDa&=qbHSDX6_6oNj7aDEoRRmqdLvH>t6sU(Dc;E8Dfh
zu+W$9jr4H}BW>CdSm?PIM}U6dC*s^^=82w(TiaGwC839o4}N(>UCBK*p%e?`rz2K>
z(idOi_toAc)ipF1u_{iBYYoaNAa;w%n)U;1=NxoZ>LMsfdl<U=6>rYXAs2ppr-xR5
zmsxrQYgk5x_O(zs4~d(bf^#qTQOhq^<;}i%uwk`jG=DF2f1FAHLa@LmND{YZ4GqG=
z+%h-|^-#UUPCIWjdW+iWtJSjZ#SvL#;`OQb?NKa4W|@M*kTUpU<K$z%+03)XF_xlG
z$yKT!+(iOW=fU+7TLbnZeYyh0b3i1E=<y;ieH=#;<5`}UjA02yg(F+kY!WlJPE9!c
zU4S#+4|Ulk>hQT1AR}@k$aImy9xkjxZC4xV*%CjG39(E%DAx5{L)iCKo8J*ksC!5$
z2fFHD8!wyUZ*Q*pg9Ux!-{>5H`@7F9?JuamSz5oqGD&-2uM;>2e|U;1*iE_&6$wm_
zD-vA#n3@{2*@`{k@%qIVVmD%=QkW{g9ABHa?!bvRmmGNpd*R`WLt2x%V2y+~)@Qqd
zu&+-%;Zra(ex=azG`i|Ql~a`m7S~1$(Trr5G{W5++Wb!Xx|IYXDJV7^x6H4ybUTLf
zonZV8LeOSF?b*TbA5&x_SU^8n8p7pxK$pdR+|8ly)EcI^;`}r>Wv~$E=gm=`*<zK{
zLx2)?|7Wc+eW02N*$)*{sm<+{L1f_arJ9_fV2M`QD=2*eXoVZswZ`)AGvxFgU#gX<
zJdqSa#aAj=)@NtJ#$PlEq+K1D5<=yIKA6&bnqRS)s5*hgt6Zx!jgHsJ0>jM(DgLOK
zXd$>%dR3$BgT{o18>C<$;6<fJ-woAQ6Ds@MYH8WW#6fZZTi|`%?v>3Sahk>M75!f`
zgQ6~tphU<1nv8rK0~)E%kSA6)KR?4Q!Q=bG-<%ox9NB8@Rr0>N#sezieAS&I{zHr%
z;h^bukz_8nZM*p0t-1O)G-y1ZjvFdL|E#m>1&#b0_D_}O*FZtNPlmOD@>$x(BAF(b
z?J=66&M;>?UeGnKuhc^7-p>_O)_<PyFoRG?LlW$bVG6-(wd_Rx5@q1bozMU8Z`K)=
zEj|n3;Q@TWD%6@&)FLLY=dVD7fLg*~^@N-gkQfOp#Dn#iIP!3W;HJeUiVAQ_=8NV!
z<1L+ufOvUr=*Gx=0P1m)sdMn1*kWFZ9#lDEiB)XyoZuZL7=;B+ln0Y@<uBR>4RWj5
zO^^^@(PZq!1!wzk5j7U2Q;^+ctI34$=QufbvZ35iA5bI@zLq}s%nrWmx^Wxg6a<66
zZTB%1(d`1C&ZhsdS_Bbz`qooJs3SVn0d`XH=Odq|_;HVvZt4hI7fJpcXKN!jS%obS
zX;J?1YTI+ia5+wj(}pK~qy?UtOHW;U%mAx+-BTKnm=kdg%#bDts<g~u-@)m^{>caQ
zl!MlvFI@?_D-QhjnnnuBl_T%Sa@<&+jVhr%YymXcR`ZD8O$Q3frhvhMt@9o}n?l>S
zB#u1P$!JJ;@vk<4y$%TM7skx%r!Y28x6Hh~;X(>sil-X?qovCI$$V9sS4y&^plxFb
z<#JHeMfWiH*bf0I`My!oxBp<UKmCR$t?cNLRhtsN*b1<|?N9XRJG!<_#8-%0k~RB2
z2C|XADrJ{g*hBHhe~9tlW1{oqE+}Q&{9p6v$v6&3nUlX$e*Z(sc=bUlC|W$1L3#O4
z%Ab>zjMo5Ffc%u+w-hWgI;rATD#S>l`y}E)YEXSE`DS^`2dXM^Em%EWn$3a0d=r<I
zw+S;KvdoFNTNxVg76K$=sW+QE{jL2UH@f&600i3gS5$xy^caWGY8KZ)*i`qMNH+}m
zE11e&w5!RLxadV<hah+mF{|cJ{=9G)UGTdVxBoBk&j4vsXwA!zkwL75ebvVefN4~c
zb1a#7(ARuJ6kX6Ee%}8lA(VCdPCs0?`a;poL=DLL`)zWUV?JeGZ7na{+!E3m2*ruI
z2XJ-RzM_wrh=daZUm`S+XFyz5x!}Gyb$HSBITlLxnRIcZ2I}K;&Kwp2C|m!ArM`K>
zwtOS%7L<X~cJ3be{k}(RV;X2^qSP;^<eH{o_k7XE>f27>=rSTV?qd|u#jC~&Wawn)
zw<p!_#kMu1B)?}Fi#%`84aaMB=asJx-QHlPg<7W--NOQ$*MA&_l*9D7RK8`B0c9~r
zV$DjcDXgrQSIm;PKX14Ru-<5mPfDfwP0Gv<^JR|gKYO1wv%?r<I^;elDP5$`h{%+Q
zkUH_ce+$6P{O8m7#=xgJB!DP(7i3(frM^9s^iV`!j+T1M(3*H5XMQaG7;eDjSo+P4
z(vc@-@nTd)xbMf3M>lefo9CXw=WEE1)y$uAuSA)m^O380!8($CyS@H6sxkyrWgPKs
zR+#|xk4(>woA$fXbryWxq7Ksz$+9MZY>h<mDLi}e18r(jDouOHu&$=r3YZZxLICvl
zTg4I3!TzQa%E9q&__fo5Dw~k1a4>dpwt)(-&cv%@v?#LC(O07}$m6zJ!dXMC#3z46
z7)<Z7riVXjRfk%IWM2}SvdsZ8^>vXsLlR=P&~uDwQz)xahD$^P9lvM^K{Q6U8xtw|
zCdK2YX*RrYMk!DGh+$LBXsgv$c-1F7*d^0;e7DyBH>RzZFacoN6i}mG(g*{IUI~FD
zNq3^XIO!*XTGZ5~07+s~{LC6<^P#qA%=>sPg~FUN(+YHTA6Q{?r!>+Poh%1brUZTf
z+Z$;tx9<5ON+)Gs5gSjiq}l%kg$$m5BZyBBg|SC7j77f+t5S7o`-=p4vL(g-?{f0q
zwRPo3zmL;WDojZe4NV8HlmmM=0U{KD(Yrm%O4>&BV0!RN0q5X|OQN%Iy=qWZ6!wBG
zAWKfH8%2T(e9Ryas7LH?@^7jrE5JF8V(p1`S;Zq(1I04=z^&_4wVLsGr#&ZX6xmqm
zk&(3ZaH*|Lmq;aJB)d5t$AG*|mV+Gx0w@k!r6b685s3n^6T&npfY6=ou>$Ortz6q6
zD}h%SQ(HT=(gN|>mLvf3U;G^*4U!6lWZO`|F(no$0pG048(zgH`vFz(wv2{kU3Q9;
zf>YjjeZYRNuVzq#->Ga?y3A0X0_G2Kq}^#+pE?!;EYewDurnV+?&5v+P!W*{Gj{?N
zwn%0Tv3xx)&5%9+i*IIW4&o~%2J~}JzP{BjA`1h+$vUJ@i2AsD9|*~V#{X#&+mX~B
zEfrzzD645}TJD8!Ge}bqmOjeJ#zQQMD)u`KscI3UGven=iRAcySIYoPGH}YGP+tp0
zH$N)710jQ5nJES_XNw#=mq!e#XgPMfkAR&SCF?P|q!b?u&@FGBsX-xFM!wyebbg(y
z5##$C*RBxZKf_f_4t|d!o(V)gq#Nty5;xZ2pk&qB`3>1DbB@h(Fl}0WB2wLdOkK8f
zYY4cu{9=T00W{Lj0UJV^?GR;I4N9xPs-UsJV4~W2JQvHM<4XcDc^E1H_7?0EK);E`
zgLIqoyL!wCzl`ph3e40Sv{{G#1prcQDvE+eJjC?5$k>uOL_NxYs)rpa?z-^ki5^m3
zfoLv583V$A?=XKx_X+|E51sNb?rl3w0B;FXd(&JTHMu!Fg&Oa437RPx>B}KRrYg%8
zxuI@r?sbUV<cm=?LlbT&c5pGApdUFcdu?{(2s>qzdrX&sBJCe>oty&QJRc*lPvnsZ
zxh7x3`O@&quVuP>L*DnYON@<FbLahoplmA4-|s6kgWkEHG=UGQDE@`ADpi&2yIF#F
zKEs>Y)wNsdgBYi^-#}^8^6!5vY$R1|@(p!#mTavJN&vF6r4=)!IK%N2lK7RJ68PHq
zh5&5~pFl{jOZ}kggOj8vGucA*7Jo)nAIX9~LB&=hf<!VOsn}uK$|E$jQ$qvVE+f{{
z?a>yJmFg?T>{c#VA`1}vPgtvQbYwz+JA3kP*Nm~Tl9!<a)&j|y8fD3>f~t8vQsQ;3
z+RXhJf8VEM69Q*S7$hyOP?loHss-xdS=p@I{Z&a5E>C@eqOd1{pSo>T(@pi8O)D`g
z>MP*ASJZTn#)eF52=ur{;3iuG2|bnZVRoJl$@aM@9(o#fOHALBHvLwHz(&zhZcPvI
zfUPDJ@QT`P9o+st^;u3<=PqJmno@2Tn4*22DIGtBcwglx!9>;A=x*_7u)e-kRwzL+
zkwyZv{@0#TTMt7RZ43w7xluIzHX6e;r+%cZePnjz>4&oejK&d*gP`!Gbu49!)ZrEV
z&}*G{S>i%N&n|jEeuA99KYnGZ2HKiN7DoQK2QkhB1cND<xm!2J!zJYs+$cQQ;Ros>
z3Twz#czB$c+dI1dDJ5z<ZefQ5)vS#V-hSHqnAQEO7YkQv_`rjWVJj*v{ev){O=76&
zx9ue+I0BnT2IT1vMj6+$p8^FpzZqv5-|=OLmeAoyeVafRXwEcpjw+Ih4;&?c{tyUc
z%lQ!)Uhl8V6&Pu0h0F@!4t_jdoe(hm43CLNX;F#1AfzrP{$*ESq&6Sj5^Mm5_sHrz
z4z9(PD?M3D?c_6$u2ZpS!Q-6v+%zd3QeFJkdpMF}ma5sAgnbP>Q!Zq)J4%vAM5(%Y
zd5p{!J5CstsWw4q(J$Kao@hVz=@m!fJ$XP~=~JCwQ%PMPT;DlWUXa5S*dPriESP-R
zoJ47|3HA{<$2`@yvffCa&;BQQqgumjlSuj$vt(K$p9P8t(O-%TIEo-1x-Xhw|7Og}
zh9_Lv76!xf*+_pRZ_|3--h3?f0WlV(H>FH?1(o!^rB-kUQdwmw1<<X<l;1G91k^Bo
z&-5!LOnA5KI0YdJduRE>+YCMYBe2jz;=ZB=Dg^i8Wh9Nb{K2M&&`107E+R`J{JQKp
zIZSY=`HT>XvB5H(kcHz{%g;G!I9*mDP$lh>dP)KGNUqnX(g$8l+sD#-UI2|gu!6EL
z&FAbY@^ff8`L)&njQkT7hW~F>+r&kArTk<v_RI3SA2gy?p^(pQI|vm9*LglfcR=x1
zc3G;CxM0vvgT%kR=F_pWS9J&;DJ#>fwWuuE@U5~|fGGM~?y{<IZ`FS6h*$V2SoknR
z^$xD4B~lL0T@&0;BG_4gV)i5LNh7PP*0bbn`By{7EuKtNB?x`N7Lr9sX%q{maBIPX
zMmY2fe3d(P=A(Ukik*-4E}A8wG%RYbsE6>08&w-uDyzKk2FyYwe%>&%#y{|}v?`V4
z5)$It%;&6Z8Vppl7Ai2EYAy!~uV4aB0?i>$@h8Q<injbqBs6{j8vPgHhOjz=A<uqg
z%Jlh(7eZ@|#$3DKyypZkXsmUk+*Xb-u)-IO$Ijm=gn<amg9(9m^8tyX^c`GFnE8e{
zyWNGo)a*2M!xC8#@~U_X;o9n7#0I4q$jyvausCqiwoGK;8HvBZXG*W{ZjS0k2oX90
zh|6ehT=)8>tn6@mAVBmgYVGq)t{(IHrlc&Y))aH0IK0U%M3Y*17i#aPOvb7E!{(xy
zgN^yTw^{*^gJ#?}w%(gb>|1foxB7EFE-=gEc8bV>qv_&MeXahrvU8`-m7ntlSn9fx
z2&UK!O{%2c;tQMY5G>oKH0H*9tsB>p<#KIKqq1DdEVem3K6p$+gyQ;{l;@f>QX(|z
zW;vMvM)WkdRY#ny!qa1`3~^+QjD0s!<XttWbpR@OvZgzQ>|n{^OrAzm7chI!v}|Wt
zIdpYs5rpk<ZCXL_lM_n)K?y0F^qCVXX@abMqJYAX3aa1YfEm4=Zj<0@E4LPS;VZJ{
zHwq=O=2mcE_}tilHCvnWix>xL%j%_1$loOmR9Jn%A71}9>Df~dj>^j4s)3BIXT^}G
za;?UF{$IrMU-?-rz26_a!s#ZT6^5f(V1k|DSFJK;tN*NizZLSg4h2NiO1EEFrxur)
za&TQ79+b&`a#4m+W1mn)^V}{j#prP7Beqs{?|m*Qqi*_q5LDrBZ!C3%IV@qBKD#pC
zUC3a&x_Fig%JSvH#_R#EDOJbM$1%-Ka`M0fJT5`%cupKpEs%W1oGDdB5F!&+(M>+%
zRq^XyH&m5BqgXY7V{G$eV;^lwTp%E0c=l4^o+ksd*GeSdhx?7&31-KQnVHl354vCd
zjbR~qQXIWZ>01?`NWWX3jMrP6YcqNN>-97wDXh-wCTa=vBc9T;>9CXRupK=*X#iD$
z&H4G#p1+*HCe4!S?1JZph)YX9+S$EXv$Pt}jBCc@A3jE=S0r-s_SE9P@%_SS**1V3
zPWJ)OSiNnK6kV$@3*~4UQb?Z(Ax}mCB}T^xK@v=@!WwCIOVE%*CSip!G&vaQN~Se4
z#1>e+1xbj=`5xlO@5?t)ec&4$eU(ok%y<p#f*`^Ggt+=1-45p<YDDEp^RS%^8hKV*
zrrg?qP-}r7iKF-xCCB4y29c^912iH+KC0btNcfITK^N}CE(*URzSI}Y2Q&>!@iOXQ
z^`;K}AyJWjna6igZJ;vdyrF@CbLNiios!?2GwY?EK^99t=YZ8yZ*1<Az7~M#!sxeh
zW7U*{>HFe%c5yKM?fgj1$jv>vw`O!6tml1eA7=gDU!r57osg8wiW97X3H~0t_&t??
zM7_07ZkQEBkXLZjXY*hmu|cdI%l4f*otGHP3x*yseBs9RJ8bqjXyThWg2==y3=@uu
zW0JS*Uwj9+4Z$8Bs2#vG&Brt3veCKw9zL+4M<b*uF2w9$tvP^^!0|8LT0hkm!|`K1
zUbT;FJ$s-adcl^_BEeQ(<zoErgyRES*lq9i7Vrl|P>T5OT2nt~%>Ycbt+q`XfZt{O
z8{N!e7{z;jt#x~nz;Y(E;N;2}j4T7LuX<`cfEUY7`#XC<JU~t9W=;wP($XrYY2s!q
zv7!aST(PQY>V}Ejz@t&q<E*P$CHA)``X7lJ`Wx1;mRFLcxcyOEj)}WttyjR`N3@q7
z%DH*t+sIAS!#Ctyy@4h&w7_8(yj8a2-#f}!MeMi7mn)}&Y<TJVdOn3~c5A!MIxhV>
z+jgty&NU4vz>vHL{@j(4PyTt>Dsuc&k67c6VnvT|FM6PUEqV+ceq?pb(-$MWwj8d@
zm|MsTY275gQ5x7O+k-i(4vR-k3Yr#nt#?&VG~71jY?y2S%8dVv`(zV6tT)PKrVB&0
zM}k!;4no+>bRm_Ljx2&mLdWZgSpsBR{L6y*#e_dcN8%9s_iu>ZDP^sp41hJr<V7J$
z)&{;5zAqB!Skym#)P2gS#e~9_B@>-Kf3EmQ$G_3p_z$l!otka<U4?0V0SkLl6OgQ#
zfi%VNm8DE#BROVlc6!L>%ie2hgsl|-#(PYH`;e?P@9?Voy^on4l3Uf)N9ld(qGF$N
zAH*wVQg}8^?b_ZiIhzkpL&k6=gw;$%Wl~p#)Nswqzkp#kSOG6AOo)5q;M{_fSil1n
zbEGGf?XS3S=g6BXoZPd`FL0-Q({o2a4kPflCERKDK=~Z`2^r2FIG=a6=>`6@Uq(JK
z8$5n`={P4G!-?x;_{olq#ye=%yPjXqg9-U?u}nduk5hnd?w5s+KllYC-X!e7iNuQn
zsf`SSDw!VIlh(#vh+e>nzU4q_<%bYJsiX2Q7q$%VT-z6&*5AqwAUMWWfg*~i2(0_p
z9~ZWY+Bd7NAb+_7DVdOt^+?yFEB+0#hdfy~O;%>h9pd(&(>oc*2H#8YJYrKa;kL;y
z)Eih=O>?Kw7ddy!OZZLD$(-m+gId_eP?gL`m^QpPA{*&g=;)R8f`udHo9<@R%+W`9
zmBA!rpAAd91wpL~Q#kGT?VQpzw7U3QoS^M?1z&YL$mejCa9Qm_koT2&R&fJ5{N){#
zd2RTLtfPoypF*9NkMHp3#0pLW^FnJ=4}Y-1U^VDT0palHpH)^sK)Sv@zROrKya(NU
zMH!DTyPWS|)U!IAw`u~w);^Wo^w*!}8CRuBJ3pm;GlU0s${3IB;!N*bmdKUum*_(M
zCqhMg-=oo*dQ@jPd-Z#f?Wfp(^~S_6RL-yt&_&&wD^}@0IK=K1?ZoakgltCgGI3M(
zd+f9|#RP*`h>(GDGYyr-YK}DbUK0*ktRVDQ^YAKssdl)a2O1QDhb5EO+tZ`S6Ts-y
zT(>+PU6p0Hsct`C<vWf5uuY!yoOWddv;!+fhgswRGFgE!@Kes8QuVIQ95tmF$PE~g
z4$=;raC+`GW_&Gs{8+71GgfSZb`@`Ne&srDeB1sOK7S5P%N+&{z`^8QXN;a2xT;X~
z%!_E#v!f`g0I;|HzP!0vc<J+t7KZQG`t(8$Z&m>Wx0eC}?jS29T7K^O{K?9#;4b@r
zz}^Mk3+l3MzdiP{xs_4V0HM%}#2QW(^<QVTPWyd2(aZa(dGnem&l5~R*HSmS@S9HN
z`K_RdM<{3ehG@s6%6?RUTm?UF&Yis|C>gc12dtRyr<hECzHCVm=?cj9=x8kQw48%E
zvKH(sAj1Tnbi3oL7PsItXd|?_#3y|-t+5DcX^sANV~#ND<VsJe`7+kmppM2TG5F>P
z30+vFI(vdP08Z$Xl^W1-X3gr)q0tE2IOb<boKeEmG4A;H;kTo<0xdq6;ybYsVi4so
z=o%Q%Sg9C!dVn~44T(AA^_0m~QNH`GQ?rr`H*PZ|XQo!c8`&IYkE13`cUqEO4-a-b
zK5F*Vm?p^i!#e5dOfIqJ$!{`C;z+KYAQoT2J(3c-<^P)bn=t`U%ljW#h9n<l#UiFr
zC~olsY6qXc6frM^@!(nF=rQ^Vb~i5|YbNdFm@p^k)<&j2+bW|qz>kafR=CGBT-W&$
zJ)+1Y0>cW3@m~bDJKy^47e#T-H(1xn(wZwZF^NIoWAmA)GYdX`Hph1i?6IL&j=jOn
zM%X}#)u-_a>Sq@KzkjU|2FpYZec^x~+lD1PlAP3lv##H1kW6unOA@jys|vYkwR?Qw
ztZ{L(WN$S!pN6QaD_ymmvYHt<CsB;rpD}o|vS@GWFCaQB6Pjsig05YOrPS`gy+m)p
zk8Q?4AUhls!`!biPjc+3%Cp0JOT8lDlkH<qLRwmH28<pI`MKY<57&Dty!D1#hQ%|0
zmS}~NWaRug40*7{I7}YE2sb_zE?!DREuUBR%EVc8#GD_#F-Y;DedHLmcSP@mLZ;`b
zVZHa;xSI96Gn$e0*HeZsgd*jq9=AoyChdijip$6qYIjT;f$fqns2(;Bt@#!L@zX-h
zfRF!Vp6@qK68BOL7&+k18lIiy2g6k^`YAOZa-6ARt^W4_$>5I83Tau(Y}1^%?<hB|
zAR>$rDdOBIotY9pxGDuoNpveqHaPF|e!A0dX3JYbf?UksZeNKNBVgu0=%&pX!1`pH
z^xe#w?rvg%ayPNZI+job-Rau&U4g&Dz?Xfu-+M)OSmo_7%Qok$UX>FU@&H^Jb9iai
z<jdtP;Z=^SUrVaz)cHXT2RM%wY1ZyLSWOt}2|ahFGifn=u<~iV*#1wVAT7ec1M}JD
zF%PJTll(9I%P`gis>~%pgi`7jgp~{_3ATB&l~;IJGuu;G_$eC1|B5B9236q^!9zh!
z2~zCvWlJ4kyDq$~N7V;WZ?o{~%4EudGtOZ!ye+Bm?c`-o=NyzMCC7V;-lY0}NUl<{
z^d3#VGE$tCpR%vlMlgT|dw)3tQEwe0>1PO<2!?nEDx#4*ETchcLaIuT<~6YUuvY?2
z1qVnThUIRX(A0-E9K1owhH%f4U@emBOA}t`nxz*dT7Yx>7=j)h2)37$XZrWKlN0TO
zD&^Ka>YLJsj(9R7!mi`Z-(ZE7FRZ`@^xf!M3I3r5q&<yqWt>i{WfP1o;UO<LH?ZU>
zX?u*ee&6BFSkJ{*m$z{o2qm=}vZYSEOe7m~D-mwcMuS<et+&2bXE;AFYr8+u^OWCq
z44!<ROG6F&C2f{>x1;MkucB}#DWjb=E}^_+`9=pOFYM4FZ-xlNhB3EoQ0C~$wk4G1
z{7E|a)?`1{2Q&`!pUn(11<{k5^G`y;8#T~rQcy%LwkCBO=nk_Gn8$^irbSPFy)B1#
z64uLjeS<*vF$(Yx1M-sUFq%kQxlgvQ{7}mS+1(L9N*>61Uv}-^g@319U3RqB17+WO
z{k^ou879(94?AKMKdZ5^FRRD4(`it7S#p&jk^|S#N5hlpq_lvWVf9J4pa#1#n?bWj
zIqx<tuEXMi9&M(x3L(v`PiP^P8FfPIr0i+{%QPcDsJOCovzy%U0Hva`bhnnL|626w
z#D$v+-hGkyHDAjdJsbZeIg|qaLw+4`ei-H<QjB=x87ImvwH-SdW&XDCnzue%tUwil
zVepzqJQ@<hFD;}t^#A`gF$F2Q=6&^Fd~=}89Rd|B`BcCf<4lK!WVAVhCr(@kuol3Y
z{UM_aurvesm`!tXT|(b;XN@$N&lMK(xQ^BzS^K3vru2EK^>gY{g{>zgL!I*eHo?3j
zOHi&_J3M$EGk*)#TjzrVGeVcvku^9kTjn<2sOdn|g^VRAp(}*bWl%LfpnvmCU&g;~
z<dP5A{S|;q9r)p3PebI(pl9M$59*dp9PhzVpBqJQ<wI)|f|8G=5QW7tO-HsgL5}=b
z_IPDs<zrp^=i}2x0?zieRnHO(q9s*ZHi8VR$NcKNCF1_IjmRg@(-*?v(s!xL%Lo8Q
zK)JtX@c9;fG60&8!f<WH`Jy%MhH_e-n^<1+GMwO)#k5+#h#@Tt#y$Xc@5Nb<7rx`t
zNXG&Ry|mpH0-W_I<{k29qU-gn$0a@QxJFl?795<c(eLNPV3*H=P~UXd3DIze@`_yP
zB7d+_hDx~`Zo7kecfH`KlDAHKt?p>rvc8?KYGW-RGqqe6$2WVCgj>(*7jQxKc11Rw
z_E!eVO88F-e9(aLg-ZL7F5I-r$Ud(g-R_h9%V4UKfe5VV%#rGM0pO1gl@4<+byIs|
zi2-D&NL(&MNibMRs1Osvm(T+7ODTi_L8eN$y;3G3wx8*rUac16yMrcMIR`WbW*Qtp
z5_Hp8Z?@wxna&%(zfziZFJ+B-WxXRmo}YH`O39LQ8+uW_uC6uYt%7>AQ`jRg17CTO
zyv~_wS%$i!)%?FoN>7J!;|6eh=H=-rJF6;_Gu-;rX|~l<W>cr)d0U#a!KS9@`aD<e
zMmUXqU#j>Z`|1jh-pRxTOMH&X{;b{X+auJsG0uiUJ(YRMg@<7g!D#WLiS+0|ILWt;
z(L`GpmIIL&B}Ib7B<IQ;6o0h3k`8kTP!#5gcbU*;91>U@gXozWm+h#}2hQ7{u;#Cr
zH>t(x>M>*KfT^d5VZCI_nVHwB>c`UT`1{H~QFDMAZp;G>y(G=Yp>aBR7m#aCh#F!w
zHk2tsy<%g$X?htmK#3Y<6IzANHH=cSDdEiW@+4ahAP!xf#0}y>Y#tWEjoPe8yZrGg
zA@~2MM6xGMsspsRS+}_L=OP-fC+<k(mSA&P3fTh->Rtu^Uj3;6I3qfje4sDTAnWqp
z<>}hS%KV3xMdk;b^?K7xu?7%1X%d&0kEzjj#RgMfC)G9MW(W<$tig@_!SS!A={<@R
z)pgk*eMK1mT9fqT@69U48E2G3-Qu%lrgLI64SRX1l6PDLzJ8{qi9|KY(wvUYAav1r
zQQT(ydjB>l%(;%_RESHiNMe4~3LL+fiO~=nn{0i!U7BNU-*uFK(ZS4v)P^|t0&*5j
z#Xb^qRyiZiA=U_!6c@#v8clwceyyZc^LyKYGbP0daf9GAT86s51_>eLOvQG~9YIsD
zkJy-|kP%l{@T%oxFHA|dw{JzExs%CGcwyYjV9mHtmaIOU9q7HoMhfXK-*)u|qgX?x
zUUk`jCQqQE%G>EJQ$g(YC&SPU()3uyO|R6p1JE4)S^YiwJGih*3%+Q0I^i_TW)yTu
z-|uVK=Y+h3tr{P)#-Q)A=C8)DHmrVI9@Dllvhc9ZerWs~G6#^tJ2G5SvzVC+z%N?u
z$X)h7g+U8r!n<?t;wtbjlN)VtZ2bTB9gnY>4~Z$IPSJ+ENjCf@)!rAgpg7*O;H+^O
zTPB`~Z2mLbCsVv1zgr3SI3pv?(6TqxvftiF5qe^Rnhf*8-_vT=M0%$h)r<7Jh0FGh
zw8gKUbS!<2EbZX$Tp6<raN@lm(E-B#Q$X%?pacV6R${9CkBI3G(Ru$Qzf^<0-`#FX
z3eqt&?v7Tpil_j0;OI(*pd~J=f@#t_Xg^JA=dm{-Vf(Mzn2g$z2*S%@#A14$hMo4~
zWzaDYmcbM?U6iw+eK^hrao}@o+zIl3rI@m#xj~upX*A)1GZEQx+)><rrSQsmyS8O7
z*g<<_wk7XDd`((mTYUb)W^vl^uK$^B@pg)cQvde{-{=jl*}2N}2PXtd&9*#<o{(*}
z_j>Uzn&#a;_1>&7lJ}q7?%kfB!bCP{(DvS10=OizUph23`D>IFM&>(r{J)9T_O6<o
z>Zl7x+P}bTB5>H)@XA$J1&5D09k)8Jc3sU|$zwrpIo%<+PQ`CQdaW)T=$a}LApjZq
z5ATG>2Ldel?L^fOeycKFIgjrdFtAjn6V>DWerWJ*#T`<a-E_crMaNY`C6n>A@x4m-
z4k^X2d8iqjUnSdTxwPPZtlGZo;4ba#^bu*!htW&MrK$XT#Hx{)u)ETUuR?b7f^jOM
z9ESyu#U-UzbYWOc5*EEj@92?FZ4(oNTj1eABvDo`)Yk~=x9D|OJ}HTBKGKo9n;V%L
z5HZ^lkHi*{Lw#3=8@KUUst^Y{{qk<W=j$3$s$|7Bmoyn-mtp*+kqQys6^+B;Z+oB`
zimTQ(`NxO<wSk)Y73(k)Y(9QFSrjDFO`S4zGkUwYdh7D!hWth>?SRh2Y2l90iQpDT
zX-=+G!k36_^WMCKW`RSW_n$$%uTdCg<+Z*sS{L!eNQm178Z<+eT@6vYR8)_u+8~Z8
zI{&ZYiQ}7C5lj(QvI@V6y*xk_W?(%oUI&@{<J7r^J^Nri(d+9z+EZWi;oE7wsh5Bv
z>QQ>iLV#n3=z4KF>6~c3KZ==fG{87D@|4?=Fi{&kU;c!N|G5HxzO?-!_ov3OXzxA8
zHl*!Y32iB5%As#It6Yi{%3HsI!zc=nhaxCeypkcO_n(l|m&ZPnXYjb|^@#AaApd{-
z=S4{ImTnE|+=c*u@kzzu@uNL>&D4q!cx)VUdD3G$k1ka_CM|+1C~q1aKVcNQ2&gFh
zYqR`o=P(B{GxQ*mNGU_Vg-{ugT)G-iu(8;g9n9{w4oswB0fEikcV#8v2ZuS^^8YHB
zQW8Q8jk;)ycid=Wu92t99&dQEw2e2+DNL-D$lh_jVu#Hcm9K@EjNeEHiqwMC!Ue&|
z4xjfcvx_gwRt<zvH<z<Z#@5Bb=a91)3hwK2<f}y;S9mL(o8$cVE&tX20>Dof!|RN`
zn+;nEZ5DIwJ?M>yxvyLkLAm1bSk*z?(e#bw?_0N1MGcz|XjasAH}1ZHtR~*(UPh_i
zmqjHBoCFwa3nSV`vPv0#E0LG>^NKm**a+!|MV&7>MjiF-i6zrb$5Ju1o{b8ugyLX|
zRd9CL&GfMa{s#DB9a-phBFfjEpa0sq{2*ZXfKzm$d32FuEWZF@DI_}Nv{%<_iCscb
zFIAKVV<KW#hrJ5e@?3cVMVQS2G0&#oGk;`#`K&Cl-uZj&5tjjAPip-7S6-C^FfH#&
z@K*@+^=u<0A4g;dtM03EL>z%I%jyK|UdH(a025Dx?=K#5dmC5ZZ4VaMSruIn5?D5K
z3gf(-5DNe^e;R<Qcn>H$pC28cc#6nhkq4^$zj_c~=7(9{wY;Zd8Qkk}bzwbUA{aqD
z^(KJXM%_7=@U!DmnzXP%zERGJ-@Jy7iLr;NRG`$XG(BO=04AHE1v0qM0{=n=Kt6nA
zTf7#Xbzb|sGsY#Z01L^g)MbK(TaFw~S_L7QGZQ|5wC~hT`_AuxH~Pn`;kDGljF0t}
zH;&k6^l^^c#qfPhV-H76_Mt7vQD46*7ls@WLlzpMvEd``zmZ3>CzSdRfz^5W+YOS_
zB&ox<)`9mq#txy<hEg*_yA@WlQ0FW65cDKI#DzMyJIm@PNUt>JvsM2uIjajZu53#8
z^Ki3UojVzcEfd7J26A)AL2Ks-qoO)`RF~_b<v1eaj7~|%Vn(OcG}@xPdR>*);i2Wb
ztPy_^Sx0lf3?lq&{Ztu#`2}$6@80%&e2PFH-yI|ZIQ)PS&(tkWvZw(XQhSK`dP|nu
zu!b9u&8K;Zqyb)o%P`@rD%}Nq(I2%$N@-;daoEi5TG=!us(Bidnq{`p<jmbV?KI68
zS4VpfYfJEdlZLagErp^YexY{E26Rk2eZOz6q3EmZ`Ths|v7x}%^9t+_CORMbHIBUq
zA3q!L|3q5IJ?m-8Y_oWtT*xpK1{DPt8oT()dOrIC_x7g?pRatLu^dQws^$zQFHTn5
zgz=9#6BMUcuP80RiAf$##ZQ~WH?4Z(Xn-4`77%zqv!VmCGSXkBuRyArYq=x%zQ{Cy
z(m~qrkPr?mg7X!i`amvCyxPhOGzC-heG;vi=!PG&RIt&@KJh+H4kzpjBd2;X(cP3|
z_Urvuw&8M$fSY*G*RRs@mnjJoFk9GF4n<BDb@++wakwW4FfcoJ7nW+Je9YNm6jt|g
zT__}4V3qW{O|xcRCBhu%4GqeLBqiqhS4S7MtlXxvPK~l9Ls`jpypXmtDNbQIK7+6I
zS7*7N+eg(HYGHaO%p$`IGI3Eo+?bzbQFO{JDqhE{A|!COCN)MbK=4yBNflZfh#>Sn
zq|3mO)CTxYtcUO9D#Q;=4gNkLLQ^~~DH7JVDD4VU{^!1y9<Tz%$!$g^#AxMS7A76!
z7D#=(0<Kc_$U<j$-vI-oeIua}DPXz!-w1=r_Tgm(p+zjcTTUalg1Lb~X|eg^tInb|
zlGdC|kDAuw$4Ji95a%)1M)v`k!}2gim4|kAbV6G~xnY7lT!B|7A?1#H17~z=r~x<9
z;cJamp8KNsN=Jz)dz4{ZfV-#IWEb^Z`Aq%}c~7h8Sg}TO!TI$H<mw7W2+3JlJ!%9s
zPJ0z=(Ergw?j$C%#L4*nxosPOu`eugVR0clvp2g$2HAv$W;-`3=A2txiiFhpnu?Dy
zj_w{gn(?Ve!7NcnjWsUgBKvm1vW&yB-9kS3A=-oZo!i@Y#$R_%8*nVKc4Fd}X=l>z
zV*tVp*aQC&b#qbFm6tN?w_Ox^cC*8VE}oTCwq1<$H5<)~lC?dB*?OHFHox9QL3&|1
zqmCMiQZfEMU=jt5Den1C8kRV9L{}Ymg19K$pePmGS$jX5-KrEW-6i4>GrE&`bi!ZH
zhgsN?X$dd+$NiEuJ@it%V@~o^xyQS`G+9+Xd3}4zFFSX<3~wHL7!%N{Xctt8P+rZm
z=MV7h_1d|0nVZJCl?tL)8b%IL`5afZkRelKJ%$7N<A1!Acz7G@=m`w_*p7ta(LYA5
zS^TN<h~ji$Y2VnQDM>q$uMQjpjm?|nBjc{eA5E;cY3dw23nbKo-1f_IWug4Ch6@R(
zRm)?CageOXP8gYbSL=gW0rc{={p}kV=5p&#^WpA1v^)F!D=mhr%pw1Gm<#2L#S5zF
z;MG{EFh48`r^tasp?@+Pg#H3%#17%KT7tD{_{rqROF0bg)Q@uKo`nXQ`)z9v>vWV*
zmP_kL-e0;_<*$c4Q4A3zZMv3iQaP28XvgQF>WRi#ZZeAD>4Pdf(0l`1)RYiJvy@#W
z3V7DAPdi*&bTB{5Qpe|7SV6nVI%&6F5)WkiKCVV*Ws<BS3!Ln!S!++tCgX8#;d)e?
zk2<iz9<l#Wuzr}iQcxi2X{|FsqFBBw8zFMCwJqz1gY?^3D}{xuh8<Qh6tCwyvk^jw
z-4@gx_-yRxgMx+)4oopt<`a`w2R_OlzZUdgPfyVQ6Gv?eYmBpJh%r*Xn6xVBLH^kF
zpl4u_V>CC4D$*2-sm_30TwdAUXvLebI);v8W)xuQ|My4y|0^;)acYfiQ=HLtbK96P
zJF;64b@Pl}h97i}M%MP9T5o;}wD)Y;_gKb^#x!b={3|>h@;Gr%_s$A}a|<qNZ+Xw+
zi!(TzM0;d*0X>xF%aB9QRJ(6P`wh(Vh+jnqnP^l2J5a|GM~lDTun*z<i2`O@25P12
z8eN3FR3rQ*Z#ukAQd_ja;&5$E^eQ-ogYPgn>;~ZYE%mg2lA6?;5j)rmHP}k5c(UmG
zsE{eSmQqjes2!+DZ4dK=DD4Hsf$*ybc`8P0d_S*xeK=D1t~$aE14Polf=yFfS;}Mj
ze*Yn1Z=L+u>bSR7py``lIHMX9In-b~!j}{uly0UA6%QS#;>ja1EggJKkPt4TKhwTf
zk*$eDbpZsE_m=(taks%~CGqFA-rXTwhU>F!N{!eh(Kf$f=uk__z8r%4n5LLd>r=od
zR~CP6s}Wen>lJ>yRjCoPM)JXy)UE8VF^wmih0f5s+uMc*Z?*thUFx$cWI$?5$CK1k
zZ#uY4o72DTdV12f{~-@=GO+-Pn<rQ00N-r;dE|>EO!ykQX`U-5n_Mg_tIO`H9JtUK
zgcF-7sScn;SP+#fdf~W^pn2(@eGqW76or2MCF+Y*jP@F)ah~^dzvSSZgE*Caf&J$q
zj<*$o$$#CAu;aNHTH#1EpH=p#3P%d?h3c}rVGt86*Oe12?i&{-l`6bvY80PG7(3Oc
z*XnaEQb)NBZ8XDd!!=kj)W}wI9D^AsH+HHa4}WeXn4dplO<azb7<qqHRLR*738)jx
zsSeqkedMNpO5Q~f>cJC#RC3^dKtUTfM3%g~YdH0C296q(;S_!uWv&&k4h<z=3`N3&
zN`fM+JVMmd7S$7zzJeIXJcr32C0E(wr|P6F=ym2#IWg|fUvJEk<K^a}<|=#rmyW*(
zVg5gYj=MVx%0*=rZ9Vkh&Y@O)bw}?Bv@M==u_pzQn92IdP@bW+Psi+o?N<+wZpYS*
zGK6^}+=FL3yuzBtWYQkeYH<?mB6GH1Akl}3U5SAUeuF?V?pz?o4_vsoH~)NHM^K$9
zSrXW$v~}lG;Q9S&u0Z@7AIeoBU!5SOBBwtDNiVtA+`$Xiv5K^_YUHyS@GpJzTiFob
zExd+7yW8M|;%|LmcCeaihAj_*3wmo-4HPUlA1kI{nq?awSbrwj-YoN%hg}ce?~Gla
zzXZS+UvAefE%l~WkY%4~z}3bkqXXZZ`<|Aee@u^_JE;$!*#my$026KCxjPg9o&?KO
zEWINn-wBh<oafTDVDEq@e$z{J2?Z3{K(#hO*j`cl2FZK8GO2Nt5jR3TZj!Q27##;?
z3hw~FbuEqmB&O$9!xZbBKYh!ym95*kYdjEF11SqY+}g#`A^{M*FwF9*d2;B`lNv?V
zy6v$m>bsgcM9mYHQfn*A^E#l^b68N(Z=!?xyY$lR>?P?3YE_3*|4IEo>22zVszLFe
z;?loz_ac0$CZiJ^ESU#Y<P)MI32T%n_mp9@HHe58w;_OP5}I}%(oi$i*+Sf}Zr5`_
z-3=;`JZ|K1<H<MoEyS;QvJUCGdu7*VOPgtfQ^&@O>`w>^3KnnIf(`zKTD0Kn0D#zX
z8^)MGmpP@V^0>APA@WD?`Wj@ZS;DUf8^Y+!e@rs(>-TfzwbS(Me$n25RCc_z^rTE*
zdRA<27A}<wjPHgPmi+HOW#TBfj!45$wHNNOC>6mPK}kBxY?KiySC9>F4UeU)h~3K<
zLHJOnO+}zISf#B<sj!TIlBXnswGM#`GMHbJ+;*%fvT3qeJx@>Rv%Uz*dnA+2Roi#h
z7-b484@NsVeP;PyMoh~-2JA1gPFv+HAT_e5)SV1YC64ck;LP>7P8tK(MdL<^+(TI!
zh?*7ErQ}tRNf7Q|KeV_`K}znQ-&z4gT%#4bta0-J>}!VetfG>QW>UvqdbulM2j~t^
zi4(h`ICBHO+x2pkH|ik$f#*2|$vJ<LG|K@)fJ1>;Oi=(Vuq-T9PZ;JWK$->*_*%;n
zb)nn~2#?=fE9#=O7ZFx~D*dj;#xG2>92K3QRi!I(tMn9^JhNrn`u(<gnK@h}gIsFH
zB`j#B`w5K$cYad*-iXie-ySY=KaA9sLzP0F!Xl^ZTEbukO_DiE0RXpYBPi8Xhmggq
ztVEQQVG(YDY$;=`LK$arWbkRGf1fO5d%an47oyWa9BsYkDi+H8Ft>ruZ}rKGVi@2`
z{cw+gE@<)Q=1`;XLCPg^s@7I{5_dH*5iwT}BP<5I;eqX*6Gv!?RWSAHXu9~Y`e+6B
zXpL_C;8TsGrB`@F8UBE~rqCu%x+g_ECEHh~OeS2esoxRQ(jeL-fe$`b1$8v2zVffV
zg7qYEfI7_AiVxQ7j?rS<L`nNAU<sc(ELQaJyW;kKyN+o8nJDy(P}{?tlaIJR+%@o?
z-nRV%edlz{hZS*e9~JHNOq6ij8Bp^~`Fsxvi1+m}{gCt>{6G+>Sg>B2`JN<xrQwJ?
zkgl>6T5t<FvGA%a0bE*<=~$F<j*)^RIo6jCuXN@4t#}-0tv^?dM^oUTF4aC55cDBz
zkh5o3BfOj)lf_+EH(Rm&gk$tj_nOG)&d#LM^t{*Q_6`rmZ`xV>Y~w|>6V(95tGa+L
z?R|N&^(Lpb>s|!Q_SObp)P|2F^AJnZu#=eEsvq4PwUnlDJR*{ZM8aW?E~v8+U)AG7
z(-n#_Qb;xmS1Hz@A&jF-KJuS3`#P`ihel&=YgE1)zXH>N3j`OzzHJZOzCN6m`U>$G
z+aHp*Xjin%e8I5PkyG-<PoB8G2)IY^3!%Hc;&$M++t-__{>z;#f6G8=z5&cvG%M{V
zJ;o=%mNw0hVR#B`c!lnh+yKP{gwnqYA!a?b@-HVg^=6@Yfs^GAOR4p3&S7RC40bgE
zc0EybK47_YVLK99^18@iHmczLJadPe5sWdhgE`v(Bcd2~DFJphP^F!Uf<yCTVNf)|
zMg0<RP|}*%mP125B}c>PvtH{Y2Q$-wej9or6?#de(!o+SFi&U{?9;Z96MVx;=(SYn
zO`&RuEp_`AP7rJ*A)yL;zmp&B)NjDcgNRo0T^;UB3vwslIwn%LohZYX>U-J(V4~so
z#!r|R4UV)HY!dCo+LZAN2OQL|t`j{rY{-1z8)-c`4Jh>28OQ66FB?mE?=D_BCb<Oq
z-3{!_4MkTfoi;5sEoCFW#Kei~{f)FAXIoZNCz>X*>#q`$I`MT9xcRZH*s)%+^_Jm4
zL%i&!7%AFtomd~#cVXM9_T0lu#nJ{Lt7JPoAx^0&7K{V`mVYgK`gNZaHRv2F`#L{j
zJAU-B)b~G^;ghfKk6w+wkR!(U2ECrDCGRhL8*zJ~5A!<%n0c(dAB)>Y+lprDV(~48
z<##OWGf!F8Wr8o?Xmj_iEF_j!riqw}7J5EAhmNFKPCvD4mjeAZJXJoIW2eI*s(NZw
zDT*pNC({|g6$G|*2fE5;=F%R?(jWb*_dJS?*IiAzR~E6jSqDxArl0BdrM&pr#EoM1
zL+J#tzxHO`O`SeWv0L1baOs2hKx}`>81OuGW2)jCJ8}8E&dq@0gv+<afGHrSd{{hw
z>7nb<ZrcsUfzKyET~>EptxL>X^~H=)YiF@|qYhYJbSnm!Y2Wq3dg`r!E@7>*O{I1g
zOp4F{8nJ-S<u>Pd{GbBJ9_Z<<W35fn22SH~7l36x*#cZ(`O`qnu+?VZe9TS(1y=5g
zkL*_d`J~67E831Q-W2wmJ8J;)iaTPVCv{R8v%B>hl*=jB6;;B`x)Qs!FK2f~JJa^$
zUqiWa-$@9U3#v<<wyGe)>du9P3#;PQa|!3xz`*I7;^pO{-;7#D{6q<Q4_3!0$+H}y
zpHhfvvzV|NHo-Vt57c>Oy{bpN*`9ZadhdcS4<q>!`d_<QxC5EQ{uO`M7Nk_a=7Zn-
zke}A;AThF)UrhD4_11Brul!2&H<9Cr)pB^eo%jixbCP1ehD3VKVPB@=;qKfpmmji~
z4y*PUK;7nv|Jb4)E(sV(io*FFyAY;pmRV?|i>!cK+k(m8!i*1i_*6N-Y?M=b+?Y-E
zFK<$byi&CV`Ou6^Q8R=pI3x5~h{67Le*<+J<yewjIQ^@1YmBmT#B~QyU-dQ9Pa|h)
z9{xeJHbX=(24xGvS~>YyRXP=-=Nf5X&MwU%Z!7XDU0qQndt8uk>Dg)o%!iN~-K*Wk
zQdMsRj&w~gK0W!0J&7fDVF>Xr-dA5yhB)k-AUc~|#+t7K?nmqWtl*G~1?#XEaF2yp
zm~dG;Z1Zfa=&#!-d_2sX^ysbQMZ4kFU=r?3w-;}TD8DiiS<PwPR061WzWO%yZD|*)
zYoVz%xZI9hFoLU2)6}qAf$6~PlK#)*0mYn(CArig7x(cIEEZvFoEpFoXqOur-pN~d
zC5%oIo12acy<--a_A>t{KI7$SyRx^;QL-u?0wgcEqlCDCtN_aN_E2J1MO)XZ5*OC!
zQEE(a!g6g03UNzWLsjRIHpBq&eALXO;p%mLh+07sQfZXi-F!&^S-4(VE~c-QQ=tP#
zBuc_dRzXv<TeI6Dy#G~{SAWCKt~h#l$|^|t5|}E2JvF;c#<K9fDX-wYVCA&WZk;sU
zkS{qFP}+Vf>QmAuqhH~-MWU_Myd1UYn?qY8tit~68Pg_7L0{DQ5A~u;uj~v=L21k1
zBav5;SvYQf45O*b=wM`erT-~_Nbbu0T2`Lg98fZbOXB;)`;*Bp>Nf)ex7OYOamuzx
zt6-p~feXdWDZ(p*O@}(${9M+r8t^?=qS0SYthCf6SM~D)TSgi(+qHUo{-lFRRBs8C
zwVU(o6S-wROjh^dRr!rw#NaKOGXF@MJuhdiw;Y7&D%qYlna?C?Hv7xkEP3{|Ib}XH
zNGv7SMGD@m35>Q2O!&%#p9GM`!-jD_&8$3qm^a=q#Ow8AJW*<#mp;HB2S!_T^Jf=k
zWOS{pj=N<mA8fO$SJ|s2V1Dz~9JA%c?8rb}%?m#F<cq1a`!{6GvEn@Yk(jUN5y7e_
zhcjfbLd^e3DJO0DF+0jd`g}E&eVgOO`O{C_!`YFb*RTIWln*^WPw|YdEUxqbw3x#i
z541|IZ*gI9ST=m@<#SFSsOP;pwKjDw_nd4^b{5?Kzv1HC#rlMq>vKmNz@J$+Ph7VC
zWuHGcO#I<))wFgUgR5=>JK2kwSDigHSCuR=7pU+*zSzmAThV~#5YL<`m(&?>Rsk<+
z8TMi*BUyRFn8T|9vb^nXIQ%-5#4}?>$aVp1h7g6WM-19!*=|p!Ke_TOVf=|6U6qC^
z0p_nxzDP~t&lR4B<@Qb%!`H!zoy)#DBJ((usN-j<ll2iF=gP^7#MtgUzAJraheIbu
zY27MS+C2zC*YVQ3f!4Ppew_yU>wRdsdU)BI>ICqyVIc$@o;$Vr<(zBtRT3I3YhcU$
z=x|Vstxe_BkQKow!O(zej>st63H)=AUvBX`;c%sZWD&!Uoyf$d4WF4ZrNu1DH_1Lq
zc50!5u>ng5lhgL_1`904RK+Zl5L28~M&UAF72FgoqjQR?F{b|Gtq;?Y%^_(qjA!rR
ztGxWbW`o)m0#0rxe9+RZ;UKPoGAhdK5(|hzo-in85h9ioUyvc;xU~#ZaYh=-=0F2*
ztsh-zr*ayMM!$x3^QsEDk^qE#HO4QUAL*XmW2EWrN6N#H5=c#KuFI__%B6a=7@X-X
z)DTiou);JH^z3;}k`PSpyJq43XR5C1)=4nu!CHo{xJFu(&2e<Xq%Md<<EjZuw^@j$
z9y=G&AJa!M%0LjJaN`Sz8rHY}ZVfM$PautY>Y!<XHc2J0SOWPqa-Ph=B1J7<vdb?C
zLV&XNnxkc@5%Wb?N{7OOILkzy1>R>IQ;kCO{?hrX2yvJIZ#WRx=L3oKvcTX!rL-qI
zRt?L;4^Q{Y4Iv6q4M0I!5DS#Hi?`Tuc&w6C6&eIe|DSL@O-%fu@{RFbv{6<`ss?tn
zf+YYzQ7)T|-+heCC{N_%?x`*RCgzz93OG`(P5w4B`}>T@k8gtpSbVdZHq9qZG<>M+
z`pE#_sbpA#PDFy2tEN!^Mr(?rnh7Tcg#s(zNaz%2-*pK-UBu)Eu>cOA>0nn-h&zq{
z0Rwq>@b6(e{HTM?h^V1eWR0so+Z09Ise6`4W&suAW;II(5%4%u<|4VJn%Mu>u$@-;
zXE{j;g$xIE%lo~-vI_zMLQn)V5`wq}tvUtsZMeU*mW@n^l9#Jtjy^Dv|CQl&KG|Yw
zj5V=)XuXxw8UfH5<{B1hj72@m?(3S(QNr*THFV<Y90w3(S?d7kFC~bzegQV<)2etO
za3GNMHFBU+&XWBxEI0^%I@@s0QvRC`CZkk?7-XQIR1@Aw5qJ7_Z{MV3jVFPFJe60b
z2g+p=p+yO6|4ofHIaLHoskZHWX`V*<Ye*BYqKT*wPRZ2r@|Yo<c!1@_+n9R3iJ6P1
zEb5zW8b;)}HYD5{1XsGLFG^$3@;s<I3U@YjdH)bgR|G9>^hC6LE?m~+^+7oK9G~@X
zP$S?O&??U|uVMqW&6YHq9qv)4P0O6MCoJC!ciSJsE>p#N!%}d3U%vww*JMev+eC3^
z(S~o1tC;$GFP4_%ZoS}E3C!^NN_~gJCFP5Yq3cEw0Vtp#g!MxJK<}>#&pZ-XJL$nn
z|G|ZgLHpOJ9qG5coAg;;VWavhfMdP;RkJi`q>1VXc8L*!KVAioJ3LZeUJI?3p(zYO
zLl*1=`CC?1K*fn6u!@?!2I{e;B|SS`5Ll#l52UoJb20JPtp#*vRiY>J|E~|i6ieKF
zZ{MvIxCx6N9J94No2xx_;+>W`p-y6V7~5m}F8%|Z-S76@K7POVuc|}Tlh^Lc@sdU}
zgG$;bMZH_rTWw)QW~WisLVYbVL&fEM!^CcQWJ(l0kyo+(@j&LClpPBQWp*GetHd0s
z2WrVm`udVSk^X$#8&6N8$@PUpv-?IJWlRVN5uY27GdBI8_!?vUz@C@%rHW<YthOB)
z0DQ<j9!L5V73`Dk)0t24FVDQpdCrhe<cn=tX?5+2s?{q73N4<Uh|Fe6Hx=`frS#}A
zeDv*#gY}k*kyG{p0`#`QBS-qv^eUk2KY1|Msc4{d8o*~}|LEcjgr=^&Ib#E9x;kL|
z9X8adHBDy7^&wl4i-KF_L}mv3dn#^X!%8<t6$~GnI5kk#ZYAN=fkyj<QO`r|tRH)2
zw8G=?cjxNK@+I}VTsQ7gIm4$*-5Glb3a_L^`;YbK7;xx)uU@H>PyhCzeuGMypi*V|
zsxvdfFmm#AJV{qn9)b(3A-2`aEG}m>ZWUBMnC4Xw%t5yhn&=b@%p&X>18@!DxkeZL
zGa>k6o7-+^5cP%#UTA6ilJ7w>`y4!ZUgZTAXG5E}A`M#C13^x-lsXQ+@|vfgsAvv|
zgAhe9iqXXpr8axA$dV|<8wXuvNTXL2fbp$GY@?S-;!;JENF+$o54i;Nc^DHVn`HZr
z#0Tdo4x@@%M;Fs%M0|A&PTT|Q^}d;m-6uJ3Q+0oL$6rgqgM~!L+4K6w>Den0S_Exm
z){Hn_kH+}t5_9T_&0ztg#IG(zN{NuC<IX;Eerb%Uk^S3+mKc+!>?AOxdF&)uZ|0h^
zG<_;}?IL?irrW<qjBKOY?al3|=0skUpbXTI&2`vXw-O!p%k#3a90%@pv+EqvJ`STp
zowBpRJ$yQJ7qb5}_eQzl?H#lqOK%wn>Q_K<c?{GcT^}H63LM)nY|)ZVe+QRtG4?aj
zZ!bq57Abmj?V*QcEBgkpN)bI-6*U|DACMtzY02X0O<Z2QMh;Rn1VNk!cA}j~H?5k~
z7*6-6nh*hUsW1{XmSH6RDAABXMVvCH`{Aj?0m6G0e}R?XD9&s;4_b?b6>VBt_P=I7
z&$5<mK72jhp2nNeP1jy?vTRH4T2OUU^KZ8=^EMYxQUe18_Ga1Ig&nBpS$mKHTDHzl
zbY?zJ(}+o$w<^)o>>)1`wQS9wZh(7JOl>t<%a;1{r<~2Z2+4}g+k@Q9=k2s+tF|ml
z5QnYD-1S^<kub2n&#rCz$;n->ss_pmcWIiTCp>)y1}y~!H~Q7{9aX!za=)}DI=ILD
zitJ7jj{60cOt_l2`ITNI!w97e7BZq+1Qkkop!6^!YvrMOqTb^p-AvIVt~%6@{W|;x
z0KhOR;*-8U;#3T@2>-7uN@~S6hH#NB>fkOm!miy=My_MN4J?=#DOSxhn^ezwyLCY-
zWNScific#!b7btd=@)?FB9Kq7)s4B+|Ji~rKN;4|6Xv|nCXp>uIPwB~JtM*Gr+XWT
z%Z0n&^P{?t9N%RsoNN*vi_a3m9w92iyMJ-k$<N}5Si{hr#(*jo`>+C^;ZM5wh30(1
zQo))S#4NnZ&@2`7>u_$17SYw9j!<Xka)2bi#{@hRRXlL13;^&&5l8paT%Bv0It(CB
zWm!&h5k#Y*t~ZHjLS6)F2@Rrymmbb|g?MGIHFAew7X1nT(Oi4v_ph7L{BQ)k5+I~O
zw(sY#3GV?^r@|?hYgqdsW#YRZ3{u{438V6r*)AT8;#A5g7<D7{D=jj%2WlC2bA#O%
z*m_MHqLH_DUD3qZbu)7BvM^kLvz<KHG7pe;kTb_|nrZ@3r+U93_CbC3`)R8pqIF9{
z`5Z*q=c<*})j(yV#_18+cID6Gaicb%xUt2r+j#uF4QLU<Rb-gVN$iTbfXJEHWoF{p
z^b!K+8GKX6oZ)T(Hd-}d$aCQ}-1FnK+;|IpDb<@i(Xkg2h92Cwog1zK0twP|HQj!6
z_w=`3KjrcOO1tskn1`~XHb6kfi`@tiyF@%4fnHyVm30I0zIh>^TLh@s5r)#mIHJB1
zgHd?AaF4~`)$k&dj-kRJ^#;g`6YJ{phjMv^Kq5Gz-)QsO2_pPgZ>O*HJaJ{Nm~f;4
z4`Bj#RnzAS71uN1%KWt#1}|muaW|h-igcvD7ljWl@9MJ_<H@#H?6SihueePnP)kiM
zTE5RCr;E~0G27=Si>`ZTt*<RkAAm|X#e9GFfN|h*OlTYzh8WPMtY`?5Fkwu1BWb+;
z*;-e`Mt5MM7Q;Y^SB>c4&H2^&722k6CaJpts0*6s0ZaSV(XKb$N2WfpuUdcWPZKV4
z1t8O6act^v%l52@e0UQ=qwPTH+PfW7fW}_OKG;E=&KY;I4|V8e9LA#4W3A}$8e&ao
z%h!l}MWuV8LwcE1f)BjtoJ?un8L;|Bnc8?^32%e9eVN^dmM)bK3cN&Z>7KY~di3yh
zy#qxDq+^+<26#7?a{?bnFuTwCC2VmawR0rDNU2+OT<j!I1hdOO%#prc?7N9#lof3T
zx#68l73R!4SNt$6+>BNly{jl#JwgACA9;9r!#MNEs}`E1hC`iHfN=nO&*Y@lKf9ZE
zm%UHxy5f4R`C6IT<SJxbxwn}L8~n%cY4NNg6Ky?T|Mf?h`9c2@MQY5i%)p}Yu;-xS
zAIEU0O;kow_qHlG+T+%WpsEnT3Mg)}1Xpb3c6W0R+D7vOb(FD8CWqD4zLYuHDD(9D
zcOii;Se9W<HPGZ%Z({Mu?)P%^$%ijCfac{@q82J;^UrT=B%ke#dRp7=IEN?h$wiod
zLC6>(E!LyVz#t3T79X0Tma2iI^j_AH<an&W5@7F!4s$#|)rZoN7T>;c;ps-mDB$SM
z{m=H0hb>CWO0=>XWJ+VJwNn|$d`J->T~St=)z!&PGjJBH8k@RenMQ-keTa8}jz;jq
zH26{OgRk?0_r&gYU9)aXZJW_bV@+M+O3l*~#{3Syt|Ge-KkQ*z_qsEixH1!u5VF7E
zcdhtfn7$dVH1=xIMbbo!F9e>tx^?b_Ub3s%B<wK92F}C+B;G6`;?a|<sW88*9~Xbm
zl{{k#Xsmm09`VJc`I^%2TV~r@Z{(dekDwyZU%U(>2x(2qp0=|#&V5FSs(jrfl)C-I
zKk6}*0IsCU4R;0x%p+^6`lec9{fyd=_O<Se5TEk}-eMvHeVp|4#g`_tCWHD`&gkL*
zsRgRU@<+#zD!zYiTzh8m#6~qc8vPcMi3YvhheyKaHUB@hf8pjv=mfaCAhsn8dBGRb
z-S-Q!+dkc;)!K*p%?9+_$CqB~54G#3py~%jUtmg=39+Ajbn(J4F7sO}+RovkGUdsL
z+ch81bGd|gojMaQis11V<Pg5SvLagK&-5hV3i^lSgHq|~pnVi$4YwoaX6?9D=s3_~
z8pe>|lFL0YsG3EmTcUEDj*gQF=zrI^?9&<*pY4{?Tj5ab03!=^7;Glu>m^^_na?MZ
z?p1>DK(WE=C42i$<iiJSL|`3sQ~JFDoLFUYj3i~C#Q~~-eKl5Zew9?25*NxC7_pDa
zXT7RRoLdFX#|7vc2u?S6JrfX;YeRiq{oeN#uMx@|IilFxj<TvxwT{ZBOWjS6`PX&s
zg<0aB%N%tEu5wey`33b#d1XOC@M?n2+c%)ez+&2^3nS~$jZ$|Y#Cc0K|F05#0SmUL
zM{NJpOt6esM(h5*{r_{1LxFUu216P7v1j>iQ%U&a9`ETe>F8Hc%>&#qoKM`fQA16E
z_Bv?-gY!RetP9%xdd35v?)vDbDn?xeK4CHvX0ojCoW=e60#cmMMA;ddGtq|lQR~l_
z?4AbY%gYOy!;&N4cWhL-U?z{p7Eib5TOS8q411zOiM>t2Cqu_x0pr__9A-j%!C2OG
zQyno`RAK+HE$`pk0<DF^r0i{XQ;Qlb9@jeq|29rk$s8<ji0N$)wf^{D{#3C`n*FE^
zcZyTL>S7(h5hduy%eA)8B6fUb=br=zlq4lJq!PBgS!;_dB4|tnyRH~d{#jRcbHetE
z-h|%^C+W5^m;5{q>TbH~%lTp&{&71-J@xd)WQcL7EY5cOjpf(p4;{}VxMN{TjfOCP
zrfK>L0|M=}ePb!fW4?r~6^(`(S9LU=4)d61G#+m93Jr2Pl=-ymF5}qICNCcc<sR7b
z`Qh|8pG6>9#zMOfE`R(v`;eo>q`vtCDAK3e^T78{q9i%EP&^ZWX~H5^1#J~#09+(4
zd~W-c;Z7!<^_&V?Cp|4>WuuDOOJRq^xaVC#?hG2cBl;_JegnK-t{k^ErGK8{PDX4+
zHlZF3M$%(gwbRxpHb#}C8)5nm1#N%cvcunwR1g^TD)3_0cv-$NbEhx~SqwI8Dj>!I
zhP#yUiI%%pq$U|GVxN1z&BV7NUsc;Acrvu{^0zI%a5QVCsTQ&fS(SHV_8!C}QF&u+
zr<AqrZes(<OCW?^b&qi|)bit{X1dfuvq`!jO!sG_(N>70>7h^T3t6PCF%_f+_PFAu
z{X6sqrEy-JbY~|<z3(ahvWy>xN^66)q`%p}O@SssMehr(8&KB^=s$hjErnh%SFyv5
zDkZ<}h*6=hh~Xs^wvGA=R7>fJynk+g-W+UcO=K5_X1&|8L@2XJORz|_v%#B&!i2d3
znJlW<PE?|0<)(^W$cy!_%K{t>>>Vn{r3`CSp(IY)XFH$Vl5VyNCk-Q&UfF09$!kQP
zTlt{sW<UP`Di*0rl9FH%MCw6JWD=>d!9|Ld^XIaod`AAf9YM=34M|L4>Zbnkf2as#
zCl|8(Z&dNeY}i^9^f8m1oO|p^IgwlO+_MN8H{MurRsNOEZ+6NCt9~!rDM2s!zCe9S
z^Azf8e@K9CtLP)CA=xn|6yYl(-MZB2Cl!BOE)^H+f;F}HTY2|iT18V`MGtic?N<6L
zc+cVck|Kp~67$)|<D}BbjCFQ+SEW!ByU13|quh3zAVrAJor+o4v;OE^0j7VLNqC=q
z8$=f5{8@rVsZSg5sbazH1Pw)4aXmqgF&kubUzOuL^o`zdVks14W{q2#(?6$Ue9STk
zw2XI3NryoDol<{ChwT*Vy4nAxL&YD(9=NrhmLl!D3^AH4-0x6u*Zw3dOv&S1{e+?Y
z&$t~|<+C6em)stqX$M9HE+HSHX#JxKm*bxzZ4On)(=_&nX?&-nDp(D*7+Ee;|Mj^I
z<Q~|flje_mJIl-MMJGimNj<On66mQI%*Xsv7xYyW8Yi4kaA+M}E8<sCV>X4_wWp{L
zwcjtNlntwjuPfw)7#sJ>p-7y>{7QFMg<?slsaQa*H~XfJr}$gIgdGK5AAQ@>;}0+M
zCu>)L<sTZzCL$cipLju?;<SU8G<&L`<khVle-%i&7F4WAQV*pFMLhAC^{?P5C?{uj
zfx<NJJ)PV@OaM^mOU+#c9_l+KxW{vZ9_pP`@V@2iqzWNmyjIFh4VJ)s5Imja-?B}?
zOb;lQeB2C*ZGXR)6L7GmZQp?izVqe7PAuI>vYz|o697LPynSv@0{5*rq6{e0R{gVj
z_ups#9B^6{tJCM^&Y|P)eZ37R3ZZ}BgQ^VA6@gRwdv){LmbHrm-UbC?%qDuQM??Os
z8mgKtrmhc#XqoW!Mj<tsf7BloH6)bZ0(_Q7RLx5&f4an|`8Js1g{j|GPH{2-+&lH9
zQQi#9Sg|H4E;{@wYc7U<odf{xKdZf4dbS*JN))Tfb49OQn7bA7g~4vjQlYb3GgQUG
z2{%eACa0wor2OyJ$y;OuPn$w`4g0+brxi%N$F|y4dq{XG`Y`80x$kpi;gS+7wLPwu
z(f<ip$n>-eRs)kgHuw8!EuXJEB$BVVDP3pG=t|o<JWwU-AeCsVPvPb3oqMbK)WOng
zCu@}YFaH$*%gxINs4i(8<hQ!gqqTp&rBuS%Oj^{zXB?`CoOPJwMBQ|U?k{LL-3+uh
zoc!}S%SPR)-Me9QE-l<RwyeFeKjx6<Mp5RnEsHC(G4zh+>b$Ll$&I6E`YpUDS;D%G
z&r(7L)I=R=lfk!8U!PUv=K%Sp`vps1Werts{5<@&cf`-tIZ@15Q{U}Ae_zCHWeM+%
zc=15L*+z*cQ?_DlxFM!&RQb-nR$v21du1OYQ%0zqjJ_rja)LfNalJfE#fb=;lga(e
z!U++{-^4(hv~FSS|NVBq+kB;bwR|Dj>yRIbOS=r%w~T+i+1As|`^&GCUueGY8q$;L
zJ4lmo`_GB!12?O<FrV0@{{;WrQn601DhZXUMWMC=)Dc2a*DrGwQ^H4_5RxA)XI*Zw
z#}a$z+e;BNN=Dbb%bK|nfgCD-gu!scj${94cdXUYp7O@#;S-4@6pGLkhA#c^c=Pdx
zf=|-5*1RSKs?Nt`W6_wY^ho??Nd1Di9Z{m?58=<@iR$Y)E_oA?w(tpgP#D%I4v0dz
zV|;Rd3w3$_E}bCt0(QUo1ymaSp%}l-zl1rxvXc3w_p25^OZ#sUzVp29@U+sXdC;l0
zAA=TD;6_DaHcvG9J^6X>=K+`JLUE$_c;C4}`(#=tfib}kMJS3Et5+{c2JBaN+Gq6y
z`RRjkQmteOhp`vNu`-jaNl1*naICZgcm>|FRCCO3!=G-U<IM_~?*+Y&tCx7YM`33l
z)8~EZ7<Yy#)Mmec51MthnqQk6Te0tJx$etya=C>}XzACVWtGC4?^-7>VOym#HW6O$
zd9yYks5&cfeO70xId<Si2cVTNVm+y-`*0I&b3G2Fm9GodxM&x1v09nxsJ9W6ZEAop
zaHyE1cW25sw*Iw=5iRIGS4CG~n-^cUOV|B*h=ag*-kRfoC9VHtYqMqw=@E%<>X<_>
zal@iWWy-R6oB5CuX0U3hv6cI(!LD>eup<rfjIu#w$`bkMYFol4@F_Z3tls0*0U;B9
zoTcP$8u&3>O=JT+HeA;h`sFZ=;TF(JE^yPpPT%4C$)DDUHA8$;5BHdTKQMRC6@gPO
z*NfXsA7OuSKpoIiN|KK*olXCE1CLRAu7SB^IN3GQLir1QHUj;|wZ7>lZp&aF({J-O
zb4&00eLwBnUNpD*)rO31ZpbG$T)1JQ-kGL5_qLX4DBD(b3Zz~Q>hGZ>Z(9p16M3V=
z3G(Ke(Pr!`n3^sGR6`D#NUlIkp*EhFmJKW#x8?Y=dg1g}g-+WI)bYsTk%IaF!{qt%
zhI;L|OEwh7K3n=BxtWL>gq%#{)`k$QVsrX4$qhN<&u-OfPp{(tLBftz7Wg`=g@?!q
zE-yD_5Wo!Qp*d8uITpW?B+^h;_+a%<^$C;PrV>taeC2rh$bP&%>&5joEkog*`Yt_n
zfc%vKWKS{>GA*dUD1uR!0bP?D`eS3C=l!z&m4%fdrX;wL+yc{kHD@S5IU!pBFj0XA
zs_ry?uOIv)oDjfmFRl!NqbZ27_8k8QTr3(ukQX->dGke=$43@Mx@29G3zOqJ(l*z;
zK016qL^i5>hiv@U@n7-Nx;NL(W+7*M6nfNUXPLmIn)sl>Hmmr2Pi5Ks#@F76;8mN6
z1w>-q#E^K`1#e_)HJ#gq_W|QcRk97R>644I7Z}6t_XBXMWYW!K%R8C^HJ&NU#5iM3
zv*+)r%cL{*Yc)|zN9H-XDNF4=VeJ(aQ=BO|(>{(G^`~Ojnc|fvqxuYGnQYXaimPKq
z=q(?Wr{d8Jk~fZS4q2Zmb+|U;hF6{qe1#n|rMsOKv1|DYINnxali9a=OknI{?K8*9
zvR4M<oNjVPC}MHXiz>_ky@Kkcz2K&Gs9mhBsXn^)O_<HTQOYPD`L(3yOhLV?dG}Jb
zM2VI2S@yg2rr)lfz)w*$|L#az`6(ko;o|L1Q~xcZavfUUBkPIsTQ+bIp{o9|)bnB(
zK$dCnhFc~**#$kbKYdlN-=`=UnIlO7<vrw4sDT$avLf^(9;}<*th8Z+cyS1Y6%H;d
z^XI_}mntDpw3OJ)Q^UuTfo;kW<^AZnYTY*VS@=Nm7DQi)JZO4|Rh8+-yP9VMwxDy{
z1E-U>5q>{_cBzgnE-ZG-x-AXgVo#5O$gxFvMu<=a{;104-jULAQFT<Ve37^G`yX|B
z6ijbgG)IcKDll~fmQ=}dV_Z{PSU=O@J82L?y9M3p2AivDcXz@;e2>v8l1=A<9V?$4
zu2of?>3y6KOO>mm)WGK|FfLozOs@jF8?k5Bmxb={QLN^X+y>xk_h!7WfBlq2w42w}
zdo0zdF43IFO*h3!WKCcBgJDJQ>aTZu5cVskZQoG1Am%fM9wDcEc~!&Gyfm_5{QWRi
ztoGH$!baho@Um+|D>&lz^ncUSdjzQ36&SHvTq~<M{T(w_V+QbIs#y6d6H%9Y(pHy8
z6z_Aorox;wu`TPXY)P6pW)NBDS4Eq)*Pr$_d#mJmnwtPAIv&52TVVeC93VtZNU_dI
zZdMw8qEZ`g+ovF*hBX>@fQHRQU)a>j#A+|=V5w7zOFUzxualBVw0WelJ~py_k5{{f
z-~|UP-l8<{H&?7UyswvA9C^C>a}f+CaK6F0LmmhptKBJh9EGl;a<At68y5xFa^5`5
z`8=3=5|EBU!x%-0IFvZhQAk@mv`H)<WeO)}ZCjECTq;c=P0g-Dxj%%L-<0xsPCMI~
z{}!$zW0CdJvmxb#BL#kQHQS6H<(xyGrWTB>QYHEWUsfHHkNSOatIx~MkBTZlxE-ES
zb2sVnMX`>oa7GA@$?NrG<?LBtk#7+@7>O|X3o#Ne5>3!HY~rn{9?a9|Won8rknHX-
zSi)&T3tmkL+8B&WYge6AIQ0_+mBYALM0C^Nqzds$QCSz)6*pol%gbbHZv{#wyp@zE
z-%mezlmYZs%1T?#@0-jfX7VFls4|jsWk9h!lREu8jr>52ZsMNJ?$P(?q#IS?yn((G
z7`2nA+DTgqPVtO*Iti|w)L2nDe%-I_Vc7;9i)O~{R*HsG^NVs40yo8&3eNZ&K)2wY
zhDkDEH{nUT$=9U>zhm~!umXKg*iO=fCI<@7ts_Hz6U8+~fVXM%PWdi6gT1Kd1LsW&
z-n#8thl$=E`6X_d(b@>M)ew#zPTw6qPoY5aPj~3nv8m$NIpFBVTl##~gE=!f=&!{(
zu5;W5%?BYLhmpu(!79+Ci2%R-Dns}lTFI#x%c<mrZZj`ztE-@UU3%<}mP#O22aBCw
z%0ipNH0Q8nIAxx<evDs4Ogm?6KQ|6S1ff5~K1wUKa!_{yk>fwlDnOynD&jOPs6i1&
zkdB+O;u^dBRlY7W@0sNE;_9Jt8`tNSw)2!25<jgiX^OjQ3BtgtQ_8LmaqKg5y~)E4
zu%wE~;ES!*C*s@K@pEaoddCE)-4NMs7~%x8?<l-|qpU!#qi<@)w*%>pmYxm9jw#T)
zgCA)=+IM)YhAB>V3cU1di;#+`rX%Cwk<&jq#2r#@JQ__NEzR?)eW&ky#F!U?P5yxS
z=3&7~Ddnzf{`y#vbrn$beEz&(bX^n(!e%TYJyv>!*&<B+>_O6C;mmsU@cKx~CocOo
z`L6EYW2i@mJ#C3_-yk9SQHWu38vuB7H*CFQlw?8EE?RBdwx_3U+wN)G=CsXe+qP}n
zwr$(I{l4G%?ma(ltoTutD|5w;*iji-ks0|scI~Scc4nrV=~`2o^bGs^aA~{DFKp5G
zx!gLvkz>Jc{~l>Bb}*uuI%T@wG=IBt!&MiaB{kj7?77~q33-+|=Ix8##J%VwNAdjV
zvzH#v9_4Gr1q}cu9mE@y(m7|oMTIKOW@O(g9ubPr(w!*ljcm|2mtbNJSR;a$YIhtU
zZ_$1iU1?^(4@q^21B*0rY{)@PHNOJ#E%!xJh2tKqy0FF)U8BXpS9ib=*<ggXxz8)l
z7?y;;g5ao{gP#N$<Emk&C_(RGs9*F@s}fqW*W2weSv8S@4ov{j?Dd0L4RJfbR!H*q
zTciR3hk%2|eS+Cy@AeZqS;R5Z2b<Lo{Xon479YM9RXbrb)eBxm5nzvzaZlaFlHK9x
zX3#`5<3;kPG8NZ}@pFcQ4BF#SB}$=0?FiSd@P`hi1RA95wZRCl^Wha>vtcF06=ABD
ze;C|*?`{Ez$oah@uknq5nf}70x2pa9i<t?=KytlfQo#)=@t&<gTKX#~Ww|iDawMlC
z&WxY9G!)xAB{A@@VsyzZCTO)rKLtsW&FoLR4?>@(dHwIBfp|52UN@c})F4(P*XU;B
zOyeWz?tu#C<d!--^)!XDbTtf>yR_hY=h%K6(~)`8<8XV>#ZafLoFuA07uh%6Y-`^W
z)s7FP+j=BT?i*;E{B`?UD$KP)$8ua}M(;89cnCOF8bXgKpUCjP<(l^IBEEj<DY^2;
z(L(c4pp`4KtgJu{`{}(nQ_KuzQ?boDtaa=mWlCZ*)~f2v*IUWPu#<yZz{WhfCQ)1-
z^K64WQo|+|{h_Ipqkc%o*AB&P9%Q{7_7ek+Q19)L$fN(8^0HhbiawfDCcYCRuFmQ}
zXwtOHT=mcH09Y=8>nE8C*!6j|M$)<6j6<pzOIJuV{i9oBL8x-+SiT>>__}^JSJP&z
z$#V?x=nmltXO5LZ1JRt3t_gIiA~-^A<P=r`R3&8nI3!)T7*Uo4sI(V5Q&{AH=nSQ{
z1l0>BoSV=XZ8N#Ai@HHHv3raI7^V2{vWERCvM>0s2bUeayYA0=01=bBpWiHg`^LaE
zT@l%19*!N}SetycmLqim^ipgWiY4~g3>44^mk*ZZ>yL?cb<qL#6F4`VzQp!9safe`
z3BE(}*oh?f%oWhjh3z{?p!a+!qpL;qaXG@1xr`@sU|ep(FK@29(<u>(JJU(C54Mcl
zMsz)G{kh$3?>x=hYW{Gxbac1`ii2r3I+)z}j-5j1L|)~((N~YTl@sA{Gjl7(j!}~F
z0aH1t^7z`ZY}hu4>aL#`L3D-4--0%VS!g3bZICc14T)xWd)(vKWZ7B@sj9)G9{S8c
zv+IFfHTowB+;lF><o5DoHh}Ha?odAx@J}>|ENc6NJ74QKBFu~MVkGUDs;m-VA5zSO
z@HyBj<I<>*MV2{^6<>CM`&N(>5_F%d`J$USkr6I7x&3aOuv7=bSC`R>cZgUP$Yt$9
zsy{EAlTB=>6-<QJ(|RYxn=8l3+GjU*hop~vu?u<4%_~Dwtr(vIp+d_k>}`zR5tj*u
z)kmKeWg-Tb*Xx0bC`*y(++E$`9?}f&u-@c)zOxDID8BkMedXW#S7=5jU04AoX@L;Y
zP}z0`*1>rZV<CnV(>K+EaPxGgaq~4oTk&N~3%M-=v<nV?05P5Z96bXb(IE(x&F`@G
z@wE&<_~e%bwqn2Y02@uL4HPwK*!AYWV>%j`e|RP!QhElLbHbN;>-bj<25mIO;`;d9
z4xqcxy1g`{W*au2NH^ST-mVYh{2j#}aFwk(-uid4p~C39J#1zgloA$j+byf*sVIK@
zk5+=o!!7xS8+xT6gDCe<f|IlcYa0agVMnH}ni1h<xJ6(D;PSO+;=DwlP0I&>DbgiY
z0oxA|A|XkXxY*Zrc9Pa{mf6edVl{~#E3TF$6SYu+GmgR?ghbDmd1XMg*y<$fZ#36<
zI=+EQ*i&OUS7PL-mmW23@9FRS&Thj;esD4@IX^DVRH}-hFpqCqo>fkCd^F?LbeYE>
zOq-e%KG=DB9V9$*wR42xC)Z@<=fuOh6*p9bs1CKaxg{yx>`aS{=Q5Z?p{^dg-)oMb
z1w}&HO;RRj>~N9!Xv8}IW#-7ywhle{OV0z=CKXH3SyxRuO8&rJlLyG)c+JoO&n9lr
z3jO9gJ259?nq|E|r}fsBFI5_N8w5@!NB7>58|J$k!X}q=1Is$=qumbJnYXXT#@FnX
z5Worr<S=7G(?dS2wZt|HfZp)3;kyz9CYh>JfTa)*>p#2|5hf!w7meD8-Lm}mRek+r
z0;qd$S=L=axK}Vk$n+Yo#HNF7iIL1FDxa*nc(Kky5Vvx3CLQU;dGR*??D3=qigN9d
zJd&s~;qyO=OJdDFSi`$a(vFAtc)V7edj6}Ly#>A*72i%!sBIwk_VFyB+5}8jym`Hm
z_cr+$PAjcNBGMw8;uF=L)k5`WtdFO6X<wFVE<&cWesVIoW!j^ue!Y+5dp-_f(yG%3
z0Yz19x8iPrtRx_W$uy?*(h$214#&Ck8Nt-Cy+3_01v~YOa0|q+kY&M~)SkctHmrp!
zG=|BkRm1+*Ks_c_<)3M-TE%7Kp79pL(Bsz6PjWT@lp>g~0P$L!LXIGY7X!6OL^<Af
zH#*(bJd)CeE#<iRigwj0&Y;T&1ok>xk`o_UJ5SEWr{c)76$*N?A$#g#|Ll~|VT=A&
z)+CEOas2NX!ZJ^@(##}(GH2GGuo6I{1^7y%@Dj1{o?WS#osGo#xeYWF$tQj4;<UeR
z&-?+#$v=U2euY^c1wU|z%>y7VUUh)W29kQ5SL7-x76Ih5;UHO!b-|J@G|&ZFHy5HA
z7>m%=_%cSeYh+7W^zk8;e^?|H-W`_V;1%8bAsmPsYIcu<Mg4<GRJ6Oy{f}Y&+Yw8)
z-Q}x%DeD*Idu?=DQv}~$7-_TS4P4hg-^@y8sbqfZ=;UvOXQQj-?mUL<2OS5Ks!k2z
z?91n;x=WLQagpTG9^<zlh)#=kS$Yi{B@)9^Yxy3*I&Wz1rB$cOlVs5`YV$R}r>^n1
zwE;!$WdE>ZDDr9!ri`V<U!{Y<l;RhvdnE-^Io1UI3I>Sa=4N0vGkOe=0S%~E67hyl
z{ui+ADk4#HD+#l+lUTRSrzVjvIK^Cb#a!y}d+7>5P-*jUa-4pj4cV@}G+T$C+DE0(
zNxKE?pQ@u3WjPn8EEf`EweF7UN)Eqv9gk$g4_{Vj>Q6XC$*4^gJ+LBLtlDvt!)cnj
z^TWrb9eC_E?X_PQY~thX6;^c0p#Y&PD#E`&uni>klN{N(2~p)f_pv1Sv5-;khlKpz
z{mp6)-{U!)uIfWrp^ULoTe2vhLI?Tejndu4EYVUS6dFJR9IO17#=GY*Ipyj!$GId7
z-Yqzazgd212%C@~S;NTxc-80PsP%Wv%7j3u)vRQ0`2_R+UktN1aL-|%oLYUQRq$V}
zt6EM{4#otdi3=wO8X)rXGZ&0Sn0U*}OQC(vDtB{gHw6~(b*mKTRz8EK$NNSdmrT1q
zioG-c#?U4&8h_A6&{{5VaZG<Jl46kRb+}i9Bc_IXZdban#Msi3kQ6s)ZVZV~A<`?G
z)#_d)Q^eK?qp3nPj1j$m8kpn}o1)*vt~nQJXdSMXMda?Gg>#{yCPu@~Oz&*s=tpfT
zJy1||TdIHqrxj9C6t|jjkX$WpY9<U_`Sl;&yco*5;~xrFq6ZSmZmrCJWnE-J9dGH_
ze?J(SKYOZWy8hHVQ?5d|Y`PVFGSw}xH_oM!O5%hUlGKrq#}-QcU`-GrU9tyS8103q
zRG=xz4_U3YBq=fo1d9oGhzdTT>Heh1o4p`T%3rk^c*$CU6+{VI-svBj#9x#))*=U%
zSdlzXsyyOO+O!|HHkzI-V(AiAn>YPNUgWX2*b42fx=BRo0+M`$RQLh5cPP<rQ&L;I
zo%{zyTGEK^ezcFk1hxh~!PnaJ$<~sXW$MbTDkrxL7`xSpW#)g>{hYPIfGfF<KPe&+
z^^|1!{dt0JaYYfCSAZE@1Cowg!Opb6ON%!<3OZT>_Nty+9!StONL9#^Yr3B59gzA&
zB2dXVPja)6&`-jMa%c-dcP6KR>h?*U%*>rGNKsE#I7;dUi-*=AtKLYY38=;{0=TrI
zLX?d6CDEx9ul2s@DJW*E2@7MrFGtM~MQ7#ToZ}{Hfkpb9nVvXE|2lrb*W=qAvt;j4
zMW^1=fdV9;dBd=I3PO1PL5Z-6L8sAaGfchur?F|zIsB%Vu#B2M4Vz4-dhM{MY)+hv
z>EYmvSJ3;zo?*ha%USVs_f4;4G$mN*IAM`SP||2Fr&P@3Y&7-rN7zW~Nq_K=6@*sG
z@s1IVACdb3AE5z#h}O$hg{pnv%IiBlX&Zx|p1^gyQs$^f6F)+eWW8i3Qde@rO^AEt
z&XxRaO`>g6pN~0*EaL1ed2o>~PUQfT5R|s|cU{h*R$Cy)AITwLXR?skd|?P4X?{#}
zOQ}*|vlc<OPG%L})TycUdL}eEeRz|6gx~##C;k&yJe)fE?QjgJCp{dDlm3a_6TpZ&
zQkyQMZ|o!On-}b-lL+&M-yzGZ@Ny~hqZX<g(KZfv&(Ee)h<<U`UdMM?oJ*~{=7j89
zb6cXd!>o9(QlhLsHJc=v$pftB_;7z)_(sXMgc1jvv-USpRQdW2qVCeC3O|#&%}@#3
zIkJ$;*1>n!WPCxz5G7Uu;cw{i<uHadMo$-_AI)tBaS6DPPlvaJd*yRLj_*d{EgrQ=
zsM6dU$@Eb;dr0DM{w}txY*=W`TTe!2GIxE7!#U9_&@&2<`W3-ry_X3@AmcqyI;hW1
zq>P+~*~6(q&*%l=6L9t2SCQ}Aq$s`|GFyN6kA44KOrk1U0O@3sFPHuwK{^Z|h&S&a
z55%?az$?sLJxN%Q1_?QbZiXZuj>INMj$Dgvlb@w`O@MS2newD@IEIlLXJ8Wnl&f&X
zyB_nrRF*hqbvOP!uzO(0o5d?0;D@q|F8+&;ADwTG&|?CX#z5@cP+VDuPMDmx26R}}
z49<Oz7)SB66nwLq()+=hUkYle^7GS~_H^6SNxoP!SLgp7g2u+rxOYIA_73!k3hnty
zC(aV3;c7+0*mTW@<RaKI7s=2KcYjW1f9=!xym+jsawe&c0Elos5RP`@>9$;}^lTKO
z+^RYaiY`WQ5gy*i$(u{y|H3_r(O@q-2;Y%Sim3OG%O`(~CI#;i7b#9nUwSh)nZC5!
z%=y|Z`r54YFw+#Kv*mcu(|7Ya2RzHQ(SWoyCt$n+DV~H@unKBmb9~s%(Qe2(z$Lfz
zSCn1Y>|EuwoU;qW2OKLjRbRfliZ0q4@WCa-z#sSgSA!h8K{yvsPT`b&w~FGMO5av*
zWa(d4%%t$p0$-Af`@ufFv^r*1vnMabKCjK)uk$`1hX_8|bPwSbjwd*XIuBoG;?WFD
z{F9XrR8!fccz<29)FBy%oV*lkis{JHK&;-neI1b1L!|i1S`XB6v%PkOsQ^QAaQoD&
zeE-Jw)P*Lu?iG5tqRuXBJArujwY%M?FMs#16<`=Awy?z%cO3^NXlLxBgXir_h;l>3
zXF7&I+9bjhUWaL2Jjp(9rT})ekh5jKcoPl3jMyO2w{bm5Td94A2roG~#8^GIL9kwj
zOk*GVTU-t&9Kq#PQ_XZy(UVe61^LkR$~y_lscWr2Lhz&mSLfscYG`14V&^DuL!&e3
z-Cj)b*;#2pbKE0JUby-24G<u*1(q=QUU3;4lSIV%;u93HqeLB^K)u&DjPVhg9iu^@
zXa`lh*C#5W@`jfb|88H6XzQAik<!&L$60Vl{29Jf^ySrfm4<06vxttus0mgtat*4e
zJ9e$O-|zNpG5Y;C7s9vr07TD|#$LBCIBlKU`2i-Dj-nxL{(&o8QO@2Df*-)mnPvmG
zqjv=uzG)cWg92=KzTGfmeDBA8y@zWW&JXJqCWD8O*qsb$g7YUQeMJ}KiXH0WSk$~j
zw*C#u_MQLiPxi9OX_Y~3Y(69mIUVqPAffyC&Sv5(*Lx0LW&c*5(6=pur~dqVi<<Uk
zQubQqx$pCpyx;m={Dqerm8^N)`t|A)^1&3kU4{H|{4r4F!?!m6xczc~vG=R#>$Q0s
z!}7Ikh+vpbrk3FP<NPsMo8%?8RE7_>@go58<lV5nuqfi4*9QIcOTZ`ei=a9==soNE
z*1I%b2f(qN*$w1M7t<}tG*noOz2){>-WLAyb;9yas%;R9oh&=vu%8%FZVGws+5&c0
zm0w0fiVTBkgK-)cgI<e9jcGeA(Q;;o1v;X3aPCt&@ys2WSHj{gQz52Pl=;4k&R+`B
zD8k+9&>qm?+~3<IR<pwYW#&P+?NK!wGG9H^-j%5=<ap6U(WT5gEOxcn!U>}N{?D!8
z_3NZ$9R{n!D^PMl3VpIr==7pfrY59+L&UfSa+3dxcS*~wkh@&S-L{=;aG9JD$&E+P
z&R^<wCZ<TRS4)~o0b{EI-tyI%bFconHlzF>J%2-4e;Zq3#lHL}nq*rhnr+BaxUJ1;
zFG}C%{A`+cbzy2-fGYL$<!4Pil*-og&_9jQ&Nx{T^x(2Jw|^6!r^teV*Y?}0RD!SK
zFcuth&vCv#n`|;74PXK<NIs?3Qq1oi&YFlJ1aGy62R5foAKT=^GLC(3U*wI}Dtyy5
zzFlH=?EJdvaRk?~y*LeG?+<?QPg<Ludct&QpWvk!mg{zmIyVJb=d`f|EPAKZTHrQ`
zOL>>!%m`uKjY~><G^+=-v#q^Pwh@Xj$Gr`wk-y`B6(K}-(c$3^mIDggY;ha^B5Kuv
zA2^%f5s&e_%F<jAwm-7fnIihODL^LROt&z<htZKB7PrjhUsyThV0W7a^<y>jaB>#-
zfgf~tFcy^~-_tF=T;{q8%Q^DM!lhcNiDGGNl_9~bu(|Df%xAm)a_;+VEOlt$b{yr%
z(=ew*ofv$OTnL&_%#jpZ3$L4rX)p^l!pSxn`&eJ&01dlU1U*P6L0*|5WK;epXq^;$
z^Hi>Sh??iv)s!)fZ%__%puzn?7t442)Y}?aX_a>4Y@$pp{7fZumbz3uKz=Fwn24>R
z)>wN}2d@y~=_mqfiOtx|IZ!HpK7ZY+_AV4*(&WKdOT1hIz^q#+TbJf%L)%lIBq$+h
zvixiujZ0J6#!W1Gtlyzx-hhTzFbc!weh7tr8Wk2wgLXR_{Z&s;67FCd9`(==Ntuj|
z4Ac@v&@2H@`2p%9rwxmNB;3W3=ewULhO$dE--xHT&xn&G49@@)N0A1)r>g&%oK#U5
zv4H1+F^z9i_U`oJ%+{bCRrHnLg|9<(K;rM=5$)GuKgmZAFUj(pYv*6+B@-HcUdvQC
zZ``&|JuO;sBfI5u(EhSZ-<&HYhp7>|t5jv^$^=jRSJE+)635BtP-}LU1=7!M#NnhH
zV=uznjHc&zDZA2@j;=-1G(<I|z^~(vO*x4(yY|k@SpH3R_Ko!P?!OmY-ZlD(By>b6
zL%*ohGGrMzZeYz)zBK7M?W*J)sM-c<tlRqXUR%bB@1;K(YKQ33?*%v>58J8Un_ghw
z6eZ4h<5woGU1{>wA5y4)0J8BYR{IY9UpR`iIpH)B?|`9H(RCc?1rH%*jU*-{VFZGi
z-svBu9=fU?u{p}#mo}riuIBm8YgZIS+9HL|k+)y}PFXWN!qmCL^z1V23tKn^T|WeY
zAxXtu_nKN`$A&9-#ol%U>E=x7EmstD-zlw9+(6wb?^@Td*)NcRMK3kTrcZ$n7o)9R
z#^yU2OAy=$-8fdaXAp>CHl$nvsr3z(U9~d&9%vn-$eI_l`qET-jl#F3ovgDM7~q$n
zLbw33ojyg#$yf1_mcYs}Xs3!Jc-%PgJ7>CST~)k%d`k^nx6m`(KI6H{*q8PsZ~&9C
z_MtKm>M2f(kQG_#A2O&5At`NobuAW{NlJCn3Gm6uw)Xqb3>o;_RWYw}VD3!{2fgyW
zE0m6v_HUr6Bk<F?KK{Y4+Ug5vg>PLmy?B|qP}8n$82hA1N5>u~B`@*HM2u`|-`XbM
znsIyc><Rp0bwAP;E3M|k71kC}jiKb&qf<=lf<v~i^LA#63v!T7In^zO2Mja<1-SPG
zZOiG)<>wSq;Fz8=6w_f>jHQ+J_|Z;x%;nZO&D);s;cDsBZ=|zLtk1dZzEI6XAyP-<
z-$9@E?KO<mmEk*~0o$KTPv{uNx&H>UWY6t$j~x#Ax<@dp!b!AFDi2R6>gQq**c%tg
zzD}%l={$1Nj=>V%#F9)ZD@J(yPMeiBx!(7A31_Q(F;aGI`_{#xoZGcG;{9Z6_fkM?
zn~?s-iLOS~aa>1GH-$_k=cAC5IGhi8xk`+AD~`mvkjVidsuAk>?sKRObI1<V1bH>W
zQXchY4-6IH-eBFh@^;23E1c*4mJb6^ff-bm$_qcplai=)z|ool#Um@EVvS?10*iW$
zl(x+KfS&fYtCAN4BcvpRpqfB+`NxJ>pZ^BrU4w9*!$NFdL|Q)!&_Mu~x;bJ1>_IRM
zAX&_wH~du`gG;qi+#EBt_!S*62gtvCnwYhx#%g=GHoOI@BQ5=Yf$q3!AGs<<gtd5P
z@8Kk9rCEfOCMP-gAIV~kn${p?>4#4gW5hX112m{(N)xrHpss_0wJH+UXP5!yNlG~S
zkiFC<OFy7Ry;jnRbqEKGNL7sTh~=rMkk9gnhM0X~buxcJPL?`%HTh<+BJ^(*7HVb#
zSCg7#6M6xQiU$1?_!jK2@<_ES?tkKQCKT<l6yw1B5lWJfsV0y;!O)Q2UBhzjScNSC
zg-q#ocp&Vfi;h8Z4mX@mbF{|~rZxHl4Iq>c=(dYZtf-QbJS;7#-mDZ3Yji~h5bJsp
zUQ2895rx8XFzuZUfk%J4b?38a66Zl7V(3I-R7hebv2-wEP#6lf3!D?bXt#He@f%mg
z8&g{?{OIZI+5WNtWs&>qPKrmEQ^i#IIxMFPP&iXda5>Ax^c0BZ<bfs0a<2<|i74Zb
zWe%wPqfC|)j3!8g)EHlY-U5cT<AykA|5wReNIYL3A1~i9U}Vu)N^ywF3xYrWV^3;}
zg+lS7h5~>wVHC%d7w9m2eBIld{mkFq=rJCA{gaT%F)%o#dhV8EN^4TKR)9a)z^o(3
z$zq`I>@p&8d?I5OsuC*~x?!K`<i${%igv)cCqSshpR(-*v8c5bDa-4ds8;qDfLJWt
zIsmf*nXEAdvBdf52?Fa4^nV_0I22ROj4?RHy%e|=*_rYzP13Kfur==h<RFQV>2M>|
ztMR59`uZ1qN+ui>W=@t<c_@xSh;tv{tM8%2G!s(P@y!=V%tPA&H*Beb;{~L~;WyfW
z5&WOqVRBXWSC$=uq-6~gPC}Wo{)h3(kWzXdJV-!Gd<(Y0k}ue$PV<_|CoXXg0G>WJ
zOe}JPWq@4_lPQ4@XmtjIO`dLd{AX88e#SBseF?e5jNw*CCUR-&3b7wd-=S%W>P-7T
zHPF#H79jwYd<qjcPQyAFbTQbiN`_*pyrHlVU^QQi-hz-UNyVS+04NZ+Xzc7lKgeMi
zC5v#29Xw%QSN=w6r@myOM~F3GuKwx*JwmMoCLox+C_w3wawXr4ZS`t-Z}kPg6+fg*
znoFt$xD)aks1}1f80#v^9_X#FhMya?g47QJIL2|mKA(BbQl?t0U8h>T!K*aEEd|={
zK=5K%8`+kJqU4*95l+1AzD<`CAq<97(%RNm0{C1RN~w8hO2Uh`DaRp)7a{*B(ji!~
zsc-8HAMQQ@-GXey#xXkD=-1k7ZT2PVm9bhU(T&6T!P!JevT8KM*=1dG3m)P0io|^1
zxi`JC!$nYa$+!OBh%TC|^}~$WRgu}JF>|9@a2TRaqexDFk~m=iPOb(Oen>6u71E(T
zdZqw1fx>GRyBYw@&KFHzsR3Uo!VwgsFK2oT6YTGK3&98&oB%iHvney|2~}QGN7#%-
zvf5%RSGkk0toaKz&l?aDjOMeyvGfZQ{*lw^LwKz;8(_ZUZ?{m$@N4KovxNklC8Vkt
zVk9ro5Nq|zuO>@yK?)2+x9vaflQ8q()SeZbe?8SGjL`NJ8tq7k?2>E$QukF07O{cL
z()cgfP4h^w%rk`}i=Vg7A39{X)0W9%wO*En@J~=DI_tu<zh6Q%4o_w^KLxJtTgz2s
zA`-)TKubXPXRLpy8*BsYe1Xs-tJ0K_nFiQB%6)%Ov5M%y@YaN>S&xAn924Jr4_HA(
zHP_HUT&?BxEKV)2FHm!$6{Epdsya<V6b8Ck-?-U!T(vxQp_9$B9t29F7U>JXA>`w7
z0U++Pln{x$rMNW`^5nI*H2nUe6lFNe3C<9IRb$L4iCAsX(^e6c(yUXl=8j<J{V0)y
z3ZNTLYO!$SaRfynfv8SF7z)*)>p^vi#-eLGX=Xh%^P+vfa<d!|FdyiEl=&qvv6tuv
zx`ND4IdThAIw4?7hr>z+N>mfV@I{4i;Diny6ro~A%*TyU>1f`puX=G74D$jhOW7=m
zs3fQif2&o&#<mvV)40b~q?W3}EAd?BpO3`^Tg#p!s?CVqOPLHgh;sF0L{sWJJIw>1
z(ZI#^TQZj>1UpD$pp6GLUe2kBk`jZ{8qzy2jNk*{h4OQ#m@awr<fGB#TmNK%K<nMt
z)U5T&A>`+j{u}*oyTYt|Fws+^h}0z1r129z{g3dxyG=?hfTABH7`NQKYIEiHQN?YB
z&)?3@<dCXo9;o4Ll}b0Fb$2{y=~sRth-%xA2v;PCYzrAam1E-CiOfYNyDYC{6naGB
zSQ#&ZGZl_|XSBh0jp5bY?GTU<07@H2?AIj?V+_J?Hh@=#e^|Y{3I%RSKapCjTr|iT
z@UBvE+r;9<$YiFjH*ozmQU%9r^qN>r#Sfwl0*X$W@v_xMMYNuJUEcMg{X?<z7S=4h
zqMmR`Y$aDme1w?2NF{K!(3h?ioce04^T2hZSn?|3VbqzSN8uD?Khe!2m`mjqf?gnC
zflbIywzB@~Tea6zGw;Bu_=r)L#<Pg*PIDjE%6&k`%S>OJ6B{v0a>@I&Tbbd`EB`Kz
z?&c%YCPx<oGumwrXu__~@{0n}cVwB*e;Xub8!Ru|8KC>^^tZtF>r(l9daLFfLe0;L
z+~hga4|Xi*QOxVgC+fO83*{;q@N<YycXO<ccfH*B;g8#sBtFbF6)bd>Ibs)N(~wh?
zuV!s4_D;VBORsA_DpAN&Bx09D+&^OH%<|zHKVj#E{D17BS4ONn{sZp$AsW9?ocKsC
zuIntzEd#ueHQOo}F0F6g0~;5R*zEQ3{{5=$lP+WNGc3!U=1_`87ahY0%*vVO;>YA=
zW%xA%Gx3&(8n|ZGDlnB_^3glnjwg>_aLlG$B|}@lMEdqI>o@K&752vhj`fAK#Jl(w
z-MC&Yx+G&&H(<>e<BwCk10F}Vg-ub>gKz8KLUOAUjyb-=g;qEot_<`Zotv{}*AH16
z`YJw+PeeJ>JPe-Ln@q`Pu6xDK(kSqm2!Ys)r5H>24j&1Z=nI|zI#tp2UDNopRL5Q;
z?qHI4rG0ccq@Ij$WJWk8eMkhw)ZvjlaYQsxn(-Q#uxUY^GMEYy1^c*4vc;+r;L`aZ
zbwD|=$U<PwCu7VyH7|**ERAD^Gq8>k`|r^^PlwEt`#}=ey+cGX{vkNVKZO9{KcGaY
z8f+J!+^P&$6tYGsk2u8l&MlWp$KrtYQ)C3f!aIn!wi&cB!Dfc#31PWqMy4a3%@d^-
zm<EZ>&;`$|_$-Qr!TiV4*Ec3rh_2|rWbizBlrqSQ$oEsgTYE+BVkV=cPnbC*p~&W$
zhZg1Ov5NdJBtEevX*lZ`2Q1Ih{TtoLa2!Es@~g!}$VlhEQ!kIH)t<kr#vB=xNsK1g
z3M!TFMymg{dS3;xkgFEEIzcz<*FKR<HfEcu-s;d*Jxif^`FREMiB9y0N}5W)=p1dO
zb#sxqcj~Z6C@7`AV{)Kmv@YK?;2de8ry?++BAq0(l<K)+pA3(l{66N+ZgQ<8#>w*#
zd*LN)t}3JsOxY{zrxr)A_xy`pX|CXB=5oZzL|L;G?X!r6gV;HOq8*r28v}VzbGsmU
zu0)?N6L4m_LC=>L6C!;{#BRPwJ$SEns%g|Ui3Cx`4Hu|fO<UY>{O}Gujs5Ft)Nx&$
zaiOnskyx(*HA<=c@~m-zn#-(ZxJ?a{QW1e7{{UtYG>yMqE;abmqflyyld=p&V5^4J
zzwzla&Q%xZy&$qQc!zMbj6Wu8W7guzt@`5_)w4!<1uqR!K$7U##vQ7)YmO<u4Se7<
zVO{Jmn*WgnrA;adC%O-`C-PptSy=m)hKAs03{I$q156OHih{a6SClwf-9NqImQ)h*
zHbpK?vPf2$xEXnRr(A>1{u`JF@yD(Us{{?^EV7Hy&7rDdiMK~{zED+BHBvX%)fJtm
zE%55K#_zgqtYzD-tB$-=YnJ!E8HAJ79d$3p<6LvrH4V!wXU;#<!FVpfy8%-+^UX!k
zU<ds#B{*)U$y0Fc8(+pRnN>`jny-SGy!V<p@ltkimzORboAg`Y5v6tPm4+Nz<&y9@
zB}ZmRxo{<ab2c9(tz@v?6U>O_nSl2rDJdcjoL%+aLt~uKc940L6x#2~dSl9}@HHKv
z`pEAaZE(^i*&HdmOuYpttwQ5_6^V<}662DpG(wkOSrB*KgOMvCk$`j+LpZVNE4C^c
zO9C1x2-$2w)2J4Ntk#JugD*YI7|H5U(yU888Q0(oRv3m!e<_^)DO*Y_t0-qBJe1+3
zpAJV$QhIJf0y;7q!IvI=K$A{BiA~(}PUvcORtHkKA310GZg=-LpA3Yop7J|?bkXaG
zrAmCX3uSc}5?->?A7(yqg^h*7(MSE4grM-8z$zrb;2J64MeF~}u)MR*cyXoFq`o`k
z21_a4Mr|}YhgYIi+?q7vq^WsDQ<WWzZvQxVKy!5QE|4B{g<3TqbLh_%neVW)h9`;o
z%dW;gkkNkj0xA`M#=8<N2{jRF0nxUlLqQ?tN#kbZg{T-dLPv0H8EbWnx$=lxRh&H?
z(=pS~b&XmM{CnA2rT`YDs0uRDjii1okj$Rd_x=`$2DWfk5s_lb3g_Yv+Hn9+nSmTT
z^e!2GD)Z9uxHzY2F?LcMtOx!q>+fUa#zVSds~{&aJYCLuwpb?m^*_MXYkC{GY8=o|
zd#L=iQQ5cqwsW>7S?iNm>W!Pn#AoO+n{;O6E*6MewH`-27=tY+a+Q11Rkd_RD^~%x
zs;$<4<_s>j7L<tiJ<w!#c9fx{D(=8(bdL*(gB-^x&m6{K(tUJ{bwIo~89Xosp$)O|
zw_h$j9!Q`XK>v9^@mn+*SF8$V8F6p{#iOt+(nLfH@vcdY;XgbOLFi_p`NEjsl7$>5
z_($QH?xBVX9Rhk&VV?dxPKxS4{n6mmP*0ifVb2s}1u0KeZYoD<yeK-*nL#aD6MYLm
zGs{Oud1hH>q-78{hLVpvPP3$>Wz5)x(Vfo8_~SL3)t!_LgCvu16^nSt3^rM)e2AGK
zoT<o)dggz7GvW&V$9o_009M|hZ~&8I2>TK|4H_}l@r4D$(wOwRz(7V^=+ImzSA|Sc
z!CF}8QC++-TJW9Pq2sM%(MATdJ+j{qG7Pb`m1r8cCWLZeo>DITRz#vYdm$_Nf`C$g
z+^pOm{_-XeMkdQaHTW3IrB$^J*|`66g)z=*_fh;Gf61ME+0H7T?u~FJum0q^n?k#`
z>0<ii7QD>yP}I`INbKH>GTbrf>6dQq_RhN>dGZiJcrTZoOUIDuG#oarY_Z^MS-hba
zHHEvSlv{bogCx02*?^=XxN;%j9lzm%#Zl|kTMBWB5@_wo1D(^@beqp{iL;VcwG}_}
zpN;R`N<?r^#)iW*ngVGSUo$c2LJYGrPS+0xsEolT?6S4Lvr7)C?CrhScv6Y>{x1PL
z`Vudq_U=FC>tBxPmSKwF_4aT}I8?5uVkmn~FN)Fd7jAuz7m=DMeNI~_P4X8}0w-2M
zynq$20Y`(n#>FHWXPeb_Y^jfItX+LpJCj3{>TyWTV1L}5Q@kn@iPUlYs^+w~1U#^R
zykHE*VcrG7-{LJzoxv|+AMHVF(6lEKQ<7tnX%~MTvKC5z7VJiv=P4CY6<Fsv%REDn
zSHB=wJn}qH`^as;F<{+q?;oB<&;qM)*(oaRbgG)!+W|x97Clb5ZLBd_gqLnytxi~y
z>z*@pmH=%sG8bzOujHVAAdZB3>;vjt2}NN`7Gs1b(SG(KF!|Jq;g@8`SukOvUOKH#
za3OM0&vT{u>2}^*C1){pSg9q9qn5=~nR;2E!&1WGxYkrmPsz=v(_rb2xrB3RtFUtG
zv~7&%sN*VLz(0UgWj2nFzgHu`;ev|@j7qqJS%fPiYlO{9k5ShvC|C@#lTWH44p9ag
zRh2U1&F~0f>7)elgund}@o{_4B^J9CNQ*px#tGJJ>3235__N`sKtt22vzFWzKzd}s
zv3o+%5>Ro|Qax3nebjr(j|mE}L!XXFoLkEd{J@^Q^=}z^=As1Bk{5BE{)r7?;n4V%
z@EzCqa)=75+D=rm@EO=0P58hj&gWe2*gT#Jl&@z!t98k4)X9pul33RBDW*qxrasP#
zH+rSLAu{JLWrI6!DwLfbLiHsuH(<5uE{|gET;RyE?D%_wpXMyhok=<(*f`gCKqoj+
z*p9T$fsCyuY^_(F0f$pHAI6A0IRroBnyO4O_)s;~qlE_$-0bLyo@g)xYKZl~FZ(i$
zNh$?-xD@j4aIp@x7)`9AdSpP_+U&Fo<we1kJ)zRQw1*g`g?f=yVyIe^aTeaU)4-J%
z?Egw=qHeN{>??<Nqxpm^zBz>?YH7O}Ex0&1%xVmQ#hfZT7Z35&T-v$!(+;z&*+j)H
z8Gu(xJiGwZ(NgA<!~LPn^{hJ_Ss|yO-&30z@MBiByE|!x`CP0<9@PCaK+7FN0q+d5
z^H~)daZVI%F>-`Z41IrK75zb^V~ir}LRdR15(2KV=ll@0<t@IOfCK)@l@sK8`YFEJ
z0$xIKPx7<b0^utLa5G{RI&fNj52pUMCiU4qOF^mzVV9(Lthco#&ffE@4KybUI4o~i
z>wl`RDKQ3ZH9#+56t(=|X@#wMw=0R^X=qvH3s@$tx?i;NGtay?(TK#_hCNU7JZZd;
z8=8jJUOVW|S=?gBV;e7ead>bru)%L|!O4WtA5xykntaR@Uf|mrLx3@AY)RAr%QZ=2
z6}ZwK77M-$aPQoiRn(oOvF}DZ&P1@>S)+=1^yw7Y<88vMfJkTi_7d-6m&5qb@{Nb7
z4ZP6U(612pMygTi99wE}&S?C!v%Zb`?KfE5;jjm@r|F^KagUkkW;jr09eGYuOG%i<
zo85gN@@Mx<X}=5mZIf?>P4-WJlHMZRd1VN{{T;2Vk1<@|<C42u03z?Qh)OMLOhj$e
zi=LatAMmn=(U`XHobEv^#(dLiZRc&<6iJK)sDF$}4%<k>lg;xOdxkrjYj?5=AVr{t
zUlm<sJ1kvBphq%fZ}2h#l)oH2R+G2H9G@e)%(zva&odjn*K`mq;c;s=;jI<{((HhB
zAiZ|n70v>{%1`|h7uQ#x^<JT1r_@St#OZ>6YU2Cys@+)7H(eW$^k^~Npmp1T$X8DR
z{H&dv#aKYV1)1shm*>(|;AT)I7yTz6tMk<o_u#-0rKmWo7|_S00>H%)RZoXfh<+8M
zgoPY%!eW8|T~lc$XVpItS`8G*PY<2i3LrnEHG8!l%?fRj`K;_!<0FF%@@=HB3wiWm
z?NV{>SKVU;IB$Ce-Nk2tb+xvytoKv+<-7Q8Hlj}UbMommE2Vf-p{eb4m5IsMo6jkQ
z+cUfUe!03AFl}kh!uFW2(KSs$H5hF&0L680ExDW_I7ix3X{Zx$F;MMcm*2v=0W%k$
zL7gHg{A>_vJ;c6F%%wB=LPOdF-(N4eyN&4ZT#m0fj4ezr3ESjNaBzlYfh<M0;P;1S
zP#=!ekG<1B6%71{det=E(rW8<k0NBMhVAd2w)S~#=vL=FYq5^CX|UX!N&5@MbR&P&
zlY%GII`(HVLkiZV<P&j~ul%wC{cQ8g`=v)z2kGRx^xVOrPzRj!YvmL|tI>P_tvp|C
z>eijo``rr`mi2k_8#>YZo&i8}xsFtg6}gv)ee0yGck)<g8ZGiNdpqak-UN1alB=1&
z<v5$a#}Ji51!-9dE=lhI283msWO~Hy$W;8D*-&)hnJQu?)wNRv-GsZNf&Hsri0py_
z{3S#l$b{Ip`h^9x>oZqw$*gntEE6JhJ^VRVAj5WPtK`$~f=*K4m^lfa?mk<#*=I0F
zXG4pOBrhBvi|_*3MmV$<h*Hi#7`jbO|F*gyW!I2d=I#EMZXEqPQBUQA4F*Tzi-o9&
z4zW0@tbu3TO>*CcKddCF60d2nx7fOaXRR!HVT+pW8p&PGXdu?1y65>W=Bd7YMDEhx
zlpg+{L+CxFSj8N1)JxR1qNWpDh<R9X3Sv^mBORr)Km!lvoo?~2I27?+u`LP=Pscb%
z?oNN<Z9i}sn!-o3skC(Vy+j}eU1#>7LcCcaAG2?=gN}>T6>^bah9k_?6jQuU%gvt<
z3{SQYG6$^rK0Q+;8N;hv2AK?x!YM`g!VEcQkN*7|MrowLM&cmRi|{58D_R}FJsnHl
zN_ODl9$GIjHHMl=B%pR)QFOf;Z}EGmPzL-13WY#|v0zv!lAmP%NfDw$$&#n#qX9*z
ze-C)X0;Ch8x&@(ws^|lk0~GN~sfa`k)~y*U2F&#@3hOoWXuVs;9_TI6ecURyA&0<>
z?f#4$>nhT_G>WH(4cpHAE1eGEq5z9XIQ`_oHREE+q+t41uC~GiF*$Ynt-!geU_9n=
ze9O%wwqWgZ2@y@s8C6a`!=Up-d}{8JU=*J2Ae~y>OUV3ShlvOM+bA0Niga?<67$6T
zH(!Jbv=MPq_!{vpspAl?uN<_aA(zn-X8F@h*i<LbHM-Fju!T7YGa=^cYM<4*8a<mg
zTnkH0Go+wG3^mGV4OMRDf_jsCkncn>Pl<@gHKb~h^N|&+g01=9-IoP|e0dDhd&URm
zhs**ol=N$$wE8{q@aRrC<GCz1?@JCNt2mTVP{Io^TSNdtF^Oef7QmOH8M<fob>+ha
zs0!{zfCqp{)38eoIAw~19d@M(-6)zMJ$*fVd<J^K-f{Fg(Fw|(36q|s=8tj{_3?9`
zXK(_&xs6c32lQYc0`Xg9K<a%>`@I9L<d2r^w$!VKlDEM05Y=|^zdZiQ1p?Hdqt2;X
z0aA#I6CetPpW#7ls1U@XGc9@;4uMV|B|^E3^q)0yfsYGlUP^d;f!`A#0I<sVfEs!C
z$UAxEKdD{aXxIn{x}BmWd9dA}lrAjsov(gZv|Y3gHspuzUOc-VPK)sw|3HAeK~~^0
z*UiFLA&;3cljUIoOToGOUYAp@vBvBktSx6|`7($qY%P34uld^4@Vmc~Vqp9gC<#JL
z?|=eA$O-rfg_vPu>0BurX`mvW6udWzIi49h<q3^|4OW`H;Zfguzk8;|JRCQ*%qyau
zrYPQKDB5S<d3bjWd3R~Lj<~vfcAs4O{JNZ5?r+7no5~fYXB#joc=z2W&5;!+GbyOK
zCa5H4{0~v5vsrk(@yFGDe}RIt<}3t+nzpKHc;-)){|idgc{_3WI>cU$*OGP0O%0!#
zvT4IfiLBga^YEdSo^R`a6?|FXnp9|#;RF{YKT;Uhw$_^$L5zqQNhr@^KXBIE>QO*1
z<A6L5WHg+RZPF$N{Fi2EQIo*{+P~ApP)ikrt4vzpDc4XN5v?29|EB}DDYH*wc>izm
zO?b#{a36l>PXbU7LePZ~pxPj4*sO~}wYBGDVUT*gQEINl0NYCUeC(!Rr&GLG4+3ki
zy0>=`Kn3X(HNsSIW3%h_iA@D8uhaE=6r6pFhb?CKL`m<=`-KU1%U0E+`R+BHMi0i}
ztHH69OZ&HSuQ7G!`*B9=`NuIgk_G@>=3s@F<uNsO8tX>Z3iqFIDUQDVD{UM42r6}D
zRIe48CVNjdBp)>=&xSB8&pe|YsO0B#D%GWV8^ZCl!U<Y@lyK8W<s%;^W_ptuels`@
z7X(G*xyulFvB_|K+}$Gh6R``KW0=pQ3Y=`ZIVHMK4m~??sGwnuYyURp_rOE7aT0>O
z<;e!O1?-rhU0nsZ@jkAA;@^NnJGX5YPbOS+L{R7en%}Zu8u!y~!pNzDkKe^{@IB!E
zNT~f#coMU)<G22hq@T6JXDH#=Z(Z+a86XACJKZ6uRJ5n(@ai2f-g#eeg|bvJO&3(C
zW6DdN?`~2@OH;-5oM15J8mQ1g{z9>0_wDUdDCeKGV%ZfdcQKI^6>}2?SNX28aCdr%
zzm2>LE_~+<f%r$&B%Eux0FrU}xce<}E$ow6Q)MWW<_XF_1z6=FaoGG4a#YYk#DE;5
ziUPsjXKqDG;C+4UX|dZK%2EYED(JuvV1VRMKJ<dwOrB7*AMac3vBC*kPB>*L3f9-)
zo6i@N{X1NJ`S#Eh(F`8ZKs&$wO>C!v^C-UNaIYLsqvpltZRIv-1e09@E?ez|xZ}K1
z*L&$%>npRjS1e~5s+(TblD_(JHUldAU!3L~0T?z#-HK45va%w5#~UN)L{U?Eb*oq)
z0#JV<A%r$qTt7wKjMTBY>^~(#bhC*uRLVc@ZKA^J3@?klyg%C_$!CGh>5hgtm7da$
zTz42@vGx_e6$ya{3`&A28-qGogZq0rWVNr2)<Tu}$rTWv7clv(hvX<TQC9Cz^xzW)
zeu8u{bKB%m6<u4^>i!G}q0hChzYL^JWZma(j)3-f*k~P)T$M^h)E6|JZ2DJIIA@a4
zINXNZ)M`QM3mKogY0?FDoZ&dt`hH9x)@1EHYx4h6V?C)v+<#cVg3rz{`&-6Mr9hx#
z5{$6V=;Ypt{v!77giK{jrz{W>h10T$=f5%^F5S6&w6XqYTqx{+exo^<4IN98D_Q_z
z>EI{4MH4@L%wT;?lgaJ4{qH2iiyKd_bFPJn|3gjxD--BHLuX#yQT&11Y6dlqvdApq
zgi~g$SShSZ8?cJGn2`U|K~F34wKSVR?9UGgjj0Cyrwx$!--ninOQ^X$Lt^ef0!Gwl
ze0XJvT17dqm#RqUR2~)ovC^itVLgYwRN*9hX)ZL#f5vSz-=<k-b^-tAb08L?AS6-X
z4<ibeFe<M%UDg2j)l`bj(~8W~mR{X0+xe$}`2|xK5>|017>$+a$DQ?(sOIe}$uxb{
zC+umtaeUR;aZylEK>KlzEKQ-==G7c0$h%-0pfkO;baxwUQ0STdBcRK8pN{Emgc&yZ
zDN_r#&G~#w2vV{74R`fk`Devd(s>Pt$`Z^%(FU&Ca@aWbBRP44CZeW-kG4atWpTr0
z46`7yNL=h^&KQd@QgGIZ!vBrW3q*v(Fk0}>pT*E|_?NgcxbhOIxz+g9$>I<PKjaTA
z7lRsZ7C&h$l`?i_uTd=zV&?wqq8mKj&idSV#DA4W^rwPx6VU}u70h%l(M1#pA!Q7b
z%x6jw)BqKv_cvf~2f5;oyr%8FaPw{ZR9bg?U$y$BK{q_`XCQzd`ZhC4Lp5%B+!S#)
zP(*%E+CYJdDYf7fGX-kiB%^&LujycHb7{?Py)%$SxG*>Yt7KNPxF1z@TE<Hb`VQLG
zMV`n+&j+4u4Vp;WD34-G&{7RC{e`0m83`XTo_h(MBj)b<g#K`Fu5&cQAw0AW=E$?X
z19}p*+M!&TMl5l)+?|c)i>{7`C1bOxwbPa1!>b7l86JGaOjEeERa;96E2`54`#A7e
zQG&LH{m?c)^u6C}81eA~R`=>l8iMI7zMF6F$ZKluzRGp;PjrDTxW>94NcYG($o-^a
z!|k+grMB*F#x~P+UpNZ)JjV&lRsb03f{4$Sh+LH0uGY!nWux#DIfPcv&!s#Mvb-+a
zxx_x^E*$qkceO@ap=&7rajpNGniuxEiNdFS?BQMs)b^eqkJx7RF46h@zg|#XuuF^%
z!w+1UO&e<<%{(u9<zbA{ZjpGT-YaHN68uwra4&c1h^sr?6C!TF!#iFx&2F8m`SZG{
z9+%_5qS45ULny<1!7Y3XdsVZ-QDeDPc#+h4sUQ5o{d=!N*kH=JZ2~8s8m$NNvvqbY
zb}-t+Wu!fnT+UqLCY=L@H_Y0k(M+D*n>^k5SR0@AFFXk(H%`u~Z!0H+(^I!1!(8sM
zbZLv-u7I?jzK?5D{Y<94S)Q&t8QW=ia1TbhHt#)Zrg#=Ct9RQvv>k<fm_(PU9J|R^
zC$u2Sqkas4%56OQ$PS(SMG5&|b8v%Q+kSUPL>Gq{ZXa{=^2K5GmwQ0VX8YSt>7A}t
z?>~FrAM?I9f{DyB%gq09_vvBx-=cMtR$;Y=p15;;yds(%rq){90$M$?pSed{y6UiV
z^&38V^iv!5$i9rbTssTzHsk5_IHnAoev!rLuL;Vz<+zlgc>OLV$s^VuTi8igbd=R`
zBS-1_^0nWm%4Dm7Ml!U64Q3~Xz2h_75lO~LOEW4iu-Y0LbvhPoUefgB1RfRa`@i_B
z+d{<uRZu-{sQ=H4)jI^k)x4At{$GOg;yM0=)d_dG>dq^hNSR2fZ=HBvRE;kE4`us!
zf&e$dsXp5jJYU<Z@y`kbLK$mOTUXo@72UTvmR3f$#xXvjS!-*GbuY7WInO?E_i(R_
zFEqnskrftj6=MFP`kcPAz~E|2X^RHh#q>0(KNJU9uQWJDk|zmV0S@Yo??jbyW_7$-
zRBBo|%}9K3?(c#)27gb20X7EO8M+*T`@h^#9=7EafET><)AXN7aMpKO-FJC)>tfTF
z@mj!72Nbl-1gTtxzGY5Hv9oBw-mm+-lz_&~cEx;ZlWqr03SP<K9LN`VG7jR%9RU51
zClAZ-$1FsIV3hYIp*IYcC7nBW0!tp=Dd0Enr#B*la3<Y@R8mqbO@;NCfc=OnNu*Q)
z{r|<r&z0@i90At94+<v@q<jh~*g?4o#NYiLkf8+)wO8z!0uI|a*LCL#n3A!p-KXXF
zY}7YlUv9irkFJkf{ucg_C~1>N{|!lhDK4fY761JBg|Nb+H4?E;;qv)ynJo}xuekYk
z<>T015P%<2w4jyXqC)LI&hx{kA4G8IzHsA)od1W4((H8@-P@D_!YLE2Yl15Q&Cd)=
zhi98V-)EXuo%@m`)9ugVchfr+sei)U(Z#={V$dH8Vrmh_zjBHHZ<JhPU6)-^G-sN6
ziw%b^{R!1rZQdHNPvYzEnCA|UHollYVQJOszg=VzNIW5&w3mMvuAd(Ehe2@u_f7Hd
z)6tDOpx?$RLzv_>%D30GC${|arKDykQkj%_4$>y9I%~Jst1>@Te-N~)s?M53s7<vs
ztO{@*M=1P*V~Ro<j6#aW>4?_FPl+s5z{pV`A6N4e2{^RybqP^J$*LbTY_VDeOBF2}
z#3(-BGT1V=^q5m=Rnj+i{{rQ_KXw$nkN8cB%KxVv(?l%_Ls&v(A^(*lfB*p53mLWx
z`ag?BN)Bzctt+f=rAOm$2Rl$;s=uWH=bU5bhfF64HIP3gzD`t3&AQpnT_3Lq34aFD
zs!AI#HWn;*%$gsatu~fEr#;tzdYWJQAf`wZOT`NnOO>e;B_HL4g$oqroT7C(wuh=>
zs%NBc$C@M?9h6f$%UtUBX#W4^eNZ=yWyK-12|4zHTca3dDwdzr+eamHtyc@d&p{>%
zTyP{LB%T{%Y+~ZmbpNH4*c+}rV|Q_01E%P&Os4EWx4cxxNzZ`U+umTkEDoGsS2wU)
z{t*99Wp4qNN6$2j-Z&I5THK1eQ{0MsDGtTGxJ!}ZTBNwUyA&_(P~4%oQ?xi|Z`$X1
z-|s))IoI`vWjC3~CYj7kGMPJTA8Y!(<+Ny<I~pW#kii_#g#8b4Ivk&8F5n>A!9T#i
zPYpOwAlzTS5n(mT-xRO)p0gMcf}=<dKrxR78~C;38M8Nuvj~&6G0m8FH|>{tR=*@8
zEIGcLe9Fvg7PhpmTvpikNyBy@Op%P9foUEo3(}dD-yk}!8_T(5vRxJ3RwzI*q{I9i
zB72dkW%e1SD&(X+KKPeU;%2_qW=C94o&zh~f`RlrjRO&Ng$P@ZgH61}Rw1j0>S~Hp
z@)5gfko89<-B*tSi;xI#P*$}J>*7qgrI9xf8}ipo#Z!pBc}4R-HnAp&A7gIGe~s$4
zg}8mauj{s6PI3?cI<nVt&1V%IwbkHpLIU5*L}A?YBiG6dwI=SnU*n597p`$Uw;~B`
z<*$uwHbFQa8b^jw5*^~~EPJ;QGhbhQaP{x8D7X0Oh21jPGNEeK1i|;Zz_nUCM*Vy7
z-rWLh-+|U-XOhAv^ZCskh}a1y$N{NiWrFz`{Kd>d7V~PJ`q}K}6wMzd9@-`TX^{_T
zZd9~Ka?&<UgU6gH>6?y^)9sMoTleFt34iacXDrHT7HPcDCp-JW;8ZDc7)jipM8HRS
zyooZ3<X1Z(Alu|(8hIf5<s1aVrWcw=YfM{H;_kN?e-)4W(Z==TqreF^?$0$?PWJ}M
zk6gae7)riI?~(~F7kpl86iwcfja)7nPrPt^4gW6rZF)84J$_ZBUrNqLE|WHj+!YmK
zA7K%O+i1Lf7W&03uJV-*+Z}AR4!h{`#i#`D6g-@oqM~vAAM4C)Y$}brT8wx7?ua0e
zy29q2W*cE>EMwDeP!?>n)40SGgJTKP^xD`7#H;T_b5_*LsFZgaZF=SvT>G;ZmAiRS
zkNi&ymYZHNLq*@lm!f)CHzmYbzb4TP4`agmpoM3eEDhWG$tklNz983itHDD>pFuG0
zHQ<f9(f+&4{yS)MO*ZzC#lI7!ngYLuQ#*kr>HJ(jQjbypZXx`<#m1`hd8+NmPft&q
z3rW(snMLev#4<-d{S>EAB@N8NMHWpK5wvIl^W=MqfEa*x<}y9Dqg}1Jv(UVk0{Euc
zq7^SNBbVDwSSr(&gc15YkXoU)T5a+*E=G-}C&-?%bFBThI>1;Pv$$H12tgNEjae{D
zpe3}=N~yWy$Y<F)@144k88p_i9z}vH<*C`Q7hgky5Wto1xZ(WMhK`ND9+30%r2lWr
zKp^lE;$Jsi_%FA8PLN<W_=!D|mCQae6%Q%^0vaBzJm6ZU#xcaumh6k9?2DHnVq~!c
zM%Ai7nYN=h2P;#neeMFW{rXM85YQHzK64^4unMq)6K(Ajc#SY$ORH6Qu4jt5iuEnk
z6IRf_{T|pqCF92UUgO*n^g!N@ead)(c6J4Dg%_AFVE(P)v*!hH|G@e`YxgIGBCyoD
z*!0@X);wJ=>kaj@wMbuMJCHjw%b$h-eIROgfAcSA`kzIDLq6VU5Fj7mWP8HOo#AuZ
z1f(K=4i?Q|ZS&=hg#yTz;@U^usKR{HHuA_b@^aYq`FR=@0hZ^dM?1_;z1=*8-l?>y
zXw*oNLfMQDq^)or!aI#o5aP*&>I(AcuU=1^nKo6#<_Pn!)fiQ5Sp|g!DF{i5$toAq
zkI<+q7QLHRZx&a<Z<AP5_`ZE0vt)|<a)l9+?vE&;3yvu*l+apZ5{@$xpLXnm#uiId
z?6vND@B+T2(D*6g0b9MVx)2)V07(h@FbV=`{%M;TgahD76qi|q1l0n6pjt)2Li}T>
zJ3TU>7k2fC|3CVIq~)yw>7OG0FYlSf|Ci1}aIEk-%L}gOCFlSCKKS2fB>z9r|77wx
zF1i)x7lZUIMhHmu`yQVjW3f2*2E}{7XxZQ-lDJxM(*WNY_J)O(&?04G>0-)*&8eLu
zLt$eUXYX9x@`lAA3d=*F5EGOBp8~;8pMPIW?ek)Tq?lK?Wm-;&M0Nzj)1*~u#s7@*
zm+XJ12m9}z{-;|N$$*--4;1a&3OtNN>_Gj=Jw2updpg6O%)y|Y5@qwmotVLL^{(UZ
z=<&*h;GXdltL+IVfAu;C{e(0pS2-siB^iOvgPcH{&l6IF%pgXp!rWL&N|aYmZ}2uy
za9R0jgL;ibx;opUNgooCOqP11eq*IIrC=eQ51##hqZA)qi^^9ZBj$hVu5S?ke+~yU
z%HDrs|9SdIQ2yH=e__A&#r}!?=Xsp;XGQZ*7$C}7%|`+V&;vT`UzpG1?Prw##E<{S
zi>8SL3krDk58xCZ4<y9-51T@Jg9oCX_$Lk?84~oY0s#XmG6s<OK_HHQBEiqbdxNW+
z@(&?iq8g(T0ud(O#F{P3qS3AyF#8o1tYZ<<&R7NYCT^6WhIP?C=~JpClig#7ead3@
z!!hQT?>}I<3qyThbLl?pv?pXpiO4{RHoL0Oe+tsuxG8bHLS6Gh28e07OJKo5%?2V7
z5CkTFwJEJ|HEe(D;n=3@4{CA@s~hH*c?pM3$(}L-X8*l=g=Ei6nS|_L_o2=!^PpON
zXsLz*m_-&3N5btrPpTJQl-&VTawQ;%Nd1NptTFkcq7VW7DFXD|JCZY}UtjVM{t-V9
zk<(rGUa8VxO%DP(rQ?j12mJF}qxR=-JS0IvnT6i~bdyN2Do!m$Q%Fh2U{YIr1g8B~
zizt{JT=mwAYcL=*00gu`G6o3%0dX-DFrmr#z|tU*oQ&)R00S@Y0G*X@_I6-WQj&(4
z7zI#TFyMgN!U9RbqJ)jDMo7uQ5KySWKEIWQ7Xow$2MO{~5dK%vsKNvTTC(e>r~X8s
zoWHL5Uq}1`NNy|)0x@F&axduG(0+Y(d5MFje;{@E@5LdtsAI{L$_J$BLGb_nff*MG
zmRAjWd>L?TfQtpH4;|%li3{tId*l`F^v#_Mgicv&U7z->41BbQa(;B~2MI~zAGCnU
zpaY34zqV==AKb!0G$k;Y6u{Fu5?cWn3|0>g1WSU!z|0x_=i!FdXU+SM_+2kzO2ZfQ
zj=nz=2^g_2!SUc4MAhLQO0DYpvs))DZd_tX#pKpM4-p^hMWDCqt?@bkAuRCX3w(id
z{c+&hgRgJ@b_ws?GqFnkNeN)>xr{|%$tq-uD4~n!=!BTW@h$dQPhg_u-XhTE{iqWS
z;RB!oJXm~QiGgtnMpYbXHUJa_+S&ce1dMyI5;6w;3jhSLOqTsh6&V16dGyz+UP$qg
z2rzoau6yAC{GPP_Uh()19QGRlj-ZfwIY0hq%+TXo(gQ;Qj7>Mr6;~oJWgkF4Y6sRd
z;=amZ0Z)Ud7{NMBHbYJmVA8YO9RMh64UJ2CUkH6hNNWTm<uH7C4gy#VV&DK%D<mTj
z34kz1Fj1w3Pjdeo5uRd)4@RZqI+#>WS#>u6)$C_^ZSWGaExh9NKcPh7ZtzM~7-(rO
z5;_=;0>+JLA`dt_xT>$o$-w3Q(`=w7gy121ecKGF)AX!<EkOV#Xq+j}lfB8`W^(UT
zVg87(&RNUf(T3w#>ZQiV8ZjzB))5njXX1571d9hW;2#*ff=1v502K8Hp_%`1K$5>G
zm;M{kOXso^^{U<)E(IHmBXH$3X!7EerOnIgW;87g!&!Q94WGTF`&<Hnz17hXLP`gb
z`RCA~3qomBic_$GKZTU=p@kvEtranmG3&lF1NeaLI|YD#BmmIyjZS7EvQ&(3HYcVy
zOz6TmJ0Z127qct?9I6I@1bqPT7auXT1v$J(W?=+%C;$Wj!v`RLAp3>8S7srpIN{Yy
zHHack>O4eC8ek$Zz&Hkm>I5(r0Urb?y1I{n3`=op`>?`C8R$sDr$KSr%)*g*8AcHI
zCy2FE7yzlDcd8q1#V5PoXC=^B&%Fb_IYBt${S7o`c|H4rfx8bb*!vOW<N6E&=oEPg
z&{=~6&$lm1&krDQzwaGH2WjD3{#K-&W*9Tj)~8p$5KcBoq^;3%Z<byo{4vn|#Fyb|
z=f_H)``ZF<Yy3WU(`T9jfhRHhaLSiV;iAuPvF*{})kZ!{ra8vLqd(hr$?jQfg$%jP
zpVE`TzLS2>;>w*(4T)C>@fCJ;Ry#L%$z%Yd(oc041{vCa72O8=E1%=Dl5uL*B@>Vw
zZcOP9!X0;bORr9?RfA1PWDQ>Y-hki>4nldBTzXLL80bJfeo^kb&sh7Y%L{`#A|T<p
zy2N7<j<n&)*Hd(LYeo#)7Ywg+8bIc3XyDB$sXsc1fj#@7(Bi#7^PaZqJf2%?yB6w!
z!NLd28K=L!_55i4uYlrzSg`6j?SDmdq=YRazZS?!yd4BtuHqW(c(iBimIbNZx516p
z{7Kh=JRanS-}nt8a~Wdy$_JQZWI}_CpW_PO{prd7D)4{t`b?dBQ-S^num3Z;ZC8NE
z^YK0+A3tA}ZReFSB8XD--lk%m8foqve>J8q>nG(9z!c`cmMW%RHFO2e_$&BD<%@mg
zY3aD0lM$w>>3o_zQFLW^Woy$Rk<@?|p=~pOiM1k4DY9}~C2;KSk(h2_!*uT8+c0+b
z=?VMz$*UmGv~3IuVl836%@ud9k1us@X9g|i;S~K#yUsKLk@3JTB%VDg-&^OEUzxim
z)0}#BFu&#=z4fCoygYtv^sIUxBG~N`9#MtGoS;0M{tggONXU8Z=!RN;#NB$80WXxQ
zxYIr(Mfd(d<ka^^kgXT7TIOuh`E>PeJ*U$szkB#6msn0+B$9zZD7d?LI?DVIWaPm5
z>{?z}I-1g|C&;q*&V}`}rwxKtX{A1oKbXAz5Iurv2(~}mNvUg_^af5eG!Qc_W<0e>
zNUR;-3KEyZej4dVsXpk<uz}k=pKy0*-@bTi;Ln&JHWo(XDFBh-r?W$M45SnGVRRvd
z7IA+9;kZne`i_Du#LgA;FxC|1<Kb>#PSV_TtUXi(X{c6n^vu^B$t&LDDc_4C)Av+<
z3A?0^sA$ys!afIc5+CbA8-C*}dK;1|in0~@_LV?g?}q~AxnH`br>`{*XeL$sp~^Rf
z8%%{yyT@}I<rNY1;1np4&GtrkT}?W}1|`{fq>`xO5aHs4W6s;&=>J66&kgY9#3h!Q
z!CauDmix{4S{&6=o1Qs)-8F#HcjSGA(6;YMjFH)3jTnZ$-3V`HFOp>rH@*JlXWC4-
zZfV8hm~Y*Ojt1Rdu!*v#0vgZ;BxxRmy(^)%{0;q84EyELm4$8uKTh)Xu&0w~Nl0rT
zrXC_Zy*yh<N;y7CJq(z7(;h=7f$w2UdG}F3L^1+_$Kp)iJ+yn~W=;AL_MwHmih@NN
z7LqKguXEJ%i)&HPJd8q<;>#XYT1!YRsjV()4f*~#e6cLVOlXSVdFz9Vg63KhqOtuE
zP)ss$GtJ8#m!Gwd6$eUGdF+tSqIWVFwvvEPDPN3x<+#2d4{OxomfmKRvrknKt{A$4
zp2|JX3Egu}Y^f`a8A@svf{R*qyI|CbVGug9(#j&pQWlxU9De`(WFqVhsv{?@>7b2h
zdw_1<TG4xl3^%hH_Ye>3)`{}NUx(h-aK+xE*uk}JVz0U>r$S#YPEa_}h>gg%9KvF@
zT6%XnPK=aNi_=Z`qD~n8_<jog{jv9#<K94=LRbe>cWb+cN&+|9wa-oa>d#489u{Ac
z=ytR0W4L1^@7H^|{w=Z)j_%b(_FBCO-8u!xLpTGs5@8Q|z#%Z}Ulwg{P&2$M-I@p(
zvW7ftt*J_vi(U9JeYmqWS0C%-HLEmnLQ%t=H5y0h?M0ooJ?joh?J&Oa=`H6*;9Rzo
zKNE#&by!Hzv==8k?n3Cql~G`mvU;Drc(aQ$oD~#mRC`kR(P4>E0@4muBa*wM2Sm^}
ztYZSi@t)x|{kXQ)heX|#$NQaDaok9h2X&ISj~vl-{$5XGt(UDQH{7i-?Ate!Ppenj
z1Vk9($8eK;_HQe?lojIbA?KHBHbQ<*;Q8*8RuJmre<?R^tz@5q=AMeg#FAKKLR(_>
z%5XVY3EuXTIhpn9-7{fPqZ`VPh5M@BJlEd?U9+*{=_F48eJVwep|IkhukE0?MMc7*
zOmEE3j<wbHRz9Y0egRgZ2ggpJo;kTiWNrF)2|y;k$dEGhUQKG^@rHgxLY}B2B28?;
zABbgYW#x9H(8P5*WXvbrs8Hwf{Te~<$V!q<Lq;^ZWTuwm^P7o=st<n1pz_E|tF{53
zsB&kMoAEHJW@{@6c>#49#gQ*Jdm$C7pSvp|6csRS@izFBWp*is$bm0a{;oh~Zi|$o
zAiYg50ZC_5O``JERu@}?m=D1q%3D$KH=bs;Tl2ONp#i2Q8PibF=byf8waPI5oLo#o
zZEC@)SF5(b<X?s}C32YE{-u^1lD$)CilX(vMx($>++the%ejS7E?vH<ser^BN$j%y
z)O;f2kWOqe^s@-DnLf3oTCp$_>F|r$a`hWh;kin@QY26Y487&IG8dHapXMK(?~S8I
zrGZ1kAw)#BhxTCPs1rgF4Is7CHO$m*y60m%&2nzlpy#535qCE0`;{~VNJ(CB9A9?V
ze=Z~w$R`Y6Bf>FZ#ObXN&)!X(;1zzL=v~j-3R)<mE`E<Vz49~LrZ}{*&^^pi_7~08
zMCc2f%eq0Mb@mgC?$O!Gt2SM8Qb)q{hZw>X;D~+A=$UOg?CPBEli(}E_=uW9i$!Xe
zR#yy4V)1o|m@EWrZ;B?ytmE^l!lsT^KM3SihWBbqX0q`9pE)k?QUm={@q786e)Bqu
zq|o9l$8^%;GOm1iIpfcLkQ^qaTBzJd7EjMaINew?h28#3)-d>pGsJk6BK|3M?(PIK
zYnWoy`0~@c=z9xd!FfmdIqh<OJs70^+#<5Ma66g-$s@R7%sZE??|6mKnqPI~^=MjZ
zYgo-@W#F@ZBcfovpJHRoC1@)2DUVmx6_4k@g$g<qAYa~5(qMBEgMw{V!W68Y7^!U%
zr|*hi(WV?=pp<Jul1_5<w8OSWP-`hKoixWlRq~^ijA>*_bf$5X+_F5GfYEq^>8vb4
z(*6>f5cX*=J49poL$WZbb;A>3e#g6U_YP%9d=zchU-N^iUU4*PKk51#@+s-4;zs*f
zX88!W4{C*QE}QI{BBC6B%II94R~^$gc4dlt7IUGZwej&2tUEm141<U!3^TFbEB`Qu
zPuS-dj2ldLRg_~I*0iCn9d-BQwZ8a5-#&M!re$@Rvik5-;nToZ!xYZA(f!Iv#^$4{
zS%Eu3+i}t$LI?#zy)5B}%B(lC<Xq^JLUb>Q_`ZIh(Fk}iLR6K#7D?XeZ!VZ4t>Lcf
z4?>41%}%1Xx0MKI>Y)~oeLvqNCBKN6ayOVJ@`c0bHo$--!Vh2cyUl3xTDA;h^E$B_
zp<}<k1cB4A9aZYlwadaQ)3jKBBs(trEqDhfu^^i4LIWa6@+uvHk9`|sv+WrPhzOAf
zH^RHdqYb6!UoA6*i0+W(F~%&eFeLnnQhWiEdf}OBJIjS3%CFbwydF{BPY`~(pO^`N
z?NQ_$ZmF7<589G>eX%qF`!~kytd;j76pg^ipfDoj9Zcj@`SyCUG7U^xL$Gt9-7jfq
zW9i~(>)w`hT{vH%L^j6Ogq5T;2NfhVM5P@i^hU{pNZ^saT#4icP_x5^bzuP34n1n2
zvY(233>+Hy{_K%0=>`uQRbH*f*CY_XJEcJQQu<ExP&{L&E0*GsIdbe$%(_-~eK*JS
z2Wvjj7c(B&rS<WN{tvE>slQASoW1SboCvvxCJ44hV&e7nTJ&aa9)F(Fpdkg2|4`RH
zANpxj{aJ6OMze$~xy-p>@c=b2hebp_&P64@<kI9Wd?4YV>>$W4Il-w*jM8*b>xWcc
zgp+_6Zk~7M;LYgPuifj-i^KbM`?J1jM@~I@wSy7PldBJ<q6Vj=`P%ydzbBDphn%%v
z6IF~=nB<8Rlh(YvfP;5`fC!4G!vR)wxII$ITQD0UwEXF^bfwZvZsTUXWnJ}U6D2at
zd~f9C<;O;u7%R$cI*-iwlJaYA45VgKju;nLmj(Oxt1|Sce<OX%`TFX_v;jvY4yK?#
zAakybL>Prc{dK;8sOk>^_eud#ZBqev1wkx^2MSf;QJ^(!R~tO?=VZrJ9wJ8yZn5(Q
zbq~77mVJpFa}N(X<?T(%3QvxDK~#&SpB&>pl@@e=s%8qVB$(BMW27HpI;e+wNt}8^
zpgGm+2$x#}%N`hjJZ_$^jRuj`-cHX?t?m6z2v$;v5(TLcd95*>`16<0SoX<-iS^=-
z3+2SUmnO~rgD-#T>qZuwZ=K#cdOZF*Tfi$!j)V;iVHl%V-Q?g%k~KZ=v9DX{;0%q8
zGjUUT?=<OLiqk8y;_x)Ph&F`pyMX{A#T8~rC80^y=g~!bt)axR%*?Q8$3M%W8XZ}*
z8MS4<(&UX>;HJR^=puVH{3P=twyXzn$ikHc#~ZJ@$am<2`1pC-8;!`%DfQo^Fnt9O
zo#NubJVRP_ji$ng#iZa=tmcmwPxesVQ)0<c68px1^t&CuAUru1mHAg3V^uEeS=0^p
zn&qQ{t`-7?ouQ4(Jx)jVl*7wF=DLNWnGUScr#dEJBsez+5-2>Ik&%4efKiIUQk_Je
ztR|d2_qPSd{Lc;Bf#>zpJeV$@2ZgxCw46tqwvCQp_+(2dK4skLdq-t+!!%U%w?)Lg
za6uA%R0XCxI0><W<=}DgP1B~{tzpMGbu^K4=Eg4Bp1!Hr{3DDhPn!-h&x);mad6c(
zX$>mTD+qLiS1?$}gisiW_;5I=dS!1e@z^aUO2tb!A%yC97g+J$z*1s!q5!5$zU))Z
zFJq%)zNjcFD@~41{9t2dWvQv$4w>Y((Ws9Yk+lhMzu2D~``F=(jCbtI8ehzpo!um`
z!(ld+s}c6zdckRTDo-m)*XtG;UfkMyB95Vc!K9fme*|>sCOf=4km}aVpiU9y4z<PO
zCNGg<YNd3kXhjJ-$HVRGsYJ}LD}dJSlNntZY&iAm+yx^@NZ%IvWkBx-J6AtQC8ZFt
zeCm?MowlM+dZ+c9%WVQxscl}KeSNdhf`U(V^RAihj@N}u<;av_BR|isbzwxlsQbwv
zBSnO><SwxBgpZf3&Wx^*#_{qrQ)^EbtLUj6^Ig^#3+GUdXx3VYicOS@7BCuNzGHVp
z0?zIG#u>a?;vXHH_&F{-)h{MAIq+*_y6=~eq=0z22BOy63oh#l2o(Q7q{&5|&F?=D
zKo<=)X)u0gyvr8WS&IsWmE3&3g)1gq2Y>+vxH^zok_1_7b?+$Es8uZ@-W!=|m4AHG
z`rV9H!Ln*Ww$_;w@qXrjRuo^))WAgF7^>327P4;13gO=#p;njG7EzYg%)fi8u(1l^
z1FT2MqX7n*!uHFwX0=369feHR6})8wQmC>Sl4976>?-uf9N}dUf~Jz}04ngo`3+Zg
z_d_o0A4>!9yR8i^O>OL%wFuHupYBHY&kkI%cnsd@Q5UkmG3xlxNiWJ7G_-;E`K^gf
zFIz(;CdF+Gl9jlD)Z5U(%@=vnX+zuoes4=0Uf-T>t?zFi|J>U;GBiC|+l2=C{oP#{
z$E8P6Ac+A?ZX-rN<fr}Z2l_A1`OAL1X>M%VyMWCZD1|Dhi$w~T9i}g}0s)4aBx+&M
zp<LG)d@Y_N-Vnm1`shlPiH)Cg<7&f8Q~AWI%?zJyZTZ6LzbW=V5&v!Z!zRnEOVhq-
zUc(WC#c}@i_3i1wn4o;L&$FaLf2~{SJcBxRmp-u%yt6K%EUk6myOo`zz4Phr{=i5L
zs&327%rqA}Cr3kVJ-XBpVVcfA)}<&3eK_#q1|k1ouYe0z&LnJlW_faP)`r*?2?cpE
z=H}w#pSI%#{%6=iei6%8G<SrJ?b)_<^Ym4u_$p~^AE2B!W0t0)z3k}j|HG(W-5Oqn
zz01Dk?}mzI{f4`@P$#wg1U=K>A0BG1JA)kVBuOvO9XIq8t7lOLFY~iAK2q8?$CLpX
z+-rD8dtN5+%{%~4Y}Lfj;Ub3<Rpc^TkYfSF6WP#g%F)M9-07nUB9jq2fy}3l{=0$K
zfksac%J>JK!88dAx7-zXHyzed@_$U2N&X9I)pG=lQA}vZS3&=8CQOLUu>odX2<|j0
zA7={en}+_%O@Ba5RQEYD*DP?$RT%nh%*qG8RqwrHGqI<bv~k0`NW!m&?w`>59uwVh
zy}V`K9xhy|IU6oqY}yj=vaGj2t?#pO?~r5Zd28LC(f9IT4KhC=>zUr<=n;OVZA}z;
zwU#be(65bbNrrVVO_NtmAjWs3X3Y3T3;iyNSiI<Vq7Idzow8@xIzg2m?#In}B&py*
zQ^Ld)yr<$;X%cb33Pj>H#_f{2%5Ryb&DH^QX}%#%?>%vN<5}0AJrofA0q<C7cK8T=
zTHZ>XD4s=5i?H|tTOjC7g8q`ZBHZJzD9}z+pb!WV<rIYGbFl2oOy2DwVqusfGRJki
zKA1NfhOiVyp7cZ^#LCcjh2~`#zgIq&et?rgJfe#Ue7(N@YJ&zhYFy6eczG3Sw<hlU
zEK{cuZh%6!LlbX?(2<EzhElhZLU-ZT+loN8h6uV5;l4qV_Q-y(!4Y=o*C(rNaaD!Y
zbwn@(ZGf2@bX1djy$IP=SLEc82-yqSkZU6=`xNgXiY};j$!Xt@q+ukvti4MzLG?0=
zd&~HtX4!>pq-61u=3TYDZKTEfLYX}z8npeynF>BP%%@XAG+-UE4Sj0NvTX!3&IbiL
zDyV)yZT*G(OwR+~6;f{rM~4Xc#Z`kB;n{3)oXJ#roAet+IS)O#^yq^l=zGPC3cySv
zETCAn2PxVGsYu!sK@qke%Jg+18lXrns}tBwrp#qTpn=*Hk;htKW=Kig<`e#~4P{TN
zx+mTbck6s#YnXFuq4Iz}y%B+uW6{$HEzqqs_4`U?sIL*vah2#~XAJH*salBzccp98
zmeRz+ENcXEcJRYtdVG=)+Fr>-7)=}mP#Qd4UfgZw{k)}>O+H1Ufh(I-S&^wky%)m}
z=UE*k8oTEv8EbhnaH=w<##dwDx*>nZpktx|?Lew}&pY_6@D2xS6+3)VJzuQIDZ>CY
zE}jTuB;^KMZU;Q?h(+7y<+k{@+LkE)8oMq_ZYqb_54O9N>T>LrE32t>!Xxn!(QuZ&
zU{;i*tMi~mYJ4}aOn8M{A7@Ni8FBX(=^!`2!}ifUW8+1rKw=);J33{1U3vzk#PsUz
zU=sz0&8Ga%MDnVMRSSM1_)<k>IFU?~445zJY@yy$^M6!<WZR(~es3Xd;%ykA`D!-7
z>Ph-r(3=$UGQ~N{3=-)(jOZ}NY@qw&PR}Mxo1q6ykiJDr<L9>yRHNzpXiE;I=dn7^
z7j=TZMFVJ9l#<Jf8@y#IK`SBy2r6zyb0?8@QE%wYyW+y*749NqBSA)dOvc=aKyzLy
zj`S{UUsj>#P#!jTn*hi$ag@l@DP;}p6NIz8e;*5M7=U%G>~F+?J9?Pk9D#u*&3rk?
z-dg>N{>#kgUFwiS1Lqgi@y^Ok&CIfkQWmH_OlYCqKZs~pxm+-1%F>}hH-Nwd1jUjP
zy~Hr3gx`HIdC6EgCBu<4{pV`fhkWyhNtr|gvxedZA2J-){4{gn3xt>~0c7%z^Hor%
zj2vw-0<jEh0j=s0HO=G@jEBDcUW6_iKY~;$z0`=Hm@r~jE2LHn<rYK`o6VP&)3_p~
zHy_IA+|DMq)MgK~st{;7`Fkh}=4lH&QrT(3x^M$R<rN@Av%*85rxCmJIQ!(4F*n-W
zHrq&%ED;U9!Q;L#R{xPFieqVT$bK5s$X+nms5NaT){$4AV+a_qU!_*&r1&*7`o-x-
zs4Tuy);;g{Qc1kR?zV?$oXRImdoK>F^GI+eXHds+baX3ou_~}Suae_lb@_&<mEdYq
z1<SI_xp$fM1f3d+@0VcQT^b(&8;Xk{goCKpho`je)R5&m_yA7k&XH^hMyaK@Rj<AZ
zUap61csi{qu=))=o(|DW>K%rm!`<9nr>Bz^*e%GjYze>0Q4HJyB`nlpD9~htqKN(w
zrhWq(revj#k6rV@Xf=XW{M*zvlBkZD<c-=Mn@_RpqDmIhh2$E;xwh#r*4tWUBZ*;P
z07)yv<{R^F0O;iP`Oz!%dG4ntllM2+cJ}n(HWihSEH~(UGpL_IPxpFz!bzIHQP+7b
zygv&X2$J5kEj)P&nKHh<=Vm8;O1Is|Nk0nd_Bf1$jIHwIt89x1R4!85lm2Mf{{TNW
zX5)>G%wJbM*zl6KtU>XC@mTyuFR}vb&_ko0H_*mPN}xUd0=bn{CI2zF%}}w1RTpJn
zCVU&8Uo39b&s(8vCi`js@?d`Wtb6kuEwA`}{z_-uCJtXz#cOo8ECboN+|e(KnnJHg
zaFo+7P%t2jeMGE`Vx%aeq?Dfb+>(J!u_Oo(Y*I6`bsPZ_n`U<{ma!UqCK_6Fb;n8e
z*__HcBs|A>RsiYTk5l~=3bEi2-(6|+!sKYgqS0h~85mxhT!2*mkV`F?8D3)SdW`B>
z((-zzjQ@NhQaJV!<W`wL+8ZyNbb*i0-l5T(hDg?)`!2uG#kf<B)$AlquAFHL=1CwL
zb=oxsuFgu2ZI65lHNr2-wj0hnR@0c??DKY)v@Z9v>q-rN13XIuOMVm`?}!ACXVBd9
zzh^G&Fm%Ro-T0_1WeXH8UJwM*TOi%4Vn$MafbJmye);0X+8r#L60P{dvw;=;Oyg4|
zbQ+F7AB)@xBODIF0O#@jQk#unu9;!3+)+<pQi7EIfRzdG%bUo3S*K&{baAW5cMDjV
zxYu~Zl*trrDT<>z+JdMpH3jUK3(+drfn<vGIiXys3J~fK;H_%Fp`7A*w1-J^4f4Tp
ziOpLnWk9c!iU($1mt_m$`*?}^vX-4BNM5i61P4>|!0#=F%~@RMy+(Qg>$5GA%tkum
zHgxn6A}Gnqw2Cq_^K?y0DDz_0ApAUT+jMd#4>(!-dI%F{-%R^SHw1I5cjrRm_?JH?
zAI_28Z%m&eB35XYh|fJ0j#GO}-8z<?;~{Ry5zSMEKA&zp^3O#UA4_B7$S$svZ@rGp
zzH_tPec)|=xFV~MIo!Vcc7Ko9x>Oew<$RiV`lSf<lZ!*J^AZ8O_(k~01UCO<R&UKp
zN!}3$p8io_sWn4AibH`D%amp6n4AHZ7QK6A#^EsUm}`m(p`9i}lqKFOC;Ew-!Syyy
z7C)}^-F@vi9DDRCkIhAi_E+-N1OyLtF%%pPHa9Qs7clW@X;(v)cNaX9d5pkOZ;^~h
zLVWM~6H#10mbEiSQS}z!t8qNO%C^kf;u(1l>9tcz<Ky98^q#*qoik=(#h_(EQaYW?
zxVQ-8o!9=*DIFd4<xQLOn^l561+V^zdYB{DmBCtajkKRxTUI9)$0RbzM-055lY0xf
zl+i=<4X_lhxGCsI=E4z#hY~uVqFs8@?T06L;ZjTY%>vSKYR>ma<OHSDTB*J&_%E~|
zNf$ImbOl7pA%0CBN5y{M8AS%$*{XLIBJzgXHZD?Dag7xxSR7gB6Krr3VgR;mT=KMf
zT^X7|pthvbjHp<*OmuKCAZdAaQW5_cp!}hnXJMlZo=VKzmaoe3D97P~DK_K}{8{|`
zu_8hP@3sTEfg*53;O&T;x$a*R6;i9;OI&^r`^GztdK33f;SJ<Kzh`7{Zi+!&Ctp5(
zCj;FaGYNKx#-?P%Xab%;F9&5*Z|P}FLBqm|#!Yp6{4hc#6eGl}k5&h|E$os6k@fWO
zeHuSBPv+Ou21@M(!~6WTnqMWpE+L(qG#=82H853q(Sq|X*L*Zv)2ACR3v2mk=XER;
z@*Lm09Vy`^>{BADypYX~RO`^)71up{O(*$ev^WT#q)Vh(`sFv;85O>o0n9BGuiARq
z5vrD&_qli~(F*@{&<LG*u~ye2>MBdsZ~FSh{f^D}>DuDfr}1y=HP-o_o}JQr@kLq?
zS_Oma2Uc6EUwH*rW%GK};ryY+D2$fa4k#fIdV@>99%#BuqYu%NrF^zN^!}#Y{X!6B
z#AJJM8`&tAf_1(ajn!YYMm+hh+BQsaY8AsxX-=GJoVo{Y$y1ri99x8cW1YPXNg|T{
zM$^-*fjzaXcGQ%Ib30g7HlWE|4b|(?ubw|KJ_@qFDObVl)39wyUuA2BHwo0+d77Nn
zOqIlO*D9|2FnSK2xLW+!7d_t;l&`xVZjxjRxy*SGlY}%xUdyq4F&5=C#I7rTkA*2J
zMc2-ofXmLSz|^g-znou@fx2-^VBnc+g1Yf$iNgH`Cl*y@Bh7_9wC7WMqvQTA2S3~*
zccimW!BT0*pO$IO^27`Prx=s6akFdHp4@dX=GzSpT+;xb0wey&^hBI}Ux@7Nhp&H@
zd|o(Xdc!`Vnzl;WBfVmEnd&Br9)^Br#>uu?Zxe0CD;|zd{$#iME2GXyb*O=xWBO)Q
zt@~V&FGJ*vhn&Gn6D3@sF@M`sH7K-!!E;F1mSE^tC=Qj*lv?DFylw?z1ex=dE!2EV
zM#1FoJ-u(oKW072li=GWLo<y>TcH(Jo~&AXlQb{Nr#mAmO5?aL!q|ziKrRE;7!WVf
zu&PH>_M&JDJ8yO=laRmOuXl1W4i-4j2;aV)Q8RA(a-3wcGr!DkV%35{yprjG9N4(h
z9u$#hA)Ht`U%OxTD`N2Lw1<6q)Gv2JBts%A75x-a9Nf}nw{Rpr3;w}!OBDy<4SNx2
z*bvK0+@STa{EdSu+aJn=7&VsUM|HTvF{=Vw!h^_?WWNi#BfmAh-ZNADNcCa<Ro+Qq
zkWO@M=oihj5ljXek$iBOvL2e871~WulXOGomrf7`eu9M+b#HqDy=MKL4_LS^f4Qea
zQ;zHluRqLGBu2sZs7+Z4$^};H*%Hj!DmP0U%fH3*a&KnSN<9)S5r;Vrc<lgD5KtAs
zq_m#5YlWqey){BMX8wxQl!x5NK>6eNa5KX7XC+8^xMaEd>6+S=q`uJowB;C4s$kku
z5_jzoqahUP{_KUY=(PNbA&CiPZi@MsdICfTw%9bAVZ<5F6BQhHJtiV{iDXLQ{DdDa
zsy2%vIFXHUA6S#DA%0@?mJxj$p|IM=WE~0LvYsd-6Y2X+Pj?p052e{-nSW-#-lF5?
z@}P@oTzR@Nv+-n}3hRhXI_>9zj!4a>-4J!3Oc?VdgB-Qg)&<w9As$y?giuxA;V#f)
zD$5klm^!L%Xv!aCPG#R$+KcMxt@`NkZh(BKJl%NqE>c3HO*#L}h`4CXoCk^alN4+}
zHSgG_R(y{6=h>fg$fwByebMXtZq;{3+5GQ*p=x`+tMZVMvE(c5YL!!f#*Y);Tuivu
zZYV4tPR3SQg4}{&T?yXPfl)VaeB@ZAT7A3KZ<(yQg8Ipk<McaYjYUwYc3k?vuP`?V
zB{>Gm(Q-)xwT99vHcKAD(R64`lr@Z(u?B8^*M2iE)S3??QjGD&jxAMg>#-7KFsK<-
z8Qxa7XlV1(1bSG1s>D{AXF4CU+etM3{x!*Kxlcd?<#>ZLD_Bez)dV;A-t^Zu0hEY`
zt)LlYqkYhe&M3$B)(PWMr=+-(LX=p39W$b(BaUEiVjj!|4=L3C_LDEPxAMT$Ok46&
zPT|=?iKgr_qZd)(fcwNX{fu)3@wy997w>YFu-Z__?@VaU3f49z@)E^vWI)kag3z&z
z$P}MB12r9$H&#h$CzLg7dQ;M+`Jpk{Yx8zr+9E_a2j{ZTIy)u=p8>h5yu@K56*cx7
z5r4*po#o`i<4ob@;CqPd+%yzvYDPuPO`4)hKg5smrA~$Jh)#$G==MvDYU3rc37(Fp
z6R))tHN|!$hB_OZ?^9*5s^<f>c$K0@e^`?#D@D9_;<-JbIa!eo%!&C8`4O`Qmmqm$
zxS^SgHOY)zxZj9bxp4RNyPA^V35+&61Pf%3@F=6|lnFG+eeR?*yaD9&AiAPr`iIBm
zaKSya4H#{#K-^FXIgD%n)`{=+#r_&2pGn?katGsf<{iK=VR323vU~~cgC%;ydIU3*
zLg!5vG^Xo$zdDw!T9&W0<Ma(J5Z8B|#I(VSIh!y#qzOXOmWcN!m5UYX&jg*#3_S;e
zz7#k`ZN=B)$63c8J}<=P+{qXTEsf*LTtB^A)p+eA6fR_kb~1M5H(rhk4<QMS78oge
z=U38{y|3L@x8_Jw`(ik?wy4%#-q=CbB93n1E?@(%8aOPsrm?o8k_y*a5C*FxYq^k!
z@~5K>dI{xnF3RKA@uYh07yjRW{ERQpR<`CyJZW=381`eRiPx2VSK9V?kqR6~aYRgZ
zq()-akXR+|QD!;e`hXI8%l1K25zs}|n7qQW5Ms_SY7_5`thqa(%VM2V=9ty0$)+pM
z+IP3gh;hX~LW7m+Zv;NuO!{lD+ns3`<^ypqWYGDK0MibZRSj*tE{Eg%*8Nc<zBq>b
zG1G4X^KcR#YG3g!@&bM5%h~aakw&irFQ}wn^prvqZoelSf;S;FBAc2MNVO3Y$8f=N
zL4PzEaVx|yckIDiQzKo~g=mPDTbO^R?c8ztYB{zjNi@5qClgbK%mjy}lg%YIpCtAh
zP28bNmrfaWZl{39Ew|Wi1QcnR$!s#Vq=zFDQg~1ye#6z9Djw(@x89GWeEPDAbfdJL
zp_>TI;=UL(YJ>;^+#i}b$rZ06QOF{)cY7^H6~_W=4br<am9hjsns>yir*%{D=!Rby
z<o8IL$=V;G;ME{%(A;2{waIqoRB&Vz$6rX(KGLU#W>_k1?&zx_1<ZVhIj?V|tx{jN
zmOpKSe5SmMIOP}3BK31t@4qsjtHZDD_}72e^8SQzd4UtQqkMI!=#JZdaZEUNnZ(;F
zBcmkf|N8xl!7YxGv!>Y%i$T!_=<sgihIY>EgqJoA1p_(Xznt`#b<W9=I#^ueu_e{j
zW0$>g=wp^aiBL_xNr70ubG2Wlk)`-eDM9$~v|5qe$R+x-`s5pxsbT>#lGzoM!(R2r
z#UB`Uus>reeP|v+rQMT%M`N0U7JnA%UXfD?XnNI(wal@0;0j(-knBIMZcesOFC)r}
z>7=Kv#Lw#gkQrOLrka1{e?8<FZ6I*tT)ShokDsrgVPi9`e-3*ZQ|nWt(Sn*%;<lLT
N#*6#wDzb_1{{azzA4~uM

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/css/override.css b/assets/documentation/1.27.0-rc1/css/override.css
new file mode 100644
index 000000000..f7389b7b3
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/css/override.css
@@ -0,0 +1,3 @@
+.wy-table-responsive table td, .wy-table-responsive table th {
+    white-space: normal;
+}
diff --git a/assets/documentation/1.27.0-rc1/css/theme.css b/assets/documentation/1.27.0-rc1/css/theme.css
new file mode 100644
index 000000000..ad773009b
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/css/theme.css
@@ -0,0 +1,13 @@
+/*
+ * This file is copied from the upstream ReadTheDocs Sphinx
+ * theme. To aid upgradability this file should *not* be edited.
+ * modifications we need should be included in theme_extra.css.
+ *
+ * https://github.com/readthedocs/sphinx_rtd_theme
+ */
+
+ /* sphinx_rtd_theme version 1.2.0 | MIT license */
+html{box-sizing:border-box}*,:after,:before{box-sizing:inherit}article,aside,details,figcaption,figure,footer,header,hgroup,nav,section{display:block}audio,canvas,video{display:inline-block;*display:inline;*zoom:1}[hidden],audio:not([controls]){display:none}*{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}html{font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}blockquote{margin:0}dfn{font-style:italic}ins{background:#ff9;text-decoration:none}ins,mark{color:#000}mark{background:#ff0;font-style:italic;font-weight:700}.rst-content code,.rst-content tt,code,kbd,pre,samp{font-family:monospace,serif;_font-family:courier new,monospace;font-size:1em}pre{white-space:pre}q{quotes:none}q:after,q:before{content:"";content:none}small{font-size:85%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}dl,ol,ul{margin:0;padding:0;list-style:none;list-style-image:none}li{list-style:none}dd{margin:0}img{border:0;-ms-interpolation-mode:bicubic;vertical-align:middle;max-width:100%}svg:not(:root){overflow:hidden}figure,form{margin:0}label{cursor:pointer}button,input,select,textarea{font-size:100%;margin:0;vertical-align:baseline;*vertical-align:middle}button,input{line-height:normal}button,input[type=button],input[type=reset],input[type=submit]{cursor:pointer;-webkit-appearance:button;*overflow:visible}button[disabled],input[disabled]{cursor:default}input[type=search]{-webkit-appearance:textfield;-moz-box-sizing:content-box;-webkit-box-sizing:content-box;box-sizing:content-box}textarea{resize:vertical}table{border-collapse:collapse;border-spacing:0}td{vertical-align:top}.chromeframe{margin:.2em 0;background:#ccc;color:#000;padding:.2em 0}.ir{display:block;border:0;text-indent:-999em;overflow:hidden;background-color:transparent;background-repeat:no-repeat;text-align:left;direction:ltr;*line-height:0}.ir br{display:none}.hidden{display:none!important;visibility:hidden}.visuallyhidden{border:0;clip:rect(0 0 0 0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.visuallyhidden.focusable:active,.visuallyhidden.focusable:focus{clip:auto;height:auto;margin:0;overflow:visible;position:static;width:auto}.invisible{visibility:hidden}.relative{position:relative}big,small{font-size:100%}@media print{body,html,section{background:none!important}*{box-shadow:none!important;text-shadow:none!important;filter:none!important;-ms-filter:none!important}a,a:visited{text-decoration:underline}.ir a:after,a[href^="#"]:after,a[href^="javascript:"]:after{content:""}blockquote,pre{page-break-inside:avoid}thead{display:table-header-group}img,tr{page-break-inside:avoid}img{max-width:100%!important}@page{margin:.5cm}.rst-content .toctree-wrapper>p.caption,h2,h3,p{orphans:3;widows:3}.rst-content .toctree-wrapper>p.caption,h2,h3{page-break-after:avoid}}.btn,.fa:before,.icon:before,.rst-content .admonition,.rst-content .admonition-title:before,.rst-content .admonition-todo,.rst-content .attention,.rst-content .caution,.rst-content .code-block-caption .headerlink:before,.rst-content .danger,.rst-content .eqno .headerlink:before,.rst-content .error,.rst-content .hint,.rst-content .important,.rst-content .note,.rst-content .seealso,.rst-content .tip,.rst-content .warning,.rst-content code.download span:first-child:before,.rst-content dl dt .headerlink:before,.rst-content h1 .headerlink:before,.rst-content h2 .headerlink:before,.rst-content h3 .headerlink:before,.rst-content h4 .headerlink:before,.rst-content h5 .headerlink:before,.rst-content h6 .headerlink:before,.rst-content p.caption .headerlink:before,.rst-content p .headerlink:before,.rst-content table>caption .headerlink:before,.rst-content tt.download span:first-child:before,.wy-alert,.wy-dropdown .caret:before,.wy-inline-validate.wy-inline-validate-danger .wy-input-context:before,.wy-inline-validate.wy-inline-validate-info .wy-input-context:before,.wy-inline-validate.wy-inline-validate-success .wy-input-context:before,.wy-inline-validate.wy-inline-validate-warning .wy-input-context:before,.wy-menu-vertical li.current>a button.toctree-expand:before,.wy-menu-vertical li.on a button.toctree-expand:before,.wy-menu-vertical li button.toctree-expand:before,input[type=color],input[type=date],input[type=datetime-local],input[type=datetime],input[type=email],input[type=month],input[type=number],input[type=password],input[type=search],input[type=tel],input[type=text],input[type=time],input[type=url],input[type=week],select,textarea{-webkit-font-smoothing:antialiased}.clearfix{*zoom:1}.clearfix:after,.clearfix:before{display:table;content:""}.clearfix:after{clear:both}/*!
+ *  Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome
+ *  License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License)
+ */@font-face{font-family:FontAwesome;src:url(fonts/fontawesome-webfont.eot?674f50d287a8c48dc19ba404d20fe713);src:url(fonts/fontawesome-webfont.eot?674f50d287a8c48dc19ba404d20fe713?#iefix&v=4.7.0) format("embedded-opentype"),url(fonts/fontawesome-webfont.woff2?af7ae505a9eed503f8b8e6982036873e) format("woff2"),url(fonts/fontawesome-webfont.woff?fee66e712a8a08eef5805a46892932ad) format("woff"),url(fonts/fontawesome-webfont.ttf?b06871f281fee6b241d60582ae9369b9) format("truetype"),url(fonts/fontawesome-webfont.svg?912ec66d7572ff821749319396470bde#fontawesomeregular) format("svg");font-weight:400;font-style:normal}.fa,.icon,.rst-content .admonition-title,.rst-content .code-block-caption .headerlink,.rst-content .eqno .headerlink,.rst-content code.download span:first-child,.rst-content dl dt .headerlink,.rst-content h1 .headerlink,.rst-content h2 .headerlink,.rst-content h3 .headerlink,.rst-content h4 .headerlink,.rst-content h5 .headerlink,.rst-content h6 .headerlink,.rst-content p.caption .headerlink,.rst-content p .headerlink,.rst-content table>caption .headerlink,.rst-content tt.download span:first-child,.wy-menu-vertical li.current>a button.toctree-expand,.wy-menu-vertical li.on a button.toctree-expand,.wy-menu-vertical li button.toctree-expand{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571em;text-align:center}.fa-ul{padding-left:0;margin-left:2.14286em;list-style-type:none}.fa-ul>li{position:relative}.fa-li{position:absolute;left:-2.14286em;width:2.14286em;top:.14286em;text-align:center}.fa-li.fa-lg{left:-1.85714em}.fa-border{padding:.2em .25em .15em;border:.08em solid #eee;border-radius:.1em}.fa-pull-left{float:left}.fa-pull-right{float:right}.fa-pull-left.icon,.fa.fa-pull-left,.rst-content .code-block-caption .fa-pull-left.headerlink,.rst-content .eqno .fa-pull-left.headerlink,.rst-content .fa-pull-left.admonition-title,.rst-content code.download span.fa-pull-left:first-child,.rst-content dl dt .fa-pull-left.headerlink,.rst-content h1 .fa-pull-left.headerlink,.rst-content h2 .fa-pull-left.headerlink,.rst-content h3 .fa-pull-left.headerlink,.rst-content h4 .fa-pull-left.headerlink,.rst-content h5 .fa-pull-left.headerlink,.rst-content h6 .fa-pull-left.headerlink,.rst-content p .fa-pull-left.headerlink,.rst-content table>caption .fa-pull-left.headerlink,.rst-content tt.download span.fa-pull-left:first-child,.wy-menu-vertical li.current>a button.fa-pull-left.toctree-expand,.wy-menu-vertical li.on a button.fa-pull-left.toctree-expand,.wy-menu-vertical li button.fa-pull-left.toctree-expand{margin-right:.3em}.fa-pull-right.icon,.fa.fa-pull-right,.rst-content .code-block-caption .fa-pull-right.headerlink,.rst-content .eqno .fa-pull-right.headerlink,.rst-content .fa-pull-right.admonition-title,.rst-content code.download span.fa-pull-right:first-child,.rst-content dl dt .fa-pull-right.headerlink,.rst-content h1 .fa-pull-right.headerlink,.rst-content h2 .fa-pull-right.headerlink,.rst-content h3 .fa-pull-right.headerlink,.rst-content h4 .fa-pull-right.headerlink,.rst-content h5 .fa-pull-right.headerlink,.rst-content h6 .fa-pull-right.headerlink,.rst-content p .fa-pull-right.headerlink,.rst-content table>caption .fa-pull-right.headerlink,.rst-content tt.download span.fa-pull-right:first-child,.wy-menu-vertical li.current>a button.fa-pull-right.toctree-expand,.wy-menu-vertical li.on a button.fa-pull-right.toctree-expand,.wy-menu-vertical li button.fa-pull-right.toctree-expand{margin-left:.3em}.pull-right{float:right}.pull-left{float:left}.fa.pull-left,.pull-left.icon,.rst-content .code-block-caption .pull-left.headerlink,.rst-content .eqno .pull-left.headerlink,.rst-content .pull-left.admonition-title,.rst-content code.download span.pull-left:first-child,.rst-content dl dt .pull-left.headerlink,.rst-content h1 .pull-left.headerlink,.rst-content h2 .pull-left.headerlink,.rst-content h3 .pull-left.headerlink,.rst-content h4 .pull-left.headerlink,.rst-content h5 .pull-left.headerlink,.rst-content h6 .pull-left.headerlink,.rst-content p .pull-left.headerlink,.rst-content table>caption .pull-left.headerlink,.rst-content tt.download span.pull-left:first-child,.wy-menu-vertical li.current>a button.pull-left.toctree-expand,.wy-menu-vertical li.on a button.pull-left.toctree-expand,.wy-menu-vertical li button.pull-left.toctree-expand{margin-right:.3em}.fa.pull-right,.pull-right.icon,.rst-content .code-block-caption .pull-right.headerlink,.rst-content .eqno .pull-right.headerlink,.rst-content .pull-right.admonition-title,.rst-content code.download span.pull-right:first-child,.rst-content dl dt .pull-right.headerlink,.rst-content h1 .pull-right.headerlink,.rst-content h2 .pull-right.headerlink,.rst-content h3 .pull-right.headerlink,.rst-content h4 .pull-right.headerlink,.rst-content h5 .pull-right.headerlink,.rst-content h6 .pull-right.headerlink,.rst-content p .pull-right.headerlink,.rst-content table>caption .pull-right.headerlink,.rst-content tt.download span.pull-right:first-child,.wy-menu-vertical li.current>a button.pull-right.toctree-expand,.wy-menu-vertical li.on a button.pull-right.toctree-expand,.wy-menu-vertical li button.pull-right.toctree-expand{margin-left:.3em}.fa-spin{-webkit-animation:fa-spin 2s linear infinite;animation:fa-spin 2s linear infinite}.fa-pulse{-webkit-animation:fa-spin 1s steps(8) infinite;animation:fa-spin 1s steps(8) infinite}@-webkit-keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=1)";-webkit-transform:rotate(90deg);-ms-transform:rotate(90deg);transform:rotate(90deg)}.fa-rotate-180{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2)";-webkit-transform:rotate(180deg);-ms-transform:rotate(180deg);transform:rotate(180deg)}.fa-rotate-270{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=3)";-webkit-transform:rotate(270deg);-ms-transform:rotate(270deg);transform:rotate(270deg)}.fa-flip-horizontal{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=0, mirror=1)";-webkit-transform:scaleX(-1);-ms-transform:scaleX(-1);transform:scaleX(-1)}.fa-flip-vertical{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2, mirror=1)";-webkit-transform:scaleY(-1);-ms-transform:scaleY(-1);transform:scaleY(-1)}:root .fa-flip-horizontal,:root .fa-flip-vertical,:root .fa-rotate-90,:root .fa-rotate-180,:root .fa-rotate-270{filter:none}.fa-stack{position:relative;display:inline-block;width:2em;height:2em;line-height:2em;vertical-align:middle}.fa-stack-1x,.fa-stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:""}.fa-music:before{content:""}.fa-search:before,.icon-search:before{content:""}.fa-envelope-o:before{content:""}.fa-heart:before{content:""}.fa-star:before{content:""}.fa-star-o:before{content:""}.fa-user:before{content:""}.fa-film:before{content:""}.fa-th-large:before{content:""}.fa-th:before{content:""}.fa-th-list:before{content:""}.fa-check:before{content:""}.fa-close:before,.fa-remove:before,.fa-times:before{content:""}.fa-search-plus:before{content:""}.fa-search-minus:before{content:""}.fa-power-off:before{content:""}.fa-signal:before{content:""}.fa-cog:before,.fa-gear:before{content:""}.fa-trash-o:before{content:""}.fa-home:before,.icon-home:before{content:""}.fa-file-o:before{content:""}.fa-clock-o:before{content:""}.fa-road:before{content:""}.fa-download:before,.rst-content code.download span:first-child:before,.rst-content tt.download span:first-child:before{content:""}.fa-arrow-circle-o-down:before{content:""}.fa-arrow-circle-o-up:before{content:""}.fa-inbox:before{content:""}.fa-play-circle-o:before{content:""}.fa-repeat:before,.fa-rotate-right:before{content:""}.fa-refresh:before{content:""}.fa-list-alt:before{content:""}.fa-lock:before{content:""}.fa-flag:before{content:""}.fa-headphones:before{content:""}.fa-volume-off:before{content:""}.fa-volume-down:before{content:""}.fa-volume-up:before{content:""}.fa-qrcode:before{content:""}.fa-barcode:before{content:""}.fa-tag:before{content:""}.fa-tags:before{content:""}.fa-book:before,.icon-book:before{content:""}.fa-bookmark:before{content:""}.fa-print:before{content:""}.fa-camera:before{content:""}.fa-font:before{content:""}.fa-bold:before{content:""}.fa-italic:before{content:""}.fa-text-height:before{content:""}.fa-text-width:before{content:""}.fa-align-left:before{content:""}.fa-align-center:before{content:""}.fa-align-right:before{content:""}.fa-align-justify:before{content:""}.fa-list:before{content:""}.fa-dedent:before,.fa-outdent:before{content:""}.fa-indent:before{content:""}.fa-video-camera:before{content:""}.fa-image:before,.fa-photo:before,.fa-picture-o:before{content:""}.fa-pencil:before{content:""}.fa-map-marker:before{content:""}.fa-adjust:before{content:""}.fa-tint:before{content:""}.fa-edit:before,.fa-pencil-square-o:before{content:""}.fa-share-square-o:before{content:""}.fa-check-square-o:before{content:""}.fa-arrows:before{content:""}.fa-step-backward:before{content:""}.fa-fast-backward:before{content:""}.fa-backward:before{content:""}.fa-play:before{content:""}.fa-pause:before{content:""}.fa-stop:before{content:""}.fa-forward:before{content:""}.fa-fast-forward:before{content:""}.fa-step-forward:before{content:""}.fa-eject:before{content:""}.fa-chevron-left:before{content:""}.fa-chevron-right:before{content:""}.fa-plus-circle:before{content:""}.fa-minus-circle:before{content:""}.fa-times-circle:before,.wy-inline-validate.wy-inline-validate-danger .wy-input-context:before{content:""}.fa-check-circle:before,.wy-inline-validate.wy-inline-validate-success .wy-input-context:before{content:""}.fa-question-circle:before{content:""}.fa-info-circle:before{content:""}.fa-crosshairs:before{content:""}.fa-times-circle-o:before{content:""}.fa-check-circle-o:before{content:""}.fa-ban:before{content:""}.fa-arrow-left:before{content:""}.fa-arrow-right:before{content:""}.fa-arrow-up:before{content:""}.fa-arrow-down:before{content:""}.fa-mail-forward:before,.fa-share:before{content:""}.fa-expand:before{content:""}.fa-compress:before{content:""}.fa-plus:before{content:""}.fa-minus:before{content:""}.fa-asterisk:before{content:""}.fa-exclamation-circle:before,.rst-content .admonition-title:before,.wy-inline-validate.wy-inline-validate-info .wy-input-context:before,.wy-inline-validate.wy-inline-validate-warning .wy-input-context:before{content:""}.fa-gift:before{content:""}.fa-leaf:before{content:""}.fa-fire:before,.icon-fire:before{content:""}.fa-eye:before{content:""}.fa-eye-slash:before{content:""}.fa-exclamation-triangle:before,.fa-warning:before{content:""}.fa-plane:before{content:""}.fa-calendar:before{content:""}.fa-random:before{content:""}.fa-comment:before{content:""}.fa-magnet:before{content:""}.fa-chevron-up:before{content:""}.fa-chevron-down:before{content:""}.fa-retweet:before{content:""}.fa-shopping-cart:before{content:""}.fa-folder:before{content:""}.fa-folder-open:before{content:""}.fa-arrows-v:before{content:""}.fa-arrows-h:before{content:""}.fa-bar-chart-o:before,.fa-bar-chart:before{content:""}.fa-twitter-square:before{content:""}.fa-facebook-square:before{content:""}.fa-camera-retro:before{content:""}.fa-key:before{content:""}.fa-cogs:before,.fa-gears:before{content:""}.fa-comments:before{content:""}.fa-thumbs-o-up:before{content:""}.fa-thumbs-o-down:before{content:""}.fa-star-half:before{content:""}.fa-heart-o:before{content:""}.fa-sign-out:before{content:""}.fa-linkedin-square:before{content:""}.fa-thumb-tack:before{content:""}.fa-external-link:before{content:""}.fa-sign-in:before{content:""}.fa-trophy:before{content:""}.fa-github-square:before{content:""}.fa-upload:before{content:""}.fa-lemon-o:before{content:""}.fa-phone:before{content:""}.fa-square-o:before{content:""}.fa-bookmark-o:before{content:""}.fa-phone-square:before{content:""}.fa-twitter:before{content:""}.fa-facebook-f:before,.fa-facebook:before{content:""}.fa-github:before,.icon-github:before{content:""}.fa-unlock:before{content:""}.fa-credit-card:before{content:""}.fa-feed:before,.fa-rss:before{content:""}.fa-hdd-o:before{content:""}.fa-bullhorn:before{content:""}.fa-bell:before{content:""}.fa-certificate:before{content:""}.fa-hand-o-right:before{content:""}.fa-hand-o-left:before{content:""}.fa-hand-o-up:before{content:""}.fa-hand-o-down:before{content:""}.fa-arrow-circle-left:before,.icon-circle-arrow-left:before{content:""}.fa-arrow-circle-right:before,.icon-circle-arrow-right:before{content:""}.fa-arrow-circle-up:before{content:""}.fa-arrow-circle-down:before{content:""}.fa-globe:before{content:""}.fa-wrench:before{content:""}.fa-tasks:before{content:""}.fa-filter:before{content:""}.fa-briefcase:before{content:""}.fa-arrows-alt:before{content:""}.fa-group:before,.fa-users:before{content:""}.fa-chain:before,.fa-link:before,.icon-link:before{content:""}.fa-cloud:before{content:""}.fa-flask:before{content:""}.fa-cut:before,.fa-scissors:before{content:""}.fa-copy:before,.fa-files-o:before{content:""}.fa-paperclip:before{content:""}.fa-floppy-o:before,.fa-save:before{content:""}.fa-square:before{content:""}.fa-bars:before,.fa-navicon:before,.fa-reorder:before{content:""}.fa-list-ul:before{content:""}.fa-list-ol:before{content:""}.fa-strikethrough:before{content:""}.fa-underline:before{content:""}.fa-table:before{content:""}.fa-magic:before{content:""}.fa-truck:before{content:""}.fa-pinterest:before{content:""}.fa-pinterest-square:before{content:""}.fa-google-plus-square:before{content:""}.fa-google-plus:before{content:""}.fa-money:before{content:""}.fa-caret-down:before,.icon-caret-down:before,.wy-dropdown .caret:before{content:""}.fa-caret-up:before{content:""}.fa-caret-left:before{content:""}.fa-caret-right:before{content:""}.fa-columns:before{content:""}.fa-sort:before,.fa-unsorted:before{content:""}.fa-sort-desc:before,.fa-sort-down:before{content:""}.fa-sort-asc:before,.fa-sort-up:before{content:""}.fa-envelope:before{content:""}.fa-linkedin:before{content:""}.fa-rotate-left:before,.fa-undo:before{content:""}.fa-gavel:before,.fa-legal:before{content:""}.fa-dashboard:before,.fa-tachometer:before{content:""}.fa-comment-o:before{content:""}.fa-comments-o:before{content:""}.fa-bolt:before,.fa-flash:before{content:""}.fa-sitemap:before{content:""}.fa-umbrella:before{content:""}.fa-clipboard:before,.fa-paste:before{content:""}.fa-lightbulb-o:before{content:""}.fa-exchange:before{content:""}.fa-cloud-download:before{content:""}.fa-cloud-upload:before{content:""}.fa-user-md:before{content:""}.fa-stethoscope:before{content:""}.fa-suitcase:before{content:""}.fa-bell-o:before{content:""}.fa-coffee:before{content:""}.fa-cutlery:before{content:""}.fa-file-text-o:before{content:""}.fa-building-o:before{content:""}.fa-hospital-o:before{content:""}.fa-ambulance:before{content:""}.fa-medkit:before{content:""}.fa-fighter-jet:before{content:""}.fa-beer:before{content:""}.fa-h-square:before{content:""}.fa-plus-square:before{content:""}.fa-angle-double-left:before{content:""}.fa-angle-double-right:before{content:""}.fa-angle-double-up:before{content:""}.fa-angle-double-down:before{content:""}.fa-angle-left:before{content:""}.fa-angle-right:before{content:""}.fa-angle-up:before{content:""}.fa-angle-down:before{content:""}.fa-desktop:before{content:""}.fa-laptop:before{content:""}.fa-tablet:before{content:""}.fa-mobile-phone:before,.fa-mobile:before{content:""}.fa-circle-o:before{content:""}.fa-quote-left:before{content:""}.fa-quote-right:before{content:""}.fa-spinner:before{content:""}.fa-circle:before{content:""}.fa-mail-reply:before,.fa-reply:before{content:""}.fa-github-alt:before{content:""}.fa-folder-o:before{content:""}.fa-folder-open-o:before{content:""}.fa-smile-o:before{content:""}.fa-frown-o:before{content:""}.fa-meh-o:before{content:""}.fa-gamepad:before{content:""}.fa-keyboard-o:before{content:""}.fa-flag-o:before{content:""}.fa-flag-checkered:before{content:""}.fa-terminal:before{content:""}.fa-code:before{content:""}.fa-mail-reply-all:before,.fa-reply-all:before{content:""}.fa-star-half-empty:before,.fa-star-half-full:before,.fa-star-half-o:before{content:""}.fa-location-arrow:before{content:""}.fa-crop:before{content:""}.fa-code-fork:before{content:""}.fa-chain-broken:before,.fa-unlink:before{content:""}.fa-question:before{content:""}.fa-info:before{content:""}.fa-exclamation:before{content:""}.fa-superscript:before{content:""}.fa-subscript:before{content:""}.fa-eraser:before{content:""}.fa-puzzle-piece:before{content:""}.fa-microphone:before{content:""}.fa-microphone-slash:before{content:""}.fa-shield:before{content:""}.fa-calendar-o:before{content:""}.fa-fire-extinguisher:before{content:""}.fa-rocket:before{content:""}.fa-maxcdn:before{content:""}.fa-chevron-circle-left:before{content:""}.fa-chevron-circle-right:before{content:""}.fa-chevron-circle-up:before{content:""}.fa-chevron-circle-down:before{content:""}.fa-html5:before{content:""}.fa-css3:before{content:""}.fa-anchor:before{content:""}.fa-unlock-alt:before{content:""}.fa-bullseye:before{content:""}.fa-ellipsis-h:before{content:""}.fa-ellipsis-v:before{content:""}.fa-rss-square:before{content:""}.fa-play-circle:before{content:""}.fa-ticket:before{content:""}.fa-minus-square:before{content:""}.fa-minus-square-o:before,.wy-menu-vertical li.current>a button.toctree-expand:before,.wy-menu-vertical li.on a button.toctree-expand:before{content:""}.fa-level-up:before{content:""}.fa-level-down:before{content:""}.fa-check-square:before{content:""}.fa-pencil-square:before{content:""}.fa-external-link-square:before{content:""}.fa-share-square:before{content:""}.fa-compass:before{content:""}.fa-caret-square-o-down:before,.fa-toggle-down:before{content:""}.fa-caret-square-o-up:before,.fa-toggle-up:before{content:""}.fa-caret-square-o-right:before,.fa-toggle-right:before{content:""}.fa-eur:before,.fa-euro:before{content:""}.fa-gbp:before{content:""}.fa-dollar:before,.fa-usd:before{content:""}.fa-inr:before,.fa-rupee:before{content:""}.fa-cny:before,.fa-jpy:before,.fa-rmb:before,.fa-yen:before{content:""}.fa-rouble:before,.fa-rub:before,.fa-ruble:before{content:""}.fa-krw:before,.fa-won:before{content:""}.fa-bitcoin:before,.fa-btc:before{content:""}.fa-file:before{content:""}.fa-file-text:before{content:""}.fa-sort-alpha-asc:before{content:""}.fa-sort-alpha-desc:before{content:""}.fa-sort-amount-asc:before{content:""}.fa-sort-amount-desc:before{content:""}.fa-sort-numeric-asc:before{content:""}.fa-sort-numeric-desc:before{content:""}.fa-thumbs-up:before{content:""}.fa-thumbs-down:before{content:""}.fa-youtube-square:before{content:""}.fa-youtube:before{content:""}.fa-xing:before{content:""}.fa-xing-square:before{content:""}.fa-youtube-play:before{content:""}.fa-dropbox:before{content:""}.fa-stack-overflow:before{content:""}.fa-instagram:before{content:""}.fa-flickr:before{content:""}.fa-adn:before{content:""}.fa-bitbucket:before,.icon-bitbucket:before{content:""}.fa-bitbucket-square:before{content:""}.fa-tumblr:before{content:""}.fa-tumblr-square:before{content:""}.fa-long-arrow-down:before{content:""}.fa-long-arrow-up:before{content:""}.fa-long-arrow-left:before{content:""}.fa-long-arrow-right:before{content:""}.fa-apple:before{content:""}.fa-windows:before{content:""}.fa-android:before{content:""}.fa-linux:before{content:""}.fa-dribbble:before{content:""}.fa-skype:before{content:""}.fa-foursquare:before{content:""}.fa-trello:before{content:""}.fa-female:before{content:""}.fa-male:before{content:""}.fa-gittip:before,.fa-gratipay:before{content:""}.fa-sun-o:before{content:""}.fa-moon-o:before{content:""}.fa-archive:before{content:""}.fa-bug:before{content:""}.fa-vk:before{content:""}.fa-weibo:before{content:""}.fa-renren:before{content:""}.fa-pagelines:before{content:""}.fa-stack-exchange:before{content:""}.fa-arrow-circle-o-right:before{content:""}.fa-arrow-circle-o-left:before{content:""}.fa-caret-square-o-left:before,.fa-toggle-left:before{content:""}.fa-dot-circle-o:before{content:""}.fa-wheelchair:before{content:""}.fa-vimeo-square:before{content:""}.fa-try:before,.fa-turkish-lira:before{content:""}.fa-plus-square-o:before,.wy-menu-vertical li button.toctree-expand:before{content:""}.fa-space-shuttle:before{content:""}.fa-slack:before{content:""}.fa-envelope-square:before{content:""}.fa-wordpress:before{content:""}.fa-openid:before{content:""}.fa-bank:before,.fa-institution:before,.fa-university:before{content:""}.fa-graduation-cap:before,.fa-mortar-board:before{content:""}.fa-yahoo:before{content:""}.fa-google:before{content:""}.fa-reddit:before{content:""}.fa-reddit-square:before{content:""}.fa-stumbleupon-circle:before{content:""}.fa-stumbleupon:before{content:""}.fa-delicious:before{content:""}.fa-digg:before{content:""}.fa-pied-piper-pp:before{content:""}.fa-pied-piper-alt:before{content:""}.fa-drupal:before{content:""}.fa-joomla:before{content:""}.fa-language:before{content:""}.fa-fax:before{content:""}.fa-building:before{content:""}.fa-child:before{content:""}.fa-paw:before{content:""}.fa-spoon:before{content:""}.fa-cube:before{content:""}.fa-cubes:before{content:""}.fa-behance:before{content:""}.fa-behance-square:before{content:""}.fa-steam:before{content:""}.fa-steam-square:before{content:""}.fa-recycle:before{content:""}.fa-automobile:before,.fa-car:before{content:""}.fa-cab:before,.fa-taxi:before{content:""}.fa-tree:before{content:""}.fa-spotify:before{content:""}.fa-deviantart:before{content:""}.fa-soundcloud:before{content:""}.fa-database:before{content:""}.fa-file-pdf-o:before{content:""}.fa-file-word-o:before{content:""}.fa-file-excel-o:before{content:""}.fa-file-powerpoint-o:before{content:""}.fa-file-image-o:before,.fa-file-photo-o:before,.fa-file-picture-o:before{content:""}.fa-file-archive-o:before,.fa-file-zip-o:before{content:""}.fa-file-audio-o:before,.fa-file-sound-o:before{content:""}.fa-file-movie-o:before,.fa-file-video-o:before{content:""}.fa-file-code-o:before{content:""}.fa-vine:before{content:""}.fa-codepen:before{content:""}.fa-jsfiddle:before{content:""}.fa-life-bouy:before,.fa-life-buoy:before,.fa-life-ring:before,.fa-life-saver:before,.fa-support:before{content:""}.fa-circle-o-notch:before{content:""}.fa-ra:before,.fa-rebel:before,.fa-resistance:before{content:""}.fa-empire:before,.fa-ge:before{content:""}.fa-git-square:before{content:""}.fa-git:before{content:""}.fa-hacker-news:before,.fa-y-combinator-square:before,.fa-yc-square:before{content:""}.fa-tencent-weibo:before{content:""}.fa-qq:before{content:""}.fa-wechat:before,.fa-weixin:before{content:""}.fa-paper-plane:before,.fa-send:before{content:""}.fa-paper-plane-o:before,.fa-send-o:before{content:""}.fa-history:before{content:""}.fa-circle-thin:before{content:""}.fa-header:before{content:""}.fa-paragraph:before{content:""}.fa-sliders:before{content:""}.fa-share-alt:before{content:""}.fa-share-alt-square:before{content:""}.fa-bomb:before{content:""}.fa-futbol-o:before,.fa-soccer-ball-o:before{content:""}.fa-tty:before{content:""}.fa-binoculars:before{content:""}.fa-plug:before{content:""}.fa-slideshare:before{content:""}.fa-twitch:before{content:""}.fa-yelp:before{content:""}.fa-newspaper-o:before{content:""}.fa-wifi:before{content:""}.fa-calculator:before{content:""}.fa-paypal:before{content:""}.fa-google-wallet:before{content:""}.fa-cc-visa:before{content:""}.fa-cc-mastercard:before{content:""}.fa-cc-discover:before{content:""}.fa-cc-amex:before{content:""}.fa-cc-paypal:before{content:""}.fa-cc-stripe:before{content:""}.fa-bell-slash:before{content:""}.fa-bell-slash-o:before{content:""}.fa-trash:before{content:""}.fa-copyright:before{content:""}.fa-at:before{content:""}.fa-eyedropper:before{content:""}.fa-paint-brush:before{content:""}.fa-birthday-cake:before{content:""}.fa-area-chart:before{content:""}.fa-pie-chart:before{content:""}.fa-line-chart:before{content:""}.fa-lastfm:before{content:""}.fa-lastfm-square:before{content:""}.fa-toggle-off:before{content:""}.fa-toggle-on:before{content:""}.fa-bicycle:before{content:""}.fa-bus:before{content:""}.fa-ioxhost:before{content:""}.fa-angellist:before{content:""}.fa-cc:before{content:""}.fa-ils:before,.fa-shekel:before,.fa-sheqel:before{content:""}.fa-meanpath:before{content:""}.fa-buysellads:before{content:""}.fa-connectdevelop:before{content:""}.fa-dashcube:before{content:""}.fa-forumbee:before{content:""}.fa-leanpub:before{content:""}.fa-sellsy:before{content:""}.fa-shirtsinbulk:before{content:""}.fa-simplybuilt:before{content:""}.fa-skyatlas:before{content:""}.fa-cart-plus:before{content:""}.fa-cart-arrow-down:before{content:""}.fa-diamond:before{content:""}.fa-ship:before{content:""}.fa-user-secret:before{content:""}.fa-motorcycle:before{content:""}.fa-street-view:before{content:""}.fa-heartbeat:before{content:""}.fa-venus:before{content:""}.fa-mars:before{content:""}.fa-mercury:before{content:""}.fa-intersex:before,.fa-transgender:before{content:""}.fa-transgender-alt:before{content:""}.fa-venus-double:before{content:""}.fa-mars-double:before{content:""}.fa-venus-mars:before{content:""}.fa-mars-stroke:before{content:""}.fa-mars-stroke-v:before{content:""}.fa-mars-stroke-h:before{content:""}.fa-neuter:before{content:""}.fa-genderless:before{content:""}.fa-facebook-official:before{content:""}.fa-pinterest-p:before{content:""}.fa-whatsapp:before{content:""}.fa-server:before{content:""}.fa-user-plus:before{content:""}.fa-user-times:before{content:""}.fa-bed:before,.fa-hotel:before{content:""}.fa-viacoin:before{content:""}.fa-train:before{content:""}.fa-subway:before{content:""}.fa-medium:before{content:""}.fa-y-combinator:before,.fa-yc:before{content:""}.fa-optin-monster:before{content:""}.fa-opencart:before{content:""}.fa-expeditedssl:before{content:""}.fa-battery-4:before,.fa-battery-full:before,.fa-battery:before{content:""}.fa-battery-3:before,.fa-battery-three-quarters:before{content:""}.fa-battery-2:before,.fa-battery-half:before{content:""}.fa-battery-1:before,.fa-battery-quarter:before{content:""}.fa-battery-0:before,.fa-battery-empty:before{content:""}.fa-mouse-pointer:before{content:""}.fa-i-cursor:before{content:""}.fa-object-group:before{content:""}.fa-object-ungroup:before{content:""}.fa-sticky-note:before{content:""}.fa-sticky-note-o:before{content:""}.fa-cc-jcb:before{content:""}.fa-cc-diners-club:before{content:""}.fa-clone:before{content:""}.fa-balance-scale:before{content:""}.fa-hourglass-o:before{content:""}.fa-hourglass-1:before,.fa-hourglass-start:before{content:""}.fa-hourglass-2:before,.fa-hourglass-half:before{content:""}.fa-hourglass-3:before,.fa-hourglass-end:before{content:""}.fa-hourglass:before{content:""}.fa-hand-grab-o:before,.fa-hand-rock-o:before{content:""}.fa-hand-paper-o:before,.fa-hand-stop-o:before{content:""}.fa-hand-scissors-o:before{content:""}.fa-hand-lizard-o:before{content:""}.fa-hand-spock-o:before{content:""}.fa-hand-pointer-o:before{content:""}.fa-hand-peace-o:before{content:""}.fa-trademark:before{content:""}.fa-registered:before{content:""}.fa-creative-commons:before{content:""}.fa-gg:before{content:""}.fa-gg-circle:before{content:""}.fa-tripadvisor:before{content:""}.fa-odnoklassniki:before{content:""}.fa-odnoklassniki-square:before{content:""}.fa-get-pocket:before{content:""}.fa-wikipedia-w:before{content:""}.fa-safari:before{content:""}.fa-chrome:before{content:""}.fa-firefox:before{content:""}.fa-opera:before{content:""}.fa-internet-explorer:before{content:""}.fa-television:before,.fa-tv:before{content:""}.fa-contao:before{content:""}.fa-500px:before{content:""}.fa-amazon:before{content:""}.fa-calendar-plus-o:before{content:""}.fa-calendar-minus-o:before{content:""}.fa-calendar-times-o:before{content:""}.fa-calendar-check-o:before{content:""}.fa-industry:before{content:""}.fa-map-pin:before{content:""}.fa-map-signs:before{content:""}.fa-map-o:before{content:""}.fa-map:before{content:""}.fa-commenting:before{content:""}.fa-commenting-o:before{content:""}.fa-houzz:before{content:""}.fa-vimeo:before{content:""}.fa-black-tie:before{content:""}.fa-fonticons:before{content:""}.fa-reddit-alien:before{content:""}.fa-edge:before{content:""}.fa-credit-card-alt:before{content:""}.fa-codiepie:before{content:""}.fa-modx:before{content:""}.fa-fort-awesome:before{content:""}.fa-usb:before{content:""}.fa-product-hunt:before{content:""}.fa-mixcloud:before{content:""}.fa-scribd:before{content:""}.fa-pause-circle:before{content:""}.fa-pause-circle-o:before{content:""}.fa-stop-circle:before{content:""}.fa-stop-circle-o:before{content:""}.fa-shopping-bag:before{content:""}.fa-shopping-basket:before{content:""}.fa-hashtag:before{content:""}.fa-bluetooth:before{content:""}.fa-bluetooth-b:before{content:""}.fa-percent:before{content:""}.fa-gitlab:before,.icon-gitlab:before{content:""}.fa-wpbeginner:before{content:""}.fa-wpforms:before{content:""}.fa-envira:before{content:""}.fa-universal-access:before{content:""}.fa-wheelchair-alt:before{content:""}.fa-question-circle-o:before{content:""}.fa-blind:before{content:""}.fa-audio-description:before{content:""}.fa-volume-control-phone:before{content:""}.fa-braille:before{content:""}.fa-assistive-listening-systems:before{content:""}.fa-american-sign-language-interpreting:before,.fa-asl-interpreting:before{content:""}.fa-deaf:before,.fa-deafness:before,.fa-hard-of-hearing:before{content:""}.fa-glide:before{content:""}.fa-glide-g:before{content:""}.fa-sign-language:before,.fa-signing:before{content:""}.fa-low-vision:before{content:""}.fa-viadeo:before{content:""}.fa-viadeo-square:before{content:""}.fa-snapchat:before{content:""}.fa-snapchat-ghost:before{content:""}.fa-snapchat-square:before{content:""}.fa-pied-piper:before{content:""}.fa-first-order:before{content:""}.fa-yoast:before{content:""}.fa-themeisle:before{content:""}.fa-google-plus-circle:before,.fa-google-plus-official:before{content:""}.fa-fa:before,.fa-font-awesome:before{content:""}.fa-handshake-o:before{content:""}.fa-envelope-open:before{content:""}.fa-envelope-open-o:before{content:""}.fa-linode:before{content:""}.fa-address-book:before{content:""}.fa-address-book-o:before{content:""}.fa-address-card:before,.fa-vcard:before{content:""}.fa-address-card-o:before,.fa-vcard-o:before{content:""}.fa-user-circle:before{content:""}.fa-user-circle-o:before{content:""}.fa-user-o:before{content:""}.fa-id-badge:before{content:""}.fa-drivers-license:before,.fa-id-card:before{content:""}.fa-drivers-license-o:before,.fa-id-card-o:before{content:""}.fa-quora:before{content:""}.fa-free-code-camp:before{content:""}.fa-telegram:before{content:""}.fa-thermometer-4:before,.fa-thermometer-full:before,.fa-thermometer:before{content:""}.fa-thermometer-3:before,.fa-thermometer-three-quarters:before{content:""}.fa-thermometer-2:before,.fa-thermometer-half:before{content:""}.fa-thermometer-1:before,.fa-thermometer-quarter:before{content:""}.fa-thermometer-0:before,.fa-thermometer-empty:before{content:""}.fa-shower:before{content:""}.fa-bath:before,.fa-bathtub:before,.fa-s15:before{content:""}.fa-podcast:before{content:""}.fa-window-maximize:before{content:""}.fa-window-minimize:before{content:""}.fa-window-restore:before{content:""}.fa-times-rectangle:before,.fa-window-close:before{content:""}.fa-times-rectangle-o:before,.fa-window-close-o:before{content:""}.fa-bandcamp:before{content:""}.fa-grav:before{content:""}.fa-etsy:before{content:""}.fa-imdb:before{content:""}.fa-ravelry:before{content:""}.fa-eercast:before{content:""}.fa-microchip:before{content:""}.fa-snowflake-o:before{content:""}.fa-superpowers:before{content:""}.fa-wpexplorer:before{content:""}.fa-meetup:before{content:""}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);border:0}.sr-only-focusable:active,.sr-only-focusable:focus{position:static;width:auto;height:auto;margin:0;overflow:visible;clip:auto}.fa,.icon,.rst-content .admonition-title,.rst-content .code-block-caption .headerlink,.rst-content .eqno .headerlink,.rst-content code.download span:first-child,.rst-content dl dt .headerlink,.rst-content h1 .headerlink,.rst-content h2 .headerlink,.rst-content h3 .headerlink,.rst-content h4 .headerlink,.rst-content h5 .headerlink,.rst-content h6 .headerlink,.rst-content p.caption .headerlink,.rst-content p .headerlink,.rst-content table>caption .headerlink,.rst-content tt.download span:first-child,.wy-dropdown .caret,.wy-inline-validate.wy-inline-validate-danger .wy-input-context,.wy-inline-validate.wy-inline-validate-info .wy-input-context,.wy-inline-validate.wy-inline-validate-success .wy-input-context,.wy-inline-validate.wy-inline-validate-warning .wy-input-context,.wy-menu-vertical li.current>a button.toctree-expand,.wy-menu-vertical li.on a button.toctree-expand,.wy-menu-vertical li button.toctree-expand{font-family:inherit}.fa:before,.icon:before,.rst-content .admonition-title:before,.rst-content .code-block-caption .headerlink:before,.rst-content .eqno .headerlink:before,.rst-content code.download span:first-child:before,.rst-content dl dt .headerlink:before,.rst-content h1 .headerlink:before,.rst-content h2 .headerlink:before,.rst-content h3 .headerlink:before,.rst-content h4 .headerlink:before,.rst-content h5 .headerlink:before,.rst-content h6 .headerlink:before,.rst-content p.caption .headerlink:before,.rst-content p .headerlink:before,.rst-content table>caption .headerlink:before,.rst-content tt.download span:first-child:before,.wy-dropdown .caret:before,.wy-inline-validate.wy-inline-validate-danger .wy-input-context:before,.wy-inline-validate.wy-inline-validate-info .wy-input-context:before,.wy-inline-validate.wy-inline-validate-success .wy-input-context:before,.wy-inline-validate.wy-inline-validate-warning .wy-input-context:before,.wy-menu-vertical li.current>a button.toctree-expand:before,.wy-menu-vertical li.on a button.toctree-expand:before,.wy-menu-vertical li button.toctree-expand:before{font-family:FontAwesome;display:inline-block;font-style:normal;font-weight:400;line-height:1;text-decoration:inherit}.rst-content .code-block-caption a .headerlink,.rst-content .eqno a .headerlink,.rst-content a .admonition-title,.rst-content code.download a span:first-child,.rst-content dl dt a .headerlink,.rst-content h1 a .headerlink,.rst-content h2 a .headerlink,.rst-content h3 a .headerlink,.rst-content h4 a .headerlink,.rst-content h5 a .headerlink,.rst-content h6 a .headerlink,.rst-content p.caption a .headerlink,.rst-content p a .headerlink,.rst-content table>caption a .headerlink,.rst-content tt.download a span:first-child,.wy-menu-vertical li.current>a button.toctree-expand,.wy-menu-vertical li.on a button.toctree-expand,.wy-menu-vertical li a button.toctree-expand,a .fa,a .icon,a .rst-content .admonition-title,a .rst-content .code-block-caption .headerlink,a .rst-content .eqno .headerlink,a .rst-content code.download span:first-child,a .rst-content dl dt .headerlink,a .rst-content h1 .headerlink,a .rst-content h2 .headerlink,a .rst-content h3 .headerlink,a .rst-content h4 .headerlink,a .rst-content h5 .headerlink,a .rst-content h6 .headerlink,a .rst-content p.caption .headerlink,a .rst-content p .headerlink,a .rst-content table>caption .headerlink,a .rst-content tt.download span:first-child,a .wy-menu-vertical li button.toctree-expand{display:inline-block;text-decoration:inherit}.btn .fa,.btn .icon,.btn .rst-content .admonition-title,.btn .rst-content .code-block-caption .headerlink,.btn .rst-content .eqno .headerlink,.btn .rst-content code.download span:first-child,.btn .rst-content dl dt .headerlink,.btn .rst-content h1 .headerlink,.btn .rst-content h2 .headerlink,.btn .rst-content h3 .headerlink,.btn .rst-content h4 .headerlink,.btn .rst-content h5 .headerlink,.btn .rst-content h6 .headerlink,.btn .rst-content p .headerlink,.btn .rst-content table>caption .headerlink,.btn .rst-content tt.download span:first-child,.btn .wy-menu-vertical li.current>a button.toctree-expand,.btn .wy-menu-vertical li.on a button.toctree-expand,.btn .wy-menu-vertical li button.toctree-expand,.nav .fa,.nav .icon,.nav .rst-content .admonition-title,.nav .rst-content .code-block-caption .headerlink,.nav .rst-content .eqno .headerlink,.nav .rst-content code.download span:first-child,.nav .rst-content dl dt .headerlink,.nav .rst-content h1 .headerlink,.nav .rst-content h2 .headerlink,.nav .rst-content h3 .headerlink,.nav .rst-content h4 .headerlink,.nav .rst-content h5 .headerlink,.nav .rst-content h6 .headerlink,.nav .rst-content p .headerlink,.nav .rst-content table>caption .headerlink,.nav .rst-content tt.download span:first-child,.nav .wy-menu-vertical li.current>a button.toctree-expand,.nav .wy-menu-vertical li.on a button.toctree-expand,.nav .wy-menu-vertical li button.toctree-expand,.rst-content .btn .admonition-title,.rst-content .code-block-caption .btn .headerlink,.rst-content .code-block-caption .nav .headerlink,.rst-content .eqno .btn .headerlink,.rst-content .eqno .nav .headerlink,.rst-content .nav .admonition-title,.rst-content code.download .btn span:first-child,.rst-content code.download .nav span:first-child,.rst-content dl dt .btn .headerlink,.rst-content dl dt .nav .headerlink,.rst-content h1 .btn .headerlink,.rst-content h1 .nav .headerlink,.rst-content h2 .btn .headerlink,.rst-content h2 .nav .headerlink,.rst-content h3 .btn .headerlink,.rst-content h3 .nav .headerlink,.rst-content h4 .btn .headerlink,.rst-content h4 .nav .headerlink,.rst-content h5 .btn .headerlink,.rst-content h5 .nav .headerlink,.rst-content h6 .btn .headerlink,.rst-content h6 .nav .headerlink,.rst-content p .btn .headerlink,.rst-content p .nav .headerlink,.rst-content table>caption .btn .headerlink,.rst-content table>caption .nav .headerlink,.rst-content tt.download .btn span:first-child,.rst-content tt.download .nav span:first-child,.wy-menu-vertical li .btn button.toctree-expand,.wy-menu-vertical li.current>a .btn button.toctree-expand,.wy-menu-vertical li.current>a .nav button.toctree-expand,.wy-menu-vertical li .nav button.toctree-expand,.wy-menu-vertical li.on a .btn button.toctree-expand,.wy-menu-vertical li.on a .nav button.toctree-expand{display:inline}.btn .fa-large.icon,.btn .fa.fa-large,.btn .rst-content .code-block-caption .fa-large.headerlink,.btn .rst-content .eqno .fa-large.headerlink,.btn .rst-content .fa-large.admonition-title,.btn .rst-content code.download span.fa-large:first-child,.btn .rst-content dl dt .fa-large.headerlink,.btn .rst-content h1 .fa-large.headerlink,.btn .rst-content h2 .fa-large.headerlink,.btn .rst-content h3 .fa-large.headerlink,.btn .rst-content h4 .fa-large.headerlink,.btn .rst-content h5 .fa-large.headerlink,.btn .rst-content h6 .fa-large.headerlink,.btn .rst-content p .fa-large.headerlink,.btn .rst-content table>caption .fa-large.headerlink,.btn .rst-content tt.download span.fa-large:first-child,.btn .wy-menu-vertical li button.fa-large.toctree-expand,.nav .fa-large.icon,.nav .fa.fa-large,.nav .rst-content .code-block-caption .fa-large.headerlink,.nav .rst-content .eqno .fa-large.headerlink,.nav .rst-content .fa-large.admonition-title,.nav .rst-content code.download span.fa-large:first-child,.nav .rst-content dl dt .fa-large.headerlink,.nav .rst-content h1 .fa-large.headerlink,.nav .rst-content h2 .fa-large.headerlink,.nav .rst-content h3 .fa-large.headerlink,.nav .rst-content h4 .fa-large.headerlink,.nav .rst-content h5 .fa-large.headerlink,.nav .rst-content h6 .fa-large.headerlink,.nav .rst-content p .fa-large.headerlink,.nav .rst-content table>caption .fa-large.headerlink,.nav .rst-content tt.download span.fa-large:first-child,.nav .wy-menu-vertical li button.fa-large.toctree-expand,.rst-content .btn .fa-large.admonition-title,.rst-content .code-block-caption .btn .fa-large.headerlink,.rst-content .code-block-caption .nav .fa-large.headerlink,.rst-content .eqno .btn .fa-large.headerlink,.rst-content .eqno .nav .fa-large.headerlink,.rst-content .nav .fa-large.admonition-title,.rst-content code.download .btn span.fa-large:first-child,.rst-content code.download .nav span.fa-large:first-child,.rst-content dl dt .btn .fa-large.headerlink,.rst-content dl dt .nav .fa-large.headerlink,.rst-content h1 .btn .fa-large.headerlink,.rst-content h1 .nav .fa-large.headerlink,.rst-content h2 .btn .fa-large.headerlink,.rst-content h2 .nav .fa-large.headerlink,.rst-content h3 .btn .fa-large.headerlink,.rst-content h3 .nav .fa-large.headerlink,.rst-content h4 .btn .fa-large.headerlink,.rst-content h4 .nav .fa-large.headerlink,.rst-content h5 .btn .fa-large.headerlink,.rst-content h5 .nav .fa-large.headerlink,.rst-content h6 .btn .fa-large.headerlink,.rst-content h6 .nav .fa-large.headerlink,.rst-content p .btn .fa-large.headerlink,.rst-content p .nav .fa-large.headerlink,.rst-content table>caption .btn .fa-large.headerlink,.rst-content table>caption .nav .fa-large.headerlink,.rst-content tt.download .btn span.fa-large:first-child,.rst-content tt.download .nav span.fa-large:first-child,.wy-menu-vertical li .btn button.fa-large.toctree-expand,.wy-menu-vertical li .nav button.fa-large.toctree-expand{line-height:.9em}.btn .fa-spin.icon,.btn .fa.fa-spin,.btn .rst-content .code-block-caption .fa-spin.headerlink,.btn .rst-content .eqno .fa-spin.headerlink,.btn .rst-content .fa-spin.admonition-title,.btn .rst-content code.download span.fa-spin:first-child,.btn .rst-content dl dt .fa-spin.headerlink,.btn .rst-content h1 .fa-spin.headerlink,.btn .rst-content h2 .fa-spin.headerlink,.btn .rst-content h3 .fa-spin.headerlink,.btn .rst-content h4 .fa-spin.headerlink,.btn .rst-content h5 .fa-spin.headerlink,.btn .rst-content h6 .fa-spin.headerlink,.btn .rst-content p .fa-spin.headerlink,.btn .rst-content table>caption .fa-spin.headerlink,.btn .rst-content tt.download span.fa-spin:first-child,.btn .wy-menu-vertical li button.fa-spin.toctree-expand,.nav .fa-spin.icon,.nav .fa.fa-spin,.nav .rst-content .code-block-caption .fa-spin.headerlink,.nav .rst-content .eqno .fa-spin.headerlink,.nav .rst-content .fa-spin.admonition-title,.nav .rst-content code.download span.fa-spin:first-child,.nav .rst-content dl dt .fa-spin.headerlink,.nav .rst-content h1 .fa-spin.headerlink,.nav .rst-content h2 .fa-spin.headerlink,.nav .rst-content h3 .fa-spin.headerlink,.nav .rst-content h4 .fa-spin.headerlink,.nav .rst-content h5 .fa-spin.headerlink,.nav .rst-content h6 .fa-spin.headerlink,.nav .rst-content p .fa-spin.headerlink,.nav .rst-content table>caption .fa-spin.headerlink,.nav .rst-content tt.download span.fa-spin:first-child,.nav .wy-menu-vertical li button.fa-spin.toctree-expand,.rst-content .btn .fa-spin.admonition-title,.rst-content .code-block-caption .btn .fa-spin.headerlink,.rst-content .code-block-caption .nav .fa-spin.headerlink,.rst-content .eqno .btn .fa-spin.headerlink,.rst-content .eqno .nav .fa-spin.headerlink,.rst-content .nav .fa-spin.admonition-title,.rst-content code.download .btn span.fa-spin:first-child,.rst-content code.download .nav span.fa-spin:first-child,.rst-content dl dt .btn .fa-spin.headerlink,.rst-content dl dt .nav .fa-spin.headerlink,.rst-content h1 .btn .fa-spin.headerlink,.rst-content h1 .nav .fa-spin.headerlink,.rst-content h2 .btn .fa-spin.headerlink,.rst-content h2 .nav .fa-spin.headerlink,.rst-content h3 .btn .fa-spin.headerlink,.rst-content h3 .nav .fa-spin.headerlink,.rst-content h4 .btn .fa-spin.headerlink,.rst-content h4 .nav .fa-spin.headerlink,.rst-content h5 .btn .fa-spin.headerlink,.rst-content h5 .nav .fa-spin.headerlink,.rst-content h6 .btn .fa-spin.headerlink,.rst-content h6 .nav .fa-spin.headerlink,.rst-content p .btn .fa-spin.headerlink,.rst-content p .nav .fa-spin.headerlink,.rst-content table>caption .btn .fa-spin.headerlink,.rst-content table>caption .nav .fa-spin.headerlink,.rst-content tt.download .btn span.fa-spin:first-child,.rst-content tt.download .nav span.fa-spin:first-child,.wy-menu-vertical li .btn button.fa-spin.toctree-expand,.wy-menu-vertical li .nav button.fa-spin.toctree-expand{display:inline-block}.btn.fa:before,.btn.icon:before,.rst-content .btn.admonition-title:before,.rst-content .code-block-caption .btn.headerlink:before,.rst-content .eqno .btn.headerlink:before,.rst-content code.download span.btn:first-child:before,.rst-content dl dt .btn.headerlink:before,.rst-content h1 .btn.headerlink:before,.rst-content h2 .btn.headerlink:before,.rst-content h3 .btn.headerlink:before,.rst-content h4 .btn.headerlink:before,.rst-content h5 .btn.headerlink:before,.rst-content h6 .btn.headerlink:before,.rst-content p .btn.headerlink:before,.rst-content table>caption .btn.headerlink:before,.rst-content tt.download span.btn:first-child:before,.wy-menu-vertical li button.btn.toctree-expand:before{opacity:.5;-webkit-transition:opacity .05s ease-in;-moz-transition:opacity .05s ease-in;transition:opacity .05s ease-in}.btn.fa:hover:before,.btn.icon:hover:before,.rst-content .btn.admonition-title:hover:before,.rst-content .code-block-caption .btn.headerlink:hover:before,.rst-content .eqno .btn.headerlink:hover:before,.rst-content code.download span.btn:first-child:hover:before,.rst-content dl dt .btn.headerlink:hover:before,.rst-content h1 .btn.headerlink:hover:before,.rst-content h2 .btn.headerlink:hover:before,.rst-content h3 .btn.headerlink:hover:before,.rst-content h4 .btn.headerlink:hover:before,.rst-content h5 .btn.headerlink:hover:before,.rst-content h6 .btn.headerlink:hover:before,.rst-content p .btn.headerlink:hover:before,.rst-content table>caption .btn.headerlink:hover:before,.rst-content tt.download span.btn:first-child:hover:before,.wy-menu-vertical li button.btn.toctree-expand:hover:before{opacity:1}.btn-mini .fa:before,.btn-mini .icon:before,.btn-mini .rst-content .admonition-title:before,.btn-mini .rst-content .code-block-caption .headerlink:before,.btn-mini .rst-content .eqno .headerlink:before,.btn-mini .rst-content code.download span:first-child:before,.btn-mini .rst-content dl dt .headerlink:before,.btn-mini .rst-content h1 .headerlink:before,.btn-mini .rst-content h2 .headerlink:before,.btn-mini .rst-content h3 .headerlink:before,.btn-mini .rst-content h4 .headerlink:before,.btn-mini .rst-content h5 .headerlink:before,.btn-mini .rst-content h6 .headerlink:before,.btn-mini .rst-content p .headerlink:before,.btn-mini .rst-content table>caption .headerlink:before,.btn-mini .rst-content tt.download span:first-child:before,.btn-mini .wy-menu-vertical li button.toctree-expand:before,.rst-content .btn-mini .admonition-title:before,.rst-content .code-block-caption .btn-mini .headerlink:before,.rst-content .eqno .btn-mini .headerlink:before,.rst-content code.download .btn-mini span:first-child:before,.rst-content dl dt .btn-mini .headerlink:before,.rst-content h1 .btn-mini .headerlink:before,.rst-content h2 .btn-mini .headerlink:before,.rst-content h3 .btn-mini .headerlink:before,.rst-content h4 .btn-mini .headerlink:before,.rst-content h5 .btn-mini .headerlink:before,.rst-content h6 .btn-mini .headerlink:before,.rst-content p .btn-mini .headerlink:before,.rst-content table>caption .btn-mini .headerlink:before,.rst-content tt.download .btn-mini span:first-child:before,.wy-menu-vertical li .btn-mini button.toctree-expand:before{font-size:14px;vertical-align:-15%}.rst-content .admonition,.rst-content .admonition-todo,.rst-content .attention,.rst-content .caution,.rst-content .danger,.rst-content .error,.rst-content .hint,.rst-content .important,.rst-content .note,.rst-content .seealso,.rst-content .tip,.rst-content .warning,.wy-alert{padding:12px;line-height:24px;margin-bottom:24px;background:#e7f2fa}.rst-content .admonition-title,.wy-alert-title{font-weight:700;display:block;color:#fff;background:#6ab0de;padding:6px 12px;margin:-12px -12px 12px}.rst-content .danger,.rst-content .error,.rst-content .wy-alert-danger.admonition,.rst-content .wy-alert-danger.admonition-todo,.rst-content .wy-alert-danger.attention,.rst-content .wy-alert-danger.caution,.rst-content .wy-alert-danger.hint,.rst-content .wy-alert-danger.important,.rst-content .wy-alert-danger.note,.rst-content .wy-alert-danger.seealso,.rst-content .wy-alert-danger.tip,.rst-content .wy-alert-danger.warning,.wy-alert.wy-alert-danger{background:#fdf3f2}.rst-content .danger .admonition-title,.rst-content .danger .wy-alert-title,.rst-content .error .admonition-title,.rst-content .error .wy-alert-title,.rst-content .wy-alert-danger.admonition-todo .admonition-title,.rst-content .wy-alert-danger.admonition-todo .wy-alert-title,.rst-content .wy-alert-danger.admonition .admonition-title,.rst-content .wy-alert-danger.admonition .wy-alert-title,.rst-content .wy-alert-danger.attention .admonition-title,.rst-content .wy-alert-danger.attention .wy-alert-title,.rst-content .wy-alert-danger.caution .admonition-title,.rst-content .wy-alert-danger.caution .wy-alert-title,.rst-content .wy-alert-danger.hint .admonition-title,.rst-content .wy-alert-danger.hint .wy-alert-title,.rst-content .wy-alert-danger.important .admonition-title,.rst-content .wy-alert-danger.important .wy-alert-title,.rst-content .wy-alert-danger.note .admonition-title,.rst-content .wy-alert-danger.note .wy-alert-title,.rst-content .wy-alert-danger.seealso .admonition-title,.rst-content .wy-alert-danger.seealso .wy-alert-title,.rst-content .wy-alert-danger.tip .admonition-title,.rst-content .wy-alert-danger.tip .wy-alert-title,.rst-content .wy-alert-danger.warning .admonition-title,.rst-content .wy-alert-danger.warning .wy-alert-title,.rst-content .wy-alert.wy-alert-danger .admonition-title,.wy-alert.wy-alert-danger .rst-content .admonition-title,.wy-alert.wy-alert-danger .wy-alert-title{background:#f29f97}.rst-content .admonition-todo,.rst-content .attention,.rst-content .caution,.rst-content .warning,.rst-content .wy-alert-warning.admonition,.rst-content .wy-alert-warning.danger,.rst-content .wy-alert-warning.error,.rst-content .wy-alert-warning.hint,.rst-content .wy-alert-warning.important,.rst-content .wy-alert-warning.note,.rst-content .wy-alert-warning.seealso,.rst-content .wy-alert-warning.tip,.wy-alert.wy-alert-warning{background:#ffedcc}.rst-content .admonition-todo .admonition-title,.rst-content .admonition-todo .wy-alert-title,.rst-content .attention .admonition-title,.rst-content .attention .wy-alert-title,.rst-content .caution .admonition-title,.rst-content .caution .wy-alert-title,.rst-content .warning .admonition-title,.rst-content .warning .wy-alert-title,.rst-content .wy-alert-warning.admonition .admonition-title,.rst-content .wy-alert-warning.admonition .wy-alert-title,.rst-content .wy-alert-warning.danger .admonition-title,.rst-content .wy-alert-warning.danger .wy-alert-title,.rst-content .wy-alert-warning.error .admonition-title,.rst-content .wy-alert-warning.error .wy-alert-title,.rst-content .wy-alert-warning.hint .admonition-title,.rst-content .wy-alert-warning.hint .wy-alert-title,.rst-content .wy-alert-warning.important .admonition-title,.rst-content .wy-alert-warning.important .wy-alert-title,.rst-content .wy-alert-warning.note .admonition-title,.rst-content .wy-alert-warning.note .wy-alert-title,.rst-content .wy-alert-warning.seealso .admonition-title,.rst-content .wy-alert-warning.seealso .wy-alert-title,.rst-content .wy-alert-warning.tip .admonition-title,.rst-content .wy-alert-warning.tip .wy-alert-title,.rst-content .wy-alert.wy-alert-warning .admonition-title,.wy-alert.wy-alert-warning .rst-content .admonition-title,.wy-alert.wy-alert-warning .wy-alert-title{background:#f0b37e}.rst-content .note,.rst-content .seealso,.rst-content .wy-alert-info.admonition,.rst-content .wy-alert-info.admonition-todo,.rst-content .wy-alert-info.attention,.rst-content .wy-alert-info.caution,.rst-content .wy-alert-info.danger,.rst-content .wy-alert-info.error,.rst-content .wy-alert-info.hint,.rst-content .wy-alert-info.important,.rst-content .wy-alert-info.tip,.rst-content .wy-alert-info.warning,.wy-alert.wy-alert-info{background:#e7f2fa}.rst-content .note .admonition-title,.rst-content .note .wy-alert-title,.rst-content .seealso .admonition-title,.rst-content .seealso .wy-alert-title,.rst-content .wy-alert-info.admonition-todo .admonition-title,.rst-content .wy-alert-info.admonition-todo .wy-alert-title,.rst-content .wy-alert-info.admonition .admonition-title,.rst-content .wy-alert-info.admonition .wy-alert-title,.rst-content .wy-alert-info.attention .admonition-title,.rst-content .wy-alert-info.attention .wy-alert-title,.rst-content .wy-alert-info.caution .admonition-title,.rst-content .wy-alert-info.caution .wy-alert-title,.rst-content .wy-alert-info.danger .admonition-title,.rst-content .wy-alert-info.danger .wy-alert-title,.rst-content .wy-alert-info.error .admonition-title,.rst-content .wy-alert-info.error .wy-alert-title,.rst-content .wy-alert-info.hint .admonition-title,.rst-content .wy-alert-info.hint .wy-alert-title,.rst-content .wy-alert-info.important .admonition-title,.rst-content .wy-alert-info.important .wy-alert-title,.rst-content .wy-alert-info.tip .admonition-title,.rst-content .wy-alert-info.tip .wy-alert-title,.rst-content .wy-alert-info.warning .admonition-title,.rst-content .wy-alert-info.warning .wy-alert-title,.rst-content .wy-alert.wy-alert-info .admonition-title,.wy-alert.wy-alert-info .rst-content .admonition-title,.wy-alert.wy-alert-info .wy-alert-title{background:#6ab0de}.rst-content .hint,.rst-content .important,.rst-content .tip,.rst-content .wy-alert-success.admonition,.rst-content .wy-alert-success.admonition-todo,.rst-content .wy-alert-success.attention,.rst-content .wy-alert-success.caution,.rst-content .wy-alert-success.danger,.rst-content .wy-alert-success.error,.rst-content .wy-alert-success.note,.rst-content .wy-alert-success.seealso,.rst-content .wy-alert-success.warning,.wy-alert.wy-alert-success{background:#dbfaf4}.rst-content .hint .admonition-title,.rst-content .hint .wy-alert-title,.rst-content .important .admonition-title,.rst-content .important .wy-alert-title,.rst-content .tip .admonition-title,.rst-content .tip .wy-alert-title,.rst-content .wy-alert-success.admonition-todo .admonition-title,.rst-content .wy-alert-success.admonition-todo .wy-alert-title,.rst-content .wy-alert-success.admonition .admonition-title,.rst-content .wy-alert-success.admonition .wy-alert-title,.rst-content .wy-alert-success.attention .admonition-title,.rst-content .wy-alert-success.attention .wy-alert-title,.rst-content .wy-alert-success.caution .admonition-title,.rst-content .wy-alert-success.caution .wy-alert-title,.rst-content .wy-alert-success.danger .admonition-title,.rst-content .wy-alert-success.danger .wy-alert-title,.rst-content .wy-alert-success.error .admonition-title,.rst-content .wy-alert-success.error .wy-alert-title,.rst-content .wy-alert-success.note .admonition-title,.rst-content .wy-alert-success.note .wy-alert-title,.rst-content .wy-alert-success.seealso .admonition-title,.rst-content .wy-alert-success.seealso .wy-alert-title,.rst-content .wy-alert-success.warning .admonition-title,.rst-content .wy-alert-success.warning .wy-alert-title,.rst-content .wy-alert.wy-alert-success .admonition-title,.wy-alert.wy-alert-success .rst-content .admonition-title,.wy-alert.wy-alert-success .wy-alert-title{background:#1abc9c}.rst-content .wy-alert-neutral.admonition,.rst-content .wy-alert-neutral.admonition-todo,.rst-content .wy-alert-neutral.attention,.rst-content .wy-alert-neutral.caution,.rst-content .wy-alert-neutral.danger,.rst-content .wy-alert-neutral.error,.rst-content .wy-alert-neutral.hint,.rst-content .wy-alert-neutral.important,.rst-content .wy-alert-neutral.note,.rst-content .wy-alert-neutral.seealso,.rst-content .wy-alert-neutral.tip,.rst-content .wy-alert-neutral.warning,.wy-alert.wy-alert-neutral{background:#f3f6f6}.rst-content .wy-alert-neutral.admonition-todo .admonition-title,.rst-content .wy-alert-neutral.admonition-todo .wy-alert-title,.rst-content .wy-alert-neutral.admonition .admonition-title,.rst-content .wy-alert-neutral.admonition .wy-alert-title,.rst-content .wy-alert-neutral.attention .admonition-title,.rst-content .wy-alert-neutral.attention .wy-alert-title,.rst-content .wy-alert-neutral.caution .admonition-title,.rst-content .wy-alert-neutral.caution .wy-alert-title,.rst-content .wy-alert-neutral.danger .admonition-title,.rst-content .wy-alert-neutral.danger .wy-alert-title,.rst-content .wy-alert-neutral.error .admonition-title,.rst-content .wy-alert-neutral.error .wy-alert-title,.rst-content .wy-alert-neutral.hint .admonition-title,.rst-content .wy-alert-neutral.hint .wy-alert-title,.rst-content .wy-alert-neutral.important .admonition-title,.rst-content .wy-alert-neutral.important .wy-alert-title,.rst-content .wy-alert-neutral.note .admonition-title,.rst-content .wy-alert-neutral.note .wy-alert-title,.rst-content .wy-alert-neutral.seealso .admonition-title,.rst-content .wy-alert-neutral.seealso .wy-alert-title,.rst-content .wy-alert-neutral.tip .admonition-title,.rst-content .wy-alert-neutral.tip .wy-alert-title,.rst-content .wy-alert-neutral.warning .admonition-title,.rst-content .wy-alert-neutral.warning .wy-alert-title,.rst-content .wy-alert.wy-alert-neutral .admonition-title,.wy-alert.wy-alert-neutral .rst-content .admonition-title,.wy-alert.wy-alert-neutral .wy-alert-title{color:#404040;background:#e1e4e5}.rst-content .wy-alert-neutral.admonition-todo a,.rst-content .wy-alert-neutral.admonition a,.rst-content .wy-alert-neutral.attention a,.rst-content .wy-alert-neutral.caution a,.rst-content .wy-alert-neutral.danger a,.rst-content .wy-alert-neutral.error a,.rst-content .wy-alert-neutral.hint a,.rst-content .wy-alert-neutral.important a,.rst-content .wy-alert-neutral.note a,.rst-content .wy-alert-neutral.seealso a,.rst-content .wy-alert-neutral.tip a,.rst-content .wy-alert-neutral.warning a,.wy-alert.wy-alert-neutral a{color:#2980b9}.rst-content .admonition-todo p:last-child,.rst-content .admonition p:last-child,.rst-content .attention p:last-child,.rst-content .caution p:last-child,.rst-content .danger p:last-child,.rst-content .error p:last-child,.rst-content .hint p:last-child,.rst-content .important p:last-child,.rst-content .note p:last-child,.rst-content .seealso p:last-child,.rst-content .tip p:last-child,.rst-content .warning p:last-child,.wy-alert p:last-child{margin-bottom:0}.wy-tray-container{position:fixed;bottom:0;left:0;z-index:600}.wy-tray-container li{display:block;width:300px;background:transparent;color:#fff;text-align:center;box-shadow:0 5px 5px 0 rgba(0,0,0,.1);padding:0 24px;min-width:20%;opacity:0;height:0;line-height:56px;overflow:hidden;-webkit-transition:all .3s ease-in;-moz-transition:all .3s ease-in;transition:all .3s ease-in}.wy-tray-container li.wy-tray-item-success{background:#27ae60}.wy-tray-container li.wy-tray-item-info{background:#2980b9}.wy-tray-container li.wy-tray-item-warning{background:#e67e22}.wy-tray-container li.wy-tray-item-danger{background:#e74c3c}.wy-tray-container li.on{opacity:1;height:56px}@media screen and (max-width:768px){.wy-tray-container{bottom:auto;top:0;width:100%}.wy-tray-container li{width:100%}}button{font-size:100%;margin:0;vertical-align:baseline;*vertical-align:middle;cursor:pointer;line-height:normal;-webkit-appearance:button;*overflow:visible}button::-moz-focus-inner,input::-moz-focus-inner{border:0;padding:0}button[disabled]{cursor:default}.btn{display:inline-block;border-radius:2px;line-height:normal;white-space:nowrap;text-align:center;cursor:pointer;font-size:100%;padding:6px 12px 8px;color:#fff;border:1px solid rgba(0,0,0,.1);background-color:#27ae60;text-decoration:none;font-weight:400;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;box-shadow:inset 0 1px 2px -1px hsla(0,0%,100%,.5),inset 0 -2px 0 0 rgba(0,0,0,.1);outline-none:false;vertical-align:middle;*display:inline;zoom:1;-webkit-user-drag:none;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-transition:all .1s linear;-moz-transition:all .1s linear;transition:all .1s linear}.btn-hover{background:#2e8ece;color:#fff}.btn:hover{background:#2cc36b;color:#fff}.btn:focus{background:#2cc36b;outline:0}.btn:active{box-shadow:inset 0 -1px 0 0 rgba(0,0,0,.05),inset 0 2px 0 0 rgba(0,0,0,.1);padding:8px 12px 6px}.btn:visited{color:#fff}.btn-disabled,.btn-disabled:active,.btn-disabled:focus,.btn-disabled:hover,.btn:disabled{background-image:none;filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);filter:alpha(opacity=40);opacity:.4;cursor:not-allowed;box-shadow:none}.btn::-moz-focus-inner{padding:0;border:0}.btn-small{font-size:80%}.btn-info{background-color:#2980b9!important}.btn-info:hover{background-color:#2e8ece!important}.btn-neutral{background-color:#f3f6f6!important;color:#404040!important}.btn-neutral:hover{background-color:#e5ebeb!important;color:#404040}.btn-neutral:visited{color:#404040!important}.btn-success{background-color:#27ae60!important}.btn-success:hover{background-color:#295!important}.btn-danger{background-color:#e74c3c!important}.btn-danger:hover{background-color:#ea6153!important}.btn-warning{background-color:#e67e22!important}.btn-warning:hover{background-color:#e98b39!important}.btn-invert{background-color:#222}.btn-invert:hover{background-color:#2f2f2f!important}.btn-link{background-color:transparent!important;color:#2980b9;box-shadow:none;border-color:transparent!important}.btn-link:active,.btn-link:hover{background-color:transparent!important;color:#409ad5!important;box-shadow:none}.btn-link:visited{color:#9b59b6}.wy-btn-group .btn,.wy-control .btn{vertical-align:middle}.wy-btn-group{margin-bottom:24px;*zoom:1}.wy-btn-group:after,.wy-btn-group:before{display:table;content:""}.wy-btn-group:after{clear:both}.wy-dropdown{position:relative;display:inline-block}.wy-dropdown-active .wy-dropdown-menu{display:block}.wy-dropdown-menu{position:absolute;left:0;display:none;float:left;top:100%;min-width:100%;background:#fcfcfc;z-index:100;border:1px solid #cfd7dd;box-shadow:0 2px 2px 0 rgba(0,0,0,.1);padding:12px}.wy-dropdown-menu>dd>a{display:block;clear:both;color:#404040;white-space:nowrap;font-size:90%;padding:0 12px;cursor:pointer}.wy-dropdown-menu>dd>a:hover{background:#2980b9;color:#fff}.wy-dropdown-menu>dd.divider{border-top:1px solid #cfd7dd;margin:6px 0}.wy-dropdown-menu>dd.search{padding-bottom:12px}.wy-dropdown-menu>dd.search input[type=search]{width:100%}.wy-dropdown-menu>dd.call-to-action{background:#e3e3e3;text-transform:uppercase;font-weight:500;font-size:80%}.wy-dropdown-menu>dd.call-to-action:hover{background:#e3e3e3}.wy-dropdown-menu>dd.call-to-action .btn{color:#fff}.wy-dropdown.wy-dropdown-up .wy-dropdown-menu{bottom:100%;top:auto;left:auto;right:0}.wy-dropdown.wy-dropdown-bubble .wy-dropdown-menu{background:#fcfcfc;margin-top:2px}.wy-dropdown.wy-dropdown-bubble .wy-dropdown-menu a{padding:6px 12px}.wy-dropdown.wy-dropdown-bubble .wy-dropdown-menu a:hover{background:#2980b9;color:#fff}.wy-dropdown.wy-dropdown-left .wy-dropdown-menu{right:0;left:auto;text-align:right}.wy-dropdown-arrow:before{content:" ";border-bottom:5px solid #f5f5f5;border-left:5px solid transparent;border-right:5px solid transparent;position:absolute;display:block;top:-4px;left:50%;margin-left:-3px}.wy-dropdown-arrow.wy-dropdown-arrow-left:before{left:11px}.wy-form-stacked select{display:block}.wy-form-aligned .wy-help-inline,.wy-form-aligned input,.wy-form-aligned label,.wy-form-aligned select,.wy-form-aligned textarea{display:inline-block;*display:inline;*zoom:1;vertical-align:middle}.wy-form-aligned .wy-control-group>label{display:inline-block;vertical-align:middle;width:10em;margin:6px 12px 0 0;float:left}.wy-form-aligned .wy-control{float:left}.wy-form-aligned .wy-control label{display:block}.wy-form-aligned .wy-control select{margin-top:6px}fieldset{margin:0}fieldset,legend{border:0;padding:0}legend{width:100%;white-space:normal;margin-bottom:24px;font-size:150%;*margin-left:-7px}label,legend{display:block}label{margin:0 0 .3125em;color:#333;font-size:90%}input,select,textarea{font-size:100%;margin:0;vertical-align:baseline;*vertical-align:middle}.wy-control-group{margin-bottom:24px;max-width:1200px;margin-left:auto;margin-right:auto;*zoom:1}.wy-control-group:after,.wy-control-group:before{display:table;content:""}.wy-control-group:after{clear:both}.wy-control-group.wy-control-group-required>label:after{content:" *";color:#e74c3c}.wy-control-group .wy-form-full,.wy-control-group .wy-form-halves,.wy-control-group .wy-form-thirds{padding-bottom:12px}.wy-control-group .wy-form-full input[type=color],.wy-control-group .wy-form-full input[type=date],.wy-control-group .wy-form-full input[type=datetime-local],.wy-control-group .wy-form-full input[type=datetime],.wy-control-group .wy-form-full input[type=email],.wy-control-group .wy-form-full input[type=month],.wy-control-group .wy-form-full input[type=number],.wy-control-group .wy-form-full input[type=password],.wy-control-group .wy-form-full input[type=search],.wy-control-group .wy-form-full input[type=tel],.wy-control-group .wy-form-full input[type=text],.wy-control-group .wy-form-full input[type=time],.wy-control-group .wy-form-full input[type=url],.wy-control-group .wy-form-full input[type=week],.wy-control-group .wy-form-full select,.wy-control-group .wy-form-halves input[type=color],.wy-control-group .wy-form-halves input[type=date],.wy-control-group .wy-form-halves input[type=datetime-local],.wy-control-group .wy-form-halves input[type=datetime],.wy-control-group .wy-form-halves input[type=email],.wy-control-group .wy-form-halves input[type=month],.wy-control-group .wy-form-halves input[type=number],.wy-control-group .wy-form-halves input[type=password],.wy-control-group .wy-form-halves input[type=search],.wy-control-group .wy-form-halves input[type=tel],.wy-control-group .wy-form-halves input[type=text],.wy-control-group .wy-form-halves input[type=time],.wy-control-group .wy-form-halves input[type=url],.wy-control-group .wy-form-halves input[type=week],.wy-control-group .wy-form-halves select,.wy-control-group .wy-form-thirds input[type=color],.wy-control-group .wy-form-thirds input[type=date],.wy-control-group .wy-form-thirds input[type=datetime-local],.wy-control-group .wy-form-thirds input[type=datetime],.wy-control-group .wy-form-thirds input[type=email],.wy-control-group .wy-form-thirds input[type=month],.wy-control-group .wy-form-thirds input[type=number],.wy-control-group .wy-form-thirds input[type=password],.wy-control-group .wy-form-thirds input[type=search],.wy-control-group .wy-form-thirds input[type=tel],.wy-control-group .wy-form-thirds input[type=text],.wy-control-group .wy-form-thirds input[type=time],.wy-control-group .wy-form-thirds input[type=url],.wy-control-group .wy-form-thirds input[type=week],.wy-control-group .wy-form-thirds select{width:100%}.wy-control-group .wy-form-full{float:left;display:block;width:100%;margin-right:0}.wy-control-group .wy-form-full:last-child{margin-right:0}.wy-control-group .wy-form-halves{float:left;display:block;margin-right:2.35765%;width:48.82117%}.wy-control-group .wy-form-halves:last-child,.wy-control-group .wy-form-halves:nth-of-type(2n){margin-right:0}.wy-control-group .wy-form-halves:nth-of-type(odd){clear:left}.wy-control-group .wy-form-thirds{float:left;display:block;margin-right:2.35765%;width:31.76157%}.wy-control-group .wy-form-thirds:last-child,.wy-control-group .wy-form-thirds:nth-of-type(3n){margin-right:0}.wy-control-group .wy-form-thirds:nth-of-type(3n+1){clear:left}.wy-control-group.wy-control-group-no-input .wy-control,.wy-control-no-input{margin:6px 0 0;font-size:90%}.wy-control-no-input{display:inline-block}.wy-control-group.fluid-input input[type=color],.wy-control-group.fluid-input input[type=date],.wy-control-group.fluid-input input[type=datetime-local],.wy-control-group.fluid-input input[type=datetime],.wy-control-group.fluid-input input[type=email],.wy-control-group.fluid-input input[type=month],.wy-control-group.fluid-input input[type=number],.wy-control-group.fluid-input input[type=password],.wy-control-group.fluid-input input[type=search],.wy-control-group.fluid-input input[type=tel],.wy-control-group.fluid-input input[type=text],.wy-control-group.fluid-input input[type=time],.wy-control-group.fluid-input input[type=url],.wy-control-group.fluid-input input[type=week]{width:100%}.wy-form-message-inline{padding-left:.3em;color:#666;font-size:90%}.wy-form-message{display:block;color:#999;font-size:70%;margin-top:.3125em;font-style:italic}.wy-form-message p{font-size:inherit;font-style:italic;margin-bottom:6px}.wy-form-message p:last-child{margin-bottom:0}input{line-height:normal}input[type=button],input[type=reset],input[type=submit]{-webkit-appearance:button;cursor:pointer;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;*overflow:visible}input[type=color],input[type=date],input[type=datetime-local],input[type=datetime],input[type=email],input[type=month],input[type=number],input[type=password],input[type=search],input[type=tel],input[type=text],input[type=time],input[type=url],input[type=week]{-webkit-appearance:none;padding:6px;display:inline-block;border:1px solid #ccc;font-size:80%;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;box-shadow:inset 0 1px 3px #ddd;border-radius:0;-webkit-transition:border .3s linear;-moz-transition:border .3s linear;transition:border .3s linear}input[type=datetime-local]{padding:.34375em .625em}input[disabled]{cursor:default}input[type=checkbox],input[type=radio]{padding:0;margin-right:.3125em;*height:13px;*width:13px}input[type=checkbox],input[type=radio],input[type=search]{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance:none}input[type=color]:focus,input[type=date]:focus,input[type=datetime-local]:focus,input[type=datetime]:focus,input[type=email]:focus,input[type=month]:focus,input[type=number]:focus,input[type=password]:focus,input[type=search]:focus,input[type=tel]:focus,input[type=text]:focus,input[type=time]:focus,input[type=url]:focus,input[type=week]:focus{outline:0;outline:thin dotted\9;border-color:#333}input.no-focus:focus{border-color:#ccc!important}input[type=checkbox]:focus,input[type=file]:focus,input[type=radio]:focus{outline:thin dotted #333;outline:1px auto #129fea}input[type=color][disabled],input[type=date][disabled],input[type=datetime-local][disabled],input[type=datetime][disabled],input[type=email][disabled],input[type=month][disabled],input[type=number][disabled],input[type=password][disabled],input[type=search][disabled],input[type=tel][disabled],input[type=text][disabled],input[type=time][disabled],input[type=url][disabled],input[type=week][disabled]{cursor:not-allowed;background-color:#fafafa}input:focus:invalid,select:focus:invalid,textarea:focus:invalid{color:#e74c3c;border:1px solid #e74c3c}input:focus:invalid:focus,select:focus:invalid:focus,textarea:focus:invalid:focus{border-color:#e74c3c}input[type=checkbox]:focus:invalid:focus,input[type=file]:focus:invalid:focus,input[type=radio]:focus:invalid:focus{outline-color:#e74c3c}input.wy-input-large{padding:12px;font-size:100%}textarea{overflow:auto;vertical-align:top;width:100%;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif}select,textarea{padding:.5em .625em;display:inline-block;border:1px solid #ccc;font-size:80%;box-shadow:inset 0 1px 3px #ddd;-webkit-transition:border .3s linear;-moz-transition:border .3s linear;transition:border .3s linear}select{border:1px solid #ccc;background-color:#fff}select[multiple]{height:auto}select:focus,textarea:focus{outline:0}input[readonly],select[disabled],select[readonly],textarea[disabled],textarea[readonly]{cursor:not-allowed;background-color:#fafafa}input[type=checkbox][disabled],input[type=radio][disabled]{cursor:not-allowed}.wy-checkbox,.wy-radio{margin:6px 0;color:#404040;display:block}.wy-checkbox input,.wy-radio input{vertical-align:baseline}.wy-form-message-inline{display:inline-block;*display:inline;*zoom:1;vertical-align:middle}.wy-input-prefix,.wy-input-suffix{white-space:nowrap;padding:6px}.wy-input-prefix .wy-input-context,.wy-input-suffix .wy-input-context{line-height:27px;padding:0 8px;display:inline-block;font-size:80%;background-color:#f3f6f6;border:1px solid #ccc;color:#999}.wy-input-suffix .wy-input-context{border-left:0}.wy-input-prefix .wy-input-context{border-right:0}.wy-switch{position:relative;display:block;height:24px;margin-top:12px;cursor:pointer}.wy-switch:before{left:0;top:0;width:36px;height:12px;background:#ccc}.wy-switch:after,.wy-switch:before{position:absolute;content:"";display:block;border-radius:4px;-webkit-transition:all .2s ease-in-out;-moz-transition:all .2s ease-in-out;transition:all .2s ease-in-out}.wy-switch:after{width:18px;height:18px;background:#999;left:-3px;top:-3px}.wy-switch span{position:absolute;left:48px;display:block;font-size:12px;color:#ccc;line-height:1}.wy-switch.active:before{background:#1e8449}.wy-switch.active:after{left:24px;background:#27ae60}.wy-switch.disabled{cursor:not-allowed;opacity:.8}.wy-control-group.wy-control-group-error .wy-form-message,.wy-control-group.wy-control-group-error>label{color:#e74c3c}.wy-control-group.wy-control-group-error input[type=color],.wy-control-group.wy-control-group-error input[type=date],.wy-control-group.wy-control-group-error input[type=datetime-local],.wy-control-group.wy-control-group-error input[type=datetime],.wy-control-group.wy-control-group-error input[type=email],.wy-control-group.wy-control-group-error input[type=month],.wy-control-group.wy-control-group-error input[type=number],.wy-control-group.wy-control-group-error input[type=password],.wy-control-group.wy-control-group-error input[type=search],.wy-control-group.wy-control-group-error input[type=tel],.wy-control-group.wy-control-group-error input[type=text],.wy-control-group.wy-control-group-error input[type=time],.wy-control-group.wy-control-group-error input[type=url],.wy-control-group.wy-control-group-error input[type=week],.wy-control-group.wy-control-group-error textarea{border:1px solid #e74c3c}.wy-inline-validate{white-space:nowrap}.wy-inline-validate .wy-input-context{padding:.5em .625em;display:inline-block;font-size:80%}.wy-inline-validate.wy-inline-validate-success .wy-input-context{color:#27ae60}.wy-inline-validate.wy-inline-validate-danger .wy-input-context{color:#e74c3c}.wy-inline-validate.wy-inline-validate-warning .wy-input-context{color:#e67e22}.wy-inline-validate.wy-inline-validate-info .wy-input-context{color:#2980b9}.rotate-90{-webkit-transform:rotate(90deg);-moz-transform:rotate(90deg);-ms-transform:rotate(90deg);-o-transform:rotate(90deg);transform:rotate(90deg)}.rotate-180{-webkit-transform:rotate(180deg);-moz-transform:rotate(180deg);-ms-transform:rotate(180deg);-o-transform:rotate(180deg);transform:rotate(180deg)}.rotate-270{-webkit-transform:rotate(270deg);-moz-transform:rotate(270deg);-ms-transform:rotate(270deg);-o-transform:rotate(270deg);transform:rotate(270deg)}.mirror{-webkit-transform:scaleX(-1);-moz-transform:scaleX(-1);-ms-transform:scaleX(-1);-o-transform:scaleX(-1);transform:scaleX(-1)}.mirror.rotate-90{-webkit-transform:scaleX(-1) rotate(90deg);-moz-transform:scaleX(-1) rotate(90deg);-ms-transform:scaleX(-1) rotate(90deg);-o-transform:scaleX(-1) rotate(90deg);transform:scaleX(-1) rotate(90deg)}.mirror.rotate-180{-webkit-transform:scaleX(-1) rotate(180deg);-moz-transform:scaleX(-1) rotate(180deg);-ms-transform:scaleX(-1) rotate(180deg);-o-transform:scaleX(-1) rotate(180deg);transform:scaleX(-1) rotate(180deg)}.mirror.rotate-270{-webkit-transform:scaleX(-1) rotate(270deg);-moz-transform:scaleX(-1) rotate(270deg);-ms-transform:scaleX(-1) rotate(270deg);-o-transform:scaleX(-1) rotate(270deg);transform:scaleX(-1) rotate(270deg)}@media only screen and (max-width:480px){.wy-form button[type=submit]{margin:.7em 0 0}.wy-form input[type=color],.wy-form input[type=date],.wy-form input[type=datetime-local],.wy-form input[type=datetime],.wy-form input[type=email],.wy-form input[type=month],.wy-form input[type=number],.wy-form input[type=password],.wy-form input[type=search],.wy-form input[type=tel],.wy-form input[type=text],.wy-form input[type=time],.wy-form input[type=url],.wy-form input[type=week],.wy-form label{margin-bottom:.3em;display:block}.wy-form input[type=color],.wy-form input[type=date],.wy-form input[type=datetime-local],.wy-form input[type=datetime],.wy-form input[type=email],.wy-form input[type=month],.wy-form input[type=number],.wy-form input[type=password],.wy-form input[type=search],.wy-form input[type=tel],.wy-form input[type=time],.wy-form input[type=url],.wy-form input[type=week]{margin-bottom:0}.wy-form-aligned .wy-control-group label{margin-bottom:.3em;text-align:left;display:block;width:100%}.wy-form-aligned .wy-control{margin:1.5em 0 0}.wy-form-message,.wy-form-message-inline,.wy-form .wy-help-inline{display:block;font-size:80%;padding:6px 0}}@media screen and (max-width:768px){.tablet-hide{display:none}}@media screen and (max-width:480px){.mobile-hide{display:none}}.float-left{float:left}.float-right{float:right}.full-width{width:100%}.rst-content table.docutils,.rst-content table.field-list,.wy-table{border-collapse:collapse;border-spacing:0;empty-cells:show;margin-bottom:24px}.rst-content table.docutils caption,.rst-content table.field-list caption,.wy-table caption{color:#000;font:italic 85%/1 arial,sans-serif;padding:1em 0;text-align:center}.rst-content table.docutils td,.rst-content table.docutils th,.rst-content table.field-list td,.rst-content table.field-list th,.wy-table td,.wy-table th{font-size:90%;margin:0;overflow:visible;padding:8px 16px}.rst-content table.docutils td:first-child,.rst-content table.docutils th:first-child,.rst-content table.field-list td:first-child,.rst-content table.field-list th:first-child,.wy-table td:first-child,.wy-table th:first-child{border-left-width:0}.rst-content table.docutils thead,.rst-content table.field-list thead,.wy-table thead{color:#000;text-align:left;vertical-align:bottom;white-space:nowrap}.rst-content table.docutils thead th,.rst-content table.field-list thead th,.wy-table thead th{font-weight:700;border-bottom:2px solid #e1e4e5}.rst-content table.docutils td,.rst-content table.field-list td,.wy-table td{background-color:transparent;vertical-align:middle}.rst-content table.docutils td p,.rst-content table.field-list td p,.wy-table td p{line-height:18px}.rst-content table.docutils td p:last-child,.rst-content table.field-list td p:last-child,.wy-table td p:last-child{margin-bottom:0}.rst-content table.docutils .wy-table-cell-min,.rst-content table.field-list .wy-table-cell-min,.wy-table .wy-table-cell-min{width:1%;padding-right:0}.rst-content table.docutils .wy-table-cell-min input[type=checkbox],.rst-content table.field-list .wy-table-cell-min input[type=checkbox],.wy-table .wy-table-cell-min input[type=checkbox]{margin:0}.wy-table-secondary{color:grey;font-size:90%}.wy-table-tertiary{color:grey;font-size:80%}.rst-content table.docutils:not(.field-list) tr:nth-child(2n-1) td,.wy-table-backed,.wy-table-odd td,.wy-table-striped tr:nth-child(2n-1) td{background-color:#f3f6f6}.rst-content table.docutils,.wy-table-bordered-all{border:1px solid #e1e4e5}.rst-content table.docutils td,.wy-table-bordered-all td{border-bottom:1px solid #e1e4e5;border-left:1px solid #e1e4e5}.rst-content table.docutils tbody>tr:last-child td,.wy-table-bordered-all tbody>tr:last-child td{border-bottom-width:0}.wy-table-bordered{border:1px solid #e1e4e5}.wy-table-bordered-rows td{border-bottom:1px solid #e1e4e5}.wy-table-bordered-rows tbody>tr:last-child td{border-bottom-width:0}.wy-table-horizontal td,.wy-table-horizontal th{border-width:0 0 1px;border-bottom:1px solid #e1e4e5}.wy-table-horizontal tbody>tr:last-child td{border-bottom-width:0}.wy-table-responsive{margin-bottom:24px;max-width:100%;overflow:auto}.wy-table-responsive table{margin-bottom:0!important}.wy-table-responsive table td,.wy-table-responsive table th{white-space:nowrap}a{color:#2980b9;text-decoration:none;cursor:pointer}a:hover{color:#3091d1}a:visited{color:#9b59b6}html{height:100%}body,html{overflow-x:hidden}body{font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;font-weight:400;color:#404040;min-height:100%;background:#edf0f2}.wy-text-left{text-align:left}.wy-text-center{text-align:center}.wy-text-right{text-align:right}.wy-text-large{font-size:120%}.wy-text-normal{font-size:100%}.wy-text-small,small{font-size:80%}.wy-text-strike{text-decoration:line-through}.wy-text-warning{color:#e67e22!important}a.wy-text-warning:hover{color:#eb9950!important}.wy-text-info{color:#2980b9!important}a.wy-text-info:hover{color:#409ad5!important}.wy-text-success{color:#27ae60!important}a.wy-text-success:hover{color:#36d278!important}.wy-text-danger{color:#e74c3c!important}a.wy-text-danger:hover{color:#ed7669!important}.wy-text-neutral{color:#404040!important}a.wy-text-neutral:hover{color:#595959!important}.rst-content .toctree-wrapper>p.caption,h1,h2,h3,h4,h5,h6,legend{margin-top:0;font-weight:700;font-family:Roboto Slab,ff-tisa-web-pro,Georgia,Arial,sans-serif}p{line-height:24px;font-size:16px;margin:0 0 24px}h1{font-size:175%}.rst-content .toctree-wrapper>p.caption,h2{font-size:150%}h3{font-size:125%}h4{font-size:115%}h5{font-size:110%}h6{font-size:100%}hr{display:block;height:1px;border:0;border-top:1px solid #e1e4e5;margin:24px 0;padding:0}.rst-content code,.rst-content tt,code{white-space:nowrap;max-width:100%;background:#fff;border:1px solid #e1e4e5;font-size:75%;padding:0 5px;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;color:#e74c3c;overflow-x:auto}.rst-content tt.code-large,code.code-large{font-size:90%}.rst-content .section ul,.rst-content .toctree-wrapper ul,.rst-content section ul,.wy-plain-list-disc,article ul{list-style:disc;line-height:24px;margin-bottom:24px}.rst-content .section ul li,.rst-content .toctree-wrapper ul li,.rst-content section ul li,.wy-plain-list-disc li,article ul li{list-style:disc;margin-left:24px}.rst-content .section ul li p:last-child,.rst-content .section ul li ul,.rst-content .toctree-wrapper ul li p:last-child,.rst-content .toctree-wrapper ul li ul,.rst-content section ul li p:last-child,.rst-content section ul li ul,.wy-plain-list-disc li p:last-child,.wy-plain-list-disc li ul,article ul li p:last-child,article ul li ul{margin-bottom:0}.rst-content .section ul li li,.rst-content .toctree-wrapper ul li li,.rst-content section ul li li,.wy-plain-list-disc li li,article ul li li{list-style:circle}.rst-content .section ul li li li,.rst-content .toctree-wrapper ul li li li,.rst-content section ul li li li,.wy-plain-list-disc li li li,article ul li li li{list-style:square}.rst-content .section ul li ol li,.rst-content .toctree-wrapper ul li ol li,.rst-content section ul li ol li,.wy-plain-list-disc li ol li,article ul li ol li{list-style:decimal}.rst-content .section ol,.rst-content .section ol.arabic,.rst-content .toctree-wrapper ol,.rst-content .toctree-wrapper ol.arabic,.rst-content section ol,.rst-content section ol.arabic,.wy-plain-list-decimal,article ol{list-style:decimal;line-height:24px;margin-bottom:24px}.rst-content .section ol.arabic li,.rst-content .section ol li,.rst-content .toctree-wrapper ol.arabic li,.rst-content .toctree-wrapper ol li,.rst-content section ol.arabic li,.rst-content section ol li,.wy-plain-list-decimal li,article ol li{list-style:decimal;margin-left:24px}.rst-content .section ol.arabic li ul,.rst-content .section ol li p:last-child,.rst-content .section ol li ul,.rst-content .toctree-wrapper ol.arabic li ul,.rst-content .toctree-wrapper ol li p:last-child,.rst-content .toctree-wrapper ol li ul,.rst-content section ol.arabic li ul,.rst-content section ol li p:last-child,.rst-content section ol li ul,.wy-plain-list-decimal li p:last-child,.wy-plain-list-decimal li ul,article ol li p:last-child,article ol li ul{margin-bottom:0}.rst-content .section ol.arabic li ul li,.rst-content .section ol li ul li,.rst-content .toctree-wrapper ol.arabic li ul li,.rst-content .toctree-wrapper ol li ul li,.rst-content section ol.arabic li ul li,.rst-content section ol li ul li,.wy-plain-list-decimal li ul li,article ol li ul li{list-style:disc}.wy-breadcrumbs{*zoom:1}.wy-breadcrumbs:after,.wy-breadcrumbs:before{display:table;content:""}.wy-breadcrumbs:after{clear:both}.wy-breadcrumbs>li{display:inline-block;padding-top:5px}.wy-breadcrumbs>li.wy-breadcrumbs-aside{float:right}.rst-content .wy-breadcrumbs>li code,.rst-content .wy-breadcrumbs>li tt,.wy-breadcrumbs>li .rst-content tt,.wy-breadcrumbs>li code{all:inherit;color:inherit}.breadcrumb-item:before{content:"/";color:#bbb;font-size:13px;padding:0 6px 0 3px}.wy-breadcrumbs-extra{margin-bottom:0;color:#b3b3b3;font-size:80%;display:inline-block}@media screen and (max-width:480px){.wy-breadcrumbs-extra,.wy-breadcrumbs li.wy-breadcrumbs-aside{display:none}}@media print{.wy-breadcrumbs li.wy-breadcrumbs-aside{display:none}}html{font-size:16px}.wy-affix{position:fixed;top:1.618em}.wy-menu a:hover{text-decoration:none}.wy-menu-horiz{*zoom:1}.wy-menu-horiz:after,.wy-menu-horiz:before{display:table;content:""}.wy-menu-horiz:after{clear:both}.wy-menu-horiz li,.wy-menu-horiz ul{display:inline-block}.wy-menu-horiz li:hover{background:hsla(0,0%,100%,.1)}.wy-menu-horiz li.divide-left{border-left:1px solid #404040}.wy-menu-horiz li.divide-right{border-right:1px solid #404040}.wy-menu-horiz a{height:32px;display:inline-block;line-height:32px;padding:0 16px}.wy-menu-vertical{width:300px}.wy-menu-vertical header,.wy-menu-vertical p.caption{color:#55a5d9;height:32px;line-height:32px;padding:0 1.618em;margin:12px 0 0;display:block;font-weight:700;text-transform:uppercase;font-size:85%;white-space:nowrap}.wy-menu-vertical ul{margin-bottom:0}.wy-menu-vertical li.divide-top{border-top:1px solid #404040}.wy-menu-vertical li.divide-bottom{border-bottom:1px solid #404040}.wy-menu-vertical li.current{background:#e3e3e3}.wy-menu-vertical li.current a{color:grey;border-right:1px solid #c9c9c9;padding:.4045em 2.427em}.wy-menu-vertical li.current a:hover{background:#d6d6d6}.rst-content .wy-menu-vertical li tt,.wy-menu-vertical li .rst-content tt,.wy-menu-vertical li code{border:none;background:inherit;color:inherit;padding-left:0;padding-right:0}.wy-menu-vertical li button.toctree-expand{display:block;float:left;margin-left:-1.2em;line-height:18px;color:#4d4d4d;border:none;background:none;padding:0}.wy-menu-vertical li.current>a,.wy-menu-vertical li.on a{color:#404040;font-weight:700;position:relative;background:#fcfcfc;border:none;padding:.4045em 1.618em}.wy-menu-vertical li.current>a:hover,.wy-menu-vertical li.on a:hover{background:#fcfcfc}.wy-menu-vertical li.current>a:hover button.toctree-expand,.wy-menu-vertical li.on a:hover button.toctree-expand{color:grey}.wy-menu-vertical li.current>a button.toctree-expand,.wy-menu-vertical li.on a button.toctree-expand{display:block;line-height:18px;color:#333}.wy-menu-vertical li.toctree-l1.current>a{border-bottom:1px solid #c9c9c9;border-top:1px solid #c9c9c9}.wy-menu-vertical .toctree-l1.current .toctree-l2>ul,.wy-menu-vertical .toctree-l2.current .toctree-l3>ul,.wy-menu-vertical .toctree-l3.current .toctree-l4>ul,.wy-menu-vertical .toctree-l4.current .toctree-l5>ul,.wy-menu-vertical .toctree-l5.current .toctree-l6>ul,.wy-menu-vertical .toctree-l6.current .toctree-l7>ul,.wy-menu-vertical .toctree-l7.current .toctree-l8>ul,.wy-menu-vertical .toctree-l8.current .toctree-l9>ul,.wy-menu-vertical .toctree-l9.current .toctree-l10>ul,.wy-menu-vertical .toctree-l10.current .toctree-l11>ul{display:none}.wy-menu-vertical .toctree-l1.current .current.toctree-l2>ul,.wy-menu-vertical .toctree-l2.current .current.toctree-l3>ul,.wy-menu-vertical .toctree-l3.current .current.toctree-l4>ul,.wy-menu-vertical .toctree-l4.current .current.toctree-l5>ul,.wy-menu-vertical .toctree-l5.current .current.toctree-l6>ul,.wy-menu-vertical .toctree-l6.current .current.toctree-l7>ul,.wy-menu-vertical .toctree-l7.current .current.toctree-l8>ul,.wy-menu-vertical .toctree-l8.current .current.toctree-l9>ul,.wy-menu-vertical .toctree-l9.current .current.toctree-l10>ul,.wy-menu-vertical .toctree-l10.current .current.toctree-l11>ul{display:block}.wy-menu-vertical li.toctree-l3,.wy-menu-vertical li.toctree-l4{font-size:.9em}.wy-menu-vertical li.toctree-l2 a,.wy-menu-vertical li.toctree-l3 a,.wy-menu-vertical li.toctree-l4 a,.wy-menu-vertical li.toctree-l5 a,.wy-menu-vertical li.toctree-l6 a,.wy-menu-vertical li.toctree-l7 a,.wy-menu-vertical li.toctree-l8 a,.wy-menu-vertical li.toctree-l9 a,.wy-menu-vertical li.toctree-l10 a{color:#404040}.wy-menu-vertical li.toctree-l2 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l3 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l4 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l5 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l6 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l7 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l8 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l9 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l10 a:hover button.toctree-expand{color:grey}.wy-menu-vertical li.toctree-l2.current li.toctree-l3>a,.wy-menu-vertical li.toctree-l3.current li.toctree-l4>a,.wy-menu-vertical li.toctree-l4.current li.toctree-l5>a,.wy-menu-vertical li.toctree-l5.current li.toctree-l6>a,.wy-menu-vertical li.toctree-l6.current li.toctree-l7>a,.wy-menu-vertical li.toctree-l7.current li.toctree-l8>a,.wy-menu-vertical li.toctree-l8.current li.toctree-l9>a,.wy-menu-vertical li.toctree-l9.current li.toctree-l10>a,.wy-menu-vertical li.toctree-l10.current li.toctree-l11>a{display:block}.wy-menu-vertical li.toctree-l2.current>a{padding:.4045em 2.427em}.wy-menu-vertical li.toctree-l2.current li.toctree-l3>a{padding:.4045em 1.618em .4045em 4.045em}.wy-menu-vertical li.toctree-l3.current>a{padding:.4045em 4.045em}.wy-menu-vertical li.toctree-l3.current li.toctree-l4>a{padding:.4045em 1.618em .4045em 5.663em}.wy-menu-vertical li.toctree-l4.current>a{padding:.4045em 5.663em}.wy-menu-vertical li.toctree-l4.current li.toctree-l5>a{padding:.4045em 1.618em .4045em 7.281em}.wy-menu-vertical li.toctree-l5.current>a{padding:.4045em 7.281em}.wy-menu-vertical li.toctree-l5.current li.toctree-l6>a{padding:.4045em 1.618em .4045em 8.899em}.wy-menu-vertical li.toctree-l6.current>a{padding:.4045em 8.899em}.wy-menu-vertical li.toctree-l6.current li.toctree-l7>a{padding:.4045em 1.618em .4045em 10.517em}.wy-menu-vertical li.toctree-l7.current>a{padding:.4045em 10.517em}.wy-menu-vertical li.toctree-l7.current li.toctree-l8>a{padding:.4045em 1.618em .4045em 12.135em}.wy-menu-vertical li.toctree-l8.current>a{padding:.4045em 12.135em}.wy-menu-vertical li.toctree-l8.current li.toctree-l9>a{padding:.4045em 1.618em .4045em 13.753em}.wy-menu-vertical li.toctree-l9.current>a{padding:.4045em 13.753em}.wy-menu-vertical li.toctree-l9.current li.toctree-l10>a{padding:.4045em 1.618em .4045em 15.371em}.wy-menu-vertical li.toctree-l10.current>a{padding:.4045em 15.371em}.wy-menu-vertical li.toctree-l10.current li.toctree-l11>a{padding:.4045em 1.618em .4045em 16.989em}.wy-menu-vertical li.toctree-l2.current>a,.wy-menu-vertical li.toctree-l2.current li.toctree-l3>a{background:#c9c9c9}.wy-menu-vertical li.toctree-l2 button.toctree-expand{color:#a3a3a3}.wy-menu-vertical li.toctree-l3.current>a,.wy-menu-vertical li.toctree-l3.current li.toctree-l4>a{background:#bdbdbd}.wy-menu-vertical li.toctree-l3 button.toctree-expand{color:#969696}.wy-menu-vertical li.current ul{display:block}.wy-menu-vertical li ul{margin-bottom:0;display:none}.wy-menu-vertical li ul li a{margin-bottom:0;color:#d9d9d9;font-weight:400}.wy-menu-vertical a{line-height:18px;padding:.4045em 1.618em;display:block;position:relative;font-size:90%;color:#d9d9d9}.wy-menu-vertical a:hover{background-color:#4e4a4a;cursor:pointer}.wy-menu-vertical a:hover button.toctree-expand{color:#d9d9d9}.wy-menu-vertical a:active{background-color:#2980b9;cursor:pointer;color:#fff}.wy-menu-vertical a:active button.toctree-expand{color:#fff}.wy-side-nav-search{display:block;width:300px;padding:.809em;margin-bottom:.809em;z-index:200;background-color:#2980b9;text-align:center;color:#fcfcfc}.wy-side-nav-search input[type=text]{width:100%;border-radius:50px;padding:6px 12px;border-color:#2472a4}.wy-side-nav-search img{display:block;margin:auto auto .809em;height:45px;width:45px;background-color:#2980b9;padding:5px;border-radius:100%}.wy-side-nav-search .wy-dropdown>a,.wy-side-nav-search>a{color:#fcfcfc;font-size:100%;font-weight:700;display:inline-block;padding:4px 6px;margin-bottom:.809em;max-width:100%}.wy-side-nav-search .wy-dropdown>a:hover,.wy-side-nav-search>a:hover{background:hsla(0,0%,100%,.1)}.wy-side-nav-search .wy-dropdown>a img.logo,.wy-side-nav-search>a img.logo{display:block;margin:0 auto;height:auto;width:auto;border-radius:0;max-width:100%;background:transparent}.wy-side-nav-search .wy-dropdown>a.icon img.logo,.wy-side-nav-search>a.icon img.logo{margin-top:.85em}.wy-side-nav-search>div.version{margin-top:-.4045em;margin-bottom:.809em;font-weight:400;color:hsla(0,0%,100%,.3)}.wy-nav .wy-menu-vertical header{color:#2980b9}.wy-nav .wy-menu-vertical a{color:#b3b3b3}.wy-nav .wy-menu-vertical a:hover{background-color:#2980b9;color:#fff}[data-menu-wrap]{-webkit-transition:all .2s ease-in;-moz-transition:all .2s ease-in;transition:all .2s ease-in;position:absolute;opacity:1;width:100%;opacity:0}[data-menu-wrap].move-center{left:0;right:auto;opacity:1}[data-menu-wrap].move-left{right:auto;left:-100%;opacity:0}[data-menu-wrap].move-right{right:-100%;left:auto;opacity:0}.wy-body-for-nav{background:#fcfcfc}.wy-grid-for-nav{position:absolute;width:100%;height:100%}.wy-nav-side{position:fixed;top:0;bottom:0;left:0;padding-bottom:2em;width:300px;overflow-x:hidden;overflow-y:hidden;min-height:100%;color:#9b9b9b;background:#343131;z-index:200}.wy-side-scroll{width:320px;position:relative;overflow-x:hidden;overflow-y:scroll;height:100%}.wy-nav-top{display:none;background:#2980b9;color:#fff;padding:.4045em .809em;position:relative;line-height:50px;text-align:center;font-size:100%;*zoom:1}.wy-nav-top:after,.wy-nav-top:before{display:table;content:""}.wy-nav-top:after{clear:both}.wy-nav-top a{color:#fff;font-weight:700}.wy-nav-top img{margin-right:12px;height:45px;width:45px;background-color:#2980b9;padding:5px;border-radius:100%}.wy-nav-top i{font-size:30px;float:left;cursor:pointer;padding-top:inherit}.wy-nav-content-wrap{margin-left:300px;background:#fcfcfc;min-height:100%}.wy-nav-content{padding:1.618em 3.236em;height:100%;max-width:800px;margin:auto}.wy-body-mask{position:fixed;width:100%;height:100%;background:rgba(0,0,0,.2);display:none;z-index:499}.wy-body-mask.on{display:block}footer{color:grey}footer p{margin-bottom:12px}.rst-content footer span.commit tt,footer span.commit .rst-content tt,footer span.commit code{padding:0;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;font-size:1em;background:none;border:none;color:grey}.rst-footer-buttons{*zoom:1}.rst-footer-buttons:after,.rst-footer-buttons:before{width:100%;display:table;content:""}.rst-footer-buttons:after{clear:both}.rst-breadcrumbs-buttons{margin-top:12px;*zoom:1}.rst-breadcrumbs-buttons:after,.rst-breadcrumbs-buttons:before{display:table;content:""}.rst-breadcrumbs-buttons:after{clear:both}#search-results .search li{margin-bottom:24px;border-bottom:1px solid #e1e4e5;padding-bottom:24px}#search-results .search li:first-child{border-top:1px solid #e1e4e5;padding-top:24px}#search-results .search li a{font-size:120%;margin-bottom:12px;display:inline-block}#search-results .context{color:grey;font-size:90%}.genindextable li>ul{margin-left:24px}@media screen and (max-width:768px){.wy-body-for-nav{background:#fcfcfc}.wy-nav-top{display:block}.wy-nav-side{left:-300px}.wy-nav-side.shift{width:85%;left:0}.wy-menu.wy-menu-vertical,.wy-side-nav-search,.wy-side-scroll{width:auto}.wy-nav-content-wrap{margin-left:0}.wy-nav-content-wrap .wy-nav-content{padding:1.618em}.wy-nav-content-wrap.shift{position:fixed;min-width:100%;left:85%;top:0;height:100%;overflow:hidden}}@media screen and (min-width:1100px){.wy-nav-content-wrap{background:rgba(0,0,0,.05)}.wy-nav-content{margin:0;background:#fcfcfc}}@media print{.rst-versions,.wy-nav-side,footer{display:none}.wy-nav-content-wrap{margin-left:0}}.rst-versions{position:fixed;bottom:0;left:0;width:300px;color:#fcfcfc;background:#1f1d1d;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;z-index:400}.rst-versions a{color:#2980b9;text-decoration:none}.rst-versions .rst-badge-small{display:none}.rst-versions .rst-current-version{padding:12px;background-color:#272525;display:block;text-align:right;font-size:90%;cursor:pointer;color:#27ae60;*zoom:1}.rst-versions .rst-current-version:after,.rst-versions .rst-current-version:before{display:table;content:""}.rst-versions .rst-current-version:after{clear:both}.rst-content .code-block-caption .rst-versions .rst-current-version .headerlink,.rst-content .eqno .rst-versions .rst-current-version .headerlink,.rst-content .rst-versions .rst-current-version .admonition-title,.rst-content code.download .rst-versions .rst-current-version span:first-child,.rst-content dl dt .rst-versions .rst-current-version .headerlink,.rst-content h1 .rst-versions .rst-current-version .headerlink,.rst-content h2 .rst-versions .rst-current-version .headerlink,.rst-content h3 .rst-versions .rst-current-version .headerlink,.rst-content h4 .rst-versions .rst-current-version .headerlink,.rst-content h5 .rst-versions .rst-current-version .headerlink,.rst-content h6 .rst-versions .rst-current-version .headerlink,.rst-content p .rst-versions .rst-current-version .headerlink,.rst-content table>caption .rst-versions .rst-current-version .headerlink,.rst-content tt.download .rst-versions .rst-current-version span:first-child,.rst-versions .rst-current-version .fa,.rst-versions .rst-current-version .icon,.rst-versions .rst-current-version .rst-content .admonition-title,.rst-versions .rst-current-version .rst-content .code-block-caption .headerlink,.rst-versions .rst-current-version .rst-content .eqno .headerlink,.rst-versions .rst-current-version .rst-content code.download span:first-child,.rst-versions .rst-current-version .rst-content dl dt .headerlink,.rst-versions .rst-current-version .rst-content h1 .headerlink,.rst-versions .rst-current-version .rst-content h2 .headerlink,.rst-versions .rst-current-version .rst-content h3 .headerlink,.rst-versions .rst-current-version .rst-content h4 .headerlink,.rst-versions .rst-current-version .rst-content h5 .headerlink,.rst-versions .rst-current-version .rst-content h6 .headerlink,.rst-versions .rst-current-version .rst-content p .headerlink,.rst-versions .rst-current-version .rst-content table>caption .headerlink,.rst-versions .rst-current-version .rst-content tt.download span:first-child,.rst-versions .rst-current-version .wy-menu-vertical li button.toctree-expand,.wy-menu-vertical li .rst-versions .rst-current-version button.toctree-expand{color:#fcfcfc}.rst-versions .rst-current-version .fa-book,.rst-versions .rst-current-version .icon-book{float:left}.rst-versions .rst-current-version.rst-out-of-date{background-color:#e74c3c;color:#fff}.rst-versions .rst-current-version.rst-active-old-version{background-color:#f1c40f;color:#000}.rst-versions.shift-up{height:auto;max-height:100%;overflow-y:scroll}.rst-versions.shift-up .rst-other-versions{display:block}.rst-versions .rst-other-versions{font-size:90%;padding:12px;color:grey;display:none}.rst-versions .rst-other-versions hr{display:block;height:1px;border:0;margin:20px 0;padding:0;border-top:1px solid #413d3d}.rst-versions .rst-other-versions dd{display:inline-block;margin:0}.rst-versions .rst-other-versions dd a{display:inline-block;padding:6px;color:#fcfcfc}.rst-versions.rst-badge{width:auto;bottom:20px;right:20px;left:auto;border:none;max-width:300px;max-height:90%}.rst-versions.rst-badge .fa-book,.rst-versions.rst-badge .icon-book{float:none;line-height:30px}.rst-versions.rst-badge.shift-up .rst-current-version{text-align:right}.rst-versions.rst-badge.shift-up .rst-current-version .fa-book,.rst-versions.rst-badge.shift-up .rst-current-version .icon-book{float:left}.rst-versions.rst-badge>.rst-current-version{width:auto;height:30px;line-height:30px;padding:0 6px;display:block;text-align:center}@media screen and (max-width:768px){.rst-versions{width:85%;display:none}.rst-versions.shift{display:block}}.rst-content .toctree-wrapper>p.caption,.rst-content h1,.rst-content h2,.rst-content h3,.rst-content h4,.rst-content h5,.rst-content h6{margin-bottom:24px}.rst-content img{max-width:100%;height:auto}.rst-content div.figure,.rst-content figure{margin-bottom:24px}.rst-content div.figure .caption-text,.rst-content figure .caption-text{font-style:italic}.rst-content div.figure p:last-child.caption,.rst-content figure p:last-child.caption{margin-bottom:0}.rst-content div.figure.align-center,.rst-content figure.align-center{text-align:center}.rst-content .section>a>img,.rst-content .section>img,.rst-content section>a>img,.rst-content section>img{margin-bottom:24px}.rst-content abbr[title]{text-decoration:none}.rst-content.style-external-links a.reference.external:after{font-family:FontAwesome;content:"\f08e";color:#b3b3b3;vertical-align:super;font-size:60%;margin:0 .2em}.rst-content blockquote{margin-left:24px;line-height:24px;margin-bottom:24px}.rst-content pre.literal-block{white-space:pre;margin:0;padding:12px;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;display:block;overflow:auto}.rst-content div[class^=highlight],.rst-content pre.literal-block{border:1px solid #e1e4e5;overflow-x:auto;margin:1px 0 24px}.rst-content div[class^=highlight] div[class^=highlight],.rst-content pre.literal-block div[class^=highlight]{padding:0;border:none;margin:0}.rst-content div[class^=highlight] td.code{width:100%}.rst-content .linenodiv pre{border-right:1px solid #e6e9ea;margin:0;padding:12px;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;user-select:none;pointer-events:none}.rst-content div[class^=highlight] pre{white-space:pre;margin:0;padding:12px;display:block;overflow:auto}.rst-content div[class^=highlight] pre .hll{display:block;margin:0 -12px;padding:0 12px}.rst-content .linenodiv pre,.rst-content div[class^=highlight] pre,.rst-content pre.literal-block{font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;font-size:12px;line-height:1.4}.rst-content div.highlight .gp,.rst-content div.highlight span.linenos{user-select:none;pointer-events:none}.rst-content div.highlight span.linenos{display:inline-block;padding-left:0;padding-right:12px;margin-right:12px;border-right:1px solid #e6e9ea}.rst-content .code-block-caption{font-style:italic;font-size:85%;line-height:1;padding:1em 0;text-align:center}@media print{.rst-content .codeblock,.rst-content div[class^=highlight],.rst-content div[class^=highlight] pre{white-space:pre-wrap}}.rst-content .admonition,.rst-content .admonition-todo,.rst-content .attention,.rst-content .caution,.rst-content .danger,.rst-content .error,.rst-content .hint,.rst-content .important,.rst-content .note,.rst-content .seealso,.rst-content .tip,.rst-content .warning{clear:both}.rst-content .admonition-todo .last,.rst-content .admonition-todo>:last-child,.rst-content .admonition .last,.rst-content .admonition>:last-child,.rst-content .attention .last,.rst-content .attention>:last-child,.rst-content .caution .last,.rst-content .caution>:last-child,.rst-content .danger .last,.rst-content .danger>:last-child,.rst-content .error .last,.rst-content .error>:last-child,.rst-content .hint .last,.rst-content .hint>:last-child,.rst-content .important .last,.rst-content .important>:last-child,.rst-content .note .last,.rst-content .note>:last-child,.rst-content .seealso .last,.rst-content .seealso>:last-child,.rst-content .tip .last,.rst-content .tip>:last-child,.rst-content .warning .last,.rst-content .warning>:last-child{margin-bottom:0}.rst-content .admonition-title:before{margin-right:4px}.rst-content .admonition table{border-color:rgba(0,0,0,.1)}.rst-content .admonition table td,.rst-content .admonition table th{background:transparent!important;border-color:rgba(0,0,0,.1)!important}.rst-content .section ol.loweralpha,.rst-content .section ol.loweralpha>li,.rst-content .toctree-wrapper ol.loweralpha,.rst-content .toctree-wrapper ol.loweralpha>li,.rst-content section ol.loweralpha,.rst-content section ol.loweralpha>li{list-style:lower-alpha}.rst-content .section ol.upperalpha,.rst-content .section ol.upperalpha>li,.rst-content .toctree-wrapper ol.upperalpha,.rst-content .toctree-wrapper ol.upperalpha>li,.rst-content section ol.upperalpha,.rst-content section ol.upperalpha>li{list-style:upper-alpha}.rst-content .section ol li>*,.rst-content .section ul li>*,.rst-content .toctree-wrapper ol li>*,.rst-content .toctree-wrapper ul li>*,.rst-content section ol li>*,.rst-content section ul li>*{margin-top:12px;margin-bottom:12px}.rst-content .section ol li>:first-child,.rst-content .section ul li>:first-child,.rst-content .toctree-wrapper ol li>:first-child,.rst-content .toctree-wrapper ul li>:first-child,.rst-content section ol li>:first-child,.rst-content section ul li>:first-child{margin-top:0}.rst-content .section ol li>p,.rst-content .section ol li>p:last-child,.rst-content .section ul li>p,.rst-content .section ul li>p:last-child,.rst-content .toctree-wrapper ol li>p,.rst-content .toctree-wrapper ol li>p:last-child,.rst-content .toctree-wrapper ul li>p,.rst-content .toctree-wrapper ul li>p:last-child,.rst-content section ol li>p,.rst-content section ol li>p:last-child,.rst-content section ul li>p,.rst-content section ul li>p:last-child{margin-bottom:12px}.rst-content .section ol li>p:only-child,.rst-content .section ol li>p:only-child:last-child,.rst-content .section ul li>p:only-child,.rst-content .section ul li>p:only-child:last-child,.rst-content .toctree-wrapper ol li>p:only-child,.rst-content .toctree-wrapper ol li>p:only-child:last-child,.rst-content .toctree-wrapper ul li>p:only-child,.rst-content .toctree-wrapper ul li>p:only-child:last-child,.rst-content section ol li>p:only-child,.rst-content section ol li>p:only-child:last-child,.rst-content section ul li>p:only-child,.rst-content section ul li>p:only-child:last-child{margin-bottom:0}.rst-content .section ol li>ol,.rst-content .section ol li>ul,.rst-content .section ul li>ol,.rst-content .section ul li>ul,.rst-content .toctree-wrapper ol li>ol,.rst-content .toctree-wrapper ol li>ul,.rst-content .toctree-wrapper ul li>ol,.rst-content .toctree-wrapper ul li>ul,.rst-content section ol li>ol,.rst-content section ol li>ul,.rst-content section ul li>ol,.rst-content section ul li>ul{margin-bottom:12px}.rst-content .section ol.simple li>*,.rst-content .section ol.simple li ol,.rst-content .section ol.simple li ul,.rst-content .section ul.simple li>*,.rst-content .section ul.simple li ol,.rst-content .section ul.simple li ul,.rst-content .toctree-wrapper ol.simple li>*,.rst-content .toctree-wrapper ol.simple li ol,.rst-content .toctree-wrapper ol.simple li ul,.rst-content .toctree-wrapper ul.simple li>*,.rst-content .toctree-wrapper ul.simple li ol,.rst-content .toctree-wrapper ul.simple li ul,.rst-content section ol.simple li>*,.rst-content section ol.simple li ol,.rst-content section ol.simple li ul,.rst-content section ul.simple li>*,.rst-content section ul.simple li ol,.rst-content section ul.simple li ul{margin-top:0;margin-bottom:0}.rst-content .line-block{margin-left:0;margin-bottom:24px;line-height:24px}.rst-content .line-block .line-block{margin-left:24px;margin-bottom:0}.rst-content .topic-title{font-weight:700;margin-bottom:12px}.rst-content .toc-backref{color:#404040}.rst-content .align-right{float:right;margin:0 0 24px 24px}.rst-content .align-left{float:left;margin:0 24px 24px 0}.rst-content .align-center{margin:auto}.rst-content .align-center:not(table){display:block}.rst-content .code-block-caption .headerlink,.rst-content .eqno .headerlink,.rst-content .toctree-wrapper>p.caption .headerlink,.rst-content dl dt .headerlink,.rst-content h1 .headerlink,.rst-content h2 .headerlink,.rst-content h3 .headerlink,.rst-content h4 .headerlink,.rst-content h5 .headerlink,.rst-content h6 .headerlink,.rst-content p.caption .headerlink,.rst-content p .headerlink,.rst-content table>caption .headerlink{opacity:0;font-size:14px;font-family:FontAwesome;margin-left:.5em}.rst-content .code-block-caption .headerlink:focus,.rst-content .code-block-caption:hover .headerlink,.rst-content .eqno .headerlink:focus,.rst-content .eqno:hover .headerlink,.rst-content .toctree-wrapper>p.caption .headerlink:focus,.rst-content .toctree-wrapper>p.caption:hover .headerlink,.rst-content dl dt .headerlink:focus,.rst-content dl dt:hover .headerlink,.rst-content h1 .headerlink:focus,.rst-content h1:hover .headerlink,.rst-content h2 .headerlink:focus,.rst-content h2:hover .headerlink,.rst-content h3 .headerlink:focus,.rst-content h3:hover .headerlink,.rst-content h4 .headerlink:focus,.rst-content h4:hover .headerlink,.rst-content h5 .headerlink:focus,.rst-content h5:hover .headerlink,.rst-content h6 .headerlink:focus,.rst-content h6:hover .headerlink,.rst-content p.caption .headerlink:focus,.rst-content p.caption:hover .headerlink,.rst-content p .headerlink:focus,.rst-content p:hover .headerlink,.rst-content table>caption .headerlink:focus,.rst-content table>caption:hover .headerlink{opacity:1}.rst-content p a{overflow-wrap:anywhere}.rst-content .wy-table td p,.rst-content .wy-table td ul,.rst-content .wy-table th p,.rst-content .wy-table th ul,.rst-content table.docutils td p,.rst-content table.docutils td ul,.rst-content table.docutils th p,.rst-content table.docutils th ul,.rst-content table.field-list td p,.rst-content table.field-list td ul,.rst-content table.field-list th p,.rst-content table.field-list th ul{font-size:inherit}.rst-content .btn:focus{outline:2px solid}.rst-content table>caption .headerlink:after{font-size:12px}.rst-content .centered{text-align:center}.rst-content .sidebar{float:right;width:40%;display:block;margin:0 0 24px 24px;padding:24px;background:#f3f6f6;border:1px solid #e1e4e5}.rst-content .sidebar dl,.rst-content .sidebar p,.rst-content .sidebar ul{font-size:90%}.rst-content .sidebar .last,.rst-content .sidebar>:last-child{margin-bottom:0}.rst-content .sidebar .sidebar-title{display:block;font-family:Roboto Slab,ff-tisa-web-pro,Georgia,Arial,sans-serif;font-weight:700;background:#e1e4e5;padding:6px 12px;margin:-24px -24px 24px;font-size:100%}.rst-content .highlighted{background:#f1c40f;box-shadow:0 0 0 2px #f1c40f;display:inline;font-weight:700}.rst-content .citation-reference,.rst-content .footnote-reference{vertical-align:baseline;position:relative;top:-.4em;line-height:0;font-size:90%}.rst-content .citation-reference>span.fn-bracket,.rst-content .footnote-reference>span.fn-bracket{display:none}.rst-content .hlist{width:100%}.rst-content dl dt span.classifier:before{content:" : "}.rst-content dl dt span.classifier-delimiter{display:none!important}html.writer-html4 .rst-content table.docutils.citation,html.writer-html4 .rst-content table.docutils.footnote{background:none;border:none}html.writer-html4 .rst-content table.docutils.citation td,html.writer-html4 .rst-content table.docutils.citation tr,html.writer-html4 .rst-content table.docutils.footnote td,html.writer-html4 .rst-content table.docutils.footnote tr{border:none;background-color:transparent!important;white-space:normal}html.writer-html4 .rst-content table.docutils.citation td.label,html.writer-html4 .rst-content table.docutils.footnote td.label{padding-left:0;padding-right:0;vertical-align:top}html.writer-html5 .rst-content dl.citation,html.writer-html5 .rst-content dl.field-list,html.writer-html5 .rst-content dl.footnote{display:grid;grid-template-columns:auto minmax(80%,95%)}html.writer-html5 .rst-content dl.citation>dt,html.writer-html5 .rst-content dl.field-list>dt,html.writer-html5 .rst-content dl.footnote>dt{display:inline-grid;grid-template-columns:max-content auto}html.writer-html5 .rst-content aside.citation,html.writer-html5 .rst-content aside.footnote,html.writer-html5 .rst-content div.citation{display:grid;grid-template-columns:auto auto minmax(.65rem,auto) minmax(40%,95%)}html.writer-html5 .rst-content aside.citation>span.label,html.writer-html5 .rst-content aside.footnote>span.label,html.writer-html5 .rst-content div.citation>span.label{grid-column-start:1;grid-column-end:2}html.writer-html5 .rst-content aside.citation>span.backrefs,html.writer-html5 .rst-content aside.footnote>span.backrefs,html.writer-html5 .rst-content div.citation>span.backrefs{grid-column-start:2;grid-column-end:3;grid-row-start:1;grid-row-end:3}html.writer-html5 .rst-content aside.citation>p,html.writer-html5 .rst-content aside.footnote>p,html.writer-html5 .rst-content div.citation>p{grid-column-start:4;grid-column-end:5}html.writer-html5 .rst-content dl.citation,html.writer-html5 .rst-content dl.field-list,html.writer-html5 .rst-content dl.footnote{margin-bottom:24px}html.writer-html5 .rst-content dl.citation>dt,html.writer-html5 .rst-content dl.field-list>dt,html.writer-html5 .rst-content dl.footnote>dt{padding-left:1rem}html.writer-html5 .rst-content dl.citation>dd,html.writer-html5 .rst-content dl.citation>dt,html.writer-html5 .rst-content dl.field-list>dd,html.writer-html5 .rst-content dl.field-list>dt,html.writer-html5 .rst-content dl.footnote>dd,html.writer-html5 .rst-content dl.footnote>dt{margin-bottom:0}html.writer-html5 .rst-content dl.citation,html.writer-html5 .rst-content dl.footnote{font-size:.9rem}html.writer-html5 .rst-content dl.citation>dt,html.writer-html5 .rst-content dl.footnote>dt{margin:0 .5rem .5rem 0;line-height:1.2rem;word-break:break-all;font-weight:400}html.writer-html5 .rst-content dl.citation>dt>span.brackets:before,html.writer-html5 .rst-content dl.footnote>dt>span.brackets:before{content:"["}html.writer-html5 .rst-content dl.citation>dt>span.brackets:after,html.writer-html5 .rst-content dl.footnote>dt>span.brackets:after{content:"]"}html.writer-html5 .rst-content dl.citation>dt>span.fn-backref,html.writer-html5 .rst-content dl.footnote>dt>span.fn-backref{text-align:left;font-style:italic;margin-left:.65rem;word-break:break-word;word-spacing:-.1rem;max-width:5rem}html.writer-html5 .rst-content dl.citation>dt>span.fn-backref>a,html.writer-html5 .rst-content dl.footnote>dt>span.fn-backref>a{word-break:keep-all}html.writer-html5 .rst-content dl.citation>dt>span.fn-backref>a:not(:first-child):before,html.writer-html5 .rst-content dl.footnote>dt>span.fn-backref>a:not(:first-child):before{content:" "}html.writer-html5 .rst-content dl.citation>dd,html.writer-html5 .rst-content dl.footnote>dd{margin:0 0 .5rem;line-height:1.2rem}html.writer-html5 .rst-content dl.citation>dd p,html.writer-html5 .rst-content dl.footnote>dd p{font-size:.9rem}html.writer-html5 .rst-content aside.citation,html.writer-html5 .rst-content aside.footnote,html.writer-html5 .rst-content div.citation{padding-left:1rem;padding-right:1rem;font-size:.9rem;line-height:1.2rem}html.writer-html5 .rst-content aside.citation p,html.writer-html5 .rst-content aside.footnote p,html.writer-html5 .rst-content div.citation p{font-size:.9rem;line-height:1.2rem;margin-bottom:12px}html.writer-html5 .rst-content aside.citation span.backrefs,html.writer-html5 .rst-content aside.footnote span.backrefs,html.writer-html5 .rst-content div.citation span.backrefs{text-align:left;font-style:italic;margin-left:.65rem;word-break:break-word;word-spacing:-.1rem;max-width:5rem}html.writer-html5 .rst-content aside.citation span.backrefs>a,html.writer-html5 .rst-content aside.footnote span.backrefs>a,html.writer-html5 .rst-content div.citation span.backrefs>a{word-break:keep-all}html.writer-html5 .rst-content aside.citation span.backrefs>a:not(:first-child):before,html.writer-html5 .rst-content aside.footnote span.backrefs>a:not(:first-child):before,html.writer-html5 .rst-content div.citation span.backrefs>a:not(:first-child):before{content:" "}html.writer-html5 .rst-content aside.citation span.label,html.writer-html5 .rst-content aside.footnote span.label,html.writer-html5 .rst-content div.citation span.label{line-height:1.2rem}html.writer-html5 .rst-content aside.citation-list,html.writer-html5 .rst-content aside.footnote-list,html.writer-html5 .rst-content div.citation-list{margin-bottom:24px}html.writer-html5 .rst-content dl.option-list kbd{font-size:.9rem}.rst-content table.docutils.footnote,html.writer-html4 .rst-content table.docutils.citation,html.writer-html5 .rst-content aside.footnote,html.writer-html5 .rst-content aside.footnote-list aside.footnote,html.writer-html5 .rst-content div.citation-list>div.citation,html.writer-html5 .rst-content dl.citation,html.writer-html5 .rst-content dl.footnote{color:grey}.rst-content table.docutils.footnote code,.rst-content table.docutils.footnote tt,html.writer-html4 .rst-content table.docutils.citation code,html.writer-html4 .rst-content table.docutils.citation tt,html.writer-html5 .rst-content aside.footnote-list aside.footnote code,html.writer-html5 .rst-content aside.footnote-list aside.footnote tt,html.writer-html5 .rst-content aside.footnote code,html.writer-html5 .rst-content aside.footnote tt,html.writer-html5 .rst-content div.citation-list>div.citation code,html.writer-html5 .rst-content div.citation-list>div.citation tt,html.writer-html5 .rst-content dl.citation code,html.writer-html5 .rst-content dl.citation tt,html.writer-html5 .rst-content dl.footnote code,html.writer-html5 .rst-content dl.footnote tt{color:#555}.rst-content .wy-table-responsive.citation,.rst-content .wy-table-responsive.footnote{margin-bottom:0}.rst-content .wy-table-responsive.citation+:not(.citation),.rst-content .wy-table-responsive.footnote+:not(.footnote){margin-top:24px}.rst-content .wy-table-responsive.citation:last-child,.rst-content .wy-table-responsive.footnote:last-child{margin-bottom:24px}.rst-content table.docutils th{border-color:#e1e4e5}html.writer-html5 .rst-content table.docutils th{border:1px solid #e1e4e5}html.writer-html5 .rst-content table.docutils td>p,html.writer-html5 .rst-content table.docutils th>p{line-height:1rem;margin-bottom:0;font-size:.9rem}.rst-content table.docutils td .last,.rst-content table.docutils td .last>:last-child{margin-bottom:0}.rst-content table.field-list,.rst-content table.field-list td{border:none}.rst-content table.field-list td p{line-height:inherit}.rst-content table.field-list td>strong{display:inline-block}.rst-content table.field-list .field-name{padding-right:10px;text-align:left;white-space:nowrap}.rst-content table.field-list .field-body{text-align:left}.rst-content code,.rst-content tt{color:#000;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;padding:2px 5px}.rst-content code big,.rst-content code em,.rst-content tt big,.rst-content tt em{font-size:100%!important;line-height:normal}.rst-content code.literal,.rst-content tt.literal{color:#e74c3c;white-space:normal}.rst-content code.xref,.rst-content tt.xref,a .rst-content code,a .rst-content tt{font-weight:700;color:#404040;overflow-wrap:normal}.rst-content kbd,.rst-content pre,.rst-content samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace}.rst-content a code,.rst-content a tt{color:#2980b9}.rst-content dl{margin-bottom:24px}.rst-content dl dt{font-weight:700;margin-bottom:12px}.rst-content dl ol,.rst-content dl p,.rst-content dl table,.rst-content dl ul{margin-bottom:12px}.rst-content dl dd{margin:0 0 12px 24px;line-height:24px}.rst-content dl dd>ol:last-child,.rst-content dl dd>p:last-child,.rst-content dl dd>table:last-child,.rst-content dl dd>ul:last-child{margin-bottom:0}html.writer-html4 .rst-content dl:not(.docutils),html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple){margin-bottom:24px}html.writer-html4 .rst-content dl:not(.docutils)>dt,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt{display:table;margin:6px 0;font-size:90%;line-height:normal;background:#e7f2fa;color:#2980b9;border-top:3px solid #6ab0de;padding:6px;position:relative}html.writer-html4 .rst-content dl:not(.docutils)>dt:before,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt:before{color:#6ab0de}html.writer-html4 .rst-content dl:not(.docutils)>dt .headerlink,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt .headerlink{color:#404040;font-size:100%!important}html.writer-html4 .rst-content dl:not(.docutils) dl:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) dl:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt{margin-bottom:6px;border:none;border-left:3px solid #ccc;background:#f0f0f0;color:#555}html.writer-html4 .rst-content dl:not(.docutils) dl:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt .headerlink,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) dl:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt .headerlink{color:#404040;font-size:100%!important}html.writer-html4 .rst-content dl:not(.docutils)>dt:first-child,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt:first-child{margin-top:0}html.writer-html4 .rst-content dl:not(.docutils) code.descclassname,html.writer-html4 .rst-content dl:not(.docutils) code.descname,html.writer-html4 .rst-content dl:not(.docutils) tt.descclassname,html.writer-html4 .rst-content dl:not(.docutils) tt.descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) code.descclassname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) code.descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) tt.descclassname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) tt.descname{background-color:transparent;border:none;padding:0;font-size:100%!important}html.writer-html4 .rst-content dl:not(.docutils) code.descname,html.writer-html4 .rst-content dl:not(.docutils) tt.descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) code.descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) tt.descname{font-weight:700}html.writer-html4 .rst-content dl:not(.docutils) .optional,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) .optional{display:inline-block;padding:0 4px;color:#000;font-weight:700}html.writer-html4 .rst-content dl:not(.docutils) .property,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) .property{display:inline-block;padding-right:8px;max-width:100%}html.writer-html4 .rst-content dl:not(.docutils) .k,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) .k{font-style:italic}html.writer-html4 .rst-content dl:not(.docutils) .descclassname,html.writer-html4 .rst-content dl:not(.docutils) .descname,html.writer-html4 .rst-content dl:not(.docutils) .sig-name,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) .descclassname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) .descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) .sig-name{font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;color:#000}.rst-content .viewcode-back,.rst-content .viewcode-link{display:inline-block;color:#27ae60;font-size:80%;padding-left:24px}.rst-content .viewcode-back{display:block;float:right}.rst-content p.rubric{margin-bottom:12px;font-weight:700}.rst-content code.download,.rst-content tt.download{background:inherit;padding:inherit;font-weight:400;font-family:inherit;font-size:inherit;color:inherit;border:inherit;white-space:inherit}.rst-content code.download span:first-child,.rst-content tt.download span:first-child{-webkit-font-smoothing:subpixel-antialiased}.rst-content code.download span:first-child:before,.rst-content tt.download span:first-child:before{margin-right:4px}.rst-content .guilabel{border:1px solid #7fbbe3;background:#e7f2fa;font-size:80%;font-weight:700;border-radius:4px;padding:2.4px 6px;margin:auto 2px}.rst-content :not(dl.option-list)>:not(dt):not(kbd):not(.kbd)>.kbd,.rst-content :not(dl.option-list)>:not(dt):not(kbd):not(.kbd)>kbd{color:inherit;font-size:80%;background-color:#fff;border:1px solid #a6a6a6;border-radius:4px;box-shadow:0 2px grey;padding:2.4px 6px;margin:auto 0}.rst-content .versionmodified{font-style:italic}@media screen and (max-width:480px){.rst-content .sidebar{width:100%}}span[id*=MathJax-Span]{color:#404040}.math{text-align:center}@font-face{font-family:Lato;src:url(fonts/lato-normal.woff2?bd03a2cc277bbbc338d464e679fe9942) format("woff2"),url(fonts/lato-normal.woff?27bd77b9162d388cb8d4c4217c7c5e2a) format("woff");font-weight:400;font-style:normal;font-display:block}@font-face{font-family:Lato;src:url(fonts/lato-bold.woff2?cccb897485813c7c256901dbca54ecf2) format("woff2"),url(fonts/lato-bold.woff?d878b6c29b10beca227e9eef4246111b) format("woff");font-weight:700;font-style:normal;font-display:block}@font-face{font-family:Lato;src:url(fonts/lato-bold-italic.woff2?0b6bb6725576b072c5d0b02ecdd1900d) format("woff2"),url(fonts/lato-bold-italic.woff?9c7e4e9eb485b4a121c760e61bc3707c) format("woff");font-weight:700;font-style:italic;font-display:block}@font-face{font-family:Lato;src:url(fonts/lato-normal-italic.woff2?4eb103b4d12be57cb1d040ed5e162e9d) format("woff2"),url(fonts/lato-normal-italic.woff?f28f2d6482446544ef1ea1ccc6dd5892) format("woff");font-weight:400;font-style:italic;font-display:block}@font-face{font-family:Roboto Slab;font-style:normal;font-weight:400;src:url(fonts/Roboto-Slab-Regular.woff2?7abf5b8d04d26a2cafea937019bca958) format("woff2"),url(fonts/Roboto-Slab-Regular.woff?c1be9284088d487c5e3ff0a10a92e58c) format("woff");font-display:block}@font-face{font-family:Roboto Slab;font-style:normal;font-weight:700;src:url(fonts/Roboto-Slab-Bold.woff2?9984f4a9bda09be08e83f2506954adbe) format("woff2"),url(fonts/Roboto-Slab-Bold.woff?bed5564a116b05148e3b3bea6fb1162a) format("woff");font-display:block}
diff --git a/assets/documentation/1.27.0-rc1/css/theme_extra.css b/assets/documentation/1.27.0-rc1/css/theme_extra.css
new file mode 100644
index 000000000..ab0631a18
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/css/theme_extra.css
@@ -0,0 +1,197 @@
+/*
+ * Wrap inline code samples otherwise they shoot of the side and
+ * can't be read at all.
+ *
+ * https://github.com/mkdocs/mkdocs/issues/313
+ * https://github.com/mkdocs/mkdocs/issues/233
+ * https://github.com/mkdocs/mkdocs/issues/834
+ */
+.rst-content code {
+    white-space: pre-wrap;
+    word-wrap: break-word;
+    padding: 2px 5px;
+}
+
+/**
+ * Make code blocks display as blocks and give them the appropriate
+ * font size and padding.
+ *
+ * https://github.com/mkdocs/mkdocs/issues/855
+ * https://github.com/mkdocs/mkdocs/issues/834
+ * https://github.com/mkdocs/mkdocs/issues/233
+ */
+.rst-content pre code {
+    white-space: pre;
+    word-wrap: normal;
+    display: block;
+    padding: 12px;
+    font-size: 12px;
+}
+
+/**
+ * Fix code colors
+ *
+ * https://github.com/mkdocs/mkdocs/issues/2027
+ */
+.rst-content code {
+    color: #E74C3C;
+}
+
+.rst-content pre code {
+    color: #000;
+    background: #f8f8f8;
+}
+
+/*
+ * Fix link colors when the link text is inline code.
+ *
+ * https://github.com/mkdocs/mkdocs/issues/718
+ */
+a code {
+    color: #2980B9;
+}
+a:hover code {
+    color: #3091d1;
+}
+a:visited code {
+    color: #9B59B6;
+}
+
+/*
+ * The CSS classes from highlight.js seem to clash with the
+ * ReadTheDocs theme causing some code to be incorrectly made
+ * bold and italic.
+ *
+ * https://github.com/mkdocs/mkdocs/issues/411
+ */
+pre .cs, pre .c {
+    font-weight: inherit;
+    font-style: inherit;
+}
+
+/*
+ * Fix some issues with the theme and non-highlighted code
+ * samples. Without and highlighting styles attached the
+ * formatting is broken.
+ *
+ * https://github.com/mkdocs/mkdocs/issues/319
+ */
+.rst-content .no-highlight {
+    display: block;
+    padding: 0.5em;
+    color: #333;
+}
+
+
+/*
+ * Additions specific to the search functionality provided by MkDocs
+ */
+
+.search-results {
+    margin-top: 23px;
+}
+
+.search-results article {
+    border-top: 1px solid #E1E4E5;
+    padding-top: 24px;
+}
+
+.search-results article:first-child {
+    border-top: none;
+}
+
+form .search-query {
+    width: 100%;
+    border-radius: 50px;
+    padding: 6px 12px;
+    border-color: #D1D4D5;
+}
+
+/*
+ * Improve inline code blocks within admonitions.
+ *
+ * https://github.com/mkdocs/mkdocs/issues/656
+ */
+ .rst-content .admonition code {
+    color: #404040;
+    border: 1px solid #c7c9cb;
+    border: 1px solid rgba(0, 0, 0, 0.2);
+    background: #f8fbfd;
+    background: rgba(255, 255, 255, 0.7);
+}
+
+/*
+ * Account for wide tables which go off the side.
+ * Override borders to avoid weirdness on narrow tables.
+ *
+ * https://github.com/mkdocs/mkdocs/issues/834
+ * https://github.com/mkdocs/mkdocs/pull/1034
+ */
+.rst-content .section .docutils {
+    width: 100%;
+    overflow: auto;
+    display: block;
+    border: none;
+}
+
+td, th {
+    border: 1px solid #e1e4e5 !important;
+    border-collapse: collapse;
+}
+
+/*
+ * Without the following amendments, the navigation in the theme will be
+ * slightly cut off. This is due to the fact that the .wy-nav-side has a
+ * padding-bottom of 2em, which must not necessarily align with the font-size of
+ * 90 % on the .rst-current-version container, combined with the padding of 12px
+ * above and below. These amendments fix this in two steps: First, make sure the
+ * .rst-current-version container has a fixed height of 40px, achieved using
+ * line-height, and then applying a padding-bottom of 40px to this container. In
+ * a second step, the items within that container are re-aligned using flexbox.
+ *
+ * https://github.com/mkdocs/mkdocs/issues/2012
+ */
+ .wy-nav-side {
+    padding-bottom: 40px;
+}
+
+/* For section-index only */
+.wy-menu-vertical .current-section p {
+    background-color: #e3e3e3;
+    color: #404040;
+}
+
+/*
+ * The second step of above amendment: Here we make sure the items are aligned
+ * correctly within the .rst-current-version container. Using flexbox, we
+ * achieve it in such a way that it will look like the following:
+ *
+ * [No repo_name]
+ *         Next >>                    // On the first page
+ * << Previous     Next >>            // On all subsequent pages
+ *
+ * [With repo_name]
+ *    <repo_name>        Next >>      // On the first page
+ * <repo_name>  << Previous  Next >>  // On all subsequent pages
+ *
+ * https://github.com/mkdocs/mkdocs/issues/2012
+ */
+.rst-versions .rst-current-version {
+    padding: 0 12px;
+    display: flex;
+    font-size: initial;
+    justify-content: space-between;
+    align-items: center;
+    line-height: 40px;
+}
+
+/*
+ * Please note that this amendment also involves removing certain inline-styles
+ * from the file ./mkdocs/themes/readthedocs/versions.html.
+ *
+ * https://github.com/mkdocs/mkdocs/issues/2012
+ */
+.rst-current-version span {
+    flex: 1;
+    text-align: center;
+}
diff --git a/assets/documentation/1.27.0-rc1/database_import/index.html b/assets/documentation/1.27.0-rc1/database_import/index.html
new file mode 100644
index 000000000..46a5d80bf
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/database_import/index.html
@@ -0,0 +1,788 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Importing Postgres databases - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Importing Postgres databases";
+        var mkdocs_page_input_path = "database_import.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Importing Postgres databases</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#how-it-works">How it works</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#the-microservice-type">The microservice type</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#the-monolith-type">The monolith type</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#a-practical-example">A practical example</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#import-optimizations">Import optimizations</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#customizing-pg_dump-and-pg_restore-behavior">Customizing pg_dump and pg_restore Behavior</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#online-import-and-upgrades">Online Import and Upgrades</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Importing Postgres databases</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="importing-postgres-databases">Importing Postgres databases</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>This section describes how to import one or more existing PostgreSQL
+databases inside a brand new CloudNativePG cluster.</p>
+<p>The import operation is based on the concept of online logical backups in PostgreSQL,
+and relies on <code>pg_dump</code> via a network connection to the origin host, and <code>pg_restore</code>.
+Thanks to native Multi-Version Concurrency Control (MVCC) and snapshots,
+PostgreSQL enables taking consistent backups over the network, in a concurrent
+manner, without stopping any write activity.</p>
+<p>Logical backups are also the most common, flexible and reliable technique to
+perform major upgrades of PostgreSQL versions.</p>
+<p>As a result, the instructions in this section are suitable for both:</p>
+<ul>
+<li>importing one or more databases from an existing PostgreSQL instance, even
+  outside Kubernetes</li>
+<li>importing the database from any PostgreSQL version to one that is either the
+  same or newer, enabling <em>major upgrades</em> of PostgreSQL (e.g. from version 13.x
+  to version 17.x)</li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>When performing major upgrades of PostgreSQL you are responsible for making
+sure that applications are compatible with the new version and that the
+upgrade path of the objects contained in the database (including extensions) is
+feasible.</p>
+</div>
+<p>In both cases, the operation is performed on a consistent <strong>snapshot</strong> of the
+origin database.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>For this reason we suggest to stop write operations on the source before
+the final import in the <code>Cluster</code> resource, as changes done to the source
+database after the start of the backup will not be in the destination cluster -
+hence why this feature is referred to as "offline import" or "offline major
+upgrade".</p>
+</div>
+<h2 id="how-it-works">How it works</h2>
+<p>Conceptually, the import requires you to create a new cluster from scratch
+(<em>destination cluster</em>), using the <a href="../bootstrap/"><code>initdb</code> bootstrap method</a>,
+and then complete the <code>initdb.import</code> subsection to import objects from an
+existing Postgres cluster (<em>source cluster</em>). As per PostgreSQL recommendation,
+we suggest that the PostgreSQL major version of the <em>destination cluster</em> is
+greater or equal than the one of the <em>source cluster</em>.</p>
+<p>CloudNativePG provides two main ways to import objects from the source cluster
+into the destination cluster:</p>
+<ul>
+<li>
+<p><strong>microservice approach</strong>: the destination cluster is designed to host a
+  single application database owned by the specified application user, as
+  recommended by the CloudNativePG project</p>
+</li>
+<li>
+<p><strong>monolith approach</strong>: the destination cluster is designed to host multiple
+  databases and different users, imported from the source cluster</p>
+</li>
+</ul>
+<p>The first import method is available via the <code>microservice</code> type, the
+second via the <code>monolith</code> type.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>It is your responsibility to ensure that the destination cluster can
+access the source cluster with a superuser or a user having enough
+privileges to take a logical backup with <code>pg_dump</code>. Please refer to the
+<a href="https://www.postgresql.org/docs/current/app-pgdump.html">PostgreSQL documentation on <code>pg_dump</code></a>
+for further information.</p>
+</div>
+<h2 id="the-microservice-type">The <code>microservice</code> type</h2>
+<p>With the microservice approach, you can specify a single database you want to
+import from the source cluster into the destination cluster. The operation is
+performed in 4 steps:</p>
+<ul>
+<li><code>initdb</code> bootstrap of the new cluster</li>
+<li>export of the selected database (in <code>initdb.import.databases</code>) using
+  <code>pg_dump -Fd</code></li>
+<li>import of the database using <code>pg_restore --no-acl --no-owner</code> into the
+  <code>initdb.database</code> (application database) owned by the <code>initdb.owner</code> user</li>
+<li>cleanup of the database dump file</li>
+<li>optional execution of the user defined SQL queries in the application
+  database via the <code>postImportApplicationSQL</code> parameter</li>
+<li>execution of <code>ANALYZE VERBOSE</code> on the imported database</li>
+</ul>
+<p>In the figure below, a single PostgreSQL cluster containing <em>N</em> databases is
+imported into separate CloudNativePG clusters, with each cluster using a
+microservice import for one of the <em>N</em> source databases.</p>
+<p><img alt="Example of microservice import type" src="../images/microservice-import.png" /></p>
+<p>For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest
+available major version at the time the operator was released) called
+<code>cluster-microservice</code> that imports the <code>angus</code> database from the
+<code>cluster-pg96</code> cluster (with the unsupported PostgreSQL 9.6), by connecting to
+the <code>postgres</code> database using the <code>postgres</code> user, via the password stored in
+the <code>cluster-pg96-superuser</code> secret.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-microservice
+spec:
+  instances: 3
+
+  bootstrap:
+    initdb:
+      import:
+        type: microservice
+        databases:
+          - angus
+        source:
+          externalCluster: cluster-pg96
+        #postImportApplicationSQL:
+        #- |
+        #  INSERT YOUR SQL QUERIES HERE
+  storage:
+    size: 1Gi
+  externalClusters:
+    - name: cluster-pg96
+      connectionParameters:
+        # Use the correct IP or host name for the source database
+        host: pg96.local
+        user: postgres
+        dbname: postgres
+      password:
+        name: cluster-pg96-superuser
+        key: password
+</code></pre>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>The example above deliberately uses a source database running a version of
+PostgreSQL that is not supported anymore by the Community, and consequently by
+CloudNativePG.
+Data export from the source instance is performed using the version of
+<code>pg_dump</code> in the destination cluster, which must be a supported one, and
+equal or greater than the source one.
+Based on our experience, this way of exporting data should work on older
+and unsupported versions of Postgres too, giving you the chance to move your
+legacy data to a better system, inside Kubernetes.
+This is the main reason why we used 9.6 in the examples of this section.
+We'd be interested to hear from you, should you experience any issues in this area.</p>
+</div>
+<p>There are a few things you need to be aware of when using the <code>microservice</code> type:</p>
+<ul>
+<li>It requires an <code>externalCluster</code> that points to an existing PostgreSQL
+  instance containing the data to import (for more information, please refer to
+  <a href="../bootstrap/#the-externalclusters-section">"The <code>externalClusters</code> section"</a>)</li>
+<li>Traffic must be allowed between the Kubernetes cluster and the
+  <code>externalCluster</code> during the operation</li>
+<li>Connection to the source database must be granted with the specified user
+  that needs to run <code>pg_dump</code> and read roles information (<em>superuser</em> is OK)</li>
+<li>Currently, the <code>pg_dump -Fd</code> result is stored temporarily inside the <code>dumps</code>
+  folder in the <code>PGDATA</code> volume, so there should be enough available space to
+  temporarily contain the dump result on the assigned node, as well as the
+  restored data and indexes. Once the import operation is completed, this
+  folder is automatically deleted by the operator.</li>
+<li>Only one database can be specified inside the <code>initdb.import.databases</code> array</li>
+<li>Roles are not imported - and as such they cannot be specified inside <code>initdb.import.roles</code></li>
+</ul>
+<div class="admonition hint">
+<p class="admonition-title">Hint</p>
+<p>The microservice approach adheres to CloudNativePG conventions and defaults
+for the destination cluster. If you do not set <code>initdb.database</code> or
+<code>initdb.owner</code> for the destination cluster, both parameters will default to
+<code>app</code>.</p>
+</div>
+<h2 id="the-monolith-type">The <code>monolith</code> type</h2>
+<p>With the monolith approach, you can specify a set of roles and databases you
+want to import from the source cluster into the destination cluster.
+The operation is performed in the following steps:</p>
+<ul>
+<li><code>initdb</code> bootstrap of the new cluster</li>
+<li>export and import of the selected roles</li>
+<li>export of the selected databases (in <code>initdb.import.databases</code>), one at a time,
+  using <code>pg_dump -Fd</code></li>
+<li>create each of the selected databases and import data using <code>pg_restore</code></li>
+<li>run <code>ANALYZE</code> on each imported database</li>
+<li>cleanup of the database dump files</li>
+</ul>
+<p><img alt="Example of monolith import type" src="../images/monolith-import.png" /></p>
+<p>For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest
+available major version at the time the operator was released) called
+<code>cluster-monolith</code> that imports the <code>accountant</code> and the <code>bank_user</code> roles,
+as well as the <code>accounting</code>, <code>banking</code>, <code>resort</code> databases from the
+<code>cluster-pg96</code> cluster (with the unsupported PostgreSQL 9.6), by connecting to
+the <code>postgres</code> database using the <code>postgres</code> user, via the password stored in
+the <code>cluster-pg96-superuser</code> secret.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-monolith
+spec:
+  instances: 3
+  bootstrap:
+    initdb:
+      import:
+        type: monolith
+        databases:
+          - accounting
+          - banking
+          - resort
+        roles:
+          - accountant
+          - bank_user
+        source:
+          externalCluster: cluster-pg96
+  storage:
+    size: 1Gi
+  externalClusters:
+    - name: cluster-pg96
+      connectionParameters:
+        # Use the correct IP or host name for the source database
+        host: pg96.local
+        user: postgres
+        dbname: postgres
+        sslmode: require
+      password:
+        name: cluster-pg96-superuser
+        key: password
+</code></pre>
+<p>There are a few things you need to be aware of when using the <code>monolith</code> type:</p>
+<ul>
+<li>It requires an <code>externalCluster</code> that points to an existing PostgreSQL
+  instance containing the data to import (for more information, please refer to
+  <a href="../bootstrap/#the-externalclusters-section">"The <code>externalClusters</code> section"</a>)</li>
+<li>Traffic must be allowed between the Kubernetes cluster and the
+  <code>externalCluster</code> during the operation</li>
+<li>Connection to the source database must be granted with the specified user
+  that needs to run <code>pg_dump</code> and retrieve roles information (<em>superuser</em> is
+  OK)</li>
+<li>Currently, the <code>pg_dump -Fd</code> result is stored temporarily inside the <code>dumps</code>
+  folder in the <code>PGDATA</code> volume of the destination cluster's instances, so
+  there should be enough available space to
+  temporarily contain the dump result on the assigned node, as well as the
+  restored data and indexes. Once the import operation is completed, this
+  folder is automatically deleted by the operator.</li>
+<li>At least one database to be specified in the <code>initdb.import.databases</code> array</li>
+<li>Any role that is required by the imported databases must be specified inside
+  <code>initdb.import.roles</code>, with the limitations below:<ul>
+<li>The following roles, if present, are not imported:
+  <code>postgres</code>, <code>streaming_replica</code>, <code>cnpg_pooler_pgbouncer</code></li>
+<li>The <code>SUPERUSER</code> option is removed from any imported role</li>
+</ul>
+</li>
+<li>Wildcard <code>"*"</code> can be used as the only element in the <code>databases</code> and/or
+  <code>roles</code> arrays to import every object of the kind; When matching databases
+  the wildcard will ignore the <code>postgres</code> database, template databases,
+  and those databases not allowing connections</li>
+<li>After the clone procedure is done, <code>ANALYZE VERBOSE</code> is executed for every
+  database.</li>
+<li>The <code>postImportApplicationSQL</code> field is not supported</li>
+</ul>
+<div class="admonition hint">
+<p class="admonition-title">Hint</p>
+<p>The databases and their owners are preserved exactly as they exist in the
+source cluster—no <code>app</code> database or user will be created during import. If your
+<code>bootstrap.initdb</code> stanza specifies custom <code>database</code> and <code>owner</code> values that
+do not match any of the databases or users being imported, the instance
+manager will create a new, empty application database and owner role with those
+specified names, while leaving the imported databases and owners unchanged.</p>
+</div>
+<h2 id="a-practical-example">A practical example</h2>
+<p>There is nothing to stop you from using the <code>monolith</code> approach to import a
+single database. It is interesting to see how the results of doing so would
+differ from using the <code>microservice</code> approach.</p>
+<p>Given a source cluster, for example the following, with a database named
+<code>mydb</code> owned by role <code>me</code>:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 1
+
+  postgresql:
+    pg_hba:
+      - host all all all trust
+
+  storage:
+    size: 1Gi
+
+  bootstrap:
+    initdb:
+      database: mydb
+      owner: me
+</code></pre>
+<p>We can import it via <code>microservice</code>:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-microservice
+spec:
+  instances: 1
+
+  storage:
+    size: 1Gi
+
+  bootstrap:
+    initdb:
+      import:
+        type: microservice
+        databases:
+          - mydb
+        source:
+          externalCluster: cluster-example
+
+  externalClusters:
+    - name: cluster-example
+      connectionParameters:
+        host: cluster-example-rw
+        dbname: postgres
+</code></pre>
+<p>as well as via monolith:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-monolith
+spec:
+  instances: 1
+
+  storage:
+    size: 1Gi
+
+  bootstrap:
+    initdb:
+      import:
+        type: monolith
+        databases:
+          - mydb
+        roles:
+          - me
+        source:
+          externalCluster: cluster-example
+
+  externalClusters:
+    - name: cluster-example
+      connectionParameters:
+        host: cluster-example-rw
+        dbname: postgres
+</code></pre>
+<p>In both cases, the database's contents will be imported, but:</p>
+<ul>
+<li>In the microservice case, the imported database's name and owner both become
+  <code>app</code>, or whichever configuration for the fields <code>database</code> and <code>owner</code> are
+  set in the <code>bootstrap.initdb</code> stanza.</li>
+<li>In the monolith case, the database and owner are kept exactly as in the source
+  cluster, i.e. <code>mydb</code> and <code>me</code> respectively. No <code>app</code> database nor user will be
+  created. If there are custom settings for <code>database</code> and <code>owner</code> in the
+  <code>bootstrap.initdb</code> stanza that don't match the source databases/owners to
+  import, the instance manager will create a new empty application database and
+  owner role, but will leave the imported databases/owners intact.</li>
+</ul>
+<h2 id="import-optimizations">Import optimizations</h2>
+<p>During the logical import of a database, CloudNativePG optimizes the
+configuration of PostgreSQL in order to prioritize speed versus data
+durability, by forcing:</p>
+<ul>
+<li><code>archive_mode</code> to <code>off</code></li>
+<li><code>fsync</code> to <code>off</code></li>
+<li><code>full_page_writes</code> to <code>off</code></li>
+<li><code>max_wal_senders</code> to <code>0</code></li>
+<li><code>wal_level</code> to <code>minimal</code></li>
+</ul>
+<p>Before completing the import job, CloudNativePG restores the expected
+configuration, then runs <code>initdb --sync-only</code> to ensure that data is
+permanently written on disk.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>WAL archiving, if requested, and WAL level will be honored after the
+database import process has completed. Similarly, replicas will be cloned
+after the bootstrap phase, when the actual cluster resource starts.</p>
+</div>
+<p>There are other optimizations you can do during the import phase. Although this
+topic is beyond the scope of CloudNativePG, we recommend that you reduce
+unnecessary writes in the checkpoint area by tuning Postgres GUCs like
+<code>shared_buffers</code>, <code>max_wal_size</code>, <code>checkpoint_timeout</code> directly in the
+<code>Cluster</code> configuration.</p>
+<h2 id="customizing-pg_dump-and-pg_restore-behavior">Customizing <code>pg_dump</code> and <code>pg_restore</code> Behavior</h2>
+<p>You can customize the behavior of <code>pg_dump</code> and <code>pg_restore</code> by specifying
+additional options using the <code>pgDumpExtraOptions</code> and <code>pgRestoreExtraOptions</code>
+parameters. For instance, you can enable parallel jobs to speed up data
+import/export processes, as shown in the following example:</p>
+<pre><code class="language-yaml">  # &lt;snip&gt;
+  bootstrap:
+    initdb:
+      import:
+        type: microservice
+        databases:
+        - app
+        source:
+          externalCluster: cluster-example
+        pgDumpExtraOptions:
+        - '--jobs=2'
+        pgRestoreExtraOptions:
+        - '--jobs=2'
+  # &lt;snip&gt;
+</code></pre>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Use the <code>pgDumpExtraOptions</code> and <code>pgRestoreExtraOptions</code> fields with
+caution and at your own risk. These options are not validated or verified by
+the operator, and some configurations may conflict with its intended
+functionality or behavior. Always test thoroughly in a safe and controlled
+environment before applying them in production.</p>
+</div>
+<h2 id="online-import-and-upgrades">Online Import and Upgrades</h2>
+<p>Logical replication offers a powerful way to import any PostgreSQL database
+accessible over the network using the following approach:</p>
+<ul>
+<li><strong>Import Bootstrap with Schema-Only Option</strong>: Initialize the schema in the
+  target database before replication begins.</li>
+<li><strong><code>Subscription</code> Resource</strong>: Set up continuous replication to synchronize
+  data changes.</li>
+</ul>
+<p>This technique can also be leveraged for performing major PostgreSQL upgrades
+with minimal downtime, making it ideal for seamless migrations and system
+upgrades.</p>
+<p>For more details, including limitations and best practices, refer to the
+<a href="../logical_replication/">Logical Replication</a> section in the documentation.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../bootstrap/" class="btn btn-neutral float-left" title="Bootstrap"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../security/" class="btn btn-neutral float-right" title="Security">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../bootstrap/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../security/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/declarative_database_management/index.html b/assets/documentation/1.27.0-rc1/declarative_database_management/index.html
new file mode 100644
index 000000000..2e6b68df9
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/declarative_database_management/index.html
@@ -0,0 +1,676 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>PostgreSQL Database Management - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "PostgreSQL Database Management";
+        var mkdocs_page_input_path = "declarative_database_management.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">PostgreSQL Database Management</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#key-concepts">Key Concepts</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#scope-of-management">Scope of Management</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#declarative-database-manifest">Declarative Database Manifest</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#required-fields-in-the-database-manifest">Required Fields in the Database Manifest</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#reserved-database-names">Reserved Database Names</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#reconciliation-and-status">Reconciliation and Status</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#deleting-a-database">Deleting a Database</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#deleting-via-delete-reclaim-policy">Deleting via delete Reclaim Policy</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#declaratively-setting-ensure-absent">Declaratively Setting ensure: absent</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#managing-extensions-in-a-database">Managing Extensions in a Database</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#managing-schemas-in-a-database">Managing Schemas in a Database</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#limitations-and-caveats">Limitations and Caveats</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#renaming-a-database">Renaming a database</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#creating-vs-altering-a-database">Creating vs. Altering a Database</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#replica-clusters">Replica Clusters</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#conflict-resolution">Conflict Resolution</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#postgres-version-differences">Postgres Version Differences</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#manual-changes">Manual Changes</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">PostgreSQL Database Management</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="postgresql-database-management">PostgreSQL Database Management</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG simplifies PostgreSQL database provisioning by automatically
+creating an application database named <code>app</code> by default. This default behavior
+is explained in the <a href="../bootstrap/#bootstrap-an-empty-cluster-initdb">"Bootstrap an Empty Cluster"</a>
+section.</p>
+<p>For more advanced use cases, CloudNativePG introduces <strong>declarative database
+management</strong>, which empowers users to define and control the lifecycle of
+PostgreSQL databases using the <code>Database</code> Custom Resource Definition (CRD).
+This method seamlessly integrates with Kubernetes, providing a scalable,
+automated, and consistent approach to managing PostgreSQL databases.</p>
+<hr />
+<h2 id="key-concepts">Key Concepts</h2>
+<h3 id="scope-of-management">Scope of Management</h3>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>CloudNativePG manages <strong>global objects</strong> in PostgreSQL clusters, including
+databases, roles, and tablespaces. However, it does <strong>not</strong> manage database content
+beyond extensions and schemas (e.g., tables). To manage database content, use specialized
+tools or rely on the applications themselves.</p>
+</div>
+<h3 id="declarative-database-manifest">Declarative <code>Database</code> Manifest</h3>
+<p>The following example demonstrates how a <code>Database</code> resource interacts with a
+<code>Cluster</code>:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: cluster-example-one
+spec:
+  name: one
+  owner: app
+  cluster:
+    name: cluster-example
+  extensions:
+  - name: bloom
+    ensure: present
+</code></pre>
+<p>When applied, this manifest creates a <code>Database</code> object called
+<code>cluster-example-one</code> requesting a database named <code>one</code>, owned by the <code>app</code>
+role, in the <code>cluster-example</code> PostgreSQL cluster.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Please refer to the <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseSpec">API reference</a>
+the full list of attributes you can define for each <code>Database</code> object.</p>
+</div>
+<h3 id="required-fields-in-the-database-manifest">Required Fields in the <code>Database</code> Manifest</h3>
+<ul>
+<li><code>metadata.name</code>: Unique name of the Kubernetes object within its namespace.</li>
+<li><code>spec.name</code>: Name of the database as it will appear in PostgreSQL.</li>
+<li><code>spec.owner</code>: PostgreSQL role that owns the database.</li>
+<li><code>spec.cluster.name</code>: Name of the target PostgreSQL cluster.</li>
+</ul>
+<p>The <code>Database</code> object must reference a specific <code>Cluster</code>, determining where
+the database will be created. It is managed by the cluster's primary instance,
+ensuring the database is created or updated as needed.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>The distinction between <code>metadata.name</code> and <code>spec.name</code> allows multiple
+<code>Database</code> resources to reference databases with the same name across different
+CloudNativePG clusters in the same Kubernetes namespace.</p>
+</div>
+<h2 id="reserved-database-names">Reserved Database Names</h2>
+<p>PostgreSQL automatically creates databases such as <code>postgres</code>, <code>template0</code>, and
+<code>template1</code>. These names are reserved and cannot be used for new <code>Database</code>
+objects in CloudNativePG.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Creating a <code>Database</code> with <code>spec.name</code> set to <code>postgres</code>, <code>template0</code>, or
+<code>template1</code> is not allowed.</p>
+</div>
+<h2 id="reconciliation-and-status">Reconciliation and Status</h2>
+<p>Once a <code>Database</code> object is reconciled successfully:</p>
+<ul>
+<li><code>status.applied</code> will be set to <code>true</code>.</li>
+<li><code>status.observedGeneration</code> will match the <code>metadata.generation</code> of the last
+  applied configuration.</li>
+</ul>
+<p>Example of a reconciled <code>Database</code> object:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  generation: 1
+  name: cluster-example-one
+spec:
+  cluster:
+    name: cluster-example
+  name: one
+  owner: app
+status:
+  observedGeneration: 1
+  applied: true
+</code></pre>
+<p>If an error occurs during reconciliation, <code>status.applied</code> will be <code>false</code>, and
+an error message will be included in the <code>status.message</code> field.</p>
+<h2 id="deleting-a-database">Deleting a Database</h2>
+<p>CloudNativePG supports two methods for database deletion:</p>
+<ol>
+<li>Using the <code>delete</code> reclaim policy</li>
+<li>Declaratively setting the database's <code>ensure</code> field to <code>absent</code></li>
+</ol>
+<h3 id="deleting-via-delete-reclaim-policy">Deleting via <code>delete</code> Reclaim Policy</h3>
+<p>The <code>databaseReclaimPolicy</code> field determines the behavior when a <code>Database</code>
+object is deleted:</p>
+<ul>
+<li><code>retain</code> (default): The database remains in PostgreSQL for manual management.</li>
+<li><code>delete</code>: The database is automatically removed from PostgreSQL.</li>
+</ul>
+<p>Example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: cluster-example-two
+spec:
+  databaseReclaimPolicy: delete
+  name: two
+  owner: app
+  cluster:
+    name: cluster-example
+</code></pre>
+<p>Deleting this <code>Database</code> object will automatically remove the <code>two</code> database
+from the <code>cluster-example</code> cluster.</p>
+<h3 id="declaratively-setting-ensure-absent">Declaratively Setting <code>ensure: absent</code></h3>
+<p>To remove a database, set the <code>ensure</code> field to <code>absent</code> like in the following
+example:.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: cluster-example-database-to-drop
+spec:
+  cluster:
+    name: cluster-example
+  name: database-to-drop
+  owner: app
+  ensure: absent
+</code></pre>
+<p>This manifest ensures that the <code>database-to-drop</code> database is removed from the
+<code>cluster-example</code> cluster.</p>
+<h2 id="managing-extensions-in-a-database">Managing Extensions in a Database</h2>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>While extensions are database-scoped rather than global objects,
+CloudNativePG provides a declarative interface for managing them. This approach
+is necessary because installing certain extensions may require superuser
+privileges, which CloudNativePG recommends disabling by default. By leveraging
+this API, users can efficiently manage extensions in a scalable and controlled
+manner without requiring elevated privileges.</p>
+</div>
+<p>CloudNativePG simplifies and automates the management of PostgreSQL extensions within the
+target database.</p>
+<p>To enable this feature, define the <code>spec.extensions</code> field
+with a list of extension specifications, as shown in the following example:</p>
+<pre><code class="language-yaml"># ...
+spec:
+  extensions:
+  - name: bloom
+    ensure: present
+# ...
+</code></pre>
+<p>Each extension entry supports the following properties:</p>
+<ul>
+<li><code>name</code> <em>(mandatory)</em>: The name of the extension.</li>
+<li><code>ensure</code>: Specifies whether the extension should be present or absent in the
+  database:<ul>
+<li><code>present</code>: Ensures that the extension is installed (default).</li>
+<li><code>absent</code>: Ensures that the extension is removed.</li>
+</ul>
+</li>
+<li><code>version</code>: The specific version of the extension to install or
+  upgrade to.</li>
+<li><code>schema</code>: The schema in which the extension should be installed.</li>
+</ul>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>CloudNativePG manages extensions using the following PostgreSQL’s SQL commands:
+<a href="https://www.postgresql.org/docs/current/sql-createextension.html"><code>CREATE EXTENSION</code></a>,
+<a href="https://www.postgresql.org/docs/current/sql-dropextension.html"><code>DROP EXTENSION</code></a>,
+<a href="https://www.postgresql.org/docs/current/sql-alterextension.html"><code>ALTER EXTENSION</code></a>
+(limited to <code>UPDATE TO</code> and <code>SET SCHEMA</code>).</p>
+</div>
+<p>The operator reconciles only the extensions explicitly listed in
+<code>spec.extensions</code>. Any existing extensions not specified in this list remain
+unchanged.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Before the introduction of declarative extension management, CloudNativePG
+did not offer a straightforward way to create extensions through configuration.
+To address this, the <a href="../postgresql_conf/#managed-extensions">"managed extensions"</a>
+feature was introduced, enabling the automated and transparent management
+of key extensions like <code>pg_stat_statements</code>. Currently, it is your
+responsibility to ensure there are no conflicts between extension support in
+the <code>Database</code> CRD and the managed extensions feature.</p>
+</div>
+<h2 id="managing-schemas-in-a-database">Managing Schemas in a Database</h2>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Schema management in PostgreSQL is an exception to CloudNativePG's primary
+focus on managing global objects. Since schemas exist within a database, they
+are typically managed as part of the application development process. However,
+CloudNativePG provides a declarative interface for schema management, primarily
+to complete the support of extensions deployment within schemas.</p>
+</div>
+<p>CloudNativePG simplifies and automates the management of PostgreSQL schemas within the
+target database.</p>
+<p>To enable this feature, define the <code>spec.schemas</code> field
+with a list of schema specifications, as shown in the following example:</p>
+<pre><code class="language-yaml"># ...
+spec:
+  schemas:
+  - name: app
+    owner: app
+# ...
+</code></pre>
+<p>Each schema entry supports the following properties:</p>
+<ul>
+<li><code>name</code> <em>(mandatory)</em>: The name of the schema.</li>
+<li><code>owner</code>: The owner of the schema.</li>
+<li><code>ensure</code>: Specifies whether the schema should be present or absent in the
+  database:<ul>
+<li><code>present</code>: Ensures that the schema is installed (default).</li>
+<li><code>absent</code>: Ensures that the schema is removed.</li>
+</ul>
+</li>
+</ul>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>CloudNativePG manages schemas using the following PostgreSQL’s SQL commands:
+<a href="https://www.postgresql.org/docs/current/sql-createschema.html"><code>CREATE SCHEMA</code></a>,
+<a href="https://www.postgresql.org/docs/current/sql-dropschema.html"><code>DROP SCHEMA</code></a>,
+<a href="https://www.postgresql.org/docs/current/sql-alterschema.html"><code>ALTER SCHEMA</code></a>.</p>
+</div>
+<h2 id="limitations-and-caveats">Limitations and Caveats</h2>
+<h3 id="renaming-a-database">Renaming a database</h3>
+<p>While CloudNativePG adheres to PostgreSQL’s
+<a href="https://www.postgresql.org/docs/current/sql-createdatabase.html">CREATE DATABASE</a> and
+<a href="https://www.postgresql.org/docs/current/sql-alterdatabase.html">ALTER DATABASE</a>
+commands, <strong>renaming databases is not supported</strong>.
+Attempting to modify <code>spec.name</code> in an existing <code>Database</code> object will result
+in rejection by Kubernetes.</p>
+<h3 id="creating-vs-altering-a-database">Creating vs. Altering a Database</h3>
+<ul>
+<li>For new databases, CloudNativePG uses the <code>CREATE DATABASE</code> statement.</li>
+<li>For existing databases, <code>ALTER DATABASE</code> is used to apply changes.</li>
+</ul>
+<p>It is important to note that there are some differences between these two
+Postgres commands: in particular, the options accepted by <code>ALTER</code> are a subset
+of those accepted by <code>CREATE</code>.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Some fields, such as encoding and collation settings, are immutable in
+PostgreSQL. Attempts to modify these fields on existing databases will be
+ignored.</p>
+</div>
+<h3 id="replica-clusters">Replica Clusters</h3>
+<p>Database objects declared on replica clusters cannot be enforced, as replicas
+lack write privileges. These objects will remain in a pending state until the
+replica is promoted.</p>
+<h3 id="conflict-resolution">Conflict Resolution</h3>
+<p>If two <code>Database</code> objects in the same namespace manage the same PostgreSQL
+database (i.e., identical <code>spec.name</code> and <code>spec.cluster.name</code>), the second
+object will be rejected.</p>
+<p>Example status message:</p>
+<pre><code class="language-yaml">status:
+  applied: false
+  message: 'reconciliation error: database &quot;one&quot; is already managed by Database object &quot;cluster-example-one&quot;'
+</code></pre>
+<h3 id="postgres-version-differences">Postgres Version Differences</h3>
+<p>CloudNativePG adheres to PostgreSQL's capabilities. For example, features like
+<code>ICU_RULES</code> introduced in PostgreSQL 16 are unavailable in earlier versions.
+Errors from PostgreSQL will be reflected in the <code>Database</code> object's <code>status</code>.</p>
+<h3 id="manual-changes">Manual Changes</h3>
+<p>CloudNativePG does not overwrite manual changes to databases. Once reconciled,
+a <code>Database</code> object will not be reapplied unless its <code>metadata.generation</code>
+changes, giving flexibility for direct PostgreSQL modifications.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../declarative_role_management/" class="btn btn-neutral float-left" title="PostgreSQL Role Management"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../tablespaces/" class="btn btn-neutral float-right" title="Tablespaces">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../declarative_role_management/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../tablespaces/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/declarative_hibernation/index.html b/assets/documentation/1.27.0-rc1/declarative_hibernation/index.html
new file mode 100644
index 000000000..d9562681e
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/declarative_hibernation/index.html
@@ -0,0 +1,422 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Declarative hibernation - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Declarative hibernation";
+        var mkdocs_page_input_path = "declarative_hibernation.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Declarative hibernation</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#hibernation">Hibernation</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#rehydration">Rehydration</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Declarative hibernation</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="declarative-hibernation">Declarative hibernation</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG is designed to keep PostgreSQL clusters up, running and available
+anytime.</p>
+<p>There are some kinds of workloads that require the database to be up only when
+the workload is active. Batch-driven solutions are one such case.</p>
+<p>In batch-driven solutions, the database needs to be up only when the batch
+process is running.</p>
+<p>The declarative hibernation feature enables saving CPU power by removing the
+database Pods, while keeping the database PVCs.</p>
+<h2 id="hibernation">Hibernation</h2>
+<p>To hibernate a cluster, set the <code>cnpg.io/hibernation=on</code> annotation:</p>
+<pre><code class="language-sh">$ kubectl annotate cluster &lt;cluster-name&gt; --overwrite cnpg.io/hibernation=on
+</code></pre>
+<p>A hibernated cluster won't have any running Pods, while the PVCs are retained
+so that the cluster can be rehydrated at a later time. Replica PVCs will be
+kept in addition to the primary's PVC.</p>
+<p>The hibernation procedure will delete the primary Pod and then the replica
+Pods, avoiding switchover, to ensure the replicas are kept in sync.</p>
+<p>The hibernation status can be monitored by looking for the <code>cnpg.io/hibernation</code>
+condition:</p>
+<pre><code class="language-sh">$ kubectl get cluster &lt;cluster-name&gt; -o &quot;jsonpath={.status.conditions[?(.type==\&quot;cnpg.io/hibernation\&quot;)]}&quot; 
+
+{
+        &quot;lastTransitionTime&quot;:&quot;2023-03-05T16:43:35Z&quot;,
+        &quot;message&quot;:&quot;Cluster has been hibernated&quot;,
+        &quot;reason&quot;:&quot;Hibernated&quot;,
+        &quot;status&quot;:&quot;True&quot;,
+        &quot;type&quot;:&quot;cnpg.io/hibernation&quot;
+}
+</code></pre>
+<p>The hibernation status can also be read with the <code>status</code> sub-command of the
+<code>cnpg</code> plugin for <code>kubectl</code>:</p>
+<pre><code class="language-sh">$ kubectl cnpg status &lt;cluster-name&gt;
+Cluster Summary
+Name:              cluster-example
+Namespace:         default
+PostgreSQL Image:  ghcr.io/cloudnative-pg/postgresql:17.5
+Primary instance:  cluster-example-2
+Status:            Cluster in healthy state 
+Instances:         3
+Ready instances:   0
+
+Hibernation
+Status   Hibernated
+Message  Cluster has been hibernated
+Time     2023-03-05 16:43:35 +0000 UTC
+[..]
+</code></pre>
+<h2 id="rehydration">Rehydration</h2>
+<p>To rehydrate a cluster, either set the <code>cnpg.io/hibernation</code> annotation to <code>off</code>:</p>
+<pre><code>$ kubectl annotate cluster &lt;cluster-name&gt; --overwrite cnpg.io/hibernation=off
+</code></pre>
+<p>Or, just unset it altogether:</p>
+<pre><code>$ kubectl annotate cluster &lt;cluster-name&gt; cnpg.io/hibernation-
+</code></pre>
+<p>The Pods will be recreated and the cluster will resume operation.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../fencing/" class="btn btn-neutral float-left" title="Fencing"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../postgis/" class="btn btn-neutral float-right" title="PostGIS">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../fencing/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../postgis/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/declarative_role_management/index.html b/assets/documentation/1.27.0-rc1/declarative_role_management/index.html
new file mode 100644
index 000000000..ea881d237
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/declarative_role_management/index.html
@@ -0,0 +1,585 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>PostgreSQL Role Management - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "PostgreSQL Role Management";
+        var mkdocs_page_input_path = "declarative_role_management.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">PostgreSQL Role Management</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#password-management">Password management</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#password-expiry-valid-until">Password expiry, VALID UNTIL</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#password-hashed">Password hashed</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#unrealizable-role-configurations">Unrealizable role configurations</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#status-of-managed-roles">Status of managed roles</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">PostgreSQL Role Management</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="postgresql-role-management">PostgreSQL Role Management</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>From its inception, CloudNativePG has managed the creation of specific roles
+required in PostgreSQL instances:</p>
+<ul>
+<li>some reserved users, such as the <code>postgres</code> superuser, <code>streaming_replica</code>
+  and <code>cnpg_pooler_pgbouncer</code> (when the PgBouncer <code>Pooler</code> is used)</li>
+<li>The application user, set as the low-privilege owner of the application database</li>
+</ul>
+<p>This process is described in the <a href="../bootstrap/">"Bootstrap"</a> section.</p>
+<p>With the <code>managed</code> stanza in the cluster spec, CloudNativePG now provides full
+lifecycle management for roles specified in <code>.spec.managed.roles</code>.</p>
+<p>This feature enables declarative management of existing roles, as well as the
+creation of new roles if they are not already present in the database. Role
+creation will occur <em>after</em> the database bootstrapping is complete.</p>
+<p>An example manifest for a cluster with declarative role management can be found
+in the file <a href="../samples/cluster-example-with-roles.yaml"><code>cluster-example-with-roles.yaml</code></a>.</p>
+<p>Here is an excerpt from that file:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+spec:
+  managed:
+    roles:
+    - name: dante
+      ensure: present
+      comment: Dante Alighieri
+      login: true
+      superuser: false
+      inRoles:
+        - pg_monitor
+        - pg_signal_backend
+</code></pre>
+<p>The role specification in <code>.spec.managed.roles</code> adheres to the
+<a href="https://www.postgresql.org/docs/current/sql-createrole.html">PostgreSQL structure and naming conventions</a>.
+Please refer to the <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-RoleConfiguration">API reference</a> for
+the full list of attributes you can define for each role.</p>
+<p>A few points are worth noting:</p>
+<ol>
+<li>The <code>ensure</code> attribute is <strong>not</strong> part of PostgreSQL. It enables declarative
+   role management to create and remove roles. The two possible values are
+   <code>present</code> (the default) and <code>absent</code>.</li>
+<li>The <code>inherit</code> attribute is true by default, following PostgreSQL conventions.</li>
+<li>The <code>connectionLimit</code> attribute defaults to -1, in line with PostgreSQL conventions.</li>
+<li>Role membership with <code>inRoles</code> defaults to no memberships.</li>
+</ol>
+<p>Declarative role management ensures that PostgreSQL instances align with the
+spec. If a user modifies role attributes directly in the database, the
+CloudNativePG operator will revert those changes during the next reconciliation
+cycle.</p>
+<h2 id="password-management">Password management</h2>
+<p>The declarative role management feature includes reconciling of role passwords.
+Passwords are managed in fundamentally different ways in the Kubernetes world
+and in PostgreSQL, and as a result there are a few things to note.</p>
+<p>Managed role configurations may optionally specify the name of a
+<strong>Secret</strong> where the username and password are stored (encoded in Base64
+as is usual in Kubernetes). For example:</p>
+<pre><code class="language-yaml">  managed:
+    roles:
+    - name: dante
+      ensure: present
+      [… snipped …]
+      passwordSecret:
+        name: cluster-example-dante
+</code></pre>
+<p>This would assume the existence of a Secret called <code>cluster-example-dante</code>,
+containing a username and password. The username should match the role we
+are setting the password for. For example, :</p>
+<pre><code class="language-yaml">apiVersion: v1
+data:
+  username: ZGFudGU=
+  password: ZGFudGU=
+kind: Secret
+metadata:
+  name: cluster-example-dante
+  labels:
+    cnpg.io/reload: &quot;true&quot;
+type: kubernetes.io/basic-auth
+</code></pre>
+<p>If there is no <code>passwordSecret</code> specified for a role, the instance manager will
+not try to CREATE / ALTER the role with a password. This keeps with PostgreSQL
+conventions, where ALTER will not update passwords unless directed to with
+<code>WITH PASSWORD</code>.</p>
+<p>If a role was initially created with a password, and we would like to set the
+password to NULL in PostgreSQL, this necessitates being explicit on the part of
+the user of CloudNativePG.
+To distinguish "no password provided in spec" from "set the password to NULL",
+the field <code>DisablePassword</code> should be used.</p>
+<p>Imagine we decided we would like to have no password on the <code>dante</code> role in the
+database. In such case we would specify the following:</p>
+<pre><code class="language-yaml">  managed:
+    roles:
+    - name: dante
+      ensure: present
+      [… snipped …]
+      disablePassword: true
+</code></pre>
+<p>NOTE: it is considered an error to set both <code>passwordSecret</code> and
+<code>disablePassword</code> on a given role.
+This configuration will be rejected by the validation webhook.</p>
+<h3 id="password-expiry-valid-until">Password expiry, <code>VALID UNTIL</code></h3>
+<p>The <code>VALID UNTIL</code> role attribute in PostgreSQL controls password expiry. Roles
+created without <code>VALID UNTIL</code> specified get NULL by default in PostgreSQL,
+meaning that their password will never expire.</p>
+<p>PostgreSQL uses a timestamp type for <code>VALID UNTIL</code>, which includes support for
+the value <code>'infinity'</code> indicating that the password never expires. Please see the
+<a href="https://www.postgresql.org/docs/current/datatype-datetime.html">PostgreSQL documentation</a>
+for reference.</p>
+<p>With declarative role management, the <code>validUntil</code> attribute for managed roles
+controls password expiry. <code>validUntil</code> can only take:</p>
+<ul>
+<li>a Kubernetes timestamp, or</li>
+<li>be omitted (defaulting to <code>null</code>)</li>
+</ul>
+<p>In the first case, the given <code>validUntil</code> timestamp will be set in the database
+as the <code>VALID UNTIL</code> attribute of the role.</p>
+<p>In the second case (omitted <code>validUntil</code>) the operator will ensure password
+never expires, mirroring the behavior of PostgreSQL. Specifically:</p>
+<ul>
+<li>in case of new role, it will omit the <code>VALID UNTIL</code> clause in the role
+  creation statement</li>
+<li>in case of existing role, it will set <code>VALID UNTIL</code> to <code>infinity</code> if <code>VALID
+  UNTIL</code> was not set to <code>NULL</code> in the database (this is due to PostgreSQL not
+  allowing <code>VALID UNTIL NULL</code> in the <code>ALTER ROLE</code> SQL statement)</li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>New roles created without <code>passwordSecret</code> will have a <code>NULL</code> password
+inside PostgreSQL.</p>
+</div>
+<h3 id="password-hashed">Password hashed</h3>
+<p>You can also provide pre-encrypted passwords by specifying the password
+in MD5/SCRAM-SHA-256 hash format:</p>
+<pre><code class="language-yaml">kind: Secret
+type: kubernetes.io/basic-auth
+metadata:
+  name: cluster-example-cavalcanti
+  labels:
+    cnpg.io/reload: &quot;true&quot;
+apiVersion: v1
+stringData:
+  username: cavalcanti
+  password: SCRAM-SHA-256$&lt;iteration count&gt;:&lt;salt&gt;$&lt;StoredKey&gt;:&lt;ServerKey&gt;
+</code></pre>
+<h2 id="unrealizable-role-configurations">Unrealizable role configurations</h2>
+<p>In PostgreSQL, in some cases, commands cannot be honored by the database and
+will be rejected. Please refer to the
+<a href="https://www.postgresql.org/docs/current/errcodes-appendix.html">PostgreSQL documentation on error codes</a>
+for details.</p>
+<p>Role operations can produce such fundamental errors.
+Two examples:</p>
+<ul>
+<li>We ask PostgreSQL to create the role <code>petrarca</code> as a member of the role
+  (group) <code>poets</code>, but <code>poets</code> does not exist.</li>
+<li>We ask PostgreSQL to drop the role <code>dante</code>, but the role <code>dante</code> is the owner
+  of the database <code>inferno</code>.</li>
+</ul>
+<p>These fundamental errors cannot be fixed by the database, nor the CloudNativePG
+operator, without clarification from the human administrator. The two examples
+above could be fixed by creating the role <code>poets</code> or dropping the database
+<code>inferno</code> respectively, but they might have originated due to human error, and
+in such case, the "fix" proposed might be the wrong thing to do.</p>
+<p>CloudNativePG  will record when such fundamental errors occur, and will display
+them in the cluster Status. Which segues into…</p>
+<h2 id="status-of-managed-roles">Status of managed roles</h2>
+<p>The Cluster status includes a section for the managed roles' status, as shown
+below:</p>
+<pre><code class="language-yaml">status:
+  […snipped…]
+  managedRolesStatus:
+    byStatus:
+      not-managed:
+      - app
+      pending-reconciliation:
+      - dante
+      - petrarca
+      reconciled:
+      - ariosto
+      reserved:
+      - postgres
+      - streaming_replica
+    cannotReconcile:
+      dante:
+      - 'could not perform DELETE on role dante: owner of database inferno'
+      petrarca:
+      - 'could not perform UPDATE_MEMBERSHIPS on role petrarca: role &quot;poets&quot; does not exist'
+</code></pre>
+<p>Note the special sub-section <code>cannotReconcile</code> for operations the database (and
+CloudNativePG) cannot honor, and which require human intervention.</p>
+<p>This section covers roles reserved for operator use and those that are <strong>not</strong>
+under declarative management, providing a comprehensive view of the roles in
+the database instances.</p>
+<p>The <a href="../kubectl-plugin/">kubectl plugin</a> also shows the status of managed roles
+in its <code>status</code> sub-command:</p>
+<pre><code class="language-txt">Managed roles status
+Status                  Roles
+------                  -----
+pending-reconciliation  petrarca
+reconciled              app,dante
+reserved                postgres,streaming_replica
+
+Irreconcilable roles
+Role      Errors
+----      ------
+petrarca  could not perform UPDATE_MEMBERSHIPS on role petrarca: role &quot;poets&quot; does not exist
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>In terms of backward compatibility, declarative role management is designed
+to ignore roles that exist in the database but are not included in the spec.
+The lifecycle of these roles will continue to be managed within PostgreSQL,
+allowing CloudNativePG users to adopt this feature at their convenience.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../postgresql_conf/" class="btn btn-neutral float-left" title="PostgreSQL Configuration"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../declarative_database_management/" class="btn btn-neutral float-right" title="PostgreSQL Database Management">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../postgresql_conf/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../declarative_database_management/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/e2e/index.html b/assets/documentation/1.27.0-rc1/e2e/index.html
new file mode 100644
index 000000000..ad34373c5
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/e2e/index.html
@@ -0,0 +1,565 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>End-to-End Tests - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "End-to-End Tests";
+        var mkdocs_page_input_path = "e2e.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">End-to-End Tests</a>
+    <ul class="current">
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">End-to-End Tests</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="end-to-end-tests">End-to-End Tests</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG is automatically tested after each
+commit via a suite of <strong>End-to-end (E2E) tests</strong> (or integration tests)
+which ensure that the operator correctly deploys and manages PostgreSQL
+clusters.</p>
+<p>Kubernetes versions 1.27 through 1.32, and PostgreSQL versions 13 through 17,
+are tested for each commit, helping detect bugs at an early stage of the
+development process.</p>
+<p>For each tested version of Kubernetes and PostgreSQL, a Kubernetes
+cluster is created using <a href="https://kind.sigs.k8s.io/">kind</a>, run on the GitHub
+Actions platform,
+and the following suite of E2E tests are performed on that cluster:</p>
+<ul>
+<li>
+<p><strong>Basic:</strong></p>
+<ul>
+<li>Installation of the operator</li>
+<li>Creation of a Cluster</li>
+<li>Usage of a persistent volume for data storage</li>
+</ul>
+</li>
+<li>
+<p><strong>Service connectivity:</strong></p>
+<ul>
+<li>Connection via services, including read-only</li>
+<li>Connection via user-provided server and/or client certificates</li>
+<li>PgBouncer</li>
+</ul>
+</li>
+<li>
+<p><strong>Self-healing:</strong></p>
+<ul>
+<li>Failover</li>
+<li>Switchover</li>
+<li>Primary endpoint switch in case of failover in less than 10 seconds</li>
+<li>Primary endpoint switch in case of switchover in less than 20 seconds</li>
+<li>Recover from a degraded state in less than 60 seconds</li>
+<li>PVC Deletion</li>
+<li>Corrupted PVC</li>
+</ul>
+</li>
+<li>
+<p><strong>Backup and Restore:</strong></p>
+<ul>
+<li>Backup and restore from Volume Snapshots</li>
+<li>Backup and ScheduledBackups execution using Barman Cloud on S3</li>
+<li>Backup and ScheduledBackups execution using Barman Cloud on Azure
+blob storage</li>
+<li>Restore from backup using Barman Cloud on S3</li>
+<li>Restore from backup using Barman Cloud on Azure blob storage</li>
+<li>Point-in-time recovery (PITR) on Azure, S3 storage</li>
+<li>Wal-Restore (sequential / parallel)</li>
+</ul>
+</li>
+<li>
+<p><strong>Operator:</strong></p>
+<ul>
+<li>Operator Deployment</li>
+<li>Operator configuration via ConfigMap</li>
+<li>Operator pod deletion</li>
+<li>Operator pod eviction</li>
+<li>Operator upgrade</li>
+<li>Operator High Availability</li>
+</ul>
+</li>
+<li>
+<p><strong>Observability:</strong></p>
+<ul>
+<li>Metrics collection</li>
+<li>PgBouncer Metrics</li>
+<li>JSON log format</li>
+</ul>
+</li>
+<li>
+<p><strong>Replication:</strong></p>
+<ul>
+<li>Replication Slots</li>
+<li>Synchronous replication</li>
+<li>Scale-up and scale-down of a Cluster</li>
+<li>Logical replication via declarative Publication / Subscription</li>
+</ul>
+</li>
+<li>
+<p><strong>Replica clusters</strong></p>
+<ul>
+<li>Bootstrapping a replica cluster from backup</li>
+<li>Bootstrapping a replica cluster via streaming</li>
+<li>Bootstrapping via volume snapshots</li>
+<li>Detaching a replica cluster</li>
+</ul>
+</li>
+<li>
+<p><strong>Plugin:</strong></p>
+<ul>
+<li>Cluster Hibernation using CNPG plugin</li>
+<li>Fencing</li>
+<li>Creation of a connection certificate</li>
+</ul>
+</li>
+<li>
+<p><strong>Postgres Configuration:</strong></p>
+<ul>
+<li>Manage PostgreSQL configuration changes</li>
+<li>Rolling updates when changing PostgreSQL images</li>
+<li>Rolling updates when changing ImageCatalog/ClusterImageCatalog images</li>
+<li>Rolling updates on hot standby sensitive parameter changes</li>
+<li>Database initialization via InitDB</li>
+</ul>
+</li>
+<li>
+<p><strong>Pod Scheduling:</strong></p>
+<ul>
+<li>Tolerations and taints</li>
+<li>Pod affinity using <code>NodeSelector</code></li>
+<li>Rolling updates on PodSpec drift detection</li>
+<li>In-place upgrades</li>
+<li>Multi-Arch availability</li>
+</ul>
+</li>
+<li>
+<p><strong>Cluster Metadata:</strong></p>
+<ul>
+<li>ConfigMap for Cluster Labels and Annotations</li>
+<li>Object metadata</li>
+</ul>
+</li>
+<li>
+<p><strong>Recovery:</strong></p>
+<ul>
+<li>Data corruption</li>
+<li>pg_basebackup</li>
+</ul>
+</li>
+<li>
+<p><strong>Importing Databases:</strong></p>
+<ul>
+<li>Microservice approach</li>
+<li>Monolith approach</li>
+</ul>
+</li>
+<li>
+<p><strong>Storage:</strong></p>
+<ul>
+<li>Storage expansion</li>
+<li>Dedicated PG_WAL persistent volume</li>
+</ul>
+</li>
+<li>
+<p><strong>Security:</strong></p>
+<ul>
+<li>AppArmor annotation propagation. Executed only on Azure environment</li>
+</ul>
+</li>
+<li>
+<p><strong>Maintenance:</strong></p>
+<ul>
+<li>Node Drain with maintenance window</li>
+<li>Node Drain with single-instance cluster with/without Pod Disruption Budgets</li>
+</ul>
+</li>
+<li>
+<p><strong>Hibernation</strong></p>
+<ul>
+<li>Declarative hibernation / rehydration</li>
+</ul>
+</li>
+<li>
+<p><strong>Volume snapshots</strong></p>
+<ul>
+<li>Backup/restore for cold and online snapshots</li>
+<li>Point-in-time recovery (PITR) for cold and online snapshots</li>
+<li>Backups via plugin for cold and online snapshots</li>
+<li>Declarative backups for cold and online snapshots</li>
+</ul>
+</li>
+<li>
+<p><strong>Managed Roles</strong></p>
+<ul>
+<li>Creation and update of managed roles</li>
+<li>Password maintenance using Kubernetes secrets</li>
+</ul>
+</li>
+<li>
+<p><strong>Tablespaces</strong></p>
+<ul>
+<li>Declarative creation of tablespaces</li>
+<li>Declarative creation of temporary tablespaces</li>
+<li>Backup / recovery from object storage</li>
+<li>Backup / recovery from volume snapshots</li>
+</ul>
+</li>
+<li>
+<p><strong>Declarative databases</strong></p>
+</li>
+<li>Declarative creation of databases with default (retain) reclaim policy</li>
+<li>
+<p>Declarative creation of databases with delete reclaim policy</p>
+</li>
+<li>
+<p><strong>Major version upgrade</strong></p>
+</li>
+<li>Upgrade to the latest major version</li>
+</ul>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../postgis/" class="btn btn-neutral float-left" title="PostGIS"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../container_images/" class="btn btn-neutral float-right" title="Container Image Requirements">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../postgis/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../container_images/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/failover/index.html b/assets/documentation/1.27.0-rc1/failover/index.html
new file mode 100644
index 000000000..1521ea044
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/failover/index.html
@@ -0,0 +1,839 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Automated failover - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Automated failover";
+        var mkdocs_page_input_path = "failover.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Automated failover</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#rto-and-rpo-impact">RTO and RPO impact</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#delayed-failover">Delayed failover</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#failover-quorum-quorum-based-failover">Failover Quorum (Quorum-based Failover)</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#how-it-works">How it works</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#quorum-failover-example-scenarios">Quorum Failover Example Scenarios</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#scenario-1-three-node-cluster-failing-pods">Scenario 1: Three-node cluster, failing pod(s)</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#scenario-2-three-node-cluster-network-partition">Scenario 2: Three-node cluster, network partition</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#scenario-3-five-node-cluster-network-partition">Scenario 3: Five-node cluster, network partition</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#scenario-4-three-node-cluster-with-remote-synchronous-replicas">Scenario 4: Three-node cluster with remote synchronous replicas</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#scenario-5-three-node-cluster-preferred-data-durability-network-partition">Scenario 5: Three-node cluster, preferred data durability, network partition</a>
+    </li>
+        </ul>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Automated failover</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="automated-failover">Automated failover</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>In the case of unexpected errors on the primary for longer than the
+<code>.spec.failoverDelay</code> (by default <code>0</code> seconds), the cluster will go into
+<strong>failover mode</strong>. This may happen, for example, when:</p>
+<ul>
+<li>The primary pod has a disk failure</li>
+<li>The primary pod is deleted</li>
+<li>The <code>postgres</code> container on the primary has any kind of sustained failure</li>
+</ul>
+<p>In the failover scenario, the primary cannot be assumed to be working properly.</p>
+<p>After cases like the ones above, the readiness probe for the primary pod will start
+failing. This will be picked up in the controller's reconciliation loop. The
+controller will initiate the failover process, in two steps:</p>
+<ol>
+<li>First, it will mark the <code>TargetPrimary</code> as <code>pending</code>. This change of state will
+   force the primary pod to shutdown, to ensure the WAL receivers on the replicas
+   will stop. The cluster will be marked in failover phase ("Failing over").</li>
+<li>Once all WAL receivers are stopped, there will be a leader election, and a
+   new primary will be named. The chosen instance will initiate promotion to
+   primary, and, after this is completed, the cluster will resume normal operations.
+   Meanwhile, the former primary pod will restart, detect that it is no longer
+   the primary, and become a replica node.</li>
+</ol>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The two-phase procedure helps ensure the WAL receivers can stop in an orderly
+fashion, and that the failing primary will not start streaming WALs again upon
+restart. These safeguards prevent timeline discrepancies between the new primary
+and the replicas.</p>
+</div>
+<p>During the time the failing primary is being shut down:</p>
+<ol>
+<li>It will first try a PostgreSQL's <em>fast shutdown</em> with
+   <code>.spec.switchoverDelay</code> seconds as timeout. This graceful shutdown will attempt
+   to archive pending WALs.</li>
+<li>If the fast shutdown fails, or its timeout is exceeded, a PostgreSQL's
+   <em>immediate shutdown</em> is initiated.</li>
+</ol>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>"Fast" mode does not wait for PostgreSQL clients to disconnect and will
+terminate an online backup in progress. All active transactions are rolled back
+and clients are forcibly disconnected, then the server is shut down.
+"Immediate" mode will abort all PostgreSQL server processes immediately,
+without a clean shutdown.</p>
+</div>
+<h2 id="rto-and-rpo-impact">RTO and RPO impact</h2>
+<p>Failover may result in the service being impacted (<a href="../before_you_start/#rto">RTO</a>)
+and/or data being lost (<a href="../before_you_start/#rpo">RPO</a>):</p>
+<ol>
+<li>During the time when the primary has started to fail, and before the controller
+   starts failover procedures, queries in transit, WAL writes, checkpoints and
+   similar operations, may fail.</li>
+<li>Once the fast shutdown command has been issued, the cluster will no longer
+   accept connections, so service will be impacted but no data
+   will be lost.</li>
+<li>If the fast shutdown fails, the immediate shutdown will stop any pending
+   processes, including WAL writing. Data may be lost.</li>
+<li>During the time the primary is shutting down and a new primary hasn't yet
+   started, the cluster will operate without a primary and thus be impaired - but
+   with no data loss.</li>
+</ol>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The timeout that controls fast shutdown is set by <code>.spec.switchoverDelay</code>,
+as in the case of a switchover. Increasing the time for fast shutdown is safer
+from an RPO point of view, but possibly delays the return to normal operation -
+negatively affecting RTO.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>As already mentioned in the <a href="../instance_manager/">"Instance Manager" section</a>
+when explaining the switchover process, the <code>.spec.switchoverDelay</code> option
+affects the RPO and RTO of your PostgreSQL database. Setting it to a low value,
+might favor RTO over RPO but lead to data loss at cluster level and/or backup
+level. On the contrary, setting it to a high value, might remove the risk of
+data loss while leaving the cluster without an active primary for a longer time
+during the switchover.</p>
+</div>
+<h2 id="delayed-failover">Delayed failover</h2>
+<p>As anticipated above, the <code>.spec.failoverDelay</code> option allows you to delay the start
+of the failover procedure by a number of seconds after the primary has been
+detected to be unhealthy. By default, this setting is set to <code>0</code>, triggering the
+failover procedure immediately.</p>
+<p>Sometimes failing over to a new primary can be more disruptive than waiting
+for the primary to come back online. This is especially true of network
+disruptions where multiple tiers are affected (i.e., downstream logical
+subscribers) or when the time to perform the failover is longer than the
+expected outage.</p>
+<p>Enabling a new configuration option to delay failover provides a mechanism to
+prevent premature failover for short-lived network or node instability.</p>
+<h2 id="failover-quorum-quorum-based-failover">Failover Quorum (Quorum-based Failover)</h2>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p><em>Failover quorum</em> is an experimental feature introduced in version 1.27.0.
+Use with caution in production environments.</p>
+</div>
+<p>Failover quorum is a mechanism that enhances data durability and safety during
+failover events in CloudNativePG-managed PostgreSQL clusters.</p>
+<p>Quorum-based failover allows the controller to determine whether to promote a replica
+to primary based on the state of a quorum of replicas.
+This is useful when stronger data durability is required than the one offered
+by <a href="../replication/#synchronous-replication">synchronous replication</a> and
+default automated failover procedures.</p>
+<p>When synchronous replication is not enabled, some data loss is expected and
+accepted during failover, as a replica may lag behind the primary when
+promoted.</p>
+<p>With synchronous replication enabled, the guarantee is that the application
+will not receive explicit acknowledgment of the successful commit of a
+transaction until the WAL data is known to be safely received by all required
+synchronous standbys.
+This is not enough to guarantee that the operator is able to promote the most
+advanced replica.</p>
+<p>For example, in a three-node cluster with synchronous replication set to <code>ANY 1
+(...)</code>, data is written to the primary and one standby before a commit is
+acknowledged. If both the primary and the aligned standby become unavailable
+(such as during a network partition), the remaining replica may not have the
+latest data. Promoting it could lose some data that the application considered
+committed.</p>
+<p>Quorum-based failover addresses this risk by ensuring that failover only occurs
+if the operator can confirm the presence of all synchronously committed data in
+the instance to promote, and it does not occur otherwise.</p>
+<p>This feature allows users to choose their preferred trade-off between data
+durability and data availability.</p>
+<p>Failover quorum can be enabled by setting the annotation
+<code>alpha.cnpg.io/failoverQuorum="true"</code> in the <code>Cluster</code> resource.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>When this feature is out of the experimental phase, the annotation
+<code>alpha.cnpg.io/failoverQuorum</code> will be replaced by a configuration option in
+the <code>Cluster</code> resource.</p>
+</div>
+<h3 id="how-it-works">How it works</h3>
+<p>Before promoting a replica to primary, the operator performs a quorum check,
+following the principles of the Dynamo <code>R + W &gt; N</code> consistency model<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>.</p>
+<p>In the quorum failover, these values assume the following meaning:</p>
+<ul>
+<li><code>R</code> is the number of <em>promotable replicas</em> (read quorum);</li>
+<li><code>W</code> is the number of replicas that must acknowledge the write before the
+  <code>COMMIT</code> is returned to the client (write quorum);</li>
+<li><code>N</code> is the total number of potentially synchronous replicas;</li>
+</ul>
+<p><em>Promotable replicas</em> are replicas that have these properties:</p>
+<ul>
+<li>are part of the cluster;</li>
+<li>are able to report their state to the operator;</li>
+<li>are potentially synchronous;</li>
+</ul>
+<p>If <code>R + W &gt; N</code>, then we can be sure that among the promotable replicas there is
+at least one that has confirmed all the synchronous commits, and we can safely
+promote it to primary. If this is not the case, the controller will not promote
+any replica to primary, and will wait for the situation to change.</p>
+<p>Users can force a promotion of a replica to primary through the
+<code>kubectl cnpg promote</code> command even if the quorum check is failing.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Manual promotion should only be used as a last resort. Before proceeding,
+make sure you fully understand the risk of data loss and carefully consider the
+consequences of prioritizing the resumption of write workloads for your
+applications.</p>
+</div>
+<p>An additional CRD is used to track the quorum state of the cluster. A <code>Cluster</code>
+with the quorum failover enabled will have a <code>FailoverQuorum</code> resource with the same
+name as the <code>Cluster</code> resource. The <code>FailoverQuorum</code> CR is created by the
+controller when the quorum failover is enabled, and it is updated by the primary
+instance during its reconciliation loop, and read by the operator during quorum
+checks. It is used to track the latest known configuration of the synchronous
+replication.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Users should not modify the <code>FailoverQuorum</code> resource directly. During
+PostgreSQL configuration changes, when it is not possible to determine the
+configuration, the <code>FailoverQuorum</code> resource will be reset, preventing any
+failover until the new configuration is applied.</p>
+</div>
+<p>The <code>FailoverQuorum</code> resource works in conjunction with PostgreSQL synchronous
+replication.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>There is no guarantee that <code>COMMIT</code> operations returned to the
+client but that have not been performed synchronously, such as those made
+explicitly disabling synchronous replication with
+<code>SET synchronous_commit TO local</code>, will be present on a promoted replica.</p>
+</div>
+<h3 id="quorum-failover-example-scenarios">Quorum Failover Example Scenarios</h3>
+<p>In the following scenarios, <code>R</code> is the number of promotable replicas, <code>W</code> is
+the number of replicas that must acknowledge a write before commit, and <code>N</code> is
+the total number of potentially synchronous replicas. The "Failover" column
+indicates whether failover is allowed under quorum failover rules.</p>
+<h4 id="scenario-1-three-node-cluster-failing-pods">Scenario 1: Three-node cluster, failing pod(s)</h4>
+<p>A cluster with <code>instances: 3</code>, <code>synchronous.number=1</code>, and
+<code>dataDurability=required</code>.</p>
+<ul>
+<li>If only the primary fails, two promotable replicas remain (R=2).
+  Since <code>R + W &gt; N</code> (2 + 1 &gt; 2), failover is allowed and safe.</li>
+<li>If both the primary and one replica fail, only one promotable replica
+  remains (R=1). Since <code>R + W = N</code> (1 + 1 = 2), failover is not allowed to
+  prevent possible data loss.</li>
+</ul>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<h4 id="scenario-2-three-node-cluster-network-partition">Scenario 2: Three-node cluster, network partition</h4>
+<p>A cluster with <code>instances: 3</code>, <code>synchronous.number: 1</code>, and
+<code>dataDurability: required</code> experiences a network partition.</p>
+<ul>
+<li>If the operator can communicate with the primary, no failover occurs. The
+  cluster can be impacted if the primary cannot reach any standby, since it
+  won't commit transactions due to synchronous replication requirements.</li>
+<li>If the operator cannot reach the primary but can reach both replicas (R=2),
+  failover is allowed. If the operator can reach only one replica (R=1),
+  failover is not allowed, as the synchronous one may be the other one.</li>
+</ul>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<h4 id="scenario-3-five-node-cluster-network-partition">Scenario 3: Five-node cluster, network partition</h4>
+<p>A cluster with <code>instances: 5</code>, <code>synchronous.number=2</code>, and
+<code>dataDurability=required</code> experiences a network partition.</p>
+<ul>
+<li>If the operator can communicate with the primary, no failover occurs. The
+  cluster can be impacted if the primary cannot reach at least two standbys,
+  as since it won't commit transactions due to synchronous replication
+  requirements.</li>
+<li>If the operator cannot reach the primary but can reach at least three
+  replicas (R=3), failover is allowed. If the operator can reach only two
+  replicas (R=2), failover is not allowed, as the synchronous one may be the
+  other one.</li>
+</ul>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">3</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">4</td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">4</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<h4 id="scenario-4-three-node-cluster-with-remote-synchronous-replicas">Scenario 4: Three-node cluster with remote synchronous replicas</h4>
+<p>A cluster with <code>instances: 3</code> and remote synchronous replicas defined in
+<code>standbyNamesPre</code> or <code>standbyNamesPost</code>. We assume that the primary is failing.</p>
+<p>This scenario requires an important consideration. Replicas listed in
+<code>standbyNamesPre</code> or <code>standbyNamesPost</code> are not counted in
+<code>R</code> (they cannot be promoted), but are included in <code>N</code> (they may have received
+synchronous writes). So, if
+<code>synchronous.number &lt;= len(standbyNamesPre) + len(standbyNamesPost)</code>, failover
+is not possible, as no local replica can be guaranteed to have the required
+data. The operator prevents such configurations during validation, but some
+invalid configurations are shown below for clarity.</p>
+<p><strong>Example configurations:</strong></p>
+<p>Configuration #1 (valid):</p>
+<pre><code class="language-yaml">instances: 3
+postgresql:
+  synchronous:
+    method: any
+    number: 2
+    standbyNamesPre:
+      - angus
+</code></pre>
+<p>In this configuration, when the primary fails, <code>R = 2</code> (the local replicas),
+<code>W = 2</code>, and <code>N = 3</code> (2 local replicas + 1 remote), allowing failover.
+In case of an additional replica failing (<code>R = 1</code>) failover is not allowed.</p>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">3</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">4</td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">4</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<p>Configuration #2 (invalid):</p>
+<pre><code class="language-yaml">instances: 3
+postgresql:
+  synchronous:
+    method: any
+    number: 1
+    maxStandbyNamesFromCluster: 1
+    standbyNamesPre:
+      - angus
+</code></pre>
+<p>In this configuration, <code>R = 2</code> (the local replicas), <code>W = 1</code>, and <code>N = 3</code>
+(2 local replicas + 1 remote).
+Failover is not possible in this setup, so quorum failover can not be
+enabled with this configuration.</p>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<p>Configuration #3 (invalid):</p>
+<pre><code class="language-yaml">instances: 3
+postgresql:
+  synchronous:
+    method: any
+    number: 1
+    maxStandbyNamesFromCluster: 0
+    standbyNamesPre:
+      - angus
+      - malcolm
+</code></pre>
+<p>In this configuration, <code>R = 0</code> (the local replicas), <code>W = 1</code>, and <code>N = 2</code>
+(0 local replicas + 2 remote).
+Failover is not possible in this setup, so quorum failover can not be
+enabled with this configuration.</p>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">0</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<h4 id="scenario-5-three-node-cluster-preferred-data-durability-network-partition">Scenario 5: Three-node cluster, preferred data durability, network partition</h4>
+<p>Consider a cluster with <code>instances: 3</code>, <code>synchronous.number=1</code>, and
+<code>dataDurability=preferred</code> that experiences a network partition.</p>
+<ul>
+<li>If the operator can communicate with both the primary and the API server,
+  the primary continues to operate, removing unreachable standbys from the
+  <code>synchronous_standby_names</code> set.</li>
+<li>If the primary cannot reach the operator or API server, a quorum check is
+  performed. The <code>FailoverQuorum</code> status cannot have changed, as the primary cannot
+  have received new configuration. If the operator can reach both replicas,
+  failover is allowed (<code>R=2</code>). If only one replica is reachable (<code>R=1</code>),
+  failover is not allowed.</li>
+</ul>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<div class="footnote">
+<hr />
+<ol>
+<li id="fn:1">
+<p><a href="https://www.amazon.science/publications/dynamo-amazons-highly-available-key-value-store">Dynamo: Amazon’s highly available key-value store</a>&#160;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&#8617;</a></p>
+</li>
+</ol>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../kubectl-plugin/" class="btn btn-neutral float-left" title="Kubectl Plugin"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../troubleshooting/" class="btn btn-neutral float-right" title="Troubleshooting">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../kubectl-plugin/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../troubleshooting/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/failure_modes/index.html b/assets/documentation/1.27.0-rc1/failure_modes/index.html
new file mode 100644
index 000000000..e8a81ec97
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/failure_modes/index.html
@@ -0,0 +1,440 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Failure Modes - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Failure Modes";
+        var mkdocs_page_input_path = "failure_modes.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Failure Modes</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#self-healing">Self-Healing</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#primary-failure">Primary Failure</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#standby-failure">Standby Failure</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#manual-intervention">Manual Intervention</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#disabling-reconciliation">Disabling Reconciliation</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Failure Modes</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="failure-modes">Failure Modes</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>In previous versions of CloudNativePG, this page included specific failure
+scenarios. Since these largely follow standard Kubernetes behavior, we have
+streamlined the content to avoid duplication of information that belongs to the
+underlying Kubernetes stack and is not specific to CloudNativePG.</p>
+</div>
+<p>CloudNativePG adheres to standard Kubernetes principles for self-healing and
+high availability. We assume familiarity with core Kubernetes concepts such as
+storage classes, PVCs, nodes, and Pods. For CloudNativePG-specific details,
+refer to the <a href="../instance_manager/">"Postgres Instance Manager" section</a>, which
+covers startup, liveness, and readiness probes, as well as the
+<a href="#self-healing">self-healing</a> section below.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>If you are running CloudNativePG in production, we strongly recommend
+seeking <a href="https://cloudnative-pg.io/support/">professional support</a>.</p>
+</div>
+<h2 id="self-healing">Self-Healing</h2>
+<h3 id="primary-failure">Primary Failure</h3>
+<p>If the primary Pod fails:</p>
+<ul>
+<li>The operator promotes the most up-to-date standby with the lowest replication
+  lag.</li>
+<li>The <code>-rw</code> service is updated to point to the new primary.</li>
+<li>The failed Pod is removed from the <code>-r</code> and <code>-rw</code> services.</li>
+<li>Standby Pods begin replicating from the new primary.</li>
+<li>The former primary uses <code>pg_rewind</code> to re-synchronize if its PVC is available;
+  otherwise, a new standby is created from a backup of the new primary.</li>
+</ul>
+<h3 id="standby-failure">Standby Failure</h3>
+<p>If a standby Pod fails:</p>
+<ul>
+<li>It is removed from the <code>-r</code> and <code>-ro</code> services.</li>
+<li>The Pod is restarted using its PVC if available; otherwise, a new Pod is
+  created from a backup of the current primary.</li>
+<li>Once ready, the Pod is re-added to the <code>-r</code> and <code>-ro</code> services.</li>
+</ul>
+<h2 id="manual-intervention">Manual Intervention</h2>
+<p>For failure scenarios not covered by automated recovery, manual intervention
+may be required.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Do not perform manual operations without <a href="https://cloudnative-pg.io/support/">professional support</a>.</p>
+</div>
+<h3 id="disabling-reconciliation">Disabling Reconciliation</h3>
+<p>To temporarily disable the reconciliation loop for a PostgreSQL cluster, use
+the <code>cnpg.io/reconciliationLoop</code> annotation:</p>
+<pre><code class="language-yaml">metadata:
+  name: cluster-example-no-reconcile
+  annotations:
+    cnpg.io/reconciliationLoop: &quot;disabled&quot;
+spec:
+  # ...
+</code></pre>
+<p>Use this annotation <strong>with extreme caution</strong> and only during emergency
+operations.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This annotation should be removed as soon as the issue is resolved. Leaving
+it in place prevents the operator from executing self-healing actions,
+including failover.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../resource_management/" class="btn btn-neutral float-left" title="Resource management"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../rolling_update/" class="btn btn-neutral float-right" title="Rolling Updates">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../resource_management/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../rolling_update/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/faq/index.html b/assets/documentation/1.27.0-rc1/faq/index.html
new file mode 100644
index 000000000..45ef58d19
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/faq/index.html
@@ -0,0 +1,802 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Frequently Asked Questions (FAQ) - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Frequently Asked Questions (FAQ)";
+        var mkdocs_page_input_path = "faq.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Frequently Asked Questions (FAQ)</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#running-postgresql-in-kubernetes">Running PostgreSQL in Kubernetes</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#high-availability">High availability</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#database-management">Database management</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Frequently Asked Questions (FAQ)</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="frequently-asked-questions-faq">Frequently Asked Questions (FAQ)</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<h2 id="running-postgresql-in-kubernetes">Running PostgreSQL in Kubernetes</h2>
+<p><strong>Everyone knows that stateful workloads like PostgreSQL cannot run in
+Kubernetes. Why do you say the contrary?</strong></p>
+<p>An <a href="https://dok.community/dokc-2021-report/"><em>independent research survey commissioned by the Data on Kubernetes
+Community</em></a> in September 2021
+revealed that half of the respondents run most of their production
+workloads on Kubernetes. 90% of them believe that Kubernetes is ready
+for stateful workloads, and 70% of them run databases in production.
+Databases like Postgres. However, according to them, significant
+challenges remain, such as the knowledge gap (Kubernetes and Cloud
+Native, in general, have a steep learning curve) and the quality of
+Kubernetes operators. The latter is the reason why we believe that an
+operator like CloudNativePG highly contributes to the success
+of your project.</p>
+<p>For database fanatics like us, a real game-changer has been the
+introduction of the support for local persistent volumes in
+<a href="https://kubernetes.io/blog/2019/04/04/kubernetes-1.14-local-persistent-volumes-ga/"><em>Kubernetes 1.14 in April 2019</em></a>.</p>
+<p><strong>CloudNativePG is built on immutable application containers.
+What does it mean?</strong></p>
+<p>According to the microservice architectural pattern, a container is
+designed to run a single application or process. As a result, such
+container images are built to run the main application as the
+single entry point (the so-called PID 1 process).</p>
+<p>In Kubernetes terms, the application is referred to as workload.
+Workloads can be stateless like a web application server or stateful like a
+database. Mapping this concept to PostgreSQL, an immutable application
+container is a single "postgres" process that is running and
+tied to a single and specific version - the one in the immutable
+container image.</p>
+<p>No other processes such as SSH or systemd, or syslog are allowed.</p>
+<p>Immutable Application Containers are in contrast with Mutable System
+Containers, which are still a very common way to interpret and use
+containers.</p>
+<p>Immutable means that a container won't be modified during its life: no
+updates, no patches, no configuration changes. If you must update the
+application code or apply a patch, you build a new image and redeploy
+it. Immutability makes deployments safer and more repeatable.</p>
+<p>For more information, please refer to
+<a href="https://www.enterprisedb.com/blog/why-edb-chose-immutable-application-containers"><em>"Why EDB chose immutable application containers"</em></a>.</p>
+<p><strong>What does Cloud Native mean?</strong></p>
+<p>The Cloud Native Computing Foundation defines the term
+"<a href="https://github.com/cncf/toc/blob/main/DEFINITION.md"><em>Cloud Native</em></a>".
+However, since the start of the Cloud Native PostgreSQL/CloudNativePG operator
+at 2ndQuadrant, the development team has been interpreting Cloud Native
+as three main concepts:</p>
+<ol>
+<li>An existing, healthy, genuine, and prosperous DevOps culture, founded
+    on people, as well as principles and processes, which enables teams
+    and organizations (as teams of teams) to continuously change so to
+    innovate and accelerate the delivery of outcomes and produce value
+    for the business in safer, more efficient, and more engaging ways</li>
+<li>A microservice architecture that is based on Immutable Application
+    Containers</li>
+<li>A way to manage and orchestrate these containers, such as Kubernetes</li>
+</ol>
+<p>Currently, the standard de facto for container orchestration is
+Kubernetes, which automates the deployment, administration and
+scalability of Cloud Native Applications.</p>
+<p>Another definition of Cloud Native that resonates with us is the one
+defined by Ibryam and Huß in
+<a href="https://www.oreilly.com/library/view/kubernetes-patterns/9781492050278/"><em>"Kubernetes Patterns", published by O'Reilly</em></a>:</p>
+<blockquote>
+<p>Principles, Patterns, Tools to automate containerized microservices at scale</p>
+</blockquote>
+<p><strong>Can I run CloudNativePG on bare metal Kubernetes?</strong></p>
+<p>Yes, definitely. You can run Kubernetes on bare metal. And you can dedicate one
+or more physical worker nodes with locally attached storage to PostgreSQL
+workloads for maximum and predictable I/O performance.</p>
+<p>The actual Cloud Native PostgreSQL project, from which CloudNativePG
+originated, was born after a pilot project in 2019 that benchmarked storage and
+PostgreSQL on the same bare metal server, first directly in Linux, and then
+inside Kubernetes. As expected, the experiment showed only negligible
+performance impact introduced by the container running in Kubernetes through
+local persistent volumes, allowing the Cloud Native initiative to continue.</p>
+<p><strong>Why should I use PostgreSQL replication instead of file system
+replication?</strong></p>
+<p>Please read the <a href="../architecture/#synchronizing-the-state">"Architecture: Synchronizing the state"</a>
+section.</p>
+<p><strong>Why should I use an operator instead of running PostgreSQL as a
+container?</strong></p>
+<p>The most basic approach to running PostgreSQL in Kubernetes is to have a
+pod, which is the smallest unit of deployment in Kubernetes, running a
+Postgres container with no replica. The volume hosting the Postgres data
+directory is mounted on the pod, and it usually resides on network
+storage. In this case, Kubernetes restarts the pod in case of a
+problem or moves it to another Kubernetes node.</p>
+<p>The most sophisticated approach is to run PostgreSQL using an operator.
+An operator is an extension of the Kubernetes controller and defines how
+a complex application works in business continuity contexts. The
+operator pattern is currently state of the art in Kubernetes for
+this purpose. An operator simulates the work of a human operator in an
+automated and programmatic way.</p>
+<p>Postgres is a complex application, and an operator not only needs to
+deploy a cluster (the first step), but also properly react after
+unexpected events. The typical example is that of a failover.</p>
+<p>An operator relies on Kubernetes for capabilities like self-healing,
+scalability, replication, high availability, backup, recovery, updates,
+access, resource control, storage management, and so on. It also
+facilitates the integration of a PostgreSQL cluster in the log
+management and monitoring infrastructure.</p>
+<p>CloudNativePG enables the definition of the desired state of a
+PostgreSQL cluster via declarative configuration. Kubernetes
+continuously makes sure that the current state of the infrastructure
+matches the desired one through reconciliation loops initiated by the
+Kubernetes controller. If the desired state and the actual state don't
+match, reconciliation loops trigger self-healing procedures. That's
+where an operator like CloudNativePG comes into play.</p>
+<p><strong>Are there any other operators for Postgres out there?</strong></p>
+<p>Yes, of course. And our advice is that you look at all of them and compare
+them with CloudNativePG before making your decision. You will see that
+most of these operators use an external failover management tool (Patroni
+or similar) and rely on StatefulSets.</p>
+<p>Here is a non exhaustive list, in chronological order from their
+publication on GitHub:</p>
+<ul>
+<li><a href="https://github.com/CrunchyData/postgres-operator">Crunchy Data Postgres Operator</a> (2017)</li>
+<li><a href="https://github.com/zalando/postgres-operator">Zalando Postgres Operator</a> (2017)</li>
+<li><a href="https://github.com/ongres/stackgres">Stackgres</a> (2020)</li>
+<li><a href="https://github.com/percona/percona-postgresql-operator">Percona Operator for PostgreSQL</a> (2021)</li>
+<li><a href="https://github.com/reactive-tech/kubegres">Kubegres</a> (2021)</li>
+</ul>
+<p><a href="https://star-history.com/#cloudnative-pg/cloudnative-pg&amp;zalando/postgres-operator&amp;CrunchyData/postgres-operator&amp;ongres/stackgres&amp;percona/percona-postgresql-operator&amp;reactive-tech/kubegres&amp;Date"><img alt="Star History Chart" src="https://api.star-history.com/svg?repos=cloudnative-pg/cloudnative-pg,zalando/postgres-operator,CrunchyData/postgres-operator,ongres/stackgres,percona/percona-postgresql-operator,reactive-tech/kubegres&amp;type=Date" /></a></p>
+<p>Feel free to report any relevant missing entry as a PR.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>The <a href="https://dok.community">Data on Kubernetes Community</a>
+(which includes some of our maintainers) is working on an independent and
+vendor neutral project to list the operators called
+<a href="https://github.com/dokc/operator-feature-matrix">Operator Feature Matrix</a>.</p>
+</div>
+<p><strong>You say that CloudNativePG is a fully declarative operator.
+What do you mean by that?</strong></p>
+<p>The easiest way is to explain declarative configuration through an
+example that highlights the differences with imperative configuration.
+In an imperative context, the state is defined as a series of tasks to
+be executed in sequence. So, we can get a three-node PostgreSQL cluster
+by creating the first instance, configuring the replication, cloning a
+second instance, and the third one.</p>
+<p>In a declarative approach, the state of a system is defined using
+configuration, namely: there's a PostgreSQL 13 cluster with two replicas.
+This approach highly simplifies change management operations, and when
+these are stored in source control systems like Git, it enables the
+Infrastructure as Code capability. And Kubernetes takes it farther than
+deployment, as it makes sure that our request is fulfilled at any time.</p>
+<p><strong>What are the required skills to run PostgreSQL on Kubernetes?</strong></p>
+<p>Running PostgreSQL on Kubernetes requires both PostgreSQL and Kubernetes
+skills in your DevOps team. The best experience is when database
+administrators familiarize themselves with Kubernetes core concepts
+and are able to interact with Kubernetes administrators.</p>
+<p>Our advice is for everyone that wants to fully exploit Cloud Native
+PostgreSQL to acquire the "Certified Kubernetes Administrator (CKA)"
+status from the CNCF certification program.</p>
+<p><strong>Why isn't CloudNativePG using StatefulSets?</strong></p>
+<p>CloudNativePG does not rely on <code>StatefulSet</code> resources, and
+instead manages the underlying PVCs directly by leveraging the selected
+storage class for dynamic provisioning. Please refer to the
+<a href="../controller/">"Custom Pod Controller"</a> section for details and reasons behind
+this decision.</p>
+<h2 id="high-availability">High availability</h2>
+<p><strong>What happens to the PostgreSQL clusters when the operator pod dies or it is
+not available for a certain amount of time?</strong></p>
+<p>The CloudNativePG operator, among other things, is responsible for self-healing
+capabilities. As such, they might not be available during an outage of the
+operator.</p>
+<p>However, assuming that the outage does not affect the nodes where PostgreSQL
+clusters are running, the database will continue to serve normal operations,
+through the relevant Kubernetes services. Moreover, the <a href="../instance_manager/">instance manager</a>,
+which runs inside each PostgreSQL pod will still work, making sure that the
+database server is up, including accessory services like logging, export of
+metrics, continuous archiving of WAL files, etc.</p>
+<p>To summarize:</p>
+<p>an outage of the operator does not necessarily imply a PostgreSQL
+database outage; it's like running a database without a DBA or system
+administrator.</p>
+<p><strong>What are the reasons behind CloudNativePG not relying on a failover
+management tool like Patroni, repmgr, or Stolon?</strong></p>
+<p>Although part of the team that develops CloudNativePG has been heavily
+involved in repmgr in the past, we decided to take a different approach
+and directly extend the Kubernetes controller and rely on the Kubernetes API
+server to hold the status of a Postgres cluster, and use it as the only source
+of truth to:</p>
+<ul>
+<li>control High Availability of a Postgres cluster primarily via automated
+  failover and switchover, coordinating itself with the <a href="../instance_manager/">instance manager</a></li>
+<li>control the Kubernetes services, that is the entry points for your
+  applications</li>
+</ul>
+<p><strong>Should I manually resync a former primary with the new one following a
+failover?</strong></p>
+<p>No. The operator does that automatically for you, and relies on <code>pg_rewind</code> to
+synchronize the former primary with the new one.</p>
+<!--
+How can I ensure that failover (unplanned) and switchover (planned)
+times are within our SLA of 99.995% per year?
+
+TODO
+
+
+TODO
+
+What happens if all nodes of PostgreSQL have a failure?
+
+TODO
+
+## Backup and restore
+
+Does CloudNativePG support logical backups with pg_dump?
+
+TODO
+
+What is the recommended setup for the best outcomes in terms of disaster
+recovery?
+
+TODO
+
+What happens if the Kubernetes cluster where I was running PostgreSQL is
+permanently gone?
+
+TODO
+
+
+## Miscellaneous
+
+**What are the Kubernetes distributions that CloudNativePG
+supports? What's the rationale behind this decision?**
+
+TODO
+
+**Are there performance tests or values for large environments (e.g. \>
+4 TB/256 GB/64 cores) ?**
+
+TODO
+
+**Question about LDAP/Active Directory support**
+
+TODO
+
+How can the provisioning of CloudNativePG databases be
+automated?
+
+TODO
+
+How can the de-provisioning of CloudNativePG be automated?
+
+TODO
+
+Does CloudNativePG wipe the data directory of PostgreSQL when
+a cluster is deleted?
+
+TODO
+
+How are changes of resources (storage/CPU/memory) made to a database
+instance during runtime?
+
+TODO
+
+How can I get notified via email after a PostgreSQL cluster has been
+successfully created, with details about connection?
+
+TODO
+
+## Updates
+
+How can I perform updates on the underlying Kubernetes nodes?
+
+TODO
+
+Can minor version updates of PostgreSQL be carried out without downtime?
+
+TODO
+
+Can major version upgrades of PostgreSQL be carried out without
+downtime?
+
+TODO
+
+-->
+
+<h2 id="database-management">Database management</h2>
+<p><strong>Why should I use PostgreSQL?</strong></p>
+<p>We believe that PostgreSQL is the equivalent in the database area of
+what Linux represents in the operating system space. The current latest
+major version of Postgres is version 16, which ships out of the box:</p>
+<ul>
+<li>native streaming replication, both physical and logical</li>
+<li>continuous hot backup and point in time recovery</li>
+<li>declarative partitioning for horizontal table partitioning, which is
+    a very well-known technique in the database area to improve vertical
+    scalability on a single instance</li>
+<li>extensibility, with extensions like <a href="../postgis/">PostGIS</a> for geographical
+    databases</li>
+<li>parallel queries for vertical scalability</li>
+<li>JSON support, unleashing the multi-model hybrid database for both
+    structured and unstructured data queried via standard SQL</li>
+</ul>
+<p>And so on ...</p>
+<p><strong>How many databases should be hosted in a single PostgreSQL instance?</strong></p>
+<p>Our recommendation is to dedicate a single PostgreSQL cluster
+(intended as primary and multiple standby servers) to a single database,
+entirely managed by a single microservice application. However, by
+leveraging the "postgres" superuser, it is possible to create as many
+users and databases as desired (subject to the available resources).</p>
+<p>The reason for this recommendation lies in the Cloud Native concept,
+based on microservices. In a pure microservice architecture, the
+microservice itself should own the data it manages exclusively.
+These could be flat files, queues, key-value stores, or, in our case, a
+PostgreSQL relational database containing both structured and
+unstructured data. The general idea is that only the microservice can
+access the database, including schema management and migrations.</p>
+<p>CloudNativePG has been designed to work this way out of the
+box, by default creating an application user and an application database
+owned by the aforementioned application user.</p>
+<p>Reserving a PostgreSQL instance to a single microservice owned database,
+enhances:</p>
+<ul>
+<li>resource management: in PostgreSQL, CPU, and memory constrained
+    resources are generally handled at the instance level, not the
+    database level, making it easier to integrate it with Kubernetes
+    resource management policies at the pod level</li>
+<li>physical continuous backup and Point-In-Time-Recovery (PITR): given
+    that PostgreSQL handles continuous backup and recovery at the
+    instance level, having one database per instance simplifies PITR
+    operations, differentiates retention policy management, and
+    increases data protection of backups</li>
+<li>application updates: enable each application to decide their update
+    policies without impacting other databases owned by different
+    applications</li>
+<li>database updates: each application can decide which PostgreSQL
+    version to use, and independently, when to upgrade to a different
+    major version of PostgreSQL and at what conditions (e.g., cutover
+    time)</li>
+</ul>
+<p><strong>Is there an upper limit in database size for not considering Kubernetes?</strong></p>
+<p>No, as Kubernetes is no different from virtual machines and bare metal as far
+as this is regarded.
+Practically, however, it depends on the available resources of your Kubernetes
+cluster. Our advice with very large databases (VLDB) is to consider a shared
+nothing architecture, where a Kubernetes worker node is dedicated to a single
+Postgres instance, with dedicated storage.
+We proved that this extreme architectural pattern works when we benchmarked
+<a href="https://www.2ndquadrant.com/en/blog/local-persistent-volumes-and-postgresql-usage-in-kubernetes/">running PostgreSQL on bare metal Kubernetes with local persistent
+volumes</a>.
+Tablespaces and horizontal partitioning are data modeling techniques that you
+can use to improve the vertical scalability of you databases.</p>
+<p><strong>How can I specify a time zone in the PostgreSQL cluster?</strong></p>
+<p>PostgreSQL has an extensive support for time zones, as explained in the official
+documentation:</p>
+<ul>
+<li><a href="https://www.postgresql.org/docs/current/datatype-datetime.html">Date time data types</a></li>
+<li><a href="https://www.postgresql.org/docs/current/runtime-config-client.html#GUC-TIMEZONE">Client connections config options</a></li>
+</ul>
+<p>Although time zones can even be used at session, transaction and even as part
+of a query in PostgreSQL, a very common way is to set them up globally. With
+CloudNativePG you can configure the cluster level time zone in the
+<code>.spec.postgresql.parameters</code> section as in the following example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: pg-italy
+spec:
+  instances: 1
+
+  postgresql:
+    parameters:
+      timezone: &quot;Europe/Rome&quot;
+
+  storage:
+    size: 1Gi
+</code></pre>
+<p>The time zone can be verified with:</p>
+<pre><code class="language-console">$ kubectl exec -ti pg-italy-1 -c postgres -- psql -x -c &quot;SHOW timezone&quot;
+-[ RECORD 1 ]---------
+TimeZone | Europe/Rome
+</code></pre>
+<p><strong>What is the recommended architecture for best business continuity
+outcomes?</strong></p>
+<p>As covered in the <a href="../architecture/">"Architecture"</a> section, the main
+recommendation is to adopt shared nothing architectures as much as possible, by
+leveraging the native capabilities and resources that Kubernetes provides in a
+single cluster, namely:</p>
+<ul>
+<li>availability zones: spread your instances across different availability zones
+  in the same Kubernetes cluster</li>
+<li>worker nodes: as a consequence, make sure that your Postgres instances reside
+  on different Kubernetes worker nodes</li>
+<li>storage: use dedicated storage for each worker node running Postgres</li>
+</ul>
+<p>Use at least one standby, preferably at least two, so that you can configure
+synchronous replication in the cluster, introducing <a href="../before_you_start/#rpo">RPO</a>=0
+for high availability.</p>
+<p>If you do not have availability zones - normally the case of on-premise
+installations - separate on worker nodes and storage.</p>
+<p>Properly setup continuous backup on a local/regional object store.</p>
+<p>The same architecture that is in a single Kubernetes cluster can be replicated
+in another Kubernetes cluster (normally in another geographical area or region)
+through the <a href="../replica_cluster/">replica cluster</a> feature, providing disaster
+recovery and high availability at global scale.</p>
+<p>You can use the WAL archive in the primary object store to feed the replica in
+the other region, without having to provide a streaming connection, if the default
+maximum RPO of 5 minutes is enough for you.</p>
+<p><strong>How can instances be stopped or started?</strong></p>
+<p>Please look at <a href="../fencing/">"Fencing"</a> or <a href="../declarative_hibernation/">"Hibernation"</a>.</p>
+<p><strong>What are the global objects such as roles and databases that are
+automatically created by CloudNativePG?</strong></p>
+<p>The operator automatically creates a user for the application (by default
+called <code>app</code>) and a database for the application (by default called <code>app</code>)
+which is owned by the aforementioned user.</p>
+<p>This way, the database is ready for a microservice adoption, as developers
+can control migrations using the <code>app</code> user, without requiring <em>superuser</em>
+access.</p>
+<p>Teams can then create another user for read-write operations through the
+<a href="../declarative_role_management/">"Declarative role management"</a> feature
+and assign the required <code>GRANT</code> to the tables.</p>
+<!--
+Q: Support for tablespaces
+
+TODO
+
+Q: GUI
+
+TODO
+
+Q: Monitoring
+
+TODO
+
+Q: Logging
+
+TODO
+
+
+TODO
+-->
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../benchmarking/" class="btn btn-neutral float-left" title="Benchmarking"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../cloudnative-pg.v1/" class="btn btn-neutral float-right" title="API Reference">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../benchmarking/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../cloudnative-pg.v1/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/fencing/index.html b/assets/documentation/1.27.0-rc1/fencing/index.html
new file mode 100644
index 000000000..1299faec4
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/fencing/index.html
@@ -0,0 +1,469 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Fencing - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Fencing";
+        var mkdocs_page_input_path = "fencing.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Fencing</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#how-to-fence-instances">How to fence instances</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#how-to-lift-fencing">How to lift fencing</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#how-fencing-works">How fencing works</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Fencing</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="fencing">Fencing</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>Fencing in CloudNativePG is the ultimate process of protecting the
+data in one, more, or even all instances of a PostgreSQL cluster when they
+appear to be malfunctioning. When an instance is fenced, the PostgreSQL server
+process (<code>postmaster</code>) is guaranteed to be shut down, while the pod is kept running.
+This makes sure that, until the fence is lifted, data on the pod is not modified by
+PostgreSQL and that the file system can be investigated for debugging and
+troubleshooting purposes.</p>
+<h2 id="how-to-fence-instances">How to fence instances</h2>
+<p>In CloudNativePG you can fence:</p>
+<ul>
+<li>a specific instance</li>
+<li>a list of instances</li>
+<li>an entire Postgres <code>Cluster</code></li>
+</ul>
+<p>Fencing is controlled through the content of the <code>cnpg.io/fencedInstances</code>
+annotation, which expects a JSON formatted list of instance names.
+If the annotation is set to <code>'["*"]'</code>, a singleton list with a wildcard, the
+whole cluster is fenced.
+If the annotation is set to an empty JSON list, the operator behaves as if the
+annotation was not set.</p>
+<p>For example:</p>
+<ul>
+<li>
+<p><code>cnpg.io/fencedInstances: '["cluster-example-1"]'</code> will fence just
+  the <code>cluster-example-1</code> instance</p>
+</li>
+<li>
+<p><code>cnpg.io/fencedInstances: '["cluster-example-1","cluster-example-2"]'</code>
+  will fence the <code>cluster-example-1</code> and <code>cluster-example-2</code> instances</p>
+</li>
+<li>
+<p><code>cnpg.io/fencedInstances: '["*"]'</code> will fence every instance in
+  the cluster.</p>
+</li>
+</ul>
+<p>The annotation can be manually set on the Kubernetes object, for example via
+the <code>kubectl annotate</code> command, or in a transparent way using the
+<code>kubectl cnpg fencing on</code> subcommand:</p>
+<pre><code class="language-shell"># to fence only one instance
+kubectl cnpg fencing on cluster-example 1
+
+# to fence all the instances in a Cluster
+kubectl cnpg fencing on cluster-example &quot;*&quot;
+</code></pre>
+<p>Here is an example of a <code>Cluster</code> with an instance that was previously fenced:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+    annotations:
+      cnpg.io/fencedInstances: '[&quot;cluster-example-1&quot;]'
+[...]
+</code></pre>
+<h2 id="how-to-lift-fencing">How to lift fencing</h2>
+<p>Fencing can be lifted by clearing the annotation, or set it to a different value.</p>
+<p>As for fencing, this can be done either manually with <code>kubectl annotate</code>, or
+using the <code>kubectl cnpg fencing</code> subcommand as follows:</p>
+<pre><code class="language-shell"># to lift the fencing only for one instance
+# N.B.: at the moment this won't work if the whole cluster was fenced previously,
+#       in that case you will have to manually set the annotation as explained above
+kubectl cnpg fencing off cluster-example 1
+
+# to lift the fencing for all the instances in a Cluster
+kubectl cnpg fencing off cluster-example &quot;*&quot;
+</code></pre>
+<h2 id="how-fencing-works">How fencing works</h2>
+<p>Once an instance is set for fencing, the procedure to shut down the
+<code>postmaster</code> process is initiated, identical to the one of the switchover.
+This consists of an initial fast shutdown with a timeout set to
+<code>.spec.switchoverDelay</code>, followed by an immediate shutdown. Then:</p>
+<ul>
+<li>
+<p>the Pod will be kept alive</p>
+</li>
+<li>
+<p>the Pod won't be marked as <em>Ready</em></p>
+</li>
+<li>
+<p>all the changes that don't require the Postgres instance to be up will be
+  reconciled, including:</p>
+<ul>
+<li>configuration files</li>
+<li>certificates and all the cryptographic material</li>
+</ul>
+</li>
+<li>
+<p>metrics will not be collected, except <code>cnpg_collector_fencing_on</code> which will be
+  set to 1</p>
+</li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>If a <strong>primary instance</strong> is fenced, its postmaster process
+is shut down but no failover is performed, interrupting the operativity of
+the applications. When the fence will be lifted, the primary instance will be
+started up again without performing a failover.</p>
+<p>Given that, we advise users to fence primary instances only if strictly required.</p>
+</div>
+<p>If a fenced instance is deleted, the pod will be recreated normally, but the
+postmaster won't be started. This can be extremely helpful when instances
+are <code>Crashlooping</code>.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../troubleshooting/" class="btn btn-neutral float-left" title="Troubleshooting"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../declarative_hibernation/" class="btn btn-neutral float-right" title="Declarative hibernation">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../troubleshooting/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../declarative_hibernation/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/image_catalog/index.html b/assets/documentation/1.27.0-rc1/image_catalog/index.html
new file mode 100644
index 000000000..ed709a6c7
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/image_catalog/index.html
@@ -0,0 +1,458 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Image Catalog - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Image Catalog";
+        var mkdocs_page_input_path = "image_catalog.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Image Catalog</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#cloudnativepg-catalogs">CloudNativePG Catalogs</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#postgresql-container-images">PostgreSQL Container Images</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#postgis-container-images">PostGIS Container Images</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Image Catalog</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="image-catalog">Image Catalog</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p><code>ImageCatalog</code> and <code>ClusterImageCatalog</code> are essential resources that empower
+you to define images for creating a <code>Cluster</code>.</p>
+<p>The key distinction lies in their scope: an <code>ImageCatalog</code> is namespaced, while
+a <code>ClusterImageCatalog</code> is cluster-scoped.</p>
+<p>Both share a common structure, comprising a list of images, each equipped with
+a <code>major</code> field indicating the major version of the image.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>The operator places trust in the user-defined major version and refrains
+from conducting any PostgreSQL version detection. It is the user's
+responsibility to ensure alignment between the declared major version in
+the catalog and the PostgreSQL image.</p>
+</div>
+<p>The <code>major</code> field's value must remain unique within a catalog, preventing
+duplication across images. Distinct catalogs, however, may
+expose different images under the same <code>major</code> value.</p>
+<p><strong>Example of a Namespaced <code>ImageCatalog</code>:</strong></p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: ImageCatalog
+metadata:
+  name: postgresql
+  namespace: default
+spec:
+  images:
+    - major: 15
+      image: ghcr.io/cloudnative-pg/postgresql:15.6
+    - major: 16
+      image: ghcr.io/cloudnative-pg/postgresql:16.8
+    - major: 17
+      image: ghcr.io/cloudnative-pg/postgresql:17.5
+</code></pre>
+<p><strong>Example of a Cluster-Wide Catalog using <code>ClusterImageCatalog</code> Resource:</strong></p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: ClusterImageCatalog
+metadata:
+  name: postgresql
+spec:
+  images:
+    - major: 15
+      image: ghcr.io/cloudnative-pg/postgresql:15.6
+    - major: 16
+      image: ghcr.io/cloudnative-pg/postgresql:16.8
+    - major: 17
+      image: ghcr.io/cloudnative-pg/postgresql:17.5
+</code></pre>
+<p>A <code>Cluster</code> resource has the flexibility to reference either an <code>ImageCatalog</code>
+or a <code>ClusterImageCatalog</code> to precisely specify the desired image.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  imageCatalogRef:
+    apiGroup: postgresql.cnpg.io
+    kind: ImageCatalog
+    name: postgresql
+    major: 16
+  storage:
+    size: 1Gi
+</code></pre>
+<p>Clusters utilizing these catalogs maintain continuous monitoring.
+Any alterations to the images within a catalog trigger automatic updates for
+<strong>all associated clusters</strong> referencing that specific entry.</p>
+<h2 id="cloudnativepg-catalogs">CloudNativePG Catalogs</h2>
+<p>The CloudNativePG project maintains <code>ClusterImageCatalogs</code> for the images it
+provides. These catalogs are regularly updated with the latest images for each
+major version. By applying the <code>ClusterImageCatalog.yaml</code> file from the
+CloudNativePG project's GitHub repositories, cluster administrators can ensure
+that their clusters are automatically updated to the latest version within the
+specified major release.</p>
+<h3 id="postgresql-container-images">PostgreSQL Container Images</h3>
+<p>You can install the
+<a href="https://raw.githubusercontent.com/cloudnative-pg/postgres-containers/main/Debian/ClusterImageCatalog-bookworm.yaml">latest version of the cluster catalog for the PostgreSQL Container Images</a>
+(<a href="https://github.com/cloudnative-pg/postgres-containers">cloudnative-pg/postgres-containers</a> repository)
+with:</p>
+<pre><code class="language-shell">kubectl apply \
+  -f https://raw.githubusercontent.com/cloudnative-pg/postgres-containers/main/Debian/ClusterImageCatalog-bookworm.yaml
+</code></pre>
+<h3 id="postgis-container-images">PostGIS Container Images</h3>
+<p>You can install the
+<a href="https://raw.githubusercontent.com/cloudnative-pg/postgis-containers/main/PostGIS/ClusterImageCatalog.yaml">latest version of the cluster catalog for the PostGIS Container Images</a>
+(<a href="https://github.com/cloudnative-pg/postgis-containers">cloudnative-pg/postgis-containers</a> repository)
+with:</p>
+<pre><code class="language-shell">kubectl apply \
+  -f https://raw.githubusercontent.com/cloudnative-pg/postgis-containers/main/PostGIS/ClusterImageCatalog.yaml
+</code></pre>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../quickstart/" class="btn btn-neutral float-left" title="Quickstart"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../bootstrap/" class="btn btn-neutral float-right" title="Bootstrap">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../quickstart/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../bootstrap/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/images/apps-in-k8s.png b/assets/documentation/1.27.0-rc1/images/apps-in-k8s.png
new file mode 100644
index 0000000000000000000000000000000000000000..7caff576b5e558f0d46f675ea4bd3afa4b3d2bc9
GIT binary patch
literal 45106
zcmd43WmKF?ur>-4+&#Dl2<~pd9fC`+;O_1^!QB#^V8Pv8g9Hff?(PovWuJXyoptY@
zyS^Xatbw<ur>eTUy1J_S>4GpN1xaKCd;|yx2xMs~F=Yq{$Os4sP%az{P(xjEwg)^Q
zos=a-Aj<y`?gJlUO*ExV<>eu0fifHf3?vN1yEhUD5bz7*-!ddn#)p9Zryc@A9g^U`
z%6gDA|4k3JfPng!#uRwIy^?_+fcxL)yKKn+mY5CtPin}B?05fJ2Iao7trS->01tS3
zDJ>@mi1!$8Kagfwe}UnE5G_<Soi*j<c#Z6A7!8f>zM3$)+t|NxLGZit0!14WXG2nV
z8*5u9UUvcVe<*l?@>?|%Iq5$n&Q=2Cn(|7dqIQlZq@0Y*jLhVM2&AN>{Eo(^yvkw{
z|FQ$01jx;uo$Yy<nB3gl7~R+y?HtXRSa^7Nn3!3aSXmhW3I-<+TW3Re23seJ{}A$@
za>PuWj2tcOoh|HaN#EoeezkLP79b~oYv{jT|Itrp3)BB@$=2!LVF3eVdi#cng^`)*
zzhncf{BO0q$|g>B)-G@2)od-C1zGw3A^zXh|J~Yua49-km;n8KV-sZgm*s!f{cn0v
zI~#jP6DOxPdX9hT|7YF*rdKkzbG8F??Py^nZR>2}2r&QK+JAQN|C{1pS^P|I>iQq*
z`;WQ#rxutTK?HuL|C(q)geimr8VCqs2x+lTs_u|S8L-}j(@i(}I-~I)bR16|xz<2)
zsy{3VnLi{diS99wQ3_);O2cubED76Q#6gLOh#;bo#->`r^+Bs3;~KqVT(kXMzcfv+
zrF(HJXf*mTawN5o<f_q9Gj?vrUpU6|TI0FO<057*<q!3L`<pZ#s#%P+Mr`OXl)$!8
zY4}GdtA>WgnBT*Gp&OO*J!Ven(4CO>pS;gAK94s(n-h{G&$(re`tIu?`+$MNQs`M)
zT5eOs@K?8&u``4mUV=H;*|*4A+uMCJ>d#k_H=3U-T27i@w0GL0qM~#%y)S;Vx-}lp
zxW9KhUbtqm=i=a4ews6i5ikRvD}a2-V-E_4g0)ku%9~7o_Gg$3C@LxneLhyj;f#e_
zQv0S?HlH3=s=DWk6`m`+)Y{s*x__)bH{F^y>pYCJ<EMo6-8hXlJyU8SU-o_N`D0~+
z@fj$`q)o4f+T!WuTS|O9`K-R5PndSfFV?%`)z_EXhIKoFs1C8?CeQp|e;aQvhMD|0
z2=k41d-&jc`2v2b;?Tl1OH>=GGOv_*XoD0^ORjC)!!=%LBdb*#Q)TvLuydI_`{a#<
zT9ZoFo`Q5?v8!KA7Ij)mlrnR?Z9j*Wi6ed}E!nwD+%ftXUXNkkLQ3ojo8lp$^XzFc
zhonZx#(uIi`hzR$dFO}S47t7<@!`~|L)}XD?Apl42;bEUVw<^Crv?-`ExV66Rpd|+
z^Y8HzK1TWEX=P=ilfN{No9pGE(Uc)=>^_pD0FI|Tm-I4_i=nKX^{XsX8@pl}KfG|g
zzSrrmQs3P9Y-;rQ30A>ebf(L1)*qo#UW-M+C_bH6CB?<}`lERT^QY7gPw1xH$CPWZ
zAXOY+^FHohJ!%@d9A6@w!gMLI7hY|Ek-43&Jd+`lENQ1Jb=SH%rV3u3C~c5OBiw9q
zyogIYSz<qNS=yQV-=MV=zmm3{OqX<h%gYEOh^|>y6u4H6TOhG<-RxWE<coB}I75V_
zMeL|GPM;Fp^=q#XukzE7Ra;}UD>0|7WO*_|II53#4=u?JwD*&^l(~&uTQ7EyH<|hQ
zSz#up3+$Zh37czm->`qJ|BIiw6^r?oQZzjGRPKo%?g`z53hPpByl^+>**3G3r1tjD
z1O*u)mao0S*yL@h!ik46se#d3@1trp^nI?CG8#u!bLtf?!TyND-n)FO`#B;$-*zUH
z)YR&pvtFNeGb>rm$*RkZhg5Ss%BpLO_>FY5oAtep>+WwX$>m!VH{0^|3mdRHIQ+^c
zUoGz3dnZa)CcO)a>!w#5`*}d;hU}wGL(UVvDVMJ<hcnAuu19nFC3X@{gT`#3v?(7J
z7B$O!H`&Kdw6wHli-`m<@G;Jy1Jqw*y+8M$(dG2KM`Lw6AbHU89IH<#hM-X+yJ)A4
z)^R>+8^4*o(<pwHXyiavU(uA<M47Gh@0_UoF^!tgW?|W|+E~^|OL;ocD72ELoLrI}
z=-+klgXCb8Sd>ZWRd(tW_Q0)RC*b#`peLDL$V&2Fom9%Vm-R5}%sFU3raZe-*uzWP
zzm*Z!)qg26QC`2zRLKnAk+>Y>5oe&j-lQ%qEg{x=x5cVoT1{>LvSFZ@CU@y0Xlnbq
zUoqrSvV&e<t%S3)<(@D2YB>tq-6HPPhpk~SM>qa%{En#>>wej7)kewW^RM-H-#4Ka
zmK5^Fywxx7u$Q!%YTqY?AcJp%sn^i-;PrpFstap08ASRNzvOHZD`Ab!8*W?^MqTD3
zOsgDA78&6Fe34vN7Siz-c5tqF{?X&PU>o(`J;LUXSt3!vt>{tfwcyB^kOcI4$JDdG
zUZI7iFtC0kD-y0AEVQ*3%(Mju7RxiT3Ob}V4Y=Wk$YWPfX1$U_DgN+BMKtWX;>nY&
z<>ArK=*{2Eu>QSRDX=IFGv5x=Q<f?zSn{wu{h6|ZnM$Y;a*63Pxw;p<>q=K6cU{8y
zq_Z@cV?tDP4mvKq8I|B2{^jD{cScZPL4|LtElrvOucUQk*G`}|m%6!xyHM;_S6bJq
z4Axd&t2h^3S=%0>{z8o<NwazHKKZN^B7h~+Swxyqu>V?|qGrn{46T!<x0l8p+25k#
zMW(^cFX{%RPHG{zcV25=n-1Q;wCVeK(Y8;UK~QAL@`(=e0q2zqS%L|2hd~WXb9t(u
zt6IayG+9sgI}?p6Q&303z$gU6<CjU~78Es~{1=Y;j)e}xMGxu#F=}BG!`kc@hcWeC
zEL}-d$iMQ?bHxYmaXtT5vhYqhGRBwcw%mMLUXI8?g$v$YpS9-f8Ea?%WA=S)#PpWy
zSgNt)Rlt?MZS`xY$2`ZMtf^Prw(L0=3r}luw&9dwkq5<k5mDj=ie_QEfOUzeS2uYs
zW$=%StAo!P8eHnnnPOiS&51P@Zj??(35dW8=Nx1C^~*lDso!2iX@;$q?>oz6b{!ci
z^5w46OqwI7@rN$M38G1czVTYTythDIXOrifRHzu!($v#?Nj$DU#r>uH$huf|ix--q
zjv-|Zf+UL{ulpvq?w8kn`QB9hAvD|&j}Y-9OfUJX+9#Gz$4ny3d)J&BR_T+f23-g>
zvqnpPkRWF_JGbRp=n@-d#fcrl070j$9lwPBK7v}C`r>WqV`%T}+gT288K+L}WoVzY
zg;&T1sy=2lr&#Mre!^~5aQKYn+O#&T70oZ6jj2gRA%UJ1cT;NH<8r%O72S0PT129k
z`?6#U{tc^pb=&#szAtfGLj@+(R0AAY9dj(~6(pQYMs;lqE*b?5Rz5HKh+!mjbaXBI
z_q$nkR|vBg*^(}*PIK^j4ttWIFe!h5i03l(?6$DiYfEA5@`z~?&@?NpSm@l1=CT^Z
z=uBpGF%2k2J)~YVWQzkb<~ey0$t~1o*8Ta)#v}ch^A!Jvs|{yE`Sn8(EGn^aXoHCc
zWAvT2=@`#D?B2bw<)w7}Ai>ii`^5Oq(d7$Po-)e<YlZi%rSzFB-HSHU&0DqcjU6|P
zG3Fom&vZV+EZ2bp^MuW%NY~*j&2r?60(XjMpprx1?~$}K7?({8R#|)aygZi)D28mY
z9^<v<nDFQEtbEc0E%DP=OFW~5c7zu0InL+f-^N&G<s;BAOH_EYmVAyDZFT+bE743f
z>J_tIUz++&{nJx0?@{?5frlmaUCt$sIa|5tl4VaP4Z#*?jybpE%IFo2j<H0=fSt*r
zn;c87-J15|6P4@xT`MAeHz8T@-B4{bq+Q*uhNM<!5Dtcv5)cL-2~a?F9Gg5_<Jy66
zp=wsAJ8ktBDv+V;^g3EUqwzT`8)+k44&1U3T5C9#aK>?Mn^m4qRr9OVPDzR%-(fpm
zs@nUNow(xpNa#PJTY_`vcK=9ufl!NA*GymYt!7G_7Kx~_8j=^k6LMwVw#_6XgX0VF
zBt1HQ*?tMUCpnf*FCFWyoLWCq30hg0#OIU)=g~4`?Yy#Qin0_{`(xO+z*nSYx?+6O
z0Kw`7Y}5r;eVk36<EMHmELvM8l%d7GX&G^+{n_7%ES~2fr*TNdM(B!dt@+{=p#A#u
zyhE9+RlA~OoX%kYxodeiI?n^9topAv)2#i-Yv+_@TDkej{n0J_xt|=r)r;n`N!ziN
z;H&C~Tjg)Rd!j>|;7z#o!5?F$d$S1e_NJ6p)It}lEj@;GeSLIod8J9o;A<smD2>H+
z=xPxbvK!WBHU?PbLcWTA8$+a@7xTu}4oGuGV%e|!O?lm}@I3aHKSsq%X|d#0^V;w0
zNGgk2G3fw89#xwN>-YMF=%O)Zu#NR;)&dT41JzNTT)oCx`KQ#$%2CazOAYQR5`ogJ
zJw}^S8ou7>>{~3p=yfxlN$ZFkOW&X8i~%}}kI*Jx8F(vu7MqPymBAC`)85JW4naGN
zN*ok~2t2laI;K1p)B*KyQ1FrU7|i_jP^x!G$lGDGi4Upg?8_39Wt)fYo6qkUvA+wb
z87NGy^s>8T<<3rcLPzenwBJDamUiFYLXOol@Ey~97c^Jacvg<IPhWS=ds|9l&R++I
z!V6!#rd}`^8gL$k!J5wu&<0eNUB2bV75gmkZNfZD`M0v`6|FlKK6Zg^AM%F1I+Pf(
zALOh+UnaL&HZ518o2|Y`#*7hV*<wgxfnZ+_F!Fn))fM2VbUzu(D>Zy}0e8+m!yM{_
zqxR+4&DiZdzxO1{1L4{YRy1v79XK{@FBysrny<(jy1UHbS8+L)RV1Y#cwPNu{sOj=
zp!qO$!|bJ_cEbL>P*iKLmoF)V0Am?m8gL>|=A1q{&s8{=56R)-+iA4DjP*Tg2FKm&
z{=bYv%@?o_>Z6$_xXp?jQ>_MSPJeMH?-?I^@Wwsn_v4}ZwJFy3h_=Fd;(V(pDIcGl
z|N8SeC^@fT-S)R<wcsN=pVH(Ll55){T|@G`uWP#c$*sAbYs?OZJUG8gp0+c~TA^l0
zq2ye`Nb7tvMrdWjxb{Y@asY<!-sUpRhUKIUiH}=ZD^=KBQ4?6Fadyp}+#YaRVEkK0
zB1S)L@TZmA!5T!)reePW^c(i0=HW(7YzS8u9gqt2haIxOMCgsL<QgG444P!=Ts=an
zd3J|ZYAn#XhiufpD6;8Qr3G-{tow2i7{w<ShBk<Z@E<bpbg>s_5BjGICLW%&DYRVv
zW?Xf+T~6+%-W#m;`{2JKRYX=ve@=VSolNbDkcU0OCr(wIxcl%hqU=W4EKQ0I#C@^s
zX;ooWf_bE#el`IKqvCemSv6Hv)%g}57jgNr%rD`FNV2~yo1Ij%+d6=qHmksM-6v?v
z@k$A&c0Af|yB6)MvyV=${LAPoif+N8pTF4fcPOu>ufswsl^GqOnWz5nCv8z*?xUUa
zD-<b(@?}N~77azZC#fSg_So~oztvqN9%?HpGSBh-ghEK4pT9rB=E0U&n}IFa@#RjU
z!FHL`QcE%$$x}%8zBQ+CThE9%u*k-_7Qy#Op64%PNwWj*32gmhBdn(}KFT(6)jHcI
z9<a?Gc^eqaJr%_dcI-VTH8?H3=2i^5-!qH+$>G1M=L&4)mPEL9vl|fY<r=@oTz^N1
zNSSEd_gp`IBEvS<FD43;XxjWme%IEtD;%;Qia)E2^R49O^)J_+4tvblv|j1Dz*RI4
zVvX6~pDz`Sm$su((;~F0Wc+1KDDp!2b$91zH&>I2r)tpN8ObK?td-43o_xAqmO8bJ
zhf{uFy`JlC!)Q;$RL?ryBALZ1xq1(+iuoFMuGm1p!`p*k`;jqP$uqRPvB&KWFGp9z
zBl<p*9b`(`ve-I7Kt147DE~rWqz`hT3x~OWtU{T58u~_e;43kiH*0|J{cwqU-FeFr
zJ?ka>*?dXDMZdg9=rj#pq{?c+!?ktii3no`C8Dt9LMz+kIV}0(xbK0&=UeVJg>kD?
zJ;*$l((yx>?aR-dHS@VLxCno}ArXJ%@F@bOq6ep>WiD&3nB5o!!_wo{viYlXzQ|}}
zRhjJKQw=jbl0XqT%jCxBiy1y_%dZA=L3h!*$Y!E*YrnSBzwDCx&w5cRrgu8(*Fk5V
zidk&BtIjMt#Kx+X&lUYVq7_`%2#KTE=-n5qqxbxW2#CLnd$^d)Z<IKh-__lM3>VQc
zdz;(R>Sp>!mr(vzcVyqgCWhYABbO-MlGHNTe?3hwO|{W53E&|cHh+r3Kb2h^<%6f>
z4QTYcly&Yr{@8&q@1;hwJd^I4gisS?Xea0iGTLxo>=Qd<MHa2dldg!3^d%~9K#AKf
zVJ66hcg!A{YM0+tpE)FyG?7ZH#gGQu=}oQKaY%Z|4bN`SmaA9qk7P48ry8Upyf_Ty
zS6p<(T^>3oP0h?8gy^2~_G<ogc;Falkw1I^&-`VMgu)2(pEptX=}2v&^@Dnd#W1Qw
zS0d(20u?5u3A0Jpqb?S%jX+kbD7H<QddzQpfh>w)Ya(ss(fOi73DKX<IM2*sbbPQr
zx9C@CsW<;tZ=@6mUf91!34UBEOjXS1$BWXi)v?fcreZm<i?0QFQb(J~v|%|xRP7l5
z<5A5QRx5}cj&oo^Q2G+|>mob9^e;$(1B=nx5M`Y<%VW{$V{Lc%)Uh|`N43-smPVJ+
zM>4hIgukF=SAUBzJ<}j_#@)3c3iNDhQtzpCGi-NxEUDHe$XLD0(EV6;OVsS_QFFYL
z0re!}Kh({{fM<5Clyi^SW~oH)bJ#Ar+U~Sb`VIYKG^0f4$97F$q#7v=VS&cgp;zfn
zeJJiOBJgo>4|mM|;x8AhZwOxo(qtVpzl@O^@>HF;@#())R5M%<cdIeFct5P@W8z$=
z8c;v|t|$>jNT9SKR-@n^0g6r(L@E4#<}EGaFPSJ=p3`zbRqMSh#-+ez5jAe@br7OE
zJby4S8WXoUk}lPm;D7Sm3)^WwBFO2Ne7K|T&FWTXi`EC<y+mJ(#{0F1enDEXgCVXw
zOD>}z+@RUip;}Mn3f%On^Xqsd;WvQ1kt+(nN;n*iV6?4FbWA|!=jS6{H@-Fx3jJQ?
zQPv8cZ}-F*SCw}RdD%Ntt8HaYVB>|472d_9QG;fcjW|!t+{V80So*`H=bh|7L>}zg
z_5Q%~=Ex(CxWNZ3k%cCLAwdR-A%z5@yYjABO-xA{vwUgP{F>N|DI;w%0poluoek>{
zb3-Z7fIf{dbB{1FmK;u;4$dn%7l2J~#+Om<2iW%@AdeZoA^1)-Ay}B3$A15gKTP~J
z*^1*iV_{M_Ca6CMB0m)t%e^=rx1<49ZG6m}EPOj7Dd~fN=T&TaI$;2jOkgOK6saJb
zu!X9cT9~hq-p$dx(Yy{_8g1k~zHb6;6h~Q~Y(FzCVvKsnI)L%bkc_tdqWLQjSe7Yz
zy3&@fQK1)~d4ktRhxZI<j5keKS2rUuF;U9Fp=$c_j5hk^cy@pF<@h1Y;Be2Qg8TQL
zByci(0Dz&SAIZr#jW0@n*jnGIUlGEf5Yq7ab>-wkU~5Z}p2HQ1pk)-s+AP-B%`J{|
zGaYitlzUwKrXI$q2#sT6NfKw9w5n+1)Zcx-^DDRWETJd+mf3kv>G$ZU%iZKB5M}Hg
z)X>n7@#W5FpdNU!s9Q7dlC<!kFc5Ls@b^wZ^*GL~VPV)qp1Uk|AL%V>wtk0i?rLm3
z)vskk=L87&yC4Xv{)q5!<J~`Ns4Bm#=YCZi7NE#7+)COkYDE0hz)`{qKM`mn^rE^N
zAnO66Htc*@04Em%3c!eh*kMCJKoG+YZrRH}aQMnf7x_~iXH-;?q{$15*N!YtA}ao5
zxuwOA`JaZ;J6GDgOr9UE?+Tjp3ib@mQH?FDQKUbVRhwsy==}`uW|0h#KAOmrM8twY
z2CT~w!#`KE!B%&CtARF>1K-t|Rl(Cu{!dn*FrLA*N^CAJmn|W-c=Zd7rX7Ykm4Ax(
zAgGo9I}Gc)>YgiE950z_)u~eIo6qKXuY*@LeuPV^X39AkQ1L1LLvU8mlshcUkhTQZ
zLheI}AM<6C>9vd>KlBLfhvs~DGi92EK|Lzyi2>Q6r{_t9X7L|Nf!5JG3HuMGONbIy
zcnL#X>M;{63f)*yMAzYB{Bt|UU`jHJXu2QYeYM7r!U4r1$D$WlB$J_j_w{X{o@P$;
zP2c;v?0&0nns;-$s&79L3jqvJ7K)XPtxObtVz@GjHZm@OTJgnm|8G8>jgZi4LV;O;
zQGcDoDJKCYUkxlW!UEV#0_Z-VcY4rV`k@2Pl0YoOZ+{w#MCf+OoS|-q5$@=-PV^1-
zH^(!M138E=h%_l&AY7m7>sv=1^>Zq;y~kRNK5SD<kqUi5+8=6x93pL9PvJ0`!Dc(I
zXk9vo{<~1f!Cg0zLQFoe+DHTJ;oS$L;YV4imP#>beU)htZQ|%g)VorS>_@nP`GJ5B
zmW8N($J%Q`$l8y+gIIW)6rv!Qf7qC7B!^DIs4S$<PD%%uCz=i@mME62ARscJl;!!!
z^tP>faCrDfLDUZSXB_>;ynoud!8nU0qqU^hnp~mZ6wClboz$k=)`O@D`I9@+KATg&
zbx0jvIJA+vdAYh^8VQ4W{B}rWam%<y*Yj%6kk{fL3Rm>A*bgXLljU-o+;OW(&<9+7
zTUiMSM*s8cSdR9j;`TCJZT*<r!PzkCfof>C*(%)*3@UQKMR|g3wLn_$(l#}i+tqP+
zL%IK0Hzp=xt)p-Kt2JQEP^^9IwrNJ8ADWkEheQY*gXe{bt@1_<-n1%3N)NJ4+eqdy
zG{M=8^C_cGY%|&=^1^m_u`)iFBJF~6AH)KWNLL=zYJcgVLmaTKZyBDW#e<1|GYA4G
ze&cY_o!U75oWSRD`s&e{HTW7T<TtszGM%CY+{Ox$mobG`Z#|n&wCwKZ^ufm<g~a%V
z1=%3yFq|$WKuvscURV7Mwv+zd+YH?WKqQ5bXvet#M5F;Um_YDkH853ti%h<x!Y1or
zbz>sHqNGTNpo-{oky7UYhY;&e0&J@8a<H{v|B=lKNgF})&h+NZuKvZl#b*NE3^7*@
z@byFfX#)RmP1zHI(YMW5ys|JlcR#=);~P&a#PG#VmuNiJ7L?+^Q!)W!w`?B2O+Uqo
zqQprjP(fcTws|#Ry?+n8R10*SQV<eF^n)*ft0(djwOuo+#^DvH8UpA95tXpXgkkW=
zKNm(%ia>mSwHd+xM}J^oJK>B=#`ZQ^$XCoYsD{@??sBVd_ff5_{9O%^w@33792^{m
zDO_x9D%I81P##Hu`&Lm=ne#}6k43#WTxn|o4jED|E_HZ>m3bpHe3=?rS|97`>H;d2
z=%unUG8pji@YLJR)0>-{mEvJG#K>cWO>1L?=>YX<2lQkQqH$l1i<%tGRjHfOX_O~c
zv_HsD$)%D4_XkNY&yTX6o}O!;(3<uAp6k3{?sp-Dm=J@vwtgp=0H^q5rG`y*cJ{$P
z8GI(o%`VlJ)3o<94ecLp+~S3v&P3<yZGK?a0nXcTBaB+x6>c8@+=Y_6d7sXDw%3AC
zlWmuqwG2-?UfYvmGK3Nb6F;hyI_~c5g!43^nt+?jG^=vOLz0q{O{+Q)SZVMZihup8
zP9_e5)O1gi+FDOydX~!O01k&`6NZ{%a978RT%@>Ow<ioLg$i|vAsRdGlY$q66efeQ
zWET&I6<!Fsa7SruW-?iVK7jzX(v^w&1?>)P?<^=FwhsBIzOtXl?zS+?w^=x>);JWI
zfQmZ9Sy?!)anrElH_HGa#XA_J*!#;}*d(Gc?!(d=C?svxq90|Irem25+uPgGMR9{Y
zab!f4XylN8w1VNnC&)!1?2h-;QVXi8CY-fz0^Y$6eS#&z+FGqKQ{>rAcjCtm;k)=O
zNrbJ0b;8{6xRs!2tM)m2NlD2yrbi)0{+lhE_nmzji&1FaYyfv*hO2gLZYLT}=*p6)
znfsqKvrIhI7eEP&Ov{vL2#`1QB00U>=+ypI_c1~*n)TN6<bWpXf|)(B(1z-}B!rL-
zQ+M|AVv^I-)BWFv#>S$CrWi=t89m*d&zz}}D#PJi;adlJgzL7rN^5DQS+BP1GE)cc
zF2EpwMCEand&V)lB_nakloW1a@v-_1!9-NDDU5aTIRpO0U>oM8TKjd8`C5wvVXd!4
zNEYLVBEHOfCS=ICU1H>@bQCX=pkrX+PN0~}{bd2UC;0B?rw|%loIL_2Ko1$#goH~2
zJpw;xx4fsewYv*TjPmKZpTJHNw0P6&4b8a4<**^P$oG>kv9sD_*!X;-FTjkPY=_hO
z1H|p3T?YdJr?vkytCF&kCECGmhFd1b&k%^KNNW>AT7+Pq^S<}h4x1914DUj!e4jl(
zGB6||GB$SJ)Q3)5o1lmBgYYIrK!zA=%&MuKxNVzIKuFzC!ZM9cO|3^(|6nK{Z$tXD
zZuVnL@Np!E#@cV`J%cu-yBF#}HaO6^-cdxG2Hwk&*p>!f<#Xp4r;^@a59c1<T=-Zz
zoFw;->PYjPMdf!yr188ilkZYnhC7mc@WG-0>|$@uVhe^}J0>bg)Mmv6u_9AB+X%@e
zF2aavxMSM=7G5(FM^|SI`I@bXwrazCZ-a0>GZbBmb~Qlc_QjwavPb0ymmSLYqW;*)
zH+cBkm>DZ1Gu8%&UeiE_$nDnH&FjM6SPB+C_!HpjkTfF~96)FndYB8YfAlc>T~m29
z0(ua1A|lxNT#qUf>OH_1XS6A8Ux)q}JY4PDoP<<r=#xb)vvm`~c_Qp6DOc#Vl}@V_
z!R|;Zt(56BX!mFpTvTQeh4CM?x>E!3R!J*ZHu9WLEIYsLosCI&e)*0JB~3=X9Cwcr
zuE+(erl%EtVi!FaZ^xv8x&%G+9$U_!MZ+U!7nC22XsARC4Glfx4Su{@0gPEq;UP{~
z2a4Nl0*5Sg02<QEC_@+5$$ap}X?2v#+bwl*IUWOXo9Coet|5(>0H*3UDgneqf`#-t
z8FFX^vsUyoRY8~-v8iuuf^ZSkTn$_j)}{+BB+{@!Q&}4={IJv_>rSPbjzd-M@8QN>
z_{#b64`ioFD<uPgIaFVmal^aEu^8!B>kh%pa^`-U1go)tH_*<el*0_;A9*r=!w;3T
zYQ?{;JBUIA&aTu&$$RbDxR0{ULH9%17Zv2+qtcsjAcxj3d`IkxO<T@m)=-~squ?LD
z891Q+qUjmoyxAX>KoQMNp3S}n*4?gmeCw+ZAXn*4hce;kycrNH7d9pVT=q0U$?9VB
z1lzpY=5qW$V9a=%Qfj}iqwTET|8WC#6AuSF$p7FRU7-Kgm<o0WY<$!>xvjl@W#I_?
z4!$aHiL;0;QJnIk@^UK!s`~?)iiyLluA2)HkE3yWyGzt$VDz|`Vw>ZYJe|%mI#a|+
zwE(f54f_kJe|{OT`$bTN*=05iiS;Uib;2%8ca#}-AP5LH)MVxlk$1RRg3OGui+qob
z?XeTMyt$)<!3ozbj6Me=s+h{{Mn}%~<(101#HC?Zg**;SVZ=+WAUyWW`vSNt59STL
z2==|xTxAoJ5It^Y>%0|>!^|v^q!J=NQ=Z;#i7&!G#-?R{9u{X$)+$d<lT^s4)OJ6{
zT(Xllzj8-rqiFSL)&0$ZWpR*$TRX-V@jP4Wnz^i`$A-N$9N_3?rVLsCnC`f^5a7R#
zgF|qACikS^u-^IU3dep4?DLZw3(J#er;4;bx9ifL5I*|V{}VCIt=DOr*+=r{$I7R3
z63)Z*In2p9Q6<2SkEGlTVk)JveO}~h&3o5P6Z%Y0n-EDX&@7QOiQ&?bXNWjcuG^xt
zZR@_fw3t@s5EEWK4&PL)eMWcHER~f7M)(^mObI7!FFL+pcRKgM24!As1Mh^N+4`qn
za6raVs(YyLK!_eP7K}oA-LP@tfUT_#y70KsOV3I}0K6v+k=zmm>WCpJ>TR#U-+3=a
zK$W_jE6<;VP3ZL63pw=N4u(C7X=Ah=TD%T`l!jND_`1lszw?Mpt<2&{y$yBQ!`Cqu
zIqDlN+T&~Q9x1ducaof;D)CN}H1sSS;0B-qx%?)BYfii6VEK|;eebtZAlL1{qMb$x
zU1c<a&sQo|Tn$91C21?(m!sK9s(a75?}Mk6Y{dh}>Uo@Y=Cm~Fa(TZ?lCo(($v`me
zu7)6m(uc~0T1ShSQ2ebK2kHKVZk4Q<$iYJJ)6|^#CWPg@Iyy~}^AnW=r9a}B(Ywe3
zm#G;_TRYcM2z%X~V0Ja$rD65gvHcRu%quV&M1}mmfdqRbxM=8rE=q2yY?kw=59O(%
zl~GNOzselvEROhAo+e7Vm~o@gx?11)HrNK;Bd2SbjH#urr+NuDv3v=cbQwkVGUcB_
z6~J>!9Y%=}BX-qmmCS@dY3YS+BDXo?3gDq@bzZXrNv_R_W-|!LzJ^lmT^}{=W<HkG
z0Ipu)*kZ);qb<z~5kASofY1wzdWZm(lWFY@v-c6S-&Er`a?JFXZh+D%3USdSNQosT
zxBl5f(HrD`-$@c*3}p|oCQY4zRkQ@)+QhZ`WN33Jh*0kmVUS+jkI9Oas=JkNLdTg;
z1Bsy%(T7l=&9XwK)dk}Q^UBPaTU|ihvxox1i)+CfK#s?htHd=*en5^q{dWKM%JJ#>
z+5H2T<0LSVP5l(5@)fSP^e^{gek-L-t0l7mc3<&hL~jXOl)$JY#M~qUa0N+F-Bb`E
z_D59%+HEM5{o}D^gso7e9%4KjpVGwsX20KDseNzxqJ*Nv*tlRt9w+IQHR_z92*I?h
zIUaxr!-UUG1tYoIaMtoYhv{}$&2_bWxP=6+0mhInf;!WkT%%<*<}m2br6;Z@`rgB0
ziDc`>cns76u<zM$zpq60HN(9)XT{BB71AGCmtvB+y2OOMQa<MjFjPQF`HDN4*AS5M
zD75e0FU?!(GCHlHf4n3$g%Der7-C83?O|H3XSD2*OBYr3<?+eajeD7L{4*#uLU?wO
zxIdlWqnhJ3L<j*1+CY>L3kqekN5On?4ViG*%0h}156+++^)b+X-QAo1(v|6CoO^eF
z>D)bOztEB?j~R=Rj1F;HOq1^^Subb_Z!-qd&M~#LfGofqy^}JljbOnSh6>YRK4GK2
z!voA}k)vZPk(UAGEeXMNid)eAo>ZW{FEHgLMzwyd^{9F{xk2qdHu;ap=OQXkMK&iI
zgx25dgC?!(pFh`zd|!_vh3JYIwLZCrZIy3AR*&$$TL(v1%r<R~%Y%HWA?A_rkhN^G
z7)+-;(2TvD%sS6d>g(sR&51olV!Er$K*KKz-0M&SjrR68S7ZT$n4Jy;slAiSB{N)2
z$7<qxx^oGC8aL&KmY<`&EmA4qDPbT-ZVltUH8KBe+M4@uo;>tWT!t)N_lur6tt`zj
zx_ct8vymA~T=uXR^Bs|F+91@pRi|`W<69b=2nEEvfYXkgtYITn2ifNCuMwf<eCbnl
zaL#uP0UoNF^GZB6Q>D+rGn|p)ZwE04aR{b+Zgb4)C6j*6Vegb%U$clIkrqlWtJ&Tv
z{uyG=3*6g_k@U>B^OrE_ToU3ES1(UA_CEGm@57BM&RkkqT-7?GK{jbCE2>y_$UkXx
zq=s;{7Z-kZH7NE|eJWZ-GhOJ!`=)Y)ZATL}EP3M!Z;~iug`r3%M~$w3L}ad%z9Zy-
zSH@`$KKL5N(i0itgOw_+$i7L;*kg(JzmJ&T?}h6{`&&kk2+^z_coM}gKi9kcK(AyY
zAUMI8n4^wcFd0zL``=6p_rm=xF@v-B5ndykqeMd@F;#t^H}ggV*Wpm*LMd~rVnQm1
zZHYhIJOasWK<|z}tR;W6O`BZtHp)O@C9Ym!ABP@?ug?<IGG8Ndg*d?-li8}tTzV8<
zYVjRy{`(KlI)?o)R>KH9SI3`7RISs@6iycrVXeJ8EWr@oF8b2@b=*mz&qpWWUOrOP
zpAWhnfiq(-$$y-j@8}#3KR6D1??LUs{6wHZyl(9tfmzM#WZ4X}J}Z`)%pTtJ#boaJ
z50pU(UO2fCoU_DAJ=MDLf!J8kxWmGF+2CUYkiJK!D*!T5`SuO<eQ{PA)%ww0c$!yx
zh#B;UFKpGFlxQhXOVv=-{V$GRzu<5Oi+tJ<z4-yt49VNAjN{pR$&Tzyh?V+H)?^f+
zJ9<oEXLl2m5H@o5{WMDOUx_!Z<e=LRV+`UCri*bAR|}!?cK=E%$Ii4>N87Z$JBTNV
zyhkUT0<UtMiI!BOP>$aNjrB5E@pc3s(?J?{c%4A=cB=<b|Ck3bs8wgG+U2%+C|${P
zO__ht>f;X(cpJo_j>F$?c8E~-`JFp|>$=b*AoNsq&QN^iPwdb&!R4@29XCygkB@iV
z?h|{nAqbEyULdkfEQc=(F|UElY#fE;&LNZpS53T!NAx}-8_oKW-Vb^E=oYUZzTIk(
z&{P17iv{38<#wMm2^N+jEO_(n(LIZFV1*@}r(aRL=k-W_lAI@tEr-lu6au-9Gw8u}
z6L<0W|Aja8v~_ed7<G@bt!#+G3cpW<5mkzIQ9j|QH{BAe%k$zkM-zl{>9k&~KlTse
ze8Vr`;{0`7h3oGu;D-AB6)V5P2t;HSNahj;o6K|#`vSR}e61`zYU=7cXL&(yYe$<x
zNn0DAz3Mobp)6nVC-W^FW@3n_&z;56sC6o^<rI0iIkxiry)*iw&&Tp71&HWP4dZeU
z)nA8`8BmC0KgKfnvIC%{8nspRX!rq_rhK8@(Hy<gAD&(AgP?6YadB}JA>KF8r85G;
zIK*rI83>k#5mD}X*Di;k5iRaNB(s^J8oc^<L>^mlpGfZKnw-qWS-JI9lat<{9$ZNJ
zq>xf(<QuiSI*kC&W|x4rk7LGbR*(59dbB4MTG&`vg8<Izqid%g4JDQB14T+eN+I_S
z52O_@N41{_&H3YteHU~zXMgkl_2I0nk55}q7773kZBap_LCmkMq(I|sR5^^!R>mu6
zWpflNW-)?^TvPK5&+`B*mWaBQNOcb&{@@R9GYEAnOKA*iELEKbq<@-k(N(l6KU^Q~
zn%mJA>b7~hjK}n#hXJA?S26tq{pszqUZK(;=i?%&ERvxAI5u6+=;WIz4sc=~4xC@l
z>N}xO;JxB&nqeq`QuF+g?CB8R5X`}7V|M8h`tdpL(A#7kTX;+F$Fgo8O-<GpVSrSM
z3Uv457GD<-UusXXoFQi&udS7xbB@=wXxqY21P*{Niz481+|*-z=BO-}mW8;)ockHk
z;c;us>4_DK9`=&9AI)j|mktr4H)gF+=-FbN5T?7b-gA2>i60+|8OSIFL)jmpzVt6Y
z(kQ8od=}=UY{`W{q(xLx3Od;y^Lx3>R#S%SDVL|u>fxsH)jZ)s?acx3OesRp9YOyp
z>r26T!|_U5)OUkvOk)vNRDm>xgSj>v7|J}N&3LXA_dI&dN?|?sb!ZD~YiEPb;P<|o
z+y;n3q~7VvK9Lm^kZ-mHga;YOON=|>kjGSqmh3ruun*SnM*bPoHJ8Hbv+O{U-*@Mm
z+w*2wNopnP(0!dTNV~mjfq`9BC)|JDyWXzrd<xrtLt)uK$jHbuzY4;`5xTf)mg&-$
zpn;$;mzH5oaI!?$x}=Jur#giyluYuxCt2-&{xwa&tNv)AZkUbA*SoRaZq+tqvkXcA
zl?Hjv!9V9Q5_>FiPZ}_MG7zqIw-|>6R5s<A@-8uv`937K01g=Ra9>)Od_eq5C`p{)
zr~Ta;fJbcs+q?v>Rd1Dg+vNpIgePu~KdL3)aHT-NA&`Wz`<4a}@l|s24R1`IhY~rX
z;5{hHD@Am|A@O^vqSvbaIm&25`c4~IIvb%7p%LexZ;Ck&=ZJ0-AbAsXDy^qRdtJxh
zA7+fXcGxS!3M(te4<16(i1GkPQ!EW4H2CuJ(qyU8VTKyv>~^@R?<_|}D|l=~CV+$h
z7@z^Odbk=+YD=d~#KD23)ktl9J?EB#%0GY$<v1fKm7>=yhs7*4EzP1#laSfKzs@pF
zRPI>hKuXMHy>r4B);H4U;i{_qX16=>%^{#=L2>6{W*v7c$Gri&U(f;MwPeS@@NM0b
z3Id1JUbB`;)qf~80PJw%7mp_HKWM8W0K%QmGty(fVXD2@fG!#>QE-5JD`3<K5J}?R
z^@y_nZW{nZqWpVM$Upe`9i^}d`v0%y_@$Ty7en&HSppvVJ?HD(QjS(y7Mly5rQ_O{
zA7xgL+W+#EH2idy4|52+<Hq>L^wz&=VtRQbIIN`izgq}alH6uGC`hn<DRpkGlP<nr
z;AAa{H%nEN>ao(hr4kBlxbs+SNjq)~Vls5#V6yl_c}oD0tr_yrfjg$AW~I_g)fP!|
zpr%IaA3kNo_DAC^EDda(*<Br>6j&U=?1Q`rIeczu1w5bdFJ4=9j#96p+EVg%7-z6R
zMzmioh1L2e2vOOZ<k9#?p+<c{x`z=8iO05V;r6AQe3#|hE+5B(IhF01P1~f&{!A*}
zW@ih(emQB7gAAZN1%l8%OQC?F1)2LvuwQ(K?~}&7b`?iy<hYTPygcT7gJQO|2#XS-
z)67U!dC&u~@kit<PGyz5U2FuQerY7o69=^fUsWO*Mrwy^`<L5p7iCTLIm_^=ME3o(
z47#RykNAuv28-hT_yXVLTyupcMQn*6+Q^4c&*GAbgz#Si%6eL~UN_0IMk;w`FD0&J
z@uzK10v=bBlG|a3S+Qa7s6G4hsNpH`0UHprVo9D&5cY6sTDp0#xtQA+;O|+VXAn?<
zxxu6N;Ax{Q(YfUWM=+-we?(WK{Fe12fm-x&*Qzj28e1|X@#tgnai4fHtAmiU^aMuQ
zMJLvM-<AF#(d20*RvaJ7GG(k3V1pRNb(-pmAiGje(e}r`ZYHw#IAiu##4y)Hv~8YO
zwkn_8P1i1t{^pll?X65UhhCE~whXySO_YyTH#Gl62NDGJPQLr4wAOBX@VLmO-ahLB
z^L6i&28fY&%6o)OY15Yk39G0iJUxwO4W}ul?-v8hohpV;hALX{i|6eTCc5}KjX!U*
z>oM)K7xL0;`e(4L+i^hSX!Y^%)*Nh1lH_}V1C-n!P#B@WD(Gg%MzqABS<#_qBgy*M
z;d9$i&|oqE)661@TAe6%J93nLX6|8-dQj;gIaCQrQJP=3<77!-wH=yb8+)kVsAoxF
zIZC<!B;Elq6r~tjRV-CNzPN1Jy}yUmZrVz+fFk&N0ikmw(w+bf4LuIAuFE%C{iMG2
zU+mRvPJzT>JV~3cuC3OLi-cGbs2JbO-qyqtFTD<00JV^pa>28U_P8aroJ0&ht2$LA
zzbflrw!puA3-1KJ_w*~ob@6I!a7HxH*C#Fqx*#rna!wFl!T{XEVu4|o9LNRP<>EP|
zgGockuWpKcD)m!*c}WsgR3?4U1Cqm?Tm3uCbqd&+xS&wQ@h0Tmd1Y?!!PJ04(rU-;
z;~z$<EJY9*;A-IDF)3WAAk&wf|MpP-UKPC8QDUj2-M7!^?HACKUtRKD80HpXWn(20
zw_cj1Y3Oih`EoTP9vBtOPKh@5=8l?NG&w!|dLCKt6%)2M<w;;CgcZNWmpjWS%Az7f
zaG{pQ^I9LpHG4NGDoteSzqArQr{tN8mUDbEydn*7Cj)#D6GN9H6nbYIQ6ax)_)*c)
zI$RIsMdOobDGvhDHD!3$ISDv2)m+}cW%z0OPsP@t5Xr|HjX$oi6Y?O3Poxene>Xty
z5z!GrYA$My`!y*;WfjY`$nwb1l3(9*hB`lNBir9mhrh!-*VK*(bHAPc>}7d7=%JWF
z?e?chr4k$*3bhdi*a?3f%rN<3#OyE&Dlx^F&;1v)sMhoq$41(4&65l`TCrgM%HCUh
zqGZQeXfVb~%^ES!W*FPgpT8(Y6pc73#~px)B{CZ%Bo|w|uFy}RAm$cHw$mq0q==rz
z6>^N<%<jmRg5Q~tr*1_hV(Y6(30ARosGr&u&!W~W)BMr_%<7rdFqKl9ee+?(&a+JW
z{T5e#X~D?n3oNU2zxXXwLcF9+UP9DEC|K7YI+sjA12D%Aj5G|DH;MdpTg3`AcqGyw
z1)vWK#Lj)G!dfnA`IPo+#GwXqK?!;+N5M`RPqx7F{7R%4sA4OxvaH0Q@uykY_iPAN
z<fT3IpJZ1oz<Ef;84DU>YPQ=naU5Me{F)8=doy~x+R8;nM>A4EeAnJ@EI`$3H8vPT
zB4mEdF<)=?L%(FqvyTU0<+da3z&UMV%B-QPo=qurQ>%)I#AVlZ6Nq__G(q`8T5-72
z6Zh^UbkSS&F0O8Ot0#)2IcSe6py=(Uk@u@$C*}C~9I24!v83a^Q;Lk5PZHiw5_}nz
zPadgA`&=XIS=J~=6nFy0>5)XP-#Tr-A15uEJWxz-k0HKVdrm5VK2xtfeUNx|@D^sp
zocmnWvtaD@3ciIk9Q=KdbBQUbmBoXMAg3Jj(grh_<B4n7aAk`Ex-0rSTCqZ(BH)&0
zpooAB-x~-R0zJ(o-i7o!^^EfPEmu2<*t>zSP0~(xZU)XG`;4Oiqdx!?DhPeZ`TDex
z#d=+#Vj_AD<Aw&@2fdj9y5tbjG8FN{78%d^I%dAPVjKmWq{|wGc;i_g5564;H<O@(
zuN{1#huLuNxR~PDn-vqwrO~$k=B~(P{QYv!`+kqefjF)?9Is1Dw)<1;5}W&Z*`!$i
zHt&bl{?53GBbPM9=nOCt2|d(H5S5Ta_<qM!#+X!-$uH|G@H!hPKnE;LWS}P#*+cyK
zm9^swN;g~a)IsKJi*tAJggYP2yD9tys13jZGzAt5vy>g_x3WCDB)d{Tz`zsZgBJ@1
zR3OI8ikZ;a%5hnGAC|9^@_i+lh%SRFl6OS=9t%q<CKk@v)cCidQFN@}Lk3cV$MNB8
z>7<p0wf_3sFnGoMhjK;lQs?B?;>2SHM+VGf9Mq~P;Jm0%W|;a7QK3Us&3PqAKWsxN
zx+z#i%nq^m@ks2HryagAFUSMT%X_Kg@(`Hwt6uwFfn?~Dns(iu*5KJ6m3T2XXYkpD
zoDNg#p9JdKuD!O8sK=6L+dUbc<kAA6_yHH~E}Wxr2Sxm}_vw&e{^T+Ph!<8wi|fQj
zsITyH6Bq$Ygc<MtZr9Cg@kG<qMb$aJOzsXN4(r*!rN<lt-e`i@Qf`yff4NsE^*Jaz
z2;%aZLg<b){gFZ_y4P7OSUA*niO<>j%wcz~)9rUn${-z`e%PQ>s`Lf0f~8jKW28n|
z(tL(X8lbjAn&7?Bqp4h>Dm6@wDuYZ6>~@=!qaN|M7j`R>%Dn3P%bC67Pv7p(%cYGp
za+bZ^bOy{?z?s=J@z36cb9I52(wh9to_pMQOKwFJ**}|mm2puNd8J5^fY~+d{HjVF
zu&CdmTd&3)Gt%GBLW@9M_{Tnqke_M~(c7-fL$(qwAQXTF0euQgrAoBVJ%sSrU44Xw
zx2`7m%e1;KDY=V|%VAu4k~n6M1%c3B`)g`l61cqrvf#+EWFj%e*8cFg@g@(tPQ(Om
zL{gvRz==#-5Nm4s^B_&C&ZrF;MUb$y0oN$8zzBka!{X#X+}l@CYIdo5tUq6w_cPOu
z&+_sv;kOPf>YguPxDf(P{zS<~y`5*X8Gr%Upnr8ogN*e0k+3kAaqL2Fsnkv5;VipP
zbuVyXB9bL)Z2kvrKXZql>!VDJ4a*|r^5gK`3Rvp3)b|q!lO@Y%tanQZ%ONHq7Y7;@
z66awf3o%g2&zc`+J~l(?eL2tFgq(AKf2f#kT3|Y~PobFLB<ZITdP{ghgG$&^60tps
zZ1?-f<uxutjqlz1E#WJjY))sMw4(WQ*ON|ubvrBCNj=hO8q+J^aY`~5igTOWIf+T%
zNm8`=N6)DTaadg%l?TOShqivHvB=DTGZ>#Bef@g9mpaSj)|!2RfpJ|@<wS<LQt+wg
z>AcsPe^&?7OG`S}dMk}k+WaFBY(lcM*<f6>>YS3SX&ij53-$G0ary5%DLjAP#tO;5
zwnYvRxO7gM945@`Fp|6y@pxTnT|9em4ex|As7Km7X#L#;6TbiE(>=bqg{(%)khb5W
zaG@&U`lPpfvBjuH1-|}a?8S3Zyl{v=YgPI*HpRDH9n`@f<o!5MMoTTZ0mpkLZ>OTQ
z=C#88C*4U7J^1LdlpAUL5+>UDdPVCsnnKn)6?Su@iv88CyCMinTvR0}aW)w?s&A9w
zHHP|C=(p5-2kl;2)SsSf1$C40?>r8J@BwSN;bqZ!(4jwG1TWDQ#RD!HkrNl~YL6^*
zCzn2bcH1@OTZCKf)U5H6pUN7By#qsd;k;N3r%v_yTyY5A;te-Ut}J{0?rp~ex%8RV
zJPLXV3$8qbP3=$M?9+aWnO*4~O|XmS_c;XbSBUt;7ihKmgq2Q`<y_|<z8iuOmE0>n
zDqh4KoUBJ0#-pWh1TQM2=`b@HfVU6eHDpdl-ib8+YS$)yx%hnVz58BSv;DWSl38T>
zM=nCoGUI#`EsKeFX*?UM9yZU1(XF}1Qi`&(V>7M^3(em<^KfjmDK{UY5gRSY0%qVU
z%_i`PLZQ($t9tG;f=g|ybRk`etQvRIDl!vp>%9#=B4FVlY#w*JZ4I10rQ{ufZ-w~R
zd?)vG4N~`@j5KM{q#3A@`Nm89UkOFEgyYhAy(LIJ({3znb<Z$8JdUkD(lFKHKuodE
z49Z&R$N80dQ=y?ITLcyIE>$@;3UOZV?<g8wn+p!W0-G=I@o!b7-8bRK(E}!?#=J`t
zu0Ne!TtiV${fZ0%=WS+EY?Sh=gp*IT4Rv?kv+rQHGo-rLkN)mas4a_r3=>7ALENgT
zyXdsNM(p<)W+{HXtEM(l`)w)dxp=;DkYfC}LR3F_ux+3(Q!1bA%l@1FgW89J1Xm36
zB>zjMis>RGO2{|?jz8<)HM3}1OvZ2|*$k>5s?t!0OVyb6l%~i(mM|a&zaHdyfm|n*
zwN+@dY<1{WU`dQT@@6Mgz_~+FIYnLbLB?_`d&1Q`1R0`AI|%ehLTPQ$!nvl1o_q}*
zk4|`r0^=852lP(+ReZj+OS)ItpC;GDwDB?El7Ki>^b>cCTuDuTn{=XYvup*OtUJ0w
zR{eLi?(p@o_gB*0&rKBDy8}-tb<KtLiaGSN`DIzBcOrs|?Nd4YAo!`kFk2lhP0`Py
zF>WIiscqpvq}8h2*JW!$vc-8i>s4Mj2(^@KTnunrKaiW8z7FYb4sHHJkCK&P0F_>W
z53lZy!*v676sG<7`x?2*kFV`{Ig1CXMHfe|b~EbrN8X=AeTC<c5y4aFrpLw>V`tkl
zjKvUf5@~VWkPOvIu^D#iUl*05lDr<aCw)?i(kX&zK1T-gYISr5F=i1uRif~~eP$6b
z%OW58+;IZZk#=Y24)86F6bhPiBu<{MVrGI_)v=Gu7ml@HXksu`_k<i5^tT5gRR|rJ
zp@PEf7YS!hfy~dry7V~@AN$jwBhs|IHnd6Od{Z8E|MdvxFayiOjBV!z6Y{A5lOuk>
zCua-@l4Yf5rJT~ZWynJCfbxzse~HQ~;je!8srqu=?{Wd|yB%%~Y=8!Dr%|a<_nppU
zEOO)YvhQRf9to45x;+2q{{m?6!rVc_Qs?oho^G;)yCkm*jqio&6k}GKR$$zGj8P2!
zS`+E;7HAak$v=m$>!s+cZKn5p6BnpV0cpsjBzA6cCfZHq3Fsy0`#llx_}zTCDE#2(
zK!Z$(>L^9B3ty^_?Z@!r#u{bIup*o_W#p?kc02nnrw(ldNG~rc?99J#*fE+|_Tq0-
z4Jbum{x}>*ZFl8+Tl5n(5_hG3AG$CsygQH`e&#Pykql4BX8npl&L?3Z9>&hWG5@D%
z)z7(il=XF^q4aQK@@40qUyie*amPf~Fcp1dTE6~OhhTS3eL2jhC~}m*hzMlv^=FxT
zwVwAxhZcnf5$?qZmgpGHjjuB0odDVwi-pOqDvBz0mur`e6KG|v-fC!!S1nbXu+>nO
zvaU4PjE}f8Rq_cZ8Z;%5%bw4cx&@X5rGecRH4JIx<w@FnHz!EpybT7vYxY9D1HFxH
z6hv((rR^82b1b&st*G@F<}FqTuwwAte-avwq|yI1EYoDlSk^jFRp8m@VQsz*$nP@M
z1u`Pvpcp;Xy;<^r)>3{R!`^^V%Ws-rP6WD^zETmv-F@9n37A4VxIGLA96;iy-J?0{
zc_gBmm2c)ndym6bMpUVy!OF0F-gKO3C=d#Bw399Y{CP!SC9(;@yA`AB+Id*Br;p~_
z)B6+(3HrodlERSx4|{Lfl}FHZ4dPrtf=dYQ?(XgqEVu`EcMS;;2<{LZg1fuBySux)
zO_Te%-*;xs{D7IYhOd3mT~%FmWbb`W6Ll<=8rS>FW|=K0HqS&o^#ti2&#UZ%asq%L
z4cATV8kB<t=Z3<$7wKr!@d)jokxI5?tp0}LaT|GsmgWyasrIUHOmhAM6OI_vu^{_)
zmh(3Cg1%Gv73tA(elEk45Qb;eO1PPUEw#Y_$)^@b5qDDrp6!WgJn-m}{(8$@)-m8m
zdEPA4c5o?0q`wB!50u2FHhyc;yYu<Z;WoAYL(8?S`$I$^Ufzi64EJ7qDc5DP8E=UD
zV<O;|_-&TWzMee)+C#YgJP-4|%I*nf344ZTRI5?$PNP0yX!r1-GO@kagzw5u0Nv#4
zg~h|e)7y$+!|K|ze?13I7M7t8Y!}T%mUa4|udiLgae?!x#hBDsEh4oOO~_7@s%8+r
z#}0;E+jr~HTCV&vAqT71iU}{$t6L%fs3Ksus4ily-_vinNW{U5SWv8#yKRg&;U*Rx
z2Pg7*`Gd1Ffbj(({M2kfe{`e5IASPbwPB^AU=)wwiF9@4xwWgQW{YPyn6vx5kfW?_
zGTU{_m~r|h<%<sm$4HxoVGG5#CPaZaHEwJj03*}w$svHNmd+Sr8RNam2!HWe3uiMK
z{=^07_pB+-NY|zG?^ais4_&iyZD$sexE%Hq2PVJX(RL5&KhU<)OmGyH&1AQO`*YTM
zx!%|;)Xs4g;Dj=7fSkSRvVsr=tmpP@XTK`nkBXaqD)!T?JVY}$<2|<yQ*03*xFldm
z7_Oej2V20t*<;}m*9Qb<l`bcXg5-ayKp7cixDeircTwqS*UAq)fApZDzpASBC(9LW
zXKYj~9slG*7K_s=p;3sGuSTDXmAt5(FF~{{C{)j_ZM4f3Q6xO=+7pl!n?PlKtdj=H
zOiDHl^ev%m_)b+j?(585;!YyvmJnna7Qe}Yg%|=9e`C%9*R#`3EX_{rL|%72tJfdB
z_pm&dj3*Oc<3Qtb@oSlsu1VU~LE`ahxpQhwRzHfM#5A0Kz_ywKdZWf9D`X{XKf%~z
z_JJ56H4_8u8m;#4V{*pEF|(wbRE_X3k6`6$$C%>fa$2)b-KlA({V4gfI~7B7zV!27
zZIc1;bg=noPpYgKGTo02AP)T%-eYRvU-p`0jNgVoG`ywU!S+y<P{xm`F~qMJcktu|
z5Km>VK$SaTi}=c@(xDy~Fv_JD^IzWH*dj#SG8T-l;zRsdw?Sh23rB1>HJy@UT9@YV
z5;`XnhEHUZlH6$V(5U}&{b{TVHY|GCYA-SlFXHYTj@57{;WTZnI$N+%I|z!nZdIdY
z=LBap{ud;Y7bW#`9wRi|F;KzYp(or8(q?~P#-0KqsJm(R%973YyTS`U0H>_<TG^Wf
zutp&3%2v}mm}tq{`t&;(qq`3~6H8H7k(x)wb)Si*2@1YzXnSvW=$OWID91mh`TKzc
zgaLp9fN-$Us>Rp$4J3v(3FzZx(wkIP*Y153RIXV=T&!#9ahDU);th1L%@3lJqcPFb
z@eQe<j^n_ZEcj4cOGH3z-urbswtFvf9)JXy|DFG$4h_yU5@!cLKKD8EJR2y|YoQkK
zyfVGK87(^@?8CDiK=!LQ<CfPKeuHy3OS&5zwrAl<!*(PD#{!qPYw{b%=7KOKaHyqy
zn{aTyewJ{@b=fY5+4*7no7ZuG<+7(lPeBoCB2yv<hze1tqKErp!1&cXRutzn=0Z+r
zjBW=PE(ZtIjHD)_*@KjMS#t86CVXRHzr?d3a*MRGZD={nXLL#agvyc!w#;Gh16T@J
zyzS;=4^>+v9tMxmPIz3U$DGB2MuRf71x@#Jc~mO-!r8rvL~WYkQnnV-LHdf``O5JH
zWUq{T;MM+>(O&nXL^==_U1MLt;X^&{U1MoaNqo5j<zfN6LNm(xAF<{d(9k~y*Ip8M
zBqGjFF+j);z;Gl03};K%c?l2+k%GAI5M!6PLDWA6Vinkn-CCjLy#E-8pm)fxTv46$
z9|OSwxRr}pVp^ns3<O}lLOHF_F@ODIAi{uw{D1v%1sAFrqI6#XEE+u?WAIR?$oSiU
zI8_-{LdYU~L2*%RU~iyk3FeR-1e^#V8`;;&sVXuG5(y8NBPtS)ut<CFJ}DoYR;QD}
zyUlQR(m234%(6`nbawu%)L(&cH+|u$%rW}~Ah*>l9ONVbUyJE)Q?Oz*xK8D8nIB{P
zxPQP*=bN09_gCV`z7=RlLp=QVC4Zg7-Qqx**>ZuFs)YU{3)?$q)twBcyLoOHbaV>s
zDgziQZPo+g2E$7XX6O59bu0>lbO~b=;VCwDHqF5e4g?<(8kb@a5p?!DYeWOyyv^6V
zZ*Y`6?)!b2=><{7{hh#>BkmJx04l-E0)2fSY#SU$Q!7i|ba0sNV81Q1vXID3Dov5*
zS{CNy<Va$@NB}zuSqB2(V_4bQrN1c$Omj@jI9q>Bx%%n$&~)7(vy<THOLh0hB|_V2
zUu=TT2x3p(ctUuqWT8gf#$$&(sm;a*f$7%M)O1JE#)V;EWFY2v*y<}PE`l}2CrBy6
zK&V4!n~KUtr9o=x+~P`6>LP01^zej^(DW8{{FiG*_w!{~W2?1_w2SD4n8D8M8-n|D
z@P?PLrQFhrQ4*EnG?6!5$Q->@umQ=lUF@KDb<Dfk$`&9)ie-#qr)OvSM<-7zvyGZ&
zuIv(!8G_KxQYi1z?8}zDmPbz4b6k`)K8@(9>X6Uz`U2Gfm&RRpei$vm1}{M}W%%AX
zGFXUoc!VN2?@FNN<&QIM8$>Ucxkh6)3)R_#`GDH0TT8b|Y<1<ll-FltD>@}9<x^a!
z162WSGB{Q|=3qfYDz&9c8JuuhR6G%Y*T?ZUcn5UuzZYw{L7i95HJR!iE$Y<Du%nkm
zEk0^Wh@DT?JM>8>d9G*=j19T|Aj=Nm`C2`bV5>#1Oz`KhfD+~ok6Ia#KQM$C`;A+D
zFNe@CLGU?j%XY>3{1UVPh8=ZGeh>%k14Y5_m1R{je|S&lbTaw1cPC;Fzvq+AOgEV`
zBBxWN-xz4!7T5RaKBaH1)%;x;5UpdtS&;Z6x;;EIFUdC@ySjm%k4}d?EU6f6{w2l_
zqDT^gR3EK<jraAI2vRnn1v?TW5_`ZRT2(`z8OIU*6d#(r0*SygXWQsTa&`^sNDe|u
z4$Su{5<C+6uYa-Mu-~zycue&mL{Zvu%)-4rF860!4D5k>E&WuWrX?9p5Jpx>V_o%A
zBz7d;fLXMXhCabhPj}kJ)GZ0w$tfx>fvDfUpkfxddN_T2NahYcQs@P6>}acZ9fOO>
zx2{xk#!Tnnn{54v&TV0!ww4F{nvoD^Ic7DID3WZz2v9JrgOKh<kD0m<cX7p-Uk)|Y
zP(cA;yNv%^5m68ejR@_Oe)FSdM*AjKR=|B05c*MoVQ;Jkfom`y4QXtc#%EAPi)*YW
z+W*0~{Cqq-O29dJo%OF03uqdpDrl0pi{<E(nYYZItlJ7yT2;39g)H~|-U1=n)L)(0
zreKix2cyon*^jw@rZa*!l3`BFQN+Bri!v`K4L9XW5`C|2G6SR_fu39?TD8@25?O&1
zKP%hw6jt==yACS;)pH@!gV!DVS^59IXp(|A_O~@jfzhk%V%qxe#eT$o<f(e&-`KlY
zO=odpsXkOge18EA(uF6w&jVZ){{N*2>!RwSrBYqJo^d}z&}$?7AGf?H(@rO1H%@32
zmL7H%*8>n!xF<maR6g)C{y*N;A&mbmy&@k5>a!YwpYR;5*|Q1*M>{CxUE_gjh6G+m
zYY&Krwz0>|y-H}4lam1-i3<C+{D=4d{1g9T|KW=wph$_5mL@hi@Uz5{v8f5qveQ2=
z<q4`chBNwT6s{Lm7S{vVX1tU5<Y;R1f>8#2F5+?E{0Kr2q59GK%QA&&?Is%hvbn3N
zoL8@$nBYIHnFtsBr>h~9{htaf6Rf!jpaN^qauDx)N@)t$=HKNE5~yY79y&+vXxHZ4
zo0`h}{1Ur!`Gdn_W^Ras_sSt)vh~IxTDw1zbhIUa`{x%IIkkTQ$OC0O!F}Kd`^f*%
zj3FB1oBjgs|M@cxZhey^*8j|MAM~Hg;oEq&=D_96kL>?(&%fSDXGN{>9Y6#{=>O^6
zAro2ghrByh)OX+`s}>jVI=~E>-pPECc`x*L4@^o8cwkX$uK1Mq9~!>9_`vc9%J(Ig
zQ~_M|uSEx1j(@H?61c|)gDb^%pC0*+F`(A$sN4MW=|tdZ#aO@{RgB>NaBjODL`{%H
z9t^JN4Fo#uRb2ZEzKbgU3-Q-ifv!i7>0ITWY^4r7*6sSmmN17-&R&bFLb~^&{mS6%
zJ`K)|9IXwe@^7jHWeLhf;4+Fm8sA*m=4!B@?u))-4xsc18v%b7i8Pehddq}Thu!`p
zq1Ws8wc`Y46V76U$V6_Z-X>yfH%d5`mj;wCdRtYSih2Nwy#I#UxJXc=pPe(*6sHtO
z#(Zwd1S=k0&ln^Sd5PEm0wPC3W?+KET~Q6)!GbQDwSPFTf3#2WFJDFt>)xgN;b1B!
zaY6_?ZRhOu6SW}CK18$<{Was$%(=3BG5<j3zmL3bk-u+eT&hTX9=4GuDK70nc*g~O
zWwf+vUFkI^oiy*-yyLsPUNFg$o%artZYISSPt&^ZPYb{{1ArsbLWOIdHq!<(b^?bg
zj0w=#2}3QRf3Bx!JAjU0Fa>81>RC=E=ZfX(Zz|O0&-b9I8fpjy6})OrA?v%>#qC(J
z(-r(KY^<2YoJxm9fp3Y&D$5tyA4q3hyvTtAmsF653B%LFe(BZ+sS7gUILtGRjB4*d
zjg*dZ3!c>qNoqQYBS0F+gX}(0%YXjfW0ulB-^|2JZtFz2`P>OTSzR{Z&{lPzV{XQM
zK61kn<{l>a9g|i8MmMAr@8vowZvc|zG$xiF_SU6-s~zv)xj9Wp05zBmsC_b&`!i<A
z0bZr%FS~1D+sVG;?76MH63gLyUJ<Y66JfwyF$Sg4>iH8dcjW1|g=aex$jObHR3$a6
zlX4T~3G9>q@a!H7Y7QI!;ktBkcW!Y^BSr2g7v&ZpvDB0z+yzQWg1H>{%lV*~m6(mh
zU#|rxzh6RVC^xdN2O8USEFsouHE=@cgaatVPOrN_EcBwtf=<iQVXl7ZW<>gn)albP
z_(Gkn9wGED`()!^=w;n_$-TXs4?wXC?YpWbnmv8S27&^SPZx;WAP@Ge{$Q0a#Uq7c
zzH^T!u`xlZl!;!5J<l!^ElS!t$JjSJHB~!XCFxL|<<f_wBTZ~*2hW<Gm|c>Dn85xr
z6iOP~XY{WUPsQ$sw0*dOPi+A~&9co7JT+Pju&*dJ!Kr?!F)oj`_&RW?n$34L;~0L9
z(hJo<B8V3?I+iK`2(7W-OK`BKABM|89|o|A0Tdryati3V$mP>-4_;?}5VhLnr0Gd-
zQsz0bvFGB|c%odV7U>Dl5=u)7G}r~$s`HV5I)v=4A|&@r_l9`joXCL#G@3JJ8YJ3&
z)SRdF_n9!Kddnj$ZlWRENN3>@bL%XBaltSVTS24k&ablHMneNw{HhN?9gisrP@82M
zwdW{89GT@wY;qWq6P{R0-gvT8XU&)0n8}Sywle?e)45eG@E@+PfG)ulS$`~xCI2dk
z2#wQayyAP9eJxc9m9@QTEgr0^<J1aA;8<jv&#S_?2{(^VeqZu8wR-E?uQpXBLU)pT
zSl3`4k%ANeBnOCUy^QwXk8>l*<s0pDjaS8$Oi+5l)`l`cY=9?$5%kVJbs?Jb4XTT~
zXA+$EEdkmlhRM^;T|d_Lx0I~Gl3KQX{DbH3_<~5N`%n<LfrsxmG=q9Hx{b<)#m5M4
zE^+Xb41s{NGl?~CT^I~M1>icmE{DM6iGbt1-~2-xb-7vn8|?2dWjMtJb)WX#Mv0}3
zS;w@?&dr_gq7PfMgyC%f_`cIOo$Qn88I_>HNKEqFipIlP5+BMHrAFw@6wGUd(Q%!n
z+JYIf#xonAH5VA*9O{ij0#RM6AVA2WWn4u8`dlQTmKr7}V}CSL`{y9@QKygQNd^-8
z6dG^LTRt5R%AB8&VVZis;5sxfyI!7=(VVms1ys$oTAW<6Pc@zV&#pnXg!oex%x2He
zKnfA_L_i);iRAUscA<2qvL;T-xJ-8MP+@wy1E@YJFFXX`BG_e{p?TeJ+W<;`K!0u_
zgT4MxppzN|qdNUH*fSuFhhPaf;>TV<v$|2j_B1h5g*}!f()HKgTP+;nv#;|>zUtRe
z$1^P`wH<}j#ib4@H@TyHpZ3K*95Jy<Di%+<&5booa2t)M1|5Vu`IxN!+e*O3sOrCJ
zC_zn}cNHeY<;k;e*Q<x=^KEWA@Ma21k1X?Kn{g~Mfs5bP<v2)gho`>M5W~<asmjEE
zyi`1rL}3{o0$%BV?GAOQI@;cqFtOc4Q9>YkS&3xZ)Ail=A=Z1=q9xkZR#AbRYSBBV
z>v#bB&&|WfQPNf>wv?U)x!43*5~u3bkC}R*2D1VOLlVu{2Tl%*VyxEb(aMt=^Wb?=
z83rgwkVFRZWKv3Iq<3$44k#NC(m5E5B;K8E6i`ly0v9s;PyFizB<-DhABPX!Q8>?k
zsg#YMzX12YC)0;V4Q2<>1Bn#Is|X$l^%bW#Q(w#{NO1tKK2^X5_CXMQS2rm#8L+Vw
zA%?8BQrZEc=a(5ca77fMZ&;EL0*dnk26*uB_jfP;{Qj6Ty5Yxv;y@@M85ad3t^$Te
z2;PQvUQ;P4XD>f+j8>|7@r0CoL*lRgA7T41V~wmAT0NRjt1Xs9u!VWI^>3ULFhkEk
zDE<7Uolbd~x$g@U5PCT<JK$Q+%ulb|y|;$|DyE74qot2(-l7BAS&5C=@ZmKd;T+=q
zKL<pgCM<shxH?<Mb;-fL2Nq60{Iveo8_P>vhSyaCrRM-`=6G&nW)=Au$Q?xRAN?~v
zL?l@x)nEG|To&4i6W~V=4G)uaH7VI))I~J^eGcD0@jDE2Us><mV3y@vDYNl8y2Mi4
z*I4fVd;I5XIlF8~5y8DM;bI&|hRE^X=h$d$#<QIau%u1h>uSgn@U3*TRTc_c99iJ{
z{3nLwgd!9nl#$(vXERA8IBr$LoVv_=NBXi$T;gq9>;Dtt*#Utj$mqj=!d)>Bi^li#
zS_0>ka)JKo_F^9i7X3X|6eb1(@(sh!{h#_j3*fBLAh51t#FW`p6U~Yz94`P|_`gjf
zOa!*Dv8uNb&y=|xV`d*MtRaiX|CRhYecdcYjtBmK!cIbT2%81)1qkdd*BJCch%mRl
zYaU$dUjqdz#!denx+N4L%QD)M&BCPSqbQ=xXJdb+o{1I-o<$3hiO=R%n^M(?l<$*t
zL-hl4E5?sTA)fNnAMRrK%wxr*=g=FTs+;hv)wJ|zelD?dKEKDRgaAwMp0fRI*sJ!0
zswBgfououy-36d~S{Cs!yK2jK{a%$*P*=piARY+w#RXLpVJf$?L{e$!M(o-aVx%=P
zF7SEpgrvUM)7xt`9at9RFK*S<8hZl^L@Wqa3C`Tf`oHq6-zPk(r+izw5;z<umeFPG
z^fBCOSX2LG;Ql!z?+SA;Y=h7J$o<hq%u;!@<MkW_u2p|HUU?;W=4R#wq@O7{H%``t
zVc|$=z-7%u$OYMf!9X&TF32iTBd}g>Ve!*{d*WRCP)>R}<Set$C0W}BF`EFT4K<#v
z{<pHdMHUli|3QK+H%T43JgohmPh-cj^iQ1L+k3T|Fzqqo{!_0L`EkMbgVkldui}3*
z)Ued_1O{83C)IJGfPEKwt)|$boahUN@6PfT5b8HS0FB`|8Y27;;6Ef)W2S)@$Zx+c
z>VDRA27SZGm{|j0)Ha<OLt&l+k8>R!6d(Oxa8746eXmXjtga~uNeF487f4$w1-G^&
z&L`vuphpY{KUfwec)h?yz<_@M8rc$o<8Ju3+28TQt6(^yM}8bArELE`2!TGG;n}bc
z8~R;Uis(ZVdmFvFP1rZggtN_yT|Z$F2sl|VAk(zPc0{{hayc6opD90tV<t)pN*gAZ
zXTuw?>Fb`6QEMhe^1An1e(gO`n%mcA4uUHK-b=#pZ`y-3OTX(O9761am1sPiqb~sB
z1qS4tL80e-@OMmGE@b5!h)<N!_U^?a?ML#)8$!?m(Mek-gK}ldq*rqzNFn|N8vbc$
z0W>@`5)M_KQa18wMy4h*$zuY3s89hw(%A=fh;x|pACL!nZP=yE&H)Qg!cE`QrP8|I
z(ed0tS;I|HQQ%p9S4ZH>>&s5t4j@k%Y}|BCW4hStsxdar#7Ikywz%O1ps8!W3Kc0S
zsVMr#i1#i&jZn7({D5qJ8k*{((wc(p4K9#|342h=NAzU+4LHpzOX~lYRKbM#z(9jY
z(5$}+{f@3ZjC^0~55c2p&VqhE-`eI<2FC@OH)x}^|C=%{OB!unUu~Tbz|Il|5lqw}
zJ=HpUtDHx@OKfD^V^tFZBa;<@T@OeLZ)F9!)|K-I&VM#ZR^(NJVn}_o>+w0Cz%|tC
z6)=mn2+xXrCF0TPqLKrX86Cel0STWO+J5|^+}{sr#DG=P_#2T%|8AJL_b>rbs4)tA
z<qO>Tx2^~zEZP4DWKuJAEWapLp-=8^Z}<%`_dsFb)z5{4h3J?l627LJSd<p={`%G}
zQUMOVMwcCW|64}3DFuy0R&M>i2owQ%?SDAII)Lof`B*B>2EF^BEFfkfhF3@;dpGg-
z0I>UWO*8i9pO~ETy~!4YiV2|a2l|8nF!Dwn=D*`ENeB-_#aUo+8t?5k{MOzHl@c)x
zf`2(C1mJ%u1&!n1)6e%uVgCP*`kw`iJgkGS;3q|<_V<1gJv<cs{Q24f-F(_Jd)449
zD=BARPr@Q()xLmFuI&0+!O@f#^&IP6-CjdsIRy_+8MLSwRap2kr`y88RukP$LizR0
zu(DFL@#rT{To5d&$3rym?if<y;+Www?i4hsm0C@G$2vYB%!TXr<Bz~%eTbFNEtM?Q
zEuV_?(}O$TJDH0&ZYjnWmHH(qW_+zL=zhFNSJ|YVV~P}|+ak)$oOQ>$D+`edFkb&6
zJVlan*D|0f2{9Y@HhRdy*A>FtnvY6KQ<P*iVM>})ggQ-5QMxNiIcnk|+s-m^{1#&)
zW)EY~BHG3~PYfRvZ_d8tqQHChO5sA#y*;AkA<|O8sY5YxwKyigA6L%$qaPQ<d~rPm
zaP&f>i}038tvFFi6G@k3+!Y3y@WVBoGTMXmxZR`=jzl=@A=f7)lTCH<@!x9y1VW+y
z0rKka9E725>4Lep<h9mIZIuI|Qtmq0ylthjuQh)~YgG^C6?ul^2R#;)H0T*@#_4|~
zS2SQdEX?yh>;|VrN1-;u<8>)xU=TyXhBzI~hQl($!F8hm`<T<>116alg!)MJx4zd6
zg0g97Pm7&`nOtU1kt7w4Lv=-{k>pCvhn>8ood~_tXqn#afx4T+l!ND(PKEhih+Agj
z;8YD~RPa59rWp8+zGy*Dkbc}$eAdg5!OFqiEXUy6lULqMid~S{qR!tdT%?kDI^VZK
z^;VA7I&Fd0h#VK^aK6k0#jkYCZsV`sI8pSFS0sP|0iE(lJpCF@2mEe^k{ahm7~T{4
z@@`j2+~vp|N4KbA;#jHeB89JRs}{Y7Wp*)j2~z+q5BaL%Zt{9YM*X`q`@ft}wKP~!
zc)6_eRs8x#=eWg``m2}{hpwg+V^5wvGEHx{VE-Z~H+cB1u^|^Y^kDPDBQbdRyR!$z
z7l6og1NcIeGrI0eXpnx5aug!Z$t1=Xn<`c4>z~vadKPJ3E<t^ZD;eCIw%n}FBTGLk
zwGwudVc>0#R8uV{c3OaaC`b%g7|9>1hS((=<jql@*5xTx<`G_=r{Yw_<8!y1EHW-%
zhaL*MTbE0Y%ynRJU^uL8+@TX_xKl~T3jhnmjUhmQ4-ZZ&@H4CZN3Hp1=ioggz2jH{
zZ*|hIZgCOH0dl@-!wj*$Wiu=i+Aw=62Kd>U6m38~bJ{yb;CMvpzQ8CNAm^ffvCV&8
zChMxbc795339Uq|UpPnB+NRm8^QyI{a`-tl4{NhOvQy65mR$CSN9FHVGQbwD)ynNB
z8~8xP%=d67ov`c0P4`3F+QdfG!6Kd1Z}q0&;5^c&s8KH6at94(e5$iv^R>q(S=9{N
z0S6BCE8=E2SbV&p8H|kF3QWpTD@$3%N>lmDgL9xKbZqMAH?Km8u=<bT)Kt?%9L335
zME-8Xz-oUf>8Moi3;yQQNk>}&b#ppaJ2WP+Kwg8g`fCMyUdEYZtp<U8KtL7RHMKA$
zj%=3&=pe28&hg2}kh*g*UVs0_Q=T);_aOjov&b3lu*&i~MKBsRj??N{{AuhGCZ?2g
zfFnL+mtA5X<%L=tT0=v0>#+)^)EnBq7g*wY52_MF$9+#JwPn9a0lm;ok$X0>j4y(b
zW3FXGg6h0##wnanTcv)>W&&^`pKIlmVn4`;GYM?4ZC^6zSa{^#QjS-hH+5wGm{+;?
z$N##?e&0#3$F!`nAI=7xwfD>q0;+gG8_z;$tdmt;Gvpi3t6D;`;edH%BA>I|B_CfQ
zR1oT^V_1(y-ki;K+VvMq{$kTT06*Q=ewBJ~>hFk;|79q3;Ob;<-i*71as;Eqdg+%&
z<$MLJ1!by}1hd4#sJ#a$rhWrWV?+ahF|y_}k72^;$DswPG`E`6NhU-C|1PbgnS8u^
zLKg=J$^ES;k@!{Xa>GIfMt|Q#&;!HVzcfCD@o%5N#BW?5C<`sg%~4m9u1Xga5=+%)
z%@f?Uos~jJ=s=-NJhCV7-wY9_fD`=<JgQrPIeQkgKF&)E-4m@ar9ZI$#p!^OUuBzn
zWa)Q&^)2;|;}xu!!&}07fKVYMOb7%#WJo|DR2CqaCSLpz!|O}?Kx@Gtz7%E{)5@in
zWjktnIH{OC3&&eosoq)?vvyCNZr+Y%YPvD+l0eUtJt6<U`eS8~LAYJ@*c|f#1NPP-
z_L%q+Ryq4kwl()Tdc}96wq^EGv#jiVBS1mxnwHLWjBX*R;x+2sK5)ek4-hI8^x<Qm
zL;2pK%Lrd6X5ie=Vate_cakXN6!p-jY7v%M(;`WOc0a{;GHZSQ-^urrfM=l$uMUO1
zmW+_^{VV2?WA^BTt1v>4U|1U3<y1u7;2Yfn{m0T@_(xSG(5o#Cc4-~;r0YOSuMKix
z*Cx36CyHi%&qm##lyY<@A;ojV9Tx${0W|)WMwQZuE>NiDpQg_fh=~-`vtrPICY}li
zGopx-wjTrqt>*&3T5i7#Pvxd#9f`8Xf1ebMZ#U(+Ii`K7?W<hrFf~1yw)Hw&#aq~8
zs@nz*a#XW5K}E7wh_Jx&mMXgXp?kW|?KP&(<1exd)(N6=k+IQ6ZGol7=f-ss3)h0m
z^TPwNJksHr_xhOU<wmB$B^OHgIWL+~*T+{+t?h}j?`?C)*@k2@-_Bbi-X5Hqp2gc9
zHu%-xX>#2}C6!)qvy?QbL-Y0J(qv_BhHPxa6pKPOVY#Eib}Cpa$j*QJTx}&3vM%G?
z+lhi&1tmp*3V1-cuInI6QNs=Ge@2(stBOu=m<E<SN_4*Y$lM^(MmfK)Nmb*F!*S{?
zA9}x4pn~~o)+b-kgNWzT>GjjxMyvj7x%=<Gj&RL|PmJa1J*+j2Z{M%5fIfCz?-e?T
zbiE&u^QTe%wv^h6w$+$NG`IYO#egPsuH4y(YcdwAaEwEbpK5HgT^;Dz-a>mXA^6U!
z(u{#tWF@PtIA<nTn(R~UN)PU}^<>)UjwBNB_u|p31Y4d5(0~Clye#21RXCL+(E`uP
zYota|7uT?>$R<@51ASSL)x0vr*kMkcd3krz+BN&Haln>ShbmAqg$D>GDc|<n=<L0H
zmoIdQKS-MuLp(^KR}L~6tY19<z<5XB*)GSaZFM>spD`7wgGmh)L|&}HPHjABG5<3U
zz_V~dDRuoCt|#?_JAt1IndfjW?W{Q`Kg@8LY#RI;bQgPumqZbCJp}Sttqt*TH#BeH
zeby+jq86~j?HyXfC;s*|vt7_H?fg!ds>B{~DlsWcjg0kZlPDf*_p<HjkX@sGfD0+I
zu<@Wz*>ix3q-iKtXeGyW)?c6q1`k2AHe1}Mtz6WkWS->H=a8C?jexU5CYq_BZ76)5
z(kH`92S|BM$qYFNSf3edabqadd4cC`ewe2lh`I1)%7DYvBw~b8eDW9=C(8>dNXN<T
zaI~j>*NEXb^9anr!_60oF!b2jfd*It<mA1Amy0ni`ZqB&4>xL(rw+(U<?S`Bk5OoW
zrVF~^o`o)S<Vb_DrVO~W0z9pCf3Dq*1_z=zzlUoyHZ7@OeiHw&d4>whmkv^m(GZIg
z+`FC2R%bH7!-M!bnqbiZ`#T<^&!ukeSSARHD#XLvn4#1Hw5a7*_uQa{7(<I!`2C>|
zOTGu}T_x`O?0<ek=KN12&fjLAlb0pvz6>*X5+@TREl%-Uj&4EYWPahJn160Ha9-cJ
zECng1G_iI%eaw^Kle7^3g#u=}w|1@P@Ijb{bv><|KE9&dG26M<x7${z)(~Q?H$g%;
z4G<g=95N`%8%0P+QBg=+&`#oQvwp)7rq2GlVR%1(Ebogq%V_?X@v<1SGrF_3pae7u
zh8Q>&augq&7AE13<Knj~XQeyUxf4%EG#g=?JFYgpyrv@HueFsc@5o9_>a8k-KCLDx
zq(NKpiwPiZo?W^6W<W<rbB(}}AI_+3p9KyuvFgh9BhLf$W~bOG@)`rL1MXsU5~XAG
zIYbd<+4r8lxj9chxocxoIS$s&Ji~(YrZ*Zg%4B=H-z&88EJV(a=C;+58Bvf842X&M
zh)@`R_9Um$J-K@rmLb-@^4<5adpspL6fS7pkwv^54Y^L3GhodhhK<}HeDZbyXG2j@
zlxKA>Z}AFbr|~Cj*aitqt*JI7$oo*Gr#+X(s>UAIT5-mCB95c2#ZSJ`mOo*q&j<`0
z*pKMe4g+mW_!g5}ATRy$#RY$eskF7mpEaA8&3E@s#pm2wpGe;_HT;5ttdbJIn3)tv
zNSNq+rna1NzAC%?03K*6hJ{#x0R7eHm9PyS{-l`ZCgLVg(HuSdW~Xh}HoGU~g#~j4
z<~D+kI`=vC)l=eXShDGB*<x`YP8j-y_`O&azt-mnAE;-?{e6Pa-x<)zj4xL-w@`Pa
z7U8GGr5q|nwFbqnugTgTi7jFL+R8#baj)tTR8?-!gs{|`+yrGM8NXhResrs2avs1j
zRhJC<+NM|EvKAMu`SEut2pt?!<)>e31U*O&yNo6(3I^rQx*J&2E=_H&e%nX;;&g13
zwp2ElM5r$!_~YkCL@sj>xUzcUkO#ZdTZisjc-v~*W|@~)Dh)R;OWNP`xe?~|QX`D<
zIh-Q1*GKB)rq)SvUKQ`-%n+qch{F6U7_zA<ndb`P$KtH`n-@FJnF0<3G%+__cgUk(
zZ=EllE|ddaYK#sDa1a~B>x}+Lcd7+@Vo-~p+Y+zu<KI>j+w~5{7}$s*AB?LFbkGdx
zOS!4zbdA+!I+q?Nd9a-G3^e@hKb^g43gyncCUyTzo<mzbdZ6V+AJOe`u2KJuc(SO#
zF;d=Qp0Ji!dTJi#$%0VQA2NF%uW6h9+xKO5N%27ANRY7izQ@Q6+>CCfD`W+BzwQiU
zvi{&9etf=i$QEh*32eijehIHNC0-`)Mt+*XzBLE(8V08mBg_EOP24b54V}15!sO}W
zL77>g_4JorkbQMYe&f%t_J<8&E3PuvV}W*MRQEVbY14O@5WQ`!bubLs*1QlWN7JXR
zI4s=N&%?re&s874#*g>EE@^&#?DlB94Jf%@tYoHUaZsr-Wt-x`Z3wF-<UY_<WK<Qw
zfS&wDv%YhUvLx(8ZIBW~Pk5~ns9RQpcXwixZqT#zMN7*ySD@qrI0|OT@z3hp)9%lm
zS?L{q$xUzicNfJlowKd4a|q6Zmz$a%78ml5BU)Pdum}+XUg~COpMU+qH$vaDoHU>K
zYoS>)a`srHq8P)5F)iSJYaow%-duy5kp~L2Yx<<5_WWeY8SOPx;_an%rt+lL+GcWv
zmvlxg|3mD`|D-csOuha*mwhi1_4qkHd_+12k?vE}b9c9FVXLQK4P7huoP9ncdza2l
zAeUI}Q5WuHKyz{KBj+#3-N+>=Eb6~lu@-h=yK!+ty7H#i2zWgH>WDdn9hgII*5lgd
zUsFaJ#tfYe5)fU$$vU&RP+awvh-sJa<WrnQe-%H@P2c=!%%a1aV`I(!Z4{(mrohU|
zGCIg!G&<5^u1BSx@HGZGuBDA1!B9(8tcANFWene61Gc&Bj~OCPi*uu`HkNdl>#OVM
zHHs+t2`h4fk^(FHxrHjn7w{kZ9LE?ZCzT=u;kXD8;2_SoM#w@be?o;I!4FG*XwSMu
zsv8A-&uJnfK%YBaUk{W|Nqag`BBs}J)wvKs(jb&2{dI1-ewO&#tx%kW7`R#_v6rcr
zM(nBbl0$tY&%Uuga;g({s$$;mUm1q3qziJ&(+3OqbW@jCDEt)kIEss&QapWiZ9PL4
z(8D>VfBHBI=q&=40x{K@`LW{a7!<9+uJY*4F4un``GuY#GYrFD?=%Vq?t`zf6y3*T
zrM~H?6!XzsKDfYrXP(<~?+vgUsnD7oD`A4x?Wb!$z7{=(xALjmod`=<PEf}%bnaRJ
z*!dDa)nBBCg%ITYyRMp`33-=+9@@VW(w@?6m+~#$W63Rx{4|Pp9CNSxzo8DJj5yex
zD~G~&J*umZh@p&3HnI{HltiRVN@8BWhM?ne;73gmM@Y2hUX-Cn9?++x&4-5@K(c?o
zx!(5KpN<}xak{m{3AjB=joYa;^34Zj=9C3&II&DiNgCFRgg%S6$kP%=8qA`j>tU%(
zIR7y#Cxfd>NeNt7``DbZ`O<Mfw}9uaicUh<NgSfLntABKlNRwecOjj>)s*?8lqEJI
z6gmIq0dM2k6{?nthG#_orBkD&E>r5Il0RMkXt7!k#C{3JPVJ_`0nc@aq#@_^z|Hk-
zh|cV>c-!A_jtknY5ZBuA{k<!=F$<~29A9d@D4RR!NDVQWR`5ICqLJYwmUN?)vl<IY
z;B$t#Kx3am<pl(Ya1deUdgG0#hhayJaSiLv7Oyb(aXfMT*sdM?<#G5qtA&KRL{{Wf
zjID{5sEj92!62FG110f0@8Xy^f-h~I?W^H1uO@s-=`r}tYxgRy-sT(m?{C&BHl^Ms
z^GYvKd!kqnp;!!m*(_)8x#`#u2+$qIKSAm5%b&@rs2sNyeUZj}Ik~rSI{7X)t+X~4
z?5{pl3vX58Ut5{6*mygh_a?cn(u@=#PMD>q0G3{=Bc@OtxF*GV+wm$B(u*RQj)V<S
zP~hKq7Sl*EMb~x0eJL_46v6-L`{qLhAH?(*H$A-L&r}h_q+K@f5X7{}-;<ZW5rL7o
zy0~V!I8()W<;&vDC!O+fhjR97=Kn<T%Ww;a?kT5tc{Ax&F`DQ5rB!cwS#Kr*c-iW<
z4v}SF#?0em!I|D|{(|exdR*x+7SaKt)3OwTwRGjOW(R4+j~r0YxTrvdM7O_<&mA2T
zI|?S9f8|g*_>A~mal25s{@bf7`Sv6iE+1{oZ$U5Ouc%`OA~q&>^BP-@=8+pwFhWsN
zG5x~_7zL&>JgY*2AC_0$=SH|E(MQSs(NVQ(QS-*m1*lmv`S|RtIFh*;!(Ly%!FgBY
z8beM#^VzQ{5*PhJ=JP$-IEb}|S}~|5rd+-oMcN4#RmYXS*15G3b-6Q~8xBixgZt9O
zRbZRv=HVfWL|wcna>WrhwJe8GU7sKA)}xpyPKexB6+EGXX0B9*{&|XTU~pu|iN^$$
zPo0mF1)jnwr<e*9Ty6$$;qXNPDsrG&jUlT<E10@Emhdo;HqBi2Ai>1C>Fy+N^RT70
zWLh&wI47tR-gCR{`$Qv2p8A+ncy1bRK>H$2CP>IN={S-+6z8X~R4E%K;1<HfWDhxl
z!J4x@%7ri<vO{EoEuJ54t?qgqG}ZIJ{86E-4RJulgpk|-Co&-S_;6%WKnh~@^8<y#
zfJG0<Nq`*;yZ-`F@5z2%szsZ5oWr*8$aXLVgFr?!#}xr*%ZMZ#*M1*5y-}_X0(iHf
z)3($6yvx<5!;aNj;CX&2rXL~<xLXEU1!JIJq}Xpn7^wyhZ75OoAEB|+JZ4b(Rwu)7
zpbDZqbd%3Dw1T$|E+5<!@Wz|-5g!fcEx>AnYKs>GT+yH)FL{3Pb&4@?N(T~m5=-mG
zE;SZlDx$tLF0B^-?kfRFDx_(x75|n&Muvj&2N44%;k&-H@^?Q%LQp*hunIQbRm}84
zg1}|sU|?>b?^JSd5WwYiRbVXjHzR}fP~gDjU_xM16NCP;l7T?LWi22Y-I(Q|*+PW^
zE)#wSCK^nbI2jAv6$D`;282xiFMnup2Obe45-#ClRgl@;Y2!=li|Er4$EKw)F!k|a
zP&JXo5b#MjLpRH{G)nebo3+3)I6U0<a~(|ZL*y%lBAM;{+%$5gtR%2-nphCX=oc5F
zaB!l(nhh8_voFphe~6JV1?W>QiB*Sk4CDR)7AeD-#4n=$@UYSP>9#RRqAy&Os#(Ym
z^fL%pbw<0+2x~R2iCb&Ynqm`FU{U?|#lQ&Md0c0$?Th~&{*j+%(lEjK*rJGn`H}Dk
zwy3>SDqfa<;p|Ro%@bu?bG*y+arR)#Q$a|b_mh|a2BM3S1TyC*D8t3t%pWe+R8e)+
z_n!u(!n5V=nTS%l`_|&=M9Hky`u979159y*M}gO8*V~gUgpN78K=NHB^M!Zk-re(~
zx0Z@jXh@-%vH3?Kbr7&E1djy4It}$Lc*6!|GrlpSnM>}uSsdw?`#BDpV1CZ!-Rd7C
z?))v%AMOW2;K83=2*(o@>p{di44qAwnQX!tG;`6##!x-^sH<2C?4oueV2-wH=&G7H
zV+52mnRs%Cal(7sf5#1|?7_VQ<Q!f+vW7ooRag5BrO_iBWVXC|^HR+>#^pB)(@Y~K
zSQq^@Rkg}~NC{9GKOD>iwq7+q)VclLGs9AewbdPIGCOB#;9pnJJ|#aU5oe=|F~{<F
za<QN1iY8%a*6WDjXHA86d(>tQbD14{4?A<BktI^$&TjEhXn!+cT;B7&#uO7L62^*k
zqU_pcKO%Y;d9%{^jttqVWzu-J$1#YyCAW8Y5JD1EZSth5=6+>FrvD;bSAsf634XJG
zE=&0lA#o0K4l0Y;`w7UaA9%CpEfeuA=0gv5f2JIi37{*F@L!l*J_>~VURwdJ`{KSG
z-KY1xwaTx5Tu0Hx`jm!=slaEwjQ&YmO{FG?J~ibF!A{j$aU?KJHyH5eu`OQ$UO|d(
z6F)USQ@1!?8e09~z_89gitWMP9c@=;J%~xJ9yjU2y(iXC=WR&%V7eJ-ZqRNpZb4WB
zRh<yJU;Z-T2!s#a7a3}WWyV}?GKlojg4{lVpZg8%?ZARQoPRh+WQeBt3B5@vd#5hT
zQ}$+vb`o!9$?!_hp9t*_24%4j4xXl8nA6VFF48QXhK30`<A6NXAMcD1HbK{YdKhwp
z_8$lNQTTBrirbzem+kzz`cp0lj}-Ize4<*Rn3&Pu08B+4)E)?qZxD^fz;sl9u&mq(
zAq9>SS1{#tTY_0efrr9{3D_4j@N*CgB4jfZZx78jwt+wERzH3b8gUhYo(cLP29O)S
zn>G(9{BOG8X_;tl@NS`4{VbgjM~aF3lad=m;I6v&NkgBY{R1Sxnjv^aD9+K(F&QFF
ze?Vi>Pr}($MjuH@h=xN0CzJ@Pon`nQA*POXTD)5K?nk+w&BV2~;H^5*KLhzW)Ng>N
zT}xKW?Ay}sz{fOXOm!A5ied>O^Im7sf5Ye$18aul6{U#j+n-x@IQB3wC`q>lA<$}*
zlD?ZwL1h$1cTjWIvdz9rOL_Y>vQ#^|0hLOz9mRhygCT)4C_>?HxqOX1!V)NC-J~uz
zsipl{=(9QcH1$NPBv0`q%s9%%Wqp+fS?$tiqgmz65vStL+NH^8m$O_0@(c1y*e^Qv
zpCcu2bm`v)1|a=p8%n+M#7@Fmc@!a)EA<kCv!eMr%I7rH7P?=e$Ga&rZ}wvwhJy%9
zHwytFX0G16_)}=nj6xz=GD18pHS^!kHlEo*cD#vU!;O?Ft8JVqhKsnJ;XfYs-%=u_
zU{CSPtdDGt@pg5T<dE}4+PBHp*^*5Lof#WEO#J<@uXajk<D98KKhgC5Hb{>OtD{2*
z7|wB-&h%ct>rH};KDf)C+@G-JO-!z;SeJgu7yEaEb*_pEMV_2UJlC4?`H|N#?vvsb
ziTNL&gWAu1i}NNwkH`o%@sThEj^ZWCx`s*Ro#MT?gg?oj3YXE*WN%7$Xa&e1>iqEA
zq)6Q~^vZ@9vo9(KJ=0!)<atCIzQ%WNI&Phq5a<*UfB*%U#vkWIec78p9BEHQpNkJa
zUELUWRq!ALv64VM?6{;EUj8xhath@*u`s9@yZ=NVry*AL(q5~2oD17lEzyItKY8xe
zjQ0kCG!~q_p<$1{R%#v?-hFFrhAePYkB^t{yQeN~AT;ymhpx%xZ+LJ1LM`5&M*-TD
zXZ3kE4<{>$>`ER5Ri$$nG`C`sroJggAD2DEjw9$JNttgL#RN7~Yl`2}xl(xh=(f5!
zwMzmgw`dsWrFFL@^B<7!?Tc3Mrz5cI(EO=Z?F}1y%#g;6h!kz_=7)YQs@fFgp4Cl{
zljxmgq=y{qS$k*=R9GK`Y*0Df^s9XC?(EGe+3_@cyffxKqRRcw{Knicho34vcL6hK
zm=c<WPjzD6a}!jc+-T!M<eg^f8YmfJE#kZDqsL9#^VgwhwJN=JMMbWRVNGo8lJ@Ay
z(t)aUwX>`aQs}&sOQ*yXy~2*~As0e8r7k_vCX9qGGyLI;r*F|r_@Qjwwu{r)ywm5N
zPCJDJ&Jh2O{IuDsrAy^dnS-}^{_YjKoWF)U^NHw-$c*kG1CCa4+0Wf?Yp6Sr_J^$x
zo74d>99%23#$n<aslDBHRWVll5hplfEM2nB_tZ9hA8yZw-7K5-&%>RD`g*Rr>vF+g
z+Ocj-l|3iNi|_p`3o|SoJR7%ioRZlq(eU21`AarAk&&%v<vVlv1hg2w7#id#t6|bQ
z(w_)*HNo(siN68>*KA<xN7;xQIKdV?5X{YoW5qiX8%I)vD1FufJybb?I+|Px?zbZR
zcuX0j)HJESJJ}3`wRv<xMnsq*eeY-o0SNLhOzz=rCf5WDZzNg1ytgR#khCQZe4CTH
zilfB-V69%xnmtuesWt+cEG>LwONt8nH+Hyvj|F`cCKHaPrb!9=d@dtw&^`ERaaMbR
zR8y8kj>0^T+m~rjHy`t9gERTpi8R4YB-frx6S6bL3pIj}{v>apq3^O?dG$W52*Zb%
zlW<SKCR~G%(Vsq!u~vH`B5Y{9F{H@uRR?qo9+&-rB}Q&n{*Z>|CUG6l>02s#=9aS;
z1o8)eX7gU!AFa)MYaBTXkB^xQKQ)P<N>z=Yo(v<voFG=+@LM1lczk;^HsRr>=ukT;
z%vL%OQ>E~(s#v7%!g{?}bk29oI5hZ5+XDth_d!ZjNF}MN@%x+<zy1Q>dg={jpMueJ
zQIdzlbD!Dk<*Shn8DDMijMh)KA5zFFN_&WhW;I&stqJtro>gZJ0+^4`D<XNO^TdlX
z)OVUMuf%O3=g--V&KXCXkr&Y<N?vzCj*R}MA4AsDnvERUN@y44^eP__*rVG1#Ani1
zA>4z@%v^7~=2qME;k#&sXI|Bxy?I(-NtfRBa;5aWP^g-()MbpiIF+kE;M2o?2LsY)
zVILSd@eG8cd6Zz+SwGUogZa_gL<GiZv6~P0NQ`auYg!ueSZy^)g`7IUSwEp?0DYX7
z$MJ93#@j^Jud+xHV;SEx;-I)I61;CO*RhuNt?3MLAs}l5^g=8T`i`F2gDV=GJHH#F
zde>%-V%q=3%+>9o9&9)|VTb2Mg1KUOdP;f>oLq6DUiv&6_oyZtP#!R1$m1FCvZ3zV
zX74NVL!)zTf!}ej*>JIBK|0ez`qv#!dEW4%tnKr0#BYY;d5Jguj*E+Acufaqdgns5
zBOPZIipF%Nj_ob|3XA+RhZQX#@;je>vY9k<T?W41cDFKYE-+|uL|b}(n$*b-62s6&
zBq^n*oMvOZN?A~4io$Lf{K8f!0f9F}O+QS(h~t7X4}V@`y(poN`?hz<e9KrE`eL?K
z2UjHVvj+CcHhaZuZy7ZuLm^CXd*#s{MTe6#NuL2Ofl-yktwPyLtMO0Reu&9S^AI_u
z3fC>NCWp6*=+xMe3C1_fpUb-c5U1j6pMi=eWFXyWb@h;xfN~yC9&R>$-X22`h~#r~
z3PjjdM<-TCstR~Z(-US$)9M3bBCPKfR{w_(3kj<son;4Mon|0C&}bn+{9(2XEu7tc
znON`%xZTz9+#kVswNDD`^o3Yecw?&#bsxCE#n<{$MG+%)?lyVhaq*ODg0b{qNsFG&
z%`#+4lf+w}O-8HvnMNybyW9CaYF?q?V}&eSY)SXgpIdmxh|1V*&^*31j?>eERPGX6
z0;Q$%d{U2=zqKuCi|AF92-aD)2f*viBCCu)__kDp>{dyepFT>boR2Rd+;P^$ti52-
zx9ooCwUSV4NtzqJ!itaAaKWtdD&K&AKHNU7o;u&-I8!|BqYNsd%g?Q-#HaSv4h5p^
zxz@%0kH^b%>`KrGkQ9p}9@#g=@C(hB3_=)Nq74NuH6JFEI7G`owpU5@pkIH3Y|MgV
zf!{}A*YCP7L2K>Zhz|KUN65Qsywu;4ZcDPFU$TaF_~`<U`WF0#{o)f&79GHACqyo;
z{DS%1@q0gD6)Dg2nz<g9#)7JN`pW1`_dQv>TM@T1LYU{FP`Amq!-uGemPcm%h|;=l
zkn`2*iz{5oytkjvlP*z9s}+_U_F~lNev0Tyb+byLH3-R#hiK(7CkcnnmeQH-kM|!G
zMSQftZ1*gbbd*CboS|oNhZbF}5%H{qAkShb+QT|@)s0)ZLoo&*Bg?v55tAE}DPrRw
zICUntWn7$ZSM&JdQX`h}hqyj88LEujDxd9#DO$E8xB6khujA-KPt?p*SI$<FD~6&1
zrK?uvC6=+e3Rh*WykN!B0_m1-vr}W975-e>lP5Hfd?sFlVzxH$ma5r{>U)ge%x#LN
ztBn6U-`eD;lF3cF@d6UgOAnuxCyR3VtZ;d12%PUi-WMWr(AmtpR6`42F_)A>T~Vhc
zlp|y_J-Mz*P(R;qN{p}b!rrOBaP3}bVk&ht&5qd0uiqnXmob}4Kk}J6dfeJk5oQ#<
ziqGpfeYY5@-q@eB|II`)hM8aMvpYMfKEtQ;+KA!LNIq+W*Z8|A7a5?1==$;=hznC6
z!N`MR_qYqnPAJGtlx|iai>;aZus9XDmelaIRHQkEsVa5wO+bW8J%kiRY(lUd0e)@z
zKLi`EV4&OZkNK-`J3_d1x*p1e6=5;;Q)~`I?Cg7Q`ySW(<9n%92zE5D-+{%)HG?98
z4w!KHSFZqHF0EqE3xTcgO$mk?b10e~S2b41Z_#`ig5w=Dp9iHt8%j98WpPA=ka56I
zBW6@|Jv_%8h=o&MdncB?Cn3Jd^*>$r{#>yxWO-@r#qBD&pQ^!V)rzDzitTz<JZVL^
zfejWt%ZENEl0=@?R-X}2b-{mUW%_jQGe4h>ywTS-$4p<@a+k7rpQl(2?tZ8andGjn
zaS-C`<;rw=Bmutdy1xtU?vn`#dD~3mFyEePrqzqVf+lLUW(p$xbm&|-`>byekvLoh
zkwYew{2`7Fv+>pa54kAHhl6yvk<1~^8raG`;*b}wR@>7ZE+<r2ka!5AiJPN8<EXFR
zY|JTdK^5H#_oa?O{H+=tog`Bp!9#UxTU0l-(pI!f78dxMuf=t^kOw|A$ZL%06N8;y
z(&?#%J5@y<YV-F<9C-R#{omZ)y%nfu<xfS#jKIe^koRE+4ao)eCey0Jrb636twATB
zygAWm2Azdl$)+-j^XP4dqBhh8v?r2|`Pfpf<ouC&E+69fyaR1=SbURWz}P8X+8YW?
z9P~*hGXvH)oYv|;SO#ca$jb)<-z1ncMbE!W$K@(B(kHDDUJ_mv7c{|K^?9S?el$PB
znoM;Jg*#H+huRHQS^ArC-&e<DM$BTJx<11C8V9l1IWf&m^z)9%s$IN1jfyfd<IE}?
zg9)xMO|wU1By^DrYGq;!&@=?n2^DSfctt-ID}URhzkafNCOEUn3~F6GO)<znYAC2s
zh0#`4cuuPDj$8SKA%;pb^Y^&r-H@HNK4p+FY?3;U2nDCqzlEMSbs{|c!0wXo%EcTj
zHrl%8z}@ghWVt(<7d+W^|AE~RoOiX~Iwk|MNYIDMzSsGaafUAcyoXLv8E8tp_vXk#
zXXFXG{7O}Wv`Dj=6e8cBf#7e?kVoVnIkDnzpqw;XMGj)h;hvC+pfU&C-gRfON$2k{
zO!D^LU;G=dxKCF2eC_ke=v2kSE<4Mfpz0*x^D8mWVy-2hJ=R*i&A0ob4p|HDe*P5A
z)znO#Q#;Feil65*%JT4|-{;*#4PPe{jv}<<qIlElVuC=X-a!3+6KThoVhyLGaRcS7
zN`!zc8rxOAstsj~{TOal<B?WW(Cm?(Hbs5Vs)vKIgi_e{Au89f>;EX~tK*`4zP6WT
zfrTY@k(34%q`SM77LaZUm2Oz+ZjqGkjwPi81f)Z{aS`cOI^V_b@A<s^J<QIWbI*zE
zTr+1U&{Ld#6Q-F<$RFB5I*U*I8t;@Pt@<Y)eL~U6U+c%J`#ohEtpjZD!oHwh;MT9R
zimASL|6WzCiw_D&mZFU#7j7&fY;T7_0xE^JI2$21J|BuWLRZT?zUX(M{TY5iw*7pN
zYxk`()Kum+3@Ya=$s=Vdb6&bT5|iW|ySE&HQjABt4!L$P)L#tavmNoRuNGUim`0we
z9o+NT_P1a>4C)2@<VR9DNhsTpm()SKy^<>jAh)kEWJ$KhxcxkP8oIFi!kFR%7sV({
zCDyIEX6pxWw;q;;ntGU-6a$@9C)<NJ9ZFAh;)MVmm#z*k7Zu}fJO7l<AqJ@o?K8o~
z8Y6{|UA(grv4JBoD9CI>UUwl5mGp1wfpF*591%I~_Q44`bKiGWmqyFCh1lK^ol5ot
zL{UQ_Y8}4hADX~zM?R>Q%L2(^Vo?bgXKxJTJz|le<K$I!gGV=A6PfkRu=o1G*B?q5
z!IbY%?u>FrfOahIF$l^RQ_(nwLh!2TXr;W2;cMK+|ImQ62PpWN|FbU-cqlEB5A`pe
z`!Oik;{h(U0X|@bfV3t0e{kvSL;TVpz`jQO0GH-qgTn>19!Vw`gsb*%BMmfx<hs_C
zN7X{G%8Q;quNJ+D&OVGrM-A6MfRU0<P*Es`iZlQ=+(Du7h5v-(dqWkJBqAgE6ctNf
z9X0LkkI=Jzu;~w&eZXW-O(a=p?(bFl3n*eMmC(LsO*)<Xx*D+@*0`!c9T|b<b&i|x
zB#nO%FH{4yW?3Rtl-f}U3YrHB9PY|I)RzAT@k+|Vpy_h5tFAg0Tp2!a(-gs%(RMN+
z8I&B^v+efG-~YA{EPKsQMi;niwVwMo$jj1IpBhC`B1a?@DYLSm-9wd)b==>(EZ!Sv
zFV9T%6}s6d-3s>|f2xGrFmNm`5JiIUBlZ_{-@kK>j5DJ=*Bj~&ZLKex-!wE%XNdX<
zSvlPJBUaz)m24tF!?LOI08KM}csnw0$w|+8<RXnCs|`e5J?Xh(%r^a0eODhvePM2(
zYqUl5Gx=_<U)6PFymU&0jUSm+wtT(a%}0DPmq&GC>DzF4)nIrpydtT`YDi=@-9kJ|
zQ>41xG9Pl{Wt?<KiIop`&!Lbn9RGZqV7uL;T}XVibmc{QyI#Jp)h%64_qcaA=;weZ
z<uqHCci~kZVB?C4!}sK1&^hf+Mz7y0Ei!1uhPxw-#nb1oT%l+pCtC3KlUrL7`K{|{
z^!4zkSIjn&B__RDwxk66iVQ7%*CcMz3~)Wi`>4LZ9VYh0hhJtuqB1ybG5+@w<BNj*
zTjT-0nHJlb&*ypP0?5&F4yYC<?HFB)hC&N}R4=}hF%NAdF;0@%j`-$h4wX&7av40l
z8*u$bk-l}SP5e5YJc270w?<6O%~k$$0XFwi30xIpm$H}t;x~ITr|51&Oq;5lV?aQ=
zn41;-Sj7!cvmvV5serl9{Z%!n<tj*8Vbz6Gu*BN!04kHMvj0M+?w7VkXZu6`92Bxp
zAD_8(vH9mMaj}ZP^QTp#d>8jlX>N?~`Ywz)3m7uTIU=5oE-6BArS@Fo61}hjI`4sp
z(MIxRbdIuClx$fuEG4K!RsUTSD!ulO-zOWsTO0Bg#K9SU_U`=P%XFM2@pO4Y>!T^-
z9Bx&N72TGk*^bxjjaOf>@F{aLD+0OS8Xn4C-Ez6HH*fH{;Y%T(Fip8NbY!Gx8aZ0x
zJEexk;FDlY&%sHpvA{U2i;?Tb=VnrPF^HR8#+35{P!`=zF!|cAa+iS@>HvmJ&J6;N
zZ7B<vM<?b&XM(_Q64#>m(X*lVou%Yc@ovb-PE&{5rqm6Gl7hBOI4d1@y952QhcjkC
zb68%~#gMkn{7pYIUWMLQL{6mjlh#ryo@vd`dL5qj0)rJgJWr2x4mn@L*_K~flot9j
zSI|}H;v`Kq2ko>6=Uz1@qOTL(>go!#N;%y1^H9r~`uZ6(1#MK77s#cTz17+G-TBrS
zCDK=L4aC;);8n=IUuSXCIr0&YyN}Bz8rP{{W--Hz;rqft^Sanr(}OB=IiTuI(jt%2
z&3hwCR(zXQmNggAau6}G_Flu3gUf3jT^{l|$p_dh&RG;^Pbw$NHjHeUCqR7lm?e<8
zl4I<QsB$eeiDH9Df2U)?=lZRUm8h8GOH$zmwNKg@b?qKr$@8}k?@P?T7^Rl*zd2+B
zMLW<r;2Fysgmu=43G0?&g(z_G6mW5DO#c0OSm0I&2lH=P$~BzKR=fXrTTLYBTUrjU
z3DcK{r7k|_Al9|3d?SU{*v*nyTbcKX9S)Bwv)Wfc7y*JeQ5kXMMpboQOxhilQhJ`U
z9j9(kDB>Nq$yDUQT}80{b-|o@GL(pxtf2U-iQ-R0=PTYk11vW(*LxQYJgRd;>aWKx
z%?&_m+|Hl&Wx4O?jh)3Du5^URoHNp>ouaU!(1qR1Ip8!jZ{XvL9f{Xk#)#Io_79|)
zXU+k3xK|Z`GQ_>;D2H+iqH;Z)an|54C&SvCY?6><qWEiVJoU9zST)rLQPl02?;h+}
zsQ4*3<jc<vKGbV;Hf4`e_tjV_Gr-<^SRJ@_$b)Z<cyifJzJ>ev?`RD<nCdo-x^$d1
zOB5na)RA`rpKGx4*+fM&h(`Zbeeht}J}-gS`2A^p)kWH#XUpGd!YQbi`Nwtx>0}eP
zog}Y*Z)RmhxH9{HRIB&-%kF%OTvN7C`MrB2mo{e2^v&_4xqjh%zOP7L!X=Z?ITP^g
zo;xlOd1`j9c3#dn`2Kvnd`KF8F4{d5`HMwZXtcU<f{U_`CxYGf3*ejObOgSVotmE*
zTle;>{2@-Ify?X1R(Woe&SGPs%3W9zqW-GYI(4bDnWG&Wdi}pfa=!*5g?J<IP9j}5
z{S}e^4PV`a!?aa@nj|O@)TQBNz4@Nx`=NNac5G_OC)MkDU>ZSPk7@Ad!S_S%<9>CI
z0N@?IlB2X8X39OGSJXbJ7$CgegXEa{e0)j2gT2IFT>&rKx5Ql4tTpJ7R6_tB=uGTm
z2rPB9lfCBkQm;CH(I&$9Ys}r{`)T_tnq{MUhD8ba<G-P`i@W|Of=ViU!P(@oHTs9&
zI`qJNvYq8=(-u@am5VJ#w1k2m`nq;lve=?$_DI6&e9W%AmRX7C20tyIoc1!OIh1ZP
z+jYsD8j+gzAqJh6W4=y5?YlKwI7B0Ei9k5^47?AaXKg#{jX9>rq>TxhC9<2D;w>9~
zOOWrtBn?;@*~<k97%XQ&cd~+-F>^sO99h^><1^|%c?<0{RW_zDZ8?utUUlWgS;@-Z
zDk3?}<k7^sF!#!1Ys(>YwyQ6r@n%gWq?Y;~a&gO>FyvlQY4;CCO|l$TBFkV$KYX`r
zLl;t1gt2rgP9c^i{5|HrQHz9n^@nk{rDn&b4gOi01YaM?k7ARs>%EsVQGR`Ok3f6R
zfopa+X1ET9bIXx1u)7}`<V&^?EkQtNcszjbr0q6T=`Es>Wye~hscKP*J_Nlj{$I8}
zx|937;-yHw!z+J4XC0j=QV6qQ?n!Kdzkn9#P0?5(`55#MJ8CU$*9VpHDSvdh_Harm
zFEAoKYP0lp_WVA|cSq3LieIP@r04XrEZc2=+pMX96T@Y{nO2ZBu(M_?K#KQbABil2
zFxnA6&En|DvQrR`t*InTFn%uc@Mqq=x6Kr9&uxTpQRCB9hUej(o_*TrM58vJqop(p
z^WWu|(tIQo&MxNymp`HpWZ}85O>_Tq9paJhTrLN?u0Q`$cEI1HAd01BhKi>C`n4H2
za*3x~&>w$ZC$X(}sxV_<w#CU|nD-%O=?xi#1@AJnEE)-GyY$ugb(kwNU8lw%NZXs|
zBi+>9rdDt%HP>U7ySK{0E8?4N?E@Qy1yyF*rt+iPq%mu2x*b2Ec;+I?#okg;E#W2r
zIUKB;;I*BvJy3tFFBag1_2H8mvG1dpiWuCd{X{J(F%vIsI>mV+uO;H_$XS%$`5c0(
zh9UE#gpo&I{rQP=30^jpbI;Gx{ex!Lo@Ly0fCXa8d|B;c#-9dXPVY%GN#kRiTt`Bm
zcs$?4$B{ews`Jg&>T7&O-~_f%s#ZmiaqQY7zI?XP^gn)~O_-p>=U3hqZt7A2!dE;L
z-qaJuxIaX{Pw|}G)?ZBnwaGyoOs@n*xwsO_4yjG;!aLpR$tGwFv<9Wz<r;^&cP4{6
z!ByZI8mMFLR$RWwWUR=Q!Q#x~)q>Xh+=IWr_!5d!Mf+4z$@ZpHWEl9J7y1&Iy1MWc
zZ|7Z<l<d|$;<lw7?cDN=_rAN14Q#8XRB#(T4GJ_Z75OBXuy66G&UT+^R>vUMov<9E
zt@PI$eq<RLFfnQR!svxIRYP_!7y1$AD<X><ajoWsZp<UWb66>N##ZW{C(Annqw>|U
zyDvMl^l?P^-Y2|m{nA|CE~0~y5^IbdEWGW(u>H!#*IM^A3RXr9hU}w$znCs}I0@PF
zsz?WZKYupn^ynGhO{?s=`iNf^uSzw=GDDQ@Vf-=i4!xWrY0Z|$R~umQx&I(`@NH8!
zVa0F%X8p72mh!uf9}&Bt-b6hbmjLG@_?zI{<ArY9ZAM3xG0rF#^@e1HG75?!MuL|`
zl=xjTk8y{Yq2KW`+vtZe+07UbqbtWZ#bd*He#*5F#-0dCn-KaYEWZb~8z+iII%U1-
zBC%ndC8MaBx3&Gf@O7fVC__khplHW6d+_Z45DXq+3sCr6yF<n@Nj@Q(dE+TH{Ka$W
zmvIi4xAf-5v%~n-I%{$4`)>;&8g3Mk%^Ig|Edmeql%?RPayyd!n7Fl!H-3(v(v8iZ
z^g8z~5vsDqBVEw;yAD3laIZ;DNc;{RG_!E{Kz4N}H=OD!9I&|Lsbq2|U0JhmkT8?w
zcI1m$KKnIfnx<a@Lyfw@J(OAk&0|iF)biS1C}DTRih=)+1l=|b*kqJP@Hw5ck=-g0
zP57qzids8GLr`G)^@M~V;q|E3Q~lCgXmd`oGp!*;UyA8S*a|Cae6BX5Ahu{fns+41
z3XzH1;_K>wf@_9X&uc54ITjVp5O`|<I@MmvwUiIp)Cdm|1uHdE4rV@x45mRz1G8R8
zNT<Xclk%6JG=jymQ5k>am<0b-U{sGp@(&~b`q`btbl3FNguZKh<oCk-5soZimy~i$
z=;QDOHs{$L<y;X2hg0RrsY@P>uHEt0tZz|-@X=_16y-OwmK;y`clNVSf65irJ-~}J
zC-ocIRh8iWS5e-=%O@JJ{gSaqg@daDprnLRSq-c#$!oqZCY}LQ-%O@d>!UF;R8!>u
z5KVPSXzT~?pco+q9IS$Mva!pi#v^@tVKjzlf)({EG7YTe?9q*rU12(oS*NkhaeW4Q
z%1}qJjHWu$gVU+E7ZaWL)Y@}@E+YHifosy&l^py#yeyBddE2YLh#^GB*#sLtF}`%N
z_WuD84UfAB?9f#ZYYlJ}!4kD~Z3(HHrdKK-K&oR!KbALTHRQdF895>Ho0hrQDkxqy
z?lu`ifhKiHhv3tb9v`_IH#}+YI46$v$?J~f#j0|Cv%b`?Wf`Hj7Gh#UdZ-MFd`Fnk
zr~%w^X_PjCuIHiV*X&R7cldh*@-nyw-Y1@J{nU_mR~83rxJq6$Q{mjl*j%&u^O%fk
zaq9;0BSL|$rwdOCt_1&-;+^nXv<EClWP;z0aY4xc^awA!Ytt#dGG^!T!uE_ww<fW(
z8qK(TvMXJ!&GFUYXFIR+Z$-Dqr`K&CX5jDdcgHH{<l}CL4A-Hj=&?uug1TEV3)b1$
zn(-G~$|xWju}Zi{sT)dEMk^aBV^^C|*Oc~R&lFv9(D~wofmAbsO9_1LRg#iKWKlU7
z_QV&ZQBg(p{Ldg6uC@?gGh%|kQ{KsNy=mdFuOQ5gQA$mXer2L)QZC$8^(RjL&!C=G
ze=k~`v;E1h>OO1RQ&9Gjm-*@9V%L>ri9%#3JS8|I1vaR{-u>L4wHMBV+`1!v&gY|F
ztDX!xjg^pc7%RV@sW`^#pXP@|a|hH}?sol3RsPLGXtsKd5iICGYA{yzIInE&Y0o=<
zm<2=*oC-hG=?D<hS`Mu;Gdk?T`9Ni30>&4(?K&u!>v{?z#2gY|RHumVL31K`|GCsc
zL{~btnxkUfR>r~&G3K;;>(<sIA$;^$AOTh8_jHQrg-}j>o)oirPt$a{J~;OPP<TNf
zhzR2Yzxl5C1SngLbtM;e+sEwmY6MGlwsLp`+H}c-Q0xs}8X%Gm`82ZA;*C}AkMIex
z6>9|xpDPz<IbGT9-9&o`uo8%t5a!=!Q=6}S!ZnfUcsmUAFC^>wg-8^9y!h3=a#azX
zdH(^7XoUd|0R*UD<htVfLJ61FHT5R5?lDxJY$IFx!);0VK+C!Tr?#QDecxwh%Gtp-
z3kYyOgEy@vq9{H&PV?NYh|Z4^s8LW7;96}0+e)quzgLv+h)Q1;jD$*vBAA@h<yu3J
z$f3Z_adIfB=7Ejz8w#jyx-C&Q2tqzbvKiBkfgxns+<RU#B?jj37PAtKt&lJ57DOm=
zi97?~KW<6nBHrS=Hq?}4oT4Pk%fE=xMJ9tOyMa|d;=iH<0tQ9{JVBlzs>r8B#f84h
zc70idB%WS+XROmR*KPNyRlI^D)TV2Vq-<+2)U-u(fEB?1XTP{~0ka^V$<K7c-HNjX
zxzZ=rjIwWg#2tkmp~imvk4y7@GAJySI+>2b`J3DrHl(etp4Zr7&M|mU*~a0P$^3NM
z)bJ?K68s=8UJ#;*1cc!kq>7|M(it<T;XvAcSBaKKH{4^grZnlO4#bm(&fY=Zv<3PH
z0IY~O;)bvt6EMaAhez~YuXTGIulBOUA{NNg7<){HAOBRcB{RNp_{ar8?a`J9iH5`w
z4nT2_{5?G5QS76m+Es>ShQ%x!=z6OAD3UzX^933n3f2=rQJbjmuZwoDBY@vnhIQEv
zY1eYW2c{f+S(!P`lvZS%Hn+DI2d;}pxY$b&%&bHRkX;IZ=5b-tci;AQxHlRo3T*2d
z`n~-*#QXRHW*WjW85*#ARGB4K`lSF<!*swH>PQY$ybii|;)w-zgVX>HM=d!3lF(ji
zxs@l%9Pm^61r%d!Nw*$PBRwvAE-3kdHs+}}bD184vl6T<&jyy|1NKu#75Ep~N#o%d
zt8rSvr{!}U)!{G_9PE`fh4>Ng0V<L3$jAoBY1oB^nAa-;eUsNphxSbQ^In!({g5Tp
zt&KoQS6YAK1B4@NCZBUMdY3_xGK6&5!VP!W0!H$T{zELy3wl3oA`(JvZH(8QaeESB
zmOo<JOs~fl-)}AEz0}vzl4DVNZ)45IA<Fi^1*!xFps0GhoP1gGmd~Iw!@aLcu5di8
z7~{Lp<L8YbO*~GH!lY)a!8j?aeZYKFBXrsCPi5g}pw~Td_;q-;9aM%MR9*BAI&4XQ
z+MN%5%a-c0&u9dpo^^>2AHFQC^WMVzx-qeT^!eLkuEYdN1t`fXbn1s9&Q_tJ+A1<{
z7G{>4zv>uGqsCoKyP~aH??a)nZy)wjALg6U-Ey=U@xVi?_XZtlgr72fv|3`Bw@ANw
zg(9y8Q2NU1^1~>mURjDRc1By=-*MU}Ge3NeWl+gskT~%8-qtGDUYp9!G81Mt-cK4x
zlTtYQn@^oqklCxdy(m<%UL^*kSq1^J`2)nykXMoSi#=EOKZ{1`NjQv$?>F7vt!Gf;
zuME|5gt~HemsV9-ZKhEXk&-H8ig;{%#`kC=jz__=?YM1yJv}XWD#&y6)?WM9nr0nw
z)>Nrpx^)Cxdb}{pW)-Ln2zVnAp@-f`wqhC<ZpruPEdE#PWU*SY&-G4*E_?gMuOJc<
zgL$3%AOi86>2e)SFQMI*-RH?7E0qQU!l*aVw-Ys0&D2JYY&mxBHs+!b;n1=Ru3uph
zDi54cP(Ucu^Lqcw_N1D`>4?_JRqJIr4+qECLi^<gMa!Q-79kE|_!6bG`6bIg?iWfx
zpTNV}64~OHzY_pb<FPJLsXL6r;#s~|Z_6qx?FQH}MU|{b&^{^#{IfG7VV&$}v0i^i
z1ndY<&2@=XG6dtfxw%>SX8)`Yy`8DhtGA<QHRZPZ*`6tWb0i~tzT{$e-taqOm{p(9
z&MO%;hbMIas*P(M+vMR(uO+9x@u^ZxHYqem(`+(+Te4-xZoK3g1GKXtj*gOUnOaga
zCq>hgFdUSn)`9u6Nf)EGWh8M*)jjzR*%{FOm(2hLkw+f}x&z{vr&ySo=_wUH$>I^e
z;4NfBq2WiOK*vg-%}ftg0!9pZZ*O5Ew`py(GqB+y8NF?r4AwnR8Ge4y5G-fV1b+)k
z@7>JyQ&mc4&5gu?f70~Srt-a5b?w4toCC$V!{@^2S-V1CGCwSZ7Wx>iBn1^0ynv9h
zpJ)e<dv^t6i%Z3Wv*9r_l?K*au9f}5!9SieF&z;X7Zv>(%yLi0Lp#3tJBCFzIIVJ2
zrr+XP+K}ngOYV9$Z(Xhwv$80smG6*3f%1V5jA(zrFAiu}E(B*7_wFc6LYE&LGI6xp
zEkx2Y=56A4>oyAh_M8s)>S8VK?ca@&_6Zn+{6(x2!hK)gdo_d<2*SvU=oC*dr46I7
z*BoFkN?V9rV*FPR2!r`YZlSvO=A#;vj)zHeGbRP)Y>nrKRpVl*zsU63_<XVgKh#@4
za&6hIYTfF2r1twMVJ#c!JdN)~fNPNZ`N8r)z1@fV+jD-3-s3(RwN$YjALt$ljn7HE
ziln42C48@D=Ct=N0D)lZ&yk*|So}Ce`cQf3i~>te2MLA~v%J0tB?$FdixGI0!k#fW
z6VN%e`V4}GUbgx{D!kP(?^_Vo<e~4mh^n5s$*kLSnRffm^XJc9=Pgq%N1XuZm&7`T
z-}IjDXlXD74ZbHRPPK_coMHASVq{Ezi5Z~}3=RID1Ru)-l<!b0{DO@$476|EZ_Eh<
zR?;{0)mjcc_65w&)xUk@bH40>=Ejw-0pfd2M}l<9Nl+Dz@IF7Vv+K8h=&r2Jf<R5Y
zuj`$-3k&kb0y?A+{!<PJjaL0Txh!hW8Vd-sAOh$xiGA}riK>1-IV1=wnoRBW8<s96
zt*!F%W$l!@a6YDs-|4i@+s)BT*BL$Q(z2OhDQxgC@Sx+~mnDwKmIA69d3Ap1fX(4X
zeXx><0VT0)LHHLC{Uf+bLcuYet%vOt>S(yH1&pz@kig%;6L_<Z4k2RZdvi4z8NB1Q
zGLnF=$GsGZ+1ZEh%||nYcwM*Dcc#lzv_nBb61OJ_hr&}ToaPom`Z#qF?LOD~>~%&p
zsh$i2i5Og{qhTxziBi%ML2MB`=2grbH2znTk;<V)<FwUGsSXN~Y#JPV8CANwzC%_Q
zoMPfTKZ^+(QW02|RXj(_MeFK=Kd#=#4dM%yb8@O_S*{i6Ovef4-MGCvWtd|h28jNS
zm%hQ+W6E~H#hlVbc+n=<$#f};;r4nbnUPxBc_DpSut_C_KNHF=v%>!;UJ)SJdr~vp
z?{Yn*-g*5cyzr_H)f0Jv?5N3Utwb$bJl5^oR6M3EHcV?`jolHScyig}r%D2&S|dn-
zQwk7(PKOcHlJyQ`CkT53coU#%C#3d59D<vEP+DKFRn5?cI=&A96FwMW6<XDC=RIVp
z-ElL>QZ4A~THfPd#y%yR3+BfqD<n2^dXfOuaoQ;@o){7MsZ1bogP5iPp>1qzq-kTb
zH@j?(;xP$8l*s|)<7Zj$11b6PLT}59O`Lx<E?O{1!Sv?hxP1<b(|WlCx9D!hzyV{)
zwxwc+=ac{7DTX(dPx7i3O&~f?CaTkR*xgC7#5k455-f*sa!nv(LGp7Du5MWucym`k
zNNb8?sOI0IvlIaC7;>gt;ctITOR6h;j-EH{R1|P6Z#)re%R>s6D=x=z`1Lp$`kYSB
zScxl4_f`B(dtXJj+-X-<t7YVKNQ=H<&=rWsoV`s9(*QHXJb2Rw$LtCAkI!~rc-uJ0
zV>OH*&o(oi`71)#wV<W4jd!zaa$oxtON;rrr^>e?fQ1PE?{FM>sA)+)Sg1%E<|*;U
zU-cs_8KGNeg;#4lk4tRz*yvXNAAuUBP_V4&M8S*1q@?v$)3SU{^nf%)SX-*8wLhB_
zBd0Am&Fk;RWuz0w%x_F7szO5>r`Qi#jstuWf4F!8IyH{TN+9{3OwP#L!jG`m_Dqci
zdmG9T4z(w#MUMlrISg%9d!PQF7vlsXUeNCM$`FYCzD~Q}DX-ot$&dXL^289;VHp%!
z5#4_gsn7x~U{>&kdeR3p@7kApa=#v!{HsitLNwvQB;E3HO#FJd482<r1T%Cv1xOsZ
zuvQR7bE1z2;cCPUtprD_^FxT*@&x>kjzdr0di(s}4ry7)4t^)7HA<l!G7&@2<i+h4
zcz32s6DsjN*;6GhP%O4iWPB|;wVE&;KRPzHo3uJ@s#vn6+-rSJbwjW9q~xed-#FiB
z>vVF*B-?NeVz08=_~p)LE`8iu<Xsa%mw<BN+W(9w3mDaXyYppVz%f0X#TKdxN}2l}
zMQZR|%8{xLLspx`<MkX~Z#20@A%@gm2>GNxoc0Og6*XuGW#Ki5B*B9+>FN?miHRUX
z1vD!WbrY4(+)q1s2HVi|-X^Jc^N|oqn0Rj&dLZYDEX=9qiTFd?LLrfeu215p8teb9
z0CgP)7kI&mRTox6F-%2nk^5;PW))8i+pbd{cuErdC>jY>x9J<!-JK!{CJ}9N{RL=`
z($j5=<xWR5Ap;@io=*!+^ztsHapIv6`Se~_eZN%HJ<fjzvfdt))1HRv;O+1%c;!!p
zIa_rzmnkZoxOP0K(?b@tAE{EZNLzh()Z8wEzv1}j%xIxvVE?|L+1;M5Ut=%TbC#a5
zs&^(|33ysZVcnzpv$O4rRXv2r|E?Tip?O*b^ilApOshHUSfX_SNxfb=Qytps6|~=;
zE&5C1eWm+9g@&_(kd2TP`yU71<fbg{L?kGycloZ$t=#xgm7&Rp<B*Y8RVFDG|5>Ym
zEh&Jp8gjcO-QMTWp)v)n@tYtHWa?tX!S^rOZpB^UEdF?tvC0F@|G~5Ca{)PRM0{?7
zHiOPZ+{8){l9u>eO`kkcEib^6Bn3^=K2AQQ>klIz(qU}|z)B1+z11D#!O4zy*5RCA
z`fi0Lp7AyDz*NUZWx6j_sUyrjb~^3<+@8J!5DHc0!8y1jS&3cKlk-Jr@G`MFGHk{O
zXIOBM9ObeZ(GeO@xeRknmFsY5J^G)Mu_*+1?qc`aVo}IFFV9vrSDRbUZJ|y^NTQzt
z*M5GmNjF0-_@kj$a5`fzp+A=XPhr#`(`;0>5d>!yZVtiteh~`7U=C$tRc|(adWubR
z*4?Zcej;xr_X003pZ-6iODPQc*k!RjQHX}-aVi!lc2%!l#`twJhLEJm>FQ)VQ_y1|
zsv=of$3c;*JCw`w$n<@L)RV4<TS*VXvk?M$7MWUB8P%AFB)}GTz-?Kk!&$;^JEM;9
znK$;Mb<q?TbOgsFyC<B#trYlW=XgH;c=<0RMoID#D!HLI_w-}lk}^+~n4192&&R`J
zugggt=iZnFBpdr)uA}-NdVV5M!?w|5>9j@HBdVd}a}XqlHY~2I|EG;kNx)~zcr%h+
zOA8mr5Wa()=I~*6oF*RB8&5Qe2z5N?cYh&z>#h<G?Y0d&X_M4SK=Tb4DXFz(o!m=f
z4Lu>cr<VT&r%P^H84_(;5&DsdgTuoRy&Ie5wNT~y{+Lx2V{uFFAU%p`04NZU*sZ9e
z<vl>!DVBr{^8N2)+mQ3e=oxDhJG#3*>?pO4v)j>Rc*c5yf26!7NJ5r!>`s@mXwGxu
u?acbW6QTiv@*F>Ns6J8#ew%{j-xGL4SCrJ3<0t{BzZY_<vQ^Tif&UMl3Ef%%

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/apps-outside-k8s.png b/assets/documentation/1.27.0-rc1/images/apps-outside-k8s.png
new file mode 100644
index 0000000000000000000000000000000000000000..af7051bd473b45e9c57c9ada970b67de9b031a87
GIT binary patch
literal 54998
zcmZ_01z1$=+BOWs&`PJYbf+LG2q;}jcY}0y3`j@`NGXyM(%mg3jWi66ba%tIMtz>`
z-tYg<v4&Z*=I*%Syw00<N(wI@qCG-`gM)i0EhV7>2Zz802M2$Kf&@HC5SwZRKH!~H
zUOtB_9wglazC@d9NSn#a!!ZH(C~!#dNN@<SByb?$56+)^c;NmK9OAF%aBynyB>&#)
z!880PeTXF-_)i)$;1l*r0Nz0EKc5Kc@c$_>9rRCX1h#a9f9~PWVA&3?$K!zyRC_5+
zCpb7l9M~J)JZ%K%4hY@ywT82Xyqtisoei6ziJg%to4buYEEk-Ry8v)&W9n>3>270f
z>m=YV{P<T20pK3?nEf&3uO!Y^!jCoNl_<sS98D>C**MrZ9*dw+Qc?;znwSZwNWA!y
z9rz~v*uvS_UVxq5&CQL?jhoHR(VU%=pP!$dgNvPuixo)0>f~YTZ0OEv>qPy#kblaN
zFm*C^w6u4&w6mpzm1}5Z=i)5<_%W=ae_y}b>1=8CpPFo){&WlIAUo_Ac1|`9_J7L;
zvI@bT3aFSm*;%{5idVI@bQa+f`jz;9AOEMe-?<bWElq*;!m^2Q{>k$9v;R#mZf9ff
zXzJtyOaJ6g`oEw3Z+ayQJ7+s!tQ{?lrEQ%}9f8b$YWt^w|NklelqJLt8?L{G@AusN
zdJ0UA2$~T4zY{HjHiovv00$=uCoLiN+8ur;1=SmWeEOau77K+2{H?hMqkNyKHh{sl
z%0icEapVnOp7!ot&G>myk&m`^(Rj655k5pMUu_mn(q2qdZQ6vM1}he;JjMt9Zk^BF
z)@(4v%jv@`D_={<km*|gXMU$O!MgQ9?jc7B1{zV&e_dFsU@ggVKlY}Rkqh9}aC2(7
zH(Pgnv&(lrkoN38zqYovU|_d?Hea=12Pj7<zYoGf$fo1IzB!spf017>Gg~<0-8Si4
zvztE<@;X^~?#vLH_bPY3Znqjbe_FL*a~*()p6UQCu1OK{IJ$(|wfKayP1blHb`pA3
z+Rj}O-ffMKjooaKEL^;ZY7sc|X<TnyKWjm58r-j=Q@)Q~aB_P=3gxeExHo-Tb96r2
z)2_F?UzZYmf0}UhAUCyaNM&g1*{c<sR8NJ0*V|s>jtfOK^PhIpG!D+_z$JOXHF43=
z92#UUZo)5lr5uzwhLkDNY?w@!&|R957}@gg<i^(`eXlMls!GJd!ne9v^9Qh-XI@_)
zjlq7tD<)Z2ZhZDS+#jDXyE1EhGAAFwl+mCw==}4!&TUgIYRkIqYn|%x^OT?GvxuMe
z<w>DFrAt$L2oZf|cc~4cdC-osrl_EWsx^*kX5)5B7wm=3AcpMDdUBTd$Ljgb$PHsp
zymRzo@0FX}6>D6B7h9AV*oyRgFIU6k&rUP6{l<f;RG}eXhZg0NdF7!M=I^zi4DqVo
zV=Gem$B!4N>wo_EakIh<T5Z$7TRC9bmk`Ooz;G~arlmC#8eDxjV^!i(l%IbzZFYZm
z%Wi9t98SP`G)?XrK`wmtVth@iCEi-l$<eXCP^WIBy3^})M3%ityUJtM>-}}YF0|&o
z62*CnzOBuM%W>*;SC7|Ta%5e|g3|{n-H!{$0tBZ;4%X-Lp~ek%yldolsmT(9ahDGW
zr_F0^pw$ndWyT@U0ckavK9efraxIZvH7X5gKwfR73flvx*WKhQDdagi0Xa-HSygY+
zx3a6{?~j~fv@nz?WaYPKstU$(YrocG7AUrkWQZfTxIil{M^#lVl#+XTdX^O(l&>=$
zfD5tG1M?|h-zFX2<p(Pc(>!@Ho;Ln{TS!`3S`XU)Fkc~XKIf}Ql6-AEiL;;k&>U9k
zbl3l9CuD(6=nFyie@>A<Wscfy)_me@tseGeziW)#)Q2%y*vs`Dm)=FuWL%1vvQFF(
zR1Vmwuh9B5=7>#$E-F;C6uutOZmm3$4SbeEC2ru2n(DkaJ8hQ?5sFA|+MKS)&9+E_
zx@hVa=sk4LV_{NJR$i(QDgKh7LLqx#8%je*cV+snS}B+6o7bS%d~^$;zRRWXx#Wwt
z3r-8x{lcVB`NuA%QM)cITiPr89zJhD3qxgdd<7On(8D9*p-=Jg@hU1RMm}*?Nx7qQ
z4Q_TNXfMZ(??c}3>-*@vsuz2wg(R<oA111;j@HMpx_?Hm>Q@itoYZlO96RTo-F<3H
z4Ua?l*A;3DT3uarT<$>a85*k5`+T}RIW)gyq$<jCf-3_-eOlN$?_W1>(J9$k=B@9t
z{C;b6#u{%micGMVfBiGHZoRVubin4nM2sk?Ofg+YcbQ^roim&7!c`d6U;K-1XPng(
z?|Ad%p^`>dBnf?!Csk$8^Z%Aj!vUz3uO_25pR6(Qm3ze<9Vr-V^2{t}D$Kqx{XA31
zrKrj11Ff>6H|~zYzwpe*cvAgLC<-j)|JOz7irVV4BNi`QQloWOP+x!L`h<RQPn4}j
z`BAWn)>T25zB>J*`@M$!-c|^L>Cf*mnajE$e){cbIMlzdN+pn~sVQ{9bGzvE6UeG2
zTAKs@&u8)j_sgHGrlY>Lg@vnVy(mCRC{R@7d20=NtsxrlKYdwz50`_WS!NW3M@a2@
zAHi_@IJdg`EI@FtcEx{wtvbR9x?z?4#yNlHyzELt27OD}5*`ulzuFKj>I2478L6-0
zu1TDk5Vz6JScAO1PEtgjTF#71;LMMIKbHGtXreaoukQaEiW@AY3H-~0cFfhOGUF&M
znT4tBwRd%k#SME*_B$8lSV~G^Z?anQTV#CdeLYAC|7Y%Kh7CYWf@LSWQ1#cb?A>p7
zdXGk)P*E9<Byk!OFm|rRP1`pW8_8H&e!=k6^%2@LG^1wu@ZX~sEt(EqWaG7&;gOb?
zcOlJ;OS}t2#@t()x-iYq>y#XCf6KWthq1={U+WN9lNJvkKqie|SrwI7ms%C0sMoJw
zf97`Eo29nh_2{e>I{HqHs@vddBWO3@sA6hUr$u&B4Ta3U`0rID3X-RdPD^7C!61u0
zT<H#Xq;7bjsjEYuccP+00BEvYflIr1ziEn+hP`?_W^RT19M|CP|I-6F@Q7+kjEqMf
z$F=|-p@w#x;<T@783j|d4OERz{u7OPN>H8Q|JAOJpca*@@9YB=G*f&J9`S5=7F8NF
z$h@R`_wL;plMekq`_7^boa%dJDXrLzt{ii{-?GsA08fEb>dU8;6q^(rc8z#1uh!h|
ztZAv1u=K^sN}k#*uy>&*_J<9!XTCZD&Ks1BjErlxiXQF350Cc!?x9Qz-p2!ugZ%66
zXAVJNsaARjvg-HVS2FDUwk1nSI%9+v<ky32y7f};$&1Bq&))pi5_qu4?a8a@W}gO^
zYy@NsX9iY%@53M#&2kz8G?d=kHcVeEdmr7y(@FhAOp%LLCJYkZ!g*d9S=rS{zWHci
zUbXVnGa5zHD*+*>NvD{~!fn<ceYOkLhTh)R*e!@y?Y(Oc!PG{J_AD*Wud$j`@I2qM
zsp7Vsefkpj_UiP*(UBv+%T`?D*^CvJ>yAcS)hl2_-{4r}o{6N3+z;vXeX0HWktv3M
z2XsAHF(d-j`zi3xHt~-Xb#bW@x>yWMWnH-F;xqa77B$t8rReihhv#}er>aA=KD$=>
z$A!kGfId{SFEaj;1}da|7!Rx=kGKTUsG!*FRJ*LKtd0T!ymyU_LLTRHZl<ff@c~}u
zOk`J-41#tox794V^{*?-GtUiCJHav!MZ|+2#0c&;z7lZRGEv=}C`$h9cXxTzL!Tz4
ztQ<4mRj6696XKKtOhHPk(5cULQF*<4b1OMX9$J^1hW5c(x?-Bh-he&xzg;-RLSL2i
zJAvM4NF1l#-*kJ5c2~8%NjEYgOZ52p9s4E!R8V<2*X8=Ndt&<vO-;?Ce(oW6M%L2G
zugFv{1??m6yPw?|YMPJ=HnS`?D%s0rcUmKlXEX}k-yA0dN!GZWj;n`z4wi@Qx7;_c
z8s(fjNP}n=KfuwsJ2X<2HB0*4tWd-VUB0+BbT=NxTTt}U{%dJ8gR%M`8V_0ZZ@1J>
z^UYBu#ropa^%(6}j_4oybSY^nvW5q>@a|p{u<Pw8@eEUFygQNA)UaE0&AE<Diub$S
z)<0@RI8eyL?Km#fZ)vs-)CznYpn+dI+8zc99|*%|mS8R}6=^yi6g-MA@$MABm`Frt
zZ&Xq%(xMIh;j!OzZgRFW9mT5&hz5IF`{bD`#ini*oj78r!g+t%dCFF|_`ifMh0jUM
zOH|Pu<qoGQL;`dMKCS4O*UTuM+OHC}CyG7*1{LCL2Lu7x<a}=~^{N!h=e%LTr7@c9
z$(y*7{RMq;pA%(97M9Ab=h6_>PFrb+qj4hCwqd~Wb_6Qmy2CK3@7FXw0W81*zP<!j
zZJ{u9UWJcbohmw|&91vzkRw7Vorhbmq|y;_YbAW>z4G>dDsz<TbdK%BZNEOyax*pc
zKnheIN)?tIGMEk!I~<Yzt+gn#z*y!nA3hj&YHie<MhY9s%SW0D`^&0wAllj&sF$4a
zc<j}!drq8&Rcob_Qc&0lzufSV*EKQ{NQp<c88`0{ONoehz`_E-0d;;G`1axRXKT&p
z&bk`9(Jpf6dp+|_UM|W=4~Q0(w1fo5(2SDPDJ}UuPrj}`|JsK#vOnL{pvv=cOF$<U
z4%HpoUw_@X=`^A}o5^QgaDh?%(Zk0V!gi|8v}}JG>kr;Sx!H4TshADuPeL{s59q@J
zvx5#@=i_E)b+!it$&0ZG141-V$V-=0vMO|_28wmllZ5UrR#N5Njo%k)pb!o9_gAWb
z#jyh@DH~hL=?n<Aa_G>f8a*oLs}X%9?&Zpu*_u30%i{<u6pVXoQwjCGm6@0Z`^DXQ
zXcML0yvg60uIRRNI=fpGx#)|2lf%UZn7<4}GdN!qT>%GUTXiz~liKrY+qpNp?F&e8
zgtN%3_UvBUMKy)XAr!t0+~$L04Yf4zI0y0u^<iS##d={64j9<<Cz?=XAIRbTtB%}2
zfbKZz;GVLgl*Jdps^Pm)0!6Q)6|3efiV<QC^d+*_7}43b+`5Lu`iHoGR__B08df(N
zlS(c`H3V<0WKN$e=eng}l1D{ylmlf1LT|+#I6BFb?A)*eRgloJq8wHXtBn(|zegFk
zp{!YnMTDt67^rXVJsmg(We>3lkPuZ<`F66MSyk9gZfiM=nUY19^nKUL!6%%xV$jHe
zrWE(lqE<SChy)FGRf!+ky<+TW$>{q2io8=2KRVG~R5qkz`;Vr9C}C+-TYtPcZ@G7|
zd9<hMs?MpQZeZDpa6g<OuKT|2GZO>_)P1;i-+aAi6?bId79Y^?A$f|G)crue(jtcP
zf=q@Kk4x?Xh0mEm1jYKLj+9S8oytighkJ%+H<=q)i17??znCt@=xeK=SWUR+8{P?M
z6jZi8`jQ*m`ZoTKh3_en&jd(vpb!&D$qXwU6QUy3DT%uh3;qn|SishijPF=^_5`ED
z1CLOZJX1uiAKg{uUwdvAb=GUYX##;C??Kk=xY1CK>3jU3z8K%p;_WD6?iV@o$!4AM
z1`4<ggh}c4>w_t3_zYaf>q9jG-KU(kvO?DSZgVbbo<>3z?EweV=4l?FHirkG@fiGm
zR*}vk`KE_qA#=KDkV{)5b)9J5DLnh<Ee8;Ml;fn<-M+*S<gJ#2Z|LNvd*yv>$1*L}
zsnpS2Nn1||P7tJ#E5D(v9_A$5Ix@J0N^@33Tnb?7+#4v51{lkSqYuItL{@(mt81@P
z271znx_BK}_QN)V7oTwdOD&+AfA9NNG0~QwZt+sxgEQ}ogQYY12?3Rrt(u)F|FK%B
z5G%K|Z)M-TPlv@Zr5zl~TuAYd8F)fT9B_re?XgDhLx|Hs-w(ySq^KT*BZI?m%YBxX
z_?5(5*&1pY+1#n~jg@v>e2P}6z-?z6-I9cw<Xd{GF+I$Jg3uWZ=FX}~y=~Rp43fnz
zMB0u<a|>iNim7C$QLrb5oINV~N3+Nk@6PttH`(}vyGVo^9vbh#T94pgIh1K@49XqO
zjD#L|{v*5If){gb++GIs#pG3PjMCH5X<0hD5X*XL>0i4RE@aH+?#P7uJd2~gmOD@i
za9*r!N^Nl|65SLi-Agj6sowB$w`f^U_4)}Y&p4Qh32-Ol=0)m#M=Tz&vLu3d&WnO4
z*l&TUUSSZLJQCpQ@ZR9oKRY)A)Ol3aO@7Rv^^_bfo4vDhFD#gdvW6%-_zZF?O{s<|
z>QELww;XG|(B|^bj)vsmiq;$NM!lU#SDIpFT_fgL2oWBQuii^K#kwA;vD0^|_~PA(
zudV@q<4GMC5o|&nNGpauTi+joveSNQ2?>BVMN1%Kwg1@OE}(*Vzsl~1EjNe)iC-Jw
zTW~hf3j{%aB5D=aZ!sO>tAE)B*Gt^DJ?O=WLwxe^?YfeN@x1S~4J2q2@H#LU5|AeF
zO_0QAV|A$ljIMU={GjW?)eTsg2uueWGgTF_^`2Ml_&AghZZOum5n;n}tkHk>!#}&7
zjrwI&C1KM<#u(*Ywn$zH8R>#PVmnlqb;l`gY*OS5iceU%Lh!+HGdr=@V?D+EGGm3R
zy|QrQ*q~feL+|d~?|#yFdYJ81J%$dn5+BLdQb{L(cH=q_Q)I&uBP@JyF=y_=z(s7L
z{Aw^fZX)#Ah)j|#UfYHJT;S2NtQ;+3!~mtQez&6_Y9$Y-^f|P1kI78kXvd{i;U7DE
zSPGQ0Y@}EN{Z3cZegk;4&`z3gtw;H_t)R@#ftdiGP*q67qe7<UID$E(ttnO!SF5pl
zmu-{L9C<ZW@ai|oLaM{3SELZOHpI>NmdgP<0Srj;r;igF>aAzz^Ik(L&2rg@#fH!B
zFNbcKSS`9MYp3GHeaK;IY7mP<KS4=zNgwHth4nVtpSXQd7T&^w5ajc<raOd(C%FBt
z`js~AqZ!4DX5m|QosD!kDmaSG%v}&43t!m~GeRG-3cI*{3g5i@7bul)jr`}QKg#U^
zlw%+tSrX(_m~<#qI@~%wAgAHKV^}lm7;dG4RD%mexF}oj=5P`WhDxPp<FsZKyDw!l
zC*IGOoA!a2*jP{5A(QgIMhJ@llw%6U>}<1t_*@VYDxC1eX?+kvx}0bHzRFT+jYAQE
zjXCFAHoo9Bf^Zy77E`g}qFT<j7}eWlkZh>1g4ukd$LSF{mr1BaC*nE}J|PXGXeK;(
z*$Se%@yV*VY=k)3^1TaLO?J<Z!KosVnix@8Iym&xM71s9FE1iJ>BX}5w=?EdvKXCg
z2$R?kT|0S<t4$0VUH@zr3pDt~m>P7@&s#v2_}>F7bi0Q)sNcZel8aVYcy9Kms)+AR
zEww^+v*ynMq#feEbh%a|V=en=Wm$8I20-h9dk}Bl2`5pU-jp3oM%5{5vmHDzc6--8
z%Xym8E|*|X!_&re(t)e^v^<!K5v0@aot?*fZN_dTDQ{QNaI|RyGe&B0rIZkc*~b!Z
zZBsn4?8pGWVn;7o`(Hcckp!GAhO1`PoA_4Yo<vf9M~NM=?VP??5rsN=jS89TicD|7
zCa<rr;<;X)+En2vf-jw)GImby5VicFMyA1f!^o!Oy;H0g`c7<E1dPkM<*HM^JY8u%
zME;T_$s0FQcQ~ElIra|+CTNXaqSGLMw^JiDOjr+*fNG9lYuR^`-&E;ELJi<~U1K0(
zKoRi0X0f6;iIHb8wt>;65mhfsaG&%T`0ZI!Q5h(D6)M7+!c*8Fwq^yU`Q6nSN8#%d
zP7q{GR`qTC__8ZGBtYIz$gan-a5YiWXlC(}R>M`~?!s8nM+18Ya+pfyt0pIjY%_yT
zNGf2zDEdAb-z+L5bFpA3DHIo1?TwhH5i6mNJw)%cp~J;$)qJYdFd%No6#^x=Dq<Df
zo-9eU9L>?Zt(+X)-r$ZCWmVFuR7DNL8=<ihdt+9cx_RsAC7$3)i$dJh&tm-0GTcQv
zJsZ2!9N)@va&VjWx6cZp!)_HXcU68ap0tR4h#hL&`ZEBl@wVmeYP-ngb^$Pqtr+po
z3_SYRA=8t9%br)Di3v4}h%nF9f`Gt$bVYcE6mj%fr?>4CcZ&{u?Ps!Vbsg&_@l*SB
zC=pf9vf6ih@mAgTrcP#^hI)`Gycd%ia>~m`&@%Pwo%3?p@EC1a53L`J^qy>vlCj=y
zD*EA=uvVb&Vd61z)P&D%n{-E!O*D;N|6s$T*HNUT@cHaxX^zr4aCdH8(hbuCcA&~y
zckU&EKdT%i6mB+baW89~ybbE*O<5{&^OOEr*+lny3U<JyJ?p=Qgy{Ec{_?FqnUa}m
zpzMS_Sd*v|mtWIJYaQ4mY`F+pbp+EQ+nrR6WW5g(oaq0^?ZUZ88%IzZZH4~w#f#v{
zGD2PF7*kV7Hex^zks&GoCDjy8;dFGRE1Icsfvc~boQ?&Q5qQ%TNqDWXG-@c7xYE-b
zk9wI?MIbdjs0oj23oSWICSN-`3+wl_+?|$0y<>3j+a(}u=<HD^nFWNc(o27WL;(Vw
zKY$(t2^YnrT#6@*czR%pK;z|sJz!ZFhKzu$z;sqT2-mwQfkq~TS%;F^Ywb_z96N3v
zM?M5mh<Mko^GKl>4BZ8hl@d`Z&3#@XSEC>6u9}V~(1A|2+_}`<9Q6tBB6%VD1dQ+*
zw8Fg{MTvOkevsa}W#||X5WHQgEeewMUwkSij5tfdkf-&v)&fT-R@4A&;eZ-}YZdbw
z8}es{uZ6U6L3(gAgf^ZMk~tS+KEH%6+*KFqHmJ?}-TU-?%iP`)aJL99z?tDOmUbp<
zdJ7!^Y!znN1eP*9aFZ@O_BuQ|Xtr!;PtVgYUACjM5m<W(-vUIvH8}f`Z96P)cFdnu
z6q1%!PU%jbcwoK7kOVP?4@?p3=4QzH^%BKCYF$R04}DeEJux+e5QI)DpU5}%V|rxg
z6hRjmw*lwv$_Y4GBcv)1aM3lg0W=USl|Bv&W+>|yHn{kh;g8b5d<PhI3K_;8W_xX~
z8K6x>z7|tF^?6<59F9!`&`l+5y}E95t39AFWNQ;@aSnc+Ndr?<v*GiFyE8sTIKhAo
zyQWh$#b>i>(fsHi#2=G!$Ds?QLtimBkl}9G*b|DU9UUDNnjjfOVzP)XVKL+>Wu?zP
zj~1BOOCX36IUuDOjzGP6KcY^a(V0!WAm$1n4S+$Jeu*P$@N5mCEjJHjikPO<6G6-k
zc&LR)_NPbYoe&q)V(T11?XOpaQVmJzI1~7z*{spVfy&6JxRoOyQ_HQfyf%vjn`qJS
z$5^@EsuZeiMqgf6$F%6UjH?#sj1Wk^C6xU~w=YuqcYv-S6lKg(oN|^#koO{2-<?|P
z)>F4Xwscj*Fat906h}&FZQfdyS(}l=<8;Cd@z0*4gb+x>m2oMGTxPlKh7z}BMcoy$
zvEszO4;Qgt^fxaisYP6t<OEFQbYGBECVY)nm7MYtt51?@p|4q?*q;WlroxqnN0RUj
zF8kNL*&%pKfSF4UCuN&%I#H;(Y-dZZ`(74iJvkXS9d?l%0Vda-XlE^H&hobww11o7
zk3vaJWaLDdB!>gPk9Q9SFuk>pEy$YV9M}x7>K(vDpBJ9m3Wfc#*1yTXvAy7%bN&#Y
zhfaUS*Dd>1AQ-QG;dakW7+2--6sg!g-U2xKj3}>wicrrz!}z((!b=BC)M$Sah??h@
zFb5BbqGyGDFunFS#vCo0g<?Hb+V)9MCM~Vl=o2{ce~?&ZS^qHEvH3@?5&w7%zkLT$
z-1Oy4X?p<3`8&3URR#W9E3sQ-*!`~q_4|eg{_myxdjZ4aggyc#JwvnX=<DrG)dzfT
z^w&C>YZIl^|5c_a=#!|UWBKA2l``|w{RKbWZ$QL|M?^%#cNho&1iNhvx6Skr>po%o
z4?^&}&P<4CfQr`MoALbdxuj`)E|c$AmI`5gK%kK33xoLC&)t}l0B6QxmW0@R9L6HH
z_?Zt?KU$M~C?QF7(O7AeJ@0yAN9ZI~pgFz%mGE4J+Z>ydWfb&U;hTa(;Z`j0H@5hA
zcv1=qQ9sw$WhEtpo*?+Bs>Xj7@+dDGIC=`qKOE{;bN#lr#YsX>7#XEGq%Gc)3m2|0
z)IJUNLk{J9JpL)AK*PnR%KOt{Ug2zu3Sbh@CYSR{o7$L4EFNY7W6+FRDR04y>!lcH
z8JN>^(l)w!<GU_v^gMGPp*93;6ent9Q$+gIUetAep4IDYCk6mv+IRu{Uep;|N=ho)
z_x7r%)Uf^MPQ_4ySRfK=wQ^>NXaOQRfe=D?_#O@m+Xs5ZiO#Q@#r%~o*6dQ*!)sU*
zzJ-1Jx=APqKw4Nt5C!R!pE;a-JvO+uAM$Q<kzBE?Vnn&=;7m<-XR69AN9h>Z+3mX2
zzZHKF?V}kk))oBt)FD$221prc(FJ|2+qzf2>ZMjLdXXyRGNSU@x8jJeoZ9W>ShVp=
zV1^zkz_F92-tK5_bLU?(Twb1}X@|*q>v*@5tYFh%WrG)ysvTBdXabs-RM?Y8#;eB`
zkmBIyKqisPpSatj1?uc|fTl7X$&z*s!~pAsZb=k%uErOYd>8Mdh`qhMMyPkbn5M6?
zq%XqNlJ(XJX!R?Lzj{dpkAuPr8FidF>U-vqulDARRaR!c(BegTTMBYtiTRzD?IW*O
z7J@w!(v%Otyw+2cfas5DY;5!&3|?Tom}<vI+&(B$x5GmaNQj5^LU9qW1_BZvgfa#~
z&474K>!B$C?Z#_Xm}#QPt$4LklZa6Yu(Ej_pY=BKt@VW6GT-REa%{lcO!`bm_DVq7
zQKei(V?%JCkjO1oln8a~t48HWm<l5kV_fD4h>?}uL0C{vZnkm5%)|E9>8QWZ+{9us
zqxiHo2Aug()Yi6`MXU0AnBn21Vr>egm${5gm_bVO@tuVO1?t;GI6NW^4H+4kpB?XT
zMdkz#jg|o!Sy9MQVLp_wH`fqS^M&=sTG`aW<IU--qc3iLG~@IIx_0O+Omm~2QZ)*~
zS@K5OlLE6+z-sUT=jSu8Y8XcSB>1U8KwLvk*G1pEUvkwn>($m|+fWw?&WvsCjb~mR
zSJywitR^79H(_~RJ=h`9Y!Kd?{9Pf&A04u_^@jPHg6qER@d{mO+`N7JLoNWMs+pT5
z&;k80c3{kBh_$<0Pd-{mxp!%j&`=-Tn%5r@aLyo}i^t-N6?MjK4G(VK5}eJ|e#ZFJ
zL5Ir;(?iqn;M;O@&E5x0Okalk+Cz#F&OBpheLSzpOw`4J!cWNZBKJ2=>KLV8Pj;qX
zsl0l1*{~`TN+L~JkGd#{phDB0siLF9GCe)5r$$u!sR>w5YSpa(Utq30>&3b1llys(
z&zA8m3)EYV<QV6)rg&!GSBLc3yx#Ah3b-Us*q9jXXN+VUtC#r90%CBu5tWp^_d}qj
zS9X3*@AmUxS7N69xzp5>?Xe*%3O+#AqAot%`JgDm2pEdTTWI92S7*D-WP&P(X94XG
zX@>hz@$m6`mfAxQCx~7Fz9`-Kf?tcN;gj<+Qan&XCv9d}-`UQtV<)=$_a8X>{me}b
zXYszm$oZmPW~6AnyJplhSV7=ueh%vEbdy!Gvn}0{IKA?nK~t{!b&FpujCmX#A5ZId
zHJVn)S87Iaus8yQZp}!!+Dhd>oDy(iw?xRZdOEG&JQsY<HCIF*=sHTUBTf_p*nbB(
zt453OZ9pjCvuLsTo*9+!Yc6Yb_C!|%7d$0E5|lh)52B}saNs;uOJcs}a_h+(%_TMO
zoMor*S*K=V$6#WS2!kV6Blo*;V0Xhd0c|hn*Kq?mVbZFPQb|dP5<oj~Oc*NAXC?eD
z+9^~#%ET?d36wwCgVqd<KL2da8o_Lj8JOMqS&FO7B{PDU3nC*+w2!DL3Hl)l$If&x
z*G*(V7=ca1%weV^MHvfTBuA1B=Z`S~VD}=;>by#cqrHP!8Z2MX#ULgLuN()`6rwS>
z3oU{;ZV?xyVHq&sIx3U)3{hGso;jCiRc>S56qtkqGFVv=Zowx4o(O#>pbTV;)P;eD
zDiHujE`c=)N<?f}9N0QoYR~q$K06zL#VjnSz_6D1m$kCNT9U*r06-G+PeFzNx+mQK
zprbpmcdE@DI+Np|-u4BM9!3FhUH+VJSUBPdBZ!Fv8ECLjLEp*Et}0f<I(KcXXs)`Q
z0EI0P<zHR@sTaNLK?GUcA`VKya)5_ce_XfyLt=h|2sASjEMI#&R&8p?nlv0LKL=fs
ztuc`xM=&rB0Klmj{_%(ilL>Gr%&>f)+JT28LCSKJY;1#%aOG+^Bglxv8QQ3^csot)
z=Jl)`rM)JxL!W)~6wS!)91Pl~86H7xJqjp;H-4+jA;#K;gNFJx5GHk=)Mef3pmb31
zSVSl4H#A{P0$#BeIXnX^5edhODMZ{cBbE$si2rdO<x`vbYOeiAj{wxQoq!#~2+K0u
zB_Md_Pv`%;)L;XajA+rPD1aQ3;%NJ<8!a5c$?EzTHk!j=4qk(ZQuHpY2->(sER^u&
zquvR1lg>N*D01Uef*c`NN<#<`<)ZZG1Q`eEawM?K*H1OS+or*C21&Kmd7az7Y)BGI
zo^B_V(f}-G4itlk*3SyAZ5ri(V!5U(24u>2d_p;n^Wmcq(mAUyv!WbzG{4Z%Eoy&Y
zwu5!=7LM-eiL`-vK?5Zj*!INIM&;n*;%2Lt=tbGEzzivW5_ma@aL#r%qE{T%N{?O`
z0O3E!l}Nr`AXa&w^og7P$<MI9Wt(tQzdPTT?8s;2Oen1|yB-!;=TI}~2YQDW!HS22
zf(YM8JkZzY#4`s#fk-QYp{0OCSqz5@IOQ~(Le%WCa4Ew@wH6i;nGa*M2FN$3vvp32
z9lz*OLFj}cjh?4l;XtU9Es6MP(ou4Jivv#xPp+<jtBbWUFh)Q$6T3CZFh`2Fo4~Kz
zi2{}9ZR<$3EZKO>S|z|__@^_^Kt$aAcs*-V%lqzoPW0(<-)alSi(hhabF)L19Zxot
z&p$;@)vpadnvQ8`clfC}cP-faYZyc+!Tn_j#^_x{XsF;10IdPJ(H9x8Nr?Mjm9hf1
z5W(|SQo)0WNY3C9cMz2eesYUP^A~ezn;B`X5Vk+H17&cy8ayZq=kJ<2cSr$05;p+s
zjHvcFuYjza9D(YxUzR2Wt91&(*}=9(WW3OQdWHH{&LOY3=<G;rKXsy=xy9vH*W@A0
z$i}kTX(ciu?5Hy+1lAV^%Gkt2FM!sQ%De2%er(akcnoVdSO(6i9;gy%cf^ypE^L&K
z%SV=7xhfjU8yl)M3WFgS-3kQ2;7O&EgVu-wIFXDW27v>_;Mhn3x=K_|(%lp!5b!J@
zNH`qbSP`7ggjSRi+NaTsY|Q5+l_@U@TW5IRDL8%n0z!wGv`U!p5maW;&HNK%qhPlW
z{)(WrMpl%<C$BzT2_*@_s%Z^^>%!ueS|GL3!C0ZA06)*EEfgs2b?A-iv5eySRmd<A
zXidW?>Pe*Khwf-N6j(3{K2tmd<Ny3zkxh<^(}{??W8Ld`h3Y1^Ii^B<To3Hi0I60|
zS&j*Nl@dyjZHD}k9RoFWyTd6E&HuZMfU@8g?MNy{oLo>y`M6wM!|RDaA&a*F&neQX
z$My9K<>1#7YBSXg>Sb9bFF*cruPh$GJF&EB1agKv2gy?bLVXdR!>ZnmC)<Y{aNUL-
zQIm{O1CBY@lpZNi8V-Kuf1lq@uG-s2{pQlXJ^4VyNHKMEHWjeEi*Rw8m>tn!jtWmS
zTo+CRV-@{&dAUJ9aWro_gtbfnbqxD^Pfs56*C+iGpQED}r@BDD5(ocEOs|-FLK?-H
zD@&+=y$p}DC?oY^6|nTXHwWqnNd;knT-b!QCaI|SeshZBUvqc04+4W|0J_HhSIfbs
z#i^d(r2$pP0jh6Ec`a#Wx(y#0p20mRC<q`ay*q}n<tW}tH~`**>*q?B=T`rW02;iL
z9B23EoXP=XZ8}I;7+QDG=*)6!8&IMsF3|rl{xzPm%Ov3&Ky8!*!~~s%et_)wkqUK?
zJ&(x&F5*4<JKvvAkzq5<8sg8NlVq&WN7csskO0yvW3EFtEAWf$fyDw^OEQY$Zxc`~
ztN|uDyRv?)ZJ<#zD&_ZPMEFxvDZd&$d|rOOqmq){8L8>-mCOk4=j<eP`ZVGyE5J)b
zT_J2iz@eSz_bc*<Lh!r&1}P!Cm877vbWNSA-r8wLwp4W)zzB5wT`kqVXvAkqnlRaj
z(j`-vEc@${K!s;wQ+A}D`n3sRWBun^06fDBvvy(FM)>Peeh&DTakD6{|HB|kj}kR9
z%A}#CHGIB^n+u>J--J3{tZV;=W`jiw?usH~zF_cpPW#mTEkPnf9p}zJsQaI0`P+d|
z(FxfaU+t#WSx=W^19ZNT3UftbKy~d?1AY{2-~DxclcN;743}5RNhCo>Lj$J)WFRF6
z)MNR@&A(Ft_cyrd1xbD)v;U$Jzk7v+2y=nk<P8Y_PkIA2&U^3L$)MIwAGSCQ8v*yT
z9ih7*QWk~txVnEx1h!xpvj!G_c4bs|nf}GT{LPkA2ffzODYO5=4odkT&_}&~|9p96
zSy)x1Z=Ukm)j@75m-?RyTO(UTv8he^lQ>g#0W2}`=Ehs`BQtE!0X~>+=gp5L5q6L|
zM(u1yW%{?D<ha?|4YqnNb-%O(P{a;+dHM5uGA90LA3m5`muh8)Uq@N4VRDQ0|2~dT
za`X*rl1ag)<(rit-`_JIEn14wkyk^O9G|vXkRsr6m1(!o9Gj3pP*^>!09a;|Hiah&
z{42@UdNZmr4wl(>u+ZdxE=oKw&RYM+<A668h}n%onF*L7%QV*9yeK-{Uk7JYG_@H^
z_I<?7-e1(aILtxa5_^Q{dpz;?p9B6JB}575V&ltu6M%`t<+i7@`Qyt=2F1?m-$;FC
zDA4K54KoQR^;m8CzD^(ZBWH)xm?z~X_s~=>wVkj?<Cp$HaUFQXKRjx~5;q?$V&4@Y
zHVEIFujm0q+he<L<>mf-`RpnNaP(dl*R4JB0QfA~`T0ybx$7Q}CEyM@4$xpEoJt@%
zqueAVBNIEAA}E{4rrQxwV<{K7@#^|)w@4(zMn5(>niB90s|F+AHIpzsZ3YzYNRyWv
zz)y?s=;#RMrE0VI(nh}uPctk5+T7eMx1AFJ$a|gYFln>?QMK@$sCMsC;%Uq4nU2Ya
zaebIg?9-;x<-&Hk5qkn7-|WTq^I~V{RKp6wbjvDbE$ICkZiZ5QhHQQG9Q&erY`(1Z
zmMVy6n>)@WkKTlVrsG?*Mfl6L5^~tjNsaYUUA@k#>i|F(s|j4(bf(oaFc7c!?DqA%
z$2!?|Ao7g1ZJi`Q8^rj?W2tiDnksxOYp^p_#^t=BR4@p1cQu^7Ia>M43sjxy!(m%L
z19nzc7{jRtV5!_xze7Gl#ijcmO(o7kE3RH#R1^>Nyyx!r+7zI{INqL4%6i{?jQ9vJ
zO%ir?tP7a%vVqd3v`W5yjjmbng{pwM07M+%Z=EwJQ~2GKjYrwG0A+JIEK3wDC<*L@
zjl9F9FSLTOe?JSj$WSb60OX4qBZ!=JZ^}X$W)MK`Vou>9@()S|e|cEr3b?A@B;h_H
zW0DJnj>;=7WT3v*`6k)?F|FHHo>57rGx&4l1b&mBMbJwJ=}=iL6SC{`z57}{)_{xa
z+_Uo?@$~x+@)cUfwrf_^^(>yc^r6?=fm5HJS-U^aR~&bb>Xa#kI`Is`1pXLK?d=&9
zF%57JdH~Fd2H*uG0^R829uhM4c@afw$;jbM8$P4GQDIyvvk~H~@ghed<qad7Eiw%~
zec#WX53GG8cp7|&aJ}vL>N<v+8vVTK!v+e(-Ue+DM~DrU(1BH3{T^;YX_Ah|YJ5Vx
z<RoXJd5TMdj$;okd3M+A`%CLV!F{2=apflIvn|0vc&o=m7dSe}YN-h<nvXj>2NQ$a
zEZQgQ>QcauCH;$yVjeF<3<_3`ViAv6mgaUdbE);_jhfG674_aIy-^(ZJkzxa4?MI!
zDFbzO$Xjw2==0m>2t8RreP^f2=N6%fylPOh?ur4ER-xn|_rN<~OZH}nhy1)fUm(P<
zV6>lXOZKdfl^pVUW36Z~;9u3r2B_*v!lKhuVXt0*9I;zP#-<7j!t2HpR2%`!-W6r7
zejhWBnMzCFc!Cp>-q_8-U{pT&&4rd0K)SUXMvA3;<Tm$YWL4^CVrFiNBmKO-RZw!a
z<;O9@aoxv-D)9-9l`W<jVPNsb)e61-I<>sqg0Wb{5b>wtu5jnfSV_AkSA8GDw6Awa
zvC2MIE{poz+2w+%_B;k-K2v#I7Bg~xoThm3DQWmrVga%qqaC?@*SI^=lv==CYLR6z
z%r&EeuU%YR!lbBOWYKHXxVs$k8;NH@+gCNNf32&_YBgCL4+P4kG&MhFW3`Te5XI2x
zs@`gU)EyK)*8xnaL+gNK!WjrU(FFE7XqyyoF&L$gQ42t9XxP~m!@|OVb<nNy*+Gw0
zNo^4W$@Gz5vQi=P10X^YR|zGFOLSQ2>RB5|E^0TBE~8KJmnE8g%+1Y>7)CNXZU3N9
zS)dqcf}RxNMYKVs;ggPgDau|HC5LzABsey6mbeQq%ubT`HYYNc#mj5#({dx?&oO)`
zwH(BV!xYlP`r0y`Jr3H_q<kgk`g=lc+URvtw(s7Zho+`KDB}oq%j4APvR7bjvsJ9=
zGsVOGj;ncnq;+{XL!sULbK(B(oK+p8q8nx2_i8h@XbR=#U}d-Ql2@Ig;>|b{4AE01
z<+V<l1$Y6TiN>f4P*`LsAcRmz)cYE`kO1(-1h+Q6F_$zxPUf{K4}*oUR*^E#rxOoq
zy2bg(C$MTb?dFBL+Y^h!YfAhs`}7M#h`nDnpH-D;Vv2jV_|*B{dV1_uO@c9%-8bs5
z_Zph!4>CoH5%$y&5fLZE$H|!VOb!;?&T@pd4~|0=pMiaE_!hh?%+q{mnVDtp?#^4Z
zF~i(LZ|2XN*N-1w0CYfu%bgYX+U3Q8>f}ZM(l0j~cvPdCYUBR3J#e#OznS^TlP42T
ze#G|&=1v#3eml6@E)g_(TDl8BJ=j8p)MtnREvyWsGrA8Z5&%%vqZn5P;f|nmEZ~B`
zdw3p*y`HZ5CtR?>g8RL;xkK*|u+hKZ<HS9?SVY)Od!KnK>>q%LxKh7ed>o-#N@UsD
zSzNi8H1zCV2P?f0v9}L!wz5h~m27L5kea3)Jx0T1Ic5%c`tfl>9|I->O!FD5v+a3h
z(9qL))mIDM`V7_UX{Ma!#ZAV^Hcadm%8w4#Yur_CS~8ZfPO5sd`CU)%lgWfPE&H9b
z#yEK?oH0m#=XHJehQ#4XGtJa4Ks2g(i49SdsNPw4e1Y7SJlV(A&|eVf{{3zV({E!s
z%3n<guA#@R`IwB^_xXOiIM2<Zyk@BZ<mM=`<;40$>3)gdt(Br?$>J{CGHWTt5fE(E
z#2nFLoIEYPncMd@-<^b}TlA+2YZD5~3h~T24GE`m1-v^{n~*1WUxe=tyh9|^F=$$P
zvfX?-p?y@5cH3V;jOn5zAlD`i1&Cm8noPSyIuI!h^jdDKCPN%glNWBfDo`<#U}#!y
zp?Va#FcUz^N@UYIHv`CrspUS1wuTlpWtqA?<enQ;9?S3OSxocGYz}LOas12onGZ;1
zn$>iiUD+8Huoxbn?N0(kJJ|3{rum$G1nAY@%T=aouC+r}krMD4L=AtuLo6kO@6<=a
zhZbmVE2R%3EgMj3p^6tK2!~Q!bDS;O5iAHcEFvNhEo!_9_z^r!*GGf(5N0#B>xM3i
z=x}emQQYUSXihtX0FBL8RO{<zx}L;m;-DDe%_yQopN_q?+hi)1HKBp(mUg?O&DSo5
z`vKH7YZ3$Wy-Al7uBqKk*SZKt5MfvZg|MF4gH%IJ9fJXTTx-9Z!)`JH!Wz%1Gaw`&
zz`|w=Q2xb;+X7?fmIHQk79r#^QFF^ieqYNc?+@SmSziuWh4-m9AK_oy4hi5@!k8`?
z;o;`FWdR{h4V{SH^{9iVQ^xQ4fr3tl-Qp8Q3>_R^Y1y+B3MyHrH;P%pbMwKktf%?S
z1J4UWY?S0;0;)wI%U@X8&gvh`*NleFyWFf%LKE44$b`+mH*juxD0Zi{sE33e#182M
zvvV2nKag0g54y^sv|qSuI-7JOMbAcH$98@WR~s$nz!|u+M1T~|q^H)Z`+(pvE3<m>
zSV5F2$BaGCcM$47Zb)Vsi4VYqueEi-d`c9}zT*V3QWvCgwYLsw(C`WCyV^O8GM+^f
zjM|UOpJB56U{AO2lZNNUM@mYvb2fX`Zlf$EDx4;F*^75M=hAWv<rf-*F};1aH&X1C
zk5+TCwhd6#v-EG43D4w3CYNMZ`%-#+v2-f1?Df(XBbjEGLD(0gE3eW-%Ps)6fR_Ff
zt7lx~ORv&eUH1I$*8R2$%y!RLW6jBhtR`66y5$e(pyVr=+Z?*(bU(Zkl%CE89G>DQ
z5uh}Y$=<M9L1c4V>c57Z%s|laaB6%v`;F^UfCF*bY-#m7)nhW~XO^a<oZO*_Wer|S
z`-Bt3I>^hG!}=PGOOMRdO-}fMwPqVGixWx%U+eQ2KI9SRS;65g9DbtId?drObHK1a
z*jn<zMetI3l)(EM$&HleI^4TuwU_nT+ITZGc;r*LKqu{V%`y&bV7|c)+x&P5XV-tY
zMqDNq8shJQ9H2pG;`Y1{qflB&k8vQxpPjJmsu*rFe3!T>9d4YyG!x8p_LTUVQ!3Y*
z@T6@X^ID|FrC}T=;dzJU$LWy+5H=c)$P}{VT6AxI$VC$1w7jeUtdk#<=rmaHAp4e^
z5k#kqt82fvVX|P`=T1*e8$UU%qQy@aFoFvDJ|y4mRG_A)Oq&O>yS*Mu^*|Bh{K1Qw
z<DpXu<%XJn1WQrYqa+>IZp{C{m-}GxQC9d}R<mcrb;7(E+in7;Q<~;kwi2Qvc?GN2
zw6D<e5>_Iz8<&P5cHb9Pt~E}3PVvV9z(F^U@~{jAj+xT5Z~$U_2*v>pa$H1jeV-iH
z&M$T+33}$M|IsxwqkTu*9Yt>Qi6jSVR>HU5=ZwXU3bxsR_BunQW8Z!zepkL~r-%D;
z>uPSsWwgLIG0#Rt__{*2LU?-(FdhH2Rsh9dM4IMlDLr*Mvxf6*vc(3XPA(R8PK6iM
z6MG*cH`aoZ;_8i$r~S1!axBE5RWEB+%z7Y#L?T!>k?lSYC}?(vCqsPf$s~6OjfR|Y
zu&hJCUn03#5B+dLg&<&4vz@%ko0yBtm6dID;>+T4<Ru#WfpliFT(65!{hsyiYJuuH
z{M4o!V&eJBehC9cCX(q+-*W%REv}Iw)b46uvMbb?AF-;QW^j|H*MP*ChOPmauILGt
z`|$uDYj#kv!4D_J%p!Uv5LO@(#82o>ZFX73xdj`J;_F3NB0v>tXuU0Lo+7TTvXl)M
zE-J5nw4~!HSRT3*=-m4hBX5RY{?kuogVG}H8e4KndLo;tl8|3RzQIKB(2c71YM3@J
zTt-}n@O!fEC*0_ffIbc14WIYR0Y~a_4M`;@ov%Don9Z|K;`?LUziu(<lkGgX6IO{`
z)xsnRoJ$?TbwCChEAflj%VpY&$1MI)*q=W$Wx3}|7+fKRmIK5T6!xy9-zbz7(xCbZ
zQS8{2nA7MjzKPv}nSO{7<T9&r6|9MT$Pb)vD0;`KOz6P;9mN7|jqbUCS-+yGB29o*
za1bq#P13r_M=%hD*5Ppm=!R?{DJxP6!u`#$Bk_HYiEZsmO5^ykRDsPr-eRc6<_dK>
zx!uRTH0Sq~k#^g8cKVRjwS0(6LK;)N>t%bpIbCA~K%M$!aM1#-cgAj|@k{y;A|vZO
zmuRsS`LXz-@p$k92HEFn_8<Bk)jFP=*?La7JZoBuWtsH;9fwIIU6XGsr`~I@6ji22
zczmE#lBsM3ViH%A*QH|<kDBDW7XbHYjxLb~OCF|;M(09fo0Dvf`bH4cb+C{tM7#o5
zWQuub2X_SNPm>rFhul?yT^~JmV4{M{lJ_R5s~rkD>Zt4<&q|O^-I6_PV(ey)^6Ir^
zZnGWQCH-?e3TqB*;PSmUzhaoWlx(vh<N>h}VjVS<u#jbH%_=pgONWZCVyxIiiHXBw
z_u_Dc3=J)gwm;h$cKATSP~Ee<V%v!S2hvsOqW3Flu@=C2*s(-l79gi1vU&Q*3<A!4
z3-k1UzL1dRqjRR9Z;JKusIOqPYal(v#oEua(DqQQ3zy&ZNi|0={~+A5OOaY$$Hik4
zD&*I>kky#;O-0WB4xHSHd@7qS3;v*t^tjEIJ=&=p;}^aK47fiIB*fQdy!FAcYfZk=
z2|=;$ch_^%E498@gjEnl#~h_49LuwM#d=J@>OW-=QWC&o|FRw=<_OOq8Y=#RB-BHU
z#B2nfG(-Tf$1|?GXi+6_;k9%!H*F=v^oz;e<G&F0VIbMs{6H=q)S@<hvxm?6T_Kpo
zG>4SIdGHXl-K$A<1-Lrbs!evR_o;ZQ{I?<EbE(rJeZS$ffe<*lRBs^iP>4#hy?qM!
z<YcOkxJtrTL{&u}tpGd86A!zIq8G_XNiN$IIP;`7W2}p**_ObjyA>bvK<zPjp<Qz1
zwHC+H&!g2o7hE;7vYhHA%Lrx~EJ=Vw^)53R`=KuJoJ(9TNm7}w=~_stV><JAsASKL
z#txg2#bm$CS;<^DqGiJVqhtA(qAendYCX!DUd|~uHrq}CyxSiPYSb4lYtw!qK9tVj
ztv<)FTl>BMbo_*w8H0Un(Axd=!o60pCUBZGu~@gklkTx3+%vPUFNZ}&2&mU2!i5nu
zeQt-lH)vTNm!7q%+5j-D+9P9=8!p5{4iY}wlaA`Cb80oj+ZX=#0JhpG!k^tlUW`dV
z&Y)MiHU(_PDd>s-sssXjmbkCF&(YQSzF(OqiM=#H+5eKEza#z@W%gukC;ju~{lqi2
ziz(VVm+~fyBD?R?G#AbaTP%SB7;$4A7_s`AlwRm(GI;}UR$S8GKLi$cw`DD$UH~L3
z9UBbLf2c1maQc04zP8$+9bb;oqr84u&BmHkfvEPd;d!QRgL6u3EKbv#Y|1;Jw|k7p
z^`K4(<n7#?94)j5QIgOZn|^)m(ks!jY2Y|Y>%c<?fznD*&gTmm*3;LU6Ka5QW0eS%
zqErFn*fyO`xQ+EJD8uk`k9Su<ux|%^#C(L9W*}V(MOSN?`m=5~P(}I0dacQZG0s_w
zzSauw04$W5QN}UuW3$iy{4W4*dWVx8>z`<af@|P-2rr@}Vi<-<WV}J;k140)r#L8d
z@bzJcALyWu|ABKupTcV}#L>UYrLac`JpCpgz0|j7lgaH=H@*rSsDvEgh`u@Q@0V+I
zuXSn*K;+J=eVh1f=wIv>%Lo*zE7p$=nxVp_lf%+5#6k}cb(OnAF<k`=(`vKy$vKFr
zQ9F{kj9=3)Ce;D1XdyxQDdXlBmajfvYv10JA4L2MB2&@$8~6yLH;Fu4vu{Jbu0;Ph
zpPQ&;{b@Ni8@dz=Xnr0*oV^WZ)^?$_pK-BT;X`U@>N<b>@;4Jof)Jj8DpVCF$`L<^
zya5c@=ooa%cP$so=(>?G78e7J(z$%px4|;mGD$eiZ>h5v=9?czp!KEwxFN~TkT%;A
z>6E25pfzH&{x!?rKfSG4u*VlQV-R|4^v<U(0YJJC8>FiV5y8MQGHL+T<8nVR*qkg$
zqZcH+3wCZ5N@#G~Psr(?!$C~!W#i!n5jj0yN<ir(-K@zdG=AsK-cR+m(AieTi@Tlf
zwazCfnbq2@kIw>$SW|#O4dK{e87I(2e^i6{2XaKAQ*VJYP|S#|%MZWNMh;xy72h2S
zMbg7rp|LPl=J2Fay?-DAAHkm#NUwuKNNAq@v&;KMQU~6LjK>oNb*T7>Yp&f>`Y^yg
zlnR6r*G1xB63IzF9G=nl^LNBj0^m$w>0vA(@bz|dNbqkLR+zN<!%uV+V(;o8C@6Gh
z!<TBr|K1Cm-~$9SNyKNVmCigV^xD5-F2Ojh;hDGB=h_r<(P42*N+t#$-<f4B;|#ck
z_`v9+5F+a6m>4QR=T|MOf$De~@g*K<XH|`hKr;?TgIoC5_fdXEl>*Beh~|lEiY7D|
zpfA@r%TcNX7=IhTDx7wQR04kabhS-#1exGO7&5wR%OfcH>`b~`-nNDpaLn4}waz2i
z*zVtCP_P`F*jW-B7AMOc*vYCDnIugiMZjZi>A+2n<E(9x6gTA;K21pqhA}Y!suV_d
zULk)Z8ajH>g;)ocFF$+OWL*r(>Zszgc;LwD_bllTh3UQ}GKTZRKmfPxWslcZ_Bb__
zvJTF2%0OzuqPagRH(x4nQk*gj<yRa?LRozp9{?g#s;#FVHwWy-93uHnByEy@w0jH$
z3EwbqB}y*WyDI?WvO#GO#kiJ)+pG7@XbuQnYzH1w8m|DzTH(d>8jtXUfXz9#g?QkY
zu^^qrLsJR_8$m;0*9|c|T-%cjC(!I}wH|-{kb|Fd+QHW(JOhT=15o|1Hh{N<taB~F
zi>ajm)~vkdGZ}243(<E0++ym~oC@H$VwA|0N;zpfEPM_lwEfOBC8w0XgoxcWk4^nT
zN=+>R-_AnIa9Ce%84Y~^cGd&&7<u)lymg1=BTFOWtAjXRM$d7rR3X)EhKgS?5_zg$
z{TYp`_OP}`S&W<qctfoBZz?)ncV~J4s#4YE!Yo+~*SyqB=j*85>)&TO9@75KG<+7I
zOmP_Cb9GWC5`sxljfd|fLfz=D)$Cm-mnI@?MBs2;6)fQ(ZIk@wS;*Mf#M3_k>Q}#e
z%#&?H4s`}eN=lXkSXAEEuLo~-U<5f%<F2P>T<7_CkcR*+7gb?YF8k{wJUIM!6s~k|
zbjlU$CCH5nykY!Yt%0)jzUh4a1HfsQ2FN_S4d0r{V?UcCj37N_1NdaK%78fnD1}cz
z*!xvKXD*}7@l+1B|46w}CmMS;;@#}4T!nZ56PHLC31AL}e$tJO1Y)Lu5NUh-d#VeM
zd9uk&Y&(b|%Vr|l+QJzkcK;u1Zyi<D_C^f@0um|+Qi9ST-6AO<NP~2DOSg0>(%mfr
zN_Tg|AqD9aICLW*{jFo&dw<{i$NR@S#u;~<;bot__ljpdYtH%1g}+Qr1BR2o<D=D@
z9H3Q%Y|8Kam-uvI=_b11FM1yiH`}gj#-d=oG_V9jxCM(B`^PzYCPEPD`j*0W_ZP1h
zhJIEhp~L{bbX2LI$R5Fxj_5ez36epT8BW_|7|UY=k1Ps6@HK~BWm)=;>eN(Zvdd5O
z9D$hGf%%8z#Zp7~A^1Wnc;m5ub&!gt?Ynpp^0LNbem8aXq<G4n@5d+nK^i|-Mo&Ol
zBlID6rI_OC7;tvI2{~Rx&$H2z6nlUt^?<GPRJfbtLF@zW-#ujjdJ45G$uxbVnq^{Y
zHcaq@`G?>P(sOq!>z!@KOru9$FRsqHaCDDcGqa1gVX6EPXf;ZF^Q87YTzbZMZP(n1
zU}{Z_u1lbTe1NCfQz1A?G@+oVzW96mg@W-%xvDyv@YF?W6h$`;mkr9|xzAX)PR8_n
zBPW%nLKK5=)xq8=d4Z&YPj?G+ODT*p?=PiFDkc~w4T0v&;CH!)Tz!js#z8uWPOEY>
z@KH4UdgyE|oyiaRE}8^!4o2Fp>8FYY;k-P8?RD=q7#rY+qI;)RRUgm3pmcB9bscr_
zHbJ!HG?HMd)pLgv?k_cAAtp{fZlYPUq}x}Eu-()Vr8i550}fkvl4&!y4pS!cNwS36
z=VHp;aSiLa0{-CGr9&hsmDa;rp5}$K5t`iSk2l?D_J3$zQb6+}8r<o6D6xWKF<T?o
zA2<dBotY+ldybj+*_JyWttOO83c@!cZS%rr*f8@?g#(r9OJD!vEVIgQ=fS0OjQAG^
zgqSj@iTSEPb~?+xO4VHn1b_i$`_KMIj)8B$JpPL81qnI%3p=}%Q$%a5$jBTnG)*#Q
zmK-hSWOlFWZDH7LFrUDOJX#I;4*Pp{(bh>T_27L%?*-piFd*CLV5t*G@QN=TK>VTx
z;)g{9t7MzxWp3tEq1M3Vf9pgNj;a$3q)2v3WIzOwo*6IHcoh0gnv5#mVi2~a6Fp@)
z6#`X@281vwodOdDcGpXWReWqQo-c~G4I0c6yRu?)pnR$x<GCASWzzY|h4MmqHBvjz
zm0mg$L)YDmcS(Pf`Y3O`xtw$@TJc{5-thrh4Gn{1PObHzH5P|Rjm`JXF-g2aBPXY-
zkNu#RVG32CbYZSy7v*HRsH{`Vi8Q*?jQTAif|jwyJ6-msc9|Pf)ve*lP-*B-&BVSa
zoPj?<jCB~pb=X?dBKBmh{ily|Kc1iN%uJLP*5Vd597>2z+*c*sn96+gNFPKMl1<bH
zxVWxJ&}0M2uR3qT@97tGCs^Yhake%wC2WzZXfFEk*Bt4JrehfI#72LT`6HaM`l~l$
z^B-(V-}*oq5g)$><>#<l=^0LA4=I#QVi&J-+Sz=z3?zszR?)sayANx;fi$?;oc;#~
zFo9D?P=W#f?9%=W=4;g2B`jh*rtm@cueOhrIFzCyJ%)e3lg)4SlqcWOgm39PECLvt
z8HNp%+JeA$VP|qY1w8?OH(%!}Zy76Mgq@DA?_U?TNoDh!j~5uTY-G(G*I2eEgqJQb
zu3Gzf=#-4VD5}Z$$Qj<K22jm!>-Ng?dR)p0Tfc+gBr1@1sp{c{P;!Pk8q-(ot+|?_
zlDr!EZuFR0*ZXru?{M0){zBO_-YGh_!BT_n4k^ort5ydN;1%U$;9z3FdJ=3EdNmCj
zOZ+1iz}q$7{Sk_i{Z_=b6^WN^i$FZYIfr2`zE)BKBK!96eDW!nqHL7^Qn3k#wSYCa
zah~Go#P{xFxfDLPDqU9TdLnKIF$e^*o&0MZ!-WsIi%-7o3nr&HeGu14JLK&`z$=N#
z2k{@Y-v3n8F00F=@>A+$Sx3KazuO@f2oo6Lf?<Ntg&cC<sTJS1^eq<GPwCLG#X^(E
z3ipFHHs`&0Ef@jNO~B054kH9|a=J=WVOPdU|Gd(Eo;rjSUs7KVL=nOBRcm2|VnWD$
zswPF{d`=||=XcV!g57(Ki`unTD~@62pNn$iQr`&Zl{ERGqf-paqmtkg!|q?N3q(~y
zf%HDJnxBHL3$97bA)}vUVLa4EW@X1M2;g)H3idKUysOYeK<VmE&}|xq$+alrIxp`s
zdyyx(?ufnielP;k{z+Do!4$kDZD7jv_%#*ezQl`7-w-$)92{xB_Y2E6w#&~AP4U(U
z6|%VI>b%$(m^^!JsZl%l;Z@bEa!XsJJVID*8Qi8UL)@qO5^})oRY5k>KAZyRR_l1H
zxjL?gqCqQsZYOW}K0l*{>BcaR5HkvN>01(jNE8Sy^|ksJ;4WV#D1Xvr4KSapJ7!Y!
z9vF<JQyFwyOLd0TakW}3<QImCKY}*a&qr(1G!k9xXOtQ3A$K)A`wWzM4DaFe)tQkK
zB+y|RQlQ+7q=dV%w0BwoNu)@Xg5EP8<G`ky>kCTY4`ut5_w)92WiSg&1`Fh_q~0v|
z4ZL$JbPIqYZ;+Wd*zo7Wyk)(|Tu`Kc?ti@XRW@#}R*IXF%WHq}VVUKEu`%IjMhyi}
z(ZNl%@6U10wKKnjT`d^M>w`_5(yNFCG>L#diriDhcZGYt3n;IlEkWUCOAZD(y>%>E
zP`8392$Zk&YFZx(bPJdbo|8?EMWj7!hX27(5`3niw=nVbIN%B6`uFv;kI;{M?kh$v
zg3P;VA*rw1YCTf2%5t6KyQ2kSu%EHjuJCX1SR*gBkN5)7B@!h!N=#fFH@E)kzVmiS
zE5a(n4;Tq#<l>`&xXQFh5zF#s)J2>^7t>n=e!<awO*;OGsyg$_j*$lCE@(Zjg1kJ@
z%)kO#_aGH6Sx!yH!W$AbHtSH8e)JQ)U4QBN@!o^X;i0y`BUmopCJDD->E1oyqCSk?
zQK4&*F@iPkCciM%-!ckBI$xc|`ggi-^~!o4VizaiX+BxCg2hsxsP3F~Jn{wCcbr=-
z^H>dzB0LQ+Yn>b(iNV#ZH*?|iqI*THiY3>Hga?loG1PREs8YqU-EJ{ef6ub|a{egz
zsDWMMD=cefCq{U~^KOq-Uu}P`%X#*JAx3+Gz$tUI)Jk7vWo4KQ1qH=32tzg;UPSuU
zwu$ysm(5i|Hyn-Jx6^w_UGC&F^7sebpf((3ktbx2wQ2MR>}k---s?%3((LN39w#>=
zty;fRYo>vI{xK#vyt7r^$S7OrDdG8jH$3Y+>nI$dwGIS@_^hWpS#IhW8{@g}E5t1b
zJjbMKYkA`kGv5g)Ic5iG^+nG566JojGuHm%(XkSh@aY{*I7j5VMw0axMZ5U*EyDy?
z#OEh_9(!(?STjBO#Z8+W8tlG~2N8apk#7>jB_)pzZ(%5?xI6^0<0YoIukW)sfW_w)
z6gXJIM@#Cb#i`1=Y`Y#*g|1rrfRU3wy)yRsmF9P)MIUI8o=VT}8i()3Ls%HR@5?aM
z(^s5mMp(F{xpN$%R<aDuQWx*sIV9?Um6w-bf6gt8`={EWSW3_MJqYcjL;bG)(UM8J
znFSW=7>X|;Pqy@a)cf6zizF9?WQqjC+*7n4wcL^gdyiwEGQS#<AASaN?vfjh%rHgL
z+fcXy#5dnw$;*?WFmkfJOME1UO$Gr%NdqT4@gvu(*ntIvqw2PW(z|nbN<rw{;cBG|
zH{%yDZSl$nC`Rw~<yFxHBHbN+(J&*`3+yFq`e3Q8x8qpE@g&2(zm#%5!&uK4J{49E
zP|J=<NLz*)$>s8GIM5u9`TeVkB)XUuR7e5=`4K+ve#@;gy>?`^GQ+?XXl=Lgk{}8(
zUpc$yC*4RN1i#~&nrAG;aGBRjQ-WBg{)qd!p(Gbz%Zc^?w?VhXmBbhIzR5rmWi*vE
zS{C;fVxoX=olAIL@<}{kUbn4|k=J)kQL7qUwg>Fm*9i>|sybl;;K)a{*K6^uepstM
z8K6~!pZmzoiS`bCy3w?HXdmtR1(W#dkuioi2^<2rQyh@cKmf66v@wzm)A=@weiNjL
zIePSikINY({p<k(#oCQ4AT_H1k7Sr3>@Uy;vpg)6NiBSUf2txJxe@QE%sV{Gx{JG2
z4)no^K;N6)^FaB*%Muk{4zN-hpy<lrKB29au940;NuN%jdUFR=m=B(JI0aNTkKblt
zgh?g9hI4Go3F{cI>t2)qIt5(3OhZTlt5FbOSwACT1zb{+kE1BFR7wFhSup*xJ<icP
z6b$YkypB5xFx76E-Hn8rqi(DPWSSzja#v8HX?h71l=}>0n<ft{Q=Oze8AX<k-tha>
zcXl-xFWi;+?lJEWCI{kvhTjmZ#+2?AF$;4-2_sO$o|A?pg_XhT&~V{vEKjy3Wc}|F
zQU&O>p2nA&MqVvX);Z>H&s1Zi{_wHOz7i~#(`0`Nh(XY)DDDr~f>;e@=O2qRiN!BL
z^l5VC517WXu|B6aS|!5(C4X!IcQreGP-Gw;`L!ySmBiBf&K9@Sx#PCU**0f`$YVhS
zfHYz7zrk#~?YqEWNGDW)&Wfv~sHn<+qNJn*e=*gKOR9YrR^Foz!F=e0U!IjkL3gAB
zt1jF2a=3-Q*J!#vm6W=quT65@vY+u5<B#D-W-6R#b)Cb8zDH(b@is9mTLlpGOFWU$
zIb9vtM(tl8P1IMmww-OEu<ZF?pD)5duE{=k_vFuS{=TLq77hnbg&tNa^sm4EOC|gt
zexCiJK)*<(^M7wJkkkU;TO)ug$tx?LTyBo#>trmA6j)R9$o}W2OT|gJxYYLLXjaMr
zmfOtuEjwQOVKLPb0Zh*R?Gd*_iBnE?cIWEYQQp5_3w%$a^g+z7m>mP=qV?65Gsapi
zK$upL_#zoPRx<jZrx!qA5%+FAV{y@Nk^9g8z|;VcV#oN^${1+Ee?9_ISQ$%L(bchd
zBL96>5zuHBbF!e*{`q6DlcoSt+5ZPWPV&<{^(*B74**4AVrmPm$Ho5t=}j>bToj6q
zHj({@|I--y!2)2H6cZZ@K#$&xGoVn*TEfyejaPZ`pEqC;)CHK(Pr-8EEO2bC4Y3Uj
zoPh-Y5%>O7`T9&!33O6c?J*Vq*AEdCx!}Yn)Py#m{1pTL1Q{)XIz|8D`f&3<&qP86
z6DbAG^!#7{_$X<2hvkaM-==-**OIG1MlBokH4h`sworI!c}$c~t}}n4wNNn;R@wLv
z+*qhRw(u7M46b9hM^G9ggF-hIsO05xV`9}KM?YQZJcvo?7$@7A&XsjL7MF+Iz0$aR
z0VJXOg0LD7R^T0X9JRP&P~3PjZJk^51Fm!6?-*eShKq?Bk&nctG<g7m-d!A3J=%S_
zAQ{ir#E;R_K@}<zQr%%>g|YH4VAY5r-boJfYV6Bnr#X&4t2!w9fe9{crQRVJ{Y)}I
z9SY3%HUKZ8TUd(w&j<n!{px8@um~EO$m`d>UM#Ql_qo!TMo2}zmdA-jm36!V&HC^q
z2`MAv?rX=Mxx~c8@kn4C_hD&-*}veI2?&^~!*@`>J_(lak*5lZ8S$Nr^%ooKRghP8
zl%LLPiTm2|3}*&Q)dszQ>qiS(^!Ql_*=WR386#?iA%X*rd9QQ&1lZF5obU`W0&<aJ
zyQSwiaUYF1%J{3LJRs1PKw6s5ytxnJ)M<(f(VYanJwH7?*o-Ebi^4K=pP=CS<mN^&
zQ(H(uroSMf>(dL7k9!Oi8vl4(t49;l78|&MWh^bddrSCteCWr*X||Tx3qurJfcDj?
zLFn2(Lu?!xBOWKOxf!h>@xE6D?JoaCaK2$E_io}&H>I2z`*IycZ%7l3-CT>J*@C*r
zE}?whxh=C+mRmI&3v-thE)WS@fZ05$Yx4`b1~Cx$cRrw{>ti8Sj#JO}Xz;2LUfrXK
zD3q{8^;gV)IzdcV&F?jxM6E;kRc`g(7KKL?_M?Gz>AR4xf!JhxZX@SQ-t7pelVBK^
zwl32C=`exq``-FC>>63ZopCk2TadcL?<c&yG}gioS*nq>s$$2|%3?B++|XB8jeO2}
z-|milOl9j-O_XT7vn9EwP1f7X7;1x!T44jmuKEvRIHq4r8Ym%46sSxJhW6aQ-`}f`
zwxse{JDnlj7{E4c7_apStc?2DBn^+hux2+nL=z%A+f|@YZk23WPZW`*DxH+V8C*ZI
z1lyTXi55P6dgbD{iNBF+SRbXOEy}Y;!;Gtt%Hr&_NvQTD)lW}JeS1;Q=L~vIRBLbK
zZy4)puH@n(@lC$<LTpS5jOJ%ANMy42`jmARwP1R-t>F)T5W2yRrOV~NvBI<okvTHU
zbDwjR2u~$FX3xVx_1gJG805})3sDcLK-tqznoZ|cb!Baz;qYEC6Rdu?ll?}CfJYVV
ze<Xg_jhK5W(lCX8hPE@r++s@p6Y5BiQCfr|9l!FKPo}j=)UHL7+htW;OX+<RhDX};
z8B?=c3y`Swl2Qp2^@K7Z6<L)$JeC){*t}wWhp5gD-&IqwJ~I^j$Fyvc^i}TaOCL8J
z`NzqJ%C4n2L-H>2i3XX9+CRv2oK{tOhzIu=Qm4oHGFyESjqcbtJ1CSgg}4Qd5cXIh
zr3!$$aDdX}g}6}<x}8Dey<VLbqMYYWlKdGCAWeNQV0(}l)ApvP8hwQ5##6GWq2beT
z6W8mBiQGU&Yt=YLuey@(kj-s}1*RvMK6d^E2B_}7!P9O%VMyUE0HQGhn}1UqV@=Ij
zDde@=;S3so={XcO_$RbnwI(Bvk|iXyMGD=Q{X&dCR+u_W(J~yRoU*Mb#pX=K*u}CE
z6dB;OCcf^nNHf9;cnwnvo}ZN1|BYi!C|~o;R9IO>YNOsvOh!3(*_F~1yYPRTcp~|Q
z>3LtAsAApf>-I)z9p}hu?d7|^8e$~=u;~3ExmOaV%ZHH$aY8L+yjk@ckFT?-TpBz?
z{9BerW{nQ6$!aY-NjbQ3*lcc(XKxcZpVq8;4s1V1{Xr(s*@;JB^}8Pc86|;$1ZhK%
zlq_WF7SDzZ9*<UvLRARuv&RD*10m?BB?>c#bWs27jWYfTw@fMEI><W3Kq}}xQ2r2=
zoe;cJ(m<iU=&xD;u?!>ZmK1tXC8t77oKbx=D%+H!Yf={lBaC1Xn$O(1RQdfeUb~Rf
zI$p$W^4;uyjpBp6K2VvP0<s~qLFaIfKcfTe#E%kN%3f{r$$oTC(t2&QG_8a`!^T1O
z73!=J*6Wua{zf`2@XVYQBX}jh-{1jOfD(8T{o}#Iy5G@^<RywOvWx12eu9;;m8rw+
zu;s%YrT5u2>WK#G0rUg(k;P2UDc;LGu^fyr=pO7hy0!J-9byuX4`ANJB_!lGnz3a*
z?_JzChPU2zj=B2tT=<mUaNpgb1hLMu7YLH(GLRuf-oD$SG0LL|MqakDvlYBr*VYnD
ziR09rf*D!DG_H^zU#r6dTz5Z42$WMY!@N&Ld$9}ED_ub`jj<cul<n^|J3tG;#)CTw
zT2!HmvD0_2QZ-v-;dmrTfpu@0{P1fPFPD*&{;dga)!YoQ@PJJ&1-)j?zKkOaTRelt
zQ!<dMxt?s(0B}4gc5B)3?@|r;P8(DnJK?P9MEJ?NAZQ}>%1t3po<6Vs6H8U>y`hDe
z`q{xtw6nRhMoJEr`O$~7of(&o8wLDY!s?ZW+e>Ju?2-t!5FHEO&9hJ-?j;BEXAy>E
z=(~Sqas%lts5tHzl0LZ=DT>&v*Lspgyd~Vh62X0z*A(?qR+@2)_2_hsCy!Njo!-Zi
zq0r%ic4h;NH^*9ichhfAUV#uy?@tOvX!Jw!8)0{gsc8xdV(XQSAn5f!?8X*$_~q5f
zs~gtRupZ_{eZVAh1Q8{P4rF%&$AhH{zo!!>IpXUv#8WZo*6R1t7qtQ&(rQ@zeGK7|
z`FD4W6mwI06W$(i6540IRLkA=6{jtX87bu&3%!!Bef$xYZLWtxjeaqg5d!ukujFjI
zuwLzE#y7ZTh)L5Xl5#;M%0I9NwD>l@I}F8Or6_Ley*FO)af*!VHJ0pX*;od43DCoP
zgG>xXV2$SYZ16@DMhg}O^IO-pRPwl2;c)-l;tXm6is5g$@fBTAmvG6d<;Ugp#qnAf
zmXr*qHs0XY#v_u!EI|y<j<$cl*f1IDN*?Dm7uUS?l|96KWgLg#F#Sp*{{wqsi!BbZ
zL;X^%X|c0=M3qw_w%gOQEDLW$A=ow|pruUhZ${{hV530$%KB3JjJ~?R4AWxB1hKX^
zhsMY-%+tZ32<JjxE#Hn}263EGwGqF<+OKWwGbQFH;}5e1@?_1^z|w;WR!VPXW+peI
z_K#Ibh6}cLERvN(PD2fy&aP%6%{!(3Df2Q^<+FkB`iX^QVUK8($`z&&&7wXuv>?17
z^)aQ2V1~hxinn!M{VGgkcaHl>PXCN%rfG<nDEA~KBfr7>_p9{yR<gg4UKB#*@|hD+
z8h2-c#p{&O#>O@GgaWL@x${)Yk*Y!yHWe|FJQNCHCF@CoKd<YPKmkV=oLixo|FsdL
zfS)YCOv2zW>Em%`P`+%hGe0lAmolUesWFOg?(Lzkiv#j^yg&nHpZDl0WTGT|d|Gx&
z0-9!K8$Sz!_%F*tW*Zk1{{%P@Oo7XeQr@*}A+y>&Y+42x+HZ7vP4O<o#Bs5r5=7L6
z%G!o5U5$2%x;}_)Vv9g#Ww*a5$mO&>`4&_n@&KvEeST0?|2wM-h12XP(<*!4I&%0$
zPF<bs?DW+~diqm3sO^@mNu42u%oBU7AVW?UE3AD?kgN%|0$k^J;Mc`|_Cb3+nIK<V
z0b6o}kA5<XaN;p*7-`q%ww|YPAE|Oz5Mx6PARmQ9!B|+IEHnCjrRf*M{YCS-N6>s1
z5zl53kqw1Re}R|cp}bAdgpbe1H~{atI@tjvzA0cZ2P_~s{n@qZM+@Y-?ib2ov^cp~
zC={i<YW)_oPPSj{@vf}AB@v^x#cdF>zRB)3x&+oJGu!GEJgMKW`HfU}aH8x}iTr%1
z?)36Wp+;{&Q6Oujb<~}$lqb2CWEc2fn+?npGtWnuI0Tn8-mRtm;OV=ZlaWTUWmHnS
z4qN2MLScf>d2x@)IxX~fHlmIQFZJ5A?qQ?H=V#j!X;Jvp&LOg~dosHe<aLz?++J07
z(XO`krM&f}uULb}*bj9eUe+7rFJkR(ab>&DGrE$#K%?`}2zp8T&h%iwqu?C!LZ<1+
zxXL|gqe7SB3E#$Th0&D}pB*Fp;;NBatvLhLLdanyL$&<ln+gHky=SC(_)cnZE<&E{
zP4y1qd0Q%xbw+db?;7cNNl|OC0=Dy!Cm3zX|70Tq_SCw@+49(0@8_mRxM;MM7sh1M
z>gwL-k05mMDX8}iG3}BiH*>a>wVCd|N6RlX$k-0qoL4R)Ov`kxWwd@c)~eu@73}+!
zoJ*U(=41Nh0(1^~*xGw98|g09ljy#;+TvyFUGvI1+?984$RC!4H0EJZPiD8}x=lHQ
zLT@1%5)KX}*a89e?UThaRlJuAK@mD+vVWljOfv-NOWo6)2DDzr;&RisAH5`vPa|3Q
zQbt=Qo+!L*+U)LCkcmbvAl{qvjH^)CHH?VocUFI&k?<qBIJ98KD<flC&(cS7GH&l~
zOz?U2(QAY&79<Z(11B9bZ1|f}N3KD__aQd@jK=e%aqS|y>%$*dfpL88YLYqbU?STZ
z8ZF~DvZ15j%a#B-nQqrhccN7;4Oc4ap0lgX2k&M_)N8*jh-S4HpNhpV>_)GMp7w0t
z81}MMYW1l}wAL&ZuywnqDNxSXeO0)KM>u6vwV7SnW(?G?E~B5^RCIluI4<Iv^|e+f
zRyj3luQ`?c<F&iM^!1*V`1P1o?OG}kfRU~pb<ko`W@3XiYK%k$v!M?^4WVauN|_YG
z{ItJOVOHCGYkU9Iq<gEl`MS}0-bED5>HE9<`|f}9IhL0#ikc_5?>HeBnb+d?GQ&OG
zHMK7?g=txA1F`6DDzDyZUd!ivoUed)goMp)BB(Ix?CNudIMhWpT9l6q<R<b|$-r}I
zE7OhMB$5slsHim@=EX*3==;2u=^IVQfqW!><oq2vt=Ai7_Y4jCnm_)kbI?tslagq~
zB}@RNgC>16EpMp@kYQGxot^T6CS3wGrN3lq07mh~KzJkRH4<PjM4x*i$HShi(akmL
zpv9WeNb+nxrm$A&aBrvc(ClUHv6&H%#fP#K5>xFy>5nOBLG#y@_Z_YDP1gkUwC=6D
z4M|47(a?FU?Wp<G5G4H$gsS|NMXy+cHp3bP)Iu!YPv`qP@Ljz<(kA_a@D8TWO`T(X
z=-STzPgdfF@aaxA5}u+u_WY-X#<Riqdup^bkKuoKDXP`a&#BOMLpIOt`@F*HScjAx
z<Mx<h^WUe+spil?KS|cV;nLQ2-d?O2XDu?(A{yxPPfnP7cZX5m$vnhGUe%|_l}iEH
zi932=+r~E3D3WFCU7e;u#|?8A<=2iW&kV5ABT57v|K0H-kS*raC{EGi!E=msNNmL_
z8B~^ew!HpeQ~|knvUJ?2SaN1Il|5TAPQ)0mbi2=}vz7Hd*~cvdRA-jLnij3?^ZPW1
zr=gCC)!XB7v{2)Bid{|wSq}&qp6Q75MO%A*IDaQg@h(V`V&iD`8l?tb`buey|4#%5
z7S*yOgU}7KLdzcuvD&!>cth5--#0Djpcww_-Oke66zEFl-%^M%A}5;XHM)-X)7GE^
zbJ@T=!9=gNH;(VlT`y@GR`vP$kDJr0uHq7=l#LdGXQDD+DG`Rdg_q05D{6!dsHZ;R
zinkb<nne=5`SN$53c_C7p<Mbke%9#M87Z@4v$OFiqT27BcO-qdTr(LxJ3N^mByK6D
zK+gB>MD*RRtlq;?4bqkqyi{kDYrUA8PVZ&(C)lGt&6Px8UcikBKc}%=LbNo`Z4ss!
z5U8UZQwto{s=k=I!|10KA_&XO_j3-T{$%D+i2DU;y7;POA8JgI=|=k)kaC8WFO2#}
zZ$o#h%Z$EM>C+SylxJmFnM2V|Zl-v!_dn;Ahc`!fycbZtg-ZJ*z#^zV(|1X`nvwQZ
zr8@1oTK<)Vxz>-o!Z}Mz%gS+iqzdKI*PTd6a&n5eA_6fU)OxZ)Pq7x=ZaBHv*5>=A
zsCuOmq^|dlW@mRmZPeMo%Am_$eF|RjV0_4Vt!DqRlM@T#bi39a{h>Ku3%z3V?GOeY
z_Lp7C$`)I}T8!gW7tVGXY4V#wR{DjB7P34P0-f29JlD5be@A=aWPvi15;x(hHGvpH
zI3Cfwy4QN*dBi&;&nHKA#ttWt+@RBVRT9KXhD|r>k&-^WV!KbMPY*QYhWo>xsz6kD
zu4sHi>nD}sk|&$L(k^p+Ui8d&WR)OCSvsB3>6be_UyV#P+`4%T)d<_(uJWvr6!m1%
zQYb!#*etMh7Iq6?=M+RDwo!OH^b|kheY1Z9GB+M)P>(kP3V@lJjDVo=R|Wx~F<@Pu
zZrVp<<J9yVmtr3$lJ9&ixK0x4(fzE?ckdWol?wqH>HDK9v9su?-C@<WnD;o>OTJf*
zn``BuQC<rzj59f*)-yJCt{~kQz1~J(y;hA`MQW&k!bDsdeVCh$uPm1>X{)t%x2fHA
zRY~Zhi`Td`!Uq(JFyiN)Ik*YAX#Iv->DlQ2!n)OkNhFVBwCb;vh(@`_T%wyRd2Lbx
zn+*-CFc<U<#ZDg(#KaS^YpD2k-xz+(Aw7YxOWR*AuJeYTt}oJ$7H>j>b$mFG)%p>7
zrS48Pw<WDX;R~1BLve~oJniSsM2&jz>AF^rm7s-b_s*g`uX|a)Fsf=4Fh3eqED~QV
z!Q8*he;oI8Kj-g6v3*IRq%%uB-dS?t`m_$Gka4ew>2wYc{;<55E&~0+B;X;7yYE0b
z$K+$kTZX-&;u7c79qFX|cS>1bhV5>irXM0hlUY^C`Hj^|b#e)ccJ=obRM!oe*`!;~
z&%bf8Uggd68=*{0i^G=?TZ*ex*BxD)Q;&9BmCe<Eu|fa_?|42qbjm%+)=f09!@Qh<
z!OGJGZ0<GMzDNJ`qA4zXL-vqjexLSD3^nVw1kJOFJidoOyXnuKf5^<}dswP3T6w2G
zUxC@xRDCIN`2x*%ePX-FcG^bKs%)`_VQ<UvWF_XL_7nfyR$0Iz(dt_t4ypv*^Q3xX
z%lL`!^Dmh};EfK8XiPFD7*FNr5+C6jD1=@q>>Y1PIF~fn@~fLaVIZI)`Fu^q1rUyR
z$;bYJx&S*VGoN6L>7T&EJgcaA3m+=-H|QqGkj!9@k7)Qc6%!2CZs2e%2OTE8u)7{5
z>`X?eHGi3zlGS>ekT8;8K|d=`qvK|*FkIhQlPLwsn@jA;AhD!J<$I2<*;I5sVLYYv
zt*I)SmhJ_6S{JaSkKK+_3HGfbe@HDq_Tad&RZB~$eQqfE(V&ty55+J9ME?p_oB2QR
z`82xEom4E!_UE>ZqdS4!PO<bu8ds(V-a@u*23t^{S{}oTrbP&nzT$3bqgL0Yy+O+)
z_GlBDlE1d9wy{&{vEtAyLs9hjU<eb$u;-(>QP-h-_ohMWp{14bR-Yr2RqW_Zlb}uU
zc+3q!6!lr+ZohTv>^H{3DWdscL<B6G8PQv~-vs~FkB@z<=7h%!PjzN!C<S+)mwvk3
z_hY#BlbfB+LF@Cdcgi~~Q$XXU6!(0}>O?6KdTxWWQOoeKek7(}i?g9Zx`bV{DrO9#
zG&FWxZ(^KzXD5=Z_O+v0abkOfhsFDDve6Vb_O&FRq-T0<UuugaKiC-i%XqKS4n4v$
zy$eFLx*zM_9|O*v7&zbW_ZPJ`)7`Zh>3ibF-11jSp<#Qj`4O!|bom@rNRsp@5ArPY
z{WN^k^Fy`du~(`;9b-uqm?0jB^SLJQ6^WBLp$se0JMp7ez5SiBFGUG(N>7h{VO#Px
zA4yQ|XT^=z)tJoHtn`#7&?31iyCN8QWt8S$X9H|d+n`W6(nXgLVd&$6m_PVq#v^R8
zk-*6#w|aOIk%K*%J%)v6dC?b$r|Rzn)?BlppNXnR5YW|%X3PterrVQ&>lGp>Xu3xk
z_Zuq%{$cmw5jUOp809Ub<<qlv#iKdqjRZbDa50rDC2?e?JV*3*l#bR(nN>jJi^Ek_
zJ72MH>s|LkXn0YB==ym`UzB4aE*8++4K7Ebz|?@U+wO0mU?7XgPmDNK3EnPUbrO6x
zai=G?wbtx#OE%c(APj;#=ZANjIwE&!b{BtKx+zzgQMJLsXGA_jVSxFnRQlb_`(%N1
zeh<W82>sQdOwN*B&GY;7e-P;D`|zq-SPtJy?LXCzzW9p9yfZ75SY9i2U1C^Yz&N$X
z*wSc>-6OO6Btg?IYH)OfLF?*-S17yl*4ug(NfKL7-5;KZ%(jtel4kpGs@cnnfXmLX
z|7pTqm?r$^$Fv@CKa;q1f#%%bE8iGrJaA3RE)03w;7s2+_G5=Y<e6P@lGzh!vWOgP
ziLlL78a$lU9s)i#O10BlsQT)MV|*cTaRLr+=*Llpm$1y!QD**-TRYxx@)XO`H*tlV
z{J1SOtWP+VN@nw>x=+T4B9?;Gr?l1RcpPXZJc5$pG@DtmcqE+ce7lM$B-8sTHr8!#
z+v|{yi1_Uvu`g?ocQ(Y^rX$`X1fb9RyL{Gvc9uKIaPud`Ut|rf1M9+eFmvx_h8t2*
ziW$rJ5^eN)k2P&@G@ov8*HTa+ODkMIz%rGDg@A0?V9P&_*U!kktFKZy$nC<^b)ELc
zjlz3;NYJEG92>{#{rauMA|eu}Hmg_fij$CmD}@os>HZl@sPIy+rj!hTclG_;0<0+&
zD)}m=5<)e}-O>3XY1w=Q#j>(zxrS~R+smcRikeFY3P$O_LtsWImNyczpC!GGNnY;#
z-0?~Gj@A||`+ePZ@9U@2V*#9m5S?zsNQy^u+3O8a0i<m#Xs8|N;METf#mk6)k2%cu
zh*9irOfZW-IMi1dYtDc6>3`C!RaA<{!0bj`YaVR-)|G$>qt1{o_Adjrzp)s6(GL(<
z0x$)hxf^c&A?p+W>CT+Lsrv6P-r;Ztn(j|({=|nrk3feAjs>Czc?B*<$>kd`(wqT0
z9V_d<^Ebu#^=1G5vy5Csb93|3ba43J`v=Ht7sEFH<46QfbpRKSfs6m*?0+r>$j6J;
z|1muBQKbZIsPc1ys^CBI;a3B+0K6j@1BvtBuLyffz@W#gUKvg@{u6P3{ys4P7EV4a
z{*SAXKmq0xdV1KIH^8^c1=`2d><;qy0(VvmAc+1qDeWCDpsk&zD|hz&$8xwAt1Tpk
zhA%2A$}Tu4s17jX;=o#0SNiXu`Q0u)s-zL0CHfk<v7uSu0M2KYo4|4-gouk(dAi%_
zKR*xKxG_IV*FpI2Q~M-PgSTIOPWCk7zi;mygx-AXZ&dpAg+&%1K>c3A7XM;Le%=HJ
z&-3>GHd7jmOuh-26!`BA!Qi{R_die8!RyljoYDAHH8d{bfsKH(ysPVZR!mGxf;Btg
z|0orPn|`Hz$xbfGw9GuyDic#0|Gfj~&=Rj3Pq|yc>)hsGD4hkCPQUu!&ds>OQUw~H
z0`*EXxLp7vv_A^5HEUi#I!XCYGfdwBm4DOyqMiP~IOvXBJ}=%2zkV&OMZ7tF`(6-H
zfsXJHO!Jm0mEk8Q>fsnpDHxwc5xKHb=Xje>G*An+WjQU^>-*I@OWtq~VuR2k?X*gY
z@~~RLY>W`F0ObZzNwiUEj8PxZ#}y6rx7acPwV!@l<5%><q(;mDZ4nf+i4cqiGF*}>
z)Wvr~Mn-dG<|?ToR6H6KqIgeOV%kC9^nJUzGx@87eV&ne`^cIl_7tU(jcua61Oo>a
zo!j*G=Iba$w0i3taC!$baaL_SGZi)OQG3k)BIih~P+H2$w5V|fE+w9oRiArXJjsun
zQ@WkiaFU_8ZnsF{(bJ~a%}Ozhg@F2qN6b}Uw0D@2lS2@#Og>9NLa2xKfJ}c&Ir7m%
zj8O(z9Q?|*SL*3t9E_U`^89YV`|x*6gMv1fRD2z`GLrP;cJhFwcOUfQ5}I1+Cy9(2
z7#ptd2lpV}CshHuvb$j?e|m>tmQslu8O5eGIFKQ)Wm`^CD*Q27NyjVoaM*7f4DkHI
z+dBw+=ITX)s&DUoosN3#Vx|??P}d|JMElwgZv`N_KJ5~4OjxUUu{^=kN?D?=nVOmj
z<nhOSk>qyr4=e7nSeQ=)IqXqICC@CfV+aSd0CU7_on}vYZEy;T%h4*IcqgThuG%kY
zh`<G@jX)^nOjTga4*Klckh3ymxz8EGqv87i#hoA=ylV#ve1qwa3%vRi==OXf>%n9Z
zYnHjX-}tvqq?m*>K8{K|Q|of%i9>;9MBv(pBso!}RSk$p&zK)y6=d(qiith5n<_K9
zRX(PNL2aMQ{ZuB3^4A!eri8BvvY7pRRDu{_G^MUhj=?}1HI<xOQqjkBo99tH;ywaG
z-}<H0S?>W~mWn@eovJS${@9kt`AK0idKY)+01CF4Vm7qv-Xox8x;z?6&AT|=lkKEz
zi%@&?Ga?DNW3~{{CqE7TioAb*z80i)*t5oywF!4?dwF@(m`SWf8jgvAf3oVO6=4+h
z#NF*B?m#?(EzW@Ny~W@Lj!``K$uo}L{c|$YLvpxmBR_TZ1_{Yn<6HGdeheU+sa7yE
zyF)e<EkH=^jfee1r~8KY`qZ+u9DWFem+r|IQV^85HPwEdd?!G3-`fqJo?$+aBAD*A
z;pGhB%JJPKbeKeB*a~IQ>+#LS8{|n}6T~!}Z#g2>#ZaeZu*R|v2K;F;7I5GRc}}Of
znIPQt#DXeQpYzf2Yo2S@lC7Ntxa-q{J1ylcxV&`x{VnBwpjbvxldLbg^3RxpH^ewX
zUNXpF6<ny=EkMKE#xl7waRz<ii`~MuI8)Ba{!07*c;$Wg{?R3Ampc;?8VfV@7hHWF
zL>?pCfC)<%sO$nnz@j5zd-<&)Oi=d$)+-{(ap9jRH>N0J-YI8_CRS?=e#Y<!mMAfM
zy%55E5^ocPw7c`(9{oqYCa9FGuq?u#-2B&q5WofsrS9^49}TZ&$;l?geGLBj6+(bZ
zD_a|#Pa5Ss>nujNz*3FvvelQ&YM^sBEi2l?*kg_Ry+Hc>pnR1l-o{K=#h~DjhHH#b
z9%uvNL5n2ZP{6XCg4R*PqMENs(BP4b87YW|>L?NMzv#9OJf9cbUMnY$cKIzCiX)$I
ztVI2^Co~O#qsr`LYsckP*tht=9x5O%9%wOFr_^-5nNOY$%!Wz<+uIeM{fi4(N)a$q
zYv;m$tghJ6OSyb$Z*mGNon;oMOe3h$)yCu1cp^<+Vh5E-<Z*`CXq##Z3AGXa_ZM1<
zQg`o>9Up8DBs~uJS)rwe)xy@!(;R#{g=MTnZww?V`mKvpzee~46`YQPHF8FGyc>Js
zNoYVLpk+~_y-%lnOoBO`82j^73&8S)=ZW)c%86y92?Qb!PnT6?sn1UdnFkNNodGN2
zxBD%y{?lj}!oMJ@CIky<w(U#$U#ZRTJroif+(a)6SQu*TvxF^Crr-bpHpC%(<PA>L
z5BbbEczE}Af31WSDhM{;p1m1fxbWkyd*jH5gZKPC%tf6&7A}qSO&oqJoByu9|I5({
z@X~`JD!(r3AoZ~uYGCMdQWBRFu_QW)(E{CR%7F03e^E_8_*Bgxec8zrA@GCj5&iE>
zqXGkAzB+>#FTOfFtU4p!ARH3mD<iHq_DacKOnGmfDc@-){t?dYwmScJVkD1I7S%w=
zN-CzCHwoQC<a`Lyq-;51`d?T-<{si=uN>5qhL#w|O^W&8-UouK`s1uYyMr%k(oJ^l
z^AFFy5q2K7;iXJw_U^wCOeXg>>6Pw2PYyM?o5uBs`$xDf9kUOpOYDI;--A$#F_6Hr
z9PfaG-XHi|0|2%wQuj=1Kk)GBly-mYtssB=WtX;qeaMSWN4u6v2Wz@zaVH$lA^yd4
z!gYFctLLoKZ&bZf?(g$U?iaMOy&ri7pXwkFGAMBLv*QgI`x4l&k%xY~*aM<@D5SSH
z5+r3Xxz;jADdO)I>Ol3m;%@e3aLdO)!Ic<AX^FC1%y^DTpyI69ndN4jnMKLruHxFu
zqIUS4dJRInx@R>Vs+xp2jR}9myAcz$XwH$w)!W;oW%X8^1eC6X;h9Z|gQ9l_Mqq{Z
z94DUnTPgmZ7`xwerKz)-=0?izN^qrp=cZ46O2H`GxZG-rfn1Q0IDzssZA{74<YHO>
z@iX9{aMmDP6|W#yVPnfShyq)cWoR~<v|ZA<ny_b4#52Bag-3L{fGX;rx$9DR3;d9(
z8%80+{hNpn3A{}<#Ubt%joVeeM{Ek*kif<(pT7IeEOZn;_#`FukirDFbS{?Rj;CJ`
zX&Eh-4D`u=P0UR3mb7N1Q<~yqQ`RpHE<E{eGfnC)>sP5o+QiWlHA7OFVX9$Uab)do
zSz@pCj}Q!4qquuW8Ygl+Mpo7td!s%|D6k_HZWqN-Rh<3M&W+kWeen9k@;>%gY92Y6
zLD}fXiLG=}6HQ^;skH6i=e0(B<I%?>#*J|b9v#@tUPvAA+b?COf7!iV9wd^?3_vW{
zBnogrm=_dwxr-BT>S>y8X;00MpCKVk(h7IA%T~|rcfDMf-zHB?t>Cs8Q81~-5L~U?
z+fKY2N7>n`bx{_@195D(UvVSn=_65cZzwA)c$q`bC}%$WcuI9Cz1n0XFcpfcMZ(Aa
zvRf=Yg+k49>%Osyl}n}AYLT-^MxWF!$@4L%aN@XSyWsq<dt=?nbkM2n>_g5<euk#n
z^sKKY)FoR!@`o!%e5q~^@-v+WpL3#ZUV=j}Qax94CTPg8b*5Io8ay1Oqm!dbpHq@i
z?zDKN9YjIW@>zTQHSK0I<0QG)*EgBEI(w^Stf!0I&p^QFyy!>uq#T+=yu1m#!CUP5
z;{|XcXZ1((;6}C>M(sS{Fqg($p{#>l2+y%g(9`1huB-i0>-JviEmd?Z#}Y5iQ$>@r
zaoefGcFyX)^yl-V8D}Nz{k2WScQzuY7gM-~+33V~ACD<fg>6%O;wu$w8gVfu3Ft-5
zTBq1(+*wY{!=D;ah)n^wU(bHp-Mv6WB$MMl8{7&@-3h~VR^y3Vl%2D;%ws&Xwuo}k
zq?v2q2;@lBHhgjzK;f<6A>&l@WUH!A8Ryh$I+$HWhDb`PBAH`{U!W3w&tdq^Ykx^u
zixcF1(afMIp7s||An`!~1t~3Y#a~_Z`(y{#$=HepF+NvJLQ7IJ`3=2*$rA5D<>PsU
z!?GNW6Iuq2*M(Er<%w?P>5k&EF=`9DbT*~FF^J-<!;4ho@Ty^}Ue(MQBl<Y@PrYod
zIMYX#_}1pqU5$z(B>FnAxqH33kIgbFh`t-XdC?f3EA-=%^Qbd<rI50qVF${ODjY1J
zTgj{LY|!|3SG1GV!t&avX6rj6BeKr!_qC6VJ>oGJ>_-U<bWVzWJH<GCqMOD@od$2a
zf-mK7Uw^{;QO-X1#@*!XeVzNjg5riIT3@%>xJ!*@D{u>dc*rZc^#n!>#+5%`Ct{e}
z)M`E7ykz~9FQPx5WaqL%?kGr?XE(ytZn=FZI3?34VpPfM*@dff#7}ofr`1d_Bh4%t
z8u<uXDO0~N^NO_Q=Adz81vj<Aes-8hfui6T>9sVAZ_FrqwIU?w(FN4QQSQZ^f#Sg}
zW0@^?;rB$&C8E!#$jzN5Olda}YlUX6`|OV>^7$X_O;jvASFSF<Jzp5i@tTHiVW3tJ
zL5?b75^TRM&na~x<Ko6SxVX4vC*+za^MA{mz&a$0c*st5>(;qscyA1G%19^2Cv@af
z;xRfx-K9$5hK5Y3A{V`2#jig+%=sr(X-uvR{CMs3oD&`7i!h*jLwi)8KG)-|^b4K7
zS^aS81OdpXyU~XRlJS*bz<f+GTqneqUyRW(<`MU%I69Wn#S^7M>x+bL3D0Y9g_*UA
zBVOp(Rp_*;R+}`Z<d@QzpZqX+_;%?Xe!Nza($2-FA2U1oydB5|)Xk%B(%g)#<FAx`
zX=~m?v(EkYiakApd8_*uhB7^FuQ26xG}OLMr@z#GzM;71>b!iAy0QjAe3=+mhW5oG
zjm#$iOAK}xHSyPn#EMWOkXD78?iBnzf+u4RbJFAVi}dbRs`Ud&aYrpyM8n=Xbpz#)
z?a^fvf$CUX`+Gs1sSjuDB585DAhvet4qPI0!@7>*haF!?st}b?ta<MuT-;Pv2(vkk
zsY!7ESe_avY*T-6|4V#pQ`u=lV|#W*0`|1U*#c)Ul+dpn@qptS+WBVc=W>PDqGwf9
zaLk97W%BVO`e6olkv4A^<MqYRxpKYN(|YKp=-<$k*D$6wwX^gTmHi!X<Vg|=Hu@_#
zA`^mRl=e~*(cg@c*YUW;fgQ*9qg$ZySw}}qNz&y456=p5{KVZZx%(rJUf8Os5gS_5
zidx(*dvkT|H+Pt%PP~oE1X?nmW_<fN@a$Umk|CSpa1VOz=|U%>%w&jDf3wZIm+O7e
z<9?E0jCh2``hKe6y7WzPb%6N|fzt4`t2l;^#eh<`F;9@BdAS`&5Dx{WuK+kT8<Yo$
zg7d^>)4-Y9kAOV9Wr^m`_TQ%m>+_`7EB-Nu9_N8+Mq+hF{hDA-hQr&0gms248n>!h
zG>{!~C0#Ci<7g8<l~Otp-C>PvU4qL-Wg#QB%8PLRy0f)Y31t-NDq@=5@l3s>NsY{z
zGM_paH>mG+8FD#I*Hm2UfW8SQ-V)#A1(ZwK1lyMnrw^m$A9hFb6O2q3q$D3=puQE<
z1!q&jTnl1|fY)s|$aUMiyU6}VjZo~G%S7oiS)6ErG98cl@x1zxxDj=qdPS0riK!j#
zN{9gms>5A<@d(oXel=DBznf4^X2*}b1+Awjv(-q-XjueZzV@#SwMSHw(g)^foJtx!
zq(58sd+Dz#3)T)ycXt`)BcHve%XhpNC%`()W=lP-TTMR9al(@2{&YmWp#Q3d%4Zdb
zfJTU3H~g(W$bk28=I9$sGtRpI6sPsL5BCXAC@MW63Nz;m8=ir^rmOcWIq|_OQ$v!_
zP0}ely&I_wCE`B)33L%;wRXnwH;KWYEbYpIrq&2&WW>LBS7lfT;YUjwzFGA`bqtrL
zyoU3t*A%78>EeI9TP1h$s;N@--OSTCavuS(k3r0AGx*y&g)+Lb*|Ch0d!8}Io6}zd
zjx&pMWV^B=UPd5H()HZ)N6JRdj|DdI?A`CS$)wpVOjd;Wm^Lq2=DaH9A%*nD^XCm0
zJRFj$YRB+8b$ZLbPzIAdJax0^on@b@oi{`m4bIoe)>m%!s^gCpx|87IQcTNPPgj!=
zlU@L9%l`8LD5v`cXZr+T|9~V7A;n^h5$rAG%8C<h8$U4!PCR=o5mfrNCH4;dLCFIB
z*!OPL>pI=ymd>s7`&@_R_J{6hcj!qINbH@wW4cc~8fNm9^d8Qa5ANFg4-!Y`DdQI-
z^){`VcmGhJpXt73$(i8T*o3*{VBvF-$hq3hA8z?wZEf2jt8PAXY`S1`cd(ga*a1Ng
zpDkINrug@hf#>td!P=)~e9p@-!5Qt5QOCU4G{L5pT`F{WmbokMvcNJ}Ca}hYN@4Uc
z{HRCNZ3RZWj<)kcBDM@8Qh@;^65Tzj>N`{k?1w>utwXo#2i=IU?WgUI#GL8FJ?_nz
z<w;pyf0OgA7*q9Be16~5y!@~#_<{nH5rB8!qV&1`HqmD+)lcPZLs}}k^`h3HqAoTL
z`!TK6oAlqQzn{pm*Q)!SElf!1V|G~J6O3rxI^gr!UL_izPlyQ>)R%bmbjnV$y(zMp
z!Qm6#_0FV~onjHs6dc5u$~j`K>B|gs-gwh=^I>l0f_meS^HjCNy%ZMFtc#OI!f2Uo
z`l)fl*aS>$EC%KI3;T3LbqUaWlBkESe;+O2e$7$nj!Ybr!Z!?=9kQFor#gq_SMxiy
zW{;qO#m5n%jGKBvTwBCuK}Kx(m-Sm$XqdixCORq^t!D)KTaQX6Q|6eo9`8R96=T(v
z%#NMGKcG{|t;`ZIFn2Ykl92Ft7jQSRvCB)A0zSds!$%4~>0`78l|-8HWu1Jn+r<nL
zs|0m>NKD31PY|-;^M!<Am0f}{5j*+I7Y*OD?jdZA6%TE#*6*BnR30jOxRLiloNrl0
z2q2;WBVkEk%Rxa!6}NfnUVcM^=>t(i`n@{=`@V{|E&8d;Q1Mi;FEV=Dh8H6tIz2^7
zA8iT5l0yXR80;Mw<M24LOYc7+w#jbGii>!hXVXu#pyCuafrjwIoP8JidDd{PrWSeY
z^qAY4`LYYkYjX*l&en6Z06EpN3p6Hmb2LgFyJbJx-}s@JNvv5`CW_ZF+sjUBLFE4I
zkBZOgIU5vd%kQDjD#;WkZ+)!iLYEiW8>6=trDd8K@%43XklRi+r-~{do8(XyL4etg
zo5(%D*t)qiZ044E_IH+3VBSKcYLce_E11@6zKw_vC`2D1{wii?eckm?G9?lVLFJO8
z^!X<mj<{|bb;cAB@rUl=fixfbC(CRkv)!fFG7r#ZOY<1=gHIc#-j6sgEpI_3Ww!&l
ztc!`qp3aQKxM*!}m0YF9S3#^-cMjFG`_DX6qdD{hUf;@weu6mF<pey%5?9WV0sP`a
zL@aP_!S$oUH`|2P4J=RC*c4zAH_^u~hU~kY+<#ZZr2v5ge&_QgF~_?{WtW$YS~AAP
z>EXT6_ql)U#>6e=HEG`3dd`#=rL*CE1!cOjee6W4Dk1a6qH)$;pE~i4kjX|)k(Li4
z{MBe&Oiw!dtLCh_Z-`0xUxn<U%~d@hyInHm?i+rF^N|-PAE`Tzi9?JSg05LEBZq{_
z@+@_0#!BBNO+%SBdCb+JPrSBCa)--234%i~s=Jd|sQl@IL#-84ni119EkP~Md+xc(
zr-Vt|g#kx$`GRfkT4{txs)*0m`sCl!_qKqM6)rtsBLL1Nop}5U=ZX*@!m2rdTKZC|
z`@)~Bds#W;bvIDI02{lgIw1yzqBte)+o%sxx(t)M>}Egt9p7HvjX@|R*D;WF&C5n&
zG!b#N3LeDv%YqB-m2$k@jul3tF?F@K?GV)V;jU%zs~v>a?=Oppwb!PNPQHyBA#Nn`
z%vQH;`!{;pJJ#yT35OBR+9t)oo$AzodO5dza$6Cy4I%G@6h+TaV2UI7=<o?2-YfVQ
zKcg<D+enM2nnYJ3p<9GQ|0RN)J#58!&G~d7(r#IDhDZddPKl&*9b|fi3@9<ykhk%n
zmBeUs5(6dv*<4tb$^&ND#ia0H5p3Io|JUS-fLpR=EMK)cOOMWnrcLo6jH7X~x-Ip0
zQBB=ZMa75``2T5iA_NRk`$x|VoRq#w#DA~*FeWSN=%_jR`07nK{cy(3gVf9WK8Ku-
z7sQJQ=X;&)YYOJr-0H2<3BgQg1vC}vpufp)j0tSqN$3&8yidFyPUsIYu*t01wA#J$
zsE&Ba6+u$3S}{9;Fc;n}mcalHbR3C$&R6y8G*8%N#weHKg>)!wH{~)RiAgKzwqy|_
z^6HKPo`)y*Tr67C63m_x3L%urfEZceC1mllpcIB72_%#5uPk9D9*87rdT0VGN~yT-
zW0UdoQ-Lzb>{&0K3LeQaPSa^XW^-d^q^PG}VLg*V#Nxm?)Rzvt6tc2nT(u?0+G_v$
zU_S02(qx(+zF+wUXp>U2cTWBJNPH$qBi;ayZ~oi?7x~!u-nypePDx#HzaXrC{wweZ
z2>B0^{|ZTeqfGXQz%Ygyh!8<ZW0NFs-A@8Y^(sHv(|~{O2x~uGU=LX4w4?5g{{>`R
z_pf8{4F7P)e`5{{Y>f!<WVZNMZ653aywhQaZP3^J(Na@j>LHjs$m(rrc<^bQFZTAz
z8Pw>0(~B*Y_!JVmxqX=?!shZSP34`UgB^Q7J(6(4pxF0x=D(R>81kCHbzM*G;H2ta
z+Q`lLApTCO=HY>)+d2ONDqGbn+k-EFBou~m7we@){}dw@3NOOotQncy<Y23v-7C8l
z;_-@+R2M?9+>evB;Kz@X4P5-wV&KUEK$r}S^9NpbqyLRkzeZE02njW{C@hSD^N;c+
zB_$^S#Efe;{y%4+3|k=FLcW7ZPdm!vu+E$qBv~$ZDD-Cug~t?ICy`k#30b)(uc%B%
zDDgV^E)_?q-}ga@7^}oUc`Y|F*r@-~bW7f2@m2ZO9mfw(wd!)H#XOxdvtAGLv8L}7
zeAW=s!rRoeQWqr{rWC1)8Slv%SuG7fd>@i^Pkxw2oI9K9N%t*Csj@^KhW~5VVf(9!
zw8!VQi$`<v%H$Uqhzt;H3QP`!Kww_dENXr;4$hlMh>waQ10^KDpKtN=Tm;T<5CklZ
z9tijkZX6U<xIU6-z5Ff}``yrMk{)?`G(HBxG(SV2EXtGZ6tfqyPQjTzsTS5RZDk|f
zdF^*No#%1bBU%r=x*OYc6kT!2P$%H}Iny8uEPeFN$0+4=)eY(t_7f^UPD*WE7uaie
zRy1o@)}=)CY*W9cLVLWc3KTs#tm74P5ylekY(<itJ_%oT%a+hH@gim(zA=={Zm7tV
z%5hi6DogtR>iP<(DBG@UV(9KJ=`I0jP-#&VK^mmHyJrv)X`~yGZX|{tIt8S=L+S4L
zZ^ZX`pYL1W&zi-W1#4#Rx$Y~@*=L`<*B#5)e+&;U)h!7hHb$kIsMORw9zDIVDR6$F
zsq-j;dzPMp;x!Mmxh&M`qj4WvqiVKNUAkQ{Th!gp+v~#{-3oW@SY7cN1=<1-J`R=0
zsH!q|m%5r7T3oN<9U@(Uo9Ws=v)v{d=Fio0xIA{@XzdT?6&V#3RoE5D3VA^qN3XwI
zggqrUdeRbxG%V02$#bd)m;I~2==<7m*7wz|L7TXDP175MzvH5C?d{XPG0}PrrCG45
zL5BvU)*Iue<QBrknFn9@bNQHlc{>Vvr#DpHtQSp3mUflFrNPQ2&eW$VOO(@hcB@UO
zf@g__GP2HPfyTFS*~Irvu0VLyVD27gQb)2{?tbYwO+c|)sCz{b)1#2Dbawq?rGg@*
z4g7rV>ZE1LamoKht@$*Q$3zw(a>FMS1zH5qb*bDV6|%yA0^v_~2+!(syCK1W(y_$#
zXQY+sW87^LtJ5Es57s|Oz{djIn*ysjTjicjSwSFS3%4R?W6O6;cT=M_-tc?Xcap7K
z9r7zgXR6TFP>;;V_~Z4Uf{R65<3_&(;TI{z5MjIVg>eP;g~m*&QTiW@oNESbUKdH%
z$cjo~T5^lFZi^Y(2M{Ea@tP~eI;{a~Fr!V&*`)$)Hd3gybh<vpgxtVxye-YTAlmaV
zsr?Cx*Y%9-Ob^)wfRGe|d;t`yXFLIoo^<<eFL`Dy)n%>1*Dfq;C}lzN8TFIgWT~I1
zj0?j;m(|*1W}B|Zzq-6u1Hy<b^QX9jMPQQeh=Tld=9TIu>LDft0tN|nIh@m4YtV2`
z)`IA8PYP(5u0-CzQ@FFD0}<A5QG=g1izLi{M2zAagAflEe9N@w^;EfNY)WF@gx&qh
zD(5;&85<L_VCqfNi_GCNS}$1K!kWIL`N0<Fu{luvEH-dydcY2+&<V`{E;S*YNhnWy
zb_L@s>Dllb?7Y0(Lt*8)(@;VyF$|qm(~{W@4R>6ArwbUzMZkbtz&V|~ewem!qg`G9
z@GS+nUfZt<LZ+GJv^*>Lz1!hup@hB4N9R|u`k_5voFaOiKf}mRqqP=1?_6WIXZF;s
zUr_0M0ql?6op0sU`aJ(RE|<e#tUkk(XS5@wJ0edcwrD6;_d?Eklf(re=NE$^g=-T>
zu6-V_>@dw+cqR<7CRpi7%_A;0WOGZ13Mvgyb+V9SC)8v6K9FfE^P2fUI-{iQn}xU7
zR(Gn1DtbOo<PBjs^mCwA2Vtt8af_<2Gzp8YmT1nTf<<G9Q6ayXf#~%}&4bVJY3bwd
zWX_F6P{o%%hK*u1MK1y-tWp<GB81-cFsM=6j&)S4O9{(M%LaH_u%f(mGR>?H!?E!G
zc@JsXT6`MuaJ9%!IUALA(l)cvR$44^?aKG<u+8jT$MkV7J|c_BN5X`^z)*WHw)b24
zu={$h$upzd*UCQpK8V2O1d5ekW#Uf$cF0Sm;6XJJn`~NOe!*;PV2}e2P9u%Tljexd
zR?<Y^&~inxA8Wk`V-(0q`2O)ELwK0EYsdW1PK^)Jqpl_q`oXE0LT{SsRA61Jh~~yP
z!svph>rlW0HWBfIuikRaLO6&aA(aChLd~JB*RpX^n$39F@)6zaw}I}dc$gP2U{t^8
zCwKLhnxT3_&dw&jwCFrL`Q@+GMxrwX+GWt}T?<}m8qwcN1uEni;H>&f-A}y*INisC
z&&+x}y<7B{N7U6nFI4rL@@jE%c#v-(NRuy1IX>TDxH$2cLrAqe<khf4_pMPxId;i9
zsj_4|M8~A-{w7d8Pt@xrF?1VbnW|aF=<LdAyjZ941%tGlfZ{o%P4QLajmai)_4&H*
zp_fbGGui5$HQ%Opl6%z#iGnSUOh6^>WobwR8umby<?Zb&0#d0(1QenA^&CHJR~l+&
z_++3Kn2cQW&lwBBf6}X{cD>ZuD{Dl~V}?4L-D#epNDIEgBSw823@#vj4=2XMJ(Wme
z`iThvCdQC-Gs;R3Ea{5AXdM<Wthp!jT$PMwM4-cgk)r4flX+;~wvVC!SAc0zEuYKU
z;w0+Al@idD_x}2MM6Bv-ifu<NW$posYRRuPXnyfzxxU2gTe`g`T+a7MRplIz#Js72
z3DnS7yhPHWdGAA`l0iZg@1Nq%;|Pkxz7WuL1!x7~y#oUhg-RsNc1EkVZAt&Ep=mz&
ze%|Op0s(SqO1UQx{}UBR57XZ03w`-i>#p<<bvcY183=UpRA(QChkvdZj-}K!mRN%~
zrTVceGRQjCSlHpH*XUc8Ao&z)@3ESi58P{%Xb2_01px@vr<#@qKFQ>I)fdYMEDntv
z@dA}Sg$auqEWe2#WxM2Uxrc*V86%(gUY{pwx##!>GjCmT=>Boddx-rOA1zjSIIGJr
zQRbg~TdFD*e$6cCy>W>!u^M~o@$I=@rUPMm-Wc*1RdO)?5T!It+Lf%G8FsY6gxy;i
ztHhTQ!3qLV17yRKH`t!TAe2Hc{YDqGjU8yByn~c_X|f(ywAonTmZghZeVLyrq6z5i
z<D&pfYkS>#jg9xx>gA}v?3x~rK~aFd6KTM4>1Rgoe-c630o3i+R`AOzB3leWk)u*k
z3-FgIrMu6-pwEMTr8_Hcw8r<Q_S%*E$E9w7t$`FW7dC9b&IR7Y*qEF%b9G?lEE8+U
zORS0HbI+{PD*kzu9L&TF6oYmp>$!Zh%ImJo%Y2>;k5y<C7e<r@Bcm8=wIRr0Ik3xb
zV3JgXIJb6Fvd0QAZMHxEdJlP>Zf=BdI54RlI;zbxHC1q?*b1BQ=wr@~0amCA2<+-b
zkzo`<iY6v&e<<IA`y&j|ZpONQqXgV7kl6Z%5AqGZ;U^M8Sw4l2;V5}oBJq-<pJ=*}
ze(T0!dgAxg&Miq#_4IA3WIJZG!?rRO?OkVc%@e2m1U}Q9RED3FcAMnzTe6V?TNP$P
z^%XveP8zvhX2F%OJgWhht;kN}$j%+-f_IlH#79|Dk2>J>mtrohtrD#9^S@;tbE+YM
z`t$`}KaCrxb-ejRd69@bN`ZuYAjWKUWoEVA_nB&}X%O@~UvdbVqJl6-<U%e@5&G34
z+(B0^qlLfYsGlwu20GoDVXk-GY3=c@B3!>}wgLAYvHZ>H+Qq@)Y5Hx)JjG}ZIGrQX
z8q%Q#PrDDEJsX?@*NXSIN3Dx|r_Q%EtiHCKFY#Bz=uNReN-=5{Hj?O1hV&4Gc|-I0
z@`fRNr{Wa#3xSqBPda;{rn~P;nbQ{CT-qF1z>)F}=SMPg*@sO=DM<VaDEJKU?yFhi
zBALeJTgPS8E;_g{JCIYK)D$|Sq)21PcGH!)*_7)$zxXTdyshaK;Xma)i-;FVBW8nH
zb;4@<|A8OPXFv@BpD@|D;3bEciFX{Rn)iytr0bTY-sDZen9@fChFCWeb_4?vQFU+_
z5__mtqe48PFB6?RO9IAURtVH)38!SYY?y}QQ?loy+p;C)IYrYJ#zlRQl~wvgcJZZ}
zm!7rkv(p>jf?1wc$w7tKq-OvZT`1_qw<nX|$LT4wS+d(^XujweY~uTQT4|u(W`J*9
zIl`B~E<h-MQIZ`B#29gk%26-SUcmkoY7z81vh)zbuGu|9066Ype_4+3ccYEB>VR+8
zw@Y5gIum*;!lj$@v8f=%`*`kYZHC{+6~T`y_Ba$i&+EMHjljoSl-FV6hAh@Cw6$J0
zDO^vm=T@S#_}9KG$bCu`A>HuItLkEpt@7>2jYl5S7hq9BcW&)T(;^;^OC>@{A;os0
zDq>i9>_4Y2V1L)e^_$MGcCwh|JvBLtN+yUkeWAI02yIiylR#&-WYo3cW(T3?ZAVYH
z5yt7Ko?c>B?7fn+T;q?A1g`23um%S0k@~Yx%+8eJQDp0l+;}uuK<at%0y7CwPA*)@
z5hq9D(sKwldp%1@5|<|jK1k`!QJw3@ylc~2(|?9znms<}w0_CYSJleE<8MM`z5<HA
zUg6GVM$)_uKA(1<cr<@qzc5c{RzMM@u$7$4YOg;cZC%BNy(K{Z4vbuo`w@@kFbX@`
zM)=v*>~Y&|#kaiP{HwfKhOnu9oYS2O$+slgM=mPip&As5o5OrFN8f2X4*ueJab9YO
z`;yZ-tnt*UBpV1Jt)qpWecS^(Oxj9TsTYPXh<O(R$2&Vkuln>Qrs&W5=igJg*kMn+
zFb;7Z?(z}w`w>?`F8qe5=6P1fD2WUtAjlc$8;V+nTSMe!Lp<7Ss{hsZ;zkER6)nY-
z!#W!%@%!6Wc2=%DQ^keXUd>OJd^XP+6cKnn*S+YeUSeySu!_&iIsbMb-L^2=k7M4d
zuH6L=VczWXSt7wAJ~g@&?LGmWlr;5!=t%C2k=wkO&cj068Z2079OKfP7O#p(_O3Zp
z_`=5(C~dNl5YNBT9yNLwl*ss<4@vrWrADryw_GQn{#4g8<=`H(Hu4o>ilHhxVAC!3
zcs36J$gk7vxe~4yPYkDu<4Ck4@i1-QpZZgqM84k2i0vht8vR(1O&951(i_KFR^lJ{
z&I0^K@UYy4ONQ<ZWv>->&&4adw~YPbcG#que%)-QXLvih(Cjx&r~ORzzmt4Dn^P{&
zPAcjokh@Zz<4O|pmkvYrT4Yp(1VqU4^K->Z5XE0L45plRXAAq}{HyLlTY|c{lj}JF
zH8wEwqpjHjxq$+92%O<=kIlR&Sa@Io7w_grgf5uxY*Hs3c)Q=4^x-Vba!Dqs%^H-2
z@u`sG!hHJ*WgN$xv{y?lcl;k2V^o-tX=bYjvfow7NDNJ_yvEKC4<jrbgRf9m#f`Y#
zKn4iNd=nn3*bYE(PK^neQ|h<X_N5JnV-ilinlyRM;)cSC#iWUMW4@t2mRTGsAunmA
zk;~=Q_u^D<tATW(o(Ll*f)GU`^&Zz0<8ce>;~bdDDRs6@@iMcE=e?U{k$2jOmC-IV
zZr7jaG3xbB&H04QP|s$GG@jVvr$;{{mTr}CxO0(k1`x`y0O;aM_MCd;gg|9}p~2Ff
z=+Cw-)j*(8W&j4LxxEuV0HM;p?kIYnD;po98|0t02-l77h8HhA+!gF=X#EsyT}CD&
zqbyma?JtLyExWSizheb)ehLA=h7N~`&2LBbuqq1+hgjHW0}MmifiVsIelnmkf;qKR
zo;GPhF|!+$NGn&c^_C`;v*~HTn&gCQ+t?3wR7bh-V(w8a3<6cH%*XRz2PBrQa48pL
zHmq5P;l*R%`lIl}pGPA$oS;8OX4Jo$P@Mspnhz4YglLmwq-RdYXAv`KBwrS|pt~#{
zNlW>uO01}ybY0cbVE*`$9Dc%FAV1Q86Nq#$vSofNXgyu2Pz|_&o0ym!3E9nG;~D8J
zZ+Nw(J>Wc*{!*TG+780`ULVJ0f%e>QpQ2z4;XjD_kr1=tlvr9;Bf0&iuCFFtNOnXs
z0_@ET;;Jo4@)mBNs)CHr-tky4#jVRT2pdqxj};ggSmej#A#I5(_YaX4#?3S9m6m$N
zoqGkDVKIs!0D@$A9Bkho|86&~`yAL6mi>1JPm%g)#={F$Dma$kxN3ZIH#sGa|A`G=
z?Abm?dB;^z`JjX7V{khlt}b3c-v7-k&7+f*%r56{Xl_IE@2-~z^hIPOXfGKwz5}4q
z=gm+ax!c=7QU8>N`;Va2d7!HStT-(l%&?qN3kM4ke!T|{9nhG-Q{6q_>b70sn`!pZ
zEq<N)eu6;J+|%jYJ2gB*>v_)pCo6484|Ua@FdiWEt^%ano$RY^W&q^`p)CT$zE7O<
zW}!aeGhz4m=@a_62MocS8MN3MwVXI&@--GKFV(<62#E3@Nx`nRVc!F74LK2&I<if!
z-2r99d%QFS@7MC6*5<Lb{KR9j)K`T{DL(z%*l5pVVZW|9TE4dt?|tu(=-Sx_2%TsV
z1WFIkdL;qElqME)&=o+)Wl%G7$^G+IMnLcCdC$R|ZU@g2LmFpH96(SU=JRbx`g3>!
zK_;zzwRT#)Y9n9tYBgP2!0w~jKeU)2xHKYnQ-JM?9&l*$=*JAOpNQEue13RUI2!Fy
z#01Gr9awi2g7E6tmy+LL0vP9{mvHyITI-hY?aAds5`#PY|3^zl?^h~zZ*LBT2Nr56
z$nzLivwnQ8K0SR@RWNQReyzT6mKiDskZyO;D3g=f+-2R72Jsb*ANcs?>Qx%C@zPQG
z(Nzy~H&SYb*&kDCu0EL1?(B?FpgimPqTl=Cl48rmOs)71R0CYsv;epyKX~At^{c&)
zd0@&`Ip|bx0m4sKPx;FYmCv}r?fyZOpNGpjv$5xNcFbVr&$qOLRdKgScZYV*k*rig
zU?mTYAR%`boQ%%yK|R3Ce4Gwj?g%kC*&O?d97ppiS#SrtMr-og(*rPM`U9J`GlJ7L
zFQT@oBc52iOs7_*b?;NWXUI2$_A%WpouvatyWC9|r=%^&0EuR7c^jMJUn1E+hk_>1
z-PZZ#-Cy#nF!%!~s>w$NUt9!z-Q4~5`YBjn6kzCQ+~C3PB+}sLFSPcHVEl-K*owyY
zEh!wY#viOz?k6_Nvvlt$AUIWqete<Uhw(kEV<~8WD@qC#;XJ+Tu4zIX^Zt(Q_h&p$
z^WVUuyr3wP{kx(*p&;a2YOtaj+)MxNz1-q-!`kaqU|U%VFr|^F1=K9Kg6~|e2fYvv
z-dnWrBMhP|I^PqFvEPjY*5E*Hb^qzKtQ_W~N01W3-H-3MCEmzxSUu;u?=9E`=+qQ<
zEAxPK@9Xx;#VM(5#yXn%E+e5jA)}qYS;Npc8Vu=MnTqj@pj$QXF~)b3yWjm1hZh5i
z9^SytY!(t5UR3Osvcn8^Rb2ebeaAA?#Kbnnc}6Q?q=gyvt2iI}Jc85e0So)2ia?sN
zT1a!XJGbkh_reXY=;~LV#68zmPwU;I(h}~dujm6;hUfOmKnWw`fAaPrf+R<kJZlar
zVtA6$9gNHJnsg5<)r-y_Ug=|#4JTVc@?OV`9j5zz!<;Qm5;MS;?dj@RJACaBSTw21
z2rxa}|AefIJb1riqG=IDb9;N{M%KRVlJNoip7Zt)ow?QUh>Yj);%c-syv(oXnMpNH
zC(_z)-W>ME>-%1y14=z$6M=`p+4%xz+94}tYmwi5O7%!U087{a4p69#OAap<#py8d
zv8dYq>Ef{?%~~qVf`a4lwD04w`v*X%2ktI{Oo58=8G+Sm4wJmJ`e!KzG`U5#Y0g&+
zqM|9o93yWKJUl!gGHW9%5t6q(?X0Rf$AE!#FDDz@W>Q=n6X2B&5%{P5nbsSDwA<Ju
zA3>F=!YWt(<aTJnFyk@DEB%>!R=!~xoSusF?*jCY+lU~Z_I7W{X-`A~HH+GJW?xet
zn+;Iras%cs@qmVJ^@(r!&42FtCWt4a=QR?tl1!j{u-1EnU}5*NvE)_?0MDt6gj+Xm
z!9cr~Y!e7|JVzT++urv>wtlFr0fj}FRM$bko?dQyOyMI$lbiy@57h4+&cWZ6Y=BD<
zqfO<#wd3Es^8=XD#SyW90;dnP_1`v&6g(J=nLf)_dLpBe7TdJBF8aNXR55Q^_Y-xp
zkI?q1+`(Nyo%1IBg8-5egzJ;`PkA&mWf?{$NnZUdz{XzXpWd*quiy~rF{8`w+e?5)
zD|3b?(?8?&=TG+|0{}holegZJBLCDt9-aWy=RkeL|M|!NZ|4;4!BFNiobmDT+ciKH
zAT=f}O@ft?G4SofC;#_1ZO-3LrfT#1PA0<w6Kl-B`_q4R(0ax){iDu8u*^u;-e8iT
zjh4g+UCm4>g6MzL93O5@xspLoG~+$v=<$9y(AP2BLK;7LQ#8r<zpmI5Knu^+{sGS)
zo&bbephxMJ-VpI0eCy#F^Pu~p|GOS{1k}3PujSg2|3UE{E>*>0>HlaO<e_r>-`!$T
z+K<W%S`dB;<EJu_5E9A*3eoiA*S)=pQ;l9V2E*rEx^<s&(84w5%JuMoHoLnIlmC*r
zpal!c7yx~7j*Bq(+#eG<PRb!f@ql_^kKf&uzGkgsHlUAsp>a>407Q_D+dtv)nf8+^
z$jk4ih6IHHJGo-B@6ES{hU>kf^&ei*pOwVC3$_veHRMt{_zAp59~%I>S_zEsIfZ@>
z;02y$iIRRzv-WLR!+>8<y?pZgKz~0W2ViVI_eMkG{B>7uny2M?rNu~z7GMwr1K<{s
zoLs@VXM$;e)8L2ET=s{F?lsVVH~nFmQ3=pH1nuzx)Yi+psK0D(Za(?tvB<?xpzvGv
zBrN$DuqP2^1jKT=Yin!4O8<Zv|Ctn{Xn>M?Z}Z)a-Gt9ei3{V}UtdGM0cK3$?9;>9
zN^8KY<5NZ5MAiV49!5a)G)V_=r7zi9HVM+~SYG>LEcxFV=nq={2%E05T3c)hXu3`D
z+|0i>c^6g0z<!iwGFkTCamJ=b7<`$tNTTokUU0=$xr1?6;*IOSYp)r_1XA0dIRUDB
zm7C8@x5h_WS9;)DTv)}{p^dVpd@<}?T*THjMDOi=wJ*L+0xn7asejOdp>+PvJ={&_
zU%#;SJ1YhZt#wk^S>rZCj(`r+9E|`MfCsau0i3;AQ0MJm)vsugO?PK&E9{q^PSx0@
zmx>8Srfx%5!oTnjJZZ}Y)uMO6u!-VH&v7R~|NfBEXK-8wNt8+wfJw7{E}p$#3lhnB
zOk8Lv=7O+wk>>Z#*IYU%E-2`@_|{~<XKTM_aA{{0UEl2a+2O9*_0oz?0XpU>YpodE
zF{M5`R_kwH6weiCybuTrd+5CR`*pzQkNhumc?Ls@D`AF*z^fO6HF+DUB)p-M>R$lA
zYIWSQy;#7zS{0Zg%c9<`Xw2u;<>j6ymL7*a%oHq~P-dp`V|2(>l$J1YM{#(EA;uKb
zzrF=Pdq+gDU-1Mik5|7BN*tXq0bU%hwJwi;uZVuc0t!8Vk^JFdAGc^%6z}%D*Iq2(
zT(5d~bd*}z1@t`RPqv&ldYuv5ar6UWkuEQHZmMe%tN?OJ_sPivxZ%3J=!EgAFNHgV
zX_Wkc^*x;1Qhh(!q%aAFMlVXnTg1VCI%*hjso|kU@6%$}`r@y+{15G~c50M>p4GjC
zMtCH|{D{nLse*!n6o7ieXL<z~4#)2Kp4CSuC0Sw%Z<RJ(_SU3-`9cpkO6>0#A-3F1
z=(?qny75v5Xlp4ehcPfRz8CuD?uXIPOhm_RyWG<bcvZ}OotXV9lv=cPmFzAa@(^_a
z(eykG&vo7((=R|cml-Z_<)<8t3(|6%2*Mc;3qi}bqM{f5Iw38+2`kA$c5$yHF51hx
z6O1(4dW}FOrhuW;aF!g7Q+ExufMv|~T>V6i{+l<;-+Rxoktg?WiQWC!5p;&PpH)I1
zQ&4d;+;i<tWndKB7I&o8-1ys^_uIvXR~cWwKE2%!lI#XN$Gk~eJ|DKx+^P(ZjQDgl
zP;_6P?6=|6FTZ<{2$;}xsr9RqXP5()S97l=xEhb&sE(HBNoj&%B8NxmcRHP+Wb~f`
z!H34Hzp^6Y>UZn<08-59pUY@1VUdzP&TnYYc?%Xj{GFRlt<=E?$M6>=F_(v35o6im
zvOXLEnP?5i!%A4_24!|A^Fk~cD5m`hOK-FyD*)aaF#oD)S4jE3NRxR27M;dzAF-O)
zOb1d}0hQsX*4C#Rq%kp!N^$1{ZH$=k=Nbk(!iU}T*?xDoFUeQa#Jw(i1M8P=IQMVW
zKWM+oa0L9DW7G=OmqwqY+B;Ex|BUpt{V#hH3w04IozwpPy^1~Xc$^B`ovU99B+*0l
zq~pM%@w+bH6N{mQ#_9rABH_ajf+xt?D_xSe<(SlBlkbQroYwmfc5p~}q;{bz*gZdf
zoKW#oKye^vnb$7>FBr7jJ783i5(is}_UyoCHIHUJTUq6RoLG_Lf$1@1aLC_Kb<|`*
z|FCkvFc42mmKK&b^Mc=<k7l`Hpxwg!WTnLyB@a?@&q_*{(bukc3xb3RfDG4s;`3q3
z$_<wmUMLu_X!CI#Q+tO-m}oGbwlh=Hr}|2KjRDbLCYQIx4$c?D8cpDJj&6zY4A6}A
zENtS>N)cs%n*i-a%mKqSO^4?C$7nK1cJVWNNu;)2<CwxTYyEr&3V40Eo!QzEu63wm
zEw;O>!5Rw-%RW`0Oc#4X&3&v83!D(DzJR}`=uXRrc)<Jfh?wY`rZ2F}C@9aU_ivFG
zg<3@&a?X<CwpAT0(8Trr&^dNK!M)M()WwRtOaHq}Q((X$u$Qcj^cg~hOVe-CPr+=c
zZ3&s{;R<k1P(ffsCeFCGf_D(82MkD3p`=&jUcRJP(8iq`ESTN%$0KyA4&}d{{&oa2
zz^`7_bX;Ybq^|%@I>4Rvhw7b6)k0rxyeKc8uqQiWL-V;hb;+EmFbT0*s1MjSln=6Q
z*TD%vT@SvPKWp0Hn7>LmEE}KoKKfyZvf(xN<AtUd@Jai(vXdtC<-nPOPpJ8)7yf=}
z&)y~Ukma-eoz+Wt{%;)SJvM65U!{tuv9YuJba|d^GP-KL@3-D_p*bQN54*eGkc1rf
z$cE04&Q{|FKpuB%0CvyjpC4;HOMFU351fR8$?y~Irz=7*;yt?$K3w>~eS0Jw^+(%O
zN|erDGp&&eb!(#3j=9n7KKYlY<pV`h^;55U>2?|<g4yHoSOh*PNpA;ps!(Sf19tZ_
zZln|8q`a+DT}RX3WIDk(66Y|5@7q30pb)GW8vX^0-bWddG4AO%P!eDIudFFuj7iR#
zLia=0P6mHXyKJ)r$c6iew}~O#%d8gYf8R5my+204PiXx~;{da{Zad#2iu72c`34V1
zzzSY;P}SLC7V3bo1_Qy`>JIL$+{vhq4i8f@d|AlnM>~Klr1tptNSEC2e*VE20ju%z
zQ^18{?VFM;8R+C0YpWQ~sd3yVRWd>Aggx>-WDfq*4@plV7Lc!HpTEiQ&!n2}3Uby<
z)*oKRSEzd+*-gX4+aV_n55JjUu-Jivum977&&lL3tT7<GLHSO+o6l6IGvn=xlqatN
z8vZI<fEgDdUVG!DB1TNu>nvH}#I|jWKcUHLw9@u72pUhOJBM!Fs0ZGfn%2Gh5wlIj
z)*~yFGg(pVgImGLjih=k8B|3*OUq4PwN*s|qM<-f`)`&WSv+1$74VZ&*hyaWdI0cn
zpS-4n_H%HWNfMy_-GKisqom}*w&Nd>^qnNQ80@3ac2^#0b?$ykyXAKVy7!UWt4uK8
z{$c=5?`*Bp+7F=x!ad`NJQDOiz=Mzeot{T_->~5VL5W3RU|@JQ(%_a90@8ax4<P(7
zpjPi`a1Hh~(_#(X^zi$8^%Kh==0u8<y#;;Qa7qi;+P_o|FfwSd$$u)=MtCKZA98Cx
zy#{?yZ66XtK!q)o8wF+klKLq{%*}%7O6zANkcHhoDy7g0ibh=&`W&PsNM5hQBh18?
zIpw&SpDXe?%7>$M<}UZL*SHh<Jb|t79`ymAO2IYtr~BR3vWNV*4@ll7DPO?b;1o^D
z-A4(Z2;nvC$|~DA`$oYV?y5*!rtaf2kjo_1cwIRtFx@v5I5o;(B$R=Kj;_?3fW`2o
zqtOb=l(8i$iQ|(sY-+Jzimy?cyMWmHgOde}FRbdq{!GXq%L9;v$oPRPHT?ogNc$`-
z>houGxy0a3{^8jGt3SaBxJ?d@yJ)|t2B{h8wBhk-t-PJ8Lq4+z;OnOEKO!)pv+_nq
z;%b}U0}$3ujn>rEeEnJnm+)lu%PW8i2XJl6Wj-qz*+|UZoVdi?Ga_x`;Peh@rAA+-
z1251QDUaUI{;MF;jsp)xT_Ll>cq5W5Y_z@db2?`kpR>Y2hntD7?r1>NN4(+oax3d=
z|Aj3K(Dwi*Fxmq#R<~7YBU2eU#RZ_KfyC{hWhfx%;_z^9?9b6?iTKlYs$sp51^;ov
zoM*Pm(+-Z@tGgc$4T(jG^i!Op=76C^{UQZe#$nP(%&L(OemI-=8jK$v0eajYPF<VN
zaKrp7iMv#LOH&c|Z=<ENX+cjBuE0AH?Vme-z5jF$V`_;f81GyD@84REHhF>vlt5hN
zjSt)I1xSre8dAr@*F#}s{7lOP(H+b(r+;uf!w5LY0b=8)r<Y!0SK8Y60#%cOJ^@XS
zI5~^09336gO0?^-cpaJnOCS-ZX}o+{sSDUJrA1HGk6Idl)QWF@1sr^dZsG7y;s(HH
z3!<4kvt_3=b7wpSWU$~<MOcG>>-Sk=D8fpj-xG#|X{%BnK+iXWjr)s>kDn4b{6r=Y
zETSX)7#SH!Z5S%Rtoqh#s*CZCN#j)+Ee7eKYL<9$>;YU@_+t#7xh9`_elNDmXBJcl
z3ApGvuQiGv9o$I!jE#*AS6RISyecfznIrwEzG$_Gg#-b`bVD#)+DQVuCt$$LMZ$Z%
z*m%%M5q{X35U+9mZ4&u@Qkkc~rOkmkINi|#&2E-R7qZ4UU5RD@mt}qo<_Z8|j2EJX
zuVDx6rudvrNw|T>3g7h|4NC5@dkrfvUznnvP#s$XC&Jx<37@}*<@NbN3BC#;?&IU#
z`aSeF@Lo6jJd<*Df|c|tCBOCWE+?9-I>V`EiVTj{%j{iRzavhBOz8XR3fj)H%v9SP
zAvL>hjsHkoMQI9b84fozd{XA0u~#$anw)#OSl?125Sl?c4GFb!FGL60h-)Yv+VM()
zgSi^^p9VGhgt<}NQ8E>?O^Z4#x0fNGD#dffzSH*^)7H(pYMBO^kRX;~Q3yUE;7E+|
zJ4fj_!(K@JnI(rI5g-Nltx@XlPv^bP0uk_mnWuyId@L;Tof5S~Qu|%ZQeEPXQZe7g
z`(WPbpZjL%o+jh4NG9-{0^tLZ@o7dRY>C1DPFKw6Kn%t|g*rdIM4EQeFKC(vpl86G
zEmr`H$#~ZH!?SsbTluL6FURqXi`$<kiuj6nY>wu;RmwYD?D^fz{K{~ct8;;v0Ol)>
zBg#U;#F0Q`BhoaqpB!K?{?gp81+>P4+7&?qBAA<mOiA+Q$#y}|V%RWgNw{=aYUVwy
z5Szuk<<}AU%DGxL(VZJ=IS|GIjqd3PK#d?ry2LsqU=68{Io*5NzJ9Zy&|8si;F-b2
z({x&8A9k8;t>h?GhZ~yy#m`6xg`nlY{zeDP?}bk-Fd3aT24Xq2tDne-xb1QzU<p#T
zn3*iFr&y`11I$qKAtoNVBy$b^28i?|kk+P}+yebDaf)WR>zqM*brv|t=4EC5DZ(S#
z{fYdjccH-jZ#KR-T;sDC{^n0iHG8&jcUz-`SIHi5VhWtS748RywZH<>7GTVr!?yk6
zPdAjW$}FwZ2SjNrUZyLQX{GMSD<0y;-H}W`4y`wVCZhY)n${D<Gv6u3IUmynrRU&O
z(b^BSQ=S6i&a7v@#Je_0ovgoq|Gb3dQ6@BJ-*<>UPr5>m`dGk=HUvI}tkSczO#(Sa
z)}p0p=UtG{a)j8Syi_()Ql=ZS872sbpdA*BzvPu>591TJ>|$*Nc+AigVTP|@NnYCJ
zKEhIK5*TRdMeYm1V?ndGLuV>uno5@}B3!C75tw-UyAk{I2+iGjm%n02&72DH?LmZJ
zH()y3kgIc*H&R&X-W&mi8z*JS)B}4hminF)0(1xt!Rp2OLm=$FieUm24iqw~&=!Ms
z8jc1q&WAygpU!t+5qJ+E8m%DeVq&P76F`0Bh8?`Hv&m+}O*GZkvCc*cU~&GHU=)sr
zsg)VqatSZQyi)QZxlOH8L;a=j8lh&Tc~q%#LeCua_T|f8$n#7T3V@Hw`?imXy1Cex
z-eIs<lwF|&k0!6P-2s1Un%4VRoFb<65@H1ef+k#6KkKqNp3YI0<K72B_c8qdEu5_p
z&%%;T4&E`&_2Nf7WpF*&Y&%be@9|GLpPITw2!=N?2Z29EAx04zZi7W&Hb%M<ZHusW
z2J{1acgjb<JeAKg(Tqwu4U6l6f)wDZd(QE%H>L-3=bb`LOWx@O`1q7=;!yThNAp#{
zS}U61mDp<_5jVm{(s>qjKc%>Uu+H)JcV>GdV3AsKhXoRtK^JCwdSfs77~<-8l)T{F
zgi$6hJ>~T~JDxHGt5>S_ZY2Gdq4|1^yRBLyv96X0EKdN#V1v%xUvkMF?=GSYMVv-^
z1Etq?`M~#u!ce(7@uG-7lMT>fF%k)7T)cQ+pE;Ag$P{r9d=^-$n<G$T(~&)3#~xbW
zrrhJ2+X5q(RH=r|q3{pU&$nZqF3K8#0-j(#3DYKyNw`l1QcjC`e+5=`q9PYmQ~U&M
zo`0|ckg~(9iS>dgrpQ6tdFr0G+<j(p)!UlNj1LIWYMhg=O~K;Vt`_c^*yRKXpBep3
zknpLqE5mvx(2k$k{1cxg2UmmA8r&*uzbJJTdBhmRXK+26X^o_+li^GzZ7I%TwS<l=
znmK&1M1#M}Dx0A(=h(;jvI5x&Q}M$bb367N0J)X;y<ur}n{@~xNJe5O0p0C$H|#^M
z7f~d6)C4r>{co8iFM|2MK!wrX$z9vQOpwQkKLx+%i(^U&ShfQ>JcCBuEc!=do8a5{
zM<asY90N(T2zqR7oE82P9nijyjBNQmE^(pfsn3(J`06@+u~t2AH}>@C%DyW3?4HjL
zc4zV@IVVLi(y=wPYrN@j2d!kP7;)?g{G2@NRGTR=G+CM-YUfWlG;PBDZddB$<m6ND
zu4)HDw4QkiheR8>1?RhO9nZR_ZBfsu@)2_L%VUGDe8zBkG^NVNPiKJ=SjJv+E)%se
z#PyUM<kf3vJN_ng>L7H;4}=3cJ#}+-2`2_R9>-~m+{7QmrM#blOuAVZRUB;_4rJ>j
z*zw`u2)-#imwx*WSM=5ckKPcpLoH;Rq9o0;vH!|@E%sgAdIz|Qedugl$Ek-g9vVaJ
zL}_((72)^d$^?!hR`z$>UGE1p0)%R`6R9P+*#x|L$#v2R2Ky(#GRHyVg)m0KaG2Bd
z<&WXF==Id46XmYyAC`ND322|AgP&+n9XM!;I{1YWh9PDGX;VSk7Sg54VhwZ#+B&W3
zItDH09o)W4&<z6~(rql^j0B<H^^d3IyM{~@MB!~F-CM3k^}#L0Fi{~i4tyrxN5H$l
z)6L(?J$uyAI#Uggi2T@KiPP!!Vnfu9_lJW93B-hq-$cs^YYiQ|EsNXb@Kc5)Q5Rs%
zYG*u_s*m^pdvgZlMu5AxiU=|e^>zXEfm*d-#J0}-D$Xg=r`KRU2q_7D8Jj0SUqg{$
zj(N1MjD>+j6{m>0`4}Puhy@#lCksr20;x-^aapd)j0FW)1M(xR@IN8LYp5-<h4#Cj
z+wct9>@^w$wm>GIpcV;2iOG)lb%Q#nnnnM}-T<C)AfB9-J`c?E%rXNp1HBJ|96J(_
z102I440QBaX6zL`mJSm;)oBx)Iu%ymP#$|h@ad$WtwGCXAUh%PN*9hBFEo`5tPMY_
z7rKa5b%ufwpvxhPtBp89G7Y~oT#1G_Wv;-W;XZ>Ln8yp&Ml$s6*H+LdHdI*DLlWZi
zM#hDPco30@HX&K~*u2Y&J4Pa#3JrO*3693hZfDmsHFq*v<}}g{-L^VtL|v;hn{C~;
z>aQ+_(h6>yNnRxi6WNFD)p2%X%5`)wweD!p`O`dSx%@N{pkHNUfjKIBz4%C!=I?$l
z0>ZTfJ22}EJquI*>U1_#<r&L0v%DN3f~_00$5G+aQbTR$-bfx*szOges*)tEyQuhq
zhTlKHV9}yE_NXp6v0!O80E+m<a)i?EhYN$o<W80D_V&uWjd@pj0W_mHH{G{R>}=NQ
z<#%3K5X9=S2TOu0j|R)uhnj`V(*xbIxolh-$Z-d_eXHr?2kbC335tdbfrSf$&mrY$
zkJZ!9#O7lrb?oO^{N^iKPAR-BaJNOMnZe_<{xq@;?k$izX)%ob?Xz2{Dp_rJoIi1A
z1fX3>x?<z*;@-w;7>v?cdv2prQ%z<0;n%8~4z{Jy4m3W)W<tS0C*YZ#H0JJpHI-d>
zV*pP*M+F~UaS_^dJB51|bkf!kj>23e_>wm$B$aEbgoXxl*4q9?NBI>6Rxlw(y-nu)
z=*-&obEK%xGv!-$zXfBIp}!NWTQ&^|NoJHW7l<$owb<;rTN;>UBkT6olkHp?oq0CO
zP93W~rq{M@Fzf77U+eTwa|PIxx(s<qOiJ96Sf5oHtUaX?YIqjAB#i$F3E{k@9g^@w
zL*0P0s}GJLkEa=<eCTEMADerC?i;GhBiN-u&dY&%v>y&OEcZK+#rVbS<D#Rsrm9nx
z6_D*xM;S~LqLO;h^ix*uAj@gip-Wg1#rH#K-yo1qt%Kl^0^k=++Nlg$DNqUH*-N0U
z7cGZ%!5&-w+3>&h0d5uzD2C1$)*6I(6i+7g=*IM$Zs((()?FIk$~L^2M<(?}flfA7
zG16=X#-jY?Tq^23@0r?N39J;+R}FSL{Wt9Vu9EGBBKBzcJ}rq7zi2q%Am#Ch@F<nx
zNk%*Gs+Dif_ve-*<brxhXLQqJIYJ?Kx-6T26gl@BJNRcBG9ZW8RwB0x`zZl@;qf4i
z70SPR79D)3#{vF$JIL@wfCKI_?1wvaNsZUfnCh6Ya`?3l)2p<UqTR=4R!mvsm<hbU
z&T?w1>Wv4RAv6@2*a02JACA^Zb`516z%IzF)BA`f-suiF?UL?DYuoS=gv`caPiKSP
zspvnRpO;Arv=Gu^CMRe}t<;4)68E>=zFkVI2{`6Om1g3)em0eE$0G!@-vh&3jd8!n
zP6A(eMq*31%(I`iCnZQJPUvGt3cpq9jC$D%g&c3E@iKh!4kR4P{uKg6p2(2SGtp6T
zk8sde1vtsF^A?+JnWv9uV090*J3|P}D~Bk2`D?(}g{_EoPE)Cm2EdxYK$hE=5rk~N
zYl$I_(fn>2#!BuCgsr${dRSjhN$r+x`cOIez`hL`&`F2_5+W-n3!)6|u-)&kEv?5W
z<4i0LnMEvRv{Mi?bfec9s0OsQ2;ECu$b}F*?_02hzEe}VfCP$$*0z+_w}XJ}T;2mV
zE}+bXui=-Wf%GMj->mMX$CiDn^*XjYoh>><AZFBH>Pp4*bbG2vgSYY~!tdIsTVj#?
zkNoI8z6jKl;Sro(P$-LqSTTGwP?$mLA?zgQ;&X*#)B!`#W+AvxJBCS$_n4K7^Clp5
zOwlIB$r<;C#u`Qq5n~OXevaK7@3QKIqoty(meyI4oo7X|W#?!tiF=J3s!~)F4Q;XL
zQ|f%mSB+LLo|=KuOC6}%ctQI$&m(7BFb`kjtk={6NP1fVKKyaQT^DN8)oFXgI#kn$
z*j`kdtcVl!HllLUsllK7k~EZGhlzJD1g{-E@J+)D;gbK>PiZ^RU_z6{Q1iO6Da)`)
z6Cp|hWMuqr)F1B}@m5!aZ1vVjk>8*~(*es=;nkw|uh9h0A@vD(P(LyuG8S2PdK&o#
z{skj@vwHNUB*5&t_Zg1(s#2}>X1Q)re|b(xR!3_kA_0>4^?n<d62kfW$lLmbn*jmd
z4NbFDBEGn`QL<nG<c{ieh9<=Ge%QRa<&M{TT3h516$WKt?|AEumL{eY8;w+4Gh+}j
zTfZVsHvU4JN=Pj-uaK*sp3jMzSsJks{Bz+-GX7Do=8*&n<dV=RViuZHP}(`y^=VDB
zi}HA|*CVD4Zoi9=Em6Z}&?o15jeojIf&2FeTq`1bq-<+usB`)X&?8O~T)xVoQ_;cY
zH^lkXFWm56kQh$`gsbf@G)Vfv5H6%<96VcLzYQemarf{czhly6S*H}13oUG#7<!ce
zU+P0SGY_|F(ihjG>o&JW*(F8bG8ORZ%CkW&2!Y38`FZ>!(|9y9QF4y$D?{uEuf4{J
z#4m_bw2QVT$TvBZ9Lhj_QlS2|zEMW_Hx$|0cDEL98rX`Q<mKxC!Hh7{Pi@Nm#4JTW
zevpL^o==&jR~0(VZtYW{0xjUHcwHt~WIqh>DvF8CnVI_A-SBUa+)9VBNO}wuU7noT
z74@6M>#n~TH7l|`PjA?3x=PtYm`2LRv`sy|Bj>B0;)W-$M;ZL5N%6j@=00t!E%!Yu
zAj>borigb@h!^eD!FmO&N{9(w5dl(yXJ&x>hQ;YmSV)8Ex<g7<zbl1UVqj|s#YP+e
zz^=iPR<hAHajXC_Z3{4hu~`X(ow%3QN?D0Pi=$yzt_=4*HX*=34OLY^ZcLX`x+EN^
z`axDUvun6ceQIVH9$4RL_DhYawQ*c~ceAk6wPI>&oWMKcKoV{Z=0(#F7yh{KCt*9s
z&3TvPsfi}vS*siTu4S^I&EZYy5~ZPmZR3f$zO1Bb+5-j%1jzts697`I{K3ENdPPX`
z1NOnYJ!Jcf>#V;I<?fR|!MhS}_aj6SHcaci+70TBol>FGN0St;P=cuwIwf@@vNW#d
zYe%`Lin)mw+OJ6va(OQnm4)V38`Nq7T3-*$4pN`b%&-{k&CEO@VI?kOn+it4&2j*$
zB0^<sOKG^6mU0o)I~oZHNH#M&l{H%>*mKPF4UIM>9ptQq4u1AEC|51Zq4rpOMpGMr
z)aBkW;zkm^o~d#^;sWAKbkH7rk$TxUZJ}PqB&QByAbv0WFoBTZh7yl!PO2crtmKe5
zZ`=7Rze`mxyFtbvnah&IxtKv1TI}W2Z2Z5601-qzcJMlJZUFl<{N*?IEH<K7iwVSH
zG3n_G@OJGx;Cx-`8Pv$2Sd+mt@quK$MkWI$4h>@i3+ZYG4Mhkm_xxqsTo;AI`4v3@
z2?r<X<cfr;1eq!h2eC@`Q0`NgS60^c79|*FRGh@}6rnY@@(FMxoEn-4SdMKLD@z;!
zgD3%3^ktn$6%~m`L0(~d(d9ty4w4ZWUYN-_#dCNr-|t^7tstGe_|zRbGdAj5CibV8
z^Jl;PK&z6uf&P|e$|Bx@m22}T{VVYY?kZRjuTkgduf;p!dLAJ6X9VHS-i~YA39G^C
zj*}OzbHIjE(U%^73Zf6&Ho*8}@W+K~NC~V7?nNx9JYR5~aO)A!?69esQ@;T)SezmM
z6Y`V2S0j8Ro5Q6|9Pb!_2IR7CpZyk;rY*es)vAvdFCG7_=A5C6r%~se&!OK$Nv*oJ
zsc<+UmFlLc(}48WqgFnmaZ`N22Ol*EZrJ#lm#pP-&4TYte2lb!xyK?Hg;FTje)B!q
zADsHn9Hj+RF8z(=0R-uUk?IYV@prBTN=e`AAlFh|Vv;LRwTr*7D!1obq2GM#fo(Uk
zXa-y~cAi!`AE3nTrhi#O56p>aA^7%BgULdJxs{_Mze?2OExF0`)p_^OtnOaU-HuLg
zFx|IhNAuItlRQKo5A>o8AHdPjd#~{<jsItj^3yP8H!F36chyEII2I1l@Qr0!#a!=x
zF})BFcL;rou!Kv>W8lw!ht?F+?d<}<0DVX#I*TtZNe52;mOCGqIY2oi67T%xY{89>
za7O%X<H{6JHoqB{Fs-Ig(@{~0jX%-qxv0A+;Yzg!-Zcylb}jsnsXPn`;2eXm(ctb7
z5Q#7*M7;Hwec>QZ;A#o_S=dC)qXiU;I=*1V^%vLr4@n9bgd|0Sp$zHh*jN`>U5Unq
zcEbzi+S1DKTERAT9s5`|ZhI1n>^{K+w|Sp4-KlaTl$U>t_5Wp_07?gBWMnhpqPx(a
zTIZ@&l`)%_Uny*%?^W|clD|PSzIyic<ztX=&4w!&My|X5{3?S5v3xogv+>`z_;Wqe
zobU{{B2|D)@80fA&7SofH319hf)ewp7}tEO=^c>oOEA;XE!oVS=|&_D1>w+eO~a{%
z{%hF+n-}mXLo+Cd6&)iTrkyL-Wf^k)!pW8QJT@-bc}-QzzNnx;aeXkI8;EJ5mzNDG
zzy6)=f0oXl=cq*^YldnXwl+Xj8y$Z?H=hr{1n-=G4<mv3bALx0>+8RMO}8~(`~?C*
z$Z4!<xffUc*KjT;_#;n<c80F58rR1Y)g3A6mZ%4=VO%{|t<hEglA~9|Wpv}L-Y02J
z&sA0WV{ouk_^6*>7d^};ZRVj2@y~CYWGNGq>}{aNtQlDb7`5x(Q<j8x9#0B>drkrk
z6fdf4eMxDa|3M%^sVw<L0uMY>dTBm_Q)XR+_}3XZOLhMMOBZRYh%plgm)URpH_~jZ
ztWiMxVOhS&XV{Jk%|qf|6jpuvmLXXX>D3E3WqY7dmR9(5uQmDu4s(LBnVIMp4rEc9
zU+15R*q;YPBcwWpyX?)+T_AusaTh^{hV)z7Jgk5idP75lK`sSl&}oBlPc(AZ4kAFZ
zjRCk4S1R2$zU$Zhh(6Nie$<~77mcnZary%XT_t7^{rG3)F1&Wv-|roq&F0{F);ESP
z;o?_VPw|;8%d>Fl{an=*5W!B(TRA0p`=0eE&928cgpkC^NX<ac3n-#43|E>iyzVgZ
z9|&)f8hn3|yL&c#B7D-9Sht%S!d{KMYf`9QJlxiDPkT~+qjS1DM^Q0QSy{=%&UKzK
zUZP7;871y{Y+kX9u*Md{_l>w1_y-_YA2&Tcov{N9xYHLxlF_lr4MdYX*3TG{M~mn@
zl1KacD*JaScN_C4ROvfQ>|EZ}M`yEFcL6@PX((Uu&o#WL+5lr69%He33GL`KkM%^g
z0-EP<En0GM@j8%*lvAFR%f5?vKSMlLS-p8%c`5TYN?~m0_C(1{*9@?az#2JmsRI#>
z%~C5WDo)c>`fq$_`YEZ26Lvy*y2JK%HN<z)jW!gkDpcodhb)M_AmBj26Wa$%`>krD
zG{za4E4U)Dbi))0xL;7;Oy8m|RfN>G^5Nm(cg}&2o!<v*=~PrMQe~pECo_+I{x1BM
z>?-AS3w4ghj^@bri2n>9t!Z#jjECYj{pe0?U#QI|X3$j#$17scHCgtT4e$jw+7^x$
ztsBe?ug@s$`g)zMBY4+K8*GHGM8->1tomNpNe)tmjEeBSAqv!vaIIGC<0{rq=>v>u
zT+^tV2d2;t%>ZspGo_F%WlUI^F@Ug24nd@eNT@;)uUE_13b`M<Y>s;SP~6_NO*z23
z#_dL1G7Y8LO077!>ZFNzI6~g?gO@Z>M+3gEIPOeW{pjrMboz86IwVGx;o&aI1#AUr
zh2Oq8r-1mS9l~o?_{cZfKQfioh>>q-AX+_6k63pqLPJ!xue6rKz-8Dqp9&`=1tnyi
z2=Bs?7Y{lFVb%4k<PB1glPA1=`<5KM^JK^vgxY}Os{Rt;g4v&{)CeZs))pKboN+2K
b1`mhnH2A99UH2Fc_)(B~`Ml(*0p$Mys^KV9

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/architecture-in-k8s.png b/assets/documentation/1.27.0-rc1/images/architecture-in-k8s.png
new file mode 100644
index 0000000000000000000000000000000000000000..fe256373d2506ee702ea7bb886ec016ef1f5d29b
GIT binary patch
literal 116084
zcmbrmWmuG57d8w?BdH7`DIqE;NW(A!0*Zj55`&aV$Iv}=h@>JQ-5^MJhoDGzrxF7U
z9Ye!=&4Bm)JkRmH@1Kw30A{Y)x%S#?o%>vCPvA3Uc~at=#8_BZq>mM3Rk5&e*?`|8
zLVVy!NNTYf@DJNoRbCn^zngv;coS}*@z_vF3F{v4nh*;g8z1Wmx(F5y@Q3R1H8$}2
zCKev%ITn^0Hr+q3b+GUJTRy-93-_{&A@Cpl69xPNwJ-l)Nyh%S#blhnrE%Gkul)1+
z2wknb#qB2WkH|_v(-sShh6??QZIsjxOb3U=<fVq4hSF29w=fGH{dcf820Ts{R_Iz-
z5>8^kOA7-#eP$;Mb4yz>CrK7e2{GU``Y|sHGp2~0nIwyb(lcfmn2iCm5Dy;@9}Ae6
znVDI_=AEIKs;t~)b>N*Oi?N-Zl^8FtqoX5_qW}-g#)$X6sHi9}A3rZYKQ~Z<+t%6A
zPTz^!(w6n2k-zQ88rZ(IF|o2Ufmt%6+tq&qv$vCEVL^BF&(Fm;?Mw{+?a9*ia$3Ly
zdC{Nn-sj=t{iki9ss#F}n5uy-%-kN`{3}ZnJ21Zlrttqh{<pV_S}Has2EcgH)xh^J
ztNiD)|1B>Av#_!;u(d^(7rZS0pU?ic{4-;i9So4Qjmg``mUad<K;_Hc{toc}UgEMX
z30}0g{zH5hYlC?TEDo4hg7=?=1``hwuiU}Hf?z$CefZJ|dv%J)je2P8U@Ksigw2=X
zdp&0*_Px|skeq(#^Ka!IT9anFGv(vM!{x&j-%u91GdxG8Q^K#uP0PlIwXN}lA&;Iv
z4~GYYLlmTi&Uyq4c?4`>pIjs2=6M?CjN;ciV+3ZrIua0xqVm4JSU7~tp8xg7t{76G
z3}(ub!NSI+fH2<)x9)pHLpo6bo2l&V?4+zN(a2&Hvmde0Z0gKq^@N<@Rof%g3NqAI
zO0}{+`1||6s<t>>tC*>m8=<pjxrJ$)!Vw#X%9<ks0yK!_6@}X^vC|p<>C>k)!BM^!
zJ6*jd#o&YaGP|qC6p&;y+}#b6kVNMqW!|NkfkSb}_1BxdGUP)JN){rV=)ppAh$zAp
z%Ea6E&;uvBw;2L+dmF2^Mi2igs)%4Gf-2?sVc~F-tPV2&@QF2;wy2mYFI>o7eT11$
zvH>s@?&Crl^yHEmaK>-4lvGw8<OT-^bC!JxT)Xo@h7!WOg*y#1H$PE&^yr7rxM}LG
ztsMCfVCdMmRN9`NvZ*t-RssN-v1NOrNVcdgNUh71)6%MN*QBJkx3}3iITg({eQu<-
z%Gus=20BT=8DDw$pptpq(RXlUL{Uj8q=a6n$YqtdYyXACeSK~Yg^MMS<!%(N`<ngh
zJ$gAPLOknZ@2l-heQom9<X+&tb0<7Cm1VgvEnu`5j|Hd^E`kI4@--*t(^QRPN4|DV
z{6dszmRBIc?!4jw-<GxF;V62D%$}Z{5XkpPy-@U<UQ4ea-ueSo_?;>>A4<`W#3dk#
zI@kRuojRAt%E~QVAIaX*0n_q?SXktJj*M&zWe|@CUH_Pq?s0Cmw{cDmtJ@n!vaT5c
zh0wCs0Ys@o8byf~%s89Xv@>F_v%9<g1(U3D&`ZxU&l@6E$;KX3wf>Yu?=1+~K6>Ia
z$R3A;E5!*3PMAvXoTTOFuY1>Q)YnJ^@`U8DpjE}L7z;a486RPHvCyxbe)~0-HUt<w
zxS?NQdhn^t`v(8J_q(fO0~HC>xD*PcUfbI?niZA_8puGs{^XX{ao!(9j+54{v9sV|
z%(y7{fI*&!qK8OfT;f@uY8?)?lgMa#|FB8=Xb;Jek&&T{_}m0XtMUq=hS3)~A@lG&
ztqOnb&+cIJ!JdGKUFy*N?+(S-nBB03N2ri~%7l%DR^)Ob4L<2Gx5rsjFruT)Tg?IF
zjz@u;mPWMLxT;!>N6{K}E@j3PEKVun_RZF~?A}~JC%_yj!e@IhO9Sb|Q7SOux>_FG
z>(2IW@auC`4UHSNG4w#8Hr_&`9!AY7n+)S~%KD(9D5~*KZ*CUA4m30#0#oVN0n~8(
zoD%R$xD@Y|lC!UL2tT;-8!7NzET3M|rBvgYH?XspIrW;}Q*)~M+B;=G3=FfM`DkYs
zQ|}>EX>+l$DJL7nE>@D8=s`#(B`ElYuqA!d`>5H`07xvM#<PAfIhVq+5~!uLhkQfm
zVxjxBm<8&1lfKDgx_$&X4yk;}bgv#E`4fKdtG#{O(h!(_zXn8#Bfif*SC<I6+pko8
z>e&{-vGKarX^U=MXc414%bbmzbjz+ARhYrt_JX<1(GB1GBMDFbWldfhKz7Xj8O-{c
z5-2=NT?l56;?-S8E~)BH72cO7uU;#k0HYQSfSv#gb&Bg`z<RnasvZnTwe;1j9E|Tf
zaZ%p`Lb=k&h&c)cIQFqyVGj|^^oYKyuO`F*V}y3E&qjvq)^5BO1SCKa(fEi)dp8no
z1ZoNPHfD6qF_w#)XdZ!3l#%h#Fe4H+dG=;L{c!~Nb@974en&dni)OAR`^g?n+2-Fs
zFT~^7PJy1z!GM5obp#9Z^S_cG`qaj0$N`dyrM|<>O?^DMdHeWvQ4h^O!c_ER{MC<i
zw=HAfN@h4q$j-9*DUq9>@4i0mx-m80l=Zac&(Oh)OP~C>AJX+#(uiaDj0x$(hRwy@
zrM@|=jw}XVwP_b*9;cRgX4R?7S<2qt9(%cNK!H}uzSFsidl$oCskRpF?ugj_kS_5^
z#e-Gt7iPY6t9)x$*ZU`64X3<$*QZiyf`Wp2`UwL1rX#M>^2?U~@O8Y_f!=^6I4EcR
zBsxy@Bd~kxC?be)FeAyjOD&cGvw{pf5J+lspy<PD!q-+!c&vL+Cc6T44<a$;Xd;D5
zX6r9VpQA%)Cr#cRc%kkMCBE<5QJ+7bC>za`87T2CJs8mZu;l>??v;r$eU>&#HWXl2
z)5<$xW83Ea5;_7~I`a{1*m0LJG|V(6_-IgV5r|Lk?%K-WD6t`_v%@>Qmndei9DQJh
z=uSB9(ZFGvF8))LYhT%~6-v4=Qj+y54DH!udG(U$P>0W7y`mQTy1e7(DXZX%hgO+7
zTwoiIoGzM*KZ7s{%^lemf!%cT48+L$#B}o;R#ZY?!r`;ry#yMt*}2#7XC5M|)9<DY
z^GJ4skQ-BGy#&s>9{B61+1E@bM%g_ErZ*<3kuLsG0xBKW-jsO^x%)r1H8}$c<i#p1
zkr~H^CRT5v7U70d)%IBuhw~Axd9O*I<@Q=QuKf8S7P)df0-`v`R!&G9gvBP>rS7*}
zAt2k$FGee~EVo_~lb0IRwKZG0^C{>J`&;j1(c4ae)~gZ>$p|K<@rK|KE?qIpSN0P!
zu_uoG_No46swTL@$QEv_+y+U*XFW^C@BT*R5)!s7bL_qNbaKro3GNUWJ81z~FE8&F
zWVWdSz2#;}eFAOO5}X@hedpj!=C#IQ{9+MVH(_dO>YiaR_`ss(b&u5dnucr9JzI&K
zyu2!<fn}E(GKhmZ)K6mdnm>*wT7656*^ho`8@buF&`+U2?X}Y_4y)AZP@h8fH8y%w
zb#QmtS60Q@dzdIXr;cScOf%#lYQ<t}qvU-Ek_JvtI;C+rf|XW*<tsOmxwTj04ww`2
zhq9-;l5H)nTW{T8KdN=!5n9@|P(p&@kGyIMN*0Ir<z~gw9XF;?IZupUdF=pd`+;Z_
z5daT$ihy^IB0?PL(7Fs*!&?vti{!e1dLTrV#Mp!WJey|LU5C3b;AkIO!%Rv%`i*Kj
z8DbV7J6X^~LBc$lW$@_KKy%0C%Iy%BldBe?ZY2)NRX>zd_h!-usBb10s^6D>>;rls
z!&#k-+;<x8DFZPj?vd#Z)(eLYM;vsIeT%L$k(LIQYn+GTx2>#{WqeOuIZgXV%wQhh
z4gaK66S1xQZ22?j3mEP){GO5(f5pd?7fzVhO9@ir7{^QUI6IUnE&1sNx6(<mF9}%s
z(mzs<Dq|s~zdFpnQr2ADwLjx=p8ti|_;$&eX;cCEB27+0+#J|3rRva+Mn~kS?v|BY
zcJJGLlX{xngP5)bm`RP!fCuu7C`vxa<#9(*z%EEiT(IYQ2kdd!VNh)S)>!QMIj36g
z!Q5!kTaP>~+c?zI?ZsZKpKmM#i(XfR4Dgeb2~-BzjX~Ayp7dAu4DR@M8zl5)%Nr-4
zcU3Ys4oZ}2b+R7}E9FAkeZgSMa5)@q_iSZW0v>8FGRoe}GZeFHBzQ0(cV~V5@$N0#
zEcZhfO`mJgCc1=XlWVc(6591G!+T#+geuaV1CaH-GI{GYFDo<&!p5ps%jvDQS9}fx
zWA~4{Km2k%;xi{N63S_Iv|B`(6hbRJURA)gD&WsM3dsbHm);#ZAkB-EVN07)4GqZr
zn({G}!egyl^vQ_hsP*Fy%H3O0D!P${`{X&Lq36S|B!?_|#!%&KYmui{^OAN-YNJMy
zWh}~v>1x#OHbX&`tokRK3Bsnd_X*erzfasU%t$<U<8H;l?aH+67H!p`Br3btd*T7(
z*#Q8SMgewULbV6vMPjd{V_2UpIN9K&e|WEY)!iNnk?s*}?nY(;V9xQQC>oRTU>{3t
zg_fuI9fD!wuS5ti7=bOsbK~J{6H}!}lnOZ543bSp5*n%G5klm6tg$(k3EbU%5*sT%
z$3*K3OU(%8DR*C`>MpoK*{p10O`VBuQBD4#bi+^KNP+gLteq=U#rELA5_k^S{QT8O
z!N{`g6b<q1B^UC9Oyq9b>gwtvsMJgW%F@~8L^HNkC!x?&cFD=Hp_|06VZm8#2g>Ow
z#4ZV*Ps6Lt$Ws)mco{ytPv8<faG34_H4FPHH%AzioyX;3BI<}7>_VA5o3pVfD!liF
zw=&=GusUzN1fF3uR`J!o?DswCea+~RL;j@?I?ZW`7BYKZd?b(zRmSIFjpTcuU3Ql!
zp@wLbWgG_a?YVYb``gvT^_eILZSSP9!3PnWna>x}DJx}@4C>Y<)&$>IL)H>fZta!%
zKAp%v+{Z;Z4(8x-q%P|=xfgl7x<U*pC1i(dNI}CIbUCu7*U8{cJR@yTje}2%HBYo&
z#LrFKIQ?+#b>S*Bv~1E?$V8HSXs4!$Jml7c#4NbrOF>r%iFm2tcctnHsJMp96CX+;
zQ@L+#{;Pwwprye)lj3Bh^mj=OjxLVIQ%PI-6UFtzTV9q0))mNY#MDA)Jo5Br=5&4j
zW?rBm5io=I0g%m|7BFnpmV?pY1wI;eLAC)TsF3LTNGakago&AHAV)<9K(dnQi_0?G
zMAa4{2%DcvW<*)zM;u9RHg5qGQg>UAJb~PKJGaDQJ>3~(BFZ6{=g}6?<KEWrvny+-
zqxP7E+bj`jcl<Je%ZXnhOzK62GcvkB_j-Y?&uumT@>LNTqZIY}2j>hflL~ObG})}w
z@$vDZ>NU#_<ZbS`*N&p&hj=uv`BZnvtar>}6ekyEC8QA%4Pl1Hy?UbM`CcJaP+bna
zGz8bkEs=x~9hQX<gSer-{Kp+qidte^{clxl!bWzuzJC4s1(9E4>zXGM9bJtSOIpxe
zFMO2OBLe&F((~w;V9W9i8n^*y9G*Ce_#liY<yd=+K}i$}O4#+<nTzm+94h%);Umwp
z7cl$XXa`rn-%qDd)ym4xo;CO?4K4(%{eF>!;BHtHea`g3qOU)Z@RYB!g25Ki&E45k
zQGqMnb`)Y<)`KsJ0CS&f#g0I6DorAIPP9ETTpl69knR<2XCiCZr^xCx#*VK6<D3lT
z#wHO_zg_i4M(%<8)(}WRkpc^mD%s4gL`m`eHjbppiPGtnr&@QPlDsn&VooV|a-xQO
z(6nuK8kMKpFfHEyDEZ5xdY;TvZUnw?K-6AB<}HyaC5zZ^%jA15XIU{mFkW8X^I;is
z$w3N}hT&GIKYd^6#;AhxpE@O`>vB#VogF)ZQJd=*a*6PS=dX^HH0bMX+GZ*F*-&7#
zMU|*mnkCzkCQ^ytYiRu5AN7wbx#XL$Wd~Pd$4}s|WDe2dX8Gh*VJ1POFg_MLQ_@)T
zK7uV0X*#ghftQiwi1x7C>8`rROu=#@TzL5mPiVRP2XOfDnS}Rs4*iJMMba0M6Tn9+
zK<v>%k(vbvap9=OfGi%`BR{9aeDOMAQ_=HhLB|ru6SZGQ`c(<8o|Z*+eg+YfpK3n$
zk+v}DEAgw{8egy@UIED=3Dvy;)7GNM{2lRO!<It_kwT9_%PrIZTK+RlXBst+bHpcJ
zkP+}^ssYNxGezKRbUm=U_MPN;5>zY+{GN9RM5bcQ(9ruCR!gcozDwNHTD^ufk$)_(
zr?^1Xbxfe`{>+Cy1$?bEm`1SUepEq7b`qjej@vcbXiBrRn`2M^oJZR_&ir*6!lI}k
zP>*)K+WviZhcXH7-dJW@u-m}Y$aGayg#uj7Oq8@*LN>bYG|27oh)VB{hi1Xn)@;?T
z{TG|MpS_0K>jj((DWnV~vn0v5acYj8ckcoqr~mQg%o4aN)zElS8x47o35aTOnMTHO
zttXUmhzdIh{r)R6&X8y*rwY@jwIOn0=8uA=gI|B&4A)4RIQvRIl(pn8OsH32_&Q^v
zpue$2E`fJ&Pkr~{ktQjb+gGH;6PM8X^}BXs-jv7Qc*`{7arRm!11NSTkCUyTCW*dW
zv$_Pb`;v&`uqc0tkj$qr#=Wzw{0X*UrhxMIUs4do>LO$%7O}ZQZFSYKul3c>m(5L%
zk`{OHm>w|ed&PnRnD!WFej3dD;+ytVpzE09118eQ0YH@>`&Dxtox~WedqTW=-p0+&
z8x|y;tcW-4xICsMQU#tYFw=K5j>f-U?x$w=ut6fU$ezT|m{!2vIxo*P0xU7nn_;w6
zj(l)VaFpEeI%_A_-cMNfb4T5z8`N-gi2=I)dJ1-Gtug-1UMwpcuhmE^^`yaGD0^Yz
z>n-JPc-#ng(sT)`h2Qs$O6pk#H$~wYh&z%87An}|ujJdD6YY(jBVSOC4ht7D?!S`E
z+HlWSn(TS#1yCZ>I88l~vj}Auq}3kU!nzP1)LUh?vfD-y+J$<8I|EK*XGD!GPq~iR
z3+wk@D~I-4MU-dif@JE9#*sIUJ~TB|AF@oj7e_e<^8~;%mrzC3r}_8a{*2FU!lA25
zeV+C86QkCe;h?RPuC<l$`7iC>Q)P|>D2L+<<NTW3Fe2fQAqkIi>M2X^M?5`kZHJ%o
z8J7%uoipQFOS-f>9cW7Jf9^k+QMb_E*q<3{SvDS=ni-$eS?*I;<{7k!a@zLaW7m&f
z9D^0Kv8^U?!z4A)M@J0r1fVN+ufl+UDE<<1fL)M*Fj)o2+Oi+bPPE3UglR2kkDQUM
zMjy{iq?0fHIC|z@TK+)<IubUrtdJo6xZ|j}-1wj#AL~rGv}n&S&k`gF&SjOK0^Jl)
zj<&e*UUBkdx@vtVe;mo644$f2jOHD2F)P~_zA><-9Ny&mOrRsHdScHB>10zcb|Q^1
znsC^2Q7hQjDxZAapYnL-dGwTvGGfX^(olo1AZo3~p$lnNMb+7J$t_^;ZX0vqIh_;#
zV3Zh(C*(Em>Th-VOe?Vr^9+dYvy{wCLj&7GZjlsj+{E5P75ms6@<Wv3c>~U&3Sn+V
zdG(KoTO&Goo4KuT?^|+{?z$utKS<W&mR=nK#Th<&@wkp@T8;Hp)7#Rgx)5pc2{vX*
z**6UT$c=d!*Z9^)yNY09RthHU)1lL2XuohQXP1A}Ai+XG<?&vM)5PiiOoQSTTA#hq
zefz0px2HR953f-4R31)N;d6k@2tu+<5Fs0;iA3evh=|G4=iM^gY+MbYi~8I`!>*yH
zb;D^DMs-y`XkFH?O(nQ=hFNGL*55NLPFYwcf)+=NH7z@WJ(jJ7a!u0kiPkN}7FqW-
zx`fC5W$S>$QQVrRs@BV=gD2A|>!7Mu*Tp)CjztB?carb?=nV)Q0s%c%B?gc}`-EJ^
zz%%AS*u(21j26>X<M5`sqxQxQ%J$W$goIPAsl<&j#{zEkmoHa)nPuvapXHO!4fD!s
zK)!E75g|v7Yv5WfEWHGaFd>s~J}M6mDBJT95(?_l*hHkhlZ@kI-@Wml^Y3X0GjDm<
z%Wa9n97q!ZD<o7FyX)ef7ZY!0YHWNklbn>;s-^6YBHxnlI`>n+>j503y3%^@+uE9$
z?flW=b@Dw}%3;TDytt3E28JTSFmDj%G2q0_Ho=fqZ^D{Po-&je#E?TilvI$Hr=6OI
zYYH6Sv<=9Q%XQ^VN5vghHO#g*B&v|sw!0~Z3zDv=&om&=FjB^KloLy7VR5DTtOUC5
zv2wy|Szl#~Ky~!=ROq!FDjk}uWpiVh$KlcDl=WP3H7>7bS=B$3)}Bde@|juov5B!L
zc}G6sLqL93#S`i%v~>PpBWT^`!44^%5Eq(O6czEJl$?fYNYHi_X-8&NS04q|*4Dm)
zj!>!*B=o2yajdMY@KheJ*9h0_^}E`o<I|iaACo&)EFZ~fd;HMe@08(Iv}?c%|AWd2
zM9_0#_{@tH?9Il(WfO~xi?{_aO;D9}bJCj<Y2?-2w;68syRSJy*+==JZ-$SiBZoE9
zB(aiGN(2DD^IO64gDwyYdskdqL>YgjCR40buYtJnOTGepy0iWKn)UHT%Mk)ZoM6GV
z@Is4fH@|Y+%BLMpTG5V6XDkU?OjOe#P)POZ^NL{OMImB8aOK36>VbV<Mk&$QxoZBN
zy8Y=Ic^?TH6NbbWSF)CUx(&^OBKBOkIqi-?3I50jr6v_TV%f^)9+~+5ZZd8{q>ooD
zZf*TB8atHwM==4OlDn{h+s;OppiG{50rvsnX06WWib&a#k+0+{P2H?<T@$6v-uO(e
z{07U-MWnxJugVP~%Qujmqz$|C)Y=UyVHLyV)1SW?JRKs{9Xv$XF%rue>zH-jSJ#bn
zYIB7==x|vrv8>PBP6%*w)MDu#GO8cmv&qw1I$L(h%nut_)=2PQx&Fi@q{hBl0}k>R
z65=*aZuRDyp0)1uZ{pYdPYt9*Yv6b7WU{+=leup?l-lS|pHBEV@1;0IqMln-gTL1I
z?>62v%`9jl-Y6QD{@ogj2ouX2v006F;8?EaO{&pGOzeJPwR6u~yt{Ai2(pipWNt`D
z#AG*&YB3S&KW0kw$Z)Pt9*7Y0TLJwtCZG2(yNB><tpBRE_bQ;lY^xi2*QF6+;ipf&
zyY^Ur*n&GZ!*z0ANC$c5$SrmK%VwhD{@U=~46^P<cA}%}epScK@ItUyeEOlfNxkEg
z{RL}!VG`I%Am7jXzjRg(GI+^S^%5MK?KSNaDA^w=Fnu8}G+-cNeIcG*3MO7vcSW99
zXRntGUked?6xl6`h@U<ZYvY6KG3FBN7J3Hq!20WX)J&7EMLwtQm%a@j`mH|&cX<&t
zQRdziO4cuZU%TpCoCCAiOCOTC!Hj~V+<`-42Kd{zijlDZXAxB&TJmsb*Q|a2N*!vZ
z!tQA;YB?#IZm;LNNA<$q+Jw44S(y|I8yX;iam+^YBP}MRVOOB7tscY4$cjHN#4<43
zgU!dYg4T+EFdFR};_+g|THO?b%CePArfZ#tshTs{E$$`n`Q%3WUkmT$%{4L(h?yxr
zV~0v{>D#OhkV%agTbO?k3%Mz18fEC<L-{H)GSX2F&PN*|m;Cjs0zT=@`9bw_w~p<F
zu28DD2P3kNF5&_Je{YN?j&HJW0~R)#*!Y{LdKpeoF4fUDcu#+Se@RWLbb_4?oPD0E
zCwtv>){EfA`oNV>_ksu*os#KYSBtvsfH=eBjp@1<3;mU3|G4Q#K)iu_yYLziD+0*z
zfrBC~8u+twKT^(>{H#AG-XuICPkeZ@9%yT2pfarO@9A)iq|fac9-QADJ|-jiyR*VU
zIA^ejCf04Q*?@RVnrHp?X04FXx%`W%08>sP7}D!qZ8`{<d#ZHO-IY87&mgO*?$$QK
z#CR@U#y#}m(y!*1AanR_oFhH=DrG^3sw2+r$ng)!^7nMA9qu?6>m-pTm@bp9&9D9J
z0sYsu&Sr&VMP=LaR#D+XulK4mT8`*Wm2gLZ2VoZXZN1k^Q=aiwFQxLD?J4&Xpe!{t
zHHUwvktW2bK9>Kjk+;9%Qga9XY7Ug}Nb=9)Cl9Ue|8-<oICr@L5-tPAOB2xOj?M6<
zzk2<A{fxV<D*a&~N9m$ahI#+Ui|LV|8ZHCgaFU=n&z}qF>FKf$L^x_3);`7F%));D
zbO8Zy@(&++m5F^SF6Qs^)OgxTAfP3xrlYT)veet4s;$k?`6pK^A#dFQ%<xbSwH{(I
zOD|sUy1)J@E)My+A|b21T<A|#?8J>Q{#eeqwadZvRs)fz;gDZm7cMuNh~DPcEq=fk
zAx=7?xFg8H2awy!@pokWuYNo`Jyuj!R{m;<(mVehz|;;9=?vo_lP1O%4y9POw?Bie
zaR@9EkB(f%s_nn!Y7|L>kCs?PPj?3%X(2^wbm4oi#!5{hN+t_*rHUvYa%nQp&YYiB
zT)Qs1TG%}Ad4(*zwpPMurh~U(_48cr(mB_&`_9|%vZet?xNE;;f=yjh4iJA0W625*
z4&`t4StB&~Sij`t<izX0=xXF*$#D8inf<!_BJ%19Sp{6r8{s*^3k4NZN`}qUrv$+0
zsO-i|O_U)ls(86S8i85x0FE)LmB~Zmk53&Qp0e07+wwq`iUuX<>x~D-;R2e^n!NGL
zyFN+&s%eXw^7QP=i}Vh4V+DOR<{@Pedzq<{#7L}$yF*P)-8Pv0!l2O;dwbHh$8Tt=
z+j_f=qe6r$M>~%0y7OvLYkF$xcgI+#&%Zgtfe_wBU@jUf0a_ju=5w(%mn5*w;Cgwi
zwU3Vjw(`X~07Crp)?90V1uqXzl&I~Z>{U5j0VeAf$`n0WD_tx2&tO_^eAe7)5U#bB
za%HQThtT>PW3bzSRg9onRKcF_n#5MiwPtThRCPdICY4)POZUzXUibUCXIpnzUp@!@
z1=v$KrQycHx9~1~b`{RB`ggN}y4%Q+f@nbYBIHNI{NEW*rtCJG2*e8@l}I6}?O&`J
z@?obw1EWZgT4>z|{f=SNH{X4Uy1&s+&q1}yhsiCA-C4^mCT=e*EEGHM7#4x=t=3u=
zGyB#>=@%r8n%yk-Xn9Zh2Ag7k?;6PydY7dXAi6|_;4?ea<K~!rS76AcQ3x5%*X9I;
z7mYkwy<sN#W<j%fn8hKOR`Y{At@6VY;5dMpz@OW|&a(V`{UV|dX(iDJ@|0(EZW)pH
zws2jDRF4m^LTY{ggvZFw&o7-vkZa#ksNXD2U8>i3O-152F5YCwu!pab+Vn#LhIz|S
zQ%f)Z48`bnEm$43SQdjZT&dCvUkf0l5eow<Qe}@gG?`nDLJJ$4OtKOdYtQt>bNvG7
z!Z-0*&1b|nYFWRj<rM>Ep1oOUk1V!DD2vVo3ru!(f8(%(urM0<5@UEi^wR%f0iuA`
z`soyx>M5_c_2);up6`C{Fl|Phc_|6q@^>YWUZI60wAA<`?~UJ<6^C@N+FQfKx1!#0
zbFYeQAg_VmTZzw?7IRVjCIzUJ3ar4$-?z<v&*H0d75-5g?(y4)PQrzryr<RZxEfb`
zm(jqf<1Hp|h^FRwAtZq)I#rwt!<)dOmq%f~8?^YTj_0@1a9~<ZmsqP^L>++iiDMN(
zFAG23GnWlE{)ETN<-w;J5Ix=aP|?2PE%z6z&ik#tNA88{qQiMwG{d49b%|RGydGmF
zAN30?G=j*4yON}4w0FCF7+#lWT-Ei;z0fgFNDZEtAoEs`?g`7=`ClKKcRSid@(u|T
zXpn<44SMz?d&+r=H4Aspr$7aLY<TOrEy_&bZV@h5I7Rj~#fm6Up)rs1ap-70yr%T?
zNc(89fuijrKZ^>8Ou9=It92zoXT0c(-1DHQPvSWN3)Wgr8cElO|1=$sKPu3vi+?V@
zDwf+o{B7fB2wj4@R4q2~{_Cwf&D=rGt%OT=_>+Lp{ITWgmwq(m0r+rlNF6v#eWf9z
z#=bZuTW#5`s@(8(TF-h2<#sFlMF2kbE{ly_@J`xZs-bC@(b5A=-h+~+Hp%GJ2??_c
zG;CJ}v3lT}pHGfBf0|reT&#3m=xNq|B2+J}?0N?$9jf|K`nzU-mx!SzE%J?eg$_%C
z$nu_}nnGnxA0Y3+k&wh~^xg5UctEaB-T1P{o7PZ<`ZsgW{R<#!f9@rF2$A(4(`q5u
zt@E(`(AIDHuHJc+OH!MB7^8L?_Maa)Ti%vQ=K!0>)oXMd<?-B@RXYHeZ5;r@CeSTg
zJ26G%t3P#>Lc<Zwe=R}?4gj2mAMI=uS7dnak1BL@;XO$eRY~8Tw3wblB9RLV(Yg*g
z$X?zj%I8#;B*elEU28X7hnmGU-Bz-*q|?kt>zzL9FN9yTr(l46S}}N&l78xec1Flm
z2UE{K4@r-D;(!#F?@l_dlQ>jHiOz<LceCPcqSVfwB%Ju9x0d|;3?#E)T-1G{QO>KV
z9AEKqKT@wT=yv^|KBx}eT~<|M)WjxWYekzs%eB*)Xr)KdprHOrQLAO7t|860>0Acu
zz!OFZ8t!L1Ni?S)TZm*wg@k{kU9I4{gp}!Co`U=bnMyamIO$%w)^LcBIzOC6bCtc*
zW?_mDY0f?BykA4mroO(Hzv}r$X&B7PO&S_CUZ_e6#mcn#poiB>gd?<@cHBEclr?uf
zfmx4yAAYoJ-TlC77E+{k?c)*L>Kp%S@z7wQF*B-<pGcdRl~6Yo%-}Da8m>9XuUct2
zk5)~t4fg~p37LOo5Vo8YiQzYRa)(cU0!Y!IIVzzK<F6fQwsFHVH-?^4^VIvP-bBj;
z9iN7oYHKH4tE^z+&1GF3K62?tpaR7t`HZ^bbxnMHlT3pG3F0IlUKbyy4zENcy8bkU
zG>I|A4)s@+MzAc;G&Bf|i6<7-N{y>ltzr_MmTq9f)%pH>C1S7@da`yE+bnMupKUb&
zn?&S+aKHcFlwN^ksj#L|#IzlN2>nT0m#1LZJ_YbKvlLHnQft$JK6xhYYqy_T6+;^+
z$fZsS_xX&*>Ytey<rX_`=)~NAD`(uGU4l3A=egY1XCN`zMsN85CU>WR&q^tnMeZZg
z(EINGtdNPqoEX(QAN3}L((VY&Pn?s&*|)WT8LYRi*J~_VkSQz$@(x|o{`NvS{Thgx
zT2$9?l|&`oQG%7BS?JQO0&}5@vIX)=Qod&?C)^X-mfb8PG^=tt*=iLpknrWNux`>>
z&}eY4yUHjrdbg>&!R^pytWaO3g^GJ=7QXf!x}s66=M%RoNQ&eVxUp)rkBnw@?2D;6
z)oMw*s@rsF#KOIChMgLrs^jn4#J-nzr>f^csZj|j%iBiFjsg1*z?(9s&wn3fT0HOJ
zPwgK2yak+GSF#I?B~rhQEMEr&7Y<XjGP>rv0Y=cyy^Hw<<u|^=3mEXe!Ly8N6CY=F
z1`(kG9y4Kqb)fKCppQn&ANt_`$isovZpj(He@+7GOqA3j6JO=ioo(`FCSY<aq<5bG
zn6gvdbakT8WFWKGfwOr<<lV3E!V$^5=_cLLDfKY4{HeGutS|tOQ4CG)e1!;C*X|0$
zDPh|moDt3V#y@zJDB+sBnINj0dp9!KCDR5*^#X?<4$rqmB=8bqQid+D;s}X`RU_l#
zlo}zBi?v@j-AgH0nwf|q?j0>kg4-8%-{v;fizw?ZbbOWfDnpB-f~=qp1-%ol--K%h
zHZ6cdi#O;&qlJbUYW{n7^$l>vk)?B7VE~N#eZA%U(samRA3tn_N{p9UPKhBR+h-|$
z$08n_?z?&aBvtMmrZP*_|4{AcD<^LLddW}B50BM+61G3`!C3hT<6m8H^IDsz=tv6#
zkFO%hrf+g<m3P+MYvN_7Psqz1wMsyn`a6xYh84`-ds`G&<!TQX<GME!Ex~m8JAlc&
zN|(|Mwby94BGfL&2jpU<NdR!xl2SQ9dySj*<qeVx5S?D+S*BWw@Cdphs{rEF7`-m_
zzHp-9ZVre_?TehaPQQ%Qu}Nz7Ris;ctUB3<J35UGb6n{y!s#Lf0uw_ht*|i^r+?Sf
zF!s88oYoA<`9Z5xygFNM^Kw1>_=%-ue#8&4`pH`7l7X>|I)N1jHWTqWR+~~a@+`id
z^ISY1K+5WJxq=ycSM*u+a3l7Fi;VkNtdB!C*DLCobEk*zFJcqWGY@YWroS68;^yZ{
zrdqu#!Dt{W#xZdzX<=;FDVzTE$K4IfC|K>jt2gv&@qyP*%FyGZk%luJMWM6AB$jz|
z7o}#X+=0%WGF}|+S{bSoHX#h)W(#V(LN39~Tlda-sppeqDH(&<pteEc8yunQ6=l+!
z_%~Ong8*C|kiXk4zG1iRD^zOR<nL74=*v!L*a?TT#=coABX^x@nKmnnq6BRgR%=oG
zX#a5gM_RCPw@l(99smWAcDXByBI}iN^Q$F24(c%%@!~+wx<r$_TXi!)e7OEOVgTv_
zPx}F)QesfmNTLJ))r7TyZG$pfAl(oqg9O5Cfy=dIHTYcKPt1GQ-TM75g-7p0ROX^l
zTfLq}BTHf%^zG<i)H`fK61~yE;p<`i<1Ut=mnor<xLjbX{>L1m4+9(dQb6)fa&yG;
zi2yh}D{73xg09L)$Gw=&K6Hc2jkXzf#SWRjXnX0s0KF72HMZGvy#fs~I-$;(+Jd*Z
z1$}b0o2b;a(3g~*t^aVwdN{)xP5z|&?jFXUXeX|#zb70rhe+!VRSvqe?J_RZXX?Y{
zFa0Wn*%>z%MhHuyLQNxrX$9hyZ{_t6xzY?CeJ(WId6A_|s{N&m%?X)TA&tD;@_^QT
z#9giNwMSC8MSTB54AOn?^fWzWf6_Lr>_g>nO^-LlN8<fO{l7So>P4ei6_CDGL=WHX
zOCb)W6_7Kx5&wR5ZIep_5x(Xu`2EH8pi5;A|AS-6>JM0Ip3%OAvYSRuD}Zx89aW?#
z0ye0S<=|7%>0qH)Ip0N^X)Z3z;sKrv2QVQ`Vw|KX0)1{a?>4!wPJ2V@3uPlZB<ufj
z*~V&(fAB$4gz52_B0ex%jjSlK2d(N4TDf36bh?An;_QFVd^RLpy7jNs@}TT#@?j1~
zpRDA+6{=BL%0~#DFQtX0=j7b0;*A>r+jlgf#z}H+Zs#HRcXng0>qgyvE<me-mn?Vi
z*nmvkr%3ugrjA)%79!lp$qyID3oM-MTY7m+;DgyKMo&UG|J=J+TL^O>E?20YjD)Ml
zY_D3(i1Fm_-vNv+Uz=8tt_E|TUnq+z3IwBcexWUBXnyU)MbP(xAx2|d^sCrwg~~kK
ziL*)|SYf44O&3jgZ-RQYxVhzqJCK~#QWJ>D-@7b)*=_PG>>v)@<J8@s3;>-CkA54w
z{$+`~DC2&6-QoXNAKo}kmEJ!XxX$zrf$~#Mq5F+MKE_>c?!Al9^nZ_t;yttxts<MZ
zh0kVj+1vq7HNWKF>q;MG4V>LlCu&;@(aBn9q9rC~xOMC79V;JNHNBjOai!F~lf<_q
zXbdn*W0&ChgPN-zn43qTi0`%V8v=%%ebpr`abEi1x|<kfSY{6gSc;n2pFibh#5e(!
zg1F*&Cvi6QB%q>twlFFd$Vzdm{@ELALJsB>%9WVu9B9@xKR>@|r3-CJ{|M31N!&1{
zyBYs6#%%(VFFMXjaq^nTeZ4fxJQR}$t-ysH#EUClQHmZ$Z%+57T7}2?+4QT+9M7lB
zQc^RHKY(n)dV4kWR8W^wS>sNc!+2*ZMP})EeL4U73jK#fGqcH*{I`cApV6V$(2I<k
zP_EF-)KqNO?K;3oEpuFSo}NUANzqI%hxm##&j){Gl_wh@V|TN#Rea($^*FtpSRIqH
zOmUk}uMulT$PCJGA~+E3g=Ptu@qsKEqWWUWlgYpokzx$D&gKQ->(;Y=fAw@m1U6-B
zW8>?1P|I>5MULKY>bz}0I;ytQt5=aQbh0ocIS&XA0(m7xJq%PB__#u>5#RKOboyO^
z*}=~l!cg*+u1-wU1qd9zd-v`aa6opWsd3%6yj%$_U?n(E&To^%(VQlh*C1#K$j9Em
z$@7yfawL)AaTdfVTfe&Aq=@bnv9U5U^`kdd3qXFUy4Nh?@#fC$e2z49m=(**my)nP
zL?4?-_dUy~tgybR@+06WHm=w!y_18j`W?+{$nkOLj1Wfl8hER=YzOUfK>cC<wlIvU
z(c?5Z$@qt!j!kLpt*)AH+`GteGr7lSI(X;qojaS_a81pai+MAv0lmLR=faVqQ&Awy
zdwAYk_^z5gBW5w>UlibY`4s5K=uM=jlDJAo4Ru%@y>;`K<(>vV+CKx9a;F(AU)u&Y
z@^1LzykBym?P9<XuGA4^bk{9BK~JfYgx-Gec|AX{@MwysA_TK;Q0(KA!X8Q(v3s}E
ze$hqEae$IiJwCIsN2_-YZZ7Q}kSObBU_M^jR?&@)J5%HV*)q*wT_<f;sN^<!>tu5P
z?8e^uU3IkmX?dlGS{<w3&K0Nz(!VdIG>q%8K1n+qW3aiCQN}-dAtorgC#1WLAiAeX
zyv(ODEbwF0UStgbqfE@rcP-xH0aG_tZUplV7wB$GSR`?x4lzl46biZkk^4`6@;$HM
z;HxnLMxnd~z*PwSX8g-u7XjI@h?s9?XC>bIkD6!H3Nx-fk!TD1oP^%};5WbfiIeUb
zkXQc1>Hw^Zk6u@7Y9J~3xE9C=mPoPpRrf{PHD*b4A^`%9$N@H)*B88Q@UeMYXXh?M
zh0C7lScy>>j1FxRJUR7}$Wfxdl~AH@k~lERhz&$HHjOYwl=+?)z)*J38pZ$asDaIZ
z(OKk!Lqmt<CEkGWMiJg{@F>Dpcnr{q#7h^-%-ocOF{xf(@eI4;@1l)1Z-b;AKwf$)
z^T6-rqGRjBff;ZfT%Slx#^+_HPdz<xJ;*S+`-Vyc@ShpF4es@C&F}OsbVLV8x*hNr
z0iBxM(tAjFEK%5l2P^I&Jw9Q+a8$EESksFA3&s!0vOjzFjCtmC-7%xGax{8|5ez=r
zlsWpmnO*1&aUlXg3`!J$rK1QxxaBB<0HerQ*y^61zMM_;7_Bz-nyz#0Fo@O$p{#zN
z@wYG0J%90u((5y2VZ;7M=o3wf?_l0lTb~OD=83MU?t}3qz?`2bDlQO69X!-fBtkY?
z4&}Tm1{CBd@;x*nn2@c&bB{*fV`gmwUU)^(j8;GC8p`=0I<XU2uRDNR-uaF}Ef63V
zHhe3M>GV#n3K6FsayYNpe2o7tFK<}21V0ejupt_qfgQVAdd&E=9R(Nm5O`BQq`kPL
z@ETCHeB6tSav>rOfz_mwc@F(Fn1+5?8GvX#P|8)3mAD>~76U}0gxI*%FB{JoCuWR}
zT`ihj#%Ff)iu)d{+Io#V@aE6O2-69#xR&$68!-2RuwCU(J}L5iJlsKa07SE+iLvn}
z^;?F?F&{<1QS5m3qfKR7+tz|Uuo<Yd8ga;nRa$_nAL*Hyx8E2D2nZ|$3v}xl_q-P~
z$6!Z7VA%*i6kgmYG4uj<MY}K2wRtZB#_%xk(Vbj+*Z06F(nmm(A`J+@0C|1C?LuQB
ze@H#n*E5GCli;l&kqLeL4ja?l0I5$*C(5c(2C%ywV@65br^ox`e*urzdmOjppkLqR
z067D9Er>^(f9==rOF9EMZoa6MF~VY^{1I0>RB5yn;8l$pPK!;s?{M+ychJ((_5&O3
zeQPl#z%O#@73gaqJ`Y#7;ZTAku9n-Gt_K4qAo7KZ<SW1&^uGp`U*I5$=fIT;S&$IM
zwUnyQZZ?xg1D6&$QXd7)0|%hbA#}p!8tIZJKxS6f4~bP-EUy+yG&2qyJ|~D|HLyNj
z60f;vzMYyC6C}l`giQ;jyhy~}t*vphg0??Dg0w7-81{(Jw|o-r=@mdVlefO6g?@UT
zCTG7=B}#kYn9w(z>Rj8Y(ffqxt{yqB5Pa{OuDw`gDfqTIw8kNCKvv=wr&7inD)jNa
zcDG;A1_(yA%{KYG6^rT&ysKC649&{tdJx8~Zt$Jfu`Sl6s-bNlKRT1(XN_C}+P<)X
z3Ik%S=YEO~#EaU-?+@o8+>wgkT{a5x^BtyjXKEZ_gByh$_vN3wni3Nz8?nsYASZbe
z{z<;^$fB*Q%l^o^t*6IPu9=ok&vW#>NNwmxiT#hUX!*6>2DZi6`i(s_)=+)g$mnpi
zyFB;wu7in*qv%HMPN>A$!JG|1popb$r!!#DVB7*w?><rQmFG`izq?F(@mj<MLM}_I
zHi)i;x8i8YpnabnK-16mU|+s%c{Ceu+x-zk5G*o9<J`r?*fF46s3(Z(F5I<B1g$@S
zYgKPNqQ5jeKs$XveC)kkpu}aPn3gerDAa+?XuXh*@za-WVH%)#F9&GIgD3Oo3pf`~
zE^(q)B_P%JoE#X|@xK~`JOH#I^*Iaq<!DRq6&iGa4%c8FoI)HIMiA&U4_IzvrT3?o
zRVgAHyM$-Bqz>CuS{5(uEa096fpO&#6)|0Qo=P<e_=AX^1bKUkn9JcXTcF*?S{~y2
zC4*7`0fJ&LlEuSd%b)$x!UKBCz8xNEO4EY5JqJ91j1ao*#Lax}?0j0alp0i>i4%{Z
zdx1%QdIC&Xb&BU+5T+{R5AoF-e31O=m7JD5X2FZYAOK~kfSWYF)eJB3|5q%#6wJ&Y
z8TVtpT^u?86&rI3Iu<{;mdt-S<$uJV9soq)b}M^cvtLT=V$FfiiP!<1N&y(*3-L2o
z;oZA;@6$2PSINtgcCkQJ<+MfFi#F5C8{zv?9PI4uZ)`De4?TxobeUn_3v>W9`kaVM
zyZR++ZGz+fz8wFIjrqT>F=FHPznDFk3ya3Sg8#nj@!yF+%y2aG4D|lVk)Q}^4CF|>
z6DMTx;Wj658}L#HDSo&fg#Wzzt4_%S!1~#ViE{j}z_5U|KcW3w`EPM7FJ&5L=Dy|m
zcnpC1SH8fjf6%~xJrzS=U(AZImA+^~^@ZNy_5wd}#j;5B(xU=sNC_xoCcS!@JK^;e
zcd;vuV}HsqX*B-t>5s4!*x{*yw@??h(-ZO%$KKvv8SKb7^zhw<YsB&@r3RM2ydsh0
zq9x{f95g9RY=_w5PU!!uu|v4Us%zer|Ik!7y<i^46Z|f_#-hvV5&v&(yng-qujQ<y
z#7gRP!%O*xKf|dl{`joIr~Mzr`TGeYuoe5~z(6kG|9r&u8BmJ<e+tZ20D;5nYR`_4
z|4(I`beapX0XUby|I(MM$78Y2VmD?gU`c>;k#|@dX9sc^RMpiHC))<L6TmHZ^u}tW
z)&L@4CB{1y(=HuTofyo6g)N_~RblxlA%Po+!FSgJF>ckDFWG>@;G1KGWi(_yU3U&r
zpX}{r2JY`hcf|<<p=_=6+}x)(>FBg1{1Yxj@dfhek>3^l9To5)?)3}JNTvGq>sL7X
zUg-JRDLR_lpQXYCAkp9z4Sx0tKwk6p9@gJZfym}NG+J_4gJ$RDg=ke>gdfAfI6&wz
z-R)>O>mPaa5s#85qtd=Ap`+>X@$|G}c3*>U+?PH=t<hQBpI4LyRQ$2iz@JwJ$3ZY`
z!ehmavmEMz;=2Us$pd%%R)gju)pcUrX}YN~O4stL(Vbbl=#8HMH4RM%06^lg{L0dq
zGopaO4OS;T*X@cGG@GAtoUuRhd%wsWq>5VVlL4;hN^iJrC8|HL`EN6Rtq{C430?+n
zJiXgrpUNxmE@x7v;dy;WF`6e*hD=n}pOg;YkQnWjQ{rg5GSG-(?8_cypX$m~O~npb
zbY1H!Rn<SZEYS8I@P!2bD!3Xp$<x)zs)6N(?xVtqqPOxbEV(|XcqE`-?U9@Y?Vs-|
z8-1Y^D88SKHi<)Prn&~vyt+KV)jWrigqKkAis4CzgU#Q{Div$ubn=(m?b4ESlW35v
zdR-w9i&!Y7JX0&sS=)sfNoC?koE9FnTvPd_AHZ;X?q>+ex}jtny7e(qGe!F~hTIWd
z4{hMM!?a~(MykJI5E&K4KdCHx>jL^*ZVreM;V4Bi${g*b+kx4~pRIf6-OlB${SibX
zo_8-(Ibp@ldyLk8j(!WUL6jZ?zW4fAf_D%-j?+EFYPreDklQMWTtK!2(O*3G*E=ln
zV<QVJH)or=(PTCU7H~Un;ak}0?9uLkN(XQ^-Q@RL#N$Nj>bpvbuGF?l9UUDDF-D1j
zH-c|Sx!1<KZMWgFzENAiLQ5F{2)P4Ak0Wl2CWHw_2VACdwA|B^N**r>l5EC}un#ur
zkwC4=JOKmh)#lifnp1S@=eAyjNUyFQkCqY;c#)|Tx9Fzd*`DeZOdfzqNbqtXl0c2V
zRn~p<*C|k_V7odLC09sxj0%JZj|qfH9#eeY%wcQg2R1^b%Kf2!odMvcGR=4YUH}qB
zYnB*_CaC><$sBX(hNT<*ZA<36(?oo^E_PfCn;ygFgg}Vogj2*`oKX)1#U=ZM5j{lP
zg4EdXy~@Ae1(1_{`luAl>dnoXJJ%keEcV!3`NA9|v*Mbk-&S0&W$k_#bJ6I7ee<{I
zmfrQqrq82YFa7@A73jF}O%!9K@R;tX!gE;|;|0M(VO-G29{rky3BLRBuT_W06KjwJ
z&V@;VR|(WzLB&Qasy65(qR`{(uebr7WE3jRI(;MwNTzwZ<U<aG{{p{Iq+z}N-byIv
zfLRbB5{(8bRPHr5c(dG0p%JU<9}=L66W8mnNFCRJ>j7+wUFHdOvPUE<UCsX{xT5tr
zJQt_y6zdo@0Sl63{Ya$+IH5N)Nngz>00JL<R9`?RTQtY=9r72VkFo#SaJDMXx>U;^
z@btSLIaILh6LUa}fpCx1oGHKnyxUpqs;?E2E7*f5Uizg=Jyg|hOoXq}{)$_rZA*+)
z2n4RlvsiB^y%a3@H3I~`ksVsVc@!N?x;S$G+a=^4$*4fMB#HAte}-Z+^pop;$z&Pe
zTdIc}ri^p}Z2nSB?WjFQ!ns(3fcFx<iM>d!t$ht}_GEt@tyedw(1_U;w0)b-zBw^Q
zA@DBH|NRZc!7^yMc?@qsos{6aUlbQC12E#Ht6o4<w#NqeDu#cYhn=6NB*~b-M`66A
z7~lfUIuw|=HgYDv1U6Bw1b`zqgQs8knl2a>0K_D)&z1*UArkC$x-l_ZPfvB`gQxF$
zo}yM|pGcsE=BSdI-<R|1o11gchY#tcrGpn74&Z*o6q$vEM?@pVH*$AuE`4<^4hpC(
zH+|jBVSD{;6%u#JI2pM*VZR7`2SlM`id^uGTfmK1GxaL^3wRG;;o<D<sCMpRi=OhH
z%yx@U&I*}NCGB(OmD(c$W?VInKq&i6_o?H@8`2&-W5(SNFFP7%(d&^#na{7C%p83z
zJY(k<5SUP9YqbjpEIpa`+R_`~t0{PZgL3@<UuRaB&&3`VA=bcpv%HwG{k@%L{zoKl
zd&f7OsO?z71ocpA=hMBBJ&&^p^1F;I0&-p9%dA=AJHPAvj|B=ZKr)0LZ*}Y!U3j4p
zhpYd}OoIn~kM#330M7L3H1UW{{~X-AjjYTlEbRS<jUMMN)Z4?U(*I4mz1ynN(Y=yj
z!2{F&Ar@2dE>S@9R<jFP#K7&u+cPmJ2HG*#cX1sHnD4^C#$_QIE%_+Px;9$GS~`)K
zLa5*?LiNTA%trM`s6{6bh|(R9{o#%JJ1YmmLBYYcD=;bM09}ttdfS2f+ar$W<N12B
z={dP~by+=J_Eh*6$M4&WOJ=ooB-PX3rMrx48J9pdY409f9a{7j<+B8iQ19ss5Y(jr
zJ#?3ob0>lCAiAp}0wX$X+*FFMu&>cb&}$A4r$h2$>;0d1LJPU3*u*(&Oxizo20zUn
z@s!i9Q!1-|J@ZC1<oM=7A339aW-~s+ZK<R^+ZX|T<)Bt{1|-@<8{@9hF8h#!2@T4O
z?zl#!&eTynj^?EZU)t89aK!_7JXRD>fpFyK&ra%>*BzK|dpQc%b0Vbd>TBz^)<9t$
zJ>21mQ;O-8t|~_D-R&k@K?(4!Z_`@b)RE%$_o8hQw31m=i*1v{HeMdKH|c()Q?7e>
zbR8A=ImF_^PRO!TxXBfxyI%n~qL-}^*>h;1U28qrQ)o8AqZ<Q!7tW{XXvD-%%&iyn
z>2MTDJJQ)8=PqzAtU97WvlR}wp1W(}vPZkCoT6h%q-(VI-};82IA1>0@e&|i-5Kj0
zd?o1mPI2t^Snb=lEuiZjT1Ub$4L0?Yd<c9|WOxb7=l0td$N)-HXvF5KwoQhw*Q1Kd
z2CYEm(gW$?iejON?A+YlND%$ok$=`Ama<Td5^=IdZ?qe%p!uPU-4~C=g?i7jh*~!N
zt=70&xcVJd{E(=WD{>-UfguyaW}F}H&D;`-Us7j0_@H6+Cu#teQs%32>Di3&&~yxP
zl>dN>+Cp?5c>~z?40Gct8N)+|9!>3CA!{Q!WO?*{7@Wc8*I1{x9ti`VC}rmtkbQ&c
zyF1bfysO>4bBB0>riXNRrX?BdW1zR8I;K|t3aouzqygMLbD2Mtf46n?WBZqA*st{d
z$J5$>iKrY%A-nUYX3h}Kuig}#;NrfNT80-+@VW+{!d$LDPZ(I0vVrA-tPqV}InM~w
zUMUSG#AjXI`=CE=`n#~`g_y*R-;rfID9&Zx2yzkCBh)Hz(UNQ8J-z(-p>dUK-<1CG
z=*3wLqKMOElrdZKQn9tTU=Gje)0)#<Wzwx1Lml1Sp~s?kFsCKvJzSxUX)dE_$IRO5
zqoKkeWa5m>PclhJuDz@}JCfP<WHYco%PlTfqhWI7&_D?uGO)a;g`EB*m9Wjx);&K{
zpI@yKkNz4Nh1*`UC90d6_hRzdsgX}e0@-T64Zp1tzHc7#mtj=EDadnHx~(fL`iAej
zSe(SW)p;HuSq*8PV5EH0(f2wvYS+>s>ipy=$>4~4z+fO>>EFpbV?M~e?iNM7XjEs5
z*4lhwql=?Aa9Xr<KQ%<$a-Uldskb$<>#%}83TBj0HW&S<s_YO-FLCrND=bj24wSEX
zCn7(NtstKmwoKXC@i)lImJfLYKUR3nVR~uy`iTYym(9q?6M3Ug=BTnQzU~c433I5B
z(F$lD?cZFQNL1jQdZ55>x~V}cyxUml*|yl;#lJHgW7F(SN0r?^h$hp~htxL!`k=f5
z(!78_3LvjC@salX!VIjAy!GO_?UME)J<UHEd8SBQeAg6PNKaizt#t0T4KRNY9ugdG
zb38j_5Z#9%p4e+27~h(%z0@C1$R9NRu632Z_$nR><LJg6&cx`p5tXPPbfADpfyx=a
z7?G7{ZQW1ufe`ROmyF<h)&4Z~QNb=P{vKMtxAtQzg>dt~q)iL@cv`vdAA5;oN*c>}
zwK+Ma-BZmA#@EG#1Xy2?^-^-lUA@WPL{{%cd(G*G_nm8Uj4U!o<Rsq~Cg^6O?w$)j
zN<2Ln`_ERd1Fe49_k&)x8Ub0Dej<vjFPZ<qkst04C#`?GV@pzM-*kO>pd<<A%Ac>n
zXK>K?+-CN@Pm4F#bZMGtK)fB|@%99bJ96qG90gzxwy%J*!>zmjlH}5=;(^D`0-x4d
z=Sb{M%jgH}^86p(-ZLz!W@#H$1SJTFh&+HuR3xipkRYOD5RjZDXC=cB95RCBAd)3#
zBuWMW$uQ&`lq?K6$I~+d&wlp)-uFBEIzP@IFPWLOR<G{rs=KQ0s$QE#r@`LBZrppY
z?K9Qv8oyGc6Tro>W)_k7Y?ttGt42F&65;@HK&4>7KEXo7=o&0B2QT6&ccJdC8>~Dh
z=XlWu>QUb0oaXgnuF|uVZS9@d<I&h;Os&?R%T5YsL>}{RozYm&;fl6zS#)?-T~_%(
z(FwqtQ*wEjqM+HW03kiSl#`Q~#Ev+~g4j!G@AcO>LQ(^@cYW~wN+>yfdBBqC9Vu0#
z1aZ|ns1MZzRfR{%_cq-{TT?pj<BqpnM~Tv{C1(VzamUZRi1<ChicpU3h+aDjJNa{{
z-6n9_6N|kK>Mot5?(FVa${fy9o%-^n_@b+Ou8vhn$|O2eYV7VPzI}f0G6+N)1g5g7
zf_MNGDTFFvOpWg(NL9FfeD>|czp(mL;;4g4k4{p{(ru*Hc0}ie$9>MVcl4d>YgHOJ
zV;XGdq=!E=wL^-spH2%P^EhCjNh`p=vW@3ALPait1*@yxCeGMyk2GMs)?ybPnx>~e
zQHZ5WBa8kt{lrvDruH7MVbKmF$u0XlS@)9?!cHfL*{Z+yJOFE~AilEQ#Y2Nax=*kM
zxCT1*&v#vUj#-T)6*VK*M^<yqc^r3i<;NWStRTDv`b+PUW_`#XrAV|$aDhotf@?ew
zopg+tD4!EpH@txTApDLP=vCefRD_9A4Vo9JKEGY=u61_shoTX0S?+ae!J~Ur&65xx
zxSnTgQmyAaCGL>E(fk2-_DYVy+Vn!Z!Fjb5)5wd<Fi$>M_g;>*i>M)DIyH{drE1-Z
zst=X}be(SO+)rhuc_?maZ#g2sxk_B9(?ttc{+e0nc>XgzZG~8amCY)iUftdb>mO_G
zh_Fjmog^qH+D~<+jLR}y&q_dPNI7?(d^}H`3t@=Z4D>g8zT;=aMBc+4Q<3zCx=J)!
zR~H=-#n?{LI=ObO{9{7N8SA-Xf_BqvFErHc5%oG{7Po`96$haK23Cz))8B?jf8T-^
z_Ns}7yd`X1ilR!n5gh*Q1%8NS<*GE9gH^<=C65e3;r?SbJuyzssU0@j9^Jptd|!xF
zv}>nKh~AIKmU|m8tZDteX<~BvDrAfWRyQnUbSG$H^_ezRDQ>BCn;=Ul4n^f_rbi-|
zGZ}=4=579rL$;c_0%lTR>?ri!`$mGTg-Wi*t*AY6h8v%F*>i1v76zL8NhCp@<I{cb
zSMYq+V7vI0Z~j0%I9ijV%Hv;Kk{dW*er%7LFLY5(y|21J#B#Y*v~(5MAzrBf^-ug*
zN*YPg6|?JSzZhLfRQ*-!eI(;EpC>e&`uLDn>2#qP>4(QF@-^;#Lk$XKR1je$x2TAV
zbVnx|h54b7;RNrCvNuPf&aEA7!^$}6V$)$~Pomqd0y<-eQBzW{b^V5aSZL@nU#nX7
z2<E-<ee-<_qf2Y?A9s{OlX?6*YD32hSJCM+o}%jKY5w%B)(K9i0RM4YvR;PYr=P#1
z*Ug<<oLo~X^T(=UE(sxi;b3EPKbOCW+B4rU-wZ0XEpN+2=RwMj@QQVsyh44&lnkS+
z_!!9<Uw>A9<QtekTfuYI%@S>?#USXm)j|%jmbeI3N&{1yy8LOe2x-GAm1e5WkMfzO
zYbTVk$izV{K@4>GhD(gf@?&WAgbUpx-GUCs{&VI7!I-+YwW!`W2#@jB4Is$xg;Fo7
zFWwTUe0NSp_uX3sSi_Ux24SEdM$xq`H5`Bc6uiw{`fsv(ZHM^rJ*{NqGt#I=G0TX8
znVNM$Wn@AdhJh9>=;kz&JE`9Z+eD{9W6&)9lBiBeQ(7!(rKVo1guttpL=b?b_`q9~
z5Qa2f#35eJY~oWy4-eO_@#(*-qk79sE9Ou0xKK7LVrOYSC#2Lg*;A4N3z1<4gD;T;
zE_l@eH=?r@!0{vKmMV^(>sKHzb(TI5)LP`y`qXDO%(@WK=dgqyPuEWW?JV9ht^x~D
zHvS&eE+Ovp1S^+8{Q*MFt$(IE^|4#dA$5vzdYWteS!&fL>E`ki73^Xh*WH!X$gAF`
z2Eyyt(%hd5wk-{nYAbA&hIeSabag==YItxNp#Du$|M~6a`_zj_r5cf=`KaC)|L@w@
zwU&L-0G|`9t>=25<hsQ0Z;9}L_7VDyn;V7wmIYH(vTjEa&&qyJ7nPcx7p4xotVPSf
ze&88Tl*`thPB^3$<v(3@bZFf8t-F<z;=Yh;YG1LJC)j#C9$irt@05O>yqnZLU208G
z{O2wyO>;$a^6Bm;+@d0vw3FSG8}r_!tjj!PFOGT5bYD+5$d{QxmTWn1E`{Mr>dP;u
z!Z`1ul$lVH1qc?5E&P;2O>+~|M$;CZOH0I^-7uiir^|x0=-cVTRt(Py0vSjKSF?`h
z_M<8YYaeC=3aFlKk4hR$uI<W9Nk_)c+js_Jkvpu0=*?l_YOqHe;>F*8GV^O;JyMyv
z4)y^I56_<Ka6y&#Wcj<6-uz;Jepms;#`zpyk9%G76~FZv?mQL2+nhIzr7i3-n}&y~
zUkOpCHe8fKSP(Cbm4#RoaET%lqLd+T&^~?owDl)j+0|}M{b_yq6ba+G>uLem3cH_n
z<-e5+la{>n;8Hd77VJErXzS{<;}k6YL$YoelYG@Ts_(sLFfM$m5Ry`0=T-9s)XkN@
zy7@}Q)uRpVQC)APk&&(Cm6ktp6EztHyjHocjeiF%FiWIC8qdOJ_R*!@R#7dJ&tBO-
zZ@0X0L-f60Rz0WwTKupi-XFdvwyAb~2Q4p$JIu(mqsM;ow)Og+_L$`OO47MXN|fw+
zq@9s+bE^b9nQgySO)iklov3(v2Ua-Dl-t~#Kc<=dbkaMS->20tp>a~t$#Azg*+8A!
z{dYwlpZocvyNY&$)*V&lZR6_Gp&UeJ@szE^uM%j9DXf$4=o53ds7Zbde-%f0u6Fpn
zAQ!A415*^UL9B3wlOFk1|6A8_F1FMQ@G|iF+1IF-`AVcx);#SXY_BAfQJ4Q-Y-Z5!
zSl}R_y5x+A?l0Y8-RJ&`!_}12?!U074akSi3t>m$2}-y3B$~e^D02(P*y<j^PV;EY
zkNXoocwsQg{3XB`QKO-5<l=BPzZEQdKYWnLEY6M7l+<)CRQ7%(Bx;hl-3UiCT4p=X
z;ip8f2lccG0z|H6W8wcm@idU5%mc|x<4C`o7em(8F`GZ@rpjX{Ye+6uF!ZU@ozp$V
zCs=v&^s`cwdp6YnaBHe;KRzp#uCdrGfq2EdPnyl={vylKLJRIFMM$AFr_!30?z^Ag
z`(0@QCMtF;4>Qdx)*T(@f6WKCF7T^QC}x!U*j*osp=W(pkgM1C@yo~VT(m`$O{9E)
zaWX9>zjeFfV*M+%C=UXhA9KS<I5g_aYS!6@p3lSSCaLk=b{t$SW^w7K)$fm;cX$tb
zMb+T&nc26;#!iKqq$$LA4LN^R(H_s-s4kNma}5ckCn4uuT~<6B=BTEDjO36`4G|`L
zez}`F_!D3I#Q)|W0odr<6gNjv2CRj3zg@A$;319yyQZv17g3Fp+W_n;mB$7k*>p<`
zP*c~9y>t-I-dA?x+xIn~XzR0BH(~Vj6jme|v`IbD|3g$H+cK|FZ1$--qtUvyW}aNN
z#L1skh=5m!IM+s!i}F`>*^@b&S~v3QJQ`CnQ-iZH;u>E`6NPsToMVrZ8frOQV(gm#
z7$_*GiS4)N2V7?2;Dne~8GsALO?rVqs4?#>+&L;68g%Ho1_$r*jn#2Rsr`Os-u#c~
zSFUnyobZgT5fk_5oZv(6z%>$qXG<QqI0g=I%l+5ie(~2VbK}1LZjx;OSyfeeIbTA?
zFleW3oltFBsg$`St`(;t37wht_MxR57t$!`BQQUc!$)TnA+J<OE}>4ZX{@qF)0%&9
zm%|z!>;8^6w4|4zOxYq>1s`%nQ0W>@dBTAak4wG2c0y%(H|yjl-#tDN=LI)TcEfWI
zH*2Bw%{3M$HFX6?h3868M~bz5PTNnO<uZB9!$X6-%wpAtAGbf&<oxXvl7S-L6kOwb
zsGzV=E*g#VrwwxX9A?^84y^UY3f31l3YdC_pPCo37dd*d-OH?Le?O2!lLnF5hm97O
z&~)Yq?n}mOx01Z2(f;11HO_6<N#AXn9#p2AM}1#?lQn*Qy|eFCkE82s>>5?~#8DOk
zI9eB5$L|Up*0>%MzBiEVI=g#csqX6pHHq3&c7hy<c$B6WV*tiq+^#B<31J6?im(G$
z*t(VNa9+Jx&x`V?Mw{LX(rRmKwU_BFERZAJbLCX~nL(7(^bqIKoY8y-QoY=_)k0Lk
z;H}zxxc+zwPjTIooT7b9b4A~{_m)xYr!w6Zi0^SpDDQ-g7v6yPZX{XLQGOx&SpQ*K
zG1ZUrg}}40IKKCm#y#bURh?X>qQ;^(nBNSpZbm*!K1WB98WAW3#(7n1)Hs$*^wMXo
zpGojE5Zg4uUtfb7RPmOdd#y`Xyh%82SLn7K_vfk@+~~^lZ1WX7^VKLnxIS&ao=LJ6
zl%d2AXZcuD_M}WdP-@9l$9SAACjo~ULOirSbxW<Zmn~QEmE^JtIc}4h{76I|Gbg8_
zr6oONVjn(L+@ZYi{Mw!a_Mh>FiwGQM6D<Hf4_Tg~QeH57C=cPn0p64xLB;uX?R4&Z
zN719gyV#8%eK^#e-(_|%L&|*ST@80_`ZAfBnN;0YZuYxkG^@#uWZn<$GaKto<I;45
z9rp1<&dsQ&Tt#m_(@1wbDs+6IeRa80S8#>wkAbMS;5+s#+pzMF|B@{Pd?E<Cs0Z^?
zoEgB%IKmq(%@EFQZ0eR+H+SW-Wx%<2VzO}FJ^&TvZt#NPX>#XICtLS6EJC>a_f;HP
zl*p+Xk4b%xk9^?e0uR4PmaX@1DJD<qK|Y0&8EF!8er;JLplk05s(gB9uJBp{{!J=U
zhE&hHW$=mH*p(yn<`E%mc)Tf|-LJl(6mn|x6<1X6N)$4EJu^bkBGFTwAg`rxKfC!T
z&rDx``7_K}l%=}ZE-N=*C8ZJKHuUtXgB$B%;_^B3(Ba(ANwPFI?V1RCR-*AW>GePF
zhe!-kcR)XjYUaO~f_H;;^XR@v4rTvNcd(2!+nul^?X~$n!E>xcE>j|3wl+$AihV2|
z9Cv@s(&(%yLsq=d&Kqp9Tyy&IImST`i5eWjIvN@6G}Vj1!gCDJe<g{_#}p}DsR=^%
zhGlVf8>+Q9<KJCt28<V@;zP|N0x7BwW($)AAPaZ-;+4i8ku~TviSk8t$ZDMx80PG6
zRVt@u=eL(nt0|c0VY@ds#x8%7wrY2;*}@qu9iA3^flvNR?@e1~p-vNIJgSX?SaY5E
zYh!eIv{m?|;@Od=<AFE1o0iN)e6SLc*NW!rvO}pYuX=a#bM3I`NaE~((uXQFhy7ss
zSXGi{$Yiyt9qQZ*R&z&3SC@0~{l=rG=%*pSeC1UaDfapxuqmIKt>2Z=HL-KcgFQz>
zvFc7Hr;OH9;nVMe%9Th%!)oqs#SXjEO*^m2f3vYuDypSX%GX}wn=DLd)E`<>1t|I=
zk0msY0n`}W{+>T#Lw*3AfjP&18i;B?tb;5&B<tlRdVrWtnpKZmvITiXVG2N@F6)*R
zqMo;}VINCQd(_Hw_#OScj)3Cu!EuBBgeB3U13206M`;Uj`~1Y3BgsYBlv7RI5W&l%
z?4O4G=e*>fQohCry;Sce>UfgFnIAId?0$Z~PVjI)EVRLj=NoqzvOzYYSvS}Msf`y&
zZC;_77B)Ag@*1bu?Tz)j=bK;fX$9%DD~S(|rQhv4G*#<rdzxoXEJ=~ex#b$DCF!@M
z7pdR}K+XUdGT09KRBOF>k6X0X1s3g!BBmoei#@Dc3s#8~7s>5g#X>zN3D$7pQ)cYk
zloo@Ws6Uxx@%w7RokX&p*UHu=m?#QP>mAZwR=l*H&Eh&LLl8`nTLX@8pWR+apaOi9
zhEN>5I-y#A_;~Fs(_fq2Edd6ycH6F;2Y5OU^3m=Fs^l{(dbD|nrZuNEbmd-T*8js}
zGR~=|kUdMeC-}#4`WIxybS_@@uK%YEp+EPafS|8h?4;PF)6^4m9;4wh*Bq}v(0yTr
zz91r%#bn*{C;<x+0&eHCon2pjjl}o05~J6)d~>Gzm2U_{)KvfYRqVen@zS7zN%br}
zckqMAV@-~2hQoQRM7!@K6Mq-PlxPEQ>=>8+A~wK@6LBY^)#F@)vR_mNpHUCw9aMK3
z%!-_6CBErC65k}u%pHTHyF}%yP!B?Keqf(1cP6$M$e!4Z*mGWr+zI+$1~mWj<YUpD
ziT9$6Se=z>w?`c27Pu_;B6Z_6^T#V+4Oyu(@>fN3H+t@|tkLj{R@A!Wmax25RCqAn
zUhaomOiGWb`#|5mBSPElEPAVd)_u$wI(HdowMVeqh$&EgEh#|{CWz~7dcRfJi|gdn
zg3iB1i_F$pv>T51;NkIA9dRbjNAqFvk#O_})<xEK2{a^=#yd;b`iXEB*x5O`X`+Go
zGAWI00~=^=s$hySk!-U<NAB;{y8$-#(v>$KQPC|x_&<NLD>xVE*&U)Scy3m)TpF92
z|BdCXoZYV7+y48yB0+vaPt2KGSwcF3Yc%q?*RYop#`%3{+CE;26v515#NN_-qy@i%
zMotOKC=AwcXt&$y#TN)GAV1=0>u6v3Q2bhd`bX{7?6P2#Z2p0Wo86BB%vT$tXeiHF
z<}T=ZN9Sq7dx`r08ik}z?4PfNtD9Pd8VR_)y05vHd2-z7E~#p#TJqA?vX;ZS(#V$g
zd4_I0<d1RBP#wfQhTpO*&ZWMsJ0ho``m*o|G|LCkyia^aNE9kWX$t)jC(L8<+oW6H
zm6~b1NGi%ooh7GTNgPC9-wY|0jR^`5(3y$;^zI;T=i{3WePM<dX`+x(nv!~O&$Pkk
zclF!lm}!NddnAm6H>4t{_<fr)-bq~09ijFhnDmeK2u^4*Br(<-^`7xr+ufv-G5L;g
zY$wt4<CBq|j`O%Z!CrC^7Ss#h5>vl=6e2dR-h;|3QQp#qB3P#wmD>kVGA1aqMj2uX
zl9GS7^#`EjB^t4oV=|()6ZCKyc*!wSa`{Us#4ppUUTR+C7v5d<Ai#3-%)F1%16T;;
z0JXfXcro$|U<_D9nqaz8JK`63Q5RlFDEMBC5<oR9Tei$g^l`CAuAnVbgPUotu@9pZ
z^Mza>R5Ti5k0-@GSG+)bhR6cT#Iqf`%N#$r@&8Gtv#eZxcsR9R`+s2^0s`pTWL3P&
z+OurW)=Qvof*>eZSn(61y1WRvU~Fw~$D>U;xkzTPUrsa!H1|yvWj>NK1@bVJuV#J+
zuttGSB>&eTA=vL<%<}yiSTBjBR{$WqXj1>LHwOQ+MKno~p<DF2SPGOqMf^la$V2ej
z|M4ko8N@nx<KqaCdhqW_Mf~n6*4fQVO*Da?os%=GbQc2!KtBkXB3L8v<Bmbp2QU*f
z_tO>aG(aam+bgfL8{^?2K&>@k=YtW=)i?~G2yuXos#2uy56)TW090$jY^}dpskapn
zjFKs0)607L%fSjs;OM9A48DJl`~Zs;HZt<atbMo@WH$^HM;Wp*vqC`TMAE<_4aDH-
zTu!rQ+@OP_IS(=@MWYN@!>vwd)sGztBR0@fV^sV2Gpcr4;Z)5|%}>7$W0DLz#NAxs
zk$U>{;FRH)6(tcuFNM7U0|}er&i(}EjW$Qf!ZnXcrC4a8;4>?0uFLbgRw_&!yBuxK
zJOg}>lHU8#{Ykv##Q)uMSN~3HM|*f%TDZZ_Op>QIJ5oH(BfVkak>P>S!U#Gy;O@T$
zcSf7KlZ}v>)UWkF25}6g!ko5d`feB)?RLMZ7RhfzuWSgBK)cISa^<VEa!;L_#Fpe-
zu4hk}&BJ(_eji!MG|7uX%}OC~GvXv02_Rcw<B*b)#a(H#S~!0-HNE9lslhqyFVv2$
z@^~|f%kq7?|0!L2BwK+k+8v-2=pkJie<7Afs0D11C2n;IL{_9vZKlD2A|g@X^nA36
z@PHw^cym^E5B;_nnyzmldWdE-5%C?lT&0zdlE-61l_m1u$ab~i>T230O1Wwb`GaLc
zm9XpqwH&|iSAU~nV`6$e5E>Cj^VgR>TO^6^=$w04F}hx}&F7Zy5XIJUn7}8x*w)EY
zF1ZGs2)VaIz88@y6Lu?+^8L5X+r-31XCvK-<1c>D5TY^P$&6IX%FmDb^MxTRH#?$l
ztMSv`udmO4<|Njr8M1t)FHY|a%bHCu+h7_&N?5%WkmwVo*$4zaGS-9Q9&@&q9QNz$
zuKl<k95F^O-KW6zfS>t=yn?(mrN@3B8M@vBG&s|1lOqT{J#*;S-@^0^p!auU^Yb2^
zS?DM0W;W&4SqcFb8`dw3jYU2fT`d>f+-mTgYU)lTE@4;K>Hf|0bas$LUQUz1mf{Fq
zq^DD>k0vFW_QAs&U5(%pO#G|3w+&Mb)F?u!<hA4;LU0^95<Dh{2=7c44^Ym1K5l7U
z-8SslQOJNOvms;2AB4z((z6p&L2hE$8|c?Q>WV#z;dV(gE$qrH0o*4^i$ZOyeVT9I
zI^xnix{X7CX>%2qdXH=Peck<0`FF;3=Htbs-3o-Hfz|WV<*nnf(@}J+?(%&KeT~&`
z;*iQ1aLRxLh`9zKWL*R*q@|k>x1C|5-*|>=ClMYILhE^q7rwTvYB%%^hzPZUkmtwA
zN<-De)0fBkHfPuA3z!^;UU`O_?d67I3^RwU2AU7^8lv=VA;w!cRxL`A8)w)5(abUU
zF@g2mlfbq3sN;Zujv&yOf#HzAkMb%m=O4TL;VLeZ5c%;N7MG{3pc8@|wUoC3a@T*t
zUXuRVBudxb{X0It`rDIlPoF^|oSweTBw_YUzM{$9NqNf~%{hK$H-ETB>%2P^?pa2N
z{veJ)3b{NZXlv)DBa(-x<X_U&s~~SWLDwDmqfb~lzsXC4gl|Ws-^4(6*cyzT@(5$6
za(G31{Hjr(z3@1W1=mFtJU4JQxj8-~Z({sLh_7%!fTmjZm2pdC%S})_&ueF5OQ8?o
z^3oj`;%W>0IB~?)C8rlf4LU$)7CtyYUXLj*B-+1Wuam_^F>AfUnj%gG_ml$Zh#Isp
zyg&{(l<QG4+^3A<f}Mt7%$1=}U(7_O>a&b)Si+IxUgmSX2T^C#q`NfN(A)@MZVyT{
zH)?B>Q>={nP&INwLSW1rd`LTrDX!C4i;Ixa{OU32q}WQjCmoH(<4#bmw%Zg@hCda=
zQcB*tcX{H_RV+7@xuC+5iWQV*$Y#`V^2Ph>c_IM|0hpzF`XpBgW4>QfV?oA{i-&<y
zvpS?LhrYr{&_1kY>eO6nALhytOfmT`^7;7{s16$Mkxv;hSe~}($nCfQ)Ld>P16xC(
z#QPF4Ghe7*Ybr3;xtvDlONU8i*p1fQsET@m;KL2jCBePR$iT%P%Pwep=RkNjtR@wZ
zCzQ}aopKh$*Pt58Qw^@Z{`P93h!CYP0c=lr9M@>fQ76Ut7&XuhV3M%Thxi{LQc1$M
zznk@H=DYAlXz%YZ4L?OlFZ3sR$>ate#vco9((xNBNE!Z$$hO!H(xo9li<+X&@=)5=
zXhM(1@jaMLl34-?LJPmSYIU3p4=7_pt(!Yyct$k}rikxop&3fg=G&vg2E?CM**Y-m
zA*wMj6@|v}Ekxtm#=E(PpCI-i<*iAeSH4!c(UXHeVCK+|*&lh=9rim{A3S;Tq-%<f
zjQYceI*gK2n0-@B2?dsg6-qkKz;5|f$D7fFQ0ro7l3P(?x+cktR>3#-KY5uwU_*S2
zi8f^~GEVZpToPbST(M<hWGn99mTv&0;tHBH5qQXWMOt}{$sYk!UF)qFFgohuDQ+|H
zPDx!DQ)4?(D}OC##pF97CvE}Tah%W!(m!!pgc$z^A$?$B{Bn<en}bP&+7o1EWrfZk
zc4)Rp$acKzVneJeyK?<_f-xioj)zPj)oUa4x8igJqOUxrIAy^j+4k&q4JQQ!dChI)
zu)2sg%IL<XjH^%??u}@$n(l*KX$Xuh4C<|{Y8bU$G^%Nv=qgc?!>%kePH3SFW_j)J
zS&m1{a<LXY5n`69q0AWS8sizXcGjpdmAt7R&vzV;k6KHFBUk?i!n->dCNM&r{Zvv_
z-%#Y4ulKNt?)yRvQXUv)ER?I^GLri}d&ph-3(y0oPgeZc5P)J#GwFNvh+XG*mHm{#
z{7BSG+}bE(oU+d#snRC|Q+Wl72^Nq*m+0p*0*S$?Udzk<=9SXWh(n21QW{vh=JB->
z+jDcIakzB`Uf@Sv5cdnjLQG<0XXj|N1cv@K{0zC&k{H$SkL8ml%V(p=%s1r;Py}A?
z<nMiu!~4fSBJlv9W#-6ZU*g!y?}QG3zQR1`{e2Uq!~X@w{dj>sl2cB*14<oHy8hxj
z=mvsnerDH1@}F?>mK|cg^Cjq!z0whKeu+%~ZKnQtH_AW284%Hol&Adnhg?Pfx5fDT
zM&Oo00|;rWWJnYG*Zood^QseaIY^{NE+6>a3RWC!g?o9l!pM`4DT^tTy!mh_qa?ee
zp*pm1%Y$n1hRk;HshNI9Lmt%W;pL#9K_I8lE4OtI8F@*1fzCo=A1bv3v2JY<c&(;`
zM#wi8DP7RMqCSo3RQ0Z%d)6xvU1kx#g90=>hUuVuO~BNZ2a+WE$HpAF>V?EhQDO8)
zB*S{S8tgm5y<|r{I77atPBtE)%#Tk;Osq#YBy)vVnMUcA&yL-xtAye%s;Qo%FTJ3~
z#123X?u4fBIDr2vmy4)CRqEGD>PPjNYc%t{HVf@`dUa&B{5bzwL1E$<EPq&DE7Ds6
zHgouF|9Y<gO&mSvL#3nCz0l{HH`+&XdqJBaNm>@p?)KY+gf!=DTd_svi@sk^pIkb&
zK&rpc)f3+Cve9EizR07ynOS+?jy^eBwY-fvZlkf@junjJ*IvbqQ1QGi$aVU(so8}j
z6*Kqmc>pR=ABYi^LMW&L1@@!>?TEIiv|y6b+ray(2XtZC-zup3>Emgbh`dJFy+|Gn
z>powx=q46i0}I=Dftt|C2kJfsHzU19yk2c{alMG+>7L2=)Hi+=L|gXj{TFLDXBpGX
zc`GJ6*=3f~z9Vr%>sNZJE1J_)HmoFr7O6`PF6JHg8Q`XWTuYqhMWsvcUDom4G8uK(
zBtXR{>gmv$iJG6TZ@agD64j=7v^jc>u0z4>?EYs58C%Kahr>Z<Wr3>#!q>l$86QXD
zccq*vc1|A@o#>qg$ZM*@Cpy2JE%<>NlBD9iWq#lNw!HO;hts4^k#PfyA}c=6cmzh(
zltGLp_9JJ<*tM0pb+g3Cnuk`B^1(8y3*5>b8=bmOxm^osn;*E@#hJG8MbMF9bGBFS
zo|gnIKMN9|-<qok_IG;MB=K_ISHIFJJ2g4tZTkjnj^}E$Q(_%ufw`MvKBs};eoj$c
zp>FL7<Nmbuyj--p0mZ0=*N6dY{-aQihp%^ncUfCStD@C?c}EZ8xDL#ovX}+ZHa!rN
zaQSF_Mby`FP)<HUb-()FBYqgnq%8t!)G-G&in-GFc=^i!M@V^gy4sFEiQUxe?@tOR
z62zp%B6*A^jnIhS%PT3e2x>S6?1-<>MB`Vz`T2R+t*GkeV*zcn$XEf1p*3yBeb;9#
z)}{OJ<+{DC+X}5zieuVh_TDb{X8As|n<9idO|JFVFkai1LhbQeh$hX{r3>6vNQtv2
zc5Fi@$mfJYOPb!SjJQe*5;`~L6gYDCx4FuMX~*r@h&xQcc!$l-?{JZCyRN+2RSsCs
zB#eOR_y|Cg#jT{=xi(pNzU^-gRc~t_DMN7YFD-VS5zf04pQ|aYslz*OZ|y9f%0#Nm
zp2X0rtHoRFJcRgRy<S?(U1gh32KicIu5SFf{v-*gle4}{fgV~1`y&{vB5rK|4oTP(
z+K_2CwC5dfqcsy5NbLH=2$Q(!LV6Nlys#@>SU=~>9NY~&ZfJIzu?ym&bFaD_<w5;B
ze6<-eVxC@KVH4T5m04mE<U4CoI<%dN9hm97O4#*8HYBmmHI{yyLHTZ8@jX$eS4N-0
zVhG*nNuDRbU_w1l_=BSarJYpH)=#VEGzphr5utJSA63~bn(D<aSu^9K=owJsTQe~Y
z#+fhMQC<ZLnr{wX$BlG0NxtPzZwtEl;i@agKd7|1u6psUpwm=8$LY%DYITU?EpDiN
zRQZ_<uG4@y{Jcx5vLdF&y>H#%ZC!tL4r%;w2CHHGUTjhW=K4?n1;ZoJmPsZyDGJi=
zoptE~Zln2CXt?I~6bY{Rh<M^(Dxde$`N<9h+*^nLpwpO|nO$446TT+wARG7Ke7%VT
zkmU{R(ijuFjWtg<MkoeU6YfPb1xq_UGJgC6@(lNSr@(BvwN!A*%4$o+Of8#Hl?Q>^
z`B8*7+k<Ahww+DEo7H&o@`v6w9Q`QWFH&<wR!qc|NC9=a<<OlG$br~mROR%U$!Qnk
zUsbs;mb4q|)*aJcSQ+j{dPH-cNp4BntDTa>S)yJ4lA$0>XBOLk6#up+XmglDR(%`y
zbj2H&we3e<fWGUm>x3I(T(T;GVX;AHwL7a5jbl>h9}Bo9B<*XhEZuTQ#}sumWw&|j
z%SE*bKM(uo-PoQBW?cB9Og$v7Xc0N6?VYf#vOVA#&+?abZFS``hpLTEUa8o5yY?F;
zeT-MOPyy+U`Yplh{P?alzYeroMyta1%UC&S;s@N>YI~|bJ~cYjIBcp;-|%kBC@`F`
z@5>828VqNsq;Vw|?l{SHVtx_7<Btn3nEfI*9g!ufd6#>rm;Wb5I^5svm3zm4o*<yP
z2RO7-bXKeo-jC#n915r63Or4?H+|e;Gc^2ajrSC<LjUZ|Hm{hf4&S2JbqRLnF71c1
z`DX!7CQX@g@~l_F|FVx?HhUU=J&p>ejHRR-qR{)$KUAf{amm}-`JB~L@&*Xs3?0|u
zt_qYt=6c+Pj<WrsOu%}CYCz(UW#d9sIIGNd`~5T3p*8O(?DAvhrkUa&;Ja-V5(UBt
z2V>_BD_GUZ^-U=-?T?N^wmYSll*u2D;E+#~jvO>@-N*~Rer4w;#C_S#$!wf&>lCA3
zKV|lMX@(QFkS9iRI$0;rxa-R$&ULs7HE0obEl2yhD|PCRXEjOj&NA-XbV@qS721pa
z*PUg~CyOWx)wEB!v-bU=PK!;;r?RC-j)l=C(*(O|@MgZb>k2;|?5pW~8SqpK%9*;g
z8Du}lx>y~-iy(8Gin40ml``8o=NXXTYOQ4QH>T%A_I;os$zN`?I-7^k-L1)UE!GZu
zSL0p&<assi!sl*BdwE;3{foZwJ4C_7*QJV#Jl)I^iO$z2$MXc}7^HMwB!(T-ukLe6
zp3BC`YK_F({y8Fo2t>|9l)fKbqc317j#{=py~jR}JPZ-|4!8)Em3)`}8WMX~VJ#_K
z=^mi})v<r5(1rVF__{P!Zl6xWR|~5f3-N?UBF&zR_pzD!C_VPPUu*Zp>Ye7e7uqJ}
z3auS(?B^>gkaLaX6D5$4L*H8Og~tAAj7+m$7u}b1va6uWP~qygQGUi$RX0MY!qpx~
znw;`_WO+LFOixyAdhzD74i2lHIF6at71AmR``FkG*;Pfm+QocFT4T|O0O^^gn4!-y
z)YF(-W4;UT7Y6C*d7Ir2Z9nE$JzDe-dMBct_5HXJlGcfS#Uo8rz*VY@eC)o;?rz*R
zTK^OlT<1+<AZC;R+hXNPz$8@hC<6V0c_xVPxAgK943YN15NB!SdUwhChMSqa&hTpe
zBkal<!PxVaP9-BXtAx^ZbiVlBb6ZGJcX{nz@9Vz08TXSxF~TnevZhwOwf9LSkD{F*
zb2qwjTHfPX{F&4`Z$Dogbhl$3vK}|_b^7v)aGThTFMeWQKc`p>qE)x67_JAozkIS)
zr>^CYZ!b+8NfD8@up6!;e(gzj>Q(<Ec_>{0+jLR^FaDqbS>UW8o2j^~c*ptAAsScB
zrA&%l48k3vo353qwI$;OA%%S6d917*DA?ww1fuhPLtoM~kowGmTBq*VYJK8NvfSnl
zy5@dPxE0$e^*tx%#_shK`&x$H$-ur_Ov{YdIvffx%i2p<^}-jwYt7~vkm|z-gv#zs
z{Ar(!e_w0)bwz3YyfZef`^0qn$cN2of3s+LLS8fkmO3A6eDvJWZrcnhZ98=zO;KC!
zpg>QPvR|2ybS9HED}W8YxdZ>Du?UyytLP>Pfl;X?R?S#-589>MdEGJU>*eskEw7y1
zr1fU2<Igj=XrnNLIAYlC9OJbca&;bJEv*oB>z}7VlAOlsV{C12o_c+;jR@2cPpr@6
zIA@P4sY5sFt0f@C5!;c0&rgVe!^THQ9Abv0v%7L|?O!LmN7KYVH%)Mmz7ct(@5w*6
zJUSY#dDXx8UV)!+Qd+W*M{y#?@xiVu*Wz_;?a8I7tSYnUsSloJ1|czlsezP|FZW^u
z1TG>wl(51p1?KFljcSOoT}4Mj<F)p%NyVypGE6|p&ZF&$X%6%9|Ni-VQia)rlDgDr
z<%(lhF+XX{O2I|pbw-S-47@le__8URyce6$ZQ|Lpai1WG&9McV0^NK4HgUGHhg<2|
zbuB!v{v60&lNB9lG3!`Y*`^hj4Cnvi;~*%FmF`$>aKTWn!~A~E`hztsJq~5P*k1_w
zuCC5I3JX&V7M%U*g%}z6R<3BX9@ZrVgW9r@ctaJKPFrmZepz=#u9>{@V(v2gW=FD^
zCJsMacc_4^;`Bi6r-WiWLQ)FIoI8a_e7U`))4X5SQ16b9tMy*Y*2Lm@p$}T=H7)>k
z4Ml>R6WC0rRmn}?9CyNgsc~4)k1-SrR<h28!#)gDdi1>LmPPh^0hs+A&b>oH?0xHn
z3kRv5Dv4`IIq3VuH<8X9Oi|waPQH?^QcL&ct7hM&hJ|~i0HPd`eYF&h(GX@Y!}HAM
zGslj8;qG416V(*B_zJ}6{l*nvw*Io;G&HZ4w&DV*w%Vp>;^ld_$NImt#8gB7(#&{a
z=T_;Ec5hNIE^-$@io6eAHnzC%dquTR`Sz!W`qixLg@k<#2B~DoB;GGLg#7+1EhV`+
z_p%X&4<d!HOEH9UPAQ)(Bx=VU*!0Q~t){xGCYGNi?&UgOyG=Z=@s|p*x$reyR;``t
zYUk0q+#W7bEfS{K($$Z@)`a}HQl?%f4y{MjzjfXEm6RdtUoX+(RX*Fy7+g7FD-tu;
zD(A2@o^sYw3L_gRRIZIX{>V@Ng3WqvPJqtep424c=PRmj+oikvL!M617vNoTms)9X
z({e;Lh%$>0iO*?Ld!<OnC{|Fjx={?G8-l|E21wd72s?`Ae6|}aK=>4zPUn>iCiHm>
zI86OlnnkMw@H!I>v=siD-X5v1cKH1}dHNl$e}&;WuT@n23CXpGU&xLKuWff@xmwRI
z=vi9Vy!xiILe|Z+E3<-0)ve20%xloLt5=Z6b^f4{B`l>97e9AeE{-*4FAuMik8W!8
zEa4t|y!zO(1L1lJoq?Wi{w@~NQax5ir2PQT=}0W?w}dmUzT5qCKjOBp8O5rXWHlu7
zUn5cHCeZFVEO}RMevuaQ1yO~i4Tc%iPUDpq@@*fehi=<QOoz{7Z<o|-W}GITz)$Kv
zXW+}&#ec0$pK(E}*E(!%Z)slZe0?nOeLt{j9-tXpjQcxS=&rYa-4LDD0l-afV{?tB
zA+Y{q!NcEOpNbL!5)`7FXlNXE#No_!JoCy=on}(&AC6VbPY<2&Kb{_GnvlJZ6<53v
z?>t~&y}w*cyOI<1$S!8euZQ~=-B!vb*NQnM|JJgeyte4)Bi^4Y>K-><{g_|IWNtM&
z9{y6x6ouYy>#{yO2fS>xg0`jbC-!|A&kPec)!zpdeJzMDQDi6(=o8Pv!{YmPzWnvn
z!B(<6;x#XmMb7ryI@HcCNe4uslJtkiNGhctH<VB2R583;mCxMeU324etEOGna{#Gs
zK9f#%e_z-A?0r&Vyy5rG+uIB;r%MF#uXx|r*f(+rQk`yFs!d0DIK?^o<+Lqy7)Ju{
zEK>?XjkPh8({a7Y<|Dfb+A&@Poy@y?V6`q8^$<h4oD{{^yK7bgsf%3p>9#DvHp`B@
z&K)N%x@X)$=Ct@tINr^CK5;H}icU;e!=tqAR=@1eS%v$Yvh@+|doTD>0VrOM9vUvK
z!o?udboKkLRQ4lqY+O9i<FHP_Xsp<Jg|EEhm@gV*AqEv1qLjyQ6sDFp3))77&y}I4
zzWW`4<?d9)g4I2ha(U}B4(^ZD5sv0c*0ru2S+<)U_tfbA+8k-8oBLFKbl#WG)qI$M
z#{kLL%O(tj5m11!Fg>gN({?12H#NWS=2-Wvc1xU4Kg)g|gmrv*)&=Z52v{vnqATdn
zycw+uN#M$Q^HYlXibw1oL4^b|;yv3ptR|R_us^byWTdDWP3bhPvF?4|nqF`=XsOUN
zlX9<yI8{~S^^q>N3!t{5aX#=P*p-9e$Umv&DI+p&w8O;M*soj>x*{&}{7skkCVtEr
zK3)_>(W`QmS|jhnfSns#-Xsr;zP-^@XFg(R{5Z)t$ETMcO113Sm3foij`J9{!?ij0
zr>=GE+U`DiGMUNr9Rxx>>|Qz#-M*g4nB||9?@FG}MC983d_Rpw9bFP54I?Zj%p|Yx
z)JY+4pnZDiOtU0zIQTTdjxb??C+PYsP9lpaqagvhfbD2!2f6hV`R(YF_vyuAd_1BL
zzeNx3lS^ohj$dbtuIWD1G(0-x*039?X#JwpxL#wQvdhqgRTEr}CN?ECM)%WZWuYyA
zY>|sJ(0J7)&cH@yyk$ZzjP<<gV0bGpR5^AUc59nV0uSAXbiBL<|030ciLmp(v|hwf
zATekT_QdwD^_PMc@dE6w!b_sZR7+;}_bK}9LO%0Jj2dW7wz7_r$iHh8XbEe-?X(f@
z+eLUQxV<n?x3BS8MN*@z=?9_XV%P`a7t3D{afADGt#TSdDe89F%*vD(6T<W?y=LFe
z8Wi&c3Gl;4-mji=*NO7HdN`_=z;rNzZb~Y_7Ck}57Hqo=d#%KCI$BJsVO8J)Ip(99
zA57|Sr8sXG%e4_UQaEe)S(#xhWR#Ir48k-L(iWd;)Q26WlB+|4bgkG|PNzS*kxG!F
z_y6rfgUUpLJPyeUq$K<h7P9*7aA&<xfSI2PZuC~OVR0xU?by^D;>!G7kXd|E$|#WV
zNCtEDcb)oOcE(JCk>`9eOZ|@-?a)J=UlEwJDExYT;i={UjUZw%D1Xu0iWgM1q!c`9
z4E?D}mwc*lV$`2Q4iUb0d3M?li4SzNKeBnb5y=MtTd0+FQl0o`Mf%TwEO@HV8~0l^
zdGl!F-&x4Buu?C0hJN=k>g<#&Xtf|t`|CLI%9RUE6!anJ)#l_A(3*ga{Eq@(7wtu!
z{|cH6AR4?geT+;^d=UBzlRaa*^)WZxSys1utD<OEN2_K<_42M~cV@7#+=uwmP$@1w
zC^1)OdAE${5-j;4%>y{YD03o(iWTk?HA|o238iYyg!7ZcT|7}z`uX3_E+Ujk76>}q
zCq@X0Fq1Tj#>=!sq5N!M70zecICv}=PIh-<K+bpZJ8I;Vw{$^2p}*ti7at-+8~^SM
z{WIiD@DK#&e=r30qaFfg4z<CBC`l0^=NHWKh}y=aNQ~dJ6Ph<)j%VWMbvCboPe@Qf
zcy_&Lb0m)pJRC%%a({4ZB7V=0E>EbS=?jw8_WxZLK}b#h%gX0L4#kV)Nfbz)5Ls3A
z_nj6aqrCqXfrr`?FMXL9wCilomiTXi{J^EY*?w=1*U;op_rLvp59u1Op`u;n8zsf>
z|8?qQb;n#hNY);nl3LQl(SxY%f@xf}f_#O4Dnqqlz3L94@*B#o3J7!!@?aw)DkRem
z)r?kh?~^aG8x?3%dm`gx77iE5tlLTR`<EB!L)m=emfO|e$j^K+LL|+M^FNgHZ<cX&
zO|p(7<x~XGQm8eXwHuK#GUkGc^Mq@(Fz{$F%@Y~?Bb6mGPH41M#?@_yN(zf0h$%~X
z>Jo_B>JqV;h*bqzng@-g!8P7h7nvq$kZGbB>o$g5WSSBYdBZ`T2MGBVzAY9g8<C}#
zQMt87Kf(;!TU<OU8QT~n0sYua_)_4gey;WIKuk`Q7b6grT9~RcU-Syz&oeU%GGX}c
zT_iWX7?R+=Wi;J$7DjO^sI;h`B~YZjnspI)h_?!@_kt4Y+xGP4yMnC#AZns-Wq&9?
zh3&l@CqdTEeh>sno`d2kdJeD%w~Fd5!Yys)2fLT{h~YM<e50|H&^WG@QPk94+Beri
zRA#6WA@j<v@}vkE9>mx=U5m5i$v?I1o~9h+7`%9?T`Xe=$Vju9RQ-l${H#bY0Y3(r
zZbZ80)J_Tu>|W?ytfuClZMpQt8pn?cn4+sSV>LTK()TL*A3{_Lw$i3O{wo{@mF25L
zOo{q_1cI{xrsU&$<<_~lw)~UB<FbyaAN&`O)w*gyS5outp@nREkWKLKS&bfcgjM+<
z2*!Mnl0c7WLI-;btsw4-Y~tRBxsa9Th5v5!RjanL2RfjaJ_*4C02yPyvVSyTB|}0I
zkPcTFdK}|AWv)E+WsFp{${_NM<NaoPgSSA&T)>qcW%y$<+~Gg~{?UZh3aKn8^`Xld
zGSLB|nyc;Fa;j8jJL#S>ESfBxlru(G;Z5@67#0*D`42L?7Y-&U4##r4fz(dYw;i{(
z=nPaG_O-d}9@RxwFgnVA6%W&YMahe?)8?m`&cA`Tnf1RU|EaK2Gg3P|R_=-=0t9&C
zyuI1x6TGDGBkjjcw6ohV0h$tWaKukZ4b1+<IQ~UFbs2cJx(6y|9)eNCRy1F_Uh|NI
zo+RI5XLD7NO!@JVkEAyV`UzE1ipkRMx~ueyaV!hglF7>^u%KZ6*MJVPd<DGtlbV)R
zKCW7YMR6>6y`}3E>1bS?+z!7rc$!H02dzctniacsc)fgLAPm8txEO>MkYz1`1*Dc2
zz6*;DOzV#tT2>Ht2&uEGV$v>`0y2u@<gO38cDCMzt*95+)J)Zg9|ywrpgLa4K28X6
zy9!zkc`-L|AtXSk7=7o-D!$vn^Y~saTci1On<_hXW%cz43hwW+Afg;=cau~23Uq@2
zwxUvC1ZNa3u&U{<5f|+Tbqd4m)lX5h9d3-@@oXq<Knc5d6`r})Y^D{#6R_ACsB9$m
zvJ{dj2%oWpM-7I7ti7}0Uf6w-8d~}%6+FIgK_l%YO6b<dr~QJRmZJ)V>JlCJH~0gZ
zzKbA4%4hFpHiGm6294kv6ku*6*S_oSXSYALJPrpHPc6>aRX<l1cDwC7G+fE=8lo#z
z_>!7oDB-N;lbW6?A?)%t{)7qasvtlV&JGFdyG_r)67e<6gO|q0vB%uHTR#TUt3eVq
zfB)`CY%pqi(Emvj$)ir<qOsCA_vuvUk+pO`wQu7OA+xPJ8t`(nU+pR$YH4X!mwgR#
z<YF4;)lJRK;(>?0AOmc{`kJv6oX}>$`!z2NSeg|qzwAHRA$W29%%W>?))`XdTpXZS
z3RV17f0vR{S8@Z14Pe=5&NkM|pCt{ZvYo7lzgEo^^CxnAcdt357jVgJc$N!Rc7x!r
zNt==h&SlORUi)k;>Yv^{{_h_mXNG_VnB=$F9|;jAnOauJN<N?Wh+(DJc17OFv{^yv
z!`H%+$Dnxv3C)KO`l<RVSN+U_YF<6O8TSDbAr4p2m=U>IY5`6Z^iUMC(%NBL{J~R1
zYvs?>u1RZU;Vc=o$QoUgUG&=FMeV!0u!g&wF+I1o#jzI&=O=`T#DZj_HeFjfVqSDd
z0Q)hAum+)LTEg=*C>%=z^cCsVw+PJ&(#P0KU4c^*OQH(W(x2vt=G%^3R}3T@?((SE
zzy8=EeSVwh!R<eMt9cNg)w~KcMlB7h4lUJ(bgnD3JbPh!u~lScD_5?<8y|2yQS1xr
zOEt4rCW+t?^D)AW2FBF?lR?A*Ugm8)M2hx67|1+pc8oA0X7P(LiHpy9JB31CALr!c
zG_m99c8^JoY&e9amaYh=arBZRAB%Hq%hKj89ufv2l;v&0x_gy_XM3VqNR5g3oLw1U
z$1jX6_Q=`8q@1~Z(Ctu50~!<(oj&{<{e1$K+gQqP_u@yl!h~dGf)KsesOBFKq9z`b
z5*!eAavdS+NO`~f2XGPqlH=pKfl8(R^IOm=^Z)DblLpbj?pC+ZUcKZVd_^=OvmItl
zLq&O#CegK==7~Tj#5@1D_oxRQ#28<`eED_yGVd#t^aSXrPgvhB;&7Mm0S2yyXv&!r
zUWA}pfIm;@AA@G${=vb-|Mr9?t|;i`M12r?gr=<V-dh7SoeK*KyDeeAb-`2k&;uOd
zAB%!lK3;JA%&>0-8cR#>p;)g%wjey>w|10fdoksxH3SRhl?LESVeVZS?0=tUV1>ap
zB$(WlT>j5Bz?1}Uq^rstcjt1cF7MWhC|a*viSE0g?^>cA9v)gB!^;EQ!Y}UvNKlw!
z><^oqFJ=N$d<N0gxoWLaawqn0vIslC(qErY4PDBf7#cXUUP<7XFZI*k%;;JozkQ1~
zdT!+2QNbJ-7!cEvOURur*DAYX9_nduBkg;&iUfm1YIY?96KEBTDLpd_r%)%E9z6?^
zf|#folZ7%eq5q!!{l9IP`E_MoIq^6|Y6(ypKnkQ#o*rR%Zgry(DH8n;I^dmvK{xXo
z=-R_s+EDx|_eT^g$Bzf{T8V$6wQaUNtzCEIv1yHYN^cYv7v}nr_9vasCW(zHaz#QB
z-1RWi02`#DQbE$d20mu!1Fa{oqV`wAgI@zHL`(WZ_mtPwlthv~T*u+~keR3&U?~1d
z!bggnPcffok2L1-J7M%FKLwPsq64e+>kU~P;&9Ph2510uDP8%U|I(q&2qF+r)F*cj
z{e&*5p-EKGao{L$jYrKg);5+X$uHp3HpO)$6uo5($eI3k35%{FmI|=!ww1cW$F=J;
zt?}ost7{s?)HWsn19tm2A)s_<{r>%%_U8#ew9qo*|B_pK>TivXymcnfvIL5Q;<||E
z1QCxET6rSKfp-^J%s2Gq`O?IlP192|48%+&vav)qw46P4az&EjF&L!XSs$c5kbk4`
z=;Z?pdF$`oOC;vc3gz-07qFd98e0t3UfLL_3>79Fsv!7P0N^3Jzk4C=8q^R6Fdjt>
zt9f4l5~9c2i^LC0F{6^s`a5B%O>;?3h)aG^B|ZNUSR%DT^Hijrv0dNl7s4iwJA3?q
zM3H*kvpN3@VU=Tm@m)7Xfsk97z~X$x!@@y|`xl1SZ`5dq&t}z}Ou8hWa}8!tUEjI)
zC`PkVQtD=bF8a&2RA{;^Nza?k7I@c&Y1Fat;L#S4vLPo^Vb9R=ljFNiknQoUxp`R$
zX9?%e(I5Mf%4kUptSos}&o=}-esrsqu`}G}%r?k;q%K*;B<yyW{<~@2K7Rh3Zr;1V
zsOV!Gzy78^%(PNmXPjsb(D!`geEtvPch+4A97Qvg7-8|DaJ3eMe+71NnNTi23JD=-
zdMY($rBa{ysEi+fwNi2?5&TW-K_LC|fgl<IZBoOln(kfa{fD^nrpHO}i&Pnq5p-IQ
ztiqcJU6LeswWjU!!IH?RYIT1k7a#)p7zIC-eRY!~#o+OsBphE7^sldl5QuCS@M5Q9
zN?c*~9!Xvb-bg3ls(SsYHZFu7#ZJX!r%Wm^i92qp0J~wSJ@RwNBR${yX1sZ;%WB<V
z>>_m^wDz4(&G=@d#$*sK#r2EaT?T+j8P`!6`%l=$H=@Rjy!P8L;orAD>$XU$Ww3l&
z^8^*|x8l(dS0}-tY$gbY<bR~dQeiC_lTP6=?JnqP1f3bM)2F(IfX93VG(hM#fUmDV
zD4B%qT^=+5RN;@P88XyNKmqt0AQ@Aj=(*2foZHl=Et2A<FI3NpHdf$OhBGzHWxIp>
zKcRXmEc21_=RigqBbE6I$xOf*r21YsJ|HktnDDu8uVK75?SFJ6XrU(C8R9SPycySF
zS80~memnq39+MlRL>9|}4!95m7P1#E#I2ASE~NT~WrD6+iP7E_IGTq?hPy`WxY3w^
z^LI;1NOT&u_aml+Kc?I|!G-`emjVd%-YAjL3dBZ80X^F+dp^40ysuO|Y`KJ`YG3Dq
z@Op%fa2gt8N;G@-yphU%264Q`Ssp|J5x4iEeQY)O3_!@0cE0cHk9%cS5TgP{ZcNL#
z>X#H5zWE&sZPY-|Ky2*SbY;dI;s;`A4$PGuk+Qy9D+vknYCn<DfzKbx$flBoYT%N3
z$2zD$hb@A)mw%MXj<_fXn`yH0jllSJj9KC}XFOX}FvSZ{ECowkd+mKt!;?h}FV{f=
zfj+%xH-HY-IFt|L6*r7t`wvIlX`Ez{Hy!DE{2N&K!u(oJQEu^cEg`0c_Tj_y(PMpJ
z;Wx@Zlu?WYafk2GB>#{8ySR?{)NOhuX4`pq=&#z)cX|3qChzn5@gU>>#pM^*kz1oy
z7Jvt`&_5Y14Fpmll$3=w7UalRzEj2}JxPZ;P>&i>0i!=eW`uaBl8Sou*ePpr8h(!c
ze}q+jTUdRm(k?^l7e6L22ce4Eam+v|z*x{YI5>))xmT>HESr%0laFg*RWeD1wDbpn
z#Ozh~C$<j(C#kRibQM=sjA66_`ucy1#DLW-I7&y9c7fGg+0S#B4+sv3_Bs%`kemf<
zV-V~4$mTRo{`V{+-oti?F%97+sL>Xt=>(V^g94BLGR(!TVh^+H^g2NQFT+-MqKT`5
zNQhV5O2$gVkaPS07N-MPL&MiUAi(CojMIUT*vjW8w`VWnPgx(zH8;!nm?s6tk+8?B
z4w&DK0-Ems?D7uHM38#z6eXaSpz0F4VY-8*`=u=!M}^YoV0w{;4|Kdov~T*89f9^Y
z2*3F5-x$CDgwyC>Wx#w7DAHq~+_Hat_x~H~*AM?(VeWz_Y^)8<_t%`;Im_^Nfq}@%
zD8#W~E_yWrkU>LD*(gkwk^I`jOMdO4F3Af6$A!mcwMFUjTH}C!!!kiv!ou3hqwVwM
z>CW1Oq;tkz*ujXSf-J;fpSUWI_jr9__(8d`!gpftZ4~JLcd9Tn3L6ly6b$1w!VTf+
zCE0I4oS9;4wQ@17Bs*92c**Zm-25qE4FR@*!chX#H2Jp0O36pYk2KVvO<Goti^C3w
z_0){b10I12yycml=U*wLqw(wBOpSjNNl@7}8g+Rm8D9;2bL3h=%Lu^f3T5vN3Xsbr
zKqTfb8@m3P?3Yp98P{_7*mwpuxw?6tC#2`QI^YY-!E{6li}~`V>9<<i@WrMF1R9je
z$BG8L-Z<@Nb6rccxh`W_>RL>LKwH2OmIh85b>2^IZ6x}#CqDSPg~OxbR+upRQw%U#
z<H@EwBcx(@enngNll6Bo-W%LC@Ay4**Dt_7l27(ndWMJ)a!!V0Gd~FrFwkBW5ciWV
z)S8A3TOXzEmKKYtz0Dro!#h0lppa0tn|n5S`_UCbl(30>1`>^#^H>H&bw0%?35N18
zE^s=|Xf1FAo3*%zc9Yx6P)_?<inc{OH|ofV)y828Xz~Z-q)@2l4YiEg{+)1wZWG&m
zIctrAO{hX{Zhl0J<XTAcq2#rWRsR+xekz6Q2^LyChgr+Y)ZJ>i1@ARDPi{Lo!`bXP
zFEU9&NuPiRQbNE~g}~akHlph-`(x%cJKX5rKY4GxS6__gEy!Tw*mQ#y&^4Kl{Jq#Y
z&2m@R7u}A;U^-rgecfW`Rr7Y@fszr4_s>)6?e&UY-AKR4M*{Fmn1t_NR&3CNTDLnJ
zX9lifM>8RJY|;JXCSR!)++KQgi&@;n-{fi0IOcLMea?d_lio7%_u@llglcEqSn;u?
z1tQy~-g}M7EWCZ9Ju>{c!_1^(qbjnGf1RG-leSyt9V@TZ<@L&~2BrjRW@d4$Fc0X3
zp^gKG8WR|go^Of-pv|KMDJc?tD_~m_(ua3<Me?Y!UVodtS<X;Qn*9G^?XAP2jMlwj
z83!DcMifLEK_vwg=|LI<q?8UxMY=l`rIGIL5~N#DQc7^>l4dA@0U7FB1MdCqefBxm
zcdqyQ{$j2fp7pG_*ShO>{}x%Rg4)BMCc^>Wb`C20yWh2j?Eh+U%Kf7N_*=d3zKhiD
zC?YsxMuJac@cPM3@GV}I3O>`MMH0AMZYZYWm?_lVU4Akoy1-i`-<&7ND&jo9lvdv*
zL-Vq6GfnZWkrM^2jb0;8dc1>uDDUp{M^l85>AQ(ZQhPU@xYxcnmkIe4_u@Q;)*LxC
zOeEPgs&+3QF29R4QVY+0RF`dUx1n|Pb`<s2TxlTQxL!EQYC&7S82NGd+f}>`t~OsB
zx!(Nh+&;I~akU~B-}d+>kxkb_L}y`<gciY)MrrKh5$?ZvB_52|yELBt=6o?W*au4G
zyha`zP){!>j8J&IoHgw@Q}62*{@ll}lLl~^eEJyxLJd7UoT!c;x%0es=UYN3<%Teo
z{kKEE{>a~rp%MCD!Yp&_dR30(KM6}6kTW-*t$2b$QTvV3viRVIy_VlRp8!T`J3&Nv
z^M(vpsR&dKJ=`uK#t~IY$frmB$2qj2VKth64D6H0fW8!l)zH~s-bjKumv?1+*;~-V
zpC4yBKOP_GXz+MPMm}Ktv|d2`qBFT?Go~P+pru@&)Ky_u_$+r6%kL!n%9@e6Od}t%
zr*?ibxi085Grys(wKnj=c7|r?dcSy-(G+-(7NZB?ZdaeKI~5?UwFnn$mm=psE|%RR
z#KxB#Mj+~TUV9ttQ#3~#y58Q<+)N(y7W<^{&pR`MqZq*#xmAs>-7YcjI>w(bi9B=q
z6%2s5R<v+GHW6XVx}?cv#u2)q$RCRbrpN4NoKI2%^R_38n7`iXJWFw}$EB?~dttJu
z>$ENDC#;xql;<EwrIXpDYJrX%)ol>ldFrv6`-8ONRgi1pmbUr@io;tE3ZfVs59RsJ
z&8l%#xK(gJ&GAE!w>H=AaB&#&(%D68N_g!udMBUbOJmLk*Lakzd@K9kQnq_4hHiNz
zMN6c@YLI&Z3m*?vvWF+*c%$~z-UGDX_lEB6`0LR(y9R=9AC9NpLqy{4JC0ZTr<i_X
zzP>Iff4G@AE>$A<y1+a#`><z0VpsMX0MBQA#fvX6u3KH9ylnjA1)oVAvpD<V2$|0Y
zkM)2+<qLh?fK~TbZOulg)BdO4`iW%X;F8ajbRR-0Wi^#t|LcPz;z^~I4OY6#qlUL#
z6O<I!vlN++Eq^7qm#W%-CBoNquktE>b9a<zXNaDy7+hwZV2~V&6Ivm>vG;v^c_DME
zr+BPw$$|WDxZ4x>$#c2mIYsC4+)FaxNxkET=aerB+sI7QvgO^q`G-`3rr9aykWw$k
z;@iaKpuK2+mUntL;?9m+T;ord6tjxZ(rE^bwKAux6V=^&hPfIi56nzF)MksYA{PLl
z1E&h5@P>W-rG-<=?*gBFs`OO0E7jd$?K7;POblV-YFB(B<D3fF-sFxt+zLH()bD)S
zdqzX*9e*<Dfq>oE-^UakZ~&-#3V`l?j7TzIdtNw~vxUc2%H)y!RRKF^=31kVh^kGe
zF5}P2pBX2DE6AJ8BD*Oqwi~6b0P_d`zQ^lz--}1l*I58Htnb~lmQEv&9)7zo_WMgo
z*aA>E@_MB8kRu0$3du&cna{1`#;>0g*o~AQ&fX{+seR6gDg6SDJ|QNPllJi*{ki=2
zKr0mewA#-&7n03#qs|_AFbZz}jtFITm=AiI`vG0x!_;ec5O7fEON<CCJ<V3+PZ~IK
zrr1_Xy{^~KSNg^K>lDrR8>XDCwWSyow*t>m!oY!%dD(QHxd@)s8=aN!h=o<lu6Qm!
zH)VZ+4W~I>Mb1{;d_`u#T6Ag2+{2D|I{poBe{SbbFZ**#^!*zNPo{Uj=`I&NG|Dyi
zi63lfbtv_ivH$84fwGtO@K9c{PVI=#W#7w8mTQWymOce=EaXr8W#NhP>7)*Wzl2}S
znCz!kh>GsH4u5oW)Xh1pp>abe|KZu=A==$F@8mrPpWdY|AM{5@!NYb0@1mPwv!QWW
zz;8T+%+i{N`NFO*3boO#d0IhH)&{N>hb-6f)EHc5xe^z_ljQNZp?p<jN#<RGYxMxC
zZ`VnfVmnhpg!@D)OKSo#Vq*eeK8sg6CZBDcCbR6xd|-ZYCSgyGAa$j(@+Ig<2o(vd
zlsvOu`kae;_|Xn0*@B-`NX(>R_w0KiRqA*lxT03W%IET5+<><tCcjwm>)xaD#ae*`
zbQ8*mYKRWtzx-}a*~ouj>##D~u~%pvwi>+C5#;$ArKWGSf(HR5GOey}zv$jv*E*Pg
z%Ab`D2#|FT(p{p{%l5`jA1dprvCI6Hd5-XW<v}@-HHaGb^5^#Ww9BykCixZq^M+<S
zjpW5Tcxu`}ShD@-0P$34IRrMQQ(o+O*EQagZhb^y-95wuX-)wUFX}YC6A#ORz#Em@
zjY48ndPy0k2RZg|V+0iI#XM`ar7}tr%w89|es=6@zOc!+LF^2d=7q4tIlvAkukYhh
zY0wu~i!ur27X3h+^SSd(=&%aj5zK$Q=p^Z-<!OTU8yLRVq>?Pm)PNP>O1S+qFgT0j
zNN;;-!fy2BmY-9jP$|_@90*B18=>@`jNKK+{b&T$uVG=wyE9WNb%_LA9I^M7WZstG
z<DF1+H?8&94eZIKixQs*R_!QeoQP?Q>}#6Gsku>Zd=?A1mW(>Jny8pwpZ|TKD!uiv
zCk>4c)qHF(BCZ1vtdpK*VV~{DY7^<oRmxTcbb>d*&HQ`&g#>pt9C{BOo2cg|n{s?c
z7?Tc@6lu-QaM|SZm)fV|_i%%ka){%ly14bu3ZDwCl>?nYg;qIA90+}q+;ylKEPP_U
z`YGsg>a*^eHarxcT^H3(2N@xs6H8{V%Jqct@@efW=dLd>U}&yx`}-5JB-5XFsv^WY
z^lN&XLdy77kJ4=(Z_ZEVRX>~kgp;4CKPM+QeknKj+?*%yS-<#YD&$pR!h}YtTx!u+
zx10Q_{G)0l?&7#xkMMhu+X;Qcy}?Q8inKfrS35~D)gk;}^OGH;*JIwgSZOjmdm~UG
zwjaA${i62W1AJB<(whkiVx=@r7Wzsh6#Vwt6cP+kS#43CZo}1Ca>_SZ>V+FKbg%Rf
zR%tZ8wblK5yAW*x5NUC{4dq9FEo}A1v(Iq&6T*~Nk{O>=rqeBayv2QR6;@Qp@b7q#
zF@9@U8&tnF<)Lb*@l+3Q3_+Cb*sk9eH;#OAGHsc{Zk=O5!H4fSoR5{zoP3a##pte)
z^GzV869YBcTjsn!n{hN`@Ys~SNsQnHmE-1gf<oX?IbkqA%Xi4~c50oj&J%p;6%}>?
z*&XAB7vSP!VYUaoSEVb|8do3u4Fmnr00zUc_EFS12ngistFBwvY;ZsP-D!@mMF{R6
zrviXdGDa9HjLQb~zHs4Z53p;O^p3;Q#I)B;m=E}raI#Q@<pB&qO%b~&25ytrQZ`NI
zO?=$b9@<=c88}YdKkSvqX7CKhr|kRkX&MJd>{XYnM;!Z$JTRsMcL=v--*tuuK4bla
zHL0|GR-Gf_sZFpu-#XfRK>eMz#sSUgPJVDz0q@9{^W;CM><a*~MtAkq>*sfMgAimx
zroIs)&FXvGF9=@96@&p(E{$6xV>=TxhL3r#bob^`5{-J4R)viH*Z2A|QYn81ZFsMs
z3%8dB2k-Y$9#^*fvi+P|UENF>XSL~%bKNmvM0MR>wR+BWGtF*YW29P`>bGB}l|9>M
zsY&Z5*$j#%&eCeA+`XmfP@q@_DrKoQvPy&2?HdAr%-E~DjI26IKM`u*cSN6@*o@Tc
zQVhO$-CfXA#A=~tRk!=Bua_V9^lxhBIw&uA-zuAZu@Y3w&$N}+`JGD@gf8!<Zs@UW
z#gANH{|6+r8`SPCZ5>OU{ty{%KyyyuQH~Gc*}cl;t!jFuh;t%bGUDuFy>pq1)i7`M
z{qLT$1|$-n^eCC>Al0SRURE0S%>l>IgRIYr?^*(x6jVo^Cq~>)v9>@3k$SPe2&?%a
z7;nAM6`qn47Nn7T+J5WxP+t+1>i8EwU;~T?6>lZVr?pdb4(>c%u`3sJ*__W1#WA&Q
zBFXHb;Yn6OAP_j^7zp($>+Zc;_dlRYA(p{Ib(EsrI3z+qA^DX<&MS_gEf?e&MVv*i
zYhj+F)3J->*-){kq`g1!MpWcQ?#DY7RG_vhR?1&oA~3Gq!uRnl^_$@rnGZ*=Akvu>
z*F1a~zj_=ReGLal?mtlh64euy{8sBm=oc%oOVl6j#J)(nIP7|D=nNkTvD)PwuTDxW
zSR3b)Sr3F#%u^{6t-QO%3H-s&sLjlLmKzpsS~&#GPbD2`3@i#1&E3ydkc;g$Bk?0o
z9HoPCnJ{sJBt@>3_Z0kDImrlWbyHA>g4S%mHsh>ddyV%4jv6{)P6A2!V7`D@W%28D
zM-QeJ6A<tII?mqtx+c=&U~*Sc0JT0T#?$#=BW{Z__Hy~wwlK2GpW4L5HGED26&-Qr
z+@MuBegF0S?7SlBACW`FLjq;}xF9-kE35VtMWa4+e8K&XB?1GdA<gS}aH%XNkeBEk
znv-5C4l3U~$v+B@rc|Qk|9qk39a(LoyCW>YlQxSlx&DYjW2M(IzxG2ZhXoh!W?z<~
z7#^p`LuWr?SHDu;28l(9zIC>gl;3?E3&|T>wfmVqxEmZ#dgk#YR|e9WkG7}bXT)`b
zlH9l28~VcpBhq>*6t8$-8$CnAUvNIrd-z+J4OEhbo97MWB93)Zba+eqSlH275}?rZ
zdAM}39}WXTh$F1XU0d->^d2e-QBZy7aI1d5_iwhrlMDd+nh}DF=LxI47ipb%D0M?g
zolklmdAx=~EW+a`8~rT&#s{fMLNWk<O0a+!q-{DF56Mw{OSu5u9XS!sZ@i3L$EC8|
z;j>dY`PF`ikHf%o_Bplx^ShkkTu4PT%&MCMF()0X!8?vZi75dWHvXPoC@iBbl0PyO
z_L6zIqVZ{J-Jh9n%`v<3B4p^-U%lBcuR+D^N0srJ1dmq@%SQyeX5|Sz(0RA-vV`{p
z=+IB~Zm0KUIizR$9?$RIH1gc+;mSEO!}xC_=669w0rjJ!p%L~H{?`SoLG#FxQ@W%>
zd(G6lgP!zD%cu2Ul%8l7PA_@xyhn+D|9YCMQJQ16Euq4xWsZGz5oe>7#psS#-;`O;
zb;r`R75rU_{^Y53s>%K7vqyEsO&RH8y06#XptU+5C@Sr7dPth-!vz9|M+h5u$M84y
zfY%@)GWC6h3@!d{Un-6F59N3BOXy)qLx6RS9Z6i&Tawff3Ay9ZD=IRsWLSkOYo`B1
zuYceLucK#~T*2#twW+r;D2-kFRuM$AK8kd(M|}lGaqIo)8%g#ufw*C+m4Sj8=T&9C
z>Al4CBkdQTrf;PT)$d+jLIqzDaZ#t%LixK`WL1;>8JrEfMHWj_9(>?l_TmxE<V$Q=
z!^D+Ds}NTfP#X{8KANfe9s1`t-(CVdBfzzZP54`$V!)D?DO)sIttl?T_SBWMBsKJD
zbWSRiicDNYUjCN;fC76Xm5%FyiY0%*@G1Qh8MLbObh;ptRQB}QZiPwXTi2)Ow}*rD
zg*;@Bj#$1@M&rMRO5YQKP${vpQW6u!>iioeJ^wU_$;BqTjx7K8uR&vUK;_V9WjvP0
ztPB=36gEs9Z}iW^`TJ*B{FT82f%6sT-s>?Kg9-36XtMP*^{yFAq;H&lOT(luFz+HN
z!!%X3_SojUDUoXpH8xGDL5gGNj{-d7RX}gcaP@u!{eN`g73Rr*1n>S4_{DT50}kS~
z*H!5yE<!(;;MT<_+8@9h64wl|Y5FfC1=KtsAa^%UJn;NPse-#F)%VY98pL%W9+`N-
z{^*?3RZuk_omW@25P~-!KkJFYRMwkiz+b;CFb`T=d;PzRr)S;Ct_{`DQCa-oguBh0
zd`h}>bUKQP3jQW)D*oTNGt$0`mKesw(EKk^vMt+1b0vn))n3RLtGzX+0I4o-xE*$d
z(4gbD_=b&8JF1IB*C6J8HhyHZGA3@$M$)O!AG7esXhc|6R!;kW!yEEGBqSODfa-T{
zkln1iVD(5~nYB=?XdHCJAfo_8h678}^PfZ`Hy#6sKuH70Xa8%e<$tC=A&raT?s6ys
z#8QC$Y3Xk&Ocl#QszS(y$;xeByW<?%2;ak48Pj#yMwoF1K^3}$CAgHiw2wx$Y9{{X
zfdI{nK*mOJ74HRh<qYFs>LshZ1Y!i>wO{{;W8hURTYz0kSxXCf@hSiny+~_SagR@5
zus9rpOhc=egTe<O%0A)P7+}JSX~3_AVUGGc&v}q>PcwmEPp2K*YeWBHKK})60x+LX
z$sdbK9^Bp-@2C>e`U{&)2RLRz3%!cuzey*M4)Pa4CM#o{1G;M%{MQTJjbKZ!LE(R;
z+i^5m{U7Oebl@{veXB9^<6BF|_{use8yACmmg-$~bKDYuG+CxSUne2s&-K%LPjFxi
z>UBh6(lKTcaP2oq-xIicD#LcVZM!Ba|B-+b#=?Lct#br&C-03n{hboP;n&*ipxE_y
zO30nwKJANN?@k3M#dWsH`HR=i0$v;dZ8ZI{Z?yLK;I42V>H<UfM+`I2wRmNW-e<cJ
z2M~HP!FGhb)ix9S7!=&MBNKoD1u5)t;s232DIEIF7(a4sxz};AIKMceQtP?Q+hwIU
zFPKb#B^?VHXEy^`e18Bg&e*{Hn>zm|oa)Irys*}J_*=;_Su|O>q!s_l!jDCeQTDts
zpuk$GGqC?99>W~;m*dGBh}x_Z=0u?#VD!OIgS~TbI&)A7*wKow_hr75z$jw^%}{}-
z2CEy7U)~~09k(<)61`A<|BC$surOEII@TIXAHel6-(AW}lltb*d*M6U_W>Z518al(
z$pn@a=Q)+ue@}*`K`X$ZrF%4O{xRa?+_)r7ziy=scBWO0YMf{b4TL}8o$lH62v0@w
zIga>mh)n@3vI71^TKCBf@*%h22D^Cyhm@!Rf_21laYXMSrNj&aC_V*{suc{qnC<}v
z63_+1Ad3G1ZN=oO$qX)V&_)0Sq0VpdDp~lB{S^!hdB>s0$ZN1E{6Gp+Jc3+nV-t#h
z1UZ#h(GRnrfk`?W$DM}^J^?FWl*Ikq^W~9))3lw=2G9&sc!)VYx8$$Zs&=SEDIEIv
z9c5KjRcUnSgVYX;2CFd?<%(#c-$NsilZo~`_!c*v<=a@=1TiYkTZML-ukHLaxCH4X
z9td62ZCH|s|Lh$4-Pz%ts%m`zdWc{XVX47(PbN9b)P!R-Vo>fQNo1nk-6}w`ML=@5
z^e*>F+j@);c71lmvGu@bX^;Z}B4uLMpT^I6j>p@^lu8G3o@3Ae$rJ|7Y!{HqGPI-^
z34jI2bt$WtRh#2)JpLWi1K^^Fu6_uBzCQNpF1Y%C`110&ZQmVyXIg$5gMnfjXlxqz
zG#*||5By&xW#B%<m3yZhWz`AzzZUjKtYRlG*NPq#D$1{zc1#PJdjQ@h6jb7gyDz|!
z%K`SIuW??$-5S`3R4TLl{P{D7VI0E(SdrqLS5R_wwS{lWcA@W{Q}?iqideTI(}f=W
zHyG^wG+yS|&|1}{;sj=ZMUVrq0u8^Tk;GI06TkJn4Ui|oXnY2Rq<R2YJ`$k$6KG#*
z|4AY@y{PYafKlN&1&@_5N9zuBk7=<Wv$R}Tu9`g>uz49{-@Ph#jiHn?=>Y^L4e(uL
z-Ze|3=0>e8xbH8lfdP6TrEI?p4KY3Qd4|2WBq3tQp2Ps?xjHi@C3X-w)kZF-w)YC}
zo4fO-CbH7RDJt&rRsUXJSh<Adab)6im}DqCMrG|zF!l+at#Oic$Qa+hx-`_|eoN-R
zL#q9lkz;sWbO9?<14c%k^1^wB)Qk+PF@7+S^2DqF5O6hQ2x<V9tT*>Y>96z<$lBDd
z>SbhzuRD$2oUDf1-t-!~DKSIsu}I16k*U`AHo2mt<p)Y`ai~>saiu)dxK-vD)!^Wu
z)l|L1(Y?6Zks7n3V-nX_%*13fzslv>ZD!sv9v}y74q!*fj4YIJ-L(tH>%YZ5wmL>a
z*>m?d+lVP4kn&5AFTmJ=su-Nxm2kjS&>K2^ypr2wzm&vn?6hVX|G@Cw@m{V-bYHT-
zNNn^X)!psg126W}1g}17$Er!Y-$GQ*Ot<TVed0+?yE(iL<y^pR*2c<PGF-dA;!(!N
ze3-oi5Y6lW=hgdx@7!>N%VFPORi_0ZauS+;uPV*gV=)tiG{TePjVDtv9WQ5kNmpi?
zn~zbYUeQw2F5=3{$_dq^RTn27$k6=}sekTk#Cy>$b9i|8fTMtEe=*Z`<CceF(|%>C
zOscSlrbX&{9w=jy{AU@HS;8d_>_@#pljjc>vp&<&VG9%5j|-+2()2u<n5o*C9@BBV
z25_KOzY!wSZ*S_}%}w>JW7Vw4Lpk+PUs#&ffH~P(pYxozX`l%*p1%0?1L<NrrB&2J
zb3`Y&BzgP*`uG;0$s<;;woGm~n0B*8Xqa|!c>WIJM{1lO^4@TB44#)wX8%0+K465k
zaq}hMb^g)l<`mCu8Y+0a-6lVMg%TJZ$g8YcRZlHz7jF!{$Ob&NT29OB_!o9+0H{%W
z%o%rnjF{<R;Y%0kHBZ<525<`V89zI~bPKyb0Pg>C0ryfbY}Rj8mGq{?|AqCzS->F7
zu*DtEE5-)geHIoLmaM+VfE{iE(N46G><K*|Y!k_BG`{E6i+N^x_WU{1!K7W-ZHHl{
zo$uWJ6=OD|HqNm1ndTXEPn~CEhL%2hZ`HOHm$~yAM+4Cm_FwR<#eJ~y@-AZ-L73I^
z5ep#bs<D}0KxkQ2>h_G58wYtka96h7xV+FIa{9o-=TBNw<$O<=Fj|_uex0j!t)S5T
z*~`FlJmSC&a1M+=iS{^m=%rm;YBBe~<KU6gDhi>ZCLJd%^2BT5Ha2ByPmTn-gOJEy
zje9@jxa^jmu1?l|elt<kJ96Xtxt2*g1a8ityFk^&^ucLaSbEmdMef{@cxm{-ix*Dz
zu&|=!;n<9l3g=a2DcXk*)jR>OE~!}&LmN1D!5NZ+nZdvtF6Z-<z?kMGbmvfN_8p~V
zctOGaL934#us7+6(lgl$L1BU%cNNI1kKF@vKy(5bm-26V_rP{R+T~!%DYLmH>XVXB
zlgCkaveWcEwEUCVrlZZs%rIfi6z5;KppFga?+twX5J5Vn0DtWB1qs1j5ttuuYuYDH
zf7KC66=Kl}5W?H>Ez7B1>?|)zqL3x^3a7`*B0U0I4GcCmHo_`t7sYz`xZD2XV*D57
z_^|uW)Yb2z2Xh&8Jr9j*(QAc%ONIap^XJ9vmn$?;M_bK$bq+|TL|&_X4(K^iBT*g(
zvc8sWfQ{MMa1RK7(lY2fBO9Ci%a<?LdfEXC<aU|&KF9A&niFZTA(*10qXntv=4T-1
zvHdktT3V%4ybDr|Th~{><<Nde4a_v<!Jj<wMTuU%knd7J1>r35SGS|z)vV?uF2osz
zM&MIEqV<J$V(`s$%Xb(c91YvPm>s;?c%XZagX7BiT(y`2NpXKZcm14w_USCRtve<u
z>9)(CxqxDV)%~rRnNg-9sTLAvaKpKHYLd(8;WDu(Eh84bbBV@hNt5q!bm;q|U;M6!
zjfXxxpY1_9j9ar7p^Q1pikUFC;T{6Y=ml_ne8s!nBu;}Tg&T=f64fn%WGq<)1+p>V
z9&pSKC}y%o7FT!co$lOR9Vty+SYGa#YYWh_n7IJX17r~3kNYP<q1vqPHTLk!R|upf
zB_->rWBus7z0aU84GkA3W=^ZzcN1qSe2Mqu=bL9PVGze&AYH%hbfSWOM1&!9{IB}N
zr7TJ{N?Of9jq-Mcj$|MlDD^C+99dB9XfMBc-;e7`7jWr5Ca18WMHc6xV3It#l-fv#
zkSeA((O(rllrtHGU{K#vc)}VaG9#`vsxt2G4X8TBnxrrfYVBn}gsO{GVuz`z;ZX!S
zZg+C@s*g8ZLhUVUmli!>vFrl4xsQNkGP|gN^-~Hi^cLxVSKRSHxU8%<q0tlEKfY6_
zcOqM5Idz|-`MBK3#N?5ip67VDxzN|~M>g+Y6zY;`+<56pV{E=<E~IG|%cjM|JMEmg
zGNgqL3?Sg0eEtF1P;7MaS+B(IZ1~|F3k+#*@qDMQ``u4}t5>)Hb`k&v_tGy(Sh8W^
z>%V#?C-V75@5kUMJdCHNZMXiA%RnEwKa+;_zK5e(8(a;}$j7HaK*cW(&xi<I(6oYf
z*7LX5d%I|*36(k=#SLyJ$Hp=jJ})j8_CgP(E`Zyc!`Ii>pR?T>aVfM#yP9e*H<fr^
zox$_jc9pE5z}6>)j;o~A<!Gjy>}gQg&5-jg&Z#VbJE8B852ldKMjF2ImIK!zQx44l
z!n(ccky|pUp#%C~qwc8`o#oR!w$?Xaf3&v$rIOk~?N$u->mG9<)@zgBBkO(zvKXBn
zAKDHpNokx+tWQ*z#=F^CwL5I?>z7zSYx*YIqZ=i|;NOQ7MTB^nn3kC8rNJp24K~Ge
z%Ax=swlI2yVXVf+aQ1uN=Svca3jbQG^uuOvs`cMkp_v~n(R}p6ex3askdez<r_0_i
zypOSOJ5K`fHXf;($j9GN>5#X0kVY^+*64O{V~bhSsil&-_~C@-;?-F5#uM2|VW}Ud
zx9!yj5G(WVkPRMdtO;SQ4%B>=J&h{PKclOKK`5tTE#Nb**uT+6_p|?7aaICcd;*0v
zF#F*XR|fRHJPqSNpzZBnXa)Yk1@IT<erWaI!rY%|NORKHkc_xm-;AjWg-dB8i|v-?
zKHuCpuFn1fE7{%7?>7@9E!j0IQtKW@V3dz$+=*00OVT$xqxM2>49BAx-yZIJfLzUz
zlH`z)eM*oJ@D|3ynC4UX-@@SQi*ef9Cq*PpQhBv<Qu(Lq$6Y&Im%hg%%qhn8{DtGi
zUTb@sH`*}RRy<9sEJej6%kNnfmuBj?EJkA#t9tVO{>osc0$pt%GW-*$jIQa^qKKM0
z{6}@tBek@=3h9!Qj>?@M39-JG1t5IA!uJdi-QL{oRv8dv6;I=X+!|f8^3*zUHIn<1
zegf{8NAN4kn|ZItc+JpTfge&Dj%8#NWvU5K17d_-y}UE5X!Xy+*h;#(?8*ENulrv8
zF`+DRm{D~YC9AkI;yOykgr{J(HQl)LyMrc3`0DYnieguyRTG6Xc05uL?|x@)Zi~a_
zP+;z;JV}~L50g#A7$L;vt&8n1KV}?!Nya;jUGIGi7cl7Z>Jkko!|}G?N*dSeG&wIr
zwARo}(&>JK%w-d_*3X%u90w#q#=@c)^`ezf<Tza4|0b|PDmSqVs>GlPcEwJeAKo2`
zD)O%~x_}CrVrIs`pdjOkDhmXKU2=fSx5I_Knm!NZ!Rwzjz(OW`YnL3n|H*aabv&n&
z?|CTz@sSBC_BVsV$G<$=K2_HTFz?^vU6DV3|EVL5^DNfj^m3}lz6J%4SvW7tE&*1F
z!xfxJ0|uhCO6o_<w@sLBf%)50ZrmfD8dC$Tk7CD&vz!2pJ2w1?GpTnwGxm8z+d&}J
z-8{^*_y*v0o-qmYD>>fSvR@1d`4BxfmI<m6(oHJxraPSGIEO4D=!v13w9^|X-qok*
z#Gf;p<BjIoTGf_)YEQ2a&uS9-wq|@HhAnE2%y8bT@jku74-A>BlG`(Tvy!YE&R8Y8
zp{1AmXx*WcXD=v)m%qi+4wOL9(#y4qNi6)&E4c44F?NrpcO)pVxbffQ4uJ>Yu2?B~
zMWQF{nNBv=tVTUO+G;~r86et7Db~2FR#+vdr4hmrm)(ugat|PU6C;V4Z$ZhxhwY-9
zeFaq56`u=1WradAGegC^tcRCKu}Z9?ASJ<D_&fxiI6RYcDw!;k8Z|IeewriWfL((?
zCVXOS0Dlv8MYNaYc@2X?$!7Vt)V)Hde}gsRZz6c?M{r|ckf*^zawTNC=JpAT{ZuGa
z;Ez3@ASA~7^ifB`Odg=<ZZ<xVk6gQIT|Dy8K<3Xi>tf#G(3-x)C5g>#qFH{zFxOdD
zeo3IBI%@2OIf(}zbTx{(tz~X!;)F!2qk~|Pn!k8JakSGjRP~yNhnUw8dV+}xOs>ew
zFRBZ;*2MwO!9kwR7r`P3hTQg9_i<qrD7YTnZ@*3V6#LQo1TD92@*Kaw2CH?JgI`A^
zF*~_Q>vQ;7K}NHNl~gQx0x|PghV@E`gC}kTdrRfCHU7>F;Cxc2q=0BIM<^*K86!ay
zz)VMR|Ar_8<M{`!T^*qyq~i1yX3(bpF7E5y<W<nDWBOyJ>a<<vC7*TiuH1VZuoP%>
zAX+0<Z3&$uv;1Kga%U}!lePG6oeuI(;&1-lCXEvc`L;W)PZ@E|6sORXj!Y*Z{aSqe
zwVh5w+Q_EDojeZC5!b2vOZ=tgtsgsYfVS4r^XrLBpsiQB3!xC7wS?D)i^yjCXvQwV
z{gf%UPnfWzc!KxoJ5=@h)9Pl=`W36`un*=_VU?R<TvzH5sAhA|21IS&$?wDi!+YSb
zI`Wj28_+`|>PzK>{+2Lskxx3snVCLegwkukz1q-Ppku|ze{YDFdUU17JQ+Dj)9fM=
z^AR}--q6oQilOs9svE`>HK=(~Jt}i^jXCd9f%j=lqnMAY*KUMnRZdEE^`tgZo{Z7!
zF^~x_4FT=txnq{aNzMB$4yR{h0)&rQ3Xs2PMzLeEd9hZ1s3rvFeK8X+qa>qyIXwC@
zOvEq{9oC-uA+RhP**|K?9HXA`5}Oh#T9EO>KbxKP&DPtKeu|`O?$1_EGn-9Zi*Cn)
zxl@i!PMbTMF3Twsn!XDMm$C3jJXh|Flk-BZJz@{%aB^S0YX$aqs5v|BtP^C@Npr@<
z<DiW(7{!Tlbauc$Qa4QsIG7@gTr!|pHdsS`S_>4VFA}0rZcNogM~Ur*QgLOQj!cKT
zX~SE#pnJ&(rwR5=r<qgM_sf<Z6iCr^WBaR^Hn?$G;k4`Xf_NUc9jP8j`=8*$B2J@!
zMxziT`x|45;}x$+>96M9!hxU_ko6Wfbxey5Y4KXs3B@=vGf7~(7cD%Y{XQ?q3R)2Q
zM+>{3m*jLcQpDyxTpu%Aga&|KbU-J!s+x}Yaaw7?AojTUHKDEi2#RF{Wy=FR@UgFL
zpnB!5uc&V|Ee~|5BoR5Fc6rjlEOoA?0~_l51U_ToWG#0<4ht-?6q<D9LQMJB5RmwM
z3Uz3A37>vx|0)o!-r=I6?M#gaA!qa*3^OCX?Bjx5=2LdqnjEs}1#L*SoP^eQzz6m!
z_iT`>OZwUKFrPFc>*o2*2SnF}He72Q?72VXF5ZTS($0EzOc~O`_%p;F<LZaQOq&A~
zkV0<zoga(kZo4{d{b>7VgGlm$G9n{`qARsdgT<icj1n0Pz*5l7EAjAA(6b|wsU#?;
z^kWxmvS$#DLk(qJoy~y~yN*80!V>X-h1Krx4t+~|%}}VbF~}017&Zasly{HGTBH-&
z`l!!uGInK&(Oa~&%dgOzL_PWQc)EtGW?hAx)z<mENWy1qJVrKtQD56P6@Bc4>`*6s
zQko&A0-gnPE8j>gNJ#JVDP)&+pN?OG*;|yJ|K=u6aLc<%e1Z^u$4+}~J1n0x66<E<
zW*HGr;}p6UMVQdEav3Yg`$)$r44XxVDAaOlvhIqgl)X0`)7>ed8ySmp)X)ZnOMd<%
zZtwTMy@iXq_+%zIu5R2O(T3CJfpxBPV};6FReM^V_~me*;VtyDo+DF+Uu19kXKL|Q
zZ;B2OQ_&KIoWJ6&nM=(TtWwez+Bp<;hKCK^GgYO9yUfMKLm^YY!>_@h?=SxCQvU0L
zUx@x<uYo-Y8kqXUOVn3=t?iLZ2qCaim!TQN7vo?fJfNL*08-E}Empz74h>`pqFT(#
z&gLtr^@cygt(kE+P=_T<Tb@j!ugL4|`FKmToRrje_(rqCq^d0~r~J|w_yMyF)<OLy
z^|iqrYeI-Fn7LM@koeKBC%`BlS5lySHD9v?fr#EY9~hmPYdy*iNyFnYcm;Cf;<@K_
zw6~|~Y8?oDLsu^Om|gT&yr)eF=A3*92e<TqXv6Okl=c!941Nhh<bClG8h#1q!zIW2
z_eKBDcYlBW=Y0R?PY~%#e&Uw|$fEyCYv9R$cKkno!U9r7@0}bd`;V9ZpMLyvHU8r#
zpGzbyw8Sk65_kT!+viVukAR)B?MgT({2xETFJU&3er^WIe;qKq1quDpI1L}af(84U
z3a{SRSzHm7`lf1KJS=Oek@Du=IQ@idl^iN%EpF$IfKosOfo<zRe#C2$e%<>MA^Y@1
zFm9}N*ElztskSHHHq<dGl8P{BB$!0~eHKm8G$n|K04f?ucx0UUDnqDfOod^~*n{@0
zdY!JTv@<M*(fEMB8o4mA>Lt>M?<d~v>KEAf#Jg-WIwg&YNcuKbyUVXpWiBXfxHE)x
zOj^(oP+RH4vMS{xBi|*{_NVM;Jze8{!0DO}gVN42wx~Pp%wC0vGPXP>d|8@73O$y(
zM2LHaqF{RmpTvz)jg}Ub5N)*O{=o$t0K!*8IU(~JvHQu3?QNy8sSPd>QEIUQDK=PG
zFz47yhEw$(Vm-7(9FX8$=ZLJ^FgPs*I7Jx!xE$au^Ux*tqtIiE)yqm+V<i>>6yp}}
zlbl+@jJs!P#DhtXjP@h0b?DNbsh?U8yHEOGf;LEjF*OROOAx*11!HRXpiB+MB#jvp
zqfYlb_$8R?M*hc27vzG|HOpAj=9G;AvzIe|RA4t>f}GxIQ9rPn8MK9cl?5}*a_<Ka
zz%F_qI~rN}S0Grl+kbAJMYRUDzGw2Q!wXE}1&qdGyc9!7`07xZlVR6OSH#azI`N)c
z2#Y-Xr(5JI)FhyRUWOKRD{2m9v6e6>`LgHw!*M*HSz`Sz$!+xY5ZZ7~NZq38^EoDp
z5z`_KDU<rpABBb-V>(s!y2;Fh0)wNPdq-U59nyn~R51&&%RRT+=3mO}leie5<djwF
zJ6wlnZC=iZEmX|qc49S3_B16Qgk%*yay(Iw|E!#%i%NRKI!a#Kj|-(8;D-dG5Wg9C
zp~rA<o6P{-j1VH2Fi^!`whVdv;o7)al`?iwxmrHs*>Xqhw(|zfT*1UrV^&gq^``c*
zZD^X;o=qa#N468b0!C7+eVuj(UD$?wk#g-ij208aPAjs!jwg@5sz1s|B`ja6`)rGk
z1*`DAWY|cy-FX!&l}JD7C@a&92?}|dcFKEvi6!VY5eVeMjB-p9u-J>01MdgjX{Mj4
zi`t~B>zQX3y8V+}NlS}T#xxmRdn-vTa!4!{kKh(MUD~Ex`0+bd{GsIN(CVR$Sg6Cy
zuUilzGdi#}u6>EXhX~WRJU&n|9aM!u<1SH?U~Ouv`oSA;kNfFf$eGlCmo7^TUZixa
zHJW_;qk2d<Ldz|9k-Xm%)$o06y9BcZJ-81ZgpkE5)~NDlRq_t4-pCla?Ou6|Zlh#4
z+%q~$$y{7GQLvvpvL2G!=^h_hES%D#JQV2kY21(9?MPyoKMJ<XnumZMQGp&I|3pwi
zJZV9X#5e{eVbD~tTW1d*+<KDs4Qk(`7;=_2;hAFo<|v;U-!Z<~L3F`ZdgRMa+gz?>
z35)st#dl$z402AaVUt7I6dWa<8ZqnYOkVM}r7Ju5(T#GCnYuDIf*4+T@t^+ctW9Zn
zO-_Hhcc{m306<_ybNdn|8oX3Cm#ImJxsu>%hfs24uc;&f>`%z0`AI7wNjEwo0-!cp
z2m8%%eI#+elY7Lh<noo5(aM>4?Y?B}*;5)~?0vtg-_>KT>p;#>bmV&c=uFGy`)Jwx
zi^!6oNny9W;P;|0XZlVSw@)MK`yFGJI`v|Xg={TE2HC!EqSuA_DrUq7rv!;$@H7J;
zdhf=zp%76zaAL?RW?X@`ih7fi%&nMKU_|c?M_-J_wJnm60gJ9@hLj3&vW49X`D*>@
zu}WcQ8fQ6gSf+2d<mi&e)Krst7@lZl^oZOdLB%*5Z<yl?EeQkRegfWb!<T^)>Mjn1
zJF_n%p9n?^gd1yJRn-?x4>Nlvi&AxNe~)YPMJu**ZSrC0Ya9m(@>&GjW4QuZ`jJ6}
z;g;>6C06udX!~`G_O}C+m+OWtHu6XIvv0dn$=|Rz6CAhL#O!8p_*pS=eiUm70J~Xu
zohJd$$D0J~X1KtOO2E?tp|Lvsig#n|8TFKmA;1zVDf*lJn1($Y<Ia>?7~KE3-sxh<
ztQA--PF?+KND{}9f)*LFc>6NH06q!dJG!iUV@l<j`HX@A@D*H6gxJ~DOSDk%9=a7H
zRe!iQ45*f8rWseEnzC>q8XykiKh{l}WEo=oD(xhXDjXj~tEs6}FNkqxRZkr;=Z93-
zER>cM+h|MG=Y61)uW+CAgU7)*5pBa0E4QA5^Y+uepsQF*Dpb9EuHQ5BC(-tGtSKci
zkr?||Ge7w)_EvNg$|}vQo_;8<8YR($H-B#miOD29BCq$M1)KLJ=pbniVCk5}h6LMj
z>_IHN;m(*ID(Yq4gObSV+s!RWAKpsiDwdxLrHr^z5=lH2Ahih&F*zHxGMC~Wv2|Ph
zt;_4NO8p%uYD$zaFWn`dKP37^9kJjZqn02rY~6LTaj1_zMh}1Ylwg4|Cb#5d@cW57
z86Ne%V(2%kz>hpQNeN!#<NDa1;uYCjla6aIH&F2i|E%`M9qPJ`yAUiGV~V#&5f_5A
zKk*iA_*F1y)n~a1F#kw++st-b*X3gH(i<esb|<%``hq%iXio%Cc9Wmk>u$;Mdpd5D
zA+lX6mS=R!bz+Q0zE!Nu)TV0l>_3rmJ^BU?ztU>%fD^uDFc-(L(T;+cZuKx4Em>dh
z7ckDgMo^V>8S({VhW_ygen%vI)rX9aWigU1RdQ|ZM^liX;}0<|ht4wMEgY0l+^|)K
zpv_JjR~|A=dK{yjHt@G3OHd0D(P0859Jk$?j+@&`Z%$DUlL$3i{yOVa?9els`UL}{
zi@Rhf^u_xgHG~>-%)prkpfCWSsDI<1m8nDu>7w19Ef2u=YfJwakz(+Cq}IdqaHfm5
zC*&QSK|OJvZR&Rq#?LxAnfD&Ly<RxYCX_AyovPC`ep30p7yT@h%J%8P{=K7QM)a6k
zUC&cR+8)>~1=?^`u-CGF<#55W{4dQ5-Wkom4oPS54iI0dyZx3f{4oSbcenAD_8sI7
zLg4=320Xx#QnR1DEYm39xc^FXxUoR2zz?mP)n`sI4conP2;+rOfzM8jIu8*GB_V>#
zPzaGUD>yq}9xC%g8!)Qst!^6rzp5%B$RQbad9I^k<I(S$2(=oS66XWco%I*}K`By&
zrdq!p5Bt%)i@*3{yJG8~KUB8}8Eij_6}sE3XC2@k@mUt|bgX4h=_au$y8q5PcHb<`
zYN!+35iAwtwe7=&w#s^!Q6o~Mwm6CPlLGRq2gx8`7+OAt%%bky5>1nV2*^2gKlmJG
z#ib)hiZLYuo(sPA<j-;lpPM>}#7aJhPR`~lXZLCZMi5Wo3Q&a~JneHs45r>uOy3Y=
z9N~Oi)TMKC?7r$X!MSfLiE8X0=!opWe5M_6qDA4sURsB|$p^q7-sS*@*Xf3UCIOZn
zQC?m?QOK3_R79Zb(>zfz5sVGS1_^esLR~5L0f!rBAE{_G7afr$Fmqr|XPH9(VS3Wu
z0VY)zR3Q4ve;C`X^1!05IilI1`*-^s*hBZ|fb^cP?|(Ip!K;Aom^w2f{5P8(V;oE4
zf}Y>|qLBSxpSk2?4Ll#>%~L72|FoKA!NDPo>v;d|fA|Uhi9l&uABc>L{YTf8pMb8*
zeo}c=4w&b%1qzCyH9H>O1S#GNw?uSkqBvFSENwMNnCKJi+!gxt1AA@-(Oc|BWG{XN
zCeCo-(r8j|iUQ-DQ`)&Pz)VjYW^Xw&rlbJav*r_kQx<*Ul%=h1{NK4`b@nU2?&g{(
zR{sCfnz6lIl!}_p;{SJ_Ea;k#flvTn_r1cq4*!4n#w{ztnN*9aBdT(04%ze6U?FZ{
zd32z3s)O8EM^mxqCW~ndg<y?=1oD49f0X35;QMpWe>7m_I&c*~tZ3Izaze!F2qS{`
z@B*HHGye8}6+1ASs49MXn{zN-$5ScgeA<BnPBro%&5*7W1axe-GPJ}lq6YYlxRZoj
z=TU=$J9T`x(4)kBl@}#X6!g2d?-4)_zt#S;1Cv5HzB#4YVOom3S6HZ|V9>XqO{XxQ
zw3SyQZN-_1K0<8EL@)@}fxss9WsKY3Dg(sx@sUuJCXK)^^?>Pb*%Hc18k_%&@pyEA
zSjJ@#%iwoHcBvC8Z)F4}g1`>{{NxFfHI)&>fNEKEQ^mfJ!CN#V6x$Sw*?J+IAzP}0
znt;t|$yngr!v|t*;c?)A=Pyc*G*~gVuYmbG6mj<z^LiVSgO5o8=~jbEP(P@Zs2Qw6
z(Tc+~Ok^T`D|GTresQtGBrsGxnbWo^nkF0vo%A~3<o;#U?{p=l?hq}N^*uJl^M4DE
z>u^y=KVElz84f$5B;q>Zc)S1!Xs=7Pvz%k^5IPUop%v;6?mIOfd5)Cj@7JS@i+Cl1
zmpvJY_CXs5^ICF=iE<$9)==9Zy(I#UjpGs1iW)K~6Jau|;ZdkV)TdV+l9+9~EdZvj
zc&nl5$bba+xvl~Yb?-dDSlW&@17vnTh3#^p9Mm1Y(Gnw42+O8<soWyP-0+>NSwuQ)
z!mh#oM0+>&Z0g5sI!%|>J*=LxY@|T;-jR0YAk{D0+MsH$jh#^*M`!~5k04=erUA#z
zHn7RtYe)tv_ZVD5tfLM$5D%3<=eD0W7UJF1hGw6Tm~n7gzkak!o63#wo2;Khgp}!y
zoCWXl-$=p^0=iHA<ijI;aHtJ(Ql>zo;F=RWwew#EZjY;}s!1dEt*8!ayuD{&D*{DZ
z<vJ$GkLC7~2{VEDHHw@YhzBk8{|_z2wS33rHeP$5Pk>*&^d=_RMc_83B|X?mec{$8
zojocMH(xtbilbf5ByL38K+oKdh%(*gW{PE0ymiM6u$xXdMKosw!CWVF1Px=+Z@0t~
zN+0noKYDM@>%k_G{TAy7iCQZhKBM8`w2=WKmGkf8Zj&P$a7Af>aa(iqkhjs`k>Kx}
zSnajV=paN@3fP$l?ks333HeXcs7bf(#!$po{uG0rh5Ef{_G%|7dLRdM5Om3!K;c%2
z&fXNl={9lXWy56NFI&Lx2sxlV%i-+{$UViFC{iMW-G49^onA`R5;tVT^Gq}Tkx4@4
z&uF#ia#?0)Xsx~VT&o+DXEwU25ZyN}G4sl!Is)Uof>}Qd1LjVZuwhb1`v=u&5Pmo?
zX&xx}3YH+kxgEH|kg&5A8;YM3hjQhXgf%axlm+hyPCFS`rkn<r|8SO?(sEy`FWTZ!
zP6dvsFzKc<=C6y#*T)$D+|3VoMwBOT7G*K8Z(rA_6b8WTw?=iQ8~1d^s(YG3pRbBr
zjU{~h8fE=#uJsz!-Xp&$(bCW#BPmFMkYVN)_0oQSfoUc%hn{DgeTn_SxAX6`JXU1$
zdaWn~lw$tYWzAVEh?py0M70;XYHww<ZSa=ETfJJxd-Yb2^Q<FeA-7z#W@HYy@I9PR
zR0t=ESHQYEUy2*RAnG~tvzfMaTzJY30von2Dv7+9AQWc&*NMnSypr7Qze%A4@9?P4
zt`({6Y#=H#kVizYERZO1LldmkuMp_xrx2qz*93xj<h{$Lc^H(lLcwebuTw1lo|C@!
z0k~$0crRp8%oxjKomVrN7J|k$`O<%5IOtybPmA6$R=FnKyY)MEB&q`6p3w4Rc`WZu
z4LJ?4-Qs>SqY+GO$rYl<ji6j^8yY6U81Vx0f=z<=*o1*RV%q<LF(w{+d|<MnPb*1D
z)!Ef(oZ_wcbCn@{c7(E-b7X6ay)$BbeEjiG*#|_{Bm+)zGr$o~-%4t7vmBh_+0!wO
zf0y|5%}6k6^l`-fG9XtU7JD8mvg*l(0hd<rkwVs0W}gZ`!hjrpWHJ7<e0b|;VJsdw
zXG`6}iYNqRJR>J3C#8E<KEncQl8q{Q!sAIzWcx#fj5pD>$|^|hf^_78-Hua2YJ$+u
zkAuQuKZbtHKNrD%8w-~(u6;98DS@!mwYXi42qH^28qcka6-nM_J{%%EV?>wGvw^j@
z;uEl~0u$QkaGVgCXfu6VGb@A{td!uZss`321vb;z_eq<l`Z&?B?kEa!NL}usOs3+;
z)J8P7i`Uc<YVUsG-RO{s=7%E5-1X82eL~r8vD80m4NYIgPB-bgTEbi8(+cX81A7AR
zG~ZR+39>_OB+V&^IDA!gnf-pnNR?*!dF7_PHZRy9jV=w+Q|@5HEO7@p5u69XQWAk|
z%ln(dcre!9P_Q(yErkEK+gAC(!do(q&fcv_R-|KTkgRyM{&0Uxvc{4fDsE+zZiw?~
zMPx<Q>c^NECX3*+@NE(dCtrU41K-T&K*>kvi5Ax7@H5eZ12kNNx$om=<|HZ=SCWUA
zZFTs)lQ<d37ynI;N#i89^qaneIPET+Xks>HMbL+}Bkvo3{Jj;RxnYUyn48NtliYIM
zYv+3;wMt0kr?hVQz|CR78v+2PywAkvc0BgZfTj4ML<FxS7#O)|1ZxS90Gn@PMh3yV
zOvDkiSU}8hy=5bsFyZS1o%fI~#x&Aa8k#-B-Ou{-5SQ1hDmgy%rK}wBy=f)hq$`7E
z0k6DkX2Y);?F@8bjUW=&9v~XWI7H3K423F%y1}kJ`!wA5m{3kJ(^L*@G_!krJ8x6G
z6|SRptB1~*K+>mY(!tJn8tqbUgd_pCT@eb=T>7d&%OE7iL=bmZ<(*=Lq10^_DFQy_
zaZ*1<M{it(E_Ev${V6<?#@`f{?)*FqdeR@c5RDUq!FF5wAv2ooj}NrM2B%dqhuIo+
zn&%AZz=uo)MpS0GX+L#WcmKzqe1*nhn>hFGa)f7GWoQyNw)y@W;!cQ-ok22CL!Uh1
z6f^!yvn#JRyse#vDf1{ehHffAdZKE*^)^{TfF&0qaWgpkO!xk^8TGqTNnZZ9Z4q?x
zrZBUs=0#4c0}^${_L0CGe1P!yF%lB88+OB;G5&-*d-6}1*O14Lblf*g^MXFs_xM$T
zo$Oywuk?rlYX34{PZ;F~@&`UjnUY=AGoCC5GhWR}_KPxuAFcbZfE7XstiC&&ro9$&
z7P{sYHOak^g2t`6jFn0}U?cpg2VT4JqPk1u>`<|Gy}V~(E`Vk~{szxYkR$MR!rhKc
zayoh!17a>%cdXkfOylY;v>kq`?W|;m;i$?DUuE#w-#D;zdPCLLc`4aXY8C*`9)%FE
zuCCgy<>%rkit_jZUn2Yo#92CvNLUSc4|9yxTa5>@2b)uiz*<ROpRDChA{yWihqBkL
z(C;QA7$6`;HqbnT=5^a&AG7`Sff+}FZ4Z;Kn8gLURB#ZV2L$$Dls*8+p;1!5$-g?B
zuQIACHFJrS{J~4;<~r8q%%_4!rhT_DSHcrey&t}XaJtk80t{b?!J0m<ioyfl5(w0j
zGu-;tCWdi>QfR}$)<TP(rz~hsq3`L4y>g;}Uyt#m{w7M!Kf+1DwDVxS@4$TfQ64_!
zCvy5{-spv#2j+_>a`5VPPXO05{#l@wZtVRF^QE#V*k<?hRG5J`=z{}Oeg3>V-ZbT2
z$8Edd<2gbvGg`9hbC-`+7uwz3ZPXr2VGD47-492!NlRbeyK?^im$cx}#*t?9!AvD9
zq)z7-YDA9%(8=2l$@6vr<WzD|0f>y-(4}p$L$E}MpD}!8DQ%#qprF9O*18qtbBi%u
zaR)ozf2*Dd8}uZNxMn_7U;%@pj9`%J_QtyGn?sF;#<fsdHPC^)<8>i=qU~!wgPBr2
zaSsg7(PKjj0=*o)Imwu&Aed3n))C*iXlkdM#ke=&q3wEE2af#1JzP$#5RZ?ksfu_}
zmkw-*)avKnQ7!<~T2xmg^A#l_dyGiTzQQc#ln@WWzfUpviRdZ#$#<;O4EtgQr1^b5
zkTT1<y4I}_W2WH3LzV}tIe48e1>=xz6JbpyY*sg)6dxn?&UT&^nq7tNlf?1a<y^mU
zBaoUH=KKM!rWQTvvYfoL5UJ>zuTg;wUJIgoSpg}RE@4{y^S))NH_;eTq+t>i%c?=|
zG~-cS@oK1D>ej$;8tKYtnc;w%xJWAT-Me?gSBG*FMOgyyDVc8SI;Z#Zq}5{P#8>VT
z;fL9Mwgk*xVdOOGB-(u;{P4-7+g9Ta02E_ClT*bEoJa&xXBV-VHkd7U(`6++;MWVz
zJKzb>n?l@Ky201}*D>Rxt%Z65NM)Rs?^=0?9|8Z}+GrI@%+OPbAESm<jOW`!mTaqW
zNtyl>q0YA|{1YbQ<#?7s1zzzC!fo=M=mf+E!3zf-`xu7uN$&Zbi?H_r?2}QOo5z!&
zzw>zhKNnN#gNc)E>je8=eCM-3G+O6SIO)FIn;``PLYT(DKk`U`wO8?XCIH=Rk%Bs|
zkJ2%xIA<I$a(Mk#Dtz_&84LpwHyKa^A|%b^Q(k@!lpYmjh#$zmh8gE=7?Bt~0nt6M
zjRA`*%*fcd3s5badp4ohSPWjSM5o|N3D_&=y`*YOf2f(00JpR(Npj!mDmNRXUmeU0
zP*qix4j`aXo?=}K!1Tz69Jmqhu}Eajm+@_jK>!sKq2RW+w%bPKPA5ZHTr)Yf`}P;l
zSAd9z4{PeV(l>szHdVqFDMV5DFzZ$D3b0Tb_Q%c18I%XCUSHy1XAd1N(o#LxnBcYD
z7>Tr)sOpMg)B3)Yo15E17jXO6GvnXCzJaPa^XY4WeFaaSp=|A`Z>9jds+C(uR1DLJ
zuK_JTU+A$Jwg*R?ogOrEfhqcP9o%dE-p9M{d*Op$$GiPubPr`{iD)3)rhQSZtxpcS
z6g}wyGEC3?YIal{ZXVqe{5ep|5+V2+)(kcm!-%JlMw5H(tA!u?$eBmgqTp0a2~SA4
zrP65EFT_hENv_6}=NeD-?MzS#?D6F~e;kZRnF;yO9M4|Kpn(ECJW%gsRl8Y-{HSrq
zK@`3}<)l}OLTJ%N&_e)ZEWV9Ay;r@~Hv1Lh+IXdTpr%CSAglo(u6Mu*5f_F=Ax&}U
zLSsVRz=~q|YBEJWayXaS3yFZ!!l6t3sd|c(s9VoCguZG)hl8@gy6^mcjx>{32VxDp
zMJcO)Jx(ipTi)SQ-kMx`flpS4R0&_q%MAUPkwLHW&7kcaw&c&WHL^H@t8w(?j1WY6
z-en+aX%8SYUdLtM;~t2yH|{CNKQxa4`!lC(K@gMG2D$+o8{75^_RTmsEU;WmQ}s><
z;`Oc5uzDx|%{R8kzdL%s(Pr>+&?0Z7M2CezDin`3hvw{0htDuuo-20wXGq$0xkr$J
z58xgKu>GDx>Zqnmbm|ufz5ZPGxnlTMk{^7V4c*z<SpYH>HKOOGvp0E_KJJI4Qf+Nx
zfo0|E4><0_p5;BDEaP?an|&8>-mLm4DJ%b2Zy4nITHj#iz~f-mpCa@zIhl=*kB`kW
z*1?nze*qxapDVS6;oSIXt8x#0@?=6qQ}b4}$;ts4n@W%5zn&>Xc~Wq%M%Sfy(*>Yp
zV*r+3ceDA-6Kn~oM*B%`xE$`vBbQr7L_Y8anET$KRQc<l_bE8_y&Ddf5;G>;=<}Jk
z50_H~m;wW6JZtvW$5bRkZrw3Q6g{A<G3p}WTTZgeGVBOdqAbGkJ=(12*jW$e?&Cai
z>PzA)e>KE3*5u)4l+oBPeAGFRE+*l$ZN24aKt{B+Q)ElYKMkaiIP?D@>#YN->YDap
zKtxbcK=KeGEfRusNOyOGO1E^ENSCxA-61KR2HoAIfHX);|JFX>^E~hO-G9l=VV|{U
z&6>Gp=9*dW801Xzbj(;jvRkKsL!B@kXhw7g=TLFP%a>XvkwPg~Hn#1Zw;2gKX~Ckv
zRbL&t9UyH+0UOo<Si}Z@7QRJNF{+n-?a5@fwX-8XE_zJ;nQ%&OtUOx%P_xcHKd(LN
zD0bb%(x(71{0=&d;tq*(+Uj0}e*@D>U$XgnmgNBdOf<C|uH_D%p8J!Hv7#4Y45!lj
z8*Jr}v&~PP6M6@Qly6V5WZ;KXn7^88n9=@p8Bt$Yx<eeB+^3zytw;O80f07La)30A
zZx?wVDeMu)R>kmAteP&9m&eX<uH0gfOCk%>(K4*=z0twypwX<^$I|;)W~B0r!TydO
zLwbkoRx|jfUtpZ}?+CZlj*_{Zf;}r5^dor3v^_t@#o=}qQtvYKD>%p8v#dA7FMT6X
z6TOyo(Mg>ev$tn^Om2r%BKpp0&PB}L*7K(yUSb=Xlb}qdDAFN@nfOSEF!g@dpG5QG
zpaU^a&nDlpSiM`?Q<L$ru^JIQXJKpEB=^1;_p@z;7?daHl?m}p#h(s77RVsbVnGQS
zMPX$#C1K^N6G10lSIKZFuu-gLx1Poo^J1rN)*X)a+~S-9)nfiM9OMTa3kdu1{;Jpl
zs;DF6rLKo&`za2e<Gl$nOb~qz4(vJidtThu7rwVZNfYAA0D5~~DxLzXi<>}N5bu4I
zK-sHNl`a}?(uP_{w~-fp+<dWRjk$xi(R7Btvp2KM?r?E5ZQU*OkQaLt|0i2c-tKQ;
z%>wc5K9|P^tiyWo2Z5^HG4IVx!Pd-OE=nuo{q@wWW&mH=?EI}1i(Fty)2XCY^M#{b
zP%wAn#p#cSe4mX&OPj@1H4jrt8F9+D?G6}y>Y8ycM}6Y{Z?;;3?A3Aj0Br=vuR!tM
zgoFfUs~L{{c$>!j?eo(zM)E)ks|8`5%UsYFLM|HmfkCJ4<B3D<I|jGXC4e;}TSM?d
zTn$(#cNt3ZPY-Hg7?=C0R~%8{kNM`bZPTR4nVFe;vhkq)fRn;zD&>;*xhbxa+W=;X
zztlO(Kp~Zi$z;&Mf9YOR8!FH!7~|*q+T@QK&SBgDPo2B$ux9t_%af%?gL}#&LW;c1
zbU~F~bFLfo!#{?)azz7`WI0<m@93yzx-#lDX<uIKc!j_;lv(Ed)&cukO>+{)vwj9H
zeYoh*-cC<phdmZrY+qHxks8Ttx$M(8<~)rCMfjJS?A3>Z<=&_AIEerPJAd%L2#L7!
zNi3R2dI5kUHuCiiOdozbwAEt*9Z7%ZPu{YLS7-BAqA<?43;Zvd#FqSRGDsddnuf=}
zk8@fKWA922ATis{$w)!w@)^g!1ME=~If;+#-=gf>N2i-BK*@C-^;hZ+_~S*?Gs>`w
z>(*)QGK!d356&9eL<S{XtF2}~8{|;?v;~&7XkKQFCj#eG{34$5aAUlmPUs|*;6=_H
zGpG5}_b=5-#4k)jA4-kbeXlDK3lkWOS&h1TC|j1LQ}4Lft#_#?%XeWv%#p!mN?e!q
zJLi*?E#2@yHX#fzgK5x^xO&Dmgh1;1ltixGN?(SQ%xH&Ukf)rfEQZ{%b|-IqdDrqs
z7yz7#KN?jk*B7co3_U957l|OCB87Us8{x&`B~g36*G;UKrKyPP@?DJIH-9bO7=Rm-
z2Z&+lP+wpF`I#@bqg@9j-xg@G>Cr1HO3b`aEQ%I$BbC}xdiEhRwj_N~1W#w_W5?9+
zTGnNn?}Ol(p=8<$-Y|)VZu8F!8woi5-|EIB>SPNtTX_cz@nAi}4C}kEg4RufP=YKv
z-Y)14#RQ)Cz{od6anW1y1*9{BTn$$hpVc=2Q+?F!y21y731ZPlZb<dip)h<pYYewU
z|Grte8M}P{JsUnwP+N{9>a!_oZA|I940uwEqks=!A{Wx>v!KgF2qXofe0K%rMz9^h
z4@62!Sn}}}tfKA!k^Fve?=*z%mkyGn^_`3C$u0DB`f;>*&{x<hS!i>IrAD7+(N9My
zd1ih4epsgjbuzZbgN!wMtqy<3>Od!#u*&XB>08gIc-cojVD;j^ULHKwi_cLnzq&lr
z%H0F!hvyA~SqFZ4w4DxFq)C~Ze8D$~vkWGMMtc{(<r9PB^S3KXFSjlAw@hd1H%u(T
z)Nk3<uSjm!#x#=jMMDXUy@cvI(P|Y&&5=1(H9<tMX*6i7Tmx!)9;5bQVYsEVG4k?&
znIcZ(L$6g8SQl^JfS{9VRpcaRl8rq_hEzB0i}JK01ce}!YFjURlw&YPKro(!g;FSN
z7N6zv-Qk5=qd6?fIeuK8cl*q-1jS=ancJSZc$YFGNcMbdjtZ73;FK$$8302aAzfti
z7Jf!ea!mK*U0imzOvPi^qfztbi=z;H3j59gnAt(V!|J?mPo_Mc>FA>nKa&v>+t4XX
zsb5hX^9av}(sHabS}KLb+2v9~)AuKb-$M8r!Xd3GD5Q2JwV|whYjF4-;C%`EJcn6F
z^>U6Ii6xgf%QDd$R<L!&wt50W!C8Az@>T%hdV@^on>+}mts`s(UXd;Oc;Z!2C4>=B
z{L<0Yw=CzgBcyn9K{>DMf1w@ky=sfLTq2sT90<eObf}LHWEr7Cw>J%HV(b!auhY`(
z?$AlOnBrBl?a$sc<&=Ag_(q%})uqtferK`JeD5<~R}n)J60|gY<O8XsX<n@7P^f?<
z@~Y#*6MS;4+w8K-W*FbbT>CVnIACUq`pqAv_b0r5I=a1?7;dfSahnWFuCHdW?21k+
zE4NSh(F@u-tQ&Uye~`Xf9>mAy@(gEk92T#bi07(_7hqAY=8ecPrP0ekl36F}ByMiu
zjW^5Nnvr{e$U_nJgR{7D^_0m$t6VHz<+$kb;;g-r<nI5n9=)*!_(STQcEZ07e7sY3
zK4cNWomOvWlJ>*@{_P{Z1#%n_&cPb;I2I$G2qzcSWEtYw6oRR66J11^*v#m)=BtaH
z3?>e`L3(Lcs{mKr{OX|XhSxH`9kk@!Ht#-@;|ZTKHd8OV&%a)Y8B)_IQgP9VolHI{
zvLcV(`l~c|k;et(4=5rWX3U28xK0CP$6sq?nAbfQS7+f6L_i86OS>vHf5kjI)P0H+
zlUGMG?uBemUu!k#*iP)!0V2?gTm*Vq8pPzUJ*j;2=Vw1JM_JNwl$^CuYZ?jd??KIb
z>>5YB$1~&`<0b6F`5Wh5vCozld>@7<%ITA{P@Z0lZ@-(L81e!7tUUdBW!vy6Y$ct^
z_dSDQ4d}>h+50?@ESw{kYSpG%MyO(c93{or$YQpMa>!G9rEXeDnIbmY{iY;^P*YE-
zj9A%8%KlmZm~)8wGRuldgj@QF{e#xy_}>`P?wWBH6e%`>W^b?3?H*RWSC&i%$8r_T
zq{4dkw>fAiqQkj&F)jc2D*%nuC5=akJZGC<4j<c6k07%!gjr2Hf#9Y~NsbrC4A)ax
zmlq3aS2V3_yB*kypH492LpSRmCZ68b3EEhQbn%aj$7)>>Ct67|zk2HRFY2V!pZgcj
zS|+kv>k3Kqo~gc43kyhp+#SO2+c>ohyqwir!ICySH}{8bP0q>FVYGFR;$0h9s0!6e
z!tpa%lHD$c)aRUe?fN4X2mPJbutsd3gK3t=TV5E-w;j?$Mjg6xX@@O9+<ObTk8_1+
z@UVcf>2C&fg%61drpzBK#BP-dF4ug^3Q7m$kuB|NUhPV=Sb_w-u*AS-R66aNfii6V
zYP(Ps`!l&SEOd{DGgb$x8mA%kR_wF#Nr)Gf7ohL0D(ce}32Vi2E>*CTOJwjT4h7%$
zvoz_5yjv*5ZjP*E4Im&q(#lA|p!M_f3qM1rXB{xa2C&aD%d$%=gVHOPS}tWXPsnL`
zh+Zr+DBSIM>}Qze20>Bi*xYb!q(?$z+)9d2Wz~bd>g$S<v;>+N=ct5_&Wx(^*^53X
z8`a|LZFTQ-&TS__s^zUq=$*k=v9B-o42XTRiKi<3y)PT(9|nO)KpN#C$xLEK$0sDD
zx{)>ptCBlsFOF+vGm6lvUJj!<>wjZ%_;tC$cQtu{UD`F&xetOSdav`v$K>6xg9H>?
z3tIly4c%X+MkW;EnUWmFG{Pw!@*aFJl`ebpd{u~*gJ-wpQBGN(<mYJvO(vQdt%dan
z#3N^{L}QR@+6&-27Z~aO&M-D~_l);!Mj-y(DsJ)mMMj%%&V78%aM#v6pH3{xtF7vJ
zhV3G~Q7xhP?aApZA9mIw5$0B2cEt<&ooIt9-#QpI|NWr06X&CR&BVjU2cV5hWGc`1
z>g%nC20F^`QK^CIlA#iL91Q-B56u}1qsp-AI$-lLFRm4Bi+Id<8cqsG4XcSZvt!ZC
z1h|-9#D{0uZTCtIKx7b!_QjzjKNI$RlLX0ZLH?GLP{zD9D@hni-$-XIN}K&oOq%}#
z9VF}!5FDznk8ltG&>85iHjdWJV5}tP?{n);B8oR?*%bdEPOntm*tnVzLe~0_kd4l^
zm|D;CBzxxV5A=-V(bDvjqMAqH@7r3FIPIj#`*75>pTOz`TAA%vYhf;zr{m4*`A_R8
zlvXfhf?%2z#5g!OMvAQNGhSC0Q3(mA44v{3$koOH;TK=}UvlT$VY9lg)tlobb5Axp
zZ1!`=5d*ub*xoeCT7M<JworX1+|=PVJVTX+h$Kx1LwK||eQJ36cQL~FtnEYdoxzb6
zYf%>3%bJz&lYyjVSe*a*lk`WbQuadyBoD0=b`a`U4cMPOD@<V$q>f{swO5L+cW(hc
zVEPSbGe|cOliW@eLq{wa2Dv!mHq?tl-FU$%-X5rpo;vC6yG&Zv9uo@`*1gFv%m5PC
zyoq?_JVfE)iFo^sKB6OfCF0xd&gmp5b?Eui!xGaOC<xU|f=&Xpm!}&ti_)PgEtCm;
zK{J*%{mH)+G5snMK|xiOTv`VarlMYbS{72=4bR^EOZs9wMB+NB6b=gyYqcmHs*R{C
z43_=4^@ef0u7sOI$7$9f=Z?2SzvoEJePEuG)+jMTHayI`zgU}_@l{V5G#m3(rxfC~
zFURXyx$@@OJeexluS=4MXNE=r9ERd)_JQmLl<vi3yi;hwYo^QkDhY&rwv&eO33H}X
zVvc2uCCWx>x-QwKL~nDywC9#?yy2_v8s!46QFM^>6D<0hZa}Q)#?S=Q`r0qH`x>U3
z?Iwp4sngTBhm+{qNA_d2Zn9Z+Ic<&xWqUT#FMZhhdG>p5iRS8Bs_=sD{sb1&D2L9$
zMPxSEpwsNeANxNKVJsbs^tmoT<1x@oTDEYWseYV}Dl5{%aKld~9eC~on$+#?pwIe=
z=?r0lEFk~vC9vL8;=o@GB?g$33Wo`#F+H$n&TsBuXGIGGw#&bDP1x6AeeaQuSvm?L
zYw0QlXJYzyoorXt)o{#pos2ouM71!YqZ*7vF<zRHGvRI`E_;(`U5ag2P1_=e0<m}7
z7(<z25A8^X%JkdguyNvf);)gBg^4tZ#oUQ<MGC=V#6>?aLt~<#!+OcP{@8f7U*k$$
zs~luAUMvtrBZi=g0R*Li42?(lB&rzJQ1q?Z{(=#(5s_2Bvd_Egw;{{NTcXFYgCxkp
zvoL=&$}~~bYU;P<w4qKe^rj)6?BkEowf26b!|+);vbhJc>xs?MK0bf_?#xlJq*7Mr
z!B0O*OtXW*+7Dnp<@d&xmdm955r~9pc2ZsEs1v<*nVG4o#Ht8S!$!$0fFv-EL!tXh
zvXk&FgC{`D9H=JVf~=w@7<}j%0g&2>-$qQnHK}iILTFzsO!P_lK-9wF&4<9S=v<{W
zHm+@6hr{^0I(<Iyk5VC`H)XrEZ0IibPU12oSY{QsV9Gn0&f<;*H>K1h(oC8o+ZSCP
ztPP9ATkc9_jk^XM@skoE+iz#uk=CygNvuc)Izgptt9h0}Ll{km<;ieklS48A5D!0T
z0x0|^h#HRb>x$Q)u8vuo#SD>SF(84-7kLe!aTH4`?c3W(0WI)JP=D&nw0m5?I@3Wc
zJ$jjBXN>_GYr;HD9G=xVZqe4wm+7$l4ZBp-P*pW*?&XAMkoifUfafO$J4lODV&4Vd
z2VT7tbD%c7&&7UQA1|43jR<X*4dfYJ>%9_3>p+6*lO7T)SsCRR0@UU!jp<(GPIN<*
z>!o}p5?meL+bib^R-=t<pBn@WnU>?$lp$^Lv_zFC0KDc?f^$n41Eg_-p5CL$p7vJn
z0p$P%ZRc3wi)NmA73)WB1qB6))Vk-5ATIem*OEW;j(Uhx7NnL3u>OJ|#R4YlbzDC$
z0R|tKa3ZVh0^l+}W3}C|-*>MdIDO1~I7em=M9R7lB;W)EA)#KR<wdat5c-Gcy%v?&
zWne50%Pg(ID)n@BU{n|<ZVJ@LQ5!*{zwaw7xJ%XicGgksmQ*8%<ifLIT=MgtXO_b>
zg8-5&v4_H-*ThG@+>37xlr^*W`U52%|GHs+9)B}aW0RrPMD~rm)MApE6DkUTIV~B@
z;(#Nh`#2L5`COQPg>8_B{GeSe`QBO*>h2u?-2Y~#CXPzZ+FEzTJUv9o(8L^7dN<3S
z=oj4r^pOaS=i*=(I&vDNuY6{}YueByWB@S;W7PoAA*0{&cXx5Qk9$YjKqUsAD^ft>
ziXY?*>$BX<5JgSCwWf`_`|y9u|B0WQRnf1j|4K;fcN=$_&Vt*b2lSZf0P`uf_Y=Dm
zNRt8`&7JEbQsoMV#|;Af)pJ}R!<607pv_RTfV97(Otzjb4R*H)nfb+w-lF}Hybf8|
zuA!7EShEGPz3dnF6I+D{`sCpW5ngipT3JwA+^Xh0CiMZidkHHmt1Lsy6qnx#ckcVP
zjE*Hk^{y-l%(M3npEBjpVq#)CW@_z-nJDR04!T=GU~4##CNM@1Uken}+_(cC5q>Xu
zopOVqn7Ftx^Z2&V0YjLx=!no_Cn2yyah2xdqEn*xgHVHCrL2C1kc;8Z?|wPe?{%bz
z2kOGL8s7j@ukYH1-}clE3y!h)5f}!?WDyYf5hR2Kl>bv*p-A?26|k7CQ&BC_q}=`*
ztEz9$j*k9Hq6al3@G2b6+v>F{doTcvU{Nj6wXEaVn*7qP;E#hXdb~!=X7TYpF&Fl|
zOkWJVfAt#p3-B|e<^@!@1x=K`_60RD(V}u78{0qM?tG~<R_3~_lemxOb*NUTS!n+9
z&O;K52b;fs{c<%_QC9vqy_^42aQw&wRw-R&J}x^nT&6R6s|_7&M=|ojPOoWhGL_x$
z9wzd?8(<D<GiuK#_Wpw|LT<;;rVB@E8>U5<XVxvaFZ5+D7VhvN0M0CePZq{NjUq^a
zmwR5gYLvb4JGr$UPRuR5LN%DB*X)_$l^N)U9~OSRQ>!ojy!*g2wYAc3{dT(f=koIM
z9>mAJ&(m=V#^1xMMPED*%Lf{`1mqXr!=9?oVU8E4KSzC^;_dk)fzPW68ymaBIMoAQ
z45}p;TmAMI^((;FR>k*5^+C$mW5hP`v=vXU!(m*<xGf2qdKE4Al7I%1+b>yuFZY3k
zQ&^hf)hr_|Z4{`@eq0~)Qlpao_zGnr?CGr_cTfU-&sg{LGHgWr7}jG8jKJ?Yx?}_v
zs?&fspu`YH`I7*8Th&K30Dmk)V{-tw?1X|I0A&OVyR*EPFgv=tUpyPm<b9>Gr^zov
zPx&Xp>-<L&zR6p=S;T-#^QRJfpv<yM1r1AjF_-M>x}k_pp$=k5<U+nr*<lY%!tl}`
zJ46pTXqu%3j!I5`?h=QJ+oUK+u=d{|$r>*bg4?;&8Li(TfW?Rj&8?aw+E~r58jNd0
z1BH|y=if`L29N{HlW^pq`uL-PW+5~0ft}kPrw0=5ej^{4p}d&?oEFXo|9FJet%4Mc
z$;nA09<*8VF=FIlE&5zmZ~_NVp<;q8*IHIuKF(c_9O(qIJH+-FQkL!$)3AJ9h$oHU
zql_`|Sn_cG3QXe(ZVMcka56PD%{RI0K$QSM7{#q)R|l>?hYx)`mF<(`Me9aUt6|pP
zHTSc{JV3M9f6fN<&p<!#wzMxuzc&;X1x=FbWRtltQyFl*5v6^h-a?pM>_LS8WjZN`
z22Z{sE+~E~BEgVDbi6brBiu12&V+m~)4p<9%%Q-K^&cd}jCaoIcqX^tZiz*LzZyYl
zhko{HAZfkKFEVf~Ii@-&Jk*k$f$CJjaVX*SkpeFRhy-`nN6_Hbp_l5FB|DGx9M8$z
zaT7Ic5e3w!-;kHS`i8`Lx|-Q**^H)1K==ai0HBoOFW_?FeSPrCB?rd9E45V5)BKZr
zB_QCMG)`?zR}O}N0aTDQlFoZ1$D^R@b#eHXCM*vA<qIxgOL*o*STNvHp+f>wkeZ=6
zT+o~p$6uvs&Z~J+rjWZR&1w_!c*D93P)BU7-AWfoVL#QWvoEu<0}XnRVatjEqL2BN
zYYUf!34@Q-Y+XX}3d|mF7uV;`V|RHl7ECXY1k)O`1KgB58y9PN&@jqafdak81XOH3
zBlNz!kq8GS4J|FRRC%}!ZQPrGRuh#5aM%#H)JNcDZ&4%wvmy%$3Z55iqa|}YZkkm6
z;Bw7Scw#OLN*Tc7u^MP*GQd~%Hx_v3<|CplfA~u8_<)fb@}dzW^wCr@Zv=mnMmK~&
zGjOcx)~E)_quk+j!A-z>VKy6~c?xDddEUyyyjGe4h)R%%7P@pTJQ*a|pK`CO%knp^
zcR7CrlD{{+)wz?4cnhWDv&I+U2yt695Tnb7^IbZ3c6UdE%7QkF5i$gbz~24g0&k<c
z^8{)f1wS)ku7a6Kt63Jn4M#;slh@YPGA)y1BERE*1#0t(8X8Z5>8WY}B~}4>G-9|&
zKo8N7P#QTcNc8{_ilg2q;ZX<44Tie#Cgc8;CxbB7C#1FjLv#Q_OSaR_+`>)4{jWdB
z-Z!n$!mgoG83rI$)3*hx^G8y>MSd=dTr8!43O#WF+7x%ZOj5WI|M%Q{bptlTxkSzc
z6aFg-Z|`lcKi}^$eiXRElIIce6ifU3`93ZhMXA*+*Ga$EW%O4V4ak~8-~Rz3utv2f
zCSJdSA99NOo<ss*RuDN(ye<bY3%iP<Mg`P0wIH~61;WjDg$8$7-9Uk03FNt>KuS`l
z2^c`^s`mvqkZl)AcD^Kf3Q;f+ka=YJscnAvqd&UvJAr0sfht%;^@LZi7C3pzYHHn4
zlv3y8&JoqlljVlCp!g{%ArX{hKP18IdSDV!{qgrr9XgQ;@Uu-tv*0rGLBPNVmCsuG
zylvr9kf;!^cicis!=VLCYEe=DgPnQ3;@aOZyH0-;Ympmm^`!n<mFl@8Fm>Ha!SqO8
zs0A=L@a$Z%*do3Tian-};MogY#SCKfx%Gg9pUrxXXkPFs`i+p@K!$P#QTe731NE*C
zV9UsWGG?~SCpG~EG~Rz_LYx%w`~nL#KI29fugSfc$Siono8ZDm@QDMwvq3;Fg`ZI$
z1WffWMqx9y-Sp+acOaPh(Rz~q0al{3sCteTTutq1&b4*ZtHA;_Xc&=`Uz;-I$giN{
zNaZwR6F}to_b1TzVA6s>SrY0$0M#YzvRl<}v7H<Y%kj=>CSL0^APWHfE;1HJgRcYw
z0cl*<tq2rh+73Q^WV6&nU=h5{hdEJWlX<>G%@^6#C3!L!;Yrc{*sCEmQBLdTb?C|X
z<-2iTlRtv%8FCm%BXN0Mx<kB!EbI9u0i}l?V85NbIRVaG1~YtOKUviUeN7|TVZ2$!
z|J4m7{xmR8W)BQ9L*|bj$%E9hb|uAa37TbxNiLd|gZZ+E^~DP%=sNGzsuZJ}a-XIs
zs0?)1_))2Wi97({iNAiGj*W*0VNIY>pZ@Dq=#U=1{F`PvFz7`Mm8Uk?K)?tcPHzc*
zr#EKf#mQN@xu4p>a7iiP(6d1S+u7gmfcP6J=1{n`_!i(_Ojer58yFjR1N_o+v2?sS
zIV^9xeX|NOWXJ6p)07RHt*Oe$v!t8z2qPb;vea6e{E}O1P!8bE5TIp9NJ*K~-Rnn!
z8fo~s$}7#l%)<^qk1zn3!ic|UEKbZ5T9*KMDWJeW&^*bmk26Cr?!zhaK|BM_hC1JE
zC&-XIcK_qklf<cn@&Hh5;BWFAb@gG|X=a`$geJG9tK-4kxbD)|KeFUfUp~M49J0^b
zGdaq`J|!rq#0P*uAw#(W#b`eAkNyId3dD5T16;H260Zw$0!~|lJQralT_=BtGDBqB
z@nn!B;BpRlAjT^&%ughqhnD<4R=O7@0`M*@{QOQtLp8#ugMVe~?#01qMxv3>aKRUT
zTkro^+1b?<1?3lPp1kSIQtbkzR%oi6L2rC9B0LB4-tQ}Y^$b}vAQdeamNZ4h>v?LB
zxNVk|=FQRZwnsdk|9tRTLK_TygoZ1chH@;1zF3NqVqm)BMGv`Lh5Rx<TAsjIu!I^I
z4FwL0jH~g+!`$`szX0zAUJ||l<g8aHf#Ad-I2h3tn7oy|h?Ub92GH$Zyp>ySDhaRa
zNB_XKq5b<n8Tj#0SLfwsMFgvjl2}X?@s&l}Ik0L#wARZy1egXkL{ix_kgzYQ()@!O
z8hBoKCbyMNgL#?Cek0E5({?3b_T{;gy6<bUOX>k&z*1bk{>?r!lfrQjSeA+tAy;o7
zEmVW1GWD=(4zdgj6m3-aKOi;}tqY6uce^$V*B%I%HY^c-r@zzS5E9JGdP#>-)!8qC
z{C*sWkj313cpp9*SS~sGI_@m)T=V7ED2tA7<=dZvz-~&7kc|=wjvInd%zMi*1M3$R
z{CwW1B<Y9yNOiaK`eYvP{NbMjj4y(nzAe`DvOjTj8gE=xh-_LgjWBu)D#EyaK_$2I
z1lI!L%IDC?RqfPeD|I8I9O)zu1r&7Hl4lF+|9LQiPYmXOvjgm0jSoy|WJAXQgAv1z
zRv#AcH0*~Hf&FxL=I;2r^6q)|<yxUpH47h~-kitrY+hU7#qqqJEcX^mC}wYtBpj^`
zqMZXJiwAU(kBGjRxu};q7p;=jl_UD<%fKc?15SaQQGW`tD)K56nUZcJAKXz+28oU~
zdYG2r3J=$@02q(p`~K>bE(dqRdt|GXrJ!18XlTe_Z>jUQqyE|&N5{k@yy%w3ip<h6
z2Gvd=QW8WGV--1J+qt@!ze+H7J;WD10XYFWsNP+>U7Kzg^?K=DAGA-u1o&4N>I}>K
z4DDq>7Gr;P=1%7O<Y2x&rkk)^Cx^*;uEAAn)qZnAAxAdZ45i3I)rSI(a(t-JpgM@{
zj7@ujt|>4}ucFs{KfVGMAV+hIDUgdTXSnfr&fLn>>Edv_yTtRbuq|p2QcnbAO>zEP
ze>RdtSJ)f}Yh1YQ4Ao-%dW>`~yq($<oS)5w!D{q=`i0;vH4>1;K18vS_KSkx0s?X(
z1r%36Q(YVW{tB^OiWFl@co~Rh-&hjta6cnFYz<_37!&l~M*xy*Th#8&mq~!E0(G)|
zlslkQg<A?bJjk+32QW2~KfcHy>GP(uI7Ntk)H>)DuqTeyvHvRig>34&mI-E4QV$gC
zaC3q|t%jg9Sj5;9Kq;O2a@Ib3R3BetHjqj5ec8$&0Xz+M_yOGgl)Nz^vLeVuEqD&a
zT70KZb5x6U8|&uAQn=(tUwm)uqs>8*K)ya4CMZ5X9&k$o8XBXk@Qt?(qDr%&%y98B
zCwiPr_+$>^q@Q_UE8PSC8G=(0USak=kd2=>s0IiF9+%QEGM3;?Q$NK~l9)lO;l*6k
zMFbb-LN=fW8Fq@Ox+2OYCfEST`|qpIsDF=n0Iu(0l?FGUJ8slIZ`CG6gS$Zx7_%_f
zSZU>uAP0J(tv(=ICviU<RXbBd1AU}GHD7_axxCL~Geb*$1D@!*k2SZQ`cV_mcql=9
z6<$#%Rw9~q4NSfgB9Gvg*{#UF$caGtDR?fnkm9x-nR>Bltf-=52#Y_@MWl!H2SXc)
z>v)j!gN}W8mK|kFJ%snFt>2g>XkMy*R{tsfDIwwMVta%W)NBUry`t0tpeV)y0$mWp
z>;URQ;1w!_RewJq14-!I^WW^vyQxSO_|U6=MO!5jUlDZFsI@iZm9ssw>r;~Qw&YXl
zZXT`N(A{ZmZ4I}jl1-w4E!@6l=k8z(uogo+7*k;qcB>>On5fhnsy|caC7r-c8jR#A
zFs(d!0=E+s5#D`1_6!Gr{Ul5~TEoX>{N0V`U5gSmuwVt;iSr*-3RO9o*G`{0+!KZG
zDFCuyKomKMFXdl3z0|BQi6nAaip*#yl>}@O0ENr+2hjjI92+tDUTrm!Lw^ENc4>d?
zH`1Sr4|+N~Bj3G43P1t0OdHT>d960$xQK@ckV{=di~7t3NYs#UNEfIUQXZ`(Nvy~Q
z9z#89x~VNQ8DO|8#}EL#Dxey%0JRT7EBfpE6{>1YS6d&8=@Xh50>E+7!o~KXXTQ4n
zd{62HLjDS&<gIJ9phZl6v^LYhuw5H{L9mh!8VboAHnmjjK#OZFZkKKc@XI}~w2s`8
z-~ht=7;Tl29TsQ~N=bVl=jPn}4ZY$mV9EV{v@yZYEH|G57?38R5fCkVcq_{WzVLzP
zh&p8XcI5RYL}<xEPv*eXl<!&>n0Dr1-IQR~ZTJDQna#oioOx@FYGUy&Unw^jWo{_w
z&-ux|$FQTD5MWoCX;fJxtPV!lf&swY)?Q~?UqFIR?l|*q1vr~PJWb>aDTHe?5-ak7
z)sS>ly;^2qvr6L(uo?&>9ckUXKm=+70RDT!sh1-M_TByc#|qsWiBkamyfDcnxu9`z
zafynId;%e`8Rx|?Ph}rA_=|saLbkVBdSJDdB82$t5c&Kh?8)Jb;vCYfV-JJJ*-@pQ
zEp&<ykY18Q*2D!c9kWYI<z;yfl~XHU;`cU!Qnqjy7O0#UKF1ck2YvDh^+F1H?TY-9
z_C>TqCUNHs!o+b@blkX4pEf#{NGzaXVQ|!Ejk?NsAij?JmCs=_A9`0XvZQ83oGW0@
zZDHB@g`|TEK>4$`=<}MhvV=i%!eYlH$dy7}lW+ratx@2g-=)9uiVbnb^krl0K-uu*
zrodXt^*;0Xqpj&r=DJ(Q9M{C<1&jekdC0%G@3!K7Q=s)r>`8bb2Fk9D*j3)w(Gtk7
zk8H@SNIKd8@&zczL8D?ijpx>3At52ehBe0%4m?ZOC)!<(9~~1<$37AY%=SQV=dAj8
zmU0RB#urZacHfYX${de3UsfjBc0GlrPBXGavR$VnlF;nehFTRe+!&UfJ4A+{1O?aL
zn3}qZ$}&wBn8gaU-a>g$Qg!6EFhXkJk)lD22JuCEidY--e%^Y>LkemdDXW7ad*B;X
zF8{XkC2}V~QH!nxnI#nbBlvJUdfScy2qeF>iCbBraY;r<`+|Gm!Wpp_L&L+@gMWa$
zK`oUnk+Jb03bH_vpz0IsCi7XXq7sQgORS`#+pPW1&mYU)w;nui<bbjh>eZar=GhzU
z6QBhtd#fD#ne`ZW49fJ0))l$dsSsU9@877>M1#Pv>EUx{6(#fJVuu4wZm+*T9tV3~
z<7Cu_h;TC4-G^w_X2AmAKV1x&6wYXkLJZ@<1D>0V35BnBTkS-xT`s{68Ns2#9k>PH
zPkV~AT^r@bFskgCLLCQQtz{2P7l&&U|0^_nCbH}tQDHT#b(>TV(T>?;9y(J~vh3_P
zU{G%Q&zaXPmZ)?n*#9UhX@0<PS6~oL-gq$GC#7!3Rwsb(XN}U7#B3<}Ju#apc61;u
z6>D)ZxNOFxv8~TMD&gr+=U@BHnsN0(6Mt16ci_nly5s1nqE)elRIgV8prf>RS{xdR
z^zOB?`UpQ#2WIaaJUaf7EQf$SGl^V&9(L#4lX9zzx&EpxvXk4rFGNk;LeT{&*wqa7
zaU)sHMc6E`CoA1bj71uz3VpgD9yUacgSsZ7;^Xm3GHx1Hz=k73IWmMi?CTsE)Cd4^
z7(=Ji9_>9Vt`P*yfg|hdQj+%<zZpeZH{<BPnRmY>tb{IqOGGxjW6FVS`ilrHZDQBp
z!9D<5x&Zq#>F0|l)*j}mIgy)cK2n6s7aTPKZ%RV=02{cPAv_vD`wP&>6Og|u{j6Rl
zczV1u|Hks({hd4dw*&Kxg+D7c=Bn;JGovWU(3C7V60d$>I+Q6?XKy|~7Dznk{0B8m
zC^EJAcsM^=d`H(U-myiqns*jtPz?cZ#kP|&{^K0kk@2;CgZu<9i2EDHsVlAl73lyO
z6g69h?3q%5NfF&lEH8!iqttZiL!9Ee$QHk}{56PIl@M4?$<r9RuO;mCgM%qc%8k<^
zRhsj&H8p3RlUS#C#CBS~F2U*A;1ARflg8H1d-86xzqR}O=O;60heAoQCA{`f2#6)1
z|K(>TNjmS%eo|n`KlJ1IA@pscNa=tlaS0|G=vCAmU;X8-p{2m4`7^W7J;(TQ{8VO*
zL?x;#^-8TNf~r8YMy{@kpR>y&Pjs?9G(8sIGhjYtz+Ic~M}24NEOXsI0?z(_2b@86
z5<-shrgYsC#k!b=gVDvkjPbcmov~LIbTN|p8lpTc>Vr>G3ER*v&TS@TIgJe-?hn^z
z?mr81wXk4*qi(;$Fyxf_+fAw^vnb}q3qxaUMy@o-$_^E{t`8Lgk_1($^X?lcg}MxC
z=%6Ko1hsBhghjt)?3ZNi-VYhuHZ8)XW$Sytj6wsIFJ~o+F`a&0HO)}AH&)4RpYv!*
z7H%+J4E)6+409~l70w=eyEs5E>mU~C?h$ySJERL*NPVf~?u97maC;1FT-p;P*y<iA
z14PR4T_}UA2_isCLGy<sokOJ!gR7HDmz)*BgyL%PC}n~<y#CLf(Jopc%SS)Xx-l=3
zHdt7`=D_5RCUZ3z>JNy9OEbPPJHa-j>k9APzR4kadozM&h@ah7nS(dGHi5QU{AgUq
zDS1ujEySrEvpihnH^5Qp^4l@)Bu?G=U;sFunill=QBuFHqUPzRtTx9K^t~wD?ym%?
z>0L~)h*nt73#33pe_739$kG4fivEUxq~YZ{qvpM9w`9WRQ)M~brQ>v=AsYG@)JAZF
zWLLMC+fh|drv0WBjRH%nMf&xgBbi*X*9%`dj_?!Al9TWKP4jJ{22r>UvtgHw?Otbq
z=(gQ|-h~giia*B9gJw6zt_S(<y<@92mra{tVi&W}Y%DL$CZ&|;NNTP!Y<Oy&5%aS&
z)dW%;vV>E;7P_LMVzme5guQk;-<jTei;E^VemAEbAo*vl5=p_d7b=8Z2!TQeO%16o
zY~_JIcYo3Jy7gMVmdoXcI>}EF{r9c)GlBXxKi*l|jz<wIZcQx<IsKgYNa^1m5SvK;
zPnSFa*7^<~w*@&eki5mnE1s*jG_t~831D=L?+mSG@5o5bW{Qb9rI0J?i<NrW5v613
zugIq0+s*c4qFi6h!#9MUAoqIH0CyUs&e0+q@Atx;8yK+`!>=*vq~$7F#@<lzQm@a8
zQL0=jIr=PaEcUZ|>dGc-#^(tYz5JPm#x^|G@BcYge*?f{t`2bM|K;!`Ncr?A%%cO{
zY;{fPy#CJjSABXsYcw2DKK$oH&DROEB|iuM+utd({gVY3CG(h|O2aiQehl0ODD9e1
z-nb+Mq&oN4Zbx$wDbtko6_TENm!b+gsLfKbWfv<uxQ3tV-zksb<FP4_hqlFb>^CQ}
z6>;3G0XZIcu$wM6;E=@uMWLNepR9Ne(@LWvQ`o3yl2mV#!HIA0@UXd={=<G~HubdR
z{bijfOMIg$OT5X&3bh(Vn;Wa|&0he)35SRBd^ZcjK_-*J$(SHaIX9}VjTW^Mk$GnJ
z$7)QacG>7{pWh_qAxuNQ)M+gkW`6CM!R9xB0Uqz!&-_&XWqK*nxJ^tN0%7ru=@qUK
z=Vq6xwQg&&OoC#_ntSN_-P!wWor`)q#kt0{ud@bguqY3=a1MuTZ`~M9pCzcZ*Zud%
zO@Al2_eLkU)S<9!cDe7g6*_tm^OH1o<##vu?ynMu4Z6&igZt^_s>Op)5=w($=4_U@
zlRERducca_{!_1fs6P{DB>&O%SAa2Sv9WHq*l}@385c5(L~M_y2@Na-L@olJ)a>`=
zka4agqnDSJHeGVt30L8Z68(~VzaYXd0$2S%=m6mTH`o6f+#uWFgeK@`-lSu0QMmgR
zkJENkOe?En`3VM_(Z;=J%VO5nF|}IjS{A{fT6OP*!nmMv8(hirp>DoI5B_^MKZjur
zSn}9823gE0Ug2GS?}80ufai%KwNS{vX&I>by-2@T9m`qXUU{bgMm|E5-iG$C=g(&Z
z3y4hfa^xC#W0=HvxA6~Tqtt_q9Qz&rNs8s=oKcM|=^^U*Vz-X%XuzlJug|9@0P%!o
zm`I->pj-E~T-y!x0|5yQWa`P_!?NJV2~_CnScJTK$FpHpF6R0^n2fJ8EohDOq}U11
z4ymW5LMe#|mp(Pvo>}g@$78N4Hp<S_$BamIfC}`rGs1$>rh=u4G&d^dfP6PhhIs^E
zVY!@LnNUk|rqMp&-1QsV(|e~WDMdo~osF%}r;^ULMNj(u-*xbA2v;Mk^wo(#Q_A2^
z<hO-%mciQW29&W#^2cMWI;Ln<kLt;m);DN+aydowoXA*Z8vZGL>0|rD*>2IRy7O_I
zK?uwN@E}sdG{|oMoP0W3{1OZ$gTs;-sPmZlKp85|f<?c@$}7g5tk9rf4{m(DT+E!n
zWb8{fr?KACqVffmr;$sJ;gVF!F_xgzGQ&U3(jU{LJ^a+4REt^mCd-ZyNDj2b=Dmc%
z&GX~124){0sGSbc9QosoFL%n#^+ypGOV~?o+;wZB<TPZS4SZI{llyXWhKIcP{cG%@
zukrs;lORg49cAuMiEosb0+ChJz_Q>mV@A1A#LV8LW37Wim2zzy0gDC=8jSLTKE4wJ
z3lF7H2`e22!&9bBY<x;>`I>(S*&A37WPWh}@wF&FBh%@>XBaQ-K8m8{ylSL#aq(!n
zU|X@FkT-M|n5p8>veK=Qp}oHtp(EKHy8OaFGLV>KQ~5eP0yI>}7X97JV!3%5NWw6S
ze%vJsrM#{8yZlh7=ebtopIGaA(u)x&=#^3lK6?7DChq@L+rQwX|4%2kNtAaR%|y9M
z%N9Y|8?}63eso1-q76TgdLpY5w58q);~?fV?DJ4{;2uay`a3El@z30kfbCOgfA`{M
z8AGU>EL62PIDP9Z9lx^e*rg;Y?M}R3;HU+W{jq$Vecqx@mDz2$Sw1~+NTFG(;0C+l
zdw_;aD13ttfV>t@A!-c4F4~@U8TR;6JTP3(MJw)F5HVZR7Dsjewk*I?dNb|lI2U+J
z7u@Ly*KQ6FZ@;~c-@*R?Q)0Otxi%*Bk)QtE`o5(YZ2bO_ba3&A(l5F0<PDaB`?*20
z^-3e81^;Y2RPpt8q%(tCQg3!N?D)XEfcN0C-)J!eDQ=91Nqmi5YA>f>+sDc5g`&%`
z9NqcPp>PM^9QaU7^2X(~2!Cx<7FxtPckt^rB+H2sk1;`N){C*+ELEs(^|wOQRF7HJ
zeERrWr!YtWO#VJRZgO3~d`gvOb=BJ1C(3hlXr-SoI-50q!m_KD49X<8&MM+NeYv_;
zb+@v$0!BPp@uwP--TO_tKUl3rjZy8Mva9}R%aA-VsPC5gj`}tTE=C{;&`G<t`_y0Y
z#?)b$1oKCB<0}BH|JwkEEtY<}zrMoy86NSBOmWhP(1V#=p~k&xJeAHzQumh9`}Yl$
z1RR!5p7D{;WZuv83vO%VI4z^=d}i&8{saHV!0z`RA0t=RTJ7CaFdwwDR+n<N)a%^V
zR*uuES(e#m{{C95#_?!YU5={iHckB5@0G55dbq(h3HB~+>UA~;P08ekafIBNtEy=P
z1d&?*3PI4cOoyxW>QaRA8^=b9L5NuG)Z+C;ilXGZ`kfELYokmuzjb-k+m6khMQ59(
zxNFz$G%g2A%r19`l^YyxOMdYq+^1dcxm72u$=%E0<*p&HH05D?G*PU8PNG`pnLNCt
zXZ$cGGr&l*nyB6WhsduF9^74ad@$0hojhIJp2aXiexig$d%*B{QdV1|h~hA39ys`h
z6$KR~hyyVPAFl7HtUe>BhW;?#E_ikZjIK1Hc{ik(+h%QH;mo`vP0(C8-bbw7kFQ`@
zL$b+G6bJjE|AS$@=+CyFFXgcMSo+?Qt+Cta!oWxA$4bZU9#+{uxCP^l=<3ay^V(1?
zBeX`m_ttBDvxM%B+0f1X+^k{#A%ye~*rXjo@o>r$%A1V_w^{9yTkK-?9-MBtF=u<N
z*mK&7C$oPK|7DiI<Q8I|T&d|gU#ZG9U#8jTVN<xtvaQ8D@tnxr>(3ld_m^h|hK{oq
z+VL8B?IJ9b%}#Cv`dSb6dhX^jEjlT=N;NY$geSJ*xGg2Jmm6-*k4v>#&Wo>1H%DH%
zywD1^AfZ^7ut_f)p_nYUt+q=Da*K~Ks17*2Q8@vqs7=EgL;^P&V7dX0=q6(QCPRtr
zscl$hfMW%_z~!G^2A7jUvZq%Jc{wDhR~hoM&bHCyvoWt7MDN$fzh}rFFeDr_Xv1H*
z$hDlqG5gHnC7AsBwVFgF(OEy8%PWPH&t3T}zmx)Flt;TRQkOf4A8*-Wd!4S<IX?)$
zgVvy4)@}MBk43d~HJtE2=Di4-Tjp@y0To4n>j@0vuQW%hpPcyiWOAsu$Zk4V-`@cX
zopvn_hnv>m2=6vCU*X7kMVX=7*dP0WSJ81vykn-$rQ33RrB=26abI5czr{R}E#}S0
z&6=FD-DuD$cQ#L6@r#v>@Y4E7t#RVu(roSQJW)OsO|{AMOj2*llq1gg`;@@98&8#n
znYSN%KhX#be21^+4~7pfgRk&wl|ADM^QL>UrmqJPVx>x8R9?)EWzOc7Wt(*Q=1UQJ
zGe(qlL{9joa~f)Nx#2)fKfb|dbv4fEEFP+BAa|{b_B|cH-RnM8sr{oVMkwBFqLG>?
zmH=<P(xz+plR-0yo3Er5Lmo3P&CD8>i_UUzQMv<|MMhEX*>%k^0RsksZA?3&bG^2W
zxu`WO6@yf@K~{gre%$-1^g~Oa@je~FIJ-~^hq<2qJDq2Ggx!?577Vd2^Ko5g^Kl&a
zu~l7p*UQnnNz=R8`nXC%c+OosDS~FXGcsHwY7LE-(ruV$o~x^89O9_3StXrxnZ$c4
zQm$iUxKB-Ji-5V11?+jy%oPOWcfzE>nMNN*gz&B%jyF4Mg~LV2G&i~H^A6$aBZD8)
z3xkv{hXsS3M?Rt$T~gFXAB@8+*}hogKfQWs>`gRMBGgz>;-y6AV(37EX*}&XJkT<X
ze#?*2`ZL>5+&BRdS59@LhvhfAYV5Jw0~LGDyMJ{)hKUb97Z;X)dt>oUm=MRuGjZdE
zM6VZtfDC&g-%mPN)+dz~X<_4~tgZ1ZzA=uzoj1}DMpcC~)@od;mV**(DoPY6qIN&}
zk-t+pU)0?nh6{S4f25?sncnGc51W?w7>ZZhC$N+<IR93vdKH)0Bo$EgK+d-un@*=}
zig=^UIDo~beO_EDjQ8mnRrJklkcE4|f4C3IuwcREb1s|K*nK%bO<q|@wPHoXivH-<
zju!Re&XsEMWxu0~m7x!I%(%--ntjK%s8Fvf=QMjW;}8qend+UYbVOQ*N&hbUPu1_Y
zQ<&NVWnRY<k)!y{qP{+kE6v>>I_cP!WyEA<$j+@gYj__}bz^okr2)hY8H~JP6=87u
z9J%Q;i!xWRQ=R&9*MG*2%njmHh!*rOGZ5t4YC1znJ2P}I`yxo9oy54(SRsQ#fD)YA
z9J}>g+TLtlH5^}g<uI*Ct0r4ob*EsudqlH}=|`2ee$`KrpN`%Gr(?@wt-b>b@v=$*
zaoaJ4R1Wc$;}L=G{>S1B)seGFC_xWI^`^c{a1eIm{KNW85Yl-;3!pGuLYlH^$xH!`
zR|PK(U+H}Ii;E|6>pPR%dS-Z4-+ZFszFe9|!1^`Is?ufa6E{)+!*#W4bN|DIPQ%+{
z`RA`pa-?V2f4r`FyHos{QrCQXOaEh;Tier2F0F_Rl3ap%pM#yDzVo~%#=e$>19=3$
z-0dtFbD45{hhJi@OwrtI+5gYw545uGykzJ^K?{5Qy7O-n@zU3q4Atlx={C}K9zqia
z7S(HU#-Uq0$L`f0;#&HXZC_p-g|!68@1V_&k|#EpBG*-PZ?zvrk`NT%ZI*gF6e!C)
ziu>bD-&9nV)meh6bF?(^5(|;xNOkYT=ufD57k~mV83axEYMigFhvHv;mDCX_IeA}`
zv&Knm&^xFzDuOLexL_zP_OUjLuq?r(#Qj{~z|}Qua`9{!+UDM1o8novOVi}U6Cr&C
zb>=#!<PC4`kJ+)J5iqY`-NX)U!M<UJgsIwGBQt|P%z{Z6U)Fqjy@Zd!WNV`9_FSe>
zwjznArqCdV8+aC*L;Z|t{*!-Z5Q~&TN!|^&5$-*{+97ip2AlA=@Xl|&%l}5o$XOac
zQ*B|aI8`9(S7JxI<o(hO{mw<`7W@2p=c~bm=ncEVQ0Ir0%o)aRgJ+H>EgjXvsG<Zi
zDcW&6e_jo+RJNsjT<0D9fd9$91AS*ZraH8ao<QG%vu<<!f?|F`R=JT0#lf7Kmy0Wm
z^@?TPRX=RF{(Dzy-lE2jdhTFV{r7HbVdRMaNhP&Ne>L5U;3T}RZUPN6VL(KGzk2C#
zajw9d<&`sxFfe1QFQccZ@{F3dQesBS<7hjEA%IZeSu-ESmlUR7`$dMfZFZjsKmVH7
z!;?_(8&*&EkC3@NivD}>PTj$qwoUpdt@WPi+2?|x?7viM!Z7c##dh`2by!vOIP>us
z@f&m2M7$O$mpHbny7!+L2*mAxuk>Ba=-NK<@1q{9ZOx>oH)4MNIknrjjM@9F%q4$R
z{_QFsTi4d(-yMCw{KHUSw|>PvbnF`OvWjZh+tKFAP*yR+=hW3yS#sX1D5D_9g&Z`&
z)z|91y#m2uDRRvedjIMck*hhXc`p{JieiHxhT*^S5*I|H`NqPzvf*0Sr6Zti19y=+
zPb6}1&?%l>pGs13Wc%tc5?*0jyNwDi4|R4IFR4iPQcBKl%ql|vz^ml??&p%5QBP*4
zJHHm!`HIvj6PQ0O4>Q&Zo51Lu?EDp_RvqH0Nv0K2VA$4Nm8fy%BpZ)*!6h#DL+VXt
zS+xIlTjb(inu!E4edm4%nn#vi&Y%X{T7AUuM+3K(|Kuj<L2e@B_CUu!vySdF*Lcb2
z=7jXvSY^lSe4NU3D9f^ru_Bw^&{D(jSsG~wsU`;U$UR!;lHkB!?|!NL-4J0^W86lf
zRWoo9E6G!lXN&EoA}v>~8j6eCb_0yePnZ2pT`ydI_ee8K7*X}_ah8nR8>Jj39lP`m
z^E7kzyY!5e?7*Z1Z%KPD2X;F4CEwdRIo!IKv@aRkdQ1FR*Ir+26~`}&zq1@K<ajDi
zl|(Lu?fYfxtmGrvAKLwanB?D;{)WP@=0!ldz*&e3yS!We61v|L0jUu?&qkj$+^M-L
zKuKx#RsHYPrz#%nqRv<Db5H;L)(M!772AB{%ev5RE^#YTwx`jJ{9`Nk^`D|1fScHb
z`TnTmz_0Z5X}TL~`_LLc;SAx<CmxHyi-WASD!2U)O;&M-r%&ESy~7lfW#he|NNTHn
z^3uK#{pMbE<gRDnCaQ)Mi|dPTeWGqt$v!vl@d)&lQIY@EvX(>5^PzxTe&g4}$4R_x
zP3!M4D|Mg0=`r~-SnFi1Os%we`}*6l!IiDz0+dR^@C#f`?yeSlcSi4fc~}<|mKDx!
z5$e5_bHSfp*xn&kkzVj-653Lu?k|ma{JiPa^Y6`-Id2GF|9}ewHA~)GfL=*`4VwUZ
zFew*OCBxivkHkr=<Fp`pt-8Hzru%cX?KIr2ygrLLC+3@{C+0<lTD$GmjzyihipWPK
z8rD0ux71QN?F{;yF~8Mi>VQ%JrVq-__2ZSHtI7<uCuy&RNO^Ch?kX&I%dE=1*6p;-
ze`XYBerNjjS=bk^WY#tk?YSrymetgFt8!M$X*;|ntq3HgfYC{<nMW*hT#b`q!wP!#
zF1)uz7DYdRduyQur<H@d)o3@m$1veP(*Q=cwREC^>inxJ+w943;@ZN|@%xU8lK1-?
z95+9j6zcH58I5~zJQe5SVDI{DsW_#}+QEt^@U@WHj3r}b0zym2>9)0(!YdOzwL3D~
zn5h(ye8CsxHGqrZx(L7Ax&B!acK{)n-2YRNu4R>#$Inre+SS&Y^vVRapOhb`2oZ1l
z+K2d~l#Y;VNL-77R35s)bJWI&@%rZ&x-`9YYS|f=$OhZk$=|&vyi}5N`1f#e-X_a_
zp5%2^5g;Ym(1-~lxRIi?cdmtUXdF8HLU_^vKA$H-JvlYGZ#QcL++ght#VakSU%p{p
zrk*7jlYH6l<Lx^j8O<WW=<QQTso$|;d(HDLFmDX!1b*qXcoPCIMU-B93<iA1e<R%$
zq`^;*Z;LarW}mJbZRG0Vn)PKrC`Y~jWOv2Qx)Mxd(H%b9h~RSmI_mJue-ovi^!+<-
zbSok$SHb(vl^>v|01-hOQI73?y)C4tNOc`nZ*S?X<5Z4J)a;jKxsKCQ{}U#E8n+Ls
z)A=UDbPxO{aef4!JT&P9X3FU71zxiga=sg(VbCMGiVGLM>_ETPo-&*oKti?z1BM*`
ze7ogUFKU6=$#MOwr&y$<kr`b%c{c)6Olu3ncbRw{pkj+>L3p!7EQ+u6glGlQ!S8OY
z!_D`2^J{}^!&|a*I;d~XI%F&0zeIzco7R;@^Y5eo{<1{`D7Lm)usi(v=Kp*imGlEC
z*y;a%$yffn6%`c|&|Tug-2aRK#;OGPYdOIlF}M;V_(UNW0~!VQ#^*1aU|7#nQx{zL
zRsq4-gKKfc!L_*HK4eI=T~wt;y@@?lpp!?Z%Ch{)je3d~1NB@Qqo=%<XIcT0gM&lD
z#qAxHSx)YMGM+#KJ=g69_&3rZd-@g(4x9pXY3ZH+?hG|pJue#5<C_mjVoiVslr1nK
zh1OK#-=YwaYYct$ua|!FIr!oVpd0(vmp0*w^?!biD*pEV|H$ZCy8NTJQN@*$lZgMn
zBJ>7VN{0XMgKy4Y9eBxt=r2OoFCF#tE$E}2c#rnz|E{0pY%&^SA8rq5X-oA3G{gcX
z$BMY;tDO=ZnvR&+Bd{O)02XqmYO%JdE8m~5f0sTbarp=s`Ofw$yN=eV=_F5nc)~q@
zr`F|0DzxCb<P59=i$~Cs((=5KFp7$d=(n?vtJq%1khkhBSmt_6810;iPJ0|{0CRBO
zErh0>^!+wD4Aui9>`k1J+Ciq_V7}fzO7JZ0D2qGrXK5kce#~aUGQFz1jwm3R@|Dyn
zyRMz&OSD=kcD(qv@AO)ZO=F)YCw<?5<85@T`1aj<xcc#X0d+kPi*SIyWF5{xYfqbu
zk-6%p%6ctkad0WOHRA0@<MnfluA}u@Ty3GOgiJ}gk9LbyY$L$m-%kQ!^a1_<K&AOJ
zZjU^Avs{q8C>WzSaJV&XIhf<9HC;8US>>Qv=w`XIq#LfdsgB}vd3WSKi9uMUZ&7EX
zDEr7n#m_^w@}`{WUfPbo>xD*zGtQ3|+iSnR-(VHE*4#99U=Lg~Tg%}GhxhI(nc>M^
z@}dy7R?V<Ova_qqC*FpPRuauYv;FbP1SBjV>%eetB&@Sgvr^7Su&qC6GF3YtQ3$nP
zA)uj4){oq#VzKII3F3B>70$(8LWaag+6BHMLz{aE@}+?ZU#BXKo~h#YAG|}~a-8la
zw3z#jUe(~BwR=0k7Xj%OLmKH%-)=2t#_@;Wso2J*X4ZNgr$UXUi)vpodcmlTz9D@<
zTkI8$==;=*e63)6K*~#z&k^BURgE;Qv*Hgpw``US4Zouct0yY^KUcZM<7%Y+F_RWS
z@IghR33Q(QV$NKmPyO)AzHvn5Mf-!^?(}z2cV(p$mq?yWUFbY^*<gl0j#LLMeMn_K
z1{XY>rrx{GoKe@JYP9ie4S1)sJ^k*jZAxS^cfuxe3}eLGc!yk`UC+-pzdf>yr(*vg
zO!JguvT49#T&H*4_Wv>WmT^%=-P@>)fP_ecij;te2#5+OEs~OoN{oaeB_%b$ATfl5
zlz@bE2qIlWmr@c#*9_ea(#_d3=yRU;{h#ycd^qnHehkcg?^=89wXSvTwT!(ZCfTsM
zN)k;#n9k_Ffjc6$bP}`M%_ow7*7-8b<>r@d>R!Lx<)GUy&9VU@5&RLCS#_xJ=t&&2
zT|5gbZZoRM1BJv&n}++ebu;l(fJ}~Yy`a@iU%_3wfKO|B?=-}#yV1za@Bk)Ot#gPd
z((m9UnIoCUK4B<wVO5H7qRjO(6M}+;g;IV!2rH>-1@4wTj)s0(#;e6X*(NJ_yTirJ
zmU`3i`wCLviWl*B@cfb}g^IB1{D-7X!ZY=V$OH13N0@*UZa7WnxrnRxey&|fLU4DK
z8zhMpMw|?ZT`xEXA*NM39B`7H^L*dEFEvLNCjlfMI~IH}wGiS_+~ZHEI(zOP;oY|X
z^GA2Lb$(HB?IbW1*(?RrG&^401yq&uQ(d+Hw};_0niYblUGa<Y$DeC>^Rwdu=)2fh
zNLfOt5HO(}FBIv?3IqJ$BZ}>>o?w@h^q9h_y+n4zPBsw6S>7Lb%XVFlI(%QzSA+8B
zhA2{DiM{hWi=xS!#D5P12-UUoxQ=rW-`0z-8T>}hXVB*Rfi8{3z19qJRb6V1Sb|nK
zVXt+a5hwKfV0iyd@A;Bi+1<{7{{G?i;X7_*sy)pd6ATa{8j8*yAxpctPhe)G=V+;L
z;!zHiZED2{ml*ienNoX6=ze|6i?UBu=<e4VVhhS`I$l;-DSA0BvI^Eh_Q67B@+K*+
zk1SPKVTJC7U&9Kkg8tNv!l2<LBCMEZx07khVK@8}%1*Edf$zJWWajA48iZpTELr7x
zh!up;+OK_OpB5++9Qdps&x8S8h|ndPuT0vMd$2zjxh^V>6I*sYAcY%CQB>Fy!G*5V
zW%R^kZ$NxX=H@}A{Y&X{h$7;>Ir2EYqd%tIMp8~-i4pg)=cDb4It;6uFCfT96KzQa
zi!fD+3yfXo844*S6MfxL%)-H5VQ%rn9aHykb5Q`g#$MqHLRerfjPb|>=Yl=lfXX<i
z6a%f`;j@n?$l1leey<orhSf81*zs$vg<l2ZpMNSj@?Auvf^Nx9<KiYARmeQm1T}<c
zOGa{zGEUVab@O701^(4a>~I#awnNTAS`l_$e?xe9StwOhb4?3pvN1oya30E*HtwmP
zza_@J=Kh>*pEB(FLQ6o>VbEBl`{}2dU)<UU#bPgILB}9?rynL0tUP8Mah8KT5^R;X
z1AO1GNBjYM;%Ki$nS?(2F?S^|wF~+#H+DBiIEZ)c->{><AdQnUE=tg;Q2(?jY^SX7
zg@rfxF3sj{UZ<%VVrj)rJ1b}+S>FpKf|F{59Wj_+4HtE7?EJDLvZ1#0(6Q=~t?Sr#
z&rsa7Q~A>&GBZey!5MzO*bbQtke6XQL?~T*`pssdaR=}B1reYjr%7(3!<}`(_kZ&|
zJhN1YfQrSZ!p#=ZTLPpH({6^}(mdnm;)(MRqHsBV3#er-_i3eid{rJTRw*NHg5~zL
zSqTvWpY+}Fg{$19TLrCto}2kJa@}3h2LEW&-)&SuMS+VLx6u5+nrV0&g;hqWnzc1|
zOcucCCx0Q5+0-cUPAex99Bvh;3;JVq6$Kag?&lwu?t;UDNLso!(2-dsPBfUWt<D%o
zy{F`;Q-jD__-lG|2yPorf@Qj{`{*q>_7fQFzaI#8Q2$u|P4=@J|M}D3e_jXH(e+7M
z>79RH{r8Z3GMF^>{#%BBZN7hhmt^@rwh=XkKS!U%&PMo*>rQIpve(Gh<&{F&L09TU
zi^)7~28^b`5(bI+WF|6fmMNBB*>3sagQtc0+H(KAr%yl|%1!?doip6fc}Il#-+Ukt
zV8igMZ7kE{W&m*=;-hStr&np~ugstoSt30ZQip8y6&8WR4U9(Ju8E+kx5u>)k<J!3
zsiI1EdKHFNJ}i^B63f38*aNbOllJpmz~Voj(NT>%4Jg*}#o>E5E7r!+=r77Teln^K
zx~gpu$t;9os?h%!Xk{~U>rH&M%LYE?PlL<d+(>cpd$ZqI4{>h-iXsm9P31kWna*DQ
zg6g}i1m)3Q+izHZHJi;&sX@~vXUpxE&L+R<oIhyAkY!wX>m11V#<-p7bvv03o^N!D
z&mi;Yy}nV$<Lj78dpVTg-hccM>8C*P(U^IQ;?CbxmGSdF0WGAmqIso#sH350P^1$y
zzA1fG)0CcB0L?36ltmU778d$17r@o~H}9Q}>wNrb+3{d5GIy4z<F5q+bk{q`Z~<lU
zRn{|~Duep6;M)+FlRyL8mgCKILG&LXUf#<AogP>DCO3DpkgCJg*Nv<0jj%+uZy)W(
zd;X;VE5*L4=iKt83$&YQaQo^jzPQu$<(TpKWXe<#-9htHo26%FnEuUd`Y~6NxZ|CK
z7>^eg@+&MN76}tWYv;Egxd_6p=$iScn&u5Czsvi*T4<@5VfS@{5F++wQLU#U{(1Mn
z^lCtU2HQIeRCv-VG3W81n%=!y_}Sd2N+vGlCeYACTt9OaC<G8s$vjuoSNlJ`Kj==-
zfOaJL<_P3Cn^(n^J7`c$hF5(YQa&B*ES3~XsQxqi2iCp%>#pL_NZ`{y@p`m1BU6cf
z+dFJRD47t{!9JBUtgnCEY*t5=Xuo+PWu<NCm&JE_#QgH`YlrIIH>aEP@QQYVr^5qE
z2kWm>mZf%|bx$dK-Y+gg#qT#;)@f9{AGJB${Mo;}JO0a=+yq&;%lz7>)Fs$-S=$Y>
z!??4wAG6H8o6Y~FU6n-eXuT*-l|^g9^3y}qw)|78FCEpdvs~sop9-SIj9x4pjq$cl
z59uZRMNhDve$Hv}VF_bDR{MjEf)FRVHV-Gin7ejBa3bzdcU;R2g%^L55Um*+J<R+z
zWY4tRaG*ZSCT$#;+mTga*}AhVNaE7TCg*7=Fh>61!+OZ)on!SIMomTQCH#)-EFz}C
zucHV0$g_)sPhQWh+<*(qJ66=e?Q>$J91rf4oWAeQ=DK=sD(-OR68_cO>P!6tEJ;>F
zwoz5va=C+gmHHn&$m@2t#T&))r(r^O=975U{@VZN5G_Def3M_sKGTlCZ;FqiRFQBr
z*V!{uNYIfxS25!k$iV~6@E*Nin4y2?&0`EK)7sPW(q?1vUUO{Mj_U4Kh}j7eC0Jy?
zBMeox_gwx=-kvAcIDKIH7=BmbPG@?xP?=;S^Qc(g?8zQ&#qP`z6P>o~Lc~27>*f3~
z54W>D|J@&G*B^HZsm~;tgmig9M@^#U#x9-jPcs>-#Vds$=kW0?;UB6N`okjo?cd(5
zh~%C#v>Zn{RA9J0?1C!VrSSaLN=K<wZ(H3PK>V~jY+SI^SNS#*gDiu}m&09;44j<v
z-pwvtpU|&YG%G>N)aY66@}S?WU_>lViOF{KI0FiWs$e4iaEIX?K6Uer0o|Jin!RB<
zs{SlI+GDSSc}L!Cj_`0T7EAp-0T3Ht?rzp_L9xaNICtOTNwDPWub@cxLWL+k69h+(
zMz#NjgHqZ~HM$YUIpiH>lAjvW)jB@1jK80sPKxGd5VRV3y<6FDI}u)0-uTmGWxl9_
zZu-Lcw`mAT&(zvFhFrb3Jd8SQR-y;*V&WV(xp!8=I0t3qmanB4NIwp&G8;3hSY2E4
ze6cwyfNB_E)-;P8sp>|;+%71NmMi@|?+~NJ)1v`H74}+K!wCDw1Fk!^b^|;Yu6kL&
zFcZ!75Ey+N@^wTq&S$xs;zPUB=_uRM%85*N^uRAgWGSb0?@SxtOe;vu9_{qiH{#1s
z%?R=~=Vi*#M&s32rXAU<i&}s1z$SHAn3TvVQaq8qlPtnEi_?%SYP<j%3RetWIYSjX
zFCen7o|`OAeRP>YhuovTlkd2$@_UWMTB9eC2lv&Q2?V)P$(lp~%JpPR*14Ii;0lep
z>QHB<gz4A-;Y6<>ldTwQ{Hre7_v<B@a_J}2zXM_W)>C&2FWH`dxo91qYd$>7_pVjY
z{_RGrkSFoq0|A&25GvZ&hAC&C!*3+!lkX%9_QmLbb?%+{;9$*MvekZJ03EYy(h|g$
z#6-<(e_mtp8-j;6e6OY<J6gX!MG;eg=U*Le3%ki;z1N$x)7@kYtB4+vs!}T&=aqp_
zNqjK(<Z}PdmRba;@Asg4&X3N-BC+<<XcT3S><$l$^`Flv78>+zMBNQ;uU=!|r|bUu
z+q!^h@ykz$2g#r^){y44kwhj?k<Z}K<l?&ESg0Wc8~k!w(wO67=aPH=9NTb@Fw8pm
z78$3+I7Ph1{N`TTPq&lGd5_0`y&H<}@#hTWpLcu}J6nMe&T&2b8dvRs@en6c`sl<7
z20KL$LaW{-ox{NI@^_NW!hL^U={gsFs8?9aYh4#oQ#l-ZWh|*Pl;q}zB_8UP5@XeT
zRsrvbo8ro<lk-+2WDcJTGc*M2Z6&*6rPlw#+?R=IPW)J830N}E=D1#KTxN|wf&Q9s
zOZCw}pUef*+s|JHW^_(7nO#Yh(3t1{(g3H!KkPd!N2(ky9-H0E{cQQZH3eo-G_WSz
z8#I>v`;z^XkXIPf@BJa6fa2DXsYi;+OCviPmZL^fJ}XDmv(aBxU?*0#3G-beNa109
zIyc*r0GcP<(8-61CP@W%{=)VTz(V*w=J_m#)5-NDqVtU}JN5m;be+-l^Nm*z2L=L*
zGMRKWY@)|(^=(lFZm=rqTc3BXVYa0y+z#z|nVxNG?|Q?8E_uqnQClD1?XW^sw!IvB
z9mcRs+7wh+vi$IN#R2iX7&vW6r~jr#vGI8-?pN<8Pa2>F81Aj4{uv9$oBAm#bl$T5
z^TSU~-X-zeJ?j}j2w6L~ZJ#_uHVXc=s}eOJ(BXzdS~sn*LX`37okkdQoQR4P3X;Tk
zK{=}=xB_$k=fY?t^p{@6@o;ySK&O|)&SOUzo%#fRGe^f~JDYYws}1EHD~3?<8i(0!
zWK{*^(vbJ?g>5BAjH+%vy;POdrHf?qS9FmT9h(~Vf!pufwq#=javT$-G5c*xO@rEz
z5>*j81wI135fjzHt9P44&$I>bC4tqWpmh5$sx^b}x;`ijEzMcF?p(lNFp)&AQX-_(
zTGde3QKxJ0aWEJa8@m#nxL<QPcjM5QFTR_SN$B;!tagmf^yJB_0n(|E-`<;rY4*-2
znUk931dIV&tQA?&L-zZ=za}jkEr|H&M;m!m&6{0c<OW#9iLx4>4n?p2nosgv0TyYC
z3jB>z1s9R@KNXCi2gc~Sz2qg_G(O|a>m$>7zh6~0bu+*;tGEIc7qM^eHkmj4nVIu`
z-&?qh=*h$tLGCT0wii5@<>MMI7g2(IJ|eLh1CSkRC#>*B421E~yDWycr%p!?4kt{*
zJQSSPVvsQOnBL0O$O*>7pgc3xIFm4+xzQ`=<@k_4Rb|x5s#L_GZqC0WI#V9Otd|lN
z;D$=Jh)@N~Hs6B*$QANZ%q!P>Zt8i&J(@J+73WZ_756nAI~BK?%8tb<&^bxR$9unX
z^kre^|Dy8e5O|c$$BM5d3u;x)4oAuHMmO_3e#;}@+)C5RzG~QnSpA6h`WNaZ3@tdd
zB8S<y1}qlZUbU%i@ot^3+8sl-!A0&&Wp|htajRann$mTqnLSyh^G}y3h!I<}%=~V<
zANBADiqI!_!!yolZOrYh4l41>;+J(-A-cv71JK7}H@8Yr$2WTCwq^$>8qN3YZ{{T`
z^N!~6R2Z)8_B$y5c9oa`mW8O$4exH_wO6K`Yy53*Q&T@kY$RRjpY&jBsb~xs6r<7X
zx*N=AR=9Lpt;_r`#6p3GjTR(QHABt}bgI3B^JXi7LbnUPG1xLoWMHUvu0gGQR2koS
zdr*?T%6pSjp?SJuE5g_BoHEp%|4ZDh<Cgk+7I_li?{f`Is~+Ol0`^A7{K<=)j;9!g
zH7}P{i59Jzm&B!vJRrZI@~)X!)(*Csw|fkaUU-@`0nnD1Y_VR&>!N%|T8JRFT&T&3
z`jf4q&z{58NBZ^2+l)K?P~H4?XhqAFQKmC+3!Ll+z>WN2g<?8ej+?g<Ic2YHjYO`b
zH4R`sB3GFomu0wA9Q%;oXsd?TnW+}stke?oyDmS`QC9?xvr&~w(|jHn{fg_e_v7GT
z-C5P+EmmC9j*iQA_pqcSPH$b+HC$|1=cIp5bm76z)}pdU_pMyuDRJXF4q;2Qlj-!s
zJnY6t=B7poF&GhBWZ_TDn8B*x=K+^B!^3LQ@XBjfJ=rST1+p=BtGITm4mhB6Hl265
z1s&EHMlbzm3`fAlc<QQ-^u;+{k~R1*%b?d#wpABC9>JokTnA)()NkJ?<)`^rfnka;
zA2#a9wsgqN&f#o8dIaZgIf(yhp+8b^8tYSkjTX`^x?-t!p){YqD3@O6{dm4cNmOGg
zQFmfT2e~-ihXEd1c%Xer!ZP}mvAS%pk>!BqN=wl&0luycrZ<Xu<XeuMH>{)=<%I4h
z*o-i)HVGh^(K#gB`S$2u3H<`ipWYVOQiiD5oIA%q-IxpJ|KL{BUq9oyrX<4M8UBZ;
z!{+Ur;eeu4?#T@TmaPNlwZ_5a0ZXA$CR#V0q6Uk{d^m^;3l!+MLj{v{A5Z@e8~`7S
z1L%Ky_V4)o4@i)V#Q_!tq)-0#0e6;Tf5;~SOBMg+Et&s;11y4G{-4oE;uyr!rbO-D
zU`&We3=S~NCD=f5#~Q&cnn}PJEjbLJwfZW;-x6RGs^KB(Mo%vV7LR(7EQcurfTsK}
zKod#$O$H3Po2ynYY9Y(vNg$X?JMMA4%l9cm=KDWI18>{;44;A5$n@i;&Nl|kPHEre
zee8ojSk$JD*Y1=jrI9!r(gQU2#@V;K-#*d;TM1D_;^=0R_61>sgB86978iexwWX2e
zcEr_Uk)y-}$ca;f#M+kaW)=>prZ^8wIsWhL1y~t=4h4zGhsA=ja`~&Un6l(Ue3Cfz
zqfM2EJHO5j)np#9gy`+Zt6&L%PVMCT;#o<#wtJ=T4vW+4bkH49EQq#A2I8z59iT24
zK=S@8;P(u`>z;&sCwGjc3`jU`-UTg6)k-AHf0(-Ph&x{o>4)7%AodBN>iR)$gM*`F
z6T3c1ToX^?y6eQoh70iEaKK3&VO&UuMePTeoM+!OFJZ+fS~842WY9s$Q`tOAIU3Rc
zpf?-Rc>p;p0IW6UKUk{<IDBoEB0{m|+%Z)rUxer5Q^kw0<BT~KtJMKPEi4?_=_EZD
z#<C##nA}g&(*evJ2wWsd2=u&o|Kt<4mz`DaIrOpt%{sG1SMb?wWI*OANEPjR2b*w*
z*Cch-$hB770@Q1QwgR|=v#_7O(3$K&s44^oF!^CVFW@ESAl68AD{<2Y#WpdWVEl9Q
zjJy$I4kqAtj@}a=(9o75KwX!7rY$Frh74>u!KD{~$vv%=aGO8+xpI|bGXFB@Oo$|S
zf;j8BKh~ZISJw}qcN=tDRuge0sbX(2Z9`JXd)EF@{}_W}2JPtmr=1Vjc5)4#V3&SN
zQNR9uVR`wm@`s&qzkanIftxz3uK;v^4pIgY)&qYeen@Sv+qLhFvsprP!Ltk5&QGvH
z6waPlH`^H8s$&<KCR}0SX7y(E`UflyS^%D$ucTBF&b<?5sOg1^yBz@FGc^~*#gCmt
zGrT~LwXr#uQE`LiY17f~kyWF2xq;ku6WGOf?q83!6aSMiNgdw-fJh*3c3A3%oS6C(
ztRRm;s5xh?CjEbL4lQ?)?ca;SLP`(tu#ug0^`uR|nu}w&qa~CNNbJ775;1mn6cCx*
zKO&y873xzH8O#xf`v+QlZ;z`3J43$89UG#U7X`fy-cwy8?wC76%;ESpr#|wkWn5gK
z!|syI__D!*469=L22ut(v&ja{`h;c6=eaUjLgW!}A>VHvl)@5TVOZS#FHs`|8`3?G
z>%T6sl1){v&$O<=Tc#O@P2!$;t}bo`I$4%z$l?|2o<BVsOn)*qKcblbYEB54V+8&g
zBEmu3+Z(k~o~f1X5ZQQQ;DgS#ibq9Jac~t-Kz`G7Mo|ir&wl{%BrxAen-~7ZlO%!g
zvDD#cJOGBbUyVd%sJ{{tS#zVb@2GCr4j*4&;7~7Mf%s9XRcIXUTJ>}~NzIYQ3H^;H
zc@b1faQrI#ODU4HMiB144>To!KQTF1k;^PF#QV^sQlRv(8Q38}W{Yi$9g3aZ&M9sO
z;9m3hpr{7p*Yo;22-5lM1_wn){2WDy&7CU-o3p5*sdUE_{fJ6?IuPXePWs&?6BnX0
zkexr0yz?`1;;i#5<0E+2lxA^ppmT_B{9ZEW1G_?8OcJGIjFq~@`HY?EMIPA7z08%-
zZ=;a1Pn%$?yt)2<dHOZ%WI5l-Kn8zkpy&R5cMbzt{Of1HI}LzcpUQii;#{mMs!o|E
z8i(LLTr_ny_Xpl;&O@UgJcFH<B~_JmvpmE4t<aJgzGfN_bIq!)Z`6(vsTxv==`sg9
zn!bI`>yIe9@aCm^xWml`8$o@4=FBBZKtNhvfigYWNIoGmi}tZl-Z$b-<Bo@WcvH&@
z0v0>#{&dbJGMVjq14c`jlDXVk(8A?Ah|k*s$d2!XG53<XE+urnJq$9<tMl{^ChZwC
z5wuR$Iu5~Wy(@x4$9$uK5{!Crc?f$#B=aVIq9l7$Vx2P7^1_IbasOezOdwo&ej70)
zGRMu5|K6Y?+jflyBb@y$rAOFdxmhoo3!GRmyyD+!<#qkjgx?rP)C_t)4#YsHzOj!W
z1zcl?d?~-(ZoiA0CL(NHWWHb=gnqzwxI$oOefL8tsgn6!Xdybw#cY>hprHdXHLRKi
zgcxL?^awU+ESK~$n;Wr<^_9_TX2(8OTMKsb<;xB`*!V-Llq5Y@JMW#ONXv=Aak%pL
zIca0#TmGu7l=88)`nw+l2^jj)>_7dBk)D7@=YyG+aCj(S6Mc$o6Pu-m5prt3a+iAK
zj}$D7Uu_$#cBx>9oTQBrb%OssG^j&hvr~S~<lN1Yd-j$<c-ZB6=1ZPJ9hmj*%k2=F
z=e-6ZeXtl^vtL^u=kWrEaO32_0#VWa1UMzq!kYLgIxQ`Z&qB41DDYl>-$-}T?n=(C
z7hLTv{AsBZD1o)M?9Y8N67P1RRk4Fkz+|LXr(7G-XP~9n1Igd?6Hc}+tbhuW%+9+N
z5^4ysyx%rNM~5|TZ6GtFGi=zJ6LWg#rhx_tEtXcx?x?R_sCqZ7I3;z_y5#MA+&Sro
zy+ee!`DO(w!TWg>IBdX@3E=50&;OL;lNbScFkq`?=|(q#8AbYM+lEB$`PbB38%tr$
zvzZ}{4w%<bg|f(~j}ID<mn0lb3s=m=V^%)PopgY-Rg;##-tX%FRaV~%fFRxSEEK`%
zt8N0Lwx|i$1~F97gGr(akT$H;<W^h|2gqQFBhY{XlJLXs$m+LHq`7s8!JW&}Pj4IH
zV5#TNf##8M8p3gu0BHkTDg%^>bZ`@_D}O=bxC9-0w>jHh2$F5Sw9Z}r!G|sGR|JaA
z<@040T*40Y9K?|Ny#sORnWcF70RkjI#*p$YFE2{GFVpXsp?EMGWv~qL`xS%izU9|q
z3>ePe%=<;Qy3wny8ci6^@fRz@Mz+3$8dl)mI6^WnH3uC#h{&L?*L7Yo3>MqbENQ(5
z$SprO6Om;gp|!CtHq*tA5`&$yL+%!MJmZHY3HHR7mKz5IrF_*7lhjC~_Ny4Hn&Z0&
zzxnB)Se6h=yg<xdFjq>!^dladAO~M6gI721{C_U(&d+}9XNxROjNnucKn0-{P+S9f
z5B1;|NL3@6nUS$zN;}KuF8Ku?Bu+5EX7q4bG1DvD-<-pM?3S5D#xSfQgf;XaRHi>H
zTCjUYT7Ep_@g@Fp54rDB%_NX`Nn2anS%qt(Z>!J31ZskKmP0ogI2dpS^*TWWug<#;
ziPK7nXrPEgC=hbYF4&^e;UV2>7jaAd4hvZ$9~@#&?Pn}`Al+~UD578vGBG1TB5E|K
zlB2Hn&VLW|+=yvE!{ONm!Itj;s7uxhQuGTQ?v&J6!0-M$bw;r}G>{G#Qw6rc`huz(
z8kaM0em<|HYQ-WgXDoG^^k^$xqIe7xeN4l??Gni16$7&LWb0O;#ZUeOtFQgewZR!C
z;W}UjTU1&IaWgo2vQuJQZk^zEvJV3#R3V{Mcw#LtxExg#^3|bj3Sl>*;lHre9$+BN
z%2&dl>}PV&$pGfAs_TswZmgmBTU!^a<QJ$q34T0VkI(5&FD!x!qd;2nlQ!-+2rk$y
z36wVQk5Zb-f#^v36T~}C5}UnyS1{r*Ce}bgBX;{eC;^2=TwpShW3+$ncsD_vcOBG*
z8U#tPo$O3ng3tS72}d+k`WOAAZYg1BmEz{Dbx@2D&6OS-TDC3<k~MtdZ3@^TzIf#>
zyX~i-Q3WFTagc$g5Txe1O<j64*d*Ra{qVu<|9P5lB6ch1#L~L9&CJYJelefCSN(Jk
z7?RI!CvvXD!WT1;piJT+%AwlebX)KA%NsI(oSi>T`o8re-%qS1dk$eqfXx;zG9B{x
zZt(UnNPk(b69GIAAjjJg`|Vb)1|aWP@CYbo3Ik<~|0B!OU|pLhzzq}Zl&C`1T-KbG
zaqghnk6P;{Mq~Krv)xJrnv&J@#9DjjApJu_(N11tpvbNVR)eY0;z|de1<{F86@i*4
zUySL-O6>^A5lE<t1SvynRYd<t_h?eG<HOlH`}>VRzS@d~I4{Wz2qPmSC|4ZYmaTu)
z>J7*m{w=4)2G<Nfz^o`YN!YO=OUZ`>cKqugWhZ97E9IVnbhs_XoO>TK@X9u@YKF&(
zzbcI4=8MFf929TabZDDoS<T_d+A^pJXOfXwa1A%OHiFBKug}uT@1$@78eQ~ZepBGh
z>P;8t^fKOc5xv>j&(Ch(X*SOzJ-_r~N_W-jeNPYNws>><C#i#u(<4=E(m|JLHs*Yg
zK3$eo@pJom3$dDaJLo0(fnT!}J%<}J`<v?bI0!Ao-q~9>&}s~VTD!($hoig8sbMPq
zN;@WVpELaD4ZUDYRl=-t`7~f;t?$@+o>Fx(bD#0=9JZhLgBw2INN!&4>eTNaH0ht#
zg)@IY*8nP~J%5K(FS%w>HFqna?2vM&CqXP!>;1?<e55Ld>gl_sr$qzm&eeYctuC7M
zo6MbWN$`#9K~X;qq)GP20y4hsIiVbh<G(%z&blhQX74^O@Ru|FaWhfEy~KQIU%SxA
znB1R|t?lcGVx6B&8pzl>ROz(2tZW4j3uF{Q#>S{DBTbh4ve7^2v%XqXEqZ7Eyp#Z6
z<bqZ@=Es4;v^nWoPHVzxaT-Yw^#W3~)010Y-$W=URvK>>7=9vSrBKE@=1gI!_aHF(
zL>H6oP;+h(c99A)L(|Fs%|Nj!DoB9QR(R(i23yNI1|-&vbJ-b!fifW54z_-}Agk&8
zVxZE*t-gLX_1e3}(^-Y60&v3Mb}1<H?N(EwBC;mL%5d|MJ4_cs^(j@`orx+V$CYG^
z0dLz&v+UhmDaE&}5@0&;pnEONFi2=CQpL<ZcO}lS^v7+(x!cqVh_7{?S^2O$fwF=5
zk5^*^D@SGf2kc@7U_zi+W$xE(8&Eri**Gnp+C||L9Zv!Ihw<~#FLu#pd==v!qz47j
z&$AvwRb>P;ibBp0^>b_I;f?NrqCfj>dxDExNuXqvT0Jt@4>l_I;AJaGC#n#TiWBv)
zdZ?kP#gw9xAc@de-2wF`qvyD7W9zG+v!l!>v7+R@*<7=G1nlxeTkMJM_2Ma4%~4*m
zA|Ir}Rz%Y32<b0NN}d14YmXoviIf0lV->^2LLpO7(_rUI?uQ0YnI~cYaWyicr)EtK
zx+}A%tAcn}ylpf4@Ezva8n0Nx3`j;-eC3|e7MF9;rg(n-Ge1btCRLK=MMTIsx6dE%
z?D@L$<-xLt{J)&^=B!}}NEUonc}}E4gB$%8I`{UxB>f;Huf$3#IW}#MS<K%UWVgqS
zny0s$AV<C~Z6cFvqg-iX?~D$oJlr&*k5f}uH%QoTGxkTR9$rMl(ZTL5ku};DRT~^v
z2F2zVBwWNIyHFR9tKE4HXs4_1qVGmPfd(m)8PdIukE}qEwMIl+pkI|fP|X>AGaz1w
zUe(cli};zzPm5q8pcyP*9TJEh0KWIoeqj?DI8n3N>5|bN)L}Qu<b11P15H1@Nmsz3
z+!jFD)!Q3ha*29_z+`FvhEhh5q#GJ;Z*#e$3R}|yHs-QB1hSKwf?Uk4G#)Ufj&dcb
z9Md_4?=mfFrg((KSw(j+!Ex^8jTKAf9(BGNP~qhiH<yOd?R0N^wl^Aue_Hb(y2AZ-
zZ3}~&VGtwXmzd!P90>=#>E@u`JCfXW-7~F@TS1Jpv)@_pjo%_sIJ)1yEwr4z6eOQq
z0cuyz=-e1cQa)rdH{#4+0tYLys8yKm2n=&y4VTXt64IjLGSW&JBPi)nm&4SNfS|*u
zB5aomF7v$f>R=^jqJc_Ne9$9_1<k4%IX7_q@p!3!bTr;6b`GQ}o8oJ9P<2PHBGv_{
zAY#S#$ET?Vk<VX^+a?^wu7CpyX*2UgWOsOTd1#;KC_y*&)5G&Dk|NCK>|j?+fzjb>
zw;fXUj$}SqRLrQ$Ex<U&S-24p`wB7iWliQG6qi{L$Q6<0mL?6fx*28}c<)-C&d=mR
zE<K#qJe=mNF$er)UxxJ+Fa5h~GWaG-GWt>1h!Lyk13{tZpHC9LA~UrfKV~mrC{x1b
zZrf?Q*D**YbTlY-#jJwtN~rVU)zfsjoR(+NtZ1iOnQ>C|fb;bf|KslkP^A&25ixy%
z?PU>cQ0}C>KHi!h!H%EIl2|)9sSI6NOi3T~lHI+n7J2pRNA#h@`dZor<9W>-%)^Hy
zLxHcDOqM=pQr&$nou~#KNGAEZbeg%)19~@a-V~(mJe5E974l%B{&e9rnYbL#E==Cq
zEac~TI=87Yl5<|iY<DCfSC`-AA2$3x{UrmgjMz6xc~G8z&bN##b%(qa7PJre7#8%J
zu~j%tVINYo{ee178tRT5Jv>N?+Z_!MAbjZ#6VE$Yb{Pi{<HZk*A)a`2Sav5rn_bfG
zXa(I6V0X@a!9#IZ$gxm#<~yy9eA@7!5{|G}3i~U-e%0qJsvPX4Mb_fz73Cg-9tOf$
z=+CoBO1{w_9x{{0-%_#xe9uRbsO&hA>!FGT2+7wts;4DaH$Q`laGJe&SUFe@9l8(x
z3E)*l!YOf)v-QuqXcFV(3U!-b%z&OfAB_@|exB%(36w!ubdSD9d2NcZbPnlQGIyfE
zi>9ogk@wyC*#@yiJqRS~Glc^l8on#ge7Z1lct?l{$gpECb=mD);DBtv3yLpeIiU$!
zV#=O)w>Nd7s4Vap3x#3F&*v}iMk@T;mAX{4eZTj^MvFX@PdB}2b5gL)FY?@qsP49m
z<sm?Pl21RHvwnmyj8Kb0p|<y2e;o;kqVGj|S@BbK%8v+@8$5`$3s}-r1!Y##%XY%F
zU}(5&RX1u=If}{(5A9UB6g<4E0#wUdrKT_*L}a*=f?H#TZW?fuD;5>b@GU?n9<y%B
z3z`9=$}tcR^h3rsYOBgcn=a{WD~YTXjH?&mo6P<Gq54Gq6?l_1!z}yrGX|-d;9mwQ
zg}f9C3L^Z`{<cq8kUit3sS+4fKU}y)3A*;f80{2EkPyltDWdw)<=Iy(BhDXlhcgLc
z_HvF+DR{5a+0Xel9x(!+XkN3QpHbz6pE*8qy2G{1bV(s+W$Q~IvbqpuI=3LQ)ARfd
z+Ue^%kt#zDmd~T*s)oPqRjW>?5oQU0uG3_MCv_@Ntp}SjZk|MODcrJ3D(LJd&A7v3
z3Nf`>D%wnC><Uj0kwjyhSgF%Eum)SfVp#VUOI{trxK-UpScL;u6&qaN0M>?Yr?fP9
ziSu-jyhCx)xTdmbo4p_8;d6$j$Mq0)vxMxx;y((jIA0-_Pdz4*f4VQQ{^hhDfzcfe
zxsK=m72w!|{rL$Ibv&j^ro!D^X4)9xl~@A_Wr(T8oav9L`;lMVrN5d<7#eB}pirnB
zDTneJqgftymM)H;>FmVwgZ=zW?2Lz|Wfq=Dre5JSQwn)A&~p03d|CiPQXAu><~kaN
zMX!gp6&Ixb2PakX4ZfZE(q(ea8Zxgrj)g)!6*N5bU1Y%?Xnv{4_Edh{Ih3FqjS72}
z9-fVz1+X?$yyK_BN9+C(UXf9g-*jpv8jl4-o-^0PRzH5$s$AC1J<dGk${?Q{peH-V
z;%Atqv_Q8WY+XZ^3iau3(gN>@H4Cncyqy@o1jws&7#w+(!zz$~($~k`Eg+N3Yjx6B
zjujrQh=%jkX^K)pOwGW8NMA$JBu9eZ=c=Y(|G5ktH(%?S&)eMuSVn6-j?wzf3OMNi
zd~pj{3U(~^X6FQBF^epqrIv?+DWMmkii&@WC@S7$AK)--r3J*$rMeO?67!L-&^&Mx
z0&CPO(A~6)J+xpoo!M>GXl5}rOcN!d5k?&&L)bZL%)MI@Qa3=&5O%fs2fG-^GopGd
zi|?9Qpy;l4?dc0gz<kxU@}#BkO{q;*E^8_uqnp%BTisZW3`UN|(QSsZhom7@L{z&!
zD{8^nLegNP4D=C!C1B?}4ltMTJ=J%fw@%PDWUOL)5^j)RN}6TSx<Wi%;$0fq(NUu(
zjxOh`-%TY+&B*RSg~4gmbK>#4dr{5>`mR{ijXj;0OF;+{rz@Fk7$cMvV;}7;8B1_v
zFk(e&%?nMcJe=8V)iYsCV-3N_JJsC9NKv(14zJ^j(c95~I7%u1)!i)%H|}qu3xLo6
zIS8)e!gWjyQ@nuZ*UL=9g|{ATU&F&5SjU&3car)ga)X6}Xb(F=kD1W*)yQ@}XQ~$Y
zD-<``$C;O0p*M>z^-%a?Z|{5`pxEaQc6Tn9d|-d$c*tks=f=Z6h*MMf03DUj)EB<o
zBR}pt1XB9xlB4;n#op2noeW#Kos&rvUsKFeHH-9DAv=rN6DWLx!MpZ)X&+*dzB700
zEWF0T5A*|-`WG791(E;yCt?q{ZN92HpVj}D?}Kkp0rh{K|AoS%|9%hl$^YLQDfZ(c
zCU^uchY>Ui_77r=$@on7LD_%^t5GAqtf6<L{T9X97)9;uMN)x&vH}O@&e)MP9lqky
zBiP%TO+3VXlFt4f&86^%7T{DV>U%IF!=eRdC-g-^I3c)jmKK;*2p9*?y9*|~kq)bQ
z%o1gF;>S&2kOdstpZ#VJzQ*3InwnE2lK0{c?#Q4?%uX*rbJ?{3WzLoP-v5*2PjCs0
z?KSNaYl`owlI`P<c1F+3p>65gi>QqSU)X41FWnKUxg*8h_m;0BZV`8)GV$9jLBs+I
zqV#sHzm)L1S@ZHODzYux*Zy?gf14L*^&|h0C*h1_z%^|H2~msC727^Vq*G=^x+j34
z@+lIto07i*;PjX(F>d!$@E5@B$KL<>aS^pj;hS6=7;KdnJW`#k-@j-^IFx1mczG<C
z$qbNh<H=N%Omhl5YOG^*HqyTk3>aJo$PuvZaDF9GI25=+mQRr&%JhW>+!cPZSYUxq
z#nM^r;v-gFIWoHc>D$iOZuW1kF6#<`*$;ET@2}SY5090z%@Kv)k`&>4;Xeb0rH$<i
zN4qP9yn8MEs*a)A;}Y1iKw5R`vp`$b?FWG68gn=KG_Ihr6eClV?E=F4?;RAecR*VB
zB%yp*svn^07Hxj-BieriE*u=!2+OB4e3NDQ0)bD@9lcnA^%lj6v3=|#N9ueWKxf7v
zXPhe65{*P$5+-1ssf0Z%jE}VY3fh_U`i<bX=Y*JFnPG%IA2y7sz8B*kbz8qFVrS#I
zA_$j<)mh~1HoAP$Ua2`LN5^ZG35djzgBX+qutQFdG#L;Nh&oYIYKqg8h-siy<y{%o
zrSMyBsV&79QL12uQzU<xZgtkdMld&q77As(IE^KO&3+V9J1|E$#mz$KjK|7*=`5Pb
zO-u+@7P<`@2WJ4CsczI&pr$|2%6i#SIeMTY9-XKFVDXz_z=To?F(*V2k#?fkUOjwE
zh6pF>9DB$?tISV%)2EhbfbC8HUJet<Qi*xV7akqexlZbbCx0eJNC??r%gto3Zc50l
zqNB82kqq|>)ygNf6n4H%H34S#UTck6jgcD_2z@0614~l;XZ}?PKaiWI?*+}bKvjuE
zA88M6P*O$B5@8iDTK92a;H}VMN8id&$3bHJMfJxe#&+eS)OyzEUyp7DlkNQcnvFEG
z&8`~Rj@`?pZq#}_f^z)M#CkwhG7@I#%3%yG7n>UPl$}*NoVmxaQsD+QCg&S^^BCN0
zo>0HKT)4Wxoa?qi7aHrm52AA}bcxx!(LuD7zJb6}6MP{fODSIj)S0vfpZDWLH|%mh
zr<aZr$Qc#i{Ky~8L^i>50{GO0db?Ld>c!v7Yn)3OA-nV^0+30ZbuHU@Q=s?mTh@<|
zYA@$(!URUDlTx7%Mk}4eM*h4}gbndA3h^FlF;~w)DCtp9%SRHQ`h!+>eCV}@k=iSb
zC8~GfAVBkn0HI3^ysU<XpG5V~fLV+MT8P+n!D%*`83noCSy(G07a&*#54&GFGr&9#
zzc?>rD+^UNiS@~3(vGAKAhJ6AO}nzQ@BDITS0y?;?#Pc#4p7$a$@L8>IA3f<K?{<8
zi60#1=u5*s9wy2~9b+t7mzD3um@BcR7v+&9P_6?Hvzlm(Qa&EciIe>kKMMH*z&2zr
zgK;rHXsI+yEi<cjHFCeo&R^=jy?YtOVqv*fbb8dfIBr(A%Pd+xN|&_)zxxsX8sAiP
z0CPPSO9d}0ecaWH&i|F;<fzlN-v$7`YB0#d*+y-mdId1ZboBLHB6d|U$c@EtDptVe
zBzuw(PoifXJQ(Y;4RPM;L&hF2KTPBHU2kiFVa7eEMmPvA-=~ufxe@%mxUoD=b$w85
z%S5&P)L{N)kiOIDvFa*+G7#+f8X(xf^2P&^yiQaKmK=iEBI>MpC}yv$0HOx#OU4eD
z=(NlcFIE+<@|BKWT=Y}BNtVs{minVT8LaHRi(FE}Mw)42D+?K@u)6ae;mbL^a_wG~
zdwpo2n3dI2zr%|=O(GCetWM7F=dwiuoot$E-SSDY5=*|QIB6Dx7*aYmkO?|PGF&T=
z$Z)}2+MN!F6T7yk<DMK|)K@{Cf+9=Kn9d!U;L$L_V1}v1K&-Q~3Uu3<dG<Om3D8bd
z?>^sU31I@hth}m@`ZN4nH}V<?*wDk=@+l)JqKXO?K9-xE8+=uQY4wVh0sim53KsAl
z6_3wxvB7oI#{HE*95WOwDu;SL3nZTwY(3;+^8?6#U_79K$IJS39(id^ebm$;HjX@h
zL+~wW!4JcjY%|QmRq4H#mw4_NFLo~5G>Bg-HtT4mfkrL>;Itg{(T+Ppnk5G)%hLX9
z`?4&q5RO-O>vPqn!NukueCxwsca~L}1pClF<P2Yqb?1L^Ig=H7-moWN|LJz*C1EzA
zS}GUX53@yf_sB{tGKo9^HxXL^#=vdW#zb-11P{G0IdJY!jztVIa^#o5g#QFY8jk5p
zPu3W01UI}5nuY?dmuLrAm)Lz+N&WM%Rqu3nduWZc-+pi;DcwkkS)jgpz0rDT|HP*?
z=t_(bMH(&wpC}5{(8hxTTKweOk|M#l3rxVLk-V<8tze3ca@O27FUHJTwXC{@lL}+0
zgs>e~wt^~#-mr=KXyu)H?|bGQ`P)N=r}<g!mIrc{l2Zj08isRAzYMLenGGZe{!S}x
z@+4G9$aP)9uQ)25tn=5`0#_japWE%+j&vz#kue2VsLtW@?oatE)h1atqcn|e9|s=q
zW&PfHOfRpN>yy!5ELbV-Pzx@jE?iEiH1OUh|Lq8Fw;VR~FsuN=Vspf_OD=;cylRo@
z{14XqocBTu`#+KsJy&-}>MC38c!T(6C+b3DT-EguL2&4&W;b&2L1<|lUt9PvZX8Fh
z_{~^6bT)m@_6l`XFM&Qlv$FbEP?_uJkwcpaxuE#X)^9uQ7y75o74=}&2qKBge@d4O
z0TUXrNYvS%In}01aakU_Sc`>L_}y3=4!66SN#_0N;#?!WmWNMVqSoS()_cXID>Z9S
zi_=$qy6+|UDw^QByMw|a;}xXKfKKbb`aZ^azL9fH(-eDjF=-CJg9^jMz1b>%N|j`{
zuIU&ymDkEH_2=w!3tEx#H5%hT<C27`8WyY1hXb2N{pAD=J;I9^K>a^&g-^1m`PWX8
zVX|f=PPAH*U9{6&4lf<<if9<>2HJa?gS!Bhoxg>l1=ca9mA+&vItb5au=SpF!LPdT
z?#Akz^oA_!ZR9Y)wO;P)j?cd%d$tlfz7#x+c*G(Aq^I|}0D*EoP>&5?RJ$nU-NBK8
z|NOcP_7-$DqlnVfqxrtER3_?EO#oqSJ3zBQ<Yk67F*|Y~ESr@=2JC3u^&)UJ9H3JU
z$Df`5cRTnE7ns9{KG`%}gz3MGVc&l)$=_rJ|FO7PB7n{FM$6*uKl=Z_hY*ffckKV*
zM)+RntF3wncvcaY74CloPVYw0b}I9M?*2wgLe$r9EJV{J(~L{H&}JRs*|ExknJ;3q
z4Qz)*G}Jg3M9o|*jg7((1k;}8FmAjQ1SGf5qnb;~H!<;p6p$`}A^_h=n!Dt<BT!Gg
z=ID6rJXDh9E94}9wZz+Gw%n?0qjfg2$_i@8gP+WYbC7&piJMs=`;b>(W@7GeARs5i
z6@Kp05VPp(v}bRl(dI<;9Bu5+1ltZZi$F$*an4pbRLFAks9@hP80yr_2Ld6uzdjkc
z)XGZ1f$iQ8vW;i_h^uSz%p+>*`7Zgd@srOyGT&#qt)J;@KDh3;=9424k~C+o;nOx-
zz0GN?`=(dY3J2uIT8aK+B*peom;^ovv16pEH{I*2kU#X_Gh2CnffN8`)O#N#rOuvJ
z;6`FctH8}S^N584HwXBw91|m0pOQTs942b=xVNccy-o^yZ1-|mH#F!#Dia%_dj-{v
zAQ~3(79rJCHbxiv(zWJ;_r=hcMlGI_NmIjCqzcbAT3>!YQn<xu_(&4s9b{X>!{RM@
z4SU|@_cz<-63{$inhun%?D+ms*UAU@++jHEfc<!Y1`Ur5Qrpnx1+Kn5+Nmt)8j_k5
z>-InBBXe3w0NdzfKOd%qZ^zm{-oQMoWD=mT`uhgNg&Keq#ds2T21<D39C*-hyQPn@
zFH~48EaG6gWd?pcavCfaE28BBk5DZDPe~q5Hs>pV1nM45fXoG-+qthiPP_&=;a@F5
z*etX8W7b<2M5OsUril?Jz)>z8BRnWv`JS^B*(K!ruKG7U#Dx}ziEP<dWck!eg6(s8
z{;K}z3u==MkP-n<Ui<=!UtlCeq!PbEgpu|EK4D{oKQ}|ShWI!w#1x7ZwLTz<koM>@
zH}-Y0-&m+fAxFKX9~>~rtsbhx^lI!6k1A*DaysTf)&pWbfd<7)_aF<#sYl%aYSL3T
zS$dSc8Bd6Nh11m_%a+STsl{;@X6D3(unwb6O*k)mqFEs&n-ukMQ;!jdf6`7spWz=F
zK$~1|ihmA&LwEavMHLGvHTA8Kek`OhkEfhZLIU1FU$6gW5(`J<JmFGvfVAsMzA2f7
zi@-MWR$qdPl=;-1{MiN~u}8q+<MT^6-stWR(`*grS^<-+!XWR7#oMkfK3FkiXZgIt
z#$q_5LEmw}TIMb8wlg?P{NXXnESTbK196@bGyE5FP;z!h)dKL0@QUbfIUz$*{O(cI
z`3s|AAm!5aGJD0}{zL(PCdm(j8Q(RjCPhk9^4@4t8sFpkrQBrqV87{uqi(3g;Y?aK
zXBo0bLlAv{5(dE8+MuespDBReR<<Gl^afuNFXmw8AI{3*E!j&Db4(WKwIe$hB@$^x
zRR37AY2BDSJ|s+waY=Z#C(2~WG;7-~JQ_LrqN8Y&msA|!hOqdogVg&CKyGPDUaLqE
z+^6W@vo7<-e9J)bqQ_#QDu~7?d@J3tF!)5Off$dc*2mWDjv{-&9aEr8%y#HwU#SF3
z`WrYioSEWW%GO{XHCRN2>Enr6*Vd$;RJt?{{_d%K%13Q3*#%;l1{zK8A1qwnO}I@R
zpYX8*3m4mz1Gu;&*9z@aO{_l21I!VisSii7d?o;kbIR*a)*t<RWxdB9BUaApMyO8V
zo97;+#aQ8b%P!!sHFd(7^#U4x^_{qrVQMygt~%NYV7m2SWK6jS*GrB;1iH)ZF_J<Z
zPs~aG=iYFeQ12yVW^nu)1BQ3D#_MDVUy^yvKK@Jtp;$ZfL)CEN4%HrGG#ucvWrp9f
z9rQ|yHdkGu7|6kaCA#SMDnf&0mv3;xG6o!CPKd6Q_K(iwgHfHDk!7_EccUKhvgskX
zI`pd;>YvpSF&2U;({2*XPy|r}!@Bf6VD2ks-a|W?s@$ek1~0t7<o)Ue)~lHb9C}<&
zaHA}K^|4Lv+}&X1%6%`>t#FXP<J&{$1KOFisq`7KN%f|JAk$|cW*|1^#nnX*+_sz`
zlewzRHwz}fut|AJKK(`?$o9nm5$C`VN#($yoQkh~a0k<63E20MgV}`uF3P0x>)av)
zc5WF#%8V(XcbfmpE3uwnwJUg~kU<~<*vRBr63)zyU`5aCU6^Kp0IH(KOon<Jp)-$^
z&V-e<7>DD5EdDLO+i&shZZAe{S@m@0XM$JW%_s#{aVeQ?GKVB|&Do_Bb!gf2wGX^d
zV<4tVM!mM;$lvJ3Z(2wng~@yJfvA^>>0X4SM+Z;CRzf`+p`I1S30}35MDv3^{ND|_
zm}{Sbn&``mmv3y}2Cp0P<sei61|5?#+R5qK&=W)8Y<#gc%>085$alcm253P*{!UN&
zOfXl{NL)$B<rpD{G)9RA27*E<r`Lrb8;9_$-SWcatuRmlonH}<85d4OaDK+60MP5o
z)uK&opko8fXzNt-%TTuQ5rKqQkEc}l2e%S);(O9#c%Vi|Q`^;-Fw-A}nL+XI{_m*f
zB2P%ggE5dLq4sYyb2gBc()_t<Pv<$yfGd=~TdQ%%Q4zj~oLJD34YFvnWvF0g6qs$!
za}C`K*hC2N<!Px^Af!A>;~;VJm+|<$4nOz*h4BdIx|5&ZKdWMe>@m8Jv25R#8Hm3V
zFXv3xu+RVkwS0M+MOna9E3ko8@S~kdMBB0w&#hE?l$s0w!zELxAn-J&utQq-zD;3&
z|B=|d$DgnZK_wtH8!BG6$A~=FB;V&{5&Fp90$J_id_to1sFwP&mY%`?o)<^-`<^C8
zV4x8-=hr^+KZ5lGu2|<5M94XSd8{b;WBq#3Cdv6ir<6Eb3M`o(Fn@rQg%i*JR6S2<
zIc$Qo`JyE!C+^P6(q|@>OWrp6P!G?~n*n1H=WI39Z_2|M*I#BJchaJy5a=Ehc1DSO
z@|O~6eB#JOAUP7$6nu|?KRNuHRvI4|b@lgr6;^;Ev3@a8N{N$8VG0ca+y<;4Dg6lS
zIhuC}(Rx5~^!VjdQCokbP$07%T>?w6koir1ZO#>SgSC?!@A!|XQ5LCmsX=Z`5cTok
z`OE_dPWANx^iSh)nHe)qjlNI?ke!&>4h=IH)t?M*o2z(uIuwExwO+dA-Ugma0!i`I
zadDK**R<pV0Cn<+?KnScN~y#o<OhJ-a;u%L?#e@%2es3|esj~_0mqf1vO207T-TV-
zytedBSCZa8`f#6f`Jzfu={au?8Vd`f;poo?zfv^L9i(Umr}zBn-9lS`Gff3rpdV-f
zg=PW^vGQVhkzmV_dLCoomV!$Pj3(G^taE-@Vh3^%oStDir|A9kj?|QrxqXS<yi3KB
zSP~OWv@Xp>R?5SJRSmr1{A9f+TR*J%0!jJnM?#YvAQZ=;*)1(a+duAb8gLeE5B9UI
zh$3HT90&BEGQou*YOJ~bx$j95;WNqI7vIzV<pOYPo4>A(<s-2Jlrny}{M%cw1&cN%
zJ+Pdo#JiAHA>n^_SI(}^0?rZet93wk`?ig&a5SR-{xJ?T-22P_^;O*W-Ty!4?)v8`
z0AGTIrH=pXo!E~2`|SldN1oc-z|QUz{r7+H*&h)8*W+ine<JpV%nudRrT^V|0o-r=
zrvHBYtcmA3KqC8o53&ANlV|_wmHO8Ozywo4(Ca$Z^=Csho=q$*E@De}3%VXTGTePD
zudtNYSxa10Ts-7SE^hLPo(~C%vKs4xx_%}6290lZf3&g%J-Du(Ffw!ZLqPAq00!^E
zwa$^r<9PZ}z5GA{K|!O9?1J9jUK;3a{+<^;t&w~k;ps_9bvt8jr}g219xNc4kimZf
z81fmlfOBU73Try%DoQwQyv3%9Gf!~YS=cVmQqw~4K#_xt4#Tejhe0p9xLCl-m_g7y
zkARf!ZQ7XY;R<YT!Ur>4W_zzLt<rl0|MYU%;*ZQ*S3@>-HEycb6@ePR#va_%H<a>(
zDksQb<A@7{g;d)oB{j$GtCgE5rD#yCQC{-;(_+Qf|7#+*tta{m-QRYytz25MtW9iD
zHvn0E*I3eUp1@dE@Yuf2K3?=#1yw<_VRSzVYJ!3;RU9m4u7IMtw@uwZN%uS-CU|qa
z(`<CW@9$4j;ICAdq&e(iF!YZXnRj#36I{_C*`48<W0Qz^cd7zy`y^P36+j<Etxf^{
zM?%%AeQvAk95z)9HuD@77y372R6L2i>#pw~(I+wpS>D%KK2V@9bOzjDM*H5UCt30?
zV@Qjbh3n6_9D|<|wuW5Mi9KESk!T~8T`phBiH<+dCKq)7At>?Q2uPT2gZ{MK1<oTy
zreQ9phhrtGE{p1EP}}72BZFs6DR8Inw_V{oL&htg^p29_Tn`ptlYX2Bg{?a}PDIRd
z<+L9`^umQ2SVclY{r|bxMa8-9&G(`1zKUd0>Zg9rc*mc!?J<$}R_n2O0!8K%J(YI1
z!w6OMyOL!dmW=iG_oIEpw^*@k+l{;SXw&p)%k!oCvoSoSQM#q?la6Qj-10$9Hdd>B
zM6B9;)J3@LZ7A|KwR@KZ)7P}rT|H1`JsRT&3djnFXc>=z?e1|-b?7FZpUl6FgeW4t
z$Sgjr3%-b%6W@IZq(?L2@f6Mcn~3{)kQ0lmYaixBND0}(6$7ghF&3cad~B@JA*MO{
zN)lg7O=BRqc>&54r@0*TB%lH~DBnJP<Oj7Z<6uZ7O4|g)%Puf}N-T}<-v*a_OCTF?
z`L&hH64Z8sUKEeT_zi*&j`p;qC30=&&65ufyKgcD>NtNL3KG{4E-ooC-ud<+((DMI
z!213rIYmXquI0=*k5>Y+Qb`!YBidtqsib(y6XEhcSyc?tvpa)^>teiX6)VUX9YBoh
zA0CcvFMtPNiIpf<z8%(54u$O`;n7Mb+nS(`H;2S&8gJap269#$DsIVD_vU<|*UHhW
z5yu?fxan*)`hpxC1ULE|$^$aV{JV~XQ&ZtOwQD3bHZv_Ahn)@efZER4(=Y)To}n&_
zo=gnFhAlKbdxU_<^C37m{`tTMomb+3?HWzmxQ;5~(fP2%MLLo0D!N{KJ{n3<l*JqB
zk($^X2`XoeXI3rgtQ7#V+1r{WPsllk5qpi<{OE~%Iy-0!C@^N}!w8FFgwH4K1X_Lg
zMU$sSVkH-BdIaP&Hah1V%9~y{YADT;NA019TsA2ES_T8f{fr`dBuLcef71hA^|MCq
zYrY`^3}btZZH|nKtmEnWF?DugJB8u*LBTks_@b;vqfYPC#u#7dvysXLWvja*QZ%Wc
zX7^Z-$ZF}h*^bVXgeWLr8$I>7E_)pLMIVutmew|<40z;&ZTwf2YBpN9@3kHvGR8nj
z#^@=T)&=7GSdy&gi@R$sBYG%VDZQdoz|<dz2Q1w-10DN6IjNXzK%$Iz7;l)Qt32|}
zW?Hf7JNldD?o*Ln&%njs$p)|La^p8r@|B<Sp@SNQi9=hy?WEl`RnvY}fb}hbAM`gt
zD3EMxywl`g%tY!}q9oj^M*s&p`qL|k$K@2=xqskdd*hzb&<k68zoiuDML-cXovu-0
zbU$GJMmS+PvH4hDc69sv&+^Xf|Es;Pe5h*M-ln^|*>snLG;C>6NeM|wl~!WYC7p_-
zbcaZXbfbcFcZgEbo$uV|o^y}q{O+Id`h^efz4n@O%{Af~&v*ti6^?-9{H|qIW}6$J
z#x}Jx)My;r!VbQ$3G#VQ1Zg=g(=SBlqh1yk6@B5(v6BW|;h^xO<P$IieHIKr&%o6=
z!{*hm?D9Fvp|=bmZCE-EB*NNZmw}F$GcI25xc%fI@5f&_*2Xe|p}SDE(6Z^V^6mmc
zx-)Ag@sXrP<^%HG<yEbA4pg!$gh%y}PfQSbXg%rAKP%amHJ^O#*Gao*$Nq+qev~!n
z(|ly@JCmN_+;qEyF7ugY_eK)6*O_MH7|z5-B{z&ER>$NsiT2tMy#);QH19}T*k!vl
z>XA@>2ogJ-W@rlr#<qXhZv1)#OjrjvVlCU%d+707w>P`D+q=HEjow$Q^n)ly9f#*M
z4*pkrFPi$~cK&v>oZJM4w&;!fzBSr>2u6kL<frLxc}1KVZa||4r-R0Pa3-75S*tQW
zt$6j)(tCJo!5u_AyTYlZRCfu?hZwvgSF`l@A}nNXzO%`EL1U^Uj_?{<dNYs8B-EDc
zVQ@zN<)*t-qzqx;;obRnxDb>^I8!?yCfV&6?`-$>#=#R%&<_%D`3n8QHXRa;T)#94
zQCJzqZF=2apAK4?kT+mGKvjX}!VQ@FKuTG<h|hG*P0gh7d$%jp*{zLcqRUZ%Vgy4q
z4$*{TWnGzgE|c3sncFz>$f5n*OdU~--0Kp$qe9c$4ff5aS*z9R{2hzI2iJfeK6-T+
zV<O$ss|sncPKAlZ8T^H)LI{x>hK7TDMT3xuJmlBm+xWw<Yr{;pwQFkv!>D{c0qy!l
zal{&AgWP)_i?D@OzBLrBb<Rf2<x+<)6wENS(itr)Yv_iOZ$L+W!o!GHo`EMNxe;kg
zjP_s}a=rmeKyErJR5QI}^=V<mC$x~U?iOjT#myAD1(S073b*TQx^08Lb%BIU9hv7N
z%zz_ol@I!nd~XgvB=U9~<wlrCi?M1wnm@_@xP1rL<LSCn$xAF5Lb*EQXS2&6cN!co
zXC_;$8c?B!kMW}FAc^<dqs=TsN1ewVM2iyT`5zu<&iV%AHcZ;_7o*QV$u$3!aeHOW
zx<rgJI%aTh>+^PY1n<|eINt2CPd`#j1zo{AW9_NIu1A)8v%@#_sKRYNI$I>?<$5hH
z>WFh+_)Ov3gCg@SnVVIamz#|==WiqEs;HQw7M*}owT>2)64$w$&~mT#O(T9cW^Cef
zzSi$V@u9%AY(WM}CFA3j|7~M}-A-v$c@8vTkfG>|p~1T>F2Cxw5Peb_L$h3Jb_21Y
z$4}C*yz6IKw<S>KJ1VSy`aM7wxyaKa7i+LKLiAe_K_yiuXKZN08v!$nXSeIIQu37o
zZnj!)Y<`fhn^GDf_#DJ#R2w)nj|1J@^nQzLsho%+cqdG|nOHMcHT~^^myvur7>AvI
zg-U)+<qIX3Ye>TEd56JkRsHljobJKk&S!7+^DzY(WvXqB`Od(lkbJJp?8E?KD(alO
zD!#30&Lb+Wn?(gy0e9LPWG<%%U-op1-d-IFTD5ycL9+}9N!06C!nrDupWYmo`F_Jx
zUf11-;A;^j_QT*+4zyce(P-vB(tPpkSvi>eE>ZOjG!a0o`9GVc)wiIxhd^!{F!1a@
z4VB_RNA`0s9+$H!V<mh!U%dIXct=VnU;}HL9l{`(XF3;a+R_un?)>1`&A0soyLoHH
z1X=<qk^~b{9e<dakZ)t9a}-@sB|@PMka#8&EY{#M=#PQ4_wJi2<@hzNa(H6QtFGs3
ziRf{HcH-;ba#poL3o(aY{z=&aCseas!5@-FP12;Uxwp383(Sgnz*>VR{!gvG^GVJ5
z(!Qqu$VNF$pJt-bJ-Sd!{G$g69+MyG%90~Duph?po<-zU4Ty8S@-I1W*c)$NfR2=P
zQ}sf;{0aL<`HrkpofKI=XL;_$A8l2mwc>cFyl!;c($zUO#yIW4sLjK!a-8(KZlJ|u
zM(J}o{n(~lf466&Aj8<1x**N<$qzd3Te66q+A=8Lv5lALm&bK=C@QPZ*!{HFi%tV;
zvkdg!IcF7N_eq`32{zUzd;&yh!P709#&*+?X;kCOOux4tM(cSd<;S9vcU#ZDO{b&W
z95`KkM0g~M+I(M#M|9xG9Spw}YsYwqt$Fr^DP>}^wT7!kMruchCKBVI)Ggjb%CF@p
zkI#~g3r2>g{Eo?FxweS5$SoKx;h67)^z*P&X}d*yhq+^6ora_Ru)7js@4cT`r3E6V
zpw+|LvwmGNXMrJ)x%KACrbx54{Z2dxy)?vT!|kS9TffOLXxsMM{v`knV&sURJybcj
zpz)v(G`X?$Q>bPe<jN*jv3u7(R{r|otFIgd7Co^TwOIvpD2SNHei-&yL$2d;vUMEm
ziMrREw9MB?K48Wzipk~C$8=KYNSkLj67my8a<$Ex%mS`=Z;wivc`vTNdj@6HFY}cE
z$udJ^1GLtm5?y6cNS5Vy9xYUgF+q7KU2{hr=d(|cja_9_KB3SY54{H&(o#vJeW#8H
z_fRoTlg>aNPy+7AYfr`3*u|y^_Awkv#bY-|7AZS#(?3^&)+{UDrJB@e!I~||lwPz~
zkzH_{$5Zy9ERizP7>{KX6{%b-mYQQo(a$&b=9~%6ACm;FAN|nb<H-@wcb3pnQ`;G;
zys3HX%adoRjLZhuz)RbgP1Z8S<U1nMKcgxEU+6!1sd|8)PrLTrO~FA)!B>~}V5GPE
z84bcY1>gB{Ol|^mmjZX>@Zb7896uxVD2iy9czo*MlDNBL#;Vuac)B-*-GG``AV4<O
z+%%SJ5{+$y62$kpx)g-TdA;qTfu^q$c0Yy$-x!baZFq1LfpIg7x=RZAH!YSWA8)X>
z&&b~=<92<|aFpWg+Y}~ZKAysi*@ws^uLl?*Qb*|$7&f7A9sLB(Osn|<T6oW0`@MP$
z63g+`n}{B3br98(2x&w3CG|?uQ*xlPq-R57_w3~BKC!nhBPg&E?_}%=6w;BIT&<7?
z>Z2}RXQp^4#1qBtmBoWY6d+-4HV(op?WhJXi38u~>dvvhy^>2{ZaBBNdMfXov3T$A
zpWnF8R|Z}OHwM@|;UKTwjLM8SUefJ%l)XoOhstK9huWbZZ;X6fwbjCANVWN$b46Y|
z>bR8T8H=c1ZGoH11|FKgSY;61!*vHaygb%hGCxzPTO_Xa3A+B>jpn<)$eX*p*C(@l
zhnlBuVz)bPt$lMIMB7SGY?oc%LC*y+%5L7%4H1)6v5s`(gytAyzjvlk{%K!xt7A;e
z&cT)mAG;m}3iH>s%)_7_*C80|a_#~J*3r5P7+Y^WlVe||eu*=H`Qnw25eH=Kz4qq*
zF5l1DBdZK<10R5ntlcd=BfIuoB^lQF4#)--E6GpM|2!A56o}U=(}}&7Xb3)#%y%Y?
z<HXP{RK&0)sj2*fBan4S3yO4u8Ntb)bfqLG<jPZd>yJbq@Eo?|`;_<6;kA2soSss)
z{9<l0JbUH1>j`^OG1!en6ZBQXmO3aO{j_H*TXz+Tay|h=^f5Zy+UnQ?Gq`>86T{FZ
za5T>*;!U3zE<E<RzE97L+AtQ!s(hhv^OdWtU%HeziLR;SG{$3Q{RDBoXJk=3?D|-{
z44QsjOD=8P7tfc*1yAJq?F^{+9|tZ3_rAnD$VLcCe~@DkDHL1iA+j-rA3bUMX`uzZ
z*Vk=pgNnn@m1oOD)um4QkQ2@>Kj^Vs4BT-a^<7xL?HXJA&}u~5m#!i57iLpLwCC$S
zR<?H|L@yusIM_jseeAugQNN2rgE1A8?0lok@`nn-BQ9If=SSC#I}LrH->qx!yS<Ff
zWmHsDvXbMA_Iu=yZ_utx+^)};ce@+n(Ob#T`-~miQKdXk`!=O0>a~!sf_kNfD3J1^
zQM1|!eL;F|z0*4>GHxT+b0^GTB#E+NjZqm31vQX+vqQTs_jPYlY=+OLNjubHY*fC0
zwd2Am&0a0c6LO!jv77t9#+UJ*QPFV4e@^tcgIf27eJYF1vCx}Sl;T9kbZN7sthUVO
zxFor)z=IOi?qMBlov<;F71fGFbd%$}PI!Z=c<PKn$}ZwO9^P(2IT>#MnC*U=Y3KaK
z5xq2GSa@ZX)1MLII<&2|O^4jpHxk2_*yrxAduqcNWjWYuOB2WsO{$;00bRa)ul9+#
zPq(WEPdFi2$L~%d^;y`(dl0{N*UsIBDNbQj@=rGhH;eWSvRfRn1UHsqQy+PMbf}OA
zO4+gL8IwP|gYRae8xv8F%6w#VNq>9Ro2i$4niDO~d1(~0gJaUaMWKoR=AKmKxH;=p
zr->_5^O<_lH3zI9^NsKJnLc*(nyClDdWm*R!1a0&l?TUAUeo3Tg%nmjz?P~)7sjnz
zjMXUv{9b$TY`0wQv|C}dltg<P@GTp(RS!GH7B4+Y(sS`|f4s;f!5!guOW(3M^|g{%
z<iB#KNB7!pFXdMW&+6pP-j9|YE|b{Gwb~YYo&uC3t6vowd`|^gz1SLhhGe(D(j7$h
z%k|0GjfYWc$)$TmZbUIild7k--xgf9lV5W#8fnIUAI-R__6C{7K$B2?!CQK-deFu!
zSa;}JS8AHhy9fHaiM+lwomzQCrjnxXMbMcP_hzE0G}Hc((Uxr7lS~y#hh_m2JlyT&
z>%dm{{bmfgu<<*6#%3M~O48T(GPr4+t}U81#bN<H?`-?2pyf`iD)5BTzUuJj;NW?M
zuyxR6%QMOFrKwiXG3+5(_e}VfibJ%OWJY=v4a`94YO6o>EW7bF-4rQ&Ci18BH_$g=
zN5ri!P`W`?2{c>)KwbM}(<y+&*hiZslCoMI0t$2s4Qd)-TOI0UJ4gr@@iJbB)AMb<
z-3`lI0_n@S?H5-&3n^un6J@P87fqKVom&YP`j%sS$52g3`>mx!Qi0p`49!kB{gL!=
zx7FD_)#gW_X|MtKC>?dCxl&^_HTEO<SV!sXBmLHLo1syVmfvMFc=dBYI0}=Hd7g^o
zQFp_y5}!`<7thkted76?A3T2P`{M5Ml4`x-3-ktWHp!L%x<ty{musr+VDRjVx#)$t
z4w7m$Tv=*n$_0<DQU!;&;Zj!L^FEV+Zb4{$dbE}i_4)ZhSym<W_f9`ha-`tDxcQ}b
z>K~+5Ig>)azr9GO_t&%zg7s!UI&`YJ`<XQ^5<$F6fxNRR`4KEedy62ezesrqkMmsl
z6|d8XZ`Mr6w^}d8%MN_}hHHHQ2KqCSHq)QKljG`c99TeI5bw6j8)8G-;>NS>>8h#{
zj-&$so-hgO<?`B&T^nv~(4Fmgs9D@qUkMpilaboW!)_`A?dQo6TYIQ^yc0r?y3~NS
z!M4sgGQ@BI9(p#?^5jYygIt8Q?q0LDvHMzlKP1y*1gNHKl+3eSHy2?KX`0;Rm^RM3
zX1NEQ<S0Gd{DLQQwT%A@V4>e|k|>OI>u_E>Ob$st#AY+P3Pu)4DTufN;9sA+lwwC+
z)iW_8jF1>7DaFTtkWG%0sW))_JYzZc;%cI<C0>j*;QDz>0PfvIuc{!=8Ft6LA9q{D
z8a+N8kVaBw;cnGmUre^9Q-VR>Ig`?bce@;X4&QHEeA>`xzW-to9>u$+qgjpb@1DLG
zI^Fd-Z9KW1l^`~i2(R>YQ$~6NAwXg!Ktj|`kcGT93dOi5%dnl1EsLSf_%)v;^kA~`
z!vXQvpnF)=7R1Ezos5v~Y{WM#1jr}>P(({?_RmCd2*G}P-vmc~0!u7*I`GMD=PQ7>
zlLbdd=MVc+RToTJuUj@6<+o#^?+=Tt?8-*w4G-6(?}{Py#IB1?#GlAR$S1Ig#yH4G
zT&!3|WMcPI4KS5uk%(gbP?(2^Q9vs`@t%mXwcyWzH0scf!ENT-;HS7=PCAqVrX8;_
zUF34pgtm}XWtFEtb4%N=Q}}&QQj2oCp{@QVGCNiiXZ0y_5zI5GbG><|^{B|*g~n^I
z{Zke#?qi%xxRI=Bn6E%C1DGKTIo>mR^EgTm94i>1ZJcbBLQWEbA1t^lpa6A6k!tSk
z7QZ^-9mQxG%B19cZ>y+L7*+*tf<SK7#y+e;A@_NnsVJT2c15Y7rY?DBV|<519G1cU
zj2S|g%=L!aGKka%k(mx|+BgBE?P9xs@KmK8<U$z*&1<xZ1mXMmBS%%RGq2+k6FXwZ
z3a;xs^RUaNUO}sVj6@S3_ZCCUr`buai47<L4+D#Jx)FD27Un6CgWbYS<F6+4Zcvzf
zWV!_yvhx-=ax)c%!m=rmNc3GO1b1b!8C1gwq|BZslO<csaE<YKP(PIr;8k5@+`GLE
zKQ46=OCdrD_f=O{SfvjlN;ClaqwrmaAYwXW`*-5YNSe+SfK8H>4Q;Du4=4O^%!Vgl
zVM?>xdVAv%B4Efbw1;47md~z8^QvE<CiHgyUL`xpD5U4rM#46U34j!4`tu81R&L&L
zXsy_{JdA2-AZBTa6@R0@?W~EZc-0t<@LoXxDNrI!KiY_&b%vv%QYnx+C*>q1jF2Ma
zx`yBs$q6$d%1q8wl3cLNv}@JQpD;C?aMrHQh?hu#3^uIJW<+O1GH5nmU)s<*#oOaW
zwfnkaKb-{Ew~MpMD!etLxF@KtU4<>}U4)^Nt*v|AXCJwqxRs=GqfpE^vYoX^!GS`9
zmtF1)?hB74-8BV}@I#2zBrBo{U^A?j{2aV$95au)ZLSt1P|&PztIjM=dL1sOq&7MD
zit~1fm+*<~)t?u0&*4jitIwY9_7mR!`_S^!nE8oam<KmK>vy%Hp_p*OMA2{OKha$F
z6LDg(&L>7D0@L96Mx>o^dt=)uxT!=d=*&86XYHv8?om;O!zlSB!Ykw@iXfFg(>;Gw
zEmZJG@+Em&N|tB(&`9)*P8c|(4Yo18%yq)n+a%CRJ#eTRlY4!sY8_;5;uNtDuM_-C
zMo)SitSjE5htEfJM^1={$&7Yp+GWz{uq>)8LobGB(60fGJx=*trijJre2MBiqAilp
zU%?h!0r`n#SjugwrWYHv(dSnTT*y5f=?oYGu*h5}5w%gTAkzX`5l6DS8ul)?lPG~D
z!RVe}(p?AR`Bzikr}H)oXxtJ@&5!|%*=IsbFS^%I9v`Fo)~mx}S`XsOzN<#n$E@oU
z>;_qfC-xj|jJ}s1E$%^8-HDgp=U1_ND@s=j6W^0qJ*5n^$^ZE@Dv=;vW$I3mD9P6T
zEF<sd>gS^~*F4=90D4uMe@k=0?g8ADy=MZ#t{rDMUW(YOALrBfd)Q7CSM@2^&~TTz
z6IvuS%dImE$9D<yuCqLDmJeb+@ge?YUOeIuc;|;@tqvlDUT?e&ykp*}w@hD2;ZO07
z;+%r2di<GA(}VYxn~-9Drbt2>Y^Vrd(_Y6FSI@Tl&otey*i6QY3uLQgPZ>R0%wVr#
zq9Q+?%(Sa3cKJ)qvZy9}@7HVaw~-pmlK50}w{}4?WJ=BusowO8QK+3UO1R@}FSD%#
z#p#71*)9a@QE7B@<3*<gQboWb%4I0Soa*%A<M`EV9@xR`cd0<i)`yb1Poif1_}d%R
zJg<JhPTfuV7RZfBpVQ!`lLw#=4vk!*5M1o}gegE7->w%J+?)|`hu=bbJGc?B%t!@k
zDjwGT^<pcVLWtYWz@6IIKzaA)mKL?YeFbtdX^s1@=yD=<$uN~O-7uE~0_@&-=*#bh
zR|Y8VF0{ApHnS^J$Yp29yz<ej$IB0*UkX6Q9+BHo{qx8Ji%~7-hY*Ca&~@mq<`gX4
z{4SEbizJlgn=4_=r+7aUk8}hPbxuWoBwLp5&~#riOHb`scGY71N%LzKo2roxalwRF
zdT_(@r{x!Cl}!y7;%AxW{QRih!y1csgIg?F*hVLP9#R{sv<XV91g#D5>xLoJszufi
zhWJIjF16TbM0s#I?UwOSm5GUJFY4}s-YdcHW}3G9GCD}{Pky_63b84g%jQ^-J5{&d
z*2$~`z8A(!2t)%1qAZ1^bKy{`++T{~5rUxlvD|y4!-0zW%SavOI>T^XhT6t3;hyD6
zSD4H3IsH#ifYl&>TKh4;<hN_TKw(u&Pqj{E&&Oc#l+}oYv@tuee*SFw2Hb570+heP
z9b6RbFIx7)!B2~B7~r~Y=?aNT9Ty6WXseGXRImKsh8OFLm+DQH{$Y#ZTLLR1hODt|
zAYwM1ECu5Kpu`E~gR<h@q1bE3O?6JTAS?$TYF0wXDj!DSrc{djHR3s#7oSeb{3L4}
ze{-jL^wDyHfjwql0#8X48F~J6l{LEdt<I>zIF*yqe{Ft~62{&x%guaOFC!x6(L*Gs
z6;cB>9&Y_!*2*J%B;M(D`oW?j_AeRzPkOTV+VGEmymuHlJWsIi5C8As`p<E=pzyb<
z#T6l_B@lU&=S!d-3;$-G1|Ge%q}R4Nz0IMVyh4{&$2K+3a&_f@m-vUjSHdvuGaWUZ
z%|#_dqQ)@zJmQPNu6&eXJwBogbWFa<&V^<dptKu<+A}d7Y{_4wJ^9II+t+{nzDFp+
zK4baQa?5Z;ZuoAO`*UAM_yx${dKmLWCD4BdYEwpuS`s3%(F@e}^$grks@dsYa{c%0
z{qZa_2MOD(+Fjd&ImpZuO%K@>NxmG#?4s3dgQbk-bXmfcB$mO2O8Z)%fgl+7s6QN#
zIGmea?Tx`V?}_}vr0mup$oK9)-t@0<2FPOqu$WB}*srHR#pU7Z(wm2Y2njurg$OV{
z;Vj6o>XK)rflsD<n9tF$Qs>qAVJD~n8%;_<pDHKHr7uK@%&<pN-yNvYb$NXS9@1ae
z1@FxfivOgsCr^y~DbOkk&Qnbk*?yT9uY*O*_DHD4T2B0WEAx*HFrwo51OtVzc}F1T
z5cD&{x8<S1)e=3ZE?x<~{QjB$#aQ8$pjlTazwK1H$g$MlZ{&Y=g$pHt&xDSQ&zQy-
zwj6Y&^<Y)s))Q2do`TYAADdRh&#Q%7_!Dcjp2#CyMTK&vf||ZKIi0ch@p$mB{Sd!F
zrWnb$8NGc0HoE$j@%$E_WBHxe)f3%>n14clUypJoA!5SQCg9549lc+NTJ|Lbk#gw>
z70>*bdQnnJRts{C^5tOaTCt!0H>$GG>|5zZ-l$aigQ*JhPJq_MmGwQTv`}dTKe>{Z
zX#AosnvLb3YtdFQjS`-~=xUrb4a7xK73M|;N2IIGBb{d+SLWG@!k+tnH#zcFH39qA
z;&(hQR+j&`J6R+ajHR?F1gKY|%Y=SG7pcxh843yW#a3JiZ0>64{6UHk$LVWG56V_O
zJXa8b@^kIX{P@jEFhl%L`4L&~Pd>3JmGq$%V4MKbT>LPg49@@NbfA<=xydcvrAT5e
zgg#LJCE`|7sIzLD>dM0|VG~<1YhX%#zm$4#TP8H{K+jo#mDY(NRO_zSnd9ncJfbMV
z7P~S|Tga0&o_(c284@q<f4wN+CW<jANOL*g)-wI$H2ra~WS=8p5#?#<Yy8(j{P(<p
zudyp@D~!1Qej9)8FZ)CAID|O4{tAbF+jezQMAWci<(cSz-2Q()kcY{x{7%tQ;a}Sf
zzvE)YOo#@l%Iv?E4gX%I5V+z<;Rp8rar=+K11V;FF7baBjfe@9`ym=s@udGc6Y%vF
zh679SnAz@cyZHC2N5B>D=Tv6@kK2Dts2*Dwp8M;+AO8D>)KkC}pKI&<%NYD|`<!5l
zAHS)l{U58oPplrx9`*I##udKf+6rKc|Nle#`z`qY5ADyq?XTkp^u`z-3tRm2?8`1P
z?47N~gmg!c|3rRb8UMHgWD-Umj%q-547QP%_~Ll+wB<CYw05TWq&Ykd$d5_P0rkR~
ze35C3IDX(AX58GE)q@ds33s=U@g)i1WRr4>FK_n%QX2eN*GL%1KG9<Up4uZl-|J%_
z=(bG|j7K|T9|trKv3Hve9~oPB;@-u{QH**~*TUBL2pr-q96RXm=EXa@t+Z}|>c?P)
z3H2lhv&nUU`J6eml7I_Y)dQdnDcG2s!uh>@!}Fr8Rbg7YMWEK^2rTtvF$l(-u!w}I
zcHS}UownXe!G-p4LG~&$qis@as}I~2`HS8%0EY2fetlOC$ZEpgF@PO2vIlC}Y^^^8
zGtMIe<fDvFf3Yh&(;FBh{C&D&WiuEEtbJyw2?V<m4PUCHQB({oQU}F75-%zu1YS3N
zixvs|v6GF>j--<kPX+9@X2Dqd?PCxh;KCDly$UmhBICW(BoM*YU+y$^J}*ck+q>8p
zw9J$=M-98VA`^H0-2!OKo9@hg@~2$Uu0I<JktTuT<Zy=^?opAP4%q`wZ5-#g63tUB
zvLsx3Zw?w-zxA<kMkwU0a=(W<1XpAV(uRPKnSgo?wEaGgTk7|o|IDC&B)0YrFVS&~
zcQa4|d5w}w`KUdyk3r?{2wpjp4Ra1)CCin4yd}g;wNqvhjvbh6>y*QB_#G|c%zlnK
zBuoSY(x;yWgT{4Dn!g=~(7aUM;W>D}c$M!OeZ~m~<T?nIXfz~#JlZAT?^E1$tkeB{
zT}PNm6mALv0SHNOc$JjtqKo(?!5ai8rH=s3JQH5rsb7s=21=H8?279Cd6bvG>P#T4
z@=pjv&{9s7J$$b%O`zGWk{rDpe;Zebe>mnGP~m$Da3YuVKfnReo3qu<Scc}U2T}WB
zp4T>I%@cWztjf!WgEI8SUi;m$?~ORB6;22PI1)H0ng*pWZH;=~-kBubiWNp8LwT_s
zHZp#r$B4+3@F2I3r9m8|2dz>~fa6qS#rhzLAX@B4lIHHFlFY?$`LEj9iH~d3aB@`5
zZu6&6qo$e0f{)Ux)xRc9e49sG#}}@-;ueA~|KWjTV+h;o8$nfn^J3OA(Wv8%5*?+^
zlcMt`7Qr!Wa^C(jCSfzDA7XX{IV8IgdY^NlR6SOx$R}VRFV>*s;e&KB2CEB*_iDY<
zY6nnV+=~2a^$TJ)G_VL1BFmo*XNxlgL^1$IkLTHECFzkpY2W<_lh^Pd%;6#~<I19K
z-5c-?IzVnjLB_2Y8*$gBv_|I)RMx2BfgPN?w3bZy+4P=a0GwI63|=JfGoW{xvZ&OA
zKB8V(y`+_Kp<QIlh!2D-P02DUnywD|Y7AI{;8_$s$STVuO)Vt_fL0-3S6(sPrcnLD
zV2>0|fTOAYvU%MjFMPYVzBso_DD<O6&R4euS65inPl0!MR4ecF={LcL*n<V}mEbi0
z*nqAI&mHEf#H~!a);(@LO<Nu}7))AZa*|-@j%fG9a*Amyk~~Z@hRswz_itq=B|#0-
zd8V)XyD>rbYqP7HPbkY$b3kRHHFp7XIX0F>E@4!rnOgkOvt0f6dK<=U1{H1qQRbB_
zj%jU;-VLbTp-KA!`co%>^9b>zj)vetnOV)%C7d*7jTNS-SwTdH4Rl-kyTd_wr8tV+
z|E>a!pbI9QvWI4Ecct^jNK+b&hA$Wh&a$~wo$b?{9uLXkqxL8@A)7f1aq=@#ccr;4
zOs_k`R-^77P+;Lp?#Z@jBWi>O5D@jI8Go)HT~&w)8aPQj@yCD`PYFR@c%(}!v-SNX
z&N!17UGhU78O=M1Sh(}vu2!E{Grr+${(dOKXn|Up(TH+VQ5yHQ_W6Qag06#<c~|Bc
z-hSiiC7^^6(0LyXBjruBiX=)KIP`J-BX0ATezXKAZ${JtX7H?LuM>Y)J#u}(0PGo)
zK=u@y8J02T@F7Gh#&jR(ZkCIfQx6IsoQ3*JQr8fdbz-!D5#7|`gcXk(q<*Hp+U&yU
zO3QW(fcRP8&+$oik-prn0{^R!g`smqj@upGmF1l3)XH_;EwYCKE$0X)?6Q9*#47pF
zbn!*ICo2z3qWTF8-xV-kXRHD9sZ?Zm?ZRkzJk(kVxp;+={PGMuAmcC!XrqTR$;O4z
zKOXnHHlDgUqK|-s)X-?2e*+Tbj}jB_P2iEW;}8@*2re+U46mfNZ2RY7a|eb37VWtz
z9J_*KKINuZw|Ep9EP!^^D|53iyNxize1pV$G3R?kRDZhQ*$EPhLyw9y=e`H7+!)yJ
zZ7Wsu08vx!=zi$W6_Hw1b#){T&BQGVz6$XbO{^v<3RS96KM{h6y|1A`d7Rw)e%(V^
za)&M#a6e)91?L(Z0rzE~)c7?q>qFgw$9W!1cPUDiQou~UEnb>T)2wGC{)Pe{RV_-}
z@F@q5F#&%;m!)VCM*9uW=}XPvyUfUj3{#uko35zUE#qq1Guw=^PF=uv(q3uo-Us@d
zKU&cjTzu$D$xy<?7jw>#?Q0meegkVjnBbj=AUFyN3a{QH5?Ldfm+?`+y4)amaw#o@
zbsp026n3&g$umeO8f7Vx4&%eVnmIW^Qd|;o#n6xMU*bB?_E$UIS`O2mls`c7WHhYS
zRg9sdjRuU+SgONso4ddOEw>@#e~^e;?}QQHt(@(*D5GL_g$pTm08Ri6obNJjDV}u;
zYUE;uF5{0s!Juq&hwy|KL=EZ@g9PSYj_LZxicZwU>oF%<b=SfZdQ9awtUOJ+aM-fN
zkd3Oc=~e%nk_J=hqHQa?ay5BGu0FN*GECRK+j=@~u%7TPii~6lU_d{)#1$#ll_Xod
zg?Z(D$Z7~>YN7xz*KdB$)RgcUv!Y{27xObq{d;bj?T!z-L#z3a811XRiPXq_*kEHt
z4x&IsnT$Xk4AYJb?VY}pqxvCIkKZ|LYv=<(+X0Z{<7QDDa;=h$SnY|zhJm&hNxy1>
z*teINkV?}jVw_41=$@&fIGJW$?UUk7zNk{@16(slAx>B^f8YQ*ejLCHg^DMRC<Z0S
z>dTpPWfIa?P~R7)J24Gh1@Bpe2bkuFM@5q!2glzD%I0-@fK{l0Oc(cCfZ~U8aTjr7
zxF8rMnH|iP-!yJ6!Uw#|^MkMxv<l$i#?pHF`~nD52bx?-HZuCLHaxCGUztpvHJYqf
zCG)F)z@I#^x+df{<H#3$s1>$C_!bLqKc$|9h0D9U<AY}j2ef39@A$(q<&yWyd6&tx
zKGl`8DWKq;4=-$#d9S>Uu72csxp5h;(Kq6MqvsJ$Zd>fpqcFgYy!ikJe}-cdSFSSA
z3Ui07f<R#OpST5%B+^x5Ms@m!Lu+@GkGB;B+;96)yJXg*IyA$hv5e8+Qj<AXT8Vl%
z@5c64B=)H^+x^YE1FV&SF8fOeZ(FggO4K*SNg=F{lv{bHvP+$CCf~kxC(m=H(STl5
zfxBN5iZ9GRsUB%(IW$S?(RGEe(7@zlci!cp{R-ozje5^QB|yv7fv)=KVzn{~Z2KVC
z_WkLl(%0-0$(m!-&(^+FXX(V(96dSxN3!VOqJn@NAc`Sij~Gn2HKbBU*$13C8C+rZ
zyFbBdMfyyoQ1%0TyPEMC3?hZqD*!@pj%t@a5~L1IUedwg+jPt4U%fr(<C`?1YL?l=
zt3Aw{mJ({n{d%)!dw!7EO5<}<l`$UR+9R!>03}e8CQ0}}U>?XKT+}P~VR50BUD{bE
z7Gi}l*>ewT#5q8kZug^|+J5l?CAmIHhQhv==VHVzhpNct+mP&Mq>m#`sE$(qk+cq-
zVy1%NPFNsd*zEN~z`ZhE>g~7_5W(9}$ZK;?a&msQ6759;Gg3~(TPyeVeo=FYZkxVv
z=I*U0*8^wC$Gi8RyW&U9d}xqKF!wrqzlZ}$*w5OQ?0;YeC}C%l3#dNvwt9YryR#9-
zmj2Ay<`-SyK3r{662^`w|K(&j&P<-hP;IaHg0i=w>eu!zQW`^#O4u*lFLd8W^{JBA
zrUNO+@K-9wNZnGVqW`W2{*f^|5VYB~=$Yxf#^$ZhbPZoax;y76M<><lS{^6SJw0@i
zqGDY-Tasus5-LC$uF67SqM4P~d?Gr@oet$vg@|wFG#_&F>A(6WEQjN)B7!^Ooxl?+
z)|JL?(2ye&@L&h<gwI2qbDNYbMj>k(acUD{Yd`g&R)guZCm@=yl>3N{@l_$$Kd)6s
zQV+xQzQ>dv0a`=OJNMnj_quM9tDlRjS|e6Q3Lik8NPh>K>l3peQealGvvVTBzYk?x
zas3@;^!HcwOCq$8g)sVZf4J?{+bV9?c`!~f>rl-@RT{NfPQoO7lD!2Rc5Sa`Tafo;
zNrT#ps4i^7Jb$^K(3}#WV%~|ei0k<!(rxQoVvP1YaDJM;=S0WAF5Y)NZVErt5Sxs<
z5O*2Gm(NvVA%f_tX4x8jFJpl;a4pHIIcSEcxtVT%pCfUfYgg*p4V`c1*GKEQ=|u%(
z-qW%!*{XxfTl<^KMKsdU(cf`?U^tOO5k7(ncg)9m!k!(_*+Zl0@EUdpmy8m39rm%_
zd#@cmA|%BpL&n$Vy(m`qSK#Ta=d;#(GNRM4x;<RTEloZTIRXa{`eBx_&(RU{>r^?5
z2_|!LL@9tLw6VKl%kX;nejAl`UXApc0S~V2y?mH)>vaRQc&1H2y!S-q((6aEHPvG~
zkH|dn?svtKb?oXw&3p627QleD*eN)ctTgYc7|*$WZDd<0icW_jr!Aj;g1q6NsmmiL
zR?kZcW|i7)`N#Xf?}!mQaRAbfl2^XgXeqKmp~TNskna)^FM;(vP@6m<q@eS?+MhX%
zc1`+~0n#|F&J;)t3Ug$TKrcdCX9#}Tx1Luw@Mevw2N2_4*MU?q7c=Z+h({yAx&RqU
z9Ox3MeEvdpVx@qN2Noz~&@jX;Wkq`3o|c5r#N-8M;KQ)(YP;f<7xRv!UTA&#f;jR?
zv5cY^GLs7M#VjVLz%^NT>N(#i?6lI=P@CecFOeEuSGDWyw!b-GZHPS7O?wn%wxr`6
zY8d<ZMtv@=rd9OUYEeP@{nm!RD_-!h562YAyf+#boz_`>o>m&9F8;}9)wyU4XsqcZ
z&#%y52f;H5_oa@bhC7!q?bKHTVl~d`hJh8`+dJ?8s^Rz+o?Vzem*b9<YIrO75%ddO
zx~KXJO)=R4-(a*H&h;@gajl5MAep1gNN*o6y8{IAFG@QCJlO|057Uz91=cvox63>6
zYPP1JAHssH1Aihd@M2IpB`c9$599yp3LtPk9@ni)p8G*b@PLRfNKd>oRgY4u;8E1W
z?*>iIEvL=9sAigw2f00Br+rDvSyWoVF9|EOz^sPQ23PS5&2CQ<ma=q@9$F_3&ldld
zatc~THM*4UH+pZn-z3Ff`^CiIRtDQd@YEJw7p^+}T^WN%1Z{21<?xzok*wC_rOn4r
ztTEOExPx}J)2!r3V3<IPT$??lv*QBHCZ-1T&j$*AIx2)XZ^m*^2AEQ0evvXA3XVzw
zc%dP`7tj`xpuGrrO~(@k%b?B2a_4#5+h{mSayN98f@F*dW>NKlAa(c4OVE864D4s2
zNSqog<`mecwl*KYgx`|H)x)a*RfS1h!EXV6{yu<%J~5E-@+-%uv|fMC3ozs3C0)}U
zS3e3DP!dN);YErdS|SpFc(V~i!(zm>2uuic0WrQf<*e<}UkMXc&b#?|qOY5)$xX8?
za%xdSiFRCbNb6(CW^-A%uA21f=h7;Jbf|#h16NxzarqqvXy>$lMgi>}dj9xa-Ny01
zY`}E{Lh#D461|c2ho@k|Cy9AdK)YKTBKp`oMGq?)y5LyR^7MVOAdqL)e|-2F8D~11
z0*V$6cLFZvk>qgah6@q{wfS7m)!vU!&y_VIMS(2;W)qQ_L~{)bE70FhB@EY>qqw^Y
z_;DI({tsPa;kEezrhp2E+G#6>hcPqTKE>+}fWeIgT9tf_$U~t`_^>Gmf8H+2?vy|;
z&1jzATfoRrqC;jD{<?|)Gf9f-4a{X%bZqUKoqE~FV}3j`TfA^t3_JcV$ctN~qTu7J
z(H8kQ`-WeX?z7=DGFreC39;h)jJ_i9t{^(Qv8TcQUlD+upL4{<%mt`=*F8`5cOHYs
zD%Pu`ktn(MyE-8=XrV|J>@YB`;ec}Q$is{h!fR2hFa<Kw4tQfrMh}4{js;2PUfLRj
zqU_!C(R@^pCo>CSC4>olaW^v(Qk4iT=ma%3x=>7i=+}BJ@|&idZ5dEs8k|*0RPK63
zF$}X*-)jhU;#@g*?rVUJsPzOOjN00c>DN0xwHrwk`T+VnLlY;!gx$7L<UyqE3ZaLV
zA71}#2duM1!A^r*J(!LpQ-TeD&pSk8ehY@Myzm<sxw6E4lW%6>kl3~ZkOw-z7M&z5
z>$;qmy!{9(m{&Z<);$))kjxlglOSj2ABXh;yvgBv$ewunC?n6~rqgO&)UtH19)1<`
z1PF$($F8Q%#tq=jYn{3=5;NU6gT^$UH1WWZaKLO4mAoXpWt8fnC!DkUcU>YJg&$2{
z(GML}@Nx?88xl8JncYd6UrKdYMOb?zLnz|Ji>JXfpziLosv*nm#~xliW9%@dlw^8^
zg2HTtw%RM0*_e>*TqBcCc@Kk<1;)m2=pGzNT~Q)|6@Z;i(G=0&HOdzWqd(6@<S5x}
zEk13z3v)T9tm_~sOE;T%&mH~6`VMpjYo>^p8Dt~n?a7zpCU<Ho6OIz-r8f<9ZwssM
zJlpyo<&7a<%%z%_0OA~TKeu39Hi3hU-zt;nZ<hyN2r!==?6lwZ`f%4{@aUC8d|ZBy
z1pbR>&9L}Is~f(2he>3uC=d{_g@TD^v7zP@Z)a6SkG(ZWmAesIF#kV(8seXdaDga(
zFROnb;YI)bm>NQ6(d17$UIMcpl(`1dB<`Bjy`y_&@_V}c7bqo<)FlCxVSh)uyNTlx
zLXAbF|9ZB!@<~CSFeb^%URt*?h295)jsNr^e`HT>o{0#Eg2T8Y{k*#)qQ8vNvhW_s
zK?A7t@fPVVw<LVhChQCLt5g1oe*GtDX$rw0=&F1}jNE{9agT}QAu1+kD=78#T2ME!
zyg)sT00rtT4h^Q2|63?pYF0(~83bB#YBZ8UdKbn?sXB^OFQ*H8))Gxxp1OKHI??Bo
zQrlVh62}$-^5FcC`NV(ZNq+zzOH%g`3W5~V38#PEN?mThbyt#{$599gKp_Wy`&9`L
zCB0^trF|nJ1fZYt)o6)er`4Xk|9K@-KVryxG(>Ldu1LL9p7FD13EhXwCj{?^n4c{f
zX{`LPtsBq^cm;=QlK7wAqqt*%VZ!s*#{ZUr;;18aMd+2ALUYE_=k^x`1<W#{yD&Ht
z$e0VSb`GMzY;O7=o=<d)T*mpIkL2>ZZciPR|Fy3N3z6yw2uMUK@=)#H(^?z?BruBs
z3l5yau8$|F=LrSaPwgF&6+JXm!AgxiHu7xnXvL4-+G6%XpUXLABoX~tyvEc|gH8R-
zJ@~t{a2+fAWB)&}zvFU;qCeN61S5R)1!@^LWtDYP&$}Uq38G?K-#w?T*A&xAK_>b%
zCrae&sw(I;Zqgu)`5kTkGXWn`0-S~!8-GzkHR*E;Fs|x(mBz=<k5VVNYpkmxL>Hbz
z10whuw=40jK{h<-Dl>3ug<2M-k)yblLCB=|`e|pdaLK0A?+gEPUp@TW4%YfQSGprQ
zvH6-}eLrUoLzC0G<IYw9jYzL}_~pi12%+bD(7S(Y(I?mv=PgYUQ&VRIs<p^;Bqbjz
z@6%xj8X&D4M4$M%Kl(o}jyeM<Pg|&RBO!7UGA8gCkm-DAo6cH&Yjioe{ptsZxy4FW
zXTI5JGb#^VJq@81fdRG&2C>PYw1LR(h~WP?0!Md|k}>uRwhvnYc6|K-1dInVMzp?`
z0rKLp{pMzg58jD#US6rWddYhXc>j;(Uf}w7Cu0b3U0z8Zh9+sP72e_-zSVzV=wuy@
Q0RE{cJd*!-&otow0sd643IG5A

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/architecture-r.png b/assets/documentation/1.27.0-rc1/images/architecture-r.png
new file mode 100644
index 0000000000000000000000000000000000000000..533de16a6f03667f4faa341c88bb309d39ed09d8
GIT binary patch
literal 100517
zcmZ^L1z1$ww>Jy}44`x>%Fx{*ATcQ2A>GoF5&|MJBZw&7Er^s#cY~tRUDBvDC`c*@
zetTwo-+S->-p}U&#+kGCS$oBA<(a3t+A0@`FA?M5;9OKwRn*79!N<kHfmp!^z&lX<
z&JOSg*GFIF22R-^;|BOooP&v)qm~v94|om3A;2ZT!9!ny0|CD%|Gox0;9kPP$Gne&
zV}yJ8-`7^ST>o|b6Biul-)kJfU-Z8e@B>!={fn22`(HceLjJiLA2%28pVts8^s-@x
z!H?h%k(a8e4-O6;CHe=~DQ6TM2SVa<%f#12OH<m;(_O&U-t)GDK!Cd!dKHdLfHZjN
z?%-<+4{&$$@R1IXWx-q_4PK+)7G!~AF7b7hWiipxh2Qk_c7TfuhzSU>$PvTga2aoV
zM`?XU<-g0p|72O5eSN*81qJ>6{RR9*1w6f-1cjxfqy&XT1Vu#n!4>>IfgZlL0sJ05
ztk_Nd*+<dA$Ijcu%h$!z1CHL;_O_>=uPh4-`bPi$!_w*N;`m>8^6>e4EO0<U^e2MC
z0z!iS?hTg8px>3&@pf?lcSi3oCoF@x@_)SdU-!XYuj}mT>j}8v?P90q;p^b-<qbH3
zSuOH+_5c5h|J+O8!N=3h553sX!^KzbpAG)w?f+bL)6*T?)W-)+vH0J6{`dF(UN0kv
zX4ijXA67P)cY$!^h-C!-6|@}jP|UMuI5-F#HARJ60l3@qL@kVl=|9hknsyRa7Pg7(
z$(Y%;AHi-Q)L3{TL|M6(aK1>q{6nFnu<J)p=V;-mfKO+ktn?wwk3g{t|1H}i=rnYi
z2o;7n3LctoT3DMK&fYw`wYd4+?BR!^#)*j{?d*NoWa)XG?AMgGH*j#F<cR<Lg)$+L
ztSq~deDgm($h`~UZnP+T##-&0NVwtJ&?bEt{KP)L;O++-4H(-kID6}tUhUE|(qQ+o
zDevGvEf2J;CVxe>QOZ(4HGTID0{`c&P#O4x@e&sgvr81h12eiTE*@Pe3L%`xV&Y{%
zB3hwGo9$yN;`>S`JH9W%33gIv^P8<Mleo62kwLsuI7)&zR@B3BoLmw{2FFE6AqS~<
zos~Ap-EmL)o$HwjVskniM9fFM;|Zt+Cwil!tnpt_Kq~1z<te;1FVOLb^XyLeG<8%<
z%)txmHqFT2o*EZDfn*gteRx?vl#688TDkF%D`*e8E}A&CI^JLkS#$p6X%;fPqki%H
z%5=%?3QH(C%%mf^NUW>8m-r&_LZR(jdYv8^nzE10LWUX<2$rEywtV+jj%m<!!OrnZ
zN%$x;{B=>+WII_X50ORL+xDafN{Ri&NqncK8cj+B^<?prDMo5VW^CEou5&^R^6k|G
zzm;+sAZ4UGTU%R+ZJOl=2S?q{%jQRCr(BJxjje_!<cp5US|&UmuNOSq(Tk`S8=1Y#
zEew%>5J_v;bt+tf67V5Hq-<`8AmBBSgY*~fmxyVZQGND>F@Ku1zxo#$^7wVdX)}xn
zt1J7)B*nbFa_P70o20BEazri)BHKD&<ujx`-DDT(Hs5G^@4Lj%g;zq2-mx)+Ehd6g
zR%XnGZ1T^X$m6QT;^!E+efOY}8i_3uMIV`|a@#MMhUzjxdr5|!QtCfbK{q+P8ZGi(
z{wbUMt)YC-uiB2Me1+?)@>Q;H?lL6#9^VijVNkx|iB{uDPgCA4iSlnu+$J2S9>FQQ
zG}1h~<_>bP%U=TUaiuh<da~ngurARo@kJYl20}O45Fw_VCRIwgmEe5QhmNj9ls}WA
z;*1)tRQ_ZezMga(UrfR)>?yXjdw=)KVPey*VAF7f1-`{p^1$r1-d;c6-dIxK71E7(
zvYy&1aZ=JBQn&A>aFCv|`XO>v;XO_+&xA~n2y&oY3S0?<kQdasLl+#Xb&HFM9+(ww
zuC%vL-5%oOyC3A*teGQe@G*+s{3pc@1p@vBa=G3kF4c%Xx$JqFzPRb@RKj+xHUYuZ
z6Cw4!JSONepH|Y*wccll0f?H6hJh$8FN>}^^1LdExQ{%d04LayFEd$P{Kk^Ll)Bln
zzcj?_#^+Uzm~1|SE}f|-5AsRmzsN#h?-g?e$2bMc1J#V&0}2|H%SuwLq%6zgIV0tx
z1{0hK(frDmjZR=8&qe4DjzU$HjnwFJ+ci(FBF?Dz5IN~fAB#56p_(`qhUdk+(FbK|
z-um9%Nu396A%p>RqOmv-VOo=RhwPS$J=30s^mk?+BO0MP(cW;OCI!UcDE0TK78ST2
zL=DKjn4qBQ5XikGhhK`7oC4Tjgc$V)x93PH)071E$E-NBX0yw?p)o0g%$*s=5_M5H
z5G{&Nl|jui)xU{0zHbaJwlPqo#ZT+Cib-amH(%ZfYq<%33%M(&k+|eou&F>aY)!zf
zCI@?e11Tp;JD|$`h*qe+&pDA$e6}SBC*w&7;|tsliB>W=6$Hj+kZZm}_Opfn;{Sa?
z4_0xjX(d|kfr;wt3XT^co`a)lr()C>#w46vV&s+&FN~1}<LM)yk7$Ha9n(TiSLt<y
zqPOLZ((DMRAZpZrU$@^FI6--chn<X;KX>L6rxoF(!f@I=!hbzf!x4JbjDM)y0ZX&%
z7`e|U#EDN_n0}^1E@(pkxPGMR%|=^h#^RgKnxeqFTA^v-3?k0O{=)k(cpN$Ie!j$h
zr{io{>95Y(D;wh)*B6+(`X2nM-qwN<PADS6&J$Vz`1Znp388H7ir@>RY8*6wDOl(|
zCKDK0OyTD*UHH(?ibUMN?+;c`A-l|axvq@LCn$Pux!cw|!ENL+QCj@_`1Cw+O0<Pe
zS8{PdqG=<(nr0|pu4<(R?EF|P{E8Uz7T73(r+N$pb%UnhAFZB=g@jC|)77iUD4c`W
zLO=&r(`;fcuF}U}OSg-VN>Oy?DOQNk@E9DG^iHV{Tjh&x)VcYrt0u@aO$A;Fagn9n
zZuZxBTkv-ElWh#MCX7u1c`ia!s(FQiz5*wB6-m?s--Ng{YQKp)E*O!)PkVw?Y_;W<
zha6G}brJYPaiz`JFIMK;+znV%{_1T*WvbP8r8kYY{AtJ4z+GVr2;)L<WCHUrHOjY1
zDcnCQ?l5!e*_%Hr94ZTW^&YK;SL3uA9s1$q*Kkkz8fv)?6>`e}F8Hmm?+cMwFt2Uk
zBn|~cO5WYJPZ#re=1&0xfkZs-7=C+YbZUxswdZYPPyEJx)7@(DGuG(9{QT)hRiKMu
z0d#rJurM9CfRoERPK~EG1Q8(&CmeZ5SeO=2MmPQ&ftvzeF{FHVm-`mJr3E=?Uy+}0
zjzBxR+<c@I&?M!Bq=fPasX9d);t+DLMbnJ2mK4CcKo}0tR=BQq2P12LC5xx`vREtM
z&$$+d76rHf+M&6qZK4pJz-wIA9wf-*7ApPIymY~nqEKg?WT@doQfe5u2N$bN49#kq
zp3uN>*Oc-Xf5(PUWL5$9r}BVE9LPgx-ouoSI+kjgUVtTGJ2<zPP$-h5ZP5YeR}oQe
z^bI&tY^qD@o|f0ceS6a=>{=t!RDjm;5U1INOWmW^4D3pIG<0KMVh(MSVU8*<;4no!
z_@<Lfp0jp(CP3e5wg8Dp!~>}MQF;s`Wpez*A1*|9^o@a&sk0(}knexlfHZA2xK9Qg
z(}rEwcU!27)+dVS7xi~|uBsJVa<v%qVkXyB2s3rWo@oZTw|@RE@vwDxy*n2JB%UI7
zC`!{nZ`ceUxN-l9x8H8sk5>pUC;_d<ffzwB8Ww2qR+wX_I<AGt6YYtZr<J$}AR}}U
zo2D7-eFmZ7uwiS7u=Hqn95ukC{2E`#R$xrc23JQ*(7h`{n~1xNoGAKR47gAN9-Eje
ztMmy#%cG<w!vcss$t&QGdI3#4O4JuoaU_a|d|KV6+*T%NZ$3(ygoiQ#rui|C;gupc
zDs<W2QfBmYq#+((eyNp71egu%76sSc3k=++G2(`kZVO$XFM!aXFfa&et_%-{=*enO
zbr$BTD}YFYfM5L~jLiyY(vN1u16+&rwbHD{iCaOl@Ew*_3J{uELssea50G(>?4rvr
zT#l2>LJLDIcVij~>7k7HVwz!JOI};52HXdSgwYKgR4>r^<lvuTRS=(6cBT>G-qRF}
zE^?qKyAoRLw6xME?-qCw;F7QuWfi>odKEDVV^f4bb8?{^6}#mF2a1O`Vh7?IE>=X2
zDM9!LJzCX`Go09cBO67hh2*yju^1gG!G9LR4o>$us@A3SomoXox69M+*M6Y@+Mwj!
z#7UAV%U4{hHhxAT!k~LcpD9lR!d~Cd1HMrc!XCpJ*p(@ioLmLhHC*yef9<kYcJ_^a
zPR~!A5)NcL0aa(zAn0kc)2=nl+zX^fE3`{*S%)%3L_1=9aP)n<Qt@XT{B=P>SobEd
zAHcinmWw%xx*hSR3;Ol>=J~bk<7B%Bw5j0Suu7y<N}8Se!Y!}<p3{;Z&v$fa_nYWX
zBoT{vfS-3Sg`<sMVE{q_qL#3DO<=P%!2i0?r6?OM!99Bj>&bq!Ia~#2qK`v71=|Qa
zA<_w3ynjAI;!_v^uR8a|{t4m{W}mlON)zrtKird4LvbMDz++6py6)K0(0}JQan*Qp
z%#Q|~4kS38!Cs6MUa!njawi>>x+gL%C8C%>6LAkX1~wq1q!v5v1ioU|W&FLPdCJp!
z%e<=ifUZWsINrdn?A4T*Qr0Dn+_6mQY@P<+p;Kn`zDOPH%9x?;%?z0+g^rd8m!}bT
zEET#LaiL%Mb-$z~`1e2c|MtqVAIJl}ZU1WxKd|k{-))sspL}E1twyp2>fovsjfp#b
zc!tKu7l;wzf~7Qrw6^q}PI_oRhFFQQNO$0S-s5ABLQ#J8gH8%!q0RjEqIL>Ftr8BZ
z1AJt>7jqru8FzuAI2ED17k)1FW!zO`8Nd<|HJ5ZDHKWfvManj~jl%mHuDnYevb~RR
zAn{b#PgsnZiL)$FkAmx+7q!bSh^yeBkkDr_y!c(&NQs*gfG}WU@L@P=7a!<xp%TRe
z!P^Q3D0xH?mRzbKGlMrK#MIl(N~ibuc(n?^LE|AxUCEEWYP0setNWYs*epRllR!vY
zw3jja{qJ8_aUUVCUT{R4;s4BCz<(oN;wW@T*75lLpE*<qD}sDD^erDC^M7x9ml_VE
z?=mXT{=Yti1wdht`$B0-|HnNM@E8ab_v@$E<3#_PAV6d+jsk*=p!)yZ_Pt&%drWfP
z|Gp=A2+Dx7RV}=htk3XZBYLP?V>V@NK@{llDLxGHz21iOf8C3PMd<#nbK~ankcM>f
zVDitm;$(d^k@A^ALl+>hZ8|utVewHT0n96<5VzY6f?f`%1+Y}<tjvQ#OHNk>B}#hV
z+zMydZSyByY~tOUAA3&bx3(G_s+8dw;D|4$J>vPqom^O^-Ka02*XI&}^;!t0M9kUZ
zsU&?)u0QL|0wL?_!Pp9?&b;mc0|~im6Al@H+R4@7juT^Pjj@i~72H_40jHgVb=qig
zXwgbK&TZM>UJFYo2zWw(d*v(^@N*BGb~R|XEC!N1I68i}+CCahDiW~_(m>WJdun<N
z9d98!G68?MI$B$URz5m;3??rjUl4Zx__`Q}Jv<d0*8O~#92a0T+Vh}={~iI*ogiA3
z2BUVHJi{Y1%thJ{eLOCQ-1mDr*SP)1duJf(nrhlHY9({9PFw21f$jZ}x0NZbx3p<}
zA12p-EP^G`E<HyUSejg_Kpx|`4UW#W9ng87f8P1FsD8vZaPx$klLLFw1OX7*AIKt4
z&~6fTiz;BNrd~Cui9dC_jK;q&!_sxR=b}!Zo?Yy^^~2ux(;_Xw4Q^XADH?0p45K27
zZGY-K*J#g{%H<RMnkV~|RIIqFl?Ri4Tp?VQo2_xGmTBIQYTTKS@9|7sOg8_XO(ZSv
zxzNu_o&;<mm#wF$1kqS6HVw};9r?Y)ph`ZRWtcuEr6%!xx>yG_qg%&U#{|vJ`F2n3
z37WNWZon(s*UQ(UgAVcvs@>;8vn9AqPp0HX+rP~7e(%A@HP`3A{k<}1-={vge_RG(
zKeOx7IMiP%8FPKtgkerZvYzj{=>1(TDTmSR^Hhe)KZj4s<G*X_9DO}+S6E9;mGUHq
zsUqPvh&X!#D`d6Uiu+F}T8cQh<v78G=o}Iwl4tmiF*1sz3{tGeZ)F7qlcF*=LfV~I
zZZ|GBM1Fwc4EPq3N^sLbw{@0&<q+*nYdUF$G;3awQxa%9O&nc2O15NQ|J~~mK}NpI
z46L4zR?U@aiBHSjqvSE>m@?p)%e7MC%IIV6axQ)29mr^(8VQ+pF+V;!=k0gYk$Dv|
zGHz?ITr8~8n|L{=m*drm|F<%~y|b=A=FdOvCb@l^nPKvh`I=kb*G&3rcCKmF3gx6N
zfAit5+vmYBA0io1g|)Sw3{&U>l3g3}Mf;K^mE0NAj0H_kf$KggAMc4c8LD3#6R=p!
zD)=?&GNn4BM)xr3SZ@9Ip2*roEJUI0lU9{Y0ZpT74I-$?Qae*x(5d3~EU{_R%Hz2p
z(fw1JknSLBda?e~ilqS!^VB~1`7<KZVpigT(!%~7Lm$BoPnkWf#?^Swr&~>p;{C07
z<_4vW#|4g$2Fu4KOu~^&08Ss)sBW3(?jp@M`Lra)woNm(gEHG!OL`5DL(~S(KLm>G
zq}2DRgoIT7{_@y*wKPLkBeA}sKQniqx0-<#qtkF*HV~O8zJp+ew+GeE{>`!Byw%O$
z?D}iI@z-{Lj?uhebI?7f#ojsYqGy55PX-Q{$gKD?kKB0D4`S%PClMO`kvdKfytB(V
z&^$^FOswvM6YLX=99pBtqNN22L9d=hCu3BDk_(tqhjLLb26x)<7Xo+F8~yr=Tbiv0
znGT)gw!d$s1RZj>O}ps!!G(|KN+r@cN#yH){d(53D(_>kutpeol`r8K)kY-U{_b~R
zEP@}Po2#DP6<&Z4Cc^PBtUA6JvggD)ncS+5{6RJE{)U%6PZ_)7uW3muEy(Vd<V{u7
z**5w*7JAhLFFYx44Rjv3SwOqSA9UyI*yzM;vbn@7pW7a7UL5PciTBrJA+@kwn>e#^
zlP>j+A&_t!j(l_MeO}P$GhNQ((Roy&eiUB8Q4Jp){j_Rax%(gjt*1x?3WPqmFi)(z
z<01zbyMeEvC>J=_6`7K3CgeJ<nJ)ar#<cG6gFe%-pm}{z@bpj%)Asf>`#1h?XOSF!
zNn{X$?40@w{j9og03w*Jn3U(C5uw0{$1kPOjC^>=G<gnJI=5O(;#cx(&OQu_$+_5p
zJk=jNU|0;?hw621Da)MU>v26%1T9A+o~Z*YUmbfNuAbTG>^z^Ft@Abi9|t9emMBI0
zy(R|UhKGU(yX87v?vTC8zZ_Mg(oPr&Rav2QpKeyF^K<WO6}%=o;4{=#uYFys?ex=e
z!Syi%kzWnWU)2Q!EhJll13X4DvR%FR9|OZOPLtoEC{_Y6!hfg4Ko7tOP2f*-n2W$c
zWdV-GJOYsi`c}QfE&EHNdvd2=&a4x<rv8X~n!dUwA293Z{b~K?sr=@65pm9Io&DCJ
z53&Ubz43N2T#a+hUYixKZtwMIzqwa7I7oYTQMx_vVg(NB5(ok&kso=I@g+43rl06w
zWzr3TN=NpeAcjJV%LOGI+SPrzD<|&MYhbX}2p3WP&XV{0AU^KEY5R!Aqdt6Gos3=O
z^ie5OqwfJ9*!ZQ+=A-;q`9u7=Ubh@CTmzUfkQoTQLj#AIykXo*26Z(p(@Sz#uEBMH
z(~1qfh7}4mQQ8yLLW7ODy=J4|a@VZgSIGng6JnW8g<S&O&+I<7YWH`_Sk0R<wutIn
zJ|Dj<$85ZCia$MDU(e+#nzwsp>^N3+dvh!0L;0L}l0Y+j{dd)`JvtN$mQPS6vc;my
zB{W<uw(z^(G{f5fXlLWlz@8b1u9K|`9{jw3H4%`G^gP7IQV2iPJ1WO^a}Oq{*zv^&
z&I6r+m!+zgMsM#t@s!+^{59w@)!QHcL{*(h`F7!vZ*!LPhL-ohTzOC2<lDw&|F&I?
z=>{je@4>Iq0j$(sOkrM9LBeyH_(zRs=-1J(Y3*@&x>~Fe|9SehX|lqG!t;VtCs&ZP
z-FkSc@s1G-m<1p)*J!Sw#wtQd#}=8SGKa5bcUv;2gbeo^UYRJ?)M3&6pjNg|*VBtG
zWCrb}WID!3D?ao+IbON8b6(IdzhAUBd;D9y?V#|@9t3&4$-n!zlLt?#(!yTueqUeK
zHP}yTuJ*Ol{)lB5J%Eb}CTuKe!->doSySY}Xy7t&mXz$D&5FfVdwF7^H%CQ=8urFR
zW!tmon0wM{3wi_!d&V;yUUT@gJXi33nk?0&DWqj9$KG{nayu^}By_NRS=l54se}8S
zXq_r*c?JKGw1#NVm#2-<Y1Lx#_rILXoxVf!VO}=q<jL*KYQ^bOS^Kd`Q0gxJUFEPO
zh-HTr?ulkO0Xh`{%9%tfd1pJmk*w){v;F7Z4~@rlqVuZ@!Mr;(I}RNji|>j^77yl1
zs~mP{e?56ApL8q~zkSc>n+ZQz$$9mIKjre&iB7fL>%U*S#|}|cP{3i%FBLEGqToZL
z7u>JRv=0DNek!G55P+0$G9<kk=v8KM=Hz0=xwhcs1T<*qY$MXh$>mYMU~}*}3r1r=
zbycn!U0ucKb~l~maq8NdVDXRn5V-?!VZoj8k(tlIv+{p-XH-74D3e{~CyY%K=$sAj
zDQwMj*jO#78WYW^aQ+}d0z6s2qe&F976jU^Jd{RgKQGQKhY4U1HaR%K96=B)KR(lZ
zs&Pt8GuAa2{)KNSu&4GM0OE3O;QSpxV$(>1Fvf)YL2PL^nR|;6tK%T6K!VF)Vw6fH
zeB=kF$+`P)Ebhx;QvuL@Q8>P<ur?)0R2POp0Pu@V2U&#2Sw8Rzv)@1OV)X=xcn45~
zqvY)?0W3{e;b1;&z@>s_TX%e5y$-#F>_bgo#Igo!`{)<|0cyLeF6~otd+zDuQkCrs
zy!GuOxhI6#i%8<mURV;4iV3I=*iykxO4NscJsybM!)(lE3}2TMSpS_cD>4pJPq2>#
zq`rMO5<vp|EQ&U!pIjG20ow%e<k*EukoX%IA+g=SE~FfR-J<-59k3UG9pn<kN<92n
zcJNx>Nx{l=H~^J<+K{{N+5$6I#88a>we%LgjrZTq`Ii%bG4Cw^g7;re+hoRq$p7RO
zf;=wx-%b7^U>k&c<Irf3=4!z5p$(`35OC=FYH~}iUf?^nnc{%amvA=z$6jG-9m&}X
zUk(lr0~ax6pbM(G>uLI4{S3ORxaExhX1hW-)67Uj6-a5h@w>9@U36zvNwCRkKCjAW
zP$jwWH(90cRb?Qrp#Jn(Ybv$pGX44)rmomgkF7;?`G@;iFh5Y}cogBHr&t?9k4{;B
z&|!1vFM^1RcC5M;JG9?sD_?QZDBz$RiKwp_6USU1;GvsU$|XR#FZkWRAJpQRj@DlS
zHf)jLA5uYu?tP7-qPPvD>Lw0~jVMX7aQTW)g1v$zt6*IHPRgfxR%-<wz{>#|uDcdJ
z*T0L^`?_5L<*L5cSI55Jj{dK*38>`+QjAejOdyH6K~|aY_m*l2_<qqX*aAY#1N>J&
zG-AfN@9(njG>pxSR{B97z#8^iuK9UdgC^L$AUa`mg>9V8CWd`AE#VpsqtBk4>t3c1
z0q#CaAv?=!Ee<<?L*x#BYbi-v%F|SwSdys-Z#)L<H31(bw|v#EFlW66-Q?O84>a{z
z+?szkC>uCL{Nv$!Ou-TqO-!nckFNNX>^s}P!&VwVC2IM5M;&=YJ*E=XEM7d1L|39T
zRSEuEB}yO8S|+o}|7-G!`CsPVq2!WI*}gt$f2X$um-n$Cy6Z?Fc0CgTPlxDT*GTL)
z%A1@7rMJmjY(SU)fLQ!|z=ZVx64}B&*W^=;tsNn>K&^&7uqz`&r1Yygs9Zb)Ay3Rj
zZBW27h2H_K&^e>=dC*51efCrlP!kDa6A-ab-N99%z28^wb4<FiIoN#T(<!<IfkYVM
z`dknO6~R|aCW*(Uu!S&Tn6t?qOA$NE8|K`XFu*`@z$J9WaD4M-AcZapWQy<QNGSo7
z=q4hbepOreQCO&HN`!JG=1V>G+Yg+=DPOFrOJ~153)bERYvcH<c1);dG9HV<Ovt5H
z__UmlnTW#?_Rze56b_LF>Y6}s;(=<XKG=H`5Nv#m&Rl*y&oO`By2HE`3i^OFQ+|Id
z(k0OT%1*|cdmKJd!d)5UI+$`Q$NT0BN;g5dKu<=4O3OukUKbR(!@aA8p$RM?XirMf
zwvjzuCh#mBpsKj$xwvkL6)XGSQZEgo-JTptPbMgZf=*e&eCTaBIT@<>dBM{sa<#>8
zaLybo1A7=zY#`*~sGOj>wdUDPdFA5Ir23D%Q>D9D?XCb~y_aSeDfKbz0kISLa4wCa
zF4$~O_URX9^4sXmh=jS7ND{$jX=b5SaPmNq3U*&(rYRQKHT0zP*?JXiek}m2&$p<B
zx}x$3A4M!*G3Rj{eoxkU8C|KQ@+XmqMzlcl?x%2Al_K0XIY86%nwf|){3*~9HMhgC
zi9n@4!MLe`u4kjK3r15n_62UE3zl5me>(&GiNT<b|KW4c<pubX+?y6v9?;0B$J1kh
zz7rr{sTQ-XFL>~R64XBpeRS!edEB5<GH~zZxE#L6nCqa$uPp!4vgZPUfdd+#_Re{$
zBkYm?rfXu`<W^r4g?Mbz!b`!c%r9Y@XI;cT{oR=&dx9s3IMpmQm_NEAA9zaRNsj2q
zL5vTL{(Qs#ii#f*lD@uLv<HJSgZqTB1S%>o-Dy-}l|ByWYrfOTTlKI{8Wg^%SZv-&
zm9KBz4dx%2vOBr2Y(2EKB^8{WsVbLOPIz!w)28VqL^*PmpVOcM)W>aOXaW<ZQXcUC
z>G>L%^JH5~+J2=+a8UHV^YhX_9~lF6j_~&J*%N!ZyKP@qNB+#z#r5I%$XMaO(U+Aj
zyuWJWc5l;5rM?!ad6B}T@<eI6%FgG!PGnDK@8$2yH`X|pu0SY2D=^CDrFdO;;n3V0
z!Tk%@Px?R3s5rPDr0cnG_cEk)Jl)GZcm7$tntH0$;&94wmMx_|V?K*Fdx7DxamPWV
z;AWr2r$$5T`IFaT>22c&FC3GW%!1R8vroJaK2V3Ct~A&8RrlqL-@C@2li4H=`=K38
zo;lA#X&`nq#k=frmg<*b>^nKmYCqSF*AkhggG5RRWr_-NlvLleW(ZEs2w#5}e{$)K
zppT8CI%vFV?Emgtwa9i7adIh3slT5h6bW=_UGVF~bG(vhDJe$*yVsLWq!VJS2TD1w
zU_{yLqEs`xx6GHl8x`?TiwF8OwRJs}qOqwG5R_Gl$v`IgAWv{>Nx64Br#r8VD%Ifl
zl-DecDxDh2qxJW3WdWInzm7t&Bx}yN9&+)Seu1}>><vq2&@^fayrd`T^YO!6!B_m?
z^dONmCW*iw{=qxh_Yb0pC^JOGR=adE+ca(BxEUaKr8E+wCi7BIpb13K%P`Sj73_G=
zK6FuTEGmS7aiZ72V-cu)TaO8|Hblc$Y{@M!n^aPY&z#?9WxCGNd<7X#`0T4!u-+uQ
zK*&I{-O#3MbQ{mv^O{o6at<-N`1*C%v~TM9kx57?4w=KzuT@2T4?6cW%jQ7qxKBod
zMfh?wJeR>NFu`pqbf3Z0P!#I3e-wT85_imHUnhn;2C~}m`&nCmD}BF1d#xsik*D&F
zwA@^V4f5!0E0W$@iD;%TN5-mo=4>R$8Yq(uTc<7tpc(%g&G@N8xjXhJ{mCc9c|&5?
zl!}H9P)sBF2k8{<lFzP`bP#!`o+Bj9MF-|Rd!vqo>ysE{-J*8QMNPgtt~x@HI-9QM
zSBPy1UZ?dOWNZGQ5IV~z0&VYcT1|}tm2>6uxsdwgN3rkDB&2_k1Fi?@yuP`i3G1@x
zcNr{!3a1CjrD;4JSb6LCNy6Ya^b2TuJmgo5zQh7Lc;u@U?(d_J*MbW-)*hwxH+m$d
zGE8)2S3V-YXnpk{{j)2T`ZyczKI^&SuVlb&W9!E2MCpj7@X{^&fG*f~ick54MBde_
zis>7i^@Qmz3RWBqpI(>GY2VtF@_fl|quiVMmYrQ0r)+Yod#zg>^_b@pF;(f00ogs~
z31Q><We%$Nv#qN3_1fvx+jNBuu(Xk&kO|{qCzt+MHlL#|3zmLrLExwYZp7j{fY!Yo
zAr+(t^lCJ<&0V#$a(;!iZB95js$63u7GF&+7>WwSGm!lQv7VakJnY?Qy1l?W1cl@T
zd=``u|J3fhJ}GqkXLbgupKfk4Av*jC$x}f@BXry={^uz2JFasK#j1&I3<E`W-VYmc
z!S6*5uNPYUo<1)~U$S)bSi1jHK}BPYyzKpPlj7Y4Fh3yg*k7P}n4x)a$`xE$Kd#YG
z`75JZY=|!;?<f4*Gbs(x>%D{<AJwaBP0-!;*HV3k9}m)3^G!?Z`?*rf{Tnw#V<+iY
zFSqcFWETxZdCcnV5x^{7%Ts`fkH_ue11X%?fsa&Q9%;HUaReV_rcgUCldFvy;Z~hh
zx!_och>}J}R6+;<=BhiPjohYh?H`(F;4F!seSJnO7d1G$j*lB%DkWLp%jD;gpDJB&
z%|q6{*A{RhlJf1Zwc36K%fVZ(PF8K1SC`zv-9(j)JF*G_ZC9!j?nXZUR;#o#=5=SB
zY;?q(LH#N*@T|IGH)Tl_a!hsRf39fdFtke)DEpBMagL1c1r1Eg9Ef|~nc^hS!Op>C
z)@NP&Oe@6McS%;-v&qBfc7rLGC930N>E-1DLydwr2Zn_j1v(3~Pu{YR$VC5eil)fU
zz4lY5XEAVR*5)d0mCG!_#uy>w!dTF?v|PAB4OGJAuCZ8gx8p%rW5ff^(7G;1FtFj|
zVpQ@_FQwe7@XsCzAbE#xzy*pED$ZFC0|=sAF|r-mqL(PKX+}Nfl+hQnA^L5WQ<Hl`
z6g`f`egGj`pQnjQ{dHpQlX5;O({FCI@9FY&^6-qT*v-`?5%il6h~AAb8h<S{&RQEN
z6)}={@yIc(t<g8W^(E0yIf;#?)2ouFzk8kRYh%tu|9p((*r&GHCy$F*z^kZ`8(H84
z8S1C!@ee)UNye`C$#lGoAKUV^v!I<*{ekl2<#uu*5Ktn8wE%a{&}{iODp(@e@#Rj0
zW)4HE<x@G)`|iq5Z?d81rrvhEsa0HM$;<13;*!z(<yt+xms?Z+WBn~lE;--s_1g;<
zSTB_e`i%BjOuB-zNc}JicArem+3?cJ3R<qop;0sUN0ohVy}#IATjjBD7QEZ_-FtRx
z^2!qNuZ#z8EFN(Q#NHzxjtEiDc{k59<r;BTqJME%INzX<QAkU9<Lf*)hB}u_U%vq|
zRpN!@YQ`RGW`(81h7LR^#c`#Hrr_#%rC@cilZzbNl*Dpd`#BHd4m1O}`RQ$1nD6Pp
zrl^Vwe+;aK!`_Gt1V8tS6P#}23yk$W8uQLRUyvzHK>eDR%Ck#~T4&_G5_&z~P=#1T
z+_>X{NFc(R{o}o4zE9+qcTO6-KU;`G7NIne9yjv))V03)elF2xswnyVAA@R*zju1v
zdMp}M{IeogE^86#*=y*fwvUiO98JNTQgXz$b^Gz1?&k%<3N817(?gpZr#deMe;Wbp
zf@-<#*%0R-5{5>@%Eh_#_yB0zjYP$|^56SeOcY#5Rs!P$0OR#l?_d`_P2vLI?K2x@
zka+B_R)1hEFgG*$nvBXN-dDQxP1o95eY8ULnD5qlzZRipEswIgC%1&-H)6HaCdTo^
z&gXBltNfxGhwD$0HowK=9WYaAM$-t@Kik~e8q)|0Do~m2h&tGsII7J`aY;J1_B~iE
zP1#^g<+D;@9voHlAnd38WHET4dlda)kyOhr+&GnZE?rcP_u%k#n_E$+*k`uc_xW$$
zfZ52+UX4}QHW<u`I(WWRKP0AeC?4$iN|?KF$fB&=@T4lc(DjDLJ&!kri@pcxhllL`
z&}Y!W5n<HWvW4Ztf{*(RX~i%udlF^W3Xi=P_a5J0k&4%P^KJC%gDBM^hRdG9vVr9>
zMwO%pQ+w5fCXk{ft)3cQWSiruHzm7Ts-d@;?b7lHY05u1YR}HH?;lH=vv`Mel-8iB
z$oykTkg5I$ozMaEpxKDKRpw8=&T4*>77G|xmX}Ald9!PYgL>C3sxLm!O)$i0>a=uX
z-yYO0G%YbRS6O_LG|4#^ZCWp~B<J(wC_P0!=`~$Ebqa_LQgqpF=ITLGd)zJ(S>?Y)
zP*K;Mj*JvnRb~f6zLL>aG7vdGG?oj@v08Ht{Jh(Zr&wsV!1(polS2`4dAnnm76M|o
z5rxqDJKZ}3t=s-;c=fa6S|3DV&Z<%xW8+u)jz4m)7oXfU*ft8%6MQsdd)M4(-*>%J
zhth>#+^WLHU{!cYXVJPMuKoqJ>ab~s?ukM1PXPYP<yxFqSw!wtSvIE17W#`V>dU&T
zpZ0h1oocqG*U2QN?etE3dzbY{PPD)D=JXd9Ficb<r>Z?^^G>F8)Z!xX)uNETc_RUV
z+8AY7j)76m2PRRL*T}*Hj)so>E{WY*9=<kHQ2*`8H*eO7j=y8Gk(jYrE8@HDF(+GB
zO;Se8o7wLx)$#pkW6rwfvY8oHEtcY}r8(*GywzUV&$VKZ1IM{a#L2gAy>!g|Q6z`1
z^P_M>WjeE@IJQFy)n(I+6Ws(}2tLTy@Zl5zvyQV)cQ9*SX9)+d-v1`b|0wb-xbV5k
zy@3z!HJQ<KlD02(^XW;pNm%$sFJ+{r>w7n9PQXKzbH!x1L@cbcPugzoh|?}EE}HcW
zYq^JNPly;YRi&zXPS!O}H~oG^E4sJ8Q#x8tdY)`w*K#{KMe!{xKi@bsc=g4gBWzV7
zn1AYcXe;>KYBKQbUE(%(8!N6xEw7V{`l~Rz=_orTX+Gr<&oL(v{*ZTV{j9#lM>U&W
zXXh7kP7)*J#3Q(=L5qh-NmMuDJ$l}#dBds2>a?F?qOZX(bb;--XLF;9`?tlyL6Vh3
z!L?aO;>RG9=E^|b09o@o)FbOyoPVt7O-f(#e3i=zSEGG;jAUh+N7lYT^x=YS{AiZ_
zbu|HtZM(D=hGlFwavf3j*-t^4aNxT7ys?}6b&Y!Aw#|EHW&>mQA6koBN+@W|`ew_@
zp4NR?^xe8RI`2M6FC?xGx(v|?j@My7f%P7&O{|aeyYEbDZJL(x7-(#f%s4GrvQM1H
zn$H}rs_h+}k?{0OmC7e;##+gL7#9LC8?IN)42p?Qk(s6=A+^S}o01}m%33Fv;~oAO
z@Voq3^XQe~p7HQL?Ozw=fZkxWY2FGi?4V{Vgj^duE47Msr78*19JDUJ3Fj-iyk_;{
z*LkYpW?8@Luca@gMlNdD>La2WO55LR&bU_dI@5o}w$bJ@k>QvFRe#RuP=a?`MzHyh
zo#$n?d!J7S93(WcCAlzzr8S>bRq5nb&1P=~%j3X}S>G&+gZE|6h&*Ku+3t>ojKXsl
zG+y^E_i}uD(sfJiLl;c!R_;m6?C_V0%J;+#RikC!zYA9_C2ibu5l`lIGB5C(zXHW6
z%~!?HH0*}kRW~%AIVPBPZKA1xdrQuT7Z>4bNQo&KifP!~oC<AnY1Vjf#VMsG>YVA<
zkDhFY$Yz^C;rk4`-#`N;@hR(Z%0MI;xpM+2JaW9Po@PN6MW!TKEJ=Q;IdkfXC8iTd
z3#yArlC1Q)n|_=!D_AWNiS5leXCW<fYCV(Qg_zK6t@#X1So3;TsPpb6IY=j9%Y?%+
zsJ^S8UXoRwWC!CO^wubRi|zX@wUf%k=yY|x%2Om%*CXrH@XWnY@w6AOI`Yl=fW1d~
zMmQ8EW&%o=p>L-x7*Gpxt(^^r2Uksn)--4gGHqwR{La69Y3E5+!H+xWc}-AyaYR{7
zJ+w!$?o7z-N7B6U`I=>LkXOiLsQLA5m_k0d&R+{NR|X|_E<q@l9oH(T6l(As8f-Au
zDdC08pKOjOa0zaD_JvGN*=)5~_`i`$J))c3P>Vo>LK`@3LUX4z4M9bz-?Gffcw5li
zd%pR7&+j)`e^mBs*y}?`<gdHr)sQxskPWYL>$)4(XJ`#`a`v6lZl+)PJE3qx&<5l|
zGfvu70<U=6ljV-BSMrp|Hl$Ba`hWRwY+M|ZFH7aMeBHNws#(7l?fo{GgX!<ecLGb@
z(fj?dlg>+K!%+{E1T20whI=GNGuxp1?vST!7b#7Iju#II2iDF!2j*XH9c*eGI~8^Q
zIjOqEB;j3LR==a7cafoj7+Vg%NCU3sopG|-2+5prYMOD{91y>=Et&)P=JjXR;Uc=f
zf(y-H6Z$hQ%9ebt^|kJMS#tk(Q}55AvzP0&>cWuOIH`EEQt_`TAi<W4Ba&G}>%X%4
zE8J8(m&^=sblF&~$1YOh9K6!@#<XfUh_@Hc_*;iYtp2bM%Z)K0a=5)~|F~BXV9C*<
zZrF`&pOEuW=v0sEc@TwT(^)eervs|xa&J|wR8WyAC3I82%B4MCC{BJKtK!>Fq-3hV
z_K#7!#J|6WZXNtimU=qT(38x$67%?)m`A7^c1#EiPaWO+lSq0Rz>z!0<KR<j@w4kX
z5BriRG=m#KUXgy{)@+h{{iTlZc!z~uq1=X#9E&l(L@K2yR&UAqQGS-z6Y&>^#0!T#
z$`=fFnN}n=T>Fnc{beLB@q?e|S4Jm-ng}4q1Zl1hjmm-|`7E8kYYl}VoWWR4c%2KS
zSp}KE0`I){^Yh|qJ%3bG5IY&(t7ehQm|}ZzYKH^a`q|mZ-~^Lc^JeW+i#CSi>J!~~
zLZ6*<%uE6Teh0$TbWF1`FKSMhEkhG9VtL%YLKi6z_vXOSKob^bf+P$LYq(2kS@X+h
zk%fD0>dvqg9pO}~wt&gOkEUg<LM#M{>D!#Q)T^mKEXb@0c~_pZ*Z94@X6Sc*j-l$`
zwyHC}hvfa@e3cOMo%qwYxTzyq5kB)8%kPw?$Rq_t5V^RZgMS&>&vA$P=dUcO1oin>
zLxPM(cBBqQK7TX@tq)Ak;+~+AC~jjrJny0XJ)&KWt)#)L?XEedodyxCt15RfkdeSy
zu{7SuvQh4``0L~nkEciM-Nb|KUnMPnP=?|qLp(4sbko`3({yod$Ix2;Fa_$`7Fp)k
zk}2-gVVYpYpw*Y&Z@*;rvD->v6)2wO=QOuyLG8f7-7W&%C+_#jI%2y|Y3DB?tn4vk
zS4czv{)tY0kMZHPH6o+OzVqek){C*rc|ob>1)LNRW=b%YmiIB2%K=)JF~;(w`vc3X
zp)J#l5eI!kv$>+1HJ(YDJAXKLnmx4&!XAX9!3K%Q$A9Q$@y7SUX~TKkudGSCTNnLC
z;xB%GurV5h^U&+Z%%w>u8muAZaSDYDez;FF<Num&&d)DQX2__RROwk9F*)>tOQ&uL
zB}87*Bf|GWNc*{DqkhPoCQp2xS3E;raH*X0a?l>?u^{ck?jY=5w|Q;8`zKvG#J!>w
z(ikCHdSCWXMN9c0q4@buAAZRFSNHGhV>>_OtSEe+1E|^N?1ZZ#c|{Wi_dC8}%GGyz
z63{)U+{wB}@E=)IA^(>1vj+=K1&eM;`*fSJ|KJTJht~+z>eIJVJ&-F}JCajo<83;g
zcg`6ieX(;g2zVo;tTT8earUILSgO+m<O{bj({AWa5*PDQp$L0QipjE<pDGazEykAE
z6g#v=$T;#}C0c1cLaHs|70Y8~2YYYa(PI*0;`K|Lez6sqfw>yWz7*lmercSbhY)3h
z|MMLk=s1br=ve8Pg*nz?Bub8l+hxmUb0H(12Xo$W(~i3gL?%wRtH_=J2j*3SSMYC3
z?-5;hLyAJjxz;`&*H2ow3I>x*h}J_D(#Rt!&~3+SSCz_HmWbsYUz7j%+n>bOms1|f
zVSOMN_3Jz05Ce$4L_(AmSr_`gvUjAm2GnxaV(k;0`G~~cjp;((o2+|`izLT=!k8&9
zB%%_hzK}=4RxKa;vx@H3YF-7_62Z_a87k>psDjv#co2iaPH0L#<^y5MC7vpJaSp>*
zYyg}RNOQ0#1UgN6wB4WN=oNXT{P-40Ud~M>T>*SX<eo!fI%RRU%KK?Ixd2JhUlRPX
zp_03kL@90<JG;%f^fN%HJ4HYl^3j7Z_Xg%JMv$1BOwRa9dBr5;(5U+)`saHPnblS>
zNQ`Y`-s~7^jr_R%CCFCfi1^M^w6g0q<FMko*4qt`!*(46q0tD6f10MKCYYq$)eECz
zJ;(2w#31RIa3jpBgF+b+-WJbgLk@W`O>!e%=HKgeiS0!uKit__A&e8JCBjfi$-UGR
z1=Y0g>?#@sGoE89<9|ohz&tgbSMXd%i<8hI$^Kygc6N>$71j5&BEQD(-BwR(E12yc
zDR~%PEjZ#Psg9Xj9CpT)CnMO{0ta|G3r2g<O;1IQ4vL47%5Oe!xubBbkBAWgmsxRB
zPo>`%i-TuD(ALZkc?ga%)5R5G7G;WQO2bbe+Rx;KPD)iT@_}x$89e@9vLf=4IfS7H
zwfn6?3DKG_FsHc0v9u;}`64g%<r^JVNWq{Zqx^rHvw7@GYu-z=$`Iu@ce(j7_p^bJ
z9z!qmCq&)gN01AR58V9xFN<(tKN}ev%A<E4<K;RUVw6=8=B3l2DCYBk7aaL#o%;jV
z)t>>Qwhw5E8PL0d(Q*9WQPBQ_-PVdGE^f?DU%28vKis?PX0&;W59r2isuV0PfQx^S
zultBh(zx_^8Th*LVM9bVeYE|gb%)356c9l^7V*DQi$`|Grn6AdV%0(&o?ZE;a&)Tq
z_?_Z6##^*#1%z{U$m04?_rEs>2maw<eFv-eI1n}3b&cs*sGH~KAlrmvn#~xD7Fhz#
zy7y*HnHYLW0FV@(Sgn9Q9Y&QEAl#KqM4tv$IxgO!kpLsOAfA)J<@{i1Z|h3cYd{Br
z0Y6)IgMY4vLm>=P57}(Y1s6$f4%<`XV#w)-$mENlQ_0sPyAI`O$m8fB->#^Itzaw_
z_6GU&tM}4#31x+_+AG|27(oQ%iwFeU1V8SPWdrW*<|sM!OHv4FY+!jPk10l*71cVv
zRkt%XB*!E5?wIvHLz6ZP#qH{Hm&nkSk$8#_2eeIu{lxVA(T9n6jm(Khri%efof%BJ
zjHb-S266$;kjCVyq6|0{@4`cj*#@neKdHS$j*g+4KHNz<mI;_SKQ^rnzi%p^I0wQ{
zly3k>$d>UGJ1KycggDIp!CZ&TSl98pOA)5{m~#_ANIBo#9)5P~?G3O!7-l5OM8-0S
z+44$b500Jz=Vl@!`0Tx;Tz6p>Gq)X42y7Zm8z-Hh>E9;)LE|NrNwxT~!0|6iFn|SW
z4gn&0G(1l+QUYjFxQ=HxReY-$J@u;3!}srFvR~j!Yj5EKWCTxdCK?c;g@lqOmb6GV
zQn9S^Ko52hz^jS=kzFn~h8Q*BM{V5h@0Bsua|4cGqJN~E3%f`Thke4am%zGhz#k9_
z5Qd69&W^?i<Nd7;n(svPV})AkwP3=dpy2B*9nMbFHSKR|mKY*8IhPI`N<`PZZNQWY
zc8O*O1z1weQ6OCaBC?cww%k~o0U8#JYO4t*kLyFdTwEB(D&inS08f9DPxI&yJsoCk
z?d@5H<K&aEH8hDKG=o3x=q}#A=Chs010I5Pn8ah45jQmmB0>1PRKg7KKbqDl2*X1(
zuDpca54IqkO8|!Oa^~?jj4de|bbNk}L<3ef%~GG0(WCZ%FQ0>&=^v%?9~LkuFx4Lw
z$zeW7fpDK7G`JI#%z-l0%*Kvlr$K=-tf0+aQ<Snoh7F6}@LWh)?5rD3I0A-_J}dON
z^l5NOTMUsuF+<!qs3|BTkn6_RhpOAy2{$4dFkemN{&U$d6K=CNBO@h#k1^brv#9nJ
zhD``=R8%YliObas`p@G24k|9A)1jD0>CPa4iE?b#yYsJPn-INSp$ZlPgk_}a#27U&
zA(niHlVBpjm&^lZ|4q2w{f%P)cnCn+1PE8(!tc7=+r$pX3*t_lqs$L^Air3IaDZ0g
zb=YC>52NJcko2pkOuRDmY~xyLShU>a?g+lS^-5#mGZ@ODe_of%RtG8j^e4A+Aki1g
z()W7siG<3sls;M9(o$8-v}c?q?!!oq>Uq0cu8)wycQjw?!<W3RpFk)UFzUjll`H5F
z@}=LFT5<Fq*(N45-pxQ}etC}EzVH-iXIg|~VZvX5#i^ohmB+>-0a5X%uw=}fa|N9j
z<7uMnQDXunDx8QM>P9bq`QIlcF7W~Nk*etAiXf;b&BWLbEE4DCXY`|0F9!htZC%hj
z`d1sqpeIe=RQMVM7D+NEb=@!`gtI`7&h9AkC<-T{!w~ygf0;X(w_*2WE+v>@v}@e5
zV=7dEv5juBRpApFtdIyUe8%sbOuhGB=%N5H3VP{_{Og)-unbSwh3Irp%Oh`$-l4|B
zu(||N)~DK0QFn2r3Pi@v9~ASPiFcDao$D?aV2%jW%pK?&Ls?$EK$&)(;jf2<cY1a?
zi_;gB8UigX^)C6x7r??SZ9MA%lepXH!dqpznJ^^z;4^~o&Bq*BN~Q~J1`p~Q<_f-X
z0{dM6_J03p6nKF9n+uS7)FYU?sJ;+JrKCwDxr+wP;X%+FAo~@f9zZbv^&$XuU^O+s
z@%RP`sa`Qd@?lK&3)|9OT(6|K6Xn(oa-pZCR}ZC|8BX;s>Xq}Z{GDHeLz<hnLy@G%
zH!s1&x3I7eCNqTIMXQXQf$8Xjmr66vM7wFn&b4#}n4vV7l}$x#AIcIS%LBYPR?L}N
zpaIfeEi<Blwal<I^dsT_XbCkcJ7`-4QV2fQzelo(jj7;q0G3P;?`8wgX5`eY&->4z
z5%~^r!Q{g$gyhZOsS>nMY4E{PrK@rm+5wjC)>E+mE5AEbpJwlbFj+n!3>^>eH^W>V
zPX|mo-tz_zn3p6U9(;PsmU8K-rtO`J=qHUZb&`}TN36IXR)TEPW)rF~@)NV}paEJt
zAjr=S9svguQDWnZh(>OCSwHzC#sOxifMOJ@*%)V@#nNypwVP6j@M7f-9zqk^(^AFX
z1~Jl%R6H?SfiPb1Iiio?G#-g|3RZXqw=tsoNGy58Id#cgs4g6t3?>PAIVdr^pwCD_
z?aTz`T73hARH5c+EEtS~GK0`Coa|k^40w)(T<Abc5f>v;w1c^XKj}LYYvKh&9o<`k
zNy@;}j$O4o#)-FY$g;A7>-7heY)|p^=c1BjF#!S&?se1$aB`ryx1H3nW2E%NLX<+`
z(dx<10ASK)R{U3x_oTz{Hh5&caQ%m~&mAm4$>TmJwU9UW_J{y-2p6i3=OFTuC{o*X
z!-hkTAOHv+MJvZ+h=fphF+RLb08!(x1rG+%AJOJL_^S}e4g}O<b_8t^r0>)HFjrH;
zJH}8{!`+o-EY?T2=UZ<5^Y9U+;F8IL#?<GYh^LFjz(BzC7|#+hD{kV<5z(7#3LRnM
zk`vfDNgPxdQA62$FfL%pyL%U2W3X$<yyNJ7#!i$eF6txDWVa|$b0Yl?2iU#1tYyqo
z8st8>U6mvdZ~6SR9oQ{0wES{g03`Lz?y6-0p?-WN{z{__CslkUXct2hnA|GcGBeDI
zM;d9eVUSI=0_mQUVZ-wJss}*r&mK(b{~G@V-41Uyo8HespK%IIF<A>d4;}hOIrr(g
z<$&y9pGX-~B*FlXJ|t#E7FYB)&a+$1`X(5aafE$}F7s6G`NRRC1^CDxr;1TxpfE5+
zqmJ4K(n74bth4W_G2xdD5~QVLC_>fl%@F|A^wIb7lB{sAbxzZj6aJmhy+v6OECf4-
zmgILkVZ{+4DU+Wt51#?Mznp)V)RutkbI?i-z>Z(TnIU!8gx64JMAOX092hgN#L*!X
z09hR)P?(REhOf}iGNZ|X$I(<=CF%}UsIvc!6-aJA@*BT|dRhMsXa>;VieK)CzhnA9
ze@}=SQb0)76LIK@=Z%HcdYoXJhS?{h_#8lah15m<bsIOhmQ3X6-#f6`z|3P=FeU>g
zF7GzV2dB-1R)L%rww@V9lOYiI#j!-o6OR}}4mmR}r=77$>dxbPy7}0cFB9iDG1fd%
zKSu;`o)@nZW0e@r(?aS}@kp*I#VQ3EU?MfteP9?B&zqJl{eevVI34k{sJs}9TxK0R
zvBwQl>ZrV;FtpNP>mt&NF%OV=J-jYqmi0{>OqJXC%uVzB!<k`v+*tqxsd(246|l84
zggw5+ER}0~DKma-BQU14YeEx$!%0*a2}pL|gZNPHb2IS-8lowAm%KHi-q!`c<IyG;
zvc0H{wHXjZ*aC+yOCJ`GB$^d2#!UMnJ#oRtZK96&&`aQ1#0ud-H+EHA;|2!TxaWU0
z-XFIao(p_%!wzg5tME}s)~Im7o1I?*fX9w94${wjfJ?gk>uL*zCRHHEvq%6;EdFFX
zm?U%QW`_gf85w^<xDGh#&zZ3Q!ZBRph7?v@A_zf*wh@L?dXzS7Hc4iYRip?cd<kdQ
zgytWNgta2Se!|DK6nIP=Y!1GQ0S#-b#9pqiS5K-BaY1^{D8$Tw)h!@VW?C<PK}&B7
z;6@u5xG!OJ@e01h6LYnR_|%e4RuB#B*5I>O(o~!Y+hsCs{KesF<e4g>jqYQhe69zE
z9y~fPx1H+iyIS#hkVA41fXd$L5oLr3=tx~qxv7f{+X{(4Sv9>si_4hNbi-IyZaU=m
zJ-0%+S&u9rt&gVF1-Vd*dhz0tZtMg%>L-bb_3Cx8bK3F0Pl!-LV#cg)yZm4=HhV@_
z1x2mHyyk;^XPzaT`+lbw<;kJ#lCl=wCLLuNQde%{Y_2;qL06^7vG}eUfn>e*{6zb%
zLC$zra6i>I8U9W8tMEO-yYsFqkCfUgRdp!Q?81fS@mJUky3D9py)GZCZLgtcD>$C^
zTanW`<u`3wCv8*@aTj3*mXIkJM)8_dDY~HJ(DM@SH~v4b2xrJl&Lg-Tz2?PFUapFI
zfBy3815*_i{!#Qqb3$tu6SRYkPY1rbmM1qW-anBO*l9nmoY}Y0!rmG9SAw*f9{+>m
zm8=<!^>f3UNV>kqk>AT@$tD%SH?x3Z>DIvHZ(`6FqE(Y3@vX)CU1lcIx^-T@J$G(<
zg{Gl&d5sV2$l*<p7{0XAA?fv<#Tw!bT;oo^AhEcgg5KwOZwRyK{^|fZE$Ww#K+3Jn
zEi=a1H+{XSbK<PHqSncDv?1|&sFn1eY%<`cony2~`MNf5v&h!T(wR1=(^KBX5*#cf
zb2@lVZGfhfF&P(=5e9D%a6X9ffJ=P(s~qRM0vFm;zaM&c<;8ZpkJ3F@SpNHHR4BA;
zv@e(}{a8!(?ctA(`t_#zzCz={RE-or{O8vgz?ZBbKZx((dPJ9ySJ0%%uidzaW5pBz
zo^M@@e`&8fd*jzM(M$Kpo6>)I#<$e1xkkWmeFcInoE&_zZ0U2D&-fQXDQJt0afah0
z2d72u@9}$U<FNi<)zlp66cpOkP<m&rqE0W4${ETmU330EjOTK8q|?Q~`f8F2eEHJa
zUev-&^52?&F)?47fAUfK+t@q1_az4_y(eot8iPONv_xXYy#Z)YLiX2!Z-m%AtSocz
z%euKT>~dws_`I!bme~hN00(78ka$c;!z`{9-Bgy;*@*prbiH?6)6KUn3`kQ%P(%f!
zC`~{*p-K}0>C&aEK<FSKgchm_Dov1HrS}e@2Sn+;w<Jg>l+Z#+2zm27dd_>#@1FY~
z;gfG>GBbP6-fQi>l2Yu|+x9GR?=IR>bsetum(zQuv(znBxJeg`FUnnHdg~Rwz~_qU
zBhWT9$~2#E{mJBwUR|ce#2E~9nc_nbSE_h(<YXmtbr{><J_zY3G2*cQsBooSNIcin
zS+s_vD??CBfXMz^I-hMP&jkCna_7Ic5XbjQK*|G~MY5QU@?2+W<3~&}Wl7lk_qmul
z{)?*+b|8MbkVxVok$wM;<Z|OopP_0U*~=?6PuYZs+kcX&sHt4JbM~8wX7uaztb1?e
zE=5Lb6<xAUA=irk7#n3sN6UIE1TP1Pdi;6iKDX#b=2Wj%4ga4lbG$<!i*^~4{5^-Z
zXKHd*24hpK<zEhzl!Ym@5pKX~v*e3ivX9qs+_DNZHCEr{*930Pm?zdfGoM*3v@ae(
z1DgCp7KQxN@#vTTW*3BN{A-d)(^Y7%c@+N`nq_nbj2S<b<2H7js~Cxj{R5+fD3CgC
z)-F<G77hbp%_j*ssIW0s;FFm?>#o0OS#Yq`KRr9fk;iB{!sN)PNrtNyg5ge`UQhuU
zP=E=+ku<b=t&d3Q>J_tY*5n=~8vCsP<sRI9EZ+4q<&R&agc7KQ;kde^bT35<(3g|6
zq~4le63DgIltsVwxaHb)i@ccLW+PSl8w326;u8xp76Q#6-+G&Xf7d)%VS;op0jLyS
zF}}MX`*u9RVi_oqWP8Zo<mg^mxJWSO)6C0(fL{#TCYHX_UI@0kkNxUA9?Jcr*c3_X
zTqa@0N8mt)!e=Rn0CY3BSn}P9N7sl_F9gjm?6zQ%*!o(DwT72fi&D9-i2t@FQdTOc
z!(UrS8jCy3qBwS0H#W$Kw8$Z9S?SPy?(vn>K+jUI%&o+U@`<>=9vDb@odF{bD+3d~
zSk$ktya-ez8vVAIKy?SsMaWyETc%YFcd(AEDRH+6{b+>CCW2*~oPhBF&Ft2j<;RGY
zbodIOo1ZM=wq#XlX8f9}rfi_#(w#qqbFcz4+5H|>=vv@2IArtubN+cpPGS8>YvY^L
zRvK9R5&V$+-&-!E>S|*khWE6lB=<zF(dUEQ`6+IC>fKLOE0+wut2gh(5^fXXgKCdp
zl5o?Fsg;0Vyt~*vvs|TyN{ITlB>T_nckTW}L2TDZDh6vFuh$ZswRdUVU4dq`D<Og=
z`SjH&2)`)DUmP^#TAnjjof&reMOnUK{^SEyP-QMLYqh$Dl|$dN8WlpO<(wzJz$+N*
z(Vc`J#eTx(1ibqF1<pyoAzHzb$6xp$jDO%&3Txk=Gg6e*L0Vd7QH`P)TGOuZhZwd;
zduAI-|Gn!+9}^qz1R|Oa!!H-CXA?zN7HyLzPb4ZVT=Sl?QHCV4i5#T$7(OiS3Lh|N
zlMYIRzsImy1U1Ti&(p_y+vtsd6FD!xvK2;uc5%4NEhua6Go{I0wjjHjTJ2#m^}dqx
zY=9<<5u3$Y?=RO|7>F6%&|%~Y+&g$>c76O$(nMR-aSl#-4d$O3S!-Vlnc@!ksS5Rl
zu{*`IoxVpxQ|6noD)>d!_7J1Y!9QQ9iuP<j6Mj`Dyv|6=ciC!&HLy5FZujFazL*Pi
zE05vP6zQ%+O#Jr!87>}&Wr5iK2;bR3Z5XrnCc?!J>D2^JIX|~+=o>KpwDH}=>!bbi
zj$Na#;-JX%vV`=FJe!K?ElFw&HLoEAX=SHT{;Q^l>VBg;WR{dz-%nii^lQxAG^D<A
zM7%f>(TH_Ek#`dKTb`i%>aB6sP8}u54cLTd+=&bK+#Rn?7E~AQKqbIN2gN3jb3af2
z+rS=zp?tTqb2E)?X{im|<Cx`L=E5U=GLKH!YLCpbz#=Ld7Pu{*ky%oS+dp>3=f#vu
z1(fYfCC}x$s@&OPYx*#((u6nvx`+D|no;URyI-IyB9jpJrLK3Q;66h!{hO!Rc^yKs
z3JaR0-PB)Qn9D^LMR1~`D)TlAS=|lSry2gswxqAV+Z$&US1OHh^;uuK*{;4{X6uL1
zv?}BH_iD8d?WnSV`K8RnmY6l{Vrv*=wX9O|m)wX*Dyd^-Oeh9Z!Yjbq6r(Op%B$0w
zDz0bPp&E{0tyS9t)5juibHQ+XQc>{0y>qNtPk%hWLz7il5UZCaQS8-_Ya}Z(sEYlq
z%NTRm_dqam^`9D;T?dT;S?)QQh?<~N9HHcicePvfZ<Mau(SR@)cWHc5DVVlZ%)oB*
zi^CI?h@3d1_QrXm)1UtVS{1;gTxAIBgoF8NrPZ(ODrWf>!rzrLQyuQYt9DDv#Wiz&
zQYN3Je9BGnN&Qrc?wJuAzH?h4o1M5mc*CKyz3l5R25~a6di#kgyD#l^ah+5Bz?HnK
z2^|NO&PlAMiJM7oDG%K&n@yqv9h~L>gD!X5{V%`QwAGe7GomQMD;5QEuVC%ghEo3O
z5`^CMf%Ur_Cb9Rtw7qDfqKQWZ9NlDSXt`L^F!M6_eJUt9$SWVed2d%jb<EAw|LeaF
zFZ+O`$KI;xENTkn>7;&=dvqhgx)S`d+m$bfetqwx&KxxM`ypd~bxQQ~?u7CDb58E4
zCKD5tF#0wOa@x2)Eom#$J8#cbqS<;4@$TIcG##S&ZV}eO)zSv(7k6c07X|EtGVbiv
zsS^s3r=^dnR$gd5d1=LU*7H92X76VE{yLvdVpPVi5nI^1RruY#0Lx*&cP?Xw>rB$~
zt6%Jf;y$QG*7px^U?wdD`|)PSHC}#yjz8O|W(fDYpYSGDd3ZDB1mWQs*Fe)~bK5=T
z40)W_p-|IBTlfH9ZmE?>g2mCW6YDn<Cy*`T@a`W6J9@QM#4)xNEm~VX;I%Z}h6ArL
z89DQrZk%5U@25w}K22nq)jc+8B9q7cw)R;5V%85H^dQBAh4_m+Y&oviXAkusv@f_8
zzuhmJdc1t<`YoS6&hWy%<8`B1cRwelF0B+m^wOi(u*LQDd-BV{QmrdNnv~z@&X6)R
zUzxP4TP7vadK9-oeXVv9{dq(Fd8Gh;9YW;!Aw249n;%aVIu9SW*N!1hY4xo{^ZwK1
zMF=ah=SbXIE}of4b<4fwo=2pxvabX5P&|!lI;ptxrLTvv?H8I9l?$BE_H{-1(%65|
z6{3&=%5={Ird2gu)TW&u?sK`vAyt~~V6^L8iO$_X9}HzvQ1>HYNI^|Tw+kxn7d{ZW
z8OEPNTXko1ni63|O`d9OoB~#b4tupkn}5$GAt?M+bAQKK?wIrqUfR5m9OYB3n7Ka8
zdsc)mCo~Ofql{t2A@T!bHTgBKO+rbHB3T~W1z?_8QOvOUtlQHbVCDTEMwIpbjcGm-
z5(fXc0JNK(xU>HpwS^bf^AH|xWcUAX)3pm^@)eBgKA<_+++o`Oz{f@B3b;n;O6WHF
zym(E8!ZA+fIDIc%uF<d`!Cg+Op=Et^Co;BJ$!xV#kGR9gLQ=Vhbod^Jh$e;gO`^x&
zhjZdcCd7BYLVW{V`bLlqFYsO#0V9XawmN@d$4QN)^l;;WMwcjX(bO|$-=LFRC!`_g
z;U8#%?L~-a=1ai|G_qPnn;qmmKt|I#PYC+TldmRArhY0+X-xf8nIdWS+h*CFOTcc~
z^Fx-QA4-POXZyKSNxgES{rAt>vN2;lk%N<F&D5vvoWT4a2PTK40{Go8<JFLhsDZFM
z!t&YCyzW7H*$}0`Ki-IxU#O9r-S`qgrD$g+4CM<#ht{FDn(Y3TIXz?>&Cz*%c9G$S
z6%(y1QH(#=T4*w^+^~7dMnp_!CF(9t=f;<=X+HdOLo>Z%zt#f<{;-V^)gEB=Qd((c
zNX=fgX*&j$wQK&2yGl?U{fN9GU$7a`fnd&ne3?qM_=O(S8i&f_c>)Iw43?Gt32#G$
zs0K&Js4JuIbBt(hmiY^hfZrwroV6Px+nL4xMNxtkVoBm5I|&(KrmF|VU15U_HkNMw
z9&G`biX`>G?xzG50U`GW?I?JPoon*I`?mPN>0%uXFiL9oFm2(a-w$P%zg`{|42*c)
ztbB)_oJdRPkS$6*l|=Xf?fc+!#fd_hQ}ziQtY~qhL3Ib2n02u!%up!dZ~Hgu=_e_C
z40}w2)EbzH9(7Vdie+Te&<X3@)s}E&Q_gUF+VJnfs@)c%`Q_*Mrm%H~09DC-zcIr%
z*zVaCe_iBYOU1)KMA47mExa4<y{Vw@_V~rhyD$Ll83^SVk8cB4-j;{Y*Iq3h&G4m+
zARk6eMHc!_(;w}}Y+=9?x8Gk4VI$KHa46kz(CV|EP$5lm39`&RW}%jEzjRM&as@5<
z#y|Lj@<iPcN|J8dEv7!)S43YWWx<c%Ifqm0L^NF_|4qyu5i}%^Gf$4mef{(b%kIl^
z?DHlQEyWy5tnZV<=Xv+lV_$QS4&sPaH|<+37%7k8&$U*(GK#;ot}wfZ;D_64Am+AZ
zp}}|G^+%=t=7DQst^`YyR4G$+yjPGV)wXO<*6eWoBo{5avf{pz&@bYIzR`5q6O_QP
zeU-?_V_Edy{kFeacM4q1h^dS>R;7;1r|>2<I;&+dVMjD>IWRmW5)#t?gSy#AE0ku6
z$*fdv+YXEx`8tkQbzE~#&5UT#)=9icbUpH0WC>-S7Tb$lUzsmgLUPR}M7A4X9vV%L
zOUQ}c82FMl6`&ez49Ob7LzD_6!It#v+YjDOmde<`Ynj$kt}@rS`s^l2)gxnaX%N^N
z%l_lY$ocY-IpE)22a?R)4AB?gOYAvrS8Z9)SX7*^8D41s^(Emqq|SrBSlx*i{F^kp
z(+WZAlaCg;q%<kQliSA^`KqS-7T+K}q2|0v_&sF-;tKk&XvaIFA$~Z>+CoVeaoddJ
z=5iNY)S%&F#MQUTV4c3_0QN)$=t#7$He}AK-s&d8r#W*oSgDa9ZTka3PMMs=3SyQr
z3JgFR_<GdfOwtrF*<V38TbCfBw}<OB>~EM}T=`4bDy)!tH{`E%&&AtZs>R#j-r|;l
zQp}BBm93~t<Fz&nE$va2z+Y=$=B<KoazZkN6a&5cZA<`;RbBwqZSb0)&yr!&+rCnf
z$bq18*z=dHAuvYbfMN~S;N3n;){n6AFEM^7l`&Q84ITQhU`X`W766e?Du|xYh2n`5
zrXv};<)h}d-n_prd>8@8+Rrt9_hUcy-qJ#SQ3q`*&OWg?>otaaX*%D&&#c_bsX64x
z)9^1+KI$A2893qp96NvoMkV$XUY}vgp-GHl_H#9cE=fuMaI1@cBWd5|Dg|5<_nkOO
zTRU4bL${CrMFTigJ4kf~i#q)4E5(A6VwlGf#wUn4^<17@Z*;E#vu#k>NdotFSK}Z`
zljU1NI*$Ds0FX;;#nZT?3xfF%!ydWuKMtBh`9h)-j*h$1+V~>JmJmMFBn0$IoX~6d
z2yR|s<9gQrrvjOXB!Ns5IybFaXkzl|k3>q`<5!q|qg}oMa;>;XC72R-l}cDJQ=87U
zv0F&{j-%lPHi#dUnMcs{Z3hOvk*#pinomP?&w<D(4r1A?2Wk94f3SdmAhkca!k@pg
zRfs*QHuC*U-o|X)uN)SLr}o%vdf4RO`mMD#OGafFP4H+8ga4dyKm&Q{f0H?X-2ETu
z@&yGkT_s<u$IMT(X23{GQ=Fngo7P|g{8^aS&~L*m_8p7=lB4=R2mWUs_V0r~Eu@@f
zfOsQO^kl?tjGVPz8SHI*Q7dx6mN)(u^Zv(-DH9Z4Ukv{|)l3&O>&;<%#mjluR$eS<
z!7FMw#{ho&UlGm!b9R57yeOF_;i-exc!}YpyYLB$&^m|t*6k0fn{S^o%k}=(s{hA>
z59oysWaxU1w7G`umcc+1OWGH1_k3z9gvQev-`b+={$GPhl3rW!`S+QEcfN`W?zWkb
z-t~{6F6TV0tpDf_|Hm-@zI<>~$i4Lk#e16-u<rvoZcfiO+r3Bko^IkI|HjP!xp<UG
z3a_6CG7-uGi7V$Nc=sjUs>9di&;tL8I{wF^{qyq2qZbb|L5qfrrvo3(Z?FpJqmc+j
z_z#+4Fw&y`A6<YyEA>BS_g*(!D3kEjx%MFPgGq@d@X$2A5Hm6Q|E5I#=QGcgI({B~
z-rFy9hvF0!RBs#_<%99u|LXbvkB|L3ltKjA{56Ubhs6;lB-0+hzwXb`KbnvK%bRJ{
zLv9(L-WVYx1}MyK@q3jBz1hUY{=b$cU*Wa+$WNSyq5{8rIAk)C^!RTL`Tv|RfjSo>
zRsV^W_E7B5R5#7hrB?r!yZz615s@^IaP1{gk<3>-`wMjb=WawK5`d2XW{>}K`8yy4
zGL)cR_J4mcVc8Yx2rQgRY1^ZJE64t?@7_)T;V@j*WdFl#|I3PV{-Hrlca<IfSL@y<
z)Sit>F!23vTgyhvPvCvV90k??R0sdZxCE9ZG?>tl{Fhh#pM!_k|HGmXdWB5?=l}n@
zmH?`{Gs`e~+K31RztwwNk}Esr4j@4j4p~0S-nL4yct$xr>5(Vgf_;1PFm_o!t9~=_
zY>9Fgk&ASi)tY_%_C@tUwpgN&licWdMT|)N!W8EM{?x9z1RWcXco-HVuWZWA%Asx6
za$I4-nFc-08i)8QX(G3Jg=D9t%FA)+Idr&{2CCWcd!^ZHR=w(u3cj}OnUhmtSV7k2
zRz-3;O`4$4>bD6D_I#RW0*l|Rk7N=An@MPll=9V8S_$~G2EAy29a_t-@1QMS#@lVA
zZ1l(K!yodma6KO&UiszVkO0@(&eu7OZ_|<Ik_iN-?f7oW$rjm`tjn(sxg|}j>0>8s
zy`7Voq0LQ5>3XjHdPG{(F<NZ|X`HvQb~oQ{Y5>y?nbryql(ieBW$-@v(BwgW*|uMw
zt|c$Ds^u0x3~Du-2j1u6x2E}aTqGPf*QOC8>Xc{P2I9v=?VRo6)e+rZO^0G{fM@5d
zeJ;Qec8xs$E&Zm`K@KIhJw#vJ*yl-+EfVcJONrGU88@gdUY_8J>Uw`R?8sa`q?IL}
zP}9OfRXxZM7r9P0T}cA}sD{Ne3Y&5XHky$$`#KAJDwW@#4qRuo!IsZ#BvQZYCS|1Y
zed8&R21v5xSa8Gp?#YT$vQ_E4Ixeh;6HW@O#%m!O_-l4Hb*r<5<&U{8_V11hZye`f
z%6vAM^0xa_za*-<D=u_~_bXCm4bkHgsNlToJ)X0LKjeNkv{sNSH{jodIG^>?j~6Pk
z7QDUst`+x~0o=E7ggNuz6brGSi$!>Jc|B~CU5i^wl-Uhi3$6^1K#^MQb=?xR(8x-h
z!lPuzam${Zaxkd<a!e2>b77k(Wa$I@M-AY{$s(4`&Jl*vV$h6rJPHc35XUb$x`R;H
zYhHfu<tq<aW}vAYPOwGy4DZscuiqgR5<UAVCGvYg!eRfcqogUtdZ@tdGOfKm&jD7l
z74}?cdkwc>0-EBs-PUQRf7Y;i^Fc^sAorISbT14@1Fn{hAC0GBPbzZ?S)c=J9a!1q
zFHOPm<GtPqed)wm0Y^VtSt(q(=zNH()P>J{f=ReK9NUY4R$aq^2qI5HVNB@Vd$>Nq
zZ`X;)q4}6K$-OU#L7a@tX8T<Yw?_$Om5kcb{9Op}*ZXyw=a*wo@^ydIimCMsytcD=
zL>IUZ^#upyCkllmyIZxYbc27Vs`p{!MRV~5i`74+iR_IWvwYuc;?|Uujadv}$$QqX
z)Af`-_9yFr6$=n8nx=*K?{`1^*sRGe@ApBo{eY#ED7!d9YC5uM$I5nDCy2lJ_kpC;
z9VGc@-`{bQcYn6>6tj>Rk~Q9MB*@dnJ&a|M)#f7fs5oSK*;Mqqx>c5)PhydNTUxHx
zg9I;^Lpm6dw_~Higfcxg+wwySj*Gmmv3d8CUB8hOb1X90&d>DaS_0z}gK_KbPb;ee
z6`MNoEOJk8v|@T{0^qN!@6#KS-aI5z()KNF=t2AL+Ne~d40xO(p)#H+<xL!oxCraK
zqe#&9S_>BXFeU*1tLC(lCaI0SbF>K+dw?)!D;R3ihgd#rS&_g`1o>7kz^1aGP1k*U
zcbb|!@}#A0e}LQ)z{Y$5rp5^Q@%}X9+Vz3mQ*8grW_}69bI1MI*5wr26{u%?*%Pcy
z>CJDxeBAp{xjnH5GneMlItT>!J#t8knYX}2{f_UuPnIVwmV@nYRE*LVrtYomObVY~
zPdV9EwVhHOj;pX^84+0jD=)@Lb`sRZb1qDE^Z7>wQxrtxyx_xlVDIauYiWX3>v}O6
zAVi8;H=#~Q%<|P~+=m+L_1`$AJt)F-<;#mC{)Qn*u_RO`1uDUi^@-?dX3G9mXXtKW
z&83yRNzJSE@x2D68%esXSZ6%Vv9m&z*98YdF1wt>1=dczqUT5V)yVd<EYH(?F*8_x
zQeGvdcW!xaUe_RkI=-OKhx%UXD+_PwrGc5g6B)P1*BtXzqY|znnwsPl;<cRG<;!q8
zs_Nv_5<#a3Eb2)7pa=S`!9ld9w6`dzu@2ACaU!$6k@(?t!FV9FGJuhC5=)<Y(*a28
z?9F)5yn?>;MNu7#^Uk%doPdtGFY_M}HDZ6u_aS52TUPnWrtu5;A{e@?0T@@8Pn~w=
zG?Y~!s5G-T`T)$ZGJT?3reh9`SFYxNBuY|$jbocJ!!+Tg;53Oto5SfhvpWRlMAZMZ
zx0LnLj3l_))tC1!eTXa#Y=JdaLh(Ebe=t{cyTwteHsoRaXynPO&lSN8Yg73&{x3Zb
zd~v6-N7FXFeMba+Be##ia^I{+tK9}&=AQJvnF_~O*bt3!Ai-WA$}pRAewFPTp4-V9
z78J~ZntNdHZc^((%JQ8_2so|PV{D7_O7NT*Y#=is0VS<=a<Mitr;H2g3BYJD4t<)Z
zZbE;TMAo0woNl)X0iGjM$eD5EBQijZtI4QrcKM6q)|du7qWlnfUYKy5=!AQc4N>4!
z83#xTdOk?cH&?v7WFm6WO7jm&NGQ?&iIy?3sOr5P^4~2d-IR6rCDjTRn_mi6CMPVs
z0&d*!MS}|m_WV)({7&7GP0)dCYn^Y22k{iGzDJW|ik0%k_^T0D&O?4*pVH6;vhaji
zf<i4)j^!eE!&zWZ7tbcIa{U);5Lmk}$x?Q1Op-UQ(~jl#3P>dBBw1H6EIN(9e8Ntx
z#Iq6c`0=>Ro4_a6rPrgz16Q}vTk&+t$KkH!`meg@*MV68Yz4#Xg~4KF)uUuwyX~^U
z%`g6;iF{74#Mi{L2efGWMr>4A(KA{xudigL&H{0GqvNflFvQ!Mx*=(G4vPh{Ygcd*
zGOv_$$eExAzb*?0fp_b-ggb!Oa<rH{cjl~^R^ZZJD){OO{JlDSZt8|JmO&mbK(Qq}
z?%!9!;JdvCv#5?t*)_9`m%IH_h8lyPlc712{9GFaEkr(CsNn|<B=3>Df1^&>_CeuR
zGj#!E^wv}EcVlLh@3kL25WDL~!c|A~piV*VvwJ656(?w}W|6~et$oA7!N{|;Wn$OC
zSlVRd;xTG(XJ>FH=#-$<>N}t<UoVjXa{PVOuEm$J==-}xIX!frzpG^qJ%C?O)?2<f
z6BFcmb7~z4&SA<O8A3hc8(?h&6qI5vbvVfmuu-cZ_X}F2=a?_|a#JN^^A-mf<s>T&
zAHxa{<}rRVv1o4AD)PnT97StwWmF;0q5V0CtR<FGK4r?h{3rU_#8DG^u7ZQ1K0%xQ
z96`r7a!!>>>1H=yYKN`m`3t7Vo%vd(ST76c`&n5BL<om^yxp@-jx8NII?+~aUD@#*
z^&EHimbMOW2sEC@txI3EAqhEFSx6c6JP9E+Rb#W;7vjl0&Rp$Gfv7S1*6rk3Jx3d7
zrIY~&0%tDNno(#^ZYvxmfBXJVpsnV|_FxLwgw1^I{-U)_*UlCYRGWV-!=N;qiu^uC
z_*I<Bqq0j3v<5R|{EPxzoR_JZ$stR_O7nX9Uh72~sfn~x>-tcV?RgkPsz4RqOb*A1
zr5B(!ZIbX?rY1+-U&hgeSoNDZJd6`X^PFF7_5{K*M8LyM_qpV$xfJ;D-q5mu_18R4
z&;h!v0E+{U1^|cSodhYY@n-nb+tr`q^4?+OFLoWYqmYjmv~ibj(~hMI6~mmnoS#|0
zS4oj5Rw&>6acir2#dSD)q(VvSg|Qqi*5Jv(2C(2&0SoTMrq>{kp3lYH+Y|V!X2+8)
zy%fXc`SO61o5dEA2>6<l1zFVxZu}jtaMhjwNqbJlpFmi++d%)uWvJ7I`lHBtX8L{V
z))jY)4_P^!dVY(6x3-Mf99;`pf6jfNzR_P=2qrsfQ7OM;jymtzNtm3mfG6fMBVKC%
z+W%6&`nfg_`6VWgmi5;M?u-o^r)Pubsy_oGB);|F&xkfX*OkY2?XWV?2PiN!uv;R+
z{9M(9nxCq;(v#*3ByJdYx01!pQn)VKi)}{>JVMrTU?(+~AozrbKB8hvOEyMoN|<3{
z<8x|CszFOYO74e(^(gv?P?nL~kEfg(?hW#}<2f`=&{ga&*Pos_1%~-u#5oPem*^m3
z%o46u0)*5-XR2RT0S<Cg#>N`xq%7$kE`KA({Bqn-_wGyD6abSAZiivq#qLZ=sUK;%
zbX@Pc^#fQBSx-&v9|xZ#JK4%_*9{wFCLw1kM%)B$TFm#jCF8@25}%*5R(ARyvTcF8
zm9-_>Ml7Hx2G5GEOM$7Gtc;p6P)-KQV&>5_W?1Z!7!7kSY`+Vm^~9GD^~C5jY+`s#
z0`Ws4q@C)T$SV`03GpmCMfvvqw#zj@czUwyR$JC1g6$0<O(=&T69>_fs)yopttR?t
z!)=>gXu)%`hqFfD%h$Cy?~m|-wrJTa@#!)>kyL1mG452!<g$Z5XDmHTQ(A4-X{XpV
z0m)><eRKcN`^ePP1UJu7e7T!2Zfg_P0kG>}+lmsN{T%M<Nki?F4rF}v1bylggzI+h
zKlFEV9!v5@i3)Z%N!asGm%k(*TC^&pKQQHH#x7qNzDS}Wer1$I{yWQ3Vybb<y}AAF
z%*fgNZdO~4wG!Qv3UA%wZy6p%$DJ<=hyvw~RB=Buo<vMf_F_^H&!>{I`mRN0)jMnO
zz%~q<QQH;PC$aFt3_;i_K4GA9FBcBQM2<&njG?FY1fVDq|Ld{uG(X-kJ&K-C;QU30
z=sJ>^NvTT-I?jyFhMqb=lPY9T#E@(3=7^HwNak^{adUR#Qxc||#Mg)=a=!HGt7QZ`
zQc`z);Zzy@NV8Q#cf--0sFD?-(wqCV%SH`AqiMo_w;Jf*)`ON@wP$#Hq?AMW?VCK-
zc`}O2`Sb0D1$fPBf33CUlDF@aG}GH{_VFX*l^ti0g*<SwxK3JRrc-;$j<pf{PT7u6
zD=UN8P*I1$2b(L*>UTnn(Opdpf14B3mnBSu%dq%qVeE|)Xd^f#oF~tR;x9|qb7`g%
zK@&7?8B$lsmGmnV?TcA0;FDmyRey*4rJ)DrXBLm4qC38H?_FKOed0GRTAK7FfTd>%
zuJ_;f>^LuuhBVzUpo)>#Sno9P8#+b&;!6~(yh}cJ#npF~`Phd_mG*<-9MbAn{OQ2>
z_Oey@w9vFTx@*{$I;1cYKUxT<MHAa{PrcK95TnLOX+5>dJqWC|jj@V$DVdosHO(t%
zdj^%7lD>b@!Lik_Z8=R4D)B>r=DbxI0uY{h)KHg_ayr2?6{k6|`g=kAZWHBi1-q|t
z)a6}vM=6vqb#%RXA6!EJWIwtm^*mC9fAx5mTZ*=^Xf(e^F?`_1QIE!Ms4oywtBFqi
zb^qI|u67phug_g8{4>PlzY;0P-=Vr8C$cB1EWgx@d&fGrS}%B?IthRe=yUyH;kN5G
zUH&MKo?XnN^z>}=+H$HRtlak`8S!nQr#m4rGYLaHi^uq{SVCK0r#%g>DSijD)!`nE
za_GV?qOq9{yC^*}V(;+{y~_q`8{DMe&JJ)J^Iaa4^ni9zqLoR^CnBR6<yqA>H+cIA
z&@PlZqe{2d+WKoY>On@UhH{#aV#01>`G|zf)SG2N%WKQ0X<r&XwjJyKIBjSswHC?{
znmCvU^^E>nkGhc620hFPHJ<9702N7WxtVY)pxver+<qX4<3b8)H5dO(D-NXkb`3I4
zPlI?6hQEmPe+kn3G5@q9yT`#*DT<GAwEtonppkV@ivOCPpnZ=qD_L5tMA7ep3mmiA
zBFyyTq1*U&qCAOd$l3NmskQCgP*Q}pfqy*R^&<CWBSfdtO$U>n7w|lk#9C31^hZmd
zld<9V;gED!$cb;lFt!=*b<bakDEYC2m<MjV`6x4bbjn_7VP;rPZmgw)<q8L5JlR3?
zgwq6B=*xJ6>Q|#+Iu44E#@6EeY9%Ll0=%J7i-hS)$huog)bBE%8yvCk6$D77ySRdA
z`H0MGUa0r%!E%U%)auLO`C*ejBnoc7+M?x5K9Avj3bIPz?S1lcF?>Xm3_uwNGbOzE
zud&10qg`}`5O|z8v3%<_>a^l+w0vy}(F^80e|?DnwmWZ5;Ax?IP{^gvLR&T%aQrDq
z3>*8RT-ptJaMWeHuQVcIEx%fA3^VcZj2vd1F?@U%KvNs<SV%8_lqm1XY>@qxf8{FC
z6y5+g5AdcN_Cx6hZaa?5$#lIc)1_`BQE;h6;^nH-5;JKJIW=T&NcF?YbpeJ{LJ4_K
zaliH3BMFn;UeYQN7G51QPE9#|-`Ty;fN)`UronF*yORaO5p~lrufaW$i>S)%A!%s`
z{ZADp<6(@T>B<Vt{FgsOFvPa<`p1w0Qzmb{Bgu>x5gYAn5r{IF(df2GvSeTQ)f6?a
z1U~Bke==XKh2=TxVWlMHBm^%bTUUGFNnmXS9XF${M8f2_KUV}I-_dI3vHf_55pgG1
zWgsuEqLnU{GmUc>2s_M=CWkr}ObfW)a@<nQmvyhZ!POmDM+8&(&S~-crgom=)4l1h
z5BPY$RqH=-fwKidF-*LHn4x=@1r}46rB+b5v$V#PI7<NGXP|~{dRDi)J6bMzaRN=k
z6-1+EjT@CQXkfjg89Q#iuUfoHRL|TB7o(=v;{3@>dJZ=+@1D94QJ-U)Sb}rbGuAZX
z_N2)+^;aP(>M>|PHuy4sUf^20b7j|eDm#jsNX&LngiqdzeDQ78^~PP@czRH=(e(q;
zVE7N|1EVLuEqD}eySrUm_FXHl%|G=*)e1xrwt&#y7t~seWx+}?mHH3V0cCnY>9CmZ
zBkj!WM8~4u_S>L*m|I1>0@tl<S|Pg1YuMY2A&bAwq)F-)A9TH$e<XuWau{mwHn=sa
zqBZx#gfd9T6U4xaaQP~DbYnq__tj^|!iojda;om^Id}wWdMFMXAJS9&?1&v=oYDun
z%qa(6tPR)PS<m6xdfdc*J%q=uH7`{e2sD=;CsZ7USPz>8LQ+dPw0V<F1Lhb+Kr?UZ
z(gZ!dH&Mw&^Qy;k+qe8DOx#@X8Zq)Oj@>#_RDVvkU3`~G4}d{dOFUuVIpr&P2zp4%
zg7hoXgEQGfoTXWRnU<%`aI#{}D)Q)6PR%_3#7cHoo}gHtW`DP4zA$#;33G&C$Mu7q
zF<IN;6J-&9n~=vB%wo0uNvTTDQ1SrV{dfZfAVpkJz;CxhT&7uXx(k)<NfFB-uAN;d
z)^(h8wAr5}Frb#pbfD4XL+^_TxA@~r3)wa0<SQ_aQmYKMDWOh)+R!_6mz3pr%!7>Y
z;tmNL=9+=6`Kj(q{L-+>r(>Km7e;}Sub4L4vj8~?iRRdr<n1EHFxdw$Ao};5cQ9Vy
z2PCS=*h#qY!DN{0<@k15`p;5t^}VGxkfIxYNr<2?0nm|Y5htI9K^VC4aog{Qy88Fx
zYy9ce@lJRf@f86&3sHc-6Hl>&#g;o(24{gANrEjS8#>a{1WIKUX%<7H_?+Ni=8-&M
z5&vhP4e5l8fC&2z@^}N!+0wE5Ki#G$S*L68^`M?c#aST`P*Y#gVq#j(f3RL1?OP1o
zJgL>uDLMRAXv0EczKOLR9#*n>a1p<?8lLr!xfLPS`U_bjw-T?3V3%a;=E6N~&ss#E
z0UQjhdk-Ek>Wf@{99tCipMohgJK&Bht#6>GnQKMqB-qULwb1Q%&6y@z)MM5`FQ5n(
z+U~i;`$)ex2WxiyG}xFQM|mB-+{oFUJCRcJhPjZKtt`yt)F(rk@<1F}3XN4%ZNr{G
zZIIq-<aaSWw|jm5858Z{*$&QWyc@?%qd9`h?|K|QNg8O|->TYbtnPW;!^!*kYUfLh
zgnl(0j>k-H;g>2?8SgU;C{6r+j0m3~Icpn`Tt_kUO05LRUCCtst{H1ywQ`<y=IR#F
z8#4!IKRkPWwPwA0_+5VSiZ6FbsGsE=So5+y`ngr(ns6UOk6b`u*PCJS4<dFga1jvX
z^-%YcqqK7z0u&-8FeXw2N{0j<$u5I-M(08K5Y|Pmkf;!a;qJG$o>1I+{vr5AgBWFm
zFjalbmgk9W%_is*#bfU|p_!SW)AFO`2C!;z&{Nz3krfM0INpI&QF`<x8R9ipc5rI<
zvBNPm4_tP+PL(3>&HBj*kn*x<D?atf0`SV5tl#HhS7Ysf$G?kR&I0dfUXO7bd#BD<
zWT7i?6j)zN$3JRNbZI#WH4`9r1tuB}bxw|X#Nv$cTB(yU5gFox7^6Ws87r`r?di@M
zkRP+_zJFJu4_0B;aIc++^;<n_>sB&%$y?=k47F(>Vkml~&9!A`Epdk4E3zW+ww4~0
zuM{uWImV$IB@jPZXHUqiQikp%S%6>*{JEknUj*fT!KUc}f=2jnCBNrZmdGCzVZ`;U
zz++z2siCjo?7ZnEX9E^BJ2A#R$-b4LRW$<ukQ8`IvG#-?-eyGP=_6C_x8>k3`n&lW
zjX#TfXp0pJN=D0N7<AN>RtO~qT+#au;Xme=T$-uCw+PKOGIy#!gc>lt#kHQ=vycFf
zrS~*X-%h!jyzPHbv$qn|<m-51c5nu(*~<mlZhE3393R>1b*i7X(R8<Abs%LR&N0AI
zqEiEP(B}dgvVB<_Jy{ZdpOMa;BLU+jcH6n~q+d3bU_7<S*@Ct0>=(RymS=y5w&DeF
z7Zdt&W+NGsuSao+5iXcd_SU15j}L7vDE}vsN<bdzfr;jeFEW{Ing9>-P~}sVPqxoe
z`7`$`?{&6<&2!K`s1&xKBqW7Kz1S3gn8aEa<l7~KXLIT}YX)LC^%Nd#a`de+P`qv4
z2(Ztb=32sod$9h(4JItJ;FC)cK;@P!4>2kI`aJQd!Z5xq6i4GC-k^u?uq5^&Se@%M
z_5~RjX_*(8&l&J>;6|J47l9{NQ%~KR!KmfrVEhP7Ae1~i<J}K09<Iws9XUYKq~Gzm
z^nL|*Ms=J;d;Ru_S4CK{@1WFK*%P>IUVGk3KEdt|kRra)53*B#lz0`YAqMF8I~SfP
zvpKunA}PtPSPwTD`oh__1)Ad*mO~jq(Y)RJE7qa7B2Gn~?ha&g_NkgyJe0RlW7GJa
zO9`zO_p;HOnt{A|PO2phH<9<BS$~-Oe17L}n``^M>jU^0UzT47598`lf1OL>C-@BG
z?XHs`^T3(<n&tMi!PmojFviV$<`x%4>-AhR9uR^#>MMrgLj!t#IX%oE1Z#+d15D?W
zTbrAtMOSCXD%r4EBE<A^zvze@$#_ZiH^z4}?pS%G&XOp!$V>OWq#9y~H_%WSLTc*a
zdAmE?9e4TLkB{#WXY&*e*g`D!&e%kJ8?rlBQ*4Kp$qrW@$P{o8O<E@+Ji(Dfqm#J<
zhLuk?TuX#R?UrakGG&)7)ILU&-y6%X77WL^5NBJolCvskxHXOrjfZ621eRpolPQ+3
z^|`4%#Z!-=Gd(?59cInDfAX5YVqw=t@on*C*)k{ft2gs6D5g(jS-DnhB`g=&CJ)Yh
z&B?w8yC91L@yq!vi6&7eRw;#XVw6!Xsg3uwr~Vlz+_9>-AV)1)oJ-CI@S(4}ZUa<2
z4BPcIJ6{D?><^hGNk5+Hgl70<jlCP0KL^T=0YtG~rjEhc<Qu0$W<{5Xo*a^U@nWGZ
zYKl0Z7C118mu=q9vThDxR9k9W8#I#mJq9|jNmMk?!^h%68|vh*XsM4)$@U6I?~FB1
z)s0;4me91Ufs!^WfNB{BPE}O$JY)V`n+V(U3}dNI==9|VEDxs7FY01exmAD~alFUs
zlT*2%_^Yla^)?9^hhyCx0kvax1cw`p3o4uFc=&{<;2aLUoPk9>ubcUSUq}%~F@WKv
zz*@(#1)g4nTXa5iIo+*K@9p4h=H5SN7hk8fpxk#0<&qMgS}#%(?Y3{*<VP1@I5y3D
ziCM+`Yz!8r%NZKTPh63mu>tOFMNh<`pH+s)5|^|uE;r?mQZ6(AqOJH9(0C^&2I*8h
z?OO)Cw=nqU`>C2VfoL#_{me|nrK6tqVu5gO+MDyg+>g?i83`OA$F<fhs2#UA@RQZG
z(wz;;jhfDEM5>**b*_?CUq58t*wtw!pn3tue%L{mTfGJ(w@HA=gxAogoY{;NQ~GJZ
zuzKMPegm!O6LmwYfb<tWuQ4_<e$%Z_1_DHawp}!ZHx>;Z#Xc(bo-Z*@BlU2!EK7ZS
z5GS49P=9qLLD*M1%v9>Yy>`yoME}HEGqXJ8mJ!~Xu}=Khl&M^O$kl<Zq}4fIgL*Yb
z4aF%_jOh5Se@R2qt^W*{Gpkmwr4a+~I_HCy_vOtB#M{GMRk3Y-1FT(k^KIHyw-!dm
zn(?i>4c}enM0Z{b8x_L&vcQtAGXTFTN4?ZZ>aPX0{&!Qf>{43#?(7XV1M^DAifmoz
z-r(*PY33*voq`#}w)(ZP2}gy23R>TgRkQZ26Iv%n&qrLE?7R_Xm8sSa98U2&D_WT*
zTrI!?&6fj)g7RS<Du!1}E9*1q8lZ*QfwfneZuo>>6E&pkyAf<-6+iv&nX{nTp3C*x
zaH|btdSDD;3P@7+0=Vjd$ov9}3!b4;gaVUFn9aN|h@-bQ^)xNZ6pv?Zz*7p`NG4;j
z`W)R8xB@w{M+ElGaJ0*-?Yox`xUay>&Hujf75tad!qz1@GcDH83tWjzDC%@^@qFUZ
z>OtJKPK<@GYO95|B^+3-sCl2-i!$mKC%uT_MY-Y%pCtoYYx`Nz)GG(I%N=(e()lee
z&K3%-6dR2e0sg}Fn=AR#krT^Pb{pl#&k|9-Ht~t=JTr7$r(9c7+oWY#d8xpY*>VyA
z^LOcAA8q+V@5fJg*MJ-5&zmdIoEnb0wGCs)X9HW{JAH0vyWt0|<Kl5`m4^CWdpZ*C
zK{O}HIx$|i2GIbLnv_=Yxz~@w0(yM0Nqe)`gE$cXr3LVvACUl;^GqWZNl?%(@Q%bi
z45^|t2*T!n%Q*A2n+8un+THD{rVQTh<LGSRl_0fyz7l0}4sCsdCz>t1kIE`5LK&WQ
z1+&x0-O#G}@W28zYbgF9E7zv4)FGSE+EL^cH+9L2bMyGDyZ%<KXw$PJ^%HkNHS*cl
z$MTk}TA8rSb?VTG{bobHp}j_pC^?{>w{_iX07Ta_(KRtfK1xM`a=6>8s*N~R!En^o
z^t8`Ex;RfdMTgt)i8sWaLtXT2Dn%>mM_CYZp%62mlMz@JHlhk3i|Lt{+sNL#DVx-<
z7Q>AjD)T#Vi*8CzG>l&gwYtBR`r9#+nf95M<<t(>)VG$tbywZB`xXnU&@tHS@}gXf
z&oHv<jWuA`e=54J_%hS<dT$8A7*Hoa<YoqNVYg`hH5F^Wm3qEc7IUTbiU;cZ80pAW
zEaR5&)+MlQm#nEAdTwg3v)$8wD36$p1jo+Qm1oNKtHLB^i?0dr#&P19k+P*DDT#VD
zr;*^HumGS#mVvb{o|h%eN-%(9o1)c`(&48Oc-rrZSFu$^2t=Oui=fn$6er*}L|<fx
zuf@F8%PlzK9fIxv>FQz$>!;7Tlw09C3mo{cKM*K^JW|!-(&#}6mdrWDf%yTI0H{?P
z)N#=c{LDaTa*ey?)k6@+VDo{*8<{?a=1<smF>qB<Qx~L4!kVk}jrU8YXeyc*gi>wG
zW)4%{j4pTT(0dKEOzU9v<BqeX@Hy8P!m7C%SCTk<E;-Ap+`~^Lkbqy}JrH0z5c#~W
z46_rK{Cq|>2%P>6QL%m+MMpl`3gLfg;55|8r)E$nfe8GFY&Rf@@Es_cb8XEVc?iI{
z@)Vz!$#IKqC2RIPKzet#_k;yl))O3Oy~5O*ViL1=d;qC}X8`|7Q^ANh>ZmN=QxgOQ
zgF{&$c{1Mi10dVxMW6du>i`6>b0Jl7!O56pd+9ikP(L$SX|i^#R4*nr|Lta3(S8Bm
z>$EqHZ^ZQ|aQ-V5odipQA7wx!?dbJ4=zO;{F!Df!Hnx$_?rd2OfR(b=s(tXQHdKgs
zx!$MdB3gFI?PMX(xRa;*`&e-5o3+DvLdG!_>6=ET_SeG^Qs$`Ai*gmIpk^I1QYUx-
z*^dyW0M)Ms)bi*J$^DohdH@+D9s`(Uu(V6OD;GVvsucF!K<+exFP$p>;3MnCEX<*y
zLT(Jn%eVL_Q1%8h6FX@g`%XFd6i}=>XAn2szHkawZN{5Q%gaKXB|#E>rOHl+Z5p^D
zF*TGt_3gZZP59(EAz-EPkb!OAUUd`CI2vPn1Yf%4E$cOqB*lt$9~yrl6zMd7XM{yo
zmHv2^C&9@+Epx8NZ-%bT?neO77n>b=7niYV#aWk%Hr=xMklHbS+2F_Q`FVw=0SLcu
zAL9Q$m_^Z{Ry@we=R<J4npj$#0bRcU^?2Pe2Ekn+Bhz#9<VN!bgT%}5Yh+&p8i!Nf
z0w~CFSVKBA9NKg*6cYcY;;TbtzHKHTB+pjAsn7*<i+?K19;z*wme(EtFm2<?VAB`1
zGozdTreW(4b3Vx-^EIa5U|2Na<W_>NOUGqYV6f+d2tx={_uUFQKqFq^bTlDZ;W*9X
zdx{e`Hp6aXVH+u^TkjO*PhEMZh^KVqp*8cX!)1O$Ay;njND138OUz~<Hg$H5uDpjS
z+-WWmF>{kA7`i5BXBqh^685I<GhIEsO5i<|WJ^|g6KDZx;c%L?%@Ny2YJVfW&o~@R
z^(`2~z^Ak-#7;EX@6}zo{PkteuMa(0oNzX>Ef7Z>=KB~|kV4;$61VGz*|s%@On?a?
zCd9lAxvIBpAozZ9EMNI;J$yX+*E0qUBd#sEXNh8Jb~Q;CzcsnvAp5VzNIjLT9kDEV
zp>oCA`S2944w0p)0p-_K)Q-qs2FRHB4cKbu0T*U6EkbTQqxiPSuEc`(*I#X>W$*_)
z-)-M)#z>nI5GdCMjDTpEMbzO8J+Y>y-o|n<SI_$!np%4Nb9H(V&f`d(6-8Zp<<z`R
zZap>K7#)>^GhtD$x_3jGO>YyoWVu5xh6+3_OB8dVozH@J71TM1#CFNRS_{aziJeQ0
z-xBd9>uNtvHLtnctN4_--Zl+}Dk<Z_kybOX6E%ayp_x8GYLCM%#f488uex~mvP#zV
zhPetAd7Web+L#zf1zoIn$t4nc0t8mFi<Hy7C%)Nf?W3U2J6_+iaLN`0EkQ%JC~9f1
z@BU~cQ2=}}OcG?=WEY<s$t(bcCw_XE{9J?Qv!~WK$3W-QU^Rp8w90nCu0hp^;Lgyu
znOZE3cOB~xG2m#un;MvlonR?U={I{>@k7QOfYGYa3Z23?sBLcyMvmPEob&VNPE83b
zr?wrvIT3eNc*L7HGW0z3^o`h*dt=Y!yssSjS?giu)5BA*XXNsdY9F5*=B&hv!%><E
z*C%%s%Ty|HX8R4vm)@hO#@Wm~#72Xkara4*8AogrA-70wn)xV8mE7TXopQyY-a$;C
zx%D5)0P-sYBFiiPBTodzV4|<<O(>&~jAwOA>E+IXl<n%cC|N)2^h>UuP83W??>;dg
zvtkd)Pn{%vXnDIydUEa#55Wm-w}AHB_FJvLpC>nSt&lU@_{T{<nt^hXP(Mz#D*9A4
z9J)<W#Qfo<mT&mQ8fQxFO7J%ve`<k&M#b`1nGAWaI=I*1NV@njOTz~T({^kog*xJ>
z;%#XC`@WZ`w!}CLrGDXD>Ty@=(yL@rrIqd*lsPx408gDu)Bu&vM?R>>0VU}7eOyy=
zJ_B2|>R<-7+^c>irX{{CbdYDnMtV&^xLp0I_dV!b!;?axN{87I7PnPh0AOZwt1r&j
zUr2Y35QKFECJ9yFzZj*e=tDNgAmYb$5IU0?$pO@p`R&V*!1z4_eVHCN9@4!MmwZ!&
zR0E}!jo&>3C3iF5HLP3~wm02Sx{cuxY+m{5{A>nIzM-e+sj5-J+;n19snHn%^=_{C
zL5Xeyk^soiSi>worOdN%x?Px%9zG2TG3NHJ&miZYBo9$U(TxcIdXor`=xIuhRbMyL
zrfIlB|I6TG)Y>VWG%MuPzc$Tf;b|ONNEH(AC@vj{4oD?EmBNuo2&GSNl+U=b@1UDM
zdzc)JB&B1`7xa!0oQ!YDo=RfDP(lGf!4!QxZ&keMPma5BzndQ<r!n9EaWif{L9C+G
zn@8o*nTCLKP0w$?B01J8{+13OGQaJBVH9J-E_6;k%d1gIY{&jEck0{?N3KGQ<%@^P
zcP%%HWgCZt5bla-ksXlj3!IHC2SL8?8gUobAVxHci2RUhgcU{VDFkGkYrAH<52mxZ
zB&1mBT3TyAoe}r=6Hv_)d;Ik7BuVxN%^C_3<U%hcu~QPi!<^1FO&^2!5}scSXL*u*
z^9HIIr|-w|YM|CI8=U<<ChCBNW$VVquF%}rq*!cB$Gb8`je)Vyw{=&Swl`XehY|gD
zEVpDUW@h!3!Q>3DvmN{1eV9|>y|haw7xr|iGi97Nn%GYmR!s`@anRe1Xcy|_okh{w
znc=s|U9Lxw7V(I6^DJ^BYhTC@ABrR9w={H~UG;t+97Sv-<_XB**0?r*Pn&EwNVhmd
zJbEmrkF{RbV`Z^Ni$a0cH~Lr>&nTf9w8Hy{Dk^Fr4o?q|5R;p_Z?{m=HcFCp@m1cP
zsl@O>@kUr5EaeBla{$<@{uVlSBJ=%Kr2~_!fAD~l#|(4opmcTOqv9>Qhw&}I9*(BF
zSI#X;iUmn*9f%%lS-jioI!!(4)b_4oq{kHXRjGl8n{PkufW8)Or&WYS9m^3oE9^0q
zZKqrGTTM!=6<W1#Z*0Qgca^2QXGsg}tI;vD<NM%wx2RP|y%$g`X1<i_=;`v1!aJEV
z;@$mSb;WYJboq<}UZIJ)qWwPc-%k#tw-P0PXQXfXrY&Uy-U?@bt@eCiFq6mC&-l(6
z?WC1@boGW;ZLQz22luSzdjIYBUkjY?Y0%r0RGGzJS{iie@{>e5w3!N@jbR|zBCbhq
zWGKjzK0tt5<HTQgz*p;hsM_S-fWwQs)R$i$do4(v$O%~=C}bKRWHPH|er2TX=U8iA
z8tlq&|K3-dw9eEsOyws#3o?Jv=F~zscCx^Kj$O#~0_{hb(zFhVi-H0Ly+$RJt$>q$
z^tOeczGkND>`mgf_PIAyUB^eUxo>LYoV~)Ay0`E4nzg<SDD%$3y#@vqy<2cW-C<`w
zmD=!_J4~Y=MyzKEhO(88)y*#0Gr2&#@Vh6+x2fptsgfs*t+>;IjMhc;15+^wAE+~+
zwEuizl{G7ESy;pCP5WWxY5(~4a7>>Yt?4hDU$D`lFf;A)w+lRyn^lc#$5()z4B@{5
zszC0f*3`dtJzZn`pVbp<=^+%PXQycd<1e0(iTBJxiKCW_p}96{xb@ZR_f{{I4-eBB
z0{9Vd=VkQV<%_;8{rCRIi$1>=TlcVd^=7uurD`V!T$SvCyH0r<U-#S^WEo~>^6F>m
z_%mfcCP*yjVY)REuf@2HVzi9762K<_w;|C|%yxlYt#(J<JJc+A08!AVu5jc6HQ>wg
zmE?K|!30N1xQ?#)vGJB%BLWn!5x6Y84(839qK)4x8BdN7hZL^A90MNY@WdAnpb=oE
z34s6jczdF0QNB~`X2ybT3)ksQ(~-k)*MEpaFw7gKao1>EE$5>R{tlp!hP2lEc%%D`
z78PmzsDim7*HpUcW#P-AvOwcSfhMC-NZ#(+dSCFu<t@?gEhh-Ke7UCNy2E3T5%@FF
z1H_02-=^=+tK(fFWYZB1{0_HTDEy5GsQIZ$k|c4}lV4>+5w~&e4$C?qpY5t^U6pX<
z6JRZRCx=+??Th%O@(PdqqLW-MEQ{OFQHe?JRguZ-CSgm-d7Wc}c~yinW?>yjqXi{v
z(R7+|X($Kx)HevOpAj&TRPiQ`5KV4{2d@gO9-LGTQ5tCb7)&0tWMI<4CZY%zz&@32
zT<X157pZyY|BtY*jEZY%+MR&`28R#`?h@SHB|vZ|xJ&S$!5N$+SO^{@!QCym1lQp1
z?(T4hbCUCZ_pa}}cdh*cX3gx{UGntP)m6Pa89a%-%blm~<mB|rQO{pYJ_g?!du>gv
z*V{A~oZ-7AC99)1zqHP7ShCY>I;*TN#y81-7bRU9KVA^|JmN82XW`f^sMXRlo8^|I
zRb)DOY|ny`d^;%<R&6{<_6w3CAGf5AIOi<Kc!}OB@rr~=z_n_d={4pUo2x`kV3(nk
z-p`W+>*<Vl!GZ^@M_Q(7B}5L?a-HvPS9-=m^F}0_1+3_}u7-wwh`OuEmQpdID7p-0
zCpApvZLJWz8u+=Ab>K-t=oCKLa0%a3Md0<WnmhUZebLu53AyT|<M$LINibSL-dT_1
zz8uMezdXJA2Qj$zZkYmih*TR%eJYI37{~b<Co?%GISMTl8+LP}B{@suUgxiCo`uW~
znD?v5-|IX(>L83VrN~{(n(Rt#A{mz#mwnCY;F;#EFIPq<S6z!32U>U2-?!V5F-X`%
zZP@KGe*hLV-wR6-%sih!Uo&q*6hIhFL}7KQzWhZ@^48$fp{5@CPD(PWovX}qPQhPA
zA~y!UC3<7yYm;)E>-x88Zu9qbKig9bsqKO-vJS5``I9_S_cZJ^gdR;lExtz0F6*IB
zla9wJ6dxm!K4!NMvl>s%%uesKvrS0naNn=^)GPBTPk!g!*2php6XTeMA<>w$UKM%!
zN$-;;9kr^LScnT%N@SqJi#NL7?lVJdHQzh2Ig8}4Z2aKM;2{<AA6;}!RFsD3RSjhO
z7^)OnO|xHz`5^yje(?qT$qZsg(DzJF@ykjh^0QdZ>jmrCB)6}56;*wu3$aD}FCu9m
z7nD%9^ZaEoizj6W-Jjyi#>+OLOCWH*RQ=BGOFfM_`St!%kftt~Gl9nnk5icT#~L->
z`_0vjs4wyJWP$h>Z6Pa`#JP3PK2PL~sD4cIlq&!6qSmD-P`GM_D%5l$A)ght_NGX4
zAbS<vZmJ+nbQZ~9y5BJQi?9a*-pv@nXJlaZ>w+afW20)+eWVABgk|~*?1}v57qjsn
z(c;2mY#QUl({6IkuII<UZ*Wr6K0+5*63`@6NRQ(kGrp0;Qzg!|w$!oHq0FT>`db!m
z>lq3?-yh5e9|`6O^|V5!Pt-nJJ=;OZe9gB-0<Gm4yiO3%vuZ||yTc%Nw_7nUxjplC
z6O`_>%M#KUvyZ$nVeLtP-*x?wEo$XqVV#ys{q>Z<Q9hvRBJ@mPLk-W_K4w_i$u_3o
z!aU>tn7Xk>gCeQ&wUtIy&ll#bE~8;Wf8OSpquB{k_V&d)zRtUHj~UHy^RSIAhq&{J
zHOP(W*kTgAr?Rlcfd6aIa1hj`fzA~BbkHpmQ9(}?Z~eGMAG3b<OTkUHP2Mq=O~I7Q
zFIE@%dG|{Q)IYr_y9n2uo*esOqTt~&Z1#r_z<MdO6<r7&C|YQqh|_y8s)$5(N1u8J
z$>6j>n`3!IplPe0p2+&antOA?&fkam{<-k2YkQ{n>aAuK?IuZm$$N^ANwDYQF0ERn
z#L~~a+P>^p?=C3J^Sz7hHCULKO%fN^^B6E1A4*N}zq+^c8#3X~6PYB=$jhs-di7KR
zQQR!4D%8cMIMLvE6<8gEbOXO|E%E74_#Ac$ic8Cbs~+{14!bOx2Clni2X7?kH7c}-
zWOIK)Y*qF-KD?GE!b0=hHc_@^=jT0a-!_=m+OID54zrsYF7$TMTuo`P*2oR|l*O$_
z*e(m(f#QBg!a6BWQ;*Qnd<lpoox=R=0c)wXpVt>p7THMGi1}8NW>T(~sG2wRMT{Q1
z#eim7N8e%d^z(NxDV6Iyx||rcz7W0(wIW%f(}c|CaA1wVr?TY$>OL(#$T;cC8rA$m
zm|NUKkElZ)`}u7<g!5v#8gF7Lm_+IHV|sF|`c9!}ky)%<gF0Ot1Lty-pG$ghd`XTs
zs8OPq0{ap;8dxdgCBlc`K*yU4rwcc{x)ht6i<*e-fI+m4wj9}pEnS7>=MSo6oel|z
z+X$jXHy=iB@b8Bc+s9c?kh)B}*EksZ?3>$;8;#B3tL)niZs%ByG)7Upw>@DIo>G+W
zEe?#WZR?BDZ%TmJV<bs+l5n?#C`<_aG~Y2{H}A_u#hvaenZLOle>&sak+4Yf!MzAb
zS9m-#QS?5b^_?|{!O``g=zoPTJf;?vGeU7%L%2N_J?fi|;(g*WLi!>?-2BR+Z`Krf
z#EXAh&KX)!;;Qk>g_FMm);E{hqQqp#p<hu=m8Bp(XO&<mb>4+gq8YDX9{>4jW{P~d
zsxXS$lr7DEj$pFgq4hgG;dBf}_pQb3+E=GF_|O)TE0r<19P?$b9wObnD=J51!&g<z
z6HT{CDOCFd)Y<Ie1Ri$tmweqW{v|?G2;vD^zFn&k)E`rI3hfmIvUYax4@M|`0#~YH
z74#Xuqa|eyHIktV+H+;?RT^-b>>bECQH3trB*`PVzEPUw$hA<+AL`3zexNAOcW3JK
zQcn}F)^InBD*WJorI#;U4rf6`yHnm;dpvxr&iUm`aj}NeOjzcAM}1g-chhptW3hgR
zyLt~K;bKpn`B8?Jd=;&&BW*w30FL7(M@$%17jt`N08?gq$a0q>WwGeplKp0v4#|n-
zo|B+H9=~E2;|@3To?5e=yc`zw=kgwul}nxR+#vg%z3RTy^6Q+e?>MN@OnS$I3u0q6
zIt^n8*%|Y!I8XH{D)ok`xss3hlcZB+mD^*!B@f%@6K*lblP^k|(ofFxDwn>9n+>O>
zVPb*kkVU`U+%I!k*3It;>~dmgfUsKKe<pKzZdeP)2|I^;S;VBzMbG!$9#gF`#-lFN
zk4tUFf8kV{u|2cL{aiKkXZU%-^P;a;wa<y&f_18w{0u%k<Z<OodT126vqx|TP57KK
z(^!U0D^!jx=2}hcrd{vP_`Do=haEXT-(ScZx*3}%9GkV!-ie-bq0_ASfvNsyov%9h
zkjQh!#qMF-OY3?ppqNEq+zp~9)o`A^@a}j=frdHP&5Y0X6!&TKM}9{%aYp>&BWNbU
z58f*GJ>^89LPjAziNi>Kl?rr+leHr1rYyb5k3%M%5m5O4=Gzxf1Hskgg!26JoFtV6
z^yr;!1M$!*Ctcv@8;V4?wS(^)Xs#+G(sa6KNC4~J4I>t>TnRx~x7(>|UG(xt>&0s+
z89f89>Fx5BWqy<59OB%E^)HE<fZDx?0@JE2-n>ik>DLI{k`y*pD)NnEXJQl}PXwd!
zP=TVR+q+Eln6#+%OU?nF-7=4oycXGeVi&wd?@#U_N%KriS8B(Si721T(jJn_3oxsS
zeFm&5wi(8KmGZMkSP{7FEG3rVEJ)_%+9mIm^GN4h*GfXvypPKm>i8x)6i;W9!!KHs
zt$e=jgNx4H>}l>r#w;Q<0l6ECStgfuBg#MYG_5DpDXM+$Zzj~1Z>J_6%)PmBkAToZ
z7Sc4qJR#;6_YWZ2=K9R((_bH@g}+WV%$nveVib+*&{gfH`^4`A*tBjpM~o112@YS{
z3X%VCBdYLh_nc!t&Tb{xh@5?a#b0));nZMdT@Yovef~nGGP~21Ulw~O7ro_<QL;lI
z!vx7l9PVz1Mrj_$c`OslVkf_Yavbd(-pq3UP!leUp18S-W0}DPMnhic+}jcvz=>3W
zRJ@-#In70@@BDCF4%0?xuQFg>0#KrnZ<o0tzCDg2N(n7?C7_!cDa%?&z7aYVI^ES!
zC&%r;RPiC`_w$y-uAW6SX?zA0Ysh<Ml1TdNGyULaGnSu|hPbZ3!pfipo}5?!4UwrT
z!0No|Yi}QW5e_~6yu@0l+OTZ%mEZVms=F#%2<C38SA4)Sg_aeynVXQ9rLQV_?&ZZ`
zer)ZpH67V;wpoL|YVC$edYFiYKi5sSoa=56`9yC!M=y>FB1aA7MAQaE7e(qI=-YyQ
zrmypC@Z==&bGQ->cFL@%jr(Ug^7E`fQx6kz_cx*q2d9yy-+UOfU_tvIFM24|>q`PA
zAg}xEn$%<zuj<sa(E102^mbY@SHe8a9+rh&z9-Jy?zx0d<-+#BhpY=v)z7(%6Y99m
zVxP1_W~JwUy|Qa6&RtA(R+a6_pY~^MK0jfxt*(B|PR-&rSULI?$$gt4C$DV$%>2{%
z^Biao1kZ-C>(Yz*uY9wq2p9CkwLb@4C)EAUDJqfs9=%LHy$!BOziHID=(5gqz5_O8
zfUWebeymw)eq#>Ks6o94s1~8ynv8$+Jw0%(*6FLoYp*Tp7*dmuACF^}Wi-1T33L16
zZ9rw^IY7YN8;M{W^25Nnl4W&VwIWvzN6+~~zpxeh>&$nf+FZvo@?R{{WK%AiD$#yL
zez*?V-{EO75VkO%+f1@5F8+FyaQB{toQhm5hkM%A{j$nj2jLcZNT}C+BabWA+kl!c
zC+^0WM3dmq{dtQ$SFDrW0DorIO+an-jHJ>~>X)?m;owQjRkQb+Z`0GxE3)e^O}xkX
zl;x8hL3~$Gw>lyyaAbWy0JFbXsq?Z&MyXjAn{?YrEQmTEdqL$F+eaorJ)bF0`eS&h
zFgKf@SeGJiY9kBXAJbS5Q{J0Z9hk9{X#`VmOI<@>TgJ~sB}X0i&KF_gAx=Z*W?;Ij
z=Ay~qa#_dDB|mJuKg1T$ylBR)w*od=L5z2?`3B5z{%*0%E7d0>*SS+cOD!6@N^P0N
z7~uNYwixb49Xi%Anyi+q=W}_kg5+e^I3$14K28{8lQ$D~<D>0!C_gNh5?`2WvRt-9
z5@WjXjlU<UCTUKRQV`6qbF*K?p-?e2?W56U?Ka<a_!Bg$8sp`C0rxq5y9p+{_B3)~
z)cqiLqnUgAy~3=nL+5h&S<<Nl=R9=lEoI<#d@w@kO;Eu?=H<u_XmP@)5)Fa5HS$iK
z;;JF~<gyyO!|ER|=>+Y3wN5V<O%|H7zovF2x#_o08G0&zD~zj99i!k;Sl2UL6c4+>
zALAc9u>M{xhj;69Cd3}#p_x=&O9_ckXmP=3$x9Oege}!=1m3g|O-E51WKbu|J|hL9
z137tz6FE{+)KLXC+sVV4F^87laYK{Wb_vHp2Dsz;!+b8mf+?9kE0w-Gu%$RId13h!
z4QCBkqj~j=5pPc)+I>|Iju;6?wdJVz&3Sqm65H2t(Rf)9HL*U4inAi~ceBdo>HL^F
zUd%-+3Xs{ERe~MOZ6+VrC=9qR(>K7zDbV<kHn#EU-kE8jd?%*(;{(&TpbT>#&a0Pd
zr<BdKSkt*_GN@u1**o}o&VpVdSzf+3aKo6rH5c5;z)jq4PTLHN$QPQR!EJSGnY5VV
zJci<)?8nqqOEv3j?BQYq*S@R;@zDje9k;wg?eUwzpp7UjXM`p$>lg8@YR*kq=iJz>
z2H#_b0k8DBM6d{L)F^2DcQeH3IW^Um>)>@pGJy>6WKq(Q;t`J3>fj6}`mqqJ9O<I#
z`!-?yg=`&O9|umQ;Dvx)3kB@)yRw*vrm^qh0}`An&cED%2f%Thv2>QfD`bC@k`nRy
z1C~kk7&dgF92bUfJ}~OJS>C@qbCH-{ar|(grU}<Ac(8(2uFb|`k+3I2n4N;r+!k(O
z29z4n&l)4OK4k8nH6IN9x~)7-VIv?_x-}XaAn08c+VbyS;v4+XGPDNm<lq2Zy#3bn
zJ{<16;e%#PO3nktDGO6Kp4uL`plYZJ_wjwq!tC`?a)S}{Se}6`jU)@t-N+iEZhj{H
zpWACyqxEbl#V5GW!2T^TwHA6t1K!JdSENCHqETi<lp-*{uTo5`EvG>e(y^OFr(pc0
zoR#AZ>Mt8-$UZ)SDA#?m=BjbJE=-l9B#t$8zrKp3Ih8~~Yb`h5;HlkTE)F2Ggn;;P
zArIU_ep@rBH&k>jU)kZYGK6So+lAHx#ac=U%<rG%3`>Gm5P?oJxwc&5e*`~$EQ;v7
zcnhtJ%DLrfob*F4co6!QsOmMJr~Ps#VS$o!NDYfGdkv%^@V=n%3i%FGTqisX#K-qn
zrLl7PfP1ceryLd_sp;M8r<<mP1H55etLX<%sesT(`1?u&O*EY6dj=*!Uwq~nu2fu%
z$dSiu8`&P|Mt)?4ffB<(eib}D+D{$d16Begd_uc4<AL~#N5nlfrv=e`ecA`Bw^ZVj
z-=TN?39aUPe>g4pbmJ|7ry?)+V$Pv2AZfqf*Dvx?B;^s$@W=2qd){BX`rh-X4fo2J
zcW*1@!i{(2cchyMTcZ-7U+40Hxi7Ar59{9*9EBF2&~q;OZVqg4Aw~fZqeS>I)2R*l
zAr=+?vC*(H*pemam&t|WcUzBJLPbFBh43NINWOJE!x7FV^migOWTnfuS_-BM{ettB
z8?NDk6wvWQqQFX6ER>~%asPQnE@~JT>~*%s?)j`fwEEX2CJOJ!<u*_VS0tE<^nOU6
z1sG5`LR+7{75dy?hi{L$GeMt%5#!C}u_yTv5P$oZx)o;Y`}v&1zLQ(KxUC<YjD*uZ
z_4KI?&1J`-Tc=R-K!?W%3zS4SK+#Oxl>Q&a{>S5<4F49~@exhVX-UE9+Wq@~2Kqn0
z12t$YAjmJ}y!W)>^&b`gqwBx_;6sIOQ}7RDZG?S>s_uWgoHd}8Pp%X6L#NdLaf*Mu
z<1bTkfON?WH5$iUlPdoGK2Iu6cNEqHhdM=sE$UCcCOzW#x2KXeG$F^3Dz53ohLL=w
zF-xNpi9-E<iTvZ7e|-pvc-2Bbsalst59-KMo5@j?B})$v*!?%9P!5xUJEC{hxe$RF
zCjs6#1TR6A?;KM8W8wc-MIeZ|qhR-aQlOv9Ns2d)6+fYrmF0_NzW-fcf4Lw$rjolp
zdzxR=ZJk)lb}SpZS^mC|=J>3RF3rCv5jvu7Qy6{s)ZSaQgH0r$tc2RyrSL7~gbLVl
zb?M(_nQ}mQP8uF#MV@|CbvfeUJ|y&!bHEv4zwy7yqI{ASefbj%q#}PT=huVtZbcn~
zuZ;dLieUTf*L$o6O;zBpd$WqQNY{Bi50?qjbD*jM+7kY|Fvus$rP$THuZrv5Gt;<a
zOK)C2h`!;O7D5)pMPP~k-(2o*KQw&_j9ui!f)N|cIT6}-{Dh&zzO%bdtCv(sj9r-h
zy0o>G>R&BjN(lXJ9^sHe_1BU_jH6oY6V_f|Ym(B+&V`kK*JYFlHRe(8p;}XpqtIxV
zxtPd2@Vr$=4ycze-YRqR|51*=U+;bcP_*Hsu~tlk2jweD-6G*F1CA&`DRH9QzxtvG
zOrogBx(i)RMNIFxT9d`*Pi&Yrqx7A7J=+(Bts}Bl`-H_Y|E{A-8er^X-rS(VR71XU
z)26x9Ton&}%*VBTX$iDaH|)(1&o`!c|J^jeXO`A5^ke{rb1R_adP>>4V|oqqJ5HcH
z83>yf{i0m~*C<9a_`@Wt_J7rOB`+{`DDUf_0$rD?duocsL<|xzk}+OuBvjW5X;-BR
zd9%pA*xWMyzlIDCXzWgN-HDjqP?<Ni_jIKyX^e1+kfkoIA<$nc!B)@pRj2tixfboX
zAxV$Re*pt$uqA2KAsN612ldU`dRgCEw}cDzIEVwGs3>|gT>+Qk)mU()XvwOm6H5Gl
zF-t3^60fc<kaW$Ju32_MrPsr22&b32j`xHWCJ3dPehil^S%jigM`lIhR{FnLC{s+t
z8<3C4Vhrh^e0jiFm=`-AX+V2w?E0Qd1qWv5U5sa6^=C#B5sazXVkvsO-rQEMXa9ab
z5mFEbQYk#}?FK9h9kvRMXJk=S9wX<PEI2oo6A9*VdmKFG{YnX$&`<aVQ4Rm!{Vqxf
zc>Y)ef@yIqxgp6{Llpr7&=p<*as`hVL1O{<@&Swfqz?4+)v8QZgrK4p{b^UG$$v#_
zKadKQk`_%lc*gg5<(=goS^|J%>@#BNyoR<Iw9B$2NM%Y;GgSnRRXIR@9bd3kI1nPZ
zM32!X_TNCA5=1%|Gk$bm^Sn*i{>;D$_d`RWsEC3dExo)xU7yCsP3rTQQwrreEdQp4
z_oy2gL1LD0I|jr7Asyl!0{`M45Cu6ySdcIMx9c3=-NuMV{5lblS~C1-*)GNy&r#8F
zE3$MhzB1`*f3HIz7zSN>0&yIT!H=bsAIa^ffdXj}jdk?x|1&%M=U>ta@R-=JCS2>H
z_FWNVi8*>AZJQJ1cbLBA-WAu!5VPrqmy3(04KYz(9=Mt%kB!KkZSev_YY1B<oO>kx
z%=1x+pp&EGgRuCjrh3)a^h*tI5V+*_WkqNVkTGkEvNAC@oiTdH9zbKCvzd#v=$Ks8
ztVQnOY^Bp#haW83iT|0xUjiG7Uj=yO9w{!){z#D#8{xgGN1E}CQKd~QL<z=ir9OMf
zuMILXlqi;1p9SggTR-ugzb+^w=pBiX0EC<A0B14IQS23b=fH@xA6i_TFm$!^Y|TdH
zRaq1}4vpp|k%#YpWSP_n^T6=&kc|9n{@JhX^*VR;D6SIhze{UP{^yq97(lT3qS)<W
zoOGQWF~M+@b{F2aEJSb9%R&ZT#PD3DQa4M~GUGp1gR~&#0^R~Dqdi2g;y*~LG@voe
zk(LXLza4y!%~GNcx>>!+18|R5;)-RO4TDXsgkf$x32-JyU9G&egBFwZyCj+dRSJT#
z{;|zW03gr@8{<K~xFkL&LWhh5VLn7D$S=EM7_C3Rb!mu_?)Fu=slnP|U@&Xf|FFed
z(3oSTFi6T<o9vE#Gn2X%nKa7KiUcNEBw<Y|Ky^T7Q{16%%m)O&f-p4{vc#pYcnl=N
zu8pG`&PsF;5bOV~Q%FClpC;Fy`I;|udR8PqVYa;Y1{F0AOPbh{gU-G)LezV6^~({z
z0_?(L=APerexnd9Wyl?Rc7I{`j|weKVBP~a(R*U|$vAEhz0ToJgn~7GO$ysYMb2EQ
zP3clVFs~gcy?D^%u)$tDgK1Uz`m$95eQ=8DJesaMF%<RiDo$!Uq*EzBG9{Y|{j(fM
zUCN*RQ8;iBRKD}dmT^L4s|LSM=4H=4AjfY}zT}HLl>_!xeH#b5<qI;yB=2>je-M)l
z<I2O&d1xShk=&;PJGV(QU4E?3jG}jKP-NHCj20_FnIWz13%?6QMeTw2yP8k5BP;_h
z4+O7$%@k!g4W-=J627>-<2GfyU@etMqqmoI*Ie(Pn-hhId^o=68$>M2`RB7d%mjEh
zBKD8#dktQRAAzm5Jalh>q?J)DCD)f@9_=bd7=A20hk?x0xrs9|BF-rd>)?HuJrJmM
z-ho1QvMT2e(0cUB042^2s4<lPk7w|KpZITgkTLgfbR&HUL*>xNYLfeDh?tt4jNAj<
z1_6qW+fHJIcVkiD^t!ncPtL{xC_S1wJ!;Ku%_DwQQ}QWTXY`t3dUz^I3o-?YK*N{!
zL@*U-u_GZOy<e*RN6Qct$|Y;V1jxNb{6F%&FcO3$(1<h{7D<&RD|l>FNkVQIZ<tmf
zx(An}ap(ym9cdUC4{u+BP_CY3s?N{w)#1(fG3Pkh&~@c5kqr4Yn_~CvZU1B|?#L<S
ziRF3|{D;Ppo`RLY3GS1Dg1=n|8dM^?79<HkpU<(3C8AiC&P%8XNJcOy%Rkd_2I2#1
zl9{oollxpL0Pc|`5>AE&wQaNl=HChlwCJSBR16V)6nCTrz64sdvVed|Ja!3kDMD%y
z;4DlHnSY>*74#C+pCH>B@f(FijzAcuhBV;Eg}{j+&#R?H#w(mc{EU;GV7_ViwvQh#
zV~;>DG(PIuLPRKc6tOU#iCe)`w^X9KNlC@^oJRp7{78?eEZ+uGr~h;ziH)UVZk5`y
z7!B?rwtXLA^Wo1((@_zXz*E7c)6aj?!AfjMVt|=7_>o!!e8wB-ix4!;1bTibE>On)
zy_dLYUhE3bv=<kq$s0!Iy?^#6$gftua@)Lq^`e%fT${+nnb~iy!sPX)AH8^-5*pZT
zbN8NE=@fqbN8G@ZxQ*^<(%<3&r3`lrX@f5oDLylflHT#-K!op-0<stCa_?%26)r;j
zj19nmX6bv8I2&=8hhkyafXd~p<H@mVvlCPwYlK(U>lPUBJ{yOYi&>XLgP(`e@p#_N
zh~TZ?S`z=Wnv05lQf+r%o5F9x>?aHZ_2uu|?Q0Qpgo&tmL-wRM0b+_gh%;uRSqc%5
zCHu({<TZok$~J9SvL$vF@BvX0ECP&BgN!88mq;>{IaL3afMcDz<|A#f0ZhF36nfQf
zcvoAWAZ!9-)o*zJ5NnYws9Y2xR)XIPF31tMpW!p{@I>7Y&j_!`_?s+CTH(S8QilXh
z17-`kB<9(OH>Avg<7m665r9CCt4)faEw@1_<~JO0Fc_dFUdN_AHBDxkm6~fkq>xO_
zOwlN>;I$rxTHIP|ZDG6w{Z|72F>B+Ko)<Lz_J8wV5qwa#$W%yZb8}2F+Y94V0<!IG
zXf;J1ae1W>-HY*|_#(;Jo>i(b9NAc%`uG5c?#Vak>v@P%2bu#02$JzV?5dl6mUogv
zK~h~RzEU~*_(KW0P{A(?KK2LoK|V7hXR(}TXnp=;XHqQi6+W)HSjaTO?*QKF2T^}C
zU4^|{8~9*!kxX?d2AE=&ATA(%{=?_qW7<Y7Z%$C#R6NwSY=;GW^$G10lM)!W(*;~N
zSVr!06)tq<oo5q<e1!mpjSm{91VQFWF&c`k6|aFwkQc4kqBW&6#*P2LUF%a{_?y(i
z@ZZlPM#0jEJK`47Q*#CIeb&~zGK~K$FSxm^-pIU`wjWj2r(9wpcnYTgEgoR^f`qnh
zt3}AtOm{?FVj?n$xn@$m&wLoA0gp%*+n5HK45I<L7`!1ye=R2g--}wts3HF+hA{w8
zJcRY@ru&Uhq;fE$!QDQ?wbugl<jff<m_}7_tp<!B1Vy#UKAa<NSImAC&A@S-U0VVe
zj9*vyyQ0R@@-5YM9N((hJQ52b=1b!veA6g14VT}_c1rO(1lcjPdwgkesTYmD8|#KC
zVx5)V{Pg&TStel}akAL>@HqVgkZt5F&<OmH`}NS=qOTrf;}c>5(Uy<s0}b<1voZ$Z
z*Cy{o25=Fh##}bYLC-t<+yQ+FBRf2(r5moCaHe6iz>s9};`QBl@O!&t<L|~RwZ_-x
zH%br{a;$$`JR1`#v%hk%Lio4xOIe>Ka4AW)9xftJYn{*z+BdTdVTwU&c6Ur^z(^6I
z!;#ZQ)jxmC2Kfm)8A1`O?-f$LGWMQ${iT}aO+<(N0~PjN$T&4MgQSI7&u*yp!*r!l
zxzwBeQvE+O0q_wTR%b(>r2YWqOOQFrmt~e5PXT_-Y%xbCwU^->8c2vOT^Qg!)YcZ!
zj2FG}f60s#>98=wn0vv2VAtG-?a{|_oEETnr(AVj9-sgSoH3Me?ZLUmnCU<C(qZ5a
znZcp|C*L3)2F(T08X1%Qeh6@6%Oq^3aHaV{oWM2OhI0<tmel*h&0H_o<weZlyIVXt
z-$$Yat+EXivL#t83~qf(d}F+}fO!DK7N>iX52&O=?<s<NrPZx;F%;JAd;BRmS9_4G
z=I72o#{7%{KBS;{oiX?7k9U!tyt3bht62QpAaG6W-;7LJ)Po$|cd2yD=Wd+02UuRD
zC#!DHXAk{*dL03C0@=4tf)-+JaeAdN;17bOmzrA|pA}0wNOb1Kv8THGDi>`ID@LIH
z!+JR=maJWCr$_q#Ne~^$FRgz2Rpllz*b32X_0=F*#J=JIkX(Euov3rMO%(XlP0lHV
zW;PP;2LLgBWSJsJ*vS*2-@^n44JttSldT$v94zT9P#Im)>h!jNWe8;`3w4;cvDvk8
zu54dL>zTPuVe%iyNDuQXnO@Frua*2W;HCH$PjcSSBzKRr(Ed)T3q2zwz;U!5Byz7{
za-tW9qHj$I32?7p6rSBsf@m<uebqJg8c|}I{U|Xniw%hhcCbA~2_FYx?u+~T2fZ&b
z%uW_4vAazSU)ugJtdIwJp`s+Ct>XXjX+LxrOr9=bd~FTx)pj>olCEo}4_p(inWvER
zg0(m(-I7_vKJp9y0Jtk<49atF{-Q`nhaT}V2oRb#ij_eAS=cK<Hwrse)&U(m2r={B
zua)d7m*F@1FL&E)KDzvYV+(2#`IbSibN7S4<L28F=R*($T=`mBIwrt~cu7p=(pq>|
z*$7!R=}H0(x8keCIs9(ho?!VnG7KbvhN%^4(X;O|UQV0JSmW1|Us@|d|BX8}(#>Tk
zx^6g5Xcakn?tct)I1v$w$gbu}0&c&3_(*(dw)KSF(&(Omq}qO^cK@Dmx4=ei=NKY{
zIrt!%%Um<kXIfUWs`cK4W@%_A03ynDaoc)%y_{GMKNMH+-K89lvg7ibztv)F=6itM
z1Vl^g#Ilv;+Rmfw6a6u5he8=1&L0l1AnPaAqTsphzVi2QjW81U)T#q677KWJPe>Am
z_wghNG*VPa0dvG8TV1x?B$&a8(k<cuF-rrJMoYmASWgVcis&a?@>=uaZT_KO-Qu)q
ze^r2rIhYMrVtc1s<`r&8)eJ5p`Uj0uKKPYDjB?1^WB%mhNkG{+eH$#d-gMmL2BJqN
z)=;|0^da&PJw3MKHuT!@rN58dxgHRGOAh4q7Dnty%xP)R*)8*3@oan#jGVw%|IOi-
zca4Gk)Rms_L%(dxD@>87HH1>Q<SwK$>IDM-IC2ZQ2w6H@K*4W7gnIEAIbI<8*sT*e
z8*Eo9cwg8+?1k|Dvg~c&4c|4DP|GDmW01xt!fbl*HQ@47Nf~kPq?>|@fORtnIw#u*
ze2mC1iYIbdY*@W~FT4(AADlXC?a-ybzWqlt3*oMEhChxgf(0~yZT}w;l#<-S-JZ!E
z=*unjqnFStJr$wHz%pX*n=L!C@2b&<n$cXi6OT>mp^D2_q&te>&>ys*Gq{AH8ZA<T
z)oEu#TSkua?<YnH5=UPJ0a#3rLCxb~st7&ZEVIV*|3Uk73<r~jd;yxjyb3Z5_F{eW
zL!N{>elyGqeR(nVY8OY_M47f->YVqZtQiM~9d$a<%Q=>4KW3OF4%G|}gbTR%pk%O3
zg_01yGM(r6t91u~+$NhDtTt_l&h?G%nqic?zBAGC*I>p{ncto}^%BZ%YL)dhQvYVH
zBEz62zig69#leGA3a8_f256xy{Csd8y0&lM?(X`@tE_S=p?s1BO)-}i`=oV83Q7Q3
z6;#his#p#b4d^o`UnJvu3-YUUq3kLj$H~%mbs;$LwqLrq-(TZGPxZFXZ+OP|=bs@*
zV?d|8IqAW~9MRuMMT_+kqF99|ZsrAbf3$@M;x?(xmM`cRS{Nk#)<<r#>)O*O57h^L
zM<p{B*bE9Vtf2Jhb?d^At(GyaaI)@j4nzs5CyFI&rsl0S*siA@XD-M{9Bko8960}C
zeXUPdprGXTd(D~EF)7X;E~y{`IF$b<1q68y%0`bCr_gdF5Mrqbs}ar>kk;c`qPS*O
z=X7k3_-Ll3bY4#U%&%?@9_2#iLNiayG9lIAl_MnvC4`pzx;>-^PD{BC6hr$;bYi~<
zd1w?#K+!%wv{$@7{&lRIaLw;&DV-fkG5F^aMUUtH{)7)5Xc@DIy4=&HHGQI;3)7N2
z2H6=M!JkI*k6%;<Ot~MFRr8I84z-YCqz@C;7BMN%SZ!iNpJzbNzs2aW&Gt8+vnXii
z^9DD1uGV>L9x^2Id*^=rR!rDt_3`}orizFZ1r#eITz^g({P8h45(a+r_3m&>z+xd;
zPHuy?D!ryny|j7Y+_Qqi4$x9pIa-otp5l$<y5!ZjhH5N|)w~+$Y2$C`{C&r*kI5XV
zlXjmu#w@l|UibE7op`;b!FCiLl?vV%lU-EfZJ##&d4@#0TiBqo{=8()Y2Hjk!!BSJ
z1Jt7hJptK^q(nD+T~M9${?ySl>Vm#Ne<DJU%1L{)tH*l@DZNP)5P7@ZRferHopkda
z8k!;wAV>d#51hZ39wJ?oEGD5gaI8J&SENKC>|hsv6m6D6@%zJaTbcFKh}Rz*4-7$G
z^FyJ~zP1)LR|vncTNlF@$FtkJl8|m9cP&S(iO7%({WptL$)aFZDDdfe%c(I1l(cd4
zkylKd@d_hTKTJDTr}0T%#+(mHts@YgdR6Kk;L?|O4jrdd*(hl8B43`Idpsm~yAym2
z;Dh<dq_<{zc8iu%qI`|f*Qh;y$ly-TuM=!ZbnfEFfx}##FGMT{Ly3V48M6q6wf>C#
zXC&qrEeKmm60u&m6z6Yo?}(9))0iP)B^9B)n=USnfPSCLEWq#!UL1uqzlD*9gKZBa
z;AqzX#r?CZ9vIqo_T%Sr5ue%?WslYoWS1SDr5?|kTJ$^@I2BHW0xCEsHavgAOF&R^
z=`cxJIFY|B?anxZk3SXV3GAFzo_5uKLEZFeR}C^K2T1bu&OwjiKdCU|5<+pA5Mn@m
z{<CnS$;8OGu5SzO#Li-4(8*p0hU%?ll^7Na2btV#s-VuUGzbILn=23^H9p=KQ43r|
ztT=qXa2UsULKX<IZ`JjYORzOFok#W8;8YHO43Qqh==R|Bzop3StAHk+OFs$Fxc<H1
zA~l0C@;S?#L&Tx{J81{0CS@r~dv59$4ed2vX3Ld2N2!qak{IY(L|u&QiDAk31t689
z9L@$^xE7AwafVGB9d<Q0BfUuiX^R4|s0@~mVAWNb`RQs_w1|>Ai31@BRyr8)3WY_n
z1bpGX6QOEE6>?mPu89vw!r}9`-Ko(G?tn={Sw>|2MkAFwfQE1E-kSpoAeA5MgegPt
z4xbmr-~<(vw2PQyKo>^r#ju`#Ll*}5Q}idJ#V#&UY~X*AyA7K9A`)qZ$Dw6+`%R5_
zI5go~_0Qhdq==A*w_xDA!xa)N#7bt!$mzQ9R%`0$hxO9E&@YDGx1}C|mu+QrypAa3
zZNd;~=!*cgDNoz13Npq#^QEf_qiQhMjEClmF_t7ULoSHWLj?JIc}vswWtS2h>vFw4
zTPC1r@(eSb*MXd^|8LH{bp&ETO+l?#jNxL8(;Bv{<u(N_(Rq>T8E7&lw?Z2Vp95U4
zW^>xp0F-!2okxkdxE(YsIOs7gTPp4@9bV8^;J_*P_d14o{5cE2+~xg@1SX_VdGOO(
zFM}og!|^T<29Iy_s;V3`m&QU#%CgV-O({5e|9RX)nkcOrzDTt6Yy23>cQdx}r=w-4
zH=ku@^S*>RX(Lwn7c(o1i|VCGoU^Ba_&9-9Fs?g&LorVe4he_O_Qt$~m}K^?coA}M
zbH56Gu*#JZAS{YcmSl=r-_~rWcuo2SCP<u<C#yN|HesXXA*#&z3iLe#r+f4;Ob%Cx
zp}AGw8!mM_BGG7AUc4<j<OlO$UrYs*yYf#K$9i_ENt+GtJ7?asn8wX7N>^vdKW3!l
z>{4OmhckUHd+)dR!NgT$0?jb-<ND-#DW9<O#~wC!v;)@ss7VHSy3eah8zL4`Y7hLy
zgrfD&GB-V>F?BuXj9e$jdf;dZqtwkkjSYBFuzW*!XU|XOYS&K&*TgJiHhRBx&tlzQ
z)80(2x<~VF9X^sP*Lm(aUYGC+jX0_p@B$Ra@0Up4z4$VXh~=A4RtIwN_OsYD=o0f}
z8!5}%5Z0p%I3aheh>INS6Fb|r(o37uya>R!@G7*b4<G~IoliNs>s`L3drRe;^K8f$
z>!$kvobALjsOar-5V|{xz55vAbWcbql-MMfDpmh(5f8dc$8?pjU!?AT2)niWD0gn8
zN1`hHv?bL8r3TQ~FkJpUc{sDcu!nRv;eK6+Xx$k!awVF<tipXR3=OWyw}E|s5t%47
zNQ1{6lGg{IGGPrT7NRLJ#QT+1mKw2_;#wG_eGLYT!_-Nn|6Ed$%w{{{hwP6R-PfbY
zYuT|0ThomUO-FQ}F4*%1E#sbxAFXB=TIs?m`a{nnO%Q}NzwK~e+Y7#%KZ~*yu3M_(
z<8{45O5Dg3<92H;%h^F97Mm}XehCUBEpPcUexkKYh8sssMtbx8-ZGb-T$sH49TS~5
z+-7vn`Upu(wL~3b**gx9m!|le_x008%p{mS`=g2nk_+w%KC8#!A6vWm(Y*N%u6;rs
z^qAR;ZuYHIv_qKt^%GhI)RDzQs{tPiXf9)PMkYw);AWUQN$rqAn|0EP<#uQ`SGg}}
zO4W+QZ@;*P__?^5-utKt^PW$mI?f%(s(dpOcuP2iHqvn8A@yb(2^i2Ml<HasEqED*
z0p4*X{?0U{uVN)|sktWdq9{{UtQ+7K1=9c|OkaI!H0TiVJ<C<$O@V2N@IACCv>2}H
zECCN+Z+$8lFDqkPad#1bxotC;@4j{<kZ??1Hu6GF?Sc{lWH9}W2<d6gf)<<GjS}xF
zGB}{kie7wI-F;Lj+kUChm_aUZpqh#1%n2scEBx|6$W^F!V!5PqP~2>G&9rY5BaX;q
zGo&tp3%v#5P_{M>6-I<3*wb8IE*Z0@r}y)0dSkV!oDdf=^JiiVKvU#6JTP4yuvybO
zGd50fJl6OtW-?zMOvBv83+>dlH~V%J*_~>5VF7K9=UV+*fCTTGnoN_XxECuh{HbQ>
z!qvJYQt!pn4xb8z-y-*)<cPB_%qV>COCD!mAT@p3GQ$P>sT>Q~r@mOhwGClwgylX3
z`>*w{wydFx9==!$C|j>+9~s)ClaBc5W&HS2v&Z<1wiNDr;T?2F3@i|K04b$MW%?U)
zQpe+|&xUtBaN(3kH-_ImX$I#<Rz`ct1a7U{zkkbn7ENebEcl_Q36)nNQPKL<MgGh9
zR23#TrNl+N!$IGK``i-xY7(Dn&49ez9&}qo2+qu&e-m>jN>^=?3!B3p+jd!#f``%V
zM1m`Yqk2CV7m@^1ix}tP*T5#`mc`>L7d8~?Vm(7tmS-Dfn=lGXZI<BWV3FMezJh(N
zbLGU)i;{wZczc<)jmX!EmdEpf7oAJmt{*jC`xcS}H*aSv8rHkJ7SEYgdo$}m-zZVj
z1q=0|z>Ss$#J_!sj}o#SV2ai7v-qdYL=O+JOP8t;tF^10X85k&*fh}#LxZ3&9^_9Q
zg;m8^t5PWVeeoJPlfDCg(gGg`b{{qolh<sT^~ht$eD&iO{^}+Mf<b>H6G0!B*Cnxj
zGGcZj*+sT~Q90WoB=0ZC{em9Dc|$y19W*+D$pWVyLDBC6_L2E^fkUx}H?BDtoNi^U
z3J;UtW&Wj)m&)pgtxBB;M8yXcvcfr>-ymA?PA;uMw+_C*7E4qkpjWMLsIv&7+15F>
zC4SVqdD{z+i~qV|DrKfwVGvK3+i~w)*3;hp&Q7n0&|yyIdSor!0PWNuI&tVcE;4<c
z=M|irxdDc3Wr^4*{+%AXN!^^5vHVyI%2kcg@g&!~d&NNe&esR-FPk|}E_)i6VOe$b
zC1-E>Zpj^|0?F~5bla<3Kjt)i-Z+0<=kvrvLdl@48JBSG?*&7*GYo#!JM*%+B4xs3
z(RbRGB%T0>=#iS&7$I<=d7c)~f5snhfBLL@ci8}o<s(G20k>{m6r5`fZwa3YLpJeJ
zpxz*uho1w&6-Y8GcI$;yIV}9(T6$L)K<ZeZn8KLWaog_Rm=?>(EOO+m`U#*E;2BEz
z-nfpzkzSemot9(KH2i50ec$>eRW)FEuj5%8<@igd`?lqkuQ@=WLh^4#-{<?fw4sMg
zkxA31Ra7IyiPR6;Y;JUG8UE_CS&g`9WCS>$ma#R7HMOp=@iUj6d*GEkAjvWSNq5j<
zg%2P!-&m(90hJ2o4F2mPSjVOgMXb{p5!|ESIc~MJvpv1F^W$%!0lI<(<v&6%HvXO+
zOmQKKx6+DU4zZ+GtGX!O%q@WN^Fu5#&E}BA;hq>7GtaAgPpZHhEh@x71yXK7r=?*K
z&9^ibXhI)DNfQ+Vo;a_Vz=6FPi~4y(h)+@s#bcr}gZ;{VrD}q0mF7Igu$oND9Wc9O
zaoSsCZR#7(qYpLuF85ce@<E#}ElKr^g*EZoxcC_6i~-j-vU9NOp{2Ku-*0xU*AXhv
zy?bX0MQ##oK^s?L^~AB)qkS>fKE{uxM@jY(h?du=-_e@4is)?~FtQg{ZATY`?1H}d
z$1{q^_q}kkE{>chc`Ad*RDfn(#<a>P|H=@E@MFA3Z}K{VxG0w#oCpfB6}P8jF?qDT
z#{I<9*>ZWud1}^?dwrtzdauxvC%jza891zEhNB;HJc4`;1vO_cn5RVQ@QP3=6P@R>
zjS$l5rz3qn@L>+~QE}4Iz!Ejq49l!sy&b9@T$)|jL;60~P%**g1oB3!eaqPyAwNmd
zRWV-ahSctwiKp+}IkrO)X0q{4=sb2mPO+@YV<S&wf<@}SB(TfQ&I5S5<tC$zi)HA`
z_}*yhnXW%)n|Lm2d(6~xYTr46EDV7kK99yab~FCXBAVT38UdKEv@-Z^Ws2&An(&Q{
zpv%N~zk-9k4TqrLNf|ajfaC}-Y;bQ6?v_6KK(mPVUI%YuEUxk6JKK~w)JK&b4!jk@
zUWRAgaxf9p>5tL+{Rr>OQ}H}s!Q^4#>d}#WKO=_HU6urfo!gG_1DVFSF&Qy{vyFZ=
zA#70#O}ddQ7ARWOIw)%*+BAz?1&)0v6aW3u^#n4IcCan8rHCg7J}a8x8p~@<UZ6>Z
zuF}KQZk;P5dlH+iYhIz04M*9XrrieD1#N;n%7$}1dMN=={-W}G1Y>`hp|bfz3?o_P
zE#_+6k_v~=q|&vNF<fhyLbj0X2Im~%OU!8L$c1va16a<F7ctsS-glMl<xn0J4w_qJ
z4EvKJ55@@XC#3E|VTjvyP<eO*O)&PmmIQRHD)8_x+DPQh$pH<6=YV^Xq@eO&!=R3q
z(!|c!q$x&Jl*5A{QWP)jp=+X@-8D*qTb<``vgY+bR1lP{{yoA(xPcboe3IG9U8@|}
z@y%J*zI8Oq=6UlUeoi|uz|CcI0@-dgf@j3|oES&y$@@5QcF*<3rZa-dix$GIQyw}b
zC4Rgi%B`5dDqg80*peUzWoIGcBS-pjR9PqLS-|;;(y(rhv5OjDnb+*xP!`7WL+6Ok
zn9vZ$BZ4k(p0WX!sxViEd|>?NJ3L-&@J%|w<F!7ehD+Ddl`_?S(}!lW1NOr<-~z!3
zS(trM()tBoLyRQYnyy&mWLs%cJ}ZboW38H`n8~g{XhZv$SZ|l-p7FT}ze%p{C0yn1
z%#i@>+x%?p1GtRrFi5D4Jso^=kU7z2Vvf*Gzw381#OGjT*V-y!Mk9v65Zj-Q#j}&r
zF^}Th%!5dktJ-TAo27wToSfwx3xiSDFS@KNwDdI?Vo))!%e3&!p_YNx*&zYh4?dTQ
zKc$w2ufhGe4E5rGE1(eCLdTL%$S_!h0?^hR2DadaiC7&X#wOTisWjJOMXW@Cpz8g?
zfMMfv@YJQNp6&!)1RZjLygeM0^K5{Kli2T>8PE%m-<M#wR90ttLcD|<-!R?1&viyE
zC`#WYYSxHLSI|@ndF^kMjcSS5c{S5s@0mFrZ^@gVV-xIsZ7vMbVs%Nli;F9L2Dbe?
zJbGc{#!ol<WB0X2i&;Hoz4u}7z=x6^TxwtJF(Lgg{&CdbO_Q<O4s&k;vA-dW%d6@_
z;kEKJbjPF!)ZGq6U8vQ5(E#>CZ7p#6=%Wd*!2yGfze;GcD00Rm%n-nj5dj;Em$XE!
zVwA%W#3c&M#q}oDn2E?kad+rip8*B~UW4L&w{5Jo89NxpzI8FFbP#Y@D|Cc?nX`bI
z$PP^y9jBTI;%Qj7j(<dG<0#<LgtfN~>W62Z9K-RiThv)!DcR_XYi*Us3^AF$3^x!p
zv5VV_clLGQpMO}s*%vHhsT1xAYcwNZe4%?9W{vdK*GBbP(C`;=^0<xcB6Ci%ZiBs=
z_2)x$*g)B5-G)zR86N#Kntb9bh9*=;11!@hK98wwhS&6=v}nku0>{xOhcnvKCLLb9
z&a-TbXa((i_`B2)B}CHRtiyN2fzJ=5ymM1b)+wVzL9RMv1uUY@>gwSXC=DcfIwTsG
zM+*cfkm-zo4`v&cMlhNlZxMIfcl0YfzTHo*#SF5A31Y*jNqbQzz&hxM$nDWIv&=56
zJ9(ROfL>YXT$4l^FtHDCr3%VJxD8#uzWlXUaZkwD!ruSRh{=fa2-Klnl^tG4SeHc!
zInp?-s92{~<=QhFzH7V>3OsD<nKw)4UbGQjlu{5)lpo-#<V)k)eX^!07jQA4y<dpv
zBH}MZC5=Ip+ogduy6`k8=7D|0I^M?G@Z6&3@q45a+PhdV|K|0jM|X<*88|>hgHH&U
z*Mr%aWtc(~*aA&O;w|7c7v#k<vO><d!G0=8@X-_7uS}gJToXXHS0&k~@(cp91qY<)
zA9|5$e&nLOn=Df?Kv%Vjri%%AaU&aZ+skV{%Mk4*p%8aRaOl+$VJTg8?ij5#X;#_v
zTAZXU>$}h^M|2Pbmx&__@!oW3F1G;|Vj}0G8fG{dVL)B+4qd>^N?mj_*N1IAQK$^a
zqGrgOFRkBp9mJRS_Qohq^n}~xM<3XWz%_OVgLa1Vn)8<WGG;Ub!!+4;4pvr!DgL&f
z>uIH#DBt3ZVd2U>&Hr~=GD2>tPmFf&mpIc;UR^&?=NgtFI1)QPOJ+Q+4a=9q98_{s
zh5Q+aHh#RNyI%A^Q`uOgKcv60$)GOX7n8c(|AHsJh9jpw5C3g!8RN(hQ|v>xE0{(A
zPP9xYnD`*}y_+|N82ww#uo!)7w9ec5%MShW>$2F0?Hs}yF&P?cvJVat#iML53sR*?
z0;9H!8$yJ|JK;?uMIX4b(ezdX@6X=#l`YDQYIfISWO|4EsCF%<a5O(8hn}O?eVa>z
zuIyIx^BupTFIODro9Zx92l14-s29-`BOzk@F9z2|Bwp*^c}05xtG2hNh{O8zzB<(m
z<}hjmtdW#78w#MXrZ=bRQnHsl7@*|-5Klg}c*!p<n(#a?o?!5^VFr2fk2)wL1*eK6
z;N!Ml#&P~$oWFc3!>~K@cGj9qJ%NRf(p+H{0H#a2f9mB8z2QM3Q62(5hw~%au`{v=
zppJ^&G#JI1;o(3)yAdmGLX$OIgL#^ND88u+!83nxYZJiiR&$jCL|>Ajc-h_<PP6t`
z-;JR{X36UXysn6C?IY>qpEcMH!INlGU~HE2E?lmb3BdUl12A01mk;4-<5l<hoEt$O
zf~GDJ#@3S-zef}qQG4MCy-^Grev49FQ6~Js@x@A%i-+#i_EjufNpWZ0!(vjkgM!{j
znqZav)~No}!S~x1Lp&V&L`T~)ln=gg1{o(*3LD5Y=xz32SEUQnKAj5SZwhvQ`FX7&
zu6a>u64w_%9SLolg7iNf2C`v5aS`<tU3`SVPlQfJE6%Q$go&_=QZ=ifuXtxH3Lp|#
zdeW+^07-X3Wjgf3kGYXXmF;}5(=#yrHc*<T@2C=JR_Y_5JrFI_ELPv{NMJ$<!Oa$)
z6vAqk&#p#@lVTYST3k8<69WjUR`v!nYYvdM?ua8E8bU4^=2kf=!F0@>+Wi&l36Acd
zwsh8)mmV3U{m<Rvx=T715r#Py>}~3F5u`%j4HR}U#%u0;FX!)7h|B{J<hn7QEEYs|
zGb<keD@feWcb#Ic96oU%(hRU(u+_u+Gk|e8nU(eOuirGvxr#?4D5(^oem%)1Cagii
zd+gXUK{<%7kr%4m@It1`aOt_V-l>j<97SsHOPWr9aGWOCbRilnn6vBCitLqHYYwkp
z$>}PLYUY|P!Q;BLDX_CQs{iUnQmtAi^bXAg2b$u12E&SeM7du3@i+C;rc@&T%vt=V
z(`e#~`uRfPPgrebK!7Tz^3CZCr(;(FQl8B#b%8G+E*TgWvpKrYwyzfDmKl!g@zDoz
z5NV&AVLscc1ZBVITOQ7Q2}xh2`6i|`P!}qoZ$Qr-ssHj++?KwjcNx|JJY^HP`Pwd1
zqls9DR`|O|cesk8HUh|p-_ZE`3(8=2^SC~4Dm=EHOB?3xa8gqKRYK%)tF`2^0ycU!
zJB+)5SeVnoqT3$D@?A5YVnZ%aih<e8byAZfG}RJ?59JA}s~sv&G~uZq=Ber}D7d8v
z1Hk1(KHv7O$#s?97#99}q}`S8#UQLuKHcr==0N5P=zduW8g1Z;3J3%&EBrx+)cU~|
z?sn$o_kuSV81?0G>ScwfQ{(56wxY_)AW&x3Fd5=oj9;GS3y*FH=4|YVuQ%j3<jtu!
zec0Uh7n}}nn=TI;4;!3@Y}08%u$9ZccMv8bI+MfHo6yp>M3#T~%2xQMSfPiic6p@*
zlpsO?qOA0s%$WB?*<bMETB*Kt5PWV`Vsx=$W_<Gb0%`S3&JU3VNImS1c;v7&=(&I0
zp9sJ*gkd5Bd<+dcGCHFVW-d}!2ZoXfzdQ<Yq(Jr0`ZZq&aPC<*Arq1Vh>tw?-3uCz
zCbuRc>Fmns1kI3><`CwfFNbj9^`6!ruMyhQi}FVxeE0TdnMy;m_&I8lTx6bO8=|Yw
z3rctrl=2Bc59FVQ+Z;86fj&y@2N6kz@NR|7k|o?*8cY1nI+<cd-crA-XAyOypB*hV
zWPn5!*ddp!Kx)I+BC91{#u!BrH1K7a-8ypVE-*2y64(<J^nnK2mct~Hp6b6m{ts1e
z9T(;IgblOH5=*mybl1`y(jna;B^?riG}0+8C9QObNT*1yqyo~NOG!z0KMUXA^M0Q9
z&zleTo_o%jxn{1JIp<((CdlBEpbm5~H%E+F_y@NHb!CECveJLCJjtn=SBG!TXl~oG
z>fio26Cqv@m}3WWc$eE{*DQ_}@pm2LvfoF%XNBq-R_0gld>kxP6jmyj{)VaMB@>Kn
zrLqBLA=Syt{QlSK1i`%3ILVRh993Te?OM{{`WyAtf)E)}l4x8Pu5QFWxBB1TWk|QC
z<slM-|H-ZjlL}4^_NPb8KVqqZWkFuOIut2E&hQO-f{rqt5j@o39Z;*7Q`gM$N&fBU
ztWOHBCVz()^8%Kcg6(UGBnzvpAzk~=5wF7;Lh3ZMQ06Mb50{x!LaL-y+mZ|B)S0xh
z<Yk=|m^Jm}=`6-fHirG@GhMJA2SXw_WCWIjPK(QaZ+1RDYK9=aCW#wVEwT;cN3>^m
zJijcpcTJ4bQS8H<_?kjtRMoj%t;mGfvt?&p!VWM5&)DzdNoWaxqrhS#X^Z1CFOc)G
zZjmIAd45-j0QQcN1`BQsy?}dzQ6;exPv86`A{U-HV;+~WoCMm_BL;}qSChmPN|jXa
zK@!(vY>i(eBZ!*hE!{u5yIs}dZijw*U!liFoi+dxAp$Tnp@z@_dV?ttpX)*tQt#g%
z&U+~T6-j4wDj=R&war$wAm0c(fSzd=lI-<khr$2{p<jqay~F|N0k4M|*7+=+RP4PJ
zsut2~>Q)7E)kyB@EqnC6RmjiA_lV>SmmDtD?_y~dpHrM(-qP1B7Hob?eIWnL;ND@d
zij+7m+WCfG=y1gvI>W}e1QfYyVi$2h@KM_*#t`aYSIaR@DDw2{-Z4Xmzdg18X&0;o
zy&5voQc0Yi_Go2!WFc}d$gpm*i<OG*G6D{XtS59T2F+2mqL&GpMRp?73y8T}qI@Ni
zCq%#qnZ>e#<0Fy%E{RrGJ>`KcSM|ux4s>k9)nr7Ql+;i)QB4a*#{_vY^}X1!_4v5b
z{`{v^OVS9XT5`>9N_jHvmtgam5h6YUdt9>ci=(lTS3QF}+;}_1J510AH#@Bz@Y!n(
z-6IMEeu6^`;75Y4ko*)F_2cqPFePRwNaj;gRHfUK<uosT+lW+Zh4URcjA^5?BQGxy
zsDQt1^o0IT&^0hZ&^0c6;>0IGsY3n<f5Perdd2Oy<qmz&)*S%jj2;!7ylsm|W!f0K
zqd(a$a`34!M~s67$^+>x49l9p2*M8Ux<CtxG>qx(QZ2$1UGHtBNxc!JE5@;c?A*Nr
z1vGQg%Y}HmoqQux_Ke4IU?8!y;MJl0z8o;|hyVUS!Bj02BL9=loRS?mFnGCR6o*-t
z3?FC2Lhsah1&@+T<U5Y2x{tD)i$CJ+EPD6{2;TD=#yt0?=R^c{xPa#y!T|<}DoU5;
zUP5F;x98|@=$&ZTk*TrHOS%ppZf5?X6W!f6YT^A~8{TJzDN9}OZBjhV1EsvV1{S02
z)%Q7#f{JSNjBl@{4<U8x!cu)MCEJ~}&7XW~91+7BL165n-h-(qnH+#rz}k!|EF8o{
zAg~fP8>5|xDn<UlJvXYuN$5<A5d-7Cd<ZCb1Eq{mNxTulLos{-$430ZqX8>D8u0Id
ze&(LX$7+T|e3j^}^^PzLDZf0TjJG}$4X?cIXR#tTlX+J9P&xt4Z;I>q5${qk(%7fs
zqNRC?QOszyQzU@D%9$HeO|Bx(jU7Ae#0q+X17A99pxBr*EFiVwB}<|4t!?W;k?$t@
zV>fu8ph~Kb00EkPX2_g?M-!700CsNT`aiVhofY0~tuF&xXex{{R~T)oTwHKAmJNi(
z9<(a_4LA}18;>8{X;#BX!-`IY^N++dz6Yes>~hZXP3m)Vb$-ZoVO#(<=~P)-=?hmf
z>^915DMQlelz4x_Y3gsOaVUKM;pD)hP1!&V@gB#9xuc^~OOl+oC|=(F)W5&cs+A&A
zc?U8I`z$d~Y|;7iN6b~V9YSbAJeOW(8eB9zq>MsdfDk^3-isbh)TP2V1=5<Rfk-dK
z<!{OeMr=uf69BmuW7U$ptJ`#*ZWg6aHpDcd1-iu4P)OSJe_Cc%JUod2U&ay2uM5=p
zvi`ciIvF4_9duX}#>UwS&L0>Y_$lE;h(X0drQ|8pMjf{O7{f<@^YaL#3$iM8xgvhU
zg)3ySCS|><*mh*f4B#i;u)G;4*LKJ~jk({}n??RKs~kW_@YiRC2q1U_Jo=EAFN{_O
z&?EwI(3d4x*^maz!w)Yae0LHoI;v`cBXPu^>MVi%=umweMKKBkQp@;1pal(cI|-XE
z-a}=B{dk%E7{WXC6t7mjf?S?vbB<fg1Q$AS<|j<#2H?^m^cc69#F+3=yMhToMF<1V
zNt4R#Ovn8PSj|pcF@R(`oV^$zkGf{u7#k<a(cLqUL9Abflmed1YfC&e0u8J&{OOnz
zYv2$bY@K#K+0E`-#s|!)tB&XNU8DS$1ukIr*zaA#hkb^w{J%y$5Q_Jo1;-*H0P$U4
z7kh-5=0F?*DTQ00f97&Tsf1qFu|@;Vb5nM*BR@<O^2Cp_ClP-&OS{6?qY&%jK?1P#
z2d>Hjsovor9=!<wJfy^gp=;gi#)qU$3JtYZTRhj~(~4yMFCNzZn7FbAdh6~n7;ryM
zZl3$225+|C`=39)N(=B0p~ggkCu~IpMRJ|kmU?0E{`StitXKMC-D*4-a%R^4KeRGd
zN5TN~bcLKjUICkLWvZo^;7mYEH%`?t0SdhvA(`wT#Rf;lPIQY;lwXU(wi4KvpQ&j5
zKR8(oB7BEq@<|la>d_Z*10uoJOe1*yKYYll&eBD*e$7Vl28<V#L`G7Sm<+|hJs#y`
z2V8>NNZtb5wY4#zcM7<_ixJI!D@~6dP8H(x;+_`FPtN6sc{Iwc_XpDH-vr6U%}L(b
z>M2S#*nENtb0C#UFb6>Ve9YzN(<GOG|Lw>H)DdhW>&~?3>Lc~nYbo#p^n!@%fQbhP
zkv2eC)u2;)gpF?KXU7gBFuJ?Qq#Daui*+0cy8W!P_94Z{F3%3D4{wDTnt@}>G!{S}
z75e`G#0|nms{?L@1)eln07xnhCF^oD#YQg*__dA-MVc(DvzaTN9xc|qS5y6yZ>B5C
z@(d9b1<#`k^YNhX06s9RKdNCB9!a`FgUfbJQFF|-G=39E@{H;1BNT%&mDmchg~XoZ
z9L|fkOeFlINEyM*_?iddW647w2cBY@LporPN8ww|dyXm4C@t2?4|21ayGd3FQ&b#F
zy`Q^zx8zA~#<SJZ4gKA2k2Z-7xP0_P$+OIPZ{T%=OmGX3e44h88z+aO9XAwNA0~qM
zUpi$%Tz$}EP{kzAJ18abFH~7z=09(g_u<hO@g7lp{+}yitY*mxJ=*X$)g%_d+Q>az
zAy~CDDn81)9q7yJ5XErk*;b$m_;Bh?4Sy7t3m^9C`zo=sF36bpa!d_|2+YdSvDgYM
zp~wem<o0;iKx%k&Br%>R@R|pi)`y5NMD+iUQhDzYmXtcO`luP)03vks&Ba-;hu=GF
z%Fgr?8}By<m5<TY)?sd^K?h2w0$%yUQike8k)A1gIwJCoXQX*<0ghsk^bvOHGZh@l
z1~-LEA;Rr2-oxHrCgm`?L(Eh@%F4+Rp{-rVLB%3>-J#f?{~%e44P*eG!Jv@neuOH`
z%;5JH9n<d_HJ|<SG>tswlCQYUyDjTIAYCDVGDfC>sihq@dLC!|5DPd21@KU0Aarx>
z*p($C_!W8)k>)cA4E3&LNet4!Du*wS>_W!5j8w%pe5-a%-+XFZ9`Om`?vxNwj$qB9
z`V(9=gLv1rApZEv(fPd8vVa-0iiJbLWu%Sem@f!`<hoBl&z1VWV{!wHm?MydY8mq)
zP2@On2wX4$P~dmQjS<~TaL$LouGa#5Jqp7r=A=!?)H0G0<b*ud8OV=nj9@3xhzVW<
zeX4r`O>`hBm><yY8aQfa&tW<o`AuF<u=Q6E`uF9q@PpiXOIB?Tt|z5dfII?Zc0_70
zl@HGkO;wm02+n+|a7x}=aG!x{12>(lO;zlS9C>p%@ZJXgxn&h<+R*wRP6dNA9=+ZB
zQ2i&n-NDD}GR?ca!MJY>l;>QV8~~f%*<5R*q0qN)4J&gN75*>uJhTIHH)%ZsdRyYz
zz=Q<}4z++RKTdmWfAC|e%Q$zlQ0eXR=YvjV<pe}ERS;2C6Qb8%t~8Z+;E9BB1DIdO
zS=l{l5ffY(Fc={uML(Ln1vkYWknG`FkKeTRc3;k$9`7pksh3j{iAQ*-U}wm$n36Y)
z*a1cB|1=}9lz$f@E04JtBbLYib8rTXogw74ti=Vo2=BKmu4jZRy+x4oU&BhCr<P+%
z<?c_j%MD0}n5#&ouUcC?4jnQMf*)`_Gpk<?26C%lz0=YGMB$ux89bPzWXb9n0Dirr
zL9B{Auo|wlFdRn2GmPU1`lW&x4+|s@5$NP~kwe_NT{v8W*P)F#mG(DDd;+nCCO74f
zYSE1#9?JhGtcN@>Ml>=TACk-WxX3UqVD)V*ta{ldD(I00S!To*+Nbu)GW%1H70F%+
zVch$*>wL;tLnuCc9>gtLZMkceLpk&P04yQOG(rVjJO27CAf9nDb%L0hIvuXRNaa)U
zB^8Rn^^L2SVFaK`<;Ip0f;dslhy#t<`iY&8JhGD+l#OwOQsr5pBY-)-`rZ#zw+QZd
zesZ`&S#G3c-QSbgHh;dZ$%^1Z@)9FxZch_t07<Ox=K$Q1&p<{#(m6kJVl{JXmejSi
zwazcT2B`h@!0bfSU184oG^lA|{`W!xC^EI7tyJY|0y!reCZ^@n_(*`t7Xfg(V-^I6
zj<|w&qk#NJ{Nz=02?a8H#STi=BGK{ZAL&Uxy7OqY{m=du<jt3u-Pj$ChvX?C5w;Y|
z5Jk4M)yRMdn>RNfTn`=CCH6m!eYiZYSzmeZbNKj?U{pvuHw7s2g&~e-|E_Eua1V+5
z>4j8|x2siYM41NFq-4k1Jr%j-*WFxJ^gO%QUDj0b{5ccE9<`%aq9RgAVTy=5;U*wn
ztFPbJZ4ZO|DR*cqJ{2ppU7|_6=X`&Y?2I@b%H|1+{8N#xZ66sTVuqwxLgWq`Qgali
z3n2l(4hiLPw&(<$Dwhv;1-i1sHOY>Q>%yD_c406&Lq5syPIAu)6g~G9BXQ3VG7e*U
z9b#x%Gu%dyqQ9Io5%M7)aR<TK>F?NWZ6|VVBFdZ&<#yy+Ga1v2jOhjoSlYYotl_sW
z8R~1IA>+p^`dV}^aypCx(PN8+iAxBPs+l0lFp;9FFsC|cduZcP8S#9tRg`|Dh`w={
zcwF4+(8;tibIni)0=98!s+l7`-ra4HPT1;yHKoWD?2O#*oS?XtJ8Kn2enLB3d@0G8
z|3MOzHZe&my=&n$kExzcYLPo#rT0}po3cWz!e4@pEfGLs@}+RdxN@tmLFQREjoymt
zQeIP7!B@<jVNUPB&K_;YuouFC5yh_5Y5B_N(zHQ&-#+zLHfgbHeH=1f@F`pWN%FUm
zxbNkWr+~}JJb&P%(|PUpA06r%M_ngdO@G3?yoSu^OJoe2$+_-3A)^7(U)DT5`FD!R
zi-7vCF?t;7hHOCl<O@a~%2PUELRg6d+xEmO_ab?H1Vu)8Jjl#vslr<ZqfmEIjlC1u
zwpP88LWRfB$6>SQ_$kzGmy$|VFX0Ma`41xu2!6#E{;rKklX9hrXelK&#}8BALsJv+
zT_BC6IK$}um>Il@mvNCPW>{F9pjklDMXbhm!zWf)(v?|kKVN>?c%Dhw_yfZgxl3kC
zi=uV;H7Hy(zdkF9;oDgcgI!HZ1P%C`PO<bC_k~I%LYovQCwCN8?_8U5tRvTb=;U!2
z63vcJ(3*JYuC>cC83j1DPr!|FKTJo;4}-V6s=GSQvj)@#QLS<`aPF)vjaD}Bu}cs<
zxOfSab=!WIHLv^b^z-3@$xcbWN-bndM=U*|WPKE1w$Z=&MB!Xe0Fxp)l~9U-C-e3O
z0#q+~AY9>=-UC-#j^BvQJ%M$}4=}zd`rlU(nL(2Sv5b6xm*~I7!l-o^QkX`oU1ERM
zin5;`rx%Y`jm$vxIcHhcOb!N;5+9r?_TMtc__i>L4A^wqu*$a;m<EGCkL8u=NbsPW
zwqkz3;48jr5Ry1nds~HNb$ylF-=&Gh)yG)l_tHhmAO!<+e5u#N(q1{3sPK7_<oS(N
z;&)9dnI8t>Xs|r~?zdqd@qECNRj*>$w(Bn5rgbOU;;6z(&>1L8u!ZyMcv=ql#rQN<
zg<hl*q@WjUll{s8*uX{4c*Tn+3Jg=-YBZnJ8V!O-4xyP6azYTsn<H)hj-B!6_dhz&
zKOW<lIm&Wfv2fp3IZnl){5@8ipO%@y;~=VQDV#|Ztq-}XZHHfokfmjQ6UW^Ml6`A4
zwT!+IA{$oXk2gH$$ivU<h!8~dRuZ@Sw&|{T&<;W(P)9-Qn}H~K&@ffBKQUvKlLf5T
zoFX51T{&6yAlA$^>+d1eN`=N?13l$skA%GJCZULVmKcYY{NRN()|HGIa}4WJokbNw
z)SniKxpwSTztB5G3%a&BRlm7amffk5ovbhtY}o;;hi?4wM}xw-Z1}+j#qAC$V9!Lm
zpuez!D|slgnXFSI|CR8M?tn0|4V%m-pBGPKKC5*Q1#!uF^1itA)y!#-dLyIv@jG$Q
zPqQ?#)5L^a)vp-D#XqR;piZmUMytXkLX={yJMdX12B@F;HQ^Sz7AoxKkBAm7#D>(C
z5%UvTlEx92X}+RF&F{uD!s;3e)LXrr)m-3^Pw_K~{(DFZr6i|_|JNVIn`#*`Z)?n`
zZ4h*~XXT@uCn;W$v_)YYiT5j_$}da>X?$!-!Yb=oA4BVT|NEq`MYtRTyRjS4TMC?C
zgx;wrE6fM&smJRuZeI%GS6Hs`QddA)7WB?TiFi-XTNJ9YB<#Sx6rve*$CNWr{~W%B
zZeGM&g<h^^-V-#5Bm!VPf3=oIYO{R5-!>l6C|$iUMTQg_p22$&do7%R>bR}s5${jP
z$+O|!OWg{L0y21W6_F!hpR+TihV31;8FLKOum{<b5di9pNVNt~I=|?#d5v)A(_qKg
z;;)(<BE^u!Xm@Pg6aS;y+z{d+1s%6-Oo0=NSyk94SZKofz8lgV@(ovC8<k^#af4GP
zZ~9Q8F>mJ3KcS7pD8(=o14*L(dC<m7#++g0!%|osYdP`2sKs2|SrEHQx|{AV9ik+|
zBM+en>yB?Pn#v2I0_?W0%ReF)kVDbkY0$2Bq3C=(X!f@(U%@JuCm8SL>=V_I!)eo?
z?sy+akP$E}`<%mcE6jyzl{o56eow=U*|-#&iH!*>$xkvaVW|SF^-09u3O;zCpYyE8
z_G|r(=-E%{(o<o=#N(0d+;6(QB+`Ber!fbTe9Vfy5!bjS+hIv33a@MivX^iGx7@?w
zyJO3E&YU^+o*XSUBKhfCnT5|!uX`+eT_344H{w(gBu~z#q^#5?QzE6@iW|B(ItFf@
zHsO7aE~fXWD8@>x#6UhS@k&{f11TbJXC8@^f=r%=o?*RNjW7%EOV?Q}``R+zjGH7e
zO#&&l!$I|6Rd3TmRw)1b&Pqs3A%@tS2v38&m*~Y*Ls#`O8qmvX9K=a^&`egIGHa9w
znBLasui9%0MD6?xe4<nYukE&M7zaIlV^sg}T~_LR9JE~>GGSEcV%0J5Q|}ZX$5gS%
zF7<_-@K6u;)m8pNPyTBhqU0{|PCiXbE2_RE^}UP*I!eBh;n%`e+Y2q)SA-(6>EknW
zhYCVF&j{sDwDgz5Y}H3U>@}`8G#}Ih{YUqWeI+TMO;_}8ggu!aH6tP+LfuyFZ-jWP
zSA)MXNI6x?6Xp5$j#eaB%c;ag0+kRVr+LLOwK@8kJA5Z2|HBY*u1<3jOpR?LFUtH9
zJGt~c{0)Oe%~~xI8!WKeReYT{1P7z@j%)4y0keFo-Hkgs)J{`_1gINC!H#atOjhn_
zT01k_EANEjNv$Ps<Md*eKk~pw4hL&rI;om2CU{I3^4b&s(w88_iym0lqW~X@e{q8k
zpoyS<D__&COB0h4d1G-UOg60WgAK-MK;Hp=US~o(5dVP*ig}V>&0|1_xFB)phTP!#
z-i}$~;5E<*GBcj+dxbK#d?dCQaiiovqs0NwSxmUO7%ieO3R7*`(~RTCd^95haMrf4
zpXF$i>eJ+SqL+7S*3uq%5R{9*fA|LSbmLLtP`Eh$agFNhYJmUp^ZBuI2@{f}OB?sL
zs^mi0U0(A}LV8jllI5jzF;Q&qmB$VHxO2va3u^gzd<$?UtZbd|5^2ySyu8txgfOV~
zC+!V&)D2yER=YhLHuXCWz-4DM^~DUPa#7k#t?4=q(sF1j!&;LbXfQR>2ns$DdjT(v
z=V!$|3dTe!a1l)^uF4A%^DEP}XYAZo;~^yR>=!FR5zfSmAv(&Egj>6*_aazAZ9!=Q
zp_InzRTIuI78U6kFlRtAak%UEkJD`5AJx`RKFJnQ9m=yc!R5q8_@o_3V(r=%tD%ZU
z;W2r+gI@J&=*F)%)%yl>nUPba{WD?V<b+7xNk3I;q<`90uFKZkSj?}`YIrMMk+ydZ
zc}{M3Dnl`AKW3#d>ky4STh$M)B_d7ZC9;r70xlfLc{gILxRf3ysIp$WCNVI5g^x%h
z_{Cr3rs*90lmKi`3$*K)C?8|%OF;^xzG%NZDSQdSMY44!vi5%t_UW(qHU|AaO3CvV
z+uiZxr@YYr8W3t%78LO&DqQw>TfgDN^6JUZ<C$Q}u=sXhmLx);x3t0OE0`lm{-~)-
zxf6qUl)stQPdLk4auoZE{RK`eXDL<SIWOIC2e)Q%2`Enc1cVHZR_+m32e;ot4JoEf
zrh4^uOE=55$H4koM`6?hN`d$F82$PD$zr6k6O3UpRd_LNG6wR51&86n>2yj8;VxO$
zGy10LC>h|!-jsNKu}?@lZILe7>1-_40pj5`leG}b9MX47tUmmecjM5-=LXGAKpL#n
z_U+m2v75?5Iu+bNW%>rAov|p3J{MhYYfljeMx5*j*b<0rgLzat>yWTPgKTfv2*GnG
z-LedlDg+(Vh7l>sNPL%BOy$UIfbCQ1%`RN(HAObIq`Jx>gugV^Zcmbd;56uz^mWax
zDEk9WqZy6L;R~R<WHMJo*Ii`ZIweZ6VTNdb)QxgwY2n+-ER@t|zdxabvD9d((0VrL
z*00L*;Dc@^-22WvY^gGj_;H_ovP?6G>|zlQ|1eN!6iMLnB7qsHCy0=#EqeNwOAxJA
z>t(*0s?;JRp~RGZ&A1r)LROecHdN>bFvjIG-nzzefn!(PF^$=vi$6Lw>v`8)AoY;a
zr4HflO?rt+r%Yy80_0azA<Ng{oS$dZg*z-c`@;b-_X}1FxjL!*n6?Na8TOcf3xl~g
zA}X8&GgH~k5vbZ1^4KW(bl-Xpe|}85TIa<q{P03~vOmItA-!zK=!-LV;or`QwR#-{
z&j`bz4>pwL3U#ikIs{gHOQ72&=vFykZPgvFUmBiQ&Eo)OM)Ok(l~w1t3KOnt9$FWO
zJPMgh<1&5YX03Q=&q$lXj=Djkt_sBpUtaKrF1}x_ei<tRCFn2^%&zp9L_@h0yv04v
z`pXR;uM0g;$h;_AT1aT`k!Zsia1enj=f>isN78?jL82D=veNF2Avsw0#S|vauwdAV
z+|jCmJxrf|xj|I?XDb9Z>YfnbK7}XQ6hF#8#^UueZ^_g8_akOAAT&Kq)f*R~=&X3Z
zJ`~rPCtVPK)fnm-=+^XD>i!q~2ViDelavr7dN@BaBV}f;IG6MnJ-z}QIksgi9@4+(
zD+GNLIQcW*!-3PuquhgH;4>JOz9f<o^sQwGz(r$8mpSaw;BnwycStr60){dKr*9Nj
zXJu9~WO7CVk6!=b%U}zcQd-53voN6P*=<M(78Ikx`0G8PBclZE{4%C<%DI5TpR?rn
z5CjFhNz^EdQ9$`Ym{)#7<J?hAM>rKmV%l2uEi1mMb`Yb#OKV=*96yOkJgKrzJnH4n
zJdRd8Lq%8H3EAr=vrqmD+_S0l_NuO4ecB&$BRIPl)RI>$t%R>jM!$spVe9!N>#umP
zw5(`W^i2Ep39ac<^0_GuX@~a7{R2GF{nZF(gmPX>AHAby{Y)tLBa14&27fyz(z)$H
z)+nE$p8Wi@$TTqI6iOIWm&62n`$C^0(Vp0phDy%XrGl-y21_53SUl^jefY|~+eLmF
z$GHb{8>dw&-o@TNn$^{oI&`orBKHGhAU4Uqo{4hb<;Fy6y=X%D2k&OZviwLFE;Z@w
zujN(D`wE$+rDNmsmGwjWVy9QCCUQvBrti%bN%Vi$(U*X;W9geV!#Ci9{=vpqx1M7>
zqOLyQBk^bC*Qv=g+((A}LDR!&Zhul4D`9vmo9iOJJZJAMLfKntiNTCEz+zb?A4v!J
zs2Ba*^I$)>$f6QrjN`4k-`3TN^#sZ9p7IAN1X2ONA9*+v+!q+JLPq8bNL9@}SMHl0
zbs`aT-ApvTUNlN0(W8LKyC)3?XpX!$qJFn6Xd17T*7xybi{O{jOP1|1f5QwlAW05+
z9PP5KqKbVJr!1b*t#(g9aBOlU8$WTEon%AiOmz0i)UV+JSxJ2@?aafW;My#$<NT~h
z8*EDX&HKd4XdKC)3J>ihvG_rd5pA_le1!DX1x8Ltbj1tzExi4C;6jOe^6?gZB*cY*
z32q6zJmkf_sHMwI+v5Q4Y`OVMh&bCf*SEFR3b);$BZA;WP04F=H^RH0```YukApAs
z{QuhFv<33ux6T?wlzV>y6|ZBY$j<gTtMK$zII1?fJ1gTvC!znBOW~vqzK(uMIlw$Y
zwS`b)oG(Hnt{qdJ+O*()!dtUjdrl6c7e&j28b24K_N66Gj$&QxP4zmv2e?hKa=!fz
zx4}vph!8Qf>H6%2K4`}Ht|$Few>1M>x^FJ;uuFiLZ{7%p<-2-<AL@NxucTi?{p@uj
z-#l&rO{7DZJ;!m5b&{!|0f?fPn>tK@dY>qtT>?uoDbiiQgOJbgctjb~yfq&PU=hus
z3Jvw)5%IdOOiA#&8jz2EOZG{&xH4q`k!+v`<)OEtU7YTHHA}AX81Tc~zw*2c_6VWh
zSQE~XgD1S5;DBOr;xRN6J9$QZD^6x1J|^B9D!v$x_8=t*FHkDlbV*)XJNCEnZKFx2
z${4&iGKo(^;SCv5gmJ{#+kyr*2SFnAA>uVD@RDNZkt6LthI}HM%NByLhD(ea?&Ii}
z$$Tk6#g`mx<Kt{%ufBXL(imvBFQ%BFPx&~)UA!`fgD**e-!D-(%+eDMyQ>9qxxZsm
zpHU9=DYNFOXC`ylwhTa~jOb`z)hjrmWy)g(9IckB<>4NVmHl1kktq$J9Zo6TDYjmz
zz-tOhrNCmF4ha+?L$|pwuO|r0BOx3JQJlI)%hy|<6M63?iJ%d`x4rt(RF^hQff@ev
zMg-O_`0nKU_%BTmUC*<TxRWYcXtAxmrJi55h8;_%MvGm>Vf5$|p@VLjh+}YroBvBd
z<=s6c<$7@mtg~{Is_%fJnm`dFOGt$N4(s+TzK!lwh}_Zda@+Ec4Pf6LYNR(3ZK(b2
z<6Yk2wa!R{K}PyH{34rGYc~7p`u*01sxTdN5_S#9mWr4V@i!ADF%`KuHGX?U4YMqp
zc)%8@j2;D62@SJPq#iYgqM{X0^O7iMN+;6J5%v(o!c8A=_Il-%`$zN^P|7xx5=BX5
z|7mn~%~PvXg;C28-&8o2VPzjRWw5Jb<T1NS8b{s$sl;0)tf%=$y6Z5u-%sa)b071D
zl=6tu0%b%F-)msItob`S&x>?>K9Tu?@x2BB<*B>};j+WGl9I8Q(qC^hx(P7b6{iL@
zid$R~7La=Fw?3f#D9oshA2Jctxt^u;aivm)ErJlq9s)5P{T4Q}iKM>M1`olkRpMqg
zjiE@eu!dCH->L#o*s)sJeKgia-d2f}bQE#kQe%ot)GM&uqP6}ND63xaoIF{%>@Z8c
zP8c_nwYm-SYOlK{`w+jSt}=tyv`yb(#cGI-(pgxJhCWGqMfTF(_=GJB0+)_<8Fu8F
zL?lY`SEY%=V>>~ukL^}%|3Y0|GlS6}iHCI8W*(Lgt06Y-<%*rlc`vA^r^l_jV!Ee&
za4MOQ*rL*ZUYhC;G%({%WigM!#9KWgP8-{VTXVtQd?AA`nsHxqa5djh96H`z8ggcT
zM{hS=%of`00~yP~bM)6?i3SE3JNbm~E%9Pfh1pe(@DEM&hj7G#;{3(u3UDde-x1_g
zvF8(}oN407NTbKWhlt0Eb#T6H+BxCD2Db}&%KgCwYWDQs6sUUxYI&chzdhQLaa%zo
zcMlC7dmm<0x=^fuOVTu=fNZ?zr6a^acI=EI+GYhO4~oj1drm$n7fqo^{?Fyix14EB
z9gRgSLJViSyE*(^srT_!vg6P7(#D6r|5X%=jwNL<J)?Z=q5Hj@;FV8M@~w)^ulq3T
zPY>pn`+59HAc7326Tr}_r$+@Bm(;0#Y?b`$UN;cU_gOBr&&w9eY6^J4x4I<;Mb7=%
zfG-i)#tYABVt*caKg@<X9F8DRd9sN9m}=Q0_rI#J7BI<c3(S%*&HbhcmhYlp;f&`B
z{`Nt_8^TUr3W3?r6Mj(tMs5hH?`XpsS>cc^OtsLx+&-)S{w3}FF*9pl<)}UkYK@lC
zqpRqu<8CPI|6p6AU77!rg}F4Zupf5C3vi|ho{giHquypoPfv{`XaU*37E?>+Kjq&U
zCrn58D8!rS>Wg0=fyYLBqyHfP;jX6&BYrG15m(aXA`@)U01b~$NklX>JT%YMZDQ5O
zaW0XK(Am-s5Gpkg4gY@dWr^@`>5q0cn}&`mXiP&^VHDmi%Ao&6#JGgLdl7jcvd!hR
zotOafFJOg?Wjg<qA{u<j9r6M6DKGWw+MRL#skS!f;z8HftBDM$7O>c9$bt^J%sl1W
zhq?4Z67^OzIz7(M(p5fd-Si|9cc5##Wsc9ZP7c%<eL7rpV}q*iJ1h(2n$!a*G-i)@
z&UhE2lh~`?`71Sn5K$kZ3t+<YKcCePcBDVXRmt<mDvr|5nY&}j)18aNI5<#xUXS|2
zD!EIxY`xu_*NA?U#DMif??9KK0cvbIdbX;2j!Jr<J5jMu?(bv)vTMkNN`@BG@u<Ze
zO`xBP^tpri>~wG|!u8mBHZ#P#KGuw4V5HRL>4tk=H%vLp-*#AIs121j-VSH+A&$d-
z0T0nw2VpJe#?qMu3+fM=V!g}RK^4m#mQG?iKK+KoXwE5d-?O^5To-wEDtryZ-WLIM
zIqo7#F#4PL#wB*|Hs*8uU9xdk3(sNazu@%<89gL`U)TPtd8ZHr3-oVP%U{X(D9gt9
zeqCvo+T0+%{EjaxW|i+Rf;(_B`rON@jX{U1Jw>8MC_(Q_vh?=4byAyX=1;C%)k3Lv
zSb>EAAO1A)f7wJSZmDY669-psij&V*p^HJw%0FJ23!4O6w62mJh-#_LRyK<08ZpH`
zY9Fl8AO_>C&|geS{c5_~y$$dd&#SO~GXEaYM<j)HZW6kuX)7$%`^Os)Fq~PR6#+)n
z*{ZShWH*cc?^ys?lORnpd94pHXW^Xu74Q3qV7Vw2A6S8@nY4Ir+skhrrN%_zf9`bm
ztIqiRNyM^aRa-tYG_U;F9(zkv=R`|(=BW5JZNJMCUwPs!2VK1_nnYm1(A}IS@qh;~
z5KKQxo%4QAB`G(TuV90TEH_KzZC#efmk)?9;RX!T!ROMQhDC&)Xgw<gF^7Iz)eB$w
zF+IE=^tr}49*Y~Ea~}-I@{bCG@+}=YoSzNi#Hvqz>@>dav!+YOac<!JUg8vMh>L7x
z-=rr9z3GL=Hfvt9+-qY6)}^bZ-*4M*_H9@^9$&w+_*wIyQrGw1J1t?A;8(-%zS3~d
zgPfcRM7Cim*x??d$Ia$i5(*GqVAZn!@mzx7kOA0fBX2gS&3-fL5~qm)!B)76Sjqf1
znd3IK%R<G6`F-n6gTj|j_Qd5$J&xbg2>$$@2o79Zi;PZd@p}*3f3dS)RpQfxb5XG5
z)bUa8%d!^ka$<_cP5E=nsZ{_8$B{(ko$#)elT+BR``5^}p`E&llhrkZUVT+S^2GkH
zGt&*|O)4Itu2t|cW$UXyxOm}Za`dNv#j*-e;IoL?Esxm-?YeZme+pDD6>mZj#Wcoj
zhN>&z(%kcgK-ILr6$R2!d}PyI+~ve(sXYU-Ew<Pw1M@stTYsibHVY9WHN^(=QJWo7
zZ1PWzZy_q>4#imz>jzBFUkw%AHJ)FwIG@qEAo<Eal9Q&7umI|Qo)GEkXYaK&p{Pgx
zIDN^2NPB*tyP}U44#Lb}*3QS6QA)Z?eb0w#d+;{v!22?9-)rkM;kmx~wIx0JiN=?3
z!FEmLQZ)I;CEmEEhHM0pRzutA=T#PAna~c0Xr`H1t2dI?&VB4Z>76Lo0uY08170CI
z8th^*4iHQ!?<EjbE<1wo&#xF9V{pU<j`E*EoeGRTX)J;Ee}kG<eY?=vL&&w88oju?
z9&NTA8?LkX{r7|oQ)wftjY+sdM1ET#((i_@moy~PWsU9e*Bu^V-E~2}yMH=2&YuHk
z!S$G2QL;qY8S!5p3nos*&-p<6NT!`u^D%D%jY~>GzD_URTfQ|#HMIq1hX<3Wt4j0h
zvZaLDMi8tmj2|wbl9T4$NrW%w=BlMPl3g^sv(JDt%$PedN$}<bzY1B-i@tSoXWBz#
zm8>tiDnI(?gB;J+c!x^K=*g*ky_!!WAU`T&TFQveu(7(Wy?IS=QDd%4G8P;?i~vq=
z%GmuZS$>*fsz}%E&gzjt0pu6!nl83pKI6~mC58}ne?~wb8~1=m>tiPvGgBg|g6*4n
zj>y!82vGY&TFJV(L3kKIkA-w=LPUa{L>U%pjFI^-Og6~2gXQL3Y#s{S6_a&O0*B5~
zqrQuzme+P$)jq)Qy^9gT;To$TDZ|L*xFUI-y0~k!;?wBZlBnb<Pd*eL$%(aQn7tSC
zZuDdvL6mS^XaQ?3mRQVcp&wPN%8Jj1|9t#sl*RJrdg!H_K~scR-rMR8y&_cQnq^vd
zg4ZW=x;nBQ6-`>&r%47Wwm+HOsApy<U5gwweFLWRN?wUtem$uaj=`PKuB6}K@BR6L
zSrT`s*gbCEiDUG^B>H|y&8de^atR%CwBA_6x;<g~sZe>2F1!&uk;A?8m~Yyo369TO
zB@Gz`Uz_4nMoYZ7WyC4@sXv<m!crON`OqWrtXW~?^A_GxdB6Q{&>g!?p-vkL7w)Sg
zo1lTQwrW8mhUmLTCw7PjwEUU@LCMRX;bqZY@3Ok{l~l@v;5}PX|MB(^uiO}m34R6|
zy6hk5jE>43kZpP~J*$Nj(<-CM1xA_vQLSF&qRInW4!k*Xh3o$#mQWPp_^h7kgrhPw
z#?b8v&0{A<Rj#+)C%dZL7%$eKP+l)k6z)?jF3_wB%wxdbnK<Af`^&^=4_DDX9WVrc
z1(EgH0JAd?A*AaOF~>)N@h@7=l9FT}i1*sP@%LjES1!Y)U4MQMIYRC%c^e7)W^=c_
zh~kAax5UA9zyEhIiFn3?Cc#!6i?Ot`3Nmc`TqHqZE54pdq<OlLThwpV)y*M7MRZln
z@<P1K`Y2R<;AJ>q-rr;JyUf{l6w2+2Yvt?3&#!Skh|tmsKOlWi?)NT*v>e*uEl%hs
z+4;=1ZCWoK9b-fiP|i}yzr%7DZjSoe_WGV9Q;3VQ42rMd6%$<1h^We*2i!lWeAP|;
zHp{X<nt~4RK(qX>V%VVsqd(CyyVoBxwGD>fpGOa7-s8r1ObU*q=~tz*ek$xLFp%9W
z&{*|O{3=T5M$Kiwp;1<zFPc>&;UQM{HzUJE%~euI{kg)><=ZtmoDQqXSELHV%VSxk
z$Zy6LE~tmZg3_i{fom`pS43kOFL1%D@x?3)kufQ$8<Oe!zOIrfLfv1<qg%INyU-8b
z>}0gD*j8Ak2zIF^rLG!5rDTDQ@yVVmDV*IA{)6GF^Od6S2|zB>T=+#r0mu}OG}S}@
z5RZB$6;1VHD9(i-d;wV3UZJb;D!0wFUxzbF$3qafpzaGNI`}e!^ttG8e>3mIFaDEl
zp@wSqhvtCVPd?TE#zC6tLTHXrjbqe0QpLkX&7^!Adt38wg9|p${yhi?ymYXOAAF;l
zX95yzU>4X{urPL|U25SZyl}Cj+0JhzF!RAymR7y20n5e=H%u!y3OGl<ejh&a{;F)f
zgHt8F-9exd6Q_XdWm&x}lZoIa<(e+%)Nu75I+S-cKUyZUkC3_E#h8`JT+t95Vgsj!
zDZgh={3u^I|CiKfe`~HquOo8%+T$W_{?l+M*aInqo0%%NtpnzH_97CKE&5VfmLQc?
zZFT#|Y_O>7Byxn7-~4VK`i8(1>7u}bARhJ|CStwoK1&kXHAU-WzSi{@)RfI%vSP6-
zozHNCk~mQ$^}Wuvur_(7jJrK?U)3+KT$iH72`Ftx-&=T3ouDC~P{0BG^XsGj_UEmz
zdj3)qjI74Gza;JINOf32qCwbgVSfMg(zABAXXAQ63bM2(URZlh`Uua3jWT1T%6>eo
zoJn=5(99s8_7%eKyK$#FnwvV@vb1unXpAd57(>sC*m$y4?_?`lw&-Q~PWJd^nYEKL
zSxO);#|vbhZfrxhXR5FZa0+4KUn4mJ#g7YRxWApdOw@vZZ%s**6j(7ViX}3b6y6Ez
zAubfw%gB=D(Q8?3^!YD<>zULaJ4%0>)^D77B>QHaha|N28Kp@w3*OKLRKm`&#~Jf@
z&d5kvbm<fQWD~Dh+T?R|7tw9;X~SlL=%UsD9Abms)BI!d7Q}AAk-O1t#pVF0(sP&P
zVw$aoXhacj6P^z`bXCNaOvv=Jd+FQ!{s%cCHr+%YywQD@+-U;XU9H*j`yi9s%}-zB
z4l&8az&NC@o@#Nu!ulP}Mdp-lOC&~9#HfvJnr9KVYmgY$rF0L6YNbat66jj3pT^xO
zeiNJYTHxcsI=fBZx<>(tWJS;;+JQz;0o2Z-0Y>1AOqSv9*yC}#BGh`<Ozg;k9Z!$)
z+8p)C?XS&B8UmNwaO)3`nJW&kaf3Mx%1hBDC49)aT5DY6AA>oW3_W_SsN4vdqu9go
z@x;wang?;o#;EBz9FN=kNK#fVM~-;51dA;t{Z<1tsZr)aJ~7hNZEk-%7`f17{+##q
ztcQIK+eyn)9_IrS9d&kl+PV4P4om%hTf^++;4!b-FYTrIP4&&qwO{hvE89y;E8FqE
z(RZ!$W)tLn9`@bx3);g^ZQxW@YJ54WbT+?#T_8n`x8M-@8m2$&p>lhrCii-&T6N;#
z^u-j9cowU>W^QnrA_3u66*k7{2_`NW{okxOKR*NB-+UZUeG=NJgm|b$=ZKYyIdG4j
z+dk=^kS{uRAED*iQHAs+h%(Yl=BB6_D!?QrYjYu^1`xmAY13|tE&9}L{>+m{=NNq)
z2Tku&uW9~p=G|K#8<XU_MuKAXo9Qenao%<v-M(r0^S75yOT+(gM?!XCS|ZGVx1z61
z-{tB8_Xj_sT@BO&`#VZGG_Fpm#C>J`RCerCv;>?uzvY*Yi9nR49^*M-dH4o)P$8!K
z)bnSv>{F3S)1${pxLRS28^i<qo+VqeahP^8?Z^4BYc^`(8Sc$1l?Y~)n?JSgvpcQt
z)?G?5!4F2sJU+jz(Wyd2Q1@c?Xm+=?-(8l}WQ!iy04oSwin3Gi-D21VcyV%te{i%M
zuJ6mr5i$2W5PpzzYQyr^eIA0?B|E;^JNEE}Ma@T;yM28n<L3M3&4uHU%s;N(BD5HN
zoc8+Fk`U#MecXTUt5e-2f^2GiM<xn+3f~ih^Y8pTNizv4Q|GD_bS;Mu-$Fv$C`Rr~
zmZ7624h^a2#~XL;8u0s<ZWIyc@nJx9D5!6Ri6TCs5Qn97GB3={IuA>TJ)84xh4rdn
z56f6$H)!k{*N-jr2Z!+4WkE)ZSNfZ-9&7Jsw8mx?0p*9(_O|*5dgY3DEFKf13RVY;
zR<wyih{(V$Rm#>`bk7T7RQ&fR+REUqDZlW*=v~e176oTj30Hi|_*~(JuEBT#&N-ZK
zt$+u?d0cvaa@lQHVP>=H2HIg&Pzh&yol;1r0!*Oa&Ovc(mvNP1htECj%RQ98+{Z04
zTqwN>F77fm5NTaa!K-`mn2S~Z$!}_KO_~z;(E>;t`Nw4B%HI~zj!^ZQ&L<V@4GL+T
zQ!==Id0)@Rd@x{!^LK+Vb=v1e{trA<U>kWn+QaTl=t*^c)5DZhpjyZK+|-um-rlbH
zLAoYQmHj~mi|zY5tlt^rxBCf)y;(3$tM=3P1Na>N;>)gF<|^PR{+kros&z;0&J`8o
zp-Kx~X~aO0%Nv+ees%0aO@IgLMvpMf=ZB<D8VugQ(ZxFVV5VHy?W`J1j<hkVZO-mm
zQFGd?qz3Yz$O)8->Dq_x2H}vW)^RX26up>lpq0_zekhr1OWM@CUlKJo8$aG{LN;WN
z&uQD3KLm@3bOZD#!of52BeQerJ=uzWa1q}J>L3`kK22Nf+avy0HnRb>X-k8`O62in
zf7zz=8e0><m+T=Uy$;tKbzs8sU2n>e1!v*kRi6X4Qnyd8eVc8%(fa~URxrJ)CELw0
zi>XE8l3iEccaR6!a?x0q8wkoa&(EG_#e<tZNxj-zuPKNb)0noUy1f1#CRaK1dE-Ys
ztUoJ!4RvBuzFED%{o^Uaw(Yr3U_gFQ!n3LHA*FTQN+y@189-ZQ&L`gLcU7E?kv^iM
zdd<xr*sI*}Gj2*3sFV50B5@PCBIo%}8~DHJ1V5~!QvUH>ao8x7Gpf(_od~SEPV}JD
zKePOv8luT+I(2a783z$laDPmAFoHy6=eG%zr7rn*;@Ivbp-5<kW>>d6@<z37iS5Hy
z8@U4HORs@@jEBF{dOT#$750e6_fN0U^dTlL$;A|z=T?0vEG%O@1IQ)cyNP$UxJBk2
zy$?txXazZ<oQj>Daxaguc7N8Wj2G`!^sHH_!c0I$Z<q(Z?Yz0a+Mp(VBSgvWq3<J1
zy$QZ8zKz`S>0wiN&h=A(<@<ZAKYq}+m9x{t)4yz3Dw$ojn*gKVO$6y0UKyAxVs1Ot
zr*f>G;4r~ufS7s%2l)q{g_v@4MB(j*9Dye}Y9&P6U%V9UUw_{-Zp-3#9<KYG-hy*m
zvU@elb)Mx3Gr4k=P|f4RKip^>-%Sl}c{gAmcz??A_Lsr#=i|0=h_B5B_}ln%-Qicv
zn@$J@Ge?7GVj{I17|4UNEi#11z$KP5#W5!@gtKi^R)3`y=P^2xKbAvUwjL~jXoyu^
zNgiDx?5O#QluhPq!A8F(F(F9mOZn%OgwFL`Q$o6G9zD2zO1*O4_i_ZYEO1$0XZn}A
ztLQNu%db~q-)9mM#QAwDYnsYJtvTaZ%aINgy>Ckf^X_lMCyT8o37$dLs{&{OCg3Lu
z7rV~%#5%9+*GLX5f#2{mI^>rU+A}PJiuTw?t|R1|H^Sc(>8V{Ay%80<ZQVSaVYFJ6
zIc?xPP!REbEAS~V;*GE5MHfp)rR6Wa$83Qv4ZO^$M4t^Hw^4ppm}@TomS->@r|w#!
zwm7)`xn6!}1&j_sk+_*%`YNZlokh(AmN%x(o^Q6POZMcd1nn<|KTC+try1mSq&jRj
zzP93Q%hZvs)6##DLGAv#S+y_!az5BUaDsm<qIg;<(u6KOoEt!lS3RvR$iMCB?B8y+
z*%8z~^iEokz4H%<N!KaC`wN_L#i~s9+VugG`rTIPmMHI{|6Eo!Cc3fbTkU^)<3nUr
z@RHF_u>?-VmC-{))PDvqPDBVaV_~ft>jrU>l=>=xZ`@ov(%0S%*KLnQHm*J&^D=#P
z{qmNQS@I>nN_9nR*5ZZwdTPsZY=+n1lbvz{`oNb)^Ru+s3Vp8g3HIE>X?6sb1_nsa
zCi%w}B{#KtOXDweUU!`Ozkl42Dj7f@aD3K~qW5v-Jo&od!KNObRs6+Yhdy+xA^K>7
zt$Vp%qdd<j&p96Nr>Im5vPfL`S79Mo!k+{Y=v|r_^AYz4FC80z!{aoh=?hIr{BT=4
zn6Jg`pZt|>(;Nx23a={3G5b-P>*w}nsQ4FG?Q!ptilE+`&{^Ml(pde9IMtZ#>zO|U
z@}Ah(=#8x25_65N=L>cQJsWCFBb-3@>0i@Q1b412@9X(^u00+~leW+G$BPN%wQ#;?
zE8fcQCl~7M;?7aTSf-Tp^0HMQM9+dX9GUzV|2}SH@k77Vp5IOt=p#j|cy)N^mw3fU
zoE(IX0{<<Nb2goYS;Yrv0C(&E9owmTt$lIL+fc{*dwJT4=1=Ro&bN~~|Hx>JV?HP_
zQr>XCuN!_U;CM=Q#)OYk0qd_afZldjl|~DS1y!W%Y0AWRgG3U8+q|?@?`z;^)Pcj2
zhLf&Vm!gTWTsD+6Ldp+=K90s65n|J?gy#V-nNj$cs3jk!+oZ#?KKCxh8!znz0&BD^
zLR1bic)#@&(H`PQMK|<9GYtmriZ>|&LSVO($K)dxf3~;W@$bY8HNO93Jya=nvbEMJ
zeQ0?eluMG&=Dh8!Q%t}%?o}EBbg>Ev(hXBKtTsSc#Xr2m)W&hP)Zj~*6KW_@Nv0Wj
zK2lc0J&C}UR_YUo?tvn5X5`o&-m!%XPJYdKXKFxUa<iH6Rk*0+Pb;ti(iUXuT&oAN
zROGg>b9t2yYWS6~g?A6Nx9h6i{&=HCG0#d%Z3}e5tDaQHK!Io3b}Z?>!p$Y6@DB|}
zWL@bmqK`(^7*`x}6XWZf`w9={j&&}-LLM7|_G$4TTO~eLOFe6jP@rU_06cY{1!Z&0
z5G)1Gz-ENQal{@VBqtki8)4#u)aPfuzE_R3r{!m&uU|QB!mh1oxi-b!)tlPoJs*NQ
zapB0Wn1O%HgUTtr=Ut|<vxB+nvrS77SG^=2^u%5b{1wV20gA277dis$aKfiE5j~xX
zqBWnFt^;w{fs^DmO&#+{%}zV7bP358cStc}VUxsX_B{OFZva~7EOkYPVed&pgXo}l
z9-7zULfLTK-!+D7gGGm|1cxL*M7+TRx;)=7bGF8mO8BA5$)=dlI~JTC&qbO&V=%I4
zBU1sIv<H&q?)%&vlq1yx*N{JVep`wAL99_tMfL&LB1lCo)$}MtXI<w|3h1u?d(;R!
zU*U^(qS9q}zw84iv3N5@`6f(#J;R{$!se|F<3_81LhYr)VooDp>AvFD*zM+UyzVGn
zwK0L7sN{bBpK>JK?Hr35RVe_#*;%wr8QjFDLbc8{PUSCv!EH*<1OA0wjbu$7EKk>J
z4Wv||spL&Cz2BA~(_Zz>Jz73*52m8LAbg1;{Q8v69~3Cu@V&>Hb_>*RMxBq%IC+{{
zefp|7-D{LCnxjzUym4j0<ONJml!Xc4a~X%-QHv`@EPXD;laa4|<Gm77?>gB6F*a$H
z>G&GcXSKgH#0O~kRKEF(ATT~{LBgl?%9^%1(ZMbS>f~KpzwEBu&v--x)C3N_haBqI
z4xtqaj3gJ*75xdBH07LfuO80Z8sCNzS4BMMGQ-s8#E{r(F4+4wX#hFY{mDlEaTj-<
z>dWfj?;Is}ZtkP?E}n}$=;^`FO0l`0Ny)qbeaPY8#__V0VA9NE5ri##GHXQ(5+ABV
z`i#8d$pi<0ZauL*-t@M3-0TanC{Ews_ebYJjU<kxuWKJRVusZR$!>2ig=0Oue;DR|
zqRV!!Nfyco#(h-$_FCV0uN;&aG|o!o5*MGV>x_<^+jkB^0jb40x@coY3iw??9lN~u
zhbrQ)_o^mA$B~dXQWA|EuO(XF_5PB~%zgGf^)J8oVk+owRnkL9`iQ7we@ZFF4Ysm4
z^x{1MahJ&ICOYG?7WPJ^db;rr?y!v$Gu5Y8%J<`&JIBtbXuG>=@@#^`<009e>&x}u
zZscYU<V`(aFk6rjJ(3-7LV&ZAXq!A3{Xw4ZsG)B)cC^17Vswutaf%>lsxW%+X*nk^
z6xo)-K$cdmA!Y!Y5=33JAVtk=qB41(A2Uu)Fi1X{{8l-h|1DV>$qqk(Y_^`^zjbUT
zcn`?2A^G7k7Ffj<{ISG79sB&scU0Db$h)hQ%g;>v-b&IoB_vMs-U&mT?VZg!Q6vru
zlMz<>iKkcg-7QtN0O!W-=-u^acX;Di7HU;X3{pz4vsFfAhAKUp83|UJKS}fFHGPdA
zDpkqKCaDSZZWDH*;T=<-H3F6nZu^(7-*4>_vLPQK?t!|gu1l!=km1!dBRN)#p`noB
zLV>_P3TAj5A}W9a^ea9#l*%d!Cs3NVQd~{Od2G+g>Xvi~(LGHNe+ayn?9->Z9Hz~?
z7ypN=Zw!y~d;X3Z+icR<YHT)*Z98dfY;32o-3E<q+qR93?L6Cl|GziSn_Sms?`!Wl
zbB3QeGp7KdQAs7syYsr)@T!i&ldT-+E%1iUo9&F>>6)XBN(rwCu=I^Uy5k(~8C(g(
z1JKa$>&~RPUc+NtDuIl_aLu3RbSrG{D`Qz*vdvvRPu*2z>+-S!8dYsinLlgzf!mgG
z{OMA?r^A7@PtTD4?eaFrcxtz*DNYDdZ!K)gk)to(DMH_WcHSq5tIM2VV^b%74e@KZ
z23r|1v89U^b3c}bnzQAFyt_+}r1d@Xkh{A-`nA%lSni#QCh$=c_?%=7PoVgy`WTe&
z+0b?WTRVEPKNK`6gO~rAf0i!M4^X>j#U@6avB~@Jnkl_`2xs;0^tC&If7lB8iEf&x
zE<P<aYHzUBYd{Ho6#>!N%%GvKuhisI+at55OaAXxdN1z|*Y7pA;Yyl>pb|VjI4Cu^
zj^+I5aGmWIk*A|eDKdr)0+!Z80%JnD9lXKlmFtl3eZ7Mz%dWl)>Bx5YPTs%R9Hq|g
z=;+F9%{V~jAL;?_shz6V)Y50ST=Yq|&Ks09V393`kj@HAVPQr15yf*VR95S^4TMBo
z!u21%=^KrLx>9*C!0oJfSM7{;LrP2IEWd<6Wb~XT)R%#=O@rFrx4fa`K1swsHh&F^
zh0Z_6#h*W=9aU&Vtwx{9!U?!h3ifm1^(ZUOPsH;3lY6g~mz1us9`jS>uF&>Di&e+o
z2_k>vyCBo=I#AM5xLnv=&PLS->=5f(w<%J%-Bv%4Mtsr%<-a7?4GkF3uGvI?0YYJL
zuD-TJJF`r-%{>>8?ERgkqBTcUtc~arC0fFbj&UjTS3Le^P?uvfjwOGQb!P~M6BJuI
z{<nCCr%aMAn<9)UE;tZO<O=7myn1{kCDa6&VJi1*@4;`wHPP!go_5It`Zfj))g`o8
zbS%(?$k-=pG0l$?wW=dDQo59`^Zm>qjx#Z9bO`kNLp0R8&|--(X*1o)RN`Hbjf;jV
zyRfw7ZNH**O#9oTbXnLiTae`U7ycbiwDqy<<mw^Q9P{}1k`dUtVo`-b+!K6Lqrc6Y
zuz!iqaXr}c5Zi7-{cBbj{ITy~8<X?^49!~%aQ3Uq@o*P^+XvsE+J2wiT2PRfkrTw?
z`O6AO-Y!+&Q`3R3`T}a8{!aM`;}M&q7$7;pRb0ev^cV(JazWccL+14~Dy#<KIV-+b
z!wQZ<PI7{#n1dTRVDmc;ipkp_tTC&@9_xwl@4_yV{}KKxkLDo7)lQNKYk@88V&^}u
zlS1Spqq&5OSN*Y~kGX=zxHN%Kd$5&rFx8Y(Y@SCtAExRu1r^jlr^&-S#pbB6O>6(y
z{r4ax=t0)TtPSU@rZUh>2RL`>)#K?}$lcOilN;%_-^D9lv%rM{kveBnsV32V>`gs{
z()1%CNk}3_n_TED(P1tn81&Q?rXVxKW0AKO7=_LAcT9`}iJ~7a&UIyRF^L>A$!%Jm
z<`Q`G>}djJygDmBKU0vG5AP6uFWC!5bWiG&DLS|$YzsUU<i@C(tIP}-vsXD<X`co|
zij=r<`ik~N@bG)LH0Ga)31EVbHXqbNX)m%1IREjY6_D$C-Wccd>H(ThM1;e`HQndG
zPsf1HniQ+p*E9&cSa`S`#MPWULsQXeNU-j3F_JOcC|wkfQr*Qw1M%?DiSW>8+NBK)
zOl6IY9V~5R-^0_>vtFb|^xoLWiV7<vE7@k}Ko|a*>CFkcT5C-f4^{XJqv-}hu;WWA
zE6!{9{>iWK`KZ3Wp5!ECcr=^6LT~S|xl)%sUM-NfPBoNzx;_~wY!sZFP}icgi(xv!
zxX}zK2NKu`a54f8DGj`toK}Zzii!l$)?7WGv3@Y-aMoohIXUoK*-VpaCI}=1Eiesf
z)M)z-<!!>ZtD`*@Es?Ca0`zx}x!UH0OK+yn9n)WQSrP@xkeqQdGf3s6k&8OzBl6K$
z3bp5LCxVk?>rPY9wW{|q*&E*8g}Z&w-*%a%ooB;rT}{)8ho~!xj&lwa?}wpp))^K)
zE?V4Mob78xT7Wy=DvB3E{#xI!Cy0y-M31v*!ViKgweRqP8MVk=KEocEPXhHMLDA3C
z-iW^Mi_Z&Mr5cnRA=<3V`1K7XZ9BDR)Xj&Xw(v$<N`u(}mU_J&94*$w)vBz)!f(j@
zi_AFIVtt*I3L7}O${)ob2=+a2(x>XhLR54$r=dsWmCcTx&;00<`5;vtg*M?NP1&Ee
zvl9J=x9SU%(y!y?-cJG31<HVX))AQ&$2-m<+7sUKpNTi`bDSsD8H2Ix*@DR+liIzd
zdO;2{Ec-6I4YTo~MK%tr$Cm29&aT}-*hzJ-f01m#hLClh>M-qDCRt`()nht)8^Kv?
zqoD4TVBHySWuUP$%FNGKlbU0<-YP~S9n!m+P9F=L=ZAR*WEwDWnta3Vhn*Y%o{vqE
zl*WfmOL=TBywDe>dUFz+tl3brUmSFgD<cwwi=L;4U=mW5d@<22<VP}D1v<DzphIqd
zL&xS91;s;FAiFV2B$MUI(Na+Kg$~dD2#vRAD$(`OeD-?aYviK-2hQ$A%<=HmXH5kh
z%##?rVTZ|exBKrBn0}<K6^7u#4|@D2LxKmf@-}n;!?%YwU`pn0F@(a9bQChe$4+nw
zhHbN#y^Qwtc<hU%q2OG2K=gCa>WG~4oA;ec^I2V6&6=y$_2n-HTVDR-A6$Cab{4$+
zu3S|)#7G<xx@whVS2w>E6pIQH*cm2i*n~v+MeE5m@7P;ESsiE58BssYi>l0Tb*0Md
z2kiSFItpOcT*yV%H_6Q-c_NOM=Mp`+K#%gUSi8A9qv{45Zn=9fXZ7nElO8?ny4=3Y
ztzxX}@G&O}q<@y!NzVusEyA}z+Kb%ozpGlqxh~2lOn3=N9YOnC{96??1gBq?;&!XC
zKh+>3kR9CEdj_d2YFj4Dsjq2VnsVzHs%&*Q{kbp%!<1dX99&(y(yFY?*4jbO9~@th
zIugP@D;;z_P7w6V6H|xPTorM{fgN?JkvTq*H?e#MgjG#vHv8Hu&phWzy3dN9!cT|d
zva*_%yb^O0dj+XZTippfY$CFd3;a>9<>vO6jp*&}%JPvq?q%8MCvN~_tJ|37PCCJC
zn5m+q&0Wam4MGfdxc|T}AQl=f8)dnAtRW;Bsl$?eClt){6GOZC+>jy-Kk|C@UW&}k
zZJSTJU$MMcJ39IiRrXg=P(1iOAZ0_!Z&eQDueLWpSQkM>{28m~U#XQ6I_i8*H|Ez;
zwCgy=0A9Q)%K5$&4jnW@i5Mo%kojTDM6qhP;9&(^>AoFTOY&Q6d_>q3?q;2nU0w!#
zzvfgvEf-XgRriUPNK$~(3Kh8Qd|<?EO4y#A#8uP5mnAk%ZM>`6`g}?BWa&u=XPV6d
z%c)-5NncgMrc+ZL6kh;wGzvtw5c*Y;Bli#+$wp1~QQta?4~=)Vtn<0FtjN~?OQG?C
zOUyA?C8(2{!oYhHJLiwBi$y_b_P31wXIEvt^UQvNuh!y-$a6p56X(cI-+>{Bnf7XR
zRVS>}?pr8~k0rbk$SsG<vYHJuR{{@cO;+DVgvuK<s~fF+hr@551Yh;Emaj)`l{Rg=
zE5`{0y^gxh6$j8KIz2R2wDnDh8$V+cu6`vqc=9%WCr|VkXp-e=e@}CBJ+CQX<8xP2
zQdt5-P7o0hVOjr(s^qDZ|5%5S9?{p&a#^DeO&N!ZkS;BK5p!dAVJrh?9i+AmK(z(>
z-SLmvP&H;{yB|8P9*3*<U$J_4u3A2?oIKJrQx($31y82VBzucLVEzhpELj}Bl`!NV
z*Kx^A79KYKTxb9Rk4z-pMJzv&>K<5WFDmRfN^pD~>tsU<CJx2IJ(P4g-*{nC%c`y6
zh1|F;aXIZ&K#%FSUxnL#)JvEFFGLnh{|H9-GFec^-8j%RTIF@p_8D`kOuCM1VVP6T
zztp3u!f7n_iU$MKF|+VsZE7QmV8ty@-$*wKMJN2m)Cx~mk>2R@LbXZ6W5EbekxG<|
zGwH}#T$dmr5hA0wJO1JL15i^|aX%8eu&M$Up=3%-Q`&B}{m^L~fSMq}JEafg<S0)O
z&r#^}er*s$Vp9h*B8?m1j`Ur&mH?-YpNct6P{rAJ8)tfnNlL+Y&3tlOjGFt^1;(|#
zKNTQkDl6(V_(`H1n1v1J4uf%N52BH|F$?7ERv1P>eoq%|fB)*XVb(awPsnC_u1xER
z++n0LIkeE-s~3*Pl*8KH-XvF)0t?&J7$bnDBl4K6S@bw6PRveYOpKROAZ#L_h87tp
z^7Pvb_A13fC`d3`v{~Gz0(M)W0m;9zZQ22wky1PC9KnjeTbh1VDKjfrQcr|r5!XjR
zOO!pj9Hot+m%eQQUN<hs1Jz?w;7_Y%N-Cz=OzWUUFPijzHch~C1g@5VsVQ>V#}8S+
zi$UQIuY^QugU9bQzi6KR{0YmLVJn#~V>peqT9-T7EVCX6ZFQ54(awv~3L91$5o16|
z$Z~{vySzrCED^?HyRTQu0s$N_$ZXYnw+FH)D&ma8(7m$aZKpRt3})lBYE->f^tE0T
z+8KrW<Mi>IR8ZYyis<05K-n`$9v{nCX=OP+W2O;MwMCI^Lo>nL)@bF|IWU)c!EOHs
z3euUOvrEI&F~6?jc>UwNR^cdyc%`=4P|PdtL7$THmW2{4=ByH6(p&iP!aaChTEY^r
zT(e~&+naOoWH!6Kn`An$&QBH~axj5EGuSjfY6ih^f)(jm#7$Yr0$%yWzyW2oX|Vl3
zOh-|{mUmSm?yq^WSr`8I(4ZQ=+xb_Qv9+|4Ko3pljneW#86N6BoP4<0Z<<smmR=XL
z*nWoo_<@d$#9zm?LNg?sDOj}2Q%lqki8w+q=4Edsgo(nxlrp`$Mrh5Jz?&|wUutp^
zB}hYQTfR+A7rOksT4-Q>CT)!$J3Jk2YR&n=Yg21GR@Hv{nq6nmV;P9Z0<hsJBPj1x
z(clzd6PVfBl#>ZELX?mq_)fj_{{9BnVjx7#@AsvGRAcn%@{dMfz7iqeG!*0ZVoWM9
zr>(R1&jc4#V{T2HQHpk(`c#>r?y;84IScwBA>Pa@7h5;_%}tq<7ChY;(UuvJQBV4A
zgmIig6AwC+@0ZmhVudkWo6p&p$pEtf*q+WUIZ)Fy{tp&w_bYjd+Y755S;^07xRMvv
zOtn_OEh3hN)vV`euwCS+db^8&Sy1%n%PS!h<xpjzn^0rVT1jh-8QY^03VsXn)Q2&I
zgG;`p_80Rdp!s^yu^~H^rMNuSe2ANYccIs`BfhJ;&ezAF`^0UnS?%_ts^yr1Ypf@d
zhP^2fV`GBzNAuBsqPZF^0S7k;1@5;OVG!<~%{b9`1zL>af9Cq%w9dxMeSECei^kh!
zaJc&|@uchPdhD;ctd7S<-dQGiN~{ZzHGfq3$MFY!b=$qlSFUGo%`?!x9f&!Vo{&89
zUxs>#G+uBN@HQI>6K<EEoOl_b!h6}!2IOurVPKGbxXP}O?4qvCjD)mw&#IMw9l;)L
zH6tI?=O}So>k6t^2L*bvqN3AOQ+6w=I*&UNtthr@nsYtFHafAWk>4t;nz};^nk_Pb
zo3H6^M%xU%ci%qzM4`WFX+Q|Lu7;5dmJiIWE;ZFMe=O?8$VVuv&i)#_+=LvxAmAU-
z@Y7}_;Ir>H*W_*pp&{6H9{3&Y*`L3093}IZ*`Dp!&u_i^`QaHu#SwH82xQfd-g<0`
z3VwxI&(UGu#q7q<g<F;kD^Q^n{gRqWNNs%{kkBjIdz2y-9CiCdeMRpf24!`0Hfn64
z6>*m44hVV{4#zfo)CH&5t}l(9t-el{>RTpjohI-N=a6MJ9G7pa)!||uy9C(W(6k%^
z&2mC$sv2ssj9MR+Pt%O%SEd9uxLbJJ9UYih)!*^<Z-Xf^9%cO?ZZjZNO~!h)Vybe#
zewGGeeb>#Uexq_<il;Gg>%Zb;ip)#1Z18}iSdaRmd$c2L=seu%cuYl2Iv!YWWKZk$
z79AvFM?eW>$*`x!rnu$=Lwyo8Q<dNG)UWWX6*fZd#=wT#!e?xwMPVYsa4@hyPCu4f
z2avbt+?PI;Eu+6?r(1-3La5KDC_t4%VNj4&XN~K1KX#Ubdt#elB-8i9y6%*(YiIPM
zT!IprfV0dzih*W3@7=!_M&cf`bGX2$zz%SdLIiRP>>27glDAuTmf<&c_#BuS*iU$-
zJ+YN+M)oT5SG?x#m1K?l?GBY!8eWym8Tx@_El|+mIbn-a#dd}aoDTze-k;kTZNi$b
zC#h@I#q5WkK;^Jp!l<RTqT;30(E7~O&tJX_7}LD9hKk~yz?iNwYqJKQ7TXH@*zvLY
z9QC2GI1IFnrHDwnO@!%H7lg<hd%W!EH~8F1+lD_~F#sYNFavvG#J|bDD$6Y9G~#HS
za>|n}pzI|tMz_6p0zJh)5n#rcV%=dAB~Ocbf~woEGZFxX&Pz>%x@v~R+Di&etW~nU
zDV9*juc(JJ<7ieQ1Up`?I4e?-p24e9Iqh><2YpRv)*dCzXL}8``?`hzl*X)vW{rzG
zkl(w-ns3=^JL8555~2HDbll6EG=Eau)bjKuG)CTbGvUL5<)`M&*((_>jmXj`-`_`e
zAUx)3B@IsPHKVFYQ!3WdIvJDOn%iY1ufbXm6As6EN&}3lc@c;DnX0%LM-s9GA6(3z
zmWS*3`f}zC3OUL>;5xna^>YlWXxS!tVc_QoAD_NL=drEvwW2U|=2G1OH>~|F`D{Bd
z7a4EF0=H9Oe&@1?8BrSKRegmv1TX1>pGuWG3e{gV+CGPc7ap~;i5mSo^Xc!XI6sJS
zrVjOD$?lN6?r4vG)xz!WEB;;xA1~mH(-}1w113>`q*9J8+GdCAbaR0cK*OsY>+Aip
z5*U1rvkOwofz%t~5-2S{k9_o=u;!_E_c&kr)y#<~TU%826+SrrtIAlh)taphT(HiA
zgl&B#*eN=C?%Q^>H06>anARn_&&!6FNsoo0szvtUduGH+g6UmhrG<!P(~sdqxXN+j
zl+2Yz?Na2J{`%Eyk9?_DgDlJE9&94K9VSfI0WVhMq-5%92)06ug|wXaiz&3-1`Xu%
z_3<68jKBEN-xV^UZ#5)@t;!8vSljXvnePv?WUwP=>x{_hHQ;=#jT+^LS=SCzK&4Yr
zKIB5x=5-nkRp1UhzfU;wD9i|j>%JXHX}}6V25V2HZMU!I+IxaKGQE;4iaq>Ev`0Yb
zdibC&DDvTx43(0nYlSvGSeBp?pT5Htu|ixlq&|x%FT#>L>~tHe;zf+8ovf5){+4I1
znCucN_wvZm=tY1=WRd!|go#E+d`e%i*qDqL!Wj9b0hB#WjaH$v5&yCJyt&X)<<17p
za(lm+iH}%h%ZvoX!mvYR%MgE<DuHf!C>2?8FH7Ds&JMYUXRYG-h$7s6xj;ay#KQJc
zMH;{0|LF2y3Z9w74Vt;ib0S6Rv_{-~-|YVJ%+QG4iJzgCG5|8M_4&4LdB<6Uxc%Gv
zjHPuuD}TE)Km&kT!Kp`-#;GEP=o&H^o=SKp@DWEjW~cPMZsP>s52m`4KHNy$9{l5f
zQ2PbUPF@f=z1;4R`*zOu0z?DfUU4?LS?>Z`JC==1+@6BO48<*Kz;qh--Os;XoUfsn
zCJHZq+SfV?$Ou77XXWA8NIjT=3wIdZSangcp7ikCwKIYfPu{#i$+W?bd8VP{SoWh~
z>8qYOflgpW^SNu$aWeeyH|k_5+f2`SnZQ|=;53A_c2)@!4B?O%&tZ3lHQ~`&MzE47
z;A1J{1b%-iDR{zC1t4d$Y8>;sEapHPVe2XfYN;q`zs;@k-dC(<>MI2fILc_nGRAJO
z(tA8^Q3tAKU%ox8yj~S>oKx$lt5Fc9Wg>sPzh6#st5X!=HU^V^eS7tR>|^>6bJ<UB
zr;>jK$tUKql#Qk?{w!XKB_x@QDf$cYftm_#ERF8@in>u8c5g3(30>0Q)xV?98{hur
zib)%_Yp%2u2Od|Na7P}CK@f(j$zc7uQn5nmf?wi;_Om@6Sy$OCKU4Jf067r1*+V=L
z8`~dyb)LJeN#R&d)gQrM-|gAUJ89zjrVP-6YGe=v->^q$(I(DjGh?eb+Kz7^dVO{~
zy%nf8E-$>$lbr_)2McxrXy}DlsRtK`IoduH9!R7iXWRQP#oZ556_YjKgVQ|R(J^xQ
zI<|jVrd)bFPM^ceI4epBuB~O{W65FG5Rc3N7xuIfr-`6UQ>QC)hb&gFw0ipp=FJj3
z!@jiR2ys8NCjNSe;kWT#qWCVYj&dwzcftIGR%F_lh#Nx06r?oGL%zKdzS(XpPs|O!
z8M67gm;=%B9ltl-CMv?#u-xr2>Uv(QfoxTxYz99Rnm0aq_us6_Hh&@eT(w!jJZaRB
zu8_%QT1&sGwXaMM@~bxp(W~YZ;=ykoULtn890I7v=Nhl0$sg}tV{Bfk)VbN7FR{JA
zhP|A}qhm?qeh{bhsYeUt&sL4cpUI#<tzZ6vRo<m2Lt^>TFIS*b9mLdiQi}6_Ifyf<
zpUbXAge-G3Q?9Myr$#*}@Nt!zmj_(tANug94bqetp^Y9KbDeEp{DuGeg7@HEb>Gzy
zs<%?J*~H-Wxucm9_;>-3PxNhY9$5mxKG;5wQCFu7EQ;Ue`A2<M4F$y9j=F}X@RVQD
zulW<T6<xP=H*NnETdJLhKjK(3Eg>Rw%~>V@9x$#QWMAz%tQFQGi7&=k4jvvB8;Ri&
z?jJhOcfheDWE}V!BrG25hIibaXE1aAls@qnG~r53?5F~faaON~Q`d@0gY%JnNaWoF
zqVQ-ndX%O~ZE}{FrE>`3O&nDI8A?vnt%jRh)t!cfRXIC%y?I(PI`DZ?pr1~j0V{19
zVVG?gDJ86jPr`9l@Ol4Fog2f-N?XQy1+etdbzK#^RJPr_PPSH&7GIqpNw_1F{Q?%}
zVA9F#*w#f~rh;s<UNz(1H%mdxAgO@VCr<wQW#XJm!^R;Qa0^B{pa~?y`xAM)r)1sJ
zx!Pi^I@^q9CGi)h{p|1dFU7Wn;haH9Tjlzgbz#Pse7?FYUc@2kUO+h0(q?ppJ^&O(
zvNfNYaq8S2A7W7hP9J@HV=Q*(IXNY-=IgAa27hwGlNaY3>LA}<GA9Zr$L7UQi$X4Z
zq=JSHZvI1W)aZY0ZyVo*s8ge)C?!UH+nQRgOB&sXSO+@I&7|~i^6EaGwujK1KIO7x
zYxET9?E|f9?#EjliZ7qcVQY&h?!MB3vk(U#OXJXgdOLk;0(_K0O0>GcF(YZqM!})b
z2KMJE7LrM`++6h4<{L*l+{n+Vq|t#zzw|pw+z<b8dvCqyf?WLlJMF^G=1s*z^ejkw
z;oZ7o4ddz}HG6H9>nfxQz3n5Ifwz1YcYovK)lSnm<o3w&ww%-WN2iz*MQ)he2SP@z
zFK8PeOv??GFpRZ;zf*rd#KVPq_t|xi_x{*;^4fg&edYaHnU}YW=6I2MdBBv6`cqwH
zy~n(uUI(x$ab0>6Bwl>EO}*167QAFPbOyKm2J!(QI0%Hrf>0Dt>c16u{6(DA#f1MC
zpH7q-?5i)}5Pb7n9Q$Ql>;48HI)Tg8^CCJ36Bd=^OP3-Ow-mJm+?s>^Ww)Y8Ct-V#
z0>qa@Ay|sw+l@?HUWYY6Wer8+1wVJ|if*~daI&$a&&>->D=+U?-kZ&Ffv01vI?7fe
z`YY$o-me09(5}5r-XGxm@zvKXCU@gd59$@U^<UH{0&76$FTLGAYBX$mVkD=}Wpat<
z%wV!#Es=Kx4rsxy@Kf7ycaI$QI}J*To$B^~xU5bp|1jA_KhX+%(ECKkUjl)ujfhRo
z#0`z@Ta3%Dl1?&vzGx6WlvEvePCufpZx@rCSSv7TDp|@{Gx$zz*qK$y$)hggd_C;4
zeQIu>=8FD`l4w@y0uwn}fz4!Zc!2501?|qQ`~^bH5B3%g!b0}`k^n}TdG|}>){;FF
zlP&S?J^#b@6~bEe8g`-vH#2f&RV4g8#m&zqJh~2V%Y(hx>})>wiJ<R-5)$ju-o5u_
z*OsFkXS)JNj`VH}#xA?@qV3zd6DTeB50PmDE5483TG=`}BBI_MONl;;a?OiOGYKC_
z$h8y&MsriRs0h_(v2Pxq)}Dea>;#8M%gm$0q~?|%-hAxOA$?EX&DWc2B_@+na5LyA
zc|A@ldqY272a=4t_%m?AkYvZ(N?G(~$LFWxS{s_ReeH0l<iNwczbv4AjHU8o*Hisn
z;}R=)eAY9IH`2O%d=@z`5<fwMQf1|IRZ`kRoJSAJTp3urgqKTANIMw3KvI_t7FsTV
zPJJTzk7l$C1j;#|ZTDj|(TJT%ss*Gp6m@-Ku62*Yw5dCzMu+aRaAuzAR-l1p7_khp
zBkIoTS@5H$HWP;*flY!d{TYewBb8h{->yQ()uWqBI!6eQ07g=fhi<&;yNc^bl8HY$
z>R`*G+s3M71@~k)FCKCmb8n@NaAg17wbcE=yHxoMCRPlFkbgv4;GxJjQyErL`WtBX
zA761dU53wibaR9HU6n?K3^yn4F(@SUr3m&8*Os}Qvtd!eNe#%LR_K1r$!a4X916aj
zPb0X{R_DW_hg@RodGz18?9a=7(~l^>935^h8#yufu(#<1BUa~R`dv#F^D-TBJB9-D
z$%v1?+-PK4aoc|Vc8TlNz!BA+u7W37O|kjRKzO-gw||~XO&y`BD57iwIh!^a$2Nsg
zLAA)X|L!jK{+P{5-O38E`p0haU}zkv4BO*3O^l1#TlClc6$ckwm8{i48<pZv0<%Y~
z1&0@l>M&xi39;YDOM5~WlD#5tlt?H@gjtxVQIg-98k&gMshRg`4-1iBMrV2JZ5Q!8
z*jrMm?LT9-k$&sx$T~ww>cc6ku;O?fH82mH_8=943iCTdBUy%fh%zbiKw%t~yK&bv
zwwlIau*%HkpS0|4)(RP>KulsCA_ah#-T#UZtY~jd2ncpR@d2B}HYwd-8M0x~gjHAA
zUL?j0pz0<?P6DV0h_9L>^lJVhnTBn+^G|hm5{e7X!KpAPLtV3(UO5+4Xvpi&Y^GRH
zKg~`@*>zEa2Uf`*N(niCvQ13GFw;bSz}8Pu4smt0Id7XnN-s@V&9A{q+c|`^&lv!?
z@RRGsQF1ps1ywGva~0I2<w@67eaHIU<CJwq1${!#S8XHNK4hO?d;Wi$%MNv)L(lO1
znsRF`ia}dpJ(oFL{NpF>d((Zk6ctQZ!eA$6B&|w5m%R?}F-PO~L=7<(uI|a*u96w8
zx=YA}>OdxbE>|vU7;zEF<AXguBLf3wpJY8==IR=?_1pbQ9M%mj03{5=!LP-mQ!Z8&
z8YO#EEZ6gAEw$gaC&cT^Ls5A%b$Y)Asm3tjh~p@7RE8Iqj|}<;Z#WjPv3?C<3Re1h
z(865Im*2dEN+x9La0{@)KjwtKl<{QHs6hk-sP_#m-TgX@-|1WSqXVY*1!%1J$Ap8S
zkw9>W_?Z-)e~UXMUoHXQTcE)GM6bfh3FP~}^d*J4H<PABczNG-*k%q3Q??Kj=|?e?
zI4%O};n&-BnFi-X5FSlGPbsW~p0~=lh?Hb$H;FRe(ClfGJtUrHWo%8CRXQ;}XwOta
zk(HM`q*{^ch}7)U!!r?xw|v`*X?~$noqjgP@y<y>OTjWcjQo8mU|16xZmo*SPn?t%
z{HxIRDtz{Lov1;&E)aOljj#(1e`sXw`#tROqO$iVSTH<@e6cQUxI`5WjuDD6W^;z0
z2KmvWk3hukbD85(TkO^l9)uu@3G>b2c->JPDsg!tyw7~p6NCCk4WrSqBXyy6pZVNZ
zhNgaginZn?cUC-D!Ch^UI)I;s<;A*{;+$PG9<@q0`2?xKfu9jCdAJ1#bp4reaEoy6
zMzcIn67^?A7U1Y29Bukd<Tp7b_p&2N=j-62nQR#B{T2gy5hBW+1n6o8uWqZxtjH@^
zNqq=i9YV~WB?(s1Q8kKzmuuU}r7acDBt>cIW#QuZe>Mbkx2NlgE&Q-td{#@5|NT!e
z8gQFOZlQj3t?g!AR@)o5Ma@t6+G+t^!MLlsn0>H)yMGEf?pHdb&IWPNgK|mjS)1zf
zm3|=h^<yM2|1^BeQHEIlIAi-9sjvj|@O#;cOsGU-ExbN`&QpPh(#?A4t{#6uRco^+
zfS>m>z?rGT+!$@Ke3qdFj~JTM;`Qa|C4<xtFt{1VO9H%}U~kU4AB0Y=+D$N?KaFnw
z;`MUXbvv3+uO&`v26gUx{GQ8xP%i4dg#VqysCY}q_VdoT510C&wqQv2bFx3Wx<-S4
z5*5~8V<DtZ?iWEJTPp{5RPMacKg|q5PAPLJ5;Z=<S}N9gpQy&pF8H$T@Lj<1)#ztV
z#_U)%+B-%l^h>NPJbX}DKdIZ=HY8+VcBh-k2bDUJfZblaXVG;8f!JbH@E++;q{ZTT
zt?z!VlF1IL_4vyUBY)Dheh{$zu!}_oN;c`OcW&@|D%m+g)6V^Lu{w;)|KWV+eG}(U
zz`YMFK~UY#h2k^F%_zpN<*;4KPI&2x|7CLCcl3({)w<-V_<O&5be{kD3VpXlw8!L~
zB-)3z8)c3a-TIEsyX#vQY}E+;P8qRr51%fMOgP%Ij4ii{0_B<XAjm1A`geQ>>DsF<
z)v{!b^80XAxt0>d%EH@B2E#zy?#>>CFd>&R{a{G&Nt@RQi5em8Ta|(S1UwQ0;<O$r
zmU*X0KEf-r+Q7iKrfPF@sOl#JxWOdNpID1J6uDCrc;)RztpA$@FxZSf&?QC`GLkEV
z!y&Y@^P{+Y$yIa>zLw5Osta8K_IxynJ!p&9a0gkYrW=dRMo3gjhB_czq-qO0$pIZw
z`i#5T*B-fNhe~0i!>JfuC&Webr@9QXK~5mLf^};N@a?`0^&YIx+Ur+U9K$PR&VB&a
z9?&T;jkC$l>62zo$dl54k&Y@vuqo1=P9~qiyL-A3cQWe!xOVtFJ6oyZap-GR<?Qb<
z>C8wb+KG;JuWC%eC9~&L=1nSF0uBRbC6bTG$;Z5IfBO-73WIMx<wrP~bW}kwXL2;G
zkE5s>{T?DA+F5=B!?@IE--1l_s{b%H>xZIO{gEr!@FLl?KSjqS#&CP|Xb$U8&M&o-
zGxTPlgzu(7jJmrQH_a?zL07IV6|4Se<I8m4KWiDsTlVdA88Wc7bYuAbow*R|bt@+U
zTA!Dn@;s&#MrHGTET-Vl$%;T9;I0$jT1rMt_N%F_dP4&O^IWTr;$KjQ1wqbxcfs~o
zai8Ub&*qQn2pTxu(pgZyS5DEmLGWiTy%~!Sz<5SsBi_!L9qh~54^vN#RGgIfmtAd!
zuT0j5U;B#YQmobMAF|}3+cgQ53`MUltEDSGPM`^VYhB|Vcx;Js#m<yrnC%zM#4a@{
z=3-aNhN94+u<w?i#&}CxrAPsiK|E+VD|b|4ocCBo1&s~$#4~+oyY7yob+|YC&Ul?e
z7Z5c5^hOcbUJox+hKqMT5wlJ(n4N<+WD5=yHuUgtYZj)+uOd3b07WyIT^PVsV)vca
zdmv7^9q0QFvjAe&*(V6@{+36dY$@|atVX10c8=(b!&`*#*vkX`!lzuZzWZ>8j&mH}
z4olnnLJIZm!-glg7JVBi$b8VsVr{ttA}A_&7(uCOY$?zhz*wvG3rdHXopMAY2Vjef
zX?)sNa#(|4_2hwae2BwLOY{9*y8AbHPOG^}PuhiTW@HWq&^9%?`t5SAnLZ1^K>4cS
z@bYs>T9;?t@9tNax@7Q#_fvGed2R4=2AL>d`-Z2pSN>YAG!A7*0R-w~zl8hK`_)7n
zO{E~K>(=eGVO-CB&TC@w7rsL8|BMoqP|a)`6-Y-t+KOE+&`2l@E~*=clGKTD2%vJ4
z^fJkhq22Pps<;5&a?EbU>lFeUXzzt0^CNUkmwn^t;_+1&A!u%BeTXCFEZK9SOUVRO
zNc6Z5uscV2Nt+|fJIxL@mBf3d$??%Zs>V0;8hWQs<)5eHW0X%F?$#DIiPl2D0TW}X
zzT6Y1*zZ-5XRyQsIzaH!6+7z)$Z=9O2qG@0H|P7m63Kti+<)`@p+%xy%PeD60-A+z
zc9l=5$cm-{A^26djJeN*tcM-pWmW*>9}m#{)CW`^U#BMhu>_uUU;bbLS0vIoA?nW=
zAgp{_e^RyG*93<{#_zoLT`@4S!y+m0eC$>jO7`3fT93}$Gtt=1aq;q87B2im;}Tht
zYeI2=U1f1%R#(@XF9s|-B?T~04^J)Ws3^^h0w+yXZyau?M(pMz-~z>>8HxOow2#=8
z3yk+C(zGA$4rDg!v5ha<+q~uszI*mmigSG?M{>~PB1?8F9cL^q-Pf^Io*5BmxqnB#
zLSvE3t?FD8pe3@)#KNKDbK_Ix#BPDA)N<pHb$?%Yf_q!+;4<dY`T-9_$)PEwp;x|=
zl2w7&^qKbq@8NKNf4fkAVn>*q{>uWf+)8wkWy_5$s%6X1Oh48EP$r#IcN@+}BM0b9
zpCamVlz@-6M_TEQzJ#rxcKRIj7q5WKEvwl&pQ#*6_`#*fo!R@9iY!4rR_9HT-6N;H
zRw9}~DMPKHPeLK<50%KKED++m6ZCO;5S7%slrF|KoYK(yI5AkodmpYw@;0-cvJT@*
z7|IZJi<#)V6Nx`hO;nl)0MM8Qn~X6AtiA+SZ)3~LIg3L+*q1%2A))Wsqu+Y#gM2xn
zU|mc*H?ha_KLK?BQbj_q_c9E;KT8qjgW&t48^vlaNYu7)?bDKzNi-fDtFYHx+z=6N
zcG_b}IPyc@5(`^>m+aP$wOnBjXz1O9u(!+I#A-FKq<pe1WVwx97)zl(Rp^wcH&zpL
ziE9Wx6!=)xMf6q6z9E7mh|`MYqF})K)xn_f@KhV;BJ$nsJ>N?Zf8@6-_kSZkm<LLK
zxY+6S`_KONLe)^PXnwu#<eq(Z^)`ZPso8-dB5{1Y`)VBM>f?OJmM6{7S5)d@?)^s%
zP6L#y1RLvBvzwY&Jf?%Pi|E)}%=Sk}@AXUpfa?ir7}n6>p|oTrJx)Neoi$o}+o4<p
zB5?xYUbu1horl$Iih2$zO>6Slaf;t!CMV0xru6YCmy1~HBppi3S?6^gOF@v7#CHAI
z`lcsy=gHRbj8O&g0NdKrm8x=K4E&9-oK6}a{oG5@VkIHY5pbl^X*N3(;{5d_`Ve8(
z=?87Iu?lsCr`PKev3?H!kCkHPuq!IY?QW?QstZEwmvy?YQ~>~%Nlb{f(vD~Tz#NqO
z=cB>79)xCg)gCmn*vPPz*UqP19JyGyy#tRE5phTj({nou>*;0)SRQsuE$!qt^GP(7
z75G1<Zig~qh+QCFM-dSAQE|i({iOXDimS=|H9ef6CPjQq@mbe8p0#Ra+sET+Q}wMf
zTjAprS`<0gN~b);VK9xZicl}NEzBX|l=)tnsVSv$Pa!xx^mVcCiakO49@AK=sgIE5
zTgfrErX>dTp~(RoxnO-|wK{7;ghlP`SvIKD^PtNWlMKqbNvdReSsOcx?gL*2NnF>D
zP-+}f&Vt>&^aG7#k2)e2F|{@=3A7$_d~F#_Zw%xZQ*;2K0lYV8_P=ew#Hnc)n4xpo
zJfz^MWw=WvGh^@}!1Ov9bBLO$VhkZr=y6Hmv9ce9Kk2yEhs^h2bLYAgvW+?#+I(%j
zzR}^QAbQ7QB{;cyXMixJS1;`MV1CV=K^asNL6wjpC2b?t(OzrlX;)--d*+O87!A>m
z@=S#boj>=5k(%lUK6T#QPAGpuJEDUU!sCLvt_NY#CUiNk9dB-rc8!#!SvJqM)go%!
zQ|e6`yF58Q7ZxWMr3cW>T)Y;+7}OA1A5I@fag*;hdsXr9Nwi&y<Lm45lDF-!wNvkh
zvx&7fHbm7<4!S@N^MhBbWBZL?fcL$lRF8!G{2M9!lP|8h&;u?3O@SN5m+1Bun{~Vr
zzxsOI18}XTKy$BNO5yu%5Z>=Pi4LCAp6cg!FV>o1UPSpiMzSO#uY=D^-DO{42O1yG
zorpinuitLc1%45(Rs+IFO15?Cd-SWgI9W*xTZ#tG%rC>mJGsL$WojyD-)y**H0$UV
zwA7z1_?~gKJgs{uGyB6V(B;Z}{)`?&tkRXF#{Neont`DsyMoa`wHV5lhk>lFvP_k8
z{dMjh(ow3Vlz78&Yt~nuNWeqvJD1z|o==BAu>e2CrL4kp-u2XYe>YkgFF(aYpw-0X
zXU^h2c+K};CWp}ygRyZcc>HS_N=oi;5#@tX9Qg@<qgik|%D?V1L$pRY2WME$o3dS(
z>^XmaH6ah^7Tpy*Vx~}LTAk1@n-9(mutC?bmc;UFo*%bfIU#HylQtg?AyO}ztHN;$
zN5ra&C^x}1rqzf*3e|8G3C8epFmtn^Hd<xv-`&#a{B@Jf>26W=y8j|_zjn`B&N^*C
z#ubNz?bKNaq(6ZF<Zv5xm%tk;H6EU0Qj4hY2!}9mPXKO}NDJoVx2URrQ0*D5kr%QY
zRjHXVIFT6EyqlVx%S=SLGe9X~W~wp=BI{EwSmu=`<ES5iN_~nIBgs1URj-GcuDa?m
zQ1#0Im<%F1ok_5bJ#kX^;CZC66NZ>?fn>%s3&^!3fAJHfqxai{7}8y0<zo;SIYvlA
zTI8!Sm3LKapC}`!2w1jaDa=#>*U&3hTfaK3@a{aF*k5;WQ2Nkyqr52HWSu~u3X3Q|
zQjo7S3CqF3+5WWP$n%NhRb%1(Rbo)ydMS+zyNbE%U73QS#{uz->3uMVCdY;^2l=oc
zLU;yzXRjnClVNv|zETm0KrKlu8ag;T0!(=|9@Go7qGo*<T=KzXQv3rJv`76X<GuP#
z!G#~XVG3)^tnKuPKh#P3#LA_f2w=+?BRBmedn3HM<306ET^?Mcz*6UR@BYo4wJ$BL
z+2J2gN*A)YXIEA#X6Hm8QQW9-qQG%K?`>0n)KuR#a>SqtJ`4VQaK{~A2XX}+928DH
zGlL+&gLN;^pR4?Zc2U1Xzmzy$t--vVGAel5h5_%?akX<AbIYIJYUeyhp3lS8v>d1H
zGJ%>7ET7i{DzBH4qdWs6nhOs&LXr(?yR@R6sFEv=9jaJ$Tyo>{YNU(%Xu<o_sz^ZB
z6!0BJ^4)t#vGc0`$!LYgG+g~kuvD8%PI%>$JT$IBrWln3rtJi8M*11f*vGy}3K&nf
z*eEjJGxfv%k{3r4%>+G}js}&={-{;c`U|<VFx}t;e8UqkM1*6j6Q^D+G^^g109Ots
z_>36mM4WK{d3#B|+biyi`V{}`Vy9U3(_4Rp(6RT{N=8fn*oaCP7#j0;zqMeb{Nq<K
z2k}5?Ec2{Jw$4vJ+&K-mDeb`brc`iE6yRP(;DT}I#pGmK!)c0cNX?GG^FjA*s6Maz
zk(lSFf%>0WbQ%@)`4metIQN9^=5Nhj&C3G!2i;Btu6rhG0e{#3r)>U6Z!d*Mp!wwT
z381&)W)I8@XnT$K^f^yIXh=@Lp&eEK$jlbl&6aJQ8@Fl8wXsE`8|eBYXQ$Kb;oy=Q
z?!HnZ+v>BPkP)rZ<hk9TH(&O&6*@O3>1MN*rmVum`@WITUteJN2AYia0IS6f|1x@J
zoPi_A?O-%!L*SarTd6}}xb7>!9p~~=+j`&o#(?FB*|2@@U~Nw!Cmy0h)DqhHve)Mj
zX+9Xf_DuKV_5yNoFwsU_Hh~^R`B{nJZ_Mq-4FWv!_nY2%GfaxMi^5Eb3_0$7z8(EB
zQnliDt9aA3uWrf7nBzR8TSkz0B5rK{v4T(H$8r}EK%ph*YaX&}&hoC0)Kr+R%<QAj
z*3|ONlh;z$f3zE^9yd`Cr`r>WVczpkF0U<DA4(gnlr&>D(KqXnM}Q#q;UXI4@m)KX
zbwBp&>L}|cV<O~0F25!{+vwCwv3#r3TO+OuE<tl_6yi*}0aLMe3-9oX<(aafEM#hn
zt;2&Z%0cRSYZ3meItO$Fpq9qxF^pPv;~FgbY)1I+<meN&V2vj9zwIZdl-Mc>77|wc
zPfv5qzlBz1z&rxg<|j6!rIhFwRi{3qp<+A^x}5=q85z(Q)4ibl(No3OgMT|Z9)_=#
znF}s^5A5M7iiWV<4T!8Y1X&QrzV191ivASKZ)+JY)8_^)TI5#>z&SM~qp_$KL!-|!
zVnpS~*lA?)5B}g~l(E<Dv!yd@v!n>8q<$`Uszru2(!Nby0??i=j77nyoy*tH5i&1q
zFYOszq}roA7-<-L%Gro|+9FXikH5%)EyPzq=6fd^lpKOvDe!R9V2YbYM|1bzMISo-
zP%Wf>M=YmVnjC+M0HHI6-RHJne2(f)bE*F*l-xuT;Lp}r;WID8-{0LiJG`EL6r$v?
z(Q5#ubXIc}CjkaG=LjC`x((TEY*gA6ADzFIVdRNF6Af1Sn^43CxLPNG4NshJa)OKp
z3;Exu9bjQ|R-=shGVs}N7M};!fW9g4rwg{AE<^Ec@1%o3qNln<{KW&xcPLgGEdo+l
z`gfI6hAPkA0Qdpt@Y3`8aJ@DN)K!y!fT{RTSif4GeyT2dY<nrtgywjoUQEsW{!=ne
z&S~YW-Ep-FaX(2Td%BG0Z#~`k^b4%+c0Bhg%<l=R?!0G<yd^g$KvhU2uCiOtYTQa1
zb8wtE!c!wcDC<x2-DGd@{NwRSs`x%FlFw2&dR&Hs`e4F6;Jrf;jtm2`u2X}MM_28=
zhl(a`2^uTv5>0dX&D6(>x(KX~gIgS_W&z+{K?kC)^KA4CbwL+zONsb<Mg9N^VFWtB
z+4y^hm8Gik4QB?E>vJhf3j>pv^=S3Sn&6*<b1MuOzT1=Tf?r^JEHlXeFi{ea?S-Bm
z$|hN+i43L%#DQQ$0Gf|}=PhBFDkl-Tu0a~={zM12E~J|K^EV7dgYd^0dfnpB&Mq5B
znsFt#RF~J;@b}Lh@X#Bpe+^m{BSdEFWgsXKK$`evrIoRyUb$IOmFZFIQl4Tqiv;o0
zpVPuVK%WFT4)gHv;i(Ye6Rx>DkI4r$aifGCQT)(+LFvtead5tS$Qt*`2`t~+Ms?Jo
zpk#CL^sPc0_WEy&*uUVX5ELT@h;Dv_bQAN*>$Br&8cG9sjKV7<^ha*l6h3mH<GvW-
z5WTT)QJ@JC%mwG=qV4r*02VlCb!O!4W!6zG2uI`9)nrV+dshid{`+rWwFsh&Dr1Z~
zV9UXr0#~{(caaN?Zhib!jr}v8En)^Q(+~osRYfz)rlWwHLIKCoEemJS0dQfKBcI9W
zKvL%BPn6wTj5T)#hM&pdrs1^Cp=|D8e?lmrz^VSD);b*|q}iR`<h+1v2YFq8dT>Al
zee^1ge?67e(&o398sQX7ukDSA(_LWC(ja|QeGkfYk4)d1!QEEF3nDpFo(L4ZBnd(0
zBdgUCX4q51K>V)MU_h#Ud4y{+G$mh7N4>_hO$yKPBlCwiYOO7;M)Fkzm?eQU;Vcim
zu%aEJBhG@T2-bIlyMdceoMTau;jrflAV<*J@^*8+-Fpd{e0AoSW|zTM&hYVm`JD%i
z9O7TtMmmK9_w)2L(k*MjnigCMB3&wCMKe<fua6+}*%EoxU79=twLIEzLSIx4yy?sc
zvK530)A^+WRKomz!=8>W(t<fOeaRIfFe-7_ADA{X3h?c!xQnCeuq1vv8IKTYcGWF`
zY@C@id~dXR`N1@oq$mRv1u{n~b85x4+H-C#YcKXFC7Hd8W;|4aqTN(~7J&fkZ&AZE
zVDj0O)GseqFmk2`i^>5A006E9|9=!4po8Rs(lGy<cOpoVUyh<1lTD3x;=*(Gs;=VB
zPeBNowR<r^q#v#y_!hbj)QG@XVPu-!!(Q={n>nz|bcGFt_lp8_9z{1q6{l2cAO--M
z(JP07@%{1PY*&b7F%PV+&#y367|5KZnxd88%1rGxt?N$FgrLpVYM(+WmgN}?M)^7I
zdQtygmxW{Pp~2&=;Cayf<?*GdSvcfd$_bCGvX7-VWFMS0mwQW@(cR=Rf8s=`da@kO
zKX4EvEmIUAe6Tern&%E2;uq8@B<C`A^3uA@Ktt8H^nyFI;su0q-=_mu#`-`87xqvN
z+|m@%wizCJ7aU%qP&b?ybNaX8yRB#0-;-!Zwv@X9Fj3etP$0!5f$+`-38BCTEGihB
zzut4LA}a#VzkR-i0N2;;NE`KWsaoSTE{Sa5*07~_Iurvkr)Z?CHv0A4;lQSNikk5f
zv^ZApIHySD$Na}@kW>EqyPyxZl7C4}Xw1Tv1^o{lHb5cqN}#<bzqmZO-Jpc7)2CoZ
z0l@pxqqLjGf?VE<sG(~K|8VCFAOMt!_miq^6gM5ri$@T5YM15S9_ji^djIc-|7lMc
zs4H9OyvzF)Ja-?%zeCQzk=!`$r!<ZcWcEa*=^!9Jl)ChMJb4_s%`t8Vc?h}fxW*i&
z(B-y|Oc{KnvvO5yIejsi+VeK;G<<kA_5Y_`g9;?sT8G|wnrPsp_IPl80qh24oT~|m
zzchUCn5?d(+iSjG5g|qpXE5H^Ab+)kXn9fELHU}e==3)#`9B8yqf>@TNJ?l{Q&IYV
zUtm-Cop+RFm0Q{v>9_l|=FjB^&Kmsx??(j(2N3{oaGSKw4fmOTU~&1^J_mbaZIl#J
zt3sZk=^wR(XXgbA5D?Uhg3Z3v;pLNGSj+f-wMKcUq4mXx3p0(}8Plg7;b}>ScL78H
z^O2umZodl(0`tpSs;irH=2P|ae>`3<B6z&WCC_PHu`&YZ4rHTl<s%+$`XbflEz?2K
zpI)DA*L=U^Ro9NN;@VZR=qIcqCKV3*!T(TeRPfcmkmoDld(Etu*<3Fx)OR=wyciDl
z5y;)wrFqCNu<2<OMJ;Lk?-Fn??>bp&{QcuNh_@z_6R<OCYU~a1=n7GxF(7tT$wTa&
zTkSuv^JyGkzw#GAk7eOv?eCoCKD<%$^v&W4Y#1ltwfdM@zjn|5?q~8zk9R$i(R>KX
zPjX^0_2ksWBj)yXbVh6#XDX@0pau8l%goGfb6R4yB~(?GhNl7N#{ZAtB@U1w(CzdE
z>C!}ur)#X=M#|bbl0^Gi8kiP}Pa}E!TfEvJwok&O))zmlf0ZUsG%n+}=8aTaUHH{U
zuOddUg9D)B6_iq0a)U2O&gHy5st!f(ZgO+}6;GAcveQ72^YH8DI#)`m?|q;#&4q7H
z`Xte8@_+6r%#Q&B1SF2S#U5;={H>ERZN5ocNg#ACa8!Sr6z<jtE5dMcbDbiqBbkom
z=i10=_s&(iApFl;gn^N{=@WRuW@Zs$0@Wu7$yCA2u;%7ZxwJHNR2G(wc6N?XvGP^q
zh_OCn;~$-OGfeib4||M%$P#>YTDAjNsp60Jjcq{}G5n{Tp!Aypv~^N;h_aEesY0Oa
z3Y3jMP?BwonyAX!)QlqD+nXT3cvPDg!qmXp=@NG1m_b)p%FkELK;L{EEN3rw#Rurr
zFOHVY4C$r(2S0Iq12M|xG{j*xi=T1EZpqIt1{X_Vd1htdzRwp0WZfI1&?}G{gO~hD
z9+;#eUKiJUL%6x9>pJ7}A}<r%kRo3eTP0YVT>mFqqz03q;C|(1{dfH`FGw3!UWm>Q
zo)v~4wx@qIu#{(Kd5~m3(Gk^?dA9IWRim9-&pvt9R#x#A#hp#iFt-xB{IfzD1mKPj
z^$om6?_QuY3UH|R&zmhy=KGj_ONI6I(QkI^X<q8)FoRU*xIBqKP9p<9!A5!Q|LN+z
z90*Zs-!#<9;m07M$mQSEMW`q*?g(ygE6Qx=pb8>pXBqmG==Yk}O~ix)W5Z$eyEcG`
z(SmhpA`#<@K^pGGMUT?xT-l1>9cj!il9be|dr$rJdNZ1h^BA?Q96a{+eqTU01^!oD
z^<pgz2X8uMHx|@<3cS>6#2-?iD(56BiQ8uO_6l7=3_iKq7AURKU0D{>`?yw_SYJez
zfxUH6HCh#R=<vz9V>xV_86W<_*fWY$!_e|)p26m~>JM34hpZMwB&{Jv%qjyD<M@C!
zz9cz0OHFp9r{8yG8QZ(K1<=s$9-dsh*olAUj=ATfbyFksQVe`K55K^@e{L2>lEu0H
z(egkcZ0G#vA2(6`vq?Z=!}f=qS9VvdoRJB%FM4_#9NzU9;yV`ykPteLcU~T%Tm*Or
zh5YXi_pJAjCaBqHMJAIn2qs^5czdX@=Gkj67g<5&thXh{M}rd8#u_-{LyLziVnI%r
zhTU`Aga6mnTSrCNe&53|4BY}EAYBp?O6SlrNT_rpE!|xbl2Q`VAt7DTE#2MSF?2J;
z@5blzUGG{i|FIT}>#lRoK6~$TU07o1DuY&*eR=$>h(Ekp7~qw%qtGeb%knD!o59(S
z-1E-me!};rBo=1Y)6Dk*C3!}FB^LEzJX_mK26e8DWzkK*rdw9;iVcG%{F-eKS^yIB
zs%@cm-;CXPmohFl;@&wktyn<4_tKX;yDG6gBlmY4(M0vJj^2#M&{XR0&B#q>isYT)
z!yq>UCJQrzY0uPBon&pT0$M-`*hYiwOe}KT))zTf?>2N|RK~p$=6y?ACkVdtS`b+K
zq)kfKI!*prPuWFaV|6?y=PXaM^Rq-S_D&3dY`xhE3r?=*_HzwWk*+b<<5_T*-?)xc
z1R@a}^EH%Z9^MjZMcQrK0;ZrX$HxfSQQo1@Fl_XZPV$X8vn1d|mh{&w_t)JMMax&)
z`^cMKtIZ$oOOjp^1s=4_ro>&$5i>eGTuiUpeUb@6VeGoSZD<fUS-xTZG7%waJv`*L
zb#F*KH;1)P)D*||eR!F-;1Nyf$7R^@CBBJ#Nzo{mHGiVo@m)6)aV>vReJU4g2mECI
z+r<&(<^d)YQcObxpPH~p8mlNQtf629PQ*U6OtTfz?#F&>Xjof+)vPG^*c((OeyDB@
zhgC$MOe;iw?{eV2c)draYAO6tqi_n{piV(q=D*sQ3g{`a6_w-P0!Y<gBR*heP7Xye
zm~exsoa@clUVnAbdufEDfN^*&_~l)2p(^#&$sdD(4`ZmPt$hC4^99m&@7p-an#oWw
zgh~eXk9tM??D%+%N^~=o%G#){=Y|7b(QB3QMBY1V5t3oE^=YpX`nn3eSxCLNb)fS&
zzj}5V|6ZIx+3Zk@^e;#l>oGy;tIBFb?-DG@Pxq;3vox%qA(|sZ8O)GcnfiWqJ8!nE
z5a)aK{lpMGfv`l%38x70NAy!yQ+o&2)hTk_KGlmWnHdKUnNCl11i9VXPP^^I|MLDe
z6rYpN-6h|X&{Vtq-o8;Ucb$GUQANG5i<1V>7Hi7`0PmX`@0~vRt8>YA8?#4*$n>Q|
z?%q$ktRLTDz_UTtr^ivpClX)9)f&C7cjlHmIWc3`@4f0Q7_ZLGZgzHi{Y#T6$QWPx
z&*L83IiUs`(bPI14{AJgBi8*{OHmaSG=A@x?{{%sTg(1)oZVpQSAI|98cI22gN?2-
zRg|9@_PYg#a%~Tm&uHr<q_fb4je|4k9Rx;Y^)MJ_Qu)+f6S4k#lN)zgDABZGqtBZ&
zl?l<NmWC}}ZeuNTf^V9OD;A`*m8L}WR8Ly90eC9woCF_G^4O=&NWYzQ-;#b?{sy$3
z?TEpXqUm0Dc|_i%q2TMBUmN=gVUPRp*P4vd0y>ee8RDzg>nrX#k1wb`B2@cT$S0k=
zfEPEudBKY5gsxDA6Bm<g6B(m|kaa=n`q|)ZbFFXT@f;a#VzxSCUwSvW1Xfa8>I<Ep
zb#Gp){&o`F`kpiYVbvOF)`z|9vVxpOX*C46$N@R}36$aSc~&bMsqi{Us(1Jem!vtL
zr3C1^s2%%pD<x^o%_*jon(;Z86j6xkI88<XJ67J@c9N_Eg~IH9dTfsE;|l?P0lvn&
zmBi?s&qnzJ>4YRe3I5zpU=IJqx9s~Zo=!$?pAifD@?rCUCGQ0=#xkG1W({<;8D&E=
zBFxttguY`UmEBU3RvtDFlEew$^$139%QLDnzgzIqweeDkjD5N)q;^>wdw!UW3-t5_
zgYeT+&Rp96p^zOB0J#9L<&kg{tw{=Uq&BmZgr+lHk4}eDU&hD~_BpSz%HGYUmW4p*
zrn8lj-BPavgHVsuS$j=kfcK5T_Fq~R7}9kL^9PGK=Ob;RK5K+RA#;9}g$|0_;sEji
z3$U?<AQ|QEP%|h{2TPs#vmMIdqGZ|2f&8M?1~!tl!O!=OC4)PccZZqG2aR?S3db%}
zFmDRWi+0=RAWl%Z{^uX7D-WJUN-&y1>@VSnT}+-1x-ynh=g%A5@_9YH(syi>tY0{f
z>z|OSQBDsg+eixj2YE+~K|pq5s=Ml<BO+eLMHLULe=K<+dN|n<Y0mG~TyfVkThZsA
zC&zO2i*VXD-aLrSb=c?fWvfHRgoFF~=!s#i^FEK>z>M9mGOWl#Qm#g+xdXL}FueMX
zCv*gvhv{^Ou|(#@0cVcG>diUD*nx@DmxR`ua$>y1GI_ER5}wX^gd{{59MfAh(`o$h
z{<MXPu$w>fPr6;gA!RC`k3H9ssz>+aJv?)tgI94uq|(ud<`v{dZ-A6kD@o1EVQT?^
z#hd1{+|1$ZXrWyzIr{R!P+0@LPgnf~Ny;|fP7F@noXUsXzZtPHFYBCiTk?@V8Gf$g
ze3sR8Pf^RnbUVmCY_^TcHc*GlCachOwt}BgYxUq8{0QH<mMUqoZ7_4zu06hvO&{LI
zh%`_C4@%Ypz=W}Ps6<qFqO#@*O4c0t66uMey+O=Ag(XQUUiJhaY#kQC(;~}vl}1g9
zQc&gEv|8AWWUycLg<lY*X_ePW{-XN}Ca>|-YqdB0(fAQ(-Y~qClhTAUqSfTHjWun9
zg#`7yH}T^Yj)aS`ftZC*$qxwVhlYi{MqsNvi8z5cYb%N~95>MNj9kD!WK=)L^c{Ln
z1Y<W9!Wv<-kYI3KmNR~zUeHbORQH9Hghb{uTbu8psijeBjrLw<a{twVE&NtGk}#k^
z9N+I(GG-+gmGNp8Mabh|bPk_(%3>9t4(S#ZJqbs*_tgVyl^T=G1|AE`WpDFd*0gzB
z5812?<-{bZ=ya#9@7W5P*m68#l67=^(u40zA$1ZJn3P0Fk54swTc|Q=3vT-7F+^_f
z$>8D~bLWDK)VK?`MH}4|HRIX*WDI^o9kv}B6s^2nO5nkMer<funW;wCqAQJ3xY^om
z96#!Jv#Z!PSBqsgAN)*3#Z6(}M4F)x()su;UBVPvxa?*>_98f>hXt$dhGc##eqx%<
zeQnr3<9I`Uy@ryhsB1XZWok<JGJ)DZvt??@d)CSSwxvac8+ZHaB<Q>m{+!-#?L#K^
zwa4TSGk<6+OPBO9v~>cu7y5~qnKXPbWC&<Mf&AsW3!vc`7}vddX8e>iByY03`sb)8
z8<}5U9!kaKHtMd|NatlwlO62mu9#*&?`i-AJUd_#vW6{@lTrOM!c(+x9-}oIIRb`F
z!osh7evcz75P-Z*r;K2~?QHa0{WaajN+>TK0)G4}o5f`|Km(D)fEY9^kUrSFvEnwt
z<59)pgdo#0D6C?1LEZ<w?;rch);XHM`r>3^Z#@;YAmO{%Ka(23Rq!J!Zw)pdT`lU}
zxjzUo4`W?GHpj~l5ykp#pwNf2zlA0x9_CxYt4JV$3O$m&30bfF7Qv&jq!?XYHf02i
z1|V|7yxkmJ>dxh2%A)ljv$4&$12G_NOx1R#3Vti<_>_m8!>gs!*c10(P$HIq&az$!
z@zqYZ_hPcz3E+htP{2B!N&cpQLFC)csaC@O6WiLvGsr}FV99OJm&4NE@-ml@*zSNc
zem!x6Diz+ALr~c*bBq33&}Sx|9{Q&J;{Tc?$5ezTLza$@d%mg7Gdv3kcLxSXt7Jex
zxLFcZ?rj$8B?I>i!6%!D=E9pQ7zgvUV?P>lB-?x-Ka$TOA5Ap=EbFg;{;KJYNdIQ~
zs2J<O^d|T7uK9soWBOYUqBZoSPvM-`JNfFF-==)WzFPNb|3(emcQK84yFEAdzn*b`
z(N`5avc-wdYbS=XS{P7pXvthQjfmoRKaa@D1lZz){xtkc>jPg-*_~F1SS`N!bs!*^
z_BgVI^fun=mOvD@vEs2x8@|D(w~2WbNlNE31kr&DE~gE0+X7RpJi)9l1mDoORDDN3
z*@*iRu@@gdNj9`iMvA&m9cF`5{dP*)6{q46P}o%Io_}peDSK>j+LjEJ>aiYR1mAeZ
z&J<s<pApc|FV1FZl;dmb#OD6l43j4gH^JZf|L%YmQc>v-D7<HBWM38=z&+%(E;sW7
zlbmAG7#)2cpXHe5mqW-n7+S8?vo`kj#Mxii`KVw%<DK%&N$2dBOo`3>h-v|_990Ko
z;1k?#an?35{Z!spJ#pB`R|bw@UEv+M@k1|QeX8aJg;-cHTlr?Ud|Zz&S|p{%9UMDh
zU{2g=e^8mOp(}RoP}to6V#yA4Q4n9v?$iIO3%42zQ@Q><CDEavw^`KVk5%eSZ4_N=
z!tjuqz1|Q*Xd&4ZSw-UdT%T3p-bC^7YMed5#tSpzU|*8s9jp@(?{1P1A0A+{HSFYC
zR^Tz0s`9Q0Y?OR+ilXhvfS_Z3JdKaYFDoobs4Sn3(AHg?uoub8#duBU^e5=*GJQhh
zhUCki8;CcNiBeE_k7mvCjuN}Kf|-}PdTs$O?#C~2ag|-t8SU&5Wc`TZghMaLOa8p<
z5K!WK?p%#h!fy4?_aT{K@h>&N=3*t9-2I=(djI-39f#Fvw+#K5M=dd=zRH0D6IG@8
zc9wjBWRdzd9t=Xq)IYq=&GHOn9Mih_v2X9Tv8Ly)dD{C!gn4??7eyAnA-`&PTy7^s
zF~h#@TKHZjmv5Bva((D>!_n2lAf;U?kw8sE*kr=&tA+Ic+T}71zbyN>t>i(HoNK?#
z@t{lGW7k6)S^~yMG~hfugJ%&f%R;rwexK$))!Vxb*f*?IubwzCNJ@%{<KJK7nc!&Z
zF1||tQxI$S^==`Bs+rQ~eyoonwu_0?#_}akMr<2<>JU4A12@?o@>Jj;+Yp;3y}o4G
zVI+&?<9hlmKQ6267z3IgKg%}2VRggWTn`I+qY)F!UtE=Yo>&Blh4p-Ye$M_M`Jw*A
zybp!Mz+fr(e|AVf0<R^8!xgjV5D=@Ng<oRSK+eXuZrltW$WF$tVOJz%t6k2JH9UHw
zgE$s5<ewO_3OL)m<?ycC6M3wp4-m{xFFXOT*~BH6LKW}{grVa%-Zzn|sdpNiMg9+X
z;&TA>(#_(Z4ACQj`n~x|{w~%XTmAPOc29PQG!22Q(0=8xi{AS?ClH9`J?nUPz>W9C
zT{yb_1p_=4i*-#CVyEiEQ(2&y$X~PAQ>rKJE&5h~g@c<=gUp>t$5G57;@r~4iuXoN
zvM|~WlYMk%Vs6i&my@KO@=KiG!cC+Pw7<n=luAUbM_#Q<#va;AX0oU4H=63P-*(4b
zLiv9m5gho4LP=s^gl8GF`;1iZ!13EW`L|UjpqwcF8P!lqI`o^(saMe;jt1!8W)YSC
zhX6Y2-Az(ev~pDbz;q>aGs}ovj#p}bDk!PN(CR^kVpq$kKCex#uST(DJ+EmmH83;~
zNe$(<|Iwp5^vA98y`25eao%s-rt|5koXt0D7fX?-nVP}-l43Pn^aRU9P5DvT8YloL
zMm*4Jksnz_@fOYJ^!!J;I5L&`@^6TpO4*s&huPhM(4c`k_a)L&N3Hioj#zRO34s5*
zFiDdOT7zQ&Q6oMs=FS8=)v_dy#Bkc?Z55w~I~|{nXh@2S<1Ois!ZQMUmk6XfS8|J0
zRuoXL^wfy+#;vTZEcbdimWW)}OSGYApRwMg0`0#qnxh|35jeSGQa@8T8r_47RMBTj
z^k289XOnZjBPB|v(qD_bQ!S4V8HGNF{f66=k-WiS*VSwNV*G}ZB~{)BMc&w#tu5u*
z$nawHAkeyUOi^#gEPxJY%sAh5o`QcJ5qfT`KQMFA;P3E*-0fpHV+nbLd1>d#ZY16L
z8}(673A$^2a+wj6fqo^dPZ=A1bg2<;nGxAg$q#KMF{Hg~6xJ5_`nR2xO3-$9@NvPe
zs6w^)O62sTKv>c0wXBva>eg^66LsG_@ed1(KV7!rxI&^-UER|Y=2(;~N6Q-XA7sVS
zGPE~~@y_H(Nq;?!e?|XgLi}Kk-V6CkjsA{oTLIeucV6U%Nmy?#^7|ky0&eO~lX%6L
zkoUygEgB#TJqT0J{vM7p$`grg);0t*SGt*EnDiv(cD7^1)^7|`D7;!yAFCFG*$?gc
z!uq6Lelq;gp8GkSX_RCfcZ3KoR7>iBTnWb1@$*5-F|un~9q7^)ol8=LY^Bn;Zzqb<
zTu^}$Qhj%RIyp26L9_as`zRV$mI&x+KJD-4c1mYDr7<N)ZmKyZ<_%er2^bSkoTz%_
zhI2A=LVgK(Y|lH8*keFmTHtgv5q$r>lSwJ#(0Y;BfYUMM&~y~k@ebfG8qVh)@Mjbb
zQ?wToH!@c6k&te%I_#|;syR5N)zekf^YXw8Rg5(tR?tnIuIO7f`&Fz|mg8s#<D9zA
z3jsuymr<AU3{+>jt3Q*4(75S9Q&Ny~tbU>ODQ+#66zpDw`($yz@g%EP675zRyd>B(
z*p<X>;UvyS@e542mf?kokER@o%>s;INS`}?C{s}j3@zC+@)K<x8N4<W8;c}sqrd)+
zU*CcbxQg$+nCnHz9V2}Q1f|Z0c9(W0lF_uEgR)Gg1}9}rr#v;-Y~aLVHDfV-(o2(E
zTqBET^J*p$L6VfI-lFdC@)KEcUR@==$;kpN(=lZ7;xzucmKqitsbH=`V^)OnrRnj`
zlVv#>oGz~tK7Mrwnw>v-wcee*h?;HBgY(}E#9q7RHN7@A?sws5PAx7UVupTvoEbfC
zUYq>ZjdiK&Om`o}lg!Vs;Ij0q$E<{cl}(G9Ne<tIb>X2_I5~ZPW0iXKsUNo6Zdr`!
zO<&(Lvk*c2c@?_TWcUy~;g5DMfH?Y=^(_4A7F_K0&mE8V<P!6$liq5gaX&ieNmgjt
zxSRqL9lYN_+C5@WojRXt+^N5mTCw~+^KRw9jheMX;;Lvh-4YYUy@KGXyYc}st7TF>
zzcr#(P+3Irw}E|{D*eT4*z}p|MYfnryt$KC&Jp3RVD}!wdjcBJGtijn^BBHF%Lsas
z0!7LaZHH4Vgcb1?@vpect%erFL!R!t$9&4ova0|WaL}?E!6LJ0D`nYuyr9-%qD@FK
z&08HjQ2S&-MP=br8~}%lO_p1^D-`d@tz!0f)5!$7p0;=4J4W*k?-EyRk0XyOi7~yT
zTsyw#x$gp#?Zgl0u#8Nr)SVpg#}W^QVoLAJ6m=i`8UGCOaW}l&!1Hm@K&GD7vlg_3
zKt|%PwiS}z2z8)N2O}@09yQkc%p^S~^Rx|iMyr`gXt%sH(3V_vjiRC}%^?CILZR|a
z(%4XlH+IapqZta~u7}j^5~txSfO9VT>U&NSFS4%6DNB|J?o~LEr<rBi8l8^(bwsr5
zkymqbtXJXgK{K{5VbZ`FxWaq(qLkvMgr$j<{E8EVdPXY6lJ>07$Sv~9lrbzhv7r)4
z?%2ho1f@ucGW})i*5#GHnonG}eSI{39oDk|OMs*0#XfmHxG5KmJd<^m7m<%n?&$A(
zp8EAD#TrXSC#2Pwkt!~>&6|QE!Rwi`ZCj~#|0~(O?S$rYO`We%5Ix?jZ}C_ZcPsL}
zy>Wk%a!>bi8B7@iCCbtp$U0KS;o=q6XPx0SE&Q>J9f;^Wb9<yolTj<;^WH|E^^Z#*
zQwhSY-kez!b}!f24g1B?N7Xr_Ex%?O;$1l=o*o)vD=KtycDBXBJq5fg%;$vBGX^KH
z>wpspe}5aVFWal<DPPJt)@5LGLp~x3vhb}<7EtTh2M;UlzYULxT!$?zb6RpNWMuw#
z3k#|ABp!oJA3XzVhH*=W(=hDrG?^_X<TDWup&ZtP_k0nuP~E%p4rB>K!@JJ=JZNa{
zceM4lLWc8$sHbNfCfS+Z$~FSPdkQql*@fljI6e8%e*(AnDV_FTO#JDZGtS%TkLO<e
z75_Y*EhVzFkoGSw5skhqh^h0-<>dp$Xw*(Qw?KO;J!(TJp|5C4abQs!4U!5EUq=M8
zyQ5yh!{~==L8Xs9MCzc9uixyC2!J^Fnvk6t42i^x5~+l$F(yzg<6u@&)Mb$4-cCGz
z*H&-gev1^t8B%mbs08xVUPSG>zRnzjDj=dgHzmPsa;8$j!F`nv-Po(EZ(<Cy@VR~~
z7%SLSoSogCNlCX6jB|1Rj2Yo7mGyN%c-u{T^^<{6Kcrg=2V>aD)Mq#(CW-!Wrn#o5
zAjBoE>%>-MRSc?_3BrqW)ps+sXYGJx)oZRUjO^id14hltusw?sch|GDyD|6d+4z<_
zdRiGiio?=}o5pw4EW(Q2x%j|wUCn9%#W_dhtNe3}plS%@7AqD8yVaqcWipYe_%x7R
zN-_HtR;5Y55`>M_G7-|OjB`rBXtz^{tLieXGlmqx03|(tMnamxP+w;+RXaS1UXwfY
zr_!#&aIYltBGQJ<SkaovAn?y%yUCna4_gnLvf0e3d?&2S26G1ftx&y*&cSw{-Vn**
z#XI&YTDeYAE`iDxq&nt!P3!X`id{TMOBBSPF0$h}F5gMAl|IpoG=MiYHb%UuKgX^u
zrDn<N-227BKQS&gohT~x=}d6dgdhhR(dS>^Iw@LTaz|P&-mDbDjfs3`Hp_W&)8@-)
z87nKK$7kl|hFUh->Z2m1PFf4$!`{bUd;IUvXl{r6@8>fK6L_auE;oOVV^YrB!^YFc
z9ggQ*zq71h7n+`+7@n*<90bgZ2M3~c&w0;TD0A(gzf@Klsz0g`p2s2Hl8y7@d;Uhi
zqr6}(h-m)uu2GISxwN8M!_mqy%v!nT6m%IktdQ1lmD7aEzBRe`c#FIqugt|mRr&ME
zat?Dn>_?QVj`@w7i$Y+%MmL>sUhb)@CV%Hx)YrZC@&R~&kufpfN8)`NKy9kH@;Ay$
zWCVa$WV5RgX2qu!TMMt69m_9pUEpX<YZJ=!*QPe9tm`=Da$r^{0<9=EnyoQs^U%Qb
zpr1~WrAeM#lDb6Y^$`o8&J7-Jw<T%K&qjY`2s&(Bd@UiNJ=?o^a>vo{&HOoC=_6j+
zw;UG=lII=q^r)wQ+sT&_gx+!fEX^Q)n$P}ae_De?%wDAJK{Y6yYx8IPJm7p4$?*OM
zQkLfryHyGbYCovjySdR6t)edjOeGdV&Lxf21qzGz2`#<|U9)8IE88T*n+J#cn`<f2
zTI04G@9T6c@WWGG4$c!H*l3wejB*8|^r{^1BM+oeJnG+*;;-$m9&WhO6lWc71oqud
zsp^)_=InP#xz>FrCEOuj+28u8o%_*$(}?@kODX8k5DJATU5CZGR%M>Ufv&FC+J=^1
zdhh0U^LZzb;*tQh-9v!)eI5QgReL%!i+up@Uk;E1W4ps~09+&RC@n{xo%Is!qG$}m
zt299EK;DS+T^HwAzz6zCJhyZTQU`%FKS}CqPF3X$!aM%K3Tc$9@F`=kbXcp+aByQz
zxcs*vCqGDcgXA>+GIu@g94)9?0>aD~yYBBeXEm=8G&xwMJ2~bI)7B97W}Duah@##*
zuB#BZd(mJ57~qHuIY}(W3ARUGU(F9*JeRMIR#D0eQmkp7d9B6A5v0Yg2`;(W6i0M<
zKYxfH)vWkV)j5*!qM8DL1|D0wQLu?^D3A|Bnx<!-!q`Rs;O}TxH6~?D8=^I<viYRD
z+^QqMo+e6Wh|*Ek83rhz2iu|UgG<^Nu*D<ZGx#3ic_svhZs^bo$e>ELCZWGeTinrS
zU*5q3PXD$Z#LTF}_bVZIF}A$C-iMC=VFAsDf{nSXDv*KKS#N&L1H8<b<s`Sno8{mL
z0b7RnZfG#fn#=J<Zq4aD8F%DHY<;w%Q&o#UAhEQ19m~lRS>EIQL4s+M@BbCyXH?kG
zzvdYsq0vtTTfaa34DAttt!C-tMqGWf`X)m0`E5DxrHbbEuLC31Yn(P0bTzgn!%Mp-
z4@R{l@O(L=JGo;CXqInQ)q`Fa`)@(P@9Ax)zaknyd1YjB8p76}&J)&7C9gZGIIt-d
z_8OhA%TKifT~oAOp-+bz(aU_TzJvfexA20LrvH<lHc6sz-^xnL*<LTDzIluS_A{ku
z1TqkGVH@I6+pkS51BHA?wz5iS?PKxRXl!}4n&!-Dp*UIL_)bzhXB%xrP*R!D(#t;P
zYerbch+i>YRBY^ckWB2e5mjrd!EsAa<RXuwQdtXG*EjsQgKwCa3V`r}r!pp%fWG1(
zIq}md2Mv|{pHZXQ>(T6T>&Y@9Qdx3dMl@@_c-RV|I6d>CZbSr*O}3N{$SVuI4Dr>$
z<I^jdGNG;x>r~&RIbQTT!ZV0&HVoJ{OGldlA@06?3EN)f_7N8kem#)7^$yG`mXWWm
z;`7J?SJ3**O6t$)=>sg?BYvBPpO)=KqaOzTH4KbmYBh#&Z6D%M&CZg$-+EceI%_sP
zv+cp_^qv|TLgQSf?b%~0$^-tK1^h&yqNv{yP4HCuyD?w(9oqBk`Ln7P9_r>wX=(V_
z41PLVL_B(aAedXjAURDBdQL^f$e1tyU3=@Ux$=w)j9*3y>K^N33GF8%W47Rm*yZO|
zS+;C;HJBTdZ(y;QG%+TsPD0jLl{{afq+=;QW*hxcFXwAy>Vp2!2Vh?+Dz}f~U-v2$
zI-_n`t0aGI0?+l8)~y3`#<0+LikGGj#&UDrI!V=%tu)~H2W_KhJ2Sj-bZz|I&f`UD
z)@y5g3Sic+Oa=6jpM+rTz~!PNU_>7NHq^>Vp38=YN@nG|&yf(5nxa!Yb(#K0@mI~F
z0ol<-gku?A9#82x?U13k^93MJb?rDlrW6C0Q3LMKvOna~!bJ>`5*vEtXZ}&ge|i$y
z;InN81{e`oJVG<e13wf-9s)GHH8TfU<_2D&z9}i%&V#{5ImwlV=^(K%!1|Wa4?gxP
zcWetbT1B8^3FI<cUIKc|sv1G)J~b#I-S>5$Lb4KwO}EGl*=c#aU5oT^b%27Dl&&c2
z-$14>E25{`ilBt@+-%G7B27Uy5{-T~P*s1G<`tffb{eA0?ZlYP0bRYe3Fx}H^(ttm
zf{sOsZ>P2SX_ZpAY#}wMNv!p`ai07u#1j(+dZy+;J=z*{8(6A8Xr}RnjRDcqs4E04
z2|gzGJHjvkV$&#ymIXphI9KBavbVRtoVoVqeJ_VqbJIBr0(g&|51{L`)~mo{n*VM`
z7jRNmO$*BH(}08(TUCwo27!g1^RNKU2=OfZr6J<(z;YuW-v3*t3VgiidxQq8gVrn;
z;8djuh6MtTt<hz*XEmGPuP4knq6!DN9#%PoW!&pDyzkJ8kMI0151wdjkCwkxA~gDL
zplVh@D=0djXVjXI5r!^xW1zJH4lMO|H0#J9gMA8Go&p?rBIi_yo{TFEh|Bm{pd-A4
z21#XEAS;TX_4LXTGop6;EOQ&bcg@Hv^eT!`6$7-19JCb=#D8l>$X0v|@W+8A18c&Y
zTdD+T^vyxlY=ZPY<XWVWo83sn%_<pa3sf)pC3lPN4VOFpo&}=Sjfmjy6oR#>@zH?o
zbrz|Zj}J$hB_!j3WC{xd?(qD?*3M_M`KRH6PL8G>TvM<(2++aC(O<24`5qyAiUzv_
z-{WeAf3p}66w9^4RZyA{9nd9}pcRnjdF6{uT>NQ{8;?<NupLeH212RBo?a0n$SVp#
z6T#bC3hS@S*ZfvN3HTw9hY+9KX!iDR7&_*U{xWVU(uG0bjoVesH2OG*p17U}M@XLR
z!MFcgPwHvC`sFH38htiIkLXk$3jvoyZ4azZW%su0l8D1{%7ZY!#T%HVacteykGZG8
z=yfnK^HzjRWf*w;w@ni5A;oZA?$<5>Vl4WLm{@M?q^@nzd4~-%%?}a1{vRZs!X*fy
zi&LCfUl<b-6X)y@X-=&Jxb7<V0p%XQ%oKD<CupUL9*jHl`_qBM%hVaRz^@_Rot9tB
z4Ic%RJG_T~|JmM-nvw=yk}rY@Viz6N*b860g~ozEf%0Sm%66I~Db68~bSnLK3STtm
zG(~4@?>Z9pC#Vq+kQHSm#guUy#xUSuG)+2yI@JUv_Tt6*zB5FKDf)#PfVKm~$wYaE
zFmRDCDtTwk$Dt5UsuTKyje!SWooFelG_6?8Hq}&SL;2zZ*LQ)yD-)z!K{<H@VzlG%
zB_UN!eS5qKPXeK@y;*)qDINy{V-3Yn<Mq}p?QTKt)>L!5|CB8FmIe_>3G3Nm-B>BY
zJk99?x3a2zkj#Q+`KM>!{8;5q;|qqVIL|dc!?XE5Wtm+5dWAv=Au=$hEc0iRXHnw)
zPd)ace<Rv3-&UgNG+27JxJK<aIz+URVp{8+xDAjcDsNK!h!v=7!^o*g^WvoIM`iM*
zDWMBooa@QTsVcLw7lNMIUqTWM+utpiNPgK16{b@b1M>m3o&On7hrJ?wh5Hp6lt62=
zKV!xY_xJi#{b_777iirJ8l$~jt5XhMQ5k2vqy#)f0R1H$z}UdZuOxbdT7%YO8QhjC
z6RxD}pz`#8QX!`HZ}NUse_5<{AodoF`Y<-FF?t)~D~y*YN=<FlTlDL}y;rohGrDNw
z-AFvz3pybGQjrRXfnhNay{J@YAibrvR+`RJf}~a~@EAt|3kj^>T1>$5ib$)O8iI%l
zH3Ra1qWCm?hgabES*`oFY=6yDy)m*7_MSR78if@>jgFB;wU;LY3cOTxQ~Qdlf=uh_
zkcGPlkGH1|a$jEcKNo&0*&2i<`R%$^=Pf_A{oL_RkG?1_d)@EYq957fPLi#BPqpA?
zM1w}ZAAFkxs}iKA67gjGIFHI#Q|Tgx&(}ZlcLrtIcSxD5T!J1OrXLcTqsm?Wg*#C4
zO-I;XNb4rU%Klyt%1vGQ2{n|5t-~K1$JP+%IDJmZ?{RECiOBNiSS<7`XiiBOcsb<Y
z_tCKjO7?R51;Zxsag_2bY@$x(zp9HgbEt!WOs0<ON2Qn34>VFs*#r_u02l>j`!{(K
zDPavp8RbyFQC0*CJcW~k^u$*HEci9E31WN8mIWqH&%RtGPVUqvx~B0Yg6<T(PLrY6
zcP>s+X{$zjgT>2L!>RoIX`hM=Q}hh`;lHzfZhZV4KD;u|*EjnBG92pnm_?$0f5l$*
zpk)K~_#y!W;CJ6T`;R%+qd!!6CZ@T+aLEIDo3y+fW{>Q%9|FIsWWes>2tClihOpS!
z<ign4gt1N{)_b8JB?=X3>|?S~ML(Wp8q$n7Jt0cKzWU6s9|(aw5xWLe(3<^psg28f
z()Q<qRh4-VYCd&J#7R6L+r)xf6Kmw#bOl_JiuD@R#Y`G`+z8CarXao>zql8WlaTOt
zs6lir9%!uC^V3hh{(VJ+;^h+bnL1dN2Ytrzs*qQ`SC&6P19?%<bN|)o^y8QRws*J(
zx5i{*{J7bl*PJ1i2zqs?^%!m*B-vVx7L`&}440~;2ib$)srG%y6rdS#cxp9XYLWg#
z(`EyC$vR&$(NkR^_@UQeE^NpS_zi-MSFn6JFox>vwt*Hd*mn}o3?%y3@c7XQ)xvOo
z^>JUs7M_!6r0U>dMso=TuDoeULo)$zk!hIc@y5p+YXScs*a#(S_R<aHrRsbsOP_IW
z=W|%+{4EeuBRrOX3=JAo>x_Kn$CLPB@YCo}%CCdnL?8(IpZPvIBo;JKh&Ubll%V|Z
z)_DDz)$1=x{Mmv-C{Mp`gfu|<KY5!N2kE5`LVP#Tql&78K9NSFoznr|xUg(O7Xv64
x*tg1@l<|wyf1U>5lLMYR<p1}JFFF3TPxO~`cL&|!0R-SjR!Tv#L|p&t{{yq6%t8PF

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/architecture-read-only.png b/assets/documentation/1.27.0-rc1/images/architecture-read-only.png
new file mode 100644
index 0000000000000000000000000000000000000000..85a11f18568e2790015313fba2844a42c0c72a93
GIT binary patch
literal 95360
zcmZ^L1z6P0w?Dfquz=Dbin4TfBe5vmA>GoF5&|N!D+Wq;3nHb`NT;IGUDBvDC`bwj
z{%3c6-+S-x-oMWSth+PwJ#*r7&YW{*pX%wTo+r6Tf`^B9UR_Pe01uA<f`<pSh7*E!
zU<B=L;19&tK=m44X+Pr{_)n~(sk)Q4HXaXn4aXyd5aQuuhTuWLFRH(<!3vOzcm&w@
z@$ifxm;QZi4dME)@lRawV1LIrfxno4$>0af{`(g{2l8Jl=0N`$O#sQk|K~N-8Z&Ls
zvHuhJL+q_)=8K0%Plfq`IA;%o?LbLgZ<zX-YHP{ZdwB@hIe6W46bSV2#>~Q#4U_>d
zJskb)5P=@<p1v}HaxB;pGT=4lZ9x_Uc8H&w9E+*89^$%}k0U}tKuAD{MV<tKK*;(y
zILR0&sr;P|{wK%c;^*frBPbXU5FijBD&XbgEGR53EiEV{A}Aul4@U6&26_6~1@e3P
zvf>u`XB{O+Uwa={Z$DQrPXuONyPIDAesU}<m<Rp)4@ak;tJ8ly$<z1mw!j7jF`ozu
z3kV7RyEd3Ai+NYZz|q&s-5;~Ok*BMlyofAz@PEGjUr)o$()Dq51oUF2$qWCT^55V4
z&+*s2JiL7zeSI<G#s7}~@9+KRcs&;{KQF**A6I*IPd`T=F!}G({vq)HKjQCNvVs_P
z{WtdEWP^Pd2uGeoR`6dz%ae?ftaIVvA@S6e6mJAVHfM>O7>&|?ofbB1#V^fm5<8GH
zvu!?rUqh<1@Pv!9axLI}m3aAwQdx1^{{p>}rIR87y`_rs$A|ueN*x66*dD+pVUxt@
zhscAFf!T(+m6^e;_0t>k>p#rze=MvY8!Obw+LcR^nbpmDO=Wit4+5h={^u{WDXCON
z>E)#B|M5Z2Z76rWWx+GnD!&AxHMhDJnf;I_4te>vKiX=-*=``%o4<DJl$?@<c#KT=
zg#2l`r)@oc6xl*0M+wvN+cgaOpN~SP6ZFSPoZrtXR(u?k-eGzE;BsLo(O4!EFAECU
z3_DnF9Z?nERX*PGd-0fXD`h&b(fSgpTZ=k5)F+vvIGAHe<1wDIYy43Es0bN!FXgt2
z@;ZeF<ha+RmMK3byUkI=V%R5+kh*`YJ1WwK;1wmbg8p-^;ya6cUC&sr&iKz02h}7T
zyzox5^t{c9QPE>)X8zOrmkh$VNC$0H>i4;VcVMfc2@}hsb!N~Nm(O12p@Ul*=g%%r
z7T+wlf>FRt+mZ^!I?B39&Xdd)*uA@;+Xcr^_Nh_GNHZMCGBC`R=kdxZ6}BqaK6){c
z0BugND(aSGF9+ixwk&<uns`q+p|>cJ@5D^AL7A|YJZ?PMSiR7kElbC3Mu<V7wTke!
zat;Hulx%BbV<VwOt88!Yp!0d@?C|u2n+c7H_28I7;URg`nCGL_{AXMG;Z<To)0en~
zp%PGH8BP0k#fvaPK4hr0?KKf3;w^M9?S;oh5;|sdk3&K9pGKW;0fk09{vEM83`4>i
zDt^(4(eEx_{O$H8F>`<dnS+MPHP2T14(Loa*hjd})|=h=Au(|7l~BD;Of*rGsUWqr
zIkOR)!ZT-z*ebEO83t~@9hj76LX$+{CuZuL)^lcIdW^7c(n06s+Aq|wbq?=(%iNcL
zO2>a|s_gZuwc@K>=K7{`h3mVAENPzScjPBHjBjwP*<{?yjCVt#>^l>;DaVOtNb)wV
z49~WOqkPQb*FXY@v?g^|R_ry_1=<C^D3h=t*g6|B)Qr=#QaPsr>@RBH$&HxmS7KzW
zalN(bpDd%-<4&XViTDLwMRxWdZhzfRXt)t#_84hNU^$W0H!a!S?a$jCL*}<cwiZX;
zRb44gM)p(s=Ivw-vJ+N+WR4o5%h~mrkSPjD0hCLTE1n4Yf+lC+oMV+<Q4#Sy^MduI
z*4Bxe1AKgUgWVdnvZV|^MP9J@MY%<ZM0|x_s`ZRbG3HMyeO_uHZuUBbs8zc~KrrQ4
zNTVm03AV_mop>PG{S4U$RhQK?6s6;3(bGVkRVI@3P=x2>g*fqLBx#6WTQHE;FkcLi
zfqGy2vdj^k#b?-|JMrXR9;w1tIVk*tQjXvVr(ju-y0J%Kew|8bak90vRcRb&ghFJ0
zybBSAUs-Zd@hlWMNQ3@in3{^QI(<&7*6|hODK#H5J8j`p;rba&3$NVhtcW*iuQb)i
zz^5~@eXk{yD3D$>1`jGsXWHtR)l|M?)>W7G-rRFYGfX$i2O-p;i0mJx`4QQqiqMCu
z1GyIw=2z|mxff^iOS4i?0vik$qxtCm93^d*9MArU6>r*ndT~1}I=P>@J>5j2CK3;-
zP5HSZxKXz1H}Tq!wf^}Q2Fld9N&RLqsdUWZi(3zyt|Q(-Z_8^YEI8$_D-sXd5VEVw
z!#`X@$&1qUsj)wx6RPcTNgxuRZVJXre-g_00@5bYOpc(2!r2USEVjshy(NSO{Fu{+
zm)~euiqgMls`k2^<3*@f|8VMw7|pp631`=6`NjQnBV-}?21wWgTA>uD)X<aV3wlCP
zn+nFM_Jq_>bsE60n{N!AVLT**&c=&h+Ve<K3-MCmcrBifkM67E3B770*jH(Tr`op-
z-Q^SFBp@kBJJqESG`;YscBtXaT1!Uy{G0Z-g+aHq!%`nJh`1C52=BrXu@sQqJc-?Q
zr|Hs?qxR~{YonT1=a@Ts?j2QaYQu@fl#mb4;+p~ZcEf=Qq3v#q5D27b?lpeRpX)v(
z7Z{pP=I1Y&``F8hLS7^24N+7jzr=c}rj*(@IBI6G)6OT}edrQ#YTSpov|Mp2jD=2C
zaB)GS=)%95rK?=3Y`y^4`Kd_w6$$hmuu(!Ujc7`mIxWFJ+FfIF@fl1f%U4j5czdsf
zfDSCD+D4yWz7QvwW*;t{tmMK|q!_O0**`4hlU)07nJ=nd_xiJrx4~wqs)!1xs~p{C
zV}Rzn{CCTr?V_2r;B1PhGZEqvt;>`b%JD*$QN&${b*O8-&YRf7{2^I_)F&vVW;<>L
z=su-T2cd5ySL&3*d_|t^?ZA1JZ$7rvX4*ZMyHk0~p0-^H+7`BiGR}oW#4``lp#2(@
z9|uIn?q^Iqd-G?BLv=2<*0b5@O00IhV=sb25^~&ASIxDrm{SUH!GDQ;SBTV-d1VbR
zVIVL<>h`8XnwaOa07@VT6!Ll7;JeGi6BE44UGM6<;@0k(ZC8Pxk$Okw=TASW0bP6;
zNT2Hhf2fNPaCUvqsrmGpATpHUm?IYjf2a+V(VhQV(7J$kG#TIR#h$tEslkpqmlb9k
z!!gb-Cl4hJG)ZMHF}^HZx<<*CB$UE?-Yk8jDH*UX2#yD|6``lo#>m=R!Q$n!DAvsP
zYo^JuNf9A{acHjU>u6*<@EVtN`Ux|*g-ZT3E}ZkCEYKY#9jN=5nDP)jgNxNRnszx=
zU#M@eV?yO?fKy!<Dl?z^b6H>n9`rse_kQvxT`TnrZ@`j=TX;8^&}h=cP0>D=SK*QF
z7wYh&+0+&^ysWN1_Ulfiv~P|`RRvndLy~I$So#i)R!~RsgMn+i5;GW^eCVY50s&Xj
zN31)$=DO&lWdQV@WDAstK;DCC9Hd1vQYFQm|LID6%fJLUnHp=7dwBtu49QZLLwaPv
zHf`DU{5FL;=zJrIk7#}%a@4HZlB&d*=QFsjK$&U6cg)f$d<^ooNd|2m*LrX<K;tNL
z1|qc#^#{!ffEy1Od-wgi!)UqioHEdQJg6}gt6@Qg?}RzFs$!dny)d4Lc~Y5+5IRI3
zzHXMj+G7~@7(Qqt@h~k45laIwDetWxbR#JG?HX5GQ}CV3LhH!ejGX8THy9u=LLS@b
z%gYzyftE)~k3S3~@uDb4Jm>~AZ7I{7N5_&X?el4OnsHm3V!Zh<RU$sx6qx3xT!vRl
z+~}}H2P@g(lcBme0)>TUCJ|sZ@Eep|x6d(fpG1orjl0ivd^ra~gMy%7n1u@BF;rhp
zle)biM?(=r8if2B_u*{TK$CtpBJV*g(^g6{>&I>cPb0QimMKAKW&>TmV6caZePAC|
zcJ5NFR3=6kVmWJ*FlZN5_*b)ZhiZ!I5_RA{I3$d(;i0>M&L@TZ603yzHnTGg33s0)
zV|9@OP1O<KWUsBAHhw$bn-D_EQka?l>f06MIGjxh@yywkYFO-sF9IkY{*XP0Z@5^I
z*=B@~KkCz|t)1e<>>ArDInO1%n~TBfNHM{)Xm+r>FOk)*CGXA4n>t;ecE0ux1JDMe
z=p;#$N?yF|R=M^o0{IZObMS@gB=F(uYx=-9YC+kfIfFVfgp!gf5qd@oK54IAcS=vc
zUzpMN7pFo1*^a?97&QsITI_YIjWTwEE?^YewY#)Ug)+PqIodz`p;fu)3m(C$AQ8NC
z9oP@xT~*WhY$d(6II}r}+B}QAYW7j`?LE2_uy1$;N;)~!USsZtcW>88ahKP7dW`!`
z2q2b-LEa<Cy_3w*!mro|r36vS!#FKqvu}a_b)`>MF<wA;brIE)|7>x*0`_zv7Wot`
zBkYV!BWm*b^#DacX$ZXP%vXme$OqVU-f1h3c>w+JNK^~MgNg%>F%IvzWk-AA2fwMC
z=9@!)4B)h(!0rrpqNVY>Wfzj#>0vZo5vj@HMTA<&JHRop0U;$e+3Upf6}c@E>>SKe
zo!nXERU-g&)dR-y26bdDCr6jCE@<YAWXNRk)cFmZFk{w5>EdQa4{WZd%SI};HHEuA
z4Zmfj*vSZiedX8tni?O_`!wMDE2~~056rT?uQmO_vO|BDRY`gBomsC6#TujwQ7;@3
zcmDVcgO4weL&EtBsfMX7X<O|VV7*vkB}O7VfbaQ0fZGaX*_DsF$;i1Di<|R0$%NI)
zc<46pk;zW<RkT;^Im)6Gq{`0YGwH9RZkme#mWXM%WC~~)ecvllwIFO2KfLA2y~rWg
z{QwUdM~(Z0#e|t8(-Qq4q}F9#r}Uh-DjpgIdlt=0(2<3bxGn(*115$TM4-0`fF2hp
zQ;re7D`$XFgcst-r5-Rhd}B&Nv)QP8a)*ysJ0EN`4yxRd^x&HgYtQ?dzegV11?U%2
zC|Q%vB6hw1{p$+k0qV**CyW{X&$A2oZ}>|*#WtxL9{>OI4AsVpq!<i)#|Oy#-^<>n
zLBKC`80YK!UmwB)VQ}bOp;YDn<C#cAG!zE;_WAWF@&6_W5E+A~h$JVh`ahTbpr6AY
zos|2(pGgslHsowpe_T!8W3;yxHPER!oxCz93Uv5{01o|8YfJXOp2fl<ba&gOetmI3
zQzofD>DN1P@*dg<g^b{Vb5QsuJpx`g|Dc`_?wwo!>2!x;rX%P8ELFIu@Sri0(^Ex@
zlHIki#v62B|AiluaQphFuH)H_jXK9l6+}AN;>$_TI6iS_SC&b4nv0nEImBSTHqto(
zySF%MDc|F(&$=@~$hy2Yvc#!7tGCBMN}<+(M^31Id}Xlh*hEHir0r%oH%@NAX=me{
zHbxxUbW%<;8xA*D9>(VfJ|To$K8*qV+yT2?4&E+}h9>n7kKV3wh{BMHLN0=1AnSw!
z%>^tS@1R?<fq%H#nwx`{J~?~#CoP~}5Ox0iHXn=IJT(H|`FxN90x%lmc`(BNfCT7H
z7^OywRl9Yb!J#SULY@1*o|i)J`ahki-~8jV)fXwLmU@U@%IL4rk-oQQcQ^E1MY7us
z9Xh}JNwuE};fZt$&r$hSrWeamhj{M&!!s>=^gd@_w!Y769PssBKc?a2!0j|%0EG5?
za;RgBn}pw>4%~QKs}|hApR!p>8_<((<+j*$UbjczK4#VCe)oq-k*1J3_l>D!&6O;M
zVG*U4KQ&$}bf*ht3i1Ap<2}l%)?8I8{fR#>6D`Y6zjdyXZCsPC-x^cs@=BRcviOlj
zETiBx*UL(g2y7vTt*fvYSzjeKiO4Y<`n|xQMlqOalr|%+F7acsNEbb&SHoAs1k1|)
zen<TYhPAQoz$-h{DpX^F4vKQ>?dL+%#gK+46Y|5YUuSuLbP+%-4ES&Us0iNmtxf73
zl|?#CZM)VF^p;3PU)?rkm=Tex<-00+cbiMvad`7Ag`wil{*$t}A6mKx-_BYUS5i`>
zy(r*nD1<FC*1^ykRVB9M@e78LA|9j+FQfo-hQx~G8G%!@tP&Z6H0$9zIYGh1$c(kn
zR+pul^^0{8A7OZXeg$L_-1M+b-G!rU;+;t?XRXjit;_Pt0xc&A!z%|#R_v?4yFJ6n
zDYlt`)f3UFyHPLjX?u7UKf-QP7Ho5|T3TEMv(0VJh3~w5>8%q(p_8r_hX-f8y-vEa
zuR@1L?F<)-gjKr}E@gLfygCl}Uh2Pd+VRKY`RDCK_wQ3vOy08Ja%y`T$&RLH8kVim
z&N>R$?;qVf3xWF*%Ze(ltaPQD!S0c6+fvLs6fdaeOqr$6X?Y1;^-cbCN5t7k<NSz#
z<$PxT(YWh`+LSu|{lr80)!#cJE9Y?#g|SaMH8w>IjcRX^!3|bA88U*-<u|8E%o>&+
z%>;|?p3sJN2HRW^>pdx7=+m@F=~0+HB{nN!CFv_E=-o2%6>Rg8-O;XJj`MoD(NHhm
z+l+5vSW<tO@ARO*Y*fPZF^UPm>HW8A8x}d+D2sJIZHbXhv-Hj2jMnAiZll9c_5QPu
zK_XkpwLPk#p%uTsKC)RZNte@1s4ef!$l2wsVxYt7G(wLJL?%k_p*Z2~z;v>HbF8^+
zbn-X49nIDsZT4mx&k8mM-*KMrp5ZQh7Uc4zZ;y%Gnm^;fohNNCn*K*3k?|kt!?d7V
z+l+mU!!*FeYCbx{Kf@_tZ}nNUwLv22)zhdXtZGnk0ds0oDeT7LP7A?Y&~{qAe{WG!
zqfI~4zO(%1kB#KueeRY?SG^vD@Zn5}L>eclLhaGfv#w<YU&FZ-qM$2$@rURZVwu+W
zzk_0s`~cnD^zAS60)#LXj)UXW@x_1xC(g;_RJP^ytNZlUz4U#`*byhGEu%aqw_BV$
zQC?$L@8?wD{WfIoNm+A{OW*Z;x)uK5Ti-^8$EK4kBwqR6^lb6wSp7}1yCMgzhHu-(
znva@xXtWK01IPZ*cc<>>`Sre&Wjvnk2gMo(kIOl#5dFiSmrW|R?}cOZ6oo{C&<6td
z!nr#x3V^X|1e!|nK{Fi@$w}ryZlhXh!e4F8YW6=GFdYh7)CPx44m2@sZceg)=l^~h
z!Qr1s4kgUWu07Yws`myUg87nZSuO?<@{M`?lMBo#1_#WNW*{;-RbmoHNv}D3uq>wF
zVh8fnc;tv>F>oJhSGlFFvInomc10349SnJ;^s#(%>b}2xYOA~Td}g}F&*Fb<lmb?)
z9OeI-1b7=BN@CoStMoYo4yylhRGnHUeke?JiOOTLQMtz7qo-L=Qnb%^pruyls&>oC
z=fnJ~BZeYJb<E#11OzRmnnD6Shtjj$e0CoJ!!k)#*rF^_1~9^ZtJqK<zzA*7FHD$=
z#6xESjzvEJkq72c-6T!B3!*#nCtpu(;yWh(h<lm6l2izs_V@X`di_LUeYB7y`?c<F
zbMQyG{P^xT`)IEEnMUvR@>e%^x^&*$Dedp4J3TMcntQ$+4}B2?0pqAoJV^vnnue24
zba6821VN<}`!5hfVZ`N%77pv^yws5$d*a>KUu_IQR=v04{n1YV={sp1(tOZE0MSj~
zR!JL{HZ%Sa_>qlY`gArjV3|MEzvFe&;hZGEjJ}K@*ezNF-1H6OMiR)YX`5Y?$8imz
z3!GL=m?TapG{mV-)CvsOW_B8lf6GhScr23(3dYAUod~-Id7RpRYS!s(m$jZXV{8)D
zy>vEuNuJqc?u1}+y0(_fO*D7=^2lL~+UEL3^2f3ni$sA&#Om+LqaAuQ8lFd3DYC($
z$0amaB{uiF*DT$~5NK!pK;Mozh^~`t^6&jRhcgjy9O=4`i=~kM==ao4trnh4FtNk)
z_gwnggDy!|Eezk>dg3LuEp^oII?>%5_e4#DN#$n2fnQ^$%$l}O-%MFo?D)I-#ekM=
z&B;1v`yU~%(g3VfpHF69P(>kfnD~c{X)ml|VAIC)(qxrbJ;C#|O|vA$HO1%oC(dr*
z(01egiRODo9AM^ygSlp7ISoz`irY5GrBpclv^raoI3;Ac-|)&tvZf4*?glrreZHDj
zcrGJ&Cpp6@T1M%<-|^v+<kne!uflHO&h+7Ljh4NFH#<<&)rNr1-_D*qDavy@IlDbQ
znUe5dG+eDKC%xf|@CyJg%9(Jnq%9{h+jT{W2djaLB$?83f7Z+An;jHLgx(w!8fiM1
z43ut8pJAU#rz7YYB<vN(urKNOd2uHH!z6i%YeQ($Mz(|7#Q0`zd}vsI*`kVRI7%1t
zgLsuXa&d{^fsCeT@YkpHQK?m83U|LA&z!u+@L^Ui`1r}qj4Gwc6FG;GaggdR`d#U`
zAc$j!HRM>Uj1Y4a0m_+3Cv|HxuAaQ%ZllAO?vM3{HKMc2b0NH2v|EmC9P{rBN$2-w
zN-7<<=#HMeR7gA&irc(n{N0qFy!fo@-k&lBngr)+?$zI~Jz@qZ%PA3XmzPQxdC`c0
z;d36Br&{}fDL<9gGz>&ZI2(~&3GyzrJau+8=Uka{b_N<WaJm*@?CkoWSFkbUj0LMP
zAiFAGg~_gBb-R;Z>M&(xMX>1SY^eO6xUk^X=+M-ckZFZK+f%9^n^efJ@Ds(P3bao@
z?kZ@`a9mr?uN)CgFL(JULJB-tuajvcsu~2^Zah@R7(Xx0ERPLfkha-)AsoR_96!F$
zetzqmkZPi5ICw;0B(S6Y901~Cb<pfBKw`sCyfD^;dqHezKb~`g2&d!VRDlA+;9^wD
z#e5WdW=T1_Z!GW1<BkHL`l5JvTXAJVin!(>76HI7HeFO9K4)3qE9`pzyo=Kl6!JYl
z5su<_uLN*3;e><zuns~E%d%<v$a)oa1J#3`Jda}y&h{}e021VOmt9*Y<aa#MMx`rS
z=Xh&dMRJabvgT1F?cMN1AQe-P9k8Q@9~Wy39zE)d*ugH$W`bCi7g+rrKP@r}j-Fs0
zOK5HDb_9|X_*pbvbT5S-hypeV<0x<wm7#IhutH+HhMPz=1iwM`4?Ey506QooNR)Z_
zaqQr=x|NKR>0lr_=cF!Y*R2U|p@gLv^K0Q9ViW(r?ei}u0AoH_0tD~9l)BE01Cjs9
zD<nm1$iIvHMZgv)_u9U3Kkb#k#eG|l10dwk^V8y%T0X~jXgk3HzfjCs{~v2TRBubl
zn)|x9zaKP@O#_`%%UMk|@a|>MTZWV|{(IUL!kc79AuGX=mYbj>)4^45T8$KUSk2>A
z{Q|Ni=l&j6FLbLhP?Xbr{-QmR(sk*=>M1s_*j9_nMRWu__P1odr`Yx&+*MzxI{E_U
z$nujOcZU8dh&*r4s#m^6_kFtJ6&I}{9@>eR=CTP%^wmBd`f24HLbS)6|J}R6O<rjj
z{Uv0>B?<l^6=di>yj4;Xw}n<-$3wFbCrTA8UiOW5P_$wdjIG^D{#?syqsRkz*+<KD
z+p_EG53yQ5_sbw%)zkdy(C_=f|CKfYxtt)%5h}_t6mcgwRmT5)q<TDoe^e7Lfe?L<
z;1v*!m`Tou+w5C)BQwJl{;+%Sx}7FTe=i$Q1iKSVFO12sjk4KBvoEK{OVTp>?#R3C
zWC#&Lc3BG8Szc>%*aIA*aQvG~N!(DGq~^qtOigs{5n!(=_$aCAn@+g}t0ZilYg;_X
z%y)ic_I<xx&;ZHL`ya3gOOP}%tu#5f>|4C+;_x1qX#kn1#UE`o6ydelOjM(I(JTs+
ziPBOd{BM~k0|aZS>^lF^_+^W~%)Ld$C6l~)b==`rcQJ(bkszk(NGNtS1Bpn3>R;7N
z=rztA9|x(o@f&PFm;ZoR{H)KEbq^ZR#6HvDTZPLVA+<rShCQewJzb>an+C{SJOd$5
z^m!eSz%xVK0;SLy<I!1AM;d<iR0&WM0b&ynu~6TFsM6i-sr5Z1TU+mMy!QD7Q-VMt
zjUc|~gh58|)q-ilp&5Mcp)lOVbcdyoo#hR4&PzC8pg7<XCSy3dem#g%4-HO=ALPlX
z0F>w@AfJ9ypZi%*pk+pkb|T?RIq}~On!qcYudGR9zc~%&-Uf4H`75_fsi)E(iNZ}O
zq?h=#T@IN@9wQxKxq-<XB6T!xgTRjas+@b^A51~8@hK`}@%1dn>|L8Si)I+81JX|T
z|IJ7j!+I;)8L#hf_(lqMq*Lf()2SRE8qX<T2k8QRSxstfSB+UckmP>sQzZ<GX8}Qb
zVzQ2{+{q%LS4kgrxun<psufPG?0-|ew2byU@}ylEAQcKKW%09NHxU%%=%VNOPoKzF
z7rntdb+iiVVnnlnkc*>YjQYlkS0~lw^S=^nKk-hKY~!@M9EkN!s(pm?r-%1QoGAu#
zXqEK9VmoqAzcN$Y#4JWE%&knC02WI%5358_1c9SqrzA6Nk-)Z*7nSeEt0)V}K%73`
zpb_eb%q4mdzIfS!$7%2bdHW?yrjj~<R3Zx51k1gf%wb)E^jPNrMNdg{5f#K!pe5?=
z`wz#0l>dZ4Qi9x0hhOIpr>yM?+{7d-xw!vU2KW;~Kpy|&m*7ithz0pKO=>)#kWq`T
z&jNcdK(SOMW>=ek?*$dee;WDfU4Z3sgG@=^otLBX1fC;q{gy|W0VSo+1%iV5G(qm2
z^G4gl2LbDD2`%FrJ&}~+F^O|81+Or_glnC4kofj?W{B(v9wTGbGS%S$n2dbT39T0e
zvMn1qIxzg}4gV`@eq?Cc>T=-@9L5Zu^N=M-NoC<yy)vuJVPH?=t#;nZ`#mxs@lDNQ
z`(C<ib>nsj|Imc}@m&?0fsGC6khBan`P?$1z5TZ>THZobLs$4Y4a-4(+%B3nC_y^;
z9{-=NZ$a5lHnn9OmbwJ{Men*iFZuI{F-Z3Sf0uwgp{ujg?qyZPuM9niFUKdw@_@CT
z%rxQMWn1?<>)xuh)hMm=l%^HO%9EA$zGpQeJGwhBe_y(`!ntr6N(oAVk+v_zYdQ-C
zX5I+yp1XS7`)Nwm(QPkH-<7+YA+_!4PR^OjucGCY6YVC)6OPj?X^kn1Y5eJP43A9O
z_96t=dn`ZK8`;brzZOet8Qpu~l(=9Xl6IJN?6dcgCKP?Sv9_nGCwugcB!6~BgE;)B
zP83DPEDM#P*uezvqUULff4Yg^_$aHxOecO*M5-<dB`uU8D#%e>b=`&`Bq{yz>if9k
zi*E#dZJjhg;Z<|@ch9nAma~YnYiV-r-DIH%phK&I-^QNf7e`4;I|<mo9(N`i6Jy;|
z&VB_a&RP|vp4z@)vFKB;gpZ!zGk9BF(^VlFlOh2{TPK_LWl;3<gfthI`LuF+@XD%D
z_m56^Pt&T=tD`-ee;-!llWPX(Di%qxW{>Kl=ARkl`#8&8vvL7NqlTc1`cl51KF;KS
zBM3<g7D;822>KZivXymrFN&BdT~utjLpP&E%Qlvq0eV|nGa+(3HyI6zK!n{4W4)Cj
zPInx_=H*8sLm3#yx(z+&fy%dZnKJ7@HT}dE+=H^nq@?*Q_<ffqYpg7mP;o@hzIlh}
zkFyJe_9fX5th+_E@SHw>TjEv5Ax0lpyXuzuT_Z0d5hcwbyFdJ`vash~`;J!W3@9D<
z$ZE0(Uy4HHFqj9$yHAAeGME{O!hClRqE25zMqGDwqq(D@%Wc1(we&V$=yhzZ*5WYs
zQn{9zlf$q^5tU_4+I=Gd!}P_77<I4gwRky074kuwl=(mm<9}lqKT#lm%i*{;>6j#U
zKul7(a9|J3G?cfOM(H8->~e7%u}{hwQp!TKZ`P|j@<6yYkwMNqa@#`G^oP^36BMPp
z?q+eB#E$TFYS&(t)=x^I(>!8O_8z6v(#%&qQ#qRntxb9m^Zryq<|hT<da&;6>uXx@
z4$EHG{$iMLTCjYo=F`5VcTS%r41dGEf}+QLex<03ETDo%v0U!)Ard7SQn0r2AhoyN
zGa-dxtSzhJ0mXTnD|=~Q+^981*&w^DXG%v&fZHZE^;e10kPDAXHXH&w;6Ero=M@n9
zR4pr|t#Q^8rMW6vbJTr)T{fe0V_VwmCA+Okcg8z*b``wR@r}-vPI2@jo{J>ZB|rP*
zc9_S6O==f8sN+sIDqB~pCzo&17u3O1hk`@LOa`4@dt=yq4>~MadT9iKqYAthL*NKX
z_x428&@ND`(bBPS)7H*Ddf2i)=Io>@$wnf+oRmKh8H8^r_Xlb-G2Oo3z1DDZj(GqE
z%?|t`C@cQC)n#>D=<v_<6v`mY!gNe@@H2|1oS0VVuv`4kLBtP;OEl%Osa-S!WmfJ_
zTMEG+g^sW1n*5(W&re&ha`#-g`%6((bA_Vx!(oHc?K#jtpy1S-ueP7AwRgf5Qc*jq
zSyyqCUL`ib7n=JE@%@>!rs&mfqP0&NmDQ%0YWr*H9-~itY0G(LCAGa=DP;lmYoamZ
z^sJYfc!shH2O>SE^>+y2mai2kLC43VR`I@MPF%xBiXV>*{fIb{k19i`m6yrQR-I_0
z#=1;!BveFMvn?_{6aaJOt+0A-vv&^nEz<E8#81CHBax5npI#+^M3qQO)pj%ad*-Fc
z<V$+WIdt0rPDD_>J6fskRkZ5A@#=Wlj(K^({js~KvPoNJevsW#Rs8LU=ijT9w?@2g
zjgk)!c`#^PApxFMPwcuJsbaR7?(DB6?QDitiF_4*3L(y+;ho^VN!dMduUiwGgu1vs
zn2g#?$uD$5oIMxiWV{+YeQ(y8aap0;K9yWr%s0}^f3s&)pqZ~bNB86%`;ctZPv<Dg
ztQ^T-x?S@@Thq2z=qg>O3D-u5pyx({B~x<{hHqgKuD4CZiaMS49@dB7(+aEUZ~_e*
z&aTGA_w|#@tPB3^kOGpo`1)L7cwyq4wQztSD&<3)5l#9D66@wPBhKkP(QBgLr#ZE_
z*F-VxSnPXH^3_?|=#-;l3*Y3kaoJuA>s>F`Z{z!?<VEgot_h&tyhr?gh|%O*iAm;4
zUx|pZ#ES<`4_oT};+kI)|B{zjYdE<gb@IF0*`Yf6O!UvE2##GE+g*y-@HzbQa`~Y-
zPH;l~{5<Zy*L$g$)gIZlmvJK-e)g7hGipE4UcB7Su7m>0Wbh{7&KVl5-bIE;ggCw2
z3fIbJXtsJPFM8KQ<>_@cOyAVIwl~#E%PhIMT`&mw1^*oDr+0GR*8W_5$C5+Aw|({I
z+&R{ZWrDuLJ(lBcU@y`?%|krKQ?l2*wKIbk-)7UQTLhp>e>C5nZ>_HM+%*r`?)c#|
zy)k}yf#fLt-W$sYTmmt7C<enrHL~B&@=UmepB5XO9~90rEMOGUR$2Qt3$~%bCEL?$
zh)R)oA+?;o!<tcUC9$T92u^ldYM{-(a#kT&72@nF&o&{k*wT8&gS-Vx2X20HlMe28
z(zh<E>dGGtf6L)uOb&vdyG8NNHwgqrdLE4UWSz~)mc*lvW~FoO6C+m{xi5!Z%`;LZ
z5fL|OJ0}u^v|;~rCyDPfh1IR&I-f6=qR@F5ZG`8wydDkhZ+>5j4VcP{zx+p|TK(^>
zF840Wdewl;h^0%~#QF}J`YEkL<WMIw(5I9XzG>5Xc&qbyzOZ7`oshJ!#`=l&iy_~K
z0J~t??mM<5*~s{T;fH17T>5+fwC#r?W8C=f{3;?2DIhO~a{_?z{-(dTjp-(FMQrz&
z4>CwR@=&kcvk{n?8h%Yq?HcDNQ}U)`Wu-Psv1-I`W3^YCNUNGhMZ=3*!s$DSdP)Q1
zXhQq*cUhJGk@bVM$BFCT<M8*GskNeLg=(LzZ)}Wc1_$S>PPawwZHygMXC}KQ9@_Zr
z&6gyvv8M1@t1|ZwD|r(2(tWn<-_tvY`Z!OfZU5LLg=8j8RGxQl|8<LdVVKw#w&@Rf
zZ{C33$n|c`W%wp&%!=H5zEC?Lrn@g5;`B<GyI{bww9M$ZGONJtn&%zQH%9Y*dujXo
z>;bT6u>K)o^vI&6)&2ZWyLG8Wa4rW@6}NKFofmf=-CdH7(|+@P_{zOVwL*qVUcz!g
zWzohJWJogywfF{bL`z&gF*?sS!&7TUex*cHe?7~!=>f`&zkk?)on<#5hAeyj7TGYJ
zVMC$Cr{Z8UgO9pleHOvf;kPR-o_w3u`Yt0DII5zcfOhv`*A@r)t{c=}ePQdMiP6k?
z;n<-yxKn6SVrr(M=s0nlb0*5HR%Aim_sKz8vO?l(`Z$_o5E~@xv0cy6ho*G7pC`7?
zdxxZ^d3!Q6R8(1!6$1T6PFKM|>~h~kJ}BFI#VzQ|b|=14f%zQcx1%TfBH{}6hptV8
zB<@3sVYRn9w+Ndz1Jv<rr$@Cvio#vgq%}uIFZUdN;#@5{zHPW^9IP++V9M^ch4HT6
zYP&9#E5EpPxvk-{@Ph8VO?hnX3mUaSvvj><!=hgR{8h@dIj^vY+^MvxPmwDK5SurU
z^UyfyZRb1DYEG+>O-SA99{c`2^MSl*Z^`w^uPmUM=&ih(&baM+*^*()^CVXaLwjb8
z1q7<2RpdDOhB@z<Mp{XdKMp(?IPkwHc4Ki+aw@;}`;+fJtYd9|+h!xMZL`)Sw_Br+
zH?Ei_4_P#_-&L;R``N;rDe1bN@vurP*+pAx-1B*}gRs9_c|Ql9OQndjU(IUCh{uBn
z4n3C#kBwC5%@bqU_9@jC&C-wc;(4J2;JikFpbVULns&a0o%1?VIAr<mcTxTa5vL&q
z&sFdAef*%sjOmlKd#RUqfpn9Ug>U#`dP<ssPrcR{B1|PmOqNT;(kAP;<@%O5-TeH#
zdDoz}N0`o-h!Im|iiX#CP5orU?^kr9JG)yY!?k2*Ne(qlH<OZ;-of+oOu|BzU-Ub{
zmnA~@Ck_WTLe8wmgHGQkY;w1-LNu#+on19vJ+z;Uv{#nlQyKCaaTehZec#f{>Q{8|
zcD>{D>|FM7Lb$wmI5!O_@enJE>V<#6^cyv<IX79K^iq!X)cJ?au^o1;uT^sYww&8b
zw3f)1oOU941WwXi>F8_V)VvDw%sdq5A1Qp3+><n0>AJ*K?~oQPRgvnMxhoL0KW7&=
zoat~?UBGhFKJ|rBDciLiC$vM>Q;;U?yQ(p3;_h)(vsSoe{f@bL-^ktjHsV$iikj1Y
zS#okGHDBlbHqH;vdh}lq64wA#hNyU_tMFgIdiPewR!8|gw#K#B%}RL;H8)77oae0A
z$IfCbruLWBcMeWTd3vQw6q2-JtQ9_v3IUjXtY5_pl8H}I8D>MF)h5;JQX)z!+Q*mT
z9RC>dyZ%}6?3U%8^7J|BT@~ekU1POv+<08jM#EMBmFzz)v5s-0E)Le}w<)@g;48ee
zV*TRiEX8QOv{&tD;cJPpt2!?Gh^&Iq^)_2DuDpGn5wK)eZ~KMVXvC4aH~VBD-lru!
z#Ny}H^HRH=FDHGD5?Z*F+(W~K72jnwnWSc|Mjr;N!=SZkzf8-$52eqDy=3><ZjXcx
zBXZ_6Uw1Edb9{f&aYOxM2VCq%&T;hg;Meks4<vP!!=*od2v;s7uHA7JPvUj9$oHSU
z48tqQQ^V3U=nm<q85qqN5lodFYpCPikoV<<Al;0puqi_^P21}eVGXX0n)fa{C%=t6
zV><fTmE{=GXxlG*mtp%mD4--fWj##piy)_Pi3f>Cj(1g)Ea<|B<V4E_sjqKOox5U4
z=mk=PYoZgSD!gx}9VSl;R!KzQYBMgGD68yhuf+GErnDO?z5`=6yk6xRygP}GGV!=H
z;h-$K=gQ}o<Q2zRA&|Z9w~F6mdVWi9r7$r%Us<j65((4u%seqV^{7`m>Bg^$cyre0
z;8~Xb7zP(J1*yxhcaxS3=sEf3_PYJOD`r9~nzV))c2i$}=iR)x^&~U@=PgXXCP=+F
zp{*zGJD^#&#^iS+Xy5pL%QW1}EnqUz`gS@<sSr{VppES-gHgB?BUMTds})rXG<o(7
z*BEP*@k3{i*M}6j1lPTKLdPd;H<~O1-pHpM(2uXFha<yab)2?gIg?sOAfwc4RqAZA
zDQMv{+xVgD_nXW=s=II5YePvDuDa&FC2KGxA6(|v^DwGS*B<2L>^Y%ZPrLlLL*bgB
zEjR~FIqOskyy9(5l0URr%2g&`lQ}u=J@VyPJ3pdOn!;=Kx@Yr5t9B*I=UoT~)8Coz
z1r|D^c6;H+?HA1lBkw5-SpKSi?3ob7Y>TP8L!Yvpr!o~foZlnrTRHXWn|-;lx2}2U
zT-g5Sxbg;*gildv?Ut(kd4_TlTsr(bEf~!^<!rqcnla_vFy*}7Cw^;FG#l{E`_HuF
zc}#r;0!wET`ZFrZmUO25t>#B*QtuBlpD$t4muj_Z9-^}FQt+px<6cujL#*b9q%w(D
zk1~79-BrC7%nkAM*jQ~w&Qsy-z0&c)mTEXiHs?<Hn+Jxh|F93rk1!y!xqYhtcvKSN
z$kC>$+m2}+llN6@*NE-97l~)v{&q4}7i7!j->F%vq9c-v=_iiLWISIejsF;_<l9Z4
zVk*bgkI~yCzrTfT?EOxXemYjymBhIe{YX;GGt3>=CIp(N4(|L(AUg@<$eH1B^ewUc
z)p3=FeL)nK&W)rfPdj#RG|jpCQdfAi&C<R=e$7{&#e`oXg-R5sw-o$ne=D1@xbp+z
z1%sYtbB5bYOA>2ty$7HFG7>^^@7LMo;j!QbLZ}I0s@r|z(%=X_E0-VI0}qidpsnU{
zjVqOTIk~_b@2t=Bv!Y4;0CZ$9J30QVMv+U{WP4Fcn<M$^>FII*7?W7zdi7Jw7KX#B
zW4$;c->o!kPXZEg3(C}RNV_&GYC)7GOB*<3b=bN@A0ZI?X3xn`3;xg)MHKe1?lzUx
z+auq37VedaTZ7j0L=(+A0;YRE8y2+-a1bPBV0+e7tFCcBKjUra`?Bnv`X9A#2Y%;e
z8>#&*tGW<)O5H8WQw_D)iaU7+Ng2uv_np;Te6Kt~E+r^}%z=Ok{v}i|$1R#)N14*`
z8ndqk1R0I($sCP+|7iBx?3ta$K0zl^-o#aSKEQgrL_6x6$wHP}-LlQv4Z~TNRc~V<
zBc8K-VYHrQt;}`)==dU!muJlFguTt9;-)`nBk|$^9=I5$=xq3TvZ%UkV5N7E5-qtw
zp7E`Cf;(l9Hbg0S`K8ahuNgh;cG5TnilhBC$t{{+-M4qUgHZ2@$6fNan9dWr*^5YP
z2W;CF3K>Xntee+mvM;$pZ2ZV?woJojK4vjDIK?8LlM>2I1=`YbKjm;a!b;OeSe|r#
zWO+5PVU|ARXkcVMQ+WNYSEAO|AI_~tFYWw?_a0-w28GNcxbJQG#_!xo-C68W=D7Wh
z^Zr9|=YQN=8xF?1@BMS?;<z&{&X96Bg+lv3-ld%icuha!@BdJCz_^G^`B^Lp1?-$_
zyIwIBR6)u!-0xgy>zP!&LFkMYPh75d97AqMiM-2V@DBQsAl?1WVBA_ad2N3LBwpNy
zT-FY)4;L-DE4Qzzt+E$i^n9y_AoT95yLSz6l^+ULG=c9P%zS-%%uR`+yn&MYJ>MYJ
z@_T&=*bYqoc-1rHkDQrMK-1ajy*cOndH2L!`t_K9@P>-Rdx(1Z>AQ(8=w<CKsR{GZ
z7G1AfXABX3xIP&qq8?h>9<r1$eOyr_-EIob3pcRcZkS3E7xO}a2zzp}>7uv48Zj*$
z)|S|m+O&trIr3g5SZhB(sn6pVDd1!W|6tPAWg2bjeWY_?z8RH{9Svh&2zP9~I7-+>
zgtjI4^`0J7oW!rSEwxR<oocWWrND=D*s<B3OONBh?swFz?KT6ksq@WB@+ZK7dB4Ta
z|F@*~fWEUXS+VU*dl#SU7ac+si%F)$t6_?%6yfEVvZLe`<uaB95(TH%6hHsgCkYJX
zRR*$I?+Hd8{Xp(x0kNA{h^jpET+cW5wv^_;YR+n$eS$q7kUF?Coy&cbd53YH^sq-5
z+vSBqR^ZhZ@JQIH=fQqe(!W~HEyr0RXj&ylCw>o86dMo^W>DM;OU}c7AWXHuQ+Yw0
z!{`+o0H=7eY#a)KN|Qca=V$o~O1#qkeDkC)XT}pR13n{j&Y;ola*&O(Ub=NIK$6VY
zc>gSz)b==WvOCt!ZgMXC3KZ&07EpnH@+8W+hJA`LH2OM|3xRTO5h(>M@-C^t*$z~8
zxfwJP<I0%V+Xk8=K5c#twi7uZx%CvI?0SuOtPr<a`#uWzwxb{{3Q74-(G=YPmy*A7
zZg`~Y@O^_AGz}YWJhX13RDnKjiQ}@RfZm%Vy%s0??|3~D2a)lQx3-puV#Vo*u~brV
zFEm8Lv>e(y3Wq_D=ScGC-&QryPfhO~GSk-NEHqELyB~<_ouffV_B<`md+YyxqbsEu
z^!5)G-+x>sIOHy+f$duybb%<46RvH54ZNHNt-Y9{r;=tH<^2eiHy^n?(0DcnB*?%^
ztdNuwnGZ$c;4TQpn)#vk!8WEkxWdgN&9Fsj#4%LonY_?(iQ0KSP)#;R#QjTFcpfU7
zC~U8Kw^=AYO6vu77Z*7eRwOQ+=cT!Ht<4%G7<^!y_iu4FmwjQyXMs)ys`BPGH$V1y
zwotM|*ty>L$ZPya3Zc=y>tFt55d{9Lp0TbhYU>exj*}5qS(V`4x@}5gzV~>+mVecF
z+;dz06*z2nkG6;bvl?g}C-@x+>)qRKE^pxC#;)|0EB4F%o!jol>o@p-Zrr3!#^C}O
z{F7qUS7e;lwaeSk&y5ckBC;7^>?gJJag1(0G4xX*|10%4RC`Ps3pE{1Ei@2W6@My*
zC%O;cD}86YL5ER51ZSHZ#FwV`g9X^|Pfwd$IK9V%s?)7%PR798y}kt7#UIkHM`N|f
z3TW1yH!CV6u!{nKq{j(WikRJDRap_rUBN{Bxo@fM{4H7u(1Hu%ISB~oM<WM2H|lOf
zdJqiw+p!z|GadnhGECfOv$YVMC%r!CKm);&(+ic&6TuuMUz2V-mSG@|qm5#-yc)iQ
zwN&^U)VFUw3(qA~6dzV!=BCFAB7{IhAjCH0QI{MWaBtU#DQI4jLCIo*%EEZeu-dGo
z-uAt!m9Z`<4yAv~y!#o3v_Tl8qr*cYT~AixDN-EJHumrrw&su7O!#Y5b{r~A3|Q(^
zf8r$!Wwy4^a|ni1CO1_Tz^OP_9un*_7}fkm<1KP<2-EWAPSmxE$M*TLX}9@*SN+V{
z_xM=l8gPVc=}&Q;0vJh%!yWF;w8@Ti9KOF8ZbpFJHzAaa^Zm`iXE)wm1IvSEM&b-q
z43n50uMBSEm>zI$CUU|rJ_{-}=cciJ+u;Skra`xH;xUH)O_HCq-qIP=^Plpa{-Oi}
zn4s<$D3VLd^Asy3fF=d2`1TV;H;OP_uLeAP|6Y^*ida~AhY%nqe0n{>kO(6rv<!)q
zWs<R~Ri!7Uv4ap%Mf{KKa=5X?s0%-6;r95Tg0-G&2qe>m2P!%6^Arg9XFLZ9oZANc
z0igg<nAoGND6B9(+-RfyL40APKwG04ba>?Ff4iZ}*^ZXf`L1q-C32l}Vb8Hxbj8OO
zbgAH`Xthy-DODW#GWj4POTJ^rjk6h`VIk<2w;>d<J?NM7bE7y#?1u{A8?5tb9qePe
z!)$DPyh`z$ebYAv#<7H^^T!_C#^2R?w)LpbQ?Lem@EBx-qy$4Hh@O{7m;?St(K!cW
zd5FQ4m$17bmSi*Wzz|+eJ^GHdB_+eQFV9gJz{;Xs=&?3_(E9K28JM}jK??tVK7%4t
z?LnbD_Jd?7_c2nFJ6_oWD8t+7m|<KuC{TtajM;06QkBcH;m{kA11*i2cE@{+gkz%5
za(ylXS_oN_5$YGVi5m|+0b>MmUHf)lZ4=kwMobI(tBE~+EgEGYY<H$)rN!?sKKA1*
ztbT=M6OtPp8AD0xdgYwKv)I3lii?=zQ1pW|7ZAWiIyLIw`d6|I$nK6XMN0vqQZfw^
ztQwe-NWI64H<jQ^;sL$?rd;p;#xVdq1fVSfM9c3Gw_We7<C^0IAroh4i+vvG5sMHW
z&`SI^do2E8m3$PMcIAYLSM~zisJ1!|E!Vl*LT+!o(wzGOnsP2YugPJnftG&$lT*=`
z;D=-B2Ytj?d_`$;j~t|=L=D^R8LI`kAHh*IYk$M-0ZRCm)@uXAf{)D;DCHbhUD&j9
z1RX=a_S(@X4c{SO$A-q+>8Oma&rzG_o&xPm4R<Pt|0}RqHS~?Lm^c(5D((cHgza-K
zr}t(&NpL%;kEcRECZ>S7Ul70a?@ft|d_aAq%iFoa32VtRu=WFwz<c=xbG7PaKLDVO
zb6N-gYQqTZxZ%4hU!A}_X~wvoJ641U7U;q0EhQc$;RH+=;!qtRdn@B6{EqC!cyp|F
zjas!$gefw%(2qAOe#U?m3du#l_=A(F`_2nJGyq0HZv&BkUDGv|!7=+#-8LEp)V1MT
zH27Fn7eh;X)Y{5x&M#Gh$k^qhQmzZhc4E6r&82+o7U5bseH|lct1IWIQm-=n^{|L`
zuMQXS3;88RKub$}ivRHi@P}5mUbTQp+%5Evo8`Efuq62sFoN*S*8){St_N%eALjPZ
z4SeGS?z;dS{QuD?aDn@~E0B8R1GtB%fe==uWJsmB3;Qh)!LV!K^eaTuhh+ZiMF8r+
z-@XNo$1g}o?Xo$F4{Net*%o$UyQRdPsWz@r2t6&ivM<xfaH4-+zl?Y3Z~qzs+Ss@m
zh9Wz>ei1IdfrEX}nIZH(N_FTIbVu*KRGxAn-cCJqsix1zHl@L>ZOdbN&{hCh?%~I>
zV)xVp3zYG0ni37FW`?I?u7v-iB{b-);7wI%0r=S94(U2Brb5I5STaSvpAN*Bk#nN~
z??0PH<~hcOPz){+Q8a>EB^aU75`d}7SLDyN0xaFGrDXqCez&MUPu~h<vU)-kHu|{N
z96LIW9+-5T*EJr{FG(@j|MZ3()xuLPyIbcmH;u4)lH|(=tdNgO!FH+B@s(KliP^N#
z0<G;6<Yxz0z=1@R+4#bvP#fMhPd<xrfF3HK7)9!~CK;zOw4BPVX4E3QIJtvMXhJ*M
zY6P1gMw*h2Bf%&T)(bvI_7I-Lp)gLt8sG3HR&<|8qz*VIE?NlHJVqsfPC{M|D(otl
zJyO!RFoC{Szd#{1m_;fJ7UN*dAT)eT{yt6?++(2-+S68oU`2{?Fc%5N{ib3}y@9Bs
zx{I-gGH~0mqk79E;pR0tR(3GnpikNEguq}XGD!{_AmBl+qCbM21I4}RtbuDIy+9&F
zCG<E-Bk36cOuCHn{|fS+v>Dw5SJn$wf4cbI!U2>5<T;t8f`yM~IFQ3*p{h6zVsD8;
z^=)@tIP?GtfZ#!tN*tC*D5W>!{i}pfbq+glG3depUGBZV3V~`v!YrqUFcv}fA<Z8<
znhMc2f~FqqtSDu%Ik-97bmO1PM^u6frgNGTU%JAd&YJ)O0o`Lf3nZ+NgsB7KH<F5N
z55=X%aD9?^=!e90rL!Rrz>@cO&b`KB*Mddc!H4v%NHYlf6VPP$NKp%7gEmL_o!HDp
z>@5unUr0v<Dbz<HFLeukgB&BjoF)KCJ=5FjnLwzYUWvcbY{5$rUkcvF(gZrUN;k}n
zGUHIjT5MQkQ!7V#WT)G*yuRWIQ2UD~lg7Wse@?H>ht0P8OYj%Gd^7B+1(AyheIs3Z
z^xd<;>0p;w1)C(o0*?VSdPxo<`Wx@rjYb1gtjajSKSz~%sdRnjfYJec<d0RuDlt$P
zxRP;O^*tFORtW3#2O4bnWs3sG(h)R~TIc!@fa(iTcXAW0A(HKr^kqbUJ9KYQm4^ty
z4`Ic5oz6IMgiFch#m^$9!0In&?<cmzqk0^*lLB$=*9c~4jim4j+MIZjxrhU6<`sCl
zL;~Pc#|RYWQ-#qh%w1*-Ifz)=@+-uhVTzRwzi|S|$wPhTm(VEfy#`AM`dfbFf&AO1
z5A^q#xGoulWL@F=ZumYpSgpkiv8|haGEBe$lvhYY<X^XOjcdVF{=x@GHe0ww3=7s|
zK*#0ndWDeGsjy0LriHI&MAD`U#C~-u*7m|D!IDG44B@mlF-_TebVn}_7xQJ{9VWzB
zL>Od?0M7H`w_~jm%XvCzO$t7#q;iaMupu^5L*E64QU1JP(JBDQ)SuG{Uz^&SvCwte
zsU5f7hstdgmlX$=+U#6Ky0PW~PG0w~N|<MU7YAMCw!SlyJpXWJ@B(BSKtT$=WPu_s
zcZPHzu$-oLiz{I!h^Yt0lqxAS_BWhFKO_Z*-47r>l>gF5GKPU@D&7Sj&BzZmA@6x~
zD1_|J>)>n#1QB+?;mcik7>6RB7B0ee`=Y!cVBr=~Cj!_-a2K&$xZj;!4PsKq;1>J*
zuf_*J8WB0b2iI-EM{x=tiDHd>EO@>BYasC0ktV?g8TTM$i$_<Qur#RwIi5xUU}6a%
z=fNH_7p}KCBA=1-$3NBuTm3cl@V{^jLQ<E^3L%CPhU*w(Ii*i!%VwKs9#Kh#L?IUN
zwoPgO!AN*B>f2`mh?T%2k`N2<T?`mlTPE>#d%b*IwGRQub4DR%2ApmIi89l9^9x$}
zSOPa%$H09NtBaQjET34YkHw`Fx3hw1VEZirdj)Ozsjz(p)7oDgu0oxvAzSD_1u5is
zV(G!B_jcc^y1K0$hY#JS00F4njV@6}sDQ5YIo0cWxUj8&<g<0dhtt^fDJ^%bW#yzn
zf8TL0ke~L<1k(CsR+XOvv#b>_D(=K}aHD^bn%XR16+5FF{d+@%3K~6Pebe<Pi;4L&
z`brpj74AJ7>^Jo+{><+O<uFe+U5B)d@Fv+X%YcST3uj}^sVOEaMS;V2wQv-x<nv>l
z+lJYr9U;Bc-(~sNJ+2^jh;GliEj>_ftx(gY!mtYh%jGY(?RTA0wSHYTQr-IY0$cv!
zr2mq<_6fgP!zx+5MyQ7fGq8jV!H1Nu$&{n=+xERK@_y(4^NMJS-1ID*+sS)Y{P^Xv
zsLz+LM<1Cgaqy46Ks+O~az0)s#N?#!n_F2@qte}Dd4a9g!-}b0TW#Evfqx}TecKhV
zces=}rMY@$bR9+C^C;p+nH>4J68L5okSyKk8~;rL>Oyqt(xiUX_`gfdMVdFx$~I@t
z>@L&Rl`O9C;T$=l0UFJhdNLrhx;6inWDR1{?jI}``%BR0EcXpjCjDO>prAt^`3fZ8
zSl=*boPN{OoiZcN3K6wQqNfXu(?>6*{bG{^4{aZzOU%==eV0kTN}k5FKAD#MK8A2_
zE{W68Yhn!)rA)}Vn2fP_gGBH_P5NBp(q3h|+!i?3qV{9orz1C}(_@(a-rVBft5IRF
z(&3&E^0Y&3xp(_N+iF)EYI_Py`cpKM{Ry5+GJr2xL46e8f_O$1Q<T%DDy&>Pk7vyk
z2=2Ge$GvpWo4$55N&M0y;=0UVp7AYoYON6R+gygC3dZ}NEL!>Q=P~|8P)fQY6THD#
zss2fkyF2_oI(V!<S+%r=+69HSHI?7nsA^mgM`sUYl&rY?7{qryJ<#o7V0|@C4ZeJ7
zWhZiOD(P>|zlek{H6ZCA?On{R?YmO_6+Yu{J?le0W;aD(+r0s3P(gQBLav3{->)cj
z^v}G$H0XMH%H*u2beh>0Mu-4uMsV;LlYv`G7G778(p`)Be{_9!T$4?=ElsKjiim&^
z6a)b&Ql$n&L8PhlF4DVzbV4X1AXSjwM0yRqCqa?kyOa>56G~_y5D477uby-7`R={{
z5q_D>JTtTR%wB8n^`w<}_CTK|?=oS`RMr+$|8jaywHCXiiZ&R6E{pT#S>Jhv&+)sU
zdkM4+-7~sRH~vKOdT%Z=;u3WFJB%)ak)&08-{j>U=V`IP-rWsuFV*9+`=~$)6PCy`
zauTf}>Btfi6C|?xlF4uVop+pb>)H2zZ6SgGji8kKSq{nkSG30(J5&HU$(kc+=ilpW
z<nS-9LRf*ssUjlDdqj49+mDx;rh9c&>aG}&);!@5CWigIqO7V+dh6sjE8WQFt2wvd
z$zO<!)G9jXU>m7R{umo&aC_@oTjQmCW6Z-(%XfH0*Rv;kG-?F?ESbYC0$H@flH%_%
zxHVn#ZFwL*%@SzPUs@ij041D&Q^u+1J6Aql#q-E1(AAjd0#^mEPn#syJvEu0FS08c
z#)voj2hR)pXI^3q{*5jO+4$6tQ>Lmgp0j9yQ4IUYGzd3_mFLlSn5i6&iT?wm1S^m^
zY}C%v;^qzl5iQ3_c=#jzGr>q>ZNQGdXn9bO`9C!~`q4)i2EyR3(2@*Q%>^wue)oh6
z%6JDD5*$fGo9EiF)T`GefQ_2G!(@HGWgGdsOb;bGey08Li<EEzwJ?-WcbMs^XzCqx
zoRQK~(<zBsZA+W?TT57~T{F#(>uJ$bVZ7Ea0FfA<lQ9)+@%F8^3ix-<gA~Te29j))
z!Yjvi=H%XuC7CYS2&Pyca5g)*L5k)H#*EFr=nv>*-ZC`vo$^F-Fg^6EbH6A5k783a
znNzu>F+YI=84UkLK_t#FjgKeaseC|9lzuK`a&Ehcczjl0E4kWWP&F@=_lEdySt2Dw
z;l+Z5>0^Bf`(J3T9l-kf6(SAtM%A25_#V&La(bXgnP>K9@_5B~!e0+;LwS`MCxIvj
z5xtz(u7{ilDiV!+nNOm*wZKh?Tclg3RCKq`8~|wvHwpD<gu^C+eT$rc@z@yKuC)M1
zi59i^3*j4)rU{#JDs<C+%~g|Da8TLyAHq3Ef$hqjZWZ`y;M0Z1jnhvBr|sX0>WAB!
z-ln(FArcQ44#@vK<$|lIngVfr*qYM3WBDeZF!@s~erodlPZe|LEPkr%x8n(?3Gsfl
zdk{&u(fZ_aKqueM*{*S(QUj#%#nxlapI4b||J;H&s7WdZY96lD5}dVHSsjyLiz;cb
zkYNF1HM&til<O}J8cdz<boPP`fsJ|wY?wU`qX9$mhym3v)XeRBpVlZ7A}yzUi8(%@
zc=xW9%aOClvu^=!en&0bXIvMpWX~5Ux*ICc|0WI4`)7|7=d_cRm77+hDF#<HEBzaF
zVX+=xb*2BF^&=07^|u3&%?IHZbC$o7MVIHTQznijD@|SUpKwqHCv%AGXLRe{E9nUD
z*MUldlNUbVI84D!^11oimtIz{$G(W1R*-InGM=0t?C=Q5+4)SW^OVoYt)y4Gn@)a!
z+&}53%V9ao0o41;_Y?)<2G+G$_yc$M-xyyV`x7+L7q_2+(kws%lf$d9)!<2<fS)RG
zUj(OP92ENj1y7r8Ia9uzSAhlVWe@y$pep*4z3c@lneaM24c{g6X+U5}oczwmPX4%a
zOdGH6;Uw9PWL)CbooQ}f`z68nz6jr61DXgnuMMQLAIh_NA?@_kwxPFQKXN_S+4G~_
z^Y$IR&l29zndM2D>-kodQ=5-zakPB8jVN<lwTjM~VwyWmZjHalh_(GBRIs1pW~LhJ
zA;S_S(a5GVr(>X_;NSFwS8v|w=WN$el3YWKdn6n?^UU1x++as{(Dy^ct+db_K)l;&
z=HCMLU>xQ9?d|Is9E*!kP`5*lSGhB<^zkevX%iNmZ+eETY?$LQeR{==M#Ao)(`9~K
zg;YTK_GIczo{RFWO^)WUA?4;vlh3>O$dIfuNBX_OS0XY=2~l-D>xFliOBmli`I_G@
zET=H1Ue-nX*_o|EWL^X>DylqdHJ8)XaCM6LzidmI>izB*Ktic3&c$bK@jC3qUb(d&
zPTjnm>))f*E~LH66ycXP9banPuya<!ET>_fR<P(wL;|6WmocOmNDHq7X;O?hH$PjM
zQdf34IUB6u3es4y-Zy$E;yM$wU`Hkj>c4$@X58JEC}7`g9ts9{suRUi1yhqOPopdM
zHZS5#5V?UM)XG0OFgx~Y{c=1r2oY5w#{@#k6W>ag%HLbMN_zv+M8dgA79y0fS;EX|
z)yd`Ios1ekq4mOhVKSfp0a_J6WZdOQ%cT9;YNeIWoXW-prjK%!veWIE7OHm2DkRju
z{iIAiNsG)&^GS~^!*oxJ4c)q_@RgIeK4{(kJFNV3C$q#Av3k4lD%&VnUBdUtKAYuy
zs-*UPh*Ju{D0w5rHSM0OS&Lz8puOXa_<%DL%>N>{23lL;#Db;>ubdamBR#WS9ZdVH
zOAx~3gXnWUNa5@@us(;<&?TY+4zDvew4Sf38GGvd#tJ<i-~%RZ+}@E?8Fe-C|NO7R
z`?^okZD-zm5;KYRaC~u`cX%zy5&|;la^VLvuI(PznRt)>zQ<BfofbQ_Gp;}T{60@i
zv!S7KC?gbyn$oY&NZHKx%HMU7Y_VKLzJI?6&umnDKaXhVZiP1XNw~0cii+=fXWiPZ
zdqGG<o{~PIS$?S@YhccO()}Umdd~)IZ;f9oIVNjIk0bQ`$^z4FfZ34Wd*@NzHCE}_
zl_=Z6gfNxp`o4ZH+=Qu6-=*<Uji=wA?awiy9?bLp=Rz|8xX?m5PG~&s5@-}_V!it;
z3yAkT5N<w)hWGR5m6?kqnH~-~0=^hJdRrq8nEp7}5vn#3hxj&(Xl+Hm=i(F;4_al_
zbK*BzKP3(CV?@h6NoN1`>d3J93K0L>(tRn)xDPboPKFB&_7}O=dQ`8?8R9=+S4f?>
z)hCyJw1jo}Qoxv?dv4cm(PZ4!cOO@mQ6^4g;NGL#>SFPM{9>R?gA}Yz`Gw&GB}4a_
zRkONvLNcRUam%~6%~rB6f6za_Ok6;VaPtfckNFJs<E_HvUncCraKveCz7P!GKSf@I
zYsJ?Y64%!Ar-o8p^6z+Nk!b+VHSyPI-X>M8bo}Y!=Yx3IxjF@8?mis0rU)#H{}){$
z3NEC~^w?)zQN_n>*!tl=Rk$C}WLOWxy3CYnF$MbID4W4u4<0oZ)?{@#qZ2wW1K}H?
z0%`PBw>G9Ik$SY`>H7L<AQkwKXKSoUZXO9i;jfw}7jL$0*gJ4x^&xtMU!`*T>JZ;a
z@nr>}Xjl`ik0=QS_K(&S)L0mXkm*IUKeP?NJvFD8=I~jwqu)OR`rnHv@A-SD`A7&D
z{1XB&uC@|R{xh_uo@X8h3*maU|9hFJ&rzwQIF&u|mLL=RDZ70iXDw1tjS^|d7Ur~M
zRhhyeLFOoPH(b6+w-3ovL8hi*d3Y;2zC_7*<@;;mc0JR_&$`KmZgYvKQ&?UndYC)(
zErDcQV&^m5H^8}f7}fCd($h3x_@KpF>o4p$p|+SAuHWC}90Mwze9GnvKF)JQ>E1v1
z15I$e3>M8c5E{pzs+Bc4y}kOc(6!AHE`1fLRH={CBa70S(jy^hkBxs@ExB<E+Aev7
z<>>mMWhi~No=cV1KTEdD{iG=uH`*ONFk#$6i*>tiQ}AQo@PJJ4awlr6y74@wKlIik
z;MZ6_H*o&fMy0?%-iS;<xQT~T{{l&)Xlwik&JV_f)L}N8ZU3e@-QyVfre$$*p5=EY
zCR$gjn0Tr&*Q^g&w|c@sM9g3=>L$V9%AcujGW2s@J+pGJ)*THB+ro)z_5(bXmfM)q
zzphw8kG#ua>OT{x2&$tWQKZ1ajfi$6TUKM#WV&f5W<X;ME_cZrIH04mr1a1AHdvTu
zU}TgQ5_^YhSYxBy|Isk$T~fdaOdkbfllT`!2~vnBNo?Fs$_h1F*)Qn`9cZvJbM<$J
z2H+}FUIcbMA*culyESOWETq}Gr1pP+CI(KGXsLnFQacA3bH{ytXxoCdiqIgN2#c0y
zw;0KZG=vX0VqT<^Ji1H&A?Q?byhsMiIgUpZ&kr}KY@?EM&Nm)07fJeC|Go9}krX{d
zJfuTu^iRi*I4YyWvcA$WJkny)lyu>EmgVrI;opf>y(vuB>F4masBN17RmtaGo8}*Y
zd2}RR71`fZcJ~if^b>Fm?^^KMP|$XL_;UGus5t$JH`*cb5(<Lc1TM_hQk9Kl`BFxZ
z51}Wci+raT5BK6WaiH;=AE<&ku4o3>mu=f?^jeN9lchO>&GL@eX@Rf{x3p##??vCl
zyMIugm|Mar($Jj}+Jiks3>6vs<=Cy$1zN3$=JV9Qf!PCshU8K9@e#SN-|M3CJ91om
ze5pi>aYvGCd*lnVe0wkAEx5=A@Wd(`c5S9Clt&BCHI_ZIO1`u$vpI`g4nb=gO{~j9
zf|%a-#iak{T~No721%1tJ)>#=pdd%4Y1Z&ez1<~JK2~md*=;+iPs9;(t@)xGoW#6E
zMWpAxB>L}q+fmhFZC0}4Ac^`av<U?iUSxVFwd{tR$fiwu<|jnL!rFgOH@jGcvTQM#
zWyqFw|A?Ni!&p^2wOe|2M60G&@^zxC(O;rVDf2ZrUgr7AM3DyP8IOx>H6Yy8nje;u
z6T33=r)(&|)u7C&YC(gP3M4^hjB8tW-%XUsSS{4DuBK73)wuZVq)64H;_~Q_XEkPh
zN72!<6~i+&e^=dxWafIXw#067_Yq8`bxv(wakge?xxu?P<#Ju>6dYxKD^cig(CkJp
z+*qG_IL|GmP7$688=L2^n(Cc@i}HY*@TFYtJ`*IaWc-YAxHS^&hi_b+EA1eLPCINY
zbu5VLG@K8+_*UtxF?R1GWR-0ki1t(mO#m<2Tt)cRr>_SoH4&t3e;~;zQ*!{`Y*KoG
z0Vo|`_Zqxmh9d6kXK%c<GnnYz!CDRHTh^DPe+gTKWiqdZg4M2>M5_zcL@WF|{F03n
zTazcG4Sk`%3dPaWA65zewe}^xs>b{G8?%KK1HJmJ48<L)JjGSEK&wJNi@MG4ddozj
z`@t26=LUda1PgIMi5ehir`HVd5m6Bp=Z97vRk2*xVhjyxjQ!jyPUMsB%}A(1@xVV~
zAQ`;jqw2cWvbXo>AY$RnZl)>MkMqcDQv)6K!h1vUm#pbYkA7oR^Xb+dwr4%})dwAT
z8~#PgN1TGA1IPWJpY@;F#3XkYU7cqAMwcAJ=I5dhUzC#m;aV5__OV@ui<Hf(gzxxa
z#_GwcF$OmF7Y*Q2X(!VfC~o(!hlqhw;@HNJ`p3wG7kRvSUYH&oHfwPCaT3o~N7DdW
zo&8HvCZ3a8Ts)81oVRK5l{dnF2=TyG;30Sh?b{feba>Q}0p*V#T}1lOk`T}<2|}&m
zg9VdHE0>eLKN-kGBuQ7);WJYzMTUlve<V^89=^f#>Fx0MlWQbID<PD4s+2>6SfN_f
zqc>1??T15i9F2Z7#_r&$oA%87!<*rvHIai1&uvhXT*PuYcQXXQf3SdmAhkcS!k@ps
zDieFqtQYthzKdJG0~r!bq;=nDzSr#E_NA>hM@D%FL-1(K1OM!C@dom;|0Z+(xcfiQ
z<x2`;1_*zf`}9wYdcbgNbAqA*RAV4%;c2Mn;BVa=&TZ5GlB4=RJN{=Jb{~Qw=h9BH
zy!oQhj8}+VS?<?*W^qFKW0vKE%&z@S=KYTmQzj``oDcoPs%Hur_k81c!*`#_8Yl*y
z^Nbn#rn7MKUlGm!b98^5yyz8mLaY6@M9HBPriF2ekUIO>wyiLgjdxGj<a_>W*8ij7
zT}I)38HVmdP3|GvC6JAw8U0Jw+degw!ebdt@2t_b|G&;2lTk1G{M)ARy|1Ezn{{?$
z&)UZj=TqJ`z(4xK|Iy9AAMailc5C}V@xf{t<a<}1=e`HjdiTNYCmZ<azjx;UoIJ`D
z1q)drRzg}JF=SSfZ||{db@-Y*M(|%z$N!kLe?I<r@bX@^_q;9(wm<Cj8bDARgF-4U
z{Gb~Gp-lV!(FOQ3Q~zUhA6|VG&L%uM_iiI_ASKywAtZx8*jSA5zbTRb+2*NI`_IEq
zyL&}$aJ-^|%C!T%0?;MTzk0s^<7fYNr4VstmYU+&etwu0#kwot|LW(+AI-=A$Cv3}
z1mDodUK_qbEUxftQ^2!S`0WNh{{J^M1qv1>!$0xviV6a5;f)i~WJiB<$p7bf3Dmh5
z*^8eTX?MkT^%q9pUeUhzm%IJXZxN9+kZ|v&(2&elKK%=H{^x2$Boly+|7MT>bNbsG
z31lciz3l(~VZyX4)Dc)X<ud4le>2DauV;r5KsX$?<(2<ow*O_t-~ORNjdq^d|39sJ
zkC1ydBFW7E|5{oOdI19OGwLAp;!k$)fAmXWSweyc70G{j)&JRfu-!i_3ZYiW=zsqI
zuWJdQsXH+XWu%XYQ1Dy1z4>@~+r-{m$dF5p->e4;5ldu|e=R*M%Oljg3q)|r@tgM<
zOMI2Aa27ewq+6-k(}vBz7~qH}3O>$@O;p5*B+gCVpS#4`R+nPp6Os2q<ABeMcmQ0Q
z#;r${ruQ@8*qpIOUnO<aW{<GklvG6p9y5apH&;Wq=;lI<EdZ~p+bj8@ThqtbM~K3l
zjm^r`Ou7sq;gv7rxU<tK-tn``o%(22A&{}8+He_v9mHJF9{_&YfH<&}TieE%8YJ4T
zr>*zJYcJdrSmu7-PrTe|Z=bZFu~ndjO@wLzxn%-D8QZ=a@^Z!2rE9>ILD!TiRqeBJ
zYcHo1Hh4=jO1hqVuO68ZbA(YHM(O9TuQC<bPWIzqjZ+%ofpWGZ^vqtzVa@L37tp=>
zObwv$iiT_AkawH$tj!&60ZY0sN5zj4W}s?uqK^6cP;UWT%=XF7<qKq&XY+yBTbq+p
zK(DjSFsE9+|E6{`c7RKXV;9+*F#2giWRpbm)?#wCd)76YbAw}iab3^PhHaUPd-QU|
z<Ek2Ga259}$n!i$tBw@Ge^kQ~Ssod23pE*&v-vs+MwS8hrUKUhR%aE{>&dk5yU1AR
zeBXKqW{9Vlam~42`tHh!QgT#jy*VnXOn8(MSbeF1Y!Il~-gs60^%3xh`+SdS?9uws
zH(a^TI&1z`uS!(1iksrx_wYVNnw&vKd=kw9-&(iFuc9CFKO5RA$)7b`z72Ld>0=x#
zQUnyfqk7+lf5;5#T|dN~xZf8GHf4xMx_5ZqgUYQYtR~Csgsuib0wmF7=DQs?L`~Il
zk|!_Ga%1=<kNffnxZP45_&!?^RJ3t1jPs+K&HC~D8HcR{0<FQU9`A4n2AfJ;E;_h*
zqp#K&<o57a1TQhuL57m7G2KHubZcw3$b>~teoBe_o|ClSJ83U%PO}^=biK%c!Sd}9
zrJJG8g|}AmbB5lNJl0!UFvh11E7$J^HwE%Uy<~W)Ll!_)K6W^kadr&(R>ThPUu{2=
zOO0v{N*wF)O6tud&IvgD(FUM!;b!n5s(SJ0#3zV^yWIg+Y-8Rr6o@49ASA|wFx|%Y
z3VpdsL=G>&tv=q3LJr_%WHw+-YOW8G${{S8(gGbw(C0gK8>bhevIVbx)QYKg_gmPS
zK41vkgZqL43X+9`Q{Bwll)FH`(_i%BfTDSqh4a-vrHSnH9CCa=sN+|ap6RpeAX0ZN
zEizv#ee6rs0x1?ETh)z<?%e6R_pwEt6X+MF4%=rhBl=nrAvG1<ylrm1qy-iz`Mv*G
z>K2Oplke|@38tTIyd~@;x>uU+G!f+K67I#b%V}~GYE<lVJgqAGTwEdLrxRx=zfBDn
z%K?Iy`$jepk-u%F%!)QTGT!t<35|(Z)L6a$$*J8$hC31&fC;chQ75s;>Wo=-MJ}%h
zR&Hn|vdcfY)`sh@30SbGzQd?XcKzUrlBRE2LpR2E$4a>}t=}Dsg3EZMRWx%o;Ug^b
z52L-eR$I^D_u>LBJ8Q5Ix)dnm_mO6F{65lzqi_(a-Dq~Nby@Oq9PC>?hnUQPH(&Mb
z*=}xj&zF|A{^9MK1k&dZFw#c?$NDn#YuEaBuxEYC8wI5l&mH#S+m_O-m*F0X<+5j1
zW!Jy>^7HJ)<aNjIPhXfwYax+5x5*n@jlBfV>$iR1N17eCnhn6-D(hv;P2OJKo_K`4
zns&UUVm+xclu&8QJ}kKQS6=M?m1A%R@986&>(4(b7@-?QP7A}v0(&f)sWXJk*IvhE
zc_Y(|y9jwgVrFl!31KysYrpZVyKtn@a@5Ndfri1yVkzis3Urb#Kvoo+owi5i1m7vD
zxiAMB*1TC8+ig&~mhuX4=5$GS<fKsLdCtY0$0;v)erEfkvinCDRW$4*#{*j+W{fCE
z$%o*2W|nqmU+F~9CKmSk(B4jeW9lWn*gxHSEaUo++Mz%tCW#8!+zeDm)Nq6W%kkSP
zFUV;n!C2%O`cPuO8~&xiUbLpHrx@H+cgfX$EVH(r9A;5C76^v~uux8%F{WR)w;^-#
zVmWVF#$5QKX^tfLX4;mIy^nY<3LX$Oo&5&(qT*n!D*{)hF6RnFa11&92<{G_I?e1U
zI6x3wmfaJ(4`N=PI(}8IWdcupRxR*Al%$@TYl|hzD9J!*io_mjkNskNi@=<S`eS>_
z02jt2LDeq4d`yhNa&(9}K)j^lY0TyRO!3WD2dUcNdx;~_$8SDW1~IQr7SQ<{c<lS)
zvGIpfRz1Ck1brjdk3sTZEJvzc2b^bQd)`ilUshTXjc}nro?+#<jTt`(Y~5okRn3%w
zEl_<I<kdxHIY3#lJ<$ltXmcOkyiXc5BZlbDPD(;cs~(@P4$nNpgS!K8YAl11v$V~a
z+{dW;;~MN1R9O5uDvg{CPd+STqehjA{>lkFFKLTwxI|VQpiYaDt`Z&dOmH9z9U%$g
zDd6V=jQletJBx-Q=WTTVpoD}J{ht^aL({6Bo5BBGa?(XvcjvKc;e3mM5F|Be?v2g*
zHD3&<sDIZV-6!DK72OQ)|7xlAC3!!QqRsbkVpI_VEV-nLAUzHKeRWdpl?^*@sF`<&
zY1)x|^iDWC0`Bb5>{+4xa<vfw^CemQnirSih5v5LeskGdB;`2um11aYhCs!*t!k-9
z6Y}B1F`2i4vR9?oV#WejwlJHC49||jT`IKSbj_~W<cObDGF!|Ilsr>8OvS^jmvpX2
z`G+L)JHC-vmH67PLEk%Ur3}DKYs6WQW~cwM!C&efZKi}G-__I&O26PTox4I!ikFmm
zqohU73g7R%C>pR~s^5InZbSV|gVkeu#+-F|LE2OKvbyr}cHL!O`nuB@Gw@Q7V)N0M
ze{U(X@76BDv^qL%$Jjbi{^m~^THNJ~4Bg4&Pqi`dBGkRP8UgR#)Ljy?2;RFBFQ0Hw
zAqvB8aMXSHaN|bH-S<y8-anzrZKgMR67-TJfQ;n(2UG~_uY^`7LzjdKcjRHESlP@Z
zVzaOEeM0uB;R0f2CT-@@Da{`%fV_x>ZnkMhX~}mFjw{fvGGJ5EFWXkvI*nhA9~>;h
zdFsv2hXuaPn&81pT^k;UGW~s}{;mh_b&;37`Gh0=xdmM}U9LP+miN8vv(nrQ%`q%&
zD({dD%HE+~s+cyOS2Xt_y+}yz@+5zO$}#7(_91??celFbb%=sdpXlbz5m|xF;~x(r
zu;DNj>h7I;esWfs?aJ%!EDw1Qj=e{Blh%`@xYtBVu;Odsshkfe)}=pEHREK_8-ytu
zlBba4$+9gH^|nKM7a&|K6BQ)rpSw0>(aPBZo^vRX_;#qgn3-tICmL$g80*PnEIL<k
z0OCii>W!|opy<Z@k!YDyl#1O<7|>p~%W8wh=U0|Mp`6-~jHbkJmc3V_QR#?kJ+<GP
zAGtts^)bq@`W(Fe6#nqasH(Y033{~XIg(TBgRrBl*@ZyJL%c)VMb2=4>6wd{dfd4u
zEp(acu?BLoxAMGWvgRVmwqV`+TKtWt+G2&TF#Rcg=ZJ6_Yx2x9*3@&cG@^>rez}^p
zUW)vaBbuk6iKCzWGgI-!#zw!l%`1R6zeQ+#;V2ltd<7YP=b&Rd<Hd3`mto!BtifWH
zv3`$*Q>^b?^@_uNCe4KG*4<5Y+_v-tndcw_R&6p5>|{-CgBk@;<6~tsK50o)3@v1+
z>krDC^3^&-Bhri5zu@jiZJY8|lo2(YOyqQ|>=_KxQB*t){pA#Z^)x&@$`S4o`tZYG
z?iDd|#27HDd%|lZxXKftbr1UK>EO;0g`108V(7svbIy<RO2e`%%g~J`5Cg7-|Cd+h
zGHZXy?ZE0}bFYR8b+Fc_{k*1=FNax9F%iuh572b`g$E}9AQ5?{=jS8bZt#%Y3Vc^`
z5O?P@KUiq%tM%O&+Fgrky|Lztx0B1m{Gn6Tnji4?i@tBXmu57*Fy??nzNgbiMX>Iy
z-PGt!k7tAG8l~p-W1~;B54-rDD#lq;CvT?;kRCdi03#FR*uBX511Q0Ra>d<3a8y9a
z>EceRZpoezY2MLCaNTpos5Na%=ZcBIgJ2J*Z?*+`>6>z_wU&xjQ_jg69=56w#3CIn
zZ;|)s@#&9@YDSaUy{YMaW1!>I>Y5x+BU_PSHH@R=qHRiq;Lft75Y9+PE&l+k|69&C
z;s|(nuPEbU-K7-G>`}S7kb>G8)|8r(86Cnx9B(>;Y*{XYa4rqw?NOD7CUCxX)lMGc
z_u4V#E$igW!Ef$!(+1gZq?g3~oO~^|TH|Ke_%6H1*l(v>O>rJB1&Yc&^&(%mzW(C-
zE#pRq(rTMLr<3Xa*I|?m;sEHJ13W8t+8w?;{8MEJA$$0Q?K1rm#$UDzeI=Ie5w8lo
zah&n4#kc_XaWan5$G6qjxuV?PzI5W^+<o&=q3U9~q*dxs_Z=q;Ua~d(qqvqR?aiDE
zwKjO5jfC~2Dco^9#p|+Gu&Y_pUO=MUjB0QmP{g=z1eCt^^R(=1B|S-dCcDNDAe-c5
z)1+?;jES(c13Nj;ZyrhvvXz1M%{rN0O;_7Z3Mm8SX}SaZ@jmnwWr-TKz?5_?`7e{H
zK*yPe*Db?k?~&7T-Dm+k*f01<eosY^qBYJBj}m>snXN)7IB$IoV*2F~^ua@<F1}Yr
zlQijzhA+)9GGIM#@S7#pjSP<m<J2~r=N8_T3D06G(g)`6BD@P|KJjyngi*ev{1rx?
zSd<`3JW0<I$rPnB@)0n`$O9N#BQpaBu-=WMre(N4DJyJUZ}Jm2y9KNqw&?DQXWeBI
zmpb6V=bFCXi_3zW`S0@d3jw<iNgDghre@+Z*uTJl>2|iQTR2PQtQTdR9$DKH0VlDo
zTKY$h1)H^^xqK*oC0E~`L#1JP1@O)0)w`LuWjEtegD!puE>-fkD#BrAerPO+H@qZj
zvAYInJq8}9184aveN@t}RJAJs62uy?!N4!M@XOj2+6a7s&XvwkNYmh`o;z6t#xt8w
z$FV(<4<Sp1-F8|SiEP%?iPDlbzV*Y<4-o=+%czz*O_#WRS5kga)9*ZtGvY_769$5+
z_P6R3ukOCf&^23lQRQK%v{<rkjyvK1CjWIiKV6V-<&i3>MS0e7@r+ab_F)H=0LI8)
zH)^7e37xH7(eWFrnPld_?Z`G$Q#uWbWAje>?F|&D-<vC(m97qPwdyM@==|k)#n>g>
zag;xPB*8C^HP~qMyNb_;pi)NJqp5J?(`XTa71}#ozVuDSBL%~ERr(TWG{4|FX$D<v
z)3#H6uYIbuhzmF6O2|RSCa!fe5N*VDep8BzJyjnCyo17O;ZFNw?^Qai@nyp^8ckbi
z3$-rK?pEB+{cH>!R?(-oEcLWK*nWilGS|J9)R3KmBYn45@7;L^9`f1vNl;C}(L4yi
zGZJIpaXGJnkxSeJm4pz<Y<iTu>)x-~jN0__D)YqW0>Rkp^z)KXRxzK5EI%~37&_B;
zbG}w|=wo2jt6EFT&tK7Z@jfZh5*C?!G7pV&T)j%W!{G+J5oeMB=a_(9XcOAmS%3Wv
z?z{TBR@AVZrbOF*<84G_1httirxr5zA|G25NHhtr2WKoHvql>Zum8l^HD6%hQXyqJ
z{HFN!3X$_Tt(I_1mx_Tg<?SQcLFZ!MXQW1H{-(7@%<x@wq~Ruo(lUcKFu@@{TPG2w
za)d~wvG@$!Y+{W4sK;@EJKyjz^zFF+4N!{jr6Qj=|E-7oUJy}N?(qOThRtxF0A?u(
zNv#{Khlay5U2Jh}FV;bFCoBWdyF}_=#8?PJnRf=LY&g{A?o`*t#bE`j)`|AltQ6ap
z-#hs!&^spZ-MZT9U$b(TJ_T4W?%lIuy6GA<$2G!8Sr<6x8CJU_6|X=-a!S7uop~Iq
zPt+6;`9<p&M1%NEh=b@tLE?k~i2}G2A1kNZH*#rEm{Ym{>qG)S@e)l44S0<;ytq85
z$y>EupWBkNz~wVMG#>9*K${E6@0aV5D0s&2YC-o%t8bg5@w^)sXIpXg2)bGQg18Il
zBpuac>0yyP68QQf@=~4un3Fwl6i@9MI|}Kd)h&BE*s+~IYj3RuOHOaT#y8TFTul~)
z0++gV__b2mLND!s-u3I-Sr)=m#UBHSzcv^i!Y_YmsF_oq-YAd{XItK#Do!uGlB)hX
z_o6rj7)cnd+aAwk>h1jznu-DcA8(djWhR}ooZ|d2<EbPHmvR-J*gNo)Xunl$yV_W_
zUpj4%)O=nZ4t04>_TG##Rt77~4Bv!K>o|63I<OZ3ZoX|6qFl<ZpQHAZqX1}9TRgFO
zt%PBTbA@np*U4qet;xPOJjlp+N^13M*%mFih5P-K6UCi4>o-j1W?p*iiCDTt>%>U!
zw7*0lvT-o?)v!kQhl@nH(QmuGG8+ec&8^(zi{d)q9p?{`ZhS^TE_ovfl?PNj3F3FX
zw|Wv78T)?mCQG=|V<8Jl)>`M|9mu+}S#V5-M4E<e$!u2#+K+lH%|r|4autdn7THKZ
zcHShy(O~iW`xoWW4dP>vtUHdRGMv2_PjC(&hCijXfWZ`)HZ(r3T+TRIqqAe1=(l9)
zc@IleT5n4h<fo4Dh-)m#az#n>6OUx;)6Nohgm%|M4{93g9#8N7_zZxE;iD9XPI@(>
z4WV+tLLWDr_gTcfT`fgf$hl_&2DS@6hFDS)dB%Q41HdRKHn?I9bs>`GL~$Bhd-e)9
zvBggOhL50N6sSLoUz4V?;v}Xfu65J-RWw4m5;r?_{p)Jn?M?f<r6WKg1~aLxs=(^W
zNMlWP{(S%m)q%|xzP!a=U8M8<=A@>a_X0vZuj-J(>|Mc4r{;=`f{>e&#~Gpxkb#+o
z@PNY(gca$)GmSCGN~|zhVP<uL!>u%-WgI7HnF9TItu4vBxcS9-en^RRN;dBy_JLAs
zn22l2_t?l%(9_FWp=!x2jQW{*;Mn(X;HY8gK5cC2nXBi4C-Q)Q$OF5YeD$+p3S!A+
z>w`Up)4PxG(w-zK<F($l{SK?sr1g%c)>+1d1RvU?V3&~gB}yo%Yg_B^{XN)i^N97>
zE&f9<!OzW>pR9U?zNYCm|G0C{4`0Ho#HV`2%8Mfs1;2Q9Yr8gPV6NI=Ep~^K=GyI;
z$oEm)K~o59Pok0dXWnH!#(PQ{aE-AoZ$$s_k2@QFhS(*mk}#@DRfobdV5a4L{G)vH
zVhy7$8Ky*lV~NeYa+D^v?B)AYU0@1?ZuWcg?s~Lf!m9q|57F4tN57azJY~YZcU78C
zr*ORc(5$%w(v3r|uR)p`I#t^oidN`^Jfcwf-ji~YeIfY96sbIS>kG3yt4>d*$n+nn
zU*;eN<mPyaT4oPs*MW)cii-R~&sCl~8%N%Vvf<XwN#|fGNz*A@2z%3&4E-tiDV=O$
zSO5GdG|R2@F-CYah?cu#t;#%4D#Cwi0x;#iH|gy&&*78}oEz79X_>xR+a0Z2Gpr`A
z)R+VEdp$WUFGzEJ@d;As(2Mo1+G376Ffc#iA8Ye8uk>A#*J{*>mm)&vRxD%*<t=31
zFICNBQHrH|rPce3RoP>BTi2U(vrt16cz6c|nX46LmE<td*1!bATV}^w9dg#ZUt(PW
zl*>+P*F5E_w<T?Rrzv7P5A%C`c~JA+x1yzHb(g)4kF-FSsBm4GinDHW>+1pHLo=|(
z0lZ$MX!zK3s0G*M<025P;`lEK-62-7d=2xTn?vJEZpGR2_uh>ATIO(SM(E!JkU^9A
zCba=E#u8K4pemDDAF^~P4FeCbkFY2nkA|)LQL!_|=gWElBm>ajTaVK6r*6{3&Gx5-
zZv_PO`ZCC&dGPVVw|9fj0i_{+W-}o5b69MTLeuJ_-n4G{cNraT7p`@RxE5WAfQLU<
ztSvf7JH0MNlX#f4S-(U-2IJST&r3bR)saaTf$uWNT1bN1D&O6ZrMU6@V~}Qp7-hsG
zn)*2AcS8j=M@;)X54~oDrzJs{g2SZ-kV*;o34ZRXIeX~-{c*~W_ur~-!8+6xh{a==
zN4CMLX9j1d?+wK)z>!mRsRqTHiRrR)Hl)oU+^0Z9W%j|ldF{EjH`mm!YB`L*f5BgD
zZpupouFGH$7||)dFq?oI%X7P|@t38CmgKE+oIx%!#7Y3yWt_7Q3sON|FdVFJXKr}V
z2zSV^DCAPwil}mD4j^9OVO=;avdk|2!Ki_fw3|doK9<M&?Z6<$X8IG4T5zw#RPmMN
zXLD96iBH8_)L)N(i$TL|B<4(x=PiMa(Sb9jUi<dD4VA^d)wm)Z+F|){2`a_O#?LrZ
zl#A2Y&8vqjuYT)H=D4IJ!Qo?;YtUOi`q=dmyGOb_gR_kW(?-_^e(%&BH}h-{Hf{0A
zZu?L4?gm0HZYibeoSmw;WG|39kmo;fHQq3OKN4qp>1|QtCKHn66Idc)d44`^M@(XK
zB=h?r_T8k5VZf|K%|0I7?CWrBjOk&k*@sFN9BoQI6~8G~@}>YA7``+MniSYFkCe2z
zaIa|itu=a-O9=~CcX;~s%B55)=wj93{JEj;ctQ3ytt<SVT3}#Xbigrk*F%%}7carO
zDup6EL9r#~e4ZQ-V3!W-xTeFB?d$meZDSZ>yP`fBNTTi(#a)nVh5v8f?rEo)6|gVa
z;j!EPlqJ+Qq)lj&F4@7p)R-L1_raAHFS_>La~1g*JA`XA3pPCLe}s3!)mNYvWh4+f
z`WN-<FTsfHtev(|3Rsw=P&%@7@;O(x?{sOe*=TThW4dt(_zj#$w)m_u1tYJcnA5^!
zZ(>Q6^Sef=+j%prNa64z#|7#Cn0pb>I(L7Bs4g+^ooO%~xQizzUClub7r^FsW;tZi
zE10v{A~!@UERM}o`jph&@^K>NefgJNSphv$ZY>~XabcAM!hQ_v&KR)Qpn08g&iF$R
zUvb%)pXSzEDtB^Izr5~sM9Z|<&pQ`SwW<L1To1bM7??600Si`_A=JA|I7a0RzNh1K
zZjO7^{rR}nsNZU?EFV6hf0&$DZ;n1xpQ3B&^ihHMo|_ff#Sin3HyC#Ln>)U|I(O-|
zx})EZYK2IKOR0G}e)V|gxu2Iloxa_JD1p&rQZJn|t;h)KF>DU7iGcLGP!xyHzt%E*
z<$hxeP&@|Olkf$6x=%DgtwUKjR3IZQ(7ICemWF8OVuQ<)RLoZWwE(ktnW!qh>^8+&
zX?^4Nw5<<WP+_K^{=zwHH^t}P+AFl&!w<KT1(IE_&5838e`T*l4LQmY4)i#|Y1m#}
zYsrs+wp`Bnohlq!V$t|j_)-IRs<c|el_0Nu>2o3@H$<3AvgUcTur~hZFI9Y6=cjk2
znkADtBVBO|9v2*|RdkLX2p1lT5H*Y~BfmWn!}v$(ss_lZFf-&F(W&u-EhneDo}T(w
zVKxdYq=&Lho3y)3@)c1H9r;xlS+=NyxJ5MUSxlbcz?Z&aXSoz!UMM`1di>h7)WiF1
zeoEG>kw4&Yy5L&B=K;Zy**2Kedch3iByDWK25PkQ6D#L1PnvoFT!=5|kt%0X#?1*i
zN0gdp3CXt|CS_y1vt*-Q0}kH&8rKt5K^9b+RfEgrzT4Emw30eIOjaRNZW}jMQ3yJQ
zmdS7HAs(rE*S|nTn}?d_CoB<mIZTM(we<(pMg4E2EBAJ`Lz?}ZbfGa!uE;)cF$(5F
z!8qQBN}#++4;l4q;u-~<a-VKVoU&ExB(C2T9>iYK!q%=m{RU;ZKn@+W*&g{q(g#bQ
zxfXGtk+NzsM!@Gk8M049-_2aNJXCSnfpypC;7p8&W8652>dq<w{GOUgrO9QcDqEO{
z?kmx!9J4JZ?ot;X8dhuBgf0C_>;2Vjy055yfn;Oqm?~%E<^0ks#TQ^_0VS0~0Eyr-
za%fy7pvuS>-?@O54}sqwBcCVw4i_M*+j2Cho)~>xf4Gfx8X4wq&GJDz&b?OXmkA!;
zCav%U4W(KkX}E<Vtm6qs1b8e<rf$7;3~B3<sL*iZE4{F>%11nPQjo))iNMhVaRb(I
zNLXp_=&KSN+?iV#Q=wKvp6wui)c_AoBl7!Ak0FgPlKljSq6$#;GmfIQ&eGl+{3RXs
z#u>tT%!x(jFUyK#-%1z@Z1KVNS7ulqSYVLjU+Z%%o$L6-TPq@q4{9_7#p9#6p~>6%
zfut(Xb0FnyEe1@~Tb@Y?0ic)bI^<yOR^r=M^)}B|wjJ!PVK`lmy|>i&7fwJG)=PZL
z+{XrMumxRIwKT@;aDwzvYvpLDZsJ(JS%g^D9Q>z~bpN?PgB!fuQMtw_$Y@I9?i7G@
zl1hvc(*g<NHto~`ubh_vUNRI&Ka`m5exHb!9rG|=J!?Tj^arcO66#ft_X(!O5R=Bs
zFy+2;sCBREmBu`3t784b4w|>vU&5t>82!?s(Ba+;as2k9-uLP|wjo|}|Li%_rVc@u
z4<-ng1JhfRlc}l*#*Nea8H7Feqe)0treP^R^v?Jw<B3l-`=})YMwc|J*wqBXYYkr9
zrx1AwOx`Ta{3c(yMO)E<R+B*Z$t*QVpO~9q56ls^Wt&RzSV#+}LDlfoP>%B5xFj7)
ziH!qe%N_Rv>V^aIM{Z&hcf~%X==A7dQn+Iv2G$dj6%4t0p#}F(YS-ni+ZAPe*<cZ~
zz9F#FQkRKSj!qIuE9xvA9x`5zdWghs+!6q3R|=``YK(bI(N&djO^Vg7yXe0A{p~Q?
zM-_RNbn@7lXU?`P3$kTo{w@EOIBR-^W?iP4?dKnb{=n$<q=wHMpo;X;LwIeNKk%1_
zyxf$k@bolg&)RZ*?=?&26`3I<{QbJOkJi?IX#rf@Ijuaxrp<B1SCAdl)LU*dQGIy!
z^|)Uve~Aa_4Qp{don7B$auR2}6F7X+@MIaWth_*5re)-MuU2lnlA4;;(eVxWsMzlZ
zL2*inP8QFHO^@RRey=}xb>PTS+?ASs^_OZWpAHbQwBEVE<OpTIXuE-LN+Dy|7RCX}
z;<$%hv<^RhxA*Co6}RyoC{PB7@-|A%R;AAsOQ{L<cjqYQv69;^OV2D^)%eO{C+U1X
zY#dvXFP)~vqbnB>ZpZaP^mI}vgC)%Ha-vadhX?Q&|BEsw&Viaesva~%c%z7)AmIY2
z>N8vpIu?p;PEFQLT>J*Ovy=YYA)Af<sfO9)HuuaIc;}SMtJOP*ktO&j!lI%$4`(oh
z>Ue7@o^?>lX0MHxt7ncU#p(;x0SBQK=?$ORp>G|Y*NNNkdP{_no-?>#=8irdrt*(I
zN_~$u1p6zxY{{9^?bze1Yfy1;$4>d4N6rx2xPw<%TCdXJs83H-(MnJojMTW^i=*u7
zZrL8&<YQIwTLgT{;so;}&I(TqVR^z*t(#MSp<s$iaoiA~>#b4K^ww0>INAB~{IE}u
z$q@nIxQD<#EpHJWbTp_nnn2nPkRe@9=>uob%AkwlUaQkcicb#5=~i(CYu4_UD2(p9
z{1)f8kX&};EE~YRyS<zhoadd;HYPBSE!Yf&4gl(7pqr-#t1}kPj|F7|0_g^K6QU{;
z1G~?EI(3<rB7Y~vS`)8Pm=Ak~ev)D_WohCXIuvpV8<aW679(%Y-O1^d9h|uCYIyit
zCj0p`2pkZiv+!*VI|#V?)z{Uys(32hP5%Z&6AZ&&odorg(I2L~szn&6<~(!2A@p7!
z8iF+K#-!4QlqPnfK`|7kZ4O%?XUE{u{!sSTZQd}-ptTdDE)R_y=Zkei<Mq_tK>vV{
z?8bZ<Z@Xb{>y~++J5+U&geZ3|<MG_qOA^-KM}dz*g2XD#w~mzR#l&X6TrV%)v)L2(
z?mOrow#Np}ex_NLWKUA242Y&5QGbgmaLoXr_Lb@B;eu#(_*DAtB%qcm%x{5@<7xTc
zDpw=3-X%kQC6Hx1|JCm!p_wnX_NTg;2c%?gn@C|6Lq~Tir*(gOS!MwdMI<4Z%K+jZ
z!CS9m@0G9wqK4fz(3cM#s9kt4j>YCaS&+6pw|s5@%hdwhCWYy5lhkNQu;}ovW|=1@
za_Xh&s`CDp#|c>+{YY$8<L|+g{Oi_<syGY+wktD^nVve`Y+n7*+^QNVV3de9N5#EJ
zJi?7DC^~%F)pCwWg9pUVZN_THW1Xbe^Aum6f4{%&$D&v9K5(L2Oik&#aMwRrieD_>
zMzywxrCmn$OgC<Nncx)zY);R<hA=_3jvy>XgVK7q>L(g+oWaHfGG%a|!npArdtE!|
zi9*iTI$c&Ok@F|*II?sNs!}TJ6mokbw;jSe2(mKPDgDC{r}?bqN?{@Q;VoUKiw@VW
z;x2R<Fc-kq+aZnGvX)k}j*f<JKni0uy(Z%gGLa3axJGl}<BWV*fVdHq8?R7kGt|Ic
z$D1-RmVH>F>Lm*x<ZRfA>~!+y%?5>L;EC3i=*wIrqlHX(9QGD-cXJ*0h#yUUp&K-j
znL*3SAkFl_k)@`N^NuI=3L1u>Tg+QTiA;_qA#O68{(4v3jsu=z=Pci*#5J-zvR7Kq
z1)8hmQ(h!fWO_c5x7ywu<%^xxyM1cWw!9r^<G#}{-8!}_G_A^!K{aycafV7bh~`TW
zj=4->MVOOlq7M^gJ{fA(-Py^LC2+xUWz(B0;XHTr7FZ$jnuF7|gRj=^)EVOAd*brr
zR@^FHawWLOukY#`@#bIfprRs0l8e=UfFd5+Cj|DIUCh;HMwB>m1Gg!E56JtMJYlAd
zuI@x$@I#NKel8?Uv;=}K*3M*lKd}mV-V>jL9dA>=zb9=qmL;<E8D9UilIC-@dFaG$
zRAm_?kAOd+Y|79gqBD~Zz;f5ye{y*WW;?m7Z?sQvO(tmYhxKq*T!;Z~hUw+2vIN{q
zyNNlqx|stI)mAaKwCM}0RYyx*Uy;ig@+~2cSqR;~&<VP!MPxTi<EK8iH8YOFsV!xz
z>K$_J`g2E0T%Gn&J2czELpz?~!%^nLa@aWi`N8QpbC#8rEhVoTm@PY=Wdn0?>YPn0
z3tn~sZvy~0ngSJOOOD4cXESD?u|0K~^yE*;uzNv;I{CJ)jcCOMcqyiFRmOw<>dp@W
zj3^$an<B)r(UGxjtJUAC)c^FldVa;t&gL#PPh?#{P^5lW4g@B?qf>WDw>_9Y?Lk53
zT?ZH>_M}<wzG{<qHlAIS);DKR*(qZpj?<{o2${TWP|a8yJhuCke%_EgI%}l$Sr08c
zys$<~`K<GxnK|;%ESg(}4x45qGu%y-qkp0O{GX72@2s#df+EK=V63ZUSf^J3!R{mO
zx8wgE`4%^)2w!fKQ-u%jU@DJ}Q;fOdp=8BWsZh&~>?`VT7`Q)F*UgHhmuN2dZ#R|A
zEsbOV5?tTBPTOTN)PCg>In9&V8&@B_o;YkibzIcYEcNXT=YYW$zy5PG5C75-$mjM1
z4F{6z{GUunQBH9;2|fse0G^t;U+j+rsGB9a)oRv&RN204A>D(?Zw&}dJT-uaY|*`x
zp{`Cph&>ti5OJNpt9oWErcsh?G8x(^1xDFH*H6&W&Ku%RG~;yvXwbFf;C1sgGDoV!
zYBPW5`<Uy6nziDabcf%REN)zlVU^*CP<}W;S>4M$*;X^Sj5q(CSiz$%(R=*eTr)=(
z)&HCz!kakxT3|1&sgtHEVIcMNY+`iIV!n3ASJNWa{?{-&c;%J2`1HnRWP-WBu-S|c
zI<0+IE!E%}{1Q^xi|WE66AtJWVyD@(VC1OR=5EThs@|m~S<8(#NxUZ;UJGz&l;-|}
z$XV@}13VfmFN$Ezu?jbFDLJ0&oXruHTXaJOA!|d)Ix_AZ@Qb_8C@z0(wor3UVAH84
zZcgCK<T1*!IB%ZWR*U=#$w^m8;IB!q^tzWBWaN0TdnNChA&!%MeK}O;9@5>fimkXu
zn^{5+;VBnDzOX#(QtwQoD)IdeLbG&c<7858l*^}`8SYNnVGp|S+mZNT=2~3(1p|>^
zH(8%ePQMhK4&tZ(F@rv<A3m3=s4UhE&YHN#T^)aQ`QsZGuXmIx&mHu~+A3!YQgauD
zs;hdl!?$vA0av$u3m9>)zhN;%Ph}c4%Gsh4^|M1q(12LS+j9DcZVrnOZq?qf=@SP!
z7tsN4lb6t|XQs?LKtnpJ4;n#F+N-E)FSdDtBF_mt()$pp+oCb^ft@1fyS+6Vzd%cY
z8X9XqoshSklhCI-&{@7EGQm+;nw6H-MC0e{BvTNRg@&A)se8rTx@w;u?W-P?*{QK@
zLc+!_$q@Tm2^f`7q-*r$-gDQ-uHn70g~^ctWQCR*Mn<u>KICZ-nFGy1zt1at4+2M*
zaT<?JCv4-dlb0r|Yo$7KErYx4>CG!+^whNH99Upor=tbHHn9?~p9-mO7(r-ZTjR^E
zE6!JA$clNzx>QYgP_-|?nT$?Q=y(b&;>I>5aRzC*-J0}Mtz@pcN14=_m)~AfIN!;8
zrv2E<cBQK+*7#Zw$AJm6&v#vy*o9@j2Q)D;bFWeS4lZ^9rBXu;y8gMe@?n;+RS6x)
zlh;T(Zg1NgmTSp_2}z5)GqEzcZ@TNUvgO)WC7ZWsHEi%zw}eVIZDkW%^}4y5Zjm+%
zO-?Wc*N71%7qYjgf5)aDf7kS?VqwG;_g1Nr4qb?U2m*h%ak?AQ!nz5b9WJ<JX6jqY
zVOve5zXn^vCd?H<N`6>C?T?vuy=;v}y^F7tIKagd%2X8*aA|!J54H+pQY`@~*O2bM
zj=B>0SIY&`{hlGouSEL{07^T{m^|b258m!=>&}^>QyrZ_%3VX@FHIBEA2^OwdkWRt
z4RuRR3=VCM598ZyM5ej!MvGZ@7?g5ohau9B0$<Up)Kdx<VjMc-KTW|AD&n~f+H`G)
z4vQXAuWFD{MnkTBuCasPO*BJW?DpcGmQ1@WY_$(`lKPr;`gw8rC_5-TNc^(3R2%z#
zEsT5EEFJmS%WP!pJ8U@wWqJnX4@EuNx=W}yw{lUs?L}t@q^ct&&eADwI@Zrl)=|(t
z*xHiwZLv@xJ36yDy!CN&-J;v4_J$MY<6;+@smHwS<SE1}2j4Mpkvrx%jGv8uFS|I8
z>}kk>cwIDH*zuAX4i<J^D9_oqLeE?qi;4{Hs2I0r!f?_vxDM)+w1aW66K`yfmxn_p
zT;Ss3Gw-fpDZ`;S7^bFY;t|XPSG8O1{nVWMilPz!t<Sk=BcAhZ@;E>^YFPHiVJI}5
z^R^?OOOA(%31=y-T>_4LtheD}PlPwAxP9&R8T-hCY(K#L7br;{*B;?@q1P`L1HMlm
zunltS<?I0Xd`Vxti^*mxOU;-*YX_*(J#`cBm0wu#Tq}@M_G8~%sAcPIXHQiBm#X@h
z1YF9;b*X*%q~$P%)6n5gBcxB*9t@P?%U5U00dHnoytZMCyCZM!e?4t5FBR94UySUj
zkbh%2$a>TyAMvS_L_x#Bx2h8;pB#K5Jb~?D$dWxo5|WXAI5^$?#+z8tuVD__+)T%h
zj<Kr=OibPW>A!ybtE3b3VX78&Vf>ar3z<XYjwi#CjyPXw*Px#bG826-XTvu)8}ySX
z3W(9`$E%7L>EXYZrHOCU7;_=1amiKCa}s9v!yH+_d&zU8V=vf5-M|+o<0!8X6o18I
zo*KvQS#wma9xVRN**N{@?spjDWfKN?c7ul~8IoGh{5iqAA>d@3?LxZz$6lHDXXuQB
zT%%RQO}4RnK90p^oTd2UURal?uUWl=nC8dyyN>jC62%^;pFVIp*tXUh#*erQ{jwG@
zZJe>e#rD?;t(_bP=%-6Ga|Ju`DBOM15J!JD?Lt<{1LQ)TAT&vbn(LC#4bmrJBB~l!
zsT<gACFJ^H-T#ZUw~mUcYa54Q7-3Li00kt65ClY!E@5bp4(XImky0c_TBN%{y1N8P
zkuK>*Lb|2vceuSp-}if;=bvw_v(}s$IM?3$>N<NT(LZ%0+U}4lPraN+)qP#n<{PA4
z-`49a(cmxOP)78f!04jO-JvQk*|}L;HSozWmmlp|*D5Fcz1(@M=FF~<cZaEXCi5A2
zlgN1T(1r;L<!W3yp7L;9K=gY#?!L5w)Htg+BF_BR*sng8G@a8~m!3n+@AH1toH8g*
zOEr%)d346+t{?1#;etQDY=M@59{#Gk{+NaRg?afnQ*hjS%&P?@Yk9I^TuZ4tEvkuS
zIW$a;^fkw?KmK@8qPTs5b?{*q$n7@0+@#S>xaK<dye$5;4i#21cd&#KEbC1QM*ZHA
z@u2!?@X-c_eoOt9Q1;A|;XCt5m}xINMpntgrN6S}o5<zA8j?sOQtP4~-eWk~WHcTu
zQ&zgF1oI`K;93H;n^V_~)iZ@@w(>}2l&UMbW#{+9a|QwNdXn-^laX7Qg&1B=GyRj~
z7E9#Chh10P6aAURmvHL`35|BliNO?^y+Jw?`&63&yBE3Zf}ic|ntEh+KW2)*z1J~k
zv0WPQDegQjCv%GU@*=ZVpusW%ulq~SP60;U+%s{dzUahV;{(=Ur*m0z=0HZB<KUmB
zEj%LAh=`{raoH-LCCzVt+RMzuj-V+rh*D7Z<gSo(#S&0C)t9vlyW%$83s=uw-TZo0
zw~7CpvGdKl*Nn;-O|?%6RCSXM%eo7I{s0+^1%Bcb!F<6v%fT0kqcL}f_B)40M_9xQ
zly;sBroTCQx3!J-0A!$^GWoSsWON}zZTsCDBbj=4OID}0SRPhwpM%2ga$UY8Fi#kg
zw+E?YvXu!b!l;3}>q!qYsZ!HaF)tax#hytR>8qY`_oKnEhUek_X;BLM;bBsR(WzBW
zUtmeT9VZsb4s~}`CFwz7R~7np%J$ZLeDI}&>^5apA^T32N&`t~cbpPqJyN0brfAvf
zu_y7#yl;QyI~cBRu?#&)RX_y)<@-fp53_F?TyUWG&+sa(9tnqNMbx`uZM*ew>0`Lj
z0<~sa>CatNqeiB}yX-|zBu|d6#vcGhZ%vt~1@{36l{vplThAy@XOf%JTXGw<@EY|l
zvelDB6dUdH-kyQTz+;UhX+;^K3uLn}*;C)CpDA|yG;+}s+Z3Er!4gTD)#Jp#!Q$H3
zVI`Vow;9%|#4k!>45d9Cc(n&%?4Qdj<dpGxYkai^^$MO+x(4%V`%Dj0+7D?>F6O3<
zo4TJ%78N-7(O8AWJ-6E3qy4rFF~w?1n3b%qVsG!xc6a;nq#-|X*Q`waBR5ZiQQE;S
z+?8eRb7qsyP@j699xk#yg`YErhjqHPXovyPP#Nv`ve6P_v~#cXTun4jUushA=0aVT
za+#{krtd88@IKYJo&0-Z!RhF?MWZg~<W&wA$oYtHpV=b}Fj%LDg)xFxFXXQ9u`0(V
zskp@$Nww3!sI1rPvH~dw1Nr?9U&kn_orlhA2bsZGJ=?m&nOgSe$n(LE%&~^Za|8N(
z4&d+R@G>m{WooxJg00$de$TQYjhk&KW0pkaVq+X=czMn0LN+OR>(e2LjLhff3~z_>
zl0RJ%$(-<Y@u~0Af5)4UrC%X_JDEl{>%N9&v*U2onAld~I50P&Us%7FDK%Z=r;=}6
z#uF_cfHDa*XWS)ccaY`Ut2q*_=-F7T!!~g<H*pyIbok(tlU?57uy)|pf_9#em0^DM
z<qK>kOeiZ506Kq_5pcvtxNlSN3l>vRAE5P@PAEk)0nHx@r&Qkx-LzQg+!sgQ=t$f3
zB(Uqc;uZl7cS>K-?STl}W*A<6acd3Oy5_M%uR+)hv9PrZl3mN0bX1u=C{Iw{I?HhO
z*5Q-O1K8}V%TI&TSZms`)@OV{;L=d|evzN$2GN-aXj3lbRS&(o<3Nt$`;OY%_H0X-
zM3gOCF3tXr@@aV1FLyssK|6`L+Q(-Nx@Ak3)^&L@u}>YC$@#Tkh%VdSrrk}x{Y0!u
zTEZPVlvhMpP&AI6$gM?6Rpcn`BP}~vx);?&GRyFzE9KB?NQ#`BrrSI&mC4n8&SQc}
z0Ou;2_hrFm)jj1a_LO(0!mI{BAecI5n{7u)^u*>nc03y!XU{QMgFx<CgMr)p#vr+m
zCoFqV;G!gp|0tqivq<tz;W25qXq<a?4oogh9N(JvYYx@R9eFy}4f2nIk4b#HcfP9>
zw{m<uas0+KfSIQ<rj9;3ywQzyo*I{M5hO79L_k5NDdA&%&`Z9v^}+?%X|m4dND3kC
zhUL4&(-ye*wBt9o3Eja>S1TY=c_<?F_@b-JdZ2mpYe%*!KMwm~j%KOEo^Ld_oBtF@
zO<^+t^JTrEiKKYhu6?GHa9_buy>GSb&T!VE4TP2WrR$dg!vVYf)59-Hxv8nEL^5;Y
z4^=c*7l*0VQY25Oh+kc?8Y|Jeou;XLm`*e+1i$Lb9Jkl=y~Um>_|!SfRcA!{sw&_0
zyIJr_F2Ap3!CoUw{oXC0dq$wN)r6dJt+c6nw}1UPd&Ez<*(!&7vl0uRD*APZ7fq*5
zXKU9uE9VVG99}+14|v8+xq#K;D*!~kw@rV_dAku+Q+_Lpriv&{9vCs>IVyNH_j0*S
zgM2sSsD>=>Lt@rG{y{u}qxn?z%%GQlx+RNewYx=J#g0tkXUAFb%F7h3p^p^b(r9PK
zC;d(x10qoy?aMiTfbL~o$*&PG-5p-hJ;Md_MsXybZVwBPzI5fh@9tW%c86YWRy074
zSIg&OSMrHqiY@f6dH>6oK2ejHy=6Km`l34&)hU);Dt#`SZ9q>+WT)omcc&?*(Xvl5
z^Hk@lM)toQiQ_%><&7&W*rJdN<>2J_o@ROwA)bEh#X4OoigqFYQ?5dR{acxNPrOqd
zUHSLV?%aY>-Hvq`GikZ%MeaXlDlX*X7IMkz(<0UFpnVKV?krNDeFDj4H>)mn=xTn7
zEuTK8sB_;k8?8A&3oz_iII3yh0p!V%v}DBdZCh(DZ(?1_Oyp{LkAVbC6TLhe&By|K
zoC(*|1Vogbx+Ykpo+zfy&Oi5&oj85(Fz=}@#X;M<Q_#1Eh)Sg5HUG2lE!WNbzNbdd
z*X7tV&ILrwP25l^My#LQl2{8i{6669AICc;=?crS8DK)n&r|d3*!hloATzaTFlqO+
z{qp6Tg>6X(*YOOK_BAx?{SR4W*_TTZvARgrdm{{ni5c8Eqr$Cpz8vCImS&1FpND=5
zQGw5B^(*}N3hK`kB`va^(&ueipUmgCtyN@#m=2tW45oU?_OaM&fja-{d@##>>ILP~
zmz{;eL!Z7LtaoRYDPIY8#ECg$0lk`j%>jMfm61Myr)i3U)tl|Q*g3J6^^Y39S<Gjh
zkoJh3&B-~;b~|{Dyq%qtbce06wlN_o?{Dv+pH-|roGxStcNq4wnkuIYr&r|X7<A@X
zLPg<+Wk12(8xP;uw_RnDi|XX1sd%e%inEHneDJa|W{p$S;vo8&HE;HrqH72v|3VvC
zkNzNv>nuLyN9Vp>XZFu+uH-XpZ(2V3qs_Gh9Zj1DsajdxD=nx#6!IS#j<qz&5h6W6
zR;%tY?PHx#f)LZssR|(0DpSg6E^IOjpGhlj%Dc<^NN?-jqb_t?lpXXc8^SI&-^<w+
z)<nuyh<R>fMN4Wjnf_+=7Hx+)#O_>@J^lg&zc3|I`F1qM>ASfmVqY;S-xSo#crY<^
z6nhmrTU<%h1Pco5jMqm^c%iIco5(zphXebPockmioszL(!%`hx$pzC#pZ0=Th1oVw
z1=L6nsl_*_kAIlcx838HX+g`5cXS8oKses~uF8y~xAu@a_L|dh?mX9hhQiw7;VJR^
zE9Zkr&TDOcMta6trKS!%oO`p$9rbtS?b|xA)<~nX1C<YNofJxEXh%IjSkeHFI7cwn
zSriWPg}HgdhGLH818EWS2Gb`ELk7drUt+4vl$C}d#TNy!rw3@eK=C^K!Kpz<9L!X=
zT#hDZ!WE?)OIpLJr6}Wkaa$^Isc~v!Fhf>4m+Z3?KIsW5ZCuXhKAlm&K%P)bTeZuI
z&t2L;4KR{ZmqwSo&XX-)ZSBYU`_oNH&I*V8I7Y&KO#$pd<ID@rgZ%36xW3VsZ_3;w
za_HXEeh(;#n^y)B^S}YMSm!UIl}sk@G`Sso=A0Ps{dBvy9^t6JMDD))q-Tdfx#2Z~
zyL)6r@*DY11#rb<c5U18yncd~fmxqRB&7muD}&84_uXyBN>-z(_xjx`FHCYXyLh^y
zGonf_R=)6b))&rKd<NckSc(^R6q@ei(TFKo%hA-JkYeJI!6z-N`Z8GE5h0WBxUe+7
z{B5q`ae?Pg@z#%2hc+a0FXK3Qf7r>etBy*$snv7e4aLPt9ZcS+JU?R@AL+OZvkQ8a
z<diF8q#M24n^RCf);8Ssmh6^IAB|maY@P5#u7KZ@VUBli52-Keyg2H_h>IF)pP^h>
z#<325CL^}scyB(TOxfQA@YOr#{I9KZoOjB%&8p<zMW$>?-Gi;#33=1x-kVYR#v<kJ
z>f`cx)^Q#?2zPxfSA5&6*v4J`>M$?qNH)Jz<LFt88iR27Pw^9oX&CS02hucAPqtAk
z+%@y8rtJ=QV|9**XI*;=WZ6qJPKq(-F14L59t1&YqHNTc@rjt93H*G-eWa%D8C-H|
zxkn9oH3cpxkL=&l-3!1=#1=81UzMXDDy&=3p!4Of(pjd-XdWgBH_e&wKXub^7(M8h
z){e=}Huzq0xUFRL{rhaxK~Y6@pu`)fW2M7(1-o2X-?*DfoB8X7vzJcqR&yll`OiR-
z{r0+;N>ie3TMK-zmG@_p?fJ8;9`o-@sJ|LM`50&IA2wrh-3di?SLJ)Iz^X&}Zp)S3
z57j(!(^ohPOu+f(oyHqQlMMxr-*?J!$&WN#a`v5#Mhxz&U44~`A>MdIA2Dp}`2G~!
z)=_t7!{VWiE}+QAT?0p>=nQm&FHMZ)x1SB-M^pEYqgTtKWMYLmQ{eFRCG;azQxOl$
zTMQZ6NrI^7s8VRqP9MlL^yZ=_?YB@O8gOR6Kj8#Y*Dp`!?=&#yeok>%BRI4VJM|yD
z%)xGaJCs3_8?^K7XkIRB>yRsR`V9L@<|M81m9)h!-T0Fh1!I4b$Ie`fP1IU4%s!Fx
z3>(aCk23UIS=!vwc*?Qpb6yH#N~c}ESJo^+{?W!$Pya}zAVOKOmQ^;x&MfMAvi;Ma
z^<MZvaVNvy#Z%*GGvZ1^15a~?U~J~Og`v+lo6wZMjhf^l@d%$tZ;wCXYJ-2hPMx`F
z;c#WC7SOrMe#$H*3}?K0nUtnbu%s$n>$Viwa7Z3^=qP`bQE%~lotHdLShk<^cp_g{
z1zBl8RCZ|A5bVAyD}-|QfCO8{rdS~`0rFMcTgALEyV(x2@}ne*8ip_|^t$KRG7l=I
zt&)vBY#qu{<NlqzNUv*?M4+1Jp>R=?Oj!eT_`D>1M%R2G)%YV39nbe#q)`v^JLd9)
zCYQIGN@hn>wO_}q=Sr$0B@Y5Fwg7^D=o|kkyD~~NC6P8)e7IQQbN33GoY~DaI_&tK
z#%QOEw1lI2IID6IitF|QgJ`oOs_wq{>eb+#1eSOT`Lnml1@WB=JS&LyIi9}vjeU!m
z<H?-24$ac))dFuF)V+URm6&x&b%&X$omk}uB(I|HAm-{gTxZgIC%(>UtDB~01*50z
z;-GB;Ymt;7Z{B{7XGJ?!R@Dgu9W1E#WU8#NvflN3&Kq)X55W*4QffHp->csn9fRwr
z3To~;$}Nn!qjVqvoSbcUDmp9hOzeD>yNs@@hzomS^{94I%S=YE(J8v4QCE9G?f%gD
z(Uk^)9u~Si3&_*`HPc56&eiB_B)ge6E`&0>R7PW2B&rZX$CmtLu!IMA!XN&KLQjXc
zqQ@Bcc60I2A!g28b>F(0xMv*^?dWgL(p1^LFXDZEN0f9hKK)0mxlmg~Oyk;_b=a``
zJAoIbc~3&&CbS^}=9;w6D!H)_dSa|V@IlVUk^s<@TAUQQ#x0I{K3!ZG^1qivXyfUq
zj(xEFph)10BAm`)b_5N3)~4N}q%2qm^PPT}7<iWNwa@q>3l8#aB)oy|^^a)f?Z-;K
z9jz#(A1~S&eW7y4!+e${>DpT8wsQDr`)RHCHR`5)k=T)I`_%TOuZRA1!5BdnIQKr!
z`U`|NTeWeu<rUSYR`F5469|mTQINinBwbadB*eu-4}p);G6Tu6g!Z~iR_(KMCB>>a
z26v9CUyykG0LZ)$zW4{f*8oHG3c)?;BFL+X@T>-Bm(@Uxm{)Es{wmrHE+q|I*Ux=I
zNA%qJ!4>LMc4VJ6KFNOg;d)X+lyI5Gkj7GtKloUA1}4g-HyRjlmJHTDjBsm9{2>z4
zP0Z8mucguOB4-8LEwEjEf1tK>i@eW1Lut7t1PQ%dP!G_9{*7p+>Ed!Z;^2iq@;b)6
zt$M+a#G_TO4BIvf-)<!R_)7J$kCWzlq!lbMA!#-52bR9j->A94(XX47NvPjF(wHBO
z)5gb6AOA4p4OjkiGaU(}N~Rqaoo4>yfB0PghjI4*KNubi;BK>sQ){~sK7~J+x?!PT
zH!Cz?<*nu0$gg^njyEx<!63Qt|FAfK8n_5T+s_AuP-gnlUjA`0L*`H<bO4e6=VkvG
z<W`f^d7(uClg*gmPkehD*@{Gq_J;WX>joh!2=mb@`XmY=j4awL8<VC;3G`h5PY9y!
zr-PJ-tqX3AQi3f*iZ;sRC%+Ra3fDqL|FG@<qKyZ*)X$@HU*iPqHPv?y)SDmW{ZPr`
zs3vn@W}fH&Uc&Xd;2d~6UHi&2S+)YI5H3j(Q8)5Q+7g5ioEYstj|Iy^{}Qt7%7=da
zQ1<6wj!w-(_57C^yr$br|8*=JV5|>yeN^BGzw@pwd(5A=IF*R|#hM-dBmLT+f#}<m
zoRVnSyUzH88YMF72!K-~v~4ge{yVz!spp~>auVd0Tqo3np*EnqSFlG3#>w7fA5da$
z^w|IRrZmE%b6W!)nPOSVDcNzH3Ow}TtC*8kG>w(et#wmeOB)-&TK`XWzxk>z4qtjr
z-&PjRxNPwN%%@*b7rduCftH_LR#h$gAD^NQkpZ9Y@kVavB=r3(iG<3(hP&>FDZ!)H
z<cs6#k*%oz3s2?4QfztM;m`&brc5Xl3nfc%i?feEAfq4EQiKLjSpR`_L*R~3d8fqA
z&5d;1r;*#^PEWi&YzVX8x~opyTDSSR_m<c9KXWD=L@Ehia-gp&!{aD2joPjm$9c{8
zwX+=8=_zig=Z3b?31zF3Bi4Ur9>A)^HxfaRx-K+46r2o%GDtSIrKDxxN)SQOUf+vi
zJh8FG=PC1nAMpPxwl`(rOLp{GW#OH>%1OX(Fb7^jjSCD$vTT$M9NrE&6W(_?D^ys^
zyKEBwqr6MNNI>S7d3)T+_lmPg<d&RDG-OP%EU{uZB$9-i(z+`jJ5w6u356!4n->Q!
z{x`<v0kc8dK@cQOQ51Y9x8`TuJUWT!?8rTW#A}OL^0YrCa4IOQ`nTWole9eeFJ!R+
zD`OETAwg;qJGXHwBFf2Tm0C+h-ID5p;S?>Kx7o$o@%tegkr7-2{9*r%LLE?fau0LR
z2Q^p{xb^b`hlA2lNejbN6W^CqW)vx8oCOUV4{P?Yz=(^@x8-4qVwjbo{{>ATiWCJ8
zc8CN6xrahd80z>-p-7hj6=6Db<cd;b!MQxQK=`yOsG^bLI4v2T(IoO8S$!2x{>r_J
z0xADz-c{<eVI(i4oqj{G$Ao8ux5r!gGP4~EDA+n{(y>!KuqEZ*7}IF)f7K?X;9O#n
zD4{bZ6+W!MX=J=P;RzPx%E@O^knDTsHEQpjm%Gxk8}Zo3lz|RZG-1Lqw0aQ5BSXsn
zrJ4WwDgj4oeyWZ(>&^f>-xt4P_f2izCju}2WH0@?_@Jy?jgQkIL<{QQX$Adx?~8dc
zl<}@GgZ$NPLOyDI${+v9R@fVW;wg?bQF;U}CKq3yk9OYzHTMkooxh!bR>MH5eE$w|
z#Q@!dQqo1|BO&M;`H!;Mj(Rv=h|dbuw7?mWW=|CYrv7nVZuHFGH{+ryWbf*UAeS6-
zFP{P)bor%p5e1S9ifErez2c9UI^}4@`|m0DxRCG7cr;jrt@?e!eB{L}A5A1J5-t5V
zpeCID;G$N@)QHMAKRX_DqqR36b4gaHLDUB+(qSTbcft4tQw;m_@nW=_r=B4dSq#9)
z>CXp`Dy?b5<?YEX3q1~J%MCke={@PhiqW5T21daN2}8RSPOzFrdMEx?w_y+DJvzoJ
zy=BNXf&OmfvaXu=7raT<>uOurK_0Tb;zttGFN{&#B(oQGD$617*6A#6=mrT#$~4v$
zI@|s#ks%!)QrFF_9}OY^O%%wG!JL;C+v!Y2yx(1Hy8aKv35jmhGY!WSOsO;+WPyaL
z2vLRPEI@vGnsv9wBvpp54{AVA97q;UaGw?8N8Jpy0s%o!p9>yy7L+KE2>=?M+@4(M
z9w@F?h_@JN0x=tz?ZOmBg$BEtG$owniv4?m&6LHryd+(fcB(!aX9RHg4ik^WV<1wY
zQ&`UgZHV(^&pkruKV;mtH=`j5fbReMB#aj_7pWbP<U(Q<QAJI8^=@R=x&QQz701Y9
zA-KSVWbw26lX8_Fc#WH{!ZcsF3)rV)M~Mb<hk1<>xd%?s{Kd*Uc!b&y#apiS<lWus
zthlmt*i6Ff?!FY*Z=scsVwxojp>+m-Q&c8`ja|HON_0^~k@^l_GkkDETspjVv%3`)
zYS^i>Jdg5HsgKwbKyK`18u+sB@){!;r1w3ra6p;ks$^n+iF*hLp>DK?tW`?QB>%oM
zFRg0{jgGD9BQjnLyP|9>_@V@s=WRSE=JKYYz_DPeri(}&&u}_F;J1QK*@wdGxc>1)
z|MlV!g%U{3>B<7f^C;{};<$d+5u+rj+8&7>uxf(GUKVc;Ba0{q>rGE>R`2N@<iEcG
z6b?;+7KdZpt^Lbd=iqvXFlE%}uzhp;@h~Sz>NTA}rDD{));7kfO8^D5?(^%UM={Uo
zO?o_Lw?ZcLD{fGsE&<E%*T+9h*1q8jV0wPyu&_8N^wMmihgPQUF{`eju;&z#RpWBY
z3*>@E3dqP&Rsu^bZ<#cW>@x*55|suurr(+$UJZT-#)xLJ_~R`if~etkb3y6J#*+)t
z?O&fP*<w)Ml6}W4PwMX*2FNc9Eu|7oPy~~4RHs5JTl2FUH?Z{Dl~!lHy8-zP9SI#Q
z1;dq*!Gq!on}bk!!LdX5q)HT{LLe@pca6&_8TaEF#6FyjC6G8-JI1<j8KiF{N@h7d
z`u#lo@cNYl=Qf|GR5$#D_y9@Yz>{yrV>7a+oIai-?J}x2zcnIiWCB6a#l9yh;@Ef3
z>Gh$6lYv;y2AR2Le!>kYrqO|&2DaMAVZY%6feA5Us2g#gFnt=8X4uCuKctTWgO6H+
zY1W&0r$sqfuH+n1!@WnrhLY7yNN=FT7uEV_xe?dP<ze2y{{zlY8rIqfV?*nWd9!lw
zgF5B5Fkv+<7~v~4xbL3IK^W>^bFz1f4TU_8U0KX~0-xaq>yShMSSpn<$_=Th`=5Ye
zLsBw$%pwhTq{1odmA3`w1lk^jz2s!;l!IZM)0eYa;Zi5l-C{9OiJjs%2*JQCU{sO*
zEdx+`pxaouwX5@H!V)P9ko50(AqYVp>*{ajPFmi4C#{tCM+qbM=LSmn3Z8{=LB1`z
zh~U*f%<}C{W>=(fReaPc3GDcFGbwcuprz{(5r(7pZ=`yFK@UP+*z1+cQ0S$g^z%o`
zK+Om>A0IJ2jJA5>(csN&W2D9?3>~`zYWhb;Qt!VR`1$=CLw@C7Ojvx)gi*8>e^J?z
zG9-@M#%llp*kZ-aE`7@QuaCntiOh`{Oi^b%7Dh8Q#BVSCk`*#G6se{B)&9HE-_`JM
zLf#c5&|Q!tl0C;?a<?gnBor6%<826`B3|)RRGLMOuLThY{TOvD6EMvt>T_#0RbrL!
zYGWTU+eJB1s-?VGBbHZT>5e_#!%QPmzcJe%2Y-gwGUChX`v(cvB@%!w0o;~4JRDpb
zjcF~t-6Z@t+bY5eDs%kgd^qd5f-Ra=EM6!bUf1G&Yz8Pp<VL$7EUB*BNCF{e!oSCW
zgPL$8dPrj8JeorLKE^o~hP3+8xbR4OwZWmsBp>Q2$gyYz&+N5igU${9l^jx8hWyCi
zGlG!<tIre;Z2RMQ!)akq$tTPZYGF3CE$~8|H35#~8!|6M+Yo2xV<>8UlJ!$bQi9NF
zJJFfMr;0PjrP7X4YlQeWiUx8WOQ+5oE!}Vfb$=>Y@f-Nd7iKoh60D5IuTQ~_YLAiy
z3ExP#e%`>;pYu&hY<fu&LlAl;#A?&|A(e&Wcuk$^x46Jd0kTU+-R=70uE1%jLQ3Tt
zAwc?K9BMK&O&Zni3`N}<?|&%JSg|K57Fpq7BSQ1zM;AevSZA^^W~74Ey=AxG5gTF-
z5O6|1r4flgXdD-WwXQVwqoi}&IDXKoJp>sy7g2h&S5aV`qqCtbdyQ}vif3mgJ-D?u
zoX=8o5zxd!U0$j7<YtZx03IuanlXNl0puoFz=|wrJ{*KSh}!P{EEh@z2ukw#N3E{_
z*pq79PNhPM4ip;&;MC-HQ73N}ca<EieaVu$v`!BLZWd|?2jmE2Zdd*f*mh%34k~KX
zmykG*alVwz{wj1zOoOha`ddq-jE{Y0g$UK|tCT^(he3<&>13`($ZRM~ar|0uy@&DF
zZ+IS>3Jp<3{yldjbbAF5-5EHYMvve#uA)FeiwH-cHgy%-P-he~PCX8LzRc&S#UKx3
zJ$DHB<#r<NzDZPP?4amgIB!_SjsKuX0q`b$xmwh3*75-J5FjGD5#E3v8C|Iqe%S`d
z5QNNDv|O<Ao&1S4n>w*dS+$z)kHvQ3-!g=I55HNc=j|_5^ob78Otq_x`{g&P=@UP)
zscHt>XaL7IlInHcd#j1x|B|4T`^N-;1gR=1id*?Z0P7RgVZ!=s2~Co;N$7?dt#BpG
zUW^%AJ^DK&1_D}uLA~aHxt5y!EG=f@Rc(J^ikgH<F{gI^)R%##+yYf-gVfe;(dhWj
zx!zZaao#(xilzPq+Mjd1HBF9BK;jLCVTeWaUph3bZL&Zrs34>Uib|$5`>=M7$C*l+
z5Mb6&hP|!)(7n@Wqf*Tns}k#fNxaetaQjAQT9@68mRp$tf6R$RLBR(yP-pKYPc~iy
z($ge;Ja_umbWL<=I)XvsJ5qK9Sp*<Jz{bmTx)|Y4=tw$0-mDo0r+_h`{NbUMPuHv&
zbd5tDbc*D0EUCrM152eZg_VQ6jOS=mIS4}iPn`B1u%TSB*~M7m{AC?KL9dC@ueYas
zLwSitnh<k6s5C|nx+%)y+fMM;$gY5XjB`ifv~w^&%5u7vU@01G1(SNpM0C#x3+PF{
zY}LCTwvqbicaZRZq~ElY;GO))#4UIB`j_<g!B(JwSNHZ736@wYpU^Ka<mMK?My<gT
z)I;`~CRn=Hd9I#e+w=4C8&mtKI>EnuZU5j}v1be{UMCj+y*#4f&we!GrqZMkkXNx#
zFbk&ZTh>ffrD#<m-mku-z{u}TuNP?(f{yWqQH8%f3N5-eLuVP^SQVVM{v`)uO9GI|
zEv_{_livtMSPR0!Ug$whu>g!}YTe&-4)gW5B&wCL4ka4DP1DRd&!b78f(<*^!bZ$(
zUf3C4b}Mq*eUflfvntW~O?FGL;u+7>cyG|fUrb~zjijJVoH8AKE<T%mj@3k3xb?OD
z&Dthh@6?8FHIY_z!M9!Av{1ZV=COz5-qK*_Qmo{(a{I+15?zl)1fs*%r>r$M_POGK
zw$p<yI+dC%=dO?hm;1SAP->HD$>CC%N{wZgbDab#!D0vVrmAe3WlXWk52J5wW+-#F
zQ%WR}g4b8$(Vr_OO1km^f(_#WIW;|Rjr&7-Acgk<{*2rOhZHbD>Kq>0CA<sKT*gfV
zE*wJEjP0T8uYza=otg4yA7~0fo*2D|)pF8Oe(YV;ton&^P-Iy-hDueUFd;nqgZpf?
zVCiaXwoBl-$;U`r2I<<-vo4!jc0^s0El1&!g#&hdeO*v1MS+x&u52)wE&Zu$-e6gF
zUBFWP{R0+povxlp91U>;Pm+Mvvirkro`A{#QH7jGe{YO46ul7y;ARsJ12Hy6czHmP
z6(M6-C@nN`5EqLQ<qvexgL;&F`0jm8Ca_1|Es{{1jgWXMrWV~fcjFHcpIgi_q=q&8
zvf50~weQ`h-p|4aBe%~fTj;oEEjZ@`K>Kl$zDeTv&1&#b8fHnwyGS53He_MEW_zm%
zzFKL>hhK_du>WE0JjjJA{L=&veskkfz?K4zBzsI(@XI`x=*d}X)8}}@WA1*77>N8U
zgT}dpY(Dmah7TLId~g2IWc@u5uMEf89_Bs!8{H@YtA%VVtEFX((7KQwULDI7fTCy+
z7?2N|kCNwiJfABuanf@Nejtte3K(-V3r#4hY)(=1x}z3-8OzGsWo|Y~c0fZH;5i)k
z?F^1Ndu(``b{)OIs2nbx8z!e|J$i8<?jN+ok1G$77fkjM%_(f*oY&H30c@2a8lV%(
z3`oZA{FVr0Tu4OY9GjO%e{-_{4ep8>XaT>YVZhVXIHCim1}E0*AhBf)$4j$qdAZ{i
zV4~9ocxv=F6x9h;G!rvs21U({D(Zq@1ZRs!UP!c*uI1ZrxHbmWdl45KYM{2~ouZ_Z
zD3w5d5*m!ugIEaF=l_j#z?8iJg&4x`Q?-6+gwcTvcA3#XFhmoGGlgm6sLkDt$@a;T
zxr@_Iw3IJV-;FSy+ZG_E3`u28tQL&&JWKNdgEKE^2)Z7YC4ON!Fp<ZNM3tvzp$iPA
zeloEcvhVqx^wC84+j_L=hLrUH#8Ag=bC>zyJ{R1T5#U{!u>#*@TDjjIMgMd3yV2%0
zokNNd2th@ZuirKWVLXl{e7jNYixftCtXf0Sg6H33?xRj~QIp)tKAV3B;x<vqnX1(H
zoZ_y3mg{Mq#X5{eW4CcBW@`kkY$(~ccg6KGUwCE+I!E6?7&r=!Jl2a1UNVuVI0vtj
zcRh0=Qt+_|8KswD48@cGp=Tnle92p)NM`yxn|ooEUomVljXR8SZ;fbCm9{9VBJ(@~
zVGEXy4YsKyURw3fTMRU7?WgI9ZV9czKHVq%S<=T!x!*q<Or=m`&`f_)#LYiry9Vcm
z$PI5d3CwRj+_y3n%k^2b9Xh~DN_0;`+U$7KMiYM};*Y`L*N&;d|Lvhve-VR&>jeCS
z%&V9{@A)Jtmf&14t#YS;eR8Jc{k_-pyBC~J9vj|zJmT}`L#oS#gvm*2SLD41R5r(b
z-I0436M?HjFEsq8u*l0UDxU3pCUCtNQzjodjybKNM#hzp2DI=O7vKfl8)d}v0P#-j
z+)zpZ!*Bk$piKlcE<T48`j#&GYzEiKensNs9{3Ky!fht>v@B@lPqFFnw*(!xSOXSM
z*%h4hir$Yk16$7ZW%8tPE21_9$J?4exm^!N9)>VG<8~hg@3xQQoj9*i3<&P!Wf3nP
z<EeIG=-&HO!yEKeTXhGz<}C_TRluR5nfXzD<KU*^atQJO!KS#9HqHrZXyCrW>K(3N
z5M%IVOgUqxRY0Ht#au0JbF*eQmh(x9#HELzE!tl1>%I8kmpT~YGw3UW=zSPMUh879
zR>Ln<!-sfW^bfoIt6g<JcorsbNLUMLHn86_t?lo(SAw5UpV}L(!D^6>#>g8LE3h_|
zChmYnK8GB1m3S`x%;M-mr+qFJ8MT|?ug5F2Pee?rpTPjec<bV_X$#bqQZPZ)oc|*W
z^oa<O<dE|oX}2ZpN2B&8%Zlx?9n$%5pgJ|DFm=^EFa@U&e(B@<aIfMQNMIKCm1L@4
z{vZX$?Yx3V1*%IjXYuujqcwD99FECP34HD7u)X`~B4?8)4<|huczCfRH$$Qs$OY9L
z6B5aP@J#SQ1l}aKsBxep4G<Q_9wc#4g++%`aSA(cPA0in@+nff!jN2u^JGBqJfz;2
zWfeJj;tM&>HB3xtG7wsKPdl4i9+#a$-^oK=8#jW*kg~15a;e_Ka1&^N^T&N-dX;kD
zJ$Z9ex~;7+;5z@@fzx==^LM_te;AT)At4MQY%9;pEBSt6?*>X^Fq)3Bt$88*nF^y0
z&7_<zzwBMg3qmgu?0b<Nk3=3PG1C#c+v+=T7Qfa1=uF%@JupA`jDqjXZt!D{za*to
zzm_vZ6D8g@frWf1U_<jcooj~T`?a)EVz7ie=b3`8oTb2yas!Q$LOA&ZE{L&w9K}@^
zwRYIwf!JupEApF(lIPEsLzyH;DqC+8Vq#IshGrr5*#xh8rmwS-2be6lG=)#sh>S40
z4f;?L8odXg&4IvfPwXm_c0_3`w>EVF<B}|QJKkOSWB+_D*=Asy+Tr_=cD;OZL_=(*
zoL;Sib^VlerIL;@7e8H98wwylUOyV^AUAR(k#YyOJzxS~OEO7M#C@4H6b|fD;fDSN
zkFw#|(rZdFglbgy;VYIxmo~2_J7s?GIb^90f1|zDR|+RR)wi7<>~J&}6^}+BGroIT
z%MIbVL(xx<Fk3f`c}L$iU@QO@Sdw?%hd6)5im-!aPs~IhJl4LeN7`;tvrlv6D5k*a
z1bpDT^rp{svc|cL;ez#A-ouCfuslH{^QBt6(G~`MJM%+|Hz%wpMiBn!^P!HQPBP<$
z$Is=X*%J4E?*-t$zWO5E*LUIE=Pmb&7ds<Aj-1x5ecjM;xufW#l%?a++gs8nuqabq
z?@Wi|TJsV58mq8_R8-?e0qlT=O8?y}bQe}xhd$wxg6IaBb!>9KnmxV={>E{FP%4_}
z_G7%buM><(KcB@dgxg;{0;0${3b+g$8_W8SrwJd0$@kMb$TX6mqOKBo&SLh>YX)S1
z;t*Mae(d<556cw2STZS?-`j#9F*|!e9B>)kvQ(Rh`P#bhoOXn~cYQNK>x2O;H|h-b
zAes_hoJ&^jR9x2@US1hCChm^T&xz2LExqMoOdAEI$q|cPC&2Qwt4BR9e(zQJ-qD@4
z2^VPsQ&8iiyyB@nZuxq*qgzq}Ce1}RM`5<^1PIPa&Oocuv8<+LzI>~4<{@ovL$hQQ
z64b%BlYF$%pdWDgku+#ok(+E&{NK=5kHlI++BD4+;#{p52T7AF*Oq`#8ZidMDIa>g
zYyLP_{W<81SteK{adYWPEr!dyn209<Mp#}5aZWZa1?5>t*#b1eg_cR~@@by*B|2iR
zs>L!dZOz9cQ-f%+irMv|a|?yCEo%OpU9mX4*ll{8lDNn5gV9|<RyGgcaF`ZDJ43`P
zW8VA+WTugR#b+*cr^M?^7G>D3o#VL@s4-T@5*JamWRaq*40sl9FRs{jGz^2#O;5N#
zVhOAlF<4$gGiO&{4$koFS44P5Gs35PW|BAF(kz5q5?==*bAShz5{*{%ml#Mv$3lF#
znNd9L{Zp4EJsPVY?4g7FNT#5Xt|ccrG4e1BZm>}CD&R<6y1WTMw~DdK)aGQPrpS)F
zzl}X%eP{F2E9(nAvh&;0a(xy1`V;GM$QEwpf-_Y|ZCbjFSG!BjYdf2F4Dl9NXca`c
zu&YrmB`b+<k<?a<qwKG6(m1j2c0YdYe{nE(5EYNpcw0JuTbw;4(n%@i{FPON@XpHV
z#eU^f=`D9eVF+oy57qlpF$Y;XBNl!-_Aku<RURX&PLKC|zx~HK3V~<Q&Y6NT`3LvU
zVOu|;Z$Q&Yjn%eJ1kl4I1sd^2!(9zRg-;XOf-MN7mE(6>+*lfjV4;?cw-8Ftk=tE$
zT{t<2SQ8;kzGIhlUyr*c3u%oqTv;?3p(H0LE{ihUIU2d;c<ocYn;+tIR6F=y^Y(Uv
zMV1m#%k+o1wF2O!!;0bw2B3DG1VPft7=xyd&H1z%LZ(NUVEd*FQ_I5Cz2G;uns#L~
zpNQjgXp=m|36)5`EX6EDVGodf0IVygyrmRaR}XmVEK1}Loq#R~EJOku8}gGUmKm?U
zIr!~Je_}-jvb-ePk89aD+Uff3&6V^bIT*kX5Ev`@Q+%-~J&m*O93rS$+Nx-z+5EFX
znh&ak&Nht)ZzU*UL%4$3Ce?&8Cn9$GvpqeEMl7pJ?9*00_VQar^t|Ex%5#BDjI*lm
zkkX_PT>E}`>uWXd;21K(%qgLzd4XKU`jH)RJ`(c^bv^e%;NWQW`29e+DUBLWAbJA&
zevpB_AO1gH@=7|`mRJcJL&$DUmS=3ku@wB#fS?PntJ4UBt+Lm*omZMMT?k_H`0>M#
zld@+^ajX4>QkCK3iiL$LTcETkY!saF@t>IIQ85k)CWzB)*2&$d@D#XTX<Gh;8M*-l
zpCwb&{&c;V#yR;Xrza{Yq@y&xgubmkxq0FDN*sN<8y=~|7wp;ANppxV#;X{`2!g0X
z900NI{zReg`v<`=J5aoHItAF!ey+Qz%qO4L2Fax=kTLo!DyoYk#6}y{D*d^>1CdY>
zWz2}|nl|+v<ERer?dWHH#S^zb&ERpi+YYVXUfT)POE*K&ct@t|4DAklayHM{b{JVu
zT-3ke3+qzy?RaSs8%{M@`J5)@!fyKQ$I`UgB)wZ&j?apDm$Xl~OW5zXEEc_+5Pufd
z|4k&q(oU#4*j!GBG*^C_traLx!+oyj4TWLfq{?9kOKJ~t|6}bWTl0Za$rE`pI4Cgy
z$qP{dB%$mMP{(h-Yb4&S;?HOG&@)1EX}w5w7x~fiD3W#7HlMb|oU!`tE<8qm_=owN
zRd!fSB^@o;uA#iMRfq9s6e7`D>We<p8KQ*2w6`a8`@t0Xlx&qdVZ%k{UD`uh?u>?w
zl%;nT{BAOc{UeU&5Z=wQI`x9epBJ`19j#|#6*MQ8%<yVz#G~tOWPEI_+P^ANtGMup
zu83u)ONrRk%AN&@6jq!uyNY~LrN^p6L)^`c&izL+`Um7fAHPFmp0edj8}|{?*<?gV
z74zqBRpb&(xHIyvJ_;Wjq=0*WF)8InT6P$V5Zps4+tlTM3jZo7ZyywSb?KjHSULW+
zEbGAzYIo3rXq>BgNZPG8ncR=NjS}0_pccdN9JYIlUnO68RmCO8GmOTU>N9!%*xqKM
zb|H{mXB56TF+Ph$wk7JcG^<P<KJijt4g>hR7CoJhyL)R;fBO&bcz`3|vON6AIUP*_
zS;Tl_4zc-O%sT`?eV?&>>Jo%3uh<0pCWIeafHSVYw!v~@FJ|WQU0uTg%}HKarFK}<
z$g4Ie@~c>kV!%)g-+8f%^#q)I)H43TUQlOO=#^(RUI|s4qHCI#;fTY1tB701#LXFD
z$Pa9RV#*2dHdr`X2mgtJ6ADONu3np_{UBVWQ%egaIG*QuKeuB@-T5NYOC*eYYC(*l
z%QkM}F{PU&7-8;tmtu31#aS+X5(9-DMRcrIAqhC%uu01WBDH$s$SJGJ>-eMH8norf
zRa@IJbCawEjDNb29&0y3ds$PGti2H?`R+x@V;Q}+2SJCEW@TdSf&E#Z?+fKnQOq?_
zdfg38gvuT-sZ%YvzHzU0k@l{`6Jjt^^$(xX!}5XVUq!f;9_$VWt!5<@YjkEs!QR`5
z6b`UF%uABk_6%8h0qNrx`D$z!EPjcViKPu}Wby?)uXy$ut7=y~G~LzvQ|0SYDqEE+
z-0|1B?UUJAND8lCe|c4_=l(d#L9H?XW@G26r3wvA8}NOxNzl8bCnBkHDD5xp%e^mc
z87%l?tG7mTd5|nma4&dRmzm6;us>ObA#_~ripk6Mb863tb_8iAO!_@rr-O-9u|lZK
zv{o2U!;|v>$`GtZfq!`f-@&%G6*++{IF{S!b*kXuKP~|qO0czM$S%~Q4u|GmyYitB
zQYesUcQN~6104BVshC3ys>*OYkw_x3cqx}3AqhQBMBy(KgY_C&KmujI?6IBKfZ#*J
z9u4d1in3Mf{RfirkG|B;etbN7j_+WJ&HBA;*Ym(0lK9ntm*6bz;cE)4@$5G5L|F~0
zJH%@VyI0@Jz3tZgFE`R$g_93k9kHj;P#H?z^h8($8_AzPbq(yK<%(UECG(o)YI~w4
zaBtb^QLl3hUBG^Ucj1Oyu;zoKSib8v(9&d}&@nC`wn6d7!lp|j#jzguL}|QpqI4U5
z0<3rp{Pl6@6@^E8(~ff``QB{V(XG!x@rOGJTCx0j(lmW!Gx_(Tou~>u9uMdCCs)Dj
zJ)P?^!GcSzYWsYeL3t5q6c|LowpXV3Ua|ANxF^HM&S-I8XXEARMjLTnNVBd3vAefV
z_J(&U>(hIBC<oT?OU*!>6N=7hi$kiSS4wUm@}N-s@9ErMb$*NphTLlU_@gyXik;j-
zwKM6VEz`4H|6-+?A<u;o%7y2COl=E9PScCR7LSbtjmjxrxywu+vOq5t@}~XrwY2HZ
zzSk8tIX$1S;$8>dY&{=+_1tB-dU$VH<&3@MN0P<xCX;3K{&tHa%L3j4voWxCYS^5U
z2kpZ)?LQm==wLr2>HAdyiy8x*;VZmuKNBH6Ssjvhjc{;RD#3u|2<=ag0SmTO33;c)
z+2J^)m*`j%R*B$yPpEiAwxG>HipTHwg`Z1&cHv0Xs24m4A%2itjs-b)Z1VMY3nA={
z)22(73&Uq@TC})bzo>MPF7VD{!^iGXXHIw@ZGKN-d$r&W=TIY`$(i6@!Iap2Z=CK{
zh)bN+vc+lVwH>hq?1*#_p41<)hG$XkoY>sg4xuemTxBa)3nJHiY}3*T1d;uyi1uzA
zTNbv3LZ6yN4!}RKKcayQZ3+II*JOJmnHjnJ<{w*+*pl-2(K!8j!|BHjCbVOaqz4o)
z$L<uQMU*>yV&+dGLN6EnCr4D0uk{uF=F)D8J7AIr=6T@_Wz(5r)y40oj|7g>63yyK
z(II>GPofFP0|J$Y9@K=aKUK%4kj2F;GD7Mq1VZpr+i+7E#`{KOW(DuVjn7hDM#K{R
zOrBq7a#Pk0M^OazaM-YmHb*t_8>vs4tKv`;kGo#Q|C>>n#{p{UWcPoB-(=6>v@{`u
zF`uA7=_&C|<M;vA10;Pt#&^C`TAzWE4s3_!yZ}2-7>bG|VmKjy!4U4mDz$_GLD_FM
z4>$ny1E3%68LxBl1;8eLe<CFh;glJICf56p`VGycGfBFDzkH!7UN%<`nB$3VaZkRD
zvMrb+QzC^LLL7?2&AqqN&l1aSkPch1UVDrLTDg_?tMOt*1R&goh-Yizuc59704j&J
zAI;1_ijbH`dQnseFqq8)%?r_xofmBd=o=D#6r4qlgmi=?RP^;P<C8-|bW<KpVYqI|
zVE91Uhxn6ZItPD)V1NWc5y;m`lXsNG3%GQ?%sa|{NNs|I$9!AGJ6k1w8xiqTMcqVn
z+f62O^@52g>lFXAC9LpVPm#x<gZ0<<e<mIcm(?MP^9W=^b40fF27{=X-}<}U(w`d$
z#AG2GuD`E0T#zfIw)1(8b%zx2Y2&!H9Ic*v-2cT#(@}s5ns!`qn*YOBv2YZi;<&f7
zHwE;(mq;zTrxA1r4v3AD(<8Qhorr)kR8ly@ph;xM;&_YE8S~_e>0i$#dIGQ#4HCwr
z{`jX7{%~qcJ3YvQX4dD@IY*DALE7<+F}I!22D}<32_w^NMqSA!#>J>X$%r<o!fp@a
zIZs`T=+gd)7p=d5s>=asx_oj<$B;iLRHQ|s(Cggii-EE*ORQx(fzi`t^ek)Ym_KPb
z`o!+gK~a0<YCl$DeUNy}hT<NTOly~V|M=_*Gg8oswE5x}T<u_ZXLw7YuZPKBxg6j}
z9wE3qup{bd?cFzG<8r^Gsa#7;n003v0xPBd@|Zw~b!R^5q*M<mw_Y?MtrEY`%#ZtL
zZm=#umST)hnz#P&CL9VT5=l7@*Lbgp$IPzxNCt$A%LPv-i$ff#hyt>-z~sqn<KQt2
z>~RDuei%kIdbrMb2P%2oTqW}M&21aN=?7Y#Q>1|Ilwv6?2Dv}oKDBs$i<#C~BvvWh
zHm@73-&~T)=@s41K{PbR=W(`2LBTU#4F~!Mx0@RgHYhv3`bI1-jdK!^_4RaaYDS2l
z>rExvf{~s7s$?SYJc#r<<2-8E(6C%c)F{x?rS$rSOC6<awCbJ8EHMS=o@SdUeR8O9
z(h?C{Tx@R<?lK(t5XyqQq~zvSK8||l*V^s5fKY|k1u}NiP6K50li+|KXNE;`&Q&ai
z+aA$a71ebcg5o|P&ol|JJ{RBX<_UoWa8IMv&J(?BX)+Z1AJUX|t*R6j#~=T(mR=G_
z$f$}*%k1B1_57%sb0uM{poOS*N(hSF^c0L24hWPN;`^;V|Mn`N^cp!%wKU7xX_(yo
zwm0op*`w6^nhh*hxz2#l<pvEQA@H>yE}>BG+vv5OiNNn2xMODi-9F4arlwn4J_a+=
zht+IduAH2dSDY5<b!-OJ8)3$zeE+=2AOVxQW`hSPO@AkILcrh9F~XGk8exJ#$m^5{
zW^~w__O@Sw#f?OdxI!;ubWz~q<5cBOdQKzPM?^8{J&wQrtGf*n3<%cu5~H3!Gwjy~
zf7?a(lSld<OW;U|&hcBWh(S%C=Rk80W6<4k{*^0Q5nDqVpcUxc(ksGe1fStwnBD-)
zR6V1NzhIVtVNi*2k{EtuUdQe+V7Gjsf268H%hCES_r3Y^lh~oioiV>gAvHIZ7>50n
z`)?+Hepd`D=6n51V;W*!mvM|Aj^X@K0FWRgxAZK&J_Gx?x#KdRk^=#Six9Ov4r?2Y
z?jm%79CNdwM0<?|3z?$oeB+h-$3&S#OC&=lUkv}68ZuPE$(9fvpa1TU29SVRg3L@o
zKhS#+EoAs3a-dB?y*dd}Hk9px_njQYyA34Gjl=pC0oYisdXz2&KO=6jigy;x;I87R
zXy*UQ_ye4B7i9c3So|;Zq=G9!%Pe7lg5qhoq*tm$9YTZnOrMT=33@qEtn<r2SxJ=T
zR$>Q8pu1_!Jjs{-(F??TFpMv+Z~bbrL0D1(GQ|;ydM5OTpOA4p=&tou910pZc{l_f
zg+r+OVA!B@X|E@qRDbSsKh_k91_9OH)rK~j3vj3af9>k$BUzbLscjfNJ^tMn+j0Y0
zFPuP?S$qtB+9gl#btyfW8(b#mz5V_hua`UuU3%!udhb>3owC^J4Vqeg&T*OE3nP}z
z8N2NZ<HMQQm$LpUd8-#YggiFPQ9nMC1zdzr<Xb(8!O;T~B6Na0TCsgUlQ3=ZQ#C@E
zK_8I*`M^RT&3s~X+eLliAs`F<)~|#^s39Q=L)i|EGes%~2{bX)x2m{$H#A;`B%)H<
zn7n1{DS!U-QS>!XWU)pUa15A@oT0bl56BN5EwGd|FB+JT8)flBS}_ltl~oA!vJ!rK
zV|-kk8M9yGOUtQQeOdF<?|K+k62Te%9EAa`tiNVd?uiucvFXv01pxQ>HHHU{jWU==
z7}QJ>!;VaP@XoIGK0+48%$3Z7YiG*gc9JH4J}T?S+~D_~h6l&0-7kZERe`Ph{9Qu$
zzjM@pFr%9?QmbSAz3@XX4<*`eM7$baf6`-$DsP+>dN3SpE!UlSKg=hyN%~D0<GOe9
zyMWaD)vQ!L{NhMB`Yhf4zaXXrK=p8o13Z41|2<3KH6|WB!gSFdYCTmQs=@%AVoq?F
zt=ZFVuQvVj7)%zMhMtKm%6l%TI-W~NY$&tSc%lOwc>%ZnUHJ+CQy%Ts%Nx>MQzH#p
z%*E`-fQGuNz=`zQ2WRCGsDt}wPc%2%U0I=*?>=<*cCKcVNWe`nlwVhK58#-hKAt3#
zY$A>PzW*<Q6U99w8+#4f9^C&6p~aeDo&`MlmN*Yb=chILAK<D~#W51$2{OsbCQ6im
zbRk;$U5G22NWJESb$TOWab)C3Flfk$M_NDr17-!-atnRTg6Zk&gx@sM1HWYf_0N?Y
za~FB1p&Tu0zB~I0vA>N76_M%3(9+3Ft%rfgTNOv>1dZ>$Q%MPaCUZrJ-N^@)Ix3>F
z<xC?q(ZA*=4;*GZ<N$K4o`|mTzj3Pv{)B^U3evE|>K;JU?!J39{J|rUikUxpEv$6)
zB#!=>M?>Rs$<SDS2mS4@0c#96Pwc@>!qzDFS1ijusWJaU_|Fhz8f52z)*po|zq$Vd
zd|ME{WLQI!B1Hw@_~~oNQ3TEk35cpI8`LCBW@YVRoFdYddVg$;Thcf}QK4KzX4|(-
z{<KLgE&vzbeTq2^zqk3C^WjB;9%utPb~!a^|Kc6^&<ln<Iv0BH71X817vZ#EG=Z*b
zn)pTI5m%;m)obZqPgR56SE{PU$H8*cm}e)eIZ;2=2Ss)}P9lsX?{jaXm?;Vn+zV`~
zXDEjf_ZNP`&mTy6Yf3m`p;4TjGn3)JMy!>cS`xJO)P}DsaZNQNSHqCI&KN*qo6sB_
z+?tcHN_YOFsD*3MuxrFXYbs-)KMmNVA&qfefBc^*{!|7ttJuBxh4p`gIfa0-SWS`X
z8BKB~{+{<pLU6c`i(uMG_Jh4!>PrF9>f|Bn_3*DKSnI*;rYixeiq9QJM9dZ9><J7T
z-hYC|jDE_QjlwpYkFHXuF3*X5fwrs=B<daFG(f*fksp=9lt_t`B10|F_%@=5c9qTS
z;b94zpX&+9-tZk;oU^mIxE0Un!squ4;_(1#jUj{1C?9sT#wNAAajfZyry4*#W_D$J
z5Pw<jq^*Vg4?Um$L(l%!#ljnr`FtBONUd|byjw{B3w=U|g+DJ;v>q1jB1m@PS22e6
znDSe?BO`gsL>F#d3c@!1lh0Si2Fd3yB)OHG2r_|luzpmMFI&y8=U)9dG83BE%*_3N
zRJ~<bTum1&3S@x62MHeBo#5^eJh*#scXxM!2Mg{N+%>qnyF+l-+#&CG&b{~d%rmpQ
zdv&d<T5ET6c(mz?O!Yb(<xeG0ATwyv7x>YwMPmJ}bY>x)8hY};y*);vDHErIX2y%`
zKpgN6)QXfMM@sU8V5lg|oxa~MNt5a73I*?(O+=_?BeTTXh^&FL<^~w(ovXBDOb@R~
z$z`LH7WMxinGX^&o!99Opx=b@{|TZ_a1be`6}se3O!fdzv1Ehaa0c6Fjz%>bs}5s+
z8AZ&9a}ZZ{Hd6A%B%olA>2C?eB_}BSHkmM_sa8*>aQ#@UB%L6N-kJe{VXdr?n9jo&
zQ1O_|zNGvXswVjt0%Bt4&F=d-sx~EnrVkAeJus*E@hnhLP%A>jkb3IONUPjm7cTd+
zWn=m;8=FEj3KZF#u>nsSs6YoZyeIY@eGJ)z+2xG{J9Pbopp7*;Q#PFpR1w<CR<F-o
zDKU%rB$&hhwg-w(mkCN1AAs--=KlrZ)M&r_r-1_uz%&^?t_`X>te^;^tvSsrbbr5t
z!;omZt1lh2(3=|PCw-F0Q{*zUpt&GvWdO;D3mlDAa$&N^$cMnqJ{~=aQM!tAtLwb=
z{Msbq6umk{T==<8<0dkSDtI|yv|^3{E@cY3r4FRk;Bg!S=NS~Ktq?(gc6mRFpfv7w
zbuyW#P9JAOL2*RK%OPeGll%T};0+Z3O@5l&$&4=ddA#3tpPDYvYFg-{5Ub9IB}X9`
zpGl&rnPdyrm3$q##DDn5BkCt9$kRr(O7?$}R#z6t?GSyatS^%!gB-p$T@|oQ@ukBK
zguRu0*Yg{f?hB`GPmjIa-zBK1!Q8pJ<_6uC&FB-Ar1`^?6dqY&ZykAvh<<6OSzK?>
zXZW(CB0F1dzYa1j=|aVrQgkx?+GPi{>b58!ATWQei6eyi<UGO}6!%=Nf&zsn6H52#
zrzw52CKt_Bh`z1Wz_5dunEDy~eNHQ?vT;QHtL*UYMH=d%4In%7{?;(}Z$ba`Z7N!|
zBwT|TdOs2K-_bzvYgwWX8^6sO$d1S~`n&__mq$MT2mHu@8^YPvJZNpo|92goxS*7<
zq{n*`s7Il3J&6>13}o>tA#+?qRwE&nKEi|um-k*8?iv5_7mC9U=$ouuIf5LIg|@$^
zt65!<W3QF>cd}yTsbyo4QVsz&PH0HyPrkLBJDRtoBk<*^PKj#6$`6KAc?y4Bo3H<6
z<dDUFpzL;<1WYc@zoeOv?ef6DtVO4hm`f(#qC9{5IL*po>w(4*$YhT!`n*as^r`29
zKgN3H0b#T>sm^DB&aygu)$D}2uAXO_ii2$}JVNi6$sURiabFX+!e0s`m3mf%v$BEW
zILtCSHI#ajJayG7F@5I#{Jy1|A(vdnwp?=pWfQ`_b6GFt8Zn1~wp&mS#+p4*h_3R&
zR9SeRvT<aDI>o=ai3t(p;5*^Om08vOKT(lwN_25ys_3^XWt+p1vPCZ0#C?)RHsw$5
zs6sto{3phh94s6vVAKgM2U+5#5U)z%gT8*eC;>22)?v|Jbk$+4*wV|Y7~}0WuB=6w
zwZKv=*{V+qmIMb_=Wwxb$T}d|lDYmCba6B%b`>>rQEQF!WSPG>*n^2yyvJk%ij+^8
zxKc5<goB}wi(dC|Z3^XA)0QUZmL`6sb^gcsX@-y3LU<FsDq=^)v_gMejeB12rlz?{
zwaQf}bJ-Y!%YCyMxov-RmBT%|s~>D?SE}pBX9Pa;snJCvCH9Ku)K@}`90C1Lzwd@u
zN#7H1K)n=Nmo3pxQAbB)@qCxH)gvQ``7hyQW0CqXr@RCG|DgK@6Cj9O{sEP#zU&!c
z+u(J&xzv2V)V14G(YKzKejsp^Y%u76trRAQ7}!b!l1L&_sau&8EW^krc=Ae{L<bNy
z<e;d)#h1V<kkcAKX_c54($ur4+>s@W22KG}a|##ey4%D=gs7V}H=L6(PMF=X@+G$>
zhcTA3l<X&h4CujcK4e`ys|RfiAj}s7g&Y|qCNrvdNTn&@74BFisemG&Anuy#U<W-;
zQRs4oMI5K*C}x1mV?t*u2YrvaH=~aurkE86Mb(;75!^+er{m#{vYA$6dW!r%sxc{o
z3g(NUy6R_`{|(vCh{Wz1eu!`KgHJD6splhZ(&XYV%>Yb&LTnR)+B88HX#cnb{d^C&
zy2B2Z+A!!PL3uOuVgWf1Ab!-G#Zp_TYjt2|ixfPzuH4?IZzpU;=iWLF*T5ViGgRmR
zR^$Lp9il(xAGQ|gKnn67>`h_)+kgO~WoV8(byAElvE3~LGya(V^SmD1F8(%64=jhX
z>JU2g&uK!K`~KBa78r&+2(NFDX&ooBy9d2df}y}a2n9^098Z)!@{Kz_XoN0S$#xS2
z{jbk%hU^vM<h-tnh~}81;I+I9>-qs}>S=}B_&=r$=Keo`T`1bAku10V{R)I%)x0l1
zlZ<NCBT!X*kr^*KFb!uX9^TS6E6S{cLHqk9A%5!v(;99KcYF@{8(D?OozCDhd|igm
zVKL&*Mh2*h;9H2ZUn%t8HFafujHK%|6O%D^+F*cGLn4%MK@WU@ZM9Ei384@E2vAc<
zeV<vAZsrjhOUn1FWKyAwWHihs$<ogQ)KNRHVXbvh)h6>$2Z2RyNwj>y8w1V{W1Eyl
ztw9@m471l?6p>%QwQ8z={<mCr!C*~t=gil{_P?~u2LVYB>4$~WhG7ZEPd*fScH7;t
zL?Q1c`S_uur%)XM(+tj7P}Q(#Pf|I$23q}UszLZvGglaZF%-(KL`*;jziC&ZzW_<2
z-KkCvrEGUh0RVlv7FxAr)KK=Of2{f79SN#!9lfw#M2SJa_ZLLv$7p4h9AmXQnk(hg
z(WF+JCq?~&QuK`y3y`QdwbyV)w0|tHiMu@|<bIP<abo!R?=hV?pk$z2?muom{g3(M
zqxpNz<by<S{scn6dSAxp&TaSRFT<vJc~9j~S!r3vR7`z6#49OPnuj<h{3#ti&X5S>
zU{)=c6=c>*L!YAtVORx`h6-)w1^J{{Y>@-SDK||}R-El68c;Epw1d<t4nejl(lkCo
zXZ}s(gF6a+KCbkzo$j-UzCju*?!p^RofXNv4kiS!aGIl&N#gd`E$F-QUv){+%#6WC
zIFkW8Wj8Ms8gX*Db{PLxX4YX1G3m*zqlPoq{Z2Nb4}^qH@u`CiY>RY1!5Oy&39_s`
z+er(h$?*R|Ya~ehqQD6i|4aaYzOFzt*4CP<*_QaF{&v@PjH<X!T~UBH&M-Y=u(l%x
zK4pUpN~l`Cy|O7wM`OU>OcRJCi%LHKN4b=E;<8!U)CF?f>>lX%fFeGbZdNbKjNO>q
z2W7|vV<gS$b8Gm?m_8STtAehN);5Kk4QzxvW4Iw*W|v8ZeI)6*WcDiNL==b)ouu57
zSFj?~O)f>l9nSEef&#13PdiJFO>ah4%VObn=~Ggo<i1cs@iEJF44C8pXc7le7nweX
z-?+;E6bdH+R2VKddPjRlFG8KHHwF$#VB>ezHf23yw~Tun{}>P_NIKH479I(=R>_Cm
zU52!jqZPvR4=Ql=^%utOk$oB&U?`Uyc8XaDyWeafKAF=>Ef4g2h(r2d^5gtdHpE8A
zUokC{bfk-;;?2;h{a$PilpXSexI*X?Ty8_zpOGewp)AV)NUzn@=;v*7I%@Wk&8V-d
zB0ZUXuoolGH`UrT5qi4B++bb@(xCz!muHOwAqs7B6<xaRV4QTB!MZ5reMBi;qe=e*
zdQNVri-LQEC#JlzCx0xELHwh!^rtc3OYydT2SWgzC<Nn(bT(J*V7wvy(ryUHi8wfh
z*4O?0h~V4Ts5Ey(nFFW*-T2Y=QgJ~f)^xN5C|eBKM>l6ne_`R&BR!VM3FwQ-39b16
z?xDe$Ig<oI?w2{o@Z2_I>{^oq;~tnmIts-iFx_c_{Ur%!N<5sAd)wr?E*kVqE=gJ6
zT{%jfH&V+HkCr*-L><5?8yFdF;P!~TkZH9>CH$%N*K=!Oc!wl)_J@ihx5$6Q?}Vg_
zEZh0=oB98cVJ*Thzhy_~%FQ;5$+WK0omTgY>o&AQ6I(0n*bkbvID)`YnNt#j=mOMz
z8#d#_KE|SX(boGxso26Fauy!I`)MaLF^#)&$}@>@-KzP?XVUAiSAn~%mHso22oy$l
zGv%OYy!j~m2hKD19ImGJlJBZ*PMI_#{mwORw8Yh!gMGAV`$7VLnY9IscGHq9rXxy%
z!Y?8f`P$<hr0|GF^8fS&<VWQw$0efZ0|=}?=Y^v;QM#70-Z=O$cymS9;f7N<Tp9e^
zQgjj!JLK=?&3`@*xCHBN)07|@I2aDIgYZOjBS=S0bli3Ukr|oN0?m}CV_uO(uT9_X
z2m1t#Ig|iAM>HG3iAOmdO`J^(4}CVGA4`0kt}iu=+_g6m&;A6slbHG%=UcVI!PJ~-
zWs=$BogVw_BxK0oZK4V}{u`){1L@_a5$3r>@-x|V1rP<ky2#7vEM9porZ%Z>uNC>7
zWE}0u+~@Q|yEP+Kn~$Mo2A~Wd$bFkx!9r!jo=-xRRT7e7kl=|&ns7G!OB8TADnCwP
z5Z?7)UMd4eWwwg`H{$;-TZ6E^LfUR9;}NwRGhPs^CH+<?mI&$+d+{2#P**qMY!FtZ
zs<jQr&mWY8Poh^2SJ`aEo~62|l4YoIa4dus?1Z``v2Zn2Vj@4dEV%u@BwJ~gz+#^-
zLO{-Sn|S~M*R^idj=u`MR!272OAhymmy}Ipo9QA^nP4G7{`cEi9q2ojX!AN(>j9o`
zSYCqM8yR=@1kb|yDFTnJp1sfk5&K4!cXj3`WW)Y1|B;K_WG50eXS(*V^c&r>1=^{V
zN3NSq*1H7@XEO~V(n&nj!}y^(4yY0DcS8WYh}DSx>1tojh;<Xg!p)fo)?ve;(Ev-7
z&lxo`L=HQ~He9;<XTO^Cd7v>1C41^9@!$L-Sfdl+e7(g^za1z=`N^V!7_;P<Z{T!2
ztZ{h7<Cd}P@@3L>r7+i#p-}QA2__v*&sT+Cg<Md6^D;yH&Q`yd_;n`$tS4Pqq|Rw?
zcZw;UxsGA};Z<&lDtHlXSI@&2V}I$gN?O@a{^@>%Se<~5OKHJPYcBZU2R$1-D}oK~
zVnCNFQLVOkb_$W7{rCS%6(^m6qp}GZhODy-AD6vw*#<jiOxgneoWO2R45iU`_dc$;
z{djI=Gp?Z%@6rWLT4ep6Y<yVL)<0q2YE)jFl~D@aof6Vo=)1y!lm>wyrFnVH{8*+0
zL4mJA{fGc+7KqQkGYswZQCCj{4AxW4CGoh2pD$?4X?Br=!o8V!+fFqdKD~f6mu#&i
ztPi6PSbC^+_oU>ve43E&p?N(xy|~p^z9dLsOj3uQ!@0h19&oCnfNVwbsQjM|8`Nbe
z*-jOF){n4+<c3Wc6>5K9dDuQHtdy)<@RUb;yv>d65AI+f4e98zJwC21#Uc|=E{y5#
zq4p6{n;W`ig36Q-RHT>6!=`^MgrTPL$5%FA_;3M*VH$-YyiNmho+;l$w>vf*a+iTG
z*mC98sv<;FG4w?_UWs;W-6C~y^+qk|WY(MOAIQ+<T0g>oI{K9eMc6a3nWnc+4e6o`
zydRDEj3kTulNKu5{+~J2<p8#L>+o3^y8k2V`ovI^0d7br8`t!7^GAP}(y99a_k;1x
zrT0AaK?t9rT%x-C)msQH=&PKZ(Jxmt{~9A_wx;TXCc;tez5>qPiE30(VKz)YQJ4^j
zRzW?5jbk!&J_@<btlo)lKUaP%s06383Q-7N3O6p02-pog^C4GJu`qETpNE7B%izZ~
z*_$9;xk0X3zBON^q>XntRBg2(<A?#z^&d>|T%X=e+x7kn`a>LGSBesmj4#54q0yWl
zG`!Q*rC=K&quulGmV)3rHI>P;cZUYU-7Nw2kQw+VI$spabU84TGySRMGc>l3DZ&NR
zQ*Oz%*SpCnN9u>7Z);@Ja!q$RIAwt-RfjkFY~xINYT~$EE5gbbF%FIMfL|GXad{F4
zcmKOUa_PnwdCAR&6-*(WXy2(A?Ta?oKR(Gv=nwr<@-=hy@M7r>1Ep;*wQkzDM?Np-
zwcfeT_ffVqzBXxW4+m00n20plr`y&*+_fI3vyY}E8HNH&$;Y+c|HK%84+$yC;e$`u
zmDS*(wUn_)6GsqMxJ1Lo7kJ6KL<80O71+O3zO%%7K|;b#d@j7&Oe3C6`JRmBn<7?W
z|KWPMKg7%38oop&;aYBKV+f~42oNwWAxp`$B|0*&tRt-)8@htHyHpflLWtjfE+H83
z%BYt&Y~G0f^Bcee66%PVbx2Zd?fgJ7R}J0q&|epV%k?|zAuAM$H%TzJ`!sUxL8sh8
zK0VcF_`QK;-*od$At?-j|Km;PX6t29fujoE1Ty@!G$Vzg-bV!AKG8_~%<VD8rB^OC
zv{yc^(Dk#oWIF`#LUw%zb*T^hAM2fi<l<{uqMxLGou-&kb_o+MBMNEt9f%Q?9&OB%
zS*3nRv+18-raIHe)P9+4oSTJdMc7w^lE2}@#`=t_;2M(_Qz4}i?wIlZ(-4q=508XC
zMJc%WXIDBeK4q4r)E?h(RGi%Rw24VK1%bQ|!5AN|U!l#e9#b8~ZVa2Q>#Tduuf;&-
zxpJXWM39abmyBqHe{~0ECllN-&Hj`ko8?tV%zSF%j@{x8c2#LNRYIw}R%kLg^kx6t
zL<e5~8-DP9`s2Nj;rXtZ+Ch*Ndi>$yTYE-`$x{I@z1+VsFnU(2n!i7_IaQP{DicV@
zZgdJ?xnAd78}!reXNeS99A?+oBhy=>AD9C0;lP;?<IkRq`vau&a3_V&!U@PupYh9Y
z%r;)`tq+2L7@a8Zs_{(-oW@P)o4oPFz0XmCwxSSe{<;=wxQOVpTk0WO9IS|)okCqb
zGo@~VdAdrHIgG1?r8TA6c<@@)ipM9r<*!U`EtuhV>}7``SO>*-%hk*5xy<7p9$Zte
zO$-5|x3&peR>+$>l>Mvc^+vx$i#Ai3fN8NxzXT9&xm?BTW@XUhuZl-lDS2kZ8G7Gk
z;{RVzWw1e!9Or0(`v>CdzHMN8DPZOQ?9+?5{OU0Pb{~9yItQx17pv5vA<ZDyqp<ou
zCd2pIJ_2rRs${t(t?NARgB4RF@!CIFyg5YfN!|DoLAL79PEETw`iO&VI1mF18mK_s
zq0qoW2p$bd<T+%U1ILB^)N1l8D+$6+UOXHfjk~S6_%N4ef89(pwg4*c&k1H4YFc1G
zD1g91qW|rj8f$<5M^ZDq!2rL5m^l{t=oXbHOmh`w9*uBkIhKQWVT%949d)M~d{2(c
zEF=E}c!&)mU`KGpU?l!O+YAaoHrK<7>lY!uL#$#sA6YfLy|-1K7qZ=bC6|icz5<=O
zN%J0$hyXz-pP-FLS(9&b#@*+ft<C=8C=9v6YuycaG=py_-}F}Qlv^c+(QBzeTwN?+
z%8U(ZNn-c6NHHj#rw&>O9^MetIbrZnaNGN`p2NlLb04~i#WeK&1&SnWc;Ij+x}QnZ
zm%T@4P?m@-7~wmE>=7|WrAyI(|MRCN<jlDq{;5U5zz|Hu=#qZhD2iCYkFP-<6hDTI
z{&1efehNe5onGYP?|;t&e$4NMzYusrqj!SQC5PH{?nphl23Oc-L6^^V`YG6dwPl|M
z6a{<M65?_E40g$5-pq^cp*YI!iS3v|?lz(A!^HS(bB@9(&2=P<$5XpLbxXT_lW<Qu
z&|;kxAXhW!DdHVk0rN9`6+jRdbMp*{QV2eanNl1&@Urzbj<)ATCt|M$OHoB@&&afO
z9)|OB(jq-PHmYb-RUbWdP&OT9GV3-{Wz3XTFA)|lHQ48OT6{47TvyFj4%R;SCW)kh
z<bnGjg@AOt@GkO&4<D{Ka>(OBt5!FgUd!tW&v#;qQIY7Z&>t6S^F9+nrr#MSNYI$S
z(zzyPPW&s_>32i)>w^`}dt^ExK)JTjHb1~l_quU*e3Z|;)R_#E;guTKa!9hU#+vO@
zd7rT#KtDiv{o&r%+*2lWJmW&Q;jjV;rhZ;i8=vnejQcDK1M<m<TW#+{<^z0lG)zsP
z2q2rOo1I$5vQ_>u%UN5u-&rKN&Tp|C{;NAx>$_&0;R=x>X|B6<c}0Qjh^=Chy5>Ny
z-j~bCUpzK)TyeSrY!-(NXH3rP;6kH~T%wU2&mJ$(>1v=0KaJ$vwJt>U4xaaXZB>DP
z?~%eR40$}qXxON2?BD8A1GxA6W)qqC|LIcj6L|xmppJBSLF<OzLvd8!Vg90Q=XfCK
z5;Sa&yd{%A=UCUNlmBP#@dyc~Mra5_SftZ`7Zc^@ov(6M)ewiWAe(^<`2*m#fdN-F
zQ8{;L89!uVM9w9|MpUv0K}59hGBdyhSi;w#55W?LY_6O$@gu(k@ASYP^%poE3Wk~t
z$+3QPACod0fwrMpZq%=Ly076XWgMmXRv>d|6jzYTROw?Vi4#@Q$*u7Pswd?e)3H9<
zBw98XBk3eqs-c0fd@l_p`8?VCxOip++sr68#THRQy{p}JPLPadBYlZhZ!3i$I=Kv_
z6r&5^JDcHoc?oQ73PtpMWi=u_xp16q(=ed4ZR+NeAR64=m^R>#Z4n6a8!bxB(n-Zo
z>M)V%20jDavg!~S({~v-x8yh|)yXu|_<XnhTXnT;Tyl0i+m9-9OiZzGGAlKlPW-i!
zqiTymre_#XylO7+><mtKKv69!Lx}aFpsH;x(Ppu-;sE7o6JA%V->?I+&e3&y@6`dR
zAMt60n?HWP<mW<w9DWM4Nu}wiNV__VKTp04YdVr_ruBWFE!YiLe3HjANqdcX9EqUv
zIGUfA8e3GPe|Y%*;b85MNl1V65Di>zEf0a1$h6M+lLS!nXxWXx+Jd_%Vf*yqidBaD
z00P$)hoD{Zi><_Xx8=Kjpn&oaVEMD@D#-w}{O<8_ZlYZZd_>d<H!ts7$c}G8elc!^
zMq~R(57B9;PbA8pWXkZ;%dYlMb~gT+8>$xB6^z<d!}Z#rltXLa1+RIi+NvIvhkCLy
zKP39)1<zECV)EYn??Rd0&|vfAr0vyAAqXRP%O2#3qzb!>WLeZjH}+}!pYVGT2p8+l
z{!O9nt6x4`*$A-L=MzEsSOux{U__B7Q+^z~y~~%3oX+nAo8;c6%@89}n;NC#)3BfC
z3a<I%M4Ats6>KG@kWuvdVt%Agy)vF)_?Sc-SVj4fl4jp4^&(GXc6EJcEH1F#Xq3mT
zatRTS7A<LdfJ{z4cmeOq$#$S0B3*BBQlWXFJPe9z=A4N6{oU_?<(!f>Gtj4g{k6tG
z#j!3^fqwQapceuwbz_Gch=Q|SJE7*o=tCVO6t6rkgrR)vgMXPxb3*CT%Q?~X<Pll>
zMcHHfg9}$l%7&4T&+hEY$=|U4@tR^p(*}B|c8AJ3`uuk7mVC{+w72MkxRpORz}5S|
zmGOt&jfyHgHNPpSNi()pD)%2567h(1SYz{_M`Mk1J)V6Oy|2@>SIg`7H>v@#vaGa>
zrtirDd@NXDbL~KapSgLw(v`kca8;0m5CP(6pP@%8Fp_cNLlL#HUg$XM6BZN{mTtzj
zc+R}ilKFBFMpzW*CRDBG(lnY_5@^y#`@;?6g1op@h|C@`yI`X$)ElxZD~yfnuG`&9
zH7(~yYCK@U1LhugR$WW}Qo1T)!l5qw@bxH@PxR7+_pPoj?s%Lye>mis0U>^WV~{ZY
zn-JXiashC0Nqecl`(U^{qN^uqTD=}!2l;f{-t7)M*c44i)UZs|3A5({%@=>!gM&W3
zY}pRePzF;r5H_g$mvSVQ*<x903K<GvJU^GvF5aTOKd!pm#%!pvO2MZCz624Tao@-R
z0X2@=5j$~kOdmq{6Y#s<nW0^DK_1bxQ3(V}mg>Q#Xn3}?<pkH1;uhC+1Y3a5Rf;Tt
zUf19PL%p9hs-0rl;EaZ>t~%6OCe`>r^b4xbSVj<RN1hwDH=;?88~aHMU<O?vE-qp6
z#=O`U7iK2sVbYJorgWhCaulJY)U;wL?Vk`|XT`a#GdngTB>DSMLy3RnI1{MOEkDoB
z%7K|QH>*6y&OXb*%CW$~>d!q5lX8>^;bLDE>UGl?w;83^Mqkpv&HKyXd2M6YQk!qt
zJNxK<&GGG*Z=2=!q@dkDrH`+AI2yQ|D*N9&0Zg=|YirsWt7{pV-n=?%!XMh&c-Jz<
zNJv{OE9>}Zv_)Krn4Ev@@_K-fM1a5G9_ER>0%8WxW<FV)D^Wsa8B}{Vv;QRUHR>n@
zck|cs`cWN|C|=n~|7MMC)lTpp2>qyXJ63ogSLbozyB{2s|M%MzwjLJ7LX-Ix;UARA
zc!VBz&yP^Nt_|(0eDQ$QOkyOv?`B+sojBI5UQb~#@*>aD$L7)oNY)JH1yMB~Xk<k1
zo>Mgn005VYu_<TN%WE!^iiHI4K*{DaTZrZ}ZJDm@bYD$2XQ1RhzW>mJLPnUx2=`ZW
z2GsTq_ZyOgqs-@|_z)B4VBfUbBlMKhc3>)tywsN^F_pceA4L(3gmhHvp5@h7%I+19
z4aMzPy6LwswtZzgwlvQh`qH$6PLT}mWZV9q+!=DLb;ES>G3NrsXko@nU)nnh98g;O
zezwrx9gQU?@4U>55dGemasINwwDCQBtDD+eIKW86`$gqTp+)trwt1;8|N1qm8<A{;
z@a*~}(I$YHlYnE3$qSz?GQR<u+f0Ic*{(O9t5jz`o^fBU(U{|{T=UsHqu_I+XMTn@
zzWx0=JS8D2qCDfHnMFnxm7C?oVp=;UdP%2eH20<3?u)kvlzS*xmoAHCH%??y5TY%M
zjm60K{CM<|;T*YmFmjq6DmTlvjZvFSL;tA!b;Sg+VJFLe2HSr<TCk~zWh~-8Zv_3N
zIQFM~0&LqVt1!APWF3^AfL0v=*x^!ip9JI_6_LLxFGC2Ml(lYdT?ZC8D*N)RxY)Ui
zcP#^*SmlLhs*dm1mYO%-+*vtVt8>?vZ)@AeNkI#4(>vhH8h;|dVG4jR0d&0n$xrIQ
z?ukfCV+U7xZ(ibpqv=bf?=hFWxS8w_Nva#6`$DNd|K=K4#l8MWU@vJ&3c}kz@HzVJ
zGo=*LCoZBiIgsjQIiA$Nd(A8^NJK=3eSzdk22*Aq_C|{yn4=Spe0EDQd#_w5I#I<f
zy};bk>^Natc`Rm#-N36-#)tcML6FqG#!`^~d#H-Jx?p%OqvcgdskEUFJh9ONt1e&1
zYPVdi9;Zyvv_hTy(0`f$mPN7~$1*VmL>pjrU9(o|5#E|s4@Gz}C)np>+WVYuY&@7N
zc+6S!e)X5`8NJiB4}d~3_nEdteOxrFo=?%DdK|2i6}_S9=jkYV)qL6)&{}amZe|%F
zCJ4S944Kya-{|zX)tu!`M;y8SH<>0MRg){UJvRsM(_=6-TWyj}`2ecl1h_l&MC9Ub
z$z0^(LzL6Xw)Hf%HqoZVTdN(>niK0$o6NL3tIJHu?qd<I*=+XL!ked;t-raqBlttp
z7IXlosnStm2SQi6-R2cn@Sz{%ZLD(e^g5OuEWfim7Qy6gL|^7}CmCIvxGMV-ePlen
zzGIZ7af<;rKrlh63T1PQX7U99g5>i!wJ(1PK_D}=UAeQ#-n_&>J+Y+>35Zy^{Y15M
z0*puB6-tc56@6hO)y@>{p?i4Q{ic%q%O`?yc59tg)nJ_m#wbhy$<SzTg@>YpSH#n9
z_1(w4ySn5O&n^R**=EsI*%ZItH?~eMSn+C3s+?|laL0C$f9woqq|;<By+$ina)>;L
zTMf;{R3951=dLiM?gyo^b?7~urXb5--n(2|Id%j#*U0+tgGC~$Ke(@jaBJy=f;NJc
z8h*mWSsk+@PHH4a#v0Sy#NkZ4K5F)ykyS%YE%Tvj!yQ%+uKn_h+S~xxS!;*$&*F9E
z=7no=tzunV0!s!Y9CJ4%pF{=Ws&hWETY8h|>ySS8_W~3?1f(mNZxEshb5P=_L=9Qm
z<o*x|DZU$%P0-#^VTJkLQ?%u;M7P5P;WB)a%cst?oNuXVwpCN6ywR8vJHZU46D;U?
zz00V@65F29aQfBS8=a@`v=qT1`L_5H^Vxk~Bq1*?;$>V>xhN8WzN^(R>*dwYQ}3+@
zd}UT^Lv~SX<V;{m9!wTTi@Y8w+sVEZ>A?etRG$TaS&@vqqcLjen{T?5T^}v$bTYC~
zysWZkX?v!9KhQC1KM@;#H9M>E$~C>(F;}{VR~7Dg*{EnLU~u)XyV1%|P(G9AQyKsx
zur`6^6`9R}k0sPY^w!%-n*TLU#XL~UUkqHF^5Y}1Gss}%<Dm#xMKw_WanYgOz#qCk
zR+-Pkqza&!&@k4@O(1%k&&j$yrqFEM<yI+F*{uPIcfkWw(<t%M+33%`+8yuJItfQ>
zh1uwGBT-Y8+et5)U(|wQD{S0jo|jBteiikeb5HiI?H`x>btNgGk)CJp8K#!iE=y9&
zjV95Lv5I-IDiIu5i+8F1>$6jCos`rXvXy5zyN9Q{?}#gXnpNj_+#k0b>4@wob1M*2
z2#B7WTQVX9=={3R>sr#tq@UPxzxh`2f6fAU7qVUekLA@RdX(7xUTf|mRX!~-yze6N
zAF8Vx!p|N_Q>LYtQku<g9uP?<Sx~>gITdkGN+_ikb+|KyKtFA9qPBg=aPAQ?f`l1&
zzA&oofX?5jIZ?I>v7axlfzTq-x5z3lHZS+I=nJu4LD^SZ%+*a^VgvFjT(}IotKdC5
z$y!&`V{pT&tYO^0gy7c0TE;f?Y=6}vMJIj9YBHXt5@1vl8EA1&UFlDE$lLmwx!b?Y
z2Zf+2z2F!A*2aSuVcPO{Udrj<y@>0;Gn&Pt@Q|5NBwoadkCZUtGRNIZzcu@b`R}sK
zL(AB^pVk87pT+9Ry*p^%FLZ+G^_L*KZI|RBln5g7gzLBp4Qt&5;DHX+eKxL1GRb5H
zgbJLwpPaIsRu6%xdx-#SQ6}%3Xx@XXI)TZOo2yZR3#8xyVsr}-_&hgSyZ6oEkLH{(
zMygmkC8a6<9rrQx`q{62V#%3qX5Kzrf8>8C=6mW&_|=#MfzSm6APH<=OI~I3R!+|*
zzCaD@(lnxjE8ip1**96nfr?a>JooEOTUZ-In{ba0u?bb(Y)l@{6dE&TAT;^w=%6nx
zrsbQ?eyrY{U`r3|LV9HAj%F_n=zEV;IDp6S>QNjSQOD#97GTqAuO1b!8EsixtPq%!
z@m^QBu>h=YQeNyh?ktO<gh(=Vvo_@^2Pk~wBLFUx&DPl*;j4H^KtJ%3>e~Xb(<z}L
zInRU7Ip*2AOks)${QcY@y(tg$(0kIQy{y)9FdZ!1!Iu%!cRoka{BqWz>$C)2I610z
z)?VaZiidSo<si9<Ez|{A9#w$d0A3)Poj%81Ct%oX$qi?`+tb)3FhsZ28`Q4<5VJJ3
zy3|QLa$UcAK=EW|VSPsU^#Rh0>3FMidWq1IW1U^w*;XQ(ax@cJ0;;e``ufuFE$wO_
zoubRpm$w_&PwJ~%I_lvb5E$L1!m_iH3S&D)$*o=r0qYY7B7Sg%I$D65KJViK_<q?J
zi&pxwB`e-#17c#AhezM!N%8LVXM;H1|Ey6#Oe||$S(WAG<7B1e<2M(C3oKP@W#>cp
zIAEuMK=M0+Y!xos%7n&}{mhEgA6osasHj|Z@5kVP^#|k+ZLZjqkai(zl1KLa0wF2#
zpcS8Y%Gihp&x1t65NRWYOGPE|b)8qGqUNsl2M_v5tS9}Dr@2)e5*rll?7DMgF2V9B
zAp5HHlAUyt56Jnndi0fS^9<44FH-dRVs22SW0eFrh%^cDjnMBi$-mZD9LO!wiy0hy
zk8a@$5S6!Y#(dK3q^t0Z?U2v1NTf<R4tZd|WvF=9A}@7-AMe$8OXnhNwus)c3tlWR
zNlqS<j*z#*L|&#9hsVCAi>v8sD9qEvj%-uT?|?`w=x5%+c?P=>4jlkjF<O=emzPe`
zc~PjPd(4Rl?Aqx<quCjorXgA)@eU~v51WWsGQzGbaTbz4X=+lzR)s88=^&^vV0ul~
z_pjp2D{ntJy`A(X;C>e2nW?%P#&?dS_aWPU%Y<ei1|R9im;HcGIvEV)ym}wA{uAU8
z7RZk!ap8{8H*=S&OG*&Dw)%h@5J(|VFAY@Sipa=esT8kraP(>SlXx~Pk-k-ym-pP=
zCw%B8SZ!^V7CVi;<*?3=zDe6vCG3a~`r=?GtLNpOas%#1RmiGaliX=Pq14URk-aC$
z)z(Wh>4bty)PWQ^Zkx62dq!FBkv`NBH<nV4-qBP<+0C-s&Rr9Kvl6<>{Hiows+^?q
zx}{-#_B(ceKK^gNp3Y^jAc}0DoOz#_z!;~xJj0kdBnyfUw$t7v=Et65yLTDdD%_=T
zAQwsuxwUaf<8?aqY*<H<7nFS36H4&@7D5-WF0iX-E62%EF-{jbm0Jf|sfe{bu&o!!
z$pqEEKlHQFguwGIAsQBZir%Ud0_sJ8>LyabM!$~suMT<BLGUqyzIg58yXC-^mqq4A
zbv{Qfg!G=JPl)~lw)j82)(`o;lg9R&6~kd{wGbfV{LXu2)BrPs{a7#+6ofLawV8NS
zrbEu9pDpK%V(_&_Gkf$-=nM4jxvDIb+KLL-4L^ejb<=!q2|NwOHvf#0q!5*%W$o+t
zxc`?x@a@l>fM`tgvJO%>qCM_b0*?;6bF5S4Yy-s|&>LZ#|4hS4WT-PBMvaN8Uc`;V
z)LzfPa^BH1H8Y#aTrSTbUX))T33v_PiBY@BCC7>7N%{kU>*R?C`<P3-rkTfWa$Jdu
z7O8#~CdRb(zO@uV#ux{_eI)JLAFjF!o(<|p<MEEM!mF#xtVq9iu7DNE`1APulwuIa
zx<}g`;Ao6Ckp$i{XOh50k29wk)?!oD*N@!4OeEY4bxiC$2~C0~Is?zVrPw`C7$3$>
z6%9UE>fh&UML$mmqB1eNF5h|<ip2Rnv*cUOivFZM&-DB|n4{+y+`#!?!vMGV=Bk;k
zhfz&OE1j2jhs)Ra<H#6kM`ZD?4pcD2Fg$x*H?ZNwVlKLlG&}1A`^6Uam-xQI*>YC8
z2Af1E<t>XTmE75IpW&*cAD|8U6t)}-FS_&9_TMAu*_|#b44YhOmxu;7dZIz;@VUYx
zb^Anf>Auk?Ri0so3f<Hvay_yUI7gRI+asGDOD;O-fi+K%U*1^ec#NI>EE*rYlD^Ke
zmi7Q38yRW+y}Q8?1R_NGy~s?~G^dj6Vnu9-Hi-|x6{|z4&nf>-%$Xt07E;Pb@YD+K
zES8RbfLpFUItC*L`(bk^PRKGuB3#djrSCUS=P(d+%tHZMJkBsg36mWV(groa=6@F?
z$gZv#9p2?G^X@dEKM(>x-)gV*sBc&YoL%1oh7PbC^$A<6&L~QwfD4^e|L1#>QLE&$
z`^~R4Qt`f7JSDQn9=aV1+Vwu$=uv_;n`_at?NPxpnJL_lbS%?F9;!6+NSu87$48{P
zGqQ9@TIMb5_fJtEnO(w|MSma;VDE8({|#I+?DcFaE-yTOmX$#GlykcJZi7?{0DeCZ
z_oEt*AP(UC_dQhb_tFmJB-$cYO~ku=Kz8}fGnJBEH%>!IWKt@+%eFDK<dJA7{{}Du
zGGhtRkD7{MOAg;!jq=lZ2cH*jSC>j1))>6^nlW;uV7h(KfmCRF^6Etc@M3id6P^G4
ztqIduzr4{*7g;D0k|lsBVE&P8YO^a1T?Q)a^>hdgylRnt*do8xNhq27!+wdcAFz>b
zegR^SC!kF?`VttUO@3z}X-q<`76JU`B<V+QHs@6v{&LX*E^<1W{#WGedIQ-dzCXI4
z;*8T?!J3|;Jaqlou*m;RZZRNucB05VhV;v)cm{aDq?T0Q?%V`RCCL;^6?=8_ZWYo7
z4~#{Nq)>+Vs5{}hD~SDg?T+s#ga!q3|9K)a#_6)DBFgWTWRuFVNJj#;Uv0pASh}sC
zTD<whZlya*&Pl8$R^t?NLl>bm{pgD%sc|x!qEVzqAEy!r2~%Dy<=CfPX>TZPYT~Y7
zlD5o}y2@a=M2@M;8j9t3EeXOubVW}lYoX4yS}U+uip0;W{JI!NJ2I&1+Osq?;0D=s
z%GRqBa}|$|)`O+N$yx)3jE4te_HPW!QAxMBn$4XxJHmWaq1e)i3IRw1X#}$>XHqB<
zT^H-J6TEvD-)l(%_;ji=mpE24q$x3yt|Cuxk+X`6x$N573Uhv;e<<hrXirc^%;agI
zePOJ$Ly{-l&f6Qv%lE-+ZMD=QJuPDR*y37lZvKp4S@ErZ_~y^@lSy<zQX$!cr!HHq
z?QT<dPPdSc&6&T?nT<ugl#a&Q>{m^V4Li=V-0c%*$}8VRw;IvBBlVZ08Fb-o()N1d
zJz9&jw2i+{`dJ0m4!bXgyb9uQ?D)3$&9<v|>(PE&?W2yA6Pb5!k(<pk>s4PZpYaXO
zl<V0SIvOw;lV?lRzU#lP?j^6?X|Y?=*lCkoWPEX5_Aw1u{ZzX^ukXyiq9ugjLj!fx
zYn8p!<*d-ZB*}j>QPR!IE9_d9R^FUl`Xl*GLwKYyQBi5&oN#xmJhzbnt|&e9IX$t2
z_q*<_prh*kboaLS-WL1HUsoO0G2BI|FVB3QVKjK7W?%6nW8C$%o3Ol@_*9o3p6VEf
zEH4dJ&LM@CJl9>mfDgb*kgs^KoT=i8;bBGPbaxBdI5s|zYq-fZ(?9sTa`&<tTxG)-
zr=`61Mr2lEH|{$RT;(j&d)PRjKsiL;J6ZT%9dX?M6uW@W|I|b2DbLF8@?t)+GNbW2
zo`)WqA;8XENV>G`<s#%fcPjt4*?S>p+l6$j!u|ARDo;tc_uG$fweqK&x|*DY)cg!j
zIpGWRMj33%dqT@B+K>7dg+?S@jzw?IJIzXjD4r`j;Q6imGH_}i)I4J|=5IPt$SGJp
zQ2H(LRt|xZ(#&g(bMz<p0%_@k``hD(@soXg$TN%hEU9UF4#eBjeaxlGr<2f!X*D&8
zA7T&@szD-w=Sc{?b<z?QXv@BMwy_-P5ExgA!fR$HZEk7l(^41C%CVg1-x_~@7&UL-
zbB~H5KQrye9|^XH6VFb6C#7e6s*A0&9v>G)cBI*ioW6~QpqR*Z8hUtzZ71s3gupbl
zVpO!hp}99($|=_Au+PFrw^-UJ&PLwHelkafq$<6>c5(jcdz&p}OP>}ut#AvzUt^(>
zG0Thrl4`dv#1ov4uA(Fxb=jG6Ngs!=$K@sokHv-t-Fh628C%}?>dSatkM%UNcy2GN
zi}<p5PLC{7H!vkqc~0l?7ngp((Bv@Kni2oH$ye6c5bmqDe%{?HE&R$zsffdC`Q*tt
z1)C!AbsBG=xMd14eIg5x{ON9w7gR$y9y8l2#}<v7x~Dol-sVwZlF7943G+-&tp^dG
z5v4_Um5(B>A+x+F))f!M$x*?V@ySXKBiyo5W<UzhoNX83dK<><4B?SwGR7P(tHtG^
ziA!NwW$I?QAMI%%Rt#7@HUxrn=e>kgb>L>%$4|L;9|JD(K!sd?vlemODY;rED1ua5
zn4DHtnVBurv#GQ&jT5VElB)=$b!p?x(8+4|oSocg*sq|iGBL$n^Cq0gLbk5yjK(f(
zlS7iFAL~3HoRAk#)zwv*S;WWP-O5@W*l^vRyZ{<>&^A6!Q`^Jcckw=q)qM~TT+7c&
z0kt^2rJ`=9jTrxKsm`x7S!-x}K@aYkOx5gxT3a1JL`J|_7GMGv)!#>krq^D_drCy(
zC*eE%sXX}0n@u;dQiKZH3CC6gTi1Q(GU;xWiQhNt^T06+#)BBUb1+Q?stvh;Ppmwv
z(?SEis0E<SqbDH^uMzxuovMUyIS&=i^S1wBkchu6g(8nUZ{a)?q+j<FfsdIj2=h(*
zTOB^(A8r7_4-8QTcthLMU$`yXk=mtDsAj3#TfXNapr)D48F{%8)8Lr{rfYUq1Z4m7
z!K4xevO!)hI1V*euXNi)RxckBICALL>Bfb=ubo6|j@*1q{9mNS-%M?*R1o90SX#zQ
zEr@(M<kz@*nI&8UIItmk#JVoB=xHj<7wV?uTBi(ZeO6P`S<aV`j`}})G;x(oNFrYP
zY_<r!Qbq%@G<7rsVBa=*v)-NuA@4h?nS0f__~)I0t9%^Ioe4^`zZwthhDv6|I<0BT
zES`-yn7cQ2#)8p9kd6pJbd7dX^dhjG_ha1&Atv45bFwN&&Ilc2h^}|r#^`a!90~ud
z8wIfPa+5GGKIio*iHE{^9#ZVkPDG!#-kVAGt(1M18+LG8ix5=Mkd^gn`gyk1W4CHP
zHl!8hXGEm$hH||+<XFVF-puQ|yraV0DSOB7dfd^Fwoy<yL|yV_!c<0M#k8-|{0qn2
z^d!ktWdKYI%_$i@^iZD6460v%(mly$fZlkjSw)qdwTJ^v+F{LvV-%VnNgxo}0ov>K
z6O9ddZE*hq6R8h?@F!Zi1ca)fk<)(Bk~o|oPB7vF1pfUwdL37hDu2F?fVT~>xxpda
z<G|xtj@nLz0zBF7F^xEoo}%E%t|+y%%A+@pJ#8>a&n7Q^bd(p`OF~#Ud)O{Al1QqN
zAcs8(BiplIKjQ{y>&%t@b`!`{TG_sOYM~|2v`mD+sNi;MYdcGm@LdamAm$cc8S5Kz
zU)^MCHx>SVKeRG&R7D1X`X%3dz1G);9bD8Vsk_#<zlFYkxj4uvkNAA*&+_*yD?R>j
zAD*%;W0~ly%F5!?W<YJoj$AsF7nq4T0uav)vUuFj>Ke6@59B;sNs=1})(_-b$sr-@
zvy^IaM*@Fq_|*TY`<-wir%=*k<)$B(u0j71*LcT}mugw<{`+dVg9F7SD;>#HOt?!C
zDp6T(HT@u?7KJ?4$6ExaoJ+ID;tAX#*l#OD55st$3Jwfwq7MOPCva`QTS&L900C`o
z!j&0soC?zQvZr|K$)xaA#5uIbN)!tBnR!r7p`u??O9)M-T6Ugxvls#mMN*UH^}ZvW
zc5<&xxrx%eJs%3L@!Qss=zo)$!gJJgyuu{aZv-B$)!rhFwNvPW4?(NBsJ9NaI8JjG
zHTzba()i0OWFSa<DT-ME(mT(4<tG^;0?i$IuGeZ|Y{bn^R=UwD`MSndH$SzEhNr^V
zqR5$SAIPkO=xAintwvq|MDfp9IpoV9+%&=x%Qy+?8K6z#3$&A%FqYK&r{<Po=Y+=&
z(gJd($+^E!Mqh_YYM%B{{<?mNoy=q+t8+FK^-;JdPcYiv%kBB~>Kt3K^5E<H?ZlTY
ziG^zZv9CTFYyG*me>6d5?`msO&~*Zu133Z=qTmki@AhK0|BHU`o9?bCc+CT!3Q6b9
zs3tN^LrEqwd0lZ^1EZp7J$7P#eb#Z8x!0dhN=nm6S?~3X&Kb-9A?zW{zBNU)qx?ZO
zjHd$f@U(C~-qAgb)iTuv=S+e`vm#8HRwi`MskHEi%icl)lZLmk5_SDR34F~Tf`{_-
zz)ds)m~ujbx+APXH(O6GZ^!D0MCRw|^P{|q@scFGnKMQ%#zcZFCrx4z(JI+smpp?s
z$kYB%3V`|RO1L1E1Gnz{mjM0egQ}v#7a!dlA{lM5&xzMZN#8Yd6*D}y8<lS6{AntF
zw)qN|$+35jRaxW?8hf07blUkU(1O{`C!RYYlvN=RYGP*Slc^vkogLha-h@*KJfCmd
z)&>F99OJw629sYuM1)NZ-y}}1Dp8RF{|2<?pjz0J1}<IHcBV|KEr^~(@UnA-@h>Xa
zC`v1&{7SLL#!<TI&(MW|bzNXaooqEd!S&>TTZHI@3wzScOx&z`z1liE-lZFC-k~&j
zwvF4@%S3a0YdW+8`TF!Ysq-Uk1R@PM(9*J>($o3u2d@2)9UIn=8+Z1gAFOd#BkPmL
z#Uy~sm9|BTi*xDyb9+trxt9O+&CFkX=9t3pz%)hvBigK;kE`bN(cgO=9;&0er4P^H
z?da}oDr$5O#-Ueji&=bZ3=iYYlHQ?rDDbG`t9#eM1<v)JLe=y>rU%`Tl>I?OY5IEh
z<6p;z4+>ETL9X1~=O=pkgimH;-(RFD24L1)$2K8r;A}Khj9$Bz%sU5b`kv03C8tv4
zq9cz9cMi@^k8)X%`dIu;cCvB<)c99CoqErD*yU{Ugn4f%xC96*P$UY>@>T?1l01*6
zv_j3l{q+lcf;}>a;<tak5H+Q&KQlM#Jqu{-yh|m-C~9fY0CzQ!f{~t2%BHI#1^G|s
z%Se=!k;$+_)_N2B=gPxqo_199v)W$L{{?YJV6v0nfm{~PSi7Fv87mew3F%J6dXrHH
z*~;#$>1Qh?iK6_{t^_I_?;TRxqTQQB;qj+)c%sXjOW@7dndcO-$v@wAzPpLEWeDZE
zTc(T%q3O0BlNqbjk)xhtAIYC<qg5h&HVFIaX4;(H+34c#=t#Zx>|G|``^{_xNBVmQ
z1BQE{hO_wMKxZs+_5ve3DfuJih@>Ayx;lkF#Ou}<wjpQiVN_hFtLAP4n_Yz5n~kpC
zR2kwGl!J|S)__V}D||+w>32zmg>+FE`8PqNGcZh<Ld4Jx#_Kg2kkj}HQfOJ4D`^bl
zb{iF*Uj$c`y{-d0!huD|i6$XuKl>`9#9C+^zIMmIyQoTnsj{7jYix>wmAsacfCFEt
z&PY!F57m9i02tn~W`AOPSWU>fA{sTuV52vurQHw`WMA%Gts5nT#t`D-8puS%rbMn(
z`wQh5{$Qv1{Bl?Hch#M$tWBl;NhZfvTY%GLYD^?lU#*H?gW~0(Gz0|^`QylM1A_ru
zUz1*+M{TFn#;K}q{|=ioL)1sybXM!SJ<L^BvNys7B!Yahzu$fs_!EGUF#HO@h27+?
zXYgG+G$$hrBrpG{?XUqs7?(3nv=V}wK>ZE&xs|8$dNGJNAyh(i$eDT}AU~axm(F1}
z`zXhi|M_74{B4w4A#0<i^Ghr?K06VW+Z7k8kMEzs1)fSe(uUYw<=NP_H{Z@6Xiqb^
zfvaJdcG%>pK;fHQfzGETpI1h&5UA)s2o9JXWM!lxy!9yiL>z0ASiX*RaM58Wze1VR
zj-zRL)$SIh*DSgF9ZgrH$KE-c^*Q{G1USTEBDWMgfATo%DInpEKi>uV5!J<uI1{dy
zv{eR2SZHpbh>~rs`JNjkLa@5I%(z&1l^3!5!b8PUC4{+HMnPckAC)2v(kPr|{qlF>
z0JhaiPD}uaQHgpnG$=>T&<~|Zax1wcQy1ZdXA@-@Q}JzES-Pnp&B9VHR_<SKnKdhf
zjn|flzSeFX$jb$=u6jxE((?!;J^|`1^oI|UEbUK`Gc0Bqnu(zIFoM2x1ym;_O#0P{
zB79|_eAwb>JZ$EHA};o=*lYV|K8t4;5kWwWadD4IOH_l42-J<mnx+K!pN>yk-r6;k
zWI%o%qM==6%<BRd101GuI7w)^_qVE|e^|sJ;D0*ZM$=aWKH=yyrsJmgy<D2Q@YH))
zcQ^fp=0L=;iYQMA4%odxLv`MJy_+Z6g(7GjV}(3CIXb>s;lYysECg}9MgDTv{=Aq!
zC0zDZ<6!I0aLe`;%$gdj5N;u#fcJEIWItsA*+b*Wrn+|PCs;X^Na*DsEsR!MLRk#p
zah*sCsHz%<V`gj1nVD9;JTBV1>y^XyKc47V{<DO@MpZWDJKaW|$lTvp;&n}nP2xMS
zGRFVYoYdZCU8Rj(h()!XP0|$Px34!NOeJpcL@VPGjB_&3N_z<QJ^G%wW<E}WypV&^
zpK-2reL-@JB4^M)cMm7qKQBqhf4JDu*}J)UGUQfuN&ABvHdq@gk5qVKAWU0yqA%6z
zbz<Ig)D~M)7uqhA;q7f5l@Y8fsO7`uvOLhJcx~<0l+OP2i-DA#e@REq)|P%DjR66D
z1uTkgaO(g`g)PG`{SCqWc^N@Rr+Q2EOhq=cKW-zs@LoSEIK?KhPrsbQn~A7?>K@=l
zf^%FjbY92d>bc+GV5<6v>opf$aSrZM-H;Z18j_5QL6JqAW`H&5c)gy&T~1UAEtoH!
zFVL3L#Y1!UL~uIib-=7$@I)Mru>7xG-9IY|BCH0(I6G{W<kf6QeuK@Bh;_xOu=C-N
z)cdXXS03%#`Iqr^QgSvTKVHQN>98h8ImO(_Yx8SeMikQ&)4%+m_g-3k7fFm<m-5wf
z#ENGiUW`YEG7k7xy|KR~CjWtI-oL#V6M>Z>{DecF@`H_<-Qq~XQ!eb)eZp#yY@Vnl
zL(jvmd>r4I94ftB<O`yGWqF~31Vv9();Sy2%_(Edi23P!TLwx8mzyD}jDBw*pN{_j
z!_-?w#nm)j!)WjjoZ#*j2=4CgPLSa4?(Xhx!QCB#ySon%+;xy|lIwof`>k~rKN#lF
zr@O0q*REZ4*6=$23=szs&7bw@nQ@QZ1Zmn1T}RBJxhF3IV^S=d?sB?;S?^&56`2YM
z(kB)<KE6lq`fNwZ3x@T0EF8ZdueC!dkZ`dp7st@LKelwf|5ymghVDsHM-ZndomcPq
znUm&fqEz3>7&ftR`*MdSy;YV`P7jQfx8}AhM?4sdGS?kD0Nn4q`?s@&8;Lv8&>lFZ
zR6pX;%+ey<+VQTYjP3sw<AJ1VI3QWk&4&3g@3>=WaoDQ952*IzG9wPRam-L)gFLi#
zwm?#l?E7QV@p@o;o_i7$QqB60e%jJcY3q7-=AYk6V9AIle1Zvk^;s;<&L`{0WCBG|
zjnkR<-%yN`C6xEHPf^xF*nP8Wco{ypp@gnOYHlRV=0<-G7Z&i0tg9B24=??+*!HFB
z)z$BF@<s7N$>F3NN3|48qn=lW^}7MI8*UQs-d;6yCBr%?%J*!ditl26g6Bl6ziVG~
z_n>Hp6bKphfff~AmtQi6v|XSI@PJL+x)qG+{*>VK-a5Y)+I=DCbWg<Z;afTt%R&Fv
zAY$qAN+lsWkQ8P~nex0Zm&*yh9l}pgHk<L?7rEglsoJb{<300qTun&*<SM_7f*KnV
zTPfYqzrH%XC||DZ9F-oUubo5TDyKVX(SUH1ye1vK+wtl|m$4Fv58ZY`GFhFm$RhNv
zyuhQBkGJ?@7JUq;h55_Nu~!q&Doy94bIGNBihK>A%VZ%XHojlm*9x%FFwC>LL0t=h
zm8jEBp<TLy)^NNp>^XlqEWXV)t{Qm%*8TpzRV^2Q2lVhxaVbDRvU7EpRAkzBb5Hh?
zvrjwJPb|2<q$C6yPsR%)ceNkXb~1Vqba!y=1DfATX}Wcoy|Z##Dsl+<ICINbAxu=Z
zJFMpAio-AB-Uam>P09Y8@TMqh`t)t`+f-IslRt{Q-?{>9Lp~XdotfKv2YKnBrD`+a
zf4Lt!0yZ4Hygxt07;O<SFf8jX$j6SLACU@odi|6~8$Xs-R?*V$pzrzxOJ=IL#+WWT
z<i$)e2s}n{zJhdr*%hvy31Iz>aX&UB?r{nP)Cypln*1a0Q9x|`?VajgTOx=qf9hH*
zkCuU0gV$sMzz0ZDq)&`gPm(|cbv7zKP6^%qNT~Sk>22hgP5}NZsiUP<5cm83xwMup
zF^DKo5Qk{@^GZr24C7JeyV%-Nlgo#1Sd<{d;zA6VNdUbpwWOr+Wgm_243idCptv$>
zPt4;X*3e^r&+cH?rA1ziZ8oeWHZfrX4f+D_pa!9nxDm=0NYNuppm|lGAF%_Rkv`Iv
zkE@bGRRDM*f=ja*FIog<WFa_OC`*bQcR4m{KuADwyFWY{n(?Z|F>lEd0u)QKBGep>
z4(uJ9q5WyT3+3DAPj11Wr2Z8`f|2fo!NUG~LhFywf{gOg?QKVyDc?)gQ8+2(wU2j~
z*VY8Eq}y;-uM^d-F0TEV{>%{AT;DaP;j`a-%y40D=<STUGw4oi2m2TMmoZteSI&#+
zRYPJ=t*OHM3MuAOS|ab+JS03yQ<<*i&03ORW5a_UM}2!I$nUOyMgl<?sFG)E%f(#O
zXtPLr`4#jASCRLQL$bk9fA*l19Y{voRqHhI6kxA(Ci4&?JY2H(>16gSrJ5u}gcovW
z=kt!fCxW!V5@-rWOpumIq%H>&4fh9cuIPm=`JY~9c3Zl+;?`GIPGC71`b+O4$)Nz4
zOO4m7W>m`y@7J9t9{DIVUK|lTD1A94ln%;5PaGh3#023I2GUdib4j86GTi0~7lKQ2
zYXg&JFyQ&JE~MYDwR#2;8L&gBC|)0UAsx!P?rcTwCxf0VvVxlPvpxq}B__HNY`J-M
zvKb5qX&@_I1+M++MdKeKajye056)qK2K!@kvh)H=3@h@hyc(U~uB+h-ec-em|JZhc
z(enyJC;+gFVD;)DaeM=?S(8st%pV=iNXE>a8es;Xnhz#}DGs7y8>pY}jqYLz5srZa
zi|5U%P+aaGHxe&|G9}p<Jpuz}O$0NoXI3}<a1AnG@Ly{k{%OHL-K_)!%n~;r=MHsA
z_VPD&pCkwg-L;?2wO=o$NN>99SS2dyMrKi5zU@}^@gPn_sp|8wd+&M1%Huipwf+I4
zEL{?OJKc`Kl5g{#)W0E-i2><ww(7o7?{;I4I}7mxcQt-`K5y%KGYzNd3n`oMX*&K%
z`{qz%+t_kJn;n)y7pADpyn~>4yFZkbc=PO2*9{&<vLS}6829UF^M2qk{qeQ+Vlo+K
zu7!|_!K$W;WM#Cl1qt_|Cv}Pt`qpYQNJDwMh=mo?xxIsvbJSV8{qvo(a|)b*B4&4t
z(_>U|JqQ241&oRMD~R`g$!G`3z(6O<$(CKxzV%lmadUS@b4osic}b|)r|BGc4;(1{
zs(vd~0ip@*gCtO107DGIZRBVWXUw*dyd_2?4=KJtz`{Mi3e_Qa^h(C8JNubP4%AIl
z&kQF*6bfb)@x#Tpzh{ea*up?eyC%69V=mkm?o%I2GobnMqq<yCxWL!w%UxmNLXaGM
z{k(>hVw|7QQXSBFNp7hA)Gk3@41y75cUc1!C-UoH@!idk61_PM?65tNf+%1oJ?s}<
zKor${Fl1*FN|Y_9k&Cy4V1I;HNQVDdJ-#(14wN@_`M0gZ7{HY~DES9cvO$5D6&2*a
zA5FHk#WHUD6qT#xQVI2b$qrGM6LeO!clYiHG(_mm!sF1>BEZ2eqsIaq9bW7o?~wtz
zAMf)gToVI=`FZKT9RP}y^!Zr%1nEdPU?(ERUGV6rbvvE`W!tWpNeG(RvP|-e^B(J+
zExk_wmy&?`@(|3~p7%N*e6e#2^Z4&IzUet8mDV#_3-KjFOYe=G^U(*1v2dj)H_aNu
zL7r`qusvf&H_bB|=m-xi(B@oR<SVZIGgp3a1O0*G6fnUNM5GRSb$pc699DySqrx@5
zUR_IPFJ^M074qm=FntxF@%2{X>%xey2r25U>F>-d@l5~fw4(g>i9xWo`s;Ld%4RE%
zt5!%V@8Oc?O#Seu2LPM5cV2>s9h~wpdcg>R|56U|HRaKxotk2r>nY3?T7+4X1A&nx
z3Y~~tz||?TkR9^(J*YNUzVB;l6EQ_*qIoFs%gB7!3}Er(DW%ioV}Wf|GtHh@#+fr|
z4c`ZWr<tXPLVDuVHBx}%G${0vUT3j2vI08smy>1M#C-fk`dsx4!SUg!D(F=jCX8`z
zrd-VB6L=`SZ-@>Kw|2f&=2x?G6sQ!lW5yCmG}F$F+1MN9yVN(BYNyn4PAXadD^p^J
zwc1cl`ndkU=lW4D2wm(P4UA1$#76aX@UfLQWqk!4e;RyE(BkE{bKo0rcInnLKv@K_
zY<igwn5ytd{J)~CeJ-|U2LwK!$V%m0Ofd|=d<u;?uuVmhp{ug`^>NohDz5)*<(o2-
z#!^{W`1Z$6o;TpsO>elQrgRMF1UT$MmM#%jve;z3PDUbXI6DtuA$#UZ_)O1-zjc0q
z0aezkLdWRS&MvJ}amsK)_yZdNc&(fL*89O!?P%>$!UqQ%ppIPlaKgfqnw3Y0)Y@3C
z=S#vy*9-g)1H%55mg`ad<xH)*aNVT;_0QOX;e=iJL1z#`E^7g{df+o;wSXj&$XTYy
zq!Lkd2TircV(d=wc8=%Uj-6qF_9aQgyqOjY&3LT>E7<aO;)PCpT10bderv6^sw#x9
zMEa}6T>2Qb9c#)&8HjT~__i9LX)ym7mD|+?jnw!q0=!HLNJ1BsTOu}ygq=z#Vj3WT
zi53xrAb{Rohma;)9o}!7AwuuVO7?+Fwl=r*v`c#jE~`Na?EaP6f=W+F6g0HdP5+M8
zThI?K8t-};dg@|=dVQwI7U!fOjZW0_eNFiZxLGz@mnbe0LP7onO*83Y@*E)3ahV|)
zSP}(`+yU@!(oUiP@j4GnHlM76+510JddR!pP8dbfo<z$b&RAL1NdC+oa12x%QN_AL
zI`^bl8QLl|Nw#D&ZsB5OBaw_tAQ>5*&UA?U=&%}U{iVQ|Ew)$mW7j_b3O$Ii(uI6=
zm^7dps-wMJRcc#YOazxVX=Pa7^ns4~j8|o;x};c<*eed?Oh7pe5x=9UrO5ujL4K7h
zq%9n%OwefuDDXvE2x0my%0W9%yh6>ubMvH>i5T-ahT01%;;r5Ti5^&?((yzp5Jm(+
z*<Yy|r&PFuC7(Ve9JDJ=0X^Td)N&cApebgBD^?Q?QKm8D-<*;Eke4sxzMXVz$@!wH
zvMH0lRch<`LyzZj-K$L_)bhvAPK=*3dv9j<s*1gDcb)()5na6xMVHV6(N8F~`)~LM
zcXJa=y6<(pck{f-S|q9>P#3<3FR<1Vry)<X;;=-9G~vxUEGwzqTnfeWK2ZW6HZb88
zGM4!VqyH+A{kOvWh*EGewIl`f<x|!8an8X|v1ToV=<4w&=;ncI$|`ExcYqFV6ffhW
zx;QY`qvOIth+$+nB)n`q)Tm#B9*3<1pFV~1I3I<*N9t{Rv}V(+XN^(+nyp|V=o9^d
z)S_$MR7-^1@O^)b1~+<)Q&nwSM{|B<=hRut6ZKw|x7iDr!xqhAp9ikkvSd5Xh*i?f
z$j|h%NT&OOS4j;K)h;pI&?8iIVW`G;e60KE1c3hhdj#-B#_DTZfCR=n4k*-XR164a
zJM5%QDBRL$<5!=uY{j&0+mG;9oEe))Z6e$!>D**UM=vd9dA?0aEJYl@`L9c17YcX|
zceK9qUz_{xW6H6lNCA$2>d|Cgbwx@E9F-0s<Z%2x91_x^^_&$@!y)(*PBu2CWhOMB
z@CN~Y?~EI&{R_e@H4grPoV*-Deq<gTW$D+j2uo_XU*9D$9i~DNQGN}mNWr@lgMXr^
zF1a~5wfS>|I-6{QTKgqvM}JiegV-rpWal%Av9O#_lOUB+gdYisLYRah{RjsnwDdWr
z(T50b619NfR(D%5I>kVhVjPwXVnM7R1n5r9DL(i8OzkjyxP&7Wg{%4iCALN){j9H2
z-AvmliM<|#Yvcc0-3S3tTxzi@PcTAg3woTF!KahP-{lq=I8euwS7;{L(;|8avR=^k
z4+rwY5x+@pWbiR|d#*zAA;l<QPP?C?@KJH1lriJ|#2snxyLYnq8JGdFy3Z6nh=R0J
zxF|N-lxDNoXp$DD^%K;;s-%uRGoa`yEUcc)m8;FS$>SIyT%n#?Pk5E#mA5N9Poz+&
zM85wp=&b1>+Ml?OPqQzOnSRWTO>Kzj)P0_xMSIj|cZ=I-(q=ebuHi+!$`+?UY`3z|
z>6dNzl(hXc?Yxd`s=h?uVJlM~nwdByE+J^I>+A`x0BCpnSM4caD+n^$W_6I{Cx?4|
z3nRw0D0$Pav)M7yzc)WY&4F@dJpG+dOa3_zNh}rdZb|GgS$?FCDkw#FwGguGB3$I$
zL9^i66*eEvb@hm|i0nFqT0&IQM%;2Bte+kE(XwSEyKwDNy(1Wdl0~lRMK}xfQZj(U
znvos?P90w7cS27se_QUiwyhEn<??gP)!DD3J_aQ$s#2ycLV)zrigrGBD{6;iIt#a8
zqI$jCBd#U|3>`*H#A7Cg8|_coai0@?BTVw~Gk=6^LfDwsKXK1FX)Tj%yXh{?aYUQB
z5)e`xX!vBsP86p)bFw|XK0j#Pha|kWZaD;EL6A<-4k~bE90f@tUc=$u35MTY7bnmx
ztGhMm*mV|a?kl2&@@9fM&iZm&;0z`Cvc4P_CQ=ffnt6k|lf*)G8awF7c$ysQrlT)!
zxjRm0k5nu)dD?CJ<vAt@NAaU)p|rYfalSp&WUwgHb*SsP=Ukmr%HeZtS?JM1_|Uc5
z+r6ff;8*AImW8VSkgRyVk<Km7RS>g{`F#7}e$ZDJJ{0tB?P6F&1UA^lr^xrt-|fCz
zghhzWYj-jdW@hsK*u&|j(l-6KP#UCUc7bxcXgvE2lE*N2a=1PcgW5ej{;*BX;NK{#
z`9joqhl&_rGlBsvxPLZ?AatO6{xXnVy1AXS(EJCM!F~@1l0;Hdq7}te^$BsT+Km5K
zD02<n5z%*ScB<DuaP&RJN5?I)Q=Xy;v7%&|I#Vkz$|9O6i8CJP8BWY~l!U3v{sc^f
zIIB{87yg(0oI4|Gfo4NOF;{3Sil{~Vn?_nD5wF@PRhn|qVcXYFH7`pNv2t)Fu|LJl
zSXmFe47*r*^cd5^i2Oe|Rdbop`^1vG)lxv}eo$T%5ghSrVx8Bbx~w}$30}jfK^<Ky
z195c00L2G<mx!sqSU08oEFlLw^Jr^NA?y}cIzG^XD64k(VR3G6{oKFTE`~+fB)5oz
z;$N8boV0!=Ocg%TcT=}l-@eqR$M;JkkPL0?(8C-gnK^+R9(VS+3rg8OMHnJKHsNZ3
zq;I*BrW_u^<u*O8oAw=BNMC~A_MG1Ko+5(coxK;OMivy-`6(Z{oW7XDp{YupxpBdz
zQF&x^>GLFx?gNp05N(YxXFnAc<aW@O{k5t-Nb>5Gb{?5#THjT%=RKE~+d6G#L4{zu
z{X<1`t4s^Oj9Ov`myv);AYDAm*V8$qdV0+9KfRiOttcotGhWRDf~vcNZ5_zqg~(2u
z%XrnRN>Dy9@ei_M$<=90^qcpOQ0<sLdw^l*YYw^z>&K1kJX56(T(SfvR*W)Gbis{r
z*jhHj?D;rn7jZM&a6!y3vf}Nj#xY18HgrFHkB;FalD_eale#+z;zoJ|{$Zhud$!QB
zNln>-O^btCLi?zQ1NlazHqnt}^Ej8Nw_7Hfg!EFZ-66%wYND+0gZc`U52<AXMV?eK
z^`_~ETPyCHoiN=X&CB!ZmKwzM_*-%#b;qJ=A`yB|7h8r}pE{_Cy$o*2mph=18N$1d
zC7$ThpUT)B+`9N~&J~Y0k+x(YjXA<vnG8E|#1$j^;9L|RNbLe|J!Ve$Q<)l8$Ed7b
zP*}ZRq}BRtxVbG@ttig=f*BhpA`8^>JWAk8Kf%T+K!#i3(}ivl1@F@grBdi`F~*^a
z^^W(=Tu$=L2aMya-hdg0xA$m-k_~%N!z3mX3?!8S$0v;Wec`1ZcFTylBFy(=nk|{}
znFK!*RV4bAWfbj1u^@4uMz@<dzS%7gNZ;C?j@t-IO5~6lfo$Jy-B78>WC4|B)>EV{
z7D^HE7%8}G%zA|$x%IneWY^PpU3LALmfT;r{nxYpd^rqqpw!G0eVeP(NAazAb|D#l
zva@FU+xX!|{Uk5~9^e3~C3^AI=Q01An1P_=l*Plj08U08#lk(f&fhyuhE#%rV&op)
zELW<E0+lVSpuJP%X#BTrtZ8o3F;0}L>(X2jVP0LVO`h*QiwVd3KlCaG&_7>Te%uZy
z>UxTlJ-%ngyOMPj$WZTgepCF$-(^3$vZ}lvaNq)h5=xL&6Va^BlT{^P5kjCG#bgVA
z!;efNYmCrn8$BilE{PE~*RL#8B3LWGe+lr7{DZXkq#!Ms30CNl+`ilOhB;p91yA|(
zm6NG->xCR??NzA|{pgYVkZU&KYo9k8djwxAPk=~XI5xlOjlCuLwumSR{COZhX2MOp
zdRhSuq%SOeYfto5DWcgqoUEY!7eA7d$}@I_k$AH3ZnZdzy);-g5-+3>0T$V!^tZ02
z$dxVdZD-PLPGYuW`KNs#-tUY#FV%&z1yG}?#+x2-AL;^xS&C(rk}hF`sZOMlMphyr
z=sF57Fq}{FtI+)_OBv{s=6;a9v>>ftvpXCagj*PyjtE@8GF^Zlx8jyWvIYWPkW0yr
zq=U{e3a*d+Gd8kpHv~@P;lcY%1ZFikWz<dyx_~>hdfwgNiclzuddQqL8ZA3(3vA9$
za)tCa_f6+oY1D%jE$aSIva<7CM@^j5Fd(gK0N6-xU)b_XLIWkeZll%<IDbcMjCA8q
z)$%c_-5G7Wx?vx__oas@LcQFtdnW};a&klvx;f9l5fu5YZ-!<+B(1IEdOAWu;;Aji
z_%I>h1Wd;qYsP%HqiB!Xds6!S%67=HN;_i)Hm>V#P})jXe}=`=XR9C`(<l5pjG$Bq
z81qR&O%Jk^D@rOaq!+g~v!3$aT>U?;HQ8#*(-T#6gr2u8xFYUP`?R_}y!`6s-83iY
zkwV>z>{vY=EJl--N1-GFbt(743aHzQ($m=+GYfNG^}kAn<|hZg_HlM5VVLGrR=QcL
ziZy#xR_BX4ZW^67e>A@KOOp77a#RataL~~yfu@+2rlO*%%F^cH(Zw-XEuYfP(&TG=
z4@kE74pQB$8%GsoI&V*B^0^t_)P@fXkQ{I+zr4Wo0H2C>QUzb&Ze})B&!NucYy(e;
zO)2f8EiLZhG&dy!qf-g+xW{&8K3ZG}t`t>Q340Q`((eeABw^|EA1P#O^FX9YYqj%_
z^NVfO1?T0(#U=y&<#tf#q~8G~drDBpvRwXTK|yzV6ebBWYacmqwufERqZ7tLC9fAp
zES--R9gp3fJ&*R&fC<h=C-=4^4fEN{6kFao6XFdh@GoHC+!SD|=Boe!7o3}bv+u@p
z%bW>}THc#qdA7MAj>@%K4e3L(smv3;3(Q(7w+^OsLon5p1W#%tkGlZ=(5?R3D>ssQ
zc$Ev!4-l(M9$QbFq8}8y?mGJoPx(HWzS-8DW<8$LENuOjmVe)wFP(Udyp3LG+MH^c
z6i$I~jf>SfxFP?QE3%Dbmd`_Xk;Nr8DMMLJ&p=aWmr|~=W!sET%p2N(;mCQi^tn=x
zUiFva_x)48Y12~a;*By{{%R(COlnhQH)9i}g=1PUgf<AfrD1ov$m#4lk(BfzW6!4}
zB{9YDLFyoFj5z{7;r?QHP5ZB0lqOg4o@lG8qX|8;cagg|Py)SdP=8E=pI=+RS`pSm
zN+-2BovX`t+e2H<x)pS4SWXY+^Zzt8mS%NB)E0nb0Kj?f$M;rR`O_Hb?3c&2`R82g
zu`zVlICSl6MW6RFuaC~(*uFOOrOIG8gyUQ}Z<n+Cr@oWP@ETja-HFA;doD8Bj6Qp*
zMufH_6FZN^5P~%j+m!Oo9925&KZEO66$FkKzd5^q?<(*aMdN<B@<t**d~a+aJWu^q
z0|w|*RAJ|>doz&bwYJKaMxS(BZRkKgNM2e#ap0Z?=v@$8$NPW_zrX}5H0nb_=P7Nr
zK3$&!<xC|>SrE?SOem;Vx3oN8oV2w=<&?(}o?hJCW(oXece~&Bp1+*Hiz|I{te838
zc++Ul4N(9S2knqAc0VBEvQuRFj7v>A720iK1>oG^+7g}dsHZ$g;|(qMV6avqHZkb3
z#dBF7@Emw`-HS4!z1Y`{Rdm*3ZQf0vt)$huBnNerr9oYbYdJTxWbHsN2c9q77`v)^
zQ;kZ}H6&M~R?iAYo6Q^PSFav5&Bd$uVLImIt!^*6@^JR);k!C&j1Qyu-p|S<<)~zb
z<`l9B5uT8i=l6VzXzA*@_T+LkF}1*fExzdpcd{Qw$JpDHcE7nft-z5}gw$d-$!Ttf
z??tU<dZsNaKX=f6P?&Ng(pr7ER_pc8YVcYBCAahqsmL6VKaP>@t+oWpNECbtf^H58
zsOy<gVg39hA?&c&!b^a-<jF`DN?FeOb2q4W2VO&SgpZYP+s||a_q9_ijw2ptN8ZqF
zEGciT^C~JEJ)J&8`_nae9Bw>?2@g$7Yw9*_OJXSo(z)whALq`d@KN^<AO<c=vxk(u
zBZ9W$w^U`hR+9~JkH+<N%V(3VxBe|iZDh<ttfVDNV6~08Ew6obx#1%6*RKs1TdfUk
z#k#a++FHdC-)vM(XR7Ob;M~!}-G=I;xqa8NUHw~OpZAQq%0=JaTTG|rx*P{;+6M2%
z*0&uCid;76w=V(vyfSJrdoM#%WfQlwv4n)ar!V+`Da*<zj!S*o*rSbyyD4ukpYh*#
zgC;?a7MUHWx#S^21Z|-`w@*pokw+9#8!xoUA-6;e-;OlOteD3Jvf8O2AwUv?lrMf~
zWaIV&thn{_ciK>^<{8lq+bA97D~lS_S;uan9U7aIPAB6NG!GlLYlJPqR(P^s@_6sX
z?4%pPiF2X~rsv*$r7kioBn#evdu<h#R(_#F7_A_MR*K!hw7X50Sc*kg@(4bA#wDR!
z4lRA~+nL#LN#zG_FKQrni=>CMJh^sv@cTo(Y(dv&@f&Y2^Ui*3>YebM>bmt%#U8Xk
zUQN^w1$}dUu|4^vR6s@*Ax7K!CsF8t0~;%?0HFbjv1#E3c|%2A+VP{eBC|<!tKfv(
z)F>F#@Sg~6+RVkwe5S_K8QYMjlCr{b57VH^gVo7EA*aF<gUgblk&9)M9Ym-isGO&E
zBm7k9$fCBN`q$B@X|kKa_XmKQ;ai6sy|&ZFRbC-MG0zj(9bhy0Fw6^P(gHg^K#+{a
zB7^QFIq>09I_CZ{{PKtq`Rev=2h;v!&q0+%^nqNuX{#S^V)C_Zy^e>zLyNq1Y>v;3
za*3gphxxa7gZOrP)v6|P<%;W)ns;8;XUZZmC^8Y?OVZW1pMWJcV*qs<#C-iF)P~la
zr-D~rfcDAr%{M9@9^?AGo1vkNgqNX-4XtF(2!3Uw2-p-)Jw9TJBK@FP9_F;HluhHo
z<nqISgpi>-gt1TX%|gzBubmtG??)4g%Hm>XI^mYM3zO>nweHJpUd4+`i6t+9k>?K`
zF7K5I#q033Zvtu-iaWo*!3nrLcx@4J(;LCAntx?9rLw-PSFV4IW&s<<=7O8ivx9M4
z(0tLzlsFd8EnKTwsIne)>!NfciYvR$pbuyr%#G;ktJ<Q95BMfLt@`*v{H_H}lstL}
zFQiSO6n8O3uC{br@E)fW!{_<z6WT1dD0}|1O*3)*CR!h(zDIBAcTNt*5T>^(7<670
zCFHrk-vQM3i~bEsr+2Wg6##J2?wtp%3VlryZVPwiUq5IeoXb<1^*>`Q&J3@yMbfHR
zywvU&qp}-WuFuyzo^=@|4kN-Xz8czJskje1(#D!7e^p|-iTy2gfqa`#0QGld^fpWu
zUE+_Gl0`(DjqEkb8rt){gIqkVQY_w2#bmYO$QcW2^c6N1&kncGHomMBEeFuCR-89A
zz#*E;cAt^FP(8jYTy#IJC=T$y2X!J85w~o?HxJ1Ac`8if2V!t4aNw8j3jP<VZuLzW
zf<FOs01m>318VY?ewObUVf!gzj1#lgi^A1Y9d0VdMb&VftsMzn?JWuRm)2yU`vFOa
zS`qk1lKo3tS&mPdDIQiUT1Kr*x2*K{MQuF<{KR*V2vhLz#AJ)eKEe3bU+WN`H<WGz
zdRqma^=-cLiHuOHAL+-UOFpomU+n%Oy?S(wHRkQOS#fV_PkpeQ<%Kr|`2*0E8U|);
zdKnOMcBb3iwaN7Wb!OdfwoT?wIOp6aEQCRD1{*sgJsUQPl#VL8&}AaxN8!K--S-9c
zTsTe5Mq64S-`bR02>g!~OT;w?E_ejPgi*ed)2<MKuG@f-zU!;aY<tX<H*%JBEq1Ib
zRP%@0uV|XH(yP0*n~TMH!uPjYHwWR8Pi=-XM;ExELke~X@Bzd;#;5)TUIb(!lxD%W
z95`S6AZEbem<7N<Kp_9`E`7ffba~+0-|~Q<1NV%iTRTtbJ)%rHliv?mnTdq&{sSie
zu#5Dz5?V=Uxz9fmNs59Hz3AAoS?YF$O7^9e+#g{hoKbs}Vc)a6s@bID#rm3ecg+}|
zE<5we>u$(UGgcR*jXHYM|NU5*IYmF-7y<Ui+}t|EVI?@5ht!IIOC<OSMWczh!EX2L
zcTifG9JIcKu==eb7}z&9NfAL6zn0e;*JvC`LYuGKKj?0(6Wgoq2?_D0zy$vu)_>1y
zQP6o^&2fs|&<2$U^*t4RY&A=ObKBPLMZC>w;L>On;5JEcxMqs23}(Z<-Fva6FaiIZ
z<0(O8Knvjs{~cby!iGaV52;19V`yzw#BlG!u45^b5Lj=tG0r|75tZCP5!;dM(+~8`
zEU7*eTxvAb!;c!^k>jO;cHJfDb!;vdHKDoh3}w62ZrQuJ4n%_xosGg~DFNe&*VKIX
ztvTaQ*HwrG!<u?vHsJYhkNiaOJNu4+2H!>n+SR&Fd*>!A=x)YiV>)cqOQD<JxZ<KC
z5*o0(VGO8T;TR6b_##TA<857!%2$@noge0`?*=4clWwcX+n^2fi+pSd&ZysaJgu*<
z#Cwj@Mlc++;RUq6oB7~khdx(U(nwzP>$FK<^wYL>)XEkjXfG10oS;FVy8-I?-&-GV
z;ARC|^mv(U41@#>B=U5oNWXh5E|g`$kDcH?@%bac$R(>+zYrIu_PgJY&Ri?}Z^~;U
zz>G^(R}@B}LFniYMB*8&@R>Q8kvKN#i<vK!1!D73kCQimp=rSC{(FndmKx#tRfPSD
z1!jk}_$foyZ;he-)7De=gmIKVpl_u@hJXix!TN#0w(@|F$ff#1g9*e65WcPcT1L<b
z0DT}p_yu-uFtZIHf0W``YJETB!oJ>QVxG(NSvp)(w>z0u#}}|(%rJ3bK&nQUl3m|U
zuJRA-|8KB=w}>Q!0z^BY(P##=03t+Lwxa3iE0lB*>)NZ1%^o)u>|>u@oN8H{Ev5rp
zm_8#IXeuX7pO(eAJV;bT3|6)(x@?X|8gF}dX@p$;S?U$R|9^M>dvkjTI~bR1EU*C>
zaCJ&1`jk2i0_oICB)9Us6#R2pf`nh~?CWe?R}rH1>+ViF(WyLKOhdD{H8SMt@7}Xp
zLux(sB1;vQ#<orb)_))O|97oWf;Pyxquvbd7chTmi9G(6PiKU^E~TKuw<jpJ>A6r(
ziwu~-E=3qBH^uxJfzp4&8|7(0$c*aqUsv@1E(1Q$eI`wV6aM!r17!%n#W>f>|M|f&
zt2GWB$bZ)KpH2Pyi30kPD3i{?-I%d{$`^q7l3k`2mxfw$Ms|ftgM(_OrgJ;(cQ&o5
zKf-0{>)l=sI;*-E8=ywoVBn@CV6OVyIg>s=;A?<b$kFnWh;V0EhlOE?_lm8c7jTbR
z;^0cts6;~-mxsvva;5e>ikMg7Bkw1;oS#tF5mQU{`P|K%a5;~c6Ea5xe|Gb9A0g1-
z`7YPG<xpFDv(Q%lX&2`oRtEzgrUV6a&v-&ET2qLuR>ELX0_%28ztjlQuqUeVC)foW
zm=2a2YsEj*$GSO{O@GLmUq1)Ft;{#{v!*XbTPr|FUGKny93dxM@8<H<5i6I_?)}-O
z5sWS?Im6WW{NxT$(W@wz@&ign!sN`g0Z56@p{jQCDn2}ioWpRLuF&YnaOiYdLYrWC
zBpWH8R}Wo$?`%kJkXI8ryzd%?N8MOxVZr-}JWl}fzu3YG<g1pZ35`qd&lDO=p%A+P
z50#t?E<YiRd7thRG#-pR@U^c@z%BQ2HHiKH?SwQ6&|J=2ogK^7_Ot+9YbLVO(Dw<A
zZF(q>V#Bn6dk6Wqgj=1bPHIh3J$fRw8@G4M?0Vz?{<rsdqf2kcW`Wir6sW(>9t;XE
z9b~qo(*!RUV<1oIbg<gP;ZlEPX_;zqw_zM5`r^(+D9;WlbQ}8A07DsE%l@eTbwl{m
ze>*a;qXx1IDu=+P-kJ7i?6Nx8A^H-v>#LfIlFru3pM!%7Osq162|V0QMw*FXb?ls)
z*wCXB-zjW<&(#v%CYmPehlwvZ!~Zvuvn0?+vgHulp&@>L@k5<Kl$g>pzUx@6Y%c@#
zMI`mwTn)&7KPyZBK}R9b61(HrFtCb6nOs@fchlqEY|37nWM?~hTVJs#mK!Pa*BI@X
zAnYEUYvIt^xm^vdu0{m&vprR=CYG8X9){n&|FlfAnIyxT1d(pzUY&VIDj9ybERV$7
z*f3Al7z0RNpR!5OJ|3oa>GJVn{%0XO6CnJN?e6l8&6E<1Jg;He4tZEysvFs-;s@^B
z>FO~|f<{=s?tDRR3vT9@{Q<V0OWLnNx^2-`>Nfd<_X^;Dr~51#Y{UE9T8!>;dO<Nh
ze^2W})01K{4I*x=v8k!yqmoy5=luBaedU}~4EA0O`7;vAl>PrXF3^8nJw9WJy5?j7
zSs`d3)*Q`yFKQ2a7w`{b$?<Dyp+TPZ<arNsfbgEwObVR3e&wOh7;Ncurc==pHtA{T
zdxKLc><u_*OOXq5VCqV9!?FCC8`-#{V#5Jsk8yR_zQ~w;x&_n$_QmDN$qOxYKWW*8
z8p$CMLi`IrQ_v+0cG2B6&?K*g&#hA4yMA>VTz|oJb5cs_2m)(%4jOSS0b`$K5#cYY
zW5^#d9FSW;6aZ&z^PkO)jWs>B&B`g-GD{n)LoEqf)D{EdedYeQH*^AmW6rUVfO?O}
z$*Z#Hx<KK#H!t2zgmIP0uWhW+YEFZBQX*j+j&2TNwtDu$^KD)x)7@m)jWLM-+^zo>
z5y;XBR7d1)Ir0~Z$-&5XiVx0b<hk|e-fZ}&7Nogz<gvsWzP$l5PJOKyO}B4g`x{U(
z&dR?2uu@YxdXOA+rUykFbS~RL1}^*`3gy-|Mv43ri&^vheGcr+`_)i~qwM4=O^prX
zd}Ah~I>#+uTCkZoH3pDRoW-AQd=k}`CYrNt4SYX}vsfFQ%#wVvr<H3J6&<!*xDg(X
z8+CZJ7DjTmHAk0ntBgt(`~_cEeeuwKUmSR&<rKQF4Em~^xHKQ@@OqvKV60D8eZ5cQ
zL`;&kuB>fV)xK}jr(Ic_Z(6f7qKuV+`{8=+qex?GX0q(9nD;fau6_jMoB!}ac%3fj
zcHTE};#=)6N19;LDtgqInzd0v2|*lW1C@2G$i9z+UV1CeTPKFfB_~gI&{gwe06ZZ*
zipf3!vqsBocwU~7Sg5C?fe7=8622g?m_Lq*C|7cdAd2MNquqTUW)~Z?+vgAqw2=w#
zv6nOa7*W{l4ix(8EbV!k-*{7x+{2xDd)o~WDC?fv;d<t0Su!}N_{_+D1n8_k6uH=b
z=b*8FN&6K>{1zzW)ydnq{Y;ZQ8NF@Y69-)I6rXBp$y}oSMAf;G+vR%JJFBC}MMOcQ
zfXCV<Rc5o{K-6=!iX5Ab_F{Hne=;)SCvJ<&X=k7#@I@WM0=-N{U9-kUsz*V&;a=d!
zsJ7+&&EWa02Ika7E)k#$DC==Jc7H6|-&D6hKR!gJ%g@4>b3uKoor%Q&O6Zq2Yf=V9
zs|peP^JD@oAj>A^?(mjW=(T|}>-n-~jXe9UgShumF7>Whwef-cW~7fACEHgVDfVuO
z3c%OdP3X8>A&fM`7bvuPB6ge;@YZ_2DN)^vHn#}*wj#9^vlBuG7&m5Sqf@GWmWffW
zea<~<kZl>Nv)>Taln8)`s~#2s*4o;}nD{=oC3XEE%Y&o-{>UI}@T0rrLz=2pbvL>U
z{H(q2-D*}H+DbTN0b>pC6TMC(QB?NJeW|_RCJp%ISHg(|MjD;S(+v$sbukjq(V*i2
z!N{1><$atRLHWSuKY<`+^5Ns--|tB9;yvaUXnru9v8bCF$LQ(vc)U=wWAzx>|E=^_
zbNX6X^xZAi8Y-bMMCZX>K2P;bB5V%|q_B67ul1A)e{iV?F?F>(e5-jONg*W?a;(<-
zVg5GXhi1F!4+|xUxT~`T@IL>KH(=ur_KCAxDjQ)AWTd-?UHDPrjcnT2G2lnb_KHTC
zd__*Tm6umi_%)QrGhLg5z|ErazTvGjP7#EnTU`8pr@8%G&g=fK-L0I9PY~=g)6#tQ
z8X`%DEIcGmtBxJ=<r!Q()_A<y`LDN=1C3UxI^T%$xyg6>$I*ZY{yJV57V;*-2<U!d
zhftb-J+=Wg2sw_(NpF8mY9WLO$=5$Gwfz&Gjgp353bN5<W}5H5m)Lg>%#7j@+(z&M
zf&H7tUc(r!hR{TsU?-*FukI%DhzV3+>!99s{CnRPwe3ZrTId#_Ir4dwq-?tBr+z`i
zRerQmVq(lwFkaBSK1Y9>&@D$>+$u#=M$~HM{?^8fU@qnxJan$ny2Kw7onndM=VUu+
zPu?&`s@Y?%^B=smg9x1)BU5vp7k`Xg{kU#ovFT>!>>thq_GU=XSDoVzv(VzkWKq|Y
z#x_;A*P;06>GSYgCVT^p@uR8PSpq$T;KIg+k&nX%u?;(2>b7Kv;twqti0<)uPWqiU
z6Pi*qbb2IDfP!+hpQ*0%Qwp4lK|Z46$7tV=z0T?>$v#sV@L&3-7r)b5tuLoC_YM}H
zElD)_F;iF<;0{74VS*_JUyglP(QR~iZrl;k(fyK|+--fp&yT~P{vpX3M-X(0%jWfs
zoDtGTVS2)7uHgzeT4VPo{-JkPXP(eCujvtNZ`(?n@YWc(>)Tn|<xW%mq|{L8aq)Xi
z=x3IfU28_yG(V+uCaY9OOHH^TLYr!i50~cLZ-O<IvCjZ@2NO-0O!U(MzJ2%(D4Q~g
z(L~FO61(xfN}A&4lZ0LHO5fV4ru2=RZBC7<WA^CTz>jQJS3gGWCZY_{8(s)%MS~>8
zjkjls_ytidvqsuajq<yv>aG`65?hAsv9Ja;7s;<kG~Wkoa47Ki%M06mED?60{sE(2
z3y5v&Y5K0CA@t<h9zs?TOy>_hKJ&ft5BBbRk)NuAyNx&HkfmegE`+p-@G0gc1a6N#
zE|;aAI%P-KYx)$?SYuV2UVN6ry9EyI)iw&2^m8^HKLw&z$k|G3<wnQ#R@@tlPRu++
zd8zws(&E3ozrO8@+XrV3DJfhWTzqpDG2W>*8q|e{-dav!=jYFU*uUt!xrJ_$okfAK
z!Mea@H{NP=tI|F{U;d0IP(2{TfBdvC_f5DJLIoJ9DQsjpuC1TL*KlC)L-Yl@IN|{d
z5HS>1ypa)?l(5%+n3Jl`UZ(ePcDITzF44BUz~gKzvO}+q9G1z?o8L1d=HMl81<79g
zyXXDbT=t_C!Eq~4T1oks?-4d`lgn0Ng8#$wu2VtJOXoZLH!ZKOo6rfKYt|{je|WMI
z1XAEuLA9)b8Q!vBQoY?d;M_hw9I;R`V+|njR$VA%C^Mn_=A+kIW(>NuZn2CFwc9wm
z=ovd&M1A#1#3lW<4vk`hqF>Cmuky$ZD!NuNUUDff#ISGNzye8TIIny3*%XM%24=7I
zxMH`_Mxtr%!<8k$2&6Y~#i~YZBt0($c`^2Wa#?Q?wYoj$3Jka3keW_HRWO^z4piut
z-;Hz}NM|?4a(@{Z5g2_6YBx5cQiHe{Rjr$l+K*7r|NK9&mx7W<^ffZYcJpJh!m%_i
zv$B;<vr<+9DYjtxEm9d<^Po7prhLt@vhgg_dX?Oqla<EaolF12(gqrzG~ghoW_EPY
ziLJCmu9XrnYyVmcd(LR(CEs~?`cd!fD_LAFN>!-V;##?$p*)o9efCCKDvNqEjD&!6
zA_b>WV_}~2cr@8D@8|^16EUW8!kx3~>~PDi{v1Vshbd?s50OAe04+VliDncqTpZ;5
zt~7YL%=RnO*85}`5-6Wy&R)xFSKb)I2P2=l*!lLfaP1{8Qq`~UM_+xobM9qLH1^HG
zkCvyY<a!+$YjNi2n%m-(;CbNcM`!oYmd`4ZFidyLg%#iZ<-q;d=SK#q-3amYp99;L
z43X?*P@P^vQEG5*4??mBqmIc)y7zF8|HTm#|E>G`dO*U1m_X@bT}w_re`=J#Vq&1?
zaDy-sAHdM_DM#dCVZtu@AhT6C_O&L7+I<H}xvaK1INF`DbQr#O8y<JnQmhgnG5g4Z
zJVz|IKv@T&(Aq*OK4{@C@R=C;3XEtE9V-vGZsO?@C<5|jsih0=vL&M>u>HE^%7_wu
z68_3TBA!GgHxlD7;W`ofj9N@{U8>?8+rRXBkpAa!o#g$J+(GYTcVEuPWoD6d|5^Tt
zI#=v7JW|g`Nz#HoU+d3@HLRbp1gunzEHBArQkwwr;3qR(tymKkl`ssyy>iar`vm<h
zuTF;d1TqFPu8+%?I~mY8og%HDSX&gF=%phbmLGOw*%6oCEQS!efRpKnppR8z-x?`<
zZsv2RH1V(jpu|Vc7h14E>uL?}JqTBpc`-AJ!8812q!V$Iu*n=F@<Ac@wQ+kdi`J>P
zoxSL`M8m+rl<aMr@p!1OC@1@{|GcjO@4o}?bemw|Od3MTT0;K;YT5-BqLFgD1Eyl7
zl(O*?xES#5CPzy4w_YJT{fLgYj5%|Lt$p@VrqsNldP;aP5*K;i`#$4QiZA5W$eh>3
zwnl-kwqrK>*{I$j5Kb$h-SBFAy9l1Q{?mdypoFf-quTC`tIG0FNE7crbEl&eP(zCC
zwx=@sonYI-d-LKyfa`L2h@O1<kT-7|Z+k?P$xF=TGVfcR<^FaDRmGa?({@pP#M|ip
zQE7tfn?DW7c+PE7>1AOUx7P+7`poJA((Vnf>lYuSw+=f*;E-WPWuwG%OH+!xm?v9A
zPgYe`ESX}aS%luWqk}xfvg+4sUV^t4i=%kMvM=aZJ4c{+N~}NwFdN+jF37h^<$U@!
z&<W7!I<cC~djBS*2Vx4HCx;w$#ZWNE_Wn1GU%^MF<n%!Ky)JgD%@(Mg&l@eT_=m^n
zMEls=w3l`CCRY0FHofStd&0crsZEf)%fUd)1}eM41nn1RlXMAh=H!#7l|RDaR=|*(
zH)P7IE~rq4)6V?eEh{KjLW&l%2nj2jlbF6K1R7a`<h~!-)uW)Z$5`HmcA1999QRJN
zfERh$9@?O5?GAh59Bb^q5Z_5QPj7MU{kWtO^+jRyFKLo)R2WDR4U61nrDB})#b4bl
z_~Ezb={5EKxCPE*dVLz&7!J4EGHc6qtQs}@Pl>ecBoq|Ez&*$}G^4jS)Ivyz)^Ub5
z>P-3|P?`nT9B(K`+?_`(OwxajQ76C2iY!=Hw(A?Nr|vigt87(z+n7at+`>Ty-@2=i
z>49na!r>eABD!F@xX4oL+mQIPB~WB3RP><y<&Rykm?o#G5F+*KTyXQo6J~J3kf<dc
z40S9mUSvCNpaRzaNSRYu0T&P>^LUu229k-O)-wKDUuD7ail4@i8TwFDa6Hg-aYmr6
zv|gn7)qcv?*2fls?zEYFdE(O%Z`Ld1UMDwom&+n_Tpj!Eo!~6KjQFfs(VtFb_Vxqw
zkcr5$ce(mx!zDZ^Y97^V<zhq5mT|3=DdJI5f)M|B&P<3Zg!CWK_lt%@SO2x3Z!<+x
zh-}N{{kvCT+w}eW&ymL2_%+@ms<5GtO&+V>_r&#B&0Dt!hmO}JMM-tJnDBjYQN+j4
z+S=KO46%L1igt5K9*v8>$H#fTp33skN|y*499;3wCneXBEeKM@Hj^b5_NV=rjPi`p
zs7w?>kHZ+r9~Y?zZOC+zvrw?R-fB9$<ZM9&F!NoYcqv5bw;@+)<6$XXB4&Ix`4!`T
zL#+bw@GkP`^$nh4RI}VrPFf*b=7d#TVBqyq6*kP(P>m(PXQ_s+fJ*bNLuZQLBdebY
zI7IpiA8@3Nq1{tpI5|~jeqUsNsiZfYiwa0(3hm3-mwM>OGxz%<2uI}tEyrkkvGk&}
zPM!51yO<{HSNVF8#jkM6^|GXH-lnTLqd0(Wu;)77Lf~$3{KtY=iT<GUGwduJ>=+Zv
zB;GdTp9WJ?*+Vs3v7SWx$X2y#jtcql>S`46sq;U3%QXx>{HOKm8w(1C)_-cQ=BzW;
zK`qdmKR5J<G&;}PUX$WvuB|~Za#7r#BeRYP?7oL?mtt)+nEhfC7?A~agn*ao4Q_C*
z?gdPB-3tgdDIov1jr?=a{LYe?gU*s}dXwMKm|lYC-#elS)>!<R2{>02m6(uGZ}#c!
zQK5H&Em(nj#`M5o7`V}23JoOPk9m1lXtdxRIE9>uG%D6-+yq2HI{wu0z{^1XWTqFO
z*^dYpAnC*PHw|!?L7acbTCWxa@<vidtySL+vC!Lo`r??Z=k0e)6QP{4ed!8$z=reN
zj(@-bp6lv;bc}+VB9xx8^W80Vz|~lfKAT`A7+}ejrn;5p^&XT3P+m<&T7|yXvh1w4
zhI_kTuRU<qbXJZmFH^0GbJc?M@U-97Vo`D{?Wq4s{&oLiL5sGln&t_3LPz2*@TIEb
z`yw$yBJXgdbZcg_m_K)7$A^cfdzOW*t?B&m-F!QQ?Miy6ACa!$5bs}Rq&5J=rJ>^(
zmnOkfpXK_2qD5}wO4V1#MsDkb5Wp9xiP!jTh9PEhy*`pxrw=5y+pvMiWsG_)()d`6
zoWq{LLuR5>13@_Kv;C=Rf<MD%HNt)5ZOI)*iGxH5=Wu^&s2dMg-l@${pgdyz{IiTF
z=z?W0??<k+_;M8cuvYrkV&=Pj4{5-)wbr>K##NC<ufeq*S8D|b<)xGS8Yq54!9005
z+k77P>??#!-F#if7YDVhLs}yB4KDqSBe!mjn|t+cIh=%t_2qZ6W&O{lV_v>L?|DJJ
zM2;QbEEFUpTup{cf`Il1<xB8&d5!skJyRLcnr#87aY-pW*b-345OWNz%D2|Y>*_wa
zih26T%PA;3jM>Jz{*{eUgi`B-Acvnb4QE_REIcA7Oi`U>1WLn_tejgFoD9Axx~({>
z5AqJSk)mKv>-rCxL&sWJ$$(3klu%Or7A@vePT)S&kE3;=aAn0r6@|m>fUw<@8cpz+
zkB<)a;Lwum9myckbfmLIVHMa(K#S{aaJZB%Bx?s0o(;lWaO%-~YwG?X_Q6p<#c~v1
z^crz_RLZh`n9P8_WM1_!VQzF5rx1Q~c3v}O{8brDNn8EK`|`K-n8)$(tj>i89Z%?G
z)sgpQKXKh(USsYQW=Mh4=rQUbS{^ADo0mfd*MCJLou3{%foN))x|~G;!e%2|eUu)e
z$@^{d?Dq<EgHv^H=yX!*LGr>WRAsARR;Fz4NPB^ajSDFiEX0GTz|Ch|_u=!37MB&=
z5xD_Le~=z(Z;VrH31hT<e%b0wvq6nAWFLV%4;yC6T7*c3n6*+NV+D71T6$=!okHqH
z1sV4hT+C*OFe1QbV?;N=maqz#X}732x?P%Zv|nHf6;(-{z*=frRmcXbg9?%0s&;Xn
z&tln47VG*N8mDb;u3EUX_#MO+Usj|ZM(z9awZHk?9g-$0{kG}U*;P@mV8)kBJvBp`
z7zHsEO=>|R4MSnjL<ca>?rk4N$7w&D7|4*>abbz`zs=fD#-_U$NI#SY3&Rvse3JBq
z?$9uhFpQh#jZ|_fN!p7jnKohkaDS}@6E&Sdelu(s7KhR0Wo6SFIl@e}=An|Vv!mzp
zX?Y81u9+7T6`Rh+Mx)&Lu#j$k$cYOrJODijZG!Xg4W=R_)Jv8h0H5t9=FuJIybCfe
zJA?%!`xyD1?D+3*N^4e~faEPTTvVq9sDvY5+Eg^>)!+IZvm*tx(ibFlCM!rai)t=(
z3;9<MkspkPFQpA3g~@#@>Zsyz?d5-YImnDgxoagawbbV_pPz^a<{-{roSf89zgWg>
zI%DHQfb&AUT+$)$88ow|=qWRJw;A4t&*S;k-qRvqp`g0}ZlN1Kx}8)=sJHKSCo*ve
z>))GbhZs6LeG{IxO!-Z+vGkYOo24dNYcg<fC#!Z|sZg1$%jHa194yK8;d48Dy)1N!
za@AH^9d!Yd>Yu|l-ezCF7UiM0Oh4|PCO?;e;Q~_VcxdTHwCi>!X-nxd60rrBVw2>D
zPff{!yg$}9%;Smq#4v({yp4wA1BC`!I$akR#>GTG&0$l=ciiGHe?Dt@$z`D!@7idB
zx9+aduXfWHvG?Q=knpj@-G)_Qq&{7o)PehjAGl?$qa`5Vt2?XjN@oTyD%i^a`=@8%
z<+4@RX%3tVe3d$zY($P4S-odYU;S=5yZf;4En#sPf7X{T)+&`0?d@mI&Nl6~^F3jt
zB^Ie2QI8_?-uMfx#(N>;YIp+0;r{VZf-p~d3mol&cxiBb#iy5gOa5`wHr}u>ohitm
zN`CEO8yo_n<MC2ZfT<S9Z%rm@Hwy{zVhLZx$!qpmRS;zEGpUIvecj!uooI4by?+x7
zC5W(78XjE?0umZ=8%O!%10lR_$`%%?RqbU3C1s=Y!iShBXQW4-Q(wJ^H9MZYmNNBo
zrm*&Rz}ePLakMhr{SaiIzX|t~_`EzOqo`1H<Td}C!^d^G<X0RcUH-hRCM}5w&)azT
z(uNgrV!_M1xluUajX`k13@J*cs=>of?LHS47N(u^daod66RnbFuHAS6&?h92{<s+&
z7j7#qJY4-A;+m7jb-g{#y*5^kgF6s-z?b8J;z{qVq$DG-(^4~)J@t5PS*66rE*kto
z)oNb|7&eDj`kU^WPPfQ>(BE*aZ*+V4<Ff`kt>SX~9^kdsFss4~$dm`Ilz-*--2bns
z>i}x1+qy{zB!EBwLocC;N)tgqY6K+GrT3;Fy+dfyK|ngvB^m@i6bU7Cr6XO6fOMn^
z(gi^jME;xa{qyE!=FVj1&Sc-Sv-aBioW0JuoEo!&z&vH{BQ?Ocn1A^;pTxI^4udbQ
zys67_h(BXo+a3NE4TaS6dzBaGwKP@gkMRe&B_|%(y`ldCr1A#mI(e6>59lnK#LSu-
zi!ZjvF3#95<nD`gAWiAwX~dEVf<Q3PaL4_F#+v|`sG;(ttNf1Fp{}tG!ZS*ru7%US
zv}m{`mk4{9VY=TRNChlTvKAm%v^0c(g+CAP?Bh|Pvk|tgE~H^e&tYt{f}n;=+xb`J
zdM|BEKtSFch%1dxabU!z95f&DsyrTZNfeQjoO(pPlpSb3c;}$yMZvzJb(!Viho1^x
zKWm$tIJ=~tGICY`)domCp;u)8;}_}!Wp67&qo@5b#(hf&BzAd9sPgxZ^#yW=V=Fa_
zzem00mfj(Lty^(g3ChM7iWNhA=xs`Z(8}29cFHfV;XCd0B&d_xgruC#30!e+t#3!|
z)LIBEogOE(PN=sU($Zv8czb<jep|XKx*LmTETN%@yrhkNHg6frugHA(0poi%Yb7@(
z<v&vT2P2(R-P@2!d^OADEk1NRRkUx|sBGq(U2~cw6*{3cstIoC>u_gIrV+NoU*I`!
zU!TNJ=AG}37*y9Ft^O_)EkY|qP`36W&hHx6O-HGoMxhshLRS!TDLym*@`*b$=hh}k
ziG|&=Vh>x^X!^00jeUb3Wv9H>8V1PoNV?L$r%QvtG5nx61ALX-GBsfs4{VnH!t~^1
zq19TGe<4=vDa`sy&d<Nnjw9bAP#OF3hHcTM8BcpoO%xS^TsrtHQXU_vsEH~(-=j<j
z>0&c&KB%wVrT+S%m$#Lfw{3D_T)v3dfnG|B@)>S<j`fr?%&e@uR9qjgH~V{QAa<}}
z_pe>4hi7ZqEK`3?zsS4lCT$^Go6}z(@<ObqeU~1G5tb`$nis|fdMF-9o$V!u1fDSn
z@GF=oomUAp5S#Ay^7EOP`AfDyLY%)v6IW*Yf+1$k<QT(hF<?ow9!Cc-k?y~2)a(PD
zx#rVY*LF=qZmv2mz^iPuhHm`&G`rwHtR}~u_J5#G8>M#&zX<d6JtOa5nEqYHge|L0
zxK(@aqE$a|V0s?hT3$kk<`i{%ur@q5F3CIg9M`C%KKGHhpE#odCI56-b==>@*EK_&
zxZz&&_{qsXv{~BYkCvcNj+ltng8ABuKTXJ&`?>*Xdvos6=YhYzcbrEfqgNovgio!l
z>2_3}T(w04m8zd}E%c`X*R<}s`&;>rFo)BFXB|E5eX498SVrikwdFV(zaTDu-=vDR
z<*N<&axB5vIbjLky{%`iB3k|GQSh#$ROg86*0(;C4L9A%>SmU|;IPr>hC1itd}9S^
z@t(zyozbd@QB;$OdQ(}Rh0df`Y>{gJj8)gOCzw;uz=wNUh4YDTQ(gwHCXNSn-b$Hd
z4E&Sbud=Sqb>qGhn5d76EGhy@{~a7_%#P$56)C^Y_;LUurTNrqX2<mXnX2f0>eogP
zouuO36g+h2?waU=WVfIE5LxVK>D%HJjSlWHcUOC_6B#R2TO#}quwl@m?Csvt3nWx_
zioxoxxvQUv3>mnW2QMaQ@T}8+*1ebY$-;3hFbNM^(+W}u6*bz(4~luM;yAGVZTz#u
zwxNi7Ewh1%L+~nB)7P*%V1rzTln>Q*{_j$Z%}%xmO93h=M;Kyq5m<4*v8UP*dNjq@
zH}K*>)%}bIG&3XT3kHUOB#x&g)NII*0y)5TXz<f;eWFc<U7-(CNtJ6$N#lDN7`O(0
zX{`g}!A&rLjI~Dl^G?~;u-)OQp&VsXc1_^lB;3jfX#{~ouHaAhdN99W-583kmZhKa
zpd%V+x!{e*w(<K&;26airm)+FmQJqJ+J){Wa$~Z}+X?pb!Q07eT%zdqbojTH!8BZo
zWY9NPU6T4M6Tf+y!Yj9HUerSXogCV@l>HXZz5o8;nd=#hnB`a;$)Tl7wigi*%Frm@
z{qkDik)4egYlxFRTnW3i`umI4PF;)9&lzXIO(cP*HXFXV!d7EKk{oa(0EjF`Gfio0
zri7l&@tLJa(jFn99|gQN{@gjg>=O_Wo0@YbVj?II9P*BO(LwIZpFa~pzH@h)Dkw)u
z&wQWiUnEEX8e6|7W*=CD0be>(ifj+cKHa(8Dr2TJW?i0_f8F4R0{i3vW?n>o{fX*T
zFgcTqtY{?CM763Iq28`AWUHuTHh41-#Zdf(5A7Py-#`6s;xa2<6Tj4{2WNTqOhT<&
zh4R}~#`rLEt)+Ae%%x;_`uN`)8MWv4^_CAl4p69H5iP%h-i|N6X<q_`iE=y#W?K(O
zxPv`!1DS3x&&;4p&%QMDJ(=&Jyy7C;0hFISxW-I8Y(=;rI>G?aSMD^a%7cB{F};a$
z+Qr{eEjXHDIZy!Z@gYXT<M^UN&o{JnQv70Ci&9ax)R1mu+3A_}Y{&qUdm&Aa(>dN>
z^`mk)j()N0He7}md>+6?9H)1r58b0A&1*&_%D3+k$M>=#y5a_ZR?}k5lYV>X8R~i~
z0%=4KzSE~yE$ne%VmjAJyY_Zk^ZoVd=@Va5ci$0S5!r!XXJs!bTwyjAlCD}d{_qiU
zFgpUE^_-9DpVW?OJNQPS@M)SzzD;D705X}zNW=f3S_ScRaA;#>$n>4JiIIEFUA@@d
zM`-Lcee^LIag5fH(rOFn!wtV+Pz}ZK0>B4O`T?G<Vj(j2jZ027b7TD>^>VOkF5P?i
z$<%Xwul}f?l&Jtx+>~uM>AIzyVad6=ONXZ6YOZlIpJsVmdw?Nd2Z!FyL$D$q?`E#O
zPCg@QaQJI|lZLbKd7UYRDcA{f2i5c32zT+hOyFLbL<x0EdhKbElpD@c;@K6zDiro^
z>Bb3%Hg>i}0HxiZXW+)Um}W}s|83K&Cf@WO+qUvzgu|R9ATfv38vpSxpODL#ylie!
zfE{JY)ubo6!%AA#i08yF;2MHO7|_RmhB~#F%7*)uHG=yz#AyoT*Z~+gKG#cvK}8k7
zm`ogPA=I+jbh77jXgIU3b8V$yh?8og4E4spZOTj#0a^R#o<8i1ogk7SZy6C0O-iMJ
zz!({BCLdN6O-s2z0Y)@_0IcBsRSr%2G$?5;WtagQ8~M6P6wuSC2)+TGxciVXdq9HS
zy3(fR!Kk~#siHFTnG#IG9H1GBhyfAkYmMU>2?FvrIm$uZ_r3PMLzDXZn;0`FgbT#^
zXP04dU|=Qa=sMV3(5VHX1SRTgk!=iXfQaK}j!dhN$S;CRuZiP!nGuq)A~ylGgz_sU
z-HjiNXVnvkrvD!co(JtpMxb9&b%hfIR^$Oh*O1_|Z+7F+L?h2R1m}>%0s|h#opSUP
zy&cnN^dEQ0k=*stE{P86rrVzGP^xkbjG@VLIK0;}*llq2#OtA_ZmNTwPh7k=@188F
z&lH>vB2d;!jk58mKc@LqE|8%Gc+Hn&szrW&{=$31VYR61Pc!aeCJQ-WjsPEhhu$V5
zFlI>c2non|EzgtS5E3RXi>SH<#^m6F!#U^JQg`Q8MIU>5-(3p!9!#gw9pXN-_JCjJ
zU61lbco{*y$Rps_K+f)I{H<80Nd!Ov==LTOTST^6D~c`1g*2x&v>MMh^`v|P+?cD2
z?wBGoXLbrrn}{mUTxySXC2>}AP|wvn_)=)W9jt5tL)sNWQ{F;1GBR(4l7oJ|Yx1Ld
z#9cfK6%eT8lxgHkf;oaW%o+I;Dp~XER5B8%5neiwo;7=Ad-Qi$>d<pYB6_31H;D==
z%!A%;KYOfz_rIf0N7RoZW3IRh{B3pX>_y~YO-h->9Y53YCJ9GbhTNpxRYt*?@6Cpv
zJGrKf+Q-WBg>eR%fI!d73sMWi>rtb7p8leP8T?uwX`)qB_2Y(qyke`NbDe!6c_gg)
z?7Qb?w?+-S3Q1>M%7Z>*NvE!gBuCkojDHlTctGk$Y|j*4fy+pM9W!vWZ=uD^J8S(Z
z%X?gIrCL4wZ4adC>TB9Kg&!$xOv?TUiLVCMy5r&ZFWXW<UbVqci}TIz2w6ic;>uVJ
zLyl6^5(8ALU)|p|WbSM`mFoiQ7@V#d(T)NDAPK#i!9x!Iv`B^^GKj(9-+-{*G6l9C
zpd-W`pW$c;faMG(XFA=VN@3Tl;l&|uM~sOLI@vY<)YHCGg#g1<hWNBzEUNGUFP>3R
zNlvbKT^DObPL3Cs?DIuJtor*2am10f);+H$Wp7G`i~?;7P)kptmwj|k+Jw230{3Ey
z!D>BpX3kJ5q9uv_T}PDE=pd@?W)7uYLSSbf$wzZZ?#p`}(cjDqp0b%wCt@_F#mJ9W
z+(^+V1CAVgcs>pAO|_Fv3kW4yKOCx389`mes3rMi^dZT7{^_I7aqKB2?(;cDW2>-2
zl7jL*pBIVo9Hx?WXbyiEv-r^x$4H`WG$4Yymex)WwM>nW7}O~Rh(IW4#}t#+AZ-DF
zi#n<0m7oyY49pqnhT+MK?D>VF12S=YIg1iDz$Mr2JDnXup2*|ACm&o}uGZHH{0<Hs
z;B&K~wmx{bUSdOPcjUUizcGsvT!t(%=-D$qARDkcA^xbaaM+iiAsECBbpUMqZ1Vsl
z_?Lh)k(@IlI@xoxCl3%N(ALfq$|Huu54~;<5@(8-ektqwL<Xa`znDm2ypxO0?2NXW
zQ%YM%W9iF)v?Tw`+;=WsXNnj!FmUi>6^S4T`6h7%!f!oZ&jra>+IGDtk80Kzc;&W?
z1A}3_2yWJ^Z64-6J4t#6)xgC2Z_hhgGv_3#Lp0tMD8sFObXXz0>>(9b<ZwEa_rw+t
zYB;0i<)-B<>1BE+2B(MHz_<#x2QW?c=}3K~oW;Tim;7phjBD0?ut-g9RNowqh9<j4
zJ)KHQd@P5CI!i+O@5@=km5Y*wy1wc2q9+44wX^Oh0%BxAu<x2ZOgG5E|CaO2S7cjB
zj$wg3@H$BABK>F{fPl^sa60|KWEKSL4Uc<<rY`z{rjKL7(~<-Y6k^IH?^66mjRLVV
zyvJGyh08#|CONn(ZTvEwYyMN1zllQ+JdnTSFRo|KTbaGn)o7=#8!FG|W)F;6ev*w<
z8&C#zGDLn6Ko2O`=t{3|FZU>~?Fn}*K2K*DE%<Pe_{e*^tqr*R*E2D!fHyh8nqP~{
znvATBKi{{RdTlIytD#=1%)+9nAO=6d)6EJ$Vgri`IVf6lart=C(S^t6NH-k)FbWJ|
zIez?UA8KEsNN*V(aSRYB!7(l$<@E-r7ugsBTm(=w0SoVFPcoO?sx4q48A8xFR$eqM
zFnAS)rJm;9n?E~&OuMkseKYq!c8&kl_)j#*XN>C+I206V%?mP{(X{<k{uZe4{f?zU
zs{t+$9Z@-)HRaW?+q$@|+?DkXk5yxp#HMAvD$;xyz|KohgZ=CEfj|Dc1h=8@%f!&1
ziw}<wP>w{<TJggn=3r__4;*dGRum;qlF6mvT6&p8qT5S&mo$juB>+OHKWI0${NmSj
z@Nkndp%`94^c;rxEGv@w|5z1#!Wk>q@`X)66}BFC5xy|E5LPXix1dEQyHXBC3F7=8
ziHiyffXp_F858YpGXcEUn=f`W`IWM<e8*26=&5f1{V2idLCsVJrK6L|6=G$OvlmXw
zDU5dsBhs!H+Hg$)X6gmnFGloU?*;#TvwE?SX}Os*K09!8veL0>M4r#JVRw9#4RBux
zU{6Hg$sx)%1d^6j@A#Anc=;!(NWWrLO9NRaZ5v2s)c8-+@PBpU|NSmQA9(>=#~D%;
TmU6^^fRFlJ9n}hD+o=BoJwY9Q

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/architecture-rw.png b/assets/documentation/1.27.0-rc1/images/architecture-rw.png
new file mode 100644
index 0000000000000000000000000000000000000000..c4d95b9826a529f7973a8bbb1668d09d8bacb61f
GIT binary patch
literal 84508
zcmbUJWmuF^yD$vHI3OWN2&mN1BAwEV(v5&3NJ~mL(xXU-bT<fM(H+u?l(d9&NlQrQ
zyJiNx@4ff){rNl&hVhEE&hABsx~d!j-c39V3=9GVd1(y{4Cpxq21E}B8(ax&#iRqj
zFr78z?qL*kQ!Ru4M4CNPFjrB*xDCGJU|?fnV_ZT$f&l>^Bp2T?!S|aOSg7k57!NTi
z|9v;Wy!D^wgRC&17tff3-^hRQ;0L^Y@%vIH=6_bqg#3LPdY*ad?{|nE^0l9<LyF)R
zu7kXeGX@3)3GxTiBBLLm1Hre_dgSs*MOoyDy)CD)slACAr-!Wr@+}N84-xRy*388i
z=3#4N=PcqOPLFy*1bjzc=Awt89&xc2r+=iP4wJHXGJ^?l@^f<2OW?s^Ffk`na}f<`
z*^Ae~|HSDnU0fVQxVYTi-8tR)IPIM*xOjwxg}JzSxp;Xwz!MzK&+J@`Jvi)~8PJRT
zT}Rr?`H7R2gNv2D9Spgyv5CE_i#R<!a-)C$&~Um~ng3@eJLe0u0D@e|J6t@R++6?G
z2Cs@CuZpNSS($;Ik?TwFh@qbRAJ_h~5Bhm^OM4f4Km{kOCkl2hW=;-HfFh{3c`x4n
z|NX@OUQ5Hw+1|z#`SJrhD;J5s3;eIk|NAW|dt0!nvojK6fr~x=``X3xVq8da{TKPr
zyg^+B%#pwo<NC*F3A~>0SFbQI;1~+hceOk)*Cud3Q$0x9JbzcS5xrn;NN36f)saz;
z62GfOZlQPA%=w0o4>h$Gw)cdY?6+qYT6*S*eft|7xi7+3tDY-FK7hvQlfZC^N;c@)
zCu+`m2C_td_|$HQPv}qRcNQM-SJoU2esHdTr}6GMRnt}a5fK~%6Z(HXU{MeQdS{v3
z|9!(UA1+%ESv}i6<2iD8l$=@UcvLUv)Zh0r$AKTJaXT^!bIYvqmv2J7+mdx$y`QoK
zm$i%dyFx8a{<F6wBklYU9GE}GzYn++WKk(Wa4YQ%0lvjkF{QGo4d|)p$1I`I8<@~!
zrXscT{K<DwTmycel*$!02@mUc1Xhjihu--f=C{)!y>7!OzD$xS$E?4gVmHSLPrI>C
z!g#txp4t7{{V?ii9#@Z(Md=~u59|PZe&?9zgu6}w@Y~P|t0&VcytjrsemGh5JEx|%
zN_v__`*OxK%;V(L$T16ll~*<40BfzzGHiVy$?R5s;21MnftOnN-RIACm=Em_*@o<~
zWOBlA49E=L!FHtVfsRgo7-DMpS0j|O-Tow7n;G$rLq{<Q{?XG^<6(vAou`n&r2A~d
z{V(A8;9L1CVj4^e1Y21j7sGkZU5Xm$Mw?sP(r=#r(LUBu<sj2i9a}EtGc|h(%4S%v
z4W?nx9|A(c4kJ7G(d8pE`wf~K*Qp#t^SIbt_aj#SVA?y4(Me=QKf`*X%`9O7W0lDy
zM_k)!8*IM&2zrk=v-`@+D0!mbR18=1`BwqZuj<oIIyrNv1$}O{rGZL5J&BII#TF&X
zRCg3SW%n(!4Tl|?4zFNBb=i9*ds%Atf5)%aR<!R;JT}{>Nx?Tw{F?CC<z&ih*KL}t
zCE(Q$xpr$Lz7JVoAu5F!;=IcoUQRT0m@8d4WY`LKGi$)Eu9OmYGp!)nZDt}rH=J+!
zeT^5R9KG{oTRBO>D%ZuG=bPL>2O^l*@;TgoN@BFiw$5gxMnaOesDtjv#crC-_1d)d
zM{k->-`lOwJJE#5WJZIn;<QEr;iS;_d@25lu{dQ9{Y6U4C#g7OAheMo{j5`ieZGaC
zVy!6`?pU;nC5icd^e}MpRn_ib8zYjh@!vQuaa}Zj_OxYXB^%S{Flwh$bY7`Myql)I
zO1F=VbkRAoj6wYYEKHpD0nY&jq6lo$63s{hrDp<y@nIIm<4AVkmGr6d@Ju$Q;k_9C
zMA}4&(GY!-h@<YI+-Erq1Qf?+vR)xwulAnju@~Ed`O8V{6UD>lc^`I+sVctKZbcX*
z38g;CAw~pZ^$#)(aFY|m)Kvfq$ydgR<zoTa-n@$GD$|&L;q=<2t<dGmRMSFGnt*LZ
zm$)TDbux<MJa``m770T%jc4ZR?C0c7?CkXF9d74cX&c>^dFHSb)Hg*kg_P_!er{3s
zpvkbv9hxNONMa@k{a{im7EX?azX)I4SJm8A;-bI?)#?ZCY1hWZ=gj7dgyoi;PtBos
zN`ZXiQjApDzR2@lx!-<Ry`5?|@Yug6_{k+BG0O9$I95r_XA$s^(CBf7n2*mHOY?!S
z*@W@Q-G#jYQclcqJ(`Rfa~0OvmbSofRwGh7-*)(|ql#xPJLaLra|{Rv=}5W7JF$`#
z%;nV$Hu2mrjIQ=}$672QU!-owrh9yrf_;T3tVJm}I!5oB<EUE*O2r8g2fqcxVGj+H
zzVo<|CZvz4VYnq$Y_5lSS4ffatY$~pj~&p(03qRXHr4VIqsptNz$t*NpM|B>iX>9`
z86o}Yq^H@M@D;O`;(YC2BQ4<;LT)+u5nt$t>is948=vp3-&C(q?l5FqOKy4&*Ts6z
zH=w&cPl<R1P$JVANp!<Z`B8bVWeT6-=f2X-vwmOCNI&SBh(n&i)jX+88=cq;vd=b8
zVy9XcL*5?KYMqHvhl_LJJbh{OlE-{-WZHa)7!G5C2>wYv%^ckt-|MFvO@BS`Sg1QL
zp>5Zxa!m>M@~E^?1BNTJ1q6blMU>f{=ii*WgQrKAu<ZWzDmLc!3&ovEGdVd62fkH+
zs0pUm-eT;QrrE$Afk{OFEzWc*I+k`pA4~r*n(z~nj3}g;JTs+7;FKxB6vTPgdFQKe
zNr6p!govhwHiK_hdZH6e*d3}Tf2BnAU^yE}Zm!?(dwqcau?X;=*=QK6R$|2UjcM^}
zu)dl}QS4i>H>?!~H`EL$l+$)QMx3wnDp%5&8dD<%@l1Dhi_S;c%_=d*%3BKP*l}`X
zfQ)f4sYnpNe+)$1PQ*?575rgAUtX-YRhf=Y(l`Svma+s9j$vcLRkyTTk84cNcXMo<
zcP3@eD-5k=zIQ~#79>8jwiQ3>ovZqB$8(XC^<HK^WYi`|c`4}@Wn}?{;W-;;`e!}b
zZ=NyZOpjlUJ-Q1E0gO^$f3O_@*F@TeX2l#wqAHEaoJ&d)*OXWCtV$Ommz|%dJdy)W
zFA(Q7^#sF<7ne-<Fexb1$d}d|B39NLu2NLWI4~VC02vRNwvvh_3NC<;dzrprQ|d6G
z1Nt9oLLY@AjYRG?(_Il=W`}yhTU+ydO>?8A+>112u&NMO;7>C@`s;J8)!Z*JozM7E
zz(s8EX5yf-LHk!;W(FW!%c&0Vtca%&x3D5>nfBRs9na$pET%D!7w~8RcZ^o@JQgAz
zSKXrGb@C;dyG90QwbRW;8suI5l;1sKwITz+7T0AP3n<(sZapSn87zxB%fB&!RQQf=
zrb&8#I0wXWJ?aBfM1V}@EqIzvju93n^eM&rM;1Sq-UmmRycd7BhVb|1x9sIJPgPD6
z;y?p!B#l{XH?o^;!&+S*>oc@h*=Gx^ZtgnEWn4I{8@Xgisj!uOHqb%JEn$Ah7IH;T
zr$>WwJYNjcsmipborHDl55+}1x`g?DVNI0)A;J;Dzf$cxvir4wk68cB*Z~U=$(>X>
z9h@(+uyAqS;wGl7`=qy)txOrE244m3z=(W+|5!>OX0=g=u_a(XxjrE-%N&t$bNq`4
zh#RKajfSt*hR3p-4JSqS{5)Y!Mw*MV!?Nj397Z{qoj7lM6blOnkZhY90+;W>mXY$n
zHFIro!+W{^z8_Q1Tr$tIT#xhwlWR!e!f-}*TM8JMLiH`yJV~3Fz-ngsZvljxU33aK
zU!;)>@)$EE-3NidYYnSNa_GO<par)pL33wLp$Rs?5_f8O)wc}=A548lgjZqD(4K0~
z&NgyM;H-~r;3uDdHeI9xqH4E|@v~5y!3Y4#IFy7I@&Uvu%C1{1qJQdBZ**mf(`46L
zYdMet)%J&fhqzJS;N6lN-Oc?apHe2Za}x-pmBxKi4#+ZDux5m^r&37jFmOmZ6qKTL
z{%}`7wiQ8d5^Drg)1cZ~5|wu+5+L<T_{&v=_TAjy!BUevo=E(1b~*y|W~GDRcv!Q8
z3^C2Kbe&;H`}*cvJ$U{u&{YUt$}DGO-{NT+QP-C*j!f<tmnBW8L74bn!KiH)=qa<4
zt!<Q2<n4sA=!cdv`5$07uK}kM;V-Qf+RL$-peDD~ooKX$dY&Y6M2BHO)~~&H;9#vD
zD&w=IqC_NPfe5ljtzEocJlpGOcpx=W6%-+41uWU7=dSNGHY;pHb?0d7cx^?=gt#H?
z<iSc2$|XvO@t5pC{djNn(fK#}Vy-B62T0?3IC*eOQjZcYuLaMWrZ$-(naV?4v>KwX
ztr%ajs@iU0>q(lARE(c4Hys{9qq&F@Xp-g=pu$&xzvbgsq`!xO&;X><xH|dOz{r>T
za(3-EC|Yp&+0|!iG@K@^4lwAXiSk<;N`~%xn%%o){06}L8LsDPdW#d93VcM`2b^FG
zNI6i~p<gmfZTQMKxkaVfd<XF;Ltu=+8;*-!Rc*P9L-*WL;4CDzEc~IRI00R!Gy(%+
zMfTo7g|+%u&X1Sg-yUYppX59EeiMAcNQDXg$)!G%tl{+C$`4Ng6VeTtdrnuHR5JGG
zIW0=B2I<h?ePHP5bq~><GgMf$d^t4Giy2IW3GHV<zpD@d6;=s`w;w*9IZ>4tY{!P+
zlu2ba3%s3A9th`mREDmQZ04A{Mc4>F*5+Re08G>(z3!yXTKijTtT1jYd+0#BUqm-+
zw=7PO3Lg_n!hEspBe!<dZ7jv^DZEAZZLBsr2oAr>#j<6WNO>T}`13iY?=x5oM&w`;
zP$K#2#>iF0QCAi`vA(A#Y}VA&{hl|mc=|yuP)v5+Nrkoc*B5}aSQ^A^aU=4NXxi=h
zo0!mhB<NcKF4y1OMQ14pavbSTTZMV9F7m5Z_;4X81cy=Es7>JQT5`;IYD}p#UTj)}
zRQHCod9pH4icio$J<W~+;e5r*-~O)9iuLBl!LWyKFy{Xw?*Y4{Q)F&MX#PKMA_DMw
z4-$HxGd=zvY0Te*ruX2R@PB1De=h@NzK3ObqGZ_=&GCOTEwH2I$sE=HI}6K#@Sic2
z8MTxDOPT(&C<cU@=)aSxi#v{_LUWM=rr!GpCMC3!C&6OXPabTEv*Eys4E<XryP^LF
zg5bEu*gnnqkD3y6qskSDzo!b1U+7hzw0zyqgCP~|=D855E;GDPx%0g+5fTn~7m)cU
z2L6n+NCIXqLl(RI%oJKOs5hDT)FPLk<aV}-Q>OTO6Z*qb0dAq1R$qnkcRIdQZOS7p
zl0RGty#Ki4dlM?TG`a0C`P?}uM+`)tpRp`DD`{%n+AM6~u<sD%gQ#Eq_QsPzt8rGw
zyh7K|M2MmQw%D6E3Xa4CA&5_P=kz77^>`DRrelHN*|Q^Bd<YH|QRdc$KbE!1wd)1i
zxgkMJPtj<bumB5EOV7}R;vWaO$8OeT+0%8(5tcg=+jS;*=C9M}xP+I!qHy=e3G++E
zQlZGy&RzaOg_1uQ9WdRvtnwv5b8%q3{D|~!8sR5<%U=)d{eGz)w$GhwdfT%#wKhdx
zrJ8!ZdXq&?Rrp>8t<ZPJh?y5Jsi!vO<}{&!c$-}fS<E)LIxvr!a)Tt=f`ei`kNK28
za;!TY<JqOW#b~xhx&gaXmVr5sqO%brLc7bW+Qp*wRg-Vsk-5(PxX3eyfflE(vh3|K
zwKUff<)w6(sHgk27A);nm)B8+_1jagQtI8#hs|1?DHr;)x#C+`IHF&8nv+Y8mAHQr
zt6AW38sn?%<kCK^sS>Xuar17f(vgE*0UU2uXAJ)c`Qd4X7v@)yecEf4v(@8y-#kK8
zT5w|`uT;eLV>0>h)#mV?-Kqd7BxU3)K}=B7nK90QRDdd6sAxyU)0T1Cp{bOqtzSPX
zuTh?h@KT%f^qx){)*JF@q+B<h40!gnXDy17rOP|&_3!KY;}0Jt@p_h|dbYJ6CWQ5#
zH`CVN@~J*+{&v`4{7sug*q#XIu77I-5mCsS8jL#LAGQZjlma6%!Pe?8khT^;5{Sp1
z?2<?&Xl1<h;_(oBTxv#VgW=wwQ}tTF{wsl#QKxi5-VZ|u30H{@G6a5CvoErH#C4@{
z%T0RyIX3I1&8txw*?J&OL<^g~1)s}cxYo2n3ivN^XYU>g%?z;DQAa8j3e7=gqC7U+
zo~b3vhUSuNdyBL1k{FA$*eQPZ6DnczmA>uiUqN_xWlw6)stLA#NS;eRGa8U8sdM+L
z&)P~oEQ}te*&F`qv##U6$RQ->dnCQ=j2(&zVKe?l5uE%0`jo_|IU>0VM=!KdzK-`&
zHNwPYh;6Rs5triInURI#$Aw+m-A8Xs>ue6?m^NC%3mKgz(Q-2lgQqR~OB12=Lkk~B
z%tBtZ1v$aPjYk}875VJ-m2p#fXSVIf+pW#fS34)gs(s=<FaBzXc`Nd~mxk4>L3>@t
zPkZXv>~OZuka%i8)N7;^Q<N|5>wetB=J3LPo{>QRPZ(i-1sVaLbTUuwJ^rAbOJtR$
zox3@?P`LX>&-L58g<VPCnAAhV!f5yNUv=AaagrRP<-Kg0CB+>nMRT8=t_z|F2;-La
z7jeeHr9`og=oYcilRc~cfghUVd#exbPz>X<RTkDs?d@!^evV^u?j}lk-C}mw&~Tn=
zGg|xBq?b1TBxHPdZQ^T>4f*ufoBIxccLeV25>iHtK!#;WX8+Vcm*PHzhNYp_*8q`l
zQu95QPL%Qs;D0{q{qyR0<kshu;n?u)(yPbV$MfzYZ1%=Ce()%+CDkx+2x@K`R!9ii
z6s^)8+O;qKxkMTm>z!#2h#=-W$)JuT0x0K9D)<}RU}1*Pp=>`4B-l{Y4mel19NMa+
z=Bt*!kzab2&hn1h>EmbPzSY3bt?pr5fu(WVeY;Gw66e3tUH7$q>Xoc#eZQ)-0k?M?
zqnk4)8}8Kp&pxESgSTZpSP;6NX5B-qBeuX$oXl@!5O`e~Hi&J0VZc$s?P;brM=7}F
z4I&YwjZFfAdIQIv80A-PkqX&2jha1{p7d)z4z&4HHnZ6tYC7{pYGG?#P3uUg!L}tm
z?13b{Z&B^J@bd4aZhMiOcb;>GBU@MljUtd;oZbWNh?~b(*wpj2bNf}}Jk4aEo_u;s
z@z%qb@Pl?MQ@!G$DJ9xE$AR>P?L!d(S~V|0bhsESR$teKu?rq;DD9s<{&CC6w_wGh
z>FOTg8b|$lhui-|6h%;9X-u#KBmIR(dj?`X)eFBBNFlU59b?+D)czGdwr3kdT_^f#
z<5PYYzF5o#*`My{^Me8Hw_L-9JO?{G18jC&Q$kr@_Z$amCRSgqE&$Earjgtre*Xa2
z5#6sil6k<6v}|vJ=mn`cGQix@V*yWz<f9fD@C}Qx-g_TJB{=*hJ^b1$6z%KxI;`h|
zS-IN$_*E@%C8R7C>z?g$#69om(~S5COsM1UgKCqlYw_i^860_phm>yKQiP4z(5Kfj
zw+dyspI_yI7j|t*c)vok2pMU^nheo)>o&eJwfF;7v8A_PuMV#pYz%H%h@N=ve*fAk
z>2<E{xoThD+7Lr1asSur6b`j@&!5j9>KT-7{$Lu*7%i`u_t{hdyqYtoMtA~``$;a$
z=OZ3ax46Koe>E$!n|)@Q0F9^=)W)gJhWYXM+3Jr5)`Ez#?J<GQc^|H$$IBkR=X1FY
z>Ne5g7H(H<%SuOINN&zH#6+C^jw!Ksn2LOF3!SOPCwvWGqh5<yP&>DiuWAk~nq&LY
zX$V~*Ya6U(IHptQ?6oXZ=9XBE`%rPs^ZrL4yRp^fI9#^+nb{dWG`7nAA~AoE1{HYl
zD69_A4&U;Qx~-mce2<<Q$yloS&n1t8U(nWj{KDPdu<%hJR}oR>6=@IVm>9Ja2GPxY
zsFDQN6A?Lz7w4u6YG!{XzyCjM6XpHPK7%C0xY5@2mj+3*fsKk;6lPj(T1KmgAD&)j
z&964#ijPpv3!Yg5w8e~~f*z&8>O?}mt&UC(Jxwnww;OXWFN_*9kKV$*l6N9&e@eh9
zXk8@kT=}!aa@%-&x3uAQgGY<n!qK04jt1|!p80`y`VaayD?iyM=$*H@f0DUhBEEK@
zNWVw`5x~)sT(u4k$iztmVwZXuEoW6AYp4+>#zWEqRtH(+xK&5Frma>Jam4n1qJB^H
zS;2XA^VmsV(_Yua_CkoQTC7dUeP8F+9?nT#y@O3hg8c%+2DyrTJ1(1#2Y1#EZqo#W
z;S9nW`Ocp<(p$PBiagC!(|1c|@8)U$TD|IBdQk8Ewl}ooou9pLTlp>?S^A<n&SSMg
z<wsj&{f!s0_#6Z|cL_kP3dy1O><%Ep2&LU2-0A3l7f&%&Td*@)dYFEc2DRTW_vp01
zKl^QH7j1i7(JmU{BiGJI_i`?8VmA+In74l%pGy`C$>}zS+vm(}2}2lgdk^kJ6J?0v
z28^=tRXE$6C2Gp5k*~(FHgG@Y>d1;A<j7^4VjB>yJ*Y1-spF+>IMr0G<27#87LxG0
zfQJ#Jyb3RE(d3K8)7u=tSGqHJ_}lRJ;pY*ysvVa-=+v*_^P)3};$dW9+Z%#!dT-cc
zw8Z{X-bl?ox686u2}g@NfYhS=&@?0P^Q5E*S&~d`b4EG|WMzm5{;vp!GzNWSBPH&k
zBW!t0YX{AW6k9n;z<#*Ixequg6)F!{hFnK6&lnjRvZ<H6xG-Bd(t6;rU<#skN(0!M
zL2S_+rNr)E-Cu<^7t8_s?n*+1i+mfoseA%P>1pn#&+Qy&HAQ2H_UZocS3t3q?i<HE
zxOf`%3hHB1iWx_=J~Bqm<pafZ#nfO11mohRzmUKpX)sgj_LcU}QmA<C9!d<Tt$WvG
zbp=ryN`)9(KyM@MJLXH3`=mIv6adFJzhpd7Aoa5mxlvQNc`tL^a6*=HU_=}U+JY0u
z_qceX_3ET@rXN7A#I^elzJuBPTLxFOehEMN9uhu88BT!yx0lq0x*Z5_v{nH+f-1@u
zh+gjMe#8ry2nF%x1JdpbH7I)oTNB}2JJ9WFnn6<oEHa4CJtMcGhKcd_%3n$$(T=_i
zpEJ}@iuXplU6khj`^Yf>r2oH!z$I&IgL7Ndb4T6pMFxzPdPZ%oZ`W!D4v23?AX*z*
z2}1r?-UoXHsb3>xwsvsf{+G_v4ab4X!ryd0t~{L33S{#w$ZUT3BALz64ov-~k-2t4
z?d1E7SCbJWvv26R=aV(uzK1A^C|rgRLTaBIV>>fl!hAtnj3n(K(?vGV)*tEq>fxNB
z&gxR+&_E=gnhPlOaw6!4V@s@6Yxvu2*RVRer|1^l*ZAbILHd;jkt$#{8%}l04ST|%
zp4}L3bZ~|^n|_Q`U(jB-t*5P6AWA?B3%~(sFN+2$o97Q;C&hx`<UBy9>@g21wy7T@
zqW@GjA5xFKj&cB$X#lkx#dd*rr>u-vpoEu)7dSpv%kqx~|5eg>FK`z3|5rsL98xbv
zenpsD2zGkOr%5Fb84|kUkL-RaU}I7mb$vHqDp>cQx`rT+<0GIW&(UzP;67u#`hnz@
zupe9M)Q4tRDUi*Ai(BK_#FP+~YX_h6`bPG#B8t51+o@np5vZE)Q<C=%;-f6bg`xsq
z2i6+V#fZ1sxuajzPH=MMV4R?d#Y*h-vj{kZmH=r0Q5;BC*=mafDj>pJ3-v}Tl^Z|F
z|CZK3QKS8ARi)rJPD<I6GIW8C2NdXVzPyzSjK0^X<1aFh^vWMp)l$HEwgv&=FB?mY
zZdYzh-u%17e^=*p!~E!xwYf&=APmSc)@(n6)H6Eu7vNQbM^G6IOm`3nxwGACm2QlA
z+Z6kIvQ)|QSn)TM(6<X!dSo;jCaz6KmPS)RY4m{kX_%kv{eDH=EVA-2Jt`oAv$xe}
zbTypvL#*rN-B&>MW)5%h*$M)5o)JHRpeQL82$X+oqroZDF^U_{V!c&8>^@hqYpZ%K
z2(+}S@U^PKZDLM`Q`*cp{?-wtf2Y#j#rdKNQw5dW7N(|kGEjIel$4W$A&}OPU8{s~
z+h=)T@oeH+&Pb7K-9bI=|ElA<r4_HLKod}fQqrb@07g0@dxX$#+n2}5gOz$9LRy%o
zB0}Wgt6MPF1!$%=+^rT&^h)XTT<!jTAu`<%x6`6k`F0JrG}gns@Ahwo59A7!Q`B$?
zBj6>_*&&7)b|0q!7ZBX#k~(8R`+@&R0zs^?L1Db8>&}!^Q>tXSvFj!Wvg+zz3RoJX
zZ@4Bx+Q$Tt#C|ZOt5~Qk-9r=o5`G1_80jUA=<5PtvG;K}%XeWF0L@|!5t84Wo1;eR
zUS9@(t*2bH7i6y$t+qynNJuLda52dC&tml1AdBf=-(dzx!KxvSt5FJe3X!F`AOH{y
ziw`E2N6N@gMX{HM`e}Z@r{(}$)ow4Z{K9^LZdZK78`*6xpfu~8D>*;Xs1O#h&mKLf
zoO+k@Bi0~kDV0A5im1Z*QY^>JS&_r%1mKEdBOwWZe+B{h+yjH03RT3$s<?T*w^)_C
zy<Z_{8=8VjGb=?=u2D*HmbT#~)=Jp16xN!j@o-o)6ASG?hy?vaC=sfupa_}@Ag8cJ
zH5E7#0%WIAF*z2n6L7#HOfk2xjK;<JhBC~}c%$ZFJ5OCfyD_5iFP^WUdru8Ah7!by
zw(Wc-J`_%^uG08S?4GRpp4RFb*6x0dHo&Y^9oa>8nA#VWEJ(Qy#pvxpmjG~3S~Y5k
zh2fpTPIiW}#)t``YOk#<F{FhF*?D1Q8r|^*bW0P8zYMBDX2nrUvQX@Wx|&*o-?us0
zGCZ~1)<<=`dla{^Dy+$A2Z!s9bn^>sk5-1Y4^6Vq*Sd<BGbEQ+BaVK)=kk4V``#;Z
zRG-Ucd0@-eO+4fzI?M%cBQ|KkRQQ3Ij=KCiM8t0zh9`3S*95oj$Up?EhB(W5maN0-
zZT!zPdm3y~#0%UL>enC>`GuAl)5-AoT%1P{T^}uIxx&2sBD#W<?rakxpn%cL@3~vr
zJ0!wdTZ><7S^N~gJ(x6;_>G5rrAsLOrj^~JY0go47AvoCmc?tc+vTj^nCn2BJkYe1
z`sMc%l}!KBTyJH=J+J<i4qXas*!Y{m{G*$Ng`7UcjE^(b?Em;|hDf$IW|s3q<5TrG
z4I>Sq71C}3N45-H1H_d#o>k(J57gK$k|*)|mbke8)P4}pkMpRoOVLL>i)%G%G`q0G
z&+RasqLxVV9ak+;p^vXm+1bMLJRDY?ycg4b53a5ps`pb^i1QW>IUYY$D}_bs0X3M9
zw<QoR_3W>a%zM!_wC<KWv!Yzft(#`$x_Zm!zQyf(iU7ITYy6{m><;hFy2W%1-V^xC
zU4x8pY>K9jaq=;Lzt$7_TgB<+&UU36<|hi<vW!!68<*m&?A2YfU1q76n?GLvK6BIe
zSZbH-oHRI=C41z37&ZCZ>zR>Kj&>-)(<l|DI^HOb<cEx1o+f8+3PEVU7W7&_GT;3h
zvi;p`O|P>;E`KjVc_PU|4hj+vz8{Nsv%1TOw{~Bf;tVB`@)P>*F(13U=~i|-j24wc
zBy<$+UT$6$*okeX@j3M=u^oPx#Or&T0R#UQ?xD4N<fy%p7gRPelt8T5Z1zm@MDi}=
zp|);Ih6?;~MP9Ghmvcp05}h9Hf|B>Te*|f4=|Fqxmrd}<eH+H-;x0dYU-Q>I>It79
zu_5q(O<}9Wmwe3fR*pHjCg=7;q%FB!P()Iz!|<m2iW1-97Lb^R*X>!^{-+LpNhiv3
z=lWpc=4D+TrUU5s@@84kyQh$;o16{bTnZG+=lCMF-dmOD_|@0Ggi)$d_S;x~J(=u@
z_$Q9G(1p;$cb~p6mu@W&t|z#^UwM_8S6)APen9(G_lZt4(`KIeBC*d)VeN`ErmIVz
zdik<HvEvdKSvOwt<apoD@MM^f9NG_hO-UcOD?|o-d-=1w%f_-FMI$feZ8P4X!|}dr
z&wDenR3JB6DO~_VqG&s!3ql2Ptj#V;5wQJYSeo#_(?2@q{pe-Jvs~PfKMw0t4f>Zm
z;%yICU+Uj6sqiRP+?eXrtGm3Qx*jJil=!=#n^V~7teDsC%KF;fgsOtEmUboGXHwn4
zX*=JRI_<1XLK^&c+raz)B8$S@Fi-B6sSk$r8fVuQ7nu_gE)Y!lYf`18#t{`o7PErZ
z#Rjw4yE18`>@!2HN@=6I_Tl7wh^s4V0fdJS4((Mszk<%N+3&mfj42`C!kl?x?4LTV
zvrg}?TDPgBsE9m$*LrN?!(*l#<DWv6ANJa?^tXae?ecP#T**|z(EZJ?Cr=oHd}+2g
zww|8wDc9a|@5rwaWVKA`yIevexEOr0rrfli_f4shv%}4iGwEX%u1-<t*4EK1`84x%
z1-IgARPpkV^I0T|yUl<FcPjBPzB4|quvR|^JV^DMMFrd+S_pa-)ADllQ@EO!zD=Q&
zbTxPO2@$7*3^~TfO<CHJ$1S!or|5B8M}byu{t3gR+@s9VOG>xReB$l&)R!++$mkmV
z*;Cn`|4G*W_^`X5%ro>W+niVtqpv=Nd#CKP52|ldqlTdwoko0KcB91#*sd!JTSqq7
z)>lkJ68r_G#NHQf-@r|Y!WSK~^Z9NmJO5?W1#>k@=X8y<WM%YQr^Rl0{FBuv;n2W_
zT#8GVgOL#nmEwm2{+}H64=n<peX=hPc$8+<)BUzPkNMjA`e0HYC#?nr52DsI=(BXe
z@Kkcps{Qv__QrU{<I1vU$Fid}&ZRD{F703{N`%4Tq_tmK`SXYNVoavJN3S2A)L$|G
zveNZphpeGB-iWim`1i5z+0@PxHF5f$6-&uucL~#C9Uoh#h(z(ZLNVH{Ixy0sX%JuR
z*C6Y>sTJzH1rew5ap#b=-*iyeh_Z?dnjn4;8jCukOs$W{?pypUoc_QgsPv@&1K+@-
zm3d))1lv5XE%YR{b@&0Rs`W_<=pRo$6V$A!m3@HMTp@@*QaVXnz(XL|G2u%a{v$yk
ze&i3tR)fR3_mf%DJA}n>$tB~*w|mDb)iM^V4FqlU3rRh-(oD+KXc=7JdK=XD_kR&s
zHrld1;fuVwWb-p^Tjf;yutrfr{7Gwj>Wx39C8`6eh007>OE#sGiC#MoveN24givJ{
zkF7Usodxx3y^)tTSc*c<GAYJ*uBpwP(ImOIC760KlBm!V1t$Ym3@YaQ-T}Qym4sK+
zANVxycbS$vfF!K0H|SK$`mv`9jMJ^VFMdgH=XD%sT)r{EkS4+#`SuhNVMQW16nVuu
zFD1Kh+Y84Qnl&MDQdO@<t7aA!v?m(FbQ1#N_7blRyU}{<6q~8K@+13>drm&pGL$Tn
zY}$8RMV>eJ>2BY-VM_x{;Jm5Tue&z6%`8vF{2zP}gcz6AuhHAo@jTvnuv%p26?w?$
zQ!K599J%Ua!_tTq0vbF*v8?;ODMsK|vn;Q2pLVuuu1canaqAP(&jP?w<~#nn#Y%>p
z?I7^a=o{y9Azo^8o43dRy|y%{a8HCW<@?I-_Jig1==1jhqYj%{(E}w8I<3nb6XHL)
z`NvD_2Oo_JKFC;FbgHeKR27k;)r|e%Lb>d4d8RZFYc0y*#ful7_#6H^S9ccW_6U~d
zW~dUrxt2|Rb19or37>gF$}X%8^E5MY?th@Tl;N7KvNu!HHQ>Jo`>}0s<CvvR*Kl=b
zp=N~dHF-5Qvz{i_Qk2zgt|$fv5H9`km$@>0mSa`1I8?*=hu^4N#5vB_oDaK}b1<nu
z<NH;)v{COT;r{TD#zPTohjhKnF^P}s9)iC9OdSxByP;IBuO8!NjM0^BOH>w>?l#@m
zBy__+4mj(WFuOxrDs9l15X2vr@uM{$W&W6>fv%WI42;gPIRG7q4E{cqs@h#*9Pjp~
zdMDGefZ0Ze<;mU%RnU(FebU^H-&=yM#`8?sb(nlEBKGk^c)bh*z)}Xnk%iG$?Dr=h
zS*Hm*c9!yb_H0gAi<WnLcNceeJxvo%15x@r99Q$sc3~K#1s{xET5C?f{fT24h8UOT
z|NPKP;)ep<ENd>T(t4-ee{8MQAjnKBq7C0*g-HE{Sm{05>j$qNKe|^gWt2il@>wC}
zsNlz#*M^N8ME6<Oyueu!O&xE(SkO($hY>>w_=fZ35&E&~vuh>no*}^!el1qd4hW+<
zG(APvRWr$Pb28;}WumFD5to3BTxOpw60|F6%lcORR*Tk@!<xns->d2jOg3l<b6lM$
z=owjZ##77`!~=si#2HfWWT(B;u9()Rz9GP|c$%JI`D7aRC}C9cjRQnEk(qaj=HX0{
z*qe0;5zK%;PF>3)afL1GUshec>*^l8p+^p@{v_%#JF<8EkQXiL5^MOhzE>!<_&)2q
zoBhRpiND-kBR25rcm*2ESuHEY5p9lr%av&q_@evrmDBOqH_ylObZKut5a-QbTnGkr
zmG0NWtm;Z>)y1tM&fUaz<RUFhVSaX6wm86zVY?6}nIKLHE_Z4*8dR9h<0X9}zz<qI
z^7c{b9TxJL%I+an`ekqb-H0*acX5zajloQ8#ocpCU5PqX<NeE?pU#Sf#RCm%zMb8l
ztMfX5d*7^q%f7?h{G%pc{Frtp-Ol#cp9LPD@Tr^nJuiJfCrT%FMft^TF2{YyAqlhP
z`xQb}W;9<m(xO3I<vQ>1l1TsOvfF(7OZS#@{rt*<RVf1<db-FJnj|pE7y<;IuV%4P
z`IN(|FpAu#w_NOzQrd?!Be`^bjl5$?!`)2ZxXF3)c=hjK7RIK6dyByzE{0{NccN<>
zdK#rUd--&3KH6+w^yO(svt1IeSAs;zN9Qk__2&xJmZR_FuE=3Pbzza|lb1csbR9%~
zJPW@6L~T&qHuz*SbYr8>?a2Nr?XAt_#!MBQlkUd&l}{5-{60C3*=(}sgUR9C2mMr+
zLGJsW&-#w_51NT5hPgpb9>Gx!k5|jB(_#b?2UxN@r-WW^(0G;33+B7vDP=l<bgIRX
zksOpFBH-PIqNZ+bPpkLm^-kOJx9qp+3LTyvls-8usrX4Z8V>)2_4y%f<QyHh^mOZ2
z+5v;4o-3mU^-cT7W(%z})hou8$J_RLCy=oHzHQ6f^*syS384w+nX?u)(x@UN>^9^M
z=V4BF<nC3%_T@M-;e5V?t3m-}hkMc4Ii00Rzhw=aUKA#T+PhM!@Hp87pi6=<Z$x1l
z_uba8sbBn`a=0kpa=BN1_Bq@$CN=3%@Lf-GU$Gsx<MX|;@(0GHlY9`u7$`8;(uQM7
zA45U{(lNs!QM1XwhqQt|A)1fy=e-JD2-zk@_KO10FlDMh3S4vLE7^Ct9aPN{K6eP)
zaQ?}2egr{R`FaTv?o*XgephQ;pFZQ&7i~OKDv+?M3hMLP{>fzMW_R!hMAYl7DSFSb
z5b~hxND*Qp|BT*ygG&I%TdO5p%*6Hl<+0PE2cJaciO3UTFv$W+T(%Gcf{6E<V$?bt
zMc(Vsv?eKuX(A`TNSkxK#UkhhT>6mobII<YJ(uaWu0Hp+uuwJXl8A}>ZY@cY!(%>E
zqVuI6DL+4+FZpJjB%SkA+1np}9Sm2z%#x=H!`(R^VwiO^-uXPRaKsnnXZexfTRP9m
zV^7EQ)x;t)r<v{V;l{XusA?+w80xlu@?zu(w;s7#{8B{Rr$7SFAG3tZNt?Fo+9~2T
zRhMWbZc|JYRNlX6;}ba|#v6A9ayMm;M&6Ijw=%8H2Qo#hOv#ngfJ8qwmSu79ns#?X
zLGC70HnSbTByb~fi5fat@0~H3UE4)Be+Ij8m}v02Fkw|y)Ur)ti0w}eQ$t^1!ySUd
zyr0;HzB=m+73g*<5i64Vas$qvoRh^4V~3KaqU<@+g-tW8)g<qcKfAN)ar7t1`=L(@
z*GIoEEa>{OwEXn!7)_tTot1<9#qWbtF-IpJKF?-FG8rQs{mR8=&bf;a51>CeBhyEH
z$5d4yfn;rmcjQ||y+*j3u8MEax4Wem*700jk*U^}yL;eioSxa^Dx`5fH1u9P@l(0n
ztwfTGMuKI&|At|qq++*|#QR14+Y^&1z=Od3pu11Sm#ut+?~9$|<V(r<#>#HOPcPlM
zn85;7ha4<yYzby+>cWqQcT5<PIu0`&(j7iU%@uKhmdfDX%fi55+*fcFh&J^PrciUS
z564{}tr}!69iOc`^_2|V3=2F(Hx4Y58nwyYI%7val}*?!;T)JVH}Bj35OH?oyLxvV
zO^X0dhZib?Gy3G7pUD_@5;|UX8W?Ob2-5e;B7Vxsm-A#%iOfK>#m8BM4};<t`(q+1
zPZFt6GKztag>GLZ+7I+Qvt`)Q9vdG1W><u+!V}#=aH#po$DF*&Wf@Bd;}vpn9EfPa
zBzi9eYSbdVBX1QT5nQK%ll5NiF($M(^9!#U*Eu8|JI4gJHUcw)RO+7$MNZ4ZJLHp+
zWoy&*=N#1@qtqOtG?!5`32+!Y<|;qsnxvYabpbA0N7mLs?XK|NVh2-YKIPGk$Do!A
z`qb-Omo(IgsuaJS5fB=@r&w5jsiJbcdK}SNUw<?AslBdZFsh4ztOVwD$JXCj4Htbn
zRsBo+VVhfnOr_F~R6#eic`-7@w2lS4>HAqr2s%yQlsYJp!JcRL;cxX3_^sdo1*1Z9
zhG0}EGN$ou!+^#0c54BfLd}C3$YF{!c28VG^%HIV+EP+<i{m~~)zTizS6c5h=C{vW
zb0?YySr$9I5>|t;FE9tQ$;<0%Av+l$%9F(9qByJT=VIx2+v!VdkoqM6egI~Ki0fH-
z0_hwkZWKn^$i9=?_iPU4B>JX%qb-difz$6+QP@StWR}fgVz!hi<`ChQ9!4NQT7Ulf
z;8J09sJ$2CphpNe^nmPJxZ#f%9nf#_o_}l?sw&7iIOEKBm*l8*^HrGiG4#`SEFy()
zAiKFQN2or^B39!+tMhIfitr802>jL&uG*N&suQ!14^5EN6vlXr7Q5gNjqa*`Q7$f)
zX{<pnV_%Hr_-#C%&v(x!V3oL-YJ=%QrgX&=YZmh9lNtsBs2AdeR<FmL4-yBQvr<gd
zf48N*N7suS#QJH7ons_~u#TW+qt=x8z<?o{*;EsVue-}<==N&y{KbjoXu`rV?;`;!
z+6&pUKv<LSw@D*y!NzcSX?IPDiEHk>1goUM*~Va!D{cvj5%6(neck-6<?Zp`SN<$q
zskU6+n2nd|4+V0QdTEQOYHv`uzi;=h%G%hjKod`2&x(9QVaKG;aGU7H&y}jH=s_-`
z;L1h<i|!v+EYp@79#CSk)R?szvefU>iiETYyavTa2Gjr-{2sJG-@DAkl*XllAk0ry
z8Tu+6>;sNnXz-^tx|3%xr6r{V;X6&2juQjR+d$>fa}zBrtRz*x%jTHImIePzXQt98
zu-Ea)h?tV08FvaP=Le#l&Y3XoN$G;~Ma6&AckZEym0Dp!``a}C6SRSxW{ix%eCI%Z
zD`ieJi;o-=#Uc`>$abDvx9?*qn%~CVlqrnH8~fXE0#$Dhoqa++$rktKs)RessOF$$
zJ$&d-iXRb((GMWrefU$c*Hc&{spn0`lnrNPQJuVSxOp$=XaBje8<`r-g0{5fI9D_-
z4>ik-cz_{7iXJD1AAcKsjhm3_o3bni<9niF%o%7$nh7Z%%=f1wq62KF*SgNgWQxE{
zpCBqhPQL<2^hLpc%y&*pHwT4&ramNzP`076GkvZ?8CaG0`_3@5<pAFEC8XMSU(U>7
z%pM;<PzwF_!^T2mEgu^`h2|JA=442s6esqtjg~~XZ*j&mb9oWW(E;<Ti^VJUhbvzu
zBiDQ2AR)J(x$pw)NE$?!zt<cs!+F26L8K;1eU7ja{Y!jB_iT`(F}4ef(*pRL{y&o2
zM^J4w*jvbp8~bCvNt+CBS#U>Dq#{Zu>rse=04z1s+dh1!Z>iLLykiQcUy0ywtdjA)
z&S&VR9{fGziY#tiOq(tX0C+V|m;@~pU<ywJVPJP`OD!meGKazW7%yZ^9=kA(>w|em
z&@MsK6RfgDy!3IQ!Z2bZV2f2p12u%v%ZVv_R<4vjCwQxoq7EB#6glLKvU9;XaQlYi
z09u`ljesb2X_A*n@89c!P!1a2dE$Tp{mBkq5Tw8eD!dO{t(N@!x%E9RszvG#e*=Ab
z<1pdR;Y`f?W)?mawN!}P2sgdTSc{~8+5l9OIh0TSG9NAq-P^5>IO#M!P#p>9olQjD
zSf{w2b1CoiB^)oA18iiDPwICJ#lBuYA>kd49JPk^x*=>5P}KivpvQ;~7qKC}1U&;`
zcirSokYgZ9YC16}wg8;uV;bM*9p@`Zkox8<55mwq#Kbf|CNL^W)&d|!>z2%e0bdmI
z{TxN_hJEG@192t$eM%y|P*+*N!>%Uu>N{ZNP=ln%H#1Og=9BB;K|N@K-NG}iouE8-
zy1{&MtGO7Q@BwYh+n8K()QKM<Y8K{JCrTF8G1eE<m9K$MaRN!;6Rsy^KJ|wAp^y&4
zH@)$?Ux=QkOv<0jb6tHgF`syPlmMCOqwe=zTe`j=v8|T4ekb{*{72Nj$(-D6(orgR
zeqq>xUUcEQ3><=n2N-i^oV8UK+CvtJN-=>foL~|pdN5;1HR9&VP{2ak+814*D~~8>
zL(n~cK*WzYE^8l+=V?iOweFkpAtemnk5%=AeVIx5ObdvU>ZJ<=;NYZ*{@gg_xft__
z{46Ux9kuB_a-)i=$h#p04?q}Ku9!R*zz|7kn&>JN{RK@B7leLK)o>Ev0^_O61=bIs
z*AKO^0>3LDyW<LP6$})yc$G&D@R~)Ddm*%NUDO<C4;T4n<UV#2@P;A@tDXUuYpr{d
zU(ZlP0Z}0ac(dk7qo<0%?J}L|_+vC^md;j=9;jv9aIcsr?R?bVqpCDR0te2O{L^@j
zYeI_Sax4eR2Yt=aGwLW>JCaQ&`8je_557zJADwhKJyyZTtSzp&tu*c^7R)4+&RxIn
z-?za)LJT_t_Au1%MlRcBogSZSQZ=S+7qbitkl(K6;bXp?TOJWe4E!635aa${6C$P-
zg0Nl*Ab>wDdZN%C6CnKy?_l;|T$1_3((W#iD2flJSb*&%GE&Xp*wPl4n3Bn><VINb
z^*0Y0b1owpoB0)zzA<$0jYExt^Ex4Dpn{ID66SB|P|zH*BnCsw`2XZ02k#)f=k!T)
zL{2&;TIj*RAa>Ym#xIMwU~rfV^QAobzlUEz(ia7{BXA{eZx<7z6a+zn&<nIUi}T-P
z<^-ht`Zh;?(HArK;i57+LdwL({Dw4g+1Q%TQO1W+5f-yc5=YDX0*(bRy`5R~pP7#U
z|BdP}b)$Jh`d2B+D5uS@<KJ{k1)KTE91P10v+K;-Ho$XV(4_7qKv+>5SibXL4WJeK
zQ<(PlOEHRMKUo`dwATk0M>v2C70UEdVP9x6k!3aVS%W~r(s&BO%cxW-I1T>Ie=PWD
z#OyVc1=z@joCNMe^c)lhVh68E^`NP(VJDqo9%+Q-YmqZ4r&r`<&VUBX@Wd!wD1iK1
z{|%v;%avkpw|8IzD3K9B&Nbg`!l5ApNWRe^$!Sq(+-+L0D@IQ@VIWNLJ;F(S4``-v
zV|<t+(c=9Saw9{|P^;9~%LIDxCL!?+BZCyQD)=g$@g)@7JD_@UXCXcA&9P}WO({@}
zCPai^={foIB251$7qE?c37BZQAc>RAIK41VZ{B?M4$D21d^4&Vad);gd?CAi<2KSj
z=mmh2lNT;U11jc7mDSkRkaJD=5KY=QjhS<E{K<*XH?o;D0F9OVPiQYNhQkOU1(m1U
zT@6C9%vLB;S_Wc7ggy<t?I?@%y1`^P?KkeiM3;n~8wYqCT*TA-I7o`xG*}5ywlSbk
z$_5VEH$w1f+nFs=bvf3kuKi;d!v9a3B=BZ;tsHPrdV3467nA&}2Av8WK8PB?;TIWs
zBiOeWj~TS67{Qq?AotV|KvWN)yW#yaXy?I03d~R<+4Xh~<X}(aG#7GPq(VdrVNR{@
zF@ke}A#9$!$kQIMY39g3H~43nW!_&$ZZOx(u>6-kjX02MVu`79$5s$5kzPZfR6>Iz
zva`zd<J+4dU2^w<mA=nT)~}@x`!=}p!}0GxHZP{y_|0=~S@GEREpjA`Fb;@8e3YLR
z>*}?|nAV1C6cRcYCKnNae=sX}uj$FWVRH|(1g*A#jWCAuW+TS%App{_r*rtoZN!!A
z>$)=E9Z@jQ-<}o*H03*|*Y#&aIW2Gqp=)o<#f0!*n2hp>$PdeKq@V_|jBgL7lE5CK
zh{}lTvR57UUQHvtU5Os)DW!R$agldW1bvR=!HlRemV_WmgmT~@mef>lGmYZ%Ouh7%
zI&c##?@C<B>xT&=eEzRd4+h)<V|VwyFn)XpBD`Tm+wdP%Kzju3<gcJ!vLbP)6>qm_
zj^IzbHjj$iV8}T=$n`vC<UndpJo_O@JDrF?@ZY}$;Ier_-;MG(h**3f)dM<-DO^q8
z+(;i3sFy+LA`ByDe1){RCLbc1{~`b;_%p_QTZ|Y9QOH8^J#Ju!F;;oB|3n|=_-ER3
z@I2DzY#YEai$P6)^c+>dt=>4tPufyqjQ8n?0znXGe2e7rU-2Q5!5ohAJ1Tm8i#dZI
z?L9z5l*+wbxZFmSIRW6XcE@!%`3Wt#v{N?7ENh9{pC8|2_L05k$)>`eXZI#i_G%o8
zeN46bpmGW4B{-sEd14*M|Mz$fID5`94Se0Fc3~RizVI$6u>0m%vQDc=WuXz+3khn>
z?70=_5qs?eS_zZ==K^S(In-3xAoLgEcOyp6iIS>uE*lH@y956<QJ16G=-7NU{V?HU
z>GLj>ZH7X5uiV77EJ{`f+D@WdWcoJ<A|i66I$Q*Cumvg(#(*&3agS{TOGATmk?9IM
zg~kJwMvFvOftwe_7jEfBXYXGbJpr^*Ya?iNBSbV^i3nAcQ+Owm005~uXcxPnC8KWR
z{)9QxjyH&Zj-+AEC;`dBxw2RD<5L#ZYk49ZHK1HGIwYEdP!Bh$LB)U_lnR&WHpZlm
z(TUfS*4(`q8nuGlV6Ictjf&350vw=x+I*2Z1GT#WsRyKyxGJh9i-^HTaU&OCVXyft
z<nuFRrKu-A@t@BX#7CQcK?>x&4^ndy{N*k`s$CMcTSf9HO#mHWBeg`AZCVUz{L3qh
zgizTToE_<&<G;$jkpZWf*n<<`-CKKaJr-UKqQmcADoo(a!`X__4p9#Ft*v4H8nf^R
zWVJxxM#VS7#!enHuM?#xDzp=%pB9-3>alGI<1R&+FSsHUyQFI`CHjr3t{`wlx*^g3
z409%ITC{tw^G`UQ$q5*f0$wY{Kf$<H{$~dmrg^)?_41`^`~{le^mTd_%HJxg;*^9S
zEnshCW1~T(XL;6(B0k6r(g=cr0vc+-#Xh3Vy41(_0H6Mg;50D?O!@NdJ?fbCO9TSO
zO0ifapboJxONX9HB_`eU9wx>c-@aD-hCvv`TH<R<zmoij*~y~kVPM|$63N|vTKEW0
zDB^^)p0u^ZUjg;^G2ksoW5!KKENuv60Q{K<jYoxzMwhd%uarNLL@_Y{=ODcD)TvYR
z9$u;qnqHc~Mx}gE8dpJ9Cqk;E!Kq8s#vmGO+(IQiww$*JQL$GqGYI8vNyUO}-(nc<
z=zjQK{129RJTP&oR4sfRrFtb;vRhpZrW6iN&T?~xPMv~D!kq*{;YRZ2d+lWC<;!tF
zUI_-<(0Z4KR6G5scRVdX+KUI<Q4ur%BnPO*I{%!gv10dMqWi<oX@)(^5ig3^0MR#P
zxV$w@UcZ930`vGj7Hb*pjbr@h+9V@D-BAlpg>odo$j~%Uj_E_G8V-^2JC(?Q_H2Mt
z>m&}8S<_xFiRGUHgg8+Mctek#{WA2%3ysAF2k`KpA`i8rsluoPTa2adS^SS<BVn1w
zr8Wv-)8f_Q1W|<(@g%xr09IBY-u#lk6%pm9!0Nb-KKZ4L=zD!)&CKO^M-7<nU!x?>
zd{C$EtDN?&eIcYsFM@&az&!}xWo9^^eNd2t_JU#{ZjADqu_Dow2H=ERHbv$UK@&F_
zpwi$(DR?Qk+<y_cstpiY4`HdyqC{4gzIS+Lk9{JZG4KU!8bBugKT=wfP4UVx-)EEe
zKX=5TRV{#}(WU`uI82dy*z`qmBcVZplzA7k#~s8w0ki~)rRbpgCiKWnc<7T=BP_xZ
znSQ9gmC^lY5Oe`Xq`sSJMdaGe7i#Mt<=4)t<fQQc2<8K;16VYK`i7@2y$&}cdVoC|
zlKuyTrfXu+Sn_XB+tM>}$6K7qd=!&^T?*`Gx7J0y9zbNm3_#&w<Bmq<G`&ukhD#XM
z!XlS#%E5#A<cl8pq}RKgi0#w<X7+C|NPVS?wdBz?D?KdF8;2CbZ<M@hO06!#&Ur|x
z_PY3(=6voQn-MxIy2_HbtuER|(-!!Svx=dE7b5vrs2cFsZ}lpxUHicvb8_ABk_waD
ze#xJWCvP8a{78`_R6_+`06b0yP}hGp{JC<;zU!*BzVHO=owU&#+r!T3@wA0H8`sj|
zIMUMoQTK^iaiV!%H@aG+v)?#;bLRhSnL8`+cnK36W9$6d=_{%SlR$^pusw*jRoJtU
zX!oaShgXlJ%+1#i`$iEy8<%UQ;+*>W1<E&iXwdTc1wMVmMDc3zv~(!Jc||dQ<NV&c
z!5TeIoxMl;$Dn%3K@QaX>oipXHsVwGN_30)$tRC9v!hG7Th2fB8|Z4?4VX9T?bQfA
zz;2->ev9bf*K+Aw(PRC5UNtMBrusEvu6^HXhr?mY@K7AIgap58EN4+m2>-pYw9#2A
zC9jb&??f9HnqZjk$iriXlPTRNhG?bKN=^_oQ7vsGc&AFTe4=wp(nyi|oUupTJ^b_P
zKBeNFKZI!czm7ldkQ^SqaZo*!qAB(LC6{3wEtgM*w;{GvSV9|mN6YfY-FMWi2Hy(H
z3&a=)rH;47b*g9boqn|VWVI@p;shY8Q^ASSWYLYos)?|<)~SzmJX}{;Tl+1&by!~<
ztHvp9j6XWU+_*p>t8q8fklElDd7Z13O^k+LonF<BMp(*y0u>0eE=ntz@x8s;@Aog9
zsz&fu3(IZ$ak8BZcRc94oJ=ZNOy8S`4A_2sn>5Bx<<bE?o$OqJ6CF?6=E(5h8KL4=
z(oi8c20{qnwgRy|IL=@eJW1;Q>NFSa_ll3y3gtKDi~T27##kFP5X=H6N%`*S?AvDy
zUpq|2XMxF*`RuQe@Oha1Fz3u)r~ky;i!1&^spRm<oWsQlr({N>(rcb+cb?V>zg3XK
zkv%r9wsXARBZt@8jygSy0r^hR=4ME71ctjb*XxuDME`J*Nt!S~Y>^`I9jkHX5@a~t
zH{i_wP~J$XRC|i$(1KCmnEMMl?*@M}hrHw1C8sGwCAj)ttjN~Gp<}h`qnti62~(6_
z0hf2J%6IGQ&&~agcqYy{Kbh^GLi<r-aQ0Ufz%R^0{GJIinx|U++qGi;(cz1cE6vpB
zKWpY38PRs;9?3x~>s(p)iI#k^u<YFTm>bzstJf2aF1(TUv^9&%Q~kpp4i#zN+5Cd@
zf&M2>+)yeIVK~F-<?*2fkDaQ*kB(PG!uetK4Q%Hm4Gq6e#W$|Vp8v>eB}A>VPJaEz
zuIlMszT$AxwSi}%Zjy%fLp+F}|BtTojB0w@*1jUBh=|HoHXuY)K&45S8W07QrqXMa
z-jUu3MMb4a??eSc?@emxy+>+*h!7$r^dy9|H*7s;+<VS_zc9jpWc^p2b3Jp;U%(AB
zm>wDc=GggqX!hBbWKvUBVrzq3{OPIza`&>@SFp(P6g>OzG404cdquS<A^uX<qcPQ=
zGQ!8PfQI_Pw$%@`n9(l5pd4s^8uftueE*H5;OLnRUlZpg#@`lIDT6_N+gUQN4G+%8
zE?XE?dX|`eb24pRy!I=r5TTgoak%9cGq`^tzSG#3nCQ`QOa`Dmky3+Fv{&9C-XRA$
zTXkbvhZNo5vn|n&DjQ4nN$fSpw(u`o>*5`YgJ}g3HOg%*m3hn`mOs%H@1>y#uN7pR
zmJANX@)I?Z#FXM%_BX|mU*l8uE^xfAOZ;xIqUUn8`_hDwigfj#<$3m;X~0q7+ArS;
z8S7R>upO$3Wk63)RfHDXxQ_{GGTIm})N(tbP~m__+urBY|7gW?JUgY`ta$>}kHD6V
z%)Wc%4J-TzEY1gMKyazr&TM=v+gMYUD5EvIO9s$p@N|9!{e#a8bS~73#-A=;h_eXg
zWYhL?Ib@x^+d!Gtbv_jD@j>Rdh>^?TwYFS(EXl4AzXD6cus;_E^H3+81e*Sk;(E~A
zd!|T=Wb}|th*}*(38?nSypcbBG5PbKC1d`%Q?9#ZNqdXEZfTSjSwtB8+I~iimid*)
zu06lukbjo(jgsZDH*maf&mOYZUjlmzf?98<%-6Yeb((t;rCNk$$V+8L)PhUPxBhql
z&oA!ezLOoSkBEsSIl&@R$oj5cN3}XQ`R#iR>jlEcefw=Rx#%P(lNw_6xOUkzh`jaW
z=Nkjt4AOcaJhY#7Se8>{AlJu?X?F+Xjp6aTjE6GyU*L7+NNVTP=eqOBoTTlK2m$Az
z!!7%Q8sML>f?ZOGh)3216tQ?O=O~lT@jB9@RJvNsXRf_${PLf}GnwfdGP_ArUl?Sp
zax@Q)eaZ$CbqwLP^Pm}Z$1;)1CdPwr4De^Mu0iuMPQh<J!=~>vZ;Ns!{Og)NC;a1s
zNz0nwmKW4|fYXx&nU=HYMEvka9DR4`b#cDDE4CuG=QgmdEhNBf%@~vd2*;n5Q2w05
z=oa&rwQAWIx1;uj>5zS_q%vsvAShPxT_e{T`<<4+MW@hcZ2*t>!fDaR+aJNx`}un+
zh5~u;6c>ehRr5M|qC+(PQ{1V`bieI@6w~IcS8fzL(ESDuBlC2l&QbNkVc>gP{gJp?
zk=IO=Lo#6eTYUoq-=F$^p{p}37+x`#y}mP;jVu!#GXjl}g&JdvxmNzxcRg-UVrzea
zj`i+19XtD2M8)Qm{MJOu@U@nwNFX01MY1s)ZU9eNm9EPYF`Mi1`DnALF+6<P`Mr!X
zHKr(4yoX2M>Itc*MQ)+`zW-*E)$1mc!*SVr9Uk@s_%Ga+yb(H7c2>yZw{~=$7WWMr
z{h+f9QbV`L?^32vabUu{=l7kzVXZB$ZkfQ!=x4`u6||dHEnPruR(IZRd9_ECrxjJ-
z-DThRu|d6@{kBJWPMIhAX<*+TlrezHGn?;hjbED+a~3cu(hT$I!{?Q=UmbQNHJNh0
zsB$l~`9Y_7cq@P0V7QORO%?Qc6f-g(sLHo-^PRVx6vfDJI?om2__*WWd&s=kzdA?9
z>Ze2;hLdZe7^%cR>UlO_dGpMKl1^(%BNybintL|t)(>L?e_6Wzb=a_@+DA7kTIU+r
z@<?_%*^y&DMx(&$T+~Eem5ziX?&#ZvOa!07fTnEzL9Ki3JiASDr!z?oltElYaS|1a
z*zd~@y}4`<#^6LBPX5$qr8csX%YFkfwefPcv@?P$$0tF%bg83xS`}IK+cm#<D%5zr
zB%IA5KW#Bf?p_D0xXlRb8uxNCLE(Fv%d<EC>@&LzB_S`=5W@|*`u9;1*R9qC>*Mgr
zYl{l9JFUDv9(B>Fr=%aXogQg10lde%IMW9{j@|h;ckgt{UT6eX%_pz<2`hm;S_x(y
z)9h&_XH^s2zxmyK%?YYfHCwX9ZSJnBb&}`ntqSWoo(XA(5}o*FQ!PFhKYdlBoL6u2
z3`UEc=WZ@<$e^k`e?1DGdnYNZ%=o*QPYJ=`F8lOVry#izb!ZnE(`ufUdy_-<bcEE2
z^>6gErS*?6+4m-8TC=$_tTV}vEq<d$XdpCwn3369)A@Vj6-Hd+iuQ2hwGy!^azplq
zDvzI@=tlRUGH0=N`<0-FC!gpS(6ufi<nG_U9o}$qZTiA&%iMkWd-s3%NA+S0LjZ8}
zsl}B>mAu!{^>t>#k)F*+$vGDv{k&6u)nTL9`B?+_2D{u6a@8Q+Q$~Xx*5~4Oq$}w*
zBy6|fd>Gr*T=2o3z*{~Qj7gm4Q4tp1C%<4@*ZPP3_&&0&Gkxq*Pg{yrck9lqW{b{&
zwYEUjmL(@F-*PR_-5@>qnYE00J=^-?UFDg7qE8{T5#fga^-ccp>!)YM0vLRrcLa+6
zPK8^*(MnsOnbAfn-qI8H;mAVybGi~tN@9D;R>x)f-A_zY{lHe-R>=<PDwz&%-ooYk
zsP=vYV$pCJdBr_Vv2D-8KjfqK`?|Ow@dFBBEy3ogj{!<X@tyiLNS<2TT=Vw0L8qmW
z<E?7&36V*IZq{!--_HJtx)sxx<ZQ(0a|yn_mSH*L7Sq{gUh?}EKjwcjLw}Dl1<+UB
z5Y-+tu#6URetbW|saUCeG49)QfLq<GjU!TD+uaXq@aG{0>$ls=bqUSut4AZfEOs}&
z^8<B8SEuzp&Z-iI(?qptEUF@(-0wc`pYB!(&C(T1258sck36%so4KXq>ehJw+HZfm
zlW_*40iG}@&B48kgrll+B*v^#Lf-sY8FX|kb{yU{_qieue2;SduO4G~ysA=5<)jC7
zIQ0zx%)bU>b3uzdpv%3p&o=C%D1T^!9<R`z{SynbLQFP7@r6>=*O=%e&&?FT0<e<?
z%fZ;w+hbgy5|J#XxId1-4C72JJMlTZ$U2_;{p`GP-X8_E<6?zY74Y4qILm9x5}DDT
zY|kd%{JZ_#m6_(C1bJH3(E$#xf3E(4YgS-hpz@UNQAJ<|BI@kh7RB4WcAZEug#`2!
zsVkI`bSaaVRImocFZiu9iAJ70nPsIwJ^#fxd+?b$3H7QJJ10Ey#~<r@-o{;E5j$Lf
zm3fF=nUozWSsJDM>x5uC8PJ>{*;Q+C03m1BHcrI!htaaLEInU*Pm>+=)Z$lIsI|5A
zOVl}7X;son%s_3$0bJJ>4{e#jS?<NEE~9ON!t7aYF5~kzkMV9@Q$`o<9=2u2j(v=*
z)|wEGkcfYV`$rd2x=u%jyXQu{Ygh@qpL<}`5}4cS|KMY+-Jjb?UWh{Z6yMeiVkMlr
zY*)NrEg??l@0QwXO%C8AC#`5_x%ywt?YNy3G@Ev>xHW26Hm+Sn)!~GvBMAX6E{{GG
zus_^b-;B>;QP6^5r1M_eQErS?w9!X@xySUXGfwY)TQ=-<LF;Dk`9G4P+trH3q1Lyv
zr$FhuGv_0b!9zQm+LwNBON%?t3Iv>UNv(XSw(Ogu9+dPq>NS3$l{o=5mtMP5{6fMT
z;tOA>Z9Hr)k4spAp~}|7P1Rhe75xg0D|r8!cw5qJF1Ok+Q2#d-Q9|Vhd$gxs-=)#1
z!_~Lf_<yGnTpx2eNj!JR7Uaw<$}^=B_@;H!=oq1R>_K;#UC(DX{8FyTW7D-2RP*k#
zjl$VWNd@n&{DPyY3eD@GPZL5*#<G8~7HiUp?e)RnE2>;Kyc~9ZP3_=2-u9}iozdZ?
zH#1~0XnSXisIU)E3|D{`#C2yk?a&3yZnpku<(6h!aNrCJO8_5aG9#4p!GRejGP<K4
zeRbDqehxEp>L2TxPA9czU)1V!_~LJ`JcSFiRCgDw9({5$Bdsz@ENDVww$8Em0Gl$8
z7k#95f?L>U0Ic_PXeSy>qmDN2p9z<nD{bwa*kQZ%s^tT1{yiKkssZ9sItkdR?^QFw
zQgfpml%A=oo3DN=AMevb$OV-#;!T)7RXXDqqYVpMn;e#*ttA(%|7>4-x+yzbuRO0r
zBQqn%h%|-##q}q}B5Cs~mkf=CUyh#46bmkLnrl^l>T(iy0F6$t%8)uSx6s6^jzt8E
zOph0H?R|bHoIUCtV#y+B-V<F}o-9a1n6`0HHoc+4M^)MB@lq~9AVVklqG-bk^Q`_O
zj@Gv(r~c%VeNsAE%wIY(|5YU8uUz9Z>E!p7&zYp$$JVv~2)`3I#>&~5r;?`p^zAE^
z@8}!MxoQwiT6i7-t&~60s@G2KoD!hkmVvF9m_rt2{h~~>V1q5G@#|TQw1NPYE1VRk
z*v{2!%AKINm?V9s86i#Y%Gwkm?=N*{>aMyl)+Nlod!3S5bCmt(jFC8J805RNFTy$b
zQk)Jk*vdT@d$m})bSYL#?9t1A28<RfWWH7@H@s<08?#I!GyCX}w~Z4Vlp^WOUlFvP
zKWRI?Y9zN{>BxNn`dJ+|Zxpa75XLD0MmEv1`)!XR!cN+1W(Y-SKv<89N1d-!BusM<
zHzOijoLcr6O9B5H7mLszEPoe^V<Ms?FBtc7{Mln?ui0%1ka}{<R!ZK7hYZun-@kud
z>RiP)Uw_-9Cwm2p6ceW_*N(Eb1D%01ieq<{XP$}eK~})0g~^eBV)n;d;olnLKd+u&
ztiZ`S)(aSk?P*(J0!BqtIH{}s3`esa4^9x9XdKvnn~y~L-@v@z%G*CTiGTf=yZ#d6
zHRWPZCzwda1Q3R4?|!JrG5^JO=>9Q4_Ba0TzZ#`QvrnFMtgps3RprgJ8q6K~G-Q_4
zleoFg%iH!e|1S6b$KU?nKdwKZQ<>W?2^yUvc;0a)4G!eBdmh&^CiJqc>N5v-{E-y?
zqlaf7D!0+z#Z_+Q*P6Ahw2UOku4SZv7eS))QT^iG`%c04{~cubSGWEsFkeGzkw$Xn
z{T7(OxkaDPyRNis`jdPNr!*nDbvipLe{w<pb6Bolrn@q?%lDxU&t*s2M-9Dvict<-
zFw6N<O8fh>|L2=R&z>`sTm19^Skpp#K1g5u%SL{j#)Veve<$$#&;LG2e?#!u7X{ZR
zw8Vv+QKB4AD(=Jb)2$O1g8zX^{`VB0eW>yBaX@w*9^*=Cda&wXtiH92VP9aaTuHe0
zTju!BM=IbuZs0qm2dI64W$Sw!=F><_*$=+|Uw=F3rm}4@{_T0M5!<96J>v_OVXps*
ziT>{yJQ4c$*~I#dD;!ildidh(IQ#F)@&DtQyOcgRo0Zc58^WnLC#a|I%N_CmU-Rj7
zD2)GGS`Nd|R@|^nPMZIVfAX9D`$P2@1`t@BGzImW<~Mov@PE(uzeoA&oo9<>2H$9z
zIfcA>|GAug@1JM&G+oyVUinWH{J$3XI8DA1nM0|p|L4g5(*zA6+XHJ{oB5rA@t-4P
zcO13B?D2U0pACN(qKSwLo}0gwnEz;4speQF_a=Oj{Xge*{a93^p=<w%H2%A@e;)Dr
z+_9k76!@6yKaYrip2LgD^Lq=w+_4kNd`{yRhe-aYV(H(55SrAHJ=;=u82l}XhL1B6
zLr2A5$CpuaN&;NW`s-AY*A%di(}1sn71Pm2_&yqQMUsP;c=OZ!&_@Xu5<2-s2GGU8
zX%Uz)Hsc{`_mEvA-ZG!-=9%cMJ7%+5vo*HW^E<!rR%+WZT`T*?l(Cp0O8HwK1!BN#
zvyX@19&RE{B$?gP_I_TiYlZfd1K0jRS?!0ra`{8O_r@5-V@9X<&)~1+QgIjJ@8s|g
zj<lLpQ5vvSE_i=GtHGSTeg0scAphY)ueBl10ri7<85LOgF+U9&l`hEI$luo*8dPPy
zeRa0NHetS$dch@VRcf}*74d%j%xI^6put&g*W512<!0?8N$@S5e_$&=k2T(F>d_K6
zKV3XYZ1+Z~i-@eQLSZB&3R#<K6bN#*ZkFOOZ&?9ZkFRuoR1QR@fE&>JRa^b9IjJL=
z)ejea4>$IE{k-wj5|k_5M#?`z+U`_q#n%J&r%3P2j+W)`M1!Z4c4py}=UVcId1u6k
zq&XqSWIpIg`;l+6dvPg21*yF(!YyJ_(cp4gKupGH6lR=)9d-WXNIB4Jz^)-D8wHj!
z1Yghb<PVs{Hh#;E5xM5B+j~1r(Z;w{l%lr};z@D%##zfli4X`D45z&0nW+HBW>6jw
zzV`!0rTLQ2)Ex51q~DIvlGPn8PU$CV`$7VVUp7|cSU?8cH7h{`KRf1#fYZ3dH;nt5
zgk96+3meVa>ypUHxYx9mq;&0giCPxM+0b9U`)OA-_;P6URnkNnWE3naa&Lu{N!n1L
z6?@AQiaYoys-|tKE|j0qz&p@AaUXIu$p$NQOf$U55L(X_^rZV8>~`+3By$QEbus=z
zlr(iSo~OzG!t^4KTz6on1}5<6pb!!-H??>N(1g*kz&_SZkuVbhiEaxL4hIzlv(YkF
zBBD=|nwF{hHrQ)|pvG;a>O5LV<eL&@nh8nc*L!zWTy5(h4_CS-<UqN3AXEMWveKqk
zQ?|v0ci(XFX`zE={P<}^P^Ie_+UCh4pTAB$+x7UR1->h=6B+h_=-OGE%d&F1n<M5M
zm$WLwlNXoXe+Y?Ix+^Hvc(~<-@B3IPuzxew8;cPR>_VPpoauv_&Yr!eEhgso{T7W}
z#vMPQW0NK5YIq<^pjc8BR>Y-h^nY~IxRkM(zBEWBaxt`}YO~P9y1Oo^N)6ERsva$z
zS@X<wTEWa!2RIgDdvl3Wg{>^giBYpw>+jV*dflI+D(FKFC%aEq`wXgN0HzQD^@FJ+
zqGGlrCnGW9`Lq(|$hRo#GmzUL@T5WQm&1g;LmdCPjGOx@`-)<ZlpoLzi_pH~l;7E}
zJg;bG{I3dt3rKdKNzAol{-+Ibf>J0)dG0bD$4T>u#}q?>E{6#eL}rS1$O1Pc(R%Ap
zrn_Vwwsw*LtPid^%ucd9*SwrURrkglxTMxz$c1B)kI9bq{u_3$2pN`(!qVlGQm5?&
z^O-KB)LGNO6_bynSv8%=CQ2)*K*RBbAjpXx5mEbPEW6jpQ1S5R;2z3w4Tn^ZX|#LX
zi9D6TofwPs*6Vhs;(-)3O7hQ+<@1|=pTQ0#7HbjSG-KJe$4sJfBwy4_qJv(P6W)4!
zfE};U%d{1$Zc!M|Pb0+Mvp)EXP(?fBTmxUNas3*`w;`)3i?pRl!%}C^Z%qTnaZl$i
zH)D6oYJK>H0tyFXCAY{2AE^Dvbz+tWjAyy27tP$`8Iyby+I$^IC+KziQvd6z!GSoP
znA=dBW0d7hT4L_O1>Dto1_P&DL@(AGLt|a0|MUqT=gL9d<GNyZ^F(-LP{g+%JJR&h
z{S%UdD99ECX2JTGo^grWwh4<_aYCfim@O+c$Sv_p5Q~gYyUboSf3UfI{bLu$9zV!;
z$KYE`pB^5IY&?unq>$227amF+cT<55uBx3>-b`BmnGz7$=|XO>AW-AHrAf2mL8~zk
z0jZ5F&GTb@7S->$B~g7Or>}3>r8ho|PFS(1)B~PN8N26pcZj5ZyAF2ZyrQ#xS^vl^
z7MX=fX46nKy{aXz>qM7o%+|y(G%#Z0k*%<GksTpZH+4I+Bf>AUBFa%gEmO?c_Bv;a
zC7K*13h$oK+rFGU{JOW?OZ9n%%=bN;=?c{p@8nsEhi?qUMCR$$Uqk3w*}=kbaCJ1t
zX*`m~zoH?@qT4n774DBU=<X^1h(;}(F9|Iy9&rp#oqnS<QB;=Rq`)#-=B1-@pADl_
zhPD*4c476Mwc>o+tvaXgcqs5@c7d8XztiW#<hl=zod`@8*&geEA66fTaPBf#AgmQJ
zgWJjAhV|(qySUNQ(kOoEs^)IzLVR<5pmFDVAlE`r*9x0NCg#b}LRVR|!p-kZma;u7
z<q#>J=LU7ftIKn+=NWhAVyuzyl5G2xCgar8lD5D3&=+Z0vTSrWp3`Q*gC4rUR!f@&
zrXv*Q$Ip|SuMh@;)QV%CX}2><U^`$uU?uNN%YE2v_9&Jevrt|)6Z=g&^C0eLFXS5;
zU_Cq{*^NgD;BtChG^@~5!%m&0-T@^SrR*6>u6z}0oD>@u9UzsoExST4UTt|Wl8$$G
z?lQhL_3WA9rp&u~1&;tl?tqc!1PkT>fa2~)(rPJ<eRd|<{0nGE&Aw4Maaxd6{L?OZ
zbiu<b*t6rUTC>r}l+h(;f@{{LUH(|A#^SeMSi*<%G2?&(TvSen#Tuo50D=PlP5j9w
zWk52~J}RFam#VY!OjLVKK#Bw!EKb&y&Q<b(<$QKLOzOuux9=a7y5}nT24zdlGXQ2>
z>eDH{C~a(m8L&ilIVZ>sXxm=AQtP1m?UAH!)Nnw3pNQ8)Dny<Fta2Oe`JpCRN?T9<
zQ9_kv=)M8x*p1jPWDtY<kwz1KVK20(Uc<QA8$kwU?>#ZO!Ym9Sc1{v(ty{d8K!Y1>
zEqpMtjB_S<bQqih5}`sQvrTux_EB%xdk2?}EMcT(@B>I5wgony2=1AF%zE#;qfRz-
z4?i_~PjqLya)&?xgUUx>WK;qydD}sDFvVjP_S98KUXL^4!k}~qn<BDo^s>p9Dg2sq
zl(Yga{A2z3#$=-<q!-WDQ*by+)Cdx%Z@8Imd?;;)C~L(F?4hIaY>L7J$D2!w-UoSm
z7DB}%o1r7oi|vYjR{J*zK@m;*##Ygk4525_`dsy01ZX5eC+C+1HHNkylgLZ{S#>e-
zTWC(6O<89`y=>3G_cH2avVS?_+o~e8zdf~QF|dn)uqV)>UzR|WR=ke%-7(pVr+H7(
zEkB|ORw*E#4F$l4(EgnqXyVT7in;J$5GN%SjB{Ngfc3T7yJdYwvcTSM2?|a787#p~
zhl|$MYdV9d%L-?lPQNsPI+z`(25GG@%MQMtPhJ`c$gu0?c;!s!IfYC%fi!5EOOU^j
zocG=$ic7Nt$+041{xwIENWOx~je?|p#TNDDp!#NzO>_pYtISVL_o44OUO`kEy);r!
zP9N>MO*uM+j1LMYc5#pv{SSEk<?wEVZ9^%`y>Df11PO&YueYZ79p*hba<Hy*<>~JI
z3kuSZ)(*F@S9s=4){GB?GXlZ4yb(TxpB5EO+cH_q<TjsXSD+{P{b*Kj!c+iSXa>yf
zvc13qXvHpTW-&L)gJ@rSa*~Eup&_Pe8H?|8L!!?f?WGx@A(c9hKa)dR17{;t183?K
z1`Ef&iBG5yO7X21r($#tUm4uD*(neDLQWA^6yWDRi2t!lYK)$$25{l3&b$Tx#1$7U
zp0>{!D)a3>gF<<vod3`(HN&<_qrr}y?nxPlNCxXJ`+dHZN&Y05J4>1Cs~;7jph?b-
zyeA=GOZ&TT>KC{10IH&2=Tdp`UlPcdyJc*xH<7+a?bZhCu|=UgOB_$YJY1+aEiQ4r
zO`u7M+m}F@wI3<{YUa2vAEU*tPI0`a;vP{=V$!^80$*^x9)u9AR6)WSyp5#4ap5D`
zOxS5AkPtXv-+J$$%yu9=>QJ#{S;E5U1Bp5-$8zG%z(y!+wrTm7o^lw2K+mam^UIDB
zJ-P|7mrpFd-@;uM^!#h><HySSg7L1u?}<*%G|fD-j|h`sNLnN=U`R-lRBLZnA6LA~
zs!Iwn$bV=^8blu6Oq4FS3WzBgPr2w(wav?FYW*=iXfK<;XOy=*MhGG4%sHyf#tfHu
z9#QzC!k{;tthc=3y@+V=U#?VHVMEHRl?4*g6T|u%t3LRo+F1KsxjNJEDO0ehfNXSx
z+d@9QNSPh92TL-`2gfeQ7kAeo?gEI{UxAVO5RXp&=tSNpbgNFWMgte(#mK##u)#7N
z3i2~H?e45=Ti`O`t*W_9lPdRDkyRFmH$)Z4m4$oMTm~~LhgBr^d#JbC7{Yo!!-DO0
z->^_BX9$hu=T2cp%TV}WQV5A$4L*$Qn%Z#J+yMxHJ0;CTH1By}Um4`e2SXXH!3uJ?
zXFPqx-F+THqe;eorEsr2L1p@tzgg8rC}W@)FY%>y$L(#E4%Nxi2mDQ~gxFfbSxO*=
zjdH`N6iDa?S^ugG|7jgN!4mTJHfg`QqW^G|IO1>ai_T=wuVx7+A2cSL_O27kMf;}%
zSx;=&n>}-|j!rTID2N9PR$IATDFG10hksIB&nLU_N5!3z^F-(?QL$9qX5im`^P29{
zYIx}RG0W+#0PPlWj7ONH1Hei9J6eG0z@rl(-H!mZvThIRSG{_+rr#rDlm*zvhjY9I
z<6e3DTnRB2J6Xgi`{ZKC3HtR6C5*GvdO+^MnUiNFIOwuWJd>MR#TAuz>I0YEube(8
zeZIrScPrqvChwv87To-x7ZR9}SrOo+9Fi8O;5*lHhXIVcG7s5A4ZiWmp%iqg&c1`@
zC1@VSDdzGqQ3PK<bzd)}O9vEya#sH8IZPlvUZm`{0(HM^6gaRP6iRdo%5LnqA`74&
zKBT|3i~(Glp4*v|Zih0$igd$!A)CB=xCEEy%CEO<%#;sUPcM6-A2&F>CcvNEogYlp
znjs$^Zi!3>U4b7(+FBWkzM=qH@h_jYgYKTJwx5ZbvP^dRdgXM+`OXoCl(a$MR}Xbs
zFDRNO;R@bD32Iv4#~^MWdXcA-&l@e1i=5oE(^RH-XM4|3nPB884frr*C~EKSm3wJQ
zqB0D-8JaHQzc6BxpK<vjQ^E(XJrZ%6V?WpwZ~e97ociSF_669BpiZ;p!G$`GF3B&(
zIqYJ>>jch*)%V4$F`%NKxc06aD>fMpvVaZ$Ax(sT|2y8@rPSA0iq3YjdVpEU);-zY
zeVx)&Z8>;H4a_<tng6d{;<-95?P70V=LrE&^IZYy(kO!k9R|&}sSdK+Eiy@I_p}(0
zl#P&jk!jRzG8cgXTv!$f9j9(X$O_6kw$oWF#A<AieR-q>bd%yX<8@fa>RN`&d}*zL
zaCMwedjz-P_8<BYwZ%6fS`jcsSNm+|MR|;Zc=~sQnt}F?tyeaL8m4+{v^+#~(bVw4
z2|79H&~<GmIecIm7yb25XnJqg*+*N?bU@;@d;G*3rWxf}id2{>H6uN$x#q`}v|5Kc
zMW?#xmNC%O#^tr|UoA^G1Kb*Zj;W(C<%>_ovgNdMG}77QQ#3;Mh%DP5?HSXT-QYJG
ze*FLqUP25fV+63jmLqy4IHlH3ITcy)^_h#IS5`Mk`;wqs3H#lFQe>m~7U3}1kGjEP
zA)?N=bA)MU>#1367DE^Gr>31H>X`K+@ktw&!)Y(!tEfDFTSZ<#!INCx{k31b`^=tC
z%8~vV4i4)*t%tz<Ss-c<3+g6uaF;*O7g$ac0puGS*`$+u_ki8&UeBu4;AaowTiT)x
zJbHav{SAg<O<1u^o|z8KW?sKgMZ*=t+7|p*^tnpBnnnG*#D&7w^UI=iqD2>E_9oEf
zef4^$I>c?ob(G<{#!X(%wKhZB6N}DGJ^LWT9gDygXcE(RQv^J{x{6aks{fP@AU-xl
z>qAyCpB=e1{h`_S{psChJB~0Ug4o0ugYA5oAdh?Hx_wbL2IyxRSfAzLDi|nGhl%BL
zq;xeSTQD^#vimAHU{JeB?p)5Q?Erl^U*fJrq=}^c9fND`MngXK&EdI8p1p!eg~l)R
zB)7q;!_UwkZ(bs-QGhW_d<MT7fO}b@yFWd?|0Sc7o~x`i^w7OMo#Dlre)rHrO~=`c
za<hC*&V#oMBHbB`KczWc1#_>+r3`b00fUy{r>iY-0+N0>{(xE7MovI(Ac242tJtc_
zP?_AB?YW!gn`%UgQg#+GGqF6CeXw{#l4p7&uc5NS5du`mM}KK}c#jp#+IFo7kWePO
zx%Um433GyCHPDvNdP(eD`BZ<`F#aZ%S;ztvc<5gh{5rL;_j7als#9Ynq7s*{u{uj}
z@87t3qDvzO;W|yJ&9momEy($-&;Yqt?<l)X4hksK5getbiYJf0XKap_lpuRK7}uj2
zJp?Rz+a%6_eGc{9e{#zy-uA<yi=I%p0E=86IhQ9lMwHj9M{9&JH{*GUKVGJX;m-fy
zg}2t)4VhQ%lhbCYiEFYhaz2~kKQ0w9I9&SLVrdr|JQSqfC}VB$a`c`7x4%(|oW~iD
zk2vc0eAbpN)?|KuBR`VQq6Z^!mUakVe+HtzNSS1_KMFlT?{KRkLe^9oC~7m2m^ngT
zHFAgNKJTB!wmNs@%V8PD%*$G8OeL9zLJw>5;HayU->cc~sq-mSr6{v<7>Xq%RyR8D
zms=qqWvRRdh4wi}Ql~~{+2l(;zW1`#h|v<mO@?K;fNVi(8s5oCZW74%y5h`eM7~1&
zbtetIDbld%0V%KY_PfPkct{gAe790GU@jW!{3_kRT%zlGk1HijFpaSmIBX&gY7U~1
zBK2NQykOupZ+tS$J4}sF8A2}sS4ryOu)ymqS>7;*H75b03YM_{?dY@^>@BqWmp1rC
zdlW%zFP`xPh(em2i5$);ibLh8$a2Le?1;P%4tu#74fIRfx+cmqc?BaJeMS09ZJI1p
zc3Nv*e3utP5Tx0#4#GlNepiGg8U&j@&G&Gn1{sp3kuH^H@8#RCQQcgS{;F#CsM=a~
zDc$}ZFC-_Rc2OM1iC@p~egd05GoYpp^)(XZ>FzQD!y5sET>R0j@bh&w!{-m*r=CzW
zzi-dGAgX>>-x<E{XL+cfV)>I;e;d6b)8)fgnwqvu*5TIZ3)<emV`b$ZY{{TTQv0(p
zHElAKzq(wfkmk=eaG{-V&UkBK$2Tf~C*Cw9-UjVHX%>Keo)SZv9@M2f#6CT%B&x#j
z%$qE=KL^=@4I}fCYGW0%M+Y0tS(`1BFxb7#Q^c8zKi4YRV~clivAdWn4laj3(IUNX
zxO@t{8$s6rB8jhf7YKHANsZ?Dr3n7X2y-S$Nl83Ye}Awe4!ytzGlv;&2G#)gmuxy3
zbo<K*wqcFB0I3&~>PdL)yK+h5r$gbUx}d5(_@TFA*^2vOJ_q$d%NDc2J|%sqTxSxC
zUML1|k~>73d=RedKL9?lOv@!C(j?PLy@+Y@&NWNAX3_1%8?b4XPIED82E}U5$GnOq
zkncVo;3)1IY%qEyawjmu0T<9u7m>$G@w0v*S`lmIUAj*f7g)bh$hg11KDQ@#6xyZk
z4X%uRaO<oRO|w=$QH^}}SqpM8MCmCVpXXEF!|D#??8Zu>O~D<`bE0r=ZgLn9Y;g6-
zb~4^aK66enp#LDAA${i>8j*5Pxs6P}ez-p{J7L~Pwy^`wZxbmClT(_JqwBe1Uo?bC
zGY7q_^k52EM95dB)t=%@8t3V}25#0tew5j&J8{lj>|`-$2aQ7P6=Okz3xEaAQL*-o
zI7E>6Ro*mS?ukO%f%kdP=$$Hu4o#5MO&q$*WYC58eQ<|WCT*#{3PI+=H57I7SOYmY
zdiqjr6E>|ETxDql(ca6nMx`iFK0j#7I_=2tJOHX6ug*a)0(kuZ36y3kSY}*^N2KSY
zrvXr4@+S;T@z&-{Yur|9-d#?sY{GMOw!hjX%3BvJ?k{G6)a440PR+Z<CGr7K2fOTj
z_gbL%oxsQBzp~5Q={1&nX~NTC>$lS>1gQL@ZE15cAwA-~_`7>0jGbGAU#)LEroIjv
zdp=iJHf3#g`(9JySc`N*ZUKVZA+T2a2Sz{MnCcYmi~h2td<t%>`fLsmUc`O5z3{i@
z;Kun$2QClNW5PZQAXWizt0|zunaO=QFOSok-hOA#-H7kZo*4BtA%5L|F+aUmtmOjf
zs6l;Q@UWUCi}vZ$DGKE?;z_`T99XyRs3??oYr0B;rxHjgSMg@XF;PgUWGBOQWE9i(
zWw9X6wZ9FC<s$RDm&OCHLETX=pVwjhy40yzM4)RDFa7lsq5k|KJG5LHI1kMWVLnNm
zNGIjZN(jc+YE;<^^oc>+6Yk8W^1DidYTZ{27l>lbJ{e`ZMb)*LjHf1e;i>`S{O_y#
zA}J9jU<D6uvbJQ(0AJdw#obcj@+}LbdJD=g-LsB+>aY}}+s~b=d15V(Ix<Kab9x{M
zgZqzW+Ktb3m2a-H?JR98Tx1nY@2>-<d9R^F%(#dFFV{OMW|C!R#<dNj#ItS|>z?Wy
zg0)z2#P-KYH5GvGY3EE1C;)*0382x?=1Fnor+m@Ma@*wwrEQdQmKbsxL|bIt)6mJu
zv{tj<BOtJ;(614v5jlQCC*aQH;MaN)xaj`Cn_3C+MJs?2O<<j7q)Of>K$gJD?@eR;
z?b2t1tF4=Q56k7ehwG7#8?DfrIf@ur0W{b2^)kk_Bh3*SzSn-szYrQQNnHg3hzkBF
zM`NfQp!5E!w?b8j4ve(TaP%Cl=rz7$-cvajG)01^fgeTQ-r|Mh_8`4^-I~p2wZ`e6
z;Sh~OllONf{U8q9Q1V8-#$!Fc40*Zf30{v!KeU6HO~I|D8Feok51I_h5~?ZK$QdLi
z0Su{1H4-=V@4GO(m-sebOkDJEI+J=UQ3?ZFvC`)>uOcEHnLv0cBbuXmvA~C}8@qUu
z>z~)5ZJSAuZVeFTBvw?i^PuMBFm<8Al{qdF0ux*<E`4W1hja$zI8LZmXz>^Kgs~}4
zn%~fTEe0MAqhCsssSjRP)3&;nBV&c<kNlic;`fq>QLkzVu}K&zY@}M>ZqSm2-w{Bw
zwbIK_Rz!Uf!R;SW3$KShCys+!_UaA-i)I_yDkq1khQ9Y~XAA}k7$3Zp>m7PR@|0X6
z8rCvw&ZO-h&gEV|VvKatM8796$kh#wSK9Y#fG5?mY+W4Ff=hvN;0gPe(4SM?`COLJ
z_>8;Kd3Udl?q9?Air1CD>E>&InAVXga>F9oAaPzjIX=PE1`^!R(*Xf1c5qCCb?O>h
zOLA4~V$LMl0zhJUo)2O_2Un*ZU9f;KoVW*hiP!YIzN#{Ugi=$DThp#hC2k%qX`6G>
z_BaV+V~i)tRl7q<`kZ1MU@CI97~^csr#_1B{Dw4D#wmP5{<2q7+sjU_ZeS`FE<`gR
z#bAyUt6;|R>4GXtBq!Ub6s!7ZzJ2d%mIWqP4!oQ+QIa}a3ADa^jyQ-K^oQ;%`bFWI
zmtkjaZI4>ZC8QOj^}FW8L0xHOU-V?5p8X@X)Ryj;B!&kF8{t-iAxKpknaDs~o7>xS
zw7BOrTa)_sovpD8M<>gXB1igE<D;v%iDFPQ)N+2)x$4caU$lMf7s<KH(tZ)Ul-lTN
ztg&osiRv+|j9Z6THy`!yanESjdF06oz%b!*Vv?)_t=1fFGw=rk-<7KxJ`nDT>#%CS
zUz^mty5&b$OU67!<jrGIM<P0_`2(g!9tD~X=JWD3yZM~j)3-ntt0jv7(R*eJBFOzx
z8^m-m`|OqVOhn+lql7F2+@1rtZuCv4tFXU1cgF6+(i`g2d60YT)1EQSWYjIAdM`8i
zszL_09oS*k=ME(i%?YJDln^%a;G#VHmLtvH;WtH6cQmAG*<&Xw8`3@$q>!K$=H^AH
zuUI*W=NMA;?N5ba7r%QBy{P5VHFxj&?u208lg@C4^rKF<xT%C)Y=gmG0OL~|{GkM1
zrg1Sw;pRHnl$6ljLR-34wT*=qGg??;ZQi2Z7g86$uJZiB$%T91+F7V4+A@gCgLP(h
zyNh-ge?z8djlI<FZ&w$5{V7c%p#6I54kLB5^PT+|(TvGT4lGb_%gsck9pd~R73eGt
zz`2A$+qszaAW5^iF9;DM1yG)2?;gh70~gwYs%g<4mieq%<X!#h<s5hw4UcDJ!`#e4
zOHYw59+4d=(&5NeU2+0VR#3WbM|YMQ#`iRUX4^{{Qvsq(-b>&gq{mq+R1}<%BW<_D
zw+Z+h=?DFSJ?fDD=~rvEOZs4~gG}1g2&~g}d15ybX7liX7gpAPV<7J-bT}pGDfMD@
zVf4LTNEt}`M}`YnlMqbR#?=PR6YF~ekJ6}pma+gn%~X4g5#(wb){r@VjEYs3VIWl;
zd9Cql^hjpiga*A*)*gyT<_)kHO|XN9)%4{<m6!6+dg}KORuAN;ZW?(@$(kmws`{Z+
zPiu|kDY%sL3*GoK!w12S^uFRgJ}T2la*(wtT&GX6eXuiki&|Nx8ANrhlfsscB<AT<
zU)9QA?*vmT$%Uj?-f8ju7u1L^H*9-FO9v%+8Xy`7Z^&-GQ?R&Zf&`j`O_+vf#VT{{
zTk1NF60h6PDays9#dGm{V0Yq<!m3%`WEa*>iozn@mO$}WH=bw3mR#*t)B!FkHYNLw
z+X%U4ITQ*FEOll~YZ(qUX5;&ppZYW>&^9Pe8Ugs5>8!=o8-?-q3h7r1?YsQ(G6HDo
z0^juDyU+y|p{FhA#qKZ@zYbue(kAZ)f|M73{RB-2x)sW$&Ce`z?&uwD7k;K60-5hc
zriA+W&fRoRJ>uDzqJ-Sf4|bRncSMyKgWK^O4)qFq(E2R<wdt1wx+7mV2nmnQnwCF5
zJ^Zj>!CUhSp_r}j8;c8`ZSb3mG4I;fb7d2clV0W1=Fer562h-<GlRHUHDR+mw@=jH
z-y6F0jqTGbh*W?&3-j$)pmj_)98fwzFLpDw=}GV&p4RAoffV^o|NRV)E)8%?$_@BS
zF=rsWVmE_ioV(})d+Is1RjFAkvGj$pv!$;n`;K=}RoY&MRYD<BgScsI4bI*vPf`UB
z@p;)N*^N+9ja-T+$k=Kb8_FJ`g1g7Ht`%+lfD61nQKcR|&BgkO`1TvK8|KNBd@WIr
z4`46VJJPB|Pm#$t*7i|6?KXtzoZ4|^iKHfP<{-Dt`vpn+J$9F(sN(q9Z@45>#?I*e
zvYiV(ssF}}41EtiIFdZK#mTxlWJ<ditotp1<92wKEop{9>gN?EPisA)1&~CSrw|8j
zhE??=XvcQ^Gw8)q#iJq012W~P*0hCas%bg=uAPIKwA<5Bzmiyn2qYS{mB=YJtCybr
zS{YC<-CMn%y|4d|9kshh+jt!36}VJR(9K@HHypW?pxO_RcpQ#@ZL78FD)0T?ba!Gh
zzF*r+GsrjDBxmqnEP&QDhr6~!%wQSg^@LM#x27dS<AFi7WYl6S$-e^_a7UbKn-(u4
z><XPbEt#jmCn-5OYz;PC)|NiKF$x)43e+4LI+K{Mu!86PZq=k8l_dbpv$S7KCsYDi
zUmGcivk|>w_m>|i4T^&eaW~SPiyVQkL`PPyRkE1{#NkP7v+7ZmGH#>G%kX-;K5m$=
z4YL50%X0N783+GNFUbqvBqym_VdKd?!@A;vQs%%~qjXpKQQLHT?%4(dRsgG@uYK*g
zEqK~9TaTe;?>%ew71z2is|VeU55W;vyWuyYZJz4)KuC0zv^&?amDHBfR;=1z5(}8L
zwJ%N;sZlWAj`IfZ#n6t=i@kvvPqs}f+w_w);4}1Lv*)Jcd&i1$^#TuF3pmesNLLi6
z6OF}|ni#^LqU*oUd(OM<m2zBad^E(L%b-<x{a#Qb8Pu$4va9B=Ia8V7^j)7=&jUqT
zPFEdPCt<1Cr=uEnOP78&#O}uS2bS1mR9WwoH&8z?QH>?-dDV)&3+>+q0Kx>Y%g(|a
z`?E2z?#HUFJMX8tcY@RUw^@!)S1UTEN!QUVz(T@UWY7Y2xSfq}W%eC%ts373Djma}
zhw1Ayicv__jaZzkzKQhGqFWPKAludW7S4KRB1}?F;-bHo{I{OIZglYeH9y=CxQ9a7
zg@16Xj`v;0HorhFYX^UkvxGVG6|O;@J7!^!-Rb+)5P+w5i5;@DJU(T_Ul@lUv&ZL^
zxS)rSHo%)O>dqF;)|{<plzZVsKdv1lu9e;6(OM8?a}=P|M9wSeRNl1^83NyF&BhFT
z^^yyGVXUhKuNq2>nYJ5(^4NiSi$d)=t|fD%YZi$T86G+7E#vcv)LVL$zKfN}`>Gf0
zVBkOm2$*fuCZJ5V;k>NuUctK0qo2_B!@yeZ&7_p~_P5h+ntjRL9k~Uo`P)IpJw<$0
zEH@auhJa?G0*cp&J1^i^MRP-gO<9z-x-@1-$YHJ__SPfI*4*hwRZR|_(5IHM0QP+$
zN6N`^U0|h34Eya<v5l?iHfWj>n_eXA$E@_D4YzRFKgfMmhbDpR7vw7j5OjpgKqT7N
zP1v|&U@oa^+djDYS9`=V)#9=zOw&m2jpM1K)i&>l2v*fFojgmg)us`!Xn1Jzpouo}
zPBIqtotO7WF(bp*2Dh2|Kx5`H7dAf~j{QPH92RcW=dqfnLOYToXczGKosKZJ<>ABW
z;gY?(L6ti-4}QL_E1#KO25i^gyx*NU>7kSUke>#2mmAvUCl*)vrKTO60cpo*_mj}q
zrq;#|z4tycnj06?y-OKLaTTAP)2-|u{Am9<?W$U1;-<kkU9D9{*e{x$oE_@aK*>9E
zTDo;shA%^1pu>qH2l6_IZM%?*;3KbCrmmry7kM}30GDDDory>tR?AU-9hK@QlID>i
z>)LDw_q8?eu$~g}C7Ki)?Vut|H=TQu`?0Lv?<$@*o1Kz+1GUsVjm=<o44kcTT&=!J
zK&azRuGQaB6!Rm3z1!Fs@t0V=0~BFl-}rpVhbe_+DSWSMLX6DCN?X<aDN_gy!}JgZ
z6L{~Nk9VZPWLNvgKWOeGZ<%iZ-kFVp{gu9sDKwN)*VLG)y{GmUe2_ld6MgM+icY@H
z>E6|#<w1IxZ0~Y|o;M%7D(~;iy<$IqQoD1+QOK<8hs`?6&U$Cr&d2U#^H14thK!vK
zPg%`+{9Ge$UTg)*iR>yqk6bOJJKlV>@2I8HwLiW|b8UhyeR~uxb$Ih#di8F*8q4E*
zgo?gM^D445x40o`wFTO}n-MPZiK1qPzB1@<KX)Q0mXpV}Q0jflP(Z&#y35fNvm2ac
zP#R==)oV<Bb(1js$Tc9t{Y|>H!p=f~1+<G&J_>b~+UgRW=tsw{bu)<cZb*KA`e_+y
zob>l!-9r@`j~#=H<_^Ct0<m8XBU8BsO|-8Gpp(e*%6+!I@EQ+cJ?9G|vrKC%-3a=K
z;NIP-cWIt!Mp{*$w?D<SSfJldzY`*RkqL!UWNSx+_9vQvT?v(E%_I(IDzLsRwpBdo
zm{79VJh{KDr@4>G)(I8~-ZwzlcN}uYu>Zv-WxO~DYPN|qbg+|JyiXb|9E5g%RSEFp
ztC7aj=i5DF7e~}v!JLUoyT8_0_)?96>m0O7)BMTS)dy#cM4g|)z3XCcaHZE73=hOR
zrS}zTT!hVL%AWtSqX0kxU|WX!K^Nq8G;TT>v?%)Z$6&E)<~Lz-n@>dq>YBj=;k(y)
zXcwN6ai{VW7A>+$hvA4G2E7sUi*w)6VfqRD6H#wg#42^Mn51})_3os_&G(irHs6Bl
zFYqO@=L|(`7$!(IIlbrGsbo>~$r4k9@@_ICOzE5Rpsf@ufW#Jj`6t`D5qXy%32pBh
z(Rx2e{uR}W+KS!YH_$eeMmlE$+uv|K;e^UK1B$E2;((gmxl5@q8|4R&Sg!>L>pMj(
zY-nyA#ceAj?g-iu=Qh0Vy*~i9jOyv?={h=~ph@whlO@JHV#l7>ch=CK{_7Dg$FJ!h
zyev&0i}A;=8hQd*D-0cwB`xQlpZxsjT;0JsTX`?NvUB~J{TTzYD0!C{+jnC!>h=rq
z4q+kKbIl#r;#3q6_rjgPlhQ>Qx>afKX5SGGogR8)q-`LM^?kkGDcY{nkL&v^B_;ky
zvRX$R;b1;t>g}3j7b6jXvW*u3#e{Rf2%Vx}+eJ~?bxyU9WFs-iM_3SLVy2Pt@#doq
zn*Sf|%o!k#tpf)1o0Qv3u6Fj9@7gkKQ+~C6v+4P3@||cYi}tCS@NAL#g4dH_2C2ZF
zr}ZyJKL}e8C|1T2S1WEH{?Y|1i;j5D_oFs>S9fkX8wc2rtiF|Q5JKS0n>9aU@>&qy
zNou-(+t}=?OAE%u2+4kA)FJhoS0#YbIntxSfs02$0AN8!OXo7>vC!)%dkvg{PJ8(@
zn3qd$%m(HNt~#OU9pi5tO$kyiC)OHZczwI-U88))so3_(zk7YA+<D(4orIb$l%x{|
zh@;K6C^h2NSZm$cA2?h2;)C?@hDT_6<ytSw($CoLz#+do1&$BurU%ysZQlpomaX0J
zY33<7O<=JE??zqJ54*p*n&Z`%Aw3Z858N!6OHSSlloYy4L=<q$N9qZ9sC28gxYm5w
zt&er1)X;*f4Y<kRT}K!gVy1p%Pmll7dp;@+JEzDr<v|Ng^+?FUs@hDwf#c}#sXRHw
zO#-3<tJ`iGKRAP<g~jp*v@&c*g```vOtNaCC9Ak7ZGuu>;utbQJ3C&cc(q3ZhhcAz
z?8%5)&2+`Z<>)Rq!?HQmrEJRAAoC*}LD?0^R$xbYlAk#QG<I1N+AT$Yee4<i7|HSW
z-T}=teNPXu=OfcDXN*|Q$Sw2{19D=uXm~GTEtWSBRiE;v%(=0r_2@{lm9jevyFAxl
z^NOx<r7ttfWJ_Oj$5sRfwch!pdPhrZ6|gqJR<5hOlET<D)Ej62ke7*awfJQh_fu&-
z7p>dKXPnA0RE!9+-+_asH}Go*?@hm1w!fl@m`J7lrv?%AD0&agD+eeGa1NP?`~pmi
zl@do+*}?k5fcrqno#-!=pESK~l6F`*Ui17&XJZU|4yqvcOQa@GEp`8DDMzM!alMdG
zYch3|p%)5L7d`1)^~3e3%AFlZ7<p4wH$LW6#Qa!X@bd@8V$36&u2u1JI@78hd6}#U
zBDf<t!XF<ZiUyBXx&c#7gCUI+n+-AK=k>)Sim#vD`pu$lgQPJl{wum*6^4h4z5K3d
zaR^zbeDYMw@Qhf2W0+(z2J7A>mt(28MKX3_44-R#1t{YSYUsR$1TahL5z_aLmkgWp
z4^EZK5^r0AGg2fHg653h;HqYV<c)T0ubwn$aW4%lq{Dmmm#M&lw=8yvY&BK5=lvz8
z1jiopwL_9>S+t=jSH9d_()E`eXhw))*1f;sPLlP)xG()8hXKw@oT4WiU=>*g{m@Pd
zdA5vdateGaKalV`LteO!=R|1FlM_pzW%;ck4mv;OHi>e1szt+vU$3r|@Tx5+loLgM
z+BjX!JK&f+QNe~;vAWQfFOtD?lP~%zEG;p*yJtl^n19&AU^KF21)&19KYNQGu5nK@
zwzb?`1pNG!UZa&UFOJS4Obu?Xp0p{jcS?sl9;6WPrDUdA?92PKnkgv)I-!Ue-m`Dc
zp|e{d>%|3|E>D|MP}tZO6?cjJwVAgfYJ8w8p4Vi~;A?Z$=E02aS`e1Sx1Y(N4`QQe
z<Xq2KrlGVy6UA@QN?&|sCi_(|W^=yEGFAATV`F17Ko{s`ZJOfIHS`d}&=1MR6Uq+I
z0UH#{RS+JB*uy?@9UxGN&Lx-?WSYUqP>fo!%{EQP<qh`GbA<_Q4D=xNH8*UkP<a{}
znz#LSnNkKJwiI5z&l+B4)yPJ|+eRh!!(q;9d!&F)Mjj)7M60Br_i(jiBA!@RH!*z2
ztaTbj{hK)5LRKc(wA48mL)T$Y+1X9$(jk5uip<sLixNi~>XI_EwS6(D>*QxII~?F+
z>RQTXtW_=M#?;utwIcfts%tha`{W{Q)MYC6u~Z6BBS2$YnT<D<)!?wKeM(gm9g?)0
z|2d|C(S3x9bWL1ip4{4{P@260F5GKhZlDs9f^|(+tn<y%y{Bni69Q-M@=x9>p#=UY
zw}YjChY8x7iYTh4$*lu~HV0b7SaT5g%JwR!K*H9(q#omP^JtzX*of+1<YpTnJo!Ba
zhFPh?Yx!NrjY|@4LMAIMZIzc@s6X)TohH)V*)5whM+rWG2?%UTp*{H~_R2a~vC=Vo
zf%EaP-@Es=O)8^dV}<)epY`HrS)X4wh?wzVgcT#riTeDRG4&KB2(eYnaevq%J)l~D
zIEH9dgy|ZBOrOMDc%LRP*T{HU^R+IgxFXyXQI1iZ)8`j`6`powmgyt@o-smn%An<l
z8%B7x@fA8wOpm=KNtOb{LNRe8{XSw5H}W43Ej7vPNk;?Wo1$A#g2f0W{HZcd2N@M^
z@u`q&U&huLTsk>FJw&)#Bvr!L;-N|C>me0miedKRJQAT$hRuE)X~>K6_E~EgY&I}0
z$4q+2Ag>`dHGet~{$m7{4p@=oVdH}uxlp(<i$Bw@&xsNSW3%7eKQl1_6Rg6{X><4G
z%|=;=%dT>H&U>>+Yr2ZpN(m{z_o@SO8NXLwI<)2}ASg>9p;NJh-38qSQJXpE2PVX^
zANC7?ykLvrOk_=xkiv6Ht^=ORqXXY`JV6KDwKdMfnbfwuz&X8CwAEyqhHP>;w;EzP
zm-z*3C)XF3T}P+z<Bk-|eBfWBt*91+#n!2x>?O2N+r<J~I*+R(@#O}a6;djP2BT*}
zwvPRc<3Aloqc2LF^avWKr507%0Cn+yv)Yn{oY{KqyO7U&7ych%Zyi_Fw!IGnB5XjA
zPH6!F0cin&E#2MSNH<8c$wQa42uN?bOUj_T8<cLOn|A@nbM@Ts{k{L~53DuUoMVph
zjAz7}3wz#s8qwu1v!2)?tQY#%d5eMV{*f#EFYsDz&Q&HWD$v*5PnFBa*f>asVO}jJ
z%^@ZG@N~aQLIiTTFX3YXyx}jOy*F$ZBmeDjQ86vigtZG%GK~foUCvx$I@gzR?^g0~
z<rY7FXpX4S*I2==OMaK+V-}q>*+d2JoutlQ-Pm9;P`bN)HG5jAtFedd+x!w$1*i-G
zrwZ-?%mse&b{W4O0cJq@bhMmRyVnng|H@<Ps%(MO#vFTyU30vx$FyNr0XI}>ehzQ;
zk}G`A3S&^59Sgjs%9`1x@WY=sA|c0|Z$`<l`TgX!DIt80y5+`->QR1Hx?^|%(gBc^
z-cNz~+<eK$7lw8(y8CCcW4_gImE6zt^iG%0ISGlI%|2rs+Rd{t^u`UCyIiKCLGjqz
zs}zl`m;};m=47^JfWN2kronTU2htOI{_wYP#XJaon{z$_v<S2W{AVc<@Xz)7;+U=&
zjoH?fe49H%`NNXRG)gHk0r|SXp|I~wZxf!S+zmjAlzx^FDH_21`tNPMog0}boXMQ~
zWT<NAYvLx_++By{t$AmDX4DoA!cOOJD>&u0+aJ~5{Q$^&H&Bh~FLMe3GDjqk$atyf
zyyVk(T=rmLr<=FyO5t!<xo`d7lsu8V)tWN_z>73JL285jj}pN^U_d~QD|mtw2@V|;
z)WWbkk1O+~68Ux#PvH`;0^#FLe%FFuy9KOvU;xPavmauld;g=7zx@~Z=`RF4PfX7Y
z_jjS+sqX!CsM5gy1xaDggMO3UZ$H6e@YP5+6bkD$^El(po!tKs@NX9ZKjmQHW0u{f
z{k@9|Pa+$k(60aAYd=ixa^Fl8d_)TIxz;WOWcS;we*5VvL8e~3igW`UAgn15v>Y1|
z|BnmNpTWR&+Vjeua?bM~OKWnRbE^N3HNn6m`+&=}`VY=HyZMj1pc46cGaLN||8w9D
zLpbVw*18Y;R#?}wbZHhVCN~jBDVPR6r!Hk^zis0mKbHs~*!!P)KTO&vX`K!5&y8-X
zoc%v$w4VrOcm2?H@#=dT>V@*ngldWI`u}6Cz?5j0TuXM)uetU^ytg(vi(?ryv7SS&
z8vgg9_x*i3e@cBwh*FxX5j^G8of}I<s&0~0WsrH+kMO_tHOd=aq2s4YaMy)1=!UvW
z<>-R5mH&{69xrsW{`&dY|4>U9$SVrHeV*7ws;99B`JZfp_WF-iIv1}6QmQTA#aSd=
zRH*&Wz1jcEr*l^-A|a}}`wTO{yQcf;=yl3>rqgdR53i;FUk{X%_A=e)jXf}<lVR=~
zOg_m<u!(?6DAA#AsGJ?`Hn{bkw@L=4q>;n1`lyS`BQC5gnI94_@ijl{<45VCLZdo1
zTJ`CU^%tJM8`B6WZ0xi$$|1SIexn+c@lrGWxW&EOcD7;un1yAxdvd7Q$(=R?+g1Jf
zFJZh9g4Y_49wj<SShjc^%}(?<N?MaAJJr)}(9LYvBcjrVS<%_-DjFNlN=7rD_%~e#
zCbx~GBwS!%-;jm7@>l0cHBGywxS9@=X)vYi*+KnQebCmhv9~wwU3%;m>b92Pp&zNr
z-yW6iFNf@Q#CIKY^^eJiw?tUYCGc{8BI`{q?5N|z`3DtmjTUkUzv6k8<WXm-Zve^b
zI<hVjKQ&b@PQX)!c^lH~T+`T<W!P}2dwym7k1he{Vn5e)DeckpFe&o)>ST3cgQ_K<
zF?D}vxRhl;qKk2<K>bts#q`#pR4khZ`(HJRKRsPsQt~!&<C)7`<_+%nrtwn8WONFL
z`Cxu1M!}otAJZ?z!gyiT%%z*gfD)gYaebNmkgejc!r97_=epyPQ<aGf(jnuBBaFSj
zeD5uQrT@fGtFbHcVDYYR+jhE&orliPct6_}^X-(@DqUqF(5&%o@6Z^%=9!%~Mb%i-
z8@{HegYGa6(6?j$4I_}xPvzt%1x%iQ(o!krfB6nc$=oN3svt5(rI)Y$(M#;lY_~Z4
zH#(J8U`=S03Fq`*snHeCVdWCWSuAn5axf3)jwXDftmYN3x`~MUKnHV~Q#1brsd%zf
zgS%>4`U%Ys<BHoF?cI!9kd&0zW6gB67>GD_2{xp(Xyc77(54w-v`EZ#*?z|pNNTW8
z=dwvp3I$*`67S>b`}5M8EihSYtVW+V7DS;`tyy{-qmaIG>Jv4H5dr+#J){T7wm4C;
zIDDrnx06h8OA14RF=adtFPzunzZ&h%T7&-`Kgls)aLusAwI^vY()Pw%?Kfm?S*5J^
zdNuyo?K0ugxGtLV_B<?!OK7YzD0r^fC^S`RNq-7+m{<Dua<Hi(XOjJL-X1}tn+wt~
zwQho(lSSJ+n0C;ODjROU-+Tm^9ODJ4x5-9|z~U}_a91#kPJC91Z0~3Og0qOi=uEbA
zo9OpNns)v3Ip(#F%LZl|Q&Jji7D>gA_kWocfO!_2PI3KB*L4vC`6u!!BARdHq7}^M
z?M)g_q=SC9qi67NxTE8~?n(zgY04$&ma*%22Mst~WhRks3db7Cl_HdKAsA=Dx(^0?
zeG1hoq@W|6dKRN_VGD>al9;FOM}mB!e&H}ETwYaf<ri+3dX7JnJ&H{M!#RPGZupNv
z06glco`efZQ!@QQb8_sHQB}6Zg2V-zPf{gjTazd^g;ZEDB$VEYunQ+n1%AzTiu`O0
zEko43S+2vlzj?i=TzHjY`dB8_4?``P4p}TyTFz#?*^u_vC%><%<1t*fDpPFIK~5Lc
ziCz))jdRaP4MI47iGejBMq}z0(T+4Fm<efim_>OXs|4|<0Qk|-k28*!oJeP>n>mDo
zv~H+{IB@^b6n3n{imXV>;)$viU-E>BT4T<mD^Br{P!KgPi+S>I2;HFwSG?I~WM0vf
zNUO`Bi62{`Oav7^DvBaC-v61Pm1`XXge!D7a1p~IDNi{qr>QSDN4z-KC#*R~L6*r-
zkn68yu%Sa3aIBWDxF{=6#QG@zda0SEm~xVxdcHx=pi`9Wo?UJ|JO{uTGo92{qJz7N
z{%%Bn#}2Vhv9dPZ@8m394#{$|UOm28<GJL>N9W=A@b#QB<*KXV1kL3>$A?49<I<<5
zMLLv-Z^)wDl~7(}_R4jy6lGa;9}iV4^O)tgzLrp8jk+a&cP`-zhT5kMwKL0~bzG0r
zohs_=^%6w0D~+70>Whh@nc}@=Z+Zm9tn-~JxP~e=iR+X<vi&l)+l3*AfrXb<)SJy3
z3w3HFR7!Md0e{^6>Vc|G3|-x)oEDOG!u*E4ehc8NhRl!$nT`(pO!UL$wRtad2-Fm`
zD1@U8XzAz_&h%}+bdGRd{KD#i0lgH&j+L(6CI62vSwy+nHVa^zI7|y`tT+3Ouf`5o
z<MW#;1e`50?7qDZ*=XqagZ#o`mV)b)m6gpuYtrJx;V}0$VavM@_X4dg7pN*$%}DFW
zMzN%Yl|?lhFwV;4=^bQoi%$I}Fz<d1k`4jAyA)*bdfZWTP{cn9yf|5&ml=sqC2Mhk
zv;(myPH?(l=M+Zzj~&2*u%E)Jnyl4|cEjPEODm-|bLZ#<cwe__QMN;$?Y+W*OMX$B
z>W%l0=URe=P?H9~<T_mnm%+_{$#ek`?NfqX*xTyX><lRo23}K92^#vPHn+R<%mc1K
zN!->q<eWtHU{3tCOzz8$Hq5Chjsfu@O+Vi)hWR0+_k|a-3i=EB^*!IEDKnHge#sK#
z4;Huf<=<q5e*UZ#lVW(LHeKYf4k`a*d?mOPWtHO$v}@(KxJHVDWvkKsX~H(6&p=mZ
z<}Amas$uM8JYMvs5mTxf=j@E;&D5GM{j7DqbI<ok(`o!uyn9?7s6~2d^?ZNK#@=_K
zGAZk1gI0aq?qhG&)|q-jjc@eTTvS(LlAz4!vq%4ND=?5xPtgZ+HC4wpC!Ryw39nL0
zrYlAw=U3}VMw<r|-<mXMJWfUXwU|71NGNrJSndj!m%5`(0*3Lp$?R%+evpKGuxD=%
zU)@dsOZnE|7QNgr7kB@l4k5A_Gn#+YYeF39)!W*Dkt(LBNgCC@&Zg4%uy;$i5)*_j
zv&&pZul0Z5TQC_VtiLzGPv9e4cOomr!mQn&9b<891KFjTaP{`tad$@%B$z6%e(W^g
z-!xGjo7ZDIPx6j+`eT%I>)RfsaMG&3Aw58F;ZilFYhiyg%c|fE8qX>81ZW^`<>^x+
zc$F=Qdh}$nYLfTIOZQPZM!T8<FS$8&W*X*LhCjz-gx@<;#d8}8xOX<#a1bnAhWJHp
zoxEf(&Nn_q$?z`h{T=Ky-*#MCpj$=e0VS!QLfI^w(~z(G3ad+U9*ujdTwPtI=NN4L
zhIoKkm(ze9XSdYl{}!X%8~7&#3fJD;Yl9Sh*L0^S)Li8?$R~3n)$;>l#{H5)O>(UU
z^j4Q|*pIIGXU9LP5OeLYRzXFn{+KQq10-GN!H{zc+OIzo`n064=Sn=auR#8RX67^J
zusakdtx#50G2?NXJVUSe;CFwGE+z`o+w5r6@%L1*DIl%Gk;)nKYNLld#p!{&wcg-8
zRXNeH*4uu-ze9U$5U_a<?bGq8?@^1467qWZu}a3gG<4lXq|M&7Zg}>YCY?=RcLwvb
zU(>qPHtd(TH+sPk@ZH_WW)JruXPfey@E7IbU9F>a)x@1wA6W#f*X#14NyT$+3+%rh
z3IR?xyhM3OAO80=1gHmgGi}6ThhV3=si51cnD#d09J@^nHcXA|U(wzW{xer#gz#h_
zQ6S=Zn)K@Ksn|~-u)|aNIrCM}#c|cDt7N>HQ!K>GI3fDJm~k1XRF4VD?{}kvLV(-T
z#fH%SUaS-xp0qV1af&Wu1dmvNm(`aosLqtLaez`?Zdam??wF*v<85{FpP7qD01+`I
z@17LV-LT01EyA&qS%wuT%ELB^5pOwhE(17iu{wg?Q;r8E8`iOOM9aZYI@ttfL~lX^
zQno*d@H0Sw?-A}d0x<Fy&nX1^m0;hqO57YHx%{=`X1C0!USVB0<8(Nsrt8-|4-kb3
z^h=~`RSxS{y4E}%uC)#y|FoeNkbfQ@jNY#an+xl8^z2&j;(QX1)EMork7-cWS|y*<
zV%D<WuB+6jf-ED7mpPQIq{&(7_7UtDjM8l}QP%T+a8RcEXUTV~uc8Jzg~!(NK=-l$
zCAPGf(TLgo#J4(1^wE^DW~3{=$U?pj?8x)ulbutya+f=EdHUl}QGbcHo=L&VyX}$7
zhhv9aWPDN;*u}sw;mKd|*1cK6%K%bc5Hmx+->WD}NXBwd9?LbT=*aJh#fr|1(+!m}
zi(K2g-k!Ss1zPQ|w0wfg-ZTZc^ZMK?yvk&WhtIzkt6=>gm^$86P(IQ<+B}izyOM+b
zbL+#vLl4~bwujK~_Z|k09RvU6G7PObi&SW;w)S5tip%d$ni=J5(!%K6`B#(I>E7R%
zE3Qv?;nCV_NJKXXb6}T5|1_o_#-SnoW8^$<pmx2H#>IQ5&tOBE0h^5-1&vo~%$Fin
zs{&|E%U<awHGW1*ubJ4Lw|f4#IXoIr$hNm5Nv!u)^aujkb&C3ddo^NtOh*hJmP7nr
zpO(k*{RM$M2l<HCn<sxfxx)gE+=6K7Xold){i4#nKw2tu3R9iRglw73&J)}-GP6u0
zr1PL8_5=B(iCnswrZ<14GCEw~-drzVU>JDZDWY60yjuci^n)de@JJq|UU!~AZVc7<
z{DEB)^@Fon`|*<+|0%riKNB(!1p(Oc<x+ZteK$GeK=3Y-us!(1;hQ|_tM*CyCA$&;
zgow)(+BzGJHwAY>SAMbfI}C!rQTnXtLWo}k0tGWb?_6c{Y|msz#^>;H&OKR|qOEbq
zJ;Bhi$S7vfB2XRE@6_{_U%dka2*+#t=-wjt!&;)&X+p5-gnQj1K~6@+d8GU&c9R;e
zeltT3@_C+vFMsX+{c`sJr-O4zZgel!fpmC;o|gg=@0sZiFJ$r-ZNH5kr$s}H9vDlN
zOlBMlFaAQ!JM(Cf5rp|ZFXQkm33NB;2t9;+xH%v2EcpW^E^AlyJCc}1TTGemUf6EB
zj`#7`uK~7{;6bNlio`P15AGJ7fwiXFl>4p&mF|#7_ks?&uGuB4T!H-x&5L)*>kY{t
zyAF8g^s|~+61AL%clW|#;hzo`D`;_pwN~v>*W?LpH-mfYSOjOFL`F)HrkF0J_t*V;
zHkgbPP+0p#VY54+cw-4)>`_xyX*R0*&}%%uTDMy+cel&KE|aq}FE<UH02j52iSSSF
zNB9tcuJ9i(SjF!~=tycgE8&P^Y|#1WbrqPmP$JlO<N#e@jL!>;Hcr`zMSNV+kxv)!
z$F9SIjL3ZYn;+Ru+)pk%swKDtx7&`me>iDAE7_|dNU}wnL4K73=X|zUpgH{evG70i
z@J{+*!>54S7{1!*A-I!{0*0;8URav=Qx**uk|-!x&$ZYRv%OK24l2?;;ivj=j1hP>
z<_|fFQ2+yAqI2BMD;)z9pY2L17&~0~U`|jlwQ*DB4QZr=<M0at&(rb$+ItxIcQDDn
z(0kx5(xdmzVc2+)@-Q_1$gMc4UsK62iJw!t_x!i)$QA%~PkW3|aJL-;VxUK<V}dgu
zzyEk?>d$X@;*A-O7B$G56EKg*`zHvai`_1m;&JsI*V8klexWzT2RP}>jYi-z0|ZDe
z(47>8b+mWPv-4;*q#A$j81S)eV7}{<rHFSTaK?ojPuQi-W)aJE2u8k^5J-*Rl#xG}
z%P^n2NRzwBu>0jg{^phH=->k;6fx|(5C8&4wbu|iEzwOqp5IbZQeS69vh#d~3o}k1
z;85b*qMn!0zv$@SB!lf0EZYs?H9pWrdAlZ1GT=5-B->XK3LaUfpC4J^IUa~_duD%Z
zirya^3R<d)rHef-`_o4N-@yR1emwnj{T>40sB8z9FxMxx1V;B+o4ryWST$%E?nsOt
z644NiU+T1xHsnuP-?f7LCdDOKKyO`b(edH#4K}W&^sh&}6_K@lVxx!CHN{27g}e1c
zjyI_aW$Pw&XM5}f-N2_-|FN4}^#MP?YT2rRJcgOQ13@q`(xap^Pb>YfYvRHwFLG*^
z0&{G>=PC3yF`Dj-sAZJNx1GPg**-cxFa=0P7Wthd@>JpcOi7q9Tq=*xilQ#ULpJ$n
z<1~Z1CIoT)XYhLe#94IEJ8&L1CM4or+utLK=*hV<(JCD1M3eeI{(4n&%q%DJE-vW5
zRR?st`>m|m!uRs`Yl%v_usEF4H+OT7;2=G2FBs1r+GaBBnnN+9tNgd%n?U|o`%1b8
z>7;jePpBh3`Y<F+K_%$u)-0c-TT5D`mGpcN`kJM_J(P!DX5~+`VPk~*-Xz4%7~gYW
zX7GJFQ1hv=()K(*Vt#bWa+oZocrN}Te`WR=WjD3byy)N5?3bxRK2rf&|DA+K<Tm@I
zxBAp}b_7>J!=vgYbE|HO9L;(?$~U{9?p#*VxL{AHz;<ZczhH(91`s$ZOe*8u-^m_A
z=9Z<iQZ6(BTuEPPBvyO}VzH<b*(0X6;A__0Ilqo4Bg*+RiU0~Tw}lcuV$`-<GMFxp
ziH{rI>giQX_?A*>uSPWwq@|vF6_&tIU>&E~)W|r}^e;E<113QSpC%w8Ldb8G@l7Rs
z;JX_&&+~A3>1ICx<Ao6Ole&}c9BIns>MsdF|K(rNZ@)lyv%jYI0{eCY!UOMIoRGDO
zbTg%3Y6bm9d%vgF%vv}LwEeT(#m9f!uB#X@c@h%rz}t+5UM|&(x98t~2({%6?7ov*
zT?;AL=BHF(785yskMpk-BXBucBof(W_oCmIfm@B+VuMGJ;gJgo4J>fA*&SG2s%HvT
zWCx2pxzu0t9EANt&w(sIjokayMZ>pu<|Eeuf1a>QOJy+V-al@J9l(vFI){@__>9v1
z6RtV`ADPWt5&MAB&s4#Pp&7T7>KQ)V1O6%H5J|+pHnoajc_jpiYc}HxWScWKhGly_
z?#^HM-NY7X0Dw(HxOW$FoN!lj=2X&C+L_5-<K}`zN_%)F8tJXCtYf0FNbvygRzW%S
zFB_H1ga7QwK(9m>c26qoDQ&L{q_ew=6U3gfsL}7lXf8jIY}mm>U1ioV>Aqqqv$Tk)
zqWwKPd#5HC;M4IuG|t%D;1m4?WDYB2sij=ktbjAWdVUAC=EKB$dJCbCHJvNa>E*Ex
zM3^q+e_9T(*ZCm5<CGBO`xKcR7OW^j|7p_8XnBoNP3eHm%K13yAGIeP2n3Xi4JCz&
zno9p#$Up}m$MFudm&3PnkTZqz%Soe){#drrzdOKP6ITXXqwpZ`6`dyM<5*3!D>_4Y
z=ieg3JKO}`A$@b5{Z-&TI#i;3@pfg9ZjUI_n?_|C&nU2f<O*<gaV$b@By2PtIc9%G
zTRvbzN+573Beq+)rFLWh*yT7Ui2VfNoTo-xjK1$~*l{rb!2=d?OiOmq{#VQaKrK5^
z-&7G4xUWBb1wBftuMz7E2dG)LwWvV$k9wQ@rg<=d^07+Z)xe*;4*0OU2tZ0joLiC@
z0kwn>B0Wl;6Q_u7r8{g;>*mNW^Uy}FEjB+D4(jM2xyhGg{golOTl6hrLq>ouF3H{i
ztvi#8Y}w_rrZ18x9wj64{AQ=&kJ6G#DNm4->?Lc?zp)tkD_Qst*6ZIo%tz2WEKQFB
z9j1;*X;d}}7~4J&e(wzZiDz;yA?!)HT$KH|(}G4ha1z7nUs&(s)3gkGAHfjP{*$$+
z@g<6D;ryJvP^=`~Y*%jAyK8(|mhyQ!^uKCfEw?N~)c5X1&o;r9=nU3Ag@d_hy3=XS
z5wnIJ1gjgF{0YaqJi`Bh8R&T;0BEp3HM*6@L@?4LI)3fN;|Tc--F{oA=GmgD_AdZW
zNf_jf-})+)MEEbu|3vLGX`@3*f^hfJ5*eIdcXQF_CT7Bp#c9~8#Nwp9+G2#Cd7oYb
zn3GnFe)fldz135GK=cKqeTR2ws}B&QLB*#m5<EArPaoLc6nQ>+7j3-!{Y3cjzi$NI
zVr9E2&k!QG-Ln7@J@A>A!gJ32^=&Rd;yYDyapP>hyI=yRfrfy<;Gh3e^@&L&{|kZI
zieW>q+i~}S4-!N+k!NQMI;l0wx9Uzz&5}ZcchN@=-5KX!ydb%Ag@4nVJ0XdXZQ%*N
zye9>o=xdsDIvOvpDhmn@OVsnU>sch9oFD)(ocx8I;D7rlaJtOxlCk*cZts7i2RANl
zMV|dl)q*V2%Y0^<dStM6M<DJfJW8FFH2VK`bH8^`1IN)Mfp_<*hkCDyl8@1pTXl1z
z+;xjr8V!wmS6#Zb=jSo)b=iJT$pF>~0|$!<KE)%GO7;cz0G$t_k3lfAx{4Y7eM)s)
z?!v)1wc0z#QkzT0`mDMr_IJF!WjE<9poN2y7Bu`X0MZaLL&%r;$0j3H4(7_`Xlp-C
zdG1^(R2jbu<8oC0uNVxt-CqJQR=J-;w?+)~J3LCZi^1kH9Qk^Z2csc5?@zA`&{BV~
zLj;0R!K;gZlS^>=0N|wP4=FoNflj>Cgq8ubAb`dzWXzjo$PUFdODZqx5jgDSW}FBk
z{##?@Y;Kc|MCRPLYmTCVkSjI>E4~uYT9sn|iF(Gp-Sm8L4QBK(<^A&7GlV-K{Wiiw
zA(%AphmNKAbns-Qu~_)8JRgr9HoP`<g<RtV&>uU@W2qu^c9g3++e4)u|BFRtQlpoP
zh-aE~FWu4-BhiJa&IYjqlLtWZ%pT`7&O|l8I(sGwy3Q%Ye)S>W3T5Q?a@j4)K!C4_
z?3LI?;7|ercjmZra#Y*rA&XkM0?jJqvNjNry+&~nDGx0pHMXUue}#~@3hoaC&ab%8
z9|1W;peS7oydkKu>zXe_;pa5g;LqdWk}qWZt|$J&*kE$Z_TpcOCO}I&ZiC4E?Z0kK
zL2s36z+E8Pk)B7E=54I`MZR}4dh8$0O<*fH=U>F^4{`xX4fLV(Grg3e=o7<OZILrw
z?xMDvaW`rVyG^<LUnWDgdrM6&1i!)nyY5T<!f1tdqu-{m?|Z53>US0MmMGD0vu?3r
z8%M^qo`e6@nu3iC`5{2?Z1J{KDJKVy5Kl_=4eCi_uaLLs{B0CWf~Aycn-}(Kt>XUz
z$7e4Ar-(B{ZrB1iDIF|)4V|1Hwb2{HyI}+E>-GI+FCrl<^_CL<&57;`AwbsDbpjtK
z5=FVdBY4aJye23=c$dk^GTOF%wTU5)?vP0F*rfJq;J+u$4cp^|as^`X0t`<7cbA4Z
z^mL@PmPLAI4V_^0YChvw5J**k8!>Bl>}rJN71!mc6pXy7&T};yqw^R;5BuZi>Nmxr
zy|kYxxZj)(9aAmgn0cyFsE9Q0w{@%3mA~nwb6so=O%2zVD&2*z@w8K#;)*Lb7L2nr
zU+GxsJTU6E_`(+So6{T6yX|>?ap(vXF0k1k*Rj)Lu{q;rQQ=MIKc*>0>S}kiJfoZC
zMdEn#uhuSJ-L^9M0a+qz`2^G<Xk|d9%GIojvb<T5KvleqQvBRyzEpyKJ+9vQESB}^
zP|iLgP<)O+K7zC4wo-J1O=@7Ln<tuYPl~OUi{L4~s%TIZ$8r_m_kEH8g>Hs)u^Crf
zTMZ)0hKn(39!gZJKTJxoTHmh7-kC2noGCP}-X1R3@U9>U>aDKy-~}DfYr870mWppi
z{f24gWPouYfVXb>R1`RUH_K$`<2KHZ+6QbMA{YLiuWf4gtIW^C-x;Tn#sJw3P`&Gv
zUrXQX7N_&8*BTNIIAe7~^?7O!T_P$Ks%pjt|0)*Ejzb<ZaE(~W*UPW!Ylw?Cvzk^>
z36Lmz#gL#Awc8b>sdW~N{2neeXZFVI#K{w#r>QB@ukYkriaXCdDs&zeYt|)hQT}yR
zf;5lY6MjYVl@mW~1Gg(Ef+4H64To1wA)3a*=27c^$~q%7fU<1Ha(Dt+j{wPqud1QT
zwGnvGmR*t5ubhqqb6Q$1apqrUD7raj^97padJaAly<!j~^MHe9j2n@PioB6E-ITR^
ze8t}86$K@(rZkhWoK9QEIh6QjZnnHF$;7if6#Yd)cxT*`U!sn`T?*%g)1dXH_8uNl
zj^Pz_F4gN>huy?z$VuA5j{3YWKaoG0*NuYc&fw@U6crjzFul6}7l&7Q>-xMlxwNCI
zg#$hIh(xbu{)o!Pk!wJas1t8>;m{>T?=%HHr%G3s`${*Re_+)skkT(8Bm+J?btBL!
zk%{ipA|rH1aE4C6IBYL30(h9l;XPft&Wkv^iGwCkXprCn#Pt%1>h{UjORfD1-M8S{
zd$=D+UkEMf;M8Ao4~SG)Y&FoJIfVM{>8~o~TMjWL_7vafNz|1Km6$r=UQX)G(B(T4
znv*bpH+vx<l@f{!xheK-{$e>B^T9CUdR#_zdfn~$xA<w!Pi85GZE6bZw)9sA{(;ob
zMm{p@XVh2=2wjCDJ$BMPn_v~rtU`2nULEQC@E_8YC!%+;C|TukpRLf7J6k`u=hK)6
zxd$MBaiXt`3>wKC1rexLzq|`9oycsL(`Lq~zLjeRQ#Rzc<i?uwIjNKh(^%PaUTqfo
z#>kxO4XXD_@Ic9^s4)kRyo=|bH8-uQ_Jwde5|@}$CqaK!>0Im^G5z$^FIm%4f!0|D
zrJt|!4|-~H5fdr7PgXCAESINTygV`1Y|61WZ@LU2If*r=!~1;Q-~M6U5%uG&MVjMd
zrRIP%_(2s$t30wjRCe9#{A8w*o@^51e?T702tY!2050$sNZV_@g)kfOGFFi)W(Dq&
z$LIn|S|>~tae~G|{b#V%l8WdZ$>1J;l>iqy|A}6BSGur`Cz`6SKQQuG2vW~fEL+$2
zdt`i5lsb?9!TK>ilt%kTyc?JK^=#x~l9SqCX&Hm^sp_t8^F$PJT?3k6iAvQ+g+3Mi
z4MVz)SK`rUdCK$}41$s2`JeJr1oQXfHJ()$o8%8Jc~~_nbbA&@bCM8@w-0X0*qR-v
zaOJ88zsmFcP~5KRhchlaBtD0!B)dVc5Ttt}9@+WRjjzC@PK(52*Dd7HFeRyNdh$ZM
zc<3)q;4ckM<GSn8CPSxu;V2?&M@f04ydLx&%kG9jInK|>v7g|Mw@$oHpNBtD!Wq!Y
zdJKbTR&2JJq;6O%9w47GE*ZqbXbZ<|O1f8h(S&yTmn|Z(jrMXli>NTL0)_-TeUO4w
zW_e|>qnvUlw1|3Onqm;DkRN6p^F~|=n!Gl@A(2lvOQAfhDluyD<++>nbyCQOo4n~t
zPsK^)tNA!w;cT-kwPbUTr5x^|9AykMsB1Q%e|CPkB{Vs+%mZhEJ^W?zuI04KnDmis
zxT%x-w3{N1{<n>_I;cGhtuks)iIT!e2SZ~jzeSy1Ofs~fZU=GdI-`{>QIWnv*{@7f
zhMfhw$=TOk&Q54&xb8_oq1IKScXoGxhH-Rx7{d|%b0{<>KpCfeEuzjGA;Ray19|7a
z)3V5EK74q0APm$J1#@-_GGGHYyAQd}?Fo*ZemdnBK6z${=9L?*XnKwc20!#Rg{Ci;
zxW$h*tjuVH*Sp)0ntGxSH?7c~_)rV)hxL7dPaGZQ=&f<8_fAFrFa~WgEJEh7bT7i4
zi>H|$vr0qGGq_NOsZz;&P*M=qG4-*x+}Sm*5cP|x{t;|!>|=O@%WvCs-}Y-iV9k#a
zy`DJnC02A^ZY*m|&2%vu@!GC$pT+&wYq-+wZZsW&j6g31&RfQF6%fEeYl9D{p8?L`
zpdjmsr(XWssho+YUz1qwJ6wk$19Yng9zlBNd9;ZjPOHtxs!nZ=d9g>9ikqJ?@N#50
z0hfb~8r(*TRp8ud_l7$*H2Y{brQZ>b`QoU}8p0XDE!U+49@J?>DQ3+`MW!9IW{7io
zjYQDcq{hJrw{c^GcXU$|WKLDBnxTe><DcYgiO3s?Ree-5GPi$Jk{W`XG7=vHwfn%c
z)1xO<HX6Ak>)3OXx2?u9QlQkjpgMKTfhsWkRH-!`c^of)@+6DLYuzI?gR$Y4cLbsn
z;9dArm;qj(!x#o0LCS*W+qbK#)q=wShSnf;P-aq*06$Rw<&dAYMo&{9?+K=UKxTVJ
zI*TSPX`J?hLcUjVQnde@r)55;iKfV*r7L~C@cHaMim5!z?6+k67lYcFSCwec#^+Pa
zkXG-SdV6wM)be!UXkRMZN%$ILdK?6i8WfOnRdpj0ij%;!f8g|(;WTqb24&G9r}av=
z%Nz8hT;JrkQVpCG&dvGFmD0n<$0_cT%^qx`CH&}zf0LFD-COp0GVy{1$V<Gri?^gh
zr58+@o>}=>^Of<sL?ayFGukk?E9vlbdIUxj5<o&pY=KV0Xx`D9Nj|!+P^41>UtUh?
zg=tQD^7r(ts>Sbg9_s*Q9f)j|?+4}H)M39jk^xSbfnR=|1>j~;nfi@8l8WwY>GF7T
z&DVX$5200Q--tN6XBxb|C+0H%tSAo=?!om|wS%Pbhie4Ergr7DFms9Pv~&GS_aok=
z+c@(!<OCYK|2m!?5cRnRuyqefi>*$Go1;<ep_kz3r*VpezyvMz3}i1uqroBfrLtI#
zpm7X_)d#TdgAwsvP0SfON&z0zRVR*hCCFco<zUt1tL)6b7sj4fT8yj6jP3WEYSRd|
zzKPQ!ppD^l)S4Glma2-XUaL)5L+|ys3GOp2TVYU%ok|4DW>18&d;i==-DhvwQ^0uo
z7!FlZZ>v95`RZolTBzie_fWLa_6gHp@|#YJ?o%=gpZQsTdRrxa5v?Rc!?e0v3pkSs
z;8}wtZq#UyHn5(WP~b72sv$9&DtX)7_r3}35+JL}ZebJG5Fs*5t2Kc-RL?aO$(Eoi
zqQ#|t)nmmvs=Q6ezB?WNgMPZk0b}3QDof2=*IXK3iqNH+Rh1p{#AaN_t5CzOp%z2^
zyHck?`1zUBD6aYwCAK*|5lMQ0B3prGJmL=mz5J&(>vOXTJ9a!HwyeGB4(A2EPu$nC
z&0KIcTn4xGW_8~9q)vr#Y7;vtreD7`uHD)77!h*GF76+T#Hw&Y+mI17F<V-jRF*%J
z(nhwF7)SUgt6@orK2U)4^42c`ZQta}gjy{G*-R+2g2YJ$$qGN_n3Od|IuivG0)V_P
zCqCqW)G1|WOyV#=BO-70wdG8u^6}YKT}0CG-GL(TA}yB@9KdlAkZE|o28%tkVQjY7
z->b8Uu<%Xj$!63r;wY^*7keHV_&^&^DRafHl@&GVzB(Q?2heqdp&*Rz{wVy2oWxrr
z#FsW9%5U=z<sF#j0kjWz^%@;0g6Rcgr)Kr92d&4g!fe~Cdg|F^NV0}&7x~uL{itQl
z>hhEx^JEs^Id4K9HIELI;+M~Q6LxIp$Y5@&`z?;{X#K=rsVm&xVG?grHOq(`bM2(k
zU0i6X>HJAU(@3#H!O|zqKKsvq&8Vj-W-tMP3>YcVr_?xqi-aMhj(LKdY=-ga2wre}
zPIxZiTfg?y<xj*TY@__^^GfL_72H*;T`EQVqE)$zzOOZ1I6Dh9`yJxP@~!R?CxC4r
zhuxNgdGsFP!95gCw{dkh+tH%NI8mjWnP$2uYbY4?cm60;uoDkd*o>8J21W$4^WIh-
zJ7}mZZz^=Kr->*F8W}~(ZVWwgLJ0!j<j(RO2D&<lQO@Q0Hl0D8SXC1aDkEJtUf!@e
z*&cDPSdwGpssjL0f|S>}%YQ`q!F(?$cEs^*xEacZeY}o~X#r0V!TGnJT*Y<Y_i~i)
zaz=07-s0z7Eo{pJo-uhwi<_M|5AIVFq28Cu3-g4YMA5^C>E#<51n#9s!qD8mQxX^4
zin`bWO*wT;k^ww&ZO%98=irWf7q~Ao9qfo*Uf+a=v>%$z9tjsWe1O$HDpZ$W?%HiX
zvipEyF7@DpGt)@*wOq>a*3&U8hq5N4zR~jo12{g_OgnBC)c}tJ$M?8Ge)q^YjdYl@
zaLs}l-M&fC5%MPcaxcCj)n&6zxBhS9?Jq;Ngtt7<E(;`6z)cwVuddYCcdshY3M_mC
zr=QEal!nnY@Xnbu=Ql`-1IgO0I`9otR4E+qk={3_`SCZo01KMzhOHFAsv;Y3@tqc?
zR66=A&qvlqYgRdVOz@!>;(D1)ayggkM>@5Obq3G(gq|YVg=z21_-?qX-X$pOxmXSr
zPvjsUbF9~{Y>G%Z$kwb1*Pxt?+>CfsiYv%d-ey|BZg5aL&sZJRl3~o=;RIyoNU!%v
zJWO=6dpP*dRW<Hb0tuu^KT*1EcZK+X9x*lxuwU(f<nd3!EY;oP-c@e^9}!4c&r?M4
zf=iB|v+Tv@<ObRyMtc&JNa2+_#+!o8f0|)WStWZE9}XOJ!h2acZ0kO>jkVs{_Mjhk
zTkq0!&DET;<U9+&lF!KeOT<M*nh$3`U$@D%<~^nECRhG$_}y`hKu1!GG1g3ckrtOy
zNdw{<V%&p6I(MHrEX%qQ#uWI`$mZ0pye$U{(ssU;U)IWl3RJXsdNYhDZc~MVCTQb`
zKQoSAAUg$6L*a1^>}UI(7{4qH@6#9=q(RZ$%`2sK4}GRTSs`*g!wg3{mkKRukm!?I
zI0<h_uVpc{v@yMDnaU);Q_c<)xJH^<VeQNzc7>;iYmJ#Hb3AARk<5q_3N<d{c<(hD
z7uQ5HLyC&Ga;B!}{gT&$zs&rgJWgmVpeR2(c6cA~x=NDgo(@B_KqDJ%iIRx#ZZm?g
z0P>AP+vbY`_!V99-Asv!cA9r%gN<>iqOj2+^Ss}k85!bq#f2hRUZ-(1L^dUx!OZT(
zG=1g$nC#t*R)VN;SJ{AgQ0kE;OjSi+5#v09UIaZDana+%dbIIU+M-lD=jVp!B5b3L
zR!qJW<3(}W!Us9*Xqw7Ck}|jALWLR}MaNf)P8W-G+PVz_e6D*2xfBV`wD&D1=pAtY
zY-k0`1C179PhY$_&sR_~g5U_?EIoB5JRQ?u-)&S@;a*&xD?ftN%ykfL-MpJt)cvee
zw4O~bCIvlXb^;=Y?UPk*Nngu^`}%ykEt1wnRzs*ciZd&#fvl#SX+`9<G8DXHv)lVl
zQ<rEZG2nITaGbZjX3ev>0JmL>)G}sOrAavx^Q1`W7i&uSwgb`moF{f;MuqJ%_sM23
z8j!49h6()$C^+VA-<!DjV6M6LFteF#h9%G?(<lmb$wUKPGSA+<#+!OMYIfn^R>8$k
zXjhOU64&&#cXavDwrM?4oXZN=J|^1q7Ydn%yRDMLf_P!grkO=Sn@5!xXT2J8d&fO<
zs9p*O_$eM<a|l25)y<-py>IgalVL$@uS|?Ll01P~e8+mmNT`_T%dgtJ#}gUSa70Zo
zy4n4iAKjJD&+0V~96?qS48ss!#yXUkS+F<ARH(qHtz4SrpbX`GFT@cH9QJXS%7g)}
z@tTL4?~QV=ixxFj?axiM$u^oGNICLWe5b9qK{okP)h2mYx(<)<abYrZ#4`O1JRK;#
zCss#d<ModP4SnRUR`MRz#vuykk$)I32=rQ|jq0|CH{@Pp&8i+zt$ck#TR4!(F8Fxj
z5!RuZ(Cj+&HS+`3yeG5@_w59P{yqp)X5}_QCKjvi0o*=TCSR7Pg3OSvw^#V~3;9;p
zwkt{%nsa9|Qw`Kz4w52z1McAx77NIkzmQAz180)IsJ!I!tbNo&>%2Cjb;5<CgcgHg
zOd2$&3UR!nt`?$b<KIcLZIDDaP%}b{y#a_`v-5m1Ob2?ZeWQA!DJ;D2%Q5y!*pG<4
zWJb!l2IV5hW|o3==QR7kDWu%!SC|yo;=|u?QJZaF67oZ4)HKTNXL#YsFxW4C1aAvg
zw!vk+qQfR`bfIjSMJJGJ@O&f1>z2B+A>6v1FY+c4x9u0V?K-nO3}c9s998C1aZcy*
zZZXL2xMoB}POg<AD08?-B`T;Uc}pQjta2j6ha!OrJXgh7L3Q6mpFEvacHeoHx)lu#
zcFD5mdN$hq7oP_ZLUj$+9NG22x{`^f7LuxIQ8bTLPn$QRRNf?Z?$lNo>yVoRFJ1(Q
z+=UV8z{eODNTnsSbCIjvHm-KjJz+QVHMVD+)Cm!Mpm|R)mqb6kXiJ>QLB7ec&~fP=
zHx1x)L|dJoYEMejim<vfhdg2c1*;ZC7(i^+K!wSh0%Mi5%BNKQ<BoK>#Ewh|bhBfD
zfd8G?l8jY_1;bR4j_}oIGx+&d7U)HD!S2kN!)<`K5f8YYs`EqIDSywP4L7>phIcOx
zTQB(78|$7g%dq@PX5?YPUOaOddA%>)IDb5}_NDPqXI64|l(%XS&B<JiUR3+++igfZ
zUX^+d^}Y>t7&JRrJeg;IT5oi@Z8z^u%=LXaVn@3@mYS@T6^m@4z0boji3m8v2t7L1
z!FtMxbIou2#7JpUlXjz?nOu8*za~5TAY*4Y`J+_4`p&E1E>srtAG$(;?8vbg?DXcU
zqe2mK?i8%Eyb@JNQfuSP*YL!;otPOo4%v!m*|fi2N&)~whiFBqDF<VtD&&gyyK>_S
z(+&w0-6O{%S(|xk^sQ{T&y7yJn+>jC<769;k@Y8`Nl!`^rQWAeGO+KG9}#&3BC~pD
zCWnQh=re|4+&b1KphlEXA{uD-nyeWqas7>TXS9Wpkwoi!gmYU$(YuUg{t>ZH!$%k|
zev;dY=CfH0W&;&h@pvmQF_KrGD5Nud`#BJQxNmm*$b79lix_IAJj&Md4zI^t#nH|G
zVyWzN>P8Gz!~vdk2MikMwO3C}GgK;?YnOdZISNV7wyx(TcTcOI4_|oFReYyuI}Y{~
z8>MK?+Dx;594@rfFf~QJec?y7xt!U~Xv={(TwfhS{w$Gi^)g*dJK#;$qNFm4oL}{Q
z2`QZe-uJC&p>*>IurJ6-Ed%??=UHPMo3yn%t1R|E_|z?apfY&NO!G5r9vA7w@x6=S
zTl@BY16xerb8T*%Hb(Nu*Yo}Lq@Z`KT+mKe^Gf}Yy8)@G#qY)FDvAY8qA@uNUZv@h
z0E8_!!x^b0e52AwN8iR(5#PFhCS(6xYVBP}N=jqq6D@xJ?I`u9=X)lsuBFn!8#9*>
zzWKyXhqkOM-gV1p`nKzt!Bx5Y_j8tR-xOx7d<M9$ypuTb-YjFy(1B!6`(+XW*8v=L
zReY8MY#iHV>W<K^Ny3rE67>^#vWFME%Opj<%?XFyE}^A?g^zc-tF|8>W}Ne~7rDMB
zwrs{y(Y-xR>pn8mN3T5>uTiYPJfrB2j7Zx&@aN^1QrLvJ%%zbl_Egs8Bps(NRNG)i
zFP|$U&${Q+>#786y)3Rd5RkU2xNmWFMsL}2K|~n?7?vf7&B~ll&0acfStY}uSWMhn
znPO0-PWf5bkW5+FSnl@)c<<uGqzKO<Z>Eio3kBNUNS<l=xqFIqs|%%m;0goUZiPM5
zxZ|P6aqjE;ma#vGXSF#<cn7b*sx<kf)(VvZbB)_t?R*^6S=2H;P;#Euv{A>b(0XoH
zonD{aqM4^x*1Y|bQ3GT|cj^@t1J1;|MkQJi@j6$WET~nhUq`jDxl$Mv5l=$T$X=Al
zT#el?B(IRiQu|c)@o>qzuQT{{+SPO_yJe0$xL)GCp@QiP?x<Dj_0E`7VndF>#D#7)
z{ReJ-I&-J;11e8KzS8On1=zG}rZl?YlOu~u_o=Z9dezQKL?&lv36-j4p~hq++mga0
z3@S2oYRJ+>md^01s!CU(>4)h4AXEoJVcUWiXG6|}a5&{H49c=Sljh4*9K%`<ooL>S
zA<-4aQaGu7r2blQ)M^y-p=?)4#CWJEtxIaw>EreChbMJ~wMiZ)^+>>ht>$GdjjShM
z&TqD~5k0U+$C^_tr*cl_e87b05^LJ^52FoQufGN^tHY!%ubZkqm)#0clNZ7khR4Vf
z+hu<WiJEhtmUdP=<}v-!(`RWCI~(OcyQJmyrDvw@h(Ffd<i-JclnkC53pOUzfKB?Q
zi=x=H%2Zrj!~Ly3AxaZ-4$LGc0SrDutX<_4(qIb`#9AaBV@m+Bh@I)LnL=C6<Kqdv
zSkZG)6CBO@d9D4Db%f)t7F22%1FDDQU9-BSD$=ZWwGT_1hy(F91?8@7Q<I5ZZ&cK)
zf}Qg5$y+GF<uO6NXdqZg(R7lrOT*IRUH^1d9<a_<Xegz3QM}i1p_xaz{t0u`+Y^^>
ziQnsrhA=`|R>lU8Gs3CgEK2VwUw)1|R+cKS$aIO`z<`^L0GGT=Z4A8RaS-8Y6X~-?
z<V_6NGgzA3j>K~k109mVQ`^+GgltSXEq?Bw!1!FbUCS5Z`f{OW{&<*|r+o5SfVJpl
za;4xzfgR1X&1}8It11~DDT@buH~3hHYJ(eWRFUL^h`IxhE%X|&$p`AG#WJg&!HcPA
zjBKa3qQjX`!U%~yL}%YjCYt1YfY^1MG7F<j2LA{HhCYA!=N4{96ONZ?xbM9D8!BTv
zq`4p&SXi%VA{1lOdUxBWJPky48<FU1TJUb6TU&!m^Yu;|(-RO&a-n87LLL7fJSP|#
zV<5;}C|I<kjw^a+t7`D|wr@2<ZZdCudykLZ-e|%oXKh6dLP{roHP4gGhq#5qQ=%Oc
zVrsh7U(Q(waEI~b7(^KwPUaGsE(YFwL(@`gk|9E1s;ZgnNTh$JqvO+r)@&C+<z&Lv
zjP@uLdWa4z>^O=@eE4<+1LYM9(?_EYrW5r6D8>uU;h5yMNgx=EQzN#}xam^ny&YDB
zIrp{}9`O<5>M7Sz&5!6eCr3}KKNieKi#a>bS!Kq9U_%Ac5xe_HB(GC>avL$co;N?z
z%{@=rf1wObQBw&|jvMD>rh1tn*E$B@TuzGt=MT1kKVBLy*FIZ0u*`gbZ7ETTQUT$Y
z(l39gA_;2~lQc?Ly`e=goOo8Vx~`X^@^j0F(ev!niDFS|E}o=6lVGg=X{`RGq2BJ(
z_lPc!jCZ^ZAzO+&?~na`vMKb63zhPT*uUXO7>7$_7OQe{j1>?i`^b}d8^*i&nQ8GN
zzz(F;*g2L~I5|djYvUZFd41^XLq_C!D{sLMk&<{2US!(x<gNBac0N409toVRN6At2
zbon3)5eH#MOW9r^=MxRN#Bqt-gt_sNj-55AkI7RW;L~67e*WMDGH|)#qk>bs+S6p^
z52;dP$2G&{kH3qaDH&qD39L!4Fh1Ini;f|Fu28lV;ug3>N+sZfUMd5>6M3Tl`0?TF
z9GRgcrh(Bak0EZX&OldCdxd^=FZgiMht-^c2yrt+T;4@LnCrpPe0m=~V%2Mq<3qTd
z4he>=tslu<S%)!0nY01fxlFjq2})2lZDtblSadS@9?_O@L4E$blIH2XHJG$oz9v3>
zuVNAwu{I63$&q~fAvOMY^9>j+C%G6upTqiwha)^~TR@OCR&&XO>u<p9=%AT@&vcPh
zaZWussV=6#<KGe|n9kWPlgR{9-EnsOWNKS}4$4a}fq|twqhf26==JK&Ge{vz1ZQ+P
zdK(jyVvIh82SIkg3y~J*rDB{Q(V!I)jcV*lB9-K6ro^99B2%U090?tK0~f@PQJ#ui
zbMUmjWbwJ&G;|h*f<cZC;I=y@2DS<&Jz02M7UwEwwmw47t?@CPUW3r#QhmUQ%?*oA
zi{}ASQXmxAUa<I?6PJBCR-l;lp#nUKW-e;AVLI`I0d<)F0{Uq$^_hFoF!@k9e=Fij
z^V}!(cyBJN*sV`b4)Ykv_3A)}z!E7tnz3jqNzl+N*+J2D3X!AhL)^z^3bfNns`O4t
z`yg0>mJkfFL&egP+`v%NbYr3sbLW#N@^Xov4_gUNi(KhGppI>@Ur@J5nytPp8!L}1
zVT$6VTMI`+g3w2R-OE`D^6Cw?j~(zhNX6*ufB0p?qQm*O7?ZzncjUiG$!QY_xM&bZ
ztYa0H(HR5fv5@OMf$%hsaGy7n1}!vN1pHJ;eftpZdyD8S;`c9G8V;INlV*$tN*~Zm
zb>Q9Vw<_KCAA2w^lw3FaoNn5jCN9$xO<1%ePtMl~of8-cuKI&zUoZ4Bzurm)A@#|0
z4_vyqSr$GoFfP`ZjNP0B_l4p0$Wwo=C%?*EV`+gc3gM^gn*7|q6PwSNNdT1qInu#d
zb#`@WRBarD)5LIW%hGR+$mBBvN?iK`q{W(}+wx;G@T+U>%gW={F$o!+pWlaI+%Vv}
z$1LV6^)1a@WC-R4$IL3XATD@aUDE3bM!B@l<Ou}QSIGwyjdPV_y>n$P5WBV~()MZ}
z67bpUQYDnd<w~k~VtK4)2m$-eiwi5NN#Jf2#niysrfD8=ww}Ee!5d&n?xEcTi!6p4
z1ASvo@<~jkRiGa6m?tH9QrBkoDUXG@Hk~NQ5%G5JRzbr|O%*$0P-qk6$-HxWZ#o|c
zLhs}Ad9d&JXF%|Soba__)sGjKZ3r9=17wo~!4~g?L5>7)vPI)0fo)g~g%1`{@xWP7
zca@oE)0Uq=hEI8>1%iq(;CM+PAD;0P#b17TIH}U-{N=G*^ok6x(7NY}9PD(A^6WvH
zSTZ>|7_<lKL3S}L343G|fzGa$$cA2f(eG%YnUA~Te2LFTGvcG$+L+E&3!I&^-SftT
z#!KTF<&UhzD1}}|p_atL5jGA^&+_l5ooOz)TJevw7@u&nOWztoSj(s2!Ph7K#L0S0
zH4vD;&f!T*=*U<$geYK+5(nhRDN46ciVAwdm0NaS4pvN50Vj4{Rcx3Xe-%YBE|U5x
z=3M<bgariA2?fi>q^gKtuPc=rTk^kxP=q&AC_ivtOVf&1lDY15-`1s({-jEYzPjAO
zmx%uP5@$h0BTCOqPm=}zfh>#(&8d8re}H|OOvU4lrcBexGHs@gX9iJ|VhRB}BEb9$
z70fquF75lHGie_x&+<|Oevu5m_&MB{%m=eK?&GIIE~f4@e$h)`f{K{kR0$AN*WaP9
z3Bkt~5BF78>1%SAbw+T+p*5xLzBSCSWEzL*ltDw9!h-XM2?EPTr>clvYunembqutV
zA{>E#lvIB3igkEQyNv{y`^zUXQ%e*EZ6D*N7@{|C>A-D>+G~{w_f(ho-9)4jsYmo2
z()C4z&rK8BK%mu$pehoi_*URw(@A7KKP`%RnOV`Se|BDeo@WJU`x-L5uZPwX9dA7e
zg91IWg$L-q#^IK%YAULa{+ily0=+tlJ$5=}sJRT0)#~18{YZ(@_7fle!K6U>LC8D?
zAq=@*8R!sx(#&az)Fb@tq5n6n?~0JG^V`!Ei8)D^7f5y)h63p|6bmq3FwISL?+Gw{
zCKpikR3l*N7?`{eUoYyLvPO9(X*h#=-m)WPuf0PrrGw8hqQdk(X{>YgP9?lFl%oJZ
zS0~)(^K0va&hkmar=S+p^s68~d%*o_2f{>oBYr=b>0sQ1Aq><F&^T3vC$)E2@UzA}
zOz2Hk=eRuWMW|um>ZOan8rv>6_>M2;j69fb2(0{tP|FlxsnOoz;!~nV99z8KrNN5x
z54}xd+S1UmxvAknuz`d={JmjsjNv@8eAoqEr9aRhJ0Gyo)o0*29o1&p#{u_CMZN}0
zsC>-dy`tyXB@b^VaY!+v06>t^N8?f2^Hkos0eJi#GScwS*rHEcXnC*#U^oa(^B{LO
zP9Y{^ClzDLhiv1u0w$ulRePVM?l!|&SJv(_Gb44pZM9-9QU`J8WHjEmr|@p9aAVJT
ziU87>RJd)EYizo(8P0oBs&5-P4PK1&xU~Cg-~*t3{-E^7EjGD<L<q2hJ{t2a{`ixw
z`s%<^+~D98$}#=iFIQtzFFM+FWoy5%Aqu2BV1W5WN@n?83txahZ^X?Ajh@o*;F+0+
z3+k=QPOa;um&NgLmfQHRqCZf`$RU}sH1g|m<9KsmJk3`21XK}!bxxrk5M6Hqd`5?j
zhz0O*hvx8w%Fa4-cnQ{@mcf^v&z@eFT7+##e%0ligWm{2FJ*zZ^=xtav0c{sIeL20
z4US;gKgm%F(4gB*7dfK(Q9?7Lo&11&;0&}d<zw-c5+(5QqDK3PRZQ#?!pdDscuV{g
z&{rL<$`sU`T8bjx9*Z|dTwK-9Nh^<&xf^T@x1+b%0v{~{cI1N%H%7-(ByjNfl4%C?
zS-%MVl&RI)<{MIU3c`2eyX_V55!IVS=XW*@<MfU|)Ejf8Ok^*@G9E%A*ZT$%>+EVq
z%hmN*PPtkwe5=9ccxx;O@E;mIrM4<DJkOCED7a{a{33WzAmU7KmK$`U)TR7IVp3C`
zO!J8a(oe|stje+Yn*Kks-ZCn#Hs}(?T?4^ggS!XU;O-jS-Q6Js5AG63aCawoaBbY(
z-I+t)Z)Voq`=|R)_v%yiNLB6HyIRvtyHVa6k#>~{Q8KO4#_%kM5#4N(1-L%ZASBQ=
z;g6sz@bf8*E7u>%h6^x6x}?$L5|WbYt!7(~VhXhnepoDofRRo_!?i(LLs#JDGnyWo
zCM1%H?H6L8RZ(olnwV2BD_RAi?f1dq#AjhW;ZJW4b-rihsl?Y90xFe+bS5`)Lh#DK
z83MvR6qG}Im#b*1gI@QIc&g+;NI*Rq2_>E2ng`hzwY3RbGnKh-gwYwmPQvM}hnPnq
z#Ui0DkdjA0&)dol0~;F4c9XOe2obs?GZb^vKDL*QqJFcfJGR_l_^hWr@H*DFF8>4g
z8Q^FUg6ncQyr5C_-iUid$H0SIi*%i9jnS4=EYu0g{q@k94zVbEx9bFMJw4Dmyvn$@
z{(n9w*>(Ov1+qMG|Ix1i=OPF(N5RLC{;yVo@p<V(wBIQH^0P<fzvb&PfzmD~uIkvI
z!%fu54GIa^AqA|Nw-a>lzLbzAf43PZ+GZDpou;Pjaic4P;o^>uNgPz80Ry#34H;^t
z^M?fSd0O=%Y`l`vPyUjZ3zAX+yAchdh&<p3wt~FJq-hMU5?C!mWH=mw-oB5+>7%ey
z-^z@R*(CrotLUK|PP#b6xM_PiB>uBgyz9Ifc>Hqrgnl_VT~DYoaW`%Hhm;?M_2$~u
zf)xgAB^A$EKhc3iDL{>U!iq4^RibfK^QO$=y!|6MjaKuMi5sv-gLmH}VM?q}DM!fm
z_D--ggC-^f;D|%F2}8I*qQC%-LHQ`kw>oW3ECOV2Cj}8U6Psa*%h=xF+jp<BKsgY0
z--O6Cjjen2W=#Vb6%`bc=})Yw{&q{TSFLHe!s-tYSYcolq)o{Vy<|K?q{2_xLGSD9
zL~Tg~xRJyVxkkl~#{u{IpD;P}-Asm3^Ux9rqvTn_r%yH@<mw8lXncca1Z#XyC@Zo|
z<peWwpEWytBb}Co6*069+FAdj$6~FN0w2~snfZ>Z9DQv~ps6Z*m1wi;anx2)Sx3Bo
z4yR|6Z*F_&#I2fdrdC{OCUlRPIk|D)u*8b9Q+{st%MaDwTa(`b3s#*V+?PzPrtqu^
zLswrm9q)#g7is=Ns0#9?Y@|!asqtT??V#V|x#YmnL1T_f0`+kufyC8r)L9?Zdy%e{
z7S>p6?S)DaKj03^Vg8u=t-@ORV~>?K$x03uOC!>art}Ccm5*lGe5~+1*HF-0JfKlz
z<6w7PvB1jWQ^hZpos?gy)G8yiYX%uV%1i8RINdQF<B7iEo8Kbi@lT8oEUk1;j;u^}
z_e+?m=q=?kR#s@_jF*%wR<YF@j=Z+j?C#!X<Zw|=aghy*Q-3P?fgD}RS-73SM`g_r
zYYkUHx$$cEEa@TPG^K4%9j$`^ARH8YKeG`LN6A5!d0hR5nsX$449U;ImERLXJ&0(P
z5fsWVafXr=DiPVekL9{{%XswqlI<8^YQi;zYQc{;5uA;6LC%Rj3vogN>ijgvwwe*G
zg!tHF3%2m5$Dl}o<LGwN<6hC7vb>iyqQ74ljfwT}yG{u<CrfPqIyhFD`?ei}QkkK3
zSf`>WKbC@?>znC+s*-DEkN8*=Qn#7~WJj#}<Rz<>%Hg2R2PB<2@}npChaE*HDa3}Y
zMWHeKxFt@>l=0H4tNv=8zT|^N<-Eh<4CXzHDS&Psd3C?nwR5yxLd<QBR(TkaSiiM?
zg#O$_(%_$C$mQPKAMh)&cNY_5W5ZYNtKvTYJZi+F*YrajS0_)_@5#D1o)K}<#)s_#
z$Kaw^1b7Y`{Bgo|n;k#>n6XK8BK>(eq}acVW#wAWQ>z8k$}&qXWWMv6zXs7A{a$r5
zI-j$YboI*{PAeytO=K6gw8<#mkmm6)(sRi|0{X}d?>{FVQ-CZZQR#-{W!mU$V~3_p
zi^bDlI?jWzT+$bqN$X&vRC}iNU2PC8mb2Hpm5C2Vitbz+?wh@N7nx6@Sf1UM47s9+
zoh4yCj!3v}ujIND{^Y1;fag}<oznZSP`T=*hA;X(VN2przJ{1KZ*dF4y4`ocHIT?F
z96Qc0E-v*D>)K0)9l=*{HJx5lAz4(+#RmK+`<$+9F}rObd4^!&F;o--hp=+h$Dv}E
z`e9>f(ygU5JEyon@8VXca;E`ycOb+?V{K(+91`(s(AwkOuMOotIWwBeddGys%`^h9
z1v|!Dg%yZbic4o_v6V#T-|sP!cVc=WbanlG%@6Ne_mG&6tjm_M_Jj0)AkBYBNNnHV
zy*vM%a6GeSn2_Z~Pk$0&Qv7oTeY)THpk|tk<861$G?%(h%u03Wqq=pU$@Q1t74~0$
zmdvI5jO8-y?%9l(z?`KK$u}HF9YJdSeZtl%?}u8FFW{dJ9TPIdL#r;`gNZy%RGvoK
zZJa&!@N1V(L>YC)fFJ;UX1)s}M)7I<_0yfAGTYZzc`<h9_>*~qnIChnH=``}2!{=S
zU98z3t15@y+u|N>DoNUV$0pu|8dt8cD)+mTYU)?|uqK`#Na%5z3IvWTo*U4~Mw-cE
z@Zd7yK(dzIp*d4vbAL1=hs-e?rk?JDa?9yN5_!C_x{s~S?dX=U)Luj3cplUHz(;32
zWYnMJ=e8#wdHrz4FNzUz_hn^brs+vjSa_;$co^?z(d78j5KBXB_)=3hc%VhmNHlK!
zH4y~cI_g~3$j)WRQ|L6=%c_UTwqn~}&vSka@6H(c19Y0Wh2r1z=XL@DNtEk5LV}$g
z<Q<pssKj91*T>$-UJPSjCV}(CRp*{Zm*t><KiVQr2}ChOfk2Irkd^#Ol6YKq&1d4{
zlg!A+kno&10s<o~Ogf|r(@~Hy$olm)){Z72GZ_+1yt?D|_&2-&F9Tx?oEXN`oBXBe
z$SZAfnPl2Zc$a^_Hya;#UgJxC!pgZQV<|Yq1haU+(47^D9d+=y0Hd#m9M}`l-)7`d
zf8TDd?Zwb;q%WTt^XN*wxv-=XLMu;bj9CP3ZMO0i=f?5<5gQ8!`aO=M2G8X0J~0Ml
zteT!QbM%P@T>NwmAM6|vNv3tDh6t-s{%JS!L$yR3-E@VgXzcW8{H2-auDyo(ONkye
ztWJi}WCvp`!?##GL3XhECYL`b>2V#`>*ueioy~$;B}6-}#1JxAe<VPQhw$wxdn3|V
zjBAdC`9(J}dM<_G)377`R7l@0uQw!`o-4W`1)n%5$0we-1{I7tH`mC+Nh1f6Y;COU
z{BEKWi@(Q(T8b9<>UMY;ZAO3*Q|qIRx6<aH9n{s7#QIB*Z7t^cB0@AJuczlb#9c9A
zQBWTo?85`;18_+kjI#ijM5k!~fcZg9;#-fE55kH+H0CN<XuFwuX=ri#rshhaDK*0E
zalfnQF*1pJh$RA4a;}RhdKEC9HlFk`0G&q-*=FpHC*coq3}&$3GFZpGvdqmmtCa_p
z)IGddXMo6NB?7ycxnBmumuJUM6v45blR4%!!8~8D?o%o*O>ezW;_2kQg-A*z{F%_u
zdR@bX$e`#6!F$acnsh-$sBAJhvCUhM<z2h&#R#Q)3`>5;;pN!VAveIr@__h~sxYt;
z9?;$%P0!nt<*uott!3ceo47<7DM+9uEn&Jcs_^Cu1>t`_ULBlO?sF~lrtSxkWAK??
zTIyLiATI1lALKm&cTt>ieeq*z5f{}Kl##BcMk;1B6x3t^>+Mh_^ZO$NfLX@(+V*l3
zt3eNwK$U@k_wJ>d6u%b5AI}&&{)~}w)2G?yt2B^F&cgcgYH2Eaov$(Z2<f=DLP%$E
z@Q_7WrfW#_xofGrP^kb0w692wwb}2F!}Xg;18yyZrRI1LO_CE+s>G06Vycubu}8lD
z(Gyh7!fbb3$(BGDXLGTRXfIYZn9!y+9iN*O?y=Fq-(zDDN8W2lr29y%(x-}Si@%^Q
zqN*oKhW&&=b^P=y=Ig+Zbjxb#inWwRN_7+B+GNa5nsaH&Y4J4cs6`J!hAPP26D3#-
z$q%t3RDzJW(L&xP0p!n=K<xNCH)HAbV=jj$mC5@|s-&hOKF2>Ur#6b_Mk(0laL{nP
zgVfFzF@h5>3dzkiH34UvMWB1FT_GZhyrZd6>A8lfnfBOb>&cV0C>r77&nsiAutgU}
z2X}PDjce8qoWVp_<&%C1FJ4mpCi_@sNH%?UZ$5nexSVE1eVDMO&CvPW#Ds5;{j;4v
zzeOxp2R~nnpbs0b&CA0@ua|tSN)aDFUVeKL1Z^_?)CKSE$W{HBc5|Nma^T64q{|5f
zsYKt-FAxM^-9&+SNfOsde;r0AQwo7>$_t3*F<;ygj*s`JWoi;lif3w#hiVf2X%g}7
zKmK+8cw25`V=F<^wmKa<X|3cGnI4U7KY8!$STz~%^uQ5aUgS5A<{ma_&T>hg4(I$^
z3^XW@Im5;-=X)o_V~waxF+>EB<8no65t0bL1j_`n!LPdjO-kQdOCw|SZ^(H4iml+&
z;ioR*^Y=|B_O|kg`T!$Qpa-}3J<O8Uf=z&DPG_$Z1v1ltra+`OPSgAJ>;q?e4x2ZD
ztQHGy!_`R}388T0{A+7L$cs;f#2)M!&qV%~tSzDyp5_F?q&<S$lcBpCBGd^Eiu0}d
z{u=?F@RgIO6S6m99b+t{T^P-TxB*tBC*-7+w8(R{Eikg3nFKxbKzwEf;}c2lTUTN(
zxRq52<kh-{TS|3~J<3MuXSVJPU&pekU+QEARVjp0Wpw$j#VOsw)AjODV&gXLE!Fjk
zRb!rM{8k+I5&@qo>RIB6S}F-+ZX28^c33ZwRDJSxB<;Q-W(n|8fWZm6v!n0wLaqfJ
zMm5i>!OCMNbv*YCU582Jg=|UJAIDR)o`t1GT)=}13pqqW1z=5mVYYwqlku8s%$P>V
z$hbLU9+=k^gx9G8-*aPNsDFOjXSiUA+C$k7H&1&QPRCES<D+Ve8E~c!eOm4$DLPyK
zWN+XyHKxZzTd9%-^YtWDA*NWDpK%5|AM&=(I_#v(*L67Vb%SBjP2)B0$Kz}fA~dkU
zuKccd17CPlmcHT1y#zELH8|RC`3(i7#vM_G!irLup<;&;+Cw0mL5@Bte8lc(-E~>a
zP82UESb%w=6@wUCQQI?@UZ~r?NcL@}R9MTJ`1|k{6?=*0i}rf9NjmAIga0aLJU-O(
z>{~2*=c-j|Wdp;uhDi6yPZp2gwK9(!@pwM4ZA0U1QXy-<EK^34&r!_vRmAxe9WEl<
zIC8H|Qg-Ucmw#9Guyc^9lw0~YOydvM-z-L1+JBBQ(U>vwcD}?ke0uy^$?o!PZc@Fx
zDO>lM4}6fXIyo&R5m|?WI&L&NDW>e`h#vOxuXv*#>h?N=;7)Z}$y_JK8R2QSKr?3m
zDv=Q!?yG(p`cD3m0Jr8C(Q4V977pT~t1`{tXbiL-o_ZG4(fvA{LW5I-AVz|pE?<0Z
zbJ&sxi9n<7FH>FOu#?<=0(aZoPDp3SpljzY(GoeECBh1SFFlf0$6R)OsWFBKcjMZp
z)~eFZ5u?_?08A=T5eM4)OMDcuRVBFVN%i61b|&5SdWHfigFRODuacy58SqfW%(zwv
z2$i^e63SSkQLy)Q%c#UncT#rg`TQ1TquHrU)fEwQS=rp?=_;|JLf3!iEWMZ>!rigv
zY_rjNufkx;r4)n0QdZ2zWpO^6RT+@zbIDeWxuL*Aw!JuHWa3~}-T!PKP^qQ8DVa&3
z{p@(uRkh=eLIhQu|JrohC0S`R2u3Wp+)sILPVeVAu63#%(HXUkn46LjOm3$sKRvN5
z&1ZK&7)+L}$<C}V_2_8(=*>e@6pf?~MzimFE~~^cA8y1K*nt4;&d^X<Oc$5yL;`}5
zsgJaM^57m8^fWupg%^bgZte*2rr7I8zCe}!p0nxxM(2(CR?Sr`>+v!H`if4PI<dB7
z-cu!X=O6Pi;xg3r{9Z&}?d4p@e`)t@tB@Rzu5>m(B?<kaBOmy0K^<q#(W>a%vG^a*
z2J!X69SAFHXmRN%%-E<Zb+Aj;t<-ucnkr(}@(Ss6qdzrBNxWhxv#<1_Vct`+B7t)X
zJ~>h8uX5<+JVo_W96#@wiuI;_2DFm`zy7GA(sY4S@Lpm0pjGYnJm99THUH;Z(&HKo
z4(|PSurEcVprVjP=zJ=3XoU{}6ec>=cYQkX=e+S|ZO8<KBYyVbC<gG&Q>Q6w6<=JK
z4rYldN87uL8gm@d`5z%gby6XC*3-DMQL)R!G+&-^H$(j%IM?t>rpYjGvylH-a^7ET
zeMks}J&QJ^D|)IH$o7hsIc;%>y*t&7lxW<6z#XKtk2sDJBTP};nj|O}tRTAVAtw0H
z%nm`O=u_ET)9z{CRDn~$*N%&y-s(yM1iK!#6|e5bnBTg$p8~lP!|(a7{@|s8acyJG
zUz&B1`Z3<N3bdN#qi<Gzw0p11{Qa1nzkbcE+z&-2KmUU6zwcb3KV4`r!8B?Cl-yFE
zh#h$_eC!YQ_kT7b<5_$!+**Wjn#LvHcG|N&35>Y%*)`~o6yyqRKZ#MOAhHj+$JhWY
z6!0~BhMNIQ^b}}qsi;#P_2&_-aagfd>G!Ylk(Jdgl*|~5x>zOT(@>7Ww=ljmn1yKj
z=q5Ge_(Gvq_K8jMD7G|wG1dC5CAB+i%TK5&d|w~2@@CGsm!r>N^q{<HqOBYs$XFK6
zc^XeaX<S|jS>FL%@g<EEWQnI9X8mm=-B_DWPepp1-9_$c#)_Kc94PXXz#=e(C*W*e
z->9By6ayof(s%Ql59g^%7XXk1(K)3SUx@r%jbxF4Deb}wZ1NhVj&Cc2z%S(LtDZQX
zzd_C~6Q&bdQ*1hIsS0qkFSnpC0>|piNjp<y%xN#@4v3TNC#Cdy4TxxF_;&C+->SHb
z=$9B9?$5BST9Dx#CdAox5qrA1sOdlh;dHK4!xqwfJj&gxkmW*oUn;8FW>~Dao#5qc
z?o3O&Y_xkb&b|soe-c(*j@rSy9V8C5QBWs@e7mrT>nuPiwM<zQUi0e=!ey{Jp0&E}
z^b`p4>_jmkPKmSeamsA8lL2Qt>74p;EF@28L;Hn6rh=%Ei(+3M`?Ax$iHzz@0e7a)
zTQU;B*x&-Qzk#8dIQD>{HTP|<Q#0{1yMS5LTu^m%C0cc^IkB9KtTAn8b|@A>Z4Ov&
z)D3n$?G1=64e9*#$jaJwtNhIU+3qocA)I@8_dBX+xv>70{Zd|AriMn&XH<$GG20Nz
zqYuCNVDEBR$v%aYI*;C0t#ftoCPnVuwYTkood$L#biUkwT0M4QfT9P%=P{mZhbs3b
zMyzv<pX}oL7BJ_?ETQi0`CM2_@A@&jBA+WQ1j5&jUoOG+iDpnSUH@7ctPkI99l}-H
zNqd;BH=i1I)%Ij!z{P@Aa`ZIPR#h+dv7EiAT|(JS`7NXvL$H5zd%O~C`~l{EzwUgZ
zaSe84fa;V-zp1<iD=Vq4Fy~Evyv<%;mfk%EYPZMI_i-cHAis>qrJ-(nusH$Ymj>xi
z)1ld|TgZa8dln;oZFyG?_tE8--!rUAdd!g6^|p52KywuED!8?1fC=@GymO9LLe?&s
znbuC^b8XpE9)2{WMSLiP5%$qhS90u~*{|Q!viK_ZLLT%m>@8TqzZp|z4AuFbmIxX|
z(MTXhy(h=l)()f_UdEWisJc?)C`8$&1p^Cv*jYr@P_3|6oAZQH#$Qqp#5QdO_t<7K
zxBf<91ZSm2waZF=vsIXXxi!j;`5HP^+qZ6gKE+YNuuQH*CCemYn7HSje5tiR4V)w^
zI76jzx8;vx5Py-toQR~R#E-7Ti<({np|+l3zDi179lC&X{0K56v}oZYl$yK?An-MD
ziE7BpC}3!%S<Ncv9eaW^w?Af>PQw;NHpw^o7UmtkL|&j%VG?xKBgpj0wP+-x+efSC
zu{p_2|B-TPw#rszj1B3~iK?q;<|iwFg$luG@<Pa?G;sQgt`Kz3%-(c(PQECrC~)tt
z3|t~MU*$~-FxK{mg*oq?EB!hM)VL*jJjtP7mHil5oT8p3wdVGz(`0lcQKA5zIaxBn
z=5<DD?PiJ1<&UmN9X3;wVk;ViT;}#-AOHQM%IfuX3`S=M|4Q;S>vsg#t8<6yMsa1E
z-U|AxxT`CdI&U3C7M_BduvV%;v)E;V;;XfR9pBmmk;B9{K9_7h$(*p93WYH~r-s7A
zf%)R^Ztm6C51_4K+$B-4?~CCY1l)}5eT0}hCvApS6l-SyO>h`j=5^Vid@9jP)9<l5
zC^+{5o6FtFgV=`nG;&36{sz_W?x_}}>p$-6bDSTQn6;7*dJ%)7(nq~?b<5(zZA{it
z(bccyO;FWE+BUmru|4Qh7Qi+pTNZ~Ry!W*6yjbUDH%3j5%x^&#X8hWTZ&oKR4*!ns
zSHVC5P1a?~cdW8}<E);pUuxSxBiHI{h7`Tyc0#0@OQ7KD>iC<!QEb3L`9#~zOYlds
zO@)Qi1G0KXoc@9N!xch)&VHbIa2(*Woxq3Y(eJb1>r<HU0RLAdSodVXlLTh;3(k<c
zQReCz(c>>~VWDUEC27XlDvehf(=!7?lD~FW+?6eX$S>T%@L%}L9Q^ZPi4`I1A>MAR
zg-cm=dq)~S2HT68ueuW@l!;uTj_^YUN&#rHOSg0dM6IPUe8K6eAOx2}n6RuqNDo0f
zMoo5qtOoT5dQm2AyH+*x+7Dw2c_m29I(nDBCm|?P>HjtoKEyx!ejAU|sn5059nOeX
zJoj?-OCZRZ`Gex)Nhw~NoSI;BJUNIf73B5Y21u?Cie>J`qECC{{n5;W-ddp31D%Wo
zjyqnrM2d<t`0catu=Wo%;qk(BGm4H`63#;Mz=d@|&mYvv<L<XE9sNK5th<d`Q)c?y
zVX-b`<fk*Rqn6%s;covZDRpS{@Q(O7gL5d-omab~WU<rt);}#Q!6r!dKRr5jTw%$c
zU{F!KRV^Ez5y*nvTYe!)Y3o&esHoT=Dmc~W7odk|EI!36d;BVT_z>$SkWxCipG6Q3
z+j7{cECSgqKCCW)i@e0)mK|@P6N{I-Uw}RW_4w&KqN8!NqQJlA6;{MQI11=WoTE-d
zg#GFKqur%x0e3<YuxQ*Eyqop9#J3f!Yp8ZTa>p7cZToYaRN9_5wb=>29<kYlNQ#qj
zqxJl?54}Z*z_>RvH2`}?{E6^R9BYfyIa2T#vH-mx=QCqFY<i?uur{Mc=i8%LQsJ7g
zFZ{)1MsAY1)U#2fhp=LTaqdQV$ggTu)OhDk*ili&XgJ5Od3NOwPBWRAkFK0idY<w8
z7v|_oJ{=9C)nCC9)#hQV*SgrX8SfF<k%Ts&@RAATDhx~hqWdqvXtJsN>yqUTkOL;f
zcKDt{Nic6y;iGRK4igp_bYKhc`vvl)EJAuFL7$w9=~)B_NQDRTR38s$6n}p@2031^
zNrZbWB8aTmFT^YHI$jj{E{7HMDf`wZaj`OXA<sGLOP7J1SlY`kfrCC2f5~T2HpZ2q
z%p@J}<twUt&*Y5rf&;H)Y#UJ7yDNCNx9vFp6x!@5qPniW7%r79?`=5Jore0-d=*^3
zmk^Up$6#e$hVy6pz@L)h`S$i&jJbC=G_R&3kc*~YfRNC}wz*?;#k(0a!n28b6vRaS
zn#R(|K&t@sl|lkI08(RZ{kXpIUE+HnF&+=&*lsjqEi;;FxA=apl)fXZ7;z@AR-F>C
zpaPspbQpHy9cAU}bhR%~yXzHOL_by*@|JnSz}cChA=7?>CBQF<Pp_xt9=IKlbBoG#
zg$viBaUnfAqCL-_K)-n|G17MHHt5eMSHz<{V_TwOZYkO=y`EUHk0R}HeF*ZbOTjZt
zkaCj#$qoJxZmajqWe=iI%N&So#ewoL`lJ6l1n=9>&z<9}mmS_3%*g&pq0Fxo>uG4D
zxWVCY(`B!WEfIg*^;j$AKgLyRjwxa&YBsiSSp*w0_DLVGG|r>wQUB|GBA`tqtNlKD
z<4w(YIu4g)n)&qy3LOe!gQLX>!P;7y?r2FDEo0q!sQLS)v|uHP9>2XitfWS07DK}m
zC~W3h!PsZQAUh_mralRzD@a530Wc7JxA)_K^6+pY@n1TSZ(G%er9%q{Hr4p#rS9p_
zsh|^O*pD2CRG9{<sot&eP3h@%qjdhV!wGo!7BrV8G!3q9E6+5_J58TmlE(<Q1lYSk
z=;XHuS53w<ihq#DrsL@e(f77E-5dh;fF5wpM)j&6&gT%is3#*9fmeeLW~1}+@zbd^
zjp7~EgO}_sR}wdI9QdOK_s@e}{)VP<!55W*Cma&<|6SPvz?I#@4>XllgJo)_Key4B
z*X>h|Ou@`g57chxa`fh+_bbDTg|>rfdxeD%YpepDp;yMo*wwV4{aRhz-vHBa<HHAE
zB_XJ62xM-Go1$Qtr4;92%?OeJxMWw@9Cx;WuAY;hr8pz7wc0ZkPnc4iGjVKO;vNyB
ziq3iMx5|FV$(A|KqKRv~kt{|t+az3$odocU`fJOsdChDo)b)}HA6fcNFqjkjy<H)p
zR9TSpo%YaBv)~=HJt0M>&5c+oq(bKx`C@J-tzEu?^0nh@#Jpz@c>lYJ0=r&S`k)Qo
zvePYXm_v75(`zk1N{jZy(w*hUEd>yN_7kT6q!Rhu=D34&2ZGKIAg#Fvh>`%RqER40
z{40Xc=Vk*PUI^hER6>uE9hXT!EV13)UtBaj{ql;p+gL=)vkIP!P&}tF-#T}q54mXQ
zI=Bxf8BNKmzm5ue7Om4*C}gbF$_GN?iH$HUPjM5xPwG*$y+5zoCW(K=1gt8zS1{jb
z*JkIVonZDDx>h313wZNv8ZRkyVR?Z4Qvp}d@W|GNg-;W6s-v&Mgw+%FaX<54o<}Df
z0AQvP@c`=l+aGT~Vz86$9%);M1m(97&MwjyWQvq6$}2@!l2q9*cqT<qU-pks2iW#|
zUEIc*QQbH!ilRde$wjVoEASF5-ZBVt>6}N?3F2v3HHymHH#Bb~`1`GKt;TTaBAcWs
zRUYF?sQ+%!C!uF_q&)9uF{;+;rP;n^i?MzPPB{({qQ`NelrXg8$74r}f0lvFZ-g(4
z;U<pJ2<#_;F~@p@#*Fz{z7_boxuzdZS_S{k1qD!F<iPyP7T))V{R;^p$?lBqbJCTT
zMdLb){1royFEIDd#W9~+o%c}BLKVDd@bg!)mG+R`X5A;Le10!ypXWb$;IH!n4KHyM
zm}zv=bF1BkW$U(8dZd*Oz|GN6SE8@{DS*mYN0jvduZ?XVuh~(;ptB<-$Rbm|^w(+~
zwa!_UW<DhaIg7`T0j!gZzZQ$DOH~eAWgxczX&2&<Aca>qug1uOLx>@x!0jz3Yo0xM
zWD#X;{*%Y~?x^Ovi<NjrdQw8PBGvy5cQ10Jpf5ElZ|oE3@&4-1NF;e7+U_waKR|7n
z*V+NLa-}(4syHKhnD=0RuD(5*HGDN_wz~@GB9;P+fxJ?qDEQEQmc=X=9MS!Td)E7E
zud&nt1Hcjs%y_oUagm`X7R9($h<FV{S@>*@<sqIQ=Q&vgQ<4XWMkCIaG`rNS-D7wE
zgm*9F`s0^(vfwz_KOi?_<bOJQq-|Y!)C7Zc6ijkl`QNhu%6Qd>R<jSrQ;4Bc{k%)G
zC3C-qto@R?gRN)6Ms_kc5H>_Jh97Xc5(1i)&3O7tENHupID<MyizwPz|B*QMZQ)4r
z3N0rR{p}F=+AF_vcEO>}WFQz<|F}k&#LnLQ_87J&$d4i{9%FEQ<MKlR7yX#SEG}n0
zLeqdaLWG{RRSsu;>uK{vv>>_ivrk7fqmJG%jq10@?*X}_Xe$kJC+z<A)QRjHv?Uw~
zCqGnYxYX%5thn~DY`^SR?xvx}W?OM^ljB-N6xJU}2~(zDcU&zDZV()JJ&K6a0Hm+)
zsu-rmnEl9nH8sR7G@LQ5%%A75L$sY3Km6K{W$7CDf_;Ns&ve#G%6b1%Z|>Y&6Xs1Y
z($0kh2gC3eLVk(m^F-gq;>89T;ZP^aP7==CPv?J|){7h<TKqiYeaCgC6vA${KRlT8
z-$^?a?o-EH1!E)nt;$Yf;uGXH?$dx9I7r<Z^|WNp;aXwl`;mMw^A`d`T*jd@A`c=2
zT_yU0Y$klRrc@)GtQjAu+4=k3ibU~o0(v#ST~wRDAj@h+Cw)A!j*y{D`Q>?82^Z1j
z3rZM9^`S%>4D4oW3OPjj#T^+a!VCsSwM-6go~!t~mFk8#MmY5|bm0kX_;5G7Ch@Gt
z0k{1vN1XpxJvrZ#x6w;;)If#)fy<+XWnw2SP7D4Hj_KIuz%<Sjv?DfV{r?i#YYC`J
znIH9;#GgrgbpdORun+sKLuWtX&q&>px@l_o(WHMcAC3wE#p*C&ZH1XqQNno9x7s?q
zZBz?9Yh)`0Kl`jFXl)y4+tu%vj$Tg+cf4hOVt(X+t6SG4`C6{ey=C~F!WKV>wOCON
zW4<x;x%AiMuSTLlj?)~d#eo2V?26m`yD#hqqr;Wu{a_^AA>inCL{dFzhmb5hwIbU~
z<Fi_0i4E3`MW(OblU*KmR_=OBl?FQ7Yt(PJ_=4uj9@~WT*OhHA%~_J;<{I<m9xf(j
ziNOqKu!U816%FNGRJsOr|6+b_BS2!Wy~&~i4sGp?ijf|VmwInYzg$6kh>%rU_RNK2
zaxJW61SX31hRX>UwqBv$DFn6&MExOcHc{8%D}MRXu9(c5pU`L{&)Oa{sb>la2}ZNq
z(h|M|T!(XncZS-jf{nMntvZ&jEaT)8UnWkTp;T%^QZnR&I!e>JdKLXQ9(~qw0W#(S
zap!H=#csWY0mTRxdfDb6FtQwi-)NG?VY#GC20L{0W5jEiXGP?%%*GaR7<_L26yA>C
zP+OtvphFMp{iUN5!h4+l@sj${HCyEQoIwhUusPZVCz*YN9vUt`6VV50XP(ZSl@@sD
z+iexabo7=#7gWBpD*Q-Cp)b)!BqhDL^`1}q)6z2RTJRc|%<iWBf1|TUq}w|ay&b`Q
zkk)lGiKAO1N||4M)%E%r@!aYr;$flVdYXZau{!6fQfa!YakWLXFhA|BSyp+C*!>g6
zpvhjdvsQ34Cvs`1{;DYNOrXt$QPf@{D)4jissQt*a*~^SE(1+Z=`UIPqUYQ6LRlmB
zT{M5}d3R#sj|{W>{LTfzareE}zCn8Yug`{a_l-pOEQV9(U1&xRYMn)e@Z$%m{~)B*
z7@*F$$_4|Vjt%jjl}Hd`uX?!4eC6}A1EpfNdFuLw!pz7O0bCZT?Hs+ae6uGS#P*Jk
zDn(YCkqm7PwcvpiWg(0`C(wR@HKmIvbENbm^@$L8QQlB~mx`rl(UzOlj;8hzjvP_C
zTZdmxIzxXA>54E&0&oW$KV#04H&5X235S=nXO;D(SVRh^1rlDChG0LiB^jWC!ToKI
zF+v=+KcYJ&q#I-YhNVNq&p#RN%fY2soHmry`*IQFr4)xo;h&R1L508)5#cZfboBq@
zmx1a3ee6oO$eRoN2vBU@R;GySYq86w57lhs?7vC7u|ZgK8VsVlHG9~(ye&v6RHH`8
zK)-{S3M(Ak>YA^6C%7$-;y+#S_<$}+wrI$jp%Kpp%RTPQR|-SM%DQ~{&I#wVApSVx
zUz&{403F79+*I}Q-D3NlsY#Z6kra8MQik;wcq4S>`M;x2e%8G9B2gVT`Z}!iL_uli
z&gc!W-9pE^@-ge9=4@A1B|OuM7&Jf0h`rum-op1`6*UbGafbRIRLIFg=3}UjmPDr4
zlB^SzL*}tZPqFKFlZN1brP2Hq^l2!h?G)=vOp|(D^>clD?P2wJ*}55e&J3O3|DWak
z_P)HQpMjV2{3#6>@S&7uIyTJ1dUCj97>JYkZM+WJ^tfyf=7bdpzx5^!SD%j(wTmh;
zWa34&)PbKx5|w2+(#_m-4c%JN>V^f{83UkOztMZ9@`?R@xlaefVkE(FH;wp#;Suy5
zf99E+3k$XoyJ4qb-Jh$vxbcX-u<5G}$irSQXR9|W6(T4V3DL=99Q@*DtH+S)qBWw@
ze60I5llL|QjOkj-V}BKnli=~gs|n7B^{$3xto|OTD_v)81%g+PhIGQgxmIHlGRG|j
z(qrm#=v26($*>{p-FB!tNcT0uF$g_R8S-=AUq+op`)9;+I^IR;gh7r7(}ZXrJ(dWK
zYyje%p!`gBW*cut5~L$tlGW^}4N)pYW6a({3%ix@*QFvmNMZ8$52O?L=m9%3;604=
z0aXb8*Y!p`@0tXkuUYD1ST_>7^qyn>$D=fS4n?W%=LllSFS~c<vTb)^`-bdVebq|=
zlIQqEV)v(y$LWzG(^}_(8aLf7CWH?fN(FX7&e;<H^MYi*6q^d^5Mz@}``Y(2!H$7|
zpb^PEgsMYRrW6CyPK=|0&ip6sCi56%c<Jv~uH6l}{`!<J^|RFC6!UUykGH)7=F#vM
zPHGDvd7KaX0HK9Ef7OG+F*VKx^VanAq9M5XBkVXPw$sgo`9{TfC6S<!W-j06pP!Dw
zkjs9)){j!esIY$78Mh`oj`JG!pL22mcEMN{d3@95kP^9{r}bi0WG_T_cn&x81I=;D
z8V~noF#wl=vwbB}anP-Nw3ERTBr3ZBF%3On*ObzRFv#NL613dBfC_fy5$-nnJs(BV
zKGZSa(H-I4SiJ>F-=r7y_c5LE1euhR=v+GV@1xn<EX~-Ov@sD^iPZ=X1Ck$rIU9sd
z0@O~Uq#&AT>>+te-3rx;R8X^WL9QPYVjv)mb=l6|Ot9y5Kfh}*6J~zed=v@;rx01$
z`8zAD&|+kcqjq~C7?pbNiY+G}3eK;1bdsG%M2}l{t;jZk93l9fY~%s@k6WEK!x9O}
zG&5>&TrQKa!Gu^ZJKL~$<HiNcxg6JXqU>iA@9wqLJE33jqpH;kc?|$1lKSl~$F|P~
z>-*4a0{j^XvyK1+Rjo9MP`sijv45Dbl02Bwu;rIchne;Dv#|Q+<3ZneBuHmN5iUh3
zm(8$0I%Yq^)Ov{=g=}See+@m%BHKL9gUSbao}pQhFE3shz&<3)V323w+5w5q5`x22
zM7MCrT`*9CQZ;dvgt_^T@0Zv#{gkt2HL7jd$_aSZZHjq|o<HO@MT2OE3KYr}NroV<
zx&D2#NM4ogXIfw+*w!IMMMmibkA=lQYA(o|-e$TZYXI;WvJ4?0CQf%?!%=--SM!3S
zhE-|pQ6;IVVVn1};0lI;?ssJ2?k-km6L)vL&U9^dGj*WGS~fo;z0cgjL{%o4DZ@R?
zj8Lo7Io*DkSPB^0Ns)hz*!IUqL@|RPpmEv4M6+HweinPDt$H=>TuLXo((H&j2kY;>
z(;9=djqvWyWvCPP#|^|BB8AoKRTn`x?lR*il7)z+N3M$WTssS^zjW%fA5q+#;9555
zkGc6PTMi3y5^9^<cwJSl^3C0dRvtIXE^tyIuT0~Bz9;Mk;9N)XENQj*h5e09Lsab$
zgf6*pMv;e0E7zA%g)?pv@iD!teFNBz`?HV`N73itCV{O-uX~@zV~-s7fMe0AiOJP|
ztU4Y&q*GXp%ng3^l0Rbf{*&wLCj*j{cqa9pEq7u{ugEfugx0ladjFqY3c_Pb$SP-P
zPT<K;DWl^-J8a#8)BR)*Cc+S$MO%i=5j1IGEG#+_cRx~LV~C+)UY&*OHOf)e^eFbx
z+q6-NM_AILPZ%FVh>afHXBIw^%EQvk-S(5=(sbX6p-yM<r8=jF75hqyKu&vAftVy2
z9s?9MtFY*4tZI9hZbz4bzRpcy1!)?OnHm*PD=MT;xUZq57LZ<~Kzr!D*rJrqMntlI
zm-ksoCva<!`p(yI03l}C)=7>J8J`fJ%SQ2f8E~KRY|1GU>`k4dh=DOwKhS{5@|~4l
zRzFufLf|#uw@<9B3W<mu-sd<_inBIn|1Qmlg%`;A0>^|&(C__O5l;!|`P!4%u!oc8
z`ETd5{|0HdBXC^<W>1=Dl3r+N|5jhQcs}**d`le7SlP^7)$!)sYaO-R3xyODp`-8W
z<3M@d5{GFGa?8xV4@Nav#1`c9a{{3JYKKsm+Z;yP4-Ll09vdqDIrmOm52{U!STHaj
zyHK+arIg{<%q){y>K#~r86RJJNL!xBDV!`L`XP#!yzIB4zL4U5@JG8AbKO$mLs6T{
zze4cs+5Zz|u<Xp;`l~@ZXUS>X!k!NG%H1(4=KQ>8zr8%7lU8n}XNT`LM-D?$dv{S-
zPL^U`y@KDn;rEwPbBnxy+Qeld-)HCt-d2P&SdEk=a(E=|T#T;2n#XLxbVA<$RW&R?
zRWsW90KD`@NxKUINt7%3?l0u<5G@S~iaH6u^r6)Sm0@L)^fFaJi?1z*n$Y;qN-dM0
z8u#r_7tfp)3@qy<;F}-A%)-(QRD}7W+3-0trxSD4nl6QSL=$AB^gn_dQOQQYNFZci
z$e}zvic#`ulo7Wgz*P|*NZ)>r3l<d^LrcT3MuMv*>zd09i4P4I$;ct7m`Gcdo@G$s
zV4eB!{cW9$E?}@r`2gx3oZ#9BCIeAeQL(hTJ;e02o;2si|14jAq^kY$4HAhOT<K{q
zR2w};`KIcm*r+XnG-U$mIaWs$bo_}0+`@yn>9XjQMVa*-hp>nSOM`Cg|C5>7!}=2j
zp3V6%RU6A-n0oc<X|>*8UpDwt7>DvpZo@+IOS2XR_FKo2=8vU;HJ;SR{cpkH@<qvc
zX9z>pK}FgaR(>m2Q`wNjWqc`g9R1X*JRWwvV`bM)B+Vh)YM%8Hoe>5lO+GstS9k3#
zXX_23o;=Os_0J0&$fME4j6YH;UKu!CFMTuI01dAv>C(g}sy{+e6>6=@Tbq~6HRpf&
zGTh#(srfJ*H!ee;wAF%l6LS(12UhDHHPnU6O`g0JKB}V{Tp!t`o}tfJVa}!S_On)&
z@p`geG$8X$+Gvz~XFl6eqh_=7_q+3J>g*FC2sLdow!xPTOGFoCL>=uC)D<w>?y-#b
z(<M3`DbZeo-MG1p87VoWys)Sw`X7)~7k~-#i#(1vGE9mus3T2^9c{cWKjvwD>-&4P
z%ySaHu5uu3CnT83WX?pmBWUIfs<Vd#zfR+VV;_I?0<nCjih6x1>4KWg40(O%=_=&-
zBUi!pzyR$$EkfeU7}S7gRphEBQoBTQj_QFvC_QFC=w&MX<Zgg<0NO-2C~r5lIWV|y
zEp`6z$V!0Z_v+BGOu!Ns2|lo3XU=^J=n3XvISJ?<^~9c)mOjW;Ar}xdF6HJ16c-@l
zV^>TVVXTwQKM4P=v^3#imjB-IU09X5d0~V^ND3_j=#`{?+sMu{vluhAkU7LVG<xIb
zTFzNnUXu}|V|e<+soo%#BP<ybKm`8%Ix5}wk)Sq~cZGgIQT>!RE$iaB#D6TEzeZmh
z+;=w`tkdSDXF1Cm(fSBg*dbzS*sHd~CfC2ikF-MGD6k^Nj?v9&B48Tx$FCWj-`E_}
zEeP5QiU+V)Uk3`W5k8uKi1Is?FVFH$>P$%-gIxpKZkDL+)q>5n{Q(_Fl7AkWLt%ON
zKK2l()RrXu2B`_@rr!yGEykm~^e%tQP1{3qRvg@6)e`=qr>AaYyYf(Gl|&PgQ_b_>
z$-Ah>LAF3QF+Mc8h7p};YXWUb>uQ%*!$?^x9Vx6@RS_Q5ev<OWMPqbqD3~?mP_JB&
zeKRrV&$zAXs;M)zkXpv`_I8?vCP+g{pO6DN^o0n47m(rtRL#|P05~S{d%rwNsed$>
zfM_o5r!l&Uc<M+3I#y9cFtwI>)8meNPq@#h+6x%I%zGn1_<Tp6ZU%=y7X0XqUAN3k
zTAgZTn7~K9m_+?rCCiHzoRt=b^FobSeaNlPO+>Nfumt;x#K)&L!<Ato9}Nru_y24B
zhHEgMopaoa^_&U_$jsM}tYXoaiNV<s<wGpG&xGpMqq|akl4y)|{Ix$Fu?7u3lipU~
zag>A=b)xQRY|c%lVgD#$Z>mldCv)D6X)xD3>w^uu!N)r(f0B0Gm;G`eQz~C*j7xz9
zptgN0ysZjglFvqIWe`6L8;JCeq(r{DTy@w81V~CQcJZRIi$~)VxV6~-eTTh>8}x1N
ztXa~j$9*>|jhO_w%MMR@CSQm>uhx~wUU|JFe-i<i;WZWDyL9(PK*JY~oph=V74dwe
z?eqJF6D<|IW1mVG3{kc~G;0CXyhP}z;^u5!apJR&Yso4hYC8KHq*4q`eRP+#_wa(w
z(=d*v<-gVxqOg!5R$DHUF*F*(Js$<cn*Jv~b5hYlBTe9c4VC7(I&z9pQD``)rmv3V
zurDWKvp3KRL{<oi4cM8}M<f$>^#(4*UlE$E>*mSNk0l4D^mSb~^ChOm1+=d9Cei=F
zoFPJ7qyT1O9SG>h>+ju6kG8KW=_Y?REQzf*V)`ng*@tEl21m5w=;4e;vlxXeiw7^e
z#CxzbL8nZN8!CU<vw8*CNp<|_{`@B~Q$Aie5G@wnXc;u{`Ow4?)0@R}77tQ2{5BQr
z!2iisZCMZzQ!a=bnZM0T)>3_Tlkvex$2WEsg5zD`5~RWjRyTA&tcbFOy>ceG57!@b
z!nRmL04ICZ78b$%uOZ6;1hv-J+xX*SukWq-uv5=R2&%v3645lBOTMk}EeH4MlHCR^
zA2009!`6&zkyr=Cp7#v)=mystW<L=?Q35(_7c2<MT(NXy$4?`NAWY_g=aSk*4jV~2
zW9_u$odEII#fphb?FMx|X|s{tAhWbiqqQtg`Kx_dc5&NyttvPaUSTM8phV%amp1XJ
zGC-`}+u2>e&uPVg*@DqN*ZwWl@LpZK`FT+!q5aFy-eK{72&4CwUNKKb5Lmo_QLdP2
z3sm5Tb87C5DEfwrWHe4**}a_1Gs$oFOMXg2rvUVO*;PzLDU!>E)&xdWjIw>jATF9q
zx@r?Meo_cYvV&7MevG5j;gaPx_ARtVkngu;gH6`0!MegJn?>hHeX}J|mg{`s61WfH
zx&UKUy{QQnJ+e~e@F<hIrI}!j>st#~g){-$DPx4<pH$2X_d_48p-zBqkd>_?6G-PZ
zn<$b<`CbDBpsk~kfB>zSw}{Yp;K9Fs-Y?5Q?+PF@RyVCyB9%WLBR!=j?TUvEjuo_L
zeqjJhKrPt%O0mSRMSH8FEXNfa({eNfXHoy1a0B_U#j%Lh%%0BpOe8i-<W<f~m@Wmh
zzj)-dsSxsER1``QJ8S=M5NX7bGBe`owMDlcyO~u(;`@(nz1=)@luAH(E_2e+vePb)
zt^o2YbTY<8jX8@$=P2u>by!8ubJ;JT!!_mBPhuL>3g6Pn|9gBAs1`IpV5JAg$YEO#
zhxTAz-&kRe{Om-IaYxT?!MPF~fNb3+(ybWaP7qMIQh{xfQr@4AGuk7p^Zo8-mVcrC
zTI6b9zAkNyJ{43u-}U(=dmekx?{IGQcP(8^*Ny~L$0kPZ`wWD4+6fxO%6C9fX9ttn
zQfmR#qM`C9KQFiYePGC$NN(Ct<pctpiJp}?n!iV9Okov0$wozlHvMRU&f8bTD|`6q
zDmb#&mXGd--`_E?ci;cdTa_17#e{-E=|D8q`){bn1R$lB{t2LChG&>&=cpavEj6b=
zuV2VccC92LA1$c0GtxQ1?2^+1S8CnT&tby9*o6Q|Rx%|77EAvJ2LGSO{rA+VF<@yg
z=`kMx$uXca3={f6ZA^sXQ@8e`N89aJY0*NGlGB>*rzeQ~7b-39y0vW9*b&b#p(qt(
zr93VO;b*m?@3t?Nd1VJqiv=zJ<A(p|?Ll(<-8q0v*oSn2-7c4>ksJuUf3&+juBbr5
zIDB^MSzg1Rc^xo5<x0W|70~`aUw(J&gaDAb*2khJ{U5iqK!CF!y`a=TuL8H>{6|8?
zjQ`)408c&4BjyDDkC5;STc!O(O`Q{Rt74H6Wyx5z06y0CphIt=-AqlTf_fS|7VZ0l
z20$E3E@al8><bI&i+L-9)gRI);nfWL$W8Oyo`u=az*&<p+|tsctfprdFa2;rjO}!r
zMO)HvoaVB&Zw4SB-%hp;g80>EEb!FdlC`^TP7Rq-`0JRde(=2=De8mL5O<{C=e+#4
zS>|HjVX!k&;Dx0CFC`W@Un#M9v-Rf_QVMRPU>dapS!$rJ?C08uazS^`K=De#^&TKL
zmL7HHS40j9)}BEDLww-C>BIv5dNJG=y+b1gZT6aPX~rU=Cnq-A?f9V&tqa||oMbW8
z004B&<5ARfp2Q?yNWiP(<Owku#KPig!6ko&!RoE6$(=mTP*M&k`%cH49^O@ayNk-R
zT-hX-v7-M3rU0pm3%Gju{N8}EIRtzqAV(<e_I0;5ni9}7x{z&mjvazgXYou`v*30O
zm7>wVc^814hM3^2M;r*zJG$pCu2nCleRc8g=&vl{?5{vSaBG9s;ituchF53KauHL_
z@$u=&(_@7zbEk)Kf2ZR=14oI@&CdS@B>X#FbHM46x9;#}zg_(XIII0;3~@Ia&sT2r
zE7iC}e`;q`CJzV%C*44xkAE^uM6}cQ>Ym#+%K?Z{fa8?Q^}e!mu6HNfoHefYvR~LK
zURf`#O5BJ>ndm?LF0E~BtcSnR_(X+_h=6qN=(KCLe@xN%bofR^C9l=yX<sir&Ev<?
z)NlEZPVv5inx6oNFkJUfRKW$hp^;ox5(aqn?vN7yto`QYz{eE-oM{VM#?iQ4rXa>T
zF1o|GpTab_eL0|2FJphZ8;fzFjJk21xJlN}i{DSG`FG%}c%cT%<`3;~ji)8TJWx*0
zRyM;S`qvg_mfMcodnG%UGSyAE3C~|rp4WpG;>=HpJ}>l36g{zq6?KiA;SoIi4VRok
z8ky$#=dJgXg8@KTAdEBG(cfGoLfZ!RO(Q8Rk`#9W{MtjDMKd+Es5eIX2s(P!j3}Ho
zVpSMRE**2nb8kZ>#&0G&X?n4=|85FHBe*!N%Fq=w=WsU8?lm3FJzy|<LScj;{WO$O
z+M0nk=Y02AzZ-}!7{>7?4C(xKGv@y~>DmRzh;Fa>WUr2XzaL4JGaKsh(%gpl_J-mg
z<*6IvjRYswsN2N;R@Ys#s}k6Hnnu*d;a7*z$!t48f)-@A0PT5*(n{S@Ob30*5z^@c
z7xq5>X!;RJNfpnK5~Fc<h0`u<(Kt?glkDsuf^|k}OK=Pd9|olJuCOUUg8;@Ikkqb@
z^<7Cfa?(r4F550AX)Uj&u0Gzn%&j=XTwh%{C>nxNrBKIj4^y4>Ha;~*0)m~8{YVrm
zS7T?#Q0+uL&4LOQ$ft!sD7+|ombv*^anh7x6IB`@?u@E84{(MdpS!s_Hq?&Nss9GZ
z@khMOKh)Kp+XzlzZm*oi7!~IX27kA-VTY)ftHAuXE<zeWi)xx(6-W}pFp>@h-jhUu
zvht4NMCi@C%h%Q0=gf{Q>_1^JyoY0N?`jq#^gwD!+689}--T@f2F3)0cSXxL_S<)b
z0Tid~>>(BB;}!i1%j@2OMX%c`;n;E4L2gN2TJ#%P)D2{f{Q)-<C#P)pV-E{ex%x=L
zw^^GfaZ2yovkyf!6NiHx$*-6|3`bwIGs~7|NdGo)b+ka&I<gS9jc4{9<~pF`jbkR5
zAIx~`anjZ8KrpE&&9*~vM4gD<+*`<dk~u9%Sj`t>q||P^w4<){M>)UFXpRiwXO{k`
z738fR)qES1dEcDUj0{z+VIU?4RtSS7XSx{bCofnmpaMZj%|(uB#>$<1edlyxGk8;Z
zV3kOIeJ#Ic#fU&aMfbC}j|CJK)SCZob$qrwpy57@sciQ9unP*%V?J%Z{yz$rz5lIn
z>DTLRuPiQj?tZ8?x+<2Cxc5GKL2xo<2kP<gMCosWZ<IX7Bd^QqDDDPchMH@o1EFDG
zABY>wOv>(eRp;2=q$4t!*}Ir{dwNHPgvUD1k^uUUA1FTUW_e(Mk(~>F4`T)Mwt-22
zncfNxt<X1kWjRzSZlsjm)t~V1koUzE26humdJ8e%!rIBu60D?nXp1M<LovBxwVhgd
zkpN|Fjnh(hTMy7SaSA!v(A|}bgxk9m(9Uu4n+^NnbE<3g_Pm+ryDN);*lVp;AARTv
zKz%fo>POI3s+8~Ud(R3iu>UE>mwcsu1&EV%bs}kR?^`Hhg@WCSV@DS&Rh^29P^@cq
zCa)<%z7V>IE$=x)q?H4c7{OlPoJ{Es{|G=r3NP6)qq*y*f86O&7v{@sW=Ua69MWv-
zEU?2TEHRv~7&6MRM>Os2#!QnTxCq}94bEH`=L)YHXvC~`r-Vo%iElp3cG%src~%es
z*ABVbT3&F4)CC0*JA?XFtA}c7aM*<mKiZvgS9phe*U7xD<m?YU>XB(9TG^z2kdk^&
zLMGbb$}~Sc)p~muuC_o1UZtt2p$9Ua>Keo@e^|OxR33t_FS2#L=&L;D!Jq$MO?`D#
zRNwbDF~HENbR(V8-OYf~DF_INv~&%PG>CMEN(e)zAYIZS-QC?VyjMTp-&*gib^n@~
zyHD(M_TJCg`#HV5i&vk`2K!*T7UZ;W&T?a;j+TFAC8=m~*-9tak!SAk%fn&|6C!sy
zI!%4*h<ayqxO4&P9V+|d@@m0{x=(%tJ(s6vD|fN``@8Vj>h(2P4iP?!U9jktyN44J
z-Al5;I$vw{+w*`)V`sI}9O@jB=Vq1?M_1~CLp$@10Nfm(Df3mI#D!A%z&Z{S+xN~C
z9hvgL&IsMegV?7x;nW|o$v!vddM)KDQ+KNV=X(kb&NA<dEl;ZXjBnT2j&Tne9y*pF
z;@ob7yvkBd0lZTtXAS14e-0k7K><hA6ARX114gJwWwMQiJq<QQ&p)*ly%Mhs>r~~K
zdi?XAe|+o}4!S7I8cb)^{iQ!*hq}^3UQf<jGW5r1l2fK~5B$jeRwV5t`z<_+xP0iB
zfvViN{e5Ni;VJ~sqC+%YJ^g5nD>H(hKsj~wvyXWXZerYF(#WaU1^q8m7!{aZx4IV^
zSN-+l=`|i!YaP{fD{%~|$ORzV|2&loZx9aCv#6RKMl5tJiIYu!LdWc}k&%8xJCm5g
zupX<!{_}SO7TYSe&ih5m4xe(O9<O0)R4;&fmO4|5L|r+e0egG9H$Fnn%;^NAs@1(=
zA>;&5lD@7AU%SHaYkI-%P|~e9s*UZd`=@Vlf(j4lzv<r+FON(prcVFiA@Bi8+TUiq
zrw^8`hw}MExA^@gmYZ}3koiAOo4^)(azwb6|D@Sx(ohqAzcY*vO|5k^Rp-33EBxor
zA<#PA{wv}2y4Aq1b$WqkbGdn`f)#XE;|t37JD9C<ru(%6&>hU#k6!q5K7_1<W6r0P
zA$6#B#*(LEpNFam-CQW4+=J>S<ZUSpuG^;&?Wk;4Nxw~mULGV2$sd@hQ^s2w3b1xX
z_@T*}2-z^2S0VQ}VA)`NOVT^laU|R6p%c4g9JE<_Sk1#&Y;cZsxryN~gYg=P3x2u{
z#+6bdIblE?%#7QNg5)(S%y%F>;<fUYc6-nnhAoQq#kACFT-+yq2wNoK%3j}FzjHnh
z-T7Z!kShy*sG=|3f!|iL4nwI0g2-HtIVkzhhM-IW*&?QIycvoMA6C-V&cvB8N`)YN
z7FmneXW7V}*nMKR^Ko%18v|vF-aPi(2@eEfuvfO8*fsO8BXV{=zoEX;;-IRu<~ZVH
zY7Le$`Lq4Ih}BjYyRsTWKIA*;4uDlti}o!)<`AOTV}M9LbUyvbgxvXQxc7H2?A_5w
zhCY_!;=}>xG|_@NE$it;tu}OnF@)D6i@bbfpETfXX;tNwZ#QwRM;_gnVSE5k6$(cV
zG`na<t3gYMCi=sF*-)7O=5pA>I?;nlRulF{+`S^_KHtDk7M6ua)m}TsH8^yhM{d!%
zbbIx~!Pl%L^YH}Y?CeQd^YpHM=!p6OnnU@kFNyewSS<>RARBgf=v#M^3GmVU3#df?
zW)^(TqJ(-EZ6(PC0NHgBt)bV4m<fIfe9fG5q2dB_8N#!>%co=46a;qmU(a(%8*Ka}
zL~TQ8K9rW9%#D}H)45<FJ1$g7#Jvk=^L&Z(y8ySXOM^F6A(yFAusL=SfUOT3qMph+
zN7)ThU){&5%Hz#g?&;0`P&13gDo1Od&iT9u|0pr<9sWkyT*zjVl>VvVs*w8xRWbwy
zIe&-K$12n0R?%$ZZ)~E?PV^b-Q>}gAo5r^~FqJ3%pZ^fB3pP86LIF&J{?nft9vd9C
z9}#4>^lQGzPDWMS$$8J;jCY@%wJ=3SPCIIFsSOlqqyJt%4Kp$L+Hn21CV?E6^Xo?R
z0ND{)O89-3rzE_T?B=J|h?nntV8=@xWIcs~_kYUglV4-`<=g<&8wCvytEWp;_6gA1
z64c8B#rh-V{!z58J^)HM@?FiDFp|vN<@=jJSr^(x4^$kbM`<ad`ryP}zP}YgnJ!Ht
zyR;uU6!Bbf<vGs0T1m?%TfoWUD1R`!osm27>LUzYxS5-?CZ5ve(!aWvrV;VtzoAq-
zV{<n0w{{yMtjCECzY|%!>z?kF^ZUsujMjU78#bAV_Ph&em3cz=yv5r$_4V0t34XiS
zZAzwrfje;0TUEw0#{a+YdE&p__2PS|iXj1#w?OY_1$m2IUC=-dRa*^LPtDxum#e<V
zgo8%qRuPEcYHs#T^(P%^DQpXt|7s1^t0I0Cc)1<eqn8OW+|)^(V889)L649;nj6M?
zRvIQnZtN1=M%6*I_w8x1ir$2U4j!^uReG~*(PS45UeJ9RhDZ=af)}c~v(Ak}$3)J^
zM~Ty1SovvMm)da|z2z;rtNP!l6R?K@NJ?uEAl+MX`N0`3_SvdOg?^W>;aC0fXL5^m
zIQ(Ld<%4O~ONP8(9;$L|7D;pcxF;@a5Iv2;<YbHp$+uI{KMlvG1(@ztP2)mBLA^Ql
zO2S+Wa8SxjkBNa-&_{zD8a;okrzZaZxGE{poy}vTHti`>Q7?QZL+c8NV+V0=PP;_I
z)q$=7w%^x{m2j~C=F@Mbz9lb{Cn@&enFI0H`fW*yrZExDt=?L}s>FW_*NJRh;6KG>
ziNr!mHU2wv0tdzddFF|h*1b7Yz$IXKc-1s|wnUS#DVhL@YY7qU;a2f(HbkY^$Dx*Y
zP2iuOiHG_g_T-Yrc7CGp|J?ji-d)FsAN9riY^378RB8ft-2A@DzW<v{=kKO-iEQ@+
z$O*BHx-Dk#NNi+;*d&}+%_es6t09dcRK=G3V>$cb|5o{+EJ7_ww(qsmUT%i}61+<k
zEzWKsD=EP=|C+~ohOEIZ9zu#wRCW7Enz*F~-mbmI`d#ZGai36z#>lk<T=<0B()tvw
zecPaf+pUU=69urHF=*Vk$0^S$lvhUkepRxle9_^oy6Xfb&Q>ec5)>$3a*~+V7fr=|
z?Nwc2Z1gT<nkL=x_Q(Ro9FdtFq4yXj&O}E<Ysf>rv%U{8KVLMmzQ*J!8h)-81Kv8@
z<A=m7+ck|^X`B83JqWP0#(V?7?>-Ji7fG@KgZ?mzE8Qtx)K($HR-l$&XYi`t;wVa*
zLqd?IUPNRT(>}Ga1f`v%RH_=r0g<Cftkg#S*ojTJch(&M?ZjVU<3_DHHTR{Qq2VS}
zIJb`GwzIXx4PH!RHEH{TD8a$lCy47}t>MVE8lmp$+$yy);Y5iCttDIk$n9pV9s3^?
z)h2{gThg=TDER%^TG&@403k^XL-C3x+t}xqXqOC#D*9a;AaShANu8)~Y*4?P8b+a~
zYis&9%Or+rJxt-gA)0h!drWe0k^g1a)QgvWL)dB`$0%kk5w#7A%R9Z4F2lX>?mLUP
z(JypP(xa6ob^fUAPV5_Tmi++mRvn!{vV=S1b;Wy)-P*h8q&aVzdL()}*$|5?FGu|V
zHc7@wfkCd<Q>eGBt_+)#`0Yv;U!Ck{128-KJA+-*g8*OA!r$lP%HH^Y1$8pH7XKWB
z*-EBxTQ|YKr=x;v&u5kwjz0$Ie}-q}B961S<Ogo*2%dFm`)EmhoEAaknSOIyS1zb3
zcfC1)*(kIw`L1Ey{y5lV^B|(~&A}DOW2>y;K@wAoTk7yvJwVK%E92s9+(0;=IAuN?
z>JLUXQ!~C>)6a+`Fy{F`RKt}H3FRy65U$Zgq;s&97OK3L=r5<^(H$T=z$?dvgkpVJ
zu=iTr$-6fq)-~q!hm@t{QR|+al~-V*@j0}Rw3uYwKgx>vw%;jDH57$!j@R$GIAMat
zSr6k)P3@2K?;plD7w9T)t11n1Av0!<)-d{~pvMczl8Of|sI`^2tJV+B6SQapo)2oD
zh!v1~KIp|^p7wydJfn9rB*&v|rRu)qKK-BRBnRS-Lwc2}YQN|rxo!GfYhsaK_O@dx
zcv2iSk>2mmVDwsj#V==(is*+tytDAzW9^tgpx07FKsAS9TtD8=4JQY2AF~i9)2^aD
z&=+o$;J=Qh-uFmksMAKy=!W1|xyACj7m~~(|HJvX(Ge&2n)m0Jm*iYG<CG2T-w(bm
zAQ1voZ$4JsV<aAf^Nf9~_wsTa6K#;22cm*?adXt&Um*P(a^{D{w?Y=kT?$cw6%i?P
zOx2xsm&Q0+*~emNW6IBkmSgy|$Sw%j+Gf-+{*vOW<#BjR>~;x(9Hn5zx3}cQf;P&b
z@DD0SkC^5+ZPb4uvW^7k`L`X2|CpW6eER}MIo1DdHJsGIsF-6ZyGNep^8QwkI(s)!
z6|PoL?Fx#dC8(%n&;Y|v@AF^bpQae(y<N^Jw}Q%^#7$~q|3+I5q8MXhc$!NuU?KTZ
zl0L(QcY_S^=gCVu?t~J(e6Z)^O7?K>Y88_<gxbG_O#h4hcECuuizLLYo<{*T<wyPJ
z&vY`b-|h4DHHcZ<PyZ50a=y+)e4Y7?B6Ujy4S)lA^2;kl!fr|MJ*TSI6~Pgbqjg${
zZ<FfxZKV6tE?&O#cHn^d>HQQJ>!^qs7UL=}a(p!<XiF5!F$cxDGL!uvb7s$@Dv-xu
zVJ0y2VY61JeaZlah#n~6S#9$pnCyj*#&e<|;kwv{ERa<z&ea+3(9n=w$EeiOhR6Dm
z9md7j^FG(VynEn4oPW&HWc}(qRIXODV10($?@5&ktJ~H_t^o@Dws_p9ovreN)@rFi
zw~aebSamX>)zJMj{aQH&i_omyk-TD(++8k3xR=OmmBDLHEI(40Z@n>Q?lELRUqq-8
zJKa#GvxbjD4H-a9IDxuVpLr7d(#y#c+<@CpYl)suBR=Gg!E%Z>Ol2*q>vHA39uRN!
zWc1%Ph|Z?T!XZ@n2fJH#%WF5!6cES!qa5KQ!xo!Ud%7PIN;}jGAA4|{5^>EQ9y0I#
z#`49CS|6hCPuun%I~M^IQ$YsG1-lx+0gyaI&7^6OK@Lq;?0w&A7LF+Tr}!TsG}Qih
z3k7Ms8L0JPL#6%@Am2uDdy5tUH_HY>D-4{kYR|m{JQOdl>rhMU4-Y_zWly2twtm$C
z5xN^@lX7iGCG$qIh}tUi?hF~e5-8F1tv7N$kt#k^-%6%IMqk^G`bCrZ9eTQP4qBo)
z=i5osy#8Y=8hXqRF^a5Pdt*z!AcjBB#+oerqqKwZcH9A0k{<=K*LZS^62Ce3oR0hH
z5)3ad3F&2ClaG8kiod|XbR8?Tk^MUOlkAP^$QOYyd7mhyYFvM@6h`@nw?@2eu&fG*
z0kI#^5E7w9IrT}__DS2%9XtTHfR1DqnXxmuL0GwXhNm3?DhP@E3hgwXZG~{mbKbKL
zh6zw0yDudWl}7RpfJKK5X8jPn6?Z8w6l$)}<uVS%9<S^NEB#;*+hP=yK|x3S4G>gN
zsETbT3z}n+;r9>!5ex<fNX`3WY*#v+;m2|Yf#iXbDX_FN<Cz8+jnab-NdlwtrF;_p
zayaMJ%eu2Ygx4cy>NlsMTU|MrL0*Gs6U(AuJ5bzm3C=rv*1a5cPF%zYH~E?)<2U=-
z8F)L-{|!yBF|22SW6{Wi$wtCZ`%Q1g7t|Y}#)q4`$yL0zf<=#lCvhHDU7K=DIW0)-
zfTyML$~&XtSf57W6T{$7mS019sJDC?X6E77*?Fg)gD)B(OkkRFo_2V~@`yF2`fSTN
z{8tMvV(gmGwI|H|tI6S>eimCud^}!wjZ&Cd2d$ks4mHS$nJLn=aVaV>r~@6Rxa&&Q
z?z^Uc_^}Y9zjC)%EM>1Eh4$)O@Rg4l&U^q3kU__QrxYN>z_DYT#a31WGxF4(sHT7a
zby1$T`l(nG;xVG8aSc;khF;HS!_U6WR+l|+nVM#E)6bJV_SK)EeOHg<q7W(b*;V{#
z-IL~sdLEx$XX(&%*_t1%mX|qPaZu2%yBG4)^GVW&%WJ;LCYb|ZvX4j%S<mn=IiVsP
zsGt@{B+clU%^aKl#3m($4{F%f-xAi7qfeRx+k8LnlM?ky3;7rk4Oz7t_N*d3MLzQ6
zQ{Sdt@QICJT$1LcvhNVDRnC17k>oL(@Dnhv#*%P6*q<xe<=N=Mb?KXAIPxJ=CT!uP
z0B1>3I=*mm)DfOr+$i`Md7DQQ&&hgbSZtCoM=38r7K4O{kGRXLip+N-j;yK;(PuLC
zZ9d>bp<&-wLH5v3jBEL2)ju*lJYc0R$ddU?J}tt?w9#i6S(Rz~Q(VjSYn@u5<)zK7
zZ+6Q@UlP=<Te>UyTJ0)b-5uV=B;Ir1P?K-XG0mF)lqvWw(Fbj^j<kQuD1FY`TiD>=
zH2g-XCmm(j3`UK4tx`ueG%vVVy<_ydN^90mQFr+2nrm1Eev-5qWfw746)U~!-S}uf
z@mbUT@n|Vu)M|FkfO@v)%?E$a%}I2}r};IMZ_F*z5s>M_Qhb;Xb9o#pykYIA0P|6~
z?#~q!u^Zg$o<=zOfElc0A33=dozI$yffPwg;}`pNq|uzLWF<^W^tL_F{Y<PwoT-*Y
zGlMtV_a}8lPc{Cy&xDd2v0MIfU$wdH8L6JP(MD%{+bWxhG3+?ij!};)M`d8IS=rSR
z)DMYf=%KaBmS|;;SP-3((QWkzodn^n-k@SXR9>o)-?~dvOecHn8bTd%VEhX#eIO|*
zTfNjp^jr~R45a$Z0BtrcLiS{%C2-R6NlRQQ#jO?r>-3T&$qoIiZRFC;%3zx0L*3%i
z#=)+G&F)bw-wvH7VLrqaBAkQE0G%~3sof2p(CcEhS&4?%#l9iNHs*1H>sc{;_rKWp
z(VP_~E*CM{lKkoSl=l)XM$TxZg<Wz!-E|}DKE<@e{-c6|!p?*iyH)U;?ezdlVj`}Q
z{w&kf^t(~59IE0U?^i<yjn-!fo^E?itEt6)@kI>VQ8WndcRE6K`HrVGJnzZ{-Q2!1
zq~_DV!1q-2`JNf!d}`$1_@LgTp3_`BHI<c2WdALZw2`{d;3UC%S<KnLsA={t@+%Xi
zo5yhWO3cjQ@S@kw-m^N!^;gq*3s5A@45X}!9LiyBPDC5)6$|9Ui+5n)At-;L@<;tB
zI9U_5?~pNRtxiA2y8~VkC{=+@0rN<Je2p=#JvjU^&!j-;Q<CuU!JfrqoVjhGQ2XVC
z6<vRFo8QjUBg!KV^X$n045Wlt?IIv=>k;HBs*Qp~3#fzDkb<ms<mJ|ns`!Oh1xXT@
zrivpezAkx@sQPPG`@1{IM2^wf+0Sy?GId;HB}F=a*slK$AMVS`i)9HnZhYmQ`(vr`
z-N;u=ne4+$Z<8(}G8=kc4o2OB8&Q4tmShElR#pkYiRXlh)=OU27?E)(pO>H=V|Obf
zS5ysS3x|F$(x-ao60^-?@kQaO=dr^z=RRefs&4k`&hs<ulDgj~Pd$puTQ2t{=Ng~(
zF0bAeF#Wo(FClaGV}JZp_c4=R*PFuY3CwNOVHbI0S3HDIElUQPl##llkQMC}a2Zw4
zCa+1{#xEEC`r$iW7SyPo;OcGcJ$G748=4h(8jY3Y(LIDFAf%uZNUw;8yn|I^WC(G5
ziMWQ>xfOcfh@c&h3{Wq7Wj(m21W$_ibbrS#eBUMI(pnjAH}hJfwegnhb}_+foHGKn
zaJ>l%9^;N*vRUp{A0Oit8af``RCoFIcIH@YoHd>r1(DQe{PF7|sXT|!Gf+=TK&I|<
z^~zJNPrdaKC5`t5T*=uicS~2|lcai!6Z0ccA%(<)tCwT&-zmCJH;Ee18_nV$>v1M$
zGcX)IyG6Z^dBwHgOJO7H{3osgc^)khil(d_&_|dxt4%KM5if4@l5G85Sou}TvbdM+
zkVSKBOJiA8*kT4Hp}^gr(h)2{!<2geRk737<Z?HqbL464g@VdXMY~iBm)UE{rC;|-
zhtG-$<EOewlJo=xB~H4I9_J;<jeTJKv%eQJTHp(td*_k+m{9go&y7ap@KTtNAM`Z;
zQiQBogrxe#z6V9_<;P(~chlXv!}D|ny<?ihf%HG$pqch<-lUqZEc$-W5bSIK{yD)W
zet<iwqgrm3n5qra2tCC|m1*^{-?al|*=M}j$TiOLGNnt*jx@03MZBt+V5w2`im9w`
zFG!V>`9JGJ@C%!YQ!-s#6Jy`No0Eh!6_Yh8<Ci3Gg}uu%DyH3$7cuM=H0x-4jfR?V
z_xq^v4my9+&qPo!C(HbqO>CJO$Ct1fncz5kPJ@WVN=q{}5QnRi13i6|wbmK;l^5U*
z3q#705N;Q<*Ze6gx@cbcA|r;6MDcj@Zn!-CuCCnT8TRm&fZj@&>7-9x?2>&WI?rt4
zT7FsO>ja$?BhlDwhZA(Vjz2xkPah2W#kB))z6cx6l*00DWs(P#Vj@`6?W+y*vF`}2
z$>#@#1#7P_y&lsnnjEjX^w%?gZZt5IvXsCTzDEszvCE597;Y5S>^{e|tDHAAf%C8a
z++G%WeYKaPVfy@RCN8T@gW8bWqC1F1E0ioZ5efaERtjN`^x<`g``yb>;2HCd7_a3$
zxqc?g7vw4)=I6R72|IVpj^TI*+BW^<RA8tQ(EVNvf*ersYqd^&4{O0)pn(wc&$0x`
zYRVA8f^WJHuWiHD$_xp3p@u1#_@xhTsw@U*QdX)Y=_>P!G_20MDX%EG&ZFr*PG`Z!
z8d_iSmXqvqSE)Nj;7V{od|t%oe#TI>Gm9|N;^1<ANOV4!Om2OxR)F{sb0>JQiGQLx
z1YSiN;P`a-z)u_JX9g;)1BsB5Xc(8VBaIHP#G%zpq_6-_#2?i!<yn!whaM|=J4`;^
zxV?i6gvz{ZfAm-!SjTC&S&_8fze+eBq;iE<x}nU=!4Tp~US^8XAzCS>imwVpw5-O`
zA|t6V(s;S^YFU(})p_<Kmv7+Y+S70gAfadxa(Hm13Mn^uk0dmGXwObynWS{^v64;Y
zSiR$@<X_;il#;RsF^urmXxSrwx{6IgsQLI~L!nh2d#+gDku2-dBOcB=p>~aq<pzTM
z$fVGKziLObCh;P1LIpF&wF#bEM5HMY*2(Sm_1s3dLML!FrcLQ!6n2_#g83)u{x%W6
zj_Ytxnl?@xToeJ=MuYgssVEm-|LRTsr1ZPMx}X3_P;0a89H?3uCa9>mOWnl9G!G<^
zO7waQv_MPdazvbl`#`DKZ|mfQ2t`=p+upE&a<dFcl`lG}kw(>_%qae`WHnkhqePyL
z!N$Rh<@<U2JYPm_r!jS)^yI^mfhbpdj3;Z0#SBadnE8UEdDj{u$}h0FgE(A4sg$b%
zlq{9o`v_UVLD7cbzW1AJ25C<4;&%vR!>{o@4{|WiH3=bhlq3%GK806v5g%hHjcH$6
zFt*u&J$PI{cLqk^p-YKQNrvqNJ^`(QS7U6b@!NcNF}?q~@&0FvM;CHDp(BF_BpRQX
z78@y@)~URmA5TZ0mr~PAG4;{RUGAsyVe}2jI881p(zvw{e>*|5xpX-M+g_1en&uUf
z8+O*Ar042NvDAM1r64-@e7oJJ)bPokPjSH8Y+um$mFH#IQYzQ@umi#^@&qpUZO7E*
zMV~M*T)%e7sz>p_h~;;PQs{vn(^VXsGZp9aK9mdl^slmIZG?`H_hn9V5qxK>*om+;
z=ccm1tfZc7#hOVwwZS?<N0O$a`JRN!`TJU77i--96*f3pG|<ADoNS-GNhICSr-}80
zVTR<4fuH~B9A%E6ut`BAf!Gn{YbRu1J2Y3#_JYuFC^Eo$1&bS(G6MQO8kcNXqg4re
z#E_kY(T}{w-OLH~ee1$!kd7~VW!&;k`X<E40vAb|zQWzeWOPqP9*(b{j<1^fi03%i
z`srLLIKU8HsrKdX=P4B~Zyn}h$4k6xuh0)s5m^F{AJ!&bz9&6vr>`hs7L1w2agG^P
z=D{wkRX~_4uEm#!Zh)mkH;X_pHOO4?P8!rsiB&y;plOu5-sv{+<M=1#W0P<pPx|n5
zDFhIoa=>g9)Aos@^vmXsgD6JPX!TG^MBy^ydhfbLyU59KN-S3rkd)aZD78$#*|yHa
zm)2EN4f#C>L4dohv-TJhUV|HG@>^D<2mBfF{#{YV@%9?6TD{!om{68Ax<Y9L;J->p
zgKxN-+wG~&_^P>#Nng_BY9hH9zK`KahiZy>G^sR)SOp`17i5qIb-6Rz7YRiASEUqu
zfEk`6*SY|M99|&SzW=_K1+_alJ9o?2g~c^@Bi}l`A!y`cQ#TIb0|y|0Z}80AgJuCJ
z>i|9GBFq44&a70L4OnN+C)?pKXwOHK^!&C*5%CZL<MGV|f@U#Jv2zp6$&@~%A=GI7
zE{JLkl-dCoy%yD3eXx-IQ%X<1gO)&bdLl0Bh*Zgx-X*UDv@aka1)&;uQ2mqOzeSz`
zXrv)6pfYhkZU=tMTdRGVR-qol1w^dio7Dx*g8w%uoq-57yc7zgejwnBSEcSHJ-32v
z8XmC<a6cI_OGa7H?NAme!))PA!;3X5KyhiDFu~l-Z3oEJgbNCXeF5UD7zv1o_IU9V
z1I)4^aN^|_3kPqP=-1>ea$IL$SXU7cP{)<!q_u&$43Z9*1zC}&#;oiGtGfurk4Yff
ze81`?5eEgD;lHYOS808QhN*0`mj~NzQJ@Sk>aLw1Oh7h0DWJnckQ+pKj|a9!QXpFi
z7KW$#tq9mkq8@<tK4F1vqJV+yG0M+3y@7vj98)M3G&b^6bOZ!G(3^d$`zN!3EjN(@
z$Fd_F=&WxKnK(*dCBds^_mY9zUex|gy5$0#wvTIwY-+KL$Lzm5u%vj13Z-e(&?`ux
zP{VZjR1-j)AnF0yKXHkGI3P|U@PC4_JvT?q73igCK|+M0bCaKl)S?VBI!#M42~+fi
zPy-J3O^mQN780CbG|0WgrO8-6lqqUQiG`Bc0so_-HJ8`Ld1>L#;`wEsE-xAcBr>2X
z<t8!fR8fiJam<X?WU^5~c2QnW%1j?g_WipLiW<|uo}8b?xQ74K;us;~1R;QJViAnK
ze`?v==UvAYDQ>J(2=4*bn6Q9D0|ux@O^R)<SY?~qr$RmZf@lYOgEuSI>6f8<^L_sW
z6u@1L)+f)-!&?Ipz)IkXqE_~XaMu{gCMU0tIT`Gn?2}oajf2?1HrZ{j3}@Gmj(z<0
zCDrY25A4deXmf*s)*^%SEoGiB$Tsy*yAt4n!6(3i5W@wSK{C;8ltp#+A1rWbcn8Cj
z&Y*n#LkO0=OA-@GZ$!O<U9Y|LpOXXXs(_xlbLUTvsnyr%rR*a9!|nRB&+1L0Y;ctm
zEqA7_zsrWqB}^q&*WLa4Dijm<f)LaZ6EI6u{G@!ku>1R0I<Ne<<56W&W@aQr8>VbT
zJg_5@;iS5b=+n%)5I28DyvYUs%KP!&>bimyG3bx%gT^^d@enaUFe;dR=o78RurmGb
zb7eDJfUovL@KTJPA3yi#4sbt7*u+4xyWTeWd|b*gb6E-QjY1KyOGv#2>2eN2jQ;LB
zWEOn)d{`p8!5|bG8b*Xeq6sN7P)B%xZmrhku;dk(O7f_ZEM|ja55buJS}EIZhwc}b
zBh7tzJ34bO+B=$D0VKcz(e5Aiw@QnL#E#m8+Kp|^R=aV?;9t?;9f1_a2gt&!Z@HS;
zhM~Si1NcWjMxl5BSIIL>7kj_}<m?en%I=W3YSILXgRxYB`DUl003kx~N1NPjJ8qf8
zoHsYKV<r)AUYekBt1uHDbJaBUg%ca~$EubUwoY(J{N0iQI?xN#uq`(?JkMedJU<gU
zezE5;sV@p2zVYdBm~LV8LBas`#y%xOua?Gw!)n45n1kdix67)6XZSTIg8>05V9U8R
zNGb8A6?=A4T0**6MA8QVSIt<A0Vy*}z`P`ou43W6q7QT$SBD5c&2+l2MOzydhCd{W
zAf#Ylo?K37NPH)6?q8;)+^8r>%zS^u$id0(!AHdPCAiHKuY&B7fva6^Yktr&dq~EL
zF--~d*h^(w@bstI$IY_yhuC6c-mtVVIG_!J1h@Gb?vMhjul-`$Fm}>Cdl!~Cg|i)#
zJWRz6Ld1K88c0+sT;deTadbucz8`QTHwGv5OJf~mYjH$`iAcW$2SEQi3eFt{G`W^Y
zt3R@2{iR-=1>8;u-0iFJWTD)!KZ3vPkK7L4di3wo4Y@8$)1!J^ToG<DbfF^A;CUkr
z7F$O|(>#|20c;Y=x<3-Qw{s-P9|g<us~@w!RX?gc2vctZ766NYq)gYnX+eBCLu78g
z$=kch#KA)^ZXQxgU@rWLhy@Rfj#!e|w8I?SZplYtKJ;2aq<X|$fXs5)H9-JDgylt$
z7#IXBZc-9SV{D}QNQ9b1rZR(V>U}Ha2*n&zsYrUU4VFD{X1@oeFdhP;4q+~#=e^rT
zW29DLVS|2nadQck8lS%yx)fV)qQnt45-kHl78b3sHsuk}{Z%+9_bL5F?%Tu3nsbc@
zscex=1CqBiPcqivXA{Z_=xY{#Elg1`LRQPD8s+VaM~5?Y>A-Sr$}$BuX(@3~Zqgnp
zTMZEiFzig5MY&iY89*&b4O@#SK{5~;;~HMOOlSwP?DzMIW9=Mt_?GByNK5jFgL%Db
z9nJ@Uo)O9CX0&Q}M#D#r=pQY)9&^N%Opm+MEh5S2_!Odm*BeskTqqZSaudlY^<7o{
zfF|#e^VSI2p@)2R56e2&xbu`ek7hC-BK!P~JAQYvGX8KZ!P6TjD*k!FIbQIE?*<?w
zNFxBgTzN8ocma!nFV|{XFU!|wXge&b*k*evOjAFI<|_c!aSSg&H#Y3~FiPMGVSqYn
u4vQ@)@D*WzdssU69$Mfk;9Yu2JmF^ITkBQMjol&uA7y!UxpEn^p#KNaN?B3>

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/grafana-local.png b/assets/documentation/1.27.0-rc1/images/grafana-local.png
new file mode 100644
index 0000000000000000000000000000000000000000..d938bc57b1eba551bdb0ebb5af19cf1251e7c42d
GIT binary patch
literal 398383
zcmb@uby$>LyEYD@pi&A7A|)-|4TC{QOGtP3&^5q-NK1FC2uOFwfOHKaImD1dcMZ+&
zcJJTwJny&P{T;`*k7Lgt&dtEAb>C}UabD+jF2mj{$>2YH{tyEL17G%?q$&o+g8>YT
zyWID&fln^?Wu}3*yDo2J)$ao@pZjK^z|Ul^Qd+KRU<+3dV`p;=O9!yMIlGIgv$?s0
zixt>)4+{nY{)o+5UCZ^Yv$?UWHQ3>Wy0yJI@F4~U4>t!FF9#1758sQIBOxOnnO|`8
zig0m@a0$>cA)PTWUSP;dzE=0l*q-z7QAAVs989(#=xH8H(%yZ{Ds5MT&Z~W%n`=|8
zlY5b)Qy8uhQK*_D9Z}e#Q&iA`j#4zieIt3=0+aZON}`v3zj1l)xuSypymy`zzh?tq
z^MeI{c1Rrx{rA^*<60w6gx90T|Mv1K{mdzfMf>ls;q;Ql-A-o<_HLGc|E2X{%QN8t
zo?`5h|Ms^DNybnAZKha0<#y+PA1ZE@SxZUs-(J7PW>(zuJlq*`(nY0n7Nt;3Lp-U2
zpXTe8R(57IW_ar@UdU@GAAicuAggyiClUnD`Q*8(!%@~hlx{r=c4DD{x8CI6z0X!|
zw#=ooB*q6wnb;@S##m(j<ql+J1++MT@fQ~-!=j_1D(A9QcJ}st>#H}va3k5Y#f2fK
zPbw;$IGHWWI3N&F=heaMK~B~G@g(kK8aX3hlAjdNgFrX2Rdml568%ySc)Gf~bNh=Q
zu&f>OspsD|jh*(w+MzA@s^UJ*w<kPw!`Yjti1?%}7n?-7f7UYgJ3ToY)4x2!|9=@r
z^76l5#d`x`|7H&F((;Xj{~7bIE7_wb|J~5mSszjVwmp*cLu%z2|2A^ycdv&@#D5L=
z_xpcreOdWL$qe_(z++`srJJjJsX~jSN$mJPCBUtg@W3*#gGSl(@!-avA$yBZ(dM>&
zYuUFA2Byb94*0Botuz=cdy$=;Kbo$CUYc9JrPq#U8d~V7h^L;u8NMA>^CJ0Yvg##7
zASxqG?I41;n!-6a$uR5Nxxf9G_mPXUR|Cj`z<E)>Kops3pC!y1S4k+bKJfMJr5DVS
zR4GF&c5~zMY{lrLP;qMN`_O!TpbMj%;AK?zwfpEw)m!yVuFTI__YC9=#GDgeC~wpj
zBpD1j$QS&!7I=o2WM6x_VJ*CZr|q1mShE%CGY#bew~V9AEteDDSHtteuD4=%`KWz9
zHd5ax-pJ{5KcgzUba(EP`)WgNQtkHcU<z_FM`u}JIdrOa(65;Z+%}_a)}h8s#Kd_*
zVI~yH>?JqwoX_g#y2|qHiS<o-J%lv(P?y*00zvcKuQD<&GGr+RK354do-a8g0pBQ0
zzT0WNo|oRa9hKiQ-Og93no$iOyID#7?HT9C!``1dn!Js0Sy)SswnH=<xV!($78`_)
zrE0@{B5<L#^j0SF6T{R)QZ}kfJAEqyCdr2l*oMt4u1rlIQ3m%tJUj&K^oBP^nYdGl
zfI$qHfkpUn3KyGg#;pQ(Y1(Dall$A~uP(<4591Ci=TR{9sx|5t=A|-dY9A);q!e0*
z_f|D{p`N`aPAhki(^c9{k-F&@e~EP5H_hDg6ujTI`r*MHu4gaDSID<1e#5piLbdwV
zwf$}O25D$G((I2wOAChcvBH|#Ebb}cBUb4)lU`K5O`-HViCau++Nl0<L<<Bbgpm4+
zGs=cjRP<jQhf{L1d5*V-*u{--^3Ae;rk-$P<do7tuVJo8{%Y|H_<ES-I485}H$0B0
z3dxL&_M0x#de{6X0WFO2teN=L!r|x}2e!1TJ8F%pE4Ex160l|==ddD(bU6g&?2z7;
z@)aAi3{95|Ca^P&a`Lm6aJQdP&LFcB*HtNAgq(Sr|8zCQ$=4)YScrYE&>i>Wa$hrJ
zGQoT~E8S?nbFYMdMSL<XvFOxP)A{*{A?~uL704N9c5#1df+Cur6SlavGLTH&G!?Hm
zD;7FOUPo+-ogqiRdo&y|lxf7_KsLBr0tw^I?;llAU6vlQLR7LlI5-q*lXvDukWz`{
zNuP*R+s_0HrdBzw4l?H{q_*vfiyoZz!>g^sc#nL<eg1^KG4T6){@y3gN2+C6o12@3
zpf?nw(A1yZk+y7;#p(smTP}~w^>WZM*Y(71AqUH_x<>c&NfvIaUtAa(Y=+A3f5`<y
zuh;#fz%rjv`43EmoR*$p`1#$q?o7vne36jakYfrI^Be)B2ak<fKXU4aBL<vWTlNI*
z!mO7gm=4`i+9fLK)2zU?M00k->|~Zq_sYR2t~Z2iSZzjJs^vDyhY1eR?M5%m=4nq$
zD598Yk}BDyP0K4f`uNGCHfGOUTtDblovAc0KALTbctq@#iB$xnF}o!Kz9v5+a*b&P
z`04<xOsR7`{_O4;(-#Zs-<JDJ7Y)AKdWXz)r4%?smdy{u&u|d96N|t5@VE8OU?IB)
z6N$@D3dWP=dnSmSc8=d(?ojC6x8u6Mcg4?Tx;hqx*f!*+@CR-LYhiseEJXPQ4Nj7i
z#juZDD+n*dHC3q5nl@zev#dhTNFq^W>rYlgev{qVh2H6kjA?%IcNq=&o*nIGy_>^3
z<TTqlV*ce-qK;1J++7)4M8i7qLv=rD2$QCgU3PoGI9;2ak^q<x<e@7n^X8P(0$uq!
zg~%lSI#W#9fo#rmuLYUFrk(cb)7>Oa!|sFviP)H!SAZ?N{7}foq(qgY(qZu|5?iBK
ztNT-!DR(+CdD{6=60i61Bp(?0Tmp8LA?lGN8{bpmvL-OVUuo9YA3}Yc`!3exQ%K0s
zoX1--E~ER`m*}PSiUqTywT;wBWXq*m`72{uS_d9z``%!tD6T)V#IVWYH!n8*#x`f4
zY*4ld*s|xBaiF84<4Oxv%MbMe7K^IX$n*(bi^00i?(Y53GwYSUcv61>u<IAo9*qo`
zBLO)%xrn=G$aKw?F?g@7^%{~QWX!h4nSn)=eDm-DK24b+DEuj_(z{;mU;^@YJ39D3
zbn9pi9vlp&2}eprtT8|g%S>j7sUab@Um+Ov-WKG*zUHfjY}^HByjnT=ML*CgzbZDi
z-Fnxb5$m+dwl6<p7DQZj#s5-ui#TJ>#qsEn+nw#=(|$w<`=ra!!!KsbUxm!~Y0c)}
zoL(K=%ljmR@lf515cYeg+@rrOmzW#@+M`=Cq2+pR&#Zb0J$qsu8tE(Y2F-3fTp5s}
zaL_k_{=QphHHW#aH?|jh8Q=f*kB#fz*q3Ha%aszbH@KmML`hC_B|A9#)<1;G_Xw7w
z&{QczOK~OWzBzdWNe&QZ%WFJ-j+XH}o>ZzdZD;yqC~_xeyJ{$gUxI-gzkR5QD^?I*
z;o>AwnuTzv;mpy*03O+Lm^$!2F5=`f1C#Y!qwlLxMs`fC78_zZ8GOt0!`xTDmqQ_G
zg3v&cA>HNe?Vqs=9X{x}_Z$YzF?MOU$1D>aKlvqAHxZe38RrDE_92{<hRW9<^1da_
z0KgA)DCf)fGzhLv*e%_eYGpr&-ok5s&21Z=yTzHaY4&MEZ_iYb7Rtn?Q7^B@1r6j2
zR6#Z@CFdH=Hb@C?#KV2cS~^N|vF;=4)*HkFi?zkizpV8nfy_HYX$UFfXH$3zPGNxE
zxq2Q^UR@tKU7p$l2HnpIyRl0w4GhG}#((w(QTepqeTRkDQqdCCZ=Q6`oU798X^q@E
zpwX`Kb~;${@=N3DE`%u*%rdPZ8?-CUmhF12rK6w2E0$%bMRuLK$7D}h`XVciP^|Cj
zO81u6)|97exJWosI+hrY0y@q4pwD<?ot9y1J9UlaE^7p>H;g-<hp5$SyR4R$bDZ8K
zhuPgEHh2lA48h!(4yBibXf+Q=p8Oc2%*V_66trzJGixv<+yGLM@G67b8~zHRtpT-L
zt@Vz$EelnGoTP_Vy3_kkf}-G5307jC*&6yE0S5clw%gIBr<n9`wos#>eS6+A4&E0A
z_yI5E^s}Yh-UrTq0kVhlF(SMJ*YO*8G&rZG={b00kw(cyxKa@!j~W-;l5VFW<V*Em
zYUlDvk8%(wT~V)@n%0+>-+{8-kQ2MtC+^B1KZ{NsxhQJDGa|m8aou^?h@s>;aTYAr
z?PW)ymX(NG7t?A-+N>YB@IKbW9(&Pg2S?yDxPL;wV#SU->&hUSyNS|hQ2icyW_gOQ
zLXhS$)rybrogkha<N2}RV(rQR*ALx~Q|6!IY4@IAD6c5Pg7xFKs@%_&GKwPewG5Ki
z4qxsS=r>_finy-!P|F;+=L>ua&id+Px|Q3?qW(i}IIHFSd@Xx@tbx5qv&^VB<}nZ_
zl5t6g)yn)n(9(gA5Np2HzpL|586F}YmebW?)wc5=y^f&y^S9VbySoRSUbB^Mboxzh
zcfY7CKlizu`$Zq!;)5chYb6WJ&Xxd@(&sY^ykt&8?<L#TcUfL6&LGc3hW7**RjH$p
z)i{1-hJn0e2VqBr<gi4EvDKB+)C6nL^JIkvjD6M_Oc)Qi(hUwN&PF~4BFBRtBLmK*
znyoe&)7<g+uvYw6i_d+-8r@=_n%X#<?P$pfl85C~;aHvyuB~^=O3o9Q_U)_Awz>y@
zHVAq-<BXT@e$`#*gdZA(mt%5S@XUUDFFzZGJwxg<`1Q+3baM}`%<Yno<D=a4D9;t1
z=mxo3+P5UokBl`&9h~4r%{*}g?s(1i@Ty^Ahi!McleDGt6MKb49bfHRc^SY(@iE7}
z7ZYg6F@W#C(3j@?$S7dCcS!RD%=b+BmIb5vwA-^ZXxE}EB`rg=KI6?eL>on8Sz%F}
zd4a8K0h4Jx+>2o?_X_tqVx0-NdOB~u_Dxw!v<6@MisgOv=`Gck$D!EN)D)NN`a3-A
z_4C)HH<NpG;iR0hXa{PYC}vgqM`|C#2q<;;H~gauG|NWb^7=K;6|lxLM(4|pPG1RJ
zl4ASaJZ)`lz$~w-GN1aTA}Ni`(?!=k6R~?lDcTyClQU|Hayr`|$q@1S?7oxEy;3x6
zjVyi|&?SdaZZTx2UZ_64>1V*I8Sn+BiTNw%GQ`v3=o<uG=e5@YH#<6BiWHp2+V>lV
z+aW6hypH^G46Y0H>OHCaOZ6eDwRT?E1e-F^RGIZ;RB*xh&+W*Y8wF0cEj}aU)x7n1
z<6}}zeWO7%aaefc+ZlJoXGhofk-q5bC&`Z>PiL~Ajjkr*+_95=aYYm{t_Ya#4jwsl
z=Wg5KUXcp`0JbSI9~4W3s)_n7N2`3OciMPluJgH4ZobS_)SYd&XF_-{zDi5&@Wb{)
zdJe)3%~i$P;k}N2>dhFAw*q%;PBC9tRxqxxO(YCeHCDQ-%JZOJzSe++zdAg*R;lG&
z4+I;zh+VUYS93Oq0eNnPhIac&QIBBfL|+g~rl09v;bL(*5_7ouX&=>li36(m0wA5>
zzKZ%5+3<*>^Kj4Bk?D#SHKWjJR4sdon4S_=Dd<q&mDIBsuMhr2p(Tfkf-S9QASyYp
zoVkj+Cs0cxu!6BgQi|VAN6iWuLP^<v&pUuvTA&GIVb#2OKra!6@x!1+U?{!D;uq=l
z#;=N}Ov+Si%OI>c#UmAi25&2_nDMeZ`5wbHcl$AcRM6Qxd`<N*L0(qXd^^?`Qu{H%
zo<DdYl2}{3l?FQ}c5?d4EYW~*?^|)^@8F1@iSONWptzP6%8roe)zzVN*PT<6w;}i|
zLxQ5Fwh*YrdO~+Xw9T!!7!R+{)Jym6**86PI!EKb0{9$eGs2%1YU#s16uDCfl_x7@
z&KvcQWv`E1zhzN>w;iG?M`x>{-1?m7qoJiju6`5aVAeG&7Kl>e;uxOf!=$+zulDuL
z2PCA7bTm)-o7$S-{f9bzy|K%^Y2!x)SuU!+U{%v?Acc_~4597jTZ7<x)yqIY8!4Te
z;d2-}4w%oxGVgDe&W@h9+>WM;Z$4$!<fLwA`a)yrK5RT5jbC0Pul&^}Y^SkGmq3o6
zvi&Q+sTOx0;{mtFKI`aB!DXMFS5dizs(e&2rTk)=uao-#CcOkwp_G$NwTb#viR^4E
ze-hDh%==JdHz3d@Z|$b}aHUVa)(&ZhY|c6%pNJ8yqedcyvzUjf-$(sZ@X_zcx47jL
zr-Zin;%D%ffc@*^1GR;T%AMN#*y&X2zB%phcfrdOQ+l~fmY2Dt^%)o$ofz}UZPP35
z*q`n2#v_*>s*EU^ISz*hL>TcIIqtXh_4N*!zP;Zl>J(_-o^<y8GCdOtr(t_uf59Mw
zThd)-rSg$_dGBboS3>v@o&AXcgTuaegL(jA81mSe1N$s$NCHf+uW;vk*=r@3ZAJ!P
z5^nO+;%^TMkz*0_hl!n@cKCT~N3X1>zuz0pSGG7x!p9iQ5)W)^Q`P9Hc9@HDT9&SI
z8Wq7H;Y?LVHs6dDtAu1TUcJ)OV{>w<=<MtyB2O2R{{>VsLY|I<i;H2HMy#3~IWGAQ
zXP0ZHTNC9>{W*PRv;qRy{!>$0L_~20t8M@s@wqy{koJie8l75YC#M#E+XoAK>+J!=
zOFt{fSPAQtu!t^uN3F;CBZUVQ6xtF|vkdcXP4DeLPToqEwypm8gf+hw!_n+o3jp%j
z*Q_w?h2LS383^9_IC!46KHFqegA0C6Bs<(e_&)BO;_*&V61BfxSDMrHPs}KXjQed-
zQrA|$p`6->%@$s<P@gT=(v0bhZQosk3o<wF(r%a!lafPS*7(v?ULVB_ADL*#@s#HZ
zBgbkI!=pzFhXq4P$Ka66#o4c@Spw0a0`fIxq!HJ~oKI+UOQ2>z+7*B6V?j<Fmm_Dc
zuQ<0aWL{y(gD8JDU^=evg#=y@l$~ewZhe(BAY?F`H}Sc%>Eex^H9JaTEf?;oRakzr
zZ-`-+GJy%n$4m0<yH?5yiDMX8SX^w!p?0qr>!LBlr~mTaAC=PEJCmgCL_j$`e1UKK
z;Qq_*>6+I`rW$1z@qsvK%yM`8N4fIJKykwO`Fv4SE{QF$$QHYm?0~_^=>S6^l_vlU
zqf9rs!NbN%6|bzcpCNIWt?!N`pY*JH%W7is4O6Sif`4b)t&=^6T<|CO(K9WgDl+#S
zxeNwY+lgWdk?MIKRz27a^<&cHsn(vZE@E<G`R%#W`)vqBkhdH8ky3K4UVY3nF+t}s
z$2{fqw_!vKh)Q!}jG0<{WAtvP?bZ1jQGWu*aPhofyP2HPa-N%BgLA50t5^M5sJ7sq
z7mx-*QieJu4LWWd#AOS&(-j{`O3~L6jy%?s4UJ%=A-Fj!y@MV27{G;+GJ0JMY7Rv!
z(Z$p~HC17}ESXaRnG``=E@nG~e?a5LWG?sgR4h^)XQZxd>7uPcz&&b8xY2oe$yg(@
z1j|2DE%?dSr9_b7!_{AD+zB=p{H(2I<~5wTVx3a+OJ@_-7<$4Lv94q->}VoC=4Y1Z
z&KLd(o7XwJsI0B85VoD;ED4;^FT;$p&3Eek91P=zCq~QeM8UPED!y<YRK!vkxO}vw
zY2r>@Iyf%!j|}8(O7@FF*exy0=j^kO#M#|^D7gq6O8|;W1v@sU3hpHD`+d=LN?Bq`
z6KvWIj*DXL?IGOhLqK*Q$r%C4i0H$@@wb3Q0*EFosy@TUn(;&T4WjN6TVVNjMNP)^
zIXMR8_L)LU^h7L2P8})(3+ijjFS>H{zH!X<yK-{Wo-_di2vnh*Dq>HYBOO&m5&t{o
zP-O?IHT7Y-+TKKXZMuf*bazgw{UfH`RQ*KU>DNFAJ8y_Vqw8bp><m7y7GZM1Qd#au
zz=(*cse4X$bVENk4;j8@oho-K$yJsIYJ+^YE%&R#f#G6Zv>?XO+VJYcQ2Nx&3=;&I
z^L-2rviUq$ufi+fpwk0ve}!2317g1~)>Rs825~}{MI%;b+f%Whg7g(nFUoXUd=iTC
z>l|--Z7|^5x{{|K`S<qt(w!XPl6uGX182`Y3;lRJJCr5$M29LO<6r6>nd()ZIbBM>
zi(4M**}&bQ&@Zo1?g?6WF(57mPGr@z+(YV1O3vO{*k8m_FHy}T<IM-TrCEQa_=nql
zH;vBti26Jw3TexH+nLgyQa~d`?kfr3=I9L0d@&6t=}@E#riZ&7-i8vnAz!#$yrV74
z!V$%?$iWO<`MrsxC_+CD$P`_A1WjXYk}kJBu~8^Z<(A&2IYeG+A2HB^JC|3|$ll$c
z9$`3nysH=04jn-dGjTX>NYBn?R!Hhky?SCaxEdC34|?c|l*>A6>Y1_ZJhda)#-ryL
zP3s3dR@h~g_H6xe(N0hFJza}fo@aO~N5jgk$m@;intaqVQBj;)`<WEG3vC|DT$LP)
zmBCnC>TC+L!Ia0MO+D$cd)l9$aes1{17Ubt$xcFZQhK+9EP5|~xid|&0T$nFCdc-O
z+oM#QeUXgJk3eQ^5X0=4MUuPh%?eCZEj}`mQs8uht*2XRzEW-m=3{xN=|igKLs3^s
z&tds#Bv{7Db*O)*Tn#-M-Y7emN&eksD9P+1nh3In-9&=U(JQLZ6RsJu$<8;F3Ln3u
zkg+6mFc6Mvw*n_-pG}D-LDRXllN>rTo=MyAJ#%vI``B*uUAm3|hy*xo6Clb-I3tH}
zy}5&O`1l3&iFe7eyXVW0kJ7sAtR75PelNy$_TTe(lf2^wE0I+`_PYLzYQ{-UQQQE~
z^cm`4ZQ(0c(ko&AqqVm}P*CULxxud#hT%Ggr8JtH@mjTfWgTCT-}Vpl(+0g(zYH<2
zL86y9j@zE)=46`h^x}kHy!dtKbs06}b07sBwBU7Fg)a<n!i+DYO19^!;!n0FwG5`R
zMXCG4;+Z^4e9UjoOdlt*elVSDgt1{h!6kvCj)sHZ3w?P8Io&q94u(B=Ae_E(w0|-b
z2>`HVzYLR_xxT(Iw$#1J23E~IoWjl?rbp!Dk$tWbF9kU`NFX>ks)vO&;)LAK99>Ue
zoH|^~78rnftxT1}q~G>Zz0dxUP8t^R5NbuzHzW9F@Ah(<j3ToNBZebKFgM*VBHiP$
zLrCV&Zg}jEP*#kLxw`w4Y&QuG0z?odQh+TS+GWUIT*zQXTx2EWZ1u#q7%AQ%$E(ap
zR;5~?wvXxi#JuQt-jiU|FuAhntBNLaVdAEa72K<Pts=;2BEYb)632kB+*;X`J>FsM
z?2%?%9kN^c9d?rBdrH8;cV*VZpnvH~=H%>E5A({RvZQ!?jAnT*VAnq!Z&~SkNmA=D
z*NOBc#EF%N(k!6r?vgZ-3+>`g^kZU9tiTa&@Lo!UVMpFrw$NLNBo`+&9tinfRvn%U
z4TTZ+u<wYq9W2XmrxwE)5BW^xL`5NK{I-f&Vt$?wb0#qI&Q*g?*f@8)Oi3~UApvM`
zD^gcX<2evgAAr0+6{uNO`OYx9?@q(>6vGTbUK!5wwTd#+)f-j_Qc6mxs#P~`z`6Q%
zdU|6!iVtfq%20hsu&U}Ngqk5bTcQg~{!pjkvdVB805`4vuF7%&&gf>jlS37g90#2n
z`*46%RbYeEfj^bIs7L@6$(st1Y$B4z5b*)fT6a(&VeWy@^-7C&-jD@x-kBDjK-jH(
z=9uRwzdX|H@+VeND@}R(i^3M(<WFbMly<Hnv5KUP1SHDJj2Q~`3Z7R%Z^sY4t}pn<
ziYC`nKcW`K|CPyzI~C715;j%xx$}^ilqWTv5l5`ZFRaX(9*Tb(6e^@EwpsGkdG$LS
zpWZM~Nod=?y^<d%jQ33C%N9@N{G5GbLqJE>?dpqCp|u^^hKcz{k5r@dA8T?8U&bH_
zN_#MZi@y(B$&Z~Ey%MwFoti@WYFj#X!?`z}S}E3XK8_UR*mZZL!!D=OKRx^&jqDqr
z(F_#`a&}W<B{1|{VDNd<>GB`}5)&EewjVfhwl9u%wrvW}61T5mXB62;wmaDp%mXka
zn|^I5zir@seDR?L&Q@6g>R=feVNjyx#=ZXB_^m#}3i8X$;CaLFaibTSMz|c=dSGGr
zh%m1^!A4j_7*K(=chQlOMwi`Nm`Ehn1J%UR*+P9@pkzoXm^6X-LD_a;4R+q>^ahHr
z(R#z*uOE!maV#gbq@b!Yb65#BW<wiKR^+KOB`VW?y@jeap5HIp=_1FcIbNWq&=S8h
zXt8<hbC}BcZ4bUsabCBphuc8S74In6wlBSI@R6~uZGwaHUg7Z<*HLguQj!aN1#*kZ
z387Z0EBl^O_ak&bqw1p&WaTG!rl>JZQ`WjioDLp#2i?|Qd}U2dRzo)&2`9p{G&MbX
z|LE<Tk9{m!yG^kjPM$C7*;rWm5BGpRQI*Azja;%{q%(@;a6)(QH#(kB*qx2r3cUx@
zRB2Fs3NX_Bwq+ko7QWnS!{=)4d3UDya}*GVPgr#_oFtTte|A!9H@d!#LlaR`gSAa|
zU)MQ^XTONiEZ8~E2S7=MM}IG>sY(bW+j9KiN3=&kTJc${h)NyDBJum|N>G4C4^SP`
zZY!89B+2K^CK*+K{6K^yOG3yR#S98w!iRNs(N!3v5-kapd*8j(@R5=(d!uf}8+IqL
z$;H!tNg-Hv9Q_?2a_!P5({;peUMx*po9uncPYGd))oW4SG&tp;c1EY3>A)S~D-rEh
zZ-KI)4>TkCIN8Y+Zn8nn^{h9k?&0L{j@lWe`d?ZAx=oFxBYp8w8jI0ur>>T^MpE_$
zr%u#B@;XpA=gKGMY8gGaKvQ=jTbjs3?0%`~ZzUFlSnwt**}VX0#!uUZcG}_NeGIH_
z5?ASpRZY(4XV_b63J<2HM07y&xM?8?15<(D=t>{?F{hl2PV3r7x3~lzlT}H$ULBd4
zn$CgA@WQSU;>x^vgIjCEp^qiXjh98-_on-nx^S&#>o?x^Ag*$TeaZ<HnepS916q9{
zM33HoB4UsmU5zAYMzj*|p|^i#iiVxAH8{hzql1d)_t97z;%9hx8p8{+*GFRs7f6{@
zUP}`BWNmcW?e=YUC#xD~_OH|yT%j6U0j1Kc1e-&C219E2rV~CDz{XzmeW&L~HoNg3
z4B*S21OcX3eu740?hhJ99)hnVrx5x{WSdzbJ~!tFhli^<2Di&VHzA-Cm4pd2=uh7J
zda7F2{2#z*e|zLP2DUB*4^CWP{u6E7>aXvb3}0rramq}T&=3$maB?zQi^`D~&~t_<
z-uT<0Efaa?X+RTMcn!7-yQ_GeF^|A)-ORXA9KyX%rULb}_qvbCd=K`jlN$lLJZt1B
zdCp_35&BN1M^F>0uOs8k>SYY6l`BlP4a0qFZXc^4Xk(u2WsQ_Dh1|w?afpi8fZwaq
z!RRbE9RHcu8N$1-qNcOs=wvW??j7gq^?>{05%=o?g&;r4vcv6rSC&3!>PkJVNtfyS
znI$`zfZhgjxFtN}n^mld#tcAMTe%Ga`J^|YFHk<2L&tA+PMnK@m-Tf`VND9JC8Jv2
zRVPs9)_Wd^QBhGPU2}7fnDxfAZ&D1~A#W8{1AORj(AowRH@ca#p!livbah`#g4Tec
zeGaV<Ij|C4jwTHOc4Re$r2xbGZzJWMsS%q#;ek~+qy!~*7mj!5`?SAv?;;{hvN`Cw
z$O#y~T*$~8j@dElV{>MRJFC>MGHEm|nK;D5*+sRTlRK=cQG=~PW{1qutq=DW(ik{_
zP4CW3CvEU?9#xy$+cgg?_o&S38?+NJ-b=wGt;<+ppE)S_sBV(;v%!%s^iE=9ERtOm
z?f_Evc6pAxXJfJ!lQoI6%>+y<Bmyx~3hl8A@5pe3V%NSIm+0)s7y9!g%zD|sum)5I
zXHw^m_E|3(f$uHFRy}z-qYUsap#3MXcy-6aG46*XFF$9_T^rQ_J@NNB-kD}_Z><}j
z^Ad?Q&d!ads-aAL;mB-5gQ6ERVqRCpckoK}8WgOoLQ!kTL0$m?fwS{-Vj|}xfKptB
zUVB$~%sbeO7upJY%r(BabLUP0&@EL_@ep#gf|(meQ3!`cg;{iko8#SjbE)Mid;zLm
z!j&;R!s-;u;jC^WE+bP@%W*$1$mJta(jI7LiLVIH`Q11~9o{*sTdv&zwNR_ubB~|I
zmedNR+dVx<>^7z^4oj6K7R1;&_&_<|3v`Zro;HfPwp=}J{PQ(~d$x<3wOC(qlIP}3
z0W9^{5}o0Bp;<9T<L__N^5b%G-mKpM4-30Z!AHTY@<f~g=oqan80PfGFwA4=#=|?}
z-<2Yn+&Ix@gK61UiH%FE`YAy3a_RJ>YPR0-1;P@7>XiOQ*YR@P^)8t>?)x8`I0;};
z%)pUeR6KcDt8b$JW{cyywI~^Q+}L_;r%me6TDzTq?#XyGZ<M3Uz^9@jR&v1-Q=oo2
z-kMJ@{9wDZxp~pcHyRgM1Y>Z4$EjP1KG?fcbHI+wU;z&=t&T72i8r9WE`#;OUuUV>
zJEA${Zo<P*w^=LwQxcb_RS?p}G(<E-5V^_P`kSoZ_61|c-kW|di`*F?Um~EjDI`3X
z?ZuxB#VnflkTdO<oY;XPoS)tYV3x-`KC0}?QwnkKl)+T$toC6EL(HOKsfReu7lVC0
zavgnr4}g*cU=E|LM;S*-E_Lhc&0cVokC`T3rVD~~P7=`;0sQGh86v)MZEbNHUPUS`
z1c<6N&vh!*=W6-?QA7H!9zPHhD?V}ngQGL``>Tp?lFj<ApDW@}F+#pJPE89N3#7C0
z#)1?jQWL&+r!$`feGt8d+uAcNY%fME?s8su;V5X9>Sb10Dj&J$3$9P^C^ou7;_F0P
z+Pfl1f2ihOxU|&%qs!?XNRn%JF7+Hwe|y3KQ>#E+dZuYqZmn@pz=#Mto!qWp!Jq4>
z90a~#(HwxEEHhPn0;jsWI1f4BfA%_8C$WN;a_KBPJ`9c)uYs_Cso#6Rk<~=bW-QWC
zAQ9p`evQQfEl=8v?0;0TibaqS8j#|)ohcm36`iHNT^m!GOCcnh&nm;w86f<*swmjG
zz4n1QGV9gr=#ozvvWyrVKB-j^NR*=%ceuNjWFmHADDn&h`3Md;r?n(?TVCH`d9v3W
zH%;jsyLhNfG3#;K0GFz9T%?$;-FXKn4Hki}bFIC|(vH1&PVb(J#qW(B2lZmDd&<Lh
zV?R{V0og&jpyh8&#Wi@)`$BbLA77VvIvJ%Kbl)o~Hj)qm>K8HuhR^wJ-b@r{HJ@8B
z9j=_p^R%Q3b^tBbA1XNnR8+Ex)Mqx~(JdWmvh4R^o}nggIPdci9!6Y5d<DXFr5WWE
zq?ArU<fMeExyyLXxD&=RvxH&wP4uG`Lux_|M}l&#H~iyBegBb(EV`{8@k4I_hEzZh
zYflPCB5X3(i2O#p3x50xggVlhaRTwEtBa0M5Ke8hm65f=F&?Zlm%O-=k$M7iE!QDB
zmF<+8Gh6%Sr!iB@d6qKRnp-g9OGYM!>&Sk*ku*O8f)U0puKk#G!Y-@He5KXP0mvli
zI2hx0jv(=LUohQ3XA#>$n-yN}ghjbel^wEWQ%UBDwV*HB$^DiFk@uKacg~UuDCYQ5
z<I13lxdfvRM62R`i(0X>wgH6azCHDaV_To!b8%ihW`N#&#5;54x`#{R{mr#dz2J2s
z3;+J{pmdc*3A0+GSVS^CD7r*fkeHZQzKrm4X(tm4dV9xpdkR%yk?!Q~ZUJ;qtY&|Z
zQBkEb>(IyCImab>?%eIH01!DqXnYsF+X9eyHRGS%vVC}BsKh}(M|sH`oKatW&ig+F
zBMpO3E>5`aL?pIJfI)V4cA=s5UExpV$@Vu$@7{gVHNz^JDeAU7dK2j6>be5s0D5DE
zu%?)P@K9TwmJ7kXNVDPWK=#Xc*2~AnKz=Z1k=pW$Qhw$8hVbU~dVsmQ-7POl=kwwf
zokht5BwrYysZy;)yoB%Sw~gQvV+cLr3kRzGF;5Sgb5?iM)#B46mnes<&J!0%!I%^F
z2V~Yz;;8NeWQwPO>dCbeu%5Ai?tm>je&9bts0Sy;*AUH^_9~1I^I4IZfxPLKEfEMi
zxl=@U57M~fI7+C|Q#EJC1nAifUTjc?wNgs^*wJr6H$vqtBy3!D6&9znA2l0`0r44H
z2!ZHLmIW;?FU!Z$b~(DcW2#cgRNEb38~PmZH@IB>@eUEU=Z@Fj&thX^W%E)s0Hwgs
zw7wF6SyE0V$@xP%0TO}kU_)djTgS~8-+>U5>WUnjHN<z1qt#8Ufixz~KLnkj1T2~o
zu%diBh|S3vpp6)xx?Eeh9LRvZ5OsH;p{31;mbgjylQqkYj73~Mdu)Ucfd0$A<0bUw
zO89W)AO~pPCmq<g-yuW?onPVps<vho6R%P!(P0NF-mY&!E|{tcIaVV}pQ-o*mb&DZ
z7h_Y?_%|1pmVP$4gkAq0{hYlAphxVTnHDKP&efYV6hXp1{i{gRaA}E(3X;p0r&O@#
zJN6865O*(uRWnwjWIC2TowO^Q#IiSeUbRFg^2yPSp)+dC;^XAayMtgu)uuH$yX}mr
zikAoSFO^4?85tT5ES!B80V=_GFCkWE?)HmkPMJ{sg>Gqvx6pmTnrC>}EFTKHe@eNO
z+<E=>?OUy8PpS`3|5YhzozXrdZX3sK01|d_M)jjeQ?vQl<&%m(Wr^F?0IdvA6s5$4
z)|#MK%RP48T86j5cz5rWEFGt+Jt1W4^B)G)QmEy4QzAW=6~)BG|8S>&lngu5mz-X!
zaP59TGJ~kH#KBNf+Bo|$$pk!P!2Z6Y#kD}D2Kx;6`I?j6R5^)%cVyb1HWR>C9;{`{
zJ32Yh9KtEPqi?AU=Vukt&RF?v6YKPH9Oi<XuQf;kqO?Qvtps$s=R_-O<(z?mf4~b+
zqA+Wn_$K-4f>42|u=@H-Rdi0x)q(y!T5tvgfxyfvQEF;1|F(A7@>1m+-h&4Zif?T1
z5i>;rv}_hIyGns7zc+frSomg+V{b8yhK^1eVEzQ5NayYwp*ZXl!~9nP81PKd0YGnr
zsIhHAQGoX-eD+^c-+B0S_2Ojf54-pEt<1rQjJ~ipn-JnEkxe@op4kXk_&|y7VzE}k
zXG3VF$x}N`n4c-=>I>(dtMzayZ$8^hOLOzaxgYgI61LBM32hT4>1R%}R<yK4$?9$c
z>(VekETGRIho;IDa#?*+TU!eRdrO<~V);hb4Pn2lm&?$LEZ`|Hx%Q7}fW#dROmgRy
zkr6YtAL!F$`dF==$KiLf!4%=4!Xb#kjlF$z^D}eZ&j8(Mba{p36lHCzs(CG)gTHrj
z7W15clgs+hbAYF>FOqJ1hw?xBia$Qa1BoY!!eaJp1fb`{5PaFB;~h+BHuG*Ev{C#0
zO8yxX;S7|y(mtY}USoxf!l0Z{RJeY{+$f2eTOiMm0_08_pY?;bv>NE*%8I1A`V-S0
zKb$r|2&!G<Eetfj52tMt>;1$(r&i@vm`Is?iETG}#~o=gq%*p5LQ>xZaRf9ldAB@a
zCtG`*2U)+*goSHt$CrU-csxS{>DRB8&-gEFKL!$F5u)|`A`56xt!Nd~ZJ+aphYrc;
zee`foB)Q=I3kU<Rg#xhIH?hmdYl<g_U0%}{dgVqK02`n4VM`hihUxAc?e`8Ar{Zo*
zT(c7q5f%3jOAH(xB|JyH`<G@T^TQ-aKo-B264fafLX&UQu*Ot!Z$P~0kN(Wl5qi2a
zAHTv4U}}1LdM%KsuyBRvhz)XgEZAl3O_nerzwKDA*U?1tOic%G{z>6^U5)sm$@g5N
zhU!-*`+e7w1E0m9g~^;sI;F$bD9}ICuFUtHnp?h-lvK^m$)O`=y6OkCJ&0;+N&x})
zYVc$%F6kS<^AI2LNAo?pdzf(Sr<?nl&tdthQBwa5@*h`OoPehK`!}^F3m2Qo?c~fz
zKIWwhvQ@l&Uj)L_TvA4ccWH*kb^BM)=??Oz6<?*t9@PclX*SH``GAjnXmq>wciZ}?
zRbgVyg3?-<2XD<18oHDGpOdVR{gHF8JRK|cntKv0>}W&{s4d@}*m4@SCZGnM(*IWl
zcp1s^0Nno{*!R~}?@`|Wg3?=FKnrfhV`^)A`Ry<+4>3J$!jnop?SQ?#vt!^B{2K$%
z##8xyQ&vLhWd&~@LzAbe&IQlP>RuOyDDT1yELP6dT6~;-JNqh?IMe^5z>P})WORQ7
z{nCOSpQSq@`jyknc~T$1oUXs_XmS|RTEb`7A4mxEh7Ip&7i0{KzR$ebQ=Or^#lAfe
zc=uoTy5PgV^s^=7OdMT?3ppJk{#u8>-`}MrZSxfWa}$4GSqJ>@sNDY^@b8QN>j8)V
zUYc*2J_|pF!_8b>daU@Ge_Vxzit)zxDV#-aNg`V_x1DU3B_-)=#FePO-^l!BG%JX8
z{g~cSwd=>R)!R<f^=5%6p2h}ZD!<ILvorPKjL_aA6I)w(X+iW89MAu!0g{dRpX1w{
zNv<RU-LhM)dB^wUfXx-`I9<Frk@)-3hNbsDN@itkMu&bkk3K2gy@&d*&H~)wO0LTP
z@T9=s<Ntl}KU~BAjpGgS<3_?@Fm)0;fywD$5TI%jtA-+$Ug*@=C8s4ndF-{Dr;sK!
z56Tv=ZqXVcV$-FNtoX*Dx}y_4szg9765bxzs#Iee9@-1j1jHlFqXpz@Ot;-18=yQ6
z+rxY|zn%oP?^jj@1MO|UQ~{Y~$X~}7yijD3($58Lx|JoA%tx*g6)wF5C`Dbn+uIM!
zEfrS`!TsO0fyvCyQ^j3qs86@$fzb=xBLzz4&H8?RC`if*y{gN#Dc1`+OvD6GVXjqd
z+nB<%Tv5`FR;|!_LoO%nA(-22|9&tb<w<1~fZsR+;^T?wT5qy|26)wNo5AYfWn_6d
zS7Y;NpaJzU5Yy;5IFf*FsMGaDO>*Yn$9iHdf7cG_0?#E1sEJK~4@*>94|p4Z$37xk
zKot~f02l;T?wjMQk>nJ$SZMx2j?9_E7*{Jfe+G*6_KO?}prQA2k~7&K$I4VH4t26<
z{1`;~Hti3kh5!nka>y`zOu^ufd9O(1C~gs$p-;cw`XedCT-z#J+=@=CZAWAA$tNpJ
z*CvvaU_XAmyzniQaR1B8dyC5a=7Q~Js{!pfL6u#T(=|4GT3vTnS7K<WE+@AK?X4eB
zLR$<?!`QM%g>!S1cCdl{jfsibCvst=JuFvG*M`r`;LK+<Aj+L6XKKOU^bm(rAQR>Z
zoTt5pp^rOYmNyv^DPm68L+PynBc8Vz<`IFORlb(MqISgv6#?igcMaleHGj%Ja05sZ
zafp%wHb<KzV7IlO8mf}H_p8c!6PR6W=CVS2O=S!82jUo5vwg0}c%j;D8S_cMZ=r#X
zZbSRM)r^W~i6&AJ#P5IHA0WX|0TgOQ*T9tR#fHSAUUdTyjmgK4V>Q!9tiIbMrU7kl
zILmtiqupk0J(yD@0HQH|0S#+l8-C8r^f)U7T;0>I6$)iZw8e<&6DPg~ooCELb$@=|
zIP$!0LDtvT>qJ4v>LIUgIa5JyQR8uC?CG%f-%?QRZp5t~NUXuHTzgc5O}qZN<yz;K
zx2Kr};0+hI;4i4F(;bltN2K%i_O=>IIQ*|&5F-d|_s_{Wi7PrHxsomthztv@ml|i`
zKeL#!!U*=|kK@i^(urby|HA*VVYG4ktVAjZ<uTnlLeu4e!~oK~`7EKDmJnE&xJNl3
zcsz|sPPGgE?&!?^pI)qIK5dT*HH*3`yIy;mAGJbvo*?DJn%NExoI1O@Oa#&~0g?H4
z(-62qDqqAsms_*WNr{+APT06Gy8o!9aV+m7{aIu*fi<&!A%#3i={LZl+H#VucV^aj
zyCbg=hv&$7fVSQ2`RO%~%41CefTcQ-eATYP&(!Jl6i36vmhbc311<eXXb<<|ZQ7lm
zvZ}Y6@l@DfG75kZG4)SuN0wx%vc;PS--h@MWd0ESe74Ja^H4{&sg}}uGB0r4DUw`Z
zu`|rn=V(V0zzf{q8*mcY*2U>%41+u=#;=wwoF}ZRAE~?jdOUK1mv#~}LDVPmB{Rga
zw?d+#x_bJ&TG!v@li`~w3BaKNa`M)zCGx}7p`K5&re}*id%ekJMse~RzT!*rOG`^!
zsYL5Ddv6J-nyJ|qlbJZB!k?IK9?Nde)?@~sq-%X-1YB%<Z8t0IGa0Y*!a{4vDFZ#d
z<Nku*;R+nLEg0XHJ5?cpRju7w0l|X`i;Og$IaQoOAdbe9=i>$h2_>S)yUKX;RVzKM
zL0b}2EOXGPrb+O9+IR@#)zNBGwgciJ1<1$WcCr+dP?m7fuHWQt#P^(;;{9EJ+8`{<
zmlW>@iDERrJ8~0H%qr{YZC8nb{)&XLOqI^#*$Hea!N!J>-z_2=>&;#3reTm_0szWB
z@HeznG9N=5Vl6Dk2Yxk-dO<@I0C>A)SD}Q}T%mX-a?`}^M&kBVqr`?C<Ow5$obH<S
z{u)L=jW}CC>k&|7=fc<7hU>HH`4<kzhijMIbU?#SK15JdH}|}LZ$`@CZXnHp{*RIp
zcBzQFsx3O~zy^l(ncewfn~b)eEhobzxrYB*G&B-m;95WWDkMaYU4UdAW{eLTF>N(I
zF&wZ4Zel2{+Gkzo#_Q;)uLn!(dh(&g?adZ3s!DcwRj<K2D8TU8baHp6d48F$AExoZ
zp90kCGkdA_F`CL^f%Mk2Bd?};vL!jmfJ8P>)t+qPA&S-MtoQZLjt)c}STHuWuHbzu
zPm}we=gL8uppBBJr_kGAKP5dq3f(&U?!FN~EdG3d;4^d5a;@D==L+*Odp4(@*zng5
zoR?HuaUCIhI8lFk&Gg53=>lavb^<QjQz{A;ifhcY1vz?%hY75@Gze2wn@Ir2pP4v9
zO_og_;L79i^k&0e)Ywiy%)FVDD3*UMVogm?>(qE)Fvh308=f+OX#PlVRlYl_Jj8io
zj4G5+T?>{1Ab_)zJLbaaPN>XobZEW#IrioW`J|Aim4x{~k|pxvynm;kEuct{l#&8^
zfc%w~!>{YmNLoI=yMX2Ve0F^P-g%{07C7axu;_%Y-3ePuX4ehK>G{~Vk`>nMcYbEQ
zlp?droa?tgh)~mOB9R`U4X{Hr#(tB!BMi)e85F*-m7X3!Ivg(u2IVQG$A}QB{0*JB
z6*EBq`X3(sVNCqTP=GC@6s_Yn{!REt+Xc|N&g;E27zEUyHlTZn>Dl6hYhr48ZZq`?
zIO<a2HQ+rvH(Q`t$6e)j8PqEp+tvYv%ru*e1EeFM!QjGZmx%^q1=gKA;eUQS+2Usu
z5eepO-Bt#QINM2_#l_g5{=`D<-=4GR9a_#eT@OF}(E1vVa@ilD8%z})IP|(Gi`S~R
z;-L9ziBVotW&R4*zOvufcR(!T)uQ48+zFX$-5{3aY*gDwd;6w{0iv1g4DtSydTJng
z83tYQp%V2=FtntH3)BIr{o#|Bk{#HJQ`KJL1_lNIukrE5ps)SyC87>W2rbhd3OZWL
zIuikcS`tgUGdjsA^ZK$Z33WFxn(C_@>iLzB!;^z(tw0gwtY$NKM$own72Y-%;LQNl
zMlT}ryzTG}C&K`sqnv3HPv!CxfuMIy(8x?c2YZsbrzm-Mp{?Eb3S^l#UJJBPJd55Y
z<ACyKOQmL`zBuRF06Lc*pc)1UA|unIm3W`vPgxb!C5&o!jEyy&TosakYSYpl7KYZ7
z)35mmTJ2`*>FELK#QeP3;d&nM5>nvElarHM`v9w`T0WEC=m`?fRU#_&>b;0|m08u@
zfoqppN@C)nTFP{0%{(#S7@Gp362+aa2w;TWSTFAkKSy*H<r8LAymuK=4&B8C^^J|H
zKu`kqwxXuO7@Z{pMM(c`F<yYK?GGLClr=eaXf&cfv1qhdmNnSt0AJj@HGW0zeuE2Y
z@hr?#16nlGU@Hm;$ms#9IqEJG_SE$e7(6mEA|xcVuMxuG3Av0J5G2KLcR$5ATOAw%
z42<pdTMU_xgxWwsynE>$OKLovrGIq@J>3-*2`?mEKJyrTD;pE%|HvEn6UUve@1Dj)
z1<`het0vHrJbLX-YQW6$<6UeX?aLNoZ(MrU`z^_@h~9V$>`~LmyL(tz3Is`>`N9LL
zQd?a1GHZF8F1Is#XsSQn!yRdvfhc5(#kXd+{xM8|FjOy9kJKou$u(*xW!4lpk79&#
z^j-QCsG8pwhQjT#4Nry*E$o5E;BgpK2S}@PhYQKi(w8{O4<87do}yE$@(-Y5MsoWV
zIe(zY2p!YoCltLE%kA6KE&AMhw4ctv12N@#a&PKg@^|wfZ}Ne@MdQ-CGdA8Ip9_nZ
z(G@2pwY;@Yo+!Nx0mvDZCU^ZS77Y`tBe1aZ@gq9v{t~UAM;qvccC09D%35vdEjM;e
z4nhls?6-D$Y@&B+o!9sMIP@EPZP|BVlfL~iU2pEwWGSNeLWoF6q#0l=#q;IU+rl_F
zGFMkDE*HnLqt$Z|_urSxH)DmU=#UU56%`c<k!I>P*N9Q&3#i#RJhQ3J?v(C@5jj3N
z-&aRt>dmoInfJd`fMEP|V6&lBg2FS#LQ!`~xAo4whn`M+FJs~u<kfPW`43xTlAApC
z)^934KLYOI(|`U$){a1s5k`wiN`87wU6&|y`Ii=edU!}zP^;07rVc#6R25*T(wf29
z6NSSJw{0^LA2K>`o8F=n9jUs+*}gy3zu1O#Rb#>&&jf170Zu|`U}gfR{fcUN4=>$m
zelHuZyoHMse9OcY?r4E{`~j;q2BibFJL%5^T%WYI`q@oaM^R$xBAURY*B5wvLtsye
z<FPoRysewlroo$$(_Uw}kT3D^Rfu`Gk}@qXup&Mp3v@OudLb-{MI*ItkVdziK0&(H
zm9sFTq1Fd9H=^6r@OQ7Ty~~XF7<uf@Nb{gMJp@=^4CaEvkMx>dsWdf79cG)mQLI42
z7e(uJxIzOk#A!4!-@ntpIM15IARr((`%o<D^G0kSiE}Cav0<g%IjxO46v6j9^U)hK
zfs)CZ@TV+s5>U+U$lIhY`PC|0G=cMq<Kz$i2QrkT!GE@xT{<V$enwCQhGYd=L5S@J
z!TI$!NYcX!>m%>c>fYY_cd!V>TJ1gcPj_dee0;<(NI9~Yn3==QK6#FwGt+Pfm~@4k
z@-ZT|WsDXuY3b;!roRjO`F%iCxJ1}!i%+6uqNuv96jpXh`|3X7<G1vT<OBfs{N}`l
z-&|ezuibrf|6r^|>&N{gsJ>j$<aDYcKvSMafkwFd7BiUURU{rv0%uOLe&_bbuqKCC
z>(mr-0%tSZ5?PbgXYAgWJ-$5MGuf;@DAv8@L{ooC6Nds~DY>MVK~0zOd$IjV%wP>h
z@%cL3Sj4xSco_j#H#Y`=Tx?d)A;BfR?jMHTv`yHP%PQ~@LJjIYkv7@T7E{Zj_Oy$W
zTmLS3(tVwQ+A%LNT8dYIqYw~8t@It;iMgUXq?HQSIT@Io96p|EZw~;(IgaNC6=}d)
zvz&jRF<KL_7`%vzzG!}{sv2jrDs}&0K5;h|75?PlD^UAh3EWy1sU)9n<9|`wX&g+u
z&irubJ1)U$HC9g60izm7b7Sqxo{ylKLjqDp-*CE-T=&}>aSU%)NH&mZofqHS_w^=h
z^T#?Oh2IMdXmlfYygXF|7JsxU^v(UR5ffX}nN1!TRx^26O{d#m-grq|ZH?7wTUuGY
zbi3Xft#y-e-$5FmSjgU|>8!Fn_<as^|Khpnm@0jHG#us|g23kw$9~-K0H|mMnBD?~
zb*Glwu`O9hM5J;Z?UlCyAj9vr$yA>yxU=R-hkL9PzT2)*0p(Do<(^Wy@4I&jX6UR;
zSF2kRS!p^Tr>U|RtzF!V<h+Ath%1h>jGuc9&0|nVJpL3>#L6I-VA59^WUa6NkFUS^
z-Upbxupey-8o41A`xEph#C?;BIIyWo$^f~91En>la%+ymXrs82k`fSgvJ;DLz5|*7
zAMq948~v6zS}7kZ#5erg((`ng=rLG+D`bxY@ZYhr$v>_$UE|yFq#H{MX3URoXx;yd
zQ>M~;M=qR{RjDNTdT8_AFnZ^W86PJn_&LAbLw_K&mFUz0ByJR)4B=yPa(PKfp|UY>
z=TQ12^ZT}Rj?Bi?p==*Ee)CSjWvwQMrwsB*d8U_2gNA1j1)oP!-kF%t$|tjbbIvV1
zzBSulR@vTlzB*Ws4#dGX9$h^dI|086xH@mRU1-%7<s@Ml^jC&0^p3n8E4q9bWXNW6
zA=aX&Z5Zq${LviBwmMZor+!%UF(QH$IM6#Z_<`wD@0|^*(w7WUO&-}Nr1nkdZF<ep
zS@i<dj?D)7WKJ%-Go#trxigb}F68d-ctzcb0~nba-^}de@<he-$<azF@-%*X%(fpR
z9ra#YB7xX=#`|qFvrQh+i*zC1H$dZW?#Ghol-ZJUX01Va^WIlk*a!Ow6H#ZITvd7J
z4vCPmT_naFt$F6J;hbG)_&kpQ{FydAG%9NKi1V__eGaBxq!XwFcF%p~2VT7qOSisF
zH~Zi>A23Hx-wFJe7x0lUuSSojrk(}+h=&4LbM$gqdE>UvsC2#_zGiq**XR})2gF+^
zXV(?Sh1XP4;;QWV=!+WwL1R#eKey6>^X4l9k&`H)aQ<J6M~pqE$FC#J?e_gqu1+%=
z*)vwG9pbj7d9?F`ChyVA&P-j(<&j-~61(y+6*Yz<YLg+@??@OhBs{9)r@&U5BMzmm
z4!4vAX3~WrETo(UM!)<yH;_Bx8doiY+f|LrOi|pZrUOq>w%!;{nT7w4v9At`f?M}R
zR6tNcq*F?|y9NcML!?0%x<k4dm6R0eMv(6A5~aHvq-*HTyXO1OK4+i3_r1^c;SU&?
zac0H4-uD;pT37c2w(0n>h?Kn<zfQB&o{Ph&779<E4`{-5jgqe7d{h!o{{Zbg^~;wW
z1}krY;Ht0WdxqI?4Sz7+0B_=5_n54w@U;U8X)?j&oooV^O@Atk`OjW-PvJBN(erpA
zCz7wf)_we!78g4~ju6iadzvW|^ZiUR)&6A5c*Jxlw@{}#NZgRp3$m-Y`OY~0q|Fh?
zT%UsW1ouEX9E@^8d<fq^;PT9*KUy2$uI~xPTAI>xr6{i6YK-*^!d>o9o>43p0TWFD
zIu_KrUzGK691_ujdE_)p_F1{6`mggB46yj6@b<#P)!vAaosN8F?TYWVd-oi-F9h`U
z^))9s513rX!^vs#)vfja>>X)Tc`B*7yg`fTs?c2?_99mMpGg1T-x-DEspfIo|9Wt%
zTbZ=Dn6c8A7!KGg2T*H2>V5?NY?E65pH7H>JdZMwj|iu8hdgVf&Ixt8V(XQa6;r@{
z%>5prnQ9kY#6sYC)Ps2XKdlKw8Zp)BFK;<jVs5SGA{J;WvF$8hR)--PX!VmKU+~4h
z{q^5ZHu~$OQnV!uu@w|JTC%W214EWqR(yxzjLJijVE^<iDRSY|wojgTw7%H<-o97^
z9KywRhutrIU2Xh?YZO!P50@78I=70z8*!B&2$l8~uCe|9cm?d3=b}Q@WN#!6={Pv@
z>%pg3;-^|C|ECX^^7Mj9A+REHSrYA_;M+_I`ak{dpWdG9nzV+(e<xG_Yh-?LD*m+p
zUyuCH^HSUp@8CZ^@1QrbB<Wwr`0qarG)?hc{ht^4U*8EGQ8R(n^`BmIDSka_j1&xU
z!8cBImcxdx_^7C2U=amcwVBCL?zDP=ahPVJ?NA*53Xg2;I(<e7KPD4-(eV{aW`%@W
ze7cKYD)2bM;VYIo?fMIfVafj2qCb*JL_`Bk<5MR15Njeu+fBDKxKxAWf~fJMp@QUN
zq%2F}`zElggaSu?GpTrslB6P@=GV1Juk{mFsr;VC$#di!>ll0c$YhVLt8do-7Qc!;
z>Vl&58G9bSDoxEhN@Pu%&TM@BJwpc0c&hW=;Ka%3CS>00wHH**Ep6CkJ6k?;iR|Tv
z%T(eI0>x{@KSn#km02X2V%zn`RehEOI5kd(3PMhrzPe9EP0I+6SwQ@je}2tV+CC+p
zFjEaz)3)fbn2TxkWa)FlA&+mF8mnFmu_9Lvz54@yj^~^Ta@WLFU)K~qe*TE{hwx?8
z6#{J0FY|^{VdNAA|L@VLeUgv0RJ*#Um-f-%Ela#;j1<lLOjuqYQaqU!1xNjMh3OZ^
z@dCo7;T-w=FDkg37@sx^C(EKFCgs$vw?gU8=G9iGujHq%qJ*+7ZD_lzy_6<cecy$V
zXD5Xbkt*qi2T?GN7z%#YkV#e+aCMR^V@jKsB>v8t*%9-aX?2Y&yLQDs-74{OnHL%U
zd9f||#fR5u4uBu8gMDWJ^ErM@CT4$)rZ10}!tf*?UnxO;)JG8z`={8H@RjptAm2T1
zXh*E*gZG>uB2D7+cb{Wv2q0^3NtZgJAdhe~H{K&SDUqrBY#wt&Ji5&lcbA>ParDJ~
zBBC!3cYPvnw2U(JroBDOuCEX_s0rS6mO?h<X@RJ;`%^UG{P*;M#?vVb-&xB!Vw|*W
zdEq*vYLB+>OR=XJ+a=}1mTJ5dvwtDWIt4+0ST=O}>|YnNkk?<krbMP;6Ek8{`a{ly
zl{%Z8>8oyMwB8hSX4x#^vMd*VYoi+`6PX3LdgXRCKmGlm9-H~E&o1R0tj+fV-AX#s
zYPQB~ljFBw!gCxN!X>+r?ZRHTK5r+9D&=Y|D%s+kKgwR2&lx-RQq9m3TmN%N_-l9l
zQl<sL^Opnj&3D@5kqTr&A}T>+1-%~k&+f@pl161L>HAWaQgqSlBh5SGnbs5WRq!7b
zU!sq`@EF7f9ce#ca`Jx(cbgUvGQ#xfw@#`Hfm^4aPqxE_m8)%WQIwetsai6{EobPf
zY%iLP2?ZsX%QNz08YAHu<4vn~F~%wF|6y3<{~DHH>M!$H@$^jJ33Z3Z3gCH;C_hxh
z^wcPr3RPm^*&IAM+4C-|@hZsd0%Cfn1%~hor_(uS&dc?Q*;vOnx5L9_Ti09n=)vwO
zcek35c$e4N&M`C8r1`4*Fis^;GIt@*tK#5C=#5OR*VQS{6of}0X>~^OUqjeI#b2w(
zb0n3pTsR{%*Bs;R<Wpf|?~i>;gruKdWs+I0%y1D;5YtsmxsY0&>aZ4iNz+&6@HcCT
zcbsyKy+kZBamhEik{T6+U&}lT97Z{g$R@QkZf0KRLVjz1)FOEq)MKG3k$H2xJ1|||
zecI*xAKrwD6e1`iX`3@A-lGY{QlA#p>(0Q-Ewh`E&%A(>srDDW`VMq{^tYKJ53(vn
zRbLWX^%n|uW=*^3yym~@$*ob_nZ(4|R@qh&n0zcXrD56)v#_Sltc#A-EcEhOy;C#B
z5rrn?cbT}$WX82hkVl8#Rah}kLBcVNM&SQ+vi}{AT`&I%&EfRMUv|)~a$_n8B}>bd
zFOL{ck9A!1WQ|P{;lwyu<}T8ulwK5U!GtHi9>aWnWZjJuP`CC|Y5nai+GE42P*vo2
z3|F5tU&-W#w5}zT7rk}+T=X{Dom`nYvTs#NM`9UmxcoJz#r>|+uKE8kCZl}DPN*RL
z*q(~D={(0G2s*&^`a^g1P4DvlC-eA)d880`4VuPQw)!ou9AV4+KPp}mrD0ZTg?!Cw
znK8KLJG=s7vF7O&nDqWZ$E=ZBSd32G{<N4@QKbbV?)Bz-=~XfWQ8U$^R)~$P^r$RX
zX#7o;;^{mD)J?5pV^8h`PVP;XyU>=FvTM##f%52APY-b_<r^TJM_B~9()&hdKS388
zQ@a6QtQQ?Qe;;H^Q#5-n;%bNkafv@0d-C0rh)ojV&b0UCIuvZl_vmLR*gP02nBq?-
z15WKBHm^I}Rf>ny(B$r%huOQD;8_~ubrri8s;9pz&ZHYvw5n>{-XiwDbwH-$E`|y2
zl#Kn<d`|aG8Mj5e{aD^|t~pB0Xo}j?{Hew;t5JrT0IO;*Fom+~3UeQvoF1l`4H@)8
z_Z{%gq|gqSz#|!U8Ci&$+f|(4*|R@L=jS-!5p_^s1s2Zm$i7k!WTO1<PojzVB+eAo
z`naM(XFC|eQ=ENjdcRJ89s8F%a_17Esdx{cUZaN(W2q=7S}l}qV`NS3)c5(Tz7xzl
z+FrmsMq%p1m}H5V%IMx?H1tTMgQyWz_U46%63A7CTskW+ypB41a&pRiSIuN-Im$6J
zC;fa1GUai#vA;e0+mrn~F?%wdTT)UIvU~DK76$DKx$7I_9*9$lBowx%M2f!7D{&vg
z0}W21;^%OF${d*#mx7<iU^;?lNP2pAtbJLm&_mXRr{t1<@Pp&V&fbM;$))i5;KB-w
zH}_yi7p73<w2$gpEMlQstjn8!y2@6AL8kgl_hCb>(#@)zwQ}GnNYH-=?49Y)56GTd
zUJ#jF+p-kuS_b?0WaP??yzJ`>``&!_zM~?yJXfhPOEn&png!Ew!bkWLo}6lxm=^0l
z>u#TbMnM?HGO^0Z)fUlPOyC`<GN|9z`&nZiLdZ>sgo&w$cU_gFVCyuZ`^?;E%G>$R
z)|LdAJUZn%5=Ql#uB6&>0BAh}Wurm=tY*Rc6I$?M9wg&VJzKlCrZ)mE>>$fVzz9JD
zXLm+yh#w3Cs#EL-I08uW2_?gZK#tViyntVj22K4`Q(tdtCYXCxnO#aQ1em&+`WJ{N
z7zgvjkNbDdU!D+lcH<KF>5>Zx30=6Xn!F54G*PSaZuBqEt@N`Pv!EM~*1WQEJ}(eM
zqtOvK1C9QeaZc!MPTptu_kqtDJat9FJ#|uE0tSMB#|WnfuXt&|I6t1vh6tBYt$)kL
zTxP&2%eAhoZM%NeX=Qlf&ZH$9`jykPh-o`=)ifN&3~ienQpSN=4l~p@?b1b@2~rA1
zATmphcaI`6n+ns$uX$)^I(_4^%&WeWbtoq+SVYkXI(QNikB)?3YxVwk|IQXou97r)
zMyYa7KwYM8JbSIlh-xF7Prh-r!pboJMbyv#Iw}|}4C7U2s^@KZ?!S|nE4yynePa2x
zaK<9Ow_E5|<O#7<Rk;0CcgpQ)*VFcpgx&|im_5wgo|%sdwJS~A+PSZJpiqt7@j~L+
z1~)3IIy&(LQjur9$9uHwH&@b3+D&L5VH4NZ2~{q4Hp)|yO5t$=)<VkJp{5t)!SvAn
zSUbb4xTdd#x^NnQOk%Nb>=73jF#S~##+>)H49`2{JNlR%AQg5_PHhX#5KzxxlaV0^
zD)8On9ux|p!&daGuNRD@y$zoLaK!nf((U`wkgK!3p{tDBWBA-c-gU!;1LD7QfL+`(
zH8ln6G3H%nx6l~m?&wTH84K^lp%V2(5tQOk>4)mn`8i(^w7LD}>bvH!x0=Ol4t)w)
z$~Bh@-nwYNhA@m}<*`U#vR`%pZ74B!-)Az2b^?#N4R_zzSSZjuKyLbtp4%5pzw9t8
z8!=U2cbax>N`yo(Yx53XkEuN-<Kh~b?g_bRIlNIb*%=VkKu3psj?AE1?T+D<Kg!o2
z^l5!HRn`QE*~BdMoJC1d1IlcL<hKQ~=BbsQPjHts%N!<nkhVs1O;3_w$?oD35NbNQ
zeRCH^v4*d-tdX>yieIoZ&$sthncj0@y70QRhb3H(E>u5?P;-a$_|r~AC}+#-&G~bK
zn)gxaDe*Cmdk)KqX*dQfH6UD3Ng_N+&so=7xATfLBDvEVfZ_w(Hy0?;EiqeMnSs&$
zmzAP=b=ws>!zNZTl3(TMu`?oUN37nPd;d08bU^Mei-MQL3rG39=CR<WyUA@_m>e58
zMnNAL!J?n(a_{0IpCPD}vrb>K=H<rkO{*)8fA~YCM^CBUK+}mtM(Z96oWs2naq!W4
z9G$ZG0uTJ3bf~nH+$i@z@6<H87Fxs<KtI|6)rUj})(nUdRCMQPSEukQ24Zsj4uC}~
z_jyDY2ZXGwCOAz37$=5#8Vm3CV{y~%;|%r-J~VX5&+4`grA&J#z-UGOxhdX;rUHcJ
zDJkS*xFS1}^WM}K=<n{)lj4DK>qL$Qd5U-2)3vm3(687WCrwF2?3l)m$sFOskw7Y9
ze>!VEa(sh&`T;(ziUb6(zZ;-2gJo{pOv1FjzDdS|i%mfTZ-97jWxMyLWLE7;^EWsv
zn}bv}YPS^2XW}cYhKPV}PyIe{H@DTD<eM+-J~`c)lXi7=jX6Hk9L&*I_SR;L{iQOY
z<a9%9bdIKZXKY^pq3GCn?y@_}Qx9=)bo`++Gtm{xD)RmN8An6o-yuvhaM4gwN=D}A
z#6&pw?p}^YDK?NX@CnwxEwXYOsnqd1^iC3X_!dX7s-4sYVNBtjDAHLyj1E4ZC^Eeq
zBK-*Pv$6a}@s@sgod|J{&DMma)b1>qC%+>S(72%JwPkT%b6xQgjavS?I9e~O2@o|R
z>Dlfi+2uDIYTynF3p3g4NqN~bK(;qm-=hwFob6eQP9jJaMdQ_te&{V}#EVFC14k=R
zsE5()rk-QVI_UMZV@b$dFlA!JYCSm}uvLGIm0uE6=<GONtnrSqEu9mQ(vfaU6+S#M
z*NWEaH}YWA*n1ftyCL1EVAX!(XhWUf5}BKG$dO-ZTXGGp43RMovZ5`B^3h<(h#|y@
zk<JJ=p9(7T!rAJPn4uL0K#p6rDJz3|o_~2cr=-tQPKQ%2O3H5wLhi1v!`p35qn^1u
zPf<|AQqc_7b~b@Wz<5^?gI;C-4HD=m`!nvKtx#0F%|9&5nHh$pRy5gpN}3pdIOp2u
zOdFCYAu5X8<_{~Hw1q-N<~_3U0UWjVr!4^Rf-y8bc=`w?W5cXFioQc|&xw+r{?W(k
z`3=!Co4up{D;=~ajj~M*7aJ$~&^$G-FXuIUr{uFewnyuS`})4-ZZUVYzUWQ3xr^En
z)gBG{?h0ta3Mn$ThdGPOhQIVaw6rb;=I3JoHV`REz$r;VXWB&ODkUWafmLsh-^p58
zJqGah{SwD1O0dqQLF-0764zHCbjAZM*e8i6iKPw`Ps`ItS{CweUqEk>!9vXIzk9I*
z;k9|sODY!63~fU0y>p^R(y2cN_;!lp)^yl68X0!)9T!h_BP7s}sXW0JoPSK$UMZWw
zB>-9*%2dWg$90bw9IU@Sn0PmCD|MST4uT|0a{W-6t|4e8)OLZf9?yx0s|qt?O@$6=
zxr)Kw-yJvYM{{%|foKfufPjz5Gn_^`7dZ41uHtcH#nob>1<fRa`1bz$fow9d3>|>A
zA{@RwS~Gk5LN#AyJriV9pU3(Vs@Q~M6H+Xb7Girlsy*KT+F@;Lj8QI$!{0<cab#&s
zjhdR^V!8Nt!R0!ua<bOdtgqdO>+!}jeSILu$RUi(4g>mfWY2SNa>#X#Ag?V=INp0e
zo+-cVTdCiCK2>LJm@p0!is=;sRhO;fM*ub_wcQg1s|A?4zU<mIOD?zfeQ>f{K8}wB
zcxm|iCi`bnPhDJg_VElmV6x4S`(2T=n6FzU<G4MDzN1sss~+YXG?GUZ$2E{gF|@S>
zU;?Sw6M#|!#V_(;fw`<eg-4{QAG+PyE@=#t_OB{<mx$S0k7naqk@cR$@NoB&42$Sk
zDH#s?{XvL#f?$v1tRew#XkZ{)k#4<2eoR-jnohMo_YwYe(wdXzcTpO5XOD2uQU?)z
zVhV}ln)mTXfYTQz({}Gu6ti+zVzmw1cEBCG`L&}-Z&Eh^2S;X$Tm=9>i6Gl>mFN5m
z-~DC)tf53-tc7x^0d80-pFcQ)0b^k_b+~YE^{6$a@m`jfGw7uhRQx@h?2ScA^G@bT
z{QXziy!FEXoCI9BX1O!2LVy405zH@T&q=0Z`Z+Q{XJ3PsiHobNeaV8=_i~gPUltYF
z0GfABrATumreUb`xvuW~Y=e_eW)I%85{E>CWRTvb0h@dUd_T{88sDe+yX(Qy@#b06
zCdu*K@t1}JcUp8@&j_&q%>Cu0c+c5<azuDD+YmOnVM|V1q{<R_*RKqCiM7|0_s5H&
zZ9&mJ@)L}?ge2cYDjglX4t+x7;t1TECZ>*EWJF%d5xuFevVB{pLdXJb>P&)~B<f^L
z3EX|U;AU?5bl)TH=*VisQdFYZ<OfiUEy7uZ&8I79$Z8!NE)HqDZ=I?(g$oO}f8l5q
zGiyzd|E%i0Wzv=x6%_&zI%^=I^7LV$7d_Rf&-uA463}AEk5m*5RfH9eHZ)>zI1S5z
z2AVB^{@6b`DX$y11{{u;2WFb(8Bi+wa_Y}=rDtUD0a}O`x`*5nV@(`?HbVl$Hjb=`
z%zp)5dj!rb^*y1qgtx?)Gb}wD`9#{;zhrpE#e<-LEN3)}5ZUAK6%?&EeUIp5247EB
zaCLsWSjh0|M~Tx(Aqy!tG0t|G@O13!#*kH%@k+{yrzDwOD1s8yoPGKkazxHTiN*!$
z7So^Y%e=~tPNgwHp#stg@pz8abMxJ^-Z<`PKm)Rs+~H?&AmI41ZtggC2L_M>X6y&Q
zArLY{LwZgd{t^Nq%V3XS^?$s0Znw?)5>PokLmkzz=LVgi`<6~lzK*u1XAp<Yu@Uz3
z=OFAp7`J^d2C4(MyE$E?2cR_@2%vP@SxM$8ptq&n;R?H`*xnLoK?<^HI;94jauY>E
z0KmKEUiNr$I!0*<!lxZyP_HmWW`%$zWYbO2j42+v57F<%K?-JS%$Y&>l)KxN)ZLr>
z0vI-9iz@)^|JkbS0rZ^J$t;LGzLLH}>28T~a39yERe;b7xgFBo*6|AnB!HGW2+_dU
z1t}?MSFDK0vuBF5IV5DaAHhdM`qm~5eN3o_UbUq<n$4FAJLS$ENHY4>Sv*<mAqd#>
zAK#$3NQf#AKHbm{79;_$KDBhacoQk)sk%Dv9NaSbzA}PAq@XY*5V6D2|AR@urH6KL
zxF*|^SGu&iYJB>}AxO~0)=u{MF7-dO0PDNV`J14`b#-$ymYNyJ02(@AL#0pPHrG#B
zgX>^52Srac82e~yHcs$aYr8Bi0(s5e6}_tmzEStDy{_f>SZU>U`?Vc<h-)#gAI25Z
z<yozTYJMc`0EXP1HwTE}<(3o9Are%TmJ{63p#LTdSk*f-&5V89VqvP*_91yavAiNk
z;gpfKk(bg713*?s3Yd9t$nJe`a57#xH+OZ1JaVY7sTqXBUE+_9n6h9Z@$YD4IStNT
zNk~YzXBgl83IK%ykO;-!-ca*c>q;VKzOhXkiOc4g;YNh8HzFf|fYXMrwIhrJEVL-*
zNY8Cq;l1jlWE}!t69(g+^TUx@!t2W!5+L^M%CV)5J1GTWbD!buNBV_O(}i2%h6{K6
ztxI015qG9*gJ&RlmV56>0#?VLaFN)-?>C7Rwr40vp!apituyw#?!yc7T_zrz_Z`_@
z#zv)g2_T$Av8vxgMMVYrveySoG=Pke+ApO#SCxA@6wRm&ej{1F7`l4#g1d6!ZR0v?
z<FV)3AYh#9Ts%_mqn@!Fj=SKnypIBhXJ)Q21ykmOrL9qSd&cn<?GlMNo7U+9bBs$E
zN1S1YPaNRB0R6TY+}b85!Y7~4tGoAWi3S6q^>DJ7SiUkBu>;4_OL;<!mb6b|a>mO2
z%1T2@aw!5aecC*T0p1v|%<i^-h(&nu73gUWZ3c9K!a?)I^Zd4+yxjaqOCt0pA#RdD
z0w(wg`Qf)>-im%0eeom25N;QXfS$|)2#Ek#x|LH$geM6RT0MA$Zrgp;ng?eb5}_CV
zSD2!N5GxXX`xPWBDDCH_2|VEma?z=gb0$H*)~~ZEKqL<8{tW45b;P2hcg(6}HG|8V
z&tZ~~k^%wP51@&ubKL6p!=QLyLx5}s%`hj`&Ry+?x8^*1UIP<}vU@H$$xUhU5Gvx?
za|P6Obl_B!0;=@$#YRZo`UE8csG*`lP+cfjqI#Fe?_?sLBA_y4a+!GC6QY9D3gPBk
zB)KixR9y{u;{?)~F8lQ10(bk@<8a3DYoi2{w6})ML(^RG$y-CE={RkQJT`mg?(J!8
z#qS7u4`Flqba2C76G1g&m6$F)s@cp#J~vSmE1|#fny5I?m`+LTOK|uy=(2$n#R~nj
z)~CxEO%K*o(fh_<fPSQ=p|LyNAq<i3vJDdx?YCcAVNXg*!jaqu?KV%)K{l0PpUGfi
zTrpjl=~d7BB{<k{=lq$FCjsJEUGbt|Ev~fc0P{Tw(<28d-)NCeIH##%B&#h1^pood
zcW6TWCX&YV?gw4tRb$UszB&>}E;|slPlXx#NFnv<?m{1scIXW-;0~~ZkTOE238F`a
z?cOcWI|JD+1PSP8drJPK9*rm3jsSg71L(O7v@O6x6Cd=c>UjTv-d{1ofJxq|2ft^A
zvQWD@q2Jc2ts|R2y;!$@@YD~fGntVWDIx;XX#hAdQ8B~OX6NQMhjUT+9agxA-6%K_
zs$dYFL)yhbkGCv$-SXAn_|RW^Y$e9qC?NHI2?{%)uvlt8S()J<fbzvQtKYUp=f@&_
zuy;0?{Hg>{miF4OoORO^0;rH6_XjP1T6~zU4B3&MJ<|uuv*5#3#xf7ZS487skWeC?
z`+7h*%2^n?KDNfZeQ}<lcyN47EhLnb6`FXo0V@6txjpXwrknb|v==HliyisJRR-gj
zBZ1-J>!-;xqwci`UU}*AB){&gHZTyaJ&auc@(^utC3kr=R~7Nz?oq?^JwfV~o}ND3
zz_OwtU%!4p(3i-|%DU1O+^Ux*^^APpGlP-WMt2=>+AAPs0~W`FHpK-X1Q0<&s5EGT
z)!r5FG8Ski3iY+NM%0Q7tN=$R67@?W!pku<2DSZ>hB?)%DqBPohw6-g1kq?rD)ObZ
zE%X+!BHq_K|8|r;1b72Djw}%(G*F)E>{WwMmIiiG)2&GfeF+ZfO&}`@Osq0*jGx4n
z%}q;=Ye7C$>fJkRAVW$og53v6viwMs^Y*Dc<Zes3NT=SQuH9<*2R{N?T-sY5Em94?
zzQEWAolmp2XD4ek06b>qqD{H|0F^vb2Pi&t3m&)~t#yERzqm+MQ(JogLdo*RhSbA_
zAjGl)N5_b#%(@SbMe(1L?Z))&>&)1c0RgRQn}O2h*T52q`%$OfWxpqBfnDhLfYGn=
z?di(=_jR711e~@?w-%Z|fUvM8TL~0qvGgAf*NAoa?I_~_?SHT2u7wP=ZSPOCZRi6%
z-K|t@N629;#uK}wNC4&_{PRq|;M{{BiM8SD*@09pD;D1A$5ZQt7fehc?92YZk2C<D
z^ufg;`y#(kvt&a(zfMeSk3;XRZC&HdQvh!*pM)j5VmYV&mc=WvxoI{ro+#4(-7de4
zRP%wt*RT0Ty8I=xMuX$0wF}nOgwvzqONXsdJ0u&>ueBNG1va%K^eF3huwM`sDQRE3
zyyX|506C6-zH;E%>PR+Gr!eYnJ>+pi5hWZtP^OGf;ar{&CEP;1)^K{rq18U8O?sA4
znQiZ{;G8YcIxzCxMTAxn{U7GPcnU4K3Jn?k@`D-M0z!Xxb;TF^KP|iJkp7A-7qScr
zB0uz|&ip<t4%=Ij@|i4?iuHq=uuihSh>SEMN=~{=p`8Ti0+*MynQz~Yv~_0fkK2nU
z=rHqu7OOM5#*A+BwJV%_CFtH(pGNGsaI?(o%*n7Ofic;s*>$HetGDk>>BIAJ3S_?E
z%am;$2dRuW*)W!K@Srp9;HXi3)8vkCQtFAiGFz4=zKXV2+Fqt%?#LNGwPWMkSExL5
z8=`VMKXm)#P;;@5=Qew|PY3z-AftV7y3FgCJMs&e1Y{)|B@{R+m_TQMbfEJgAx(Wu
z(rD9W;SM{d7r9|e&5*==?s|-c`gEt~*x8z1GaU!ua|ur{VH^ARw5rU+hSGoYJ6%4w
z!rc9?P*?{*e@>8@(9n08U6z!nba5c{Ud~@uiOuW!$&u$}dM>{7CEMNIWzwzrdF*1e
zB9`UJn*u7=EOSt#0pLg!fFJ-O=}5G7HXf~hPQaEEzS&k8GFbM;5`-%bjMmJi<VP)I
z`LX<<G>u`_;xyeYcx<U1h=WNUuwpO#v~LqpON}i1{t}P5DUB2Ma4~UR;E?@Kiq^Sf
zKMf-zYS1+=W6aW;USt1FceFg&y|Jm^Z(NAo`#&M67Yp+T%wfnksiuLFi|`L{L7$&%
zgokaetz~J<=YQl~?@#XgT9v8}xR{IyR4=o08RgpxmxuC1ytF`jH)8GbZlkfi*6FIN
z7;b222wWKKW6_71LBX>2aguuw7x<-WzTU5}kA=tHB!@lGJw8AEyyBV%FM}tt;hG|9
zs{~#@iw%tN`tRDTrUR9r5m8a%UEhq^2p%6_)QFIuZJD~yx3)gBEf&pc4wax<XZ4M{
zg*cp2BmEAF9(>#r&7kTJbWy!cdU9UD%b>V=ucL!NWYF<Xzl$GWzdFnzcaLUL3IYUv
z7%A*<Ik+t#^1eN2T*dCU`d3V{)&R0Gkn;{V6oaH48yEM@m9y<TkVpefm|PcjrW}<g
z4y!H+C?h~TOjzT0+7eHg#@1XvKX?I-8wQnqD%dSDLNy0A(xa!4&tMD@sv*&bA_^%2
z`p%Gd0_0{x9=Bxyg##o>$;ob|Z}pLps}j0tU%mvWAANUpp`MGjDBV=0;K!om`sF`=
zq;tO+cSbW-Z#vNP^7863sl+jBr~2xG3gr<x`j0V7_z3QFgBR_IlkVe)a7ktP3*wd&
zJF|L~Tn-$%#oy4Li642bAA#Z)<dte7bv`R>{ZV`E;Nk>?4%BR6SN`&p>=h^yfv<u$
zS}=CYIq=V)KeKgSkxStN4qEHY??4$3g4mSG>)EzXsB+bBdqXBdaAsVrR>w?=4*+#U
z0<r&U*eW?y=@GC=VzDitG+-G#zm55Q*BsdMS333am@XfF{5RQl)S3s1_SHMBGoJuV
zDuP?MIud|{2CL*dR%X(@$5PAJ6)bfTSs8uPwI>1Ss9|zEX$!*S!mg9cYB$Z&^0FK(
z73dMi3#XL_>)-m%+Gx!01@1^7<TU!UCwg&(ErIYan@^`V>GQESls*23Ia_F|j=KD8
zZjPClt6q?#IND532j@-j8m3EgQQ=>;u-c`*{Go-KM?ss}!6V76yqmJr39UnZZ!z+2
zEW1KPs}hjzT7=tGqdk-OLgm_ds|8vmM1M;E^v<xyBJ-oaEk0)~5W2u8Wo+n5D9^7s
z+6c2E&*zA5@Y(_TSyaxf0SX?L7@(}<cXSnrWzkuwj46~i{=W&wpOz{)T+UR!VVARF
zgJEHng!(^8cw19~336~Mx(zxoQQ^VVu@^t?B-Kvno{X{h>bCjQE}T*@Y(0x*fl{-u
zj32*m@_ZN==8dr7W0Fgh=#OY2hm#oqhAl_E`d)CXZueIR0>iT@vZ+IsK$r(7P;YX!
z7hWh!CSng{U!93P!obJ?1>?A_hV^L@Sj@upu$E6g9*>0VJGpK;_&E`GS=b%eA##MB
zDkA#VK1uxcT9wh9k}QeMj$vOyUz#dxU)ZnqK76I(I4xN#!_2@Cq=@P%UKqRm7D&#g
zt85gji-a#se#L^iw-@O1003b)lI4WZj02D54w<p!06!L+S9~NP0Gs3xm%;$94#eWP
ztc6;KnLMlb;Z;DiQmtGQ=CAvDho_Sv8d?EuW$S7WKA?_GM%JFFt#T|Af!LD`#Ib)>
zzN{0+9V1kjAh#tE`f>Xv8gO@FfV%@aM}y&&p_P7k*Wzn2;P@e5AE1S~rP?>h#c_3S
zNpj>4hydX?5dFmee3dIXH)!BW!uR&by+h%6=k^{#$<Mcs1S{0&Uiq@HT}1vZR?J#N
zhSK4*5*?R;-R3xIg`A#rvJEJnH)nINA|Zc14#oKno&V?qg6_;bah_AUt!E&fy=|?=
z2D<#`j!YNh5r~{_cTN!DaIiOK++T+Vb6X6@46U<*@bS)u*xXIF_S`j;+!I|tAi2J3
zq;Oks)O{+IBeN%A?z3ug@`BlqBSZ1~D4+va@2{?m!j$0P;PQkRdyh`gl>_V|km0kU
zKHW9!561wy$XZQ}{;8=cD_zrUT9{?>9q5CLf{Hp;84)w_xN#yL6yYP=%VeX4+NnU>
ze$;y9wK1KEn)>)0m?%FaPJD6K)jrmRp&2V4mG1;ZV9HMngK7G(H&6OfG3hm!?=s*y
z>^pm0b(&eRi~8lu7n6xIaQtbMnb82`V{NB)WO~Aks6#CX)OEn#`U)U*SgtE+W8oF=
zl+n)wG|BGz35jXG0hY4<FP1WA#b<|5wSUd%H&)zlsy?1k47xtslRrgjEN@_TI#EAq
zs_t6}WMwfvFxh^jeU!ab-yfY0<3GWdBh@G?CKX)xF{4WK+sQ;V;I~BH+m`VD=z8o#
zf}X4+Vm?P}@=DKZbJZf|@8P=<Z8WscktH(owB6#BZJ#IJqtE9+|IXScrgQS<XFIh|
zD1?Fh&cv7r%4-$Elq+L+CEot#-Im|G700fw#+-UYG+<rxjsU8ycMMSTcGQq`gL@)c
zQS#nxbxXhO73PKe2i2QsnAYyqvslxz(?{^$)M3S9b;JaN_u(bNik~ai!(m-Rjw|yt
zmPBrz8)fgkpKJ4F2lc)B;vK#9RqHaZ;amg1pp^mW$EH+Iy-U@J9&XFT6qgSl(mvb1
z*%fhZK~U`|4Re{afJAO-YdbnfJfkMD_PiGr<6McjPyz@qI>9;I*|{<#kf-YP1)Pmw
zy*zmJzgz|J{FZrB*V59`zi59sEK3~1s}M)3O4l$rD@KZppHaTim_+zn)V#dgk5l<T
zY6P^vh6!uCG54jKnAIe}9{n$RHR0!Xdf<<_$A<CSFCd^C2-ow}i@Si;kK;rQZRx_0
zi)gCK>p6Vd*=X((#^=4%#jGGu0SgA9zT7GCA}|23Dh_}a`+X_epGpJl5Ioib_NVm+
zS*$mfDzJFZi^D{lKN%~%@gohxY0qe6qn3XDK0*Ql`r!(53^GW_qI2HF?GNg!&se#u
zV9b_&%V3u{5Z@E5{<F5$zU0RU0wV=Ji~l|lFkJJQqU28$JV?_V!BcZGt1Mn8iJRJ;
zt?fH_{<^|!D1p&|HBncPsX9A9pO~2}+|m3ZfqJLftp^1_lbu(4Cu`l&JxLh+p&1z&
zn(@6g?a~7f{AbS;-tIrMn8*vxHYEeb4s)KLA8Gj2IQ>a76oL74kgH4!sM0s5mc>B9
z^k?$m1&glCd<T$57`rQiR&x?<D53mD>~#_shq!$9)E5H9pKWQ7bY>2~hXmAOczu06
z{pgK*M?c_r%N?gg5mXweJrV3Q()|2GT#M2h@9m$zu|Vq4XM>?#I4z5mrKcxxRIC%8
zlOy?<^pp@xaaM#9Fuy!)2_>HRU~don<n~Dd$wGDSYs*$SfhXVLAu9QI>1Di??&#oV
zH70g>Opw8DtHD3GxbV*1PLRbEe<$?19lq?P;NkHf9Q05D-W9RK*c;F+zp|d0V)T7;
ziYMcE-R%jzQaYE%8Jx#2$H2e<$ly`N^2YUm2K<%%U>>*v4`4It1RugegMYWS4mo0s
zt!Rhf%d3;K>Ix{X%Ba@b9VO5|M%b4Af;M1VGag95Y2Z1SU%z?zv#X2Hl-4wzY{3BH
zS6rOBDTxTF5x^qCV=Mi1#60<q<^AK<uAzvsRfag5Xw7Y77%)k7^iC~gZgPw5IhlM}
zqOo&uFg!_6Ezm6w0<K4dcMLHj03zopetyzWHR*6eQD8h~I)yYeq$pw18$lKDcTUs2
zj=wpF`R&`cz|hdvF>W_;?!POk-<?BkpyoI1&FN~mQeYh+r8hA62E$1bfkKq0($T3J
za6#ADBz}j34W+}*7+lXA@W(wR19PjOtg`v5tO`2rsEMM)Hh)yHVM!Z`JDmiT>_cH%
zrdkWfx&O(TD<Y5bA53|pKBuq~Bwp_bFDvMiIQ-_N*cnaYcdF=?2vT{XcQnDH$XY{>
z!U@RP&_CWfLDmN=y|@_1J}YSlM6~hKW+W<%)?#i7ePF`K*~vG#M?c1)5ml<8)&qLP
zq*W>Fn?Ev`+B&Ko<lL#P3jY4Y|2f(7e%1ik(pnpF0sj@IWq$!B!|t=bo`&}Gk4k)k
ze4I7&>PfTSBrdcrFG)${4c<}yK8i9L?q}Eg=v@g}9z40>qMu4Coe78pp_Yn>2KHgN
z?memrd6I%_?|n$VV91=h^VcXNH_PyK+p7(w61~?5Ndylw+dh`d?)<$p>%^x!)8#(s
zt2g__$_py(W?aMBXGo9v*kFI&vk`zx*6sm=8rNJq1s7KoSas$zbyUEKym;&Lw(r)g
zGT#`$H|C=ykD!<rF);Pw9{^1O1zuaT<t<O+BgKDp)Nu4QgNRk<yxH3MZ27|Lz!PNs
zb<Vq=f`hkVTh6ehX5*8DXatQPLDl};bp?xz%+0m%jU{jh_1X+YkO6+Frnb&*qvQnD
z(t@gkRKODngkSnC<=&l%I8h_t-?Hn<84~g!fb@bA36Y1F8FwGp_X!l}oQ3y&Ow63A
zwk<V*i&WT*Jypb13?s#C&;N)oPt@EEgbR~3=7n1gu<Kd^*xh9aF{d9uV-G=6QE4#_
zc+axlOMQVyj}*N($%)*<1uC~4u1=YGCUcafYs;D*U)VqBxz*?`HI&R*QGbY!uig*k
z1GFv^!1Np5H9zCE)y;l&&laGj;J{S70)?U?NMsTZ4jH6C-@G#K8;ksjaFBKkrGw8(
z`4do>N6On1<xF&ZUlBH>bXRHb8#wK6j(EG!$ayaoy>&H!@A!h|MzS&e)tYKyV<A)>
zIhE0O1!<t7x!AvfJU%brb=jNOmuyjkT$ZpFu@ueLdIX!uLzgp&SdXOdbO9TB|68-K
zXYsmZ!NDaez9~MKl>W>f{9e(;JnN#%NWeOCEG60%0FwsrH;$Bg(XO$|HDylBdAJ;$
zoMZr<6@W>Hir~a*_Z}6VX#)q(583S9$2)g4!FYH6pbeHVxO@)SxWh<P?<fMunpPP#
z9=@-(n(G8F017f*Kx3@5_ib}oOojkvCax)PuF(Zw*uxV6iEGqsr~}upYopk@<H;MN
zP=MVx%$IUX7*ckGJ<LoXlLC4+1XS}r@TQu(-1CY2_61{Ms?)1O>&rSPuK>)2Juz@f
zY>ioe1VW(F(o(btB?NhSR=wbL?OH$O&~v9Dcc+LlQhkPm98U7HS;0#NhqVjH2XMCq
zZuzi;T?erMgQ2K%hl10YntFw~)BMIDNEM7OxJeOoa%Hj{FQkTfvm#t=J^`okKi7bl
z<%|`yjxd}a)wG(adIW?*J}99G{RgLsm#JEnbVe4q_3#5Ah`|+yku^0MJht*=gqqve
zvGz7so`Y`zK#mZ1%+)ou0nkhe{2Q_KpWp6XE3V1{Fns(~57X{^y;wdTTuM%EWhoP*
zuIPE?U-_cYURj&z6xbJFAaM{1J<zm9*3**&z=p$>tdrBR!*%3*^)+#qE8z5-6L``Y
zx&H7Ju6R4EeMBU`JSp>x^m$)bWXJhYF-^nC+6=HKb%Oe&*6{)v0K}V9H}{j0-UCEg
z=Egm=;F9q9^R_^JLydZGZqR@<+dL8v>?=k8TPbx!`6v#`$H4W(@sHw!c*rB<lVwF>
zRBKrTKRHs<)O>D^W{6Rh$gSxcTd^A{*nBQv0t}p~IWDAA%9Tr6L$k45pS`t`hjT;>
zKSQdf<!-59{m2!JcLJqf*lYL%{w%HhY@0;Gj>L8&z;A_jYUfsEA97^RzZ}=6--c)5
z<&-hxRLSw+^`vRYt;S@c_!$px7~02&1nFzCcJB5FPC2;I8XsL8DpX>|Rk?iIG{=|3
zCu@gL55>JoXaDrTkP_v^(!nW*-V0dRbp`W8goYuw3Kk>*by$Q~U&X&wuO~}(wXLfk
z7Rfx#Ci!>|gkm8b;YYz<dJa>{g-A0!$GukM#>PES*;a%{&_hh(+lL^{Is%rpjd{2Z
z(Wq@N;3I+ajK<c{vq!~dbVL6bY)ar-Yi(_9=~AWzB&=LW`wFy;MdO$e<QZ<jm*zX)
zoV~3U1{`b?RueJc@+kJ>!~wUxWL<>Y3zHlIsQfofnpK?zvmnxO!76dDp2F9a@}M>C
z?d@zU+pmu=(^wltZgFTOB|%=Pe;R(rd8PL%Fr>n0N)%LT>A&*}-Lg9Z5X%zq8*8lB
z@q<^>6w1ON{2*=2<`T2BUqU|GJII2Ff4=PI*C_?cJ<nTX7>L%d!NyqWPfpzCE#lk`
z*aXdJ+IKJ4u7x5KtBZhqW886bG`Uj}bE?jZ69ey7P9^FRPG~#Z(4W@o1y+<-0*@Q6
zsVP2!Z1I)Om;}g&=G0!6;^K&R>VZ<RHvrrhif-Za&s%_;)NCZ{ezA*dFvx>?6GbK*
z1=F8V1t9pt$HW3bUymr5w1iS`Qy*95do`}N^x^@<#ISKNXgNv`dPu$oqLj_pX+RXa
zx~~9}{);M`8Kw+16ReD(PEbX<0kdpXuIFSb;RN62+&bbynT7fLZs%;DGl;6mA`Q8h
zJJ~@$5lGm>U~gmKq(ewg605EBF3%z#Vbl*0+d8&WRnvl-1dTdN25Rh2zL_`upr#V(
zPnKQ?M_q)&`~CvXx%-a2I}y`&aI!yufYMM-@4j_PMqFP^VBhN2l6(aFox`jJ3+2iA
zH$j)Z{TXl@1iNdTCaKn5_0p07A;%6UB7l>hUHXDoN5$L&G>>N8rJ3xqMDcLVP`=4X
zmGwgJ7B}O;DT`Ef^#TnK&*=eLS*=`kQfNqs-g#&7dCf#NA}oVb+-R4zoRHr@wC<8B
zr3o<lkzeCF{V>*h=ao@K$mDmy5Me)uFAOk20mvSZwRs&4D1ex|QUY~#bzSRABG6dL
zV0q06Q27$Ta0=HYqZr+pP9}*74hdl+<)sH9GoTg8)^P{OjhPX)Ou)_RFEq^sIVJOZ
zB)A=|?@M&_N8RRt@L5C&8cl&?CA$^|pccK!{nq210}AM4G6`^ICRP;~-hPGxi2Vt=
z(P*5$qkDP&<~Z01I!3)Ue@Lnbo@}o}VL#p+jYqMr_kdeX2-pu9Z59-6L)5pg&sJu~
z!!hT#eOmPvfd%+_U-__5Ys9`U|4iU$V!``oYwN3Uo4rUzb(<pH#@;wPa8=Hvxeo1?
zoAr>x%|S!Y(^TVF)^*tn`=(ci5SKqoZYKRHCez`6%RiW}UiXvmUs&lK!i}C|Kd*H<
z5)ipQ7D0BlK^<(67!jyqx@j_k01(x<B|8<IvY3w=$-95iXKWrFAb|tB<$K!|Lf7QE
zuWMU=!2&w8fZD>XdOe_~SQ7ikKePaKb!8@S2JhPw)Uj0=47X;gvgd6WZjFT<zFxiA
z8tlJ49$-+2JFf#3&R9>Zb<6?1+T*<@GV}ogoFl@mdo(`o{J*i(^Vs}FGslneL#nbk
zeCA7%Uav|w>houwf?L_mDr|2NQW8ollk%I<qZzbB`qQDNlBDSz`>iAG9o&Sg&j!B~
zjJ^HJg02j@xsGs4wiA2m!cs+VgqWv!ZL4Lz=i$J<Q{N?B&Zw;AUoNoOO%T}guP>Fm
zL)q<T*qUtEK0gwaTwdGhpL`ifSkW{P=`CC|$dvX2hlDGx+NLC7AWeue-uP8_L5SAX
zcu#_oHT{5TlMDRn)WYA2{LbLy0~^7lmm9v@+|h8p3H0SINuS`@ylGo)<!n$x7pV4)
zLGH^ZC;;+etoB`k*2Ov~r}3G_V}kRBdA6(_LRp3E_m2y%Xbh_`m-8>F;u<_2+bHaY
zSaC(L@|<Q&$ljbE{n`@>e3W4Yfr^SMMjA=E7gdM9H^k7FA2=Zvs_%FUFflrvy2mLg
zZjRBIn3z=5D@h>?v~tHysP1^-<PkjJv^~e6_m7RmM*@0Jik0j5^+O)ofh&HgFXiPJ
z7%**xmVWEr+XI;9T=M!bY?GkRW<9Ma*<-L)nRnXRRkgl^ZFzTB0W5V1!$Y(EH$mt7
z%LNN@d~OwE8#0uJo&25N2r3rio;UkBG004$_q_K^^ozySy1?t)<;i%f5{R4%HW6^N
zI3{+i_Z^*2Q+9+)u>+YA&=e8yTpwkRufaBN!p?1n-9sZIfTQu}=RQ64Epr)qy25y?
zhgCS)Q#sH-=D-YdLTf!x9KH4~Mf2>kLNz*UxN2K&#`zs)oq1pCRxTIH>JEJxtD|{7
za_D;Hq=u5b3{TrYJ~mRY&-!!M<riYaA&ak%y_T?-*^snZYz)LRN@v5-SH0ynmZwxd
zzm*AB{cLZ(Rc$esn{D}^RApOfp30hBVsnl!$0jv{_x`3%Ir$S=uGXQ&&W4s+qzChS
zzi6FM*dcmcmi^al`x0H%nmVpVx_MKP+k*B-SkN)z{+o@rOV|eNNHZ+f29t~#ZdgvK
zC2?=rTA;MCgZU;fZ0zM)Ja0dTGsVoph1^v4>qU`f;4oP#b)Yb%J_n}OJb*tiL*3Ed
z0J<qN1$G~3LAs`$?o6CqQnc+ug0h)iY%tfZ*-}9xl2Xv*?(tI;-Mzth&~)xIlY|;J
zWxgYP)(12q-@jUVh%nTEl>O~QGX!?iD3o9S()S!QasrPc1%lYL2?!@CW%TGh($LR!
zwE1e8oG&u9vQ<ytFpe2t(R)ymPaox<>A1a&ekJ$Pw<T&#QF)<ntweAwNAoRxRYtKw
z;(?T(`6lL-#=~GTMYJZTs9Q_2aO^YJ>D7`RD}m;es4pms62G`5tmMhGuJSM2N^5)3
z1^u+HK*8ywM%a@F=j&unttf@kSKF3YK)GMU`S)d3d8aRDoZAc-<-3Q^Jq33MzF;Fj
zYx444oRRG9mYWjpS6Pq2*q*Z2_sY8^ta)aatTfZy4g%>>-GUy{u4Dj*-MZ8iFdQMQ
zx<(G5rNr^Ja3HX7m&2~fK^*VgVgXjwZwN|4(3@{=-aGu$O>@i8&=(+oI6UF?`4af`
z8ASZF#9-AP@Ji-0Ra6fTJ)VJTO5{%KCrE0`>MTVA@7Ua|pMg9w{4Xc2k2_m$KUadp
z27Ti_p1C<GHwnqXUK2gW#!sTri(i~i{=r39k<Je1sM>i~1_BbaAVop>1>0C8VOgXm
zYy8@>N_A1eijH43;~DiAYMxYRaa}ll*mb69fXW=cGJ=;Nin_EJRBEsD>budjqwW8=
zqKaZge!>wWPoubhlqVM}BP>Pvg&Cih4!>$EV|Zm<@9M81K#S-j2>k+_<n9P(wxcHC
znLTThB{~#Imh->gFRvpO%?bMQMSuRf7UV9x`Sp~)I9CBArB!YDZEUWS<8YcX#l`-H
zHbwF;-E{|tl?n*mafdl?wye#>d98c{txlA@yc3g4FAAI<ozQ)^(34#^x}jjxR-8-_
zQC)B<qH65P#Tzc==O6P<W6d{&x^^^uP1ho=Qj2Obw3wTMX}at}^DhfT70|~tAO0xl
zrt@t&rp7rbAn_3u4DwQe+*<n&;Yh^D&E(i`E<o12#^)i#qH5(7Mox#0JtZkt|7Ok<
z$FuL;dI}u%r)eVXnK%#28L7VGBA3@I)Ki*WT8ww6)1e^4%_vphT#D+sGgdKWKI0it
zQZM{@a#1>FAGAhq%<XX2P0m?(;aRAVqoBfY*t`~Ou3Z(}2RSLc;J$C+m9J4f&lL6A
znrf!?)SCXumhoc&o7+5Ew44m=6G+xHuN8~r7Ke;vvjoiQbjVplo<GpIgVD!|9DZx`
z=RX)X|Ms(TP(6qVYl)f5=+?x4m*0AO0e{kx6QDXwOff``Eavu_TQD+j&)LfK<P_I(
zTvhV$sOupl@0K5WsW?bi@Ya|}t>&hD1NyS^h1%9hw7a7uSQ-DxT+5fB5=-S2AA<hA
z>$G&ERy4j~_P_SZ->U_&YXY<7|03C_TK`0k1g|Emv*q`ZtW~6T#APja#Zom7&nAq_
z?{ACyEIsMk{1!=A=q+lu^U_cIDzoS)^CxTMgfKahD!SToq*iJ!OSFCJFxlZ?eNqDd
zHx+5z#-qd&;U}-FdLQj&7W;?5BQKM>;Tou6!)*da$LBC%Yl7Q>dAE)Zr6jNGY7f=M
zGZxJlaOWknb_@m!!LsNRW{R)K6b-(<NEE(~Xq&=VT4)r0555h`ZB&`>HmXmR<&Aj=
zCl~Ep1+0wB!FP6dq|1!1F1#UubMym3BhKmxsisEwAzWL@-FQ5?aIJQpLdRb@RUc&q
zwOVr&$nO(7jfzYUp-T)%-(fv?{cm4(yKD*-_rWiohsKy~I$oK3y4+O1Kx^ryx7@GQ
ztp0Og-Mq~C3(MvB$>|^3)N3qk>bajm{PdX{L>r>@g-;|CF*CBtwbYXGtYnNOU%Fwp
zM~}z6ML)>E_wQ29pHaaYqr=;wp#UdU>GMZOYcE-UZqZLry`&?vt}^jdx!|cvz4#UR
zlG6aaDBhWK_@~37v!Gpx8?UbLtqb3KA6<X{9oXHs1u6>aM@akUd9dYG!vRA}IBJSf
z><^u==&6ZTi^uH|YmKfK=TJSDr;DfYXNEE=5bv5z8>w%^NNj@U6cCXcGNJObb-F#i
zyg}p)F(=-lKknw)2biYeV)5rA&B#Ib#cTH_SFi4l6*CMcIB+K<C_5Bw-rR83UIn~B
z`~0t8fd>J<>>s>-Kk7=(m=l48R8sBDt7cUE07)G6&GN0^g7^<^qQaZL^X0IPLGHm%
z<ji;U-CAK(tUTmuk+=i9?&zw?s*ts&W&n!r%@w!M5gn}7x*&e-6{agxy>340s76IA
zfbW8{@G!D9B%z2wsQk#TR~GtlRWsJmZG82-FD5nJr3AC5EM|FXPLZ;kDAWT_=;H^6
z2Lh<m2P^#|X*2U*w$ULzQnJ+VekwmRK>zJ<l`3KE!LJ@&Iiuj6ZLTcllwJB7m#aRw
zoc#WQ@FYP9mU2yaXFFYjXF;#LuJ4TLTyP&Z@xI!2Gdm3fd3A3MhQyFBcm#`>B-}%m
zTtan%{`zR}IU2X*V*B;XV$7`T#Rk;Kxaq^jqgl=~R5Xr<%LmCKqO!0IS{4dE!gB2O
z<;Fwx2%-qTH@S?1#<m@aw9udP?S*tQaREu4p5bgZCbL40GlC!Lmg9C!l*Ni{53N^Z
z%URkcWcDOwp%_h<r=;i)G0u0tNwRU464<7=KDmQjfBwc_Y+2i)r267_2`8iZ(_O|J
zvS}-3SF@YBlzrbp>ZmLxiRKJ)a<wM-a@m;KZ}N%j=Scg7Ph8SF<}(F~CRZ`<R0h9Y
zy!WV7dT}HEf1Pdzj4!KT6<oia-k16q_|QD~?TF43r1Qh1`jXR0OTNJp%%fqMgQ;}w
zgKQl|WF!(BTC$t-fX<NapLfxoxC;yWSR-peNvb7+@bmV1=o=Hqr)mnd$gruS#~hR#
z2fe!@=~ekCF8wzQCNFUfJ^Ju)XnNZvvnQ5SJP5OX<GEYS@mwhsFv3vl2Y|RS#Q6NW
zVCG=7UjzxMR|3Pk>OkK}+;};L5Zc1Zb0<~0RNxiEb!@%$B>OAWPMKcVA6L25C3x6e
z+}Q)Vi5aiCQ*>|O1nj_NsUGiZQ;l=y9COU{g3=o58+)swsgKUujJG96`W45#KX*yG
z)uY~ip4|}5f^*JA=WGallCpfvAkgFQN#rbp6YA=`$NJ}kAjPOxNXUK?g&^{Wf)gaG
ze(zqXxZuOE47M*XSAOH@d&~uVeX(hAfBr{;paZ+h17+54UMlPX>OqD>mR59+Men^b
zkm4xny5a&8cV2Qxx?tcoEji`)?0)ZI^vZjI9`&ALqtBNe6D|B3<n(m-yI<Wtwr(XV
z9et<o%(y0&EBY2SqgtA4;{(S(ay89D)@oyAS%|v%mPnj>X>mcr_Os^Npr&=9+5J)?
z^+}QU+vBlizp}noNKMbe{Up;Bo=5+-yW6p_d!9XbO;?D48A-1Gk+%4f6KtYE<Go*A
zwhQ->G`=>WmA00i?}TXId;MztRW|Ki|1=!wV_ukyMrbP=abIt`DRuA99?9E>Xvld2
z4EwRd14u|!<2FAFe(-C=IX^mFMz_m@`=<6ZrI<(<FPD-wBO_VmP6ZNU*dF{!HiICe
zy^=Sjp)4HQaWBK$R@IZ1z^P!K{hm-qjQgZV$~S1Q_gc4!v2YLbC^cgsBe%Gf_PVTq
zk)1|>9NFJFUKU;c%{w!O6pfp`XM&$UzRo5^TJ$HruRt7=RV?w&jA-fe^RIXjq5Ypu
z%fI0EoCQlbK!r(cve%pD#y|fW<U;y50&j^}6OMbP{<)I&_ESR~VF^Lu<V1~pt|qdi
zI<4Cqk8gP)*#7*jci9F+FhL;&bMZ$qRX1%9!?<pp367*xRoWh%U}p4o4T&J8YJ)b)
z@H>sh5<TAwC^uP9!rqg@fI3m}7s$+S93l&vZoTblzUPpvGMKtHa0ZWPLR0Lr-$DCW
z*aBW9m7(w*B&o^#+x!G7y*A(nk3LbTAZv4(5b^Epl$)(zyypm9%1CA#xgFILu*lkW
z)}VCSUOFNp9<PbCRmzY(CT{}N#HWj|+8}|S(b~WJ{U5fzI;g6s?e_qO?nd$uBGMor
zNOwv|ceiwRhcuGXCEX$2CEeX1-Q94vzTfx9z3-jDnd3Nvu=evj>sM=SzPlql>ic|0
zX=^z`_DH`2`<Cxfg6uI?q3ThIz7!x5R2u@O1nup@<I*$4)YKN+o*Ubw)6%s-blTM`
zOjOBkuNd6ea9|Yn{Wy^#wpa~#j$BemX+kN||IzduOEpje)&+we3F~vH+z=<bYFH@s
zNmCvV6y_9vTC;V)U0_O>N8+B?i(wgym~0%h5HT~9gY<W7YZo-CD!lPmdCqCwNqG6(
zz);Dg{KzHwT0v=rT51u3d&GMk=d;~+Yu}P4X4i5!SHYm@iWefGVSSKqauz3#%QYRy
zH-x{9EYi!VZ66k@q(Cb~dXiB%j~z+-M)ruO2J<vi2YI(L=6rRMjDpGJ6JNPIdIiaA
zh};Z49I|)S6IU{d$&>M`ja`FVMUqv;r+uqWVy%Tf)cUWXDpo8B!2;n$AB^CNJF)VL
z@{9xDKW4}3)<ZrI<gNP@We5(bDl4RRd3@ulziMge)A8+JiR8K7uFkG$dl_KJKDht?
z^cqNk8&MFW2Q~r?Q%%_vH^n`bncqtSqP(OW&h`E+$oG4^TZ8*z0nd*_6M7hsO!$cS
znjRUPcEGTG6bD&Xb?FcksA!|8!EjU+^mqMQ6mQ@Lm*fmAj@abfo2R0frIUyI4@RYi
zB}p%gy%#CczH*nVvCQr;7b8CwTdvt>XKHYyU!cA)mx;P3j2auyFi2p5LWcZy+Tg%M
z!sFwL;SU)f3QvnfzuH0z$!z$7hGl5{H0`&l(xW#6!amv+x}kTCY;<$Xw?d#WU|}9>
zxp9+Z>&QgM^zcpI#^*5qBJkjHNtjZ0DW}HA>1s6+E4?8@qmz8!n>*wa32UAt@SRG@
zMFlcU9L(N0w{A-J;=7kcka<+%P|;hD#~YCoXaH2TUG*^mJ=_Pp0;YaSX`dhj>Ad3h
zkd#|Da6ZU3%kCo@+ex4A5Ov83yW7XD#g<eklxrUudE)Zlt(f(rcVYcIqfMVdzMFYp
z<h;ff-$yV759o<y=E93>qBB2#=PHCh$h^$*aU2zTb(vK=s_tX3P;}F;)}bdBB*cuc
zhjs<7W!8PItSYRq;E$M9{b?2q`8?4_b6AorvT>*U-_42W@0>`9;4klA)%Ud4&9wOv
zgl=GZ%<&i2EZ3h2dV0?u@730A6{SaeOmZ!wJy~p@>SLg~TFe=SiI(y|^PSK(!nbQa
zgW=MhpWMb2LB1}sFX-*s*I;*ekMYI1P098~cghppGl)MLe0Ev;2=+_#^Vo*v&$W)v
zLG?L9tKSNo`8W=Knpq+CS5}IYKxRlR=kL9!=$3Dk1NuZ;cE_5gY}PMDUAAW5=yrDI
zuSlSd_24R6cf3<R-EiEsb407{G^o^bn^gv$x}d@nF;$3hmP@7hgvp!${Dq;(=HzgR
zZJ{~-;@1%^@20oF;vaXs-7nF{`aHkZ;B<wnG~CC9=Q*f={TroMRE^SZZrMX0C-UyF
z&GgJ}+g$=wDu#TLcIgzK&)9`;vihyx<q6BzS5FZGfRBD)M4#1X&R>}eU<BV8z24iz
zCzO3mb+wFEB%8Fm(@J=IvW&G`@Xf4EH}7RzIEN-(#_F?WbaUGmTFA#H5dZ2Oh|uE@
zf<#e1_Dak+)P!{Tg|YK>P)8`Kl>|P;dGkX#6L}X_WNBeh;Sv4iA0}Bf5NKYp9oM>k
zsQrNz9cFGw;Z<hzMIUi8{)DT{^4nsqC+H81=uB|edCG9p9_IS{Z!Pi1v=->fBmpN6
z7O==|{C5{0a>d?tD9%zxS$T<{EL?BTN*rJbVf`1$0HggwP+2W`E6a2Kr{zAsu~lZ&
zgKSzn&_P)vv%w+!PvyEV*(In2a~tg;x)&@@2NSRE)~6mWW~P({O9ME+ytMA2_==tc
zcGN^4C6^yZU)@fI7NZ0~<1FJ*nbuF)nXk~Zq&^Gpj+PEj6O<>{Trx{QffiDo4~d=I
zMKe~_<<m$iDmW1)jo#ub?=V1GiC*kd-|=(DCL&!1b$j7)UtvIB%U6K*<18I+!m}O-
zYK>f~tk<WzFbK!7YEykdGVtH3q}~<d)DD=}YSyXyw0dMYAKYtRBERA!MO|&UZ~N3M
zra^-kB-S?;Do?@4iN@r!^BFCbGBMGJUcB->c*(MUJ$KNFbjZ1YWbD)jsaNuCa=Mbg
zo&&-I$#W%_m8<QFDuxA`@S0w<c!$2rf?b0-|0HE~3|3;fhV;*kE+n7lp7!y1ZpW(v
zBI{D#b1b}k2Jsjcf+GDld)4*bC&V4u`MfleZQvU0U5_3$ya3pHyAMz(Br7EoG`Sdq
zMOuolGG?!LOJ~jUk`BN2ui|O(755#|o`;Pr^Eg*QP^fz#5gm=|Z3TPt9mK4*QuxY5
zbw2hio8a?8CWqzyQl|aQ|6)SP0uuD%7~oDJ%VQ10TfB01D?#;?o<XLiOi^h?mS75I
zH*Z<>gkX@!rI|wFs^G%=URTjIE<$6~XOpAywJx^j&1}>2%?(qpE|+O9e-bAmFRToP
zK8D7sUq`xXnm0^jo!{$6Y)ac_`gKnA@Ly_g@%i5Jx9;w;&b>NIFg6{zpd72!kDVgS
zR?WOObDG4k9*E@7Of{H9kOs@Z)kHTIvD|}v-HMRMxj8AYcvJiKox6;fDc`f<;*z}M
zop=stl?WdekW%|(5U_;_5S#CR?m?j3&OeqS*`K6hS0}D{+4)$2QUEaVm##^Dc6Htz
z=ZuBW?|-D_)0D#M-s$*)5rfWa^f}bz*EGYMP6h$QRo`3X`>^|U_|FkpZ}Hvg8O{!H
zr=-t|{Q`nO%nlicg<qmKW~R-I)3nQU4u_x)swj~LlT}$Y+tI^acDxVDK?yF-Z{lq2
zzkK8W{^AUYQHz3vhLdh@>m~L`EluW<Jqu`p`>Ygsf7*Mu1v%^fNL)(@hR7=p<y7gF
zw{VQk(H6JCBWPB1Fxjq?d~A9`5s;@rfR>6&(zm`am?!p{&vgcu$h~xE$m?k%w>__#
zSa$Q;tg)n-<c-&ux7FNX4$IKrR1sMt!hi_CFpOi3LRC+C4xzj5f{Sk(iq<bf5u+{x
z>y{SBxyHX?I3y42X1Z5CXo}WvaivVr`B6!(_JI&+EcyLM{hUQKa%1282p=4cOXl_L
z*&S_))gDR~qVH_?y1vD{9+Q|iIwE6aN$|1HFZ?XGkc(S~NZ7@kAaG*eIz=;=)I0-S
zRN<2xhI;ZbHXri2h}fC`EFm|Mt@6R1z(k}(M(zJyD@dpV`0v1JC`2?`QMI&7vm{Y7
z#>a)_4W$=Qkk8?6Urn$y_UlRxo57hq;MGqP;z)FitdCS0G7UC=b3K-~ihQBpWy;S&
zg*zwLj7kDyb+;S)j%9sMktt+I9dFPdY5RNt@L!uuZOu$ud`LY>4+qz7_CMOtnJ&HO
zcZNGjc|>hkW^7TvLAqf-5;L?RIU0r1;<|QUR<k{nKunvte&4^Q5dHpFRZaGHDt)<U
zlhWU9ctGFgwiOV<+SLGbdS0{rM}h5%_ai~pi^2%E-E+5Ll5t!vh7SwwTKG4+A<vET
zZPk(73%I!J4T9;UU1NUI>+9R_ev~nm0@?}xP0s26!O~@_R}vXj$!z~Mk};k_v5!Fj
z_A&~1ON=CvnM07L82Gc`szX%H`>pvtESsnvCB7#GGyfV)p%CZ-8ZGq`7%fdwY>AtP
zgUH?T{21M)o2lLl+t@0kRwfF`k4pvGoY*a6ilhJpg0&N^j)w;S5!oi6$N7VpNvaEm
zf_9#^>Ra4;6?ED)pHGLu07IxbRc2sk%Z>fa;*;Ni^-Q0~(Tx8Nuc$ko33m+M0BxOZ
zn3r7HlU!N!LLa5%yB7s~w*gdIL};h*7HG^ow{6v%0EI*i!pH~U4W^Pq?|vJ!+Oj<v
zh!)>5-o30l23?|N3;PzRJrqXIDPIVWsScU-ll+(Z)iW>fk4-Qo_dnfJ>1h{B%RADW
ze#lk#$1p~|khp##M!t-Y(7~MF>$O1A|MW1xACsUQy(h-io*5%va?u2!yCS-cBaLm+
znc(+?SV}!2Iyu<tguxhw(lg?f-0;lr8o>YxhZQ82qC%purn#dhZM;glTPf!6q)GvS
zo=3ew0`6+mz_{w4uASdki+3)Hw)*Mz9z<Y^1_E_4#D=0q-QH*=2D!ZZ)wlX-+EE!Y
zNf=q;z>f@?S8hiP``rheBFTCAvHYBCCPQvfNOl$9jpbI<Ch&x8_|Vxhcg;9)e#EDG
zeLY4X;e{JVbJwdFHQO9z?7}*y8Y2DQRj~z2(k+Dnw!;e&)zGG3mi3EoLKx<jk)G+*
zt;JisCca76%<GlqJkZ|e6g84rW0!f{k^g>ZYdni!g6!%@q!hYw;YBZkxST^&#`e``
z>1&y*^_pUX$BEb7@-VmUb?xEA;!;GzI5<#~V&l8k-I5=F=Z3QYs4~|X8+Z{U?<8f-
z*;2w-R#OcYW}-x%sL7`5kp2RinUs=KV(!qYAA&TFx92{YzQfgqcqWgpj(ENMHUZ2;
zvqkgaM{-^YqN+~BJ(sHu+e@8xwn3p^z7OFK;@i$xH*y`D6p4G1A;O<rNEETCiywNC
zh<=8S%@OZD!i;O{mg#lg!s~jQOz(ls2iM*bUT?o~S*GB_T__xed%yL64`N_0ClmbJ
z_gEtG)1-vSJDO$qNOL&kA`;;Q^gM>kD#kU$chwtq*-BTP-Fr<2gBRRkU+g*vKc?`R
zQ?0KkM_C06J8s757Mu?5WVKnoS>nyF?V>x6T4XRgDC@^<%<QUdfHo4_&RSat;l1WQ
z8y%=CB;Z5B0WHEWo?U)k>qfn=hcNxZ0J^O3u&6h#**l29vQ#|cC)?s^FnSaG`Qvf)
zX1+fY#m7%%fNFO)PIcw%_`!alA_0JVsF{P0JSaI(k3{v|`_44VnpKg7K8&?58y>SL
zyoqc*rohP{So7honXo^uQ?P8d35P?bQ3|@GZ<AC=^M4;|Ax*|3RJNsfM+kbk6=yfM
z0TmR7FP;1*)?6P!8o}@FGKysb;w<yfSsg4~4T2yvm83u0laB-z++$j$(_+Xgk#E^l
zl%Fj3Crb~#!)iIlI)u$ML5I+Po89J9K-&g_!9@(u2eh9qGUB$57^}}Oc#cZZrRi#2
zBgxM{%q7xE&^xJewneyaS{;d3P`$!#5|>pY=HJJ<J|B{$Bi|wd-|k;SLj*9B*Anst
zB$api)I4_Zi7GFn(Gmm03<tD$9hE4U>k#Sy9mRnI$%pqIc#T7%($EH$W`wQ9|7HPl
z_UOF3{=h?@NzR1Kt6j&s#GGE+c2scif5JL>7glso+A-DabNXScWockZ)@$qyPu1a^
zjx!I}nf}ZpA0P48#c=MmCd^XIsd>$ich1jU{l7pR07zRo^(6H7;YVA0u|E{1Y<s-l
z3xts!K!ib=SFRsmibOjfR1<vOiZc;<6j#*hQ3!3X(1QLs5!M2YWA<6eOPs;Nutgik
zYLDOpPjhL}w5l6_eN|aS6Dmmv=2ZD#O<EwZ2aeoZgN;J58{-FQ@b77P0tPY1ncL2Z
zQxI5yEsU7}Oi)IhTndMfgCGE%hslivikksD#2|J~s7QPPgP}rYkOTfWcbmK9=H?Tn
z&+wX6?2CyT<GZIkzAIh?vzUw%Q~c`(&etp(PXFXI0vU>(6+V&$=`Z?+@!_9E1AK?t
z6vHa-AjDn;(4$cJNaeq~w)wSuUE1q^{0M<C8vSb>s9!iTb6*(y-K+UhkKzaK@9`GZ
zSs7-V_@+`+FbR=&1}(Qd%W@8ytu2wvVI#M_^G^gkmcfk3dhuDs$ok)8=SOKC%BL1$
ztyQ^lzOckNY~H<-Cn(|L_I#i3r%TwLxQ_W!_)xekXlZZl+pE|4<HSPADcykV^nKy9
zWSN?iO`*>d<vY>WGp-8y-;?*XTjt!j?eWj!zbiDee#VQRwJYggT`S*ozkca{lkvcM
zS&5`bKvqiA``B?%f?0?$axQ!E2l45%Brqr$F(WCk3i>IEnBfqo3^8%^{g(EHmiA?V
zWp5z1P8JsJ*%o{F<G}rvlZ3GWE{)*G#f{X<wB3bD(0}5qfP^PTgb55d;M8G4&z_uz
z3ujjT1D0tIgpGsXmo+ybdVS7|JThT)E$Z>G07e{fitv9X_Ac2KsyN0jeCLFq1Z`M%
zKL3%Rt38d0mr078=gp>)$j=b{rA)LOdub9-*1iOAa^I5$seH6=)rT|_p&rqo3sOZ4
z?1Tjkzi+=32ngMl+h2%C;a%;{HA9ZysVLCBgABEO4BIwi$S<Kkxcn7MIyI~^K`edH
z+R=QOk>jSVZ%88(gBZF#lX>*%F<<{NKSQjOAUZ(m=4t1fJz@JN^E+3$f!kQ(#9(Fz
zDk_OP-Gz3XmFWxaEbH7Cg=;(3tLO*b5QWZD|I^-{2IID~yNi;YiF4nXy2E54FXdJE
zwtCv@Z8u4poi|oq*E~mWw&W-J?q*aSQarxH$?N(<LJ`F<V2v1M#Ab7FsPOu-wvFJA
zyaH^wSD2GgDuYuoiAliq(n3B<APw2t+;dm%l<2zbiW$7K2|)#O{ZI*XaYr#u0|!dX
zSOWj?2EDOdCAK#)@&w^|Ih=vL@VPIx$QI5VITo6{3<Q{QNdM28ll@}kUVXWtM!DgV
zPbQ`fm&+hQ-}S|2=O*IOC#mB#<6ikTy?~fv(D>(vUGilkbYLHB_Mr@u^UF2!B5f1T
z`TLqpmaPXZk^JB;mi4Y5t&#JunXJG!1A*M=J}}=R2e}?*NA8uAeY#;M=O?6V<0sS1
z<O(e=bIM@*`yof}vmg6pSkkH1$9Nwn>I=p(0SOrlxTfR6c~`g)9VXK;FR0(mJlJj}
ztQf>3fuoDo#CNBXY@}8sVR+!-r(vZ(jM5=sMEDoQ;56x}aqYE`<1tb&2>87XPppDM
z$HM))cZ7QTG>AQqai~7>S~BAN?bjYrbZO2!%lE35yy~LO9lr+J&4w?u(Mz4YPS{;w
zg@@f~e_<9>1}Mg{EN(mVHV>XtBQDErD}7Cs@<(j*Zwx|{aiEoY_mlavF{GLJg=Bz-
zYktR#cKGd6%$jSG4ZB(lPD&WWkmkU{;{0V_)vo#(!DEiKa7LJanqMY2F5f5qNfF(z
z#flBtl!vG`O7}Y4$Qd5c9rrV8W?GPTJ!Gr;%G>@UNpOCy%9wZnn-e#NQ1<<5qr7!*
z)8On&&$j^@2V44Rn#PDhMsO#`s5Zf+W7}3gYbdIrg$BVNwCjsJVtib<IuqLD^||sE
zg|!p`L)7l>)pX6&|L6yeq;-WQ;&)A<{vSGy(>GZbmg#bfcjglkbdmx>f+)bSg@giI
zosf|Qfe^O8g1sg=ZT)OEP(d29&Jj*E7~qd=A^$-Uqx^eBQIJvHG#J^LyR#mQt6x{$
z+qRE^E*bls@y6yDsL;!dzc7Yzz6wpCDk}VHL!vH$nyN_me|w9+75T{T_b2i1?kL^P
zg&!%dS#|v*03oW%VCPy9GyRR96aQkqnd-NN%+c=iTe^uQR>v!QF>|aP?{d()k4m{F
zE|dl}lq{E1iW`;9wnxWE>MzSflPtTJu$)&?Zx(5rV|+w8{_du8?JwkM&iF_bBZ8d?
zT%0$f=8h^Zlr~OyUBJ!q6nwcep+i7fqNT!cXK+Wv%tMA-%xOj9pdNK{Nbdf(ULv#V
z=F7<8*0F{5u{|qiCzXvAn=U?-*Wyj!4(_5V)|CyJ=souw82r)^6a{w-pAr=|zWFZZ
zKXF3apW8@)h|M--muufr@J{Ru-Bb&?t?m4q!8G=ul}89Nt-0foMqk5C-%0fre5R)|
zJ1X6G^{9gyfdR(r=#&!dResuS6!vt|aR0H_EADOGhI%qu^8|la9oA|dY+c<Q-e`r_
zhYOyLAKMo3Kb3WRkK(f0WQcMz*ntW$3^T)tt!IT%M^=QSpzM{O2De&be4E;W2nhK!
zlWddCZQgMw?3o{2j#x4a;DAGOp!{isa6}NAR;}!*22gL$a$=W`{fCZ)9Ms`c<Z3-8
zfoc;QHGUI1fD|%8FZA8FXTM5<LAFCL8m54+sB-{yCifx$;+oAR^3RpGdl6i-1>4!_
zA+cuFt25d<p*00>0o7OyuJoNS=-BDM&8e``+gttGadl{qnSm2l-b9MC5)<w>3iZ|f
zYo>VZ?w*5Qr}l?fR&J;|4??H=rrX}F!Ugtf7@fN_SvTP4&&th*|J=VQ-&}$DD+<cw
zCG4}48SjE$R0=7`_YWN7;|Y&QUSM`v4t68mq(V&%6fh^?KxUsN{0?6lmgD$y*)Yjj
zR9c>owfBk-VL@O~HD)K#PiU>)Qi{nEX=HyD3WP3nW53vp(3*34^Y5xExKP1~UfSOF
z6wD`VRu%{puA+MGi)!5b1*ZqS;JijXI7{O8;sT>znHTaaiy>8$bj*DL%lJ+{t-Ha|
z0#bq<TX7#T{E+Cr7;9Ax;Tvt!eXDbIW<Y+*&V{;0uSrJSCu5k1GayxYdlf(Qn(?Of
zw{&(VOksr$rUnz54H4n>3>P)*8kt2OTMlQMY7x_|ra}BQNuy~r_eoLKA*VjDl{iG3
zVf-!pi;CYuTU8vK@M)p4h=L+g2*l5_#6AVk{i{W13+#dzq6DHaA_16i0s2}`SYS*z
zC|`uMXY33rNn2^_hICng?<-lCh;RRL2MHMHqnKzVh2OQ934n&lssEG>c3fH7+a9e*
z#g~=jYzc+h`R!o*W1>Cx@Lt`RJ-tD>Yp}VZd^QZ^`Pr_i!Ymc79^;hpFuoZZBx^E)
za0vdsd&3Ayr)FoEvFs$4Fdz|A@jbjDr;PoZ#)?IakY(I`wdXBSvrns0J8{RHH3f)h
zso_7?*!TQ_t%6H>5+jiyBKb%H<ZFhdkHkUFIT@x>p-p2&0#jKRJ<Y_*i}H)HS)2wQ
zgetDVV)YrXD^6%!hs*wn-tI-{FP3JszoP&82zS947wvqk>Li#Z4C=i|*3`|eiz=_O
z9cxXl_#xH0!WCJ0Nf$;seL*Mb2yN)-FVtqoe8C@l>Zc;$G{-6i@%)K<!REf3o5>4{
z8oSKoM;Y1TIdVRn1}3f%P~mHiyo&ZZAj>3<EAvspP-{DvQF(=jSG>xLop}BJJg$U}
zoX4VcF!bDqkk_W6FwByppgRkrRYQ#0t_DY4+*Ul17T4L{X2|6Sj9EtrA^1<lKwm9g
z^|)sa$#WS;-k3BrB)g^w9$tsf??Jds_!}$~T!7sje|MpaGy;wwh8_kAb22KkzS$gX
z(hzLH(6_!^D>I%&xZK{*93lr6V@cXBEFtp7w=&upQC*hRcAG1-X=<vlbC5^$L2x!a
zfDu?&5ORFu)z2l~M~TbGQu*i7GsC{wsBYFfBoqN&0C|93mt&$z8Tr>T5rX^o&?V&z
z$pGXiz!qxTEEZ)DDS;+x<IsMfP=pn-s<io_=>ReZU9sJ6mBD|cFm~p_y2y=f<-`@8
zlk3gEk79L+O|$c2%-7|H#Z9%aGqL$l?80WSp&I5H=Gf>JoqKJKjQ}k`xP(ml&&_u2
zoD5_(!t}IU)Sy7YjSXu@_q<n5SBOj~kjJB`WUvc^dJ0ftqd&m3xNr5`{Yts&PW#PK
zDS+KMAr2ketNkk+#F7BNWl8gzMn)`i0Q{wz4P_$9<Sj0k2*vJODRF-E(LGZ|hzsF8
z&&6t;%!pGuW{Ui)%+8B`9qbrWtT(<^uO$zTI=a~_xY!Mc;^{a;?)ti2u{PUqcyH18
zvyQHy`AdYI*Nj!+5$(Gg7EGJBz%p4Ol@AKOq|n!<eHFKn=AV?pB5zzNoOgtS*JTVS
z8$ttNz+#H!V#4K`ci{z3V}OCbAmmQ`QD?U2B%Z(Bv^(-R=bYSqo3j^OgdmL)3_<v<
zo*3LRqt1DEfta@HYLc_^Zq(2WZGxDBI{0dmYPj(&StpB%dKv*wt)iIg7X()Pe7%!h
zB-^vPIL>Q9RH_VIS>UJI^bcv<0QT?(*COumi0MW|iOkGE0G@$-3u~E0Ohwmwng)H3
zrM?G79avNS5$!Z%cXv(-&%}cPWoXY6|H?j#NrpJip_A+r$6^gCi@8eC2<4O&E~-Qq
zTU}$IQk35xf00p7?86!QnM9Rku=VEX=@1hnaIg%PTh?obxycahk&EmqLbm{+980{x
zA_B*w9&^m8uSA;DeZb5h-aKcoV#Z?(Ap)o|gc0R`WQy`Juc&JyUi}B58N-&i!o-R^
z!*vEB!%nUH+jo4~Fw&#lYZ++>ghS87s2_gu4fJwbjQpfemLIHOcpBg0jwY4*03U+6
zo%^A+FW7+a?x%iTU@(6%UvaeQTk^zPo~zH@1gFF+rOF(-&<B|{*}FMD@x+RFM*C^$
z#X|4P5CnVCBcGaJHKg3YuhO_;y1K^vPfU%vI*aCB->d!-tCa2HrS&4FDW(y7u6F@Z
z4}gCZ0dMCvk?iF_dgO(6#dbyEWK98)1Xd|z<&_go{B^vFQY;QpEC4fylTREu5`Gm~
zjIkbBb{Asd%>K8{zU)xzos_{MMAkw3`{oekQyA*AqP^TwEz*8^x9GIV<G+J3LT+FH
zpe?C(t-zz+_sed>+0^l#RTxFRi1SbVUKy}|g9n?NfFSV~uhDX3c1|n*pn3j6PVrqx
z@6-X}^O^dHH-Pg+W!-=a#Cf&&p8k19i@vdfpn$JfP{I)-%=)*ehcf=b4LcMlW$4qo
zb0f=bco64BpLt-9Mr<=r<dFBQzY&g3T!3&zhKQxxyPO(IOdKo0?g<r>hZkpVto(k6
zl`Kz$poz?@(x^lpINrw|E=bihw<H@~n|&p@iFU|zci<pBlBUU<7H>^6g3>0Ql9L(%
z!2P!NUUg#%H9hyJ|A{S4s1ff@T9`dc6EXOGA9Vka)FC;3mMpB5qZ!u)Rq+{6zS>!E
z?O>xBC3N_vSd${NT_f#sXV{_G8tjRpGZ8wQTLWW}8)?F_$1t9JiY-(B^u=QpI^t^n
z$+I;oS|`fYK|f_9J}zUW+2(^=4WH(ZYxXhvA=Y@9TuoUjX4-aEi?sbacWa^SP&Yry
z(92B+E6h!a8cx-VeX--Uw?h$dmjw<0J6TX>U^sUI9YA5b7=k#=k00EA>!gMCZIwyT
z$p-4-$oo{na%XabHIqnk%zOuof+zF>Az|3Z7lq8Ba0J7Gwr{j;o3#qp=KNoe?+E}o
zLc#Nr4J@hwU@86H+ue=nkUGvgsW)0^^}qBtbAtXAz$OM5Drs3WqLvGB@!K1!k<i|-
z(*%QVIhPLef~{R(Ct;)po<5*SZPHsO1x9;UVfWVmp}ehj428pFDEL%)`V)Kal$apl
zxCv%t{;ruf8JNg;E4<iIQ250zvxcuegFOAsHypQy{h4U`JEj-%4?l(2lAQET+hz66
zTWi>l$#gW)1VQ=qa{UoR`CY44{R7uCoM(fQCJ*UjBz-v^CL7-?@N-Mr(8X72`nxKI
zuX@Pb>rlkPp<pem*9jaqelOaq35{g90tA%o$@ATgcNOUJG!3fX7rB3}yrXkYHnKQ9
zbO82W9dy*Um66zS=%}-G>QL_JvXKT63$qk-G)zr1-Z3RViql!3xW;oF-GTnVrtEQw
z$ddc4>$`ucvZ6(#zC$vJ?Df^`)@AOJ$z3h_svoylZv1shN<6|Ik*y(+?1IRPk2bWe
z!<s_9Sm4vQ2l0^T-D;md-xAp60WW9&$59$U33)^ap0mFtY4d5%>>ZZi(gPZO;B~}~
zYvcWxYDPKP)<e{C%@l3$;8)vP{ISb#5Cj7hiS$(8&D4VIvTEdjXIZ0oYCw~MPbFIm
z$;by%Jg%MeX!nK~sKT#rB5WJe3YV2a!akeIyDFoZti~gE>Iw8cQROA{0E-`;wePwl
z(kvq*^q+B`n3I}Mi?qE+*F0{Uhx&ZXksJ^aIu<Rsd8M|n>*}Zi##>en9PwH9LF1tY
zs(=~>P+Qh)dwPc^>S=AS%8=CW1a2X}p7*mDHB(8~-XWLF|NXC>`1GCNQxsgX)Mr$-
zZ`_rvD{c`z&K*!Q4y&(cXf$;hhIXAB?bZ|G!Zta59=PEvHww5thgMlPE0*4FtkW6K
zUv??T&0ksOcj!B~o_M4@oSj#=I3$RtW&Q_O6B+;XH@Mn^)w}>HFT~HLG<4h~d+??>
zkfis=t5`Ut(jJ#j%JDp)e#QiSXt&Awl_k&Hx#yf<h>oS=oqt-Ku^;fB9_y)lVM~4|
zHIcI)JD+?#CgJpTia#<+dq_!(=-VIc(6f3>@gIY|w(~z<^tn73AH-){klI?$Qi&=Z
zbxa^{fgsySMJEG#Te$*2t6uQ#7QgmQyS7~474Qm1^VA@|x*k?m{}2$-c|rel5<K@I
z@&2IXASoCbpy6U@xou$!e|^v9H}<oFE?z(ys4sYPOjh`!6zs@;MFDV&??k{Fu*8>D
zK!XS(#gb+4GPh=#L_`z<X;So=2{#C8xAv9_6k1E5kWVwdC6`Jd#MtiF?`-}i+UC62
z+5hI8lq@n%Ob85j76lRGz}&Oquj&o0E*P4bpL~P6y~X8P-3S%-_0_KG7D6QuufIuU
zCI!|uq86@9ab_@L1A`|H^bkzs5A?ggo`R<|A1glf)_BRgi8&KtcS$UN!&1%~RqZ2j
zEw#VT18`zruXWp{gL<U?!*qTy`s&hTnK|H8QYocysH5(Xj3Ahl6~V9el^UhBS>j-a
z?)bkcb$Tj}`tJ5T&5MT<k|8S{ah{dOt$-^rFv$%5LeK4op!7tM@O9|mPn=jxLIqXY
zm&Lk>G4TxeIHYO*VFPMFvCJbww~H0?aDb(I_-Ujy{_K0rAavNfk*>YfTI?W$)W-j`
zdEHXW1+blpi#_6i2iDKkheN#LeVhN-jsg~rdFK;%_`0(Mv${y$sH_0MR5^Hm;RC<|
zAqP}503EQg`7o7C6I!X}zi!VpvBv6q9c?YXS}cRJ_8mPyU1YVGzGqk5@G%p;dzPii
zP%ZS5C`I_I85-tp%0gy3oZ!{7n)4NR)rt7h#MFHM@RY(-04o22UqUp!fa{k~IjwVs
zDO(d=Y^r)TYrem0jtwxNs%$_?hO}^1-{7E_U`|yGiOL7QS&8(Tf4G7Iq^p@x87*cl
zEgK<VOXjbgGrkVXxGKG_RxBROuZ=+d8tpcFJ+rBP|HEmnf=xl<=jutC*!+E6&%5C#
zDJ+s}=2ccB!Qv*U|DhuqRy~M{o>Vnu%D~&7{}VzrQ~e`EBgh^pi=VY92%Xzn=c$xj
zBDKk=Q|P0n5Le)1<jpLqv-OkIfPeUhC@a~K;TeVkz$J-<cS@u*R%!C*)w?PGk&$+R
z4E$@(xg@%F`V`YHipqaT#y@YrD%r;rlQ6mtsBuJp8ofisM}@jp{k=l+8sojfY-CS-
zSauXRN|6$Tf+@ea!(sr<Po140VTPt-MV9!~5v0C0kfDn2q4(lbvW3(FVnG^m&SZBC
z8?Opp+u^A=PLRDRSM%la0U6U3=2B1}JY_2t<_tHHlKtQH-KD%jEkFeb2N((z!12!c
z^_d3vQ|N54=^ykr#g5_YZ{2Y!rI?jRzA`?ES6KS-aIE5a2u+%`tKDeybqGgVIIFF#
zqV;#h9=ABr`-Cjwd_|m`x{|c-ifMb7+DxAu+!o`sO*`L3`f#|lzyB5uehriwJ=+uh
zs|DX5-B+AY8ur{F3pqL^x)YfTJ#QtMe7{E5B?tKyyw)LClyc|9I_I66$VvB*e8lrG
zAk=)ES6_(CCe5E9weXGv+tuR8t(o03|FgHdBPWn1!M*pnHElenWC;)U(WeT?XTXFO
z>#tQ-r)grrkL+KJ@sdRPx)Pvvn`^aaStW=glFWb?nxmhyl7@rej}SKiJ)tM!lS)G5
zT@B;V4%~1&G^xj&YP&D|cK+pvT*<mD6_C&z5Jt$oftud>d^4$}t|spEvG~`F!?sPu
zfzWl7JD@zrF1-CKq4xyAdUc-*1ELK;=l^3Q^VQDAIUUm9sRq5dK+~?Ay>^>jo<U(b
zESeYd6oOy<MRe@mbYS03`W)Q$wRrZf|9jKA#6<FKdhjm;B~;>2jDT2ywTU0J2F#zK
zl7!fzJH(QrBPgYL%?a8Z932DzQZ@LZ&k>-z9wl67kFFdjU$4cr;=mx;k@-?1p0QRT
zV9cLPYMHkYb|p=Hr(0|~evxo}aT%>t)k#`6n9nx!1^LUla@Cc<!H}`=R*9(bGAe9j
z`Ck_=*Ldf%n*?K+sEZ-l<PKF9V6pK%9Fqci2=ki}<`fzHYepm~0udN`Ji0Vl_?s46
zlyr99WS4#vfcCo8<5O@BhUMC1W|)2a<^USW?#SX2iNH5^h%?gfUn`k5-ueU2&RV5q
zAc!(7D2B3_mU|KX*GDBD|EQ%m{_*ch_WlR0vf=gLC#GK`@~NfZ^18!ZKe@v)`x{`9
zNS`dzEKYxsC=BILQ+IO|ytw$0*!UHt*D`{r47d$`3^#8w_fw?9HX&yEZ?HHDZ`k^)
zqF@b$%V&?MqC`sRTu2O-r(v?W+UnlodudY0t%51hdpybK4>-)~k0DbZedKU@#RUeg
zaOl(0Pa1tpx8A3fTEyMPg`oz45~L1XoudJE3e(@v=D!Ae2vx3(w(EJ`$fbI%ER*v^
zmyyW*KpNnmoPW_F$2+V(2xS+RzunV{)RD(NCj^1{$1w1PeY}|`h9jCh0#sw@MWpHY
z%zVhtTl{Wf1EGzXg-S8a%G)4A>|<({C}0mGVG9YZqNXPY19Dp?GmxIO_NigyW_ZUv
zzQ*Od{u@&>M?pkOhwT7uuSOIj?#FzZM5((YIVkI1gq!2ZF~lUJG7w|9-2ra1K-6%2
zr-#m^Jn3hZSh9kxG1?c?eo9Ub1nUrFE9Di=#&WDW4|6n3Y;>>gNVJDwAiLS%O8&35
znf=T_!J7#`C6Cw*UX=BXhukkpf>4vP)WzAukDmD29F|m34Iaz&7e9vZu)BD}wnEz^
zX8@YNU#Qnp4p=N1xYlbTUnR@EpjuQccd0I7j{Vwhz?zE8FP@QX#+hO2EPCG%Bt&U~
zbB#XK?Xbjeu`@F$&vfaxwChp+7SZ)7lbdZRwV-G#C*T~o%eB%|hniK9LZ1!6Y`;=}
zYn71aagcAC&DjB=_D}q%L|@&IJ&UOZ#diZC3}Pc8xlEF6(@$0AJ|sFiKExyG&#bv~
zj6eMQN!3mey$%wd?~bKCl!iv6kov{tycZqX57j97F3-5Dd7ypO8|@k%z7x|YX9V^X
zLIUAZCrll(s<VkS(dV{)q7RObubygl(16X=zil*_o1;lxV#oX-2(E;D_!_`C&2epD
zs*bI*^u=#$hNRn#jdTaP(ou|+ua%Rirl1Exy&R^K3bT#6;_Bq^R%b;63bDiHgr@fz
z`2!S)_Ze-t$%SF6vt}n?SWK%O0z+r=mXe<VE0){@<<pAUUZuXSD3Q*ZPUK2~Mk64F
zc?kf~JIMijWPtbk$235|qUym>!wX;F71%nASiAMIwt`(*2tR|swHZe}+-s{5((T;n
zn3CDQ)#ITpLlFTtiF1MxYYXVsssI2osr392`Q5cx(!?^qJ8o67@5)_`NA<Wk76q7v
zcAbEvHr!ql%H0Y<`rS@}EIPN_rKjTEAM`F{{o<6#m%R%`68d2YUJsFlq6z}{4VH!T
zER%K7DJ)rjkI4GyuT=~nCiK5rl$~8}HU@#FUA&Nnvfp=}FTDI)w4m&iFE0~FMbk^N
zKUbV){nB-%C3k%23g7C_%gc2(mk=)@dBo7{&h2~nTEL#NY|?QWL<=X{q*&iwlPJzp
z(XG7}d?6&|wir#1+{ErVtB?I2U5t*b5(^do`T2vRN7RGqbaUx_B9~3@i}v<>wD_7Y
z?&XK`I~Ns7s^5RGGg2^uH7jU(oQ4WE%gNe9M!lQGa6cg!zyIGXfY=drf6!(XJX3c|
zmyvpP;Ta?z2b`S;LDX%v!}Gp);&}2{vCDk0o>z{1fr9rh6Xq+^iD9QmG*q#tiTr5!
zF=1#jSnc!O%u3SwU{ISm6og{hA1Jfr1fmcoZS~NQ%r(C`js)SVt>=I@kygODt7pyK
z&BSd*<8E?#2@ydP93<9U+oeJCyW9SPv%U74j{WaA$jHbXTQ0BlprnxttGVCu$iO9V
z`qtLODkGnJSLCdWA4}Ig2BtZA?B+asf*()5>a&IZmP8SjH6XCoNdATjPjoiE=91gL
zGwywBfeR#lIwkj$Od&LbVWHE^YQiITe?B%V_!Q#$({vg962jQO&%w`~KnS2Q$QlYp
z<zEa=04)8pY3969Ns;|@>m$#TGm&PA2y(WNKGGE79yN?uLTcp0!hN*gD&orZGW7UA
zNJ(QD{F5Vw8}w-@z6du?jXirp<?Celwc!!TdaFe)e3UcHr+fLzSBhyeePZ2H-cHsj
zFb9Ev6ch8auZBLzI~p>|dZ~RDC&b2v21XU{UjrPdCG!6{y7;YT4Axf~rb|q8uLB66
zwu?(Ab!Da@CpHAGQFCwaiRcldF<*MzkE%oU@}aTSxKz%bm-r=>cIWd^vPOrn)7+50
z@SkwT@1W<789~2SC+tJhMOuVp60Jm1(kvz-=Bb$*JrLdV{0EOWcJy=aL$0GO?spYm
zX;PDtvY#O&n|@39uH`G%-&#x3>_Z|0-C%tz+(<LL{?PuAA5GOOL6m#dW1qzO6V64C
zWhhj6<1+Ul$X+&SX_xP}LC;uw6L^kc=o;~q%vP^^)MCs_)`BWOPpo*>#mPK>*L{4W
zi+ibLU0XL-u!rBf@(XpmL*v`pTa>#yJR_FPITu}j<;zLqZ5r@zW<t@Y?bM{r*`Yr|
zT(8a;;Pu4q#=Cv1OPuhkWE9tpPGi>WH2x&Kw_ETZ$5dq3KZ=(#eD3EbQ=`BhtZMKy
z!P0Tt`_d!MJXsuN8ng>5h!F^Pc}nlkH64*WjG!j`dH(D&y^wzzDWDU9jsYVQNf1Z>
zm&S%O^r3ePiFO??#%BsvsW_HhhkNW}QWh~_E8_=nRPI|gm6y*eQ}g&SWhW0h>dCK|
z6=1tItb{jF{&Y3W^M@U?1?aZhEU<6n0n5|I#}u0ojqWr?r=|qTLx(dgeGDCW8zcZd
z$X^sxHib4p(}g7_u7$Nr3edHGek!2U`Tae2u$j|)oH*W)P4X>Cyc@^fncE^!LXh3;
z%HTu#{&QTVk;cp6MA+=VXyb6xp=t_E-WUATeZMkQ`Km#jSVRj+obJ1HgF|H;@lX|g
zzWX<A9}a2ID{ndNT#w&0tdwepd)hU>oi4Kx9V}K$78d*EU>b!p(sxmon<F5_g8DRh
zR|k%U6Bh3HncUZIrS2dmUleCR=q7lh^DavMl}0>6{CR6PB1wT)4o|m0D*Q{8o=VE@
z%gX2NBkk=LAWPqJf^8^t7Uz-Jxqc1*D|egWZp!k}wj~D_8jNGqzfqoQk_+L+<9}TI
zg6ksw^=TtDiJbgXkAqKEDPr`q2h&aZS0S5BlJg1jhWiUo&*Q0H<~JcPR%6j8T7fS0
zs$G107k@kq6}if_KlM7ayX$jgcp8({v`MmL)1+YSHom%^zPY+u@Oo<6pVS&2kUm=`
zD>Cb@&|M5a7C+pumqw^gwjIg&`m`SY7NIHyI3S#>n-VQ|GuM6Mcpu+yt-2<8F=Lr;
zsIUM1U13!#nU9tS0@+cCu*VpPLWn`_6D8tWa~(m|hM+JX<3MLSKVyGq7{?kE(z@nH
zylfioKEtsM$E{wu!Sk0B4L0X1N)}oI)v>V-(?p}KS!2cVMZ>tdIDW2g`gaTXJ6&c3
z_a9XbZ|641$P#jMir}+VC{0ZJ*AG>3Aq>uias^aD8>+f#0ZW<leP-wnh75qU+doWH
zKtVMd_8XXQLXkijYn#2d3^8Nw`1(s=ye{DIjzV(s%*R?HLJn4t;DKDg7lIJi=MrG%
zYgXOG$LZ_DzZ&&-=>5K8{zLycz(KyNGf7USHoS)>i;L|ANJWVW+d9V3msTi05@iIH
zDYhZI%Cmjj4!tCsfEaY9ivrrdbGt3V&52;Sr^l-k^o`DOEpF;z@&=c*A|{Txpo=h>
zJNwS|Hh*$75G-)L^plgfe{}5m9O>Wcff1s^{|)d5XqwDvtMLoE%viI|)##jGk7>SY
zQ#x?4@ezoA{49ELrAEL2cg1$Sap#dxINx&<*>IL^({K*>6@SYXP*gb6Ys0AlN{B9&
ztKiTY_3sdKt)p`-CDw$Qdz)#FHhHLIz!F1tO|JF_ZBub>3c4J-orO_{bzD2VgUkU`
zn^)TnCdSD-%?X(LvD<S)BULVj8MYdEP>0KjT3}^NtPgpswIyuZ&E@TeV>7S0+>GOT
zt5w1IZpfV8LK+He4W)C<cgmPdE{eSeS2^~RhXr>|Ez@2T=#<5W^E;p0E;Ah4v4UM7
z_bSYwrjZtW&0WmnR!>|i>`{+8(JfTX{_}_HMZ)v&LFtdo{jJHvRJnnJ<{YCx2um3+
zg3Awaw-Zx7H_^M$U!C8*JWfbnEyADov<`tlc)3ubiUw7WBG@%;GNvE`5h%Ldh)|+K
zjYr$9=rwW05G#p38c=$x^OKDSu0|8w+1RPpj-<y(*D!fiTGGm&WIa#sUL`rgkf}&+
zvbBg2aUkncSN1%wy&495KL4{4j)Bjp>v>7)0`052tO8x)CSv<|2)t=<>`?3lGCv8c
z#Br<N-3j+}NF*(vOo|9n(~1ct!Z%u<Ii895b!LM`+Di`%TBgRNpOj@(h&c+rZ-*mL
z`Iq+9A=Sxc*iFAF8s7p2bHfT?Gh6Gq`bnVsLj*8HL;XP$dcK0pvhybx{*VrfsxA(_
z?k4ei{cTEQj0DmsbGoUGS}s7aoWkD3XZd7?md*{#Vn2ggLL+@3nMe7PBftwyJ$Znl
zUJhfI2zJhhl9rOV&Lc&>u8dT2%CPa`9AW$E2Vlbd&9||UgQ>%zu0u2`A8o|R?Ot*R
zdT()ao3qjDnu%hnAh4IOHq@*;?<hI@!cx*BC4NT>EiQ`?$iR6%rLKTLij|0TWa=Qx
z<Ts`_?1ouWQGXWB)y{lAKuM|(i)%HEe_U<^tQN7oBQtR$B{q@8su)P<B|^sar+<iX
zVsdUNyiMnx1q>E66TURH7k+lgzzi)Mp&NPnQIyO-Wuw}7z#-Na`=rr47!;ymyZt>@
zd+Ae?mFt-c84B{Y=OxM~t-qi3w=OdkdCPG@w1>^ihqLYEbX-_9mspkC0%b|^qe(9H
zDy}{DpqNxV0K8#?Ikl}@>V87&w&Y-d<YPzzYVVk*IUd8;VM}#l_8Sim>bAC8>#C{c
zqTVbVmzP<Bc)bFKIowS(aX&T9Z8>`3rz}2hcQN@8aA;X0sy?r4_XNZ1J6ofqeEQlg
z#KpA~#hz1QgMr!I)%$*6gEjS|&iCV*$0di;%rneEx5p}dfV-@E64ukFLcaxrYN`$8
z(>_pqU3Sh{5U2SVZ~NOUdc^NBbM4zLnfm_1w=-!vd*D`rPeGXgm)FP}mhC77g!B4r
z^o;@FF5cyAL~Y1-Dn#pgBE|x2M&N#Dy<%fU`^I%RPyx0t2>|l+m^&bZ<YAj!<prRU
zw+JxKM11!n)}{9g6hO#B!EsBeR@EhULw<<sDu{rAE#$A>2M-sgHM~QB@KqfDHcJ!F
zggH(vinINj1Y&oDWkJU(cc?aSKKNui=xq?irw`Deb^8XE`NQ$In_M*&h#@-MupqOF
zlg>2FOUzi}u#fF^nAQbEa5YeKPu}mphi&RH6Ri_Ek{hcK`%}<!R<$8{=yJk=DqBqY
zaw<msx#FXITIT^)@erI!V^-z|2}Q>Jcarq44g(B0(!>UdHsraF)|%^$H%GL)nF^u=
z{Yc6Dly9gjdVk=raru)jK|U~mYMpPkMj{Icl=WVrN~+tCD||e$7)Vz86Ygf~3)Wn2
z1NLn1Sp;8~)J_0nzLaLPWIj0*GW>(XzU82KiEhJo@YQ#2dg8QkR05^ner(j{!h7C1
z&yPGlpsV$Q>|CSSYQFLm1x?xg7^h!i)sV<MJem1WVo^U4Cz5#gz+T$bTl+_`;n=_?
zId)xHa>5_%=jF!;9vvl)>&;wYO6b<2fsKq@^@M-NfyTv^OgI_u7iECt8pS7WXz?}D
zPySLEqG}Ag&VCa1%`BW|{T;rj&dsQ@Nrp0bq0@s7pNK1$tOzQv4afCEG{1+F^@Z1P
z)6F-N%s<_E1Ch502w+0>B78GGQjwC8`sa*{lBqS<OO$u)AXt_nQ+S1A?=k^;Wv8|%
zMkK|}(-sX})72?XLDFZR`S7H+Gt$+k9kH~RJiH&saa9Ksun1w5w%fO>u;pc*dsLx7
z62+D~WT(J#Jg9t82LT#`)l=qTL7O~xsv8rBODU?=6oc&90$;X8mCM8_b$Iz|HzC>G
zt;x9ynfM_%_b*{YFgW_BMErZGGB{y?iS!(6X{Oq!G{y^LR%Q6beh=O7HW>}Qe7Feo
zrf6e;x2PkzDXy@Yfej2vj!k+KDZQJwHF{{W$;7XA95++rkTORGy3PD5=44pE>pkL6
zukKeO^#S6(t=_y}+d>F^c5+i3%M9gul8t+JS+BC*)XODd@~w>x93rFStj_IW&hq9j
z*AIgIc6ao%(e)*DDCR)9t#kdBE)66j9eK4(T4o_`nyEcgmy)P6{p*H>geTR}U99$<
z<M@7G`Grb*-o=A8&*GkgZnE7h)1orqB2?*jCWXtpRKAh?V4%>NOA7z$0SygSqgP2Q
z35gim4qUMgu*xEnEr6Ni(kkQ%2P4Xcz`*?SMw$O=%LT)oD97Xv>9Rl-vUJ1$#peJT
zg?bl(hbc{(>>)e&P7Hk{oBVI1!pIhQT8H*^>=aGV^XvUSc7%blATn^EV0j&-(0Y6{
zZn&=~vAxt)-AGxZ7agz)LWo318>SK5gS>{(_ZW$1Im=NN|N3ZVN<c|f9|%})M=!ud
zHVboL>B2WaX0_p>>4@?)rA8chyFuIK@-bl>*-KsfhCCf1T0I4jL@$5bvM;^grvUte
z(}j%_1HrV8T+w&PSEwJse^qG!nIZl=a`LZpvHkkW4P!*3y;ZrKW9`W{bG>@?>prhk
zv%O4ze6;CjVzw3!w0A)MUTN<Qhvcxy%+8Bc6-yjW8?oc=pvcwsvTp$DI9hh?5r@xS
zu<UP|xfFk~)t;LS=QaK;(_P{9B`V>P)pp@5%HAJTnw%Pp>kx91y7*XGPzt*g#kT&e
z&AzusB7YlM-~(ku9lR0d_9mJ4En4GyOo?!0<;9q2bv2PtSi!_t-9y=r_awqYY}8r#
zKULj!KSD`_k?u$Lp%ERSMe++E2`JZ8fS9<X%H+)7A^StFfRN?=p7oKayCg-^=#}13
z96SI@!f|t$UtaO1x9ttaSr7(ZB`y$wvyXaYwSu-`%tQ>#1pT*aya2tb(g557D1Aio
z-@0)@h4C2lO&-+1!?x8Lq85W6A?E<3!htYL`Il#_TDV_nhP8wJbyK9t9eT4PZZr+7
z;y0FJYF`k#z6-^)a>9~5+ke!Mbpjh@LR^7=Bm%{#VFVCmXlx+Xi=hBFZ1Xb^e&nfx
zR$e-&1fqjb3FL%ez+jG{LWEhlNIwLE3^5vMzGv~{zDJi3Ni4pXYip{p2;qY?R{*FA
zz2K@R|Ds0r(B%oPzAfo1I~wo@fuN9rm~a3W{htK^$jtvS9sag7%NzLxr-)vEb@R67
zK`WlOYs#a#U;Am}$uC&%pZ(1DB$T$bw;_No=GmWNR3NhMa?8~JwIWwRU5VY1^22+r
zleD#CqEzvozt56(q>F!zA5K6(Efn?=IgWQ=ZQhaa`yW%Q`8>_<wzoF?UD}x`eoVUR
zp`r3?xk^|$!nWJ~7+Q@GZ2qQJ942r1VBJ>_GB~*Ou>O&1ZL%f=WR8tkrucQm@M@*k
z1V__ok{r(3OVS~e%HH~lrUy7LY?`}?nZq^Rwq`WAAL2*uWH8+E@y9mxx=rLnp8be`
z^HLbA@;wv?gfSC{NLa6T>mETfw+I*!tchYueqXnp-*EiYUzavP(YR8Hz6kjwsx~Yr
z+<zE}4L1Rbn+WW-lp|+l$B`7ZlSoYpJnAkhoc~f_<;%G{PCOY5h;<8<A9}c2`gtD=
z5#wGNJF6>tf$%U*3oSedA}P?lfmfSx5C}#b5VZ>(iu9i_=&6R^-5i1c*tPoMMcfbz
z|DC^`1jGo5qcbn2k5E6Dh34$-c$Ne*-}Rln1XktEAz9b#esh3_$VH5VbxVIEm1H51
zbpk>Tz%3I;5~ZH5d?u?gA=OUGP^TDfs}Sg%SF}fb%>VV71Tp;n#RdUi2Em_m&i3Tf
zPFyF`{d4`utyc327OCMe?QTM*dS2I$Qf=P0=6un>l!+Bf(?92n8}v%X8zv2BJ;@j?
z7bSA!)D*w5x9z2AO1^fl#(gfd*b{T|dKabYlvOeoMfuvM-L0CHQ%)2zq{(79I6hHT
zvTM4Td5Zo#bUq|KsmB`iq;MU{Q1E6)tUQhJV}|?xq3SJw>S(%XQ6RWW@F0QU?(P=c
zHMqMw1cJM}ySqCCcL?t8?rv}R{(Il6SH)DpoKxov-M#l-YwguDZ-npH_bAk~65YN%
zKfcOFhzS_iN8!cE_gR(Q$j9UPO}-oAeWUH_lCk(!Wx*W$ILbyRBCg#o+nBnqeabWE
z8yaY>#Nv|oD#bQ((pGaHqnw<Hj(~yKwUZ*)?vf_AbVjRYrW(4%{Y9Hg-5-L2hVOA1
z;X%^G;50DD(r?xQT%fwfKMimJK^&HziA;y9S$bO1S!y{aOB-Xs?>v~$0L#LWbJLN7
zuw^n!`DfD#LfaZ--Y|Hc{LT{(Y`7>BkbD6|6>8zt1fJXdCzeiTFr`Bpt6usXq9F_+
zRp=RLxkzC=FI(1D1D<SA39BB|T`q}-hS4(%1}7sxLt4;@%6{F!nS6_B*dy;S;4IWk
zMRW*;QA{k@KKz9a`Xq_0(Qbd>ZtSWc|1FVE$#);^Z1HjiFVhw<d<W=I_^y!Xz0?II
zbFn?oEU^B$AE5=@Zn{Tb9IDTb{D9=<XNpX}H|=OhCj$ziWL-j#Cc*INeLum)UAev5
zdvULou%_H#>9k@W=K;!A&A^I9p92Y>qXnHGjVnk9^Zk1ZvVt`s=ro%B_xOKdplDzW
z{e{cTY}F)~>cHL48h<W(eW=w;OZ=Kx;xV6ZpY)rWNO{^%b1*hGaq)T?&rj%=`o)xa
zChI*>Gv2*peCCAcnF&JabeWd<SG+P&u}mNjFGHWBCNM5YtrrFy%!i*=keUn``tvtJ
zWOx?Fyb+pA#lD`DE%`ml$OdHfZ1kpSFY$;9JiXz99me9yriaOmGAViO4RYJJr~RY@
zf0(^Y?-!6RcSk0gdtO`?O7xO9aE+-br{8XhMn9=tM(VlC%|w^ewbDDPnd5(NY#CEp
zEbFJfZUfU{(mQX?YFPn^e&~c_EIqWp8bG4iV$RrluER2!5kI<&9_PBv2c`eA9He{$
z*W+*BhM2J#+2!5Sy>q7bKuD@19DHKCa|89y@x$KP^6+qGac@wqmu>m^_~lrG3o9#W
zJ!2tQyKLa>?%|<KwR?N@Qo6a7F0vP0eh(Z>0F}DAFg@^XJf3!>=y}H7ypc6~&V1?^
z()vr^!Oixa`{ffVSFUyO71V3<8ttnWpGE~ngT_-a8YQ}^6Xz-(E$`bP@4gNX!td71
z0G+J<La0Ux?JPpOKCIX%EFs^mKOH%MDpWwo^ZnP6fx>eE2hPh%lugkAlkgnb8-yTN
zCI`P{LPVp1^Kz+G?HL^S7m@eVZ?FdkptiTY8s?2`KPexkbe!vsD;0-vZ1!GXk^l$o
z6i$PwWA_F4ePvnx760g;r!~iFh&(sgurA)P9yfzaM|W&CDyR(c-p;!qXmHWUXbO2H
zbCzRy%0x5^_NQQ$bYP01cj-A*vHqKFVA8vzi4<q&*-BR%e&>$xJi$!GU@9YS+B!8C
zpWeC!po|nh?^1-S{3gHHPI=1N{i00sy6JK;rGJ7uMVP#R!=|8xbi&8(U-hz3sS%M{
zCqqHhUu?8gp82fp-X*KVK{55#O4r82%lp<I(?+n;Gmg}bnP{|h`WkHX+;!ekZK|Pt
zXp_bFcL9GDOOf0}I?9WVdmUs>dg9-So6*vtQ);sOUU>;5DW+QPGWeqE9M1Df_6)tZ
zzOyFihM8h-)cl(28mTlES?&l7xG#A;^#mEqN?$WJhvU+!=VMU@$YH%Zq@WuvH29?}
zPqU^Lv9n(>n|2jc(kP3rm3-M8)-7bDmxAnBCFv?6(o>y11+UZTpINeKVE%@`4@B#d
zn{iC9)6tkHhzd3iNR1vR&3meKCXXB4_`hemit2TpSQiC_A`F^xE`}C4>`sFE#sw8l
z{;HYdGOK8uaja(X^08iyT5)@Wy104zC04`coXuo*)!Gh-`rB(SyhaOfP*DFYOnHnC
z&UCB`x9W@sCdQ0=YQea*v>SP@u(`6%Uh+EPzOv*gP?OEu4u7Aw{hYOE-{8-96{RUL
zGgD(?lrQUttoWSP`0fj&fAh<}Gh08i9rKIr-vaEz4!+u%(@iaPv8u?)qw|z%8cM6(
z7TbdmoR<$wZIRN5ApPAdE4m6YX`I?W3{^AMl)*Wm$v~bV^$+We{ANRje3({L)G?YD
zazTV;V}7xl$J3BLPZP=Ip~rxj1m(y32&Vu{o<&Eb?wO=}Xy(yQ9r-YmBIm@|&4r4B
zU3-&mbx~zglj_dZv(R8|;a%h(GWkDAG0P4Fr!s8PXIgp-9!z%WDX-<cgQR!EH&-Ti
z@!=`Zf5fZyrb%|(%ngi`Fz0D;qd4{bn=>(So#*Ukjwy2DaVJv&Oq)s+4}(EHB5t&I
zYL_F4?!+3&!m%TkfF{V{!;kETjVarweelC0H=)Vv9)>rHpkqB)qT)4B{qM!#ncdD!
zhNjp7IGC4aC2c(?jYb7xgT#_YkwV#&S-t0TpNS?t6=njCOotxl+zQU+0|%uh{bMjg
zJhwhPOkikY9_uSFpSiSb7E|h-VWI{R>``ux>|BicG#~6^2<(w>4juco0KyC%<rm%a
z1Vsuh4gR~LJ7#>-En%ay{5%>6U!Qzy7qpM|W1Y8YuH{zOv-=2?(R!67qQocP31`d|
z{Ef-R!3VNk#fu%?u1#U1Uwxb#ZQd4L^@X9V>u+~OFmpW9@+E$J@3Y4VQHZRoC>G7T
zC>HE{$Q~tNKDs}MjH+aUf%Mj0+@Bf~(zPf(kBx1r;K6I#51opZNO<SSWi~3NobFDd
zbv%srJv71)*gA#Aa3(PY-8VKp_-D4DDSp3nTRrZs-TffKJ6#h@ATKvDHrFLY%cR*?
z^qwa&j&Lcn+zVCm-}gEMR7edek62%y5~41N!mL}y+}&pAu5TXOG0YFbQt``eB<K;Q
zB=_k=P3z?Hi~4Dhe~lh$z1Qp>xfNU0WRCrg`zscP!zjrpT4eLq@Cj_ZJd-6S;6n?h
z6>qs8{SsDPA8=jUdEH$?zve{-bv7|#jZ=#nQD)b)_*q(9LT9VT*)!nOJGQ)dW2-Wg
zW~_8F>I7a~juehWt63k7dBQ(uMsX6Hl@ydz)X6G(z)O!cT~20|BX-~?B@8s-yVL3O
z6iE%k!R&!VigIPLmWN)lr35x+5=WIEL6YwMau-QFxf;!$xePmzjbOm=#ngV>gjS`_
z!jkAX+di@^v)ulR$?DP2)Xwf_lg<_3YRR`cHqkpihEEVKXs6+ZzfeWJ6N7;Mc3p_w
z!0q@(Ve0YQ?EY{iA$DKWOcesG+cf{xH>4h~PLbXQJ|e5>pJO&egs7iN*{iC$5C3NV
zD&g_>KMOnE7Y_#iaOEkemFABS9G#pmj|^UtUB;Qijd|eS%hJb@F68U+eYpFu6i^ug
z!Tq9|MkRYqXu>lx@e+C8>%r9ZTVO_E<?fbNomrixRnT@Eq`uylm-Q)_7TS8z=Q@hY
zb7G5h=jpxi@{v)lu(y{4_FfQ>ZSp-u1$~7E{}LuzM7oKTEs3Y~Ye^rW=m&6s&xcDb
zFKb-7%g%cdAw$cE)@#trhc9|K<<U8R<{`&Cm9n8D;&?cNVt@Oqamr}%r&@8iy=P5j
z73BExR2q$#M~H&^1plAcbs4#DGBUjCUS!4LaTcnfPdTU~2ojyU0roMYi1DvR+5Yy^
z2em)3rW>T%==oZ7mhR9o?-&{ktx<}`u>KU=qgXFi5j<g~&7ezY@Kz<?b+v_usY)43
zh+`;9);(UAQj~wJC8^8tMm`&hfyZst?LoDf3nmR37hMm@sxX;MCtF{ogsw`VEoAZe
zsd_swU>^-Ydx_fgrlmy%`n$Mi1d=eh=caeGm)Iz^TwZ@d58bLflSwV5o{P?o@Dh>~
zQx+U0%As+3yPZ_~clQ@;J)<n|s#+b7ovW?&=jsKd4QEJ`NxC2XSg+em<M{@6zJl5<
z9xOK__WHPr-M~_5f4!QLi)9)AJHw~ey)c<E(pO_Vtq3pm&0>F_W#;kVY*d`-`0yC-
z?z==++s;)*GdIuEdAlR2ceB~|Fw%qABt3n>%oIrsjGK`R6UMy!gP+Anyf(W}QDsEW
zIPV%icL9)ND3u~=tj!!#uStx&>9=vgU!jmU)6bsECGhG+VBK``W1aB0`{HKns`(Ns
zKFTqB=BRjCQ_LgbOVmuS{|p?1dc3zbm{~9bGkq|_4=l?_MSYas|LX;?Dmh7FwQ~a{
zEvxU$nJP(fmnr$trf~TJX6bH=d-3|LSjxJvW#25cFpI;|633+Ox+695JWS+RI7MQO
z0u4TrH)V0@0d@$VXTl34F&}~QtyrN76_^|VrC`~)cC0r8i^?S6JAh454yodCF@80o
z`hkdy{!q3~Y(6ypbFKh}yDvl{9IHWYCvOBMNGtyIqof11n7@_5%}S0xe35H|5DpFf
z#6^M2y+?+eI38C+-pDuMmWot)`x~C0`oMMTMO}j2n@eQ`nsQ~;A%#N08@Oc5iMi>~
z=AifD(3g#00fjF@{kySJULG$aUT#)0Y#S{fc$rUoNx58AzGB*I<4LMA-+RA(?V(AH
znUs9k+d%@qbbr&EI(ol))~@8XFn8^1#p>kZ>}Y>8V>zIK*?>QGbaS(iRF=JmW_|Sm
z;d?z1<G$f56O!MVr=~R;-&O!l^6C&$r><gh-|rt-axG#3_DJvBQkR``jYehW0DoJE
zrIOd9m7*{I_U`pgo%)74^Jo@1d8ku4N!@pRJl<O}+|X(%Mx?*|jV(R!NE+J(j?;tX
zF5U{!qM7Q_g_@F>;_|wiJhH~CGK+(}Gv0TzyH!t>$?+(SeYp<53%<sPOLo*6vN*k(
zcT{Nb-p~|G>3nlZyn?WsrI+LHoGV&~j_$Lt1YElhPqrSbk8gPgi_M#)L9iJzRi=gz
z5h_9R7bX`L=+tlbno5*vwrk9+JoQ2~oZ!<a2Bw?H20!VOzr9r_wpbKpOHKt$GrJ=c
zY4T-6AX)mccdzXKHo_?kza;n$@d}FA`J0-e>)4r1zNrlc<YrN+cC`HK#5l3{Iu;Oh
znWjb)%M_Mwjy4K+(BQsP5u!x{2RC^P;h6?%{W#W}$QJCMeCAd}I1vqa-CF+yE??qb
zbe<c3E3*M|@MiF|U_K~%1&KM0-dhYjx;)rC+Bm6>Qb{n|v`v3Bbap<rf>L;L@D{sK
z&}j;Z1gZ|_kKeE6v#6-{2m%BV=H*cx1vfv06Hb(QQ|YPowdA!spS2;_)^0c_WMq|O
z@$jsH&Y!p9jBc1~M-u@84W6dQLsv1^7W`<QN=c8fT~&v7u+A&-@>Q+8@Snd_1WNa9
z*Yk-6>}}k39utwFqLnQVG{>o2J=1fP%6vJRNh^akSsTM^QC3GrjMIN2xW7Pv+3wh|
z)mG$|Y}~C2woI0-G+*UNyL$fiep>G8TIO8Ubi9CMB?u;3KQX@PCOvn3ogr6!d1!M=
zD{I;BMq<}H2{psq<ZC-_zU_Q4wT#MY+TbT(g(LFer=K;9Xo}@Cfp0NNapmMbb*llB
z%b7dgPD~KG9QwXcyiE8ER<+=_az=zKcOT51AtT#sQo(#~Q&_hq(*4RkeWQS0A%sl8
z5D1C?S&;%3_I7T(3C@zV>0RLADrqiU+RbeWz0JUksKTBL2;Pb@#0<pzQA6~~9PC|Z
z>{xl5BWR*-gLh!}AKq%BfGHdjDqGmRd78oz6I;cs3B+~n!;t~tE_eqv9u@p29_}Ty
zo|i!QN1_9Q-X@HSn&>Y%z?$a&ND^6WJd~?1J{BF_;g9bpI7us5l&}h^&iVH-#i-$@
zMo`GFsedr@u{T`L1&b-7>HKtpBtj(53D)EzhR8X&L-KpOj&dBOhna9THYNH`s#&|s
zHzu|NzNiD3YVu`D%#F^M>y4D}*FA`lY@Fmn(oqK>+4`~~Xl0#u)T-$`5p!^o<l{}z
znflplQ~eX6XxuOJUaX$()Fb&Qc^#ClHev{8&X|d}nLCK{9Xi-`QWt!z-rAF)7wtn3
zl7n^TUJQz1OhdI;@}M-%n92yOtmmZ$YfwSOHb=pR<QjFoI>p&*N88sP8~Wots1rJB
zJ-4y&wPT{3t?l2q*C(FGmATuF=&fbr>F9{Z2CZZ;Ro5Qyfoimw8$dGlElWVO6vZSd
zNa&7r{<lIuQySuotOsTp0_CE@R9|S@`tEi>e>#T;wIUp~nj(U0yB9#Gmz<kZlK4vW
zB}E)&??uZbOh3zu&d3CHuHFWWMB;AU-SF?n-(I({AJ2Tq(Es+1e{8D0V`awpP9F51
zL3XTXFLo%GC>=U--gmkOD>FIBmnf||3Q=@DwFFZ$Cj%9R{j<VQ-*-3%PZvDp?-lwN
z$ZDud-Gftk=<o>luA?<`bsQ=>8Oqi(?xiaX$V{G_jIJFS4bEhd?TTqw!v@?8>f)zK
ztk^+85d}XU-`~Gt{VYSX!vU_+zSzkeEE9xt=MbPy^R|9||5H9T;r!J;mr^t>jiL$&
ziyVqFD)Pwil&tVbQutp(a+hH=#2+L=B0m-?ca=DvdX!;cR&XIFDMv;Z`yoX@62hlh
zI*0X0MB@}p{ONGwQItn8=OxOW)RKeEqzbmDe`Q8RlhkHY>u*Foa!za>d#%kbcfUp1
zY`qUQ2@j!36`R#7*6vU0Ip;+Pm=pzdRju@IESwS5CQ~NUKh=soKcfHQKe&1>u{nbd
z*-N#`@T_iYOd_xYcl|TEv(w^2<$At0GK7|s|FV1%g=N5j{AYoecf=w~slWb8=b;Pp
z0RQ&K%NNk~$NE&ZMwN%jmETB8e{xjoxfd{f+sP+EvwQdUh9iPp?PqexBVum~m&?3w
zuO)%eP^b%!r^Xi(v%t(mL_+^45d{!~JbS9|${EfauCUJLjoX#0@}X1UV+u*`%#mqD
z?aqcq|9F55Y=carjHKR<*Iq6bOfK=jzfB^5LepQmy?R~-Wt2Z(m6+ac`NoVXz!hyU
zVuExnL}}n^Wn)}IJw8sh9a_4O><00Q46afYfo&dLPB&Mj%$s|tWm1?V_`jcfNCOwP
zn>%F&e3~f&*@sG_S}y{vKEi*x74l#;EHKIJu*H7y7!5zy9AsR>)a|?b*lN(xi0{WS
z#gvHU9f(tSf4zjH$*AQgndbPE8b{}jAXG;yne)Z`5EVB6h@YV@krmQF5htcC;V|0d
zGMmK->?mdo?e9dQi*akY$O>uC5<hBZ=u^5Xi&@mBKw_6jq3Fk!q8))I>3Z%)Y0sfI
zpZ51*$cQFl4-ct5J9Ar$i$;A$<#6^Oi)0FVw>C|%wKN|Rtvy4}1qu^#Mr{JgtfdVh
z4_g3FmD2XZ)0DYWsHo!QGxwvXcK>OFV>><)e$+34u<l}5f)20nZCWzCbC9MCqE4@G
z)O}buo_$!T@Q~v{E03E<Tvsi51Sy!Z<V|~1zkv_^xfqm~cQ$**0s4nlWb`<TMi1B-
zM1K>@2vk?fgExB$#R&?8dCWf@CzJ*$pT)7+^p?`ont*d>_=A@m2#=`$BMgpB1B7xm
zFWFRj{s6<MpI>3mIHZXsaEKgx1Io5b(`-urI-qBCq;+t5e4sP8xLCogWC3Ikx8$uZ
z$yB@%7xt0IaFQB3pv*qwmlv&g?g)86{@0(v(HL|b#~>l|SWiTqmz0L}Y%uaG-a3qA
zr*~nvR77knD0;d?zP;5e*cG0&z<tL`L}@VTXt!!s5^LUEFzx2sUyHp;{!k@J>uMTL
zGRUMMv67OShdp_cREo!DmIJ(M*jJ;h(9#G6JHVJbLmTn64YonlPqa+)2Tayv*kHwO
z;Lxyu?GAM-h!8DKMB?*~7I#M-T-wZ}uOJ>qUh)YP4ntrd;%DU&7{7;ncepUNbdpiu
z<NVd;`tV+%)agNOM!@@gBcl;n|D~Iw$aM>lO_T=W9VBWnAicwP9-f!3ht{L3Kl4g{
zbgYqZ7AiiEV#Um+)5||Bne+d^$>ION3Dz2P&8HyeDG)AgSJHz~5(_5+K`QhEGPbpe
zM!A#hB@@23xG?Ef$ZTd>lH{p8NCJfAtKjr^6k?(VZ;2|)&CHZ<KGE>8j}1G2#?ck7
z5pd;={C#ldymli|)v++dzGBv8VhMk}63?J%b0C>s*ETZ>P)Qu8*{n}_TJ@MgozT+6
zX>HxBbH69Bjx=HK*#n0N3W2^fY-CG~7-Rmz*XGVES+tikQ~I>SmS}r1cayB18dAyC
zBMeAAPiS>+n`Lk<FH{af{aW}0vh6P9t&@6lWGmW6`>sCxw)P5*wZQ|w$CC#OY&XaA
zfWp8`*`Po570d?&KPru%Fgv&-F60m2pTV-#{S=J~(Tch2TST_j^N#VABnp?l7(zyU
zcmzB^ae)lm@3m_88U*@$ol%Xci-YN$X`D+>uL9aH@1g)Yq)_lq8Xr&lxM9fRZcl6F
zA+udt1-^|N4_~9~%=7+P4|pG`h`$@KlpSl12jNnFKh0J%S7_sX9X(<uyL*7rM__aO
zpE4S5E%WZT4guyv2pJ0f>#KvHf_;~i0?CgMI4Q`({o;Ig{BE>>dRv$VYV3#@YWad|
z!Ak!S!XF8zY1DYxJ^FnD82l6)7x7MlrE=DW!ITLUR1IWEi|Is8xlzibl|xj5sZyZY
zhVp6P2QM<qFimW&zPBfs<J;RtXfNtlkFTq5Lu4^0%7VM-Ri0U+rNw@d+8)H?gCKKc
z>93mvzg#y50*aL>XDQKDsnh<VkCK9H0=imm%ew1t(9Rd{U&XvrWSk<gXAx{E#ro|4
zbk9oysQ;CdI}Ete>Bj;JAOve<XfwQMM?rOM5b*7g_kYqp_kU(ip^G!-%$8i|`=)hK
z%siT`qeEIY65RK{qLG0)p!u8wxGuWCK24?Umn!Hb>Y|K;zr@Gsa~VFh%;uFfW&*1u
zJRceNH!no1@~wXZsh~A<fIdm)17a$@^=lp{0}{yflY2rYvzte!1fZ6HDptJok5kPW
z5gHi#`p>bae;pdf6VekvX=yP4F}1YJZr#U<h(HiJP1!UQ`c$)g2#FZ|HEY4;O1(UW
zN3z3<MH2~yBW3jEVj5HE2AiUzE%<SMNJ^9DIW{lq^F#Q55%C2Letwu7B7u?$FOEL6
z=;Nt_-o`N!P7sH-DA>gTi_umxunUl{p)Dqw9FK+2n9?3i$y56M5w1m;Nk}8pC07F2
z^j^JGSMdopybgJIxt58>u}Q##7{Fbp2=dzR2PCz-p0EID*429c^}0@>r&a`Y1kcLR
zc5;SmslJQ1Q75J}iHQBwgt%K=ix4>+mQjM*^cIKOK+%k2HL$1`5PFoUQ++os26t}A
z^-l~3cAWF(Oyx>q`GN&2=Ch|vUCooyeoafq8~%mZbJt!Xi}c2U1`<F1e>6OOT#G&J
zWXA;1Xnge|H7a^c5ix_!Zp~jaLGY81Dg<!lsgq*OzENXBfdhyc|Gy#TrpF2|XEz|3
z88w-*w&*psfXc3}PDVFL?_dAj=6bM((5xx=hf)sG4!#UXO7Ppp6}f^@hTw9sE9sBp
zAsq)<0Hn@z70l%+A-^9pJhq1vRien7C=L<ARHkK!MT@0e;oEa1mOMvq3eHDKiZ8Z@
zR;CLLp(II3il##WwX9DgD6wPUERG-6P6VOT;IYqi$sd*#H3^$qPlrcC7{^;ow+05A
zMH(^F?S;_9`@v{^RTF(s^J^E;EZS3p6lf;cS;Dm^-*dSSx=ZIo)5kpnowq{&mOED?
zBAd3(AJ(9-5l${TFUR;_`0xI6e80n_Uw&AYQ%tQFk4xzGphJU`k%+(z=vLL_&6h5{
zDL{Z|L@;)pLfN)(`E5~x+d*$SQ#FO;%^ka1C#99oZl2)ohY<%u!UEL*4hVtI_E<Eu
zc?E19$?I>Kycy(6sLPh$hv6{>UAHt$)5sRhTfS<&6y3x~eEknLT^7Y_a_LkH+P$N6
zuUyAYbxS=vAFh$3bZzGRZ;vNg@7-q`Z+f#94{sM2J=2NQycu^@?c>U-+L(#&<5e3y
ztx4-Wrl%;lRlFVuCpvCvZC;Kxd@EFw+-bo3qy+@@t|Nkdx^)fD_EhCr?HEtA-F&)u
zUd1xq?!`Zk_xno%^@kC-c<J=9<<Y7hU92TRv+hfQ|8Zfjp=j<QRDJ{{;e^G&c#N)}
z=*dIHKN;dN$^+1q{@SQNuz&YJsr<3yzD+sWR~BrqR}3!q#q4{c_|iO-ydjaa62(qR
zKg!>c2C^Cz5o!3~B>TK_5t+zKjYtsLZSd()(Pj?p2Vx&`i-?Mh^oI^76szK%j}SH9
zK(ms_+u`XCY0~F!m_;2i!k$-}C)QO9n45PrbM2i4obeb>F~X<~Bn#`V0X<=`pE}TC
zj;$BI4?l=aQqr=PwCOC)EKUSbBabyEXxAcPZ0O`g@5x>69O*|wjz)oKfy&i9C{kFc
z)7S{6ju7HkAbSx2IO)IECa-x1WE=^1XP9W!z`@;?)6+jJ;wp>q{TLcSRABA^Mu6ab
z-f_SSsF^OSZYOeWsDXn!`;S*R8XBoVV?kPNF1GWf4pT?BuG|7!2e(H|Z6AD8)ED(;
zGbP23>6Mk4hnA8_)PUrl{*<4e|8HuF;b-PU^>%oI+8D<B^CbbXXk=M2_urbJvd85J
zwmRU2_N$9Kzw^A!U7`P`B`?jekDoC>HFRH538cVNzT}!`>HbHkIcm$dj-Ri-3L@?>
zG5LRVe?F5<-(tvDAbx^Zw%GrHSBI#Az4(tYeK>#AEJa9(J)-U#J-X6(-}E$s7C%wz
zDDW6HB7|`A>rkd&1L&sW<XBBoU}w^T(WDvRE4T|t5X)4G&=e8i5UxOxREp#2hApO#
zlFoCt_yR)NprE4)ap~RxyM#jm4wgf=5GPWgk|%GrB)3&CgU4Uwv$xYP8Z!;hw=qE5
z0YDEp*wP_9&TWatY-;8OGBYQFmn=xvVAMSF)7zxsl$aC&OfbtTy-@iUIL!3Y(lC<u
zt=4<pR>b!ky@hi;(*})^5z?UPk)rXw9Xlqs>G)`9W)_l!+#Xcti*=L{lNz;T4g-t}
ztJOa;MLV;KiSVr-K*>nf<_%+e@8FdpcbPb5Nw0I4K5Q7B>&N}jp1i$QSEEi8cu=&x
z{@!N~1Tiv%QIm54%-3DGz5J2s?bLW}MvASZ*B&8~`&f;irE)UIJTjelup-Cef<HM8
z!FV`Q;z~>jr6iSCNeneP(1fT;rK)4W;YKi(DHnZWBRLEG329=JB_ez1k9RRwf_@qS
z_-R{{&?uaQ=sI+2{jf(BVi}jNBuQtwA$gd0V-c+VG8eW(73f#S`Sv^+m{!%~%onpa
z=fHwgh^9n<M-2*rphyeQ`ux$U83*=Zj|NI0p*b)Y|FIAqMiKT4!4m340>J5ijljtH
z?Cy)ZnW<?Jb7u*1tvqG4OUTRCc2k76raEPFbd8xIbixpp)k|QoArn_u8D2Mmr>0L1
z>TI_Z>Fi8!y+hTth+P`8{%U?}<Z`<|QgwSzxqH2>%!*4$`0}^c`?v2>-9BT7C+TMf
z3V<VqYu%o^D%0WqtHsxv^wIg$*8bXqOReq538GjO@32vYzg=+f(QgpNJ(^%qC9o#e
z&S`TFhW~zo_W8cmw;3J%24nxq3h%wMe+=b(oi`@j_lFL}?!On@mkLxbms=5X?mgu<
z!X`T=Ha_luBx!p>m^;ZT4adiSwQjpZ%=9+qk>$SUmc+=yzga(DuZ!a+<bRsACnOK0
zqM+TIThIpdO(wHxC6GcX3b6{6y0RoS>#3d@xiS{+w=uNY`Fa1`F$B^8i2nMO<>F#)
z<V0<CbpazI5j72wJ<w$<D=A=iuMeU6|0Dsy&m1`gGPG2TZ~Ei3YLJ@Jgg`6Da~ig<
zCb9b6G&?h0xD6<7=vShFn}X&8&?#u`dqPB_r*9J9rxyP5)ER!ws-gVZZhIPgO=4QR
zzoSQ7DkV2NPes#6Pc52j>7!E5Xm32ayMntG)#*LrrW4IXCRQpH2|~Ag(zlFD#xP<O
zVuKt~-;{;G;qY3mP6I3#0pruLZ`1aQR~~Qa#g;+^3RL#Da)ii#cdp1cw+{Pulu1i{
zMJsZ8@pOd(g3u;F!omPxhki>q@b6MM{5v3&v2&>3#feC1YO`lM?Me;v7vS?`#oSSF
za%b=Y?B?e<L%=kPJA!r=X4Xp7#G;O{aV?hZlGwS1NcmPE8GzL2O__1LoFA$vsM5xC
z2;T9!K6Y%9x!rJ@*00~>GHtxxFpMYD2QNM@alLN-(hU)){soHMcaRT{jmb+_?#DOY
z&X3-UYL|;l|6`D3CJ$N_3rM8*b6!eHzM|~xXq{CLKCiAUDDMXgARi#iYkRRIX*#OY
zt(aG;dC<^Rd1NLn@JyyJ-8>#6Yy>aPOJ8(Js~BU%xr?~{YPO|#dAP`FX`xWk5i@~$
zcmtGk*B9x^=Mg7Or@e-p*Cy`=85u4s2)g#iuTk$idbAyeG}zec@)uQW);mK}y;5nc
zU;Y65sEg;!wY5GNt*k1>$S-8FSn;9;$4vkqRRWLIk$q_--j=Hs0>STVUWbD*G8PgR
zbFD7|*4DJFzdX8b2MXPB(vDvWRxHnU_xBM4EqvqBW2jm%0fdGk*cH_f3X`2LA-&7U
zPtd2Vz!S9@BB;^qe@&9d5KB_3v^_y}drIV}F>DoG@FhHp1A8rl8Wlr{(o930EFX4H
zG_Y79r50FU@zOu+V!nwO`NP+Oo5|CX;5kuiIQjis_ZPNe=(9kzEY3x&WOv?KXL37>
zATJC*RI&e$4&-)l!gRf;TFgpuRmJBj4i4b40n)+Z>%+UwIf98jsZsTDrATf4^e=*q
zK>+4MPLv4b>b_%rs<h@-uj66fYftZlu8#KEK%bkJHQ*0sDq<s8c8qOQ0U*rs3oHIi
z{<9G^c_5VcH!wpZPY+msU}32g95|$gB^<M-s(&SYfV74AnYOz5>Gj+|myED2z1Z&$
zf=BUr!|q%xbMsoLjCp-Lsdp5_$65L(7lRzU8vW<Zxw2lZT*f>D9eJoOG>51*+>#;_
zr><TdOElVPk+fLZN|rkM?ae*$`Lv^uDi~hhn7yrOY1`nEgs}BybcyF}dq4GJEKgnn
zmkkFp>!>s|vQ&^{Mk5@PDo(a|GH*@L!P2PfEwMD9Xno^$1@Zn1#c#AHaDTP|pmU>-
z_n`|Pg=3KFCCk^>B)<L&B;GKa-#03&)@&a)bzDcMr{I6js|}cMg}*43vAiBlBH2C;
zeFuSsg-wy?rOG8pYw{E{F(HG)q}}`5JvlrwmTS3f_<r5A0cyLIL|af%5#ix|g~pAK
zlx6u29XHjtWKywpMMm(Q%>}-QTCI<1lDE5Vk`LmqN!HokRu?bI4gSSaogb5GdW1wl
zuIDm*BtcbSOG^lVOysnA;WE8L&1Q_NKk9zx5C_p<z%dn0?xvVzfp7LA@oi3rRc*#A
zV%(g2e1xcP=-LikD}$7K>;-(k7q+b>`mZd448?we!r_o&q9Aa8d;43onCsywad^sU
z)|<T-(*IP@c%`M>5!<WoO_<xSKf1T3ySydZ2d7tqy+wee7wln-5|26(Oc{qfFEPvl
zPSjC6unkkcy;>CPP-iHhQNLjSwW_q!dw}X6nK(df_m8*&^V!jwI)-5`b1l%&OsjtI
z?T)#jK5NaoyT8Q*gV4p?N76G&j8V7Rkz)57i$C$;5uYTjn@5ByR%OMkqAU|5=c!Nn
zT8#RE{q))1l^V%@s*Ye#WGq?x4F(b+ky2IKz8=Fe5J;?DB^D!16d^JGBG$gzI2J4c
zff<kccvdI_!TlA$E$t|uxP^RtwL$T+^*6(f;n#vZ1tIf7yW7w`CEcG3TeTD)+J#f*
z|4erYmJ?D9@;m17*>vVz;nryhNXzWhg7*?PcnLgyL#<@467V_r9!hJpXYc}|QGH<M
zgLH&;L{V?p=(&K&X~;+cgDLx4V#}%572!F`rzfj<D*^zX@XkRQMnzS++y3Iadl5$0
z`6YTcN4PeX2e>*ftln=o2B)hn5ocUYwML_4q4S_}4(*&j;=d%*=Y)?4p?}Z$_Lr)v
z6H8^_;=y6}aO>YmU?8ONcq--;R8m>kc$QaRu42;V;*Ph;Ru6#Sym%jN4T?L{(>1j{
z&+oJglz@~ME=mlPMUd0g1{%kP%Fe{b#`$EcjSdqsOwS_)Sh&y>-rpEpE>=i|7wg@s
zHjl=a?DMt5-$C*JZi^J<saPyFc_SIu1q2Rou3BT7Q0s6M>$eOHh{D2!y%gX^3<N(p
zI1I?i+u3HXp@xI~ue_r2o5_dedk&j6{lJv+d|<lAcSYUCq|ir!kO#VLd863*(xzs)
zBROG|Nmww8(xTO*VsUx=G9{^`fIv$jzlTgo@)b>4f|2gKj_(6ej2lNKJuOF!>Mf)F
zGM3qO+zn)+p+}x^$aYe^J1WYiI4Z+^3%%M|f}zkpQxutgxZC#>wy`ZA(IVr4{<vg!
zYnWqjR%ub#Jxr-Sg=p4UYk0~6$(t1KIp$llyqD&9pC2X)q@Cvo8$!5cK-VHPoH%PT
zXoJ9mSRI+5YeS51Q>;MZJf(ORC$ir4Ux{*ahpj{oqdXHhz&~96;~x??=WoB%@7Dmq
zz`b?Zk0@t)=Gu<gY5LX;4n%#YqWK$s`1}y=Se{R~Ak)EWn}1QIn~>d#MjoVAXnTe7
z?^Jw1!JPQ|;UKc_3J2WKFm4W+?Lt>~gg%z>?{9I7>FuNIZPU|y$6<EFcDJt}5dvY8
zD*=N?-)Y!L;=RY>r8qTOhw!s}MmZQ4sDL`&{^=GHmt?wmf%*s>J=5PQbXjb*ViJqO
z-&%E;_rHEUiBMf?vOxkem!A6*{5kiF_hO9$6<^0oQ0N>AjB=A44J#-Z=n+a&SAo?3
z^#b6sS-B_e6=jKgd3_JVpfy^k%&2c_3OeR;E)V_axG;GeX<6d|({12v@9Mj;n_Sld
z@WB39%Ah}tQTyXG6R`L?@ZyGnB$(l+ZKL~ej+evu$)`3C_}ci!<}t-;IJwdRB?5kq
zMHvt=(2dZ@6y@Cr<JT7#|Iyhj^$laei&7%t9lA&pMu#Dfe$w@C!+zxvtKjH(b`|}s
z`Sp(?_n9rsb)odOz72-)A#bHoDX2WkGM%<pKK8j1djy$ZJA%_w6EOG@@&nXJjeZdb
z%ZD(_7lfN&h=EWoWcF#GvoH{9lcFkDdfWRi#Mq0Tc%qU;YdiOrMKc^xelwCre~+ra
zMxi4i`x(b9D>gzdGK+EXbbl>*tXVd6)ye=HfGKS}joS$zFT*JWrk@09oU@hi<omD8
zK$-24Yhy6YH^%1J3&ajjOJSO=OuyZYSD#9$cWh|0TUslgHCKZ5r~8U4JOVJR%a=D8
z5!s^%m9p-$K)eQRQWJ~hcqVtYka*GXoUI5fA%Gp2y>^0F%{kYSsg*3P2LpWoiiJeQ
zrm7Y(YPKl}6A#S7@U8ESq5ZKoV|{B!J2T#=inEndrDU5({vojFH5OAl=a>2;(Jt^7
z_uz2%?m<654JP{FIagZgHSR)MVg5eOT$gNYe8bSHKAh!_yfB3gsn5@zu|VZ?RzZCJ
ziie*RHJ^7z-E6Hvt_5^&AD)kD+lDifQ6wfaV#R+YAUFu%kWnr}&Nlf70^pJjuoZFd
z&5R6BOl<9cyi+O<MuOOm_y**hm^Y-FDUO<%S?w(yWbUeOQmJZ=qFYpTTQ=&}HGBbO
zW&k(1Iu0J#A`VikePos*RU~g+CBdu`DVn(&tE-9PjTpE;`(?{+S<Zc9Sty$|PVoMi
z_OF3h42i*Ez|#E0{L<AohR|d@9jNyO$BQVD$^;O)_oq*%>vd><wsRH6j3vi7xi~qC
zxs|&6F}<)GB+w~W{>jM-3GsZ=lZ=dvZ{?5QK+5Ju!jG6Z9E*L$2t3#gO@N^Jgs(-J
zt^O|Szo~NWM+<6dd^%p7YuxW}B6&0eM$tVl+z-|+51k?XV&=*gs$DiJqaWo6e?or$
zbSvb2dlGEf4UmS}#U-jqWweT>qdID%%lcUnQr|W?@3mbRB&W&#;|<NsJ*-#-9ZmWN
zp{Nx9E>VT|NXy`~{fM`54TNAw7$wyI6#}G?DG(yb;loUXeQGe|XGxtJPbbh7u`u=o
z+Zj<_wg{o8w_|lZcAmd0f-hdwdVbH3rzC1p-G7T!n!FUUm}NY;9*(b|=6#AHQSR<J
zDaxDAY?r?gEY_VK(cjnP#jcR|)METs%wi4z$<5j}z~%~)Jw@)Y@y1&tp8u6MOV#H9
z^|j!=QiIN5dRA%z8{%e|5MU)k{GY5Oo4HW~N_|bgWl1M<?A;qrZ`rND6duQumS733
zqF$McUOli$O(rR~;4;1jXldm%pUqmLWzy1>s8h)I+q=hMNa}G)L-j^Aq<Kqo{33{=
zUT0E=Z_cm|H+G9Dsv}i1t#V>CHaAvlr4<P)>cve=R5#DDb}>+h+1uCoB?ByO#YvjI
zI|46|zwH)9jLsT}*!>vJJY+mLQ4}-$FLqGCRiqbx!_rHg$nQP4Mgv(cJIiThc4q-p
z4VNNZ#XwNSz?cBGiNDc>dDk5{0}~?!&Oz62CfR_YDaJ>wmqb)s8z0c^xTvjO?kkvC
zS->s}Zs@lCqF5QNMjSEdIBDVsFCK2jZ9JjS&G9|9_2f#_YIhxRaE@)+zkx8bvDFz~
znR%Lx_j_J$iE3!1^&W?)iZRc3T!R6Hc3Ae}8RElz2YnzaYp5Snd%{5WRj22n`{d?o
zOAL67MnDqE<;&CK4wB%4w%Z-agj#24*6ZOx`}+WAZJk5Qektyw;|ZDN$~%R$bcE&l
zH3LAnu(h-@fUmWi3eXwY3ighFs9fWEye3hVQ+K1M{s8`9x0vIwT<L_+dEl-w-7+hl
z!+F0=g5t2fypda9^Kh<yKD|+I-Myu+S=|nh1R@uv!`jNqXyqO-Kjn3{-<(6*JKQuM
z4WvCibS(slB>U+Kw*V0Ug!9cr8}8RKRr*$rCle!pu419)!+ZtEPyWa_DklH%Vs(-b
zSli%#GR^<%_xc(-ODyh6Tw^-s2^);!aeynRr>{_0KzWYJSeYJ@gRV@fChiNd7e<+I
z%0C?19*>+af~q(yk2QkAL-B9DvnqG_r%E)&p!MQeIO$Kt#*P}RA@)qqKT!(^UCNC9
z(Zqjhm>kq@x{8?0=E#vpK#izEhf>n9`F5bmc<2)9yxOB7782odRtfcJB#O?Ozxb)k
zdRSdbYC6RZu6p{&3M<LMS1sW3#ew^#341XggP13TlJx7RlZ0Uj5r6ql#hI=rXo_Q*
zg5|#|aZ4{Y-5UyOD1Th{#8_uWYfy=(n2?cBk^Rb)CnDSZ%8;}0%*?YRJ9%NkMY8g9
z%eOuMbq1$FinENJdpuhYh-i8Z_uK+$-ZFn;g1JDvDi~d0cXA|$^r*DabZK^lcv&bB
zzIQ4Qg`b00%U4BFS&tce1zV2Q9FJ^;vgErx@#LEsK{uI~2~EKH3<+^F7@caMf5#K1
zejTA6o|X~OK#vE#9<{fTMsU4i$^dL()`wkEsEtT>9@V@p#MhC=7EPsGp;vSFO!riQ
z8MR59Y_F0!8#ZD2=RO-)w<IFr;xUVZJ~J<st$U6|N=*m-Qf~kLR^+hdXCl{37_}|p
z7M_vP+g?_rkDWBo=<S8y+EnCif~ZA9i)dBa%~*MWZzx?&?=0$^{Gm8WMdGbpT?HU*
zFkVw$OJWy^NfSW}J)DDAOA27Gh0ue`$P!6%d0@5kp#DI=k>=wjcK$&jz+Sf<AQtc|
z<`4&@;N}aaO0V2Jf%+;w&dg|S%t{#%%Fiz{8sq$`%~zaH5XP<vi2DD<@IZboh3CP_
z2GUDaaj`$K7~<8xiwl!(-+<L8zcvbL>ixO9lb(_Fn>qqTRqyl*uY;gfuM;E=yKQj3
zmY1NM;E*W3C+LJA%I5RsDn=)Bx31QLS(FfiIkBfH+0G!*yuJBfUVl@lCiVj`v-bC#
zCP|#=SgqZmDnxr5&$0sXOx){_>G|G=&#<ILJH20`o<`6Yt^vQ+X3oaLw*cTyQ(nU_
z1f7FPbS=K09S49oVxxW;(0@4BWp2@GYYHmxzH(R1B34UFOJi3<p_RCKdGoA&`m#Tv
z&TlR;DUP$C`8HR5(0X56HPnoIW!KW`y1ztLQqKK108?{Bnr(e-FG;Ka^Z5K7I45DW
z2MTl<hUIoS0KH7+99tcbeSgF@gHYP<>($v%>Ur}R%X74X23(6%5t5}wrXNEd4~y5A
zB^N88*cd|7<{K+jo<;-V+NDrD{^emTFbYIPqv8MPWR#`hR(!Rll>eVj_Q@Fu1yFQ0
z>akdVJba@#i%=s~Fj6qdhQ`#FA-Y<@ovLcSlkoJ52E<m@?OU!R%pj6yCA^!eOwpt1
z_cRGIDhd_ix&;|*b2iAY4Wi?-4wA`sS3j6JuRMCXf6$OY*c3q}NQkUWY$kOc|A=Y<
ztr1{GethL+KHiOlS14;ZEp=j=NcYu%pc<+7R4W*RoHZ2*&x!H-4`zukTYQW6ra%WU
zdV)s8=vL14n)&re9nc#3wxTKKZVg)~&f{D8s?I^(tOq%%`C<bi(`7_UT8F4u81nms
zQs_x#wG*U^?{VqipU2$Wv9|LH_bWc%#Yd${-P@?Q*6<+GMUF9`!vh3(Uxy`u_+r8K
z{rBk7hdT*pTx2>U)y_FP$=9QD+jT6&PDSbAo*F%;@=gzwmCWaGU}MTqR@`WMLtL@v
z0oF|w#h}VUH{esaY<shGH|2U}#v8TCkTej%H83%>1Dtmt)Amx$mevY&e!g`rs?sDy
zV<X8WDeX>^WQS5X0FLBn-okR5sjc2E(z7|tey=mWHFKxlnKmtJWV%aNP%2it%M)q8
ze~SQayu$fwRSnKhY->+yLifq#;O2F~Ju)QCu3OlV6ajdgQr5@n4GahbzzRDG@O6@)
zey1V|g+`hkM49Z^G%<Lb8Ioox_xLnL#;ThO6hI{PiWrA*m|ko%+7}t?(fsV)b7Zm;
z`F^q16yc^SyHn?lm$MffQHvgs4Hh92Q8Y6dY2u6G%dN#*9&ofPGhui^6(mj&C-`jE
zJy|CjmN{dS5>_-bxc{*tG}EmzqJkk0WS>(QmCV*>1gR8K&XqPml4mO9hMOlq<jwO)
zQn)eW=`Y%^d6*O0O)z2569F|aInZUqU3~n@${0Fs8le&C<=U>pH<FbmDNz_AjbvrA
zCCy~U{m*w0-BXsUu^{qEHOYXMK5yRa^5qrSn1odUIR*?{RgGOcSL*7%*!^a$+n*Sx
z`U17yh;M+m5r1LB)oASGW9bqSI7HQ!cVu6AZe4y0;XSOr>=f?-Vcfhk@hh&BSmWvK
z<>9h};MJwiLYC)-9XMRomOpr&G2btyy8N}PS~kbL_M9)4uo>`lFFJWVFQ7IeSE2td
zZSB5qyb@8L`6021j(<RKIa^1l9SlfcRNKvP>6!7hp4=BZzh4$XJ@#hdgXs3I*wk*F
zvF*%PfYYjC+Pr%3tTcK{=m{{iw6uUIso>{d{{ywVE#<fSAGiNnxG`U)4@O?1fYt*4
z&$vON^Z<oBq^^ZGJGa`9S+rI-L1NV{AXCd<hN=aj*7463)2O*T<46N2H4(`MiDISk
z-s25ual?Y`#Y>ZTt<^v5r?b*Q!K#nWou<>`jn$&{#SB+^kpxmL$}Wwm8@*e$G;d+2
z7rl_g7ga_c7hblpXIc<v7cRcF#|Z!5lC)W|H^%=z(Uih2zR(awC;VQ*O)-JwXP63U
zpsRFjgsC4@<eKm@E=w4^ooV=v)6T-oo8a|X#P`3r0`4t<Xj;3OdR_e!I?v~6Awe<{
zo*s3WoVD(7AjQzpMi>S%>2~!im>2Zpm)Q#>{JosM$;iGbp^=>jk}mOld5dC~NBJ+b
zHh)T5$SzhH)d1DW{=aS+c}Ni#n5woL#(iPtPnNqE_sG1NB2xx+4-pMuAIHIcOsYZ8
z(yX|O8RtsoYj|y)1hAVpLtMzbF=UNSHJXo%Emv(KJt=T<=7v|V{!rdxPHmu2VJ0I{
zK3yhhO~^O|9Y78eg)k1<ID?I|Ogp)ZK+LWpvd!l@E|*z8a(lrW|CU=#H0U|FiAzKa
z4^HGA@ZZ4IJq`b+>5PQke*_fGK+hq{2Hh%$?c$5S8kUg0J>~JIU(=;C@{J+R!qYOx
zI~NccK8}HHM;1BQzcSD~^5SCqpOP(UH4vL-G>phR+R+`n=woG!YXXP~<{2+aOMrlp
zQu%U@h{W4OpcR@3G%dlw)Zk{!$`D1NN68r+HpeM3)|k-}Gy-^~gEY!|_AdV!-9+oN
z=ugPzRdBkN>+YD)7)saw{nZ_85IG>zYMJ@ZWU~B9CGxkXq~Zfg@p!^ny3+$u>+)*-
zw;E8nE13@yh<{V7;_Knmr%v5o+uT#wp^!-|>!B6v;wF-q>S)x=c$Oq}eNw&a#<!$+
z*dj;36XrEp*%~>a6c^$lFSG<W@gnf*@f%_|c*$|bs2OJLhX#B;lo;;XuXZPg3vA!9
zq*R22Yc#iBxjAJVAz#c(BX1cf*jsg68e3dH9#+(^{2&|~TQ1$+K!E5sOicYG<SR#@
zf3*p?dz83(`s@Ks#{Sb1rfd3XeW|I@D_%nm2kV<G1l(-JV(Osr>A{rtKl#bY#Q0Ds
zveMt4z-w?S%2Pa1+{_GiOcEt}UM?7wgze8H#1m*r;V}u|Gx=o&P`}YiJjjYau%q<C
zCg8D7Qu`+VgxR>Bk#xN*FB1GHIG#qYh7Aq2BQj4#O^(VlPGo}qA({{tPXVY9p{mLo
zd^_leaX+d$u40w9K7KNzoApS^{K3>pE4K9T(3bSnc_Ly#`EE#*%c@-Uj`B<#NKfxx
z&<h(k_qX<9Y^VMslj+#s9srSYizmf}aWD-k<K?5Ib<dgog5+%e`Fp9*AfSBB8Thm2
zER+xvtQcv+K&-sPu}#03T3C6dpM$8xJxVaD1BMq4!0-ZWZY+Fjj%&Y``WAtQQsuI=
znt#hl$?VXMZDK$Ml*Tc)62~R(dZneBa7m#GgbA_~5{%_YF4HQzXk{F?i1f@PL3i!R
z7)#)Ex-=euBLfRKQaOjS;{57r{K^&Jut|(98)TL(PJ!8}!N}jSJpD@m4J;ZF_ehvO
zK$UIWnZQR;slgUAfHE*K-myF;tXuST1N@vpW2j7x&xogYGK^vFo-(7XTc)<Li57x+
zigBqHxfKIGMKh8bl`xV5IQODtz-k5RWi>{M*#(C75-t~D7_?Fk8(%#BRzJr+M9pBp
zjBCr)-rN?YKc1<Z(=joeT%w-S$^<*Uc=GL&CaCLw&m&)S2JUhhK+(%DT7&H&L_e-_
z0v~$bdXdr5`K5^mOB}(M@3Lm@E||#bPKJ{8+fLmAl8C2h$C2sL50hN<Uj}l)`wtMd
z9Bavp;lTfDH|wHXc0yRj{P<ccQBl9ZQ9Z{oOwJIOYL-8GUO2ihnx||)e=<zXGNZEM
zQ<3w<Lf+lwqjq|IO?1VMYYD9!Flomorr}IgwVSCk6TpZ<nFAx9nC9C=<@q+HVI`K8
z+j{_mU$;DWKETb2VA51<{R8OA5JS}je%emsa2be4H&e?h53-`Vgx%dgkYG2u-e|2~
zkJ+Hg&sh$%hN`@-{{C4aFk5vSlx?v;W09|trOWCDI?O^UD))b$?e0q*+)iUm+)k$s
z{+Tmt+Fxm$f7}rWE@XLK8yQPwv1Ic?Lk7|DmSWXIPGmUZck#Y>Wj5bZXt!^pzq@yT
zT#YMsiPSWxsdp<dF4GJ{pnV`?cueY~mhT>`v)PWHer)e6cA-fIA*+;4|2q2Jc)zn7
zmi7Jn2c$Rwp|lc*qx>E!F~?nsQcimPJH=oc_-+$J=uaFw@es-&xxQH4ISD|6i5kLV
zw)a3q=IJkCeB=a;QPmVk^&i=R0Yx*biWm4H6phg$^#eHNYZnmpWp+K7bvN7}Fk)<>
zk2ISI4f-2Fq<@^uP_T<b7}WersZY1JdIF?ELZI8R*{+j5a7!mGw_A)Wu${kOs4F$I
zW#8%t18a#40S5XC3c<<@uJ`CUOn{cJP~s~ly#&U-7M;KdPxg)y2=Gs+|MAbolMKTI
zHQUU?P}jA!EfI_9!1=Zm5g>Y&hN&6j<jo5^Sh42H8%9KB)aA$%)Xlq94xnN4ZgJp`
zw)ikc$XRB*Rs~FcVICQ@^_%a|)XxG7xxxS12w3D*jd462aX=FfP*mzUS+tyiluEX=
zw%u}X4XP$)q54xPfrr6wKhNs>R$9Z5)USw)au^lBvuT*1ZdO(k<oPI=Z)9T|E06Wn
zx`f3X{)ltg0;oEvL*xzryr{A6DmvyP8-~JxpS&8hrWrp8ysryR%upg~6NQMMeZ*nb
z?X%lWr>AN*;F4GjM(C&aY-fxfbZfDOzS$I9@mpL5D-iy+q?|~Ud40D=(JaBX(Bq6O
z%toI4d=t(Pj?KXO8~itEy!<F}feLwm;SXwG{N1|*pdY<D0yr3`=32~bXZBSc2B(Im
z-AhPa0i0wfw#V<N#fhca5I0Lob+q#OInMuwueX4yGi<s=X(><~3dP;s-HR4?DDLjM
zahKw5#ih8rySux)yX$@Xeg8Q*H|ORikdVM8JMVtxnKf&znF08xXih$t4(3q*Za#M*
zxqrUAZX?8UX3K#yLo}$DsJ3<A8)5RICCb9OV%?_ab3WxW0(S*Sw>U@>MRH7$E&fpH
zA+{U^DB{6SK!E-nV%T;H>`(=sg=qxV=k+YG(wZ{ZI1yPfhh0AY*nbu4f14Y+h9Vw~
zf03bu1*SsEp|Ve+qM}y6Cp1i%2Fd=~_Ps1BZ_jvOYxf^BRvb0fnVuP2eI3(qy)N>$
zJ&0-#TR7P1^!050=xUK4;dxqw9nE01>Gb$EC?*pf=i$JInEoKv?ln9nHJ%YVa*#hR
zFQy`aRx&ca*X8ih2{A*LsHbT@R|QW=>lM>xf;VvL<j_9skkm08e`@wteO|l~xn^ac
zu{JL(B{s&O<j49yhBFGPVx@QgKmVcOgKNMfo;_lH4jquNNu-sE;w6QsbK-M8!G0*F
zJYj%&XVSC&<wBwU=OZVZjHNe+tq|<b!<O|SSDej<`5;fM;z)``$rHgJgQ;cD8TvWF
z)St#Q_|JL67~mTt(VTY01dmn3Nv5)D2Lo%97D6XNUSbKjy#b4{w+|0C55Q_dC<ZZl
z^&<z&XX(AO?v*xMAn)775aS5vw)J<lJa}>mWJG9B59DPrA6;_zrFxr-u!Xz=qC?)<
z*Jl(t-5cq^Q1w*A0&<@|3bv5gfAwPEf9pldI)v%|JmCl$s7WJ`LG5u1u_2Tx=e*4P
z7YhbAH6gi0L+*0|cYTmj)m5V0m)iS3SsbP8YNRTb1GtNkP=RhpJdkyFw%lB~XrAhq
zHF19#BKjvZDtG@*tDJS7+;5q}z)UTl;26qOej)B>{o;9H=@i38=AwC=d`%;xRJ-H!
zGMEt$WF;Z@2>;twB|yiIPBiM)K7o6RR<rEaHW^sk>N|jsj@2V!9r<Ze5=NIA7EeRG
z^cT%?O`lQBz(np+IXbef>R?gUL^29&Wa{5Z$4U`NloMuOu_FhxER3=)VnZO-^DR**
z)gaA5ECB&-DSf>1yMQ2C-4A+M)an?)L>&Px2qC^twfLZDEn`yBncp={VFCm`D@Vqo
zwKU67+$8s*?~ZAQM8I!yvkS_{=jniF9jj*9<;+9jCOO0qJ3}k{rE-CDh^9(+m}%1J
z1Z`vv1eA+}C9|Pr8iyto4$+E<zC)|T`X{F6y@rgFDmz(q{i5^27Rj<e4QtA|T4S@I
zvLgT_s2TEVO^pcLGC(v#@%VuI(rF~C-N=ITFOmZP(+ANt6vly}K{gPjTH`Wh*4l7o
zRd0o^lZdGLCpFdOwyFc(6xX;0qE3CR<)S^XfxGo;-P3)s#b&~1o*F~g?F?BXT;=`Y
z^o0?drq$C0T=v2(R@8(TOua6Vd7xsuxoN@SZ56u`1kj&b4Ld0bN+2dLa!nR9!dN9W
zXv<=^Bx&V~`;{cwym{f}HOc3gG_#`P9Fl5M4b3Z$>Q@;#O!9?t)SK8^?Bc-+)NA+6
z3^hw%x$T@`LeyIL%0m0X%NKCdW&SP`wXc8H_2YqLr0-6|hYr!NE-arqyHw4sDy5g4
z2g|sET{l5a*?Hoco(CqobuU4+aZ%m-17FC8ybNy}mXKKMG<D!C0K8)70Wpf+c_a~?
z$+@}p>l|HbYMJcm&f$O)K;AJ6WWXbE8evND)KFOSRg8qqGuXE)3{sBhUaR$04?lW-
zy6;dQ%5X|3ob7pxFbar`HS0Y<2*^<`oE!S^v2GkCCMSLu0F$on5%`-kzhAJ5O&~(v
zuT%|GOVvmQ6pI~zH&gp!h|n2;g90UU5*hAq?_fnmMI7le%O`23(#y&EoKZbOPf27s
z%;uHsj=CjIOmBW6d4`yrfNvdaZUsBp>4=1f4xbY+2|VW^fN8Y(7nMi?fDid_p5Z&)
zVD6OwELM6Dv<a$y<>3(BNY-|`IS{V^@d6JDhBA>PKdVCkyeFql2taoMk5-r6hS%y)
z?G3r^xWm;`>JNNC9>ZYghDw0>L%m!%$5pw&o#OsvcnXgTT-;Lyrd11^b|4p9C%4PA
zOQx$)qHr|c@$;`1k!0imJJk;e2-dPF)&)>jp^4kTs?s&gSG<n4@vg_28}SkGzAM16
ztlbdhQy~TiV5dXVGyP-Nzl8F?+|%Q#nPL6?XoI0ZNl8N`p;Zf9SIuvh?&kas6)B-k
znr;;4nPu}ohPLgp{Fb%4o?9&GVD=A?1p-H=P-w?h4h-*&y6(MvTY5(F5=6v9_5f@7
zp_IDi9j=}kz%`4N5$^hzmHTt5O2LObFSihb9V<F2wJYKtqx2Q*>QS=P>>N$_>IU?v
z>15zIOVJ>qqH?X(E-YettAA2YXLGbM(N^exLA1KKDkuU^kior&`=_83&Tc+97rcPG
zti5gUvtW(=*609Cp@V=H2wb6?yGFYnHM~+lF|=6*Z)1DIZoRi}vmsz&V$$oO9uZVh
z{!BlvX~!n&AM%!Ywl(4XgnI|?ByW}JIq#}z`%W5;%bmE~yz_cfH1Kq|BaM7x&VmIv
z!Mv-kM{A}|;7^xo!o=|2VC$R)d^Z{YIypH>CCl}PAJsfQvsdIc=EdWGT;hRgyB^W5
zuQd9;c)v&j`)G7pt~6-0s>8uP@x4ES1A<4eZOcor9UUFj9{a;v2LJohkN1=2R0b@m
z*5~CgkJ}-r)$6hqfEwP`?fZ28GDdG|ZT-1Zm%)B-xkRn~R0>GA9$uTw@6QeVa!#jT
z0i`|U5Tz4yM70WFVWU%12dWIjp58LOB#rjEqUpKXGFGhH{QJUWdI0L?pAvfK-G&9M
zGU@o>wxHu+cH}QEj#SXp9Da2z(5+c=ISuImtUlO+_r~MNW2zM&kb!}HN_fSa|6Un+
zvC;Q8sp9CPR3&}H+xvtKY`*OlZ3SexNB(gGKA#361Z4M}NNyYWk<34T`fFs{K6kb~
zy#CqWN6~bD+XIuLO6`td_wc{kA)j8I9xbV8>wR8W2pneHHc$LtUI4zg-I3RuBk#)n
zRaju_f+na(U2Q@t3r<Jl5`GjCmj2v5W5AgQ%X#eN;ho?802fc>?rjTX;r0_TAYfAC
zP^1{f@As<`jqZ=rHtNHLb$2nP)56~bR1^x|f4Ct+i~l6fdst^*VtRQo&>N~wHLO`8
z`Evfk!)JV+=6;@%vTAFx&wOwR8a8Gco^f^WcVA_Ern@&h&tKQ|<URd9yhP3Jpy@ax
z3TqD~%z6(KlSa!>-4NF%*mRFlR!5>JD+yV-p*9lP1+Cv3<a|a$;<W5!6|p_O&X2?P
z)e&*O`*H;1kUt*mfnb-3GvRJ8jY3l2``$TLa_7%ojzS^kjMKLszX7D<H59}IbahW$
zqr1O`N_my+?$~PIi|TXDiS9Lm_<9em<4Tt|lAjZv4rq(KtFL-1BDg=z!l07{X$>E4
zhCDVy<U~_alu?t_UxKw%*UOcZR9ALzc%Z4?wP1p!=k3g;Bgz%<8}Kd=oIfEWGUuFp
z0h3?}Y^?$Lj&Z2lhm4F!Ts=UzzCG_pK=|E!5oc1+R#~3X;}Cvc$3dW%%xYI(naZxk
zY7*>kYzbm($t$UtzJ8#7X*});TOqGR$Reprd)w$$$S`^a2?Mri8Ikg6U-_V6X_>hp
zDRicSueW`YIrZHXm>OD{f@E=9+I!NOx7LRW-vbIQhQ3cQ;s}mrj|V3U<-ZW%>+tVx
zZz%b8N=cskOF4T{?3Mpyt-Kqe5b*uBBADurPntPJWO5)`z<;Z{9a;~GkY2lj;yJpS
zajzPa&@o-eax<}%tiSF=f)<T@*LQRvn35_fw>{heE9F-RenFn{c5I=$fXTRfQB2~!
zP$XrbOkqd5pXwM^^`YhR1(Oc#Dl_y)$PsbxA^kMXGliYeilRK)ijf$LFrGML1BLvz
zyCrB?elYiq@P<QG9pb8kh#4zNGgq{iI@aiPHFIP|=}=$K3zA=pd+(|;=iYlNJER|f
zEcBo%Kh}gx>Jt@`$f}Hf<cWNo(*8BHsp0{}ghgpYDuZieM%J5B^T`QaeVS>C%@&0w
zDX)#h)|K_YQLS9LZd#2z#E?mUQMB~D{+)nm5OLJ(4?{||?LAyw?K}QJ0}R68!vAk`
z>j5yF?EuXC^@$r@I%Amj=3@86hOfcQVWTaI!B+Q+P1_As!uLH*UUvkW4&Wg0*%wIr
zuJuBr+Z~)eRGVJCkdTrxxZOhV)Ln9(Hy>d9H6m5H2W{Me^#nz3jx}iKR9DBIl()pN
z>wNgU;I*#NBsW|3)3m=HEAqV_T2YlyQBaH?#0*^Q&4}nQKLFM}GiiDUpiP3X+4-!0
z2liZyEbeNs2e!#;T$)Db%74s2u|x}l&GAbVk24}~kNeH>$OVJ*sLT4tp>%OEm8<y{
z?5h0@E{*yt9vEoV84($|$K@nlm4c3PzyIXmW;Sl(>N5Ai_HvUil~Fp)7WrZ0;cKSn
zJMz!~N(zG)(?$CoBO;Fnd0-#}*l03eSVBqS)kyJPI3{!C%Y|orW8*I-rWworH}4wb
zo1+8#t1I#groHVWz-IpOJA_w4TpW2#NYHifZ^N&r5hmxe^&gphZ;cNb!B}s&i`92F
zv5K*!+t%TK{+O4iIB<?6y^ROsw@EA27VR3!$uZcpzklke(C&i5?~pcqU_j$}r_nWh
z3#!`(l#p@bs{{O)^z@@iRum2a@K5m-sq}GfQe*{8shLslhBLn)NxqX;^IPD@b(1p_
z8InL%-)sDeIA;4(0y&l+rK6){&+0no`kK_7AU$+4C7Gxr!pm~bnE#N{<$rRn=dutp
zdhAWwmC-eOY|fGF>64k`ou_W$n%lHnY$Hz{&r|!(w-28_(Tj(^b+#>SXN9bx*igx)
z#~K?EKZQpnYmC?&1kFo^vWX{9Rvwh>ms`qLADT97nOb1%vLLU?Y0K8;@v>R$NDRDP
zTr-WOv})v@p$T~M0BOUnUX#%`?bLe&uqzR}*6K4(Fgm!*ZsHyE%Gbk(Qpx8YCb~Lw
z)%(n`$I79{7AU#0GNLMqjJlALA&Q2y1F!RUnkIe97G~$mm8#4p*F{`7gm8f}N753a
zbl`6|;|*MS4Sm9<6V$-VjRg-4{doPR4lTrKCH16VEArwqo&<_W7hU}=OmcGj!<S{V
z4hr>dJkx0(9g8uhkO#(YtrVvYFf|u<6!sC?ahpc3vx_n{2)wL)!{Jk;EVq!oLf>#A
z#+{#f@U))o2YwG+f@(%%^OQ<#Ro$o7r~!Mx%p<)guSJ}SuH~g}{?P$X8PYskr}R<R
zTW%)lXiI~LJNtxOvuh9&n<31GXor~B-BE{;*!8`w$VO`P$Zp{-6(mGB0hM>=m~XuO
zcW`jg<Obp!XU;uS^Wu`CBInl;U7!!vSx!S?!1r&}E?%8i%&b~S@>&vIcE;GU$a~sP
zE#(7rsO9b~R$IqAyKn4&Q}9Azm%sc~_thrPR-uZfma@T1Q)K=5m0=mCARa%q>l_7=
z%mOu_aP9D~GYWkOj_`kP*=@d`1g5n52+&{B@vDMPJpS9vn$}XQ0PE>RBo2w@`OH^i
ztlii7$-ng8-OY`0XIkxF2tq^K?d}?<)_7@oOtGZ$J)Ex$wIQw!x4*Se(o*Y<bfgxR
zmHoBZcvq>%!^;>=vxBf{efkz64!yg-cX?!jpTmBL$*Hddp4qb0?m%s{_ZI^Wl0;mv
zfVpjQ(!6eeI{Sz34-%5znA9X88EZEBwre>4ir1>CourXH;I1J4{{1^nL<kWpZD89A
zC@wu+L_`Eaqv1_DbKP_7e#4_7z$C-nFK<^^LLyYHVGGeM=%IgXtZXWIf4nK?JGGbL
z!uc60>h8_K^2XC^n5<mMoN)(Zm3-;OB{^r)Qt6uotJzTz93D^JRAZDduKvdR8qmGK
zW~D7AZWr_Pti^XD5h*Nky>hHGNIz&Wv7T;e6YX>^MKYwze4amfRC`#f4pbXl>6C4E
z-)qW^H{P{MpRFJuAfANrIC~o;J2t1yk~D7LtnOg8cMOV3OTpB=#=evp=tqeU8Zy00
zt{9V=gO994i@5XeCT<)cr(+xGF@px-TRny>;GnTY-PEwEAQ&H;o@^Hm-Cg!#7wqJl
zlhavmL0Y|cqu6Yj27y(U66*pYTBOX+<GXccHrcTnC+T}k5VA6ELGpy?mDC2@K#*^i
zJDa>;t~6TQzNsKXH9}pE8{yjn{{q-=5xI+(UzzU%+e5$Kh8gzzE0#HH|D6B+Wp})4
z$X6^;QCBXpo7^kV!_K|@!(|6-rWjouF}Qt+{jUuHuq1`p(dRt=#Z*^y%jrd0O&@mx
z8|e=p3rL+PDY6~Ybz}+iu;fVtCL1aDOjtqk#nXem?Y<GkjeeoCu8tya2MTw5UQf3g
z-R&Bwuc?-d<$~qAPhr|7=bNd~ga$VAbl<|ZL%!nlhbgWb>UM6{k5L_*qPmpX6W4rT
zsONz@UQ0K}Ro6Hr4_4yV43C|<)3OV%8lepzk>aL&FCt08%dKu7wPa^8MSX~R$CqfD
z9+s>W1L5J^lm^Ptb#MhQcK?i(&@Y_J@DkvzJNT}-Xdo&X8IEEEjWfC?E~6YI;_e}j
z8hq_+Phms8q-+*}lU-zW@ADMk`p|F6qM)rRp{7+87*SEe-vH<O<*%lZb;-0!w1V?!
zD=&?yW-cSbCAMG5^jNDWiMQ+w6lsPe^p^t&QDU5pKSR$Z&S{E*oEJ!lL7H;~YAvq@
zeR*f~?^)ZLSp@9?@Dry*dP2oW!*z@>b)Usenxp7On2f%~a1-YGk+6E((AgrH7`8?a
zO=6Q4!;8)i$`AG$h>IaR6rvFAM*|(XU%wpi>ccNU1Mb~_%{(T^DSJ31v}a$u-|w)a
z_+C+?`0OhB+VObZ^cfDtCAsyinXw{BNcuH?4~~;CFeFnOYf1n5#gUz@=Xf*?ksx7Y
zgpRikn;_Ab6V*{`3UY8FWndU=)zZ{7U8s7kJ4ej$d?qC#3PSe0{px;yPC!jvGsIUQ
zQTiF<*6sLM#$;s1ybdjgEf<*x64B@|dMh9xV7evg2qIkKZ+(i9ELq%CiK-5o_p`6a
zOZ~@t)goVl(HZLAo>5~{(-cNi6DQh=vT}m)O9rnyGKvAEHCM*;pHhYUsTPoqC>(xY
zqg}zsB;~Gst%+eVHC??2^uZu2O05s`7rC{z9<bl^9P^D=;<d48R&9HC*xy*<Q-e1I
zt(EC2EIl*2v1V44sAqW?&h_%||MZXb*ch4Zva75ILqu&(!6PbYgP3?<rtn?$hN<B$
zxcsj4P?pm5)QXn|=76nUgD9zZg7il*pE~->c6Zb=?bS9$p57Me<IQAXjqtD@FxFa|
zujaZYmSUTiR{1z=zfS19!bHjb8uUN8_+i2T%|rY-n8D_;Y*%IPdjCF&qLk6d%~83j
zT6dc{{Fp6B(oNdL;+Wqs(WH{**?pG@qUKqruln#W3EF@GBBJ&sh8Ay26_GRM$+rbv
zo+npj?+;%dhbhTb{(E@^iCD_H_+OfSTUugQlB=?%(vNGa_d3gH+R4|D4n+G^^cD?G
zZ+?@|w|5s4<>4QX*OU4VqNUpHo-RhiE1ImAT<aTFI<1MdLj5)Kh6xr>jIy~xwPYn}
zxcz1PwGPB3no)F~$#bAc*B60vnRh8onY#H~Fj2BN#`={&O?*3aIv8}f7dTzFijv2d
zUMyJt1%&4Bpadwexn>Ek-|z7|@Wb`ZMXOC#i^OnTDXwSJ>orU1br3@oO9{%>Hur4z
zMmEH~)M*7|tyb$TMCX#`x5^PtY&%8g-4KN64iq4AY(*7$d7VhOOAz9A|L>Q>GiD^8
z@{DXa7>pm5TZ9f9gR5(|56mIHP>+a0Wwt*o3LBcWg|NRKO;g8GPW`GVQ_tN3y5ZBK
zid(Vny|E?r6b>kF^wF6xycgtlhx73lu^hiaB`vF?fUIk=c;%_Ti7#bP7BAGIz@S6K
zj^75h?<(o#H2PQtp(tn%M(b_fCbiJ%zwI*UBRC26;{2zFc(YXu0Oo}M1I%dzX%=9-
zw5!5HQ0TUwId5o|af|5rZ>p&qck102E6s3$jtO#Za)0zp?_7EJwyw_Hs11ubZDr-9
z?J7jv^@;R{(H*}klz(VBjPKR&qWvQ@BK6(8ie7`pV;l4N{%nF@gUz0WEVQ^7hR<We
z`Ds}(IRIHYQ!LlP9tE5ri8^|GFwcVFmkE*utV)GiU;kL*fjSp+GPCK4g|oH+v0`#&
zDn6KzlTkzp`w%Pg0-;cU4ljOkpgownf8xXgz46aUIph1(zTw5a*&`Z=Jd15_W?-|}
zZEQvzv^PWR$yZ1Sku<as)~|+Yw-0ETmsH2Yi_ZG63vd}Dot<5$BP>Ru$2%KQdRk(Y
ztWK~RGM4q1$U3M4%K>wm{Em3JLUg*`^LUDA1wZl)o*XxVjk9qC(%UmC5Ilj9v>p&S
zG9OSgdtJS|IujF~WXQQ8R!gm1?xt%ZiTTbr(&&B*uDNVNRucJUIn~fw9^dgzRihS{
zI+XM;Nl5!U_@(`kppz#ALC*v&n9ri0Y1nj(nGv~*{tbA%#UEGb_3l#p`saGqd-$E#
zQhPQr&@v-8foQE{C0R||oYd+)>?T&j>G4tosKDE(p<tgVnYU9(A9YjroGx*IrfSiK
z1&cGe1*J`X0=Eb7gPTvNSxUc*yfz4t#W`?**!%tny16|VNl!D$#FMIr=TFU5b8SIs
zH`*eDt<$wT-oOwSOfxB_wTVqHM&^&(Np<~D!F##ROBWYW&!OBMNbcj|z7ld!Y3%w$
zJf_cyiKOB9`veY@qtckA(#XJ|%fSc%Me8wQ1Oo|`Hol0R(tr)1$anqta1u)?QsX;2
zxaRq!O^%gAZr1S5PhMloeQ$PY#h+LHws2D~iNSC@zA>^GIpN|Cy9O$h2~_Z>ylu|L
z+xMft$au&QaDbbnX<%Z6e`Cr$QZLyHoqyqx{r^cYu6!E4G6j1x6MTl}X|A`2Q$4F0
zF)@*X*?Ha_pZ3}Q3U+1vKu-H9U3FwJ+&A;9Z67`H?UvU4;f#cy9^ISYJGDL~1vCGf
z9}Fn~oc2Ei1)FncSZOc0?rhw8{;K}^g?M~&@?<hX#`kz=mH1X0|B>pHpmmVNxogjf
zuEmiclG!?P%v!>M<Jw83v7W++86i47qln4q5g)iVOPMs?=ANv$%@tQ#3io_>Vlp+a
zgeD-ys9%euXl$6bjgO>jhdT$j3lf^4>8;$yzR+g7iUbRm>k2Q#?5gZXYsMPZ>Chi7
zCA5Rr36526>ZwFdk4%?6qbePIo)lT@%kKaxq!Qcfk{fAHO_>MGIV%>hmKo4uI4{>m
zyp^3#$B|8nV7~6J1>{{N<2Z$7f}8E3cG5rJ(C{ClBZkJp*ixI{u#xpcEli%h+0Fp^
zsZ*DQp?U>_+FR{=3R_?;1bNiPO5ez8qJlnG5GV2t#*!6WD5Q~<Br7S}=jMKdPOkPE
z>JrTxaE=Zi)6_*y%9_*~v-!I8Q0^uv-=yV%@sH92PoY+==E)8E&tOBQn^C=c5zBZ(
zE0XeM;<v};*LejKN7EOg;W)!9V>VZkuHGLGDuPXls0(Q7za3f{AAx&$T+LEk$705&
zuHLUPr)S?vN7Wmax-2`xKqO}Wtp|KSErjajNhF#11b|*sfl#IW=xTdk{BHcKN2%C4
zYLg0eV#md^(^8{giEXfEOSN2`zh7Z1tPtkhXSXYiWROmsK2j)r-QxlaRQJ8w^<YYB
zb?TP<n(O~TLH}k9ktD^drQmh1yim1Ua}hmc$n$b5>HPE+9)4&33B<+X<z96eVgd~f
z?Nn$J_aNp>Bow*+`^hX%oeoVtl4xIUfZ%^Xk>9*+ec9HyaCtn6oe2K>#o5qm<1N#^
z7qdSmePqEzU$!%OC^X*b#Mp=l>r<wt9<A)*^jest4vtN|-Bq=h?6Q?9SW*XHNUB%z
zP#Wn>)8;)P#cX0XGr)}jlavkb#T4aQ>iA5e|EmQxg$>dyNa*iGR$ING(X}|DiOD8j
zm6n(9UU;)z_8Q360Gx}GiVDL)bE;g)?CE0DTz+O+8jWaFvky4b12HE2XeNleTGTvI
zRaLcmZ$p~rW;V>@Y0M-(DS^qLfA3$F1=;{nbEVH4^ZSH`!jKGgk|vE3To392b<nTJ
z$C^Boyej)Srd7?g6b8L&<q$=&7?P0HRvfx^Q!XPTqsQlG`w1;XR_vK$ey^=9D0F}p
z?!DR(mr8RXyg67Ke?wf`if<e@yxBN;I`k*ibn2_a;iyf@*lJ7Wd$TWyQdChN4!DY=
zprRw-<_^2Vp09S9S{QA*Cj(rBG5`w_#dl4zQvcQys*}iiTtHi~<SI@4xo|oTv)@C@
zb4-xMy~ggT@i8l&dZ>KVY?iEr2^Q=lE@d1mhxxd487}r{Bv&yd7Yi~c>6Q)sLd6rz
z8#LoWuQTm}CJAP<KsV?^SFR;DoUp6Bm!U^ka}}4qc!*@nRIXWKCuQo0C1D|X32Hz?
zJs~~0fza)Ae1%C_<uO$d=P8LQ+g<Krzn;xQFPyRXNheOi_3`zE83X_d>lxKBgnS5N
z=R0d(x$z@Xer|#i&EVh2cClc?<(AIl1)1IfPhBD^B3N_Fp=4(@R5D11cyP(X4f*l?
zD|f89CDZWU4+NrLw0x?4CzZ-f)lWTPOkTaPB1Er?nPgYe^)yR4)8D4G_RQw^nQYjJ
zTV%fI>TZ5jvj5%;=`9olsiphQnavT(wbqm%E>3{N5|x+q`-wO(;I8Orkb^7<D730U
zjO7Jv$uz)!qmKx4JfdQ5=6>&66HUf*asNd+gjJYKuF$!@TT%8s$J5I}csL9~c`J)k
zohFwj*@xAJpC+Bjb#E901_{u_si(IE#`C&~0<?7U@U%W|=CVVdt@}T*Z}`fT7+t)t
z85$XFUf}=iXa{%Md>0cJ7ta@q%4ofsmuzfoyao=hyqcN_@ELD-J#YeLKG^LEw~rW}
zx`3M~m5$dNC1}l#|NI<paF40|(VWrK?ZIT+iCsZ1dSbInsPW-l!}Y0;{ptEdmXels
z?+wJabrp!n@G^XY!Djg-mgH(+d1Gksr@<D=gq)(HkdyTHRJJmc<M<;-`19eJ3EnA7
zQTG$YlYk4Wh;NX&0o%L0C1H<23wi+ba`^f`_$#Z%4v2KD9D7CEA?BU0hdbat?b=Za
zwB)uv_`cw;hkQi8)5D@zG_K~DC(jJMg>oNO;Zg7?W?_P~SCW1tJ&2Z@zH+R3XeL+N
z!u_ds%TXbn`rAVOmjBS1#f<di;J0M`xcdHhcWXRi@iJweCig??zj{=f$nU+h&gqK|
z{nKPSG%FqN8_b5$j<|zN&+kAKNA?X|pWeVunzFEYdbHfa;<=g<;(K0V0{lkl^O=d;
z!@0=}+U7_F8newhF3;O+SYu0*1JNDFMB5|D+?;fhUKwzE+>nMfI=yR!WAFt%@VTUe
zHoViJF1*tw_@2;)DC`a=`PzX^q)bJ$TXPGU2SX4O*L??)K)0O!oDKiY=!cBAvN?5r
zdP{w-N{j8t7zhb<Hlg%XD#O$36F`+phwpL#TuAHPIQ6R6${OIM^2|%)7_ZK3-w7Fb
zKbW=S)3|1Y1v*2ZQOF!dtQ>|$Cib4tGk43m&v){%4-~bv$M11Ju1{?E*^dg!DpERQ
z)8h2&ySjvaQ-{}CIoiWt<T!RoA4Q7lNVc`N`~KJgAr;&wf1#7!nB`CebCTdd*FhB%
zb=@&SQIu4ad1i5~YXn(TPHiv#Ih&m2Wd1YYe8_fbSTF}&vY616ex(<OiHh_?r{fbG
zEZ)#+7yH#ySJdxe?p0Hrg0QLONq;N$arzGPi|=L;=j9?ClM7D^b*>|;#g^-fb(7^y
zTg8rhJ(Av*jvqyE=3rZVo==YZ^v?az8EjvSz`F1V;h=FuKouDPO6%F6ozz^fC7u#j
zC&|s8+AvJty6wThw5KlFo&Hr^_uZwqWi!Xt$mfG$JCrC!@A-v;#I|;cjcKF#OUWP=
zIa1mRDlWaj2RozEe#VO6(j;S7K*Z5<sn+nkRA^+wt&m?$)N(8r0!;+zgQ>h&u>E@O
z%%ObxFxX~%k`UQ0lZ+SHOt(udm%c$RCbJt(Mn=ZzT1RS;B3)f2CW9`6cbSHef;|tQ
zPTn3O%Xqd0MWoI<@Q{W?Td$4P156ps(>2O@^NtrJB33uR>n+y0@&Z-*Zk_6S9Tq=5
ze{d99+el%IL8E2=N0sxMxrgT~#-ulcLwTF;!ny}?M1JDmjq*y&j<7K5ht)R%i-od&
zk+bgKdc>6U^gRm;QM4b{WKS;NNJ&Lb*BauCMw03^cl{j_d19x22WyH4b~z>-M;w$R
zHI*Sd41Qw_{?9lXBuB_ot)3x6CM7(HS>WruIF7$WropvPu7z6OovLWCn9xl*N64Zv
zC_DrIhX6i)sNyi^qZW;kn)2W-Q}=+A(dwEIH1<ludR$9fbIDaN5*Xg6{Db}@cYDst
z+L#A3_~iTBU!S2K<(1`xt~*k~+n1d8-7^{JcO^KXy$fP$IdOe5P@1<EUK~jit%blb
zZoNG@nyEszQN~?^{<}NF_8b^?K&!iS{g-XU!o0ZY?*4>!`4$p<<Kqz?_>RzOXT^fQ
z@YGFNI|A}~vbT1}mh8OE<4pGl5G_VavKz~{5A)m=Y+Umj8f@1Oi4pr}t*<~MeIK9v
zFHvJG)zJ*&sry;xC^gHArIt8echH{(2ZtK9%RD2tCT7nxOq9+JjgS3}GVhh}p82b`
z+u@mrezTEx;HLa#i66q%o89v=wqhU}C8TJgvHCSSJ>AF&$3(jzbzjGzivP(aN7=b`
zcPE7BZ51UV(jgzwbcq#ZQ5@xSVOxrOBWM&{>Wnpkb-+uA9+Tz_%aVsrj}XOOYP$@#
z!hyh@|NGq@1_}6D8#et6vYWk*omCYtA=?VjR?&95>tca2kCftGxMVkSGCU>e*6hlu
zV&AJRVJ>AC=;B1)HrhO!^e+*zdskC2;Wo-w$&9J|QtZ?TDR~N;8#J=-50>8cWsI`h
zSQK;BU9(~vX<ojykhKV_8CJ_Dx8V29K(S*ON^{DuydR=k(ErEWUs&uHU7N2LB5Nw2
zqam8{%xN_;Zd(UIM3~je%3JZZmw!TA+WXVfbdVQ#JO}wxG^Fs=6JYYlz<T`pkwMig
z7WA3EE`_b13a6A~etFFLE&>B!P4;>tEhFE(R>xTd4n+3ycl}m~{?yIHFQBwhRpAnu
zYYbOYseOzhIR2S$7ewOlf5yV4!=nO=r^|N=n4<V$(NSp=XlmM%U&r&*ds8?^rR}-n
z3Y#6JNq2At(jl#N#{k9;@dK0=Ar#^nIWx1rd~Uz}Qn*^_(~fG5r&jt=4`oC?T7pEN
zCZSjbyAf-pGW=$I8$g&YY^YYB7T6pi&&OSdGDQ!KrufUg=@iUt?H@-5i>(bk8sc!H
z^{{Wybqx%l%gW0BW4v#NUT)9Vk{YzVGokR>Ym~hguu8lpnZh5bl=sVUtUOWb{qm9i
zU$JLdw&f-ZO=xIHU_KGo%>g2%0zovZ^EPAgHoJi<v;}Av3{d#y#YIyZV!&_ipM)-J
ztQ|*@^So*udFp{~@7(IW9h09WX52<7FvT~L#H7`DwSQPEeP??gzeUaPJqJ_TS6yMP
z7c3)i9<$qi=kf)qMv0!W809<34o(W#=Z0M#o%;%wu{5-}l@z;!&;BnjK#I%9*XyY7
z4wgO8E&cWX<NS3%|JUd2!{_;Y)m>9@H3pLWDG^FeKoG5QurZV^1jWV0(xoPlk{`~S
z(vpJXMaYiW5ojdOzgUZn#1L(ly;D?LLBK^1gPDI_F!dxKj({no^Wl{jkJE6Nt3(03
zfDxcL8vXV=s;jaR?wE6La+0}s$;bkA3>9e>*0@m-|3Z-uM-pR_!ij?01u}*oa)o-m
zgL7#Av1AmC7Gq$COPL6%-m#Q=A8Eaq%{6Q){b5`{rXMvNrGFmnDs^th=*|pMJIlmi
z!wl3Ecl0u39#~`ff!75vZ#IlUQxsM74(Lhu?P;Gr`CmEQ6$sA=^d2_S6|Bv&-iJ_e
z)0F^w3F$=AYHIMfm`l<Ulu@)!uT*jyMtyEg6lPK+uwxZnxq9*x%6Ge_CcYixT3e5l
zjFZ*T#H<!eg<8N4mW=1*w1<P}p2|h^Io)kFm6n)@Za}Gh_WqwmbK<EPf4YTzE1iOP
zVZgvfR^i~N4=y0*Yxf%56Lbc0mSAi+P-!SAT5a^q*5?&h*5?YDqKmFGAhGK#7@r}~
zhk;~{ViEGo1>-e&Q==Wf#UdNV7Ntc(lYdpxxRSL15|8T>Cm^JlTTHxi6YPwyoQo(H
zWY^Y)=WG)JMDSLq+Jc;F#n$CkekShg+k+^cs|z6tx#mw@0VFs7v%0>iWC}9b=46N{
z{)pgUbbMO3U>z0OgC-MgLV9{AtG1)R!{uu$uDe@-y?rTP-moHq{DU8EX1foruCI-k
zt}iaHfXy22csaGT$%~D-KVyZJZjsMB9^`@U<`hu_Q^|1AOU2?z@qCN)BCB_!)J`^i
zgb>az={5)<F9g1we-c-rLO4l~emSu5N>)OpT5w<%Y9?SDlOB`eismAFrsILURcG;v
z^Km~1xe1lvj|4}ag-X#8d)m+ef%HZXPwo<pPX+q^T}>Ha`^Dw;i?rHhj1p(e;NUvE
zz`DRa7_qWh%KY-YnF{HuHOZ~rFXVFf)Ug#Zv_!gtlpx2C$CU9k;RK{(f|BQk2>e43
z!@)35U$zSs6Z^*VYAXKYebNN5=9kZ#y&*fV)yL%fYmU@}Yt4!p8Y3BP+-lD~3%Iy{
zvUn?n!0z_CNa5h|hMkZduIz4%_NFo^iz&aPh%4EPSD3Bx9n+!OLu`n6Nw#ILpI%Hn
z&V|EZj_sgi?#@}!%PAR9z2qqrHh%a8f4zq@)|yr~cZ%ppc6!w=xU$q7A`JoPXb1U6
z)Y!0Zi)r>;Ex8@3{Ib$sk#ZLd>x=J9VmDD>m#W=ZqK>$IfD(MUKb}Nc$d(}LtlH!-
zkqm_icr~s>5_3At%Z^0rbUMMlg>L_e;HYCsdCd7G8W_G8`e~t(@JLp1Nja-R$9o^X
z12;mZr-PiW;n9+X2bUe8DG<Pb@_<=*^l@T!Jy%k;+tW=xw=BDLolCjl4$~?)+=O<J
zYT*@Z+&gQ&P^`cx!D6e?c?J>@9T(|{bG_?NX!8sr?R9a@(x3YA_iQW*Vu1Q*h20~`
z^}UGl5|r{igNv_5^JsFZ=N%s_m&nZ`OVW)(T8%%yeZUpe7l#u9mo=FQ8?B@1GOs8E
z8h<_BDCp@~O$Gn~CQFIx>gw)<1+kHv+xN}mh`UUz#+g$-&=7CbBKY^01L9?MTq<;k
z@^y2t@NZeB>9Qx?C--(#H?Ohu{EQ8}&yQ_jJdc-JV69j8l4za?II9D`{x3AkeDAwj
zVILKbMwnn-U0Oq9W1@7b(HSuk>dQw`Py>pwqxWuY8M1tDo!ut8G5&x8`4yPFlW&6B
z;%s9A$e?J>B@3n1T;&Hk9@F~nKxM!5`rvkgq6;NcbZf@4T_TqgJrW%*Dsjt2&cW*q
zAhv*Hp>!xad>|5LVqXaU!8Z%8otgmV1>3p6IttCbM<-CJ{%=i6kPAF0)F<w*)CqOn
zsGGw#Ev(*YtDj(R`FFY(s*HwsrteQaCeh+F?DzLycSC3FAmDFvFG%%H)p115r-&R{
zcmci%M=j;&_6DXSkR8fZWX;@2V}Iyhes4SCBJufH=MTv5Zc<zM??Q)ht$+Q493f>2
zm3}v1+{}T>^QxDl{IXZuv#Kfc?p#T?8KUA=(09*npLsvaQ_mif@@|NF_1xE5p}p(F
z>i@EH<ouT>NL9UrJmhhlp52~b9tIZ1q5v)R)x%Lu12_A7fj+ao;Z=K-i|aA=D)0WM
zavT@<BO|lM5&-Y<BccEOM`N?W?nw>U$8T(_Fn|Vm(6rtm0PDjcJl8V>T&LvO*wiaU
zeSuXS#)ZJVbvd>N?@iF!@Gc%YiYi7=wdo3Jo~%g2ZYR+{QRXIiW4x9xDMmR1SiXS&
z3<W1_GkJ5=g-FZX&g$Meuj(S*T>%G;*Y#$AZ=jx;f~s;b(>E9V!&eCK7I=6bD#FFS
zONm8J4P#T8Bwaf?t8k`jr{{;-3xt~{=}H^BkBF=7oldNoRPb{XMgK5gI%0AK)T5mP
zw4X)!g;#w0?TKDJt!^pak<_8)N)!kAx1GvI^YI4U{nmDfP!U!RdAf*64;iqXlbf)U
zhpa9wkDuj!#Yw6pIB_1%6D5uG_E`CD!ri*H4MtDO41Q<oUt_IZ@;<n8azl8Vd<{nU
z?3;UN?g#*PO&;l`Z{g#QuR7=9-#Et$vIsIK5<OPU`3ri*aD7*y_k#1{_JWlLqYbmT
z2S&6SSoIO=a2SKR(Eh&<pa|CNd1Oa<(vVT3vt4%kpj}LIY82(kYo}UUQORuePVP^b
zZxXg=+ueiMP)Ka~)F>DDGHRlv%1^A)&%+UP{oK9&*OrQ+&BcD|tu4*W_Ui=A@X)%`
zJ;Z7svj{AEk$oB(#o6_@j>c>s>slCmAg~Z@#i1}t!Sd*AN9CL{yGR1*|5p90|G9~M
zJ7w&t99;E#h&89(vCtp>Nc;wU<tyg{XjGJR^uFi3j=|!=+M=~b+H-UTiAaaJtfkw#
zlQ4-bL2YF^i*G75oUY(*MORR`<Kt8dwyJv4pJYF3e5j#DjWrjAMIEsN4dZ`O^LOzN
zuvbwVv?v36N#D9ds!{&=ecC+Ta#fmRbrJ^fuR3ZdUDK7Dx=)8K*VnILfI}zRXhVM+
z)Zc;1_1(_SigDuOC7!Z;Qat>S?GKjL_ZKEm4VxKj%AOf55Bj{Js`2%;_s7ogrv)Yw
zQ;s%|=d7uPZ|R@_=^+bo3hPVzMtOOo7sCXHWEDUeTw-LgS<^ORU14%kt0~urvmb@F
z8}a!jjeN8>aC9_-h{;rrXUi;^i@t<2EWOt?gR+q=sv%-6ji#ZnpzzD!nX7UutUe#_
zt0sn*T8Td!7HJq6pcAq-7tcS{IavA-ySAh(xg#(c!a-w1%-cTykT!hB)6g1kM+HW-
z3rv0{DnFJ?lAAC-%kh@Y&(ABzCHj_DF&jTis5oqQ$CiN4#I+Up!-ARWt0i&LPz<M#
zun|ieiG9M*l!U^~y&oAMXWaa6YFII?DX4_DxNpxekux~j*SmsF300ZvRB%gQLY5}3
ztNsB&A;n;LwqWLPsg5IbL?<=CM%Lz87LnZE)g!JQsNL(#sYgon2ZDp2IzaT@)Pw1K
z=z-rJ7ND`)Gypf`&~C7pLZW=v)J7a8uQ$V6!Gl0~ykd$*PX>JsrF4nyV#oiG#u5J}
zQu*EBz2HHlUJK71oh&A|`bG?4tJ5U@9u6a+qMzn5RZPj@<F8DfK%}W}YN)J_woui!
z6Lq|tY;M8Eed(wzdrhjJ%SS3w*Z8N{m4<7r3kxR-@8c0MJw&e+5R@|n9lUFq?zyP;
z-$VNGjHI(JQ+b7Gjnfxwn+x)*6jN^HZy0MtxJwKI$Uznmhsjl5Zi?-no-a)h+7T*i
zREhsFq(7dNO;(%&bjyT#f5SJVIgXBdwHex|G${h(T0?{T`J&)3iCZEM=JgP7Otxi}
z%w_p84$s%(T#+BP572%C=BxMfuGfr9e^+m9<@%=s-}fF29FEw>914e2O|pY-Jm$vM
z2`6WfbyUC<i?*WZrrnh(J~D|}3wUM<T5m0=YO9;|r$^!r_n48`6UgHPO~A;yHe+7b
zA~-5X>HrHwnv+Yg3xlC^rtz7?4Aswf^4x!?V?t?HWo!Fyf6qkx-+9cB{gGY!U3-XF
zL(}zNy6j9Qvv^Ecj93x3c1}Xp@!8CwNy23!fN{z{`QMl<z*Zq+w~r-Lz?xMyO{h3%
zd!@j+JL8>2e-!M1tKD<Nl5dC*IAmm;y-FD#8&liH`FMZZUs2E?^!^EsD`eE)RakQh
zYD4AGY!Ctj*VQ)?Xmx>;_t2LOm$noaf2M{?mdJRV@2h$HXgbe#g)cf(<y8HDo{7)C
zxQnS-C3~L>^WAI3Rhs4rYS`_uV^|c~YotZ=?#;sgu-G<Zl)>{ZI?wnytP<g7-Bb_P
ztv23yrh99pV+R1P<skPs34lv`MxSv{{gP)OM8@2_^2NTSx^PZ8wb#!22O9fJ2Pw^8
zZEr63$*FGe(ee&x8+4s`d(wx9XM9d&Ow{?^?AQ|Mhogw3<zOJn%>!ZR>tw?aUz8@D
zny~<hb8-NL1cuVA)7=<Nc}R-e(d#YZ`2L>wVy%ZEcKt9pVv;4|ZmveO=R|4}L_G_v
zD9ySd^0xyah?HACmzd@n?skIg5cs9gzMlRiDhTTI@)|_lJTA*GufBqtrTtMJ4V2h%
zF`U`83CME8hPO^vS?beqg+*4Lx(A$q_>T8K<gb7&jD|(yAANXp#DpIGrp`}V>UBXS
zluTvRj&=3a1ekZueE8A6nsfuEEXyAGx|4qb^v8c;-!*Z>XP^izzPPd|2iAq-u6_5H
z*`9o``w2;`)!c-_*h1gFwT@tt1Z>Cs=c#G16Fip#emHDhOjREDl_|qp+t<d97^kyw
zRXG+=r}$NKxJU+NXwqMU7Dh!o6IYihFcHGRp;hY5zd~N38HUR~^I+M8W)Y_fNWx-y
zaYiwKWh;A~7eE&QU=O-Aa^>1O1G0>nC@BpKtE!NPaO&-mZW}o`=Aa5&QD@wV=q!1c
zBG1Bkl}eUpq2s%|Uo+LrR~p@*S##Ma(xf4IYR#_~(-k6Kr`@8afFL&|$rV-)cy^?n
zsuune9;~<NSfY~x9mZ$h*b5Z@oV%oa^X=58vM-Tup^O<a41h!Y+<6!f%Oaf+jm{CI
zx&CZpMJg`KuL@#1wz!I=7N1sP-w>Z9`M)0faSj)p`T)Pm<?-=UF{|b~;|x?!7xH`I
zY8iz4+Q1iZxj##eMXDRNHrCH}WbAJYDCn{$)75K1kYI8#%0_h+r2oQpf4(biF-Cg1
zT@y@`NBPkF?k8m2PgzBy=V)Q89hXyJ%J9GDk5y5_|14}Xwk`gd!@6ANT$s7!c-;^=
zL1jWO(_)Mec8hbio2NIPQ)(YM)qH9>{`ThRrP7r6;kBHpTu!*c%!aJ$7%-$agSp8c
zFYr)ah)QMd#0nhpSUH@L^HN$gzs4X#<-Du@@<1v0j<nxdQ(qb(2$QHOW>8U7U6QRZ
zu?y$9DDpXo54-<puCF|>%(&}}W%(dKHa;6f-wqmu<~J{$w5zpnX~9GHO~Juq!6x_m
zRfz=SfM|dM!35Kqk1o8`Os>Y6wGT^Qg}gyX`12>FeWjh{zVAMrUVM4y!=g+Q6zWe}
z1)Ali>py`DDg`bOWxS}1U}|E_pQtS|gAPe+r5WAuGk}p`|Cu`f-BPB%%UCsyWLUMk
z&JkXeng_3-AM!6<Vuapm5cU)m^SX#9Bf{|U`_@UtifAi@j&gJ#)7~9%PXV!sqn&kT
z)ns$8?a=Ors{R5FIek5bPiU!mF^t6(jJ?UWf6vl~GTfg~H&pYu%ucU%499Pj+%>p-
zDoqOGKzftcP@mW`8W=ruN>KOcZj~$i4)jv<yh$5bpHN$Q9<K2KZWxY*ro*eLfOOPu
zHp7htG4ZvOomxA{@x!6Xrnja0`yUbtBkB991h$a>-7_w|y;^ENPS;^>wIIw^?o4NM
z#Ik^!rd%#^ut@05cF&=#bo3gw@P8C`9fR<wAlj>TvMcg=lDFCIt>Zf<p4KDLu&Y$8
zhQ@jy{x~mdVWp*48&Fw!C_H6HHR0ZZXiIz5%av%`?2)<4cBZSeu*)9_D^81V-lpAx
zqMCXnupezpbl%)dY?Z_YLI&AtZ@ktNqueT};_2E3W(UCBM<6rQ@*CJh37pNpo_%y(
z>`X3%O}qO6(zZlcm##oQ<2K4UywB9)^K}RC2{vg)?gqeVe2%jnrrZlAnUN$)m+$@^
zBg9JNZ)5>L5{Lf{NrD#Dd%lyzPn)Qlmb~6)tfp_HkRp_Ak@&}GWr{MMrBr=EygxYZ
zQ!Jt_>zUJt5G?DYz~sE`VWe`9Qk&X^!OXSB`YlCgu$cC4T$N@Rz4#!)qWHlc8Lj85
zd2>WMn>e>~{8unrh2V(v-Wx?oI;MYX2Zz-LNlTDt@%36e>;V1f#U2_HZ%`yEB8TH|
zTDxLT;b2h?%?hL4A0RP}JFUKHQj8Q6d3hF#xZByMC=L`+mgN$)z-X0~yY8Ub-{ll3
z?ax)7t@+D5&~or2=>zMQ2~0nmm?T)-2&hlZX+LGu)C@0imaZ+PUX5zUWC(FcD=m#X
z(}u1z2~O|hEWKD5+5jj6Hfwo&ysFfG3~};a?Gtxg;q*XXl<%jWv6Yyo7L8e*uK)|u
zwIsE8NYLHyXf;o_BY@W=hWi4eMPM6WT`SSr?7E42`pF0QB#IncrN$`@t?K8IIYJHN
zF%FL-3j{^lNMZ^cXnOoR0d-;=|9^7G=IYictEQa<CRN?%bkV5cNW?WuWQNWbWsAnx
zS$j5~hEzh;yT2=yV5=TlMHTZ39<{$8;fqiU(#F4%Vut6PjT1Urs>)b4jDAyfY)ylo
zI5!+T<#WVF3(!Dky_@5LK|n|9AWWzZ&zEds6FDr@g&h5Qa9Qm_&2QG?aCzzQcO%@^
z59&!iUSYh;#vuD{BeoU>n1qm4*7(vCgRUX<jCWuZQzJ6J<x!1r&~OB-XwUucf+&_y
z&rk&SKzrN-AWCGc?wu$KG=dkGR)(%DozLQw$Mw`>l*^3<Hoq|H3$@5(+*N)r9#@&-
z6iz@u*w!6L45KnC{7yHD>Bt@$m$C=636Ui9|5^?K1p=u$4p38>?(Yf5mXFMxgz3U;
z02<@7<TZ+foO{tFoTJcQd2dz>16BmB*ATHdB#D2(4<-U}x3p+YN!xG!KcYkx{ROiH
z=u`oQA!bNJWq&4%odBH7?O7pjL4h&^E^!=a1ggRRUjk8D2yl!2@St2L#4BuG`8ZxT
zWl+$PlLWYe*pHE3UDGwJ?EGInfLY#o>HLKYvOUslbpm8Zi`T)^5}J8nW9jI9ALB>%
zF!1K&*VrLb>!PUvSlu@@Ma!di06<Y+I$m2APkfX*A>le@kbC&;Sfsn3B}jV#y)HGh
zRLE7hOiF+DwJRVJPFU51z)OfKBy}1LgMm1Wu|c%*+?%^_w2aZ_<Kdk!XyPbJHW_`c
z4=cx8oGI*h{1hCCXE5q$BFba}T?{A|^~cd?K3#sb-Pzx(;kdM-p<Jl}`wGNV<;n97
z%CWd-LgZ+VYj3&u4-JE1>jF7y3|<=~J%g5<dpU&!9m&(ofuY6BgH;q-juYhn#80L8
zhy+zVCEMqtLMbU)K5`Q?70!XmnTi?V1euWj_nN6sp9>L?iML5U#e+YK0<i`ZYK3d3
z3C~;)X@kqcN=>$_EsYdfS4yBCr2OfgI~OP&soD%&=js5u9mf(~WdQpRy&G97C8$W)
zZjDyU|76#9+d=~8^FGtfS$_`b^VxC~e~zGIN%W#`e?o#o`U?jaz;Ofvu=()LO~AWa
zxZrc3rmtp^0G-8qV2mLP!_-W0@-mgEt4mFJY2}$epDfb<b;*&%Z_SP6F15$5|1`3O
zUy^@HTg(u0l9$#9c3&r&xAk-Qu8Pmf)C33A;f?!olC}?^zx8>Mi~NzP5GD~@=Ldp|
z$+`$$=wgGF0?#^FG7Z^3NUUW@om7DYf3J5t=1(C-@t39Ts=5cb5`|xbP!3rj0VdmL
z2r)|c%nx@qkxeIGO||48bK!w`r|;_U<j&Ilf<gHypJ|G)2R!9^_m_PR3`hMv2i^}n
zxVC2c_cqVRgE~*$fT<hEDH90_F%=TI7)7Cqp|zCT$)Clr7L?-O|He*`tCRVn0mDmf
zzPO_}Iw`4en%rA1TT%DYkA2-+RzjU8Q`^J2T|mIIY%%NNw2ncTbXD7<iC7`$PQ9rp
zaqzEHr2u(_QEAv5T%ZZ7PRMy^fzt%ob2GD}C|52p4n%?~hkz-2!_RdZfLt_Vz5)2$
zs=dxsM5C}y;;Y6DdoSf*o9%IXf+H+ZK7jD`{CavI*<rRdw)~wmDW;mY2B?R=mIAe>
zz+O(LDZ@9ec_q4EOl<G0HHHjXGiF6406ni7CR4(j!u#X5$1-g0)bFk=v67O4av32{
zPh74xwA|TVr#O;+cjxS%I#F=H<f+={ozVb5$k&Twp7D31RQGMUOyy&&{g?}E-Sxy^
z-Q~=)Aff?yi~HK3+_n3e0<C`F%|pY(JE+5b_GRXDKzM7lgh%9m{9<iwErUC-<WNNj
zkeq5A&eTa0t<}=6uwQT^{#^@#(AIqBsrQg&!s2caQyq9FXMP`xm#Z?7?}@+@I{W=E
zJCW|faJt&{{p1QMR1P`)g(`04io0`;C$TuxAs&$}N4a>Th6>QJIO@)DT4fobtLBkq
zlBD$czlo{8fnA=={T1hDw1|vrrVcLcc@i%F2~_JS{|{kr9aiPH{DGpPB8_yTG}7H$
zM7p~}y1QFaT12`*1UB6b(%s#?H{G?#`{MVU^E>z4KkoBvdEN&V*1OiMna|98W`=!q
zrsSG3;Io1vEr8g<ehkn`(&d(XLiz(-W~F4+;S#y*-Y|L!dnJO~)=0{-3_wo2;EqvG
zGFv32`Y)}3)K=wV3LYnaWuc03_RBQP7>%dNe?{Lp>UY>%FZU06iyVlP7z={@Il`l?
z-`1w#k7&|^tEA<oY1uS*xOL{4_P$vDEE#ItcbXXtW*z6r?yni3n|Yr%gzU8219xTf
zb0%Ru_f*s}pE{2>O<+#z+Xw!|?6vvRhQs-LQmz#zLQE=YDz*<x1}mL!Vhc)2*0;yV
ztyx{1WjN+|l9XqZYeRj3sLJKv2%f+%4WT9g5+3Umjfx}i{%kU&yuLd0x6P;4r+fV-
zuWSE@5m2L?_{hW^&JAnt)rS+%+(gW!o$&t@rCq{pZt(esG(PsZ=qO<%Q2_>8W?Co^
zN5*3bA)ti0y(i?lH=d$GN7yH4q5X<N`1qMBc7m-5cSc(PS5FV5>wDG}g$fMuOx*-5
zu!t@PkWiuHddV6@l!HO%XeqvuCbJIO+1~5oJuCvMAK}wdciS~<njJ^8i&xcI)O?tO
zz9w8y?8*D&c<&WDnQ?eb1Y;oczOk;JZqn1UozJr~=QUMxmj$Y6=M|NB)Z?`Feo3(=
z(Q1+WiCob$sa|30jRY+G+eZm#dx)6B!Map0NLBiaB5l&^vl!&{XFIUqzdgg-@VQke
z#t05n`F?p=RQ?Dn?xTa+WiwJ6@moeR=A})_|6c-+FQxetk7w*G4_~47KqX0yf@;0$
zPrYhf&#qcxN-)2Oq6D(-q0b~NDvevLqO!8LSK4s>y07TQxxQYf*yYP)FALCapV*tQ
zd0$#W!lW%0tvb{eI4Hr-+EWRPOU=pE;d-wAVMOmDu$|~%_DCKdLPFoGf3;<@?H@1v
z9`W`^o8PiN9R@A;ElYbJuBgZ8fPC*3%}+_7Cixj6cC*gnm?1^3tWm2SkOE61{KjJh
z^ko-(w7GB0=|D%|WdLYFceVF=XEmR)^Z^Ry+7anT2?_hxqQC*lez8PJaLz}FE@9m4
z!isGGnhTVi6dC(hzIeha9{?@e&sKPRIPb+{mZxu(#a#UIsP=S2>YFx>?Ub&T0o_Tm
zcb#7=jt#YwliKr}8|MA_hln~KxW^Xfk3YW%jG!B<0|OTSJcpXZRjS!Q>OPi+Mwk-I
zGma&dEa;R?=gSWd7dgl@T6;t*iNp=Jx}}N0Z6WVtE7yGfZr17uUE6mz0RmF0DC_!S
zp2C(VD;qeZ@n=lOKx5+Vi9Avvp*Bd(SWfr)`g;GNz`~Gqf^0^gnv{?JMJb{B-HBQR
zDc4w&?Q&#og~gWMVADRLD&u1SP&*3mx7>VtI;=%{)^n6{?LJ2UWEC-fB2FYk3x^<^
z0xA!vB&%w}OE{bQL3+J$B|{I}=VNTJ1B(>x&Dd-O*PppP%&BRdEr`bZRQiWArmmkm
zzDGw$?g66F?<#NEE!C3rg!kt$571*ij<Umg!cLH`+RXy}1O@fk74r&23X5^yXAFk{
z%2@xSmMxtER=#4aqF#8db{{B?l9+gj2dJfnk^zD9Zx@!e4jmU~LkmD1Pmx|@oCGG*
z^N)-PjsWZHc;l+|6j;9c`5G>AD4xX{Fe2z|)8AC%e(#l!c0(9`g6=XnkulAOM@mqq
zpS0C>eUHh<X!oZS!(~X&#cEoupvjOeA?$9#7N6gZ=IOmEq)e+Vw7+JuynP$}44r5Z
z1uj>ykGOVeKo0cKUHW0>Wd6g^+vS{uIUit0PjA5&5kxG(M=cLYQ>`|uxwy-JRz_O4
zwO4Wf%>@`^d4)#O-)QSSXxmz33X5)a?6JNgOGwcbYB^rqyE|TD!nt%TZH#gDeUP%V
zo7h?=!bj`m$4tEkd?t~S2t#O343Kzz7wC|N0m!1$+fQOI9S`yn&{_FM7k@jbtu1t<
z^xs9{y6noDl$;%dbUw96xyo4zllKzjrvdcHTyyOFr8vNSkq0ue09lzeC;}+O6sNv$
z2XcA#Cl2p+GMp~yLru=4Jmnkcc6iD?wMgPu=|BGsNIYj_=<VKOCx>1+N1+!SRQ&aE
zxETtyEj_AFHTiUAjY@UG*IlB%PtqE6at;E~3TxM)Q~;bely1CUHu3$iU%t1Qy)s?l
zIpP8tX-s>wK~)J5vsRVgOiMbxnckUT+$a}IUmvM%#l$7;xJIHnxdWIH;~z%Qv90Mo
z>_K+>i;~nT&O=Hiq(EP_OIG6&mb1&sz5{HoubF>J79D3^D66Ve7;HtW+CNc4qXkYW
zQh@PiG5H<R$!-{ro~JLX=7B-4vz9fDklj7l#)#e%^WLW61m~%exhJYiQIU@1)f@PO
zVC3#49<2Hb*wH#FW2EqSc*v1|R9=I4M?;>AqLyxSi|oqS8p6Dvn+%6zl-R^VR~nJE
zj#!A}@H@z8{RoUZM466qd0A(0K{O`@OxGis0MuF{mSlLctuWsE4-O)iG_70cdaN<n
zwC=sKu(W)3-KwEhX?f++a(AOtlIYBV2CDPB4&(-OrY8R~rIP9KEV*38W$BdH)%`oF
zh>StZ==*4ZQT-#DdVP1df3LJDWXx={&{nW#sw+;6RC9H-{0;o&`VlVNN11Bc!gF#o
z2BXto;nxp6r9heHW|&5$`_(~o{ZZROem=9YvO?k1U@Hu@<>As1XhrC{;tpbJJ?D&O
za$7a(JDPApd$Tn(vrK(BtFU~#it?$!8Ct@3l#^ZI&*6L5KdiHW2eNtZeS1kwNr~@w
zvcW{bLYwaI-!0Y5A?mmh>Q1$d474=?Hl+@bR#e2dVE~?%ZnEV*Ayg_T9cNt~Pp@+;
z_@<RIKDMTis2ptc9nVn<-rhI;5BZ-spM*e-xv6-I<D;z(KYW2cLB)?U<-xNc#X7e(
zGe%wJ<e%2~`2thO855)u{`=%Xa1l-RaLez~KR?wKyA!WreuATsV6dIpz;fdMC+-qC
z_Kl!jH%nU#NSJe=ezPDN>73-{^W>XLVJN!)Y-yc4Td`7FIZ#?7>N@kD2uGQ>t%M`2
zahlGGPhNQr!=J-5cR&`Kd^}moD#5?9%gEF;COxJ<@C{XYDquwR6HoRRS{JnaFMv|0
z*=kQd;IyCn0qtqgNl1o`*-VnU931NXpLngQi&k*_ivq`I7p7+`gx|u#;K`_{!T@4a
ziv3_3TeM-1!L?Oi4;&G9UBdBk`e2%4Wso}KY41DL`<mx|{rwJtUXPBiP$Tq#n%!YO
zS^xt}+{mJkn`P=%x)ktL(tgAJq}n#uF?YOGk$E6dTzasLKCID6#0%oifQ$mncA$?y
zg}c@dWNqgm<PfhQCnS-avEz~WNPyJxHa2Q)q6;@t)UZZE{M*JrDejB!si~b%pbblB
zW)^Db*5%=Xgo_Im(2d}kxU{4`#8{2lsFxX#L{^_gqvy|`yF==!zwzO`_}E;N9zyEX
zp0$CAV6_H?hLlE=vL;20jxs}rlf-OvQIj-wu5V$EeUnnK^};Tz#dBP^5OTCK2Uv!5
zx)Tc_XYxFdz*zCR#ebq<;~~Et5jbPT2nazZbe%M4y7T8x_kbu=RI(Kmvc38ATc$B0
zOE|a^60OJMW=48(;Vg{@Oal37bmw)yvtkRU=Y5tW+%vQ2W{~~{2q>bs`q&8;0|@Iy
zTK6AN>49k{%8Sst3N*yH)bVpk0CIhA?;MXpjRx@7r7wQRG2tub!(jx(*#2+Y>AgYG
zQB`GpW$aNWSEz=YGB1GAgN;X%AKt(Gh)G4>vNWQ_k`RQp=~En;VTi?313~!Zf_-hT
zz%ec~gY%}Z`HOMN*pm*&x7_1b5SPw1L|*j2<1U{6$@&rIa^ozT@MwC}w2?yB3VLWU
zZ_v_2w8j^?)b-!b@()82!NA7e+G`IATgN#GAwykU?+o%pLiG2K_!QI3m780Y8;&aJ
zn!I@>_Kv-;xlbm!h75Y|q2ZX}nSPcEO}`CfAIXDG&ulPwd&->C?(pMJP;G+aHm8cf
zsf=0L-iVnN{s|(G)FU}2aQ{w4Vd(f&^8g#8DP6z#iZW?YG1x)33Ez$DyPD1}7`!N<
zO5N#rHmhYmO6Ff<J&%clGrSuZ2M7Q1<yesh(NJ<1i`(d^5)0j{MsWt5N*S8h^4f~h
zcVO&A{!31etKEU9G%bxr7Y_WS;a22VPyfl>@j>IVws^>jv(kFO1kjKKSR!o}#bCYk
zWS3bJNA_CDKujW{2r>j`VLKzT<{lRZAUmku2C==G7W(W@h5&q)%MGENKG!FN3*}S0
z-W-eA9}-yBe|)&M8m_gPulP#5P+P(KCHLS8&o7`akIu{ps;p9vczWuZR8hhD{KboU
z?>qQpE?c2J)#9&UvF7Jh7E_4fU4y`6U~BKo{kg3vb^lC}+7f|li$ggV>yg%DEY-p|
zPV4y`8pNxWTjnd-L^D2H=4%YXiAfi$a&_)RCkyNS1wH4H8mqZ^33^k`6k1x^wPb}E
zN7-;ycH8Mx&f*0{b#;~8lA@vr=e-$L{XhCGHxS30E7HIzi*oPQHQK}OSZAuIS1X|v
z)Rb)Z)Z*X8e7rQttI;D-w{X>V`;}<heQ(aUeC3LG`ye~U|EgDxwrcOi_q!vEACJ{5
zrPn6f!AmFQ=kFgpd{Cl(Sr5Orc8rJc_eZIGKYrjGI%}T`0Jv5{=%ad>13)U2B&slF
zzLXAnLbUkJ!i%`Pv@pnhtF%Ogjj`u)m8D&<gbqr~p~MEed^pdi%7CgifJvrRRq8#O
zB)qA>lUuqWIz#Yf4ZM@>Te{T^y9!13w<y`(ji@fs`YN*YkRab-=!l5#>_uTdjq8r<
z^d8%_XWu747^E_m@9Q2KQmzdSsqgOgTzSbI)2%LssD#jW(_1zg*GboprfoL3JZYGK
zf#BbO<pQ53au6t^c!AS>O3nUyeB<M~F4dwZVZdv&T+0NKMQ7;!qSu5qKlctvN?EtT
z$x_ZvDWNy{hHZ0r+{wTbQ@r)=MxavH9jfewSEgR1PM_!F%c_#>#o0pkaf-CBnb(qc
zZ4CqHnlfQETNe-fSh&3D-htAVj~2UM8hxl|;DNB~A2W6XR+Xg;(VR;c1HfTP;<@Lz
z++XTyxUf{OxdU2fx)r9$-0d1m<KH}&F-T#}eAKV8Uil>S)g#E$wT@73I_a;}`mdr2
zd%p%A<saP&wvQ)E(<>Xm{q_0XDwtm-7%VKj7}P8G)I(IZyfjaWsGjHZj)HcY<#wgu
zR8mN^>x)98z%?fi0wNt5(S`jxL{oW;=b}5F3b{w(a-|+vd#ggiJ1f4-k0ml?0{+!i
zRX+!dkUw>_i}R#f-Ih8RaxxZ@0cGo>jcTN*6o=4CCc*VK3C!7gOTLZ}y?rAsRaH?@
z2!=<RXL|9F{&9|2v@QiDb=XH)bXiQzR9xZk7MaC)<9+`AtiW^LZ{kk}1D|CBaK&=$
zbGmCbaO{ishih%7f~jPZ%k<a0bdxyJc9>+d6mrZOT=z6SoTP$`@BrdH<bq4jU~C=K
zJ1|ns=esFR0N|!5V&3_AUKcw(Vs&)>FB88}tmd1(0ymoVYJlhbfbEaV2sJ4$!bh|1
zf}^*rm8{#7<!rA&w+tP!X$`Zwt~-mwejOobJds>xf6xIkvAapX5oG8wNhW0mbBekD
z-R}#m1S~eMYXpzWZIL_hmhQ;Nl3T^_Ke7eyDsIdpgg)%yrTMaiY91(v{K%7f;jF@w
z*0C#U+f_M_x#PajcXsHpmk4VBr|xc7(^E`&67IYuU-x|WbGdMTBFvP-L$2T+>}Oh%
zKd#2Tl30zg0G|3#e-XbR*QEQ!^$@DpV!D1GEwAntQLM!^Q7z?K0?23Oif`=ZW&rrX
zKR`I~bkK>@dihT~2#QHeER!;Qpx$Ux4Ze>Cc@K1;33k7@k})`ok3=Tm{yAMd&%BXa
zAefd1=)g77eX)!aou&CC85~Zpno897Z~wkkKA+3se49vz*!TGKusJKpZlUNxTB}p1
zI3t0eKTk%B*zlNDNs|?pNoCTeumlHz>!{zm%`NC$)Y;kD9B^TH#2mL5>j{NJw7*SR
z7*9?a?mzU>tgTE%v>q^$cyF4w+}yAM_8*w<QO*%2g09VSbfs5+8fIB{JA9kO4ij{6
zsL;S~jqp75@%!WVvBHtHeslf9wxceH#LMk@eZAOM@a~CgL~BS8ODpCo>7OC4rT(m+
z6u_F-*hPV*wYRs|du*CT8U140Z<qQO5wR)WT>zS7Ns=zoN%?az6WL`^T>;U%I3fd2
z)GOgiQ{94RAL(xw4*u&@zp2Zj2UZf1hJD3KTgOEUJ^_vt?bWFUuHM2_Q>?dMbV<2S
zZOO<ryV_0Kl-ls_#>07%Wpfx`Y3l88(8$3qrJf)<`Lwx8eM9Viv26a^0ieFA!uuAd
z(J}l{6YfuSPPbi`v07|G!odF3N>z1XOp51ETodWF8X(kJZ>pCGsQIZkACk^?Ji(Vz
z@r<7o^ar=gwY|oSjf{Su?OL*_H*&VQ#$v&@Sq?XsW4=?EpQ4bfIIDd@G{RW$Z@sr0
zbp`SY?;&wdeq3_l3Q_!VeO`&?emJ*NbC%(Kg7GS#-FoAYf}TEgauUmAFttC1+?<2p
zsz&Rmf^WIflsbj8)b#SU^lbZAp1ad{tP#}ctZR{n|6~>`MMpv5ol>4aS2HHbdQ3<L
z#fJ|8fLM%FLG?-$`2913`jp!e^nAN>V$+ST%cRtAM)ZJkDtbi3Q#>{kdX#o@aR~{?
z4s9$?sz>kih(-1BTIw9X-4TU>q2XM)BjHiY70`%x&OG8J5)^}QA<({dQP$m^CmiQ-
zcv$BP9`a?}?z$SoM)n#xunS+;*WcHcqmgp@uXTvdRx{`UW3T?}9BEK;3^+2<CbNyD
z02gVOl?2c_8R(dpQWlb7QYknLTH~8v5pG3M4g#PmTl`o9J3h+U!P+^$;}Wr&V+yYw
zbF>TGtC_1A52d)>)l_6nhgeGwW0hV^i_iXYIJ?$_%hjxxyAl9@*?<J|FckLBMeYTC
zmzufXNdY?y*9Ki>%gr3oR%@upt^^8@)<O(;YSkvz?u}q<eT<JNKSpN#Go#W+Z0&AJ
zvwjO?<3D`Xt96<4JX2>iw2tf!vmx!H96|ZaQs?_ZW+63bYQIs8`Zfg5e7w5cQ<%(I
z`1inBO3RY4y=(zfJDB6{4khCLj#Z~-CE~U+K1V_9=;&kK*$qbE&3fyp?RT<CT;QuI
z{Oi|1g<4dX!80<(l9!|{S1(HklMj_;w6BjGc^?R!&Sn?zJU6&YT3iA>4biqoTQF^#
zE_Kru_bP^mNj6u=gpNrxK>lQR3HDbc)NxOEKvq%j6VKA5B6f}@X8)9f3VjCBmc?o*
zDt~@s0eMzxy1bW(_E}5INTF>&zH^o~%E2zLp2|`aI{9uzVZHpYHAVILG(CcUW(Wk@
zz5TZTS?5Jm@s?SY`B-h}z!@KeQgLvHAs+LuUOIlcwuW+j9Z<hNUmZaCNH5AlqwRX2
zE-5KF3z3)5Mt}Hl4TIUAh$Pqp6S9G}kR9{R)mjC*|7Sb{JTZlUYYmqXO5B9r@2*ik
zV4@Z)DP0{VNSOvLch7u(3Yb*YXpy+f?BoW_Z5Vp#haesTPrZY|Y8{!MC5Jlc_B=`o
zqBo+-8ZW*SlN7RPE4$Bc>ixB4Pf&x~ng<wig{zk=sqV%d&3^|UOD!Pd?oK-*c!d`f
z)U(USFO-k1Sz|Q>TpXau%(n!+w5UEK@YIP>+M9oH>EZW&2jGeExCyLnjl3F@Wh$_@
zcT%Xk%GM?+<HY0qD|n0=T+|A7SXN-;Q1Vt0IF~=%s*yTSiz^iCiy!$M*RZ%(cDCJp
z1y?{v{e%Ype%wZeb@<$Nlf-uUkcCD!7miw={+uVZ{`&Q~gxE1@<ZegkKf8ojKu?X(
zt|4PwUf*r-I-2w<Zy{qZ-Qy({3GybJg<Kf~kZlqj!_vEg)RThz@vFXxbGKxKOpA$t
z4+$J&3R9edrOG=SU<Y2YivpzRm1u7YaFLCgPm`i4(_c9DFT?ro=UoDffj9nk(+1`0
zeGk;7lFWJj%Ygr&6wuOAP@(FnvgL$YNZ5=$avpZx)NY#H&s%dwW5X0@pMEp7p$kxZ
z6+ov+aQ)$6hlYJGC6(cN+XJ<i{Ei}VE$y&wC#?R1YX+3?F3miJzZ<MekMlt^hu`QU
zI@pk%z}eR)mV*Le*sUV?X;E2%-$(5HS0k23>?(YK!^9jrBcVRB@+V8J#@d8pNMMP9
zn7~K!z&{OqM8FA;^S^7lK^1;F_KqD76|DyCx!{aLopq(wmoWFwoDuE%+}^*o{pDBO
zPGK_B-^sYiTVFgaB9HGBUlu)e>=s{kI+_f@^u5RO#^=9VE@iKP(IxW!=ReYp4!?Gu
zU6lX)QJ(x2=mkz?m#NQ|E16I}{y(b)KnMROTPm4bbP=f#`a@x_q58{z?<ufES@P%p
zkw3BHC-S|GyhGmqM-=`(9A|u@12+9%(t*&9-#eXgS$UCnf5GZv=EOYH#4}jD)Xn5t
zesuJc_uF=Bkni`H)909D2k-mlK1A32dwu`<b;sE6|8+sp19`g%7D=ScK*vbWe=1R9
z<>9(83E2zg&f=$9DVrBwwg<`02u^M&DtmKtnstE>)C4#W>Qa}chP{@$a`UTp!lWpX
z?_n1dT<NgUxYtAK)(U2~MKs+%>JaEAQoRxV5uar}R5g=DQRxt3Vqy3d{Q8meIy$C`
zHLiVd{RVY}`a0y=k-s*uTTw&yKbP|FLtEaHMgK?icJY7(GIJwrP1;ebJIt&Me-@6|
z^3g{rk1NER3{>XrJ{8T(-8p1WDNSY`wI(GttpBE>LIcf0Te?aMhc(CueWVF?N$6PS
zIi!F2wQji_xhd~8ur8N_avg#(SlIOb^#L3olyX|hsigyNQ%phiP0Uco9v{|!oz7nw
z!V11Y{rImn4f7%k9d;?(z-wA`wM`Q0WT`kycc|vd@S$?u3*h`RuU970YdBnGR87d{
zEZ()XU=qOk)WB)SR?>aH=Au0#$lmPcxKfX~`ZBowkO|?Vc82<J#^izojqBThj87vh
z#M>M-O2lFiPyhDkfNMn7pww}LD)Rr{qBT&^UkC4Lld?+2uyA(@c~z&DUaL$yh0j-k
zTMJ;v72woHB@f8n>|6?rw+3d=;t}{=w+HO3X{y50!)XgCG|xV{RuMY(|8orYYIy>)
zYxRL-m$d>#rhy$CkZ*z3N(PdqjHB_(X!UX?|9^|*>W582wSVnUzN1BLe{zeB#d{_$
zd!E$E+%84TR}B#=Qk%I4YOX3gc~m2iy%LS`$E?!U-Gbyd$5qv#Eonyuh8M8iQXA^$
zylnypA=PALv-t}x11i>*ECg5DcUHax)se>yt-jx4`cEbM!)4%uUtcq`{?DOQ65g+{
zBLN1k2LT0%yy6SiE8;0y_?0i^>a@KhId%EHxoMkuKHu+Bm&JW#ZO<V+ZxW*0oCI?l
z!KsF(w(#cQ0JZ3jpkmb&uG(C#_e`#5Q#qTb;QnN^!0!z&%{3>-y;P3)(4Ze|rTh~*
zT`r0gwXLA};M*ZhzLUBfg%pHrO_A@O$BAn9FP=v#$7?aiDZj;o$VuoX$*unwK>(B!
zb;g<z${T++-A59NryX<-^a{p=H#I7K(n_rVr%H@EXy_R}n6VeV>t+TKeaNJ7@$3oP
zU2aqy%D)k;QM}KaC#lL7RJ~Bm^O1Beow80X+*OY5pNnoRuY&CI#~Z8+9B{B=t5o<3
zQSFC2+&<GjC5PExI`-FZik&)AL3<d&I=*HbZ_kQxyrUDW_Tt8?-_LPTq*Rq5wJ5i^
zw!;j#pA<+e&50S9T^gBTd3m{{4ZrCmDR#^VDbyJmdVS_Rqs+i~Z$4>Fo4N(haa`1p
z+-CL%G)t-!S`h!<A<{tJLK$Ni&*E3b;8on#dqPnK`R`)J#<?S2i0w&HV`dZ;SuKE?
z4u)^TmjiSwuoIK7|G#Q=lcnfMd*dM^j&%?iAYV8N7L<P}V&Js*I{5niGXu8(A=Kt7
zUL}wsZ#dQCz<~tVhAw)W4SO>r1h(-tFjd3DbCFX+B(aWHuL=92U2-<X7D_ks1W$7g
z#q?Uic2l3_(jyA%FeJ@W?XW)WoUVm_l==XF0NZV`SRR}y9|}Udh}#@)4lds1-gO`4
ziu#~*1S#w&?>CR*pY;3w9esrda~OdxOyE{=+NwgIu9!57$ZtIlod|#1zBN%+A+RTS
zopf8yxE^0AH1rSiO6V5yE0LB}9QfCCA3iwy2LJ!sE`uk})FL9wr$%Ob*K<TR8_^aX
z&LVFzkfKJw9AzvlEiy;0D>u@Etb{(5t3u@^m5T|%I-ZEJtYlo~XQm&d*f08`!M1(T
zY`|l{1P!R9y^7B+`Nu%vs(v=K-Td0QDc#09AJ6P^j5mu_Pe7$-aY*e-;BW)R+nw7J
znckDyz+Ifb%tj{&e1F6nYS3bnkTaw_GgJWdmJOZp4q}VV35Ai&K}qQIYsJcLV1$33
ze_=@v=VfyH#brHg8|7O@8n<OaH}K&N@>OXN&3~IWKuHbD{<WHOktxl3Gtv8n(>A6#
z+;erLD^tPMdt@p>M0MbXUx%7fgV~ln3pw>3ew%q7Xcy=dAaS4btC+h~QCRt2-VX%q
zJn&irra*!FSnO-u`|1sO{DHX06qp6FZRJ#~;6>0X6=QWQqk-DK?>4f?(DYDtHQ#g{
zNV(_2prv75zIMv0c+49bp&ZY5E3O?M)>Wi;Ut=pF$soEx@Q6<SyF&64;Y-g+CT4!P
zE;BN+U%MDZaKC>@KKHuDQ~h7nL;M7U$TI8ZJyqG%I3}^IW_8U#>18+9vIaOZgmRr2
z+Y7TU1S=<bIgzhb68I6OSa|!Qr>~<x#MTs`dCniCD2^(^eR9@YJu*x^1FKp2LvzjR
zOBYW28=Jyi1rY8Vh?cXq*qQVG_K+8c4Ey>xTU7Y1X7h--pdQ+%@qnjS;7-?RugSRF
ztB}!1X<Ku~uO^D&d=Pq20VdQ7kz9ly5OtkI7_=t`%G-aUS5vThFW&itR{#4WDE#!T
z)UCR=ZZu%e7TMAZE5AatgG~iXU(Jzgm*;5IUxOs|1PJFCp;`I&BLz8U*Xg086d=au
z@pr52xLk)6ps8VTA8q;9FnjhX%t|m?57N3h5o(Q1N%*e$RDC{7CH$iE>*1}Wy;rDc
zHoKP_r=IIj*gcx}y^7op!g7}vhi79-DVJqemsj<M9cBXAw$YV;fYrS@NEP=b1hrTK
zx)NPGqa#m;Cw!Mr&t}M?fq*c<<P?4|{_XDPr*?u6eMXRq24k5}CfHk?e5BLuzuyjc
zevY@t2L~wIiC4sg-C-M|&0*EMmT4*p`{eSWLec1-fQ)SNA7NpwHF{13?FF-lQeqtx
z&K^q857GqAs5Nn)szym4SzxYkils`OEbiESVwC#~arV5(B!S{kfo2iOx<Sj$V!@zV
zWzLP)RCIG<Y1BpDa!)K0bjxe0do2LAn-tu0CeYkBo8G~-@lbTcY>~E}I_{AKErEp+
z%_Yk~2edF2>RE&^p8X^(CF6qOy?)>sjIrjaW-XaB8WUKV9ad0|PonK(BB$p~Y|2KI
z(F!QvwZ&tI!|{LrTzu*05YK(G;!hnFf%5Fm&-!((O09ohJ=5l{XX>h_>};*aFBEws
zxA@<yXz~w$jg<Ntvc7oe5ujcjaFfWX)YY;ybRD)KM@@)57PioAdQUhfyOH0$%}ni`
zAYv(gF!O^H*W?FjU-V{=iE}cf$KESae-e4|`j{-AK#f=_RK-zSq~kX#bnlczEp$M}
zcgk~=g^~EnHn;*}&@z9q=*6cuBdDz$=Xk2HflZFEnTJ&Y>9{E-fg(Pxf_uv1H&YNS
zGIcacz7)Pf_H05+;&Yt47ke8sL|C?WMFCW^$6=em(S?0@qgWt2Q)Ou==^#Z5vdLb^
zui3w5D4&M>4@5cE`$W<~hu{yFoHFe4{!OH}58v02<j8Ep7aGy>A44z?@Ct|ew)nvd
zG_nUa8)KCidcsrDfVteT@QQrZ7k!Ys2|e!v+K&Fno-Uf-Hla^AX^fV70(ckNT(0l9
zA<`o<Y8^0(p0(?78D<Yi;bY!9<lkI?c`@fU^F~)LJzT-_!5NvHZor0^U7kROWYA^x
zB7}UD<JEpN^F_-hR8Lp!c{`fA+<EwA_I~t;Fqi8d27}$ODY5Oc6;lhUetg6(*S1Qa
zIaNaBsbh^}Bwv^u{`?Ov{?FHkfPcWUHIrI2b6ZzSN&NR;4TQP#kg6KMVwjfu4ICKP
z5{`!5Tt}52Sh17T=hvaHn>9@b0WX`gE_#}S**CJ2Mp`W^+r!&LhsxyiGCST;<g9Ap
zf$?^`K1-Iw(*c_UQn=gR0c+6VF1eX>YOyK#x^9<g+7e|gm|nWDWyS`mSAV-#>!b#q
zisqEm<$iydeb<M>oh#miA&{{$rY`>agvuyISz~E9UTg9~pRT0S!@&G!LLvf!qYuqT
z={(WRTr7i<va*xHC1hW)Uh%NR|A5_A|0l4^y;qLQ3+Sn%k}eWzpWS&1)w6B04UYg#
z0Y){Igh?IC>45Rdjbg2Dt6dxpYbvJ!n>~FwIgy)U1BII*6O16)Z0e;fGi~%@AtLKV
z0iUV0U%SR<tGorIdrkUNuV!KeRbHS$|ADF#agrp;hEu%L?!JB_P|scUCDqEQC2uGv
zrx3T}3EF91Mbj<|m=JQf-lWAlVdI9xmr{3@{Jn<dh2O>;<sF+NF`(Ds5@m4iB2@Hd
z)TMEvOcU%LI+_)bRl=#r1~W2WJ;Nepcu5A@;@(NA+%vNIAH8MDJM5bd1X}Dkv$WvW
zJz_O4sx_x5ft$$^{yP%MK5(9&XnmTiWkXJk5O{U%kPYmoizx-*9w`b?o~zHKT@x}#
zNyTqB^fC|BNm~r;ykvJr3_qoen~c)ka+18LGv|l_8HBv3rHCz?mgFV502ufte+rut
z;Uf46b5}^h(VKiITweN=k~OsBC1QzMBAK`D_VV85sDHh{Qu&rt-3JfUs^q&+2U`$e
zx4`WCR`3G0_c%T3A<p&#bNt|Dlc={xT>d~t^4~|f1{yYXY@ww34Q8$DGN9t(N&r%0
z$M?~CO7h?J3JrU@IoBqlTi2d42C%T)YTkJ2z~Eq(!}v!QvsD;7g6*G}2zH;x4X%e9
z&v$Sr1fQ92(|G9b&Rl`K;GRd6YQ7w}G-G!VcJ2*%d_ZE;O$?f{SgVI-6isn6wrnd>
z37iKW%o?%A{P;1*wK8Pf(Oq55d%5!mSd#Hx%}^8DEyvVZl;tI)yq4v%+g{uI0KreQ
zPwB$5!=l<@f0kwXj&KC(2>M-BrJNA$=y?fA%KLq?E~PYA;~hR?fH`dQFP$3uUD$YJ
zW~X{SxXeZ&ELguYh>!YfNNi-G*gM|a8e%g<`6_vKZ@!_vVMwPO(`5%GXm_KK92RqD
z7LpU6kuKw5@0#J+OE*k0i#MocsS7nTkE(o43N_v4!BsRb?vy*p8MiR-o^Q>Q%@Bc&
zVOLs^cCF3!B@vSTwYeoG(5?e3^$yrP+FD=pj!DZr*AI(IgU60IHm*D;_#;3MH+%D~
zDD~`KrI`@P3i2nFl3fS;l>vH{Zr9lAaaGBnK9-_bGEZbhJy@DQ;d?LHv{#)@rSD;z
zp-T_8NSu)sNKzv!ln_KLv>Pma`4Ff0p&W3){s9%KLqy_>1M6K#Cu{`f%luK{!I7E1
ztwQ{ln*o~;lBum6sf5F(n{h4v`~4iCdth-qd5O-$Q9Z8tLXChgeWI9)ER}%gIi&41
zN!Q9s1`tpF!m9E;JzZ2+*Ty@9F7?$us4M}5dw)3j>U)wqe0Y~4`D1!f@d(sMT345`
zt?iw*%Z_-urweZ^X-4nYPH&E|HR+zEWaq(&2wamd>;&#WNX>%%5SU=4ehuZv>iU>6
zZH@1I;ryAysxu<t_wKHqvi4`qn=fHu;ZD&zg|k7AjDJHVa8)j5*gcUR*p^c>j9^A{
z4zLYR;}W+jJJ-koJV`Pq_bm6IN_4tV^k{ZB;p)>p+<Qj}N=M74DPuQ(b9QwnS$X_B
z;=mrMa;8~j52oSm_7W~&r2dchqN#`vJAYwV(;_m2CeVTQ=QuZDO$wruF{{<n-n==5
zo}9eE^L2JbMm=jhKD6cesUSm?eez)cLjbfSA+JB=8#h<Q70xp9u*Ph|p)8_n1KCS_
z%|Vo`*JKIDg>sZ>F%P>uqTxzPBX*0`bIk)x(U!RY5)w3}5NA5Z&Sk>XOHK1U^vlrg
zLhpQRh=IJBj}5YUO69K6ou53paZi8Ryb_mDOv5{*RyfcgcGTXy04yY`+-q8tK91wo
zLF3;STS%UooIJKQ{?43Fw@jbJw)x~4(7r1pLDxNtguKvGv(`cwI=lpQ?5owdHjRU`
zSj%WVTdZWOTfGZcFS8@b&CPuhhzp_uyN2&cNqytK4~ha@xA$Co?D2qx_#PjR_$S$S
z1GYXvTDK2y#yrYX8#%PJ-1~=zD^!NGYlx72UX?VQY7%f*6iIzcO{~ihBlXNw1@5Ho
z)1CD9yH77(_Y&QZ*P>aYm@P}9<Fz8Xr{T3?Pc2yYAlK3n&sK1jP)LeR!E2sFOSsFw
z<`X`h0F{7dobUslTa7ICyYjV^lNJQSLJ`7#)ny}8P8BVyk%NlK7g&Dp4XKwqFav$+
zE+53pSn#^^Gdq>Dc}K_$nO}89kM|o)ow;meV8D1px=)bb2arG8UT6Z5^F_8BlpjxB
zGKmlK^`b1<WGgx0_DdUk)vf8!4Q?&2*uMSR{V_@n>vS#H^&6r^r}sU{`$C%7?NPjC
ztw)@mfoPWB1M0k@u33}H-Kmk4JhkSw(m1gUIKHiLhXP0M{9k<PrICcDSZB<4EjOC$
ziB=JYc3G_T=;*~LejnTvQlg>xu(~qo_Nof+Q&7GC;Kt7W;BtRmy6cy6&AGVd$Xp2|
zJl{j_#6fH$Y|}DILt-x1R-^y}{readD{;BZmb07|h_jm_k?uCZ;*{s_jq+sSICYL5
zm3>`QL9VC-QWDwlSvz9;28TTKDY9AWPdt&&*cX&nT8Pgwd#VG-4w_I|B8Y!8{!}{4
zdU7{kxC62&GX*KU^|=C{XOp?fjR36~rzFSwoitHwWT(^l4fw=Z&ewFkxP0u>I?>Vh
z<&52PA?~(;4%7woS1qOg@n}}@@sq^VkD*7}TsNYhgg?<T(oz9o`;_jejk|Xpp+II)
ze_Ti~{fy-G+bh=n_VA>;-U+y-^L0WBO47|N2~0mQSbd{sNhpQ$0O%CAkzwr1a#bjI
z0Ok$~3_Jz|c6+H14e0qhcz=UA4P@QZT%j9xSsisd-3w;(Rro;L_q+3fEBXh^uf@Jl
zS)KX~Ure)!-^8$&FnZml?|RVtZ(Z4^jgZhICx8D>`^kB&++BxmZFj!cyD1~EwVqPg
z%5@_i+YJ@98dEcCWFW^095D0MI09cFzB@8ULQZaD;RsscvP7`NgE1_vn+~Iji;I&^
zy5W|0Ub(wIb9LHTjAKk|bQrKUq+w)Sk5B1#Jn2f9AmdN{`BT{IbnX_QWOr=MJBSGh
zJrj%ig-N(DISsL4U=OqC3~VG_U39#KEAzQ00NS;9N0BnY0~`p4JqA~1uWQOc_>i*4
zKY|di8$lovP-U|e@49l6ICs=)uH_5l^KDyiB30geaC5!fbGd)<!XFq9$d%!9`HnUu
z_F0|#zI6lvNAO7Nb>d0wa$o<ovDfuUV`pcl!|nB(^X+9MUtixEn}tpwullQO^nv!}
zhHYawFh^Ec!<`lhXBgU((b8s7JzsL)$FWBz=O}m+_FE=-?q<-<oK8a{sp)pQ=gD$E
z=vMUF*u1e^cfVcIXmF_Typk;;;YpsI{SDY1XLo^T04bqQim9ayQ%=s{>X5jJ|4arE
z2}xW=YNLOk^tt|+9#Z1%7Bw8WT+NpW8y@aow2c)rLBVmKjFq+OZ0j5-hO0*)27%{*
z%X6Xx7T%B?+E<PrRvmoj=el9p9@OVRjG_P*ifGemOe}hO2O2p(Ur}j=L$P*#)-pJf
zFKhS>(Pnd8wAfvGCdJ)#sj#WV<W-mf89!O-Fw4@;QdNeDPs8V{OxIW+u%iIxnbMN&
zttfFXUH|82!PWJF<^$;)7aUA%4HFlgf!(9r6v;aS85?;^E0~x#1DQC&b6!R-N=wpZ
z=gT|Jtp(xy92{R}SUvb{^+|D;nv-S=8=7Ge3=LjGVa_9Hoq=84FWJa!nD@pp6XTAb
zQ(}u$Med4UT(E7Xh9_2g5F8bIM#db7<-mRI)^C|TedZaZD$s7TmDQ>d-<0@)F9I@P
zO?q-UkGnHl_hIcB2F)LEhZOKv--aU_E7?5RD!H1ZyHD6h7;P9f#flSZ$Od9Dny{)>
zEFBq;9mlrqX36NkCy)?ybFqo-;P$H!YBNOr9?QD9+ZHvB;U+3<<+E%YH%7X?#ZPp<
z`ncr5x@4|gC97=dn4kwVl~z9F8xjOR!fkKUBb0<%VaPi51Os>ls_ucIVErBrAsoei
zVxm@AAXo+5`k$1^9qw$i=W9_ANVAIjwVx+7e{X(a$;OO3i1}>GT%Ez>!FE^r`HO(r
zCgT^5t*I~msI7Pnr`WbW|9EC%-*nwhPbZBHOuj?*xq<POG($W}@Hx6|ic)Nd<TN!A
zZClyGv$H>?yPrM+`PW!RQfQS~*G6oH@lneXKj?r~m9j`5;Dd}dYstZ_uWK?pc3b}Z
z8PB|TfvW)|+9Mjbd?Om&n|7O&6j94vS4g^7JYL6=x`#b`@d^`|0CTEYEc*>w?5bOR
zpWs6g31rVN4_03M>B80N2dE;$!I6837v0i7exRN1PcV({1(Hc{SDsvPjb{o49<&}G
zzhXQP({W}94ZU^0sK%xJ@L}t8Kop?Z*B%26PmkLppa3t&c=u-#Kol}7VGy7R`=qRl
zMM<d=ee6_=b9ev3&Hl#H$!sNQMDX@|y`ImfjI*1w>rGQ@LDFRIB%nhev+cu36YR1O
z&=AL`;kM&-_UwIquO(yz2LC)0wz>qs92Esc;PtgJ&>8BFk*F?D7^%-)GN3tx<n_r)
zo6e~)FfeKa+k}L)?dMdyF1vc@buMvze0-!cF6j;yTsL!gj*bsKODD<=aY@{--!#Hd
zw?W@<hDN?z-rAPgZ}8eQZ@E03$kNOn1&|pBva{_5EN7h)v9tA#ub);T#W(2p5KuT&
ztTwf%$}n@l$650R4yX^YDb2%yUhWG^JF%BGpS%T_N^3WJHU`I;XB>vO@M6CzQUR+%
zU_sc)h+2r`%`O7uN%PXICOhe)K+SW0(`EKNQL&NTsaUw{jFB@cD1x)d33sW0oiEiO
zec(N&rmB2{l~{YFMs=Cexhs6a@7Sh{I1r72fhX~)UvgbZb(E_Fq~=mb5I)sDvjB0R
zc_bT2ee~T-*s8o4l^mRwEID$)#D*X~NZf><w<|N+`eIw>%%AM;;<F=I{W)l+(g!Sc
zOmk4zYaF{7cQk!gweJc)hkpd*^+VMXWva|)zY2)C9xtRHDfl&df<Bk|A|&-h+f`Ad
zG!CbT=XOc&mK*sj+zPl}CaXKQaHl1XQYF%3TM1Ug@9{<(%IqTc(@9kq#`EYNO^|`$
z9`~GI2WTPx_TGqEyd02$zkWFivVn_6_Cm%wK4W`3lld~V{#Hmqyie}AzW$<qJT=oZ
zecwafhR?1W`iIXPq@uFn0LX$#Odxf3%#8{;e7$NXq_SeNX7A$aw2*&U6=fy$Sl0#*
zdmZD@jtT}3r_B_RUR}Dw!+`=osmHc8$<_%unMJ#}VDv|M2Pp?QZsqUd(q@<+voed|
zUd|?0f8A?X?C+cvr1<q9thu&!GZG#9Q6dCQ%sz&1ELJn;w|?J2Chv`M8s2g#HXCV!
zA5~=gBF~IO+=>ZH%PDkoUM0X&C>cp-zQFJ{*t6tN^cI3q_c?)VXlT{u2xH`s@BZ<y
zzWxZlt>?V8lJ9jq@vBVc%EWv}aLdm~Gm>C~{6^0aQ15odUy1n#ir7Ky6!kH2R4@1-
zi=~j`g{BPdR1XBWoYojxxz;~C44MvP_N0xM`_I9jT>v3{);rk0dXh)-p5cHQXmSpx
z?KGC_bTl2S=X*QGIsJQR59VbPM`kt=kK%PYrl#%QMRVEOJX0KPGL)P}g9uQe!hz<<
zl|aY#cm}=pm~$|Qparta0*u6FHiRfkQ(*$a{f?U^QA#XgbD$LDm|WXs0I7$PLc0lV
z*4Eb&SOC@)!0R(SSwTv=-O5u|{>gVCA-yPPU@&#n*1^~m2pL*;GoE&eA}PKZz6@sJ
zs<gO36ol=+fCE5Krtv_$Ht#xOjn&e&by(m;;MW(yvu`@-aoE)K_&!ZMtT?}^@qCu4
zF~Kb<B?a^B%lH`|U*WpK_@10VQB(6Nv9LQop8drLt4pK{U>MsE<+B6^1)Uv*_8S~d
zw`YD8{ua&`(v#tlDB$Vx{CiwnU#5^SP-pP@GrQ4jP{MIXwB8x;PH<(mk0gQ*t5Q!I
zh6&>H>27yx(e0k$i9VyL*$@1fr#V<X!`4q==lDy)ahurDF*F-2Mr6BK6?N2--t)Z;
zcb3G{iuwAazi8(dDbGd7<AknTFrreBwT$!bWRMh7eY?#eWiI8QmoWiOc+$1XfcbnC
z4|!=__hGXr8lYh3ssRg=6SLGP7diy+ouD@?To_nbpEWe_U%W=n%FOh$UZ^#@K}12x
z6$(JWdI>m1Jt&4Y5P8YB=H><L7FY+D9$*Dc)qX<TW`BT&H!vNEOyVTC)R-pKp6oU>
z`!b97$roKK60O`F4}H9{a$s~#b45!6I!WROT-)6@8WD}y9cH$V#^V}PsFpE0M_L+U
ze+g9TV#vd@RIMKLVLliodaXJ+T#!shx8WJpc=x1~mZja|SRL`v&V3Vq`U}%9Uhx$Z
z)_gG=ID=U%;5tPe_AhxK8lGl{!d=t)@C$C@>*{hWX>4Z_1a69XI?VtMQPifLP*`!+
zpmJENUfgVff}P>A?(M5w>@I%KwMUGM3V$Rmz4mi#r8lQ&kYzzk_p=o>1lCt)C&BpY
zMJAe}HIS((HhI6-H*%1RKwJ%{RWxA2M8I1mmfFjvG&wHsKV#!oB>30JmZ+to&*DjM
zQYH;)U0_L#7s4e6tnn!g(a?-vBAt169jQY{=)0udZFl#d;YClUYIrt(8lB8$LRs`z
zCm1T<oS;$C`aZtFh`;ZYQ)LJTHT}dv(d5-V2V#P7j<sIhcg?M=?xV4vUyA+kppT5)
z*>m?i*i$bX%~GH~m2%v{<wF1Qu%6l*e@!bojx=FLIF%leO<rX=8AIMPp<>AGz@OG)
z|Kc6Yb~w~5v~3m2p0IiM`I2O*>!u2RouG=WlzxTNHMZWrIEfHuwxOktg>*pR!q0&g
zccElJM@3i1;+`vJjy)DX74le4Sg2sf?z?~c)nLM&>LR0mdNA@Lp0rwbo*+LtY<?1&
zGo`08^2?*>kc*Z78}x{{zq(_IUsKuJZNH>SvS^5qFMP}A#+1|(bt~;SOYb@^F7IL1
zI8W-ZyjMzQ(qv^6EWwSYJ+XutO+d{*P+DSwdp2d|e3}J9d!LEvB?JWfXa;Gr$u8=O
zi^=Y}QM5QRzYHK0;e2@Fv^XB9d9l5^RnQ0!D@Ocx%m*P4jatM(L?np%LGN?)VRPMS
zSfTm&FMMJ?WpC3RQuNH74l7P2Ma6cGoDyg%PO;f?5s$TIt+R*IdU|uC6;M3FwE1z}
zM>BmwG9mhaujU5;b9N?ljTbJ5fDlm{K&#AWSG)I_ud(*b&M~~+>Is?>Rc6LR<{S$r
z2O<YvELWHi9~dq1yzAyT2Kf_{w7sL<eS_hkUw0^_cJ;xN6mmovu3qi&5>7}+h}{xL
ztkT3DnS}jZ89wY8%x1f_Eh=r{dacLSsz<eO??_)!32lM6RJ}d|BSE|EDL4q|-Tm2?
zIA9^x(P$Te3A$b#fZNs%D^k~})?2k<sIs0QiS6rrz{JMLlI(3TKl6Z_ud)fxrm<RX
z=yMUIrcMC}oAWj1Xdk`qSZ(Uf`Mqz?O`SjS0~GrAJ{J!3I7rs>RbmQQKvCwG!!+hG
zNQeG0IVWT?#{ej=NRvlhbsMv1<o4x0n0LvPi2d!fKZ*|m-G)dUF4Xp1a?jDdo1=Py
zK`C~nzl*f1Q&VgS<c@UjuU!x5ZY~IWcLT9^qa6j?+<^+v1GU!qsEKjZGeF1rwd@s$
zYR-RIX#N6JFL1}p+1c62<WU3D0G^09Z5SbuH@-jOnSGB+JA=Df!DnU=t2=oexAh8(
zxdPnFgD`Mp<?Cv^>J34RsHhWSUyC{J=v?cKq~k$D@X*=EL&15GYE#o;RD(~32&YI!
z??%h*sV|9^P(D7^J=?@G9iwQ%*AT%6D@gh%`=7>Jobjt_epEKY+El5AzkO}Unj-Jl
zG_Ea47bfrLKkoHjm|(or-Is*m7!S@T7#vL#v=yXYq(WLo7{UqJmCd2$O2Al!9{tQf
ze`I!$tW@y(b@v(g#m{<~hFrr=)ZL%yS;5esf+Krup#iYld>`vi&p*{QY@j64QxODx
zHk3zZJbQ6i7_V~V#=Du<P+MB--KOJxXbkDcRj=}WHiF{$tTOip<!ju^$8C}dsfr|r
zHunAx12DS|D@7#KlaG%Q+OrUYiYU`Evy~%u<WPq&!90qT)OD+Lk{kZ5IPAeW{*=07
z92d?vA!-h;8KKBF_RmbDC`qk677p)z1R%Lv^(qhIuzf(iKfv<5s2^H+f@VGlekeO{
zu;NK8E7g!+9UcmVB09b#jG~zI^+|=-APEBs(-bkyc8Hrih#0Mw>h@;A7%MIOVWJqr
z(for<^v3gIZ<;QyyKIEV`3pX>VV5tWNnKW$+fKhB<Ty#Z@w)gnuiXQVd7a=5PPB)@
zJ-@$Sj8<9t8cQ~0?RR)PS(ltOoFaP<c?-~Qi7>=NFpAY5=NKC=+sV7wEwF_?S27P$
zA^AK*j8FEZ-o|;<_Z>9;533Ab=$dJ?*wPiCJ@BL^KmYU7R5#NRYD2G4@eL@^00h&5
zYWeY-6sb;wlPTnUX13B5cW=7%%iL)zzUM}<tV>ijE(ioFQg?>Y097?v5?7<GD<1(i
zf7cXw>6gW!4fjJB^&C*gfQT4^mNyGeH&u|IZ)bt@=FK~9?w^Z`L`A9}ZZD6FS00*a
z5VhI8p2i3#gSop`Kz`JuzEO8~+JX;8HN`qSC&ZHg1^*114I=7xEm5RSb>D<SE1egp
zu7U}k;@E+nwuZ;6SxyJz0gZ=E87a06k*}$jHYn(wds5|Ar~$NQXxkJyoYqjbnIXdY
zC9bhLlLj%YEfXg5JNv{NoJ~{XxFa?$F1<M7_aNNM<MFe%H@JxRByl{Jld1K_KURNq
zioc_s;P_CBR7qE17zmA60cb=x<VXGbX^e{t;0A$vmcOA+iOb1R(!$6981bHqD<wZT
zQr&(1q(YOZPaJxWw*0CHKziRDxM9kIPTF!DUL2%r`yzjn`b+uyFpGmEF4WN9zp}y4
zhvJA!*P9^sW$FxG6(=t$!dUCG_GFyG4yDbFc}Poq^S~L{$$=ck+R+Q{rc0KKW49zN
z3lEe%9}tuHw>6fpU8!8JlEjk=0=wJBh!}>}QVuf4I2x!Eoa+!lUD38RzTGh!<}MXv
zd2UmeCB)QOw5#J5ia@3#w0F{q{WBSfb!=nb2rvi2DdO<+c)3wj{3be%`~|KqF@fvm
z*-#;z+1u%em$yE7dW#<)W^W5)$rGYACyDgzzmUUt`XJ<lN!-U@IDeP+SQQv4=ZzJ~
z=)FK>M~(a~qz~VP-D6HPp6EaRoRe5%q;ZNana6`@`9@J!@9aImry?P~qo7goP1-cg
zzsb}ypv$%wHv}9BbK<#pY-$ori=*7#-NhAGR#Iz^6iLUIJ^e@s=SbZa)%x;aFBA*=
zXW?(5u`c`QBWaJPq2+@r**vnU%$D#Ut<)Ve!4`A=-XM9WY>PS0NHAb#eQJztjJ2j!
z;VQx_6YEcdz?Ve~Rs-_}rjHAU8Hqh|E+@^Eht7@ln+cFpSbQ|xY;0wKfLLLF>|@K7
zsn5!7WwG8T3$JQ-m5Y0`4vDX+jw;<cJPWgNl|wc~t~0Gxp7&kxXjVR_1E+4*LyvRa
z&x7h01j{a@`Qiun9v?{aCT{F)bErHVZhtElM+d|V2og{er*MeKAu^<h<Rfl9s3-MK
zqN&B`se>8f3po?-(J#-e!SCax1_Tu(`j@=0)u_`_uy09Gp*q^q#b}t+bv9;Nubizd
zW-dn{?2P=iJU(>MVUtCIyR(NwUMf1^5w(eci8_FT3Gu;!$By{wqkX6CTjSF@va<+~
z7&_B%1G3f269@6`?lY?{MXXfAv6YhegH`^WIargX26*ji+Ja%eGbO)&{R#wVRyV0L
z8E7D%1R(wM%&xC1VeW#5cJ=s-uNnpPe-%GPs)fbi$r$8YYM1l<v4Km3?r+}^03$n+
z?5nnOItIiciZyHA`Aj(gP@I~E<{J>BjC&WrWCSfapdjTHk3NJtP>`d<_8Ae5n6dwG
z;GQ!-1lrE5F26xL1!i<R9Irmp^0c!<*xJHQR{3>UfBS6MeC$V`oOD&8sv6+8n5e$W
z`trqPL&xnw<X5WOuVNsX(x5{4|FHFzL2ZXiA1DP{3KVH^cXx_g3dOa!ySqCHEe=JB
zI}~?!FYZv>-Q6YV{r8;r%$+-PKjZ@$BqY!7v-^`>KR-W!&=5k#X5;>1`#&wfSb@Zy
zb29IiD}X^t0k!;0U0yHH)Je(6n2rNZa_G7BY5Nr<!z*8U`p}LEFku;8U*&x5XRep<
zxIN<z0U9b+fD4h7mhS<GNV_P#`l|?hF$^4c)YR8`gP(>w#iq+HTeg^l!!!&Gv2BmH
z^L+^KQ3UI-0YIzq{At5RK(S3eqFlH6A2@?1;E`CS53EQ^JLYpe7Wwjp6!4t_s82;k
z+u+cUN*VD1F$3hCzw%MB>Tsjobp((Qf#t=$fKgJ{OG;MYH(l<uw;&j+g)~j{KPl#h
z2buI(46R#BUp8^Syw+|$D4C%k3kKl|wc6p8ByA~|8&2zkncSfjez5pwaIcCMr_EPc
z4OOv{^Y8DLy-w48Dqn~I>cZ^95<7Pdg*C&L*QykN61;0@{chg?mKW9}-VjDP&QV?J
z=o4PgvfT12FXvv+t>w*_E^7GeUy_8jeY$mtsy<nzC~>=cypcAb#(`=nTj@(H2BZY6
zg|J#<y5qrxUe)ySDxBda6nQGG28>@%Dp9-@9ElyMj7AS)EQY;9<)!JRytPPi#m)_P
z%|DYWHL#B}qhJ{qJATpO$mdKNnORO675u0-v)LXbQyyd(&C9MnWErhDv)gTl#3t2Q
zy#t-SL_R*q!y4EgS|JT1r{xHKJb$1-6cF0y9Z~xne2F2&EJ;bu8iViv5|@{v)@J8&
zP;Pj2Y;8sF4yAV=gd#LmoS8UDSM&U8NcDac5N|1zzt7~U!2PhSS_aI%&LB}Gr~{Zs
zGb`?)hl_y!Dj7XguSX|<FIY>Piz1PC$VW<Bjq*qI24h@<Ya<BXxpN<xvE3T+D(5Aq
zJt={&T-}QoeP;BU?lxZDS>h7+d~V1vcW=&ZjVaPE-MXS-&i|?tFs9-9cDpaQAGy=B
z-OEn7KUK!r5Xlenu(A-5go=U~iexq#tW7uQ{K9YzXs;@@*ispLYVAWZeOG*hu>pN|
zFQe}YAh`KI5F~%1))IrcZ5t{4MO>?=4zLz|#Ka=ni&a=d_}$u?*41UK!|H;Ihj$<<
z(eE@Bv32aTy+ibNy*PT#fCGP_(UOQ)q6QHlD-WY{cw?f+Dv?>p*x4tg80VUtxq;<C
zLZ2}1oOj~q&@nMhFvgp%CaS)gXFx7JA@>K`ZpZT?cXon^@81KA4+I9#12FspGK$9A
z2fD<rES7nKmikr(gCeXKY8NzrRa@OS*%5mau(Y4k`!YZH8wd9DG??2z+~WOF=<q4<
zdVYt-mpRN#G+2M4ZLv~}Ql?$^rZ|B8pF<0pcm}Khp}@o@Ha?mi1uBK~Bk{EXfXkrd
zh5l}^#CW05;WMJdK_Te`Dh7%@3odm%E~J_T*~=`-FJRlI93bPJL6U|6e~Hnb@120(
zZQYHDvQ)G8-;}JaD4}k5kdG7)q+50`BtS`%Rb3sEBjF4%j&$5QzQ}o|dE472&MW%_
ztjV&B_s;FM$M>qhf>z%<hu)o>B<@#<)Oi-5{Q!!t#=TR7_aEL<^3%l1Ft_^&?cHp3
z2GjgX^;U6ZUf^AT(E-oYmFm^RFsC;IVvBDy{J^r{&kBO$msm0fD<v%H{O((^<3i_*
zcr*i}qo(J-vvdTVI7%?oViGg8IU8meaDA6nbT}{ZcV91LB8poN+A`Y1bkXI>|4CZm
z`P1IQ496y3K4$1!;$rp+K2u)~6(6`n9t`!Kh@)G)r_7;EZ+yqZ^GjQGl$;8Lh#6vy
z-aoq1U&G{#0bK2>^dHl`(!Chpe(&y&vG}x_7Wla5_;t?l_a7GTc4sCPM}|U&)d4k}
zo_S=rT3f<xIQoZ=1#|5lKDn{xg_SDn=B)qHgBnR>!MuuWN8<}-oT{Lkv+P`zOXz|4
zRfzNcN-bKna5QE-Nd<OIGiKLKD<%;a{#fnqHOVL%QmM>i;*I6&;#fLiahJ_zdR@g*
zZ>yj+GJkdb{LUT#TG(bJQZxO_5G_gWruN2j)wVEkDqSP@MKikq1p`rVJtdf$tEK~&
zjeg5IoGAUgRWNVl!?^)1{!9~zJdEsNdgIKsW?z=R5l51!IxOG)#6wgV;#fNuR7$e8
zBN2?&yAfD!sJpX#p)r~zox0mNMgw{BM*A$J`PHxrCrZ(QO~1dtl9*R3yw}QgOw4v<
zj*Xc!?O~o<fWI6KrQ7d#arMcQ0MC;O|1|B)dFBV8?FIihxZcPvPK!lLpPTic@>`eO
zV^~@@SJAi|L>-AQ?+70T`J_E{_gh{Yu!Iu}KFsq!!9KI94^aHSj+HUd#fBr%$Ix`v
z)KP$8GX-jQC@_PBj<#^o8F&idJ@EeF_4xu<u%QST(1)caU~``_7YRVwjX<}-ec^aA
zva%Rlc3S;@fmb0Bwq1?db_GCE5c}zCzE{rr0aZ1sJ&8ZK(|>Glh(SC$J$+E7LiV2(
z9Hv3&(`?VxMcQ5CVX<}7=_0|vsNm3^^IoNi<qSzaiL{i_&~*R5<M_|{I5a%0c{xrF
z-~&a6bv$mzz>cG5)_+!U2Ih{i-@nm;=>YdWr~OY{XXZ0P{s_7-Dyj#E3pt5p;L}8B
zp17Ev%?@lBhm%4!fS#Dy-q~RXE@Io0u7y!^eV>5N-wsQS{6L1H;p7a&`&{4zxSM~s
z*I!p!T)_S#AD8+S47P&m?B+zo#CR1Hl1BvH75=TA16qA98=YYUk~ZTj=xs|ybY|xG
zzO_9mB~Jhxz|(jQ<!q;+*S^`_-L15~Lv40F=^VP>abs)y|FvWuXAc=UT?(&4?l|p;
z-1+y=h{pZ_#^6qYzVP<WF*~3-NRq{pZGBY)-i!O)mZp){XB^$Rp=g$lm+<*{>L>dr
z-R)f>Dnq%MSbyN{SZMHNA>wx-Up2H_{k`Y)K<_5Z6FSLCuXdHX1K2NP(gEr01(4$J
z1Co+7l$4cp7HcgQV)8K*RP7Z@M5k*Gnrf})gVyezg0g7^z%R}tT7t0>2!ey9Gb~Pe
zHSI1I%b~t8FT0D(+~*fT3$@`kp_!eMI{w%irD}Yfrz5i?qc(%{f0zVc`Y*Th01S@}
zd~Yq#=JE;SLDoe1L5s`WZaY%%?$UizB-@XmhQXY`@#CI@W9l%}XgK)$)fS>c``_~B
zT$P&6&OS)FywN9?ex)<>j=}cZS0!)^3FiG;ll$LxN1A*_aLmAZP^-rU!&B`Q|0Wuf
z`B31L2O9)mqwIs7r%-2~ff^;tP8HesIgqND%cH{HOIDHSIv&zMCn6U-k7<JCH)d2n
zr}fRcgDF9E=_F-UR3NM8)?tMp$7wpyY4H%9JWcu%p$-q!;XqxHQyojt5^1tnFC2F|
zW$z4cNZFpnd?tY-USs2L*JJv!9?yn0swrl1k0D4uC-X-eXwCGlaFUaMvdQ#NWVFe$
zzA339dvbR*_;LBe;bL4xW?RqL&S{*FxL^Z%&0FjapLk`{CT4dZ1<ySH^FA@=o8GX;
z$FcH~)kpc0j0qC!oY9IFT@YzULB`2F0s$UhQNy9Jx-Q#&dq%03JM!D2ervjFdf0Bb
z#>1H_&08xuVvG%<zD-iy*LQ;tAK}ffeS%^Bx!91~*1G@m#6M?gA>Kcm>OVVM7PYMR
z3zd;^io+RP!<;*<-|w)NJDz{GL_Zj2?hqC$XT%kwW{hK!5kK%%QLTzoY3p~IAo;A?
z>VTYHUH}b>)lKWI!I1?f52c}Tk5QL*@+Os0x39kNDxjuIE4{o?BhecS5JLN<<&l&f
zCbAT=l6t*ceXAawmMQvh!Lcajx*ke44tIW4ZZGh2Nyx{XEOZKxMWPim7qz;f_Uvea
z8wbWu({woy?So(m8HW1-KRLHK_e2)kcKmK<=wt^_k6jqNN@zy6#<?k;cslJn!%*h-
z)KGJ-PLw@cqhv*?J6b=KufD7eMyUxDi}1G06$Icd0<tej$TYYxe3KeP)1UA(Z3n@O
z0@J#^I@`D{?0X2VJbZI3#yc#+SVA-TyxD$6%gnhEM_PE{W1J&$9N+|Vupoxt3H4|X
z>qZva$^GdFKrsK1n3gH*l6Z5F?#~4y)hJ<#TCL=Y{Lr7!!^@4nSp<9Mt_88J+vt0!
z=L?Uja~@U)UlF7EADfu}*iijQ8w)hYEgseuB7PMb#Hi(6ok=XE*?fQ?rAyT3jsDsV
z5JON_RFc{)*Kr$F$R(9qBY6|RjhNTJ@5XU}FZZP|dUIJxY1Xvb8bThwbJ--u;~Whb
zE`fs1RiPj<{b1or;NO533Fp<aGY7!S{$F)f80)5J_w7iTfKN88{LS-o6nAU?U|;O$
zmD_8N&kjv$;tU;w&9hl)66~L<YS{cTk3P#~eRp34MKLm(9sG;n#E-rn$!&kS9no}5
z&$K3LqEED-S+}5q$gwR3`7LWCi`IF}xuGan8%h1~pz9m14m9T0ezVt?2X~ta8Tv3!
z*Bcj@(+tq+>?vlH^!M^U5LEhd%gg3@lh)hV92~seuS^L-rBSGP;!zZY>3>tp&%;4y
zCs&-QB6xDWS~yww$$EEUQyGC+53P=j&~lMyxrj-y;QjZY4PhPbRyds7$Q)fAN<|bu
zI_~7b5hk<8PD1S0)RAgAOPT;nD}VmJEbQ=~FzGk}D-%7|EmOsz;3s{SmGS!AobqSB
zCf8Vf``NIcP%H8Ltu=)cA>!7%_kM5_C-_c`Z3A171nJK~Fymrw8AcyClq{>KA9(&#
zJ*PFn2Ruye&5qR)f7+WIGvIKTP<{?Mz<m3~RFmq*#+zFF`8el?zG^^;$L>z#dO%U^
z3ZE!@5XJUaQmiU8`&g;V$p662RXgP_eD@6J1*<B`p^wb^KSMkYqbBB7CC7=|G@j;Q
zu~`x%XpznTt8y%?7cQmy{>}TO`Y=YC;#PaCoQmo}-V(%qK8?KB2-HMlTh<bLM%_#O
zs#S+nAgw-mwqi~h2#3B5<k(vhqLT8u1XUEc&BFdUygu_-(&loR#b<a&ZTHo|J1<?E
zaCb?7dSviYQvM@`{r)I;?v|8tVC^)mW8zCoqvT?*82f|YEoB~w@#3C!=vvCIlS{*u
z>xe)8Ov(~>ltGv3%CWpTPTcuJl=k$aRhB2BpoVd==ea|>*JTC7x#@`Xy<O-jZtn&P
z9`W60b&d0@3b-nr?<5IG3yc`86y*wx=`7ZACOSN7rI>_5W94t9Ol-z41{54bNp&Ua
z@+_k)L~{IS2bm~rov~Y9B(qx!Me3peJtTMOTic+%j}wd^dSUt_F{2v=B6_fbg~hCy
zfvE842PDrS7R2(q<vEx;ag(QA*u`!u5_MGh%9sm}ml}^3sFCJaTO>BQ{Ykej&9$6x
z)Yk?txjPzVi}sVxXZu0G$F+IcZF6tLja?J?ci$jL?o_5b0cGDq(;A4+(y}5XU?JiE
zKDK0*SAB3W>3bpJ|LeSGWEGcS+-rQb!Jzq_oF|oKaJ6N9nb?ZBSnZ}8NYj`?+w^M5
zk}w`OeK*%?3pXe1OaD*s`NLRLEDT_BK+oRpw<83s90k-odN4qdnZahI<0`xJU=>+{
zT@r*QxSwP{)i-9;G}v%W#zlYqy1;+-r@pub4WzDJz0-CVV%(1xS;H+Q*|kdXP3=(_
zCnxWVwsaPpwD!J{%U>n6EE{}r4MUS)S@V9kppzbN`{Bhk5+@UxW_-7IczaNarn}|4
z*1a_E(`b|Q%vJ7OY9}QM&x^giizrimXm^P=_<{cMgV&u5YNpKB3<gBV<4JO1+oZVA
z)1_K-RDKD{=BoWyisUr|v9EmummI{-Dor1SKKs?g%r8s2J)Z&dZ5M1&RcNSCN<OuO
zFw)?@>7B#+=HVDAp=o5u7#di0>{F8_ct(OW7{%84XH$Pflq8RcQ3lm`M2t6ALC&a`
zf`F~=&U;$XDvq(y9trpX;+-m9#hzW!XdddI8{ajyuIPWe3;rM!^yKf|Iymfn?9&yJ
zo)s-p`{k?0#Z?o*sSsyy>K2+_MomCf5jUZ>5SZ%#zOB4jG67pqaP*i+7@gEq?ew<s
z95V}lv#$v~v5#YWU8SRph`<sd={yM5_`m%v@P5Xkfb{{kQ&Voe)+@%BfGz-K8-`%-
zM_4P$)7^wKh2H8r76Sbr5`SOdkB!$+Af9AW`z;$r5Rv_;q|EQ~Jx>Go_zxBEccU+O
zpC`@VRMuNzDcC+ZOI|s@F6%4BaUgzwJ@$xHK!vRP!a&l}Mz1JXtOz2tB*k?&MmmSN
z=#GqeV3~Y%dDN)ltXt_W+KrmN1v-6gae9mwvzU>FTxE`a)jsFFoWlaqRQJxY5RPt7
zAQC64pOo(8$OZd1U=<d9A5YKR<Bo%(cxdi6U1>|)qL2m*!T#_iSL(JbIqnhi8?Z%P
zk_uxiP<vmsJom-TjadP7QSqINi0EY5V|a!p5A+sle808jyA#=Bw{;#p^!wIQ`O}I>
zQ`<0_;;kbUQeI5gPv-&s7^#UmC<n>$Z%2J=1Bp)~&l{B2idxO75BG=qE&DvnV#|fJ
z`D<K1&f(#lPtyj>qin7Vxi*FbJ|P=dC7;-M=fxGH)R9VUkI5KcMi>vI#Eab2i$~hv
zLsTR>=lV?(^?DoZ+XR1)rqq>qJViyN#l7e_&$t4545jjpi?CnED2jYx3A?dMm{D34
z*(K${)d~zn8p;Gp&%gpI*+wf4$0kKmsairS^Sf8nzpWiB-FDMmF8Qx(9-1V1B&tf6
zR+f?{i16Kpy%hR}2X*gir5MA-Y`-~LxT0{?q_g4d{Q89xq3qY!Rz|3!N_71>x@>JM
zOoGd(VSa@?Gl%w_5H|10kFUY<t!5m?ECjuYQMT09W=IFhv5xb{$FEPUEwApso~~+W
zHDUs}MC67$QR`bP6U&42+@C|XS*e*vX{t!E1GR+R!7Sb&o*u)C404`#J@}ujC4q_0
zz)@e<_|G_ZhXf2!7*cmBX2C3P1uqBZ#g2#u1-jo6J`%8+_jV@3NU{PWPq{jAt)dK&
zhkgFptvWpB-Tsn2b}l0b?81P1&(+wNWV*k2o+<c7nh>>LlNThBoXVMLdy~50V6yV-
zg|Lhn1oD{ozzMziY(!b%|0^ZFg*RqxSojE`bnDD-1kPzhvH#up4*4)qUTty24Zk(7
z#+0ymW^#`OoG0Fd4m*Eh2x~;tb6H}z@nff%&@!uN&w9biU%mCn3^eQ>iNpIr*H{7O
z)DbQSbknSY?_~vn3yHPk1>5R(HrW<RGvP|U@B@{0|Is!j6GJC(r*?jyVyo8qh1!DA
zD}_ExS0{aJMwY<8z`-$nF|5CKCd87#6FAJ$k^*`<Q1tR@ep9IhXJ6=5WAH+L`aCh-
zxZC^_7-iI7*RlHV48X+e&s1&QIJrY-UyrF6<s}w#MX7b-`^|x@ZW)UaIu`!N(7p0d
zLHnTi<jrr0JF<1gd><5ToSF<2)YGMbwxK)L%Hi%EtcI3P&!Vp=ChJDY>#RJOmO<I$
zRDh>%t0N&d`tc5mm8k#KOY5D&^Nqr3_3drFA@r#;{VqB-eR$;#^4fT#jH(+DbVZyI
zN+zzLZAzmS8!^93YX&I@snmdLNqig0n(__3y9t!~PLd<OA#0XSiawmGh&6%5w<9@-
zY~0tQl=%DZ^NGfTfIbbMb&LP4DoLK{(~f7ZoctGptlsHah2CcTTc(OXX2h6=qWSom
zPk&v8go=#DTM!g!v2<Q1p~UUS*!<~rg2$e(=rh{*e)UW|U_|Q6Hz8wTE(^CBjpx9E
z2THUTNm{TIIq#JcbkjW*?x9-ym?Lqx;wr7Fyf)sIUqt3c_bGx+!@EqStb)o~jeV<P
zfP#xAtnk{wN;)NEEQHk3hR_+p6B<RL5j=Guiji+N$YPewRmfA_^wGH?@Om(Gq`d|=
zcvSwTKL6Ju_WRb4){>=Uz{(Hc!222hcS9ZwZ*<R}4l>(MkAwsB@T<QQaLnMtnkml~
z^}~98xwQs!&UVIb+&JRWt+awep@?Iate}mQ_hSUELb0(0G5FCzYGpZdlV44}-x8F}
z)!d#-+sIc;BlH_W%4s!*c8n8X9q#%YCM{243?R2gcFYgVFc(4aFX|5|QR6k15E#2u
zAO4-uyxJ74ui798!A%+6titblxR8u(dU$k;w|9=&*+c2Hy;Hx}M!k;|8K|n2b0j0s
zB#M5`tE~>?u-KS9zEA@gxxN14NZXvk?kh9#-WF8-mD^vHiu3wLTjHGYEl%k3X2OAx
zNL#_`ikz#n!g;;GGO9hWK?0RkuOqKBgTLeC122zaROou?7m_?=OJiBog6_~u%3MQL
z%eeW{OUpEP8dN|4Q6Ix}dbPig3*&aODD2&T-t&bf6-c!c2jVc&pmVu8z*s|N8T%=e
zgvg&u$G@q6b56Z4P88;_p1UQ`NdmYDa*Jx?fipf?K#3Z*LplG{MNBD`ZP;*TcBTkQ
zanRprTA$7@DvHj}7r%qHHX(;b$((C26wn(pk94Bvn2$dO&qMQNzF5hAFuq_hW4)c!
z84@b%THJemHkjl_`b8NU@4GDh%sl6u&P5mP2}+UucUwGJ`7h0)m%tfxf95~1JS0#9
zMMxPkLM+}rNHU$M>T;ae)6kC&+%sGbBqfZ5>D&G>a%!WYo&H2$hEz9p)mB)Nm3Uaj
zY?#I+EB7!>x%*=9iGgHE_BkWL@J7PHEGx<-Z)yz0@-qV)L;uMQgDIFVWGvjE&z%}Q
z7Hcpr6=~soWX$l9xQ^7nmM+v~=FZ7rCwd+0`wQx429h<use|qFT`z1w*7V$}s#f1K
zdN1uqVZSS1!JqSKv|Sh<T)1yz_{fOM6uVb<f|rfX+s;T#`Wk3L?yx!$CH{AiVTDQm
zZ5~B`AGEIiVMFK~BkTQmo58pf-jCoV>hC;VXT(0gB5X5n+g@+#@x-U|U~~yuJvQAs
zdx4=DSD)!j=|M@3EQa{waiJd<CBtIEfDHn>n|{O4tA{nEIbHs5cRXWJAAlo&SEWec
zsWv{Y*u}ZAEc9$gtb2o;#v^EJQp+v`>3QId90>ghE9=+sAS7fmwv+ZyhVdIt$Ti4$
z+%M{G!QK7xxP@Oh=35D7E)71f&RXEgLC>1U<Abfh<tDY2mKU^_yTH2^7pG{ixfd$%
z+L-}kd@;q6$v%Gd7GtW>LOj2J=kgFW<JBT_jjwwPcW<sj>ib2|wsDd(q&hKvy|xd%
ztan+Ey(+ES%W1NbzD^of^PIm^YCFvnx#{xKT1sL3cR@q2Tq@W3<nVY?&fn+V4G?S9
z02bbL*<9k5!+g_q7!{0UOb-=~ZfCaGUTjR72#^bzw7D;V@1LBQU^{N_iHdypXW2IE
zIm8~bB*FiL#|9OX{_VxviD?_#>ngnKoll5d$FVr`93Mh<J|P()Ag9BJ8({I%BYhuB
zS^roMU%*127h_$~79EI;jX{7RqwI{qAoQ37=*SPk+EH3NY~CUT%Iw!YwXw`s)dV2;
zUKqoCcn8O=^D37wmnx-WL&#LdRH}2sYu^e*a(g^iHkZf^Fg&fQv=8}S+ftR7QWmkD
zo+@nOgv%7XJ(ns{M9Mh!McK1O8yMiKJShoW`xD6@iEo26)TbxgXI~8OoM-QT{>9@g
zeSJhN=9+FoqQdodM8!zNX1#gst9h|sdSg*>xH-BcbR)Gjr@6HCQPJr&tXt>4rO9Me
z`lC@(4Pl<yx$|%_$R@94B0izY)0f}+r8?p#1Qa!rOb1k39KU}pre4!Y$v)0%Fj5m(
zXV4<@wt;t2@YCeyu9lqs*1a?zdh3vrz|hnZA5wDBAbl;3JnhpPfy<t4OryPy){;#(
zlO-}!d)b)AImuuIDwqPhopTWAy&uKw--RFlE1<>0{<EI4hIkFEJ1)2Rc45z{|GLHU
z)OPoFr(sCNjp)f{m4!|^rRUM~?0oU`_1>9#+hd?Zi0g-vDk?jhCp#$Z1*R<D3{q{x
ziXv^~!9JzDH)(#d^>b*4Sa-I_MZmRl80P7|#(v87^txv6jEeH267PO)T&S)8;+Ho^
z%(DX<sNn92&=fM;1jI$KBpgb8iWZ&q;@5(_SPwAlR&3bcqU&7zDUa=C(0S?%n&JXv
zzi~WDLV@bO)rfZ^#i5p-X!y46)cpI)ucxu+11`{NxB}y*-;>O}#p~mJc&|P`aese1
zgt7^OV5PCUStJA!B0A?G4C;>-jgLK%_zoGw^BPyA)xEXGSgbjycEr=PMWwgm_m8}z
zWno<F9;q5+%t+ZVbew5b6zK4Y%It&VxohIkF!)>SasMh1=qV43ZiPl@oS<&^0sdb2
z<hAJ1c$jhBO1jIXitnyLY#p$|FxPBa5Bwr)1NdRxyXW(){ECH~(l%<*K{qP9n?ITN
z_#0L_0om_%Z(=4DHD5yB-0HwqAV%Zk>X~s>lILbof7AJsOyg||!Tm&A!<0FGIG5}2
zXoFL)>D=Wle?=9zUyYn12ijo|NqjtoHfi&45Ox{qD3&!7>`-X&9?LfqJcP(1yDvR-
zvpTeuw5#8Gsq3D7Pv^4e_@Kxqo|!525GPs+Rs%{9BrOSths&);i2Ou=kskQOG*X3x
zn%f<7PS+d5vgkkndQAdz|B~L|bf<e4E%+;_u4ApPsp1>${SAw+f|C;cEBHhVm86KA
zhCf)l;|6@}#t($sP~~II!}yZPaQCJzo$_PLa|aI3G3sj5vva0Xpc1fKt^I#mfFD9y
z621isIm_rJIUU1Y^TSSq$+2O~B41_1X!!M5a_X|D?D;P|Cwg|o9UXR}g@Fk(7`Kpb
z!ak4>Y{?&KRgeg|5c+ypnV+Y4k6+f_xIK^i;xDXXt1p@tpzCGc%#V~828<%`EdvdK
z%k1r6%_%VzFZho|8;~hcuUO#P<8{X}ZfKr#4UVz8r&T*b7ykPP?y%BRs8FJ}4k_@+
z-}m_x`|z&zmjH7lLx!GYf3zL`ZJkn6d%|tEE?EPZI%hKDexTo+!3ZUtD1?*pKaGJw
z?tk`p@swOJd_Ol9VDx^n;YC=Xy=CD!4++>dSI~!z=~8Osc-7L98}(6yW|`NJh2cG=
zzMVh6J&ZdR#E*QT2-wOBG=c>2@QCe7z{W(-E%WVoOU4AOSnh$AGPi2{NsRl23@8l0
z1v`G7U`k7MCVuCN>n`6Bj3Cs4@Uz<*V;gt3zuW3h{@Uy~fw!K^+!dAxO1whg{tHKH
zW){aSM-1+%^qTAQed@wWqkqbnmFCt)X=c|wBIAgjh`0$CTad;`Jw)p<h0b!m>u_j%
zzuIM>JhL|B1F_yY4h*Wh%K1P_<}b{Qu9#&RJOX{uT;?z#YZeJU22Ir)#Fi9kzt!yP
zLYrOl3<*71vWaGmV|jiiuv}c-vC-&;f+Z(sW*ii+7EQ^L(vRaTY&H0es2*fkoZKk}
z%M+zPdc@<aqSM>LtDaOUA)_WXO|~8}e2W8)z-<al;l&kooM`+#Jh7{rcm!JB_0-j|
z?oP>F?s+O-dr7huv?~48EAKSDif2Ps-2Ed0y<!faVF60|{^*SLAa<VP$k>=5)gsl+
z_iW7p>)Sa~2lu<94HvUZ6~Mw|eTT%e<+^m==PfGc=5wWlwnuCxCScr8qmtFkG;ya1
zzE6}!jTsfcyRG@-tuR}ZTFF*Mi?4JNS@^1uXI2V`!_W$*l=}6+n~D19d)cdtHhtNr
zK<STv=O$|7@%<NX@EIxkl6|Idk;aDIGUv|hvbH<&y5$w<c)+;aZm>1x>D~Sv_iX%b
z2{4twZ12OPBhU30{mYI1Gsp9Fh?R9oQF)Pg+3YuE<&%xAnK}LJwzBl%ZY-GNrH0hy
zw26@nUUyL=Uf#_sV@YBX1!c{pkc@sdoW0+(40Nx#W|iNZ5Y@2g-$G^BEz9<MCawQ<
zFTH4^CcWMI6KZrUNiu|6VcQy2?eez|#UMMBB7Nz)u5|iuBsn?zDH9rUZbP6l!oGcY
zbMiJOX5r!)N)pvMqCD1~@#&&o#F1xVHlFlSPa}d+QyL+;rl}2+oh@z2^rSC`x$v7;
z*?7)|TyOWxtDsQ9f1UdBAYP<2P5r(+=KnWpLKHs!TYlN_hIoj$dP!w<eyXqKEgd|8
zJ*azO{?=Ja{u}jDJEmVm1Ib{)vV<@@c~#&@Xi_G+P3yA{`08qO(>_PJDO*RN25LF0
z0zUW*0?+Ebw4I#sI9Ai{`6z{3>csi-4ok1Ov=Cr`A`!-+C@^RhUf=a(aMZE&#*^-=
z_Eq1dJf>*sx1~g(wf<Z&Bw%-YU113!=vOd%#sBVW_lT@*HP=!h=smau)2jaRPG1eu
zLzPpJ&*S+ndXcu7Y30~%xewuSEq7`1z#Y;@gZY`|N<fK%9Z{XY^32{?K^c*uBw=cG
zjW0K<pzmQpqb-u>t3b`?y(~qmM(c;Rr>CpON?sdCrra9#yVn`(YajQ^6<PV@UBd!Z
ztI)sVF+_r4Kd;Ky7fyUlwNKQAgO$;_Gx!Uhr=JDhh+5>}CVm@f3@}n7^onwq*6$QV
z*8AE{dPdKT2QKR;EczB}H9|U*)cG`mtf6+xUJ~WA$vKO`0bHFudu$R!u^$<swsV>2
z((>0FegvPC;*EhZwnJRE>h7$3f<rkzF5(<aEpmD@BAy#UUP2nI)C@uPy5II4oARc5
zj4SN#N{=1+zqaZF0OT+52MUo*NBIi=PXXUfk3~s}dI?EWzLDCfAxNKuMllvl(pPDV
znlvfLR|RfO99);)KN&||CM1|iOV_h|PO1QLr}l+p3=<>Ael+hGRgjL(l9HN|&G>;4
zrmL$vm?^>8SwKjJ&@~UY>2phOXs^lFGG#I;^jJLM(<c|VR>dG)Q91ba<xIJ+O42qE
zLl)GZ=^19q=h6kN%K5T6O-+MLar{Gla!30I2S!R4DyYQEXASM$8xB7uC@3hTq@-xr
z$U<9NC-z-~wkG>4c?6w(zlE<D8DAlL2kC<HXfv`)F850h495|$i06cST`+<)i0YP7
zE0cAN_MWJcWt%)1W9@Of%{vxokEYO%!kp%oSnrbo7}OwS!h8OvKE+}FsUkfN@j?gM
z;JmU20HdR?t4yg0nhtIg9Hc!`15v_d>PDO>VHYS>eA$x`JVf%%hkmcWNP$1?33AE9
z(Z3Q!ylGL;3)3&?mXedA;G`<&*t~$UF+v>PZ84Kj1qglDV)<WiSpay|KdkBtt4L45
zdmy;}$gFQDAg^naQC7etD=z57_+q`i2*l<52sG5RMN1=(ruI|DC%1(ZQmo8|<a-g#
zNz3~Jwe*5S&nI#9$GdIS+?FTSw=EJ(Zxk|KVGZ#qV5%NGGTM6T7OsBAyHEYqKC)zy
zN&_7t?dE36#4)GHJ0ql8sa*|bna;oK5eFr`phK&+G&FD6&f?m)**MCShR?8tergqM
ztS!9`oaWnp^+Cg%a<ESyY3zAQ%ecZQiOS<KWrxXQ^48S7G5td-QE}=OoorcyIEAa3
z)D~cxXFue|+?zDSP5ngZ&o`2DoYH0gi$wcRCbz)Q-*0%t#vfQgPF(a-gWwusYC-ZT
zUF@=-hI+e3eKhi$6Lp}xxyhXkQ8KzFyXCSGDNtfo55XtRU#@RHD~)e75&4?=9<7T<
z`8?A2K0kRsf@ninC}+_n%v88!`d9w=x_3|>aej+dQo5X4=pg4dt8FRGwgt_s%;2hc
zA#L^<O^au%9yB^1f}fPV{31B5pY!!OttgsoCv|Bl-=<p4PW;uDDHY1t%q=?QtfRbR
zN3A_ER^M{Ve9=)nM@iV$I~A%p;FDD?V0c!vb9pnkVM&W6UC#VO%~cS8Goycx^P4yd
zdQrghLB)_VyPnLnT5jlpN9|2U2Oo`l>&t^<VV^o94hbG<nJ(=X(HAnQr_)(H+BQ+7
z4o_18U9j20LzcyrAHf4j#hK@?AaQc5t6PH0-$4&Nk@O!s@qP+POZZ0dHfDW5ErH8>
zpbXjJ7^;!~W+Kalo{A+kqkg0BuI~5g<A&F>z3oNB^}_OEPh*vsFqkqgH+!<s<Ejn~
zh_C$e_Q>*b)IT>+aHED-l(_fRD^|LA1##sK3wB-dfBV6}wFvh*!#@g{s$9i{e<Hbu
z<}bwYkn%*O9buL2nRC~l7`rxIN<Fhh+b1>qZs&#(f6je|61?Rh`u&%7zxX7pqAc@;
z8JUwxPQy!_`uLeIBs?TLZ^m7YhY(duOB>iX6H~M^*!5OM!|Mbkm$G1Tc2-2r76tp~
zTYn)&ixq=?at_9)0}dB)6zj}oar2XN^6<VrvCnr1y-6))r4LhT$6s@N`Ldv2_&rR;
znDiZ!o_aNV_WFNM7FFInid(zz`QRwZ%45n9r)((RUVJ@z7B7HPe{4x4g4a1C^Zd!4
z<k~OFA&#=cP%J`HxE`KURvnw*Pt+3;W;B)_JAXbRKeB>-J;ArTtQjs+v_7!wHKJQS
zm%8slp=^gI^IUFr+v+=TLgVQ}xc6kiE?Ieda58;r!Dnd<fcw2kKb__uCiNQr7PMp`
z6m<V^*#sq|W2c3aIH#3`aJsntM*lyky7T>ik!m*#rN6j?3Q+XqfV6Uh-!@i<E~jY_
z605)zE@g&betJo+d?(@6JXwX*(F*nFI5*{zmQ$!_qT_R;Hca7Jd0tyh%yo$Dt{J0=
z(WVLU!zFPuBN61WrKBj}pvYPA!&7f-jv+G4vs>)A1IuVfq~-y##ff#FRl}!}sJ*V%
zl2A^{%gM10@;9kgbH7OVBc%qXp!x^C4x28Ic&V(2bxL0=>QdX7_@CBflf5xN8A0S9
zp?HZZ+Zn-iswGcj;}cG?Gd&5-awFqfqNQY!+vg_uUWee67Q?Ovi$hxz&4r`dYpxi)
z_~A)MZj7u56Om2I{Jc>k=h26c?_C6XO<|C0Sb9!tFNVr}l@=VoTj&xdMz$w}7ZPT>
zR_Ua4#Lc;Z_*qfa+kRe_J0b6&)+biq4j?r@whV*}8A{!n;&N;(^IZ@_I$ru~Q@=_s
zIb_d9jRe_c<|TI6Li~bvL4E-}y-@YaHV6Zdt`LqMW`<B+ye&It?6T4p>~;?#d=1>E
z*58%L=WQiyp0P8W5W?8eKXC0Zc^{lRgN&}LT#}cdqlYBQYubBud(W41P42T5QXgdA
z89-*=0+q#SInA4<2`J-O(+8N6m7(F5*UtLpn-8Aw$%&pqbC?he#83t#J2Q!H?1xg_
zEJTmU;J$us9n6?<7#2G+=zC_b4}-~3q}K4<COzcsFk3el8}t^3*AbHWQ-!UE;Wn)e
zY3hFhmU*IvkM5?gUext0YsJYWugY;ZJ-#~cNyyS^(+mi}+nBG5?r*|Vh!SM=O>Tiy
zO-X?U%&P4bGoc?jPmOnT-@Sk#5GRV<Qg*}=AO+~HeuhTm6ctTuY1zmUrl+@OZUtwn
zSvPK9$}CvFhMm3cV_VVdg4~kXJ^7RiM&4`8k+j*CV;c5tJIo#BB)*7esi0^4zN@^E
z(ANfSAig74>MB|~V1R^4x`;s!t<jkIT<6mPIH_mZ5`ePJqlKstjg@d$P$<IF+=C{T
zY>f7nm;>Xfb;NY+IHKt`C?lp~*qG?HG1CfQ({+htLzr*r5-CHI_BHtUpOM>OkS_Zj
z##cZ)H{5z=3*PoqOGlq-z()yZtnOn^#)qlYvZGy(1;(;S##=S~MXOu_KSX5JD6f3k
zu?kiO0eUIBfcJW!Ru`oWH@5pP{!BF>Hg2&N45Gr@KXM>)pSi8PrJGwLU#L-%OpV#6
z8;i~A7#4Xh@4V4!$q7X!NgoYhxSD^38fq$LtRHWb_@0;ye*G*(7q&N4fMayXniDmf
z{f&O#^3Zr##(SkcXMC7Ei!|u|3HKJP6574{2R&~q%{%}1H#&!TqLD^hfn~1Mf^>Jg
z*UbO{Yq`fI+V=ME3+}SHUe<7KHU4o@7qoFmLqdW+%S-%3ibe7I?l@yWwZM0!XxYQn
z@L$9~noLLx0RC%;(SAq_OehPWn%L;fk-IATxDTOyqf-&kzeH10EB}MIucFm12xZPM
z7~S2?w!hl$TZ8-bt}a827iYa^u%ljJP@U8I3v9YlKim~D6$N{0An)FV-2wre;Q2|n
zGnGP3nH`+F{3BjjKK4udj-$JKo7fjmwm^Z_2V#6LD@949azbZ{Jv050+G$>(?50oO
z<#OY&Gb(z14VmuyMI@Lq6zSytEEW3s&Ae6vaj@|@@_Ot?EC$KIKV_j%$F&>`L6GG~
zywk1cGE=hA@gE87yXH)=q@3iVR0&t?+zYY-&9}l2W#yxh6zLL$N98+-SH5U}YU37|
z0l`GV6E)#A{cO>-K=TWvn4cadG^Lz^(1v9v`mKWDv?x2TXR{0=_ct~*lJOWqb@-Yx
z*CS8MxhWomb{77>?TO$~swa=#v%e)MK-i{n%VgfA1uGjoAKNaDO6;6DD!%Lh5bDX4
zZ;yid({~~3%vK7P=SZ!h-B!iK#$mnH3wyMzH25T2p!!&v$|b0gj2h|rjcP1>`zay5
zO~_ztX$<J@v)dbHb2=km+*awpflCEXxZfw(jKOxZG0Vd%(R!=Q;85U2t#tEvMa>ev
z#MOq#n&mNxmQ1trgUK>gTaN@=w|GF^n00S4a^GG%#^ekQHeW*mk+nKYEIhVQR0yr7
zA9W6E?mw=<V|jXFFM9@_CGOVrQz>5z$z8sDHCXFN^h$fZ>IMtE%*uCw&$S7^Oz$?h
zP>M*N%|WBzpTooA0i5$gi#W50^L$!iEe+(eQl9z*j_6;P{EyK#Jhs^fCk!k83(Mo#
zfqNH+N3V{F{e69(i#)<47A8;>@|?~~Y5*t8u@%Fu9zxqKv%9BZ*4dG7A;+0Lf(~7-
zQ8hW3{9EsiSk^SHBOik8^P?4oK<5`FLq<~)^#>gVe3G+j27)I?KY(Fj8~i@Ckz3cL
zjydC0iBT|hqhu?~0YEh$5{Of^({Pi`D19Bpf8iHkQ&DL*Jq#V;fyzTxyx)P0N0Nk6
zLqa5h2BmR0O&&oyes6A2N~#E^wdNQ_mRem}ODcwzk<eZCS?NH9@qSPx`*XMr*pvjz
z+R9%YU&O?U2icboD^O%}xW9fNpEE)d$$0bTZ7rdN`I^)CbtwQ}rJ>S1r(d24qIhf5
z!B(5+H_pX1^>;;&GH*EC0{R>`gtoG7Zv}^WLg2qPpZ5Czlq>mT(PAoCX?QL(H<uIs
zN4UOX#B>;26B3qeb;(7mi+@ht(VBB&VF?$Ozw}L00`%W<k+15zJpSr(k)kgI%&*;V
zq+%Q%ka@j6)T+B)^qz6Cy@UxU{rvRJDjxWim5(QI<lt=>nyssYg>a3p=0fxlfNJEw
z@RrH{;4K;#+~qwY%&$EJo1V@Gk7W0R*BmU)WB?YWuUfG+JfyIaG0OFM-1e0qHl{!+
zO#sWEI$X$_ggQ0!QRta?1D~QT!S1fFe!<SneanrVyhe)C?EZRgEhz|lDE_tL7z^J^
zN1un^p|bQ?)hv%iw1WMY*+}lxa?rx;czIu$tX%R}$H@;3xH7<Dre2NDw@_Y5G2q_8
z4G?-036M3HR~Y4-&BHCSy6jx5u2g)Z{vQRqI6qd4baAR?8du+X-WOS{DS#D-1~=$>
zf~g|E;F7cK@y_e<k;W0!9yBD+uT~~|;{8NamiRq~yWh~v6+~SyB3|^($ax-^RsYj2
zYgzHo+iF3jA%*wgCxDj^rRI%49*i3J(|A1(%z(k;4B-m&)D-NoK$E}5_`>`;|0Mdo
z{#~1#Bt5n4mUPp!rJcF%jr4*vYC)_5TKl+d>=~?q*P;#(+RP<IE}JG2-DYdEl!X=q
zn4!h-Rv(HT9&7|9zYAlH&EJQ@Tx&Hie7nk<YeX2IRreh$tp!#>hNk{8k3Sn+Bds{>
zSJ<VXVaAt-yMz^h=Amm`?|TyehU=%?yxRJ!kiJ|?YZfj?ys5tV#T6m-4vJ(27s1WX
z+tu&>RmL7YTHV5r<7Dtb?25IIV7Z^Qj{%Up#0rSK$@l`ZpW~VY#4@gf#tAJajWA<@
z(BovKICZe$B?UF_3}Cxxy`SuW-r6?g%vb@taQFctNT=aiJS8RN{ye9%gU0Gmhv3&*
zE0hbEk1>!xsy{J1E3IvhVVEKrW-gykRqa0*n_p${<0zQ8nU<4di0dRVBVTB-q$O0I
zTgk%_^(bTY)De74)dW*ZXyaah$R8$h5a#3*N1;tHm=P;3ttg;qDb8p0u2&e)mQY59
zI!2V4RK|X!Gh~DY9!YSKJlimx%w+gwH$GY1$<(2r!1o*0WeJQ1ptZQ28FZ^#|AX8v
z4y|9ans?vx@;2#oT${DuJH16fMTN|k7nPY!H0?P<P1Tjvfa35{NqYF!pl0D75E4{v
z)<h}N$EP)HizvlRv8GB;6RZ7KDFwWaV@<d3mkPyCi_}q36nvj!s-qYj=5>92@Gw3w
zJ}q!ezvC=<shz3#J3Vbl?Ww~kWo%TmuqrzDC2UR+c`8&AF~`olW^KTM35%$f@YrD5
z&n0DevGA#Q49sM##a<MPQM52iN)XSCj+E!u*lKaChOkRUj@p?#oZ*gEy|>~Iskp1V
ztvOh0@qZ{<n;FqwdmhOtEh$fYUA>=RyRq-req6Yig+#Hp%#a<qFAe9}csEVwlmhIO
zzEC|h>A`{8xw*|eE$m-MK>=Uz51~VU|6dLXRyZVDflwZy4DNtuN0y>4x-cFe%{|As
zABL65mRd03?4HBYdHx#%CuMMf;)Kw>gmY$I@O7cAQUqQP-lveyl&qY+@v{<nD&Bk-
zp9y_&g7wOegf<;}H)^NMtjK1Pe#n<Ow=AjDq!iIPC&dY*o0^uZWEx|HP0-d&->4`r
zapKnf(VxzXrr6!vkDqdc1Yz@26(|g69k~mza9neEc<_2HFV4w2c_104oPSyAsvwof
zFD+{5tVw^9nswlbQq0<*VW;Bq2IfYP^LoikQL>!HHt0~en4f`^C_IHWyLQ4QWvR_Z
z{`BFZbc4NqvFyoqD)WA{$ycOI<ukXl5EUTNQK=E`Tlu9KLn_EV49=^yWRWlEo^q0G
zxaC00e=q-DMx<=opau}{Et?<oZdMMU<}Xc#b{{wtaL*QVB)z-Mjfp6t#VY50KZT2j
z1CqL}m;7WA&v)l(<PlaHv8T(28UWPbMV|?UwL&VyAYuxau&vP{_d#VPPQW6GA*qOM
z?zPk{N6YS0KD+ywzqP(U`cu<Cb<U@0M9H`X$6ivLWCXqOfww&p{S5mtb9@wSN0T_T
z@B|m$Lxi2?eP5M$Ld_BpttySs;dkkho{y9}s|VpCd0(<(G%klVOMQHhW8hH{Xm(bK
zS%mH#@N`$wbzFOun49jAydJ$4YAxYdUiNs=497eDAE8HUuU(VYb_ShKV*f;HNwU;K
zk;hb2RDsCM9pB@AUeYeKC+}sx(ljiCkz?BvC8RYuPD+Ak92RcIAY)D5?8#HH2WPdF
zzG7JNG?;p6a?;TZ_{*oSL=H<OwbBVsM$~<|tg`}|oAMhPHD%Ga6f2_UxXHd}nDwo-
ziS@<uM%5I_ZY2yu>Q_J94&56X!F9xkxh+*V#zwfvzFg_H6~{S-_Q)}m(E>t|n@2jn
zpX*3Yv)ioB`&rCC^QA|=Ks-MtbszFDDIW^H1WPpDE)q07RhNW>hUOGCMbEAI1pcF)
z4evTHO#w8r<~oI-uv}<F0pi9T5rOh_xPj2Pv#Sm5_3y|kD~liRc#3Oo#@`*&WX*n&
zeZBPn*lnOFrwk7@z3|V-T)Xv!By|($f|8Ql?@Uy*sM<!sgsUo1B6N<Ya8qoe2dwVe
zxbBwBTg;<3g&hY?D}WBdh;v~cy8DKDjU(tMar#$dO@c*MPPT<;jmJ_OuxIA0Jf9&T
z*wDOQcQIRGiw1E2znXJD*(Sc&$W!K{e%5|fKJ0jbi7wiZZDl5L$cvEy<V);KX_r{R
zE71|{cC{a^$d$Vg6<A5>u;w3ac?b<;|K_ML{E9<5R7a4XV?cku{gICHt)KDNJgom=
z3Iphw<N&e=!@?Hu_{SNpX=ZvTeb}C;5^ot^$m;*3l!M*&JzrFq@^VcaPXi%K+#f^@
zV3U%Cf~}G4$!F2en5{q8O-`%{C-v=5=|?#Z(0zp6$6GGq4aVh(3hH#S50i;&ILXTC
zh@jQ|psDDo;&xo%LE5{Qzt~x5S}pQv@bLxJmtSXO++YFVfCYCu2QU?zC7XjpBd*%8
z%Kap5<627R4pZq7{)|oN@5$)h^>4VH*fUl?yJp@?Umc@DQS52HzBTaY1Ogo<SHk3C
z8d@<lOC;UcCt1++Y^@7=p(j2N7y(M`jlOLAHx5g=XEhypagi^7=>BB8u$^wzzjTgj
zG*!9Wx*NF9ulUtl*m8`5<%Dk6d(0ssf33w1j0MIz_@V8joH_wT5yX2mRuG@})RM?z
z3)^7am;q}ZSOH(%UsoF~`LI0ic~&Qf)LN5;xRS5oDQ4tWs$E+jUFTFWz&<u~*1w0h
zss7+qk)BwSQYvcy8hh(~`ZODjvmQ8$nuT~S@`WU)+a)2dO&~+mT#R*Z%xG3nl{_{3
zR7E&PeZuv_0SOVH7Ptw;aiQZxvN5+X;r*Hx`Swn}bJ;ov5JJR-UT8Fz0f+2Uw8edM
z%U<W6zRwWwIJ|o}<kYYB8ch^__PIQ85`wxkNhC|tD7HI;v<d2!TWUi0!{4Kp@``9b
zeXJE{0(5utmzy{`J_}7`cMWFN6hH~C<RHuia885zF$a!dK<4T3emT2_Jao)OOnNje
z;~0B*BfwQ5zH&bcFQE4**>?>S4b)clT>4sKzRefB(z#gBP_zGX0HAau?JIX})eUu-
zbqWaq0vVr)d_{O+QhObT#1S8cW22yLW;IK|NWVl6-~szkxnLu3RZ-xvtFPc0cQ)S?
zL3C$#Rpq;pXTH)8Ouyg*9$u2*2wA6Rl=5%%lC&WgO?oveH+Qh|g=;IaK+u%I(S>7K
zQ5iaV!PJUJ*ns2h&KWKM{VJR5_2=DeLV(n&(mnx#cD%gd7D0}GdFAgg4VtaNa$Zv|
zHq9?K&gd6;WCS5lSGnoqbG`$Sw5SrUF^gL$l+cZ)t&AEFWW#u`U6D{7Xeb`VQ)2df
zN+tTSa%yts9lSiZDK7Rg`cqKRimZznJfgAD-+h&NMz>=#gjom!DguCOju4rBqy1*7
zK+;+J#i5ui+XxZ9zi%*vnE5~D`TEHJ$)h86wlQE&F&=-0QMoVMI@<EIw_foI2{tYp
z>w6X^=6LrSZ}wfS(1E&6E3Y6>?YL?CtgHg;nzGEF;`)O#f!y$Czt6r2cr)|Q{>dgU
zm>QgIu45c(3g67dn|3A1XN8cX7Wmt`T7R|lnSZ`@Al;=gSW)(bST(=P*@}o{`rYho
zQ7gcr0QWX$3u$@BRhRP=xpUW9<C!=pVauZE>1sn;UFm~;xZKvu|Fi%(U-JG2%tyyo
zL42Y>i?777O8MV#K^d$O(PwhcWKm_$bw0XH)NNOPhe{gWvB;2(MFl7OvQ14`ICqPY
z(J4wx6Uu`oenfgg&I!Xy$I<aoY3DB~Qjj#asb~T&w<zMqq9k!RHHz|!f~&i2F-=hI
zJm|4L`95^=E?=MbCowr~#&tfZkB@JKdFJ>q>b?4OM4c#3)4!c#8Znnu<Cqy0e7dW7
zcDYG;4r_gZcIt6R<S@MTiQHjXg)H!7R__VX5fP@sr`~Zto>bT*uR)1}TCd=d&m+ay
z3#RFtHV5Cf-mHvQ-lDLKE+j`%>-g7=hfQr<TgUQ)BGNo90d)d;A`V#k=MMQ)1kcG!
z|ECWvGe0f?;9UiuDpFa8(fl8yeMI2aM#mkQXJpG1k!SnwsIl^;02Q(pS{+8Z-G|fl
z55hQQIR&{NfdKDC8~a^XjUnZ?fBilMwRTE(O-7|T8bF^r(@_kUd}S<!{t9<`CX43d
zbs`dRuEar94x+iRewStY=U;M#OBoVsDQ`KJ0eU_KNP9+A;!cbXW)zvUjJ-C<bt!fJ
zv6F1!eFUHgY<-QL!PHBVJM0nd+H_qHIHksrsGnATk)l$YN+w{t@NjAtPvD=qzt6fM
zTPpYLQXa58YCz#PUEPqo0Ro6*`P(~XZ;-a$;&4LZ?Yr6|yKC8<y~^Q&b^Z)WpkAit
z4hs>5LyCt5*P`Z$19A}=cQA=97Lh^S=e_dK>-t-a^p8K7b>!TYNn%8@Yw7`!IepbN
z{A+lg2+p)PDf)f(<ol|kFAj|FJL~@s)gte40@T~35-~Hd;U-gS4P#liaI(@F(uPm)
z|H7kNNrarni{nOcCdsD!I%4Y+H7QwDl^fHrG=i@qlN7pj2=e^frb1JS3HAZCUk1u6
z_zk!v#m*r7yae#*(m}loswGJ)_Zs+-XM{Keiuk7p1oFmr-{=Vq=s6y7zRxxawD10k
z<U%h9=wadhT3Kba7s!vz>q@kPU%}V5Yz~7C%p`RO91Q?r`@6g)Wv%?NDp=ga0iP0d
z_wxVHbQM5RM_V67kW{+6yE~=3yHgsL?gf?Z?viehZjff_?vQSfZutJb_r4i+W|`Rm
zcDeW5U!8MpwS`4ESQIm#&1Mpw{U8Z});%~mJaJc&20L8}e?tYZ^JDI;Ee@O#nT829
zqDkFiBm~$KbHTi;PO*bsj}PD8x^J%B#*~aDX>9OSsmkRNZ=5QCL&%Ndyca5v#SlLG
z&6qo8!z)_qVwP3r`A!Slc|*;%#OCC(G=Gk!<>eB7)y=I&sr;+d^26V9*&IG7-G+E>
ze>c)?mya`kYwZ*{BmS?bQG`@!d}vC{E4y<Z8xjYd^laO0o)%cR@S8;a{@#|{7UdoV
zDv;yVrk30n1ZicJmA@Z6N!cr0dtTuq<~JRArh;t)wH@Ff+uNz&L2)2zS92r$q+Ei5
zVURTlI6!M$yjL@!V`1h1SBW%C3>$E?@fSqNHvZXRvqQTM$kD?Izi>-uX=-w|Ok3jM
zc7a@IpSi>@OOk07Aih&;Sr{uonjQ7FtkCVXG}x9=OaUyeLP-%&c^GgIawIoS{VGoC
zt8o%93R0`7N<J$R%9|z+W=w_#Lekmf83Bmy0K>`=terZ)>5P8;*+U2#HNa}@GCaHB
zBgGMN&wvg>5rR`>i5I=34_=V4!2zPIDpxay_MB6G%@M%v(|)V~R&BmI-LG38KMREF
zQ&J#y*necxiWmGwL<&%==+JOV6asux<bVA%Ur2Chi*K7YfoG0C;xGk0BPax-!Tp#H
z_-RqwZW>0;hX?d&nQTc{QU;^p;h&xOvH)*UE4n3G4zVhCVS4Pda3^wkuWZiPO`&-(
zD`JCcz}(s6oWIB_k3})_-@m6y2juTwxU_Ur;p{P-f<Nd!roSAKi$?X$PpXZ?jU%v;
zxinLpdqZ(8RCY59`TXhKfWf|Ud7MznC`}@~0WONk7BzY1*|Qk8JdM-v+uz4WcOdm8
z5j-0np1|?m2wp3N;(8r@J`{Xj^Wn`XyM@LWz>FivmJH+ycZgV!w5BO5t2TK-V!Up&
zJ_T(C5l%Sn*ZaI{c6c6h)$x^(kt#i_a3;p?!*0#%=gq2(aFT!iaOdP=M2;0gS@3|{
z%J#l8XCRv|Q;{0L_2%+o<+CO=cb_@0$~>I+EEn^rAA$u(L{STZlrd)0l#D{y{e&BH
zBe6X#cSWiMxpQdE;su7O_o*)*X0+;Td^j_1xhAJg$mm3+9Aqi5Cq}8JOKvW{)+|3<
z2+x~(AQjycF7GhzV|&BxLZRjNHoxJk-A`?F<hv7<lh`*4?Tm(8oeYQ3ie=(2anF5m
zGaum39OQy~v|{`e0bQx0pftnE#~*;>uR*k8L{Dz3iBOt=hT|i{#JPgkd<oiDZRm_1
zs&{-`mM6H+!-Fb^gj0<w70jpw{_=!&<CheIe9C~{l?lBqn5L=Gn`npA4>L2huEcqk
zpINaH#V#x?u8DbNVvjd9u8a}5->?SiWJJq|ynk`fUu|fho#3$KjLcsK_R)$EKp(C6
zPod)iK4hox0#1ur(yGR+2|#@m|B935tVRlmmX186bi4!#&3GYe-*u}+i3{_0zu?>E
zFvNjnk|X?<XRPvyrzp%AQQ#E+ZJiL$YGBbus#g9s5pM7=`ELa7&+LDi1-h3MLVMEx
za9vK9XsRJjBtJ);D?N~MW33HS!e~uT&xrealA$is0P!&96HnOk-tZ506^6YM`PCHU
zbQ!`-4<7+jGHg~djwngO`pN+zBvkgj%A8ZIq6>fAvK5d;!=SQd?$UMpEU3xsBu64K
zsS-CGTg&KXI}|!fIvy*X(~z>Ju+nb#9?nU!7N2R4`u8D_3Szc@;|{vmo+_*N1sxe2
z%zAfL++&1XS?P+vcj!*IZG$XS#vh<&Jr*vfUcUy64TXwEQ<km%ikoAHOeo3p!ZHoD
zA;`ox7yZp>|8*skqCK)k9oAMPAf3pRTs98fUi$=c_*i`T2sH07CL|QGvYRp46b5T|
zyjg{};dvO>-sWoIhfencS4asRM^{{1tLDb?_|F!eT`6!Liyp+vN4yJ^T1!?OUb$69
z;U}t89bAp<_f=`}J(ygbw?@_Zr+R`tkmuGgXWg`Nns3licvbX%E<kTQ)*e$~OsW0m
zBmLwWx}of<aVfO(wCl*%vK?decOJw{Nj{|(`cqvxlb<)hh1&9i8_0vFWxv{XQE%#~
zDFEFWoa6K@%*$}s?>z1N>d+{|^ZkbqKad}k*S>UMY<FPJJ322-!u0@ES9_tQIyJzh
z=jEy+v~Mn+lq0U(UVSRAeJ*}C9hZ|^awD6k8dXnxSXA8sv<PF>Zl-1NWKH`1N&wnR
z2-dZgq;8CdHT1d&4Q5LjlM!QP%xt)0nmgByzU1=3$L-b^`{B*U{e;&tsq+kn;<xp-
z!bO=}VsKa2#cX_K=kLiUl?7I|sK1o3B1EQlT@&b<k!^_2wn&)-*nSKEq>NmYV2r4N
z)IyRbsp>+uWC=1|7phH?E~R^2PD|pKQdN>tidkJw8vXqvmIbXd_XNV?nJ_B(s2TWV
zLwXw^vZou?yZI%a0>j4och`<zmd0VCBgaki2j2aHgjC`H)yki3r7?unDRF|_$Vrl6
z{dT?6mi^11{1?Xs+ALKA5){w8X&6s1D%=MV6&sDkr-}Bij{g*LluUyE_8s7~>fqDZ
zEdBXz*^*ge^4Hkxh7Zr@sF~&58DR?%5<XryF+Vcj8s*#UkBfQwadmF_QSae2{bRGu
zDECkdz8nBkY}(2nj`s#b=lWavwJ)cuyPYF?dvdxSITtY2MGZ%B)Dbx0HzC*c9+25f
z!P~+4R%HEbe{|WP_)}yf699uFubd0=QH}lUhs-RyQUh+kxuSgA@liV$Emd|pE;x63
zNG%5f*>Wj`5!zsaZL|oM5@e{<3h=Z2NKVb7;1jX8)au%WhfL$@#tVFDCFvltpj$=N
zW8i}hwsIy%fV4fvahY&2K-_V_1THfZ<m`0V-wdKM0vi3<=3}~QJeyvgqb+d=g(Wp<
zxG~Cmdn`kQcBX&WLN%8jthnm%EzLEr+2^Yr1K;wSi(5cfc^QE{CH@LMuIBvVGE!$K
zCUF;lN{KX-ZE8svbIX38zVnyEf%frTm<eqaU()%N-<@seDFI+Vp<@SKLJij+fDg9K
zKI9dXD721;P;ViIk;qmRxuY)#-M^c7_C!UOq7K}1fy)xK@Vmao(>yJKpR5uW)2p_7
zNmiUuuKPlmEMnm&R!US6T~Wd~wCXABk?W{Gz#p&0W<;RLj~9R^7Wv7x3$t=c?EsUg
zdN6e-yx#N>ckc;etvDR`A^omRRXGC)le`To-f^}qDb5A+<?zk>;m2)m3hfpn0421+
zFsQ|2$K~)BuX0x4Y$#pS`xRUq9mRYtv*SC0g-MPa_Xs%x^W(cJFN@rW*{O}M{SGdd
z{h*J+gEtKsPJH_KZfiG!;+CO9&X(-%<%ETjv_S70luZX(l3`TK$a_WVBNohf3Q`%g
zN1QBv)tyZKaBJb|{?5<z$~2U&sJh-Ok18}2d#k*tY9VQ-)k(SVY6$|Q(L;%jfV&nZ
z%f02w19SrASLYLltcCqk2V*DkIHkY%H^I0x!N`#2A}{=$ri)8Nr~qRzfVoosXy%LC
zE1QH)ZPtr{Y>C|?dNCgi3xD1yQ$HnZ8J}^Pow<cQeyXg37w`l?jqJ||WwXP&?OzWF
z-s*U}xDP;2C{OkWeKB1a&6?ooFrXFF!q@UW5CQ*ZsqN;dw^RoKN`Wi*9b|he76T1%
zwwGRQa0xlT2R-Q2snNF6goIK+ci6woCUewWRXU&e`KcFi+B82BM?h)6^l{lVa>3sD
zn{WYI*tJI*@81X1Td?+FG#gHm#ZKPFgxd=L$){F)Z$J`%{n-g9UX&meSQxolc%{ji
zh53o@q^f-vt63-ez~HSym;y{{l2S~Llm?Yc8(M>#><tO(=&;;_bYI|e`;~U84zf3X
zI^NZO_T}cfNS})Au){c&YJE8PKIspPhIrgopt+$8>H{M0xSY&{z)u`sc5v?me|t0-
zdj}5D1r?Y9tx-SkTi*kMfLYUG>H75VTW(qK>z)#AxaDKzHcQ{Z!@>TsmGB86$=7@E
zd|)YUCsR&6M5g41j<2k3>EZVE=bbnTp6GvkyYI2a8gtmdCUv%o+rRkIZD#8)s4cYf
z<Ab`J`rkW7|JzvgdpIxH@#9uoPw%U3vFB#nzY=rQMBv4x<|vTABj-B*6k1h%rV{8i
zD+C13vhw)w8nVzjO*UNr_H-kRd(x&wY_DCzYfqz6+u|OTGRD$}If%$AOvF{Z_1yfL
zplxsiBbdx|mg@Hzw&6QaRqEI$E=s2-)h3L%1Z3?!PJbfu3dVV`i`YFI#?jsuvtCli
z#@Bf@J!?d!O9RFm8FlNo%!Bti?zbFCf2VSr-rq3~6`Gk2J>Pena8?P)F~2QeV%$wU
zH7E(j+(5VMy<%;nM?j*9f;0=av(rAS&iRF=pOGJEcuNjOb(e&>E<B!}`2#isGN1mr
z`_BHP%gc%FQuk4Bj<e#PR|$rV15;}NK&wO~e0Z@!g2ctx09zwBR-Y_9`c+e?THo)-
zg3@G&d+4DPN&y5gUf?R)`_)Nf-2UERp8Md$$NV9y9%vM*0$cHN8?hwwSJ9CzmmnU^
zS$O<?eMBJg`AR?L(4F!2spC?IcSD;4FKggRsmPyk<G2|1-Qclswq9%on))nO58_g+
z--Eq9knj6;h2Pw1Ik(A7L0u)y9E?LaFNCj~zr5W_su?n8PDw@^32=)`#c}1lx=4;Q
zTS863a!By<&rc5boTymU#nms1)4f1rNa9ff3Q$@49C)wt@Jp^`iECDs0X{=_8m8p(
z<d)A_R&%Z6JN(&SBci}LYQw_m*VXAu=G%~br?1_y4)r2t^L&7+%U*Se8nQxadV7Bw
z1?B)+2IlvI#Dj|C?$y)qy`t%I<-?>BP8*;Z$y@Ic*r7IA;g=Ji(1rQJ<%ons){}*R
z9wiJs7}=yB0Y(I*0<4ii!WqG(l{t-NOv`1hCHh(sr%1jX*l-`n&F1gIOEy+Scb9cz
zF6CZ%atuJkKYb;Vln4to!+IGEr8=1gj99}1=*wB%A_cr}RFYqP;6dPXb^@+AO^<>|
zbL7%`*-TLeZc_xNA&aeshg2W%Tc-+O(!V|+0kVqEx^Q6c7RlQ)1C}sH!0ugj|18rR
zeW?l}TdLnN576jQd-x!mH{FBdV)AL=19W-LB9)%yRztqn+0~+)b82(_x4la)AfXou
zlu9c71SO#N*fyKt;uqsfNqpn*r$jtTUYD6vA1zkmS35=nw@cw@Ot|QzXG$IUmX_F~
zN@PHC5z#l~09wd?!mHK2+&DvF$cDL`=R~uLOss#V2WBJCwzFgaDgB-NkMpe?34q6;
zb3X$}Mc2Phy9y7;8vvg~OkMIr&Z|wpal{m9AT<t6GmGUSSV-mNf@=0r4MZfjo`>|w
zPe;L4<73O!w2tEjhUTjY;!T_0^W*2jb?HHrIE;b3kCw(~Y;{+aY_2MNDaPD_nG=3>
zsF_vue`Y#4qX9@o>R$!tR&jNnA!_GN@g&3}4zd;Y+PC=ir<2zA_JAsVWJT0Q?hi3(
zGCJG`OTmDQ22yc@%i=tE)g7}xQW1Yh|NgZNNQv6fIr9h*m=$`&=FpGz!PG5GPOs`!
zcO!~bQlf#uQTu5DeJ42@bJsuP=+`(0+B}Qt8r)jFN=p<7GB?BHONutM{S457CH=bZ
zoFQEVp`qBipl5`|=R<Jt@(4VKC>j$?mz9gIm(zlpovrpn#kGqJy9E%@nFgKbx0c5%
zG?Xt*-D4^iC#Ze(dp~<iv%JzCq4df3H;h-xqaiUHR9o-B_OTztqi9vZ=~5l4HqQls
zVmBowH5p!hPaBJ>O(GUA9}cHk9ESA@nE@E@xL!gZ7b}e<=Oh(}FDs_RIB|N9PPH;+
zB$M6za3LWXixplAd19fMnt{s(6Jt9IwHsaqpR!*gYGx$t3oZ7J<RsU6+Q42>7qWBl
zC(qtH_PE+GX!6?|yd-Kh)j5Hni5*G`Ivcdsvm%Ge%W@-*iC+_QHaLQMMz!&lpFEGU
zvV0pGyhGDg1wP=sunP408NG@5h#@)tXQafw_Mi_zcH287R6Yhl%?0MLHb$!`-I!yO
z8t+j-tVqjTZ6+q>U|_mKH*$#aX;VIHW~<R>0$T)4M+tKE62%HniQISrKSp1wT-K5`
zYsuYTdM70u#b@lU?UR9}HG1IvX1|!?FAXj2S&_71zz`7Cu8}wF)*tNXZF7E_p+KkJ
zEG#CXpFmKsAS1!^C7ci6m^L(=Z%Cf9EYC^Rfn(CKKz_9>8bAx?CZ&LsYo_I%T>BRi
zo=<>9*1Zh6LVYBWDRH|zho`FyWw>)=yRB7moxN7>DBMhaJ|N?y;Y0wMZ65i-5>h`V
zahC8@;Wr;yS-hR7e3A)&*0g6)ejfYVoNSo+MLRQ_(|<|!rjZH?@2<&d6SNo0Ngp)*
zncf^6-DQJepOjVMYsVh_J@FE#rV<N#=-hO}`%h^H6>!cIGL~<aA-Ekp?8g4RTi5c<
z-W&imzCT(ra4;D;sO2j1b7266ZU~YMa-M=*a<oA9J4cpS3A&lmT3Nmu0C4zv9WTFJ
z-m2fDKn*m#M9r62T<6I*cBy<)97@ZObPbL}o;WFR&N{xSa#BLXes*UHO4<2!x~mFx
ziB&{SOCj{OM&&Wf9swEH!5;vcqh<8I7E7%pIN<cY)!nUschX<zc(e35hv`5k`SMFk
zr9fIny~bRI$vH}Iizj;f(k09&K80t(tA;Rz=VHWVD{;SlpC?+6;Lc$w*}Pn>fZ{fK
zy{6;*<m^1=9oFL766|{tg|WNO#{1)p`>X7hw`Z&8nds@^@zF)c-nj0SJG7FFr;Jfl
zT&wE?g;E2aM{n6s#s@X<z+iL}_jbQ;5cKJ(OB;Kw2qc@1bbjIb&u@;Y)Nd1rP<CFs
zupE4t!q0s(;@H^{l<(o)yS!rO4Yt682ON|2bG`XFyx|Q?qqhrKuoH`pdi)v02b)t}
z{K23ScY{-VEP;+sihg%!6K^T0F!t969H0Hp;5wQbAm%L^zoXtL)Pj+4*=$7M-~IUN
zGd*n{+QTQYJMxxXsa8~{`+;G>NTh*n2PY^{QN!H#E?YQ%X*yWKmRc(MJo8CahqWBi
zp*j#_mxJFcv}qm-%6`S$;CpEhu+B>)p|sCoccJ#W;x^J5e$vsr01>?%)cPgU`R+e2
zJd8h7?+@xe`#Zd1fZo>2DX*3PMxS>Txt^sg?H8wXj!iIu+w#DQqXHw4G)wvex+yEK
zZocJW^HhY_tD6KP(>f1)`^IQCH}Sq89{;=9!KIz0fl5M;Nr&?uYsZAqzO;z(%hhWY
zKhA5EZuQN8cxM~Un;Zo1*pZ7D#5c$kWRQ2#oxfvzjOSX>)dsr8HFatdGdssGJwKs~
zDq*Z525eJiw7IA1%rKWLuCwHX`SnQpP&eRjc;08kw^qa3iQT89*``c=GSx#QVb5m-
z;2|rM6W${{?W_^|@*wBZzQ^pRFS$YIqRdi|SXBsKy_MQvB)4rLwf%L@2Da@KuU0j(
zUP(T-rsU>Qwj#lmHFZ5q6U6=kV)R8Z*Co-?$&jZ%^5@0-XmGtT)8CsT<UI$j{1~Z7
z7^V!);1JdS;*%wn+_oJ0S%<W3FK)N5#F=|9xOkvMQX1jw1Y#)?-P*F$S=;<14rjr3
zgG9I-HJg>fLbVY@n;-6wfo?1!gP~ZRmX#ZamCv>0#%5?&*+v}>{<|w#z*Lo3uIkUa
z@KRZJQ7qCp(uCpI=wirj-|QxA2vL-Z7*!G}u1xMcjS4<T!Pa}5235Oi)k&A;s5;?x
zd1D6Eriuvs7FBJ<=!7t5HuIs94?*uC4MnQ7k_U_fg2cSPOV16c^r#qfBi+9J(9kJA
zWYBfinZz@%U7h=BNbEf)yw*L%oJ~fKuBa6mB6Lep^YGye`8M8#9sA{ZOKpP1#XT%E
zPWxV=is4FL*>c{r{<!6GNW1&dW@pK|vBQFVOiz%~yhRX1WPWD)Ev}flJbst&jyqSG
zhUYe^4hHon)3a&dct(bk+wyRc&X|RB>_}WvH8!qoXuc7T1X(IWvk-c>xt|iPRP-L9
zVPN3zA+>}DzSk+1tCaWkXI4WAGfdCEiMfN+2-5*nKM;jV7_PgE7#)_~IsZl|35@Nf
zfJ)@{8e*jo8tOsoXCk@kj)$95zJ#P{CI=Vru;=FkJJaY{%uzNvwr#rR%EyU|>0=Ml
zH3&gJ_UsLd6vy_%oS{;PaLpF*xu;siC`S4NWIEplW8%Y$aP7EKhOBJ4OfGRIbsFfW
z-C9NuJzKXx+PF6&R3ngB(rpRkpg!tSF$h~JG0fNb4=^8M*nIx%N^^WA$HoM`Y7sRL
z@P)@;+|Us!>}ev|u%mCP`1u~<XWnHcM(ava3Lb^n5knNeK1r*08J?;c4A_Ely1>uq
zh3(07w=$M9&xc~?^fp@SLY5Xre@0IbDGl};m~oAs*@=i4#Vi=+whe@R4PHZvT?sFY
z`S`}UCtiIv54VPVj*W9vrDG$8-5E~J<5L>Ui8Xv1r^U4}WK^DOoC9p`g2KTx1;-dG
zg$_p5yRe$ptJAH!W6kfuw((-ERrR5qi@7H}m^<+pKZ(HQVwUr9aK(<Ux?vC7Jj<0Z
z`(uXWn};}!$<rS(Zt|S!@XsapHSX#RS(a}o0&Y-8rs3aJ9zKEvjGb|Zi@ZuPml$Z&
z%UuSUK1L}<IR?b<)=MIb<_YL9B@F+ZH|ScJv=OmYPY6%S3E4%7XVX!%osSQ1zvqgo
zJ7g#;4`r})JUDLMr=2rxRmR|zXCjAfi?-vEWBQm3i!K%ul`!&sy-cD|1vu&_ab{^W
zWR-u6Q%LqfESz_oc}JN9OA=Evy<M>gMd`#8hvFhB;1$JxHR!OkAwd<GzHib06r?Ic
zMf-=)(bS%Ul!ATK2tFQ;3PQnN;z|cVY`(f=J3c8_Aw{MXazb=v>!bsFJ`4m_x{a;9
zc*$xiL>dePwnK&%J56AMA&OerQKGr3PW%){ahFHfWI?8?98ljEJ|Pr}vcWWo=8IcS
zVI}IM%WLb6;ut*Q-%3Or6CpU6>4WAptMy>EJoK;{HV2Flt0|8zNTotB3w6V$tVt3Q
z!B&N#GO>zSs990iC}L2LXDAT61nNR^OJ+2lQRE<IM!sbRC>-qhn1};`$scVC-AY2w
z+6pRZgjrngw^8Fadp59J?4omCchM<tlISSuqR^sL#*($J<D=mt1?d%v5=hNBl~3@!
z%ad;f738zhjfPk#imoF^2Zk`>cA?EoxK@{wW4urC>B47=zO9p=Qi##|_U8K5s1_On
zyM^`QnIVCCp910xyV8RwKZ24K5jVD@sX<gJ5;d-y`aq5<8y}6x+0eupKH(UE9>n|w
zW}px0%RE&bg-+GHd&5vHT+#jQlfMiflV8&T171B9axSE&Gsrx6NMGPB-o0@DE7V}8
zb8?+<XM9SRW*T(9iN(azlBX86%l?b_-WJmOMwBQ#wjXbJWO+!tcLJ$ca3sPZ{0J&9
zh4B9ItQb~_eog)P?ru1O+fk@4)rA*td>RF@_k9-Tv2<1<ft0CIC!P6IqOaknC81q<
z!_T*<O7lNM?Q-%ivA=^cBtFJR$-y!)&^xG2hlm${4XPjkLwIhi%4qIWgiBf?%4eJG
zlGvQ**c2H*L8B{_{eKqVZ$<$~0jyux`E{=BCkWFDiO#f>XWfr_s^tT6#wyHy6qBGD
z_5Oj-tgg`@nxm`s)N`<%uhkeH+aVHeZYMWVP_y#opA+vNg;RlD_qp>3u`-qm9FG~Q
z`6L2vX7QXH-khR&zB}k~3?AE3)6+T}eZCEGseyergf&irf6M#@dbl@UuCNUflkDgM
z9_h$*h&=bX-kX^W#7qEM*OZQHbE_S2_HcMpM!Vzll_#e%E0SeWr9g7kY5Ssf82X-_
zrdhws^U0BA?o_?i5C^C!F=dbwNuzuY#m9oOsYD1;l_$-Tu|S=EU-Jd6P*lW|PZIdz
zN}vQb^mLh%>tg7{VCWcSUlh6s#V>dW17Ae&RB^F1^#@*r3;^*|(Q`OBnYkaf-2Yun
zj{>6aa-DZcbTB*4IChUeE`#4uLyQsf#iVqpMhwuckZgb*X3>=Ey-PQ#*I+)4Ti-?6
zg{$>rV2nwgNf4;n)rMX{B?n@+qQsXDuJLe%EQ@aDs+W0Yf|IRn-@8A0^Sn(u(r%i+
zTau67q#iirTO3|3gwi6yA6zo|x_|s}=xhJY5!tLaC%<7=TrM?rY8OF)$<If`aJ+zY
z*Ls#=50O@gK9`c?yXIX%{$xn<Zkj(orA&PssTm{iUU{xN4S-IR=$FAI-<E-&WNd1W
zPo5Y3a#12;s#`&I23?%rJo15?|89A7Ob(Yu2io{+fP2fY{fX)6N3xq7itM$-M3y|>
z{-XBGOlc$)A3M^wZ8VquTvy8x?(PqflQB>|#m)~cG7a+UOx^uSKnpHB9UeQp+{aE2
zvMel>whn$rnkHgaaoQ%FGKRV8e-!til_NMFC%iObK)lX;n-pN#>8PsM-74Gcqy+*{
zL2QjG28e;YLD--*Ur%(DW+^2(w3VX9!yr?rwl)$|QTFTs`%qn3N`=i&=lxhMFP)sU
z4m@c-*3fMnfn;Nh`a&&um^<av#bCMkXL(*{*=WSh;g)ESxQUZaO<qGueML;q*->hY
zMs#fv&9j=G4@8agK)C|ca>!t%Cb5xpFAD=8F!O4%4hP04gp7GMm0h52!$%fDEc%tN
zAM?1!6cnLfH&KAn4%?RPNkUrWszP%_CEMb2Lh(Z;@{?dqd89+*JPYqlAM{Ovs&l9~
zTZ5s&js1}AyL`2Y9mG1VH6<>_B2xqU+RW~%E|dInYow%^Ul!9kvuJT7^LTf@J5c!(
ziY}Kc*b83;Dpev-s>h_J7reZ;8-nKxNK?kb;=UM}o42@@y$(4`HW7hx63)abBL(@R
z<|{0&pz)<8RVm)n`ihAJ1`W~f6XS`5T3$}UmlYc0dfS=K4cU&UIYDA;&=yx1K1lX1
z=tg35KAs&J-)0iO)s|3j^KlU!{+_kcSF6p`rI$R@|MU;krS$_-*=whH4#>EOr9d-t
zS!l|)xpUv=OGpziSiB<Lniy|Mvoz?df^1h=-W0^ov$C}DkZfg>%MZjF$%vPC$oPl{
zjTguZs=79+x$*Emt`Ybyd;$>7)k#-QmG<31SC*vN?5|^F=o9Z=s8XwR%hyv3?k+QY
z$iXz|2P5;jh~@O<v(|*>K_yD5G@jWLnv-g!)>XQH3%mabG5l4p@QcRl{k_%%tBX5P
zlBCRtJM+_eD@>s(<RK*3mPjo)G6^uH91lA9o!nMD??KUM*@oVwY=jAZQ_4*!NkW9o
zlwXlM?Vw-oTrYb34U9c?TGcxgfUwM+^F>O2-~c)0Db~g6!i3Xah!(=IY3F^}2>as>
zMkjsH@yK8GQvKa!X8&9{Z7fc85LV7ZvJX~Wy!);>jik*cZs|2aY1nw>39nNn8~&;H
z*=s}w#JpDEVqzizuFz^_?f3e|Qlx6(&Z<&~CP!x^<!W;|H|{@V41<}^B!i*aysNKU
zoQ>=m_F8Zog{kVC<iM9g>6TbZPMf(y<TIy<wk<cIvgWf{3r5fb);~@1shS_uk`N4I
z755XvdEwrGYC`khnu5<VLFHPdbU)OICAi9YDgrwjI4YJcU>>nXG$aBGx4o$xf*v)K
z%rLJjC89K@Ja*Sr;PC>24_*AIvNK3iptHQfV)Izb{^5K_pepSr-#HAPu;y{v^4uku
zMEe)shSbbUqL*r?yUPDQm^HXF=glAaBJk_-Bd6~6jZ88-FLJqPBfNryimiG94S2B$
zkA>%&LX?||R=QFvp(=KZCIgZ?UoEVo2wJF=eXP*UWmV4xa26Ww_3cf<sdvD79wqRK
zCTsYrwaz2Au!>l*%F=FPj7b+;{I!p|$~KAjA)-jatl#~`DMTU#eQqdBzC>SAZMXK!
zfAj$gSyGHIso81G?rw+v{e$D0dCO~Cn{*%=lAwy8*oAk{e4a@6@){DREFhSoDX2WU
zMTsz0eIy7H&k26VZ6-y{>K$p0b`!U2POM946=gGhfdpGz<-JRW@f16rCn0TdHDx)x
z`NyXbJuAxPxqKgJS8NFEu4oD0H=I+c{_MrIjO*=;<`WTAAYM<5TmErEk~&2A7vjb)
zRE+Q5QW>)~K$K#hPwQ|Dyj?9Ab0IWTDMUf4BE}|Bw)PxTZ}Ch_f^3qSLngltFAGcq
z6heR+fXUckYfK?OsGx9Ap&Orzk)|H}j}Aet7_BIAso}s2a$uUAnL>R#WEZlt$MTM;
zhnVx?+9DLnLb~tlimf9uj9$*S<+Ewz$MCYlr<<38R0|oJE$qiE$k=Pph>yF9BTlQ&
zwohWJ9Jlna5ynqF?S*9<ejo}HLlVMoxCnLgVFMJT*y71DAQ}|Yl|=$IUw&vOS;i+V
zhfteAE$T6j8X)Y9V5?=pQWxHoG#OChei?O$3on!jR;B2rRgL3l404^00LUkRRH>9k
zwPrm~0mP?Q4zrPDY`}K6F%vdbxZg(Xnff<!(PHaC#}$i_-*981KSXNbB<K$|qGmSw
zmw&2+0}I2(=c?3Ur5_$DqJL>h$whQa9}(+DB^&$pJRm&rY*>ftnlZa>vhXM)`AiyU
z9pmU4q$^Uu5h0988GouqF|lR2B(#tLmTjXuk~1}=i=k)jY8WzD1<7RKxiVz;rWbv6
zyGd$?)iPZvkF3=c%3h&6(5tjc)8{lw(<0QUiZqhrV)R&>`&20-MnxJMi2%U$<*(+v
zaoR~A{`5>p@jUjkKOfaiTwKKnDr{sCx<#4UHnF(b7|LI4wLfAA+9KzxF{csbV!=86
zBO{SN3Y%=NxH|Ak>WAZ_lIH@ubICC~SRu}MVw)>f{X<Lz%?6+n4q5f(8=v~Z(g5Xj
zMYw}eTaONdbAa}ltER;d<uD_d*J{k5(I+CDJ^uAeZ)$FNE@#bt=%Hm25=f^WhQvDM
z_e?o-%#*br07y!?<ml~e)zOFE-Un~tOI}0BdY(k7ew$mkZZ%of=udV`zkTaS8`T;P
z*yCyM-+yM&KM#bBQ%>r+!HGU_+^IUcE^12bVe`+zA|Ez?bAkaz(t@QyQ)ConQW);_
zD=c1BZySlKlR9q4TVjuS4KC{;c0ocIh!mk?)RRmFzmsaX9Nku$PXm156vXd$i(_Qb
z*f1m};?Ew2-Z?yhe1Mnz{Twn>z=pKCBB43N=I0BGqGm=vCkw3Tt6_hh9{RUUxR2|U
zMe=J;{29E@uLkj#NWy|LOc`bXXo6y`+`Psm&Mn26$6|NEe#X2(MSEX{&w<t+c?=DZ
z>X)vrq<MoVf!7IU7H`+Gg7JG7b^vfLgKUOVc$XP?+Uz0;bC^n2e5Cl>)>(e{8%6&;
z@z10^EdLsUout_>C+sJ;o>HMeb<M?C{TxE>`ADGg)lk8!ELZpGV&8J;tIPH3d@{3|
zwTA2ZYNS7fe1$yTuJ^J=Lbug|%LX-Qb6mJXhG8h|h5J)0t4~ValsmDVNU3V_s0#0i
zZ!gq86ma^KeiZM;Y6@mm;7x&qP4ueM`~G4g|NNjQ0xW-Ko7tZIlI6T$#o^*tJ;}c`
zdLemyg&$(dF4Yrj*m83T;>;h4JWL4T$rN{Au59AxR74slOiS&E!zOCMW$Lk~b=s{&
zx3nwGin|eBQoB#e>Q!p;-enSjx^|kYf9P%)nWZiU>Coo#s?G6ByXoqyi$MKCWygAj
zzeW%7n3t0d^roefj;n4HD3!5MJ*HXTNwo#ZQ%UtwVQ)`h3sq?Qmf+*X{5f=C@#(x2
zo0X_P`-_$ql|Nky0HZm4eKQ;b`k3Fzig1*mOQX*$i>?J^hZ<op@!<sv90+NU(k{{&
z1-e9pL>tN_*N3rHd09TUL0w=DP40Z<hFdwO_2nU387U$5<m&Ik<}wjWto(|DdDhE~
zoA;y|X#&emYUKDv(_;{jL9<D|%5bd8C+~8sC=m%hrUd*dOm#dMI)xW=-Uh=c(Uwc2
zt_3vMkZ4!C(<<Id0PHX&`tDm_+XR{?n^Q!s7g3_ho7l3&MO(@Q&LEb4IZlwXod3yM
zCNo&oWi{C)Gl?gTmMlS9MNQv<p&DsQ%(m!OfcD--Y`5Xp@=wu1-M5=d8{kZg53dOL
zyfl2TtlbkLO6w}g`9nTg4;{c@tFMDTD%O~h1X)E_dwb6<sm$H?7q|e!yz@U|d5uHq
zy5E_BLK5cek6y6f`TOL~3LXe)+7MaEmdt*dxO#9qzpt_GnW_14fyc#*+g=?K(S@_S
z)k_}FCShUP{x=HI&VNmk!4MjqdLNjp=t^WonlS2kD<u{LzHL)J2Be5TN3}DJ#bGYO
zxbY`?!I5(SAX$^&9~&FZyvdy^KM<VG7Up($P4{Gh>>5Q)d3aDit@DLeLd4n9E&gOH
z#&2R+b~Yu_H5?lw`mEQcd6I<r^XN}5JQtF5=8|;1o;YC~^>D78`qzK_26Q{5r5pC?
zDtOW5Cf{zB(qQ}Z%AUu$V<5m>X}xzPv=RZ$T=c#1sx+SKuFR2%u_aqP*2g^1%ROd3
z&r9ffa5(NL-8!FH_8u_k!k!(P-nQq|SlW`0jAdPIA2sggPtVg`?Me+UI@;nly+I7e
zU+xhg(&+;t+`u+!zC31C<rK<^S0Q3vFLwVA$v_&p3&0%VDwdNbM0=VK-|9+g!7a>6
zDpxk~*GVr>q1w&M3$0g`98fi|^@P&=Zl^|PCK!kiX8839V=nGgt>%Ya4w)C0@W^e;
z`iYv`pRI=qzEJU?T6;QIP2Z!k{OBZn2f}OM#=~R>8yOef&3e%-KIRQ67%;tl$lOXI
zshVuKo7<!8gWE&)Q4J_a2or&AB$OY(Pyy#lVY1~rJ08re*Qu`FB@ZJa>0E8}@w=mj
z<N=?r|BhlSPBlZuX5P*zbOZ46j~}T=(pJ4ix2G^06#757YUGjXBjRLwZ{?Q9(0z=J
zMmVsym0D$OMY=B+AbC~@)U7USjiWCplbY7Gr<s!lK7GEcN5N%Xc^D1E=`f^aY<8XT
zJdx1i1;$$aE3VJ%mS8t~_iD^qQLF~V^ib!Sm8Lv(TF={v;+^XfHp4`?NGX6zr}7@R
z&F8gS<xZEW93NAUSSzI4qDkD^<N}~E_e)*yu|AN`<ckxrAI+O*mdKrB5-(5)j>kFK
zlEX}vM0fJf6z2(>FJZb@P(%EIj+#lRSu`;u<jM(%Wd+;sYmCwI<&>=QZa0+sg$nAd
zWTa-Skdvxevt$xtP_8mQRO-lS8XNdZ7fxWsiqJnOvt^1_F2u^r?TfM5h|Op!30*$l
zYTaRGX7F(i0(;Au_oA?LmsU;5{|yb7w0D4?-)jAgl#h7-09(oBtXS-UZ|dR0R34nl
zl524HlQ)jPN$|tSuD@E&<11xeClB<Ud(FcuQJ{Em7<!$+-Hl6MMBdb0R{{Dr{ZDAQ
z6#IVOLHnJ4ev~t$Vv-66tIU$fSGW8ZxBQ6XFau<L0W!5|1YP&{YA4T??|@@0U!69s
z<InzL$^=#c%V~2de2^%G`T4_X_m9r(w*fDJ#T6;06hUS29*ddHvOM(IDX>)+2_z}o
zKK<iJVaD-iz4oqWATl1*&8auHiZY>w`f`b2dAbDZHzqO;%-!4=VW4u{)tz=52C661
zcM)wbYK<oa`_c!{E6F?VhK03$&F&)D$&C?&>}g%so@#(g>gmYXowDB^c@^LOINJw|
zl!RiRtMUIMCEC&HT+{R*WjS<qIthdLvsV4^zI69?+hr7H!4jnbwgSxIlLqVsUDlOi
zS+gY}G_>JcT7lS8wa#d}998&*Wg)bkJidHK8O03q47wNDQ9TU?{C2D>8BJ}O*&2je
zdW5%GnsD{C;a6o(ech(#!rK2Ty$(y$HVXzzPRZaB2(gyP1_F&@!2R>W1bTW|XE&?M
zxYUe0Xz2=wD6YIc8SafgEWX_`?tJrPks(X%TQaNG8@~yLd^LW&9_AVkG~a8D{PETG
zQ088X`cjoGSrTNxKb_y5YkAqXnttP7`LD8T$q1$^RQsFrb{NR9r30_XQ7;CVL6EFW
z(SWP9C|O5QM)(3h07^@nzpXb4-SS?4UlVw3*~jscO=sxH9x8Gv;Rt&DIbRA0FIh-}
ztRlu7&QTNzq}$8n0+`)X)*U88&isZ=s6ndTHOx63^Lewt5)O#PV9~xF8Lk(&zmvKj
zAbzg5>l02=3{oxqVy69|JGE@L)u}|VWea+;7CLe{Keguo-CYiC2(@kbm3L1YlW}49
zF53aKTw+J6gw%BGXJZwMR3tRWbbL+L3b?GKsbMfooXqBhkpP}n^FR@%jL={x(KueB
z4b<Ui#T8_+<duh_cNo9x-VFWun##Wq6i|_y%iJg67zC$7oK^pAJ9ve`$<*QMpau)Z
zAF&-}((9^1^}9(O*911ZE9XzU;ZK!(4guc}^a=Ei`R<kF!^SJd5_ai;?U*Q@Urz9%
zD`}tFhVw^w{l51{ExT~@Xd0b(q$|T%(}t1vY1Y#P%D$g~dJ58vr7tC0V(;WOI+CD}
z%B`<4gT9Lqn|TFQ=WUyCWvL-q;?{+~cc*Dqh%neyg6;VvUuk~Lf^oOB3CxtS9RxD`
z13XH~-*lG^qCR!fi}<~2Db1<h&E7G&9Qn+J*)<&T`H=o*7QT^JFdHc$zUdOB5Cgyz
zHx5M@YWS8j{12&4MVLJCCBb_-{1wV=>^H_LHL2M`ggnNq3X_@ED&8`a(aYZ1$!a@d
zT9dC&49qE~<SUjJJ8q^q>G-o|&|!)rjin@CWHP+#)ugX;wS~bWnzZCvjN9tXRfQ|k
z2YQVUoRdvOLPzypFiV&kN{KaMm<17J{Bxp-(9*$b^>*$_f*bYy3a(t^OF2k0olUfF
z7G?s8JqOLN<Rgc6x?7#%H{obQ6zo>jVx}<=YZ6=o!diX0_<>)^ak~V3@!ZC;5|xGl
zu@&v`lm&GqZpU(svwD3P9mh#~YWB+HeKT|POkYB~7Rg7fWh7OPMU!XJ8+HPbZn3V?
zV>A#ykQ$)yN}4HO{MkP<K7h!i(NJ$o#Qe7U5C8^C*B^gx?1)-iVLWEjJa%B#Gg{J9
zc0V^FH2+g*z<HNjXC+Pfp?)N<mg`e1iYjiTqS=x=RnvD*mY{L6DohPL%IfDQa<@Vk
zH}^$AqH1ofd|>ma4jAaZw7uGG-WKDoxu7KEjA??aTaX@2p#Y#=`hrDe`CLStrCJRJ
z-_>-hxUF)WoF%-1)D?3f;7^F}Z+ZPt>gXeXlg0^nc~o?Aa6IsWNPU`BZ*r4@p5ME<
z$Q_3sJMrCyg2L+vmS>Y2&H1f8C@3==;%ZTuiZ-jh&O{ZHZB7#8w~42IsNVjVb1q(4
z4X!*msgH{+0F<K3uk%#sKz7te?}oR1KmX(6ZP|L+O}NQzdg%DzLVrm7l<TVyw44w|
zcH~Ze<}R29amlV~uSDn{x&S18B;5X3$Um1emQ;j*rb*Z!?vIM9)Q>-;b4rZ(OG#<O
zU!Rz!N`FS@nLj)C#W<^^*d)}vNB#Lf8FQispr%OxTXjx79uR^tz;sg{X;(+FJk&0;
z;BCQdIIOAI=pm&*)+ma3ysp%&_<to6&PZhAva<Z34b6yl-h*=C(xzaca<b&tA>AWl
zVcf2b1Y5kMy?V;pqV4k5KvV4H_Ts`go0BizH*uD*DK9YSgl-Oj!GS#N@9>cBh4EIa
zuc$F_XQjI)G{g#_1AHnSBN>w2M^_lxk^PfPlRE6HD(>vDJkpF_14R$SO%CXzFB_3u
zjT7Z#(%1Nqz2SOL`A?tl9$8LsWJHGD>ZUj|9Q?P?*h(3Wg4Bb6D1(;oEu8SvLBa>g
zo&{|-KzJAQO@X#+Zm9ezUrJ{{aOSgu<$CPu&m25ewSD&H<ud0joAf?^=9_E>SDZ$~
z{?}~-gZgt@U3bH<%6@&;+T-z!qkT&MmV$`&3W-nz7?%~6KNPr%rX|1TIopu?z^vC;
zHPJ2Ip}NI+ZkA$Wj{waR-`{R-JslaYC@_1U46D}P2;26_HXj~PY;HTEIAh?AFYrP?
z#uu1byOxVzAGS0k0SGNl*iim3EgAtvoEQ*D`Qk{acYZa6np3$1#2xq&pmZ@Ox)}<0
zj=b{**)r3pmC1n*Ub}?a9i|K-Om1-;8}-U12{p@-QuVz#mgnA3fuU2s8ZivD@EvT6
zy&^tphi7JnBcyihhUNMA`NTfGJvzQ>1Irc*8Dfm)7UY%#`ATvWk#9hvrYj(+{N*_M
zQe`4y^QZ=J-!|8O?TDQb@uN>nOoK}rO!a^_QYjNKP*4c4i}b+{zc|vRKWHt5d}?w&
zcxk&F^db%~M1(7j5K0{TX1`e&x+|23=}fcm=P~X-E11o^ork2F3|PY#dBGH3dFH};
zrczBuR3NV&5s^T$LqP|4GO5F&D~-@E{mAEeQCH3`>e@^qeYB-&!sbuXS@EX{ZwxEN
zWdEMG`kkn0#yV4n3n$mdsW%Te(S3=Z)ikdgCQQ_<P%}E*#ylu5ajjL&_@5e?4-2Nx
zuIjI$ne(6=_neD^vlZj(WUD3kGMdtNz$Kk+OW?}h^(8q&@OY4$0SzB57h|Rve7&aQ
z&k=F+qhU(koT_u{7NU$W!AX`5lnWZpY3v^mdlFQAo%(ju0y67sTMQisR!TLls|@1h
z-v^Tyzl&42U>aaK56!>EYg1)ORO;+=RB$mKhJK43u98DAiING3EfK8M|1?xocbuJl
ztJ^bY)>}6P|82dDoJhV3ajAcc6E!;=Q=Gmvd8i<z3eo{u8=ZOc-olfk5F5A&P}e8n
zO8LE3hk*-Ovt=gv?)8`jtlWWV<?P?J$t>J>PVTzpeoY*9&Zq>)CazUNs2golkmJt3
z@juusQ!u0a4*3fK>F%#9QeE-0fHjg00ioQTWR`>+Tc)I?4w(ukQgi4yC5y&n?+zCV
zB83E6vna)D-wV91yQj@O1o%@ucms<UzN=RLo0MwL!S2r++O}Y*+VxUIwTj<g;xfkH
zKAL?O7Y^^qHQ!{YfzKgclwXi1`VM~I=FhtE;JRs%Taz@FKCtY=!(3Ks^S>`VkE{XK
zS75;xpt81qfve|A4P_Mnp(ruqR&1g`%@$Z>>iL+wm+O@gGFGh}jx*mn6R}>_J+Ge@
z*sRIYasvlJqKdf&RY?GEc?%!j%u%zd3C)v>ulYP71YtNcOOpe3Dx@BkQ<O|WAhkp~
zS*;91J0p3oW-)|Al2epTjw($=jZ`)h_@Cm+hto!B$g=9@GmDIj^9?z#x$iN5ys&fp
zsZKkY&S|B9#{@KEJn%bguVuNOVV_r4w&AA=osuVvV#J=>d>=0(6(FR)$h`$Ca7xrC
z0RHs%?y8ZuPQy#mxX{Jc;_nNu#|FSoNx2|>Qw|M$8}QMQ`KLerv#NytTjM>Q$h)NI
zMS_1iPBbUt<d)<rIteGa2hfAe<q|lCr3~n%N~v%u;ZXV+GFoqs=_gb)hHh!g$XAN<
zSZcu(Pf4dPS<A)KB>jXkhz8o4H416y{V&P&r6T#dd%xn5RPAl1n(j;Nh#T}hBL=mK
ztMg9WI$Iw#&+<jpTjGU|T1*R1^xBM4y3Qz~ZN<HV;(-3S*AG<iwVC62q(t(7?jqC3
z|CB(A$K7VDh}p0XRDsZOxe-Ieo*7mG`qh(WJQ@vzv!{DT&!@tD&V+Fk<O)^1c`LjZ
zyuuR>K27HL>kX1K?#!}L;f;c(JAjZPAE6GP<_g>3048QVtn`kr;V8ADBR&M=YtAy6
zIaHlbBuOZf`XPr=3kYrN978}&{`kdq3hj>iSTVt8Lh5s#`ho{z8h%vY-gW`{QW^f$
z@pn7E5ZUscgUK1dW#VYK^r-_t8JWfSll2m%-yjDP&(cNfJ1*hL-YkDVbbJR;{*y6c
z+>%u`&buw|+~n)Zb-xhv#7b{tYZg)pw$$?2n|5fXJti2|iuXEIsTJFVj`7i!EI$1{
z>2)KLu3RcCnlqZ*fQeTGQ=2)(n62kW%;6O!US#I^Btcd;U-2)*#2HpVl%*rbl|?Cl
zUs)0YAulpfknC$n1lAh|ZlRYR?bP7Rd0#^$QVX0^NK&cV6>yZCc)m!ses0*r|AdNz
zxP9t^@yyhGc&c~URu}LB+Ccj9bS7yr@enpf{fkROsijhx$!#7uo`~e*!;7!13Hn>K
zAJQl1zV2Utu4eHxYFbPYQJ{(wkq(X9eLS<HE*{ElIz)-bMf*-c6+;xUAZ_k`xSK5X
zc81fdq%<e^x+>wHZ9eB=$#36=@6@R0`LMB}_$HVI$dB??befI^KvJ6_Y7XKO@Y&Vq
zhSOf2Uq|!*vjEQcGX2x3`Wi#dz^BH1&%#sXM`+1N2Fr!qikkO6If&QsZZTB8pM?qK
zs@?)wluV8+wr7X!r!w88pQ#QPXb%?sbqYm6Z}q`_1T1Yk|ECR&BuiS0VliD1*7TL4
zG&FU5ac6!XEUj^EDzQza^$yn=b^H^30=1=+yWY}EvdH84X^$`(S;qJlF?`K#68@zd
z$m?7Yh_~5+$0VJE8k^JjI02(zEo9akxcY)98~M}LclGa|b@WD0p4P@ZKW1V+(S5XR
zigFPqGX49Vh(ppX?z8n_TStJt1ti4uI|bm)_l0D?T;ftGjaN#;{%7m{JK)k7sQ&@A
z5fwz0pGWN65?Q5hbg?>RXv)KxRbR<FnQ$ppnf8vQhYY>me0O92gY@g{avn)n_8;q&
zmc|Q`QZgGkNv)D>^J!kS-=QUF6nF0K0#7Fz)bn8?lGGD@OV-VFmb8kh3-mPxD=+dY
z#WpU%>MdtB!aA5~=I;IW+qnfm$mFiky@!1&+}=`gg542x7d~hxr;Vr3SG867I0W1$
z6;NaB;v_f;)Z8I`0uQajBDzpi#JriLQ&oDvP4PZnjx9s_L>M+1C6a8rzGZQAEg*<^
zm<de1N~2RzsvVhDtind(Vl0(zwd?!623oH#n<C+aMNTsZi?7KG1l)2*GBn+EBLj-;
z3Plqq?v=fp1v0BqdlijPl-??k3vuso`ni*-TG(eiBO7lFNZxr@@I^{vW=7Ie4ZgjP
zg*nYIpe}Nw&iR7<$XJm|jj7J2I9e}gt>8#B`JA*7DVya-V`l13ukX~t{y%aD2dD5j
z>reh}wPF08{#9>y+}skD0^VzUuE}5Psp3vrr~lOM!q5D2&-itLecjJe==~nq*;__0
zhrRoL%oq`CWk<j5*18fw!ILt5G8H<Y^{xN#i7j4;2JukD^CzPQWN`Vg$j17gy&Q-z
zL=}Dz@TksO5o#{}W<39oR|zF6DIF~x7(dPuTo|+Y=Wz1g$Y-VX?##}(G$--Dolxm|
za629opN&i1aQH+5PS#|*K_pZ$AUpNLut69A$xSOJ%2gD|WSZ$q_u4ofv>e_w=BYE<
z6Q&7D0#*0W3NK411Y$<QM!Y{wp5MMz*R(IA6YY-3{c>jUsohpeXe+zBXnQE<^j}&f
zEeiFDI`j$MuC+R%6y0Ss`)Ygn&!6$nYkgz>zmih?wy^T*Sfjy*Nb@i+3J!uU*wB5x
z7Xsf=e$VV1UqK6c`RJubwr`y~Yy<w|{_$eEJiv+ywwHVnAbY1oXD>tV@KTmK>_OzG
zJ{bskM9Bg9y|Ts}qd*AZ1i;n*Y#a07i|sn#x8uv@#|@c($XAPr9YVRHWbujAPFJ{>
z64iLB4nCaed~T>e?G~zf_RdV$=;%{>yMCXh4y%*{y|HWjPN&MuAN>yeZ2a2nR2Kn#
zzOFKTSLD;y@}?Ft{HXl2E~)DQ^u`&zrma}5wqCE<Tpq{-#-|Fvo;@A+0ze<rCnJde
zZO~7BWIiH0>eGAjI5gs;)eQ>V)6?~s4OP)_Xr~v)`<FHZIEyGfL2-+1ZLBlSGa>33
z%e}A%beuKse@Q)AlA1qi9a76nca39!?=r9{yqc8)c+@QZtY5BxX%V`<OVZNjQ%vH?
z>^#@2&mZ*=UFY;}`mn)6dHv0?$v3Mp%r0-#pG^$3yLk92PP~puKE4|JWJB3r;I-UU
zJCL#vQSHg0rG}!Uhfi}HSlmNopqO5rF+g1j02vsE_V=N8!G6iSpO=tV6tu}g06gAY
z2;9_zD6!4T%1{;e=bag$6+On)C#{byyKgIL)n?W#s2LHM_mlHl*KCg`u0ou2p<OFn
z1lAMPEp**e7Nmf72l%hQ-tL-q!B#t^w2kei&=%F-0rZz3cb(fT{2gMZ%}E^pKa@TM
z^}k9c#}Ss-v9s$lP$(X*TKnbZ<<AlR3g#ey$AkammV8m9z0zSQF)^!uzf`0?z_(v=
z5?c%Id;fpby=PEVUDqv&j{+(JDj7tSC?FtNGLmy{auAT5W0O%3l$>*t4BZ6DnFayL
znFh&{Lz8pnEZ%#+s`t6S?ypnlbd{y<>fT}PwdNdij4}6~6ofp8+NR>kv8E{d3rP1*
zy@1W0D*GQc+mchoLdI1&znNf5rKumesdHV={JubZez6>gK-DrNY`K8Xb1is3@aseW
zC}Zv}gbzm~Z6i3I3P>mMl)baV1Ao{@38n{9PqSIA9%o_4`fKNl*da%pbjbW!P_4rz
z9ZjvxM$ct9|7gpJ^@?@C2^PB7gH<=iLOQVjRL|<KvS8Rt=iD#nN&ze7(+DG-B(o$S
z=FGIn7Nemp9W&y$$wy67e@><ZUtZ0Sqnq?{i;-dK>7FBrN&O$ksnbh%NI_0`UdMeX
zR&`qYc9N-|?gzsVf;x}K^H$u>G2i`&*qV3ChR~UdyxTljjGBg|sR$KM$c6Bt|0S{i
z+g4tw<pyevE^GyRX;?~JC`MXb*KB2bex+sg9j)TI+hv+&O2UqD$j$oXn><1OTI<8c
z@v)9-b@m{8;HwO3&BNo4$^NI?er4V9@yZBPrk9JwcyQpO4eQd5ll^7J*2<T`nP8RN
zAMOn)RKE2Qvj~AiJ1dLlE<ZUEzn?Fr`kH?i-JS0!;eKMjmNDD@_rAc)@xpcL^)LYl
z%y{8AjHkE9hPD??#j;VR7cYokz&#BHa?0OS$s|MF68TvXFz?<-2dY=R2|rBWWZ9w-
zO|ue|Z=?IySiU9lat;FXxQw&lmt2RSuZH`HT_)wkL{~1ieAPx491f=jJA)I$$(#i)
zmZk$2e{PZmyUU<WhM&nx^?36+E#C29|A{a5eH$k6{L2Hv(tDC{0;`yyn+CpT(ImFl
ze|NkDG-|?z#A4lECD8?vq<P>p`GV-D4TSK<)kCPE^F|p*lKt`b)9N<gTCAtLW#8rz
zA?LF9NHN69qeKc@npzd?Iie%bko9e{ZnX8n#K3V<VDV>}_8tE3zigl;F<al42IlI>
zhqU`gK`4fb>6Uh^3QeN#5Z;h@wYTyNv_GoM9b7dZDT+&Ds3y)BrID9zw=EAl{neX3
zsNb~VrDSIXMpzFxMn$JEW#p%`LVAhx<g8PvhWB)2TOjrUJXq@?M#6<Ky8p;Gc*#Hz
z6ByL>jW%N=fLV@5A|s9VnS#U7yu!g&!oWN4--Bhh@7vCtD$u^>QC4oBWT`Q9nL4$v
z;+<DkNF=2D@6IV)&e3WUc72}3)FI*H@`q;QHOVvjU^3zZ+klA5m4Z49|AogbvqXf#
z$~32q!yRc4l%GF`d?^mcfBsyK_rLJDEs3`38n&Q$M~Lxp>+EfqKl2kVa!??dGxUH;
zGaC5R<@*xwvyE~eL`QLGR}c<jU<S1y^Fu=iIxXfFJ4QZH$2?Qj@T(n9L%djw8hk;u
zD!UwHv{?0#n(EWxynDlZ<)d<*o!cW7n2Nt>#H&wrN9&qe6r^51zR8~+FGm3Gm$!jX
za(cvLV43y#A>F&WCm`n}lF1*<4u6=TSUVA#iYZ;&s(hXpihmZF+u9ENgP9H$>$u)f
zm%S<9CbDduhz_e3q|Mq6;?E#C#Z*GVc?(|+E0pznz9RK6SS7=YVpBi7DE@^?lWz$_
zmFuFWHTS~w#R0+cQtG4grh~IKiI3NFpfuMCMbXWHjQcwyqoew7NQdC^`p;+SL6p?!
zV;BzoHA_|A>o#D*L4)j9H>z09BgI4NTBRr>jliH$4ayCBT9LiVJHvkR4Y-mVpdo@B
zd&1m@30M5L8Eg06ANu$9rS9(op^ep-Cy`?5Ok;r6$2y+wcEvqU@e=KOU%UD2tgt!%
zKaq5{ezgNL*Lm`__2eA8Pj|J_FjGi;Z80SC(Lp8!;xW}HDLQs{iV<S9O6${io`Rp7
z#2cYp;NBj`k^SUM`g5Eo4~zpQ-d&R>y_ZA4t^l|jiH4W2qi9zZ_W-@$3;G>sxiW;!
z^bUZV)juEV;wAO}mY%Qge=1J}RjB?^LFK59yQqFLwSx;_5ebS9Xe-7r+@7^&Gm|ii
z>%k~9azYtjeUwU%-ln3-w9eSf>OP@oueHu_sg7uW1z8n;4Us&kl|cl{(DmXdw#sSP
z(7J>n^X;mP#1}G18&t+jYs#I}|0BrMUoex)PB7_ck4R#3v5eQm_vXAuI+PVL)|oN@
z3t?%=Mej3QYF2`%S%BSvgp9-|>4VY>4{jIJtbi6?fJsi8Y_Lwf51vAA&V2wH;sa3<
zkbnYqB%cQDa2=N;PGuyjb=qaRbpf<vH82vlA$pb^Ud*F4P%+#Zb=w>P(rtKd_t%Q)
zfi8B{_cRYx2XM$*_mM#iHQ&`Zydf4f!9a6VhT%V%o9N$DJ<cDlCtUwC(Z_D^z8knr
z2b*hbTGz)b4zaH}><))&JLK)(0<Q9Dawwa<9k+INpffPW6~3h{{jxE7ICD+JZD_+a
zT!sh=gS!4Bm1m3sb=+MjzNxWm8@BymH9X?-Bj9(xEhza$n)9QWO8+P+-6pZ5FUOy5
zf101J{%FG%6`b?zd6F0DxcEp${=Bp~o6N`e?cgj7=XY)MOd1lxpiJV)PR?3~pWrLC
zr^c9d*NP|q*dOv$KT8jHSo;PtrsY#uBt}S7_@nnzOf&nLDfV_hM{9FE#46-jwwK3o
zcUD)SwoBu;)eV1j*KSt*)bv2_!Hy^s!6o2J06Gd~7Qjx?1<Jo63Vu<$VWR^W%&_p3
z6!%FpoQkF6>n-;~+JWok$9KLyuzY*JKyA$ibuefyt7^1rH%=42<A<fpoRxfi6dGV}
z`!jQ#0R(ptHKz?`JAox3$3~H=WJknkOMrr}rI#p69K<blC~M0;ONI&93yF`TUp@f+
zo<crY_gS_VfOPXkjzM<NW*b1x6w%%3j$(?Lu&UNO#y`Pd@@7?wgBE+xYXP4jE!fzA
zHw@Tj+-QF@?ap?CG}YsD>z;nS`$y)s3Dkw>82Sf7rxnRvkF|i+d_V!rf<4#?lj!fT
zf99nU0rUU$cMjEq4zGQ`H`W8TWDAqT;R=l46{@l^Nkq*KUna3WVC-x^M>$VD43|u7
zdio}1Zgz`nIf(Mr^SLZ1hZ(Z?=6oQyXKuVN5#)=Sd|zTq2C7bwAKK?EJJyGcE!dvp
z<^XFFwI974mRLqH?g^`lr65Jqz_<}@O2Dek%dA5OT><r?{yhFi0}aE#79nTP9}3rr
zZJplz1n^u|v)hfQ40WdX_sb5ouO-;7e#WmId88y&7Wc)zIth`}@)NWnO*#RUhfDoX
zvBUhu5s)T_lQ<u;eo>Q?L*Lk{eg=96pU|=X5hvGe!Wp>!ln8o~z$08hfnwGWw<njX
z#t|?816*MA!(h}vizYF&lu9ULp_@3fTS}ioF(YPwX|(;y=(_g7u((tZi^SPCQEI9U
zFL!6I4@*B%T7G%F!)(7#FZc33_I+kA(bsu{{Y(0<xauxnJox?VOp>bB^95*65;JX2
zkpAk1ktQ9IKlsJ>jhH=uG~JOqH*XRTYV8+`WD){D$E1M>8X<pRf}@cSzyP)Hi}Ya7
z$3jV6?tcAz0bkkRMVfM&foR9tlG`QugH9?M?~(`2QBTP)lOKgjm&O_2P!lR<;)<IB
zj=l)gqH@gl&3v2#%CbkT>kUFvx3_*iPY+$BcpP{9I%Y!i>2d$02@O|D*C5U3NfT;b
zstbirwBhjSaQMW)pJ9@>@)Ds6QT(Lf&gGS(1NpL5KTmOBQSVjrWODx}cCF+Z_wVP?
zwe>c{vlyXR^!iO?<b4MEm1|kJJjCv%!GPKC6`|&ZMufFUX<jj{b7gVCx~U(4+a@tm
z>$&wcKTFrgIdw=4Un2oKrc>Bi@PoDB7x;AGKo-++rUD}vdl9w}36_%KyBl_EO>Bq2
z0~Vy#6463skV~aI+c~m<V0Pw*i{AOG)}!Ox>G%)m1bU<(Vb45==Rq!)mP$uL=uJgH
zPqFd-{j(36gaHElc=?7c;^vMU^&#gS1-_tu@=EYKW5(FC)!oa)#_=<L_79a|>MYk=
zdDE;zqp4AG3P(HpzZ5vnQ$h@N66eJ!>JR=ra3cB#M8nwQ*Je?;=ifv%ljFUlq)es0
z%6Pw7mHj(g>mm3bjr5N1%q-Ctzso<ix^L%)n5gC6FpL$73DaxP4jXjrhup@)Rb_?Z
zzUuHprhmI{JE<v1&_|1Oyw-SEZB4PSRIPZ-TXm!=UE85r?wtecI?<xXUlEEwGDxw7
zpa?UxA9c$rtEnIAN}(79b{^k(XM!Kfc0zu`^6Vy8UDiF3In|_LN+Hc1*y@y43!h#3
zk~mgb(BT>k{$j7B54jXSXbonni^Nn#mD8qYn9T3mEYy{z4<-P249-=n>+=PU*0Oh<
z2#@MdRQ5+3G?d8Z`RQLrg*?w&L5R}@dV1Cf!=u4=sX&zno!R_{0WmHcCXU44`whso
znAz~ME#N6bVh`q(zUy*9A=khbc}G)Z56X=?IN>qG`RU>WW+YS7E&n;p`;dOQ$zyc$
z0GL|SAhM1mhQnY|@_M@r9|Qws@n;nvU+KH^DgeXNXYe?hK%KB@CvSdQ2Ia~E&dwFG
zqAPo6C+ISDOg&pg2l1O5<V^N_ZxAvui^cm#Gl)u?K$GEJTgTV@?9`jqxM1(c(qDQb
z!dYFt;)B-ACT}mNrNl>ot~GPfdPmU@T&+JA_@?82ahslXxN1sTQ(Jo!qWr{FVA^0l
zqGqu5$bv$qIC|asg(DATg+ut&hG5`JGSTm5-{m@aE;>dF#$<4OKN9T=`wh8$1(7we
z$%DU1fwF>?0|UEa?Fu-rTLY&-9F<6{`<riUK!rKiL=KR@9D{#kADf5sV^H9$iT$uh
z30Xt<d`T<aHCrRY>{@Y@<L8z&r~LJ|m+Kw0xq1D|q;<GW>E_be#6bB*^GlU|j&yy@
zn}v6Jn8|l9aQAS20{TsPiNKFB5_#5)cN#OSnI$PBms=WY)~Kc?r~8~KELVs!ypq#E
zLrYV?h&iRmyn$;LCmi$=$)zQ(v_qLQRTv*CcD_IQqNh270bH#M77pyEe|%H#ee6VW
zIj)pBygct?1;_=ITo2|WrF4f$$9|}NbS3)(?4{i%PJj4{KdAx=v2PSA$w%ZP*k|M0
zh*_l`Fl_O6k|iz6VMuhMzu)~}f5>>rJXAYYn}GZ>MakmMoDSFy5mnac1&#!YmrHXI
z6hM)DuJt|gd~8ketzO0L89zhuS@Uk3L0H9F4Q9|~4FA3&%SZdo?*kpu;vLw_V(&Z7
zGqCT!b9JWIUO&%xvI3$wx=2uVTaOc#vi4Y!zH^;5Z%AvN@v81e<VEc3B?(b;ei0DH
z|K=Q>di7~Y9XU8_CJ8RJO<GXJ3@joj=it9Hk{0(cU7bKngV;!qb8L&bW^|6tKB+Vv
z8*l)DqGJD}N~k>t=`W;-f%;(k5FXyq%Z*p>p63|0gvsPnbC7g!<F`-mQcE%`3Q9|;
z0>fF<`%%LMFvw-zuRYRg0My|SJ9K6F67_U0j5(HpMmq%~OgSun{);cQm_1uhAQfe1
z18@xj|4ER2@VFi}u#HoD1<@F#Pk-*V>B8#*tZlffY`WL;7g(d^y}e@_?pat?ZFRjL
zNH6q=tvy8WlvRc~cq@nrPzR;IfwPzP8)#JtYt5noA*%r&oMsSc{_~O2^~}fn$0J07
z`r@qP(#xLXtLK-orLAhGlgotR#Iee4TcCy+*|0rJ)}HLe9j+rTvE@_EPf*eBBpey_
zxJ&~rGGeAiM{mVe96{^I0vXZInxOW=F1fb|L4}U?0?i#k%rC?5zLdQiD53FNT<N4m
z+tYhA;!=RF0}l{;6EIv%$5m7LyP6|uPfwrH9Ycbua@*pSUMx%iV0xRONO|VSm8(bA
z+v+0ob(L9lZzSCKMcO{c?1geTNXcn6^nIHu1`KLv*}7<3mV9UUpyM>f_Uh3ov+?fF
zr|IEwr<t@=h4!Rz3PG)}^9Wp^lMh2Nu)Mm~N1i2q2c2cl=B2*>mS+Z_AhYnzVS>LK
zrfy{KYIYjaMPzG9+nniYJ7{*fL|xt+=K2!#u7A4m?3=$kC2Sz)gVhKy?mm5ig_rzr
z6#9*L;pgQ?#@79Zg_^<Dv%mrJw%yC9a`Q~Y<If6<KlMM-FUZyXun?G{OV6}j-ID|X
zRZsW4W0mFG-U%O#S62_PPDl5ybmg!Uzo>7-?KgNdGPEm}3wcibtov}IHqmi>neFLm
z2!aUoP3mGzWL5O`9Ch=INpJ$vQpp06$S?7Wo$*p0KO+L%IJSM=LeNveyC3ltxG?_M
zH@Mw8xM;cGpw=E%X#qERu6MzNf<3<susLL^fDRQf976b6m-bd#6o5ZUq|ja!H8z|&
z<%Aq(CbE2Kn(gU^9K8Ow9soL`Muwk|#=y3Gyu|$^rOAUHibGCIdY?XqJ;m!e))U!_
zgsGM*8puS^6S)*}k;n$2^}_Rht<3u{23lt<B05|?T>^CvcT%v!Hw2}ta~Ub`XE~W?
z9p_$HsQDVAsiqzh#_&Y_{ns&Zr4n~#8tKX2w6{#^_&0@PT5+nJ|8a0=3^S}VPUglk
zp=#qN5<hGFshn}q$TKN##^z|!SEMXsGt!i!EZ3cGrhR#_9>ZCs_*JFd`_W0G3EoDc
zFlB6(MM}bwfq-P5#4n^1_#1`8GQdn$L3Cf&%MBlN;}t4LOPg4bIv++y%=AUvUhOAe
zSj|of+cU_pC70;e{qs9Qp8ZT17uZdI)R@;D{CQ90!>X;SV^)JbzasK{DeZQNHqck#
zOT}mpuvm*3D-lIL^lp<)p&m8!=D_A9@i4N~%5V*QnNbUHJgcW*S1Z&OvmHBQPwh#X
zcrP#qcQ$*0Hy0*X*RpDIUM;g^XhKLPNGC(3{NyA?sHrTj+7?%5+k<#wWxAMke{YBd
zs?IlrM&chRYxMwS&dJ2k|7}VDs1IUJF|8_s0K;_S$s5%7`~6vojb;iH|4H4Nl=vuM
zih;0va3&;}F+XMy{#WyBap@)?Rhid%*+k-j8<_;nsM(@?@`X%*-;x23f3Eb5FonCL
zpKiFHl^fuKbOpEqU#4^!glv0~kqB}5w`MM_-=@%#$g^K9Kk$aS?o~txq6>eb9q8L|
z&r?7qs2m<p8K>Ut&;S>0GrEx^=t2YWKdFHjEx@nje*bbgWu5cZ`jh5N5h2UzS>aDy
zf!d|3cTFNkb7?aN>D!<UXwX|v&Vt+B5;S~&pp5-B^~q?O(X-pMe7%@=;M(nbm$j}+
zGq|k@x4K2s%iXz4J387A<t0emO&<e;EHLYKHhaW(Ifnx9pD3ij#iXy1EtyYTTN45r
zEFXW~H%X}o0ajPTi=!9Cd}Qtm2<Av>lka_<(&9byZES_PmnfroGzWud*@)0Mo0^BO
zA#T1nik%Nj*+`%kMNdfmgU_)TBm5XZg%#eS`E_+0Jd+@Pj!HQ60bC8<{;<UIu5Eih
z?iF@Q>W|MYwQh>?bf8ro2gIR!W;INTS%=s`Ims)--)FsXuCiaplCFrv!Yy=xQqO#5
zG4obJUv*g+yoxS4)bJ;Y*xmBEMuh)*qZ?umH^6*mi;_edFJ1rD#RFAha*vCh^^ZF$
zk-%x#1c~U*?cCzB-#O!$t*JctRl_{eToV+8=TuN7)99_xNT!#1zF=b1{9p?GK=HC!
z!som&8?<l%32UYa=L$<K1sK*Rt;Fn*Y%VgX4RUOvGl-*W65@!T#}Mztrr%dky^rs|
zLWhEY9g-YRs^b9wW4sky6iJ%78lywIeWin5RIeNFE8xqZe^K6VpeJ}XH0@&EpX_xp
zV@>#LRQW}k`io*hzZhjup-vmvbdFke3cV#4_(>>cx>&hwLwz<ha?QJ{2t@0}ZRp<2
z!~kAe$kK)jV21H<sk?L79(1<dWvEP*r&_Q0a)CQZ0&f+A3a`@?V8eD(V~{cddGzA4
z{A|(R?tS~*TtASjBA?`%uR|SHCYC-YIy$!%+gx4YDXy*TV+X7^HDSNjBKGFuC6X*w
zjaK+R_(;X!UWW*N1@iN{D0V1CMjU@eIMxp(P-!Y##1@P__DT@tcv7!~*2?Ojz+U(S
zbhCrgX-Aq|-cB~`?lA;6hb^7*Y@kbt>^232|9K-5$B@Zg=qIHtEbhIpT=Y5kVU|(m
z8}VoO&vG70vG^Sg@jXh5oV&b~{43mLLI3nScoyJ3zXR0O^kge(a&mHh5*fyB$bH%?
zM+QqgSr(Ku!z6$$=VCRK_T(GgLr;4GDbp5T-ddpc_y5rSh(5UP8RNu11HrY#g}(@z
z@ST>_$%56&NYUe-#{DQrSu<26vxKNmL<GFyeXmfGK5+2H8IG-|5s)v_b9*|<aINW}
zw~rg`ALAdacC5Z&DahNrSY#x!w6eVV#!Qhe&ZnqALE$}%nWEVW<7%czT%&xer9<YU
zgST7EbQ+SQtg@ks>dsx;yPEY}&J{KR7!n0iF1yY)UD-e2sk5na+izL9w8Xu!lBSf*
zg=-&c9L5iK7yQJsSfLZ6>nRr2CaXWzlai04ERpEV_qyjE*Ek#aIG*vxuekE*KqIx)
zpvA`s$GOTabutEBqz>kZo~pBb>SM@}$`_UN;79UU3{MdFg=`T73B%?}M|w7I3|MjX
zW>QZ4zjmR98I*e1jmcokCe_$=%TV<ITAHebnAsYk-Ompp7RtX($z(!hqaA-@-$O&w
z#EzGhmX6ELKDuyr{U0wtc62nG!xAo<V^Vf@w#t^<V+k1<7;|w`W^^%D_vF$E+`4bh
zv3iZRG{E!M#y|XT^M>^-b{_Bjq)Ts27slc<dfbN*O<c4U)4@T46&xWmvXD!}BN(sl
z=*338b~dB`Yrm}Q;5DBh&H`VY?%$xJdrpLc>kUicBZN~GZCr38S}Z5`8JE5yvyXWt
z>LXJPJs($V|4bS9SH+E2mn~IPHOv&PMs@Rk(zH=*Q~7<(`RT09m9zYsT15KM@JLXc
zYZV23F*XgY=`|@QGrvB!Lg4y_21S&AjIsnBrk)U~(c@R;onH(TU^4I#nNY<jPeX3<
ztK+ZRVLOfvx5rO<ZPER8c^pME?>*bRkar45jZl+OfrW-k1f)JvRq=|JK{8Ql*lCEP
zcQSCi6EPvhpD59~Nh)cZeZCa!@^OEgZWZEHAIs~D)CEUopyklF)n^VyoI9gQno081
zlg7nHQf3eTI4cn2Y2agEcq8Gk@QC5iT$x<QTfY_hU})C+{<4B(d<G;t%0(^LgolQP
zI$uD#W%9!UQMr#(S1LQ%eHX{s^C!I_7ldllxTFk=GTK9iUZ4DQv1;FNQA?Bv?l9<<
zedZ7GV0imZB;nfslk+>6Tbc-O9rHU$R00GC2gfzTpP!!}pWH@Jm~*AXZBU1Mksa_u
z!{2)?Ovnwq^`q4mbAN55KcMa2#G?cYqS9&gbqI=PV}yL0{z|11IdM97{i&xVMbW#F
z-Jap&1oBBKvWehHBFU;>88dlpi7ck=#OahW>Yf|XjvH?>b=u`xv{w(|P!vH;#t9VF
zO&yI-NNiF6dh4&blB3E=`cryovl@N2YjPh}nFS&{p^nuZ;hy$C)aNWbCY*>~%n{qI
zZ+f-fGZmMg`nG=7TuW6?M^e+!<#i1sl_wPUKk-~~e_DBg??bP`e4d8yI(dLPGHP2?
z%lCxb4e_E(C1r^iJkUVgozQW#5W8j&k${6y7-)cA=h;C2*EG^w^JA=~Ytaw5<N@RH
z>R$Fyb_YIqtO||-4r~fm#Q(Ui(4N39ZO-dMR07qpxvv3DI~^kzzrMr5zN5W^Qah5E
zMvRW(X4MMUfAAY>*pxHwY0?iotNYZ_4$t-(luN%K5FHMUvz+9{`MwrW#DT+yQoPHp
ze9Qv$Le)g%vKHHx2uM;2EVp~$!qSSP?raB+Imw~0{GU$GWE7;-twqXb8g<of3Zv^i
z-gF%$#e%3b)1>QS)PG({&i-Z=m-e}FOl)dmQLthhhX51DkyouH6i%6)t-Q}FEfcJ$
zlAD)H;C_6vMnREOu({pCxMfN~;lV7&dCkCxjD)rM=AakRwNt}BZBv3f{x%ogmUCT0
zZ-G0)%t$x-`BID;T$Ug}ukQj?knNYXvbbaI@lR6h$yn<Fwrmfl?^KL<Ze>ezCnoY;
zTE;IHu|gjfmO3|H)K>qiwDwvtf;S7V2Y=b}Iy%if^P$&{z&U{Y$(72@o4dj34E#+m
zNckc2UKDJmu~L^ml}5V5lCW=2H2gcGG8-@7o0XD78)y5XClX8B8k6}lk61}c4a+@n
z9wYGSC$1DW^h@1qYWL2jZPqQPP!3kEus3%HI){FypEbE9J2+-!fl@$6*G#Igc}O9-
z5Un~QXUGDBAaB!t7A1=$>;qyGEPZ9LY!<Vhn>e#E9B5ZQH@2<G96B_FjWxzEGF4?-
za8D0)NC})9X_Gz1ewbj@eDJt|I4NF3%<s9;b4ZnqJHeYBhsz-QgzT~9m5axM<ax_E
zY8`<cI@Y4$wm5lor=(9*M2@zNo#5CIxB6I-fq?lUXziwRX>tiR#9CWBYQi=GQzb@K
zE!W*5VD3pMmH<UbvQHe1zq7f;6qNZjtul=z(ZEpPFBXZ7sAeQvWoB|3qZz6yTlqto
zqbro{n0<uY=1oS$#y5u7U!Hkbf5aXo=DjkCeSAv)iU>D9)TZEj0}hiwTKsL8CK9FG
zal@s?XiWAP@jPujFnZMB`?53Hq7QeZvguClhz}aS_14DHlQ}_gro6qqqu7L+h|u3f
zGZyzh&qPH>!+s7u6_?aPMCL^FlE28nB<oyj{k`x0)4}U=Q3Y6#m9JY~415qCcfk3l
z{F~F$NS9Rq&sz&G9(*F-#uU~!RirTE)Wkvi@6YGPmc(g-|K5Uz_E(?k|MRWLwP$ZJ
z|MjJ=!-w(r|Fvb={Xs8CWdHR!;P+ekum6I7y1#67{MVMx{1G2{{<TFoUGnFPe{Fd+
z_`mUVSTy`rU}`0>)A?IXSs$HZ2qU-Ucwfd?g_!{l56`NEi{n@iLCVp}QIhGzxyu&J
z#i|BwF&fXKZ<{F+P-VOA8b)$m-(OkU#H)ZBw@t`5YkpDs?~&vGzT^2*w^-YS!)EFf
zW>EU&>iTrE6ruixlT%z219#%K>3r_GL?NBad`PKSr$KL}2hz0-9u@RoAK{Yv-3Uk2
z<%}>%7)F@ahIkquR3iEl2kG&RCk3i7Ke^C)^5F5q_fP~J{l9*OhSt>vj-48z_`0LB
zGZ*VSKpewsszS=$(Yg4~9os5r`upYmF`5eUlQ~qIz0jRcw&?p)gmfC9yBxVmmrF+C
zVqdNLry!dX&>teAqMX)e!u=Vi@R?ZwWRoOjZVq+I2umVDjG4J)6WNd*9TQUlkx<xJ
zo{;zP(SzhjIiSzh=B@PlPK@M+#3d(N%Ba?<5FGCci9z7%F>rW;LOO2=`r+DoORKl(
z;nf9-2c}X7qqbN*J&cQtEI1)g&XZNGG-nN?5c<IBWyQe8rXqWL1_>c#>MFbb=f5xW
zGiHakFE;9n|K;+|PUb{sbFooJa7z5QKn&F0f`4#ms2n_T_ydJvG6N!9uhMD)=lW>$
zMO|H;#V^T>jk3;kxdgMI=eZm|ZVxZ4`WcEf>*S&<4VUJ7GK3J86EI^L4RGEBOxkiO
zHP%Xwj*iv6U5{A6gP5YI42I(v6F7Za-|E%7eQ5g@Hu87vThd7ETV)y5ygntQWwUmf
zW0KFsxn$fMeHA=fuad<M*~EV6&DCVR1C><t(X<^Fr^{w1$w=rW;?#NRx65_iA}$Xv
zuSM721<R2fi|}o-|GrK%{x>_9F)OQm=j!_CjmUBnt19bBZ6f9e=BGQpm6pfB&Wb5k
z<3+h%-c}pErGldeE3!1wj2cX%HS>MQmM@~myNKJw5f2X!^YxJXBQ^-bHqzsbS%a_?
z4o(5@;{AT%pV(yMt5PKK`1C4bEI8iuZ3mAD80X_k3hG@@#r-MV=D*taW#r|NMoWVi
z>uueeBe@BLw-+&#l$5bBwd;dk{_Qiflz|K(M(KLD*Gjuh+|m&O7hmI<ZUscO_@K5L
z$D5pE`KM^bS`9swvuWzL$NBMZ&&8uF9hT-VHhYsiVA4)Dv-RDpg8#a`Ep5~~it(ta
z-2C{Pn*;_3%t%|kP=&yoeF@WLdt`KrtE{Xn`JF>!I>n66;o6|Gnp!L`bf<6^k&?f5
z@q{DSYOiZ4I_DTQ(G8}%t*xz$l+;j(-ZZ4p$OKG+lo9<p4;s;@I>IgPX#$?wVWfgI
z{;jX1EywmO^qM@xB_m$;M6tcy->1*9o%Jv~(?IC^J8x`G_^L@{D_f11#KPh5nVFg8
z#l@^+vhkkoZe=8VB9>aO*-Ki8B{d(e!2*|Afq85enp#d(22gjmQDx}4u$fI)%jY2!
z)A{qheid_f_cY@X`q!OyQ!+tyJA&P-z}0Oy&qp^ruEUh0bGkDWCaSD7s!X>T;M4lG
zPYc`+&8+6GCK=R=YUfB#n=x>_K77Na82fO0eb7u&dE7a|X<Eag^y9OUu`#uDAw9k6
zXwm#n^}E>%#*vYMLB^yvesmCPEoppBjAZqNkdGQmgvaYPN3c+iM`TOqnCBUbuY&OM
z68k&hpA)FT2<nwKALNm8+cIEcVxnWt4<X?RG~M_Q6A2zY3d%#Ms;b6CM^k4nG$WFT
z{&ht=b=K&;;^N|#TPPM(MYn<FLH;O>^hAjs^3Q~Ux|-Ujz@zl^^RcXR_Imr*!j~tz
ztV{@x<6uJO)O=jQGqE_h+9<fH;O`F;sGIhGzoDU}G3jD_|Nf8ZHJ7b!{%iklaEI)C
zd~!URjT1&qniVOM$!E_<UP~tn`6|>8F2#osu}DShzqp7_=CUc=Fi;qt_r1;i^M@Ex
zya_LDPIXrVPp$axkGps^1(hq~$DOGvxcdDSYI;FIec)G~fR~2HfOtCUC@Cq)X*I4A
z?R+dVg*SS#Ba8KtQN8gi4uzokg+{rU^j*LR3VOtaBE)yr`-Xc7myXFt<~XQ=ImSB+
zS98h=-TH&@jZjflg*3W#JFoEZ@WMb8mr+o_`pc-C^>uO4sLH5AWi)1IbG+D&{Wdm5
zvCYZJsR7FO@1%?S#acjXC%&LS3Y$!D$h5w_{Q=Y2h9ou#zpj(%ZI1Wl=^H_2eI)D>
zrq(^e>$>&*X0lE`y3*&`;NTDiQ)Y>PAQ_O(8wWIy(p5OEe6q#$1*bM*?h3BDTWz?+
z8}^b@J(|PngnMIrMU6zu<@|t#NvByX?W&&M_vVV%-aaFkkSUL=cp4?Khh3~wqaE$M
z9*NjQda5mTDh}OTH$Y0P(K&6eD*LZkbRWi2hrK+mzdHk`wSoHl%YP#ZT-b|8@x7tq
zA%yD}$5scZKjPRg-Q{p_6dpgW&&nVgK(ZkEG#nkvsp;wIrArYv<rvr=%3-8jQ3(k(
zwlfb$z&y5W_2Y3(s4?mF2z$XQ0cx(PS_i#)7aoX&YhNO(yhf?M@}(;|q{jAsN4uC6
zs#-po6GcWt-7XtVc*Can^5sj*;jFOD39BFeH<z5}6+y}G4TF)5+%^|F5SW^3MIO^w
zohp<`_x*e<-G9#(w5tT-M(^OfRacsSZAPn22(8om_YFha;rzc3CjIY3ZJjeEXlToX
zxQdGI?w4KW9Luhd&zN^i$S)C5d~yO4P5^FO+P(|obn#B%qP?oI$N48RVYu^NS1&-)
z>+_#Ox5z2}gN!|=o&xxJQ_<MyjZa9Jm6MY*Q}TGP#opQZ4rce?d;kA`Kc$A~dl@Di
zq{Q#hpwcoj<){g|N(wYws*Crpz&k3?KF|E(c_^$eL4o;-r6NBf+xI?OIn?Xba3Gq~
z7Vqs$e*M2^MWogLVPM*kTGO`misoWohhkYw9c{0Ll{5^jKghh#wf~J~xrETbjre`c
zCs83GR<;`0Zg1S&+%^MRsgBx;0<_EBa+|M=@}_D~Z?cD5WAhYCZ?v18ZJ5VL%Jl^<
zEp~82;#drBJoVMfvO16;`vX`#dsuE;2&o8Hf2+e{Fs~iGvwQOoZpFb0qh&|=G2yMd
z=lQZL!57SQ0pqXVv~I4@Id(fcHYc;~Y&Fo)?7#7_`;G^jpdi(9?iDCW1iw0Ce6dEt
zfWVH0z{|qhM8Tx@5D*(g4t;csZas|~W#Zp@EA}>K)K)*(K_o~tW(oNK*TWpI@6A6K
zhY^V5?)Jis5iW}vwY%Lkc|^?YS_=MbZ1So!n)Il$MKagG|7i*RcCJ4wOQk<N!xQ4z
zKzfFYnuR04*_X2A_L^u;6j?A9YgX$=jQJj=$LiH6cr)pr<!_FaKot)#%QwGxmCrbN
zV_42kZP)2xqeW5+OqfOL6Z4DY52lXwO&VBT3h9g$8bg~-dQ$Q@nwzWcj*Nt9(W$!o
z9<_e*_L>kwk4&fqc=dqJpg?ar{6NTA7;)V!_4+k8$5qELDUa8Y03$ctW+Zhe@}pk8
z^9O0^ARZ-l6e+hQ%v4^7fpvc_!KC|o#^A3ZAwGVN#i)?{=`Nf^H7+snM}?UpBR?g7
z4g4YhkfT+oJqwdTy}Gx@G50mp$jFabuf8BM@~>_Y0a{CRJd?JW=IY`i>~~o5++lf!
z1yX%CEaT0f*LkJ&x!qK~OSa{BL3UwAzfz$Ju0f0L;7ji+qsa^B-v5j|2&gOTe}BLr
zu%viok+Kek{|69K6;GGs4Ca$%WE95Bj3phjVQ7&Srw96JG*E-J`?&DpX)c-Qbgy!U
zKo{%`>mrck$oXq`(__gA$a6yy{vjYBcexwl9@ZL0G&J1$6PpZV^>)hf<XVheuZXA!
zvPp+!r8mJKD(YFCCg0!I@%#z2I0h|kyQb@8910%i&V!rHQP0ogMS8h0`Qd9u*fu&9
zwsGS{IxYr1FrAt?freLQ6aUY+5fEe|CQ7Aiioo=Cw6`BiFz_vjja}A-k?h%bVHrQr
z0SJq8$G3FVl@kq(ki%+9MQ9+UaCv!psagU%BRVBzT7YSyw^v8>Tj<!F_w8o(qun<f
zrsoJIt(*-5uY4kmh@pnvh=zQZT8g{j61o+=1T_<E6KU0RJ9JN4C5*HxHZk!P9i17Z
zSf!ui<fK?#l}_;mL|0eWR-FWG>vt3HD-^SSBhY`GEYHM@nY0^QDrY7q#g9>(L-EBa
zauYN>+eaHQ9xhv5p3&Tq<fmZCgBf|T@NHMEPKHz9WF7A@Ha4<olD*PGb*i*CR3iK0
zl%j~MnD5P9qKDq3Hec>wonKOnS(S#Xrf`wVonJLOmo=ZSVo9r@#>vN;bnN2ZD2sq+
znIrwsosLg05Y*Dw7XqaUKC{OiM~a+B;1vMd+r_@n-LY8u7<>W(dTCHhjkVkpMZzFt
z?jWN4+0VXMO<{3f?W0$novySkO&7R?*)LE6K&S+O{cyN%^;}5AqZZL$AK!H$Ij@aV
zeJ{N;eZZfb%5LO@zH~}^D#wCTngCQH`}dPL>MF}g^|b4HxZD0BKoBJXA%x~jc`ng8
zN%Q?0`$ja>(qP3;NXGoOS{vBbF0*c0y*=``_^AR@v+%w=jz~W0zMN_{4gmv^juH@N
z(y4~rc%9=vwb!p$?URDWJac<W945hOH6^1{V>7UKty{mPLGV^h^ZbzLU4xD5)R!tQ
zttM@30U`SW2DO5mp`S|E#}hKwH=RbHa)zt-^Cp9H?LRxgx}y~UYHQ-yL_gj@8Z>#F
zKspBoXG*61CShuYFc8xUe*OA&wA8p;WrCtry{7Oj%EUPF{m>CiFmZF=v(mehu!-$L
z9-DmJAfZ&3tzl3>LE)fSU)8r*%fj`#6EB~Emsi`+@U`V!Q5>yeQV#j8by>Y4)F(by
zCSH9>LXn<>LoLMTTH0znnPqL~+Qr#f4Y7t%2uh3Pg`G@1x(KV)qEeTW84_ugC`xfo
z^A;s!2}BVb1fajt=44jLGwuvnoRIH5Y;VJymo|G}Lou?!>MAHTl~c91kDNUC@(lv&
zYcN45iZzeFDWnM+YNw9}rfVFo7BBCtmc-;Mn6GY;@Oqw9QYT%cD}vXd>hT_{O_r|^
zJhfLa@Z!;08_3{X8HJgUxu8a510EBM=gJZtAF?=AIZcFLHfIPcbZrr5dK@Qv`21CZ
z6e&qZMMY^h*v1huYe(Mbnyt*t<ZJi}OlMX!-<T$+Q=DZrHa1p5=WXRv1hs~_eUTn!
zIxY^b$bCFXPS1gw#}E0T4KKL|>j)Ut)jxg80nwq*fRH7!2KoU!?@Cr%s|m9}arfTl
zWT)crurkSSj>%b~5_GgzW-s2?D!QP?H2fuBPL%lCMHFgRSsQCZ=|F}f9XfS~6ewx!
z?>lHC48v9jGKynk@vH16l-mNsM-nFjQGH3Oj!sUaeRf3Vw_j$H*^ZZ<m~h)3RqE=^
z9$goaY}iT#1O}L&r0y>3GzEewsiLA{9Zs{&(>dvctuvJWBe40MiVKQM$w<V{b^AtA
zXdum^e#3gZ-hNEh_*f2JomU=zT_?tF*8kJqCaKARbt2)j%fi9}xY&Hs<|?^fOJqTI
zzYf>tFot4*L>Mox*K#DNYSjQM#H4){L*477Fn%G}-ONL0<*u0=Qc;6&GoB$P7f9y9
zv7KJk3VR_a;eFwvEGAYfnEoE}?3rP`{eIR|jkkJqrAPnc{xt4hwHh{)9?SNhtamI=
ziEdNTu9=Uw9q!Z5)^!@En|;UPyUn-p9VjoILrjnwW*d%&E691f`;qd#C09$$UV@*Q
zz%o;x7rYOcC1pK?k9_oz)V1UaNJlo)+({!^Dc^QR;fSlN`i*ZCh>6cW{#EY17~YrH
z2{5J1=s+BjLXdgrX=&BLUdD<hEhhL@2d0a)t06Va0{_`#orf0Ut@aNl9q#1KkAs{~
zBK1zUIE!ZMkB19mI*(hw*)hI-D`wXysE>|C7)|Z6{x@H+3DbPPR0y>Vol}$A!}dOF
z{Z!ZBxt?IKYBiXy7oDS_Po4=Ts;rFFJ7WW~d;w4B#_Z|ujg~Lo9@odWg_aNl)uf%B
z9e}gs=e-UCRtHjY0~NW30Z}85>I^*>a@iac^}X6p5lmr|PJfwx;Wokn_AeE!Ei|f7
z+H?}{x;>RC9WytPRFQu?=NY4hxG_H6H2!Drsb+<194Y@nEv@_+;2o>uY7!Ldk3mH}
zKI6_#BYo(5@j(@FCKf%`ILS_WeW1B5^iz^T{sqgeDCSYmI=5P`<CO89P|{WAb38my
z%olP04jW!*JDL4!Ii2V4;q0q`VA0FL74(pNo!Lrydm>iX(6IJb|Ni9KlB$xvzCN$>
z*~dT^z{y-3!0D$dpc?T9)#EsCtGZQkWvmt@Gw5l#Bx3UAhUQTd1-nl7ku`&#o!w72
zCpF;eEEA~|%@vwHYYGC+7e|leFP85I1bo{>vM#BCDNbD|5+HLiUwexG@>w2Bp5k}_
z);-c8-|zk2F#Y1d)YMdY#1&`0{_MrU!NGXtMvTkmkwe32VTA#=9&UXJbe<x=>GB5I
zOJxAb4pf{hilJ`eKj3uns)nl<X~I~VujK9qdGEU05eiN4_xBg{x>bdg=tAcEQ%hJ7
z=~*y{_c0hAx#<XEE^QYpp)3|eau&TR9qdz(3hCu$+imQFzqTx4ZsK6}CnG*8)URag
zdjKkQ_NcRbp5r(~aRtP>2s$|kAdW|KQ4`Rg@uiwD0LH)uagLL!8ab49wR!O{3!-G!
z)79c&4eu`IUfa!J!Zd1Hy(hU}<(rs>D%Cra$Y0r)1GW{w912uv6(bUECWQTxgJafp
ze4syid37ffXPa;1a?${mAK-L+W{i#8ty_~v8N57C=B+#(&Fa89LWT~mY%XRg(#k`=
z{A2OKvu2<U)YQpb*Q&*ro>d;lTlpnvo^Sa1)$BsasOXu_7Q-Bj@yW<i4Cft<3~C9{
zKBqeDFQStRImi`jSF$oOYF8!#?3cE%(Mls5JMtBmmhm;~hYX*SD4%PaOkU__2>=1q
z(%{ihg-&aOmP4P3sHJD?kD@CoDps%dnkLH`)eCYWhdu(*jJ2&^KIL{i)DH0uJ?js9
ze5FfxOi_joxVxMSZG&pfy5imf#<06gO*-Z)x7&F9#lq8SA^_m10zh?0Mb8m)OZ47e
z&2IUuwbv%1WLv5M@Prh@N<qw=nVkhU)SVo}>6>pSaMQ5LSM@N6mk9^&`j1<mQCH|7
z&*bK%Z5h|vC%c!>!H&sk1Mp@nh5H2bx|$i@g3^4@ZKczaCV3aY!;F60RaD<M>NuY5
zE3I<fwhSZY;&r0n`h2;mKMQYI8EEdBa%nC;_Xig~hS)uvsxV7vzPfOVW7d*T<WJv6
zCbV3;GQQgB=4+0yDE%1ru4%t3-QAH~((Qk|0Os5p8dX+@MXOh5O*eBtB_y)_=g5SV
z!^0IWKK`0cuK8GfH(Oo`TqGAu!sBf?E>_CG%KHHld;#EAHp9y7P(ht!d9r3!CAeKB
zo+qT^0-mm$YXOJU(hCcQ7mgQl=NIE+<HadzSz;C)zkiz_Zwe8Rk%1Qh;&e|>OO}<f
z1_uR=FSOlQ4*hi?Z#G`^LRE)7ZhZO!k1ia%vw@s1>tvg+&~>{$&m=rN{K9LKuHKnm
zDO#;&fC{FQpH5w<l=;gNSsvzd<&amX-x)!noH2J_4aDv=Az$?-&(qP>ezK!&sDVs$
z_3odngOwh*cSHD8&F;MCvGP5)mg{$?o_fuW(&QQ2MZ<ukl935^-JQ(cHT5Y(O_b8}
z^Xp26lSfgL3wTJa*$UcNbPDM>?;HKtI9Bdde4&~$POesAYLmwAqMNUnF&35mZFzm&
zJUFLDGH5XuOk{W!N}ZmIOC5YSO5>hg1^4pjnb<-04C<uxz2umpD*wbp;tHE`)lS>T
zSXiTyc%6)_tjgf_N2b72K=}P|xbx8Vd}FPSFr(hJch0+^YJDPuM*42yvz=Q3c|&v>
zY7K}cpWu*?iA#!RKs0LFOqJ^c=rTO2$XSzYHp_eLa&x6MiZ|I8^!@wLSLxkk+tfym
zMS_Ntjpaf-5I?G^y8-Zrl<JEPx~>;(^HpmWtG4<Dj5TU8_TO$`GBwvB=oDV4M(hk0
z+Gl3n<?&M?H`zx)kASqWop6POox@z<u6g`2@o#clu-2*oO3cm6+g$F(laXFIj_uOX
z=J1uMvO*#O0M6&5AbP8**`HiJ0-{6Z@~L=q4#0gImv*a#qMkz6?@v!yrV_52rO3ES
z;;0Fj)zknPpbQFg{AbTfUd~>a|A$ChBa<E(NSlUKTWeMM<fWZZ{Bfc<#qT0XBB63V
zK$U#``anMMsDzS=s&XlV>0tjvxuM$U!hL~Xyi-iJ+{ZSaS`rge{?;;>{#~YPu?I}A
zAv~ute}ltrTxQ;jTMuN11nTX{23hbrvCQ9L>Ek_+USy#$Hw`uQdQ-|8R5~~`I2Ilf
z5*;1we6;==U~JU-uqa{Y2~Qb|E*6^bz`5tO0qM!&8-h1V!T|YLPBvC$WoK79O;kH?
zl;}5PP2AeWGV4F#Xe#+B9x@IC^n{N=@`>6mz$t|hbPB4ygvH42(v(%E#O$G;Pb*eD
zJXTfJKE?K5O!CE7x`sD&Ox5Ks#DsyOmIT|^B9d8GDn$bqr#bWVx1w4Sn+X9qxy@ny
zUe~bbod($9^id%!q^|ja_2H?|D}-4COn36&V4t2kd-%f*sFXK1VXgjw-L0)3nvqs-
zUcc6-Q+Ua413gWR0htNeyh~{1q)>e^sI!wA0$zk}C~K`-B$#m$1lZ)N+m@G{mS?e+
z$Rf{*U8^iVLG)t;^mno!hVhaS$7XI>(oNsJ8H!U7r<kDgMDL(!c7s<RzPYA3pM6K<
z`ErUE78Xv`+f<l(a~lBu^mN7PpSN{x`+ftMsmK^buJLlAgf4Je5nOH}w_7u&9*b21
zheIGZ2?D^tJllA)XMY+Q0sU}YWtw}kJI^S6a5`W5b5E(_czv!oBK*bvga&(_OtkBD
zgD8+5R8MUOb3J2%i|YhmHSB2p)cyGJ^Tw_Yx8m&Vh|fl&VH<Ci)wD9!D$8)X0H4d>
zzk)WC<;vg$2@gX;LSn$()+c5Iup&V{;DCTedO%?ykAoiccL?*)Z)Y{jB{@dt1QRg!
zetfq+v@oq`Rp+=;o;TxFS_dQ>zzStY)ASYqR$kuX2}ZVxN!Mm4+ACZsAa5C1sjruE
zGO9IdJ`%Wg#&X%7QKe|QEtClN_y8Dv)0(?ugFhJ9#IR@@S-4l-LG*}ESqgaym)#J1
z@s!0tUq%)5)|UK0=m)^2I@_XOW}dnqV$`nnlP&VlGj9Jd>gZw6t^FSVwwe9uz^m-x
z#GU<ZB4!NJnKNc+Ufr`7Z|S#*3ZvBka}I=F-dTB+ac9JzC-HE-hGv|ZtK)DQA{M=O
z^4e1siZ!&9iu3z2QqsH*2eqVvhL;o81U(wjtsjS?_-x&Dn_R_55f^<&^HIuC9v6kH
zFtxH^Fd`)Y3-`7zoV0~#lxk%zu!N65fkOD@zGu~L%ggJ_U4;~r`?w)q=Lc4MKMbep
ztiHMK%%t1ufk8HTM_jqvqCZ;x;|J<ary*ceQ%E=&@S%B6y?t?~uRVGMyf;~~GO=%R
zC9qQxM~I(D1flTxbJ*A=3Y40&K=Ehcft?B#@@45%wY$1WPwZ&fk_FxZfG#RiUae`0
zdyl}H8OiO*iBo=U)BLgh=P)VP5sfM-SQz3V_zAJD0|MTwYW0Vg<twsV^BXUw{!@Id
zS<luh18zlWG+)Q^JOcq2KOCPbcgY42b~IO3K|x(kE|mA&MI&isMGc5E5MbMz#Z3cM
zY7PMWmPfs%s9zmu#Xk?~ivh>vzIs@xCFI!|JwD)2qsdn@(}O~7kla_YO~bU&BU&A6
zp3$4&>+E>;Y(dxHAJ_L@XFpU_qE}Elsvy3rgBdI$;=i(sFaS~`Of$0_sIi;tWmFp%
z04AqyZCp~LoD@!09n2aA!NTqB2>Fud0C<q{U%y1<y$zB^OyXiwi`pcw<ToN-@}(AD
z-J3Buz0gk+I7PSar+ClTP+&f6bm7@Xs(Kp(u=x^QcwwMjf6)$aq;a*)e3oF-1<+;w
zxjQbuz@f$TNq_XnqRCd$Hw9^FF7zI06=%81YU|k?@IAOslcdY~-o5RaI(dx}{Q;%s
zyJdmTQV3+s<aio7I@I4*Z_D|Tm?s$ih1-9UQTNMH>FB*$DFp)V2Z<O@wt(+|zgW9!
z)8g!>^5(qV&p>R7AA9zPimDsK*%25*Lb_yJMWZ{j4VC7@iWf#xHLeq#AK&F%`pTjb
zSZ?)vOEi;h^+ZG(XIId=?(ki#5F&w+@)uya+zy*I4qdjVAb=6QE!0MCni^2hNb5Bm
zjeYhJtpsJ=_UvhC{MAhetuLFvs7r0bJg>_|Z6FS+R3a?7AkfYRh+iV!9;Xw%#`={P
zVhn$MupT{9*VIe|F)<r4UL;jB0A}j_3+!P;!!2u5Nk?+3IVJ`PJ~8nRMOxoPLp>3{
zb1VzlqA;gWi6ox@Cs}ZNkym%<G1rlR>B>YuZ_{vB5a{%|I%~`3^G}C3e9C{$jj|(}
zQ%{-}@fPnY&$~>uHkhH>P)#mpp<b+CLM4f_5kyB?Xd0&N0YCPf^8FYw=bfRk^2&~w
z-#igq|MB)I$>9EYiNKD&S)oB)ob3wCM7!!@&>2;$(AvhpZv4PMsUouQd}cVj9Ph0w
zJk9%R12d0qbH>q1*RYl(G@bl^GF?!3(6|s^4II+T1xz9Nl;Xjbv-4JLIfuu^xj_^@
zc_5mYPayb!$3gpebCN~0UdNbUXDx@_OcDH~8Z2M6K#j6HMjQ!KpV*>k?j6${A+&O-
zkDKVtHt74g<1qvQ^fWh<UY-nxL15j=Nq7iN3ClfCu}(2m-{dIZo@4{Ch>)$K7D9cE
zUMtalekJg`jIQ0GfnYkHv=lr!@g84I-RfUb(AvK2E3QCNki|CJv6H%O;_dzLc)Ej>
zu3p2nJ?8t}a6yfU>9ZG%**0#IGFCGvEO4VK3Mo;enPt?hV8<13?~w#VPwwV~ryBOA
zP~MK7C#tiq;%IsoYr9Bmb#O`8)x<83JLHakTkHt2ngma&AN~sE@VQC>n|@kOD0rG|
z7PH)>MNrvHRmQn){V7ruycT9ue+!Z73X_X-2TUXYP07qVG=-nK*+AJ|18MdW2WWY-
zC$9J4=xFTx&`kao?2Ec4MX~+<-n?p-8$Do&LZ)gCWou^IsEQ4~hsk=Dw{QEPPCm7$
zhNW1nmDnV+xkTTYA3&VwkBwyb)?ix?{5ge6ts;51%z7~0`s0;eh*FtRN2SpUn>X9J
zsQ3E?8v+2(sx0$-J1`=r0r^wuFv`nmaa9S*t~gsgP%w{Wdee!EC;1-BxlVtn<8t4*
zBB`r=k2;78xx<El6$VwY3Mf5Ct{u4=?s)yjD~x%U0kUyD$Rb-+xT#)lj*MjZg^oOw
z+w-*0<9HgO%}yEy(?)9C`?6-U>U%O{0fqu55jK@)LL(D9!k9g;R##4-)>aevn1G=u
zC}!@?M_>sejw2M&G!M)XoK|BhMk-l^O!_~dbKa^Uge*f;#}ujnHnLTfw)hvAhD}*c
zW>pbhUHNYS<6S*6aC5G4AZkRPUKL=dG#;m(5;nl9yBtpuxVw2IPq_>K<%wg__)u~c
zje}d*7y4`<oiAGk<ae<0=;fR0v14OnbA<T@OitcI1-FrJU%srFo<v${s1;kfkk|<_
z9dFgKlML*FI3feBVBv%~Rz8nR$GiMh1=PkOK<+Dp%i%aXUwHiF$xz{FCwq<s;L(9h
zj4G}%7^Ud-83nw3Pv<n9Ua~ePsz7=v@4{i{ZQNUBZ2-`%%lbg7XJlqp2T3S$iTrSW
zPG8W&u<KzQ14IIp);w(Sm4K=<iv^s1dyd$s`#X9b={o=fWX*n*NcWYO&jnjKf(0a$
zlS6=*rm8jz9djA-$o@t<5BVZM-5!&YlCpu!j{h@yDm@Mo30OQQM??+||BJV;jEk!6
zyB$(GrMnviWav(5M7kNeOG3IkMY>Tyx<jP9yIZ<Jy3fY@e%|LjAJ3OF!w2BU40~Vu
zAM3x?y7pLb9U|i}n*)v`XU*c<6&CWh!T@Y5QoX+t=;U=xKwN8gJUN+8alQUKjsiTh
zZj*}yKvQzTkv29o6j|b|G9Plrp0n!8c;Hy&1<PODY(!m*jvVEO2pNAOU07b$eNhm8
zOww`g^qyS&NzUQ*?9v}js~?I5v$84xjYF;ZXH0S;K@=K**fT9qKud3~5BnWwYOHn&
z%(QB!Bkl4T=y!i+dev0}oW-ZBL(TUe?Clq#@^@aLPWH$j07TDwI5=GuK;XE%m>hl)
zJ<4=Hn-o>T!s*TeHh}4ZQDK?_>b;&Q^2^<)bU@3!m{!jM^m-ty*z#7D+{7EMjsPZ)
z^Pos7MlkiNyMTum3TkZ~6T?j*B<AMe)=x~e$k+l79==d6rRsCOsy0Ad3{7z@A+34U
ziO~U7+;Vh97wISFH$ZDC0<J1xaQdp>YfErfy0&J(X*nlO!sk2=s7g3kgg{?L`yp{|
z=6p5*2Q<jyjcVNqo5{NrG|TY^g5mVXT7O#|^?R^4VB(l*JU2TT4S_c97;PPzri$S&
zLSM})0T|ZZ{aU6M3Y662;(e)Bvksl2$uCR_hQ*^coiv@g2iF%tVdI%ggh~Aw$ky;e
zpVjt-X0w8;<HZcf{ljc3j^&-RZ1d&zy;kKu`d21xg&3ikv3)Q=7EXq3NXeDU*CsXJ
zf6R4zA4PB(49sA8z^tU!kM+G~t$@sW+h;>E7Hp$et|xHENW=4<%ipfhDk<|1<653w
zYZhw&+mV0kMs-H5O|R*#TJeuy#T9RUS77v(L?NRJh)m`4$v1vmsGL{ee6)ZQ;TPZ5
z*#S`CFPs+}8(Vl(lrk_QO_r{<Kn91w7xgbxVWmUmi}V6qQF>s4W>RCRZYo(#e8_##
zVM9ahNw_N%0dL<A;27>Kdp-ham$twawc*Vn3Dra8As4U~qR&LvnNK=rA;1oo(mI>W
z=`5xsK+iB6p%D?8eQC7KHyzTA+)cYcQv&oJg%`)jn;6ofwKXEHgYge1EgZ_g<Om?M
zuT$Su6o)f}784ZhPf-PK#j$}zP_>#V9Z*tGI7FU>2E|sR-JMKE5s5JBm-z#<OUC>=
z5w0?zx@7UX?B))tv;NSWR0FE$#1>N$^>?^XRF5+g62af)tKRyBp11s$IwyV$RVI1!
zX_bbCId|SOv!C5Jty004+K=a>;Fny}tWI=vaT#~zXifY^OeDKdwUJf2KiSl};^P_*
zOu}U^FauC3c=(#k0XoA*4^O7Py#4-~1PB|h-NX6Gy@9?kuk|~uidDb~wZHH^33$P$
z-LZDQ#FLll6ku<PRSFcfhC9_(T_b9F=seCFz6d;a-}+XEhljslCx8SgnfMM2JsYMe
zcaeY%N41?o?49XUn%2!AKd^{}ULHb=M9_UWFNpI+f?eeBIo%l$dbfGIPROy3dbHT8
z4Uhy00eJx*;+>9P-3z-|FV|^4W)eA{pUCgcn3#|*01h#`*2^3qUQ53gC;qTs?<i7g
ziFY|(Fa<yU*7up&P3pDWJY`#`_lY4CoEHZ=-59_??Cg3&*KNvFEM2eq(Bz2_K0HMH
zIqfTNYjgU1-TVwdc#9aO<pzrk%bB8LG?ItS!`~&71&WpnQ;HWoL?^q$Tr1<X2ea=y
zX1EBsjvwW|@_kyM4hjnT8{DU-Q(@S>7ySifj9{>2e2wE4`+N9L2Ma1B3$AL?eW>#H
zzbDfMp&rzMHcN8pWt&YXIIi&`_qn+xt3B6>0)%<{yX+R1qaxFh)EvMB_(M9*2q3nT
z0PRbnJer_Dz4zCT1CiOwjir>&ki*5jKbiFg(J!_rKbT;8?#<vAf{S2PVRBBr$HL$l
z&slJ-1h^Hc+R4Mo6%+0b5NMH-0e9CV%!;F)FEbUu#b>Qgle7hp0}NGpD~}c+$EyRB
zHG_VO=TGO`_!kum5Tz^}nhxt=oNWGhwrMsCc$dIm_=wm=dTF1XooUs3*8*~a%@0CN
z$D2M1ud7??7o+FKil=%A8rhhCmd{w<I)vF)1+XgEEVj^0n#?yT0%`I^v0apq&AP_O
z$mrsdYm!|DR+Ig)coZ<t0M6Ov&Gq#h6+o*Sn2LD`HGpN@jd&xZ(%KSm@$t*{Leq&p
zi~d>2&rf@X3r_*)t21MGk}uRfU{iL!n8WnqI%fh%8Epm}w^M*n{rFwxYaDgdXAA4#
zOTc2OW_?KGb+%;&NYJW)mE%Pg1VY(zX|bFUXdcTZ%b(><%vx<NXY=z!Mg1?QBYzO+
z=_B&X0fhoqkGs5n#a(w4ow%s7{3#0{m}<?>pjmWk$fXWAZ0?L-;y}AzZy>AO7aDrR
z0(eh`(++nPfhVq~PpE`%KbA*&t0<2v-`VtwvOGd68Dd5Yyh@bcH0R@mw0r|p8wPG_
zFJJNh)QA`C1psHjc`8f9^<)Dc4*%-&GL!A!FOdT%&gxQs@Y79b!QSN(5MCelKA3Rc
zO&i940~AE1i0x9&n_I(FeiQ$B{@F6^mj-jWJEIMl>6pN*l7LCj>dBvH&tKZnh}lBc
z(=)y2@kAAsg#80xEsoC%2tXrVDkoU=&iVF@`u$8fGL6M~B5KjPwzkb8Ka&}rnb-BB
zI>A8yKP6%m;5=U@Nx<L1z)QPOv-G?@x%r~XZW<pP_58O$q?JBVvH@JZ=T(j*3Q=B?
zWaM~ebJN8^d=@8=^e#S<fROXq?12a{nbZKD6&*j|h9$t7dhuGMF1v#oT93Dyd1Z%m
zcNSBHH0nIV0L^f^#YT$LZPTIj(c>$tZcAYgYF3Ln8EP!UVqL*s2WWB+e7&&=DKGa;
zu;9(E&E*M~G>{4~-QC?U^J*&3y;b$z>|?VQe85zx?3-HaaY+DWOcZ2!eaqmh-&s<C
zc6sY||9VR^81(c-CW)mO;DfhZIDKC!0P6H73i38f!iAVmq{pOtv{Z`##XuDjqr3{G
zi-U`s$XZ&T6tg}0s0zp$d3jRkTW-29CZ1cN$83oRCvYLiO#|?eX-eHg0sgZQ5zwEi
zklGl?2%@im^`!&4(K9?h!Xd$5ZyA=h4ZV8i%N~hX_32U-{gc-F%0yOeW}jymfW<2W
zj8A)jn}Gm&i~5Jc(Pw}Lp6<t%a>}XuuMg~WRpe#ggD~2QhtkxOL!N}!d8Yb^j|niE
zdR#vi&kK2)fgkf(4r(n1@9uSE|NF|D6N;DZ8ss6Rn)Na-4eZELI-d8Yw(p4XpFbjx
zF&sezzC~w(*sA~cbuZufdPD*HFP=3S7=Ac9Z$hQDWe}5)03x3y$Nz(=t`xq_M@_>#
z6u@FYayvFLw!u)*(5M>bP=F`LfgLT8yBoeGd5<8FBk~S8$eqB8*cZ6JxnT4YYG2>V
znV&cj^iX91Dgj`aT)>M*`o9jaO)Px2;{S4ggZ{tnDj_Z{z4&(*j%4R!5jx0N`+pk`
zy@+Emk6r=3!_k1@l?^I~NRZPm@F5qCK~5OHzaj<E{_eSvdWJXd(gDW`T-8t%w>#>s
z2m&I4GEg_7)zLu5IDl~&@HNg63%j}B(|@=2M*^QG280Bl#3$Gi8!81$aN%hX+Tz=m
zvMn_)$t^^}naWwcy*9hEK`~_?)i6W8cQm_0`2^0YoaP^*ew(&p;O&D#fT!8lX;8_!
zEhJR!@ujY(11TT{ef0|XD7=P;GPuO(hM@9*d4Be(QET0yEyKsAFBmD`uzmF66vn)V
zXmTHu-z(m;^;_Q?MtVKZ^9jasOZxJp5I`oqK_H&6|9xgVTSs|o8e}w$0+c)r1Akxv
zI>FTGeBYGzOR2)sLYC`-5z(#j&7_VX&zJh{pW44}4J{M|u(SN4epPEp$zCH>xuiR8
z^BFwNF<ABXXL?dIut^4=A8a16H0@Mbh-r?dfsJ#bpZ&nbmz*V%d47Iez99+##?c)=
zm&_9hIzhR3zY~p}k-?6=3sLV$9Dz$2>iO+{GBUlb;G4oav}7=##=htgi{0B}w1Ugd
z#`RQ@91`^I%JW+td%fq-P<j7HTT?8)9jA}AW)YL#L)5^T_orQbQ7~OZhaBFI0-@Q(
z20he2gr9Z=1L}L99st@jxo`meVfVP>&Kr-#-GtOo_0ho~pYNyq3Nf%-v4}Wo*f1ES
zZk+#BIz=P9xSY{5@#r@MJ7!$qIf#t1_uMO2CAYHI|1pDknWN8oCFK!Kqk-r5Va}9e
zDLYq^JW-W0-2#RUJrxiopx9X+H}0jU7`azPb8<FuQ7S)%S>%1@v5n({Dw5?gSvffE
zt5WKxJ(*F#L(DByokO0`JPy{(r2}E3quX3#hu7R2qO#pQJJok%^Umf%bu#^3jteov
zs_vygBL4G8z}@_^XMl-(K6b@l*{_qYiE3WSMrYSz&Uav5t$<5g%mPofJot-)Xw#_J
zbFo`P&;>YR<E5cHfutc)IwuS3sqy*FXt@(%qFmJZ2(Yne1+nile^V!~b+6;xY`qzy
zQnyT{O9nS{P}x#kPzD{|LBTOGT6ASxN9I|`Fn<-Vd6P$N3i^1<Sr|z#ZMABZlR?7P
z=yaKlxzIM&gg0}^Q%pVCzsKrpd<*X<z=d}>I@9utMSg!#xtDn~!wl@(^TF`|iW>Js
z()hl*rphnso<8vy$M}{nb{gX93SI4PcExS-l&Lv09&AmUk7|;q;9idUvYG8eFq(i<
zJ4TA8WihN(F$(yL@%AqRS5h8~*G^1P-vugmbZqW6**_@^Eu~EKyzMPJWbyKzN1I^d
z>Z`15oPTV@gCH%$Y;Dz$0iNT39&PL%v~f1Dir?g+%p9(Sw9ju656r!_7Ba&eJob$#
zFlbcV&Di_8GYwMYX8NysQ|Cd1d_t?%)BP*ISeDl+KK5EKS!AP{<S5iooG(7Q{$p02
zJUr$qO@DKQ{IN2#=W49erA@NuJn;J%PBGDZ67%vOIoMu}!Nttv1Y%wSZEr@ko+u74
z>qDc*ISpRs6rMy);*o`~l)5s&l}{b>F8Tg&Qup5#y@s_(oS4H*cXaiagKM1AuUU3a
z)6SeGPvV=<{#Ed$baYXY#EG%5yX^B~ifgpbtHXv$Bbqekg33B58~P2$g;<ioCvBTh
zpn<%tq~h-B0K2eo&MEr~_%XUn5Aw?H$a#!}5n#=6)V)tS6ol<H{`|uWLaj}pdG}Ca
zYPK^s7Tf>WFSnht;>y%G=FP5xf7H95`}`4Tw*Nfl&@%hD5!1kCcD<X{i2*u}j2Hk3
zZEQzK^ofg$E$at4p7xfup6OXjh=3n=ibi@PuL;<WXcfxCmRM6jLGvXl$Ab_51|^t}
z&nv9}tEm?q7oOb3+QKFvatHCCoo!pTU(!DEGSa5Jio>99`!^qZ%}%<NRnU>w=*76o
zPdm|Qw3(sA*v67W0t7Qgv2pLi;;*&9U*|p=)54@#9BaQE?DOb~dvC9Dy4OQ})9h4J
ziRt??#}iZ{2+^b%^7O@uhrBeo@CpV31tL^D20~7f5_F&`FL=(t{-nxeu*!I_>a&3E
z{Ni<tN^8dQeDhc5_)I%Nw24EGQGV^rwDF-6Q$&Aq1b=ddSTBeFcmaSP5k!etDI%56
z0+r*CrQ~$cinxXe@)o*;l0v2VPAj&jSg?7|n8$XzjlcTRPQ_fM;*5$$dP^tXf}yuC
zfM+ZtSdhb?JhWW_|9A4+Kt|@Y3RrN7VA+A;F`7~V#YjspyF+AUcn)nzWe}85i38Lq
z&9u`<i}$`1ia<I4jxFH;*+!J|lerqvhg&fWSdssHVG91p!-{hi$4x&&lLkZi<EJ+&
zK_eNrLMsN~(X5h*PiOLie5rb(3&rWgmA!(gFqGEH&f69bVL)BIq0+J#6l`_tu`t3W
zULe$AKMIR1^7&X(S9UzTM-ZbI>C~WiRSd|3QgmER%a^B|w2oV9*|lP>u&>+t9^RAa
zbz{X0DmUFW&%#b6rl^lfll#w6UmUhGA^movyit&qNc)ghya;{Bji(A)5W(bHAH{-Z
zG&w>pY9g4*GbPAYy-2%ygRV@l&8^(vqmHrh+P4GkNp!1<9MzIaCfrFWx9i|fec=ZM
z_pn9Lei|@TrF9)daVk&v%mokQ0`C(3guGm)f4?Yo98FEyNKFDj!Wgj54~hsQ*K>K+
zeJNkZ4a;c~U_i>RF~05|-ssA5!-L}SYY3{Y2t`@Q8$8~pHV<A>-+R~6!6Weg4qJO&
zQP&r=H&wzd)mwjOID-EPVuYxCu^+Ut$QT!)cdu*X?3vcwLO7kAn5b))H|i^4g_a<e
z^OZh?K4c*~V+%MMIcMGlQDp4nVHa8oF!P=a9$tDzgv+c=CAZ|DC>3sP_)r52{w~7u
zb4<M!7gIC^W~<#uWfjBflG0Nl!H1`}Xev+txwtP^`2xu$306edUW!L#cZrn>W64AT
z!ykNPj<_{tT@whg1d9!4nzc{&+@u`duVjV_yTPIvhB?&`SI|!I;Ihe$W@yu7kK@L^
zRj2A`NhHK^o>A7Yg3Djzay}{f3?I2dCs~a`q;h}`oWxdwm|@qu8>dj0L@ETMP>7_j
z;kS?FaHV4YWnppcSoP@0;%rCY5{@;3a!q%;2CcO{Va*Miuh5y5(X@mC#A2g_qsgLU
zJ~Jpag&PrnLjFkQnM-e>|4*c{DPhpuMZ|=9!sghB{y54aM<_A@;y4bu)s2!HZio%W
zR-<IX7BW>oPEtA4Wjv8TD$aVx#%4C@ZuF65`&Ww&Tgqvkn%_M^h0&!<9_v=@CvbvT
z`rlvX#5jhEUjT1rS#kI76iKzl=0fP_B^*)CV_+S(<Z>yT5mqx;vyMOYbp$WuiWuX$
zF_11~&vC2am_|yLe^znyRY8y;z0bP=2A@cduKyKRyBt_mkT@`yU_^s2-NA+1h@?FW
zLSplLXy3JvLyz=8N{|Wvh96b02JE(OanZ578&uF9Fa!U_QkGEJC%dv$F${kI!5q6U
z$0nq)&glEmwaYrO2!{AK!ykPTW_9W|qVxV&DU@Wgu<zi-S#=LnlBi0~r^Dj3H;r<=
zs-X#&gBXgBu@?neQLVQ62f!EBFJTrei5903O&&@SQz;Sx<q$bm$~67SOs}MUuQPsx
zwx)Vg&~+tv8ivh99{+pES&X-;?sW-UP_|9?r>Q~=*~`LqCoZ3Yj_Uk}arV3iw%xi?
zPlL_>UZwH+Z_zTs`*X(MV&p~l=csSAAI$}qptU1m;^hO4vB`P9t&J)WiKl^RvW08H
zD)^wZWnQPBDRkW!_vsN-ae?OXK(FD-++M+^g${HOe#D*meOjh9^?LUDngLrZ6fI7t
zH`-A&>5l>?39t^v9d8^FN9LV8vs03*L-OtNM2R`rg0vOsTx!GI#VGNbujX4)4oLY$
ziD9~bf|rfh_qBHj3|Kq^U+=-%6}9FQSLKs##g+||_fudEVgk7mI9=eESB_X|f+Eaq
z>GIG;!_FpX$zIQdn*@0j<KKW06UE_Jtyyd38fp&-kIP4|4nQLznl_W);5n{Y=jDJX
zJ>fHQ8A;zl7@2i}6CnGa^3w6)gA@(9lML@f4>d(8Ip(mc?M*ZLAsP|&dtW92c!y3S
z@_T6e*}9IC#BsL<%uGqLrB9{iMb>`wNElt<vp9q~VsMv<I2D+MP&rINoTkCRX`Xye
zTo{eKnH(<6{S4oA0%1-UOw3v$vUSW$yrdEKb0YYug}Tc?5|mJ9#@P_2a~~K1ErO99
z%8yM7MEWC2QeStWo2VJ|g8lt6`rmG35f^dQAIMoisw_%Z4Erv}yXK9+-!9bSnYN@l
z@{u?}?Bz-QlHSsgO&ApeXWDgS)sFPMw>0d^C!kLuaOsb!n27HSgNmGk3XBTF+V9(H
zR2xG*uOlJZ-?hrT13e7#_ZE5SeSYF8KfSeP@cEwt94gpFu+tWLJKv`tizt;qGCXbD
z5U-;I4gI@%1LG84Nq;8P%L;9MEK!DdK@Ubh;?1E;9#%TOARSDK%7-|9eyB2PI#|$;
zym*W>(kMhBqOjEFPjl6|C^S|BokGg~yI~mVILfe~Tu>;<t84_B#U+GcTMSstF!Q0l
zqTym9EZx)lnc7*7bq7dKy+|Cg)w1s@x>SnDYDq2h<GnF0t=?*+SsQx}_Rb|Iq*FJ{
zQMx(OG1M`%%Mn=1WkV#r$OOkh)pr6_@JvH!T9ZU}sHh$zBU1J9DlpKcMi54a3_~=#
zydrQauv4Me-z=)Qlyo!|N9n2Jh{5L~{lnji&AqX+vvx5#BAUQNxLT^^*DCa=e&eYJ
zYCG}1my%22ukEb+Z4X!Wb30cshK-k(kcEZCYlSsO-r4ybXskI*cy~pd)>%KaUFPb-
zd2@7B@;Ds@SS!?VR!UQicSan!>t$!z#=|17Syw}TR`rYx_=7N^VU?{tRKJI2pVD8H
z3rZluJ|n}06Z_`UBhW)N90<%^x+A)H=}j1>ad5yu649g<l8xtduqKe=F_Q=)2zFwm
z#=}1xYAS~(?$78o(RPiAf`0z8RozW*+0~lKg2I9o+0CKKL{NaTiqN_7B&ry{u$hk5
zAcP8Hab(*~lM01=)sUF2SB64;<}fgq@0_|N^n(8kQRf+;czLo&GfQE>jw{TG;@A+W
ztr~yhKs=(;n7|p9DFO#~QGd1xhU8#IXi1nZ@#7^njpE^N-PL}|`aufUbNrpHS}y}7
z?_s=9;kNTMTic`WZ;A5bsg7wo>&*;o@^L^;O--{ukasnl=fPXsQqOt?`u6?%#$8&O
zu%@Pkkd(|z4;B9w$H_vnp-2p6mJX9i`{tq4+gM&f!m1f>QD`o}hU_q?b$YclnqC^i
zhEiO_pSlilW9YEK1pP@$`L(bz`73AydUj*YU@U}e>t%|BQa)Ia^gv8+U{;jqNTgxx
zA#@LOe|MLPWUlqH;ma!iVNqSzLozDF_Pn<2tzLT4hijj$5cQq;29#Iv&GzQ}HVTD3
z3j^s*BU;*(@R@L(<YG*qS34U`X-Z-Ke9o%8qS_{S`#B4LnB9{|ONv9ZOGk)<?M&?(
z@r1RIQKnzt;6G(<H}~m><wxQ?wKy7zN+V|DkH)!sVbx+2IKB4tnvsaALrZC6`ffd}
zLzJ0pSiN&f2cbD;QD$=E1x-fEPfAbbua*DCs||OC!mpb@tqz5hH!@X<LeKa@e0x*T
z8x}t-3QI~3%TNC%cc^ex{x`#=_f!~P*Zk|dBLWXKKuC;rvj!V!L4^!uClxrbnDO)?
z3Dk4eSS3#ptn}ho2G|lHa9eaV$&PUrnPXebf)}dBWj!j$*B|1<_SB_}L4&EOG7-zm
zi-@`<KX;myQMf#7U}4=gmUG00GQtst&=QX0n@!)&4)yIT6#}K>IHn?OEio~fQGPci
zF~^30(Z|`cQ@P0V9^;7~$G8ZQk8e^CDWWYa`?G&`8wYV048B<!^;LjbzZy>vo0(Ta
z+v|GA{co!K=4S>e7EYKN{j?i9;TO9{v~h_1x%jq=jd&}y4rmapIWjxwlH$B2Fn2rV
zH^-k6PA?X9N${JJepOz)+YKUM8z2L2|6{}8<4l4w_do%x5D2vDeJx+VTA+{;t=ohQ
z1qus$k0F70y?Tv-)Dzvg^1IpX&krF(pS_lf#SG7$WZPCd4<B@BM{?^{AVPtjMT$6I
znOs)_a<CXbedit*OMog7Dsol?qj5cecBAD<QWtL=Fl-w_E#pO6K#mX#ix{uspUaJ*
z1buq%i2!T-+Pj4;DC<OOe;0PB!2tS$ByAf(R^-O95OmO>Y{g!wC_U8oQ3x$Ow~b|k
z%bDptbMVCX$Zar!f2edr;9JRVY(h#DWO1-uTnq(NR1szHaziwJm^)9yND^d*pZNvz
z@|&cOf<`+M=I^^Udb8~yOp5DWB0S>2a|-8g+ch`X-I!i`)nZWzAHw3~YuHdZCW3gd
z1ZRUxLI$0;#I57cqyqD<MYd=s-D`Bnd5fQ`H`QzyB|#`bD0Q0tZx4a5HXZ3s=aE`V
zTr7hExiypWKMsAFtMlRjw)00;kLm=kE?x8KcpcFIXRKl)CkR0aj#3OJN8tWdj0=ht
z1S95(wdHfUXu7ceT~v)hAT15|c_0q<DmX?V-Q<EyxUXi&diKr0uA!Ua%GTI@^Fz&A
zwRpRX=`gQv9=&fK^giNDZ&bf(?XB=P9{OobiB)C9w!ORFmz5P1Wp~)tax!?&=WGO`
zKtST<bP(<3SG*r>_o42fMxdN994gi(A2CF77z)>MTQKYSRt*@pT6imq<%hH#SuVXe
zW(AyQ15gxZ4sMUH@|0I4v!FPv-lv0?l+Y|@4=luZz8!ePZexVKOb>2%@1oH)5_P&m
zFM{-qjUKR93)cdg;Gzx+7S&w^%%#8O{m*D5eZJ&jQSt4wpw1|plg4+`j#pbTIgXrS
z17tnxIk7@7^$!6eiMQ5sVAp9!dPB2h%LU5*{vB>m=&_=6`|GS;TV-#0s4|rl#8ufa
zG=^YDL3p`El6c`m=|WF~%AYv3*wFpl&#%3dk=`R6zk^`gghq!+0?mq}Wp}sGULj_e
zX17J0)!B~n%TvRfzs-!6twH*YbjQVcPv_26-kv>jRl)ZhBW+H#M=z?SOHz<8y-Wok
z@ncm)IvebqwTpB-s-G`P)@Vd{2chT1pj{l-8*GjdqL^K3I#a!OnC|CQ73;&I?}*L!
zPqM@OgzwQD&9MhQd7(1>JY)qr3)`B3`~wkA<7wke+81@ZR1V2ZIGpL^8m2$PKZq`E
zK5lks=38|Bbd}8V8?#)nVwF7kk{UH`CJZ404K`W*?NK?Iu`f_MCn`TtteIo|_CcM+
z^fDy<%z2^W8<Vb%y$kDtu4|#6x7#+0TMyY!!6CGT&!lPqAlmp4?UAQ7ayZcVsw=<T
ziW{h^fg-n%Y%Q*0iZA~x{k$g6&GZ|xwmhHDg^NsTDk_t)SzK6Fv!#3VDzC4i@yCBC
zL<-T6r9C%kU%LI-<tARxj9Sk6>dbUqQ`3RVw2#CqeTvx#00W(Wfq`Ggw@InIwK>nJ
zW4pGBFosxd6VJ;KGUb-<NWP%7Vfgn*PejrP{$rT+%=hc(_ey`ncx1fkdn3<#Axnt2
zed!6|hkJW-7ituBUKRDNVziXRP`=P0N?w;FWKty%n_J{IFHjY%@z3{zx63$9Jx~$(
z-Ee8<Y@H!&o7&pKSf3MU635Yk-p~qCpjnj)KMN9s^%vUpaEzsi(viA(5;;ind^1u2
z%EIe#^C}*I>ktVD9`djLsQ9~m_9u=Jsw^B?It*xr;PhgeM14dl%ly#VIhaT1SaSpC
z?+8itQEW7|-H&{-KI~P{AG%1H1fkEURvZX_=doRC9tJq{rRTSq9#0mBE4m0x%TP_r
zXdtE6Ya@#%?Fs#pYmSZfGXy*BZ|*D2?Ba^bIiFV|r=RCg`dLM5f}V<(bVD+-UWZJb
z-$PgMP<qi3zF>QNUTHK$WZUFu!wnUT)4{&v1b-MJ#<SJ5R?*u;Mj$@XLa@<7tlAK_
zK2yF2bCa;n9ifH#2VRyRwV9!pNy;vkxnnC3MDeIA9PiMFg-RiKe^)ZU7Xl`Ac?I*V
zkX%F*e{xFP9{!r>zHVPW7_hZp$mdCZ><xZ4wm|ye7Y5~`Xe`VG@=>_c-HX#Yvcy7z
z!g-(BNMB!!&EcOK`)$>m4(9%iG_am;$8mZC$K5OMX!AGyWsN)H%goh2)Ur|2j$3`1
zOf*BuQ6FzmqN%C!_B55uT>!`v?Z{<Wh-vU~N|;LigQ04{1KY^h;LA{x%LkNVL3WO+
z)4?X6No6&4^$6rQJjm12U)?sxSAX{q*-B|y@*=q&wLPM*1PBY8-WAWO1%=zF4sFE0
zzFThheFGYoB-?+fwU~(CBIUY%71QOd8*l*A5hVsl(BsqtsHRXL>$+?u*2w9uP=K)l
zR&LH3>6adQ(bd$3PrXk-3SM;Y9OMt1ksj^uiM+ET{h9WIt83Q=acat%XREYdSc@(Y
zG-n1Peg-j&E`vaimNc>SiOIIuK8bR#X!gt$vuesD)+@s>36v6K=X(h=5{ca>pPq$!
zVc|~ep)roO%8J}|$wf(nKr0bC`M;6*%~p&@+~_4TF{Xs1HM5?1bs4ghf|yusG`wgP
zv+#}DIO_IHdkB4ZYw`?@)>uz(-_B!Jmyz}UaCm34?Rk^#D&)G%XF~DPxCkW@UeX*k
zpdiZ~OHt^Y`uqm)QaN1K;$2&!RAs$TD8T=bCin5i-PY&Ac{QU-?t1mM=A%c&!;`B0
ztOt3hs68Ez!|Bz$KY81pbNk74=fS1HG83Ota{=0Ud0OyA<$La@9JrgS(F0}mnYq;*
zEKI3;TgUdDLN9_!8>hy)*{X>{cz{2V-ZfLPAIaR{h|qSMoa|}92=S0yaF+W8Zf0>D
zx60D(NtfRV8yBvuOpd%W6@uBn)BwQIsc9Crf?0x?7QmtO7!juPh?g7EAo%b4+3I5(
z4dVNr)^?O&EGU{sK&G@2#fTwTGnX3#VuiS_4t<k5`y^vRuAQ#v%bBn+0ci3n(+6h1
zH4ipsr9M0b0zJs~QY7PV34F#ng(si0NDX`;>F&NLM}$CTB(Rk<HA2!g2@08udSA8b
zgaK@cwaY7=kwOucgoE&5(||!7xU}J5uhk^T?PKxy!ls0d%)4lxQv_p0*^?8DFoZlW
zTL}zU1fv}*jYS{RvU6Zc5r;O6pnE5dj~i+|l?G<a9><IgY#2ui{|Cl=@3f8#F0WUG
zCXDKa5xagLP~l}&!XLEwUIpz(Lk{tWaw#6zv5~)nAO?PhFJ=zXU~t~x)MegYKoiWA
zMd<m`B@MNfATYUXRP<2tZ^YP!xU(jOz4G%KP1fb%(%D%FQF?*ZYIzR?6<yyXDHw!E
z%QRjQSE3<+_=g4E2%8HRSABarSsqC!MKA(s`UDBU_hTBKbblkn_^{GF*?EAzp;$Xk
zkQK3eHPP@=hzrIa)HICNv^>5_amABM-?45lg5d?g?Ov(Y8{CMK^r!^PGw%Hv0*(7W
zE{9K!K0YDu#gU*F#2ui?>3!#}Brs?|2pRq_p&lw`qqhw0fTqH4n9|oREys&Yy0kN>
zMK*>psNu*$(Bkow?{Xd(OLp`2HMZ4ocKyHDL^7K=ml%mJKPTxgU*NynHdj!jpgu5-
zR^QjvMdv+A_{@7`(#5->YLlgV|GI_sDZS}@{OIX3{)5pvuzL$EQ9Cl*owXhmr5JLz
zyFM0+AjyI-jRk{S!uDad6aJOa(2Q!YaEV`>nzleDrwuktw5mW##c|U^qwUBr_vbD)
zxpJ!kwT;nYvhgUY^n0=sxvnh5n^(Dq%5rH!p7)?SHQR~P+(&XC<VZ>JZ?WBhD%6(z
z-Mue0F}M)6AiuPrJt9DxvGV@l!^h*2y*vbf)Gv{`Vv03416BoybiAGnZfHnMe^9Hc
zq^KV8Olu`JpWqU*h`Gm6(YqSBBbPK1Xjr#2?X&rS;>w#5&6obUw}UI3ApY9BuDn%@
zni2}i#;G0&HWUN)d#Q%6uW+x!OUBazTxROcY)T^+Q^i;b-P_ddNM$bCJkf-e3jmVj
z&bD}S9D0~t5FnJA((|i~Mvt3i<GFrCMl>|oRFbr0CT%f6OdRSro5^&%sx~+OWB%&f
zS-K)&Mld>=kSvq%;LYM9(dnGk0dL1XR^;a(gu$Exg^a+ak(B)T3%?>$;!pP;yliZt
z6~vU4FH9p5Kt(53O0tdm4*42%Ciiv8omf_K(?&{vR@=lY!bcYdYUZ!$pPCL2n(ZfP
z=l&^wO0BHC-;wU!o-gF%v2ooaba5Mf9Nyj@>b<E6n^SI-U#{%oj<|e%!OUYe0hcP;
zn1$vUQyRi`CU7tJCI>!22={iTw)V7q-kX|72&(!`M(EUd*wQCJoru(kjlx8(Qm!s1
z6>6?PRh9VEj86j`;t9s-KrHbKDFrNFOa5AeXQWm-3>0+kr0&h195Us~YC>QFT0Zur
z|L}|gt3Swyz<T2;=y^V;#oTCx8!Ru~9f{nN*Vq$PRf_{;*!U<c*H`SZ#)$MW<rTdi
zPBL+zM_HJMJH0dYaL1*edPvUX+evl@SCnDyi<)ufCIu?&gBh)$c`1`lA?*8UXDAon
zHI#;FlI$Y*4iScOOz0H4%FFb8Z}5-a9HgBsU*4H~FDggAB7va_ah!xWOzwS|w{b4!
z0w&C-0cr$)P}?0jCu8(@>D-p^Nhl}&7H+7~f{lh*+oXCLa(l9v-g^8D)XXKa_P0E6
z-}sNR&w~6Aq-fpBlF2J^@27We`)4zCvvW4k4aN&!+uw^FyWQA0V*jb+&T6jCP`~<J
zJ3Q(nVBDieCUc8@dy7qg;P1OP*s~tEI>JSraPZ#I8#=nlN6=K4A1YVe#}WX^6{q(w
z7&aI4K+Ob7NdM_PL9*waxiBWi7s4RLW8I+ejA;xwOf;;4Ao3T4qkw>MdPz3>`*g%o
zSh?afpFo<x@X3zH2qTA_JA^4)o_Llv7JDHYAX~-Xwlf&yQKCe#+Y;5aiFs+Ini-|j
z(I(>ehn_rP@;am(+=0m*EBOKHtppBDEs}S%eBLbSi(jnR{GNl`ZQSHppN*6g(v~yy
zL>M0x4R{DF_ZDz-)F+Mj4YpUNU6T(`+{u0+M}Q`V$f!cfjOu=c$QtJ|G5tQ!ab_cr
z9xoa$c+d74?ffSpek?%?myY==5fiM~Qp>Q$TWFMny|B}VTj%TEIeq;O6dUmgdgcLb
zOG?4VherGTt#-Q$_M7a})<Q@1{d$XWP}-kfUn)*y<a0W#SYoW`pEmHc>HJv!_)nS$
zqV{H?-L5140+!~jjA7)VenG!c+j=+{fT((@<p5dU6~`qfcH~D(ZQ5&aIY|UGYlQbz
z?d!nDB<G|v`U9ogSp<s)0P0yvl~nY}+Mct_;xxfcYtksj{!RUG&&AFNTf9EDLXyC>
z%3i}%Ec|*dS8?D;4KTWU+NDb+ecvMl&K)n}$KE$*D#t}g-kW+Iu*wm5!E@uPy<0M0
z#P|GUTz<$n`^-a)&?Z5r*kd-T7aGLjSj$vJ$QCD-;?-Qe1RBaw+1}YGWYAo&Ip}$J
z3WVwc5UK_~zlw18WhmVO8Fd^iI`=u;@5GyB7IsDsrtsm9p;t$=X!(Ax;Oyb^$U;Um
zcWgHmQksfk=zNSNdd?5B#%p-&27>J8fBs@rt*;#O(->u}uG%&*x_g};GO*owV?Nt-
zcVr$Yc8i^P{xq2NB$Xh}{L_op(G;b6$#r}4BXgq@Sll98kHnumn6N75U&Pcx$;*R;
zY?~e&K*SWsCP=U-#M%SQ-T{0AJn0zSPuLZ&pxGa)&;_%SZbwhfMbP?`5}xLZWaFv1
z7hIC>w<~MSi_HB1y_3dubT7#*6hRc>30pk-QNF}~PE!G>1V3PBe{l;IHgr*1f{CjS
zbVP}nAirzJ!*p$oR-kjRCnYcAD}%TnqD#Yp*(SrRtpq=;$*WWHFcmXZ%smCs?J>q|
z?b%k(Kbf9S3X*Q$l@T|C&Nujpro)Mzwa4$CHN9UsY;qkmK#>YZi(u53w>TR(7fiUX
zK27Eue1-k9iV}y+w2N9N`Vu__A5y&F;$Y5i`{dC{?1_ImFlpxmZg23W&E$-pm8x>-
zX73ap%(4loU%P)?Wz&{%rrD@*FthLOb(*Fg4?fS=$+tM)-`-h6cDwXCkMv;h`CMl(
zq)N7<Nd5La_YCM)115_fmcs{@YYUfjBeog2)H7-TZll@Ak(&YlO&0{-tz_{T|5<l~
zr%x(Msvl$0Q#zGe8j*<fRuM%o)|`LdIqwwvGIySwcO2MA6gR=Ku*jR+eCj+nGY{YT
zC5X;nYTK|pY~PeNzOWxWdLl-Sv0FU{ryK~NI0^U`FGm<?KM+<mq+&PP9<M1BDgq<D
z9%JlkUzP2qTzkGPvxgkPND1<hKZl|N!DD59_duOToD~IA`TFyMUkGP`ZHh*$nV;kv
z+JEGX*%CQs<03s-s+OqZ&~8lZF90K|jAeg2T3~o9G}`-%frnVZeR0D_kVECp&8!g(
zUJ`A&+8X}DMjn1|RF`oZt*B#Pj~ze_v)uqlFYE>B(GvTiR>vHCPOgS|$6K~f;vknC
z<;uxMjXzPbMG%qfhA}rAGyhfj@V@mwUI3@gPsg-u8<6bnQCXs_&WjRF`+1$BULQ4k
z-j=0%hN30aJ6G+Ur5G|Vc6K9<6jHFdb=%JXq5brxHhOi=NpQ{s;^3>vdN{$mfOO5y
zw^zyh@<dtMlIwq(>9sV2w+D`)8<VH#BY7EL!O=zgQiVU7b@$~tDz%gn-m8&RP}>4s
za)okDg?!=FegW?bgNQ<$pUwkcr6{tJj`A*nYduY<6b=?jA*47)ueqr0<h=9bnj$;!
zjjhUSxNu6UwXf@9r*;}?%V=rCD+e7yBCpq-C3231vDKcvu%jD3GX^Wlbc<cbbd{4W
zEf(8g$AyfQ1!E`FJ=Y2OWSCqKssR%%raX&OXil_Wk()oHyFLC2^#)AuXjn>gdcRIT
zS^JL_K(r6t6F>a@MyA#ul#BeAA-5$ax{H`F<x8m42|s)_ZK`K8T^@l;%3X86bd<^`
z&DFVZKGJ8cW%SXz#Blku9C$IdD_68(;<R8VycqCIuv#7rbI4ywp*?KG{$ssqucD3@
zXwgc8l9HpM2X^hK82Cs=Yjx(%>tH&2lJ>8aeg)BEQlC)13GE_%n%mHv1hcJidr~s^
zST0Sw+4U}JfNw=ri9$BpZdF*jv8_laqh;uBxTW|N$Xvna4aBD#U*$*7w$QEQ`su$v
z5a`@a63wM!nd-k&p3Kj0AZ5zZAft@8Drg*t8h&1m%C#G)INjcpCduf#;5>gg<E~hL
z>&enm@tYQan)0uCZU{M*u`pxrZPoGr@(wb_3Nqbu-`x@DeMgUa|Ga7m!4f{5F8*+G
zbXr7@WIP`uEF64zoyVo0StPvYrdn)VEfP;H{o#bAJ2V%dKB6bG&?qSQa1}EdJ5x3~
zzteU74%(7$o?*rGb2i@$tXtmnN3b!$Sg-~#6(wpuAQOHXC}|V@$I>7l5eFC=*3-;P
z;$#6p>a9*hvT9mhF3I`GiJHN#O9Z$Y+DR%qDEu9zu_ScdXHb?L`gOQT79eYPwCF9j
zKVS=32nI2wlX_5>CL=e^r~g!S%HRAcc+43sD6)$_;A?a2V-0iL{o}sPnHoSIvddWl
zv`YRBjZDGeO<(4kEQ9yz@0flp;2+Ul9F<m#mG`~*$VLj1MeD??ziMXFvduPhYWZZN
zIzl%TVw$}<8q%~PAu&mj-~X@_L@!NHfC+zK>Ebx^?Hpsn!0zOi=k+UkyTg`A+=IKb
z2h@^1m;@oik7jdPu|ki1U0<Xqc_qADCCKR$?tfofC5twe)l4;<b)U>;JG!z=_IzDy
zOUMejN2Pg5D!Mfl11Gd>bmzZUNH`RXS<Ra1`|}TNgVB+O_p>EH#>ZM?SvS+uet}`v
z60ikW>KhMD`dJ(}qz7*@{!BGDt>su4$MRZ}dL95vS$mZutlGGAPHy%Nn{`ppWG4Cs
zV}*~IJV{{yHXt98a}&`qfWfBxJ^s4GeCX;Avl2eW{O+Rt5Wf?mc?}%(&@@7|!@1ng
zgAy^M<>xmKSE$Q;#hFlf*J0z#ost4NFr&iU7Z9|l5&53-GOcVT;0!~&xR3W|Pmhy=
zQeD<Jl|FdB(^0tOMpNTN-y{Bcw;6_?_9c74*sD5;Bi}DW>>>#ZfZupEA+>~LRdP8<
zvRX!Hw(TLR5Jo>Q_@9s>)>lzMkRD#=wf2jSyEL)y<koS~J><P()jb^fYjZfo^+EhF
z3_hM!=x=O2)h3^QTd4asN~I|X&!2TVT!e0<^d4wgovw^<bq<h06mg}H6NDCWE*+mP
zXyU~>k|Fcu`j@pg6~EsctUKK|dJX6iFg^W3D@8pN%9UgpnfBCW0uGLv{N6;G_lr9a
zK(HdokSiK&CGD9|L&%qkgJP_AYVXA24=Waln<p}fW7p5z)+|1WAzqx6RXPd>7fhp;
z7vMlOx{5oYHNnJFuU|hG`a%o8hI_bjyh2;+TBG8Qp>aN>#9J~fJKxFfCQn@hT2X8s
zhv6`1?+{zlidbNdAj>cZ+X&H@_e6t13jD~>`?kr|d;DxgxK4WdWyu}qoqB5q-GxqN
z&9~|J4imFH-$cB`m~8Jm%^Lprp(`m*4q?JJSqP*JeY^_B4Jq<CZsT`$q<<rT%atkk
z{xW%SqZba{r@gF%Xr}ES{{mah`c1ZR6wF2OJ~CMJ9#K~_E?k?5nxp4X(~ENyU$or8
zG|AlHTd`2!TaJN4N4wAO-x}NRPImilSQx_=g1y&GeRoEIR%0l3tChc3xLK(Y+a&${
z=M#tP`qUr=(xKsuRhqtd@lw%VfNo!1&cpgCiP4zi?PN@(PBN+)vj>~y<3W)5kMULI
zGP+F3H#02_QSM8mG=@{-jlqvEh=B%59~7UFF9TE+gbvFI<oH-lPLe%1hEwo;<<r*;
z5GZ7Mh4yzPZtE&Ku=rJn0MO&UF%jZlQR`!WPWs}8DUONOgl!w+FZ5UdH66tsoxIlZ
z`-gI3y@WWuzdu-BXR%nF?>T3q^@8-J%@C{nMojFJX#QE5Uy3z`kJ0E{X{HxlF``Z<
zX&V<2b~TJ-u7UhT7j<Zbjua)Myj@-DYM{(9E<r4V`PmjdQSXv*<*`U<mB4O;kS8G}
z_X$Z2L|?v*v5z`IeAha-(_xYHG0pSOV=4VcBN!-D=J3fc=CmWWgq{%Q7$uq|?(CKF
zpygz>ueOi!$-k3NDc7-eQhtFwDM@U04n2Af2X33s()sG`&g=3$QGFlW9XearCX=~^
z>;}5+7t)sn_Lg$@QmWsY%sJ<e>Q3{WdhN+<pOxuF>0%FL`K1bZ4HruA3_+r{h5@6)
zRLw~|*`RV$YuxgcsLLV{@NvF}$ij|Ainze6g#l}r*>4spqN_=ji$$z)mh=gs4~qK`
z4I#Hy_O%ST?~EGPuN5_V8RKyO*AjlclSt*GkVZR^*M{|cr{m}>b9J+?vh>@%k_ub(
z!tgf{pkHGuiEFeXC<5|)(yn(P0gmEsC?H+c%WZa4Rm$vkap{-YP`za(&<^d~<Bm)o
zqoU1gDaGR5gB|^3OY23H)9QpEEZ<DTCHRYY_Gz`Zu*izd=QF$$JqKr^g__>{C$q+!
zFJcA5WPVh1CPk?@iPP(iiZ1w0+`dksD=eZIusKk&Wx3C13wgyGSSk2q1RAx)>6oud
zTC`M&A%y`mE2*w>f83U;PhE?8XGk8PeDv=%q`#o`hs|rAv$@Zq824^bj(>$M7=|l9
z6p1J&*ph#x^g%l?3dgFlyiA(Q`uOYzB4F!@;shU<b`q=oNU31)FdVTa-yF@!cl4||
z@JbhaVpdJtEPS2Lf3@Rgc2A^}B#lL#F0{qIeddeR2H-kGCLdUkLp1ErP-*~XKO`0}
zE2gW^SbQErjzpQtk7|DLF1zYGG+$Ajk=ZmZu{ATqZGve}bEE|+m)=P35A5r2a>9DQ
zrN2p-k&ncIfCClwTU>>%AB_?lex;<QAGyrQr>xP86F#w_%AFw8Eb}oQxu0sTe4XLJ
zlPp0PA6W*eVq>E@+2`ovbSENDW$0k2$OZ-WVlg(5g-}&*K>d<0JT`)VMLedIshFcQ
zK9~~oE1#8pLj`;;y=c`uiwzz5;Hh|pbQzs@7CKZbO2MSb5A!k8>drU!X9e|yr>!9q
z>oqX0ED^nAtL7CYsFeN|i!!V?WI1_-P7yD>A%dh6Cav?z(q4t(YynrA?eQRIcf-TV
za}LA{fD&S2oAGgk0c3hVYc{SIN$;Ugyqk-Mb?%*bN;rRnVj*kMWFubYmA<JG-8G)7
z2jE0W&)VhWRj2aI7J2a=dh2}D{Zk!uEvjuaJ|{H$Mf$6LIm6cA+FwP3gxwhZIXC8X
z$IbTn`)m?W#~x2oH(S2@4z}=0e~oVl(4JZ2McpM&W5%G=WmdCS=Bh&NRMF$r6_mKu
zPTc2Jc)x%3CsFla;yDhPMEDQl25lAs9~+(){-q}~OicdO>3UiH*<`ya=%+$a6}A2t
zgPF_L5?;P~InxFnN6V|vPrvFnSct#2!uBgO6kRGZaKq^1`2=gZmL9LF^+xkzYC6mh
zDYY&&5z~CSZy3=n^>lWGQefdm{t_%7KwbD|lTPA0IRhhHV;I$24l7bnc5Wjv@CM;_
zS6)cvhg*cLu6!kqn2SCUmA&h8aYCJO?ow1MDP0%XJJQ1GR8V_t1j+HF#F4WemZ!S?
zNjKIf&ud@#T9t(o{uGoG2s+`PJ8_aT&D}4zS1i&$?qNJ6$p;Sqcq))QE<v%rw^y7y
z0y^adJXDq(--{y-Bd}ZU>DK&a$r~uJc3Ddx5e!3DZWgb{qScdt(H)YvqKz)lGN4jD
zE@GEg)cu5K+2ja7N2UL9x)xSXWWVlE*|3(Z@#~K}$3U@(>;gF@wg`qlQ%3vh&!O^~
zM|I`TTeZEwe`yY`!;;Bc+P^|2bef*TZ44ykWK3MA=h#iFRm=9t8tUpgSS$=3C>#qr
zzq4GxzqDC*vbnlD+e}wT{#rZSaNTcrx>wY^5S%|gniKi%YQ!<5Xwfy1h?nQ07}=DZ
zX63u()y#l^Mt##nXeU&b*xxB6n15l}%WZ;UW{1rwws<e9UNRYh!VKds?FW>f3rR67
zb3Fa}LQ4I{KuSGus|5|?F4K(xg8H>gxK=4kXWk~LO!AsQ!68QyoJ32BnT!vd<DZCE
zCd<?W-~K6>UJX|V3yfZ@*YG&3Y|1(-()Ex=aL}d?@~>=KbS*CGaeWm!8-ZQozqVbf
z-!+sQPVRp_P>GNGCCuatYj<Zae-J@RwHT2Siy;{X#?XR<d++)><S7^kz#j|=khnFu
zp3$DnsC&FexQ!15D2)$$=m3prN?JUpjH-`(U)%NTMu2^QOT7}3T*xX1$TFd@4}x&u
zSMp!~l1{3TLKd*8X!Ya(!MZ5K7~Hgiy`-v8qmWJ-y9LFNU?qh}fBLx@p>GCp-Wp6~
z9Ur(OXd&t(3rM9)p0v;W1Z?(*w&VrQ*3`4NiaAk$=^)e^Fby~V;W3>qbF_Yz3`f1+
z#^n9Ma;!Na7-JV9!OCBNQCBFP7au*=uOz1iQAJ}bC-eB4e_#lQwDMSm(W`T-Rj4##
zjh6DOfPj#1kfg}M^qw@3=Uo#yi5VHE)}@Ax3KOY2B*6B|Pm~Jc+`lgAsWpP8RN~m6
zD{SH_%8`-o&+GAmC2WClGdDqu3xeVzU9}u1Z5Km4@LDGd-V^2zpV#x;Oqa7N^DHA=
zJR_kY*AvMpIR^s>v1XAtxG-;h)RMd-AW|8=XBJ;R>N59f2X0A_8QLA$<|lE`vQEA>
zZ)rTjskuqL7;Tn%ij>U=J=j@_hQ&6j$)s-lV84;B|9kMa;%QIf4yLd#iB$ccV_fif
z^kBhqsOJ26XEY)xKJSCW#-YdQKw?4VcAHGyx>8@39<9U%P6^K995h$n$HT%NfLbl;
zjhE`uo<RfhZW@qz{==>y6ysOF!$Sa-qUu?@n{kON2X-D;47INA1kCP8T-U>*@B>|Y
zcE^tdO*)=)5F9^@rkQxQpg!Di)1X1j#YA}hR7~n<V4%<BAF$@3-ejFbfuCmnBG*|t
zcVU;v=(Uo`zVV7vels<Cqio@}KTGFAyr8O6ijA#KG56(ZTbwmV${jbWCT%K8`9Cu0
zPW0jphe6a>n3-|}iReB0{<;>G^Y4hf`tmFVO`;}QOZ!DKL6b-UX2KZzZ6&p$yHs8I
z03y=z64FufA&MsX4l(s16SP-k-d-^KX#%=3+=RriJmUIE0O=*2Cr~nd^VTF>S7QRp
z$sSqInP@{jxne}vRc?CAz%H{1mo7$ti8)7yZ~O{hN9Z08KWRdOyPFL>#cQ;yxj~>}
ze;958%OMD_{q(D1od7lglo#zAQJ~vy&BVb<)Emw3=kBS0MCw_6;?#M|VKRrZ#PcjD
z8|bL3$@^Ozct3?u{}Cl68a-tU`{|)YX6%7lsxU0pOh*CQ?}|H!d9t@{Ls?I41P8)$
zTCdODw#s-17kGc=NpeKbU6>CpPy$UAtDDSM{NMUXv-ze^QuY(mZ}wc}hF|zlJfQbg
zA{eE6Rwk_|<vwf3TMLM=(5IgTl%V&WuqETf5rJ8w)Gjp+gQ<fRYBqDg8wZCCVV8G@
z7UWM}^Qck}c*a6CxVtICp<f@B?>(q%MdUtOKJP2lwBi=9GVB%}*j}!u)N{S9!AXZE
z6cfb=05>x@vro1344^7T7IjMoaa*!!QjF~VLB8e~3lS}_e@pVJxB1ZF@pCZg(jgDK
zqq#=-9dB0-<B{&xAsCYZQ8_fM3O$_o=T*Xc{EV;JmUX6Pa4WZUgJ`~D^dW!Muu#&9
zJG{pj^+zakbD?$$R%8b&$w(a1l9p66;*ldh6d`EerLH(`_e0Gd!r3+o9{b@EzSE|!
zt~vQ%A@wvf8p7SdXT`Se1yH?{efSB5QTipu<U6BJcUYcvJCO9ZcgCt|l?)qi?QY_3
zaxR)M-r&hKqQn;pmVC%w>y8=~-D7hvPZEN}_pWcdxBBYV6yF`q1m|XV&%)ZZMVM=&
zq=S=eGxk!P?Ate)&IY#4KE_nTpY+BEl1y@#9^AR!YuRU4!pg5mf`rpKpi<c8LtQH9
zw&6tDzN^@EoU}A!e<~H|QWGQh`J5I=d?XR~vr2Msp-AZe&~(kwalc=4W81dX*k&86
zv28VK?2XaJP8u|}ZQFLz*xC5q@9&)V?>+n3b9VQ+&&=GJdsm>r4tDfKHVsoHVsJ6l
zULpk_TFsFy05#mjf4)_5^zSM)TzH7s(2zZG%25=EnD#t&Db(hxWE-lEfn7h7!wTrH
zy@YGlNfQ2C4^xBBY_;rAK$l}5gRGR<>MT2G-Dm0jLRO0W;uoPr>N86IFgqAk0VV&l
z{dX<p<(c)Ja1r|qjKpmleHe4vo^8VVx&ifDXcHR2dzj)4!C-rh$TqiRqBKyZ(4_t;
zayVXmdm@=mb9*RM$@ktLl^snlT~g>o==g$taF`F{Le0oXP<wIX;_2pjl<%j92=4Sq
zZ`$rxIiR}-@!d1jioy4YN}sapLuDG!Pe}&fk4Ls<DSy;Ml<47y5+x1cqf{u+B$B8r
zbbdcz5^OV-hR32+2;a2qF9uHujqN9=p}~3frmCs_gTJ`A)M;B@oz8E@laWEF+G1xF
z5Mi28Yc@o|%8IJj<QTquHd`%rj{*y)SUgBb+%y3ZzB>eh6JmBj?$>V|h+@DiyyNM|
zlHDmIXbwG3($sG!+D@(P*=pM?bzc@k1!0^4rImb1Y0)x+R&|he60(r1dr6L}vRsfp
zK<`d@Khk|IwmF;7qfv4pOP6!Gned^X@4zjy8e@>e0RLjQiOa`<e9gyB{PpNoT-|7Y
zvB}RPX3LoEWZ#g242f*Fs~k}<tl#+ZgsPaI1#YOdzZ>lj*Im_AJE94>*05nflhZKb
z{F*B<bNO%?ktZI#ujTvXv#(x@d4LOmkCi!erQySJxy5%-J)J6J(Kfsn@%Zk9z^eP>
zh6(|5s7R^L#w?YB*X6hEyR{E87#8BOIlRbPF)P5Te%wRMGMpP6>JoK;`7*N|6FC#O
zS0S!%iA;s-Cr-!y1>HgEV5*(CYYCQE`_(oef|I<abuTes0Y#3)jf<F_;hIY`zwFxW
z{PogigjBc1oc$9R)^a{qo|u*p+IY6K6IntUvVPIjL9&V$XiX%Sd-)%4#7H++QVL@k
z3kOZ$6K^=<gSi9PIVJ8C;fDHK3;^Z^h-RLkASH5gu);5aoo!-Ny>scx)6rP~bIcYS
zG|#&8hkq6Xl6|?IGnN)R-YA=MxAL1}Fa`gW{fEypQsV-TmZFc`(^~ZWyj~QCGCCmg
zGw6YQ-m}(OwG9CEp+8h2OOY?d-|d-&VgkCG3CekrZL;O?wzE+bh?Ar0;~09fZqi2x
za3knbQIZ=SiA(JVPQeg;twhkdg-7GyX@ErDWvp)}tKA6I_=u)DFF&mFgP3f;XDz@8
zzMX|{3G`O--tvN$TX_7?7zydm6965Tn;Ab^sFsL%6-*Cb>S#TfBCP54)GiD<AAWzs
zQ{4ZM5p>}5>y=|p&xwtE9+iu8D_CSI>?nq5A3MF?&F}-6`Vr)vyvDh%)!5%yXK`8a
z4VlyQ9M<HQ<>PES2!;muwxG~NWY$=_;(qwO7Q_ieUw!~AG$&7|lK?Rj!2Y^0DwhF}
z$%tZn(72;y;d-<I-096>v1><T8Gfu|Hor%?QFqxIY(!8bG2(;64k@Qu-A)I=G8>bk
zp93UdtUMC}B29#cq?tK0QkpZI)8T>#1MBt|JB290F*8YY+t7ERyKWY*oBa!Gn}@R~
zm~^|VHoLMRH@V3t$<*nv`Kk|^EGv<<xPlOrA>TXbe&4Cd*8Mw&Hyz4a{ZQxmhh{2v
zc8p^KklUree93fZdl8HvlIQhuIuBO!mM<@9z@Dn_&0&e9L@YdM$0x@5N-d7(`z`Lc
zZ$@j5B`_+gZ&7P2&@7%G1K>Qkh?iHer&8VY^}0XFhafSoRwQ2X_1iw#n#>?!3Zghy
zHo_1Q7ck|l;lyOq-|2p7zbIDO%xqAZf?Lm5k#EBn{%m}C=e_T9r;kC)?Awb%@m1ni
zn6ylHY=6F*K7D88{}{a0T-5$UVueBNeN>;tmjmVKW&$UBZvw5!Hq}KQZUGd!SYec_
zD=#Fm>-b%yV*M%m`3t*VB0WQnEKxkgPROrS*p{(<rx&1O<p6Pq>CNS}QV%T?>Ct0t
z)m#2J0&mQzY%d0CRlhI3TYtuD8%?1)>ek4nHlaj0o~-$(;W(>!n>z#9qD3z&R`)wB
zq=z2I6jxLm3C3v+g9>ls)E_u`?Jz{v9#G3RBNqGce?QOT4cNjj=$2LDWpQb?e`V%{
zMyH0m#Wh6pG+>B4<g4K~`?9~Mg^`>TpK@xtfL$%KQR6a_?#7-Z%i8mjIu&uAA2yz2
zZgIF%OyoFxMcPFsE#2<C$<4dpX6HDROZFLZ=rH;LuvhwDjxw0M&tf2P)w;@7eD9ji
z-ph>+S~ZYbr=EB>^*sTqj;4zehaY^bpZXoGK2fHkslU>f-|vn;kP>sRM%pRIQq^vd
z7r&o%iMwRY+_){9L5t&CO|ZA7d4G7lU2l9p*K-E|(6dkaf-{RLEX*khnKEi$$TC&*
z<`@L%`6$SKDG{KIvYI|=(X4=S4M>c}l!-|rsH$>;L$ml6Qn~jctau8WxIi%A7S)%-
z^ICkLAFSkn_HM?(q0b+Vq<b;$J3zY<<CPY3E>aJ($!?y)pH9MB?ZcbAXn)O;1nkF`
zw2Tk;&wQ@>!oq^w=}26rLRJ6rIr<-`ju|~WBiWwnE=aSMN$0!G-qf-Rxot<L@zS)f
z=l>41X3qW<U*vXsGlC?#(^-wguLJ<by6)tk;q5gHnn}c26b(``vEbIzneSzAmh5f?
z_(phkZ7oh7y(dePnDS>*@2&8+dL3tOZkk=)?k5qnl1T6aygt_p&@+QKsD<3uF=M8_
zBF8dt!|MEH=ks?Y?OOLm=N0)tA=F*tB{1F;e0(qv;wFkWbc0sIY75w1H%Ub&+ZXG-
zmdbLK5&>uIdr$)2QMnZ>^SjpG;zxk}-B<d-8x5CEx}yqlL#s%#d%s(~TVAS}G*8Qi
z>47~cbjp2`B?^HH`-+TTYn3Kg<c2qbf9MCy@ol_K5LRsIKy<+%U8487nTw<TCDAaN
z-k+vWKdC_RaA2egdoRw8%D~-ly+q#Vu&0#@Ig5>SVcqcSwb%E0gWk9qKzys|)Te=O
z?D?UBMVZmr<&foaAUBblmjAP&p^hNnb^E*D=g-i0Wc>f)V+yCCpWLi{n2=F7qL*ZE
zll?8H-yQ~ih0VR4{m)p5`&x54sA*|;BZqT)|1*}S;ASKM`MjXlPR+itif%e+*A=j`
z@(JQOKqREc4FDTPtrg>z`hTdc>xM*VeSFiTU!He2utWKHoF}WPJ8)CXEy2xNr{FTp
z6|84E?)uW{W}unFopZdR&$%`TMIF$!^#l`T7nL@dtLqGlsoyJ#8c*sX6i#=*;qckM
zFKT_g@K1UUEY95WO-%A9{d3d&$LnRk7*Zy|-}v@ydNu6zW6|&0V-=;E>1&laak8iV
z6Q2fa0l--8<%gv{lf1|k>u>e^PJLDEj@k!)d*KQZ3@Ug?OUp?zf#-QyDH=QAq3t3q
zUSDCO>U%m=AbzYiyy=%;-1|aOMF;!WkIFTVtMj!Fl|(oFqDm4Emrm%}0*LAAl|Dsp
z#(QZ+bUSx!DQ4?Ulh<ClH|K5v!*5i$eTQ`)^-_;8#`XWjJHZlrpEx=UaxORWsP~OE
zvy)7JujPuApcMPtAv{=L&)se_sHGz4-iFh8jJS|ZvIl2QoT{v4%8h!jO)!TJ>pbh|
zU|C7-ux$k|>DTUTpv7y_eGbjRU_eq+^~rmS$|*gr?jho4X))L2PA`n_<&q!0$T-D9
zS$=qgs{ZC5RQb)8gAo-28^pd6Aq1d?pN80NTHoHg8Q#h8fxsg`GYW?H$5gu#pEtCc
z4E0WcXLV0Rw{~R3Uz?Ha%vFMEoL@6uEihLb*ECHX>cB$BT!c}Ie@#e$*}t=1PsP>O
zYlFEvjnSf!Lit(fx00nnrxZ=_P$ymG`sKs%C7=C#PNduLm%5Krxl_m(V-SJU+pR~R
z(eg(oy}yYcngsNbYSyWRo-(l{LR}Xh9M9K`qQT=xyuYXRhl_4?w7e>5L)N&O5u6eV
z9DBu!2EPvxi1kF?3FJl(;j(q<>qS)^XQX3>ER*roW~x-x4n|k{l-HVQ(PZce4x7m;
zjrMIj>TUS>1?zpm#vT*)IZkqv;Ez`x>XMA5FSoV*1uOmkUVw1olixnm4EW&z8*N{t
z8kV-aK5F<n{H|OmBw7Otdf4FJTZl1p+DsrgeigQwzRly@Ij`GbwKp=rVK4A{=6)*0
zxbHpd;qBdfd)v~Lbp@K4V}wQ+j!`J468>kq51x8B^VX1O_IyuQcRBN}M@BkqOG+jT
z(IOMVNX-@cYbD0G>!QD%gFiyi2=?vjgBD>p(=N%pZe$yNwp;&3HbTk?GlA07L2}uQ
zs+<I;@2hgbf0II)xFBkTl|~;t$e@|4`xR=0)zwyDWb9y<pO3(Rrbj!8I<0aD{Wp4i
zK~zqwiJ`4d9~C{VLY-=+pum_v1Lg+@$iuz2P-WHTv0y-Ooh3w%SkvsqYu?(PH~sI2
z$wDc6!n+9e71MXW<df^&R$#Qen2ikrArX;8oE-)UNo+?);`MXKO1mc-B;hvh`Lpi#
z)bX%LEZV}lI?Px3C-)T^T3Qn?B~~!Is0H(lsDcwi<;pu?Y^-eW3gmAR`mk*_Gw{pc
zY0JpD%6@&c3=9M=wY8vkDzrVI_g$^|O>LQn)MuWcK~Mf=Z9#jp#x+K<N?b|xWs9rH
zedNz;r9%*uzfkLuiAEdK{r-u@#ZF`8G$oAy3f6q_-xtNWZ-c*0>TB|SQK<M(@`>xS
zxWCNxEL3R|UV;?){ZQiGRIy>Eoj`P?`Y)wr@N*W?eXYM(`<OC6V(V#H%wG6sRHCM%
zMZf?=lq>*s{^$5EikHXcukh-xs*|i8U5DFXV_#z#&v1+og3;wWJR<g@*Lrl_{z_j@
zGL5iD#Ug@QQ1Ei|JJM(BBefI-U;6x>os73S11i_0th74AoiA7wxySLq^EtV)tM#uP
zRiDNkU*$5TXdv+0s7?^R6T<fY!G`MKFRD!spB6CwZKV*i_TeH^rSp{t5O@$X6s)J!
zdu7x26kxD$lTo%%E1$^uq&83-A65XZV$_C8v;6@T8`0!$$HeM}c^lV(iqKyoiSA%s
z$sqnOo-N-LyrebojjCF5tM3c~pc>g<dy>OqUCB0_(d~IjNWf`NEJN%~vgcMT=_*y&
z>dHIj?~4)9%yv~1Ih_&wFSR4;v><uqWeH`|RQty?E@;DD`yC_!5WB?CG9K8|t3CU*
zO-bv=6|N`%!=gF3ay<tF0QmgCyv5azUZ|DrC(VXdHiJQRdWC=O4nTznINoMbPkG1s
zN_Awm>1JiRaxkCBe#iwMjDiBkV{$b%Jgd>wsYe`aEjg7Hoyh*o)q+{S`@~hyW)1UL
z>4ms;G}B$AEmaZ|*xX9^swF({B8t5l4P|E}J(e~IB;ko$Usf?)7*Pe?*T)O`J2^T^
zct49HPmc~?7Gx80$5Oq%jbvrO_EvSJIW@1R2V7yiM{JVnUzhk`d4oec3NQOz_Rm+B
zB6iUy0pZhAV(u<b;j!{VrzN})0BWRx6L9jWdmD*f(ky^kT9tg<A6NiQG2xWDMoq+X
zew){3C~nH^+&ibe@#I@6orsAcnd({TF_{#X3zMb|PXlkdT?SRUq8d`@_>WaUZX~il
zO0+WM94YU|rpZJbb0B!yM@G3GyQK~5Qdb?6VsbC{8aN6AZ>8_ttTIcxH;mVmZ|~<!
zVs<sAHqmNNDfJbcM9=%_1oh3I4_aB$+3{j09Fh8P!1R-_2g5>gXh5UGZ9g@kljGYm
z$<T=O!$?j}+`HWv_d1Rg1b8yS2FkgXn+$RBAb&O-ZOpep7bF??-(9!8xEe%jnyd}y
zQ{cL-;CPJc=YzJei#8n)f5r2=plC6EqCs2VYfehvZ3$V(_s(>)rJBzV@knXx6!gB1
zQUuy`+csPNSOa&A@nQzdc-dqc#!<xqm#yZc-z(TIoR99{u4kVHTXsM<fWX3HORBX)
zG5Pk=N_ijF2ozbxE9@7)7c&Ii&JRbwfmkagX*K<8`KTz!x0?rduaA9)YtR7?na4(}
zy#VXysuZ9ncvOea(SudwUDeMpm&P^HW9_=+?AQ~2c7s&Z{}ZebHoCHPh!CI$HbCQ%
zw)v9ArDI@|P7!9tnOPkfKPwke96!!jxFz5ppM(4+rx1l6A1&=ywV+@ShftLJDod1y
zlK$#|6oCo!Ttj!bv3)iM15VP1C|(B_lOV@e3eX$kUf~7b@knCJ;Q|8CV~so#^5d#6
zeMLn-B&lEVbXfwaD@+ILV`8Ny)K$hanG*vGEu#y@ytvM&pYWpYD4ME(e5XtPn388K
zj&5ts`1)skb@fl-sk8N=YPPhX1HK0~LbgvA(XLhBgmE+~d>P?FQ=X;oT$ZM%I?CG+
zm1+-A;JjMPXIDf*GR~XWcAEpIy>L@rE|&}9W!IS@H64sm@6y`o5E7ekG@9s7vYVSo
zuj>z40ednqOB8xpxvIHcujW2;w-~x#Z8<C!+;!%|fFJR?diT7(!uwctd23Lg9-zT9
zfQX=4N!M7`*iRG{0+I-ZAX&?@=*MI_wqU8Miidd`7?6<uJn%nX!PqEcXJ9AjemQ){
z7ZoY}g92^tdq4VlJy9QUwsNW!jit;7qowbGqF<HwDT#CFb+Y@as^1~I*mZ2D15Vmq
z@4UzF)K81{Vkry50$TR!>|ECVT6y?})V6q`U3Px5uGpg<JuC>uV?0v@J6vtV1=qrW
zZ^l&pE@W^9s?23+L1Q;Ovr5Wck^6|OR_sXt-47_9kEib1JFoojJZiA?kFA+pj0L)6
z0af{sy~!gm7pF6R?!~m9(N$XY`nI^_W@m4Bx8W}uaU5|MHjz)%p|%+W4$)9G?AXI}
z#KVhR4*U0G6D(dg^dn`}NyiH2XTs>)xbKbpj91n%a)e=gvXGoHsl4w<b(HnP?Tldr
zwdrYTBASav_00&=l>uX+GfZB_7NdA+>D*|)<|L)_|IYryPv^q*u|sNK{1-(J1lE=N
z&X>j7dZHB4_7?&cTFS5cic5BGn)k%a5Wohw&5H<$k9&%wkk06k=D`;&{O3;lTyVR>
zfkS>W$0-qfk5C^@pP`Qrq7uRRXk6>%L_WI-4!B14TY+zb(#`fV$+Tq7W78PjpLlPT
zD5YDSkOiAT2Z^$jHV2UQ-ur|L$#3xF^sbp6yGZEJ5a0%8=(&T$*h%4+%ir6Q3HE#q
z{|pvV9mJl)n-loo?EyU>WH}+{j^{vbe-N^Q!J~2>3+(DVaNzA3KVXe)_uIta$KrHa
z7i#~pA!H^KDYx`?ej^3w1q*yRSnA&j=tqKC@JeJ`-2>1G>y74cy1!V9O_qGd&nk|c
z?hTg5ig}Fp9dD`y`A@7M?!24Pz)&jN1vVNYByHA>)t@*WNY4v@jY|;r6bRWIJTGsQ
z3fK4@>DUG7$ip9Gx9F;+rV?}Ru!pyWLQ_y!Alc=+xG@)#hX3Htz{rT`QPTRgI;on8
zoF#GR$KUSTiOU-Ib8ImwR1aBarLarI1Mw$Xj(_p5lxtGZZ}-K~`F+<q1PR2H;Mp-W
z+o|AS9DFcXdK&eIhLk+xzkPj2he6=+@k08UGzr^#HF)aaI3O)+_Azj6boEW@3uN20
z$^Bb4IlQFCIlNy#96-aqeCULRf2Gxztgg7YA3S|T4GX(~CSE~IAqne_R1ey!g5*Ea
zUECb(R=s6O_V|hK>yUep@a3|_7u>Uw$-AgD24DA6C<7J)<W}Ed{og#D-?=I1P~G7O
zDLm6X%UR1L)eMCms~MK<c^O9$q*0A$SvV8Zh$8w0?P?wmFRokrw+9z6f54zteD%Bd
zdZ5R8-c`OKx~*R#qBGeFN>0I!l~+E?>Sq(tj<3IbW3xToBzc5m%Dg^_wo~z~Ar0uz
z^oz|e|Fn(>z3?gf!Xrvx=Skdm*lmE?O?<NSMpyo5DrHG|*=EfH$RlS%psL5Jc``m`
z^4iu@U7$#D6QE|!NeqeC!i!LFWy?y5rMD{K*?mv;k(hG744v9U?$+0eD%oD&xB#y~
zd<SjHi<<cQbKG)bs%Yy%m23{R*xN%W8p;qaU6u7U%>I>&^xVzpuITa9YwupFtLwsP
z7VSi2`tT)8G7YiwqMMpJ!ya#ZHUiW8yCJl*(q_|fas78t^JdlIk{>sivv2Q>o*nIn
zuJ+Hyl9~+33OY~oXP+^=GG^4A&sM9hABex&ikU^DP5T)F9bWBj`YL66X%T>~a$Y+f
z|60zgw>@qgG^EUf!303_?29X~JQ3Y34(EoHHr?ht`>^7u$;~S7PY1+R_1d~HM~+X0
z$BG#0-}Fh6)F4j0xKkY{z|6_xZm-soE3^qDDX&3}`h#pr<B7c=*fvo`)^ZkSM8(7e
z?%07P>&uOBbtQhN{)l4_g%3eurH#92xSbyY*9Y4lF)!f)`Yx-DEvHdL*PCTHrPbAg
zn@<~2vSj|m0Ou#+=7I|QZpY5HwyBGtctcm_EztBhpN482cvu<0>g|mf`*JNvvs}w`
z;sjFPeei*vX+1vG@R=99N5Ey1yLsp3%yCe$S^vL?-+xt~<q}uuxmgq}RO@?ADz-d_
z3p#Jcra}NNTi!`y$V3sGx*iy#9<g^@%#?c=L|^$Iuh@F&#zkj3M6l?TdLNdzf^Q|^
zZgP2z#7#{(Slg~$H~fY>Nj_pZ{5PcD-tOyb9o8*7?k+P&NOI!k*;+C2asmiGp3l|G
zmgh&jv13Rgnz#H>XkMddH#SNMp#TfZo~YVViMWweu=#pgV-2d$i58ej^jX0asLJ6`
z9Hm~Tt}{_~m{n-;-8kb<zQ!jn?kv>~l|yB7)nLmbmgalBd^$4N?GxYqT8_wV)IApJ
zv@=Rbbbsi6Xk%P+G<}w7)OTLd3T%q-e+4H<4rmWJh2JzDg_}sW?D+z44_Hk^)IZlB
zcusZCKtq$ZhmhB+IcOS#u7EErX1I?_IN`sWU%{hYKu{tpQV$3(_i4!I<xFZQK$6_R
zMmR0I;Y!aR<j2Zn^B)4R+}NuxFm#oJDw*NV@iWC$2XxSHq|^tK7xeOD;9)5Voh)){
z4Al&}2mogqbJK%8z1^zK_*gb0WG6S3Ji=T~67^{x+`{;FIJ?|;egL`I-YB>~asB}w
zbJ=p~4jw5-ivv?41P#6$GV2>({lz4odCZkWi7wmJumj$`nze_sLFCZl1K>I=>9;zB
zN~X^C6T%y*T5|B{X~#yu{!{?SL$@RxfGUI%AuuMx+J#azVE?<)564FY&7VL9-68GA
z5|$ikBf3ugl;mnWo97eNTJ0tH4)Vw@XAwbx5q%{Ak4og_>2gH?ko)x^$dS}TYqoa{
z#Ccwwqi-}Kp}FDd#}-WcJDmyz?w|&G-&KcVCb(FS`xL(;Tk3AG0OKyV$c6_8^IQ3U
z;JE|fK@emUS1Ap5g?<xev#PV!F6GVg_hhrG;=9zFnIj>WislkeVJC`G?ZA!I{vC(M
z{hgz4&<6nfB;oVySpbZ`Q7H4#6T4w9FTDrSJ|SW-;A_(LI}cmR6i~vW3`MCO5btDt
zKKI`^93p#vE4;YpMSTU~cEC5W-m&hgtCcSU1ZKmfgZ(#yl6K(4Q_2Q6)?|d9%Dv)o
zm0qhGr^~@-z30}As)ile=VZ#g;a4_jcp8cYIkq`X^mfyB?HZHrB|J7pQ)%(4VAt9_
zE*J*2KTkQK=$LapSMHwm?pvZfs{)*Yde*zXSHt6%>25i93f>%6$8SgcY_#GGn!6*Z
zcoXN_H~+LjQeOEWbC}b+##J%tDoT3lp>EIQY}@~g2<KXr3*<gd2)1>EGpoftGqQW^
z;Ix^NpXZG&3FU|O-OPF^>J!$+M=iL2@tqA{r~4J0rX#2uySd1Pw2ZrOXdpgLB2)f>
za5%C4?oAGdrVu*}49fq~XU?&oiNXM~G(*(SmPU`1)^)*?JhtL2kNMUIDXgkd6wvyG
zy974*fdu{x6JfH2MTRMb)8wesdh@u=l0nI+io+-T@~|ow?&Np5!lR<m^DNCPa?*#c
zC^($E7Gsq{0zpr{vW(L>`ExekL@-hzY+}zcMt&v=)Yn!YPOy;9t;XiBUdE+;KMun=
zOCcsMIj`M8frAAX(HFL#4&L>n>ddQ6aX2qJ-yZ6E^y<OWjH;)Mx8LiscIY&W0xu&K
zC^$w$Ju$=|s>CxXreB25(QG!z-?T_4;vDs-;jr^<m2=!(a=xdvf-$Q@Bg{=_v9!!d
z*35?v8aqskj2HQwB=8?q0lS?7@&M%}f2?vYS#-mj!0%;ud@suj{w9m6t(G`#>Yk+M
z(TWm}=Oy`4JCl!03mjisqi5i%eU}FTqb`A@6tib6c#ENwzP^#UrG@cB{5B+jgSEtL
zlP%!nlpfo)<7LRr+4D~9s||(}B}S5L%+LY@Cpsx^<U|Fseyb}1VJzV@%ySEPJ6jct
zmY`(q#x50HjsJc%Ah52E!?*ria6`nK5WG1ouCKti<9bd#L5{}Sz9J$sljySb6+%i{
zCZvEKIB43^)>iQMFN9Vd=j@D1{M(y;gL~wApG1EmmlwURZbqVuPNrqR@+Ap=5*M+V
zOnm=Vz(;s>JXumwjCy9uZ`{I`7IaRl4TPwIn)9=wHVaJ)4u-v-PhsGX*{`chxxT-L
z1aR?i@48wFOd0WoATd~}Y8oIUe;f1?dOnxs9gZU#aykoG@+0Fg$M@~<Ga0GfkBHs!
zZTN)1=vA#j@MF%U7!O9ddkvM=!3aS)8_-6@B4NijYj7C$%QS-WPnolw5-&dA@!Yql
z5Z~4QC-S{EONCr2%Sov2bpE-0(Cf{<WyxMwBxxGPrY*hhW#HieWb>=pcsyCr%lBIS
z`#n7U0%Aq?+b_kNU-(?1v&FiFeUWqhJfV>{;aTAdKg!IVF<LVg&o7pzlh_-^^meZZ
zds-Z1uJ}O|?&*rPy(LP@F}ZfJVj~}BN^Up<u3Qn?N@5)2t1&W*ktuc9puxBxJu&7#
zDAL!lgfP-RET?r(RK5ph&aP;I5_5pulf*n56vF7nf`uN?zr0Y>1*27@pcMjEku^B?
zs5spQO~YX21vx&Shv1G%SjI4qbima$Md|n&il!A2b`q@qRzqNFZcZm`-=ZjC<)KZ2
z=fb}i$iVO{C?N3zmv6x@clkD5dBq_Qs(fM^bjmOO0@jU~G{fDC$@7FbQSq!1MprKI
zq|PPj+EsgR)iUGtOXlZd_bqt4BqGqJyhijzlkkMjbbvfYcdV?A;QQA^Ftgq_3I@Nc
zt!`v?x=*+!KE1ou2UooCoQtU>R0-c}8j;T@EDyBuO^zsP;uJlwuR!Adj2Cb`Wmj#1
zhQ@Y}h$`+ajbQd3$3v9Tx)V93Xg2Sp*0(5qSloG>;O4e3J~bJOz|R(1{?%H7{M0oQ
zUFZwo5U*jMJ8|X12EIrQVn2+=iN?BA;~Q}B(INy3K9nz&MK&QGoeO1ya|(qBtzKaV
z6CN5e2rDrf9?Os@+|7<tHQf;I6W=Mu+XjBEd^*2U22xjYe~!#Mf!i(@Mt{o?xV7IO
zJK$<@Tvp3piA#YHly?2%eD3#2{fFhn3a))y7=c$*3pv0S5H3O-zwofCGOB^zj=!yy
zy)mfbVLPax|30>k-O|Bgw0t>%M$q!~%D`8j5iH|ZxM4Oat=0xfl*7>dk|t7~rJvt-
zs>rN!2*N*m5%5p*|2kFtodDH{{;;9`9qe_}o?5WiQcu^18Ck42GL?wcYP;dlcEp}R
z4DiUI@40)jHcHFo<04j4lDKd!Hjt5)fS^TNj2`<C(Sa^5X=$~XgukEdGUs&D;3A!j
z8!qnm9+D72Jd)rSgyyoB;71H>kH#18dhteK<E2acp2ejdkfm&?Sy-2N_=H+C`Q4MU
z99A7ArI6d=JkYRhT9L$+c#cJHROs&hcvLMLJUV~q9&M-?OPV;C%Pf~T#LR5u2i4u*
zde-m>r7G#%7N%N7q~@maSz6Ve@l9W3#rdA25Pt1?Dk$mX$|0h5<dnsx!ipvmpK0v<
zyNBai(BIj#6k-d@aw07&3=w}zuADdX?jRB*6=b7x?EFsWW%7H}2h)ud&AHHR)FYSm
z<_CdYP6S(Ll$xn6j<qfUcBui^<ut?IHPJa89fG#H;v*R@o~5%CAsB$Dk?4lcbjZni
ziRjzgo4b5Ol+?z*C9rpjZDiJum3|^je=BkZ{bEwAaF(2w7I(g6GbrsuJ9`Eh01XLY
z&OrcPm>VQ$IoZo*$D3bQ2FdXExW@g=5+LT);(<UxMrOqPe1e4a*?@Jfs><%Q-{=|J
z<nU}q6%~zyK|l)As2dwB@gC?fy_KEy>JS<I?=L+wIEC+m#cp}ehmCW*4_;Hd^8ECD
ziO2V`F!SX_x9}=n2-M>EZ^=<9M*uZeCjXTceFeQ1df4oc%(ord7Tn?LpF~Bs|FS6u
zPV(qfnRGfwF7iZU6thDT;gwI{Ve8jEY0RsJWyCSw-x`1HV(!mtv89AONH7nz`95yS
zRJ0p9pucQD-niu%qtOm4NVjNFqtP|KWw+zR&cPzRI+BVynxaWP4`eJt2fiKY%Ozu$
z4*?Z!3X2y@?b#%qw*4(1s5&QKdAJQ`exrQWxL7^_jOFAwNXg!WK3Z;(1T<fo)mElg
zSx7~fA*vLd^d$uJ^7-t`_*1NDw2S}l@V%K1_wWi3)D^pW$x`RD`jBNrDN%w;Ah;k#
z7AJ8!qn(5_l_8g!uccb*zZXIP63uYQU6JcgCReG@Z<`1;iX3ES0(IaCzhDL3sLvYy
zie0KhDjolTBjH}f^*g^D7c`|$%H1BG(?U1nCtE<=|0-PT0|=dROjtM;XW{inUs6ql
z)2$3GH)=@Fj+1e7(Umn2$?BBY*~39BY9MelcufLb6UrE62}8Q)`W48WaJ&#CJx$93
zVg_9ygW%tf{fi9Lp5}PkQ;IJB5sTEJ8Tmi5Ol1p3MvWmddmX`KiMU~AXCFaIK?aGD
zqr)$!28wi{Bf{iqa+R?z1r<PhRM&{lb7`FFahB`zGA1KZCi)S)gi2rl_^0#}&E&E;
zEos{^Yl*>cUI9A&p*tW!{9R%lw)^lrSvqPjRxJ);U7ncNsf0LYOsYaYgSZOlnH+{;
z?V7S?bPUt|D=w|e@}d+S9FT?fhk+aZ^f)4=j)&fyQ7+SbWJ^6X@ski9VEy+z5d7p&
zQ;3Cc7xi6%d}P=p)d0Yy|GU8s=}!2I{zYA#ZIMhlem?!iO7IW6L9De~5Pra~3fJ^U
zi{!I4bkl@N#=~#1LE15YNx~Ykbmu9*Orrg8`a@4%mzwI4zUXWe3j33MU>nN?Lj;J*
zj@y$Ki$rfc?9!<{H9v`9hSl%P*QlUnp&>!vA$*?^+8u|-(bjx)#T@e$9!eTQ0wOFv
zhct|rj5K^ceNk?*TvFFjm_wd0@4)M5qV5;5JH1z16b9Z=NEgNy5b;(Fm@C*9A~Yj9
zhvx_@KdgowQw4!XNAV_P@MC-Wc!~4g>0IHPzi_*D9OO%=H_?K_7m;P;SC7^P1jJ-m
zB?E$ym(ZW=MkT}&bkV;|cue$=Zyx){@ax8S$`Ky%Pd}`7wcsEC5F(C1ga>i^G+xvG
z4h(|xu!q+=ms_>4XLjS8ziq0)Fh;~ZZf?J>9}D|+3^Eh2<4pWQ5>kw;9Ah|Md(fDs
z#1+`sghYMN&2Uf@_uq4;B`eum5}x&;e2qJ&SQ_hxo8JFdzwnd4y%uf_4)PU(_u`hb
zo@vWft1uhXA#>=^p%Sk}&&^>DJe|c0UbSS-H*sHNWk0+}4=SNYXXmNd&Oa*QixPbL
z@B3k=Vw=3iiK>1#3~zP2><@%MXyYmO2jR-blMGz%7AB;9!FRiC!=sXo=?gy2UAWl4
z!IG_gj^9>%G+LJxHz5VD=W{P~cz9T&Nz<^!36-D#FV!UfHEN7xish20_P2-V(;uTh
zf{x1O+8LRE1Nrmk9)XmM)NUqDF6Y`#J(+#Qiwn($VhVy<rqE12ecjtiY+#t)-@%kN
z<&H~;rR|5xPHC4dqKb=O^Qcd;LxhP$o@j4Gc--!6WTUg;5j$mh{F$1}c;}?1#y!C^
z5iZCBPBRwz!w0(iRegrP;#VfVIfj8$=WQ$GKgqU;J~66A&Zrw#vYR)HL6O%{rhX>|
zOKPUsz?i=wRY^@#-|JlgV8GU6aE=g}L_>rI^XGfE3`aEh_L7lRkWjmZ&teu0z0)jF
zS^bV!56437Uqxg~(=Mh+?(x<lMQ<v~v59sE-!!Y?1=-Vn9ovSI)CLJZP-V?361H^9
zWv$@~lG=vNSOQ>&4fSEcvNRt5;c%zQke}jMOX0C0%V8**lzac@4}G5vy`5HjjY<>)
zTtA|sd^VyNxaA(3emCuvcQ8r{hr}k+8{N>7q%dn``GMp-Nvi8EUjOD-1bwvJB}RX0
zJ8w}@ev$0pbdqAsU1u_5Gc;u7^~{70{9=5`0eVUgU1Rb|X!c~U_Go6r!8rsuF1mI+
z9DVk#ufyTZtJnGt;-wJ%4+4p`96>+c1pSJ@pR**u=D?9My-e+X&ih{e1M9t+k*hLD
zrtlK8V-;4~#wc9$7mcg}8^#{hg(z<*5jNpayqQ8b7CdzOztYrR&H*U!SpL#U$6)0a
zIteT&6<;+bT_zEous;zmyP#VxU{;u1+B#mkVB@rSmhfQ9dv+q<qdOyEv@SaK)ql_{
zi*2!L2S=2Oa7>9?Eub4RC_$pzX4aZ{&Qbkaa%t;a=pVTK#1C24z6jV}-ZiA;?IoRa
zEoxlTJ|;;Q&^XdbX(IXVM_1{T{f=+%<C<xh98fc>aQpgnzgXu`4S($h+XUbDfp^65
z`!?mG7Wjzf4@&SHS9#<Ik!m|nqi?YD;C^f!G4)^5G*`gz7okxqAO61=KoJ;!3k6W<
zW@(dWF1fI76Su4gj>6SvurY6N+f$>#t>lkI`$$GEsnV3_*vS4u#gE9@W<PSknAM^Y
z=KkvHEKt67v@fsPlU-PF1N!ZS{0|Edgu(^~?bV9!S8ZoGi;th?Xm8<-P(Lnfgyttx
z_tU`Okqcm(A!F7~OkuDLWRsNPbj&@^wsE#cPIollviC#gCq`-_(lxiXPTrO9X#6Tj
z$|*vNwN>715FAks&$g90u(n-ak9ECKC&^5^>X4brj_aILLUZ?UV>|XD`P`y!kA79L
z9N4JsgQA_TImL)q!7271R@zH~wB{m=A?8Os^Z!I}^`=XLMGI+fhg)k;VZYdHN6X4K
zsJVQ~tuZU%xmz7T_%&%i%SDd+Pnlxd1MubN0-yc*2OSq7_fUK$e2`dRUzLI*R2v6)
z;Q5{#HV#hD;2;cJXC7YD10rfKN&OKy(<_Jns~-zs=dNhmc&A4S^!%J(LyrdLtm5Lm
zrKQXvx|QMa@o2bRAlRua;mENv#2-Hz_Fa!?WVT)J>Smjjg_30BdS}ga2d@gAL}hYC
z-mf>1lsQ;2D3ZU;GErkwCc=X+)5yr7@f8#$;^5iBArtV5SU#UiE^zs}86L{U=Tl(=
za0%!5K8C~=6hJOHY{CPzFT=wWPX=F(7ZH2IxhYASGLfDt*D)}uc-G(iT&$0U&gHN#
ztTh|bG!K?LZxWfDSYRpB>|oo@)LHLlC2r1EkB*q#396t)=*Gm4%jkxbzZ<|#X=M$K
zT+iYf806OCerxQz?cxMs?v3U|`RQH>eyMyS!F_GUGtvsk){Yy!l5hM=@5CY#>WN&A
z!b^vya3%~l|8rWry#NL#ww2y~R9aP?b!<H<zd#dQnXqhOUPIUtf9<DA<FwX&E~q3<
zxO!07F+?=9VsEKZk=rmsD%#EHyP^_m(&;kIwSgDcm~Ciy=`UB+>$ERKG}Pk9dPl_C
ztNj*Zs^JtXOe(w_6D@7OMFaE*3L!+^`ODmcQdL}bd1nY8?^agl7PTZ32fMfkFQVxw
zt@cwD2OPUn&}8rszd|h_GHkpTQv7fY(aryy+#y{7TTtLhCW{%48pj7cG>m3nY0-PB
zT13U>6Pj(w@_z7W_AJst&V^IT5ylKZD-2I!{uT@U@C<<X?E0meTTj*+&~4QitC#qz
zByRWMui5fCN}c&G3L-xnFYCd^Mq0w1M2jwbC?xdbLs*%5*y%V506@_{j<6&avedcY
zTVD8moh}86K3n_pdDYO_qhLmK4PliAaa<9B7mlkEYmh*sY{sv+_ahu5NUR1?$Bj-Y
zAUDn={xQO;M$mlH6-@X7*X$jZnzA|vo$uU+42)vn00)<BiwOTR#@AhTmzk+We*xkF
zS`Eu`E=Li_KNjqUt&jc321e-MOfRFp=5dR8+p?$yOwT>|U6zdFzi$|CG}|HyoEGub
zQlgYq6$!S!IFu*uY^)*21X$4PcVww#uLjnOo@z<7cR34PSoriz-EfNxk#P<U{p+gU
z&W>!O&Cxlm@VaHjRyluYKjIE$E_cFjA{68!F5k+8Mbk2K!BK>A2Y-ti%@pl_Fv1R5
zK%mxI+|6~D4)mLNn?YA~S*bnYAb>3j%D24tt;t8M37x~XSO>neXtPwt>y`VDGyzIP
zcG~m{uvVAG!+|+3BV#&V3)%6yZ}Y1{GX=a`Are~qVGMdhglnUsSffh9+W;=Ad_BQ%
z1E~5Q!cLLsO**JS{%66OS>!~k^jS2%u-&m{B7-<;7c1=-l{4a8n*H5iE&ISanx5GR
ztLpDC0vEmaBTg4-h;4hNeo*hO91zL4g5SlOZ^Iyq{NI66mwCJL#PMa9iwnL*&5s(2
z2Nn+Ib<?s*mjPy?=~IQ0oN1{I%{U6ml=h*9hK8M$8_6^-7seF7R?NY{FnoSjE-qLs
zMVcb%8EdYVtE~uhT*A1S8E0x*WS)9Wb@i~56K&?70SHS@Z(*K-0N~jsoRKd$x7xUf
z@4k*-x@h~>dBz41bBXj|C|EZ1CIS;kIR%B_l9GrjhX|=)n|Vu<mj*#+R}ec;O5*-X
z6kbyk$J*95Sf+3YyyVaMn8fXRQfr%vO%(3y*ZvtMK4>~+607^+gbTr@oyV{9H)DOg
z?518EkZ(|5oQ)}`a)bw8zOY^F!NiboLKyjfu$-RSCJ4F4%z8u>I1g9w<BQl+PnBdz
zOL<{~bv_P``*DU0(rIwbYJcp<#MTLafDPIgx>kA8C#i*%Z=DRmB=X&5CwHD<SqLYc
zuu0<9ehit$kAx&7uy^0TJQ(%HY65E`9^1Sxrq8<dM}dMLS(^ekcdtdcUs{&G@I`0o
zoS82aQ&gS?Pu}cbjS1CsrSKs&IvLfHi4uwy1w=Ow`y%2cM%%D(3T69#p{6E~lt_XA
zd~3wCa0sKfACvZwghkAB%R3#L`*Ain-6+domTT;KW7*y0FgO}3EFTorj|VB5fv8OG
z3o3*sc_A0Dt<V3>0|m&4R_gb>rH6jZMF{%?LDI<I#)HBShc5g<BNgKdiNgPypJ2UB
z?e>5$JQLs$UQtAh7vP88AQRTbDH>?BA*KJZ4<pxRFGm;!(Fm?5(1^c1a-=KYXRi*9
z(7utwZqoSLRky`VE!l#evXQH=DXhy|-~s4B{e=6IX=m3b*`cFj3I}>AD?4s$U8v~<
zap#BF&<dT*O;%UzZe|C7n4L!H^lH3eq$kzS4S9N@Ka&D72%*4q5C<Udag4OyBe7XH
zEPNxRZ6D8N-50p&JFA;h%v3(UinP6=3e36YsB7-58fV4B7e%@8^b5|AUr+4*#4_|(
zgT#25eny6PFD{_?gm?Amm}C&3M*mNs5^G6^KiLmi8uRdy^~%33@EB$H(ORA<)sUH<
za<W*k#o;1MG#Fn)gqHZdI6BL!-aoGxDk#&2S*wpGL8qLD5A9-LA;l<5zA|-#V<WT8
z#I}@wYf55f5UU&V+g&T6?h<kTF=<|tp5I`wMRBXDCo&mN=RKjB!TBH>3A|l5M>pbD
z!!p+i{`_ZL_4f6c*-M2hViBRJz0x7CO^;;7+zPWKTfjw!cV2ZSOm2g`Se*pKWtHjM
zQze5yewM`FAt#?YXTBojf8GxXV-LYZ^A_5ZehdC9-UR?BVF5^N7|_o)<AXr-tkH_T
znXX>=)7$joAQD(p{-%<D$td8EnFvg7rE*wzDpS(lTOvMQpi86)J~3XY;M9{MP*U0t
zu4{9RW@NXOdB5Hhl?!vsBAIJ<8LCxov|Q3gQ4o31@SSSKsKUXTa|-kL%7!nXS4iAi
zf4Bx5?T?m1K*PJ>yd-zh`YyO>Ara)l(`Ff&)k?Xq1vkmXM<1>brZAyi*ff|h>AZH7
z)>|v#JmimjU&_rTViW+;{b@zJ??G3KZiXpY^XW^VyuO4uIB|31Jk)*{{>2IU`X*eX
zK^|r34OLKiDQdOFY@}G^0!Wdxb}CSF+wN5Jl-rH5Lk1ie$OqZ2lhL!V%sNz;(htu~
z<4ICz8IN7eQ(#8c*iEBy3K}uLLetPl;|rMM7f_mcHA4k%FMmR36oZu_FAYtty+WF+
z!cuJ?$&Ka!ULJeh2*4*mA%hPF2F6>i`w!V~_a6<rA)g&#1$&S&M1mO2H1UJacUCpl
zH|uS1c%mOyf^S{BcrEQd;LqgDQ!T$atW$PAIDv>BE@^6lb?Sa%tgF(OxgAjj=R<mf
zLVR>m<zWIBMXLq|qyGZqqQn(`IK6?ouVR`?jK1~PIf;bmQw+!0cv3Pl5(;|0hb@Yp
zriO9|=R96U(5$4aQRy2oM^i8(@k|UO3jHw>N*4Ye`IY%$^m}SN?V!?bqGqf&aD$pL
zGL|HRj6bp<yV0YWZzRLbroAUz7A55@d>UWAJKZ7AT3DFhpU?sY%<p0sVKRzu^j>t^
z_l9-seQe!jcc~kg)5>hCdpz+(LNpj^*SfUnWt_IX{zFmK)NFmJ>dSjKz0*`fCDl!R
zEX1PAkTzJaw~wrbLh5~bLD6Wh57aiMUtN@U6xD+~yfqW+>A*_V*;r<@vS)I8;os{&
zs!ISHH->LYRl(89_%cH6SntQakq~a(eKpT|6s|WCl8+EG1`;((bJ%=7(3Cb?$|s(~
znD^Pw5HdoYIFPkWjOsim&}LvXCQw!_c5)EDJMAdBO+W^iVZ};rK88|hfDJi*4-JLW
z%Kto9W_RsX@(M=|{?i4Rlev%=VAMe(yhD{FcO3$kzo8zVuAv%m8PxK^<YFw2_%?w}
z@=Tb`q6ts-j354P$N4h-f!v?F3Gvy2U|lIEyBPLh=^(IP_GK@f1pmtu6SB7{lqoH9
zs0@wlZa$m4yDg_jUh4@m<cm_@HB122$CPpcXa)`6`AI8}9^$m_bN9mRiouBj+#dk+
zj838<pjG$oc#EEWoQWRGBjNt9T9KnW>c5$FQrKw*LaO9^M+*|OPOU)#ED$CIH4|kN
z=Yv5RG4>COmvVcRLW2VFT<0X^{F2%CG>J^}s<Qy()g$mzcEdydc~@#u;<3D&zOlPy
ziIi^)38$AjaQLM-v<DWKi96YOeWD-HNTQ6%pu(G67L|`3V5na6pgRaZ{qtvj{)en&
zr6FOPls=a3=8g_UMnoew`ghhZ*Iy4?41&`sdMUZ+XsMu}D`XOyD%OF6xJ^6A=|f>y
zIND=>H~xctEQj04R@6gM0g@20#mc^7tEA)SMm>nkp5G9NiIq<b;Hzh5LqN3t#h9mZ
zI{Y=V)_+3~%2<W#sSFoJv$AcvfA6g~3r_ZGKabvsiVUf2eX>k<ASbgi#1vTDwAoaN
z9p&QFUo~8JhOc)$n|Ho&$cRm#PgYDl<VrofbIALN4;lD$j1o}|=N24|mA<&**YtZ`
zBvY;j^E-(XQ>sy;1hch!HtPsm{#l>|#jt02%6_}%xVuH>Cup;DYPG(^`SF~gu#RjQ
zAE^fs>F(y%4ynS{^Lj>vSf~LFaDBX_81pg96^lX?Fc==&U3V$zXo$MyeZ{?W0cKs9
zJfGo;nE_^%{n9Qj6dzY10rigEZc`UB+j_bgwbnO!G8R6Mms~IY;1Z#fNHl-b&_I^T
z$(H`yml~h)maBLHzYO2>O5uj{+O|uBzh^SqRvR1ZjFejOi~gpjxBjo1!y7E~`prI7
zi<<4qb}<f8c8lX-N~~V#MAOw0ac{YI=h~i>a#Zf^Bgc0nM&1A9YC}8%JsiCJLj?yd
zqI|ItCjVQ)`s>xvr)%py$omH}W4C}Q3A_zl9*pKNMJbPd8v9AZh*Q*giz%mCP-~PN
z;VO*nB}5#a-A_>c`frTdtj&hsMPh}&#mPMu5e@)(g{)||aX-N)wczh{s7`yGx~SNa
zcJMXE-OjQPF<9vrIK5Q`v!4YbV3%$6dC<4TNMNEedET};e5g_aPjcS*xvoYr;b&Y+
z-Miv_dMo_at|SGJr2L&ie%_juKe}O?RC3|O3fw8frnEvE(PdO|J=go4{XQr+lG^Tr
z0p?6^uS(&{_tso^*<v3bMRNWoWLIVdzj>%GmLt%)AHAXP(?ffD_<l4k=G`AK{?67Z
z#{v<k`I_^;y(-FB&-vv+n{uV*NRH0pSXWOiEauywaD4hg?2amvd(9ZYpNpapCPSjY
z$g2LdZJgz(N^!o6pY?l0<eY}wT5Y^%`kxpL-8Tu8%_Gtm%Fa)q&-=|t(V$Kb2e3`j
zoPtl*g{fV6OwERdq@Y(RE!CnDQUR(2a7ZuAf6=!|<^WAv)JXjIkd2NSTFTkf?py0R
z)$gsEnQAR%ZmI0fLY2ts?NU}-IaA=+Bd(7!F2_<4{Z7uPAOA%d%+FI1dGl|?UoUbZ
zzT`H`osf*IUy%$Wu@`iEd>#5nRd}<jZ1shOU$@z>J*>i&G9O?PbP0ri>>EWsVg?@9
z+tt3CV;m{YMjb$Q8tgLTN>uIL)JbY-nLu2&75M!<RPkVmwH3gl%cDn*Il}Bw<xACz
za0zMH8~7TTf9;G>Sg3B%W(NRh(XrFgWFQfsFy%~?4Gus%kOU~>DSU(P-5o!lzPu#E
za=3pVNY=%wN5!OHg^I`D<5snkMP6Nq(<HG{@lPHIwr@f!NulCd$gKUDd&vyMovy_h
zPA!@$h3Is?YSA8IbS)wzdvnbxaj>IX@<M#^;^M3}%hsM*ijIH7q(p}gWo7;(X!O0~
z>eh0NHcRuVRf;(TQvAN0#1q+vDi38`>#TJgMY%&|z9^LIaS=4b86(Id3W=47+DwTu
zNy`4q7Eany#=c_mV$-J^)>%Aw1HUdd`}3#o+sYU1CLVw5jX<Yyw*lqKKZHiPIx&9?
z``H;RabKR%>dMPMAVO}Y(xz)D+)$=8N!yF|j&*yJCns0u5vFpK5}E}qpGkref_>22
zwUxdNxOzyI<M7=q$_+VKX(=7q>*dy?J@BVUTZ7eu*)-1;Q(+x>ehway@s`TM7sR@z
zF5B7gZ(BiG23MKMxm>Hmb)0sp9+oWSB;ale%xh|a@uym}A0(hswGcGoicO|7rK4P^
zs&k%+MnLq;#v%{yk$}OkbNw#HIc$DCAnB)rhw(S#?LHnZ#gO92j$w4&LI}lqk4jxi
zbVSwFykLC_nHn-3-_qe(63&L+*RKtuJpW<m*&P<wUB_kKHM07lr&+)423{oYSY(|;
z{EKUJ6P2E>`7rIb4L<nxxtLDT04}xqGSy|~i?YJ%&+64keC%NsXS-h~xx;PkQ5ZY>
z;o-P{(*+GLmArO8@{gMEeW3$4OQLUbOJu~EG4oQpiAZxW<ALNCx3%9IVcV7P>N8sW
zw4u8K+&Bg#F8Fpwi{PB!)M)mljBBd>(^peG_z%9tK2sc_&oq3+fxll8k&QdQjsG_z
z%F&8O3At$!E}q?aJnnAFPljgI@h*mmTPbgH{<7E(*B5U?@Exitn`Q9K4X$@mN6-m$
z3H4Qu$yOrT(OdJ~J!69x{V6tXwoy1)J>nKNZqb`LYO;d(j2{eXc{y?gUQK~k$Hay=
z_G4Z#-V?aDH;IsSQA9fJsMnV1L?(3(XE$LUqsugRPG%4Luif=3->s6wla|eC(Lf5p
z87DCKXM%MBOx0|ZDOBL!NPXopVnUO7ZMUKK4t8WS*BhqzMW0|^A3r7F06SI3c^I1)
zqup5I?`(;6lY7j8eL`Zi5$B^WtA1BmdVId7DJyF2?@n#c|KsT`gW_74uF(O4yE_C4
z9wfNC1cC*3cXxMp2p)oaaCdjt;6AuZaJxI_dB0o5FPNGt_HJ3ddUbcl7d>^?=NVCO
zSlKT<ov|wlwVJ3fgpBJ;`E9v3Uv)0j!6A9Q{Pu>lT#hgY&`|@eRF$l-zZM!sV5otR
zKKYLKbDzrT;A|Fgf>87jrk;O1#?H5p7NO#yp(&N3hF?DE7NE<BOR+QTJ5u+BE$m~6
zfOwzT!j|?4vRB}r=)LV;pCI1!?m(ClxPQ2H4e9QVtWq-?DJIS7>^%2u6Jhr6|4(o5
zK@yCA2$K+nM%=J6V%V0duTmD?90vb$KkcwC+8-k)PZzl%G_dU^=1nF=9~)*{WNtb_
zHl{Z`7z?n)Z3B;zDbd~QW1~Thz0S>H)-s}0CMwdCp9K#lL!bEAIpINQB&QLd_11%?
z{J4WKEwB&cY0;O*5arjB{i!dcg^IPIam_fs!i4<w25(lr`<%G8zn(cHEm&q}e@}9y
zT^yK-75)~EYd59E!{flvfuR&C2?7Z`r0Oa-{WXNv<lTK*|B`Os60Zc?B7$5~cK3LG
z9Rj|*xRBqm_Y67D+PT<^JlIF-PclGnb$wPEEyrR}Y*t<hrxopk0HMl8i<&xMHfAz}
zO6SWmZh^O>ALpL8TiTj+7ZwTDJSwpe&x!m?7-!Zg5_h)t$$KM-(|LLnO0o%co2@>Q
zWKFN;Wqiiq7I?kE5b$-z1AU}gg38$V8O+qE+gp0-Ih<_i-om~8#xeu!Y=J<7Z}1()
zvSiqBpXujET&xleGj1G;e}&|wx4Aiwvx%M1>`AY9&A^>+8dlF}ZVAUb*djWcL#%@(
zD@vs{O3pjxc&VlzE6B{Rgdn6Iet?5`FimD{FcL*V|F44z3>?ajK44aPf!b6g!yTHv
z4Sv(8NN=AUPc<)ZvUdj(pA#Zyq!qONs?Y<))A1l#t2<%cKGZBX3ES^oj9#Y5<9<m_
zszAi)!IsBPQ6x^ZifKdek`;J9{|NM;YA)QbqDV_;U!IPs@)?n7lg;XHHR7@#^%t($
zjkSX;evNYa5)`;_eXqrpl(`Fp4AIRp2){jw!rK%Gzd8y-i(}rf>l9?Wv`A{i$@$&!
zYk-@h*tYYbC547k+Ijx#HhMpUF;e8cQ<^$sbrsVIhesIX56?T&AOE6dLqv4=;27ej
zn6ollq)cSZbz7B!s_O66H(+8y|4!$=XJiE4Y%;6ctxQ#jaWQHI7MUQryc`MSug)--
zAIBHb;wI?dwBdoz-Leew|3vB&(f{G~ds~A`gS%;u(V{u3o$lJ&+T}mq%6V9-zMjMA
zY^uxwK%47#=zVs5tnyv{-Tp$mdwcqiO?r8)5?w^mK;uALTgOGD<tt|KP75?*jma3y
zON$HUc{|va@BUPz&R0+SflYesp`FeC#PRcv>0$h~`%~!wIu>4ZV6V4#muHJ2=?ACN
z82rAQozv66gDf9-qoHrXfHtFImBVQDPSC|g791g@-^)LYO@JK}3v=e4jj?op@-@E&
zg0*@RRKiXWemb%u34wh}*UY1chCmBAqq1dQ&avV&8;IaZ9Lb!V?-LpvCueye#w*NR
zxnst?X>QSsh{Put-tt%c>eD7fJV6EoAM%DNAqp>#?KZa}KuS!Ynd%Z-6cD0E(*5&2
zW5n`V+5jrHAjM#|S_&j|-K{{R`}*<s@h9`dVRVcwl+8*c^EP?x?O2wgvCp*;+BBzp
ziaD5L+`LD6hD*Nf{!Z^J1&-bgEZ9+PUsNC6TlFVam8Mt7BvtZ1oL9=h-MR%0Z<!qZ
zq@wM7V_jcM3yDZm;jLq)r9~2ffKE{GpUUb)zL+8m9fg6{?iUG$Z55@&5~5Sv_Lloh
zg@R(VtS3aJw!LXJY52ODNQPtK)8?hjc20sF<C>1aCfheA+xDyDTW;^q4sLf3lqk5W
zvAa+salB<}G`CMyQ}Wv3)V|&p4CVxfhswQkD%SJgDsr!SLfNnuf9iVeH*%YOB;tqf
zq4<|t>|DPgEjPq*teV~=@P{@(rPBW?CxLURF(|a@9K!Wa&0x(sKuZ`5btgM04%28_
zl}_s-L|7CUZnk;5#^g#_Zcwi2xiaB5an*ym0~Q6=$O6Tr$I`j%!pk-XDSh?VE-pfr
zh3!tA>r^}!nk7~Q@n<~L%H=^c??KWc(heQ(t-aH}mEajBdb`+-NnfD9ducuBV=Kbf
ztKJBTne}8$<nwB5;g-<}eXViGF&|6YRgECEs%G~+rerT)ZO?2FZ1u31V3;>ZOynl_
zZ5^|iF0rlZE{*Jac)dndcicg4_s|#Ulz&7T8oLwC+kMD|6QV)enG_fdI?KWnTnsAO
zQC+a<fT>2zs3=?%a@CR@pezFf8_m9OAtDS<U2zV(hrWC-huTCu?Wj>3dXTva&(rRA
znfLnr;Xu^8g?4v*3%b0%9)!A|Vy#U`OAC%3I|7o^!&BJ>Kn5u)Y1t@KGc&_6F?b`?
z9mw^aw#<bq#8OW&x#MSMI`Xl+LwGlwVz$5R5W*q;=`<k0oFlAac;QU(>A*te<AXiI
z$Gv*8y1;9Ym%;;_evC&eky=h%BJ|DXoZstxaP8Uj_|5CF0ovTw;tK{U`gjYD1126`
zaMODS+=;JNR2WHm(7#4Z(EGF4B5VM@mr>DkJE$9o8t`groP3Y-qVCV@YAi-inNkFN
z%8PLpeCTjR?jKr3Hj4a*zlKjrRH)18A25CTNoB}Q#m4sBPeck7S9B+T;4T;5Vu&}U
zM$m21ZPDuS_ev`Lkl*vebz_05;)6Q9<IGK@uqt=q_m~ULs|mUx@JQVVl(9uI#{H`o
z;iTEm_Y^j)QJ?EM3!*Od9-C}PT^(1rQtqcm2nca9zF{aR!xtd>h|(6Sx9=lGeKuW%
zRT}+xq)cFAkxFMz)1a*vB_3X9tH&YmcFVVm@Y>wB+K2y||AL0UYe1PKGgUPtN_s9%
zY*h5wHehxj(6hZ`KRV%Zcupny0ghDc{yJESMkwrCM5=0*F?tSucJX|mC*RY60b2uM
z)h_smZUKHTi4Ix!`HBI-N@HJER!pF(ia!k7&rI0Jo}!Q@4Sr9PXE*Kr?5j1emZ@RX
zeL)OVHGio4<8}^SEeay5CrTQpkxe%X?y?U*&|XO|S021~*K#;t(-z}VJVb^~REV8o
z*LP9nwslHr7LFqU3NdY1^$-E;S&X)}ZAQ2Gi4H4m<qg$Q%}<kEq-z7?7MhQdMoZF(
zfs*#EYBQ>)Yfz*;$rg54A?6oc61e4<+7LCqJ{o0<GBE?+RN-ru&Yvap+_kM#wS!~P
zaF=H_<fBPfw@C&6VBCFOQIK~<FaC4YCwXXM^kT1)R9Y}x-WD#KZgtf&6T+q2nqBuN
zCnxu*P}|G%MO)OecA0eu8fev(HPx;AzzskKQ`MRsl}|W+yW@fEA^F1bxw}Rlb6Pji
zq~%Ml<Ui|=jdeZUsKb;l#CShl4T+8A0Qxo%AS@i*EkIL}pPNg9QTky>o=DtTIl3k$
zn2e`q7!{x;e>QB27Jl)4Ai_fnfAUPh{R|h~+}x}`Z(~$rdPXNz_<eVOZ>zh<kJ+R4
z?#w$xJ9et`0j<S@TY(On%l(j4OcKBAZ(>?}0WW8<9O+QrfL(5lqTl9>i|10?|I-4P
z&jTNBeLqhJ4i#N2L57I<p1J;|+STlr1!z*KwzNRNJ4FjsjTX<(4$bW(dvgk`n({gE
zV<YfiJrZ0-s}1I=;-z>LG*kkd4&?IP>}*U?irmT3zM=CV<|dVa5aJtLUv(OcN)<p7
zm_I)7*LUFG(;(P<NB+g=A?!Yh+ee{I4944T6(#&UBXjartmT!Q=PXkPNI80Cq2f%S
zp2eOG7PwxCX7+v56xO>r%ZTE>gz{7nXSyF|61(4y1#zXQhVFCVD_bHHXqj-?SAIb4
zXo7lQ^&QE(08LXVZUwlx?o41yIxtiaA%Ff(qe4($@3OO7h|vCYYrt3MEVxUD(!&?D
z`K1K`c9L)k`J7h|p+#guz{x1b`q5(w`<t%|y{h$BNljg1%@y9<?^e@PDml%q$Xc=3
zTgz1_;EnfFVU3R9RQYc%Z#){o_!sBBQ_qeH3V&cqwL|1W2tKi&J=_X0ns#;}4l!!E
zk4)rLCB49W^EE?Fv2G8q4}@W>cM&O_%_-6dwK0>nUkrP;-!lA!dQd+NQhoD*W__ze
z6(k<+OTNaD;!#nsGOu?Yb`Yo{k!dp4pUv~(N;ax4XG|Op)8IDN?wLtMQ)TL~uu<hE
zF=?FNwl+Jv0y~hD|K+8c&uI9mT5hq&kXRv;v4OPYlBwN+M?O}K0T--AFy=@988Hjs
zu-A6*OzTo8&A#pJYqdNvSTGu|QxycKp|L`HT{m74h}v^O&vm5Z@h3OHBNOb|3`7&F
zd%erUNsHJTQ87`c!+Q9KEg`Z9oEo-_Hh#Gg@%_m)_S^@C__BJPkmP~hhMXcC_!(TG
zMeF-uDF33|m@HhXD#XC%NBC)>iRo9cAq~6q{vco5E*Ul0wf6b_3~Oy9>AUr$CL()9
zZ^5BPbO$^Qgy-`hMIB>><lxk89(e-_MV9{K`llQ;ek!bGuT!m1#xLAh<hXa)_<I(o
z8d$)#!);4U!Z}#(7PaWnO6?I5Yim30Z}KyrCE-ACzHey)E>v>Acz)C0TwjN(Q;HZR
zsxtquQ0O8A^saCpL|)8hs1Fx8NyG=l)gL!aXy}<*=$_}5!lT0_WNp}ac>dx`)j56n
zmn1;`fRsa7)naql&BbM4z3xJEW#C4F0|WC%wMmq#$MCtehIMdAC<UzpUgz^0q2#$l
z9N=Kc&;c5agaia)!II>!-+zN$i(n1x#?!J=0W$NC4Io330&-h}U<HgmcNW|S5L#r2
zLRmd|Wo%KUiTWAVSb(`FUX7c_%K6QX10zT}0ET_S1xFLjmag^th{b!Zi+C%R(?1y9
z*Q>PEtw7yX56?2!b+$5YJfsLo0DdC)Ie3@vvE<8;J-`OtA`+9<rpmg?LNhnb)<`nh
zw?N?$?F!1#A(tFqW8X(T;<nD7C?8x0--`5}4Ixhac2r!a9EkjUq+V0_%n30CwkjMh
ztZyWi@s)?B3ElM5F-rY(qEut-Lx);}G|i~AbpX}!@F-N7o@pyawV7=B)1?v<6lu9q
z^LGjfXB#yx$f8U?oD-;umiMi&M7<3%QVm(}x9g0U4a`4)8%Y~=dIzDnQ+$jw{vI0|
zdoyRW4KvvRH<JTxe9+(VS`D_s$#g;pDMO`9xdEC4v~&R!@#QRLy664@2y-#PHqo;>
zzNL4Diy6V=YcpmXqORPw+dn>Wh6P89)!W%EoQ24?#M2hOAUiViStET&>K=}*;kE^1
z`5TK8BJHx95d1l4G;KL4^Q~C6T7#kXw0v1|-71eFEz}HXFCrRjl@p<+{7W!u(>G|;
z$3fM^;hQ$55!MUxUw`xy8K42p@0^{k-hdAXD6G!KlpGLG?jG=G(BRIN6cG*uS%11X
zX*GPXQ9-i9{}=Swd)FtB&uj+Agk=gbnp;}&lYL&c4<2q01alV5?E&6f$D=o=r}@{&
zooO>ph)C?e=GAXf)vbh~^MOK{(g*z+;9HEjzcK=~&CHC!%YK(K9Xl^4s=y`9+tLH4
zL>xib=E8e9{r%ltsKQ4PCDyKSHPkghRG_^DogQtGju%L_NNx*s=6kAh`&b<NX@E%?
z!%3Zca=I^rzPYlfgBxkvJWO%?Jfyd`4bi<4kO9cKb!Y^Is{Ma-=^J=`Eq-=dj#WQN
zco{6rI;7n{GmJm`;0$)M1vgX*(RAmuftkIQKk&VbA&u*>;ER$Tq2^*f`*cj5CH(vB
z+U=hYlb(%Wyq?5J7#enHMPB^;zf$G|NiaEVAIX7tYmcd4;od7v7Fz*{*tVi^xo*qy
zqwuZa8(tnR(jN{Pd#bvhJ{x^`XhWl6w<*VXnG#kuPI^#~byh=b3S!k^=XJo^W;&I$
zKif@qd?9i;F||5S-iHP({X;a8NQzh?CAzxN@1IbS_ST^jZ9tbm`?Hzy4m<aY%+Cjc
zeTK%?$(UheB4C6`65#X7(~xjIBEFS(DJ`d9N2MB2{4|jrwi-6AINv)BdKArKy$rLd
z?oqI2_CJ3+1b#&gBRF=n^B9>JO}ymTb?=1SeK|dovS!MkN*(~0Xn3yQut`%U8Z^Hv
zt2MZZz8{j(pq27T!&;+;0UO`0@m#YmE(=?5fwShb?-$GO>St4j{24tk?+>}4=5X!H
zzwv6!WmEi8NF*?%xPpU&+8i{IfmKnYJ5U(RES5Y)_njFnd7o&`X3KA9H5cgQ$Wyi0
zd@C74hUnFsS{_^SrsiofY$W4Qg6xuTy*7uI0BsXouvLH<T}WG7n__x#F>b+^QpM%G
z_x2dc>}Fg*kK+Emj_R@(gc+tjUQL-SeKpmoL&L-r1XQw{oG*|yQqdbV4!_Q9UDEp1
zNJ#b%Om9fLzyV<wy{(&zhDSe4?A;ax*5tn71&*b^)apUQ-uGS_i~xInGK_v*Y->j~
zmsV8tq>iQR96e4MtWWuob8w*iLr0=UL15Q{Fd$4;XQrmJp7%}{Y(JO|;Hph|h{TEQ
zQchbm8^<_?h3^r?2uT@ScK9%Z`(`d<*nA9<(iIUgSROh%FOghfWua`}7!L*MVG=h<
zdYa=%gl+Mj?D@=*W9kI812ubUw0}-4xmmaQZT@cU4;O(*r#fbtR#wB|_95ri5#e6%
z;shrm0mdj}*f2b}Qb=Kg7OC+`!tf%pgIsU*C0I_egOA0<xZwPG5>x!i<h<f8LNupe
z-MGiCNJrng*EMS#9iH|ZF+nJMRcv36{DpsZF`^Z(8!q}eA!gZgmeNL~T%o2~x(i45
z!fMID$s^rbwwDx=!%ySVM72>WRj8uq@Zhkr9t3&s$)K-Sfy?mrE~dIVlBEk<>Ykt4
z&dSh4IgyY&A?gq~6_654)PXD*VDrr)pZG*fbDUEsO4KULNK^@aq_cPZ5SQ8i&ov<A
zGe7snApGJx(~)nfQDXQuqjMUuDA@sPhpV?>`n?dVm_C+ur6$?ySuirX70dZI4}Rt@
zkDQX%)IZX)?92(K^ZL!fC|BOgfDlTZ6}0X2_1Yz`cqs0(I-y|kXe@XGBCa>WfOdha
z%RL$;+kXywsQkR-8CWrr6|j5hAhF7WWkX{}-&6P#i->V~Y)MlJ{%Us%7kvjm^y57m
zSJYp@FBa2WdLBfdGi9kN)T_iO{MHA~qi;b%MdoHr2GpElFWS_Rv1;T;oxb+hXsovK
ztzD$RAVPk}LMxKJtpFq5o4Mb@8C?qkv?N|i-G8<%rRX4FE8{y`!qB-1`qgGn0Ae=R
zCm$V^nORtfOi979UaCjQSg;Ed`WP&cFVUMrS-$yzXhsSF5di1}#HEk9b(a66U0zru
zC8vI*q(ri{wT+i<FwB0tf>Kb{{s0P(j1G{l5HT^~24-twiTK0+kx_t43^)IZ?GL6b
z(31xLSp-VszH|OnmshlApgskI!BMTPntabM!0okU`h~5j3PR!zUVa!aqtK)FXcBf3
zr-L<M2;3*cScg(QX83E#vuuH))yHZz|Gh1*V!dciiO*8O@?3%mL^%^excr(K9y`0E
zQ8fH&G2QNh-+Y+xg<oILc(~A#kDhSpX(M|}pd-*)!s8pt&~6`3H9D#Uv6Ml<pkU*)
zS)=JnIuWa(ESRzCW5Ky!^l|@KWtTp>grwv|3|0QRh6RqM;Q{Zm219%j6Dq>zp{M)`
z(b#DaDub^jmYB#{8o;X5oM&4@-IrtYEbn0Itu92Cq)p9*clM}vC<wmS+`iI2m>Utq
znk@)b%xu0>eG1))@xnkmukw35Z0fU?InumbUx-$3B$46p{El>0V@DP`X{=hKY43&&
z-h&O*KdL&gspTgZz?&NXs^8!TXqHz#A!#7s+tel1EX=6cCel>9uZL8Ak4ns^YHX&z
zzjo>i)HrqGC#{q>s!!DWGdhh6#tqsz!TrBr9-TI9>>i`E{0_-0%{-u0AfA2(0ooE7
zz)!lP7fzCAvzj|{sM|il@Xuzf4E^?}M?FjwGDs>Lk5BN$<?r>DoKahseeo4W`LD(n
zj>9XL+o8lDz5cjTy*j}MgX*~{KeY2xC(<&VpG6L>J8;E>(SknZL~yk$jUox)5~~RT
zPtzCmWy}-2Y<geHQP*D;Tme^#O{@!^)|Yi9hcu!dGA#L@Dj(qQBl~rb7F)s+ai3r*
z^Kz`<)u{+AHDl1Gn8n<OnA3`Y6wt9`?-3J#sqIx-9JeXt&RrK}Sw@Ld8-F|e(DGD*
zZMjQIH_**Jjvp&FDe~>*-k#{;5Q%41-FH5HYnQG!m@~9zc~1LqS+-}!k%sbg?ED`j
zY1nd<;CacqANX5ZXaD!X;9KSwsI084=3luJm25^&#P*Jkz4v8mLZ!;v8(t(Lz;p$m
zn11no&0Q#&URfDk2Ewgf=Nn^+ZzG<^BX_gYf_BL~9TpC@c9c%L#nI_$f6Gnr<+u{l
z*3i38*hY;Hv&*P+`{Ugh$p69jmF52Yx#sW9KuKw7Px$r-914Pjh6g<8?8lE#nQyh|
zXlUUxO)&$kQ~bW{ZpD%gpLYfamZ7shzY>soKcLXjkFl8D`IuYSN|=~DHY^QfV0ak<
z&P0hs5Dh)m?k^s-87f8|qJH{8Ge1<?hrQMi-IJUE8@W$K=?r^UAqiZY>2c>c6pbnw
zgkkQtuA*lvq$0r|I$@Lzg7oheSlKKicKM!^RR#l^KVZuh==#sYrdL;`7#8g$*aDv(
za|`o`@wM=%wC&Jnq@O)AfHq&SNT|su949@NO%7|J#q@fwf2GLJg#|Jo;S!RRQAZLb
zqetcIY1yT6tTyT%?gH}wV?%De69d|iwWbFq%JXjOhmjMF`C^PXtu^z7&~;|DR##nq
zj+cL<-9bXe@vv|Aqwe)%NhOv^fqDMnLT=4G_@vpyW@FWR&JmTEUi-8ys}AErT%KI6
zQ9}v_;)t~fgv`}$Afu>aQ|c{81E@Cv6=Rk6gq|$*w^1=T=u^3h<@ABACJ&!n|6cIi
zGx#mSAsp#WEJG|n)B^kAuF847Y4r0GWpY{dxlpCA?@B%5<V`>N3D)%3VzLT@+A_^R
zE5+llM!OU|a>IWJ&Z^IysoFb;la!uWx{!h0u-qsaZ|r-v>9l(48^uO;^#{n<uvm&d
zNeTgbkn7%CNPZzK8Ryu%>4rzV7qe;q#9;rS#ji$)oT7Y$XGFL3Wrtt|6Z2u4wCsAc
zE?|s7I{(9S!rTu$HY|BmA7n`BVaprqJr=eRq?GsVqj-wDFxkVt1Gh*;Xx+sc?AY}A
zF7}-vga<rR{3zS0<>=jN7K!E6RtKDxt%?~^!`qOm1QoxL5|+izFfVa~?O`{38%Rx-
zwbE;fa=GsyVAvY}-@*$<M>;^o5&zxi=NxWdi~ysrJHwU7f+caJDp2HBvmXo~6ALb;
zm+ORt6O*E->FrzfmZkC*F_FYzZt99D!QbyTs)h3ocJg6$qMzau?4BWLzeR<M0iJg&
z2@o$Mv#8aVg`Cw}%c%<AHKXGMABCu4G;aH(|8*Q*E?=wABE*`L9MEM1wU9tk-=u1r
zlPH1V^967nlR&QwQ)g_q|Hs{Z6R;p@Ct^$}oE$@q<!zJuZF1A)DwAJcLj&~tt1mYl
zUA<xHD*(d;KcbN`y+Lkl2mmU+!J%vh5g8f8m)DnE<<jYeL7yo||K|%IJg@sR2}xKd
z7_C5VpjxoBEW6sg=<4yZV+yURVwz<tG+4eaRC8+b{LnZ!-hb7Uk(qjc!w}r%_pwv&
zF|qRWAtL`_r!21ONC4ed7wh|{e#R9udLU09TG!o+;}6k#0?|nU5&<C{!J<n~c)JEc
zEEcI|snW~uo8D7`n|W81_U&?Ohsb)uUm-#Bc{aJK&JQutL1m$tU4j;xPy}pZI#U;H
zlu)))0fCHB+G>v6pmmuVSL`+8DJI~lRv@5~#U@W}edcs7SBQ4u=r!$<<zRkD<6{n1
zq`9A3#_;Z-o#^IAlv{FX_Xv0TMt{jI?=2<(5_qK`W}o=d?qC-vhjnm7C(&hZS4RRc
zqQ2Z|VN6Xr=LD#V4CgDZ$km36?A@suY@rWaeRCHLer7u-YSdqBaTKspx;Ws`dvqTR
zo<EhaKe<NxK;mU%#oFnmgX~bv7Hs9sRKeP=F$3Vw7zowJw-L=g=E0TY6B@xDN>7Hz
zm-c*ruY8l{>oe-xI9QA^VH)j<{^wLe{zhW5uB(m0)jh5kM%auH!&c*im1`Ag#D0Qi
zcDj=S?vxG!=fqs78ZP)W=A+^+lF$W?@JR%peu+<BI$Zsmj(viq`Z&mmLZs<HY#Bpf
zHJfq*?XG5^!1cwOh}_51$m<-&c)mbHwrt|`gIBO2unGVVTOeXCMdb6)rbh<%y8g>i
z-#_(ruS-$+Q02)|BukO#vrE#M6_#L%!86&o$xL&-#zJ`4P2)}{#0{QRTg3X+%Hexo
z`Zahd@g4U!FP%n*19qE{^eMx5bQ__Z$Q{JXNUf;(4|e<WtD0G#Gz>3XG06RG@JoRj
z+A)5FPY7?0LI$EW?RpnhXy{t#^OGPvlNss4n_Mz!U?@kH_F=@8Q-{Lnywu}oLa;7L
zujUZNFfywELCimOFrRL~(;Aie{EFlmWG<*vF)N%HH@5jJI$C(M_$)5xUVORZKiyt#
za{*jc*CRQYBccFmtn)F+K}*CCgR$V3$=Y47j6A-Nd{<Ja+1LFqWeHNB9(L#6nQike
z2nadeA^`@6eKjSX`2&6`)0alAS8$WWrrPV}XCr<{PQYR0vbh81%;c614nK!Zu=LsM
z>S{mK54?Q?T7S%9WQrE4hR|CirwAGuA=Ypy_WGvWpptg=FegD1k%jSV5gI7z^gE9q
zb*Wbu7QoJa37bOYXF|!3So(jRg2=EC<7?PSCqCJrT>r$6Y`j>cmW7f_0!>0f1cO%C
z>4vx@n$Mk?8W4USKdDit&Lz)?5q$+3Q_khuo=Vh{TdWpa3O(`cjl`cEx6cK;SD{sq
zF+RAr<tXKf$Z4>0kdF2>f}vq9$d*2u8Zqo|Cxw6~c#6$$uQ+^#-fsf5tp$|=p9cpF
zfeY?`k#7Q<GFWL4%q`V&>MMzhYfq|gtl{Yh3in@^T{4&Ky(=&ZuCBmTF=QD?)udf#
zLpN7T;}CeWOyM<!{&|-d9(@i6OX}t8=@C%0h32dp0?8Plz9(q#75=Nk&>`Mr^!ThC
z_Qv}a8`EZXi&aj7!esnMQqFR33qDh(m5G<9Y4&h3dcvDkZ>T{u^f7d}4}s_@usQoi
z(6$apbs7Rc@W=KR^xc`3e{`VtkmO3CkQ&uw)=lG!ic09455u+j<X8|`&8g-UEb~=V
z@IUJ^l@0)dIca|mNOUxq;uQEePi3XBh-oZ73ptrlC=+1w^=E}&#tK)r?Qw=f0Gl>k
z%#W-MU4~7&JYM4M#Z(y@U5=|_OAc_tNqOm5vpM%WmJ_>>Um;;Wl7(vwiv{!^hQs3#
zvq0?G6#knx00d5%(zO5F)A?E=+K#mUaiH((a3=#5h|P^-yXqG*k}uvbLTRlFv1N#F
zky#_BnBoSeYy4?=>`?eFv^2Jpl1gU$yL8;Yf+sIs?<AVtkT8Nm`=*k)Z(TSmuBnLV
z-ZDBw;(#R{^2?8wSVUKnYXwpZJW2i{<G_NSXyhP?ihy=ec+HA{sMI>~0Bz0zv)>Bt
z<Gnvx|1pY~)z@8Pl}(5raAHY#!}EtwbnQ6dkm8$LSjY}S?AaBhlF^(^F6{5!#C>e*
zbna*n0KKjG${UhR1vW8PE5pFCt4qtuf$;eoV|WHpzz-!AIQ-o>|BV&gu4BjgRoL;^
z5WjNNpOIP#4RzDDexHR`+hVDpA0qqBztf^KxQaB)${A2>59Z2{N{VJ^py+HHDNEG<
zb6C@$II5r{jcOHgHdl0Xr{c9b^l^cjjJm<b7UI`bn<2#dUM`>wF5uwYr#pBzy%wrL
zpf!~kLN!6`SpG;2YxOq5QaWUt;j$lbm3GOMhSCLNy;~GXhN$lFVou=hw5MqOzGLg&
zS~Hb+8+YBOhBzcDI!9AtF6<M91Pl=fkW7Xn-fvr54g2}>M9r?a>K^!PB>Dbogc*D=
zu(t-yMzyN(x81SyXJl}NhO7T;2wpFJs?K#^+TstdpGGH5NKs^W&1aJ}QW<p&|3Hp}
zDBC#SB04=y@ba^h;DAoPdnX{M$CQK`h{84Weuyyl1Od$QMxQ#{5@BIrsFruWFe+#D
zj$8-vY415X5>f2ePQu9N#?2g6+p;;+52Bh0ax}7q4WiPHUEQU{p=}cnXt4IuBcSW9
zxhyG^>^%tVAr2>DV0NY78){9${JkRdw~u|(9<Y@{A&lFtzT$W+SSYzVDSQ_x`f+u6
zxF4HM7=YMi+(X|FC4A+JbAk{I+3Z<oMq`|pTMd2SJ6`>VAK+sDPxzLYlk^)<sCFuV
z&krCaUj*{D@O0uNY%;bg3)_jICCAV?Ss+JlFyr|Ig_|nKD{$D=2(}6LLW0|#h4N?3
z0hMqKlNA7vT^kll*e@|7rz=&-)K7z@q0z@~X<8G<EI_R%#GIP>Ow|8SGy!k0q4l57
zDke=frI{AQh@Ce$6w51uUJxhkVd4-m$%#5C)`ULw3yn~~ULD>I>&B{Cc70?{D<lWQ
z=PUZ()&paDq=Ru6--4EU$KD|$MK<B|{>EH3tn}^q6&an>K!$$aN8yPI0fY=q=5=mq
zZmH_$JOl9+Yho<BOWOPY97M_Ji}o&iZ0#FUbweQP2EY9pYT96dWemb*)+^C!9cNJI
zsJt{ldZ@cTQT$@y{jeIFw?|+ZgYho&tl8CGmT5d+Xt=(2!L_cBHFVj+bfYft<1;;u
zQUZmT*qsw%KdL-0P82fakFiGO<$x)9AOE}}J}bU0*<$HX?1PlN`oegxO=J$bdB<|O
zSB#k2r?Q<y>HPjFeERrJ=a7!?fZLyhNyvhS)o4pb?O(VnT4uv3vNOXpJ#ML^{!jM)
z4}6M$QWKtTaQ-bBPY5EYAM8AkP1<^T|H9kFfmwP|nN!+~omqiUpVUP5I>q-(Jpm>l
z{>krdl2;)1So?iy9OtWQYT25NJ=2o@&j1As$Rl`8Xj`dXSt(mbr^Jl-;I*|6zO=!V
zoWWSLUxO%<5OYINIEaI6w5uIBD{HOC8Y4edsJ8LmJR5!TP~$D0h%HF|>-{(^Wwzll
z#mjoI?&Lg~&#L~k98xWcv#?%=JmFIDilNl$Hc&guJJ!H^v^eevT=opg*bqUfJn40u
ztJ0o$>3qf`3&x@xBqy9xlZ*^D{Nc}M^dp<*kJrQ9da4L@LX6n29gTvL?h_0?c@`fz
zU5+A~ZhJ`v;-?ZH{6%g!Cn;2)&8f=eurfPu44WD;(5)%BnbEe{=aa9)MQc`dt>HK=
z6vkKFhyu@vf|iO!Jf9pVDbJ0qak9ugII=#1?V&=|p>5jaQP*7V?s!x`C*=9<BaLQz
zht2)A%h!X>2%ibBq=Sd;WS=Q;>z>}=J_TX4NPX@5%ue^!YqQB7>U2V}{(1U(-1Y*y
zpzv?2*=fq?kHMVeis_RVLK-lJJ_>RH?d*tF%zW_{tj#w=_vv|?7Ob*gP@EC>v(_FJ
za`F~@CfcrEaXT5&3P-XhX6}F~Ma0c`#1(J*f>$)(nrkn0Kl{Ru<oqx)Z&(;3v6NZQ
zBUVe-{gv&wb^d?v_IXn-`d9@uBPP|q_`|`I1*3_;kp%_px2if1{-CL3fB|t0U!a;X
zSZ$>;X)g|>P`iO^PIP+(1>V_69tWe`!9B$G-x+ay?QwnsJyZiNiblTHvQ5KLFEj3;
zo(FUEAGV%FWM8l5r^)$`GJJ0><MbJIIKqn=foBI<6aUpX4=mxES8CT1F2%-q#%mig
zJ+eAD`udg5`G;~Iabl^RQbN=rH~cA7%O?5eHOEJ1OT5G`Mla@r_+!3o4jq%Js@1rA
z?=uK%&zq7^3VswKi#`=jfe=A{^3@lzrePq{ZI+}y#SSE@w-olQ3O5<;$JhH3J9UO8
zqltiweU0y8mcA;GY=MNFp?SdTHj==C$UVJ*7A3~+Re8^*>xMWwqQ#!ppt8%QJJ^~!
z;4ay1uO7DJ6}Ly->k`$A`@n7UanclF*UxJOE&jKfM^|gUb_x8@gWJPsS~k~#FD-YS
z)>XcINJB42EGz^{$D0YkiQVgjc74aKYFBUEq&;ghhz(O`vQF*jadv*7sdHaQTH|nG
zaX6I5Pnwr=*qc4+m>Yrjlbu9=1}J=n=CjNPuGixX9?!!Pr1sv}pQop?d%M4KyPs8M
z)Ew-2{__39H~+2d?_P@8<Ng2B0u)>5A*yaP!UNrHXd<%zz2Jgr3xVm#ol$ZznYl5P
zN-)R+u1#c{`NznXn?GEjBDI>qd0P<~zP#ap-QxX;t&S?l>*F{Lo%j-rrcx=0oIFIN
zNeG3Xchn^{n<k&*2io`e!*6$Y7zXZE^lTwqqhECb&<2K^a)%31gXNA_E$MPb^bU>L
zs;cVTbJt<|rzj3xM!Q%1t9U-a!pNW;{o17nb0sz(^y+#8G5W1qdvEteF*j<y(kU|m
z?fI)FY7Q_bs<n`o<e(`84EJAf+u}}n3s?c`>P_be7x;sW7m@Cnw~(XM=+?x4ZYd^u
znY1b&UZ6Ld_;<W^6j&}h*je|LEac#xq3^~k#bAG!TV30W2Pc*v8<UP|q_qVQYRFmh
zHbN7kR18?bs=Buqu{2Su4ILEYHdJ?caQZ&<`hj0cQ+I%q&4z!&YXBP6rTXkpqI~I{
zNViN6V(2!FQkfHd!knGq!<mE`a8#lC{-f{)<qb&<+&WUj%T>&vzG^#fbx3B6)>UF^
zR}}4^IfwlRr|RZAhG<&srZZc^2v=+VR`@d1_F(qgs*gvMpM;0AWldWUajS^jQOZy|
zgCFy8jlQ0>q_J8;NQjLkvA9qgEiE@gTcMP9xAxJa%e$JNM)P3-q#IXl9ekY5J%+?o
z`QQky+~7k<zM?jMau%lDnb_-zWHor%hpV2pxoe#KKVJ_<V*Gg=n{VmJO=mgRh09a<
zp1Ef!_q#iRSXMX$hbGq?PUig;OT96q!OeEys_zU4%{cAv#^3nOASLFpC>HRB&Qnh=
zpI&*l%-c=B;*QlCgk1x=K{*80C>ccqNr&(%ePT`LvyTV8frz-3R&Ln5_6D~^)WPw+
zqQHUQo9e~jiUfCZP_BAtheBL(s=gGu(S``i*H>R3*iVjE*O*BUbbU>3%`i6I7q7_=
zcTFqI4^C22{@h89+Apso6U|=B9PO{;wC+>fb2ZMwpXsEd3eFR0Vd*(Zdoiod2ZNZ}
zBU04O8vXi+R_dSeD&MXgU;f@47%H25RpsyU)Q9qYzmymeX9-j8ba4td<Q9P&`3Tn%
zbjYfs^qdH=d5t4qFkJ*9Jw4N{d0X*UV{Hck_my-gfdh|H>uWE&CrOMcU@=Pc$C76q
z3rUiPrnqAsYn@C_yTVnTlvJ&oNm@Tyf44;#a}x~QYa{Jhn$`SPk`{Qpqez2*OO_!0
zF~xi!x6$*|YB@wMZoPco<rtYye9_jCUmz?_Q*LjTMvw94UNPsf?zb(pfa@l#r-sYA
zaQ-|i?Sze}*UydqtRhZ_siLktw(p@|la*L%joGBh3u#br`-Bm$jA3I3Vt4FUh3A{j
zB`33yWd<+u{KXn+sY7nVRE=J9|A72|{zynu5P-&>p~I4tMnlG>*rP<3ADku<3=M4z
z;+j{@?lA9tq2(fIWX}UaJ1EEcFPyS0t)znodZaXk{~q~9ijbKVMvRx1{fqu8NKyvw
zzwko)LGxI1o01qyO~OD!)zgeyHj+LMkF|=xXkXP}e2pNOoI|(GhJM4_f{6%9@U>@W
z%q+LP5$l#PPJgwQALM`2X-`MR`1M^_i*7r|*%^Mn<HA^3j&8__vkOOkJvSa%=5^6j
zM0+s=%$2721yVdE#!Rc3{vn>+$c($0W6Rm@vl&F?oQt)-C}l93&$kdRkEF*&#c_dW
zY>LO2nVS>~ICEz@R7xtP%}9=%I{RI<aBvgy;o4@-N=`%~<Ycay-fC3o#iLEt>T(lz
z(l>5*=K)5(RzqBo#t;iIJ&TXXr@=o-dG(Z#tBo@Y8xchdT&_gsgR!r&;ci8qkCRMc
zx-05&h@IYojM{wYi9@Pe>P|>gow{M7F)Z62ugRjYghpIPN^WLYwC5Ke{}-|Ph+GcR
zSLM^jD8w?=Hpo#Ta!Z(I@I{SrhLo=Axr!ervc4Ov@nqJtOE=hml^(1c;d%u!4obrx
z#G#4V%p1Oo?6=!r%nEwx=4uRyk@ao^2p{(2#^dfUNPHV9aGIJL#poM}meX|3S(@hw
zi#-qG&;llEmK2Gih?Aoo(glNJ7D8R?IqFfJ@%|SS;vtJ4h3KW}BDY!@i?Vo0+H|=-
zHjuLCV*szv=<k|kQXFAGKJU-1B7b8q3~?iA=4ax>8ZU7j;fTG#N#clfTzT<4{s=W&
zA7cA}8P+ndV8^MAdIFadlzi778tuQgtjt&QHF*5_1jws|P^Fu-*WS=&CwWv@5(y@`
z<0u9?r|use5_-GOo`zg>nqv{0tVH@;)<|-R8XSY;10{Lzt)7mhkkLa^!leX6%lV6K
zcX@#mNC%I5kU!VR#ZPrpbLxh7+<bb6n~e8H=9(lFM$_h}7~>n@_7!Xye&8v^MiD<}
zROeS}pd~sQ(B8vNJg<_-ZzrhTxu>y&wT}h<@1+zVR-no&lBRlafqFvKB=gRX|EPV$
z9!kqhvm!svMtTV!B=RKA7!(?-(_TupGHNVK!zU1JKmDHhocbp=C;@`SFIsM#{b=fC
z2LIHO#N_QmqTv6YF4`9?bM9#vdgDG9|A?p|{Y6BJ+zgvyXx&eL#QAxLV$#)OmJ(2i
z1m|PLv>@eXdzzssAV3j!ly{Xp!7=w|LUhSQ!!o1f-!XcZvo+wxAXVSbkn2g$K%nR>
zU<<eT+FW3(OBe*`mM}I4Nd5pY)Bjt()$cfB3>kYuZoFD8O12cb(_%~)B2GbfY1$4I
zC7A>sNYUQ`^13G0fh*#Es|@QXO)5n&5{ei(ZiB~0C$hL$o(q(`ps-F9xkT=;WMv~f
z4b@0_dxF2j-(T~F_{pU$G4053nU+xrp2P^o%K_ZRz~y^_SZ=WzBC_CaA>$pRU_+_}
zg}=xhNXearzLdl<)#|OV8Qo#oZHIo8=8o@_Kk%oR`KpHO(LQ>ct^`TmaF_&=l8%!`
z#OW47WeM`wgg=5agnYw3{hxsfkN0rK>i><ljOL;J{1GvADeb1R6pytS#w0&-T6r;6
zj3J^i6h-+PUcl&xi9IpynIx}5(=l4(=hZMHFT!n{oUDU-`h#3&W%#=)?qJUBsuS9{
zlwc6(YGIP$d9u-X@oFo@KzmV~E?o%0-$VltNLQbsiMYb0RNzbk+086ft=C1zxfSKk
zc`)f9URbONr}EjQOm6X;_*9vOa0L-rLA7Eybvvq6By&<?6FFJral5xSkkS<YWLxB4
zp54Dm%VBE5xOT~|`ftao^U&a?T$@7;IxvT&i6W$lf@o4Gg5%j>0+Cr0BHRwh-<MF-
zi74u(kLuWXj50Ho8lJr4GR$X-f4YW!-~5RU%My*v?~r+=l@egi09O2HHxbJ0S1-q~
z_A=wnQAEb#_rJhQW~}aLKBuTG#~}Hq{|iW{nJxP0K)yeBB8KL7xc>b3D9LJU5tnO+
zE1p*NQcMw41&uNG)Ps@)xZsAGd}Add*>5e)g#ld#0u(u#r?EFv3kS+!UEpj3w^T+M
ze}Vr9KUS;1s?*z|P-4c}wQ*Mo-a4(NOIkLtJ~ux}Y#s*9He~!-y^UL~;5pmSKv{={
zCo2HKD;r}b`AaZ<M6Z;1h|w~e)v1Xk*QCGH>6(1K1*Fwi`M1A5{6Vm8@4H=uaXw~^
z8#!2kati0}C;Bo<RtI1vGGn+|PD5m24^Up3Eg}64Y}Fh)%m>p&TMn+V-@^0M^lQ%q
zD3+T>b!C6sjd+X@GVcorwav4e)cP_eUuKYVLD!N8Zb<v`z5?EFC_n})s7~WJqg;Dx
z>w-CUI$Az3SgB8}x28yddppC-9u&P73|X$*H(zwP&qUoG_3IeDS+eteH1oa^?D~C1
zZ$21PF%ZM~^5K5{hQ{}~Owj0RXD+xgky>^@_WfCA&FjAJ;VRCyXLm%&Gxo8A6ENnd
zxS)(!LopY0hE<WXKt=PF&EN%!GrX=6m`{Hc>q%pbR_DB~rc<*A1UsvVs@^=HexeXb
zk|FNp6{7#TJqiK&tN8gs)$F@3T=ntJR(+}XsU5HaoewG)a8bb=g8(6~KE0_FSDuh3
zOOq#r=jZ1WU&Z46DD8)@QO0dZp!t19BN0a7{`<&0dr15V7gt9K6Gg5)vO$IhmfEM>
zo;3!jlhV8Uyxvrt3~0L>pdB>yqO|8(;LYY-4F59Rwb&mx$%>AZx)LgAmu<T4nBch+
z4#V!FIY~J{I+eiwtC7WIjLC6_+=-K{h3IIf_>X1!bLTie%;QJ74a|1oAah4!oNY%G
zpyFok>gnejkikule*Q7P!!H#d=LY%xmf4Su2*>elI2-v!QW;I*4Jc3XIT-k#wSTd_
z8W(2TtTsOu=}{2HZf)gyf;}01S9$eUbIWTzZg31|3q}Sz19!WsI!Ma&ys%UK{z5&h
zlln$f>D<UBrKIdFg@}-8-&b60r<-N>W2^as#!>_WPC7kAr%<>b*9d_+_*L{|+trzE
zXuE*u8@Cr9Xe$QR)!>gF2e@-eFzC6fo~Z1t7JZ0t1$F{Otyqtp^plGC(v39#UHi{f
zSaxgf(AI`91C4HRJwd3{_s8$r4-In=pl4m)c_zb_je=iTJYa`@o)z@C;t;1&V+@(G
z-_t*&KUyz0cU>uT0WTvhYkjvB+L3X~*(a{jD2Va`sF{)Wh$>TM6(9+q5@Z0tEVHA=
zJpb&k7QI4_OM3f^J^g{vaYkJ|p*dj{uaoBsC^vCQqP`aFbQZv!<mC_e%y%Im9viEJ
zWu(9=B*U;?wvyz>&rd2u6!h3Je)Gk2>nG8)%G426GrM#XzoIJns~h)I%N_J9sn1+b
zSxNTeB#%J5ar4ACl1FUAF96v4!bMA8)~(k0g1mOM_<Xszdfp=`;B7KhbA65QGUfL!
zxOP|Eb~&{9j%=3cf&$uN&3@x!<a)Pxn8mFcaM^qz0d1{ccnWqtpOJbjT(xa(25P-O
zSWzazgCAnqNqUZCCdcX8{+?a*-Vtlnj#9~I1(LpB9z1mMzDH!(Jz<;v;%hrtnyuRm
z)Z4tKUh_E+1-#2Q;0jC)38JH;b6CwjAB1IUgY<g@>olLqyKSG=O+v?ST%9d!zG5Tp
zXaB%dqQUCj@M*i+5`7mkGb6HE><kqRLpAh1>nB<bLB!2%xaA`8_)A8K0nhi=-)C-P
z)6)wbb<_F(JMPY5#)SEX8xg4b`H#<1r#GkJ1aXjD3F~9DCa_>1r)Hl^^>q(9cl}0C
zFNl+5Eub+Jj{(u#D%=1J#e2EKwD8xco}`)aduhFWB`dn53|)lL$cJMdu(^~ginTSR
zz4oF=6G^3)WXswGcYrV)tulaSf0~4<jM-q-P3dCZNRZ>Iyc%xyx}Xx1#R}KVQqliE
zR9nKTVMo)S@U+m<_2Vh2n6QWF`y$ib1kor10SPx2hhPYrNGO^nIp&SLnqQlt1-B~c
zEIuh7yh^Z6&4++AG0RdXhaY{uu*3+2@($7Mdgrx@|A9*t#XExw{cl<67c5*ilG@t-
zj}+IVFDwERO`idCu#@BQBggSG=7^-r)4aP%kt^@;LUa{q>WZTn+xvW=<8S;WK;HY>
z5!kZ_KHz*OpjWHtuGHbZnxPj62n_|8tGLdnuZdJ(Owu-js?Mh`zJ4cF3W~Y`E+>my
zM<((hP@~N%<f4n?3vX;tj9vRVZ|4w+A6}~NHDi10wFyW_LxWq6_ttsMV^Pmb7m5%i
z%;B}EGp_CYjXveGABI`B3u9&1xmWWOD`}7k1nJY(-opTsU-V}!PO#6#E3WtTZ@(dA
zPF+|~No8fv)dG(8ZRuEz`;|rW9sOo+8NJ%a1gWibv#j3j&^2Pq@1<C_Z_Dro`m(oD
z^YhWYZ>{{?jdR5l-6<6rz!Fv)PpG-#Y~V1q>Vb<LkbeJ?mf39<a1iL<RhAEJRw-X7
z|F$}yBrb0=BLt|<&*7I((bPZVwj%Z^pon3P=v%QI)_I3p*6VQaO@d^rrQz_;(>i&+
ziw5U@BL6Y<w9j5#xnx6s&j(c#?eI+)-rVtZ7@C0xk>xmk+?((`yfEks)!f}DOQ^?g
zB14p~)}bCK4rV}cn?Qz@Zk%N0>OX1_VA@smDHdJRU0Tf<fT=V1S~MYam+cY4(GUao
z@=M9ETfBbb-c|@cwJS9}Im~)#f`*9@Q=~C^%6wz#f)d!6B5*UkV!###aco6~w_)oB
z1JcVwBh>AKrnL{<;w~=Onz2p#B8!t&nVFd-rT8JgM=ej++h8}J-&}O6dPYrF?>@Wl
z&V)h6UF=~qZSN+U8SW0xfc&EvoAIjJpS~CppYe0t9DMFipg?x_T*kE5!DXs)hq#43
zW_FwOc6N5&8q<43wO($;S5Z+39|Gg)@#Y?^Dbs}%r}CqK)Z6aZ)l)(uBN0H|#BS@c
zqG2e~V8pP#<~ys+UjF-y0Ck2Gr*`LlI3hcX5jrb7yT0%r=x?_F!K7j4JW0d@$jTth
zDg&3+(UN3}U@V4Ea<cqK^$<JJgedcMq0Kmn^jy0c%>WS_Fe{bLW?)EWcd*>gdo@d=
zV=eTy?T&d5z9;6eb^{cauzvf04}L^wN!V)n_hkH%m8-xgj}J1O@qlTYA#EskYqICc
zF28Ehn)%G@O*=_NnmitSc6v_^Q%U23nm~VNnqWwlAk}@`;~b~JKRY4@TTyS_cXf0e
z9Hgr8#S!{FWVU-x{$e4_?tBtd&{d6vx^<zUWel(>en+{QY_l6061<~*Io;pPDJ;Z)
zce@~V-ySf#`8}1SOc$^>mficw&X4-M`G!N=afJ7(E_*YWR;lRk(m#uS@j$$4T0K9b
zjS?d-DJk){3A>Dl^FcVsy1^l`;tL%d%!dn+d&xABlte03{(W#@{3Sv`%Fc46mcje6
zt24H>)yMrI0hZ5ZWo1=SNhec9RaZA4lp?I*_~SnekH64tn@Tfz_B1oWl_Vh10OX}h
zwE0+d!}rH1Z6u!)I0wj5y&*RRa$Irt-*i4YRThNt<$oSBcP}_|l?0f>UKXps8QcXr
zU4PpH#{Q%I3ZmA0MJRO=vUV*f-j_JghIXyUA_h*xd~zduM!3U13%B@*#SNTl{7g^p
z|BUf;7+q6~)c=(83(~?0WvhtQ&ru!#%n5>o`|`HJdIzXv!ANck8yy3SR_ZE5B~^WG
zoA(ReePcUL*{_f!-j@P^sPhY`yQ!+H=0KeRr|-h|UFPNdzN^0-cx)YZ?`Tza>QVdq
z`$9$vSG!7aJE0eEcqa>00f~;)K0_%CHQGjCmVf4}*KsH4G^yjblFsFFh2i}cr3QdB
zC|0?wm@3_y&47NF+hT#RJacs4>p4;cn~k*wVzW#S71iZa4X3N)->Fa$0skm_W17T;
z-WDAoWcX)f)eke|E61XJpMJn;NsFX@iO>!%L-&Yq!m6QPP%J<78$VvmTE#&$55D7>
z8X1dQaKccgzdR$Z?Bd9&l%JyFEdt@<r->4Dri+f}vSE#(i-e<o6Q}C@bz7?#X~dSq
zU@C%L7b`w5_%m9^JHmP1wor2SUX1N99?R-9(j;)1^=8`$6f7`K8sg%&AE%3nOJeYb
z7a|Hk!S2a}JEH@qXILI2n^Oh2MjNB6yg6pS4G{*veOgfWVwWrNLRTkFoZuC6Y*YQm
zgm1kLvttRw#KdVlCOqT`G#C+b<A9~l70C@@%JUPrd%M8i<-ct~0QOcn@QS*Y=;RG1
zJW<q9iHX{DrOnd4`#>f8Gn&cgN>ls&te$2PT7Q*ebd>Hg7u8p+ZG)cioh!@xn1zUc
zCEn?@kF*^UI5*qV)b)%E?2ZP03ck~F$<dwYTD$uYTMDSf$T0d+XZiSY11Pf)(8Ujh
zE-pTHlKxkZ_JuOC{MsXbMOZkGKpYDB(@;a?22^lZ3>{P>9S3?YRD;ka!pi_UyCO}r
z=g^^+m@=GrrjMb8bC4TEU9ss7LzCpCBE4^7TJ?tm&~rGqagu1`3h>pT0xhq>+C*R%
zg?W$vkF~c9s;k?&gwf#caBz2b4esvlkl;?x;O+?lf;+*3yF0-pKyZiP?!8H#d*6Gz
z`m6e?tIv;AQB)3lFPU@9F~*t;FG5D$Ez;JFgH|%5*ppwQ+@Km$BW=*+d@dJ?23NJ8
zteqDfBQ7}`6z7S8zO@PXjQ4l_fMrdHZU1cki#N!|^!d`@6+zR=zaNMh07{vKi`l2)
zDLua{wbmD3;@%AZ7Gj5vTSDyyKf7^Wk6&&CD_)b7jfW>FYp*D}<L-#r@zE0jY^}@x
z8L}v|8H#(w5d+M4Zj`riEwJHA=Mk7VC3P*0&4t~}G2Ucpiqi~&XBdZ;J@m)bjF(>S
zjxz&+%L!j=JHc2^8!eNb(7MK}2LGOMhi6VMhlP9%BMS7cK8H3;pj;Z_)l^Z5i1Yvb
zel%4O$7A)3<hbL8^_TyNS>x8x2~@l<b0Uy`8_&Feumv=-Ts`iQz%h(I0j>+DU^je{
z{S(Nc8b59~QoAP}K3Cdk@s8|kj-rW5n~-DP;YLskV6hs;wnTDjlKVtSa9IAhKyNBO
zn5Uh_oS>0l$`u2@W4&b5|8Ra;?!*ph4Y{xrdZdo=TGn`m^SXBDHd~fCS_`}z#smrZ
zNRzVxBg)VpjThzXeJyQArH~pZ^P+*&St^_qZqTZPdL3aZ+(Z~r?62zgDEH)wBr0x(
z6Cjo(#3WZic96t2A^<Vp;@|eW?j)-UNa&O3m~;;gF$UGGy+ZwVQl})no1OaJli4#6
zr@y&9*!{hpdLPkx$u4^y6S`QhJ9F5Dz;2^q(Q^3vEnlY=4*&XXaD0xua+Z_T<C0Hs
zlqjr(-A@w&cN)PD>-qXTGB72IFhid3^e?SwV9J6e`t<Gnz60Q3?9>NsW$%}sx2kHh
z4D`QQbQI*p0C#~a-J{G}{mQ3RbFBI;hDRAlSnX<bH1EB!Xak{R1<~=vVZ7<C)#t`}
z!aGoR{UI2ExZPz~;PLXOr{=-_68il$4d(qAd%vMm<XrxnZ@$|rqGwO#I(OtpO}0DA
z4o0J-tE|_NE;PHSMm+$+x!&@7<LwJUaDS>}Z@M=Nv-M1KU@Z{o?ctMld5{L>L}PO!
zK+)#U_x8T(td;0(N4nj#O(!)snjRe;+j78<-nrIocK=oon}5o`c(&IXPH`UDc|T(d
zY<{2a_<3P_3}6sN2QFt5@X5Zcyg^3`<)Mp^8^3q+p%-V;ZC5Z$3|A9~`h;=ZwCa^f
zW)QA&pPZGCdgr<DkTI&o><SyHup|N`pA<1N0^kk)ur%_Rm2n(+#x!BjX-{doqNW>S
zcG=A8td)bq&r&zF4D{1BpMa>zKh};p5Z>=V1&OMX^l7EKUHO^?cu>jq3oGeuAlJMG
zao`_mqRa60=63xCIlNsBNkEE)17L^PS+FU0{;#}3Q@j{9vDMr<h>*p8769o3xI+|^
zZ~N!q(#MGs6ZwUPiLetNV`R8)Gh|x4ZeH_J1t2r*nX+-g%AV#hvJD+zKyTp2fCtPS
zl4BJ_;$ODmB4}Jbc`l_G6zpE%B146=yS?$HBgW4uMqS3f!WtYqa~OFvc}ARnt@Zvs
zAS_&>xYRcrsiunZEl_@kK2Al_iWAdh!a=nMsLqjTnrge)Y!JAO;##KeLo(74%v>fW
z+1sOV%4-KE#G(0yQ0;yPc~Js2@R%{+?gOeMPNed_sMe*ATSy{)MW>$;<N^UoK1tMg
z1b&n>FD003G-o|g>@@{Rb4LPu0>#UNNzxQuBO|Sz&kS}p;$9T%Z0O+j@lyNTYT7E0
zG>Okb2nzh*HM6_+>*>r_;8>7sI_{uc40J}{0U79@w?Joj&>|KmOO|&a+il*v8+TiW
zknT<V*>P_i=UYb0gf+?=8>Ow*y1N@{DMd#j$NTQ9iA`3xT%Yz36Tu=*s34v=uEGio
ziStkuPKD$a<(Nuuv9?t8_ZQYuBYykpkCL8=V=m|CN%L)&*Fai*OK|G#PuX5$rdqq2
zjYF6s)+EdtM#0rX9d?Va383gsb#t;Sii7!J%iJ+3mAKyCmS6cZ>cty&7{Ss~wuif3
zm+4kUE$1?LCfB2_G5KQ3NnZ(2M~NkPFQm|-gv9>M?g207`l|j(xpTc+@~EerSV*3z
zcX;PAF;!T-yvS1Lph!8HKDF8seGO@&1dlXLSj{mU_#IAvYooz$s5wkAI<pV|Ev*@w
zK@eJmk2nGd9NwumD<JNHp!4Df%1(T<-;T07noBr8FdML7!Y!r|e3h-e`0(Ps5o5UB
zH9S2zidm(6+3oIE2B;rq_Z!#=p-6F6HH%nb;Z3y|<XEIx-l_R6Fr^BQ61Qo45wQG=
zl>9R%=8dm$8O|CLA`!%Wu4A;G-aIGJ(jWbO6&DiYQwqE_MHGzWxQysZJ0-nRW;<t~
zYJa|;`vP_(*P6>@0Kja(_urfj|5bm_7HC1n)|lJ4dzUskmLDR`&c$a2QsFdO?Og3k
zhMR6v;aZ&S9CYU^j`)d*S0GU*pOS=p-^B~TY>X0DJM6^0&A3M_`HvM3teV8Agh5G)
zOy!LEB}oo3hO`$fSZSYmW~Qp|FJ~<5>Au{NG8_-~2S9VpA=aCk<a`_Q^YX^H&?C7!
zPxbZ-fPHzu0FwGA@IL2Y)D5#s6S~{@>pxWZ#U5hogThdSwkUD8N$k1&LJrAsmN?s{
zPQ>emga~$`e`A>{QD`>|Ww+W+XZHLWGXh=%!@u_<X%Es-lks$ubyse{>T>+~xg8xq
zGFMhe3Iy2GIS&a^=Dkn-mlr^xeP_e!hlozLHDoBi>HdU+9SK;9n9zZiRuAZa4LA1>
zU2pE0=jog8(Xq4KG$>pTi9JBW;CfF~fMP^gIbag^wRqnDodCgfJP^?Uqe?Dy1-st}
z8|q<@Gkm^>JYU6kaZBeE;nA#YA9}km<JXk*KaV;jAtkV(QNhW~j1v#5MgBN;cPQTs
zKvHoVX!yDq6ZyjSAoQlaA44`v)_2Jb;5lkNDc>D(N=^i{2>x!GOWRNtWEBP}SW<{u
zXkzei(`GyIM1+j?W-C<F8R|5oddwaW<BfApWIM3~!7JfQl<`nhO`kkeK5K8|=X;AU
zy#sS0r5)6cvlEB?UmFLAlb*TktV}eAcJU3`y~<m;<jH6B*l3Hu(&IRBFl61o=R$3w
z>1FHg@!LIybbt(H-LBhtEv{L^Ty0<T0HRHz9j#b`445f;MB7Y5EEQ$;n070@=JC+`
zoX9Lgb=O@eB460hM+93AhCd-n5p+#NG59rqr7hXO`_WT%1f~;+wbr-SW~}n(VgEI7
zAJxka2^7wPwVI3o-p|+26fMXtpp5t&yGi=s=8)epAu3i@`nRM#`3JXrE2ob)S{wXJ
z`jdWbnQE;HdEJO9V$M>dq!B+(e~^}Fk2&cF_m~s_<vT4!_c{w`Kw}Yzc92R$Z@)8s
zc9FkKt(d0X!L^Qb1!zGt{R1&IQ^%J;wEYx=xCocYx~~GXHCARj>X(<ZW=R;x4EZ5K
z1jno6k7ojDO0*XPhhgiP!XUF7;pR=qkK^H}%<}y|M~Q(o@U~kh9F^_Ux)o67(d1p=
z?eZ{*Dpcn82{n^_73m`r636{RWo@vnH;2Wd4rKpi0Mc8o1o+U?6~j4c@7dBD*W=3G
zhD+BBx9Tx2<3n;umxWQ%6Sf^?OEednf$sn!o5-y#L)4h%tU78<CIh4eBPS4!Ld?L#
z+#+4wCh&KgfQWO3a#2(@=_>@5g+^+4${vd<Iw;ch-%mC$&MoS^uFpk!my;x>`YK=j
z*HrxLM>fp(KQ5yGSl<8o6;Rv4E59z%|I`089~Arl`p$S#l-Kz1pF8H?UlA(sngsuk
zUx|1AfA`0fwB4)z88N%kjt$b__}2d?Bc`w6hLn~TOPVVGh6otFORRNATwq#;!Nq}J
zq|;{LelXz_Eg;nfi|353idUP_Ai=lSUY06b*(R!Q!rEEXHC(mKGW)<Y9;4&Pn0n32
z>dl{gf68)N+t6A$FwBU4TNPaGxhgzfDnpD0suHkozkk+g+HQjvSJIyV3HWaH?&3v#
zLHV$>FOb<g=RXIjmnv*1IZBM;y`zLuc-O<~{*uT42Q;5`n@9h6jq~Ufzk^^&#qj+4
z(L_Vp__CaU$K}B<efxcjgG3$i4658ZcfrPR*^Etx@2>QO-=OR?>7x8gmaz|l84i<Q
z_|6Q{aX@#&Dz1bL^mC>fi(Ti#Lf5Lx)EOjLgu8Z2mZ%$N?e6zfv1ecQFep~!AW&j^
z=xjYBaw{BZP^>vyNkL|V9YP*^h>(uCt7}>ctZywS>K;OjyW5ZXqDl+KT0eE(Sk|Jj
zJ&+_bW}=}pV*XZaPs}*aMNVU^Z+!G2Jb@c!)A|E$&8phS;~9(Tv*)elv$;vy|F3;$
zwWO)LWo8rZ<BU35N>D+%cdv+JQ^vC=pXhy`+`Dnuy26!v1&#r(AaoUl08j@4qlj8w
z(WdC-cq#W>c94O63D&f~N^rjZuwW0vWMu__ag+4xB4(R``y8tHXw0ClqKly7S}@G+
z-9C+$dK=$|>;6R&lDfd5gm}`pCl5dkLxiv!3*pGnPA{JrCu#_Hu_M1lCChPV{0O|u
z`_`A8ewQb}G4sC##3?es*&l99q-!-m#a!eE%^1o1;p7{qnR-7(N*Q)!!u?c3$)JQr
zM>GCe4Z9s=Q_;}8zI;~Fml(2s>yprEAR>;E8l;E`zU~~nYwHod8C~SIao}>v$b8-M
zSTPENA;+ABroooukA1B02pMN#Q(>!b^-g+-xK$i{a?fn##il^GckPwByDa{#h^fMX
zJv{>dg=d1nHlQIg`k;LqyxJv_?(tdgGx@o(Cc;OzA<);~i?7_MItQ8(O4MquwIJR4
zy0;+-_<j|lzTjkkVF~-xKbj+8itqJTJO|??-m^4?O;XiB`Yx6{)thfLagFworf^9T
z@GSbejc2eQVEpis?PHM|Y1@0=W}G_1-=a~xY0YfMRb%n*-5w?0`JeLQHGr`4B@M!#
ziF?8S-2LrucyYUd+g4NnFcfa4=&&l$J_M2auDxubtR)VmB_Aa(o_Da4DjX&u!f5&h
zH1PqjU}}o|A&c9``PD2nSS9)3qBdo80H?9Vb&wOLTb1zYyQBY??~avil`rknM?SN&
z3hgFp0$~Eit#QdqZTZZC@%6G~iDb$PDLl9fDNA0Ti~mk|*@ABmM<m74r<OXUw{nf@
z>K!VbJIKBudatJ`8s6xknE|w5c_XJU%*q=MY)uM#pQS-XW902*_Arj&P_4fZLC`wf
z3~JZ<vo1d89;`;~Mk4tEyW4#)2r{EuAz4Q_+$>t|s$ZH;D))ift%#Sa7O`@mx9O}-
zu9d}K9za^sQK1_D4PR8EsGX@zrd_V_lWN)}nBKxU1xCxvOQN;R_qHayuC_+`#^W6F
zURD~esG*sLT%<h)kW5w*%Ijj=iN}5o;Gx`U#P`D$;@*!WxF4<4Y57STvf`u6T5X2J
zK;#}}Lix0~s@PUMGy5(YFf;S^kC*YY=n#ZuALfjAWUWYSw*c7RR%{+S8<rwWh5U)@
zDfvGtT_AI8S;Lvg_hA&0;l!k{A$w_+<K@lwb^tCJB2Pn?g8;Y;S8Qu_R%puXp(}Eu
znkk)dl`zZ{2aLZDNNpm>4y3MwEz;N_v0}3CLvqIC2b*jtHXa`%BRL*2J9}9zsdv)C
z`?25niElz==zVi$YWH7}ie4-ot9uB&Gc&}ykn&or8h*|9f74j}Bc7WoR$;mz5g-x-
zcVjc~3%acHF{#Sn0NT)R9ValLQ~?JAl<ZIHSY7pPRy?2qi89*Qv3e-5?A)3DJy`<M
zE-nx)jJ37<#MBO=+{3UkZXUTrcgQ@&$53(5j}nR_gw9M%8s`G&;ERI~Q7)~%MNtY8
zOn!&lr*<^XXypXfila6&m1bt!&s$fgpX^A&Q!baZnt#?Jg=1qrmQmt$gQhM3QH;GX
zCqe9&4uA)mQQxtjf6<|7QQb}zTzz*1zS9<1(l}_omVe23MUHPf7)jY;3g^3ZV=EpO
z*yuluy~q0o9Vyz}ZJV3S>KQkg-TzZqsM>!loUM^w%1u;SxE=^&9c-`XnyCxHghUo9
zCcJqwW{hF*k9K-AC3FXOI#eLYkMSAxc=gxlIoR<lZRV~Nn|@P%B1c0cZ%H$ymB2?N
zm_&>G`gq}2SHk{8I`rJ)G2k3AuoX0(Qn}z){Z1;kIC3nEZ<cD2plShdIxH9gR7MAZ
zuN7N(oT3y{?dkf8gH@s#d18fm<HT?MEd!6v4cyca3hYXZ5GNRx3803Z6l5HcHIvRi
z(Q_&LJ<`B6O3W;_6Sv0lA3HQ(DI7D*SV#JV#!82}e#CLAWmHFVv5+8Dd2B?I3Uu)u
zDF68oDona=YES&VRX^^*g3i%*2SMRfQ=HhWKI0iMl-UUg(yyfSs@xD<q#Gt6rJUTy
zWEv>jbzbtqeZ%^BtLy)FKc9!c+uKEbB~uYy9${JJWi>blk#%G-lDZP><G{pOm$`E3
zC-5qv?`&(|Pwb0GY*NNSWK_pu4v`ELm+wc@GPvon7ptsC-2sFdCQ|9Y%Q`mP@MKA4
zRh^j&SvgU7tdWB><%9e03?ntssG{&VzOV67+w9FR?XoF5vx6m9DF$KIyV`y3geX3$
zb=&6GS{aag=&6YPS`{bkA>Wo6%8XecLtFKLrlN<!h$}JfX~Sr8se@6O#eMNzL+G3d
zuB00NgvY@?))jk5)TH7A%!LDMRfvP=J{OVu`NS*`)#lhcLAjVT*W;|=u)+}5QDPb1
zi-B~L|JmgCA<7)Vtn8&K>~-jq=dgea$H2%0^RpBhV^nT2L!dYV9QA%~F<Bt6fi@U3
z_N@2CA3dr0Vm+=Oe>rDkg*6a~(XAt179^}khA;(yn%z?l>D*iVj<Lr8ekBL3cu<0M
z>5wxAB=RH*G?4$tWN_-f<<=I7TPMLJbZ|qTt->S^eU;vOd}Sw2uk>~<=liS16)N>7
z<l<eYAn_sgvTAB-eRJJ4D$Cg?j~}CIs7W$vvF}?6NLj{sTVnl~C#11&$Wd6erKu~W
z5Tczag;crxk~BP?c1O-`_Ke$nL`MwzH&>JYLQ@fLIs@3eQZ-^G*=<;yy(nYb7oyFJ
zf;OgLe;3C%Qb6&Wl4Bx~VpfCUgeQkiKIs|dQ$#ze;Pz?sIc~^M@To~tf_O4$gCog{
z%NQkkt|dV$?ubZw1Wukd<mg8c0d0<KwtHwpSHEejEIwtSPQH@Fxy;To;|n%E*>@>5
zVKWUSr~^v!cbP@u%QmJfKtlRv^jq(rP_MaY-e-QGH~B^!ftXh!a?ST@el*8;3?Sg_
zLZ$yEqBgXvcN2Ry&bH8ys4=fN2t73=F75FsvS3@=SK7+Qm_q&R;tTfuxFpZ*DNEx0
zDgU1GPtSTz8Ga#?JU0tV7XRpB1ps8UcdIU9s{cE*z#;ORn+)r0vU*u^N{)Z)4^N=9
z=KuMI-ZZC}1Ag9#^<ayxkrw7`j>0sCkjJkIiEw})%_cUlpaM&AD!>9V*`nyh0WwD#
zmR$04wvR2Xtc|R)I#FNv;`d7%UB>M9s=R=|+w6RQQ(0Fny6~yoV55oZw}FoEL_-Lo
z1w&_DIYxJ5CL9h<vPD;&8<hZ1K!2P>f0dgsF(&%2tcWiwblD|W$#Cxawm6Fnl|_rP
zp*WiSwi*nrNF@mqQysEehVLSSfcRwkckRrj_!#R3j#2pM$Y#1=wu@7(5N11TXD?Ky
zN=rL43KY=u0m%nf2qvd|Kw-w)5+9Or-1&rj5t6;+WX<^59Ea5(s{T)@`6u-}4esf1
zrqsI%6f$LeG;2viV?qXoB~n@iRzr<`a&972>}wq0X~sC1BbL+?W2kDj!HMqfRU0t9
z9Gaye<c4tnDY+fYCO$%z;yA3Gem%+i^X!+<Zy$T&#W;5;O=eOsFnU4y4P7u>geq_3
z&bnU}O=x5GK;%FhiY}XPZBEz|U2T{$w8-7;kNe*><9pt_2$}hYY$PZu*QwSHKigU*
z08)K<#m;|-PA<`|D4CLaeTf4V4sA5|2~~$?E9u{y{KOU+?QfvIo3ejyG)>9VD=CV(
zT&#P7nwYCSIGCLa1e_T4R?o%hY_B*J6O&vrTEyG?K_u)gR5UIt1RxT?V+v(;hmD6L
zN|2G0r8rGe$Q$s1yAO&!dO|36ccnCOO4m|5xk{0*w3-QDmkR}}cb}aachxigtVbG=
zrH}S{cF4N@G4A#YW3>fYe;{O&50K<54zvAw&}JNXrp(k>>oIGXQUl?NVkH(D(Hmo<
z@Ng8mA8#^)+e(qwf8bo_JYQj42X6&Io44A}^0E3R=y1h@ql<>ahj@|+LNnkr?cH%z
zCEO#wmtv3+`S6bh9Ee^@<NFof`f};xWLjwDA*UUrZ*?i?j{z|8?Q13Nn$(~yVNZVW
zRh}>D-}<i^1(nKdYTQ4G?eLfOk<cpor_yoF`VvEE%kinvG9~Js6ye0_RAC5|;hHdo
zfA6X@iCT*2g_HD9-jkHjo+Sd4Fb4IR<SxS9+~=zvZI@l_T9EY!FEb`Qsd<<&U<zd<
zNItgLtG|suY<67lmf>|wr%<JZVGLWWI=EKQc6*=#u9$V)DcUick(sTsMc7ori>a>p
zhUOq=yj$~7eG%ddjJod%oao02kIL)X-Q$-Q>5fn=Z1W_cU{qC4>q=Vda5XOi+z9>0
z-h6M<Dl#0PdNAAoNkju#lm3CY<{qICDMg6-Z5_m_<e@bc=IGM}M$&P_DCxT==;=4`
z%wezG6e{IP*0;h9+)4}y^hA<=(Lyqe66znwGPJRi%HLDqG#&-M{vvkmXX+-)U`_1*
zsqEhSCwJbvX)yrYxs+<}KWP&Rj3u`am)d}(#OPr0<=muK5B*6MhtyXBh`6ug#S4sE
z&(hcUa7tFcE}B}x2(up<U#p(>+jRH`7m|_qL83I6l7q-sGV=QdEewDxwJgV6u}QW~
zl^{!%5Keiv!Ds^xmS?4D*3~g8e)J2lCq|oI7pOT6hglgvEiYAV4=wwm6XV_Id&G%(
zWe!Q+Ym|X8%qx7+$<_qq?natkjCYJ-{b4B%)#3f4o|U+5b@Y4~o6SJx23T&>@Lk3W
zfJ$Px##7gne;e+?<_Bc%Nci)kyi~ES1s0%wMT!CCY6Bn;tRz!Hsd&m_qs2klBlE8U
zd&Gs}6fM~_qiN-nO{va%784;Y<tpME)2~!nBwn;S=4yP+;AXaOHvz+LI+`UiTmVF)
zf}pow|3T<r+L!A(0OXixJn_t$Q)4fO_`Eq>wZp7e;6AHH$8uI%9WdLn-hLEtM`k|8
zUu4n+W4SRHE9qMQI+W5J^L6W~Up4cbl;q+vUfsw&;lX58wnNE|zTp;nu;hV`G=MKE
z!Fj5?Dby}T`#DGpjS<f58OF-^da1A*UMJ;YC5dG_{Y=|q7aO$bY%5|)6_monnLhjU
zQen!S7wtj-`0B;wV9n?<<HK1XP#0h&gd`#Gl_a7YokMVCJo#%Yw9MuNm=mJD`DL*E
z05lqw?Hk_xTh>dv`twgpAfUiOb)mud<M#}l94K9fX?Lg&4J~*4XrixkoGtEpl>AF{
zy$Ai%*F4I`b54=zmIAun4Xd3Z`uPt$UA3ITue|ou^uL6=OBPFaB*WW2-QHNY%Xfma
zYV_5&kvb_)nI+N`-#xyJVAf{%%?kA5^G`Te3C4RJRUuLD7bC$Xu-tFaF*KVZ1HSEn
zGoJT2(V{kD{K?CW=rG)bN7V=mq`~B9!J;8`k0v_U-8r?6V@`yC*U+^eUHfAG$4|#`
zE{3~aA9-O1h{)kQ&k?O;<C`cqZI5v-ip3@jipieu`sowBI)WDh%d15lzXFgFQAIz&
z?#x1>?!t!f_(?GFT_KpMGI&}WRg$?^M%;-U7c4e7E{io0ne*sWo@ZQ@mpDvwtywY3
zOiL2%#6JSu$|z~U32B;G$kh@VU^ju{^G)lADU+@+CG(xcNlo$J_zEvnYZL!V*up5|
z!-RA``2v>Q9(jiqIUhyawGckT2g5i`er)8@R{2ZgXWY-;cx?VqVPRtb1T%<i;8YFR
zgda!p%3Tr4yT#SOVK@uvdTN!9yWmFa(b4xm>qD+??0dG@`@z99SL<o3JVntE6xmR<
z%u~Mak=L+p=E_+A@&=h%&S&TG##%jlP$IYbQP>&lz=n0hhCCc|mcBLB<H}7S6Yo|5
z#xWnAw(NG<tE|I=eyrJxwEqV|#JgSj&Y1$>2H$zE-=3ByKqKlmkbti(M~>#p9load
zZzg~x4MLvm?Eu)C@w)elD=qJT;JRU}zn<YO<}R{7SW@50)uF0G6Xc)fiuX?Q`O$aD
z`(Yua9(;%kEWl&_&$=t-{##nBGKP6r<zC#K=rA0haBlLN{70En5x^(#g3Y&yQh?GC
zRKF4?XrH^%sJ^-2nT*ild<0&7@{ooC;BDMd;-Km8WugD%14L8|?3lMdE{BCKh$F<o
zNUY}B$O<jrL*v(TT{kHsgZ;{nicMCmCED-2roOrS6xPkvKU&c>^`ag8PHtc`#Hj4(
zizlqgD?l52oPnt2tR?^K$ZF}%30NXgN}nI!q<;$PqDnlBvCs(@&xLJaN*sdXi*+--
zi_^??U!h5VYEo0yN9*ezu{1uII@7-T!abos-%$CUDu@8#BLWzgm-`nvVn=X(-{`F0
zz=1kRmP&gL5609ZPIS*b2HEgs8Z*{&Mx6L9BCH6Dt(?8SeCl4ba;)O4BpE<zfd*9S
z5JkSdTP~-5&^e100OOr=fZ)gWJ7JK4Lrw!7rEM_?)dq_0b^-(zULjIcdEDe8>6^PS
zOB2egdn~bu^{32&oh>fMdsU8oIWTvWh^Sfp)v-qKApQXOORT=nDx;o<p8}Bc#<Oup
zgts?kS?%^cZG9Z2vXG2_D=$_aE&6Ww(@fQNV0jx>95&qZ#d+lBv!!X&Z%-Pexb0)|
zAfEzB!O2|DtfNmXJUodxJ$kw_Eh^Mb0k^}NV==D(>}P|a=w>E1*hh;cnn>&}qF}P7
zmCNv*ZZryXr<o2XsGFx<w)CeH1lFr`I9v_<e#%u|0_K(P*f4Y4h^~$K%GFc;s@85#
z(~QY3Ek-@?ju1hps-3VqIap*kkRETiOasC^W`QKa#|jrrBMBUYVe+MOMPK+M3sv^^
zn=6pR=1fPBojq|z${_r)?&MdzK>b;eoU%^xL>XU-9nfW&YQ?F@_9HJTlnBUKBfcpr
z=w+}5ABel;$R5AS*U{qJue{i3W<hG|B>RQa&?xcb{wT3asL`LT>^nqDoECyM+s89U
zNrn4fIeI&*o}9JSb3~WJ_K2TUT}B2Dj08LCN{5g_*zoCys?*J7xIw7h3M`kj_v^Hf
z5RREuoVc7X0kAmxlLu~$k23Vu^3!Xp7(j1nKzPplB)Z8V*0s3nj__w=JerTkZofY?
z5n1`WlL9tgo|lm#li4E&<AHNuNJ2VV@v`H}iXr-z!<v;L8UkHfF<89!*5e*F|DY80
zE1OUIqXG|DP3Av$DY03#aR%?-R>zuJyqIbFgF)b%SV-E5n3+gyNZOmhbt7dbSt5T(
zVGnDy`v?3YuMp?wj{8e!eWO;NjFgKl9-rCAZ~?@8E*;BU@bFxsh=?w=iHr3ba_nW{
z7`f@<#qp~>-tl(#?Id{A|G+BuA!#L8+8*<ofOto^r+g0;Sq(cBr!MtATZ}|pT1J62
z`T2nsfL_X~8o{|!ESV4c_%r3aP@SSYptlsD01Fhmu3Eb=WqtKPz_NTFBX!#OCA06&
zND#@)DyFwYYxM0xv1-{v2O}gQ6)n$H%aB_~V4XJ}>l1r(Z$bJpNiZf^Q<lO$uXoHi
zgWbA<1Az-^>~(bQNs6o8z3yxMs85xyFds4bSLfQ`TJy~;MxqJ4SyJT4U=1?|@<L5Y
zs3kJe(JBobX)nxhJJo<D3)p0-gr}&zFez}HVm>j9r=L3ap@=>7lwr)VczX96GH~AX
zcAvDA5*Lv#zcBM=TuSe7cV3Fk|2znw(0!#}9gV2yPypipF(b<{i=>bPpy&7;xx1gL
ztyhOdd2O_za8Uzfm`LlB4(-9soMFZbT)C5E;&~EchBWgEH>EmxlVqLX$uGu~?gBL^
z?t|T<QPi8im>G!nP-Oxp1shCtuo+tPcsw?|fo{S;4Fd5YikgBf8cdvPMFW8Ff2IBG
z;0CcnFHTLq$9`*{jv(|2X>63}%%tE}UpdXp^P~J!F(UgEv6WrcFtFoS4NXToP_a`S
zpd%;u*gpH^3)S+ANJym3S0u*|`T$JxPIx~V-)3A{4`0KGlo+ZoyNOms%v{|KIY4{I
zU2^P<XH#Gz<v9D`(b>qMF~*Upf&w?eBD5i@`+3rCh^1`A5Gw|3T7ilQ5s_1k-pN*p
zoxzU-&_?mZ)fE^9^eT9fV!U-(eD|Shxd+Z}xs622c##pXfnf>$Js}dtOA;(<^3xqQ
zLL5|TzZAZCRj&Ow$(vGTjmY$LtSazQQ)eyQzpM#2<)SFKG}t84P&MNQb{K37Kumb#
z$`4myy}Y7l;>Kh+Nhz2JM2qwEy2SC}77$HeAXeM_&%Hb~$GE+4`zUnT_YVK!hJL75
zoCP3lqklN=6yI+^Z}4)jS_vv4p)>ESv#^^dEDH&&%=(6kXUfclt55E`dB2~%@O++H
zPmD7%3c3H~1z6b&$=nsFIh1*{Saxvny>zyw2t0%DuIcR*<&Yc}u;oF;m^=Q5+q`;j
z<BS10keTVDePi_Oa~#dQk^9a8!^_w0Wu)<Lo0x8MaQ99NQ)7Kc&OazoI$~l+irI&N
zfM8Cpb&!DUg8JrkZ7{2wOdr&L=|XM1kywq(-}1&?yWK{twE)BIkf7?Yj}PRtDJ?7^
z1K@!u=r2F^8k!{)E5)bnkLiF#V1BC1UXG5V?}8tD1RS249>{U>K*(%e$D-g*gmr6k
zpCzJd8H$iTVbg*d`CbiF39wipjzH0nYbguO^t7TXaFv0@<Jah$-9rHx6H?Knhl6da
zZQw7M;73|I?UD}6M(QPImGy=ZtILU&F{$7<x;j9evr(y$${O8sVFA`aEiH0C_d+|8
z8;-nFpE|;6u8FXg;q71+9%t)c#cYpj9ZbC;R`OVxZKq-lxdog|DAH47yIBJGC@;T*
zzJoz-YTZ=yDR{KbVQ5OStWaZWBl{k=U7XdSFehpnc;q8FH0^*($V0$0{3+MsnYKg`
z5~}mHtwbzIezIVs-tHR!K8!6inG=kw5V{?3?S+@U%w&s#Gn<fhhaUtxBMnn?FV?LS
z7rU`n4eO(DR(Tw{2k+c>dJ9t6y@<HDTi1`Y*~ZZ80#_)BGhb9nl<hT^;elQihLuMM
zZCm&({t)NowMeH83*f-^H(Bv6G@C1!MrE9Q;mj!}i`?H;=)An3%63|HDr+-iKj2p8
z0On+wq0#nD{|~~5o+bQ;g7*HlfwLWihx-C1fc>X10w%9pVxH-(ivfK<Gk%b7Dav}E
z-W*UL!-jN+OXlt`S4ofC=rAsI6QFcN^b0aJt}RZh09YqvJ~K9~;|wA_n0>+|5uBo}
zBs~P9Wl%?Od)Y#sT68d5oNg>(^!k87+4Js9(4&I&!nUd+;ZU?1e^N@6+JPXB6Fg*)
z@+C#y7hzGvKN7l4|NR|uV-Hg&sQHob;#4?`7Y3_9;{B$8v-Km*iCfpRnd8>P7OTZ=
z_XAG&;UJ%b^%m-@ehDFR`Sv|stV(8zQ?^4de&G4PsOJ6Brx4>E<+IYjWbetR5xx9P
z&Ow#*;}3$s(L%tr89057>GxdQ`_*Zjz+>%OUlz9JLxhCZCV`R><fWg54%i)glQSJt
z3f;;=1^a9Szu`-bCONyeFAdPS;i8BI*UcGg?CH_;Q!F+DpIdRJdTdm?A8<<42dwh>
z9eE<*&_^<g;P|c|>vl0epSLmtkb?lb04<HAI?iVLcvc`#d$Ty5;o5$%#W8$%uoRaS
z^*q!X>u>I`lUiDj4M470gAF6AinIj?o4{Rr-I$9GFZ^N2FKgYE8L<}J?R*pK2?6~Q
zUdZ#^a5*L0g}ba?;~xMzG$0`pf(y$;dbrlE7Xszv-Mfqkr;HSFQwoe#NOIRHHmz50
z3>48nI-#V*!_|^ICmtd%hlxC|pXU!fr<IZ<PP!RbX|$Wh1PkyPvq6&4oD)O0H<5Xy
zO$meJBtLT2+dOyyE++@1=7n#A6}2r098D@Hldg18F(rvj$S5z8VTG6SG(vh~-ajsh
za90B-%94My6c<9$*{Z7)use>iMBKMxc}8|sdywS#{HftSTq#3XEAw1t->Cb=<<OT0
z-9~vHZvyP=o!Q#p2wCSNEmR>BVO&&)o92pW(~1!D)3s`JG29sSU**c&+G%VTXZ`0f
zw!FT;o2yFhwYm<6Q0TQs=8RZrj$oHcUTDhCeEbTC!oZQ>No%x&dE%}M?#cig9bEQO
zd@EmF7j9TK3YinCFV7uIHA%lBPFmv7fYmE1C9tkh!QNGID-H0Y(+z(OJ#DA%mkAR?
z4+229n|!~H_Rk1vh5trLw+Dkl3mW!oE`#4c#<h8aXSQC+isk70@v1Ma@{b^OgS^J4
zN<2rp&(51avm&+sB`|u4D>Fl6WrAasCFq%WbA{B3l+-gQI@}G4EO7;(+cN5W+<SfL
zr&yb0*>`hoxId^qXCAB#WqtbEoi+bx_}-<jn_dMphI&IoKSCIOC1f#l%g*93Dw-1(
zTHoVozVvk9MX}D}f9@jWc*lM!FO-KZC+rRX+wrsm8#r9tqu1f|27rzM4^)3;Kt%ho
zyGOF#w2hQna|YdmrL*5khLB*b+j4TK4l*RV*l%UrFn9IYiPsaKecr}KeM%B#OBJya
zh#eb?#W0Fcq+n}LEP(<I1RNrdx*Oyu<0j;i{WkK(Wqx{3sOkixHbxY8N1Vb+auyHK
zCF`%lHSt8HIU=N@2um6w>-9r!Ge}mBVZ$PiwWWfx7mkg}fB@(afN=p1n-R>F*&xr*
zJLv&Z2MQuAyUt2nnHE1Y^0QRvG%>aJ^iI2R%sn^lo}{vJWcZ)o<pRrh60)jBp9(rt
zY`Z{3-(&k7KJ`03koaHU+|Rt<0LkxyG+XoyCL17)R5iEOd*V{WN2>4R<5=s9>_WvZ
z8n3cq98XQwG>TT|%0wMsd}=vk=A|Ot`_6leN3yt)9Xcc1nBi@{(N%OkSQ-^#WsMmi
zESTt5p8{vc{QaNeq<J#lukvjg?kJt$kLq8!JR@>^#u%=;tU)kYIIyu6{1ppX$!$DN
ze^tEd2=(JZZ#{noK@_X5fM?ew>dl4SKRsWdMmOj!$yM>YfaWj>)=C>^FE{8wEn4u>
z4m<gsMpg<Z&s83dVMJ6#0&T40`cv&spw|g-6#la~*<^&L6=HQPS8YQB=?a<{aAa~w
z9b(A*yjP34S|6A);7X)kQ@ilG22!FE5w_IdT4(x$$T>8+!EN*?rWcznYg8Zx&v93I
zeh1NxJ`s3WdO-)1F4=LTpZk?%Y|nm*u(aBMfQ^nOxpFa9SZOqi+5{^uzOXw4Ic}pU
z$Wom>1`$J7_*Y4=(G<dF6Fe!1aCmjHnxd<E@|uS+_?$yVo!*{2V_7k#7q6=~2t8fv
z@PE(pNIo<HB0V>gFjgL&Pdlk~{I0V9vkW!>Q$fku?5t?t!fnsde!@O9j`pMxX74wC
zbLeILpqcs3lma*L=RvfD4+qrQ6NdZtqP0Pb(&H^|*`3Qnv#{yeEhW%y#hb`~zU;<q
z;j7Y`^zZQdck~rciAk$5P8M~dD3!#zQS-=U>iR8|G&dYcUx96NPI^iBG48qlJ45<K
zlLV}Um?#1DzVTs_H$asN0ysr**Hc9YGieMr3LsTuBX!T1)9Vl<P5LF0s(lw$L`(r$
z@l|3+G^Aq03zI2|3n7FD<gc@zZp@^UnVpGo;}Um`s`-3`(dh=WX2gt0kQGrE9qqW|
z&&GBntUMJ#>ST<;E@;tJKO}TLzsOR8gXJj0t}A1@4<2948-|LSh?94QKGf%#`tVXQ
z;fK@+*PtFr@i|&wObV5M#l+TZz#nsNd0t(<R{V6vSq9kY#lLM2vZ~{HMpAQVf*?v(
zJAu|u61Dc(CsKLx@BT{fW$6x=ERizj@{sQ!eQALL`t~Fbfi<j9sjU0O@5)Y_ZG87o
z5PCLzq&4eDqsn$B)7LnUHF{z1{-wCF`{b}66+w)WtjMm&8C)(LLe5=7mTrS|gyw%8
zGS<1cv2^3V?-WZ>P`!W1iEqJ7rhqm3x*4)DDA=5M1q-=CXu(#DzR85oiQC1M7Tg<l
z`&n8(q<{$8RU+LU2l}80RNWcsx39@6eYK{E^f&Ot@;f_FI4{QR`XWVt`n*7lPNc*u
z^Jw=(e046xQHc48%|BH0`4U<!Iacaw27dhvIMr*|Xu${wlN7ZP4eq8ut^D&!lo0!Q
zM1Iuw#x>_CaKv)$2hKtKf&4ZWH?Zc=5tydE`xbuka$5gndKP$XY7vScv8@8|kNQ9-
zkIum)$+Z#!!@e^yJMGIHAgR~@DqaRad6<uV0NO49o!FY@8G56*JB~~32b|(%DcAE=
zrFnf{yk+P<i_&2Q*)0JS-D{tZ`rEkA=aeAi9yfB&yLp>4;5w|nU%CkXjfMEcx4&5_
zINhPC#e#`q(r4?w>f@J|B5Hm?0-g_F6gYC=HeA^$y1w*KWf|SxC;jc>{ItC0d+~p@
zuu!XfM>G8CZ%@54ADV0s`~p|S^IFO6F!h+YiaL|jd;6Hp1r6`hb_A>UP>Cu{UF?Kf
z?A<j!FYB5NdUf0lzFzlpjU7P@VPvEPt1nwR&zxyuB>(v0@dgeq-wDB(1EEy9nM`nK
zy1zC{c?rfOM@Yq}*p%p_G;$tJ!{b6qGJ*Q<aR32tdY#*H1X21Et+)##*AZc+F=Y4<
zS;nL@!il+ZE1h=TX=QWJtpJw?AH9e_o$-~#9gAkH1{4T&J`QcV2G{}6?Bl5S4aa&l
zAfIQpnuMs+e37ABH$F1Zt2)cc5dE4sOeQa=*E;e_)pB9$b3tzI#0C@Ae>Or|`dYPJ
zZ2(Eg2A~JFwe;tR4?OiP(0PjAdTsnygG0*)ShmY_<#}tc2^HX!a`d@@nVyla>`W|e
z^Vh;zZ)QRVct1W<X$rmv37Rhvn}Ge!H5WJpn33VcQ!#Dj7Sf~gGdbpShe6Z`20xlz
z+&aIO#<h-b{;6Ym^d0d?phZ!K*Um^;?d!}5sFFsT*K1h?bc>kh)la5;m_wf!gr?}8
zh3#<q<F+O(|LuQXxw^LiJ^Kc*#AWLS#JslGA|Zam5~i4`AM|o}$t#=lYr67x|B|o^
z%&}3u#``Zy$QoMFB2Eb&Aeh)%q(jjCXv?n2j`+zcR@xFDry2e)-rfwL*8>IQU6tlJ
zDLv-5@O;YW32YxI&cg4#TG=2q3lImwK%Cogr`VpvC4ZRI+Z8gxe_1quPI(75q~pfJ
zS>kj7OLNPSHsfuI)-PugS>0|U6<2<gQDoV0SV@kPwQ|7&U-@F!0~lYvXg#OYF~s1f
z2%k^f^Z4H<0n~PJ8pVpn@n=2m>?iB6>eZ_o+rGhfpNkDxhA(bE)eO8IJdAll7nL?*
zGnvGlksr^%jT9%7ra<q$=pQTT`U|Ov%DqHMpUZ(Mj$i*V8da2CTZpTXG%{J0ho?up
z8k8GJldR8+B2~|6vVmvzNk~+Mz-(7@GrDxwc$=7u{wQgP0)Q&%>ZHFNkH}KxNj}Sx
zfFj92vH246-~c@W9AS(-j#@AB0Drk2V{6?UMY{!VlP_DqMyX{|P07Dmsq%79IQ+2v
ze*6Y|bVW)8mJ~9=v|HCER>#b}?F(#=x2~?0sXjMV7FPfQ;N^m9U55SJh-0p`Lzi`X
zSE{v>G*ZQ>+;>4yKK;@IS;pFazq7&rLg3ink{%4frO>;QI@}EKMiNr4Ol+)8&izUX
zl|fd(Qwx3ZdGQ%HtM)`Ee(IX`ybbk;B$PhH7vSw(&=nm#mD~(c<v>=>`i5=0b&Vmb
zlMuE<Lcwl%o!hQ!g_!eA|0gAWwCk)GtZ?3FwAHj!AZbsIQfPpr4JOncr{APy{O&l=
zRnNrk>3z<=3@5wO*w%%hqE<r_z0w_pt(?GU^XApkM8YsOIjg@jLa6IAA_*XqG77lc
zYO!CJW1lqB^g(m|YB2Ehyo^5R!~v|jy(sIssINOv?!^p^>GlBqCn>#$6i+4FF*Z<{
z2H)o9H{%xhx+0gw$0+yqM>UjzgQWxQ8LfXU2eMv#tMio@A;aZtfR7TQ@*`|MY~K4F
zoyU&GjGFTcP9H~_f`4)n?=Z<=$Cf|Xnj*4;(MHTb47~!u=VrCB<yTdg^JGE9q1V+x
z1oP!%)`<yaFeXoXF9umc)Xl!72H<RBMFqG|1P3X@`O<I|y{(NrzYYle$!_z)fYsgn
zpvf!zcE0aQ?w{%NL3~}C%*VZY!cQK*I($kOQ|-4CLEi}XpWrpYiiH<<T86ta#a17-
zQfVTC1xj1DyJCJ;x;TW2{5{IQFDew8=rec#t8pF!x$>mD@_9&c=)mC|b6^W6B6Dqc
zw`~$*e=s8|E47M#{-)67XtDii>HeG(_I$U#&cE}KwTJ{g(lgVeuRG3cHUKM}x&^o>
z#e-yS>1bn-Qk%!Unguw1$ZgiwzKexJHBOwA-1o>@qL%g1-}gxCePN`>=cSAHzJ~1t
z_1w96O&EQjC)3S<Nf{o96_INjW7Z8uo$_FK{DM~u^rOjh;MxSL|6CIrvseXytTwGq
znL+W00(5E7OKs1Ep`R_^iPXL*b`re&inul-OmSMrR9E;Wl3R{3sd}<HB!T%^0uV?i
zrTam)tsYiNO@|OA0O%CYRWkCxhpN~l0e~nE`dc1MB-fakdNDv5ZM@6Ge!L#x#5Ka`
zwpuZWT^05bXq1&+H`8%E!dS%s3NeX0G)uZn<#2u10~Gl!vhQ%Rd->c(Obyjge<}jk
zbSe2gtfZ2Y>|n*nwYrKQMGhEm_`<+IHnHpXM#5oXS<4l8NzLz@6c(%8)l(<R+DTok
zn%0xVPW1SYcE>8OIF_0_;QW1T*<~X&*uDei!dFEg94bLy;^}O$wDgY!2r+O`W2`rz
zxbhlv0M~8ey!?aJ4A9kTtflMXrwxo@SEbhKCp8NW_2B6N=Dxt{B2&>jb9F4OJR1Gz
zF?G;U1lLT%oQcvVav6Uue#=*Pnw~kLEZ}IQtxayVPI8Q+_O=CC{qG>&nyz?Z7`?-@
z!Frgp=a=ynodGGQa{pVMq2vB#K@oI@t_+BR3DrDze>aaNx27XIhoz<Kxou7R<+d3@
znm$4Z3Mljqir!@|ou{X2lOzR8cPs7yvI`#}#s%_|Ru{{$u?3g*i_C;wxMa99<n7Cu
znmfyJoWwNg0%a$a{?EC0*rg$H?(Lk#&v{^voB{IDsiMw<u;`G9u;<8KOCvZ1qB7nd
z^mfbTGj4NL4Sw7ou6Wh!;p}{ApB5Y2M}P}x*vQN=-{s^<Bg&HgqK5ZZAknQuuFB<h
z%jG^OIpz_Okb{Gc`LM<PyMNIiT<lml4AdcgHnDjH{UfM;Rew@eJ=<~5)$Sv<d3Abp
z^r%rZlk&(jqlUWW?9*(;;GYlZBDmlU2EPz`)zqvh$-^PUW4CXLqZ9sY(~n*SSC^#%
zqE??7it&j484I$LT{f`jetUVUGrO5MjxtSp$sq8ksc6a4!(}!X*wZQNL8b%qp#w$i
z@yqqXKEKDtoS=h#ay@YxcBsqX#G0qPD(b7yl%#}&1l~ZWW>|K|75!3`8i)OIB4Yc#
z9rOyXQ>ovFYMJl?>EZgh-98JKlUUc|9s)NotL4Au)qdUGoM+GF$I?`<DZ^R6S#+vk
z#)r>IYN=n24(FU{T<{w^l9oP9qIKWP(!x5Ouql1_epc>uGD6ILd6z3!tZ!cQ+rdMb
z8i?ALrc-Jp=!-n&XpQcA&P{_c8_M}jx5`Y|pHYfNoNCX5PU_1HBjQ`TtfoH$=TRSr
zqus#Oq73cEQQCDZ>>JzZuGU&FJtK}UQuEGJ^Tya9?B6?;S5y%Ea&Qg#*m`19uUP?e
zZ!bkc)3g7D{u9$Z&6i&+VYLPlLY}4%)+fTNCkEYcG8eFC$XI3ml8d}$3_6lY?L*rR
zrO-XtXq&|J2M3WGtF$&upIwhd_j|;qc-W5w`o&|#3Q&;~K)(rPt2}7n-VOoF>5Yhj
z6c)W)^7n79v~OzOPTek(>Sd#$_?=&!TfH5AH!3TT09JlG$NQWn0<1srTge186N2al
zSMKi>w$LMy{=LS>^<M-t@5hY-`lSTki&?3CvCdSF_DZtO)TQ@X9R}72NYND>AJI-~
zT(mj*^)ost-@ia^O=m+%#hz{vXV-07&vN&D@{>aa<-2-EambS5I$57?H!xg8sV~YE
z%$8B9Oup278Qk#O6A~3yQ`UDU+;-_~3j{u&1^nD#=LPhH&95zD1u)@5><Xr@OU55%
z$2&9+<0IKD%+1Y_dB;90D^7*o-`Zm*tB*GgS{PTfnBu{`vtPv4qj&Vp5IB?hX6GTH
zehi;MQC~UDcDzW`{jfNFoiw$p->5S`(-l-%X1afGx(hAX??xO6j}ynBwd~09{ny!a
z7*V4qL=HG#m#N$wW_6p$a8%!bB5`7$GaDP*fZ!PMO;8eYgfDRvvU7%RlCD`i&71VD
zP9-8F*z|ckI`Amjl8wc)23A`4P(8Q2N7E+DZoBkPKKKqNo(cD3y6ceAPTi>!QXI=6
z@N!kTKR=^0Y)qZ59lPgT=H<P(rZ(T2&p-U)0~r19x^>A21BPQS_3ad1ATT3l;W0e7
zc56Rx4+5iIzhjjbxQRE;eT|1l8{8fdmoYnmtXhuer|h>J4|eYAb{PEMi{+k@Fll&5
zoxpcvo1romm&iLH>PXX*@3{*H#y2;Aa|5?HVqa}({}%SgS`r$Tpd`~hv<0<lD;^3v
zBFqJ)Anv?f`T}f9JcecwLIb<djzuKA*H5Zh=GH!|=Z8`_1^8@BB}lisnEcU5vCTsX
z<v?Nh?KM9cx0!<>FX2il8tUh%vB{5E^vj`49EQ4|zU6!v0`77);VSh!F4cT?QUSw|
zv`)#$F|)f~^S>DaHT{Gb)FFfzx>EQP3``Tq9C;{K&BU-Y6o0kz57{pzlewbn{vt@+
zl&co(CBvaDVzE|9NRnj=R<yt4m_gJaMz<3_(@1My&@A(5Aj^_^ZU{}ju6UM!Sv<QG
z`r^o>qDVHP!R;QtB=qKCVyhPR*}dDbtF`c&Df8YmY(%Vii{?=5ySAbv@PVZ@(?WqU
zhs?r2H<v&sW)fr8caHgq+ntdogY%82AxE92$z;PIIxcggf09rJo@h+iO1MXF$;jBj
zH`e7v9Q{{I@-dc6seuIO6I(w%rj*Icf^vH@bdREm`7Q2S40ep&Q}1<VOm3`jU0$n8
z=)eR-lyi+^YFGRvgDjxwa}p6(+SkHgGTBMRcB*i5A<iS8{Ht=exZ4Lm5F=na34^8x
z<%&NW>T@1rH%OG22787%jch&KQS2gd5o?nho_g*HhXs5~7bB4Aq}IOuK>_xJ8h!?B
z9P>9(9@!wBKd&gc;}~C0vvA!a18!qf&Dfrwl^ESVB%=N8_T&vM$LG50^=%O1@^Z?k
zRD<#{pru0x4SoC~8YIgr9>`mVBiG<o?U{_S8Aji91@hNn@DRw}+xNT{34y<%(*3hX
zxtV$~Og|%1VO&(+D(A0=@RNsyTpS4FEYw_o=4d>XQ6<|*dd`f{f3qX2<Kyfn{Y9u*
zTS|rJdAw~??t1CT+t@l-Q5Czc*MR3Xtg1zf+%<7$Aje)9=ba$tCr;;qX*r30A~6o4
zgr8xi-NEy}@%64;2}Zl0K|#KQa^)KlrA3j*Fj<d2FpPxDzN!?UQ`|i<F`Q{VU~+e8
zdhe>{hQ5>(|CEr|-M~wPCT2pRGB6=?f5SAO?#qU<-Ne6nIdk!b@)Lh}+!tnUh4#41
z388LUI5ROTUi)Pm)qYI$T+^l?YOdJ2=Zmh`hAM4FGB-?puH*NUW)cqr-$}MHCm*K@
z$uvJRd9=Kkiz}`j<Dno$0D<o!3CC%At3`!Q9}yb*QG*UspZ_eD6l0iByg=Par(YpD
z0++cjMrdEk>V;SHEbhFIxm${5Jezw`rAT;`Xb6bBmtx?}B8<y~&gQ&-H>8-1yd{rp
zLEu_1*!c@hUds=W;ZYt;S=eZtxKomlxnafn)&w~{-v?H5;C1?J`^`Cw>k$>y?LVuA
z=oajhekQD~)x$+Q><j0qB&}w2ftvCdQvin#$=wxR2Vx!@n-l|jADJdS=CQ-?r^?od
z?kCX~PPN942=?8Ag~NlE=+>(%WHh@Faqt*DQB>{`kZewp-hjt<XYxL&E_06%9#J8r
z5T2rOn4z0a6HGp&H*rt#j*Jg=M*j15{N2QOzBFv=p5?jCD<9N(nd=fKL>zqD+F~Pw
zTzl}$aEUNzv~67skygu&YBY|WX2P}xonN2n3Dvv3@!88w5RC9PJ)VS#z<3UWb#4vS
zTT>1%Os-xKmLHyklqO_aZQSK#O>v@_Ltl8GiO9$WCB^_fmn9+w8frM)$2E0DPo#U9
zhK&XdzXOp{%H?HYRki<nt`V=r?S7zzs@QZYws4ff_Td}tCZ0`Mb=h^3&sg-t$36t~
znpPD^(jc_NvGVET9=Uxl^riQ8Q}1jCj9J(6t|dy{pF*E+_h|J6uJMJ2{Nz}SY)}2p
zPit_AITs3i+p3cw?JQ~u7Qs&E-=H56M8)+h)y9hEtVND?T-+|UygPo6=_0+CH*zTi
z<D{{X5=-Y%ER%*to~G5(0A4yvm&Qy^PVT~UiaaqjJH;qeLI?Z^eAp?Xd1wPFkjdY6
z9-l;kNgI8V|6eqHWmH^Uuq*@#5(o|n7Thhk4esvl?(Q0bYjAfD?he7-br>85cX!@=
z_r819njdiH>_4+l@9L`RZWpi5Qmlo1%{DArS|7$7Rc=*jaV+_3LKEh!I5wO-Rh*F|
z;qd$5Vxz?=RC{h-sHnlQDvOt!2aWG~8cEzdbr)T$7XBi$ObY+KG~xY&wly=pRhdDt
zO8xy>%>0AzPrJGGR@So}Mmj+wVso(dH?B%u!z36yZS)sQSH(qbba_tBh6*)_SiF#f
zS<efj@hoRX>U&uC*9h~kX2c0WQ7^A~3eer!zOH>IHpzE{sJRl9A&xtH<oojBCZfK~
zzx=g*a%N5Q^9s_}#qKIsw1>tB!FY0?VH^ma{HR%e24+qXFr-=h)OlR~tV7PV9aPx(
zb=0_xEKsR%Xs1}cfzBuFr0=(2;p|U$S$Gr_l%y2wj%vr?1RhetfPjE{cUxXsT-{`8
z3L2XJS!=hXM>4Cm|MLPQVa)-7PZ}NM^SGR!<%pu#$&;`N4O{(~k6?&coT4S2dXw_g
zoSi&2C;`;zHdJdIKcv;ARG=X{LuE}@FtHoGVK6v%D6Tb7bVyv@(0M|ZjkYRWO((d`
zhH`DF0sjMh=||>2IS`_`BdG#Kc<p0H%?1BFov=2Y_Dujkpz0DI2REiGt8$D1Z?bFF
za!5SZ#P^n5iFi4=s-Tu-bFhu~o*07rITgCb%N3^#Icn`cq?=VM3me<Q?Hd?G>xH57
zH;f>$WO}VAgdDy&d^Ihz@eltU&{WO-`(ccr3!L?DF27(GC2M^@)E?Y-L4A?fGwcF@
zyDAd)k&%gJmNzt_P(SR+i|3QG`RbEz<H?=Afhc$A^E6A~&~nsmVxs8HgF`vMcWQ)y
zLs;1y11(YLtsA>>`TV6~otyUZ8j;fIxhc40O5}hzqOKyOWCtaw+Ap~}<!{ewS5MNn
zc?%aX_A)va-bC|Rrq|Qr!OTe*2Wc^*;_vPzkekr|#I<kV;t-`!$;nxunx>+j`^?)x
zU&!U+pece&;k|5^t?TM{cl})14q4J;<se(S5(imt{h0)Pf(8p|!J4UC7dWLB^_ret
z-aoA))bW0psgvpy6SUE$X0ti+j8Pi?-x2lh%%^wbOac+6=B(~XpBc#<d@1S~FG3aN
z$`zfTv$nHX1!AJn(P1C0tgJ4KE&LfS{BkFs^{}Vpi{j2UV4{g|hP<eXS<Fn?oZ{a-
zPZk!~kGK_=heGu}KiVGYTW7*YzUp_|04ye&C)+Y7a47ZP5v#IyZiu0~zc+VzAnIF#
z+E=fuUfRx&z_$(tP0GDitO?v+))*#XA?V-pM9LLsW>&@ImH0QS=!}6WZ*%yQqjz_+
zf4ObUk#2^DfAY`-qXjVN!LzExWS>@8?jKARzs9RUt1mZqHCZ#J@n)%%4zQ9^qGgNA
z`Ptx}I9GVR9q5i(gVI?!LLbhvOlnvUHge0#F3`GDvHoCyr{Nk@(f~gbf)NZ{^{rQL
z;qM78jRvb}Q!1JA<s7gCgwUG!ixiGT7Q*0H-FLr7J+r|cFwFV0Z12ogR($6Xgx*yl
zYds5!m`F!s(q59OGF4SZC`=H3?0G6@YjL|;isSZuJR#!gkYyYUDzLd=TvlDb5D{+9
zZMCM=W=b}!Yw-t)7@1Z0G#7J`dFT3=%V*d<Tu?xe1?=TR<~cbvbvQB;w~li*djC8E
z0)pZ2)R`uIpU%)76&F{U1hIc4b^zn<;0NHWyd!{HL(hxfMBJkGF)Ji(QUo)0Bk}$=
zcyG^$?=nszJhom;@96w|XR^h>40yeX3S==`6Ola!$GXa%zIbjm%)K$$c?^CRp@ns_
zmfe1bULQz5a?F(so3;zZ0jxg3^V&3{mI1A7OPdQbD*sNt{`sItHPw|69}ran(ezr$
z#&G|V`>gJ>pC$RN*GF!wC^`6yY!Ct$q`%V-3x6E3xn7D*4eRnA;q=xU0k*R;+S7>d
z8KG?jLYbyorEk-`O{fg^eD~Zx+SqQagWU29*st;LFZY*lt&WNPs>0y?_$$U!8rp5S
zsfx44o(gLOi?N8l7;x>=x-XypGsJn`K0SP_491)-V=M6YOMZc-llDKW0$y}Zs<ZkW
zyVtb<GLgj%CJ`f$;m%}Z()*cSy7Pq$==O$KfB~^^LpkgOF*UXS8agI_M1f<Kg2E<A
z?dK?5Ig-bXxe+bjNbv%ms4QU$j;zZI>P*Qt@*_lJ`4hL2v`qaR0qa%676uU!5xW<h
zo1?o509m7LfPLq?`hOpNPb<rSj^m(4*On2T+W#_0NDe72o|PsjqQrWYSUCD@%LGNH
zASYz7DR&7Q5O=12URG)=!VYh;tk~u)YSN_1oF47z74d<Z8kw3JTBG6NcmjN<4%C@K
z-725fhQBD9Kpz%DERrKAt^HW%gq&DIe&Sh4{|2JO>yOsgld1)v0u}zmrUwv9SW2VW
zu@gdC*x|~Vbrt+>R7t>d8FEzBmqvQ0H#tasIb{NW9(-YaYya|T_tmQ0(qvu-$d(Lp
zKfJtFXL<TtH=q!n*D*P=^wpWWwqeQMV*=POW$-5$n_4d*uyXpQR@>Gc#`rDG{Z2Co
z69&@NeyI8DgQCI0+R1#M=uj5>r(|uZ?Z3|TfK4CR0Pfbh^F84#R%=Z>WQ*Hw)%Ve9
zZZ-}Nq$pk3MEEJO&yPo*C;4Ks<Kb>2NGP{P?@8qQ3Q{}eUpcPc#(WW}p!_$!=d@aJ
zL><K9{lUdNmym5GPLvRHd28GCyu5SsZJ2W+IuBzHaj(nLE;j8=g6-B)+dA~g6*!QS
ztVISx`D^NM<;iLbGuLde#BDpl7`TTc-cV3Zq$ZY9)-!e_=;&*U*&Osf;ndksZFIY^
znt1I$9|gmC^P1Xps=_{6OGbU&i9V9D9j)2k|EMmk)3fBWY{(@5Py2XGlaZ`BrDh(Y
z5x;ZrhOm}UI<E&TBP`(FE9D1gDiHTqSwssLyH0$)pa03u5L9l3zUFGp)6(6Pj^f2G
zsZ;ysv~TMRiV!iz7?%EY;zk%>-{7j@rifTb<b|{9{K}}^fx^}jGG&3QOBc(C!EhI@
z!hS-cgwyhP1+cMnb9~yqrC9OX!^<DEg9&M)A<ONu4X_(w=l!nz^1U9*q0hg`GH0SE
z^5{7?^mLJ!!Q<|&lk4&7?b)zg;bLcl3(LAMG5=0AjhWAAu#1&Pe?JIFi+Ymh23(;#
zbl&|uJF{DJp3f$yija7V=Z=;{w?vMkp#VD3lTp$gn+Wgp54J&#Bz}(Ioul-yk>+~-
z5yR%je!Z9R88*cEO^(xp{d#q&R7<6Kt$dPoeyRmIW?)+HR*A9A2vx2FY0XCY++-Sc
zm+y)CNPte}Bd@4V@%GZ9BwHkJ>VEffU@tM^t1KGB%h?8#)tSA!q>Ed2SXdD&yM0R8
z<Q=%e)Bde6NSHhS{YK)dhOgnB<cqnHkzg%jFeU~r*E7jXIFh04fTvQ=QWAp)))=BA
z^SX7@_29V&P%o20S3cj+cp`eY^n(CKGzN)cQcAV0s|Uw~W5h)98^m#^QHT;=Vhp0P
z^)f;4NL`y);+)R29>!qnCK-_HzO8Y;V%jZwDy@Bu+Z>&oEa~WoYT0}vW-XZ(FLmi^
zYUMrr)Oe_4_8;f?A77L&T&|qJ#~PY9Ab88LzJSY-$j6V9EG=c2<>~ra!*#)<;U?<S
zm(c1$=N5DYmUP*)FhhVrzG9xL_Z9fBymjV87W+KNjUv4e^@T4)ae%Pm=7|l08=Ok?
zSyK+{wij@Drf#O%?f9^@n&{i?zX4^gxvw^8sMVVFad;VnlC<jR{Y+stH|r9%1_b96
z<lqIX)STwtR7Rhw|I}3LiTCD$Cpz0aHr&=eicQWrZq69!G+(Y!OY|~-Ih38XI9*qA
zC0GnxzmVZSK6SGPlYjnMKU^)GZ+M=KSw8aDXw+?d<fSSY^E@qF+eQZzPJ}Oh+(+*J
zvFzR5V?seP`b+-c<{bkI<{eK{kXc4I7&=x7+}<wNc~yMb*+>prDM<0Vd2NFUc7_sH
zxo~;u9xr8KC6j;Dbe~7+T%g@}Tc&~BLt*f~KXWLkYVaTuDOI{Tt#TnGGomq^oI=Xb
z@qsg?Qt)WLuQZ%(G<_*;mWQEhPM&|zEfn#4dW{!D6>fw4t0M}3rLHD6wt54>y5Xm>
z=UHr9><MN9oCrt$8pvbX1#Qd?e=<qEMM-J%7jTaEJ~IJl^rU5)=!Z71=Vg&(K)1i+
zHdKDrp!J|>GjP^QwbT1Xwm`&}{OR#^alX~$$}-F(gF#)Jhu|PJ=(Vvk;Kg<-BZb<v
zpbweroIXf$8|{vylrlTb=_rb~)w1WkZEC=oGdpwi3|HP+hk7|RjoAR;=Zdb84Jhdm
z`E)L2x%u8Y8x{<Je?Ioy+CePXCw_87*7IAoU9(4~LGHI##nuUTktA9LkV~YzAS=?U
zeUbV0OS;(5pcg=ovrYUEAFmV~7NVl2Cnh4&#qW1}_+`j!)&4XBlS)NPtM~oQjPZnU
zz?P$M@feSVFL|jMC#?OmQibZk5arg%frORSY+#izBwH9A?Vma7q+wzzY;xPuvCPjm
z5|t2B(b15xvx{jQIua^Yj!)nth*6hOngz7C4{YLOaT)y=GxjdVVFXL(S-clCkB^U6
z4D_v;aIvsteRV%UZYHH9uTZJ!HkCHqq(Q#UP{p9CuFmYMNec$QSXtx5UMFVpMURYF
z`aj)$2E4tBKtY!9Jj{(_F&q0LEgiQ}<rIglD~~Iw`0!<L*IyEj_&3&=l$Sb4#~y83
zR6{a*j73Yfv;Ily_!g$eMYKspoi6vxKT|Q+Q9LXTvk`xXP+WYE9KsypI88+;%CqU&
z8t%cy6&Q1~P<54w>I{p2)M;0B_Uy_LWq(BHAt;yL@4vF7UXNBka5+rC6}Y1|rZjY3
z;<mg@1Ia!V8eQejP&YQ-BSCh`E3I+UE*rboPMioS+%#ZSb*zsd?25de&xyuwgCW0c
z#!`?pFnS}Cr(HI;>n=4EX>Bn%vWHOru8wohH0NgAJI~&5FFjAs#xe@_-)8<)y3Nfy
z%rDee*qHmZEBEc;>Kf7fxvJvOzRKw4!<&qCNWML78~I(x=Z>hkC!m|3-)tj$K%pa{
z53Jy12r6~Qk7%$br*|Xzo~w9UmAtU`D*80^P^;}t)rLijf;eA8>U?{2_^FWPFw=?=
zD0+3A%F+nTX>d88u1h8M+E0w;yOFvM@cMInN^HxKWW7_OE55KYco<~N;?^>&*qSl7
zSYv#6_?DgE)SC%QHT~n{4cQXX3#624vORtP$f?x&DnPJu-zEagCN_}nn>ay~PLmy6
zQlQql!+<g>zlq58=I-9M(yS8Krt@eBc*Ad0J#7S`gpV4&f^(HS4m?n8-_jOTi2A7L
zL(ZFd{<?Hqe1v+`Y7?~FUB}2$c`e1j4#Y?lU*#882Szdw|Mx^owUNq^IL~oZ8R&&~
z>339)Ivsmk4;ufwgXJ69TD=E73%wbhOzNBU$J*?yyqX%tm6H?});<cgz<t&)2W=S=
zUr}ZTH9Mjgn*XI4cC#L(;urQg(b+kovmB72B-04Q#(%kElpss6|LL1jxIU^}{tA>Q
zlR#FlfGg|`l;-qw%G9nhAN?y|t&J5ZZ3X_=f4W>8lV8R*izRwKZCdqM9DQ&3^c6=K
zl9Nd<6X%&bkWsDeQ}ZB1-&ow;fLQPuk{oKx=8|zbe>b|axw07he*yu3GCtX7KJNV|
zytB_B(h%B3>1N+QGGZxq{>7eh+$z-sG0MdQ#?6MOY|5>FKNW7sia4>N3{JuhJ<ZR~
zh`sJfI(O6MbuF25o-}mHb};_t7r@0#+WLyKa?@bfRp)AgJ=(AnK7~-~Yr_s*=dWtE
zJg-#K0(K}Pw{1ND6%ym{;T+tWM}Nl|>PzoGEzf;T68Wv81conJ_j_U!Cx-<kMt)_x
zxqZRcYAMW`V#J)?_SbbjwycH}QYvilEEjKT<R<qnu&~@u+ju11Ja*s%TY5(I?Pn*j
zayr}?0X&du>ei2ItI8?b7JSwW`q%op;3x$m#D9qCb&rQ^u0&W(cicJhh5Nx*UBW%Z
zI%9`F(+G0VTe32xYJ230teW~7avcud3|x*lGJI@3ogUzJ+m0J&p(Y6M`};-_>DNj5
zYM3aUuV(*xy_bA*C&}mr4Fmu{Qwi*Yc+uvHf}VM?RMi<nQkb@V{Zi%V^l5m*7dqpg
zvp|>{@+2b$HXohbHK7OHQ<SBR=yd9HyT9AsD(fc3qqhxUf<<BcIvuB&aURfnu+^Kc
z7nXsQAeER|Q;L7XQ6HJfeRdYHeG(Po#j2Mp6qrDzIY}+M4o4j>k=4G+&-Z*ZWRyuR
zoPV=E1EhM(?cipOc9@PI4}(2MoFKAjuZV{1;4~;IHTBf7p=%JN(V8=Gf3}^AtMFsM
z;E`f)v*px6&AphMmvkz8!9`<&5+`y9GxvGf#ZC}soY36ZWXJO{pDH|}&M*C9YEpci
zDMQQB67MVElA0{E6vnVlQ?u>(tG@TsH;9VavgsYyb^80^BXcwLeWK#SXV$FicW{`*
zb&tjd#m_ko?mCkLjvU`-rH&u=6Ng{UyAFhegX};(Zf-|UTZJu8Pq?504P)V-U-=*L
zl;UTh@M6R_{60|p-@!irC|x_Qo^`ZZw^Wm)buRl(v$9_g$|bBEE*cK%5Xj~woHqGC
zNa^Vbpt|&@ZEAW3{w@X}qy*e<m#%bpa6Y{5azOR<^?5=5)@**|)c3#RhN|wqhR4bE
zs$S1cNFXKheI(M>))ob+j6s_2U#cXfUQkg}BLsXv<pf+wsaIp%H<Xlwe*SP{Qd|7|
zT(nvp)%&B{qI1HiPcA>TY)^R1WlT(!K3+P=Yz@PtEkdWDF#mf4%5_9*<>luw9qBdo
zc%3SBz{VYX+>{?;mA2;=Go3$x_azEEF!bq@nJAz={`}c@pg9gAeH>5TZy6K)ek-l5
z3uHH=OHcGHFigk9P$1{_#Dl1hN}P~oP|Yi}d^_p>;DK=`55r}Jd<a9`HzvIoVe(TM
zOyq#X5J7V&E&Nx(40A4ma*zs*{g_ADJY+XSw50yaROe?q#22%U)KnEL?9Tb>-X+~q
z9tELS*^coE#)-ea9Z*Yvi%qAp6E6`l;$9n{)(N=(uAv#7+7@(qe|?`dxkQbW*tE?=
zLz2&cUxC%L*85Sy2#TWbjZlHMq}N6cT;&Z%Obv)-q)u6a>9C{)Mh8q-CMdLq<h4fZ
z`MSYCVqD<ueC`k91sc}{Y)8Xk3}0beosj2Yv--0$m)Z=J)6H8(#QAFYe>3VLZs*gD
z%Rn4aC2BmkDdgaow6Ja~0XLu20+eu4o*P}^1dD{b-VoFvZVxHmGpAbZ@^Kw;3qN!y
zClw}(l?V?Lj$<oY{V?HT3UV`eAt@E$%USjUZl!DOHfBoS%8fy3oh5@@aVDZvw#?jV
z<`oL@RL%uN$3+g$72Jn&2vU|)x$>S^w}YjaG~C;<n1!RL4d~ZNc(bS0Wd9+TuZo`R
zgagF@=H;`DF@Yg=AYNT12w-w|b>BLndp%X6#r{D$=O!*9g$y@t23_<2F+8ciGZt+O
zMg?#zCpS{jt2{g#OUR_|#LI}q`X-}%%5K1r4{)H!fWu1JfZk;780Afy9Jy*v7hro~
zx=KxWFm<0i=sZk|L~y|T9FP(p?-Z5M)hG1R+8G}Yz!clLDHAao{jZ2~9%$*K9#RCm
zgI{U3>f$o<?4@*R!QGLvvagRqD1PryX9p^sE0Z)x6P?_Er#A;>O-xaAfo%S|SqEW!
zvSe)Nx-C{TRAIa`Y!Vh!jr$?W;wYh3F(_@=$OIPD)5o;B!MuvP>|L=U^)mkg7jRB&
zdh&&Y5f0Tj@p+0W-l1cF<?mXifgNs6WlHNKHqmK6c9hS-r3|eO*TuPmmF+BOTw|%}
zW+E(;rrdTL2nt!odtQB*En87hRj^h@0Nty*EcOHpn>KS1ytmv9l1qGcnl4U+mX!HI
zNx|`FXKW*oW3z^_F$&!H9ovO!;OZna0XlK5VR&$->THqfwYJ3aUz<E3w%v!%;Jx$4
zBLI{y)&7N&=);nZEKyi85{bO06TK=`y9hV{#}=XVZhBT>v3AKU4CAW%v17e-=DxO6
zUtJu<yQw*SjEjSLYLOYH&&FM+LBDJgU~f)8FD|}%QZ-e+*Pgn>(+EDF6R&=`(AIBr
zf-jYg9scES5C3S{`tjkttRii*+P0OR%+}=L;>ey?H9yiZelxnhIq<n9H&DCypHAUU
zJo2y$IAHm{?yNd|1O`=!7=xZa96)~b113^N6a7MioJW_heofJ3_z9D`!WtZQ*VP-3
z75jlHK@ExlkgM8Sdt)6;5iRw=L)m$g#rfCE1z{5X7?jO@QGHCo)^R0z29QUAQCT0>
z?i7rTcOIWoiAToA!O^T!Bmh9Kk<!*azJtZUrE7}s4R?pf#m)rll+k+xGO*E$AD^>o
z_sD{H7g(x4G(H~nU+80JS4%i1G~Edvt<=AvBKEsxq?*zh89+>IJ58|h+^tHTwQO7q
z*d()T`mXPF2B)o^+4ek!-+F(Xsnz1oJ~=t5>vD%88Z2>r-|<mcP>?mw)Rl2k-4+pp
zzdSdy^3Ur)e}slAcPcc-=E(*8b13%P@DA%VxCGyRH~oOfWfkD>|IYXLZx^!shS!DL
zDhSkiyHnBn*6cG1?1~Bv<!J%=nm$`j0ZttD_RVi5Jq+T}ATzmA4f-i?^+q9w0{Lo=
z@-!I$@C!0Gpx)|+2MHNj^v%-2!R(;=?0#ChIPzwy3$0>ttXhwB+uscJD^i$5x#hQC
z0)vrXhOi@oNDx!j+(+aFRdOftEfafJ4>{bfd}bBwn+!H@ORC|QQfu}G_QZnj=S7AK
z)J_gLxW(ID+u#0D&%x&yoBZwvRx6`AR^I1MHwYLzPpJBK!gu=>C{jxz$YM0rHW`z(
zH397(a?=rSL@&yTAN=H8G#VP68Wh_<rC`62Q>Vb-;j%~U?7u=EeYVrA#F51zvo5~e
z^9^>uDxM4pLXCJSHPivaANY5S@n^h1u>YqLgWRKAl!YLHdzIwfwja{wKVm{`F5`$q
z6zAA(dB>Hg)nF-Qhinf;i?2wiosjOH#+6P!UB*b4Hk5zyOSIczH9N0@pmdt&8*W;T
z0E9r{a`OePX^a$i3?nNlrPP)$$xC73N~MOD6-F;U2OzR33fZ3TJ!SEbXJ$B)l<Ti4
zlB^k=5*hO?!7>Z`@3s%Dkcbb7;1Uqk<Mi#^o}NE`6_N}L)jmD^VTSw|sc*x(?uXXg
zf>RnTD}Fbqkz`)yXKC%)BhOo;FWjGp6v%H1JigT(qJNKEHaTmcXfhC`_37@2YVS0I
zf+!_1R~o+Jp3kGORDN<QN0d-=xcrgA`KHUI8mnXrR=)isowqO;7MqfC_YbZu%k6%s
z5v<jNoIg=|%4QE=$+&CZTxdOf!A_Y3XRgP*S65EH`_C^g^RpzKfjW(q7(Gza&CbY|
z*ti|UqNVfO#dDsf2KzHEjz0QN-wD%4mJdb_YFfq5Qc$D4zmn385U7>0(e6-57#}w)
zCac5&ElJGG3FIj3g1;bNj+87Kn_WB<<Hg;i#>9w|Nrzw*E3;GcS|>-w__Rw!-57hW
z&4@1i`On>@Kl*M?OvTTfJke8Z)TF6(vq|rBiBVO9+rK|_GmM$3M2$7kVL?jRl#Nw=
z9Mhi6%$}je8P~sJWejf6fs13g`#YOdU6I!SY-UvIuF9B=3RB74j9xT0dWCB?fq_)D
zi{vZ+X=aWO5*U|CBam7+R6It`fU=~w$@f-(i84rwS~M=Etcky_S`4d?DB7JWY7zN%
zz}iZt(#PecUSqg7Z{S>JgAq<kb@zy*$!3$*@17Oc)6^_M%~`vV0QP#_405H6i|zg8
zAN7sNzc~h1U^BEuJ!VzL4$}jXz<2&!IxK0$F(8u8haDbt^B1B7$=k+B9wu3ha@6Sx
z;K(V|f9Qc0Mnkj4pj{53ySsLStL;^KTuvB#M|Wjj4msBiEY@_E2AZa8VBtjJeN^Tb
z=y*<bYD652J)|%jhF3*>>x{Z##<F;dHD1lxv^)=gSHXye<^3~mx*o9rrDuNoEl&n$
z=J63H?QYlSo=lW+zefPW=YUFHwY!0eeNPQ`pv@^FY$@L~Ch#3$-%vI}HlOw{E>S<r
zJVMUuy3+pux8zs~5%#h7#*B5yWLt72NNsd~jh6Og)zb1rxLgs9Xs`d!$S8}CJ3_^R
za<^EWr|E7lreTD(thlqeE6(Cv-$Y^Qm~h;)9Ae^HRGpQ1nd9szv%`6xaz>_!s!<-W
zCED!x1h;+)aoL<RV-V;5yWB26otoT_Y0-zbjUNL%|8o-B3rWqP1Tf}wdHE>PCI<%x
zvpDr(B_xK`In6_2+(Uc^RhUyc=E!>D?^(+~suw>Xah&gCClNAl2r@9`AFqS|Sf>}&
z)e>)wF|(`7iyr6J$*zQz7K?RLMtPz|?N*UWc$8dTTidsQ9w-RPf4M(1bJ!q?j6zl_
zS7T#aE$GeqXo-T-Y(K@FFh|yDv7=;l;e(7Y6NLDd>NL}MExP-;TN>FCn@sRoEwTg+
z4Sx{(KB8`ZT(U#Cxiw928v#gq^NAwBuWxpkklsl#d#4+tDOLEuc00^uwPpkd<Flh<
zKGe|HnwlEONSNH(uYtpHxsr;8wZFesEWbt!?r_z%?H}Xgr2{ey{NH}<B#^dD%a|Xc
zVLrFMe|KY8!F$Ydq@ly8-Oj<Y84;EEGz4q+b*GJ?Du_)+YcX>cA5_fm2`59Xsn@Kk
zN?)q{7mp}Q-hN&F$R4pd_wz%B1V}=<jpW6GZmrvK*!crOAn%{>8#rq1FWM8Je=&#2
z-S0e5`WOwzW3rsLWvOdERruN-VIr>oX5TLB?RxwR)ba&c%Ec@?<s3)2s~`48{#$bz
zXN$mv(&iuKeTbDzf)|tNyVOpj<?L(8o1N{4>$K7B;bUH%Ct*Z`11Xmkk{WO77BN43
z(^BeAGSeTv1CF4?Ql;FUth@mlYAk6VRqhaFv4OIAsIut~7(K-cay_}JxZvV!QOPm-
z<LeY7_V2Z6?U2Zh5S=UNlFm?n{2p^5eGiGnM^LKvAD`p|FO~}KUey1%_Avy1$>c9{
zU)gj3t<>IzP$yf{y3^M|BoFPemU+e2$l8UcU~+}he8(pKnuhWT#v~YK{5w_Kr|?FV
z4>`-@2<UfFvH$Y|uqE5~30Sjj<V!UsS<J5MpUl|bc|l@~KMDkemjmB0A$Q0p+r0v7
zVg_x>N1vPoy+>++umiyEhda5KBl~jGE#9r+uVRB@Ma413H#nK$tJ6$@Wh0hjbkcC+
zkWtk08{UVaxBvj){_y0d1Q7tx9RB;7o#$tK&2)U6Z;UA__EjQj`TD%z!iwYltF2Eu
zt-CV0o*g_Ek^S3>;*7AL603RCOu^OF??vNY)1L)S^?7t~P1^lKy8Irw#NpbAiSv!N
zlLFl#;s1GOa`KkS(_Mx|IeI!WVR&s2<xoxc8FsBIR%LD6KC4G1>lvJhY?@-Wfqe}I
zYB6^R2Ap3wHLlFmQD#m0(_Ie8{a+4vI;c^9?5?3(`m)=4l7Vv6JMW?1w*gtt1G3TH
zn7ln>!%S-&%?;X>mHz&`^VRq=`(9S62TLlof3v2Di02ffhM4-o92~TMwSgvDk>}D~
zpDa0g5?#15WJzJfl<#4`?k73)G;;pcZRs7rHwYI^PBgAO*hR$jY1y;2oxM3&`dRAU
zZJ@@iNWZ*ktDxrBg4jM;u%BQ;VDOH7+OST&5-cE4&9FD*V#_o!osAYIURZBuv1+1P
zrR=;Dtgi%AIEh66ZU(+^AmtlzcVNiK8KCf)f7+S$ixmdI!Gt*fMw<yo1Y-r(Ohtun
zZMeli5u>~zPmQ129k{ir5m=%<brsf%Rp?~uOa=i!v-cKDWz;X5F=y+QwGKKoo!5<~
zdg*%fpP5}u$qgzQ+({)}ZmlfwRsjnFDvxt*%VF@kx~TweCh}(bwYeoZo3LL{o4=SM
zw5l$_#9p0mA{>LCwFy{#zMR)snFPq;_t?>IA1Sn4jx4fja<MxFR{i$0S>$s+`%>*`
ztVPVrsEFW;SA=j@!aBrEFa9W2yf!BecsDWVQKgAWuhvUwL|8o_LeuNQZuGN!{zIR_
z8!alf+MVa(;`5n3Mh=CIZ6Sa57BJDM&2Y2NxOJ~{LGhCozG>_p=5edXSh7k(vvHbn
z4Z=1Tl(hy%U{YeDp-H;9V3PEbWcf@z6~*F7NlKRaAuBhnmi+j5536b0y?^n%Khm(Y
zw>P$M#}RnFWVpL?dwhIcnFd4TweMSnxw*t=XJ>0}!*8fZPcPRat93EKkFZeJ*DhyX
z9rYfybfBBFaQD+Sc_k%is)?NOiEj-wj5LPp&rPq7^PB~4MOhLuQD;#N)zw2rnV_ht
zp6Gb8VXh>D7Jn2R83(MWL5rO6^wQk^jjj%_gRW(M0B1VMze%Q7A;g7&94EhqFu_`q
z+aFh=Jp1jzFMSkBAX4$*Aq3;ovQ<(gM+*O<<9q49Ai9Wa%=hgCf}~Ztlzu;w6hkeV
zgL9Je^%^1szu4dJ5VBiCURGaFS1<^c%I-Dk0|h1fj&aJ*@Z;+0nv8|oOi(H?sKl2i
zhR{9+J>)qKXuU58@(+b8MWN0`<GNgVlf&gWr(jdp-1-UdrcE{57}4+n<c%-9s7F4s
z^G>}?D@`4;DnmS6^ckD$_J(&+AZGly3%Du~Asscwp()BBjM5-sA;oE&N;jVXD*8L}
zpaff;8h8qM=)5{h6e#^}qcXN;#OiX+cScK{T?fo2EqcmGjqZ`!#B&M=@?>^hm{-mb
zGr8h9zJHAcmf==z;^xkfL;Ym*)nPU`!DYOP4q@@&jV$UEvE7`vQ)`16Yt{f`r0@`5
zpbd{kPqptroAFxPCc?D~f<)6jroCW?6bz4JWZ?W}pMk5B<5a;AF#TnO({%|s6725l
z`wgl1d+s0dgo6$7u?UZCd_YiV?gx!$mI<UI0V5cam6_k{yQvbCZ9UsK821mkxw^Tv
zRnz}3;p`%c#!pE=*F5<A9E77&)P{)8hUL`^SFwoX<4@gh%FJWS?a^t>q66_@Qe#gQ
zYIBL?t15!Ne72S&7pvfQh^?Vd`Oi;$6}SZ(&<;XLa%d1Uub{Im@b=(WGU>CdI?t<W
z#uUpvG?AvbM{ooP@woPCf0xl_#%EA9UHsF|96z%y<a)n?58%v6n{a&hG;Zi35;Tk^
zetBP+u6D5H)e9+wpI5fZBvZ0dh1jAspB*pciKyO9kSJ{IdPR(X_K&_)!TL3v`2;+~
zg=9Ui&~vzuM}UJJHTaBV6ckX;aMkP|whG4XOhq3e)SK)Sns(8|3}Z;?YQ+CFuRLdb
z3i*Ul@W~cbIRu9Z5%^up1p0S>OGdh5{rlqiO$b_`@(6qU>BTZF8GSq#<YPde4d4hB
z?9tcjYq5!Z&V+*Nd{bd$9UdxB43sY4+FX`BI7g<cH}b#+JuD_98w{V%c}G*?-t^d4
zk<nZ}+#7q^qLp9$A{T!|C)|PPlEh?~L03l&Zk58n`uX$b%Mh-XfdUSrHJDu8g{&Z?
z<AFhEBs_Hdl~UWcf7_NlF5@&d1BUf^M-hS?q?Ce>05?)s=Qg~3^qf1AQU6w8*jhb<
zwQ%QG!q<a~={IOW%|Bm9S%iuP;1e+LC526)av9gh+x4(vK!O9Me?w8L1I)QOv-o3Q
z7}Lp*SF@a)WMyN1ROGqmu?z+Z6m1W&OU5E?4Y3X*;M8eWz23Yrq(K@+kgvliqjgQ|
zE#gO?^*)e53`BS=>9!=&Zal-5j6B&bdYvVzv|c-#(-_!<<B`}sH)kFYU75BGT*8~R
z>Rzh<u}i#mJY>m+L5STSKomgK)g1+<^DnHdOuB81&+=c@y1%Yis{Fwe@Rikk!u+=E
zi}_?)f8{rq)}spz6$1yKOEyl<tLd=wZ;q$;_wMvK$PXVk@?p2~ex)M#cbophgq;hq
z+q*I1FdpkJtcjFzX1e?2Lvgty$*Bf1!oH+T?+;c&_>_r2uva*QB(B*4O$RgpO+Q|O
zfi7+PfAPyJE4MZk_=0CGPaTB!nRj-Sj_XU_n53qm9&(@00R>qA{5Ad(72YXgw)60{
zEMg&V@XpY0kOWUTnUJH}N~4A<J?;_y`fwm}e%uzG<Z9k{ootWKq!;>Cg7Sd5y))k}
zal_(-1n=hdFU)s_qqHVM_SgCgpSWiQU%`UI%=?#2nRU!~M8Z6(;-(5SL7qVQs{ZBi
zT-3r5R(WU;9VfGzDCFcL^C#LRrD~}5h0~#3cFAjshE_`0dv{r2^|j~Qol?M^Y)PZ9
zd~?7dbgPC_`+08Cqz&O#1qTl2FOd}}xU9ZEhbp&g|FxvmQrM})hjfxg&tgMqP*QLK
zx<fr9sd@ysWainaSQNfpz<>b7<*sDgWD1nb_IxBX4G0Pbl6}!Oz^m;+Jl@PK-qrcG
zdtZ-KKV<c=Qxb#IQ*HsyQ`#gL+;7<Tc2%gWb-=SSrXtfjx*&I+6T8I7DzH|izjNi@
zE{rAvCC@SP=-WAC$%h|YyvcOYWt;_bgs%qixT<Q>&FTr0)5ZE%3_QGn*ldv3QP1@2
zqWypVY{=Crq-l*Nog9=h=1y;pETv*nKJGxt$3H^mbGDexhQ(omgQq|g2O&P_DOshN
zrU#u3b!1j*OOXwTi7AW6b?S%`HJ!3zk3O`-#m#3LmyfRE?#aAu@z{Ov5hHJ?D9NG|
z+_0gNDl1Ia;H)aWXpo!K2Ui+YfNzC%?}8^6gRcRyMt8^{D{6a6QvTqXJ;CNA-~gB<
zeLI@R1&=OgC3w+T4E&!uX56G1F@-?ouFG|z4~$5S%aBTqC4JG!beyuT`*{#6W$VS1
zIhF;VU@@3?r8KW;ooQlOac=my=Gh_1WG93%`59Gj!2Q8Vgq)mq>S(g{t^QpJ+>E%8
zNZogM!_uhW+R(l~weg7*u*lgFzQ3lzM7b7sGW~7ZszDh6g`kx+TJ`#YGf`tn(%TpT
zib_G|7=0Xw>gt?3q8Wlcc}io4*4W^_3{B+i1M|`DO#7V)<f|1}6RHBS5=qCQ__ahd
zb<jRpS`pzpSMb>zgnW|E%^5JGDrWT;#gqO@iV+5PNB~&oh?tOjU|F9by$&*ui|h68
zLLWUoH5=@QN~==;zS<sf-X;+QN1DO?U{y<pA_59~wm`Dz*bECLz->Osyjy5F1h%*Q
zHQ-021H9pMZa&)M`fpg<13a=0uc~=n=sEd%ga?XR&wg12A<Eax?`quLFTeY?7X)S{
z0N(U&i5zh~E}%IJ$J)R_KJcb>Yeq#yjc8GWeMvO)Plt&Qhv(<Uy8EKOes7jG4Jd)H
zZ*LJ%GKM!PD4o}<$WRb`1@~#mw#T-!a{(^~p7U79``J=hq~FrAjEaLJXS-iqQBOro
zLV|a9SWdKJ@oJXp;;KKcdBn!$Aj`6*LcP3o>s4mf!|e)Ubi9NFIj2!E4aeT6)PxkC
zgt0NCvHMgsA{;3nA3Bs66lyFa`!2A3hEB%gWuXVu2(U|LrsdVo3raSd=Qm^;_$S8=
zZd~W39T%_d;!+4=vlGmonvyRlFj1^nOp~Sj`IDffc6<VFI{K*L>FVHOrO^xKdrV3V
z;3Iyv@P*NoyScP?hT(`Wn3|ChYjPZqH<s6-C%0r@oXC3*@Zy%rU5|$89pT^APO{=C
zQABp{==6R_gcK2<W_Q&6<*1ip<%qd)*4UCrQE_#fP^Y@H7<MN_CiLY#R5zs{B*EP@
zt|BT4yA`uYw~VA+ec1S8v})2^W)Qw)VAApExD<F{%!aR<+Y!h#`@WOEf{V%<6Vfm5
z;`Q2#aY|^7JC69&RbkExW}q1OOc}L$Ir~`WxMGZhsw113pWYYh8<}xKV?R;a*#w)o
zNdAypm{xQ&E88ahI9c@D)|)CUqbo*!eB?{)P#?Q!G$7^=x(j0TWRdd$hK~2BIEKZ#
z<U$(jC8AtOz9F`H14DaVej!nVQXFtb%A}XJa%rOlfQ?k#fAHIN30I|g2?tKAe2L|H
z;sY(EIWW!XK&e@X%Xm$w{W~2*s48vfPK)&(zH<85)sp2PR?{BFmGATwF5*Dci)rRG
zeJhYq>6v!=*~es!71)1Y*?b!h<BJ$RS_`xR%-q!2`6Nv}8-KrlJG$l5%~zzB;=Zzn
ziqrtaEgCl;XidV)>Q#AqeclEWdg?}kp_Zx)Cfn~SKCC&Rylnc&2%nw_fd4Ur65ZlI
z!#?GrIk0tq?{uY=UIqn!g4j2i-O>q3Pg+H;{=(p)z=!Ga$9hcQuv)`YIjYdA*^aS8
zW&(XR`bF#OhQ!mp#{r<M)jlg|?e3a-Z^7o4E{vW)%Xc_7?*DNAd6f|VDDhn2a7=md
zBK(r2x#2+Z7;MSCn~n)JVxVr0JI9{fQg_#{TcXd4)5Gkr`j;2@XwGrw*37b6G%m4A
zyxp($ai*8M{$xhfCV-vz;X?xu(uRB!H)>S)d|HfPMG1LD-|+1wonfMt<hNG9Lt%GW
zdQ;75Z2;5h>(4l;)R^swgZ(^3nsVU$ztH87Wt*=8^5#B+lq=c3vI?l+B(46lT!A+;
z&ZZa)$a~FlQ>jclF#b?!Q>NNS`q15EZZ>rF41;`i<Bp}FRiy}85VBIE^O3=)rghk_
z!#8hpy$E9$D>AUo)X-t({`EOYdIE<Isrc+hsM~;!K<zxQZu))1;;tHrk>86PnUX4D
zjj2AnMST)ddqkg=@Nc;Sx$UD0<*h)yjmJf?BDvEaM6j<Aj;~nX021}G<E2omI;FQV
zd>)b9H$|u^yv0TM#(<NG`3B!`>&0)QAc3*8M-BTf%*7R?B9!sRuKbG~al&a>sh_1{
z0W~h&PR=uf*|sz^lYjakV!Bf_ArYmf^La3ruiJN?_O&l*<Up!z8;_0CZP|+kH%Eix
zj61#$w~vdLd`+`NP2Iye8Le>M0Y6EI)GnTpnW@!f4)<S1`D9^`UsM!MqhfA&)F3&x
zv?MMfLWnt}us;R55P{S(y9{MPH~+1u_<>2}btv%Ke2c4IqeW6q6ewS@n@(jw>Y;#|
zo{o8SeZA9h(eo*<u@VmwKq2yqpsg$c3yTwEU|Hibd-`NFVd7|+l8KazTxot?j+e{6
z$<OqW@di7u+b3M&n>e43LFDPKq5Dd^fnh4<pMGrPACHq}_;wrhzX}RI$?H4Pq8r7#
z9)r>Wb~tjAlY8et22CoPVRiG#to{at9$7m(c9qfz*AWeBtSt9qV@kQKz7)I6@HiRK
zD)q$d^^RoYk9*xV>!-Xak?@fbY9ik)mIZ6}swxIupS#KX&Vrp!fR7!rxYMyOI8>V{
z7z_Mi;*}%`=T~_HFb3pb5JC^pk9*PK=gMk4&cc#d5<Y#0wIv+T*uA(VIZZ*6Ic>YR
z?7i#Sm;e3sjh)y3d77$YgN)UhRJ%#NQPy1!M=M!}|6Cw{qYvh!KSJHi=S8~nt+KP_
z#_T-viJYgYI-nf-(IyCwm_PYyw%Lv(#+>X$CyLs7!otCiLrl&q&6^aKAmHubkj&p0
zcHUvcwSA`Pq{3HviI6K=pD>p#$@ZUh6PmysMC@hCh+Kx5QBRL4@5pYo(g2NNS2Zoy
zY0EAgd<gBOv4&@QbAvNCS`JWnj{u~@S>oHo(~5~VWd5^-k^*mtJl4o7Fa2FmnzDMX
z_Xu-}ckj`S_Xz8qFolG^m6I<qTS-Uc5aPLObKNSA5jUs%&n;_Cp7-(t7QN3WD8Hz)
zoCrKW+DS7V+xws$1l*N5)o6%d0(l}N?JA(qdzsU{PRDSKOITu}e+4M2GAbU%quqmG
zT&gQQxc?P;<}nnV^UPTXgk5=RHBSJ+mk4tF@qw*Zjq0aRwmZE}shx2{oJprl4viA2
zE}@IoBwS8EyW@{EWxb`BJI!%HgYxZo7hACHpp!%U@+9Al|H!oeE(xUVa-l|zX7m)C
zzW1u;vms%Ox1+Kf+bD$!Z0Th+6OK$hTtIBC=0w`0xhm~;IJz>#n`pZVk`fL7ROz^6
zOAOH4U<uYAdsSNjBO*Zy=_+K<Cnv^VWwC!uIzRdvN>u5UEfGfn`<mnKYtIV#gPw}<
zX=&DfyuN%4^J+vq8#ZZ=KJ&#vyyvhtnPb{d;CHtmFY&JQ7>9G?Lc??PzP$Y_A6EMg
z2%(nMYq>wk)FPw9_UDJXmE{~J_VH&y&)PWTTw5K%$O0$>2PXZl2l5U`O%dD8RZZJ#
zo1Fmf!{RJ(ov!t$2jxVN*e>9;wfT<^Q+l*8bniP)Npz(7?zuE&kvPWeZo?vyz%BZC
z#AFF^*~M15Ld(@cDF_ke(tPbw@n>il3olv9#P;^RJHTPek@k4i>nW2+D0aZ^TMe&Y
z<8MXAmd5z6sRs>q1`KA4cDL9*G0|Uf00DX3i!9Q*WdWOa$lGwj!$19^R*^V7@UG^8
z`pV%5w>V8M%yPx9(c;SsBy6ZSIwyDq$)P02B5xtGeKLiRyfe<p8Z?R&iyy>F69i}&
z9GlOz2PcN%BJM*h>=P5==8(!747(0GEPTm7xhXG9L`+$TeD^^2RUVY7Gf&s-HS7lN
z3lSnh7qtJ0Y~~O#SggIhJ&oUn@%{am@5{QzM26ERBcp97hy?NeRO8cnb05I$v&07p
zX^(pi4{g`iCj_Uyk5?TKEhB-&oxnsq&J6q)oNx?XsonJn;x0eca<Q_r+wS_hv6pHP
z0BftW`Fe09(R%+klgsLT^ptMo;J_eYYhr%7ZaLsMeYo{LBNI=+o|Gp$wqS=8@cc;l
z_pjaWcDECan+4X7{ns8nh;f-}c4KxZ)xeKb>Weu?rq|`RPuu-5embAk_wO;G5Wi99
z(|v`j2XdIO-)@!0<=vIZL|WbB^W!x{H*uOr>C%xoTT33iVFC<pPIUyT;N-~rNZ<>+
zzcLW}uHX~Om+^mgArcmq7~I)4!4D*-DEX6=W;{J_NgisH%)Qr&Bhrdv`-Ol`@{hli
z>U}E(rIVX%UA;0J&2KECHZ`rFk*fZM?QQ7K&AMUva*ek_PJeip=Ujfp1Y?js#3Zq(
zJ2bBd&iciI-{<pc4pRL#ou;U_%c|5XlH)wOc_B?R?ymV7pB3|!BBG$bDg)JfZFF*X
zhNK?0cEKCXNBXo(5SopZo+~?~A7|d~+*sm{aw(-MuhDDMX+0p;wO}}u<>UfWF|rd8
z@lQ+RKzDZVME+orLrIl0Cv@F6%}Mc$@#as4O=(t)AX&|0U#Ra<OI!<d?>BHk7*vTr
zFXa2?aPl0edpUi%{FMqJzSELA3EgES6)1H&^g^6`<nV$jZ>9|r#9;F2frUlsyXuQm
z4xO=v@LYFni1qXbwHG`^g?_=^KSt~NfFGoO=n&Uun(LcFV~R!o6*3u@6_0vUJfubr
zWVc`%pl}+D96rT|+Y`>#u2X?1pCP0(Nfd-ZDP@i6=fX`<VL%CSx5~CZ>wJ$|&R4ZT
zlut+01U`WJHDzNlRnMB9$fr7UE*G9467hfea}#6W^D7u4X4E&8FZOjCd<?F9_{2;^
zZ5Fn<Vp96C{<^}1WZLtZjVV*1#-q#jo7YsMd><$n=DHH9``m~454(g|Q9}Y46@#MN
zbHlJLRml)q?Z1nA4p9MR=r2^msIZ+rrar*B6Q+q8E648Js^&su-FWz5jAZvP#43f|
z0OXRa%fbjz9v#w!N$+Q)&)Q;uR2h+=%B!pdO=z73JWT#a)p3)eXVkdK>=~0Wa3_g1
z_!N%$y`R`ye}54;;KQ9!UGiY|Zne`3m>aQ7LV`<qSKb38POFG>cN<!_EUD}bj7GrT
zquZ@t?)_A^-`v!xkCV}kX*dWVCdTJkNzs_xi*Ke@fn=MeCiWCjB^1DM+v%G8f@-~q
z;2$Ve-s-1ihJ&$4`nvUrG-QRI58Y3X_XuN*`hS+lQWB~2l>TuycrTB)TvY59e9#ZC
zU|v;yymqLY`bc5TtXlmuWCM{+m=y*8L)zZ?{4J53u^WcE(w2mAp}ASW$&*?-L@{tl
zpLm!Yp7&8xbCDyjOa}g@mZ$(guIW9~yp9#g{UELz$6m(azHO4*c*mWLrP2Hc1C!d4
zhK!<8gPscfsJz52_KfyVfGJ0`HrFvQs;Q&m(M%=X<s}DcYR%e#v&Fzog#OSyo#?-0
zbI9;;ziHWE2lA;e^?O>RLN%kM9c#Ne&m^4de!7=|RJ7Suy}n$1UjM71qB40DbpR3&
zfM}^f0Q=R(9J$OT-lDF%dz<^7%nW?5{kCDa6CzV)&_QEU({-PWLe&1p?k`>f04Id*
znjw4ODSCSb#i8bERBKO-sf}k7H3awso!lIPa;jI_Y&vwnX79!WIbnTb@E&+l|6@PF
z2YH6OY$y0&P#|)UtFvdIpym#)DnxFLS+a!VTq#>+@sH`@dnjq1uB}`3ig@*S?+nx}
z1dM@1;hO_Ttqa<_l;`9q)kRC43CqtE3zh$p-{tzDwDC2aLo<%H<}A!85fLj?%&{=I
zGtL_y)VKKKZl1n{|Gh^t`YZ}Sq9mStJ3t_Z@FUzFvZCcU279#nK7nVsr~J|Sqii@e
z6hAnAr@-*C;NSVpEn}we<i<V=L*7BcV>}*6cZ-it7#16Xhv99H5+x=xoJvh5h{cdT
zLSDlXN>zTZoI3SKU1%7Rg(AW=v|>WFfnCNO9G$ey8e%oLgP~o9FkoXLrZH?dbnGHY
z2jL$if(S=liMI8A9{X=5iIev3Q%UP^369<V3wv1>IXALiKP~oO_p|hJdkX|$ptdxT
z>($qn%{fuJcEfs&ZH3N8W2iUo%A+<zUkRyK?in$LH-6PZCZ`Od1~!u-6AY6c42Q*Y
zz1t6<WX7cRrv7fqfC#RH6h0~WO@DXCkC!rZvov4G6H56)w^pDPpWw(G=ILf&haoT?
zS`heNV`xb)w)5zNmhR2MwG>&h149kGX)_V$vXEW<p7m@;0zai4eE2?ZxU^V!efdBQ
z?3x%nm%Z{g_4lDlpyUs)9Z*uV3No^!mAHzHQ*8gR(Hh6I8vp5ZIG*{3?MO(JJWfJV
z7``&pd?9-+e9n(<M!WyRj4MPKlAvNqYf#a$6VL`wOjMa`%BkOe$BJ3vf$78e&3~=&
z?tx;<@r({lTp0s5Tt|eA4lP)&m{+zMRK!JrVa)d+a^%fb(>TV(U%^#1BMn(?9T#vF
z+|_qAzv~h0k*;Qc^ffGaB4pfiC0#4>n_WReEgFisepaM_`%Qr01oOYUR8+LvR5Z+;
zM=gt5v=C>gKRGyL+~)@FIIiK~A&Olv)5G@l)oARq8)?H>c@h%&0BpX3F15SG&2*6G
zr76nN8RNj(5ezgGixKopSu(R0h41OilB%%l@aLyY)YLX4aF!zTmrzOxBpyD;zc{I1
z8lo^u&2GhOd%jnR+Z^b@K*2tivoQ4QjU3vxzIdXPlz{9CgkM=0_=!NVYUpIGM+K&-
zn;zL^M|(>WpC}yu{1Hijx9%DtiEAeNyPGvOouK(=&j+;qvp};t;DtWC;6QWeieg2U
zU=Ep6H(|`ixPIkwXZbV5a|&-QrP2(Q5vvEjm$8rn6M#0QP?0)`W8fn?a+7cUBDrq|
z?_GT_qRw|VM7eR(wdnS%DWck`57`Ac+Xu$@rA!%NZ7N)tyVPY@wcK>1yV97o>yk*|
z>4nVfNph}I)A>6OZo?QlL%Ytq=ZscLrT{_v*7EhICzZmAzLysqBhea`v=nCwcyW}Q
zzvaEN{a0&Z4#sLz&IDyEPC{S>4N4vcg83XGnBspLQN^DtY6HAD{7(F1X&@U-ZUGKT
zO~PMvF`hUAl<tPY^>%O)OQ9&Gd28{f=Lu!cVgKXbQ2I5@CRfT&w@|Yx>h+dS#V_jN
z&t=mu$ah`=ZON&GkE`H^Q{w%IM_}YLU;MOqwq+F{qTgVX)Lz5w({O;daJ>OZ7kKCI
z|9Jtv#88Z^Uj`}oLflG7kZtOU9b^KNuS%onQUDEwmV<@l*ELI4M=%Uc;bYUg+P>xD
zj2j5ntffaT{x`8{OpQgWx=_cg^K0hEv_*NLtI#T(bJn~EziufHWU(V_Nt`wW2hRUT
z)mH|^87<om?(Q(SOOQZtcefBcc!1y*Ah^4`1cv~@gFAyu&;)mPcYhz}-23XiA5*|k
z)D++D-MxDC>TU`?WG&^B)4S(Tk(h!Oe+x}M0}*UVLe%Q7_E7jjE=Wnpp7$uX%H8Xm
zpGt%Z>}&U{Uk84mq8`$-IQ%`}r*l9=R;A__#JpDWXmk({d^$T*Dp>M9??nW49>42W
zxK#?$EfTFN5nbZ;#(d~qc>ID-5{c#+8OF*=vW$=;<jwfc);ro0-@bpW9C^jRt0^qz
zi+QH5BD;?Etpp22?&QH}7*cIj%iqR#!W|O6k44Xu^dS~SB=ngg=qY@?PU{e2mZtBp
z_?3dai&r?a=u$MR@5`0Tmkk4oD@j5`qrI2T?lWa5YOAr7VzxgCRQ^4OF>%-|#2skx
zbh1{{WMg-(Dw$K<SqqGHDsiTLExlw7rQv49Ozu_s9$OPMDbC38zUw?6-sJD3aZqyM
zotLMFm$Bi+b-gD&=H}he>?T9SF;`$=Aw&^LmI(H^kYKI;_RHh@Dz^XH^;q0V=o4MO
z53ILr8x(Tmu3eV}8<%N@$oNHUz{dM{2Y#FqDmJ#S#_ygohnx7Uewc41G!V@X8!~8;
zymBPb?qFjoe2;89On&XY;Ey585E0*=vgx}VFxxh?1A~x>FRN>e+OK#e#{v(}533oh
zSvP9%9njY-M=8M-d_j9%+Jyr#{c&liSCNEKpl=k$p6{80iQT>kqS6-hc3jw=yt}=6
z+BcD;3Er53GtIl87kRG%uIS5Fi48E_M{z?Ap1MRtM(sv8W$O#XSpL=_k%w5l_58*C
zIGR9BOUo1Z*(G2{bv87cI-*Jy;aBd}N6}Kv{1zn^f_TEC^FJ2-oOIgJnk}$pAn*vZ
zf#p(?JT22fxhfMV+EB$aqutNZgKL-f@pt>N$mRT-1D*{!Q#TA4+zuD`Y?1tU<QZN&
zjMO)^Kd>Mz)bT=#a{HMF8WcxJ5b)vDAhxk%CG>Opw&e%yiAF7klkBV*PxIm)%irCG
z5+0qyYkOa3E#_6S+fh-37s3;WE0zOl*tT2tAdzv{<V<`QKQ*ac!4+Ls9Nr)h+e?9j
zYVETuUxuC%Y3uaYuI<w$-Lya4B``<c%^16e0T#lG(Y7)pq_;^W6CgpCQB_6q<$;>z
zoKX2M5ov^Gcw9ygC6b`7ijR+!#U)tQZUm6wg-3tDFqZ_JDabP3UDb3fuRp-hrny~X
z($t5a*yYS%_`fi*+|v$F5+0Beg@syR^x1x#lI*dWN<Zt5)p5U$nFRSIH5omf9dQ8_
zRs5SD<$*&c5|+8-b}bA<vEyXW$x~#Z5SyO-(=5$qObxei)R6B%yL?;iUCKZ0hmPa>
z=eCf?1Z`K_b1R3|%omh%J0lEP_BPYVvN=&1+r{0Lkjv`syn4=+7w-><&m8;|BQQk|
z%AK;F-Qy%QSY&_z7I$%*==dx*CFFNBO<)4f)4oH!#uuW3&UY^>fX<hCLR__!HA%Q}
zQf~$2@-*__$2sE)gwfpJiaOxobzLT_kieH^|AQ5Cpj8XrHu<}+i^EN+CqM5-?nt>6
z>o%aE`?B}$WL8UHzCN8-qh{PrMbPIYOXu8ra5|tWhv|dw!FByz*&T)r+Y1aT;T5u+
zsMQ^)Q1VJf{!X+Pf!>eOwfA%Lx4mbEuVXS_6o@E!)m4|-d|Q}|kswV+&5nREhI4<Q
zC#kWPqthnw{;Qm)+Cu03NV8dUuR_hoNCar3?(Y7&sp;x&lyq+YT;#C0i9Wl$?CE%J
zJ=>q6Wl!htJ?sfV8#v#b2Z8E!qXq0b5oSMoa%Ov<aBOA&W)pf|U_Paw_HHuG%vc~6
zWIr8qt_xkx>FN>{6n_00Ma+k;G-^@3QTAo7(>J!j=O_)yeeER_3x_nYtxezSZc?D+
z*NOHEEdvAL3ltQ3-cnsD=h;Nty>_iRp3l=hg1+~3z55>I-tJiV{i{z>lKj2wTKA6r
z)<j9Xsl%)Ht0cfhUZ5y%)_x&xsT0HMUj#b|%MeG4ka?V`>3dCTq$x^2)wzC{sXR=p
zXmIvXV;F-SfECxW7j-v5bV0ijD>&<*tR@!1X|10j-p4Mdsx}zM?9Xjm37HV3B?KXH
z08wMobj5Uy7X;?V=UCe-cfv(3@|3_$a?x<f{$zJeKA^Tt@xA~%mfXZsx$X9NHBFEo
z>G^RXRrhF-88=6m2M1(i$~RE%3`Y3lYr&cF`iPu=iUW6jcj&<QGx`JtL?}|n)9|hp
zF8Le3<u|%s83f9FTll)w8{Cawk^F3pve?b++MUd+lqr9CE5N_)EIQU+zFyO{Jw6+=
zSY_5Q3HFkY5Gcwxmmwvi@x#L1<+*84Xeie%Y4RMLzr@NcXN9BovV8Uh|COc@Ej7wj
zXFA(?#yRU=nk*@qg&0;ynkZsw$irRHF{AIy7#*C!cE3QwC*qB>tj4~wHsM+&3pH5N
z(`_z<4_R_(cR7N^VV;i~%$ZYO<0A(uDZ|bdys8$|!W^GX**)8ypROV?AOx`ns4+0Q
z(fC2IO&ubQHDCk%<na8AvDxfadk7YyA%?i@VBT2r({#rWW!253>1rY25FgFIjv*6j
z=?M;)I>lA>ST?^2QM4CE3M!>&45^dUMyx|2T1qBNIOaPotLEFD&vWsA8#HSEp3`Q(
zud0GNbsD_<-U3XYDGC*B;TgK`IbPACkn4oy*{H|r_$;4FSf8O6mPZrX>RKu1jmY>M
zJ0=oxA4;u(qr4Qv!<x=Bz^+8|^yvkg2S=Fa9D)=?oGWHXzol+6LT0aAy**EkArO&$
zCC8fd6dzc8|FNu$ZYKEa5yo;tojDaZ4PQFjMREHNn9yG-PDhNZA*V6kF|)4E<k>4;
zY{CLpbgn5cNLf;AVpx9adA-xmp9L0$IDpGZ=_uB8bbme(bcbb2jGS4s`P^w-JCRQI
z=J_Q{HB8n!4f_liUwduc^g}BaxsBIRs>Dj`I>Fh_*VlvsuGnP0R%9p5xA;LJA?rJt
zJ1uvEgM|J^rf=Tr?4>ma=!7n4`8nK2M@NT`G2V&cT-gc+UO$kx%`V2j$3iT*)=xa`
z`&&=jV+P3XMQE-XeATiO5<&)cMFMYE45KpbTj6DDW7kUQbDZaeg}ixV$VGO}zU}`b
z8XP;h^LV@!@#*`<W3YaATSLFQuK2MaQah|0m<E}bmZr_(ZceG`(+b_V;)CXTI`2>L
z`rJ~07Qwr+qx#4P?f2$CprHJlc02TH*6!)qt#_sgIlPhzvc~SE@_2E;B#4m^);cSu
z`p#XXLmZYnMM_C$9cCLA?-|U1%Zod9R8<`d3H?IvFiW!xi`|H+>*{fafx73_d&7`}
zZQ$|oh*l031rB7HC)aA*+#Mm5)(*?LUoP##{a&$zM30yELBO{b3Kn@whlVG8W7ON-
zFGOqMw+$N(b^~{Q0mgBJBvF)%YJek}k)YMC^CE{3be_HomCxhU)wj~UGPe=ZpD~ug
z+$dji!LIUg#-wu&rC?yu4ur_X?~#xkQ6&j@w4gV3JRw+pw^+c&XCNJ_>Iv9>)DM!O
zgt9_Cz=_#1pj2hV17h{r-aso7G}r8<3vVa7TU$F?^t(#t`ykj7QgOb><i141BN;I?
z<E6U9!QE0kgzBx?O;&PdcGRUHC#4FyrN>D-0N5=IrEZClkgt75my76;;iJKb#}Xos
z%EaQqB#gA_%)Xl-;;+!4yLKPpbpxVoC_~){ggz<J32iX@lk!{^;peM8089^m_hY!C
zlv8N4lWtnl;<;_`QA=+KvYcYGq6ql+^tVnPZy-)yrZ*Z7wMt*_U?Bh(@@aR55Prz`
z*<B)zz6n~L8Ub_k@T$^;PDh+&%6oO20BJTODsqBggGz<?F#LX#Z|bsGUWTmhm{c6!
zad?cJQJf7}<U2TFG)-N6gXlA;<4@2yJ}{Ob0@p~4FYwEhaW*?!<a1aqgRlNg)j1;K
zET(P7aNXR^jF>j+7F#hxQe{-bdlG>aS(&le*dM2=3>NWGQCOC?wh;Tys?a_YNWT)v
z#KJEr=?7VmsF<3tu=WN1!Qo-<-@|I>SyvkRqNWE~@_oz@ua~|7?T!sj?TSjabW@<B
zt|fDq8$cD-*(pM&+(bB{#S&~#HBj27Z?p0nE7id2m3Y<W{W?(7?+4z~W-+&!Z^0Up
zt0ccSD~xscQ6S{$X0o1dF*z}@R$`$;!h&DBxq4XDN_6O>15-Qia^hN->BI`GdTI(E
z6m&v-#5f9`Htz{poyn^&g4^$r{?ST$+<!+G%0CtlvF!Rq-r=u28xb+=1m>+K`1<uG
zo$u}<QrwY_h843s8HQJM)htN90CoTx;`l;#Z_Q!@Z&5H#B0i^`X&SDivYsm{m4!#g
z8A>^{rPIf_j1aT=V<pxh#usc|^*(BL77fUsemK*xkj#njVQU#oaY)yB{6*53R>=CK
zEKU@w<Xnc;D13{O?QVhMYL>DQH3KS(mXfH2%EZ9kobi1Qcr72njwS`w@pIbw*a>AD
z{3aE6Kcc!?7}__SFK69*Qtl*p{=zL-eW#LE4*g7>-GoNR%uVh>O0wiq4NF%WE$Fma
zXmfvXi_>%!o>Of$s%Ew`onP9ASQZ_uX)mpojBo9_wFz-+Tn|b0k@=dXtgh(AEpp1*
zTfWP)R;JWESoKfb{&%-!Ltax0+^UUmFtfp&AL)Rku!pnN;l#d&{=?F#`|%_7;GZg)
z_8G*;WT|T+n3)si{-abL<I8wtB*^?a$m{74>5s=(oQ|a*p*UZZCWtDkYrq-0O1x=W
zp?%iBIc(SIj)uPJYNo1e^;ChKKAc@s1RWLeY>zR~=l#JUfgEp<i6HHYnJ+Q6_k@|d
z*8KdVMyHa>eT?q@E$c@+IDe#CogoQ@_`EZDBY^(4BcPf$WVIq~E2?U#U9)6#gA=Zo
zA4oltlJ@U}>?;a|gG5#L+IT)DT43_5cjYPS^)C7?J^FeaA^xx$jK`(%rN=<j45gy|
z!IDxok<vmS|F<{%G&YE_M|MQ!{fU$rd604d{c{Bhqi^Ac(u;<rf^kiHo@R@0bOJF4
z$VdJIOL?#_U>WjpiAV_ZFNSPzZt#(0WwBL$(X}SJ7s+iEjD&DgRPdC=+_f@0Dq1uY
z`hg=aAIQYiwxHhG)}t@3Jdv1_uGY%}0p@e)zoeHzp>N$qN4?>jvPw!l@dcsa5p-x#
z4KrNxu_ox&8ymNz;E)ip3iZ6aNmkS$$KUq!f`ZV<!Pso?yhvdXP{obaD1~3Pgn+St
zImzA!U$2f6qYg5d>Kd#_ztB57zXb)5A7J|$8Vj9W7>I~n_0D#ZJMn?6!tbYKj7Etc
zo#KvbP2*+vvcj;43eJHB!#gJ)50+i3P(p?!^QQH#d=(Qz@F@RLYu0|Ad!|Iz_~ftC
zPRD-$NGL4E7>Hm?g~A+XLzX(O3J^!~gVIJpQA&g7=0s5{v4Adb`8c{pIF@&sch=*`
zLf9WU&r8(h%7y!jLL^G<0m|}5$0q4gc2UFW=G8HVY5><6U?Zl!#4|Xo)$o0u3QI~S
zum5y;f1d2uKb^hJTfUeb`b|I?N1u~D-BvceJ!&=fBhiTC-B&#_p9kjHSqxC!o}z5C
zUGt-Y2h{4L^Dl?vEp*EDmMl2CpW+%H4r+kQ!J_l`MUmqCZWy;Y>0jMi{V6&O>Ugcu
z;>h#tizi{#^KCV34eEpm`)1i_@!9mwM?0SdwQmp0CYxcVSs+#I<$yjBbDSU%Z1kVS
z0hB}T*%Efsy9}X);>4*`&7Sv=NcJxp<SQ-Xv*zoMqs<!}3GnR;gggu}xU9;lACLwZ
zHd+g0J<z`q!8#2ZPe?h1jr}Jn0^R!z+EWc=c{XG4GkNh~tCJVC3zqH3E~W-O=}-Hj
zj~_X8chlCe%k;-eI7t%MbmX4nqT;u^ghEHjH6bEPuWt-YXH`4Hcez`T3vPYbX_`av
z#Ib)UH?&^izoiJv&Jf8a<^6tdT9Y0>n>J#7SbQbnQKi-`EGWobDBQgCw9ZEF8Vm*M
z%zDAnG=R#@VpozJAJ1V8pzFm*72+WS0G1?)cOcf{3NJ{4Gb=h2AdI{NpkXHSr(2Tt
zulZr&VOx^gA1?IncFJBM{lDjae@g@wlg>GSM<~6a>;`POjpqr-P4{;d93HcHD3}k~
z4fOAbagkes3UQ%f0w)#@9*Q~*s@w!*8kf8fUT&YO(zwpCy&hMqz}v>g#;QyjmV(r_
zKg%-hGa|1^d_o{yjV!1|oPdR*lP!c!7W5k}&4mNg^twLO+KZ~M;<Bq7#HqK9QRX?j
z?2_K*S5}5-ZOP`H<z0OgFV%!t{T_GCpJIUM3hB`$newIS{aMpyI=~9Nz98g44eW}b
zxXVG5vUvw|QOolLZ+2CKdIBQ0{tJfO#eZTBeDn|2S`6<!sV9^x_ZIjl?TQ#;HMUpH
zRvaOCLdnz{fB)OyPyaU8@bx<{G=`;0Qa2gzjQ~=ST5za&`~0Z%LWdkKe>gwwXBhQ8
zV?LU`Qc-l^V+#%P+FoPG7xbKPygHyL1hoSdq~o-Lh8gXW4z#Pa8<eyPQFbx$fEH0)
z<ap&}DLE>fdpD+W^S*?wxnRx^>8<G;nv77ZZpYKX&>tI=-?-f)viK*CMM8kLZqE?l
zBm}iPG8>^(PHy9&CJFy~CTP#~I+v=Ku)o`8%72BIcn2iLmBDS}SSP_73-27|@V{!Z
z)KJY@eV@&6yDEQ*?+mxNPyFm1w&$z400w$rE<>T#sxAhesmTYDpQ~h~mn?%GWiISk
zwgQa_CGTWRR9*Og(v9~1sk6RE>oYo1sGZrj4x{s7dPU*#9eZ~m`hiuC9o;w_B1vLe
zOQZ+b)#t!-u(UMb5wi>a9%A8cF@eyLkb+lo-5B-mrl6M`Z_yZ-n7UBLJC7L1vpLjV
z=xEywVxu#;bIZ$d=@PM4D;|igl8L{TKEpN^%&p@Xz#+8e6imN9qVueBlQ4Jc`S(?|
zhvrf|J~L5!)5L7cW*#%KRuc3_k;S5QR$MEc5r6=5va<ShKIR$e_}Y$Pysafd^`V~J
z^<*LDA;e?#SQZ1whpDm(n9WD~OR!AOAPJ4*24_iRp~EUj=q%cqpW_N<N{nmWnNnc1
z`HOzg1PMnZL-&CAXz4V#=O@(V`(A{gW4>leRhm-q4FoyGyxs=!5aA+k2Z%NdN}o){
zlOgt*g~tyn#iJEHq|mv@AK(QLZ9ee(7<QIn+O+!Vx++3L)2>j(&)vKFyWvcIcakYG
zV>i`+P7!fLYG`xBqmp<EUxd3abJ&zBjahXb$uO>)1NZk%f>i7a@@Fq~nnZ5nz}PNw
z)kDmb;nRNmrjJy-U0;Lg8F%wOp11MsBTk&LZG5e%nRBcQIC^B+Qcd-jVOukw2zCl%
z?RhIb6bcuG`fP>Q-P!x)f3^<y?is^QP=f0;HoC&h-*pU6bm(`-(EQ?i?7mFLs^R#`
zAxj!iO!tCf{DRdxdWA1^lXALsy~)Uf+5t0PA8J(Ritij}CPiA$IaMj<V#G3e3stO5
zE3y<;xBsqC*zX5=SdxOe6{e7oub`OS%Ms&pI7!G7lt^}w_M;SfcVRE%oL+~7tHkku
zz5E4BluBD~QRQ^GRC)uU&U9#X#T~{<MRFAOEvhf<IVDmUT12Sy^m*Kne-9)g%kn+9
z>q3M(ZA&jnA>Fu{IeTNAx4T^GU=FL_uwk%54ryfAmTG>qjs>KF2P3yg*A1N-C?(*Y
zGO+MRBW<2KGLmpPAfi9D6M)!lEaBxx<a4LF3rb6o%6zoL$zNL0fym5aE%8u|b$5De
zh|+*XN*cITr~&5p>Qd{U)DfWhsH+)ucLxg#4=-NT80iU*K^)MXFAjQhT-vspfG8Vc
z#J*N_tmm*?&qMvLp8R(#DS*Ba!K1@T|7J#cM*9F@?p!B<wX46S>h2C}Wo>=7CUWYU
z<lSb*2e3SzhNsH0y^G)t0hvTP<^FH8OJNo{zCXsgW#faVRFHzjkuv9nyGqWq0_wlh
zrI=QfYmHRh5Mu||m4=5AVTSuTpq0~+=vrMd2x&)u^u-r2p}|@ZK$NJIm#8wH1oDS2
z^WXV3+L2GkUl>;O<d&54G>qmxe3i}m5eEFJ3mW{EEu+*)Kh?_f5I|W>Rh`EE)l+ah
zD+9a1Ai2LH4tF7g)^hh^FzRr5j-choR_MR!hSYCbj9JIizTs#*v+zPQbos%SzM<=P
zEKZJ9$;>J7sxzfd4pz8z6?9iI=>7SRbmB#I<5^~=eC12-Q;dSm;`Aye2?u(WVG*x_
z(WIE6UoHjuMSMJr`3>%caRi)y89QghyXi{XKdoNx%SIjC-R&*f78bckncTWav#7+<
zhG!>9s6Rz+O>}^rI)xZSqX+EB!uwXiSA(~6Vvg=>87}#+pLOsoC(r+=4<2T!O4seP
z&m8>GuDdvGP@jZMDt81$drHBZtRx49U$edPB+icS51VH<xcfRX3H$O%_5nOsaJK?|
zdQ_ng(>+^t73{|ZDcz_=G7#v6bu~1>zfTrfh0cz@b`=cx&dm|(5u@sciv>hkqX`~C
zxL5Ect_K{7is_>T#AB9L8_pZ$lM5ymX0T_7NB|ppr;5*c&!&aZKX(1)SLuAin9b_O
zCpHMXJGr-+D{Oej7X~M<Zx!EV#{ZC~zr%XG6TdI0tuykyXH`^giJCnaTgS+6tH=GK
zB-NH3bV1Ki$7X)1zYFonBLrvpKQ+)A-FwaPl59v|PXNQZ20jEbKd$<H8b}d<qpV9M
zy@~}#sG{j;=#?_l&&-qF^gi*qF+3-w-CPk$-lEVi04)8}_01~p$9^{bLZBR1Ib3s8
z5cXsN3m{wUMK`-1KxmDLjU8Y*f1{IRKH7%t<KuH@Gmov!qPgVoTrtQt2s5&PNrVMQ
zVlCzDTx&!EMi6}dcd7lfL$#GP);FzXfKWCX5zzhQTobuWRxlX`gK)d%|47zP@OqC6
z!~zb}2Svg5H4ac$u798-aG#9N^&(Y2e~zv(?WbntMlbr(2Rc%a<!57*qvGd>Po&e2
zLLh57v^i0Z-PGTT>+C1DXZ0ax>v#eKiUWtyA0(45JE*|7V|}cyo^3;v9nML@HoQAR
zXYBZ_x}Yp&jQRx(uyx=x9ScjoDoAvHKy<q*NXi}xRPuqz0e>8p4}6%OCX;8zzMi)(
zo4)rTJgibAs$oT#uii89Iwd^!up?GCa}inWi4hA)qL-1#JJ61k!77nnieu<S3m5MW
zBRu+?G0Gf6?!9Y-nwAYaGn`*P<G0o%8kH?T$W#x_cZi~I155&7zslgMn>mPYj%Y&;
zB3uzJdyfi3Vv#ct8?o&HkGfm8!8GuV#bQZw(9xCTtzvgENXBq69i<I@?BP*%HP`5s
zmzbj){-MesTGZDKY4GBDK-FNDX$p6!u}YGaYBcNv<A&?%5b=|RDeFnj2Sm^W4>#fK
zcdz%lsQ4P(dk}WfoHPp9yJoT+!<$r-(G?RJ>XoRE$oBN?(CdelbHI{SxNRj~1J&5P
zuaj+hOFZ<X1IP#GhuPvf$G6cakkD9_V0AHctNVvdLC4lbW<1oB3_e00rQ^^JN6LwV
zKXVy6F|j_v5iRD4mWm#Uc+5OG2ZT8%OF?Vju?N4w@8MyI;*Nac+N-&!`Ww*Es(`Lm
z0}d8%u3m2^2wPoSenf6lXRL{Kw>1l|>0NLM>=`aFTnlEb5`)BPZIGq%A_ba+81<Cq
z)U=zSDB5w>H}jB@;D+iv?-*HKYzK5e<+jvg`{LU;TyCP|4VT;@HM#YAc_p^vYR*7k
z#MdTb2_WCbdSD}mv@P|%M37o?@xFtj;h-=)!jRje-sbD;6P^0TLS3zVLm>S!C>miZ
zZs_v)#41XqY4FQUgDV%4ub{yG7na9IZ*bL!)4aCjDvm@VyYJFvn=n)>p`FUSVJ`&{
zXy7pB0+6?_C3JAc%{qWX0X<0nhCa~=dAI=QiyW8r2c80PJ;eom?9cqZW1Psefs86K
z(nq<n`O%}@CXbJyYK9Xo{|#%aM)mV&3mXI+uamDmZ3yI2j&fKA-p^8@djMW1-^@eU
z-Mk#{0On7MYu;e7_&8&Mfciwx-bFlUVnQ{PXVnKTR`>$fB;VAL>68W-I`+Mq1usSR
z%l_}!v);||jm0WoNubYG`2I*DDRnVe-Pi6OMs1SA{oCXsA_|I(+}nqFQ)XmjVB!(M
zMNT7EXlh5nfq0f3NM7cyNObi|&-Bm%VD`)U*V&K-`I;dLJ|z_uv`p>$^OexZ@g2Ks
zUcu44(nL0A0U3<Z%-E6=La&?i)R^B{tqq$%vxrdfqvU=zJ2L!_<iPIn7dxr#V$g`k
z&%tw-`<Y2MR7b>Zmv8X6M@%x-$>_f*@E&50gAF7Ku)ri?L$R^lr>`r=+>3f<PH7Sh
z12te|w@<mkok;%i#8;gxNH2Llve`)>0KSI49x^$6L@1fC*EMut35{kufuv92_ZG`+
zPQh)m??vDe)cjDd=qmi)17SzK@ySLj8@lufY~);c9|b+ru+3MhT^ZWd#Sy8$xa9;|
zNHwu#&MnRWQY;i2L`SoZK!VkYMsbb}%b)>Aw_j`Fj!zTr26;>U&wcK%p^C+4k^yH2
z?h2T@F5GcW*@a<VptkeQf)ZiVuGi(b6U@F~*b)wQjz1M}01Y~;cX2khU}`(^x8#dv
z^8ac9-Um4dwZezFe?yZk%G`-dGNS2k-<Sorz4mIXSi$wI_0Si;X+nezQ{e^*=b&Lk
z5@l#M3I>WPShOW<T<w+d(0`QU3#~8}K`Z2BM2tvZJ0`(dX`~5wgUqAkdMm14!Z!|5
zlozuy!54`1tILd`CECE62-P(bwZz#DAxxXN6K~0NY`?aU#5sop`aeW2iAL6W84gR?
zj%;>>`~(BmwehR&$e${<Co)~CtMM&0h=Ejt0ti&_1BKMI`Q)&58|XIWXd|2=N0@6_
z!OH7Ry$V3wL_1Wj5O=*cp5x8T%xPL%NlSJ`qoY&Cx%$$OerCO5^`8hSd+VKQ7&MmT
z)z%X81*qCCR91QA6g**tUQw`YP1avU<w14sJO`14{@Jca*Fabwl6&p%_?>n4d^KKT
zRY4(*lZ)Pc^^e(6s?&PCn8t0*E!9q{AkV-d)-A~f_{F>`<6Ud)ZHzm(UE;yyBZQ58
zaS5&=YV#FUx=*DmI`CAiBt)=aKKplt5#Ov>LUx+SE=;hxzrs$eq!<6I)~Dlt+aIX-
z-=R)^Jz>LcqjdWizBeTUV2KTshzOMPe}7}oX7*hw+)o2}+z+QXrPod+9={)w`2cHz
zR%6Y-Y>4rjrVs30@wdJ7E3|zB4;WA1t{MTars<;MSjn3j>bAvqj~mpftEoOOSXHD_
zKb+$wJa3P?SG-%>P_Cf+H^CcxGO>R;4eQ$93JP_mGkOqz07RmJjC9<e{0gsdUO<T$
z-~5oDS?e*lrgwRaM>b$s$HB#oNhTX@>$2@MP*`$#Vag~n-W`WBV$}8|mIT9&U1PED
z)qG0&)!eL{k<8y^1g*`9qBaR4eb<wpR4;J;had$fnrD_<#<Qka>aAMFR7_SL9SkrL
z2cq?+GwoPB7?Qw5Yh@b-$>mb%`NsoPYW9L)T;7=A0DlQ1sr{EawtD2s<3d+O&RvE}
zO*1(lbFm;zSFq>rB~ph+^I{@Q*j&`2B3QpE=y_7psgiI>6Nxfsc2XEOx}Fg%Urs-D
zsk#;Y)33)u$q>J(1pWx%>d%G~zV-LGGsn#R(W!+S`IL@?ahMU+qG*KhmNpy(g$;0?
z$}=X<FD6Mmd&`TL2mI%2cf;6)a^VHQeUd>R9I#&=``dIGK}pERp5mqe+^O_tQ-|xm
zQtcXHgiMTN(Z#R#8q!cvWQ3uu=4kz&64i4tn@+B!nGNntstV`G(}ey>G3+YZxKjxG
zxV+zCd5Z3g^g(x$-RYnD)oS$L@Rrv^u>$q&lo>J7^ln)`{!duy2;|=2_s-UB7|KcX
zc{oA1U9p-KJChHKbYJW>KRf^vsV+@%a~yMKW-`62{!Xu*4huE?e!Y(QZ2)OMpV%wT
z<7~`t;v=_+LaY9*30o!s06;iLvGW8I17{Q3j3{L`Hd^6=Fzd$N+dl-gCh;?+A_Do@
zC=|YJ>^ma%Po9^L`}Kr`La_Ta)JPqKiU*u<i4Tfm=?$=O(Z#9-WdW1<q0&WSVTOe2
zR1XD)TNHPU&#*m0rZ&Cf&1LQz4*Wb(%XV7(=86g(0U~rE5WMHgfq#WMgOx%-`JBa*
zmVj`<Dj-KakX?xoyGK0^O8`C|s++39{3CS({<A#yUi`iD3E^XGo-7!L-fGs`lFI`P
zPgpBEuCx6|#9L`Ab!Ss$MPQXuRdTMw6s6&G&Z(m(7c-ad-*w(@*oHNW2Z}Z`Lh=Hu
z3nw>G9+JA}mO`oeVD`3Rk=n)<{A26S3+no|aT3}`=6DY|Xi%5P(zWUDvtG=BT9u&=
zd4fDJD6P&M{KSNi%1Vd;TxlrI1c$p;oEVP=C9gtN*WL<MhORo1v<7cPd;xZB7z?_B
z=6pCE>kG4EYI5*yk#@{BW}XI&k<rE;r*3Sn68Qi`xE8$7A?CtZpvwnvq|0&nLu;M{
zEDAx=_*myWOoGG^a-8`r@al;VzmHBU=PGN|=D9?aTrQCl(SA`gLIGEHHhsL(SY1Z7
zmnmzC{hwnqnHweW_YEOBfXW=Ng2LF><f93Q+8l7~`b%y<(9&2XB}?)BhmC_e%}SOC
z5z7E&XB*NtCHS;=+(8J|6Kov%4tf>_4^ATTR=PA<x6OYMkROOMu*26&CwX<}Iu7QW
z$0>(gHo?H~W#nKd$Yyd^Nc@_F6TNyNB_q{40?ywb0SmmE2vud&AYArr)7}*J-`4hW
zb|FI7I11SF5Byjkgk!vEGw0xe7II4*8HA}t>l0_l9?~CmMq~E$xdx$iq(K(()9}!F
zbecjoMz}b6>R-w#9v8};SR(;4yM6S~aSZP;ID+;7VPm;~6mRjw33`pWkf3?<Zi~>B
z5J>(ZF3+n$`RM21mw1Udh6w{de#}iAI#aK1vsjbgHQZi_*GQ<Efk9y{ZZALBOdb*~
zuHIOHH?bV>r8(_dvzmK`gZW3^5aPEu3keM5dhwgJ^t_><0ukiM@%$<N?7+HD{HZNX
z#%eJ+C~hg2c81@|$yz*M0`g%nbI7*Ui_4~aOsXj<y2<4>H`RO!@t@faQKTWc^%ct7
zRo%VciPm_HPN!_DHOEsjzx6LVYM_IuG_39d#fnBZz6mC=ia%~Sv2@id{Tr+y-F~CZ
zi_XOvq~8;8(mvuZR@O$#9wqe2W;dv?Qp9+MAzPZEyN2Jp-m6vGlZVxKxwgr5j8A=_
z2tCP=2ypj#LT1i5pL<+9>vK+(sKCyK=t9^DC+MMJ9wY~2&U(mWH;PH`1wWiXS^bm0
zib2M{PEWy{p-T}^;oD+dW(eIH{|YE!7=%*Zh{<P$dtd);WMP^{3I~z3!^8z`X5ocb
z{Fy9$v=f$2#;+f&&sSEos#{%{1qC8D@VRFKUd=jIYud_E&1T8^hfQ;kLm<pC@lJ**
z)m}6J3)w+s7#7yH3q434?jsqQg{?l=xH1*dc+(cvEq&U_z1w5?!Dz_8kKrp5=89Xf
zeC=q^m(W$Qz`T?4Ub8Rn?wCB0lzFl#NUjH;-VW}+=a+O631nph-8C#F9Ycuqoxi=s
zKg`1h-G>WuC<LmpBgUXfK3qS?``C(rL?=&>Etz#cADKKXBJ}d2my8NXTxrc}5~N^4
ze-jNQoG>?zf3AI=f8MyKc05ew<nTB#asbBxOc$tYuQ?DCfRd(%$^|t|^M~G-NZ?S!
zWMr#gXeIo^`<Rdo7~V%*r!`)5R0~6=>HFQA|Hvm32Jz<yKl3Nh;Nl>L@zAZK!CjM)
zJql-v(<emx@dh`_7D9D=UR#zt`Myyb?};|}14{wfV*epw*_`JO<yYC;cA;9-TecS*
z{=icabYnjBstUod*ctG*pl$2|JtCtTr)t?dho3qYPVabE`DmIx-~OTGuYF69aw%V$
zlUz2}lI5FQ;^rWjCoe4|VWIS+0WhICDldLN7Fd>qOtSY-HM6TbZRj=0U*Si8(#d(d
zr&@hg!9!=#8$LgW@SN>6?XFi{q>@?-_~O0#=Qwu;N7sLgkOCVb+RNs@=NpK1F^*@I
zTQ5rodL@u8GEcHZ$n51jetzS2{AEe-XPJG=^$$SKCPJV=fbOuLApNvJT1yHw;h%b7
z2fqE02iax6;M<k;!o~poJG8ET|M(I2LvtjIr^(CzJziXS6-Z(20vsPQJaRI0d2;Ye
z6q39MEf?iQswvt&X%J_<QVcE4Ha0GfpS4KZj`~mg_f+=IjLJ{CYv$yb=7uTLb2b~F
zyX&)NGGd7KpCq1)I9w3_IK486TSt?XCgQA-|Mah1345}oE#aFFTj?=<L;k=(g!SGB
z@p0D(1h~y*eMGPyViB>Gw7-0<y|8eR3)B&t_hO2EJ<29{q-siw08rQ{NZ`MZS1fG8
zT2ZaEH^#!+U#=T)j6}@3vn9M;g$-7Qj+Tv)tF&*XBAEJ4HTSsXp6G>Q2qRhi-t^)q
zWjV`P)<yusc463+?A^eT#mstQF>7DkKL#?1dySdHv!z|nYJpaDO+^;oBO!xe#vYuo
zOd>^1@SloJw~3Rqoj9XM^*^QmLE<3Z*C9ax6MFGx3;|G~P~6n&sP$l9<YIPzpWH{s
z?+eogkvrNkeUk^B=L7qOst!9zA1`}l;M@egzB{*^!>-KVQk@XJgdG(zTDyF@+uxGk
z`ez;y0%;Xdf562CDipP+7MC8^y*<HcBIr0e-tzl0z1_Oi{JSLJU%Y<S2&(~<97G9?
z$BMQ4sNC5Gp~rohMuCZhNw9h97Lyx+-fV9^8AuD5sh)&<n<n&hYXExJhIs`PIl85}
zdU**{qyG2gTX<SL+D(7fhY9CdGFS!F%%diE4pZ0Y|H*YoviQ^kzdGt_KB)sr2^KGM
z!0Ek*TQqgS?>skl{dJ3?2~%Hry`BDnVZ7Y&nzXP#2;sdE=VG;+4!(Bg?MM|gsE6GM
zcO`tA3pEfFj13B9%HDO9zYVm`;Tz*9(D(c<LzMOQFkR#d+m4QDy4PkkWpOvcI{wij
zs+rxVFgo#}h|{0<FlmWywok~-czQDi5+qbXUEH5t^A?R)Ld7oNmh7?e(R`uCa4ISJ
zP2`MU-c#`x!T4pA8k2ys1DA<hx1DI!mOs4cFh<P6#lt5qUgES|H~>k)L##maBE!4x
zgs{#7=dSYdGC?B1W%a*tS3I7=-KkS0uFx=mM2^#$F_n@v@puuB#AZ(CH=ck(gNf)r
zqo^qI$fzbYS;S*%mrQ4)|C9(LO+UyuG&zxvzmGm~b2`5hY>s@-V9(m0*_z#xw55}l
z@*ai5-%-*!#Wa34F3@{hz@f>CTsvkL#pGN;(xeWX1#vbyNmx_ngD<_<UBXq%fVj)w
zzZV0hG%n^twJ@9vyw1p{$KG&qSfzxkk5o}nIev2#7xl|Ako<wt5FB2OW`y)lkH%jr
zpv4e#NOqmj!8ckbU3mvWg!r7;rW<ViYkMxR4{(wFW_84>4s-<R$&U_oHx!DR1wrZY
z|Gy)+EpE=o^H=i+`T5DBslpOw{y~h`CV#@Bwh|=-WWzSx<GoJ(bT|#|-!WC$5hIXA
zR~_4d@EncRh$;>+K-JgLfo<KqHQ@{TQqoh|Fayt~gwWj|c%P2tESbNB?UTm<zzz#{
zI~M5ZaN@!DY+xzFAd`5shK{rUXX+q|`P=2)ia_BH-v#ry%`QI}gqV+Yc(rR?ya#Uz
zyF*Gx%>L$#)8Go0^B{~M6XhF8p%kqE%6LLrl&nIqYR&ub4sTkg^~+7>^W;SP7l$wU
zFxg~=P^;PBE?a!jvCfUr=e5yapD$@N?MHjIHxt<(^EDLZV`VJkq$k>^`#08xh;8^)
zqYPc~#I4y|A5zmL=p#rRUj-J=Ak+lZ{48BXSt_%nJp?39u&xn1acTCY|HD;p1hH+Q
z7k2Jr*Narbt3PnFnipoq$_ivDUJxr&Rjt!#?v@92ss|cSBJJTVk%;*~CQ6?2H18m0
zoZXfjqSjX8pRC~yTt2MvYI>~-wPB42@o<lY*!FcA>z&(&p+v}tTVhi^738UXHLB4u
zs;<kI)(U=ai}fd{$|86%Y37{fxb?^LdG#a15Myl8pkC_A<6i##rCXoy(*5PPtn!7J
z-12{k9}j%clDY8m3rjIYvhVQ44veml6r?poQKA2dooU?%2BXoHVMT|)|2z1lHm$pI
zAKhW}nuUuwG}FHj_sJPi=R+t66b}X1y_|T7A@9>P)Y-@To_<~9-^3F(R+3qj#2;Fi
zs=>?$PvXNl&O;$^tz&M8{|o<+ix7<M>btD!M2pNZm)W4VL#=b|xv1EuR;hj0!y&3n
zf;bCMexu#_OvNkbo-c+)gihaxrC0bd)k@b1`HRV8D#yNslY{<2b=R)l!?~aqr|JHI
zPH|1>AE5p!E@-99O?5j?MH3a(w?!{4mRE<8W&#f_hqF<$9UWLAFwJ01-p(g{eDxPr
zd_)%lHONutaU44Z=a8X;{sS7=4w7ODim@#d=%iF<z>RR(LUwFpxSW&TI<74?p;0m2
z5;DVv<x(fUl~Z)`j?{-yhmR4&+i>?lljZB^Xo276-S6hBdv;(<uwXlM;T^X_*Rf^s
zS=9<!y~PtNHHw=OKrKZw-oqmb$_0JEMTT?n-~@C&gH<-tKHqT^k83|ZGKAi2X&4_Q
zT65T%Q9bkr=hw{p9na&H@R?HBxm7xqJVZf#y{&L%!shE(=K3!gq`wyS)}(`Tv5i%j
znL0~_4ka<wE-6pm-8^T;Ip4=O8XTi;vZQX;->npZk_zj{&!e0<yY~x7BdKmO;Vi~B
zg?y%Ni+e=9#${_whQ7*Plxqw7@5IKDzgS?X{G_HcwC7h~b~<#{ANkIoI`vTcbT1KP
z^w-i-v>;C`H&)^Q4Iv)H3&WZel(6j~($Js-<s32n#c?OK2S!Z7Z4A?*$rt0F7`*3t
zQ1E|b#Z{9;68dkQuttb7kIB`n#Gi7}Rj~ks5rg9LWMhSA(7;8Z80h#)2p<Uv@y@Y;
z0<%BFKvWs<-n<9y5lhb+^T#-!&%RM@UnpL@zT}iYt1+~ZEC3s72r=;yMc6It=Z%W2
zoo^7E8eSd12r=7T_3aaD+GCVS1r~4g;CEQV{^8I3>H&xn31PB#Xf<1I2fw`@DWvC5
z?}OpEPNb-6E{_9}#PC%H=*{l&3BPY#zoTTBOzR!bQt79%L~kCT!Yqj1jx$^ddP1I^
z&z9S?6(1cOrEDJxS-nX;OPd65uwB}shbywYfqMe<gctXO6UVV>VN9E|W!YZ)>kUr|
zhM4%qyjG<B7n&Z7(s9b;e!9GZK0W2OWCiJ!a+8a=i9Y9d$xcuDm8PqMewHtT3lqy*
z`a7{nW0k$S86q7+<o}aTy%ix&xU?F&^J^&zwJ<@s+>KaJSluH;@kY3)56XLR!Qu;N
z!F2yH04WM$IEvGsg&lZ=I*mmO6_f~chwneiM(lq#j({egyTgxr(d!~#GlunyIObqY
ziC;zep8}?NpOzi>4$u&zE@Wi&G5_$RC_n3<MnWQRNRT0pqAst93`tWtY(ydc>Kiqb
zkQ(l*TMY3u^<eqPNoK>O%An7<1NA673$Kn$1x|0-w-80Re(z}e&AX41lEge~*PCVD
zSmE&u7g(B$cMNp?jTgURxe707SW~b#lkKU!&@i*)@u|Q4x)`d48KwNr%@xYp`#%BN
zA2mK4K?wJ|30l0T1iggXYJd-{9apajgl`T}SdcFw`xbT^ECMxzYERhqNL`B~Drk`)
z5PMO@$mhNhxD)Fat6a1z<XfmO!R0I1Pd{G$e?3(26xvr-``|vaV8dKuC}ZM1;%jy;
zV&f0Uk;Af*g~757q`X2%&MTP#e5XocOPDY7M}%;J69y0v$TV_ZicQ10&2(tS=kLRr
z9eEC!Ex|lg$=FxSsN&Us!m@-|krCAO40CGepb6OdRQC^7qqYIGT~@y#<_!VHy{Uf3
zsJq*W4%{hHzOSM|WlwR|6W_NZr-ChKyX)B+hu`1$W{s3+zJaALlD#-j)7Vmk`E2%b
z;<z=(ZRf|#@sZk(W8750(xVROOssd_u5H@}Fz+pT69V?S5(sAfj(9E6C&AeMJD8yV
zG(+JEyoV*ZkfeL!Ay^k#6viJw)RAqrkZU4RNay=BC6u#EG2C1{+)j%8kTO@z)>2c*
z$y)TfV<LJma)yg&IQl;Cp89J~Wu^%BSoBhy<^PjK48uu{p2Ne+%%?IcrT;*T*;GxP
zMg81fr!&Gk)&aH}da<(6d*W$m_Xcs3ygHR+l?ty=8jyTHq_~4?Mj4-~It=Y%@CAu(
zPXaUmXVJToQCnEh6)8dNR`@yVHBdev^c+_Ofvim(Jrs~QQgYKkQ5gcTKQ%egpLWv<
zmaKlW(U&2s@(<(6!zEcgo@&;*s8J3$vS*;O6JJ-SDOJyx|L%2W88M0LCx=gw3Q`Y$
zr)zvpUPJ<MME?wKx*^(bYRFkk{aR%8X0cM|rGx!i(8R`2NRC|Hf18ThTnLC{D5LS*
zmpYO*4@(E7BFN=-!zWlEAtL$!9%VcpiXG~yLCBEc3bjNZ8m3I9VSc-$kRPNq@OeuJ
z`Dv~s{r3bNqqHuFTgR<!W9bSgg`U5|JY!n|6Jl%H+P8#E0Qj#yBbQoJVDapc{C(o<
zi!53m%2sTW1!{)K%Kh0HQOX-~{~Vc=#PxL8Eah&rk|lh}_jQA|<X5Gnnwme&qn=$0
zsk8YiqKJsd(PAe`4(n&=#8L?x_S=S5$LZu*5QzKf1x3^QHJYZAk@4%@T@Tw?cXx4o
zvUhJ0E7N;q!-_jHa+dETzP77Wj^kb<K%2{1mv<}$D=T{Oh12=EjD5k+p9_5<#)RcM
z?NC<r#BZ|xSzuR9TVT}Hdd#Y|m9>|LFaXtpH)0xe5h5YbofLQ;Ky5bM5CyP>ur#Qx
zFG>(ccCHLn?|dwPzg9JL=r3rnR{4<sz6`xRbbx}25w~_VJzzr!&$4u~hfOtjh1wMB
zuLv~AXhtXQQlTR=_Rpv0rl&q6)e_vat25a*^Jw{Nk&ARKu|Vs+M!tgp8eG&xw*6pC
z#|@vxWzYK$O8)49mn6hIu|QtS-cQFu%&1Ak1VJhvaG2f$x6lPfxfN3oIti9p^pW32
zI{4MPxkk9EB}uAGNkIMG2)5(TCNDmYc)ptT2Wq*^*y9E1dE1XIbl?R8rE1auzPi`g
z`dPJ7fDPDRh=U`0IyIz4XSsK<@z-~4kYe57z*_yO5FXz+*W)jMF~CK`m+XZWc2rh8
zi<FZGaESJ~e3H(xW-u8N=>M(p(1a@n^>KJ5L*v9DC$-Lc&}_sx*`H00rahe~J#@&%
z^@IVUNh${ndfTn$F6jU`O40sy*<8FA<p2lY0s3~k43Pw|>-H0tFb|inES&K0f5L@6
zyJChrM~wLwdF+wV<_C``QURn`kq;Q~?PTME&(L-qUs*ez?chL0{a4KF#@&7HM?>G&
zwDH;A=|{D+5CigaH77w%w$24579P|7WZ<a;y&Dr=Utf3Mc{S+LJ8g@=p^x3nn4evL
z&2~p07k&+jT>djs70_oQrl5c_simmMLYD1IK0Goq<~sN0ZXNR<++j9Cq$#N;JA$l~
z>|mrvNsml=YQR@$bQ+{(GA|A4T(~^<g~!V|W+oRn1(N_7{Uq`HRv6?V@h*UB73L3^
z(QViJEMbh}>g@uXD#(ou&=%hPH*Xn;zD>mKC(6s##9l)9QF$?-hKqYzA-V6*l*&KT
zztI~49o6&&lhxBl(52o3c3|FOW8_{cBh3IY#T25et!)fdpvo)hEML^>FlJtBtnR?u
z4fO72D6%`2&mMnlK|JOhf(R#qd-%h*CpbocW6yKplU!ZDn7@-3rIy&*FjM)LFbEc)
z&^+s7(AnA$0|qo$da*jivsY8CNzX~|OvMXh^2giCQVWp92u*;Us{UgEu>bMP1YBfD
zU+;#!FG81}rNvurvpzaT0RzcisXIzbJQ=-_YoZ4q87$bg`RI>Z$16XmIPN2~cqVv}
zdJ<xcl4nm{#)$-+SiXeuUw`?JPcHJr27@EMV+aNSg3s>$h3fT2!|Dg$RVa|SxH!ja
zJUxd)myvdbCd;c6<IU-6AOg8N?8joofq#sDf!X_g?$_7BO%K1UIqZ%k+nOx>^+@2P
z?s>ho?ElR!riLvxTMMveaLudv-bXRlTrA?nJS4ArhwIs8GwZNu>FC5@^~g|haiQwk
za)LzjRE_$-)H?9LCiTP^6D~Pjk~X#2!nal|zVr^CYId2|`UCH}9)3>a+mye1eB7K^
z54;1$BpSUZa-1w2YP!p3G$MqT2tk!_cII61dc*@HUwOWr{_Z{yg|ye+z=?g`&l|`X
zk-aU~BI}l#bfC4_)tU7fJ$;Kn6cm)6cYp#6L1CqPY4KHTX&`Nn@Za<_*5R9za&j#Z
zUh$jr$2vpNl-MtpRH#7j$H)2S55>-vu9o~cc9R4-uYw9CTd2>Z+W3$JVbV=sP@V2t
z+RTdKN#a8_VTEPsOu^Nu)s{VTaG$8bLcL%ud}n7h384L|k38vqHu_M@`>|XKNM{&U
zwB&xIFmq87QriKOq!Y1xeVu>I?%Y)cSL<q{wh0o6aX?LI?mL)BKt;G}-ECm<0vAv-
z1<nYnhh3FPL-m&iz}Nr}0d?TbBvHYU(Ms3CwwX>o>%8#C9=wm(<%)WIyBf-dMsK2_
z2z|<!-uLNBD2rij-aDQgYzkXcGs5#cj!O~|m@?8eCD981o64XUwUwtb_F`SV+rC4t
zqi<<uu|yAVRJl=d9&Fz09;E!QVR9!((p|i^cyKeP&<t#RQhz}B9mLeDR|A6O2+u7_
z%EBqRsryT5(!(5s)xp*{A9hOgKWf+)qpcsDv5#w9zJq<A*?naVzP=2u{4v#gL$POx
z+_YHK_C&BsB{?*ni8E2uWzK5V1y3w8J7Zf4KfA5!*MK&$VCl_R+Ed?<K;KgdU@-X3
ziYw2-fz^4xURAD2PDj(@*rVfGmw{K!)5oBYpbg;k8*G+gLBN6_IGMD*?YncEfpN8X
zHNdivj}~f|)lyP2LK2(l!JRpR>4E=}xP~5cXAgn+2m6;TGdySZ1p~zH)Jynpb~b<E
z>(JlyRKwu&O}e%Cfs;U>vnTS^hjjK&GvxtP%KvHsphT*k$sdZ)de5$~+&4;n#TTcd
z;KrXwYRwIT4QF0qL4=$hg7`qQ2QL23W~IRCfXImlsH**(>fpfoY&NEXoe0g&5ib=t
zzo~HI{P8R*eo(-BxNqmhlf1v>+FBLZF1pltc7_Pl-`eWVzM+EI5rd_I@9q+BRdqF4
z?g`)2&3&A|RQ_#l$Q+Fr6&ob@0qVh;%V)*C%qaH5(OsI5slZQwGLhC!HWwgv9y<o{
zd5(e_^6^BTB=nnntV}tSZCP$8-j4&Mx@IPvre3Inorw`52%Zv|R`Y{qcC9wUt{=CQ
z{v)cB{-YjB@%#TU-}?pt-~PXOR7I86=|3s+MW<Ee5N&B!#SZL=rbjINYFVN%EDX79
z`*cndIWaD}=2?P$;xqU+d<1L5dInYx%LHtC7!Fm<Y(s<f9G+p}U7WjNB25gX?wPz+
zq0OEhRgpa<lLpkO*p(D{oYzxWqZ9ev4cYe&T4Zk^KO)K!x6iwm;O0BMr(PEeZv3$m
zTORUutErIq#Q8uIK@Y}T?*hk6B+YzYO@&gto>)QXSXk>54VLi}0$3m;?o2EqqUf_~
z#H5szwdq-chIfJ6$}9W&PdASqkOl+q`*&WK)2~LRI-!F=I@dj}0+Ur~Doxfdh7sLw
zID`GG)BXvsmbG*E{INV;%Xl-Vvw2RR{~LeDg9jfl1u<{-@Vw{1{>_ns{QllIYoAro
zPnO$?YiMu*EBYn`gdsJ@rEQ4}EPoI{M+^06;o(37ypodA-AyZA^@2^nd0%huMjirr
zk8g+m0mFzaxqo5D(A~Eleu(X;IZlfAIY)|52W;c&cbMP5(Kq{otFmTk&4K@ZTO6`v
z1<5;AHaXp$XIT15P|x$pYCK&vhDx#3!A@(0=#Q{B;VQSrT2sd-FA4cZNM7(JC<d;}
z2{bbA`}04Q(xP}q?1XD!&E7`Ec$BY8qAlb|U*3Bs_9ILF<0k8;ndUJz8n6(j4<FE)
zkgl|kpZh|lz*sE9&lP%?2cVfS)GVDhwaO2Qm0a5S2wO@cw(}k8g`YB{(0L}`YyS^t
zUmaCd->nPM-QC>?f^<nEAR(o6Bi-HI4bn)Xba%(5ySqcW8}35i?>pZ)_uPN(7>+$q
zVYBvc&H2n{J~NhHh`n7d$AH<UgSNt&P+TO*$+Ki=Lszi#h=Kh*&~};5L}H-L?$zk}
z+{f(+biPNTyh249zblAlEzFRCsO@CA4kK*UeV!o`;vS_F;zlq$dJR=cMVYi+5DY%x
ziMRViwX9pyX(b3{RU5vf7Vky93cktF>ZZOV;4PDovon`v<GN$>>Eoap&?R49jAT>=
z2M!KCc5nsey|#u53~ZMdmxB!_1Ir=zE=zDZ*deg6wsHAPXjeRM9Kvx07IfJRBzdsg
zu8C7pMyeB7OlB6mkbxjW@#2mS^iKktd6DuIL(b0?LA9<0K2BlNZ}L9g9~7*u$u~bv
z5Zvx8V$sraA%V&NR08J8L8kzt4m&OY=KO%6LBck#y5D9)NuE#>iVqEpY|;SNkFOG0
z*@?X%dL#A*N}OM-gcg%C*ZwV6sVtCRKMimz&mR<iea#C=+}~4R&$r!><0QA{!P>Y_
zv|_HdqBjJyQ_SQ_JTTngqv95wT~f8}wW9-tFBZM^Djy(I$*6nV!#PaWe}rJ^^lTga
zTIPq(L%Ml@lxifeM=Ogs&9uPVz_nt6)LUPaZ<H77?X{dn%v!ROED&31h&QIDv5Xy)
z_((F?<6Vqm%YfRP;$aOWE%jD&4i^%)OJk2VZ@CulL|(NJ9to9Q*J{Kf+yrH;`umi@
zW~9*oF9CLvw#Rd}+LI-CFty7KJ&E)Vo%UUAci+*rTS$>0qqS)<EAodqG+?p%psD`c
z7$WenWT7Gp@z0+zRG!Mw1s|P=FyX1xW&(XX-yjll;YvgjLW3a^vttH`ox?P7T0SCG
z8EHmTPUs!ZH6US!9TW@F*hOtVkf@Mf^pVwBl(k)Bo74=~d#$7c;K!-qg|Ojvl}IFF
z%#QE%3bwCvmy1s3Ht{H<xB=bW0?v1NoM2#NWLaR|CvECsi^ugNJrefzh_P{sHhZVw
z5_sPN1z(L7xN8~ynh2npVNwuy+EZSD9o`X^0&P5V1c)4`VFPYdl(~Bxwyc|*ydo?-
zho$r-X0~<9Y0&^2X<Tc-W#fWkpARjC>UIZZw#rPXng1I{DeIkew9ig7<mzi`IiK~~
zARv4O)<BLCmF7^1h6R$8uk6G4)z?%JeH>+b&rBR*-@Ob!151LTSRnF4trJ+r6YVs@
zcWOiIFTn04T0Cm_EZNi@@}AwxAmH`xV7`Ik9e9nr?m=XD0g6D!yH5;-`0Ih2KbWzB
z>2$Cmyhca@P79$h6$GH?FtG*&*m58a%(4oXTmylz*ZbKoIyNm-Hr31NLeOkS`E`YZ
z@nB-RUd2Y>ft8r&hYWr38YcDU_GPD~sEG;mLM8eo7f=g;XQP!j`k+#a`h$^&7y)*O
z7tj4Kb@y$xRvqb1j}QT3cfee2PrBU;xJ4MY;8Qa`SUU?MuDH+bt+R%}6FlKyKe`1Q
zA0MHrrVUc7_7js@qQlS6^a;+#^8r8{MJMolfHJMo<oj0hHQM8l_Sxp;2zjx3%G3G$
z%=m0?6XlKf;Mo?}+I~R>XoC}n?8KfKc%CW`FjIh8&4lpken2#t(Eo<f#Y%W6U0&N(
zufxq^fiXCq{HGr#Z&KR!`KC-!D;#6M-Eh+`CT#a#>7Lrg8CG~d&IVzDHl;QMF{}+G
zXshFlKXn!i?%(>rUn%BvndVQz2dKD=tRZTtl<IUTm|r**&h3B28ug%mQ;a0+HDd}z
zffC8Ch(?L@h8s;FT_9OMp@hA0$|aJLi{u<8aSGDp^h%3N3-`#rv%5b3Q{K~zyVYu`
z@I1<lT&?-abX@-+?*6zB<GfK}%zEM@Va<NP5@|$aGgo}SPQZ7)$5y{v`Y=8>7o0aJ
zAS@k*4R$(MCb)hF^;UPSy~Ek4Lm!t*hlN_U(O;FZ?(!n)Y|QWC?9O-<csdpt!vidK
zTSK2h+qa98;D|5~jdUUenCEIexR>R#$h81qCWioGOL@d8sHpr_c>(omqv7KRMhQH=
z@icv3SsAsq>+k{rR(y8{!*|vF#{Fe^w6K^S)X{cBK}srAJ)E?sRsVQiRPNdJ6;$!f
z__02W#c>D{>~(O>I$rRykDvDKTM-eF^c+TZc1(vWhsbxkoAdvBpY4~yDL~(U^-z0h
zE^pn2+T<<V>i$i_ssUE>COrT}9|hfZiL@nbN?(j`*squuE0^3jk0UHyO~@i3(P1fb
zwG>H@R;(MAFel=)T_wo^qJ??36(REV5ji-HmlK<cwd598NhG!j)6>(F`5E>lU0dA^
za_5~^U7Q?O*>aL4swkV#LfxyoF=|6`c|n>z@I`2)J>>9JJ9r@)23JM#bnqs*<T&GG
zQI96~z#66bdleHIlnfswyWw3Wv>jACN#|hhDKmwy9ACNEi3M%QKV|S`q2iJG8{p)K
zNA#}y!4O&W%B2OLWzs_F%w}>2YaYs>UWe!j?h}O+dc}G^^4{;``v><jzX{^;&<NEK
zo1&rmJ`Y(s<LPmjuqZc|u$W;23!nE?*IBCOs7G>SEMZO2z1eQ>HvVG@>~zSBNay+T
zF653PSZpuoZW9tT=NB|^3%15jF6#dqH}y^gmaN-s4hBs)kWI^@m&xme?^Z<M)|XnQ
z4Q}##Qgbkfu{+16yVFLLS6|KRBo)ki;w<3f*))kIG}sVsLG4R#Y06%3b!I|bnL%4l
zPQvvU9XV*^dE=$q5Dc5<H6kf0U!n>n?W0+zjRng$Uku;0MOiI2+=aW}*o-;(e%)xA
z4M14^X2{{`YHrR@b7cYRu?Q^XGRD=<<PtMe^t*D;<IJk}7@YCabYV{Ao|?t6>vIVA
z*dQF??oQu^C8Nl=9Mx%((~%`%9&|uFy7#^$5hIF_wONgnixJR_BSrppR2xLNC`ToU
z!%;g+vG@J6#XaI}nrwGsY^c4H&Sb^3*Lkv_BXY9f5Q#7>nLq05OEh?a8B9a>CtL67
ztC@$4Or~Q-3D|x|du^hhq_+EJYowj165DGNwVqh3=rLijR?A6*-E_5L6L2?|Ru*zL
z8o@F5jsjBT=M_~>yvc91_fRnp1R#>z3H6Xe%#%bsveY6`g=1ry1r&|F$%wFNugz@X
zLLyNbe1K5hMow`>GCiqSY+p96K$tUUb6vnC&h9yh=N(Ke1;Rc+F+{lty35(-wF^{!
z{&TT^UJQhya7zycD;wi&91Z<Z-^GumL``GLNji#r6#T`Is6ab;$@G;Wy3m4Mf8vTs
zZLVKD>vKxP1skdTFTBsD7>%dta6@DtoQKHhy10U58sNzM5w-1mp|#)y;>D=xJhFud
zb67~_T|IJhl@$FNaV)Yz8%f*<T8gS$h=+ZCjMWYNklPU<!^F!riqZC&<UY0l&NDM6
zMey%=zFwjh`hKv(5$$YEf(Bv8+d*F}xkE0T{ot!P(5CIWMx`txa}?RUQSQ9N_6{9K
zHHn5>Y=m<SMdDmrD+}f4Rd_wTI#xIfdnk5#1e6ih{o-%5Oj-tyh+NI!eMgwB_PSE1
zh=qr_Yx9+F>?9eevykjea<@=>Z2eIuA`Da+AN;P<!xEE3RSL3825^NPvw@R#ujCWp
z<WIb4+2`zt{*?Yn022IHc!eUOQm;DQY$<jg&8GDZuyCR){MAGL`5YTe?+GF)CWvLt
z$&J74-Hlf2fCpDgC{(RGM|rr36y)eI6W5KcjLlzM{OqmI@n*!9n+sQakSxf-Wmqs2
zc{nVm5rHk~cS8|nmb&ho4i4|;j>V-qpcVfu=z7HfV!|GSl~ZhxbM$;?D($v<y>7|}
zVYxWl;bbZkyE}Uz2D2l7FE>O6lNu8z;*P{X=1=>B;hoJT<?mU4qwEn0#VEfJkA_b_
zOXYi3dJ$qG=Vpel3c2N49QV^FgikW&3Am9zIN;AxBniga?nF^yI|S<ghXobNH`RgH
zxDmu3b(Ns`t5XbI%a+)%*U+2SaR?s~=qs@IPTer)JgqInnTt3{Fb2FUGv~u;s4rR7
zT^6AdU(^fuk;}SY+7T=&kPU^562LWZ(=PVlYVF15$4yz5$sPZ-n{Z<UxF2uYhfCG6
zM;It70wEQ&v)=`lGkvlxoY);e?km$=fhRAce{!sZcnc{q@f#ERgVtfFAuKc;&#01@
z!1p1Nov5#j9!N?5VOD^xPrQONBs)5|R0_fF7wz@5#tFWr&hW}bTz-uBJ$MsBY?SKb
zI0(E4M>Utqs}j_BcIvwp>6&Oh2xc6jB#|L9EBB~k!t7V4q|8k31P>HeNb&jDmZ+DQ
z#YHV5>XDWK9H@Anl;KFvjm%sEgWKmuN5j?R+j0_b;K6`r$Gp({wxlDEXb(ouCR0C0
z$_M@nNL~$p-z3CbbOUbQ#lu3BtvmZp+sC`x;c4Ry;O7Kv!}CrhNupIJjjdGV-`VXr
z&7^*Dkgvu%PPw<{)=BK}VkC*|3$g|!iAc!<5Jbi-PSWU$0&2~Q%9?V5PWSO>+b?HG
z91F5eqTrw0kH$ILB~7j<>ArSlhXL=br-G>3B40NC2xGWfO0WOS;*}(rp)CGyV+O8`
z0%^NJXSu<oBim<jIr`ms34?9S^xHCVKA%zsTPeX|m*Jk_6rXCLb3~Kl;Ji+6ehA`r
zLR*ElX8axb?;R||WTCGROwfNoarE&1VWj6ye^K8iyjwW$B<9|F`fP!)_M2$Uv-JAP
zUSRH=jVoC*+Okc;nR=*?8cDp$+MHhGCcTKk4kCbPn+aAwk68W#gZ~^|VX(yEK*G*;
zIuvE+G;E#SGkx4~tOMrwS07P}9K5(vD_}~?)b4zM<6~=jCV1B8;UvXW`B|sHBBY_L
z%giJZQw|E+AlgI<e^l@RUlbHk)@2Uz{(z6#%WSaYzcH?$)nj!dW8IAZ1I-eyKhI%F
z7ko>|d|xM^fkesXcSlkDVHx2<B4qu4*xfsYWL%v1tM`3sjM;Ry3TT7%SYfcQ5EXiq
zsvz^L^}Q%FdPVqY`C^0HXeRh@(z~yAI>@j0lAZ%|5KUN|eS9V<zpopDHN>wa#|ld}
zR3g2?S+)2wZd(|Ov!$?b8<JQPHgE~S9Fy@6G`XTIqM)adNY&IjHeQeH6vm=>-vOQd
zr$@bd{#z*jf~eQ{g$h=2U228dgW<SsDF#3dUWgd`43wg0pW4=je4F}eMwo_@lCU1<
z2nTXmWHr-uxd)MZL5g&ScGJVu{4aT3^dT~1i9bM-DiW#J;JoC!dh(qIh>PZ(CpQ$t
zb-9jb^#M6iv*Zi-(!A97GOGI+lZcpNJP`De<IE0ObmJz1R-!zvvpJg@_D4KUA5T{H
zxUrT!?&fl5eSG}Kj0acEk_2ld*ys$O=bl)A5qteZ9|;F{uv20*y`YhQIEnOMPVyK|
z;g4vnB(S+*gU}lI9Yc>qIVPe&4-JPLktrsu*wZH2dRas)I7guv2e60nY;Tc=1?&dY
zjd~AgrG?p!y3Kw11HE+>o!zdlcJo7I5ASy5ZPDy#hbybitH;ROet=Qs8L|wACz8XF
z83=`dnAoRgfz>)a<B^#*{<&R`WZnEjnTO(6&tT0G{&O9pT)_GIK|PQP_gM!5-x0kY
zK445JxC$#3WH;|`5cm<9`_(1>EA0KpSJCU<n`UZ2X#Eqh|Hn)8I@oKp`g8aG=Sv{}
ztG)cM?}~T*2N(XgA2gT~sUZA+{4!mX|G!^$n~uDLgZU%38ZrMHq7t7!YAh>Y34!-K
z)wR`J3ukPR(ZG<2e|^wh+;ZUxiT6z~D(@{GfLjLTIwYd7cq6B5k*M#|6z;+|cL~V$
zt(jA!hvfUoBq}tdzTx5H|3-}v=SKlx_#UBcH7a)E-9A`0@T<;3bmKEs;k8>)puuv(
zDG+n99I%1|3B+&Ea;zF6EL;QjYXg_-e(vIOj7;idYe-jmd>y)uB=VTUom(Kdp4HFA
zfpf?0R6AT8y*5RcfP_Iz?fqVt8KbpQAY>1Mit;Oos=hVXueex$JoHb^nY&wK)uFin
zjRfE6>yJL}f8g}u>Lqqo0>OZtppiN5g;ylMhM#7C4^%P(t}ehJ`mDvb*-C*6Em#~x
z9oBqvYfGB(151{DakywvhMM=&^RI_bn9`5A9%j2Bg4NEsfH0D5Zifht=vzmE9Fvmv
zWsmb6yz(|DYo|=5M=+sWq+TBy`LFQX4dy%1ZmR$-3#T9rBGm3OO@W44@sB2xV8>Th
z98Jyl88FC_gO?&oC+86+p#o*M3Qb0ouSyG;&w`t(8gVAYCij=Mhq+N)GFj_!KBL~F
z&K0u%9BR1Dm?s%OH_|6$ywsn;QXV29pxB9uu-cJ>Z@lYby>8Fp5dd?Jf~^oS4j+C5
z>}P}O&<~cZ3(vFnHASG$w8{TQDJqcf+ed@c(cHL$@B8aSw4yWAZ-BC)#41QlBYk#O
zyjtJ~#gG16PaB_@`>2TIosUr}GTHATG*=r(y>)CTlTgei0$g9+QA%crY)76aQjc30
z7Vr4>+@nR%1VK4>Mwn9b=jBkwiIONavjJ<$a^6h4)bGXdD3fyC&uLro1yIfPoY^8;
z)tQ%Y)gF<P2x8Mv2t=IevOaedMPfN=cNF~WOXorV&7IK6Nh~UYb%?(jf~a{5ETNcU
zxm_N9Vd=;BQYIB+hsNAb)|K{&sQ|I<tYy*zdP2@l%Wk|y&XFS)*Y6JgQ`{?dE9oL%
z2?1VZ(4E705N*aiC9qiIPmerJ??6bt|1lP!XQZd$;98B4qCy_eOVXpBsQQZEd@|T{
z6C=Pahah&Nz0aYEKE3O)g3aI=7CGwl^?d)!vEKyaz$#(mOfCPq!<PNc(7oq+tf4AI
z@y-c58djC!ouzaT2IT>5cFmjFQSU{!+1d7)x?_(CZ8kd;J4w?a!U59!_3t8opd$L(
zr<5jej4ok%&Au->W$zMUK!6Xm$9^%mR4A|P_#1bLfI?Y8JfdCvQrN;<{g}vQQVH9}
zqpM3$lJ6Y_voXLG{u|r`D<q312GgK_Zf7=rVM_twfJ_9LO5U-SqQ?mZXK$;2-pVFV
z91oXTDQ<j&-*Y`oORc;L&_IQ7ykd5iAdT*B!b(A_tv`f38ZF{{H($i-C$*AIZ43(k
zmT$zRCvdxM_@ssz^E5;VH@DQq;x-hF8CS3vo(zuMa{Mn^(3Y{&-S%y{iVR}(`X6J&
zJ0EQ-2^;={m;;9hDWCDf!7zvP)4tgcDqDrJuk&@94eBw{u`SlJG&$Fa-FpdrVsw^b
zs~Lh2@CXdZmKuv(>FtCc-x?#+#Yg-@0A1x#L9inV^zSiE<<Wl8_H2h2jw-!IH>F+<
zIwJ^DAigORQ1laqER2q)Z_JI2H4_u<F3cXU1>EI)#=8Jjn22uw_fXv6Ozwfs!D?K_
z!hP^{Ya;;_G?=7hL0PdVJ7o4MAA}A19}v?E6GrH@B-wjNXMiUJP=Fq`-T=BmFn2B_
zfYZ@25gS3R)eH*6g0Rq}@Wwpp(JOLXVfu$={X&GBhiaaZ3M`cWL82dy$+o3V?aPhS
z{W2I5e999=SiGjPZEYC^yC27GNNe!Q|GU|3gvX+atMX+r*eV3m?f>wY4rN`CePjp;
zPJ<XV`LxWI6*urEf|0rml6~JZZMIkmTW^cZWk((6&lMVkX%B~^3J3Dy1?#^<{S|Ef
z4t*~8zJ9A~fapgqc~2{d%_e*$WS=^_A|Q}tyk6)JjXpB=5<PHHZg8As@w#Ntf9A^I
z$o>y+rL?2ZPt@7?RRN0ywSGasGSod3fK`VY_I1x3esfJ)LIKEBz)*)!Nb4veC#y5p
zgF#Hyoc82P_~2le+o^?&9P1e7U1(tt1^AmLrV&w+4|<s-2|m%*>+j*$lyWg5Drk?Y
z+A|F3Mm{3I?oP8|@6G`LeGsa#G*h+?m@@fSPWiMX)k5u_UdfmK;~l9?@V9!3Uajao
z0D75x=otPQOFcyPesw4dQ6Hc9uMClk5W_)XmmE;dkdQHdk*-McW0heqG|V3Qlj3Tm
zr>GxNfnJbig}=bNrhmg05kv^I_$LQL4szpXlSDSJ+#qqq|H#J-2I}+lQTwjCz<~0x
z>oXhr1;3AmU@sHVr2YwIJOtPzd$c<G@4I;^E@&_THeEKoBO?E=LV7o`144>!6Q1%%
z{iq+vGbCledBZgPKP`vaQMMkTF!a(!NKuN$q<;^2rOuW2aTb)V%e7@)--M+{7u0X?
zPECe=xZ^$10o$8`a(X4sIO&m9W1RtRb?H(m5t5CuTf!A~Hph+p*dVSiT-|z3*({bQ
z&^$l}`>P;NjSewn%7Y;?LGw-}@J`>j?-7mA=s!NwC4vtj2_i%Y(Kcd^Q&YIJ-goXU
z$vOK?%J`}(8}!Ke`EYi(1Sr+EHMa$nX8wL*B}inv5W6(OVCo4hY*vlYbT_IWHvbnG
zUYRZPmSuo1KTsB`=xmxk0UtnX<PREViV)(U3X5}DLgMn|RpO^1<0)dKcf?ly%>=R;
z<nhW}T&&_v<@bfeHmOqIBveFFAo~%P7|R;U==Np4kHDvDO#+0Wplq~+*Pwr2={&CJ
ze!3H-d$~6bJS79B_2$WH4OnOAM}++c$z?KqoQLoaSzv9tSsJP18(YImxe*4-Ck9~2
zD0vld<S6sKv5eYldgzxq8e1Klx@|Gyq*K8$8v69nNAiohP1K9$T0gQjoa#IIp0lm>
z{7&d<7$Q3XG^5Zz|JVt({YTT#3o4ZJ`z7BqFaA8vgkzq2gE6v!>sCh`EM?#jYOc&q
zN9@qM!A*K))-Qt`H)Z?rMlp*z;X3Y4zIrV1Zc~2baopJd6{f=FKYsjpn!Naop#8G*
zz1-qKMZ=*--DZ(SFly9uJ<g8^|MgP^vi3|v6{aZ!%6|aM>ICzJ>gc|K>L@J(z5-WE
z3@|Z9OqbQQ=Li@d#}qfV!#x@X{^F3GLl=JUH*CT;!8i9^RQw$@dYQ)iv6?Oo)r#pW
zySgNR<y9idi805{Yc;_cqWs1Qb>~AHGYQs+Jq#F*8Nd3dr-a>5U$|Q0E#AnoJ?(+s
zq*{ko!sqfOXef}on-Cw5Tl8-n=G+@Y1>w?Z{+vp8s|d_Sk>g3d92vP=P-dt_5iOI2
z%*#HDdQ|%9HlEaJU8~6Ri=n%c|CbB!Oh9+-fAs<!pC}p443W^V?L_4-mY!$Dyxwb9
zIy&Yq!RISgbJtA=uy#L`7l_%`gBCwRtUqT$fb}^{fi(v)$0$BqPn<5BNTE8z+)q#t
zHgnZ~)T$lllByNuPWK*3%?2TVRTS6}GH8cJ4^JkDF2YC%{E=WphhaqE7W;tfiBaG<
zvpzNAnzp1I)%X<Q=h1HfIZhGF7S61j7NfMnkWJwqeJHBA6`NG0dMjkdYK$VW+9*uO
z$!h4DLFw2O;_@dAs<2vb3<8=&a@0)Y(1Ap#pN;hEtt3M%<jJo#BV-plVt^vB$=C+J
z60Q9(z<h+Y<BS+^y=l_`xQgu)^_tqURAr<Bor}<KLNH~8rnXhfw{doM1VzN;pw#&x
zheRAz?VJ+cEYNBu6AzJ;*b<5CL=~0ia(sF9jCa1=*48A*giEs*7oAXH<z_b{AHsuQ
zsZEzp=+B<QuPpEhlhO*@Rgfh$N5O&mu#iuucZgfz0}|_d?%m`z)w52d3&bK9{YLg2
z5`ci_lla+!MHV7(o=V^yxYt-zC#wr>;gE=>6l_Be_v!Af?yW2-HmDG&=OnB7fB7ye
zP6~>O<2|r8b%Kbr<OvAulJ#4rG~m()Q<<$wnG-E_>+JE>#VwaffI|Uzra`<YbK?eF
zKV-Gz(@&VAB9-v*n!cVpy>}^}N9nWTRNti73y#Q^RiaX$NR8GFYHn))>wonC`uD0N
zgqzq4upoUfj%|>q>H;48K#uW%EYHIze>iJTNx6?*JAsveF)7P_;x{&vk2Zar+$l6z
zyYw7<-aa&5=fvWr7?vdXMt$d%BgoP-NUV3&Erq^aeOmP+g8ySzq*<M$)Mcf;x$l)>
zcc8~y8;Q8{xXU-7Lw_Nlp@7EKCc`1h2tj8|1=jBBMC2AR;RnM^$hwc`tc73YeJam-
z`sk24z~otLFrjkJS$3H|%h#2GyUk9otucV!waE+L>ronsF+zBM12Y;0R|}ke&)GST
zBrM6X!9roiSyoEbD1XCL^F6t+-e&WkNO+SYpTDnOtwP!+XQ`)n#pDdlhrvTvTSh>z
z9hW3>Z3yu9KbRC7Du0^&`4^+A%_S{<F)Xi%gw-!&t~mxrfe9W>B-pgjE2RxUZ86QO
z<%pauJp}m~%l<4C7)`-p@#?+?Ha30!b0)y%-4AHTjTe@WJ5FugD=kd{jxH`PPxumA
zTFeUz3lBBO8yUa`c%XVQpy=#Xnb}b<VPRnbp@M_gp!60$K&q&SRrd~;aMcmts9p4V
zj}J4vU&Kw52D#N1lb3|wJ1}MEG7brX8WA^t{_59947hcLdn=DbEV)M#>|!;-L_;#m
zp7E8r5KTG4?ot}$>$ynvchHlwkrLaN?{4kf3)8*?cK&+9=s9YB_{9m=ZI(!UaX-@2
z4C7rTi+Ap934Y5YPQRfa9x0iBU-TckJVK81eiff1vbALaZIJ9oxEOOvtFk|rR)}(L
zs{<7K?@{lWl)$2cX%FaoeO2y1jB4wZ^Px`2_6lPe6DX|aP9_8RPQD+yDOJnyRS*43
zda~L-aW^4Q`S=3qL&Kx_KHGGG(23UX<f{V%+zZgU{Z3T7-{m1%+$)lSfn~`fA2)9@
zIB)bzoDDV75Lv(o+keoNxbAX`Up{>{5Nwt(sAstjS4i^MH}Hq|+cSrwSU~HUyTjTu
zLDXOLbE~-O@CbGk{XD{oMDkh|I_)ragxg#?tjCgk9Ia$*uS5+4q1EXH1MPMjHdD=x
zgzw9UV8G%((RZfR$@J9s<g6p$CV8$v4z=jPn`-ffv>YIB&Lu9$r22;2qn~IUxg<8d
zSdpFKtKeFvTmmxFp@@s@hYx8JvqI8a8`RX(7%f;0uNe^fuB2XkaSra!m%ZuC_oLp&
z9_UI8rzJI!`64sbnW;%iat6rUGr<1{UH=V~<UP-yl~oD#ow6l`H+s}0RSh=wq$)&W
zL-jG^8C?OH?S}dZCZQs%T+%Q+mxaTgC;O`SXE+_Sy(%N1{e!ZCUsH@+gv`;PQLk&{
z!-W<i6#hp!$TuIrgxK+=7zHq1lebIVL*I`>jppxc!|YHk5pwDq!Mp=77JrxTkMb(i
zwN-#-SY&QxNMtfmJljyTUc|qnlH;AGQiBPi3XMkERY+o1IAdPHq?~p}al8RD(&7TI
zdYcYEX{-mltC9?Z*klE^`Qs$=6p6_>JI6cQJy%4G3mIzkGCe3AHI?ikuo@skI1~e@
zo(VUmK(|Ji7^YG0L$^tpCLm9$M)c=J?2_Zinx_s0pn_`W4CU!qUC2hH?myh&MJq*r
zBN-+<9|`294Eg5#w_Ngu>-U!_e|k;o(g$dl-Q>TC#<CG<qynu|wK5(FEu6Az+c?^O
zFd)|}JRD!e7hW#*BVQipnF7N6y{>rp-KJDS4%3CiZ=Jrs9^D?gZB}l+{}HTRS+%*O
z;IWIO3GMy+AQ%S5*TXX)1IPu}=0Y-U@sNnIG;WWwOL@5aq1QUBR+AMk0C2?WnWHFP
zq+pr*1gBg`UEZUo9XRJ5mA=91Hlh@0-J7h3?i;9%0yeN%lc5#2joh@EisAAKc+8D<
zSdId&s8)RC7%FLAEJE!2id_z2oK428#kucBECBj}PDK`8>fHIkf8D1~oc4SieQb_i
zuRB4yTe5RUzELaS%SHGrMOGfb%mk7$y1E;wo~V4QmV^SCjlVi>{~zrQ*~FvS)N`!~
z+l+P&9tL+IArIxF=&U7|x}-a<udPQsq-rU&iK#5T9doO(Wut9E>gI6O4)m*eow2{3
zP&B2M`~DXV&*_B@WWU#t`DJ8@AzyEu*LZD@poSJVJu15bitGGds@ZvThd3tfTZ-lz
z?zSe?qHBo$PVRPLc6>2PeDR|UaX!ykX<T3=UV2p!r$--w<>~P(soIs1<H?2>x!K;l
z9GJR+?J6HD3So2IacOJ=9*N{H1ynU5FMbmT+xZI<){)~R+y}5qVe`e8siHS6cQ?~m
z(A_X;+(ehceET#r=w9GnbO7WC)>VnQCOL?9eRs{R97AM3PjplMs1Cs&GxJZu8Dfj}
zB(<l+sP8jxfm+2jKH-Agf+`Kk6#72bVJOvQ%zO(Pk!|y}CqCo6R@8(YBcaNCa$(2g
zIDOq;QN;h>*=crnVRD|@<?%dFV;i@vM4C2M+UTB{bY2Igj;+kWfw9Pvyy;l`aY$Ye
z1l}eHmN^>b%oiw08IHkwaC*9%+0~t(toC?3-^YNY+wZokw=qyLce|Tz!ZY!1?n7Lb
z&<(Qf9{K=PTOgKH6QHm5MT@YXl>tex9aCytUD;Pw@dPNW#iTSjrPR-}S3qS%fzhrS
zZJBr3nDmK#_dU+?gMo3*10t6>#F~rK@E?9~FZ{|$4K@q6%THvK1YRt{#GbPB_*yvr
zOC0*d86C8{B5e3bcD3#}Hgi)hOYtj08tXX1qM@8Yl^C_ja#lv?nadwI5H6-3)9(Kg
z_NjI>`H|S(rupBC$l~(X5mrRvK0jSuan<HwdxN*FqGY~3dmqn&m_u`{#uzHe?(6rK
zq^sk5l<t|Ek^T%-oc#N;H`8I_>k%-HdIx?F(7Xn*+qhtiU@YTRO&S~CP)Q;BX$PeK
z2AsYw4kZm{LGxNnK0yQ7{&NxR*i5S<Z(=WV$ScC_XiZsv!T|%(Q0EW17y!@gU>nO6
zromEjKj6|wo=;)}${YKLC9A}6WVs~P(O+m22Plb6Yuw0YPL)oxxWG^~eSqrAr0rLa
z?3HQBK<<ynVw+fh(k==mAnmdvrM*1b_@Mi2V2yqup;E!tMfz_cD)<b_L+!2us*ety
zoH#;vsM&U^*%SWlvjIjn(KvBd@~YtFcW!q9L7B-Q6Lw!U_Q2Vb)ku*t!k*tzOu`?;
zn0GW-k?wLXDxPuFp?Q^JhjBv$>DU{e_pt}RESKp*aru0J?bn067y~N$fxJir742QE
zrU@Z72}zK`m`tlF<ljB9ctXtoly?qva;oyz1IB*VNiMa1Wu^Pe4!5pu-d%cyQTj(C
zMu+OZ+iMo}h?BR?qI`!YrAjDQSu>6v*Y{fq08x>?Pg6L*ax)pDMu#P*?pA^=!&X|R
z*d`l|nVFOCD0tHEaz^_G|6N7Y8z_j^*=D*Jx39(mSTt%BMAYgPy6Fu&7}%qypl=82
zJ2lxM9>gvoQdIv{D>A}k(W4dd$AigHo&KvT)=gijq~=Qa0N`nVOHSG%_53_@>#^qD
zd(Xd9n%|X(y72upzs*Gir0i_I)slb2vzX~J`TTbmhbmjK2AMHxqWYSo+c5n+fJPdn
z^+XJ7;-B!1|F4FYW`X#jp4fh3h>XB)C%Og6u5YT6+CLi2=LzQL-i7u=!Y?@G_zhd}
zDdS(4A>W|s^;0p~#=%5iOVz!a@)zrs6xcPHoq2RhM?0=lX$4wMm!Di<U(12=-T#IG
za@~pF74^5J$|l?^p>TuZIaPGNFjj8RHE#GiNzlUF4Y1I5EE-<YY={t9@}EZEw>qvm
zHeXiBo<e!xzR$tL@iIjE*o%eim_*4Sbx1w?1V5AU5<3uRwgRNKJo}llA>3{Oql|{@
zvf2b5WRd6L)dzq;cdx!hUZkx-ohGXqqL8EZmRfUl!?^vKZ=8)3Zso`>doP@O%b<&J
zBJ7*<U;aA*^X+d&RX9z~N7j;QjSZTcjrHN`rOLkkj3+XOO~b9UZ)XUzHCyU&6Mar;
zg2+QCYq2=mQ^nC<7G>~k0DU3hdS5>BuiK8dFT?M|m)Por{OQQN9ngZTP30(vA0Mms
zOyIjnV99CX5rB|*$N~ci)JoFQG;W_f37z+GiCZqj?5q71)G~s?PQC{GW)nwp45l31
z%TQ-U1oA1S*n=mn`VnbZvU#E24LBIIKp1j@hhG2{{aZf&;Xj;Z-vZA-WT`)8X$44r
z$YC&FZ~A@0J$Q@x3>T!>g3Om#f(}RZk-`6TAmr-6@_-X%h4zVO4aVQwTxKnSf23Dz
zc5LwP?hle|%#Jc)%zpPQ$z435!AuN!#t&2^2WT}Pz&amw0oAYf5wCJfbt~Im5zQ9f
z7Zw{*7i`Zw;zt#Cc%X=^iNHL^92xp6NdRsXI2&_Xu#2jU*uy?@c#3l9)9CbCPo@Pl
zA_TY>n2(Tkxd@@P%%mtw5=2+{4@)l!;^!qhuA6H^+Dr}qD!~R^0?#_6rc568Io(+E
z4x#U~BVdRKEKS#g<s07P3`szWUEF1<wG3esDbKf_+$Tmu-R~Q8eib?cL)iT;qdKqM
zX*KiEG9%_X0{<&($PD8B!#`mV0#M50ZDc6k{z(p_i7y3|sWg8o@(++>;AGx<jNbMr
zw~2fx?3=mXCGZR`xDm`+x|3{b6M)X-JzyRx(a>=lnS3Atm2p0?FH4XFeI>_jA~lz0
zXB5@X-Req#VAVaU)h8Wq@B5Q0RfPoVtIIJL!!UaZR6eSt3EsWQnpHK`>UPq4Okt0d
zIrdU0gj{XdqUl50g12aWUV2#@{%pnNY~zWVEVv&OB>rqbvi&)f)#FGsoIeM>p@&Rj
zaU`E5(vmx1S&pRlCy@gLCfVz80~I?i)`N-uB%2OMQC>aT47K3dmwJdrk_DJ97F5KY
z_FV$Jrv4DvTL=~%(xn9-(1|PB?n*1B@&$eQo+g{_z09HeW4lg}WF<I+rd=I2ViF5t
zQPG^YkMpRFFl@gOP)NuQ@#-IHQTGYhbP4=n+Jl?Nx(~1Lf7M_n;YX*dfGB&pS!(-@
z3^9Tb|FeR3lb{Xph`NB3^R=(jBcUu)`Up5T-|j`e@<!H4%QBtN=<T>R$A<b%+YE+^
zBFi<6!53tYtpS(YA>L8z;(JL8hLPt>K}uG*zRJH{AC1=7UxUMmLY1Kn@O_c^V?t6_
zruA)Ppkpri6*LR8NxT8v`~8hh1-?zC@Il3#MYT1r_E=(bK11-P?TnzfP%Ge3r?q50
z)TW5F$(Fe`bHVgvPB)Fp6_~?qwp($C6mC$BYWC-pYt6boL}<w+VDaKRXR5h6t(*Ul
zYp%$exXguvHTf}q6b=iD)kXF_b=gnxWgqe8`-76g<;k%qg@5?~2HV>d|DU^&e&7%;
zIku-$sxzD2k&~x)kFb!wEKN=z{B-~XaK(|yV_-AxW}wq<lJju+3*Lm4rAEv&I!>8$
zvCfgjexR=SndY;ixfPyqe*7-)juf~b9E3gG$W<-$2$+tZfXd1+#AjA)mfI9vEPfd`
z*1ytgBr8O2+s_AJps%qGX^*cXbAr3ulCH5XvZfm_c(Kc5CLe$D2)eg)r>R?=gMV=7
z@X<Hf8uM3xx{WH@4LgwJwgS=%uR%(nGa(yAQPU>;vO5>ziDCvd-i<VLzZUJ46&x``
z@(2Cuq$+^Oz8+M|)#vPsNwak0r`LxM(5z^lyf*N9W_RG&@F}?oJAkzA!XuHC!KVl1
zSh8g~qmQIhuFNwNB5Xbn-_Y|LxR#+9J_Fxx028RIGhS0=-TzWLgFbMT2b?yL7`#tx
zwL+F5@tP+6W9t4~Y@YMDLv613I(U6$eLXK8XHaQ#Hu(9v<dRt$_yU<ESvs)Lh<s1O
zNL&q@>^fh#4g|4t+$$eexBFN+h4qkUg}!r@N|PGf69G8FNX-gW%+P5~`?(ekf$y*&
zPno(`Sr0uV#@-zza!jgU<F`66Zs-E^hln8%X5&(gmMt2q#$-i{Oy|I#HI->blzIGi
z7t2bcB$ZmyA3%6l+yy1V67+o2yWIyzf4IXRZX4Y84X_Bz-uT+yk3D)WQGj|!&!Bjq
zk!upHpEja0nQIb2VXhhho_yV+(0RAwOopp?ebg(Asv|BZm$*Bs-$c@p)$7+eM*aO$
z4>!haW3XI?;OyIGx-*=XH^fVKoKv-#v9tT*V5xUG>wP1gU61|H?jJ}-o~QJN8r<O#
z*)ED$!n;RMU;W)@Ddy=H<zI*nP73`=#dV=?{Nq^?;p4B1vkf`UtgL)I;QTt|VW9(T
zYjN{KbZB7&CWE}Zo|Mz(GEj%oACmL>nELHIVh|0{oBFAqt*&6VUE59sfG#Bwc&syj
z&4vNUrY(x`R#UOnf0|i3clKzq;+|X@$#H`2m+upqW%dRBMMl`QiRRxn4Ip_U<3XRU
z4DN28Wok!NVar(yC@6)55&pv8OWzLELDsBrMIX^(nQ5^6CL{7T=ys8s%s*IA%K{-U
z78WZjR8eCj_+BPKK*2HgqNa#vT4a;C@ThpZlHyo9CUQjiH#d%E(@46llWNeX=k8+M
zV~;0diBzYz^~BuIxvF^|8Kg;qulNo3=eCo0O?}3?e$K=>JI}6eUvc>ZXE}7YwmrHA
ztm{s@*r&p+bFSWPE!t6CYhL``afviN^A~;nFL7K98`Lh&*sSd*>B5sW11+KsK|bFj
zsT|`G0(DaSZh|<^oDs*>AY&xeZm}Xn0Rcwmi(i%U_t9OEa<iZY<JKB*CYlAHNVe8I
z%1jdPEQzg4*@}p<=ZR6Id!2|OELj_?cA<FtLlHe}Zk~3ilmX7BIb3R5{7>EoBTSPO
zVG$P+!1X(_B~)s*ZVS(vL0qv^dr{KeC~;@3`<LG1dg|<&bX`W!<C3?qVJK}kf4(iM
zW1=+mpj{!0U@&i~cD8kFb{AQ^h^L`6pt<HtKBTZO+Kb%%JO?*%6(mc*n!mNCpjH5?
zl3RM=7G|ki@`9FEZWM&>CeF(Hby!8H)tO<&vg=nd*_stgEK}#k2mMUW`(qbs@7HA(
zQ$E@bSWg$5ofdF<y^WB|n|9A9Ing@xlt^8*dZr>jD_^P`sQ-R9SqIIp3Xvu_-yVB2
zB0k*=PqkP(Nn}!D1_QR0utVBLu4)S{&s~McV3`s1{dhi2Aq^1TzTeHtoT$F|2!X{&
z=4v019>YPRV-z(@%)_0?U9;idm<+BuqNr&an3UgBAjmfrpv9@Etk3OyHGk|v#trlV
zmaqyrwT6Q9f<gL#M$xTr(_K=3->*p*Ki4woKY9{0dWkewq>nTy`souh56{Bc5(>x0
z#@iBcDF=a(1`D_ukB1uY5FZ0PalMsJq1htUCSoy)3?+{00#-mx$Jadb_k*R_bTM9@
zEu#<CfF#eJy7;F~Tk+$+)oC>t4HjziBCVE*DlqlXV?DSH?h%)qr-j{jo{FMV<FX`2
zwlBUY3$*hN0{b#-_Yh{8#l>RWOC*Tn0%a5bRjMc3ld<=wCr_1u<meP&zAM**Dda8v
zO=2Sxm_U<i0vAYVuG~uwFgu$ExF%b}_|j!6OLxTS$Gf9^ZN2fiyuP#DIbyHDp`x>?
zR*?Ln7DL-&tXZ4$!Zz+_d8*6uyKeDjNBfqo1wh0sNv?vsprIfUUM0T8MFi@c5qLN<
z_SGTPpz@1xkGTtTq_1){1;9$VzMiQnknT=i9NG}p%U9OzLmRHzD|X~&>+ZOEI5J2u
z8Lt;+;Zy;L{GQ?4s)S=rX_u%<jFrqoW0qqD(%B$MH}m%26!XKrb+QtSdb%6utR_4&
zzQ(OB;4Fy#zT6O(zm*ZjB{9cMMCAx+&W*m57vpZM<C050A|IeYuHC@gYu*|sQ3F|r
z3D<-#j@Ki!%5o*@=C1M@gVU!DujQID?E~uhpz)GGw&KzkCqb_k!&jnANnkT&n~V1m
z(Yyx(o&h;y>fe=SKwqb>VV&@*Y;qA_;50Sq*|L`7cYzi~fDb)780hsNNsr)WH`IV@
zwRwP2<C)z);D?$H9y~l5P6`!P{~j?+RDa|qxA>s&Wwo+m-m6)Pp|@isi;9i@tkkYx
ze|lYMA9e6gm!>FMzqOL9(Wui$5AQiMadL9b;9f}iqoQTe{5pn2AXLC<T)K&$>u!&z
zlV4U4LG;6D?jt|&nT=56N3zkRo)?rpu|HQly{&hAzN+Q;ppAO+#hRk^WuPuCCl*p0
zm$7rYYK4rCI84H3m7q;&kYqebQGVbNPwQ@y1ehmabUV?INCnDU&esoR1tD9F-%2b%
zJ8eh38OEm8GbLg2tR<p*X8mqPn|-};!PPcFc*4P)=5E#~Z^%%z7srB@mNcsC7QLQh
zI%qgK&v45AamOw<QRui|E?7wwj^rEIsNbSC#$R0ER0u;<%kJ+_ri%bUA3KbkIEoBA
zB3n>9!?feKi*nJc5AOPn&U#6+=6@qcg<U%>0x4){dXs42iI`|Wa%w4hYYQ$+SY5?3
z=1Nc)+aIxfZ{MT$8#e^B;Q2s#KC&<AwhZObx3z-BxH)F5v4_ow?nT9n^sn6<Gyp<2
zS!f4MZkgf7zWW(*%=V*!LWSBu0r^e_gT(nkZ^^L>-rsjbf2}w16W_(}4;l_Dhyg;e
z^t1H^`UB_YgJz#<*M6#^<Oychwqh+f1#io@8*eahmH^`bgwWjGf@c7SO0X&Zn7Lys
zl(-@noXZeNGrzERjbZEdmT`;b7lQI71ZuzT)P`d#XX7?LR?`JjO-(}vB1uYCtRTwK
zJ@2P#LY$Q13~Owo#8F#Vk*SoHW{;Jo7!pjYlgGVd7@J~lhXN*rho6tghkFo1nTVfo
z=3Ju%{rZ*$3rNeBJe|Zy$>QD4i^^aFZ2POHYc~7KT75q^9RzT2_k3V<Hp}<Q68+mc
zgg21ni6Onp34;Xs8vPlyJ;$jvSW+EQpbh2O6Em)7gVo-?mI4qfsxyIiQY!~~|HkI$
zeMTZ3yEmTdn)KR9{6}{|sV{SWyPS17RaBwsWptu0Xy3iX(Gz3XU-WT-wh+}(_vDyz
zKte4BDZp;BEEZJ?Wsz0JEYc3~F~FImy*3R8hx>nu1=^;ffewY_*)oTdW>;wYleiyW
zeIh*S@kfQI5%rK|Q{@9+9@p@H${+WCM_J2OKL)L4F6^6pmqJd!-X^0lAOVdp%%G)<
z)M*Idu=Qdss?5*ftAu|u*+upGOb!URX+br}B$dKhp^{%WkPSP6RQ2ga+@U5|l_x&5
zSTCs+pz!%?iMH9zVHz+_*x+uN@SFW*wfE|MZ1Lwb=wWM|sh-CsFRg5rf!0wRQbN;W
zn>No|VF4flp5LcYL|!AbUY8k+0r*LRBUx8=&xn+*KTsy$Vzzm{pTO>DJZX)TbW@r)
zW+d!tJZTP$q&|DA@Od<S?Y2?nFE#5sHJV4Vlh>XMA7}emaj*(A?w*Y$pbZA@Rj&Oz
ztVe(E@KDrPg16Xtr%ZjAD>2g1pO+Uk>MF{F85g#5_hP+BkQ*Gq`y2l4YHByHcig&!
z9`WGbyclyum&VBrT$nC<#|K!v9ZBlqgq<WTquGaGmVbD!zU{ZohA}C_5A7=v)*PCz
za{@ir%As^@f*Y^hVX<aMqr0M@excoHhzMDt+o@R+5X|%LhqOX7WmsX2nxXt(!p&Jd
zXOkXII>g-E>^4f^0-jfVi~2|D3K~u~aT{@Yx=87NlDK!33b#KnBOta42A~M`pZt|n
z3^r#F`ol9?3d>Xg#f=`vF$AAN^A5Fhn3ipS<uXo3(rz!#;KwOD{2MG~q0WEx0#p;U
z(Xw@4?AGLz>1|dZ2~YksWGgr7<mM<C%xpNoS%I8HMX5SoeI&5&<{|V5M(E)fB7s`{
z2JIIQ_(*)!FEo18x8g0&LFpz%lU`J+KtBY5XO*%uU-UuO)CG;n1J&P@1JOf#n6YOr
zAcw`&h`X~yq1kg48BB-;br1c_SsGCE>#HCt)Vl3flTjnY#_^7Y81tV&QomjaG^zjf
zCxq4K&lsOLLFJ~OkViC=4qP-TrCAy6zil*XwJbaYWV~GP7Xz6HD8X5n(zZfSv&<Aw
za`4H&Q@ZKe8Q8bP;wFeOGyisC_<_bGLrqZMB1dncS+-L|@nERhU_OwgMeO1EcE<Dc
z=Juh@X(0Wl%5k)a^7eI^4wSck0hYgO7kf~v{Up5q8-Yc7uhUUZg`5eFF4DgO2y+@p
z9`FTv;RKmYZ;!S_8^ccpxtE-HfFK$sDr>!6X)z_rGxB$mqR8!Y129Q(Y@vCF|K{!@
zHKI+ZTX*Ae8DS+TS}^{%lx-NcGE<N5c$mL{Q~FBecVs~ZzKlcVGT9_Sk@sHEDL;3^
zF^J6sW<r5_V$-#U^%Lt9i7EE1M`FF@zwF-d`TgX${ABpj2I-8)&3k~2K|*}M&99Tj
zRN;$^1Pr~4sJ!?P6Y5K1z{m))KSg@R1BVQTj}R(K+frc319`A0(~^zf(?LQX3y4K0
z+1s%5LChJTvy!<ax<Cs-NS|1qComUGPEh9m$@F4-gd^}rf44B97znT1Ux0Q0{`%t{
zC7jm&g2w%fZn+(-kfuJbfagul?df;o4;CV+4}+6KS-(QxWX)H6?&lqhNF!`Cy)sDS
zE*qFJH<pF)yz^STB1B#%+;EEqru4vLG{m0I77B_!qbKi0AvP~4e**awmepc`OdQ5W
z)Gt20O^tY)c4fGzUq<ACC%AH2QcdsIikcXq8F80`lhbJZ=A-RLwDVn3!UIwDTrAMn
z$TgiOVsoAfa2Wh+$u1S*%*OHxj~P+@Dold)@_`Xi^LZ3IBM~yM$U4HVuBPXZBICB@
znS91N!tbNb49|^6Q6FWu*xa2*eQyw=KqXwBP5T+)=O8e7T*ltmib2)}a~^7JSz#$l
zJX?r679<R&bXk*Q^Uj~O7;{<=)Q(e@9pgLrJ~UsXR&8w<lJZ0L4eeN}+>xmhWj+|L
z;9^3D0oMvvK1OUI;+9JUQjhwPZzJe9d(=KMY1LVI-wYpgH(9ooxbwrj^7cI+ZzdNQ
zLq>;hER?yI0f~y2bJo%Nh7A-gVO-SCCUdPS%|DJOMV<KtNqa14JWkr$RD$T!ak1aG
zl+!zij2Vomp0VT}@`l#ex?&Eizc6=3DD=}aSat<%>yr@1^HqWZER^@ChPuDib47m@
zk0kaaFwC~$B`&9Mf^7%%!uN17cjk_!2Kjm(x*n>`PV-+4crIP`cx4%T43xBYeb{=J
zPfqgo<+?W`Q}C*U=Io}x$sw87i`lrEIzd_Q!`}wWD={tDbbAl8<KXT0DM!195?PG<
zKMH>bWz0wLdR8M}$sWP8@<8TZrO_19<Fo}{saZ_m_rUgNWjCX?IzOQ=>L)@i*_^nF
z>f0=C4j^XzRk(g!<5{RP{zlP+UYk3jcl6e}!l2*4O%A}Rs88?u^2Gyth5v<m3kG2_
za{JaUW^+{RizU>K3Ujw1+e+Xjlf>y*Y1`U#&Ra0a3?(e7R#G|~K*mLyEIXpV?T9$Z
z$`E{+dj=cHuqPg{9kdv2)7yFP?E11<XjS(8+0tQsN}9E{{44J7&kw{s9f1%ZXDw9)
zO3bNC)9xIH2t1(O1D~+_^BT5khnYbBvHfcA9I3$8L=RZ`T3%TB?ABQQ^>y>k+y-=0
z#Sfq91m%Mf3YwveKk<=>WhrK5cIvRg`}N=^2tp%>Q$cS=q&ql2uYGoQUu{E;ym}UU
zk{rnNF?x(0?;M?W9_nn}jWW^zt*b^++&?#*1|51$CzabH)(TW}Zo2*@Eo35ocUI|v
zl5UuZy6X)j=Ki`#u#h4dt)B1kBS_KVQ1G%eIBggrBdvLTeMsE}th)UIbxGGyHr7Hu
zxxc)Xt$)sbqv7-c{MaoU3-k%Z_tVdSCQz4Bg$F~BYPih)X|?ixy9NX#nO0m3S%d>E
zrP`Bf`+UYR()S9Q72(3k`BuPa)1yE`h}3jlY4AtYz1+FhNT5}a-@SCXHuK|%R41SE
zYUtbNH9WrSP61<)**-fHnLKCXhRuQ|r$hp7?#s+sCUF;q$dY-8(c>PoCb@ks!gKEK
z*>ZGYalVmd52FdP@!bmR=z~4kt8hftiBi%h8dZolyLQd!<v@>uK=an*ZF{WT9Q?Lu
zI9*{c47S%BZM6$!rL72b)gS2oabpr{%nG{m8MKX`YpE4M$^1u-+aeTRJlRC`ClPJ|
z0>aOzfGI)mZ*RfC1CJ4Nf{UuN=h%F!{<22z6)N0Q@6cmx1LAhlUr(X}wu1zZ-znES
zu0+&7_>$<^OjlmQn@e}YAW~Ldr-k6GA0v4B4;nQOE6~zpb14PZ4LQRc^X)bzDOc!p
zZ;$G*xPD4LoeMcCK>LQ#mZ+8h^dW*cW<&Lp%-+iUE6NHQX>;H)(Jaby{KQ=(UWvNy
z9qBH$&0jgG`P8jnK}HvU&>N}_8`KpHYR0I%d-A;X5O_R)`8u|M4Rq(#waR*Agd=LA
z6ZC!IC+NTO{IUeh2*xfK!V=zZ+YJ?IZg)RBgw}Wz!KNQ#-|+p^?x_P7MI=b~sVQw)
z$BORdV#UomCx~=jW0Xx$lGN&~pU53`Ly^=AYSQj<1Zk{HvLf>i5|x=@JrD<SSDWw9
zHg6t&s|Ed5=Q*trw2W7wGYsBF{nLZXtJGV{3}XP$8sB2c3cE9{dP)iQz_FjQnuQyO
zUF<UM&ixi@N;Mie*Gkk0pSrx#uaK557M#jk9K-C~ec!aW{WQ*>F7*Xd?p4EMg}m79
z=^9<{{P|tSahp#a$Ba6|PvV9z+~cY#K&v#_tt3b2VpRP^L_Jr`^T^}eSfxk9-TtmX
z;ZQhy=KDmNt-Jf(?%CAyOBYGqQW)392AAT%XQoFZFwXQd8^#i?bQ>8k`9yV}sJ9Pq
zju+2AH`{J~saTin%k<1&TE{A;sSSm)Y)qT;#NYfLQNgdm(a=}*FW;LVzO2FU<{BHv
z>`iPt4*Zq^3+<b67bX6GczWxoHrg**7>A;z6n7}@#Wlr?Lum`e-Q6WXi@UoPcXxM}
z;1qXv3l_r7`@7%$p0(zmS(9W|*35a%*=O&wY0zZ*zWONiO!wEZ!nSBMDzqF>hAC+d
z;I}4g@XOnJ_=E2E-x0|N+Y#LsQmkSPtKp2X9+y_LZp6VGQZSh;CeMfKz@q{Op72I~
zsEmVNTh6jN%XR--Tf^aW)oU>w7ZbjO$nmA}UcB#j)9cYzdCN$c$PlK_?0imw8JDAU
z;0l$pT7^j-L5IY2>|q<d<DL79+*sQ`pBn6(=VxR8+7Q`Y+(9xDZNqLejiveMDTfKM
zY{OJZ_--8iR?i>@0gnetzP#E-?oz4TKEqhawO=q9RGuTnq7X0@eUP2TGE6uTnR0e)
z9-lssB{sS=9vghvDD3zY*=+tP@syq;HYSGsh0H98;a%~^p<rd%hHTy>t{|A)U#R7p
zYwhN6iS$x@EgWNt>k3vu5G?-qp&5lytV1K>``4EvTktB-4a!Q?Nz`23)sL5}^Vym~
zKRkxLoxF&e7=2~Hngm6xWluf(-G1A3nplT@uPm4SJWUd3{8)$?6cZ)apX!FiIcQkr
z-0G^LDq;1MY?qNJ>F}5C|J_bw&rD|1ts1f}zHFz8oB>?`JGBC^9z5n;hG`hA1@GW;
zgt6ZiHoS`#B5XK#en{^E`;AASn8=kPOE`ui60j$v`eS!^I3{BJ;TmQSXJi$JHz}+k
zq4jZ)CK>rm@cYt>YYT-p_OcJJ0Vvl?$8%#M+j&)(rsa@>6nO<*8a^udz0_P0AV^v3
zUbted<Ua;A%Rp_!D2Ai*EY29H2M#^!bFV8I`a_+{%RQE8?Xt7m-t>{vi)-j^<5c??
zGK79C!Z|L7l!!p^Zky%6aOIzocD;sMW{-Z3!V0_t(*Jz{W5q(B37>|`fpF;?DvY7y
zvuka*#-_plRTd#EFH=1+@CFj2A9cib&%Kg_-`^o$=N2|^kAr+sT*=Yf*}{ep`1t%O
z3->!w&{gscRE_w3uj6ww0U;zfJJ+2tTk)1Dt1A<XIYCLgpn-9i1I4Y=y8lDJ`3g=s
ztLEcmQBMB}w<pJV&M|Bh-{}~L+5pAowP@b(mqkPa6&VgKC?_TsAnP@iSGM0`2Ss(*
zJn*)Oi9op|RB0!P7-CI$wvTDp{(39k5SRfE7nE!CeP4r?gE2dm9}|(E9fAXVYF(X~
zo{_cTMYt*MW}-OkV4PK*JNu;@C97>P$VOD;BbgM*A~inB2Rebt0sc#@O(?mSlz$^*
zTnp5^zJdFBfLAY_zv4p&^I*jO;G=R4X&5Vf%7Fm^wnKJJ=>IsqMSXt}xviqoycPb#
zvjq$RLXIdmUN2<pVlU*dXf1vFkDOr=k~-{Bo9cC7Wzk>bsRntS7AtuWsN36t`-F6r
z7swK-lSm(%H6G*@<NHBK?!56tgJ}+bTHyN`SgiDM=8jG0KWR6E%eVYD*tm^<<7D5&
zZ!+D7zb8^k=taLiufXc}#2j-K=KiN~`t7yBT}~e$Q#gi%=rGNUfZGz!)?{a+$H_u~
zhu5y5RNlJZTKp@l+H}Dc^V-*0HJ;HVdwV^-M;HG}ln0}ouTkwjywp1M(#$U`8NNX~
zU$vGB!qipu^rG49?PLVjm;lrmOpJ_u6U5w(kVh^uK`rio+bw1`KX}K+SsczD)#ewo
zNzNR;eohadUoyf%*4~DbZ2x=@AM=%rmb01d+GtGLeZvemY65h)W|(ywUD59*<yffb
z?+RXrrBsrv6w=}~aJ%93M$n@{O+Gg)|E|~`Yom}>99Ae&*VC+DzkE6nf0MiRy+UL<
zLdj+hF9#9I({0b<ORX8?7bE8KThO5Q!RGI!m@3&%1Q$#hfM-nBGA-uF>!$#afy%n_
zXk+n#ieU{ArM6>6zUqHnwI@jxW1q=ef$18;tXio}JEAY1u>3GeE6|xiH!zG&Jy2{a
z%LTV-!EWeOR$n=0sHinulCA~VR?p}vdrlzIc9;Vbe=8Wx(2T}_t_*(;is<m}YAG_N
zS$X^FQBi740SSFyhE%+aaX&}in8S^*5MDAb!NdeDygR>iuTz7P@oX6@#s~*!2wmcH
z#g`L#8A;mV8r!oa#z%Dn$fshdVl~3wm5YVm5Fb((JMhquN0n?o&|r%^NV@P)ke*$k
zBrTLr^}X14Akz&N{<~UXd4%G02Z6!hUhIhf9%%NGbbWZgDoW`ePXcY%pN!%JV2>{5
zGWH?5=Cwdx92#ry#g$|hj9X^$33Cq9bWJa8eIN2T-p1EqZYw4MkC?&+>Zd(@8dm7X
zN9=Si|9La@9Iie9W5pk}=-$SoS%^JtB#F|WljB0}K%@(&ge`nncquvDSW6XIVaRi`
zxg}JAL&?}SE1n;^pNGvlu7dlt+;T=ATh&>vz!+vmPiM@Lq`IMNWB}!b=G~D}vyR6h
z+_krVZkZJ-gik(iO^q!(6$6>xJOsn>q!*Iv8Jak%iIfAu`noZ{0bGk7I}4I6`==^@
z?O&di5bb}75))RZ20p2?sOlvm&T%@ll_F|`7k4f}mxH^fIHmmQ{jZZ4PmcHLOak_5
zya&q6lD`bm$hV227a9#Uln^Pr_TjRDohUVXUCxreI^GvNI!!>4q8K(A<>{D}B5aZF
zdja2@>7QgG%l^&>F@x1&KFT1$Lm*gue!gi1pn$?@sz_ZWYK{JLk|OF|{!JX-Req~z
zq^>N<^*rhDRS(9?%o=-|@x$|dd6O$6QOiiK%O=T#CQ$<F5}QSLZ4%fT56<Dtg~b3a
z!Ys0np-R`^nIML61qDKXpvc^xDQD_&xI%1UanU3Cw&K4jQio+ru2!n4+5%?RRbK#6
z3vcSTS|UrpzX1AL54UaqIXA#4{_>oChih5FyqnLU4}(qtisG;gzU|i9<GRrNdZBu~
z&_&tT7v5|#Gs<{4X1gTV;H*-k8_^onjmE#}M6R4EaKX1HZh8ZoczQZjy$!;FP;_@*
zYGgm@Hdwq{SzW0yK6C>CSJb|J^9QYgrCD`iJq9yPe|g-L4qpXO`k-EWRKR)$R-t=(
zLbF^mhmKzQrEj^FEHK6#+Ro9$bhRoT!%~uGzPhg+Hvdj@hHtnMgPxLbJ=?5*Lgn!F
zbFIb|D9f+!9>cEJUriyft2l9LAiUOmcc1oj4VmG;g8n;w<wreArWJgJpNUNU)P5^{
zm5;m0o7({j06S~#IE}DzGo2tmJJ<y8os{iUg0)W-^`f)E0K2D3H)x0Z_9WvZ6Jd7k
z?HwQFY~eDm>+-@{H`A_quq{BvV7-^Yp*L~-s;ZU054K?iZ;D>hcX%4n_HniAXR0Ft
zoco^8p8fk;pdI&19#(I(o#x=yi&XsnCUtuQ?{hO9;Rmx!(Q6uQ0LxHzK#2P*e(|cx
zN)Q+8tvMB=!~2rPEU;eWtW#T-Q7i73<9Ti_yW@L{a)4rOCPJ>inx;#?4;ucD-27{z
z6L5Fn+D#ad=$m|^vLIgd+q3SG4M}=;x#`%y+TANk$`_t4;6v8GdUHatn_TVdIGpwH
zOW@_{|0i+M;e48~YFKQ_H33rdK|N71=YE3@C!M5t2&8RNL4`v*TvGXJNC-Qdy+5v>
zfF*+Xz3SEOJ7-VSz{fF(@cm$}b-#;@_rt`Zn+%k+fk)i0{_iwzvX?!cQtWqnFl6E2
zJm~~AZz;|H0_ESOt2FEk=5+jd4(QAaNJ~-d>tHGBCFHDq*+i{9R%!QwGIqNFsek%d
zP{TAI(=fqD%H?w8bAMPC0IR>J&wXm(?iOz+YW+<tQps;+X1CeKiR<Tv2xZU@Pl48a
z3J&NQmJ1&pv}Kj>4#s*lGk!+KyL!;hk<r#QnzCP;ozZkTXWb(>+!_FDb=*X-9a)^b
z23(y<8L!LHOr>!*A`n(yyyoA$P^|d31@n2wMcAr6>$s?iV_&rHeyh+?&2lQ~5Wulc
zQR!RRPq=E-?~e2n=~UlF`0c+&)pavd@37E1Hy0gM$=dU841qO6JqV}s920oW0NSlq
zDW2+oy<HX+H4^Lw4FrudY*mBKl%qtCS8oYaj&R4|djL7B31-~R5=_32rMH~6I&xl$
z_)kRIaWN4ZiUYS9F+01P-Y818>!8G=jj+{+wV;K^p^%@sc>?!1T><cv;Wq)Pf?Y@&
z73qQZ!YW(FZ<n6)jV=W*CpQ33MQUHy7td7HwCAFvvO1BD-3q1_qd}>)o44#n!A&ul
zek3usCy_O;L9)l^4!Obxsz7{hS;N5zwa26X(k{{JtwC~zzfA_YWD;i4A|ur80pL^5
z6Tv<7(G>%yAI4*Y_A7#FOTj7~u(`{fZtoN)?}y_1$bjHB(-!ECV9WW->D5h>m>;BK
zJ=u-#S<qyd*Ic>xq}A9ahFokRobvTlsnw5|7=W1GKGqsOnmzFr8DS#DTJ*MLkH<id
zWK5{*5jHLq@*w3;dhvYOe%*`n4}-R2Pd(?6jDTG;uo(I((Dl}DZ@AjT)^g>q;P7Os
zaqqn@1&{xy={5D+s7hJX*Pn_1lWr2gwH|+UDNt%NXP(c_O?ZwLT6;b7TS4D{ZnHZo
z>4y<Kg|bB-1M@*F=3V8o7N5G@3^l6OIA7<g_(17n&SzC5hdb2q02NA)4=<-+wDNAJ
z175}{If#=7tYN{`<>5aKwqJb<ESf_3^@(YJZp_SZu!TEF3}!ro*>&Hi+aw{_4)Ju_
zq<tL1aHk@x&w;?AOaC$+hhkKJ5iS<otqj|Tq5HF5hHpVmd@d>4$w7dwCxs5r8&_}P
z{+{^Sa#>|4=KEGtY@=4M_R*k;BMSnRmVMy?*c1jcNLdChbD6|s@JkJ}IAv!NRV-M;
z&kZ@+76{i1`5dVY-sr`4oNh5Vr~6L{Q|o$a=HlkIb=VEz`dKZ6At(sx_>T}2OcHEq
z0GXX(%+L%xFs`%^T0!q7{%vX2MTQ$CgB#}6%;Ls}7bWvPLYf=Ad;4UVE(Y<`Wf96F
z7>WTKE+SnkgH4WRxm66Cccb@3a%9kO>vs@u)p)x<G<ttK^aMc$XkfhM4>)T#0vnIx
z?3r)N`<y;utmR_HAB!qVhm74jL;ZZ8i4&FBhvuE}cKH29LK^io|4jO=Mgjb;9M628
z-!B3okrds|>^YHja?+1WFh{gpkZ8mSH#4W9Cq7&cA*bV1F@f<a?aNh9NVe2#u31Hk
zrx;w%U0TbYp9bw(`ZG#c-^`QdeJ`@dy@vfxHKh*%j4M)elZ^bjVphd9+a<?eBl?NJ
z5U#X+%+*EadJeD*Qeb(KF<PqY_I<IngiYxUmGWNN2DtajSN!6f>Z+nxLP7AQ^nKb)
zDR{T9%->|Zl<URQd_Prxfb{x!P<dE%5oihrvMUppRKFy<94sHO&xFU+X>)P{sZ81$
ziZpI>##c9%iBS4I<|wEKI>F9$v|jS?T?hp&MsJv(O&}Xz=c{C8w29@i63L_O`})3k
zGD);feZ@qL=Fcx`!mstHUh{sMn0Xv!0LkN3x@w47x==%J1|wzzogBv{c#^LY@b0!l
zD76D%?|vasx6iFS@T9Dj2_};zAkkJo>{dXRXn9C5-#$sgJ7=Hwg_kwQl?w75qn1s<
zwkxPTqO$DnlFb@$qV!pn0N$)CG{Rbzk(DFEmzQlH`E|vr?Z5DCGd0-j^Ei!M4DUe5
zAcw9IK^Jd_{HHUx$}oSD=Af~@nxWFXpq4}<d*@K$aV&(^*49)JPZBMybX5)WZraGr
zLrK?rq&>oqTRnd|EvywFg&Mys1(VtJP~bE>ECicuJQ3|}HbO0UPCWEJUu%*rEbPKE
zig3i2hrGs0-pQhZ0wm+%Xjx}xT5L+?O(EWoW4-gGbGQ*QHE%t>t4nRslmPgkpg{rP
zBNc4S@ocnkTuMqv7+x_9)imDh>g>~9I@251Qd0{H!=r~)H9jTffOTVSQ8%)&u`$P+
z`LOJ)dxSr51QP(nqT~Jv;`$ns>(6Ja&4l+@oe$D3<m;|WWP*_vJi)NB+Xkmilc7>)
z4Av64WUP7(nA**DL+)?-M(%-Fq>H=F-B9ji4*f7c(L4T1KAH{MEOu4Z2alO`Z|27l
zRmS33jfVyu6rViIh0;t5k#NcmCw}F|oY>)+@|E6KdnnnyXHu%Rr;I)e+!q*1O%SOU
z9yP3oi*!hph?g9JB7@zsf<NAy)mEBUy&VTgHr?Kc0`%)zcN?<!Ph21F=-zHbylgz;
zZ-`xL<>t^Tg<KD0hcw<ER@QGaHEcLJ(fUGHa2i%kRMy!chU3-$@eG?9TMfocJ*+nS
zYYdi$R&~GYG7_MOd0%n8Bp_+lT!mD2_oOiU!OeXQRa>R06j*d3l1<0imKrzQzQ=5a
z5HlhO?&SIvOuh^jP07@1PF=poz{MM387$Mz5jUTE*KxDEkwsjdq8DOG=nFGAY~F74
z-ds=@+wV{@hKxNJgYfkG<FL9fueq)#V*VNpd7>R8<#!%4D%*Iz57B?dukg5ZHhA<;
ztvR8O%=Q*^3NL?eXaA)ino?`O{(x(zd{=)6G*pOrJ!82X`tO(u=?>k^cuTu7eCD!y
zdf_yK{up5@m1(FaE`F%!|KkdfYH4gbTti-hViqQ7?B07<OW$5sitZ;&LD1;4@72yc
zcgh9owsDx6GJGHO6g6+D6BRXs(={&pq2^tva3!g=1iKn*zae93H5F*-(OqGZ9FUJu
zycu2)f+*eJ()<t#hGx-l+G;2^H+w6hC%*dhG7x>Z8G;z12SKjzILR}C9{oxM9>}Wl
z*x>?uMH;eKqSEiXdq-_!tk(OV5jk=j-8htO{XYJDxD-eZ!qcXdS;%vz`Ys?pzUg3e
zl340-b}j4WYiDcQTWc)K<-7LjY@@z^Tk(Iu1t|=4>^**k>1WC@IiPn~aKAzJ-K(wG
z|8eOoh-zeppql@qjP&vNaDIlIe(MIsM70Y!w#`V$!8@$4Agnpscgn`aS5P18mXH3L
zz3qf2#K;YdMdTps4Lf%gc)=^p3)pcC(tJ2ydLJ<Wn+u5av%^o!NkPIwbp6jUp<++)
zroHU==z!2U24Ex5K-{QVwcmVaU*A@I@-*xz$p=KyTSt08?=+79lXv{5+4XjdC|~wK
zAKXR%eg9>lPo9U|zW)zl3<4bAn<+!p)3#P1x<5=ERSSj1@%bt*MeSAL7-2UxI_ye7
z@b2md>!Rv6L)4AyISgE8%)Ghn7~Oh=rJc+TMCYQPTY0?d-tw2;4j9VT=gcX3ZZB9Y
zTs{((Dl=WQSdY)09NSM(Av24((mzb$tGaF2#qPj^Eia4Cg^ruRdxVNq{-(pjL)c*P
z6u+krZscW`we2pGAAzTf&T%PtzYXE^TMX$IJAGS*e|;hu?&mlkb|nO%z-4yUka!A;
zH@HTu#Gj16dv*lp>E&)3pW@`vk|`b2ib0!#7}*pd@cE|jn~;9%mWQ~?qsW0aAd<sN
zV}!$;_5lJMOsO9ck*w5Xe0qL(FHMuu5lguVJvyPF*77$0sNea<D{^%v7D&t01IHZU
ze3g{(bH{)1-S+k@alXTLyrak6Lciq_IO%~yR?e{G@K6K#-|$$<A4$;d!zo3t>QDV-
zqW_Nz@E(n6UNwGN_#2Y=`&tdw@^a0^x)ZIXCZp;jtzV?!Sde!F@5Q}Ru>X82c-Y`h
zFj={bk)uzW=;U^%hsV9Br%Xw626=*7_a{Z2K@VN_R!lI1+P;}g=806fBfP%Xluw^U
zTM1Q`--VqGdz{bvvK~?Sjx$#67ADF5^X)+D>{a|*jjEw^G44Z%)4QY)phb7J)~7}`
zQAN{SAr8?Lkl5&}AO)|L($Xb5^Oj|j8pj7nt|F*y&su8wbhaN3;wDjD?M?1pJzQ^{
z<D=?|Y|IX8bYxBJu8!d?#eCxV0-@W}e>kXp`WnY7{2?ID;;<}LiTPucu<^;-R4cq`
z(g_bY%tD0X@i71KNh{O&yc)2)K+MMz7V>s)FCoc#yp*2q0&KEj0=(6w@9p90xbEM>
z-9=r(jKRAHu=sW5T$Pgg-N;+P>7*?VQ$RQuA##Nc&!ltVCb;C-vxm(W&bgv&`&amE
z-_J>JtiJx~B;%xbhe~NfqV9mem>B7GU3K;TTMp65FuY{WDC*u^5$MqzCWVdKOuC|s
z@2?kHN;aP*61{)8gi~ptN<Zzu=H@|PIZH0s5OSX7<uo_f!P&ZKV$tmO%Z{9-O<<f-
z2LIOS>G*DpSpU@?m?t8GuljJ3uKGO@(FE*{P1yXv$0;8Bje|DpO{2%Y4fj4Y_W}VZ
z*b;@`oafk<RDb<qZ_}TgRMK&JvdJ*s+O~X>Tq`(*TCk(D@8nG@d~>2c6x;vAoGe8<
zBg7t7t2011qvk%j+~y$*VKe4^YFuV7ADJ}c)+dAhHZSfBN|6EXaJGV;$WB<36Vfq4
z=i?qvBwBA@<K!us%%c~&mZK6p37%DC7UY@^?2N3=FlU4g2dAjS3Mk>T#pC-Qcdp(z
z)1zi@b>sT7p=y{>iUf^I|7Lq&^qJG(>G3*4>kAZ_dlFF1S8p|o7W+>=k|^;%vdrd+
zXqm->VnRkTepY@zDf^@)ulez>yhg8i$eTiaZdl*5PMJ$m(>)0JO)#oNv@l<w!J-{-
zQ<E#bQnZqPieY+4<7LZ>MK}B|lq6WifzpLH8C8PXaTh+~ufi^QU~cK+Hwt0w-(?fF
za27y+V$ZoH57dXEsw>WgWpA`2-o(dSsJO!&W3;b3s#!hVjccDY2v5)iJ8GYSNu&i~
zQ&pjC`uC9un5`4DzBZ_1of3~5`V&s;M1e`}DJ}RWA-NYFL6Y4&;0k_j=EtF$uMxT4
zAJH)RuFUC2IkLwyEz;i1a?JE*q6xDxbw5dM!>6qGq8IeflOAaKda|yIZb*%UxjqaZ
z$oQl2-X7ra8Tgm~U141+>?~ZWC$&bMWQqo2XUeQ4wqHjafvzbj>J~B1xa0S%#gLMM
zPb$cXGEUz`XN+tiSMQLMNp4KVn8dW-?3uNH7B4I^pQVGFKcIBkwa6rYe12T%G+8LI
z9RR67Hg<P+145QcBSLp}^Q9Vu6V#?aX;DtTQ$T2>bAi1WKg}N|%_HtM1}hc(U^Cj*
z_HbMzc=4m)5+@l%`h?RoE$A2#Cdzkzk|^1w15v9el-}vSsgLCFU0sS~EBAL*=;oXV
zO(0GoKMhq?hp<_^oj)q_>deOg(e!zJ=c6PtIfZ-*+a$V{uc{n=5Qz?=x0UZ55RtFi
zIpZ^L^&;Fe*7qOJ>e2Rj^sGLZ4Xb%|jFs7(|I=5s_j`^!>CKK|<6sSjO;`(aF#nuh
zI#x<6K>vGoHz~1r6(bi}{C${!C4EgX$G&;I=2U5q_(^WpZpg?3TSFA{!?yd&Amz_-
z9Y{FZ_5K0!Iq0fB!m4#A_btEdr+KCR_l+KwoJ;EVl4OlbLVe>Si_InV$?FMpl%b%y
zOR0CwkV6ejnFOT=Yj+b|O8kj#yBeeg;*X>fn;YUL_zPO66)W+E_~V|QWodk$(|LvK
z&ncW#h&M<ntKHH@PAb#fUWDwvCf?s(zT7?;EZ}BH&dwVdT-O1J$Oz?iKvc6g<ySY;
zU&;6^;gxJaaM%SJoE?4whJQ9#y__*tW0s2=S*vY#{@}RP>_;I7K5F}p>j=;{>9Q_a
z`Dr=X58+%G+BWZ7;5K(RP9A7djF;|!=~g`sr@|(P=TJ$7u(+p}5{9d+^i@WgY`4-i
z_|(>?6<4jkbp8YlpU!<9EkCG#0ZHZ)TwQ;^ooJ+eT#dISw`pglaSBl1lgw*u-;%5o
zsx4<XmhMnbDnUCQaax}QR8z>=Ig*#Vn=D5wP6-mMp84a1{UA-5P8ct~J6%Kg?Uj{n
z-o3_P{N9dgSTW@EJ0w0y%jLqC^4ow@aa`<{DuvgUBM%AI+smF$dV0F1$ND6ntB7c)
z$61{D)y>Ubmiy-4rmA4=H#gMgbuWIHdBS#2FW?cl{LQZInhyqW4i%3>Wqo`q=iF>1
z_<zgcfp*s)Hv8uK6G-h_f>1B~0_PicVdhTG*O2j4F<W|X@P*Oj3Z<Mp+0=fD?&J>*
zJ&>%zrgZ*{185y5cfr#0aD53E>5nksdVi-oU?l79krWO`?20G=6=$~{e|&UgV$1)R
zb1LBS+s%!W^xz+IVj-Te_KTL7op_qA*9!&z0LfOvZ8j0eR(B;>*A&{JK$I;K?%Ms@
z2hP$K@Ows9%;AdwfX~eitIkCr|6V(8^5{Mc_Q$NNh>K?{yl`0<Ah7)OmA2F4i;B9(
z9-d7`;CIyg-03ClJkz1TnHCA@FiX;YDVkP7<7@slDnvtBSmt8N_!(L9Gi$2|6(PO~
zIiK4w*Kt{tnIvAf8FX*<`czYI{rhM%L}?<lTXo)7LX$?1#6BIXY3FCiu?Afn|8-(I
zY39@}b8$fZf?t<dT_jiM(Dtd}8#s&#Z2)OdPU|t>fRM>lRtKCT$2CV+T}nBp@onxq
zt^Ee;Pxc=BG(cGRK3wnvnbJ?CbY0I3tc2yj-U8YD4}M=LkCzfM(=lh@<ziF}^k<ZZ
zcio!qtIq(%#Er!bUnXtNpvVjf;wwc%e;ibLxqc99!(z9L!<vUn$PMmyD}SRQ1DlyV
z@Ex6i8!Nu$>5K>J&Js7gtt)$*)i|W-vcdZr`$FkpXo>OPtstDge1EKh9vyI6u@7~!
zK;)i(Uaw0EJ55r-hv@~-x<cZ}ZU%#vAIKuz9XMQ)1WoL{Fp`EMj%F}M*X{^RnE=|u
z#ISI`jaZ}}2Nh=U^*~d%E@(Qc<)6KT_~CLNyM6Zc?mgd~{;oYTa|tyh&rosTxt_Zi
zp8h`m2UJym;jEgY_DTPN3y~cdJXS%TDqK(ijv*U?h3fzA1<t9db38Pon})`akJ^!?
zbZQyvOJ5L(28|h;<1K?%BCA+mV3Z#ybCxK~Bw81K5d1mif!b}y_VJ!5&<~XBfqM7X
z;ce+7Ib`bG_(nsvd~WB|+8cz0hW591Moi0#wD_CHcJ7U8Ah|gwMdd9n%q}2}@$hg$
zR!|nb_(M`icq*5ug(Z)wO95HJOrXs9%>Ial!O-7JFZtPS8n$PGh<}wB!>aF*=B;?!
zziA2h72tIC^Lluq@tlI97=6%TtJt5GWiIV$Kp?)FEO6PxY&_$o5}vywpyNom5r>rE
z5=DFqB0D^-nM-GFo!jWM7RX4yF6w{KM!?r~6O#4%RIN<MITjN+`Sd-rq2ku-(PDaG
z#q8xX59!riobQE(OG)Ga^6Th|+E-U)wowgiiTzv|)f{oqp^oQ~t@`ja-de9uf0}5k
zE@vGiB|lLkLMka?wHuC5`NBLQ+WA^`RV&B|eEzdSWxwp#yGY^{3{oLBvyP_)u?>h9
zrI;QG4+Tj?i$cNe`f#|7yq7Fe?2mcq&Ng)Z1Nu1W(K_>obZ)T?n&i`gAiSN5obj^8
zGZ8J52TalFY9I2yrOVTnn=33FIvrJ#)A~zG#439~omWpYzWk=37EAou9Dyy|WIazT
zkgPkIC>0S}?XEpvgY9|{ZA;jFj76UfIl~d2p+-xcFw1_j0?fsGZ=Y|aJr&{^U!TTO
z?+@aK{CDdwO~RFtm+ofH_a7CWSD7TerWw{^Am}fce&^=}i$ZIuw^=llb<Mkdf^P1L
zP7aLmb%_s{3DK-e!ONK5-@^a-wuFi@4Sq~oQvbCXDE~eb4Qy)B?O+xYW_(fLA;J^=
zX4d6#Xo8)|O50tL+drZsI($*Fu)26XU7`sb7Z_E4S$qg#D#v}x*#F=}puZowyw>F=
z&D?e*8LoN3^VzV^1PBB^o}7YyHG0v(Y1z`^0PgIqvyzj|F8r>rA;8zs(MgH?8BV(i
zDOe{;(&dsUx{!=|Kah@BZ7eLG46u>@JYwPUuPR^jA^{|3(tnx!-I4?c%dh>|tw=F@
z2&eq#)h$Q)S0yECZk7btw}wYxv_k62!(!?cKZ%HlTwP!1mX-PMGDNGXsZEV0Sk5=f
zz#Xl#q;HSXmX?+tjHoGuzUKJ-nhf2}Pvdb!xAuDt>$-jojf!d(<O{)}EGTP>$2imp
zq(bX}4q+4&YJWRFa?yHzAPudqcHtqFeSAShh)u~EkE0FwDknGulbon)YKD%Q>^)xR
z!_1qM%`zJ(R0LmUhLS5upNyW0fA8n^-&u0oK37*(Zuf|5yIw?L*w@Nbtah3+SROO1
zt?&n3h|3@CLO><Xy}_?OeWev&2ZF7QD(vvc!-()2*MnY~I#6y{$r+aelsBm^hgh^E
z4HPbf<Z3gu3XA-{A~5ZT?BOWfJ+?YlwkC;vn?hdptlzo`6V7-ou4)ZV8t&d6+SArO
z!qtjoV+A~iX+sk}3QEiu&6pTyU&!#U4Y)~K4RWPp3U%;`x$(XPVLO>ct{iCf0sEwz
zCy$$d<2-a<B-@XaI`ch)j%D_@;8Tx3hVD;b4>&Q?)n%@JH??JO8`BLOh$?)XMn}jC
z&b_{&wVop#Q0a_`eZ2l&P{{xb$o_xpWRmc{ThW9}ApWJXMcn8;$2pddfqs4bn-&Pp
zQuI8rPrYYL#hkS0Kzw(?9iOhFV6xDmOF2$qz84z-$GGx_mHp?uRGMYhkKv-j@BNCs
zd`h&WUU5V1_B+DA-z*sgTKbq15lbdFRZNG>`cSh~EFehC+)bLzmgUZsFqjvXH}`Is
zVy3@P_MuGu6*A|C7Y*6LBapR)!l#pt*+gqgpLiM3L$bD791|&C-sRK??9gx8@-LQE
z*d|iE&QyssY<@(@XY+e-UGU^tA~4KgJzk@MJ%8c>!8PX9(o*M_lwUy<YI}rxp^Me!
zPP9ou7(_rNi^f?A(I5a}K=nRFer7&5-aaJriSh93_V-y9F8{g)W-m-EhPRjxJvW$b
z<wy5yneEPW+$aGQI5Aby0qUjmXM!_|CN(7W#OxV6<4dG;1P=HgVT&y9dXe+~kJ{PO
zBT-Pu7+M65(X4L&@>L%N$yg&A0vVJYOE*ed)7i$A-Vx7xIdtF24L_l~JF=v}p-7Y`
zoma&szqIL<t~&?Xh}?}vDZ@tAcU6w+bd|w#Cxn>2(F9r$@e!RqE#MZJ$LFs*oHJI`
zNem2$2~Hq&Djh4!Jyr~7HXqdcWXk5Sn|AZc-yoZ0ZO3)h%l|=be~-xe)oY^!oS6Be
zQHT#3cRD>)Hpy^4=#(|t#J9jp`gfTT=JlFlTa@t^`&g!z2J+;njpD9n=4t4=GGZYj
zx{&NrR4K!2h0iV16fx$zk{$F<eXXIxipHPK`j${R)Ob4#scSjaj%5$8hH%VP{0j^-
zz=H$W<IqU1Eb$`vh#u=WdO5u~Ze)K`G%OsrB=7xDX{Rm!u3o4h|9oPPTC_5!oFx5e
zJ-z80aNlwetW&OuZ7{n<0jy^m|3fwDrnoNo@T__mwNpIBOIat}syw{c5<g$(VC%!}
z8pVe6ybQ{nG<$TDWLD6iq%N;nbTcmR?U?ntkw5*_&XSRma=D+T&EVAAqA9Fx`{-fm
zanTgE27%a<p9zS+f0~uXUD3S_nW@(Jd(@Pe$=vlX_Tpbx`%+k@^fdO;@4b`Cl5_Rl
z|Ao=n`Vi@3U<a=*Q_pAu7*|I^QsTcLM+|d8%FQ(_`JNo46gA{n;@WyXJGc5G;x<8p
zbc%1<ikmuV79THDchuw^8hv4`6jY|BO|K`E6|KKmVYab`3<O{Ee<Z-Kv45lJdV^}i
z<>ed0p<!biUi;}C^N5Y_JnzY=SC*QrdOR=7mX=k0q8B2_pZO|tAa~ltYkf|btYi3k
zX)WkCg#4dbDr?7ueL)e0IqcL32$Wz$YYtd}nISd${w)12@(3EXX(}!(UJ2XZ@bP<R
zXt*6o&YkV)On7xUoU<FoKq;}U(lZEn)csH*x4tW6cY)Fy{4Z*N{5bWNqzWVDldS>~
zZU*gF#~P1n#oi<r6*?^GM4pc`bNY}F1>jYWTP;}?My=H8*s?pn<GGis<dHM>Bj`Dj
zcOo=L+QlF;Qe5ki>D-&S5nma+zTpQHg@j>USZm;InYfZ@`Q$4&OL4t%rAK{SJe=V$
ziPe2grF!WS&X_6@64$hM{4*X};<%OyWY{Esi=>x)(Po-GJR^I^0l>?~ZIHb?UK^ZQ
zEtNrK(!wWG*U$9V(^hgg6L^p0udQB_ob#A;^@saibbWyyRx~-rmmdc|;Y1*PYTjBD
z4pHs58fvTA@C0fZqb5|=a~XFTPn@GmuQAC(=vKEls!5GmH@n?N^QTg)?gRX+*uM*`
zQ^M^YZen6vhj)lFY=gdu<tBH}-48OkxsryfqfvT@iRCuoa5wD#f}K!c!@=kXVC{|p
zYCX`FfW8i`w<^1^>Oqrt54K6=_hJRzR<#@O^Nd;p^w&cF&Tf&C$U+)kj)Zr`Av7ql
z&$oDaubJmIYYovF`d%5L-c9PNnmu`|7e=tsgNK(_(7xjD|CYnhdoe1cMy;S_gQ6n?
zV*kGqg(oZHpUvut1FqL1nU{il4Zh?bYXyomY9aE}pL%f9K6^WE3s6e47Q;TjMNiEI
z&%@sk+YO?@<N*9qvb4filiSXOh{imBt~|fx6R)xA@(Jj?#=g#DZYMB~i1YU;#7xIm
z@aTSzj-B{HkTEg6LrBX7g=E|{Q!`;Ql{DBPmdEPml-R-drQRw@i|P|!Y&yd6goaqJ
z-u&J|?em|>-*orZkVFd-c_=f7atm{IO(MfUh-)~rdxf>yz81ffYv|9$OAk5J+Eh*9
zKZvD;SrPBGDJ@nR(caH-Psf|_3I*!nLZyO`r@K`+9o3o;h}u2>z?C;QMeHL0Mbk3p
zGooHrmj)O<foVp%bxj`pw7I22n(vA~($j%u-hZk5@Ce#uxSDRv|L0ke`g&|i_Lb#O
zQyJL{6_iQmHY-m42aXcw`2pL^Acx9`_B9Oso>pi!r<aTR(d{ca3)(*&#Eon#3B-=d
z&4;3-h&y}XR3C=%!a*kl%p>yoT)Uw2R)Xc`{MH{0M2a3wGE}6~EUFM8S1K2$HlhQ9
zi>KH#$Ce{W_T^+A>T^lkHyE251+Fi^C+rem5r#qBos&x`#(YVx7VZW2BZG&(7%2`W
zMX`FBin{9vWy%snCzGwrZ_h-M5RLvxFa-}Gwd344Y?BQ<VD3#tgoOR%N}Ck9KGusY
z!X~WCwElt}ztmdqrdzx2`oDr5x3l*qU}LrY6{oQ|#?~aIB)ikY@cQ(~MXBP=hpn|$
z@DnD<g!C=Dqs3~H8~Mw_ef`?B_FZx_>P5>d#lb{Z=zo>(ZqYq#SG}I^&Z)P2gNE4G
zdyb>X#AJW@X7m~3K!55V7oMie;UtmPgCne22Ygvi;XB7fQP>M{Jza9Rn)c1GT^3A!
zUxShl->4N;T+ASpbt^4UzpndEL?{gL_Qt98bt)s3)AzGn*k~jLZ!|7#_Q2fSIEi63
zw-Z<rGhuYVSVhD@y=dVVeTJUi1`;aj-1PJpWjg}F)?a6UniS|OYFs9d|JK%fE32}s
zi+YKNoxPtY4Tbj!72dy3-F-Cd)vzzIs=&w7(YvHkEHwPXq9gX1KNjeb+@@uMx0v&v
z0}C{(LiE3*A}R-p<vCM%Ca|vxWmWMG|0u8?!_8<NY25<I)W?~IK!<k^UuA#hm_`*s
z;=9J!-j4BzSe~YZtLcY%anm$WE9qR78r}BcHc0FtA_x}q3Q{My27WWjLvo?}aP;7`
zsVfTOf7x%s-Vtu9nkf<M8E@fl5KE%_Sp?oB*@uYzd6HvV<9T<#Pwmdg^~+MOU}c(+
zseXVF6$}=g`EdZNWffh)*hUPSVHyT15<5f2^QR@FjT7y{=-*>}{BlZc1DeL3TOBr?
z%ADPBxjgv9XK2yRh0{U<F+$TkNKpaZ6rGEs9gPdE(Qj9Od6CN}&Eh<POBU+@!ZUQ{
zms7nO_PwU%+JCkcBUIkw!g+2D_{kyRu1~1{ZjAEIpzss)h*9{&1&}K$yo;wSiZH^2
z+HHKy4}Rq!Gj#MD&xhA$kH=g;ypJCzdL>^xtw&j=NSPV`w=&hFFwutQHW6(bqY1L$
zqe6BGd-e@@NH{a57D}85Cd}~Y6Ka249Z>iicrJTu$a7zd@_rg{d0k`7%uTKJA)9+@
z_xG1bv1DAreZQ~r-AJI2p$sh=o61U)=$G~_{K$shz?C&h?R_Ppg~*Rj>_?zlN;VKq
z2ZD&e+f1#Er!gSu7q1k3;0F>?Dc5Ye2#vl>fjcD`u%9Pcl9s`Ag(h=78}UGRbRzdb
z5%oZ1RNm27LAeyHzcl&5MMB4njugHW6F?VMQoWUks<t$>B^-Kt`%$J*o*7=9_wVGw
zomcqR{EQDvoL;0>Mn4+5Jd!L@xBc>rYU=bKNM*Ll4E><JdLMpeK4VIo%HPUiC=O0D
z+>1}vkhHSHe^;9eH$g$U#GG93!qYBkQW5D-5`FkRd}Z0KC6*!OVz0D2s=uCB;p^WV
z2Irx{&&3PDRm(k1{nD)3DPvQKM$IwRR6WvoJ1vf82(&1H`A)n0zpuX7XIz>td=Lu2
zE@H8!)0?&-HxBjlma22I);;Eglc`S|dp66{s*Zaf7itzgJim|>d~u&UMLNjeej&LY
zjkk)=E5vN&3USP9Q5Pm=5z8Xz06cDULd8ffx_~Vve$D!sBjnX@?1tY~ntakM{`B8A
zJSMyOolo3ssyOkq2XrgwAy)02@NOA>7fcD>N{5$bbtf4etCLa?wjaZEyR0opPWx<G
zrj+ITin6u8KUv2CFuaf1MC7zR!ORe{MW~I=;}kq!N&W0ea?HTSq+Fb3E=Qc6mImJw
z+Z)DXMd}F_RNx8tgZROwul?Z+cd(-s<Ex-!B1cz4fuYw^5dVJw-}JQV=lWT$v`8r#
z@ZZ0jIItAT!GZH(?Uf4V16*8F@*8GADzBg*HJqI6>ks=XB7V0I8O@sWT`FSNWQZu3
zJJIcSP34>PQq~bjsIiGA8GUx(iq^YR{@*w$(3E@9#duiAIn42n%9Z?3X(U)rEW&es
zL1hjY;LMmLvyEC@N`n=&9{2mrf?j8wDk4uDiuAO;UA}=KL582xrcVo{J<y8@nQ~M1
zax@5$NUK6!3hdZn<2BZ)x#H{C{8-mlS}}#A*zV_>=KuXjT<ScJ8?T-W7Te*ag{(-j
zkIzVqo-Ussd~lVnLK0*sgS|z|M*tY&_fNYfp>_r@3)}T6E@p;QJM*%AL^BVeK(bbU
z+Ma^&F5|G_t?I)Lo*DjlSk#NdvG0v_{W0E04$J<fxg3mVwk>~Oj1v1&>io}96X`s4
zWwRsI<3k2~jL=&KLz_5XxT5PbXhR7J<#7%P3SFH}O3Bzi`Mqh+K<rc*)k~9b?8=%%
z^Gh1Ho2)xBKFZA+4`vm+A)5vfR$I%8o{}X)o0)H}PTXeBFZWbv%o&%q7A$om>tHcB
z<|zIE4&Ogl;`K+o5OgQ^aM?)f{L(VGoGmffB^DJUHOq^wfP~)9GL0!YN}@QMs;wb`
zMa<)*bx<|Q(yz@vMBAIrXup-bekwc}wAUhm<?H^HGugZ@-Nb5Z$4Q$$%Y?jaV~VTJ
zxChgvyDSzhab>K$_So3;PJa&xQQ@Qz6F)3~)gUj?Y&M&<`ydLGzXkLnbN_#LCDFOS
zp-i>(hZH7e@3hI^M+;;)t2n}sI=zw0&qlYc(KG*eYst`l)~;m{qVDW7aSBW&;0c-=
zk%%ETb7oZLwM54-SL95#-1*1(`}^~>ozS~=xreG@pyEyU<LJ6_%W9aadiCAV7@e%x
z03|z9-^M)Q3SN^Hz;5F!My|f1e!%R$memi}I1jm9QsYxN*mIhOxDRJfdql?e6k~-7
zMaF#M(5??)j^>I}675JEUt_@TTlPqxv|M7bM*VGoBn_=iaaGM9MEznXsIl?&-ArtA
zabQ2o8F$WWtANJ}%l+^5-lf1t&I82@``0c=igDtP(MaaQz6A3|`Piz>wyNCZk*=BA
zg}ptC4L=A1#K&gvhZ%R`5B_*{o#C)d`Oh$R^F{Qia!9k6HT^q&&Fu0?61@IhW_+0h
zVsX=_jiEBz9ku<HNS{XPD7Fxc7DKRsSyUKZm%52CB?lH^WYo5QEmy@_e6KO(`Ps+D
zvE}Rlnf#sCmm(+Vh(&w)iW%aQDV7Q0k|Se#{JQ{ePF^`6d13vRulAn>eWo{e{0-*U
zyaMo-_Rwf@-s41Xsm9WqX|u1NO4bc;SK+wIecU&ZUR!q@|JCwgYtkOaLC=XN?6qIo
zTA7qMDyNwtN{QVHU=kw-S<~ez1mFo3U|)RojEY{;a9gZ#8D`FyI58^Lo03>#0#pAN
z$Ch7)+0i4=1?<OM5D*Y7tgMVCj;{G!ot)}9(-d_apLp*s@Rh3dW<Jr;ug){Eu=JXI
zc7#S^gpxKRNB=)AK;+rzcr`@!XFK14z6+C@TIcoEmBIW77tDmd#<-YHRNYOPo{Oti
z<mFBwF)4}DvClJA@ti+Acu0o5#elt@BXt-&qdjdgk4YgC3G*l~D=UNb87h9ga1%~y
z_heLe%07>N55}RChM^&_2YTU{OA7`A9;)O_`aFmXq|WT3;b52_O@DH`+@OA@;^61c
zC_9m-S5ECqP+=VcfnulwY$X+Bq@+GS^hF%6y2DvoGDVVD%E`IzS-kAk78HcGv~-C)
z4HzZ+y%PWWMXbAm!}V=0Isw*tA21vRUR^Nk?H_U(^icIl^lLt>a`5oUOWmjm3<^A2
zGfA#HTMdwW*tb)WUn7c$d?(JoF0p>po6W2nbn7^hM*B{c$*3F)0D=qQH%tlC{Py6J
z!7)|MtAXwDkW=qG?AIj%c{eI5yIpu4U*TME2ZtICby)T50}e1O7UOX=?w_+9@0uSZ
zNZQ|y6cAo7dbn4a%KkRzq|F=Rq8W=P_+~$!pphbH_Jf3hIXd=NR(LM&&V1`3pqR2#
z+3U}!@Ym-RH$oNtV@6~YRAV&<WmB*+EI08PS`YjS{woBV^mH#R%gMw4UKILMp>x7^
zk<TpQPj~~?9T8v7kt2Ux_lx>zlP@=A?r@E#iH%3lY(8Lzk~c6gBD=Wu>=VOJ0Os$}
z>A<ERu`(gZLeAyWlMIYwW|5|)*6)sm|Fo1oIPHX>R?O_vd|;<Cgx)5S=?#u<W}|-5
zu*NNt#?Deuy3mX0+_IpN`j#%Qmi<iXsQxBijjQp^>CwCV9~+~WfFWX0{?bqNtj_VG
zs1(0Xox>Yndb2_BS9cf;UJ#{ZV|OR@Q!Y_?bz3e&MDzDVqW*3E0l%e11c2Mc9?wCJ
zd#l2gGy7zQd>LqA<N^9INQx-rg4&yn;pbj4T@*R7L@=1nvWhLfbMwCr!+*>C!#1LS
zDO&|Yi3(K^DjU-<Qm(a;U_$Tj(Si;e#AGyY`h+3{OWPmJyq>0$^QVzWk5;Mti?X=m
zS<;&O@BBllsu~sJ#+VpeK#O#!HeG}itoc_4X%@N(GXq_w!^_QQEl1$YEa|<ok8iJ=
zI-7k>?%49t`ONLfF#OD2U@^(vCU$+3SUM$px7ohsG8kOq#O6gy>D#Wqk@p9)R^GHR
zI@=HmCl&Z8M4Ui}T<{6u@yX+AGsGMQ;lnP}uaGm`?GnK*Ov$&kBV2P)?zaNSjE7J*
zn_gY@aiJjuB6)DTef`)TjnCy|fJ37_Y{S=of^8&NT6`RYAJx$Sq~u`RRMGs4)Bh3@
zHxI~UlIxVapfnVn(oj5C5r<JM{Wh6L;?k0@!4bhLX#3xs${v9}Brmh$BW$I``TwjP
za^7FRqB5V@<PQWPyXbVk*QaWzoU1J>G*Zf^@UtK1z8ImRloPf!wMw#uZ5u;o*Wr2k
z?UseP8NibISUI5OyeOp;X-E@!#a0WIKmzR%clty}2Lz`J_$)DVo=sszPbYo7x*?L*
zq>CTEjCXc9XuK5jeiKdPVZryLk^BI%?v|~CUoQxzZhnR}fnEK&=#b^^yhK$*Z_!?G
zAiZ0Gxp!gF+m+4wjiu_Uu^<c%fTV&m1~(`tN+y5%khk3S<onN`R|oML(^jsLL}KA1
zBiVH;jkSAO8euV~3OhBQu*o+-2`T_Z=lXq=o6Uy}gH`Y(CTaReizD6>td5*MUXixK
z!g3Y4zw0+KHRm+F;Tej_n1DGoc-*APR^YISJ#V%HpBBs?pPsmHA%dxqGI~C*o_w}?
zmv=--$;nqEyAKIY5XRjhWhy?tY*<!ya}b{*eM%Z7qvvsL>2zC1ENJwRS$qrD2ev%{
zzMd0SJVLGe`uo!OA3l6%#-{|{@n!Het9;b=eD!p4sw0A3UCVW?yMe<sVa5&n8;H6q
zenq7;<K)Xm6}Gm9nd<xYy->0`ju%Nh?CM}{>(m$mG-9b=<4eyR<rH@+R7%^Nc$joQ
zQnb!%29H$EOdpwrfMu&{3-#*UG6Y7FoR7PDWMr_yPGzRZ%6;nRrDj~G%-%}pe_Sa%
z<HSqCQb(ZU(JuQ_OiIX0?m|0;N~3e{cQqgQOX&3n7-BXK7M-WK!;t$gOKY)TOXv_f
zHMUdiN_gD*lZ<{?^OlL-@MD(gq7%_HIM5yb(%|^Cv{s&GpwpifvyJ2=B0BdPy~k!=
zJ>dlv&MYA=eNEIti?-p1=}OmLT;nxX`l-T^@GHE`+8zEoLQzmjw~xZ*%zrtX+5&Tx
zHLK`5GwwJ^c9Q|D@gu+~*N1A~oYd=P1B<f!J%^Xg{uSVOz|Ox>_gLU-F%r0`qek7!
zgm>XrI~t`x)=Y#i&34|QT-$+Uu+9yM|KGf`f$E>6g|a^l`H26c+{E$wO-_$*n9Q?n
z&S~0_#!cb2r334lJECC8S-$-%AXw*FsJ{xrA-Cj*o+_vR!b2Z$j#w64$7966W(2z-
zBB$fi$W|X-J$TX5ui7fEQ+DHAycu8hZ$J7kOWoY(#CqJnV0Jx953xVT{Vp-&NjCpm
zIT0^9b$8EUG<yoGjfHnFpR%?w0OoxFzG=V3{8S~B&x@iA=}kYy|L@wa{-U`_<<iK8
z_67RK={vJ)N}w*B%v@SB%>}66hR>MCO-Z1{D(X%{)3BgxX5hC4U3TBH%&IZELTu~e
zTbNXax~i(G!0vl*z0>%S!M?wboa~vi6hAIbd50M*Pav$TKJZFv((RQq0r>;!!ETJC
z!k@-`olz6GhXy{(!x)ak5#6<q3A$$@-$I+zO_(`Cmc@l4YwO~CO3#07n8m~(!?Tl7
znzOCu{FE2>EdIi-Z1*wARmc~h*^|M7?YNxK?Qrhr+ZdMZ`dT4A8$5u-gP_CLYX6ct
zJKlPhrvIyzHz89Q)}rAEyNgFtEw;^--V{@jKRFdK9;^|tye9u5qvm}OqW0RaDyPd`
zx!-RjX)~0nrem+Mz@*#y%RK=nZ1JMbmN3XDT9&qQ_+*yL?eh?}sc<ww+>cLL#Ggv5
z1Gb3jhS)Yk;IdnMd8nZ~@a#?GEC(s;t<mT0ECSBQ9_^{V3&^#9$6dA5eBWi6!Ai6L
z@Ne6(mD#AKTJHyJSgvBI4xX8Hx9zfD>DW+i*soa6P|#}%pAteJ6v~@B_IO%2v>Ah5
zhFsco!7%TequsZUwm1f#iJuNuIUZrhr&9qMVc`Tnz&*!|t!xbWK_2qqYGPqg*4BkL
z)J`3|uaWZ$0E--A`e49+$EX-Lw~EsxfN(ica22PvRv<q&H~Ikp%zz!Mg>LA62;Uwg
zubFjEWs(iP2GcDa@Y(HXw(O-#$pvGjDc#Gg@*5OJ=aBU#ZG3v=s|;D0o2guDb!12?
z1g|I2dN5aOxT84oJ*oKmWPdG14p{yoCmB}}p;#8)yy98Vq#mVJn7j`-PGah4cy%P8
zXEQSR_rCe%_M10%*8|VcL-tTuct6n3h<FeyOFb*c80w5}S&>Lk@)YFWtvLr!Tq#n<
z9d}KGwa$>h%6Uy!?`1lxB%iSV>&h8RqfENe@!4vTun1fo^A0Gt1=PULp&iA2iKt57
z31Asn22;R@d9V<X-LJpCqGd1C3F|1@mleZa+C3ZZr6D`hA%f5RT{3s6K}h$?eH>0y
zu0bJO8A@c@j)XJ2c6q}!Pg0m&a0$6V;gOSj7mvS#cfkDRr1I*5(0)Kzh8G7k4spig
zIic$U;PE8;o{U=y%r(0C%G6dSk~h4rXt6m8d;P4Oz_IPSlGai!(L75@@!;_U%=BAK
z7~5lRR#SWiT0OcB{iD=*lDSUyxPxNEu%WDa_mxKvdSrz@vV6nm*$((WG<|hcRPXmS
zsECqcfusmXmvoDibT<P^cMlzYq$G##?huA<7?keLp<#%Dp#~Ug;2pp3`mxqs{5|)c
z^PGM5*=Ij)%+czAd+bYpSB9EbPK@-9l-L~!Tzj_65~r-*ZQ{jwyxNWIIRF1Igop6q
znMwQOc554ZN$_mJQN9{cSE+PT-Jfr~>l+*Q!zwIE<k<iHbfudlvGoaIR+P4)pyH{-
zqY9{SADAe|aOx-XGD@P~7r&w1*Z#WjtHV|wEOQFrF~iaeKJP*LmHBnKSe%xsN5e~q
z&3Cv@usJfgC-OR0NwDX}qlLvXE}JT)7Qlw|myxkzN3(`J?|2sC<6SNn1hdiRq@+=i
zb&e)5`tnTK%6!jY8h@WBwdh}7T7Nqj74#d#A`h$#q+LlQ#l5^sZTJVg7V{b^RyP9X
z@`1O=$);jiMEl#4mrp|bgkE+%Ka^)R8{&!-bn(&Pyz3CNw*KV4%7^7ADwdjU&S`$A
z=i;ltJpGa#`1etJS~gj4UqNp?U9+o3<|xXcUr{6t@$o+m-PjGO+PAhCVVPq?f>u9}
zNkYa{k{L>Y+MRCFjkUhOc2Iwjm2E~E1D4KuF6HBTo!FVLoqi#kePa(+f>v?-9(;X1
zXl-fI&sUS%Mw)Y`_!V=&=Dpbsl+9WbMI0x^^m1=@G=J=a$1o>ejFJi=AEyMfBzL&5
z!$SRW$1c?iT%AP{UJn5U1*rJTacm5qTE!VlgK`dT=@|VBwY1oDg@viqVf1!)vv>W`
zgS8d+W;+CahO7TQB=WyS_ElMtt-A3}Z|#0!vQGuD>ylAsj}#;rZ&sKoE^0QzGS70R
zLkg@Njj^-6aJ;6B*2MNbwQR8=Uu|kKb^hhkGJ<9yycH{gxGMK*9dFQsJvu4#4&iNw
zr^S4}Wcz6j^0n^<bH`!PxAEOMtzs(fG=go!O)6%HF4CYL*BKshuIvH3_7$(Y4%p6+
z@c`N*?o?!Mj#X~$3i7s}+)A`9d3S7X75W82?Au}{v|;g>iO`Cv;{VkkrN59cPFv15
z(XixSoj=R%!W}Ru#gf!mNsyE)LkTl>d@>lKvRgW1i^od9+vGJtrzJ1$J~z3;vqN-z
zkt*WwzZx_h%kJv3?D)-y%x#?F8~T29>9qojO#V>#QXK8y7vEOKl(JjQ@ZfV?W~$4d
z;?T^!iP}w;wg=9jduXpb!NIZKy3YK<z3AL{f6&P{6BgTgkM8H^$n7dtxh3e!cXVBx
zB6Z$3bI-l3way8Uu%)!;=i&8*pjis#yLKMKsh;bCo0C;3o)b00o#z6O>g>ued>PV5
zzQOe+X_aM8#rjUQ5<Nsuc!5iAKm24Hk25pqXY|+uXK?=zCka@X%o|(kxYnsLs)mq)
zjQBDcQxLBZH}{I6FIkd98y-s>j=}y@4BI%c&=>GKEZ?9UD9`UpH*P=+QwebWWc}D@
z2tE4BP6zob=|Np$%0s&Av$8FfB@mI*T6G;eGDa1pV5vE2#%9)_Hb#c?b+9V&P+0V<
zse|-LV_QF|;?R6=Q&b9Nzpq45tnM81&%)omO78~rpCAfJUsSGTq1(LtnN5W-2TI7;
z*A?R43c-f0iO>;>+^zdV)?c%puenDJ>CpvJE@=rH?tQv+?5PtOOH#aTB64T&7jcTl
zJo^T#F@3hLB|<sETPS}OwMN*@S6qe6!dx<o?zc*fi~+m%)Aq4%i7j-Bkajzuv;K{3
z(FJPAB{@b8{-J@243{YBXiIHh{I5Tqd=zDG>@WJ8FoM4RZr%J2Uh*VdfsZR825NN`
z-wOQ4t=b+kO>L1y(@Kw@pq}TRH=h%W>OMP!ffU#~_B66g=GoEzX!}eBj8e!88I5W|
z$51>R<}nF=8>FDAzUnQ(jF@lh!ty7c_lAx6Vd$}ml_%0y`KLP5YPR}pN3M7}1(GDF
zU*Gvf^!D6h6x7t!9DA%^o*;#%0|!}}rExvEGioA~9hSekFk@a94|RCh%_nIN)Y>-+
z?V}E`g=~@=Z?X!_aCyC7;|*7nu`uP2J!<UVeuz)T_x7YvqSq6-)32s^Vl#FaU6FUv
z>FI=CzVh;)o)Bf#quFoQFovvgO-=EJw%!3O&yuyO#+SvzuS!2J(t&NPO^5R^E4N3F
zyEFssNN4QD^*%dDx!pPf4V<s(8lraI(ou^i@3uLu@Pq_*G-XAH;r&J>R)3~B(&I`@
zE4a~vq8mBKWk?dbHbxXIW1^m}r`w=~k^#NM&^qo^wm&#O(H+eem+y~KkM}J6BmdB#
zwrltDX?q$Yj;b<NX-u356?JIp@Irk;Zd~W@@{B|pa;Cq}@$w@#Bf3SKoL^&|irroB
zZ0xt6p}%`%GL`5%(PQMltc<-bYj?EPGs!M{22r9&U>F-I(JVmaZTIqDe;Rme*O&~n
z_BO%5%uU;Q$MNA32gWDdR_<`+V<$bo-s-F52@s9C%Er#uu8lajI@wKBL9`x_JG=d-
z6!YS<qgKn9$MOk=+4?sb{*ejE`H5iEM`77itkCwk@V>2yFz85rk;64P`dxfO<xsG5
z@@u&K(ooS2&O{@xd-cYUx;>-TP$$LD3ND(sCO?D8cl8>8ug|K?%d73-?yYl_x^Y#^
zR%>nHZhrz>J=(XgK{`%>{tYgLhgi3Gp89Y_YKhyy-$=WG#?S>(?WzYY>*0mOy5vzI
zJCYZB?<O)j|2z&Se)rk$<bD2~?{EMTot_uS*u)={f8!VaN1hN4#&9<Y$+BXE76x~8
zy&+L?&+}G3CP$KyeQ2p{$qVUo-KUBFM^voHDCGzqb?nk^nr;n@4en%ln$U4_&bOlB
ztl+K9Yu)wz{lTggs22*&z$?%cIUh!-_>lqj42znY8Y8i=<mlLDp$<4V)|ghos=kr{
z$0w%RJ7^l{3^_zP3M%_v&G*mGr`#TS|B9pQ)6g^=?avA5I$9C=4egJj9(M?YME*K?
zHZ`s3eSpwq=CDzH*xcO(HGx3dOalH(Y)5+T#H_jjy%EQdjePGE=Y9lg;ldXs7RV@|
zI;Qw&m%pStOg4sWbj_(FVc-|Fxq0?>2k~m{zSJLXz(ron?!fSHhKS<>ZUUon0j5bk
z4!laH(P@yYKpdLj;hA2^+<g0#YExQ0g2K_B4-iXJvikPqk_W3`Fu0gi{q_kHlfe2G
zbFL1)^~|HE1^Kzc6<itEJP3J$k%$v5Ny!axbYX6xzZ7P=wN|B^S2!gv%|Id&j|Q$^
zV4UOH)oTcT)rdZh-hVgH1{!<XW&O#pU@UFadA#C4|K=E<!GUJ{_qXYLjHO2e_P6B;
zWBa>x+lV2GGCTW^EX$zSxo6gp!vWLP!m<6gMbaFPBpipUBVg^KP!m(V2EOi%`&pX|
zZ^Qvwbeg<|MX)QQ2sBdIn3tA6Bzxy4y8mV;vbcMAib308RnKK$H8mk56&0xT9aCUR
zwI7i;M5Nq{XES1)SiZ~9ty0_O)7?#!YFlRz9xAh2V5IlqXdFP@e}U{Pqi1rK>v=U%
zi1_C&MxSV7e6pzP7BTBm3|Spjy<JlcWy@`!zXZ?Q-d3>dM^U}_bLWzboR(nu0lMdY
zSND!Q{rt(5*8(qwdl9{u#jaHpG4Z`@q^kPtj`|QxKm%`A_j5yCsij;_IzTnd5-(}x
z&;ke1@pNj2{@pTAR}klmy@TE?BI!c^f=BY`ZG%C?(UizY$_S{Jr(yYQj=z!8PFZ_-
z<4PgBmc!&R07=Wx*ZA}2Um?&;$6%7g@}(ON^L|RVY(9{3jRU3_MQ%_?hu4b(RjDf4
zdEvT4lO^%g8~4@T8@5GhcO#Bf%Aocy7+Q4Le&=dg`WltI@F;1?Rqmt3<)MdLc<YDT
ztsUvfETO@cO^K@Ys)t0r<gbqSXSH{G$who_8gdFMb5!@!I*xrxF8<gec>HIuNn-tW
zge0{=ApSAJH@wmtGFj?*B1NKBF=NEr<x%U85iI6NYI{^}H)cx}hKyECxs}#emfJIw
zXJURsnOvm~avPFkHoddf?6FaF*Xcr~Dqcg@uyp2pwHe7_Hj)~?jOzN}*a@?J^f;&)
zK6Kz<PtQQOJ1{9#s>QPEg%IN<Cst61bbw1sOS{gCHMyP^kvd}@rY}OIEpC$?7|{%7
z-%9s%>0sRLc!hYXEd>^Rc6Al7>^TncLPwJ}!<TR<g<WHD@2^XhZ+m*oH8f%j97a?5
zBkAOp)>e({E*UvGHoqJMqVC;DX8E-FO=)plRKkd5q@~XWAlc@Nq%>}$K>USHGkjGv
zX5>wSH@06++>k~0BV>Lh3IyU5So0wSiF!!5S(@~mY{$(72;Zjs{9<)S=Vx7IC%IKt
zTsHL~Srd4g62JKS7p#XXt%!7IJ6EHOiA~@owfVKLh)=AQCxPMy!Jn7vD%R+xt-zo8
zDHt4gg}+`tP?U8mES)rc5Z#W7UM_Y0lr8G%^W(R}lv^((;M+0x?OHNbi0gP@Z9*k3
zJ|&cN{eC{sD$w@!<_AV_9CL2<)h|_>33c0Pl&#;Y_&2#3L3n#+Z9fIIFPm>XxxK%;
zG<f+X)8atoWO>)u#?dCn^U1X@w;+FF>eoPuyyd(Em=W^OU`U$ILFg?L)d<sWTv3~S
zupG8HHU0VXk5yJ!m<)WHl^xh#2l(>C(l`6kDzWY)DOzh5YI*kj<g^+OcK-C$!=1H2
zTG7jc;w))#V!!q<28p6?aA&$VPY#1!`3Ogs&n`Uz7P96ClMiJw9J~B!;`w46&uHhJ
zYxCy`4=m#eDSyi}0#r?T;ldUy3BK(BLC?-r@(QN&C@Cc-#$9q}q4G>Kw=qE}P&Q`t
z_BZE8;e?!m!4%AqGR1R#v;%0IXp+LJUlh3T{!X-~yME|R|JNj<WA46<6Fm5ty>BdC
zGkiJY{R`3=6ZdCT&#Q8s_C627VFrfW35s9X%5FPHN#D(<<CA{({1v&pe`tSBgNi$r
z=#8F=Z0vYcD3i%?3!=<R$-uz3{IOh^-lAlu&?UF3LuXiJ3q;7CkImKGmu0?gB~XQq
zfw7RTUj{Q@WE`j%_AeFFI#-B~nbJ?65}Q1D{d&2mYVVn$vC{TJMB6_cmiZ+<K6H9Q
zZJg6CKpH%cJZR0au`Z=!c6ox8w)n2SW!r*<WyofRzZM9!#1uRS2l|+5JSp+JJ*wn@
zJL;!F2&o-RK^hunFfLVd{?*hZ@TyPMa=-t$VAfV%QPlz+YLdp?ea0W4=*Gj@amHq|
zUxpFJ+Fzk{H%%Q(&M=!ej$(2m9*(d<E9&CfTC}*?r+1SFhQA*G9{bwA4LahJlXs?@
z3If$JnG#Kb(R1OVYJA642xRFn+no`iH$E@J2qpYQZb*xL{Yuf4`<Ttoi_u+PettDQ
zt*&e_k^TAcmuXTXkk_w;3obPZocMoWwJyy;>HuHg;4QFyWvMqivh5L*%vG`bi*$Yu
z7o&|j+L{)7ta&xf4K3W`GkmZb?O=H}H}m^n<qv#kUPws!f^=w^8DS^ARwbh167nxu
zhNR&${Jbus1r;q1vxN3Sv2wsHqM%7>i^`Y_U)ScH)7d+x+3zK0xTSXX8|89=+j$Hb
zi>~i;BFNc&g2K~VKQ_{EtltapyF&3HllIQ<Q%T=7VU!s+9gTKD2bVij%chCOE&I9l
z*Y2Y(mdg)fiaOMrpMBo(T_}@9eT3JuW9FGPu8L2aAdPXuImS}P-UYw8!)LD{2>lW7
zLo0DWih`^<6=w9Q%r5Jy0Kdiz4oJmMc?@HOz4t4nOm0<lxV9$w*zRxM<9=c(Ew%gN
z#HFrLxfKQw8VU5EIv{>KM3#xeb26sdpN2da7T3=iJG~<(&mbUEwzMTrU(7Hb!)FC?
zp$CD7UlFl7x=P!0Rg|@r6DyG~I7(LCF&n^9pFH7$_Pg-Y1Q%)}N>4xV`$5~cHN}w?
zN=L=~Xx53MgYB8?*!WOw3`WT8yIxb+{mFRS^3%*Es#)JEo~Oq3wld~sq--p4x%lmj
zQgqH>`Z<mHC@m#H#F#G+yJNEXD;~?UgIXC8=ZpIsGNH`+A+y@2%;JNO13{lRgD~Q{
z5TN&E$QiH87)q}1v3c1!MuiwxPZ%!$Qv_M*HW;`)_2z;3_pp?c{U3~`j$dId_CK$3
zv5AcH&1ee`W+{~&uULnNHJLwIDqt8i5yYKNs07MjUCK~Uo8+Yb&&&dMOyS|Wj%mT9
zFExWcz_aYh=EsZ8p7g4sqR4mi_|Z-0<572yr_^8nQ+u~YcAh@|sx0ED>2c?U=YM;-
zwVvlcS09A+J@5NSHjozTVc(dH^YrOP-lUqo1xYC7ff^(lqes(X;Zv2k77cp(F*Yfy
zSLDGztNkuhvsTrLg4=(SiJ84PFHdZ9FMP&qB+Z`$D?|q8^;`YbF4XDiMtmfAz3Wd0
zKY#qousYWw1}bwycQ$4pRD`A16w|8z@#xWVbY1fFhSVdLwr2vCO8@3G6C3E2CLSwh
z3@9Ai-KzjgG&yRPY0-cDh&*Ma!5Tv=N@9OT<n>us|7s>LH<+&WP-hFv-zO=m*tda>
zMLuLZpR>GTn6*$bV7e=^CS<U>?zd;J4Nd(YYhV_~?EIq4?Nd|4)uL0A<J-Dvz$0?#
z&BwYl?Tl&t23TRR&3~Bg=@cpPqG>vB#GD_A?sM;4OXRS{&F!p7yHZS9k|^~2=8LK^
z<q!e`zBb$16$7;8UhCTE*Pgvl)M-S2jP>>dyl&Y}o~yeWM!)}c_trkEjm@|-r*{}N
z{9^cXM^%XGe97tl4X=oZgSD{#JjH0dT^5!;!$o`b=C9xrxxPQ{x?J=WDE|RRq|F&^
z%hyUp`840lOL--#MLBn9m;~j{!A03vKU2fr?9f6mwMIA0JRo|DTexP$n0_s6jEwRs
zw&Cx)O(_NQe_cFIY$r{Gu1jyGzqf#rR*xgShFfCeS$7ex;TrvGtJNQoGWo+oZ#jf0
zc7B!C^n{!zENAN{g{pv)oF=dfd{w_Nl-eIIq`TQ0Vf6v)X}|c)a%bGcR0<v6B%0Vs
zMlc}$PYVFxJL-Esrt{!(+|{xp;bVrsuU(c86r0Vazogt>2+io1wN*JPfB2Q6s1kyG
z1>43W$ba-1U(%S?3i6O?={~EhWikKNQ8o2dn8Hd3)thf8AujP52N4uytS`NX)&7xd
z8K=mLqRugXM4b-w7Z?OqUUVDp9NEnY2%9uF?LI#E4GZs%7xGbp6FTFwvyb|nOp3HW
zY`m;$+i)eKSsm9@<&Z7X(D*v^XMP?O`V=aFZZN1^5o*0D5Aj1?s48W0g>WVZ+OiYl
z;eDx`QqyMVoSOZ&qzRIEpb^f}Gaw5Y%Os*%YI7njkd3iCOnrWJbyfZC9@f*>;|VZw
z!|+@*uI@38dS3W2SW*55IUF438Dm=|pU7Voomx-}6aI|R5;j7+uSW0POj7?|n2f=0
zICno?)6mf$l+Un)0;X~zO>%}Baz;0%7<kCMSH8_;PoZwHcl({uDQ;<)9p$i#<r3c~
zs!w^I$zm&aeDV}x<<1~cdY`H$?fS1iU>m(rZD#6m(fu}A<e}2HYQY^}ch9awHOWE7
zQt4<uUt_utBrf?vNlG&(Qeoys4roAJk*h5NL@q;b&QF>G_|rybYz+_L15kmqFN`I!
zMOD~BnHJ*o{iTm-UOxG6A^X4lhiHl=MGsQbMr;g0kow6;m~N&flcgn;>TR3RuF^Ka
zKV`|k{`<Xr$$matT=;<}3o74q@RPk%Lsi6i#H;w(#~nXgEPAM@`snx;UoanW{pWZ~
zw)bX4d9X=@a&z@30%Mu&1|hz9ZsiUR9}8vo=HO!?#L%4bOW>I#^*qFRapm6ev)eDb
zOYFPxY-Oc-V-fZOZ61}t=(^!RBd5*m2TJBeMw>ttNTiJY0E!0tWX=nTB0+I`c3IG0
zkjYegmRg(1@jsD#-y@P3d?H=kJ7(ztQS4zAmZ~naWS>t~&^ev)$|<;avmIPEc;7NA
zFcXGdXS&izB~T+kTl3$Pzf;_i;lE%Mv6-<wMI!5%@t-}Du9#j*6uUmBV{6}ct*ztn
z-mI~zgbm8mWy)$y**4s@9$B3sk=Blmo5Nu7ZmBIvNGF=AQM3B}$M!Q+lZ4z_0E$5u
zAd-U_%Z}hjn)Hv4pK*y`K#&}0Fw$eTKu%Q_MBYCRxtkCRlE4+D64x>?_*(&nbgenH
z1X<)@(A?TR#-AZAVkqJW8dsNEbrU-y)QWMJkR_rS#mtt3fI+%~tdm~lzsWfO7H&<y
zV67Awar^Zd_K3H~2U_kd6S6l}fAi_%!DL@Q6HAO(o)97}PnNwbML)^9)1c}6-+4Pc
zvP?)@p`q?u*nAI2hq@yc8quA6^${eqEEZ{dzyGk+%f{Ie(_0ZTS)ozjD|)Ga#k9vF
zF1n(OZskQp3%zXokwR;}5%errrAF*=Dj$E}4Z7b!A7OI@piX%FU%Yi(LQN#%r}e8c
zq&Y~Ioy*SLDS1^QgphNLj<?IOHY=wol=b69LxAcixJcfqUMJaz&>6)KKlc&GLG9M{
zgi)p^mL_DgGUx=QnVFuT_G35X$GrEn+V?i4{n~r#4)&ryHd3-AHu~fF?L|pSbAHp^
zAULCCAgsW^>7O&1Q_3P$;q^UEKU7NQKJA8PG0-1;3jD5i^+JBwtbkEt#hu55>U!iR
zrra$r0xc&2!lF(+5tLk|jUTP|VHd$~j979>8OG(@{<<ihPN1A0<nEqnd13gu*{QG)
zAx725a@!xBAl?=+L)n$|{8y%;#?kvRj|UfAU9^?lstyND?F-d7t>0*=SE*!TNm)3C
zMn|QHE9K~n?&dvaeki#C93x-ca2^!r-}(K<q4Mp_a;BevI(A3+dE{Tk>3h2AsI-m{
z!!nz4_>97tLj5~%PFRk$7#2XWqduC$RrYE;M|y7VOQ;F=Gu1%iNkli8QhM@_D_ju}
ziM2~{IJy@S#Lz^MPH1lbQr@Z(lfKS)14H72S1tn3L<R!#zu6KVkGSluUwU7+%*@Ve
zU<^of*Vwi)U=?a*Gng$!3<$Qmp3f0Fq!ShW*}Tws2!-?;c(A;^9M?HJbNdwmj|PJ|
z4Ju`pc?7>d(_hrb!W@`pT;xn_BXT9vH8#kn|46Bu3&eO_LD*N!a(rGluK5LUHfbI?
zoUT0=@H*2?*pEq2Fu1l>!x4h~XtyY$m|VMg3vToE98+k8OPTIkZw4cq-T%D7Y_<C<
zyq3jD!NhtcBwR`MRe2R&b?bFDIXO)aMn?EVZur&Ue+-WR%hHP5;fP~OdQVkulIM9N
zK7N#OL0|ThC?z-YE=gH&B)?(Ofp?W$BVerXuFzfUSb_%oaqiQZp>x>pKk?c<_Gt+o
zU%Qv?7Z16Rzy8;dg(`kvCM9Js^07Q9cfc6l-&R&dSePdQmjs)g$bf{S=Xj`H%r;l9
zy5WwwY(km^BzuobR5wKBC`!J{L03j=bJu31i`vgw_4cM8r8=@LVM6ompyp*%@#XE>
zd7-hWm;Q&z?+8vB{~C3cq^g9PHVTsA6*K1E#ce6qLy^-wKz{^1J4O`be5_69wSnw#
zT%=Bz2!g()S6EuZ2(WKt<CsG78ySY^59)QRFpWT(MPPlhFn|(aKI{U^&g*1LXYH6n
z9-ckU_fUB|8*$EXQzUhovy0guQ~5WwNmTjtP9LeY59wNANR4NodU<$>^+N*BBTj@V
zY++q+u(<BlMCq5OU=HOSR#u*5eaz$M1l)g4mxXSyeQrdE%x(>LK#k0LR7)Q9d07}5
z)={N119S<YMX$^CjOA8;H{xB#lW()EOUuH^pd^wyF9Aiql9Y#XFuArK7#xsWl{_>r
zBy3Zz#Xa!C4;BH{(MZ#A(n_Gz8R9kXcAQB9yX|1ygEVd*m&vv;3PoV<?Dg_pCG)pl
zd$Lj4{6{|1j7-Ko^<B%@DahH$BC4kw)|}9HFN706bK0mos23zKnOhY-Wcoy5?0WCB
zhbM40<3Jemk7BeP@4-V|WU+8K4KVBEe3I+pkGdDm0=^h@U?EdgvA}%^@NZ0Vw7nN6
z6}<ZH@1efiVmpwo&T@?Q{revUa%}2}J0sa)m`#ym|LP|lt6do12Ps)g;g1P%6R})T
zA0Ia~G!Wf#Wo+c(Qg4N%WYeO}Sx84aUI$Hnw$$m{U+9I1Dl01=F17_h9XldH_b3kZ
z4biu`kwww-fex&H3ok_}MuY#<O!D&2&169Za^}RCl*3ZQ8;oIQD0)T=`nGvBxa`p%
zUE=CFCXDG~y?worQ}|9NGj$*hz0~oak>K3o*7U!B@1|=a1HD@}G0DV)F@1=1Y>Q;f
z@eb~jWv8ajPF0pA=+h*5qqt$;W6m|rZD*^CBlL5^e{$@R&kgtPV)!$bVQ|}K!JF4q
z%vLiOQ}~~;NFK96bSZ}Fw~v^g=885%oF&Xk6X7wmo5V)zIZk8>e!vaU&{P|bOZtFc
zW%UfREYUG){pmjg_V{9@4RFM_qg)=o4DP1qj}7ogEfuN$y<{Hh6w-)R)(^=+0V^GV
zRtG3BFQFtXJ!u>e3~uUpV!jWOV`g%4o=QqY9KCE2-0#y*Q5iWBRv&r@P=+15y~O$z
ze!d%s%986)QB^N`EBS8@cjdK2oip2p)NA4CUy{en!l;_usvk|ROxL(Ahu!CNh=4%(
z;&&4FtD`c{w%3USeldM`?^W=Dg{4u)VOGbXvT<o{uD}E|SAJ2dTdCV&0M2Q&Jy5U6
zU;k6|9+r69IUY<OyzE)qhP<U4Ot<i?S|NPCad9YRCyq=T_w(=&Py4<zYSjo!v|VXL
zlY2{pe%Tp$PBK+4HkxSeI(asr|LbUjr>&`I{hV*t1P9b|e1UWyFnWpI>|fKlU-x_`
zUudfss(|zPddFnnIv3#$!|iXi0K3x}JOci=em7mpdI73$%~t3x1{L@ShhcBE4@SX_
zdX4_2QM7+uv51^V#&IqguTJbjeyKCJC4HE4dDB-5wIq{rs`8UTWnNdezZIZTg-aM?
z?!l0q=JziZYO^fkurF>riAE_LR1S7?O!fTP)o)~%zfSVyGlSMwdu)<uy-V?r2nbjn
z^)b7MJi{S3@7yJiKH^iE2eoM%tNygfh;-d8Z!Yew_(AExM4i*mwzsuC&P@A;lB%CW
z*yA(0+w87+z3_X2-6S)`+Vmh=1wXB$QeVN85gl-sb3P@YY6sXTk4>r+_kB2*Y`rdQ
z`_RbD7rL=?d_7d3KrMfOrz=Y^EI;+`@%ZdcKF}b&sjHTgoz&6;UR)vfuvBkg;h*L@
z?3rG9^tFvz!ohx}-ho^=528``f#%h||CIav<1N19mNzV`Ht1XtF%jjGwNEPgk4LPm
zODjs}(}|yhumrvQ0w9<Xiuj7(G~#BK(`jl9AaXuIhr*Gf;q1I?cf5j)`dlA7F>!ON
zSLlEz3P57-<;lh1g3x(61r2reJZj%N$rbl42l!$^3ctf@?(Ktn$|LNb3@RO0Q*Jkq
zwR>YHG}1pQDG43|ktoQ_?8}{r($A^z1!eo}{nwuq7gq*o^VrLiJJPnXDQopSsCt^C
z3WLq<GRe2zO|f2FpQ~!?zw_=hkoMr}QwxyHHom$w0iv>qnOIpBS#{axHOEDl(rGHX
z!#xO;Go4iyJl(s&jyk9#u?y6$330N&m{SaO;8|YKO`7vwIoMH6qomK5HH$~2tWk6h
z!t@Fvt!k?9Q`8s)xAQZ&2VX4l3&=fI9cl!CuaT5jDFJX6ia-@5v`6F7d8du=QJ5U_
zx<LJUkv87dBU?W1`|D}0N1x1@YWD8|Khj)8h(JH<2KbaY7|X7;e=FmJEuitS!dP)7
zDN|7E2;C?rwUKih=^3>6H_2e}Y|&35rfNr#G9nk}ZNrA{<HfJI5l*-pnU7foud_3Q
z{piux60Auk8U;{Jsy76^KxO4Abu`c4#))<Oy_`D!gK*FsFM!xvsg+`d`x{HKSy!2q
zJAu%CRCfS`A6S`v4+$qB^%bKQb34!{pAZ3Xs_HWYu0t<AIBHG>Z`~ZUtYw!)aWEHW
z0IK;_BL%jhN5?%+z{c$k`D5<{-s{Z?F{n#q^BV1DPnhV6@=A#yS&8(H*Q4@E>#c9q
z$fbf|Sf5Xy^Yt!!y#9}{&Mn8rS$=9KpD?{~|1rS*9F}aTs5&^KT@YBMD0i=Sa9KGw
zx2Zf-F`^CxB#}QNRFGFvw=7}1P^Bp)5tFm|I>)7N-Wzm>4KW7Xk2GPo>ohZomOZ>9
zPxTHiw)ZitK&A{jU3D+*uM~kl(zw*9AOe#u3@`45l~?YvEd)N?Pxc?S)0_p(3c!q&
z`fDQXMw%T3j2&nSPtC>;iT~=bhbAY_ytaYw5W6pOOT_54xoM<3Qa#AAFC!bop=Wt#
zEN;ra3F(Q&@=}lj{7^vt_7f!j)dM2Cax)#Boa1#=wV%#=?yGPv+v$f{%ZF&MRXyhO
zhxV7F!f@@y{yd<pjV_s6?Ry#&R0nxiR`0~>-f(@P;c)Lcoz@|@y)(F(dz$4ktT!zT
z@Bz+k<M!L_{_I$~1jgVAykT8;YM(t)K4Gy_(<KxufP`l8eO{G5h&_++6!=s@`6I}&
ze+<!zh@qh4s3<R=(F{bp^;i_h(v&zQb3`;B3J3s5&yYjf!xxH{Y>@`qz$EHxB$_1U
zU1(m@nzxh_1Sz{vt6tD&dy)QzWZri_Y4=M&z$t9^!(32D5O?TXw#*V7{N3KU$!@(F
zGp4_u?pvetP{-r0Q=ED&6PTUfn~K8v)v|KtrZmDoDwI~q35CmVZtJfu8p@fuukrIp
zcxQN5RTbok(Mb1_^S*Zt6y+2TQCrF<ws(YPiLu+WaN@>Nb1UymAF8zeUkKHlP+A7x
zc7;=)r1xbX)+1H>Cw9_J8d$og&maCY8&!|Ir+l8<;dTul{U+EwC>7NFG<3P13LG1G
zap`OBKDCP0hR03HH(ZE2ECcdUmQHhWCQc5gs2BOq>SWkFCYUqO4mV1Z7xzRRk`JJ?
z3|@;36@W*dT9${B6X9`6Rn!>snOEUvgb!j#H}9I_az8;vBuP_?s<R_CCV}Y^T=6+Q
zA%HU9jH&$T2x=`6+_VSB$7~T5_{bPdADr%aN{CC6W{Ycq{cCl2QjRpPvB9brUPW6V
zcx8?Xb>49djj0fw8?aIp)n41Bz7}}e5l1W8lI&yQF^3dTo{&KWkY9s|se-w;T`jC4
zp_mJY*>JIF4>><~gWvq_=8nq%zD%p(^elk2Y(pqk)sH#+fvykJ_VbGJUniRnU-5C=
z_N3l^BMUV)yl?kN4pz0J7`Ed4%`ze2yL%uacaO>05=E00=R2zMa`4PpZ6!+?dpzg5
zW=dfdc`Ubd$MoUD(;9lTCpv?rlARx+HiPy!!43BsiLkiL#wdd>D4%XIh7QF+ng()q
z>ey-aOR4*<wZH?CA3>tz66;FQG|t7BiN{loo60PuLz)g!4H_>sXZVDqq-tYksvYH6
zh5p<%q{eG$82%;}=%mV{Veh0+HS6$hvx5KrLn?ig(2vP1%oTgM%5!jk#fAd&$Ot=p
z?cEAZ*Dn#DG(OEpnEjGP2}`bM(5d>b{Qg~~SLdn32cDqqAOF+jE1%sMFbn7&Beyo_
z-@33K*hlkjp9kPwJua`XkKG_H)%1yQ_*}IZ6XM(8P&LX5#LlJiz7Hu`YQ?YSwmM=P
zO%ti8Y{PyPm3Ij`epZ>+*($kOyeKl&T2k(;DX)a^7LD)UO8VX-E@h~%QnVx5FmvH^
z%g?t;tZ=X@-#td1n}tNN+%6o!U8J{6?v|QrT&}rE3AIsqX)LSi#lRf<$QFo4l-^pw
zeq8O#1g%3mwc|o_7+(*Wz4Yy5B8X>3ur4z_RQ2mSeIcwca>lf%uc)7Zkckl~={Nyf
zH17x3oRJK-X%8=vwfmFFc|(dI7m_7zL_)9S$nc0`y4-2v$ED*z%cS@r;f|YLS<KV-
z7@pSTaI?+4Deh9uvlT!fy&p?1#cy;d(H(o_6%bP_8W7&<!5^r?Z>lCB=8b%ULm*}7
zrl757P;m1U@~N%RTJJ$=7--n~a3Qm#t+uh}`*2!Vzy>83D$M93K;$JsGuC`OPWofb
z!cP8$>3TJ(W>?=<E@3}u96yEY%PG7v%hl5FWIitYJPPL@;a8oEPzO<tN3x%te*4Ks
zy6p~n^q2LT;+h1no!BiUKiDeeyqX2uS-+HEZ;6z>6y-?gILKJOzFEuGCu)Un4~MI!
z4g)BNg2ZV}!rChGx?S${92tlBy5ISD@AI@G>v8$so5fm;V($m>zF%pLN%INJy6-%9
zndQ}@nm8WF*(`{5Iv8;5FNO48Y9t6BYzMq@cZEDxzZj%BIf&NgEbY_X%9RVdys{zg
zyxtWqvhq|17ql(TU3~OPO8+h{^_~8<DarPfwW0t)jfI8vLrPkzK~=siIxz2Jr6FVQ
z*0>yXFXQ~H6FJgm))mdXO1Devg&u6->)itPvvE0`6c`()+WpN33qpnYQpFgpE>deh
zv~42PwfjK%mks)dM6ToW@bZ(}84+gvmWyDRaN^D&>{0yWx#x0JR}&0tqN?}BYn}>6
z-Pv}BwhN-)X49Vi-wUmqoQ%KSEO+yN-a7l90)Wy!>^C9=gKIV$A)`x<MP^;mQa}Rz
zh=2!&arS9;)xa{{d*|$U`};G<{MO_Nwm!M|`(Yq)j(1>@cxoHp-}n=vVtR&BCloJ~
zAGDV;`8wIIfctf&lr=%GCx;uBU?G)r%if;w5ZdWm(|^SMhSh>J(ybpaaQ%E7Crx-Q
zx_v(xT&u`i__t&moaEj&`8MW5BQN>x{(Fjsz*GZoedft3SDTcas;)CI1v%6#Gc$#%
zU3|)3=l55c(`O{TM_gnQM9>;`NACBPOI41gGbTH0C5YaPmGiC|1C!`%z+I_Fl4ITd
zA^Y38+k^9|T1G7`%>@>J4Cp=w&5qkDp86mas9f*rvwo~i=&EweuFjr5s37M__bd97
z2i7KTh$Asy4y&HsBujO*ShvJue^x)9mhJ@<{SnlJcrb6=ZfG#L-0^vH%%tg{-=Tm?
zw1eGd@EtG0&OUna-iJ<N{?(tMM_Gm|MVb5~fM74tXr5thTyhhh;SpD=ut~v?OoHy%
zerrFN?eK#m#<3j{e-IlD)s;)f>17jsU86e3YOo`g@7Tr{q+$tV`^!ucY0v*+pHAAS
z7lC?R76Ucwf<@`6)K8tld@{n;$z1!qp>D~?lNX>dHEm@n%0>#7Z)84KqYOSr5Z0g-
zynQphw3&6Dnf1CrOAQ@h7oU$Ih<5mbXp~!8kErYW==pq6!7I6*QZ4IOM4Vi|IRm>{
z7d*%H38g~Cmrtsw(|kdfiHKSNBYEVdU!^akU7O+(>@q8(x(A_LG>j|QO}W!=;C{N(
zxpduv0bPlA$^wKd?sU|DDC*SG5+ojnXmO3>hP=_E87($+ZppRClJdQi?kHZ&u`$%K
zsmT@M5-@`@x)3%TF+<Dbc2;a&D%9OOMwFxW$B{?1MD;S?1A+f#8=l4Lz&N@0<9Nb`
zu548O8pKEaZPWNw)<}@uY-KJ!$V!u=N!>vG{2Ou;N}p$#@3*doxmU34hCD~u!abfI
z=QY$M^VDnU{xsw}*^;1Hi8#cwQ@q(FS-j&Q&;WI+gL4-uYvPgk3AeDq*)5zupm8hr
zf_Wzm_6YkzStV}Vx_x?`PIR`0clF%C@4}XgYhKUe*;*@>vmO`mr!;Mssi=zxM`$Av
zN!m(AOzRrIWXS+fbVEY_X%-v*X0xgz)Pus6`!-t%-ft0@(cs`ukjf9QRh`VLC5CaE
zHyI}a(}y~Z(+ZB!juCTCoURkGJiaL1{Utdo_=Rfa$G~TtcmoqZf!@gu^E21==4Riw
zpQck-66iaw$pekM@v!1C&ad`a)d}+6l$=;2;{PQatc=P~0M}AH_s%6>0ar;#mpU&e
zRl1&8TigrW_zm|j>C~3>?kGQ$zTg<j5HO6GKL`&&?Jsc)v<C25NNQ(`FPs$59T_@8
zqkrY}5AuZs>DMg#UCxOb7uak#Q%d|{sj6bmI*tqd9JFe98=AbsF~>j`P-x~8<I#Tf
z-w<5kyf>LSz0R%m&X(jUpIL2nd7e=q;EFM8+36>T@C}{?5KaxuDW_n$fQ^k~9vj<}
zum^|B7>R(TFw7xm;p8w;h2t%Jx)cZJr>86T_?KjZ6bIVPHG*SePcUD1Vl@d-sZ|p7
znxO>asK)gOn>qBG?ibU1zs{?1ED~a|Pz!kKF;N_NtR#f9Qn<7Z=)K8>`!|l+M&Vo`
zDIk#2C-^d7=zYn0l<O#LEjcdw$pnW`%cAe+XLPQOf4{%zzbvkjf6=QA<&fg2eBoZZ
zR_XYdw+1)MXl35>?Bwq$_qTiho?9V{<(U6U8*OUV)!s>|=tP(jAQlXZBabrkSwB)$
zW(0a=`dBSO@c81-;67-(o2MOu7SZLlhDvYOO$o$KSMjo3m1v6SW$x>y+%)G(+gnxQ
zVvzjrq>_nN{$(Z><&*5c<F70yIfs)nwegufNjThAJeVMNH$L<B{vCFWp`J8(HH(b4
z?#C|h6!9)NFX_xWcz$Oy+Ca1V%kU*f)Jb~Z2~UgvL%vX?Poid{CTR3FXpB-+--<Bp
zcXpO<#vBnDwgZPjMTn4F1DjLcBiZ1L;LEUI-K)Z--(8mlTl#K1T(%>h97uiIVSPJo
zDZF$Qo*opbk6ipu3==={s_b5BLA9aq?amS#`%7kcl4XFsK!r`|Tyg$|L91tH^6o#>
zShp8^;W=Hq9GfTOyK8H6??(l7`>iq{4xsai(%9YRX!I|?n6)+>lx1IQQ)5N3t7n1d
z{)`Mzx!l!DU}`BG>APF8d%{L2VwZapb5y4CZZP>^MthFc=_0@(t4<E*U<)Ns_wT@_
zG*ED3O%$rGn5v_AFe2m1&(W`flI$-*8hDKXkrlz)Pof`Y$-LXCE4{1|ST41PGu9_d
z6+>-KY|t|;hK#d`Gd8<FjVkZ0D;^OU*KH?aaGU^bW3|!y_4yMO8wJ$IiXXbw9&E}y
z1MkiTVrjci_}}1~54<uW!a{($!?@T<<yyZVu!xd`<?2P=6k}|N9!c^0M+q@m)}XDS
zF}ec`8X~87CJojiuATtO$CF1Uk&OkuOU`>BT1^*9srw&!f#VCg|5_1mM&c=y3Pt&8
zL2XiYvgu;`IL$;nAx?UySBZFb69C3{k%wrblsfQydvL?pIb-4^3K09GA=QX%VzxUU
zs&9Bp6Txjh-#GohATszRxBTbOv$gwB)f$I!o}YGhL`9q*DwI2f>9LoL>LrgW{WY^*
zYRr__NnGqt>Dmke65|)-<yXyTukEy<Y6WMl8Zhmh^6K)>p(NE0hw9nCRssY9y1|^D
z0p<UmRhvaj^nKOO@?m1&mLa@<ih)w)xh$%_L!PDLf9-WHq3#|VHkXSle%VZ%G*o=H
zRM8RTg9}jWlC9m0<&f5!?qeFY3LD~9avw*9ZcrYe2-;BL-nMG;kUSONYW=zI8&DNd
zHdDw8R5&dBaaWF<#n5D5Z_Ce;bkho|A^i3(XvaC)y4L$2CKY(ew%UI*<TaXRj^Oja
z*r^1bS!QPK!SJkY;w!D)3Uz%z4PM2WwptSD%|tN9EB3V`hx*3OOL>iy?5rfA(h6aq
zvbusn{5H3i?riRjLXLt*O2r3Ad9*J+CcbjTn8qtHh)k^{%G_HtyDtq!2~W)aZA@1;
zbC9ZZAzYmCGQQp5vhSlq4#W_f6hTQ~1{PER)a_rI`~9C5U^=nM1HwPP${;Viwc`R0
z{IX?YjTCs2ILD(+$4Olrg$>|C?OV7&J-+<ZrM`tYSPpR!;5@>nN?X!rrUvgM^00b^
zO_^E>y)$N>5N*hm`}9b8c&RZGYdsVCUWLFyeZHpUmePTYc}ZM$*@Ea1uL?hPig=3y
zbcf9OY@KQ8y-I!mj|4OY*la?X4&g;Gs^4fB1VK$<x77jrV=-Z7h3~mn7b23leqsG}
zjero5k|(}0m6)7P51y|mhx;Vy%-I~QesUOP)&_Ju{Ae_zkV4My*lbqP?EkJo^HqDc
zMhx5XS^=x@6l|5|MfA*=AceAWMkwRR4;g5TS>FHXRkusV@e^e5tyl2kAnVSHFd3OT
zx9|kJU&+0|`_?{ZmBq_%Wj2tk%&1BM8ych9nawtv8Xrta!Ye;h0%x#WjYT#;WCmtC
zu`UFDs>75e`+?KndM<yiYHS(La>Vk}VixYaDr`$<`p|Y#!*oVQ!fh(iq5(>2Gt5=Y
z8ZOFly?h*7yK0*HdX+<e;f+U6F`xE_N0q%(k;b&9Ia%n_oK;<s9Yn+LwXFey3*nE7
zVxU2ddGRdm`Ub5~lQZqx#3@#7ITJ255z?K;ifW@{vsSySmY`WR#B{!{u43qno0kq3
zlfdp^(GZ|Tb+N!_?@&Zl<H4n47CFH7#*sN3v*epiX7b0D44xcY`Whq$Xn$^?uSt>;
zkmt{pes4h*8uf#=U_UgJgzKlIP^~N0lGt!YjiU+G{`=q!CTVm3u!U1GpsquI9;oUV
zX^3n6H`4xwdY?|vd*CGk`CQk*P}DnOp)m;a9tZE+B8Tgq^{IK8u-)ttlP#rdmRGh|
zeDtsNuYP?W)QvU-?9P`&ddQUakwqB2UHjjGkuG=xv+;<rYY`;+FZwIv%UjJ3G-EYE
zf3qQXd&J`Ppp1y+Jmr{*JrPI!hvbaxAu2b4ic}FIj?*uSS%;9=EkSYa_kEy>H{BJK
zBd1&2rt=#beX4$a#Q%<H_a`vlif#Fmp=V#w{g+cQ-qDf*;3n?%r1YehnL<_b18lR0
zU~L)62J&+9*C#kLR$89&8kh#E4Z=LJMBFrVjB0?%;l(AU=V}HD8Bl}j&rJ@r09vf_
zaG~}L`Z9Cf7FXS)1bSHIB6vy+Hbfa)l`YrH$+nB+WBNv>aN+|~{u(=P;Wf64I%po-
zUozIMsL5)B2f|MGNtYt~)G{Y2Q|&k$)Mbr`y7K<8ZJU~i?KA>He~n~QNZT_S=kykX
zifL&M>XkEZ%w2R>wSV*-`qmN;FK7cz`ftd%9A;d|_J7E@cpr9=x$1^-y9@p=;NO$d
zCNNd0Er;;gj}hW()jL3IsUlxR+tk1)?LRt5*O3-LUb@#kuzlbmX(KsBHn%_HLXT0J
zh_*@;FaIhg>;uVA;3hU+U%9vva0leSO_At+gn5-+v}}PZ0T-g56vbk!31S(FefT!p
zf@bZc1%Uf;`BTfbd^1;C+Ikh|0a;1h)say@^5FRfumH{6(K=MAmuGmCN9wN7JtJMx
z9G$k%Fn&GyVELQ3tL;zvvZ`9~!T|pyu#NW}bvIckEd(qXAWsdFd;a|Sna``lb>-N8
zJDN=VCwIaPcA*5_Y8@mKRX5~Npz|}EvA=u}N4^R7k`Gt5I&n#lCps5{89#7(ko~Rh
z@V0v^U1P|Z+_?3|wFVk6EX?m9*A~dG!&CXL35~cUa~7gYe$_~vY%2KF2o=QLLst8T
zEdC!1B5!$S-;AFoE#9K{uoUAa*jFB!;FcVeP?M0RNtK19JCqjK)oLn{8g8U=6r@h6
zv0Q6TIB1H+vz-4#g7+I_nL;KJqhk-*>i^@p)u<Rn^Dhtu+1~u-)R29s8aiB)!R&e@
zm*!br>i!9RSyae~xo0!#+se|EFhZ|UHKX`gYkyUtVfVG_8n+m*Ck?Hws}E)XR}$*a
zscogu7rDz5F{>WM)618GZL$_mF^%2$Zo+m#|5n^Q^mV4<*Joopp5OfGUQCn$KF#)K
zloB>*S59%(=M^t*M->OY8!em0G#NAPFR+&KnnUe3-{jU1#ioi!|7u)QacqT(%5nSZ
zytuf`I$X1s;!s&~ITuT_pDR?^K9cn$5M0c@6_>d_{15Z8ObJ@ZrH*#?p8g;z1^y-f
z2y=PX%R7Hse@8n7C*pXv?C;@8YDH_vCBg{hrJ050ZuuV`Y055}sZ=p%wll8u;yPSx
z&B9cy?gSBEM93sm?xX%(g;z#1JrLkyS(}6s2z>!}-su=YDFfl}$UkjAlLIEi$Dh~P
z1>~uUr<WCg$Tz$wjysUy0j{$RBq<$Ne<j?9l|2O=Syx*vfb)-0V&$OwTbYatY%FKz
zZ7`?C?(f$aBxV7E=S^j5Xdi)f*0x%i`B?R5Wq?bfc1_|fz!>r7Yen|^e)6QFN;O}i
zA%+r${X~<fWO{!j2w2Wsfv?}`WVcnJ#DiPR>Z?U8AHC5!at~mT56Lim&@Ku6K5&dG
z%ga+~XqYXpsEiw5J8{q}m-o=9t!*EKr==FA70Fbta#9+FraLM>IY(6JW&Cu-<K?h}
z&=F$MSNxFMz6BG}u=SoU{`A(j3o|;rHTMx%k*A@1D|fxlF=Ry^Lk{#KSn!*(1|@ub
zgQ3lOe*Ozt{r|XM_l&q=tuvXMQpJSVPnbT^h&($fQV$W#%%s?K|HPm3X8795<waNx
z?CPv%lhUzK;~bj;mrqG}?>T2J#%l`$w-2%ei+nH~2f6+DR{u@g_q)_LJvMh(SVR<C
zs$zhDqpBDxDBFQ|hp`xXd#%Ce0uM&I-Lg8?lE5(mJ?<>}+(pAiA>>;Blz^<1kYc{Y
zk(2rcMUyMBf=U&?H7)OpqMrZgkHO2LNw?+NhB_sMW8viPwkH2hO`xU+Mzty_G<>G5
zY3w;LY7g9O=x5>Mk!gDivzgyKLAq`9nZl|TN&?J$_c3)X9zvTNT-fK0cge;o$n?GC
z@%7_?>w~-a665E_;Fm9775(7tv`ZdB6T;&X3qcBaL_Uy-p`Uewd{4JUu?t$7%SHsZ
z`)Gc22P4FmzXCDQ??U2gqrS$g_)@cUpcoV*#i4F5v4o|(j0t{?FFT`p^Dfu$0l_C(
zBL}Hsi{WRBkIk6;u+4sPn+H`>{^&N)l1%>!bGh!N4*0+=f})ynj?yk$ya1ug8%IT2
zimMF=?|53T6OYIRZVz2V=JMaTQjx93Z*2(<-E#$eNNmJ_2>X~*GpMy_KQY$&#7vQ5
zYrsV$1@Nx<6^!_b4>1k8SPi^qkcThv0R+~(Dq_gRzli6kf;;c?-?FEJP3|{kl||j+
zKV}Qbmt?!PQu}Nh1FlvS-KWA!;GMWf1kk==uqe3UK*#QIVGDo)H=9FLL^sUYjcecQ
z@n5$e+YZk~(_TC!qAbh^bjx^3NM4?~yyA0Ov>OEM%Mq58Xn`95k0+(tJdbBga{P^a
zQ9DdxVp8K0$cSQ<jC_2EZ;dGRevz*6#9x^QO%09s`}@BKK1bJ#4VH-VSchwJzt#g#
zQ(0r<ocoRl*603sNaxoJKJg?(Su8!msJ$fG_jSjAj23n$Ws8^un-+NBCC&~+AG${0
z-*XXCuc?;lGncdco{YI}F+ffx2Q5IK5l96<OacPUVmp_QHEY0<%ojkG^VuecwHKbD
z8|rS<RW7nZs+uj6`I!`CSWB!;l9XW<90Cr2{+%PYLJDNn7Y+}ofD`n*B`o26Or$AP
znAYDF+BnL+zWpaJA>)E0NHEz!WD)WfS_fEp(-(`r9EDmEG_VPa_PzLyA;1OXXkVcq
zfP#!S!|L6ak(ov`&3NUh*%9oi!SZZ&!q?7kBMUnAs>@z+Q=0i3JC>V0431d#*0SOO
zC|h_OJL^ipf8I&#^dg+^QX7V@TsjP9fY?}ZR4$f*(dfxZ1$k8uEl5?nG3zR{)WOZo
zpv7wAV<xw{xJgje_4OMC`Tatxocp$9zdAJ$5Bq5lxLr0R<o0|QB3g?5_$fTS0zALj
zi+?^;5vb`i?_O!tU{q(RiZNYYZC4K^d1fc^;+Zv~bygj9jN~k~IlEpX428A2@0V}&
zXO()c`m<h<FZA?Cub}$n&X0VZY%WuH+~Le62c5n&Qx}kS4Ek}$T-&<WLYh6%r%d5~
zDw6`=oxfKgmcZOf#>`rg!NM{OL;!WIF_Ct03w<c<ReW2XmnUiB&!>5d*KJj5lTFJh
zCPoJz$H5Y;XY+USH}w27cf{a*gHk=Tase7}uH#!{c+Cb3lX<#lT#;tnXfi!~*#s1r
zFi3ytGK%SfM?KjM61nRre@I1Q$V=g8-v#kV^w%z;_p@6^?F}~$TAmFzA8EEf;@v>#
z;p%0I{;D~SZ)*gM{elHM<SbL0SoVKrBa@1vjT8>MCOccw#s1NqYBNwM)6)Ga7h!=h
zolGxqj<SjVHTi~-HB{Hd)!{pZmU>SX8OZK45^d%4|CoCZs3w=MeH6>FQmhClphpnt
z(mSY#H0ixYKzi>rprW86y-7!U54{D5i1a2U1PDdxNhnf62?Xxs==pue^R2tS`(NvR
zcindhLP+MFch8=^pZ)ATGi>3~=rUJSbxXQRhx77G#y#!#jGJuslKwXi9x$7V%(f$g
zj**4cp6!xXSMVusJ6u}QUXHBmmppm|zOtC4_4E?hV0U#u$tklu9*@V46bJM2l~?-i
za7lnFA|+V!xf<{8$56r;i}Tv_%h#I%cB4-2Yf~CgZrfj6tE|?KBZsw5<8Fw#RBo?v
z4;PIM0q9Q3f;KePiCTOqD=02T7S|j-zAj|1YGILs#bSqr;1DMx#57E=0ujMftXuX3
zpehUo6O~mn4b}MLk3Hw3Cjgr`-TCmEkLmVJ)~9mEGS?BEUB|3YhC#0kC&R0((dHek
z%XKd{J#NI**`b&9UMP*<>5>$&N6$4YPrOv7+<}?X*Vv=CCg+>nHt@pjH1FO6x5V2H
zT+-K<n6u+*MsNWRteE)Tr~_ZY`QwGAo)xBJh6}=zR$oMUAnf|fRu#l+>zl&Z&6?OJ
z2)=9ApzER|`h^sm)ihEo(1Y5sfcI%5)+flm`VcI3hS<3qX%D=cKf~}#W&!W=d%w#v
z6hjP;uDh=cYWZ%u#E!FS89UBSOZzQ03gL$eVMBZ>h`fyrUg9Fc(RS)+;Y+1N&B5U*
z=-&L3lz=JEt!**KrGrgGre!KrJ@6F8xe*K)lQ4P_{Ue`QM00so7E^X^ZZ}TptAGw9
zcSt2EeJ08@Hs%WJt?y`rrJjMoWxvoQraeDNW+o@wvmjtMy7xW@fcmY>0aLYE-a$~>
zL%*JQvAcmdD$T`(_PF!~#9}FbWrce!mIY~%i|)SUy5fazx9=Q1I4|1zlIIE${JodP
zr2*QFA9o;kmc2}t_$rO1CxbnXU8cy4Xp5E+zB58c4Sidgv6=oZB({ax_eoc#<#tu=
zKG&p{>yTqbdU&*LQN+20z4X%K-I*ekVkzsFn@soVrADSHW?352tAMAuv8vrr!&87N
z9Un`IFFemJ$uhF~dKXV2gqsbQ8cv2;Dn>EXt_^%EPfVn1Jm@;_vln}f-(}89V(XKc
zext=}aOUdF_-Qdd3;&#8M!$yuA?SQ!{0ff7kpAq#%-lL&YaO_{OH?w!r8*sS(g|&!
zob>9(lk_vPC2WMghWP!d2MHCc+4Ov-CDB_^171TJ=Co=eWGni^x31NEf4lUMD@WzF
z>AA(xt;q$EcPv|w)#|m~scP@%ZIw;YYpm*GVNER2y@{3db?^cD6WeH4ZI((EXTJ^*
z34Ij={(1OK=?$_+&GsEk1#OghX4k`<Bc3^5({%PU<q?yruk(1zmSr|wG=B*PHT4)U
zQCohh%^@@awN$GdIQ4+BEnI0OP{co(ekMneMyjO#1lheZdxx;<-d<~*gYW_=sKX&g
zXTwlsw`FnNFbjpK)q}}KuqEQ_rVo-zSLf$#e(YU2!!H?D1fKcZ1L@e9n4+K{9}1}r
zD+*e1%^^#F>Yc;+)m}B@L*q#TdK#C>x)#g{fjh*O^H#X6W_2bC_|}uq)De7sr+)1P
zh!k&i;_wBE@oq-`W8pU(ce>d93uyVIbkx*L8YIsFSx#7;Yw;!*XnI+-*Cz8RBG=kf
z#3Js*R|k5hXz>lA4vSEmQrC<Y%j&K8rT-vHu?a*R^qs75ZYxz-_zUfGqB1t{;_zd9
z?{BqTFzZ16G?8K42jV7wLCfX2dA28}HA)rr%Dk*4${7no`J#zeyDg#}X72G=s?E^Q
zl&^&B^_Asa`Yu=6$ne%L@+q`&)=uSd1%g)UJ4N;M`jBaV-R=`GqpwSmJ>O=9t3aR|
z1Mj~{^};xyhmHYA=4+4~&qI7<pV-cE;J*H>?E~=gqidfeWbM%R-Qkb@{jC|r{``y#
z!>FzGVJd!yiL*Xi-&vUDWhodxzP-#+rGJF@AgQI7pqI$!sXbaA6m*J+`3@JrEN|k|
zJae$AaE4))G{3yAu5+A__0W+by^lH&LVPNeur^-m+?ct-%*>3LaJ^&u?fHZ4*kge8
z7bWk!e6J}*zGN>zsiMpKc<);gGOOt)(vl^gFJHXO6G`X5=JA97Pi*O%K==aBYs2O0
zwX7bK=WT*>rqy?qS8DChTb&wTs_B<|gm0Yqh%{ozrQ`{sk<JOBk$%tvYAEh-sKA{?
z>VnebdiqoxKJ!@6zZLy7SY84!WXP#ruApTP%*aeA0a?kYUu||stE4hdoh-l*PsCPJ
zT)XCAG2Mibu}%h1a@f9QeKyOvO~osvnhprJy2`9wa0pf7Fx{k8b1=<)n+siGS>x}y
z*qhVs?>gk(oR;fPh|B?B=2H42o-?vK##av3z=@LssLh3w0jWU$EP7KJ4!n0(jp{d7
z4O+&}oILJ>ueyfE+H#-jPPEKr=jI-YmD=-{Bc>U;>is|j9EKEf?CTgC=d3{l$Hszz
z^q$*>eym+Ul?e9TLFrEYd0$qS^1kof-8ZwP93{B1322y`ndG?S*vMJnK<a|+pSOX6
zJ$SYB;gCHk4dVQvs=Faf54|pN$_~K*j<C@-As4YuA~DTq(cr0Hx&1@2QKHNnbZO8m
z=Obs{ACCx~T5|1v+8mpLPd+nIj#TPDt2@%in6l0+0)M{n4IgO%9MIL*Tw#XIL{Dmi
z>p8f4{xniQgLJazf!s7Pw&!~PNPK7TYUzU><^BDIZDgd{E5koe1r)8Vwz;WDjMJ9g
zs9LF3q5dB8My6V5qUDHhhAocD)DB&3+<8EA4@!4orPpu&H2s}chwvA=_rPddxYJ0V
zCRNOEj)A;#?;k-w!3Olz7p3dlSCda`O*nR3CUEB#z8-ejr{!$np;SpOrVZnP`@6ax
zGxd<uUo9Jv+a~q1WIW6$7>w^<7tfiX?}>*ziMf#>ny1KuFX`-<83nP}SxBFQU<Em5
z(|gR(7X9b!1_inH=c?_aPm8VaEM3w5NgSD{J@hoWV&DFf=h>h{TSPIXcu>Q(7FqhN
zi>v(w*r(vx2>A|?0j3+X-(G$iC}gx(u&@5sa2567>f*|yl35VRABb~tpHxD7xC~gL
zf&xoMdC;8OX`gITmT<hFpTW3YF#h0rlN+QTF!bI<Nu%?R;oWePjx+py!YEZ7)d<ze
z<v>?X-0q2OsFmKLQ{h?#j6pq^U~j;<qSj#Xh1YQ!dXH(On*Nn}#!9p`ea$gC7Al6K
z{kesNpv>TFJd7u(9m(EpQ#Y*yGDn+z>U?s}*|!K7e<aJ0==+Z?=HwUSPCT~|tT2@^
zrrDdD`O9zxyQdgRj}|Y9=b1K@ld@E1dI3Vk)HE&?N`-<TAfBUR&w3e+D~{-2EsA%p
zqqID@=WnQK1|nh7^+l&|&<~JYbS#m4<bNDl((p2Y-(o8GrF0QFm3_STuAQMNU@bm>
zXsAnFN*=LyBGjD{O`vd(GvR<}&|_=D3Bs>x>%AF+BNRcp=9hCD_>Xg|onAObHx!%f
zrxH2-)*ABI;U8%m>HTM}2W|TwLGXFN(iS0;(qc)zPNz-g^vS;COF47JW}>w~MRa(t
z2S>ppE>8`tVBV!VW$}li3+|bF;(c^f#O3Pg81~hsijG(g?gx|06T&73qcME`c7z#2
z*&DyqNqKo%yMTyRphv-AHmXpqz*)k)*0ER}kq-_l_lhA4JNZ3peyhCL8hdD^kb~tH
z7gcJQs54dFBRDi<kwKY2Q#Se_*KU7qoA$k4NBi<I*&BhvVTi!H+m1Jyrbq7uE!XtZ
zoZ~bl2LPT-?wy4;M@6*G6BCN-7K@iyP!}$S81OI6CEM0~I;=pi{ZXNvl3ZgTcp>~#
z#LB`A!;`IM+8p7XGB1<N3IxIx+o)#S^&pf*pMGf>+4GhZ>yCE7kKVa|Y2-cL2r}f0
z4O^`ctIfP&&p1nc*ZF#SnU~i$tZ(@RS2VRs>Yvps=^EA0@}t#<wxc&rs7bm#CFcp6
z8QT6X5Ok*d*z?{s<)QQBr)5m8CMTmF7PQiYy^S0b=`&JgcA;m150^M^uJvqbuGR|3
zrcFAd%PKGK9sgo?r02gMm-2q&Ve-1!l;CW8t6&OFb@ud6?IF9+r`6HMA#PGL^}@Yp
z^+M9*k-*uAM~%?U<DjnLPfb_vok^{<p4BF}J^IevC2fgBOL=A7hbsFDMk5ADH6+{!
zUG|jx^%04AtGW+Z%8Xiq)Aij_aiJTk1Jx@u%BLdxlc+096RJ&o63pN^$PBM#sgRB*
zUqT;|rt0x0`}VFTBjp_{Jo7=b)tTcov%%{vyKm8Lzq<F$X?EAR6zw~3hl(O2g@QGw
zdNK%jGe-pN=Jh29X|C^udQz@$7ZP6BzW~v)%VQ1}%5k0xr{90POL|Y6s>W+dQIhC{
z8-R`D-SFnz=ximRJd#^@1O<|leeKY1uwSm5IKN6+T0WTn26sj?2eb5fopkJJa%Mp}
z-n!be`M~6lINzR)`Yto=UOLdb%dl#DoX4m26Tf<RW|2w!QvSpM)Eh_k7Blq5YHd%f
z4&$(SqxG+_q|H2SqMB52S>d}8h7-0y|3#3K?A%9mwVB`eCz^9dZ+Yg5`b_x$8sf9<
zFT#ainI_^s$Z#bm7Y1ItRnqr%m8;s0%k_qUBfX~cl=7VDs-*ds{@G_oA|I}H_m;T(
z70I9<YhH^g0~DD<vp4&DMp@CB|I)$e=<Bn0%uj2-5#gBOott6exNNWcr7{dn7TQ9*
zu922pz4GUr>E$>cu-K<@zn1X?*Z!3uzS96}z2TY5q9pMP0+85g^A09TlS?54KtyzA
zeZf4llVsQ4?b?12Yt@%w;oFzhdiS{Wz-hZ1!}l=h0O~tllWmeKm1Ig;u`TR3*7@!_
z9Q0+^<UrU;ERim_^Y6})$!(zciNP&D9%XF+VwV%!eudh3-SFmI@CRuwYIJz@N^P)V
za@MP!q_PsTb!^9*R_6%>wSBO5jfnqksEWH5rQqmsvyS>(e_0<-a=jo>s3QIL?c3^5
zvirVKA3o&W|5REGEa1498NyHNu+-cFF_e;gxrI%b9CHKEVz|M(yv$tN5Wj~&sNqR%
zy^`=G$F51w*%Gx1uxfIA4t+}8hMZ8ecNdJjvo%Nd`!qSJ8>_Ryw#$M282pPbo+ls8
zEYKwZb$G+l_kc{4*T4PPQb+PZ*!h#>%wSbG`Mxm4*cSngOEPC#v^rWH_7}`^`X!Q2
zIvZYr<Dvn_!*EV_dHRiv+DYdOiBrkTAREr9<GEp2)TA)Jm0##P_Woms`TLJ?GVec@
zChAT4B#p@724xcTCg<>NTX!#!Q5M|)q-rf+R=~#2iCY(=Jk!2=ETetbdOF!(>eBSZ
z3uh6tWMuZQT`xQjdq3?A`p1Hp-6fuSHES$*;W~?12QTpd|Ge(YKHUQ*{I^T=I9Lwy
z&+9p5I0$3@d8N19{#QdwKftv6=Ud1`#s42Pqgbi`A!;1+6#w`9`q{+u55vgeL@qN6
zk>8rU9}K|TZ?Am)4m|8{uef=E%KG0fdSg=q&);4ldoD-V!rlsR&#bTaxf&lQA60K|
zahI7{FUaI>z_fq6J;^)#^GY{TP+809d0(QSv~q<*QE4TM^s~y^OabSAd&vH1K!BK3
z-^-Sv<DP0`@O;@6&^b@%@g)*`wkUZ*B2jcjx;Ifm`o(huvKn1wTkr2XL{BHQdJ>65
zVo*ZFCz-PJxk-)<(txjdbtn|zP-rif+AwvJi0?#n-Xovfh9~K}r~M}D`v!7Po<y|I
zs@=R0G0hmk#LVP1kM{w@j9=5&2~8uVVrv6?-inEAsoh8hzi&LD4DQL*4(N>RZfbTu
zK8>0Qx8T*LO@HskVpOqhNt1GJvP&YM_v9E=h^pDy*$VRVS_%s9MBQx~ot|=pU3YEB
zfr=Yk^WTYjn$UjRU0G3Mv6A0g+<x@;!LnkOOoLERG(A;Su6CyC|GO3->frD>9i5-a
z0}-*e>#NBr7iAeU!A*@tM10+j0t3D_LH~%#%F231+>R6Dcm6C=zvL_RH75KB&4y;=
zw|Zk^W3v^{!VqP`uUsJHI<iQ>7Se9)QKgKH9rz>s@i<#1`4{&;<#?dGSBG?3f*G^x
zAOXk`BWr=q&Q6fW(=;#`8Zr7!c%mn3_`3Dv<&;)7o@0WdX410Zhl_}j^as*z(`l=k
z%6+R(y+JVySR&xoJhztbyTgzuIXm>NoJ3fn57(%`q92Fh)@w#N&4H(EXWJ;6Rn<wW
zXAa>Su@N7#BHP~&rXcn+Nf{zK=PkKnqZ)ky0VFnQQf2MH_npu7QZ^uXjNDsQ+(~qK
z2yGg+=xy}Y1Rv}!i)XmU%GB8I*yT%GLutmjXa{0o$>DlGztgv;fd9dy!5Y~EZl=5A
zv`^Qdiw!(E_bk*(5kdzW)Dlk9nTbRsxt5mJU#)$vfE73$NfHmnA=tR2fZP<Z8dlJH
znDC6;q~EN4{b4->SHNB}P+P{5S6X`ikNpj1c@%N^)Z{MiD4Hn+&?oiSF561KR-ti7
zB?Q*6mDA+gER(p6iTPH&zr6x8aHuyDIwTxzwR8s*4P=IEI5>p8d$)5M*Fe}XNOU4R
z($dz(PQe+6-KF3UW>rLtd|f;WOG|IAPJ1gTuo$@wQ1P2BEN<-iMP&gB*?Lf9v9PE}
z^J?r>x_eI}xP*@$(u=vcbx7@>JFjVEbah9vPGG%9zM!C_a#^vTq0wzbFS^osmJm3~
z_uHJEr4w|E@Nw(b1StVFw(AvQ(ETlSkG0gU9yuK~XKOiVfQBS%RBglB7TA+ZOJDz*
ztb2Qy!~?j;+Sh7(gU@kVIy$&_jF1ci$0McE<(TMp+@UX{*5k)Hl8GBl)Eo!;mdXBc
zseT6{?yD0b&xrDtX@xwQ?O1S5_#og--Db|_E`_02<CtP&sBsC43{)e~g}Qe9Hrz3B
zdo$;{Bg$N=R(;Rg7vCJb#(Mj<w9w&#wrtu!Pn8rg8;ir?`^1ihry30Ly{ozH410w^
zj3N&qemqKR#Kq|@pxXiUM?82;3a325XG#YU4RK7?xRG8TaEsV@gpldJgzxs?kV-@P
zKxVtmcKnb4eu$M$+$-;JW6{!Wt~65`Yhk%F)L*jqT5{j7K$5VFpc8hASZ&;Y&_11c
z{W42(aV&d0$eBC_=i1iqW+;-9K>}_a7uh)3BblyVTR~005afpy&O<)gxt4iAg;$Br
z-8j6>a2^jEJ9|}84I)qV1c6Fau91|s|IhX9v0+Xa94M1ppWY&-L~5#}pg>{BCq>j<
zU4N0kc<j2!^3_f}ium~I)vI99PLigc9+$j+jYB9nw#~uF1(g2orwF}t$6>K<YeY}L
z>>H;+58v|gRq$`uUXDpk{RntgU|fx^J!z7IR_xo1EMs!e%R^!Y(S0Hi+(_|=Q9y(A
zi~F;h(4Fc1H>arRu(fNa_3LaBQoXQ|-}=X(1T2EFp;#v5nhk1|J}N7@5sq&Me9c*w
z<Sgqn{~}HUA?uN4+C;Afre1<ey*UC_KSSq^8Po!)i^7p&15WuwkxjnF-5L~rGmWV3
zIq7Op>fqy3?|&3LZR2R{FxymEJc5*}QwGa(hhDyh$P#I(Vj?3yHcJQDjKqf$S4WEB
zahykw{nJz?%j*m4>-D2FwT!Y0a`e#Z>gpr|gqh7}>{_%vW8Dv=eUN{-(qiRYsOYvZ
zAdPJ23$ky0tOw`D*^GX@4XQrA*5eDcRKE%<PDk95?O5DoW#?0b5}vUO3CZF{U}sBE
zoP|kYA{LcV(a}}bn?Cak3vxE%3<`?xv>*`feCInYAjAD}cv!R8pym#Z@z&k}a0P1W
z>g9BF*x72Te_GM!En42*+2Rc0SZq`8?C|g~+l4b7_sDhZTg@%%;Hz~?jr-4V{Zvxs
zB76y;NPvmfWu(&|x?iZWX2%IBW1@+P&hp+|>{#5fofy3=jfEK??l5Il+WXEfyC)<h
zgh_=kh0+N;j@m*_j5VhxGxdJht1I-N-0B@{y(P6czlQW(LlnP+deaHo)hbJ^JW&!R
za>%PM_N`iaT^Cw?v@#8$AqNQ&u>4WbVLaVTHcZ>aMWNIW@}1<JqN)XZx8h^x9Ux=0
z5;jGGcDn2cgtOGb!opn^%Njs{W=V*^|19C#J2+qEg5+JX^|@-V2=%eV)$*9RkMHuu
zLLyjhe?w7mAC)yswMp+4y<Nmsu3wI+@C@(j?sglaDj_fNJs6E9<*^jOuALk1&2#6G
zjlL@KgK90ZOP|jNq-V@L1PYH0jwkA3Ftky0EuQcl{%w4RiLCX8_q1AblOOmqrd$zr
z#zBmynO*vvh{b=V6zPXY+yJ)BU%gULTgjoTZK$8q@bcmO8hWjuxVDF*2D-03>E3To
z*u1Sm8iQ;D2cp&&9{~XYU_#YBJRq_wg2AzgmZxkNcJ{R@10cF*N<<=%9N(zqqQtrQ
zUSKexE7Z%~=UJx_)02G?UtioR06GC2#|oX4|I14a##gUh%TG^tPU>xbD8$RlTV*|4
zU%GK{ARa2}@qTb<s45`fW7ZGPO+wO6EDP6OXS#{(jePE$06J|+aF`CzEw&;*FzV(f
z$%}RCI81$s`&63F&XFV%`^EkH1~m>NA9!Ymt88_^B3SFrs6Psd3uC9(bQb%pMePrO
zuq?B1C|KGdvF~~_)Co9Iwp+Iz7}dKWU!AqY6bBHctEvQ|vL2iW&Vx+*vjM*F(~Cgh
z%GBjUVHb_-Z0f2VCOPEw5hkI>U$jBv6Oc-=SLaRIZ~arg&#SM+ml{Tx$O+zp0ka53
z*V3lr+sE-TSKp3uAPZ9AM+_t)S84)U*wuY~=y{_Lo-#i^A|ict($@yPUF^K#U$LOm
zxowr`UZm&a<6|Y0$@+AGg5m=+GmFT0AIU9V?h{rF2*Bt;1uSy_$l*We$i#0&2ZR(%
zo1152k%cO{-fL4(P^rhp#+G3tq%SWo4{~?#bLY=L>}oWIfekZY+)W?o)Ke#OVW8Hb
zFaWWsG9-8!B-OLK<4&HiF^1`YQl^6Z{K)p%fl`wefoB~T6;%2)b7QW|F9`OfqTo7=
z09Bk0bOA^SJ5g8h?%g>OBw^#btr!pS&~g$>piR)Pp1BSRFw8A?H2Q|andA+s9fs?o
z@8Cww+O0O@LiNY~97e%Ct2gv}Mt+MkZVEzu@MoHWs=Phw91>`O8HqEYDY1wTQPg!<
z`f5VhY*ER73VE?wzbM#UuOYdo3hD@g{5{(x>W@@B^Glu5vf7>^9UXRyeYTeJ!zKM8
zQ892Ku%pr*Nb5Yx&UQZ=G}@Nt6LjhF<tn=|)1j3wrke{CQCS+wl16-%(2E>WwlgBP
z@LlX|SI+FZ1MfGt?gb<{I9R__J1~30K365p4mmQi1Txa6rqjfHhDS?%9&6m?uF_!X
z-qtQL%mL)T%Iz@8$JYf*;)iMY#R+*A^=te?u~-{=JiGDW5TBN@8rSqOzGD0;QZ_dB
zDwtU3;@q(@1#5;*fAQPEp;Or@4A$I&WB4S`$5Dux*1GI06f`v%lN^)0d?$f`gK6q(
zXPmW6E>29ekq_k?TbUxR*h2R4*V7vs4EKosK<dav$P;8-&e%*M2o^x*qWY(;W|7w~
zGffyNG0Fsc5@M1o`ZetBLj~=ul6xI@BW10@F{eDsJpWW^GS2K=Pqmk*!i{%q`K%oA
ziR1DZqoFyfla&6ttNr2P#V=p_kxWMO{iFnn>m%6E8sniVDWGNzyE)o0y?g>eG*s9p
z3;5m2r{Be)y!e)<L><Tx9E1_aB=EbN1e;Ym^JmYjfbjzR=ru_m&INk8N%d^gqbt2S
zkEi$zdVvIgaFxfT4Lx-D3_Z_QM}!Xr1zx|&G+$Zx@R`K!C$sT#^JwMkQV$NFSD>6q
z3=rDwp(4hfN8gWul+2UBQ<MYwxv31=+@6kM$6q|>YFgq2Noqw$#QtNak;XV+45ZvQ
z<a4nAu?=j|rsV@cFQ)ju5NCiHAGLQ6th}f3YE1oB=wv`bm@Y1!!7)bn_8xK?G(Fni
zzWNI3I09w^GfVDWkQ~y|j9~}x%re!xT9UYBCO=qqyM3uDpdstsI~M@Jib<G{c+^Bc
zvG6WdG0>jk#yvT>E8V`Tj!rIvgpW0-b=dF{7oDFQib+H0fZZig&yNLGT7s3GmsNyi
zn6q2Q>)k8BDIocTdY{;M0e>nZcut`wOfqqNX7rDLj@eiLFU%Y}AX#h$Kuz_7Itxa>
z-ID6H(Tp|7fiy_!-6iQ8h%bF+i&6ah-I!**5hm+_j6K4Tv?su^M#YTA9@#dwxGlt<
zD?U7+iH?^~uYoxKHrRbd0A>3bV`;nW+>T4i4%zw~5`dJZ5@#4hSf=@^*G%}qNe1P`
ziBq^1)+4oW5Zn+IxoRfc_ScRKtW$>EM!vWTSZoOw>%rCg#rJCu-Hyy|;Yrm2n*qKG
z@erTvKB=|iy^wo4wj(9yY#pbYj+27ezsl%37a@0HLJyJzVW=cWiS%9r!L}w1!-Bj#
zRdw}UcI(q1`{<4vIT;|i{z_xc_J{R+!F=2b1<gIVLR8TpZLZ32CresR%-l2R9`ebG
zy$>D(YQ(mp3;lDjiEQ(WE3wb+B5tYx(+Bo892&M}grc>NUI69fkRQxwJ?}P_Ej1X?
zEFA+9qx51m);p<2%}pg%K1dsH?*vlV5u2=86ceMYU+L8ZW~*G3vLr^66lINa`22HZ
z$TDi6iwxf441XM-RvwQ<z*P6Quf3kDP5$xB9cN$vSfK!KD<wv96z<9^MHw?0Psb82
z_l>MMAY@5385Vtn1`1!#rP_sD6iy1r6nJKy8g~qpe^zW^ob6)Y3U)$730M`A(|(J6
zDafy1(?Lp6$KJQm*nKrQ2Uv?e&f|`N1yfK~R&x(Yx9Cr8<i{j;`s_5;7*gH;t*7f6
zIvTe199(?e?)-1hp7ojG?$5XEp8}xOb^hA27Ko+<yf<F6v2u=p5N5nSB=|j81+Q@|
z7?xc%gZDuS!P9b}qB5ZR>FU+_i#QM=$s+x4UQjhRe{C<3*3XjGf9+swc73UqXLbv0
z&Uhi_H*RKzgNNr9Sjjs*EetmVrT$=CK*8doYpN2c?Y}$;-}$N%;F8i7D)s<l#HXpI
zRstR$135a(-8jE7Uhf;65)*TUUcm1aus~z~3gVq2$QcE7LG@i1dqGT+&P{o2{G`E8
zlUC`C>x&?0^L785DXLUlC+{XDF#dVnhie)ev;M^l5uWNPDHQ|jLf+z*TKfhh;{N$Y
zvah#vdpQ;*-VlF#l`LK9!vD-jF#wwNpV$51c&n<?lAP`TMucg%fFhQEUjK_^-2Y3Q
z-v3%Nm(VsXvu&yA-CS_>mf&zzaI)F<-15j4Mnk}Uy#3tC<Mznnysb5%`zl~nHWZJ1
z(zrWQVLuowAKiyaK_FDZ#eEP9JqhOeFoPO~dIAdy8>6AD^Z0RGSC>NN(`IoZ4gv$)
zHO$@IrunDD$tY6=6ZBR$x?zK6;S!lVW?`s>-s_caW2X4!F-4(iw_paJAI{87OqDV<
zH@p{M+}OY)e+Koqh!1&v`S}WpxWUJbE_Z+n>6hAh$JOv-f4ssnSMuoK@=E7eaR?XT
z#UY_b5lnGTU7^86H=E_r%L1-#enx%++3Q%*-#YSTF1??_vxlc0OThUTOZa-=R(%~b
zfP-aXWo6Z?nchB~;@Y=I;%c@=5XMrYMj_)RMq+NAJN@zfi?+BDUBap-mp06}5x?xJ
zVl!SD{&HUG;JX%~6)%LHkYB{jsz}<kF#Hy<-^U3rnbau;IK6H#hB5dqzaRxnApXM-
z4~1I~=gn>r*B~Vz_|=e1<KFcd2xd6UR2E&olH$D}QUG)O+Tabr%<CAdDk-^_h5`df
zT((3EzT)dsN0rcyH$g+D{BQ!$&EAZsDME*PjIr_Y)`a){Zg`avEqVF34q%&%s4TvI
zaRaH{Ln;BQuNU@+$2bkDbzw)d=JSh-tO5dBX?_PQI3>%z53p>-Yq%1)qeeJ`1ilZg
zv4zRi*y^cJksCa+Tx-hAWJ3v3PV+^}^F~L!y1&#|^QvHr!6*99)}VJ88E<^V379fd
z9lJM;^si2wmUwgXX5$V+#FX#xW4F#?_%?|=oloV?<UhG{P*P>sxjg3EUm?{0a(7{B
zjXkhAUF;OO8p8jCR*9jvQLWR1kobd-)<bvT58W}SZNhH+aEZNdmGzJ@AX4<p-99!E
zJ)+drOM=$Q3psOND#pe!(T^fnTDGVClk&lcvWpT7t5K}-V3RdE{5Lb3iP{8(c&_51
zTop{s7@vUSlw(wu>|?2qx1=A-MWuSp&`PX-;q!5suv(df8&HR6Wj>ZD*j^FsnwC<H
zjI`X^<Q}SY`aW?3@|z(hn|s}9x*o7%;s1?KMGD4esf?M9Ms#nbPC97FVJ?8#^w6N%
zZg6i?tw1d^ZoFzGuihQY%Ek4#!h)FbVUz~H;u}mSKt43n+L!$>^l|hZzk6yc;~rnT
zV!JE-i8jc54HbaUkcTIH-3eQ)@`InmRyFh0Z`s@!(GB4EkV`LCjrsHfiXCP(<R;oS
zn3|gM`}V;^y*Fy>J=cmyipMcK)0UkMHSD|_@5d`KH{}!Wedn~FDwntHPmM!jb8iI(
z<GwXRL9t8<6J|iR&1SA6*ll@NjnlZ{{;A9d(EW*z1zLr+^IhgqbM@7aDWu)8!)G~-
z>hCu<XAggrzBaZ(DYHDmB`;Le``xLwk5o!dFXqA2?YlO+k{L!1FVJ487xmdH&B*Lm
zjIt9<>PrbxH#AJXLD}vO8+yiTJ(D|~Cm+3_U*?jpU80|JZk|0a0P#Q+N{9(#kSMAh
zrP<rvEqENNFY4rk@IP3$T|pycfqN#P5XL$+KT`F}pM8wuG{_sgWzO&QRh3@CN0UYQ
z275Z?Z)5bl#{t{p($v%hwhBdsy|G74E^6xMaWXM6wQN^JTH=9bC392vMNc{mk;GeJ
zQ3LotC16GjDd=8dE95WpTZXy59q`_?#1(S0;12g?ZHIF3C9Zq>`_@~xZ@VAts-dcv
zmNpX!X^aA9ZJNw??kGg{Oij`8JLR$Ilz@8NaGUQLdm!>m1Hb0H4q1Tg&~?SK!yW_%
zS?_Q6`Wzmm#<hHpV3HsXZ(=9mh|ixBtrq*}ONcc9lY)BOc5myD1zSSp^l%fDg~&g@
ze*+bF8Njx$;Zpv^zN@s^Z`1rU5r_5ZfB~@T9Q*^|;AkdGr&S*mW_Gr)&NV>8ZOa?b
z<qA=iUh96n2h)r;sOmr<xGdu7ZR_tDQh*Ym;?x)BZdvb5n#=)n2U8)>s1UVq#3KtR
zgn_y|K9K@af!}{!8(kmL0#8%X<>(=}REzc94be8pf=q72u3F$}itb88^V0|>9WM@c
z6nb$@F<)V@+&qLy{^Q3`W_ixUniwXaLb}u;GT<Kwk;iMDi*1laoFT1P(QUiAu_wnW
zq>kQyo$H+LY;TtZY?ZbbD%EDV!`mU?=+fB4>z+gbxYDV>2a55Wolf-NdkoX$NQPDr
zvBrLKh9C*H2g_AX(NtA+`Zz3TPf)4HtsYC{$K0kDE`<Q)9D%R-6$!N=xGO~Vm!J6^
zT<uNe(*V(^RxFzq5-ew!bZ$@Kr6J$g*+G1_WEA(hkH-lOXNJGm($&388)^*j9Rg@$
zKuO6zNjow!7k02a1E(QBWU?MVczR7`SPB6CsIBJx%Ybi6nD4O#ltH}<v+`AT&H7c5
z?)bu+^6$dJ`bvotbsgj|ZX<$X)D_h~??-8tKa-aqbgZDZ@Sghg={_^l7saR>9=<s{
zg_`*V0pgn(bo^FKNxeBhabuEWm@qcaxpQA04@?%2P3bL_;N7qb(jUqmSLbV}9#c2x
zH}2)3er6x#h8bigJ!ZvXPYjs#B&#>oxNrOAM`X#^a>-(oudMaAPh#_HkcVYuJfePc
z5nwCQ`LCfkuf<6e|3aBFb~*qsybL8VG0%$is|+Fj_<Sx%Q!)<sUkU+!dY;^+qszs`
zrQLt%T6D+nM}nkRKn4>l8=E@mg_#-C3ULdNx3!sWssQA6_H9{8bFY3hx`>iqlvPmh
z@&3+Q=MQ6yI&Hi;r$$Z@6YCwpwmpG1+G?NGI+oa|L>|98^4GWwJGS-P5QilSF=qxh
zk9I0ORwr_RH>9BVsR50~t~l$}x$Q+U<=c(9&{oH@FZw|-gV}~Duyh;TSZ27LAe@?e
zuceAp^6*{Lp+%I>&MIuY3TNR9!huP*wMHtN=Fi@Q^>#<M^$fnR!j7xuH=zDt@`MJ=
zGLuY^$4WhRg4GaAim1+Kg9eU>#6sKO^x*kK2a3075c$baQ*(|Y&?Sn06P0FOgT~LC
zhvmCr3Xcg_j495xNx)p@*{nt!5qI&4p8zk{$jfng9JY2}Uj5M*O8LPN`@ZZa-LbHA
zFb|xFI%N-KVmS?zSy?;BjAiRwu2wltJJ_SE<$)grnhJaY|B$~2T)L@AlGef>K2mL;
zH18w~%yT?BAHp3=!^OH8RW1}YH13e4h+^>B9=m3!h|0lHPf16)32wZ%HPA*SNaCi~
z5dAKH%wv(ZHys_*-ZRcQ^-Wlo=^G}2Gt9TX=Cu#!Yt%+XUBWM>T_hZYgvSC(t}C{1
zfuR4J4%`&l5U4P$udUUUAdC`4#yxjdQwWE_-1x6~JOt~F{_!%iB+$xmo|+lhd(swg
zONo-i+$ZfoxJ$F)O~X08*EMrJBmnpHSj=<vYZ!fB#Kd6sdH$!Lo=S*p>miFZRC4>1
zwTV6yz!q8pGoq>(Z_y}jTW=KbI8P=7jUUZ4b6@DO1`TLem4C2and_WAM`2%tg81sN
z>u?Q4WuNC=xlHS=U18DtHT^*gz&DK6vR|~31$sKbI1G%t7hVBeWZ0^fgDpHVUjw0&
z>3PTI^XW8ebT#L@rVGUdS_S$3#Grb=y>fq|`{QcV-s0*R`9YHNe|>(j6Y=OQetAGh
z<HGtdCb}HGLMLwZ0icdTR*fbNJG-KBP^a|b#F}O(U6tD{LW6#l4SPsy2FN=u{x>;3
zp$<8+7222fT${?4@?2BT|E6AGQ1gQ1P%0uL69rdfp?Eygn4KW1Nx)`U9bQe3pO3#h
zA2E!Wz6ng3es>(_;OWa#E`L-ld%(4eblIeiF4;`hr+^d?OGs;h2;!&!hDf~&pA<ol
z0k;>^^8M@b7$4s-SYB!o3sY4C($FFjD5_j_UV)Q9Vbr~jsLvo5w`v%}WPQ{mQJ`7(
z?(@SWa0Z-QNIXZxzpw-;f%YyWL<{)Rd?j2MaJ)lB)BXdCX#vXx%*1g3oIjeiht=9(
z#wuXo+@7t?{-aK3dz2VzT1H038t|WNS_PF@q<x-`JFdICTM^J5!|=7HoQ{r)5@<zz
zUtXSEikPQzZ(_A7+@sHyFgHXsTw=sxbbxyq$KibH^z1C`F5y4~S!|%9l*m6c!kKgh
zj5)|!X=4U&kqppy<?7AOkC>yB3|hXNg{s)!l~|UXIj~!F!swC5=N8|ky+z{zFx3mL
zvd7iJf3IeEeww!){@Z8C$j)8=cSu^MGZ%028v{jl6Y=jLSatc|QS}wyf7f5M{ub?a
z4ZXbgcP#+u!~L><mvsD}H~If{Gsa_$n8h_%dQ>wn9feRKX~!#YrR$cV>Fc*pGDdGh
zx;>=YW`4f>{Ge_?*Ra~84!j+#bIJft>U_5F&%dSDZf<O-t9E|79yCuA@(ccLEIu}K
z9^-1U;iscX{`<9CfD@9fXyu{)MXS&Chqld>Q~aysM)k(OxrhI0G(bQ87e?S*Bn$>q
z_#@uMlU63N^O-up{u{gr6Go&Z0%T-&+s<)tEG{m>f@MPo!l#u`J!y-W3KfJ_+7uBu
zfBK0tYva<cmfY^(K(T;;rCBP3>ZV1F`FO5+c2|PrY>50c4jDgP??55tC#KXdvG0<z
zVvlzFIx(iG1=pVRGiLtlE@a<~Nq-0JXd&5<6@CE|qm}}m+v*f_!drKAw1wZbe3%9+
zd9ovSBw}E$G3*A$o}o0X6=R0?wXPO<P9N&dLVUUV+r@4S;$Th1@Kv95vcjK{aYx?$
z&n^H2GB)hw`|Mz0DPaHA07T!{){p_8<w$3rgEHrY?IY(6A;OPY&#jdmNSB=;smJQQ
ziB;z_uKem<+=Zzs*&KUG$tD16hkChBp^%l<uCHGU4)h--#lbc!ZPD^6Vz1emnX{j>
zfh9^FNf!MH`7cfc-MyQa1^+eht(q@h&9Bl)s>iZvk95NhH5da3sX0eGER6)h`9wiz
zxsTggrf3z;d^BJ-#~sk?Z%OEw8?n)_>=EpPUoyCm{j)n{HLv<oKAYEDbaqwSi*}fn
z)#m^CEL$hsU({u*R5?X70k+9+J*au{BKlljL5B6v0)7K%E{bb%^6x>-Y1r^Ro;i@$
zmr`$yPmCqF?v#+P^(GQS6k;jW?%)6B9)1KW*-}JY_2;{^IviO=Ecof%ciu#vqgu;;
zeu>%bV3!BF({inZ&>h2Cc=~aewyu>%La)Wjo6!P!h+ol%58WlM<nT={{EC<=H6&!A
zH;t3KLT_c<ZMfrfuzXZQLxUSQ2@NbxaoAYjMm7<Bw}?~_%<kJvp%u}eU`JIPG?sHG
zG$~(ZGY+f{O0o3?(OAjOVTq;_YpDOOvw-#BLsk;9_ij9t*fVHtYm<vw=rb-jdXiQ|
zz|*l+s(nyS75}(%ry<|ryTovXFJpGjIKI2bI#I$h2bT;W_h8^oIH((~x^n$`p-jl4
zE#ZBBIodudx!c9K&P67k%Sbc6Z*mJ1eB5PXdPEgYml@1hr(=1$UoHxZEQXz3QyG*^
zYsfY4zBa#?dZm>|3dl1@N#AOHP>M<ZPPF_`PTwHF0$VGd5IGmFBs6D3JOkr?L|B?I
z8zUp6_k*OY)X@f`Qj(-z)HA^(WV-)tPF-Q{_MIdBzHvs?c&^ELOZ?E`iG9#O8m?oY
zB`Ue%QW%YYxM(FV1Dw)9FX^H??YCb?$uPbsDhp&o$7@yF6~mfa5t%ChViNrd5A&dY
zT3)MHrzjdUjEyZgjha-!VHMehIoBr<-SOPGj!0>nsb!De19z}<`sh!wyD(4lb^mcX
zUR_l+!h=W~iD`WG>LgSUBW*uczh2*-^yE$~n~^>b56>PabGr|Ix$vXsR58S|_v@|@
zWTX|rwG<ma6^FEm1<>_63_$|ESezpZwxVB3bF!XdYpZtAuzhDuOm1h2Pa#Rr@vCK8
zK-Rmfg?ZBZeYBEh%d<zS(~>9nXBYDmw_0U4@aqG<Ae8#_33vMR&;C767Iw#GZLdrh
zIvDxZSCcSnC|!_s=iqDFZGogl{K)monvMEO(8JdD#EmpYWX9Nv&tB^~?KW=OGhNVe
zDqV#|S#_*@p8tE}+jHm0NA@pI4Fcu^|1~f?-?X(WDhmM4r4=E`h+d1KSK(90mol6D
zexr?a_)kmZi+1B#2`^tNV58qME`hU`^eZf01K<M?7H&LOtFRg*N=Jf1Z8zLi-pzb~
zygql;yiC_^_s0YIs9p<=M_&Yixo}^(Og;W6YFN0Zt{8;oz|I0JbO$Ag#|gxYEf)jh
zB-gb^L{x7d5>MH#PUsP~D$Z`~Y@)8i0&W%}+2noPwsa|$gme*yf?&7X{rVdoNyfhO
z_5j){xNz-@IV?+6`Sz!gOc`m4O6)8v7C>MhaeN^5EiNs+LvY@x883H_Cg5rFz@*?C
zcFNrM+#0=zEYaGjNBxv=1mj++UdgL~v+{sOu?q`7d*+P#{rm4Zs6!r;!&UsXr9kHB
zPek^d?(2=%7=X~h%wY#P{Qd1UZPlmpfLQJL?zDto=VlXO)*BdD1nX9@0;=H-jYjP|
zfQSM*^|AjB^sYQm&+Mk71t}0+L?x?WJunkW5Pu1^&7%*u<v|xSb5w{*fTbF4*mHFl
zuli}r)4c#E_ksaBCl8Lf!fwoWpIaN0)+za7elDfTdQurc(g8CS@$_gG6}c!b!#5+g
zu!drQ@~~gt&PHW{T?Vi_-W5#p6m<Nc<`25H7taXnwT#+g#_-1WNP%8vj&ho0zSyaW
z{JFVjjrhL8ccGyJpeE;vA+K(uFU8kNj1)%U;Htd(lPB+|d=|CFRy=e--PU3L2q)SG
z#94At`ZadBASrfNQc@DKlX*96FP8jV91{_bl0j7$qro25JS$f&T(}E?K!DyF2dqxz
zmzL%v^6lsV&CoJ5ETX(Iu_l@$KWicCvHZrCx*>V$$SqqTRvVZh{&^`W>>?ybK5Bby
z`maeBF=+07@I_52b)(pVxE-RLEPh9RgVz_6eXXrfVZK1r%L)-hS*IxWXSK~t*4d~m
zcbpCmh>T6IJO<|q97-EvJwx4IkkhDI&g5h0)$zMe&R^^8UMKDY!>`9dy+<IhfoZ--
z@zdo*oY<r6Zq0c;cQEwORb>58EUmUlrD}|SHr^WK*4_OTJIk(u5;WhMDZ+QO^>{tB
z!eeFPqkyeW*LNp57h{cfN+Zoe3;I}g9b<RgaD3-n@~eJ3!NP}o@4)m)!1)O#DV?TV
z)tVHgV3G&1MqKmLuODRFF#`iCwcC7jN^Ax>2TE||pMALkDb(RcEd{sbX|y}_?h$ps
zT3+cwZEhU}1%)7@%}5?7v-6wrOz2aqe&P-20$#SkDhXCrP=oQd#5FrOuAvbMZc>06
zZk9f6*j=kI7+0J$Txcn!m9MVkyR#C<lp+e{l?Kc?i7#v)eCU68c&tFTto)A3-Yv+^
zL$*XS|E4Btd3AM{a$7X`?6Z3`SH|<oinI$eGXBKxPw4q<ybb8E;%DQi%m*po#P3b7
zUkeNYR<Hym(s-n^17ij}^rWvxUA4^P6!$--nE+X<Z1PbFnd=z<1oXfiCv54-=j+>z
zLg`#((;O_ns%W^6Uh#n9d%uvUxz5b-WRKffuc5EdLyeo7MhqtrTfyZ}DCaLIfB!|d
zr|v3P)eit{)WhonAUWvD*I-$u%fB%dTnQ@2?9olFRm4I^$)S7=me}N|B8^<-+SE5O
z$%=r!OG9!GS?=i(jn*ugc~~F#`zM5N?rg?0wXz7ODNA@+r9GDNNgJ=WhXql51~EHN
zz3mq$-Tv_Hax^_*IodHMCYh86wFa9+042@?h>N{b#Orpaz*009GcytoB@E@PHAzk3
zD;??)5cXfnrK2+gvmypnVX3Dy+QS*O5_rw4ygENW+0PEw3Z>tX%h~Bm3Gb=oWFhB$
zwl0G5kFEmyQvl^KbKkeOzd~~%3pgo2Ie)L;_ucpadHB*bsOI^lV<q<2xROzCFSlO>
zHdnh)3#9WkzVy+T>lWFJ-qftJ83B?(z_)AkiwiX1VE~Bb7FNw|9Oj}@C)0Wqxx;jb
zgiyd{GLk9|M;vuCS=z)?zI$a3eCVZ(VWmmXq7bSN(6${<vz4@@BklJ{M%JOQoq1j4
zX$`u{uhq255v2xvlZBV#H+pGgO+P(|R=Z1~fC(VMB*1{0)5(dt?LNOj8BD-mpQF1U
znYGaCpp&nj?f&gs6K<qD;7Ibd;5m&@tbh^v$(?8rC$a$!OHIv^Ssq!4RIPKF=l7hl
zYustR4yp*^H48M~fYH`&IYpsW@AhWOe^G#hEkIZsgS2r@;bvu3yT<jX(1cisvbjg2
zS*T5q!ezEoDn=a~9FPnNy_B<Nq?)A`%mGTPwAVEMb7-D3k$h``c2&@0iQNy%$-*Up
z!Mx!q^ddgGl)=)h`K%>n1)2s01=_`T;FFQL{Sp9yl8DxTqrzLI01e#*Ss%cccW;jZ
zO!#iJ&Zt<wTB}gozRJJFCOeA>;u)aAunG4Xs5`LfjB2K>c0@PnDbWdO=vrM~87<Rt
zb|!I!>8njR|AZ$w<Wvm7f;NA`rN<jBb8QVA){elbLvw(KDmD3FYw-G9ED2v|728ng
z6>C>nO{r_-9Hy`N@2YplaYyxf2;BVu+!Y`-hXK?=335lvtGxHt2R^1}V;mMcw6DWf
z8v_``*yQAx%*~$;XYO$mX%l$sqm-hBUdJKeh0}p@v+`n#u)`&VXh+-Py?~xh!EYYL
zfGy}vl9Gk)ldC?xpYB1d(=dP7m1i5jDhgeQq2^2tm^2I6o8~8_mK+fx4;16L24i>G
zZM+R^0U<1#7O?kLT_fd$xJ3Pq7QpHFm7O%4-<Aj-BXS>DM%i%s$nbDi*0%r^*!0%N
z+Ni=J$15GuzPldk3hV4lxFZ-C1Rh@$t0^=>Q=TI~qp2R{O15~g2X+IoNnr5ab>8#Z
zUz*sHb3eaUOd?rEoip9PKXh|&{8eTYA^)Y%{#}?P42!f`3JwTJnU@3=rz1wUSBF42
zm3j0ei32{F0}q;Jadc!XHb97~r0t`ZkMdn}O9-g*Fw9OJ0%&a)7Fm(zpC+UTJo4m^
zU9G}+%v+xR4v>N&1h81bVJzW$DWT$-fVV>y>4~*$lRRSBF=;S<fDVH*0g6m;QpD?3
z7`;@~cf-)@LdZiXoR3335xvg{3>~{R7xKr)oel>@t*zHq6b$@N9=vEKV3SC76xvUE
z%-!v#^+3i+TTV_dl*U6PM=F>l%}d*iG2k)qfca3kvJJAlIF74ZJjq1c#pj5`4ucb6
z7nhQM>Uo{kO_MrcMTnbw&S0-Rs0}(NP$A~-$018)+$Oiwz-O6F7ig1XQ&JXy*T@QA
z2)GGsrsRvw*gIx|b(iOuG9qAM*;-<Ad6v$5?e1&O6|Rag0~Te5A^2K2DzS>)XrK6F
z4Q9?y=Qb^oIR|KP78M3iMT5uy`8@e3Nuu3La4`HacdKa`gBtt6<T`|PNBYN-*?>dy
zL_a^jVTpzsu=*fVM)B}#0kRvpu`O5vl}y-u!DUpRcS|~mJ^fL77^76dHDf|BKmu{N
z{hwft>{+WrjqTWm3?K<><G3MF^OC>|`h17<TWv{)<H}^yV&Xfq=r5x2tvYG-FD>fa
zfp=-#-H^h6BWB{4`Hpf&M|FF5y$f>sKO|<(qF|8Bc1B-)K;e&HEaOB&CA@q3zdMnt
z32i_i7PJzu8m4M$`m!%sWJTW_&~L@{u0PHI9+|nN3C!xD#HvDGyY6mcny~dtE|8A^
zHRq9OX=#)U6EG?%e^SX~RF)1TKusmwSDCv}*f^Myad6l=TEJnsqGa|O=b`i|T9Aah
zNAmZ;3<`YDtf}&xPR02zR5`dE0TNlON<jc5NQBxKf7xRS>CSKEC?ngCF318=PcE#*
z$Slu6k$?TAfL1)A&Jv=Hw-MMHy-ZbG#`aSWuE>~o#UMLp+bbp)wdq3mk{Si(r=@I>
z*m=TCp~|FDn4-!1JtPdJ%Ge;JW|l@*oGDASh#if3(45G-cTHmFvj(Ua&`GuZaRutL
zgCg#Pju1107OjFF{?+{RqGv+XIyd>cCv8^g{L=_K*Yl2^?8~#Lq^PdwS0SsFe0!7e
z6>!C0MAExT?c(tQqa@05eIox+`1D`558YdttTDg|6%D*G*;xX?Wk0ekv?URMwFjrS
z7yY&cRm=r_ZGU|FPFU;LINSA?9z1^t3RAql;c$f)TUND_1nIA+*S{wrWKaahzk-nJ
zw5X_qi~o`UPY=i9GycS_p>U~gkf$UB1b`J1GM05pZ3jQ!@h*6|ZRS4<$X>tyd%2mD
zD|kA~hR&*=Z~ObZ)6oAZ>j*yizrb_-?9cz-2+KMN4pg0n5Qz@(q-0oKRsUOTKmTuy
zi5HVPD3eXq1mRYt>!OEe+^?Da>wR|@CPXVHKu%$6!?qvu`Stl#j^8rVWU4)N0vt82
zC`wQNUnBhMli#SnkNiD!f8SInFdlxs<7^=kyLw4H3TdO}=l2rcO;*xvQzdr^`tHwg
z<JT<dD&Nm8X?PtcTuJ>?s!_k%@cF4J_gw#!jS2wLIF|<B74PnPdB&4HGp*9cC|zO2
znC)#bzq>@ZBy$n^HX|tYk=i3j#@!6=kkeqdk-u(S`<lGo@q;Fjk?!D=lV|)--%Ca&
zboCd@{oFwAX?9#x)^oO$2?Nr;>7;Ao8ABO4`_Q!o`W?#D=aR2;({=vSFVe3a8n8sB
zG3Ma+TffS3o*O7cp6MomXuD|@$mX>=vnu@wqvH{rK37s-{_D9Qjaa#Tn|nM9QRh#d
z|0VGLcHW|&x30MqxEUfXxmx_Uq#ert<f)hl{W0e-<-GQdB%O0US4o}vTUhVJ@ddYu
z=etXPJzH&+*CX99<_8-=^MR_v1DQXrY_W+SgPv2lpZ59k*W4dh_Apw3%@NceHcfk&
zubrX(^|91&bKRf4akxbp>?+)`@WaFP7lTUX<mwH!^%Jj4@|+O+YjpnoP~45!h~~Y}
z=0~t!{jSaapL(Gmq;&_-7bX_}cfHuIEKQcS5YqY2n8nNXaI{Cmz1tfDNe|Dur1e){
ze#wG$W3cd4puCHmM*_zEr!dKCuKbrCj1F1EREYd1Z}F-4^)C(m#5srED14mI&@icg
z-l>=uuTT&FY2(SRm;ps7MB2D}o@MB?sj7vaylJp?SNxC0|48%X7OS|7zYnsc@K{~?
zx2McsTCY5kZ)H#%p>BfbZpSehiTmi~R;RhzPvdb9JY#>h``onc_TS4z@6vb#*UUvc
zi#Ry&JKO!SV;A@Ay@EESsuTYHA39WS_EZH+Fl3s&r<wWBXS&NJ{^$Q71<F9ZQ-OTk
zmiz;2cSRQvrELQ6<PhnC!SV*1m3Jc_ud+;P{HkkvN0A8!dpoBKSM0`X;*P0w&Oiny
z|6+opnBbGLVU=roJ~T3^&3oB<5_qk0{pY^F^2N{FH{T=x9REYJ*k>{~M<Oi>RwLaV
zus1vjUL+$c?-YYx)!vIOt%u*Z5&?K;45P|XT1KA?CKi?2zjc^2E2XMyWro7#xvKf>
zM*14T));uyp*~a*OuZ>m217Y2O{<mwQsy_G2nM<E4bcEeh4a_?Q6LK!Iq4A31Qo%^
zDiJo!R;C&?xEpta91z8^Ou-;M4iH|(+h|Fk_Q9_1AcQrx5h;k&elnWzrMt6El=`O#
z<rXiRh!n=YKsS8DI9+iE0}4j4N-s&<Mb2itI#aN3zxvy|<0Z}0`9Da*OPV{8C}RN{
z^73wu%;fIUQ-7Skw;Cla<6So%Mqh9Br4*EPZJyF9)|cppK780^)ibIl>dv;Qo-_H`
zH(#sJ!)F5{J6DRvW4j%32YYu(+Z_%yrHHu?P2OHbWpPW6ya?RaEPKct>hJabrDEJ*
z&2+#m`9yKN7)WA%aqnqQYs#HxkL&1urtam%P25Zfu<jW>?dl#%DWX~66XDZ1rW_n6
z2D|0rS=qOC#ICdWa~gjt?)^*2yb3;%1#)FW{{Rm^(K|PPTi&IEtMe`-Kx&8j)$xn8
z-j8Qfy`OL<PWux}4KWu|qyi+ncfk2^#c4TyuqCU-eJLg4gO;GF6jlyP-UPQJC>5r+
z1~Skrz0WMq!xN8RFo0Qo`LPe&`m-7|K%i9E#+~WmSaxUHFu>we+U=Q2i24+fp9%!Q
zs7u$)|BI`y42o;%x*kX%K|)Ay*Wm6B!5xCT2e;r3L4&)yySqCC5AN<Vxa)h!z4!U5
zzA1`7Ff)C+x2(PP>TVxwo8M{^%DO(L5>Z{y(@IB;PG7X7C+0QBS-JYpJ{Td}?udu+
zBK@;cz2PFh+rTA}%|ic0;@=YGnDD{_1nlt8E;y`E?$G}WYmH#V;C5TG-^LX~$8<oa
zW&EVK1E9F8+<AdMNr-T?miry`YXe>+40qfJFp<FMet@bmo0?j2chz_}S$@bjRVYu~
z=Ta<E0M3rgq9lty?&^gDxZ-}+lF7wI5kMI<Ib)G*gAyZQB-<AdAr}p%_|{kS`Fja$
zq2{@Nf53;L(qIwV!>McAGK+WdxJIhVe;>k2{TJ{Mudc#^G1<o0So^9T=8JN3PZjtI
zJ^w|F2Q^No6@{3TbpMq$Ip*ek-9-viD-BxCcT%Aqb~(gGzrcgBDzndLFlXmyXZ9n=
z@iZBNUNq14<5x}me&Vl$R1`5SEiE_CHGwkd<fM=LE+x%vLp4!SxVNXr_%WFl<+r`F
zGu9WM6f@Y}{~}9k*&LG~C5br!-9N2F>tK9fD?gtu13GblL418P<*ONO9Uf}<PvfgE
zn049IdjrWA=p)Qtxg6AZ7OOkaPM3U>c=r*kY-1AzaJXi1Ujc;^K$Hz5#zdz`ltIVC
zJGAoH?!-VN?30Tn@z}?Gj{aQr_$Wi#R{pO&U+hp{O|<tN?t5~T!J$=Yp|U93@P1uh
zMX)bWxWd2kC~gfa<w;&|y>O*H=*moRLsh;lQ3`IB05N2cenTFQCkxt>KxV!q4kG*u
z0h}+8cTCY=C!0(VI)EHpd<O0Mnmzo+`unN&O;tvZ4i86dtfOOSaI#Dl&5Qvism#Jt
z8~W-rvKvq*wAERyQi#2>+F{t-QTtr|GT8Cc2SB6YV1F&MSfYKVOi>09s*I11&(B1f
zRs-8<><?B->oHl3bAXC;_h#a}_pf<>-pamzD*EnJ?$K@<#En+oGbF~*O!;tl-~1*x
zoRa){XH>3VZt(Beg#h^SI`$9Tfmy%WUg3)iOZfXC)l#nQ6f|PBZ-4VQkgx+fiP?z*
zI)AqtktsZ;{xAC=JA<b?IzC4c`*f196XUgmJfuemWU$_TfQ6My*LuU`-iOSNJyAW@
zk^vmC_{xIHudcj_HI<lNCkh}IlZboFjJ)B>K_U%%RVm!8Tx58pKbYm&E`V9267O4|
zue!|cABSXWUOKb@uMm<6bys?Muy@Hz+$#gBO~qPMdqCl-JZbc(KsKAI4vkT@l$K<!
z9LS&)OQx?V3XW=IORu?@^?_2r`RfTF*rb0w0U_WbT`lfaRKWLbZS(MvQ4Y=OKP^Dx
z)ShT8aiY6;V>LE%R>Z{iRI4i<aPOGJE93TB@gjxuW&;fM>!@D4n`PFEUA-5IdFIYi
z_m}Eo6OT}@r&Hpora7)}+=)wz&HR24F4XfAZ?Zn~26jXguI`RBSyBUKpw??C=n!Cc
z#$V%c_q_?wamk*dX?nG^gpO{h)5JS7CnYLk{~dS+*~PDllzi?+^%(1aFj!E_Wf2iL
zT`izHSgT*^YkKD^vige!j$Nk{AL%jWQdW~%_HXnIz)gy3z)5<<fC;%{-gU^%x&owu
z$z}G9=FJ?reEVz+FrYo#xN?;&z$Y|rp6F#lY}{XV7HI+gKuC@T&|n#y)1$ckJA-6&
zTnFz#d;~xyBDY|F-LcRyG8|WvxE*uk1_lGh?WNa0l)V1WRtB%EkZ~+P(V?iOGRjC|
z`#Rh7fVP`Ri~$qKVwfX8kEz~~IY?@8kpX`KUa~Q-)l>%J{8mb1_wm2*&ua_3`Pev>
zfxN5iGoQK*>J?dtDkb?3R*_Ahw?e$WWwP7m^#D1L7h%UDt2@RFu~<~+Z-x@SpQ2db
znUgRq|M>>8!GHh#XjGeL0cZGcXYl4iTHSxzKs1JUKGfrNNIVlparzklJ_BLsD@^nI
zZE5|?FhLM4DQp-IKuj;!#K|rjEfdBeF|H{HWMU-7e;eV*Cb(znuKz1CemKJL)$M(A
z3TnA7if7-9QhNURB{s?~7hfEbVf{qmKm3^g+pPTlKJO{S)Y^X=8``Q*(+23YtSo=&
zc!MtWFZT@!Vh{$5l#E!o+Ht{g^vbEF#eGQ`9+)@$fuY4a#-i~^e6gw_*5+l1tq1~e
z@xV|7*yHcKf~;x76I8=U9WTOM-@WE5`K>zT5mZlLiq;~!bt5`;@>jp@?a}|g(O8sY
zhK%l#NI~!ZU~!&2;e)Wwac6eAFlYGtd3@jc_JH1rUyrH%=!9+rH<)>-2?*95tu4c&
z^I@Sj&|BE&Gt=yqpso0U-`4*S;s1NjY*gJ*Q8#<PS8vzfn!}nld!7@VOgwvJV~B@)
z0D=t~5B~q`C$M+pQ7ETVC;GDf^wlBONVNKD(!a%0RevTHGqlonjC+gx(d4iKvvo=R
z^*RaQRrM<7@#5duOm2fW1I+ILJo<O{3Wn5Zx)@HFfip(AXjF?^$uSiS87h3=WjV>s
zzlDgG`ClW9$f0dEm4q8obyHn=Rf`;dXG)%IlXzSlws}l}-HPvKu1@J}_51r}Abj<|
zF`pQ<{W5V|4oIobR93GBcf*iN-F+ZiBnfS#GCJEeR>=32J^}rIw%D?y3H(!UZ20t@
zgh)2MVwD&V&*SIMf4@x>FiFdb0g1CHVqQw1wz}H|Ao}?4fA`>ItW6ad$fsWq01`n9
zU)9BH101O0Zv%NVy5tM4!$Y+)q2eserO8F$hgQ3-m_oh-YVCzQf@Ox;WK9cJ_3;A8
zh$)v2c{Sb#B*%CN5L6$jg+GE1kx<l@+0_ptcBsMrjdBuAVbdY+^6%BT0EPyJv?c4J
zGP*7rJ03wMRu!|BiGbgZ&F~w4K<D)&Kj76dGE?%kXn{p~pyufWqSQ>lC|#<4spkGX
zOVvl=!$C?x=5n-++wk1_M4)IkjRu3s2tu`)>%5M-|3%6#CJKV_f~M)R=QPI~U0UkJ
zqts%|-O}q(#44->YO$A_HIzGb9QHD5O1~!~0Tl$*D(D!c&Cwe&y*q{8enGVRUHi5}
zW@fNUyW5j@joX4*8F-`%?@!$qUex>DH+;IM(#c|@LlG(0O}E2y<5{!lwMUG?ab9w2
z^zJQx6)b!R7!z^2QniZ)EFAH=wH5G`5mx)3UXKiYeYCY5G8BW^?l(v%D->digY(r(
zq}&<y7IczPMX~k!czAc(%Z`Hlb?L0&k9c3U%)ME~W<Q=T|4J_>nq=<PqA&2(-T^Jt
zMn&aPY#$ZLjh5wIF?c#Gp=1vmx-K-P?zTtiM5Om-`ZLQ<R~R0Xh+%MYt)NsDYkpDW
zUSzZSv(4rM`NTNmn!Qk_nDDcaAF#<%rBJMgk|gF<&3KxZ+!N17aV(aSks9q?>E+8k
zBK@oO7pX~F#us&!ZG5y6h+JmtrH>Tq)RN3yO~y0%A5l$pMvc$qx*Y_*h-KpVn{9`%
zey`6p?TB72G~Bd?iYrVa;Cly3>*{B9H)P-a2xXYQ!C0*kDhviB=wSc9gx4uPwETj6
zGIX-!KI70GDmdR5B3v&5Uf2iw8tbFZ-$~<Itko?rGnzja9Kp;f@~BlPT{WSZn3bdW
zU1p^f_RW|&nRve(-Dg+}`c9qEe`n&2+I}aU(cUl(JN&^cz1W4)gYmp!^@<zUu|H#j
zy=i354<sts)9T_wi`kDe-%%Wfg4^}r#ii*B%*kEDyltYkHmP@!+-K*PS7}R0e6}hi
zpnbNC23FDgRs|e@e!pDQ*RK$XW6s$N&z480PGj&x+}FRO#U&*t0M$;BO)iDY)pou8
zdC!kj9$SiT9+W}liP6+WxMKL6v&tCRY=rJw_x<+oGE$KPTe*FjA{6JwzN6Sn8w+D7
zF~yi9^HGX*Y6;L`4_`gqZfa=KxZRd7Sj{;FNw3Qkk9w=wi}JOKIqmK{gnPBPilHr_
zhZg%Oq6x$p9*VvucT#-P&|>cH`XUy(@X;1(59D}$1t(`5pu14Drp}Ii_Ym-*-v82C
z<DQmaWTn@rFKi;#Oe|`+&7){Cs~*8TQM(|0w&9{RNQLLiqPyh@w{Y@~XXLgkwQKlz
z-(d^jo7NKaY@Wik$wv%qDQ~=1l)7yAzB0IAe3z(eY<^82KsrBVV81+ahf(#<>_Z5j
z9Se55yn_!O6>erVb^u3ZvqmX)P|^<BtWc$@5tG-%N$t{LD&)loe0hUCNZ}WY`$znv
zKf8bt^epn(3%0XR|7hIrPPu#pznLnNod=^yp2I$xehdQ!j4i7Hfx3>2L#@dV+gpeM
z7aqt=!QlpH19@JA=jOVZzT0l@?$b?*oXfliG`;=(W-mY8)mjXG0=?c$0I4{F>m8OU
zz)Q6P;b9(Cbb}qMOou$;r4PKh=gdjQ$MNCCvwJd%`9gSN6S)_p$auC|MhKRQ+b*RF
zz|ssC=Ev%lkcqvz!A*OkLbH<8EYR~Ygzc%txlB>J#>n3CWh+fN%X26l_3-atd6TA8
z{Jg3004$<x)K)fJkTO*5-dTnB5T^jTu#c3XRWN1^MhUO-7}?$;<d*p4>BDr>i~Knp
z#gL@h?@zSVjMzp%@^DrMKx7J}e4bhXym0YwkbKaiVmTmg57<__#wreN_l(PSpESb!
z09%+9%iA8i&9f}rmi-5TXbVk&WYRomU&8&Jufoj60Bu7ZEBM~4j`n+@6^L*B6tIuz
zGNM|GaYu3KmW^W@uVVO7Ao1W7G61BAm-n_C*TUZS2x_#Us@LTOarFnh{E{!P8-3Xy
zGG(a-0`XL{X4T45rwlLc^#HP(I+pHC9XCccN8^XOWl<m`BXnu2K2Y}IYg+|SwGB>I
zrLa!UUkJy3tXyUDij|@(G5nsq;z^+tWydjC5cItq&D{2x*K+{0TZ}~$Y%06JkmD>F
zfD$RI`a==8lY%0)__eDDv>!DVua6((xm_<uDprBZ>0viFBmE-Ir-{Yv)h@q{eG44T
zNZ}S@2@v>7pooktCxl|k5>L$jS%$JVKkMN3Sp-$ThVXNrSQI~Ji0ty>{dd@&*z$2f
z1hExVPy6N<O+|~TuZJEFr%jCGv1E#82hT*SvG7p?5gB=LA8UBlxs_$heD`yPn{tBd
zWc}*!iWmdx3N)@r7OE``GnYy6IkzVaCtwfhyeqJ6dXB&;wcSH|k6&^M6Nagj+gy;u
z<Y3A-n-UgeYm*$JwRJEw8{KF``fogLk*3Y;1NbSXCzojP#!j{T7O0UCHN*hNS8^MM
zs>MBxF=cTWWm2o3_M+;x>D)G>sCjxXCTIMxj$uf|oYXQ^u$(%2!x8dlMrf7%Z1DT6
z&1Np;^Z;Up+4#jL3)NG5nv?gSHKnPd)#!!Ohn~Z>^ydt}ah<8AdA!x0L9ZkBEjP?L
zng9U81aJU-3#e}PD2sCjitT?2PY~DGA4{==X%^M9z^G}Pr^NQhQiRq!!4zDK&*g)O
zhUwALf|&N}QDSBe2^T2l&5>BpO=a6jBg2d_9|u-Vt@kOt{ihv95j>wVmTE<|*4kV~
zEn2>yh^vg6Udd}{X!u*4ot;&wl{j;0uY@&EtG?8Qh?in2x0kOPMi39oQYr;ruSxb}
zxKR}4IHxB$KMDMdqh!D;GnRM^#(@06jO94K;mJ!GzzrM^#&WkfjxcR9t_~Q(Oj>Qb
z@$R|jq1@Cs{I1np#^Wl_@EuxUI=y)9@TC3djQG1~|A7s*A{BM}4<GhQ6DyMy+YD`&
zUv}ig<o02iYrj9|xUJ$fq)&Ip-4|+&W3-)}*A;wA=Cm{DCuCLjP5x5eYI^N}YZPTW
z;zDaBQF+T+`mNe9Du)jo+v_HsFV8_)vaBOSmG0K9U(9ll<5GGYu?26<`f;_OI-tJD
zBblHG6|<}(0?^di_B)!)4w9QLzmSVXb?e4^>R?P8Pbo!;Fwm@exR#52@!9$gAWiq_
zoXPiK^%HodSu<`GLp<IARNBOn*LOk1mzG5og%Y#Bv1?YAQj~KGap67B<u789%Uu|$
z*?Y)`+c8`gOuKfZu#^JGz^~HxHBW!yrz)N_VaZgL%%0<~O7fX8>*9!~O>oO_f?@Qs
z*S7CY6tXXVA|!Xyyy8z~!W@;y6t%gH&CO*^NT6~|++J#)dS!tkVnqUo_a0Q+#4Ay{
znq0jC&^ZYShQJp}u7|(L<?9$*Vk_pD*_PPjqEgHwrdc1DV!8>GWsgrXYjX?=#o3#S
zVycTxT8qQgwmIhF-Zb*8Qlp;UKWrQF7B8)yIU4_v1>FDkmNL=%2Ou*FlF^YJ*KBzj
zB)fZ==ez*12Xj1m9&q2cxgIA<k|Y{1G>QQ~_z`cT`0zhR6ub{kAq;33%yMe>b|o*N
zI*|FMjQm!~T9Hdf=zRu0t1l-3Ok;WC@bd1%Lw1vElab5lu)&0w`*Y&{u}krR`>M-f
z=}l>V8tvND^<*SfU%3@QPV2Dw4eNXyTlmPhJyYKy1YM1TAt?>Pnt3-QrbfM-E>G_T
zn6;X+?rjA+uh|zkOx}@ZS}w>Wxcs@XffcOzITu%9FV^p8cao}ZJXTy!Aeoh$ZAnc#
zWhfY($XyaG^Y*||gI^3!V{8@{DVAD&@5U$hb+E5CSorHorxs6i<#)d)f_-u~8D17O
zJ@ROu-qZ3vBW*-Jva<N;HCQ*j$x&BbUaIY{RT(|LX0#Z9)^dL&?IBFf)=c&8rNbcx
z{e*AL!{`sF*7#P7EQWUB`8K8WD1<uOva<=hGKEy7?>1WL{9yAXwHmxsZLnwGJR?Yq
zv9<-*=3D0YK|~KnD#3yEi+;ZCfk-=ySK{1P$#O`YrQvPtmG;y^37WSZ`!EdOEA7In
z1ATf*Ve_c&W#d&WpV=8c5{Xg4MDL_h56K)86H<KbD2Y}6{?;xo*5Fahh|YQ3WyNi$
zbDi57){j4vjizFLd5X3L<aIA}=)9v`A1O)Vl0*4n2#qqcVz*#MCUY-d0evO`6hZ50
zAw4aP5~SN%W$+eCpp{LT4EgUTq%~|ENqd|px2>L7u~kPKX|v8(ZSGO0(0vG|96j6$
z_{jcC@B!Dy<9dUI=0%oNF&D<NQJ(t^g|wvQi-rV=o2g@2YXvt^++jG_mAU90e$gPp
zLn5_W_2M1_8IdPu@3@f;KYQ<4*RNmOb)FTm=jY-YG|Gn4;H`Udb7#*XQRIAdP~11j
z4%O#cuBl5Sj_9w37_4&UyrPx2Bp=GGswnGxcNeYl$ZTklBv>FcljdM;iOim`=CQfs
zN!3n>lP<q;x-tjcc!IptSH()fx`R(LXLgJAz~5QruVZ?5kxb0C=2zX`dF7Pydsw}|
zAPqk_H-Q%w1YfYIDyV`@M)6LScKcP=;s^tyxzl%K^<bOzf)P7z1HUJ><fprQ`cTXR
z)6{v<{xBBF<qHe-gF1mh(Ju)jfBhU~a;3$yrkI&fl5<;sSkwLkKWo6%0t496FwKF!
z{COKU3uolXN_G#ukgkNksq`Svk;#ma*wm<8Z?<`CeB1^RlusLSj1eI1TUeH^&qxhF
zF5Hk622-tcwj$APbe?rZrRIo~*DW=FtBMg{r%FkiUr>cxUx$?5=7&n3rbGdO7>T2D
zO(AK7e_@?*2yJKiWv3u>;hD5fM2SInR8?VWbcC%t_sn!LQTN61dFGB<+|=;Lpr1BW
zMoArnrX3=SRvx#ikZl$TQB3mAJx_VPcH*Z$wJgVdND;^RaI?#T7ti1$x0}XKynU~h
zLPkYG%Y(N}M<+;{fN-#rp8UzgXww0s2Eu>Y{gSd!_VOzOivRRyF)9LOfkT!DV<oXn
zHV;uDSww%91?F%6Seq<7(u;>arBV9l%o4Hz3*OO_-%q`i3k}AhOt^D3^J`<C_1`@n
z##}{cCc1bv7e<B5IL?|%v<~BTE}bV@54>YP9Y5FFstCEev;QE!CjlGgq4PA=_vdTV
zJD+_ZLgHbLLrie-_@<^tHk;nP$meVGlx6n=wzq(RP_J=xR65Q5*o5Y#hxD%V<4KOg
zqo5KMua9SoSknL%r#%#~pL6|6sytNiEQqV;N)80Mz)5wX)!9js`nepLCx>$bFudKj
zEKx_<Rx)rK9^<zhX?*09JL#}ql#Ljmd=Ibfw&3@5t5gE@YI5|NitS!To^NQh>EkN&
zkwy}-a0IN3{7$kYpZVXLg4_9P+Pu4IC`r6}kCUCUt{krWjr7?h81{=v2W7o#8RN(+
zQ}lW&hw&lF7@zynZXroVRk<@NqWyj+z)Y~4Z<L^PyI72HJ>eOvT!~S=rG0!J)g8J~
z5t_9i25E}Q@KbMZd?RBjc}50|ci`Eg{Nndbd0zH5ey+X|<l2mbUj2ZFOAFZ3nY8NX
zcKkEv1%ex<cBI|UAqNvP_J-)j;%zp3J*WipWnp_Aq#JBEA2u2)SCp@t)J0Ce29Do3
zXI{XWhq=ASW_}x5uX5b<D_vyettY*uC;fQX4EDPigyLUkJG3TMdDVp%3?%tWJD`*e
zkbH@HAwo;v7($znpaR3s7lXjv3+xaXBS-U3-~f64#u)LX9c$Zbd*1!^up(K&T6(vH
zOhhJ0Hk2@;(LBh?RcOeu3)}rj<CL*iRmdwfyx$UTQyI-Eaw?Mfzq{khOxgY$&Sc5L
zK1wHJZ63)J>2#{*+wGv_U~r@~Q$^iz)v}CEEjaDib|h~d^6oW89B&%gpRcy#xG-S~
z1YE>P{9IX(Cv*?mrjS4iDHo3rRoQD=o3Q2Z@6{YNslV;|ZlO`ZFyRTD=MTiY)_@MV
zaX*tmGji16t7thnOz}(O@L8?*&DSQ#P`U53N<TohX)%a4=8*-k`fc1A3HI249NkY4
zEE}F}ACE{sTHjhDtv;2XROkoT5vVuld|Irtz^PE70ZZqjbAiF&1~*+QU7a9QyHB|@
z*L1aC?k4klE!@``5a_1wh_v<_!uWdOK|v+`UNrT8*vr%*oZ6l)K)%I!e^yq)%9%i3
znoL&|aR~cXNL0?8yUm1~-$&0=yTd=ad*uc&T4b@2O)qyw$kawd=E;tx<_=tQ_Byk=
zs-e>9uCPB|IXZ^glnVPtRbboQdw1$`^G-*jf#@6t`B|RF+7Z;-M1nhU;UbfW(EuaO
z#ekYzfk?r1t|r6f3}q~Dh~|CVt7a-`f&|si(ICOFjkrRobIc;5@wf>o_GIG_Z>G*^
zeDz9^E%tDSbNKPAsUsRhb)h+s7e-kSxYQT27L5UMBex0dAQ&InF<LU$J9p`DkkY<Y
z8&<r})&iGbPMBY|IpX?bae;0A+T^--w}O|4@*-JgRXkNY&N1mkybe39f4^7mPitR&
z7#_|oC|(A3dxx!kAahG$CH(hksXS`B%tfar*Ttb#c*iGP4A{a@a%l|(PDNzMd9d9?
zOZDwqY5O;NU4)+#KiF#BCF?x{+8sS&Cw^3)qRQx;)G6E6$?SQ&jp&hvj23-Z&u)1a
zgyh$GU1(y|$OaTjLEB8-rT2z@dg$Zu+whsMcI?OhgUk9!WU<rRX(@~NeRY11^I7Q9
z{*`^c&}kFZHTEAe%0U}q;K-9v&emvk&n=R)pd)ky;=4{X^#mRQ>E*fG2qCjW>EN}h
zp(YflXlEc6Zbj#;?db$di{Z1IAKTPxt|q~l%%>y8XE`>(QK5)PJGh1jW@ZU$B`-Rd
zg;1Y#vx}Cx%8^N<3rkYX&aCwDt|qMpZYS5fGw)v9cvy?1J2z^$FZNNKZ`z2duUeZh
zgB&apNQ|foDxdt7Im!g8q5cHYO+H)<kC}98_#7%x4Cg!L+(B$4C7;Qot;2|}`)Ohi
z!hgOnNJmSa@s+AU?3KXR5U$C_2%i<k%HVt~N=3%sXHk1^+$6?-K_E&u?m#OOWF@bm
zIMy%#=OP(``|*|=n%c_{4&ks?QEp4}sTOUDnRBX+LK0(iuqsCdVOdf30es!W=x)D1
zhv9Y^7eId`&9#6)Q4-@5_Qh|8w6UEMY622I8OdC;pNcwWG7HaojwMZKrZ#ca)Z(MO
znJZhgGG?=}LE#O@HH&j0rSlsvq2sY1_&h$#ZN1#bcqrrPKT9a`oys;l^Fo35WYycp
z8u9epZUitUn`NcC>~govJCh@oyySGcQ+}iTJ-R2C6^HzQq9{%F>q1G?y=bFHs8(Kx
z;7@DnsH*)3TV?HTAm}3Pn@hP<qFXJE5iC-zgt{dF6x(>!OKS=^iZG$E7A1bx+W4lK
zNZYv=rdRf1ig=&i^fTo)RX$djH~L8ki@0n7I$4rUocuqTlgz1%tK4T`bAz3*A@(BM
zxz`4Cd>pR8j~UZ|%`oyNe8JY&#@c}3+vK*Iu~%%prHORfm-HvDu(J5mH}>&EXnI$U
zSQbo@Vb!KTVy>kd!^O$++2Vd%hC5(kKnSGsvjb+zPp_xP-dpK2r2W<_bVm!y)F*f8
z5zFC6#4nV-Oq^lg4T)%)tga=|)J>0-z1w%<{i(kFU#$2@-o4ZOsQVK@Urbuzq_TsV
zVTMsjHPq5;eKnkcLL6asv&ca$Y)cc0qa<qMg35CP^z!kz@p_GHHlEZ>kG<0X9&R1G
zWXTW5$ajlT#(fb>pUoWECxT^@L9Y~C;MY{kBs$7giq4c}oLSBFLe-f|H6Bl`Stu%?
z!yU>&f&{W@lwRW$xT6q9r}A*J1@8qhnR6B*q9!!6$0-eiT)FXi@7R~3+vWvn>{Kex
zwEo-SNV-hq8G|y))n{?ZUnz^>(319#2`VC3`DmWFKameoH(J9)l5;_0NJZGP?kKMw
z?6v_n^uYJyiU~2}Q~s0_M7ut(BG+hh<VPf$^n~iryyPA~Wu6`tNXH7vz-{Dy_&B;w
zZ{IlLK)V>!oj?X2WwJ1Yrp!<Wlz(%S%lGRTwrI1B$1BBXYEHX8<u591M19HXp&@e=
z>3j!*U5C=v<EG@o7p^74uIJOFyZ(CIo<gJ_<n`<XI}Z=YyDH^QhGuC`3@#8-X*Fj0
zE@6H+oXnC_O5^Wo*08vWr}Q#j1f)^HkT7g>fR&_|o2+h{Ls_JG#5^3>qjE@%X;m-?
zFp-$*epi~cS;yb;t9irYU`k+Q3S~pa3%~#mz*ZDUfgEIs?5iSOx`e|4WTdxmJV26|
z0b?8re65?iEfYU*c+RBpV5r5fjGTQuGwdF*L-v$F*hd(0iIx_mp;P(|2FAaAQAgor
zEspgNSlgImTEB%b_*sWGL&|L#{8B=cHGGbBB*Z%PE%I0JOzs{zijBXR$aX~9H$G-<
zU0(lwjgh|Q$Ga?L2igyhX}}$RJb_iJbX8xSoe`rf%g`OEC5}41?0#7>Yf3<kyW6Dx
zb+MBAbyhW+psdCYT?v*FzIYuT@trAlctx!(^Lx>xScL?v!poE2VpvnFhNYg&WA&>c
zCO8Il4n(<OPa&0QIwD&NgyivcFyoJ9)o*ftJ0;dWPm9Eev~kJMda&CDBa3EgP1)ke
z)U13}buP#lRVSEM{IQX>P`IJ;HEe)pGq>MEGKbqSB-S#&X(X|F?|11*R>MVm=R2)4
z9#C$qzU@NoBJK1_6AIDK56Q(9$6tcF^yn-kW<O9#2t?o`5Kri_k7O<s@Y7@G9Ha3A
zR`iOwWkU#e%YU7AB@2hCtFlFGo!h5UX(MJfl}Jp*q7LQGw~1tD%j?U9!ot9)5@5-H
zQW^}RYIC;08Yv~*Rbj!M`GHD$zM~6KeXzOYm>dF%qmJ=O%VMtYKKPO5LZoTgWGS=a
z{;SHmjACyAZo7KrCrM})pJf`J`XqbCW&~|dkqJD0PA)JEGUR?TD1tcoOg?{M4q^#0
zAq-I7G?QDRI^Eb43PO*OT<oI|9t_m?IwOdJqGSn!bZoMw5(@!}86pP=Sv8(G_hikU
znhGW}ka!WvABO^~8_M2FAp$?W3$$3siHRGprT?@5s-smMsiwiP)B65XBFrUs$RCWf
zLPrcY??l=bJ@2QLCo2x3(eno2!k5_h&Y>mv;Rpl|*2|mHmQT1Qjqd5A(IDt5*WtD9
zCpDcX*;)yx)<w5ZC=1%$e_JR@fN255LI-EsPAw3Gh1SS3w%+4}xp{?e)171}uWM;w
zp`*WIU6jmGrlWDGE=h}#P`orwqArnE_N=l<)PeI}y#OCr^{c`lBs8Fs?#FD@XJGF;
zSdk{3@vp2(QQC|P#^_vyTw~2q8AYKQYgB&QeU2fC_UUt6Xw@JE3tC63;5QZcTp4Dt
z4OS{Tj2)E}fEJdO5I0lDg<)V(o}yeTWJhiOt~!};Fcz)pZqe1b`{k2omF-P=Dz+sG
zdnPYdG896x-{e<eve|_^-K2pSK8c|8bC?`yrYb)jLgpFu_7(}9nK`OoeQ!}(-*4mJ
zEMJVaVxr^*;;xX~37UnDKu#hi7HHmy#wVAltIi$RH~TVQ+9sCcyjKvFc(pfVnuC!M
z7%x^8c(2sf?xb?*5TGc|6f{3#Ox1S%*lgUhbGZ&b{rjXRS%6|P`{XUYhFZwTes>p$
z;N4B<L=nMup)9<wtcw4aX(22Su%Cd)g}+x|u$<!yO>vsdxz~iUv>IK(rHHqQV-&J<
z#a68%vxi*!;+(mSU(yiL0dpv)O4|JxVIa<=$D>T2YLXqX<omk}vu`T8D$z~ILya{!
zC6^k$1Pg_9tPI%=A3N34cEM_k-6dD$hAwAFL<*CUow;BkqOe@&Kk&9S#o2)227StK
zIoAXANglh0<g#x$StUu(ye}9(>1W#hFjfi{MgwQKR?Ii^=go1G1J?}C(QEKn-cpv!
z!b6ORvg4W2Z^Q|6k#|#ksR%W!MGo3Tkouo%ey%=j#$KmU!C1d>WI1c*L@?s_B*fo~
z=4Z#h;F;Z&)~koeqO{u!q=^B9pnmEHDslerXwZwPq!6gyt5BS@`PwX3mbBGVen2?6
zQz#X9^)f%nuWUnwvCRVct*tom%KmM(fgk<3UoxIqI{9Aq2ZxR3QMr-2RU!By?-n8k
zZO!DU(8zFu>9&HL1nfRnbNLSS71YUPAa^<2=4qgY<kSpYA55r9C;Y^{LQ4|v#!x=J
zm%o`Dw;{9gU};u=wr_y0c}b!nEr)mC>Lzkdts0{f;`}xwl95%n$`H(dKCrNUeUmg}
zH{fRfiAZ-IF)!e{?@hPLMWj(hKaa`0JOa}v5Y@1^@d?Nw9!~-tUG1I!FGQwQy}(^z
z!hnDmEt?WO)wKzS$s}wa%bW294fF>sG7HHcdfBf*vvVgxpJCGQaGYi`JzDq^=pseC
zn*j5yhBqpjCZm0<^H#xpMK1~S24c-_s4|;I4Z=ELP_bD#1l`9(J!u5a3tzfxLNvmL
z_s>yLC<Su&FH3l1ScQKOx87W$VmcO&B8b3~0qMRvpsVnqqW8dtT;4AGp%P21b`J3z
z)kN9t)!xaFpX3nr*im2&jB^C4*q#{PMkvEmU+!DW0s%q&Qj(6#xTo;c99NF#IEHUP
zSx%}#v`HaR35%X9Cah52BDaGqN7lSkk6p}EK-!68E?hdscc*jr<EL<YRRh|_HPk$s
zyZ6%d<+F&zKP&8X;NG^rF|DVmmx(*P4sqg?(N<?s3*6`im+#k0CO7{g!)J<)8dOum
za=a0hSJnLB^_3LH+&73au<jV^`ab-vfJJd!gtQGkL9dM%ENM$@JKJ>s1ci2j3f;i7
zEg8nL3yzd8D84RWW(&RR%XH5ILYPDBeNM!^LT_NOX?~D?D4$AGfq$2#e$|nK>4K(8
z5?1PamhnOC+0tJn>W!e51tkQA*p0!!8r%q7)!^XC;}t0e8Ew_h5C~+yZrOW<aAh9l
zJwY+pRKdZ*<t_yaJ5b7d?=D%oVf$GR|3pT^YRjj@);#sfN6At38(ndUq4{=CT2Hsj
zPq;3(5K&_LIzMI|J%=4n?pcyqS_i4qUpOvyXh2k-1BrocO6y@K&zvXiyfuyjeqR5<
zUV6;oqHujo)KF^g3|4jK@86V`7%%hxt{ZG`V33QgEu>DvmY|d@p4#3dQGeF(t-2w-
zkER)>jkF~}>h@9EXY4}jaF%g+FUE|n3JPHa8H$)VOJ>71TN63NopVP&z1sO@fL(?F
z<!(w3CdZpNdXq1f8{WTDXk%TInC_mG86@i8k3+C#X@v<ee%tLgq&{WlLhzQpl<6V^
zhpccQxvW4C*6~9r6i9}S%iNwvNerKqPQT|nn+y|EDZbqSo4k9;SI#aD`uJ>BR3|3#
z35Pow{MZcO2~zOqj&SL6rRvgb77xN0nW3vpM)1#R8v66CAUd?UNG@9YY5Sd|bArp(
zkGK_D`RS3FmJRMr;&m6^-MHz@85lc%_0IY7D^f6`ql<6yG7>nP!>gbOv%B5n5JAiJ
zX_{w}8X&dsmaSoUTOM3B-1Y<RuE8%|1HtjYhT;Z_=$-tV#|Yp6J_8=lhij`!hh_26
zms8B=+kBDRqfl-1$|p8d#6eZ*zaG^~Mpw)O%}2Gus8xWO`cFY3YxfP2@tU-2a5*vy
z2v+7c-tAM2YNIyZau@7Okv&yR@C)cgNEIUSdhE-nJ&~{$2D2Z(er6J>G^K<RCjc6p
zUwTcYE!rRXy+l@pBy6bsyJcJ-7D19)=iit{Iv~vvw1F$Z5ft;QDnw!5!AKH<16-*W
z>2P#%HgJ;DKJjYN$WZiDPK$RqC39CovAsdTo@?f|a*>e@T4T~9rvCwb9)NN2_Ph4h
z8lr{5#)T`~#*z`^+`XEpQDZ}#AX+Lh^~Z6+DC7Rh_SG&)zg#4X%NXbsbWtOA@}SyA
zZ>UKvxZJcLB&^p&51E$rBQYS#_jGc6Jn;J$#`gO9dZY?5f+#Wd^1IubQqWroGX@Lb
zzL&-Mny0y_QbA^!c6}Z{Jvu7Y7nxy>O^T?vwZM0lSf>tOCHys~1>xa-sY2%&lbSjQ
zexV|SqLWq(!9G(-Nw#W?1UO2b>qv?7ym9+f2_6rO)!UtTryK4&?4>2Q1gpo3_&MwK
z{&A*M1BT9iUI+5k`*^EAGc!r*!i1gac%CuEWeunVZ)eWx=t!@+Bv@l^{|Sfy2k$`f
zws<V|i1Z&Y2l!5?O&sTFB|CQn4AvAwk^K)dR}dm0J8>qqS13s%UXzct7zg~JuEv6v
zFWssCU_fCVtPqWKz1_P?Rn2vwNy4NW6?mQdC^#`*|NE|7=L_-Xu=fPY&dxsW_3AQo
zso{QpVUtMM=2!28@To3X1sNg0njr7(+SWYBeC&Ej0@9hTZKR95i?<X8F5owy$IO-G
zgRpn-lMtexbd4tb2{`0d7e%Vo-t_HDvBR5E3mjL6zguc*84Vtsei8yqGK}@HS04iL
z_rP1njQrq&A<}-zyqSf~dL|xCe=X{wBTU*x`Ay~kHedBsh)dobc`|4L&2CdrQGO~z
z0T|nX9d$a80I`Sq0}*o=t2qVyVc=+5Yx8_PaFCoyQL))CK@LX#My7WkakiRYt}LPk
z1k)E6%^gM`{scI$_wI)AW?~x%&i$`8r-x06`8>pqovrcdpOg}$pW<yDXWKXhx0tzR
z!(QpU<r^+#hP%Dc!FJ*4O#K5z%c9xMna%gcpZ~RK!K5YApdf9T$h1CLH<3n_n`1*5
zD7`%+OV*$<I$qZ0RoQ6p`;V7}@(yQx#LK(jV(UhY5MC4Z%yTutBT$^G?<CUjq9=-?
zB&Y)sN01t8{k*b<b;r@-&HH#UQVyveF*TC)2~&hGMBQ~(%P_v%ZAn>yUNoe9gZ<L$
zty=dR)+Y88?r@)mWVU?^oo^P`qxBjyo)H%Hi^(a<$rGO4$t<ShY>1|WVt&z8=J(iW
zX(MjnbgQ*TX5<L2@YWcdNOO=vnq)fu=xxw%YekhyFJk-g4Xp5k>RZa^dJIDTVTSkd
ziqRoVyET*6g~$!_f+u6>D={jg+Ds(2<<_}^y9n0+B|RbP{?}(R8d`*IgSXI^u*h(x
z(0dOh0xUv(Dt_r_OfpN?>b1fNpbTQ5bnIUJC^(bdu@w?Raa=hQ0Ks>!C7IFcKfF_S
zHFtcnPv2~kc_L~m8(&%)o^AUvG+uOGux8C3ws7HtsZAcntdOjL9bDj0$cBn>?7&{f
zB`iiKrXJ7%=0ZUG@^5g1CmK{eX6xUlhVDSle(7@k`G5+vX9DZaei7a`GGhcyr^4<V
zBL$ous6(8hDB_qfqXf0=Az(mH>$k?=(SX^uY0KVbcy!)@<|HLJV&1=rFK-ahT4$J-
zwh*lsv5I5V<XQ6Ar^;8I2&4g9Gsrc_M>h*U(tX{;0d?u;U8eEWhC7sg0(p+l;hOj&
zu0`lI5<WSDQhq*;y7t2v_Nmf{6YJ{XLxs8gWE*mRqlw@{%Ako5HTXgFuWtm&=`#q3
z>NYISPO8!%B0yxQOSSGG0n7xv5xP`#_?*AQipcT;4Obx)>Qm?)a?npX#dgHEDsg_@
zNL|P0ADz^bm){zoD?td3SDKt-(t!s(_{VuiMgm}<1QN%Z9l$!v_l&Cb&ys5D>U$wu
z+URx<I4@mIS4QWVSH-tuoG(7=ZKup#>uF;{{c!xs|J5{MG>nH^54+dDlI|7%ndQB3
zz)d*Ql#em<d>V_(HyTBb2|r<Z<QG)Pb6_Qg)TxYiA%3D5A+7AM$Nnb0KR}W!-=xhR
z<w_^He<`cLof?n((i^F$_+yIP*GvQbD;55p<*?iCOjD1|vGs>(`FNc#8-ka58Vk4!
z(cjTWL15Rq?JX2ZKST!;R}(2ET}QurE@(s3s_8!*zeqLr99DnfGP)M6TARAQ-#f`U
z&{#H0O!JaFnQ*X;*q>YKwG+-FMmm!OIwi=+3%$B6O?C$isq5ZsH}mj$Z7lWhzl(#(
zQs?O8!f+}Db!(iP`{BGo1)g%a+Qc|T7nXaWeyn8BEyVL@E)?qJ0D*T{%Y)qW<>^MW
zC);`QR$}Y6hx~f-D~vypW5_hX;`dXcNhVxwYo&H%gEN>_{nlynOimv5>ZbVN>L&As
zdU@(R`rKf9`N&IC;k;rc@$KF?HYD}E8AC8uC&=mct=LdOWgoRU%gI|P$kMK}SoI&;
z*4^-RS#dup9lk*#or;!J!)CM27z1wxz8&Mafu~e1F+7Md;c7fPi!3`Yh#>x<P)=$O
zrU(;KX#StKlsT~5w+#0i68nGQ{WsKYV$`<i#Hc!rUQubdz6l<^yZp6v0we19R=#HN
zPky$42V_uaymb(_z?hI1Df7HR)7IOVk%eBthbNGvcGFK;XYi+4rOdss?|J+tfj)^R
zOHIh*x8C2U#<bzQen~)R%6iH_qm~^-#?x{^gW5?n55$Z6u2k!Isc_~d5F(E|ewVe?
zH*U8rlxp5yjTjS#E#vgn?0zIbBBPMX<@FVb&+PU7-uSTfVPI3|mqW_E$6Y%&8{rkN
z(jWOzo30?FdH|*&f#R#_Qnod4_fd68uET7kgyU;`a*oj(^n+iKrf_<rkydY(t(C!g
zV=J%Got!R}J9+#8-!~Z}b{Rg7`vs)tdn($DcFGsjAuju5>|G~wPR7x>pA%<3b3U8l
zjm2f7cU&(=W+H_oeq(b3!4QA!8lNj0OwYaQnJrivOC#XaH;fbbrHc};I|F_uweKW-
zwaO+lj~aN(+q^5{w!TwNSFa1flb%j4pLa1owlwV1-V|?8buyqTHHpqz7T44ycC^rX
zK{kEAm%Vs3UgrH59tR<Xs9xEGoZN)i2>r`C!h*iUVSOhV=0NhgzuOHFeO}K}KvzP*
z{kAu`p4H>@sl3wl_oBLzGP=?-&2kCX4g%yoCo&c-h|XyHyNK2|KSH?XNw}^K#MC{)
zxVx3o0Wtafdf%i%3HiYOwOLjq27vd#D%wj-myymwT{K9(iVxebe$=T%&Sv+uyM>Jp
zF=rD^mJiB-+(7^VcSCPNxqiyJmm`Qw)g#S}5v7ymC{xE&HA*(_%LTvTOZcf<c30`Q
zOhZa&Pc8oWgQn<>Y<@FcmpVJwMC)Ys6*U6eN@cL2<ap4ZqbgdUjDr>WO6L%Sj5N)f
zl6vDPHCgGpoj{e-4$b$?St{I)rra&<+;s7Qik7H>GID)y5{|lMr*jw*&Qokvzil%S
z1#NXO>WcNp%(Nq<HSnwIc4@5Q{`@4wX2c(Fxu)70{9(`ELhzgxmk~pz0Q=L44JTD$
zBF`FlQjc9TT7ME9T38(DMnaRusk`4fsyt?nRc&mjzpG8nI=$P>4nLhte~Jj^eTMOH
zxp7}|>Xv%kssDKKr~Bh&(@1`Kd*F-vp3LJxC+}(Rm}lxc+=lp@71v#|nfpDxxhYEJ
ze>_bj+-o+gjN_|D;vo4y3kv_s`+fI;&9);Wg`LJqR>(sXtAg}?LSPLxcAH`?O?<Sq
z35NBN?>Hrc7RhHb&MdBpXes`9Z=`l7JTJ9}@_D@U?#o=PxyvnXCb0X<Z;E1c<R)GH
znV=!({YpFpww#I~W~W{6@eXBTD66L57R|>o5?Q)8@)|f@;(~}xsir@8wMwD9vVs;;
zc!rUv1oj*x$Hgn1w01UW53AGR@&<2y;T##E3ZYCBEzp`ekjL3pV-Vn*w~5*2#GM}u
z)EqA^5w&vSKVZ~5;bpSVjbg+oN$K6F%h-bj5>wb%1hMjrdlA7s%xKR#pDKS>;yvpC
zNCYoN+JGZ+N_(Gb_r@7+1JIyJRHn!up>HRJ(4aDG*~se=0{Djs%w8qCK_r%W36OOF
zh7advk}}#km#Nqv&_)EC<A4v~u`Js)%-1N(y3pPug*$9L9@EC@BQ+ZnW(?4IcScbF
z8Wm~IT4%td6V<pPKEj>upFhiLFh}wg5Lf@{LjJbI&$D^w?H+y?rVN?8nb2nU24w%i
zOvUzlN|Qgc&etbzTj!Tp-b(OQdx+(ifXLq6<>5<t+Ab`zox*o7&T|*(bejqwa~CZB
z;K@XIc^*r{@Ve=Wd(1S?tx?>?=B48)PkKb1FHrswvm$hRc-B}roM43mv=q2MCyckl
zlQiqGye|fPcesZsWSNUe$sb=UZ}&XsN80eSTW#FKs~Z`Q1Ej>4_OlUM1odTDsOA5d
z#SoIs;?E_jpSd^O(mZ;%dRap}E*_VKvD6**d?;p_a*;HsP!G=*`G%zA<!Kacq^L24
zer|aU{wEfSB!6GIbSD1&2@<q1E)AdTLw^<Qyt)4nPzztLEq%-u<<3cfjq<kPvbAC9
zi4+V6s8!$)_ufbO9@(51&N<OX8}?O6IGwlA;;DWO`dWFqG{yjq3D<MHbGr8oqcwsE
zkO)eH=g1Y%r^u<4e&<jc_<n*wDj2V0f|6W<C*;o|=zZ+;*4Fk1MF<_FQeR1ovLQRa
zdzw|s)J3=ZX2iqK`Ju>!+rDxe^WopWimvuNqzIXeNUpd)*K<!KTdMNb*Fwp&LcEWa
z85G<6Fv!7KBMbs6oFt@8YnR|(LSa9jP2O5_<d_8@(!Yg_{5&$BLbS=iu!N2<j{v!I
z=IjA2phmTO7LN-!y&pe)(<O<d7!nzd$oFMP7K;|go&&n8Ex7s1DR-X*!?XM3#HKBx
z1QxWhr|VnmyQ=0#r*4#qIJNf_Buo`gp`q+1ZoL!RQfN4DrN~cz+`9NT&EnXk$miS~
zdk}-l>rlL8g>VpL=wcl?QP;%S^*Oow9pB%tBvc-K263n-TRTBcji|%%an1bHwPiRt
z!t$qzOSbJ(Y&q>e`5-Svpu+OAax$*!s<uC%<(8t=^D21eVz}J$kd=5_r?5o(J)eee
zAsx&4S3CCSsH7Ao3ED>rpfesmq&%_NILEZ*q)8-v(1}T~m4%ROyN2-FcB~1(OQq(`
z<j&C*2A3wlAlTk@-vrPam;u@(g=yM@Gk5K$3jQAoqMFK0|8O@#KN%5!&hWj}+h+m+
zJ#SU6YERv{60sjzE{nhCEp4Py+S^PKL?e_i#jQIBe^T$AgqzX&f?b(7IG9PMdmcn*
z(+U^Isg(cH55QzI!SYkhE)Fi6NU)yXM-#EmGfl*Vro(ypX>5O^H=!Tny^l^|x)^JU
zGxB^$7oh1rCWq`GszYE8*X_nkGw0GXBFQQtU!apptmLFrSOa8X7YEVp2D7eXA7wIw
zc*gB~#4ctbWLZ6N!k^8pi~GX;rtg|8>2^aXosJ`44(_rEmW3q8!z!ps?BI~sJ~ub_
z*j$5f-5F~$S?AEA7o7yQ*&lXK2Vj(a9FEkGSjNQ_E+RUJCp;3|5@_~AK2K;tbR5Hm
z&e1c1Y5t@d_s|Jq;TO>3twUMrO?caLU0={fOWJX#z-4|Xi4^Edw%a?e`%HzGE-#`j
zD$TQ4(h6$m;Yq>>FucG<+V#wU&nx4P1`85}`T2?Z=}t2}C9E2aRQx;^is%_?2E>cs
z`f~?P*Zmo-htoOPSOE6#6p^Al*K`6>>uG3Aq?w|7^lV02S;LKTGTyS|7~yPB#%lC#
z1W?}$23QTSnL!PbT#DM}G`I<sG(TI4n;EW=7ww#ByM5<doKM9ic@-N19o+Nyhj#Xo
zD@<yBeFM?KSKBzwD%c@jad{3${|C*Vgu8vrmw~;L;;=R`sbABPUJM}>GSxutwK`dZ
zSSpv$jb&AUNkYcnFZ4ro822UM2*e8G>38cV0t(waDjqygfJj&(ly{!HI!w%z4#av8
zM_#H6{YmR3X%Q*y&NlDMjn_HPZWEpyr!D()m70g^Y-DhSMjKte+vQ=*^sqrE`^#@L
znU$f*k55?Ok$0{+SN?;ETrV10p7+lwtB06M`i^&EBzow1sY$BE&hDGE7jd)JJFzWi
z!#>>SA7f|b7{Ll!&W}dK8;wX_{Kg7WK%4okgLvrf9FjVy>0Lm(w?Omi5c>|`IAgZ$
zFSr2?MvVgbeFffSV&b}Dl_{*UgTpAw25qa?eey>x^}CE$Ez`>K3aT;^o0ct|=aQ<6
zEZn`xW6vB$+7tGLiFF}~lx1t>?YJ#u^?G`5^z&2Ty+)4n9Ii3m1{GiAeNd9zn03@(
z*<(Ns(iM0^^+)o{t27`8DRsqH_l<5vncf>+{H$80Hz>&;1o0ife&CkY>5hF-InB7$
zvl3Qal{PRmk*JvolGCyX3q49;6b0|RRocD_4%nue9Dz8%jN%`v&u^n455LFe?iIt(
zdybG6Cc2z^X@xkp4tscA@4RXCV2uLANq`=$moj|y4c}EvFDQWpV<*ROAu8o^KmMgx
z{~+M;eAQ0ur#Ro?GEC;53NxvMtmuSoKD5Y7*WcKcOYf{+Lce3R^$65!yC{rWWLBT1
zU@^S3pWkx(@EFRYrUvX=M@sfoaB@#Em+YkO;$a+{hLPpFA0666EpF>?`qXbf?pRBp
zAqvz82p5r`8RPv)NPy>qWYurLquTd+zjlebol~AbC$f`Us|P`2K|0<;+|p@dj(}E6
zTKYQ?-|nvK{jxv70y%?L{2~Wrcirl;7-wbzc_ubr<sG5J55yzgJSq-aqpmR=GO=8%
zUVYr2vetKAv?-j<DDQ`4tE9~s-&-F%;M0)agexD>aDvp-hy&aTw<{I_o(z~R*m4W(
zlm{8lVYaL6Bc}(eMx?CPSO2TB<SFMq3&w44<eC8gK?aLF>g_spq<$W9mIG^!bJ{9v
zj;wlm&KfIkHsDjYLB3a(#ICsA7Zik*em0uwbIUwm7;a1ga0cz;egON^X%VGmzQfM>
z@UELlm~V)z<q<q6FVzh~=J6bhedBs1q0a725&<5J!1v97T%LZ&UPT*o!-H=fy$yvD
z&Ig@VmB6GYG#^mFPyUSie2b+<Ndq($nnnT;H8-G@2TcH_T*cyj8{Rz=0NdV)GiK4r
z*Z45icW2^cFn{x7RpFu1YxHL<U%TUdT>Et~&>tet)Adl!Ej^UEERr&t5-V3T<)-tl
zEvsnw=4T9&nu|f}tw8$b)`cZxhSTtt2UITHSmV!y#Gy*6U;r;kYF9<hvaE>o_CSmG
zN$Nf%%X~b*EKZo~C`9v!tV&80B(j)0vdp7h1{4^`xNT1p*k2bfzo6Lw@v3v@k}h+7
z81U!a^f!E5n7unpiFI4vEqaaBWo^;GXHSi2rp~tk4keG48ow{oC#f|jaLHV$i;`sd
z*=jXlog!1z^HX@8PoE%nui_Q<!jslcf(Ykg1^d#ls<Z0oS<QUTP$fwdiH5zDziw*X
z<NeZR%QbY;wN-wrGw&jcn4@s>P`}s^4RjNB!(>U*h68HZ1AMafBT>0U3$1+o^^OnV
zE~sU#KU>wc^@k{5W>45*VrLoL2mD%LH#yX>#y=n>cSm2igNL`NxOV*s0?%7AZStt^
ztamOBu{_zSW`AzHB?1eUcU6R8#+QKCNM8<*cr$?#@3J%U{nQdd@HQM_D{MD(muN%K
z2f><|)SvHbpa~HrP6YI;JDA?$DqG$y`{`QXK-NzV&X4L=TXR5@ieiP`BspN=cZd%f
zHS=6ZvJc~4*)%JD{WsZ;^FmR^6(=#_;qUf3SsAnsr_EIa1z5Jn01M{o7H{P}vJJ;*
zf9Ar{{;0AN4_?;pYH|}A*0`?3^(JBuydnZp#%GH34q*6!tO{Rqp6IUaeu+$W_OKT_
z-}s5RxZm-jGc5~N2YezXuWM&6_&=)NIXbT|>K1;Y##Uq7Hk-z5Y^$-Y#!egCc4Iqf
zY}>Z|o!@xx`;B}5%1FjD@|=CnUUSVk*IN77#Jb2%OODYh@Nj~GtEseg{BJLS?8?<O
z<+yB-=L|T#!TP<>j^AZ_S&p7PSB3`#lfc6+AtN~1_XiXH?kAjLL@g6;mun9YdAt-m
z!3lN+9d)hF1G(G!+Ppx&<HT5yxpr)*-0!UI$R_{oLh@%6kgZKDf{n?o!BPg$mdLXY
zdB*?)&;Npyh8CaFcn4m@&<RSPjb{@{L2CIKhV*N2^@vnl)GZH>6YZMXX`(p;`{U^|
z<XnTB&9INxsgsEncrmWEW-P2wlhA$w)k<wT7LuSaS;YE&&&7>7WniW+P15Z(V-iK?
z{@%k-wZ?>@O!)qfZS~m+$M3t?PS=+Dy$5#yNbHBdetJxK96I4^KK!m`KE0Cxxt|Yv
zdF&)_60a;T7;D>=WI&ngCtF75&N%S6r1(8Fw13_h3%3#!Y}{nzz*Iy5zAC?K_v*N|
z3x}QHtG&p&-`~`(1Kh0l^{w8NLaGl4ig}+1{J&5u-TqW{u@9u7Jv)erk0|`e!PcQQ
zcl%sluV-sTJ!Lb->0&<-{_}a|Ti4~%+9=t4kM$me`;pe6+}5Gc?SvlF^@6#4V3lW#
zUnUj?qlg7M#`A?bc!n5g(gWbw|E|j1=ITE6VWzmMBRhE6$?7|jfYeySZI`G^Qztqr
ztMA*^6;nIje&~6hU7(H%$xWwtg4p}y(WtAkA}rn5942Um;nE&#<0Db<cTmzKcjg{u
ze$x*SP?O+TerXkZ|MK3XoxTu7qb2-k7Gw|-w>k`k=4BzLvJIQ)U~u?bAic8ljc<;L
z8{4kLXeqe<_*$$!KatA!IhqXZL0#73UliBhV8>^aJgbV|4AkRp3}2*wYBZ~D$e>-r
zgdA_(MRrcS)m8T;Yvq7B@+UCJo--DVQVsqTtcTYxp^F6oDZ}f1o!|Slkb4abEAtiS
z1XrziB*x75b6|0@=bXu~_lyn1oN23Rc8;&6^CqX2{$Q%JQpD5}2jCHTCAldFTgy?o
zA2HVPKhz)!^l-vFrer4BzSNof@u_`sBMq<Mxa%*`;hvP76-J*iTx>%?XS8{YIVoXb
zegohM%LR@FR$X`IjB=2#Oasjq5X6L$DAZMyiaK)N&oeTdl3bz3C^LO0aFW>$qej^_
z+q}2OKIs@c6E}S>mCxJ{TQY3wUcV{iupi=ZWHVP)*9=-J>CJXlCM-^vJsx1cVk($*
zaY?h8512}L6Hv?RIPcSQ(XL&$U`^=Yo62hbss8L1SeXYJ`Vq3}a1rSD%<WQ&yt85k
zZrVys4}Fe#2>Q@^>$nV;guj-RYxvz!X`N2^kKp?YkNp+4K)KW0i+6It4r$3$%R2v}
zw^3tkIu3C+VBaN5VA1kFy)PIMBFZ&JEq_?z**>#<rx#(=<;iEJXUKG$^W;0n8i`RO
ze`v7<%5+})aj$)3TrTMPadmxe7dz?Yn8B|lRdl5;X0<1Gy&uGk^{aY1GU~AW-rR7J
zn=nyr+_HEBP*%rFH)i$QD9Q0JtW)dBuzk=$WhdNv{h`Nmc3bQ-Wl|gbs}2ongk1fO
z1Hxthp2aSTT)lFPw^p1VJ^YCd^0oJ?NyQw5G9WA&KUVTnvDW~;N;%HQ7e6UXb)?%#
z3UJq02F<+Th;YOwQB`Zd+fos^l{WA1bCUw;*q@g}0>0Yq7euLk3&qrUT=AP5_rru;
zM8}ZEK=vCMls_C8GFe{UVPGAS)kBWmd~9eZacfoPGUrG{KSYgmHCi(HR|<@XY&|4T
zxw>!0ovz>=UuiynJsJ7DBX2ULxW-o9r7O#O?v5F|oOfXZo3gy9wF$o_UCpOs0UVWu
z;ex63)FGdy&d8*GjrMIgTsOOkgx&eZ-CabKE!4J}xI<342}r{nc2!rZG)BO;t=BTP
zhnCg=;7AeR*|~qO1%hZc6nPTS@s^t2qXnr#T0{M$6?k#-1e|QZq8i@AGiyzO$&*~?
zGlU0QFU&Y}%_)v>YcN6|?D25ipG6Ek=XBfm#g{|&U#7#h8~65Vl;ds4R0MMuTM;pm
ztHVkoCr?%9yxD;q`QwK`aOS08?D%iAQA-v{Ef|Ifs04XIs`yUZ4b4Eb(clrQ)ViC$
zgfV1kw#=r}FS4!2GF)3X*pK#P!(6Z_x}kS_uS+yD$126~=$h2fHyeMD`cB~0AJPTA
z=$Y-tIr3S1R&=8{HHM~~`G6V@BDac(=MIr)1U}`M=73D>h?lxs0Ovp7f-c7!2Ja)g
zY_sa-1ULOBp9vqsZ5}R!6L*BURLVAA2nVr~=(C4eM|-Xfdmd3{>g!qi{L?RN3SB7z
zmtCwm4q(pcZ>B7^gRCD<fmStbZ*$S<eVxb~|I*F>d*VOMZbq{Gr1R2+nYGV;@E9_>
zI4u}Z#HU`568YX~PQ3MZ9VD!0FXgsvF?uP<r3G8r8EiH#E@kY8+>Pu$ZrQ)y!YOlh
zJyA{7kEQ4xnaQUDqAtg5r4*2)9;b8KnRSm{b?5dmiWAsn#HqNrj|XOn<3Y>j|1r|@
ztAHr?4(~N7GRmY=H1|YgDQdy55wyxiJij67MA7(M5X)f_B&X{DSCN#luhMfl!?ARO
zVZiYNP3vJlV!xG%^awF_NiKiC(7WB*Z<&-YcBw}Y7ueK+mDTU2|6VzL502+1g|PiC
zWf<|*NNha$4Z%2zLot)r2A3>lo^L0+*e!nl9mPJFL)3@#Y#rIpZ)5kH7#Urv+fQs?
zG@>VswHnRUbyx1?l;gS%raQ8*>1RGqam5B!Xz((Fc(!?sRkWT+CN2}XKjU1_`6o)k
zG04&KzdL$eEf6tEm+7`UjkGg85d~_jFrzfr^`UCx>Pm3)D`t9^EV>wncH2gh9O~8Z
zf_H5qavSMk)`fP<L6BQyTP^smZ?5-11c=ClMXwt0;zpv_mQc$#Ax;TFG2OnjC_JM_
z-VEoJ0go8ZMaWyoq4OnX_rl$kC`F`h=5vq6cxUX9`y|0)Mp4GbmaU>!HlLsRhN`ox
z4-`?S(REcXj3Jeynq^)@S#k#*s8h=eL45@OT9C}D-ykpfKif!J=7EU>cHQv(7*6bp
zF#7}2<)%vgjp0fmM|2{M1i|1u;(t^qd}!Aif+2i&hr-`HkP-rd-tZ^dV<mGaJ+VU&
zgK}FV?j`*48c10D)k8^71)Qq)P($|DFZz8|OaHUV0YmvKCEO2s^&e~mfNam-N0GOK
zk!xb{8ldu&%l1gkgeyF<e+8%>)^wqMP8uh+@d>t~78@BA!e~K@`E5T_7nr0vAN=tf
zr`NuWY*ts&Of8$_pmD;&*w(K8GsLuo*FmA(XwUjn#0bkdBPG*YTt%cpr~M=rZKlI<
z*T@|Y)2GuT3&WI5yuwnG00(S-<gN@g6)4?8>OFgmpB@&h;XxmO*~2zS=e$#>$2E>c
z6l%iwc=h2WOM!m!_2H~5-PVr-!gvO+rp}eq0-s0NgR}NtRTlxu+0nsqF~Er}Pwm|6
z&48V$tNLI9vhyxo)eh66FXE9lcaq#AY?yr^eOptFWFZGz^Hnw>a3r@Y5JD21f=>*8
zhS#LHfo^0PqD~4nk+o@W6n!PrB8J6D{n2zkudvin#uE}*Nq8RFS(DkpR|`A4OQpkj
z`B(0Aec$@fCk6sRI-+ly&)E!LWkc6-`CKe1+4rAPi<MVvkPIncZyyO)6<oZt)mH_@
zRjTvEHd8!YvHjIw{Q)d~%Y}n98L^a7Gp002QH$+F7nzi5s^68}FYo|;%|oZRw|upb
zi!uDr%pM7HJ|&!}Y$GmfD;H1m-p*z<;^9S23QqKV-J0E;wC38KL*#!^rb&WNiassV
zhXck155y3ys@@nu9BlGXCM9ZJHbmfGtv&({TT(4$ZrUhJBYj@bM9lP+k2|ZmBpL#m
zHC^18r1<<nkkUgeRgThn<`Ea9jTRDg(W@T_{z*~(jQ%BOX*&dBynMA@zuW`&Rb;It
z?~x5D$8|?#Jc8=i`y558b|nEZxRgl<bhGWkN^gH}#0wu)@3$m+*D^z^aoAM*MZuvF
zR~p#2U+mk{q9LrBY3<g^&5M*g#4c)*vG3gxrZp2pcfx&({wZ!bj$rgV20yol4f)fn
zdV+Hqfx}xTEiu_Q^tw*%z?<vq(9|`XLa}cEh9LsGN&%P3#0>H#xG*V}2-mrQ7*Zno
z!PQvb=kzz~WL<gl)ons~lQ_Taz9E1k>UrJh5&IGSzSzXdbRzptJX`zj*S5ps&X~aK
zdTC?)-dH?C8A&s%c^TnjT~zZMV(4035y0W9$IsO%>p&ELV^_R^h4nI?$80hWit~wv
zpHY#uFjx*@QUWN7q&d86D0bYdq8eK~yx?aSw{mXQtVdDbs|!)Jifqcb-DPWt{k|BW
zHF82zNK?ZC{3X5Mk(#oBXnOj`fNZ#;E5@r;!`I<4fFxYir<}CKSXUCl*dvzqr*@VG
zhfm<v<1K2I^|0kt<75rbH$#0YKAKA<YmtFQKhrBrivGwVaZ+?yUgMZ2Fk*#AMM1as
zL1n4m+d0~=)eM)Gl2a18+mN!&F13DZ&Cp2|D#hhR=;~q9FWyNGTOF{k^jD=tkJtxJ
zQ`z+yQ^F<qn62g8zu#!I#@ms`Rdqwhfo~-FuvU0;QxvhbF_8WXg>t`tw3J<7@yK=7
z<!q=L(D|6t_&LqPwS$=SXwQEtM+|3~dpT)gC-^VV<r4<{PdIha`1ChPFY?FVG?5dd
z1PU5b8}0{w8gB3F0x#oL!Qb$lL=%eqWJ1|(1ncRXY=Z8%94w%hFtum$&n|9tXMc!t
z9eFUMxl%>HHlfj19j_4IBm7ZNNwh^?7HzFpw9PT9s8?jn6x0rax>*<29G3z$zYloa
zh7FP89JWQ#X)pABvvc`}<zuRUNilc}Lq9TJ%xXDn-2BlW4oW<zCQ<tWZuB*(R$zpV
zVDX_%*G)R=&@w!EN<^VnJGRwC_uKmGocH^-@B<msuQ3*xHeXk!YQFXCAy%6iX|$@8
z6jUL)o{T)9nI`ykMYd;&c$(eax7k7)V&W_e?sF_)p6jYR-*qGsEu)sYOtg;ni<n!0
zMx%R06Fc);Uc<#5B`==s^^#=JN6@y@_rRXuE&QJwe2+g>k|<;8KetO(U;wo*Szq*j
z&|EPCgnw()g6CJCxSp=RwYb?reXHxTt|Kguf&kffaORn6bAO|IlAHeuKWDuy@&FKH
zG_sB57)v*&k>_j)i!|BG<YV0rQXOG)EA((NNV^h#wrx!nO{!DF0yVwJD$k?Vo^6QL
zE9`s1i^?iPM5iR7(ez3Fuvt8_`$RV-eplRDNiQ=@A355fa2n4DaX1|KlE3e%0@ohR
z4Vk(^Ffb=}yN#T)ls`pGy0#iwMO*InXe3#NXYRB2pCvB(j}h4nA87TwcCuuXo?~o0
z{}$F&;s7=2db2Nw>sRQ6&mZ&7^?ULdrjb}_$QQlr=iJI97JwbpT|{-6YiXAZL!-he
zcw6BK%r^H+*Vpau52dtQ2)H=yiM`DYU|+3Oe<J!r9eRhvCp|J^oXZz<K(&pI0;SI<
zgIWEX(C^X>ePU`bnFf{|elOF-PB*-_BbPteY;Zsf&~8$>_%{Ko;AZsiFv?gN->#RA
zWm8)CoxIh2cUGf>j-zA+cZ(Qyo7{9$oz9Z<o>T$ypG|SN-p_{Y6UmkBQA78Br+j;%
z{cx|zcgxNxcy&*BNJez~qqi+7u<fddvYIl(nK%9OgBe7X{iq4j86@Pl9$we*SLPGe
zSnanhkBGZAllN(V;S9?hOOZlshG4z47?ro)kj78Kpk{CWNOfCX1ZLd?%x7!>Mid2{
zy{4cTVmJ>JsA|<evf$E_B>Sgb0zJyBcIJotdfPb`%~y2l^AXc$GacsLcaNa~H5j^F
zw_m7|{%6PkKVj?Er{J;os;<Q83K!>?G@90UXR+#Z(s(@V6;{v1#<M?X@zb&=|GT7L
zJV6GfkfzknB1XCMZwdbID4_2Lk&sd2>`J3j#kRl@<%a_0=Y>sy;r_nB3YhTyoN{X0
zNxZ;|pj}CnkoRX=M*T5oVziLXaQveW&#lM*PP^yRsf_kEaM`<mLIbm+kfT&)okCYV
zl#QJq*dU$GKN;<_q@^=24USz6@<C9>nV;Wlef`Z>fnn-dmny1B?QaDhOy$*YOc6u!
z#m;9KS?!mjFyjV2JlRENFOF}TqMOdz<F5FYYwuP3$TUjQuJ3$lu59lKk-+pS0~_pD
zS)PD`$*VmNtCEa*l(^g`eEIA%xC*hZ9e;GNWX5WBg&dgV(Sf;mCX>Uq$%DI1kj%s@
z0>C2nG>GHS7BsN{;!$d)G2WwVXPi=%ahqx@Q?x$6tJ8IT2f=?^t{pA`ePF@9n}8UV
z-S9_@HKq!ONAxYS^9IIF@K!k1X2WaycgDNqqera;bkTU~u{KcWFr8I?e1JjC>Qq?C
zBt#-wiV>m^9LD0&Q2PUT2{^@LXCIv7!2Lp@C6KsYvh;YYd?kejq&=JEdPi(Z`w{;M
z?n0a-`JT`A&MG$r<`2e>91@?+#y0OU4OgiH+!&X}>#=W};Evee$233ag^OaTOSAg*
ziC)wJ7n2@XjhAfAq_zttaPEfb$lxTYj^^Zq+lM${=>a!cFV-i6*@?%m^AJAcq1La+
z{fu1;518bhgGyuYP4jvAp8CP6$QuLeq;|O1V7cq#ap{9tUOoJlbYYC0{hHeDW5pSd
zU74H<9`8_L@^{if1gIs>jq`Ci(bo-42@l?LF(gE~*5~1wZCv^OelW9^XZo+gUUT3A
z6d&XqetK^#uLK#^882m6v@XwI{CG}x#kPrVb11IrIjc2jTr%9&qG5M^j&y`{<B9y~
zi9Ttft8EG0X1!S8oNc+1*%5oJe0&pb>{;&g`0nQUt)BB@;xx#`VzDj5aYK&Z(ZFhh
z6A*33QR%+4!|wRWOc@^dWmW01qx-$+^!e6r^hjs!kwqPshc<TWud$tyj|{_N;IUmP
z*Rxo4=A$yHn-GP&B^BD;MbVEB{Df%+!%+Ie^_6LsROT1A$FHyT1Ba%AX+V$AS59b3
zxu?5F2g^3gh(%>V-^MW}m(Mv4bmjVOGZ{)*T4B?3Dg2FVQuKqY(Y5)R<K-MVUgo>n
zSa6uHmo);EL(F<Me5NbAshfvwUHviyH?2~!<E@+6Wv7SxI@-&Vqz!Be=0n;F%B*Ir
zHgaC}P<vk;4rs7H{2n&=WMj(ZAN>@9Cj@v(3#D*1d93J%ML5AFezBzNaSU#a8a+AK
zbcc+l)zEv1kY%l#Lv)^bVr!sVBgFJ_8^Gd?k_E8*rKdBGE>KFz8D1Ay*Ht}ylyFg1
zcTsgoIVKzj4z%>JmUB~8&n)9ToGZQcIepKoc4ETPc}5-e>F3rv=6|A^<!LfL=Do*1
z-G%Ml{`UBefiZPScKld=5$|<1<L3irt6y4(aC~2<<c@Wp<;u_X^kdM`;*d>Qn;mw)
zp2(!9s$-vgFb~9iuRnB8qxgdZJ$$;xlHRiasI{o=uPI%V$Q_6Gb_LD2HIHk6zd!gD
ztpv(G<LshL*W?O`BQ~hyUNR4y-`IQDw)9cRf%n=LAGgC;wrlZgq*n%6ni8B;i?3N9
zyM#$l!CFsMGX>X>=3rrTRe%eNc}sZSU)i3|_Z=8;!3gC;ZuT)nWjNoxRwWdWpPSoP
zI=kv_<SxOeS6`H|c9xJ}qk^`KiY3??_Uol!Fv3;WaCAy7r(SttHOXs@+8=&cDsyUM
z7#YJhlNIAaHnf2~2Fzc91GIZmwBl|ew1$c!UIxXT-Q46%Jm}XxXOYNvl=yEN<`psS
zd+gpbZBm+E0^<-Yi6X^41-}v>tIElW7=lW-nw2!-3~#*H*N|ho@J-)P6~Ffq>l$<k
zL1XX)1p4`6&ELb{Z<P^da9QX7*^G=$(*M0GUJT=a+rRs6moMdwy7=XCwyPM!o$e*)
zgfUtEOV3bw*HbGa<#N}%l&-MTtbmZ{?9P3XzunK!sY#c~;SS24wO@2XzpU&&B?P+1
z;2A*&TeS}Qw)!-Jw}C?6k|^xkbM!?S;zn;t6ZZa&3%#?(T&_gLdcWhSPz-oI&uqGY
z?>CI|Kr1&2emr^#cieaAi=B?^i_!CgntA{yy`9<-9G@xga8D24;}lBgdAqt?6p3^x
ztL^WKnfH!1Q%YLzbraX_yu>Hch5^OJQz%1R;aB$_5(>q?z$<v1U!|FyF0^#GofMH#
zeuC-S<={syyhod&JCcSFZFYgv**<AkJa?<35b;2(8+=)CXfjk9FdH@eFx)c4PrMK=
zcNfx<@vC6kM17`o75kWIOyP<spVldhIBi7Wk23z_V{hqf0@@FNF>7twZT-`BeKHm6
zz+D8l-}`>J)l{0i{OfIymjjn@j=(vO%%?TXFzGbb-7lQ>ffO=~hT<t3p2p!Mm&>mh
zUfcVqpWcmcgWxHHG0D4mF%65aJF|z1?%?#W%4bi%*6*(Fi1(T^>mB?4slhcr+$ZWj
z=ktvP-|O`;iMWz6g89yiPwxfQwf%_<G<BLl(DkwLiV}%nxGvFE8Hr&0TSP#h@!(Hk
zE|2n3*5X}bLPg~G#n9E4<(SpAa~KCb{^`%6W4G-dLa{Hcvfyd@ewRKP?;o$u(>au_
z56KH!ZW;ViKS<5we7=KyS9(Pp@<k}K7}!T7=C>#OFu5WC{S0cd*IsUD?b|AhK*080
z^8(9(d+7Y&#?mieSab$EX=wV)r)5R&NWJ|0QY+JFI^@<-0Z#?K?~;=3Oea0G4{Pv&
zNfa=;J9H%JSN49$T(tyjx3iDk$*J};-v1sD{k?F$@g<R*s7iiVUzM*ZCcfp@k&^iV
z9jQw)d7>pV0p#JvlCG(^C~e$Veqqek2;2L1D^U}<yBwc|uQ*4&`I~yNtDhgH@yrAN
zBtJcLudLUyeWSFtEoY8L&N*T!2)>^2Akv_Um|A3+YQAXnyGP4D8ft#Y#y}wO^J3fZ
z-ri)$D?Tv2?0HeJtzRf5*CzV(%HVrQsuVVV5}lD6zu>+>-TI+wUD_3Av=|z#G-Y+R
zDQEn`Ke&V25>p6=C{?sqOIPix<tcwL@L;|oYfPLk?EKV=13CLc_VYNEXzS+j!%p`q
zKN{!!zooz32NRvRFzT8>3lk~eye7Hn`9S*lK4ha%SNDzJb>$=vadR#(!);)G|1xyF
zbUhPme^-fp9d6f|L*(aPg9rU_M^0-#CUSd&w|zKa-1ur)-<&;A6d<&ev?<YAEAK93
zmQ2_kbHsJESab4X?F>P`9g{!&4qkQTM^>)E=z~x%{<f*1^y2h>tI!%FvSUTxH4m8=
zgyJ(+*@ZDxqd}kmPfA@#9CXA4yY%~*kZs8cm%!`8AHvUbWagk84{NuvS^$iO1x|#W
z-<YpHeEK(7SSQF`zUHo2em5z-f8K&t!2j@ze!WX_I+6*lT{KRpl|9EJ3w@PhaOmXY
z=a<aCnp0W>m*P68EMnM8whsan>O1Nz^N5$b8;gp;()=7-XX2KjvCg~km<-%#T@Zfw
zzTDND@~R*EejL%Kj~pBg+&(uZgD#YPI%@+5F%p~UK7~>fS1rt0uPY0%%gK|6buMRJ
z7$x+|SDTxJy?=OEC+@FG%9Elm$xf*;wqUL*Ke4;fwKJ4u4@GM;`Y6eQ<#Tydnc@14
zu1$Ey5Ki~%DyXBjaVW_`=Cc1o?Ee972bR>=o)L$4!C9TP0=FbSr#-o`c599_wRUv{
zCgs^2Uhb;_tPwCI5y5+zd_^RGp61lPK5{AEU5+rO-htp+vcJUD(AqKBwO1#xV8XPz
z$q!zA-~M*XF`4rS%k^muUj`?ia{Aaw52VG+;zL1Ib?m-+qIhqs5)Gs?2}F663;7of
zoU-uFWTTN38K(r4+v-H63qF$Zzh1iKv$8{5*}V&a{M}8KFbp_tWmeTUTZ~Ie7V(u|
zw&_Y22AH&PIR#Xa{g>%BLzP3_a(*s&N2XAz*XNj5^{mqg-MKis5r!N+<li3@X#8?I
z68+;cnIc}*>cCQVGA}Gg%8DSUXv^cq^u9-@;T)ZoWvd}$E{-{-=K#^$hi%_!j0_@X
zbtn1O65iPrEAXW49(bT)7p@`Z20bUKkU1D>tMi!Z*K=mN2mykOrOmjxf@t)*3-|Gd
zbT14ny43dB9J=^DNjx#H^`PAAR<sd>;pKlf_GP$rA2xv`g0-PaIY*2etlvORAkme+
zu?oh%MA_0-NaO<JC!#zxhJPdii6oLy$^<kuGt)6O*Nht$bvBgHu?p4fpDu?{DwN&v
z0G9wUxm&lo^-06eBXgzIc5ro{J8jASJPqfDG;q~&vcWrveHVt(R%i~@c+vrDsK81t
zKh#VK*PSQ6>a8-9OzEx(P|cY@_V<A(tT|4G2F!<orb^ifj3izumEu^+#e8?N4M<pg
z$P|KJYE@;IXPI)j_osQHcO<iM?aDSU4{**rmFR+5DU%v?H+Oc%-LM?nwwX?%eE+PA
zk$nahhH{LD+#0qjWppHm=3$T#b>A9C)5#`N`$@ir`@95;^EUmP>CX`k9znS2+;>Zp
z)~w@EGo~(7hH{ndGM0|N=*OZTI*i$__$o@;_MQSD6|NFsuhgEsOdgl|*uAX9Dy}y#
z)%q^;)GsxBd(WD7!|J(tgOoV-5%b7QQ=4?3gd`#Me-8fgExR~T3VkGicFUuu9x)61
zPOz7NS|X<cE4lI+MY{YHmEgF^r4Ke?G4;oX!2M))f92zc%4J}*DeBtB+_ibL8IVNK
z3J2n2JPuxuKl@~aT8Q$uMecDq=tD>;fNS`gNcHZ^_`kgXD?Z%33GK+`k4wvRw!)9Y
z0^AQ1bV<(HMNXDmC$aAxQo<#V!=^5&Ls-xKQ82<V$+gIM<+p{kev?h(1($+ExjK=r
zICuS61~3mhiR}-WB-G-FE;|d={APS#{#wOibSDyh@Pdf32m)5|riP+Ceb}xRk|ge~
z?MDBe%D$@rUwFiSqfW2yhYfPtWc3=5I}&vHH&cx>H0Yn^Ie)Y<;!yUl?*4!&ugnlu
z*#CE@6O783e^>n=yL?<Jh)5uqcbf?~3Yt0$8UzI{{UomlS8-$89q@06Mbw;31N9e1
ztf+jH(LW))yqV;NpBAdq6xre#>Z_&xBz-@?u^EMbsnQ=l6i$q{#`@p^M5X<L*sS6+
z2xW+~R9B(cD{8@y-s{o4=4?H?Cu@;ts8dKFQx-};xLl~LXf_5xk2#hKA8D;Q`|e||
z3Zd|gg*}k~L_Kw~>QC_7&LFWEF%;b`YW24@tCD>#{+2r;ZFAH8z<kxWqo}lj?@l_g
zqNJuL{DBNKP1%r`#P-kdHfjG9dQc6D;<Eq6^fY4-gF7YBamoWz@AEF=#=`XCifVZq
zrCqnr%m?iMzQ#nI^CX84F(O6{ow)WqKoP9oD#;Gj$zph}gs|q~|1V(nq<qMF)~<D)
zD;OV`me;zk57jiib6q8><+fMh{KZ(zY^6l>5EN?-Eb}jl>5Ou8YwGBxlaLkVsieoq
zflMKJYq_#Zkppk{M&{-<`S@c|su4>nd$89?g0#iKB6Y*xdHQg9R7wWRWH#AiB01!;
zC}g_;rPbI|QEyY(x?Q()a|^8`AcJV6sOTd~DxezcigQ@eOlTf^4g!gVu)+?p8q;aj
z1c0Lm_<G-2b%~P}6&<qh+H(KaV}czjhW%>5>z4hoLHE*H>TGrbdHcu8RzfQHC6g}>
z&QXgQj^tOVik%MYe0m7WmX#aQK}9>P|1++mbeE|*Xp2Pa=QM<5vA8>W<_NUxYv~Sv
z&~c6g*Nz<vyOQbZ=!t|J%}4A0@%fivKh;*@Aphzr4BaV&-2Ld2hHzh=YAnGu&N`HX
zQ<5{1R9zxbbc$#KxqV?_Pj5usQ%Iw%>L`%VZ{JHx=*#wLtNnuexA3Ru=Amy`AD>=-
zUimz6+y0uOK@TR8G=a=Mg2eA_4H8f{g|G;*5+VQCj;RrEa_IxB)y7Xy3v6}$i!JJi
z<*0uG_fTn6|3|x*<Yi%20H*NY&YShGi6dJ#PjXc(KS+z<aWfzhcK6rad=;=MqC=p!
zYMt(6|1j=NLih4SGRs=}waFXJ-)D>1%+8FFQsQO2P{WyY6q}G&#!3o(fz!~pkbLk_
zyCyVW{t~SE*5sZ^d!b66ZlLM7I_P_%yy-K20&e!im%OXs7CSc}QS^Gu>izQBna3*t
zMK@=aP*I(+FPOn=#}O@~7%%GrSI}=)$k}TR^30qYM1zvcP8Kf`JTr=)yjqcaaY%fW
zS(@}C33M+M{t8D)VN}Et=Q<wc()CNoKR^ruW8(4%&XTI&eNLzy1`a5#czt&(n-_B(
z<Tb5u!zjx+dQq^01l_s09Ub=s%q?lWu4<T(t!M~rDGG@v(uU1gg8Z}jf|+fCw8Ow9
zqsd@@#~ZUYfN?Z)8vC8yo-7Sc9X!{w7*Kle(eIQfeAp_kqJz5obcH#2(1s$ZOA(H3
zm^(iB*3EBlAizsiY63gViNkE4WXhSnw=>?|N%7?0O9MRlb7N)9U{>vAN@>r^Tsnen
zEiqpTYg<gQ1AiJ)0Td3Nj}+O=xjX&P1L06yeI-JF^odLnV|aSrrro`TFlc0Mt_MSy
z#&7AbeBBiWMsBY|Rsd-tB_r6z%?}C2dV3)-7?drA9vKA^=|Mpx96FL(0(dFBgM|7(
zkh{y?wk1WkiLA&UV^-gp$!2-^8Qs;!E;6G--_v20V8=cURta%+B6GBnW0daGFYOm|
z%9YfL-Y-eDg_)eJ7?jj4Vgts><Sm3B?CD<S|08z+@)UJER*>Dg{8?P=&{yo|uQ*Dp
z<G1)F%y!;`n0L)w+J-~b!a*p|sdhiifKwRs8zFyV5$U&tFL<>x{)`SPi2pn@3HelS
z20{;)-7gj6p8iVcciYnxHKkM*6~j|fBr$@2rLa{=6C2PL3PkCUcDmoMGEWZSy;@i?
zT(|sl^ByhLy?7<=q+p#O#~0uDFx%?<a?L>^%269SLRoYt-tZ?g29;UZwzY{1y&@aR
z0ex3_SywQ9zNme~<`DW(8W8d#G}p0&Zn&xj21=`c{TV)6f_`CyG$=MxgAq|lzG2sM
zQSDAl{ZQp2L&{4=&42m(<V3^tl9~H=fsg_R_>q3)W&`I@GGYHyb{l1MoFZkET2v*d
ztTaW&^7MIkF<#A_IAM?^O1IO4h-Bmzjt5-zUpb&b2)PDRQpt;JKn7LF4J*)uks1n8
zp-iC`GY9J{uz-bxqFsN|P~)8LXtz&vcRl8o(3s>%R@q^)4P*7rGEI1}Zcfw6^+vW9
zf6O3u)GWpXnNxko%3_=WyAUt&D&uemmhXeL9KA>|<R{csn#4Xhf`%Z5{vN0n$%4p&
zv#Mq5$GRin;B<bUrb@a3bghnuCmFT}<w4J4U3r`Ln|j`sy|h&l8HabfRaUA~gF$Q|
zn5|qYFwkwgf`R#-m47)Bke2#QvGYnoL+|i7VV<7$mdGm+;pcqEjKl?SD0)2*s86_T
zC-`0O;5&}uE4%8KWtE^xaDR}7%oK3j>iBpfy<1k^RD3i|mx>XiuAwxeD<E43L%z=a
zO|`(#|JD87f&O8;-S4!Y{@5HQ{QSwlvMv9rOouzHy#3Lb>ybkHx_nq*BLIk+67V}(
zx?4u$=o*N@&=S_|FiVfRQ;!5sPteLP_are+MI{ByR``qcI=x^Zo{Xx*zl-S>?m}<K
zp&g>XFt~@!zR{@^>%<Aae&zJ6UQqwgKCt~3?IqM0{YIB3t-3K}#mo8ac_tUM@O+u=
z3@$rZ2(|rZazKhpMLZ%Ao<gUAe!F>XqTzf)0aQHU)Xdy%yvm3Q+H#@Os1pOk30mt5
z_nZp#L*D@DNgE@@|CK+1(3$-$#gwGHHwRfY?GeUZ=;z!$dcSkhtzN_Q!lMkbs(NKf
zxT2yWH`u3q*T8;ab+tz}vb%!^`HL^gpm>-EsOLYSl?^lvsS1irF!rZ9D&E_8q6Q{?
z$5E~|BegMOFc(R=e*6-kCfKv9%H@rv$~Hgj-E%(7ohuR6+WhlC2gCz2<d_q&8BGV_
zmpm^Z(s$fm-<%Zy$s|8$*T^__Fk#+(ymp=8e`KFc)9`c92Fv|oCeU{Ea$SdrHn<~c
zT?qu1yGoj5g__M=xwr2bhlqN@3yCD}3>6aZWN*W+!<AgYJ8Ic8$*NvV(NGcUT*xT_
z;>woU@`x(Xjmm4$+y_a_4f`%rB9_O<y?%|oD$`nml|r4WrXO$CE4PC{3KEK8wyf2i
zC|(Sd!GsI@3RdV(O0{+Uh062MBV2t@THcc!k842&6;8FE8<&95)29T>m6SA*Bx>2?
zJqE>##8$+hRz&*%_A}h^Q4???|Cnk9KA|nB2_T~U>4Lw3WL~{TAb)ZYyt#PuEtzLZ
z^Ak$6eBZy6hc&c@a^Q*Jpj#^|w~=%w;JfAk33phrq18i%ieC!*3zd#W!+?-m4B7}#
zTcR}Q;+1xIA<kVVX%5UWg*M?$&`0-|%*vnE!$x<Sf4txZCk&j;$~+r4SM2y3Zz?eo
z_P1`mKkZ)idDwaJe5$HEg-+w>$9^T~>Q*F19lPg;?bdXsh=WlhzxWjy%Pr`3utO-M
z;0?)-Y)w!bv9IRN>3_KO^vZhn%e4o_|AyVXrEFRsj3QN^JfEFHW4i>LP^no;NG-1V
zXmimWDL=$oxcu^U3H3R|l8?>kv(Og$1mdTp%7CL@6?Wwga8!8<Kq{e8Wv%-#dk|0T
zq?-)Ap7b5)v!t!Ek&pN5jN8FwzZkbqndlF}CQk_StRpfKbcOD;Hn6bI(eT(zrrfY$
zLF1la0KaLlY|_`uD0GbcA1m~Ke*C6eXm?eH^s~IMBjbWgw~w#EWvG&~xVM?=V!}o;
zqWA=<J+H`a9)9EKLT9)zchqtVxHEN^6v7=~C}r*UMJA@Wk~YtMn|DY=28o&CM(l^3
z&{K8m{ZpDC>SZXr{4QxtwE9q5M@+BXGKeOu=Qw^|QmUVG$%npTB+4BXvzLWNiw*!f
z33+4eX-12b&_Z+PFPDH<_#c#1CIin5d)H`atJ^~ktEK=}LgH`WKg0>Dz${=?K>Ej?
zvidBZc@nx%&^X{jZHbgcH@<M@{8_bJPU53UQqDa45wHeC;uTMV2fw?A`Jy=AS_o?Z
z_y;>S4+y1zahDc_If9r+BWx!o6*g5x;R`AH7D*h;NN}JAZR0lje)(4MP{iL+j~z0N
zBOm%(-lZ@#eY`ZEbb>`Gx3BFcB*KX`z$vaXc1&puHy2bHw7y)@2Iq@sYZ^@7>%S!%
zm(Gm<PjE4LP4mjvCif7P-AjMs)$P06-_d}$rI^)U<x?kC-&&Y!-+d&lhXhnb)|4^v
z7rA-Wy$kT1`l(RSnwDb<u_X1O{`^AQeV-e>H_CjSxQ^CF1Z2*?=Vh_{1fdYPZ4}y;
z4&zM+)YBD>b$DG96wFQ$MUYDs*WKl}H=;Wyf~|>P<gXmk<Hq!47a1A*bLOoeKlx95
z=fd!P$k+4OV4f-omc>Ww2TZ2{dqlb?2q+t_L5zw<MT4x@+KO}H4&TWk@iCZ;U+H(d
zX<I(jz<xm83_*TY+n*~EHR7|q>G*GfrCm|1+TQs4AE-VAazJFLfUgJ7K%{7QY~Hbk
zqmB!7W(YwFjg3aF+Ms3in_f_L0|kX;{(3_>;Y<jPgLk*pO=vW`Q$J-8<K5}uAh1%Y
z<x5b(0ZzS>Q)Clnb~W72t*S_dY(a*SL<uybEhKyaQ+^S7Wha$WY7_9l=bOL)7Nt&m
z*_U@hQ0fB1tZcD(sD}l`MUl;9H~3PfqI+}Q(cHNg-*``#{4v$&&1nII%&w8>6Aj;f
z8v5e~;Xp@|#B~Q#%+{k2Zg)p^825+UW2F)hF<<dXzJ{9#F%2eU+hXGn;mA@C{ok=;
zTp{ae-qP3A;U7Abdk+_W-rRC0-)GL@KhIFv8_};zO$Q$cuCZ?gVeon2TGZ5<-jZ#o
zWS~6AwcMe@bRdOnU{lHKp?fJEzMr;Mx@C^z1_K1x9R}-dEowAou`pQu%gR)@z<CNd
z1-c&Vd%t4>xL_4DoViQVtRmIns$8jYdjWLhGpGC7zq35f={g&Xt?yh$zeSpTT8dQ@
zO%A!-GJ(YWRZ1mQhdN5$ys{IqF@}0s1E3ldS%M%RAjGNDw2gD>8>v^J=0Iz(+gR(*
z)Bh@-{CG_HLPGCIa+boRLGC<tHR4VlQ#q160}WH5_AOnAz84t-hP~f@fb$ur>m7Cx
zwLQIBk7mGg^vWl|L(|j5a}Ut=kL|5kIJc2;(x`(8s~{Yb(qN?=W-h5Xql*B$o%GW0
z)UpVpOzX@hnn8krD=aoyzY01k-6ws>`#b|h5^{VeehZSRG1SkXZGyl4IAB!VA<`I!
z9w{)HIZ^<5_xx%zufX$wV!MoE=$@MV$3ceR1zNbY>MfrVsWW%c<Lr+bPPp`%KW#)D
zM#wK6@Nf&&mPQdEH`AWii0~YmM%4MjP$fA|gG4uo59XWOUq#Z8{y0W_No|~Yp?apg
zmvXhyFMJ5)-ZqkoLL1?}!w!7F2CMAkT)p1@QH!XaROVBpEZs|aqujjy^Ds^@DJ?eI
zqKd!JZ{ea?;5t}ics+I{$1}F8uwM64ZzF;~#Z6#l5S2wMX7>6%?C|KXDzXc{2Fcm5
zm0x@&+C{-flfRORecMzqy+mL$RDL}nXe-zJ?js7t+?*#nE+3B(>P<(QzPRHoXWM1z
zL&E|q>ldjChABQrd<j#ksTEg?k!(*|IDje03H7TFn730&6`Q6<QPrW6y&A?SIt|U7
zxdR=;_OXId+S02IoV7@Rf+3YIN6nke8@Oi|{rHyTV-;iWa;>kClo$zJ%V;lz6ul8p
zv?NYn>7%P_fYOBvoRTZBQOqc#@QoLUbFd~}Y?jSeyfdN>J`Ov@N?34MKo_Bd=ofSU
z_^sZhqHLvgC;yi*#kXObbxKW5*GOicl*vTDzh4SbU>Ra<mQQLfiNycnDHaj-=L=3B
zy^wuf_<)s0AGJJ`Ym3Ew?Q;+b@VJm*q31HOA^Tr}WU_I%+|S!S^*nx^7|Fs|)=V;n
zDZiU32H!j9R2vx&b{`EDlimq&aOvaF|A*0qT9&n#l0w+h-$)i&8A&L$(>&#WD}et+
zuy}3ioe>Y{YDPKiPe{}$uy0x5CyfF=Y1%nn<a``EXd0*g+5!}Z_a%+F$yLaIZcq9p
zh#`mfvI438I6Hb25>2G;ihRukauM>fFXkT?a5IgnUTOXrF}R8m21zoN#CKw9<%ngn
zTiJIYguf`_$ikw|!Co+FQhqkv6#mGu?sf`fI!Itd2l3A;(hs4kW}r7o^`*tQZm4;1
z9np}2xqu61-&#mC-f_#T!1J+?s**&QbjT--rnqwBVF=gMb6#2w?q6KyYqyJI3m5QZ
zTK<};3wQB++2IQ53O78VpUMc0)`&-_Kq(P9hRDwr)kqCi+x&7TNoTEGXQrjrLnPeL
zJWIMW13-EjxE^G8IT<ovRdzJ4A+%X*qe#FaspQpfTY8%3=<`eVS{;;!7#_htXki{L
zdcfZ@_aF7Dpc(E+bkyGw72$Lae8JEA@N(l+B6Pdrr2EQRvc`tQA)h9qjEb$<cg!^o
zKBFl*RJu*c{^XT;iBmM8V`J2%Oj_9+DZy+Vs@AU2UVcINck4j^Vc2Zwx;#o@>R80f
zs%aTvBPMfv>N%At3Qww-@u#dtSQ6@T$nzXXJV|Y<Q<XY4JbrZpL)&h_U_sLW4WQb&
z<YKVPMK<(tp>4Ltu!rd8pEUlOgf}Nhyl!}fHV8NYiafu-et6VI{=polQ86C1{{SyE
ziePpWY5P2j^qp|d&LR^GIh7Vd2DO5Ej|Bz4Sr5t9`sfVBjmn?`peKdTT%>X(Mf(Jy
zvA=16rtBWfd{RsC8XFnKxuA#P4OboeroC{j3;^8BOhQgS^&YiYnV2vEP~m(Rr1t;P
zUIp(J^|}D*Wc9uYZh)C#!9KuAs`ArkI!}Bhh)!DBr^rFa65|f=2&R!R+4^l>A|b%4
zX33AHsSlBt!=&SqyC)^#eP9;V%kL)utHtI@&>H8(RK9CINH(#zGh=}WIl3x&3Ozei
zGRrb}NHk8!^abCsBfx(KN=dPMRvG4|n0UneZXd&ch~#_w?BlVb;uA1`E53~r&xW*h
zrjr~EKuGhMgq`EtJa9J)vk3hkFenP`qTlFQVH<7?30Lej3*TiZTnipCkHJ~FaJo5q
zUZ*yR0vF>S$bqr10@y1U^DdolF8p<kQlOlO6K}3b8<+D2yvd{?Ut~z-(Gar!KOrjU
z`=}*Id4{E=HXFix<iF_NHhVFL1?d~Qe-f4PoKb|xYm8X9ov~89P@<^_hw6m#^lGj;
z<s@<d+!=X3g0|i2TX{9Z>xl6n?TCzD$XF<jDBnlpGvymP<)?;ynbYOD61~eMrw=wc
zY6V6t2!sVkb?tt)9<RnMAu@Nj@phNsIG#nJ9pngNh2Qs=*$F25|0_)Y;e&E04M~#K
zRpTn0!LK(O@4rS$KeM=bt{tOu<g3)-yp%<FAxI4IL>pGEA51c9IBd1#NL;#6y5AbI
z@&+E{9{#$f4->o0RP;1JO{c8>0JpjEGa$Cjd|QMII=j#xUAM8gsyCL{6M1ST9J()J
z1x%GDFZQOyc##!nM+c?y9k<=an{rT!uHXTXX+3h}Vqy2tzv>@(Kpqx0aNhGi4yzPL
zRRgTjs^if(WuhseRD3Dm%cLvhzMhY!%bCL{r<M<14WBo%nmuxk_}RqKA2uR92b=lF
z`#)AT2P@sl4&Ei0Kpu;tuCxDpX*PP9kpw0z&;^_P`Z-Rz1Fm8y+R6tWeDc?<$(M0V
z%3ET+dX!euf>Nl#E*2yV;@S)aoz3>WJS7NMgmbm=TU?PxoR)RvW`D~PlSM*@FR0Gz
ztu8Xp%ejivgKU<sxVN*XuM-EN!BHKrwNzCFkW5-S3Ma?F&RT;De*uAPmkQFzfAVRa
zdG+skb7?<ejzE;osRV&jtXTp8G7kp1f7D(>=-WB^SAfH1o+U^s($sDFB#a=n-{l#`
z{683oz$1aj^vuqN7Y_)*a`s_t7uRP*->CO3vMN?$#P64Vq1RedFb<i-pJR*ocE{SU
zyc6b;B_U_j!lU>-m1Yi$PsST3GaT=~&uUFV92JjVuWeoSC?|!?hv_%_2hgDGSw^Jm
zWBgOkF~KriYMOLrN5w0w;Rfe{9R(O%)r}7n6&ew1<tDjxFWd##Tx;t#MaPRzD`0}C
zU4!{_0GvWlapmHud;X6_U*3$XGM?sz<+lc_E}J%area~z6oxeYh>}B2!`x3Pey?qw
z{^nGWKdmA5U7LQAF9ROQUsyniwWf&LOb)x!wnxby54JaH!r%s*+dDn$^2B}vvl4*(
zAsXW|J!#0&g$kAnU!1Ti%V@LTD>Bw!mvZO@M^(7`H%16lPCP-xQk=YSQ7zsxT>Dh%
zDZmW-YTzp}khItAsQcGuzD;j%%%G{1KFx{)$79F?VO#j+8psv3VXI+DIrlAt;aH25
zXEL2{ap6BczA~0`=MbsKT?{a5W~h7I8uG_9|3{BDINRAg?c_;cK-p-;=pdIJysQ40
z0NRs#`0(>9=|kDm0=`kp-5OSX_MsnWPs5u3Y2fPxj5xxH7qs|U8GUg8)KSDE1wYDS
z1TKz#nn@IOG7)shlPlZlZGU3n>N1(T?z<WYa_;D=J{LR9zeJGzUY&at3HH!g*;#?y
zGvquc#~M9-!~xLqm<bO|xNhi-&`$2#Ppo~_@HXp#I^mGwZ=s?98v<)V)Xr7hsE2?>
zPiA$@BNxL`+TcDBZS?G>#((rB1>YhVeZ=sW^%&b@+9LdfUrKGJKW&T|X0z8SWAr9r
z%TY}{KB0Gegr4`>No7Q0vr3HA!To<gB&wF>c)*bl84iYHHF6)=rzL-))Nm;I8;0+%
zasnZQ32#-&&-I-^Yz*IJUJA<l$myY`h;7B~mOk#9fXm}Z9p(7876NRZ35o^7)N(|I
zs$vJ}7R2hTH)=I?p<s?4L}F^;mp@W)!MN5DQQ}~D*Gg4E{Wc}2t~uI2<$P_242&py
zzcfY0-855N@t`2>2uL|7H?nsgm-IYRb^i`3)bk3&eAyg4O{2N5N<Qtm?`f+cyCK%O
z`$cPiTLdmW$T|)LKk{C({ZO1RO%kM^`SJk*fO@7hBBk*%6V}`6&5dWTjdEo@_pB%7
zbHYl1v07+mgOSzKHqvR=CYvw5l7Qxb2$+T0ofXncrl&;)R4*gJ0Jlg=>Oi6r5skbO
zis>rE*kXxT$x&^V%8B6RI6+f0%xlzpISkH{K>1B;4ITtZcma+jiQK)r@FN9fE|O{2
zc}JW*a&l{Mrftj=QW3d<i8<?Vd8b<GKpCoQ@b1U>H4%3wW);t-4c;@D$&(@w(?63r
zzS93e)$QL3S)qDGw*==G`1gu8dT$3@Y6H$m7$tGr*e$zB?iYX&=aJV6<Tp>qa~q4T
znuQ5QE*H{3V^mJY&PYdIO#!Z-<KjED)1wgp-r5df1qD?#ve8C7Rz6nuHr?UV>CT6p
zfYE77*S7F?9D`;tnb49VZC9xK?WF0hP_7DlOPtB5L^S^jp^8q%Zm7(^ZMXyKu+T+=
z#t&DI1c9lMjJz?we;{K&>M4kjI5*;c5n3=?mD_;InH|m<RM+goFJFv%oJT~=!MK9=
zj-S-FGG$Db#bJbHsIh9!D~_73B#e>2AJgloi*k58NdKtj^ZvY4vPm?ztF$iPR;c>l
z_n3CpbkfH|r~`PsV<IghXO9snUQ3x16I<`<L+?umQk}|8WXpZJo;XUD^)Y#oK_z+A
zw<pbo(;BIT_f*K*^>A{uOwY9jk7F#7Y*e1aa*kO`QNqwiaGs9cZrox=n*XuEHRR_{
zG5^q8g_TSTGglKf^9MT#yu`6|w;Z6RShX52)ZNr!fkc`tF~?TMLXA~%fhoQ5*4o#(
zb;46xNr1T$_iEoScH-U{UOOV~h{~}LPbE8~b-EF~-K<K_MMl#(x!`AFB#6^SX4_DM
z-jvXeO)MO4-|L+1hSt|sIQz1RQKk_S>+U=tBWWE<6jFcPfA&`NsEo<UgksV?ncXM)
zOjiP{rMtKGg+))&T76aeS#1=+9S0{#Yl*;O0yH1^RS93v@5rOwM;#r{Lu0aqFJo0^
zTASt)o|#i42C|kv+x3I{UFi>2w;aAHxRu2g(>l5($e7D(>9Z_PuV@4R=6m-UVRm99
zd4KZk3)U^Si>Cq4yYf~c^p~rtY9Fbd3><KOs=p_H6-b+b_y5inIx%dBWaA4%>fy(K
z^GF_`ZY<vksnIz5*Zi>|hVGe&*3lhAcGA92Zu&rvbE%Cz>G6J(lh-!F^8dQjQKbkp
z)g>+&4W)M0Vs389vpcZc0Se#khbrgY>o?P|N)lhewde>tU<z@G*q^(uJ5#+m9XN^v
zGNb>u7XS%SFVfAjN-tz<=g!-&fjdJ^rxF@XNYRl^p4^rN>dMw-d|@^LH}gyMp@x;1
zT~L=f>UI!tCvHBP7-LdSUuZUTZ%m{9AvWIQD$Yg}>Z?cV-<^pE0VPvEnPV@8Q%k>}
zF?@i3=iO}G(HaGA_nk;ggSM}MLVwcx*PqpQ)5+B$3<V%<tx;D=XwK-egvxDAcS8K9
zzNr``<fO7KmziFXh%3gxb9lAZ^lEj4rU9R~n<$iMp{Z$XK7>vhUx(IuVRA5W<h7=r
zGO@~L@<?Eb^JWs{&r_ujv<`NSduXGBfe9lnrh}FUI-vPTH`z0_$+R*#ijuTR*8_u9
z`R4aM?xZk;U;lOO+Ml5}i)+TV%)dG@HH|;M-|)W``GtNg%e^qThy`f*^^VYweM?Uh
zpQ~pnD{cduGpJ;-uV_FoZsbMAtL=Pw)r7DZbe%`nFDV+Gd4Udfdg|Z8<nA5^6Rwrz
zkI@$JV`bQ6^F(fpePh!)`qrF#fVV{S&fXZq4++u;c&#Zq`8^gqBV)GCL(<*29nFpZ
ziZ=wjn*N(3+rxuiFrAh1<6K>MIck($Q$bu?!n4d1pF7`+>ewxR$o+?xFidTMA7`Pk
zOUWH-3*2hoCme|{^Za7pnqVg6%piL~&GY)Neh7^d;ve9wo7Esykf&FUrdyA!UG^~y
zxzQ>ze&lAvZeY1wRcb0XRu^V*2v+L<$JJYg#kB?7qCkKIf&_O6?(XjH?(XicL4&(n
zaCaJOG&lrzcXxMqoxSfp_w3gn|9bUeO4X=QGG~p44J`G|9UfXU%}v-0nw%~~pKvCV
zjum2p#2{??klBkMz4JO}ir&au18q=GlrNMt*-TLB*%M^;H6)f9N=TlNgAC1=Ir>~K
z8Vn`u2JW}~`=rkOW=USMn~4y&HC}r)b;|~Nou23_Ws9}gjo1<9aDlMWj^a&Es~^Qg
z6Y!mBia%fQ>z9*=Zn6)3ADtH|G;GC{ZHQCm+j9UPLm~kueYTw;ZKLbG9lg)>t>=RZ
zzjOakJW6#DU|-y*&pa49-l?7b^yzJku6XR~Nw_X7rQwugU?O7wj(#R?YJeFM45om4
zJol3cCH5XqWe`twqq!Okz|T@VIrq$L`zo5O==++(x6Yog3nXQ&S-Gtkx2&8w5#dva
zs63J@VFnHGr`9v_d=jq<$gxD>Kj}gz4}pHWak`@5JAAqkrJ0&FIR8AD8VV>bMlX@i
z`O`9Pk`@VE#C@-FUOx5_gN7LqCb@1InI``n7Z9Mu$G&iu9X@&qoC1Ia=x@9+?LI!<
z=YHkOMU4NcYH-*$5`xUv?l;SpZAF)LzO69P=k)(-<Uk%wgbd@sHd#l*YK$+$dFvT!
z`z>mIVNYXaij3?6i!K<eoX|E~a5>zO3H)y?v2%-aCx~#PVrv{!57#;!P*P5p;<E-w
z%QtY=tfRpDKrx`kq|Rz?&e?u{aG?M&d;OXY9mIKc%s}(mOM38(jv9lFL-V_SwBO)2
zUY4fQIu|;`E6Sq@bf~&W^81O2t9D)y<Ud4ei5xLTM(V%rMTr8*E={w}9tw)<C+bf@
z4$0N_q%v3l=omBCxhJS(c7Jl=Hp%Tr-wKvH+r%5@ek;MJI8ICpI53>ineWBZ&0{~`
z)a3>_;uYTf%O;|$$G#xmrHxl1RgGJf?a@8hD~vrg?s;<A(cSVu5WcGasTz}|NL4dI
z*?T4Q;i#3ucwre>rg0UKKJ&J*NX`HaiP6X^7vvA&V!kEOb=ySP&Za7MCn?dSEylR3
znqrJ#`P(0$@46tcrXs*X3=h;5D6U4`sK~~ab3WJ-EPeSF*qTG$fFVVnjwbcPGiR_n
zY{R7zC*XM6+4Kx%#+}d+=cmW;0I*7-JJSUhcAyy?+$i&1v%-4W{`B&1MEX`vRmI?O
zJ?(j_`hp4rAz$^e+|=6(cyBx8)iHgczBVmI<8CX0*Z~WID~6ItIj(rWPO2{u8o@un
zY8AY?n+PnBa{Et@WjSLdwffAbluR$aqarsEssP8_(%obNIQz|t@0e&uhqI%=0NeVv
zvB|G1DSOMF&V3GfLUePyH3@d3i<?r9C@CzyphakWUSVoeDl$eo@A0ak!9XAq$?b=G
z!fKqwcUc@~`%}7{!c`-Rl8xqW!kr!B6maY|hySh~eAtk7;s;x=5edpsftS9`nX;NG
zsub0J4xq})Cg%+R6jA1xczsL}SM@nPh`CU!r{k(Gcw7uhWZZ1M_Pt5w=}fE6#l3r@
zeSk?N(#5z1a{dsJc@RG1^LMyarr44<a6CE@V45>(brA3u?2nxN<j|%N1M$V7<lC2B
zM<(as->rI{61ne6Q7C_NR&_`GjaTY5gajTV{R+O}yC7`wTFF+n+HeC05d2M0S8cx3
zPuBr^qS@C#ml%K&2l07j#12XZn5jzN1<BuTzXgGR?~4B+vFlj0A*+Co=3}*PoYb~S
zn4Z0;79q}1_*l!@iJB$w{lIQj4K?cA(GRiT)!NviR2pV2w3p-pqcBY&=6{D72UN_b
zCqmy{bH9LDTxKZOK|d*5lyX=idoy4fn^t|S9G)G3f!$TpK0l}ybU{ctt%NcLP$V$8
ziF6uDg_+Bg6&E4O)hvK1jB`UaeF0PW<CNa-loRYMK%H1ylEoi<U5*<|OWU8A$U%ey
zU!6LoaMFI7GW`!pot2u<N@0ItJ0TK_WFY*cwOp!`rvL?mC5n(3hx`sXUmTu|o3|5d
zto9YCpbE6k(v~zth2fmq^umH4p6yI$fMswO?J_|UvFbqs*tN&_gkU}$Q<0Rv2Y&kX
zZM?ocnBUN8V;iYQXTttFHR>KG2fJB;)M8NiGH<%NQ|Y%;bn5^xz3H#rH1q7m{?$n9
z^@Rei!CbRNyOOztO*@~8&f2sU)Z(4+&$xIyh@mFI0INTSB2(%u{ENSS!U6fWrpZCQ
z^n_1<WSNK}NeZ)aB$WjY`h_5cCC{7RJ~#-fQ0QBP=AV;ox)vst&d))yJEEVX!Fzh?
z#tNRude~yv%>A~H9#4CrC!Uzips2V$53I_y_Y{SVQnoU+7fr?D9l_o3yRfrP)m5>d
zJ6oMx2jW6!wf&Fp$?x8x+jL1OA$j3zU=;>-O^+={eilA3#s=T5v=-9znuQ$P?5Ji(
zrJsHiTb=w$r%ryQQ(2DL2p8qajIIo{7h4B8V%?8=E?Ekw87ZM?GxYG(LEr{Dh^!fl
za?TTDWJxoZ&gI59^bQhHz7IP_AYSM0&tP?e&(0zA4R23Dos^l}@juRFDoLUq4F;Af
zxr49~aIeb!IB6raXDBhQ1wId3z!_-a&=G}iiI$S|N>_7c;^fR+W1(LI9;BSri+|j&
zF1z8eC#*TjV&~*IObM1AY#Y6eej4r9qnD;2pb?vZBbqKpe<_BeLtoI7EUTmbN=>Jz
z`dvKUDScE0R!HR_?Hs(KHpUStFCgp$fOeAlZ+5^asN`!C@b*R0=kYd8WMt_fq1+#o
zEBVfM0EqrAfX`UD-Kn&BEkkP+!oIad_v@Rb&{xV@3rAa_$kFv8dUK6GF3WM}Vqd#k
z+mO4Zy=V|ZW2kZ1OdpIwsREkMWt^|@5`Gu^jV&HvK{<nx5{oInKyD_sRprLZqu#25
z(?Mb7z>crW*z*eyqSv25`+-J*P{T?|C1W+{pm;Gp<=A1t_S7f{Fb>0Q(NZ@`wXoli
zq!|=3U`5~&(*jpBy-fd{0{XvMJQ+2z4h=cuVgvL^3(Co2?l&p0pxIb5zvDvZ^yN}J
z4ESo=%b9{Q6&Fw2o~1F`>{~B*6Ss&06?iMvgsx2p-A`bp$b&gll;&iDjf&2%%4<FY
z^fCqvWU!k1U~?p_2j5MSYrm>;a`7{f!NSrnSkup!bo)FQ|6<FJzA`}0^Y{uplX)2p
zCWFJp{Anh0#{HI8iuM5^hXoEKV8oQ;Xod&gZVd3rJE!ANCmI}bnNoyqW-_u$6q+jH
zRy3>zY=0IvO}Z?AqCg8`?3Y{*Xji~H^vHYM>GQUa6+$I#d2Au=KR%*ExC2N@QJ7N@
z|4(h`-}w&|{YgR^g?dzebTB}Zqa^65dkj;Mc9yT;Namypsnxd<O0>V}ryC&++IJ(2
z+D-GH3)LwR{`5+jl(=?SB7Jwk#My7T9A$Pv-SSQI)87g$$qQ13g))4@pcB(1LyR<r
zAB@RylE-Ql0i13!s$ax6^Dq<yS8S_DBi0e+Q|w|PoY!K1a1_pVx_mE1+YsR~lC|zP
zU~n>cM%0TOuiXwRR7m<dbxLg>2ywF-3l4?u!%W7{V(So(xpS)kiVO!J3&QwUf9p45
zD2Bq9LmNfPYnkx>c=r!=yiwhstsOwExC2D=(qsLHAJN$stIT!|IAd15!#{c~?UmB=
zr_b0wCw=GIEyJ1O<<N;nXmyh!=v4^<`*Kar&~==he-R0xap?W$R#&Zr17bF^1`G^T
zT$4yO@1a)R7oY<7LJR>B2)%%wL}ia*_(Jt5f<V!7#NsD;5_o^?Rv%_1I#yhQqXet~
zc7gHdoo!*tO~Q`SxF+4xd>t3ENV^Lo<-x9SCDe<YzO)=v`^vtSS&kBw&8Xj~c2RZ2
z)cZ%j>WU4|;;bfRN4_eOKpP(?X8m#`2LIJE?nD6O3(c&F5N0w{mMzw(sxYEd`|n(t
z7>htna<AP8ITF4YTH9zkjxa&DB{RWE+s(LxhWVD@+c|C=js?b07Gv1P91p_>6To>+
zemjw&tTV8o@Jr1H1tR>HP+9<LrRSyEHd9tAbws`G*i}vC&)>latq5-kT^1|!&>)o&
zt}i)!If^@(EJ#B4<)1;4RI>*JLog*`r60ywU)>DBbI{Aaw-pul#O%||o6Gq7tZD{J
zrAHzV^G9&18R=+c#Zym8R?xdK7L$UsFR#)3{^+M9t~gkF)LBu?PB^v;r3}rW0T`Gp
z-+AkIa4?R%T6*a<Z*SDUseATwgq@RIm``AB^qBXI>FdQN|5Nz*&vCy#8QwaboKpg&
z?4|J`RpWKBW~I>emX3g8d6?}=m2_{<Lb2PS{o5QoC%kcrd4WO8R_wkSF8QoD>r1UH
znEhg6P`G`p`T%@)AGL(m-r)^Ar*9W&l(aNpEu1Wi+}PfF2}D!AtGIPqtX#xdGeUZA
z9h>Zx;tDmZsNKG~3;_;FL*UO5mH5R9k1o{6EvxY$6$TC$8Syx4R5lOdPaK8H`vr@R
zj4;Tl+0xaqQaOSHRHJC%DExFJWN4AR7}I~&Aro`=Mj!@-Z+BTJ*o^m$PEpF!*6B1W
zsa={c`;i9lg<(t#NR_CBR7(rYmSgH~{|XSf!MKZ3pbwRVX)_^9F=mMRnMIaDy{d5)
zrcW>cs&Cj_mlwG_LX06gEa8~zCsgUx+5HbHGF<QFi=NfA8{zrA>UZ@ecKPA!e=Ij|
z-Jz4=O&MCIP?{b&&VB-W|EA5kZ+kAya=apW@RJ3_UNUvBz3MGoEOK*Kq<vr>ZS&IN
znB&VAy-3=g-0euG^@XB80o%FXnyZ8uCvGUfc27~o!TuoY3&J3v)u}wyQO^fMiezQ~
z{!xU`iY`pzQ5PAHF^IxEscV3gdFHo0cc=<WJ#vy%KAA~|pA$30g7)3eQbW0&a~3Qh
z;M?8$kb#UCG%9~v;n9XXS|mt72N`ejPrU`Mj5kP5w2ON+j*MnXAO~rqxIhY)rSxj8
z06GIFQ)#3_AFK;^FJfkB?PDnj<tz@myJrduY6TxGORap8dAu>-e3$B$l<Y~GBhcWP
zBHGaFuoM*{0LC?in_7Jv*z11$fpy@I85J2lAJJFXfJ={RwtQ#2Fz7IoYzeA<V40<Y
zTH^cv0q=k)(rAcKgTn>J#bDRlW$xuLkS|b!CX{~FSzoZ}ZFQ51*YpU960)a24lH(1
z*KWh&Q_K+Iis@%Dt2%KjAstDW?|PB+4cWD4%7KT9QZ#{yC`!>))ZIOK*fZu3fn#-O
zG7PDoKqB2%RCeR$op=J}(Yl_My-g9IS*@-(B8zX{dgdGb9hHOp;Ji`e3j(RxHc&Vh
z*Zr4Cuoq(~Btx(OxU{-Y49Rf>ein9~9$W#5HTFDsf9?V+N0mxJtjzmu=1xdU-!4G_
zk6`nf;4$cGBnF~eqdM~W!gs*{{36tj@UppkObm>YI<-6yFgOTUj$5uV+-(jYvhG-U
z`${=zLA}KemOJRw69{8ug7%8OZ=OhsJT~a4ADdd1JVuJyF*GAL{&&RZH>LBl^C+G0
zo5IH!o2OfX<7WV8WCiGp0=v6TPbxOo<C*F$O)&7LffRHasF$h7sKAHJ66CoZeEqKY
zv{+?|%AYlpn0T=;VBxUi)Z7jxr9uxS+}vD@JJ0OUV`oyCABGHMpR~xpz{|^{Q3Yt&
z3#0}%)@&1<lK(f6hYn&iql*A_W`9@>ruBd1y+2!t*04e4e?Riy9HE}?*}=+1SxosM
z`UNO8Nw|<NT;2Zz>89{WV|5Q?TId{1IjEL^MxY>{1O<`XXahKy_U8i-BA1;7pN%^Z
z3xrELFbQ>F?n}`KbwZ*|?ls9(qX^ZKHq{&Sgd9nQsRW%nwt>r#Kz8Fk*ncBw<?e@S
zMVL*wMXyotto3vtgbpGMAUSE=9dCKB-R_+rW=AEdy_0!h;)P%LfFKnw`X=y0u%A!D
zQ;@Q*P=_xo%~es?T5fbMj#GVV1|KhZ)_NtoU$a`cdh`T4OHO46BKzG}Q%KrUbj+yL
zXg*i243?ac5h5AC6}2W5V@G@oai0d6i(*drnp78;Qh>5HwQ2WurNPNm?`Q%GBUd*(
zB@h;i4Ux_T*BUKjr(lkgli)mZVQ0h3?zdmr6w&T*7;*SyBkVIl?A&&mj=SQ$uSqF{
z;_>gB0&Dt__ZiNlwD6wpsH{P$ndBQOsL;YX{u{iA34szLJ7eBPRP&_O6<zauAEDJZ
zr!#&Q(5~;%RC5(rOvFH%56ymCyr&e5f~)`+?YO|80!f30Zco3Hc~QAzbPcF>%-cwI
zhe{oUoGw?5Cf`OC!NM735b@+^54V5eS3mAFK%&)(Gezz-J`q40*KZMq2Xc(A-TlA>
z9Y>!z&>T_y4=;}ra#ZYdqHWN2xSaHRbLQX)bUql*_fwlmYvz=A^U&2Q_g}}>4i!cc
zuKiJ(SehYFB2L#&-5Yt?`~GmW;W`9(%<Xyjs}En4S${S#XTdt)#$<+kZga*1UzgGe
ztqQui#BRn8cndz`CT;*JcmZ@Xd;xX0A|<3=V=GT%El4s(u0*2y;Wyire&mYVb&nS$
z((_V7f!fDnj!2x#Ig-3kq5R(O33+609=X+J!x(gyg5ui6e&uocG#=9n?l9U-)F-WU
zX2ye%ARbBu1_7t!?Oq`qu9=cF+J&dVNw$z71m)7GGPdK`d8jrrncly(KNN?p5Tn5U
zyZ*3ceQIl@y}Adh6}dxm^|<&`eUGO~aaq@(mcP?hk_s!KU@vbS^sD$SdLuRUWJS_0
z4YF6kLe?@*u1Y1h*uie{`>WDHluk%>U%xc*GI8qmlZ15-qye5&mET1A&&|gx4Og{;
zUb`YV`Th;4VH`+`Ny));4S;{Cm(D}|a9_Z-_@ZhAB$^`=-_@WqPu{)wOJQhWvCp4A
z&mxEp$F4I_D^r3Y9<}<4mDbf7@Hy8j86tneMMFz;Xq0{e;tQ!iV$D4FjpyQf=^Ui#
zD;mu@De6FO4Eo$}?p-?1h|$bWXk3M>FOB0ZZ1)9+SwwFk&)aFw?sN}t9pPf9QYPrr
zxhWNSKk4A8z;6e?CSErxS3_(Kw+t-U!!-vunCLu|cGNv*ooC}You#dLf)Yh{&VJ*d
zj$e_A{^eaq`8)nU4r*DbcRW|ntRdRxJFU22#;|5SV{C82eoq0~*}{P-@COy?nEr>!
zP@rOn(j448Gw|@3Jk#OA^j<W}Ic!`VdgC=at5wg2*vY%o25rj8p6A3_Bf($?ejg6^
zlx27zn9{C=r=Fr$Iox;yZM~c`;b|)NRW9+xpkEmhP+ST8tzd*^<{c5PB#WtSS4x+n
zq>i<ThH^wZ%AeDnSq#GJ8@bThPZB6{@lXI$hAuclG{;wjYa}$xqd04Nt8SlsOptv@
zM2^Ji)(^v;B3#&ZXC<Ib%bc;kGKG@FlK@wN@g|E_)~P;?VgprO{Oa~h;It@#ew+=s
zvg2fDFLQw|BRGTpQ8}Q2O9H+bT-ek__}RSmjhIjwbTTt266q=_W*D%aywwi{bBK#w
zCR@ZC5iRS|#J(QTMS^akBhJkZHkmBAS_*^W)C!&Lg!V<;K`_0A&ob`W85tWDd+EFF
zT-M%zGDs>_Dw#^aY;%!uoe9v3=w97^u_jwn1WA+%SI@otHBG_ZO_rP?84&>HNMoHq
z*hM^RrIq|Feb{{8@PWu<NYA>*n?oMlU#%tJG$b%oo2hH+0{c2pC{1sjqpSLF_lH@I
z_A}ui&R+|pskqrXAF5R0{w`3$<5suo$O4A>(qY3i74MQn3?|pTp4X}YVtBgUf&!OX
zHZbp~`YN|?op`y?JEhG&U8W9olB>D4l_u<RLwkO2&yzkj(e%A?o_2mvpD(u$t+Fz~
zngJbGWG;zyX9qt~AqLCx`+^g^qRvvJa97qeTam+xW|?&~uD(-2N1UIhT7TqS0jv9;
zM|E2rs1mRrT&eoyDYd^uP0TGR)mj@zVHj0R5p%~nBE}Zy49X|`F67}&F2#R%d>*Uy
zvd30|IGkVv*l_{F%=bug{A^vYVrDe4794*Q#S{!#SGus!j@>^&wCM7)Cutgd9CVVc
zTyXDd`M5vI`MB?n!=OkoV=g%)LV6hb)NoeoP~_#w^=y8TjAs9@qk_4!pZ{}@XzGg(
zU&DzI1EvTEZe8Vyzt<3>?ha1S*k3220pvuSv41A4mlHQlH-YVqBrjMn;E2n};-kv^
z<QpcgjB@Rkd7@yInBR_8d<HfdqC<|HK{0*`>p+r0sE|O~ve{P=U&IOZhxNw>;>(79
ztx7sdIGbheIdm=gI*7C=d}A*GVJ=AaUH<gI5GVGN(h+#=D!tkj&Rz48G88o(D+i+g
zNWkAD?q2U(6u|{4+oy}BHiD@Bc=KQ{q`R^^(>N_WLnD<wOQpzQ8iQsYZM0+3l*7@7
z1H#{&#Ois8h|$^{3BMrPbeNSaV}E+ZaPKa+Lx^~bnHk#WWA)bib}xF^f&E$_?6?Zp
zURW62!_JZ_{jnB~I_fH=su=>^FA$g#nk=Nm;ry1@4N_f1ct5b3{uDE~F9*GxT0w%O
z0eLh+0R_{4Dt#9NwwqnuJlm|%Om;eWf+Q@YKaASHX$MibZe>rAIamr3pUvnO{#h_r
zuY{>TRGP`9ZeXsqCXv#8Je%ATb-u<y>_@$dRzSR$Xc#1^rH7ojr5SYiu1Y>Yjm!s{
z3AF{fHe9e-Chm{utYqqjHe@Wx3x3x+^^{apH^j_-MPoOPWT9_7?RqI?=X50<--KWs
zXk-=sLPLDs1FG!gWPHkVa)5!eji^}9YNtrSj_=dl6e(x2t9?6`xXDdjaV!?tiN>(b
zy_Rp5LFK2V^MxA3u|a~?QE;gnbX0pRohZTn*c%;3QT5M7Ucp;<4aN&Uwz$@^Yl!2$
z>Po5Awior@u`PQd3(7Dul#Zl-FpJ6@Wm|uMr@b`k^s62e&N{+T@@2`Q-fMuIVO5W$
zSNryfU|*?ky@I{0BME_TN7brvJbV%=-HCP9Nb(VFAg0ZXcVc)3#hd}0WWd2A-b=Z1
z<vWdGB}S5owwE`PsLJ%?!3Mn`i0{tF6j?quzQRGN3~<Zsw#c_r!XLc<l$GUmC7+FW
z)a01r&Dz#?dd^>u$&cOH?{?Z?>cIHhDE!P>Db4G0^hW&`f0{08D{Ci9g~0RN5Hi3I
zam`b*Q>G^kb2V<@jK;k;g9Ge4mzQF({eLy6m=?pdX>ak$IE~#t@164-g`n;kT-Nz%
zZRN{$&`LsJ%ZaRD`CodYB+7<D#FCHtCe@9~^5vxg(u)FD)RUK@`KJOG8tdJB??JUF
zNm`F1p|nF!49E=170_AN?pNxReSLinaawbg=ia{!xcv+6UuD|SwYB2HkBNoR(Afim
zlz5TXlUf)+Qnd89kJxMyFty@kl#nBSeBC3+Pi`=isZ^Vi84wMETJ|khQQrbSL8#Z)
zSL|+MH1cn-%2pM`(=w3)N0sPVg;t)3Qfe3}G9dAyh0r8^;<_#b65aN<7f*;6YHo@k
zY<~GmkxIr(VD7HJ(C{u~!>;ZU;ld~*`tcfd<cJr=Njel3@jm-L1ZLs6fCxA=&oRJ5
zI>#Ou^R%jPOLbp1GaUl6RNWIE&(x9a)<1ADp7xb|CmAaQI)qGy_p$$p^;^eqo6r}N
z-<c=!*Ce-&ri&RGp&vh2na%@TN_3zSDsh&A9m0%UQ}|A6S-$c@GrEQ8m^->Hp;&h_
zcFj$V%2k5AfbB}|U<%irrzwDkb9ZY8s4u|EOTxoXljob;H;!x|IZ*BU);0Rr@I;Jy
zzBI0=4mOAc7w66Ahd-`k+JO(o${O&abM0!q7TS0C`Ewt#-o8O{5H6T>u%AV<bLFrb
zf4~S37-Ql6h<-Koa8pw!B0hR6NeRSOnAj5jq^4LQ3YM^|LgW9V|9$KAc`AH2wyww%
z1`&MIgNL#`9};9Lx9gu5^8j<oBq}UJdKTAUVBf(cMFdp_*>?al-@h*+Yg?|!i<Etx
zh}N<5)?epo`EnM%=RupI$>6R~E*|XRpu*IpV~oYz&85b4t>k{}S2_2?=HZ05F0@cV
z?k$Us;yhmZ%E|-A5B2@K*Uo;YLEQ6|myx6zxIW=(831+l=zOBpi9)M{pkOK<NS)U-
zeCw9_3&Kqlhf(6~889=Gs)VYFo3`%1STr|xY~;0(LRUS#9F?NSUg`1e;WNDTw{}tt
zHr}W6TF+O52c8^6(76?CIicTUL6I`XQ6Oi9en8FmW|IhHJZEBA1);J~65q_GlP4sj
zl8@FC#wCM(I?-5)>Ysr61)f_iyn~c&#+T&HBMNguo$RVn&3*bM+XaLVuY;v`So#D7
z*hA)(g%39hVU33U#+(Cgo~=u3xzz&nQnbbdRrC-PUw)SHuVd5<cDZf@@30xme;vMQ
zBJG^MdarkNz+X<@^XiE<1qmqrMb|XTMKA6Nre~thfU~pXTdPf_1*OJG`QBAZ#D6_b
z!+-~`Pam6&wT+c<TMjLo+#Qn(K_3@4`oGsZE(}~;P;)<4F&x`&SeBbR%z*FHi2BeF
zfe5Y8bVLO?7d_*PHn>}43{{wQ>6`U0bmSBxtzVEg9f!UnV;2#vOE!K#9l@U^h5V_2
zNav0>-St%&F$YU4s5uFWVn<A2ps0GSX1qphQ90tvodKgeE+3yAaE<m;<YYFX!)!s)
zR`#P!(v@L5FU!}Jq&-X(2n{;?nFUW*7Z^Dz=E**HO}`ph2Aol7u*}cshB&%EP_E%X
z)wlvA#<^d73_VDZ^QqjdzIiJSKJ0|#6k&cF>xpsDr1eT-Vu8_hK!O3glmdwj77$5$
zXOw0Xj8)?*vwE~{AsgBIo|4of)!Ti1FH#8uzx9$%K`}e72IaHD;6v<_$Hq^cP&ZF3
zu)x~W-xKsYk#>2|cuw#FKhIn->E-V#`&tDO--ICg2=kNqAu-5z5Q8EeAZ0a3aRW0G
zk<@q=p&P&iAY%KC#K&JYm}<YQwLA0T{Q?J#D8*}E<Ym+JaI4~$j5jw+q&3Z{?N#{0
z=N86l(<b<tVYePSk@WIVJy3%r$7OW_s}=T)WN(07;L{?u{=UY>egDba38hxe!F|u@
zq$$T|B9bI0LmP5xK>-Ju>X{d5@}{tZZ5Gu}^%zM?I!DWhV2ha+eSWPlvOcMPc3@yh
z-J&GQ-tzomM}zlTK4rGNK8_YpB&pc7Hv1C=S_~!oex&V?UAP_KATmJM_mG#sOi%Dt
z`x%3f2zu-JV+nZiNOAlcyK}K5%f<`&B^cl9;wKUMB+A|FOs^AL(v0$~vO--dwcgF`
zIgdB*U5R<`?<LVq3!@#CwqK2tC=i6aOE&2n1et3#6QPap?K!cZ5y#F?|G1m+-DIa<
z`0T#`T8Qv5rjDmVFVBIWEd3DM;pNwKttxOrIkJqHbt`avKQ(EGq*uB}#7^lPn9u@Z
zmB^*TxwNH!zx(ORRyVZ)C5w}6%BD7hvyoC+o3}miSRhVnQ>o<?L+7f`)h22ubCcl|
zeiSuauj;aJ8Ae(qeNza7I;mK*N>$i<d5M0#Dwnv<T7X^CtY66|w}raM6;kK+Rb>>o
zK#x|o6w|F2Y)wDr_Dh+Mnzj<>N6S1SJScqX?`>rB^jLdc)pYIp+CYn;8Z*f>cqn%E
z0s7`PWB@XYnOjrnVIeE9!1X&RdGT{E^+a-k5i@UbeTO28qMdevjIxxh1Iw{b?L>Bw
zkUQ|_=v&W}ZjIWzi0S;$0>ip>tHc4>#gk($KzYdRYc+omXHw|}UTf#u5d+Gt+mc8t
zip_|#`&4N#Z9TRfZ8>fpB6X}{a(pFAftDru#HS%1bvcQ**5dlGtZ>)i8PyaMTX**<
z*g=5}uE&Lfck5-&JQl0BlRX0aQEBL5!wT)34^AUsg>(mF>&TRR=t_}G1@A2|qjUN2
z*j0kD_LoUo3UJUOvZ5kX!~MBQlVshxX#2K%x65vx$hAJ@c+6M4Vs&4#z5K!_`Cw$q
ze}ufWZ^%YriJuAwr}p9%v}Rgohb4fy)=rK`gAIx^`Ei&Qzfy)o))IsEc{0SCWLB-$
zXMJn8=2LZX>-70$?<4Dzv`HZi5@7l_rW(M#-t&M~YLsH73w-VQRNHaRvY}T~$;Xox
zY)5q^ZRN-xR8wuKzwbiVj+sYjh@=`LF(prWId+%ysxoLFQLZ;l%Q<2H@bn(5N~1`f
zn=j=m{4FytKE7k30jHWq3E$?H!b30RV_UYurq)}f7_O~qx_q0?DYg~E{qfR&R*f57
zXFC;f%}3Q_Hq1hjxi$F{TE|~1CoM~xOK|k8SNIsozlRai$L_g4ziYnjC2alWDI3_q
z*wTktW5g`XR451oOgcEucOCD3*?coAj;XVYo111azU|Ovkz;M@#_)pcope)=DI9vh
zh%6Vk0s^In9=7($J<rYGV*BYwo=>E$E%F_H0E65#+oX!kb;(KWCe6$r0`z9iie*2X
z5vCCuDyWiAfi*58*jKAWp4FK-<vgGZq}mdWk&lu0W=s33I=gOkI5V`}D%mo5iPp)_
zCoZK~SPHF{RMbr84hAq)v2t#PK5&B|=E*%apzLdi+|7pW+%G-rv~4?3##7PWdb28s
zzP6}czdL)Jvv<6>2@W&ZO2eM*EqGVo>JK^u*7&x&#;1O8UV5v8nrq=a)<+WBy1J@5
zw9`@JRg%sZd;<C6kuuGCTnv&SlDfag?SahVdm*aNw>#yN7dYQ(X?2T8w`z7eGAd}R
zY12I&cbc57uh);>4o}NiE3&z2iyq_lncYg2yPiD(QX}xBgX#y1VE=q*x9ixk7p_zq
zn_AQ)Q>bZaRRsk*?Ld8p+YWzQE_Zb)#PVOo;Ub7H9*O6ic&;pe{8*0o#H*T}gyi=8
zcp%A9R;vw|u(wDJEnZj6814)!0cPXzNU}C%#fe0&RonQQVUbHJ5~Okef$UJ`Q<Q@9
z?d37xB0cstuP(XL{t+%IEe&m*K0rBv^~~UCIcz}d8VjE}1Ul%7OlkNXr1KBuu@w)3
zj;-nWru!Tl8)vk8$40!Rh<GTb8bZwu4%ZtP18KDzo&;*Xc2TOHX(j^}h~$ACiVlqt
z(^fc}y(A4ut;%;r#ufqzGL5_0?ub#!vP$Jm+|E`6BpzCd@SgY<w(hR+Zl|iL2tNi>
zKZ5ckU}U#W9bIRAWGmg<R)Zl-wMTE|o*e5*G<;wfw(u|U9GYho=cDU2g%U}q|Cn@W
z?`h_+gA=82z{fOL@KNFIc>c1KV&WOr)<r(XZv0SY6O@vvbmt2>udJ1{*Q?nhIFrVP
zeOTG_&^E+FbMrUT9063C{K}Hd39Bt835zeq`>f=9!){_xQBeV{<wo6${Vv!G{A@+g
zhouy~QjU<~WU57VyZt`AY;{D46*{l(QsKR5EuqSaj+a|cc+Cd4ovRa9Y^6V~Z0hxS
zg9k{8t3uxuwsI30<{2Z}8)qoNt((o-gWe|N-|2zi6?bqU{8GnMDJGHsBbA=Bt_dGr
zu9$+Qfu-3caK7cUNLA!M2I7p*LtUpYM)~{lx<Ak}(co*MlMjDvipHzvl>i#4%O&rx
zY=ad{H>}L8wZ`hEgS_+kw_^*+nZSgtWt-asI7^dlHc8i)rfC_qvh?z~&uzy7T4`ZF
z0U;+@8mX0kv5~Df_yWLy{PET>zb;L`B0q!R3jY$vo3-gY?PR?RS+Qw*#2e=M;NNI6
zFLABI`8?^`eqkSm3|L>HCV6s{>v;^oSGsRq=~qGQQsxrmo&&5u+eUZ9&XdpT@rOv(
z+LzW;e71;g@bBAur}j_K8Qw}veDyqG`Y;~Nv|uXPw9vQltYK|;T_1$%C7RFmV}3ZB
zU}bGxHaVglZa6nJD|bsWKX!&9qxLx9uQ8C2c*CMx8u@tCQC%gru_42X@k%5J+8N_l
zq|<2O8s--)nVgfeSCLba3S=e;h1ET~l^TW_QErANpQ5M0DyFxpnOd!fB*BNK@73<A
zVGs-MP?KWBt;a&3Wrs){Y+qRc(&L&5b+=2=U?HKnyy`n$eqdN`Jl(_w1^G!{lAgPe
zX0QTaCh~e)pS#+3R1L{K>sXWFAl%iWi^<X;<ftzevU?_&G$osbWYsuZ={H{T+r1`d
zmVpciMjQR>@dIyljFt`V&P%&kIJWs+`|9Rji^DWnDz-qlq4uz#=K7Eg{@Du1gv`VE
z8dLzxDdiBCwiXj@w}bIh%>R>Jj*>WU)y%D3VeQQe$9KNI#6ExFH#H0HUhJmYlscNS
zD~*6_uvS$=1$`J4arHdQNoXY0#*TFCY+NZti{*Ny%uHeO{MY=`ax#RMF3Kzf1oMtG
zdgu*Y>IOko@Vc9q5|KdjN*dt+#`RKpj`rB9Kr|!IZazO?qGM1(xcV+~73=vAa-R9<
za&Vr5>r`NZ;j@l$BdBFcrVjW5gmwb)gUpdX&3ROU&YrfqX0m0Of}W}P9!|V|&eghl
zHE$e>hn?fzh<2_B*Lh*viM4%{$4Q|Qae?4NxZ4c6Ysc$Dw!0pbB`*XWMr3mJCKtnF
zCsDtHg~0Fg+R>kw_V9*7>KOJ^6ZhFT*uDIe^sA#1(fjIVk~yjC31Pu&7$7wd@II2b
zCwrJ&Zq3A2txS<f!QpZV*7G=L)%Dq8(e;@!ZF|fgRjI8JSh?m|a3q(_$^U%ruMsNa
z+hv$dQYI~@zUI5&+xFg;=`y{m+~|Elw|8&>pYEQ^_jWrXZEyYdV6CbUM{ub-h=9j>
z0C-5!uT}T-)V`bDp{KHcVM9YlKU@cXlxmxAR7KLa$#k`BD#>z~<@>ERD)#qp>Eqgr
z4m;^(uB|m%MQgvX<7w5eR;8+1DcGk*NLNY8+h&+p{9_gZnhH4+_wvm%Sqk=Y>F2H|
zQrRBe*9ntm)oymJ&YaE5el3%+){k+4AR5FFc>N#8M&t5G?~xJ;qhD5Dno`|cGS}yQ
zXsHPD;IyO1CG_$@%&OwFqbNxjC&!`8H>ru+%_4k`88XTIFe!fd{LfTj;oP#``Z~Lf
zWe&BtXEp9!6S{@v@Mhflr+IGgGUYJ}*`}&{U$z>9pRi1?^QsAy%87~d&@vc2CMKN~
z9rG#=2$<DO8X-!zYIETUtRwCTs71_$W7YWBX)WZtH$3Vw@7hc<K;*a30m+-p?oynL
zLF*b|ko|_MQv5o%M-pz?QG)cc8Yihiwr_8js3rTD^BzUbjpwooV6C~PLMC&amt!1*
z`Tc5oC4)d|{|I#RGopDX)e-SrD!ZAK_n3`lRxxq{FV6i+#*YjeZC&<P)wsKJKQ6H!
zFp4MEUeELV6KkrzDEC&nvNdVjv;5=l+KfV@9l~e9JG^dIy@h|a`5{eX{v<sUw0Zkp
z{F%GI9_J$7^T*DpU1N`xe}GpMG@B@Wp-S<%!MpKu{pG$`5D~SxMa$dk<SNax`En-h
zHyCG+RZP-5xxgCKxGxZ+V`<4m0wVixl?8CacG7dmT{{gR*0vhRSRTPd18C;cu!@4y
zWp6HfGg}Md``Fc_zqqtqH?6K1o`Y7m>+{glVpd|~WSweSXOGpbw$ZdfAC4PYlhoQd
ztcdsH4XFe?Os{5061vu#d#FqV@kr)){Vob<lSuH={>nmW31CY$4?9EJQ}AfcER1vV
z3>yM1N)>A|F9@`?&l0TuKH|o~Ed>aZ2<O%<8YeL&3%>Vi$g7Mzpz3A;3@-_1SCKyd
zVHBD#Y};y&ShEE04XFX$lT_I&l(xJ#l7h_3>+WNSr+p!O@hkcMEEgOGc&m4%80M05
zo1JJi!9C^CY<iI4i&TQ>t|QI_LhT{e2!FhjiiMf!Ub!6tptO}(Su^W~`p3DOsdXwK
zlN{Rmq*+vz*i}HYbEl^n9^n?AVvrBS;_6-m_dHxBY2Z0x#p;VI!=#kz0V~OPlhny1
zv=mr$-e$d_<zG3Q3Tx}os>dS-fcy{mjZm*<fCBwZ&vknbVCbI>kYW_E5);qQ0avqC
z4y{W5uEKbH#kPn%azJzSWfz^*mkT#-CFW^&-c68qa^X8Tl74=qJK^u|)urrJ4>ybv
z_U?G;cg69RHp#x*MzzX#iidD@Fsv_8&fT@=J;AS7o!r#YW@WDE)MtCPg0U{$6yTh6
zkk!~!o+?ISuWmO5Z7YRUN?)ZoepdHIncuU9fM||46mG298~MF`(CQMfZ>H{!hNiJ6
z6{%$i{m0r`(QNSu#CHuR7SdB9+H5xhyypE|1{@Y#K-`X%Bkw%JO|R!0WrH2Z!D-)h
zz|jJ?)7(0RdUNn6!ci^t#0vZDpuhX8hWd~&eG;K%;iAIsX{YefU>}uaN%7d$KWa#3
zQPohRuL;j-I;W>De&##}k9gs~T19t(#UN5oDV&+bdwh)5dy_DhsA}&0E?4>TO8f$O
zC%agIS}@?A-N0JqZ{d@fH}i6C`};I8<i0K=hpTJ-<N?{eZM{hzAzUzwTd^YBx3Pgr
z8g~4k3@_)kw6Bc>e}Z-HaJfc!f-&Al9gEAvs+)^i2+uCrK9i>OO6RMp3T2ZuIP+oG
z-Qzr?KoOc)hwH<`_-gGzN)c<$NrkRx8B(mWuu{<qy;$JAf8|4XLVk_<S*J8(MXw$K
zWNK?OEB~o)znS`Do`!L&epI-=?&-?H)p*SxX;trWyRUn85ZMjfCk=bjcbgj@nAdBr
z3xAZFt9cvE#zq1rF52IkwVHhD{64~ftTu}dYiuw0y1r+7<)sve>0u<<ZpWHhcr3A$
z%HwhUO71;()6^eIdU|WT3;YD00+FdSDuHw5%5qO-cA37he!Mp$1C>@f(rVF_FoxI}
zMh@2=VSa4Gbj{kw31=$3`ZZAhK)e7;RSJ!JVFgQK;jFN<Ol0yw-jD>AAR-d%m|IRT
zRwPM@4-A+-`W@dcNgoJ5uW2|5qbE8)=caT|6p%83?vojI-Yfl10z<*@)cs=MuB<7(
z(MzWsdY^vgTHB}e@hM6S){kS$+aqheVZE<@(<DWg^^BNo7}7qo6tN-jk=)w{*rh!b
zM5r&6C>EOJ2{H;^CF6)UwM;xSarZ4;rIlPgGsP#VU?}(CxrM6Zeq6;(548bj>cIDS
z<nQ^KRs=-^)^6;lhHZq&EhkN54|}@8+s%C7h!gEvds|Uufbn&%wbxu^c=bgRe1Gph
zHk7p7*N}j{8v3J>&W+CuaCi=$p*vqwc}@Vcd`ia1?4x91Adr`<o@LSJ@joD#5Ja@>
zKn!;0;Ck}CkYu?e8&yqjI+WC8JZ0C{T?j-(>~i0qzmFlJ6y!RT-Tvye51c#An}R)q
zKOH=-&S_zRvvqS-_Y(}Pv~*2{0&!y%!+{)%W5DQ~<fznV>pD}P-e%FXzA@n~Zu0&^
zZ}IBR=3TMu0dF1e#O&X9<0wZyq@wbEx48qE9Ljo>zLt1pXY;ssa@q8f&%X>>E-<Sr
zHh98e*LMi#O6N;nLQ5$Mw1?VzNsa6qz1<QXc(nckjVdo->a=2bxPq0&5g4(GMJ0L1
zWAQ-d?U9^j*-0`AZCz}<=Pgc8SpbDkAx7z6#?8tCBOYH9iQT62@usPeRa$>5mw=Qp
z$<pl5cmUK2HGD*-gFwDU<B*pI@NP4<FHcP@B&HUoP1uW8yI^54X3_s1qoxoPKPvbw
zGwak&e_`X~hA07f!*wXPAlQ{de3Gqxx9Ei&|LM%p+`D=Y@oL#9u_4n-`yoVcCS9qs
zC=q%zk)|2s5zrG3vJ|<R@yn{|GMOb?&U{uyVfoX<OQJcRIdm>1J99rWV^aJXy|LRy
z9|-qhqCMd{YFYg;Y*ux$Mt2*6FaN`>jl1j@*IFw7H-}ZI5UoCJ!aw&ndd>&{yT~Ih
z@{~er$r0xRi)LzVoQjhRUfRm#!g8W8+Eai_XGOs|HL&tL=+|qMLwF9T&B6)RN{8|#
z*CTm5)^+>lyv%|qRCNp!;@uvnJ%sArkXJ0XvRS0g0$NM`U6Zxbt@V_Jq<(Q((7DUT
zJ3)rRLxPI%ImXFcci}+GWXi~LFqi9b;qTv<ypn$J{Y+JwK&gfCw7r)<RsgHPah{Hc
zcW$Rv9j(@DZM4%-^}q07>1;ti=Y4-VeW+-hl)fZaRFu<a9@(Ey$<L{q$+mDO<n`1@
zeb*i24=dT?+@_<|=<%aEn^8H`aEJwQ0?#y2I3@VmyA<(YK$@2~{+zC{++5DWe*0hF
z-vT#b55d`x01gTu{EY0aRomS8jEwb4uwTg+hj;Zu)&bE?+nVbM|Jl=PMJj$elbw?B
zaVuE<6Y}kAqNbaQiPUg>3H&0PDKB;-?nbAb!FzafYO;{Im`q0-R&nFPoFZ^kna6Q2
z6-*iP3S9rC+ZNNT13LpO{$NBghxI-fOEO_4@pTJO-CmKjRIAyCB2Q1^n`}!Noz}O5
zvcnvqk>F=!Ch@X%*4SvGz}rES{#^QO!6{AU3!{RxvqW!LEe7+KRoL!ncCLeXf=H00
zWCftI_JNSxG=$P@G$OAgg-6{yT5c72xz|W*Ef%qj*@b}u%OJ5KjH+UGlR8AneI$=`
z<f)9^v7wChdkxhuadk;Noqp{2dfi^+rjtb9Ae`*1vlGFE<7N;5BJaU+ga(~7Yk0N5
zxSu{F7j@*~T%U2<+e=cv;Wr+%Izf1)dUN|HRUSFIaa#6CPT-8`5Io+Ou$KVX@+_;C
z)X6QQ_fz5K24;V4?Z0|MCkP!oZ1B*^>c5k%&^q4o@J=M7upw3UXmOaZb9$F9CSyCv
znqyDfrII_^S`PmT!0&1AP=0yPc~tAcT$-^lL|I*@!rb9*&gkJDV@bZSsX^AxNZ}Nt
z=&8X(aL=D_c{!%A)<v|;#n=m7FTo6TYvVdHkTvRl>L}aZ`5S&wug9!$Hj-?+C&Rs<
z=bgpyl-UDvu|0CF>pSF|J8VC^CgjO3d`<uG&(tU|*Ve`uh>SBPc@>F=QmuWbmt?*5
zLkbHU&jyzIe}H@K6*ZgIY20p!UmV|Yexz7tXf?R04&BnFN+a^V23%YqoN<>6huNGh
z<8_Mfjf_ZD=`|>oyza7$y-j2$6fzdXPQSmsBoVN%SaYyxCyaAH2>HIOMf9>M$|X$G
zxGhZ!hnZJTupX#dN)VL5M$(dufd3=GEQuW6Z7{P}Bq7nsNWwdv^qz#fTZ&(KU@T8(
z^k<acr^0hgT05%c?p}Z03#yMTqWfOf&GJc+_Ma~%P+5mHDVdcY4Et8`o}Y^GZd%7f
zei5c}^UjGHr^hcY|AQ{GXo&#mh)e5FzT)%&P^u0Wlcp4$q%&ANHe&8m&)o$!&!po$
zGU)o<4Q%m{Bogkmwt0jaNq;#uWZd+CT?5P1T~pQF;RvRNDmcQgZw42gU(P$kEy$>n
z(*qf=@@>#=g}ya)G&dJ!n_7aOG)?lUB_^mX+<`^37-CLCi`#Qn=sZs&8y@y*#MH34
zz%@0cCFpGb0g*LZx?wmxrsbq--6btGE)D6*JjscWbGIM#Y_mCuZz!wny(xB)(+xS6
zn9C*iUL^)e$kTyxOn?R2))ZgEFy*`E-X%%ZYL2CMM!kG!xQZ2>ui<sLp2;QUK|l@S
z1YVd8>QOHdTp@JZSo-iBkyhgA`U!OFx#Nr5wULi9Ww#i=kCm=chYvnl4UU@i4Kfmv
z!~2!<Ic@u{;_~wHpEJHZ7oXN#U+jH{ol0`uiucDpBnrf%BOfzy%-5<l*;lD5=JKbf
zmEN}GAJ}~MmIIel<(1%o$jHda8Q3p4W^3G>t}{hB>slz=dr;s0bw_)@4Lkj`78jZM
zrTDTbqZGoe$!f`HCfs-#R0)dJ_oA>aA8KzGnYE!O!9{YASZF6+98;LO*qj+P!phT2
z5*Id703=u7X3~;dW^i6FSCU*NWm1(8Z=z>ZGCY~_l-^cEI^Fj}c`OhmSVUJTU7D2%
zVd#J6FJ{v*ug0|i=($;1+$WbIn^7CMiVdZCJNU`Vh^q7#FK%>~kU;CnM4FsonG?)w
z^cLqC#s+eos7w~sz-$+mU0pi@&KJ{5IPE*i!v}K|?CY}(G25O7xEsA6<a{5efQlt+
zO}3F#RHLjuixOw+9n!+kh%-U{AI`HTt>XB;3jc@OIqt+vbv(QZvTrzbAmCEiEW!=|
zmv59JtW0DZSq@85vo+}|RF_rbe&KVDn^EBY3-2TedjTy9+j8ol=qc|xF>@Z}x=Lm^
zxNvM<6*tkeU1k#D+yMUyf<+>SKVgJd@6NaFlJ4ZHX5B;_1|ILmn@CN2ET1m2d7N0=
zFSu@GxXg<DueFMwBO^&9?V7oZH+1hRPLfQdr}^KX7Sf7y*)NE*{hl?KTZ!eRQ)v@=
z6;Wm`vglGf^{ztXvYkRh;qj_Xb7^Ca+-+s+`w3?pD(dT*ijPn#r_;%kq!YYc$P^L&
z88+^EgzhK6lAm7RMXXdumu9MbJ?=MhHf~_q5Yo#ft_7cKxDe>UQh9CM7<4cMbz?Dt
zA{6<@@Enh8LcqnOAV!vZ{JPh{U1`@-{}YDwW&q*y8^L+PoK-UDZ*(tV<t*YcvnZE#
zdM{PC2&q@>czt6H-}#9KJ<`ef#bUEt(93sxl<}i_jDZwODZ$DF(7)cWI-7VlBEhPv
zVWL=qP)EuE@y|$EM0{baXp4TY$>NmzWA!FYuxVpSq<q@`afCHrJ)6_52=mWl2*X`^
z9$E|f?umL{jxpsG6?gBSFGTPHS(zKM>AFs-B&V|$)^B{@`;-w+5<Lk-UNIbaYX5I7
zfUc`6p!3lw-O2lIemtA|n08@|eLXMJzFpT&nTo4c-@fCnjm`eO4%~X4EiLo_iYGIx
zp2YxjzKnc@R5B$rdKLDcF<?_}a0<TQid%Y&FxL-FE%(F3U1a^zWhG}FZa0!wu;!FZ
zF<M&FH0*jQzP4jEug{w56qf6=1M}M7x7z3oG}HE|r1Ra2nx})9JY5DA;;NdJlhGCc
zBL7{8z;>>)9kI7g=L6ic)lS}HmaA#>g$zHR3ju44t++Wini49~qkVe0`TWmnvoD!j
zZ&?{H3gM>+l$3Q#kzf7}P#{zN6uZ=CaOyarMM!ggQGej(LUYWp*t+7)Cb`vHI^mi0
zO<b9Y&faCId^NkV^SNAXjJU-{mQpKFtKIWZy#wd&#lqI{))1;M9OMN?HO|xh>*RnT
zgox$@w~BC@M%S6QHpo@Rli+b!s5Xzshjsq*#4lQlk@d;nFz19-%D<`hmXATXD5VK2
zNwK<9Gj7{DdDYmyBkY9NX~NVhQ22u&wX;a*phY-G++Zofgi4XsY{s=^Rt<SC183Mt
z05^PbjQF4R2HVbP)+HCLPD|XAOW(u_1Zc-Zh7$fe)6EUxOm*k`P;|L`MY^!`YM}!Q
zG%oSMS0G7&h+9MUg*{L+m8YqFn-I?hK4px8w~)!UhEq0V+_4_3sGN}*(Gvgt)GSPF
z;?q_<&F6pr8<;EwYu&rv_5gxwxjIHOD8mDgCRhGPpC-Bfs#AqoeLc!Tsq}C4&WS*j
z?ZP46M$e@vBgqspN%Y78!(xKzi&vDrz*d>ed6hMXQqcsGBCY%K={11jjld1D=D(T=
z29}{<RSsOYl;a&>hO|}%h@MSj1)}{O!laLptlwzuF69)3dc3vA>=UVGL@&aTrZN6f
zuTKKS0$bew9%|nEF8jr|N?k5SNb0}8{$=?@J~+34lSQ%=rPL~;-OW(mBb@U5HI?FX
zBO1x*zqTGs07a@!Og_c<i`w7cSY#62O`=PF6uKvwzA<h#_#8l<xksrWt{|Ig`rBOc
zoS;y0(ka<HB>YCm#I_w$`bGP{rV&UuoTP+|r%3+q%QlCS|J4S78>7P)qoX|9MfPO(
zihtyRFQr#zLG5M9wWC>eD3xXbH!yMM5FX+3`~O>%07EY^m8u$Z&QJr8NOi|kX(4K@
z<F{aQ%eKQxCJAMt*?LSnz-AYy9^#%oyb!e}(UhbgOD9<$@)!#`;eNv(cKSOZ&}R~|
z-P2wYX8h+210;1ou?k2fbXgOVvs=V;kvpxfJwKBZK9W=Ha>uBp_Ms8>M&Olcaaj^;
z)l0N&t%G?q_Cr?8PwK!}-rbGd$?mP)-PfayvRsXup-R^W<J}|M3L7UbgCvJ6mpowc
ze?;dyUEg$&h_L@cf><#RU8Z6&s`aj+254J<<{CFueU;-F0`2OU)-U|<58G=`?+|H)
zO9W~+67D3zC2VS~`kx;T_8d;PwX}Big-gAF9J^>^K$X>baH9pUMgR1un)7|%9I};+
z*9%0zyh#23F-!q!?n}Nmw*x&rNL{hFoBTQWUK#aPKF7I9CL-sWF@zeiJX`-?bKe=)
zWVXG_G(C<2R!~5&fJh&ucSi;>AfWV)g^qx92+iXtC<thz_a2G_X#oNu<ItoA2oMQP
zKw3hGkc7~Z{CC8eIp_DgAMU+h?&V9!=H1!*U3;x(t@W(+1}G~w>FKB3<!c4s-*=YR
zU%2We>Cdo8Z*JH)+odoLGTrkbCr%!Z_fzeoy}H+t;3Sh>cTC3mDbw%scFD%tB}j(m
zapDRx<L>BiMxfh=(~EdB92eKomrkntqUNeZnDQDI*ujdef`Yel_zE<)5;vPuOg;-q
zLi8I5ZIRfcZ`UiDj^qBM?<Kn>ReVs?Sfx$>7UPB!lAW7P)3j4qI_f<HJ1XP?t(9r0
z^r$T2hUuPzSePrj53kPJ8T<Ds9GN)G^{DauUwU$_A`IY^;_h~fPUK}lUS59#JEkb4
zY%Js5j3X3UFB*N<OMiRd5W(Evq;PTQxaRT}V{hRUB9+glK&Q@~hkyN1-}isawikcC
zlr2J6;NnuT`}+*J4D)~!f+ZCQoZ-_cX+|&_-*l<dY9T>QQzoeo;i84f`s15VN%Va{
zU47hM)9EoF8~|?Zl<Xl{m7&>3hDkqg<dRqaA9nhOw@bHs$>s66S7PrkSQ^?>e3cz+
zBp?KPH*>5IG?`jn<=VIdji^1-0h2bodPGcf`KxFjZT*L#-AtFVgruNrL`8ee)dfiZ
zMDTh}1$K>38>2Um@R#8m1m66p{B`nCb=bn!U%*~oBsKXbJC93vKGEfYX!_Zq%8-_-
zo+Q4??q`C+qmI&te5*H)=vDcAy*^LkKXzU;GG&`BZQum?Qq*bhYgGT%!rir1SF^d%
zwkaUyk{$LDojZ{zXLDUhv+XOkJWlyrHMtaC-?xks>jA6g|5!nzzFCD8<*2TwUdEr)
zY||AG9u+y{`*p!{4*x6|@1%cK^pyHRiC<;U9O5(797nt~GkvDZ7f2jb>-Kwnd@iHh
zRV7+)-y?Y)`p4dH-XKRA*rUZD<l*8n@i1s|t(6Tzh}G>|E!sXLzi%xnuzwaZEE-<D
z01;5kv(e)Y{IK>)%|+3;%I`h8Q&&GBF6F2m_R-h9eY$!5FH_@EI0jEI@Ceq+zKYa`
z1$@dgpHgeiaGKuNG+5Cxy7MRTuGdHR9m%I(|CyJ6HP|O!<effjM5aqDojW%ss>+u~
z-rkn%TG2P9?u2@T?tCq@KkYvu?Bp#-wAtK%IXh^kylC=vGcDS=XF*+jIfiJ^wkhB$
zA1h{U_P}LF>*AGtr*banAAmRgMT0Hjzn~8*Cs&L0o@zeep+l#=nx20W7GH4%^75;S
za=9J(M@0^u4d6);U2tkH<auwivi6p3&bpMxubO#BI`a;~FPIk^|836we-=3*=}Wf^
zjMwc}3T}6ooXVy{R%|5$5|TxoZK!5MVx@q5obcy;9n5%9Tz`1~S1zuYH&=s=%}1;*
zM&?q|J{cq#)UGCrCZnJYw^#NrNwA~+<K#+vvI`U36JBAd*(Yc^^y1cgmN@A!^I4+g
z85z54Une}ic=8`jczVm)Y;CPLfW)(Z+W}tnxs~7qW)#xLG?LZA-dx@n_23f_VeYT@
z_!6=!v}M!cEQzFR1bcX+`r(bHo+(X@HU#Xiiwpj_xa7Y6)goPI?3Px~yVcw2&8Z%J
z(xYkCm6l51Hk0+A_sWf#p1UfoE(&p8bEq^sy}#g=XMN7XCE>6qh^>Vq&h?&EKCMif
zL@idZxw(10#lBf^akVcG$H7T`@&m6$BevGVpk#XLpGLuysi={mdGVW97yO!%8zL%%
zBlbiHNH2rKDM<P&(Qj(xXjAOk<UIv-Tcp?0zZ6E{>Q<I|y&Fg<PnY@|clI~IrSM0R
zX=M4K6AAdYnN>r5f>mQr3&lNpB;a~ktlUJ6yjplp`C(ZN)7$~JRYQL({3nBNM>yi1
z?9^l$>4)Nz&VtiP_z&JyWByp}GLV<$eg6D;?DDrL=ke)mwS^<-J<3vjR8&6C$+LsK
zRV{g@@T@x&PC~;c<B;b)h3fs~B^18DZ>|iR3ejFVX~I}AYHOMitgG9!xi(dpqX})e
z@wZe;9cLm5@2U}AK5fx~#0j_~8dEzC3z%-=Cr(f-J}C4rN?+K&!=o10J*5>C#mt?Z
zi@(b?H?z1bBU7&!`|Z@v9pH;I2ONo{WKVdmxrMo;goHI1@otd%tgJkMvaj`SG`FbG
zEiNwJY0F*n>b~%8o>nDH+S1y*Y-FVFG4|@!t7doZoC(@t_gM|^JySbUTvAe6Q&V0a
z_uX$v85tKK?Gkgs)v?IOD!R7UvI=C*84Xz+t#Fg^ZZJ?(3@R=vDy<pDrKINMoNq>}
zJuJu))!bPA-KNDU|M**rc){S8Yv?6j)OHFf@YA(>AL@*;LWH*q+LME<n2@&ZL+j5Q
zf77@id(7uKr2XRDaqw0{qfWnOGNsa1!ENw%1bXf;!~_a0L46Jw9k36*2WKd?<j;N#
zay$IowC+^9B;otHlV0EX?(go`w*`tJgw1HTg&rR<2q$?S^Rgu|vvCW<c&XOGGSh*<
zclmAgtF<8IJc{G)Qqtipo%r0~>(bF_Uw4xDycgL&EO6MqZp)NOtCLrB`*arwkd#po
zRVmkMhaeJ(|Dhc+c3Uq>jGOh(s=G*u!{cN#gNpg2_Zp{Xtfl$rD>&mH4)P4=pqp*;
ziuTX*TAsy<wKpD-4V^2C3EZt@l-oB;SK84lg(E+|AG^Gtpm9AuuodvWi<pHoPt@MX
z5?z@O74cv_F}`3FMU4+$UKI36ok)u1S;gD>pb`C<Q4h=J_H!>TtsA>MsxC!xVf(3C
ziZt*3vX4HlOseXsH~1u~aeIAJ!)x=po^hVZ_pH8!)Za|X4e~cUejDKl``;VsD0`5g
zWuZLKQpr)Bz|my<%I7ymUgY~+bnp#_xLRY(B%y<=pumWuM;E4jMV=v_hWvC*^KnSK
zqW0V|udwHOBdO1o+ePQN8S2k1+b@Yq<kug5)R+;ndI&X_DxWlpK(}shdTQ=$%>a}U
zgXlvbLv;L95m?qJsM(&<%0N!%>_Y#b=p~%4RP?ljz|`s}rPlI3L#3}DDAM<EVvy*2
z%i2EJHy!u4BB?XFRQiVpQM|S}268zFd8~>aj5gavS*gc6ZbaZKTz&d8LMxz4n`6ip
zFX-wEjAvH@ncJaiWW;Prg=!Ih*1s;+fQPuvpF3vh7!i3nlUJrlVvaV&m`M@k7W&1i
zVKN;4^X94L1`MW6x&PCzIy4f=+X5?$u5%{2XwtB|^{$k)cMIo@jzJ=J*?%6E9U9kG
zcT~zWbd02@=Y$ZCjgv=PDKWev#Q>jf!j7Lfp-6@~dJwTu`4g0^;&|<cgHypQqZ5gm
zSMH_*ctC{^Mqbs7@aqiC$yu3pXw2!Dj+M<0FkuP{NjNZ7Dk&!i@fD>t*WdN@8nmUv
zsGXXvYj27oV&w+0*rsa`rOeiC?`JvT#Czrz7SS@izOi==Lq$f#;1w?YE#|);<Q{5`
z_zAk`nCJ;CECP2U4s*9%@=y1&5bj{60FUp_bs7YA>A|^U<cM}>jRLPkBs%0bTVc9$
zOa4?s+Dqj++_B8{SS8i_H4=lhcJj+(l`$?3+P1vfJIaQck*%vi&4^}~6w2<n@>E%Q
zxukt$$4@BcfVCR+Wv!wM?ap`9)2jDhj=i-n7S@CkeRws>>q%ojhR@_j986A4U0E%I
z@33?|E@%4n7%SfUb3G%Fs+bWvKbrA~_M4$<hkvzqy$wAxj9uDcut=J7H>J<$<`R_|
zdk~8XbC^^0$g`Ufq`)b~S~GhuJWVPpAH$x<W&|>2h|`sN^GcU83?IxZXlj~vcXx9-
zA>SBjSl9ZXbfj1e^FOW*<KzRE$QWEj6}r^XE*!Ziw{<hBh4TJ!<Hm*k^IfeS7~NVw
z5jel<N$Zu8GjnlKXU;t__+jyiU(r%Q*Zu0{e2jM4)2F{J@UPM%*q>%tMP*Cu5e6mQ
zRRqrv9E*`Lt~*^W$J%>Pf8|Qz7A`5!qsX5<n14|LC<TYMDsjhQErIWKu?w{SxN#eP
zAuC0NArdty%3SR$Lopf}h_My2DJx3g7M1@#S}{oQG|M)EO2(s>hs!u8OG1t_fRC{^
zp=}+$@fLhYEdD0G>iu)myoDi_p61a+H_AoXd0?z{<c^DkjZ(RJZgNn&Q%in!!pE1E
zb=}9_7(R1qa(UEaY=nREj9M4T6aab*UE3B{T>p3?DJx4FVuO14nnfvIGBY<X)(i{g
zaLGxT6BCSG8tvBjL#4ASw=cun%9_`*D}OqyeaPwt+$h_;5p%9&BkO<diqCiZzp-|3
zC`r_cbmWQAp=vR2FDw)b09_GX3C3*K%4Tj>K=D$ls@7dbDh^mpc9Nu&6um7`u>S6>
zMt1myd;C<E+okw;+_5%24>D>LR<yULiSpeHBy6=YzUxiXSaFJAb(jEOWS}afn1T6p
zf;m5niT2XC`1NR`fWO#Ty2$IsW?csk+HKs`U_`ya_>;zsmqQtfQeqIS#%@|p7z?7B
z%`?L=N;Tloix)}|Xqu8`?qyLGm-;QQ_n0^y(T&5jxBrIT*-#fy4r(dt1O{vj4EXf`
zvk49L>?e#8n*3t`qh9B>9!?)13nDc}%Kilx8(@kHX+wOl5pDc%V{K|_g7(^PVq#)3
zNiizA?@C${YiueB)$+y^G&{k=WA&e6V$Ol5ZtMInt#nmn&Q#4J9DhFszt&sGOoW~j
z9-7v(>%2(Vbeo9Nt6R9^*eOULKkp9FQ9oOKrpoQj#Y>q#cl-6{ff(jH{&S~JEfAW6
z6QP^SG7uZqwh55HhhL7+DcZLm+(^U`34)s4IC3H7Ny*)+P4Z!{lO*7W&YU6BK0lCK
zCaa1NH*G2AHXb(Z8xKEPS>|vHj+Oc3M#73(BMv;Zla63Bp>#57n?(+u9^6=nBiUCu
zXog8)?)qF~3<)YBOfiJ*b1VfVBfa>yy^XBduK4e!=EArIRIGFl#?j!~8l}pP>}w46
z_W85YYUkj%Gf0hgi9gGH*j0|08_mI#B+<at!8>rn?J^6*POcB3uP;dd*3H3x7yRJY
zJZ00M^@SUAS3EbMJcu%0ETZgnWE;_XI+iaAC>d6R@l?r+HKa_=@BI6qNEpY$dpdfh
zmQ{8jELt9s&>jtrtQNKtCYt@|`NAJ_&&nyIgyPe%k}~RHj+dSKGbKjl83r5@DDy&>
zXAge%YZ48OZeJNZZ`&N?!;q0O*?T6%Umbf_=2TU+9R}K~ll8q!+$M&waGSUN6k*pR
zRmZOL6k+o^{!C>evIPt~c5)NQVE7hzU3uOgqMK<)_Iuua!@!OFy-<RQsR_V!fiKp&
z&d)%}<p-@@ta`5Gdyi3d|CvFgmu+}%Sm#ZLGB+ik@wcizt>r$g+cw^~Vh$X8x=iN9
z2uGf~s}|QGnJEJ~b;`LFD+xN~lai$4I?C%t%#xE2q}12cTrZQzsewwx?%;cGhlYj@
zhD%0Jf8BF`n3Zt)ioXAJxFYfDRr%V0f$^mk3VSO~>EWIOKXcAx%AXMd!20Fm!+vuo
zhejIMXjaI~4+8Q#mpNte!|dHM3Kf{=Pwh7qK!D4i6;;jJ{_y)fjIp6%oPZAftffJU
zEKLUf6&jBR5);l&(8o8#pc~cvpM#o{b1`~Y%$Hjq0!GT77m3Z$sB$SQHSU(c*v%zn
zWJX_BRHcGqz`Y-h^s+8wEus?jZ{8dvH%wJDOh+1mNQ2&)J3-!vFnW6d2H?=@DEt~J
zkBL<mA^tn$dRT6-7I1d?UUD01h4jIcrEFf{@A9Sw)J5)Jbr>|#d)O&O_}oH0e@QSd
zXCdQPXY*o{-={bFK76>XtLyxSt0`99P#%G{1A*euGk&|d-AVt)H!#~1wXUfkko*l)
zSj<dJ3S4u;t^-GZ-bt-tqBujK*~G*oJhvF`3euL839^Z<bMf%-lirN7p7Neg*1Gmp
zkCdS+E3-?#Zw;oY^!N0@&d2fa@$1@0<5ouYwnYG%nER=C(0V-C@PxB9qv)_tTjT8#
z1up{G?8V?<Hv)}X=QY7M<&TeO#WH6~%dtf#j4kfXYI%KpC%ej^ciev4Wo`=eUdLdh
z3>5WJqK^odJN7r4VH&qwGnCmEr^2uzIwgfhx}q}2;Gh6B49|@$J;>U4o&(*}^&-%I
z-y};7vVPe8p#(svk^iLLnP^TKLkF1TNQ?+ts*JTo)%$O0Hw%4}w(5UL+n&ewjGS8o
zRW>H=CI4UX1qG;l=LKuTnTO*j-QN#z)0x>hIc2h{_VxajIiRwrz$!g-^@vW1y9ai9
z3QGAsSiz+)1Y%-g5ti;((YSSY#Q6w_-y(K58B8)+;HqC}^cG9_YDgN=dqNUIKzY46
zz#}B^3loHN^??&EkYRU_Sb&ZUfKF%CsU!8C!NnzGXNy4oL6<qW4!`0{RDCfrbFDg<
z;w>gR7I@eFbo7z7R})^*w+yl_z;-s-U+!H@2HhMmGdsJt_~{U9P#*;mYO-kjX$SVi
z4v0;x0%m_oU5-~}C#V=kTsbMj0uQ-xDppxpvXMApo4$*zy5F*)t54@S@oRbBImgk_
z(Tv?(<<SaPgj&$*$$XBl7&-1sK!+L2*woxkb%;dBqWA1%?2$KLyg<HEE+F>kWEF5u
z;;%y931iLUF4nX2a^X$S&42Xh4v9wt>>Px-v4O0i=W+(8mpHOFcAGeC?^>rt*l6j^
zZv{s%5z0ZI!{5*+D_FJN>A`Dh{1HAGmYKFD`4$J9-Q8DEi$q6KoLp)J3T5NnV2f$p
zypgR;zaS<qUSSF!P@AXK(&rNe#X_fHHnv#XV%SKNe}Xr9+dHs(rTpz%Y5UNQBN6Kh
zuJ_>fjbBa}<_0CJ1@&1N8S&dIk@aP)wyH(l$r<Lv!B(_Ure8D+1`8ZZ*S5TIBYF(6
zZfC~vPEAb_MEfct(F3@3e|u(yqm-DKZd*+JNRp`$uAn0~TIPg}<Ab??&(A+jFYZ$2
zw$+#;@`_Ghei6Gwp!N1vS%4>FHdn__U6t{Ty-A#4b86e*Ng2bQo*ok$8x-hT0RK{D
zqj1tY733h7Qzy#6CZMVQd%kbXY;2APTE*<#zihK-U1<@2TB`?tdN?gjZ_oXOS|G?V
z)E30G&ASrD_4W0~R^ZuU%~Ocs;kj4tWv0iB4BA(K+66GO8D%=V2|Ya?Rq1%_Sc|dt
zztq7-?ixmj(Br6bV}E?7L&NHcBmqBjzo4J-hm6hMPZuq~^iEId|C3Oz!)@lgI4!x#
zM$_NF-pBD*gOsIrzTh4LI%pN62>TS^HZ6FyH}WJUr9>fU|6O9n8D+OGdFRU!h_PYk
zINDyEaqsM-uM|#ygA{GSviFC@RG{i|=wI|qvD#CN@sV7|JSrA#^;g~lT^xEoFYc&B
zw&W;*C`1Iidz&4(5IPea0cDK#33}h5OltK^v>GOAZSpR7@#a1g@Inup-~w>*4W50=
zzJLN5i<8rYgGO~tTKsdD;8Ne6zBg>REhX*L2D01tgz<<wJg01i#p0Q9<plAmb{h8M
zXKU%q=s=L<#atMZYL~e10?Eb=4+oN8rmI2seiRcGb)#n_Ly75n=2nfyZ;ba|9N-an
z3qbjTQ;x9~t3^0sl>&mr0|3UlL?VpX&{>H}yKS$L|IWtnW$%|Ff$y}m53Mv(iL8OW
zF|7-w@<Ml-y6T;KOWrNy8|kX_N31Cy(Mh!nXo?IPGdsf<$0wTwUvdn;RMZ<TH+S-V
z22o2A)QTN;8I!NJwbw`5cARqH=T-hb--?qVoK#GJtrk2mG(esxG}5uPo4CF!LcgX_
zfKF_DsaHoHLh>iN^%k~*jBMiAoAu}*wfpi8Lznb!bxPXU3U&MWE{?+;hF2$C%3Cz*
zdTq}M2dt)5&M+6{G6Hd+?ECZWs&wVa0(Jy7xpjv~1p`O<0>3daj5}@y&+!-eyZyct
z2w!WN%@A3SMQXMS5)Ik~?*n>g_iVe=ed-6Dzo_NG*uPmxn;UgV6@$a6`^@+^?t$wu
zpWa{BejEDq?*F$De94;ym#Ie;0BdfbalkDTvud$%p{@Q7QH}uX;w5Zqp&RQ<$rBaE
zg^TM{{{f$kz+1O&jhw<&jqS3n^WOg+t+3LPIqZ+!vz<Z(RRyCWnFrkdd^&$W!<F->
z$8sB13F+1^Igq!g&&72N!uehRhk2LPv_cwq(!*oTR)oaT)-D3xz)+1{5>Paz3i=3(
zYX|m13m30|tZM{rjJYKFT2Eg;);l{Qbs9RagWeccS7T4cWd^V~Vtsr~j~L<Gf-D>4
z)3cq-&y$g5k%S0yoImA-)~`4<Svk8nEobF+MAn9jra=dO(l_=&9rzBk9>%a(MVw|G
z$9E0gixU|;jI((U5>;F4<BnNosCn1a)C5e(FqYGogmJp5Mx((qm4h<MQ{zrlADI!=
ze83;K?9j<GMbxYaTsBB<h8HaD@;K}UU}J1SGskFAFJ}*23POyIeDKVyh?g&TiQ^75
zy1c);b2U%LWUm2gMfqAS0;4<C%otRjLEJWspJLbp+7QvS1C19{caUu`5Q(JaEVgXN
z*3_!6jKdvMM1cq<Q0({GZp<A;Kry|@2<ny_y`pZb9`tzyaL1*ZVL{uA%Cl)Nb{1$A
z$#)G04~n2G@G~LSCGI!u5=7}_oH3?#%>{U*f<KwNw8W_CD*NUjeON;FqZUM3WIdt2
zcbKRsMgNRTECoSDd!XVG9e&pR4B*{_#4cST;<iOdYzJ2Aq_^cC0bfxh<cl$(^+D!-
z)~c1x$hX*|7&tpQc`VYEJqQ0d@28dxU3&(njaufCa@ip!fOI5nyE=}t(KI=<CL<6K
zx5OQi_t>5J1PklXbcYDCn2bZsHQ17&Quj#O(0pBJ?<FQ#B#Os&(KRRH7HO<%DDBF;
zK%;9W9`eR`XaN^lJW{8C-X8P(Zbp}oE1vTU;LaL#VG7=>A%Ki|cGa*!wsqMrTWR44
zaMYwsAIs&TE;gWj3CfsWS@d;nb&_3jO7ikHf6iE{qfDwOePzm09?|-1#4gPg0;$f4
zT6gDU(U5h1<<~v9!NyQv74_lUCY)X&D7Dg(4tfTkB`H_fA4Ko6)NSf_)FHzhsmIB-
zNN;9O^v$6MUIe@}=;v4GD7bxd@N!$?bh2o+I-TDmcl1{*W-Fk5qYo4!4RZowFBz-p
zauWWiJ*rPe(SS8z9V`%gH$XgJUQVbqufUjkd;0+D)$j)fsGx!#o2(FwTtb7=DZ-qF
zTU?>c+U<_8Y#m#neZG{3*DyyK?_<In-}LAm?5fulLm#=yp&nJidgm2HDUK5rOoXwD
zqA)v8Sj}#&o$;DB!BgwDm5vw-Sisz&Hwyu33e29kq@<*`dcsf>KpPb!y(S9I;2jX!
z%vm4Q2GKwi0=OmAr@c7Z@_ZDoQ$%SQzz8lG({dwfr`IRES5SG=t-o>852W{`s;J1D
zVT`q*IkCe9vP&uB!7DRWt)*41J9grRTDs!GQ80(Fd1pE?xq?*HY>h!vcor7CaB^}O
zeZbF}Gnnf+&q-l~GFOkiJ0}9#;w`&DWd)%gSydaQWDa=Lpj#8>Fj;g6>gU6Z71lvk
zUXEs%`;N2a3aJV+*x#^c!*SpZGl7La|GXgv0qsn+fUi^Z+Sw*fHpQ*6soHg(cq1=D
z%N>|P_}0y-K&*_UTFAN8nn~}5u}a4i{^L)wgJbO*>>bK@$dgwL9nJ0!%{Um1svmw+
zV1#cl*0xuFP_l+{MQ$LMR$y_mrtsB)R?0;(7Br3B(f2El<~f@mrM2-`)cqR!y@2BV
zI`52#Z2eySfG#fvk%k)>38P>xLWraCmbnqgoBa0Bgab5@Qte4b-o^&f!-plD9lZ8z
zXD_Z8Mamf`&P3(0zBFSz2(-f>S)7ygzL30hd#=P2?~U^4bpDRpmbHQOF`wQ94}JsY
zrcgwgdDP!p%>Cm!|8hH(VxoT|Cat7OQfj!Sfr8&z@X^gi0Bn1munuI_VV+H0^*6pO
zf6=tUA`1SD%``KaCkcIJN+3C%9UPnoK?{`K)^sJ6pQD952kSaIj5B}s@~!I_;^U7+
zHhyu7<CJY4kKsOd`*FKxy(ucXmDy>h(l~tpHQT0Fy8J0}rhiI#CbANg0%#HJb#aOT
zhb<m$jYt798AaRjdQBk3oE$(>0O~M~1{(pIJ`EG2m7a{p?u)IvE@VLybLfKssSJ&6
zaZtDUb!1^=WTaHD!9m}MWdV8)Y5ktVhr~fU8pV?|)(_+8c)?=JCgLHo=s7pPwyJyV
zbU5kMDSmzf*jm&lhW@RW5zYE0hKBK=z5VUmAaebKt{~<*7IR2FyFaC<uuG)EKvvxn
zkSLsV@5xWO98VXn+#8p=r%a6Zd!Sh4YXpdUe-g4+isY52&f0pTK*1%})hqEVw$RIE
zRoKU87~C&14KtOA3C%t!9ry191&JpoC;!xL2o{~rQP(SRC&q{<du(rrWvHzGh?Wmd
zV6g_7up&U+Tg&hPZszjEi}t{be9tJ)_MDJTY25zQ7JM;9(F#zFAn3E+!7(vjw?hSo
zRm33@XU+!9Z3mA|T*F%svmSMAy|!4|Tgo<0zFSYsZt{6L_0@qsQYn;?Z6%m-fFl9f
zc&)DEY-AwMK6DUJO7cfMci$%TV6nVg4;}CQo5DWGbNX#X)lU7@Vfi{&ig&Rn{KNg~
zr`f3;_eW{Hk;U_g>URKz74YTLch;5v#_{d+hxxF)1Knn-rx*4Bf)8;lSuST6g?u<w
z#P1M(!?wZeP7Kd@hF{Oh&dQ25wI8?OCw1|nDWLSLGD9FcbG^<xy^a*q7@o8B!4!v?
zrD;J%bO>l}MD5i$uFS^dn7F&Ym=51nj6jA%J_L{n^`;<NaM-h)diO7j3dOrN>{)J3
z>;OQugTbK7S8Z^gKk7qpt;d)22m0u#3GtlOu=>2)eBKv_uvfQ_n(8Ow8!#J(H=OHj
z>OJv*_}pdi_b3?7%mCCfkJ-$LF3imeFCWN+zP6Kv2dxp#!*OD9_mTtLeEmm0uD9k(
zh_0--ir@enFd^!DqD*5JsmJs+#h*SY<IN%4XDDlU19qf?E%Kqq?a)jE+fx4vXXo{7
zvgPS5xRH7T<^GmgKKqdOVi_kC+P~I(^JWQuMqKgoU5`Pk5axKy!3?)JYMu<I(0k1m
z4{S?n>7hnZz6jC(%iY(gfEB=#rOHm#d1t#e{+oozE@Mn*R*3boq#!#?ANFxyhX-9k
z#nlfIhUv8k6VR9m5aum-(DuwPhJe`voXy-e8=)EQW3FpEkfYg5OU1Ap0CQy;71`>I
zTIcCUxktzH@U2t^JKzoE*isKe2h^6>6V24q620m?pJvj>txvbyt<3vT_X{Ha4)IjI
z4bjVnQhuk-M&szI>dLu0<u`1@PRH~8>_&QKQ+YG)V6x7yWn;C|ibK#RA)*LW8tPwt
zo4lms`oa9FeQJ?f-J;D@Ep-ZYjkRdF*o+a!t{G_JKW;fd8Ee_fE|?V2GBZhuR1$84
zHhX-YPu4EUFQSRQt6ywO!iz-h`F7eXO3ot$l4TkuCHd{Y^lDI7-&Er1=_Ms4(pK-z
z{cbE&*B&#6w1bX|RaVGbrp!zZdNm;<mmf{;##=Yw=TK!;6j*e0hm?r6@sv>br&)K8
zonN|g0|IPpZ2UgFk8wo@hBXLN#%o>mi%s}sY?4H+tAZ(g+3MoS`eHgUSvmP|?g4d5
zOZNThG+Uq6Li$n)+`HsfW|jo*l3WB@D&L!sfo0oRgH~|^e3tgcQo0f|r>_M=9<B8X
zz5AzFZ#`W{uk{Ec3pqVsv5`|-iuz??V~(&wDE5q@TAyNMp-`xYwRB|Y-V43q;bB;l
z4>}!`Msj{&Xq#OFh5hj24|7hwy*hm2ac?@h=Li=#knAzVc7)b{@6Z}$bm>TTPUZna
zhmx+R`8f5-&GQgI_@^t-tklC+TZ4aoc0GtW_6Lp9Fa+Z_l`OWBUd;Rf*{h74ET?ZT
zE-nU8rZqjQ&_=Nx#+FBsq7r;@))90?DpQBokr*B$qI4MuK@+9?`NPG80VZ#s8$%<o
z*aRW0ti@DX&GiTzf{S>tn`?Z>-kuo;G-~a7XJ*Om%T7z#LH)*9bm<fc9o$)WM2*<^
zwtmdUx^lupm6CP1ws)XeM$vm9YkZuk9tO7L977K7xg_XAfIe(bzgUZ%o-u^=d3y9b
zd3M;eGExn`P0hq%W;)BHlCMTZ`g6+FS-)(3PU@vwKZsY9-)M<T-8zf#XfUS0&L*zB
zHsrMmOBYrb#uc`CiNHR;Kj`X0L2m+!6)ZNBT!`t)`6!SVQPPh}pUKjSP`cUR9oJTI
zJ^$79{IqHGu2Yrfru{}>YzJr4C*wLER&V2LNwPms2X$&qq)(bwB8w1+EWakL7@+_w
zR1i~PWcgtrZaN&6?5JF9BH@~=cvY^Ic6|*MX3_(`@wt~Saq{QhJpnA6jC^@U>s%`L
z^rLj)2hqICk0xS@s5AaB<ji~pDkx~$y}?W}nYL0Jd4OlKwrx9nQ+@oM4;y@dRB=%G
zs7Ex9swP<SH&hTgBXDdbow+%#E!X;ST{|3Lh{p?Qguj#I3u)QcKtr5-YgB;G9-tW1
za+83M`#k5kCk@Zuna}zq#7#JCZ?-S3DP&>7N6#^5wr!vXBAx|<=R{sG)?_-7syi7o
zy=Q|B`#uig7h#U}uc9=zt&ro;YY5@62N{{{?B+|x`ZL@+GQO=V45M!I2R=8O5LwM^
zs4Gdb897k<XsE!>pWK+GIk)$=sWT&;y0~h0g*YtQ?OBC^4Ly*>8V{(5b8|cP3f4Me
z(|j%K!qBEA)7jC&+-D*d6w9iru(aK^?xeC{ImNY-%&PvTCA(L)J~>IdF1Pw?v6@rR
z)kRwb_MIuVuewVpx3jbJ<(V+&#ePqHm|bw2h+j{)s}u23=2G-J23tCmy72jYo8LUW
zp*WPa*O#R#!w#R_#!|(JNe-d(g_q6HfB}(h>Pds*TYJ>pjj;)T+r$P-WkBvQj_hp;
zpNX3CIz#(iNB-WN%=XZiW83rbC*&EGs-d*%7}GK{n=Z@_p~Cu0w|LV+31oY@Fto{U
zq_}cvXX>Mr-}*C*QIlP6^Ch;JNaWV9umMYDa=*Csc3^GWrn+mhSMV*E&=<6hO)l7S
zb-KLk=2gr<`QSK36*56t52a>USd%BiW=0-1ka;-U*v9wDIRg^|C^?aB47-J*Zf42P
z?L9<}^Qro`zdMD<_NdP|ET<+Xo*m+mptg~wpsc*aI=I%mm5H!k!~+e<^U7xW`?~g;
z9k;f-0B}SGGZ2Y|>}yJ%#Yw0F&BLAaX(wWLaVmIb`@+)KW*tSiE7l>MxkDl+yzbz1
zYWxxFDHmtEGV$(P%LnjYu7!W~l>(K^fd9XEgZHkrt0%w!jLLb)f?aam_6LnJCY8tl
z6(hc{ol#OHh0=&A8u@pIAP%jk6Wj5pe(u*^vhY)86*AkOn4LUb-Cr4pyBz^Z9jAae
zh#}TeoX`6D6aJ#Unfsr&Bj5M`)hW%zHKOr<@ur2%<-kX9YUiG=<tzZvHTn&4{qB?h
E0Yhduy#N3J

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/k8s-architecture-2-az.png b/assets/documentation/1.27.0-rc1/images/k8s-architecture-2-az.png
new file mode 100644
index 0000000000000000000000000000000000000000..9f7928089ce9c44d882dde3032171b0ba369ea85
GIT binary patch
literal 100839
zcmeFZWmHw&_XY|_Ktftc>5^{gQ1Z|qDcvBQhsGmHNP~1YNcT}v=@6t24bpv3y15%)
zec#{sk8!`>50@dF&1UVj*P3&#x#pbDvkX&Hk;BF$!$d+t!UoGrYak(^Nh2YF-l3xb
zcQPX1^#LEqZW?mWkt&8BZvnr=Sn7hUl$DWKfNOLlG-NcSdv{HcK)?@zKi9~>H5n4>
z@B2td+Q{VpUK=4l`LBJ5EfUI~Hdesr-B%*;4Ltql^IkUce?4Y{{<cPw&c65e8uae&
zF$a$E55Nb8v%H=g5)v`N-8Zsz)+jI?5SFc`uDh<XlCZgx1Ba=FlbI!lmxJ@&Q%Is-
z!oa12rMoG$mxH~do3NJ{?e7-C!1dj2PFm{UP2BCoXmyp<sHL1-EvcV!aB*<aiepk!
zQ;WJ<SP5%L%l>&B_)Uz~#@*dnn3EF%fp9>0Ih<UrIk|;|ggCi)IC*&3ffnp;-j433
zUhIx;bpLenw;yRsH*;58XLnmCN9wzNP0gG<+{I{V?_Tup*FWQQx3&83O^$AVrUgup
z^X@O4+#Fn-|Mm?$DtdQUSi{oI$=>6xdo4#>cX1xk-;Mw8?f>5P&r_<dwwAzn?;aE9
z{`1KH-uu7prJNj`T`k?*?%MPJY5%|X{%?CV8z*-sK-R9d=3qy6OIP6GKX3ax!2kCa
zfBF*Tyc5^|i0>cW{Jsk)M;ud>^It`aV~%5PKS4s0L;_1c)AT~#oyYKdZ0&va%lhQI
z|6=2+h`70a;^SG2PpZAhe2=kFFPzd6^Uvv{*vCenGY7uBIg@`bl~eF|=?Us{YBg#}
zbQD)S<1jbDu*$Pgr}H>Ay$!@w7Q_-<TbfW8=dt@Mt!j5rq?UKzPbcwYdP7WF7f%ui
z8Rh@~@&6$im>8gxxd^c`$=oT1<oOTG=)sSwkDTOE^S#G9PYS};l(9v_S(Q60aUmad
zZyr{&>0e!B4IH3mvd?lBc4FGwesWCnnB6_SbYIjnbRr6b)Y5xoJTlg)wZB%F#7i(G
z2BA~GM*8!kvp`aQ&UBj04d%OyO9(+}_;&bY1*g$pyK{nV6s|OfpClnU_Yi1|mjt4h
zUOsSGE5wsD0ihabG_k0PYS4?9%EuF4RK349oV(K?zUueMf!L;H)T0do+Og)C;4rhx
z&JBxeuidN_w-?Hrl{-4GV${Y7ANHXC>37wMKYbe78jSkCvd@)nABE9L2qL(uLln(%
z^v!X&x#e@j(?~i+RRiWs$?Q^KQmgK&bEXs{!j$lJgOILmaoY8^Al!zn0HS~Fm{IBV
z+upb8ZZs%(p?c66t<>JC!Z7_pTW4<NARParinJdcu06Xg*has`pweL;;-+RG;@O$X
z79G#`6V)%Ciu=hMzrww7J^4>a)UVq^QP9FgIx|0RFh>o*IvVO@6TvabUQ*_`wUnVE
zWf`>dB9@2u?$<}ar11Y)Qr)t^D5eBmfkB0OKxah8I^(M)uPV-=79lpHQhZx94U7_H
zWx8!G+?8$Y8+GB=j@a6KYSqU%VFV){SuKhUj)L6llPhokS64x=!$j!qT4Ckq7eYRt
zafCd?5iuoXAr?Iy>`{ASQ-$~YD%v|1$$if}-|I0UNc3L~1p|7f4@JU=Me)x2q>O^+
zjGmmRlgLJp<eP&=6As#G;D3>27?sE9KCxHRx#Af%xrQm~>pojPTgd*w;RZ`|=W|8!
zx;k{@(9)`i`S8+V>*zecbXJL%rzHG@qk3^%p}ClU{-ZfT+mke-IgSJO(|q{*aJql3
zi<&DIbPU-D&-myPQm-aKZZ~JjK04gP%T!ww!i(Vg6%0v+b##)ESsir}x449eLp<f4
z&5evTtztVAAIGISPUOIh9tMtiuB)Z@Qn^;V17_2i3Cw27cet1vgdQPnve42c>~ii(
zvHmJHAbAoc6pbcPGh+2&EM?lRi{h&|xzQuj%#7#-o=VCwa`z)f2_-c%J@d;Qm?9xv
zMk>kHsAQLDnl$*wCy0L5Y?I&U%m~AVa1&^_d~beq?^MpGiB4>25Pa~y^?oXSZ29t-
zNrC^OUCs5#P;6%C3jTktGgKIgS{hETm1sNsu4`uSqX4po5an?MAA&2gEIqQKn+fq<
zmoDZpDG9{=+~=g;<Kn^`hcM9HJ$zb#BisS9>1{mGqa7*Mu>ClUQ(*wA6DHCvlNL`4
z2$Gwbt6{Odiyk>a76}R?D7Jeta{0+1o>B*e(#(*L=yYTBt&G*HIEx)RMJgfNKB)Bz
zB6&YAvE|X%bZ}zA!DM=HDH`(zXm}%@;d8*cK@nfZ4oTAw8S+G1yNb!WPt%MJo+rNF
zFvZx@CMhC4q_(5~dIstkBoHHVTp2g84smBkr#e!3i69Qo-)F+|m==1)sUXQD^b5;T
znO=F9epe%eLCLzS5#5i?$stpQGh7J%NU^7OajU1xJ2x5j{=I`bU*Fty9P=7feY<A}
zYPFr?0ig?`D1kZ~`0=WJ;;4yZkht6M+{WUMV`=ql8P8+crZ3V9hEtdqxc9r3VByIx
zu~C@I#h$&#(DtEHPUZS#cY2Pc50Y{aD+k9F6_g*^dhcQNaP0aull|vUpxk&|V#6<5
z$lOrksB|_-t)oxM7!kcAFuGxUNb=hdaDask;8e`3<*C&P<fCkMN66h!8hU6ERb7Mc
z&P1?HG7C+KBpiS>C~1cAQ|D>*f)j!WIz^o9>l>G^V^|W8yYNxKEg`@wgFiKmXTIl<
z_eFsk73v1nIVm%gV=YgJs&d5nc|48vtjJm&8XMD4131r{uMzAviyHa<I5_jn_V_xZ
z&d#nv2Ts-VzvFfxE^ZlP&9sjc0sfVh9&vxn+^|ai_~t>RP>s(rU^;jZgQ=!TLWqrO
z9NaTfWQHFh$kf9rh}d*UE&#_hR4k5h?R;IJGl~SHE?o;O8Jhq|F*ykR2z{`HRcdt9
zadfrE;pI;i{~<DrNF63Dwjq@r#ej#exXgl^$#%R&WHpMUg&U+cSh%0P2S+7KcF`*+
z5ud4Z2<zqEGA*Bqap+U=ncu7ZA0Nr}6a<J?zU7(yWD`Gfu1knT^lB%tsBN7mW`Fh{
zq2%=R$Ul?|v<G}QnWgQnORG!bmO9VJuEZqw(DI(HlWXaxVm}XxhrWdWjz)4dUcZ&s
zY-QKPL`Lb1=u0!3&xM9EKHIh9^NoF6q7c`^P#{FAk(pKz9U*DQ_9jODm~mZ@S0@ZZ
zBT676UaClctv4mHJ%69>^JjLat>JFf&JziaG+a@pgJLJ?$_<nMiFt_TUpxUb3+%*{
z@57T<$WXyy54-3k`}x+Nj3sw;QWP#da*@mTA#_U*6H(efUP-0rcIjCf%L^5eJ_$4C
z6UxP|ZP*PAhMAi!h*aEJc|;N*?_Y6i&FIuzuE_By-~@>YFvenDSj?jt+JQ%XU?ot#
z5+OAs3G?unq_n=p$R!=Yr%j=5cV7XFIH{tSvPsm{dxRH<2fWHLq8uT9ZHd74CNn&*
zPWbPjp~VEnhFa7dlN4lp&2qlTW#6YdD8Sb?UXQ{w+^Ni$apI|k^21`Kiuj)Kj0Wp9
zq>qb?!=&QrTGx&H;Fam&2$4e1-#beVu&Y0pnF4%E7?CsBu)`zu;!M#Y!6O`vVL_fn
zEmz7!nYlkvLHTtu#}>ULt$KKd`QYj<le<^BWOnYCep82U6KjWZUiTWn!B?78#z~Po
z0eQo*tz2IZ-AMk8GbA5i!Yph%_{rR^3K%6FC%XB-v2#JBK9E<Y4VtTCKUoMWbw$>{
zl3Cf#ncBH_!eQoztxQ`&1a|x4$1+Gz=||KwamD+hr;+UzSZpt~*eNG(M<iE=`P0;e
z3_O%34>6SklqTrql}!`#ndCkQkRs}Kqw$g37U6LH@|wnK@Cl{UXy0rTZRscW`}LE(
zjrmQN<Oj<^O?1Baay0*LR-KWO^VbPxDX@+UH|4jQxDaFE`#vUTtb~wcG~G^$j<BxD
z0AN*xKJDgl>Cx{=<40^p{6yR9@cGf`J{0S;nNBA{=Z7EiyF;ZnfC+#lH{#Ig%i8B=
z<LO)0wOazmSQIx<Nqywmcp05Mo+UCqs{svzGedo9nAn_X=V4pxH;Ih0Cr_W=|J*F+
zwLkpIb(MT{^y1$1O+g~Mafj)Dp+GgGns1R#*{(jQ<$Kp>jyPD}M{3^hgq@vKeMZYs
zy1oNFrL9cLbNDtNCLWV43*_!h9r#frY-(CLMc|o{oBWU8-Z^6~Q$YEQ5vf=-G3_9$
z2%|>30?fG*_FBx~xSuxhWwu>HJbCm?-|0H{-rJDH=BV_w3K9#>!l%dFq~qzVLfIY0
z`H#$I%Tr@6bI$yX6Uxc?!2fvp-y+2${=M}l1XSXf9totPFhAbToFjuMO~N`vSv&;U
zmZNg&rmRtvoMQdS+>(R!tXw_!I>nF7!iPAQ1C{Q5sO(?I4kWoSIl0>f(Um>`0u75>
z7e=SgZO`SmT&~yINg56;M+VQRp;*x#39Wha)bi<UV(@%;co|G!v%j5aC^y_o9-<;M
z^TsYd)G5P$?kAlXr(5KMcLU;o*Aewg)NL|_x>u#0me-Nu)(^Cld2daq5l{LGn0nRJ
zcF8re1rT0`KbeIp+^BGxrcQ{IBg*2xT~e7>#G2L%{*KRekO^p4`Um>(<<+3?PABB!
zAdw3#q@@DhT<<I>Kz3HPQE2q%(6EvFB2lg=vUDb&8{2Y_`-kYP^OXr1q&ON{<n##~
zW9a6id%xVL3$+OrB^UWGu3&tgeX_vf!caaU-D|wLrh(RE0XRNheq=KOns<6q4P#`x
z4?oax6}R^#dUA)wQpl+&>TguJ^cYd7>>&T*4>W8DknxSF`t7Ba>h2^+wBdu^Su1&c
z&D-UA+j4?_9<xwrU8T=HteiBRijq<o|Io)h6ORa``$c<^|MY2=4Gs$P<&k$UO}+i)
zTeK&}53{cKh0_x&{>Sr6XS6RTjCHMyz@%=J$W6TOml~&piS!?UI?V7P4+^EvburGA
z=Ui%pzU$9-Qc2;ISPp=(m2M0_&$d0`6q^&&_V^+C+q65dV(>^8Lg|16LlD|kN*p?Q
z@pcNn7o@CPEOmqy-0`uTIWGO^8MzZSgyDqF`56cZ)#`eBZM~28;z!Heq93$QIS9Xo
zPZpHgwb=XGEdJ=JzW;A5VDc3uu`IKw<(YU6ch6-VzV=kgFgvh+I>pQ|%fu<pahp0}
z6Jru_iOKjZM-h(l8O)gu2y`LfOLdfftY>WYzn67H2q42>YHR7}^zZMS1zCuniqolT
zy`}clB9m3k^D!2?SjOiy8u0`&!Iu%P$Zej4({5#8qnSVhvJkSvNuqfE^Y`gHXJySN
z@66Q$^fht+jxSUd8m^P5ShHb#ysi`-Q{@t(7;e22qZ=M3vV3SwExX?jhjl1@y%}wl
z6@rU)qU$xx7c`z}QFNd3)_Bj4khB<nyxZzK-%3v55^$@#v4kOk;+d*UJU-Lw3u{;M
z*$kA8J3smbGvKM@F(%R`R`5B<Zkg(6`M`t1sQKf2Nus2g#cfz^knv=Lem%o-(CB=f
zQO|_~*_Gt~<UtWBl3o3p%%^;tNu73l_;HkoW=e<G{Ef86L|VjPA50fHLAw52sUP2M
zBSrYQ&4S0s+^g5pZ<+(2eHNa4rFzU8MA?ILxAvgwcdF*6;FP9*hPtgCDBn~PXhcY3
zxr8$K_8k@r*4pw%5ExA6P8RFTS?~Y~e#8||<2Va3@T3&WTe+TD+8O1A?=#g;zyr6D
zZ+_lae}CuBetR9~FCazjKuLoNkC`V0v~!=7=D6ExBv+!IgBcL$a?*MqFw+6=ebe1e
zzZ=v|L0i;y5~%QW@3y8luk}gGqmREcjC?@J$$qoNe4u!0wMN&EFwqN!Di38?Y1->f
zcU6IB;5epT=hh`7SyGTX)A!MZN9bxsB3{o2-|m_c&n^^-?2m*^W??sFJ^$-wkf0+N
zY|WLjam~hXN*aN;BG51qqE}8asALd&-!PG{r0PWEpmGW^m!485Tzp7q^T+af#0Z*R
zTXbYoZXz%<$s<5sVK=9tWVBp;ARVv#Rz!e9%JG(Shj|LV-$vrbz^E<55qioh<o!T&
zxul|Rk-g7Oa<lj5hm)677S((E{hx*|Q;aR}sNVl|F3?a^M~LG5hf6-hS%moLb7QO4
z=Hxsn^AuPRB~6a7eNT;K>C@hsE4aG%byYV-(0$6qBt%6*&2bK0wO{2p1z@<LXn^k<
z`N^SnA0=1Iq;K0>SQOq^?*aentX0-O{NWMr06ixi!<=J3UMLoHtbDJ=<y3t-FP<jY
z*gl?Hk2wwQ&w3T0@OMDSD8UbP{TA(iG5YIAmtaE-ERBN8lC>DmNllA5ADj{Zy$C^h
zH-tehJqYt4B?_}yYd&+=HhZJn$mAv=mI%NEq+<ciJ@Mf!#ssO;n}FxHeccC*GFYY2
zEJS$R<BlMM97)XYrqwkqKfY-{!%Xg*%$jzQA2gr~Vp9!myQ~B<cqiPNEVKXArUw1Y
z4+$GEqN)(^@u`tpa8ZA!#7>Jqw=@?CK*iZv-5GB7mRET|1erRiEEotZYOXU4ykc>-
z22|F5h5?wkg#J*3q&?<1{|6i5W2XmCt@c3~Z1e6ftTSV#{CrD}-(e(!aT}>bNo_t&
zj8IrPO3gaLwe=x(rRDnuQwd)Df6W?i1B9hb41T|}L+0DeJC`vuwp5+??FnGhAyRsC
zSW}FM?>WB4Q~uJzpTBle(6XCd-e^B{IJ25FcMiH649VSkGgngykyOGOuWVK5JQl-N
zz?9nWco6O}k*>fzM9G!zw3%a1hj$8c$e4#N&^ATk%w$~akIwis+TUs@{^{uVI%}5)
zc1@1S9PhSDPF5U$TO*$ugAx}xu!_$nM+3gRAQVVQGUvT@Js%5E+$?-c4_1aR_D0oP
zcTh<(-%Uue7*LZMKG0MXkZ);S>1Ui+%TH1m92G3%a6N`)&ri=G)sd3Vv3Bk3<BApq
zpOjO~n?Bw(9A&49Dc>=AP#aJCS4Gs^z)%nq7NIz?44G<3W90tRM;gCiVIt2Rrc~^q
z*G#EvTa&m7igJ^Z=(7uS4Yxrx-W}^u5$0!in>RWTSQ4;&eF_R=yz`X#FOA2fdoQJ&
z<|C$kkLOrQ#{0(f@Fc05C5vz}j(4Lv4!W0KEa7kwM$IvkPo{#O1An~h2JmN{kBW6u
zSS&MdM{~UQ(PiWnM`7kh37Ytjx1&{&l376ACUb0owsJ@9<vpU=J6%b1zumcK@#OA#
zH1r2H7~((BF@aYFpc0ick1>x07WKuHN;%aOaw$6MiE172YDfVhK?30*kGZ{iuX2=<
zmPzZBCCn<`wl_s?bAIN?te;5}k`<@`LD_Ss>=pjkZW=*WnP2TEU!*?xBz{C$ip8@A
z?;4|*h=<XQ2RopogP^cHE`4+NND-9=lpc!2wUI#MMun~e10l_u{N9~T3KdcK-2x3k
z5|e&RQbrr222#}dhCh3(c>P_I)MxQn*!CihS>|)NF@DZddpfQUl5YA%qUYNILNo4;
zKTI3SZx?13ImxLUDPi#h|0+!dHL)y(!STFc!BBaV0<O$XbV!XrPcS8i=AaHWq`_8R
zKNcDzTbH~P7@a?2sySv=HucoF3t8!#krq7}uc85Dg;{OUIYpL2V#IgYV<E7nhkbIW
zGH&|~n>F_i5ZQu|+fMMf4X2I0FQt=pra2YT{PUV?ZoHB+9{wBf|6)*U^GONa3G9mV
z+lXZFHgGM+iPg$0p9j=x;tmR!P27M`#wOwN;fO-nId|}03iPgf$lXWeqX0UWw+DP*
z*!7LuY1k9B#tSQ#PXXDDnaj=ByLA?yyhk2#53`|DJ1>EpHm6#xzIqTAqi_mO`xM>2
z^tSD|`Qh5|ujL35=+<n@x-?OaEqMoZf9+RMj)SnLvIuQ;Qn(yBy0OMT`B^w*X|o&^
zljG}AWyCw}bLvrZ{-u$z+Q;CoVh}0}3`G4jQH=(rTfLoLift0N{+)K*Axqb^?Lo!6
z7xXerycW-ppw)zeGvh36Qw^#!!c9^tuc+c2Z~1FHI?`xFrlkL|Vq_FE<Lrthv`8V!
zNu#Z2deOOM<B~k|2{5{oMRNr8N0g|Ym==k}2A!dI-4qS}n(?%gHX0Vbnp(;Icbjkg
z6UpZm1iwD<fe2aD7JqU$WE|_-@L0T8$qbmkdi4utNcfV1BUmyQ9VkJ?WVN0pCZEf^
zAy$5W*0lI6yxio`Uzt#MqoRR>lTE!Vjn&wJbcQ4_s3f2cldti(lR|mpIgr~v-1-3N
zZSZKytw)Sw0WwII2V_84@~s{(nGJc&aDEL=^zw_ClvUDNUxFJ;a;J060&zte7qG<|
z9<-%C6q+8T^clXCp5Yh^gX0DxOvryP;yYmqK^aOb9yMMTz1+`U^0rP`@7Ho;?Xvv!
zNP4iPNK>#7Wym8HW?q>tI7?*Uq>m$?v`_J1mVEFl5n!8zNLjK3hyEKCgy3vPtqfg6
z5kG0%db2|ujS4m#pCk|(#gTRLaGI_s?LG>VNY{pbPKWiow0Hhjtlf_Wt#iJI8L9pD
zN`O0w#T<XiMihPQ>#rAlSinf?TF)rO2J}M&^dkTrax~87hO1M^vf6OFy|0@cSW7tW
z3F@CteuBIl^*cv;KnJLTgxZr1Zw%zYTJ(P4P>zD7wAY)8UMiiejE>6%#K?Sb1{Yg;
zX@C99&)Qujw$feMz+rh?fg=Utl#~BS@#xerY^p+|rHR00ORCJwa2WnU?lWWXn1?I)
zI<8w`^09ny0Izv#)mD~hUjsk4+4MzQrnUan=Y`y!^oav2u@LduZ~n8(5(OKgWpY~`
z;%v*pv^}432fo~wsxi92{8Or5)-xGlp}-nAeskk6(bjT})fW?h1;5j0{6lURxs~>A
z-Qj_fhEj{u4hllOEWyv(&U2<_I3pyTHT*YRE+H8V4c#O|usq0oO|w6aR2Ky_S;{<G
z^1&#%?-bMVl^h?X(Bn`EzY8{HIlh1geLlyA&_{Qe3Q(HI6Wo1HU5L89KST@;G`iIt
za$mUrEbK*)2MVK6yHeH7S)!Qh$9l1|<%VmI={f}G8?5PVV%S%@aN>#30e-1A`;idw
z@Xe0QlD3VHe3H(mR3d$L4gRt_Zt^<~`cxtw{zX#({+@duzU@S*xbDG3|MAG?tX#L|
zpW+hF(=**04m)`jTvunjwT>RR<W@zsqhQuS02{v-yjOp{n5euXAqv$Bt5&p~Q`gsF
zPc&Y6U_F;p9b%~?r!z;ROy=}>)XS#v>FB7}ir?<i{tUA|l`w(%PfcPd1|c;KkLkDp
zIyCGdY@S`wE+8+kxYF6Eo|aQ;q2A^r%<yUq@)>xcG*(>$q%SYcGb}})-s@N8hsYf&
zOb*5N@)?oZu7nn~dr>d1#Ts<)#ddu(A)vl)5i(2Yf@>Qk)+_pcw4Wq0;(Yb<AeT>X
z)}rU-p8ucJUvd!RuGUj|w13P$l$x|rIPfi8d2Y#-s5S}-M9Ai>vVu(rsk6DlubVpQ
zspp2zWY<W~>H4T9p2hPaoF}$74!SPRo0$;KC+nel#QH1Yk{xA}_qanA1Jn&NX5DWT
z#xCEYLf;bo&>wjlaQW#R_DFZ;r_goBDP-u9wO2kCGO3(IuX@Cn>j{tcKp{}hu0Bt{
zvN@#OI=Q@bns4COs7@Rxtk=K5TJcxbH(@tymbM?Z^eIyG0pa_;e9q6bx5d+@NGQpP
z8b?nX_~FG~8c9F(Lg2|K31Ii4#z9G}IFDH9V#<KTC1uj?1BK*i#knPSQwnGwfnW(?
znM8wk<4_3#C=Gr-4ovFnzHgLV=A(S&!H>|bv8jfM?SHr990>uxR#Jt*I*u5t%ae|7
zjK^hPa>|>p$WEWi_x?mByhS+6pfCdE&tB<QZtN(G&rSML^*b#k5LbDbnY#(IJJ#|(
z?;*6W+WCPIJ%=_%3G@+i?qdnfEHF5n&}Qsb@mt9G*~1sM9_h$t;P`ud3czc7?)2*2
zP3x$T7>6G>)hms7(YV64!%@)i=gd`XKbjSfrq1)9$qveRO%#O9Cxc~<b_U;H5XTp7
zj<;8r&T?8kwjz{H-N@w0N*`MqR^rTpM>%qr?>~Pth}A?hi%?7YHgkMUTJ1j^+H@%N
z(#?>Bxl;CSOCd1_+^OSu+lB<Bn__)`e^1d`URGh0#5iJ%=5_l!bRfP<%yOC~_rug*
z7)4GZ>UL6HJH)QMLa^42OsrirZEK)%xuF~V93_UJbWxfU0^kYXf*@7kQ8$Iv)Y<}2
zNQ!otqsf@zva8J%r4uLg<r6D%i{Df;U_<Y$1Y*oHf2U8i(hqgLj3ep2jYlPpgjyQ+
zM>#JSS}amOtVZ;mMz$2Kks_mX%m0XOis}u&jJlu2zOYWHH^n6tx0`kh8H-Fs(W^iP
zzx;_U*P4)9u3S47#~?=~HVlS(#Gmo^;SI$82)!yZcgqJSCU=H{W6~Y=KL9z(s#2-=
zV6C{{&0$L7h{2H3PmY6{(A&vZXK&BaGAAV&EOvuN(vv6uNm;otp`R~VyVe#8#q<w-
zj2&)J7PUo``(1lhFS{4U4uHhQoWANVb*eel{W-ntARaptY`Z)H>wv>nK;%X#Mvjc@
zn_(h8W&kVzz-jb>OcIDqaNJQB#fEt_qd%hc2dpDN<~pEU;9PM_{E*E>?xzHKgPAc<
zU*ByDnL`G(fD)q?FZHn%DmK}<hLgUrB%x}d4$%UEAN6~bs|(X(xtVv@$v8QW>ZWc=
zJ!+(`1t`M9hs-sNYYm#R7jye?<Iz+2N1M3%=KLtOE4f&;Faa1uGRtjD!_4yxdu%pe
zCZ2)und?g`CihJcul-C3+>_L>IoBLCd+=dKoMxV)?L)b-AeV-Dl-%z?#AF<#IC=Hb
z*th)fnAIw=@9Xw+YkVN8!;=98T#H`ZdFE9mc{%r4NRa(Zwi|NSa;}S<!vs%8Rd45G
zfgOrL$}Pj>e;}SIIwmnajpk}0{~Q2sjI1F8s<z*!Ry2XKitL1BsZ7&%iGoG`YmKHt
zQ5sH%DT%u=P|u*qhf2?iJom>VDQ_PQZaT&tC(hu^QjepX{8s5nR1G*X^(Wuw;53Vu
zD?>3A!zXE@HT!1MH#XJ}wY^Oe))zAAw_Z4oBH;TI83IE35jdh=CSe%Q`|FtWsgdIn
z7_F{c8d+~73eVheND0%A&{*WshQdfUygPH=JG2$9M~5xmN=?@oP5wzQNSL4nc8GD_
z+oHqWvG=uW!KnQIC<hY=mOc7Uji&HP;`-EE=3Q$Xj0Ojdt(T+5nFTi0mdGHw`{QW3
z=TW|-p8Tru6a_Q!<?@77j3-<!p|fjbCmz)SlEy%hIC+Ax=MJf?lcj|8dIFdOqqu)F
zY~hIB^cnR!%JOYmaI&vrF&8KguUKD5i*1;7hBnv9piC))bM@YU6?fRh6G3kbP(01g
z?OCQ(TqjD**1E+T-|1$=Eh@3>L?VMnDaRNMuXuj_1)=|{>`Rfc%RGa7u{Co??QZWq
zMXa~*xul#ZCK7!^zOA^IKAy~^rz3M5Xn@!_pGp0KNHFSCauG7t{8=kcLG`EFVN8AW
zOT50SHo?*7+1(UMxeKgcc|jxWRo6ej-WQQUGzoRL;HMRrO7f<B4lgwpP1cb<NfA;v
z?(Ao`E?oqd=7YVGVR;5CIK25;q*h4<a@2Sb8?)8ktwhOP(>Qv%_af38ZAWRaj+-2N
z!&BM{^v?HyH_`PjDrN#nVT@OvM+Q8B&3N~+hZiYW1{kL=&vgMAmvqkSt(mLMLPKaK
zC~CW2zR~Hu{k-#6^{3~h^{gA=v;HAyw1FSPruyYsEV`%5nFoP%rA(55Ub`t<&b89q
zKf?B#<(v3M)y#xzrXe%{0`SA;)ho0N)Ugh}Eo?sffe1D3fdc6>kO#dbEOzpGetWX`
zWA3;@<^?ElF~hQq4k#00Cc{>^c`YgfT6c|ipW5!F(^mS^Sj5HN&@oz;JFXev?^Dc>
zud4E&gxZ{85kfT6U{Y<k++lcRMlv@;DX<k7PPK=mdDK0ow0k@FZ8Ht0+ts&p%a?`r
zJ|@<kl`E1cjL(35i9Xv6jMA-{9q`Q|^}%`dVfrD<!P>#}qkqg24Mj=ywVVI~v!Z10
zwt0x*0P^Ksd{zBjDKeZ<(tv7gQ7D|Y<QddcN&p<goQlFdKf>g;{6&77oV6!?XLoc}
zKAcf5^&U9xgv0o)R%6x}Tz~Ol;32NNS!W@-apxZx<OqGd5}spgAmQdZ$T1vWx-LEb
z^y@hf;IvHQPzTk(5?-d(Kb^r1*V*<jA-D88%K0Zld@k1hTzHU8ZTe&Gmf<3sIrSIG
z>@uAcu`x34O8VA~jIscl=Mv%_C5WinlX!14H!^+gKYj8&C6uH48M;z7U<4SQ>l)}0
zpCnBNZ&D|Z^}B6bHiozi;Yqxj+LiZ*(K}Py<0}zK8FCa^qz+A5m+X^DFF9koPQMXF
zpPJ9m?sTN0_fZawJ%IAJ2r}WtSme`VLj*55)!OTR@*YO*3VF(&Ja&ppJgJZ$nyOg2
zxzSx5mUFjx%XExNM=2~A7w-JvcLC)w#yGIOLrzM`AcNa2rF9n3bJbV0!JB)iOQcW|
zLa*)mdk5>WV^J?vT{&YJ?5x6OZ;}Ieu0wAs`dl>Gc3+hYN!Y9_mydMoq?B}0n8tQj
zeFtz(o!BrTrCpb&qcEx6tWe{XsBb#~1rsy~l8)22FCvWq#c%F;F@WMZtLjYa1Hhk#
z^kVHcwE6}|LqmQ+T0eLI`4b4rTfTQNzX3rB)TmoCwiufUOt0EL_S-V`$(k={Gp`^)
zd@htpJZ~`v#VN&6ceq6E+(^c_iVKaF#aqc%?ZQ`klk&^g@V$=*hC&73B)Ovhp6^%m
zasD}0jvbnfYa_8n4GxxYFOt9wMLjtr=o35};Ypg?>#MX2_3!GWvqq&Y(&C6Gq#F~g
zqBZ#lZ5IGj)YHL+R5!a5LRNbR;|ze;nnoVptVFHKzo2)K8&+#IPE15p4xHRqjdVK}
z6az_N0>!epkPLL`YRSEf>E)s6efw&|xD3Yq@+|zWgu++ARutCmR96qjv9@EM6=!KJ
zWT9AplDmEzYe2Wl?Y7?^b5tk7Pcl+*pzS?nK16Jl?{yC&Mi0>ausp@K+KF<UWFF2J
ztAHp^N+CK2!+EL6uS68mFE_}3UAA^g?@GO>CI+G>ppd3#$HUOGP?UvzQA1@VpDHl|
z3tHkLL=-{Eqj;f<tv3zLF1^3z>m0IT;Qng>EhY3NJR+5j>v83A(uIFF%e4&8D$I9F
z7_(c+!ON1&B!$LXFIP2NJ;Y?zMRz4Cuc+%mE&oxjSZwD-<`DnEevL~9JSW<c6SQ)d
zKl&L6v4U1O)!Hto+?Bo!3v*h$i8E7v51>hs_E^c>{%w`!7ijF_m#P*6pL^c)cfZQ>
z)PlkcP64Q)%_CqMA8}Nuc+uSNS27C5JSU(}S362Lzi!x_1miD`Q(GFF*Q(Gh+oO>b
zwptAu58S>+dm=H~a>FI3_8Xgwkp~@P+Z{#UY-BWEEqvb6$nBW;=gsM_Y?E%!SE7ET
z{XCa=q7UC8hObl&8m2I9A$+CzPO9hwi&-^^E&7|^gSdw~DWt$M!{Pvh`$={|)KB3=
zmH-mkq8=1~-{LSJ(v2z-a4MUhOkWYy0#K;gNqOEf20LD|1)IKah%Rai&Y$hJB~27?
zt`S(G4YoQaj-joyReQ#Er^h>&4LxQBh#LhLZ|$8kgF+8@_VoBTee~c6_ytgtALI9D
zn`8R*cyGqcE(xck9@w0ON|1kY4LHuXsi-vgzwnfp;~uQu{T(WY%0W}33*}u##9Qi@
z7iM`0i5Kgf74{j20b5%ENi5Xp<77GRwPDTPWOP$>;22NbzCnj4F1(=ee4kP^e<VxA
zmzKKhVK*1c>Bf4%5bphq_I2cf)J%QI1xE(?p~oK7g6s<WQ}R-sy>AQO(*UUxF&_IE
zp4CrNVUj4o)M+J`@lbMAvRh3H0z$po^(s$|dEyayDtK`GP#5H}kLx9SP9lh}CtF^n
zGUhxB+qqg3ajQ2>*Wb@+t__zx4Crkplr#m6eS?(PNAWKVDzg3UJ6qeA#@G*lm|(4Z
z#k$TE9&_rZB=X+xnegW}wpmJH-qqOM--V}8PG|u(#BP6tQ`l+Sb1%V2y3(BqV+Xyn
zuAPHoeRHysa<lEezAt*?rQ%(o;}T2mlNFhX9zu1i^qce+fZ|x4?Vl&0nvwYsKq5wk
z-y3@#DV26pFj<^d7n=H%&i3%jUJKaTT@xIV%l;xKyRYTe^F_=V3!OgowPL@HpRt6J
z#p!}qJ&tK@)#oZmyfxs)?m>Yv-gHCT2zOu38bS1N>f?Z$1og#*TwlzBi-W)kuzFib
zn^fW^-R=g`*ui0{x0Z%Ly&#uF=s@muXYseZvv(;o+m1diD%l&V0AOo9<e`wnxr?qx
zdSN*=vFtL>zBW)>;5VY^YIDf-tvUCsyM*kwpUVd&c2g{l4P$+3;Vd4f;U!jO-kx6t
zGL&UWY7u@tqlLiS+wfP4mr+f70(^+6r`xloZ6e0~l~-jqH)jpv+xNpo2A!LAhRZ)(
z*fPXb9tPn-B3_DqG)|6<%kSfe6k$1_pI%8UbfXw0eTw+LAeHEm;1$20ShMD>VbG);
z<v98YM-PugAGvjjL|=6%xcv-^%@zipgAZpAn>{ctLIac%-9BtI!+NR8ce)tEE)k<_
zx43AGx0IUlfPcWK96xxgu)^38*TCQ+%tRJk!B)W>*BtQydS8v;6l68H*hrSP+SSt2
zr4%7}W|lSKKVzP6cTY?fO~(uum_ObjfZZ9gI-XW$oc=;EjODWl?8;$mnBGM;5g1oy
zvkUF%xc(CjdsI7Bdiz_mQSO!qL(;g|fHs^yJ4VG}%u}8*_^ZNhif}$eFB1UwJv_Cv
zQt4>v;YUnC459>ZA3@|5Rik4QkB>;gE~&yXTAl%A!~SnwcqI3r7r|6J_rqs>hBb@J
zpDYx0SXKjm?h2#1;!yMo5gBwXU<Ke!TzzA2a_$Rm`*$7r#xZcNam-)6y;;~yb1Q~4
zdY{-ZT0}*S*!iSbz8at)LWyXf6(-HaP{YZ5Mf$k&N_0jT!>o3PX1W?q5B`TEx(v<^
zh&)k9Iz3*9J6}Ekg6U(&yL``up350#bWQ8CvXCCi^f~j6ZKib_`LzAw{+{0B2J)2I
zP6}bprLWtx>-WR*vNEt*5~RqSfZR{1TYS@Oc1A&M1*df7+4NZzfYUqQu{<~iqjl)G
zszDyu3>U~9N-RINT7EvNWd#vN9XlQZZ~R5)+|cr(^>~o{i@<7pxW&K>#g})c4cj_x
z`fN!lcEyZ?3z86bUJ3cV4`$r)g|*apDtCnyv?q}@a!h7ad|1{4VE?_1HO<*J?sFeO
znf^OagybPthrQ1W+*i-@E9*NgYx^yqX-%Cx;`R#C1WY>pcR99~$_PRfc6N1WIdC!g
z2CKuKUC%8Xw)*VapPL_e=bR}c*qEnYel!j(LzaF{ky()%nfKRcaK!FYm!2Qc9_EZC
zs|=Oa8@%{Rrti2tf^#gq`BC>+ilj}hP|8G(=KL28eB9$!NEv2qf&iZJvPS#SlsuNQ
zwr-6@Z<=9^RpPk7l|np?#OTVa=h6J^G#o4g3Ap7jd5#Irr}DvXF{}3;J{eSq-yzl<
zptv~XDdp2ynd1s)IR9*3zFM>!!%!-Lw~qe)cQM~gxjp{s+4cNF(gSYxrf-YLcg$Z^
z=#fRGMgCiQR<;uI14rVggE0km0W^;1VK=SlX%D#D1O_*HAqJW%JQngwo<y6QOhAf>
z(^*1{O#}%|C?ahb2CFZrl<1qcQely2W{0&qgZz!la3Iu|_@O??ynITI3KeJ9Lc%@4
z;<G}+(n^J)1FVUAaN~GN_A!jN?5ej7iUZdaK2BEOzh;IwWCS7{$JVPHmdC0`uQO%6
zE&X@$$#n_%f{Vbx^jmK=0muTc4J0#dTT?kQ!a8M{*1p<yf37-(iGKDLyr<xob%VeP
zv+{|08ed?{)AB*+Ioc0(u5?Mymo)~wl?uKOAN3WA^?=wL(OSDd!rR(z>5lCXkA5w3
zronGresF)dOI=*3O_rk`>O>7aNMogp6!IhUy<-5ALv_s`x`ZswbKD@-i^D_=;7u9(
z<L(&`1n$afd_Z~4i|`3Nn2UW+`MS|kj}dVu8~EkC9<_9gVd6rr`raYo34=;T&qR8(
zNHSe#$yXnGkX}ijs|P^kNmO>CNC2on5ByRrwYC@M_HCrvee0RVt^w?$_8x973iJzV
zZ$7qTN2U!vSD?Mvyw<Xdj;*Uy;Fg|NYVmiECWT2wcSAxdvsBi|L$>w?M)@+?7VSKv
z9oWgzj-G(!vOtIK-o&-9<>BYNmFEKc3ua(N@v_PNo$0&GEdMk0uBhdT2C51`Q6S{3
z@*Y;druHhk{n~J)z@*)l(<V8ov_qoUgrl!PrWp{B$0lHyIQ%5uOu3?pnu`d;RIhj`
zdp$k3qXd7KIh9DYx!BV-*4ex8-O&DyWUbC@vW!z{SVCxj+)2)ez?**xl!p^k6z*!|
z+_;nHB+~9Athf3bD>#S9rr)75vJM7;jVD)%V{ZEXq%mn66|u}R(|O_yoYF|pP2#D~
zr^(G#v%fro9d5NZIGcrw*9!%zW?xpeQS}G)4?BHW2a;w@g`*TyXf>YT#ApR}O;kT+
z##{fNT>(m;*H&sg<}<%Uo8p45K}UF7jV2B?cVH%Aqf-UU;P5DV$6&83XP8H7@-V-x
z(NmTEUP<%ec{7IMj$X-yWgeOgG(>yA`}$A_^F>|VGv8$0OTMSmrRL<@Ns<8J@>%%e
z@n`$#CXr=upAVw$_Vz_fqhLIZQKKTu0nf#0Ex>bkVU9^5o7q%oOWrbkMP6u2K3=)K
z{-{M}$a?J9ziW^u819x^CC&&spDDO5eD`7%HpG1}m=>~XGxiC(!B6;W241ewcH!pw
zapjh~tyhv(0YCxcP+sk`K1z~X!AU7<D_Y;)IQAy<9UQlg6dB_5=MJtosyG!trQ~%S
zj)KwQxe0PS)}5H@5DfuN3Rs)POj_<h4fCQz=+_K=psg06q=k(<#v%&<b4t<x%L0JV
z5|4T)j!TPd%ud>lAga!9R-5Ht*2rnw+$&3YP)<B4K^O1h=1t1%8pOEvZ7z5iA;=ao
z{Fc1A%cl}&-m~_`(15jv?DpNc4C6}1`*J&BalJ0>t`Y|&EM1MJSBVYHFDv#^w)v_}
z2&l+HQGC2Rk0NE%&OKW;1o-q0J_f{iX$2)r=GR_od7pog>S%3fT?(8~2#U|_a@QAF
z`FuA@Kdi^X6SUDz9#7pzOs}3+3}Cq967AGpG+9VC;wA-n*Ay3WaW%(I&Y$|r`boJ!
z;#sOz05(>@q^Z#4h?uTe-Lu#JjW@eDK2`Ug+*S6vWwLK>Qp}o?b`}SG#M&6emFAY@
z{UQcr@_ytuI0U02!bCa?TtfEwT_CM2<W%B<_IrsH-b&G1<R2j)Pab?yZ;LPkkjyh8
z!H>p#5)FD1HOHI)sl?%PHwDCQWaH>E^ytP=%#INOgME}_QsT4{+*f<t&?93qIWl%I
zH$(@p`ybt0HP{4MEH3sZVynKDc&&kQG5gsB3XnCDD>lHXXU=*9$8st`_`cI#_h|}G
z-=^r(=}~cHAbsa6;|VNQM&tTv4<AlCziM#5yk0&$KmKIhGFx`(1Mk6Q+#D?8SI-3#
z_}1cZ9=ws?z@qu`UQyz0`nbaBx9ouOs1o^|aB8Wic%h2W^#+{tlUgUV#WV+}k;VI_
zOgfbuy$_TUGxOZUfps4X%9t0Q{(K6vpIt0|;fc-jCY)5ZR8hNM(GFMDVjgw}HiiP3
zsqOL|DGVO01D!HYK|?xU@jkr<cw;L#I>r&)qp*&mU%k|ALOl%^4Gw7Lfm$ovks`aq
zohL2SX;fY!o3zK+!hBU)-}OC@=M+8_m$e-#ISJjR8^$2^y^Moz)_l?12Em~sAL}-z
zfW4cZNv!J}6TlxKP>$=Np$ETCMq6o?aYjt*@~>NC_Tk+vjt10EQ3f~o0P>*j56{MN
zZFa&&{T^6j<s|MH)-i}!R8;@tBpoU9LOUHVLy41^%z*MT9hm7{ksCOiKyB{vVjU~9
zVaU;TXFJjJaBjNIp?`R5#a_QCeF7Jk@e_|{xPwomjjJ?OgK-eSDcz7;;1Pve=Yx<A
zfO7qd{d+~5Z|lj?iK)}*m62bMjHSkl-m`@cGnaN4X1dU1&ipiP-wmPl{ZCORt_K55
z9z*3J$4Ix-_tk;m2VI&v+eOZBO@rcQ8!cmTA1zXZXe*pU5FtMT%N1DI^ndCSdUsky
z&S|9-orP?Kh7rLPczU@UdB`nKO@z@&Ge0US?h?XS!X7CEu#@n=?fT8?E#Vpq>!aZ;
zZHd0QD~#MnJ`~w(3pkyrYK$vs!{yA-;wU^N!2-oIf6sU6aTCGC<*zgi56C)E6)swm
zda1e`)#q26yE{WKox6)2Hobim(P8%{hWwbaVq&8;^8wu_rm?Rqs`|vq+#p{ny^VM(
z%6Z~%;pOF~-_&TnrIK(%6>4wHa71@bQs7aN%NAwZPTeP0yx2-W;7NUh`q@wXyx%DV
zM`>M$sJDic;p<P`U$=*NiV&D8lR=>8292%oBx&nR!__lk5eeE^${FGtq&uP(l<O{n
zd^tl1(ItaKxK0@YC6z)Z#Q@ol-4uOL5_(pCq3@e4jLSI6F(_sL&S&E^y5JH2fzs^k
zD_6D@u_fTzqHUzu?joZ=<gpif5}Bho7E)|L`H&y+#L}ybCSr>J7wEnU-vF<0Tj)7C
zNkDZLVc=<q<zbN1yG2#oT!2#ru7mio?KgT($jo4^-t+07tz*6Dq7$p%npaDWXMCq;
z>kq~o8*S$?*Xvp`d+D1YI?KVNKeMK(sQ+WSEUhAd&d_R0+H!I;M(-}%xdjz&Ob3b{
zD@>7pgPT@Yq`siB{6uPc`XUtInkTnktleX>7|`$edfQUFXXOy<S9wC@ZBet+e|!gy
zpbm;s0|{G$N7{*`vEb-y8bhW__C9b@uJn5m5VxG_uFHXaTKX%8$r3C%O32`ozSy00
zUMJIsw>#Od&?8FP+a%6irw%Rc@&;KqG!?ulUF3ABF_{e8JHJ&vw)yZasEdMjM!(bO
zjw$Cc%BqOUXh<#I=AG#d7p!Ridijc;dFz@i)KBsrKJP<q>2Q@58q|~$sAN99h*%7I
z-}g)^HUbjI0eaaefvk9QWwB_Sy^q4<W^V`x)9)%NX6VgTm!ZvNhdjyNQG;eTUYund
zcWEQRUb*hQN9(r)01WPP)?+Bwsnkm8S-sa&P<pN6y|vU`b;%6G3!Q|;EsY9uePoc{
z`^UIhq?oL^U3KL=E^;N^j~Qmp`a3BfoQ_Lb2cPr1$mMlY$k9cJDABQvk%R+bIDwSO
zN@iY-@`feXVc7`>vCgA@hA{xa67!03gt~34L<!uF7P-+0aXx3gJJgeVsZu=ebyt*A
zo%a%gs5Ty*+JU6wsa?VOjau0qMp}<7!cuHX1w|q`_h{epN;#!C1~3W{plc4*p@E1G
z`HO9_0}2|@IE(nb-ljedmb^kw=KLUF_u4E#z#yl*c5q*d2*phK$ImSy?^l<z&>X|B
z<JZXzGZ%^u^~bebmrtGpM-cFmAx_o#3@xfJZfCIO;TR)yJHnY%p&~r|h~7~YbeA6a
z0L>wr;n;=MP;c=Pv1$It_+w;qehbCf{AcolLPSs)9+&ZxH0=|)qoz<+D;*TFhVHIN
z7eWjMlYoFMpS{<7w&t&q!`Tb*;Tbiydn@-&)MM~~#EoFtfpS9mrAFgAi_0|C*y~ko
zv5u;E!c;IS>me@)DzEj7kuV_oz1UUw;A0SzJFGmnOw*+)*Ow#VC*&Wt9TG?kWc78(
z+9P6704EDm)oj){0S-^7xmILf!p(jNBt<GFTdAza`d*PDgKEu*5ZI;S0W6<Km5`du
zP1BBm-Y{g|l9U{oH+>(2!mL!ycltY)hrN;z)?LM-eHA@<e>8IpW`3FTY#Arksh5<Z
z71A?P8~;M8LRb%&0HdP#%S!z~NbA%V)dav|x1+V_cAiig`{h+cyn#YlSYN|hBWuu+
zk$C+Nv_TC}9ev5uRw1*v3TZ>t{3g|F?7wEI64`e$$*ZD4fak!4o>L7Zj7LOof4iz@
zd}f6Wd0`6%xU+T3yOMU6%TY_6Q-2S!$(jIV#w)~eqep%jKo>y}we8aZ1VF0q3XkvT
zTZcxt{zZ!WZPNCWhGw4}C-1!o78dN<Nwk%j77mfAP+3i*v{gL;4nF)nFd#1peTuE1
z<Xoc@^Z`&-K=p1t0R3fIT;`cxe8%-cMFl(x7RaM?+x^W^)A3>>DH*FrF$<H(a+E7@
z+@W|X<Trm32_%JH2e8~CgAU-o3ZZhqk=85nRm~nIOMvEb4>y~B0RSL7XGMfZFH4L)
zT0(dB`Ac2S)i{qgxs(g}6H|I;-BlqedZYi*54rKYq?)QFYFA>Cb6%pcHMA(R-BJM6
z+#SG-fIOj^uF7Jfo=h45hx&6^_C^HFQ%@uXT;zZl)DajL?B8+G;d#9X*#lOrHE=Lf
zYE|pk`K@L{S)c<-(du`Shd=c9Nc_gSv->$poV+SkVs0QaEOx)tHU<<`W4#m3@3P}K
z_bA}-z#np(i6}~{$5$!dUrVMLNZf;?v<<f%HMZB$9lLqx$SAow?Eo_9ZWJR)Ytg4R
zF{rGX==}&dK}I;n`}W@>!6dlQT1LcFfFw=^4k2X9v-D~AMKSQb<YkcNCVR)m-}Itl
zEF`Lj_;kfzTbt=qO<MF0e&Kl4y^>MU@@!p;NZwZE!X!i;z-<4quZWV@4zmZNH?q^P
z%VHH8v-?@IyAOAGfi)+w6BU#3C8P%6fXA}|iIvU?#d2KqPTOoaT4^M3^o!Fy9-VpM
z8_6zL|6k5Bl=~4^PS?PFvNhC55x*O*oOkTExh_3LN4cg=aS^tbg41sS;%$oa0r*q4
zVq(Q7sWy?bHnJE^T<xF;i%Pa)mY8Wv@3`D}qCfEFYtEFZ%)kE^05A+1XJ7*nEoqTa
zX{f_(Zg!C1C@&9WoNXKDab{uwXpViL#PQ0T?C!@|6FJp|544kxETX$9-a%n>2{3am
z#=qk<Nk>&`{zVRuJZ-MHO{({@!X_%DPQ@QveeFP&dx0kfEK{@1Z)93p_uSsXBr3(8
zb5QOc1BXd#V1@El+f}*|BO=KJYk$@!5T1&+83){U(|AkuoKsXy)foDnl;0(P$d>@0
z721bitnVL*6Irjl5+xI)MJ>V(Cek79E8`)Az|ce@T>rI>uP91$zd{6X`*wsYm)g4m
zUf3^|*K9#E?wzU=l->>LID@=mp&mQD%OU0U>h>2L_CckDt{3kuUaB`d{jn@(%Ek2W
z1P@S*Mk;oP5u$84bT+n;D&fPY0n;^0eSM`AIzWBB#7?)EJLGA5O$E799yOiJO4M?D
zRdXjr5c9u=5zqV^zShfd_HRdj2{5^?tZI(2Rh6u+VJA}<KiSWw^kjQdh!%9{zzcyB
z{eC7@Y;q|>SQ;Yrx*rdC^YVtqL4R3<z?uCYB}C^Fte5#M1H`T$_QsU@$TIA&p)nNp
zw6EK}u*Mhk88Y(&M@an<By0$-LwxwFdu0F^{Hp?c;~xqHkS%fO-t9=|YXg@B<)tEL
z2A(Dyv8tQRv{|?dU$ohP-7u^R!fue^%gA9+@THdtAbq}sNgdQ#!VgFbQ0SMOpGf^C
zQy@W$iEJEqJ{a52k_Q;!SGUmtNu$Dv7=hJjY;h|)O9*f{&tNIGz~j`Gc6E%*H$S8a
z+I(c8SLh-Kux?@VAO7Xbs<S%7J1GFBkwj%^@9C=A<ZWyaZg7e_{VS)i_wUeS@Gy|W
z`o3KR57aH(<{<Z_J0A<g7jR}6(bfV^;d5~aVeW%J5;A+1J+P5f)Ib#@){}~+J=xH>
znIEzb2jk-6%z-h01C(Lyalwy-+4hr;4GudphLsYHB+8|M+8iOV)Il)afBi^i>#s!J
z;b6PMK2|0U4&GotipD-T=VKCBe4H*G!0yJ{A2snP1CB~kP734i<SpTV4`6lSKGkf+
z;~jHKFG+?%dHxt=s2G&pi6TDIH!8UFj5`)FYq4^V^X)8{6c~?&38G&Ve40!{dqZo0
z1)K=HD{P0CVgf7@@Zi87cSn7JVl)RaxPk5Tw!fbqEsl?D)^8~Db^M{CkZTB#ZR*;j
zf+i{hj*UZM?g!8Na3Q^Z%5TP1SrZ>tGTj}L_{$|vCYqX@qHha0ew}PY_bl9@al4te
zv2Xpj4THt{9x{q7lUmz09T}u-Qd<5QjBv2DH>qHTm7XCCMwgCj`F9hY1py^`ySZv(
zfb6@BQ$6c$6?+QMm)j!tM3kCm;_<@jPyI$xd4A0p12ILgvli!|LIMz$$g68l*-C$H
zdHYu?lGKc-Dvb>T!;O3K0B-Q*xN#4sdiQjo`&a^F;R}$7O0%g=s^xO`=+q;_MLJpv
zscV@KPlgx~=o?ai<bJai0L&l-j+3EdQJD_k$nHv1srG~Pc4JFCV6mqAh&rckD8fPv
z^zt*{SMM-C7b%xj<yK*<pKOYOP|<T9jkq_)J-~Z@_e6~s0xFrIoga+#T((c++gc6r
z54W^^;jyEdZ$E7$baln*zg7mswiX~ovW3$4*P=OnG2v3iKPGa#l6Ky1=?s;BP+E>s
zqip!&z^QRil~i>JA?fzExQ-E)VF8VfEjs<$kH5pr^&c<z7%UKoNt-P>WZYI8fWMtV
zl;8Ss8F&D3OK$;?5F0Z6KV)5XR8-y9ei=y-7+O-gyF;WqBt$x-6$L4gcIXmmqy(fy
zdO#Q&1nCAry1TpKyPydEzJFZHwU~SF*=L_;KReH3^FIZ<0Hsx|-6);o6&N~xCyViF
zWZ=I!mZ9Q(VXO}C6G_7-pl^<5L9{19#~btFQ-Chh>9EABvn<g!kW9J$J*S6wo0f04
zM%Jv`LMSu6thvCB%~jCnWA$}{zXGM;oc$$cDyDP#!qo@mY`62d2%w`{F9-S}gly|Q
zmunlAWJ$+cl^^_F7&|;uTX@#7<XTw>%k%zm3b&x4XDt<Ju1@j9&Yw^)P7F0g$%1Qp
zxitc#PA%UHvY?K|XXH}k#~U!qXW*gQNPj^e`6KdBIuK3eN7awiYkFh0mHb@m1y+&U
zrelPT4<qPE3!Rf(gGj4366BW&A2G8GYH-oDpy$p9hZ8$3e5Mc2H$J$wZ2y4*SPVTQ
z;=aFJ8jv0Mz>|nNUyx(TO&^|C*JADESO8dEhRc?n$IE?#0H;R5jnz+J-q3!i-kv}X
zIBJ(wFTlorMg?M!<z(_e*C?gAwiiFs3WH)`n&s%0$tHTqXIbEsaa9pjIcV8GPI+Q*
z4nw5!$eWVwE--5u#-3d+Q&$CG<e`8&>lJtX{lpp(Q}+yaZ|H3IQuMi4k(qW?Og>$x
zc-I-nTO=K1ssfR-u_IOYxexZ$p*42_hD_|E(UBFI-X|X*h;=CKt@8)3A)6pvr`Tzm
zvf0TjIGd)suY%P-%ZAbJMhSSc$`=D}Ye0#kiERDdEob*sm6Pw?U)7(#^N?SALf;~b
zG4_M!TEE}bIzhHa@5%0$&(*dR)zL)vTdJl>p+}wNH?P3c)(O0%j;rlGVa1enmy7TT
z61T1bN_wq&^vTnYtpom&rpu0%=T_xu%iW((9(y;E3}7h+D#VD(3gZqfU|hVAqm>6r
zIZRsoDy+uh)Tc|TQ(Hol^OjlGD50)qvAT~cJlS39%Tz8$hg^x>8#&S>Q{GH294OaB
zA2)6h%W95g<e&Q>KeJLjnfQ`Clne+890bD7r6b78It2$h)uAt?vUF2yq@jZ|SCvuM
zyLTTly~@?1Bp+S%Ua`)F*%A^NqsNr>O*mRD-e1tufyRN+f-gfhSC+!S^;oDSJZ764
zO$KPTl6kz}x+h@cOkX7?_8e$c|6@gbaeuk3246OtkjyyNraYEu8y^9fc;cOX<#!^L
zciXFkWP39giG8-ix^)!f_nR*tLGZtic)Rj8;&d4o+wmUq!%vYBuXx+m{RDl5P>>Y-
zftD8<ZzumCCQUu6*l~jw9J3kSsSJu5d&AGe<3C}Q2fezcGXFu4;kP+d)94r#_buLG
zVa2zHrX}#(emQ0L?F#%aTpVbt07@g$X3v085T)MZ!31XOPf6l<S-k@K#9!Skhys&s
zVj|kYIt;LiVi6R5R2@YkeqG1p_2!Zk{O3)8|LZYRm#<u5TTNAQ*&yVUg7j07IhxS{
zOFUocbLZ87jjMCQ<_sZT`)<{EKyp7p(=P2{sWz?lMayDWCnKgm93(w^-hb{qmqwfg
zJ$DUg-mwMZf4=i*KF|KPLEKMyM<9@`O9b2Ccb9S%)$7mI5^#;~q~AWBac+gvlaYE$
zfL<d4SN*C+q*kS-(tS_x$J)71C%)?JL%+eb@OZp|=FvdcjtI8Tv3<Tk^y{}}Gb{#@
zGP0^+G4vH7pHQp{P3Ljwb@a*nk_Nj>fr8x>k+ZKW4%MLs&tI!dR|;Y~j=r|})}GBo
zw*LBi!C(5W`|e$AQvrj)3_3|UFCD#+)=s*SQx=V+`y05-g>+*wpl;<JSlTu4vZ6qF
zoB91iPoSqpVXHM)K7-Ss*<aKN?)s>)Rf_n!4>0sN4JoKnSsXI8eT{+Qw%8t)W%>%E
z0u_PcKoRO_7JHN99wrxF^ik>SZ1fIG-&P<3{g>zIz;V(R$Hu%8F=i@!@s0hdFHfVh
z?aTb;At?&rJE*jcZB~1IA3x6zbr{wY`f}n&V7$(w==*UX=r5rC2b9_vKC;9$OAm~F
zDfA`3oH|DKD9}#8bzo=4&a^YI79O>q*HsLg9OK36l&yZ5=0bm&Vg$LF4ANgO>p#dA
zCeXDUxOXxRe8&PclVw>X>&n0<iY~q&pk?B+GsgUttXqA}bLH)=Zuw4zjwmA5yl121
z%J;9W#eWbRFq>T<(26+Gi-O^We?myFS1qpdvI<YP6A#2roov$-heqglYHX2v>9qSU
zDDFF7w&-0W1Q}Z+C<9K;T}sYSDJ)q{XFy%GaGLp5@SdD9KM^(sxL^L6Sl-7_{Ic(q
zdk!Bglx?LK*9HONQ=TPSf8<LFG~itWd@UbxrOjdF>6??0I`a~MYMc$W0Am1<FR4Z$
z+3O0O<xE$_lg}Ph#U=6?IBmT^msASNRW9u62{X)>8Hl3}OC(QL;}Jc9nqxG;;k-02
z+~Yt}iokj*Fe=Md<>v=3g6;8cdA&y!VtDFE9a*H#$k*l$I6yO0${%CD3fb#z@3%ys
zGipXlOW!Y73|w(%kk;qxsqx~5|E!xlpGwbBbgJ@RaQuOGUz=H!{2C6xEbwnc8UUv2
zhEYnoERym$m0Z|Hr%$x$l*%qalb&Pj&728p5?KRVGeiF}oZR$NlBKe3;tmH(Te#(d
zM%ya%;Z+ygZ<}}7HDO4jwXwL}QaEqd33T&}oGB%4Zk`Y(@Ik3N#WkgYDs2UhG}vM$
zq2uUmPLzDp9hjMZRC`vl<5kneAK9|ify^F-u_PIU@bFKg%c~ZfZ*-{IFCEM++J(Gq
zf!AQEW04j!sT_Ze9T{nIrr;Hxoe;AL)3xpUOwaL+ZbYm7Z&TsBS}K$$bLOo9MXzju
z30y^p{Kx$3a`dq$B>YhIiXxymARW}VAsg+PkYvF|(vRGhI}}R9`iY{?e*7jl062>H
zU)tM3)pFNt%YR}zYCbK2t!7i3PkG4C%y+iro1PBV;$D>Up*UKElS}&0(3K54?U{Vg
zvC2(kpjkA#Ifee{aPlr2`k7UZirKlL=}$-bCy?olu_23?ms5IXGZ!~2ZL5k@&FEk{
zmYK4^jF6&_e<A5Vh%649O%u0WcG?q{EF|XWZ_2%WHR-192PE*EkB9(`u^bdZ&0TH!
zCOP#kc@~KM1Qv<APc|JNC;aW)7cp!AvAj|gPG{4(tlbQ;GPqb_j%CDc6PWAX>DtGK
z`ikHne>9PC?l2~FtnAYw${(Qy5(xEmK!M5i0g{Lj0aDei;Z;rX>3V+aYdTDpB~O?R
z0A6!a&GEER60p~r(70r(%*iIg$kD}zxdb#T^FP#Nefd;0|2mAH6>43>bQ6=P1w#_B
zk|x&k6LZDQqgW<B?*yzavznj*YrPyQL{BZ;51TPFXKrWH+5p;AMY6>gM1c~U>u*u`
z`mU*g1R)kWv$zxr6VK~TYvxf5T>aR8xAEu)0f*)4xM565_i@Pn%e%47-IrhwjtoxZ
zG#9(Z#YROkpy)ntaH_}?PhNK#TFtn3&;@Y)J3wflpds;0@x7pxjsCbovir;rZeW7X
z6qDIyH~DWPL3S4b+6PQvNM?t&f7CW|(}~WD!}d`RiDw7{6J(b{^QI<>eFoM#`(htV
z0aY3D)ONmnTDN4No&1$d9_Wll%S)vmGAi?+kl%Qw>T5_)LZh8*)p3W=(Y4!23tPq@
zJD~E#*^uciH9~{iN!$vIH6@SwX1@&#Fu)s+!G?NuuwwzuRCu9#*%zWZXyYW#U$Y&;
z6S5?SQhwaP4zfg9?Q|SPtO^#PmnMEd8b^zBWR0VZUe&QL_prfIb+=2Utx~!IEBcue
zno!^^+F*eVgOw|rMa}y@wJfJ{s=?K6-v5Qn=GW{aFpz(aTBwWR^J$(0KdLQZ`?TBW
zFSY=Uni93eB@-UgIY7bmn}N3_k*tDQGsjl8c+ikq*rmzP%-@n+Bf;W=eg|9?6MfS<
zn87F18-)x0@Gkc8EI=`Pho}4nnJj@UhB^28;mn~fw@sIv*sR$23ALqF51zK!cxdt`
z9y5O*pSUsOThh{li&1I?e_Y*ce!lcZ3Cc3StqMKGx1BwrEOc?~f0zLb+bCDj&D(g+
zK}F}Do%EC<gBSZ2>t4MJE3OK99{i0H?0A^SYa12Gau!AGJ{4LNx`&F5d`xliT`9^i
zKhIK=&g#S^?jFirxfhu@n2}V!K7dMt{;28}V`ywR)nI$}-D*+!@CIgK!$)C;cqNUp
z$#3Rd6@4FmH9z3XFOVTJ1X$AVwv9hf2u=kN(Ca5+vjEOa<@COL(vd{tz9Ka_2Vqwk
z<Bol2=mSd*s-H*OM^Q(%ExVy8e2GXm41^492g>+1@HsAYye67kakc*<uq;01dm*(U
zP2cWYk2E3i-bCCaolmrFND8&Tvwzo~y(TtWL=J0D<373k`%c>Jy-*GwRuSNAH*e{N
zuOB^d(|W&?Znhl{SQEjZ8=VIGV?*RKqU2=XXm5^bZa>m0pYNO$D*@l<gp&`iy2v$;
zUw=3QcwA+!Z+wdUZ($oB=9fNll{Q<?;qMmlt}A0ed4u)LEFSF{kBootF7p?i9j!C+
z%FZLG>KS>}3#D{Cqz>!Fhu*iIa37CtCqTC}Svy=vG&Mc&*Zv*V5jJLD>-S%!vqkjk
zGr5neTC}Q+6kGL#Vqo>pzyCE6;K!H7W@TPOK9HAcy&&fs)TATlZTVnJIX)HzWmvw>
z9%-V)*+wF(EI`cB2#Mp#VsE)G?g-BF*je|gML8qGq^q-hT=USQpRI_&FF&1NigxXF
z3M{7jFbYeS8f9_sPhh#ht}U8St9fjc#HMbAvB_xbfKk$L`he1k2Nx%BY^pO?Rrm`F
z!*Yye2h=pijys>T!sEkwbs9MT(hm`0)Y-I58K4z_*xJf&G+mu~j&XRl+pdfMu9hUw
z6OKw`=HImE{YH2Ll|x}9+mR)X;wV;B?S9DmX(ceH>>9(C0SpUIPi>=ZitFNE(axKB
z?$9!|a52eb;${NkVhwDtToTd}h)s!=5bAR}1d{7%RQ3wI3vf3pL2gK_-HuHUPmIHH
zHb@E^j@l7N9g;GX09_WBQ>`=&3sQ|7mE#IPoVBcc|J`(aO`g;zwp{F3#hTmnTDBLT
zlR0>#r~p3tmPLLw()tBzZZiAuWovY0tLKzK2j(^P0xD>zCmky02-m)oav6T5mIV%m
z&iwczGBqp>-mZ?|d=cm4!966)yd4To2dq5=b)Tztk89M&5~-be19Y!;*49HSr?*{o
zGA6LY>1F>5WiOZXZ6`#By6*}5&y}}1X+C@Ub@Z*x`;X*Bw}#JRJtm{1mMuRk0XqMO
zJ$9laWmJ_)iJi|6&U|vn!6_nc^@Ojy9rAY;K_qbpK>5zc{O*7obqf^%5eOvt`;yom
z+AEK$P-W@M`>me60;vQK<%WX^0s*susOameuJe4)^pR?%Rax$vxU|JI-&;I9fKfR*
zo(0G}-LVVYrT+!hZDl=z5FgL900tO*UkNZCKc~Z`?fu8ANl#ly-wQ@7MD$Z_yv{ch
zzO6lxOOa?m;H`~6v8}+PFh=$V6zHt7SY<V4#)4F1jD`^>C^z-zCVbTssm{&{eMA|7
zTjnnM%><p8Qy|3xrgg1B|G{CFwoz-urxYE>b$$snr4E`qf9wkO*EH<;`l4`kV+rH2
zvhlYSpv+ayl*-$mgdcpZeEw>1F>SrDRMncVZ$^^|1mtxMda%s1X8wDM1i)&y&@a&d
z4fhHihHdwBxHYbYD%Qb(mw^4@zl}FChL=@~_6{d=7JdAFp6ZmQZRpKY3#FHbfGpvi
z{8yGUAaf+TgR9R`CDESXb4!ZI_aR(s+^eW0P>mdhEKM6tzs})6)me~R)dLC-SrD<7
zMqjdM3)VuS5^HC)B)8;0Dg+KK2db8{j871mqb(De%Kc&syp(_42WIe?r8knaCCsVa
zEiz%Z@r$?xQE<4L9O;@+acLIlT31`8OAuV3E)WI!@^kvc%u+h_v0xA|QgZHVS=7I8
zLPmZ&#sUDQWPvaB(X^u01Knmk5IW@e#5}O=ye0(eGDu+wsxM&QhV=Q|03sab<6p4)
z*09}Kzs-Ql_k>2FN6qcIivx;<Hee|hmc8&aV6bD+Nc73e8)LhR0`w!a>`o_CukA2;
z&;SWXs^ZXB@K0)~qZcd%X6?SJ%>c?Bl@^h8YpT{|g)N7$TBdz7+SndkmNks2ICO0j
zNQ)$}$Xh;rp$zTUDlW)S4lL?Rki3N(WNadnP%YDA(~_B)Z>AYKj`0K9Tn7)5qb3o6
zAkCNBbR{1kZk<L&JEqm}7p(#AcL)AyJ5$7Lw-i@2P>_ikeD5s*!UBSYd;dwQVR??u
z`h&%c%u+h(iW~#s8f{$`qhI>ipRTiDaPZ$z-*VFd!=-E|XSJH(p86;iRO`@cdi+pn
zenElS&!d1HvnQ??v8VXZxY4tEYMO95MB=<`a{T%M5M+e*&?@~`{@*SnfaCksrpf)i
zV2R}0IB%ig9F;DeeDqJ&i!TCqXs2GRL9H6iZV?d?GAxKw6avJF%roShZc@as;F2w|
zcX$C&G;Gci;0?!4Y&*DEj#R5%@VtM62*H|$R!-F)o$|f#+Kx41T{NVW35f2%AC^pn
z_VbQri?-NicK%TJvDb3+yk+;<a^C5<;2C_?`{jiv&(IKcwgn(7mYU)7dOZPyskzSh
zq<q<8sP6RBOrUw;@9vAEe#CswlBiDV8fqFPquodg3=+5t%$<S0owFwyI4V;5xLQnA
zX5t)h8^z(^DX_i(4T7zep{y{yUb3J8ZxcBR0TQGiL6?Oe4bfeK*0l0|t=c?Z|Crs&
z$hW#cowI}J)6F^-Eqb6=5&<7Nha<D=?N3d*QOmMow+LN7C4Y89xD8DJHWMAITIErw
z`or?V_=3k0g~m`eJU}ofS*tI<A6CC&rriX8qBZ&E?{=|c!|ctnlpf>Tm*d#bx^aB*
zeoqEzQ1S<gsdLez_Ruq%LFGAu{I@8~eIF5hslfIg8#nRj8k|1)chp<(%Ni3|z?7Q=
z-beWq1`J{@So|1<H{bOi<QcqeubPRKr0Awf^qvYza3GFu`_m61(=-yx8jn>xyZAl8
z3Nd@~W|0E7!Ak^)wgaJopjfpu>q4e{Dq6R%*6~pdU^a0)%>jXh4zrB64quq2(f`?`
zRBQl6WFB_H#2Y9{yE3I6OAbBMffq5Yq;#{aXdsm5(6Y#$Ucl`9t~a)}0mWo7W_(9X
z$1>pTSyqk5e8W#qM#b`Xv`cV_MQnXq7(hp0xL*o1f#%lf3|1mz9%9_d7IO~p-xJN!
z;dit*58lwAo-e%sQsEz&R`3>dEX#9Z`b@`UZ>-z9T7<j(FD#k!M~=cqY=h>G7Em8D
zvwpyZ9RF<NT7R2gRBqS0lcq{r3(R@BwgV!DIq-Oc-VG$tum;Id%+5iAM4yodA54#D
zCefFnpW<dy+MFL&_l;s-TQ4A&Ja0Ge**&0La^|k(I<YF7M;Ma?h8uKVFa<28)}z$+
ze-Q(pDRg?T`TO$s$(>)@q*;3W!m!ZX26_K}?#jm#`xjl~iM1^%(E$%UzPfZOa73I`
zHzUZB!P(l}&3@~NBnr>kpl2!xj}n?wzJBf?q$$J3K+2fcnunkKx#AsJ9<l8_JZMTr
z%*uA6$)q#y;)H9UUFWAz1TgkG`>V&s0_U#I!HIje>_MM()rR0m^<GgET1s0vni%O{
z0g#!4GT#%tthUrPs32(y>xCZiSNunNH?uZ}Xd#f&e8?vrs1>p8qZ9k<xB{hdgP>uu
z>65(6X;v+sx(2k%3q=$~Uo_J1%q2NLkB#M>jo<&|<`UHwiFs#LefIi50Pk#$eTPWh
zCxy_s>oAwf;WqA{py!S4qcC}jWfRUj;`23&DI$x&uJxBo=wE*wERwte5|AF-HQcbb
zVTmC~dN8(E)VR?+{Q{gt=<?o4&N9J`s4Ia_0Sl!`U-D*Q|3MP&Di8_Dgzq~lNw+GL
zhOO8+V=Cd1Limf$dm2b0RzZo+rqL%{YR6@6|A-hl!HBehLH5vnn>8#PN@V+b`B%dC
zOze1V)9mJ~!2@p5mY6lg`s1f9usZI2hV5%j2b`^0U6BQ>*oT!h7nLYS(y=zU22y7X
zJq7|cq7Q5mFU&PeWE5Fr+0yc>0{@ITx%w?Xes`HfM##Mek~~+rj84>?_M>!4yYJJ_
z!Sswr;r=rfTjr0A#Oj+X)#&N2wGeCr>1#yi=vw&IvP2mWm%YY4YfPp*<6bvvF%cZy
zK*A2oe*$;C#s2=a_I-k5?WDbN#F=u=F|K(Ik~Ry0siL#RL`@$XLswRHgr3Q~UyRVE
zx*=BZ+vLi6S}ZeORq$9wAZ*SFczRNh0BbPi&T4A{+ZXL(a{-j=7XZ}^uE@LWc7uw9
z!>q6A7m6|*ou3<;s<7Zmd&xYXCd$yt8Lg;C>63WV==}^B?{!;bl9Tp*@(oD|m>iak
zC#Nf#fjJ_QOM~rRno;^kdo7hk?W5%Xd=-6iRo|WG{!59Ecnk9A@Mk8-IE>Gi<~!XR
zsw*;s3CXytw1=fv6>sa@B0EI%XO)RXL5wX$U4fPm&8H^pu8)p^ux*r+KsD)mq1EcR
z|8C?itoGe_6i1~&atxHRfkf)jIU0qmmW8ulad6zzr{STowD*>_cuDa8IINd)Ad9bU
zNku%?sMzM=cQ}{0kc+0E4P`3(c`xQCmO&H^HizXy8|m3~N`$|886%3<+s$z2aeSRl
z91D%~=TSdO`?r0BqSceQFZ43lXLH|-nE|^K$l?3EM6vlM@HG2aWC5B@r&yw|{9v5k
z?onU4r|vAg8S~rt0Ksw7n3LT?uXGK9dae<gTSC~TWwUy1kah1IeVrz#I!30FNP>95
zV6{|pBTzLK&y}KU9CBMHg_uGWs7$su&(E{@wq*(U^G(-LE~KKxSVLdeyo@Q-a0*a(
z5W#L$RE6qvOJ$s&kj1_>Y4sNwC11zoSj(u@)E3eX?oNDIjYd&q<r=gEb&qC#<Z`M^
z&#pHpdrJ#&R1IGgoRrH56U4cCkhe8_tDs{$$>8jeSY8;B?jq%VV&BY!b*=jV3-iJ0
z=3mpE5AXKmQ~LIVF9rvy;8Xp^wI*FKfOQzAK2M)3D}FMReM@L$%3w&G{v5|w59^C>
z*a07oGzxIg;F|Cq7YpEN(P-EG8>><yufIs765;qsbju>d%`@uM;<Y3@b5oJ1$vj#n
zLepj<&x=qCUh>;t^9;<#Zucw4vGw^NN2lt2D<$bRww;WKjy(LKiX<c7#h=f5WUe0#
zpoF*RWWzIvp98T|e0!WQ*F95434-Y(MWL`=q4e~zpGEiNm65IUfVrgCzY)<k9G!eY
zzjg6ipCWxOrVg7N;=M#N&By#$Z|RO^rU|+qUdmmSCx15r0z&~#C=FXeb_Caqg&UvM
z-l~P$^dK3>iLa~~8`lJ%MMTFe`&@cUNL;~#zi$ERA6b;+6asky55s5JUPfb3HJ}#F
zzvqOc<-=J*m-f`2`L<L1Eph=0`0(Ho)m%;|2|a9x>4#yI?r0QB+fvvci~Hpt48}cj
zPQLIhx@uAW9We!NT%kdz$PeO_R!ZU}hnGx6Zo+;ow-Ad|==xYs@j-{bd6TiR;NPzi
zIY)ptkYu(k4L<JlkiF~iBih&NJ3ciMHQ(H_`}A?rS0dgtsjrM}cCT%fAh$$ig&>8t
zNGX6)${H1U>@0XvQV2$e@DDx>nsNWm(vITwHQgH5#_!c_`$r6-JUNKgp98AFw6^PB
zN3ztU`)hc~NG8?rR*5?gd1r=9(KC;D-5d{*xA0hI#{t3XE7R4&52@3rv=CJ1G~&j|
z-Bw>Ukdz?a90>>;%3`r2w(ss9ev8fcf`JOLyv+-+?8nUFyh7`df@*b+;*8dRZI&{M
zMHk3}quxxh;(37wi99(L+nrs3q@p%XSh=e2!OE+AitDOPKtDvjz}wsIiNuljExbq0
z2|6=!C6q8@fyodrz@LO{MMmd}-k3JBU=XFk!JaB-&olYnqfLg{D&{tm@6>ENjgGP7
z<k)Lsi2}a+jQ=e35Z*Vw^UfUg0M6UtS80{Si__?g+jl1vm!AZLuYcP==Z-QBKPpbF
zLb_Qp9Q<9@OYCSDnOKycKiHpMt=2!R=z(BSMO4F5A4_Hh^X}k<Ul;KJ$cbDeLNR61
zNFvFnYyFT=LaD|b8bHWeF!8#tW0ZWjS@JgRSOpn#R^->{Np)u5b14hTbIt5bqRX>%
z_Aky@N=1srEcO@FmTbOJQg8K1?>YjE?bAesvzIFG&j>#thK2V&9<hdQ_ogLqRo47#
ziBoX9Nh!`J`V-{{RBWv*P<3+<7$Y7JJ=Tkg0>BV?I>g9LP}%zWoRPf%r6TQa3AfMi
z&8hxesr>RYRdDXTyH|5?ww&Td=!YR>z_x6DsDEiqb$iE};Th!QO=KMM4YST!V4ibg
zcM}YZ^4xv&Jn3oH>57`3mGFk&;yz?1pyM$IiwTj@DLzSDM~NCys-A_a>1MK%svm0F
z|0o+B^5X0=<jE6=Z1Vb)P6GGNScYS>a)qJVB8idREk5P{uD0170;_izCxjR+<oNek
zgKfe+tS#?t=uiWsZR8)^1Uo~*V$mo#=Nb?oLj&Rl?+@|1ZCq`dLgVy%^S@G5@1>hv
z;}lRpi_^SKHek;WoYBIZm(g;P6{04Md-V-lk6*}agfcnCs^9!=3jTd<wYdjf8VPCr
zY2#SOp7`Q$nPXhPp6rNKd{z5c)ICpjBQ`K5oLfOA)l_lxK$!QFefl^jiO*wX;Y^&y
zhjAiX)>&M!p<CiFDkb%AQBD6~k$@u>oz<Bm-+eRn=BD=7T4w9tc_R=*v3>XV@SLvh
z4f>N!;Q+M&1t99@+XAXw^?Onkq7tKzhaHu?!h22RPyDL_ZVvx{pcMROj!zr0DXjJ?
zINe)6NM`(YO*!^H!#18^T@xbzOp(UdRe3sGHq!P)67!>c^$*h>KA%M=D3m(H-$s%K
zcwhLWek^|VS=CR6^s{aW>>D_jWmfpW_6*!!KR1Nj3^pzjN5h%-VhNMv7hd*{MIL`x
z0LGBx=M1QVuPI{aKFck84@Ul0JNYQ;e4D>l-Yhs_+Mq>MA0a$FW@vClO@*QU#1#Jj
z|9x^Wteze}i=VpRr&DF>^9b2AUo|3T<7P*Xpl9D-M;#eQA^CHT#4eJffm~$!CUa4!
z0bJ8w6Nwp&si}}ArQP~D?5aus4=9h}(XlGZDYEt<8f9XcXH?xEbmbzFFdOA+8VxPn
zSBy0TVc)i;D){$x#~3wzJ|io5Mxp=MZYNU0wxJm|C0{S#zGcoO)D2%dBs-SNs5FrD
zyadZ0`?W1wY8N3QRvby}CCZfDs6n7MS*j?N3Nb{M&f1w`iijn9_+FnNj3%{?AyP6^
z`9>d+i)llFnbJBqLVc;f$UdL-osA9n^$Mm{@$!z`z}06;Ho6&EX7d;Jat}(w5q+1^
zHJnGS*!KQ<lz~slj7c$V?AO23mEhYilS<`#7FqGB5feNgw55Oqble8y@1V1<44&y5
z%$dyhNp)LnF;LsfZK7kDX5mj5+I1`}Z=YGHNX<BeUqXUmwtq!hx=e|L-es3iBB23k
zHE=JVA?Cb_(^JX?|F$<GA(i~KQbG<3lD}kXYh=Ozj`0*|IT%szk)`EK`doByOTFHS
z*uy(VMagN&0_j!OM4UuI``k1Lq2n5rlTfRyu8D#5sG)BgROt2&=+xQ}FIkcvZ&CB&
zp42vIOuS|~oDSLYviz>XAa~m&hrrugSsB=l{c0lVc>#{)woWJ$jaZB4dZYZU>L1Um
z8Px=yCfwi65bJ9^&x)^#*~jsvH?jVLFVSu-%Ld$x<=9Yd?p#bLLAB%}mkrI4Kr~kn
zAn+@taJb>)bY_tDT5s~A?GyLSCX%^ySpwBQ#u~{<U?$Dq4DN1$$VBiF>JoWx{cPex
zx9?8*ZVkU6Kg~Xg|BoNpjM~4;urpW}_Up0LV*YDL4A!&@*s}fIqi{f6n~GDnKCcXK
zktkSDqH*?^@R^{2y|aG;EcpYhQ|F~fdF}||tphqup{%aIoFBM?z5`f-CU`Sl({fKf
z>u+7cZ@@c#zesQYDS0>JeMf&zE>dpG3cQ}@;4CZm3WBE6ITe04F-wz+@mGVv%(vDh
z@q~<%Eewuh=Bo&!tOO(ez7efuF?-r~#*8=j2wpk+hu)|&*gsw*DmMIk3~^Ri*bal+
zictwT5i!hrhiAlHqK1K<QFi!WYk&&*x@~A^<Q~mR{{Snf)u#$8MAs1CMstFphhO40
z%WY63YxB~isE;UIr^fOx7IT%?>mxH##ODal1pZSrt<E**kY0H1&qXX~p^qVNr{<Lw
zM?@X<0*8I%&tneZ+cyRRB(kW&)5DqQBYL+VsXo;*)_37Nh{Xu>*}pWSy>?I2RyPQ<
zI7oObEnS)lnejpAQ&6eBOh*}(C;UxY2>ya0)(xarvWfoB#?MEzBpWn5l}r^Dn(^f8
z9*&jVObA*o<8)Mzlvnd}RNwf<Q0!OEfTnXdFR0cka?7txCED&zzR41TDK3Ysa<7qg
zlvTnnTu~A_F}NmKImr#U-fT12lb`n@^xb^@BPO$UC|nusVXajPtYMT6^Kik@I2T*4
zI$yQFv_Bt2=P)=`;>nF+rUq^qNg<0c1_sd*d)W$HQVK}%e>O<g-ko<XMr{@~#aEtL
zaSZI>OQnjYQJFSwy&@UQ9xc{ITgF~VY1f{3H@gj7ZDNs0JX-Y>eQn6l`JLtk@@y`=
zF3>On_@bSlVVL{sX5Q|^cy3obDV3?J&?bBq0hfxiIwzKD!iJm1N=B80D;h;eUw-z&
zGz|T2<de#u>#gc>3eA%*IGY4eAjEgUj<ethwJS1Zf(&*v2`!lB14WsUVj6hKh#8SM
zN&vVT)*XPR)BBp!!{1ow+fOLu9w-s#_1KegIFk(`RvEXob0yM__1~&#uO~t@fwAh!
ze5Ns;opkR$yU>`(G+!<T#QtoRm;edxjD0+b*gf{ZYu25foWMq!qGwo#>HvQ>_y>i^
zs0x!~ob%-cCsWwK1ndbR6rBLTB?Lf4695$pFy<gUO)jKarg3YpN?L0%t~Nzz#dL6f
zu2<6$CQke1>(}t9dOvvwhi^}wJW0C<m-Q7`0+R|}E=`iEdvuh^!NFmvM%)j*rR3Gf
z>|#&q+Fgs((~@r=TGp8vO*R)}GoG2~R-6<S^1;h_qEX~M!Ikbn)snwBC2t_{sl?wZ
z<FS!;U8m;0Gy>nLL`E?)DlpfeI3r$~Q`TVqz2m|Rc9Y<<5+h;*9WPgNgyoLeMZp2#
z#7_^>a*e+s^}=jsW@jTFD_y)N5#$*I_YR!r{3d|OLU6C{55a6wD|dV4mumJ_2IHUK
z9Ss&Q4m*F({h`&p&(35KR+KiX(5S?q4+#(cgp#ExoTa`gDC9PdtmcdIhW`pY6LHDb
z7jy2PT!j$qHQvEeD?EQVxi)%f2E08`!0_;r(OQb#*D3tWMStd^@e4Tc-OnIyBTw5p
z73C${m9>V#_y6PHsN9)Nu<Hzi+(9xM@p1UGr`jSe_)76S%x9TM8$(6XpIo<Poldu!
z`h;XWX>))>Ga&4de~*Au=NKc2aJ1bv4B6yi7Vb`M+GOcBim4z$`|<B^Kn+a|vkLQn
zHquWvi03Y&BcGW85w4wReCds$(vdcEF1mLwR{e|1l-?lz$9rpSGH|5#@=5S5tiHyq
zt$YftKjASIvN%25;&5Eojb%4R-03sHHKM-sBt=*dihIuPJUDz;d2zN8gUk4|x$0n?
zF~8=#`~oXu%YC8IJbl0W4FS)Tu55JVNof&|3nZBK8`b#Z7r5uXG@S))Y-t(z6R5Ai
z+ay?k48hn}I)gkb`wm9=xEr%ZVV;-*Yvt3@)CM`lG^&DcT&=gah&jCdVOR&NFcq4E
z9|t-So8dcMr@1H&m;Ke?S2@2eRB|SQy?<jYr+LOjG>aaC<G54i>R82~qt>hTe1mTW
zQjeWtBA@PVy)q^r2N6I5VD=H~EjsH0=GuLDz~v#2jhc2w8%VY)^ZPH8>Hc1T?1<Nm
zx_*++h%z+=IE-ShBZd`fFq~)YuaRntV_=SWxt@R=qz_u6V=kx^-+v<z)PFnWV>@IT
zBkRQfc+_mN0CWW#8=zr6VYg%ZvXk|SIS3Nzrk(-O9&h#An&7x?rK~T@8zYTkt_Z3G
zJMA#Vt=v}-OP;-6j=uZ0<$8hSy9%ZJ%@3sC!DjeGUS7qxklzE}Wnm?0aW~x5y$v|1
z0o~2!jLo&80`4kVrLxkTM7nBA%-ew?6(GXMm(EL&;KtD2Ue&Vo@|D>@#=K<qG(AzC
zt4ob$bwr4k_I6~2Gk14dm4;#YNtVY)QVi&jc0|m~LcSOJ@3fzW^!pXKKK_oDm0|7-
zw=O}&Dm#kVG9r}%FhR&?Jitybk0hxa%|{Yx#svPBP}<=<Mvp9-d_+qvnh_>M0d6fX
zPe@#~1Fib~+3{Wk(1DU|yFX-pGEnp<g7Fc4*G^72f7h-}>9{N-$@-XII<Q8B;r_=o
zssV_s=*Abd=^(*l^(c8KdK+oc4Os~mrBTc<B1!fuHVOp*)x?y(JnF|j*;5#igsyq?
z8G71Cd9G+RGhAY`^1?k7^oVrq%n8?>j?ejjVxHewx(61b-K&=t65PkbrkRyrUcSgo
z%xrkj{G&dACOV)7l2<JSS6)7u9Pl5NavdSHfnXTrJcg0ar604j|B7_fZwmSnV|xgp
zB;SR?802u)bjE0KB-a>GGSpS8{oA4aPM$0zvAe_g>tnuM;Nk)a{cqI+MwArltOLwW
z^k)N!kQ7NOHnwBKqM0f#@T=rzz`zEcpoR8u>P-thv3?5>dtFn+H3ynu>n1oZ|6jzj
zMaZioCEDm4BeNr)FTQjo2^+Mwwz{rp{qei*f{u^UlZ@-8igtIDgb!r4aGUS94ceR;
zLmEq$k8)#`zOZl%RWFK6qsM!>;sMr@i7w~L`uYRbQaa7rp!BZ6OJJd;q77LBTEx%k
zla#*X*#Qj4LO%KYm*`O0^DOHkC7Jj&X{re&rr*>LYzvofBh1%R?!LaX@PPgkXiu>N
z63FidV$^K+5y>x9Ykw}cs)p(Ki*VKp5U40-^ws`N17-*_MsTRixt|+x8olYgL+DWN
zWH*1t!__q^x3K|B=O}quj>;b$UdS<gA+;fUkAq<J6Z#qkZVruXl+`4ff0j%E5_lQy
zo_7>}G%D|Le)JRy#)p*q(s-z=u3KH)jkcwjOmnr7b})^NjABc1R(fgdj5Qtdaa{B2
z&K<JQOI5Ds6_Xkz@BGBa=neC!6Aob=8<;ueS#=*nU(;g!hE#f_WZxr+-!f#Lw5HPp
z`W;hK!Rzk&hRRymt$}cM+SetjdI}%H4fvjN-DJI#rTkNtVDj}v%-LTFkuXZ0((u45
zSrt=?jP{@_-Qy*(y!XgI>hj=>BZf&7h<Z;!jSeq#l)lc!Wg0ua(q9)Gd<S=DR{X(n
zs5J@dZ{yG)ItguK!9GhU>dWh3ln};{-NJmWr?Kn_k+rM569F0*^6)~g-^JT}>V47+
zbof*YN1|WBP$_6=CS<OGq|6lk#}Ef;gB%r*3TaQYabTK==1O)nmH%`PR05cIqO`*G
zf-1SZ%56D%R@Q@D<KGz%2p{s|LcDwDP*&l3=n^%wPG9oTG-%I^*nn3Pi5GJvZ>4T|
z9%vGG1jI|al<Gh~9bz%YDtA>a*DVBDwP|`b9kO2NyS|7B3?XPtTYlfc<v)9-q?kBp
z(7^7In`MA2Y*qRqv<P9pddsuw<0np&{neprhimnsg*!{=D|B1KIel1M8usCnh*YUV
zuGq9l&YcL)(R6J5UCbte7Y4x8+yOFcRQQX;pB{bzf-lK`I}tVjzwsX->B#9SoUHUI
zm!E!}GZXR}J@)5FtjWYDZ_3^#1uGdbGP+Ch*FU&^ko!r{G0!>{;rAJyrURc=_H~J$
z=~Ddwu9qrA^pMmYVq{#m*v&V|8Ua;}1?=-H{2~{~0tj9*aDbG(O)q~4F~S7idXV@?
z7e82VRGeo0%X_=r`XMq3>gw9Ga;Pp=h%YS_{3!^@F@G=j{v%gd`$zWr(vZI|O-^z=
zE;G-ZT=-n|-nAGWeP93yb@iebd$iSd5T1DOfGqlvca(xRm&CF*8b5<HsLsP6K+qPx
z?fI1>BE||FtYe-2ToCCOG%kNWXr2yjaBUs=S;+>5!tuTlEC;zVW?Nr^_h$mT)s)jh
zqPdh%@)pwuuNUfX>!2qhys>N7r6f>Y<^CxAGixa3N0~sxuurhukVDdjuYg{o%rz$g
zSGjDLhTgr>YkP5k1QET(<lC+70bDu8G&Bl$8qC9s^hwDap-MH?j@;aj#~8c(3khnQ
zwkrSq7Vb86a+1rw*MG-lUy?qgEuxz2f^B@RUW0O>T=mfZCw6m>Fs+UB?glyc)mdNs
z1c><H^t-D)a9X!M2!0<Tn??j-(>%f0x!^@$9O>~IaT_G%wMw{0%-4M*PA1?r$48gq
zOa;Vg504J-*Zx^FEz{~#z8^9gh0qV;wH?F@J?eG;{j;>)tFxAf53rL;ttTOLjX-xJ
zK<fn?-TV643R5~n&#gh1h`^-u=*VP(<ImB=@e<kGVLd$3yoYF$ZEV*XRbMCjGlE4(
z!g*S%V)}!iGkc2jV>aotggOrmuZwl5D)-0-mq+tINC+~#@P%j62NHgy6K{F4xpG^&
z`;IcFGa;MY{=o?v^wYbg6Qos)a%+;?$o`h+ez}6sL0ZgHzoF8wKk8z{06ql(2zWS^
zq=w-{nDKOl*AmgNh?h*B^-^#)SMz<Nq!LGd8^1MCeSg8X*uO!0lNSL0!z$eU_#^RR
zm4=uQo|<``kSVc4LJ7p^;CljnWLP-Q$^d^7Md>u6F@!`A@BZ&y3sfRIJjzV^aLg|o
zm{*%8-gN5YXp+cOb{6VEEkA~5vCjRS7v%&0vyHpX{`Mo>X0*Ub7(z=IxRR?LfVPVq
zdKMU?4h1}#CGVlmTh)`TFlN7e(X`PmZvV(Asx+?H;CR8kr3{h!La%DhC+h05fS>Uf
z1aZ9Hxt}jBBqw?%MeOrzPvQR}xTm12MR=|%UEtl4#=1@?OO;j$V6LYlR62<G^dJ(J
zDqY6Ue??#Y0rM*6YFDmVoahHaqmaaM^v)NRXu$ut8Tk}{qK92Lr|`TW-?!cm<AC{^
zq_CsF3nO_YMf@<q^eZ<*q+tOx#>SZB!b@{kZUbd@F^ThV<N4;q$l_oq;cwA)+dw84
z3^(ndGv-EJYyd;|pM$l1SI+yyA`VDb*D+G>dE?eM?q(NIha#Fj&zal?_yN*yMUtce
zpAz45SHdHZ2ClpQHOh4Iq5o)QQbq-y=3H*!8NIBR3~3~#N5EuFW}SyMrGY5JA1Xx)
z@0sLP*VUqw5U7XB)ZL$el~~aoqnh>kEtv7rEfxG;jrlOk)H3t{UbW*r@KS9Rl_?#w
zKLBrph3t-wC`=pFLb2@d^Atsy@p=}(k+^FgVYyZ6>hO+k{|avJ_K8adXNt3owc4{F
z+|vWD!;M$Z<ePq88FX-SzR0E>+aZ7KMDOcw>&UD8uI&n6tdi;!q_j423I-dv9{}Oc
zK>`!w0|v%I{1(bkJel-UG>WLGsOI02Q!WP8b=6HSnDl&?D44ch6`W@MM#<XRD0oLt
z>a?PuUlL9Oaaj6kG%%5Ybany<`P_x@^Z<|ck7CM_9rE8lO<<x4`ZDNX$+iw&FxC3D
zXwkp&Gi)1BFbR`)dYgf&AnXyZ(+PN81MCc{cB+qmcwwMA*^C|ACcjn=i%QPHeAT&A
zFBSC%i9%9LdQKZ@39BcfK?H{fTr(3Ro_HaDE*cLtfCP8d)h?L0%h&%br!1fbVoH}0
z>iZs&>(&$PKt|->aGWM^9UD(ep4T@>d6~!E97A?T5Cjo(I%KrRmge^oE&-w7E*BSf
zTZk8=ldL1_GjK`YFET7-g++3#feR-({F{8<I(+d+c|JxC<2Pu{dBCV1g!2f2cp6<8
zS^hU$xRj_QFki~g`W!r%i+`{=BdNS+k1KxlxYoC-*_z|Q{n%F^1pEVp_c~nAPqH_f
zXQ1o*&Oo-^78r01P?+Wv=FFRn5pos~ht~>uNY1#9{6-z)`BH^J&T9aus-R-TOQsq@
z{1X4h7IB*sgaK;fysn>QU7k|$bN>ji%>P6maev{sg5}dJeA{|m2=frb;M`6SCM<B<
z$+4)O0mC}43>pxCF#`#r6Gx@)y+7AZ4>Tt>@c6M)z-26DU_;zgjb-EaPg*VnRDu4p
zb*dcE<7Zr)1$ZlH)-J1mP*5UYH}0NByy7G7%Ry$p74Dsg4RX$q4Vh+-hRKgt`G^|O
z1V%_kFf7#@MyUZyxVgoXEDdDIITPXlHQEXyXSVu)!)TI=77LN(z=TrlH@})pyMEw*
zpdSpOwt8BnoZV#Ma%bh5Lffj=nUx%GNeCr8DVT1m4jN=@xow(;Nlv`f8OmXly18f}
zhoA^7LUB)P<=+JPYVAfen~l|!wmB&+2HErTpHUS~{}Za3^#C(Ilj`afz8&ee!TnWY
z;J1X<K=K|<65r7~TT~*vI&Xzq)-xP-jv-U^N0dN3U>v7;v1Glx&2(<s;cz!uWK$Hl
z6qmGNzW-(s&%n)#B-5>^(Cv|Y@06EEOybP|ba`N4Hg0t+xIip#Qi8Ku$v}o9f8*}G
z7;38?q4X&8H+E&-7otqg84DM9z>PB3?}b#NaAm4Otp@8R_X0WA=};JO?D-GV@BjzQ
z8VUa<L${~};WoQB;hXVfMN(H*)@^4jm$7*-^gj%vJup+|O_B*Y>D|6uzV%Bh=8sBr
zy&uc79VEAAzyB0(kc}MKZGjgz8~P{aOT9TgFI0C|h>n%Xoe~y4M~n(niglBk$0)p=
z2We28{J{+5ifqmwf2w$;Ho80%b___8%2Ye!b}$wPQoDag+O#W7z(Y~3W8xs+kp2Ov
zJ@XTWY2HnwUKtsZh-7Ixm|}b`&)arz${1))uZu?UV@65wH(p+nnm}Dcb+e672k2>u
zUtmHy+0TW-9M1wfl^d}=L^jz)#~h+-v#t`xh(VvDwg98dy-K;2X|ciM)1IJP@ruZ*
zSjSLETw*6#AbLD@EqCA$HK*1V`qK0OVBX^3VG*4haL-N0xCUSdtJdtee=lJJBgenn
zN0%K^e2~{KCqC2l{i#x`*G(zFf1n;*P1AXFly=o;jjOq5vi6q!XW@Nhy>8;2zpc>K
z--`GlEVrv^6O0Xz9N=%Cmfrbb<!~6e>VNw|$cOODMDeCS=f|oYGQ^Mdpt~n7cNl|S
zu=k@;?2Fq;I%s@hx;dgR5k8F+>k!7TkuF;maq%z*zw)WqWN#W2rVXY}Q@GJtWPABZ
zgueT|-6lUs@(5_M=^f-tl?c7O>VJ|=!_Z2ebJ_&{lP#JCIlR|$_Jeh@ng9m@Ghe$Q
zaD!_Yf#!cQV|pSkeimN-!ex$afg}2R`Ha=+;jh*CRV-sNhYn^Fs(fzeGJCM!KGN9;
zMLd$)eSx)ybutr@5xF<3+n+6UbZgJ`$y_!<8}o66g5i)gFfe702qg$n6yAQgqTg4@
z)F2_UfZo&6?*?obbr-AdicXVQ7b@R5EHwbB(0M$8@eh6hQk|6)aY;AdMYowH)jC?!
z*j9ZPYCr|(nNsf{nV2Egwj;)mKNDF1O;{|b4Igwg=_H}Z%6B}3U;QW!5%EICFq-R*
z{vDaVdM;2tG<2L8Yv(7!StWk{M(sNwK_1eg2_}K){1uLG<^Pm>ID=d;9z^`qIXFgL
zZ)G)IDjhh~fJWj&5CMurXv_9NMt`>K>NbVn>Va{0RZx|d)e2=-4xiJpIebKay{=7a
zxqs>f7-bi%A`6O;sY;@|wf%SyT74IB*AGXqb(JjZW7TLqttbq*(w0F^JyzL`UDsMW
zw41~73Focq47$gpjRK*X!D@@8)Y>TU;H-#L(OTd6`ALRb$O`rku3ZttXeK(jV_>Iu
z<mmKlizqBhV)Sm@*ES3Aa}&}q*qG_^-vfXXRqH#3WZG6uc`lG?lJd}Tgyy1kTK_Ik
z*|L;!RyU$D2%M+x-~Qi~-GW#kTjYCX4!p#`85pCgaAdukW5S*UVm;q{=f8r=Wxp+Z
z8@*L<EO_juh4zMdJbLto7_z)d0V(1D1`*ehE3Ob8eYn)8w&9-)HZ^39=nY`zd_}_4
zcv~6;S3rzf?fLIwbCg{%j4>T&4-j8--w0+DCFfUxJUVHczu>v-)6uXVP60=a_w%v9
z)`s)gyA@UUb03qA24--i|E;G3(+NPv{9c&OHR_!^SFF#NiPcXWYe1iX;iQ3j1$O5Q
z{8^sYw}5IL1z>y%Pd@?`NG(yBrc0j<js^-t@sNS^1{qtHW%7!^hWgD1S)f?N>|N+o
z{SZz`VMGhJ6~@nvYbYxY$rtq|rLd_U>_@w{{y_4dVXoCcVf2~4cEn1Y%EwVlZ4Dq=
z@O_YM`uI+Saqyhw1naGoAtqR}+C64f5bHi}n?nsv8-5iIWEx)@bIh>I9w<Z&A$rVw
zeHI~y$T`1YYQ=v3tYx-EOge{^fTO_-0)jV~j@I%^3cln;|In3Z_}wW`F19UdjZYD#
zZRca9AwFWLhtB?NCQnnWkp^!WvEW+$KJaG@BZS@{Gm5=@q=7;Ult|5^0u#qy2>hyp
z7Oel&q!fb`JBEB)IrIkNM;RqaQ&GjftS8J^eiP7sJc{{sMEuzem=EJ@`YtM#?Q3fF
zMurGJ9j(J3;hB^8J}BN0*73#(W03n-(5+M_7&*5VJHIN7|4B4#A~Y)KsZUAw4{bJ}
z@}_F1|L@!d|4QKYm{)B)PX?HwMpLcL8hL(<;A+IM$Q4U4znGT{MhyaRJ;^oFim<@z
zk5n7zyBjB6Jjpw$<a%(N0r-9?VB|)UrnjLiI0rsrH}F)<Sn#F^&gpr!^#BTc#FrW>
zY2H(v3M42yGw=pX+Bx72+7nb+k@+harB~r9z$gN%g(#z}3TxATsH)^vra35(*)bK1
z*?T81gNJ<%o6$@qcvgGQN$Q4}ijd`ikU|F9QdzCH@Vgv7$f?cvne18Lf6>Ak;Xn^~
zKusY4$QJiY-|ymG=`g;^X8gvZDFnif4~rO81+sCfkOzJ7W7#GEgyB?sN0MdNhB4V7
z?ckfG|4x5g|6q42(eLRiocF?@rJ_rM1V2#t%U1;O?etHl+|>ps-#Eoe|9e(xAWa5C
z3?~X0m_Ul{B6KcjeLL5fTo;t>k<9MbNXi@lOZD-*cO&6u`19jsBItpP)aaI)R{3U)
z_|tx6d|F@~t#hq3I%~?zRc=81`FclyG#*&9>{-m>D0y|-j_>NQP#2(?ukXV0gxC3`
zfGT_<$*gM)f=uJRb?;+wGSxAx77N2S)#+OZ)XCWShGFjI535c=uvaj<jZ4q4-nuQo
zIhl>U@d(pB2<76|V<6g?Ma?mwNs~vnk(SxG_v2<4-l`ea=Xq`S$BB%lP%?41r9&OI
z*b@Y3!M%u>TkoApCKT|*Z~j_@j0s@s1FcC0!>g<zjPy2RA6i;}teg^Q-Yo<IJ^t3{
zl79_Xpq}ADini0?55v)^xaQO&Z0PC0VBlCL<KE?WuK-aX(t?%Nj=4WUic19=MO}P|
zjq$KXG)~QGa&}!2`m)Cj62;`J1>~CA9sQtxDXb*(>*73i5=X9d&xkLA29c(vV><nO
zV_#hPh=6*K>^F(%v4yVjoK}_pmgPC?Cs!A0k-oL^>gVA)Vx2D+=7=C*+0Qqj-vxD?
zBNd{@Cl?j+-+%2}jfeBMP43c@K~wCot#LwLv2c?Dt{G6N*^B<D&YS-e#oVj8hcZ8I
z3Q?Q1tgjuS?c341BIp(L_d5aBL>RBAyglkX<U*Btu$^SO#6iQk`&`oG*~BOA&*F(%
zOaJZQYZIDWqZ=IjHgmTLX?G9lk_$RgCX&sAh<UH17DuP)H&w5B{BzFhFz;0TY#fgv
zcsm^5a^sqibsK|*b&fs&qt{8y)<Z>{CF9U_8MZYidva^_nS9j@XA+0YzxA-_MkBJi
zaNaIebXFiEajYy*DOnR<uJL8GOxthP)dJ?Qdfbsu#6>puk}1dQWT@b%Ku6GNSk1kS
zQ;P&}iHx%;_&hBGZpZB*iKDNkGg!DpTSQ%$kG`P5s$s^CjS+8EvN7gvJOKaCBCQQ1
z9@^hzOIC$eS*uspLo*st=YBj`Kd?5;Vg!*}fy3tB_`D%$eM{Iiu5eSi33M``F4E;)
z9Q2wE!4^U<M)Ovq8yitgmOi7MqcKT7t_8}kVyoVL)}WTV9Mk+8%)s<;?*-4H&P6YO
zk@yQXjM35`tU+zJ%4O8)8hp^Kz5L^~pH-~!2ub8Tm;AS0zPYS6UbF>It90ib@G2J(
zRmF|Ss0sHUHIQ_RyN5&)_Br!UR_uLya<Fb0U;p5DjU*qcq3Q#x&HjSu0V|bi(X7t&
z98m!xqV*$W;V-s@vVL07L_9OvL#|Avqxk!oci>29Rvxojg%6gP@5=Gcn3ZjW%}qG7
zApT6d%h1hKjZ_%dUNzCxuw2P|jR}CFkR{ifoDJ>Dc+9<bJI^jtW$Z9}JDy&8>`r;G
z(V(gU|9ylEIz2L?SWwoH7rBo`exsFS-4P(gdC>&nM>V4Q6S3^vGKsOAvu9=>bIhH$
zj}rvDK#W!+#(A)wYK9&B;oBuU&SD}nAxItY%a)ujzWqTn`b>;gE>PM$oz;bV)?Ur=
zj*Ww$k_ab>z_T;CvumY>km6ccyof$|nitbi7jRE<Ijzho@A*BaG-=e@7F5bf#CcYL
zx_uu-$^&jb_`P*F0e~nEgi9Z_>H1hz#qv(8YC$)rC{mhTxa-HrrdzReOhz7YioxCP
zzaRyFv9t&mX7bQ0A>kwBt8n>cui;V3RI^rBi-<QvS<s)?T5<*yC*P{ng^Z$H26!&=
zG+C`zF@Ww9mwql^U8**`v6zZ%n~Y=;+1HX^qSdxxR66p-3o?m|L>ZsCMt@i_v-983
zB06MZfv47=x`z$tL%v|(435!uC<4_Eg&RmawMtA<dSpL=E4h24wO2Veyo@s-IZz;2
zf#7q?bd(~XlURl#DRhC)s+Z*REX|(q+TpSoztvBY$6)fV@M|u7-*$Q1icRyrVVf34
z@@u)9mrrB<vU2u51*Vp@H-ZPp$UD}ZxO{QyT%H}-F)EJQ{K{J*+Qlm5zg4wnuV&a(
zm%2TYZpld`-Y`bp>-xwJ_YF48%g+xeRo$~DY;gEgvLa?^bi4L$F{IXV<RH_p<ts4Q
zE1_|WN>Op4bz71Zfv4cUJftbEAu4nAEBniTimj6cL6(k{1dbN0CV&ZLp5{qnl&{(I
zv=%}Yq5-cXV&;~tJTe=6Wc-rbh4MBc36M>en?cJR1ZOYwhk>f616s$ZSn)Grt+Ka?
z9zyb4c&|x|Rt_4gYd?1GOWiW4$o9&B4@9!P85G}9><vT&qJH*{z7BbQPphv^txyLY
z{<|>U|B>~c0ZnD!7wCwnC|v{uq&F1=1StXml-?Btq@(mMHIPt5lp@l53rH2|y#`cz
z@4ZTgKoAH-T6l+f|KE)B-UsuE<a*CNcb~o2UTf_l(^c})Aw+X~f_%#!)BoHd2$%*Q
zU$Xz}sQkLZ*!H7l%++Yr9It%1&r9v|x4M=7LQcjGY7h?g!v2tLF+I*o;?SY|0yl@q
z8j5EZqkjJ{`<c1EF8%WOudyV0-KDU=mb`iu?HQlDP@QEJdUC6?w)sdTVQK$hs50Q6
z>zxcGV}A!=D}^Kf%|E5m4KKCZ%~o&%D;G=My4}l<0xG(x=R>*TiV6By%YbKNBQ`nd
zpO+ZIy&w{1*Fy_UAdgHUZB&mNxINTd&4k)$o@dI~4-!G2PiD`Th}r&SyYmOr|1ZA+
zJlX`zj$x$z^t5^3b(GoRsbj~5!l3FhYLVMym7LsjqUfjGMYH+eB3X*_%GJZX9_RNi
zjcg}H(U12X<8=3PEGGT5Aa}`d;7NLQ5gD3fKY)`e-xpa;s!aX27W@lu`??va%8>jg
z%J!qEm^h>ztsFyi;yy2V?W4)L+6gLFzZkO?`rf=3pYAJY{ckZrbi2n_0<F4Au8Aiv
zmwfK^<YqQ6m^oRzx}y=f-z<rgmDq)?>jB!6wUW3AhmK>STTWx1ZWW_RR5Jri{muXN
z^8pHZh{s8S;sjE)N@Ml*$Ldjij^>9G#2ivbQ7P`*>4&5yw#!#GXC;$<!u0i|Xp=R|
z>?MIl2~6_%zsCx={A_$qFO6w@PHUD7_MeSG_$|le5(Uq@fw<@UmHQ6Q4TNZkS^8(|
zdMlD3mh+KYOU0A_QSLF-zZDATNfmq|;nQdK*!0J<4Pz~Yx4a=rB(rB;IIH4yNRQE*
z+@1ue(zIAP`w(6})i(c%vCa7ZhyFZ3<M&xm%egdItVje}mh$-3OMPi9Zab!rKvBdv
z`eO@~K+0IZ`62PJn9GC1?F6YuAa~~RL!;>2>9<}IPZIvGGy`dt5I#_in6+J(UT(Hb
zWs6UJsHjFKpa6@l9Mqh3>gtsiO^Yz=Bm`^pfSA=jUCzg?OW2MItcv5^KURfjAU8ur
zP4ZQV*Y6&R73WZ~wxpWOhQb=@t{zQYMhZm<OW4<WTUcm{-me=iU;YA=O~owSxVxlB
z!4r4-f=ZqL?EG##(c%u>=z!$h>YR>gb%qDhHZXI^_`WWlKK4hS%+`WWr&cYDXPjz^
zp1boII4(Q>@qB);@PRWam;)_h`LSUsX3(B=CEqD<$-s`GOHZ*`0gX0trIm@BsrvB(
zo@#g?D0VpgpK5EpN{aty2b(~9$2Cj!7}DOvyPU*3oOL{`SLoz`5W~4mq96$I?PDu%
z(h;F?6`|V9t3Tsn$A`CVw<!V-l}T4ln1^jI<YM;i^o;?Lo|-OBXRjgh;My3H>>1-p
zVVmu~%ZCQ2LyrH1EPaz_ZoHn;BZJP_8-o1sQ?h%!iWZ1r+uQdZ=$j*Ej^lc2zH+#5
zj>#x}i#48JF|1xnzb<P4r~ETuI&<)KU}!y2BhQ^z^m95=cBQi$Dne_d>Ev!^_jjjU
znUB;g-bpUUyEPb`0bn6fP$o_tb9kDb53<x5zM%YPXQY$iQCb*9>MjN3a7wFOyE{oM
zC!?eif9R>9Q7&gOk0H%T89XjBB$y~M5?BGOzOe~5eJlfst@XV>nj9*BYdcnJm@PyK
zJDuC!3(?9wLX*|1bt#P}1w`hnAZjuxu#$Q&yB)n%4Ltjb7-z@r|7<Tn?me@heL8fh
zt2TPx%bClzIY{7TN{esOf?1yR?Z@Su-OaUd1(Vhv<FYgChm+%5A}0T-%hTKOAE6VR
zp4v7m$R0AVURJ&2!&Xks9Zw^S7&iS7JQ<uh%9Qat%y*(-ythO*v^Otdmg?(2h!GQ+
z#ijaJW~<lz%fk=2_?x{vy}O7q4-5r9Y10W*1lGpM8dZIJgG52;V*+wkS>!(-|69);
z-TFl<C*c75)WZ*vFYC9zo0~}N3;G45W>czKN8HA@iYbv-$@A*FF*mKPFIihDb?R~G
zgfGIw`Tt4dBdG`eGVgo;YA>=}Eyl^eT!lVkKSZRj(&BdE+Qx&MmDAfZrm*0OinrjT
z!Q2d<f@C%P@A^{W7x!(yN_Ets%h~yx*}jclNBP4(9#VFyX>HJ!OxO8Ddsumyxn7Ug
ze%AIsOU6`;HyXRLhu$z<@y-p8#%WRN7Hz9Ml0K2JMoiVoav10%%&%#GP&JwSLBIN>
z;AHDHvcf$4zm2kn8!vR?I_q;nV@Z2%^InEo28-RXY+#EH?@l=iG24pOb?>lslJ+cJ
z7Yw?a$t77K2xS!I06m}oQmZ4Ne$Ou-cbHqMM7eMf$49+iYHBp)5OYnrGSuY!0ffkp
zzO2eWZz-Gw8WthtH_h7pGXE=DT{bk4IiK5O2Ko{BA^`;y-)C{WMmmMgykjAj-xinW
z$!pNTdwbx9r!{i%f#GlY;rnHs`Xl4Oq)fTx@DDM-v)g{}tqBq(EFuitSA+R0IJ!re
z!&G9;Hp(ps3d3*Zyf>(9##45Lzcd(EDVa-JPo1-Q@-GsS{s!;5fap%e;N_J)0nW~n
zM%`SJM7tz8gb;G1_^!ddX6TBQP*6~!bW5z5om#4VR%5AokTIO%&v$x{XP{cA_Tt#+
z1G4T%FL&AHVZqVAvp2eM_L2L_UehlLqTkvgicTU8)7`{K6%0+I|10FWLh<FHQ+umG
zd-r5cJZv=!rIx*sjWf>4?ZBF~X=PvGG7I9lGkTRgaw;G#A-9qi(w!5-l|P>zAGG$J
z>wlHWTdAK{T-6SS+ey?&GX=lY@hkhK^mlLRh9~@GZWR|=aKm59Wxro#=J^g~_9QU;
z9uk{fTKG4hFyZ6TLQ}pXM|%16{L5SEudmT69(t>&>GO%>w?42U2l|@5A*lODR_qjv
z*KX>8YVW=OMz$L~1M?~#9>E(AoPka_(cCG;MOEjJ5@>~K66tg`-}q5hCnk=}!nd3Y
zrW*8VL8tQOAJLVWY+Xm|6)aCZMpKTshdY$jQZcXosYPFMYHg{<m`wE(Ht%o^!fk!6
z=>fK4hiS|I$_nq|M_H6L?{kF5RIAd*7IM{lYH;m->CyXD_3T#M)8AK;%p#E)eMF-t
z{K#SZ|6G=Q;8ppY^AJJp!t$WSkAsB)WZyHz7;%<zM=wi-kIC5AGVq2)_Ub~u=pW*C
zZBO8VoY<5NcK%jz&-jOG<<*ygIDFuq-;VG3Ng31;^~Tlz8fjd=*Q!9OXkhhzj%xDq
zn&f$HmIe-C;D41kD!;gKYWe}n*3dB3ZobhF(6>3n+_xffayV#2UB7&y6;zT7yK~Rn
z+*~)DYb-Wd*fCCQr=dLi7zxM5(K*z7HcuqNt0nUQG*9#90OAeJ(UFl3_}o6iASKR)
zi45)+9e|C$l+)hf&ubUe>_)8Zohp%Y4Z~<Yrpg#^9^wVLS&-U6_0(h~LyI5&{qic#
zVBHYs30^>PXOp<L2acpbkCrX~NQ9|_H~Jd^$E}vy>3-*D>A>Y!9izyz6Ku$;;2fib
zm&dWX@3p)4f)D!>o$7Q(*k>*hH*9r{Y33bKi&pwDO?HPxiA3+=*fQ6_;va?~Gx0pf
z=kKy+lG!Jxm@<T+vtgI{J7?YiAk5X+WVX(2Lylla<=8xn%X+CTbg#15TQ%&?<3%xp
zrVay-SKW?;jrMivp%0tRwjEbW+Znp86n5RmoNl&<(Q`4L|86(m9LWQtYkdj}3u8y~
zb*gWFA-{*ilRVo{Us3lx)~w68e2wJR*{knr_3qnIw#CRQ^H`y%-b8_1^I8EK`<M|F
zy|@RTcY=`05YrINlfwt@7xMdMX-kzD$-*gcYU-wih9ywpT8ewkQ2u6}PtVU=TEn#0
zkDF+q6<*c=ZN6*kz7^k@;}-(-!?PFErp8yyeLw_2aPY&pJa>`A-sEJm-zUz2$jMOH
zR+b{CeH$>fSmTX-YKd+~nBN^LkT1RIw@7(=B3DD=k!95BMyqO>`OZ&mg7$lqIzG%U
z4z%3LRNnP&(x)y!`>5Nv{&2rytbEnFP@rMD@^v#$qDV#YhR6@nw}|V-1faPD=)iji
z#lD7N43JH(0Ev}{zBsQ$A^RjpWc3^DEVSDjJIfgw8ans2p!ir;F-_yV+V@2GF?Pmf
z1@M?7Ha9m5PRjTt@TP`4(1kCIjChQXx^zAsE0-Q3_B5*g`Y~5@Vm{q2hVv-q(k`&F
zCVD*AXa^>CZ{bm9vpWx3b9S5~D`dyE#Rux5O)YMbufbP?3;n>q;wlFwoo9Y4glXU{
zOyhgfR%`TFJE=xGtsxUy$N7T`?*kzI-!1SpC{~+^^t9ZrVbNE4<v5;MzHOSORV|4b
zklyPy#_iSYHqC`M;SP%TdIb7AWT_3=7*7|jZ9IH!8YRyZBIRkV!6SNrf7HF%yXwav
zh8|$-Pi<YTb_2%4$1B`{ZO&RPYh*{$5XH{k!`Vq_g&F|c=l|9;-(X8uhgtVWn3yV<
zn`fWyOP;$Vhcc6j|9U$E-$AyY@!u*Kqfi%TKF95x&sjJ|E#SE2^`+pP9==m2ujU&U
z5%OIm;uTz;d>bV$?p;;kNMvCH?)>y*{=BiU7f2-h)Cj<whaC~~3YBirjaQ3YU`=@4
z7hSiehVhELh8tV_reK~2p^Lb!QlMOWrT`dZPdD4or;K_&7q`$yF|<w9qb6T}>}#Q)
z+CPoccTglf@@fcVM%r%Xqw^mIlXR<siAGC=Y&`}nqPZP;rdQ3;TOE?g44dakwaf_H
zjCpC9o$fvT-ULfRBR-@|4!qjBvyPtsm4fj-#kS1e_I&DM0vSb<-Xy`jUPm8IKuTNX
za@W$*s(WY#<O+=kb3eXn<(K*7<$d`QvEMH#39$@XJqTHkVpo<~<0u_Q6*uvaO8hpd
zmv)*wiI!&~!RzhqErVmxabL{{Rkp5D%s!l!c))4JT5j2oz?_deHtfpL!Aoc_;fr#m
zBa`|CqZzd0VmqS7_2Dq2C!$4IRXwu#;s_Ll8y)Uk@-ru71ioZ($wn*!$Z}rYCTWf&
z;4jcZ&j2?4vLQg7ca{xGg048zL&Z;jHSf*1^qU8f(D2J}s3W+eIaF_^YQ6~k>2ti1
zJG>t}C1%@ylU@{P93~HKz$p|V3(AsmPGa?T`u>6gNj_`XN3T(@evlFVXw@YN9sTO@
zC@5hLnsYu&tzxp54uyt|2zPyb0AB{?6-ccHmbX$2SB$(5v}%u5lZTBBwz@Z4F1BjC
zIc9zE(8d^tfTKItHS+iGcx`H?b=|&!S`6WhlV|Xh@i|>$Jn3^9H-vTqrYNUqqR4f>
z*JJ~2WZM$xY&#&Zfub=&%JYrhvUF5pQJ99~^9r>L+=!;SdC!%RNS6{YU-^!)3CQ3#
z7M4qOs;;`bH*%FbKKkBie@;2^?e!D<8DIWOOU4b#<72{|gck4IkiLMD)zJhR0Jz@T
z*G`1X{OEzlRzBGJdGoiM;+dlIR&VZ}D)ZFJ`0Pce1xd(Q=Q84c1@fDB-CFde1HJfd
zg7ux1Sc~6t@<wxu^W9F32i0<s=NQMJaSg9J_4Q%BqLUzRxU0&1T^q;W`9X*Ow{G61
z6rXnnX^SPA=eV<B7x9Ym+ZnUwZW3f-;10DVu(kc>j{?>uL_bemp*DzM5F3%m`TUuA
zN&L`#kDx_0ofRp$<y|J2Fu^hP`*ZV@A#~PluT$Meqw#pOIET|t(zzw+bW-9iz(AH|
zOg1|%IirJFPuGTwFQ>GqoAre<VgOvtgr`gmdA%4GxMf>BQ==RvNCuq%h9ez;U?n7C
zYOmt?ToTI}crdwm1D<9#jTFHBB=zm^n6N?5)NXh_@egI5tEA$7$z<C0X;&@MXEcCv
z`yS|z`GpaxFbo>^C5!WSU+N1tTUCv>oFq%u+O;Md)L+b^nh1{_7ZwarD^UY~3#LwA
z=%NtJ2L}g@Atbbq?w<K?{`%SMjq)d)BG#sp-O8fK-oW45&c-&ZL1@6~KbKM(MoG}3
z^^HWdBJBG&X}ISEMCRSJKac36xUkm3c6>Tv|C2I+q1RF-2*J`*9x{uNMnvBdK2lC}
zYu2qr(psXTq@p+27nPK&8`@T5xaS9^2#b~1mYD!mAqL!eZp{RZU&{51P0%^GJyLAk
zgkjq_tTSn>sCXf9e$;<WXJ5)JfPjlkr14wl>Z^is4wC(yb%m!l`+U0#j@FKZTP*MK
zNLwI1<u8hMS5$2`x7S3yY`)M=Txau%^7$M+9aW21m=3sH!&`TK<iVJ}0LN2CA-jZA
zR1+@WiZpVG{ft~FK`xY*(jc}}+~nI|fErI-&&(kbso(a*SKn!UfLRv_bAzefL^eto
zY8V<m5N(Jj;d<n>C`0p*<yVD+K4<rLSnBQ5qqQ{k{%cMP-~1|a#~gnxe9s_Orr=PC
zFhass7L=lj^3PhD#&qe$qDDF;w3`w(sV5FKpoODtwtOyz!b=)c-ukEoc6)_kxJN^l
zn{KUh_Ikr@MD3V4_(6V$nHmgy!DDSe?s8#T{4r*O6_6_DGOUWTfkrE+k+(8MG`_E0
z;;=Msd$#uuFW+Q6)G;L02<1V{GW&qEo%O907T+R;PX;6JKHm%piwV|rF7Byy&*83x
zh!kmKc{&DDDPGoE#RiM{yh3!;{Sf;lD_~IEMt}LF0yn*5zXY;$XD+FkNIEb-vdUB(
ze9W8HeiU=%xfzPw!t_BKHKRJSkoRqkmRv%^-He{|UXf4wHMS2B`fb7#i-3M$2R#Wx
z{bXprCn$d=r&jM2Ck{>aU7R~qrw%UM1r8t4_2=A0F2RW=kTVg_u2Z9&B|c+u7q7Mn
z|HvBYTQ~iJ2-Zn|hfqD}vLYJ%S?bzHb|Sxd_%)_bzhJgwaIEy0)zj28({X<nD3m(K
zK}sf>vnKn?#|)eLO;2PaD|$%UCDo<xG33xO*r)V#Fx-c2>YxdkC0W+AM8Bh;PCNg6
zys8fy-*hVLvrD)S@0%am$W7xp$EaIaVMy3g>sLS$?b(f(dV>LJ4bptFZ@KFj2!cKq
z$NPH|_xi4h&F>Z_3EAtxCOGGnY=2IanmVtgLc1;w>*Eg%g;~v28y=P0sw3Fs`BOP`
z(>X3qbDd9f2R2?mv=2M&KR*o@|Ml&%^Y33j<F=;;#zCd!-88lTVO??is+9ew!K_d|
zqZ?}Piil$l4^4QvQyZS0mkEk*Jg&ql=ubD;?tyilr4TXw!Dr0}K^V`JjY~u(e#zJ)
z<#(Q|y=c+GFCU2$J`z3+iHY&;Fc3Ujj;$KDopI_cxDGiqWbPMSb|!eQ0T})#)gNk>
zRGSZ9gC{H;3gbslH2M0<iGOwpbbn+mZY~^TH(OVk8CV8PaPaXh!Womo#Ed5FAX!@-
zO!riA;XO5*+@Kq1zYw9o8z)nTnY_{DI(Rh^Y4Ujz(?7SmeJ!kuYx=Mgc$_u-ePoeb
z!E_!^JJk1LF|`OEaK!Ir^LpoLQY2eDMw#f<yBDT-ECzocZ8Z0$W&3^EsmjIk8f3pm
zU~hKEM|kPBBm9>Zr|pR38Tm`!^*%SfI@dgqhDnm0`Qbbiv4e~gl@I0Dv>z{h5(tAT
z1XfQ&Bt*RioZPvy+^Vh$71zLc4<II_tSk0}jhoLLjv3C|eNW{*QTp?=Gbu(@bkq&>
zkKX>qVVii>CC@6V?{gMUy`kDNa!7kgXXJYG$6-|CJf>e6rdBT;Diq+gZEL(QWZ7V2
zIz<nii7Z7>f)ic;QmXp0iM_ww-1JnsO%b1TK>VppRhPUoT(EEKo*(7>B)7}zyd5mq
zYgEi(?Yo}tS)0V*&uf5&7y$>F7drVSw1Re(zl{}b<wm?Z^--*XT8+=m?8Wt+1W@C_
zCNcS8dr}~(7ZIjFtZVLwk1^3ftHZoriQZ9(H|tGZEjT87W~b4xO1A6JU1Vr1+}l$O
z4>>-@Ol_;UTKPxFGs)w1$MdRViLM`(3|uAJrg3gCqW%7QU6X-T{+QFP4m$@QmL|G_
zJ%~H##HF2WS<bya)(Z3<nj@Kvx_T+qny9pYcR-r76O^8CxK{PvR8S`55vKhx>`}l3
z^)SQ3`I9;95V7FlG2cqFnSK4b_sFXm(V^R~8FNFgPLT}^Vi?bN86P_mZLC*L0@M3N
z=5)yt0LeZas@5?P0TbX#Xv(agh}+Qo)Y~eoZ|z|(Yb*LLU|X$dk8B$MicAHEt*a{7
zv$hU%z|#UDvuaypDt>YUwCn;Ti=}yVUc3lu+)NX)T6dO@I(#u-W**|GL!bH%R7i%@
z12s$AoZ)dkS~O1W+59ItabedCo1S`veKIB`ublO;OeIP@*Np}_q~ZJow|e0u2Xz9S
zGFa*v0&d+hHi*pgH(x$$sy&un?N6KkS$lVDXkGG~%UYkR@JkO=I0GaJ@#U<GtN0c@
zUZ<MqTA)zCdW4GmP^mofmH*a3Qqvj&&JPQ)lJ2QpLnI@(p02G8aBfvz`)(Qz;rRYg
zW2f=N!SiH#er}@;Ve;7ZC@&Wg1@xu7rqO-I56!z`Ts_-9(L^Iq(x~4H{-npWY8B7T
ze*XC2-2I?BYpuRR<hh^D^3-v~u-bm8z{ys5|FMn7UMJ@XTDgk3sG_<(6*O)a-l$In
z<*qT>2DA^^PoWgnP6-;TD|BR7A|skk>YMfr#cF>2Amq(jW4~TBZVoY8<NUiHOivE1
zNxI-_^juAbbz`pPj*0Elt}1UDnFZD$fQH4p-QhWrdkueV)`-`I%BwBqh<s-Y7LIu2
z6ewgC3EC^dps+{Q6D!UP*4_@U$((kqT|z9pr%;PHKQ2BOMf*&;4}9K#Cv7{-6s7vn
zjlfkcy@2f=H3IeybS(Aqgr%`nZ0(pJgj;iF*_M7SJuYJf@2Iz>{D};4JUI37IiZO&
zD-0W;_1F!Z1~()f=`XMmLBGR*Cqte>qM{F>RrzV&hm&O%y|jb5)(u(vj9yE0^JMmS
z2HFViD+U5?Y_HzA^HqV)jHiB!f9KhJzI#5ggrf79u4Sj-xB)9WJI?p!f%pZ~GTeM)
z;|_(<5M#F+BHT{03V!0ctVI{)Iu~q`B;j2*^QM`YM!mf!<*_EfMzC3QQbzFY%D86N
z1TNw?6$P)9Ag}C6b#l~euh7ZxG@b4(slCMwr{P9GR;teGjmczG?Z>`?x{Wi)Q5$<X
z!O*1k_~mO~28|%c662=RN}^f*sji<Ep-m^V8w}4xKYRW<v)F+*G{kk|eiWZGu4_gc
z!MgS57N?6)+qJK+64SCxSy^$y@jT!VfEp46N;Q4`h#}nq9rN!z&w|;Md>z^jAP*dt
zj;CUYynQ+g!;^AXeR$LsmyC4B(IOFHk2#1oP=$*i38=d(HS=V~si7KBgPdCFMazDK
z`<^a+s{YVttq9%^G~q}BVq+&oNDi%EJLmfTFe>_1?(!P{LHV%x0cn_rZRYXj`2p|O
zN~`>tdr*X@GkVsdp`6w+Ufy_)1$1!~wLGUKUwfWh9B7kQFzwiB$EI0qW*IV9!n;@!
zw;A4OsG9b>g>y*#_#6!d`_ytcM>WIOo;`K`Nw__#ebtU44u!vBzg?`pXKNaaTWGkb
z{<@2dkag3<EK?_JB4(QUp#pOsD#yD+h3D=PQgQz}h#5c-y|N{{9$mSXORVp18dWrY
z0$)wEgw_8xI>0qykvppWg`b<FJr(IbyNdAHH;5T2aYQ?BWXI?1gd=#Vt--0C;cGPX
zd1LD;x&2lG->Y}kkI%lI^LjRyZ3q=o1J*$XJD-I~We<a-Ok87QdF4Ww3jfmaoQ1Z*
zY+aPW+!b1sV@%mcLe=V2+*~Ci+%uo3FfVG35=1pnS-NV!t&x6Tv-EohxEl+Heq=@u
z1m388XtpzlY!nV?bD3It4`Ny^`E9}U@Sa4z7YM`Z%!Bt~pQ69c%?oi!jMnid)y|yq
zQ;gN|>en=%M!}GV4Wa_BW32gSOGH!CfEFZmf;Uy4fovm#==r*yfn+ZFVJGaw^3ZXV
zF|0k5j`KLXNI(%zY?hqTD<%(s!+3j7Vv^vIvY(DL+k)xFC7A259o`9uut(2sTxH7f
z<;v6wo!(pke+ki9HhA0G*eu&S!jr2Ld`1}r14(o#jE}0QESR~++_!h?l*LG@a%coB
zDkg6a)x~E8Y7TpEj||qzRD73(yDooy*uvu<PfCKKvimfG4FIo4JAO5M?I+lYKY00;
z-ZO6m!oAqtQu;f3j&^nd<E{y>f3|VDg?@aBdi2%R3o_5ncM`Z5*!5P%KxyAQ;a`(^
zh7ERLM|%w4MLPuw$5aW$Oerp{a~0M6_#1<9W_oix@twcGG4@;~?9{)f_MSm=^l#;f
z&)FVWvghy233p;933(nNWhB;v?dISwwe9B~49k)3Y43tPn@UE|hvc)H;G1mpuHPX-
zjTgropKa<G9=|U0J@+{RB_m6B+=Knpa#q4A)KmDS^$1PTmKS`)H2iEeN<JXw=LG&9
zk_)KvsTgC9#qjDVu1Q>%7|oF8+jwR|uPDkEHCrzOuc^>F3`;5IJiH!KsUw_9EjPQ3
zX~ZJ?jqHSrA#W-;!{Ra45c?pjVy9OvLF5@oADHMQF^iVgs<qj$X^YySyWzZ1;`S0C
zc}V@nznK$h#3|NrGATGTVb{wU6_M7lWvd2e3SlMrX&UdhRLdw+pLMCY`bKVi#=R<z
z(#O(AQmf23Z6<u5yMF=JQe1$w-)u~E7Q;?kJ?0)Tp?|SCQ$y|M8g!|6jku?)>}?^n
zog2*|zUNq9-m{Zx*8z;ZCD5hS@uZ*oZWzo!A^S;^=r<ISan`~RR?yGhJf0+ko1N0h
zj9{&nB$ak<3NU;W__5>z+jgg!E3PKm(%kreV-ZujWRJ1;!RW@(bq0@xOY=0Yx}3FR
zwYNo+FxT&<a<Pf@2QnCgdMy_Lvw@KWeEfK0vd+yGc9-kS*^F~r?xfJsn+sA9gLcd<
zHEsWhGbvDy_fSkrIS1)@Kj!^Pxkc~I?dyCXFIB^;?e>jFjxUgoz*I`c<>70Cj1|Sm
zF)Wh}yq?-j|78KP>)O2LR8SVSHd7Hh`dE6aR>t*r;UO*cYF}zHE^2Pj*40h2-icdZ
zItFQ2JZO|yuXi;}`l2FVuW4LUq2&QYu*!psFw?fYg1X6qny+r`wGD)i7#sAWy!(Yn
zO+ych&U&Wk`G0`XvR}mx2mGOTz}dC{px$3_SJ&X0r6-*_pVnq67D?1IPMqX5HKR{K
z>Z*Qjo#M#p&GgG9?ZhB3;9*rbD{zRTr~XpJ9bKLB=m!Q?C8zIf7V$!~I-%SP$Qf^p
zBU%TUfM`=9v2uZ8vBvk%C(%Z&cCUR+xGS(P;Vxx%>vyuEYKH7!|F>#nh5K$+`MdHG
zd*q%V81k=Te}5<SVXB^k*#@Rf{N7JHPZ_+O(QL6%$y2)=^@-uu@yG;gxOfygG-F@X
zL$Qhb4C{Mdy^g=4C&6n?O7y_CN^!z<(f#bCnGweXIuIL--Rk1IG8ee<x~=~HCyzCB
zkL|B(Hjps{TfM;A4OHW+(nBxI+>~OI0kq1tlElq|Gxb|3@(}>l4u#h2lIhniY`03P
zQL^RR(d9qhumIR8<XcSSWwU04beU7Npg~5y;e_L9BzJ9LrI@~vQnRcczV?jMGmBo~
zC3lhV1i47eua<lJhAZK`2{opDY<b)u6)$D+m*T_^5)<{KoQSPq^?ittSD*Q*=*o*8
z_+04wyP47AR3hDS{BuEZJ-SW};x(yv-x*{fG=FzSh&fhYHgzALHOH!Vq|m9%>=s&z
zxfGRb>5I>I#Lpg6gRuPivaf%jZ%xq?T!l?^0~X_y(M$^br_z`3E<omC3R$?km8qW(
z^U)9L#s&C0qk2M=*~kUb7cQ0+jg#^|Kf}Uv?L3itU0kx968&)%rP6S1m83_CjlWxY
zkBbV8W!!=?7Y1~x4c_<>T_8X!N`Y%#akR9w7cCaWbL-2&ValSGeJL0NvO}}6$*}E?
zI<W6WTOto7g7k0rS6b3~X(*3hqZ4WH7CW9Y@>fWc@E#(zrHAOqW8s)VdGF>z>u^fA
z4;eAc?Y4;6q_p=2%-#b-d!w>F2G?;>u&iHC@f}h)T4~hLuP;H7{&LuZ=WvK>r_mv4
zTeDiasU&znU1UQm+qf{gu3(rcUSX5jaE{qsJt1=nTmvXQJrLio2Wd>7kU=Y^Fs`50
z41;T$qu2FjKJWHIursWn!(cq-S>t-^27UHxfSwdmvw->Nko#{Cz}%o!<;ftwnd9-b
z4>v=_F!!FFM`uFxqGnPWJZNP`Q0oD_N`R;fTAX@UUB{ig(;foSi+un+6Z2cCcKixI
zmTA&2tny(h*xQ3YbGNcw9#{$MZ2ufI8uFBXM||t}y|;cS^I<Ijli1TvmpNC$#Ly)=
zx$r`KzyZCs{kY6(kmU#f2oIFwxXJBnta&${8Tp=}jEDE58$fGGJzR71EPZCq$=;r@
z&-^n*cDo?u)Rc>T@$Qf5-16dWRkL|b<AKU2GJ%^mTpQ6Zj>nD4=v1zfGNc@wuN{V2
z(gCYn>GZD|FD%07qHsLZ8Z7dC5xT;L_qwUh3e4#fPYJno4|##FjxGn<BLuo@e-hrM
zX<OY{%UShl5oLdo-%XJ*p@GxZQemVU7}l;G$5YHLGgIomJ%#ZP`EDencYT}E`Di7+
zTWtQQFD|gY&fqbL3}`D{$K2<QeY_Od6>aOa|GOvRF`)#zvcthS*?67+wZ+<^4Vms)
z^3~xFXE!Ml5?<k_#8E}832(<evEYeRY(A!3<$0rp&%%~YOgc#`-EiN^^t($xWG&fC
zulj6NxG6GEGq+2TGj(}8X*a1*3=43!v{GYzF4y^sqO{S7rQW>~(jI--^&68b`QZE)
z>3Ib1lIKcS>>j|lKMM8Ww{sp8<w?6j04Tq4B>PATWphIfVWh7=J*r8$RkOerzfGAH
zF=kYY3G@}S_8&`lXu749+INkUw_5#Mi_hPVq3iejfM04Sm*ZCS<;sJ?cm<Jj9)Y4d
z9oOF+8h-c;wo!G7@k$@cXHIPdy0}`t_QHpp0!bhjoBa?-(u2erpaf2V3J+W8FDh>J
zlp<Dn{Nalh+(q{=+i||}yDCtQN+IyoXat`D-9_=1m<`ald1>bKofNLSQj#mR0wRjA
z1>jWhFXhxm#k8xw(Lm2~rQXTus&EfopP$xm1#NiO=L-U9N1u9tX$%Q)NN~P-cJt%{
zD}kgb=o_!P@664XHN|iAWQ~iCcL0b=HtqiI&>Rwuv`a1)rI~ICrWp2(H*`<5(y{UW
zVFa%_UE%eO^giJ~H}w7W{aUYoS~;jb@7W`&k;I_)yKk?}b+#Da?WyENz3%tHgf~9S
zAcG7nqui%ol9Bm4&H4_5p5I^`8x$&#$ch>Foh*~LR*u7{Yt<-GfN)2bpd>&eASgg;
zh^Wc6Xyb>^eAj`tU+Q-a4VP%$UEVRJvLmXOl~(bI!z-^Nm!nsQDCbrfy*+J3(HEI+
z^~VcHH{&m-_FXV%j6<pMwfK$$8Pww@eYh9`wwZ@{HvOGB)a{EcJ%ci15gT}YUtMvX
z7<cK7K%STXppE<yc}XMIz(i?`|ApNv<;l`~YGePPx`LM#G8Xf$p+~v3<_3(ZTfh9)
zggaWxIkM8GHg7Y+!LJDUZEo7st|r+o)6M@5a4Z*6ThFqZdKvY=+Fy=ugLHjXak9^|
zVSnTOW;7=-C^PihZQTPkcuqSXaadEn%cte9Ph@;6=0JM59{q-1ams2R#DiJkYi%>N
zF8iW+DRI^H_ZY{FX#D+xNuqP4KX07!Jy#;6T8D;?Re0<!V&E^v*S(l7TFd&vNi#`;
zw#&x2>;vJ!exJi~=Q+={qr+Dqx5{|HH+5R#^CNu|V;1;8&}l^!ILtbBhDi2E=xTR|
znZaI2an_`jFWh(8ZEg<#pBF&r`C(C}Q#)wg$B_2i;q}i4l?X6>_2U6%c6S&bOfWs2
zdH5K@Yo^}fF*nPE_R!48bP7Bqsy#cL7GPM00qE?$j)9Xb><f2)9C$i+3%)4~N1FVI
zpw+D&-V8#s6-7>tbH`-QOX4UxKRod19t{Dddp>{&)qB`bxk*3ECDyFhTllcaxv147
zxyU4=!DGLkd_Zt`FKaSYVeS0$19jJBQt<_@D4)r}Im*d^*{-oOH_))pSld(>%2gC{
zoZFff^iZSMKy^g2Zg^Le%7Aowj@h1lb`3lOHPQpOrBLBx4q#L@sxvLRRf7Vn%#e<J
zUbMBqXTaNZ>f9!N^E>nBFnxk@={GD;xHI}NY<!Lz<~XGcQjM<LL@KUlpzp}*vf8uj
zZjIHNH~t&rf&?|tyAkQ9iseRhI((rMb+wXvzO`K!$-qn_Qy|4eg=eXDXBAimr`Y7J
zdn5B^&O>CcWEupsSK|yU`Xzf^`;*tSq?bsxM_oD#f`_U<)-=2Pr1UESt6otoHxs!r
ztoaZDWe3F{yXZ~my1x%_KeLoG4I;7k{(gnpBkQ917lhxJz^7s~?>2DiJFRh7;FB!x
zb}FtlPLR3Zb!QM2p@Xhz)rX<hdQDiG%CY(OR#E4I-xck>Gm%LbINFm1R>mWRvB$JN
zyCKGAXAdFM@dvqSK6TAHKA;dDQa_!(hVNT22QW18qvhz0rglbO0|wYSGaM_lfB7m=
z$GYNzU_piFGch_$_p6eJPdN)w>!1fr-jG_s<y2C1cv!Xf-IJ$cT)rgPxytnXbWO5*
zm*XBOs9$_itJx<muNBp!H=lVQ+{xE2yt&<lw3{r8Yx?*xj{I3e_ww1O!><l1*NN%M
zH<Prgdq!3~Kx_P%8nAVkDFUyyjk*JpQQr79?bXwvloD3ZWlLfjL{86D7L@{$QE~Tk
zz)l8jLqp(4XO$dUlWCu9(C#r88zeRtv#v1nne^G!z&_kau7s><5Y}Rm(vR$h73VwP
zhJQtA)vFJ4lZNai%~b260~xtu=UiQQ5=Wu@wwNpMn}mr!dPkuTemRwT;D`_0K;0)s
zTqX2-b<>%BUVi?5s_PH@VKLNsIh6C4mXX`yc~gIHqtuVaoo7~`uiSW#PA;s{+kQRU
zMpL--MY4KO@7v%}?@LS3eVz0W-#cQOg;inNww0qcw!-y8+BY@sKG6TnCPi=wkBu4b
zyt6O1Hk6#QR(sv7Rv7DvIC)&GleC|5!oAjzrti>*6<<rqV3AKmvkf#Ss>fqQ880%T
z83$M@slY~FNl%tM0j5GOs5ZP0C0dU{p;g{6x_q^trOA*VNKi~W=af8B#OPVniWO7)
z_@Zmq?zDzb^Saw%-K4KwvKZPPF+NVazj2^;QLZ9v;@55SO2*W0r{2GSt=t+6K)uy;
zlA38evkSA6P8*-KfEZ2zgGkf*tmSHS4F7yQ<O;n-U=V_#2V!%dopLP$z}>g}%mvyX
z_uDE)npvWrvt*4B%4C)9X?~^cPtbZiIK|vF|3y@G#1XJ{hztPY3l&=oo3p=4u|y6{
zftkUK7fI-KB#zfJ!{}T=ZX$2#^yXF>Q0XHmUVdF9>DJ|{ybHw%r^wFDDq%^;BWF=l
zEjCCayGgUT98*>My)QS^X!X_4R+2o4089`>J&;Ky0m5rLGF_gfMvM;wV@9jtc`t<f
zU|5eXDieBoh_CLiV^p#HxPq09jkAFz0ACl4VrG%6feb57)ArTDxYrHUS>uTVwrL5*
z;wbL}JhZ<eXt1Xe(XARh(}Kzs7$HT`dZnnCxH!2rolyIBA7kJ@R%+MegR-vbxl(oT
z9dJIR!dX2qw#h>FH<1Cd#&Yd!(|S$DGbrD6k|G2Z`MBG-A~Yh^sf~tHc<!tiy*{vt
ztjq&F>nXo#+i{+Dr^|xS6tf6A3(G)>(G5`<7|c6DYvBz(*{=wx@JyK&TvAGT#y9Cv
zmHDrB-Zh5a6Ej~VzI3U)uUi%JG+S~QBsB+st;xa#U^`6?ZJEY!f<6S9qTI~jFcB%l
zn~}^Hd-us-elG}bfd@umkSW7`^p*R3^Vf^<Lf&!pc|jSKRALnEi*%35<qsIs!E#gH
zQPe`#7JcQyPZb(O`%L3QY9H1C<4Z`jKwO4iG2`o;cq5o%pTvnBs1=p#K1yOflLi|x
zO7Ac#ABT@#WAu84d87(}^CFcLk%x69N$8dVV-3gII>9R2amTY;r#g*$u{FFW2QX$B
z?4HX@^aW)MFjOLs_Sd>IWJ6@aPX|K0Q6yAIrb;xvh|j6Vc&(e9<cC89wxRv`*gP>L
z<~S$W;U;n{AaTxPiFlB3pf_1q9aQgh-WkT@&+FGe%*<|phaQez<Jsx1LPreRX02Pd
zyjJ8D!d>79b-$|6&xTyKHaCh7(X-Q;Zd)SQozEp>tdA}-F}IC&2Dl35h1D?*1<ykL
zO6>Q_LAj+KEptlV1DQ1Rj`_;U%HW_%UAY;+_6M;Eh(?uS#mxC!H0L)!;iGbMNnyJ}
z*GZtFF+juv23=gg^-|O{W$SAmN+Q#oQW<fesP)DX%3K?B-R|spCU@<@SroZmF-{?o
zE<X@W<oUwwqd}7yl`T!%v)`fL{sPr2OpX<O+v}73%=0A=mjg_CEKM>7Q@4a~Bi%lU
z&SI3gV>RUTfd2mF(IpZ5W8U<ouxe5U9aEy$owOY8VGQJF%`by>e21BD)(hy5F~phA
z*F1en<4az;+VWBT3pvZ6S|q!`=)1tYG%g8kULV#4VLx84pM-#l<1pC#x;HB~Xh_q1
zLyaUAV|8UV^0Pd1O>Wsx>TPw%L5!zIxTiM>L~H!l&t3ZAy3D2Nd7QheOfX#LE&Am~
zo=dAYIb_R#w?rc0Uis^_5yDpMctB%&tbOaOP|Oq)k2zj@q3G+kgSfi+;slGC3Y0wk
zx&BCZwc`ddEC^Aga*m0+!1g^sDglE(p2~}{vpr)=pJdM9%FK=YSm>znjO_eb1=?yT
zWE@p#hv7SVIkb8lzK6i^g>Ps2qO99+8)-PjhAN++qGYjO13OMG%P}Wz-b4W7eaFsM
z#;0TPi3V+8G8@O6r#-~H7^`pSBVWjE<o3aAS`?i?ov)plB%~aEs}?<@o3X<RzIBxY
z7zUQpIm!3)lnxEIdVmogXfhgbE-jfrVW5RPBkMgkMoIzZKbWlJe<XA^TdiU7TziIe
zdX5UQY2K%2QAsqP;lEe!(xj)gd{gj~cd~B5_{}5xNr%U88V0#J0N!&(Hjqkjfe<W(
z4P;9C{PJfM$!Q+Sq{2{~f(sbU;BvVJSZN*Vx2x8z!siZ0Q+el4SB0~4dAs3a9NI<a
z&&E;(FB_J#x+5kWAs?SW|JoqAbGEGQ8|8y12kluWzvHhswRC|nRb0;GT^poVtD{&2
zG(M4SbY~TAqFq8L{m|H@SJ3%nySn@RbqclVt1f|x(Hyd3(l-ZbED+Fi&;5Jcvrm?c
z{M)?@jr~a?{ghnp;Nfn*<ZG>LjASRwHfue?*~osgt+#foteA-Zs@-T^RZ&~03Hem1
z|1~U?FXRHlmb}>2Z7k^ZN!j>Ab`Y%ALAa8c`OG-Q&p5MrhW>Q}kHACM<hvPk=2a?t
zx5GB#YFlQk<@=zMwwS`a=gkwmTFnz_&%?j+enifUk;k=nVF9&VHBNvt>=Wfao!>XY
z8ZqLT>9b2BYbh?vQ?|vi7fE<n^L;L^Ojhza(Cc)MMe#ZuJkqA5q}&62(O`s}Qn=pw
zgALxf1BGj|iVH>*nYpGIuoH!X84`Daf3XsvwyD><#cuHa;BEZ9xUSAmH8gfGre1Lh
z5~T33XK&O8N3_Ue2ZyD+0cq=_K4J4rZWC5f{XCoc$+&dP!J}75c1YpG|1~m#1W?;a
zofTu)70L5`$(7x9#_%xoAj&(zwilz#IV%AX9K$wZAxERdKJ3Mf$6wb?;mXIN$7gQ1
zqqPu(bPeyui*a=KuJ>eac6PRHH9}MjQ(<heY0bEQfLorW_mCc(!;OS{lPg&I-D4#j
zbuFGm3*N&F>lJ60hpbH%$$#l@TH(Lf;iYu8TlPr1sj9E!boT(_ywT9<JhuG2^tBHw
zna3sU{7v*W?k_SZrbu>X(0(`#^Z{8*o#gpNrDt{(v8fyYsOh|!P_RgXL<AX86mxxe
z3UfVHHk@YYsiAt0H6hm2%9b_ejY}!u9OXM)LEq;_NXYf2K|ZS+*VToai#@~>gd4>!
z2~O9m<uoarZ&^xCSE_P&;Qf5_(#F<SwmAE<?+rr2%+L|_->5z^2<4c`5HPx40SU^W
zb=_-Cw+*+ua-VLKr?TWVv0lHbNez;sak;^R0Zqw`yaLSPS{=zT;r92c16Q}<@o`l7
zdfpe;wI~K)KP{u86Vkz%A<&^b_K<LPGDmFQb+*FO*47p?7fvV4V^cIw$cEp*{bt@9
z+c~T*Ijhx5zSJMHE5N%x#S!g;mwcbJJHMX9U3jKSD`rSsQRy6I1!aD$PQZQS6=`-$
zk~yyBOugP}>UOOO=)B$Ep#UETnlAQ>B#U8Yjr&1jQF-09fluGonBI*!a|;zdWQaU)
z)Pd?uRf%QQdVg#<@Ry$bFxU0)X;$?~=@D8q@jRO=yJR8$tLC!wszdVqa0Nrn<OWOJ
zi&0Ddnmn7Hec)c<H+Kb7@$9(U`YifWme?IkICT{I*8uB7jabZq+gcz_QEo5Ft-u>L
z5{Ph6J-_hC_hTYhC-0@3%Zq%oJZnz!fJ=VswCTCMKK1*<D_@CMuw&g({l@Hxt>^hu
zZkdx+z4yO~7cGWyQL9AGa6c6u4iE>=o(ZiGXLsruEVif$5{yguryP9ht@OUL-p@qq
zm%_L^`;W71+Eb0}mFHK_e%WkC8x|Kz+QbmsIz$8^$Gr1CvJ&qN7(<m*4Wm!ktNy1c
z2BIZ}JShkFoE}>J<)UW!nJad1ne@{+i^-B>4)PN?ns&Qz)Tw>iIijXnwOQz2LBq!@
z7!$wArP*?u_u}->0cPi8VO5!~v4UG-d!#mVNhB^<ibDFmj<(r7SnJRA7@<|$KQ-?P
z+22xjSq<W=d1Ba&(-!WV4U6Gb!EU4UUk5r;=}-0A2!5?udR{qk+y)5@5>vVThZ^A?
zwFoN@x+K24%uz+rvlW*27d;E|TMK1;5mG($mS^z|wLAMf`FUq6f`Z%%yj~L{tLwbM
zVpp#GPvHZk(L}M|VxE79O0_<%byQT~=a&?JF}@~x`PN<J(j`HSWhF}JornGDoRY)C
z>5!a7lG!JJ4lMjeh!-t)OEf-qfN)5U#s*U^98J#bS^f_3b+oOLH)ym>;R+{jEvoYT
zWv2M=O_E7Hx0u|j84<gG)JX(HwNe3kjMi<pu@$;=42=@Y3Pwnijih+?nZ{>VsQT;k
zUmiHj?5^VU7D<FjrvLqaOY@N3(B&5ZH!mT&Ou4aiWrJ*k^~JaY-I$i5bt@&<vGtps
zg>Q6fyDFe^%OAG2_SV~=Ba4BBtIB__{cUIP+-B%moXLkRh>z@VPh9EVk+_>}Tl6Ax
z<h+$0>iV8_Zz$~YUQm)8>LsgF`?t4`{}{CW9B<bt5SrVYA#ElFJ^NV_Q`D%+vd2J~
za_3FjQ(lkXsPVZt4Z$p=<`u60GZ_3^jH<!RXFgJb$mxao-rxKoc#SQ6T%f^Flr=u@
zC)3HS<(E9iFrJ#mSJ2RPwVQvMaO9CCh&v}Nn_0LTi;CK7uU@MoY>3X3Hsix)*!70I
z7S8{?6?yKK#*slqeNQul0k;@SUv~EGVL*Ak-^9OmJ_>bj5kj_`Uw#&$Uh34`n84IY
z9nqt*vz<PJJ?8_}a+@hFecDbxZJwOesN)#@uY8v5w$det{TSvUx<;Cm<ChV*>k@1h
zrYTHmV@h3-%{ewn&NlqS754dHt!g_w>~@~`(1K5*{Xc5vOZZXu`OM8epPae|)ySTf
zoUKCI&6|_@!5o1T%N=K(T5wn+bcV6G<H}SGr<%Dl{y&~K0h^YIv%$<O;~X9<_JfSe
zB9G}=E=!?yBg!iKmE79#1aFyD!jQwr{)d%09ZShv%g+V-cN+CX<z^)Q*lld`CQ)L1
zr3JgdH>5nuMX)c))sHwoEnZr_@3~XE@7FXE>_M1tWhaH>i>@6dXr~b+bmG%(CyLV0
z|CtCdMd14}EQSqg?1j2Sy~%r$8buQMWVe>2s4idjf!A-<jUevl>h=&6Ot4P3aE$tB
zDd*#Qw7%Haa7B?H5r>GByZ?BZkSTnUdhQcO)ZOch=ppfR{#{odWp{A@nWu05M=_jk
zZ@60#Z8q+O`pL$DEbdmQ*c{bj7~=h(-_QD1GGlkItJ^(w2<~)^o~1}XCZczI+~Ili
zWU)pn%Z_HanLT<VMV?N7g;yWjeO@%r15OZSTlh?R6oMp^=pT{hUw%G>>#`(<imLT8
zd&qBXm5z!VoB8Z4I$x_|up<l*jWe^EQdJ`zCwW3(ldlr<k6@gDO^V59svu%*kwjGH
z=9^47q%}ZLJ)g6>PwP_G{8#V$@G14;hkKjA4W>N4sx#Wgs@}-*{Rc95RK~woH%Z5H
zY94Q`^GIJ?6d}D4Q-}+(dx=ybmOPhHN6~K53g-#R8EHDTpYhtqO6J#OE-E1Pu0{@S
zGBhN=0J-u1yFq^ye#`oOt&~S2bazCQ#WjfSeA`@ka?@DJwAG-L^*o)Y8kwuSsTOe&
z17N9<*Iul3<U8tgM^Ze1Y%9_H6Uspzd^6#h!NSaZ)bp}sTg}uDc1H%^;zDhGAN;KI
z+`OLO|0OK45K<|R_1gkFh9a431s7l4$t8-mvO-(ybp7$RtjB+A`CXH#5Lb{gSscyg
zxz@v$mNwjuUnMb9REEt<OY1759RFxu_(BpQkvLuuQ0h1ZXFJwRh-M#dCyJ-pl$V^0
zC(j_|lI!|sG}>Q&jn|2ET#i=FEEM!DYfj$w6tvoy8bdGDN)g1&=Tn2y|4f`oS;vT#
zrc47815KO?Q-&QE^xj7gNL~RS4+Fy>m>1Vt=$#C1{cFvXB9|^zXqXV6x{;D2D3Gxf
z232!ek3jZRqon0#-IxVmn{6|WzR-(Tuv`|eZ0qpfj2$b|F-(*b%pTL%lFuY8oyY#r
zo-C<vtGt%{Z-6F9F*3oFh_9)+D_rBqTDb9roYfZb%$ClmNG^n16Gex6dWI3jH&kEA
zUm`)0ov0(`X;Y23Y93YmyD^w_@l3@Tz<C-~AT}SrA6Gn^E-EK+FV$^n)K%|X{>oiC
zHMf`YA}nGg3}T}^4FUhWqi?0c@k|5iMP;~?Ng^4t@m{{HgJo{sJ`y{)Gv-nGrekeX
zTDLg$YiuexCG-W5m30M;|NG!zR6%gE?lN&oD4)4@Ki1w#xqGKjhx#;ay}#C2Qj=dm
zvM``>J}YM=X{AWP)Hd)@es1;NXoUNpk=mOw$X7#IoH7AZNxvmb;0HjCkwM8Y9JisM
z&I89I>+6%kc@w5#Cj~Itd5Xeqes1CEvzvcLJIsADVDH^gi$tfqqrS}?g@@5J+B>MP
zR^FKM)nJvk$p5^JJ*e3E45NZ<b$;OgC&q$o4CbL>`?06V+-yhwms0u_p`y8a=J`#9
za$zZ-<vyK4L2y!;8KfXI|MyYlk_Cl;*-D*du}kVs9TAN!1d+@u=%v<GUpD<4xhQg0
z;rj3dkqjx0FN}ZQ<Qe&0o{q=}bH$dbdeZLR0oKcEkL_)-eam>9CCmG|QM#vKSb3UD
zwf$2kKb1Sr*Lf`daT)_jpyrKRE9S};9U9%1psr=(*QZ|&ZY`x@cJ7*ve@Cs{D6VwF
zLOe5|aDJ=tIFUjg5DQY-YjrWEwf29UWg?Yt(L^+HYf0{c%}Jh{nI3{Ac$U6S@6B#O
z@}{WAY51W(2x=WVRXV#lfD!Ro?yLXZv{V#+ffewOau;M>POR~7dK2xsbj@{&y}FO$
z`k7+y3SG5(#}yZjj>QerYp!}Ef4Egi5fb%xM;@=bQ<w(SK9Nwxrz%Wgos0_;>w8oE
zyJ2$4yz`S2`t_eV<$C$sFfnkd(44^6o^XrGe436L+8Uya&wEV7phcKRoqW*IMbN25
znA7#CRMz6*pNie%2kC*uJJ35Tsoz?jKM;xn3p*CVrin}ES$HWar*8Wu`=gjesLOlS
z&ireZ{~qxK1>lM)_kIwNb1Eb`#un5(QH?y{8l{OcRl2om)_IMpKZ1cO<015d=kd>q
zq~Qm&Ug4;+#EX^?e4Bcev&63T+NktP(!2@Qe(~o|)N;H`2Eoi3@%g{ug8zN(+gtpA
z`Xv&s<;2L1Ph>O$4^$VPbZdL5xxJssd>2KuUtk)z)_J1!Oe0-X_D}0nwx>)u#RrLq
zpnYc&MgngAU7AsvJyR&C#2f3h+v#gt=p|}GUXcG2-akkg1O{!V)_}tQMdJr0Z6AHN
zfYZSG8v>)4m$0M)6+uI)f6fB1yJW6oew7f1jIiGr?_Rs7Td7e<T{dOdN@E((t!1fB
z0a4}s|NV8S<su1gPj$o)J@3h_+qj2Dh)S=jGqCHV3551V;5^HO|6MCaeCKk*era88
zKb5A()ue%CA(B^IXG*Jb`yv1m5R*@>mMhSbhK<$xC(%Vvb@V#7(?>mU(IMV{nr$e!
z|1=iQD3Cp^Kk8G)$>_6#CZ}rGjZaQxUWXpghku3wHW{XV`h@lJFghW<``P!IsTbH7
zZq{&XDk=G7+{ai$v-?sdwENNoz8m)ZTap0qkG!MXy@14NFGV(T@V*NRGxhBj#dR_o
ze4{2(h^4Hb*~=y^R_P*lMtEm~qVwUcGX!8S{IeY*?)Yu>L>z0rXsHU_mv=s3{OlTZ
zo2{{5t&v@w!vZH4N>n>G8y5n|K7_fUPSoZ9=0|U(e&Cn!^Ruy<DT=(tXNWApu~x9W
zqNZ601{Y^CXd)e!ez&(JnIFkaozx!iLI$?-?jFD8DM5JxXfgeBC|##68JS1aCMFII
z4O*v6ujbv6ZpP}Kk!d@uUmvA$4xXf<4DX`c&+VGI-a?=A$FyX>WrB6<@}w!zPtlez
z7IeCFOAWhX_hw%N%m2gGRYpa*cI_jA5{iU?0z-$C2+~6g(%qfX5+XS;v?3wW-QC?C
z3P^W1(v89(5(D3ZzUMf8e^`sPCZ4(Po!7qh-WLqO8(UoOH@kf0v|L<d$mD19NYLU$
z%BF4+bgQ*bC4;CY^Srq@5eb~vGVdd-wg<z42ELdVEaEilcUO(H4;Uf61)WBYf|aR#
zhSF$;I?}n^Gbs)`+|%&B#nie1sAPl2MR`DOdFx(}nr(m;(NL6~*x7A9mb*yj{0!$7
zLNSDCy}o7!o(b4824+?2(RHfIbKZCW38Y*N!s`F~>(nU5GH+tNo~Heg!LX*>aeVE~
z_}HGl!KmHX{)q7R^?w_Xh^Jw=_D%ts&hn$Iy=W0kX%bmPJKL_EYyzd8=)33Hl_si`
z9{N4aw~|2rsv4w?1&16OKz|d`%|jWL=41p7Xd(*1A~A`%{Zq-5j87gbLCgcTktP5c
zTA;#L{6b9JsGr%52L`ubiRNxb(@(&gh~n<9=kq3(208oTK;w`XY5Iv%0J$5p!sSb8
ze@XU()`NRJ%%0lG4ITUf$&@+ByM9&CJMPj^D)8q=V`42CJg-qtw}R=5XI)$kj{a|h
z1P-L_6vYnMY!Dp24McwD#noH8oe|;Lz$3@!4i5E1k&JU_b$-0ZriC=J>Rvgd+ddR0
z&}Bucn9}Uq^*T(eFl-R#dP!URKQ%xVrts`#w&f2H^OvMr(vuNPWqmvoTKKAhG?@~u
z;Q87)ZKawy`hz9fh(w1!mkKwac=`-OYX%{NC6T3Scn<V0ZX%RAL7RyuhN2Dm$eSvo
zQNB})Ql$idw{WDU8&@i1dzfLG$%AZA+p6a#`8)S|a-Y+@98dbSeeTytC_@~Snq$p5
zOfc5;QB9i!yUAXhLE&JSOh0V&v5_UxVoS+tZyNv!QKXr08lB1&p<#mxvn03dnOjn}
z1C{f!WJ>NlKqvS_WC@X^nc*S2gsxAZD4((>=;?xi&-!!EBJBD>ep#sBd>WymIZR&#
zY0NQ%5sm5q8@F5l7wW4Vh!<zYYTz2XbMH*2Qh+!9@lm>i`N(6V4CH63hv<3*Xr=%K
z3hY&X%%~#G;)1isl?5~LlmyWJtmhq~lz$vjn7vQk-E!tef%Rx*0z=<!!^0OnAH39)
zDGi=0L_Wsssooq63x8jv@Tvj%8=4_Bc-+d#*x}<#F=JC{ChLslMbR4}F#U}i{Znc`
z`dgi{blVCa7>!V}$JL7Wd|(YAXjtGE>#kT!5F0afSMt$99u{~@0o}!EtAYMalXl=b
z)3v^U?}<kxjBzila47yM{)a%YEb^MrMVxOt?=&3)?!gh|j_dwvibvF^Up1b_F{()1
zclgU*deft>_>}}bd(nXp&54y}Hb|ess-HsaxNRszZv#<m(99pl4r#+j(f7a!0?_X!
zftZB`*%wExJBnSz%(4B6G!9>g9;|&N{WEyRyDbde(N|B!Y$p8+W&Jav?bfzYTV_Hq
zJWVs=C7JukeBe!dR2hJ5cvJ8!LW97}3LPNF0Qjj*#kUwKBhyP^&_-Ndt;r-0uUqfd
zRZ8%GWB350@krSRKyi;@H6HU?Z87wyG4393ec8!Xk}1#3JYohP(PQO?umvG$9>p@R
zPYt%lJnoVBys*Ed*COMMV#PB)!HqX0t1&!!qQ&LVq$P?pr}35orVHn@?=<QKjGTxK
z-Jbrd=7vj?N=$QkVun6*d}tidA^YEKttJK>BB<yV&i9Svoo02*G}!msJL?VudUT=8
zQ9+yX?0-Lsl#gUbOdUhz=S6f`evFs`>0r<?0Px}+AK^<p?9M(WMNn__A$>Z|w~yX7
zb9mhB0@f3*>2E*cZ13u6w(K-oP9^p)1RXo9?KtGfJTZyy{Odhg5M9L#tH+qGRKTy$
zWMr(i?raS(_4wT6sH9(`TluEJ1Tc@xNN?e19A4bku2r0RPQ4PC4+90gbsJ|rnPAk)
zza8Pl#uO15Pf4!HA!1)ax=WJKh@=6KHWd^bQ1bT^-o>53HkuZrSDFCUk*I1O;E7Yn
zWNPlWc00&i@-^X5g;RRif7^9&zEwd&9~c2c^A46vcgC8XZe$CM7S;{Zs2KMSE1baB
z?nL9&Gd1~>CgFT*fH=76`b%c+=}&E(z;eY9F`mZd(~lqIiH$e<rSA4$j0eDR(du6b
zL#Y4U&Rfdi`Ngl+0XDTgljNLySSpob{@wZWLsu*47^auv`zrwu_<S>L9|t+p@WivQ
zc0!{w(m2b%@+sauD#g}FrhHIX66RhROq5@ZnHxfEMu<H8tL+#?4sZxAbU*;GrfQqo
z^f@&@HaD>`>A6!?e=2`3GxD-`Z&p;|IRFD(#E^Br6;~uZ>w20GFd{d$iSpt^y2y}`
zyGuHpYl;}?3ic$<_Wpuu#R`dKLD6o1EIlDn_j_|$j=yD#<QA(?{yIsAs794Zr-rI|
zx7^07E~53mPD@90r10~W5T?u7O=19pNw8>@>vo){oGGVhcYJH!l#LA2huk!7{2Lj0
zKR|0Djr$qq0FXsIck#l9K^uYg73|{;l#B=HxPQCYOKKdU7ad@g6L!;>3y-X+`#n`;
z${;GO4H=DO0X0l}QnCLh*-a2*tH#QZ8Yl|BdFQC1RnKM+@WHK0nIaVflls+$1rIm)
zKJ>=|b+rE;XxY`Lu1=)sxhWxt>Y!FZ|Lg67=OzhSO^zEp@t=+S=rEA78FI`d3%g=U
zyz(CxWsg7Q*_(Y=P!lmr2<C;JYsPcI>i$;wC5)suLIJdtL(Bz(QCb^w`6lZumJ4AI
z62t(+SvqhB2YL4Bvbj%9NLiJmBVQs8=AkoT87B=2Yyl^nWWZ|s1T%Js%=T~bfTDoD
zmT^?quV6PC$7&FNMh~A(*0kT{2Xc_qaybN8NT--2Bd51Qle@zN$tNv~_^b{T4{Faj
z`$x63bZK>~kD>wTU#57L*HV+bWAo=qt<qr*<TohzG~{rZciIGYf0rNn6-U5-xYLNR
zKOa}sim+NNE>u;F7;2#W>zq<CJJ9H;fbarsDpN<$CdsP+6hV3xU+}s`Ykdp$zP?Dq
zA^}O`zvZ^sLHz?Hv-k8jcW9;b=C*J~e)Q#(s$R3O*|ulAGB!Ete(|@FZz0IDa_*#v
z*@N2{Uuu6hEqtw{);e5t#j7G-sh^I46xp>+q3DN#HAPHjSdKd*=K7&pcAg>3shyY2
zImlP*h1DUDZ#oCKyLA@52FnuPHRt09v9lTb#Uu<fTqGGlb!P#ra{!_ymN;qyL=|iL
zA=<T7n}&woS%o>e-u{y+=R5U;u@1=3KM4g6x=#b$6fqTWN$HK{mLC?w=1WU9<1$VK
zj&r36?Yf2+?v(t|kT6F;AgNc1>!_PsPgu3i<t83ijJp#71wi#L1iU$LPJ^3b_kZei
zh|1S)2@*Mt(xRGkpTcQXuQNF>wp2ZLH9I+Z*o^-HtDg!fK0^PgO+i||t~pOk6<(|l
zyv#XZE5CvUUb->xNGptqw(?877?Kgk`PSSv@<qMeCi8KPXqH;dBU+P4+O*tWyff}&
zxa^1(a=eEAp^c4`QNZX9S<NhZwe1h(i&3c3iQ>kCiQw*#g?lms(M~|36oD(fB$yG0
z){10MY2U1g0u)J@@Cl1mV$yqSS}_Wd$-rk~w#wGL41a!UE@}t|N8@g#1Xq#O8=@S0
zus|!qpytS!@kxEZuK^(J#LtuRD`fGJe(oon04!N+H<f4F8{gHL8&Aa5+6()&pC$<U
zF~H<-kY4D6o96`R>QTcKajYkZYP0Bx;;vs2r)@{sJhK-2yZ`^OxWLCUr;E_c)IyI~
zT=6g$Ug_sNqnC*ppgDLZhZHEFN-Rshb2Di;1$Gs-VuvRU3l*Z>r%$x44BC*7=>G`M
ze0CrC)hZMjgk0lR0Xz{lZU<5<5{S2DY?Q~T<9YB`W-3pUz)C<``uBCBzJRb2DZ70J
zdSPJ2lob~1q(F*Tc!r(GZW-54s$=q((V%#S0wC!$MSNnU`PqTERM=stwoyfK>EhX?
z>_dF7MAQ4pG_3#sJG#b2G?T*vDg}yTHdjL6J2*YzjT4}4ZApPFb>&u3fow4(Xo(^Z
zWx}bXdd$Wxx5;(rds@vD$$rIw@=15_gxGtKJ&>oD%XuOhUmPBvpLHTXx?`&Sn<t0i
z+c*qb-*0i6AP^h(H92fPJ|uGNWca(>h3?xX4A=_I-P<G2O1X^AdQXAUB3~s82+_jB
z-vgO6l2ZE^VsvzYYUo!(9JP2v1R@E}9~`r&rx9}K@;Ma!WvhMKFi82yxL<Tc`bZfr
z+t_u0&Sv77v&iBSWkmi23^4pWJD~tmtx|Z6Eo0x9v9DxLZ{qkYC6?UQ@usYyun4~I
zpFk9{jJlIJmsQ_9HdBKA-NbOEC`+MMT3xSnB_!Kye<)EvxZ=5%<N~s-#bNgOGU*Hu
z0l!+RPDeg4%5Fyw57Qq0*0`|%C?~b~M{{A3G32lKh6;OB<EhD2Iz!MD1IrML0dg1a
zO1jQ7UUulp{|k$K@V6)rc<4wDrVl#(?z95-@I$N8H}iy_fX){R;&BH3g+Bd*)xl!j
zeNNfaIM=7{shWIgeT)LUP%5CVod(G};6QwK>R!Rt)h1-;g5>VI_;;Je7i_L_;d}O%
z@yBz9j8Oi4ADF5jfv=XDYo;2v5;1UpO8OClRvtwQO0#4LCe~3?HYB0`$>HZvE<)>9
zv3F@pCwZnpQ~;Gl9Yj?rd%0fOm6*7OU|fccJ|)GzsHXkj`Uf9jtPT(C20{9}9=GI|
zWdOHT^V8Lx`m4G7%%f6`29tAowRyIwq78fT>_pP5fyOI=;EU7AR+h|--?kL4Lvi3R
ze8M|(h;I*}Kqc0m&2Fh*n2C|xtQ<r+v_`8F5e>%1-8GQi`7U<GZUcW)8PKGF_9C5G
zVn9bn2Q+8>8~O>8M>!Z0KHW6o(;A+9?ejCYYR{6P(aP$SYz>b(P24}=1az!>11a7>
zrMRxCn040zPS<X`V`fVKD>UArS-v85^peNk$|7BJ^Fi2Uj_$Wtd><Upw~5=~K(}Dj
z`hm-7?NKn(aBQaVjJxMTlOjskKOoeWT<zD~WXUp!uHnjglI*v2o@52oAN9BK=ZqWy
zh+^R=pF3}CkVBz4sjhwPn^Q_%`&4ac?=O9%(FEo?eM-B<tLHvX33CjfpL#H|_6bC3
zq-DUpqyo4RlhGR=+!Tt&&Rz+swzaT$V_o@sMHGY&qfY4VLTco;iLj0WrYKbnDbM8A
zN&x>pqv3N(6iSKtbP0c15GOOG`36ls(VJ_xovTx>6V9wVzYqRiviF6<FoKuYk@Ksx
zK5oGDRS@_s?~5#e4z(kvWYoe&C=arE9dTL@Q4e|ET~t!?!!;;R@V8&MP4vbKyFrNl
zuBTZDybvPi5ed}07ba@evPOwLlnWa_&M%`$tFx%l*AMfL0Fgw$+>zk_o?vowAoG8N
zO5rkX2;Qx$q`j%0X<i%@|J}sw;<4%)2MNDiiJZHRz5z}_XCcHfiJhb^bdvuZ&A1No
z#wR8ubS%h#yv;^Yf7dSLnbL%=;hSmk^Qn;lJz`A6&~_g~L!@}1!gT+o24&(q!ZJ{%
z2&R37$>j8kaB4KZi$ojZkO3&aAKd@7ARgzDHZTq&{p3gA#L5b`PEBvlM2e@qfD4F9
zriDwb7-XM$mcwhl^9VyLMoV;Y6Ge;ny^)qBLYi7lU7c9R<hMhWd~oY@Gxf@SJT)>4
zPB`sQw}@tVJ)_pPVTeXpnvf^|UFn!(Gf!zd9q2K8wQ|aD=f8AFaq?SkZsrta(7ba>
z5s;V%1{-6P);<Hi{IQk+?)Fs<KNB^Lxg7EK$pr*)&S032T{8b!DI{|dw#(ARMe_S5
zv)*}M94mMU?hHvOpJS5RT1EpjTY7KMS#za#u`rfNPwe=$wO0ADiC+NNh*0=kZXP$Q
zQA+2Rg}no86lQzWY)CdYJWAI^tdkrZr0MmB(8ZQX6F30D)KWeXL38%q!LU8qO-Ynv
zr=u%^Zr0HU>rV8iLj4P+VZW==6m@|137u{lztNHJ1MD@={4%UZkiryd?MP6;`^aa;
zU;wwg)iA|qu>&_Ek)WTJc)&TwcoA_}aIv)D$dNwq>xXR9FJE0ccnRjDqO&aGlS4^?
z@~QrDgKQa}D7&9QY09X*?5x|5hlDDp=ZSC9PMDq~Eb}-Hr3fhN=<Gf*zWvLF`A}eO
z4GAF5%;`=yGtY?6;5Y#!HLv@O3)Y=sRh|Lbyo?v`7!Tf{5(5-7tt>;p3;>H;(KkGD
z)P6leGZw%ddmTAgs#=%3E$|pB+VmQ)2pg9PUQ72AK!LKJ7zi|pVP-+D%IxrZyALcA
zZRRRG5$7c~?7y!9RS)8IuszhOIhq=DejFavf+A-Fvd?Ro!7#)aGvyV-D<e1uAJYJt
zh@_oxiI%7!1fW3QYKZ4RyLo!UoBwVbVZnu2_LJ?)N_rN=hZJJ7nMjkc!_f>>Mp_a2
z$4~o{pM9REA%Av@DT=aPV(3lPPA8FpqdVK0OZfj5S)tIRfnUHkQ{v&98CUK!*`<(9
z+$l$`ngxpBXx6M!Njz=+qje?ArUA~4_)U3}ffr-c7OpEHX$wlTzc8R-azG)jEV74M
zq8SgiJUJAq=V}tyzJ;43C~$x$d0V7VN2HR<ThsmE)SD0cMVduFY1hca#DucG{=uJn
zz}y-FBkFJNA>-FQOzSz!&nWi6UI2CM17;H|MHKa`uH>M69rmC)W5p~_o@vA(lbt{L
z0kPAsm2#54fL>5Nd<PBD12S@chUn8qb<I<=#&=_sR58ZW4FK@li>`Rwbao}>T72Xm
z8kyw2DVYY$oTFJk$@pLRN~6<;aLpBZaI#6o;DMH)4PI-rn<{exA0@&Gq_q1$c3t-f
zpeE+*>`bp_$#~i9{3TwaPW%Fd9@ztDKuLdkiIzAA&f3w;tW3e3<F=D{2D=xt1dAaC
z*_XHy#XapCM|bud&w3wnr{#DMtgNlQ^XC9CwuX2St~Upe{`&x&x;gneVqm<JKSY1Y
zV!cH+af&qyH_(Oi(h?PXcm<8Aqn<uZocsj|OTsTWSFjf`Ui&O?o(yhRh!U?G{tP`p
zG&O)eVuwrm8MB?dO=6DcuNW@e7-#x~0&9U6&A$w(T=cp|j80B&{CN=cts!m%uQ?rH
zZ1pwz+>_m5=uLVmo7Q=>q1^{gm%?kRkLT5EPNa@ef$)pnH0t<J5m59`09Ouu5|PFE
zOR{r;&AU9+3Vf~SHEs>e<zB36(CVL^G><@3F&@bno?m>8IEzb73Bw<hd7HjB*&ELe
zAtV!ksor$)NId?ZokA6cc(rT~@jl-k5=OX6N*mndxV)pwAB3sG?~ZBEXt6-QfB-O3
zCZLX5YdQtY3iRW?#vu3==t=^;coKMa9_~ASG0wcIOMBMBnx5;--+shgQ*Y85Bo?&X
zQdBW>%8fVv(7@fD{l4wn$aC6Oi;T?TP@${3CZJt8gq`bmO!=+S`$~5#)z)k@)$80L
zENT(OE{OO8X+%ZyP;RaCTb)*y2~h$lGy71%6bnsuEbzUs1zYW#^$b~sz&{O(XJfTs
zpa!w8J)`*pz8wl5B)dAq>FIWD?TJr}rd<7SG(dIqit3r?2AZX``KHb}FdQ*3(O5u^
z$Aa!gE+K8G08(}CFc3bzsSiIMQtB4x!`%BwQuEX@Z?FBUW0j<KVkOm7+~(k*>h(1N
zQJmP?m?#h?$i3zmxY3MJ)ti58-N_T1kJGFcUW6}wXd0gBY8NO^Jf1UFP|a_RE(3w6
zR3=DUWMd}`+70(oBQ<DNbE0{O$3{jdttN}YSG!iP%$@eS?)=sheZt{X<MU%#uabDF
z8}lWk48tPjS$uLburKc`pVMdmmd3CTvwkJyt88raKk7m$Z|mAap}~B=LKwIh&@;m-
zz1^q)kRnMnR8ATq4s*6op#I%^r5kx9Z{EA&=LD0zejTCk+$S7=v#%_CjI=leVZ69_
zaGudtPV_(Fa8ZGHd7g~dmjb)PH_0%3fN5U!xHU3ov-b~P)ZC@KAqE)DX(X7(aV2z)
z%Y{1j;X||LK)KB~2l@?Yf_>{1dUx)#4PYvoWu&K?_@|GtPrhFr;4lofh~B@uO`Ka2
ztCT8j$Uc5ZIizR%c`t|-JT=3X<A1T>JO`va-{%)HUi_AHyy4{Y^J5vW5a2Kdw}-%Z
z0519xAjK!+Q&FArVoeiQd2?RAAb|2*wb2|rswy~CfXsir(2>0TOS~3=8L!L5Z}@zE
z43_PMgn~U`4XaH*8(P7lMfbYOoSK~_U#sU3CFhUfV49e0bdOh-#Pl<7YO|mBW!ZY{
z>ev}D-hVk!_we_{co1&wJIMS}8icC^kaSv3KQ3>iv~CpP)A3x?gFFS|JRoZV;#w(B
zXZ08I15%g37`?AcZW05(;*tj7U>aDuPoAcMMfg7BI{3>6I`SJ5{-ixT#10SRAqzHX
zU~X;Nk1!YlOb7dV(W%rE>Nz{Mg;hlIp}T~>>pFo1@4xpW1@V&K9%4e&o6;fbbA*=Q
zo1_@GSjviLIrU;_Lwj<ZB!;D`Al<l7S<{3?(c2e4+&e%m%}%PMH=YfGfdl=<wN(gt
zFlH)1xeg`Y+x@OT%i1mzy{(~_vy{Yyb_Oj>-_^6x<Z?*5H{{@XYq8X!!XXWnz4AEg
zO~=Dm{51+x;Rj+C)Zqcv(`CZi+S(?IO|B8~J$V_B1sCEQzx7iyt+-f@%>A42StqM!
zx?m%z!jh<jpnS4d@EYMqxE)qLj0(+Cp-OTa?4Oi-PeNVt#HtbCY2BBGl#=81o?WZW
zkDN%Xjy_(^dXlQ7{m%aW@TWh{SrQ*`2pshz7?vC5U)0Zb4~REsK2I{{dz$7}4wLKX
zC1YIWl_>S`YDDFAT?-L0jqLjC^4mt3_+AQZ(N2<i(u+gx(zi><#eP}6pq-!D;Mp$G
zYh25Y)sJ8^{?eT#6-ioJ{yVU5Q^W!~w|Y-ouRUCWhSHU%#Z&j<YnBlakp`rv#Aw@0
zis$mdq)N$DdOb0W3_2GC)i(X<6DN%EKA5sC)`7k+3^*RNx*X8-^iu$^$f$tAeE7lP
zKeIRJ)lUiUx^|({UM5bKITdPulK#5(lJJTO)<9Lh)RklD_X;YZCAmrRm8qxtHS95o
z(ZpJDOf&IU`%7$dF9gd`V2>`~4uUjyp{>mHA^T2AmjJOH;3h!3i?k}&zL3~P(aOZ+
z`CmJp68}c2eb%t1YgmBZqoZ!>P<X?a2|)KVu<|O+B##dLQ%ll_RF+(ad9xD=TJ>cY
zVub^9_eIk2Dm|$&?P=(P>e@Ldy@08K@1Q6*%HXX5$Z`|RyvcyIIqp2fQe*z5ju5_U
z`q)MFVZEQ=0S>N&e}KMXvM<CI<y<DK=eQ)wctU4=cv1OeKI^y<rP+HNXlFKA=?J_T
zt<-xnRyk85^kCmH>Nha*?1|6pthQFGXLHlfl^|da=fZJ)QP{^sbt-E5!NW5r=`n3X
zx08{do#XAG>&VF`J(f*2tQrdaj>#VLZ&pH{-eb1|f;T&w-~6~NMZiYC|9Pt(j$Lh*
z?!e{*X2xsj8XDNW>RYreexg+`fkyY-Xrkq^2xwo(Qo4a>h6^D&GR@<Au4)OpZf7Xc
zpnQqIn+adQR8|~BJTUd^9=TxCl*7@l)A$D^7tg}NBCNMp+I6?MHbV#)N`i}sQnzIQ
zeBQ@YSD&>tf|DAo^;gVkOW;-)Q-6-Cszl7znEQo7FA2jG!XP~b$wobo%PaK?a<=uJ
zy}xU2M0R-q3>nUZlIZ`c?ns6JzRq5E?4*eA;OBZFIJ;#=*RSm=*;>;fGF9$!hO**k
zp)n2kungn+`|)P)6HXgK44)QEj`4%=_6sg)iQPa!kg}p84oElyEN<`MK+DRiAV)ti
zKjQJ(_-5leMKCJdXp4n~Wps9yk&j}88j_HZa88q!tMeG_lz)$0pi<$YQU!*oN}3-_
z&!xdfLcZOk*n8kUq18Q^hBgS4eR`PqEeG?@N7fxo?q!PJkxP`P2iX0&jdD7G?ej^;
zr#N`Tx9iwE+A@0wVAEonA5;G@Rj%0(Gf!`=x#TrfS09|AbI3VYhGix6#ri_LP~ow1
z?c;BE?^hGp!`nzkC-)K_3^}nQOk?x|l79omkPI~YBZ=-jDJ(UK?t3TAOv(F!Kkm<-
z)$A2IarSs758@C>WpGs<Zzd*FKBklr@Qsemt8_@=049n^Mv}-qzcI?>K;!k#Wjfcq
z4>~^p0+j36VKQaHR4Rx{-J<4f@yXy2*XqM#+9UKNWr)|dDu<amJh%R9*f{wN!9GQx
zFGxi(>4>!H_d4V@2<nT+Gb7kx8Eg(TUO(%6lHMARDlTgp7pj7+9BcTgc9YPoX=N!)
z2H1wwqGF51(JvgrnrE<&L|B2W55A%Mizc<4^^e`%Lth{Can9<VMeV5~zHmv36>Kl(
zfa&lVBYpv`sG+SepQdu&FAQm|A4i2&&68LM=&_|#5TCaAsEdOoCio96n<@TRcYB9Z
zR&=k2g_IWP2z{G@5g}xqbnZZBjAOn=Lymj>?<{~}$A{BZQ*2g6c|yvT>)qi7xtX0|
zRWlW&4~%f3_X1(dtS{zqf9lBIzPZXMOdM!dl+ZJxrM(caXoyVK*H~eTG$F94ZyOD|
ztzc=5uotfy4x+*`qhKXsE29=<6Fgc%Xnbe^ru;hS9Ow(C!P_1-c;Qn0c>LGqAqq8=
znCujap$J9s7!wmS8TG+u)o`uwbG`0>N!5i&Z{6DRYLP`j%}wiI(*^42(^@{P8R;ZI
z9aflmBXs}^%JTUaVG7a;G=-gab`E+FS-jp21KnMa!J59NUO(kJMKCWei~)CQr(kL7
zrV*ELrr)Ma{%poFTnF)IgQYU<&2Dx)JN}O^YbD*RDEx|Zd*M}6)z+LZvfMr}iw7jB
ze+1p31g;95ANzl63w?Ysn$jnk?@4_0Z?kEXvpy64{4{I@|IBVeUS`2tD~H4<@Gqi>
z#ZB-6v`>srFkhHgyjs8oAd$d_Wu3gHG1?-?1wx1-+AO&JNIlw$&8hFaUR$=A?upHh
zCG_ylLb^Qvs-poC#eQNcI^=zI-WXeHS=6L#+S!CWm8Qi?5UvrFpjJNd0SE4Reil3b
z|Mwv0ltn+}sSnD;Y#i?}9()5n`eR7X1_=v5_!5=}uoa}by-ypuV?hXxfb~Lrk$<+M
z&HKua#lAqi#Jhsc83a@l@t`#0agl$RGcMv3q$76zR{u1Z3NdCwTlV9n>C&jKc5%wt
zB@*@r2YLa#4jKP`;<G=|m6Z*E#5r#^EzNJ~U=Y3O1Oem|%QneV7!^h<8U3#u^fxzv
z;ynt$!<SLf`L>Ep?i|pKe(VtrOexT6?LUu1UYW*y3$Vbhos^q>HHa$fCWpw%uwq{<
z-_Id+)Z9UJ)L*|O{n_IQ@G)SxCqM~wkH}<IFFPgA5QXV$D>m+&JsRCd9I53CAEbTS
zE|P{;6XgJ=Df;?Uk>H(9binh2?w2O8H;0@o|Fs2->Ow-Lg#Z*=wQS!DN{DLQ=LMoN
z0_XHoJ;V4y60ZIqMGl<@4L(b`9(^!Ec|^pZcU<A1P!mCA_@316uF46WSbQYae`VS%
z&9qphZPr3gtW+7hi3oewYk(345UQe}DD;2!Xnu=oo4hTN&HEaA>6=YTfk_$@zTHRJ
zDXV~+rmcUGW%LAK<$YJyhyY(lMGJnF^OxDx*1$I`0)VKqiA>@IE=VI)C{V>9q1dj?
zD`kbeKPr_yyI_FS_Tb&ntG&`yDlB+de}~66vHvqv`4DViR%8t#gE;!i{h9WoCCuw!
zobv28YjNkC>jcBe)IZgMe^6fg6suV}O1kA%^59|bsb~-S!A$yMUR2TnH4J3(7zMiZ
zSf<GAyp_LX8gT1B=ro;i7Oks*;V1w8CZ814S-#H|<)53K0}xeF3ul%J7b-Cvw<P9Y
zf@>n2<>ddY{=DJSR6+f+trc|Vzc)n{yV^-IhGhi(EEVan_oM2dWq@tI(faejS?F7X
zVd@hME0TnnBBW#@6)z?H*4TCbfb{?PJVcKwWPs_+XO7ZNXNquCKA`{X6pUl{BQ$Hd
zxSjS_?Em{YfnE_0heYccja~kDme%M|@bwO}3DX(MU|l;QS*LUhug0G%dW7kN&$536
z*rXDfnb7=d5q)QZJFmyQs70;KAE3XKT3(Fg_>WO0spB){42lXk+bm((H-fr9w-HvJ
zePiyAj-X^{eysZ|>i>256h0`W`+`rt27DiAuz?1E^yAxPTz;qm%8C1OtHFFpUiA-g
zAL!_~yPL3<+<r3H&f=CFwNMSz$|u9n>vDEL5mxrN|D6%g62$x_uSLswVw|_sNb3}U
zR&Bvp@9NiE87i4KE44OmJAP^st3qnI+CqWhz?r~>$pcmEc~#I~5Y!fG61C{Z%}u`&
zOkE^ig%2uL(UNPMtN5IHGxfmr2J^jxm<JL8nxKt+bcsjLj9|z`^i*%p7rTlgm4z!m
zpr*$QB@(r|jb-utx8`1RD**f1kW01SGTRPBoRl-g19&14hsx&$63M2Y7LH!}2YB>1
zfr>#d9U_rMwFPhMp2S+ICANV?#eTA~wsUCa$KZ5=G8O=>CfKz6m8|~yBlU3j!OtyD
zEKpC)Qg}|YkYf~@dwVE|DrAw7PZZ?}JKOc&*FxIR7N?=2@>P6ygoCDQfFjrXL2vGb
zxdE(tvJT5lXO{~<CGdZT?4yDK2oBSImJs1##)E*Oh~fv0m<mpW*R31vK>AoH;@j47
zZ7cGJ_L!9mFnj!?G)SGf7Hd)?E2_O52`f0)P;loSLmk=KJ-QEX5&f~Nk^zuHSe>~s
zU@+^gFH9L4S8>f>eyhElqQrAXqmzv%xP&sW{P%JcM#Y9kalY{=Eg<a)n6|f?;))-~
zm@c_nKD&)0wJ@;U`|pqZ2jv~^lLZy({baNGmvex!YkvXVNE_52om%wHvC!=<Bm*bD
zY++nz4PMsFdC?JZH_LipV|+ZIkPpZ;lE|$8IGCSG%PuN~O=|0pE{j$}3<^dlO+BrL
z40rbclMUXhbF;DZ4baE&`$H%2_D)5eJmgQi^X^ekO=6bbRjJYou51+bVpmszh%UB-
zF86TcyCx%WS>Ly;7ERaUZ4{&WYMV&A9d&BpFKMiveQ~Fg<<9D&4{|>oKTTQYdE8Bq
zH_@$6ov5zSh&dx04Uy{-B;e(H(d8FYqdMWY`{!p;4BPtXadw#krIAg$8mHW-h599}
zI6)oYSZ3<A7lh}^k4!uq+|K9Ow1F|B|2xQKD<8t@w6Cy}s2J)QW!kTPoB)KT%%td~
z5tJaa?5%~df~|tIm(x2IO&iR&z7Ddp>k@utd6^Qso4nU>Rw^PIG(GtmKc^+0zFHP}
z=lCLli<Vq;cCLpL4fu$bp|y5K>5Jc8)IDgwG(c)YUi90<T;^$BU6m(~D^byI5MC@~
z|3D48hX=n8#Ha!LdpIw*V8ctfRlt<*-$oCpRxi%pnNb5U&LEc7@ZWN{e*YF($I%y$
zG{QfEg20{jg8T0AyUe==*a#I6DtmQk#d+#n?ctPnoMaKIm}M{N#1j4&Ib7jc9Nz20
znk$@-7JNEjbG`M{WR4o8=0ccx1v_;9al!BW{pJ9NgCIbE(U7eJ;F!i`{7<6wv84))
zfXA&viCmQ{e&sY~@n<cm_ciJjAlt+`;3R_3>7}q*&o|v#-7)5<x;N3V%f_JMAH(OP
zkII!-w<=n=D@-P%-jg#?f+hyz6>bYc%uwQCx4v48#b+$DRtr)AMmqfGd%tBs0Bo+Q
zzI9TK^FoV3$Dy?_3}|E!En+cq0vPYv`2!RArUww@0PG<qX^CwN%S8x}mEjy~uiu1_
zGhxnQ3=nkp7S;r^gox2U;N;;NI}I7N|Ic3BQo!(~hIOBNnkU1TD#8a@d9Y@VlG?sZ
z*aq2f$DQ!W&cC!rHk|<w8lyf3#)GotlULEsXGx6q1YoFiE(>r>-R&>S_vAK$`R0d>
zUIWeI|K98kk9D2Ee_c~0vGQrnW#MlR5px&Kaar^A<n9{*JO6DYo^%@tO5zW)n9SgV
zY+9;oy2PoyBk}vqN?57R0Z*C&)XeaXvSN^<RG=-nOBIp<7S+wy?PWZ0jxOKUy5*Ls
z1px7Xi8>ML&N%U$shh40{_K&T^>p1AtdnD9(B&MZkysLl%F>eqnT4p2TV@01Q&Sg3
za4F|bC#Mn!ti-S3-$-Lma7Mzv(g@MU6kQG3SHn{WaBO;=E|P1CBNQxKXr`#c)jm#m
zz^YWSS#=&vM5eLO)f!2)!-##jPsyW+Pes7ETGT-B8=gRHH{pZ9BN0&L?3-OO!-+QA
zCf~30@Am-Wc~9GL*T-1dqp8Our7_#FdiBEL6nnd2e+fH$6b#MJHVld5F4@___}d>b
z;0~*pHa7sx^)_y?q`a55B`>&|pDH%gyyyho9k4v0KX`_`+Br*dxh{cmH#)hbu02Lz
zRO`Bwp&(+Db$1CHSLtQo^iaa*3xKHbmot3?^BH_2ngVkub?9y&>mmyul3GU`sA2oJ
zyw$b)2j$1}4PnQCzbu0?B~FOw+BWy8RPOn{r1Kh<vM1}V43A<1_vJig#<@t6kJQA7
zxSGje^yGq~J@OH}Z)3962qL3gk&LO9@11PgdScuzgi>=-r8QGv9E@kzKVsb?jjR!C
zSWOMPY2zstcKY2lhk#KD5k?&ZO&>x1CEccR<Eote*5AC_m1`3~VqF^sp#C5&iLEUN
z;VU(pOI)|;V>GAKX~DC2<u>VlR3H+J!Z+R~0&QvVS0(&c#L>eb>*051DoQ73sOCIn
zu*uK-D#KW6y#WMyv2NGfa@e_2>7D^MClZ6{Ui1wClfTxf_1L~<fd+SXwZaWl_y%lx
zS$#7306S1qr(gQe7=#;%WUkwAFgU86x(#X$9P|cW<2D|z%8u+BZND5_0#S|JnF&#%
zimtvdz!3?Iwf)bKM9||XjnxQdZX8Zf$AEewyrO~&p?tm5-*UaJ8Wx*(^7)a)UW6en
zHfY#R!pffsD3<7C?UfXZXc4vQ_g#aioY#ivuF}uVct=KG|4n_$M<F>Sjo4|RJLU9b
zA(^}!*XynU_#Tt^W&@#lX9>HBkAE5?vlt~yAg-M+Z>G^W;a)(M8-94{zPJ8CwR{c8
z@=<F5OGsb>l)PX!yZ+&SW*is^rs-oz5VnO4_>+Ci@EBGe;5XE^`F)60y-msu)3|Tv
z-)hTP{h!&nq*lx%YhzqcSuHAKxyY*j?lAbGMxGY<4qVrC6=v5C>$RtRqO#aX%r+@J
zi~X&S*jly8n}<<l2#lGs5Z>sdr-Dl`%>fylv*a0cvJQ6SJEW0GlLMOV;E8Tx197G_
zU}oG4+qD6=5R&&M3e-5>*tip)1Ncp9jwNrmPst&>(H`94pgisZvHKtfqwAok(uL(G
z#?+61m<tz5YGWM@c$-faB*p*TA<nm=HY{L;LEvOv-D+cn-2hWcag_uUAy8AS_&_AO
z*Pg?sU=@$-eeqbnO<rl|2k2<dd8+qLx(kg=t+<onK4~;={s1l*n0;pRmkp&DL7BrQ
zjb8BINzSd_C(5?o_X7ODP7vf7pQz}4gW66ucMl0p>i6eIcMQq@6E2@CtSz+asn-3U
z`nnzpPbIP{S5<bbLwxoSLSP9OO$sU_#AMOZ+}+T^e5|_lzvxXJ=)ms`kA;%HNs%qh
zU6?$RQp>yIqCL@|pa4YK?7G+5UC$vAAjeqzC25AkC_t6{sAB^YL*gUrrxWfK+zT^?
z){Esd);5eLmf^>)!$pQ3GL5PLJDLWGoQX#<T(A<-#jPft`xv@)EWUQQ9^9zgOoLHp
zn2<!p1ER{d(pNvVZggE*EGXdo3wHo8<~KA{UY?oC#0$r#ALffU4n2$%={F6%&_$>G
z%WLDJJyhgUfwf!z+5!lL5(@4F#?dBAG(cf?-ej;jOSjfV!~wv<6*_9Jh-fVz-kELX
zcQ@=QnM${C8Hc+_B8UzbS?=7wyJn~td5k{isrC6}2?)mtEPMiZRziAb@4WhONQ1?3
zEBHSI0Y@^Wtq)k=dh#6*4Nl(43My9(xzOi#3q`Urk2fv9Y-~&yk7WkdfOrV!*8Vg#
z{)2Lx(8c%=cSe8zYHoCq2~<oTbL0lT<8FivPldcY!BX2UIdeV1qtcl$ibW>H-vPSH
z$XnIc&*w&C7*Co{gDc$h<_w2Y54wP_G&x>yGU^f8kXy(>!6)S95JR$ea1F!j5&R?R
zd8!@f$my@UCSwiM2m$ho3thv_9el>_pV>2*AgHLO?gBDvZdl<~GgmShXhqgJ$ajA?
z%UUkDGO5@H9kozI6w4P(+CHU_m%iKhVB$fCpYb1~hZ6==sa-Am^iLo$;c$Fz=QR~&
z*d~cM!;B+dS@M_}XSGvrNkW4oURv=V|AO%_&-QgB{X_$$-O#k?UShWUz%E9Us&*<P
zK<yzpWK=s$2;R{1XkH1cmqK<jf*4g!zU$uy2u3F#J0IB2ErnNr$?OO#qSaAMt+)#H
zD>MeUcI)1aZ0Df=AxHbPpjQ>TtYUzmc|Y6Z_vQeVvrRI!zAsJze3>>i)zWh%OA?*z
zBguDvgKR38TdXyyo(`qs`SjJKJvHR&!ae&yj6bT<76OQfu_cER8c_UhA+q57Hz#-o
zxdp5rJl+r-@si<-u({UfDmv2u3jFT~(arq3zi@_rm<G!x+lvRrks_&#JoPtVl0$_;
zF=$1y#ya8+VxXX(?Olv9IoGH}n)QCFs__yBFs}TsWSJ+q%>X(jX<B^o($g)7gA<X=
z7gM+D=#6j}s7$@MFg*=O7&~(_GMy(cd?V*kNvaq$Dod>Oh-n27%%7@;okWXFnIGJ)
zz3QKn#%P~hU*IA#Te|t&tAuL`S*vGP{Xpjry)7@44bRt<*ga*#ISS|pme>g;6Zu|c
z$&%_Y4;1fLn7XN@&T&CET<SND&_)ocUN-(s<;90xKhCK30wBa#dwGI%iKkzRqf0hK
zcADgS4{hX)i4zVUDq8hSU#DtLzAIm8zt2)(fIzSTV_P(F0rGWQE>I*AY_@x)zyIkA
zD2A5ZVdqgi|4U!l_-D%EAy2|!Co|5H9$JluZAvpaMpl43rIBCWf7i8s(%U|WKWi`Q
z5$KeBGlcILtp<-0XB-$fIeKK!dt|yqP@dD7##NvMjIik7_!;c&g@$?LV50f*fPv&$
zMjm9N|It*nf}Tj_<yHPbg%XQ=bid=en0fD3IDP9sGZmTAHO+d-{e9U3^<BY_pT?#N
zvCirXM8VUAV$MqT50wssJCAe4cRl8kL#6h=M|w@^dS2;j)w~g}y8Pi3Dl_o)T(Ekd
z-D!Sr+c@*0<!Z7;5Y#RYq(R(1@0{e0ni?ZVVw^cycke4ZZ(g+|zi%EDPpdlOR%S;m
zspWPTX(l?|G<3<nTSEV-0pRPcr?1mE6;A6iEi_Zy&vUTWKE^MUSIt!zc@^^?ZBB_@
z(@}c2Eu&iQB(BxllzjVK10H{O#oe>f$aEL#9C9E>5vO7%rgQNk_q_UxwM#TiTUV$U
z;7j|!@t=^TuyT8?q13OFmqe6jMxJ(T%pBA8iS?ODc;)2LTS^AvJ|T-)T8DidEjdiY
zb2y^p>zjtAKAZ&cIng(eKP5Nj7uL<adbA_MXElf#@AbvEWv^Ed_@N3uv-m7WxpHna
z8CM2QG;>#Pqe?sml)l_SQS$L`2YOqo1C>0Qq<(ynb2B`+$xz-h0)_fRaN?kyKUw|N
zereNnR5IoH!C)M__SN^prA+ZqoWt{r1^ImymN%-!u87<zCK}SfAaDz_DYPkS=N#?q
z9N>v&9L}awpZ3(TEh%S;(sjPhNWnVKw47y@3B3gjrS?8VgGXr!ot^ZBIInG*_Mvie
zj`-S%vD=JVjCf6VjuyQ#UON<mg%@2N($lV74F~Rb*rG;I;E?cUNiaD%i#L=!+gQLA
zqfgMzu9iDpKTW}$*vdN|OlBZ&vQPJYamzC&9g3naOp%WQ`ws8YU!vasa-BJXHEW+6
zRa`HWPqevqMaVOI<o&V#!n}NKO%XDYps^(QL`5x^`zFF-sg|Gs<`d#ZF4s<>-64j$
zuicgr3;pmR`!;9S#62vxOcm2$rKL<g&rkd#AWuG1Q?u?RuRW@>#n3BeoBiC7mqweb
zfVMkgaa3*9t%6?d-h&eDB-xY#z!Q+IRzzF)7(xS77nc}U)vpR)G_u~wO+9yO%#q(1
zjRaAD<wj{C96pXCQ@mDa94q;7a7I+B=vC*jRq#F{|H@)aYUq7IF2i{r6L{XgJQ$*k
z>Q~6HXkVe=xkkn%&bYB|21Nt$bssRW=<w(fCUc6xzd0?`OGrp6NJmjVbMeWU#C9#Z
z1icEx+S%{Qs<NM0E^T{^!cyj@m&j~z;-yC7MP{|hHZjtyS1jgmQvs#|;BW6x0C#eC
zKOW87xg88997x3jo#AHAwp^rL{`?e6y8EVtb&kd0e0)8FoPAs>)G-xo<=#3e{4qIo
z2|cS4qN3w}neHCS(ItTMN{BMsbV<@YG2PPb8#(JjTFOS{ey!|qYk}7^xP3ukGoch{
zd-GYw;6L5LuHS7jr?tNHy7plj3=i)_%eAp~Ru^|{{rr~nM9lF>JZ4+i3Z@r@D|V)5
zkd#_ue|tXN#U<roo)X79sq>z+PbnfoY8=uF?=&So8SXeV7~`uMAX0kzx2`2}d08gI
zGZ(Bff*-3*tDP+JiRKhiZeywW2VBXSOA--1M#W<sF5nZsN=q5$OXm|y>hTl~=DCUs
zNWcs9ZQDlWD!O|A0nC-y7~P^GGXL@|uvPA6X6zu~EWX0Gc4I;!{rC<vT{hNAcAWC)
zC&^uYs!0G1i%OxW_19lD#$~Y<mU88irv*qvrZBpJVnHcNF(~;+f|IH_U5rIxOLli1
zvMEP3LQ9cUS{D7r$1oI!w}&7+z+HuX?R%VlCZ=<3UT5l{2b67AlNYew0L|5{Fhrb4
z)u6@2tSWqF=amOy4WYvN+KEG3!7BawQIpBp<B@P0*g4B{kSdnG?QDZWibgUs%b};8
z^QQ<c<%+GfjA{HX0_eWy*U=gKjlIZS{yhL<4Ha1Z8A3CAW|!YExPqpVDH8hpBkSx5
zc_K{shX&U{3}~k>>QmNBw0ir__s1ETSUIwf7|OY-3v%(`k*{}Upgn#A1i48sWUrMx
z*E`L7_g)!iZjMlsI9h6uZ-CVhaEru+=!HysqZ34j6D|8|__wVM@{~p9uHD4-(c{4Y
zLA9)Fm&r_LcmgqOyo0X#*-!kT))}=29;_`n8#xmU&H~9($tVWbd(nI(a;@hguc|=h
zHVC)06NG=L0dvE#484bb^S65arpuKGUUpbV&tTBRDL=!-IDRWas{B<soJ}IcDHPQ%
z1`3Ue+bmHr1EN656i6fH`E}kTuwHw7qeZfQT#Fn}U?t8MvV>}VLRllt&YlvoznGPB
zIoEU=z%0<YQdRD826T6Q`n5x1_;78kQ%XMwY^3sXyJ5GkNJ)-*R%P`2eEKXt`%7yj
z_`1}pmP8gkeJ{?IRGNrD)<v!yLB<re9Ss5^R|ljs4Yi$0gW{v8qv;}|CaVebStjep
zmMBYo#t{I%WRjA=MK46pqz>3a9Q3-jF;?3kXWfpCqYw`za;usvJOmTB!3ZZRkNWGY
zNw1%BkKAgK1fUU@->x>Zq)v8rbD?IZ!=DQJPD14yjz7s_4J9zAsyP6I$~#)gIMcz>
z@NRDdA$7*mf>*kCA~LLU@^-hjW9At&5EtBXa;t3neo99zGDO`ArvlVY_rIsM;!kKZ
zrz-81bX;w54n-zMGr%a%&Vc>xsn-XkBl7geP7Am2b=plwe;S>Q%WVeDV5FT+oQf<3
z6|(A3m=DB1fnLM4UTJ_{z{X`2O3oiu&I^1td3KU4XsSBZR0pd&lOxw0oygBFolAw2
z7rx#i7Bdcc+VIsQX#L$GFFlO0@={yP`6T-|bG>%qM02XyMZDRT`*r@u#CM((*RH8M
zO+EVx(bGh?P<2sWp7^fb47YkS-|F!Ld;6m<3;1yB;FBY$j}Aou)4FN(F#(jn_-e${
zcJE|r;`VLx0{?$7?E}F^beG~3TQ|B5mYv5Xr*~yJc%uHCphGztAnmG3b-gM#2_X!O
z{tiq6S^*}ed^bO#*h#OuOSZ2!YT2q#Gp|GL^^mp)Z|k~=yr)2FbjYgsgP`B#ffL*)
zp7pRu{#>mdz`a}~mWOdSVbsPGNx5bXXVgUS>Bq{YlVl%)?*#4(iFuUU0oo(R?dArf
zt0}!Wt?J2K+em!+aTnMjiC&2NP;Ns=&5~S3@G9LjL!t`Koh)D*ak*-~h(Gl>!ym%k
z=w}|H9<=81{qSk*Jn5!WPF~1rv_TzT$@8r2>IJo-F!!DIO$mtwxcX42S6;`+<Ix<x
zKzL}p<7OZkXJ#ZB@2J6?=;UepA-RirKuIgv_e_blEplkr)OPR5ce7CiBT%80{Uy-c
zs%AuXgVoA2;V4~y;m;<-6i5?)%NyCO;bd$;yAB=a>zjFzR*LeH0Gh|Pb4Z8aSe5}l
z=-|3ho>vr*dAlPzV00Dff@cFy50;&O3a4S;kAkhCtJ}??enTqB7aO-<!|tE~p=Xjd
z#H;rEM`G9N>o@?y$(Ej_*64|;{yt`tbRN~jCwXg=+u$94eC`8Qy=En8b%gH3_px%=
zfuJhAIhmRQYh%m9;O4;_1xoQgcrzSSu*>mdAwS7cf5^5_!nkAf)`{xJlolxkr|edj
zNf7>KUO0|dZVNm#STc_HWX;H)wW&tMIbX?~&*N+?w(r~L$V@i<*>BE{y-a$Gmi;oN
zxud<xR*@Z}k*rO$I?k$66Q5Q`wlm-sA)y{`;**XK_)E_F;Ey9E`UV9&Qu$;;8|to_
zgE9?zyGk<s1$Rg8oCl^#b`UP)ANTCWLS2DD!<)%q8AmsxZR)9~`vrxb=Mv=CNeN^!
zp&v&SV0vYaF~s|2&l*Cx&gV!5@tglKFuojrUalgY4`W<W@S4Fx*c%W%<#kKA3@(u9
zS5pAADf7xK>{|1*?x;W7)v~;Wq(qP#hOKvcxOBW(atu-zsWD~<KM8JDfY&pPa|99W
zG%Gq}3Gy{-?7?!+i{E{SKYYsL^5vtQUgOT`2TN^^_;pw>8v?CZKDl5l1*kOj;13J;
z9P6CQyx(~OrMoDr>QSq3)r+o7VnIEpR0L8~%cyRJiAUXD0ibFLkC&?Xi?(B3NlD`D
z>c1|f1YrHxNf@lsuy%l8m?j8^hAd-thl0(qU^?D~GZ&DLBaVx(6IY8v_k^p(Ts0mr
zK_l@%@qux;pEiXDpJ<gePtyx_5pvZ}Qd0#AtOeZb^y8P`Zfns%^K1#HfZb!Cu*NwZ
zOS{shMu)N9?XsSlD;!>Z)@E(FYQLKj>g?N5lGp0H)MV4TCI8OqsSsGZ=(yZ5E$3;%
z1eRGBpD4ULLete+2;mmO);t+hFeVDcj*}uk9a}1jt-iht-`YY!B($h|@rg<k%Ej7!
ziG2!V!4o){Y+S09V68PMe)qjKw25x%a)omQn_Mq17bVCkfLUWVql3=_Zq@4IC{p!Y
zWYcMM%zJw<++zoWs(I4?z<0!pG&Ohfm8&!2M<lrZ>H;n^w=${B;N?)dML7#&WJrcz
zR>RKO5u))201fK>*~Yk{b7)CVUTMn3=?Fb{PhWvUW@}GV>C*M2e>Q~>{cH^RC7e|+
zx4~omWaP&Vt|WBn)LMi0G2r}4+L$bZb3g_7v*FhH8qLv%kpoue*FsIJqSh2?s0n<n
z3}{+Yfwc6gDT-pO`Tpc|!AbO5UlLww0y|>f+>m+?S?s#DS80SgK(TpF1SjY5<ylji
z?hbdUDU8W3#nb40G}PwHSzeDv7pLr0l_*h<DlB2mj7c$&R6&U4;<Jn3<9BPCdsVFz
z4SZj_pZ2`2OajW0s48jM)ng-N(=aOPaiXJghCt^$T<m5!2@}El_~1#q&tukGtmoGT
zZilz%C7jkTQV)8BGvk$rUqw9+c=Ae|Li26#Es`?3HeT;3v*fZ*n2kdhm(DhabJy4D
zzQJtzWm+lJcRmJxS|fc(_axo>=wnv=i0CW(or4R{Tyf5VgYA^<o&|x{i?gbNoyp<?
zx7LZBe1l}SK_vyu3+=;CPe_XLGy;w<2YHG=&EB2V!&Z3EXrWoq+ElhM^vLK?<(=H8
z65}5^>%lK=ncr{v>0y%<!=L+2pERfr-7ycr-xR5+)Dr=UxZgI&%+*dC=)#~e-@i?7
z+dkg8+BxCGy@Y(E9Bi?A;lk->VMnK`!Ac3Pl?kREX*kv_iTnrSo`BB_m%077U9nzl
z#c@0il@Ckiwhe|@@E%e4G$-QNb`&|2EugPLzlMKn7D(>0PezrbI7e56{#<&#gZ=$E
z-OsT=>xFb;O@Z%1!B6fuE7{J`r?7lp#TS^fq0^0kQ26Y36_`l8ax!#EbQzEkqkdfe
zk=UnvoiZa1Yf^}cX>u{7n#oC}FC@ZJ3z+mcgWmV~1quz$94g0UgdT@oZF1%d5sqzo
z&5_udgghM)Grjm)3Qb@M()jMzC9W$L3pdUv3w?Y!N6-D<PS28V;RjpU$_{U*v(d>O
z+3a8WQMjc(^}3ENjyVk|acg#dM*qE!BqM2~KQ2%1ZOk2)>S-~N@a-Va6Gyuk5tm1b
z8=s^_AcFTeNl$8dB3mAac};j%)>|0%>?M1ouGJB7hQy`gSB^FY>raHhHp_MCZ{a=C
zMzOrdz%xp)Qg+e*#gQsxnV!vVBl&=@B&<yl=ZWSiiSJ+oNa)AZZ0?*ZX~XSwF#QSu
zPhx~Ytnt$hwp_jP!Ebl7Bqu=$*GEC<w){@L^;_t~(r2e$3v`EL-Al(ZgT#0|GHH(@
z4{ON|*l@p4>z{pmSnTyKO+2=3`gwq1LCjCSR?3o}ARKy(4+h3Ht#7B#Q++QCNcANv
z!v4YNcnZudt2+3UA1iLCl-Y3x4Ar~TiZtcA_YbkNrS2>*wY1^ICu;?WK@5fH#C$xy
zDc{G6NW*(}u(W&dc}v+cfd_EXos31Dk!RXIyi6Q{jj(}f(`~fpVnSbI?4I$X5sMaB
z4XvM}pYngLAqlxU0BgQ{zmHk_V9>c&{vykCaqqx_VG>a-5<dX-l^-h$)?UJHkAB|t
z_BiR+>5<-Y(l}%jk-;~(=#R~|Xg_`j28Yu5;Gnvf*nZG)rgl`%s2OgpF95&RNpCQ=
z=H2zD=&-~K&_Wpp3H%>fZyi<D+O-cWY!H+V>E3`ymvl)tqI5Ti(y(dVbf<KeARsN>
zjWp7->5ffzeT#FRbDrn@eq*dZ7(>U}Yt4JcHLq*l_p)Vn4w7L@#|vo?=UyM8XzEKT
zEFhj`8A^I}A)rubQpl8wk_aA+Yg3mXW9ac$Y0a@wW0}^--&$DWG`%BsG^s-km-Gvk
zS^m~sX*`77c1J*B$8F9*U^KN9di8$)HH+*Qka6^v-;OzN+9(~iW0M_r(G&YXgYy)_
zIaFVT9S0l++Oo1M0vif19RmM6$G<PG-9^sGt*vQ4N8+UZS>p_{<_9}>ju|NW^Nr^8
zuM-RnY}?n-MNcam)^9a!=TJEFJ&Zidi2Fqzl7Set^agN=I?xA?rjW}i59KLjfwezL
z*=L&NWF<6EDk>GHgQxvECl9NbCl8e)8ZXNFJ}0r)IV^KEhRWkmLJ7g5Fzf|IvdB%>
z9gGUDUQy>DDdfv>dKTQXTS!84lJ4;{*Fcbxr(?}BKWexcLXp6NunNmTItto|^}DN#
zPmLF~Cdta+2(M4X5~mm+)E{K%lv|LhekRQDNc@0Q9r|UiCW+Y`tj0bDKPpq2faEFk
z4~w%!%AOh@1uHH5@>Fi^g4ZHz^iaL`FsS5t|4PwE;{2Q<{qf(iYmAxNvtGJB8WV_X
z!y^xVOi7&G2cs#!6&*-fce$L#zwfv+T3r$xVeva^*BCU~z2TzDtOA2i9|~I7Dd*!O
zn?;a)&#|&A((Z_Voh@%2BqKjW8;H*?s%(xQNNdY!w8W@<)>H;^hVawOk-lP&r~$Dx
z`D4Z+^{zAKF8E!(fe??3Aumex*IQfJ)Lhgl)*9uq1-Ysvq9lRAIJUiAdszf9TP3Ja
zpkq^rbmVB+p!tD0D7Q5xPk==?jnUw4Fn$HisD%G;WW+Wx-9!15f-s5_%Kla~7qdC?
zf#yIX?VO?_UtrBcwH)sKKsHaTh;Zj4|0boG?3Z<-AaF|klqa^at4{3;f#C-Z-5C+b
z*|)N!qPN%Cd*maMz%QSIgoB$%haDzjK3wEZ>&<^g8`HWTX=%_|m~j{77ib<9m!QCU
z_MVG0@i(CZjt`U1$tJU^KG9(%1_9q@(tIo9$3EKqTDtwIm9+GidkQH7)DPo)Q>DKT
zQ)Vmg3b|@sWK0}&Aa&(D?JMaWo$VM=!41n>wpm8sMGz+?_RfVSJ=t8w4!*X(&}JUK
zuB{>4Q<CW;(s;wnB5P;|Y6`Z!TY;<cP5oZ|<yR*Op@d!^AVZMI6%mYZW^N>cm<;YD
z?Hfav7{))JdE+;%Rwc6Lz)^5%Qe#B9u(RMO-nE4SzK$Vyux#?(2NaWF&hQg~fS|SS
z1TOxANJO3zCA82A$+i~}562m*e5zU$Y<8=XD}iNV5JBQ{ztmg>!#!dNJkRBZbUUL5
z9+bF;krqsJSJX?4`6nWF_h|p|eado&SwTjFAfd1C4_#k%gmEzQ-*hKO-+UH44Uj9(
z;IwM;3Vq6KLBo))=d^J=LgDp8prTQ)OrEjb{YzM-qmS(_|3Uq?(h7ki*m0P7{|nna
zRJT5ky@$S^1ll*;+iuIHI7e--@{CgVMm08BlctKrB!skVu2iPGG!#kiFRKF7(@vua
z$O6fLGuF~?l!Cph*Yr4~$KS^>A^wi@VTF@l<@fc+CdY*OU!*UoP3Vo_0}<PfyVYeo
zb0QGck9tdfg-=7=c)+PzcMp7HZJrXkOs7)q9kur3PGitT)7GG<;>Y`ix4gBx*D<*R
z!U>N7-$yG76N4?^x?t2Q5x<7T_}>O)-dXC`vP<OB3LY0gk{G+(IO~-V#89>x;|N?5
zWf*coFY!(IEAEh*JiI%~GDxt+mUKTQ1#b<%a>}uTHP`J33^N|E7RPmpnOh6|v3o4@
z{3w<z5yi`AXR}coH_n&I8ZOHLUegM9s9IJqOz%0F2-<czZMhuXpT<TPENKnXD;VR3
z<Nl8JnyK1zzQp3Ec@#}6f@49djl4ibc5Y^tKN2t};9l7pxG<C~v*!z!bm6nB9_I+$
zI)~B}?0sZx?VeBGjP-*Y@HRT2o7ZIokt$qkh0haNj3K`v$=P38qN!+Q=toUpmv{zO
zczvMYc~C+@Eh>nP8g7L^hIKg7_M17FJx@}1<E4Lp4!fy>kGPcmVZeorg!UOvnh@_3
z<uN~KHhvm<of42OxPge5C=_t_){~Z_M^}f;yAC16#$*_yi_*{u-uBj7p>4YfXo(|u
zgP33ytCq?p!Aa^z{XbCRfDfKgRP@beiAfydbGNXHr(Gr=>x<9V{zf6_e1tBupwn&#
zDfh}ndTY<3!F0ZNrH#jeSIZFF*grPfHg38zGz@%NG>zw()jTmIxsnq)oh*rZ{2Dl9
zJt#jkMj{*Gmswl&`?10Eq(^;MOH9K4mK6g`q_`9Zt*sdKZ})OA)1ZOR(H)&np0QR6
zy9nrgq&~mLJ3~2I%FohkIqn~j6p~CcyRE}x6fS8f{j=VDF=Frb`Q#=+!>{?^k3oyn
zF-yj0TW$F>%B#bl1Tw-+lzTbkbmDqxx|1GsN%nNH*Va)!s^`2O`1%5y@a91FstDZ_
zp1=T*jG-k;b^E}6nWS_c!t%pyC_8$vJjCyl&PD8BDb^H~@W{y%DI53JT)(O1AkQ+#
z`Q@Xh(gCIE_Fe@N9R5wI^5B=Db8o!c$^QF(7k{VupgsmBuqZ+{YBd#P_jk8+-mTLY
z_~^xe@Krh94-b~pv3brp(6FKi`F=+D#@UN03h}LygHWCOKkz{Ok55_8gyUPk*n53`
z1prMDjwZ;~ANWR|vOkQ|tM2Ca;`7@%YXm#Rv<%LAM$)N0BHVQm^~H~FGM2X!3@Ccs
zZYy<gf|+5zY0p(;#-;=^?}22j17FGd%A=r6F=5Q8J)sXq^`wajnJ4q3Czjz;vGLqF
zvXfOk1^v|wtA4~HPUd5IsH<xiKC`cv!A#R9R^%@PlqChxq-z&l0z6lG@*POMRKyBa
zf%E@K8GckA2hFVh-fcR(Ca>S$SXWn5RrQTmxnJec54|OnVT)o@spm`f*5!H#=t(Bq
zaiF8@zqx3=r(#qNZ78@ujnR;BtdLOk*+1G9stWs!3;xgy`zsIJ<625x^5N4Kr2e_X
zeDh7J$-xiLb_U++rvqkt4hr>g*FDzodC|`9V`~8O>&F`rhj_XpIR_2-%i{z~03fRU
z;JI^9pXCntrqq9&AbV$j)#<zTG~ZKY`u6V$`;CNG`|owkYE3GQ7JJK)P$fj5FDJ<k
zWy*Hhv%4okrV&m0=pGW4#zfYVNT3fB>q#W~BFK5DHsQB(ZvM|drdM=72E-jGMSG6f
z&%Z}(5;PB8|4sn8bPLI&7EExrwKT40h~sE5xNg;Pni-*tNsXg@vAN-t2_LQa1$Wka
zXN&A5sw9}Y<VkQWN6Pa3*g7{b1OQSAZdG)^`AQkUBp;ba6r}cjXSeF9v|e^6vyZrD
zd7H!*(c$y4ART-sC6i$H{@aVy)W*)>*=bkY{+5U5Z+6~%COG>vR<8NGz}(q!%xmBE
zmFr=xt&Dh75W-C#l-1g3>0QM-(~e@UU|M!Rb$+XhNIL3%am;i#OWYEbF@Z(1UN0?x
z)*etMR(bBfcXWz{Q>jw1EKaI6MfODBQ<?29gH_7!F)#gYvQBWW$-ME&cOJcbO!-Sg
z?k>41B<;nCKpKDlJq0HrjGgg9H$(o$v#9F&9vr$MV?+h5kjTo$Z$LZ<a3>ZA9rX%L
zj}qdLEh4)I^B%lcn}i&0oTy??t2SyohOB-4_N&|VUH_w%i9p0h9k6X2(iuj@CmI3%
z>IFr+jlyc^If2jd>9a!{Ko8dywd*t#by)hCTHZrkx^Wo?v(qjEN=+rB;F*-wP8Jsy
z9N0qmZ2u~!swq;3jTx0ujeC;in6UNOs4j7oTBos<C5zYh114s+sXc)YHng+qe%;iB
zIupDmiT7(8TYIO!Ob!EQJ<1hquG=KlS6mxK&aWnlSAIe+bo5!sEGbHwj)%SZKs3X>
zwsjxO+fZ_l$t{3e>#zx|bn{&NN)CLv$r9f9)5C);5NG||+U|GPzN5K9>{_1d0AcPK
z^un3#Zc_MTjwAEA&@Oq~6ZJHzNuc*2a#~p#hCvE8Wqer1zLZD4A0cPM^V%QzIhz2Y
z4*3$;>yCjs@yGo>Fg|$uHVf|)Ke6ncnSo3j^{B2xZQhW6q=>oOo0!}_qZ&jXTh?@;
z+0qpN<r;oPRe|_J5DNva%i^eIA$bL~0g&9;P*4vq^nC*SRgAjC(<4TyNco_8B^Mjw
zYda!uf|VW>Y+j2>@*+;D8@FSP5$wc9!p<#kno!h*<9A@PVdt*dsB@#rhrbfu)?Uiq
zAeXGT%&RknLQ&UO+?Biopj+~-PlSKA#wo-DyvV)2m&s0Xvxc}Ee(iixoIyOCgB%{<
z_)Rl|gm^~|oeq(C=SNNm#w2aS&!6v$K9VpYO8MNBdVW*v_qXq*PkDGt<R-W&D1$uL
zy3EfqcP*ex>Z*?uEQyd3u5B@S<9-{Rd?7g}4E_TzD7Ix<xYQ*2U3oC{wJvXeB^Lg@
zo@J6ue)E@;G)9po5lgQa0?<c2ah6u58&0wGh>WVa=ht!s5JDCNf#2vJ-{0_p|9HfO
z%m@QGoX0uG=$%$h;1hJ}b{n<(ozx}T<8aQG3OFnK*1|Cg+QWX>CS<5UWBT_M{tDWW
zTadRD?347i7*Wba#$p$}a`k=(dmoEc3IUO-+<55BSa+oJ)i~KNUiO90+mR*JYtXcq
z-hb}^{DDRVHI^Wqb-(-&&6xs|$@2EYD}7PJDdV9o`5fxVE<l|x9WxqLITU1ijgLaV
z(eMi%sr@9%<jvVz|8e_3(TWR4pal^9=VH4BH61E>pzBjLMophKC9#jlIi3tv-at8p
zAeDh2>S)o~4H^zFTK<iODR}x$q^keU2Uv{Vo6~R2Q2;c1`p*T8p~@ODwWX{*9UiAV
zDG7HI+tH&)fbH%`edB5RrGk?s2F4qz9I};z|B_##t(>tLkDQq(z#2ARo=|87x14)F
zHlQ;9T!B%doDRG~jjKs#mArjw-gHR2Hi<hOqo}#Qq+PFZ2%QnkQWs<A857#%*E}0p
z_faObB6%l2;*CWoKIWc(FB<8r{M`2$esErO*yu@4kKijLT7%fRpvKtl^H1$5DD<L!
zGFv33;7#Aw5P>Txu4Ho_>yNu%k-H8vgD$WB@2$i|;|PVD?}F28FsdPhWrX!4J<$}|
z^ya4SoyE~@Sh#lUB8)`v-6aMNm~a*GlU<!TvxT*zVVRb5oB#W6P*GaCP7yuN4?8J{
zdt}H@E4xa3;g{Kc!aI>hh9as3d184y<M`d_v2j7V)Np0-fbiPXsW(5V+AAn$jT-d2
zfo%MbLq)f-Vb6F}s_W0|y(S~K#CjO_52{p_ZNFZ;(r^p|<%ElNsz;fMLBKse&xH;$
z+|-^SW(8U&u^Z`rMGuD2{&)4ZXv$lglrk385Maw^2Td_A?XQH<VMm1z7&ekLPl+Y2
z8?5nlQcZvT(x6pp2`18!b#ZhynwHq*OSW>sPyE;3z#rl=q9*}OKOge&$bal@UmFdw
zA0_SPTiywXyUJ#Sf~2BECu_`;6COfk<_WNb8E4@#NKQc;ILUG_BbsF(7yau3U%x1c
zy4~Dy%(|?7z=Bcrc5l|}Kj&#;&m&mxmx=%)ZaJ%LMwj6|>taY3Rc64uuFn(>O*QYv
z<8Vz?rHcN4X2QZ6#me_tB%-z{>l+wHdspdU(vPJZS^yw6DwUR>+TZlm!-2bq7c@Bc
zhBVO0D#}IoPmskpmd)V)>)}b1qcg}bs3(=Q-{uQ9GI#?;>`H{RiE%lpzvLI>7`s-K
zbsda>Q%2?NE9PNwxuZ;4Mj@@rBO|JR%?uD|g3w&GGxg(BcS1>byj7hba3DnHtW3v!
z&jbmz3jun}ENwQoPS5@|ia##s>lBxa`NvoV!bF@Gxod>~nnuQO0+qD5G|{4lB5tXn
z^HZ#E2djKHMXFSD?p|9o5NdfMyaNl&3G<9toJzuLf_sD#jl)x_&_}NE-{4?lLm;N!
zO-EcmhPOK~+WIbPaoLoy8^m^;U9g8_QxMs7QA3Z11kA2~xw{rDZjok$o`-BR#K!mZ
zYbvokvRVI$eds-4TCLP<z7HN-4FIXS;s~P(*qsXddMabQwV0qYCIi^!e&J^&gs1aW
z?33I+we#%j#SN5jYT{`g8rreajsID68A=5N3+=fdvs$$6x|7|cZ(E{C@?7t%jWQyK
z9=VvWpBG-&Cw9`UH1zNhPLlDhzBd!3H{q*zY~cQJoDS;I(K!s;(_Dw@qHGHf8tLxM
zW^A|T20Qg}+!b$uhk?%bS3(Tp=HqcGmDFc~NHireG%{is@aW&*{7;}#G9lay?5ths
z(T-0{%~mzD`+RkuX0Eh=g=9Q7O6*EmpH5Pf!sDU+n&sh6`03&K4JN8m&xIx)@%g{;
zDM|=hU@eQ=%n~5h_S?pA)7AaKBfG3D-^q)gD#89#1MkACx)C0G`||<a{utjvdY&cG
z^KxaD!$UQ&DrNV-t0ju?6r?>Tuzu!6pAV|Xc7It{L~>P%S8}5^;#EQgWtXD#8R|?5
zKjYpkRD;ahjWHz)xHbL1cMuR9C8J-{RIzok@`Kk&KZoC$wHeKaze701A{vZfPCXA_
zGtYQtU)d!bfiL`mv!)VzIx%GG^Xvb4qc0**8drUHmtOYoRv%9mvvqp*a996|%o#^|
zYZ*f{oL7HtA+Ck2{_wg{^5%SjqTx1quohh&XF>2#!2gsCI~?9nyWA0Kdv|A(;;QSt
z1~&tK?37wd*rMN_saiPT#-=JfE}1cv^96=@$<OQ^V!Vo2>{VG;-^ZGE)ZsOz{Lj4z
zPe5}5%~N|NpQT@S{{|?;L&6irqbZ-aq2#Y9PRdcffQGTZz-Mj={6|vIG0)_O)n2R^
zOb_s`v8Tzvmb*Hf|Mg~eB~j;Ik{jh;Q=J7_0>0}~JW+DR^=dAqB78mXBI=hpO{YfZ
z9crEGD}1;Qou)HH^oB>$u{4K1|8oZ*#vMTz>HIVYq_5&$)|Fhm>PdSGo5rTzoh84~
z1h9o6u3dj9H_GNx!|&4aM2$=yJ(eUTn9<47zj0u=hofS9TKfS~{cMcPxQOk=uF`DH
z{dR@C<)^4La%yqM2j`xb9Tq>*(3E2YHyPxyQZbgjXn7c6T0{T72=Ex3z%h&hYwJS!
zmCbo_{LNzK7DR5UdFwQ)c8jI#hyjSSQ0U`Yl_<1QlLVF7W#r)1yQ1k%7FfK8@Yeq~
zq73)2EdAlGW+V0t{4eDoNv$##f28xaTJ}wXlzD~4{y7WaxiqoN7jkN-1af0~t2qr5
z<pn5XqiOzAJ#tkI*A*3@0sIpb;YbL={#|p<P1?^R3sW1A@%P^;g&lcGKc9NY?j=_T
z{@<w*;LZ<FxF*Sr<<SIF{rN4?ipzTlsB#(LjsL!l=qH>*BlSM`Dt7`Lh5czUxjxlm
z0ME6paoiK>NeaN9w=sX%%_V&H#;)+f#rkvc+Tw&54F7Ip8N(OH2_D{efv@oYb1y(Q
zAcelSNLjB>?_GP+VT$xKfbb-|+QTMxpM<A(eu<9~hY%G&90oD-1K2_X&JiaL+=`!7
zzc-lRI0wbOnEn^J7{`g4dA)Fw4k0b%MTcR3!bxyb3csLZm_Ky+gtJt5E&t_r;I%x{
z{JEQTD^hOX-Q}g02%TA8-%#Rk%tV*J-AI?qe?uPNY>5Bxn+{|@AM>PY4`U$6JYYeI
zE$}_CU<TT;R+P0L_rSg?3V*XM+safrEe%*qf&^@gHRF@QKUp3N9|Y_Ri(zZ-;P40S
zmv6k{+VB8ax1+2ZEk1M9QA&=qTJP?iD6ynl>`c5(GY(apb(+M%7}V|l;g64E**~V9
zz}Y%=H@m6$IQveUcEON^O3D)pj2YUv|Ev-aoeIfb2`C`|hfVmLDUOo*_}0p#RC%n%
z;xfUqd$0jc<ey3rjD$dpWBtqlcZc3mQ{SXM<TlZD_dzn0;%y<*OPoUhiUo^AWiM(U
z-3@eg2_f2ZjJX~A^VaG@+7<qvWQL^%`e0k=as6^|_@mW@|5oEHGr3~{UfJTyoTtUW
zav;l7+NzP`1PQ+A>@(f`zJgtP;YTnSef6Free!>6S0Qy)!zyLd=p;#VeKV))V#KW9
zq2>cP0BwMT6w5ju02wq#LUpD?2(nJiPv#sESrd66p<BJ(rn^wfI>mqOybOv|pVSF?
zVI5ONDZ$6Qa#Qh%@w&c`B)f!`3d4;1ak)^LbU2k)*4_G=kf6ORshnEsg9F)c6j0~C
zi31u;Z&#x2ES+x|xslZ^(@c03ayfj9rcXsxLMs+!x(=uwetj~q(=c`A1k;P(Y@xa@
zU1b$r3m2$Ej=YV05L4|_|62s9eMM!R{mf9lW6;V-2x5U-@vQD446a#ksQHJKqT4j7
z%0Ep?gg_qfrD7Nnf&@K`13kCi?nH{R%+vk5UJ3~L+<FbUMO6M&AUNeH877ta!9(l{
zI(H1;^Yho^D1ZaSLQL=VWI3piP%+md+Xl=FXtj>KdJE`~;4A+|>JwB65ES=kMCE=T
z!}k)~?H?i|@)o_XXT2Bi7l`dCPyq~!qv@cNlQ#mjNbnRoe4RW>!lTEb!|^+5ge@Aq
z_TT8D_G|0s--_%k0FLx;=uArNa&2J^NIjR5Dw_?nqymg%Isd(Ba#7NA5xvf->Et*?
zV{PZ;+d$5Dt^ecBZH3r}RO)4cJ>z)+*%s#69>irDp2hiwong6CTKY*KnYK*Pg%sNk
z@w<ZHxcH^{?1t5%?)pks?VA5nPuV_#xTJ&g1>}l7GQXG&3Lo_oGiYDT7dj^pM1Dlz
z3J#yz*Qq$yu5%K43gw_GfAPYRgSit$+!87Fze%i32KzCx47AesUjK;csfpBQv0fl3
zyNUrMPtpj_X0A0BfKwc!jIP~zZQm_~3S(zDJWjE^BUb2>lQY~}5PkFC<su|PNY~G7
zGSH_NFha4i+y~@~0{(^kd(GzucQo!&Fm{ewdb+Z=fRz@e<l!0UXGdHsH~M%p5%&G4
z!3P5J-^{=L-&I2+dCKj*$M=pA(C6eDd;k1##t0j^pkdH`c*d1OxgCLb5z}Ugt9jm>
zjFWh(K`6<Bz9-kPgR#b$mJm-~7xw4BnT+kzV;(Xa=_i)=I4u%b;-y}>tH2|DNbkdK
ze*V>Hmr0rQJ;)M^X#bDf*bbMh{bH2OJoXHJGvC0bQiZS$fvp-Ph0VYD2n`)jzGP5w
zUcwoR<Hu8a7L<#8yDsm=pNDxf9tRd&^vufx1Q9#v+hQDbJ*tSLkNX<_nDArB9dB+>
zR<b%vcg=IU`2QzXjKkabVDIRAvqcmRRvE=K7ao|A0-{tQrx>9gH_~5}8}C-RJ%5}`
z&j-%5JOsQjMbZabc)o6uG?$Zlj$8Wde=1U28)}-BRc$!svtP>c^3s_#5eO);XR0d4
zcoyd9X?#&&=sWu8*6USjc#vNJJUw<SU!aHPi2r{IBN{%`T^=%_m0fW?LDqv8GV&=p
zCx_k&g{VlN?SvOd*eiMLbGvSfnb6CY)&Qfmowic8Wp_&K|FMn#m%uK5RV~&a#*x#E
z5*1||F1&=RR97zmMRy7y){{p8%}B5)0>NTj*l6<ufm948@_8icG-8O|zsbXp62t|b
z!nVYiBrDj_aTf_N|3KjOGGl8u->y@qnP)>EhmaKL2$6ejc_Up0LMI=Xdd_GFrEm~f
z%SCZZS<P2EAF~Mb9%r=mCre<?F6)~bdT0{$lGt&}>d%Pa)J(d5)FXE8nzr`S0hF9)
zB)Rvyt?^1%-}iJOuMRyQ9Xc2lfu-M|k(lNR6Syy;G?&jWSFmnoyZ<iK5XicBfc!hA
zZ1_nDfnCOsX*<%JNUX%;GjX<nH>>cpm#WhNl(6ZJR2B5dIUv}EPUbhMxuGoGcz|^c
zux2FbbTPplpK-P*pfyTSO{WX?Rvk>+NPJqASb<W3fm;;fHFQu*dKFbYR@-I+x`?Eo
zc{O9YVB8D<PY<SZ>5oSn^3H`#Z^ngk4kfg2N_>u+;HnAa1D~*%n+Y*3^w8&BW($9_
z4{(!vLj%0YCxn41rg+{fL~k?#B$p4kr3OL%yVoR-9OkGG!hX8Go160YiCQPk6qEJ|
zrhZeIhI_v?Y%o?gNG^t6+*w-OIw)V@o7uMkK?VLKL|C?uMQ(E;oY(nV_c$5<EYl~L
z(cnvk4tLGDb^F=o7QQ*Y@`tg<W>ludAjM8-_Kfq^*qggN)qRyEnY&-EE`yMQpf2?>
zG^tP~-u(RKC?H=Fgl!SG8&e=1LG#FWR46Ys<8mjwLggN3=!0>abnrGkQHWz${Vmbi
zE8%`b&Cqb)qLv2d@co);gM+!#@mi{=+sxY!(L11A^B~9>jU)y@Q!k-rkZ*Fgmx@W@
z&KBiRJweBuwUGhrok&9`O=*O7)W;*L92+CGdax|QFj<nR!V1g;ivQB7azW=ACGkAx
znP`0cL$Le?aiJ+kj$CnwrK-~;*?N+vGXipSWrKMiio`5>0pWW;a~b?6u!_%}Ep`}2
zBshc^K;lJvHkmEF8LF0v6XJnVuzytZhM7UERF_L}L%E-Hr})?tjO7U8vRN<oPy*eV
zczN5@=z83TCy{VIlXxWl+T;)7e`UY7aEGI)uJ*)@o1(;9C6Ni?Q=6^SnGUY)U~AF!
z#dK=qXY)7(YN?5b#Utk79Jv-RKh2SfISl*W88%YTz3cT>VU_U^c^mCPvjz;fffmA*
zwQcu|H$Ky{`$yF#-3r4LrY<zdqhhpxO8TQHQRAF6QOSQ3jVbKNXUp%f$@no&y%4Si
z?6OvzG!fNc?ET|pRyq3Mm@I+n)gpn{yQxQ3KNIez$a>P+9lH&>8I@(M`xz@QLL$q*
zlw+f!J(4zo*zo8K_inx4lCeHvi3HQY;k2iFPW2z{OHK1>pZyu)$07U;I$d7|S{+jl
zSv47qSu5G&`uH$$_$CJMWHVHUy+hCPO6xzjA<BhA2K-O)JY#7|DA2vKaq%YBy$a2h
zZw?zL=ayqO&XxFn&$9rX`}*l@zD<zOivioOY`%oS*of>a#Xj*;SR%ah01zxk)opM|
z0r%PZ(&|pr?Fd2e9f)@hD1a3BMdaxu8Ittt{4LG=2aMjS%L$3A75q)Uk9BfDGA{<*
zSDzVPQsw!Is=#6*E<AC2oUNjkC&-wK1cpCGw(nxRW5f!lO!LHFtEqgA03Z{br##sd
zdUo;)DL=93A0pYbWud+G*dQ22E<XCQ5W>yK=SOF`e*4bC%#vxK<(G(l6?g-e@uK_7
zjV$F9>XyP#kbw{8@<%e7vt)`;otNz@cAWPu7{At4AMT6n!RVad<Dv_N$lo`wytD9{
z*EH7I4E<Q5=ggx~hH+O2756FAo;%tGKK0&3O5wy__f<YLn(B^Lch8K0X@TiD&|-9R
z9TgxfdJvu_mS|QzkE`(ZZ9gyf++vyvv*7SN(7dF!3tz?^6$~hABhfoSI#p|NKf{rg
z4L>L*x&R6xz#Moj_-y?Y%E3(^#y_zgB|XXFvk`-3>9VY5Gjm-SU5h$D1GWPLmv<ww
z-UmqVY~)Fk|B;x-gzd&!vDo`{)W8@3+;*ZsW|W#wGp=wbd_=rOZP8rN)3e>zJFH~J
zxe6it?Mi@)1iwZg9#M^;V!jk#%q6_yHs0_de=E|xa1kSKt`jn}_xZ2Mp{Oq{d9E(K
z6^@9U$Wzba%xI5wTr7O+dh}>)03`#g8?hK<W=SYy%jl$CB#)81Xxp}OQpx3^9}f)O
z5r+YCD}dQ$C=W8~SL8&M#OoPmhzMJF2=S*PBoXL$Q?dl)mS>41Ai-{UKB?HqI^&<;
z@aS`exx)h6X;HggJ@ukEs@<0+%jMKRno$0dou$8);@Yp{jeg&vPrnifXB#+-WS!$E
zp$I%$Rb+2T?3%nT!V^^4C1lc&rOW~9D$ZDKLDcYi**&i}??ES~<>-^Vl%(w<$@<t3
z6;UQITLQ|K0vdYE&#LN%&GNJLg1Qz)q>Fpi<LRcrph)X|DfwvWHR28I3VS<Q1a{da
zfK;p8ty`^aPpZu~gsF)=^LT_cT#Ud03o+CWPqH0Qy*W92Ysli|-XmeFei?b=T8Aei
z|316v!q8PLR64)4=@rm2OyFp?oaf@ui%33LJR?Euyg<(FXs8esZ5DhH>5n$F+aA{8
zk!N@}k}aU$#o2ZCChjEq!yTeb>F}dI)(Cn-@j8)=76V3Qp881#qBV+L43~)==-zK2
z9yuQ+W7)zWqNv`t{6IVg#WPf8s1CAC<+^#!cl43V22{rP0hD7gwW<=qn=t&o{GPRP
zZ<wGv{YvCWy#6^wD^uCWi2Kz9#7d`gu+|%kQ2bJwgus!CXi+wVf*69O{ENtEQNOJQ
z8F(GM<wD_J)BIC)_mK}gFyxq6w)sDPdU4J`of#8flK3o2_#&|hr}Cn4n#W{uz(PcC
zD8bA2TNkZvFe)lRo2YO8uIFA-$YLz29(v%l!62AZ)i?3gv!fg5C)0eCD*~_f7Z5A0
z-_NQTL~H`ZmJ*r;3WeXLDzt8z^+!BB^^Tib;_0{Ti64&i`7|IFc!2&qD!xKa)MUT)
zR{#44?rLNrYC7gi&sy2#z}k}Z9#KddXYkh#JZ;Iik?ANNLyvY$1u0FOqWt;MK<&Cc
zPF5s8Y!%mZFoJ~(p`sJkdxCD4O*oCS6-9KpoJ4pF_WPj*TYkMiPV!CO1BENN@$3uU
zypKb<#pV$hOBQrF%@YgnF}$wy+@}uV6zL5ks{3=sw8|C!vPp77DUuY?aYP?bT#%&=
z5BjyoW*6Jz&{H?_Cg-8$yqg@wn?63-bt^{>N4i(1p-3DIG-tX<(?HZ12a0|+DHaUu
z3iR&2R5#w(c-h(j{WRDjq(x_@*l8=rf`GJX>@xkKX<McjN95HdVXg?%cPzGk*W_SV
z;uaS|HU6%Ed`$Tm^^$2riY8%&{7c>V@i8q1k6+dj8HB$6)QCiQkD!qfN(o}osuIP~
zLs?|x0nIX^Es}&k-!+bCyRYPTyAe&cw5cTT?hCur@ovN`6_{*h^*JN8uTQUVT#Iu%
zp{3{i(TJ+?_`E@1lqPOF&096lU2iY+VV}WdgDRVg@!(n6-&yS6Fl8WhiX_#@T!Cfd
z<775x{87bU-#S}l!wCm}ELV()1JGuxUSs);%V+5G<-2(lD2LF@(>P95u#bM^U<#oa
zwurCuS7-1jCIb48{p0JFxST3n4?L5(BWdp+c%=_oQC`|Ht?CxKtkoCHnF5mPOAjcI
z)2VydGoDyByTdB(J!ztKC0c~vLz>4NBpzEBwn5Oby4PD>`_w~Hd@j!e@Fba|qv<&q
z5Nld+1@BOR16=o`c`h=)t_Jsv<`TApo}I9|*3@C%xC`s7mBIWTSd*4vY6-&`Oo^;X
zA8j1~@eNBHR6|}Gy<)PtVZ1_+jbPMxCZvbO_z?{~O`Hn)iVBN>_Rf^2lUAk1Ez?y0
zwjA7L&GF51P~xnyH)U;q={x5X;(Xnj1X1SB<~})GZ6*>#?fV7OW+R1uts9o_@J*6l
z^BEqENB3^MSm+yJ-15!&jnnulBMDtA4dAelUy_`3<6bc24j^@+JiTjnbzVe$NKRvM
zQ~C9#6^BNAjSW~P8ADUlueP(SeDdTt5LME*pF|;)1Hrk~q7YJF_$x^n)idJ$JYYM>
z^2cgyU<?w_4*Om-%B^#~H9KS4@M=12!q%tq*{?tNG;|s-L%h;3zOXnmMMW@@2QPO6
zl4QkOQ6E<QAo$kd<*YDy0zk)y$Fn<-g0c1iRaiUMi*4^g3t=*V%(eXl_$aE6>OB19
z$Q+_Xnfiz{RP436Mr5SqsD-)0K^!YCrnrS-TdA!Fg63XPF#~KeM|W?FibQB{e6+|-
zH|vY$8Fwj{4yqaFg!KD|lxpt{W}F}CY+$;hGu~qD?)Z!6s{V;0!{T021ODCW8p>a9
zFM;|25Aqh$^!k07>)UyAcK!2V^d@0?QzV>a7vPPfQ;P)7SNY!3Yo0P~P#sMGL^E7u
z%rP^U?xK>|f9N_;FPBxmfZFsWJ;R(t9T+-8X;)pOe@<1BVQ}Qu!o03C958nBrym^%
zs~EbrXe}B=PcGnqnGH@hU_OS`tFaRS$;E`2yo>8=LJNvH6;y^U%icXKQk{A)B5)RS
z{5?8!HO^LMtYOo44_zOBsinpBV}j?QZ`K%vFU5#9aMxh^LtclV532!E5O(tyZ?&B~
zf}E!v|EjYxhD#vzl54zUnmbS+Hleg{V%pL71o)#Uc!&&)D56j;y@T1KHROV>#sJBJ
z-E8Ja(SHMdKZ2Y$;g(w<YlyX?m|(;7R}f2@+28Jr2+CmM1;?K;569pQ)OaKcFg{{=
zwg%7^6-UFZ^v2G5>V@2F^)p(Y)mP?ux?jS~pXt|O8~H8-^~zjr(^;F}^14QpM~i~7
zRcha(U!2bm$EvV<Oj4XZ{SNU`UC^nmHSo%8QH>)vu%&n(HPc2w{YgFT&u5LtSyrG^
zQkvra<uZi5#Uxz+Y=P<~UF|;%A0Zf8$$YcKew?Myc*~aYgQd;C1QlxWiGTOIe&D>V
zUdGM@88p03=o*CamPDks7(}&5>_Lb4&WQS0-u|bT?sK?DnL%@U4F@W64CbHSG_gzO
zNwOpR39>i1EV7g-s9OR*sV(4GWZ~1b&l^mXxuU|n=%Jc4qL?w7jk#Wtn~xaeo>tKR
z4l9#9yLzv)p!2<ikkmv#VgN`gwe36S(D6Bx<NHUuLAZ;{uOzQNol9;8&DL%$vUB%^
z6jJ-fiEg0<;f>IM-)pg2aeIo7I4dWqE$$DSd~rLw{6OD3Ft_d(sw<@Ph!v{JzqBGO
zD99!(?l#%Lzc+X%(k+`mDRpxFyD)QD#!fb2h4&gtT9Iu61mo+oVYrLallr%UEoJgY
zfe_O8<uVqX{HoGlM?P;Iy|vemuil$&r}dxHJu18J6qbOgA64iD0j#^vp5ay7VjGVj
z%vl#G3V;p|2uEi+Y~y6Fj@mhz-~Ym)h@Q8iXS3cl9$ff^wkL^b-gm%SR^{FII~Ip<
znhOi7R@z^brX|RBPlVxsoQWVp1eQxEM(4b!oL7GuR(Yb4FLWNH^RA^{_M1U=>F(xi
zP@2t069;D!<iy9N26PqXM&$`m<kB;lkD7#<{eQEk&}?w|h|Fw)-Y8jXwAFigyN$3z
z9A3u5=LrS;4xC#r@+P`m2dul+SDKndmFCIy5fo+Y?&+L@h{d@U&7+JJ=v!JJ7=C^>
zh;F_h+pQ3p4-I8z9wn1!!Yr!lo#2LSWAL<IEUTId-~`JcNJm%MSy+A1Xh@=vo296c
zG7Xw#z#;5><gcoDC<0?DhyKuR`abK5*9?5dfr3Xw5iE{Qlj3<NW7gcY{FIrInaFL9
zK?Q-&-op~L+Ql{Ru#dsb?7;qefDyGN`v&ci)52>>lFY9=UJF^Duiqzo@S*va`cz|X
ziw-UgR)dpyS-Srk*`fS};_4;rKg$@85w%K>Fm}NvziUl>DbV+~#><8P>d1`FUw((V
z8W7t;IQ$Jx2=(ZcuXcV5p%hsj@Q9RGG<gN1DhoZDe~m;!p4foUE8hL&YF%FoVc)C3
zt9nCbP)0UZmgqmuK8I2WclCyZR73c^sV5kl>(?Tw+zhZki_RF}1lu8aR*^09Savnk
zuGL7$rr$-mQr#j7rYT}N!`A$H>kY3#^-t`TCLR3)K!LHMBxqCuY`H5!gB$8bSk;7%
zPnIjxsRXAM{ooV|>!I9sUJyN_Oyjrim7W`w0hhMznR2P9z~U?ZT{GJVTZ9kj0V?YK
z7#GHQ{A1%_9NJbXfD2|>Eq2|w)(|uuLgB8-t7=&7*d8SVMEq>t3U5Qu1Xd1bJ%r*w
z5)#Y@)}Q{!&~Rak*eJ&;{X_GF{~lA<q_(d^qGUv`CAgvUu{25$K@k+TKCBiQ93_v)
zEjNf<P1^ebQ^M3JqvBv{8*z}+TZ@@QTb9_b`K{4k>*NR}v4s1$S;{TQGh-a;s&@TW
ziR#Y3wf#s(ok3)<Z)^pnaaR3`_8+uZXV|k(_`Py+7l!u|_B8Q5p=4mTf`L}p!JWlE
zXK{htqu`&F7##69vq+3E*++D|vw-{bj{Be^sevvlHuVvch$7I)X60xKO@`5OUOWvM
z;SZ2EK--VOo<U-D3JM&X^UBdy;;EH)c&owtqs`@!jKflaz4I(l)ptLrODlPiEfCJ<
z=XfvLbXF^WG;)5id23Xg?k>r#o84kqYuj1kFgY1lDDVjk44O`06#~akX)KwU-+Jg$
zBJIMD%2r+ih$#<isd`hU9yewxYPObsU@gP|JMqS2YtF6NS=oS)H93PhtiW8J0}ads
z#$tiK?An~1xo;jB#EBw2$>Q?3*E_c<dT}w2_-QlY_Gcs2FYM{s;&6GTudKQiDD{}I
zzh_FYl|&74gzERRCV0i+R>M@k>pwi_*^fAcS9v^IfvpB*u$57^GOpEMmH{G=+3qVw
zSk^#8&|son!_Cg9Nir1!v?TmvvfRC;tCQJ6W8IWf5m&57Nj~D^r{t)8zUdGwXMkv|
zB4eRS=^cH&9o%*p!1z+$lk`6$qfQ9IlVkxwc@5c<vuaJ9hfImS5shi_kL4wp6kwVp
zhMR*YGM2<XPo7cRmw!s#^*C9c)NFO6j|#Fk^<6X1KbzuG?fvB)fdwTV%$h+WaE`zw
z>mUIMK`Gfw7el6RB|@jkh_XvV)_$}gg*e>KuaxQXDzap7TXi+Gy#R<bw8%DrXTJ_R
zXqJQmV<=?Xn;(ShI8QA9($t_vwB??YL2NJ9Z4|2R>}-v5<RPYgSM|82?k?`Oia|dc
z1>M$g3qPyE-XX&5wVgU74s!yru5zmfqRciM#M}R%iGRK?BI&}v@I4s>py_LQ3uPB|
z`^QOmU(`>+nl=G<=es%V52y#xK4-<N$iSLQU;~V5j*YZG#C#jJDeKvB!REL-kkmeD
z-BXKJcf*pFLL2755tGEv*YT_e9szpl$EHckjh;Z2x98-@n)pFH_*P#qBeU;ZG04M;
z*Rv7mpOMV&Fwc>=0?!E4SvC|TNPs;|SnZ%lN}_`ojq-OMmZoJ~6gsaxGPe#F+nN7<
z?_h8_&_UUgxE3`oRj_<-K6}^fMxZ!UT`m36S=zR+XAoGleC~(@p5Val=UU;ER@qm%
z!56(r{a$RQjmz^fts81vk(e`yGT{)N2AcRQ{?Cto-i5=fuE#pE&vbN<xgq$&x=|Bj
zaq+LoVo`(`iAP4Yfn;nvk@mt={$mFj7K4GGjMltHExlP@8(S>xi4mz0^?8eB_kwrC
zZ;z~%>iAd9E%~*Om|QMSM#AIU$wV66dGpOuNwz~hK+m+mf7Fbr!`qS*T-*?{EBOUo
zTkT7$WeaQrJ{h#$=;A+icEFY6+ZM1m7&}p27F>5A;p2h6TD+PZeEZ@fsTLb;SjbH7
z3Nq$rdNl}X39rdEh8G=*Rs$MURJ$1{V~b<~bJhmzvR0;tk*fgxJ!EzNRiS=4M~lYZ
zSs%z_hF^f;fIsU;KZ5dLxftdaVeI=WC;BXsB#;@kztAxqz#medv`8qI9jogF9KJOO
zGFp4T<y2Nmd2KcjAb<0gP<lh*mthOgjt$(wzYqW7fA{Cr&A{%OrJ6XaQANr7S}N(j
zgRV_&R>=zt<;qj<s3*@#G*1XyrZeryugCHo&3gRphhIO+%n~S1y-<%$+l{_sdOlq_
zfiVQ^Qbb1ERFeFi>JVuGtuh{^;LO=Id_K^kTEBVn42M|G`YE01P%>ABehZ=*Ia2R;
zxC(2umzi@;)lc!D?heCKv;0DO_f2;|W;_JTQ=nAgTYHBcoD!r5EqHE|CUdiQYIOs{
z5&+r-zO)`MLSx&vy&>9Jd=&{y_>1~G#lZl&aw`Df$eP=hOTDp1XLb6m3_41#1#aX5
z3oRyD7r54l#?ojU58r7(61M2GSg9vbj=is}tfV?l^~2Z;DCNALTKD_WL|2zjmx5r)
zwRF!6Chn4c#9JLqtJq~WdSc^}&4~i70RXqpuGVb3rSoqUM0th%*a(q!g(;|DraXW9
zK%j3MEyP03_?F-({99Zl%g*lCB7tv3@GnLZKYMuvM=B&9sna69g|fo9Z#BYBK|mx!
zs{8#aJ-pPqBJRf<>12&L1l4qBT^4(2>H9X-Sz`U`c>mr^ghH7mH4RLW#aI4*x_lX}
zLw5DtsNCX_dPaUsZ=HIfHNr)I%3@f92RvWCrKL}UTWd1w<e3&+>{#LqZ_k*6P`PSc
z`eKUQ$Lj6?vFN&`l3ifTGL9=z@a56btwzb@A=<+_=|n6r2C{KW^!IXyQ$I~7x<1ZW
zb=aCn{-U3>KmM__BP{9(qpT>W&EJz#60A@&>jb&9VtGigwKgx}Sh@B`!ejwHak{*V
zZQz#~X3hOkxN4mH#^kmzETcl(WU<6<3|&l)C%qgR?l7?_Mnr76->NoJ*ki0VS<N0p
zX(z~(=yd6!V_-n<pKPWtiC((DYqK39nvQo^T9A5hw*j)P#Op_&KO63nXa!L8I;RNm
ztu%aw%(n2va%1#-8t8m@$f_ybTiox(9u99k6-I;e#kRtk{-CH%juH=#axqOAP|A?U
z=A7C3JBs>O+xLh5w9RJK;J<OCF}@xa|77sU_K(qK<*WfiT+Aa}4;e`u+ji>%ksbqg
zyY;~4IH06q<$~s8YtOaCgg**8dgH`Zc7$^0U7@QvTFOii;T8%|A2nv%Uq=;UgED^w
zmeUzf1xD;zVK4ds6Q9%6_6k%tUt2f0Jt1Yz@Yef|WR$yv^^(Uim$p~ft|p79vtfsx
z-rX_*gd@)x=3O7RMFGEwtq3Hy;1(hFiTdq}yuOJ#9k$(d&O`Eg?CfCGPNH;gG5RRw
zpZ=kt@%=>Kd68Ocmdi<gy%BD5D)GJOwO>Qx3nbD4reT&dS~NY6gPmM%#atE$c)bMX
z9m8!JZx2}ULjGXb$C^XH><i49&7ZKvS!N#H{vGw<#(iAnrs<D|$q1{S#bm~OyL9*5
zioa)0!nqNuY?TujaBW`V2I<;ubPik8wWugSr^@Ngzr%xb;ae|eqYrAGgEnXcwPBRp
z5k`tF9Y0=z+0TWjhZaQo78IY_G6glIb~<)6d2ECVkdLr#(&5l`)vt3VGJie#F5Bs-
zm;r!CV93w5)qoCYDK2ZdbJXXGv0oSW`8=xyLXSHA$s&{VHCbr){dapX58Ry{9@Xi%
z_R^wcq9u^zz(rokyhve4p~@jzfhaSut_a?Ov3ma$NEDjA)~O|HTlBlc`JJmT4w!l-
zg6*kf-8X4eo3@(|F+va3-K=d0YIj@Ho6``)VZDhXekvOmBmDupU^X1k1m_xaa4cm{
zw96n`3z6)E0a1weA@Sdt5WqtbG;ws^D4a#Yk*%1uZM+=p^W?pqggM&cC*(!vD(D@a
z7|Y|k293!6OKOP0N-aB?@Mvv?>Kh?*3lVB063E#>5%wIv?LNWM_Njoy0aw#0eZq(Z
zxi~#uX<Qo$whHWM7<z2j6OD1JcST5N)Xer)Z`lkmMqo6M3B^(33W!ml)+@9=S88mb
z^PwZXhoS;iA{Jw^I&nSiz{aLnKZ1!kwm4vabJb~PTk?j>+7qjU_rbj$m8G&fR0<s|
z$i@<b0QMDP_;!TP;9XcY7-*EqZ%n*Vb|oZHZQ!sW`Mzqc;l=e?d_>Z6ISm-=2Z$?X
znX!+^fzT}s*n)N4c!COk=QH)U=RO+65PQ_FrRx4^m6mYiP}B<NpCXJCio|>YRYOYI
zpltBuv2FpdLsMUr6TP*#{+Svit*xv0I>CDjgZ=PcREBBwriv@Eh4hFI6|skW%KUy#
zIy<a&<&yx#vb(M5jQ(T9#?UPJ!CjpX?D=MBG_qZn;$27t#qaqYnwR4r4HNrl7}>Z@
zVnJv=B$FQXh^MV{30V-N9}xuew%}Kg3y$lTNhr*&q1(ohinZs8y@aJIm1(@*)nUfY
zG0wvYjIL2CGe~87^O~Jzh4u1Q>v`A$mRl!o5Bu03({4Q?<5+H|DZx!jmefp|fei)w
zzYv;X63UkC^hu-K53RiWM7GPPCtm6`pIygWGj#s;6fl-=+wsq^uJy*J`fWu*rO<N}
z#=NqVPqIh$Nzs$}Jai`g{aQ-=db`)PjdIRGN=^LMpzT&Tn;LIwi|cLGCq_@^4d>oi
z+kAO#clMSz6qrZp+DJOJ+lj-lnq33{A7)Ton}pqrAR%9;Kx?u*D9_<1UQg@aQIOPx
zopb@u(5VDu6(i}v7idXsw~eu2#%&5iJU+$`gGjDKLRkkTq46cv;C?0LguQB0YoQmr
ztFb13QYB0dchE}s*KP})J*#aDyZ3rB9}*8&j);H(I*j3Ek{P$0)57&))@a^ob5HtS
zKIt~_t`aej)|aV9C#I-;7PZDX6YAJe;?{2jz2h>7GZ;@w{<a6Za@#l=gN8OTj=cfq
z$YvOFvA_rGnFjI1?S525A+rxl)8!mR?4O2=b}@f&A`(H_Jq`!&aP$R*X(aP)!vx0;
zW_1wjKXs8-eVQ~53H$Rrx6jogGszSt>jwm_ASmSz|9ZV%Z(b1<Wl)TJ9?6NM|E8Cx
zYw2JWP|w2gpii51$-fUD@q?G7DIfmeb|tz5bR`!b+M$VuFm=-}lqrhvZ~>dp(P&qf
z#d3PE&%p1dAs#}+$8naIgkJ9oD<C9CR=kbg#8l-#TNeVSka)+6718~G^L0=@ILhrK
z)@EpgI546Tez5o(iyqc5K41PD_K0%W+eegeNLJTh$xtGoY?X{}8lhQjZ!HH;fvWa?
zsJb2$V~;AjKp&B&45c~>Q$4+o>S}4*2{~5~2}Kp!RJeaT8fy|<Wyr`1b1TYnij3I3
z)~39nQ-+(jHT+7QHDvlG7H?65op6EO{?q+y2}QdHvN@Vz@~EB2C|wR6bH%~(;yOV7
zCVY#ahR%FEKWs8SPo5=E0@~5{--I2mVChE|Py_!=`#3Iz<Ern1f}&f^uNXU@=!}Z*
z$VZMx^})0QE3N(pj{)^4HgHy#0i`oO#ox^MwjT3*yC#%i7kBX|>8IGwWh3<DWid*1
zmNgLfJT(zl)S0>EpHqKIoTJW+RnRFF_r;S+J7tgvZQ5T*xr!xe7(E$V^Y^PPbm|Px
zkH@!GU%jar=F4*hYdmaK)~k;zS_nPjb7bkIyJLPglZSrF9=$HCi=-%-qwCLpjR;Zy
znURAEqcAmcs;zKpw9#PWR?Ux+B|yP@pnb12*jzeVa}2zI2M0X)T_{io;yS#8ZW&Qy
zb2pYRseNc%jvZH;!e;H>7s}2*_VGn^uQ{Qpetb@ZK!qX<8->?)=mKkMU)aK#6vt|z
z(y4TfIujj`DcVM{c{S~|_5VPqgW=IY9-U_jAUVnaXcZaCmye?N3rLI!uk_NmT2=Hb
zdp>hJ=FZ!@b=N$7{t2mAM}ikE-$E8vnQ3H66IgUxc3YFl_ICGPE)=YWP?W9{r>de;
zk`un2K;baXXMB33R6gh1dU=_|TxlY{9jqrZ#|l7;M8gZ^VIy$IE0^6$H}zY~zwLCb
zEb2qD$ge_oGY~DnT~6pIDu_k<hldPfzWblyMnY`h5QY^b+{*a@yXN&vQAl0jgv|If
z?*{`X#o<sp7*)!bnZkCHu(R#0d1`?J#%*iQd7lK)`?;HJvewnL?29{-QL^{ZJaLa3
zbL~J*sylz4{W3e~pQEJb2<qBxkPL+jVVTkw1D>4oRdl*>_SL>%Bd~2Bdy6BMDTbGi
zLOuAz2+W7sn;sM-*Xmkgl+LJ4vW>=+xGNM+MsY$ubs?iRNzUL_&8!`S_w>$1{yt^V
zcYQP6>s>A|oIC!$tKWYYJZgYI3_k!A7Io5N%H9^HeX`7+u&<nA=M|xUh0qsZb4wer
ztqf1&7Ds}Y-#{06PTcv~X>ZbRvdRJ-2#N#r!{vEjzv9#OOX-6*lFRV`T^aQj;yF7D
z;SQbmFK<4@vsVR9tT>HoBU<Bgw<kEpqu%@&Wjwe$zIXL?4~AzNs2(*{0yHMU)Q|9d
zY{*z6D5)*qx<Ix`IRgBGQq|mquhH7d$*WSrfDe87oi977-$6h7QGH~`51-6Boy9oc
zXTFNg!7bQQx>02ziTG|lJs0b_!=>Gwid&roBMHgj`@4_B@LO?T+=uqt2TPcPUi*3s
z5?$5f;my+=ONpv13M&sG|EI>VxdWTUjTHN|zmO7*l9tYHp$W5inm!jEQwwj;10{Zp
z#IfGykgk}2R(o-g=PIt~gifdJ?xB-bl61oBeuHWe#qBv20c>xbjpIoBYbtlk@5@eP
z^P$9|XStw1oUQe%Z$~4rCGkl=42+cz5Ue5NB)vA6oX|&{ipSGo+s~xSAPu(R5M-q5
zoXHA|EzPe8r<*O5C#zW?G(ExUDt1c#$X;4hN{fThpgSX#UZ-TJMcs03qI#=xSAOP4
zkD+Mz*YxU@)_mA*S_GHVoHM~-ED~Sx-}9pWlv$`++~&63$s2~uDOhs{yQ<aq6@~&@
z(*GI!eJ9_h45>3BwO1q}gF$QkR*H7Bd2~m~rHTx1c~ONN6!-<?xAOVq7Hep0Y2~id
zT32=`T+T(s3-oILzxJ;D9m=o&YY<b`8ATXb2Fa48EKT-|wXsWzXe6Q{J7r%+F}50#
zeb16L%OqhKq=oFuC}S(6Qd0S(@43~dr|+NeT-W2ee{#(=bI!Tn`}_5JALnA3%#8Vp
z1rVHTvBK6r>@ugBha4rW$`|i@-2N)5WBu`NFI5Q1d@c+G7z&<9wJ3AR*CajnLG&Xr
zl&HuFI(@Kf(U`XpgNnK7{1oOr!+B66Ku@S-*>*|UuOl568SAFKGP4)W?Z*9)j(ioN
zYuDvd-}Af{n=IK<prPXj$cz_xdU0FG%Wu130&+P@dTWa(+U2&Uc0!QG13UIlKVFfk
zBt?joM2O1|NwBW7oLrAcVDXLo)k6Z<75N>FGT&^<3X6+wj;3lHpgA##ROG6gz%+(X
z=AW`^<3;O!GRS`GZPNfWQ-F4Uq0Qk30LBnvRXi844T&fF8Ym?nzB4PoZiAI@fApD>
zn0!CE{}*tyMlUQ>3cnn3^)QgN0xZK!-CCL^Y<46K_D~)`(waeXlak4`{bBiH_>gkL
zlk)T|Yg(AUV*8Eo@}TC$&3KFu8^<!_*|s05#183eBNV<(RQPO8b`}Rs!Po+E4+9(b
z4E8{l>JgJhH?otS?0l-tZWI6QcEIxE*d759ekKfI8>?Uhf*IFG-YY8LZJ`lb9h3)}
zk&7?<VHg!Twe}~{ic<Kmq7}>zsgr1~drU1FIXwHzJ4z5jqU}L$Pi8bX5-plmqaB0)
z$PL&NJ~K?h?iGWI&z#MtLvIb?SH;%$;r5x*W=vyF<CDX9&*6g&i+E6#wZ{g7<>eQ6
zuIaY|4&={i{C;V$p>rgyGf#=}jN71x0b#Q*tDjPW)pW9&HJB&{jRVb;+0+eboH0O}
z^&e2=SBV*o=Yi>$FU?2W7v=ZmHgF|_Tl3yZjDH+dPkwpf3n&NudrYE4K=<So_ZMGl
z?OE>^y8JK{<?x1h^$kZroXLW-jKJ<Rd{UdjFzTW4oWXfk06s*D%BmQ)oBAhc9}`rB
zCR5N3EmIFOb7Vu`8I#erX1yOPbf;V1U0UqJ(Bh&?pY=^|@#nP4)3Cb$ae9szCSeS;
z{S0n6_JfYf0u!QnT6}Uu6XhMb81`pT298av6}H~$E_YltC{NprWw80{<uC5aL9MuO
zk0#VZCfvPMRV$G)%?Mu07%;f)b_csD^Q-MXs4c|sta#-_OazYOGx!?cR=$l_!ng%y
zzjGGY8`s`M+)24j5`?6V%aRF1SG{{#Q}Dy=BGmIOfXT*Lm9+oK^x4DFu3!$+A0~rv
zxET|v${y{turJ_-46BEt*O|1{9vsLtoGI_dL_Ld}?HdH|S05XQBt8{BP}Oq?0FJ5v
zRl<ypev?-L;Q?iV{q7w3G3N?4DVnfd;IW`r4OE&k`8|7gwfE(C>iO}^-pmJkSYs#6
zO>>(cS?)^AOu0Vqdrqg5+TlU1q_2hOH(WYE{Jz7R;kP-4D&iSTB$}E7ovIn%Yum`|
zM@dl8Ow;j~$x(_Xi*a!@7G!G~$1V|##!uS_*!dH92%O{sPhF=W&U8kwIljXXtT!P^
z6543EJUFaRms<WA?u<1Iuk0>C+udJLl8E08Id#HO2)a5R*kb2LvbxFAI~d99ZP2;F
z$fuLd)|&I+KMT@=F^U4rb54@QoQB{eMI6mY*45p3o-rm?_C8FmE7HL6FuZhijGb0f
zP;YlM86yc=V5~l0AA^QVca7%I;mX|DT0n~u_JcrL4>w3+5T^DpEYMvpT$}0R_47{E
z_hox}Z%Omwbm{9+jt_x~ai7Qq_kQ|mC#^`A@0K;_v~uFo+-v$n7a08u$2kdEkk0&i
z!d=CySF(4DYs{Fw*$Qlrkq_PF)1B{@f~9e@aW0EyYFXZ0BJz(1*DBWoyS#H%RFnHG
zC2|PG9ils~j^Ja4qE?uX16ZFU8#4WRaIH!9KbqQ(>}+Cj;b_Dx?drD(w_2vSQG3>V
zU@}B9F1NVG+V7TCZ{8E7Jo_O~^xzFD$V~PH1t_Y)e&puAUIm<<xhdqBQf~jl=t>Ob
zSSY$ro~`|6IUn&Blz{TLToMy@41ofmN>83;Nf+<SQA&LWr*mr4#1`kLsQ85U%=(6a
zOWxLai7}6ghqTDCnu#=hJ-btK3jv!ib1cbF)ELfqa9c@3cI@&<a$6}<)qK)*pAK$l
zoy3BI59)=;W<L*2qi-I>J{ny4LjwYt%n?|IC+(6@)bQ+tqi#-SGK`iiZK(uix_xw_
zy+NwNALSvdiMpXta{VakI=G&1>+Z^g)m}1c1FGtTy|xzo1$J+9<%TG5{;%oFAG|YB
z708T}=qsx{yKXsp+N#i*T6*AD3u~t{?i6K<JmTS;(i4gmnbUOMyuKOi)@}c{aEWOP
zhYp`SKDF$`cZYA~>R{cVEKNaHT77$41cVvQtG>+G-%90kF~$c*T84kr_UE}gfyvLB
z>jLMJPXeyhJa~D`3y6FAFGh^Fd&l~rSbik4(E)%Lgu|AyTdP`d99EgsLTTUctmYN{
zwrkRFKU_*d2^i_tp99pMKj+it%GL8znT{{2q;%e%)a~kh^2{jG39WzCNf?Z|NR}|0
z90C#YMOoUwNcn2g-p}v2xnE(WY(qT?H+z?%@}mk+zx>UunhmhUn&XaL6YkvatthU{
zC&>48i?rg31cb)%Z$AWZ=WMX06pk8MSJl;4cv;=}NIO*d>~YeD&@t4w82<fVW-}hy
zbK3WI(`*QQmv-uX=`1(aya$5WOG`BXB1ka=JVz(MHZVLNIiVILwGHEzE1us0NJ0&1
zq^a$CqzI&T2zGyHlWhmM-WY{^W%uf{Yudu?9%kHi%gotU(-t;ga@UdRo~~<!5*?mZ
zS-q@?<>&}&)IL}qA|{^L!2V_8*tRqHy)MTnkY~!8zjUF+$=ex_<py=_kFYeee_ELD
zG2zGRh@AVu0Jq9?YmhjL(y->F%`7j=#3mbFFR%&_x}ADA=w{yVXkb$g<XzHrqh4(*
zGHA*}#ll|X<B>G2JL%ani>5ikyS;1CQX+Dqu^l))jqr(L8)=mu?Wa%6uDHE_M4|E>
z4zOoZs@pZ9nXs-gZ2Vqw&f#CH0NFlsvHl|>%jE%>&zf9VcWh~h34k4AwD+DUT4n7b
ztY1f#>KastSznlQ?AoV>B(8e)-c1tV>}g;(omm+|T^DoNy=_22r<l#aW4j?=fXzLf
z+qA_jdfufpr1PP@;uWJ}nQ$-XgHw~I3~~>_hCTH)BaTOBpdXnk<Vz}DMXbI}6kYf%
z7C$)2Yrpyz+xmc5|GdIgmUz*hjM+<dI_nx7WW0t?_qXQp4yKj712xlzx%}T)6FWBl
z@oXaNnyA%x7tld?L-*CsT>Qm&WMc+$784=*0&r15q2`1ZGYCy5KiYg}c?9QqhqbXw
zITGxy;BrM=lFI4-B4F!)NG=g|dwnrpIN=iN`o>f`jzGWA=^i4hCw}P0u>oW3daG&o
z-oMq78|OHl1xKiCNxzxr{2-`W(m3q`Iu<>ouEARIXmWvy75;Kg5yp{e0B*}(=>#rt
z;*@Yu-);7o6p^xc4?~?g8N(<M&MgioT?G09q^bsvNlee-JOS}d3+sN$jeX*v$C?&x
zsdOIuMKvzbdt)SX^IVcv$*5!oaxUORfjBl}5<?Lz3f#{gDqFdr0`)@DS!(wErL9^|
zxtb&#)<~g-Q>5;mi0PQ&B8*~%d}~Hj7FeKNP4f$H8~<A)${hlQ4jCQ8D5@YsvVLLF
z?9V6JIW|-Y6cOZn!Vm`z;pQLpV;dm(fwjr`TiJ3aD)u;G0WVKPfA+I&nUqzMB-XK^
z>#9v~xr+u@TJn8!g2Js->Yv1sv1&UMEWC=Dn^}&`>#KI%y5aTX)R}Ba=Sgbij9|O+
z-$x1xSmJ^1n!=Yq`5u!F5p=qS3>K(~S+g!6;GSlvOGSb;+nTqS`s%amIAxVys;$@m
z_IBZeZ>)l(3{9jT6)m8mudve(YVI0AI$fkfq(McD@XN5Y=_7`S)W;FAPpWitWmfKU
z*1)>Cd!HGlsiji;GJE$a$~B)nfuze+5P4ur5g`aFXCJG@DEeL2j~f?#ZR6j+5M7ll
zdOe+Qun)PpEm6Oh4X{Y0%8UbE_YdI}M@G4+{$6L*t!N7D-`E#H-I{j-e`c4j{@JIZ
zfuUkP`lFrY5^8a9+e<$NP*|d<<oBGe#p@O~l=mE8Qyo_U>l}mPxRqCUViJ%A8SZVn
zMmuPx5$z-ytMu7$*1}P+H_2`MZHkhHHU0I84#XWM9|;?KZ_L&3!+lb7j02vw>#|N=
zbG{s|n#$Qcv)}4?Jf`NS+W+E9gQ$S@W?QZGNgdTUQ5BQ9>J}YpF7#8hywtj4Er0oX
z8`U9fNx~9wupb4O;fMDd>^r8lbb4ZQd|%XzHKz|g`&Nf9W;0O!F2q!8s|LMt=du1Z
zs2GZtzriH;j|-`=I8;d8jMAg2RoEFlD3I{8obGIA!>?h#Go|xuH3$3RXOBTsaJPYw
zaoE^Su03KIyoG1=kOen|nMi@=$FfU+3%tnn|Her`ll7YBR!s~IzGj~1^J>n;pex2&
zLdc8`Xtl3q{%l)*Y@gXK^`nl?7_G<fYnSoc6;cLGX?bx2T^_nC6});ariNf5DC0ZM
z#O+*S2I81{zMO9cnWup;f^{x5I3j)Mw6MkHuEp=37d+iYho9N28w{!DudZ5tG{mtP
z&mQmSDJbK-lqGb}{i3eSv~nNg@h$`Psh2D^KFXw)_;K4q#>RciwHv%A7%`lQpxpO6
z`huiS9uCzUU(&B&mrv)RFNb|GVE<%rc+Z{m9kgUPExh+s8O8!ks_YuA@@rTvjs8;2
zF3kAh=zDVUZ64Zs?blp&{&`<D&nx)HM=8|pbKV8Pu$bSppdn2MlXuVii%Qr?#EV`O
zRA|&Hb>3)%axF!tGqolLrtK`od?vLPsa*GNhFWwujn90vi{U&HGIXRdZWp)xmG+8?
z9lUcE-5wPuWf%z$f1Drp``NoA=O)Xq7Ugfh-{uH6c`T`Sb=F65q%ytKTgk=l#L9cA
zK`VdTAhA;tWnaQ}_L`i)7RoIVJ#FpCj6sx_sD1&`YMY<&rlU{nz3}xVYh!=DSH=c6
zLPRrLtJ$H2A4lxi+7nm!u)THL@e&YCvN)Tk&1J^9J;MQcA#kR?FgpHTU$CED%6Y+>
z1oWMIaVgoiR3+HO`A3XWIg}e_B8!58#&#wZD<?P}d1Dcw<PnYeZlf^WSm;_nojVe#
zA#Dnz@~=l1$3Pal^5wRwESnf02b?;}M@udu&#rV<#M!!>!?2U_GW<p`U;W4>VjVV#
zDl&j7<_Xkli0f<AJ9fXZFo4D}Wv%q?6a&M~WW(dyR{Bdsk)N6!NT~Xa2HpmnqFl8d
zP$Zi;4orBZINc9Z)jsFPs2eBEc~0D`+TJEH#Y-wqQEuGfdzJoaMZNt9wz9i{(k?dl
z+6(d?)J=XE@El=yIr0`I)8O4LFc`mSM%eX?vDP{R(+Jt)Z1=V!f63K$fy}t|ww#+(
zKWer7wHl1(l#4lI7>NoGy7kqK!!;?sjvuYAW{#jwMLy~z2vv~_P~`lg9~IMK;kxWX
zUkat|_uJ7#WcvlmFb${3l;!b*T^rW%Z*l__pr7H}0fqhy&JGb!9Fm_BMs8m0tmJA8
zO4KSPEGxF8b7D9=oA5XsA=Rpr1!vT6nu!*PdpPnosCL9@vTXEHMR#{sTu`q&L2lh-
zAaQq2t4q|q+z;PB&myZv3HoVYlu1I@hAPh_pe~^t0Lx4MnpTvp?}g>b0hh5G3hz`m
zLOiG8POOZCE9E?yV`6Ka@(w;@SPJqFMHUhpZ~=$Qt8AH6iAr!$x5-lr#<(*?mVfG7
zIaki!oc7VTxOS~^XN?aaFi+VB;n6;^mXY!4tDcWIBg!z249T(<wrfJZ`afGOJpj#}
zD+{W=J>R4{Y}>X2Tw&##FQ=mE#K(M3UhDY07UeUP>*(9OQ_z1WH*HAsB2E|nT|%R8
zY=+_;(yxmxe;LVv>g?LcPYmwwRX<1nVl+@g;SnkDH4d=<>$QdV2m>yk#{%rw*x7i%
z%i?IRc7L0(XWx&=T{`;tSbu_G#FsX-blu5ofW7j{K}sWpKo+xTJ+Z<9?5zP3*xSOm
zPeG7abGb9gHDfFh$mchBSoboD#q|W5!DsQ8N*VbQV;Xd(?4`63o00TrR&G8mJ7dl#
z(~?JbdTI#$f=>Rc7Wh;EE6h7YwLh?`YVt&}OwA`^<l7MHyRW>pqdAPCFGWfZU<T8Y
zR+1Z1SxPa~g-~8%2C$k?7Ohh^BecD<@OG|hHu2R{^s6uS=Db1dk3406e>}jfo9s?^
z#Az;d^MB23Duhuv2poLJ*q8`?vA&j~txX8E;lMMv%NJ4WA+?Nu>nWP6k7>vZk;d_i
zTXT0aSDsR?`te*fA9xia&E&??O!+F;sFd-ArZe_I6fJMQip^`{7I1bQ8uxHxdKL&G
z`A)&^CqELb!v0qN3vj4^VRG=e@stmrajp4X_L`JvQ{_%$(gRuYyAF-WqiL%GYl0H;
z&xNnVma|hc{LU1>M@!q+FPfdb8B~Fvj4paH`9QAK&TW0TC)<APXUyV?Ytw%W{I;<N
zlNZCu6lQy;w>RrRL7Y&D@jxkhkaZ{WR3@O{M4(KGtv=e)Kj4AGk+_l=vKZpA*$NT}
za6NdX=!y5jn_%2AsF=mIrA#8k)g|}ki)h;=eUoQ5PQ4|Jl5;-W9VAJDOK2an-9_q&
zB&asOLoB*e;%k(hEw7~FOz(CUtUkS?EEQ;#nvSRL`IUkGN!l3Tnc`d~{`KA3cr-ey
z5<{oGdpSOirL|w#^H;F=*T;X`{r~;vzv2YK5MM)0;Cf_LYu-l;;LlJGcl^GNW5oXf
DU0v~Q

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/k8s-architecture-3-az.png b/assets/documentation/1.27.0-rc1/images/k8s-architecture-3-az.png
new file mode 100644
index 0000000000000000000000000000000000000000..2a216601dd20c0c197f84a6fec5cbc207a4747c6
GIT binary patch
literal 119593
zcmeFZhgVZg_XY|fQWQc{sewR1K)Q4Sf`Eh~RisGoMS2SeNKpyRP^BXvD1y?F5~TMk
zN)ZI4Nk@8<dQa5%dwqXv-GAV&%L?S=WX_yDGkbP<_Hzi=R7a9sq`!!VhexKYq@az5
zM`D482YO0O2%Nbi3Q7jv@IADVa(G4kjLX1>7;AlH8#Oh&>%cKF9w9y<9s#Zi9tikD
z_2(ELIHt$D@asGto-RJa|Bg-YIsa{sw#NhiX=4Mt<9-r>U*PIL?*v)+|Mr*#`lmIC
zMHaz7$DpUU%c$D-Aix`mtCE2S9v%%9?ib%S^D{6U&?S2veNTP0JCc?zPJHH8E*92&
zK2EN<tMH_JB!NRGYfp2SkCUUbhop}*>#r7)z%lMLKP&846VC_Itomx2FnJeuYnUjX
z0G|Ns&5JM?Ov>HLMp9cr@z3SJCuvqYPfu4#etr}R#fK8&b8)xj7nG2Y;1{^Tf8z!(
z(1O>)*V)tDhu7Hy{=1WZ`cbg<uynU~^|W_!hT-}(w{Y?DlxAhc-ROTmzvc9_xB2%@
z&K`e;1q_fM_YJ=wp8)^=`UWnQ!kv}Ww)Svw^ul$2&)MGd<_)P|jsNfIfA9ADDh+pg
zYd~JyWj6)?T=Mt1|Jz>P#mUv(+QS3aUgS^vzt8>O_L_Dso-V*#yW3kTJ9}EY0~i0f
z+dl&Szqk0)mlQv4y8fEJ-)r;hEU-8?FG}(MZ=r8q9J;u|iH9ePr>t;G#|M8cgUHPA
zOThX$4W3w=n!|>*VHr<2>y`2FgKkg7jL|XUZdYT&#5b>f)s9U}K8w;P?xcUhDm!*K
zrM9}wR;Xvpk7DvTwc>cYzEX)OX}#o(y(~tOesIc9Oa;cLV7o;%hk&?mNTV`#2*9(o
z=j_djAU4_m|MmaR!2hRapao_|HmA>|@@r5OS3qLbR&Ktbxt=yEHY%@aQLpv6==QZ4
zQ&^ckq|;gWer_v^^4ZL6aUWOh@lo*O@w;?7I^vacEbY8j`()2%Ygbs+;eg!@C8j!@
zGpR)<$}jid$)Z4lL7r&qEQxfJ(`;<Zw~={bFZ7@hm78#6h1gwG>!*$od3Jm%*#BO^
zZ>Xw!xFQ#A_Qw#cpP)C>6gmCSUlpR3DbYE%Tgm!vO;Qe5MbW^2T|nyr@@%E|X#Ids
z5+fTz?W(kl1-U7QR~J%=-=48nt4s><dYrVo&u|xf)nGL9M*kg21=7}wj1_CI%)*mm
z6&*91%C16;-_LrdmnJRtXU48{xIq|5V(|WY$wpC>WFamRtw4sEAa)RfK9+)85v4k0
zFMGnjK<U|DV&%WT)I;gp3bfx()^TWCk$@jfEf@Y6{rG>32L%I|hpVAV_Mx^)>&*67
z3CA>K=KAJW*=zSvqxazh3+84UK?|C|P^G0xe8r{S4?#<}nr1nbg1}0!G2#JA?y+xf
z{YhXYvqP}Tm!{zERDSi8Xy&aQ^R>pFsv<@59*L94_7gf9rzVR%Nr(KVR(+0`!qpi4
z47AlaTqHR-{HK9y(0|Ms1wUAB86vnN@U)909}z{bIwYvNM_7R_8ppOsvVHbYs+94h
z4;X?5HU4)fS}dB6T(W(%7h67cKiF_RbcDXdTB^vcLcE5k#BIkQhIRW8jRThaqXn+s
z3@rRQvw+DHFm4>OBm<O@nFP4S)&#wJaHH*c-5n_mw-X0<aQSoDps?V<=g;Mp@WD|P
z*$G{gw8~~ML7%2uswL~9=vNLsKZ9~=l>e(-SzsNMQvdVWilWwyr3;*;pWY(Oc1zfj
zVn8IceaT*<k9_^Vwgf170#Z<1tx^U=_}{Bh)vWz1X|;|q7ldOCIs&Su-6KqbPp4zy
zop}mgXs^}>t3hX*jSJb8<fsmou|1`L80yj6e{OFM41}A9X`Kz9N=XSsZ|~f7F)U{O
z(7dkML~MkW2TCnsn%6>=G|0jQLDzYjkB2)wYZ5rhtZS9j73OI%+23DQ|FPo}<ykZN
zdGhi0GPMZhMnJ4u4`U<D+amX#g|D~De18Bd|Nfn|5+BrGdjp?}7KyvvjV#2w`9mkt
zN%O+Sjk()CjT?*|TBOy_8`d@JVsAWI*DS<OnHi?JIT>uNr$M>|aS<&%C8ij=@cJI7
zZ}nX%wd35CPwV*c3xt2^IUWhyjbQc%m)L|Z+?P+Bt19IiUMLl(^hAG^)bYFXrmkfK
zI)eX(bqO+xkSakXC)N!?!%w0kJa8K^_!D&&d}N7k`y!xVrFYDhPvcqSif&0XT@hey
z+`8CKu4)t27Bgt1-lgQFe9Z*A8~F1`+coOr=!^$e+cM1h_Q7g31H{0Xf@_k33#&uK
z>$g1KUY0Y?TbMEVd1Tm$-w^RIw_}d(lJLVm$cJyuet3&K`BY+2Y|vpp>#4iO*!X9E
zEo~5ZHnp*Ak3Eh>4}N!0<q7JLvDgOFmd-j1rJtB#UK13>wmhIEd5yqMehc_vy#A;!
z`zWUz={c1wY$@qBDeZIbmY+^I!BNiqccvALV0K?*++PMEN-X%w!Iem%IR`hNY1dc5
zOqF$(Bl@H*c?f@RNanMas=^+fQN%Sxl+XK6DD3lFg#SL|y>Eq_M}@hBH&z~NW*f2|
zv@noGL8j6$P>;k&y?prOAL%!3Lw+4nh07XTa7gaiJM^w?dKB(uApCkUC}$`)N~f!h
zo2d9hudrW!K;@>ATR1@|#>eHl(aF;Y)a2@$;n5LxHK&YE)cnM`$S3_KVF@Zv#u~sb
z6*ShzudzP1om=sLjf4#!-|K_Q;{{h)KiW%QTd=J3<+{o<!%&mD*zvaroyTmc>zXZL
z^h!q}XjC0#DjbV#fypPnr}=7$NG~^`LVdiXy|<ZS_rdhTfAuJe3)in&orx4=m{F{8
zYcax3!D}1~hgL$C$lm*Yw<(x}_l>Zolz8Q~bg2+X%+}@C!8K78UVBQa$f`mK9Y2LW
zgPu3*F#$e-m2kri)z8DHFF(}0zxIvJ{p7a=gTpD#18*ZmU0wiNGKLd8wAD>ZE6Y>7
zGt9|Yyn9JdhMTO|lbFH_8$!HA60@6Nx0LoIt0*+CUANdx;c3LiFc`^8-klItG{#P5
z`ov=-^7FU7musgBW1ozpZU3I57}?9jcCRO+F55xImsbdlwzgwU?s*}ZJdwef>zYVz
zFKl<{`T&eVv=mz5n8#yBp1Dv`m6MH#Vho{Ny+E8yv-RQz><P2@Uz<316qbe0yzH<V
z)MuH1&wO(-dmmC<{+xdlegzAEj?FoM>LCkn)_r;_Ei90mU#B{8KQBP1k5N&Rcnvzh
z<ScF@2(!`=_Pv4IyRFptHzy<WP?45^52Y}0*DJ8<!)mp<akx%AK`%riLv9bwUsdmp
zvG@@2(DdopviCA3)+l<hF$$mKohsDWozi0d<dt{+7d?+!Vfm7%mp?k5nzsJrS0Z}(
zW$LTH^W`tI`TunpbitoRxMsVbt_uu6N7Q_taSj$K#?n~JdwlotLa&goU^>5rXd->R
z(1d7DSrqW9=&I3Lg_z0`ld}Do<QIgoT@Kj)dx8~`8p-&$480!fJ8TFzY|v`GHXeo+
z2pz3K3uLn7D|95rJBfFfA>!6!`w%<K(Sqpstp`?mtp=pTbb^vElyC-lOECzezqOBX
z`@j|x1y1xAG`t}+ML@ZI>&|(d{sJkH{KeMx?-RW@DYZ!{U%tA)tC&hoG#3{AW6gWK
zozkmYn;=}$&R(I5*zmcJRKw-yW4ipW5%g=0{~b6xr~pwWv`#U1NWoZ~g<wO8>+LT?
z$aXjBWQBLG2pN%~XFH?!Rv^W0tu&Wk#{PgiD0;J8Y7(-TXh`Tre`EY4;zRWxYYT>#
zI0hu<ri{1YPnv%Z5YYL40l}k_xq^vf97UXjNWVeIeTsP0umW*`VZ~qyKbUd`pamjX
zh%D(!m#@&%Pumf{1*E<WjGp@TivvIdh&3A1LJkN7f*OBzPk;pDuAV(PtIOv@-|6c~
zT>fd`V?F+9QTWmBPWV%i!oH&RSPwNPZI9A>{lb+>deOE%@<Q&Una@lkwq$eD{qKF}
zI@siE%=z1E#=U5aIF4W!IXx8!@+VH6ySk|qoe)kh`}&s0oyQBBli8sZD;TBaXCK`P
z5JO7tkl57%gabcD78RxwiF^hpCLVK}wO+w&`EK~o{JSHRI6?CVS0lRo8^p5^tynS-
zhQ#&cR3by<t;#|fm21|`=*Wdh{UiU~RgAZx$B>+#r(7gyaSHXJ;|bNG6ny-8Ho|0$
z?%PkP)L%{jmPowG@5NKcz<7y-4T0}f-yIX3v;Pyl^?2vLLKZSXOb=T8x@k-08SJ{E
z@KO3$(d=qVuKlB7!M6)?J)Ml@Q4-M~d&*sVA1XRbG&~<P9G{ECL#qB2cnCNH5!jU`
z_brmJP;&U{r}qO){YvY7LD5Q_ZTo`2$OYdLLJUM`rjtb`f+*l*$t<2k>17jr4Y38t
zaSOk8M(AIP(D;N>bCJ92MEr$e%Qu#d2pyEbv}N<R(l?W%BT!yw-99Ff68t3jQfJ&A
zH{z~t-X4SR1CIwogdLY+f0^>AOZbu&&o0?~141kqDLy*k-UMON+XmUoM?_|%$|N3+
zQ$<{yBH~qSdN$2lDyo44TLt85a_@YGWJ40_D}%v`RL@|`-pEwJo;TDZfirsqW0lJX
z`ic)N<Vxn){tcIcz#&wwohuQBSrTU;!We`(sWRC^9of7@@l3sRZlQ~Go0LJ<SVWOD
z6rf4-=>+R6M5W$2CZ&vO7T%=%Z#>;-N20G?d1jN_{j{z{Ze+646G>9G+F$+y8m~WN
zS+OBY`a-5VC<X$~I#-z(fFcS4<tHg0y9l5aaPxl)7X}kw_69~CMG$;t)h4oM%a(#Q
z@FIUfiu|OOs()|L;PZ%Bi8hJ2=T~DJMl_S=&%{}#w`djKR&{S3U6XiJq|E2#i4=8*
z=dox%;*^$-?&>c@vLeEfzbEszplqbUWkj|Sudppgcg4;6m>f**&&c<X7OW360tPNS
zjD6%08L`A;7{xHOqhCZG<#}8D*4;>gK+g8lWSyIyoXzn*w12Iz>`My$fGN_g+`y|4
z{Xh&?ADzSf0z^e?%?gC<q*EoY&XUt6ykcqu>VQiCeteo>%3cpL3a*<|cJpJ3FW@Dj
z3MX0ol~si+;svgZ;TFX#otUSF`(D|?M0l<J<s)9#=8J|8HSccr^K}Q)c9kaO7lmC9
zjT*G_NegGonpeOyv8?(8lpEh?YcBl&irr4Gs5sNv56EM0_V}-;A1FDE<5_jriPqlL
zT1;LIUr)X#+$9?H=1fU7dp)eG%Ku&acowz=LTF#9nve8kh8K@vbGnYg87F+WUV8XY
z{5|XwO3lfcUSH;rn`Rp^<LK+sOYY*WBT#xr^-0RWjRRUtb@r=C?{4iMTG1*jlp=5!
z+0~oZKA%~R?JIdGEN;Sn8HivvxGeIWn|vQbtSl8Zr?DQJddGbVeF81*%a|vZvSB+M
zi(SoJzTSj99IYe_Bv0V3B%fHlU-O7t+jGf-OVKXvSue1ALT<GU=r@$&wx$1BXK?Vg
z-=(&0Ec2_`o6$s{+h!KNKUvquo6Igw;Y27+Qev(iaN+l1?veFn<FmXUfGT}usHd}+
zf4-Z?qFK)|UUedP(lqh6WuOoP7oEt}TiwAjr_Sxr?tFKh)14G##^_x#+ekJLP&OjI
zX$uc_1>e^sYt^Gu_yLt)ft0GgK4&C)q~Y!ONO0nPP4q7tW_ALo`hyew9d))Cf3U7&
z@-;3S>2#BuL|Sol5ZSF<(i)40!91y{{Js8HFqaRW!UsN0!qKbr)`5LbmEa@Xw<pr9
z#uGE=urFM{EZqFp)WU*k*)??qFTf4aH((CLT@bNu*39+fxR1ShGqP@``k<SWZdv;w
z>5*&}lgUum&aZ6a8dAL535d0}n)ts$Y?vqskD)2+@-{4_uYowNBiHpYPp>+<E{9?t
zBc-h2_7stDtOR2V?su+YygANEWVRtb9wi=~of>OAyXBYw<#_ROo%Z6@16(A~I7$U1
z52M@j!^$uT5}rUaOzvyP#_#8(FWGo6KM_u#*I{`XqCm##$VQ<Cy02&@LkdUt3#%X)
zE1E?uF{~cVS0x5_s?)#Go3Brm=zUlJd$gt3G#{SxxaB$r5sYNc=`LqGC#|@5vWlD7
zPb1ybM-O8(lgwmDp0EuJd}djR@!IUYZNEXUjbcQOHKSW6PYCiK3WHQtI>+6K{?hD5
zA4=SYj*Yr_f;m<dH+w2<l?xkxPMG?3oilr#wiv}>zwXhbfvO;Tg-|G%iFtoda{hRG
z#72kM{10m3f<rA_W<N0Fa;|M6n(+A(!?0Kli&T~tsn?6PUGuK>pA$aZX-n&54jWBQ
zW2o`dNO!4x1|QZB<u$hJ^(9_$2_N@ou)b8<|95Im;Q`hyGKTTdc%uC;1~YSIw~MKH
zbyR?APheh1PL;LjtN76?m{1!8qIe~`gk2#@ST@<;@S$Wqdo5Fb^a!mF^zXUjq~bJ0
zXfSe_%HeI;YHq<rhMwmwSdaDV?P%>AWt5I8nemYLm`#iOp2b0*6ulbsLU;<%wCYbi
zuk1%!ZHRpgy@~Pr?Lc0t0U^q#Yu&4{vNx#oYaXTK>YKKcV{2hbA=k+g<f?LRsVpWa
zndo+!?OEk^NJPVfD~p`1I<cI7>LN-WetOA>oFXjp5o~fY&HA8a*c|em?{7i3SW6sE
zwXGVCZU}cEDNkldy$w~ph{{Z#_w&a3uVBo=M#UgtVWC7lRC?0uY)^D7N9%5u<IITV
zoPhARkiWFrj1$DoTy3PST_4r54nQI$9y1A21`?<;J32X0s$^mibO1`U`e7gQy0YI@
zen}SZi2M};)^c$KJ_GswdzS?-QDnh&J;k@Lv&E!?yP48Sjyq(`x0#V_4+l1=IiyO2
zF9uv-EOEafNBE45L#F>>GqGJl=cjVDvej0Jd>6>w@PV+052Pc)Vv7YWteU^^eM|mF
zK-d_G(R*)fZp|4btuTQuU|eMn<~i}p;;`^B8D2q=K!QoPHAYXQS6#XjuAgLQ(i6YV
z%FTOY_4$0SuQfIO>xN~^C^!Sm3aYgmzNO)FD>T-yC#m&Rc_E!`?w7^PNLi)_tzhOl
zG4IQd($k$T<{%Uv#-tn^e|8GE=k4_F*_OSV4=(nk_yP{O*%-A-=e7xawA3&gJK|9;
z7lj>MS$RoR9KP-@ZnfMiXK=GtzwEP|?j^e8(rpNv05~}H5^tsa2ubb^*;thQ?S-d>
zp9d=p3YeTO`ZA*al@X6bA-XZ@J>8ATd-(F5gyLq_7ivo`1v9JKT<(q-V~=|dxREHz
zV~fYKeYck&;#T%!%`tsS3^zBX64r~Jb@q<aZi}z~3oGJNg)s$7WU3{_z4Wq>sDBb^
zLsVNrn9iR9nH0>^FB_zDW%|`yV@kX362_y_Qg?|mn>8#JnOirXY5ft!|F1eLssQQ?
zXYbfif*Ft`6rQtn2m2F1^an#&l)NOY#(FJk9CTxI^ROY%=9^Su${;dcXc+@&Uenle
z3A>_5Pa(K{MIry3``S!+SGcR@?<gMkH-;FjTi9U8h*5J5&7^dcEI<^c8-ORZc<6?p
zO%$d4iX=vwlWs3fATO=3HY;SG_#(DW>U3Tl7IofTr|2k2`$ti5@j(T+n|nQ^&{D{=
z<DFTOirfAQX6$xcN_S(lS=1;^8kn!r8-@qP=7>hE3%sU;7@Qkcx|~;bMoO1TP-7x+
zJ<Z1BK}%<M0_NT*o1Fl|%;12~q-(r044E_{W4TYL@Qfv&&$dK<6bW*>mGvrTTr_G;
zI>2P&1w|;OrMKl`fcE?O=hexViT;A@w&cuy5_qtQ%-41Xc_B+!-mdFo*7SO^5TCW*
zAVLH!O#LbBe(bJbr1P4WAhFV$BUtia7=K&GJ8_kN_j?#M=+(hTD%-E9>7c!DW^i31
zp2GdoI|TiAX@4!@>|@!q6-@kI+2VKKWfJ?1n1C?E`Gfq46ZB#77342zN;QB5EIns(
zd%`Br1a@{+_8ogn!FG<&r<1!h#hMz2+B@Ou4H9YExa`7g4B~|vYx}OfV|-H+lodnK
zm&~ke_~migL7J^RW0Uj0a>0Vbh$rR~%4*1EQT|todmHcW&a_?Oy!8hAn63o0?233n
zQo%}LbzCaxTYD7?uh={c-}NkhUV#4Cx??2a{clHM_#g<^+iLQAGWDUQU|xBjwq1}x
zo!Lbpv$n>xHWr2GAi|Kfpt`vqsf4W$pHvscW-8kr5Nt1uq*5UNC;?0ka4-=Rm&xJ5
zxokM&NF2vO`K(@Q^u+dxdfWpVwfK;=U9;LTB#7je?A=3Wgf<8AqsY_bXf2Jx_u4hf
zXcmZ>*k2w`R{W1)%xq<O)dWd1h~fRh_u|^qF}f!2@@Ozsh^(byULgXL?nHW%xz;hv
zSF_UP5zit1+TX}Nv1-;y(`}0y9aI7l!Z~yW01_jvX`#S#E%mLifn4mIT?S*(rB{et
z66??0S%@=UL7QF!oIPl41#Id_tLvh%GHe8wKQL*rU|h_y9)EaOHmLm_+mqKbF*~83
zNz{P^X~8u;vTvK*)Q1DRF1zSwy3fO#9OKNAS61-;13Q2zIL9|{yCwHEm2KF(ssTE&
z>HI*og28i`xMK!-Pm_&+40Zn0#I__)sZ`lMTl?zH8Z7AQ@b6}&Fb2I9dv{CV$B5Y&
zO6cxA)SaZC@jEa5G)$g>Es|x8E#IC{Vsp;4{Wi7eeVOJjo>R?Vj3$x^s{7r=3@(*n
zgs#Jbt=Mn@nZ<WOt0pXbboc!=Y$AcOm&D^AHb8VBj8E?HbPX|ShAcqsR}+04PPQ4M
zuA%wFdVbS~<Bxa!?PHIKe+6V1W?8=vRmC4&thu@=OzK>(d!d=Bi>{I5=U@rgKTnCf
z6F$Ec0&K3Ug6j=&-MkuX<X8F={xuwmvRR(SvEtCF$8~f4X14rVlci<_xvvJkQAUv;
zQ>6iJ;dB6645U2ZL1=qLMDp=W)ZS_9wWcv#TrIncgT;^T_}-=pGX>4Bx=^{D(6-0S
zHY(fwY)UIi=8E?aB0#yNf#Wc;etOXvP;Sp7lO1_`r#d}cF0wrB+WhbQ3S15@i&)hH
zopOjfx=&|cFtB%rdv+vzc-Lq=aV<C(K7c>D)t!A`!e_x^vxZ>@ZeMnjpGeH);v+o2
ze-R5<I7vd0U!Hh|%+oqc2iQ{pIIXeox|5<ZNf{P8uB?=mQ;Rf_*5@XYTY>z{uV(n7
zG@PTR9EQGo4F_sdQUYohR<gxLr6dcoW*Et4BUYij|5#3@DD_^H-7Xg~qZ`|Fs{}h0
ztwiw3(KTPUb9?(AYb5TJ9{LZzJLi9`5b9LN<*I*tnyfn&=i6##b$!m;oJF#DsR4R9
zpN!R4FtVZ(>dqjJezBfNm(0Y({`DqUl*ILRk7&oKvVcwX{eNAeY#f!ov0HJ~<?QEx
zNaY(QwRZGgNEod%hjef}SyC24z3UYQhLz8~pS#F3wm-n2Odf%UQx6yjXAkhG$XSA)
zT*JXmR{BcZ4gox_FAVJYYJ9tRQVhhoTxoC>l7}Ro*$Ok<VOPgY{a9$@A)ZCCP7Il(
zmGJ@pu1$<E*ydedjD1m{ymE{NxL-o(3f6L&C*}69X=NKg%6fIY?ZoVfs-Q_7+C5(?
z9MNd9o|fJ^9=-K1jMAlG)^9ubD)+l-%!O5<;K6>)$zUG+@<?|OPDPZmk^p7<LY^60
zm&ZUTB>0*EJ7=<l31s*XFa2APGccib{nk{M7qC)bjuML&VdW&6=_g(u({~mxFLn~?
z_QyA`Md7pspK24Hl`^}K_+90ZE;b$Osyx9oSM{ZTcatT>Tdi`aeqYL)baXio_T?|l
zF(*m5cPG}UW5=}_EA5IYkG$5E!M&(D!}e>zuHgrQD%UytpDLo)?d<5@Ab5J72AZO}
zqaJL(vN_sN`1X2z6Wsxb_PeYZ{2d0&diZynQ%FPPH)?TnGSP-|&-%-N^?NxZN<s?D
z!pi@6eB@#s1E3<ep*;^})}U?LX-9@^UE8GMDGa|y8~{$Hd`o^oPYKpV{LTdRl(wUI
zE63huy0>RhBlez$YDuIiWw2wl8fb=CxC+&^v7a7;eO=jvrh6Rd0%eYOiWVmS*2VOX
zOhD;M6ZBS;=W5;weR&$ScuSdY{B6@AXs{Ko2NI(dAlA?ZkU>I;ffJL5sb>nf2(2vM
z_%Ag`{+(_leMKw~sh3=?#0;1CYNEh#z>uDB41`cUZJ6?tbKoQV1a1ES`@zc`D?L?5
zdv^VI%G{+KWOB9ZXT8TrmwMKRSz}FT131(_@UlH$-o(Rsp4SU|=w>e}+H3gaH!SSC
zVye_L$lYI$as61B+#Xr*xaD0I`LEfcij@6%^!7I6`Li<E(=%#SFNyEE39RXl*KXoa
zTsVAMP|*b8srXIGK;{sn_)VcJ24MvhM4Av|^8YF%iK5x?S9iBusY{buYcl1R^W>d_
z*OSo>gunYR%R*G>%oI^Kd7{U-Cp-P?9$5b9Eb1@+wZGhOmd|a<us;eMLd|J-{>V-I
zQAEb_8PRu}*ImbYy;qFO07DS<qVX*C()R4x;7h`|;6BDgzK?}v4|>9bPbXM^D+<o+
zfPr*ovbJs6hu(UCXo#`5PwDwVVKRrW!4Q;W*V*GbwbHa~p&kmHpoG-&^w7EU(Wxw8
zwUmUB$wlqo!C0!A4Py=4X8Z}&^;6EoQWIWW-!PTX+b$<ezI8%ABMEp_0b)i;53RG!
z{rq6|&vlD>s(CeP-Y$|-Q9WClI3-c?0gQ&qVO26U8@>!^<%zY#BSNjXl`q_Y8J`d6
zSyXvg(9@8%3QTYgo936H>*wXQ_rKOY1Ql61<aT&O>NrVIlsr!RS6wL1!QIz^(pQjR
zEB&<7y|{RDgt@gQs`cEjm#+14um|U}v$vBSuXr_4w0DVY-x*Fvz2|>T*!y?dB24^-
zI&tu)Y4s4E%iCGy0>pxf&3zT&_2vhFk=&(v;{t@aBmKAbF&>|toS$c;O|kO)R(E~?
zB;AUa1$D^*sumEY7$`YF^1#^*GvPh&=*FVP57hht?<M@+t2^+A)V01J#`rX7p~SpJ
zNyRrrW;56RXTtrdiD#aO)N&%7O+^hWq=^4qSLNr0ylWV=u4(&@uLeW8^2xTJ`+qgV
zJFwugy{fR55bBXe(hubqImWQ?;raB&rmYdSm})RzQ-Ah8MsZY{P}Bp`wD?8n&>wci
z8PFCsoY3qWejigfsPTC(&8mGwz^F&&2QPka=eB`qW|&^++I5>Y>d2IRU|V$})~YP8
zik$9yd;9AY`#6&XwEFS*UvrNF%PHjYzewd5<4qw!ka!^{>hc&}jVSF_wI|(-`b`~}
z#hu|Cuf_wQJvrp9&Ak6uiC}T|l7}tN-n5*&mF0N%^zQceME3I5nXL7&K~!Q3h8lDq
z|NEG6$9E%-pmhpxCc_S2{)E4j`s-$M-1r-lDW{8L1?77##RD`7PD8zGi92nL^vj;j
z5wQp87A1O6#-y`C1S6D3J&KX4>iE7wM7jn&ZK;UXDX*2q10_bXKQrIT68t&h`D~d<
zb7%P}vRGYTtc4`9iTO;YS{-DG%zE45L=-%fZ8Q^P)2p>C@TJo*?IYRJV!IDz);cZ!
z=MUt+x{<Y@2EYe8&yF4nT8T62_ZcOL&A)ol$MvF^HU1;fmJ+NzK1%Ns?XbLzRV-k-
zNexWnoLmsr(nw(E8k>MH{%J=i0J+4x0e6q|Q=?bC6hadYHDcBE&xC<a=8&=(r7!X&
z>3QT%qi3Bz+%91H!PM}HZ774WZ1>Ef%TvASVDhpcCO>)dvfDKKh}FBr=Hcs?Ao&Ji
zoxyIS-60$IM43k4WRDIbn`y<Z3<%G6_@4Qcd<!{E8kmZDU}m3sT-oM<|K(kqmQTuk
z$__e-@w?o4RfM6Sy~z;nKg%5x1J->f-*>Bn;cz^nq3-mVy8bCowIXOv84ykfHAJNN
zhQU{juVRV~$wcxFe&a<;<f0$h5VSx7Oy7EAfVlv12SaN|8aO#)SoJQUJ{&y=ty~D&
zFA)jT@Jl8%Iw###DlC+l&{r9xTk61bsjWx2KK)~gsp1<~j%~tn8-g1m2TwVaICui-
zjW~k0;DCSYx%`5R6hxVyP`+4{w9<iScM&G>;y?pYE4Ziava*&Rn&=?`w&l=~38<ia
z%ibp=NJD25(rKfJr53Y<2$wJ>wP?!XI-t(}@L_-0@O{<ESj|jcbsI*&^gduT-_d0g
zC<1qH@LukENJhSV_2*PlJH_w2b7a~3WsbS&@Kq4nQCL2LJx@FHKS5sRM}25w=ho}J
z<-GNjg4V~JD<sL_$wrNV58hl<N(${@*w&DlBXU#n$(}rgs=g$oYhTSvP)Hr}o68ae
zetB!UoBzA&Lav@$e$Od?UVDroWo-W){a;Eshs??Wis*#Tkzy}6w61?2oD+-lsipQr
z+K)MwN)6DRVF|vr+$gtHMJZA5Dw6FEP=e92F1rro0CC0!7FP8U+VLA$7GMJ^t~Im0
z0T%)@la81X4QzVOhN5XHB`4Xg8Q}I<+0JQ?SmvI}X9rPpnzL)VD2Z2|5TJM}G}J$H
zP{y+aX~5eKf04303}r<M>H_m;3AyOiq0k`oAutLcZRkcd++t)RiHgEI3o3rG<0l3C
z&~$!6cVTS1{>n~k7ya@XZgb43XT8rcd{H39Q<xD<QX=)hdVB%h5g=RYEgw)a+i47u
zM{?D7=+5HzsE}&4DFyBq=refa&IyKzmcDE0?0rwJ#erZk@>Yp|ZwPT#sN@y>V_w1#
zAb|C;#c)zr-xm0NaHstHDfc~;_(^SzI*3i6AN(~-Ob1mV8%S!`enJ)^D+*asZGSd=
zFdxQo1>2$(F*VP<bv*GFagx(HmlzpbUqT@Ftx^Qtv342x#d&N$%x2u;H{c2j_JNyq
zt&lY|XHET(+06GfaJS|1Ld#GW#WyNY3{3CjRYDVidN_fLi&P*Q7E?^VcBi?pjp3Sd
zk%99n+4#at(E0$L2RA#uUDnGm!Y7^Mm38t?OfOzfcD{U?MJY<9<c#x`>j#<T8akl2
z+-D@@6ZPL^>RzsS{?r@;DSNf4f2KX(a?1e6J(CUaNIUUA)>_{3Im&Y;<zX8U(XMer
z2HL(XW|{Th>%M1Uw9$M=&zB5lb5lWS`$Tao@tOo_N4asOKBccQpQlcl)t#4t`w}w0
zd^8@Ah5BD9Ka4oPbFu96e9HjTo@)qtW&|u6_3f+~?OLh2(=gB4Q%|%K`Pl*A*gl2I
zF`Me+b^Z4iuf&bNn76;()b4nDK{*d0?3Y;TZGMKJWZVuN`r=~Qm2CA>tkD-|#$_3C
zG0hdLF1;V0zHFC&cASiTL3Qqy77#ysk)%~H_!2JwjG|w??Jz~rijl&^l!g=aW_=u5
z7$vE!6Z%4Op6^In)rL&UKb9sfGht7wlgHpQ3L}fx-*~vh1NBujNjy4U)`(h(32tlD
zpvEXgLi)I|fQ*>}?c07H{ZRLQ#KgUN&9cwbO*Ic`d3-oYTE&Ac7gN92h`l9Hw1=qH
z8nC!HDHg7S9bY}rZjCh#MRR;<!E+_B@!_p6E_*3>_f#uBb|vnP|DyF*)pvQXM?<H9
z;O@kfZ!*-fU{K?n){la4pLoM=NT%Qt;alf0WFe}!o!j`~@x<p)CFVYdk*{O$R3}(t
zwFs7rZjgj;T+8CSwcvVE+t}XqoG(ap!XL(nLP}$S*GBu)j_J=;$my})mzAe+887JP
z)3)4kK@y9m@f1(P*8u-%c2cG&v99gbzTU44n=@|Tg3O{<w~Y7H@j97^&8-Xru$Dpl
zVVLzLZ+Vy974ppW0a5~hCDOCB0$G-m?evcEF_<WjPBpRKJ?gwkBlSBDHj5%oC~UYe
z#vS;$VKHFYd++B|X5+Wm_*;{LibK8zRJ4@16!H65M#r?@+*B{g@|p=>Ewl6PhFZGU
z66W*0S4t%7!%z!=Sf>0bHS^JwHCZ;o(GXdD+9D(5E8vIz(vA<<<Mquk>2@PjSboUe
zugpyg)?qL7s1JlF3sIS0!cn*!^8ghy#{ncqJ<Q4Qe6HHfAi<Acegwrgp>_L`xReHa
z0N+XB2R4!MSM=7+WDpmyd=#Y35_q#j2ve1)$CIG5^T=PUj-g-g%XE|Sf|6}KW{tik
z#Xb(5gi3KJe%q2C5f@I%qs77N)v4XVqt-GpI>Pm=&}W&7zsfcX482M~ki-)!c3Z09
zLd#;zw*wJcC6Gfe>1u@3KPbAQde&M~%B<^pdrKQ=>h@68&&RKJtnWY4IbrlqnvVlg
zWfgEGG(R5N@e%SNbxSH-n<bNJl&-_@)s>yL3zOzq2t~ThY=cuB4}kBY=kewYAU&w(
zQ5PdV^cw_VbM*X#&BufsCe6Qr8m27b8WLZ$>%BqD9!`PLfJFnSD(Yr!q4sgCwOc%;
zqheP?9KMlE3f2W-TRNVoQiZXD#-lTycjtKF%ioZRbxK=@EJaQAmA&6lFf#E&Kb76l
z0{iE(=uen>d}kRqbtd#AqI&QKFhn1yhldQ_zRxj5y&2I&ble`5O8tr@)b*oVhYf!-
zPpLZ$T!QSRSG@4Ky)S)5bKJd}W`2u}!Vr9I-PFa=ZQ4!=MoFBd{;-YNjI^dH@W#e{
zDdWVx>)RW%K$;*+O1U}B^7A9$!+2D#K<wH*grZmv#h}q-%c!13qsIeD<kPppFUGaC
zWIVkXC6}PX+us#4t4yc;#QKrV!-+(R&ujO2T|Wb>b>;e^7OP^<T@$+>F|lLHz3iI-
zOpclHFZxYYhs87?NrKTFf3jstYW=#ID)9r|^POU2VYS4M>*djhf25(<oIY3*LSVX6
z+Jjna+XK)#&Og;iN!`HmLF=3uULr3)-t+jtOjGS&O`|obHJyjh@q4ocH|b#n_M}MM
zkeED5*3T}V_LMX#>pjeRbH`_7_ra4s8IIb@blN5npNoG2&Zwxy6|(ck)Wc2KV&gj3
zf_Le6KUei#0n)Qk)~p6(X1?V0_cR1vM4)Te#iSVwbDsGKL%94lp~OmqS>$%)22@)q
zbwrZWv05=d-g^Nt%~laY*s%DcpsEPkAzEt%Lu0n%1Hl+HggUJqy3+0VP=$%$w$FRi
zlR1{)SRBm5&lDBVbH0lUxhuJCk5Pd0P=XPX0GWMvw5iNxO^as6n8cO0v)3+~bs6W!
zi5y5D#-32Z9z_R+Mk&R--Lj;=aWKZp#&H+$3+5WiCz)K%(H&PgZW1UP-%S&itsos&
zu%M7;9T}Y6I=SQR*e>}G?>UMxc$i^iy8C=3aPMcl$2`W`<D?ewCu|gt!F=ygUC~qG
zc1iU+4Bsg2?M$yDnU;4~BPZ_-L+Ly=D9|gA)jENY%Mja=3$A6U5xoKIuGQK<vL#y^
z{5xEWu4r`ZFJnvyx(t>eWDvS~fZ_-6Z0=9^{Fr!`Qa<_{$y73P1Weia-2}Pw;PbY{
ztBaj}i68g=EI*aq@=|EsT$U$L5;hfDs2<wqi3ME9@sWk^D^IluaSs>t!XY&&wRiMc
zuYW8lf*GKCZgf@ve6$P>^tyoeW({HX+rGJUzI!NAL!Zt^34;FjqmFI0e^Ok3S`sUJ
zLaF3`$@Zj<gHe!#G&AURQ-zTW3#g*_Y?>{%@Wb&+TU<m%A`TBI)iC>*zq8#zAVNU2
zA{fX$E_S-p*q{8hEZ1?emV#tkIZEY%@}u0GyEB4N!WjFX2KzUl_TFP3z!k0L&>L5V
zRxZWLU)K%2H!_g?m?BJuTI1tj*<7~q_us61SsadyD_p-S*x6v45_x~;i}V2WetRUq
z4u$QL0Dv%ze_aMDpt(cNd1ZSzs9*nUMec{$4B7z>GrXEhQ?~-Fwb1mrlK1o1lOdDY
zukOD8K$MmgREU_4@mjEmER-ISc%YA!?=|0gvo0VLU!aEQdj2Pbf2lZK@P3d*V1H)g
zQPD=~efq-}53Y7Nji^jXRkH<Kv6M9Ihn$#C<p(XN7T-eovu6n<it-xVb9;v4ZXGST
zhTIe`nW*&2axB2H0ne)Ld7&N1-g^y+R*tT=3_{%%q89Bb0XmfE`clJ<FG{dV9CA`Q
z#f-s#S>c-XGY5yaT+7d!nDr$zY_9H)Ay58Me7o*%dDqFuwLp(r9>g*o80CL;|5ofW
ztEc+KgiAdyA~w1O-_wST;4_-tgW|ntEoaA7wypas@VFYqW7=mXdfDy;GjZwSfn69_
z_#u-bhDCKOI=6O_WUOXSsdaHn_D@7gteEuy#5G%pI6>99v>6?5)CMx+U_lEU9GUlC
zSn`qSzStmNp|OWGP~zS{XluMbc0b`n=_k0%G=T9d{H5nq0mA0(dgBg-NRYrZeEUGl
zt3yJeF!RZR_}GABG19-%Mx5fO2IT>Dn7+*AEnlgaKNBB9$yt0@{H?4dz;CMDAJfab
zzSFa^x(FB~Sw||($*su7&r9u|DpevHxEgG}R<ZxIJ2=CBfXI>Q21i_Je$FuCsH6>z
znnfd$t?>l2wG1h)vrGmS8G!O+UUlq%*KCMR_<HV9g-PHnO-<Dk0@h%2D$c3RTPNa&
zPtOfhZ7+B4C4Jodz0(*e26~YiP6#R2-1Z%^p_a4Hjr}B}_bYFzeg<RoF#OX9+uLk#
zPPrO#ulm$Ww_aMy@I=ZWSZ73s1f7g0UArBE@9LKSNFV<6BWYG*t!v?)!dn@Z7Ymsx
z0K#rgKK~C(gP2XTo{7DY@#7K7^k$u`GnSP#)A4)|XKsMfTm{>t#+0~l2~UQg;VbvS
z$JA27v7bd!W_xQoMxdh+R#K@>da76Yg54^gVBu6&l+eL%!vtu6{BsMnbi-oOymyro
zz72LTJ5%tMnV|jD_dkNtA@RGSYBI=Z!<N&E`__<ujrB6mIbRV#M`^{!g|pk#35o}Y
zNw0*qd96gSF3o5eOQ+B~Uf;-aF04Uy4cO*BIo6s?#=_%0ZrE>xf$xJmJP$q5h0=V=
zekcvF?J|o^n$LHVWxJoHYd_c9h&5)-*#Op{9VJw3=mRB56n-!}>Xph!dezpKNA(*k
zWB2L7Tn`Q629UTYfFIN_?jZ*m{we)d^!1fJmW4a|x;zMaw)smwc-!{kW@L2Uua{9Y
zclygOD0@G2@NbH4`Q%`w1udgvlpf~<>UhekNEBQ7lC0Lg>GY{TV}4d3n)>9GE8F4@
z?Jq44wt{P7uiZ|s@ykM7J%0TnWg$+($b-%cO-`J|MqvwnG3BQXN#6?8m2NU9)pgS6
zQQx_6a^sY={=s%=vxEr0>Q(iw@|*z<0K6k@dr)zF4`p{%WSFr)n(uZ2qV<HTJ+{O8
z_?pO@yQrxBXVX7%utdxzc->v)=Y-f+??nT_I<@ltH|u6xp3Ibd%CLIk51ad3zO@T-
z=UF1$y0#zveLWti1ulvg@fPcI=D+OM%WN~=L1W8TAn#FjjlK}C4$W%CI#VyS&GOzD
zB6YkrwEp#@*9vDnBT$6sDgEk;Y>in;Hi3QcQkckolrIq#Edt2NMp`5+;?K#PZ(DV;
zDuk5)09z|ZaQg`4=cflmL^rcVx4jg?PbRDTIv+R=JNlWnqI${XC-vY1dwxhVmiQ%q
zk;_GblP(O%hZ$w8R9r9jhWk(eHNZ{rS=6#&OC*lSB<oKN6nIP-M_SI}t9`rf)HvP`
z4y3_ZkJ&KUyM}ou9S?{$?+&;Ov^y&3zH8W8rJEaOFe)opQ+Ja^>5r(%PriexdLdu%
zq{i`k*3(CfjIPTpE+!0Lj&*D0OF1*PU;Y`qHojsT&M@w_y@H!oS&*AzmSYReR_*lo
zSx)^{1f6@^uG}9*rVLg+EIiyOW|GzAk(rr^MOz=Yzn>E$^V&{7#ka%oH*dNNC7PeY
zaS2^twkWxz>9eWY%WLX;Z&*FP^Mu@@pm<5|-MPS<a>mc<G?motB1Y;fMGgxVWTV)R
zv?1N-Q3VDal_<NMYUH+%vH4L`h+XXNP3?Nu3cUr~qEp|QJ_u8nSz^v`zLQa%W|N(6
zq_B)plsaKI?M-~wD?-7_scfM}j>=fuy*$39a`!QfjqMYFH+C&7DB|)dBUExw+*8sN
z?nJD49_uqP6$>T*k($M_Q~7(~rAlU7p~`W#1zY1;A6Efl>nVw62gOG|OE*zQYLb{B
z=3p6^WWagj((caZ`_jfh;CpMdbn0nntwWM@)fwoc(8x?An`6KrkJYKklOS@D5W8iM
z%2Bvxw008FgKWeKUqqr1=~Rrb+B@dR>IUBNN}Z=NiGNCqaS=hrFT{)K8^|L9c19Xb
znT^#ZXXcvNNm{vsllC(c>+*;WTa5sq>$URU9Mn>h<Jgb=;N#Y@hjhJR^N3iV+{ngL
z;zP|ztvi!~uU&eS_#c^gp`A9WIh_DL;H`TUKf`I4Fh2|{qjz6OMS~UP0k%R;c87<u
z87oOb@wq8LUs;d=i-g_@6}pN8p#7-_m=k1t=LQ;;tNSuLF=`s*Yf+zdm$9sF;_LFQ
zW2QeD3?3T?sB2+(G7LBY0Q%D*J*g(?zOR&`y0CB$J}t6fHH}D-`2s_+U~%NUFL7vW
zrlr{6A)#gKFH)1zHPHMOhE3!-!`a<4r7=)S$nFU)2HH}amQzKaEUpp}sW<<qL3%re
z=Je85;GQAs@y#TzK(m|QHSFa}Wdl4*IN$QF1mQ*-t&z4@M^~uo0F>st4;$c}M8o3I
zR>veu6L}Ms0&FHg28OFwz5ohb=Xj6cj(g18M0$Nm%Rk4?jE#W&AWR<gEcF?UK`H2K
zp7nS;2f@+Ha^HEHZFcEn6FbZ?%e9DRW1Sz24jY=aL|#a7?b33M^0yh=gHY$Cn36tP
zuhy^EpAXBtS|?VGK;+y3CRU5EyC=4>nqu>z8=OJ+oILDL$lE@@|A7QRut%wVu-hd=
z*%R_WxLL(X?d~__EvyR=ySN}<9x4#p2|rZg?~l@<(GH^Nq{_v&C5f>M%B+6i3Df>A
zphB}Q57s6ib&;=tk2WaNf6a`6M=Qh}pu*m|{ias{0cY~gm}iQS_OoD(eX>VDN#cX;
zPot@8Nw~eOK23wbDE(*~IWwT$0eN=BSc8r=!pxlZ0)$#~;j2Y<`;##y>C0T|wYvjx
zbWeHksqjbiZ|3GOU~`JJzA3hgkO^NLC+)sUUv99n%FM9yj@X>2Ipg>Kp;r8rHb^hh
zf)tK#?7kJ+Ki2I{D`DAc2fqKrzS&cd<9;L;d4Ah87(P;af>5lh$CX$`?*EwcsMb~D
zS09EZX*{kYz{16ZoQA6AFI>aO+E$HMqCSxMp#gT%c!gs&yJ0Tj{AUdp=<IZf-mE%R
zSQtPlVr_1HtORQ(PSAVT*3yGMLGG2Jcq~#M1;PNNSezqEtM%gsVqWahTw>x2s<EoQ
z5Yxp@UA=c{y!risjV<dMv$bsOL$_bE4z@iHBTUf?QF#MFzG)d{&I3E}S9ZR*OXj|2
z1P6U;QJ>|ZvJAK@=~vGU;2flWY^dKA8Mdpz!&eSw@fWI2IJ{`eHWLLd70XZ+;Q%P{
zD0laUNsqEX2qB#oLh9~(Vc+5r0$Ke!m^pE0!)@QTc^SiXs9xi46KfYl=hZ=M(6MRn
z^{j9Jx;WoC_L`+^C)H!%&AG-`!v?rty`NxcUTgO6`oBUNkWM~u?F!s$;3?lc8l09S
zX_X1iA%>jo8FCzPSj3FH8Bb-Y6&=|}VO)Oz0XTc#-W92a!@J^Nb3?Hax|g*lOM|fR
z%P*_fiyt^VuPZ^>$%fhVT^z$btk4B7sS4n}zF!$5HjA<1n7-qUmo7un%7Tx+)3DFs
z6PB{daO{}dYjm@=*b`fvrV1pn;@7fbX=^ox<|Hays1oIkMojVpe(;)pEJ@;C=T02^
za-Jjpj$;#AcCk3Cfk1e$jaSuHdF(@%c5+5=%W{>p<A|GUh>e(`fW*gs&%_mXB}>C3
z&)UbjtO~m^Uggz{2i?05+^vryjJ3-%DB*6KOder4trJiIUG?mU-tuFaLS>{VjWxJC
zhr7h%<N?EC(qgZ<ybzx{&-&U7x6d0RpDguj9prAP(tJI2DB>R|6|To=$MpE0{{`U7
zIhj2#<7{%{ZZ}Z;ZdM+G!WW=(95#7*&0P?zr6T^CrMkVGeQHq_mSF5N&+0X0<yyVh
z#&==yswh?CSEi{;w3(b}<gbFMfIDcg_>}Td@a}Wo7cVl|-!7=p{oL~bs(!M)l%0Kd
zo{MQ5twLy_>F!DnCWZ7{X76`@PN2@1mEBH>9wF=HpWi8YU>{nSmed<JJOI6oBkQp%
zWUfHeu9sX+>Hi$F*E<50zO@ETe7Yhq@+@xlkUQn9Uykd;!>aUvK7KV%x#?*(iy%DS
zw}PA3T#4BPctCHje}k*9>YXhLNVaAYeo=<G5lhvsR;P<kO~|moWuA9GV_w||b9KUb
zK+BPq9F?A6uv*t@BYy}07g*1yQ*m{wM{hPu@x&7Q#9Up~4~SordgL4?T)#lI@Ql=8
z(lD8YJN71i`XwCN0jAJ@zpm>h8Mr!ioP7@mh7Dv=ouPl>4gJI?AJ^yHKYTMqC7WhR
z&7jfJ&v5R0?H!TUkw27_MWU(y3vKl60Vu%Ox|oj$VNp4}`Al8r5d@n9a7Q0N7^XhW
z_QedBrO=g8omn=K0DF*42*>Q%>fOE_2*#y(!o;}eA7Q1$CxmpR7?_YQU}z1NFb4-t
zNNgGI5vd*mR?J0l(>?aWO&Mb-?CPDac<o`RYrTc)O;D<*npe>Zrd-W@77-Opop?+1
za9>UP=a10u@HV>WE4XK4t{9jkf!iZwecSjqWp^Ie_t4A{wIa0=V{mufBDOPLrP<G1
z&rBA4Mse-J(o#?SaD!0i*O24Sxv<m7(H(1lm&+F<K*|`N8W1HY^_~kAE8!^cD08|)
zwbiABL7Mw=1fM?U2$Cz8&zVb9Yi0ZcV*t-^{v@=Tc^-ZAIu}BXGOZh}>S6~}3Pee3
zbk+F2)%ccFY~BQ=ng<TOkvQHFczMRJaFs|cZBYk+1o5yr3hpr}&!2%4WXX0z=@r%G
z0-rdxH>y%#TUI8nk27uU(31KR{^85EQU`BG1a^4zXdH&7XFk8i+^}%tw+|svm>x)p
z+^(&AWc{hFLRI5#k&g6N=qF*-FS%htiyjsdXOIpJh&N^h)01}vwwXhVh4YTGtf|U@
zL}(1HXgoW@cg#J}c6ivm5>IdGR=i!dlbEQcgyk?1LQP*~Dq10s^_9DuW;>UQHnu0{
zLVIjsb$;1@_B5+&evay+!|k(RA@?5ZGRwK9;EY?9-CqKUL%y@DrBGY(*Q@Xh$@3?C
zu8C)dzu(|yAI)A<wE*q)ISE7!^=K(vf4X}n^iqp;D(2FUa}A8t=aklJ@n57GB}UNw
zesT6WVaC#<5A5IG`(Sy}t_&3;+!p#$VgQ<y-H)}zj`PF)#<5yyy>3jOACWiV*!}l2
z1hX-PhxN%cR>g&g-ITThU-r0^RH`+K{n()Nh9PH!m3=4}T!gk;2=TFsANnH0GaQY2
zA|5vR+h=Ym{HgfeC#~U^K7SwidJI2jOPCA;fG4mUAgHnQ_G!{SnbhcHxwf}d#RD_j
zn8NM7ji+^U=4%ENR{Wl5*rvQ!hgFwK&N^{>SO6>80JK(ps3#j6nGGORS&?Hr>kEah
zRHX4LkqXK%DSYJNB#tZtK(%X~F*l=0l3IebEr_+PfvOhp+<9vDb)f;}?znsA9JLND
z7F@-LWC~p$-6ql-Er$t?%j|z{cRk>bM>S`uaJ-Y1o7m^jOpoWP;!oqvY+SSklHSoT
zA;PK`OD%IQzh+Ljx4Hpw2iN|F;AWo%asOcQuR4%0w^ztNgPP%Pcn9S0rc<3<Kv!S;
zs&{1%_tkCyA%&~|WUuEBku+aE2tC7mST6%=`xh_8BO+sdoC2`rxa3}$CRY9(NPqN9
zStWv8d5o|xol56L%x_ACEF-1T$B{*)0CjzO@q$1i90EucFDvN?eOxvtX*}bFv~Tkt
zMVvA0V{C7+0}rUNjw*}9f7??sy2bIX^<+)qf$sg++ljBrvk-h$LU}VE`=@OTd=Eba
zsHOW7ZH*lZLx{bHrgui=LHOV!MoG{S@DBvGkg}?-^LdMr9q}CMmsB6~t6X~83gxn(
z<EX!8yyP)^{CT+Hhin6~993~p7d3AzCjCR{{1cyZF6(af3J?*zp+q$G#gQLJ%Vv~l
z8z)oYBJgG^&aS=$hoRE-2aufR?=nY~0o;*dcjAmb>P_dL<JBL7-f@0=yZ}I%h^u#=
zgA%S<z=LNf0M}A}L1lS@DqrfMuCR81Yq`zb#zvsZ&(P!BQsgT03txzsTYmAil<<J3
zPd`I_;}*JUXoS%WU*&;^ZOIHDM9HFj(xJ1<_87X!nUb5|&((R8qn2N5q7H=siVquo
zaF=VN%d*`{W}<cey3f0Y9F!Bl(eElbQ;*t%Jv?F*J&jHqe2b{a<zgTqMF%BD*U*Jh
z_DvZ1zEg*Mx$p^^C_)|RaSm0CJ#HhL)B*_IGZT+HepLh~D2RukOdPCbYU-Km0uHO2
z_7s_?Eg!#`Gj=j9?SB;qi;}<hTIyj>%6(sG0<b%+n+?EA7+?09ml%3n?hvkOc4G|+
z5N%GWg)8gkKAmB{y$6sT*C#)3)E|t@rKk?jKQ50P`X+dLC_nQVI8<I13UaxBgBmc4
zmCOikA}vu5&2lTk7dz6yc)1OsflZQQ^~<krb(A~?H&bL0nbL|+T!DjkSu)?+CRV4H
zPwPBI^N#Qk6TV9`(9aC<5;qDDRgT)CzBzPVR9AZaUbJ6^e81cVc0YXa@)5@J+|8fz
z%QKRiR|gu2y%qN-8u;TUf$;dsX?7Ei{80_AWG-wWSSkmE-)6|4@IeL=jR@0^%7qiE
zzJ@GqOeQC0vVY<EfB1UKs3^Rz4OGXWBm_YkK}l&8r9+XB6p&8olxC0=Q9x3ZmQqS&
z=x$I-x{(@?p=;<KxCeit{@-=)U5n-N%bYo9pR@OV_OoLWm{=Wu$k0(jd0(UMdEN^@
z62igM|Iw<nv9}>--zs>$Jos0I4&i$+#Ud>>Zragp2UJBjlv-VBj~BdADRDPop}jZz
zK6Dl$(&FwCa3YSaRd3lC(vFhM_$IGAwzO644w4-voFSk!>P(_3OZ!^Sk%5y)JmV8k
z<nZh|w{fTUQt>_H(bK~hCy3Cj=U;>}+DO<(&i2Gv>`X_PrWlsA<#d(W`RP{icI%|f
zU`DE+Yk}Wc3}zJZLXfPL!2&Ptjl56KbvJ<&0X%Ajrm2x6On15|33$OS`@;GtKYLyd
zsK~IvH)=riI#J(8wWKdSMf(zZO(<6~X(UwS7i?oiB7EU1TSU;aX-YtJu4>8ehY6Aw
zlT&!OBw)J3lfEUJK~?LgI_u~csHO(n%PZ8wDIr-)SMFU6#Pki$`6BcHBV`ZK5Nn<$
zcdvC#At2R3NuPcLr>8`CV-mR^_cI8;zj0CjCP9lzU<e~2m1f%mI2qpM!eTva4>Wd5
zXCmR(78NY+qt{OlChLazWUJIQ=u)HA@NFR<A@l47VPnl#!;!Wl4#$D5s?VtJ9!E!P
zUL3FM#$jt(d<*IzzSR+QgJQTqHpu&_II;W&x)tmA=wZgmZ*%yyoTup-KWj)|zG9R|
zXW5JVx@eHAh;r(*-Q4u0%(A|$!aDITeEP<8qDt*a^2~#IvGxdQ-b;+XQZ4erzI|93
zLEkVYZpdwjltAl-V;*?0f4y3nTDD_}2j3s^lAGi)F5NyWzge#;sJZ+orQNVnV*JZ}
zMD&;UZY;bHCT=XEzTqDx<QG#Pc06F9G&?iX77#z#SDzhz47Uw;zm{02`&nh4Vyuoj
z>EMmg4XzKDWM`bAZ#Ip@wzxMhG=-;o1(Z=YXlL2tMZ*z?*s><Iv_52fZ6k+yay!V@
z3*W$<i9>kAQ{YCIZJ;%!1Qu6_2CoON?-kqEFL;XWt<Js(y%-SMAmyI--Vd`5xmmNf
zJ0ik660J?IZdbqeC9B!{hu~Cfx*Xri^`x~j)A?r$VPqasy!XtzJRBx#;V0SzUg|_H
zErFVw3|9l`A@{+!5xpAQrpl3b({3b__+<x`$1!oOv9P-kG0qP|r~A!5V#ALN)1ZK~
znsw#B6r<1TyY@LEJ{Ww^)a$WIr$+?&)1rjMlR8KDZ1o?&%)W(s)-64_UQffojR^+u
z=#`O2%nj3peZup3>>(MLIB13Uj7&A=VdR^Y0Q-?kdPP`L?`rx6i=+|b+IMDHRw-La
zLvA86X76u@L(VL{5%K4Wo}1lIXm&m@w52~Ai!_gUO1Nyj&q)zE*XE1G#5PAVW~ru{
z;N|+H&e}c-`bkb)b+6X7TzynfLe#^LzOaHUd16v(udAB!4143<|J4(bFg%4a6$pFv
zEz0&-=9t;F`SVt`1}qSiL)B;`=y`wvKA8b@8UE3k4jlnrEtb#U!oFdjb^g8m0bQD!
z+T3<MHd(f#DYP{P;Z@DTA+vB51<AAAO5_(U$wDiH$s-qK*mf#%RFjBb7pAN);w+^t
zROL7MwUy_%^N4MvV76ikD<6y&dI4<?tltcJ{cg#3Ex)bFB1OPiI_29S`GoreF6(82
z<qHs<-TJkkB{0o3kwWxGRf#Zbm!|Na13NsE4o;5`kTst#{8I8C(5@RPds(t|uO2iz
z%bB|PM|PsA6U6F#N6fLVzDUks|DeWh3M!2)%0;B0plRgQ+UKa~FhWqcPN~I+lDJo9
z-eQ4WZ38)LrGr$z;Ss~&*oe3sz!u<w@2x2j5}RE>t%?jV3+@YeVd*BYPNwb0zkTte
z_ta{7?%r;Nh?KkVb%!buP4{6B=ZRH4TIO0Z+mA+ZtAVV~CDN8dFVMfabVZDcd!e?v
zx{Nci$)exE-N}vWYOD;Tb2V{uh7AjopdprKUsUsMet*?nst9A0uCU(bZNF%RE3TJ8
zTPrKH(tTXT<v3wQR5|?JBGdle65Xd|@F+bhYd_k0{WFf89OEL##?MwTCIfpvzocc*
z*!Fl~n1*11KsvdZJa^4rBK+0<95u#Ux=hOcK!iw-aSzQLKF=B-CdH#RwqjwK2-FG)
zCryg8u3*M6ysd|73s%m&iTPQ#IQexUOsh3=FSn_m;Y!3e8wTzqXyrzSqMYU07lKqF
z=<MZmr0)xJYovfY0u+YOMc{O3ez>7ZW17!vQ4dl@kcr;Yqvz}yxms5JDg%h0nL_qX
zU}#NHJ>u!u{dF2a(MpMUZef1&1_UT|5T3A;IZMqOs_Hvn5{nOU+g1HXG5dc1>UmUt
zHvNbi0<t}uKjiGLBs?ac_!#AzTV+#e(R}mXRdOZB65Hd~D)HKis;B;#w#~;X<9a?K
z3wF9aej{-<(Cq_mDjZNUqo;T)(WQhx5jOSnWObjXhMJGug`y*bB*r8&^GDvJ#VoJo
z#RZLk>?ha}&U(9o29nk)R+`UHOA)(k*B5(CHBL)+%YM3mIVqe!Kbp33O%vfaTSS8t
z&`(ogZhwB-y}Azbys8JqE9C#F??OGSd(U8;Z-!yVW23S?<9ovN_>J({iwxY+P|7jE
z)$JPQE`!SsR3<K4ts0<6T-yExbL0J$UkxGH*y6CrPTkPkerKBnHBW5zeV<*V1)X0j
z+3iPvkvKjZfnv}j4ZRe)0EPn`!s?VjNgtt3@DIT>>G&2YSiQi|%ej1)77DjWkwvj7
zrMfLg3SHKbQ|z<M69eQTn&7aEY?nYF>e0UFK>d}@=oTpm@uL)+N{Q5g@L|3HN-5l=
zOtjyVXWrykk72JqHF^W?L<XDRWXErI+M$+eMEh9_YA&khda5^fUL`$M_tv(Z^(mM^
zv_j`Jw!wN>nL0LMJ&B#~w7*PH;_`Vn@Jr3NRth0<(20KCNhKldbUWbmEN0Nfj6S44
zLy!y?@gE+=%oEYxd)V%e-b%zijtyTD2d^#yx{dm{6b8z$US9b|o@2bPX5u<_6EuqN
z-(OLX0trUhW|$ZIobF-$ld%g%TBzn(yVryiy#`XDEL<-%K>7YDTjua$+iS0aalAqw
zi$@uA`VoC0SPu?o;bWmWiKXAvi<|TAMv7th{i?B^ChiHK4?nq4eSfAcPV#f8sHCPp
z_lDS&4c>27<PY@)p3p1U>NNz|&V=_3?of=N?OoO{{rFWtc^^Ac&7!ebP_KrHXsFCc
zM66X=!ZmBHwObanhu~R+^XmA`n52y~TzB{=G!<)VjXy}$nzX2+Vg7^L)F@!)s@n_E
z{bM|c_^;3;S)2hgBK^+gk3t!Rcu%K&sHd&`nY;Pg+p(-APcbp==F~Q}J+({iL`Xfw
ze&q`2uzi1F$S3%>18TmF-|M?f8~?p+h{_7JP~tH&JyI*E-;}&2&h4Ie(t{dT|MB3{
z;B8gC&CFr0H$$^$?byELOev)UsN<8IeEMq8^RN4><wsL?TmS)8ysP^XIKSZh11ww0
zsUQ95TW87a9`uU5;MoOKmI((DbLzn;3iT&K*}Ms*-e&uIn0C(b-sMsaa=Lx=5R}1N
zP)<Cwp`1Y2XGu_M3(h={tEw4rQOFV<FLkr39e>&P>KC$95~uGznLU{L`Y^Te*@MwF
z%LBi*3}#XCE^bcj&-YQC@8?Zh3W^#|5fuF)GJQu8G|L<1v4m%xpWHmqHd@_REBUb0
z@hPmQP%Tm2hPP33?`}QUQh6s|`E7_=f3?>>OOLbIRYs$G-K7Q0a&R1rDq^1V0^NSV
zA0^h8`RtkXczkKt2UYKF&XE{T>3uaBQYsH}K#QkH<Qn09SN0-xRz5E-(w1(Xv#cJr
zZ<IAzV807rp}rS(H>*0H2F&CEOulm!jQ?8kO$mQk2Ge~3ChrNkmtd`2r|+fNim==Y
z%bsg&#q#}jX1lE+lW6n@nGn8x&iJU~48}VqQVnUpdPR7|>;0~*C8^G*Z))nT*TGy}
z*{y4yJUfmdC+7?R`Rc3vNYj@enYLGB#JHtZRK+kawN4P;Y^P7mzLZ@2=@CWgMU%^o
zfr5sX16Ut^C^N9Ccik=fKEi~`CT6_&_3mB&&&t23FahjphnbM-=b!Z5-3Q;CZ0Lg)
zYCv<oIasKeaSPyY|A<}e>e{{>(B0Z_hs=-Gs^d=IM1hp6hzjlTh21lTjmEd{$o$P6
z{7Q+n`#mi|GV^&nG@z>b!flLri4v^#rRR&5+m%aU?h9d+U>YN)j|Jf`EpsIN;aaTd
zs*%0602{BiQZJ}BzUU(D=n0wjiMFk&M2cHXY)r~%oyMGXzao7~6V9eCKEaL@;a8<r
zTp*CU)Fnq>lL4wsEYdI1S}n)oO?*^i|6zy{e@*DpvpE7vv7B84%3$NgCK<Y-IWP7B
z;CT0{-j%;#<>lJC(vt!_H8DiP7urXgIDw~@r7kY*Q~}E-KC7=Ezkg1E@b~e*uwD5W
zD_;y?e<C)3{d>E6bWV`Q_SG-9qN?fpa7k}WtieA~$Eoq-JYaa=1tEIbUz`v>s*zY|
zbLo+Bwk@~vynUy)6Mf;Ny!q}2Y|BmVGyk>JT1ewhgnm|jv3KFHrcDZrlS<h&3Kp(I
zMe03ZYyHuEQx?rdn0{jO)@ucH>BwM05Sz5LJCyf31|y_W$VMxTuR2Q;Q0ILX^50Un
ze3-$WtQyTpMc6<fa5Ek)<zv@jxclMf)Jy@xTSDkSgk;g>#D=0kD$eAmRI$WHMhOp9
zh<dtFTOLZX#0hV)?$T2p7hozcb>oe;5CH85ePh$LMvoNsmI#b<L!ZDbEE`4u+3J>s
zjEWXA4-OHhZ{r`lTe3SM>{%(1IJ~{rEdS%}nW=gg{6etM;@a!@VEqZ6YhgKHc!nKx
z+incCm-H^f(6ld<H*of(+GcFC$n67J3l+^-NeDs9!|EVLQ>tfI0}dc~H(*9Db3Zc0
z%{fkEIhER8Q0DoRjy3X0;;c<#i^W>=-TNDg15xIG3alA>Uc<xlsNwiD97Y{`X(cW>
zD@TfQ)m;%t;5*5gKuy`RS9@2S1EPh?{7HzwP^ylH@$Q4vML#{GUT@CX^xjD6{XDPS
zmQSwLq|3`LiN%`t-y~7)8_;d7(d-_YBdZ5eSz=6~EbqPTk?A-TbatRviu(jK73Goz
z>^zU8Ip&6R1;`tugI)vUPXG6Bt*)r=2O@NaE=?$3nfN#ove-i^l3V@X6t4Px;vRF$
zJen_2puh0t<hWZB32e(tWyeAlIF1jWLFqu$XVi+!yc(Ev84K_JdU4swzFwPuz_fVn
z;N|z{yK+TE{JhL(eM2De|LYI${*;^7`|5mDaWQNUPqeR<Cv6Q~yz*mvX)1B$26#Bw
z5Do7e2Db~vf-5`;x-^0V;#JMQXuvv>6Rge6!Q7A_@?Yanel5lV8cNNc|6Eo5EJOYf
zW?1Gno*c2Nb0VV+qA?s<&_)0J-SlBGKXq~o9v7`uG)3uJYt%vhbBhY60KeU^kFgG7
z=No&`3bL)AF&$M#1^pHX=$U^)Pqao#H!uoiuS1Tn#R;Qa_TzHB*J+HX4M^G@$Oz=G
z!0g?FROe!5+P>a8xXmHP*4I(<lk>Y5_~!rqK-(-$GvVDJ>Hr6m$9JZQ+HE4EmweuO
zDPd&Yy1jts3dGTP$+ytO)JOo;RA<M5@s8+OtEG3Pu^>puJ{kWn=K>ZZ^cN2R{luBG
zKPu?%FM!ICB1ukXZ%IJ&Qq0{R2Xp-hm7wZ*Y}b6(2%YxcR$ht{ox3q*d?O(*BbArW
zPjq@QbWZbk!zP_8wlm$raXR|0<BSb*>OO^W&q01d_G#f0F$B;4g<S^9vsS86A;Iy3
z$h<1O#*MP|j7rh*EY8Sp{R>+lXR>meE(D4r9ee~-=f6LH2}7~A*VUf+QoNz46tj+J
z1;WYV96M!LtHxj!jQH`dq{*xI*=yxI<0*Q9{KE@QgEZQhjo-1i?aRymo8kl3G9-r*
z47j^UYbX&;+$fYDPYQ1bY;=IbqqF(Dgx1iu;Yn!cMwxwWCF6L{6Z8F-o#vmm!L$~B
z?Z1NJriKJ`=|;v7Bt(PROXNQU#%W{DM#^>FeQt9MdX&|VYs`De3nbduL|>A)8N8&^
zqF8&0p|x1(Z1#~Iw0va+;{6^x1H2oZZvkD;ID)YoC334IG^c@c@@DgvB^ZwoY$ycg
z0Wc62L8(<r*Zf*5vk5e_zlPoxV^fF*y}8PC@i=GYhv)KXep$~rNW(&*;=~gOMo3({
zPsc)0IBRa~V5biT1sQf=YpT@#RQw?{^@4Hs=i0j%(0~%70BG-)H-BX;C7qHE`0!f-
zULP4-U&~j4>V+HFGcBOElkL~2ultDBzzjenN$OT4Uo}PpcKg%gd5fh9j8^XwXR`<}
z)$Xzj`O)t;a8@?(1<EUg$|c?@T$M?5TamBvjww^!(>4J4vQw;@_~w|ijE_3b=QaBo
z?+4VIeAvh3>;v4Od}&C}r9M77nP!RmpCJL_PjEgLyKR}&R9~F<xeJXTm8vC}*w`z#
z>>1EfrorO^@i+J7v+2n$2O>rtF@*aLlAm!w!KKDDcnI!i*`+_S@&m<#pn)|8^fTjp
z6cU~kUq6W9Aq9i*+$5S0u7g=X=2OJZLIH5ZI?fOFQ!cz4MG~Pmgg7KY752M!BK&tr
zOaFUNLwOutU8|VM8$#+5a&J`@n}z9fa+2S9P2!Ns-p)WyHvyUWGrW-5-q{m(^2GOl
zTk$chOV;T=j0B9~^aFWhroZP5;kh_SRTr?ve+A9+nPLmBNy8FxBD0m^wE|vCtOX=G
zQq7a3Va_06Etb}bJFbTk%sX}WHOa_$B^ZMKV-y&;GtOp;w1TGN$V0$V%?K>69G0(m
zmpjN~H3WwXoh9OgHXUl89#oD=CQQCysbC#Qyi0>>6JRXFp2gC_6(M2#XHU!*%UbBU
zR`VjzC1jYBL#?7|Yc;B0?$OZv*ZxiXAjJmF!E(QxsM1*S^U=InMqAqmW1(C8(yv+o
zrQenc><%dfdeLdG4785j1r$;2C8Kee?5spUv#mI&!+R_42HI!F1MxI_Xg<m%&zp$D
z>JbhUF4At%f5&=(x;<WE6dRVc32M>5VUO2Q1`MWC(;>h^d{1&?1jEVPyypEWVU|s@
z4%$}O6#@evo8I3xnH|3x7hYUV+P8Jq`1{*Qh{K88a2X{)xDq@M_mgrZnw~K(G;T*>
zu091erGB4?C0moA)3^T0a_M6}jy6Rga+?^j%r$JuH-9Bf{K)W%tpDeyCXdq}7*jSO
z5BQy1oQMTP5n!%DQhnP_J44e(_tg5@WA@8xu=<PE4UxjVj=ymH@5=&K2jNdYB!>;%
zfKm#F^vYK!zim_KZXS&lNQwacn!OPY!4pN%zYy#R(WPpkNZ4R;HT$hZJ}t9ria`_4
z?M?n(dym}I_G{9EPMyKN-c<raqw)2g(HDYCS1?wlK#HeclbEH(CmPHd;>5gy{lHB_
zL2bgfK72${z*vM*Kl!hQNGY6QuH(Z_;y%R0opo&~;f4J|0IZwqY0g@s!I<xC)Q1~P
zNbB<MOu`FSd2`lg#^tqM*M|!<4bT{$c&}sr*-|Q#eMZ5x%2e&qN{CB<yLnt*Jz`@=
zdGZxmtUW+E@#|%DvX{=L+=Y$1aKH4#c*$_*hZ-&+kz?oAEZ$d8zi*<yOM&TpW0}q@
z<!RATId8Eulp^y0CZKZ~bDCTu<lDde<%%D=4h8R%iSOm?v?#NADyLsEQuroxL_Wm#
z0gmnajA!q<(bx{g#&VOxX$p@%a9O_ewXy9><9(HO>lO6D2g23|GJXo&_ikWHglLRt
zA{fR-hvSYC+2|J$LdH7pr2B+WN4lrm9^C>kq4|ou83Cu0y#%)zdgE1Uq?;rZJE6K>
zEwR9RRpHi!Wv?t$FW-=h+4fGOY1U+ciR-CmRTL4O_=^h{A<%erL-SsgjNeTi*cwfC
z7;SLNm6OMw^Ag5u)XPv)un@dnNXTg7oloK+_2~`0r)`=VaY=_XF`UV??R`PC_aIPg
zLa<c*!>d0^P=?2glVa3LDDqV6h!)z$+K6Rj(wM7K+Py4mHE}xiL1Ux2AzM$EFZ+3!
zir=3b-!+s~(tsO?a;bMDClPG4w%k^c`n4%+-n#mRpAq}*9<-rY$)lo`h0nbK-EyMr
zd7x2y$362Z1llZV*xB6Pzd2tQo$GR<IlR2Q7~*2y8LWZdl~2;DDc<&LTNiwBZrHQz
z2#KC{woIQeC)4Up3ZHQL@6~avouo@kqn<o?QD2S?_d%scz%n+%%I)FH3TxgUCmq(_
zdbenbo-gv|#^Y_F+Vvb%qnDB}pVaFu52MqDvgTp$jR+oB*7ysMPmWCW67IdMxwWS1
z&i4?s5qe@nJQInb#U!oc<%UlM;l>?W9xZ|j6hPu<8%xQ;SaV;<+TZk33R7#zyh%{Q
zQG47_M`N9N8v<2SF`VtZ^C_=LGiW}b#l0wX0j67MqNrPLQR?0D=&DfY*}Y*CT8R4Q
ziEcW3E}k$;X|RWz8!?<pI}9J$(blNqT!b)l*q>Bowxrz>i|ML+3ip=QphWVIqcnwu
zf{K4HK-Y5_VlZ~>Jif8Y+y{Y{aD>}N%%cMHs!#K*JxrKiyby=utiNrBPgm;r@PFFa
zTFiMHXS^yVhGCE+Wc_U0)g`P%=lnp14{(JyJ9hVr^28{c*tMcKx?!1J-^Zre%FvSO
zy8ah@-xF)X+UsP{VPk#bt?&ZQe5-~I&1AENB?Y_mvH$MsA|!_?|M_y*0O|)d7Qx^l
zO#~`5!p(z{<iIAoM9Tv^fylR{>_j|Xeecp@`j&w4#A!9}ky-)XPX=^Yfm`J77fq}?
zRbVTGblS5CLkIXTbBx3^3n3_AwWs0BLNgz9z%z6bOYSYHa_cvAo~2d1bYnOKLBZoO
znpVCvj=^I-I#b}vM*p8~U>AqfJ5}v9C3~(${HQheDN%S{D^_@{w=p{=syA^%`bE71
zE_{NYYe(Qj$9)4iTF@1DcjvWt%eXh#kmvb^a_HBO*U%erbw2z_a>-E~;g=%teSAC*
zF8MsZ6>~#;Y9E8M+(mKQtS;j4x*g4OTAZr;m2g-G)dH1u8F&r9WFy{=O@gFOeuSjy
z&Tt5Ci=M~o52+R-hfVAj$X3X!;yUxXtUk$Q&38pseY$hP;3C_Vw-(3}eQCsg*RXo7
z8iOajtg2Qg>A#0V*W(Cj`jF2yrxczewAZ{_gB4c7)!sKCJR%m>(0)CP12*nt6F_ni
z(!!W;h7{@>Tkwg0na>HQHDJG3_;cl8BR&e(_=~r6qV(?tE$;go&2@j8EU+D}U6P~I
zN}J3vM+G*t(<-3D@=6T*@4l(ex~5sSXxpo`EmSDC#K#H@NTLW=uBe@|e4<Hp>KeV$
ze|le>Bwo;`)r(@$7x$?>-h3YIl9n8UNNN^J0xu`8RKH!PNYbn^9=m(zbxH53(;@Dz
zQp=aM&5BD7O+gI{%Zrr%h)fPQBxGiTY)_POPwc?6B=LDtv|6_}@7nQegS@r3^x}r{
zzJq+*(&ndm8FhSO+(RctbK5Q18hDZhdH?GE5GnbiiQw+ZBhB%>MyEml>ua#a@XXl<
z-XM|;yWq=%F*M1~@o6tcr4D&mu*;Pw!cjY~CZW$yi!1$GIeIoBl6%v6wFim&L(%5a
zWp`;S7}u&-{Ze5pmiI2+F}gcOoHcCT$&nYHl+>M02gl#h^AbsP=)?#%-s!8blwuDr
z{41aU@o3Wmc8tK45g+cPM@7ao6G1du)dK$aRzh1)<!Flv=tW2>#*m%6f{BPv^dU`N
zE-E3x%-8MPL9lV>ZFE>=sPKO_s7Dm+>Jymz4_kjMT$74GwIWC)VrXR1VRe?YL>!Fv
zS0UDR2T84!C+rwc_0+_wVs{Slvq_sOi{>a$pOLM^|2Ys_dSDu()4W@JCBAJ8?1~J!
znvYN!FKn`3uS4Sw(l~Z9(Ya@iB()YC@*1r+?@6XA!^06i@cq{VBU_l$qroxF9a-;}
zs%CJ`ya;%ow#@4f=F`Lo@WUJ5rwTFWDK%(LSU#TFvc*bmfa>eh1p^aM#Y?z3saj{8
z0?LOf&>M4d(M{~=Fu^}3^M^>*8E?QXl{><A8n>#lAzH33mz$U5&|zY~Zk`Uuq~K)8
zhgb_)rt0Xfm*!TnR2dx8v|{;w`QMFzgOR3tOBdKa&qbgDv->s|E)~q~l8isIR=+4m
zd=L4)V!wH$cjCw+OJcLqeaF48Lqj8}iY`c;o$9xle^GDYn<u>eWc*<2eJX5bBil0W
zt52e98Y8YP6uYr<uOnpPh}KeOCe$T#txHPx;0uOB*RirO!;Zx4A9>tb9}Gwi;}ThK
zTqvDC$jdanJo(-=Bm|N5N}TF4y!yG+wu=|<j!<q+S?vOhq&>OL%3jJV=JzFwzYxE=
zKRTC*+_eiIL<L^S+z6xUyKzXPu&=;FuU;e)d6$YSJh!V(=DsG`V0Nj++<;sAk|~c}
zN?xtpxwR0Vs)9)LXFgQYkQT1AH6LUMcCj2qFmCKmordja7{b4V=~m&KxlkezpE$FI
z$~43_#+{5toj!KWt^P^Izq0rN*~;9LEQlPP%h~akE@kR$trEVDIx!#$Cnur!pk!Hv
z4X-h^-F7BHhn4Iwk$LTXn&gQ*`~xvA_!eLU{djvzL~o;Yh-UCoVL3x6EP-lE-CHoJ
zT&FJei&L``q@Zh`o<+@YHACkU{m}%;E48?_FA;MbWA<HBKjZQ%`$II(5z7VN7}D6`
zNitQBDrAJYl#3!~5XL1oW5b2;={P%rx^1-;#-2|QYrYe=he)4{hPQ3b8kWt=<tr-(
z4r=kfWtrJUl2mzG|C#3tz8l1`V`2h_%zKUBx^43GdD}SyKQ`bR_bn+k6~UHZPh4h3
zB@NNdymxew$gIf-vuTmiYwg9lm7e<5bHeB_V^)>(mB`3gqV19pdk^YTH~pWJve7Ts
zFjRJ(m<XSiNN{;$cqo>=NXJns+t=LF@itcKSU}q^z4i3*f*Axo^F#uZQLB}|#JhRE
zTFf=KsjPWqcU`T36l=}<Z<%Pz759Bx2NW|w^@=35c#0ZSy|zf`F#1GF`|6Crzz5!n
z%sU9TlWB5ZT=hh$^Ea?w2)QCsBO(e@>P3+cZtQRUDBY`co6^{=J6~k7=NiqWI$&_b
zbnW_Pc!S5ORO-I5Yr0T8KSzk|xWe!BFC5q`!SIH$gg1}#jM_h1BZX*3k2W<N8W#z<
zYx))+duMs*+Ak->j_!<*yxOVR`9?}A_YyA3Cds!u1pEHm=0LHj1L{L=)$lOaaBLb<
zl4pg!NuZgyG~a}j@Ue*dihSYR+DNA9)ec`s+=$~P-;8!Q4r08Ih>sRe<}p?IM>*;p
zuu1Cb5@XC-+}E>KcMRc0Mvn6sKuN{&<$pSe3z|&h{?ahT6C^KUW7pjnv)?hP$*rX$
z>yXBU>d(nGu<^i~<@HtCxG6Ks_?BIVvY(QyrCKc+tg<1KbZ87UN_0n()qPv~(5<wb
zdaAY*3I9S{>^d^edl&U}p^)V1UrF0PfLyZ7dV8=)R-1|?S-53naX9UEysMPlgFz#2
z_z4GIH(T8*D4KlckTtwI`vf*dqj0}nUHC`PZ*WNDNJxv0h4;6&O85qfu7Ly1ZtT<e
zMCS5awZVz2f>UvL3+m$)*go-v!XCOls)>$ae}oQG3;xvNCjCEK>1T4GU4scn>O-=+
zLZT9Bw7RoZ>ga1cb0-}he9oLQ^wrF~uv5-iu{LC#nu@%WrFuKl(^Es5zIN{uV}WBs
z2T8K&Y-?dC?{9lJWr7jZ_5CG<DiUDvyqa5A$(pA8wF+j#ww>Za#c?mgt7b!qLc7zu
znyMX_gS=brl5vKq;hHbPBA=$68^k<uLn}KNdwkp>jpdu|wiKD@L|WW?9ZG&TeU2}4
zqMkrH+45ccty3dTwU%`8qS;19EE=h}G^xqh`%o-ZGUrc7|4n@)urJnD!f%^}tk7Xm
zJjG9+F2Rmb8jfD`wT>5kHS@;T8}stLksf`9t<tKQX@zrB1BhI=<@i}1F$HGxbBstx
zZs2=s(LBd!6mgS0yHNgVbWU(XyN6Nxs*gY|%=s?FT+<MpL8X$6-0Mqj8>MZUd|j5o
zct3~{2l#;BP7le}Gu(g8Z*d;3%;o#ARImnmo3RGEIgj*^)}Xid2k!j%<G}pB+u@xG
z-S^X|2L({~4VB1q7%y(<iNQpM4x{i2@GG!tC(%#Phfv5gXeQH43RRB2!NzVBB+A*~
zcSScR%N7~dh;iVm#I0HBpU$}HT>i>xW}SZ?3t}fw`c9kYjPx@#U0TH7X^W@RsuuL;
zoO~aBs~R~lKB9&Lkc11B&rSSSo-8{el(RzJi9q9TVP|U!w)~FV2<hytph0m3a~YF+
z*S&GlJcHTC2+wc@xF1!{XeREb7(=$Bv4=Eu@k<7aFcS0{_)Ql!%tKbxC#4@|U-*B&
zloSe#vqg3@4dF)Bse)4umXxU0KDQRK_yWZ0V`lK~P`Atro*}tFAbF}<Hyd=&k5nMz
zeDiEMb=dL`m_TxJzlA)`$TYwtv;M46cI?9A^UVvK%<f71EVew0FNid@!9V+DJK9{y
zLiTPH+ex`yhn(k%eZkj(lm#+ruDA%IQ14nWcdkm1RQKdDB}qjl0DtvR5YsIC0K}A>
zJA4QiKs&5T%B5=5r7E7oSweD{@AT}JmMU|TU#fv<9cyREj;1@#45}HO!MR@uiPDPG
z-?hL>NIMJGpRG!(WX>EdlWD?+#x<*K^lLQF&9C?r39hGgd(p;$2W>WBXZNH<H~sh9
zuuha*0;ql8(5-icX_jq&vs|0-QO;Y9Pj@m#I|8T|e2xO9p5UH=*A22sw_^7X!eZnR
z2E;JL?!gj)0EGB{$^wl2U<VjD`khhzvp_TckVeaFA?w+nWAH~o0EX5*9vQYqhXqPR
zT&WXSJFcHsoUPIGD1JdvAoU@{?)%FR%uU&(UblCI5z2MzQS+RE!DQW8WbNk~hn;}w
zJF>_T0g#SxsqJt<m8q7w_V-m=9@y$>5c7%aasiDBG+x*6`%aBRR}VA5(|SAcweC%i
z;rd@Dm0=Ogzk{*_0^jM?Z6mW3>9SQ}*D7|ox|nVR=@!=!l9wLU-{LAmWZ~!=g<1(S
zl@mSlN00LsXXo)UV!GxpfBo|99JfLh{pvezy*F}H(y&2Prh1l19sXR&;c;FxpWfgS
zQA6DDvcdpnTXym$wsroNQeVsw{_GfU-xyt<n2$q(5PzyJyTX4l3wZJI7<2gBO(%W;
z0f&jq3MmDJg;^Whe{1Pak+~(C?HS1H%XF3HW&T{(fkD>fM$N4D-9EX6Je?AjE*<Wo
z|Fh7pQkdU2`i+@gU}%F8yzduXc;<t`Ti%z&d@5FSnjH@VKbgf|SHO&EcB*{&rl;IN
zq|s*faIP+SHfa|tncQD#oB0a#GqtSCTvrmVt8$))Goumv96WA|%tq}otjgNyehe*I
z;&em&e%EVsdB|_ujnZav?F>q{t9&Zz4Mf$rS+dJ5r~L`dp<UJWpW;-Fm%C~<j+4-{
zZFp(PNPXfh^^<494lwO|jZ!I(FoGK1YF$cJ^mB`f5ffA)8T!DfOKILoW6>9sO?s}_
zHBi#7*sI-Z2(s=~&K;pbxESSuwei%aQ=)FqS#ggy7OStWvY35cN={Ti32bYpm8?U?
z<3=}*Y-K2Yp8L#xzKj|MX_~h*&(Ow7u2(vfnW`!`dfB*P>69pZQfujLBtZnVhHrDZ
zerJ<D;hE$+I58#kb(j_xR|3m&^+}rylmA%H6ai@A_Td^;pG|s`&Qgi3i!<J_dX9Xw
z_!c&a-;FyS!3}TuqS@5gD-MPR&70nh^tUzj{juEUkAe17Kb!p&n`}0lW25D&yuIVa
z8<qb2wGA}>vEdHB9*^lGZA_6|j^W(wRH9+MYW8UN#p;fm=Z}X!6$C4(u{qB6ho8M$
zzO;Jy@Tn=*A$f&w+%XE}+x*GbcXZ0qnZj+wJ!5OhZSu@#6;}+g2NU^?sxJ5vlUk&e
zxy5v?g<~Znt{+{&rxg+ljw+ZcyaZgnfv`G@WC{*6hz?%M=mV^7DyBpb2x(R_{vN*q
zO0Xw1Cm$S;j37GdySgY{#xBH1YC{eXL7k{J)BO~RvyX?JOe&$l7@llZ=+m0ncczvv
z>|`r6<9{;>;@~?dZ;@MTQKH=T<5qXPTY?5q3m|5%vwCS&>U<4q6grROz?8r=^I~<8
zMLemsDWC>rS*ka&v*CY4VZrG;P4+$5Trv14$!&LCa7o%aCX?~<yj?k4>A1sb?`<52
zxk?H--eTe&R@S70UIk@SA)TEfI!w8UJ@U#srr-8~5QsDp1b{;W<*4uTz_pjN;s<$h
z;0KMvq}UebpkbGF2PuN1z1Vkz5Z=Wsi~whpka1mmr6v_|z65VvJuW)T67XV4!4mWb
z1*5YYOWT_VH5>aewa?*?t*SBD75KeBg>Fl^$G350!z1(`QhB2!<?#GNl8e~R-Kk<+
zy|{r=H4lfX=18H%L;9l{%{_z@>+Ef4SBQ8tLgsXJ0OclkuxrWAfN=i#j(k(fJx=mm
zqCJri^m~H^*pngXts%lUD=;H8$NXK>bhR%N&_d0!-EWIR2Vsuig6$U1zzwdMJjXw}
z&-<~y_|XJl5ajySrLr6)>*(z~8Pq2|y|bP;CIGV*O13Z>T9<&pdv1Q<C@si{YrYg2
zsrLtBb+YGM3>BY+I)kicy|h{_na1eQ{x3o^*uejnd=Lfi=(N~#_!BMqkVL$k-wXB^
z$q-AV>?dvjdppGXA>Du>)4N5I4}ZY5^(uc2WceBT065!*Lj{8}M`d<}_VFL*00_$D
zU*8jQ3$QpJtxSvHT!MmPG|PxPMU@iIs-a-N0W*Muy#1P}Hq$$6I79J!p@1Nx3)#7!
z7B9j*BS;fO@<ewdYFLf>?CyF@4CcKCNMk&5&b%rM@pU+%j61qJ$H!n<`fn7$`=S1I
zuz3r>4$Fhu*C+I7bI96=`E4P~_Yl-t#>QxGjl?RtE()|)4lUDff{Ku?#{@FZm2hpI
zp!4$(YkRbmydqnz<nvni5|1M@M~_3Fx!?wduS?m9{ZizyQ6kbq|1QZqJ`Nqc>W}AP
z3KHk3>Y2+CGVb=3m}O0-l8CVl2INhVE{nocBrbeRvl<LLUCh~*ZP^dH=2yV#lJ<{)
zRSh@bSsM$bi3J`$Ad)m?Q>imHUxImB8kNfCFvIIBbxyS?gOBon4*K(2Z({_T0bG^!
z2UksCkfu{SuiIM5{ZVo{#S_G?b6p|^720A~ht~W!;0C~=J7bXby&A@vh@?-@qP7mB
zCY5_+>1CiM^Zc@iHBur-6}d1a*F2^x_<7&OP`<0-oU`4R7j|eNPJi$SlBsCe$zc~H
zg*3M0PV4j0felr&nAsJb>jk#FuCG*35tlyXVE3nYi%i80jh5q`<X{e;Be#mj@%6We
zHJ#d*`yaP3FQLQkw$Djz`~{cX4j64{;2;4nL#okqjGr9N0TaIGpfl`wHxEj9*I*~U
zT*{hHpM>V1MTJn^l-p#dPXJRQe!n1#^0()hdI-(fb!}Nz=lGKJP7>zah-x{c%2b23
z67gd|vh760FrIqd)T=1++zIXvrnScRk9_n;F^JU-W$iSoPmbN|=$C`Sa>K#v*79@z
zDmsGmWJB(mAfF(mPwdP5%C?eP`(C(avi^mFzlZkptxd{3<KdRAiCi<j2b`G0t1C)f
ze>U2o;%t1y;qQC7YF~w}sNTZ1Ryo+-BI^o~i|OVfd-TVn%iEs;pWv7QGojAHqMOOv
zABd|hzf7(`no@Mkhnf2gWeh65umzYk`a5B^OaApy#JYx0wOLIR+`pHVa=cl~J=JG>
z&&XX1X_Avl)C1A%z~<|2ngpVlW!S$*)i<<gj_l>yHyio7uzb8aP;T>;FaHtc<G9YO
zM@s`MgBFc_8a}M}{%}qW=ceODhrtS5l>(I6$X^R~`HVJ7+v$f54Jm~KkF?3$cen^E
zdq7q4aS_@_c{lIm+rXZlLGH*I6Sx$GyCc-ba=vR{QX+DBbQnkXT2SH<!F6lp=)`k1
z+0y(-;_E=%YP8T6o=MO=JIltIJm%x(YJsFNy=Hk%m|J7xDWZazlO}0|cCYgfrLYSz
z``@zxF04*OoyDaPV%8|ATv77Dn+dq1$D+0;;s&~2Neyoc-<-#)DN#_$P<DiU!}P);
zyr$*tJZ;DzRku}osg>M&Z1}`}?HNBYJKC|DOq~au2h$(tQ5-2wUo)e_eywjzZ5d`V
z!qo^OZS5}wl>O9abdm{hk=7NroiY@zzEZ>d`>9xQBAe4gwO}I^n0bk*)^1V3N%Yp2
z*N)8ebcD+f2Zj)vyTzh&b+?jl1BNE|k)LDJRKi~;?t%dxb*6z77yMqn=Iz`&LAN~6
zx_VI&9*ls+t>ILFpiylxu?d1rc9n*YoOwM5+c^J-TAg@dc~wxDMa5R*-YvoDR3a2y
z(n2l#9X;S8fG)j%neSccsYnEM>wJAkV@mu-#B7)4*C?_liE1oABVk4W>g4>G>mOmF
zDMJp{&SW^H76I6-vnV31cnk5ka&6j_$4mB5boAVcK(+M^Q}X!0<&Y?$e&|?Pm$HCR
z^FuUCb<Go&M^iIU&QUj4=X)o-_<_``CL}0NU5|~vSOJ&5?|S{`wA)1pv22Quqtc2P
zKef{857peg$9M$PAsn#dWXF%ZzVEMUdTbS1ID2x|T)2JEdeD?THw?0TBZoB7GM-m|
zCqT8e0fM8ZzW#=}Ear%2<Tx-%ct@zVr!Q2jDRfJ4XX8R%orAWss~0QAQw0v%lcj5Z
zJX{=d7JtHj3tC_N`Ht|DM-w}krvaK?TL(K2o<o=!@;9Y3AHsICc**+=L{Xbgn8x;p
zk&Y4P&+CPFFs`oa?lHN{CHg3i;N+mYsG4#WCW)zs80wSU0+flC)$|!LN*srkxMmBm
zNQFN(D2LO2aq~G(YTgja!bFV7+D>b1$yO|Cl{j!`vr=oOrY;d7W1uX$J>Ec3VD%IJ
z?>ACmJG(fiF<vH1*Np3n2DZ-`tqAv=|BRi}r~D48ubq;Is>|dWYTLX&-$50KOWMi#
zkM$|`6*regzV?=`Kt`DA-Fh(xGdc(@iFkMKLT}>+@xsDs=XT!##w;#pvJfE|N0KV%
zUqEJY$v3PS04gIj|GpuL&}M1lhR$dUmX8TCeSNREGE3Hml0)Ddsk7hAls=Hy$u6e>
zDD(H7j4A=63!|p|j(jr@qqX)V1;3*)^;p=u#ekMA@}_+PaM#adxqOb@4i>a5akf!4
z7M7L?jMC?`0G76vVE<s7)tlVuWo#;C^rgZYi?EJ2kMy*(DbZW2(<zBami&{U4}fH7
z-n?eMy_3O+6Z4P<`!CUBA$DfL2NnjJ+@5J<ZH&NUM;By~G(O6#k;00AFyg`}aYf$E
zQr(>FgRL#JO515jSKIDr^^Q#(sF;sRpGS*5(-6P@qv@aKu8oLG0bwP);rJlzM71Cd
zMqS~LgX-IXb=e-ZXp~kl-vg^C0p|`EU}JJ2OEmn$rHfZx#v|Bn0vN(bsbZ4oz!czp
zF<>vvM+YUVlpYwaHnXY5AYuJ+(nmBP4ee&V1gqxWcfC67eEGK<d?7A}-2u#DOX*t3
z#L<=O)=JSi;T17nfJ;Ya8NXI(p|{`0T0;ty=Y(kiCE}eOM5PnLQ>7$%ht2?}DzlbD
zMouj*rQGjhkxQhw>Fk#@U41PrvD<%NYlv8@#fJuIF9~fXE#HrBikPL9Ge~NayKM)e
z0?YSs{yX>LRnCp|5jIItYOU+w*X`^jl@Gy;ms2;WveI<51;yWqD;T0far<OiP?>#g
zRC9R-CH$C7%dmlBlXF7QmiaLp^NcR<Yg!1&g#%>{jk6SreQ#qw8-r$k9!e^_nn+V%
z*gW4SKB_g_Y|HQA4UZK|)nzyj!RUILAx%2pu&#tQz8~9*Bq?O%aT`emtYlu)Wk#G3
z#-2b)4Ns;WA@xX@J|OH9gg#Fy-}`I0i|S{1<(BNdEVo-pn_jk;0R=-nGpDi@<Md_s
z&pk#Cp!oAVw?|E#jAviQ&E7mWpBH@Zk;X=<zi!{EuH<z$!8K~|H}AXp+Q8B{p7>d1
zYe_-t5a&p&Aft6#Rdn}icyLU|t$(zUFt7v^J7m?A%pwb$kC4+;=ExiC?|`|UNC3Ij
zsBkSo4{hB~lgfYH5}^#lI=U<L<WLs>`N>wnQp-H#=GiCgYIt^p^z}r|&Jt!&qme)M
z89Nd~oh$K<d-H&>_dQMoucoNtVLAvN2E8~d7RPx%ZXLBX^&h#PdG3GF29yBT*@bty
z&57*E-NIN3y_zyL+*#~M=upjGg2l{f!IP_K%SUgAY4q0$Z=;<K2>+4CwFT;;$q4+1
z2Hjkxx89i1hS!gNhye-FWDZ(E4vg&@{kl~7KhYxHx}I;C6n!q`T||UJ@Y-?A4VpSo
zu@I!D{VqRyxlE;HX5rI96Je{h24_$%K{mhoXOlli3%g8WM|{Tk@t#gJiiPi>YKrw)
zl<07HZ!RC(KfIR(->BT)l!j$`OOHG}56Hx)V(Y&G0t8^4mdpAw==Yjs1-HkP(H9O%
zueE-P0F>E~1}TfaAZiit%pd;n%-Gb#<ncU=T{H;}@F{y%4{3PS&XV@Wm0*ChS--&z
z9Gxifv<x^aExxaS3{u5EuTtDFvL2+PGw9;`!iTk@jShu^%K8=TcxAIYafhB&^Wf+z
ztCs_q8O!&Wg7y|F`aF0Ae3a%C@HeTM*Q=8yK`z}z%8&?LK3|QHi*z2VPC}i%8J<G2
z%0C90j$797o4{6T8Tf=Ltt{3OEToT8Z>l7Ko~fyiP7COs&3wcs-(ucYs%``7Q2&A=
zdM43x{R0ZVAnSJ{5hMixBganjmII{zuLpuE0#(*X8*@<F-5n&gi*-vlZy8&{N1Jjc
z9ybOk>BWsl=N57O6QrqcL2nV`ZKn<!I_v-xDG2}{y!(lHv{xTOHc`yLv9<AiU}23O
zKY4VF#;(%h5lMUJ-{29uI#RrV*L?%hO0NTpBxs*&25Q)dESuD0jii>SR~qL^VF>7&
zl>Lq<?6vMEsc9nX_`_C<Pq{(WITEg+Z^hOXnuaC^5AwwtmAvdLjbj(Q$$@`03MEm%
z8|W=P=FQBT@SE+h{|W&xyLr17gaJn*ng^*Ff`U&wNku+pF7v6jvrYzNYjDaGXdyc7
zdYN<2v5Kz)8NZ!{R7Zje&c`>cNb^27>C^H_coQc}+h@0w<$EV?lz1bLy-UeB<83Y9
z-VXc&6zbbAJEz4x$&-<L{iKwg^kM4hX;$R-;>`NPP%%m^SJR4(`OK-B`*ME&pm(Ug
zRElQ9&!B4(gQ<l!`tnJe#DfniN=Y>97X6DEelEA!8dMmXvB&b1{QKah7%>WMK&eoN
zB9i8Gmr<#>|1i|yduO|9=8SpU<m;2~6Al1+{A0p?m57+^7HjgSZcaNCSRFQ(yQy+K
zST5(BPf;ggiN^enoNw=pi;iZfUa>)k{RP)A>NjxM;|1=LcE_uWloRo_EYTV~;fS<m
z^DRN?#b(?p&l#V)Rijq`s!jgy*U^Q#uqzl}kK$-Qae-I4Sf<No-0WGqV`SPpa@XDR
z?G`(}%0YDN@5BnIUwbRQ;p*<Ll~!!}{uA3?w9KQl&UaeQAYB5_8($kv^A1SA-*)pH
z3xm3;oAyltTl5NHY6$n#)T7BL+_W)yx@CE}t7cJIdAWdXT2qv}S~|ja-|1WdkWBW^
zwK39^udmD0tt#3jpB_0>-N)7cTyv>l$o9AZ$a^m`c^M-b^On<JvykwrKBV~B;d6;Q
z%jPFCBt<tz0M41n;Y*`~XSd@UxVTxq9qq83z4Qn7L9wet0H0(B*X7Q3e-f>C`jwS%
z(5T`bp=RAi001pi?HnR73n_N_qRfA6cmiDfbSA0XP`PF@;#3@7JFCX*(Wx$$=XI$-
zKbCcMzU@l6CgqHZ>UQ+sDEF)Yt+TJ9SJ_)cq`mS}=252NrlaDA&p=7JwRTS&cQP~5
z?{oH}Sl<70oV0q7cKB2@jtX1|>FU}`oS99yr;Nc_{hVcU#cy_LZ^yZ5*8ECz@IU8C
zh^%J>Kaem;)AmzROWN7_c>9qa9AA-DuH?RxoI*#T0h|k8MZQ-Dy%`w>CZ3&J3wsDe
zRVBak%i-8!#Hk_N10}$0PZ6N#?Ax`*ORl0vnWp)!r;m;p-S9>1oGccAGG!Wm*jl#B
zl-^Y`UhQQ2km_&cpbd4edL~!&bSDP26Te0JP$`BHr=97ar@+jeRdt6`m$%B*@uZ6v
z;qWx)@jaYkbGo5Xoj%7`BRXx9FN`eTexv|5`;Wn|zU@1>xVmkX;^QvIu)H1J%4VF%
z54ucu3IW|GUGa5Zi!!a_#vky(O#n$nD0cUu&{T&sNO2(^&VpzC@vU31D7Gr2lWk35
zYwZe|KThaHJ=@iCi;b0qMRtrsb1l-|4O)X<NuBK(SG-2qiJq{wK03+mr1bmR+f;uo
z&mES>#|Z*ftJ~9LGcn`NYZUNko#cDI&9<{TI~irYe43PL|M*p~p&GqJWxSv#rNW5o
zfDx%vVe0<`c^;3SO%C;V%7)pJtNHZNSNiM!cmU~?SlgXx#u9JoXg#uQKK<LGFpI?O
zVgn$m(8-wVla-tFx@9)GK-K8}$`|O(#<akqd1qhvL=#tQRV8287{2aj0gPX<E^n*9
z<Lpqz|J6?<qy7Hs_U3J8z?v61^}Fd!y2L**T+JB<IDxIbM5o9`k)+}IpCXTo5G2Rr
zYB$lWlOi+o1=v7}9Q}h5k(^k)gRZrKTL&YK{g_O9jX(?k2f{Qfq+nN982*GW?QHI!
zl&{ZywEC#Kj172Wt(NYnv3{{EA$88rURT<%{%QcB8wO;;k~9q$Bz;`kPaeTfHY5jc
zR}2xknM+fm_LXLL<yTjOwwBS|n-~Ae0IKgRt|7eyW6#|anx<_5c&FxNd+B)A>b1bZ
zvKbLT0=AK*Xuiwu<rlQJYZo!Zzj>|){96z*_IMha*<^vD1;u`o3FkTM49v`jhUihB
zs6(3h$UHAgP<T>%X*ThnuWP=af?dC8^Td00k|J>eMH3)b_3+MRxWVDKTZGHij)R<f
z`rAURlfIkJ{@}8UkUUL8HTR$8*{R2O%%k-Q7pixz8I-@~d^}|N(JZt#GWZ##jNgsZ
z(rR<SqOgDHH~1f9u?BfxDTD;k=-~3bX@jOEs$*_#wYdF?YacSClF&zv5_2HqHS2`c
z_77tPZPrWC40|^FQoD{moc2u=-|*!Y^bn_8B`B3F;o3aTY%fa`u~kVBQL0O|`HKj-
zPasXKblIc>>WS^shvid40!W{-H_w}PaT=G_j^6~r`+im*Cp5e{7#R4YP=;S|bgNBV
z-MLb#O;uBSPuCpZIOAe(&!5`4_Y}2r0QhA6_l^@}eR2D3s<qBSU@xBZtro>u5xpZk
z?Cs{9#rxfClLwncSgOhgKV$Y}|FCw1<YK;`CVM|0uf!<?JsJr`!UEoSrSI-%9Z&0!
zN^2l%2XGe!Hp|a2KA(R6jLZ<TFWI%$En$MS$!l1<&y<pdjQ4wd$tgt1>FKfPYh1QJ
z&5zvwZ3{o+3Rk+A+e}uSS~$>e>TL-nA0$4R3J6MNCFXNrL9KYWyB+S$TV9`|&xyU4
zB?P>!E5q{p^PJ6#`degfHe+3G-b(3{1?KuKL*ZsxqK<8LYnYk3Q;(e$-4A<0Xk`*x
zbLsg$0Nf>KwhW`*SpN^Ujq1~3wDMBw^)4&~g>|hhEX7eyyg%%pC-EJ#J)I>NdvR7V
zd6u(o;f!r5b#p~M7G7s-5u|U~Emiv>0y*=H6Wd&Ed$i9BB~1`wWBE4^nQ24Y1q<7m
zeOsmdjk~)tjrMk#jk<R^3hahUN$l>*`~TVa|HpsiWqjF}0};3G7(1RCZtrx5e^;HC
z8d`{bYpc9?hiiR&&1=I0Hm;G^dZjtW=cC&}bxv8TomCn9>r!Y;S}D57@u<syUzJdu
z;^AR_eG-jQ)2{hiIE@ai;vIdOln3Yj=Uf4Q^GAPz3hf6ev7RQVuFNZ^BfE)t=@dnk
z#-s4`Ua_N<SYg{|a>dH@ipllcwFpgaV_DC6@Vi*g;^$F{aiv!pt<dYuuVcuHo^l9n
z&Qu9eZDbTPJOylvOhorR($;>PaiLOC5}mcv2R0tZNk7WQRy1snU3#3)bAaa|{r`%k
z__a7utXfF8ozLM|fzud$z@;L0rYoAY`5Z|n`@Dr!MfBI*mJW=`+6!Ov6rY5jrM+F?
z`Dm3K5qe;?htqr*b2-I^2Ic0Z>|oY>Rpa`LpfnAVpX9xr%U^CcA58mXw10S*%+Jq{
z$9A-MVRcpHI5RbM$CyG6`tDDz;Q#$UJ&llW-)_}gP1b(%ab5XAq*H41W}*sKXA-)H
zdcL+k!`LnC3hU4+X6lS|anAh^Bi!A!OR9O>T6=rPxp@s8AWKNo1lK%;Wu>gX(~>K5
zo5&cW55|`s<p<PGt<SgY4u2PDnu6FKYT~+*sI&CSNbRg7Mj?B!X?t|j7qx7HQ>{Xi
z?>{fV$wV3m{{Mvt@;$F0lHx=3;lfuZ_nY|$PM<G)47l07MV7NTbJ7r7W+SmJzvR<v
zyh8UF`>f1!BPxKE*f721@*Y7`jE|{w)#Z|BXMmxWxifKZcoxfJr|q@F+Ej>Rg!2a+
z;i_4Lo7Gk#k>#VW1*JyK*=%{$w{y#<gJSPm4`~Ll{2>|t?^`>6bRZ$IJe0H1#O2L%
za+r5|xE`Wqe2>ApalC2SsClZ52gb(m7<&Z)<MuuZo|O0XVhs13k)G}v6V+w4%r;rZ
zG|Cy<&$QI~Y8@urX(U+e<K6VUx7T8ViPkc^yBG2;V7G<%%CW+Vr|Z^2V%7}2s4J+f
z4!v67zGG#L2)mW`_J3d8AJBdNAMHmevDcQ@s!(A{-ka|?ru?pijTC3yA#FLH%?k_b
zO5)jLV_1*N6QRB$rkZqt?eu}?0Xol8BW@@}R(lH(++PPV;1C;VkM0hai|zvSN7<YD
z1}`CGubuZjf)%#YCZCTRcg(v&mh<XFhjMg=nJDA`#FYPETKWY7Lp(S4oS~<EV>?!=
z220b0p^7z~5qEnBg<J+iF`(Bymk#z<MA9EQ1Yy^Cx;c2x`h}OIDoV@Ub8om-mymH6
z<R<k&iJQL9$@GGJa_R2XA7w`)Zrcd4P(Q4`+i4}Mqt<!<4`p8+S9R9>zXB?t2na}r
zA|O%%7iqYNbSX%8cStv0Q9vm{LO{CZ(%m3PcU+`Jx}`1+zr*wUZaj<Y^8B&BSlm6I
z^O>3Ro|*T|oKK*-RXNQq7A=iY>fZ^ne^MdZh?tIv$vv&zilHws)T`f54%c%bRVpyE
zW`u9Dwaz`BN;*YkE6zgv82K(=35SnZO{IWtM5;t$0p0Wlua&h}EaF<D8YnE^;W@E0
zSgc*Q0*xR6hIR+R1|B7Ept!G!_es5O0#z!ijSUVG2qN_bZw+ZWY1%tFDuH$Xaa;f2
z#9)s2_nNv{s(ySXA|ngP_1wu~Wn;4q(>0jU!EAE9mnN-!k7zmL?c>`$;?I>qrNz(K
zagF~<sNvT4jZv>v6`{ivH5MH6dIG^1qXsp*8QfdFD%M<HPq*zc%DDCVZp8aWQcJVz
z4tnRM$;DF$?!Omw+4G`U{gx2;bKv+>tDuZ`i%HGiS-Kj%X{2=hYa^YD09j?62PCai
z<0g45Kb@^ab4eN0$yn^DA!5EQ`y;6x%i%Lnp;Vat>?mG}Q1h6tb#t8=#tx$#D=0r^
zwG8$8t&KK2jyX-leLE&TQ26TZvuIa@s_~cZ<FRg$4by);i+~4l&fnP4BdZ|_W@(zW
zL<>Sc<7h$8AoVbzKqbj(nOYA;IRdkBDfU3vROoZ-te8{p_u*N%Jt;chM%`p1%!Btn
z6VnOZM$K+D%Uk07KP#^PB#b(#YxvX4U%1>n3f}AS)euFN;&R=2mpY5l9nEWV_wchZ
zg>~kwBC(uslzftq*>!rsl70H`R$5-#<>D1zF2{}AT7#o)mm2=%l<c9^7}5Cnc(^U`
zzX2lj+n394pCk3Ess$D$Sedm0x<}E;a8-ERMnYz;#j9!%5l$AAseL^tM_@Fn6)tv$
z7)rGVcUY(x1|sCvCoB2mM%;~46E!t8^-tsyZQou0x%c{uVLnK!3u%>myRo~e6wpmL
zz5Nj7HI!9V9?<Iq$yvRQg?h!ZR7zr=`unCxxuu||y^bJjR+s(O>bvIGB6fe(b+>Yo
z-z>VZ?GoER$?*>utCPaSZ^yeey&ldK*iA{1o{QgBlm*S_n+jDeR?WZTW?t!1Bua&#
z;fy5>sm?k2!K}f@EAuWq+&@KKMF$+%vv4K+R?U8=bx=D?Z562J{9Dw3{;>?odg8fS
zJftMc*tF=s;Ytd7q_g<(gyiuFfBu1wtM2LtL|cg{m6Gw$siG$%zv-t!FynR)fMFgq
zF3BPuxMRs{#$6wYCwDz2mFeH#{_~9d!?R_zzG<$zD&tRY%&snqtq19iO^E7Db!7JT
z-jj(AGt}&5U0revjoO2$WLb;*zcUhi;%Nf-E>Y#?Mr*ZlnLZZgJpJW{=QfjFZI_0$
zy*#$Jx1Y5c{O*$eQO2<Mg!h`J{5SSC9c?CqAmEb=vv(FB65P{sn8V&4REw`pQ|jp(
zenXi(@WEBnfVJ`{tc#qDRB1SQuz!@|^iUGdzu0srTm3?>s8tSSrO*y&k1RbX^Kgl`
zcf$Z&SLy`lS9S<V>oO)6e3mn*^A=9}!GboWK!PECcg6WWa@{4Tukp;kg;!m`C_Pbj
zp6~08)ezN|;u4XN`xUb>*W|O+%QG;@tPtlbO+vt=So9_;cmvhso&M4I^4h+Z`ucj6
zYFCHUe-CBPvIaek8lrd>>z$3mO@T!u?gw@UThQ1|F%ANmoQbTUId#6LX8ULsreeF;
zq6Xw*W?FnLg>y*C)&q;@Fn0sz0iHr-Ef+(4FW*1ANB&7Ub(y&Lnr8hs_BTs_YM%y7
zkB+D(^tR~PxN4J6Ex8J1&CxkhDb1V~9O*=KlZroe5SuP&t4vXUqH`9f8|>BfMi89#
zXg~i#Ahvb$pC0n(DLZ@Gd^=t${`Bq_uA0EQo^5)LS1Sc-LhVL$AX++5S4yw#WoVO|
z18F0`NB?Up6DN;TU$;jv`KuNhDPF|bHh{6s`#(R}RHAHVS$}Uu2`fK-pB31tXUJGy
zQ>ykgy8I2PUpQw??veNbokQ~x?5RRbICh8?D~x}%^qE?b+2AKht$)opaJU?R85|sN
zon%%PGH@2wff=Hu!R3IcLS{H&iJs^8D|&{iG&or*5j_Y26qmT>8qLxBSUIPt+Qan!
z4h;cWP>+u_M9nNsTb8R#J%hct><6x&&|`<A&4kS7XpN{4OX@@E&G{)u;t|~heu_ww
zo$dPL%09t~hHxWh)q<2zFkko&An?a=m5u%LA!tT&Sxj<7w{fyeYj2Sc8e&`p<On=7
zIgP`7WGU+_10h$QliTba4-b#CkY6(D-;asS658A62YOXCRfEl2?T0C&Vmh+?I1Ge-
zgK#-PDS|>q-9mxb{%5(~hfYds5H2p2*7m<3|37R#T`NIAOPjJ=aEHUj*9iXu_{6{~
zNrpQ)OBPKPLB_GP6Me7DC*4#H@)H7VN(?dD$t*)C1nd*~WD9i_x&9TX>P&Gnf`^8h
zx8$T~#!?p1t^k=kv=!u(nXLAi=`PRGYEda6oYnVPJH)ZAn!+YPBu|PSaGerfR8TtP
zlz?*QUll9s4fUw15s335`Sk6U%)Oq`LE>sn^1*0_`T1wp)L1xiQS&D>Jg>LUT@Nel
zv%K?wO&+T;8e%#S=4g2*G3wur*S8Lgf#&7q>3!oIqc!)m%U5WJjJ~`TZ^tV^KFkM+
z_e2#Ve~?{!utDpJDL7n}=rb;<sew(62ltilv;6DcX*23FHV#IdPtYtQ%!0i^K6|ia
z6h)lhRPR8>()%<D%N+EtbVM1^raVV;r2p4g;><b$y%a#4kEU0xH@Hy+rLN3zFQ+L?
z6NxbVFY5nSuicdgSnf47tb#AaFC*GzKkkevSwxe#Ao*wMbW}eV`20~z`2&J}@&jxR
z2TYKDQZ~@4P8i(8qr)*D`LRsxpPXnL2*E>up%t}N7ZdD%jaGoo!Z27KlvDVHf0<G7
znl8ea%!@RsYs6?YGstBs)i-g~ws&$2`zsOtD~mTlfwhjuCY!VJnVu|sM$kub!Bkv0
zKuFz@nZ1Qy^y()sa&C*zYZ&&9kiNT8#XTvE){C<k=Gm5g=`I^-^(_Sivm>ezdGJ5^
z=zlnK{}F#eIoiQeJKkJ5@!6c+5?OhLhHo6GZ>(g#|1bLP4{-U(50DV3wX&tlXU3R`
z$AhH1pQM5ANdhIQ5Z|_IAVNwH*NB+K{|&SLvuxcSx;+SWv(z7!M_XrWR2R#PR8-yc
zE7oZmpv_J<`=jyhSJDMZyL}L5BMGjbgJ><uS*7ugx<*a|P<ET@UkK1&*<Q4CLg7>O
zjT~K3IQyYrMI|$XazbeqwUP89(_icLzsj>fOKGxk<4r$@G|HzmIOY@3$*7#*!#^3s
zU;V#7*ibZgQZcqn7VF}h+MOW{Yf|muV6L%GN+crY{vTC_Uujk6Gp0SnEKx#rf?b!?
zj*K9;7|GSe73&KerHc2Dq)n#zol<)pjq=RD@W?+=?C)}>g+t@!2P@`>ZHg0$Z9B>R
zILwjY8nqni8CA)S#d!O_GLXNrUKlL_QRY=W5zjn{EFR`Tvo$C@s0=>V2Ik|Fvy%VX
zzwxV=djZA6ydFGY)c6+1&!H(!AugL~(rxVp@Cp<cd!1-Soq+%qRWcJqMUYr^w3{fr
zg@uvRw(D8@%?SR#RI`46{hvq%l2w-hZg*kVi;XfaKJaP99Uh*I>Bjd{oO}0Y(f$`N
z(Nly%og6{i!6@S_8mELPy<fn^qpuuspVdxsojCJt%<rviKY8?Dc4ec70;U6oWLumD
zFxBq6L3%P5)xsT~MbNCokKx6VcdC!4Z7JNo5MmoY(OHKH4^|rQvk$&Rv~fH)P*B2X
zj5bvLj5wGx#X1K-=hX}a)A``snS$9gYPqVX*o_5@Q^YPetRydT^uOIjLsDcg$$TXO
z=k{jMw2h>v*8Uy#bm{xXslOLxe|2QR-5K&=T%G#4i9w25rEmjE{--<Xw@WwYh;da9
z>?~p?hU^%rMJ}?F7tnsp0JVs`4AT;IDuk(*o<f0L+pdKHt^%Dy<b@$#9tL_`2h1YY
z11r7s-Lmsi3j*gXWafuwU1eeh@B$e{^#4-P{fkD=nT&}mY<_nocaYUBL8-@fm=>$C
zje%VcOS*(nx7}k4;&)yT=YEr5c)4Ufv)hkgx70$vb~F#H@wP2M<rpPj?bt2D<JV&S
z|3Jlb_ko!x-2E{Xg4m_TMJX0Ht2;o&c!s--{sM*pZVJKqDqv>%2%HwQX|9i<v;OVM
zi}3@RU4JR5{0b0zQqJORaNhVhsewkcu35$5hjiYXbON2*+zb~2#23)_nD{~}zM`9E
zt4NB9T(ut8a?yScQ>FQruCbs2N@V6jRt8D0Q{Y7+?nhX^u|DckDE=JL{!p7rNe&#9
zr8SGk%3@;e_2xJil8F+&v)N&sS>a|`p;}LL`P{X}w;5=9GK;HLGA`MFlmve%mX|1U
z>lv5z49lT#_RWu5?z;Om3a%9wcXQ8lobLu3FG=AALBL#G$b9&$@a&=N;#t~pK@@|d
zj5@9chVTh0Rr48&#?>yX2rZ{YTbq97i_x5m8yi>sA5=W);;39~q&i0EblQY8(>0%q
zX2D_5Gm5Gxm7-D_7XG8W_p3t;EyM(ah{nZcE=P*R2@ZChM1CB}9pn9jPcOWYS14C~
z#q`?kDziA+H@g+Dsc{Yk^vguyW;xVatNqzy^v}BhR}2KF8)ArU9;qyE9_d(EyPv2C
znWsnFh{E9{euI{xaKs6w8Tkc_1j>L8kmx}H%NLK@C+b;w1Zq5vq|ppG=3t&O<jah$
zqFZJ3^S&HgtP4Wq*Q#s^yFr2Wo44d@%Te-;Zb;{P(YRH1_$hM!F^c&sETZa>Mgez9
z1+Kawm9rpZ@!7YE9CN@zNm+mr5t<zAHBhuzUH3*@C{E+jg&oGb*Eq`7aIbluP7Y$K
z^NboimGu?9tmgoUhQDPxcIe@{kn5sjwmE&@tti*F6`cCAO6}`N`P^IEHa+>MN>KQV
zx}f3oWAN=Ct$i(D*U8qRJ}p!N*VoQrHogr4KnZ5#+Xa8a`m<f-97z9pN*{z=uHiRR
z{k*3%wqIWx-(txVRl%uBrKANQGr9GX6Wiymf6w26(+5V>K<&c!1iO)>)hkyd<}kF=
zEJvJ93a@6Sq2SMQ?>Vgh(=4Iv7<}8?Tlu@+63xPWusz^sR5k6jMzig(VP295T1K}&
zi{QUfx(O}JjbdCaOZMdT-jXjx20@8P3DCLdW);%_N9Zp$@W)@(p%FS8%}+Sn0=Q%F
znO4ray!zfe2MR|%ANsvr_>cegr$6ASeOulc&fDCR9oq?)lUoq2e%W@d(e<*kEX^-e
z@yB2F1fhU=legAj+_`ws<wTph#wJ7Us{l7lWpxW)9QM;k{>>?Z8^zp@^DSBVLMbbi
zD6Z<Q!zTHZdOYdD61yG6A1<_n#5FQ52$@&ye$>eRKHYcH+U;lAdD#Ur<bH~8qs+5>
zlk)%e(4Vgwt@tfYthDI_KfuAheTz?Y^VA+Pnf3-4YuhI3?EI6c8hF*kZ2mV`Kl76g
zpPk~Tg}R1bXE#p;_G?AaR_Yqt4W{R(Ys7<Z$l5Ah2zP&jvEO?zXQ9&Id(uD*m+v2|
zC<ozr2uK0zabYSlTQW~^FL0D$CAWy|9>N&~h@HF^mMyWi#+v~6s;G+5;4Hr*&UY8P
zn2&y4r%d5`ADNzt5o`tGhQu)omC4JdImG#!-fqDH8DT^et;x<>f9WUsmE5~N)@@bp
zisduv8ZsC)94uMxK5HA{>eqm&6cgvaotH<uXduUBhoXIij3A<y%Lto4)Su}|V^>a|
ztF*Jbtheev?vRAqkh<8h#QVoBLBHA*Iu2JVN=)gR-*-8~_V2<Q;n@7o=*_pJ!CDTh
z&N(N1NOGJDgSrh5+S|dE8t2J~rR+`TJC3U-r(i~@lfchm*P1MVuOyPPy~f-3!cm3n
z`?^W~O?$ptW3N@KhEv+LW0p#@*Ou{?;KVlsQ%|aS-aot%jhnS{F@EBkJ@^u$xwiXk
zV){~P1v|K-Ky3N-CT=I8U$_Vd&N8^E!2Rik%;KXgEQBw(wraQco<OkWzKz=I8b7@@
zGhaz%r^4B4#^F$Sbp)-&R&K`JMe_8IRxmw@&*@Gp*%OX;4_}vU5w3l@)kcnMQUisz
zl#*v^Y?zu}n5R-;c)}>*JnvmhgRylKvoSUiFHr0h_f^^YGZgMzAYEZTS%2Y^sBrfI
z-{u{un?Ym;ksEcnD}o}WmT&$OrrrvUFmzhueR9!Q$mT8DTA5e-0@&0ZbZjS)SFV>y
zeXamViz8GSCEpS7Ur{VEKELuFzk5bVZk@24b?})d$^BOPebM;Dqxy+w5p)ZLuhc;D
zU|!{mc=YC9nz;Y;Wan`Z)Hcp8?>m~U4$q6VPj<H^<JrprS7jc`c513Ge*zmUcCtQx
z)0A_3Rb5Kc{MSkJ|M>~Xo4Ow@;_hp4ozK7Zh!=~xc<PTGC*~?&o7Iv|*hk5)IWg}}
zZCksq?3_Le_~(l;4NWrNtk*_wcCU=7S8EAu@;;xpq|CY1RvmWs;snK=`gY}gyhyTp
z7fo`Bt^#N50nSuc$w7Dx!QuDuok#nTw@kW#&DCn=Anhud*i|nWy#J8A{Lp$FS6doT
z=p}r}#+G`gCjQdZoUryPIQ0D$y)UJ099~wtCl@w6WvV<TCXu~zw}<JkmnGHX=0oNM
z@wNARs#E1#r}5AB$d`LrFA8^=D?Yv9LOQ8Rsard~Ivre#v;pIMnG})Da$l4uPB+XF
z$2Kq_#(=cn^R-2FT;a!Qpf0|uEdafsvx+3(;^G5$FAAwtBFW(tF~LW&n4b@#z_M@9
z!Lo=o&C_>j+`K$nsv*vv!Lt~0Gxa<X=gsi^Z=kB*o<v_-mOEJsadvH<uzenKqPH?}
zL=Cirhj%6cx6}5Vfq?a}n9UXDcD#$SO=P)s;L?xyYGXUT6Aj!5g^|spdM?OO@b?Kh
zvU}l@aj&3uSM<oO#2w|z`Sl-v4|n?W&X8Xo&Idkq;%Xn(SZeaQfhjy4k7;IS4b>!d
z^3pMP@EvPKhdifJ8dJ3D>E}g)vc<1G((fm|DgYYyGVf$*qWL>4y+k><V{4xJMzz4&
z!RteC-GHo8f(vT?W=Lgwpet>*jH)~9zqdsEN6b}KP+apZual{bJzu)GEXpc|f+@}~
zv6M%L2RHWL6Pipw;UU7|#Q8UF1UGKEA>-YpV*j;q=*$KaWYFHuqMx#LzS;>~x5z4W
z*1jIBL8yK5Z4%+sQp*OL!)mNJB#ifKDGiHJ?s#kX?>!@DtAc(CA2HGIg<hxPW6JRu
z4BgmGHYY)4%OxyTd&5Z3!M}Ayuev9x4Xy%aT<r>0?I|vh4*muMHxVEH7M#pOC~(sC
ziBl@Ve`dn+?X|BF_%T}Fdmdq2dRdEOE4<$M5a$ufZYXJ8n&wS(jR&_i&=YCHo(PxL
zKV&8%9WB#WXAWgjRbt_ttcrp2vGbZsl^As9oXoo**SJB`0rysngY(*2)^20<i#49z
zrq9I%B`Kd>a?=LXB|^I1v!tIkxV%tO$Jpb=X%FK@k}^#^HMN!(`|T1M4)h{_z`U*v
za6nqkx0KtP{D?>kMWwf{NAXT8=8ecv<sYY6c}IC~=HFe3OD`%=G9x9S;b@&~pQzR|
zL#KN28_GrgD5`}TT6)~WLpU<jG(DA8P|%O1-AeOXT1fAmLpka4Q!KQK3%{A&<T(`6
z{%J*K=^|_X=h^mVFiYO7*)QA-U#QWuo&|i{V2h-Jqi$T<aH2x=5iWm$7>(Y37@p6c
zIPT4Jp{-KAfX)-BR2OS#?c0Vw8{(|M>CiK^;8L3#<D7JOVZ?hTWGU+r(04F-NXw=-
z%$-4fK_S@7!}iTf+eZC|q!fDWuQ3+tSp|h%#%8voOc?h>d9%vtK-y{1(u|CfbQ%=5
z6i!Z|-S=8VIw)LNj|og@(*0px%;QuH4<lWqjcZsOu;yEmuD0{v=o<_|IqCLOEVc^z
zAaBXJmt!AUEkS-^`;ev9A@YH<WdEp`>`t*A&qUL8=`He#KSj-ts8M0@A;>glFqh&J
z6fePjhI=8415ftThOMcZYH>QH7+lw&d9AP>@|-hZlLV@Lh_NS#Bel+NQlm@vHP0gw
zje57F2s<(8Vx|W4H-`BbqwywdfG5H{`YtU~L{etFME$^)!5HW^yf&3gDz)9Kmc)|E
z`XlYGYK*#>7Dv_q$HUgS&HIb*V~CH*g3ej>3zo|yq@;$6eW|$S?Ok0Fpn*_ydtIuz
z#B$VNYpydc9l10p<%(QcbP164LdPd0l#-BmqtEJbhzz$Hui!o~Ik)0(D6y(KDq2An
zSs4-E3qJ8bAQBUY2H{W}7ZQZ+h+(u%vsoWR@PDjJJjU@0gu-9%-cqOZd5!Q0!kS#>
zF^`u*$^T4J^>@R=;YH!#;MklzJ)Xq9#(e*ND5-T7Yf^17IcQ#eU%6Hx<+wUB>$24N
z25+`vIcJN{XdRxN9o{W?ssY;4?vW6suweaQ%dRD8@9vH~IX;xC^*nx*n<(rnxw|&L
znyxU34Rf0GP@ZsIW@^6POyLIC0F5X?0wm`TE7bVbLR2iXaUkXW@Zz1#)d<^tN4qGC
zT=)(xYf5DJ{bgC!nTO`1pCeNw*52>;6FOt3IcZ<kqXt@MzGtn1>)HuZF)v*WqxRXI
z7&@HeI|pNa!Z6Uf`|4%hr%zR<n0W~a(42~;Py7=u!ouDrR6SX_H6$D#qzWw;%>j5O
zmP6j`zQVwpSt;zk)j9Uq)a_Ddim1>}fYA@XMOr2zAJxrAi^MPWk}AW)^>?3mg4Y$U
zOO&7#&`KpqmxSJ_rVX^EyQCVDb~u8^3sZr8GrxmTdt-8;E82Cqq)-h~5&ZJJrNY&U
zB|Q&ECnX&mis^ieK35zpWzpQeUB6Z4$gBc7%$&bt4A*$L4X|omg-9V*h6@cRs$6V0
zz7YBwStn8TAW))HS3h543HX2njjNFY9tV%N`(fuE6DyaXZuCi-2qE>>XQn+mG<I{x
zDOFx$?O4oT35r-e`v=XSczphDkE22{NKMybtTlDRkMB=f(HC-N{@t8jK<NnfkfYYZ
zQF%$1b;+H^p4)bE46U%DOO-<0zrn7mk-sve8?sOf7C105VePp2;rF`$q=elB9nR_O
z3>R*sK&f<EdaB5{vve{(?p9CPipOh66dhFgUojxw%6<W_Z7(AgbqP)^r9sKZ^GkKY
zgTxn34zy*@CV4%VJf|{P7ek)={^k=}cyu(0+^hGpJQB>6D{L5ONnTj;PoLiIPnU~4
zIB@OeE@J2B*SvyF!Pwx79l5fyk}<tq*Ac~@T2Npctk30lPLRN)>tHwwapAPh<b86?
zd<QsD4~imFXhqtIaxbaAxt40uMmf_%YKz@C@_m&gzmOxbEym}H9*4D@ish<dc_v))
zV9uy%)Nac2oC8j{j56uI6*%UxJ1(!RJkNa)z~1$)^*x;%MWK_x-ZyV~H8rz!vz%Zu
zZuu_3Q+Hw>dlS2OC4e-vUdPMYh6uPSuGhUZn5LZIagm0@pkk2S&(H;(s^=+6ro<aI
z$0u^cgS9d4)w-388l^I3q|qAftnhnG(~_+a&pVg<ts-5_De+u-`CA-rbml>~1utU-
z|L8xA+|9vJxHS^lh<xRUb<Q2zQ^07XB7h|<kJ)uwKE*)*T%ePRWZrpI`Q!7oSzt54
z=%4%Q`Q4D$EuEaF136ve4qNHsU%f2m!|r?YGigJwV%(*<+wv90KWi*T&WPtD(*DkH
zMiP2LC4x#QUO%AEW0J}0H2f8_QC_Q|oPWy9-0ibZnodW3q0Tu&`|1Sy;!n5^cK7lc
z^Si=sfl3j=z3=`ke9h!8Ga<HZ^y$t(*0*lm5+yIS8s|BDa_;^91J`?^I!;i;ZF#P{
zayL<Znnwb9Z$1zRP09>zO;j#0jP-q2&45J7PeHmcFeus0D0=8WQ3A(k67Rg_`{~0(
z{BN~Z?@lmaVPVBNxqx%sZkirD=hBg72fFRF#*>JP)zm!q8Yo?FXx4gG8w<vs2UQ@p
zJrOGU+f<jmw+uINueSD7eZ1Gs#vI<!k=q(X@Opl7{EeHyN<*?8#e|8-aJ6M>liA7p
z0UFZM_S+s6`!@NE80Y-`h`dhy%geTt9=j6y`udGUKDsU8%3Abdlpgkt`TP#go;`a^
z*45S)T2)o$cVa?bUS1v=5^`HnQ8DOt#p+ZIesyhMpZsvXzVBT+Iw@J%AOmA#DS7$6
z8tI|6`GKJ!DHj))1%m5WQq@bX5|ycNyuDDrimK%!uQ!xtUkWlbH0<n_7aTp1l;*S1
zrbZwTJ_4r)QA<O)+6#r0T9oVOWYFV@qMF&d>D`NJ@Jy9+-+rH#J{#_!ZIM8<nMhE&
zC0LNTp)|Y)4RnJVTT_-<KN*o92@}h{I!flJDF2jt^!}$*<H+rjDonfEe-GJS1fzkA
z@TJO6PYzQvGwJmdF)%P}LAP+*F6a{X(|21Imyro1N~(XH%@h?C1^Cn60>|?ChcXJF
zFN?uty?WPRXK65zifGl25DVD`{HJ~pw`dU0(me^e^|JLxN^q6ic5@ve<#zLuAT)5x
zOcGKdc{f;SEJqLA^mGs}Gybz%ta(^GTFz6ipZs{|ald-v$5g|rrdu{4Az?e1yjUYj
zueYw<`@%xzp%sX9_F<_#vb{$|@6MmwT|*JWZD-WN%_lpF%{}w3$GCBVFgr(e%BVYz
z+%>{{C})Q(t^UPyb8sZ((YLF8wO(G`ti3#xZY!+Kx3QRyf=~Cb#U|5aVrDuyC$DGg
z4&`WeHs{oyxJEtDePkDdc`j-O!Tfqol<nHCk3X&Gf%~kHsY!u{a+((wy>0BaERX8J
z7(^9B%eBYK_`J$~oltmr|EaFXkZSpH;3eH98q$*X4PVEx$lxi5ALnB_OO}Ls0c?T2
z1Y?|tD{W%{JlMeKl1D|}70z;hqnX|SQKn9m6#eR#ArN#^YZ32U$eu9>Z`?>pFt_`l
zOdiJ|`q91zoi!Fbj0z_Zu*;n<8GI2)%ISmR6~U}o(M-?rK}KdfRi7h6yfonGWVe>Z
z)YR0CueA7T?cVomy-*4_?u7(zHFCdH;uZkMsE3fy(9nV*P#JOcAz46#t};b3s(x1~
zd<YP^1pK<KO|qBjq2}qtOKc9_!Nc`hO4mRVj{9LAvh0S%DP=M{`@X38+ml_Cr+Z@i
z+x>FtYy|q}e8RWiFiffjGd#x)p}WkR-Kmoj&!gD!s=}eI2iMA8b;I{!vkbbnqpq5$
z*3?SF=X|l>(g%+^C|l9LukdN9^(zkkNpPG`mmu^IoA1YqGeNeFxo>qIlD$eLsdn9Y
z3+?R?Hb=nUECeGGVNbPSj9PZ1^Uf#x^RsX0;!K|6L>%*FFFU@V^g7D_-AxIMF|UG&
z9x-4hw=m&mtCt<u#^}2R4&h_={W6J6gz9cJ+Re=)?ALj7K%`?;Hg%=fcxh)CD|pNG
z^k6x6HbUJh1dN5bkXt>EzrwdP50bQ7?^$vF21qbe<{la*)h;s5$3Y~$>NioNueU#i
zKig`0FVD3TY`ehS8blpigqsCZxih#U_tx~`t9W(&p0L!I65p6}(eMi>8G1)FhZKeD
z!tHJ-Zs(`1cI^{+2ygcZ{&?39ZQ{Y$LX#I^S9n*mO+@4A;@#QwK3GL&sBeleM88=W
zRMrl3Ec<fIpqvv>VW{s<XIc;K97$FGCNfHqds*R?kHusSKfb$yf<k|vf;%rWB2Jgc
zwl_&+GyZfx9)upaYi2u@R}jZTUdNH{hpVO80?Kkd-&n9d_a!i&KT&(?&{|&7@mgOH
z65)nMuI8)9>T1wNp$dj1nI9Y+%8qzB<dgap&m?9mMHecsJl4);2@yT42}61hoJ+T;
z($FAMT@BcRE5xr-)i;h0hH7t(ds=x(d3t)9_zUjxfsfqj2lLZL7t^WrLYc5WZ;lA8
zeb5gIF;OpFRI;s5)GlJvsr!w4G3EVC)mGPgyKa7ES-y?OivX63rjlSBxmDlyqVFz!
z_25oWZMA1;G!ZHFWxRI}-I70JITm6X8bHCX1|jOq%1|z1G}f9v{^~>(H#NcbY1QBV
zinghZei5UYs;X+DvC~p!dK(7aM=I~D*g+K{=~rgQK^P&gq=Z;XU2ya}jCq<hNH~jj
z-o3NHJ_g|L_wFUKrFl68yIfypxv4NORUe4Qf5S04r}1k||2KQ{+SaYlyH7MH@3s3o
zwTPPsOP-f{W6le!^4*2xV71mfneLdfW8|pew>nr{GctASXsa9BvNT=Qb7d9;5br@e
z(H><SNAFANS+>10%#N>-q8fV!>R$Wp+9@e1jh>Pj6Un|igfEqF6pJ>&D4r_?3B=@`
zhTCd!U!{|E_jE<<n1UQX&A}QorTY)qM-SxiP4uGG$#F#`B_B53@?1izcn5^4?ZINY
zl&kBEwlK&W744U6h6{~-eK~8rb_SJ`YDn^K`OiZ68kTb^WkH-<U_^n1S@r!bL-goW
zo3+>Bs9(2qQFlF17~SCD;FLnlB*$;dp;F8n9pBT0)DKj>ma|Kvn|&E(XJ->%h>U;A
zOBE?hTy$Scg1J$P2D}TQ7V|mDUW|s|1e{M`PH@pxM)4@PljQEPBd$tuN+yTzxH_@A
zN>WXE(0{ZI>WJN#TRZ7e@Lz?(xpzBDkx}kLBZ4~edm&6k1$yLtr7>vmA`|>`%Jk#E
zgmusLXrnp#itZwLXAEbq3~D~4ZV91o9nQO6r7)&GXL==3@N~aBF)~eeNC$U3=z&_V
zg=U4Jo~*2F(d{_cGaju{*Zvjx-nO1ZVG-}1weoq2{ka%xvIgKcZUgTZep}dw>tMGu
zadf>Lb--S>xC{h?!ow9wn$#>Ta*z+=GF2#%bKUWjg)kMZdK=5*>l`22D8AidDw8Z-
zEDH8V^4WJ%dhY2q>W)urEoJ2f9Yo1UNQA_n9?i?Es1UWKrPeDW3v8wy^)j*fVv!oH
zPw0;yuS=um*<&48hx|m8ghUaOini?iGugR_)~+R<(U*acW&h+_i76Sv_OZjb67mK7
z!IERV)*z~D(Y1xzB}r*oN|w((i46p0&r>!>3_n0h=v%P-xcwD@R=L&k{Ef$$l%qpV
zouUq40P)S0)W-}JIsBJ(1Ic-n)@lyd{8k<#_g^BkG0b|xDi<7f@m~>8#79TpC)BVJ
zDqD1BVP<wL0@5P>Ah194-p>?*zT8A=J*E%5!d<NI8<>5)Oa!|#rtuAO;Er`4T~5s{
zkVrLj&N*RGR8IMjCSB3xz%IJ)OJ?h*;W8VJ%$YloVyPa`u$B?=Zil#yfizMGN6Gvf
zk^kS)fEU<k6^3bT<suCR&|St|GkD_@SbB=d68<jC*}B=23K7XJa8scsPcQ?JXsa8!
zMyvYgGu9V^XmcG=)Tf8Fr=v+<OrQg&N8P6_IhvJfkeXC)q*INL&z0WQJ){!kU8`nW
zTiclC)6oh|5S@<S39=q7VM?<0;<1+!a+<pnD~H+z;gy&2H^Suwa-jBEj&PESU<5w%
zb&!gSk8b-JZK9N`MQ-)5R@=T;1jNO?V-xCz9UoY2fjNs^@6V=nAZ<rPWaU&ydTu9E
z7Vk$yXKP-aJ_p!3lW3uMcr#(F-ZKdknz4AVYWP^w)Op9pr}=Ouv%gM6KRB{@xydW>
zuGTk(_mi37mpQiO+w(q^&gXbR7#ChoU8)#`%VVpW{kh{BcB~awkZOpqTdvCO11~J1
zO_GtK>J$3@J#||Dbtu2<wjcV}z85LRaW1rB<Som5yN_!R$JZaD)~=+|jP?&VuV?2F
zXH~VONW8DA*!{}sdF0&M-5p%EKHDDIuIo!)(rkC^_#h%q_p59v%${((set2>!_*d?
zTpZcR_nx?N+2sn6si$J(1QaDhyMVK30nF1bPtc`vas4-I7_{yk-i=ij)7CcyHkxnj
z@_krkFw;3&#@xJS`EcU1zjphjcF(rEX_pr0c^G;<wo|eUX-Z3|_CHVRHhzF=X~pp!
z{b*ow-8ShCX94`mg!`6Ew|@5Gz>Ay+G~Lvc6mhASvG$t3^8<z^zr9s<0eR{p^^;Bz
zGT5uv@rSRhSS(IdS56Ox7O$Gh?&gOxC|6WI8f`XJN<rKzb_4V2GyC)LPE}y!I=;y9
zzIH%xxG_=FW*eX5kNT^=*riMS3=C2SJIjR6gN8WnTp8x+;#p>7(;eo^xbwH{17{fp
z&vz$++IKgo3QO3kkWF94pAW~2e<K7}3jTnxze?o#boLMGPjK^hUq~elSL))Xm?zHJ
z5tR?x!R|Us>9}Le%*>3RmG(o!HvH~v^mq@XYVV7i<2lyaZEow;Akx{C7*G%kAi8b*
z@wv}+q6bt(<OxQKlOT(OtCz}7cph5zG7VR?egEPwtj@GFGCo_>FN=qT*t}0eLz8Gp
z=)hYmjLi=TV=~+OF~w%mLnU#RzRiY3M*6PxSBrKg%oH=lyJ=LF>Q52-#0#04X0D8t
zvyWMLVqfvT$+WDxm2i(>T&Yh}t*|=H=r!+mKk6}s9?`$EaWEo6BK8E|6t$@Q3GL0;
zE!peS6!ae|q~>J223)9W)UK|LRw5l^IFBtET-Q*SW9p_GBGvL7W61jGl;z)lpMTh}
z+r<0#)MbP5fyLJc<scfp%g)YjA43x0us<8=TOeJ&UYVIGLE-*GsC+)o?Jg5jr-yU!
zYEzRafG}mg<^>KfWMRC^75|yJxwkd;*FK*e{y5JA(+$i=XF>h!N4qWz!;k{)$EfhL
zSjpw|cz1O?sA3}Wiru0V$cRH1lx(TRg77=VIqVmD96M=K>W#ES3T>X=#lJhhYfR)R
zt0ko3x^k8zED%tX)~@&FOmpOVMmYG3{UmOQuk+K=Ol>_t&BLx8UZ~<01}sVceZ#Km
zZZ7ObIfj~=)dw&8;T<YQdmCrOwmSon|9Ll*Pn|G|bF!pdYj)!^X0H3u-Ugd#Uy4ot
zMvcR=lFRoubYvb(rY5wExi6?YML8@-Al+1qyH$9!(&*Wo+}y(+_qI7+TX8NZGMCTX
zEJu!*s}~I>#!dG0P_;+0L`G`4N?6q%JMM!k6K>1#?}W`CRObwh)PQWMTLJQ0;3mtZ
zTET`NcAqjb(3MAbsySdP;}s6(L&Xoc|E@E1dw3n-FIq#WHAeAI7&;H6=|4C=YR<_y
z&Y{qTshn|`Px-Cq)s8gZtYpB8ot~b9#Y^#+_yh#4AiHJE%*>2qsQUKuT8dn}KwPuH
z;R^dc2mtwlMV1Hbs@mkd4*H)U>2vk9JkGd#f98so<#!!1oZW@mybk6i#Oy|XSK^CH
z1_lORm55f&MVmhoGSO21QtT*uxVN-q=2lofQEWam$3x%+UT*6RlChzAbg7!-k~W%N
zaX8P`->U%Mv|+5rZsNV~+;>s%Xmo0*E^}UYr1bN3bib_kI?m4}=7T(?CzlX|AVRGD
z;Rv4LYwV5l3A4aWA_4a@4X@*!&<`Jo92BD+Bn!nwNZIY?q=$=46$ZA(ua;O0e_y+a
z1>u<uQ@C@mi+H}0-`tiU<bB6yG2(T_Wxb-LOY~>3ah48a8<z6`=oB8s5hYz;8!Df4
zTjzHHWbflrc8e@MDV_->g{D<LPY)m6AAm=-Db}3a*&6CgU_r?r*?D?ido{R3f?RSp
zD0>=;DX5hL8f)7Vm5nNHG`h1NaK_}jn%fz}!#|t$XU|UFs(IZxt5^Vc_B9z{KX3GV
z3Q*Jp6j=3X=hr$Is^R8L>*l=RDff3#2*Ut?qq|Py4w2551SWz)r3YIh5jG1wiAde-
zPr*d2j}SSU%Uoip(UMY9G=hTPb5F^pUAGr*3+~lpKVqrI9`|{o&7cH-r<kSGI>DyJ
zq*3;S!ejesIbi6?x7N(5si_;b23AK)-H^?~^AiEPj=`R8K2tkpO%HQzM@-WtiuARn
z)%ysU#QQv$)io+aO#aTJ<J6+y`Rs(oa_kfsjdqQ5ni5gdP)`$QO^YGgB@6K>X--h`
zx63U?9V53_Ht<*jZcjBs+-8l42dLHiLZ`PP8g^UHAz7>tlwHXKWCe+lhn^raW9jDG
zk{-xLX_)3v2v<g=AGZ!93+ZWzpw=L7`56kb(9no91rX!8n${YT^y$FQ>No<YM_U<D
zxdO-A3f${eTaQs+B1;X7Tu+7cBqUl-WLHPGs@YOjm-UW+TyHS%Zfy+#1L%GhiX`@2
zx}RVD$U{At2u)~5t)OD|`CBCS8_FszC>MU@Du}P*E0rx#My%BY>3*cYtg!yhrQfTt
zlD)*-?UcP=rK;A!>l1-+P7zCWPNIa7hq}dj(s=`Cy`P{xaTZI4hKJ9(TqVhaIIU@P
z>rZuoV`wwDQBx|d7F3@j>fuqHHLu-iGPFsy(i`>e9aXgDa<q94hNZ6aT$J%!qzgf3
z(%>x-_Ar-lgvIfKz-fLn#d}a7>)mkOY^57-;DKvujCoFyJ2bKv2_qN#n<uUhmRgS9
z>J__s4w9&PC{QF2PO9l-55?u*YfPFFH|3^$OG_S|jwWX{K1%bAW<S=Xk49F#K6w9N
z<!z@STbZ%r0>Rq!`S4v&0a|#Z;kiG{=5b)(O}aNtd3p~d#1U)bm2MP60dmpdbVS#A
zf~?2NdV8&8^Z`o7H8^BX6*zC`J-^CM?*60xCR2>kUe%9Et3^jZ;Yh7dRL_QpQD8W6
z)-Eggh><%yvvbpC0OhRV`Z0A}PY@5<PQ51dVPh;dS_2L)io;x~@s>XxovcMCBu>A&
zq{06d{ycYmE$?_Y&B#{}>LPc{sSs`946B-nmMrAt*(Qu?MdF|gG0i0$Z)na|%PpIB
zz7qAE<&4OYCE<T^QlnEGo_R7^YAy~9sEbcsi0);ZpL(kz<~Ipt^k5U(x&o;D_t`5d
z!&6sxrZ`FOvhZrM$%lT{{0X5GfEhq3s6{IijXzS*?Qsq8(3?HN*sUO^n2O?;^v;7o
zB}=i22(g%ZvwurA{8$iNJj9V;K3rgk%z2_Y-`Zt$V)p2a=5?8mbt0RFh|ht{$!U8v
z`*{az^Q#h_v10Q`{e=^>P;S}+lIYjw$d%!swUH6E{T~h3vjYlp4%_S5iBT0xOG|fr
zKsNO-DYuxM1d^sMKO$vbsJ@5@*6QvSFfOBz>V8l)SL1Q$lhwJtHQyZxKKh{KgH1Ux
zHWd2SYB4jaV~n_%goNagx_*hlji$eQ1<-$hzwkbW9?u6EI?TX1`dh#yy)*#}2Mv?u
zfL1eiD;XkB{H-+W{6`Bp*ql4nh>@fp-l?Q3nm?g}e85F+-%vJ29A&H}yrs{$<qRiI
z+nE+WeZT>19&JS%R65K8sw=!RW>uT&c=@O|S&a8(#pdSb9a@C6^je1kuD1p`$zJLu
z{k5d1nvqW?2{FnpfJS)Cu2EcM@~vy~1X=1gMS{+0(v#qKf^am6c;NK>s!@4x<tPB8
zfJz24UXUK_(Y}5A7GA3i`P@0T3*xJs@`=8;SK#H|dD~;)#;1Z*g$FnO#spqM<H@hn
zMRgUA&&gTOyFP6!Z{HuRA4^jM$kfG-m=ikIS(-!d1FJ)3Rp9u4ng(P*ZEXwA2$=81
z{IL^#lcy(6XGswMdQM(mPvL3tkk<R$nuE5j56bCA3a%gytiJK)kfirzQyd^?{48(s
z(;YdbTd^x^YLc@)F2%FRN~-5YS`svDMTCX5@b8XMN0VpK%m#8!{BXbGOYZo=*yf4U
zTv71Gh^H-R6i8A>FG;Balu{CLrJC9i@;b-i=!9f<9RDmZreLBpA;p8?EzBi<B8#&s
zOUrbyAjNZW)TN~I$Jf(P&kLjY#Yz5G4C+G(+az8K`X3+gr8|QS$#%)VY*s(kc2jIH
zyfa68_?yggrHZVk36Y<`%rhN8ZLzs*8gvhuKTHEWmI`2SiJxnrD)`(WC+W>4XE*9V
zH|!r#$P2lWYm!Dce$vD6PQ+Uw2o!glkD_0<Gnfy;RSO?2Z;#Y;v%&^@R`GV?swB-z
zqqd@{$I|O9L0(}C=z}4ubimuN<A0du(lG}mAYYV$lg-H5udYtY!TiXt<AKK+pi<Jl
zWr0OB(ytUq(vmi+EU+`65H~Njypm!3AvE-kgoFfcdo;VT?BjUlW@6)yQ-e$-&U-PF
zN1~8AD>;!uopDe*jf<LW@hPU`4mw}TQKw?yPz~bF$jusUArLky<I(>Vg`<!)KJ+ER
z{V8>IaM4M?U=`JoaRkCCZ&P!TnYgzy>n^Q*kaLm8?AEkPxFKmuNkNf|sj$!WkbM2-
zhozZ+JED8aP;WcPj|R;H<SGM*h;5uo%lJWJ(aZQ0PzixtV%{-;XQ}K#m?Bq)QD83?
z5U?{Y9Rh)Hb@kWX@4S`LynO`NhbK*+qNAgGB7C*oH(qyq<W_*ZkSxWpj~p0yRt_vD
z6;xD%gk5E@e%oxTE7EPa(rbCTO=15rM`9>zh=qwM{Pi`$Hc%R3t_Y0FY1S+#ESxQ9
zXTBD@EKrhb=`gq)5gslgo#=6v@0l>U)>bHWekcN0ibV;6Z$3|9d%bhnntOAlq5MC@
zW;40d$4cG-ts;{UlL%I~#mU-Q6CdW>B$&#<$L-;-{ye8!@u$}f*ZPVVr7Sr{qjJ>a
z<E^yI)065=jAI=l^u@*ag*Cmtj@D3BUtJwKl(#;%SgIH&{sgi65WP@~=X6#hbl;ou
zO;YFi6mr5lxV#t<#d88`jTnZX`<}1$C5vH~16od`u-_#-Qp@&k7B&|5)GNG3b18}3
ztwrJg&JKT+zVNh8n7sT-O3etnb!CKQY=#_`fihmumjeGJ>-cQAAcwTcWRZOXbr^D3
znL&532TckdLX=3wIIRn&+KiwgQaF9+CKT0K))}=}1j%?+P!NPtKOrYIFJY0CZ?-WQ
zwuR9b04mXsw3mtiOONMxyPv!n;y3dtD<>4B)I+_LRwjA9*I24>tV;Hd`=nUHkKEU#
zmjKjR-TNj|n_*AbS(kc=^}tM~S6afAvbV&<qEiEze^z4z9ThE>rQ>tu1W86D{cxQF
zGgD$#y;m7R>fttd19)<LxU8vH228)jEB}ah%R5PoJoeY$eePD79G7@S!E&N%xF+n0
zW})IDg9hYDZbAYT$g>4OU?*H}yaweYPk>nz8h78Qj+Xl>MMF(3><Q><S0k6v_Dr&K
z8TTc$nFa5I7N6D1l$`w5G+mX<Z{5Unn@QFEj$^fhUE!FY%vQ7Y+AI#Izm_G-3zU}7
zr~K_)fYz&(Yk+%bAyC%9-4TuRI@$M=mf~?9D|@~P;u@|cmu&8YOS%=8$8g2SaCabB
zRuv})%Oa>=BS|K-N#HKGvlzAiR=-F`Z>7_E&%;-mm5za2h>;teBMzVz`<A50uy;ib
zbQO%v({m&&fF36E=MVFPTz%HEnbqAI4pe)kEt5q9%~msUr#XJJS{leqipM^mN>Jso
zpa7mp9x|}g9N-fGZd{LCZ+9p6ke$bDR6EeC4!?G4VebD~kM}5Phh}qiu4VfG$@&xT
z`VbA0Vb+%-5$8X+BL1I}rBS+F7q{3M15M292%j%!S{$&v!BL2qX??%Tqfxq935aQ7
zAsv#c;#?Ybb_J{I9VKFJ+nE~K-lQ#i^E%L?)z027FGUMjynb0;rkPyT*pUj8Cq3()
zyOkNEglmhg-dC_NV`CyCOVf36n|Zzyn^7SE5qB#;0%5;U!C@okjm`0Xqz1p!EbWr!
zRZwZD`PjvMj&6GaEv!rQsFWz}7??xW-f!}1EsGgBk-9siI8rfO;^q1kk!2pd|JGPp
z@}yB!ujR5HQKve44nyX<32x#(8m4mooVJgaj89Zcgv=PEVvGlCsV3rC+G6OE{>C!&
ztf7$DZv!eHG#4aKtNBv6n#3HRI+BDztS9&~Gcs&6gh@fAB1tt0L`M|QrP<BS8Z?qF
zDOPlj29fi^YZuw5n}&HIbtXT))!UviH6^3{<?3n>Dp7W0a)*JZiPF+B4=qD|e0-|o
za)!tRJ*$pp=mbNgn9J`j-STsb%?L;B>+d)G-uNalA@|d#`=G_D(!^#o?rn~u_cX*V
zbi!N;#S2_%NC%kR=h9g)9T5?cAOR=gLVlSK4{nDMn}2yraMq+l@!e#1X^^2van>+W
zlUB3B9)sKsY=^vC!@EgVVBetG1t}`VCwv^RWGq{H6P}wJsq=tngABs^m9?2nU;9%s
z1v=W}(@s;JNPz|rT=lpI2~l7jJ0-_E9Iq5Z64pRxh`;kKx{o$50m0;|0b~B}Itfe#
zPo>Nz5w2BT;WBI*#ecWZymsy(0UDAvVUlo84W`oWPc9MG*NA?%ElqWOZPi_nd~#Q?
zbh}@3rCkj(UBiGsk8UNMmIiGG{xY$TnxS(-X51G=9nld{z|<ZMD))=-y&{Ah=lmR1
z&n*;^Z=fORK5%PT)esdLCMG8QjO5Y$MJZG*NJc8t+be^h+tC-L4$>llS`YakjhX-v
zmoB|B;DjaFC#^!R3He~Pzd2g~Tul#;L-xU!D5HozDmssyh2G>&cQv<KKq(d&b&{x7
zI%Youl`ur2C&_OEx!Sc4M@jl>a#Y-Wkj3V|jR6+baK0-xG4e{mqA|0epy0OjPPvhx
z;jrAf!uJb4z}ABTT&2EY#T+H$zBk<+Z)n!#i9^?F_sUfFU6-_HQV!!fs+&EC@z|3b
zhY65`Fu(4nC}GprwDfwsh?saUSnx8xpkHBSe87ViN)^#ff!=<u^Xy!NhO-ccf~M!t
z);z(?srgiarMnA!(^2fD>y|(iyN6_@Mjkn>WsKmEh3{+fcl7fUZn1v*1;=WGJAs=c
zFFBN;;}fNq^5VtL2X5zj1%7vhNSOpFwSs_!*k!(9NY1-n1y>&4<I$xtP#YH-);c_e
zAEOBr3Em0JJ3KrZloxpr5&QZ)SAGt_|1XtarG4P}Bo1xm@Q^r^nZ9Yju~LUrZfqDe
z|FIIk2A$|?lwRAT%GIDxJT5!!gYv5C*6V5K6ZiAD^ZV*lIBjnS+rtUk-!T{r5NM80
z*;)$Fz*Ho8=BF?-vEmE{m4;tCDGjwUY$-{J$i!C1Tzu!~Mc#FL_55FK48E|jfe%{D
zui9ijj1PsvA1r<+9=-e3xyrAcZ7g-Y5+0yJ5}>H1X#PKK-I5XHwIV)qvt>pc%%wal
zQ>r=BCnh)j483k_txZx1ajQvhk-9l4YI;{etivttXB9bJynp-bTQx+(r7?D*!ah><
zVR#>7Pt0-sW<5cxymd(0H&&$wh&zXg6+W~smM0{tN>vRLGXI0Yj66wj8j^19ly>MM
zLf4pD`JwF(Wz02ZJFSt=wC3s>NwWz$w&{V)f@IPF*`~)J+g?QZ6FTM}wQ6}6Cxk$1
z#-7+tIR0UDjb_?y90rnQ(0!g-u=JRLXqjX89T-76D|)^$YEAkl%R9e3bQCjSVNfyj
zCRw7)o6wKWLZe!#md1AQ63g@;@8Jjmd3w9Fcp4!)pF=A|#IqLdT9w=CZCPW!=Xkik
zRbBq_uXUd2cj;(b@{Y*nuV3PB9-hj*1ygbJq7aJW^!W6l-aq>oophzaY4BkSgLY2n
zW%JT}#YA$SiyP%3{R6(*Eb}Y+aQv|cUk4XsXkjW$9{6^~e5Qs?(Rb4<O5^pS@5JYh
zFy^wTP%AnFaWNe}_<2|2PvzEw37gPlzsp45>*5nKGYVHh)8nQbj8oU{+7l0mZh-5+
z<;GAsSHO^~5ldt$Y3Y0N_CR6M^BDH?)_s@~CXvr=;mv|rW8#zXxOY&-`Q#Bd^R5O`
z!?ls=Y#lhSNC)j9#!jHnzR9rYe-J@Q(OmHH|6rSH^f<VFG;Fe%>DSF>Ay*B+?OTV9
zM|$r&s&{W-v|#|lr`^SmY0sM3@2(9m&ngwySLpHh@bEk__ZOx97b{r=1;*devWoGA
zEBkUf#gE%)daKy`Rg0AVs{EoI-`LkoU#8J-AuPgAV~RB*EJx}cUt3X)oHxe*TJ%p{
ztcXzQSjutbi4pGJV{i#Q#RU65l%6}$tptq`>=;*Stu2+yn)o#VF1Y{b^m*a~cc39y
zYbZKb#QPoH&%wS9Hj0NG`?y#zE;n8M_;9Z!Al#QQI$}0z@HqpD<h94mWri2x9K{r~
ztIAEXt9Y!#-IXPw5u?5r7m^l=2k;&~A=H<Tn_UA}TLi!(<h`a*IoO;II{R?Q==5sV
zIUJt5gjdzrWQX52f6d4;aa%^H-<-(f!h)jG!7xa<D=`#+pZ+?;rm8S`S{>9zn%Ti+
z?fD&1CmsMNt}6M!MYJNnYN;}uYE%ft?OR0sr*nCkI@H7^R+RF>N{^ML(sO$xEc=5L
z1>6a+|9DQ?YpCrVhtkVUg=MzoDrQB+A*w=UtB7=gebI>%vsgHYa1$gV7+Dw&&WZmY
z^um)4og8DF4~&_6oYkP5FIS@$puk|Imex_ZtD337`>5mF7lbC$Rs}m&jas#3`k89@
zEH4{&o|LFaIu1HxrD9+B5X#c@Fwix))cS<np0*-cTUq(4q}QxfgQw}S=)Z#)7ci|h
zlB^HwZ+wuZmYZCK_9@#ElQ4$`qna(7pZO|s;f^<4Ietu90v(5U-tfXggdSn0(9lWx
z5QrsLc5_6&s+&^saIvfOW_Y|qws%#>uqAq<qS$b%w~y#3?!%lN;-*<LQ*z(I560m#
zO)c#*rMM%L%nsFJnvo|57dCZ2br^-JX_p(jA-phIADD+j%IOiY9sC9SlrC^~A5ro;
z(*J`Uvgo5vS_0!_mA;%X*ZB&>KNuub1Ji!}J7y!>^-jOpn9qn;p3eANl#`}R)A>E-
zD?3-E^uE8o(-fSYea*KlQdxDBYEUTxZqG1Ca{0n~>bipyg4_PUgTPNjl(E+1CLv#$
z^jufjm$opDXVNZx<}T_^N^TDQzW;zEe`3o2{RF0&?47J-?uq8$kA3ZC;gkle@?jkE
z+~B8EWxHzT1CJlAES{(|_t`GcI!|Hz9MJ*0`W_ltWFR4lE-tKKvujBT(^b-MSPKfu
z!u1<`j+{_tuKE-s-o${YPaa3Tu@=kFOg5%`6UFBc$MU~ZlV6DCyB5_bX4Cy_c=6;s
zm0L3P@|h-U4o9Y~c*O7i@F8Mr^f39Jr)9fW7q@10aj3N?fx-QtjQV-nR&h`uiZ>ey
zLE$epJ`srqc}PUdt{ze!wkO05Bdsp(Kka#7E8F<<{G`Bb3h}sQ*|e$NY0`#MF*eiD
zu+vD$^1HvY@0MI%c{C<?Vesku(&jgN-=NVJW<Oz6A0`F=4K9`qg`@F4>Si{zZPWF>
z+kn~hKSV(<oYC~6P>;U@n<d}Bi<y4X2d1O5-7vhfEzuo#KR-5CfAkZk<DcB&kyIUZ
z=2OmPzbnINyd!?%@j)&qKKL>oJq+l}JvHMqDZQxZpO-$&e^$Kcv2|yB7ctYtYq<JI
z*;!Fpka4)0O%P6BGxT7s@2*74$@^l0DTCd>Aj&X05#g=z@&Cc|)!h`Ak@d4jH?l9~
zDHWsO%Hua^<asxdoNk~Zq>`)p|0sLwxG2}>eOy<NP)PwnR#s`24iT1ERJs(9l<sa;
zniUlg=|&b%36bvZ?k*{%bLp<%<N1D!^FHVNUizoF`#ksFGjq)~bI;5jlXK^JPN2|7
zd=XWwEj1gK-_%cJG_eFW1`T5^c+0>HqU=M)sR#Zj&aS5(nG|CUJTx#zn^Wh8-E@lw
zC-W2;dEct^hu@BHyw))kGS_f!#x5hWp}>{X6E`-s`XLz>+h8cR`SVj{9{%-Nj!Vhf
z#mug}|Lhj|FOwzky%TI?DPNL4<k7QeWbLSgdZW6=qU|6{#?e`vxrPlEQB9M?vHSeh
zo0bh$S*cQU@*g1hPvmI`fWLP&uS*PB_IXQ9kS>^Tp8*@X2IiP`-D?N%zb$6wm4sCa
zo6x1b<bNrz_>Ud083y4Xz3kn^ddNiXeIumOV}(tcu`HpVL{vrhB>Q==%})rHV!!$?
zSZh=K{x-O=1rxBxnRC-Lj`nh}02HNO(>sUAezGuywLo5;AX4+U`+P5eGRb_g8#pfk
z3?!c8a@W1pBT7k$K1c@W*sNcXXpY$&R!0dGY^nWrhcBdu35ijUB5bE2NPqG?m;Kpz
z@=|E<NlGF39W^$z9=DF)e*6&>yPd3CfRsj!`nSO({@YIGPZ^lsr<dp`4wMaVSS8CG
zi#Dl_ctkMt42lg!L72<0{Qe&9iPl{2caCM0?FtMurFH5soI!tjb)7_jRxeJkn(JB}
ze>-kn8y$9g*Ztq-@JM%3?8}-+RXy(2Z3D|^@1gQ4H@n7TQkY_oyhvW`Dju_>($KXm
z>H848Fckks*5;oo`G4N8#se2a76FNrgbaDa9?k63F&3+ds1A>kg_*29aQ-|Z68bjA
z?2jV&W5%BAKwTYn!)N*aK;cT8HbXrObRHWGVC-AEmuQ7ye;8H6A$RcFH=2iD_*vRm
zqwHUADs~rf>IzO*9TJQ0MV(FLjsFSQC0@gLUYlqhnaIYe2Za7E%q(W4<4TZ=&P^0I
zbAp7A5`{RKg`5BFgzrBoD-icrwUYQ6wq@Oo^GHa&Ly%tRpl`KEEmk*`+26OCN{ZJS
z_V~1Hto--Y+zWp5+rR)m<Eznz-&6=74HWyfQ7Hg@G9O~BTulvF9h1eqyzpnwgkcZx
zl!0=ei#fxdrVJ_)`3~A~J|MD-FM1VJn9#?|s|fUj{NYcR^a3yv!?h-bCDtj`F_UU6
zJ1Q*x4t>Ba2BeqnAF0h6q^IY4c%mu4G2UhOTprz;QYQ6y&`ZVc;v?%~DrrfXU`70!
zG>nose?mMUJ#rwz(VQLr!a@Lp!VqI}8a9f^8%;9DNv|R<tR!(<qNS&9{Ie|2<HVFI
zp!4#B+v%bla4kzgt8XFw?qd~)2zcF<p<t!s9DTfHC=g1n{Y$~Xe?&P1@I(|QlR04B
zDW#)j2019UvG+?j4WEe>)#nw5z9RQ-e>g@&JvesC|F`P9|8Nf%ke48j)PN%wqS0p;
zSjXN=6Znz@q}j9u3`M>$9>L%5Y7GY3zl;9ti9ia9&>x<0iKaR`ikvrDqM>BW!$n=;
zy$ppQ9Q5kXB#tGKm{&CEPCI4LAmxyq(O)dC+53bjpc=@xOFH?l2Q9OaGX}CA>;68^
zg!FWQZfOu(nJh>bJ##6db5Kk+6tcwBy_SOrqKczGEi)Yb6C<p-NILSQ|4Y?->u*?L
z=*j(3(VC$C;9X_9{ICpT0VtQ@w+R5G#}*VID>6Da8QT*c0WQ9?5P{Qx>-wgA2?8*}
z>Uvpsd3m{TNkBBObVthnS$F^6_zkR4O>v>(y=kn1F_G__($eA(A5Lhrj-@0++Fpd4
z=fDL?dC9y#k}@6vL$)2Jo?oscY4^uvujFT1p>I^%6xeM(?Rs8WyYF*t@%A6<w>L)H
z9Z;@;C>BfOb{>Wv$+*qO8+JaL^z?$FKr8*9;TRTfxJo&v9=Ql8mw&^#gw@^R{S80h
zZYT*HD)x*vKk8!*7zxn_(z{=O-?;{oGNgZUWW6mR#!N3EUWD5`WdSsF6tjKZKnenE
zZ{m*}0{<h3No?MSJ`!KrEm<s9#_2v3?^>9ZBm+`=Ow^7`A=ySE{@*HU{t=pfm%2j^
z-1!NL`?Bl;)0^0rU4hwSX9VA80R&poI<3yZHkOeMQyMDrc-b{Mdo%*J2Evlq4wEAV
zIhg<K^8K%%<v=pgKqbJQFU5`C{yb-5bTl`!i`-F(eOG{RMiq8?&s@6hmgY!kkJaz9
zmW#sJ;Yv#7k-A4rHzQfIfB|3u@u9b0anzp~<SB$1j6;fO3f?~YXGQUUU|J0uh>$$@
zs@j*R!k5Fnz<@FZP_f@__xcM*9<#neq0v2u46B#_d6N8Ju)FcW3ox5ypaVogEF;ie
z*+&*^gsD4Wp#8AgN)0F}EczoU9Xw2|D3e>h>D@Irz<bC_t^D5prR}6t2v#Oc25-u+
zhJALCu(DqEpN$3owLEx@F$l=X#z8p^Ke+AI&>0&y7xQ;}xV==ABjJ$C4Wqi7=re1O
z^!ZOP4d}zZ8wHFqy?WRo-fpfXWsK9n`4CiXS!JFc8WKt~gSB7qCs=VY0q3DX15p?}
z1J70LrJ^VEt2epYo^?4|q2a+g|5j}JpNJ_$^fAjk7^vaxB8ia&q8U*<RVd_@ZR)96
zDLEsjz#nolH#&llYwg@n1N5o(u|>?gxrXzh7nq848VHvhaJ7v@70Fw}HD!t4IClIV
zEl%NHk5VZeGIFzW#Lz@lnKU^=hI0Ls8wSBnOF%k}lP1VQ)rt7`ebvEZotZt&EJI9T
zN5_K{@+qY1OHAQnQ0}XdLjPCuV{d<7i{Ujspoqe2c^^J?mFDU6yLRE77fjzHXm5K(
z+qCAie6s35-c#xSXR7>2rydV+m)YLO?XV_F=&6~B<mOG^C#p7qH~OaV&MV(l{>cm}
z$QMQAHMAv;>|tu*K%#sU6nK{5jp4Cg*Es_TAZO}I_WO|)!NxnlW{Jps4Ue2O?$f^M
zhG*0<5@)zV3p~Y|cGj)_WGWZXw-Ap06!Q5M-NG_OCjtdNGix-4MBd;XiOC1R=~1`E
zpRFvdrmRo1D<WnqlexmWGQVFt^WaJY1wzx4V^-X0z8C03sA2!NGSdIH|5Omrisz8k
z!9Hc@bdXKriB!drRPn!oqr05+!VBoc;ROn_{(mxr{}ZyfG3TTgX-Q>d;((J|Pu_l5
zs}}<rAp**|CvfY^8qgUcs;z#VwrYD1{zUhTfh9gEQ8qvavkiMLFYjn_Re^Ge%HkMb
zh3Ko?8q6;LgE3eaF@Pl&H59VEW3=|I7@3`+^@$_}dQil^q&jVQOytqP1RMXz6T2}z
z8t$Qa+s34szI|TwqU_57P6LIrX1p(7>)Ca&on^B>QWvT#8PH6E{sOk1jF6Pqh*d$4
z%w~CrvRL2Y9kKg2_<_kG-mXUf)+qnokN?BLdv#+1GffcL8-g+C&kD=?gVulr63u{M
zIhS=!*-3vpDSi>-gzeE-55vtOm3w3q+}aLK2gM{*AyT5eU_HZn3Ugy4jr--7f8WYZ
zSaQr(<Z#N0X*06U-d3wrx;kzW`jW^TETJ`sS|ubyt4d?`SeG|}HiST!nVFegf$2Yf
z+rRy2`0<s8CtB-Ag23#G8j@*Aow-QP{j~}@X{s~_#8Dxb3OF8feg%H^ESr+!z{ir_
zuiOO^JX?|q)QF3}z5HA0oPuhv<9(O?^~1GlP!<6jfQ-8ePnGA&z}swDc-p+g?v-Vc
z%vR%$r<ot2=H_)1hBiT~6W7da83`mH1W;BgX5N?ow(`IKjX)6uj3~*P+SXq-Qnm2G
z%@|ieS5%osN)H|t14RW^jUHkdFTxd98-RpiXcWq7{rxQ;5RPAKU^&o`W%K)+RpObA
zIFFw?gMPu?ypyAs@2YWs#!&4@&z*TfdlgI1Zwb3$d5Xo~5=VcDxFpD2R;tx5PVMQ_
zRg?bjZtFjY)c=DV<Q|#Lxz_sG|A|9HM?<s_7$W94A+^D$;<NrX7r69hC-%DZ!L#x$
zFSI6r`L;~Kar5IId7nN>jXy53by*oF{T-=P5%f$g?e4p{+MdT-3yXn~CZH*c&tHWK
z<mS5$dM1|koh-2Q=4hxaldIdXsc$MLdm@Zek~TOdXQUyFwEZqSIDv1~i>*)}WdB*Z
z{XZc0*FQhY*POyC&jPcn7ZeFh0^s_J!0aGfOX(X|y9(ynHMoMPnwp#-ks)73BH4j<
z2!$}B(=TllpVeyEuS#~V&X=@>(n?cW{>$LCzpKGtL>icxg9d&a!tGQr;W^wKL)nrg
z>Zs`pT2UsKqE>hf?Tb<eejMg31B_>k=rhlBb$tB9m~9yP9EqSz`e$RuzY!!$rY~ox
z$y1oeTdg;()5<zAfF3-U3~}DK_HDcwI04T<3d@u9Q(B6zNAy=nzpH%f5{GMGux~d$
z8p~szR8TO`EB>4NrUmy*7@k^MYdnQjo!)T7sK97TUrs8iXmkG9>ee?(2+JI~*03A`
z8)`F-x}GxB;3Qa<^zv;50)*Vj5Wu0K;hjn|jolhGPWYE%w|@;g;K$gD>)S^#_mai+
z{UewVCUOWHINY4z8xJSqKvd1IzCkIkUe+VW5p|j$?@*GIlgU9m4zj;U9SqSd!?zos
zYo_vCJ)m-F7WqAC<xGJnyppTC$NbMcva4qR?MQ<^Pz+;+I$`O>$hV&~-&E)KnQCgZ
zfkfT|<!<HmpBlBh;CaEFf^-AZfl|Eolf!MWJNLgS-9P@8xQ4NVa6WaP)Ecjz8Vh<X
zUL&m|Y8x}adl^B+Nz3r+umv4BlHO<qiDZ1~WChAyr9h>|PtwXO^p*2l9RRi4w!e!M
zV>l(AQNvSfyZf%VpiII8mj`L)C5I^;sNA7Ja>dS(s}1}ovA6VY1PU%~<#FlZ#y1wB
z;Kf4vlwp}#mFn|dsFlSJzo&}FY>Cy)E9+Z((`OTt9&h+TTA-VV)ll#g$F2vpU+TL8
zN6Z_IAj%4D3@}GM2n68nfS*7~!1rThr8@1#Hxtfw=+n~ePrV)AB>vtTGYNa9zV7Zn
zbM2j4*+u;I`&3UfAKuNF+nRG<FEqjv4h-moGgGq<1jdBLThO*}0vrn#;-!m`WPH9E
z2%7|IQcrfXJso#?e-9Mh$^PesEF>R4rbT@#DEV5AKs4yV?w->|i-<#%o%ly{^fv2<
zBhAr$?m0=u`%W_7CS$Y#eH@g(t0TLhqvP^3JZrWi0I;;=MG|>H{zKNp{T|Ovl_d-Z
z`}eX`Gn<V7R*Iq5xJ;h~9!3d2d+!Tv+v^pl3K)4?1dgg1_&3b>-@i4WYL*AnMLj(c
z*H`urd)9XX<tVUM)qrH?W1t-8D}{l;?QdS#vB`kz?xozT2#B(s%yj-@5s8Fkdt}AM
zmw}QuDJTq%c9wtvGV_b6zb89aU@OOV5s1^%39X%d=TlVtH-sd$W{7A?WTA>Qz3cmU
z8*V<ou|1-CwShC^#Nff|M+;e#;l=UY@kt*kW%LEC`v=0fySuxA9=~Vb1e$P9<9#WQ
z_toty>)Y2c)Tw)V257W3kg9=tE%`uWTtHye4XXw%$k5k*7r)y}PTO%i*ImP0=*bp&
zb{Hh()}|lzaQgwH7_nk<DVcuD&NoPVlIV|M<!6&tY)7sYXRLq_3qez=8bm`p+-pLe
z+?fNawM*qNy=qcdfWTjKUt7hw_yB0Z`=+O*@cVkNcZ6qYBxURxR$iXX*Z|#MVkhG7
z!|ZL3|5t|p#<A{Ua38d->^q)<wLF7{r{);3ft#I8EX7Mq-2INjc@4VUr%GV@rC{LI
zVtQF%0UpNM$)rHI1cZ@C`Ut#r2>@-_LvFo&-s-~uV472Vul&EciZAE+2&xUc@VV*c
z1i_`s{a~>xm2@FqQrWNHe;gsmiGsezamn_qRLP!9=cD%`3y0p#!X&wlc^^L*P86!x
z=gLRhx>Q*_fjZx|incd0+8>C^%RhD%PN?sy;DT*;A>{5IuU4#Y|L@=iFRzF3sc#pS
z=MT&BqZiia`6`@m0lS+D!g|e=oRv0sT9k7#p!xNj=X_T$*7cAG2SdoBKj<dkQ{bTd
zQ)L?zWC?oU6BL>oCKpon`U4SO@wq;pPko+YJE^IKMfkU&L%>X%vB`SS?~s^QhMw_p
zW_f|l7blxRo&(0Kx@00W#6x_%tt}i`<9u1}sv?Qh7sIZt%%Pn7C>>;^8HU7KB~C@e
z*Eh{8&pGwfkdks1oO*mbs(ZN6!k{Z%t_jh6W|ecmkc%jwn@Jw1q_2Fd`a8KWh$%*g
zz5VvdxPbUR>2}4003ww*Qsvby8kdqGBRsZ=bRVsI7*c+RW9TG`(7bEwCO7ra;N9~9
z+YhrlF<Dh=dvscazSz;Frt~r}S#^qZYGFCjFp`zE;;Ber=vpf<%GChqKRsF@u|d~y
z{?69m0QZwd8W<Y30^Np0OJ0WY39juWt=n_q`B_o#>cw4oa|7YU7<Wc<oSgG?)$-Kx
zbx+NU@xJ7vPI&1xYEXpc4eaN;wA-WW68E`>9hzdx57g5bMyMN|V=uPbr9Kw0oApgf
zNofPdw$4?qyJvr!i_7WAq^L#L(7ABuAAa|r@$_d5pc~Af{?)ZSk5d;$1_qOK1Pg|O
zLDNYxr}G|PmYFiaVp`2v-RngQ)r%`rt}c|-tLxPR!tKguax^wk*W79=Ozj$D^4Fed
z5iTkus&VO)7+QzETE;s|TqKlH&iFQb5}0do^H42E2l<AIO0ZHlie4Y<|Cf9JU)X*b
zI8I6tv$MB11ZDt-Bmgr}I7V~$nLf~WM8^0>w);LN=KuWC1*43X09RuxHQ+e8sFj1|
z9qn5h_rbXdelL8)mbMtPbd&Fg<B^Sbj6w#ft=^0}XQ~~-3v_9W?UA7$V){NS-5jLc
z7H>9a<rMzb#cpsM&7psXJYU8q0~krw_VMut8rqjr)eHhmzp;~-MIn@U{xNzvz&H;X
zEatGyPgPY_8kXdD?c!t-5NU4`%06lw=M#f8aaP$r+92vUt+9R1KBVs-I+vgG>q#cg
zSjBi$5f`}EV0KUi*(#En_+(Hrc2C{zycU5fsy(sgcUXLsdYnV}J6R23oHsWFB~v;|
z;V>PRfzb~VV$-RvWZjmQ*Iv>HmbdgjH2+|b<uRxj^C<mn#g~NraPzaGUN02-&Vvf;
zM6ZJ?1gBpv;DmeNy0qicJBj8Do0bq#>l%$loZqR*SrkTw->#<yXVb~RG{u4vdOhi<
zTO^@5JjF^BvEJyF;*9ljD3NuiCpfo)JeNPFn0wQTOl2SeG#})D7*o2zY5I{R@@V<K
z=||S!lrlRM74JYo>io#>K>p5KIE4M7SRm@oH#OlPHfmk8<)R7ZOq%LyMuur5W~DtT
zT8Ml`s1?3bFkBhoSA?z(RE^xLzzrsZ_IeP`EV*=0z2yiI7RoPFi!z~SmR5hel9ZgQ
zu5C_x-J+LKT7#C-ie%!3ylg7V|1IZ>J@SJgkHW-aTL*dU-K6R6`b)JG3EHvivD&1u
z4vzUe7P%7}X)|K28Gib!fRX$pS{s=)y<6&ORwhnG+B1P|)mQNglwnXcv?nsJrvdsl
z^Q-ZgaV)=6Qb#QJkk%Z@cd;*`y!KKhB+2O*AG~S}ephce;%m$4Hh|#{PS<4le5}5M
z{!(!TiN>)Iddg6nlP~<T)q_~8w-Rye%69J9&<C5bwo_l{y|~?Mav*U!lO+73a4)eM
z12=t{cBVzQ`)j5Tp4Fkb0tQ|D6{?d#L#St};`?I91_~~x*p8<L{L6~J*uzFP+}6>%
z3G7orwqYLtL+>i*30(lSqdjH1`-TY32S(B;5FO-R#P+zqSpAWFVnK=s-gV_Nd7aj5
z8uwi-grQ#6VK%igJWg|7LLxl6I_fFOcYqC60?}PsXu5=nHZMwgs;=%in`L161p|aG
z(f=aX5%bGp7I~4^u(l?ei!zu(UQv}n)o$Lq$TfH0RT)=>fYT=6i_9-tw3Alz%6oDF
ztQ=5q*S%U^o~Rj1+Ha=Fv8TYR3u{>GzAlkLp?S`WAA#)`apVKhCkh$V562sikQSa2
zRIeXh7Olw}w|_{4xY}m<CF$qG-RW&gN~B(MQ%9Doo--~9vmu6a@9Kb*Yru#X&n7u^
z_TsR=3lyHHjgcq)DLFB3(tfqZv$e=aS}+2qe7QbQRr%$%6?fq>cjylx0RZmCL@>bi
zx%25#mYy0Gjo{2<6)^M?R0q=+c3C+t|7TC~&Id2@o|C<IA4_I@2NneTf>P&tG;ve~
z))!y<uKipoFkbH^%jj$Xtf4LJb(7DDJqi7kg0NGAT|n16>Y>(iBAcIc5RtXSBen%f
zW^bQLYKtyRX))%p-g}lg-4QzN4C$*|`%(=0@uO<0L9n1mN!bt3!_X%1*JHzO#dxW6
ztq;N)z$IJ=0>r_#P@maPg`mzkeioy|%Uur4OhL?U)W=Khv-%ay1AD-TLFc!p(X#u4
z;Yl*}^z<>Q@zJ8wi!+94sn_@rwC0ys3HAgCa6<hMHR~7YAO7%ji^NDeuu^c0;;K-j
zVI?hjdV-Tm-rWrlAod3EB~Sc&KP#c&+SuGH7Ea{i6}CPWksSrqJB^#C4p#xA!F9gn
z%g*yI!DGq<`duZxydFSKZ9)o`2VPh<hUTblWfnP-UY4)f5+E@Bifs8ZakcBs56!XR
z1TBq<_7OQWfg_Vgb9`ZPmkYBe&0h*Az7Hcz&o<%1`|;SC8X!MGCT&09HNU}&RYbCB
zdly&%k+nE8DD2?i$$OHYk`p9k$TknHJj_}j7X@v3hK7_?(l_f)oe@FMi)?CvKd0QW
z+khf=W%&ht%|mgB5hs$s{ccyELhmUygLH>GP4&JwH!E5EJn!+<xX1<mnx$`u-c#F3
zN=mI<%aRG?0Tz*WKdYu8iTBD&@CWD6nJU|epGy%U8?k|ChiUV@HXM}pKM@wc=I_l!
zU?UnpXCDJ~9Zf6>2>WF;O^+Zl0PD)bZQ$dB3}1Vy`IuBGWsqJa(}9mh`c@4MX22a9
zb)`R{(uGxLIxvT8BPYWsWCP*ik<{?a2XL8#*V=dchPjKLrT<C|Ay$}sWJ)cYulePV
zGn7V)KGi6;F6-c2FT6EKubd^W%o9KXQ}_ijHvDSdy_af*raKl7;R-;=@hR;A4KV?I
zb*UtaOkap-rGx+68#r*xI!Zejs;E9=iSFjUsT^3$sRoQ%C0wat3ZTp+TDbPfDv>&}
z-`ntqY9kLwOe}EPE`!0-Op%mPk7Pfk2S(JA+&k0x&@~#mZh>LzqxkE`pOKoFU2D@g
z{xBVQKP~%MQlJ>N^f_`@H9bX2Xt@H-6py&ar~0#l+E@P~m-obxd$S<Rz?s0i<?}5i
zy1`Gt?!=7gW8%TqiKrjOQ8549{D%A*4Sw2pIC4)LaXm%zZkgK*<`Q9nh6s(RePRFm
z$yb*!`#z#_fseY&?w!=VjU6t$0`-Ov*a)vfh}R+Gm*jp<RPTWzWqojyM6eRdrCQ2V
z5)ew|%b^yH3E<oYJ0LUgI+*6TaL(?BP(5*HBL-XEy=OwqusADl_QeCcPD%wrW8HCR
zcpX%JANo^7{ABl(wV+tI&<U8@kT8w@Za-RTX!?H57TyKj%fTfjY}`L#Cs7f3@|u72
zt@hW+=FkONt~EAv+pNa6v3Q2pGqDunXqu^PR+S%yc_5ugdn45GF{4Ye0!3^!IvXna
zen@@tBBTK<>9Aj_^j(NGQJ~CsITg9XTs*$CgMAbSv21J%<P@D(A+0u1rDESd26>0^
zoDMyL=&+Yn&Qz^sb7cy%8w55$0RJJ=%G=PbdE4HfCUZtO;#MND9IHNY4Nqe#d_ous
zAQLGsDE`~qZS9Rsuzz3z91Enujs9r4brpi$a++uPL<GzFol6d;LR}U)9C$KTxo8~K
z59Gaol*8oA^G`0TB}Vw3q#Fo)Swjsj*%CQ^5Qgc!yk8#2o1{!-!UGJVaX{Dn8pC)q
zJW_hXRvsAPtge$8@n)b|Fe0NV41O=Ce>CoBK5>B8mA{`4p+o-5n?$ZNq*(={#HA-#
zax!-F3<tBvBQhEz;3KCMA98sZ3IiVF7fyd_<-YvmI}m3~Df63#8d`ogYeHr7Xm`l~
z0cm~{P{xdFW9a1tOK6sDCO>cP4<P~fAtd6ws53Gn=!Ot%tKFqMnNH++O^lF-*bj>2
zW>742(KdkP@FIVx7RK~L2xZZ%V*rd9;ToGHDwO>s-fUkk<60iP$$QkrpD8XAg0?Zs
z`S}LmFhsXKly}c${OcQb<^cZZED8O0`ORmNTfO`6Je?XsQ|}Yy6!A4mnNgt9e=#Nq
z0T~EzL<(O~>UE*((zES*B_?+Q7FBC70@b=YX$OII;s3g>2Q_ab*s{&Hxam$FjK;gP
zD7Kmj;Hri$S&(-BkL~%_1Xd_;kmo+7)j3ry5-R9^5;Y4IS_7`7V4-ZWnS_b?-sAZd
z1+b8~?gV=Ldd^aj2D1XQY5F`?n9SXm2st;K)-vDgepfqqD6Y~VucVk$?(s6q=xq&7
z#R))O*%!KD)BBS>oZl7s!bR#w6FtmJ;;+YVM6QPD?0S|%)wZq0GvFf=gz2$ZcTV_!
zL6jgbLxr8?0SMib><<`?xE{(fuT);kV?2XQhuswA`Ysk^(skbk@NuBDL@J#HTcjVa
zgITa+?H+&R^izo01>e%*UpdaSs1B+LEMh#aE2#>q?Uo$U&)n>5dS>e53Dc7tA&KTL
zz(`KXrPX?B`g1}SJoL&czcQ=nWGzTnGGYhIiH0wrn{^7fX*Z3B<_Z6n&o3ha-~!mI
zt=YlP+gz*_Z-wqW$y)EOgyq~a26bj;As1L`bCg_COM>$0`YC^G338Tj<gGSqGjw^J
zj51i<p#9QYVDHE;o;x*2d4362RamYFXl^(EyMC}UfQ+Q-09+JUD8iF8ZN>j)Qsr<L
z^}r_Z%Pyl^)My*KU-Xb&0u;ed`?cv(d`W$%1&U(!*n5CRZcGCS#-BGIw;ecin#N1L
z-2Ppf7eL;$Iw>^c1YiVZL|NH7p7Pu2(~7e-Us{St-@+jrw}R(^s(;hK%UX~dxb5xb
zTjPq}(R{RZTh6WS6{cS_8p!3fYFq}LuipB*UfsBgd~}aFdzJr_qW6o5)Z#krfiw{c
zz{U?B0!((JqMp7u!01P6$`7iO0_W|9sqdEhq`!Ee9V%G8k<?<h7BT?!K>H@2=8WS%
z42&8!CD~4)-?io@3;IrwuIAM=d1LBv>Xk}CHgXJ-vJiv0(^MCs8?W<o=`ih8FFpFT
z!Ni+3XX(+q@WH!f^44lWQev^@8+oo+L(}RtxaHG<C$C+=UuK-YkPMT-XMQ>nB3Yg7
zulE@<{a(X7SYpz(WeUvK+E+Fa;u(>_P<B(iS4j=W(mhe?lvjR06#%5)h`HhZrrrLn
z$U@Dwo9hUbym=_HX}++FkjiLB-u9a0Wj9BBQ|9kb9SjGRCiCQNo5UQyW;QPl5BKQT
zY>myv00m?(2|z3bvt^3%-!o0)X-_<$_`%O;g1-fVqwy-srFYD$Uwm5MRmxi?+(3vk
zb6J<Q2rck%$ol?`A|Q!Anwy0T?^D_*bmcA6QkFcx6CPiktN~u+be^F~0|2%W@rz$c
z&J7df(Y&&=W%uK5(@e44=LmL^GM`54^d;fp$AUx3#`%7K$Dga=a3G>HN4QSowVRPb
z9k3MNA>7GMCJ3Q+?vcQyBUWm%!z!J(ekvmN&O5kjYO{yq@M8{gbxm4`c2vg`tf!6{
z2Z}XZEH3dzw-bL5cx(uJFlY#7E3TMMkIu<BrkSY~yfjMMHE0dWS^zr(0Sd1P-Y?*+
zQPTi6ckFT2m+r~;F1+7IHS#shfajIhIZRJYcX&LkaqybL*a*>#LfZWwydR$EiNTrg
zpPcw<(siS{C30ZO1**262ABGRY1}StelxiY`OsL7_!n?KQh`8IA8tWc1n6_mSeHzJ
z`<U~VRgl5Q&f?CRVM;^1hr4Dbyx#@w<%N&g;qaoDt5>btY<$xfpUwDD?CN=->XMq#
zq=W3}m=+$HN@4ad(W4h!829?3H$gvP`x9oUc+#eS7QZr3O+dRKTX|tPKuGD~_}BHf
zQY+u_^5Qx6^`)Aioz*)CZx%kLYmN!ul+PTQF?iF_rOs`EhXC<67qBRgB$9P2IJ9}U
zaQ*0Tz^tSh@GkVAvvptEmFGmksi@&+z5p8h>L-sR6VrHZ#Dw<PQ3*5LUYW_8)1A+<
zFF$ZwV?>?Po*))P*)KGt)&ArNa8DfW6{Q#1t8K)n+YOI1f?s6Hw`7S!!4b?y+BKmz
zUl<n*|94qz$VeRtt)UX?)i<!6{xqTWgYcyD@d(Pa>d(Op&9YvBsxHvFEtQ39jG4Nz
z1gTiRpxY_+Mp;*w*6{eU(6f=Fc!Ok1Ta~;>0>D?3AlPLk?vFoV{lWZvU6GE*fs&Sr
zO5>ZCT4e@TCBt73W4}mn&{8yX&ktW2Sp3z$94YFYR?R5%k4y`R!abN{OjiI*bEFNv
z0nX*L+iB9E?eaGa|GUvuk&d`$$k<6$N@iyihK3yVR|%0d`x7JI4Bq5MGuRZpGQIyd
z`n*$EGkIdi_w?zSP=;Y<)SCh-z=ulTK<*TD>ZPC@t{Yvn)yesJ{Zr2Z==ciLtj^<z
zg_0q$(a`Nn^0es_1QKroRp0l&P@RsYGw{4f9#d|6KKirvC6Nr2%unH5FQVc}xt2hk
zOk`21h`%5+KIZ>nJMtbWwm-(%yv0;)ofPWMD-ATa?oaBLXpPafLNS+ldWiN`Q(*0^
zl{ZWFxSLG#(TnzCJCERPTk+?UrmR1((DxFu?TF5qiwT|ciDqOAhr`{LL6B4;I8ZfY
z<t!f<O-~U^Tm8OEt?{R>TmaFt^o$UNlNBvUwD3JHTk<0=LWgGf;L0CiP(rFOpMRx~
zyOuGe)Y%MR56v&6Y6l4qYXWy$w?`y$q1l_SwF~CWh{&&J2;IBw<I9FjESbjR;xW`x
zvveyA8Ttt-2U>|~0O8{6qu6@0jorRLvtpdZoLN;pa<RgzVaYcl{wT6+&HnS6kk<TD
z!=D>*0U1Vw{jz>*I`C;)KU=Nf-0fBw_gckfvpcwezV#*<!%$I0(y3{`4xH*y0qL%}
z?M`<+O|vw!rRob6r?DT*2Z9nJ1qjqJJ!P`fL2C>>GuQRx7knYO$B4`cWb<@3j*qTw
zLhA{pbi<x<^_3Rq4@JPI9U3@QDDcj+x1Z+&si1d!%eQ0f$$tIzVo}YJ`=NsBll94|
zyvfi<yTt(epe=x_KD8CMQVSRmM|4S>fLMPHGfX_knB)&;!;E-r+dQVwTk`(At1V<k
zzQ(Q*>`Z|e5EG>FuU78A^Ml`9^u)FhctjvL=51&wVY^g$R`UG7(ooN_!R*?Z7PDzi
zsqD~v<sr!)Q}(Z@udXAmm9`4q@F*(SN-A8c58b^{dG5-xQqMbtarQCO>MfQg7G7(-
zn^@}chFqV)_qRdN7&1kJA3MY&DTmi9g=u`KtOCm~_a~kaV-KFFt-BU(V*uRw+Aka6
z0?kp$&qVKZ?dV9pE4VDgP#VO$yH`@N{sIoH@$=cE2#ne6uD9hXRKBY7t=K<p<N{I)
zmlB#C0c0G;*NZY-a_>_GTjEER@#aKsfUuMY&4M@S7aU_t>XYnJergk>M*}%S;;5IW
zTk1auVB@9G5cSzCW0tR&dAGQ{yUxE<bh-0y2pEVZ{+bG1OoodXqB5q|17Jy#b(vJ*
zmgxfc_g$PrX*@N6RdVuj4J=CyYosf_pk#HrMj^SS(KYvzNbfvM{8YuqDPOjdZq?sE
zg*(N#gulAjnmfXa#9-dvd9m9m!l$GZ0Viuo{<+YrNpQyp`4t6RD#ypJT@>F;Y#=jU
zT{%p&#!h(M#000U_I;Z{sY@2|4_=cPglXpRX@v|iD~8X62UyB>?T(O;X5TH=O(1Qc
zjo04hFxi{Q*Z6n!U5td=n@hw`#Z!0I2D^H;A0b**PYcRJ3zLXiBqp-@Us%{_0W_ke
zY32H_I0FN*P*_*!OydOz16k7$gCxPFEPa+V49;8QA4Hm57I>^X8E>O)p8vvvdsvV|
zJ$@x0T5lp$za~gEF%4fOnBa%N92tV2fpa^OU(L~XL0QwyL&y6lj7fg+7uXI=I{X6_
zc~JRJ4hCiEszZuL?6cy4n+;X`iyGo~#z#IF4~eV3@|5ShBkz&ENQ|f`TlpB>9SS5=
z&%;^LrU3RC8V8CzcJ}dm92CxeMZ)fk(`N9y+QZi|WX5xy_Bj}btGIx#n9~TZO#w_N
zt^ls*)X*k#>f>8Dl@=zd%uN5QGt<Pj;8$V*D$6Ha)$(NT4<byH5p@Ln9vQSgaIw!6
zl|7nW{<MD&OM4<}=Icd6HRiz&E!M)1j^tNd{a|GvnOAG%X>3c`&&^%hm^)vK{*s<b
zEC&*ejiGC69oA~D$^08Qf?_4*&AQcSoU3b-R#jtAW+Mj|ot7D=cK=T|X{z7L&CA>}
zSJ`}h0VG7Cy4kp5*wzqu&Vt30sTXtR%ElvnbfGe-LTqoTeuvaLRy09NxN|SH=6R{2
z!F&OZLh1)n1XYW5xv#T5UHj@1aq_z~Q71HPQh92yF2>)eO;!bUb961Bc)vZca>CPE
zrP&CWCG86weg&^NCu`xN5Ud9mTU|10%aOZDBsmUp!RL|iFE|>BNhyy5mllE)Q{LpK
zKNGzG)FK1v;+-a1=Y09QXkeNdY3Exydt=#9MI+hB*03gt!ZS<gklY>d?RLZLrXj%1
zFT#-CFC+4JhWp<&g({p9tz61mAais_&;`zVA~!t!uR6C?1?GJgYwbVh?M~pI%$f#H
zSKOH3<6rx4M$L8#jh5&y24Ck}*-_&}%+tgO+P{B8&U2qBeTBMv4{yo%L;Ym8xFouB
zj@l*<<l~=CqX^S0^?!2vcIgwmjIB3fi1kMGbqu0H>PQKfp#+1`P%2-H`7!R8SQ7t0
z)uPMU*as>)9gBpVR;w*?Y&v}}IP8w<$SseR2Dw{=wI^9)VD@9nNBUnsL%TxL!sG>>
zO_ZLOtO~03P^C(i>32on)ygWfu$?WFUGAtBiuwxkHs3+aytkhh{d`J=F90=+ps$jz
zT+ZV%Y{k4ny({c;;LNzSC$|1YDtllbRixu$urf3u4jb_YvhRxlaNQ@B6<^oJO(gyC
za7$%5Z`~VutG^YGK`PPht`Nz3Aiws;@soQ59U91LX4XPMXCx5x#(L$7WqX()I-1=o
z+--hu&aUbGp6X}w82b#Fcn{n3XcZt@i;IJY2wAwfXVX{YWGI7m+{!IH8TMxbyUK~>
zblR6w4VT(3Q6S<>wck2Ni-|L9c&lKXKmiF%xekv-(z}jxh{LpEO7!>M_<@OT^{o$`
z?cI-@C41snf`1d}33LU~#^x**E-v_rfOSp?Tcu!ql^=3c<S~it&FXyX$`Y%R_(cNE
zohZ5ZQ9#(=O3!Y4Vp6(7-9A^<tx4aXx~Ki>^)_jD1T->^^pH<foIvqNOlP{J*D@<g
z`}1C0xiy{;Ts-DX&ggo7NXDlk!I&;?@uqO5Q=%f+oCTQCu8TasEFXFdOq~S6fREEW
zV|lb0=gOLmc~u{`ld9J~>0=^&YZPz0-^gq8d;Ca^iX4T`&<99I=mW2k`l)@sm>ImV
zwEd|nC;L=XPRE4ivo@u}Bf(*lBIapL&-0@Gqgv8$xqTiDdz$NkuVGb8<mpqCt9!O*
zCD(h@;Is5ykuhp;yE4AS?n5EKN!FZ$8o*~&KCP69=x2I!WY&uX#F3@tbiH*d=nAQ(
zfF%J&?`ltC6G6}^+at9pn(n3Tz(ig&c6;Sf#mw%Rwa8ZdZCftA7+3YDM>k_Q*0gz`
zLzKs))_vEPsRoyDF3}D10}j=VO(*5n$*%UKoo4gm<9fqLxr@B!O&Br4#-F0u!q@DU
zPfYE)#j}H-oF9k2sPuGLMLiQuq{3L0F{OiPu#X50ZWSOnKMpSYyh}0a_bHj-RL-xh
zT$vW#Ix}Yr4iCpbOHXiI)F4<?K{BEEcSbWu`=$?gDfr&e;!B7v&z!p0;i0XOTTSO-
ztsknO7x_Yt9%UQ#*WQmwMOpg6PTb8+1wlm@Y<*a2%`2|#+(jR>utdFXZPJN4c`wz;
zfFg?twTblzavI!f)Vp;M!)dWdP`aS6(jxD%`JTJj;a2@f^9%q3pE1oSWXEkE#(KZo
zlgc+x!<QEO{4J?@`wIcK%DE(nxH{Fg`A+$ez<P9c%&g+GN!_rG*IwDc>6@GTap<Sb
zN<Uaf0uwRf>fp0FRxF<F!68j&z4*5sJqs=>=Ht4YyRmv&!ke{*TkXP`#fSyqjV_Q!
zV<UIE4Gg6f&4J)W+I@1<{}$zIP1oDOBj8*+D(g^kXmvJgb*`mMq_=l$(}s)~dX%Q(
z&KGm!bY5(9nk4>Qc!6fr;TNYBN3sI<lDFySXPpi<*_Pu|Mfg{+cT#Jfp``2^Hi$j#
zq$y*_#RDiO_j2knMswRjuaLI9G)^GG;g?Ch&#%*{@E#8tM)uL#EW$WHP(pv8{^5$6
zWOwEHY<CSIk@}a7`p&%7v-8y91J`4IXo2@y)pJ}v*RJd3uT?MzHgbWj53<%G;;AgQ
zZGO2BN7U+IsJI4u%24exEo*A)rdED?#>U`b8Tq)u>(*7*`7|!Wg{qmoF#zF_R@ei)
z#bUQ!aX-A)kf#;A^Tyg~hF~?c1EdyI*p>{ff<90<v*3!pDC)WmogFW202ko^D5?h7
zQa6Il`Savh$qdN7>#Iy$j>k5#WygE30izuMdW%>9P^ueov+-7q2k^Q(-jtm()Zg4g
z75ssJ6PSN-yn!ly>(h%*=Zyg07sjUX;16Jlt*ps&g00<MA(N_o<a(EA;VxibkWCD&
zsRHd=C!Ojzd}k9=cDsk1&ePGXY)%I`w?j^w0?FTjb&lA=;>mH?<zOo^vFv4;^>R@G
zD|2|n%|W3Yu{^5=ugP)T^P1T|d`w*w%z-hWWL(Q!thEb=Pr9yx`?iHqT}xQf?JJ*S
zVU}$pMRS4tdMrIkm2_~9Y==6t8NG{0Arh0mE|u;@-yQX}H*>5*{GB;R9E2#Bz~^uk
zkcRT<<C(y<u8F>&>x77VBC2ALT0kYod813}*Lo*-i0Q96jN8_#*^k8ze<F7|TTheC
zl2bMM(CW5(pm>uf-{E-Qbla%dIKc{b;R<kp?>o4n`J?!LpW8hAoD+(7B|J8qLL8H#
zw`+1J9zeL(vMCS-{KW<)<Gs_JIrHO4;IvDE;o>yj{u&M1#?=8~$vzz@ni_XwK=-ri
z2S3HL!!4)Nuz4%nFeeJNd?#a#xeeV1hD`&umMhEvgbsr``9Ci6p)Oad!&b{*)4omS
zaC;lwbsFwLCb9ZPmHwcPDAKx}z<F{gqu<8@78KFicqL`*NyQy6`132XU^XD3XlFPo
zO3#VFA6|V(*Wc5=vR{%lE<<Hd^}?e&kE_9;i?g4SUs_kP&|=J9X|ktFGhkgHN86({
zEpMmpWypk4cl1cn@my3qoiXYzG%w!0KqlUOaM$8)-_mlWOT2#<03Or2z8}1U4uP4=
zB5S7!&Z>JWQH=D89h9F{w5#rM_I(Lg3meO7bxY)-wz!)_70NPZ&yV`l>&8&MH(}gr
zx}7Q>sL#n4)AwHc&aIxkm{mO=`?37s(Y4b9tjJ}b+0BqaW35rvh{0=HlL*vpqw9r-
zeUnMR!^mYKKU$UtwOz4ZH8b}qCEK60mz}NLJM4J9^kyfZTkB>T@A=_2*HXxeNqW!A
z$)bIGM1_V-DonA%ww-BZR;n|851pLaJ|IcYFPrJIL(BJxT+T&dwfE+{U^2;CO!oNh
z8n_^?IZNT&y(c>fUWa*~J3_S7)^VgB<|Q%Nq(@&(zm8Exud_szdu-Setg<?>!qZ>7
zSD{eq(0lbS!<VoD1V4?p4V`=vcir07M{q9DwA`<Kxk7s=_L{nkfXY*4Xnu;kZ$@_v
zALCY=C*Zx!k;-7o5+jYk@L}h=EBztDN~c16XR7+c;=1@4cR&;fRj8rFmuq7mM5@KP
zZJQN3m4J3c<SYRM4MDS4FM0UGjJhp6J&K+r<j06Wa$h5kwi%BsQa%>Y4P_17_VN<1
zp`musN;r&Fn-(yP;vSl0F29wzKal@f9@N@HC{4q)i>X$&b*)qLS;Sg&vV9lpT@<s}
z)xXFl5`*m7TxMkmo??o35Tg^;?c+Sz1yuHgqhnH7u;zk0kM_OpSdaKP#5|?*?B;N?
zmN-XjZ(C~P;)v;TXAombe^~xgo4u!ptIb)9?DZk7M27q(F)|XK&UZEME;*=GGN#n`
z3%cBLm9t#n5L-S!pI>p1+_rvuhqq$?sq-Rl_OihEW6x;Ay*D^^`{LOq$9WUZSGg#@
zRy5kr#c>(6ub)@(^^JCxPB@(8DRy@C;*TOGJ=8R$)Lez_g*z%sHrwpyR{M?HA5?2X
zS&lG6OJ#GPb{@y=PQFp6@1Mj>mGN_U&9%V3<Y-+z7h2Tikdj3|*StS96v@*OBfC~~
zlQnc-+umdLQP<JF=|sS~Aicsl6~54z6PwoHlt#Z_&sk;Rn9X^VRgauL^|z8gIFNz5
z-MP3?xA&CM@5nQuQ2Y7Un{zeGd+}kF_k^q^?;|?~vw{5R>ofUdm*eGPGx53ng6+-d
zkpBnaG-ZI(IL0GJJZzTSBt^&!baXiJX(^eqHMzOd#|2v08#TW!<pSyq2ngA2oBfa2
zlkS-%MmS2uX52Jb&>wtsyN4RtQQ(-jbGASWDIQrLi`1a-gEcu{j`%$04EU7>V&I@}
zN^v^yAPA-oR!l%}KkzM0SEMiQrqLTpH@lHxMah8e@K*t0sE|B!#@0?@9*xF*7G4wj
zjIK*(S#mXdw{UjcJd$sLh2ov?#;GLBx8%aqpX)kHFT?^tID8BHIxw#K<o&0jEAc{&
zsIHx?Am*S^oOE^9Yh$C?tGo&C@s+aO_eVnp1I4b49lK~RbffMdCOn*#=$W@~7vz;q
z9#%6=&_fX8We;U8XU9hZq%<UZ%3T)tf3CK~+OW%0ZaJr0so9|+)Z+_$qOgptlj(rR
zs2qy7>H=#rAuwS#HJWx+@wJMXp=1EjJ3sSvp4{_aDlp7@5u?XxxI0k9Hg^2=t?Lv{
zd%={!JudR<jv$0oZPs$<F{<&6Kz0wlTvvknI)nPcP2e~Y$%<KbbRHdrn3t?Fs<J18
z%9nR*(W|AmkMCyO?$JaBH-Tfr_ECCyR29yUslSTSLg8K|GYztI=zAfZ#p(ALZ%yNc
z(K-X3JtRT@5Nv!7PDZ^(skzHGnE(Lez^YR<_Us8)Cpdkh0Sr__L~c0dak21MK3niH
zfP&~TGKQ>Iij6JP9zOs4HK@c}8xJE?`rGqQ>ChYU<C_3yipq9h_iO1s>crAN^G5Mm
zR*c*2I$Mr)<P+xU7TV@`!F@n<=x4HAopYwM&q?yW&jKJdSIJF!MB|oeAefXLj=XLo
zY)jR`g}+nUr((Fw5Hhu5Dy*MyWMdl<_atjnT>!<gy7tY#Oyfic${DqZD5g|%8OE#K
z-S&OEs_4`@{J6#_R)8xxacM)3{~;<nCP63@6|j0$#(!Scf3*s|cF9g6e>G-nu={Cp
zOt_e6<kYwwJ7-~{nyHI1#e;l{6lTi17QSk4!lQ=PB2mXd?VELNEd_3Lu7k~!)epOd
z8Hr>$P|rxaP)t~P<-(%xTH|+WSJ+-VTz*aY@LWG7nte2)1A8H7@AX|&tI%Psq2(<)
z{lRipp(h=?BXiX2<pr6UMg{rK=PUfz-nC*FiA6I5rx~4S2N44*{hhS2N!nvPGAYfS
z>)Ly_X*I=>S<aTmNs1w96|)tGTR4_JYi22|+zY+kSGQ(-5`qj;)HBist;;v3TR3FK
zJdYOrEt{dXZXXxh_dZwC&p+hjM_C4*v0jf*7EgI>0duCmGOycor&GeHjr@vn!J4Uu
z%BpEMYS+k2yq}{XJkg01NVCDuaiSAv0|c9C=$VoWpWNxRLs@tpJUd6BsOc-<N0(sS
z&>?G4P(pq-j|P>}!t(kU=#<m%TO@ZIJ}xreJMovIaSc`+E`5rQ?znm{S6XE>fA#d4
zC?p1R$dtaBx-nkPKk^CP?X?$$mW6nrcaR=w<QuI0mOPT`fsz^M9-&N!u3nJnx(skn
z>o$=8@B@NRk@2soCDcRJ55sH`Um5!iLXDOLEo%!}xR|(H0~k}nCc?})X_CAt83Be=
zTJ!dJdoGxoyw$HV6W4v?S*1bBoWq$_(Vh={3&`fWyz9XwkKOXPCPz0Gy~1<j?7+~t
z?NKwC<lbEXHUUBz$0#Fi{t3--q|Z-+DoU*U@aFK*e#?0!Ay6cKCAv#^Z2uN<zuHnt
zy4+3^Z@W`2mt{oca3PRHj44=kaTVTnDbuH@-~FuC?jU7Hx?MFTR4UR}bsQpbmo~pM
zE}b5n8>v+SH@bIg&#FU!GG=-M<slT(4~BjW78W=yayxG473GhOk>Z+rKS5|d`tnL6
z+QO*lbdyTs4(ek^9-~p2Xg}l1$H3^S{dn^`iVHDpb5oAJcht&tr~FU?=k9Zzm0PRn
zW159(<y#FhFLhH^xeTWddi8`%-r|p@5XT*o!#?w2CXn<O3V$}AS3Pf*9-C!ZQyT1_
zuE-WX9ma2u?xnsnyp=yyHRSY>D)U5V)<w3d(8nXcC^H@tpy=A)D#Q$`oje>#q(2o#
z&0fnBEL=GMq6xGMUL^U5@1fCj_1H^}#O}R#mU3kpDr-STi@Dwxc0eKmVZ`u-eYWPZ
z6^HaWr{&*k#kXyCjf`h)XX7heYa)#rY+*fp9|foq_=-heiN3W`B%id;M=Yzps}-92
z9;*jE79w9>z;ouO3|d~`FGbmLSrTm%SY;ViQJr-?uqclQVjT&Yi_?L7$5P{8yGv#S
zrMn5ZYJ`-X7l+Mh*{TJG=#~lKHMeurhz(YS(1*o(YP&>vR*@M66M>p)lyKypuEnKi
zeIl@k7`>)EG$OuQ45njH71r9M)(sq<(4+tznLUoWboSwlDaDn7Yhxa#-h;gb)?K~T
zd#;*Tt9p$N?3^(lR_)jNx)O6=w?3Z}ID>V*DKzgWYv<07(CpapJbz|tPE#MQX<Qu}
zsJ8_B47(phH8%NmNv~7MFv@$h5%3dEmCigdad!>Drs;Mbd{fG4S9lx)w)&1nJlFS^
zqr$p4MYzIu3w9h`I}a0_4PCSOb@|4G%#xfA`sGwp!j%hBF?fI*FZQ?;+bDNKaL>Fi
zfKKUx-;H7-OkTkdxfF%<XU8<ugA<AamBi-Q4%#~1-u&5Ng>{Fo)Ylx|+9n;3vY^(#
z9m1T@11X;>;|B2ba>MM9-+D=XL(P0`i#U&YzNU;*Z|aZ%C+EcFuO!GDAPsvd0}ZV-
zgmjqD)zT*&9oMd79NmYk<eGKb*(7W~+C37~;kWe(dtrz{qz(jz?m(*agbeX!V5u9%
z1dyZ{qxRU(y++G~a5!esLWD$Q)2%E$Nq?d1XNgXApQk?=8^SR|q12J@WaW=Dnaj^v
zHOuNUV)IyvmAaz&B<W!MkhqaLPr!0}G2*}h>gvxGhI=SWA99hzANoC!p^qKqqI;M^
zSE1Lsl<TzQglgT|S;rT+Y46!DVqPW}!SC61z0~YbZ#W#EW2#4TP6>Qy6eZJnZ*X80
z?PX-mmF;=dJTFnioKK01il*ph?zT(f;FUwUf644+)^g%d6pF<Yqsx!Vr|iQAH3=xE
z^=7Da>7~Xy4mlQ%53lino9`MHA=p=zPr#N5^Ce`4B#xHlvMBDN%zVwX4^@^}qyX#g
z#+0GY*r9Gj&!{V>cMTuuf<vlmE0H`HataW^-F<%1ubM}~$LXuomcpNGedIy}c2R*P
zPJ+O3Pw+D!z0|uOUPA2@cfH%T`J_~FR*^s8B!hfyG_f;$*YjwBbhP`y*`l_c8NoAg
zh&0xzl@R6NMc`2RFk0?P9v%b6krEI#vQZ$$Gi{r9_iPc%Up{d0prcdN7632}9{KC}
zQ6=@-w#^)<LY;~EOCdM;45wB3?0c`03!OaNe@T9nv1Fc5Ds}5%H=V;+(y!`x022HZ
zG$!-@&4ZWm{zdooUJA34rw_Z_&Ec;BwGI<X`=m&h>`D{eD3kRLli(f837pj^KmO>Z
z+Mj{n8%O};0VJLxTZx+sG~-&O=2%j=21Zl6L;L6DqcA`BPs*(GTFJOZGOVA`=L?CB
z*#*jBmY7T`#iXM|QcdZZjhiwjZ;d(V0puk{KRUbuMZ%@2%f1+|KjzlMqgJ<Sw^_Q~
zaN<z>rav%qGEg;n4%nzN*ElqKm}+gpHHV#3P!BQoWxRW2w6-pdKf6@3<FqjKjX)=d
zXmZT0;Q?NAA3kG#(_?plgVeNMi8d8^FP5~DdLJz4mJ0N3Y<^3~5cu9Ez;jbmFi4eq
zd~e)>$J1VRd^5z54lR*2+rZ)Q@jm1okO6pa&1UN(kpZ~N89ZXes`c1y>Ps(V-dIGr
zfD^aH!7cUSFN(0Uu^;~R4)LUw^NW{|t~B;fRzsY7ecoM0#^b!0g>ov%P#m>HMH@vY
z`@w{cvbcO<E_AJv*avc6CDccegop!rG&`cZBXT;9qtSu&8yB@ZQ?sY$MKt*8+O-cZ
zwCl@Pkh|xni9q}?WiAg~MRm43kvUrSaub2+3a$aR_Xs027f6>kdAk~nwhc0!fi)_X
zxQY$TB3~G$cIJIM1wdk4w=sInwC~VRwixHUReO^)oG~`-qp*L>C$#>0HFsZbtBlCV
za3h9xm+3WFtWj?Mwo6d&XjN`e<8sB&$N-V~uu$4c(4MlgIAUPMN?+J<tbDdZ(O7KF
z!%uGC#G|4SgJhomI&Qn?=?NwyYvv}p4j8h(qfpauYh{0-{nk3=5`EzQ6L82`l-8}-
z;@dri@cB=d@(kwWcks9O*HG;|S7u2&gL6*aj5?8gvl%ZyrzgtOPB;1DOCH?e5Vr<W
zzBq^dR4!4`GR<9i;#9!`?_zQ)E?LDL=e&V)UWqQ5$-IP_w-Sw@*zs+v1ZpX%LPvef
z*Nu@G1Jo3V6IBJ!xoJY$`zp1`p{qD5i;!<MQ8ZZ>Y{mD{EVe$r+VP0!QALmaS+UY{
zY2E_Ec|q$<N^*c^78JcIL)4F60YckvMcPg#mk0houD&uX%I$kwa1@XRrH7Cb0g+N*
zXpjyCB&54L1|&y7LKwPRy1P@lySuwfn)l(H<2k?odtGz!fe+7qVy}Cxb+5JVy{VHQ
z%*X{Hp?(7jEd?-->CG)nD(TK`?}a1WmA2O?{qpL=h?HnMi8C?qD2wheR<`u)%O>+E
z|D1E<<^FM>6sWshH3vi_#u#LKidq(0LUfxQ(Hv?*2r=+_s0f@>e7!MYdFi@@dk{H-
z-)~i4nO7nMH=#vf{h<EI*q*9yJM*;Xz^RnB_I#&bLNeF+s!_Y;>s{m3mw~cx>(kE1
z0`=9NbjY<Mck{a=WPABJ*0TANaSmsvJnO%8d$X{4T#2tKJ%GO0r6TIWJ<iuiKXPWB
zqcf>+F8tF9uQY!@9mm>4f_<MQ>xuRz8wA+F>rEQSj7y&vM`jYleP-i<>3yo`QI&c<
z4}748Yr})f#M_~HM}J7~W4JS~gEvQ}|9k7j1<l#lGrvi8I0+8;$;CmvW~i2%jUl&O
z<?vkLWsGX2VR<r#vC?n+?#N!b?yu=^Ek=}o>s%kMBg`QNLe^zS4gV^wp-}P94&BC0
zktMCvx}PT=Op)z@cdJ_Trt5EpNAxxa!#mL!Ez`-ivD&%gW`doRd2M>qLtLen5yJRW
z#FFGcVTl<a;A-T}K-JFIJEBp#p1Dg7kC2KPBstceC-Nl(Rnl*oJ3sKm#`JvYu&&68
zY{66ILX+<KAmi@&rP%Ke6%apatG?s50@QAYQ@n<=Y1C;h?U+1aQ;iwIn5gNQmU$Ou
zSC%#@=gnO&d$q>2>)VBe$ZtBbv<N)n*B~q&NNUV<f7wg`*4sAD*EHiH8QVyc>G+HR
zW;vq_+Lo4mkyq__+4+_xago;b{X_Kt(VJJ<@j>0aY+@!QpBCTb8}fCc#@a<at8Ien
zG;`~7!`nDj43QG;n6Dzy#7~|f(lTK^^H~FiLql;BwBKZ%w9GLQX1jA=mIAXUH55e~
z*?84<ZJBm<Uo#BaO?J$$W81+{H3u4N(f7zeH%uc67PPfNw-sEhzD&LUmhdZIE>Kii
z#Huyx<e-vmER+87)G;~G)lCEY(34+G_eKf2(G{X|;3+^)73m_g0`IuB0+%r(fPiNB
zh#!qdbhm<UB^y7J=xYv5&vmS>5J3YRH=G6kiu?{60ejnZ7MsPM(Jxwom)eQs1l7BX
ztFEv(tV+n+n$FZfQ<_;*fpWvo;BOB`EwBM}u3e^N32fkuBL!)O29#-1m&$T$I3GK-
zvOp;*?Q1i3Z=tT_#|!6u*+czE#B6g{V}?mOe{US}qMK0pH4@R+79+O2@??W?IwIHo
zvAijJuNQ`y;xt`NEoW+Mwb#qeZ{yGA)HU8hC1wiNgVrg78sFHX_nF(De<K7hCOm7N
zA0Nx@I+0WSG!t2IHhi+tBe~-My{M41yY5p;z@M^c(0Whi;W<s%ClzEU%j|f*RSMbj
z)n|d$-`C*!@piN2P5_xtS(1=X=57@F(dhi1bCBO9vwoL1s{ZaKb_m?u-C3g%)j3nm
zZl61b!_5vj>&8YpL%k1}mI1nXa_{(d+x9qZr0(5UUq?oB%JF3gbn&U5<&h6AAjTNi
z>UZ5PjA;NT7G|5oeOZ%Ecz5#U))^SOfVE;jFn(5d?|wt$N0qEQe3yjQ;Hpt&_RTDm
zgYMT8=p~Z(GM|9ZMi=2^u1gYPOD$WPRqL-Glj)x{dXSi8^OtR+nz<S!F{m7Y!JuQ-
zYlX9`VCUPr6`Nb9lfBmusTcx~F94$tjqPr}5Q(0-q^RETO&~w!VrnVhb-^<%c@(3f
z`U;sU*MrdRE|hnqKahP>Ee~?$)R7c6Mw3`r>l&@fU0K366B$w?f!X-W$=@}$f6ppl
zm#yFRp+nmpIXXQ3V2l9@a6F@9iyPzngK$CGug|1o*fRD|4NK)kx1>7)h~6BiIEc(x
zpAIHOh7&-f;#eB?c<j-onIYOS;DYKK24>CgGi_?3vJ#1ujOmw6CS13zuh&VUjA_|x
zNjl%a?V4G3kl@d!#&kqPnPT7Po6pr+rNi@BDT#UqmgNo4ZE5o+@s1|vKT-O8;L;{!
zGECOyx|b$^>RA0Oo!{wxaCK_QAIL~}Gh=RbfQmz~$C+CKJXl7V$8ZhoN)cQvAupu5
z6Ys;79K($HHM7Y2uhD@E5sxY%FCYe(uuoo23k!r;)E%o4@|_F2=&%UiZx2`wq0nDB
z$a#85lH)+ldf@wB)QYKa@%v;MQ88MEC<6M&G{GST8O<(ZPP}29+U^40rT#!I;V}D=
zHIlVxo~AlqD_B3mo{L&LEC13!%Uv|6zC933w;sDI_cLK0(vzrv&_R#r_iB*nSy!w%
z=TJfsL#~S8v34M2)9Xd%`$V`hj`)N_Chv1=`!-kC0p{#c<7z;e6l(!7L#W5`_T&0Z
z44ZbD15xbj2@UH=mxG;3;q{Prgc-Y`&UI1_n<O<3*?AUNVF}%D4r+`-(4cnTSk7p|
z#u{f`1EY0k^e>81SVo!6J+m=Q3-xMyCw@m?79^w#@|jJyxeV>?k?UvRx-777h`R0G
z_U>ebv?S!JzllRr?#C=ox;)g^VbSIMv4w0GB*UXEcQ&mb1rILm*@-(BE#a8j(X2m_
zP_g-i=*)g>!eTIIH&$JuP|7>irZ>91vuwxyn?*6R$kC+G^>&0Ns1%=FQsuh-{m6&u
zgdGX+nK`5s5R|FMF&fTuyYJ<G>76(_HVr8g*|@J0s7PxV&V77B1G*Av3f1Z{wDTvL
zz-oAZP8xO0wG3~dSbqgn0RW6MQ(eXg`4tehTWeEd-SI+FrWBJ})qZ=nK9(-=uiTlf
z{OMXu9;Mtzm4hkqMxbd(IyC0$o8jYJWVAF7YUzCF4hnq&t$OBycjVYRuG|N5k>fe}
zzOSpiFXV;{3LIHm3%35=wR|=OnP=3sdxvev98=Qpb>p-7<Eg%i+o?VA$MM%C0sKEv
z*($%Y?RQ45%y0Ncer8f!#OqQ!Gy6$=ad|a8l7DgeTBc%e%a{{LUnZzOxEYeYW=Rip
zps8}*+G0_IeEo>UPtN<Ke{@&!{%jA^zSeqOa;=d!ZhyK_g={t|e5|t<nnA0UOm^y4
zw(J=a@KLBNbu1uz#Xh#l+8k^cZ>e#aPW*BNI4_n&ajeWe#kxSo`=aSLFHQc{let78
z?~rWpF?Z?!Z!S2+CMwF05dE!jGeHcGu3)c>QpWH5GP;#j+51U`jC%DKwsn=mm|dTH
z@I@WKIrn6>JCsp9J{EP#a1&xFe#3&182cSD4Zpg46}?@Z{*z(i+6N+!O^#h~WAUzc
zuV<}-m?`wz^0rt;CMPRxjatqbY63b}xvpl^>jC@^3pY3R+eH3)2Uk;;6W!K*G&r(*
z<%J8gthF4hn)V8o2R#o^tkxt|sYUu-Vca>xxjc^rOlae&mp?y!l6s5*x>6?JF%;F`
z@-OsFyXoS!`3SLY%(Ctfjlzab($u}g3If8};)7?_KAl?a;^*pHuNpS9=G~H<*ozBn
z7lR00bakc*eo(tRel6X#L$lew;@O3H+&>|bnoU_qP!P6Ht9(uMd{jmmv!>DR_@3JK
ziQDtZBdrDo^~(>p!~5d3mlUp#++OZ;2#IX+KLoa|nGcTkT5xvhzN%$*3LpX=*u+kw
z1lRU()B)ZP{c3FT$3I@D%QTL#Kc3v^k9|I6aNp6Zb<#^e^H7)&BZ7&zid^UM9=tjM
zhAuy+qkOj*Hy&J&Awo;i$bx+SA<OhrHZ~#TstPW1A9$j?E|5r=A_H_%-9M;{i*gCx
zo);3QH55~Ce@k?8ile8Gyd*a&`5Z%cX&^<sFg|6ZyRNMyngx7{F2XB;p*KD@{(Ehm
zxn1*m4bcEmgiiuFCk<<<rY>-m^2w4M&?L|7PZ~de;;3(557Z#b%=t#Nw{^^eVr+ia
zuBjxrSqrsmPwcO-qefoJ&4KLtWt3^?Cl3;5N8hQZ-e#PsVs!J3wM)rr<A-(iNbwo*
zV$G-|^i~+$vK$Zb<%JO)_#j>f(jI*&0QX20tufFzM;}?qAP_R`mCqO>BGm$f4XsA}
zxIle96A;c1vcgPm-ET&&?rS$?l;vK*4xOp#BLJkQ)IYd;E+*?Nc)!TI&Fy^&c9Uj3
z2Brx9>Mo((2YP~?Mb_^COmJtW#fA1Jv9|F_&E)!(*4z=kF?bGn0@K6EG9IlGYQ*;k
zfW9p@@<xJ7n|j336SLr~^)&i^#mqR+jkZP+Df^4!b?>A8J)r5=!yWLxGPCr{827E<
zb$ATy#(h-pF*@AP4yY)Y|FWw-jF<lj#Ht&52GggJ7F4u{1C1JA{DGQr`ITiW_kl04
zQu=h#+G}yyR9wZ00M7;_!s7VK<g``O>6PV|Ax&)#XG_bkV`AQac{7NC17!Wan6NK<
zn=A2Of6e45CKyil5~?eFab3<#6Olrq!;QC7=p99EyzEi6IT_pV+frL&F!;i4TgP5_
z5WaU6JlgxgwQtR^d~f;YSSRdUCh@IXIK#*mI&B~sBTZ@~T}EF<^l9$8XKIYwpcKrA
z3zzf9<)fP4A7R|tl#iuE=~#)HNWog?J6*r2Xmm$4*{&xNJum;tkQw?e^ea1fGrL}%
zUA4Q0<Y_S0xaXBPwD5AKC3INSF1-YbKbkRc{eGPcezur04UI<89227WxYL>$R<8sp
zB*v9<Vtdw;?@ZkKu>mB^Y{MwMqs|9AU1bwx)<5Up%L5%3HOZs}9GL|SjFtyt@ASm3
zU7-fu+g(ehc2~112X!e-)6-$LrA&xNR9YDnF51rU{yMC)`y#dCFNGneNHg-cZSpO~
zk~XNL8*W1F3{?vE(Tv3uCH7tm?{1x)L)<Qffr#w_sL^iDy8?fl;-AY}cT6(xXY<!U
zCxGm8759~YE4X?%OJzX4Ei`plN1c9#Z1?(fu>iOD8$T21+h=-!aiu1Lsu?swlnkFt
z=2&-7$A)+T-sT7({fFwW0jdxn2pf86Qui^B6T?)`RD#4mE=mz-9q1;q#%ypC+l@yh
zQ;K`kCn$k%RFai(4Wl=}=%2t?`7S8lg<~;%=d{OXw8Q1)&<N?YT&@^Xl^UHCkX*?r
zmN^eITT0;U*RE_9Lpf)IurSUi2LR=8f%i7mk5-lhHzsacPv`Zh@rBgJ8^f5N_k3?t
z-S_%6c(%y($vW(4V&Cc4$%u1sg<9wEL)>C}75a6!WMUNZGfJak<OVtAnyNLSk<tzY
zF(Uv+m}q2X77=<JE7p;nSTT3eo5=hL65*Y$utEJ!<d>Fnd)|JTKKbt>RcEB(@3s_+
zP?#qdV|Lfe=kP1CnDk#_Blf_QhFsj$Ee);BHB&V-5sk3;GvaWhKNT<|{R6*iwrfv*
zhK2=U;yZr{Di+l4j(D+h;K<F?a^uPj=%vi`Aj~o?L5|6un{6A;^klqxE1a2>L5@|3
zh(G&YR0Ly;VF*@%O}3sgc+IvS{ocEZQp1vXPcWGY;F7o|PG>e88_O$gU58*tsi!ex
zj)bfxUJ6D}^Gc4Vqf4jl>`5vpgOL#plJ|3KkEu3+0nDLa>(eOoJdCv11*|FsFt~E@
z{^{_GN+Ye~c-#JbY$2b{JxSRpzkuff)FR+NJ-Kg_5ecV0gu1ozfX&hnBF)0a+llpN
zTGAg+lgoVPw**Dz*J<Q6{g@`qHSfMy5|V#u-I2yj>1-=J4-nD+wCN7|AgaV_yPhol
zBoHlgkWjV=4j5G?*4>qTf#~_F$gXYdDsSb5>-tdSPuFOSyPG23gJ_n>DqXAtw9J2p
zt6w4-WOxC?d#UUUQ<V8O^=7J{vFbx&feG#FMesl%$zjEsB^Q+~(11ex_@H>eT!b4u
zw##g|8Lr=-o$*%z@z3p?Hu8&=9@Q796giMG{@{(#&kwn}`rXx^r1Zfu?I{o$buQQm
zufLi2{-mHp)o>Zkoq#h1;NjB$^s#F#KIt_qv3CyYIj<vFfiUb)XJgD#LFDP5Ht5G=
z!!(drExU)RQa`W2O?RPjy~9pi(o0*cwB2vPUJrilpU!&%M_5ric*nlGKfjt82=SDt
z73@>ZZj%Twg`PI##}^wSx-{>1(z}m*jVZkm1k;sF&Zk$iQ+?nvpCl}$k?@as|6q{+
zyyLf8h-ZEIB?hW8X<-rpVRu1kne)`?gni5vpS*$N+g2^V%CD=r!42BDW-RndW&G4W
zekR)r(9d|N0RFiMT0FmyWNuxuwWy4-^r<-G&L{DK+p_Tc9J;TR?8vRf{C63FK$9Yx
z>%4X1Tz90F@-v{VrB@})tExqD31D&lp70|efVD>^*A?-I!oypAA;NCds>6H~-tLwp
z(c@N;4S30viXA^Ad%1tBh!Z-c?z7Cy=L1qOCPb>MqlCDBrGbCm(3MKE7$lv$^vo9s
zlde@%D2i8!r%`s0ra`$$ale+ZH_2d4!|W`)YhS=Ayc4{zEk|WwQZ`d2X)&I8Zoc<F
zeF%O&<mWr&vxX%l=|AU32D*p+klU^z+rbOCQ<AeonCB!mk3b^oB_bl2V`g<Qr}L@p
zIL{D{>oUT>TO<B?L;UWj;o|@`=o>!fw1Oe6`uZ3QG__HN<}xF<6(ZWTZtwQLFevZt
zr5+F`UrW6@)%{j)T7BpF_8tV#Pk(oI|1k(zL}z$ZPY>jzHDLTKoa^?ZLv32-?U4My
zYs5R8tSORkaUv)h+1J{4b>^+2-VWSsBg^qD`tgkgKI8vRc=A4<RQgE4wBI>aMY(EG
zPmPX)?5+SXD09ThLVzUui!F*6r>RoFv|6rMr!49T4@Zff^>8m^#CZW_v%jTpk{3XL
z>`ON)5tMDq%xqtWefuydNK$0GaPBPc@)Ix)rao8R+-J|Cduhrd%$rX6L1eNvE?ZD!
za~9am@Z!HZ!vDF}rqIK5s^#|0CgD`uP<8<@R`+fEEHtJf1yi;w1&e?i7Rq?W;=J`G
zgd%Cw_?hT5I^AfM?qu-um=CiLZJU4g;AytU*2UfUoy(L>+AEP+3Q=m3It>=Z!kv*Y
zo425+lF5gAPh;%cdO}|&jnV{^#C=MeT9iXXh~e@3weir2_~%<`KJ#MVpL8tZpXXH|
z5WiaCs-W&DXX*|F_7A%f4}HT6U>ia$)R!`JV(h0J0)_Vn-5=4NtHL8Ex+g;bKJa4b
zFY5S@ZMc$aWqfnf*bp6{3*_Xx%9Sg`6msAVo<Yi7#zJll;{UZS7jss?ATEAc^)82T
zpF{BzZK^0**j6j}$hOc3<sU1h^5QoK=BZ|Es33~7+A5YtUx#<7c3`_+Rm#BhoNBU`
zZgp=xw|deeH$hh2avsX=!o0AMmhasGDBK4{*#PtYkBwakKBy;Y3~qpdmiJUl!>+jD
z=M9P#8KnO6Vu6}Zrg`<Q&k&#H%{{Rsi>y|9zI8c&z-^fLbStbK9^Q2&^dAIqIKg&9
zO;l1bg>uSS6%~q`vqKY|E5q+HC`^c7AX9zg|1~qka?Juppsw5&3h{6ichYBPu|7qP
zVJR>ltf}|=cP9apJ;<x!iaoZf5PwJ>5;f0?4Bd^bIuk~pDweN1>?W|9#n}n|?(`in
zM*cJ@h>Tq=0|(lA&y(i;&lg)nML4P7w^c1oFG=C7sgFDZpfM?Ynbsurz1)f+0+-I&
z>i(K#ZzyNf`%MLk3C@McR7}*qO}i7V{{g{42m<SiB|s@7<h0J<D;CgZA|Sfs_Jw7b
z6lZE@YI8d5#e)KMk#TLWdO=Gn8@N0*+Q(bI10E`_O8{Ed(*9S^Ycs^dkNw?NI62L^
zuRo;KB;0DzA_0d=n(F;*>f=&YL^s@5lV$R(x)H{+)}^Ie)m#^|XxxT})$-l|W%7@0
z86q0I7Gy<VisM56I(S_tlqQ}xxB<+k(6)kkY|nb;0l?Tw=w7H2hv=e@^eZ0}FPJ2P
zNQe5BOKISK0eHnbK-bhCOx;Z6kAOdAP95sQZy0Lhq7vA7+9l!4^Ocw#nJNo_<vx}T
z7FQaas$nN@n*Hc(d2cB#EZ?yIxfxYN_Q1Ya*Y~O=k~%=QkDerlU8-J2{cyf#F)pGX
zd2l10(7Hy(R@UPQ4yKM9;uv1H=bi%zul^eaoO_-%G{rk^$Mz!SybedwVpv9*$>GFm
zcU|b=+pK4-S-PmNGXOnSA0nqLE6d)GFD>VE-fVF{FaG@BzOBKVjM997tQV}ZUloe;
z_$2KYZ%ZI&%A@aIV~N?pZlrhYu{s^Wpr1S?GS69&TU)^+j<0n72OjJswE$-7!9_{y
z=2ZzLhV!p5h8~sHS%3o)u*9f<D-hdZb-n^Tl((x2?K0dX=AA{F6cuG*U-Q52U@*N2
z7{heZ0O-7aW#;aY;aQtfz5IT7abOMz2bpTH9PKn6q_=h3IO6j%$vTmP8Y?*NjWRiE
zMj%wN^uJl?MQkG@i--rhMlFGor)D#pJkmvdSl%66A4miWmD1Yk*4z>b8Q?6OZUw)O
z=hMWKPFl<}_;1>=i4qve1o~g1S6h1<Ofx_s*MM5y{nz>S*T9TKk=+^-+x|t#NwfSZ
z%JA7nUzEI|l->WgJkT;R2Q+uZjB>{b17zEEgo|WF+8sAwx+rw~B6(re`In_hVVt-F
z!;7mV*KZBdI<WyqsUqt4)~6=_zxT0-_ckeN+^i?0q=x4A(^3N!=eB1WOoX|b@Od$G
zMDbU_jayEAozCCe!5dRbWPT8d9J`$05ElJivD(=G006;<zd~lGP9&3`Dc{^~bo$4*
zoADUkAgg>*r76$~l>OxReLX;82nIsl6oF;953=A=fxP;&ul~PlSQwXcXAVFlOmqMh
zvzPM8hIww|M|gO+YJfMQwfFq}C6sT&_+b#{DecCL57*I0Vb8EnlwOOi{}X{=8C#%#
z5J|P<lw<f+bUC_87kOri^4VRC#a&}@su_5_49V6V8Sa~G-l%q~quw&eCsx+8SxYPt
zJ}+hP{>(X&cRi7s)dsG@tCnUh%JKdCSrywCvhY3Q4qdafXE41NKo?}`G@&V+_n>Oh
z4+!{+DSft{Z>1)T{bw}djDt96UBIkp2_TYC_8qW1#S2WigkyxMi1z23;^%SAqh7AI
zE%K|ab`-xIF`;8qK+7nneBD^yzmtgKv{qSJ67NVlqn=6+5r1aL72Dx0l*cacn-+P3
zh&+jipi&{1*@xottDs18!FgPb6Z*#5XAhVT`WsiN3O%|St~2}~u|Q2mC&K92JX2?6
znPI4sFTH58B+P?B<+3OZ)UZ8wGH2Kya<U<Prday#0hd$>9$Q&=>vt~MmKK2x4n42K
zid@7?0U>rE9PA<oc34Aok3pKRjC_?#4g5LK;Hzh09H{8m8^boP()aK5aWETzJ&ecO
z``lBps>8psurA}oTKYoo2H|M}OM=*&`2c>gv;02px;oeI7Xp-sHuDl++5)Twhx!9&
z|A41}-bdD0mG0htYG};Jr&;Y=p)YY3k-a_@G(pdl{P~%lJbPD9ZW|ReB0%1gAj<JY
zgPx+#!h9L-;dChQud@r4N-o$Eo(&06pZ#@$vBL=tbPF?cC#UQ(s#5cLloSpoa4o5_
zTYF3do890UR{`eeBDf@Yycb&~TmBsJ4q&ZvWBeQ-yEYsYy~VF1CG<*;PVvGtH1S;c
z8;+F<z}GenNAQhRt+*Ya;0?r5DJ8i2r=?+SJDLBH#e%gyM>e%QO%UyQ36N@A{ApiG
zwOrMKm&(ihr0O;3>XX*iE#L6gP~#3y3n7p)jBWIWQM7_Jh{pdBBOn)e!Vm~?0Mq}F
zawmoC7qJNi&C;sMxyL1g)D$s6oxWp_^DOpa8@KdhY%ky5ik_2h-07DG%6%CjN6ieH
zSfpyJ_WRdKkuQP#bGFyKfr=1+CS|}BQqS-wioRc}dOMHfaQ2t0$w5yA$=yf3#Ms7Q
ze8g1S;#OBt4|^V0rAuV(GxD!{5tD)~Z$Ax$*sSqur?-QPpSmkE`M#+6z@pd~5se5)
z2i`ISHy+t1prk!yMDd2NC#q7jYBT^qY&yZ9Mf)=~8XSyBedW6I17f4EDS%|{L(L><
zdV$v^r5Y9dNKGN=2?5QVZiz*McGs;Y;3YA4f^sLu%8pW3UGW*ihgy8>PxyELJpuYc
zG+A-vxWP5+BZe_j-elYBV5<wwQ-RKr;!1fy?1KkKxn%hy*5UW3y^u8`Jy!c!zbf5c
z<YhRiQwi%orgQOEkR|#PUj!J(F)Px4u~paiTS8<yjJZ-CklNzG1ukJBU3(qfV4QUl
zDBlhr-2ng4+Z6+3VNm~lBmy8SBZ6+8z;C$@Q$6MKtUFv|U4IXN%`&;fpKSV$CB1i>
z^2gkKjD0JLPq4<_ck!uZZ5<WgA4TrpQ``7oBA0y^EMd=7s91{-d!_h{L9&@BnEN%I
z^gWF#X@R(x={gaXFEK2g-eM?vrI1U)HK0^_<y70(4<ePx0Pweehr|zDz_VcUYU+@r
z=#iwjOF>~bx|Hn$v2k54Y6@VY><aK$l@^0XWbPv?f%c@fc^G$9m(5RD%x{bg+5bF`
zhlk}8Kvt`he$0@R8VAiMwXmfX3~MS(PdT3{*%`ucHvZ5U603&|1lR5hTlxzwQOZJz
zBksQP37JIis6G_%KsBiB3riFK-GEK9h&1zWM?C8CQ-_FSJ;7{q({utmsG$)R>7L*$
zpimL^0+92g<`Q%bbm)xT=N|o-fOi{fD;qLm@PFLlg#;i>g2cX4(A8inlHS1(S+1H%
zar0B}?X8m(*=y`gRG6fq27}P5lj}V5h*K2>9YXbbygZ;Y92WmSc-?@@p`bt)$F~1g
z#S!xA+HUX?pB)u%BnkRRxZF(=v-uISTGg=~A*rKyIlj|Ch29VvGau|xWwYtO2+>-}
z?;u{DMn)HUT$2GO%Api!<_l+x3G&U`$%;}GJxC`7hRj}Db#=?z{|v@w?}f}=k4xgo
zMCoVtQ|%u%7yZFrYo=g%lV!LLU9Ne+oT6k-Tj+hb)!4leULHnLWUCu%Ilvw3!cZHF
z`M+b1Y=B{`^#}Dvzu2mG%TxfcAov$7_Mg~Dn!W`5DI@^Gz&g?ql+OE`V(LUea#j-y
zokRiQ>pj}@`%C(ap3ZQ?GS>0hx=b|=a~CSe_+g4r-T%luFUutNcnDKvVG7<UrQPvS
z-EOQ|LlM}JVZwM-tE%$)M%{entmA9*J!)_5>(rq0+!XtV-Tyw#(W_u3hh+gVacLxQ
z5!-D<J2+@-c5@*rZ%qHl5xoor=JkSOqoIq%V3P0Dsl&N$g2S?#qx!Dyl0}DL08;nv
zk2~bQL3xl5VB}h?tEx%yY&V{zI3_kOYoLXUNN`R1nSj)QG~CAe^rYMPo<%St;H$!b
zP33Q?u#SL1r&0WFuOZ6+^Gt%tJ04WSz4+<nYpNw@DX!K-Mno`vmS^!NAxkU{DF#2o
z2ArAPf3_1>s#WpRzzMhJTK{;02eq*ddH_(CUeawJ3i!SoDbc{DzmV>7w31b0ixnXc
z4nT}@(T+xoIb@Y~Khr;0i`yUpLUTY^CSCi_VMu^BTI0_*!w9)WISng#D#x*)mWA+q
zV+ds4j}d4C8^orcPP;da%)6*bOUoO_MYm5h0}^JZ0~OmffOYxbjq6E+Rl&e4k7d!r
z7y=jlX?g+(9?1w*2@WeYavKG%wE~Spc*-TmJzRow+ysQ{vp~4=n<0_%hoP*)|HPDN
zu^##zV5jti0O5&sm2nM}9tl8zLwk^@#}AlmWh~Nb+n^3U_H8F^Ng)27k=9v@KM+~E
zA!Yr4FX0EVv3n+XQkOacBh%T7`nWg~TD?6bV9G#yUj7Jh4m;<JwfC>36K=zw(ti5X
z2{<_sE<I-bPOUkT{y#cQ`6<D>eTBhbCw;k@(J8wP8uDT{@)%>;oG%2NK-qv5M!oPg
z2=x6%dIfGgADQq@_orI+V}WRvR{DP}5s*zXeZ>Iixaie7H02oYQtcP5Cc8yl33Vx-
z8JZJYcks`V_j~d~pS)3bszyV(QHLfix%Om_&~`=`4n%~ssI3gw*B1Y=M`S?F_~Q!P
zl?b}a@#XaxdO|DsrB69FVB4IszTEm5RB7ac^beVke}2%s-O_u!P5B^0VZ;sRAP$Sw
zx79KmpOV<E1E9D&{}L39DA6)XwLuX*i7RWvBtVA(2gA}KCKaXhV;oYi(;4)oCgfA^
zChFh)VHA{i*$KsOj!7-@{2=`aw57CxXBIktHW3yevs;s)IOST$fa7dO1U34m5i*EL
zeY;8Kgf(ng>G_y)@I7MBoqmBb<$VgF6Vn-~Rj)6ubw_*`02IW3fC5k`*`~A>t==7;
zOsy^l5T!cS?KhvkWc$H~@h8`XA4oV=K%2holhCW17rJ^1-7V7rwe`}>?>B}&u)gG@
zL$HXL@cDCa(<U*@YBF@Tgs9Ks^BX7q@&vL`Zsg)-zR-YPKCECnnKnhxvV_*YYpPy<
zQIc^SFIld76hr(QN&LQ1!cjkn&gDm+f7l>era@AuLg%MIzPx_SnA{PpJLO?kQri7Z
z690VU)`+HWwIbc8#+XKic}yK96K$w$`yBQeXcYUtZ9;ztY@p{wIg_mS2as?Cb0>T+
z8UfVYQn?(@?kj)OELtb5P2JlXh+Mx>tzd8ps%*8!(UI&H!6B#mi0mveC4}If&PM$!
zaz^m7(%bE}pq<`}3X5DC)ypI7V+B7REro}!WaMwx2s6o&^S)`r_1lGkkPgy7gR~)D
z)*9J@F3t^}nd`fLN4xzKvwNl4zI$qY*;DwhHK%7dMJR`i&S@^#&wd<ua$J(uguR$d
zpAFE{>xiY_5=Vi>RmmVy@&EIqq#2wYGKXk_b4^0wi4>mP5?aVp<kV{etT?W%olfK^
zQoOL{a<b>vE_}*<r!iZuHI$SwHM+-^&z=8VqF5-oZ5$lvfYMB1@55Z%YWl9bKz(2s
zf!?9vF-g~Rs*gqI8k3O3R>QB0o3_JYs}_1|eNy6Rv#s_x<Ou)#2$*5xGUd?IE%^C<
z$}ZU8{Vtd|U2kF_8zK@AkAxuzBxs&ZF^AGmG-D_uPeie3p&$)N|5h-hAdykh5dCoE
z*=)qlzYj%)73vX5%KdrdC9P>}dPX|ss@wU~RBEKY!q%0!SNg>FY#05r5{Oh-?4Sbo
zS7g+~_rw54g1lS04WEfx>nW+*ZIV`_{c~^Rup$(rtzYtkBsq{bXxR{~k~hc1dh>JS
z>BI}j*Dq&7Kw{)2D9@j72-@;Pm7z!uqia^3s!?lQ?3W{m@2wL+VjlnenrV{Lkz~hm
z_KiZe*Ux_ivF1SX@DE)|J~{B-OfN!g=}`jU0E&rpSaQQ1#D=Ebv2<^VK@w_<Pw+Mj
zy1_jLEf&jvzc-jR)?i~fo}?RwCjpciHc7d7?zm<q6t}9ME~XPtfBtmy{ZDO9%`NM8
zqlS4h@j@5L^8&sl=<7G3k5F1M5G0>X<hNPfftkpbAN!OW8GN60IwRSJ^S@Q2g=ym?
z?-S6x-IqaR7SnpY1qUuO^?SNZ0D2=_H;y-Tc34bMcT0kU68tDHK~DLGod1TeE&v?-
z6}l9F<}|}zs(V+D)`<Miw|F}b;?`j5J}U3Z>wPZnA7t*_Q50Wz)uib)v|_xqH}|r(
zl7#TU`PWI92M!R|rMY1~8-MQGa)dkkvkj&$B^e-;-RyLZX}tKZAnXwensjpR1S1oe
zgC0NRg@Lt2Bm>NoQt}Y3FVH!dpW#6zIpjTDQG)m<^(ZYXAN}XkwT0$*H1S^xQ$|S&
zcE+bZT(JqJRj<y>6SOh9ZU{eZF5t_~D2@t|y;N6>&Rn$sZaPF-OaCZvIXv@7w~DPO
zHT#064wYKy^nEBUN^sL5irw$8t81PwhKGlAP2p{wRta6hNi9fSlw#!mC<>#M(>1B(
zr5)p7r<iP;7x4-B{Lsz6)`qGX?HAemm;?cTm@QvktXvN>@<rVee@9jga*){NLkaef
zPClfc_`&fRs)j2@Mg8l^9J8!}p*$2+vc!erC6wH;7ovob7}0)ip$g5a_e|$&q3CcG
zBX>aFEWIEW9hf;F8@&|r958oAG9%6Qd%Vn)YOzRK2-`P`vJEt^IL|UgpP4Vlg^}?E
zpPw794(eL9FAF2$iUM|p+wt{6sm6j)&Q5vZJICctljm9c+*>A5MaFo#qc;W}&sJOP
zagaYGFX?2~6;-O8QfJ-U{r0b}kdJgHjuQ6(>4Y`GY|ko~sYW*q45)hIjg76i#X@2T
z>3-_hymXbL_}OSVChgj<^jR9eEwG}9hSFXq=KdD~AOGdARBdoe0$?3FKbpG7x|X{q
z1IUBNem!-#o!ydi{QSmV^eu-OB@7Eh#N^P0dfh+CBybCL>Nw_PxZT3^>Y>7F0bwLq
z22TXVV{$e>K$B1)RkiPzpr><7^=XitQDj72S$$oI9w;Zqhm}x1XwHoa&#t3C(5Hpd
z>pB=P1OnI;Cbf8jt*7sbrDx!74d+O@5jL>uJ7Cq1pxEgYh}MD8{^ow=4})0UtpPW&
zDnUeM$wjfxsdZmB)jE&*#AHLOi=e9%gMi`_VGZT+?K87E*g~brBxnE2LA5<_eU=r@
zydF{ULQt!&8+q+J60`$?{SUxx0q<RRz;1Uyxon-%7taZiw*MKolZ0UWYz3PvUSID&
zMh-};na1kR{IV6$#L);#3S^tKMT9TDMgcZEj^h@;cYM_#$@n0Nqg*V)V?Y1r(pwN7
zM(bfpv9i_>uCVb62Qg{Mg-i^>!cju{8}T;ZGsz>z3V&ngCsT!ATlgZKAFzM{)@)DK
zH0kD1*ENFJ5gqXAOcj5l3rFvCNf?ppEeC9*oY6t}Yf+R}&!OcexRb5J4?w$f6e9zF
z-7#rxbOn1+cs@i<xYXdoH=y4!cR$P6xFd5U5mOaPFcPrgfBz!LETaEdX?1Y??vu6l
z(2@*bW6Yw-T6^_6oNm4gKJiV()T!aajFQKCboQd;L<M0@j}Q%mkM8vq?vOKp@xVyM
z@rPT%x&~?RxX8d2at?+D!xWKXLNd-VHZfc>(y7J2fb@E|N5J4Hb5fIQg2?(7F;of6
zI~-7jg!853C|JlHzpCQ`H<@z$f|WFm{yEQERjMP=x3TktyI!#szt8nALnA^7%vfi{
zv?OppW_p8ZnL786r-MmK<Z)JYD;ZF$6Nn!+sZWz^C7DppegQV-tNFEH<81K@Dv5Wz
zUv$L4spVyz%KF)-%h24?4#vH?`r&}GWumchJL7^KZPA3^#MJSHXaVF;by{ai0{fM2
z7p=TOVojopj626vGIvNKA<&E1n~hk;!*l)8y#>B|hc^J)Ek=;txkbh2gs2;u2rhSu
z!J}m7zuI^1%>s@W3j%VhSaG~azxsxzYA^b3{v_L4xV*!08;&ssj$-TBwD-ySO&DKD
zaEiTJQ38CkCeh?%4*UrI#Bcjm9TTg3143_S_mnnf4m59Os-+OA1~VZJ2?ZfIE`rj=
zj<T0ql^9tdA`@r@a38|VuzW~R3yf}7&h;_UR~6{wIh^W(=yVD)x*me{{@qmR=={)H
zDfD8BOToEJizixWt10nmnbDxn)3_h_{Yo#GMlN4_U@Flj0KSdp77s1=F$Uc$4J7O1
zLM%EIm?+m``!>B20s2<&<Ld!?90E+l?at&+SzpMUvbJoYZ=zZ`CO+0$Lx5fX9Cr}u
z>Y&l#(RaB<0mr_HHVVn5<Wr3sSMX<l@!RWMMCvCox;Tf<%YsI=sOIM#FwSvySOL-+
zgsr|n#C}s0oO}8^CzUuUQDbZS?84s4>&Mfm5<Ps4fjX}r^$h9yGaoddL5F7C0U$9g
z6YQe2EJt(=0~g#DQmm~M6-Yr+56hPP4*jnoj1S4VO7<O`*;$rg6Q#=?NTeiA36IrF
z1RP&=#H+gd)?B0y=om^gCrpDRN&>dCKPo<@N81UgrZqLia>>mh><yvp4f!n;e3H$9
zwC=V$X*6FX^L(jb-P9dba6-h1eho^7jJpxmtneL*KO-qK*sHRT!RSsKASrFCY%;Y<
z0R0T)e?L!X0kKo;A4SiH?E6qg@-qFizKQAu!Y<gNmq}LR1l<Vkq(iugL4R#?jg03~
z(^3JgihpJ5*fpL4lvlvIIS}#!2GjSW9g;;GbqxFKe4n5Jiy6nkD3tu7c_>0W-|=gX
zQa&u(@O&eSgFb=e8mv~KZ#ft0R5xomPQLR-j`uu?;L^5V#Ju(BLLSzP3%dSs(^#e5
zz|h%6P(=T?)p!tzx|eSBMj#MAE~E{kzJ6cU(>-RblRig>(V=doRr9zJlfGE@R9T!I
z-G`cX=wM>W_`Ia7wz4awZ)uIHLC{O`A(pW6=Km#x+U9@#&P{dRHvOm@rzcHQ`&W9l
z^rFkkhfVl1y%MyakXCN*#y&EH6a}($sQUY$uX9MAwm80@5U+Tbm1<?L1N$9Y=UC9c
zf5Qs_PP{DImbr1Qmuy9t(^gytYnG{q%QkOqW9rl~`HfXeOOTo$5;Ncf4o*zV5oF<L
z#rt!r!P_w7_Y=s+p0wP0U26-)qCUV;&<Q1%pwv80M`n5%w${{j!|}HBbpM6z<$(eD
ztBPQLDeSD~gJvd&gc=r_a%?eCnS~QhJJF?_nH2VUy7n4yO)B}eoewit6(4!?n*JoW
zMo3BEnbOl9Y8+oPfN=2Ny=HYhcsAjN#bj2o*w#0z1?i88q^V@;i;_yiS`|i=_wx`*
zG@)y*e_{XFCtn6%=e9na`$nCP!R-Ym*z#nrjGIq&zs>+|8DWb<4kMsC%+&o{a*(%R
z>B;OK9(smFA&{{%o*`CO{eeV=Ky)=9>-GD^_mn)HiD9F9CP&}WK}iX|kLW_+KhkX$
ztr;IT16bk#YL9Hnu|L4gY<m0h#4{mUf7tVr_KX5~a!4k1reGvLv_)Wvf^O;%ya~rY
zLbI+6>Kb#JIzC?;1@n@|hXKxO((R|jdHD4f1~Wu|<0|eO{Ik92w^;^^9SrUnA*k{o
z7>Dzdj))yOHL`){`Qd)JgC*T#-f#2b?*Nw-5XrwZ{kv&C1xAkQnc)BL+A3#~vYPxZ
za+;lw9`QdC7Zy-JIh`hN@h+_l(WzUQMVmV^-Gu+Xa`+M&M|YscJW$!q2|x-O&ZJWb
z*J33?j0v=0;?W6g<RKF2^x7XJw>we1amcFIRd^xzR73AMWBcd|;iK5cH7!4aQggi!
z$Wj-(glH4^PxYLl?G&&lVWH@a{O7;}r(O<RXn*mPt#fB$zuM2VBn>0p*y!wj!n#)?
zcJ~0b#bU|X^^zKb3SzFR!CyPu)%d%+gE|X*?#+VclpEU`<9guAYue%1ejf}-a8abF
z5jThshaFUpB|48xBN+tzXBuP|Ea)4#mEx`G4|NW|_`c}PH!aeB<0hGLw)b}YzEU$I
zTnG!?aWKKGwn1Q$NET%=z&ur1ZIf5neiHHsc<PUcwWN0uy>6TOT~OCCw_n5`Y1B&*
zcuv->BgHYF1qBvMBv+@ZYVdxfD9;zL^J!9<-l><Bc;BEMv_P;4rw4BD6{QYs$>>)|
z{DWr<ZK}SiXtK^OK;}K$!Wg4gDii;uwC-zN;1RO=#mM7@ua+jpEi+Oh^@wMZURgen
z_4xDFYhRW5@OyG_1&Mc2ZiqTNkjg%!q}tf8rVdqO-0$DTFt3muIiF&3WN5~mc4s(T
zPQi5<!btI?_Mg*(z9>MGw?(BTJDMo6N4`Y|0U`Bg=hP7VL(7d4O2sE;USDXY1m>87
z!Kz~9BFOP=jVEqlM<dT~-)W`qqTEtUIc$womT$tQmi>J8t(xbT)Dh~7Ne=F`4hU%H
zhLpzZ5b=HTS3>)QqOu`Z`$+d>@}P@xCPj;l9DB(&<A%qcZ--+s<A=-CC`xo0<FPpr
z>>oRK;o%T~VL}_k!liRnA=svidK$qpCo17&wK(tOE+VLPsuxGC^sjn;wuOczx}?J%
zV2xQQ837}9V3%Xwox9x`RYS3Es?i!`dU7Be9-qg3ld-yjF3LM^)%(qx{e|sK@}h3Q
zT@jU#8kJyYvPDQGalaamj`n_=S{iQ8*`(qRSJPJ0F)>-oK$5&>)QJ2<>{DMKAj}PJ
zy1=SRaV&0CeHHfRH>mbePa0BcbA>XcRa(iXJI6e^uROpv4#7XFym6ybcV9ZLLY;Vn
z)nk2i%!S9RRwQP_Dt{AK1;hwglpr?#-L1V_4fe&O1=|k&jozUE+o8uOp$WlAfy~ar
zH7(jT$?VC@b?g=URz{KPhJoQGS8ulAL$gGrl0Z1w4r+cC=9a5o@YV*$DS#Ov5e`~4
z0)lC4wzU08n)+kosS~R)eTD7LJ*$NJI=DAxL5;+5iQMg<)ki;_bhz_QyR&J8^D((9
zC*+H~zqIoaH3wt3^fGKBPeMRUEX_sGiyaJ~Cw)t>J0OvrlU^Dc5&^>PA%~9d+m_l#
zt``Wipq9>Et=fJddT-9P(Vss>&dGb8mkMCHHkQ%eZsY_;5`JI%TP>ChVkZ0v@vZNc
zn3Eak-aBk9y*LXMpHU4Zu<ru@^0qvPGeN1`zV2Oey8RU9mFpYtir;^M`~C%yG5o(`
zG5ywN12(d%e-(tM*63;%^bVx#Be(mQ4~Zw2mx|t5t=6IWa*Qnzz;w$mMY&bYiYE|#
zl&kj1@9N1@r5Eg0ZU}8omQ@-)_dn!WzD*e6NOUJmV7;_25~Sn5?F8!H>l!VRJOfg3
zlmH~y&+-FN@;F}2K1_$JEn|~|XgX9I0uRyv%$c8I{HjVx`&k6h+PI-Dr_E0<*n!2G
zHlH?(Ffhz}@(&WbP&R67z_S3t1aK0Qlpk%j5xXPD)d-^_pEJ?@;=7o@M(ziYU#kR#
zgSPf@-5mjL)~uT{OW}P(YxT0#x*)gJS#8JOoCT*_%9NXRd?W!AVHb+-?86tPfqP_(
z&7o%c<NsC?vqjn^g@uI(En6>8*1o&tvKm=Co2u;fv8ryXbSutPDu`nR-`j0wZtFI4
zqO>9++}2MzT&UgmzKG<06EUOd=Y3?2_7D!dT>|CIbHA+aNx~BShMOLc3`tAc-}Kn$
zK$!ak8y<+IrVp#pZMMW_;&1?!1uWi`o*iGiz8LoM9f5^$KEv&-4SurYj$~0g%5oja
zIS8)2tjM)qyQ==jLFEBwb^n-1hJ2m9bt!0Iig0&hR&4LI{>zrUaI%E`1#%Bj#GwS-
zmM@ml^Ly^Ez&x%ssU$U&)Ce_{-sc$ZylU__h*u=mi)xSUM61~<kcPk_aLUv>P4e3N
zQVP*`*A*^iwJnwPW8+}XGU$be6+pHKCd)$Oqbw@jnbA+u6nJlE2nb*L2q1ovO<w3Z
z&LTrc8Wc?~C`0<b7Nu{nR4Rt=h@M!42l{Dzupa@WVm27%x+7uBM=AU$daY-jG#`U-
zbQ|ZK+wVx7k=k98Pv$$)D)uRDR%?~yPM#9W-I)izB`G*JANGm7*;Tk+@GcB|2oE-C
ztx7Tox9Z}qFk5vSUVWY^45!~~j4*w8<@|_3*jaCOya7uswV3mNzSgs-SMv4{>*+TT
z&eGR1?7`vo90+`oQxIH>B(siUUFjm`z++>v_^vVXCT{yv;-RGr<8~S|YB~xb$r|Ou
z=Y9H+UD^<=NnT59{EkZ7?xSCmxHez?Yd;4!1%tjot5P5uVezW&G%}_r^J{OOaes%A
z!-T6y&HttZteS>5e3NThIx*9Gt_7y*i**Kz`x;QTtVuMF_fpqJZCOKswH`mLg^Xa&
z&+FKba&J_(-x!qxj<_YR76JB=3Ml$mzob)k)gINK@0nqqC4aKon?^jxOYXWy<DuT$
z9zekJGREVXkGfcSbtWRUx97CLN0VN9cgouFMyzuV#BMK!xCrWls&_^a2}QD9V8Bve
z{%9J2l0<P4$T7*b*ZB<#M3pY7TWlac*lBQ6C(85uOJt1;H(U%AtL|sKTc}!NVB3uJ
zCkwEADl7`nY!0NK9~wT<jD?dYpMgW%;ES`FQhM-|6z?OAp14Iuoo!oPQ~d*ni`527
zWaOk^X9V9-z6wjgEIhVcWchoMS18X5Zpqm?8e7(_rL$Q3y!K!H+(-8I*~1p*x9_kp
z!eBHdX-3E;n!8mEe~Fgh`reBB!;Ztx?7@k;2R6`l&Sl~C#)E_6U%VU+lbf5}e~(kD
z=}^!(UkLjF{69>}gRq$9@~KqkT5bhdXm?!)HQz1UORK^*_R`0NGv95@L_;WYbGCja
zpu9p?Dd7m=r@|g&i~FK@;$6SyVBCk`%4*e!<D~E<53>h$=JV8yEKmEKu?y<}dhKAm
zwHxx{mF%V+hl_Ol-}&cBpt)nprwMnEh7<Bs5&YD0mFVy1%tBUZa3ToV4w9VjqdhXS
zXG9dpc#?RqoZed(5eN`Mr6)EoVPce4B!E8Q5dHSdM+90eIqjFn>cus@uc%cqKxSYU
z_Jc?e0ouaeOg5oD#%CZw0#JYk2vgZ`2caglTEctpo$5@JAsFYTEB|cGO=JZNzGrhs
z>RpXb^ilOW%Q{Y*aIcg=;*tS|c*FesYC*_|v|0xja}BIE83pWBz~L8UzL}S|B|9_M
z-^Z5fRF{(>^DB^y>c{8ssgW#*3qJ=f>=msQ0){fRnDUS%O9_TMvCnVSp#zW_1p*F%
zDPpfL`?xUWoeQ)kO=~Rk5bNCD<!Ly>slEF<7G2}Cnn;O7VZ<<LezMmO{@g_Mwq)u8
z+8y2Ua{VML@GisMcCzP5TlI2LS-5Wxv^QV!c=fvz=ihGSXLM631Uq7W8$ZHgmF;II
zp03z-Q`cWnzL=I8^6W-<b9IvNcZM;rl6Q@;o1&({d>w<qI(nP$9<J!3pk(dMmhxw<
zcf^et(W%SlZUWu!?z#$@Z`vYE*``yU-P0_)AkEboMb1`feg8WJc}4S<{PkR?3LV|A
zg{FzQPuvU+e^KNw6Fh{Tjk}Q?INbAb=xx;|Cgak71GP1`i@*H%V>ia+plXos$9lv(
zISqJ?Ur}=Ficig$q<z?*$v|ArgxyZ`+rg{y-!B;Aw^Y~S0glQa<>sIuOm1qFiC8hc
zN)=CR3b+36wRGT*SasTF8Nnv}YZ}7KdlB6iqSSl`BripRGX}fSxN}|*!r%(*)5hrX
zILidgILN*`xPr;(3oQWA7{y0c7<#@>e!v)b+7z@LH>`0aK6UNsj}6T+x&9F2x`WPf
zXR^Q<`!Vd6OE^;%@Ak8+6!2}0sH~O+!*=<U$R^JUCDxK89}`#qU4(fX3Bn-GcCjV1
z>(C8-pG#ucfPtx~0#hntJyB$zs-fhZ*Eif)J5eI1E(m%L`=QQrjI@bi-#okvi1q4z
zJ-WTcG~T@OBAK=^Xgaqd&RN*?*dNS8kIkM=B$~Ol^YN@{@$mvuU<t%blURMr59<62
zeG}=&TVRAhHR`_#90aO}PtW1EaxwSOtA>fq*`J|adB}2pyWTkvmf)DE8eKC>(7-!3
zn1e!w(~41g9Re*wA0AlGhSKbmFTLPg*XDxxmN&>OXKu_pz*_Q<x=}475BnUWuYJdA
zaGseZi`yUc(v#mw{YUr{#rwB_+R_B2J3N521Rp>VULe6e4vDt0<<R?VvA|e8!TVa#
zg<1n7lq@Df{?xvc>w5`WrpcF9Kl~OIIzN|>s9vpS%(R13E0M$U_^S~@hUo~16q|az
zlFR$I9=p@0d86QS(3~Mh;N|-k=Ao<jgJ9B8g8?b=;4NeE2AYQ;>SusQ$Ib`Nk!M@h
z*SEq(!Yblj8y^m#!2rAefXyH*WIin6o{vdh6slmkl57ag;`||wdi@|+Y~%j;SE<|r
zo&>b>9rHe>SXX<Jq^{qBP#f~)+JYj+Ui~!Gj>%5+tK7HMG<oPnG~m*QL;$QkIFFKq
z7B0wo87!GI-S0-%75cs--(`AOPwE*0I!Hh~<1M0q0@O&H<4m+mLRz?4jw?f|n=wuh
z|MT1@hYS%7E-S_DX+ecstdpA4SWJnjtITvK%iye2ZN#3&tukeJ;}LkR{lq_VD?TJ~
z*L3+|^LHaV*0+y?)o<-PRE&48P9IifA>Dn0BFu%rt1WT`j?KDbY-G|1-EhZ%ztU`z
zT$)OG6GyNSZu&{`>WgE)X$FG~6|gmH7Cp+5u+xx&>qXFU1ZZ{PDQHVX;S@LKgL|pQ
z46jA}uy+&}=rRO+-A`%INtR^OgHSf8u%tl_@p<i%@aa4C^RK)N>BLC~3!UtLRr+8k
zltni7@f;)fL<4G?Ekfh*A19=%(jbbx-}lAR_L1BC_9!Wnzhm{OmEP}?*9i5Z94VXX
zPqZ`=O?`gKnUi(FenVU}QYngu$j|F=BDak}hSe_)JZ?C7uv7vU5J#LSy`nuWbu)j!
zO`y6M&4F04-+6&%2EGs2C~!)76TfKF&0bo%*NvQQB?l18y5jr^Wxo^i!(0bRJtrYD
zzve%oId?F%A5WiGKl`ES)mb$Ioex-byu4uS*<Ga7B!2LULqb~kY#lO2L2h9a*K~Aq
zhbw<C=!*;h^$YAu3Pi3HLhqc4gU~c$vM?$`bkMWzG8JPOk8R6LMNajcoAz7)&NFeb
zmALP04e?@HY@i#;A$Fd!iD<1%Q=G!zWa)Mjh9T2r{mLtE`x?>_7OoqQ6I57j^=W83
z*$mo_DVE|vKfm*<n*u7ic5jj!*9RQ4KamV}e*XI%`%!&V&xmpAp<=!NWUaq7le&|_
zGyJ%A5w@SDI0sBN$4=K$GZz$^X)n3~^}Z#n!ysY41p>hb#@^QLGdJUJ$*Ia9w2d3>
z1IW%emogvk(u`)R%4emGkI;)?U|)X%vQ`yF4FSb^k4ge+xstn-EJ6?jsHgHjP#dz)
zi_f4>bK2-x$UkdV1Z|P*MC;i!c1OU*$RKSk3kEkj8VjjykMi0&Ji?;at7<~8<|r6-
zVhSle*E97GFfjrp4-DqiJaPVCdtdz&<^RPiuo4POi6F3aN`sUu-HnKVNJ^u0ERqru
z0!vCL4N57UOG<~Ngv8Pv3rI=dXYo_tx&OfZ;X2F?GdR!lj#IC5UgxZE`mfaIXYb#E
zZhwDw9WTlfVsP;kJUcwy1ea4C!Ev&z?rgE+sd8be?(<ioV863d{rs}NC&5FBI}@D-
zM*)f#{C+R7VA(63Dy9~`a8kS=l?*Jm!KX`LnlNsAz7;1M*i|9*<TM4UR-q<c=GORj
z2%lr^j)&U#S=jSL2D!@C@iugdD2Q}0(Ru*&i2LyJlUn3K=z7CrW#OoS@JL*%7Swe*
zrHw@IKr+Cbb)miFFyl%<ujJA)57iZd>guh+k`CBz6(Yfvm&D@KcG;47;Mt|<%10xc
z<)<;dVx05J%%@~O!t^8a+x9xsd6^s9vpLu?8q)|>19d>QNdeg&#<RAGwo=hhG<?}a
zBI6M<Z^X>}@kq||YC_^#z_maX42m1)8j}ba^L7)n@h?*2OB#WwuGl3H%T-7OS@j`n
z212ILCl9se6q5Hl6CEw*RBvvUt;QfOttdh&TNbp|;7=O`SXpb9;;N0foPh9$2?&4M
zNC%h51`^ZaKO}&g8aJT$4l!HPdMo2yasW`kWdIVyxQKhilVtUDMu8)r)MbAq*Wuj0
z>6GC;)pGBiW6uYclV|LK+mx9y7S$~8B*hry1tB|oxBD{7j59gzD}JF3@AM{h8`4k%
zwhUB*LP^$jeV3}3Uprsar{Ha3@}SF44>A27>V%QgU>rSRykcP{yxLsr|DKIb$pR_J
z_ss=@J3+^1fgbD^sBdku=_tkONXGK=Cpc4X26er03gZ63;RVo*Oy~z$NM)eL=`Stc
z`^aAe6LpueyFMM6m5zO4FGT%z{8m1a55!Wf4(vKC0MWA~i1ep#z4Fl<QogA>=}J=Q
zOYz~~fuE!~F`M2o*qp(WDAjYo<V6d{=0re>xEGF_f;qB9aWm4g;PGmq*=XPzm~r<z
z|3K*YDRxhKltz1$iOH?;MhG5x)rrG>#C=_$wz@vsW`RCPmXbyD%J|g$?OB;c!>Ct!
zo2SCgk$?%0#RVu@u_*bR<K+&V;=8)jiNyJrHnMOgf-$6P{8K%C4wZxzOJz&t1(Q1G
zsXO#0bESqxv$jx^r$Uv4{I*brCDsLZzbEbv;-X#f#p?W$-vpt%)u-IiM62-{8SaRL
z1t59ML^J_XAAQifbF6!?lM^E|?7Jc_T2YyMg<XUeY@qhT<o|Rt;aw}8K=E7rhS*1X
zw1Qsi!_Shdj=Hi?6!@d@6Q2>;S&e-{LDnbVqMxMGFXb|%IncTE?M0tOt_HU(*bPD)
zjtv=RmP_0e_{+?k&^3}*m{uG5O8^kKfZBZLv)Muzsf!OI{jkP?YXyE7Vw(xt!<p4b
zW}GC_y0x%3vlBS9y*gv3IlI+AHJI`0JhAw=0WT*QggEwy3&#W0tJQ_0b1MEFn$$bu
zZ#R9Tc22|^U%nLLtc2yvdG!IIEI`lDZZ10gC}xETeXVuht2l1|<JqSbg6XhLG?q~T
z(nE2*5)X?T&of^s!Ou7&7}G<X%qKJhyOcBnWONcZ1D@#IGG-%u%dt`gJ49?N5~+1h
z4f7=twlT?N;V>H299hbSy*i$)xFda5^m6r7*eMx!X$$THm}{?2JQKd+1(LZzaj4F#
z^%8fJyH4hsd&7IjpUha6D>{B4R7A&YT&nleX8z|~DOfZ6%f0WMjhZy??C|Y%kxuo9
z3GSO&10Z@<V<tpr`1iUvbKE_*B1edFP!b8nC3n-uXAcCPpla>Y90<`N4nwr$ORMU0
z?@qjR_m|QQDsg<sg~MsiI-%`7L8m`KClNDH(BOTtV36K%HaF_1^Gsa3IJcEpCAI8s
z>q?BWLPDlv`}7gYC@R%ScN?O%EwcvheI>VE;*jC`b6)A@<KOQ$A0JvqHK7JKgmxNz
zFLT_($pN|yMT+EetEhA8BRKat${;Obooun;sj_f_k^LfoeI;c{YR=1e7`!^w<;491
z1go<nrpV`_4~bpf2Q`T<%9gWTL**kmyOa`TEy>@VpFvw_Y#(%q$_7&B+s6N>{2CZf
zTfsBP+;L99{#sboT6re3Lr41@zj2)QaCX~Am^)td$M9cyN_x=9@6%V^N+RCa^*8oB
zbye1bcN7$bCkX!d#~2d5+7+RAu5(O$#^d>Wc7t2>o_Ji4G75h>edVBMY6`c+enmY&
zW<Dzh>k7TI%*8YGB{F-=ibrfdvyG$!7%O2(Lu6!ExU=gTr^l-e4$tWJKj)tPxpZmV
zyuHKPVNxml;*}lq)l&t=oR3@Bf1*o8yq_3|F<ZVdV`(q^52?C5G3oDzt#;l#x$V}e
zn5l5-B#s=i+M!T}h014NX{+vdvLn6OUdZd}oy&;4xTy5=8zEMK09YDOOB#O~kk2Ds
zPpygro2%}#=&k9JPkvNr1!9N+s;mrqMY3k;5A?<OmY>YaN3N0c5HiTo{<=Gt%`7J(
zCxPMiMw8FEqCjb~&I^Y&nvdKB|24jmeiS1~gYRxCtLaNAC+@Z*;?OwN+0n|Sl}>x3
z``kIGWwgBz1^7J0=LK68+JZRoVuCBVfcsyJ`SIi^2(7w`CL<u=tuu#8kFsreyWC__
zHQYJ@=;+v`wH*_@DylxDAqmi6;Mt>*&ZRGLk@TO(fGG7>&DN|Yl~cA~FP11tdMF9A
zPF1mk{^<%(dw(yI`{R!n1`%mm4H)l;bG=u?u+WHn#KBD1`Z(!N+%EZ@NU!#x40Uok
zQ7;`u8-hN?Y1zW46t?DN4!kjgY{D8oc?6fYp;CrX<Ohn)*OkB?v3%O(k)2+v99C1F
zetf{!IWGLwWZ!8G?m_MravjCuf$9e#O%pDjCKFH0eDS<GaTqeAwy*${Fo<R=K43)g
z8DQ!geG7dT-xQ$OO|a_7WxOT;FX`|UX=AXWRf~LGP$h>pu5T0InNZ8`MgV<!vNt_O
z<~dH`Q;~z(4zH*zH+}3?ugk<|Y3W=rBZ1DQuwJx1Qj}yIHWK&HQ8%y#ue}9EsIItE
z7+}?xW4bQ_+z-GmOCFHuJ@d{M`6`a2*D(^o8v6BiBf8R29-*oN;V;z@$z2jBmCg8C
zsGvSB36u2F#(8LrvmH1=$k=t)X2VxsU7RGEUtkR*Zd|YAsJ!dJMUEd%QGahjHBT;T
z*Q&*WBuN#s09plk$l6)(5fkA*`@wQkNc70@c{6qqP=Etg(00o|0QjD>(;$&0Gsm<6
zLMy#0l;l$)0_kxJ^&uHaEHU+Qq1Krpe%>{KpS%&Gp$B!(bE+;`wJx<yHa?grs2V;0
zHmM;Eqhs88Z^Pd6YQ}AQnuEXq@C`}Yz?+Sr-ZSc+L&c2p;IP~i9d@s*PsUJPv}`A!
zW&3EXO}Z21(o<0DKpyfWl94t*5wGy`^ZWI?tEw7twQLx<%yJ})2BkL`KX+shuZgb~
zPLB0Ec6?sO@xzemA}xE_x;alxM1Q8IRe>TnSQfgvtlvbub{_q%dc}g~U8rLEM`y{Z
zemc;5Tedo1ptN?EN9m8n-UCr<m7wf+BfK#OQfTFQ74-y>4^DLjLlV-`1R@b;3l39*
zy05l_P@1b8-nRO!w@%-*zCTnU-Z{=OZ!MHDrVlt`1M0G~$m)~hHK0cP_=Q04Uw1A$
zci6hRMAVaU^f5v^+=*Oi{j<x(WUch|i-`(B)E>ItA&?;MU&Q8jZvnei4(J`D2E4F(
zT${%vlwtdJR&w!!K?6G)LDQQbr+}?8V<WO%TRCEc(xlFwRG^q&`Q=`T??~S0;s*tw
zYZpo0m=4rpJUIP=AXiXwW1UyH`A)*GHw5UkK&T12@;vvE^oile3(eT?&NH_i&Z4CA
z>Tfexbe(QI^t}k^?^3KHV7jkunZvqx=X_HA0M>e&a7!OIx}3ny8T&<!ucX>SwAg*p
z;z#TaVj7DW^t^^@U4aa?GV{6#p(3zWw%CPD-TGd7Ker!R2~~R-0HR?DYo>*#BnGZx
z$%gT5|Ax9yX}#G=&9UDr1C#=-7fL3V7h(J^lV0s267TYsU}qAo1fyS*2Pqrh5RF3A
zH{hAkktgoyC=nc_6Qbzp##GC#)8?-UVvdcTT9aZLy_tO&X(VPdeS4y&XfDBg%YN_s
z8=pnuWv|xMRG1h=O}&e{%K-rolADWC;IO!=J-s}me7rLV)r@u2y&^DR`~xXTKzGHW
z>7MQF5cg(2m70m<%MFI2?&X2`VfqLNKED9tTLhzlqghQlHq7=-?ZC`q@<!B8oYg|s
z_Kowf_(znxTF&@Tk+fXT-Vd+y{2K>mV>I15jqh^Be7~~+-;*71iEGvbU3vpCsLseu
zRIsWSs=B*h4T>oY5I@kN%wRTi*^b7mBlXm>U#YNgCvT$UGE{r`N{QjNAvk2olBJh(
z<oQ6aGBMfx)95anEj;UklZoK)Ecs|4jXJz|6bvIa+i2I5xa+VJr&V<#>478n+vsNd
zad_(~&y`VsP~aSnuHnth?>p%d<lJ%1vP6T4%nr>IByD(wRLPn%RBkcWq!^LoXzs3m
zzM^Dmne*o+(im#mw%HIbQ@UgtZfx?D6783HE1KJxluZ5W_{WYYVSG$VpP~;kk#wy;
zAj3BnziC8At|+ljR5(y1Mob&t9<%BGNP7n3#R*0be${8<-Z1jxG+^<^qt8GrYIGI^
zh?*YG?ev@xpYNUFt>g0ir4|#Q5q1vfJU8(gI0kU!f~?cvm%Aa2R{g!o?;ov!4dJlI
zu%KQCk+Xc1NHGGd3cg?B<yt3ZN@GuHy5pe_*!Mai`WsBxpIa8rGNSxY60z&~VZSn4
z+AFG0WajztRO$RP)b%<JCX;7XgwH)O>snL*=Nmx`aPcFF71JzpKqyxwfXXo+afsnP
zLm0#V<;4hPPFfsxCntrXGrg8GQEgh<9f{$7)%C>>Q+3Ngw$#AdJ_KVat3om<NbDYk
zRNJ{${ft$6MMD5(dxI%06&LjG-7C<-(&8o3;=<LB5;%h}`nf&I*UNLyM8jO?FIdQ!
z8E9i;51ZD<`^m1u84Q5$Z9Q@D+Tks^Pr8$=`K4nsV2u^a2$*cCha#ShKw9ZNER4Ba
zd@&~6pTbfCiE}=gQ6OYYKtscU9cL*Oy7inPRp8Y*j?~blPc3d5QsjOeP2u61cQ0t-
z6;{zO%n9uYr@*Q27s)YQaax9A-tLH-x17#~Z4wj%e+QJ4NDN>s-CCJ>ck4D~5ZEiE
z(nQ4Pcpd&MIp3XEQC**;JR6LYG23|IhO-43q;F07uzPHzLMYCvhUDq)RtR?6<t-9;
zU3d4cAMNbGz!}U0O(iCG4f$j&i{=ZGN=pg^HU;yqDHMLdEV6p^8*)mq1$mAo<oF&?
z2xZ*eVw?EsJoX=bRJ8T_3kJt@Eps&W-i=s16LG=NBVZKl_cxM5vBCGXM-*e_SHJjD
zc!|-BJlv^>q_qX*`(x?oI@A!;C2Bmy(%3Sd+fRu{c^WRc9WQg0)@U9`B9dge9(%mM
z+O^k@=ing!esGNvn?;BRXNzXH3ror^51K%-VIEh??)KhQe$c-_j3OQA8aXXD;5^fK
z>NSnGO{}x-dR5L$r)5}9mOnH2ivj=EUha?TFMf3|pTex0JDFDt=QqJm!prkpTV2Y^
z4@Q&5A-z{ZPqnmqcT;7<4mh67w<K#hK1IF9=0-~)6-IR@N7Jk^H`$@xMX_mH_>BtS
zJDLdw4rZJG<k~PuaHRlJvBzhZ87wG{I5whH8L!l;%hC@ylq(TSbf<;H`Lfw_uez>^
z%pGnC^8Wd41u{GVRdso*b6Vnt6VNASSKMJ<QY%sMzA&!+eLizS@sWd3rAhD|t`Ez9
z(5n*zpr4<x$bc$G<rSGWOwYM#%lo&&g|H(U!hS$Q*bk^N?ae|%E3x^nRf?qqOe>Qy
zh=oGEZfT#*S2?<U>Pi)f<t0GDcnY8q#_2PP0bF0Dz*(!LAzI(rN9DABm&O6Dt;L^Q
z7t>4Vzk9y*%?({?fBLeREVmLe+x_6m)H=TFX{gq<oce;e-4DAQjuTXTo?BgoQv^B(
z%|tB<ub*5})d01=YbRn#0szrryDGB;5md1M5@KirJW45!%-kPotBFbD|1PD9ve$1^
z5e(LF`F#*ll^o;RmlWu+;)@3+Y)UXB^Sd+ga4Rn+#z5!={8_DKvPdd)cR{eVNds1#
z#1ZaN{s({nM2E>b&*is1Rwmye8PE#OF4o7`4aWD<`5GT-DE!fwUQog;IZys=`*yD{
zD)48{7m9My^}S9?4wA4O7J%I(L|6$^y@?!RjNC4P%|T29#dgXnySiLMr~@to8(Poh
zmG58jF1vQ3q4KxMFhBPT*$zX%CVa(4Q?yLZaa~;tQEUoX5%A`4I;`Sj0j;w6^=1Ne
zTSF)}+PxQ@308VN|NY5kL9O;_ioD9b7AY0`woXAxHYfEE^A;%%tb64n>?#6QHetlG
zW%f}AO1-Z6fdOM84z0O|!_K721VU1wYe$b&KOAn5QD2d8vhgUbpWe<E(S1d&uXk?b
zedUXn-L=dUf|c(%dzNsM-%4NN>dQ|G9t9~(U^qYHgf9;37kC;*%q#MF@F@nnkH>S6
zYn<VqmXJ^~%wF1_1oPFe9y5U}j&o)@Es`X{ALeiVfE0+n+Qzsb?nB6^q!iMdYa?0}
zAtFr?B2kHLi?5Y>s<fkmVXD;6Yp|bXL7LtkIi7Z8BNln=lX%b|?Slv!r^;Y{P+EN3
zV3pGVm4s3FyR`-KuTdFOxAyL7|B;d>sm<4QrTaY;1*j5<Lis|d0T>9s($et1I(5%D
z$-&yBU<SSw5qhWkG&KZ5;ETMzR;y!8FMxQ9Q)cvRjAKENM>*=u0$^S7zmQVZ?z}bD
zfRzBBU35;gvjgkFXMHZblhc3jaGPg&wrxgBekaWfWL&@P)!!v2Vs@CW%KEB|EwB+|
z2lE>3K>>#&cLqu6xoEPtd&eYVzabEv^l>kM5}PDhC_yoH!5}t(EtV-Bs;b`nXvS?h
z&<;@~PkI)}b|)1|?=CO!y57jiE5iCA(mrQk^bR7`QG9J{?`N;!QQ4HcqGo5Izh9n$
zlN;lx$!`{Fs_4V+SAmP8;wg68X$IMAYD+Zw+Vyv5s}C<B+A(L1?{8b^tdx|ioTUe&
z!3qWlt|Qp9snCzZhx#Dz^sy<rjDWJT{ZIW6$kIhg8g~aX$TBg|p?Q{2OEucw+bq%!
zIY&RJoMN|%#X6qDYIxQOtRsthPqQ_`U7P8pBI(Fum@U7vm_2A-RI`rScC4Rd0kRkE
z4*`DoTmaD7;JtG9%98a9!|_aw=C5*q9)u<^^D1L@7JghBZCwpm1KW@kpEYP9@OG5Y
z=ZA(&%_1a8Kq$NPF#MHQhy~KQdnQI8L020YgNbyKd-<EEj)`xEea~@>lF%z8VQzy`
z7Un7qvyQH{%%zqw&G27w2w-*voR`Js@takOG+)l0ex|g-jNjpdkf@Vm0MlZp5A<8^
z)?P<U)_5sjY!d8n2Hrt=!>~yr7gyJf*q=pxnY$*-`2!f{#XPq&zAkRPMc*S2X`7`k
zWskk$7RJL!v+WeO<rm))ALut*K&?disvS=n{VZ{fs&Z9cdK`78Ysc?uVr0Q}?L|!T
z_eX=&I`Wt;c=Q^=gd=}TMsH2%@tKZC9o;6o>qowI8Fj_`fcXGN$B0>Uz5BAyfCUhI
z42%mq??t^&)cLQdJu3J*+X&3MP<^a8_U5;*PYD1&H!wya+){L*X3RxZw`kYEFI7{^
zgDKx`gg0hH<BmfZ6bl_jhHhaKd3$=!#y33g38AE|HfGSQK@nSbHtnxw9$#DxLIecz
zpy#!Y$sl=Y$-sG_CanxKYT!E8h|<$+8lhW==%^<CL=KXeiy9eo94;B68N%8yIy%`(
zg*)qDpC(~{BMn6xn<K_9Y7AO=NZzchPO`wFU)+nOTW{Mx?jk+A{2owxU;2X5SNVTW
z)80;0GLZ#o!_H4U-cyT^%fcu`xe`{5CTjO~L)H5Oud|Ah=^Bc%?vbes{(KCBt0|QR
zDb57-=|$h-u0}=nM?I3o+<q0<w$)ldnt$%`;goo5+P)-IK6zqjCj0t+S_l2xb_vYh
zs53&N)Y6%=yOtfl&`6nr8-uIxbm8)rO%25X>xRWT>O_UY@neXW5$c-G2x!QnvdMDd
z>bqrqxU%#3T)RX?$Od>Viai&)G-rXNU&+w+BJ4ToOI_>{uhOuWf<3y4+_SkdEf5&<
zBFgOlu6L;oQ14n9fi68R9u!C7sR^PrX*>scK`dG!s%YM|Th!X{Cn2tAqKcR2l2BSC
zht0S~(8-L%xG;T|Z04ETC4P_J&~O+6{t10#ZykLUsC5MD!E>Rc$5?~A&4&11q+IP4
zKr0?S6fiq^0z|#|QIg>sz<;h_nt#*XMb&lZ(v*ElPr`%>&F9Yg0Elna=~3x^Hp6a$
z+v|m21ukPR9vSp^di%~!ul>RgYs|-6$fh=vj1LiIG}?U7lS_S9VHJb@^@GrGw*vy+
zU!LB%D(`NkwH`0~T>7}sbA1@oOoxggo08GyM22XP(;tU8>~bY+W9}Yiq_={yGEws3
zLx$<U6<IQ#2xy{$;FjsN-R?8(QyADQ-Hl29Ejw<GpOVQnO1*qE&7aFB5%Hi2=l6nR
zz5TL}I=lX^OUi}JrS70J{SLyu5zWHeT}9vCyEhwfnXdXe2=Tg<KpfS+Av?Rz8-y8K
z?DSuW(#IejaS@diZnu8@VGS5Xa)@t#5IBt6%fvXDdktI(Yevx*K$l7m+-al5qDD-U
zfBYnMRD8VmV-QArC{c-Joa$Bdk@dEfYU(uh<>D$oUPN&7d=EC1R3~Z*y8EExTynCv
zi7BM&2!FckE&!*jS&0k@jfT`eUPRGg>PPu}#<Bq0#l&(fr1-093Cu0!fc1S`%%CqV
zvbkPQV_QZm>gM1PAG(D)=Wl;hfyk1M4Y7=ge(!Cca>gE_$)o*l(}Kt8NhkH0`4anh
zf&1#^%dnohqEyy!ms~BnSP2XO-R<H&sD||xh72gVxp<Xe@ni*UkeiPOTLsveQ~hNU
zWV!r(5v>@xoG(|F*1#Ujp`#*_4tj$$^0uZ2B7|bj@}6G3$?u(G8|`{`!V^bsUWFGn
zO*P@zs@J_dF?hz$(fj9W>2a+eAU5CypXmSzc0b3yij24a?G)NN0T}P=&}`@rzW2cf
z`afyXc3kYBA(PNHr}h=oVih6mq(}DZ&o>Al$}o@7nM?$h)QbJiy$!h1X~9<m2y1`D
z>Mo>a9C)j$@7XWWGER*q2DG&eW*D5D;3|fQ^Q=<wfTu?laeOx$nLcf%Q`W?A0k17Z
zcb1kqvx>sIndYKDZE7)9vXXU#-H}brc{l#?K3L&CjSeZX&x?7&`{Is$P8<9y2zVsX
zBgYDUNZ$SohLe9qEseJUL?q{lsz%7x*H@$y8_D0l?M<2j*~%|lZRzs~jS`MKPj6c)
z&p#a^cf2D41{$0^h<6t*dS~7}WEXYAXw>l_7jTqTdKwR6pK$e_W2r*BE40UoXPAp#
z_WQ`$&7RNJ5cBXp(iC*En<=JBEj|Kyyw6pZTDtNw=rjcD%p2f|YE`h2liB|Mz#2_3
zt|W<<hlI^eJe+v_3)83xGz3wMWk#i)nI9)GGW{J0KS_CW6B&aRY9(TzXK+FFR__e`
zAl2P1NJEL2CQNpATq(5_nDHKfT1&jAg7YikwW#xt1prPC!E`4U@qobJ?5fst!b#dq
zA(~U~1^iv-bV$a2An6FRQ7{mH#^UZ0AesDEEdb;6BJxJhox4SzB<gPIx2Pw84nb$2
zfiRY0^%lAZIB6I}sY&WXl{K`fZ+aUnWTO;)|5$hFd<E!nf`;1tkqz`GQ7>qV|Ltri
zt^}1x&%{LjAY`A3Jq^JK>^N5lsP!5Cn#^?3`f=;IV~LVVfQNo#gz6%_JFYv?6d(wH
z{m^~Jvrca5oR6q{=otU{8M}La%hK-}bhocRyV^A?|1GL!kVH%8Jkg;3_p$R@DV<H(
z=LZkLX#mR|?YMtcIcoxoiIZ)PZE>5G|6Ja5yWUs-MN0kI=}ByyxbJ&Ttm1Arl2C0-
z8rcA#tk<3^A8<39(Wv3p38qBINPSb(2w#cuznkI>1CaAOVFtz>8Gj!|wa_@26zu!=
z3>2<;>tVivqyP%VT^wVW`!W+6VDXKgJVQ*JhndP3dbsA;_U}W8u>D&Wu7Xf{<TX~x
z0V*?YNbl}GRlMudbw-1Culu%-4`sF?0M9!~e+@ob=F-ZOOHB<<0)6JiSiM674Y{^=
zW*Qm42Abl|KR(tP_GG0l<A&B9)igL)Ae3V1HP<2pkAA-HSfh7DRLS`^6-&F)sK%Nw
z4JdZDA9tlW@CiB`OzRxQ|9#RXS$Nv^evf}S*aR)qP))YZ*Lg?bAhK^Eu%4A#^5V9I
zyxnJ4oQv3iUo1NpumquaEejPpy>gbGpM9pI0R#23zwfMtQM2}fth?^h-G05}xi`It
zY;we+o?Euz%^)ed`OGDwQl*UgB7jNDD!mCeR&*FQ?keJ{GmE>SAP30IyJibke@$q~
zpDt_@5J>0i>uM3|0m+OU92y@r->T_GPU94KFM`>TyeLlcJ8_=9ed2a!p>*!D;7W?#
z3WogKw&|~{Z~j?MN1Wv2J>;(a)jd}Q%Q=gLzMfcg6FN655S>yLb#nXPE`X|Qhi^p9
z#pT~AKHdS4>;AXuav)Rj_l6WrZU8Oy4k0UV80+3cYU}_`=k)77>ac7Su59Ze1&e0j
zufQn{ZKbDAaFM1t`Vq%c0K;UTqN6zzh-LBrw8GD`pmRSIWd2!#<DpLHw=kCrn)jD-
zSi7OcsT=@T>bl9FPfl_(s|io0>z-^dC_O@<evGjz;LvSMo=`pX>%Y>&%XXcq_;F4t
zAJguCrlzs^12U060`Y%UL-QPj&Rg}xjk>QOGZ+Qfe7S!m>7^RSrA7sjuu2hHF#hEu
zu5A|X^zT82FqeFk-rX)U%7frZ=w~TEM+SdAmcij6E@%c+odHW{uzL)$;<aFN!piQ&
z(55aGWez+;G6Fr-CjzMn4gvB8Ex6OWCZCzwu80~=HBAPn6PShj)9HcSi%GmE9d(g{
zm_JaPWEXRj0_zGY50<SxlxBps{W?zt=m~cZu~u&U=cM`Zz8Iv^_ebn7;x08d+l%b3
zta1%P3h#agxJE&(hk2}nL)nOIdGJ%ApfLyo^TJyc8&Z$*|9S|gVIs>tNB+_;Q8(SO
zR=~BU_V7Cf?|ZlO{2gm(4nYsSrnNjN5sTgp9%^0l&HeMi4Q4;!(O!<|YEe8rK$T#3
zDHPQN9J~^<ruI3rNb0K~NhRDZ1$nJ{Lw@uAii&Fsl*c%T+>B|k+BA1~om$gC=}Pm8
zpH;Tr_$}60`M0VvAf@uJ2nB&|jbGB1Qa^V*cymW@eGsD0;4^c8G5SNngO5fYGfn}Z
zp82l9#mL--H}Nu|5u!ICmxAnu#mkb?A5~Z!DC++Zg|A(WEGr<7>49GtiOoAHqcJ(S
z_`nFWDs+?-+W)cF=!|sD$;*6p!gJz@5i|)U5@^=Q!n~ROEd|j^O9#Z=x6rM%cN$Nq
z9|F4tk+QKhVk|6Kz37fL(KU+D->By5j#~<<G5I(lk4dbS@wFT$AV(c2tOnm@dSS~K
z>JVDDjF+>#9l3^4>hiBp5`6_CuL@}cCkdJ3Vz5w<oIoZtVMXZ{(4GD0Rk$N2d7U<F
z1gKZiSD<)5)2x>^vd@fl=0h3IgUh`BdCHJV#$4v|i`q2*zQswCKs^ygnHj_bW3Bll
z0H6XrlwP{Ub~_>>d8laY--Z{)HavdXV7u+GD!#HN;2Dc(Uch2+q7`})g#RUIWj38n
z!17#xGJHOoY}PMZ5hz~>^Yq6ppG*w$oQHvzS`WJzHD||c6arK7Y`})M+LGM8GliAP
zza*LwR?E$>{bc+rVGF2kC?94xjbikdwqj|QbF8#hZ1d%(NT(lJ&z!fnY(^k_?we+A
zA_N7{=!=cEx1Xhy{gc$&(jD#=Zc13JGJY-X30MSbIDc{_bpE0ACFhMEN@>T03y$7o
zK9te#g@M@^S#q_`$dvUF2(inLpE2KX0TNc(Hl&m1feb82)qa$@<BV&s;!*<STY>K`
zZVwbUk`N&4<#fbx8Y8e{pav)`?onB@&~&@CYx^65Pk?a(t~Jo7h*y<t$Hco1>KCk-
z2v{;$Y?nHH@#yDo8K>jR!g#xU8gm8vf0qW>C_>D_F)p%@*VH;u)i<FR5eH0baPQ>z
zN=Ra$GleC+`SltB7nbwgQ^o@j()3GiPTjGw`Rq#1;F;6knDjats=4lAV(Kzud+MQE
zvcH;>kLrr6|1xqdS8?hYW%(K~?GeH(XoN>Q{}to#p&Q6ICH+9X91FNgVm06@iG93&
ziUK!D!D^!Pc+ZNj<B*7L;#<c<EBz05I8&5b6@h63A007iigndTD}KhTeZYGe-5q(L
zClP`**3^sQQox>w`uML3z5%fWNX~x%*c(F4^e;V2di(m-E8TDi7{9HR*k$46p+pR)
za-kdgI6okizfJAP0CMR1iVP`I!zk)MiVS>3E>H@6*E$($RdEmF`PS(9mpf~4gYJ;a
zYeskTqM-9<Fapb;wo+yt%s3F<d7;KW<!w@S*0+hK#^azfL!CY^c+g>1a&wR1kM{MS
zxY=E~G6ZqKF`DK-#fd=`_+9e_@}fG(AUYQ{XR;S%DnvbmIh}RSj$VDiEhYc>7ks?7
zEi8eO^NE@vycS~AD?5Zw$%BGpx@-9AKSxPo^}GSH20-$39H5gubo?I2Frx;f6eD&#
z(4>=pj)mdPb>_@@(oY)ZEgp~Rl98VYD75U^+N!`^<E`Tz#RZ5$j3qGYb}LOJJ(~~r
zN>khBL}+u=k0+6&o#-a9hd^?Y5+XsPhK2=Z3K`bOskYDr4g->noCgs>46R3{EQ5<j
zU3eo>68JJ*b3=4T?_X+?UJ$Rp@>2yrnt3qhGk@~Wa)4htqJc)NsrLDE?tTxqyz&B5
zb29#Y+h8Mr;F<<x3{ooG6tYJu3j9Xt;$j}gW1hg1;0m9XhJvMzmad)b-%8faQd00+
z$Gr2DW((3Q<Hjt^`0Q43&nFb_&CqQ#`Q|Z*pzY2Zl=VGjSdyo?o0s;Zv>n9>c}^F!
zGWgG<ZRBq99`3c<miSBen}|ccv<4a(<=r0QC3%NGrJ#~=t8(yZL`ndg6QkfxMqJDy
z(J<Ag&qsba=lMla$IHO<pntW#>yOqaS5q$Ey22Q6DVK3mC1AYC8}a><j1HUZD_VO0
zjTLw3+TzmNyKCSbO)F7$qjIGJq(=8iU*PC{YTzsA|DfD!^u@#*1JWsilPX~In{`Xj
zLjh)PVp={Rd1!J=$mH8?CSC?i@>j?qHdfP}wL^Tsr=-Zwb+R~BpC`tP@dZ_ng(6zf
ziI&eqfJ~}oe(cKxN~yBM{wK$*JrV2av^~I=VG2GjN)}T~Sh7@-P7!#A-Blz{0tD`<
zj`g-Ni=na(>uWUiFFW#JV=ooE&mi#_C(H>UnmmE&@aO*(F_sufW4bP5LJNxI&j?1p
z51grTNWL%_#|F<=W=Zu?q29d>OB=8POz#&?SEPc)YR4)cFc%^33fu9<Kc3-9!W-;>
z9PS$0o%p7AHx6EBikRo-H84(%LBgDhH0w%JLD<ZLBQrNU3-4;5TgQGrqThmevM@Si
zEOcgT>F=d<=?rABu3ldUZXAFMT0recw9uJo;Ti}<=w0D1c1>&gIEr%C+FE|*40$rf
z8BYwbje!m-nTe<;m0VR=W6|<NV#zW4q1dmLBVLn$^{j#)N>l?n{TKYZKD$QzXX$eB
zrxFB~6i(7GPGEKei^OxFBQo3i&DMrFao)?#_#dI-x-yD-2pLtfiq0nsF|40nUF3If
z2p0po^ygxMPhK$SflPwHqJYT0Zl>7XAVk0hywKA8=Qp~Oi4jPqNa@8bf6q0zxR-)U
zO~3AF3GBSuRR*?Y=(o_5TyveMGm`-<s99@_6`EJ=zsF2u*%s=~z`^|OE?Y0r*EEWO
zyqLWPz9AQPHS<rE1HiZ!J3}!U*i4cU?t*c6=eef)`=&1I=*$==!hc0L)E3i}Qr<Np
zxw`;bX7S9Zis>;-_Rx-YvwsSK)vsG1rVni$gfQ5Hyw9;OerLwVU%?S(Uv_W@{*+Lz
zcNZf+r=ED{%jumNF+YOzLhMb$4hv)qbN8N8;C7GQlL$$!EeLCj)A54<as8H2$O|K)
zsGD92-M1Nv>vAdh!HK|?Vd4!Ezr-}%*Fv8cuPvr7K4Vw3V2z}cUIM4=NLTE$WPVnt
znt^&}9?t-&EIG#4*G8kRkNd}}C*-4#P&2$ZCh!-Xw92_Bv=dF4Lf->x{!W~rZxWy;
z)tFN_{k&Ipmr&@7I5NgQQ6(MC72(w>MfCY7!L%P#0M7}Z-vFDz{k!9ahxTWkcb^NE
z_JsV$!vm!}xjFINJN;LnD%;>Mz(mYpcc$*xo1(TmT_mFrrwSN;Fb7L@J_?Oq-ks`*
zMrK4+6_sp5ST)zqmG+J<s{zjpR}!JV1FWbG9c#BCN!+jdR9hHKx(fthVXd{4f{W-H
zwl!O5?|gLaj~}l(zr0Q=Z}ilQ$hK$g^L#o!$-YWCwL~33H`)hTkbCYCmrrCS#+u+&
zxHVnDSZ`KC{;%u;5j|;1jtO$A-L&zIRXbspf#<o&;%Mx;?VX`F(I=unR1)~@-GUvE
zcRc8<4Gsq;6xrGm8p9}D`o|!c$j1m9uRCTY<NsCr4)_~pxlNR8!U)e?JZ(S&qiM;L
zm+LLH;z&LSBJiFkPAggE6!#`vehoY|GsI2fki=2?%k0Jt!cO!ofFm&DYNl~Id9@V~
zq?|t)kv8cB9-f6J6lEQal`f+1-Z8BCIZap0@3w(CizD(~lUj2&ZpC=!lV|zv2VDX8
z)?*Vy^0+MWemI>mkq&CnuF^}tTIIlvMHvk^db(;w9E-M*iUG8=9m;<HX+W_4@rowz
zi1lhM5h7nTTG=ocLn~k94HW|1aMhTbjy?LJU56D+0Cgov?$?pf8ocpMRJb#ZKdoUa
z&@!qXE(!Ax8|W$OV~%;Ge)K;8AQtbAugwQNrSy$*nBF-4D3ze=K#y{%ATVUg70rZ^
zJ2<MkPEpdWnf*qzrVuj@gthKd2lT;SWSDx|$vq%(hoh_KfberDJ5bkMyIU!|J6~!I
zslkE~-k>ScKosd<Qd|Nk_ls+Huljpngq#zD*WKJMrVL`b$Ze$7k6~_d%`1amaFy!;
zes#HmV{`e7=>etg&pxeUNoW5xWzlcG7`RXc1!4zG<7~&=0mrN-x`trC{T_reSwC>h
zQ|lKmfPTn;a!bNSBw^YNi%(S)j(MSh&Z{4s#*?f*xn9he(tJn$R~i&0bLKdzGwz34
zu3o5EM=d!<t7@plpE!1XP(u=fi<FR^xlnDFyrV(Yy1v#?p!;^JU)N|2UUpc=>Lyt)
zf|k_ZfF2~!;-g2Rq19Axubop#{X(Q88~n`Sty9~*{-4yi&vmmEX&4lL(P@wHam<j7
zWzMIho#DqxT18C>dH<#^){Z{N0-u(!m{n*#R3`X9-oEW?<nHiT0cfAOHcx+j@_J$l
zKT2YEa-uDVlyTlh$QaD0RHUOM$G#YN=RsTOg~iWYrC`<>Ap<wGrY7mdP^KGTVqu`g
zWQ5K8aoc`<yuJ7X@rLDR|2=`v)c)@a1=^BN_#)02fl-DgG*zgim^AaLha)R|;RrLW
zriX?NK1bl^UJn@8%yNJ-X&5kAgJ!>eYtqqC3#UCCeL<4AK(uuWBe)N}P$B`)gZITs
zjpUfiSih$s_H78bac`J)2d7)la2dmWZ9NAc@5X!grO_pNpXZ6Gd&-e?Tx?f-WlGrt
z%NDZfO`H%&ad&1XH+<_6(DwDO0=xmWFqNRW)lLoMUVb-}7ig@bN*Kltw@#gH5tNGj
znNaR~KozsK?CaWmO0ZOOE|fAu%p0!D*i|+KlQV<QqZ&AktfPcptHH&lg(8X^b^moD
zKtMzxjzJ);q53*X<O|^(<aeD(n<CyZQxyuZe?I<ewmU#JEpcY|Xj7hjzr(!}=4vzy
zDS_b&PmM0Cd>|d9=9xEYV$fMFEZdJ6>-|`BeQ(6dXu#lU_LJ*6U?a!m(9J$FVM!?+
zVeg#|Ph6R3ZBVzBPEl1+iAT?YG6B!WzE64cF7!N(1l&s_48o0|Il_^aC7?r0`?DPo
zYsha9`CPu+_E=u?y(hhN9y-vD_20WxG^qetO2jjrs1sm5UhMMPYw<pH)JV=kw2o1Q
z@f%j+JW#ZBX1LFw1q*5&9)k>0iEo>3g1^9AqvU~T)1%L>+%04e$ZLP>fBS<R^@m^n
zxBM+iqiJ)o0vD-+RFwEx-_}HdwJQe{rhk=Dp|bp}2{5D{yM-hOI@J6GrV>RGt_(u9
zvxgzWZ#EqQ`xY(M4;wkXgmi+YXi?X0H%9u6Lovg$dI>FBWPm<=l#B9Ez|<K&<A?t7
z=^Lf|Sr3Es^_if|-`snCiCS5(bgI}&pU1ln4*&AE>#`gjdrP?TVWMZ%!>v?><0jnm
ze&;>+jIB;EUz)J__~!;a;cRgZjlb9aM}5rHZy>TwF6~6PsLL{-oV8955R58rouA%B
zi!&+(<VeC)<#4`AB8LhPi?RDpr;^sdPv|=)*%OY{oSr)<PMnI>M2$eqE**kcnf{5M
z0jUuKDxEG4Z=c+C4Uy?3mxcxDw(#ywQl7=!wBk%h4Zdax7<xjQ`x)g}*nm|99;GS}
z(2tq0RRt#aQO=cOX_?`W;GRpl+iN5Fw)EHik7Lli1WdfiXmW7!!D~CT;Dj<^s*Hb9
zLe!GU#{jNyF2jPXS&>9ylG_&hYekNSlFC8f8Bbjbe8}j9bks2=qkexjDKW%nA^W(j
z_30*aXCZeE5>nos<USpul~Sw`T5*hu4xBBxSH8b5`{!)_`UHaage$v(940B4h<!*5
z2+<0RqQuMI4zL{D$Q8|y8s@Pf5=?57%R~)2(?F1k2f>t&UbQM1mxORfeMLosDa5s5
zTNMO!G{<1}DJ`+dvzEpGl}|0)Jd~m`(C|ZLyIBJnsF5?vh8he)N}PTQ5zZP^D$Y8O
zY`|&O;QjtpV7tvAF>|1PzX|7m?m{7ARGSJlA837Q=I)zz9da-P0bZA3Nxp;%y?P=i
zP(_MjQMn@Z2QHPj@7zeK17bT7>0wUlN^lr}6MR!*=bYbFtvhE`nIi4S-8kz~)Z_g^
zCa|x5s2ZG>?%unPX#~l8WOU)tzR0&QR_g$95f=X-ubcV>;rXblW=*=bS)D>+t4d`X
z`O|8e#SGzuVw|fd$7UBXdJR+Tt_@^(-no~xC`6f-^gkvmn8hTKw41#p+yfMpXO=J>
zfpZ?8Nk~0I6SxisC2p2sm%4?1g;M)?nlZSBG+`(6B26JTr2wvbeXQ`Oit`(8ox6=s
zra%7YnRM@P(bc%Jg-qyNlEo(2rPpH}&h!&{Zbv2V6|w;ruj?d(hGG|-ZBdJV1ZrO+
z*jf9UasCZ5c9f>Tu(b};sfXvUXi2l6IXL%<;L?jyFuET_I=|UCkUYOmDLmcZGPJp)
zr7p<;Gt=)IYqfDbkdZ?h`8Hxn+gYmp#L!kZG41ACt~(DE{Ws?xJP_7G6!?vJzmRLc
zead1q)!lRZOgiUa7!^VVc?ka`v$iPZ`YVHCm43o)g(;Gj*e(6%z5f_qe>~P3$Wmt%
zko_@^va+xSKN}LRUQzSVl{Vlla1H6gvnB+=l4KStGobY$Ia^zJ8*n1w#A{FUw|+kf
zy5ZVca5G#pm<p&cLPPxfu#UhnCo!0G@n{Zpk{E+cfZ2OdJSz^M*!tQ7tX#Yry)|<i
zDV1BOh<LmOB#4^Z03x2_-`<wj`P$F!IVDCg^2Sp<|6)L3rqt1;K`EeMi}&r8tarRj
z7lfQJf)?P4^uJqlwtlJcJt7wCPp{}-(As~GrNmkAKyLDulgOxI7B&e1er+&9=G#a8
z61I@mr#Dw{f4@QP)(|R>pO}q67BAYDPX4PZFWyNGVXZGHZI#1*`qSI)@D4(BEL9_2
zWCQ(Cyd^N)EePc<(1b_erSS5YPxK^I=L|^np!L8p4A6?-Pyeiff)=wXFu{x_OKBxs
z*A*Tmb*D~{78{fE`H#-k7E)K8zKfSihZgguCcjJSiReEY)b~5r4tnYIJD^fBW_J1i
z*ER^^<pm}PkbP(s)Sxa9$Pkmw5Osxf>L)D83Q_=&$gspM*y3=V0IScmWa}_Nh2R0M
zn}YW23-`4D%I+<|0PwEwx8+xXUp9V)Mp$k)nD2+)Lt-d!+=lDO12cHOXNo;)u-?pz
zE@OR|HK$%0ey!capf90oH=$D3d*nUD1@iHnEcZG{R$qzOSYSyC(d?G*b_WkJ^%{{I
zR+sc;^bOl}n}K^MWNq~f9Z5Dj1i2R|4{MCXK=N3Vr4eqoU5axZp4Af!uYXMpJS$1H
zaqB$y-3|KR4JUvw-9l~}nr?=xOv<>00v)NYT{Y|A_28McGPe*(hrE8?!Mm4;*6i&9
zrRhV!H=M}L)&4hJQ8b~(`|iu8WXV8*H0|qnYO<*bD5M~OF3^f88DY1tIi=8(blin|
z--+TU6kr@Jz8TZJz-X9%dv|Xg>?EjY!#-)VL$QDMjT8tkRi6P-)`zm{G_31XG8+&K
z0qNR4wV+Z4^@j%BO5diL+LWS}V?mt9FKDb5+9GRBP|bcuh0jxFxMjOwVVysi8&KR%
znO|#bReI8gU28*m(S*mpwdl_;iMXI25Tv?wL`@Aqkmw!aYG^PVft>67MSueA!1WJ^
znO7e<k6I6w_3sNrFtQn=XR7`A)Bpec|0nSO<_V}$_+Qc5Ncae-RWO*`0RAb-smm5g
Hn*{tHMCS4Q

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/k8s-architecture-multi.png b/assets/documentation/1.27.0-rc1/images/k8s-architecture-multi.png
new file mode 100644
index 0000000000000000000000000000000000000000..2c1c0fae08c13797d79bf30182b9ee27a94543b4
GIT binary patch
literal 137762
zcmdqJg;!h6w?7QQi$jYR*R~KSP+SWIiWg{$mtw))J-8JqZbge*g9mpHZbb_O2<|Sw
z^!duY>#p_w18-KsnGAd8oY}Ky&z8?5Tuns|{|VI-6ciNv_wq98C@5GhC@269Y)oWL
z^!pZX<OS79UG6PP1?)Kj`6bp=>%Ez>GRjM285;!?6%z&RF9`|&`G@4+WmIID3I*ez
zdK8pTsMP;08=$iP4}GWw3i`ik%#hc=uO#FL+4|pCv~1M>=`kDdA8M?YY_$KB0UUpu
zN%qiAAul-g^4d-)DC8u6Kd7Lr3FL49xE7jP&RWV!!p3$sz^^8DMy5b_8~eYlP(<B@
zkwqI*=dbkcHrBRI!tP>>|4;}c%YUo680r5Zakdg;)KXTXm$q{>rRN871GyQ+pU~6O
zi#nQ^39HM<{<}Hyn;4_Hv$MT07nhrx8_<mxXy*vxdMzX*#Kq0S#lypiq~LV&uyy|G
z&S~q!^si3-(~pd)ld+?Py|aa#E&bnqzZ%)OIEyhd{=LzEU;lbeXA86cxs$EazlVh!
zAlKjjaJ>d{bN#n(WK+?<wZiJAPIlHVf4l!^YvC-;Bl-{V|E>O?yZx(`s-uM|@_GL@
z6My~hCjYzc|I$m_+1NXpIywENfAeqp|6TWg>DA2bob8ajcC;{lZ|iL8h;01tyZz?@
z|Gz2z-IplWUv~X3_Wf&a{;5Syj`$N%uK!N7_>-w8JM2h_L3uADrRk2kmx-0~93FRB
z3Nmw2nXnA3`Thyj)PgkZIbPksRh7>b!FrH#td#lZtwV2q80vfM1<);l@vXPYT!uq8
z4tEDDd!VF$kR#0F=X40-@Jq|@`2!qkw$VqQALGtx2bcHfB~WO|@=IcV5_;7CzrVo^
z%!b{jm2<^fq}=((6-KXl<RUB*@_6A!{n*D;jf}E&4a{;%-rd6xVaqV`U4!S7_cm00
zJx8?Nt$|k~Qr3NrTT(*n;`COZX~{h5cxTWy&foi^t7k~=H{-pq|Ms*CgEILO(6(P_
zlB32%w?1kJlc8VeeODi@M`%o`E-ZW=ybd+ZK&70Wp61+gzE0WAF7sQJiI{{RA-h=v
zw@+R7e8;6ES5M~s2t#1)WM%<D{W$&IXmjgRa24q`uls4~DL9AaT`0Od^0twZBQ~k(
zT3SHL8|!1|1ss_tM|d9=Brmk7QIqfq+Xc@-lcIt9p&TM$@=-FhQHom9n)OKx8qfW;
znW=z*@$V=&-3+MGJ7fuAs3JwExBjNMZw9UT0f}~FnbLD_-$nlsh_#EgFqp%3ZY<sP
zPth`{Ca)XogRa>R?~&ldO1>nn+I0k^7ZpQbAGeW@MJ<)hImNfYfX1+HNUEj})9Ll}
z5}6S@x>ie8{3-F%o$giU^099y<9r)*;ZHj(lO@FK36K{xD;y-To|A7XvoTR%v9>6e
z!%Q1wxD;en7W~?^++AcQqNbIll=dL3-^D|ngdRM_%)Prz^<Fg#BNgr1Y&FnMy3N$2
z+rQ|;=#z`r7o8S01hd}HPHf9FIzant_ry&=RV4s(tS5TOCTM`&m>=K{LnJwTn1D|e
zfv}_8d(E!iWDiNTy8JPI?iUZ$+qtK7>}Hk(yq7hE-RU@Zm_^){Jy_p3Z%<%H*Wizm
zP^gWFHS}7|IQ3wNfajr~lKiMUK3O9hFcYx?G!BOoGoEjcVxEB#ovK39cyOR+THE!A
zuh587z9de~Xi2x3?5uBd^W_rM%b!i>OYl1fq*M&_m{3V5Xu;5=<CJ<{QiA>PHQ~~}
zVsViC{E^DyR;8DVP?vkltcqbp;zvb3qOfo1xw8H$hebKjfw<G0DIBzy@9aDIB>Ugw
z%4y_GHLhoamh`!aw>VD<Sf1iHua=O^A@r3yC<NTXXc)j(tlW7*auXww-EdooNe0Vq
zlswf|NT)HKZ;&LNU?-=v0UMr&NH!kNju$)kH8qL65a8RT^3zF|*HO-6>v+>!*+b#5
zqR1FCM$(WRXa?1ZX7aAiE1LaM(~)|DZaJ)Z+<&PMEO3Fx_1Z|gQ_nQ|7U7Rq?sZ{L
zg`&f+BO0kkMbYCJ`v*N+om*bMN@@k0@^0!IV<F{vElaY?dwYm>4u^h4X^6~|;Oyh)
zMdxM_(vU&EenEUzmzI}>!ZZEQpD8pjSpbsf_e3c*+^SEMwjC!-1_Y&das-}To|dv7
zh5!q}Ct|JuQdEgo<fV(!X7v0d*b=D1EnTC0zA(Z2XvTrT761*Dr1L-lyKVe<vJv${
zCXeBrbJB)}+WV{o{Y<~)Ohr|~qgl}?bb0!DoT-&iY@5rEv34)FV0~^TjMYp7<9sol
z?N<VVomt;2U~H!6>fi3nkn>278mE0prVv66&7kIiX$lFj{;AS}K7YQ7X_A5PQHQGB
z(NuS+vMdVDef`TQc>;j^%EDrp+wQ9#c&F1lSPz?TKq2PfoXn;m_<>_Heq#AJq4{KN
z2K<oF7l(qwEChyP{9JQw$y<;$oX2@dV%x3rR(*Jy0__ac-`E8*i2b(mHWm9HRqk(M
zu7%Q9w_C>f6q@nXT==BhvVcB5=2}3px42BV)m_mD-@oM>2;l75ce+HWu;N@`T%Z?2
z-hR2hb@;qu%;^soGaHlg3C|>p*vPkb`5<Yd^shd<5U^>O_HL8c7q7z4zlDY2&R%S-
zO&fekqpKoH_{BWK64LDAA-@~jK>Lf_AK(`9^l{iz0;+*y*C6NXEC&Bxg8E%b+WHN%
z0&NHk9~G1gnt|AMz2j&MH9cR^g6x+?X?V<rz*X!TSkqJNn8vnV569m9<nTM1{u3S3
z#)jk=H$ca?x4%tgG1jR7Ro~XVL$st2{x*3i7?}K8Mj!Uw>CXhbY@Xu;6t(|a2-ubf
zOg8k(+5;l>l@W=#j#_BFt4~EU;b>yXAA+}8Y?e&@14mj=C$)P@Li$>o?N;FSK#9cV
z_DJC<aQC8$PeV<;|2D<h^+ElUL_Ve5++VdD?r&Dk&1=^lJ1v_X?-%lHIL}eh2L0xJ
zXp7|R#~&Eg!LCCRalDx?*N?z9?cW`)W^BG%6wn(^c>}gQm7vjL9Vio3YVh~+^uMsT
z^XbT)h0d=jWY6tID(l8XYlGJ&IoGH9CQF+rEpcnh<@Ay#_u2~X)Q6+{V#l#OX{d4V
zGEr#ft=~&!S2W`Ej(ZS!3#_s5dvP1T?1#m!W#A1_lys_m%N1L>At?peH7IAw>|A}q
zYIq4|Q>h=yiMN^AIvSXC%(apK**uN<z{c*oBF9J6no45aa2ejl25w-<MtGjI&;>}|
zP>4@rPLA@`D-NDOn7K+n*CB>VsdhXKjIf+q)%sjrJ$!gn0)3-15*<S6*9o#j(F(8B
zAQwewi+9Bt2u~RUedw#H+Qv-e3c|tW;~1-flngBe9cFYy714{(K=lfKcDW4I(^Agv
z$6^-(K^XjRlSSrTKP8Lg+$<8gG}>ZaWzlc>(!U}rWw2upaO5s>=fH_Y!O15;eRZn4
zEEi|7ZtPyCL^0exDF!+RO(&1;jEO<3f8%Pl5y<WOKa>$L`qX8p-#0!ReY)E?!5aEY
zl)11$xLx^_%@K1nsW$R5G%rgO3n>>FB<9wQL?`>Ub5fPkguGajLyU7$xL*nJ&Di=?
z2(vhA*jD9i&@FF8odFl%YRJJxD#P4cPOOGIspcx;GQE?hz0V7_b2`S>e<5|!2L?k^
zU&UMYhh*t2URM0gv?NYG3B?o6g)MEbqETQPran;gnVs~GW2{r?S8|#(Ajop(H0!O<
zU2F3LJ}2pbEFh4P+uLq48`u}vrI3Aa!RN5G5_O|{x!U{<O{iXWJ3(so+sol&A4v9a
z544u)X8ZtsmVC*lPZeL5+cr4!?5hyx%2uRJ*&%DCD&Q+KH^{d<-{T-8ppfA34xFJK
z=%U%1xUK<K#d*H`^44gc?`W%mYfdh6)duo-Wns0@eq-ti?l|n;y$61=#*&Sai<2}W
zYUpM<KYt7g+xIdon|xY*&!1_ko|Lsexvsg~6A3JYl<Q`R*!UcZ@MG)4684jTZYAr)
zt#cQ*pmsFmf{~}^0~cUusF7a8+oRv_N}{d3+17X2q7{*PZ_BEAIJZ06r;>R*k8^en
zq2mvTN5fAM_(`+w_dGi1a4>>pG!(N}49QrWciFB6Ax}+rq7GEo9<TPmXZri7Ot=t+
zEeIzyc(7@>W^UoFi(@QiOo_LK*bV*jHA}W5okUtJ9-jHI*zre_ymLR3>-xBtDc_J!
z^a6Xh@$&g`J_EghZEzX2nq)I(+vT>y4UGge19Ql2NGQ<-D|-mv{Up!ARST+@eEp>e
z^}$+wQI~-6CA!fq8EGN|EBu|_M9mQz#XR{@F~TaylA@dg7C)GKKt4yz{oS+kY2wnX
zOV_VT+-k;4S}_(8!mRGCpuONf&M3+tKR;FBsLFvfELXx+ciOi|>mdf+jEf?$s%tdQ
z%Cc<N>18+-LN<BxHlfK|2FR+QA$L_#&7)$P3A0DErCR;OJ@JF*_Bn9mL2t2ondIqd
zak2?!J9X(-TKz{GT7}IKj_(@P!K3WkPE4d9l0^Xe2V*!N*xcLRDuVpdPr@30x3Uhk
z)>d=zFUtMhNSO_p#@ttAOwR5Zr=-z)FZX`|{aZz$e4~XDyL<aG7CYF7b;KD7G*zT{
zMG0vZ75>KCPGeb*DeUVe5=g`K4rg&Msh0}9YyA;Ik@(=Xzq_+h0Te2g=(^?w#QQB)
zh>twE$m(;}=I!4X`n^*fTteEsQc&Hdd@9m!|0|3XeDkvhO`hHtM~l>NqBZPslwEGJ
z9#~j6I?m!zMe3}2Gae-xKB1XhZJkp^y62xM$!m1Bpyb37ecjCQ<t)@U29Ekd6=@R5
z+>#<!GUnUESKAk7YWkn!v@qn{_WJ>p0=e|STyp7i7w!esTDShB`##gt2je8t=FyWc
zO9&pi5G=${1}7iIplA}hky5s;RB^*%mMm4T2>mY4+jH67$!I!l_F6cGx&e1~cAr{d
zMEbrkwcZ!okG%*GN?c53IHH9PPUA}>5NIfe6!;r9wUrZFhoR43%hHK=3>A|D<D2T5
zxr?2Jly@62PHf_T4rT6nktxQU>TW1PjK-JM${LVr61lbfXx|Hd_T6?lW@|9CgK=Z(
z-J9r{k_S8yuo>R_kb-IkH@Xk^*F`@i>VF{E{53OI*6yP?zMLeRP)PJi0$xaGTXaY;
z1ok8wGGV7K*Ds7OS>aCWEDnt6!~t6RWUFuqa>d!emx67oF1{aUIK?vX*0(6+=~=M(
zY7&^Tw|x5>VvL#@T!dV#OKA&T0hx0tc*-t~Vq@?r*=&f4seyz|qH}7NDZQ~og1War
z=5qK6mYUlkyF;N5R_9@en*K~etHvuu6NQiA8|@4U!^&2^<tt7y%X2Ps3aC#V%L<+c
zp6*RTtjFCP@OEWF(0gc@iLlVA((Q;Hd`Ke<-WM%Lbwni~rhk6oGnSBw$x(^pUO;Y9
zy)bEr!^(##v_mJ`jd&y1WzHeG#aQk@W4ZVA&v2BQK=~W_e$*=AmqAp%7ux!^mJ!>I
z)UX}Lv`r2Z-jVgH10UH>)@V(Am_z{D6QxC|zXCrX+b)UO5F;fE49KLHm|Nuwv$WO*
z|CIRrYztF_*`m$@rC2y<O18>k<<|qC)R#$r|FXZt&RUfU<vBJEGZPr<B^xQS{&fz!
z;>jD)k-Gxu>C-vs^_&gWBHs|>Cd}B@+S@9Yt!SeHlYX-&>X}}T_^2lm?XP{PNZ<Yl
z6hY2(u5|XVYo@ATAUNX{wyTuO@^k`R7pnKh%$3b)cLr{VyX4aE=zpnAxX9<nwNI0k
z@R{~^+OU#fT@G>fq?h?(?rmv^S-I&gy?Ag3P%px>*2P$^U$A)?%7<kZ@kTlEdglTS
z;&3=F&L`wl>+IsA`ANKiwdcsbftlzL-3(TlfJeBaMmdYVTSo1u{KW_q4NSZ%i;Zs!
zyytsSSL^1gEhTPMN87%4c(H1{Q=xt3f)KrVr+seU_BF0UwX+<_LSm+|xd0tK$WwyD
zHN)94Pu=r%*@7BiJsEUy!3W`3aQ)=UM=41n+hXLe(Iih_i^Dfe#}=|hygizXi53^~
z-HeL8gs%KJ#ZozNV<qTRcORVr<cIV}I4SGz!0)ci{Jl%=<LsM{RU{Qrml%MjR%4F=
zo*p$DF~8qVQzq=89(UNz*rH!IL+`WU6i@0_ew(FnF-SfbLyQp6*gpHeJG(VDAAd~n
zktYSuL4+aAQ8she*$zo6fv!2@Paq+GQjWET{z3VY+(x2J$xtwlQ(DoZq3?$z8!vy<
z6X~3c=C=1@gcgiTL(qi}{!J(!JbG^fT$%*gG^qNzBqN?~78k8v^NxEGmDV5Bqvsa%
zVw>+gC8?&YrE7gw6+?|2w2^dn&h?YmdNG}pPq~|PC*zfiIg)OEr94j!=oNmX&UI9#
zd0Se)m)upJWA-j>NNw)uKFay5u+N1gj2K*Ut*!o5h{YCXCNMVxZ`%>h^8=a@yme(U
z4JXiwj);Y3fVE!@kx4v_Vyj1b2C<R~MCN+#Xpq!<J8rpH%*c{FFO`w7{H$ZaSg$4c
z`Jg9-(r3E`u0ECEC$w*}q|WX*Iexw-$`uVk&y~!!FlbFll>q0Q{x<wP87`qbmNh*;
z!s>`#hgwTqw&KMsv*YCQWMHY^zqq<}9yzi#u%z^9ZLGt~EdYAzj^iZvF^C|*6Edm6
zWk3FSv2A^L?nR*M3OK(<w<);JaHgp5M{adkOQYXj$RYK#dkdUupQ++Y7ct*tTO@)u
zc{o$;t5D$f-bEpkd#V@{S8EHKb4{K_fYpKxWKXvb&2NMgDRCc=66a0#R8(f261AsJ
zmdSLqXG^nSWBB0V$_kn#5I3<0|K{~>G980&QuK*5yUF6(3g+HACNgHQO`OtV7?t1n
zF*$wT@53}4R!U=P`YRi_r7E{^g>dz7=&~)X_`GUh{d#0YVfGgxV|CB3?Ayk;zdHGQ
zJc^lkoj1W~;;3XOK^5Gb`z|>CrG}%Kn_v9`ZXjY;gmCag`E~;j!j8f3)aL$`L;tva
z5`5bbj1+oH^c`}Q&b@<`x4jrs2QVe4p=;7tCKE-uhK$^n`cbpE#izFz+oKBvKd_hI
zP2RmY+giwxuu8&3I&k1QB1wz1q*3}gf*ZYTpa5BiD7o?{eV`bBOXPZ~rP`fvg1=s!
z1=r>c`Z!!kh<>?(uz!$6wfC5Nu9lq`+x<htgo{UNE7I~d_b1#|?JyIciRS2zv<^05
z^B6g3J;HNdfpxLL8wK1Hj)Vo|-IkXxRJ2da(a^-`Vvvq3HZ^K8U!6DMljYF+(V{mE
zn!U>GTqi3%E)syW3-6vypHC%pZTdR3xG$($+;T%^{jmPU>VDE9t5hc2YupXJ;>Vue
zm_1j84YlM`Int_%TJ4X?A`?{1xeE!O;Zv!l8|QX=xK|7UNTWVh5<*<mB!;iO>Kko1
zetAWxJegby*0ge~K3A61FtuDQqEbdnvvAEOx+;e_9_OLnHh_`rJwc};(+lFTZwq~R
z&VB0O_%1FZW<VmfioEJv*>Is_eJsljgX^2wVC2NI?;D;jn*CdjMMb2s<qJr5&;NB?
zcy!r3`?zRHt){PnG~;eqv!RPT+m4l3lW-Z~p56P{GOfG#*3r(E0hPZ}+tl?9clS@Z
zJBh-NJm2~mhX!YbL?sy+riFGKXIGDM`M&IcF}_*F&$o$?9qI)vUs>As0A_9_fW14{
z9cn@|;Z0UyiQwmo4Dpa+iu;bU>WbRtAD%vPN69+J4<csXezjQ|_5w&&2;vlVEf|Xi
zYX~Rs6HX-P^ZfjsmPrB|V!3V9O!mT|^qx5oq_8fchAZ8QXiYFsP}w5qOP&g_bL2{X
zN5UUKeb<-I8&HwLuQMTr8XkW~2#0=acNGl&VNfrvat%_RX#X(TOkE6Xvl7XOM6Rni
z*0KGg2c`|Z=zH}v8pKI)9s(O8P1z2??0@vR2bSI$um0K8u?Xf&0Ox_tk#fx_i$ZW%
zfQdehfyrfA9P)~Oizjv@z-ATQ^|>(8B^TN8xixK{I!iI~C5iWca9Rbe#|``qS-C^=
z7@jW&&r_aMq`pzlNT*b7Q7&q=7PHrTxcSYG@c%PaX_F97qYSY{d~Ms0GjMs|bw}ku
z$&^2&AEnvd(?H*<-;<J~?eDCjZ$xEd<T)ydkO;I%Su^?3iF>7zzccr;x7bGM{ZoW)
z_o<w}KWgYDVW3d+?uSy@-QSo42c%$I=9L%cKR@BSrC-wF@(3Q@rA)PzH?>GEHoh@(
zkNAnpqXN$u6g(yiM+_37os0x|JEg|D#5ycN2q1HdFZDBZO{b;3UQ@7_S~JH=qVF80
zbK1rf$hrtN<8tWRMkQ>Rv5Xn6m6i%yy>n^2P?117Ln9N@)6Atw=;sk~_D>m{g%-Ug
zKg#O^12#M?N#t1oNOq(Vo$4hFjQw7+mS!5m46PUc>`E`KC&@d4R4ea_(rMxRF227^
zD2=<}Zy(HRiQ7M|ij~TxSJc?HP~KGkl#}-3*SAqiCj669-hbYhs8Yth!esyyMW@mQ
zc8ACAPauwfV0=xRoD#We{BP~OK5}rxY`r3zg6LK4>_$-r*Df7)9PZNLc2)WEUXsv9
z<DPY3*Ndiow3qA7+Rh<u^Yb?3YP#$jy7kIW5pyjf-Mh;#u`cc6%OBAi`(y#(GV~2y
zx|xp3weTdMobLA6K_TqM_oQ|oLPK!WZsseK#CapNdVy`1>MIv#vKfu21OIjrswJgB
zBoVO1+KE9ke!p#TjD_mCAL3>%|A7mgRgV~GF(4pRY!ns}?>(gI^h7|<nd<k|LK?ic
zyDhG}(l{MYltNc1he1D2Da^bj_S(7*8yG5fT9i*=Apn7APZs&u?XQxYs>GFs1a_js
ze?8m!jrXU41a@Q!8EsN<1&WDv|2P3L6KMm!;YwhIUfy3s7ImmFQKj~Ds+gJ&Q4L=)
znn|}pM%paV0?eTs!rG17G14MVer*tSzLB?TFg}L?zJ_9kb-aGz;+?}}p92A9^jnGr
zdV%^iJ-bea2Od}(-guhs%^i)~cgeE9ruDj=^RoxrS9|&t#n8n)hp5FmY09+|WGLpO
zJ8h)jnm8MBFRfzRs5c`vBi^lXd0!3nk_(UHr|yUVxd`<`t9Bd<25S>zvxd~H9G;<3
z-?q{qmDr1S*}vfF?tU2{x@ziF>1CljS!Xk%g(Gb9@<Y(d?-zCl!h51|FZQvEpwCf1
zKH48(PwM<lQuL<;tFw<~>X%5X_V7xcZ++-$3Mj7gw-HR<8QooF_oS4aGKH*l&~%A#
z`6&a48OP>C$zaOcqcHyuBY?{TZDW>^{fMz(jjfv7=*;hI2J?)CXuP_j3`2Ac1k87g
z3SHd=e_AbxXUlA<!8>DB#9=~|qcu5lueEpuF@AoVBD1s&(Xa^qDRC&#5CS{mUK04h
zdWRHN+U}Km@7r*F?vPfeUJA+~=S^1*X`LCJmC?4^S5?m6lFDDhY5JE>7h_cxS7Hj5
zGk~eaW=umX+BC554lj3~Ut~Y1kT$f*C2M#U?KoBiyVi0U7pzID``Cb+z?_@tW!w9m
zpksBO+2!QHT)jq5SNsIgg8C{aN|@uTsQj49MfN_`+j*Im&3Xp(Lt0p)Pg{9f7E7Ke
z`MR$Gj+7fqE5lLlOzb3Dam1AQPGTY4dH0LSl3PGfg<QErGZBt6((!DidZeonPd;qS
zQ&|3}cA{0y+U&<{Rd-OIu>z}3W6RHTiY_yNjyL**SvhUaMu_Yy4D&ZW0X00m<hKh0
zQFV?I9p&+;?8c>T(y6%}pEG0xNicx9Nyk=WLfWKy5lYX#l(G-Tm42-<{;f^-{VP`u
zqx<pf7(6=jWD>4)+V=X@A!%2u{|`x*MupMfu<np3-kc!>uJx1-+s1-b!vT+sp9H7e
zl3(}(M@G@NL~=${lI=*zu1>;s?bV|9ML&6_h&A;|-c6TQin9)gbLRb`60XTh-IPM?
zq=5INy`C?GLV329ouKESIUJ>Rk~thmsAoyXBW!UAna$u@rM@{u+r{!DcnCo6RFXU|
ze=-_5R&6#vDq6rt$J^W&Mr}$v-zmL%h2TB8icpqE+anj;Nvs@<z<Lnl_?$YP!IbKV
zV~u9Xq;~J2t_2f`jW2Ri+<2y^d%jhee|i;<$4G-MNK5Jfz~?-aUgeueyX40=(A2l(
zb7?eS|Ee`1yz;7^p0#&bNr<@@p^Y>eMfTG}oAv4qc@Ee%(s9M<NTC_L(gU%hBC&L7
z03S^o^b^2@+Z`%6)ee6HRO}fwdL3JWvSzfXjN1nG^`2Nx{tztWNMq*iMKNvON0J0L
zE`;@0ezJC!6|$@`Ouo!zkaM)!iP&4z9qXVzBJp4dGLY307Fmqf;$?wTo*~@&GmdYo
zaIXJcM7F7N0;&(n<IZZ{T={)4r)wy9nb)<T!t6bSv~zW5ti@JEbHXK4;DmaA76rp<
zLvA-C{ydQ1tz|YO8)F?0_0w7!h2*1Bg3{XJ;jgmDJ;*vFteJ^Sk?JdX_3%ji_M=P4
zCBDmg@z8uukcD<2xnJ$we!EVY{<0!5_UT?Mkau_a?R&*G41xmcBQJb|uo&oD;RQ9M
zgFJEV1)HIsSc1pM(;s8=4QEB*kq#YO9}CHTWqL=}aGc9aKi{dknkwMhPmRjkI?_j^
zcD~GDFcMo3oGdB#QKaMJSk~*^*D7f*s5zFjUAE!6U!HoDy;AY)waq617bMYjzV}G?
z>7S0Z`^+T$T{w8IQ*o7>hgFO~cbhUncGsr=$yTDL5+I<<9lP9C>V=t5r>vn~j3MnD
zF0&6dD7;;jTSI-H&XQ?tfczDi1%i*CBn*h^5)0LTb$mC9Xsl8}o8Yj=GuUGwSw7ra
zUVKq`D7qn9Z1I2zUHk_7hGxK<p95zUgi4^K0`yg639pigCC0p|ldm$}TiW8EEqp=R
z|L7{5odZlaR_CYGJ#Y_7z?d7CBk$zKW&zIk%pYX;5BdGiF6kspDHUl<ZIn*&^Aj@O
zgz;?wi@(@6HZ0MFFuE`u{K=+SN-KH6G{TumE6^(TJsj@rO)pPevmQ)m;B$O)oEu`A
zoCxEkXBp2vpkxeC@{rNdrGw)gNrBfpx){dhPDJh=8)keXSf>sv=(dVB4Od3s+(cKW
zrMjjXhTjf#P3O@hXpazuOT6k3UfXxSs|eRk9ZvlH+%6=2Af}S7rf*xdAp|GNv&cLq
zaK%~Mbh(%}GuEk}6+r|GY$&my?HP|@%)Grcna-UKyka3_0q6Y7L^sAT@YfS#8yGl}
zOipJPqMU+zrUc#Iq72U5tw8GIYM&`+sPc}SJ2u!9Sl^KiGT{~dVR8LqniRzwm3|Z{
zB?7&7K}Jb$a0-T8vT3g!`WyZr93juS>SFpGX7e&o#k0MJ1Lf&o<M46bi3t0GTTaPU
zD-tZGe_kl-5ip_p{J8TyH=9R%SzkCa2s{y1#k*2hJ}v1^_n=<(6GvY%T>NK<=jW#G
z*3eUJ5wI|-mo=K0XU)#2u+wQbf?(^^o|}A{azErwvpI7m{+VK&Y&<eGDw+L@@+NuL
z;x_RKWD>sF8@}Y3;DeRiC2Kev7k`qTn4Yo48^`E<o$K_=!QTS*A-Sn_^JN0apYy5d
z6rS-ImuQJZ>3ww{K?$_ltas-}%#;<@NA1EoHGFrQ-71mYOzCZ>auF72Qi;2atDAW5
z_gJ5aHJCk#xuplDYmMSwVY9vZ&tVE>eHe^6W9Vi@UvU9*=IUaZeu(VRwS6{Cs7;+`
zvHs74R5EWb;guVRP*d03Ow&bZ*qr<nG=ZUSJFRZ=&G=MEC!CQLU2kG8paxymXLS1f
z-KH3Rt$NZS?)Jfa&mlLdR-;E2$HE5r9w?125OOJ>mAvB$SVBcZ*bw;|--ur9!JK0h
z6&$ON1`>?!H%xSfQV~DEcZ&{6pyXM{C&d$PfULl<nJFr<P!-15akER8J9a~i;%E%S
z$7X%^U-}S6Lji$U$p&n59jC5ytXo8H3`f-t(eHW(p*!@yX}>M53O85~-v|xF8zai@
zemJD!%Mnl}-xuJxwzNI(kN)wit8Be@U{tjU%|?c;Q!(6@NI7vzqe!6OM44t)F0RvE
z!X#s`agt)PJ-v}?d~-$mWnLD;P|q>=F<S0>dp0)3L<5lp<vaX$pC%{pONPF+E7{fc
zlW4V=wl&ufYq#!=B#6XLueI%^1Cl_auj0>!Maq)3;?n%@rTEXb9ZUMo`vvu3RLD%Q
z<AI>U;qw4Azr$=7At9U|Lg;e?>(4-a+WetK86+~G2tAGL;T80u?czWc8J<xr)Lam7
z5CWj9yuG};R^0t#^6T1HX-Y%yLDJ6@m`%vXq!H#IA};SWPmN7pl3v0<zG))(<He2l
zz~}o$Hx-$pERj0h8{Po9H&qH*oN{qXDlS_-*cTGK6v&KKYY=GYvfJy9TnT?qayZeR
zWQ-){N9SjUK_^d@QWdq#JB=VWdE_wN9nc`1Hm5^Rw$58sKXE*mW_|v|rsnxupWWd?
zs=qNpJVvZZ18rIH#M34_N$jbkO5hsSg76es$={XIA+<gFa?2U>wp}>~`?~<~hH*O?
z^iJxY+Jp(*Ph@U=4Z8C3HIuj&de-AOuesys${MFNV<=f0d}CVcu9(D`7O;EH0*uWm
zycQ;&?Q@t*jCBe#Ic$3-g^a(WyZfH^Hw5JDID%|)UT$e7PrgsLWTVIcvZd(Z>L1ix
z<7ziG)IJh3ZxIJp%doKp&V4H>hId^Np80rTQT4?nggC&F>pz+Z_1lK;9vnYua?Uk;
zmK)bG#HPjVL*|kYg3~^?{m)XmS;eLQGK-HKCs+TkiA3{n(Ztu<?lbQ$+R|V8W5J$C
ze^XfrjxoN_u)DlVTBX?eUfDnRF2-2yOXtd=n;r}J0bA>h?FvM$$Aa$=Yf~jD2i^P3
z?acupa}_0T%VQAb3T(!unnU-*4`u_JrP8hFn7F?%EX(fuYRqp2i3Y-|H!=#$s3O+c
zrW&PfW_3(%jGDI0OOc*xr(;B@@Jv08xHHEi3hc15x;rrD33(^d7{^E@ilUoWE!5`V
zOUKaNz$uD*e4Q^OVSnd**u&>Edh$-gOJFW(YCbb*Jb-+@3A17dp1Z8$tLZF+Z#_k>
zo9I+BgaAoGGb}6>1}hC0+dAt<G>oZ5$dUOKl0g5Dq|<X@pvXh1+|*UuRFU@+i)fG*
zmR`a2hGe@vVdl~1Uz79FlU_n*UXLS<<2r%WP4KL$GwsFdhv)0Lm+JdyB_dX7H#vg7
z0cSa*%5u6n66^C2EMC!iT2W%HNrAaaWm43<O~0YyXqJ;3fx9Orn763)aqaZjd~a58
z^{tEV$;p+<VpEL=_tG1lGXT=wpKNj25OLnmEew;d5;>ZXAMaOZEd6-ITDs1Qb@DN5
znDWp35IirgYi?n%VUr_Fs<(o1L2Fg(ytNeTf~N2s)cM-Pvkd@xJoGV!18{-@C8zH=
ziqEWTutLpQ8*~kEr=u{f<JgX74!TaxpftYZJe2_%x1}qx`tL64F$9cyVfR{i2c(dD
zcJleV62(&vAD|_4ao$k2HrQ6gUQea-*NWdHPRt2+8Cs;quWo6R7W?~2RX7uo*u)9u
z1F!M{IGcBE*>71!slw^pdd)2e$NIOM=0me<`svH%ipbZu*B&dq2dPWAzaGL{@$!Wg
zzwDCEMsw5{7#iQxYxJm2dRT)et*8xbGl^AN$IpR9aazM%Lnk(EhBRRY9C}ok;E>JB
zw-)Uy8g`RKvfpe?B5A>LuXW)>xmi9Vd|83U8zd`GAl}$~`DpRLvv=wmNio_lw4*h;
zjoyLeY{8xN@b=e&5!Nb|hMD8ghLCHCl$Mh>6rA<wB0&rChGR&N$)K9L@eSv?M3z7}
zbTM0s;2ujV(5u-oxXgXkVnrLo7ZZz@hjF<BYjqZSGgS-}$Px8*Zloz0l7iWYxqH(S
zFWWJm3q`pt_^Rl`+%6j>0pahm9dcTod}o&tZlh&!zhafG#~D_G>o?fAn!{HW(xt}v
z{P6F!hYZhZP(_+tF6wqhjTKJUjmSzd2ay_Y4?XQo#bF4v!IIl%SC6?8xHNtF3+bq$
zG5Al-eS4#u9e-UQQevzL@*w2z>X5AHH4Y$kcbffry+G|tkW&E@f}C``Y5k&w@R=0H
z5c$(*-}Y9xNvtY3I+O+(zDVp5dQCVsK^eD@El`@V;Je+x>lA8dUx$HDdp?*fNZj8W
z6xoH059gvXu2g4jWb*cEJ*w_4G&~mqPzgR%lP`ZaPI<j=Rd9{9?RYVf9x_$G7^IG$
zwLdyvPU+=kopT%;*IkI@jm1o)FV)0X!_E5f3(1$t=(&?kS#1$v`^fE$U@E{>CRtC+
zsthh4HuuJ34Fw=9y<I5p@h8mwER70vlJOt>SH`I1(b7^fSo4{)vOpo`gt?3*7M>9b
zwdR~%=(=v+%(QvLw0PPzfA8J9VfRNIf}PWTag|PeX8N_ykyUt<gv*gs_15DoRbNMm
zJx<Q|TgcxWE6lpoP`tp6VMse>%+LA)2wwbbmUr2Hz@q%7kgIA-680AmutFoSn-+bd
zEaS9;+uS8jIVZg#FW?6_9N&T`hSp&oY?6^s(1Vet`<i@T8J93CW<M}0v=~@eY#w9C
znqKJvXAo@JiiD*M^E{wwdy3B&0<l7a1{=cjBGz=0HL$LrnP}s16Q+U&Z_1m!#{e9V
z@9hJ312Qj<w75)Z&UlpD%->{6Ir=PJ{rKoB7v63qLNIu0H}Bn?CRDU*&TzIxU}5gT
z_TxpQeb!sp-pqFj(xJ#Q!xeX+TdsD(vj0Ju@Y#!eIl_4*4LXQKEWx@WWD~r^5VKA|
zvK=GoGvw86BM6CJ(vmQE8R2+)%W@eS=RY&}a4fMbxrw##=v8@HopOHnuDGcM1+mqJ
z()Fj0VGAiha=9FZJENAk-_G;1)XbeTc2GXw3sv=2u2j|}1S9U>wplFS`}Te$!KNRZ
z3YfZX;SG5e>9`Sc^V`3xfdPVU(D!(|wd`ziU=c4}h-<oD4>M$ZIgu=#T)o8hxLgDj
z=zs(#_4f+`^$Ux~rU`B~52RI64<zU_v6(jsU%xtuEGFugFRXv0^M~z>DA2KlxG_)c
zuNp^n4|97*`cA9@_BwH+$$P7TcR8!Zl;4G`Y`C5V=+Cv{)}Fh*Pv86QqDXj~wOqf9
z^b*(!TenF@9xHhR88ZP3Za%;(?B=rzTJ08>Hai;JA&2C)DB(Ac;nZu9;<a?yES7A>
zbvrdX>MsH(MdH$C>eRj#an<W^2_RFV&n8S^@gF0TgGEC`NMeu}Qg$A7O%@=biEd0r
zykkFinIeP94;<|RNcrcP;$hPK2403)&ka3L9}qEDt2-k`b{A8WV@me6)+;Z_q0>!?
z+D7Op389YBWkX)6BCUs6Chxn7VwZ*uBX9AiI~{q|P|$3GHo>90PdL6SXbRO#D1?5!
z&Ir?;u6X2k)hX&R?X9pC875O|`$8EWr)~cmw|ZJoNfd6*khX9p%PD5%&>PMv&52g+
zFTz8*Ljr2akq;{{o~d(#@SEip{GYl?oYVA=;ak5`miJo}ONNxGK5|T!D(2(KHpy6)
z3|S2FPs7hx>SOAj^fr0)+a9aa_1TjnqwId@JGP@q6@V$8>8<xMe{<}s^F~x-Sw60)
z=?_sh1s=l?!iMH0*8t%5sH0~LToB)Nq<3?ODC(-lXSTMwZ_s?0$Se|wnppjKDoT<w
zpN?q3A-ul)(-@$7RPcAqQL)D<sfSXl=DB?M-)EgucaQYuE2K_xM0`m^+L+6AlR~@+
z@$PjG!a)F+%T9uwotZ2jM*<#I6ZEqega=-g-n(%gA@e{3V?vWvVDqip!dsE5yFqC=
zX@c5fIOQE3G#}KK1ZYkLABzd*-ju`WU7notpT5xYrR}))#fGRH`bbXBUkM}Rke1pZ
zNpbQ0q$8db>^zlfj_)zL?NXJ|{VY+2ithF|A(&PlhA#&5Z|f^R*)IdK1vm?LSm#KO
z!*zh&k6FumzqZNPgf5)y7;A3%c8nia8(n-sa*cA6KW`Q#ZugJME%guP+3R!S{YX@j
z0|_pBVO^i9ROR(ye7eV552ixSn^Lb(+67KFbmVOc-HcDQ7B_^Cp<7xjMpJ+O7?8B;
zMro=QfW2RDmbx2OkdcdLE>APEsf0HjVOJzBJC!TKioX|s{Mzh18h*XR1<njr?YH}E
zb8smrmfbh6FW{QL0lKzb@%N>+!zwm5Csj`?Uu+&ty_sA7Al4sC_ulHZP-|$2fK@8#
zW3dw)7O*a7y6~Lc!6jBMMaZb3iwAIjOSDeEv4yGF8}63qEY(}Cb6UXn#+PjNN@>)k
z#&@KgTuG|#bjo+{>?rKwvhuTS!jha0mb12ttCjLvc-Wi@(x!Qz|5Gn8y8xN9&-t({
zMNRT`_3<6=#B(t+X9<B`0kHPvOc+}^f$*o8sK91kg|0aS|DDgCzxd_L=QQ^DovFWB
zN;k%G;&~jqiS_zG`;F#~EYFMnG&>`GhK<7C!M}alv>PoX^McA%Si9!+C2Y~18)M@?
zV>(x8(dEZ{RX(gBc#O3eDFeNM=sLSRq?dVOhgkegA&TQD>7=k>u%01fb{tE{e8Gz_
zmA-h^=OdnNJQwR8CuAya7mX8*3ZEouXnDih!pUJxp1`j5D_W9Y*E1Z9p|{G9OG^SS
z4}6k-GbEJZ6%tltqM1*TMi~<<Tf5Ij(p7LWBPP3q?Rk3RcWiV+$`lFORJN~JA8%2_
zlgcF{I%hmaq6|~q`$*>A;-jxh&D3UUacb)fy}tFom%u?=?~?TyV|${*$lk3zH7{0M
zqP1fwtDs`06P8C}T#b3%+;Uk|_8T&q`eJa|XC#_!vx~9tK|0BAftJ!xB4X%RAzQ?0
z*Si0QfnQ8gGJX?~ZI|=9;DHvQ!!lG?nOu;@5?gwCmi@xtXCKW;Xy8|<Tuqzb@kz+o
z;ec=E2T=WvBUMAnHWKdDTNx7NRn3KzR{?G4Vnk2drF7iW(qgzzii=%N{?9M?3~p%R
z$?F6ms>Rg9S%ELqPV&pP*mlrv`dKE|_-T|>CF0L@cUweH_I7;;xKcBgIxtII+CIOf
z2q_D<(y8{2+c6&(IKCzNk!J|ntSkB(eF+rYqds=@;56WibL3JYIOxDfS796%)oy)m
zO2s1JX4JC^>&)wtU8UP~8z@~Myzpo>adf>U)CBD|L-zffTi1z<Mvoq-YEnlBDI4_-
zw1Y?ptsN94C-)mqD?_YBN{1+WUL#7gfQ3(LcN{4#{)E4X7)T+x%H7Y@KWPEo%)q}7
z%+u_BvM`H$hHZjZJQVH$pjy1gKDx&ArBfin6nRr0Cka6wkwCPv4&OAOjwV^Xo^vuX
zLQH6rH*oKvw@#66%_K!)>Q?uJv}>>v*3g;;+*l55>|M|m!Xos(WxrJRS(ZE6CPkuk
z7+%qKn-JDDu#CBX##!U5?BI*0W&j~^FCAsQ6nv91?cR3wB}wB*W@_}5x7s85BZykq
z|M;*zB3`+$zV`zS<YpTn(sYki^4k1f1)b!SJJ(M<IAJULX82)i&2tzhoB#9<)4>aB
zlamA_FEH%sz*9!^t(kXj>^+7jF}ZLT{`vKX>8RdCghQ;Ll9x5UdciM42h;I<2JKVh
z!WcB;8iY9VeLKT3zxjA8W1#9=c!|Vd*`q9>d~id{CC^@@bRhr!2~1Tiz+Y7-UG~6K
zoO`-dIJ-8=<W5-fL2ln@xO;ZH%*0L?i9hJ6ce^CsHy20Zh3W@N?98Wtx_U$n^PI}Y
zTyH<qub27%7<U-wY*Wz_0A*+<Z(Q5JEo-pNWkXHVFECp&sHkD-+zJH@3-Y;gyqGlE
zHhBdC6JZCnMUxbon{Lz@uXk_3kC6MQ$X~442(l%_EYs$b5aC8XT9-!0DR)oR^&qWy
z1;no3WpOP7DBnVPF_P``dxk+A7O%;g8ZPTO&d~igu>C;(k*y>3+YS@2;#$JEA?7hI
zFmz$ETf_c^Gsp!+pKyJn$k&fF5N&yZkKxZCS2v1AH?SC@8ORz~tAyT|8RNhFJ}=_C
zf#1yPINUvE>^qfI`inj_g>_rOU|*8I>MlfbNi44?F@*lZE48N=0V(KRmqHh>*_Z6`
z6$Gn#LL}vqKhr)eSTS%JXe4owE0-iRqmMdLI{Jg$ij>`Pt#e+UN+;v<JR&ihF@}t4
z_IV0^<bNKH{vIglZ$d{f+Xc~L>4J%o!H5SO{s8w1ESd*u(k~!Qx;`pFpTJtY80z?H
z*#RN;FX?-AYSVB&N#D%8{NQg9Dy~lt*-Wp$)6Lhho*A78x9pNPqai#uyGrh19S`uG
zvgKjt7?Z-noaTC8H$T3ZHmZRSM>9Mn+Cx`zOe|+Ha#jH~jEOrhD5kL{(}>RVicRK?
z<W}oT`3I0N3L2U*FF#ZR6SlQ?{E2A~Vr`hAV-X`>KU;YFW$1m1-<bU1@LKIF?q)gY
z)v3>ZiXc4n_iiH1I_bFJT3Q!=wc?4)JB#_S7fn>AX8WwfdZZCcX}l{fn~Z6t$FK3A
z*Oc%?@X6W}KGi~xM*2QMch}S9sFyZ({eVUyE{G6PLJ7%GpR^QCX(syh?Ya3iu6PCA
zy%%1P=+tcIXZ)pQt>rEhG~q3u=SKJ`c~ZM2i6D71j^oaU5Q(WgYh>7VOv6;nYxp~!
z%Tj^JL1C|<&U*<z^?HrYR<Zfy7LZFL90?126*wx!y?Cz*sb0O3Z<j*icqf(e2?fNX
zw{XqG2`Y*otm}!lon+5JHYEa=b66Z=R5wo4dw`^Gt7Vzl8g6)1#dkMjJsOy|SJbQX
z9&?h|){AbM&UN*V!zlw*ghgFVTg!wSdIR>u;Pt|d>w4FLW#c8%c|fm8S`5RpBN`=)
z=aQ^x)OZ%wz5-^>qoGkv-c{tEbc+USIp*GebgOf=@D7Cpmnc>5p^asJoU!mfHvAnt
zHf|Pm!P4=3Sk=Qi1zWVvT3RxRz82qno|SVpR-qi1@(<sb1$^_qqq-~A5jzADGc@?F
zO@RgIATSe><fvrbjB7c=md%V0t<$RKteF+(CenvNi1DP7Cpqlt8r@&IG*UbeTTq6!
zwbpS;CQoL+LmHb8h3X>qYc+Q?(8V8l^4!mw#ekXmbjcqTZ&aR9-PJqPe!Qn1n6$JV
zN+33U3`m~y%2`#W>2E(Xg>Xoe-o_WM%zqC};Oq)NQj^xO@~TI>!`@+_5%i_X(kNmW
z+jO@tk#Z$_D*EPo3CRGNF5o5hm*s}OG`MIjgo2mumAbGp;>8_)+ug;o_=JB-+jk8%
z3D!!VOL^-<y$Jo5ui|{HgeDoN+OxWf{7*4_95@FDYD^Zf`|El78^1Rzy?1JozBiFv
zn8vAy$SP==6wXb`=&JWKDVt$zc2=m3dMk@tH%Bt|IC%r8x80H&8t@@D6Puy;6iG}U
z^ijU|1%#ye7jV^@&F({t2G)@<9R^2q%Pmv+_nTN8`YI+jlE9}g^i>{5&8tSotD%bz
zhS2B2f~0V2WF)Z+$NCpb6~>F!k8VPXzgf4CS&2vvvedD2joRYlYnJUgyO4}b(1VVS
zh{Vg?q>z-><dO}+gM6kj{Rb@6;}h}iv3uDY3*pbox;FDTu;19uJ`IO^HZ++_H@xbD
zwEi}dNDROC1n65!;#yj=axui3^kQExS{zjwx6yl2e5zjD+SIoRopSYMoEURrdV%+B
zszxCU-N8N$g2hs28*du<kTw{VD}F&aBJ};w4gFsB<tncO{p{yLSEOVt$Yu|Dq$1F+
zE&7f5BsZQ~qwk<d0QAfHWV0^-UPobrbI@N*WrP~(q1}{;G*nf!4lA#<F?~MR2u;c*
zN2m-d^x^eu+T198qAYZ23*?`?H5S^0D$Yo(M%Ceaatnlflf3t-?t!<Gy9QiJ!_Hro
zX~N8Z@6hV2?C1O$gO}k*fqui0Ns%G4-!@EwG=>^4duq8dbvQls|IQXp2^C(&VfS_a
zn%96(qWZ^-->LEf8Pjl`K!hXXZGP#lG{kWr%gAdh#O-{;-m^3y`Nc?>Su<`x<tVq5
zfT(1ek(-`2_?%`Wjk!eWxm1ai&o8l{(V&yJt^EXthXQ+T7i+XMfeyNvLDoy?t~5d~
zRGB)(8Z`PBgQyH<ha!IN_P^>xr#eV~1svV7PjowTV^QvrAb<`33LB;YC(oL<%9p%W
z{bK2583F57)ZnXJp`$(^-!=V|M~TSZeX!b=nF06|`{19q1`3>7aWDE%-D3V&roRer
zsO18<)Po{l`JwV?Eq)`PC-$MSL^!&?rxaoQA}d`uL{k8+sI<C1Je`GG<_sObo5@nQ
zo;|0v$OgDHF5gyBLl-qF532yvp7lTUc}6(@$-hjDU2~%OcH=Y0(xX$QRr<%@R$uAO
zeTj)AE-HqeYR%zHA<9P6%-`UveV_&lcTE2hZ_yzYes_2?P6cB8^7o*K$eNe(rM~sy
z9>mNCtK1_x|Es*$k%bBAwGQLTY0$RU(mux8%R7N#&pY&+1yICW!X2|1U@#{#j6c*W
z!#kP$d)_l+H8j@2ibs8*<TRYq7u#GdVCG6CSX~nBX9Y{(4_{-sFci8|d_>SgvnQe#
z{3E6hKTgv4)D)>jfo=|dpt1J?FV`&%38!%+#=Xs~T(fMEvH73UI#9i*E&~s9_H9}Z
zv^$P1emEsV_r~`JtMN3`MMi_5oFN~|HVXHWlI6)h?-%1M`FIxQ4=BsnZ3L(k5ZA!X
z?a$!C09Bf0zO%l&!)O}hQLLBPZ|-|^!_c2tZ{ocEruzZyQUHm3G@V0F+x!@wdhNpQ
zUVr8Sbg?asLn5nWc_B!kDqggI!MleA=za?LnaNB<cF5<gU%DpKU458tpJ>JC0pCVq
z?STD4#ZO$C3m7yg1;}nPsP;nA%NeI!kRbW*iINgrwdM97ykikm@#hDHs|`Cky^*?P
z(tfQumE+0eCc4mS;U-*SzCq*>L2f}n+8YF=VDRr)434VQHvfmauiK*xCplOT0lJt<
z?JVCo=|T?hjGea)Ka`8vAx5#Emdmzp+gE?YYj6{dMgJb;ud?HQFruG=Pv<-%fS12{
zn>x?<R-oyZM;S#$kKnDckG_<P(Db^qBU2#%4P%cFGf{^Bj^k+SFAWvxWeh%z2i4!r
z^#i|q7*2Dr?pRg$nJXrnzDfmB9N4`b5D|E)_-$t9hC8h=YfztEVNnHu#zu7V^AnSQ
z_Z{+N!yQHjCj*l|rV4|CoMmGOWP*&{BP$>SH;qsZ<gfJnBRem{mb2^=YMj{iBkZ$l
zb*n+l{HqS@eil3Y!<TopF_M!3!ml~?Z7b~3R{~_MN`Zyvyv0M;9e-Zp;DOu8hNOr$
zettq8F1`AWG){aolAw!3b0=&Ll7>5(jo;HxE$%S#ev}hWMecW$QD>S8qRoe;5Hk`S
zP&UOLq4Q;)uNZPHg=oj2j_`enBRIr|m<`nV`z&(v0bFo_MD;%<MhRR1%B7`nH@+ql
zK9F$84q<(~WG?BLX8UMMt;TPW`}nq0s^ilag00g+Lu3SiPyAojS91E6LMJgY$Mfdh
zr^K^e0V+2*Sk6C~rg6+I+CbSuHey6F$)rx4JXeb-S))lZYYFZuhsCFnEVI?<T#%yA
zq@r8N1yD^4)waJV<xWLOtFL#6>2e4m;u4VdqAj5!?=isK7W5VBkJgx@3OL8DB(1+z
zma&P!am^?w`0?o@<79~<vq;MdB&b8B!v+bC^dZu!KaEX<e9$-+O0%FPuk>gs)4MA(
z7Ws@RXLv*N?t5Zs2$(Q<0?x-9lO(664-A3|G+3ROBTskIfj<edKj7)x9{!?-W+1oX
zcwM_VmzdgH-*yZVd33;%wloqIE{m~SQE-w8uKA-;62ZbdLb^xv7tcw734Wt{IizUE
zFNCl6pWgyF#EDAdfupG0+M0yu3Pnwx7ET^ez7RsJ_<vjV$uTsSWyTLvJ%^s=T-l4@
z;D!3nh(4~r(v{IT!?KV_Fx3@jJ<+PFA(tZ9D#%8s(pe65#3u|H+)R)E^Gl&!DOfB4
zs;3sPC=cjjJQ}P+J6Q`^>Tqt9o`ARLeBw0VFT<5N?hA*X*_t;}B#maRzT-E)8G0@6
zCgk=OBhNec3aeZ3Co33O`T2*BQ(<$h2=Y|rb^P9rd(57mr|=sDp7GSj)9U=r>Zgte
z>m9J%pHx(R$wQj|kFBqcs&d=<hRsGnq(Qo*MY=({8$s!i?(QxL>F$<J=?>}c?(R<M
z??KOd?>XnYV?2NC0b@UFt(m_$*PL@>?qinW1tS6R<}a87_BmtdUxq1CEmLGU*J((b
zzrHTpmmqxgWajL=WbCQi`{G|1<#N>VG4H(l0R87LOB~p*LC@-zVLO=Afbf!YGiuD~
z;zdptyr19vS}5;$qiZzimL`>oPXf~D$4*_<W<2tz_cT)q!431>2&5R0#a?&Q)7AZ0
z(IPf1(SqmBr4i^7sSf7bbDlumUL$H~I)SgaUJ2<C5SIn&VZQ)Jy^Lrbfwi@DDvmV7
zxrQ!u?rI$+ikg(<VxL{+%jx%kw-0>}reevb@t5S{=udiXG_wZVr(djVPMO1H_V<dZ
zU2^F9xsX{aA}%MO3d#X(Q#obV!~-kimW~bg{-u{SH1VH^fLoOZ2dn44NpG;mqC2m~
z2n=CMZ}_j4+eXaX(ipwvSFsqx-dy4<^3y<PE$Pw6p4$A!@3MTw5y1r;^ogTs2-9M~
zy3*A|i8vKRh`855tMr2iJ#`*2=t1ttb%o^f2^sy&p*M(Zq})(GDf1q-(6hVNKRaIK
z^HI}0r;T=y9nHG=ZtiZ?y#TqTO@Bj`Sx11NKN+O)(uwrBYV6@&*ed%0_x7CaslD=b
zxc=*W0#>;(WVUCUi-ZRfkx41j7r-~-T6f?(XVQml5>cSJiCRV|@q0^mxn<j1eDi9F
z^T-DQ?@P;MWiy6!L3F{|f~>)cJ+L+ml2VmkT4SS?#Y%$I`EYr|Ihi!*l_09M#Cn_a
zjulV$qso)cL<?6_y(D&ezh2hIxby9HpkV^dODC45<}*Ug3*G8g62fzR<>np4h<f|l
zA)It3-~A3PPMPPhG$n(!9P$!>oQp={Bp*UIOJ*kET#$s00)!2jwL8STHaaSay4x?^
zBp>T>7Y-;n2$t!6BkJl0i66x28d7>6OVrrvyesgb@~z-t1$}wRb?4<vE#jo|eD)1<
zcz2vEx`U68Ije0*!+G1?CQodh(7Nj39vpJ&8tmAMi~C-`d9<yS28|N^*gp|-0_|c$
z*|94V<K>n{GB1x!R03sPGT_%nYPCq4+bsbG61>F(@P5<01#QXcdQIy_xCd~sB&1&U
z0~e2s`mp)Mt)onq6DLb=`(y9Zes6WaIDrt$kHdTK-l5<;x3>>M@h$dB`!i46K&lA1
z75W19P7nH!30upZh7EpEp0`cpeoR&Gd1Z$cz4xu1fG`h&(Wr%d3lgw<?c_i)yr$+n
z**wCF(apxKVv4(8J13<mb&MS~_PRoM@uCFA!6zcJA);OVxgl?g2RonFQ3c(}qMiXk
z<V!I(t&-0789{6k6cZ1l31Q63e%=`2Luz<@7*ZvbW7l7AnQNjTU<Cmqb>)5)l5)0X
z-on(HvsFjOBi!vkaGg=27h1as+f!%#^xamW4}D_uzRWTOtj)jDdMba$xnpgHr#`fw
zw6$-2yCHNo=ioC{X@x()j1mBXG}&68Ay^eZzHUj31=RyZ`oRRsJ1s%`&n+Zm>3U2|
zlQ;TLtsm)6(@&ezLXWx4MRodpM^Ze3hy(A##_AV=;2>5q+WZS(g#)O))J2fk>d6dO
zcKXM*n)s(^%tOo&*Dv-8`Zp);A*_#}9=Rr9L*w|nCgp%Ghi6ITfP~+3+PgGEksaeB
z2Z&95n*6}vZX>|Nq8Y-OFD&ODnVU~tsW1pMuh2^=PdrUH@u9#-6S6W&bwzI~(^d{C
z^LL5TGi-~`eHGc<p@Q_a@=2o>s-9X*rJmeu@eYQ|<57x@Bb^?^qWzp_*8fa)7f_<q
zj~6e<ie>WnxSMl0U)QM=Y&E}Y&`>*`AM!N^sd$W--6LC<%!CTs)!CSc^pZ|&9w^mH
zg6K)py*ilV@fxry6mWr#qLuZ^3%Cx$+d5p2gnBi}V-#ANiX-aiB9tm*wRIVtPg<dB
zimcLor-Of1<$!VmauDoR_38*ImATzaYTDS-5|hxhJtY{`UCp^xQ$EkP;9U>c1R_J$
zgXa191GKH(J`hg7+gnh3hQ;Id);>^CCF^w65Pe>YV3*@Qj4L;Y(Nr0jx#rB_$^%OC
z8TvdBu^gH_c>3VVGx|d?CU>9P$+Tr!$2Nu0dU~r7*d5yxu0B#{XseN<Z#TVf&|JX1
zOMP)g2wWpb!CAblPveE)IEz4E(Xu`~u#!{N2vGm>n`W%w^6_!q_uy3pOo@3;GmaD@
z9TIYv#DfCCR~4-HXOA6H*Wc$Oum*`qxXw$FbmML{9jD?M>a1@Kd-dPIc`&Jwd&Q&3
zHVKSp?=2iHiX1}D(=B|n^7%C6h97!-NPnpNLA?=Z@msTgc&%=|K`h_i$~>}32Hald
zHgq<JdkPW4RdjU;#LbsKvDvcU1zYG;Zq(`bm0WZSR?kI$@Fw=6Kp81FFv5}%@G$?O
z`MDURvVU5hAAb|yl@MmnqDJPWgev=>Y(Qr6CgP!oV$H;F)l1Ipdoaf}ZTVexQ}bbd
z^T<q5RRcj+H_<@g#{xbdXX8Gg6%nah24p2dC_)Ztv_es?@(Vh2Dv(O&y(zfmTZ43W
zfxvSOUQBNNLfxZ!9s%cA-;RX(P}*z2p;UvPt9^Kl2`r^S{L&)rwPNpvJy7_98+7LT
zTMN6>#v80ww^vRyUPF}=+m>N7;+Kk4%D7jzBjU5YH75d82@CSG^u%cs(8}qdXHov?
zjRNoNo!bBh1}#RaokfVQV`{gLR$`L`cHP4e7Bhp5E!MvE>`%)C@LI5E&c;;HmUK7k
zS}k<nQqTD#g^R`lhJkvhy92h$BNW21zonKxP40nt9sw=%#Ac?4jHA%=WjD|@w@$|>
zBOiZ*bwnoqxzi9xbeYEhMS>DQqb!=0Q>xG7hb4C{>X){c2W1S|<=_TPGz)`vJ(K_p
z(5;6&9)IpU=jyNOVU#u!jJW+5lxcS+JHziYMrY0l2hy+a;27btN8Vf3CG4JBOUxny
zh>r&}3xoSPcVylrOg#5{R}DSX&(j;AQF`q<YC^SGl}<U>cE_6GC%2<ST+(M^`NF*Z
z*}CTwegi<v_l$mM-4?Wun;XKENq0E2cbS@8Ju{(%&B;qrgHJ#o7REz_WC=xNVNRIV
zD*_KXK>pZB!Xvg~M`7e<e_RK!jo)F~WNDjYjA?uz@Lvp-j?<?t3b(zkkUi^~rOg{C
zNn(^{s`Y=yB#*G4h<ugz6A;)}B#)!Mv32ifuidBd4W$G>eH6^|4}nufsyqMuR3U>6
zt&ZTubu0H<VV1#_H068N#<ey(*4hL7BsE^5M+WOI-~)9z<UA8BL=mJ5gYRwJCCRVD
z(9wp`;_cr7Li&r8E{91bw6eN)b&ByydW+w}wI-VRUg@gYblA(BhwLUUNu~J}*7O?B
z$nGSm_07cSn*B$QD}!f4$_h%P&o8G?WI14ery+$nJ^p(ALly)#2<K;csubmQag@gx
zS3&>h+3u2`plRYDA?VsNAinJ20eTj3x$J}y=KH5GBcW7xnB`_Jbl6YIsq5*h*S`_u
zI>`5{$0JpC5QuQe#TYGO3!C3Xt#ZJ2&_YVtmAs%}j-9jP8u;2M_-<I8tU+TAt)(eU
zb{PBk9kRn5Ba%Mqq2kD=7S^{xLPqY@Zj5oygPW2)r<x~kzlz}caS9MCCWeE4byFsQ
zYRhic!>yK2TI`;ibA_TJdV?!Y?nePHwifG&ee^Ey6VRF8p3;=G)yc4Tk50GHWVYM~
z2p<e26}*1pi(rNM;nI9}i@eg9Ok5FY_&XvsGC++OLB`|b%Ka{3DUs`W=Vm6ICwrN=
zb3tKq)!9Rt(vQdkCs!uhQkbOMQ=ysE6Jc<QVuY!%8*e9XU?#GcU>;^OxN*8Tbte{D
z_&k=7habX3mtCVgg6Xf$F;XTs18smZ^4}tv0EncDvEFi-0x+8cQz$ZLb425w{q`8i
zqYOKYQvt(Xt;Xu-%hlI+79M6tkv0Xo_Jc6p8ESx{i@pXqS#HH{=<&~T&dqB<kx^MS
zNeCz3!Oh-{l`Y|kHBT_nY6c(V60YmdiKx8VJo589jg0FohqtEz1V)fBy>F=&`9>k}
z9Muf3NuA|{K~Xs&C?VYAa4{Yv0T0Imfpra&)kxfOAQVNFjc{4_><>`FJagoz2m8zW
zrhYk>w#gW5eonoXXq*5n=`yk!q1OpgJXfjYLc(yXw5$n_7JG2-^z@{-y>Q|m2BLU+
zzTgcNV6VjUm+qm=;=E>te_i^a6lyr8<*qurjX%7Xr$DqtXU;G|K|S#mm`xZ(lmn#F
zR|vtvU3_Y0LeogqA`!Uf@%ApRYOb36T05YZhZqRF8-dP8iK9DUi~%X6M4SLS6OeKn
zX0xqR*|8?Gt=nGHS}AjIW@Xk4v(@AAJ#pCB|42+3)9CmMRf|CM%MRG~%J*fysRM4c
z-Yqi;PS+S5N#T*l=E+$}Mj98NyD}%OKsm$HYb=M7rfy%^uXcWcLxBd*oq&>{f`i>)
zboe8q<BKbVw(xV=hJAPn7mEvX$+hgRSQEl&0^f%D3`GsPGJgGF8i_S88$*)td+;lI
zIO4^_*h9zss;c*FZ)qbdVR<6Im(DENnu%COfc*r1Ck7IVu_AM3W#s(`gZCqd#3Z1e
zm5ziAQfjgoD{4xIOxGYz%44d?^81jRn0-qnJG}@?kA_KWUe7h*HZJ7%IGN&DG4xKK
z4_Ju6G@k%+5b21bZNd5xG0RgmkyGB~q-T*OkJz^&OU6VS66$rMo?1_U`2Bi0PHVfd
zWwZc>^CA4Q3v~FH&)5iZB-bwpQJ6L0DpRu{tl1*7Pple-_MqQ#7>#>V#$Uo}S+Fgs
z3>Q<!?FJhk1mRvs@U|h1n8L3k4;~u&eWdM7KxD5b-50mo^5E}n7~yXGko7^1R7T$a
zIZs8x0_mpgGChE;t7kh?m_CQe6W(=)yZIW$C5y;ev&9nS>K={2pVtJJM@~O9qn#7X
zY)<C&^=<l7oQcRAjyuyHQ>>3y)Z4-(5xns*8(a5?soyIO491z_0pR8z8ICaS^?*bJ
zAYc+0FWg2%O=h=XMlPhYfPnr>#su~j20lOf3v(9gymrF~qTbz;sa~F_-4lEc#m7kS
zS^zI`UzPELst99nP<GjBf2dh+eWac%fk0seq73<yTK9?&CkjmzZyU;pB)sCFCyfEC
zuSz}cfe-vOySRL(c6gbMvq`<?_=Cx7j%n@_cFS;j_?#4&I5EOgST#RGz0c;jgLK?P
zmvBp~GqI*r0F3g#c*=8AnzghoY*#gT`0-4hmtN)frV~X7KZf~QPVbS3gHuY-jT)og
zY-yQamlAEC9mXX>zf^9owZ0?!eM~m5{v3r2cWY0Y>yJCu$Kod$Wp}5-=^2~y0k|$<
zO{zB(NwyET1Fy7O^YGw+tz^J{db8bEm#6y7s=!YOPlwNYv4a!Wf^)-dw?-@9+(^@H
z7{!$-KplyXb&w>W=Gg6=4c0d@<sPo1?wv|hNzCYP8s;uI>g8EyyXi*o?I#Ie0Rz=z
zoA<Ej?%(MGJ5OAPEp#Rnb<oMoL?=62zDC%VxOHq3X3__Y&bR~Q0PIS*XHHXIo5Z1W
zR?|sh;>NbA4H2{cYLUoBYv5I?l-RlY^a2>`I-YCM0$Z+WIRJYp@haun#n!>(t>0|`
z9@cTq_PF(RzOZo`vFKq%k%JBj^<?UkP4L#+y8yC~cacDKOS#1w15l8Jg0wTbxioi}
z+mBTelx;k8tv7wfC`KoVKr{trBAnX1CAu(JPKK1yb4L{iZT|d?!Nb+S!suH)Krf+n
z*5nloy>8~Glon<CrXMVI!iC@KW~nEIT6|JkBYL&FcI4P=>_45s#}U8vLL*P##1}!|
z4A>jymdM*<^Ggnk3=1RC>+J?AoCw$5!MQcGzj%N$Ky%Z)7}p7o-)4mdv<Y;Z0iIkd
zmqw8aecQ~R`XWXtWQyD~a}KC>eeyhM7;+y3>a?v-*&!>k4*UURBTDE6i?*%bcawL#
zXWE6?JNQ^{ql!`_1q|(Q4A$g}uv6N$?Q#*L>HG3q<w(7P$UcknRj;>jP2jCljnR3i
zjltLE-#lqavd(sY4xH1ob)5eOyf-q)^TnY$U9U`>00kpiA+>l(gf$aA(eq?Lt2z&a
zhgpN~vcokwyfi1nnCMXmXPJQAh#<6_jW+Hbvi#KhQ*Xdua5+D!n0dk#{`f`Qtp8_7
zf2Ec8ly}I_K2}s0M2v)6nt+=;82_F$A<f2I!n+C>`Oyw>2Iq<!_1><_h4*Th1e3-e
z7@adBwIT=L%A<wR*Xw-w4XpaeZp|3tBDrttGATd2p58u)>k+)T;xsVk8rX5@UP63U
z2Eo|Yi2@XpuA23CIadBm?=1(=Y!75QVh&zUl+fdT{7~UD*)G{pRyGW5n+VpBqz3y4
zcQD*E>&gi{?^-d1dxvV3?e0$OcP`{IZAX?m#iID)c?Myx#20bBZ=Z-=!oDY*(PtUi
zVxHpN)$xNKP%VkFPi0QB-j@*+FcK6#>}$;-t~|?J8>%cG1DzpCKD`Y?bJU4X1!8NT
zu2*GO^^`o~_@;R3G<g1`Run{H8QUs310~XSb2zP%W#sjJt7`dCP?fnO<x~fJ6+Oqf
z#MG?T6}<&?PCWCx7bc51sXbf%o`D-%IKy%5kxD@zq(rZLi)G`2nMpn2xL)DnDj0jB
z_9O`lo$77l^Kdpn*gT|*87Q^Nk&u3PqJU4Dy(8GF=DxuVbKGcBhxoFk1MU#d8X4*5
zIaQgUark3a;F6vu#%~Leq?6EOTQ5MuB<5P!;(DNCJP~Nm28bcUOI%l_8&sN4Ltb(m
zsJ6!QdDsC4Lo{6mBsG}UVYBIaN52k)kjZ7lKu!DejL0l-S1fuDaIN(;x<~>Tzs(kU
zqG@vK0iQtupD%8Mz9P9Vg7tIn27}M=enJDODqW)Vr)B2z@9x(ujWS6EJmg}Qt~%%H
znBR2x$7jl2^S{$fyY$xyg2W_weN-zKGAfA19Uj{Dljk!l^eYquSG|eFfkM?|lDilt
zXH`7@=S}DH@tV{ovl0<Dbh3}pZMDP7@Q&MKb_rZr85UGiMZ}KgFU*Dg=3F_lELL3H
zu0g9cmL`fFCb=_JUp;}fd7v9+NWjvT<Ofb<zyVmJj?DGh0DW4;Kj%hH$~N%XMKF*-
zK=*0e&Yj*}UDc<aO*(`Mz?uU?)u>UUW416jH|<R*D|hCoiM<+I)xZWwV~<xX)EErq
zgkQD{jv>{6u2Io<AeFN+tz^x~7wv}OezDhN_q;es-E9s}%y(=|gpYwn-?cb?aNZt@
z{5AlyFnQ)tDMz{ebpxec+L<~R(IQg5Mwr*L7CG-6D@>jn3Z97%0^7dP#WHT;NbLWW
zJh7NMW8t=F#EGjV6_+Ycs{9CArnf8s21StIcrn$e(j*?_S$Yy->twO5mwd%9%+a(-
zfIHN|j7aNDaI_}`U?dt*I;jb0jHy2OPH!(ISYJA##fuJpoOiC_xE*W5@#TmdQ6gE`
zv!%9!(OpY%I_mHQdQ&Z7786I%>iazw%n5v??*TFEfiPVj)B~7JLQ0pbFZjjGM4<V#
zYMy3?D?g;C;ymD5H)dRbZZBycz`J0B8IT(tA3I)cf3X{r)EV?o#vyKbgO__fku?4w
zueDbs60)S<A+uq@P|6EB73O_fe%U;NjlMRNMquHFXXycqLh{Po7M-O>rkpblF9><w
z-X+Y=(?j6fZWjW<uct-{b{4!xU0>66ngSZ|j0PLVD?{|jg1**z9gx6&jRPS2HZ%u0
zP(yd+eWLNrK*AWrC#N-psUEmZu0tMq+iYV=g5>R))A_#BR8)j<15P_e+}2bIfQoyp
zYJ0EGr0gcn2vx|w{#mzHZ6pn<oD^%lQ~l)I*X+^S6Cj$2o4ezI|5+9@uxBFDriUVm
z1yU&?`;z&cC@t(tuzQEC$)<Y&7IH__clPV2cp-N8KGVJhcZ6uLXnFygj4)90<VE*J
zd|lnW)A9k~TleREy(!1mC1$B@E3H;ZnZK;BJ;;Xqmk?Xv$M;x9PqE?a_S+t~52@zI
zE?i?3F~4xg4qyHjtbEu{ZS=}MbLye`wTXJdjBxav>6WAvUchzG>g!u?x3rwLi8F)W
zS|ygwncgSk!4hnYMX#;Fk8+B}^nIE6s=2UTLJydz7|v^qg2|f6D~x^%-5qp_l~6gd
z%!~cxxo1AD%&l4O@TtEMn(gX8%YIGX+39T|PlO6<9G_1d1+SW!=!yEW2N?~T2?EA4
zUySevepUpn{uLgqNPA+2IUAs&!IfKyQ$D}t4b~7VZZ5(dwLz+maaF@GY3pa<=55h~
zbZn-e5Z+kDGn~$1fn+wm$tkt_-V^hhxJ-gQ>xw#LX~$-aJ0ys`4`lRCG6fo#6i5<Y
z4`!m%827lVy2->MLCu$Hc-iR^^2Q~O87_LrQ};O-Favp2%Th+U9{Zz&1~#lLpT1o|
zGEVIECN)Mmk}hv2K~ew_k#Q_hRh=`mIcIQ7zqw)UvmI^`7^SMdUR~?`Ea_|X@|n>e
zL8O+6hOZa_%*lybkQy?i&+xi?K+5go^o|se&Vxi@tEpbtMPfi&h%%(DTq=^$Lejfx
z$Y<_n=EC_+VN?p?YJV|w_xfZBZsb9Xxrt^dSdQDSt+Jh)#j7QgcOP=vDp6M%V6$kv
z2oW+qMsjU6!3vRZKAi8A4!e}9oD2Q%onuHLpRk-!2GsEcnW9_rxJ>VHHZoXd?N!9}
z_*WB5yX#;--f`|b6=3FDK0?pV?)>1hokn|$6o2{?lSnAx36~lifu8dYf>ah_Z-D&w
zzGXobU2OLhNLUQwYB$Fcm>kO1JRFCj0%#|ZsdPSCB7o0nlS(J#6zIBr`O~%qS6JaC
z+%#|E7LnX&<FtGI3gzs<A43-dGl0FGc1cuETbbX%Vbo<@+YCxsW;Gf2wXTsgNo8_~
zgCg?MLZ#>*ev^WJXh;($Kwx(eR1;GV9YwUxZG1en(We~?T@Lk312!*SRSIL5Y1&3I
ztsk}HOvQDj=EYs@@^KRJ4c(!UydAKH_C1~hTz<&R>NMpq6lHGXkT2Jhs)yoc1D?1}
z0m-lge}YjU+k-nSiiL&gXk0{aW6<Z^eQp2y%sWJMHnv8?+SfG^qO_F>nu1@#Wb$_V
z51fi>_8QaFhyj2o>pi<v=9(d8b^nd^zRUMgJ24bu8p~0-yvuBDQT!?%{8sGClwr$?
zV+2ROswE#uDOR<Oi<+kY<G~SoTK8sT&gmvs;XMGR2qD2&8{!Eqha<EzAI#~QD+j!T
z?=W1Raz4iezPNvOKH<EGUI~x&$wZ9V%{P&$4-xlMuQ?-(63YkZma3_oZy8)xNknGn
zd(=3+hKv()Y?Ik34|Bs-@4njFRR`4+3N$Vuc+nGj3AdF*0=ILxJa)p>cpR&2eBbV7
zp7gK{t~gn`X8V4Yv`Gxb@5(#ZXXp2k#bAgfl9!(fa!s#4Puy8UnyJ0cOFr7Uuw#?r
zs0lm4eFWx8<I>m$a5{Jxd}|)K{hFA=P|^X%fdflI4f&y8y@biCZoK1AEUq&6gV^x9
zRtFmS$SbSy8hkbyna1)?CqaX0-*V$#o@AW5SYS$#Dt@;|4vq_(uH(WPErw+50F%rx
znY$0fA^4tA)DB2Ceu28!z8az-2(<mae#megLGFgLX1N-ipy2wWaOdHwB&2n~PQUTD
zf`ogbu#Gtj+vD5M@k?-tc%%{?imWA!c$H*Q%@0=2rE=FJWAPwY%ZAMxu<XosT09RK
zu0(#l%UwWoU4b#(|M8cbbJ7i!a`jG{^E7b<8hft8c$-CffAbuI5t3_-hGnR3PVQBI
z(e5EoJ9Z_uU&dv<H)C$Z=>$Vt*(C0&YtA?<{(ER70Dk{Gbe}*k$V~ONVnyxwd^gb2
zD-D-K>D8LW)C9Q9#_nl$;EE}qDEkTG<CuIlc>QFaCu^T(6^qPirhWd@4;m~vm5JcF
zmmr<PG9(wR<m`F`29rO}g!=ttF+k42+_v169<osYvq1XYza%ApP$t`Nwi#=tU+9lG
z<sGiCLBf0Z(NrN{C@wd*>bCcbo85lJjNRQ5PTv|Bg81w#fB|&>c?d&c4a4_#QSXX}
zGg3;wkU7?G#D&Iqmjf;TJPe^O_$ejIv*yC+z2#CahZwGi3P(S?O_qB$(a2V=7EBx*
zbBQ@4=V0aPMy1319MW`vB*uTn=8Jv;2z}wP%>>uMGj)t&VZpyI+1uCrqQ$lHNfYrQ
zphr?BuNjH9qN~BB-uE?x_2vbAW`4h1enJk0^wD7X-J!weNJ-V$RG;!<zU>pc!hhdP
z=(RzTPFq_rPcYxYCyhI2%>I+H98R7C+S%SY5r_{;u_DQ1Y|>)YY0a<A*7^5P;yGHB
z#ulI8avf9<!PFiK@(Lpri44n?s96KWTfBfx`wu<jzCxIRy;xQH@eerd#Y0odr9k#r
zG_#j&v`}FP%dscJ7pcxR9FZ~XV>6SX@1q+BE>12vAcwMsjvnR}#YK`TSVZzlwl_9J
zg@k-Jwznnp^>Z$*8sw=&3DI!O|4to3FGHlAJ#WT_;=x;79(OhS<0b0i;$k<A+kt#y
zh46hZyh7cM9p?cEg6Zwk-uenUashE0#?6&pmOCViuD<0%oZ93}u=RpN>uSm(qjR)J
zG}fdZS0UxO6enNbg7GuR_|LI`iNhnpbd5=Q&8ucF54q*e)fp~_7DRK{5L?DMbGMw4
zzqf^IU&T*2C2-l?#vd%+XMQf7A8Ktb+I{K@!66^dk*eTkW@e79n0J5u9CiHn&ChpF
zyeZ47HRdtXnjVX{rb~^=m3~zo<6oxLaZ)3Q@1`VfYU?5+Vw@S3y4QWLR>V{TZ3If7
za%FBS)|~s0dEqUl$q&A#dVX@KOK28bzET&fljP)+TT(y>{M#~w(6GP(PLjCaBs8gY
zNoTPgmt|loM@G3o51k}=rRiCUylv(fD9+!k0qXUv+KthL*sXQk%!ZBSJP4MWq_50W
zX}l}9ekKlWH2+!)+VqB_2_G99`{ECjO#DZ+o<H#7qOv)jq~EU-JcVzkx(p@4;#U^-
z%rIL^en(T3gs<mRX2oxNe=MS@a*V5?DiYIJZyRSrJS`W<JKiQiztl3@eZOQwF0QN*
z>n1-&GcFxoSrZEd;Ew<31R-QbNcu64_j1V`2`~cpfUC!ZCKf$N#hLZ117)N1aaV)5
zVEJ`=d<w1Z-C6!5LtQ3YV^e5Fg`Hh$1Q*T|4LO1Z++4-!dUwAR>mrGrogJn6HZ29N
zImzGG@B)*hS2QUWtB{8AJl2}dRZ{N2oCS9G<jui#9`?f2^USimi#q0MkRGzNzeE_^
zcS|c$!W~UiZ^BrYQv;?y-*9Vu<yjc7kz;FEewph~&N>Gh`G8>K`j>tCW93F9JXyRo
z-dtsGCSCOf4&FJlCTvNRyN)g_!LO>nvKZY7l;HVVw>N!dJL<!)9`|$i(4HtsIg&+6
zr}prYeB<KV10?Z#O3Db%<3@S&rb~rFjhY<h=gi9AXoVu`3M!a4A<ONjZBgqA#v;aH
zF%2KjmEn9b6*?wDj$jtkm^n(h`b&YVAuKgoCwI<;{Y%t=^XYICPHnUt__?MyIhmks
z_b})_UR|DS)0bT=#LM10tGNjm_aBT0Bc+EBLVT;@lTRvLw&`fL`Kmif9ogP*HhOlo
z*sh9DI^JM>#CpP@x;Rc+yvt(s>Ep2Rm|IO1e(d4?BMIJNb^eWkh|}eyV!t;u+<Pdc
zG5BOCAU6E_QBIKaii)DCN^1G%=I1vLYnHFfrlC^~o$goO^imd~$vB_o+Hj9f9Z9O|
z2fma(K4u5dyB&;V?HZX?-D4;BN`G!>tgVcr6!O)1w{wEMx6(4CM%v$01kl9a9C=jU
z#aFJFWHFkd`w+Q$Q*q#KC35_6RrS?!l0MLEMz0ohsLokxAC0#43sisDfa0#KscYxw
zplFb!^WMnF$ohKGp}%Tcg9<;ayDW_AA1nv52x7c;PYH|$Ditk?r5e;4rPHjkr8Q8Y
z$AgiopHePDEx=a&szVe<C~QqF2R=W2C*I1sJt_(Yi*fmsyc>!EhS_ozid_R1YHU#s
zA>bdo_Y(x<$=oy%))kmVY+cYa-ZiR3+MubVHIG!?X}N{hGPhJXz*G}V(_3L7o~S4F
zxq3aMC7`B1wi@v})w_3*!yb?4){i&a<bz7=NdKTbp_doxhy$b>`G^CQ%ecc!H~$fb
zZ@T6}k9@<4Q}stnXS(=|-EX{~f3$=?gzCVBoYabpZ4UOpA+i5o#}_A@Gz0gg(~--!
zI45a6dRz@bahI&kJ#8Nq^hcWZSDV(c($zxHFf4*mobj6)!$l%RK&vv5B4uKt#I&^F
zH55W5(H$a^%5ZTz!xuO|^y)m}XlAS<7D#6I?5-cT)oc_QD;mzOtgl(q!YUbUwue$~
zmL?}tY_^ga0k1x<_Bv*%i~Ve*>ov_Aje%s0_QXZhqlFWWOWT^>@oc~-j4wJYo4LJv
zDGLFK^!KNS0`zn0MWf$J6}Xf#IdR4=K~?i*JplCWn&TA-z%Mq^#9yG#P%Ck?T7$^R
zdSH_s73s<U@rD3+FUeSBx}TZ%rtn$x!i53K^ep1Xy^0$F$ZmZ2G4jQY*QRc1^&E*C
z`6_`&X%7bm?o+tp#Av(_;J-f%eh{k8=h$8tHP&l?_VT(tJ@bPGzId;M)qE$lI`r%(
z;xCRdA*TZ3uPA8e6Np*~$wjMZ3A&&_gb@FI@`VWH^}wzefp%DYeX7nFp>H^AL-=o~
zn8v(H262q1<!#y#oDyR*U6vZ1qNBdU+D9u;ctXJZ{n5pS)F3`l;d8JXGI^z;%EpYo
zY1B{)uM;f49q4q)*J_zUMPRqr<=6we(GdLMA7Az4r2}D65%)}A=61z@3C=7I3(029
zFB$9)OsVl{sA!6~I#kLy85$Zwpy-gp&iLEDpU)6p23A@f47AYT?D;nRrm@RX`(4lH
zZE>1+R%;*VbGc!XEnVu^I6j-N3TCrzfY0!R@&7?W-W5?WgPbs7Te=aYIfJ(nWs^+Y
z%MaGF5o)%A?#I=L0g|N*aX1!@qr>VMV-V2);39-qFnKG@kkes0Nm=!eDNONf##e3a
zb%~PW#R};gjv(bNqcdEaiiM7&!IW4+a?3fqPS?M)kC*Tf%pfD24hy?RK^)*Ub{G7f
zVaM^tM0QE@)Ru-oyx&!Rk;T}g=yR9*sxQVEWo~lj#J`UZ0rG-5nOg;1uq?tUw$C)S
zw1l4$;k#Zs?H@;<oCS$4VF#l9**^8asJS-~ZM@lyLnI+zX|d{o9Xr<0?)bY95QZCq
zut<qV1i}2eNUT_V7kG-2Y44j~JDp)@TUs@%N$xjNzNfo7R?8pAsH}`GX*?6pM)(&&
zAdz;0T0bkQ3pK`uk3Xh-?l3_hC*@hpnfA=Ci88mOu(68Byue>0#DbLJiBI-?>WcUW
zJpkz@L<4#0fvHl+iAPww<nMLCqf|}3+3)p(gm}*yO?jRUG8UGjO~*ggq||dJ#+11|
z>}%#OEU5j@oj{ZlIZ_kl9)*%=9X6?#h~G74m^7)M&UdC<{YYkq^pQ-Ykr^}+w|JJx
zpnuCG2^iE5lZZz_3?nL1^Mo)%vCxM}(G-GpCghLCNhPi5HmKs{tnm6cF!0s?SRBR|
zqLh@)Judlz+28d&-nlv#zTHgDYz80~h9LABX_9t|*ljjUYY^7UvwtuFkmxVSJ+HC6
zwibu7Xy~07@io16VwU`D94u>?55Esp`@FiApl$j@`Tbvd00CM>8kt6G+*+yfmzR?e
zso{=UbcXIjAX~AcR9Nz@Q~ng6bQljSAiWZ=`t94_Ro4?3?rhl{>}j_k9+(tN=$u_6
z7MQ?q#6#Lx!w_Uk#e_eT`MR#LF<E~=_Vs+s`oA^bvo!+dB++~NjrG_x{#luAe~s-9
zoQjTO{UGFeh_|Oi9P)<9sPbM)!Ba86bhz_13^C~M=G4pf?TRB7Uv4w~QZTSONA~r`
z)3i)2H4ce~6I)IVYUJ+aubaU%MuX6JbG3y5PDre+f1Ml&1gRl^GRH5COB_E<xSJ|D
zo;5XuZ-?ziZVsn%$xo5}0&-f(30FD-`6QW;JpB0mzbRfuxT1>%d478S!a#NbkT}Yw
zbL*JS_lV6sMB>NQTW%Yd7b+AdaYqyKGMkidz5Z$VJb6EX9nFX=@;0kpmhz2pm9@=N
zp)HFW`)Aj*wVy)EN1(C^3Afh3TZ6hioap)fVL(J*LFV?sVCvhrl$K0-?}wy4pT8!e
z_`N>6LfkyMdYsq|3v{ia$vS?v{X(r3lVP~_L<z14<UcJK1el++)dWsMr$<cFr>A?2
zw57D{GhTsM$i-<JlrgC|0(m;%gLHR`pF;ShS57P#a$f$|^aH{N`*!6M7UcT;{7jCV
zZG!4#;7m;BxGc^R{h4gwxy`1w%Jw|ANzAEC0)x>1kh)Po>M(DyNfMi*?92!Gq;}2X
z`#Y4F#*cMF5T-+Tyr>r1e1D4Ga7fEJ?|Xc|UH<XGVuSCWZj6@@7j%2euj%o1T(O|i
z%yb`(XrwZJDdobwu?r)6Y@Q<O<rFQgDou`A>iURX<pkCGbc<;p-@m;fFQFvp7BGQ?
zjc>%ZKe_x6!fQ5a%>Au#<gf84w&F;Kk*z@qFaFJbLZo<4Vm+{bWymSnVFoi?HJA*^
z&CFKZf+28|XhXMdQ+sZ!fm8MCkKXUW9s}|8;#mKm)eG?RZ0=fNhA9;qW45!smUWZx
zXK|&CUcyEe!BBS!4EEekgk$&mZoy9WPtp@2;ee#0km+LPUhrUvEEF}~IDdTC)I_@Q
zEya4_qrHJc^u}<>m9QSz*Vp%x+Ch!I;#~T_r2kp(SD0UvGH+y+3T^1*r!Ie-E<za1
zVmV_f{zUcBnhjD&c!lA$bpzmlesOhQ{LA2K^R^l>fJ&#cQZC)Cy-DeL(JO-}6w{=u
zE)*>Iot&IxJ=y-h1tU;Krm+`O_Ebp5+@q|Py0DoAqhU55SUz)QLLZBF^;iymMW&O~
zt8tW8h<@w;75=^lV{gw;4tv+5;eT-r1iIxQPSFE%?j`0G7m8%B>}nJ#bX21qzM6=D
zQ<0I0<Hu51dWG<Bc54grYMShrL}03u9W63d+sO^`Q7gp7r3T*lT6v)nuZ-z}hhV(A
z!kh5zp8OtblC)Vt?T~-BJdjAD0?$jU>w$ya1<ZWhU&f9VxYX>$l)V?py<o}X#h0v}
z$AVLFqfd&9BbPyS`iJfUfG_|S(ych7R7l%80&IJh-yF|8$iaZ~l;A0`jzTHaTG$Jd
ziOQZeHgVA+^<cpo(-m0u53>salSK~cmXc8_Fs7$aoU+&vyCi<*oF?06MIl%NVula<
zKvrth*I7B}(zJ(gbbo(enF99$;UB6?2;}H5s{ESYh%H83hYqY?jtQ&pN?nN5vK;G0
z)3e7h0;ulk&+<A)^klF8`DG+l;P?WX{vC&H^hb^YQcy<k*5B-9VQ9NzwH#&2J4fXk
z`ln=GOdWsiM<*rYImr7v2>$)~ZA+D3^*hOz!f6Ku->0OhrQ@c9?+}h`zeG9dFfn0y
z`M?-@B)NMuASAxa0sV9Fa9oi4{%bS5$mEZ{4wIor_$n1TEzXf*!{gm>Rq=+#QA*L7
z<6GES)P^ZqyLfOvcA)-k^^&F2E9M2LYK(%E8J4qR;HKH#j^Z^5fe@Fe6obK=H(K^z
z$_4?FCY7yn<FUJRbjdY{jQg;7eXY<z8;7nwJx62y-tc?-w~A-eMEDBS;BcISp|Nub
z{BV<nN7AcTuR>?mr;1f~)1D6C>x?j8ELyh1Lk=(2SP&e}l=)m8%nGQhtAEnakR}!h
zt>msK&%BSb?uh6r_3B>FxH~?6XmQyuuIW0~##*p3F`;5+WkvN+d;yQWK|DG&B`hT+
z<$l@xf{)=PB7PR@l4CoE^PExc=*eokPo*I9Z>-GQ2vbzBB$L7=H$f$DD!|&v6EJ-_
zViAZ+$Ara)twNf`ru7=}nLzwx5LkRYdH2}-!YlqHH0WjF$R|w&`S}@pd&b%cldWD*
z)U&O5AHRe8s@52gZU0Eb3h~Iok`Tdh(RmD_!GJ;D-jYmZUoG1AaoKo%4A{+pln=7b
z^Asnr&m4p$ZxwIf?2o%EaapvRzB&8JpjvI3(Qs5B1O(#6WJM>BTdXa+HFPV`9p}S5
zr5Ci<?2ad2Zo62U`55&F!VAaAhR>W5)ZZZ_ACLCMP!(rvZf(g42?@PJs2HX{-3n}Z
zdN^L2{F%=4cp4U+l44fnaac9&io=rXdM4I#tocKF+5OJ!c7FL$A1{?o3lzQdlQ-ix
zq+b*C#HcWFz?XGl6$~!f3@Vrqk7n@m6zPFkC=ceHTTG)zqWk!)!lLk?aAZMu0z%?|
zWOX(JVPfJHmy6r|(($yXdxL%offjQO4SaRi(@xu;&=|7P(xL8{dcRfQiw*gg;Xb|`
zzgChyxt)s#c5eTT9Zt$vQl7?9S(8N2IvIiBpXh=x8wSV|eLHHtGZ$KQ8<%25RvqXw
z0s_zrAQcwR!O6L4OzN@H3Yo~`!L4rHOKJ<`I;gs31K=U6jonXvzAPScjN;>X*K~cf
zXcE#=TRW3`vi0f;xAhwr>esat&-wDsU#b>OoysJC_C<p9g>OA+-yyR6be5?hKX<!Z
z3=@GS;T>2qEFAel_~Sm((eZ3&UH@buj7&_1Htrw9`3|xN<`aItMjrrvT!M5g+)Sp5
zV4agVI5>9dwo||B^~WlA;hTQ&1piiCBu&u#6)VuC;6D)*-_>5}Jc>}o;GRtZ#L!xl
zm)q+mhjRR`-4+u&Sikj@@Er(;)w~jIsrv2wq5b%E^EDU8X$NYI`)qxD%&a|U^+*Z;
z>GVbi8}yZl9?$w|QE98$%FvGo5*WV~n@8~Sl7FFU@<+fcz<s4q$`twPAje|0&G(aL
z=|NMJ3L)H|Em?pH3lU`xe=1x8gMax8j}{9QGNYBjYR?XLC}|z;9Kpq*_x+oA>SrCw
zLIln`wynW#l=V{=^5@=RT}3ym@~Yd#sL1%iYz6hP#lc!~Q|~N5$HO@xnGdJnMaT7!
ztKDDV-%cX{%4;gr+}Wj_rph1+yLZ1%qBz)s5`b%3fzW2hp@-GdO3vNa_8AV(ED1<$
zy}jJuRcyJ9k%<_j$zk`qyx1Lo;Mn%1RkfPm-Ab}hKwAg$z~32%*nG@e9_)b@vWB?Z
zA%|w2G;bNC6J(fbOLzr~w4Nj??wbu%s-x>}0uRagYO@N&Rn$N9g#{xpRgInvGcD$b
z&FA&j62rFtB$fZhJDKTR5I;?=o$#x2p^+V5{P<J77$)2^0rJ3v#IjE5(QKgK=XcTt
z@}04A^Z2ALRJy(_I5so8MHNGt%lBKX&2;w1&37f6d#*D-wCqt`y?;aAj&RRI*b;fi
zTe(Ov){m2Kxms(+NTz%>T67{V4ldtChE4$_5b;Lde)e*_nJ_=rPEuWtPAMB_o5m5{
zPkcOIS>U5~-&dm^Cr?uUyisa#e<;Efv*%Qhee2~ZonBTJG1G)eK0B7Q7+F?m-LzEj
z>wbD~vT%1dH?8^uEbl6H6yI;{LXk-?>=p>(nWfaW?VV=n?3=p#Jje8O0;SIV)inos
z#iDD~kt}Vv5#HKc@($rkGa&6of)EVeO!dkLIL28F-lP(-vJTf;c!FYLux@wr%L-^q
z!IV@~{ROn|-(P(6dH>TNg!P+?>|T?c2qQ;+Z>luMU1Q&EKZz9wdr*o?SPVARDGihh
zr!6l36%J&*@v1VJ9s|;qu0cNc_pbHpp_~CRvp?nJ<)e;ejg0bXOAR)3stawJ;Hf?=
zdpx=IL!+yP)l^m@b=z+Vy$bW9?s|!Uo0s;+J^|wpNdH$Ac{v=+@BzP@&7|9dgw1YE
z;<hWHnaSt#!gq2zL%@IMa$2)yX!SJJ<MD=X*r4BWYv3F8b{NMVMN4(#i1T)eLx8&N
zIfC9&$U=*UhlyHlvh^!GhXt#*M|#Jpl^#GwUSYvbm3{!Py1H7WEdOALw)vN~w!^u#
z_VfjnLeWXt3iPHYB$VMq-p7uH)NbI`g7tcH+4Wq?L`_ZWx*rE?$#EUNproW)ZT7qi
zRv%fq+`;&qy?l&QscC`Lg_!qGh$qSo88$6ZT9Th5V3xA?rO_7SGtIqhu^^=mEM{!-
zmn^O){naf5*gpb&3BxN4_%4n<7^P6{T*l!K<8qesdN&p6>8+8yCuGjj?}M}w;86a!
zLsM8&Wco&)h0GZd)P%~Y4<TaTsE|{}8X9b<HaG5IoI32Ex~ggRG~@RR1z!Al{|#87
zSVbu44RvN}YP%N249A@a&+SLq&Ri~Sg|4}8>u;eYs;a7*1$<s2UTq$}rpmmzEeeQ<
z!i!4Kp>H~AgS!Z^aP=8t-^Q&I>v2*j;JH6(2TTXSO-eg`azR1Cj^@*CT=uWW+vyhk
zvlr9~Z)_SVq}%-wkL7opoX+(%RYQGfsG1TU9<G-yC^Ii1=gM*%<sqoHj~maW-@SWR
zp4fD|SJ)Bgz+Pro$wgMe1N<E=``RGQO<!H2#h`K4v%4qokgBvXlBVH+p-z=**u2FQ
z&f_Sq`{LJnm}=78L098X>gbD|?_rU}6Z)a{Yct0dO_#BsqhoGdJ(gUKx%QXte|7Uz
zCymb<q?vUFUVnB?tpl_?U_0<H1MdNfZ78?n%->3{c1ar8{G@#2aY_JL63zmav?=^$
zprI93ld<_D7o#Cq=8xOiK=llUU;sV7$@w1K8cTfoOC$_`kbn<W)pfpi9Xa${_@7uq
zTimm_VHwRDM4GUH?!94>zZapQ^<#{%*>{QDgJfFyp%oIj)TC5t1ffc%)WXPrY~Ii7
z_X?trAS%U@EP$}nx-BaeddyU4vuoF)MgZKph-<m;H16sXQV>mbzuoOKYFu%=*^G0u
zBTuo7q#edulIo}LFuRsl>*h3{m5WEusD7L5yDP(elcjgaWis{N{EhV*{rwt73!(DO
z5P8L&ef32(df|X)arJEd?VL#|eBF~0lk1AtOEh0r7a^@eo6;YNCWeM5lrhSD!?6=Q
zPdCHGR()3a{8%rk@|ABamMysb*)4gB-q)a7Fsz`7o|@IH!h-=P@>TuyT@>}vEQgwm
zsTTpo>B5bOOrxxxi5u4}4%CHn^q){zTjtAdj>=rUjA}(<rGI^sB65?9qoVo&Z4mx=
zq~~cF=9S_>#<ak$+4olR-@XhC_%cFbQ3I@>Sz=K=S1(w#I|8_$ayCv}Ouzh}!{!9N
zOq};6uRVNwk&tFJftY9gGjc|qvN08a_5{suXbs)Ok2%WH@igBo5sqO0Q4((OOcS$e
zd*7>(I-703tdlL|GVS|7s*-dJP1jNE6$_6$Rqbh6MuVYBwCSP|-F-Ftn!#`CHWi;s
zl9gahs2XS8Zh)IK!6<T>>LMrQ)qaJQqAb0douXeFjgIubg%|qJB}FIttXm%tG$6_f
zExE5|bizgfS6Q6Vbk;}p>ElPfMkR4UZN;PhINEFVz~b42!s1FjiK93T=iWq4R&70c
z3x+QeRtoOtH>U7I*O90VgzHKN_S*e!(g&fbF%wr0Tj!+>M;s>Cj8wA;P~BbCi!Ssv
zXJ^)9tnX$XxGyK<?PGH!6SSRPd@*rgr-?1)^BkDSmoGksC7Ao6<umDxK2r|;q2cTH
z-H^D`{3Lf<7TELKyJvA1ee1QUdOg<N;H)mDB0xV#wnsmlJsAW#))ilKwAv*>J#prK
z^EBh;lZV=d^cOChAcVkz)CKR-5Z7LeNeJBP+@7=}ie0%okQAPTa|jXtRwKwD2n$np
zr%9H*E62}oHR@$LPBqdM$g0txvTG>4<FL8mMY!Hnerxin#eQZzn5b2u-s4w0f$J;T
z2CRnI=7+2K!!=|c+Ln9k{^FWq%ZC*o!~l<r4*EKa+SM1N_{=qBF)7IgLQGULhaIns
z6rwBMrY;uS++K{!P_rJC<GgEdOP5jDpiv&g*Bki1SpZ`VPQfv~AN1MFw68grZx9}a
zpY9O>yrAs=j*1F3=VA-^M;z+0=wrQQDNXmGKI>WI3E*j3(9e_S%e+%#+5ztHn3kE7
z>jR)4vtj4%emw1Qqhf0-1ln|zR@0yTM|m<U)(;#T>Be5d_^~8b(jVS;s>`<uBP<H!
zeC}?Sg_@Umt7SjtZI?uU9?c(ih`Xgyg-MmvgsuODf1JRM-B*zz4MqY|J{&OP2WSn`
zG&!H)9HE#{0HpKbsA{6{yc$d-b*TO+dHIe8xD)@&b-V@q%!mXQgLnJ;<afkh*dq?A
zj^cGfGhk84F5Dr*q5hz~cnJRwI&jA&_)@D<Tjy<UcT)kJp`+hQ^6u!xkZli44(w8}
z?Ur}`B(ey#LFJvL3$WeQTWq5lWcEUXv7;j52XCe9ZOm(GiWBMv${N_Gs!|<Ke+KRa
z(bNafG@kJHZ`Lf4Dct~<gXfgd%IvtN)3mAy9yk4(S9TRf<7ArLOIQhzs!j8;Q@3`{
z-Z==;29wo1*}Zm{p@F6beb$r`&k)Lc@#l2&6?1uUyOX>(p8NtgjR)YFLy##OH@Vp?
zy07p#Cbn_Aj8Td-cnJOqVmeS(@a9X4^AXZd9zSqTpWPgj*bCOG%poapwZuvm#C126
zp8ilItV8&d@9^qC@eJnOgva8eMI`Tq0fJxyEQlZEAEXaHAGJK)wYZQ6;r{W-9pLIC
zPQj<5xvkO@mcg3*>_nY!w>KPNzqFB4F`Ke$y3Zr%h|krViwphPN*s(@Ts83+{zM|Z
z#B`=Jbhk$iEhe3lTbOgnsZLv1{e3s0fuBQ5O&g}G4d{RvGLg+HbF(^eo!D%tah9Wl
zrgnBLzVuY{=~C0)X03MRpe-3y^~19BezEOQ-S!wPdGeP!f*PE1Uwe}LoSZI)xdemM
zd?l7U1lQD6lONg%^0j5<JjZV{5vynPP0a0ehKwHXZ*2Q0b4Pl~(@d3{w>LMHFB|XT
zJ>H4|*?_B*uCju@KJRYq)%ZPASn~$8ZFsmdKZpk6>OOtNt5GtAo_VWDy=+$1MVk*c
z(rzKFbNlPAfBfVLjBNn(V!!rw^^>3eIPugER@u!qjJAE`V#e@R5$z$2ne(O3%lxRo
z4*&-J6>W&V1q{6Ns(`R%yf3OQ_`T)|lDTOxk;@z$d57jPD-`=5(~;6Tm-5mOa2-u5
z0WbsCy*ssEr&=6mnhHFEzD^02UTD}ID-^`nsMprun1s11x-mvCvAq5b=Xp_JEeGD(
z<7mjq@tc;p40By8eP4|qzFzid$%d&xFY)rb*@%(>DyeQTRT0mRH0?jqPzAG-oeLmx
z>DFy+**CVv1MwTJIa~M8R_(I=`|SF94vF2NK!<A2Ew-V9v*ehSa{lPMSERGCZ434X
zO3N*op1EhZx~!{^IGq`hrTuRXJ{WLPt5yg9@((+8)7HDLG#U?B|55>WVHs6)u{8*z
zsOe^xralwIYu<4>0Yw^GJhUFfGJBnR7ZEdmFtms-LUPSLXSMnlja$K2tX0smj`Cqj
zgBsFQZyt$Hl=Gk=zj^MeOZrL3IkQT<jDY^F+M;is<K8nMFh2V+y`>gq&H##)cmQPY
z+$nyY{RipOAnUSeZ*pz$U$6+z%dP><K*OJtaWF1FW8Hf0*0aTAdWQz%bQZXqLez9F
z`&IiBzf-y_=<e63z`<MYKQ29z*E6OUw<W>hz*;+-K~<^c@pfM!A*M5o`!-Jx+WfO&
zi_*8gve-l0$<K<TPTMI47(m@f(I)09fYM)<?VC#j05CM0aQg$*!fg4?a}2b{E?t>2
za~oG2e6yXOn_6Df#*T0iPL%P0xVyW1s{G0(tuaq*vLkjvM-caD`RVc67RWFx(>ZA=
ztE-zm{3yJFgnBWe7pE?)c{>*8YR2EYL({hjy&o}D!v(Q(C@vv!SrFdes0Ga7%vNw|
zma$)RTzd`_ir-o^{}|T^;}QmhBsu#;v(_?W_@UknH|>w|ej}DuK^rkqe3Q`iHW3h`
zy#uHCsRf4_H?cK8U#e_W$kMuaXS}wL5(cbzribZ}zWz<~S>vDR6rM%c@)f`gxqWGV
zVas3cg2co-J3HwB=A9znE<Zjo%1zO)W2)KIvgi7XsBg*XM0;Qns*LK*+JC);A8<*2
zxAmxC8vaCgwxr{rZyLP>j8LeN*;S_kC0qw!S}L0x#o#p1fB$p)?u7(%5~}b3{gh}@
zQie8rP@RlQMGE92s4Ff>R1qrl90;$cuh<Wy@3Nw#Gq0Cih6~2ff0#<SKU_|uYI+>b
zRVkQS*xS*lLY#j)Fn0l>@mPsVS+to(sw59n=+Yv!s_xhx8RZOuoqE&GXD>W<bvSP{
zS@5}|ET`IhQT)KKU%K&oB6{lq&10klO<7^sFJ(2g1Cw?fc%`5C#*xLPn>LvrozK^z
zwvj0C@>7SabV6Tp5ZL`8^C_upe3I17tn$RtVuMj{eWq40Mzf~7SRMPh;Z>vNSThu&
z+@(C;DIUDDj0EU&5H~vhs{J>Ns)(y!4pYnkbZq|v9Z9?(biv>J5deFBuGA01=DMKn
zuqbq}JM<i^)I={HNFn_dkX3_Upl^;&xw*S-ePdo`=9jh%QF?mtajrj3|9owBVG`3C
zI789Yz-1v{A`x$bWscv_Z8BE<5Mnz)*Kr`e($tatjQ@Fob`!!H#2+Td$8N_i7wrU(
zBL*=K&oK*qeSd%dq5hNs5F?ikyxJ)$YJSoS#-wkX*5IC2q+|f@JQQ$ELiGl}VNf2d
zB~d4v?HfF9Fi`b`MLUM#>MSUvR_tE@UK`By|M>a}sHobmZ9x=}2I=kw>2B!;=~B88
zkZwt7>23j~I|q>N?yjM`oByCb@Avt<-}={L&6>4lICIV&dtdw7*WPznY+s?}X1f8l
zfNuAJLBiEdCYfU!fImhCf?dNy9y)PthJ(>*yLDd+Jl>tg8F}a(Y=SM0R|n-%Hr?>7
zf;-XgLa|xglNtE$jzs$SG_9=}QXM8Wnm&LYA8u6(Z62)4=G=MwxlJ1WS%&~#SGs<t
z*-#PQ*h(ttO@`sx3AvI4ZeU%nP9F^x^?GgPs#6EW389iG(V|Xg?2*cMI^c#hYMTu`
zC;Ep?Axi+};h}|?^vGmXP4-7O3=R$sodN9J^5-z(X;W__I`Jr-b2b6I-*^N@?!BQI
zidDW@M(#y%OBnnb$x7>~aORz7RDBqa+4<cwh?eK+IDNBCY*?APUv%bF<{v1qKZSer
zcFw+}0$E}Gaw~vV{f+rJl|JU`o@bJ>i3ug3Z}FH!)ZmJ%EQB)QShtiNfcx^kM^*FG
zRtus}%1YJJPJef8OkQB2cdq&7@=zXA`=bxo@qSXv=Db6%9DU5Op^4umrFyjC$B$q+
z-sAR+0fC1r1I^O+J`O3dU`q#&95T3<mY4fK2fsRD^;z-XY>}obrLP(G9T&I=IqsEp
zX$nZk(Uq-cpVsv!$F5j@A(Sdlw4cN0aa6yIjqU%5+7Pqpn39m_?pbQz`h8RV;I8dU
z(ag-})I;<x{~9#Cbe%00q`F1^@P7hQ6wd2>yCi-`7^_A5Va@5u8mKp0?53~3-cpz4
zgA)7GN|eALkgZ}A$0uzr6_|t#z4pFr`E5}1_f(wrOVjrPwVd*?T7I@q1lF@Z!7V{f
zbm;O|aROqkl>q`ou1dm&L-F72Mi8M7amS0Z31te!u%okqUK@6I<L9Pqux+NkO_E$2
zY^=K%=?dUGy^u9m((@Rsc>PVUc~&F~d49rWfKoC)fXO<JI3^p$|BarUp*X8Kx~{6x
zXbHJCs#6Rvr}qMabt0gpEobNn2?5|Y5rbYo#CsZgemX3Iq@fD(xq07FUWhCZWv6k_
z)`T(T0r19gb}IY~n^rG)r+QA~=eAr_`{%x(-!@7TDLh3t-*ON?S*~@4@grJx5YVN%
z?tJepHk{daDYf5oRb8Dc8`jd&+MZC;t3tZ=C}-o+x@rb!k4gDAeeTU@q=m~@$0>$J
z0`a~Rr%Zq1n{~8qG={;vFdP}R^iQlhicDWAV$L7r--(%Ebw$$_L>Vu6f|MeJjnVS8
ziReHBIM|Rj;eQ5Cf)60!1;rv6m_M^wOb!D)Uy%UG1?pus;XTZ&!*REq_iq8ahe+P?
z(w6ik#>kAa_}G-ZK%5+UGWgUUaz+*RdOgcu-}kP7)#@Pf?P^f!=<WNirH&S)Uf;(`
zRqEcrNa)|*p4sO~y;I&)9a!dktltN!*4aqtZCsm^Ym8=(eBo$dKza`(EQqyidmry8
z<kKuuJ3T%&+Q?bf-2qgJ=0Ri8t8Gl$39iYSR0`Q7Lz9Rr7eE!KRoq)g-0<qLgV9sy
z{QTT=^Z0Ihbyn^vF0SzKJi)UJF-v<+8+`swM@P2#cH!{MTrZKnZvSkM=Mb6p=W}x1
z+8)~;BgFC!F0IAgSGMteq5#^dDwzYq+%FIJhhDe6j-6}A>aT1Zp*zinGla<Wx~wq^
zhAu7~mz+dYT~9k-y20Cd6c&eg{-Ic;-%ChBq_SAC>TtPbsjpwa4cDoUqu%S%nd@a>
zPsKx-djIGrT}F4ic_fl|i$20zKCgHgsYQhJi${;7`!yFWOQ3i0D0e`@>-7Fhiv1v$
zM?mc<+uJ|%*#?wzG;d(ZO^Gt4Vn;1=uOqYq2X1Fwj7cH7>XJ!^`!gYK_?*v3qh~M^
zT7+9U5T_3^3~Lk(;DCj5R*(Moc5p(xe*!Rbl=n_+jrkxz5$yilpo3mZ?vx}D$dN3(
zeaiV1T`gJixdQ~|D8QI+=VynPud*F3g64vI2D<h>b)c(J^`0oparpz(GS}`KEnj;X
z+wg5ZAbijlwX(7*G9tHbpxO)o=<>#e1rz}d>H*tiOKAs!vCHO15AK87wZaZ0TAi7q
zx<XT9r$u+(@pg>qC!TEL4jivX0Ym|DtA({jv@WW-70g`ftFq5JIy&M`;^{j8J!HC;
z{rXK-7Ky%RW2U!(>)aQE=+pVVcH4>l_GGAOd|nnqBTg2hc-{VUfU?50T54LrnR~)b
zd(5eaYG!8CR<o5o`afm%J^@VC<#zR=HRg7n)xf}JU$0fuQsWoFk{X&LxZgaC5iC3g
z!vI4PQ<~!h$5{D5)%xbe{F`DTrydz@&qc0E<DYRcsW30&upo8LUV}%G_Cu<i&W9&G
z0+C-0yaX}`PlN^W?^)IBdKZUMIuEWG;y=BgD4lRBePiDwmTsbM&1$>)7KHOBETn=p
zgqt}lJQgwQ?G}1hXGQ2yULdzW@+KfSxC7W{_?7xU-Ou0eNtY?Ro=$7)uB^`QE4$Ww
za@1;C$P4cIhXyBrP@PY6T68gNm^TK~YFRz*nFv(89^G5L1A=>uve+6cpGNZun$>i{
z?I(~W%~1E2>(g-urd9~DBj4bcqEZbeTsjXhtsboO_P~89ZFO86#wvbup@fn2);H;R
zO@SMS>65zvT<hV2Te{N}=ez3igxIY+QcBe=UFQ}5_F!YavXdkOnft@XhY~PB>O#n6
z$Jbl^Z`CQBi`=v&T!S2xj#buOiZu&AD`NTd0u5rlPI@R+8-PFr`4LLW-KOctpAm}t
zbw&MqDVw^c!a_RZDG~8MK$rMUd1X*Bvg#6{^^Ayx(+$0Oms0UH!$9M`j3$?tvc8yK
zK@J(j;?<kmi*Ndtd9!N<Lf!3|_iOdrgH0HJ5Ns<cz;T;45|P4$DQBpb(+MtOF-}28
zqm+K0i}U)pWa-x;kV$rN0sYO1DrflD)*~Tpu^yC9XHDruqR#XxnG-5X<pbekx6W{3
zH)m<s+kdxPc|0cw@?fZ@nC`<=fwgMmIeAl1eTeq6A7qFAN9<xt6d4`8wi_FpjwjC(
z^J#!>>PkD(-mUuO6S(!r8%$&g1fqFQ?$dr2`U3qW2x=D3JLj7oc~4=ECHIPNbn%E9
zkh0ZSPeBYi+(*y=z?p5wX<26iWQGL)Yo)ZJ)ROug8flFojL|}(N#ze8h;`idtKy7!
zv_ygS|1$?|&r|!3%Q5NHm+j{m()&Eh-Y@3~+*2c9y%FTkSx+2c^tzS~G03p^Xb?^~
z7;LW^USU+7maz7emvcJcHI};pZSZ>nq!+3U0Tm-75|x6n*i)Qzzv=am=Ls9tEN-`0
z@*xNvNEn_}#b8$c-0=t#>F&k@yTjyV!Txrz@Gzy~CCU*5a+qmv;!esJG$X{g>ikyS
zF04RI{FN9~#xM{_^pPg6`9;y}hx;A^krBkd%_A}o<cX`C9>;|PdN&MWNd++}=N<i5
z;3u0(4i)seKKDR=o&cW6MBpFRkK&ECpGd<^d$!r$vi_q_y|w^ma+cSD7m*`dAo)hw
zZiH#4Ri0AZtw&woSU5wTS@z3573$O_;9P9(+8U0<9e|*hozijAk&3|feS&{JZ;{`_
z8C8!PPmNom4>s7$bX4P?a>p=z#M=a-Zf>B$;#-O_IX!Lc%z#rNYDDxx?kN&2K;V_T
z9hnxlmGyB2a141}9j#0TKxjeWn>Pb_&Z5dha;=DpUHgp|sSl3V1byvOvsD)H9VzJB
z?n76u62DjcccJCuF2cNy5X{?`Ebq6NSU=78G}+Y~YWl~Qs7+bs-OGZASrH=^=H&@a
z=``y;>eTnYSPOmb6YLVJPnpK3ZZ0W==mB1rB;nTF6GgSf0!@&wLmiWZcmg5vXd-}r
z4gHyXLy1zGJFs}3CMgF4BCi`JVP|LO{><kHaWlU06Nk#+rT@<p9s*HOQ)BNH?F{n~
zrIlolGWFp!tMqESTTfbJOlbChK!qM;VWiOuw#T<g>eqO*FFutr9dU|>Vtu%WvOqKA
zqYcfIO~%;Xo^$~ak?z_Ubmx?QpY?;#A3dUvGYVDzK()Tdqs0XK?A$bkPA3)#UgCXp
zc(V(4Q616-2sJUZ*A*myZtb93wK+dMDZ1-4g(jRi^Y*tiVp|f(hLp3%iiky~E$M~+
zq12n8<gi%$?8@iQ4#WnO149mwUDxGBLl5%|_&!f3MbBiPCJ0nj+|4Xbh)8ox^s03G
zKB3RQ{y2l4F&a1Xdf>%gGQKl0!ZM(yyoIeo{T516YByqGI4XXU!bRY&>=v)>|1TLU
za2;=77#RXZDHAyYY*R6$4pKZ#_n1W$xcHFiMXzX+GP5C}AN<2)YTvAN?aMZfot2yl
zv9SO8b#K90)FUkmQ;V;klCfx;7+(h;W|F_y8Aez`1>$|<U-$7oNdVanaxBfhrc3(J
za@q(}`BC|H?(B9>_8$Aa-|yA*pI2(R7Ms+}A`vC`D~LcRnQK9AX*G9TG2+BxOta4O
zq$8sDn8a$G;@bo9m!Fo%JPBjOPYybDfWr-MUKz&IY7wwIeELLX^lv?wAQ8rIE!39|
zHq-_2>N(L(Ib4xzS7+L>1o;Z<<k+p_Wmjt947;DGOi|+NBYW1SnFy@|F5G1IHp-84
zvVmOhL;rJ&f7ZXOpq|OrZsa(D$I*x^YVaX->yDOWfGu6!tw7GWs76rwXv0nupFU<y
zd31ACMIeS(xo;yVxgi_R(_PM~F7qrLN#pEaqAMb_BduX`3zRx5ZZO<w`L?vO_;(TZ
zP)oZyLO`z9O9dI$$-A=Qp2xd+$uTkPNsid)&gyUyiIy`6YLWPj_Wr!Ke1`%E?B!dB
zoe?l=EvFvH;iX5I@gR?AQE209fo~iUUwk8z&w_ayQ_ly0V*}XiRC>V+8eF{zNlBya
z^bO4B{~kf5RPUzA;VF{u{0~i?9DuJg4x=4Qem7iLr?wMIWdh?Pdz##{d!5TWM^J){
zQ#d0xfd3tTN$YWL{LvB2^~YNNFSX!TKpKjD!%Y^&uMEbk2?4c+<)+ZdvhAbluIR^9
zrWuSE%*%4<$QvHS7fixl8Ufm!$O0vr^i-{!(7ftu)&E0mT1J#n!gf|AL09~>pWpb^
zw@dF<Z3h^JDIF5)_#ItoE1#%n*h1|yo0W(Cnv>Ua^{!j76La4SC>`1|x4n{YmWp`^
z|66>D`dbC}cGQF>RXHVHno<rc7qKTJ`n&!Cxw(<yw<}tZ+7Kp=!H}rFv()=Nqhxb4
z16dKn?C?_!u50pMbWJTS$t9gkR>A+$<+hTwSitLA0J_`|K$pvO$PCXdsW*%&OXPHn
zu+2#r$|VLxLn}(fdMaC2a}$Tyx5}e}zI3xh0n{lhi2PO({Z24EiPAJ76NyOQi$w><
zD@pq7*d}+^CU1onnqqhAZ4Z!YKkP=lbw9M|h%iG+V6m~87FC(MoKc}ZO-!AOfNv`b
z&8x51{67ZtmwLDH<w{l1*yuDdIcuR;COiGqrKqU>WcF;VqRb1(!wUuZHL$Q)sStrI
zptQNs0;`(u@5L1;lOS;kNzK26hx~<D|G7^*X(DAqC<Zm}f#U#M)`27!vq}yQTj2n7
zINjIBAg_F+tL!4TBCMq-er=nmqjKUxl#`oSnkk(c>r^GN{~Ew7;*1g|XM|P@6w2Ia
z%9}byTp<=4p1v>k9Vx<O3g;4}4i0)mnzTGCyM7&)(zMm1nUjOaJW?_&-LR-_*lK^t
zJ$+=zBPE$X9~<3&FRT>=O)#ukn2TP0Yo`XeSjNH~5HrG}Ik0&&7KA@2R)r<aHH<%(
zq(hI1p;i0;h>b<`eEnv0q&Ns^=s<z5Hwz3t)n(}p|G>|RafF(jSCcg!;%Z%WE8)G^
z2xoA$?J%CL+|1BUJ!^d6`0<E9>EVs_x1E2ow8K-FH#ekKlo*D~V`2!S5h)@S8weA$
zZPb*iz&sbEJc=-bmVl5;*Cm4uT5D?tiDRU5c0A}*M?FiE#B#1W4Dg=o#H7EW%m3Pp
zC@9NSFG`pIm9Wsdfn2vd4Pm})TdiMs6G)=qEz=lG;nlh3hhvYZNEFMsyv2#NZyZzm
zIa8CW%5G{A?o?(j_cpKXKIbgF(#HCGzD0@9jG)%uQdL^k6y|Q!j&-t)%&XVcnBKr1
z&ZEN-k};QHG}NJc87&Ynf<T^_phiuqgygxlU6#%wxZvJy@Bso)>^l|Dpo6nkkiqji
zt?|#Rj|{MZ;JDh+O8A@+R@Yf=O}*@T4(1SOG9EV2<<eL-Fi0S(uP&VBP>R&HOf2V?
zB!)aozf2w$Q$|dUBT-hua|sFCuIc|})gzgpm=(n$$zLy``6b(v*HO_#eCz>OS9s3O
znyy>X%)7-*8Hv}9<7{K6gjUs#pD3lTt!n4r@tPJgR|3Kzs?XG5qE~-i5g25k1VPpD
z6evMxyjW%nidNQj#0bOIE|eQ#9R$uP>Qx8$*q!_Zw_Np40!1vQhX<KX90$1q^m7UC
zz(7&bO{&mu(cC|q=+|Zka+B84z0g}%xuc=UDr)ntA^g2PK=76E1B3pXNawqi&b?zn
zgLV9c!aL(Wn{e>N#2V~4owWnGFC~q~)a0a+ib||fAmrb!{27d&h&NCrQXLuHbP*ZB
zMJ=GJ=8BfOmvjArK@s)J`9r}p(IXo%Y3*Cf$fc6Y$@!6eWlzROOGdWJPg}C9x|5Hp
z#FRlicG~~B)n9M$WQn4UpxSOQm8|28pS?E}r=yf89!+k}P2S)b3%*`@Z41B#xH&$b
zraH^(fwIOl_438?hsC*RoP3S`-B-bVR5gMNMn_Z44{RG#LV^Dp-b4{WJ>{b$-zkDb
zpd--h{4rKjsDXzAm?z{xS*riA^u53!cp3R4#9;4X?A*mj1)+7hcDkC?Qv4gkNHj8d
zHiqA+oPTx$w$Rhv2Eh2J=JvtPe^Scf;J=o#aa*UwXc7+l#QOCzQ21KMMy)R$uQ{Zs
zdFmiPx?nAd5#KXq^byESh|#KE`C}{pA3}Vf5=-;*)N7y)2JeI^4}6Qcp{QG39Ws}U
zd(2>+cl^_x46=ZbQ?PGSkAl5Bo!k)WP*Oa`Qp5t<qtbz~%E6KL{FrXbt0EGuJ(~UI
z<uCdQh~t0#ZK8I6!iHFy$!wj~k~Cf?SWyDt5sQAoAsFs3cQTI2gSz>Wql)@8!o<g5
z*Ju-+I^KEbdtQD;h4Oci|FWt#BrO&&y3#<s98Tj#cMfaiTdm=Gcq$OfHXQPSwi=zg
zmUCb-soa|LlJw`)CM3Jh?@bl{WlthM17bo>cjbWdDc)8T**w^#fw1+sZ*ik@X+LiQ
zHR-@kflieQo&ttybLl_|etdDl0CVle42uDW**w=S?B>SR6`;{#x&IA81Tz>Rp9(Ae
zQk;u^T7=6;c^3D{7${K;5ZZ@Dwg9>6Am=5M$SKm-%f=OpeNCP1R^fpuf_V|le=l>v
z+Nax-v6LvwJ!22mrs?_8%}rGGjkYcz=+sI(&r4D2#NN+|MY$wgtIm0tlZJ{~?Zyin
zt7bY=ZX|{O-`hLrSqZ)~0x_ko!I38En9^5u;9O<A;y6V}A0nvS0eoSGOGpwChc1dF
z%v+C=&u1vv=H0ORP^b%k;dsH9KqfuoGI!Ik?!GOfZXTrvR!MDJ$M%+&c}wHNMMgqt
zg-VMNI@)(4%7%CeNIQ`(*a)|z7oBZL0(+Pdj1VF}$^XKCKnxZ1tm_tB<r~#L+p1|m
z6`QEI6<<&Uh9}MHurwZSrSpKIvE~at(IyPG^DmJzoM-SIOl40B$JeD%qa*{|xA2=a
zlE3!aG8MoXT`dg?3vdY;Ca)<gZ|g7}P6@B@=}|Qzxa_P2#0+<^bSitw#c8KTx?6j~
z#)hd*PL3}u$iiXJWdO=K3Pbo>n19WME8uw`OR$~yi70ioj&MlPls^<NxmrI9t0fme
z(|A8fjGDk?!>u?8Ei9K&E7m>WI3_AA_NJ-OD+s@%8hah84E$yBuLp1024)w=JutQ4
ztT@3fLcwt<OWtiZUug1RpU&yz?Cg0TrSga%im|rT1!iSIf%FeijK6%AAki4?5f1S%
zg~n6e7>Tm-hcx5u0ixdWac8B(SJ0;ylyB@0Ufbb@__t~?fsLIu;)jwX0ONL(9^HZi
zAPX4W_`gfoSf51qN6DL%ly7uUdSIgRgb-P4W==h6w1d3#1U~I3f<MiUv^lidfHZ`A
z+bB}RxLi7VtESO^4tZX%sJqj?Q}}0}|Jv<7{p2ml1}<SO7B9GtpDapZO8J8I<937V
z$sMg?^fA=*x4OCW+~Ok!T84~1(dmi@e<{|=oR!ZhL}pvIAO7*4zf6Y&95AD29?5p1
z+BR&7z|8@MgU@YI8-?}O3oKb?b6SxXp0y^16ju<P<YWRK%{LhOR=5Xggh$u^q+z}D
z)BNwUV?24H=~?e7<i@yVHql&4@^JLFHw&IBiGx&Yn_hPV27c0~HBf=fi5)>c_gh(s
zJ+N*R5h8;kaztZ-{{ppwz`*&)kd8OvJaCU!D2Z(I?Or@mzFveo6H4cDA(O@97A%o-
z<>Dy`5+iU!tefZRRd>$oOm$k6?2DsU-ckH(*dUO*;UOC_mf0Xm5Z2o*pmjx#G$AFC
zhgIfvrNXMHt>w&-IS=AiVxsS>uhK#zq2DoRC#HMdsrSn1PqVo2+7bL;#bGjla2Tc;
zTFj6cazU53wLsi<w$Mcn6K-Z{x2bQ4(-;b$M;mqqy+c&r%Uo5C{~Y&ClqQa2)YRO5
zgZI?#H=s~L+0BhdHi`91d3m{eSL9!i6v%&5_zVup-JGUB$~@(E)CrwqB{eY?qldB^
zTYaQFC@^Vi_LcJvPwvvp`NwG{D5#8Je9Y_v71C~Xh)ENOhH49Qyqf@G0DM&kiq<0M
z05-MV_1ex~n>v!_X}cWC?ftOH1%+9SN^WTWxLzhy5|x-)rvcG!q>3@Dk(VW?blT1W
zfuzHFMkGaKzgS}iJp;Z7J+#x;ygX&>-Z*-#Ezsp+_D^5vF`zId)`03S+x85GGq457
zv2Fp9cl08ihDjSGyf(M9m{aPSjOL{>nd1CAnJF7LFM!vi@FL|;zYX23pyoIPkOrqv
zE>k{LIztkFnq39@h|fHk(NnbBU(_P_*QO_;etHVRhUU@a$((pVBpz!7h)R_i<MO;l
z+dq7|+ak78k=o>PRO?xW9iLb<z3=ulvN%K%xQkRR(Um19Cuaq61Pd8D*5Uu6NCcCR
z-^fNkDR_TE6XvMtx^$eJ<sgAfmrZe8`e$Ndl`{x?x9rp+0)PCtEP&@-a2iVkhXG}k
z*y8WkH7-L$Pr)aR&=-B#Ats@DjVWixSueSK+@ZhzPCxy#KsSMGB2m3tqtT(z4~v7X
z{q`IuztP*U#o%E(SF)<%!QkqNby~apk9(*qlXq|H3bqXbkZD0<Y;5Djc^*8f$caCA
zMBMnnU@)u6ARad$V+687<28mgU17gdpZ@_1K5bAy0ALDeI4TW$P=6E^A%u2(RGis*
zg`>{Tb#x40!Z$uE>2<TL9NXG-fBo)0rm|H9DLV!Nie^KH_VuDyq={xsyllLhOwQ+d
z%R26&r@5HeZ+-t;)beLWh@KKge*UzkYw>C}+4v3vpf1n`{=2&6w5JCG(6n0rZK`_z
zA`z19Sq4e{@>Q9c4eSCnUDKuYt@kXBFHB2&4nkXo?ONwZ47GA$I+H=Cf^C`p5kvNG
zh5!FdJdq?+Qc_ZWeSOlC@a+C6zHx?jDt)J*Bq!39DpPk&{xiwY{XR{k=xnOD2o<^_
zF^;k2vjj<$?Mz}#nxOS1bD8E~&E|n4_NPPzXC#c`fiXTIxyS=2<h8#h2pBe?9B7DR
z#Xo|5%xA;#yZtFQF{QKc4;boX=Wk9O^Sj+2`6wcabBF?q^EqkgSM7V&4rrI&)r0{B
z@sbPpql13@a#VD5WYth6U?-q{2)wx&-3Q)TgU9>JRRE<S<ParO7IoBzTU$iB-R0y?
z78Vu~@!f;8S;X1KO2-+t#8pG<V(I%lZ%e!yMZ`*Dfzyzv)QHlB0AEf+p8fG#!ZDW1
zq+Swpa5xUTAW+oKyAEaM1;_NC6#%^PfhPeR(yH|Z;o_Vied+=TlNE$H8th+krs@|b
zZK+U*T_c0eQ{zR8L_fEmbsB-YOXbfo6ydKU`pqE!yEV_mRN*(E()^_I{)A3uuG}a@
zkB{bm=HwURSBe+3{`rgs0L9LaCM7D<l{mer=CPRN?w=(!y$=;!g>bu&-@Ho0u*W7H
z+N@Rd#RDpsu7%`?mW=);U|L+Bw)JD0t3L;*x|rbn?O3RUT%^RenvnUKh#=0zx|8mq
zB;Kf(7k$wMc+n=A!1g|#l-C;LH|H(wQ2Ok~rxTt?O7VAXVWL<Ic(5#Hp4?ZoaAmbz
zCfRfR)XMZ2ZXs-;Sy5Sb43TETQ`9n4K#$=52*Ur<i6Yo8HXB&zoI8&Ce-w#-45%Pb
zD0WG1YPn0M>Q4JTTQ>YlF5XT-B<HuwJr|B(pA;&j4ZjgzGj|QIy52GujDX{z;WA1^
zty6w;t9gTt`vcSOm`o6S;i()HFMnlP|A|1h<yzj%$4r&PaOygJ=y^j!MT3TtJipCf
zloQshtLBQkQJ;hG5>t-A=Q{@?@&U?0EHohg5#5x*6=5Jf{yM#GOGX1&`Yeex?!PQO
zkg147X%8pAT&E-@stDkBskOPB5ekUJ`gRFh6Aw3Vz~~=a!+6fv{cQ#<;HEb*>cfh9
zCOO?&>MjcuMsz)oR(=6U(VaayFE6Aq&HBXE|IpRLL?l<Rl~*VO3G$AkA~RQL=9;Bt
z;%o>~t?PhaF61`zrTnqvzVRaLiN6^9miTkLogU#d%BQST8TrSI@2MB;7oEt1%)D-W
z^XFb+`zo!wMS<lfmzVHY!IA+(2J&)o$rQl@Aq??npD}f7Oc5ZziwjcCY8P9UN%JJn
zYjDM+YP|(mw$+OC;enL~f&$#h;U5~VZm?2^>OW=kJWoO}f>sc}2D;zmpv0s{V=?)=
zFBonTQ%YRmx15iqK5OPV<*7_94@=u2J_u0Tw`1mS=-*rAmVYehxUD$MjEhedMeCJ1
zlKUEp``O~NAP(C5-LCV7-B|3Hdfdk-lTTvnH)`8d!NMN$k6idMEE)&;@61qQVL(Wz
zFq{EE0t2=#)>F!6EJ$5!+3h%Zx7&UTVx_!Ly{Qv39AC&9Q-87Sh>lVoW~?3f2cS^`
zY-vG=e2vEs_Om2F1Ns?cZUiZfUPC}RSvJ+DhR5)Fu}cP*QSCRAN{pgjV@+vwpv2Dd
zV9|EcJpX#M=h*z6?d_>+P*O;4c;1Q6{i=iL8BhzitN=NHuQNWered<W6XYyZ;OM6`
zi=5yvx2+$4=>=4t+jIla9r=+6mL?Ky+2R@G2b6qGQ0k9{B-bG(&`^oq@hFljZB%43
z-{I0~$qc0vIBx-+QYPnT#|ud;cm|;EGjb3pH>(-juu68zYrzmIDq6}oM*?cZDL6Uo
z7pd2?a66<!4qFYNF~>%fJ8ycspTL1&KGdCXhUf~Q(?3Dq>1ea&a61rPO_2tlhU4=`
z_WBFM{1TeAk}FW^p2Zj{c_^VTlIb3I-{)gRAG+*ds79Csh4KALMIpmNG;gL%C2JcE
z_q%MurMAbOXopi1N|0t8#eIEJF(8xpaQC1Nad+g1X&$#6Aj^xhP$DNBEoiSOty~t)
zR^>%UgR{mc5o&%5Y<)^$u0R6Gk{3kG76)n_EC(ScWZ`JU1er&1Uw&PV2BP`WBx@&!
zrqM*3QQKgIw0thulB2m#2m@z_PxOhViuDHcOWdgb9JS8Lnho8b2I2$th_qu<dB5to
zkv{c^5WIpiN4%)NyT99uUAaVUW1-mqT0ET?_wWtksEOgVLi~C9;gJP2qVO<|#33%<
z`A%UMg6mfLwH|SV=z?Do7N1DialA7Y;EY=qhIQNQ5Ad+?{r7PSFJ+_L46%hiSXcka
z`S`u{2K}u16pZX+caqd|yTp7QjAw^^+1*Cn+m{)9oQS!qXzUF@AHj7frGxvKg-32;
zI6l?15lOT_#b(~dz8;yUpMwb#w0FZS6XzsP{My{tp|;IuaR6>*-lB3T&HJ)2S2tr_
z_v)7}941jvR-|I_0v|-;W8@1TzshWt5wzmbYD&)f0W#268W@2b9v@8)g9x+gsG4ug
zW~V<A+{$V%m`={+li$hVMf_G7k`OD5Wzd2^J?`-#hOam&X&_C4yoicj>@b0N3)Rh6
z<jH&bNWfg(>oE<0-c?D2e8G?$LP=BR+|Vp56Svj*nYKLr3ia1ek`ONgW&6}$4u{lA
z^~GJ{X=$l5s7a+r6LAKAq3%~lp*(`Ln8gvVW!;x*S&fD>vfPstCIv>zR(YR%Cgt$t
zge*c)D$NTUrxV>X;{lKYyzvj-j2ZpQYUx^zUpYqLR`xEIrYk~!5RAyEk!*8~+K2M2
zvq*PzrhO5C?*5&;6YPeXP8QXX4xC-IXe{{M@`a@s1$Rxn$DY@=RbhrF*B$29C~}hc
zEIbgrjiMx7J~DZ^z<^ZmE=U|kLm%~@xmRDL<7WNp&G98!%p?q*fYB_4*9VOfzO5kz
z9tyYwu#opI=CI_Y-$EO!r%Hsa<(;Lm9cmvx;}xpM7{G(u6;J%tU}gm+-^_GE?oF~8
z_<*K}*;Z6U<s|}Le|DK~2%3|JHZXoIworHUDp9q*Zj<wjJ1e-xq4f56_A)R)<^lL5
z-L^H^f2Nkimb4`{N=DFG(#}hd;JKDdJkl2BAA9uy<){LYIjS}>m`^u~NinTOrct1e
z^Vgz^7WBT{G<2;%KD5hSJ&r1B6o+qb&`zj99{^w_8Kmc-ouX?+P`ZtjuP0Sl^2^s7
zqqW53f3yq87(O}=7?Fo)pe@*fXmz$Uu1ok#Adhlj9WXs@fK_@Dm-uVPa{H*3xy>yl
z`zP{Bqqiw6f~8*B`F9aC_W65?kDvlNRLasmFKDMIkj572Tdra#;|0erTY9jGK4HhU
z<l%!tEyqwh{+E%}K<AjWR7npn)kZP|>cPCPr6;O~NK$}51D-G1pTgc?sDG}RE)*}X
z8?B|2;CDBX6;#gYSt0s*4mf$Wcjd!Z>Hq-dlQi{|i>B<36H<8D^Y+&;1bR=gn%zE#
zoxhG=d`F9_ZigKlD<$cPD2o+*gaF(4y!JH=XLyT==Md*9vPzLmI7f&^%>XK+wO%B#
zfkA}K^QZa#2%E5~W1akvLQ3j#XtyHwY(JZFS*fTI8qR1qU+5_6HJ|#~Gsr~g_j64m
zJL|Huk`@@2inM6&e$?*c9Y44?y0cOF8sa?VnEj+Py4Jn{;C;s|m&4_7h(XCP)A#LF
z1=Er9_eH`O0PnSu9L?~{E{Pb^7uDMssHd8St!1CFZxx(41p70alEerxqdtK-Aj@^&
z&Rx%zePDg4*S1H&K9DznUWOA|0UpeSqqV^-Y&0VK^@EbjEIOv*XYyH2ZmmyW)3FBY
z6jL!KhYQmkPM3-@5=CZ0nIlyzxy4^doF??R#P<!mMUI;h3Pdd2t9BcBGfU+9JXtU@
zsOlRyDZSvF^n?_H+L+5tABC44P_*0-J~9-g6-|lt{;Lffi3BGJk6ZMVZ`7Ea3QJG;
zHJVmKZH??uep|0(?{vCx)~q;`c0d^&xvgJg)bwfZ2)NF*DG|^c4e&RQ&>0$%1(^Fm
zIVJf+Jx)4wx@Yb~LzXpgy&3tLS<jKXEg^xP9q-)oRRWK)biZblJI7~BgDvn$7s2xk
zem0T6S0#Z@(M=~ow5syN=b_f!7e!-ng6ujJ5g;PUkj_?S39-*l&yxU%$Bcci6r;AU
zLzLv+eK<kqGQ`n~W8^S;OU<j>EBI^iBzr&JRva^^(EosI$W~8zkJa0tty_(oX=(5i
z-NRe(B^u}Wq@)AMyRax3`SEgv^ii>G&ZO3U7fN7Zyr~O07Fj+~+xRtn&QQ};b?I|@
z%vqk#0ytiMuQH=ybj|kH>ZHrO68mj$VXx}$*aj%fi*)hKycAP846OZ~<8g^EeVn-d
zS@AG?v-2|H`Xuu|vpp<fuzrlX%}1hA`Ra>cfV>4eQIC{ge$^0(ZGLz|EqEfHO1_vb
zy>4-8|GU_iguJDApa6+=JCE}4e&${5;$5h3m-PKb20SqIh(6E6!ri{xjf{T0ff;AN
z(8P%cB>LzF?l+hlFYDQNo&pgfGDrxW<Y*2qMptDUJffFH?RBXN0YKk*4%9H<^UtW$
z<!T|~rZ7_*yLx-CT!nd&YA2lPAXfRp7g$JsIp-WGb3cny_Jt}JOmds&203UyUB04l
zu2hc*xA7_Sy9i^mclPoA8u;`U)%*KIct<PifF))4!H;!7JH4k&#|LXicy2LFz%nFC
zy%*PsZniiLC-ZmV1t_M~V{WY`Oy~G$vtOnO7Q#y-AN@fld>dJ^26W&;%FQz@8L)$B
z&x=vvLzRgLJP$l1ASKx?DlqM6-FGz-?!A8TNbKj>G+`0fCu+GJ_A7t!71b2E*!^Ow
zcz{px%vgv))HJZeGRFyH6L_F$sJlh5jHWcO+sh)>##W%pb)>pO@Al|$*fWM#qC3xk
zQCXGrUP{H)<e88@dwYney#Ho=6x})#zFxwbj{tYg2=8f+z7-^Dxjl6QI!E23d_upc
zuG5I`WpK6gw>VvSej~cX=n4=T-Rh8TxLV(JovaSN40K)<CMc!a_Prx9sGO&yBQpA9
zTfEoitp$ej(>A_Qjt9Suo5$=`!{w`mDIPE)`eh4bTfCSo4#+Ext4eu-J7C9b_{D0C
z@hF{MWTyUO=qeo?l)aG=<pbuBX7kt}!1pfmk@~f5GP`qMe)<ZYz!uJ_<RP}^43G@&
zGgmPSeM>Zud)=EMbTWaA^T$xsLg9#}%;_M|112u<tp?TiLpxu83;X!Ya3u04mK4Uf
z<whszYqsQ^DY%vV!zYwVGs}hKh6=gJl6NujBF|r~ASxUG+M>=-?BlGFYK{uVNk!}C
zUKEYG`ZKfd((Fr5!pXJHUO*;_XK1x=-+YqyWw%|k{o$IURUjk7M0@LeEqw2%)j8^U
z{XgzZ-U1OQ^9CCgr`9(-BCArGrYu6iD?QXK-*bU%D8-N<dnks9Ta7Fi@~lEB4-Y$P
z*S*-k;O0ulqI^u~@^s<f{P+bIx)@jz%UF;PxNG0j5XbMy&Ct%=;%TL36+V6dyu=wL
zfGS0_F3dg<^n}hdXj{fEQou?dF0$qW;%Z%-ZeYduNw>U)97SN8EhcQcVxjlSpq_8i
zAN8EoUI`q*qP=8;v9<oaB>W`b_bvL4PmuZ-F!j(vI`QEcbCg+F53|-)jFM0_8WH@O
zPjT-h@Z`1scc!##w##i=ppB;3?ium>4sX_%z0W%zG5#?d)9QV=Yv}im&{eK!uWHg0
zsyN_fF@i5Q6Us!zi6VWVcy$?%?d2o`u3xJNOk|Fe|9AuT>h+`h6y#nf6p7aT2T!!*
z&ibx@Ey9!C$vOz91bmL^=`;<f3X_k{*w?P>2{IzXydyNtibEWjF6+9}fywL4lMFX0
z|9HFWW{uMtJtRm4T5H1reHIKrR?llVC3X!{Wt{z5xt&};jEIXB?Z^lW<Hu({fOj09
zANe-eK9<_(#N|LnMgCb3I7$J&x5rM=)>Dq8IMf1&bT}iQ+2o$oc%L;%>>f_AzJ*O`
zG=2tjbNU^+P(xf8j*RSY^Q98Hr?z86_DEjO0Jggt_t37V4yBd`hSOJYIqY~ty7I>7
zd0A4XybD@1B7(9DOe-Wa#k&z$7(+UrA3OIu^Rg9DKQIcFXwlT|>S9f_A3tl`HR#`B
z$u3)dqz0at3~gFvNd_qSu2LkkH5gj?N;Sj<vtK#qO9HqUbtu(qP~V8TrpsY)DYwwt
z8AXOosCakiSyMU|9}HPyi|Wd&iZY!!86(%|y2M^&+_k)J_4g3ezZiR<JzF8XW|dB~
zf7CI1kwz(bil_dps$0Cl8li8I_pd5{BFJCeVKS@b&ik=|z(Gz+*;e`cM+ZfQ2n?ow
zjDm=Ftk5ma+_<vLDTle}XX)7xf;3y$jfg%U?>3mi`D*#}5mn8yWfc(f2QVO7hsj)^
z0_0nRJ*>acli<Klj9L496+ZHrL%SVQ1t}N^Ms{U#KNbc^$U(}M-V7Q6BV-jtaEXA#
z>|R8(OJ$@#M$c4NuHv7yhdj-|tIJ+#uG<fa(JxnUu7KH0%K}=%cuT$i_P}5=s`*3v
zENzyiUTH68F%9xK3kWy$yW}My=Ht#$g`SKw9;C_~n^7dtZpE&vV&x3ww3;I9>n+|i
zqZ$Lruly)6T0VMjhNgf~<R!s~&+BEL^#lE}VLH`Cu=AngqcHEL{&P&gJ8qyHElnF7
z5ZSDyGe^A59h$}>MH4h7`sX%*P~e<CiMji15nYau$tF3LP3(Y$qfhol-ON8mgc;)T
z(&WZZb?{NG8^1j}(=7aJ1HL-Ux0?Q6AaNM>s6jimxvMXsxzEU-KZmrEl}gY0=P`cD
z!A_Q?0+TGiCX@9g@z(aSl8*03t=VDWbK%nc*yk0un#9qPP}&SD=Teq0R}LW$6*kr}
zyeLx|bxZOq%7whbu-Ls{B5a9=t^O?aP}3Q9l;dns6=H*S=p#~n38H#YCD|(zyQv*M
zml`8Pc9P{hNFL>QqenZssVygmfxx&cFWM@L@i;WksNdpvNp?HL*K|qRGT52AZsy9}
zq{b(FINP8dcSYEdjFp;l6l#C65OzOL;?a4ImMk6+kC3rv$-#zaUN#B6V3*P~jl{Oi
zS6-90ppTzJ#&{q6gJ4^AN1+=EviFvy4>l#`$g88riQ~dP<m@q+FG?l~=>Dj7V-u<;
z4-|(kY<x|TS9a+H8*<%ZcZD9ONDp$*>y+SZ+cN-a7N8N`U0b?~tm;dAA$`0<o4`!o
z&2s#Qlr|QI#U)CUbHZ(wr?0th-Y<f?@7_5#x>HXs1!K{G5R8%|w5YC9(wu#4x9i3t
zIAtTcqzfkZbDEpWW|h<lj{T5v`xCg6PTCPiFTxoL9+BnkKUKUlw%Z)g%T>y(^t@ki
zI6KiIR4!IHp}XmcoxFFxyZ%<G=`MaFwN$(Mng&-}Cf!|Ar1^0yswpY=o~b!CjAB2x
z8sAIeq5UWY&JhWC5u>;`mvbFNz*iF1139yY;pj@;Wtmbw@YCzm#p=4<qM47ZHBN_(
zUPZ?W;k61$25<>%_Yz^I+4k~%edXLK`DQi6Ve}0la@jw<09dT=wtjvJbM8by!8HPp
zPb`QWmP`xV&}qn9xoRubeZbkIJwHMKS||GA%jX=&ygBQJHMN5@q4fh8^}7(%5|-36
zFHw^iKzo%cj9uCMT}LDmvX=<pS4;%fu3j#4<#`||XKdwcYUlRCTv@yp#HdfC!E8*p
zD@mYU1iOOSG#E?-HjhH3A2{R)eWKHB6X{4{uzKS{^@4Bl?IYru-nqJUJTJY>?3xsk
z2!t(VJ1ku59IiAF8>SVWxxRo-?}Qo<H6fILev3KEe|$0|<v^D8&Zu?C2ZG#xlHUAk
zK6O9C=ia?$FXLc!(rNwU#<&I=y?>4Be)p>N3h{@$VtA5Fc+E$BwNXmTNSewv`#~q^
zqm<LkAh%BHp*m`Dq`ci??ul~u@yz2(v%$UWt%PHdZ8fB3xl|oK*XT+HuhMU-_|0Yq
z-|nFa)M%p>n6Gq-r+od#Fe_G&J6Ra;G)Jl&dRY$qda}20)zY#ox5|3f4NXQg^6*5m
zI|9;|c(3Euc!h20Y^vWWMmrH(d1NRTiBJPWuoLiu&Z%UWm2`v9FzTuq6-oy0N9u`}
zsCcv_Gvr0g<<B@i97ub(qI^%G0vTaNk4~e{5DNK`$0=~J@6Ps9PEz^|v3~;fnw4sn
z;c8K4i}bxrYA>m$V7_Ja36uN!E66#S<MOVdI+>)NgaTiMXzugKZ|+OnaMV=1w&ZP+
z1S&z?Izn_yQev3*MQsKGbk2r4EZi^iONrtGVBxAyGViz7x7WTbl$RPEe%qAITL3B`
zjTdfyI#Dpok+oR&SkZPqPpAD97;~X{KkaZaKZD@<K?pGx&Z!x_E8-iPJeCQe-5I68
zvv{jl8Sp>$UFg^-iVv;(=`!)t?7tt=%S<Txou;gX*{bPsj^!OKRvboF5${EoE^<1q
zzTwuPYIK44Ir;U@>vYDeP-4O?kdHyPe-a=zy0rx-<jo*nwH<KZps{v9E&0kwId>Y3
zE+Bdpukfx-hj9rs>^U`C@gNOHMX)P}=cjX<LCK=5eAR9h)^AN9{uHH7Nr#q3pArSx
z)c3V6oqOw2E|GKtg#tp^5+_zSk;O~|{h`F~TBoOUW93fo18X86(yg;8v^t6a?~{MP
zjyXFrY27Z3M3GqWW*&G3GsN`}K=OhVdC;B#P$dzdyku$VyxIr4@5sEV{!*mIacMYe
zk2qA@?m0HPZw}lbvxZp9rNbC-yz~lg&=PntEF@ML@L2U3<157sX9BI^gVwW*T6w{Z
z_)ae0Kk8jAwI+q3C!{=_3eap7L+cTT--g9tL%oc@&~zX~j_Xg^<94)|`B7KhxDhpj
zoxK&;43R!bkW-H#02-1vy#&=0vRqfTgJqAiC}H>Kod;LA;%ja6di8odbB_fh&QjI}
zc=x{hp}Eo4T^@6IFnDrUFNid>_YGIYryAm?yT7YD-}cjkz^r&XF+O}f7n6`4Z%3ZT
zhh5`?a%e{l%;JoY-)X1;Z7c-&i%D(u6_0f1P8a_-A!C6B)gxT?6l3wt&M7JcEal^h
zQit9l8e_H5{JO*DvRKW`k>2%Y<BRZ7utY~*<Y)(W>-O-QkFWH|m5rbl2$1NP>eZfG
zdD3Y=@E562e9x!x{WaKiWFGsY>*XuFo6IUeTVA_`Vs3NGu@tSO4W!j?@UL!n4PJ5i
zkif;h`rs6&OSz04uX{;5l8vy59pA(J*&3zwg!Eo#kd*@_f=|A4H?2c%+bRk*rChoF
zhX}XK`$HcJ*Q<!b(IM+=q&_>Vk7g(X{GKT!%e}pJBmLhEOh^4P<09!8IRdYKx|Wv3
z@-NmVtClR0vqvVysm#~e=c?mxZW?K&8?~YiVx)K|oMTVG#ea6hq0tvi=QV(gMWD%A
z&2rbb)hY;z=zVqFTQ!lRg*CVN;?^+ad|O#;B>%)m6_2nQ(!gn<p?z@fQq8hzH3XVF
zzRPyLjI`*Kv-q6g!*;dNE&uG<jP8#qZ8t)e4+%!st*2i0+hW|FClX0S`Xu4lOhK;g
zgguMT!!V-HlaaKbPUR9mCX{CQ8wiEsa|MY7yL?O;9CF;lTtg9<xGgH@3sg3dEuD{=
zdPUp*L*7w+-^E=#f-!raXSZ;A-f^yp9~z0S9MK+LyxMTxaB8NPxPaN$>sbGSG;?os
zl(JG^Xs6wab$nABI?cXm&VLgRCCxrlU^4)Yk;>8a^d5oVzecA<f57qB%PQ&oZeLGZ
zP}JXLe14~fxYIg~JsntCx@8Hn=<&_DU!3ZQmMD1FjzTMz=7e41aUZV5)E>C$J#BpD
zSFF51{MVJ8mk0coAHV3NUZmfp5g0Pvn$F52q6Gy!d$hqebQ+%7FRQ@5|MEx+SkuAB
zSeXX{4HXaX*)s)kf<x_}WTJ%<SNC;l5aT{3DTlkkn|NvVf7X#*htvXYp_!*dESxft
zyYJyp;u1JuhMad3F}j5X*u14_w%C9bXpUnOKAfaEbC)_fY0$poy=a%)-oF^{wk2{Q
z0s16i%1DsKOj%W)teGd>*Cp?KFakj`R690+ll4wC{PG)Lj`f=v6ecXlgK9&8dXhMY
zpxFR-hp>VDv&EBv$rZSvB(cpjTXmu08k3IwL`wOrz%<YJX-M*zcNDLumg;X<acJhN
z`@XE9*vWjhmrIwCZ!8V9G^$((SQyu}JAjR$@3hWCX?v+|JJ{gHd)A%4NLsyDF}7Vn
zsaZ^z?B8Kix6Ha*TXsRbYu~8goz83zd9Ot!^+2rM8`$PoWX;*M3gmfX`DZ}uT=qfi
zL7W8<ch`LB==_I3RXm#;5-dl9=%=5FWA2;BeEYPrsAZ;)yY|u@yk#2RXk8y0cQ2$1
z-Gw~E&wK7_i{;e4mu{z%RTp?j4sMgqLAJ9qSyx(mTnpSA<9Y?v(3<_O)@Y})Upor1
zzL*_gAXQ;s@R{xp6HH(Dz~8q6=924SC-5YtqNuUXqx2)8jt)rJma=x{0J*ikC1mEs
z5KCZ;gl@JNqRQChjEL?r!)9wkii6uxXd6p-GfXD$T0js&vEvVv4`FBRhcS+JqZ?fl
z`lqH@n80yF?zwLuMDA>ePw2Pqnn<a6&zzAE9@UP#{F@Cj@AOt26RAi|54N({R=q-!
z`qj+9SzZMWl5~lcT20)BP|OJ3!o+Y0Iv7b`fWB!KAAr8+kzuqwNAo{oqIKVNG^E(Z
z@WJzLTB164u3%%{urL6&?5<Irp8X9?4=ZMfQ{7ZdJr<@uW?@;CxXXwElIQ-7bw3so
z|3bYMJv9@U@g__!H5>4J$9+=EBC;SUmFi;SzIC~upK3nd&QkA(FAu!X-XN^j+-R3F
z)mT{|eeh8|EUutS0xh;#o!C`uf3C<4@cUY{x1sA5o^@1=h5;^DaVg%4Sg5VAo0rq$
z+}>)l)e=y1u2A9BN~{U#fTL9P)AJhG{xn|8eEa&?#X0*ekW5N%P1YzK9(F|N2^-=D
zV@adn)1Xx=HSgb4c)U8aE_?1IF3Y!%uDa>S?WoVS@Noc-i!9n9$O*6al}&?(UV7t7
z_FMI-Q>2QrXdOx$$mM#^&t<9VJxy}$)fe~f))Ur*PO~Py)61na6POk73(J_G#c`5*
z{EJCrM_}U18}*jCoUUdt_qe(UWEN4=c&`FEEVjRJP$A$rbJ9V%-A6tW?pTd|YkbGs
zrR>R+JW&ideI9t)rmwEB%h-V?cwV^SXAE7*g3YJV0$Kuhx{P@vq*B|xaK<-3rjw)5
zMu}I#vZcJ@rCanTVfUEdBL=5ryhs*{)e3*I8?Aalr1yF&?1>bl%UsPhWdW}INJy<l
zUtRMXl8YLZDbLk$-Q3q!E<G;XKaWd48{*>Kyqfz6fM1GUn2QjHR?60p{J6AiaPxyi
zfwc7qk*M4=jeJ+0-%Ark+_lpvE7ZG=?)no)ncL~2p=<XT+ND!n+Z>8(366{P!u{=c
zechU2jGIcg#*hX<r3=x;I+np0e_atjX*)T~ZKgf@%a?`7o<~SFV-MUHI3#Bl!k4#I
zee%_Gpt^pk!y!k!3^xMqMwHdf8Xd!qw_x?vN2kZW`S$p59!EdM$DO%!n5p1h55`4O
z|Jd`QCGI)9*g=N2Yi?niMHBAZGlL$-yunwm9H$0*o#YDFAF35zSIk{#XR7lns#jFJ
zV5jXJdYorYiaj2BEQp%E=ccrFnus?+(Nd~V@>{52bTuq<ka_6X1f9*&q@TM!uDWNE
zr5n^qns9*ecF$9h*!|o6bTTTEwdMMcC5a;|(WxzC@2hC#syq8tkD@z~lnaOUnQZU&
z<Cks{e)z9?mIR5+sjY^=S*E5ZN6S9CDEd#t(DzJPPs{ENJ_HZFNF#hjG10K=feUf7
zGxnv+d90HM*HL5AZ}jd#z-<YFP~4%&OLd@}Ov{eZuEaYGuA0nJh6*A|P*_?blZ*^P
z7l!z?mfT5HV`GfC?N4MFGQT?!RAE?<(?^Io^8=7nwTh)iwd)e-@vz@qm8GI$H?~m6
zitEzE#rU9qaQ=4SAdw}{9a<Mdt@r~EuPVB(=>ik>tTUN%$8B{`3K|z?P|8|TbrVkC
z#cs*qNUzTklTZ2AD{ei`Gr~^$q}_Q<%_~s<#^d*3I}DbHM#@(qU~NrtF7&=D13P8I
zl<rzV!<6%`pY@k&4BW|_TNB+0F*V1}An|0`$#%s__2-KE@QL$!m{5{{V;!GSZ9soF
zf_70rzMpySUrjQE?o#||vrhj3Lv(XemyGYV+l;oh{AfU+Q@}*%n#B>(A>Bf|fkB{x
zm{fWxj<F4**m_ELo#485;S3Dt_g%DUVfu|LW5b5~EDo=d>M7M>@U+YD$lLg_uOAsj
zJHLd&z3ohFW_vqgO}c!2AYQlZOLc2$=9Qg=u0`*`*ED0FxOkM@Dm&Ms7?wHNB1Bb$
z29divsb#KL1352%;84xOJ7{ro>58}Lj^}hZKL=~JWXOSE?TP3m&Ckd&_~7XTW{+q~
zzC~<1($zW~EHv1($IGv{XDdzw5xJFbMmF<S^sXIk3}#=Qlt*i&L-T~yr3SiA*Jt0Y
z4LJc<ZH%a>NOy7I!>8f<nVclz<>$|ydOL-&f6CeDlDzxDOSd#at%^Ov>qpa$Q;%Fs
z$cFqx_=m1@<)NZu&c-@>O!E+dOV_4Nywgp&v%+0k_s0XbJu55TK!vtOwr3Q+t@Pxx
zja*}CbL`_E?;1a*JM!H(?tVC0Z$g;k-tIs5C@Y<R8R+Ft4)<#5!6>H2UHocb$*5dr
ziZwX2Vv+Q#{Xq*sr|7!2|K=`Aeu}i{Okn!FJJa?M3ZlE~{(V^5>D$#;;;f#*?<tj)
ze<aOnwS|@!8u$hGh8h%^Su$C7-qm+=ezjc~0dr0}bS7rYAlf`IO^ma(d5)V229Fa?
zJ8qpC!7Q?|VHUx300%WDm7}D=P}w_1@~ZXMNT$)AXm1bNcihnjH_;c{HW<fCk{g8>
zaG6GXVmnsQyOyJLmYT2Cnu~g|w+fMLz8y>rPYDsjg?JQX&+4>_{VBivFjDI&o=m{t
zSQ0q)Xe<Ud0`9*Qds?ms-L<AQD3#tHT-fg3Z{&t6dbmkIy16opC7UcO%pEOZc`$?D
zc*-!pHk-ONaG0sd4qzE-&K;C>s6}G+ZgyTq=S;&NpBB0v2wz<h88w^V63TDzFs@l%
zm9gYU5)Ut9NkTC9eVL;~anNO{@C^xPIX4VpeO*M5sX%$$E`Wu{y~qkJYwW?PBYB)K
zX1(6mDQ9JIYE_8eV@G25|1tHK0c~~97bpxg6e|$iy%dMy3GTGGw73>`2oebHZY{;#
zDOTLwU5jgRhoVJq`uzUyd+!&%9kOTkn%QgC%syv;XW%k<)L%zb5Il_eX=|maVo;DQ
zj$#&OGW<u3)M9SmdE-9cM7F8Y>ai?dKp)yjd|R`XnQ^Lbr!bQ?DSl?)k!$d97w4Z*
zM;;5ka=mVyauk~1*Reo7cAWTlBK@|{p$FoF6%ch~`^!CLN1zQhb~7$q)$$Iaw5<o-
zA?Hr;Ix5wkrP`rvbYhCJFdWIN&dZ=@q`gS`-cT8!HJ6gA7Fn{tIbO^+Gj6cvcm%<_
zQvJ!!kF5P;dIdEs3Xf!-f~4U=4B6>i868PWcJnrWp4IeSfj<e8(Q6&DDpAggsX8nL
znZm+-geGerlf!S(3(}oCORw(<Cmv%ry@$gsydIg5Dut=S{=gH%pmTxX#COIQ?a4jH
z>p8$cLkZKK^2Qr3aFXJKr*qGykzf~+H|ox>Xr98rRn@b|oq|Ddyz}aJ=P7HtjcPHy
zk>y!@yTZrrg2HykMaL1)gk?-1Vq)L}-qsVtl!pj#hlO@as^3+%U%DpR&-YJOkIbZ{
zBC+d~veg5+!@w7ysgx0Aj~K^sE-$`p(otwqMy=H2k>D2>@cTAymXwmw>p8zslZr)Q
zn<Y!OE$yO>xm&2kV#w(4XS5*~5w2Q>SSlGh)o(h`d$(&Z85Fkp&YNG2?G07^4V=yo
zWJwbj*PO~7RfTnHL$fDyh4XJ4ZXT8?IcvY!Gh_0oi#A_K_=e)m3tFH<OqQcaYxS*&
zwiR;R(|d@GI<-aULJDSrrX+=mQUy)Qb`?05bbcR11`}ZQYlR=ns_UbiesW<U5MBKk
z2~;xLrdW~!Z-F6Qc)Z;yig>nK=-pNeIpmRp;1|ot^vgtNs}k@1G)K2fXB7umceKZO
zmLn^aLnB#8sh`&Zq<ESOx$Y}^qOjS)o1!sZ;?eK-ey!E~*A$%1_#}HT{gF|ZiB3^k
z-jW!?uTuJ>U+H(aucf&BGOMXQS)A#gymZ)BcaH39tUSSdc@YWrSy?*e!u~X6*PG%n
z4M3F1F0rC0C=kFQuk>gKBcy0&a<u@1D8|Hwo%>!^zwbpnIroWL$G0^A5_Vh4%={Bz
z-_a90aO=69mnDRi&Z@1U)shP_{JpR6z<X4V@y=@y_EbAS8HzWOZn35|HDpDimP^PG
zb*c1{QDjwpI+2BxqTDK5H6)1rW&O|o8VlF>%M$^~9@`dim1RASWB5P@#qoHiL#UdA
zTGup@(6YF}fpJm85qHE<)b9$3ZDp49%8wM<72=ul3t2wh$z7S88m<6<W8oit(L37c
zG4k!jqRLsf4gN;5*Zxi1{Zr5mp9&&ZuwYN@COxgQ`-Zk|Nr;Y=KIb5(D@-$0jWCcz
zWOS>p{&Z5z&6QO_-WC(L_$GIwK4!Gld#8ZA1Ur4Nzh4}6&TTAdVyanA?9!VY-nyCQ
zqe8Or<1OymbdUIxREBQ&#=zz4us+6N(8v`h#4#4s=E@T$HSYSwxZxdSoOSPA42494
z&z{#pw=jKv_$xmHuND<`gp>DC2_l7m{vtScJ!Dtq$PlHA>wF|OffAQDl=3EQoWI!z
zB<m!9;R09LOt?&-<=RS{roWIebB(iYC5Oc83UX0v74h(y6W%+HVUhA%1IL7HcyNuj
zEDw7(YZrB1cirW@*Wb&gbW_q=S}!pg8b}mbj4}h%iyA0{Bl!`Ll<{4_R~AmNmJa+s
zdKWKSaeEQk(3@C|?K3+mkM`IG3O;2iRm?iD&zI9THEcUlla{Ta6_<>*vfY+b9<l!)
z>v9+2GF1nVWNoz2+zPvgP{;BBBTEs>e9S;E2r;7+JHjsK_mx{74VTi3#sZuZ^d&}T
zqus>Dw#wc85P<N!EIgCprmtnz8O_xaPIhh+f`V!Te%bDuiHm4hde@d2o9NrR2|2g?
z&aDx~a^Q>b2GA|Uc<&fNE2g+aWMaubh_*b9ELHhGCm~5LN6&A&ldpN6i#?SYaS-&B
zz;NTWP?_^ynm3UI9->D5lsu+4jup?cGwL2TYMJPGWu1`w4g3YxzcU;PT}88G-p4g2
z)_1tgE?e%NowJ{8RqaO~&>6tevVOIb#nz#@M8mc`P4@ieZ<pC_dw_%5Ydr$(FLsW8
z=?Kp&S0e2p2Jouv=}W=qIliT-)Ff3;Mf(Ml>{*L<MGaC;p7ta)@DEYI*<Nva8kaHg
z6Y2zQn*uV*lhA`T<q6m_=kFh{9$Fi-o$;P*-ZQTl%RJ4ij#{gOwe!r6C$H5=qPMg0
zz0=D^qGcDqYdOFZXA*`~($?8f;L8){$sPouc|+3oY4WD12HW*<;b6>erML@c@5)@K
zXW~}t2M^<Cam8y4I|kN_s%Sq!jOnc__8BDa&_2F*$!$WK+fBHG&h#2Sj0*QRG*S6$
zwYwF1OO33p2U(w1b@nIN_a{j8sVy8KOrba=8Md)i5UTP^d@uu~f(6391dsQZpEJv|
zjjVAsyS@tEn~j_G!KvwMo1jsZ*pL6?r+Q@zs9H%Tp$(Yje<zAJrs#4Wy>H59JlFHs
z5;D?a(b6lGzld7%M9!q`9~q`dJ_&FwF60cmJ~b+eC8n)q!t60mf_j!08VOxB$t<Fe
zc=Hz*ZuV!WY+~%UJenbEa*}+fJhMByRMsuQ{c)8Z4~j(ANgK^8FSq;4sau|hL7O^M
z6W+ez-+zCvz5l()Jz!I(Yv=)e_1QzVg(P(K#MQ0)DEeTmyspQCYT~HSW=|EjdXboa
zy!)co9+Xe@vL|=41@r5o1TDi=%Z%Q~mS9aQL_|0<ohGA#{FXfCG52-%J)+?P|0QVp
z0B*-%9zEw+D^=<5nq<D<(hXgA>4+&~@2N=EC4f7PT?L$!K#a|YJGhJ`6Njl1kqKv@
zbvj(Mbl0-Auf)wC%IXHc>q!5VPYQWTkI1wQWKTjNU5dP_qU_Y`Jz#52--o2&7e|%K
zI8r6C43j5{kMfz0-R!Pw$cQTIp#`YXMWUt4&$M<F^yZF;Yr9R}S{~ssxGvJji)Z5@
zvSIwO_in*o6z`_}kNX3j^`?9Ur&?D~J*VRF2zLbw3}m&lJ3^jX7h~ev+*$g;>QqNQ
z`xC#f2>&hJ5lnQ#hcxFY62vz9^>h|XC+vtWmo*OZlg%ZbeQP)#p_e4XyJhgt4_^_T
z#4jiWg2fA{0={GQW$h7bugm}9Wyl7bkLlGm%2ph>&$y?06Z|5r%c|l?oI}Ykn!Ii2
zG%PJIpLhuTwJfaN+kd~BPGe{5{SEH`Vj6J7M#+nCLOMfBsw?x-o;kMVZuRrthR9U0
z&{*=`GiGxs;F(k~chP+ynxMW?543u8E<YhUGSg6bmt5cO>`?UT#U}fHcY>76BH#DO
zMq8&JY|)&bTVbQj%kmC0n$4y7ILHlF=+<HR{Hao2zj=c-)%ixtPUzd4E>r^)w<?oC
zYUtm+;TWPuzzWAxI~BiaHuRzv$Mfz`zu;5ggRyl4WfU><Xd$kYllph3$ClyMbv6@2
z*7C@7=XJYyXFv#cL(btR$SLliu0EE%xbQ;9%id+NlRG!XUFvFqIZh{6Ucu9A7ufv8
zdnyuk-FNyiuZWk^*LGyO&3<-Kh7N-GyJ@$OlAL4(1K65I$22=YJx4485Uu8Ll7jr%
zd<}OBDtii>?2*s9u3)thMu!8GO+F10<z#B${5=k{C(l9N=Ei*6PrP31Z+j6B<0H=W
z=X-LsFB-{MLK9yR0-&dKvy;z(VJR)I>X<R@l>0uug=($nhCEHRGegF`L#4-&+4ufs
z`t=ayda6QLg5!JMq<dZhHc9xsj@rU|<qf0r^XeM+Wp&DystVezm38fSC;yRuJpa!0
z+Eu{e6ccT}CS^_NmBkTvLY%uOSI}>dZ`_CrS^}<88@%~{o#W@sGr<u{m7_Or(rQ9N
zd#Z$By<+7WS?ycz$tz3e&ZhXoncB2fAT7wQitC1T`WU#xV4e(ik+V04S#t-SnIL;c
zOj%##^X)>5XvZ-JH%jM3REr2QtM0vV;?k+88ae?A5_;|lQt6ta=qZuP7k-BufR1kM
zx`iW>I$rDb1))k|i?%|$OP33&&`+vr{g{A&wrF#s)0)Dj0}}0$iFFqh!D~L^C$I?&
z-Wwv#xaIKqLvX)+sZVO>DGF+|FeXoT9gC)T4lP4ItrOONm>_x=^*}~tn+vbms@x=E
zdQ;!SP%nsQ-V?e7O=PZx%Rle_uFzi?n8NDCd*27<7dFXkxE6cWHZd@eSK+z5xmCOT
z1D{Dp8Ts!E9_P2!=PxW~J0jQ-mx5QEXUu{hwJFM8!wh-YrN_h5YaR@svg3;U3G<e=
z_62a*&z#QcP>E`a+}jpSJZ;tn9=Uf!?#Z_N>fFhtn%pHIRCWhNuW%)rUppKgX$2T4
zD$lxrO-s}Lzp_lNNWqKtng<`KY=8Oqa^A0l-AjF*mp6(;tV=q%Rp?IPX&4h3hsMo}
z!K&%kvmdNRO{-=E3<}T(wI4=4qy$FQ5CI20YYACtEB!Gy1n+<S^>n$}@47et#J<x6
zPdF_cZqQ5?x4rPh_Wn6O81{Y5NAJ1hjdcFW8-n;tKU<p@6#941avdD$h}vqO$*yfb
z{wpmH);+eW1tIJ@c7Ujn*9+U&q{JV1%kaIUjt5Yp8-uU!Zw8K-Jf~RBZ&&hTorzqU
zQiPLv3bXjr6aUp0i{4Z%bX)(xD}cQ$(Wd47aaBrsBzD=D__#e23L_HMiy>OVzK}R#
zk{XkEzm&1&{q38j_}ts9+Yz)qQ49Bu7DyV?lJl!KMivS#>VDkPcXso>T`pJ^e@98y
zSNeMx9a+e?I()a;?9%9@WIEBtPacnlmcC|89&L1*TO0ya@&@|)rU-~UEs`x!ppUnT
zpiwfhiP3(LAse>KG50ue0l4um@p#y-sLd9bGRQ>TfumJh>|gycRyBe3SlYp(yS}4c
zZ#0^|Gmke$^v+gcrLH4Dqhh_Bg!He@@iw18^Yu~9%o-Kpy^}vH_!}puc;w4u0QMa>
zY?r^1%qIHMji*7))UV=Z+^0+&#t>!5vP@@lTHy=q^Gsi>yL)o9%Z#T$#ER!l>Xc=H
zj7NVT1Ybf6OCd3V-N}D69rkF?hYf9HKL&kpggN^ypt#4t%tV=CQRqpnn+`F?4GtsK
zCX+jB(vB1JS5;Ncv~Ul?6981#H2t|8%F)8Sb*G-zWu*G^FSS`t5H|dt(+=Fwud=?<
z9(f;z04Dktzbfbwt%?O8-SI;OIQeKuJ~)$C7O^vF@_^6&6lN-^DVU>YOtiK|LYgc5
z3Yjds9QJSw?Q%;^B+l&QLiq_iEkv2GQJA&b1#-=sjr&AY(kp}6T-rtKv0`FxaN*(v
zd@<Yqx0t=$UoxGR_&shN<DEf2X!473KL#EP#qbD(6>*x!&OCsw8n;{(c^VBZx-<DY
z81I!$(;v(uqPTra{uwd@FKiuYt>XiUjy8ID_^%OmI39Xeh?>hAv-O4xHh_n=dPxH#
zs4Go^U*->~SG;-Izf7c%1?xr}*qMIhcp7=Qx?#|5i_%FqhBKVF#eFkd+wFBshLa~>
zm@Idy#|;T(sDoE+I4Cf!(#+QG?ig>PEMFKUmb9hrnp7wXUN^+S1tyBh2@eX}eWQpg
zhAe%>7k|75)9BE#UT46q@Y8P{HoBFW@b7Aqa~I^qC`aUfLF2VP`z6?QTTxkC*RaWV
z&F8qY-*++ap2#`c^riF!Gq^{}U(2*-Rkk*Wm$H;not;r04czG-V!;PBi=KX!%<HO7
z6p;33YFXAPvR$#azj_qr;tjndT)J|sD&fH8Lr)|!;u4IKT#Xqmvb25ndG*iTdfVxO
zKSQTbrN#?xPF@-QpgZ(ox4EG8L`AgNE##XFf2X|4a@qcV9TNXBiAD11*Eh`e>&*9A
z(G#2DQAa^CE=@|TQ8uf;cAhV$1?~srZ4Lm#0Btf+QB4}M$6H^o$VPnCw>((q&aw`=
zGDn{pRHvq&5)Bsd0j)TLhR-y%EoS``Q^leq&IOlP@IQDMTRPAzmVRfck$X8n_-DVW
z$=L)QY2>~R?rZ7c5QwlHIkR93X=_wxKOL>J{<hwpHy(ICJlLtc^uL^=cOUg?OHt9J
zT4kMHi8QJ<vBQ>r<tj9)hfrVXQTX?nQ^y3#@3U||GQ^R9U#Jlrm-QZAGJlafIEN!t
zDp3Xwg-&-(Nd;<=aAHn*Oh>JU&)+o9zT*bX;$h7nIej8i4=JJ}Yp%#aQ(DydrtbE(
z`uF`?`biwnbh(nfud|$N?XS+LPtjj8DB7+uGwKrldYQ;#<}wp6H`+rrNo56^YDRG~
zH9p63qL`!ZRlVsFBHIA$z~;u-+LAWXl8Ke0Y;d`%Jf0P>CsJV3FhYL~fN^VjN34>&
zw=A$Nqv2{^*s~6p$tDQp6oS5E&OK6P@$oBg^G21$ze&Oc6W!~+g|PD^bLWi>6i=C1
z$qxO>lt#w(IQdCVl$kbDA)j08<c<S%2aPdoru?N(P>eT^^&13v>IE#4F>%FQ?-~a_
zSRISnXVi2F0^cW#W$ZRBr`zkt)Iby!n<%BOZYC7Ht7%a0B&j{8UTudxr1*UBN)NOb
zI#ZB4GUA(gFguVD%Vf!Uc_%gOOn)_a^+>><^l93{Q^D!I7tSmi#Qd6&VApB_GH!Q}
z5U1*Y>CVVn*t6^AkGVWzWym6@L=9oT;#b?&vwZI$lRFdX;Tir)R#9>4%dlbf>@3ko
zvc<?31m6jcYnlO?oK2Yoi<5c&k7r*C5E0{@UcZ;9C1v7bpSA;d2{w=mDA}}Xdt<BC
zutX+{R}<+vrmqRnL;|-f&PLPZUgagXN9{2x0)YSl9HWRxs2I`N_ow1nn}m)l9deQ;
z)z=p5B7XOU1U(n4hFKT+#s`k5(KGyJOsJ?xoPG#3i>*zYesyk&EG0LQ8|MaOQ$SOW
zXT#RX)LiZk?^AqI{JtwQ9PbX(^8hg*(8xR=DyFFcX`S<OD_9F)hY|?1$c&hZMB4U|
zB7vbXwBK8?@13c<4`()j%_`&)0_4^BfG<e?uLi7nm=z*9von{Lch#pN%5g9y+)k-z
zwoYgFI<a!d;Q5OKi-rPM8y!hCR!mSXy*j#+<w3RSIoNONOoj)+`IJ%|E!@Zh0^jY4
zQSuK&S-b+dMf8D00Dyl5O{Xp2S$2LJlkX=Si-b&BWO;tq6I)?l7svfEk90-Xk<IZR
zoLFEgmsPmzBu>o-+$j4STTk)F%^lCKAS5KsFJOm)zuR%~zV{=e2TN4m8njlX)WYQW
zo2$4OFw6iD<4+Ux%2V$h8}{Yr!w%ZD&9R0t?J+K_>WZ43aQ1n$kTNtR)fj{$2$h4V
z>DGDS$)~MG${C_iXo4>a%nRlb3sJpeh~8V(*4fEGHWLz?Lx!*72XMnrweW$L<kg*j
zo(cosG{u@%QM%pjmRYCzK+HNGI<|WfWz>%}=5IIv03tRL`TP6lL|lhZ{t_X9DM;yF
z=Ldab9XGfHj+K>iX04L@DV3TUwf8kr0mBjeLLG_j+>RdOD)2RyLpw&7Gt35yCTWPK
zmTD^fdtD+-xavYb4(@8s&`x*_QF~@t=dmV7QIt5xV)d{Uui7~+1Uq9B44o7~JH2=<
z2Lt%;OZpu-w>4cL)X_x1g;iky{h5`zVZJ@Su(srI-3sV2Fl<-Iy1dQu|BSN+YSpwv
z-F(t=1^=M^<wk#Ephm=t_dPs_5RoGk7!Mc-y&)X@1@K>!5W^-mlL0xacf4Lbv)OG&
zU7aSEh+&AzTmS46@S|<GjU+bizg>6@xbmC&!Xk-VqV`@}Px65>8f(I_28Q7OoGAdG
z0S;#;!Zb8W38V%hARRAzdv1wWPwn`~2g@5`ZQ#>@-?}R~P`2mwu}JREP{=CO{gC96
zZwiAuEC}EK`eE2=IiC55_h_i3T@Kzfs6P!`up6VvPb3+b7(VeStyy>XE5kqv5bLGu
zbZuHg(ARcOn-L-^FbL{mpI;%_)WwXB-3Y#EbRx_;1=;3pkpAD2T>#0yjE{_Gl(WDv
zG0iz2dV(?#@Zj>>#VsuoA6Cxl4#UA9T6o@mUkhy#As`^eZ^BPCw<F;6_9Z~XPsJd6
z@jCk#O>e!5Ti8cDIL!B@JNb+fQf8KBcY5!YYkA5wDq*7_3akWSJ^JQ!96W6zKrSXC
z)`kgO{``YIwVpHb#GbxOrdI@A%d7ifWB4WA(M%uDj`8%Dz;6HMU^CqMtM^FA*{93`
zmVcvJejy=^mX=s*8(<q&+$zscp37?aE8-ahv)=B`-K<fiMZu#V03-Jo0JR!&EGc8M
z+3h+9_C=9KI7k)IUoU%U_1bZAhXzve#I&GmpORsrE9U)gO=$kKkL_*6S_E}pCH3(L
z3dnK~%%u<Y7HFj49|e6feZV1BVeK-F7Z4?BfG;T-2r41@c)JXUn)YRM7>ZRuk?nac
z7?kkJEnvLA&bxu~M()i%9A*CkITuH(rD*h>5&q)juq(2iRy}<#gN5K-VF79w@AtYV
zK-We2N$$vEH+@EcSP-4c>LgqlR)o8TB>@^I&mZ*J)X;14f|64>_V?Gye%FwLdFIe+
zekV(TYel)q7Sn(EQPmHD#lry0L2c4~wn6OnK?z@B$`k!Na(RM>0UDTm{y=b99IA&M
zy3lJ(0!w237uV=OBl@$t?x#=l$2;c+k@xe41!FJPF#%RE<s2TSEG}92gZz5y+6Jp1
z@ItPN5=6rP-v{d{v5a_lKkdQus_+hn_slE@S%4T62h?2e&$XA;>AX{V&$RGi*w+N*
zcK-jrK!*08&nvUmPC=H4c_<wpzYFGa>j<%XvR%i%5ZZ5wJ@F-G*uw9qauqA*E=ag4
z!0nO}KpNfX+@WZ2=YC6Lgg+$ucSJ+_p4@K0P-jvq<&rsPM8D+B!49g5;nL*v6Ys-+
z=o8P5a0S18;epZLmBbde-|77D;yiX~+AxP*wz0u*6OH$7jTtX28`*_`B5OXVA2*B%
z5P-t#QYqooz%Kx;A>F!5R6EuZ9>Wx9<7~Og9|PXAu<G*10*)^-mBbcxM6)6&u_*zR
z(Jf~BaG=q?LDcwTz_e0?T$>zPQLkciL@)^@9ebLpt*fTsOq<*p%o}WWZR%00ewS)r
zGfH2GGl}W8))o0C@}2|Ksy!e74)uy0>F-D;VE(MA9}hxkdN2etN%}900dy+<K}qx3
zqMk_rS}fu=xa_(>+BI`2dPT>QYJ}0$H)yqX3c;z-Ip@~=msF)hknRPmG(BXoh+RPr
z*{uasQqQbUqtw2O>*ty0@fTqyjIK=dHc?^lm;x@Ml9yZMYu0T@$AW*FNHE8y&i>l`
zF@h{QlV;4QuNm{<6kqCvb<)9EQeLo*=H4Po3UU-Ts0IxC0Qb>@>4Wi-wp+K5kIy%C
z7Zd{4hf)vO1pDap4pP;0QEJH5FAI0nYuk5N@<pcM+jBJW1=PTJ)SqAX0{bmkcxw%0
zbScAqD!Qxd2zac0a7|Z;uF?ioGuci~zJ4!yMJq2(ErDaCf2zI@5tOrY0q3@CoIg7U
zDJh0foT5gJYD?n#vbb1c+o2v!sE1%@=LbzDGj~(al4MZ>OHhB#Y?Vi&v>k~s>%{s^
zjaY4EDbQolx@P(e=-1Z+${c%)Fvg~1OKt3b-HFO#D$M*3o;YECc;c*7w!%^mF&eru
zvH7B*TMr2h#~vdw`zz#M+d^=EJ9KRuu{iQqoCs^XfGM!xrxH%2*g-f9=DdYyjht6r
zu%mABq-l9XWyAJlTtm{#Kh(>VrD{Fw3VaN_UaY}sGF*R4Iz6#PHw_(9`-dC^|3p59
zww42GisIT~km67aiHw@mQ{M*`U0vlo!UU80`F(D;<^;k`kZUhOL@b6#Rfvy1{AUBi
zCTM<Aaa5g&jn^$Qd0g8iP2YsZ-md)WepDby$x{E)Kc6##IVB4#s}G+Ra}vq-jaZ|X
z|Hlxh0a{6(4$hn>w_l3<*^A<GG=3g);P6n8Sm)EI)IYzCPDLriA4s~+xxB0=$L~~^
z#mWYSN}eSa`~w#di5&RSl_=SJ)>BwG%P>3X2)6T{wHA9%LHL=Bq((#a%XBpA>BsrK
zKAye6>91DQ&+sxeKx~_4GHAmA>(F?wqJ&A}Q{>UIQHxjCEY%np!BHs=Id;lvqh8j#
zBZ%3r>)!gwM$pubi{8J`$3<$%9%+LMv`R_3(!4R1lQFX0scU>LN@s_PCkahP!uV}x
zzh8TzFC>sx=1qk;D#+ge0MgS>NmX#V5Gm#=$$bbWr*?BsCS~!^>k;&|I%f0`Kq$y^
z5Py5C9p^lARq>Aan=(S_Q1RIbuqOj6k`>uMOe}jt47pswo4vFRD~7t^YlE|g7K?{4
z7GwvDAsPgwXa!F0kQbH-jcXh*H0#AmvNPZV0>Z^yO)#`rZ)T=+<XvAEsANV|g!VkF
zceS>s>jEc%jQVNV8jT(*2@Ho}Jhio|`p#sE#D^C+2meE!aTLP0w(?b7rK58TCuomU
z_FAsVcg>l#4joDXW1*Z(VjVMamS`d9D;En;I|U_~t&>@X#w{OmSKfad5dxgFS=RW)
zpN3M7T0Q2$OTg+o(n|NbUT&VS`vOx2W5CqAKHBK6+|C;L!7SweaDV{Efr)U;HJC#`
zW?!G#rsFFXy94TNi93Ep+?(2~OD<AyB_Lw0?*5v%_3KuhglEowL5T$1u<YmOBd6B*
zq7eOED6|<}HQFKV-o(n}t`<5twTC{~w0U2<SUftLllS`O|02scN=%UUo9K#LSYv%L
zRQ*hBsD&9fLFlaNR!n)Z8J(2VSCo8xeR86|S&x%g^xbA~z48~!&+^`H;C%c)%3NFH
zK<yr%5xHBa5|~g?5KvH=_FyItL?uOvcs=fwhWp?}p-Eh97#uwme&NJJOZORGn!xcI
z#EDeSXn41l_+?4oXWBktLfxmUq4>UTzkJh<-=?k7Rv#@|PbGNcj^&EI9-BOX%>|u{
zMtkl*26HaEfsh=(_8Nnnp&>a{ZPdUCY@3sn{GX*)4aOL4uj^H?d(P1IA!tTz<eXwI
zO<MQNgL-sChz;zT5-rCrU}=u{ntOqzr=r9U$;SI^-^^?pCI|mo0Rt{w{gQ72DAx5J
zG_0Wq#qflRDhdECS(rE#X!I<n{fHXw@^AuI2WW(@4@!b^|K#$K3Y-Z$-mUm0>BO3A
z8muDxC6w*yb0q3cqe;RAG{?Y^j$u7VE@c$}Yr%f`zGTx*#w3@y3V`KT+Me)9K>}l^
zs>DPM1+7yFY?}2#_8|g{aL;xF5$AUJzJHn?DBfH>l{OKVjSnAaUMVsLxsa&w&^ea<
zObIdb4uXk|zMYoMIy4rFOp!MI;L8+RX!0*TljDF4=JS#JoY5pJchyEZk)VPSZ`llJ
zE9vrD@{TW&_9y6Qws!aN?ChXcSA*X|EVAELfZARE1$Gb_5_$et-wnp{Ijs%Wrr0n;
z@sL}ygbpFmm41rpiv*&&$uMN9ZY&tyvrrw`Ld92fnaCV9EVldxN%nWBE(HER?%%=i
z&|(Pco5_XYtwD#pKfc=4R4uUYlN402BL0bT)=Ru$^0-$tppRMB+`0KK1JEyCXK&=G
z;1P}}-bv<vzpDX*!jqtwB1)Qu6q_B<On<1`(s5*4MT9GF_WO|@jPmgAW5>_J*B`@(
z2B62@bf*0{0i7|^%(G|gg|M?xS%!VmQ~$10%})l~5pf3qXmWv#Xq{TJlbzA{T_Sb=
zh6INN5uiCz?A3nmx-{Y1jT)K0Qi)=II#J+PCr{`EM;0DH3B&)-^#Bfe2j<=#AJVok
zGBx(^rs)m`T+CC3n6sH~O%Ya903sq*{t{%rQRA|zWb6ydXY>@Y3SHobI{c)1_wa!C
z$sa&F=Lcu%dVi#e4~e}Sql+;|-2y&-K*Akph>3vbvvcw6`V#5V^|prGC3BTSXKRh5
z$&eisTep4#&BeXXM#0NS!l#1gf8AZcSTV}-N>V@*xnpBmZo+?u6I&=VuYQaxuKJAJ
zLh~~QtK%)+Nf@JkMN;bsg4KsP-O2q5q&P{J_lp-}S0W0rOjjZT%y4AEsQjN~OL^(f
z-dZ-drRKh<XfJ=Rg$73>|2o=VIAGL8L9h8spmNi0o_<B6(!&t=4Ap98KwD|l{a0*e
z69Fwl;$sd*Q-%Wa8Wj~wtRYPmh21+7DfecQ@oC-1rE$)Zt{|->XZ4ICb=m;0|Be`U
z>Q0v^2YVqghA#8X)!C8lvcIGRBIcSiT@Q{2IDmj)vBf3fgr;l~^J)30B%=W+OpeOQ
zi%dM;RXjThXX6j?nH^J(o$QZep(P_MrvUJFP6Ny%dDGPcE0cof%uX)bLClvj8#^X?
zRF-F;!PM(0`Cr(g0NiK}_Ur(C&UV&mH_#s(?J@PjeY3mME`Z^=(}MUtUa_PWg|pxE
z%c%D>VNPKHPEzB4zo?00X&cPm&?LojV#ymU(Ny}j=n{QFg0A{l`%IgTWsbjx=8B7p
zrZR|{Jb&G|B2pEpXtFow3+pdVIE$LpMdkS|?MATg`R7K{uW98sYPT+{waD}9DG||v
zrRzkM>@`xSWc>!)lh>rYm9HVEBmME=Tgzb~a6;J@iGXt58rZBiV4c>Ak~@o~@?9S(
zP~ZPn=|FtW69aP)hU~SgiGZmNq^r4A@MC8%v)T5fMZIE2Qhc9Zx#STvcUCjCgU<to
zJP}@__y(-k)HOoSu=FY@TTl~xp25)qu_yRM#Nwc^PE5W;x&8(m0(hwhLqT){aAJ_p
z+tgV}&#pnx2t-ClF{jH=$@Q20AeNP?ty`oEXk1sTsap>K+nlc#<&y9WlRXbKDjZQ(
zK`$=8OV(ErIvQ;<@_#`7d>VFAjoE&xvbc9-xh+H#;F-MGJp&3;C10lmnMwoqKLgzI
z>~C984@;_Nc2rgqm(mRZk$rOp6x&vMt+#MBYQMVfn&+xjlhHsQ&8%|f0(0vPS&l5G
zTwX$c?@V&0*C#kLYYs%P5U>Y(k;gCh-NaC<(K7-(=n2?83kCOLOC}O3^kW$ZU^WSK
zg6+%c?4-i)F=5%E*9?W(@k8iHZE!Xq$?g5KE{Ko1CCxX|K(U0Oxa^6n*11o$(tCO;
zytAtHH55qajoEGcvptZz{nj7J9^X_C-P--Xqi2$~vzgpty{%@^LS@2Ot)f)S;(1~+
zMxo*zD!@<dU@uE;_wlWe<~Tp)SihP^8aGNl$^Qxwi6Dge)7@kHdV*Trz~6OZ%ysyq
zH2f-4TMUvs`Gc)*k|amcCsNesC5j7<zFAsY6~UD*tI=$qg!F`L=*T}p3jYrb54OxD
zvs_em6yo_e-M&s>^0mq!%MbCMDb;nQ#tdPBQQRn;5=mPLKSmKt7U=6I2iv;1{(O+m
zMsHqunB3vZ6H;s$`GT?2%!>sJBaP^g)Xj{rlvzKIWB;GzhC6Madx6n|zh{`rnb?nY
z>TsO+Pc%WLMKWVJvf{07IUx|z(<<3Jr}Y#h5DtH1ZiPq}*LG*&?kHp=?6VU0>~e6$
z`4!U&S*9M@pPFWJ*F|m9-(+c|jOaVq@Eem?!cl0k=$(072r#24qs{#-eaZLtND6#P
zajs1x<CKzHA@0W>{j1gN@QPVnEW5SYUxTjYp;3R9&oEYgrndf>$PTtp0Wt>4ye+~9
zG>411od*8IVXgOp{nMk}mn<V<BWq5-+WlKH5)vD#x#>-VouixX-}RLw^@2%6hul{B
ztk;`=raXtiO?dGan7WM7TuRm0asY3$UC^-9c`?twM=_B?<CDAVC#_qmV}t<GzIo>J
z`n6`-l9n>~^qNBkk0^tUhB_8K1$G^%`s|1|NLB%U)IcwQ4*Vi9HoWIe)K)xNH&V)_
zqU(iSKN%Y!nz~^~BLv6xM46}TH@au_(ycU<Mx(<Ishs^isU%*Xw$TH`-q5NbzOvfv
z%KHRq9rwA>o1fdfV=^#(G4u7i%Ea|ATgg&S-|{(f3Y__R5V5$$#0DN}maqSpl0$(;
z$gwq)U`X15k9RFJXZs1kjEvdqILY1@b+nb?+gCiJV;;fwzjS+wBp++~BiQ$_MHU%Q
z)7g>i^-qaiz*Ggu-+#|Wz`sqNDY9xaw1?~;M-$g(i3a`+DW50H%#=u)AXWCJC!0o(
zw#7ga4iR(K6|@t72Yjg$ORBe%Yx{tCBAR=`qO@?Dr1XM1I-H^KF-Ey8<_ttE$pLc4
z&-i{o(|6@dxyS<F)K!V>E2%bf4B>zRJM}{lI?_`ZdQz@bX{|j?T-}{WM4q9RsG!2k
zPCwd6B?0jwApizM#L`=VG^&jp@48Z*5U61`s6J=?@H&odJUw@Ual1GZV#$O}lxpc3
zN&gv*e|7N4Eu#jf6I|801N6%QV)=BPQ&G~6Zb_L}IA!~V^>-+|C0R7N7h3rf4f6w8
zb^9^^Y@y%|k^ZXuP9rE&HH|FhvBm#D4^jjm@yt=Y3q3Lz)_tC~GEfo`Imz@-NIge4
zT|w4(KTgbv(5zSZURTRM-cEdj2gitx;t1js<@#Y%eL}@Vm)*`&N{%o6-P)fE12Jlb
zTP(e69Kh$4D8#3)cwO(f5<@KDA)LMaH9+i&c5-2<5IMqLP|wWp^`P*z_qNM(0(w#h
zS=)yoOY{FE>yM*cyaTYl8d+?a^L<p~`kzR2%K@EMw4LI)!6-3m(u#RcDJ%43nNlhf
z9Q4Hll)3EJ<{ZyB0iKk777BG_(*iC{IJqOPXi8u$Acz1d{kZ3&sBZkCo$hqJa`vpx
zBa~=|!}H<OUS#dl=FXM*RiS>8REfzZFrsA$-5h=%N7Fi6zTh9R!}kQ>&raPL;J{&B
ze#$H;{=Il-qlRhe!*=tlZikEs6I0oFoa7ou#5EnmVD&-u7Y)%NTT_W$1yXj7Iss}p
z0crL}7&v_2c6R#bTWZ;5`GzV>HD%Jb(tB*i#f>ey2C`RS*Rem@llV?K9F<mVgK66w
zaFM+Fab;cQ|H((Ebd#gaE2<6b(6YHo_6CwSgivb19r!n&6-D6O6%k3h$uOkq3VDB`
zaLGasi_50_eJZyPG3xj3iB_D~gF`@ozaP-(DJ8H-%Xckw4`aT*&MqRGyX7<wk8Q*f
zKFL)-@WBFZfU_<-z3KbXwYoWMYydZT5(a6)-2DFq90n@9O!TnL5s?@8^B2FIf#GT|
zw}7nK5eB~cggUD4&eYe}f$BZ}=^?7Fp=omGPT8eN-JkIR8F3x;C%a}ubzRHIO0!-I
zytey<XA8KU8A_y|`Y{rGrfaNmT1gG?4NcOSAx`<tU@?vQWgyNh=}eH_6X1_3;m71|
zld2QWRO$IgaC}cVsLY<wEA)po&GMsvZcO~hg)Xz!9}DuGKhXT+qjyN!w+h*fy$$CF
z+~pR;E0vWuYJ$|fi~mgUFBZ#2@8T;7+gDWLLH?V0v!ayk!-jJ8v#O$^>DSBO1Q-VU
znWxpvblWp_Lffj0pS%EQU*xDK%C+e@yyqa@NwU19*_-KaHZ@QQwHBQ5X?0TKQRwWW
ze$0d?s+px$zmr>pp?*vW@yDmcKk}K>uqlREZP4aB6C8k2xY(TVjKI~N)0_!da{udr
zNwH`^DV!uug(0AnI-eWi9tz)nGTCAj^tst+sxJEdmbdnf6|r|w%vRhzJiR=!ct2iJ
znD;d}77Y<)XL~KQb1EwhR)vF&413<jQM;c)zrg$X`2TwsK$NX4CXzynZY=apd@{?k
zx{9r~v07s$E9GFik|{xDCUJj0q2cOG>t3{$0fj_<PhjtqyUX^1@ECwsHnZF5j&**p
zJ}(tzC9D8<TA1_($OY`9c>uSwYvZz-E#bNe2DrVmEgJ#v6Ifg6O2HNX8xKAF<M-f%
z9($3+ruj{oM@;lAqIHK|zfaBkWmCP2>(k9Ko&F}gIv4j&lJ_&)o3DVJ%;R+xc?*|W
z8)1hNZb{Z0X?j`q@N<93aMzD#Onmk`OLg~PN{m_9InyiGzg5jLtwou?-^fw)i;onq
z{M8hw?p9u!WE!Vyc_nG|Ujy-()pTWN4*Ts!f!o@4JbZFRT-f@3g8_q1!{3LOgYll(
z(@#8R?ysY%Qe*xQJ533!hNTdx(^ssjSF|}+BXx7|rlymv7<yvSyKGWcRk$H3(d+kL
zR8K+6?fGSz1Lm=0%cSf=cRjz=o$LI(eWVB&O-LCaqC!JKK7x>xz*EegIeA%GPOCQo
z4`ByYqO-6a_2GE(Hn-G6&Pe&9{%ie;=zH3q7NZ-K(>vKS6s4GANpzpl$yT|nE4|f-
zS+~hZzN3z6@g#iR0?F@V%>AXO@0|)LN$K6;fpKm0!ZIvZ&G~-DHc(9y7u_{=Pb5|B
zn@>f^J4{5r0*m%I2it+jL4z*O%^7~&ep_2ez5`BG&u<v`EfC=&qt|=p>(>;5g%u#j
zLolRHR1BG={+5rD)9L9rcs=krDw{Vn={EN4DY*E0RT;^v`TDa_XlKZ86CT7H#6)M3
zua=W+<evAEqY^`I0fqH$awk3Ylh3JGV`q^}-ncC;U~|bYx{OJVrX&O7+3G10#wfz5
zPk+VVYY9=5Yscy%aW0@Zdo15IzKChJ48oY|m)Vj9zBZ1Q??W_Pl-kCcR~VL6+pzDu
z@%MY+gRz3VmNcN;_NHi&Wp#92@n|=PkRs?l<R`&T<qE-O@)3Uhape3FruXJfZqUtY
zJDOxjrD1^G_~t5zY&!nVp>;OXhJsPuz%g+${X%lbY!p2v)~>Kvr=fwo?}$ZF_UGk8
zg!UG^Z;hh^&^QGtEXyn3wOS$>n9rzxtqr5by4m<(c#BQ^vSmn?OJoyIV}K&A6KaN0
z-!gd<4-pm{U-Io1J7joUjA4-=`AWJ|Ts!i#SKR^axm8Fso!+f0C8ZZz%F3Tc1+A#l
zQ&+AQ?q0O#Cok6<_hItnLg)}zFKW82Wnt2vTQ!>&hd*JTS|_X1<z-DB&<)(0tiED#
z#XS8wmiqFy9}<(-`D6}G-J6fW6Ouo%!=8j+>q><VX-wiIyWWE2<i6<Jw_od&jf_$9
z2kizVYP>npa5-+!zx!ReuBk+(nl-f0|2z1gw5APdH#&3>7KfwtuYVw@wsXn+$a+{g
z1e)8s-w-^LO$v<KLa6W~o8MA<KgXN+7+Bxoj{YOkZ-N;G9ceQ{jNFXl9ywj&B@z)f
z)&E9TWfj>Gy^4~J?LA<@@uq7ISG|w}1xHU9ii?Ru{^}Jcsw{<M`JyJqt$NEy!}Dm}
z$={T20UnfbGWeviXid&{ioG&P=Ns&1BpbQ94bvCDng?-E3pU_}2K-|Hm|S!IhS)nZ
zFxn{bI-Q()f~T{l({GVLvgul=s`jMUAuJHLLHCNs&CB_K-l{DWLDUl@Ii+dBz*wVq
z6$*dz@7wZvmGSL4TR@ysU7YLlF{Z)1iZx2m@25{HcS2KgqMwKivJzruWT|7SAw*l?
z9@Y+nc+7O_F8Ek3wg0QJF3PhW!eKY=wu`g9Lol8d<9WiIAnMQPR9A4884)LIh1~=s
z=1Ew%bi{xC>#XR|M{Mc~3*R&9NkL85qn<YB6L!7pZou%+Gu2A|OUU2l$dM952yTXN
z{|8dh-cPu>7<;kNl8fS<G1+<UPSt$Rw2$ZA2eS-Q7zRf<)f8_5nL177HvMBW6rpOE
zpgtQ^53dmP2vPjQks0JG9#PS~%o-+<O>IWcnUirB^Ifsj&}pp4^KZLk{&u0UHXJqS
zeMWZN18=5iWy+tbDM$hJzt_svf&slMd<DR+efJP@#h1cX+1Q{z(-1Zmr1?Je8?A&2
zr^h9OB>CCuOVE)-ssnsa$3kd)a_VeETOD;`lQ4g_#9S@Xoxf<<F~n40YtJ11_%W{<
zwoAgy>SO5A6i35BgiZw5WgX6OM+x{rj#n=E`*yiz;7uWU!py!Ey7*BYtw&l$F1b`+
z*C)Qinh+|%`TT1vBxDrk&PgawFOg=kap|)(rrpF;y{v@y1#p6Ql!O1I`K=rol**Rx
zR$|;^(Sh5D{H2>Dg@+V=ig?kf%q-+CN`SZKmlphCN76I&?w#lgVfA3nqslCMdV`RP
z5&^v<vjmqQHkTm=E$p2>N&c}9O=>s4o3_OQkihSBLq{bX1Qs})-^BoZg9*q-ZVJDe
z)DnJ-ackBiyaKUvFqA`qi~{cXFgIyS4y<d+U)EVPJMM|-i6M8tb25HZmU=KLwqw1C
zd<J6>sYtAF1B2>~-P1QA?CBD?QzzaH$$V)w%8yeNUhv8)`uD)Y%ru<rB!4+>a%~Cp
zCMkwQ^t6feVa#yPZo`7>S!)_nQGDM*kOcw#tLX}oq3qK6Tgu07x8hHH8XASsq;E;$
z3H_4!JjW`yzG&~2a+-}c>?vN?>D~uMA;_lRw}=Y6c}UBiPhTN1?R7A|<ctZs8GuzM
zsN-DEym~okfnA(yr$Gvf?x*>iJoz0`w7M6@OUK`fCU@F}Ojs4k6OEsWZ9@_Kt$%7i
zdfJ7#fJ05_U79V5b2bT<p547s3mKAtfNmmxD^VGEGiV@N)OW%@jtQ06Omdwhd&qPz
zq*e(4V$959p&wX$c379mEnDFoyh(&dO{+m|R!lmof3jwfg8j9SR(vLoM*dpUyia9n
z-9GMn-A6o#ebA~CInOYnhys*jEDB-9yiy!Z+;_1<lLiBl@V-06A7e@b8Og(teSzq)
zl+zg*EJ90^E=DjuUyyEcPIER*V9qL6U^+l$On2wMy4Ps>>897XcSx+;-dH9q@VDlP
zK<=+{{<DJ>QhzSQd2{%jN%#lL`Lz{CKdjGx=juEidHPb>Wh;DD*ZxolyRU@_eco=n
zzL2+*J9JPP-M6RCGzt}9@mh3z^U+Q+*Lqe^A9E85@*|?JNOHQUopOtlGlb_<c>7#J
z{l_pc`qC4%lw+%J_Y0%ND#og-1w#42-aK`;1@HdIyu9}S_4;Tg$a}7vW24|kS>?_a
z{sPn+4=g#spO=Dj1R~=~#?0E|O7OXc()GkN!t@f=F9*xjZ!nR@ipQ?64k_kPPempA
z{Y|DW%vdM7Z`(Wt(8vzRt$7>AFZQ%3Y!ZZXngWHr2yW%sh`shHSD+ls-0e&53Hrti
z!2m9aBuTen(w}bue{y*UTwB;vL<&P4lGE9NfIILfm-FO{$vj4iOR{~VIH$=S+ruR?
z?3=cVM&KswQ5=3YIDf9h(;w&8sb&bl861A%vIWE<A?lV=s*5@I{~@7!t)>?x*a6Oq
z8Ob1^4qTwJ<MT~xd^2>*0g~5}f^8P{C2YUw)XaPhD5mVJp+?TIWk{YrF=pyh)v-CZ
z)ln=T|5fYc@v&ioo(gVl&FOe{Z?C8d`4j58zk5rh((BLsC_~tB0>3_eUY9C`CaR@i
zyS=6J;qF4OHnJ|PlAn_dLO?M{VcPp;0C4M80uJy6V9?|>>+Z$o1<zUWA=L+KXzZw8
z%#6{bCh8To{9lpcOr3Xf8O@a4#F`4=>h7*Qf}q6Q7mV%dc3Gc|8799Q%~^di$n4)E
z1ty%wPBcaYY`&GtX=S>0I)cQUT9`8}1=e)SAn01!EL;B@q}*iY>{t?h<qYafbe-Ud
zkavGGycXOZ!fmA`fZx6l<z@?QE(TtqkwvmxMDagY3t2ibQuq*GdAEfgy;*w<t_k9j
zLU}7C->!N5hU?dcMnyqFhpp29Q03g^0#(jYDInM!H(lTxHMy)rvD2h1`P>#Y<JP&Z
zW$!%=v6j5!47O@IGmXWQc*zt+F4^K%lDKy0G3)Go;rj2jrPspw)t6-G>)M>8Ct9jA
z2(Kg6s`HovWpd72w6GrSyCT0boLrCtFh<jC$*9-2pejlW;hp_o_<wyZl8vmjAI*Oh
zZHiovX)fZxjLj+@0)?gqdGh1jvMYYG!wS{y2j3a*g3w6~2l*Mc(~f}PW$fvG*|Feg
zVWRl&KV>)4TPE^@q*`YMfGcL}wPG?-uGn&sZOvt6RQQ_>HHa~vboG@+hQHhp-si+n
zT5wjgCq-GhTjjtfrKGCaExvqGvqs+GXq)Gb07GN5@1zF#2SF$<V2CNL5yRTsy|7eA
z(VP+SSZDF9Johq9Dxm&&U~U;I(lbu7iv<;FTzVuw9ebqt!^Q?I+xGnqb&i&ckMrDn
zl)fw}$5yDi5`eC|<OiX+()HBsMChpynLusrB<)Wuo&vIL6!+9zQf3>n%^{U->TbaP
z=*6R+e@3UjE3I2tkBre|mVOK*;^-$1=v>drQc!GJGadfcIt^M3|EAmV5Vk9)l{4p)
z*W)s4OmPmZdt7S5q9!epdDXE;f<&EYz5c@Wg(}j^G+TUI{E#**1n$GC=XAfNhG~gV
zG5Iw0nJmRFP4;UWm5b*b6MU@UChl+P-tZ4guaZ>9klT)i4;U7)&2AQlt_T9!NbhU%
zf|h=+d~#H=b_qQ-xY_^SSSEScDBU>U5tLq2;2U`@)<2D<e;Sm*USz~c2N(p$85vCm
zrzpmr3`|QzicwmQEsD-Bsu<*aj6Q#VrsE3EMQenX)HkQU+ghMR2g_oj2;a<(e;Y|f
zM4StyZ875r$i;1VV~Cn%@TS7Sna^4*ifn}nrns%VxQ@A1d?LKVkhA?+g(CN(ZCY-U
z%KBC4EM;s`e!e8=ow%rd*KB;Rt3yFB7NW-B<*lZRL0pDwInQ@Kw$<fDCL7L3zvT~D
zd*xe#?e8}P){pNpV@A(vx8E9uN-K)04-$5x)sj_@%L<}dblnykEv6-8jNpHS9uCkm
zG#gr)2um6a(BaGbq&(g3wG^W*u4NX^Iy=7hc!QbgqaCgY*k!-xv#w?zkYD^@i12=A
zV=)h924w2zJg3dWKeuzEkv?nf4oOUci*uhLb6#0X_qRFQjXjfr!rd>eOmvoWT24v}
zzX|h|mId_f$}P~OZQ~G<X3&v}B#h=(w}3-WsF^I9_X0e1%DMfiJeUG5=yQ2(PH~K6
zt2b2TRarmO2vYIj!&pU=Sy^58nD_qVjE-9#7TGM#SsnLYJ;p;R;x7g*Bk65BYQ6#7
zgY|DTKvCNLKs5k)Lfbw{oRgz1==DQ0*Rt3m;V|En<;xS~C!=}_k=QtIJ@J}g^akU#
z^8Q2vUI862{)SZCcuwBDBY{u=U`x!AF?&cXNtTolY>y8q_$h64(_NK7+<??EW8)Pa
zkLO=#hLu|bM^_vB5*fD^J|$?k$Ts`8<zF%*jHj?_B2i4Tu3HxckcwXlN8Xcm_5?q9
zB7AP`iq!>-$5Nu^>(7QC#Wo!fjUX#4?Z%?t@}0~4IruAXa<eI4f=Ff9=~AHvF?K00
zav0rU@*xA~Fzww^y3&$cW5n9Jj)bQXBkxo8m0;Pdu_@vULiZW;Q|h|J&e4(8>|;vj
zG3ygB<}MSf0JMZTeDCGysr_nr8ryM#6{q+tFq6nd1U_Xz-PtiSUB@wV?r|n=O!5jd
znC?z7+VFf>e7SCC(&<N#cqI4Zw0bVbj|VM9x^fxeieK4(%YWQ<DfDqvj~y~EHQMIA
zo-X#FM~!NhL@A>ff2$D^TDbf=>M(Su8U^R>&FyHUh7#CU%Ipa1cEfD@Q+yP>VQ0r<
z`E1D8r5b598d7$7?+*tR@8)81pLX3;$w-q*#U{x6XMq&P;idw?S)m-xwI_x_f{)~m
zG@FZy-76PxLiavvXwCt|{UWySjf_KUz<STRV!MTVD{<<57&;YfaFV9<pR6tiV4l;I
z^!3S<8PyH8KwmH+Hz`kY2z=IqRa4$O7bISf#+>=65)0{sfFb1r6SoP=7SI;%fM*58
zYr`VU*yCA8Qjs%aN?OO_CNl1?7tYYQS&TUvwEI8bC_=l;&Aisd3EN-Qr%$_fJL0=s
z(QP9Y*zixEA1HsNOR*x;@>QyjNtfR~_Ge4LGfCzR<L<~~OG~-l8Ka-fGS*xU&8AE|
zF^FD_*E^H}M6(7zugL7!C{Gt7?`?u&?Sk!`^+c4&B@FhF3-Zw2N@HpE6coV*xw-Vd
z{MSP=$FwR{6|b9DFnIo~C|^`W9%~MOScu_c<#svWU2@xl)#8A&*#5AoxrMcn9a0fV
zt697cNPn#1a?`9~N&6G&(iL!lby8-Bx`q9e@JZ_i&#Y64wZP9+DxhQg59aqe#SEg~
z58JjcG{=tv0)l32TBuT*#iz4<PsJV07?iq&xa1ocJZ}FFdv6uhX4h_k;##aw+@(M%
zQYh|F+@%zk;tqk}PAM%CtUz%n?jGDqi@RG06emD%my>>bfB%1O&&9dhH;j=m2w7`A
z>(M#qy9+3qD6pW=zYIqeTb<9dfR1Z189#l>GI{Cev@!6)p(qjY0GGWh+FP{1;JF_v
z$1-<$orA;FGZUMBwo_rzNK}Vr94i_x+%_o;MO&6^w0dx^WQS^G_0W;=LM!}tl9<-L
zeM%pGNWPoWNwhnyL4IrR<M(bFh3}-tLi378Twwamt-TSEH~^Dc+OZupIA(%}eiP7<
zQ{Ul=fX}mU<)S|SW$kXw+0n6=dxI18D0`#QX?^sKQ#uzFk&LV7&&=e=^l|<gt{nHo
zo!df8tQ3sf;(@J-b6b=KsT@EU;O{b0!+^qaahjIBt_W1JjfIf+WCRHvrlpka@Mqdo
z^gwk(H=?zQd%>tnBNYF&?{+#n6Q8Y(!u)~4Z3vtST8z}(AMQUbKX1<hf^#UaA}0#g
zQFCRBdxbZ*Bu}p<YnJ+fv?^r|joP+OY!{2)UUk=B_D>Asbbtm;+wpwVrtexn+jwW=
zUqm9)B)Z%Tc{64emcPf3Pkg)OTlI*~d!<HLBfWO8jH#(ixhxI;>AD1dOBozBycR>3
zh;L*ka=!aW^x$8GNj0U%{OHzQ;ye{cRb;a}PB2w#Nf6(d?J@V$QA_mN`pV+yX<Wes
zPEi8q<ZQ;O$v;gF3*6=f8s6{$Uk-^G#$fi)L}!YJAsF8QL{33n{7aVy@{&lc)XP{4
zJH5#M2}?qndlT+WTsz6{K4$9@2`>k!MsS>tLKcQh+p$}z6KNo^#33$79vTfSVf$ye
z#VmYRfi<%#ss4!BV&(eVF*{lnPvMRWQT`pUXB0eGkkPQ2_K3b?*(D9B(A6mtH8Z(W
z@p_%_{lVY<r~DOrrqnU8T%)ApkTq!Ug$HSUl3gf>VE)pEVSpPv6&Bgex=b*wZdH+%
z{-fXA^H}pu#^vB=dh>VmqE`U}O;0^4hb(<AZ9u(S{q>EmP@=><_X;o((cWys)vgls
z+-k{6i$JdQsqp@%<ZZ<wB7A(DX}MeYGWu+SIVV{DZ_eyb9!fmW7t9`9&9Y?5ujLP;
z&^`YmcL!UK9^PZ53(XY0ODZ2X@hOc!T@iF<()fnwQ_<TJPQfIbx=}%*mKtu60TkYX
zgV-CRbnj?_Q2zh`>*rp^B{`ojmSK6ra+Y&HB>LU-tKNMcy3{V`Vg-G5YZm0iknSc8
z&0HCt7{5L91>fOiWzJUYjq_vzY*d*WaD<xEE@BOi0x-1fiM3dBC7%Q{af5#ssTnf+
zd5{L7YAle&o{h;!y$7S|QZVeDT;yYY32t<w(|1-)?@@B_R?qvf)$e~F2Kc!vW4<I_
zG9TZJMG@R28$5O_C=3qVAC$60041;~)<)S<f3r~Pk0ocF6Hnx;8F$DYp6k@G9bJXW
zQY#CSAQv0l22~x77E&iBaK7U7!9wt`^@oQ9O{7cj)}GxKmTCx~A&a63`Hrt&)7|?%
zH#)%Ikci_VlkSOeF{w(wluqSK#yZbt*73Q2{){xZhs)oD%l~AyhN{cqes|?WmfbdS
z9H*yG*197DOZR8?122ldYHQ{XN(V1BY2Gp`UvJ|1s-V{*S*s#A8!qZadExPD7!F2}
zOe*lpMyve2<8$3VtqJ#n4Z+F_nz8^=!s+TaCK}j`fvS?!%h;vKyPY|wDM99K%L{3Z
zJh=FIV&<DS5?1(%`5Zf{gy|kk>f+5~{PSm5bo@C)TMG;*J5xt2z-^j37OZROf0Fg<
zU!rWFP8fHYktFK8I|Y9Yowe6Mi(9FGuU3re-Oq#=)t)|Gr=Se&S<O}2{JCvOM7pn`
zc9xoSCvyB|7TA88iES9j*EOGz1(6AX5%MLWPd}!ot2~e^-w+o`EE1yKGw|%GySZIF
zy!>%})a@$N56x?j<Lg$iDv;{CINJqOKqF)w5g-)rAIN>J4zKXvrRp?Ls(-yZ$?%1L
z+sN^UJ4LCmeKL-jj-yFSQ2sEQ#nzgMuSme{4D;b=q-$i{(VR@;7Y`5?&O$h_b7sU)
zte&3xrUf9LV#>l_k@^v%P|HVhE{8L)_ZP!Y0c3m<>pLXO=(@+PCTR#l8JDO)?(wUD
zxbfkY{;EATXvg+|-+-7uV~|~v1Jjct)Il?)6X&6&c2+xXp|BIrWG#X#M^l0jQC7C#
z^^H6Vc8_5i+1aM#a7zj41BA}yn>ZWj@b;jBPUi|$uEFo>BlLRpG>a!2?$RUYs&^mo
zAAFOc8$PVIpyz=f#XzXYTsguBXTpD!axwj`yA33$USh|W+&G$#09C7>ou8iQ%h2Dg
zrfq(CdebQx4+PEVsEN}w?6lH+OJ!GDPuT5mr507<H^B#Ma#N)PKPuBi#@sRS3yR4b
z<p|kB4jY}ZLAKKavmOXA5<q#NU7dxdSU$vgv6{iBHt%=YFp;v;>zk|6ae9Sw5|nid
z^n=pHYtgvvg;?7N0(CdIp`aJt)<Ay(s<u5j^?LZ7J6?I`jO4pU2K`z~R>AqTS8`|@
z>@-qh$lJ&-{lYVO;z>D&>obzZJ2O{;*9)KIHy(w*JPLpK5gZeLKH#_733w%Dhkc+m
zqsa9E{{`3b91~eW(l1&RRqV_}KjLrVDIU`(=plR`^w+7Ts<|E7nh|6ia&FJxW1Ksb
z4e6WUi>3-<EnQI63oODLk5rU*b?~e(rxz1%Ma0rMr!#|LE9~ZtUpmtz^%i7WMlU8z
zF(Ixr*_PWy+0yiLYTFWv2!vvY)YwnqYZ_>%MgV3ovU_r^*alhay4xp$&$Rvg6*5J`
z4CY$%8$N@LV2#C<))gbo{UZg8)m9x^S24s?8$Pk+BH%SjEBa|$gTnqG@q$*0J~$Zt
z1$7M?_w(<szj@GZNj9`#axoMWBBr;R^gOVmXUfX=5}rHD43eyveo8j#L!YwDd9vB>
z1qsj7@&*z&PxUjgM=p_rs@w!L+k}}G`bl)LozRC%MsAw8gkRK=jsHGlgYG_92sFEH
zsV1l@(kXg3wUu>Z-<}~m)QPlzeN^;Skuu;^Biwz7;^8qatH^wA+dt0$L-9LNQx4&L
z%cM4)vxq-*IicCX=W&d0>khk|Nbl1@JL7q6%$kgVrvX+qA_$xho@)#AoSd0siep}C
z+KWdbb^UP@|Hw6J?~wVhtBXZ`k(S^pVvO*F+-Tnq1-Tw<c3(+;jtPfw*Yveg-315@
zL>{75EJtXkPH!2@0hv67@7_62t9}!y*aK886%(2}mnAufjI~-2Q|BzPB7-MNNw}ml
z=NJ_B1?o-eIA=I~5{%<?R(ZjeO1KOtwHxPi(p!dtgQdCNZUMx>s<<mGtCV_=`g@j9
z&jiu|DORsc@27mec1fW#chvy!j<)rRw<m0hz4&ADZcj-_NN=51R0<vPx;qiIr7S|G
zEz;LE#Hb!lEu%D;;YOQeeXhdS=g{DSoGpic7LFu(Be84}l`i{!J6~V=!@l3wRe@ec
zqvFu+75_R!?>(b{dR}^uYI>H>T>zIOP&GOmC(@0QgwbT~LQR!tsUsje-OOR(>*yBw
z_3!to&P&fvL1w1HZEd)fSp5=8@711i1LF`{>UF{%dPn0#bwOS3<C<*EA4by@m2!EL
zyl%0m!x=8KMln0`DZfUQbll>aXpd<G3jsdc$%SN*eEs@i<La4k@%Pmc;*sYA-(p*h
zC3gX>_{A`fe{|wD3baytTVvOku8t8vL?Kg*<Z)RDe#meqDodcYp!883uj%g8o~7N;
z7vw%J1Nci6W7bqWFCzjYJTISI_I|bJ9S}A1Ez2+|IMZ6LFz&c)$1|R2p-yCBkslng
zAM=$l&TYWNcDEjp&LK3vDr7MobgdrJ9H;BDq^5K5E|KT*95W1aCA}@Il--X>9Hhy_
zVD--?O4U;ln3_5{kJw0ef!z<bahS%m0HO^S12`i}A)Ci3*KW{F$KcA0vO{&tv)g+9
z#F>EaPS_}+^gOof=H#!dBf`nSnm`6ClT_1?v|A&BMB7UtlTLfDu&O1Q6BFAE)@3yH
zu=Q>`j$^a*9>*W7CtSy3jf`vv9qtZOf7HE!77vor&I(C?Wy?C%u7Ek8*hleroq;!x
zM0SxTc3Wdi4OG@yuPbS;;FJ^TOlt_birW&F5F2dOmxK&~Y3f9#NL@_kJB3ToC`nUq
zCLu>QBPi%fd>CQIImO_80RP0+TT$uA%3N40b!9(%lY6u5#=GevwBq*_!}T6npLBii
zlVd$A+Ce{WkltJe(VF>;w;<VaGTCj+K0#0dxQkp0E%nN`u=oz^SN8PsmlyMGO0iuS
zVevF;WR@RNsn_~+_F$P>zxZp@l=<+3+hZ{C$Z`Ah#CBUgGd<O!o;RdxADsJQ9!&*L
zpA0pXUhi#Bi_irNaa^Hb^~A*vaZj5D*!Kyg^Spg%(4ZS;wUYwR`x6GeaKlQYl*Chl
zL^)M;{Y9`6?ouFH4IZxerTB&8>*Rs0#nx%@U&u^T99@KWQoP$o)typYok}djA@+hr
zUx7l|EUcTx>xq!!KnX0tA=7)V$EU;-<4pA1Mvp$7j{&Kxcd^CsK>C{ehA6$m*NxaV
znnop^4~$ElKeey*%!$$bkdX0hRF&E=@D+9e=W>~~{hq>cw6+sl4d&Uj(_7|0m@c^b
z?p;OnZfxRq0hy!3aDDq<$bZs0Jumgsg+^TM6$0L+OQJQ;OxzhMmpn^LF4~^ka*5=+
zBGc(|!a|Tc3K$6$3~<SE%`qfD#8d2%2elGg7#_bv8;60By+~o><X~L8TfR&w<XYM+
zKORw~mhTcL1_OoR#S-@<3L`C?34i$XP@_F!6+kpAah)hQ<_K7>*52*ycB1lafGfqp
zV#@d{LlwLWvmb|X^G25gMf8ZrV7X1He1ulZ5?Bjgq30teXRJH9Q$CS&Mr>Ay^sJTq
z+J%qWX3o7`34gv`*X-0KPUv|ZnF;bUH}$!6NbJ_d3%7tc`3?_zh(a#@*4P4(u7RyJ
z*N1D~kQ75@K~Fm4n*vERb&l_oN54XM0WLWj1Pd}shha4VDaJLCmsq$zBd`$<O=sUm
ze*o9Vh6c0+r0fE+zIeJi4>Rlnuwt&fE=tA9yo{GvQl^gZq$RAwLv})4>bb$KfTIJA
zDhaZ+t;>&5I%G_@Cr<f4iAl|Q4slEQ$%kPxOPAVGz~)ww<BAnC29N!#zPMWRofy}@
zJAxhXU~Y|9x#IpSV^xMPF)WBBcrXW5GJ~2OD-+`{5{F3v1@qeY*$sxT!g}&;@xx0y
zQPYo-D3GT!6Rv4OthW;SoZo*W=C`nHh!PTx_P=FPeyWF9dnGLUSd}`@%muhh0p~}H
zlM!Vv41pmkPPAwak72^M(dGN8lbS!i7Vkp?Y&OLy!T<0fp~j+dEu?Vx*9qi3vv@z*
zhq<X@Q39R(MuF7j^#>iH6xuWD*BpO4D{5Huj%;N7Ocr$JqM@?29&GJm^e%=_PM_^S
z1Z<&&OXm&)&}73+t)k>k#d8(f*V}T*iTNIVDE{NUQ$@8P7;NA30~6HqYh%`&xo~@!
z4X(v=i-5?6#UNqEUmjvEBO!1x<0fp$q?-v8>ecGq@@?q@7nHNVx}K9@hT)Y*2zBB$
z<x-XVYvuSL#525JlTtsp@x6HMUqn@$9EXKsB8N1{eKjVP_I5xBOiVw~zrG8dO+vfy
zX$m&SJwV)%U16ctJdX>vX?@N_!H-Abv9{avecVioTAsp8uR<&N>gk4?9~2Puv_hOg
z0}t%FGiNUhuOQ+5b3(%6Chq(1x2zIJjBEir>+xyV;URCkHg9h2;x0Je$HJ;VPZ-Im
zTOE>cqCW`zGOIBf`@`z~)u=Kxp;bWd-My=z>~$q_)(tJ2pJ}Y44+pCqPiohnMhy|P
z&<T1%1z}v<-Vkpht7Yl|3ZY25S97wdM<Y>Ly|sArrr3jE9QEAyx(zEoDX7qRwz<+l
z=jqAct0RBLRPz!xd^@<dQD#EGCfo==ixj;&t1`$Be3W&tf3VR+X+WXMrhWm#;(;_V
z-7o@v=U^(JdkSL?3s1u(b_r{_6dEvk#LC&mS`tt3rBnSUDb8UwI}-ReQIw6_DSYli
zqggy7E9^!RM8{M!z5MMEjJBt1vCxCRSs9yb2%q&>TJ+9Pgim&6_zuo8_Dc(KE-PYd
z)+Sl!FjTu2ydiqpDv<PCG))86x3*gNY=;su-s$dSsW`VoBPW!zwY6q*flM`+BwYv;
z@^KO0yu=xfG75y5B{X1z)juqz`@HS57T}MZ;^#DYin}49y?lJNgG2}844SSJuF2P!
zqxavQ2vPj$FT$4pu!&w#?2bd<n11%?B2yhKps-X8V%%V;bCC{NOwc=g#j>1B%eA)&
z2+Y7q<y%gE`<Il^%$2<zlZBfz9zn?A!Gm;prHbEz*b#&2tv|*brL`77MbDOl-yUyv
z5IwkCs!+PA>gtq}tk0(@Qz)|Lu84gc5MEBCR_;*8!xO|Y(lFP@fU&vzd803;U0H>t
zK1*07{NkSO!A7i1?(i;G{Zsf<8{pM+ZPd`opH`|se>Vx!qav>zm!+CNNOR%vO#wXl
z<(l`GKI5C~6rPg?`JXTrsQ5GpbY`3-0hu`X)E5l*yI3tt)z6ekI&Den7_mH2L)`^g
zr*j!>Ll02^V?9n}mU)EIWA?nDQkpgus+DJpU;+R@Fvi1w0QshmxB7Qu`8@RxiErXn
z@4YC#bAI1eKtLAMX9TC0I<|BHD+(x4Kl<68)*uY-M>n)Z2Sf->kqOThA)&4fo68EW
z;#Y2O1_VsTr285_22M{s?85O(@QDtiA47dtt<Wu|YCLxV`4Njhabheo9KBr?20!0F
zytr(oW_OzusX{T*$XmCpdxZe=)_&>ET-F{)hzc1(vmq0v5`mL<cV8k`v3zCAcft4u
zh<`h2y8CA$>t-=*Ckk+s*ZM0<dJynzb9L*re9dd+3L+LN0u3eQT<&pd1!G=C#1as*
zCh1@U^}>=nyJeCGx@?ZFzD{$|D<^L5tgsLbwCxrC&wrBE$fv>-i<_Nuop7y%y+sbl
z%1EGIO?WfN20NcJJ(|6AdZNOGyt(i3g=*Mg)+2k$9Hh23_yydmqu-nqIe0!h7Z1y2
z5YQC=2v;~9hOmnu8BNTyx!&OS_FKIt+zmvNhfJr+|5A&jMX)p{$tz?#?E(1U3735U
zHS=gI^|0{V7S^Sv?XpXhD|FV;iOT@DD}*`siYKL0e(kP~3)5(K0J&&E9$~QfXrO#u
zRGl<B;dR+mCWOuo=YuQt67D!pi<~^#uRZ5?8=iBve@FLZXdhSTzYE-T+s|P3)i5JM
zX%BnMYx#S|KaTNxI%>{Ul;n&F4>}*h*;c{REuL-?xYpdFupGiuXl-^E9b@pq31_48
z$bj3_D+S)F<qzuov24@!^WXgNbi10cXRB$1rpUIjeobb!Sv0FqOP_q(PjQWRc7MHd
zUKm|Z=D4=-*-3|=1gfoe5%0Zj7_D9&sNyOmLD29~(s_nHUDEfHP{ix*xAYDfsD575
zrKg2GS<J<-e%)pS`BuSNhY%|mt)kUfY%`-=HYZxq1Yhewcq99BOxq+*P}k<W(G!H&
z9|gtS7Jk@J08N-*8I{q9=mlrtDq6?y%7(*){Qn`XOA*#6AOU=~OV(#FZ~00))5k^x
zP#}71bNR~_k|EAWB7Cs%N?o;Ao$27$jy00D+*dZ-_s^ZWxGhLtma|c%*dXLdN7xui
z(zg9|qtn6E?;5EnRwb6S0t8+1?h9RS7Pui{QrC<;KzB)H4;z^(Jmwd+@vbx?Z<l41
zW-U<o&1*ho_VRYtrk^&2p8~D@7u1}lvI6ZidG!O@X`mxmSHJD^S-SfH)B3?Sug)%N
zBIfw-cw9LysQG81M2Sv%!`D_ighJwIxd<GZWK3cv6a9uZ%G}nHk;Bh9(!WTL1%O#-
z=Go9?8n#|^rV>;90lCQY{OLByyc<shY8>;G-G?*+6Ll??FtAHuyLEM>%{xG{4g<Y9
zT!(>V`7VK_;ac#E{B11FGh2qK6JsnH5JuEiUm8T!u{Q6TJj?0Wg5H`1T6iQgn%>pV
ztH<jtO@Bc6Jy|p@k=j*yjNv0>W$KoBifnA4;6%1fW79&ya?_>u%$CWDn!|^yedgAV
zj*;c`uEAHXH11)F6LGmaLZ$wqkvD=OrR2Fgo<<TTwq6nxBS<)_<OU1INqlWrQmK~0
z-am`E6fSrGE2zc4bS(JXDE>-e{Qcu@;b@zX{d+YrBcXE045IhH8^*^hl`UOb=K9m4
zP}{%rS~n-z?*(#xQ$)e9q&;;+YnL9;e)|hZqx+;|mjHRgCr?o1gm!(d^vuLssLlP{
zi_X@oJ`jQ7q!juT@K%6+MIBwm?6}sf^)ClPkZ`Ro?qp)?OP>KZw2Rxbg--z+^<{`f
zipu3x4HWYwDxF$~wA#KNS_SQydx+;13W{l8wJCYHG4Be|_qN^T+|Fw%QwN<2*{y*b
zgD<<=UCa|G{n{Hb{aJ;qQr4z&7y4I_8Qe|4wswzfWFQ@rKSDJEL4gvwyF~t$*f+V7
zx)5vO<A*aUJLg?7dGGe?a=lDM^FF(#y1y{|H;c%?4epTHqlV{=F6u?^KYBTc2kUtq
z0h{-s>(`fmvaJzXLT5JpC0tGABbCE9BdY7mg)`BcPA2c<;;8o{+E`N&Tw8=B#696!
zYZtpx^`92raTm9IjG{>~v;l$$S{jwua9NdZ@}Dfc${-Iwd3BMp=7SZHU68P&>0jZ2
zPfRF_(Lq>LJvsC{-K+L4#-z@d%?u?M;>_E;jIeYgaqvW+9^K%rlPZ0`WS;C3HNGns
zD$8FXpr3f56w#lx%{Vvi#M<(#!}c?s^LjsOriy;j1}%d!k4>f$kaaw<cwK7IE*1j)
z{kk+VS380U7%kBZ1(@>$3LaFPc^Ro~Lr^RYx9OFoy{sC*Ud7S)IVIC1?H{qEa)_3n
zh5U%UhI3h=ReseIvoZ~nB4Jp|&6M+A|9v2FpXRW<>tRK?h9HEuHz<9dA&9<au?50W
z#TW6(VfUh;Qr${bFLa5of;;q#c>heMU}K>$yfarndZ+9r7R$j^)AkAmux0Xy7#1y%
zZ{hO(1QfO^LZFj{lM&1T%#c#sy;q_m1saHTqJ=KVBe6`@)dhjpuAf2yPL62gk_D2Z
zpLE!W)sO95GO>T1cZv>|mE`@7B>sZDW_UPsf%Kl%O!>ElpaS1ZUO{R4SA+wtwv@kF
z=$n__L689L?tnpFP#RBC{&)0xJcRfP%Hg}3lBW<_d8Ms{`iElOW=1GJ-`-zNgPRP}
z`QhS55C%oRYL}816BQ!zxJy~SZA!u$HQx#4iu^^V?s*Q;EH@EOLC`hBJ+08^ol{9a
zV||$xedel6PQVVT^GI8bWasT*r14#GHy_J<`#P(r*KTMrVRDV!!O1!Q<2%PQI$Lq@
z-FE$iD?|^_@`&`x1GMC|m-P>g8%xUk=uat0^&@fwcmKRyOUiuAWVqeXF|yXl$6@J(
z7yPm5XOUZ(a9%u`FKoYo)Q@y^v~=+m3TDvfdt_)oNkfH(20O@jkFLlq>L6?esTl*U
z)R|BwUhRDORF2Y$>CKh(GQV9wvF135^So!vPiu2zB9pNrf5t#WB|?woLpU&$CFhP6
z&)WY?Bgfj>+>rNtr>EwH)jM<+p48uL)h-j+9GH2M9uSwV*euAqV0rpk?Loiu=x+!A
zP^HnXt!$rg##Wv#U#t<+Mf%y-5V#%NHCV|B<Vpy#-nqr^CJ<kg{Bl#)ZelDM?NU%%
z7IY)l@O2|!wWCO+M|7_33LU944}^xvuuygG?4(bV7+^p0+EMGzzU4R_545EBAt5N^
z8rq_qg|R9_0qe{U>!Be+9laY8@8;NSAmX6J=T8LTk041EJ43*aOYLE9a6-}fdj{<`
z@+g|FZrTVww%j6JWYcqa{yj_ehL6@U3W^&3bF`n&k*xx`JBhmfNYYPDmh0t7e5?YA
z`k70rjm6R}<s=dlpPN{8IeCZ>{nF9EjGMK?G4;sci+?jO+wc%;NHocYV@mHc_~xI;
zwo~<nB<C7)ms9X|b}RlwoXBsbV0{nE=KP~P0rbYgDihcrD&|zO(VdNCM5H{mqJTbZ
z_WR_=FgjK`^-F}$4nrcc#fj~Rpmy&<r|b=2_!;`%62p6Ue1JNt;JH2LL@L4imhg4q
z>DoeZqz8jihjxwoG{X$KAF*+Iw?E}>5nh-ch0q*hM8Z?@e5d-3igUi#T9l0y4R4Rm
zfQ1$`&+i-N`^phj&0IGpDd{NxXCeH$SMKt!0!1?uk_ngN0l`~DO3D-vn*tQJ>CO}r
z3;#aJn&{c0x9buaKQREF=tf9Dh1#!i&s3zSKwQkAQO7W{V()86(g1}PqJuqf7=(nA
z<4j|`@$NfsQfy%_pLPSw{N*3Y#Px}0T09PqWX&T)e%T1j0ou1?JX6L6h!LRf5%a|V
z+(WdA3DJIF{F8%EFi1w^?b}{w5u6Kh2Yttv!5DV4l5+@-ch4lE#g854b)%1a38miw
zNw3!OeaWXpbx?Mmjsecxa}W792;`0rNdK*^DX>O5yaj&$mPG2mvM#3NQSfkVrQW2n
z4Ixm2<C<_i>eAs3KHee_N#BcxTP|7<OLO?_e}`UBEha5Dd@93h{*R^<7RqE)cLQCq
zmILL&`i!^_`20#x4WFLoFPq1S0$H?&X90J?fCN9bG@$%C?Z@7j3sn#HgegXugeAUQ
z?wjDS%*Ju8$s}Y2(}>;`>t~2B=7xh-M>ZNBxF$W&e5T>fe1X0tTyMTF5SHf_#`@_i
z=QoO1o>ZYW#1UD!rK1|Y7-v?(^p6JGWBu$1NbR->Vnl|8LKNE_BUf5-(LqSEdi9g^
z`;jYGI#()!*U<~@t>ZHG6b45C=;M~58(<<`pj_%kU1P;?<3zoim*91;^koDc%Aa%m
zF8}AgOdmz~Fd?Xg@MV3B^OPlal6Cqplz}nED)h0j6LZZUd=KQ)-#h|2y#VzSmi+`A
zKFBsgUaMq<OFRR~^lbsL>9FklN{!5e6?VtJTMk5wpEx7_@O7%-&j4BaDMH7pxp}+z
ze-kJ}dD>SlVHt|-N?)b@2e%H0t3-Q)RkchF<~dQb{QVGA8e=oo;xqJDhK~lh9w{4t
zBdrY4K&SUh;Xm-tXQ>7OC{YU*CN6}gZi`wyV{S!NTZU_SGh3||xznziqT8)FfQR>G
zuE8L1wNM^B{;#;j-`*Pm{oibJzdD|Ca}8+<J2d-EA%W-@?M7Q%(a5R9q+=(g-0S8w
zv=PDHo?d}4`Q349k}}Mn^;|UOK6X1ZBs3w!yFhZqoTQLzb$u%}!Y_ts+p9@<+sq3x
zdsNrBUoP=p?;6$+V8#P-$GaOOXl^~E=-|BHRF#gv5nwGE(UwKzf<>7O6w7iRQ!Ooy
z&6|EU<nvd*8{6rTPvqUKObEZopb5plVJVbN^-z80`I(*i0F|Quk=EuB56orT5CI7J
z!L`vW?>!F`1`>`v&NJ*}r-och!F_yaS=Hgk?c52%Wfd#y<ky^R2Z7=#wqCZ+RTFx+
z8xN3dd)ceoQokD72*KmRQ%X2%kKUCu5(6m=5;m}CK?B<(v|hKz(H!%+_T65@kLvZa
zOci$~?Y}zZD-YolMUmwiX91_~f8}t*(5T;DJ=J^D9lM)Y|9r|3&F3;m<XlYIdf6n@
z<3&w2sFaCekIPU{gDiuM&GLG%2mxEaw}4uEFQR{pWVQ-5LHR_s03kHT4%H+^DQN9u
zSN}ueJ=mdG*J^Y0<SU;x*^&Rz05}9crr1tN^B=!4-MStLJQB9Of!b9M!1y%*Ef^6V
zcRHUAV$2In>ofc&Z%0=>>cbMK{8s(cVVQ~#q?H>79UI%m{jy>Seq;M0fsL?E<U$ZF
zga9UHOfbCE<|)DT90jW&t9xa+PsMb*xFP7S2IJN0WX|c;OiDf2B<0fSWX>H-4Na-P
z%xr{wbQZ>wUpUQe*!uO*f$xz=z$qX$BpdzE(i(t?j7BJA9~z=t>6Zhxm#l&Yc$?8x
zL`g=AYtBN%Q8G*iwx=#0mp>lvT*mK6gsyVeU_uU|iJ)L3kw=qSYeyr3*DV>0PgS2b
zQ|s(Uqftdkq4G$f1tj`_VP@=|fZId=Jia@f&vti<{=xKqUET77=c|~pjX8~@PFF|=
z*>;<zb_F0<1+)Srx~DF2lIG3Sd;2I4kCb=~422HOiNZD{e~KWM+AbwUTJ2YjwgPJ`
zfbY2)jmabaYC{AbnXPJ6bw+DvYa+M?&V;#ue)%7mvN3%q7@^~nhJS1MhOHM5T7}N<
zt4()_r?IvXmyuMpX>gpH?LihIxAf08PPYR&v6Cfv!;w&!SSL<?Z6u4#$Huz3=h-mZ
zZt_k;`PxK?^3I&BW^iy(oQ)s!g5!Q&5lYdcqmxz%ncP*_9gCWukzT?uOi@Y><`?>_
znIu0FPzR`b-RBA;pS~j{ltMg+o<wNl^5fuGyWw&U-BjyMfV1qC{kLYc-l+tcl`e;D
z+7wL~xAjIx+w<4KR)_<U*Ukm_7J{>Yo6NPXF8hi$g-<(P<&B`Acf-du4f7ItI&T{;
zp7aBVk<ql3%_n2!p0l+o!!V<7jN^Yfx3D&5-xW#-pVx>5&yRg;l_z=0C^eBG`6-XA
z#8|*2a->}!b$|>uxLTV0=X;*yo>Go<B%3#Il{4^bKDT#xg;D)OLEKL=#1bFSoQ~kN
zg*%=z?g@VCk=QAD6ydd9tyQ1FzXL1tv!_MIlJTa>H28SA)q>@2Xi@f9G#fvruXeZT
z!$2T#CKC%b=31)=jz$5VEz^4^!luCdiY}wbbQXpXBor*>%#cyCw5{x72-zX@h5zUz
z*fR{06D3A}t6cEl^i-v2mwzBxmxfvL{HXftGlux@DDS;9pSO@v+Dj^g$##sziZVvH
zL1g__)o!Q29zOY>mIaS_#=jV2t4B$lVlU{%hyFNYypo}D9&R~W`Q$X*a$2^UKPxi!
zQKC-EK_<g`9HKUesSeVRr|${U%~YMcaZ1Dys<Yejq<L<cp!X^Ie7m5tt$0su2D?}1
zO{<z;6=mgtCkVrNLGD%i1cpo0%RMvVMR|H6^a?T`^&<*D;_-dKK=iSRTbs{wqQ0`(
zCLeYJ2o-{x_oo*@?bIzw^Hl^V4Z`EZYqWqs^$@9Btar3_BNJZ64dTVqOU>F60nWm<
z)gNKKUoD)6_XrkhFxn_883P|5+1L@rpWU5^;0=H4&|Ds!3o<Q17n6NbORIv*N~R}@
zQ|}M-DBc-t%DF@pt>%!i$j~FBQJ1z_rYLH{gbWG}Ka}sNPy3A(eWkuF(D8@)IyM9?
z7oE*|d0t~j2u}36@9qhsqS!N;JGZ!vg$)F1Mqho&rwKE59=>pO7)Sz~fwzoz3I{qg
zVH4zK{?ZENc4DQLC+pt`>36f9r@leQd1G%-rTR>jSkPS3sn|Y3$dsexc_8<pPwM0n
z`N&*g+LF+W#e{L7uym!E5zr*E%rhOh_?d2=6-Z4rq>Z|4;W#n7tFZvu+TNzzc2y1S
zdJz>ORfnTn^?JJ1{xjMIMm9`+4q@FwA7Da(-sh0y02A;nr%rJEl3Sb}bWyFDG;m%-
z9a>pMob_RNU&vLQY@)SFTsQyyn(1dcl{rbm(^#oQ+=UV{%cx={`R!+%UoW4fx*KZP
z(~#}GaDlVh4cpV~=w~48l`<Z2SCP>g);Z2nlU2MvgR>5iwY`6=a<k1sZ<f5~yzj1l
z126Kloh22P#+E*NF*)zWuZr5u1=2Y0fWYTk52^}xEgK9z9U2pQOg)#B26s~u36f2y
zAcVC)YYVyf=81D5QL>5)TmfCy&pMASJKN1qUe>QtxiMWy@mXHU{650_wcm{RC5MQd
z<+(&?=W@q{X89_CbH$`TT4S%Nfch82N9h~6^ps&I?(K_*)u4B??v-ztmRQ0muktwi
zq1Y%`^nWkc|NZ#CJ@`L6`2X!1WRkY_|EmS?e}?vdhW7uPq5Yq6{hx9De=x3YO)Mc<
zcTLdO|D*ssKT$kfUd7*M0^GBB-BC991+5v!eB4)1+*!=#50hCzNvyXF5YoAe8ll@d
z>we)Xc%<hvgNX#Q#Z~T+DD&Yh05!4zc*n4KI<5DBkBz7m$+1I2UhBVq+2d6St;nAK
zAO&lw;gg5GLcDUB_U<2@e#O;R@8aJEB5pFdqMJ*d^DyjhF`Qon&<AKP8JC~o4{rNA
z05i(D5%nuQ&ppaq%J4`Iy}{h)=*|G=mL^zBCwObM3NB+fZeUc^xmVNfYc_mL7Q@H*
zUrXS5i-Oh>*_WLEpZ9v1+-{@X6Pc13L%r>swn^|-cU7RANN+a>E9cJ+3FiZ~pk{>F
z9c&DN&h57F_?&cN`VgsfEaP~F<YbRVQ={Ba*dh%ubIt=aq8XCOAV1OF>@PKbg3uXl
z%$~j-#cQWm$S`BkeEaK^nl{w)xxU-5KK8b*a(5cBeec(is2LzgmD~>lQEJrbjOQN;
zO^T?S9U4N#gKbAAax(b-U)dN>Gvcdb&L`#nQv?0|g)BQ^{O@5>75WVnylY*1!Xj;G
z@v|-LJD}4Cf5oL(owiU1K@HiXmx~SCEGEVMR$Wpz&r$4|YwUbWB^o>u&`@pnQ2F)x
zv+{a!R?vv;=9iqx_3UYo8OwJJL6RKYfp>OcTS*6q<^I7&D*)Uux`&b3&6Rn+#R+tq
zOiOoL^mJx^_F>umvRmU?&i!YG6=c5BS;2^For{!029XW_lM)kt!67^cDIfpMWdB(V
z^N;SZ_gjg3oeK3{UonEYW~lNlpTEgq9ZBL45WC$F`E+dg+~F?Ysoi@XyQ>!yQA^^X
zRbeYz{}wiEGAZj#GW!vF6hV2e-U%&DU}s#3rKI;$9X?SIUO9i((KEd^p32BLK^7|4
zq!Dla8N7v(y4%k^bE&Ch)|uj#QyWRi<Sgu~y7V*n+YWpw&CQot_P=+;o-;l`ka+4A
zpyl(w-(3+mRCu^gQF<HdV4Lp99|Fi;HGlT3U`04hntfm}QA;>2F)1xC-xi_6XQ_;A
zg0<Tgk$TW!xwtB~Bx7Ok;+$Fpj(^+K*q>tLDJ(`F7+~yc8g4|echD-C99s^hRJ^(7
zLR7PPQnOL@4KG{uIC2T>j)0~|kF4cwI1NGdB4hil<`piml5r6j7z8YTs-UdDtuTN!
zzpR8+WIH+>mcT0>soVe%5%IoiPtZx^rv5Y>JA^?08!COgG0K^Qs3G9=Ne|XcU~l3r
z{i9*4Vyynw#cc_2WOG>h7%xB>{3_!ph_8i<utn}a=cOoz9JX5O^PZjf-vcY|PJ9oa
zkvgtSzZpJ%X>VhOYazWqrPZRX9Z!XQ?}-*H61GB$G=zoEX0ysd#pw#=5no+-85t)C
zD`!6qdY5`f_Ihf4T&|OQ>YmBKKL<TZ5sN-P3guEt!?Z8<)@szY!RH05&ad{0XB1}N
zSR+~tY9oDq5S(r9clI1m(@xoGDiF4tfcU`!>$hWmRaK=IR&|gQ1KbeN(=HL#>)@fK
zYDw=?%rz>+r@lo=<`|zBInr|;Hwof(7WPL%FmSf|NH%v-#q`D(!^L{1Q$(k7fyRLf
zMq^9B2Z!Os-k3iU^m$8kLw)d>m!lVq`TsQtb{44#(LyfP2<iXXozMc}l4c2ozSxJ7
zRq{sjtM<-KNe(7@Yq=Y3y-e<{Tgu|l+!1Mfrz;jZNMIj|jKV5@*mCT2M?dASu#G_F
zs^#3!yr-#EC^Y4wT<~g7Gyn@3?YWuxNmR?ygCR`lDt~FCR^!YgZfraS+ptT{OwM-^
zTWbugsR$Fo`{XEYOK?kF;g}fM7`x<H7bk1pJjXY61AZIvq+)739Zwj+NR04`JfUe#
zRw_zk3Z9<XMvXLlUEG-UUKx!WFG+Ux%IQxvH9j_OiO^jx7CX1xN;GX1Xu)ouQsTi|
z0#)EhN~Qm<9qU;Jk~G{RfBW6P?}dDj+NrH9YnFBe1u2C~5qJ3iN##R9P80F^rb=x>
zh>etN$DP}AFiRfX*<;$2oj9ui8m0|A6ftJ4JPf1|S$K&3wDhDTu+rgDbJlx8C}sW~
zjg%{cJuU6&hd8aI&kyC{u$32<xJ(46`t$=u9~Dz(s(SO5Q6=>H4<(GbF&q0gv6DD3
z`FR@T(;=?U?<Mj`>7?kT(Hl6M3jS<}nEgy`0A;Kgz2x)M&t@--;I&r;fVUhPIc<T)
z4cU(N1Q&WMpunm-QFocAUsz<UMSl>x^>17VXOf!mccT`@`8R2r@DBaW0j;k0d@5h1
z&q9E2oYa?aI)p{)EA)%@{ePT4?y+|TLR@+=KG2n>HsQ|<U7`X-Y<=#qJIi|DH36a7
zP*(Ggf+$~^d9J`GiK*7oxf=FhzZg?8N4RtOh7E{&ZjS=+yc7*}NTmbhQ>z9O@}ITi
zX`kP0jXduu7A>^6>!{l*ejpd^n9r|AwCX-9=Q_+L->&`X+FRFv?UBr-)C*+Jy1%$R
z{%FIqFs+c};9tP$ectS}9IOhanE@Nau$KU&_xSckplqlTFl+GjzblK6K}3<Hld=Tc
ze|?;K=*{p;Wv{+qJNn%Y@fY3O<yoSo@6<DdUY7caT<T`8f+P8nI?pt-+O-3jPgl>@
zx~sfc0iEnq=L91+kPNmvLPey|vgCPt`dya?S1(oXmPzt>Rk{xa7sjQk2#$Ga_G_d^
zhtY(A^7&F)V_%b>d0nY^-VbkP)!67zlsIe5-?vz`LZ`qhFT|63mjE6OoL3-#^RV^B
z^@@gunMT>6Kw~eL^RV+*@Rpy$NXso&J}k)SXCvjk%^19(b-;@B-$<j#i11uWp0xw7
z{`Fk7Qd?0P(Zu?dJ-I)Ql;4={Y?+EVw_jpW7G7yhSAU($^^ogq*okj%xYHc(&1pN5
z=&&x6&YP8lkHtG9?ot>^vbQQJ>orYf_hV6;@xoiYVh#4#_S1U4wmU^-R}X|Oo@sW7
zb)ALGP#+dvHE|GpeY?U8>+}^WlxCww8Dy)m+G6!&J8Nsm<~ZWI+raTC1hh78;Y`<a
z&QHDMhD%V}4`1-!-vnVtx+Y&ZHdHbFC$uB}do#+Ow*t`ZL5T9-vzut^{y}xdoWFaw
z1Um_b1lD*WT3u;cq-n$8wue1%<@=p40lwoFi|rfc<FYvjP#h{IJf23<PF;|0C|XJe
z(HLu1L>bd)g+ZKq?+mMt<fi+ST%xXg4q%Oo#j@G13qka}KjoUB?$&XiWafwZ+Oqe(
zB&mp`%ze;bat<e-#=sqz?|LCw&AP?5CFuq)r~AC_j4i#*l=htGQkH)>x9oU37*+M>
zjYHrAkKs*|DJpxC=s1!8M*e4Qe?1E8&Zqyqc<}-#?>UOTq6Ou3wC(h#3XAfwsn{kf
ze0~!L?QgYng~vNBfXz%7fQnALBV2<(!RY13AcNp5FxTAz;^OwQYPLAEpsiHfcef2&
zHNIF{K55rs9b%)|Pn~(6Yq;|((7`d5y3BRIRmam1bN(i*qD{vc;ox{aqTr@z%nmkJ
zayHRR5G+zi3*UXi2BhO#W`pw2fBFBaHZpR_msqPe2!}$zTklL0!QgW1X^3lIa4PVB
z@66v`-z~ytv`ISrGX(kjnouaA`;RE8BK=03Us40}V}3nrOiE$#w`tfL+M<k$r9RS|
zVaM6JJGa334uKWll85JuK36Ix-gW4R>#g6Nz*7FGGk&sneYR<BJK$T-IuvsP0U=R8
zoivy>S&W-awz%a4b;vKtth>Da2~BKtbeW`q93E_+ImsY}N)wl~%F-FeG;H<t(Rt_@
z)MoOv8K2foxwd}xi6*X`=eIXHnsr#5H8E0OK{aeMc?J96DlzH45cluV(1&z?MZ@yT
zQT+1ouUG6I#L@2-B@cKVR016_ms-66De;y&oe$E!sg!h;&P(+K4cM-hBxp9PRKxTC
zeCAF9I%camGULQ`AL9sVH%@KCA9e5TS>xE_qj%J{^0Ixt6IaahHx6xZ!xJfKZrfD=
zkf#(NOp@z#=kk9}RF-Li=r~C1as79UloZzlI8(e^QA9X2)r&6C_8d9q@*14U(I`^b
z>z_8YzA1L|_TOs}BJ}}r@lDhg!v0;(xmhk?i{g2F{|4%6{#pH&t9o_(8xc5DX)uZc
zNN_kmqbV9aGGNdpMI^7@`p~5M8cc98l$n9U+_k1l)TF9WXqnM!=_z#g=1<frw)bJ7
zIA0cNAU~{=6yj3-^5L$8XdaT6PX>>7>vdVY&I0F+z3Nvm*F-PVTZNi*`=2zNX!Bc&
z_1<3+FVh|yT+MY31VByj*IS{fz;ek&>$?e;3FNF)jf9xB5zsBd_bb3!6={lrS<Nke
zwT-5TqT%a|t6slB;0LPGjh~@3Q!Aaa;FUltyZXUNB66$H2oCksnC_fEsH=zs;q>U{
zg|>`Q6?9F33gJ2Ly-H(Uhrb$eGh8_>)@*MD(X~sOi3Q4aZlbAA-&WLfl6lEHLTrG>
zwut=44Y?9(H+-Rx2LDea?0t!dgbO9YME|?F1?}BoMt#aQM=v{+L<WuKPUL(6H(`4p
z&wP?FUQWy`(P9U{tDVp329lkZRP4T9J{Q@9zEO0HPRV(NY+Kv8y^A;A;x{9FTSo5Y
zIo`++4ROGWah>0AncCX%3>t2%yUC^r|K@=o-o1vSTWMSveAVe&bf~Zu;ZZzs<{n>Q
zRxZq_(Oze?(;X|B+onBNWlG!y)STlyPAWt$mg?SbYPp4fpK~{aekFN!e@!{^+%|H~
z-H4yQQ?Jceg7vPK3NfpJsM$yyPrIX`VK8a}J-!P0QeC)um0j^5-0{|F#54;lUvFF5
zRuI<PE=bBU88n61yZCL(`_n(^s1HI1U%TpjW}PaR8#s5yW^V`f1<T>DFd8{`n#UcF
zABFMat7o;ofOCX&0#N>qLQ>{D=vaOPMKAmRw+0G*OWORB?fnap$fh%OZke0ifR=+8
z`^04F?qwKn{FYbN)#d!SYtnwcdoNPkQBDKvrkvjaSKf~#323IZB{R2Af>5Z+xm)Tk
zFe_lHpL~Jr66QPap!E2f!S|g&Rgj~3<i;}AvoNWxGF*QBV}Cr1->(`%9)C2fkJ$1C
zU(q9Z(|+vl5xF_UU4964^;hgmR<U}>5=kEjNn(oD<BETFrQMO8`URGW2$B`Zbd7M#
ziM%BUS>wBLhqNH3Nc=}7#5l4AZnl$z_3W#ZR7%Bd7VXVP_#`XI&agk(M9NwEGf!a>
zFnGml(POjuNwezy{T#$M)P>r|$Ys@5LB%Ds5x0@E_#%@@=bn{npFgX5Wp=HpIXLBV
zf~jurNHFp?hMMl*%~SM7+~mDSGN~J)e|)Nxxf|N64-Xla``7JP=5rjoWxx4=Rtq8C
ze8b`N6HBy-W==jT__O^$63^b8sce2IY@VGIA|V}SFu$iZS$^?y>tmosChksawOtVH
zBttme<mn!sE{s84#+)3T@hQ-%vxFezo8P$KU^_c+c}$CQ$II}>b|75KS9Ry+l4U+n
z1)n-|c^t`Iij=!cGb|MLb|A2Hj@>e_pLX!Yd}HzV$6O$sX=?SpL@XHElQ4q6qplN*
z@Z<(6j|8hzsi2|cat>QX8=lLGIB&sWRKgnYN-q^OF&t>J1PCs6&U!kS&)ZoQFg>k9
z*i@$(tYzqv!|>PkGCruCk-8bI>oGGW4s6`T#cTGTg4&Oieiu@Y=l?&|HDW^CiLJ|(
z!4x_&db_^xJ=NEM;xv?{STRW51`6saRyWMeD^#Nm@G5`X6d?u$#wj|Ul?LK}f8F{<
zC+v5sJ$I(YZtUchkAICH{?f*e{K~zs167(<3E4<7JbBZ_rE=&Tr-4RMJV<Nh1V^R(
zQd_d>On;8QN!igq7!GU|VQoGOS><@3m9@R}v0r$zfQab970B>7AA&ZYB_RV|k1%iI
z;qccrbKBReMW~WKNwCKZki!W&yvQ_lytzY$m(O(q=G`&p!3vq4+;3<<cvkC8wX|5Y
zUvoP~yL&q4I=O{-o^k2C-%<12q=?$hU@^#^?ky5+r`gYouEbcVz35H&F&>(_c6ZSm
zY>b1RZ2ex&56gi0*J&*IfX^O;pOQwr6N6XwqcL*=O`LAi^#KseTci>Dx}b~B1+Xa@
z*FZc=G-B@qWXzUQU`}yYw~bBSOR<wE&eaObfCQ1MRIqUdc&h?b?&^|6innsb(Ngze
zIh)|i@}v0QTqKAlocq5?n<o+CY$874{U?Sh;k-7u`Lt@)Mt{qR`^mIYynWbHNOfug
zr@is%`~A`HtjDD0^=f;bYmdiRcSjYMH0Jfp<p%C6px<HN@54i{*|6opCI7AhdWF7C
zm<m*3#}+1jD%F%DIoU^wH#hHi+@|iDNh`eiTA*p`ap`k2eGs>TJAdY;P@KK)UJ&-I
zgsOQ78HX31YA)c$_c_+%Z~yqx!Uz$dY{Vn>Y0?yocVXBf&~Don2K@rZUVQD+%WQBp
z+S`#io-nlaVNdZ~(B6E@B(Oyjxg*805met=xp^oumU7m31k=EAd;v5Lmm#Gtb9VUp
zt!KZbw?9MuC3&Y=I8<^XFSKiTqWhr*C!ly7MMdvXYZ+C5#EaQr)a(70YHi-Ak}OBf
zgH+}Hb_9((t2;cgvHZg?=ksbV{r6mHN6v;_fyUl3SMY<N(fxWw@nWEHfw*8dIP*fU
z$t!c#BeIdRNpdR1@mrCA24UA-g{M<&!`7yI*6^Po`<0s-ryF}mS2|m||E33Ul$E?)
zNMy&q$07wsiT==O7B)8CPG`sitjG*hZb6u-EZebBhgPea>vyl0hleH*38l*w8bQ;d
zpr2uo#0TF)_6Ma7rF6(mR+S0`B|<XrrCHIpn8d+b%1S}SNTyi<@H>}uJvwnNfoj+M
zrYoIsiiz&{JD|PYb&AuC-U?cpc<@(otaBwqC1-QUASQXcsCu}5mr$=^%^b}(K-gsz
zzu+fxtG)2hei?RO=4#X*#iWwbWyX9R3<R1A-UVhvoz+<aGiSYf-+ZdSNEFkbXS)OO
z4~@wJ>#p>}z4pbV_pzQm=)qdJVX|uD*=y4W@@t!DDHY8!%*QoXDrd#thJ@=`{RC^p
zKB08YW0FH>Fexkt{rm;nk~V+y3tWUsj+zN*wOPY@V~>jOmQw1yG8=b3mveq7Cb-o{
zTG@UL_cv1CK_VE2Xzv8*fL9IR+;1KK-BKi!z`wRn#v*~h!u-#h=ggXo`v!OzSria)
z<w%A0%Y((<=R#ky`5;hdQ+SRT866=`u*_VwFTKrlzj+h-nN7-zVRjLPlTUxzgRcI7
zvb;lZNp}{jdl=d*S|6mcsO{~J9==pj&*e^tKd<W0@DK9OLEC-sKak614IO$xrbM4B
zPA@v$Qa`+P&i<8;#?y98+q-nQSG=mtC{ie=j0MyeeMfx&7LJ0xagWipbA8ZiVUl$6
zsFzr%mko#NjU!qW+@vIM{+1<<Dd3Y__+#+ig~!3W+-ihVdn)Uh_Q<DeTJ5Hr0~@E{
zyQ@*sBEwjmb>^<Mg#z-yTSsxuFv}XzsT8Ve=N9bW3E8&~GzqL;tH@mXMn@rIMx77l
zm7NWo#n$4|B4zLI#HXe%@fHK(c9cSh1EL}S-A2FYlu!TeApL}7XxaPdM*hatyRGOQ
z^~nsU{EiHLT8vNy0p}zL<?F93G(`G{Xd8QZz(q26V~dCTVB*>l>U2Fd{TA!3M}U@$
zWR1CCgjuP?Ya>U{r9@l-M<XRk>jz3Iz3DU2%MU#=!DwZA5<i{}jcFeo5-y)Te!&PQ
zpA&n<D+ZslJhp|c9_Lha9D4q(RJ0pqBDo1x@<sg*7M;)Bm%G$R55T$JKZ?BYe2iSj
zKa|D2^9#93*O(8~z6zEOf4Wqc$qoM7j*AaDYrh&M8%uj#oDz59^3j(ZE$HF?a$uLB
zR;T5t_ZE8fp4WetjUDi$)C8R|GODUz(||QU5A=Ccy9^*bM`RX`{)hxZ2Xg-1xJf<O
zHb536>^*hXroiI$pR`p1kv2%+>-}#`q`yJ`$FHj=xVeQ1S!6-SCsWI-r40JptYCNr
z@fgy*ejBP#NPLxJ6K}Ce>J`kk47lqU7*Wo`Half%2C<A=WZ`IJt@Q|;8S%p~@gB2Z
zVo!XjH)GYj+H@fNIyeXzcjf8FDH~ip|6tl74*~Jh&A{F&xPrzqj9>j05%lI|!F{$E
ze`IuCWIsAt#T4w7^1Cvjre1jtdSjNgtgq}Biry5HEOqIL=Lv#W>=dZN-j>5f82MLk
zM`uMeDzb^GZcSlLh=GPVLL6If_*Ttd?r{Z(GR5ao9bZw=)BuW6GY(!YC1!dWW$v(e
zPP&E}3}M9M%pTs1!U+9&>3v+A9cAe;_y3Uf7En=r-}|sMh%|!I(v5(0i*zX<-4Y_*
zFhe7tq_jvXCEYocBGQfY3<wMjLwEcyf_{GA_g#y{VzFlKy=R{t&))ml=W>4HSIv!P
zBio5#19iVrn~q-VBq2HXEna%}<cQ<}q1W?l>ztydfum?iwGIm~59Vuq``-^M>FHht
zE@@3WIMl*v-BLLr_NrWV^(a$63!|!*k*CtJYqgb9#=OK1J{IeFwTz`@gcU4WSaiBA
zrzg5zH9gzQ=tYoV`p(}U@cS7vWb;%YjHpq&v{qGZgb$5^Y4`EKsxUB9i(?4mBfXd=
zyc-HHzNn75<LTyLC!~G&=Hx26sA;bQl)JJ*bs@qs`w#V~8~BS<u=obBP~CVJ7LKx&
zpUO^mmlSF0<a_Gn9rQRyk46soCgQlL$Mu!D)|>>aAA84zMDr^e_Gqzm<qwgUmzPLd
z^|O!61^!HxZ{sv^VY*z&A3t@4y)FZrw%5gfjGI{cY1m@tXWrSHjx>|UK-?h1?+qPK
zDPA6^WHJSquKY&M6;-}2#Xumm|J<xbHF_>Xg&b=L;_}HFbJH7GEo_I<3-x0h7|gy)
z?*U=^oi~mUf}Xs6ZKSbtv6JK>142K{u_f6kNfj3-+)zC<Iyw9hEjF=#-j8yb*+Tl=
z?O>Jqh|M|MA`)m^g?o_pU~vM>D#@W#c}ga|4!2Pk>Cr?N<1ipM92c5Ox0$#oAlBR%
ztC^|$s{SjYqSH@g$PE^%mf2kY()W0=&`0<)8f00Sj1HUar&53_NBqWWrs}UsscGj!
z$yd=`Zf=S>+Z+{#C6QvjA(VgpkK`w8{C(9u3E<U{f1HryFcy1*PatY#$zaN~wl!>E
zJSB^6L}uJ=dVi)FVoN=qE`=sUCn51>*l<Lud)wo3U%k}jTdrQ2Ncv_O^f44DC_QmJ
zZ|(%qmp#11vyQz^t6&YG9%pX+xJj*iQu#%Ka%Wn`Ip30xti^ck>iTEkqD}`h`S2|G
zcOi`i?+BbWx-ze2DX&vEpRt0Zc*Sp9$7Xt^^6MuT=TRu?voj<ukXO(IyVKdoeiZNJ
z1*o5YG1jB!_3CoDjsU7N$UpJ2qOFFD=h7V#GqxHWVL7GA(hwa<?8H{pOt;cQ^Ii|w
zgFBzx4}|XIR9V~d+s|@2Y^<BII@t8Q2e&+VQe<-a$y03XHW|5tbP<e%{1;bz*uJI}
z(#D!f**6KTaSo+qVU348EN*+{cf6rNl+KgDd)&rkyvmKwQ|%g`>amtxRTpFDBBN(w
zo8%GYf(Z72*8adTWCB2b1dz_qF+X?miHeVcJOie1)I&F$4A$$033^qc^P0_J#K|xD
z8#*pF9_S&FFP-ghOtDm_m^W<?eByh=)9ZkINi?Yvb=JZ{>`vE)RO;iBQB^hFdEwOM
zX4nM0tZLG4+ofUwqt6MfOUV+ztJNRNj_oW*r6<ZuFzqbkrMo+nlNT9}zx*<QTH>H!
zl)u{DhC9bRKGkpPnO#q0?_LSi^36N`seN3vmgaGZj`|~m5{Ti`-|OZJhH72{l@WiV
zRW?NOJM^*Y5%$x+$r}wL{s#s&&heA#q}9lwy;u5Ybsq{{c&2)mEUUCToO8`BQJ>^y
z*BTsLZTNu@q7@Wl!69Sr)`PHD9r{zW2o<~ZdJQ#4*okn`9DrQX=QK8`6a(^Vw0f{1
zxF@PHNokLk*W8kYnkQ<-D7D-viW2f_#`Ycebe1bT;5LK>7qR`iv(iajuFuJS^YjDQ
zrh>;I(f{lrLKDlUD<RV0Lq^)e!sRb+2KHKy36&~@IrUm}(@4jzY<}G_4FWO`;eHs0
z|3s3x1cijtB?YCmSQZ!cGOsj^iP#-#A76<0%mN-}A1hm;iz-W!=ml6lZ?x!2R)20f
zL>%$ERHs7$*C*n$zubN)ElmO&=ZIq0lrutfGIi1N&6&y-CBn92(ive_FKgFB8C?Uf
zin19#XwLPDQ#wErnsW9zAPXCqlm_z`1Pe?aNLaah>502mFPNl><}g-ALVKt1R}UzS
zIB-O+N^MW_uc*<vXnOwHFc}tL!&%`fFK*OU{%(Mfz<qh&OPo*R)BEVF5zUMBf?WDP
zNtU`NUYxS_hBsPSp`Y#kGLm>DozGuYC1?MH5@<7_97LKS+|sF-$vk4wga!7^C@s0^
z9;_UAZcu=b$mh={1&Xbdn|f0WXs!BFX>_Mhcnsq%aHjhfaHetPA)FoxC8DJ$7DjC3
zTQgG@)Z`(m0PZ#OnXybxpCc<?R(+7)JKB(w6*Y3Yx!KS!oAe-ps)<Cf>dw%k3x|#+
z;%Xqxn0BRtzb1>zphKkcDs+eKW~F#iKSDZlIE6z)-B^PzVj4CBM;N=zH!nW+cU>A?
zo$6I@h>i6X;qX6esk@?IA3IMWJHRJbvub+8dbY~8%OGbzsJN!(lWC=8+^=qKCuG+V
zSqZe;a~e{!q!0m&;Ia;?!}3g1Im+>&#Jxktnw=mLWlGZIo|Kvy$##rOA8_k(y})62
zl(ZX<hq|1;{o|<vl!3`kif?N^;IAV~=ZBZm6g`n_T=L-c>WbC$W|enTXSCS=_GRsQ
zUz%(b-`~I#dDQ@hTH>%pZzHg~pH?UX$67JI?vy^{OVx8AXot;gP;X^gD(N%3FN_A_
zxW7t_*Flafwu^z8yiX{M=}|G%2p2uv-AWI9>PCirT80ixT-H<Mb|sUR)=38TC-Grc
z?LT9vnHzXgypS8s5zmb#6ht^DJ|vWNR-AOqjg4=8XC@@tx8nz4c{)7%2SJ(98GkJY
zQbUxDnO`NBO*F!)O3oZyn?+g|-O0V2RdLXN`lCLK<zw7rp{zp8nGnaMik|g>@Q<)+
zcy2Q^vC_0q?hD8GPMKPkG6gRyp`+S2w%AdbFC5D)-iL#m3;ON~eM9zC+XS^nPxU(N
z>h=h(YIUUlHl2r+{6$Dt-I`c9Zk+3T=FGN_rHw{Gl4IC5-f9o4KI3q7+LgY~!lswJ
zlgq?fLpNCLj~1Lh>-2oAxtfb-v>G8D^N0uP_ra}jvqgH?1UuCU9Bgh;Jca?ftf`gO
z2P&R3RZhV?tW1Tq(G_?|s0{>VUXIjYuOx~=4E_fCaUYqf>Cz7>9xaoAuA;Nf$-}#&
zZ77fK<G3dsxIT8!FELmbp~_uV2;0PT<ub7oBLB85ls5G(mt%)vdbQz-d3}7P%`L+A
zccm#%&i}K&!?OOF9#aNy?uOk&QslerM)jItF<7CH{;0;5?Yo{6ji0hh=1WVj)f8>z
zG7-pQm7CFI#KK?NLfrx5q5u3!U`2E`((thS_ad6@yIBJ{u$VC0evc58l7<fdgGP^>
z+*-XEWko8GFQ5=%+Ne2@UqX#`xF10sm96ToJ`_RLk5ELgXQQw*iv^X|>%e>yh7YGn
zYE9_odo$DvTzE)rGE?$R<~?;}=CaXjg{f_NCZBH`#+|uXJ4<kKm8_O1d5%X{{#_5g
z{38Hlv$%4z+;&M7=&sAD@-P9wr-VX!D*2w<>KH?$-iQSN{e7T&wJB`8M^w6zIDTY(
zo~Pt2uzK8@1oV_}-6q>Znz1!GTl7M+k3-Od7~PL@fTB}!p4$usrLbt)GV5l4h#ls=
z5Xpm>g<S}#hkT`~!n{&U499nY)p*>i)#?83F05W%e%ZS`TfZ)|sfP{?YL60gSNHGj
z<wZqC47xaDERSH)IMO1ete?HtKI|N8l7sk;x(O&%g7eXv@m!%@B!3$@G;U}O7pAcd
z?K$SRcKUc8C|ERU$jzLUqX%|FdcvVJh9JdyV))QPxd?U5qsJeS2M~fZ1I^{N5bnpu
zzvPG7cfUh_1$i}B36A|~&mB{7tmi@498@iz_ooU;sj^YGJ;8w@mE#0R5tj)$`a!%P
z6l=`_i;B7sP#;Y?rw{JS`g2jIz^k0LWVN-D!TV#0DK9xAjE2&1r|};c1dzJc?d2Jl
zu1+Poz}=jtxnd8DXT|EQ7GMAKEb{=zMs>zUy8qU*a0g)XWEbpaJejx<YEqc8u<hYK
z5pwR|a85ShVQueLal)6k4KNH{hvRW=#U~yf!#->sMy2F<I4Erp(m&t2o=)LG!Fv;>
z8b0t+($A|8NNW;CdR8VWquYd$rI`nF>GaR7d+fbj{A%g+y>(G$uO7e6Q!AG?CW`M4
zyDAiev`iT4+gGU$Ic{yduY#*@6lkRWAe|_-tDp54zb>#>S<iuimKvikOXs7%c<Qku
zpkF8gi<q~|a-<DF>&a8J+?HyR0$HBRRq_U^^JOV7sdC0h9%a4y=@$&N<A8R^t4NOB
z&YyMw7$oyBua#YHY0?>k9VpJ=YApaAne!&`(Ms7MDZ`Nbj{vD;LRu{A;5QXOAd84-
zZKyr$I<-54h@1$RZ>H6*<JLmbY{B}OyHQ<0tt@)XMQK5$h(lZGRby|8W;Z6uj$jep
zV`b!OpxIfaV*3``*cs|W=+2dhV`Fq^XZ4?<NL?F>=L?o=ni|ll#9}BjKcS78%leeJ
zvvX1*IT-B1q-3OJdCmy{OOuaiWS^!NlTu)@SvVY*yb$N-deEE-uLJT+$|5(+*8?2|
zVQ0WTPI|@wUATS;yV&0J$HKm(>wt|RBlF+e))2nuDA0vGTkBStrovcu9EC>M>8VL=
zl!}kX<E0!>1J9NB<+rQ%Bp)MqU>^{YSkoyTAxHM<BF`NvP3YbqgX3X;fH1-NSApjU
zFnM!7boe&4mVAoEZgfJ0gL)xr-25*3U`718Sqh|{3`$^(7=XmFh_=zvp1crlaTK#K
zJTV1Jek8Zc&{l8I%}O2HG(d@%`4&5I4vp*a&2^iRo9DYm9cLtc9~8*&X&?DZnqkJ@
zUsjS*&D{{xA<g*Az_YW#pYOZWbxdj9VpM&uzWLkEuAZ<oSY^_2sR%0u1N^$j%R)!i
zWDym(tFA@6I-pV^B)~*h*GQ-qj49`(M8d_uuV@2YA>My#RfRlbL8WILb;CfDJO$d|
z$5p5(5@RXZ%{$)VyA_K**m*toa7u*kS*17oQOAouLMyV`WxsH6L6oBlm58;7<?D15
zHR*IOT}E#}AB^9h*~@p;GXRKuT@(ix#htMG#v5oF9o_AFxogZM4|gCsa(4m<NFL~a
zBu#!}a`sK{%5y2o<uiJ7A>VeB_1nsif_bF|PHofDpO!(qFXK}flDIx{^77Tm>i4s?
z@gUQ2eK55X0`6{X7o@7cVBI66PXBE#hi7U3Dh7poz9BH$ySWSL-|`+@vjU}KUfph(
z|8?t=luy#V*8ZNShfZ_{TlMlQQ~M+qhbHP*4}tlx=dJdM{SS=k!BL}UV66ANMyaWl
z3@&3q&bF0#XM>oQ?%Aq#F4O3h>7%a)L>)*1rw(@1aoh*SGixJXO98#+AH>WooiX!`
z6kh9+#S%eL28?n2zEUW&_mB+gcU`6uA!-2t850QAi+AmM?!y5jb+uC#A~}zViW1Pd
zA_k@vYxW61IK?KrMF}ch%B`g<A!-cf4LF_uc5j22ffgh_w-E8|62AhSEjZcc$(zRD
zK5Ovm>U}dY1)z`rVFKB`()F~CcCtkJjzDcNa2iXeCQD~Z4$|igH+$vEoch|xq@p6G
zCv##w`nwywnFb|UI?5~@`}UTA7zj06k!S0L$=dp*VKKgxcG-g3-Pyc;Ouq)UR0fOi
zd}>&=VYznod^=3SGT`XTzVrOpuF)quPm1V1I3gd?q*udjg)xlvRa05i9|*pjcE)2c
z$nC=aw<(g>t_*b%Fw#F1qd9`IM|~(!2X}XK+DCq_0`{<SvZ7&%7Vv|l3`3LkCrNk8
zS+s&a^F~(@uQp@a%R&LAj6GZB=ytCRN{*BIXq(nEN*Ho<cULSM=>R@Ce=-pAyXYP_
zGpiYBXUpcfZquhF(Kx;**1nL(6(3)mOs5K0((-+ZeOi3%)I+KTjQxCZzg+s=zJDy8
z8J|yMl6B--1%I<J?Ti?F!9fPJjg?vB<9Kd0=nnD=;OSpr!Tz@3On~}l>3ybcAE$l4
zbaMfDQdM%q<ab(txft$$V3e-Tqi8hiq50G_@?LwaOH6#)$=eMdcWqmZ0<PZre92wx
z%giQ8Qm=4fS#Y>fF_J^B-F87)gyb&f#3&o^!UE?q80jo$VsEQA4(3I4;t%~32DNXe
zaU<RLsR#Y9u15T8xhj0NHk@@u4Xx@-ra~^i?oy)4YSQS-SpwZO^0TP+S~!dWZgutY
zP5PwJmxqgsf5T!c4G<Qoo+;x7-ypCl0D)cFZ=UXb2!Z(6g#+A-o^zI0BZ<L*bRX^_
zd+8>t3$tpY%yu-kW35PYA`*wf{n#<aP8;Mw67j-4q~@JfVRC%)E+w_fGWC>VjeC{6
zO)0v-z$!h_M?H0BKDlTmpGuD{eXCq$16K8m{fxLG!Hb@)c{r(!{?@YIfVJ9Dzw1~L
zmh;b1r!;aMz?8Cy%JL}`f$nJS(N_Tk5Z+-N3yGJt8{jFCfuJK^cDld(GzEq^Fi0TZ
zS=I7(PiVNWxpVmf3Rn8P3lIgpe6hg(kBY4#+?<5<k|rj|8gA)t&K#zaD3WPTbn(_|
zMz2)Lv)4GAxX(EqPOzU0UNp<_zV)xw4z@sz)u73AnKg1g)$AH+eQt1yQEuW`kXLYj
zg#Ll&^L3$FB2j*^NE{ng;CUBG%V4mVyxsHIJVq6ZOby%z)6P2#R+P7~LtVXfoScn8
zN&fQ<43RWhK~*)5;nMxqvCp_lj8G^7j^Dg@?e^C&<D>hNE~+Edr$^UV;x!(@ttf{+
zbB}}gbH~i!VbO0WkN6xuJM;1`vQiE=GILEsk}Xj2<;?=vDUm0DPU6}ombFHWU_Y9=
zW4{M{dj!_a^<IfA=|G{!*+TOtb#>}UBUm-VfYoaKoftjvMaqEPd2gZT<Mh>$9I&S<
zG4HK@t-9h4fCMW3RWInX?x^iDEWD%}xKSVaFv*fVF@W?io{|Ox8t16~3wb~Uql9Jk
z23+X^GP3YvVdOR9@&1<g2ZYM)n)SQ)umop!NI1TVJ>@bMR0-R2Y5b!d#Q4nAhBQi6
z?bW6fRu#ncg&LWjP}0w$3%)p;14mn_Le1}LQc2%hpsGKk8BR<Qk-6&zA~AMO<qD64
z$^5H-#u@<GM69u7#Z6tV^&OUGiC)Q22_9&`Sp5SX!n?y9!I(%ONfV6fTot+(45}PW
zqF^#!4@8{S<b3Z2hy+jOF0eWDOKJs4Q~4EuFzh8z4lJI9{;_eMW%83;n&xK$-2l%w
zV)o<ydIFon2u70lJV(a^pUh=L7shqVj+-qY2)Op7#K3HLjjC)&HT)P)LZ*bb{iaz@
zV~F+uCTdtJ3YYzp*_qHFkDUz-oy<}&jU{%DnM#!op4jaHywvOY^Ai69+&6FRqVGjN
zWXr(`7qMP7%J&7mvemEPQkFPEYB~Z()jrr`OzQk%?c|aImT2VxzVz1r;MlkN^xa#-
z+AL8LBzL$0OUj<%B&3{!;cmTWy8#xeZ|-Kjjy@+q%hg^P#W?}M=RBbXCMt;VK|&k@
z$L8nGD!%do!6;ST%6<P)(I)YlNVI>sKo{!DYMMD|#Kz5Vz~fzHQu7s@VT>npo8k7;
zWgWc^BD>n56f}=1kgfVY4Z3}Fi7D-F9EhTd+QT~$VofpzyxXii36U#RZ%&>v#jb`6
zGJsIMkic~vYeL4(<_+e=e*Lu^*4kAZr1#Dxr(K%40VXIcqupy#L7$Ze04P4Bf-XyM
z?L&k}(<+vhVw<Uh)&31CyuW56mzQAF->{KscF<T!{ftmxR-U{KI$&{C4j{Cd0ijJ@
zhek=xeZ`VBXed@=`-;J*eACi_=9t4l$k~;7P)RMLfSXqKV!r|K!K~Q5X_~a~EVn~+
z2WO~AwzEaDhlV;Qmu{o_UQ=hvQSkkRY%|*!pf?J{+waK9-z3L@*=(8lB|q-qaFwB3
zGpA_>2rqfZXt|y@rgN{L^^3*c53FPRw-chU@I2lbM5eIIW7Jql6X!1G>v~;=hMawj
zOl`Z$>E@OEd@0;VdT*t0v|q%Hw(WxPGMFwD^Im~}<ZIu{{J1LKDkdS-X8Yq<E2Uiy
zPTfmfr!>EPOK)Z08qL1#mtYtaaFdc@ca_OBX!7FStb3sJ0I4wNbqov1Z8XlV189fD
zEv>{r+7CQ2kc45%%jV+Rz=Vi%VR(ty%gVV&3pBJY%&4&nb49uqgk@ngpD3901Cx!T
zN*JMFcvz1ceK;O?Pt4Btb1$n><csMh__d%_*&oYNZ;05<Ke)o6T#l=FeUg6}sZg1F
z-+k^(Z=n6><65$FLzmpw`cc!;3NH7%n302+%btY_9o51&YSZ^hgFNrvh9)3B0d(t@
zHzARqh;G;f9~ObunRp4q3J>wp#P>#et_PC<sJy&Oykyza*tMe}fi6zV&-$z)M@GPM
z&2SddIN3jDIx_&I2REB#i46E@`Zj9({tpo*&ggFe+Rj(>%0y4D-w*G<vhXIb6Dq~(
z!OV`6G__Am70-Fn+({kV?!o?Uwi7ro;RXnNSOJhF(Z$^ui5mkUlmd<m@FKf+O6s6x
z%iOCN!gmx4=#buB_H=%u3La4jHVQ0&wFy@UC15{~Ko7F?+VcTYPT*sKz{kk$E?QZ2
zKh)?rRoZIM?)q-QdqGa*T|9qE;nXfbDCcBU!#<QL4onFR>zfQ!Iho;|w#W7%@G(o?
z6<7WZgP8R1{g<~iV;4W#-daWLHa04DlJ(=)Uygn(_ojC~|7e7tNFc8fkXjT`g7hfH
z#$wB^i&ts`7=f>j+Us+&5u;Y)h$bHsR4L_dm!*NCk-T<T;Y9iz5uqQ~Z81|f?Hcxp
z1tvNjBzDhc>%Qqj;P{2ku3r4Y<@sU03X_*!GyGbAdjSD&0U}P?U{YxB?T+0+#<qW0
z=pu1R?Vx%?3;;si9c0GG9_sn%s*Nt-b?*;elNl;xX^vaVRq1<?oAvv|TYJFF0bLg6
zy>iLKLx1m%?7C1Bie+?N*H=UM86ZboW4Fpa=^Zb`H^xX7fVy$oh<80m^*lf*PSKSW
z<2vz)SFXpR_~*isQALZB&Aa)%ZU;I7Oo_f4oFIg&PWoVbJ}bQ%+2)!hfQnEdjl1O(
z!|ST}f31O=-cIQ=P`rtAtW$Y*6oW4>6R<|t0hgC{DSD0MMBWn^>boLnFIdBkL^=hH
zI7j(BMD5hx_0Do&sh0i$@vk``{wrrzi_z;JQ5~2rim0fOVyqi)+bOpu(EXmzQTbhT
z0xRmHFlMh8R>!~!h$k(JX+TL9*7L|k<*lIS1;?AiNmjuD;)tJiFAxV;J%!*!xLBx&
zK>gMuAxFoGjbkY*lu{QirN6LF@;laGgHoN+(~#S02My9XJS_pD<PuNR_v@y0)I7wU
z1sOhs;)G_G`?fq8-Aed5MP@DTtMh95bJaoS+}~>fhDTrFzkte+m-%crtec_bb>Lzo
z8JB7+Z>bxtmG8S<cOa8KM_ARIMsGDx1N2S5mD$dJd~D!g3DL2XkK@4xw<_=eIk|qU
zO@w3{_qD@223|&bSr{P=X{6g(&fy%ny2oqC;iA2YKSj*HkaNQu_7}^X()6R*6>hYu
zJVYIc{XT51{=_|T@qU!V(71;4)yg?Vxpk2{WeI{kgN}OiejqH3mi^|I{*uVpgCimV
zT)4V7)l`#bH(c%BwE517*Wy6&i4O6JSE%7rBBCT})K+S%?H8B4QkLJxkt)>Bga1bk
z*&ig`VXs+|1tkbkJyIp_CT#qW@p?7;;-pQ9e{g)d%WXQl+Ah_$d0EGm2=VuOl3(ru
zcYjfO@8kxlm}H}M2aS87z!KAVbAQgy(xpKNg#4hN?VL@<(XDL`_kC9wm`+Yk)QyZd
zgM))(<Kl?C(1KRQY|Xd~HvWMfpses5?dj(aPXq+yjNIJZ)HO8daBy&%(%YzPi@g>G
zoE?uC9|~B+pts~5ot|h;2~}4;4@8oCYFeA66BWmz`;E;NewCvx#De`d1mprCV6?F$
z{_af(2)MiQ`f)!GLdy0lgd43qroRcI?pvReuXSh#X5=yUPz!c*T{&7E$?KV^ccCi{
z3k#DkgX9fV{zbZf6feZMHE>qMed9xtv9HkXRE=Fq-PW{}k(&F|r}ga91E$55%VKr@
z3)`-Kj@=EFzV@OB6Z3a_n;7e&X!ne=*if6qXxVSwn55a=6&$<UauFsCKGXB+dBb^B
zsv~=!+3%}7K!I&F5!k$#3z6~nD`iVihV?F=%ai3Eq2*M%oSYn}&s$(z;h&eJ`H+bm
zic1-rmkv_A+)ZkE1`6~@QK4M&J|AU$s3D#=4b87APkGd@zbNk#1GJizSQFwZZoe+M
zh6QZsK?w`P?S{@FtIlP?g5qD}AzZONL#Oo35h-el7cpr@VH3L%4|x~Y3QH4Z!b#pA
z>@wb}<W05(9HbIdsBPqxW8l<&zrtxj_GI?z!q{uQxb_@v2*czE;i*cte%Spsd0Fu>
z-E@mY@R;p8moqn_^|LL(N%ho99Rablr|sFyw+s6ah^)+-97vk*$EgCvFPeZqXn*dE
ztSb`QrK`iO+8wrs;W}Y{TG2Pzv<H{V$-k6LvQ3JQ?^F?h(vKT@7@9ZRBf|{eT~81E
z6&KLp)`7reof@{kV_U3^=I@@amnvy!#FbJM3va%-_)W?4W<Ne2#~T9$Y0^DYi%fr7
zq-RU8RN-J`z}4R5+86(UzVf0#%KY9#rSq0IO~>~5Z01O*^+f&&(P8`*WJ#GMWtM|d
z-KC9SvKn4HJO*l1a^f=7Lc;!g764>}N4MGAYmreWDb4l<PTzD#0^;#M3Oao;a2=8v
zo|<BHXxs@YRpzJFgnr(PH5PrrQ{n7$rfvb>-mw&VzKnAWiB!Mn4a!#+?+&<KWj+hO
ze4p71*4sy2sr9F8{@lj|#FO)lUSDd?<mT5%4(q?6u(6dMcT3CM8PIxh3=BFsS&qBi
zJW%$xEb~WV`E(|mzU0s@UyKO^l0(HT_95h(uSB-lr$LK&uH_9)b|#BkD+V$p`Djl4
ze78PkoEvFNGd;GNe9(3GJQUZC%7#u;m6|IjOT7{!h;%sQNi7xZ^Pwfe@}U^0%KJCA
z@rRSW<+GZ~|GhcaV~g(iPKN-M6n+I4mt_aEah$FlI!Ja|HZ43vcwqEJv(b#(*S&e+
zSgtJ6t56D^>B0IKhJUfK{2Jctj0er!==$RdWUq&$HmxFKk&o!+I`^Gq=u+}b1tB;u
z>edrx-By2#z503Yq+7e07N9cy?NnU@$bI6KRgZv!<C<B5LojW^@Yhu3w4H9ohTZIq
z-n#>2;s12&`*p+bzd-dsD!~6d@@RvoBSJB}zVWE}B)f`#+$)?4%hhjH$vA9(|8Udf
zUlsXU2Zn(Y>isKbF?R5NOd&AO#9|b?hWu;MntfPkG<?>J{+T=$z}gr2#)&z3lNy-3
zMdRE__fza*M!Zqvq|TqDJ&<!h?Y0!C(kd}v(bd&$-u&;oz|#UX(Fp{~S(-@;X=9hK
z+5{p@Q!&eV!53RdRfaVo`v3Tb|7l>ZWL)F?XQ|GJq`dfC_d&?D14S4tb5xjHTDpVj
zdX66bWn}#k9}NfE7rf3X1UjHN_Yco#U#bH|MI|+aW_?{e%8g?tz7JrkFQkcPH?G8S
z82RDDBv6aSSG7aZWec!C&dhGJ-N3s#Q{#H^v&jMXhZTcINdJ42VxU*%at57KI)%{g
zo_(+7_R<Cl3FpZk4AmL$4wDl3{+jGlz+@FXhdP10@>-D6^o}J*b--Y>7Z9$7b@UfF
zDjJWP5D7U-NvAdC|D%YQKd>hdAw8Us-r7lD;|WBBraTf;Gchhu0#^WPzc)*HOPE<6
z`#dSA_g34!Acr?uWjs$s7^>u3XoF2DCaS+_=f=hop0r|!&rScl?W)}>&tP0DhQzT{
z`78m<yoGn;NOqWsiF0jJ@LM()5!$VL2#CK%pu<T?-*2QfC>PM3V6n6370uSWxsVix
zc;yyaqonWB#I-PP?AK&&m3Qd4)r|bVMukFHHj8&C@;zn4Bjf@me>e)yEng?xS3L|@
zyu9TPI0bNSCJ}RSwcqw@1GZ2pb`Ey?@1bWi2QTl58(ajceOp>AEGXEud-Xs13(Q3M
zUqqG762XYCz-<sN>qN-@KFJmxQ(rrPdH)C|JMT_p!hYjcJlT!d1d%#O_iKz`s^=<E
zbq@6FZ(c!tt*u4ZdM<xy8*l3W*Jb%5gq1?ca|G5|lWB`ctWb4L==r1vRQ3ve?8Ykt
zw)%q*5Yhj!c^>2_NGo{WDcB44D_*Ze>^KCdR>0vEuZL)7`Ts|e0Af906<BA6zg2cx
zL>kXxO;0>sYz+9*pibmE|Hh>W6@j|UQ$yVABjA7qwPIq`@j$^#K(`&ZzOH-QXU@I#
zG{4Iemgzz<3r-5O+ezZ<wbBHj*~YV9U!T9U_To~0OcS6pCAkH{oM?*v;)1|y4^oEx
z)cs~b4;}?r!}g-O`*urmd!1ih0E2_VVD^c=e3yP9CW~%4slV&KzP^b$>V`+KM;P-N
z)U-t+mX8uaxQ{zBBBIO1cyd#pp-};5zVf<)b3fkf#XfV{Tw*!MgK-wp@>nJahEol0
zYL5qCkdn1^z5_Yit#00gPhdW50&(}u=UO}xjc0^jLd3XAuapeb5blpw(mF{a8*kx&
zKmPtw^sQ02l44pOgS;@Rj$EYNEfou%jEx<4^LcC;%nJYS)g}GV=KYL+TwSgpoI=mQ
zXK%>c57I_)6qFYDXBq$PQvfOvu)QXvZ-GM!uI2xD135}!MU0hcM1Xy^Y}x9a>Pkb&
z6KaVK5zx5`%dG0ZFW%@{9R9m2A3!!69`Y4ApR#Z+*&(})wkKmwSF&S&CHeo;pmXFX
zkumVFHx4Mz?2V03i9qVp<}WWbHIK)1|Ig+E>pf+|zdHNw>o<Y;V6Ma`x3Ig>X&hU8
zZ;|xR%>n1G2B^-dp^M^84N@}IUt<OOA%S53dT(tsic8tAfwImDTZ4nd{|cwI3v&X2
zeU^4DdTBuPPC^v!7PIBDeq&GjjW5Xm<5dt|-(ud7$oYm+-1->1uDR2}Jq*2RT5rv#
z1W^2DxBrh!0`C5}>VJ1d$uqcscW~qZj5i-T*6lsv7Y8d{#QiB--#$K}25@aNBU0y^
z>U!(ryT@RV6}m>H7ycWEgXH0!>5gyz<I{i<rE^5Y@$91@$FN6YKiGcB%|~CQHtug`
z?U3u<dQG4)qe8=nc*FFG=j67`RgUH@)}-O)x##$`&*Q$cv$OaA34DJv66OB8t2BZu
z5%bIr>TZNUbxluHklUq3-4@CvPSHP1`kn=dk=&)&^|!!Q5N)@SsYiY&9rn9SVkIpl
zWu1e+=YKWaAJ9RoA6K{!x3NOD?*Qp-LRpk0l~TzQ#Y{L;xf{tp9YMWz#I2;Ew|4`2
z#GA0aiFiAf<oWLVn1lBeyVjNe7R9eE0YCzrExhx-p%EryAhBvR2tX^QIC^+wRdLu{
zS2F8FZF>J!%J}m5NLz=DoxwD~@dnpA9+Bx^id}{1x+Lf&&bu+=8{4|RELFhxo2bt6
zpCngZ1}DvaC^moBBRPN9oZfz{^Wjab!@L*mzkmk{)u_rl+BR{%W<!_^q5=ecIy|xc
z=Nq1WM;?AmUS7=)S<KEFu^pOEaz%GL>B?227CNoO_mb^fAbwZAll3ln8&HV0p1yug
zW1|71S~`W-K&Lz`BmDDo`K_iS*vD^_9y0{`mZsaNWMpL7&CNy|4mnj-Pu%Bz{*=ux
zEL^V;J46}?^l=|AF^p-EKI@+-e`Rrgyu)KR_2hj9>G&QW$)5;>{vuP1IMK~vGhAX`
zShwYr>wom+C5;!tjJ|;RHUp(uMK!<yiIf`vo=*1LHCglV7i5w<1`u~UcD#)9MW$Ch
zVjPV-KgoAXuTD#cM@NZI-k~*09OSFHVR>q6Yxk)6?h?)JG<8(9F5n2v(1eq4?Aoh-
zvPdatvq^gQu-2x^v@Jw_tfI0qr=Wn9pmNeCedBjnD7CN724X`_;xq=pKC<Fh)3cZS
zhpj(R@I(jUhyn3Y7>w$K{QOs`F9TGinCHzXbNzf6+v2biS3*%yk<s2aRbUJ51O#9;
z)~$bdQgv+ERDt4aZz2bu{=0*~R4vfVGIHn-`4eb>BUuFP3k6o7s%nTI5ZOiGBnkYL
zpw_WseK?!(Nf_6h&t9KEPyKTG`dQ6E!Nojj3o{3Ylk`WBxZC!eRQ+DR2)v-MBo@zS
zMLJ!K9XGLcC`%3wBxtjAp_QTcV!2nE9E{~kTfcw*uG2bw*PISRry>Tcfjq4h<Z**l
zx1zkuQm!hg79}osqT$u!MsW#j+U|Q;{C^A%An&|VO0k_OpY>xNzep?6zj*6M_n$VJ
zU9*fg)}^;@Ea(9UNx*S%WJrG_7voP#MN^Mz<a6*#zEy;*6Bj+m8AuwtldaNM+1?#+
z)|j~OyNpR6o$n1q@2}K+&gP)GTsOYbW2dp{0_|`bHR@RQr>=_NvSEIde6nJwrL}~z
zY7O3(mbf|@@Ii7oBd^p}P<TH&I@;;ryGLIB`G`Z;!SgJ|8v&jrzYxBuYy>fH=V`ku
z*?{Zz-tnJ@uw@`-TK{F|A1JO*P*@O-QM%qUV0imEO%b#lcpIWXjr+qf&YI{y)t!JJ
zL=zPj;oh4z#^GoccJHiH+Caa*2OIL(d~;fFr&Ot(^@VUf_B~zA>p>$mpefWUj%^FY
zlM6|^gd%*I{H~7ts4wm!Fn^$e?%E$!L7QKHvn9V2{Z!I)s8_$+&6ZVY<`+b2==vg?
zsSan{VYSrnf=vqX5g!}Sm)1Ef;6#HD8={)j9+F2L6~28-b&-D|1wcpP8uSVk`CX}q
zep|{kkw^U=5XCJ&D=sM36#6VV=o)=U({2OW*`?ib`U}v2rI5>+W$|&l)@dGm9NMYf
zjmb(tmeZE`nVFKDkd2C{`xk!e7b;I_j52F#v_7Sz(4{nqHQB8=lYg3t^#Gd(UC#D!
zwXlDF&RijUox?RkhkS;PA|mdcOmv8o7$%5;51%dFiMBIAy7qe}t$)U}M@q+kP<9k2
zh74{xk?a10T(M96(_sou$({5!&P<wl?(LHm%80bg&%x<1?t9m6IRKT!^LH?*`N7(+
z;juAp4jFs<67S2sjA+zKaJRdmp`mRO4g*wUcPkv%jp|Al+f)2xF|NXEZ%H1pv(OP8
z-nVI>sY%=wbnt+h*HZa>TonXGKD+jVw$n8nJoN5bT8R<l0;+(|V<$ECE{{)4OdsWr
zrW9cu14CosM`8#swdmQ}^qnQ!E>M4lb2p2jxXlS@{yh_Iz@&62?t2^#V*>+<uJPd<
zC5y}R6GBW^afizu<4YbM1n9|QTMXORuRmZ=dp~x!T|cpH>jTH(sI=Ha8$Jf3rO8E8
zagYc$U)L*6_g7)j9f{Q74eoMp-7u<gD)ZwDgdZ1BlzMm1!U0e9V|!QjYX|$YD1kcY
z$l*$P6W)td515yk^oB<gqw+`mX<I30k*#cnIJ0S;8$8`2nKD-B=V_hy_PhPE6m8ol
z5$Yrk59-yK&j0jZ^jiOy^<p$`^<S1|us{kiGg00q9IXG!CIuJ=`B_u`2atWxK~CYf
zi-l}8u#KJl0$KS1sr?G~_QSp=v{zXy!dA|%&@=lzR=E+t^=E~bdtg7CKH<P$SK+5`
zV8DJWu|Fv7+=e62nUiF+b|IgU#PRiV)4@+a9lTY~IXl?|uC<-1d*ORfXe@&~3#2$c
z(ceanx%A79Nn4I(%=do0Cj#SuS}sr5%Lk@JS74bQU@&9`jA)9HbUhb3-1_CG$2TdB
zM3Q>d;dd_gkPmogW=fy7U4Vx}1#D<Ybn?)n<qX=Kd8F^qbYDpOoUiip8b>tA#3hig
z(IEV;&YD6a*#W2G7j>{*yP%ie3}lNkAtlki6Y~^43P-bkezsH&E)k3=XBRsi)X_zt
zpc8i=+t<$6wthR|#t|Dw;?I8LB+5nK_bDwYiQ<$6-cbT+ro2haQ{(;78vKsFs|po~
zHTiVKl=d`;h_JfM{u^-un(^1C=u(WoH@L|a9=jsjAPQp&UPjK#8|~AFuBR}RzRmO)
z4e|hXi6#b>-*$q=`08~0mGm?Hfj8L9deO5)ISfjPoddpym7N{zAKoA-tlO=tkknls
zl=@LlyN>BvwI|wr1MyE&%nwm5)o^feaSdxsAb%c`tV2_$_M8ilcR+M^E1v0O#KC_9
zx?ABHggCSyZ-#<EawvskC=(z%eZ<;&38ZA8gE|5a<}vHj3=}Wii^shLDH7@AqJ9K+
zlVsMWk6xV*Tv2r8!4J%1(egQtsVNC(nr(31DX<ge;>65N@*%Ar`@DyDz8$q(U97Ar
zwCG2J*D0wo+_z>Pwy;##Tht~AOnUDzDIQ7&)Gk8~%xW=200t_ce<(y{ekmEA7PT9~
z00j&|3U}NiMR#{?j{FlsufbFiP#2ClSl+mavh;zHIuu6?1Xc=9c!A@qx)x)jsH}(V
z8vpPxA{za19DD}Ej*gKt*|dsQG+L*f9RhZ2O6p~OPe(Fj@9y<E_-ds4U3%#@dOFcN
z+99c|r`fdG=~sNN=c-?f?R4J1V#g%M@tod<3(R^~_9pW(4X2DFH;-Y@1Xhh@joX)8
z{l@eA5QhWOzcWt0U1QqILCxP-jdS1rtoaOz=uYI&r=0}t56J<*Ls3=iVDvSA=sq;W
z*%*K}8x&(HP=l<d`eLS|0l&*V`N>Ub684(VdqsJ5Xf2y(W8^a>ISk~vGfQUCxv%}l
zL$YdV+@8$Y&0Z}sNw8?-sYZIHwBh+3w{`MWAwKDQdDZ`r_=+#Kh3C5+wDP4lO+<i)
z$N#{6U|=BH4q;~sYxIg~Av)`2D{Uk^0bX9RxryW;{e9Z4HnXvh{0cZ7pK9AlbNo^Q
zvIf;EFEZ2Lx=(7`^AlYes|f=WpQe!>kC0Fv(_}fuZ<neI%u@FpIpD42Q^HVGdCWe1
zVg8zOhMp$<L^!Q(1*jCVCt;PX+t*vNn80qAe33R_C3Xa>=RJZUib}Wo>z65FU<Mxx
zncS{01xycs;%#B$V!Z8F{AeV6{5weacLI2sw%b3)xz3qKuF7_^tYvd){2sB(CF%^k
zgXw?sBl(=be^}%z6{#>bGR>XqA8DD^nmELUI!L=BM*tO7@(!vbO&R99gsqIreWoO2
z&GodpM57wp<V3N}o!k_A+83^G?v6*23&eW&(sI|g927e|oPVK2sWQo8{o+~pt|rk7
z`S33W#5?o$hUQn77X{?*FQPznUpfsT?!|=#%yBsbAcFQSpChQ;?A7H_ep8d7SVBey
zf;Xo&LV*}UOF%%dPrYGeNL{OM;1uqBI-0LhQ0S4*bQkmjH=M7|`-hn!k!f69T$Y7l
zM+;!RoHq88Iy58~r|xfqn0qYZ0_wO)V^q+aSeh&}0-5U&&1YLi>t6*{;Ta-Zb!~34
zr_L*bkKE{j>m0_P#h>zMt)?^^h#*#(2khb93HEvPB}af}NDp@$xfi}g{v%bSQp`na
z&MZ4Qwq7^#_o>?I-wN86h&qG*lW7@28HRr7knzpOfqi&HlPM^(x=C1jY+u4Fe<S+i
zaDUjm_AJJGI}WEWP4}H-I1-2Qh@7%YJX}hCjTa>|aFs(C#;SFJP?gDAPzu=+Za7^l
ze3>-6B-{j_1tY|gp6bT883R2IF|GS-dw?nablYkTKq=XO&a{8;$C_agT&(M0+*s|q
zr1<<7hy-m(51&kpjv{!<KNE^5fowU~UnQzw=_xyHHePxnnvQVge;2oeX7_Y=kJ7pr
zY{9zw#@F{i0>Dw0PDEFiXNb5T9-%jnelNm5PQcpdCuiSYSa+nr^LSiZxa?G8L8~XS
z(BCy9;bW>I!|bZ@`pZ9$-)I)_+lZ)ab5Oh3@@Q!@4L9r_!g%Jzh1dslKv$9QACMuN
z9e}PbjtZTs8A570*M1egWLq9#(PC(>STfRIH`LQ3Q%Mzk;YR1PF~KeDxt$48G;j>h
zDX(%`PV;#4OJP1R9NUGU+%xe(-*s22FPT@)O`_x_G4^JFJb-%FE5bP&I!z`wgon~T
z@INbOAD-2jgw{S7lwz-G|D-?T6wYqkoJzuFqzt4z>KwCKSy{h!^EL8fz0qlzR8t)d
z`GL$uQBBPQ-iPIc#F;qvsmE=yEOQn=^B3vS;e7X{vP}G_o`GA_uzt~&%nOcTZNI+F
z9*@&7wvy)=)jA#F^F{_6Jt21|Q6F&*v{x7`ylJNLx)Ij^sxYPMsmb^YVf7adMKoKA
z#BlQX+Fg_dti@~lyZNE<#FAX4Y#hK9!}uewI|1M5=DxCJmYHsv)BPGRh!d+x9DOo8
zQI-A82E_yU&u0W*ArtoK&V(>AFvRF=T&`)is3TaoGcrJHEH4RQNoL#8e&<<aYI>Z6
z>!#)SB&2XqaQP2&-@{3(m*X?)YDG;+?7H(|<ecS|3|k&vUP<jb78W@LuB7b{9Z4k$
zD<>~bMaQP6np^P5*NNZNJvJuFeT-;d4MMOGmAf?Q@$T(`hChqCLU73C#hq2t<Cr19
zxRe4RhQ2}Ok@mi#!(@abklh@5VfR5BG-Ey2(w~_XDqZz!RspXQ9Ac}LF)cpGk{B@J
zCs<hs4F9e_;k(<#^hUcqvZ2nd<#5VoplZF2>RLQcLnQS>gJ3YNXK=T^Ty8epn(a$Y
zc<IIoon=7)`(Iyo2NRVJsZIdzXI=;}sQ>4`ttLdwp6Ro1nb!|$#f;j2LuqbQ6-in$
zzAIY%^lQO(qUw8fUG^eA0*f60_kcOp-H90re&~%YChFV2D7HDc>mbC`t@oawM0@l)
zp_#IHb7nT_z0*z#(KQV}DAjq`vOlc!rg5`_+HWRD)B~Cs{mjZLuSZ>{;63)9<o)t&
zlJ!^R@#EplKH=fvFR|erRAA-m?yK!Kyn~mGiYbQi9uMK~P1Bd7FLOU(-0?}y)=*dP
zl`&ejXnXsEB`Mk)k1xh^Uax+8a50$F=y^}e#ij#<U+?v@s>kSj)cQiZ9}qP2AorG~
z{%Daa>ZfTDQRc?_z!7&+ea|aZ?fVM<nQR&G>NBMX<e=-|aic#j$aj4@6Jey*0>VbW
zG8vpu|NI;C4l<tTw*Ok7!EC~`LyO@{^Kjt2kc0K{!m)O<WIK{3co}npSbfV_34zDd
za;gh%v3{*82M?P``=@gNzdo||>xiO!W9#7LR#JN>5xX7g{^CW<nmUvmtw!fjk6a}Q
z2}7Mk`>N~VWTTFg#9lA2>tZLtRD&DaCag){t)0WZnUA2*=Ea?G$T7KnofMn+CO0?t
z&`UY?GZ$xPgOd@4{ju@W2CFaoiFH#v=xWXl&h`A_;zm9t-xbpxG&SSDQ8u46yF=1|
z?2RWOKb45h`9%C}=mK9z^8MXw1(<s;scuUgJZZOxFJJ^JXB!v_%vp|WI~26j^_BFy
zYyF?ZFfEafs~_~L;raYCO8VB{uuj#MQG4C#8QBAl&G-jdAkp!#ThVP3AyvxMxJnxU
zN63I@v#2jt<VJ^vJ|AwhlNxKja<#IwBm?Og&k_x25D(^QP+3}8K}yDr*I5_e>MSZ!
z*qpqRkFast;c)uM#>zU%Bcy0VyqHJyFiS_(rrX6SP2BYRTO%$acm?ycOg0yg%pt0`
zBvs|lU_jR>X&_Pn_LbF=f%EhX(W2(%<(19SZ|nuX|Er>z>uB$^rlO+4Kv$uMS6oAg
zNPF95x!=vM;dnlrOOtf%OC3qLpNja^xeMP|t#|DYyJp6zj}|UJ>7qrykSHnd&t8-`
zNK0RMJST?FE0`Q_|DLkDUGGYef0{r{&JVef{8JJQ4t-?O8EMmfoNmKYT9$ogcqudQ
z%cmrNUECeiz^FU%FsY-?LDO3qKcGcMW2<?wRdKiG(EY?(%&{V5DO!p83%Zm3pHBpQ
zqj?P4f8DSUB_cng7G70dJrt)Vu5exOz~SsZP;`7j6-HQIdffkMSZ^zz#Y85bBTR*$
zTpU=--mj{|Xl9<$hBek-o2Nl|;_`al_A1=Pzt-28FGk~GXlQ6vj=#Sf6(VNp<Ftx&
zKBtpf)aw{#sP3m=R7D~;8Pb(kiFM_wq!=jrypJo6Hs-iHYdw;ipHXcyUa&I+r~0lR
z|C?}mntbS^5;RLLx?tdCd~ehHx`ZSU?RRBAABXY%JOi`(9=YtYvga>BJ(aO_+n?mm
z=ARmSuJlyzfmC-52?aKG#nx2zsnE?eP>5koF;9iA{gx-=V=<9nGVGqO_0X*4ct;~l
z@9?Xq&~J&eYR`-9geY}zJ&e;|d?EfTSK$3uG`Sx5qV%o=xBv2f=3h<SKfZ6b$yKan
zJiOj>8-y`MkqM{u&Ae@ByF0FBsHY{i27MI{v33%JrM$DKy*#gTS{N<(GHBQYsy_9)
z4ir85YDf6(6-JMIh2a&KRC@aAH2~q^WqpA}shZ7QPnMBrW8;oglJ-W%FB3^B$m!+?
zSW`jl)JVP0*<rolyZc}V=dJo>GWN9t`vEXSmW`C*@*M%)sI7(uQPbHLWQqkKw#0=8
zUlo=%7x;oIdp#hI{%BK{=uL$B_P_M&$0Bq-t-s1_Iax}%{-`bC@$o{mA^a2(T!@c#
zqaxy1$~}soA^jP$+Wq~XQ>&hhIf1|0SGE&O`YN}@Kdm`$o|48P4)_niJ;w(?F*6mB
zFxD+77N^aefb^n5QizV0a;jCt-%#}3K%rEu03fFxH{m<`hC%&xtGXJjsBBSwcYN_=
zIm4qKeY|^-d93ytmnvwahVdQmua5j;b;f&t#6hdrb&YomL>#ImkD{4>F^ttRYUC;p
z#pa0_dBGD33Z3(rxl^wYSC`QR1qCxDaXatZs~Pu}`bJ`Xs4VV%YOjirB5t>2;pEJn
zy*#X4GSfC<ujf12A5l|?pG!BNuCYTG2jPOkUCJ8;*nTkN9u(KY)*3c}JykmeVvC^{
z$8SeL&0r5Vw`#rkPoES|-K#)BZnoCePCf$Hk$EEXK+4$OUi&Kb5~!*`L@`#@vBF!<
z;av2Im!CXs9+m#;xY4D|aQ`|X>XgK1+I>_?9%%xROOcdPzt07J8rst7uwC-^86Tpm
zv^?Z4nL+w|lTKV`6s=gTO<w*IG_H7m6;hGL;e<r5%$Bs)D{*Y=GWJb38C9vp-+=QR
zd7e>^corzgl^Tc<w-@VlhS6#+LS`>GFOEATv=;or54NvU>A^{>43#)W74-$a3_+)-
zkzE|iPwD~H!0Fy?4<{V~MDB4=r4yv2?DT#$Eha|l%U2E#j+ezh_(<XEPCyS}YEu<V
zoKyAV=NS9195spa-+0zzMY?ai9bPnq0nOwux-(uqUJf$sWqfS&Krt!wM`XQDSopkF
z(V|Q;XZIrP89x#|BV$3gaXInT<bZE()QfH+Am2NFujKK5wfOxH#-ws<TBl!pF)GOO
zxJD1ccnm)N{Q0xMVAl7{PS|<z-Bc~9k!QdUiw4os_;_Mr$2tG*rypNCkEjS7tkxJ6
z3Jhjh_Hm4_Crs})S`Y=)8*mI>(1m$BwR376e%CP=?)eB*<%;a5KAd6uUC4$4=(WIp
z&#hL9@Q;*D?x4<pp?&@B?Y&RjtO+&52_xyTtmzOHfr=3n;tUt@J|hsDov~A=D~ay^
ziEui|&p{X)SyCOhIJ8v_l^7m<UUTkLd>{?4u5vU(@4_a;{DY??O^EQ@H}7j3NPX(D
zd(j;B>o6-?ynr>kz5N90F{@$*=g=CZ)vvXGDUmMg-Y>K~2y_`t1l=wU#tRkAoWwY3
zyA@va9x@tVtZAR+>?fYRgB$|wlGE{)%N$nqc0$m_>A_mZOq5Q#-?~0UY!x-_tJq7M
zZnGC(dgQpi3^oA?k^*s`B?0`v?_%6<NX_q5<Cj=N9VsF_Yep%43iSTnyXOhxgv<KR
z;#>77-1;aRbtaWWzC3_cD;;JNPzt-sUwnNyBC%`B*|_~wV|C6FtN~i@85tP?+dUB$
z{<H-_i1TfEtEfcksr}529Pl=Ecjp(|ZbezMyt5~?c!RLeWhH&5Ig&rARLbTJ{glpe
z&He&&rJJ54meHSFI|Fqa!-#CYYhwRj3DYB|drzXOUk#G}6T30d%4@?uvJl*2-B69s
z#qD`j>`^z+RGgM(Cz_7{p7&$qP}aWX!aWJwIiG8+bzW944k&32YN(0HT-U}+!+rqO
z+>z^!&dW*Wv1w3D^SkzAv7?z+Wp@O|h1QEIR{)X)lA#CG?Nq}kr+w<=8qg*jm_6dS
zYgYNAy?toB`H=5dg<;W`16rTanNV<p*1Te=PWg9ujiF!hj1oWI`H|n101madfnWCr
z64{pHb}r4R^r;Wsgc1hC%U>u+du%H)JJ7I6zHZIr4A3rFaU2~FMf*Oh@S@@69m%?1
z`xvwsBezmBZO<zpb&7})-_#oF37neJ(^hE$#&O{#-3@Q+jQs%2zdB`8n)C7F188!3
zHgkW=UK---fC6=BQy#kdjZmx<O>_*1JI<(-NXw8#XSPVTMbbC+apB^wlgTwf>o+@d
zt-r0Ls54r;&98~=Zu~d!8&xo1CZ`2nyT(~r|JWDFc^P=`F6m~8E9Q1gU4yn(Rm_`i
zkXeZlXf<aaC~}RsQT>T3m@>#_pV<?q=0E8beU}+x=B%myI1YOpBiNsikU*~m`Eq_A
zEr&Uwz3<56{l3ObZjW3%bXcwlyv=JZXO^UN&*7mTP)BbtmDG>~gN>b>IJKs}s~2^&
zAJjYI=ahK?lV3+0#pzXU=f_S7^~}TYWCidy_Aif<tk_5{cA*6JOOf}!iHh%20=~2g
zvk`!4`#=DyLl^U2)FczKk71+!`hM-F)^$!<FrOtwoD-S4Z!uLdZzwIqb0f0r-}ok|
znfth97=c^2(vXzI|9CaWToFuZ*6tBMmQg92GkBs=QEfX&`FS6=K`sRMzcL39E+q#E
zFtu`O{kL2NSL2#GR-fxeYvUatF^{Td&&YeR!LS-I0{{EQ+j~e^84VvE@}u9q4XZSR
zOabQ|(Q!{hXmY`-nsFPKw-tten*;oz6D{faF^w~s`xB$p$M4_?=2+W(9=Nz*7bxrJ
zyIY@h2es(w9Yu#iQH2PU+kk?eBAK^I>aCQNIGxW7oZLGWyvNO)BcfF><`LTV`EMrk
zFVg`=BOc8iinQ&Em_H|b_&r7bU37R}^cQR0u3Rl!tPPwEzV4Ig*CSZw|LGF&T2UY&
z2dZspw^s?cLtkd+#nNF9emYyZdulo5TlLhK_=z<H`XIWo`d7{X-lzXZ)>lUbv2|}F
zQc}_&9nvKr-Cfcl-5}kaqSD>nDcxPt-QC@t(%*0|=zV|RS}gv6HFIY6+4<~epP@_5
z_$&T@@HS70mOJ*gJNEY_E=v>aGOn5*7!$H%shfJ3B7`zIabR_M@ct~x7XoC*X;=Mp
zI?s;cIGLy8XNuK+)%^_&697uhW-rTO%(bPSPjU-q{<-X5Awi^kO&Fa6-tSlyJD%Nt
z)#VLkliaF=_X5+LhwS0#oOiauJnFOXfGZ#*LBx(c%iE%!pI6Hbw1c+Pe(uCB_~>99
zV$YJ|{4iL@cn^x^YFT?FY!+c$*UhbwAO!Yrx&7}hCX&B8JAyqs3T0?)rY(-aSc)0y
zPlMvZ?5OhJ1biVCKm6ZC@5EagbWSWRhS^^3!n2GxefOILe*M0tNtaQ=?EEOHV_gs2
zu|z~b{##l;KmhjU_>V^aBT{_JY_R@jhW=*$!SjcvCU?L!sI!<wmMUZEhjQ-l>JnK0
z-GgOKAiUkiaI3u3Z_D`7GAGDYmy2mf`+mDZH>Qto++=uih;+kY?@f%23CmHv(?I{f
z6^Gw~p5F4gf7$N1V;AtCQ5r=ShR>k;>DPHUYxHiQmU}?S7yIRvK%jm<?c;-PNc8g-
z;X6Y4CfKO<O<*t0Y2h{&XU0$Bk!kZEw^aWQ_Vp)Cpzd#JsHvF_6^8gLs^?7=Yq<l~
z_2@oApzLNvX6QD+@TK-7)Onbb{_&rk_#Fl;=>8)l`(?pgC{y<vFuPI4f)%D%ntc{U
zQM^MgA*4O_&<=xg8CzHXw19etBc}DRS1(Y&i;jCDeRymNUBWwMZ-)*?!jq7rkC5P(
zIn17U3(J5?_<|w>0(K_=$*R^Y$&h*0RVdk~N-litQo-Kta6DvLTA8|VMo|C&0^O`y
zvUDTp;oRt(Bk2<b{=b*J;RRl@_3jopf)KhpuXasXHdZ~Sy?Q2{jQ(`;>pm45_=`V5
zuzqrAwZg%#UI3nVNYiC^)P!3}rY8$&&0|)<C-=MA-)+k#wV;ZMSFdc<WWCeg3JMC!
zD=Qn3@&Erzi}SdD?mmKPjP>x?9s<{8<6`^PnN1v5?;cYN@{Ha+z27n9E3(FWUL3P$
zXq~47xm)#`o;B&SRp1fCz4Wfi?9Rm<->hS9<U$fw;IE5`yXasE5mFbW%zQUL!6x^6
z=g<EJmcJeefJC8QU8@r`(|!zF!a2QdGo~lDsj(7aQW2?rD@l(=2>J5bAfQd8fUu9^
zG6bK6T>{}rozJz7v4noC)jRNdR#7cY#SJ|vkD=i=-PD=gqQTpY_VH401Au*kCGGan
z7XIDyg)iIul@!0%{8~K?{d$3*nY(}_Ll%jQiGKcL!EtdMbSU^=tw=%sIy$%2J%azN
z-b%h-+kcyzXm%4>GsF~`8)sbEqd+E}vXh&oue<_!#j?D-o@ucEXE{KC(O>V9LzhsU
z=^hV<Q(!hL77Q{(-x-)#Y>5BjAbE;&|KL|VEtp^h)eFOzL*N-NkGf1CUG+0sjOos=
z44pBYPrTcJ!SvR`{3x^aRE4cSr3xOhLr_rK_D7n(R2L>9suY|;$NILRU8SmqhU8NN
zn=%CKuWA14vmC{j0m?;Md_3moi`?mzk2?LXpBIh&J}9~#anCSlJmADiB1R}mA6!c2
z2cfS0u@NZTr(AicoKNb-&O+ai$(LCX>C^m1pJ_$26lNGmGSl{Q5S1W0;Ls55K)opV
z4WF_8+t7wFWu3T5gWs++pW2C+(V!orx3||iis04XE&kVM<q(C&#0Z;A7SPFy4=Ia`
zSoL_*Q|jwXH(pP!%5n0S&9suS-MFz`ca$dcWj@R7DetKUTV9;6ZWzIQ*`@@Z2V@t+
zvr{!|it1DIN6tpLs`NCkDxAXYgY(cBao0xQZ7_az+QxIF%F4=jy`g_z@<r^6P~At6
z*EoQNBoQ<-7f>N;+lvK-(81GD?PKe{`mc*seR8qU%qp+{)f!J}{N>C$)MDwy)3|lp
zMLz$sxv^AA<&y(TieyPRr?>%w9K?*Rce6k9^3s7BiVkV-|9G;0_vai)vbnpDpc=c6
zV6Pjs?cT9cO@0*65Bmx7pS=2*{MBA@i>p6!(4W$N8>-~gWg|bb`dideFHxN}BRTX@
zUMHGO>Cma)&owfpo^3Dnc_j1cl3!okc=-QDiGRY%FHs(M=GcY!z9X3HBt&R>!jXdW
zY|*q2=7BG$3J<>J6GmS%1i|_IuCGiGy49VLXSQX|w2*WO$w>(3)%M5kx~)tDwaQu@
z0pMf%c%_Z&021@%f){Uz3wr9p>&}ev!{c*qGcByw<iPvmBi4-RvOuTx|Jm2n^Gj-r
z3W#S#NfXq1DD!b_DK7D7CcAGLo1s|Fp7&dSNEgsF*&dUj6OH5|nHrWB7KSWTD*a|`
zYz({6{jW^_{{DI=8M*{>TF*;+TF>XM`NO|mSP;X<IOBc%wPj){0_$H_af}1FJ-04Q
z>Sqb_7$SDNIkL_e5mPpp-FSvbh-dC?1?9wwJgPXExQPuWO1|mQttfCF*U+o1uEy&9
zzu^T+9SEZ>V-U*MoCM93e4?xUVixaQE08A_)6R)olwPc=<tg#fdJDGjqLktYN+tVW
z_L*FNI#GQI63e1A*pPNq(xT?2CrK0z8}ai#^zUmG#&bhKTY{kY-}mJ)L<$Wm1y;p|
z7IhcyKJt@BzLr2o#WldLLW<U=;`vW@;wp?^vdD64K5zKu#T{woLiKCjXu9sD#9A~v
z%0eV@6Ze_^HY?hUaaD3e2}-tS^%8E!oQ*+O3E?>PoeQAmC)WGBd;hpJDv8wUCGgW*
z-hWq*ggP@YnEdWT2pRb9WflAnP_b2O;6gdWFfX$A#3%mnxN;P>&@?)KOFMue!B8eQ
z(D5oN23^6btt_{x%on9&Wmnb2gc88sgGa~4jLx@5imc!NpT!HLwA#Gk^2E=wvq{>t
z4z$BQI^Uq8ptAQ%<BG-MbW!9sj?FOWbzFa@xL&oCdL{eUB$nBqtU8!c<=;*d$SV`%
z*vI1q)6RRWa`G#$u`(lL18eC(P7ZqSRiBXb&RyMgTl<=ueOopo0L2;~9pwYyuC(Lh
z7GL4RU3{d!H~z=gzKf+676xg!U+b$hIx{{p4U^l~qE56Xpe~MB{W@X)BK>RIe6#4h
z>OM-08ErQY{{^T6Zo@?cgu)@|41#A-m3;7=_i65>Yj|vdw&34JvHF6$jkdU%L+F3h
z9*J#Sz$zI$$ket2Fq3{NE*TjaMMg#Gv-tcUm-CeoYJFp4L^p&}2p||)VuiLJ<1(!E
zhE^R<rtW`Kb!JbZmD@p=b~gEH`EQE^@RET40gS^R>&5+i1%K0j%S$uUx~S#l@Wb6U
zfW%<9fX?V9JykRy|17iO&G@2hj{7+d@SP;urr+PH%;tndMMWdS!nB#pr#=f~zG%b0
zfe^rS$^7{MjQYHvVQ4s>(L|nBYSWzbeMp*&9BtNdx6;|q(0&W<-opVLHcCf9ZE*{-
zM*h>jue{Hh5f2DL2{;elF!&#h(jxwFwt|RaMvIT7zvmOm?*4uNFQ$kVde+u%2bY37
zUO01GV{=<5A}&r;Jen%aW{5LJR_-;sd2P|0$X`amKPc)4Pk<bw((KMzs9ql}CN9p&
zpzWi$qiaphYE!p$Mxb(2AL1aJBe(O;EysocwP1c;?kmdQ82tOG3DBe)6#cBMEjnN{
zP&xD0c%^Y?NcSxUL6TWEq^f-v4p^$LF{oyln{^r*-{?RR287l+gEHPR804lTCSr?y
z`ZS)w`+ua?G6c4}xA(KACf5FFvC#c#xUrzYC1N`B6HqlH3U<7|P$YieH^+{1ek<jG
z)m6mOC9~K|)XBI0*KS&vfgJM^?n?#ev&)?%`rt8xtd|3M{<=>xILBlVSJ++=L{(;&
zGGKeWlzMz*c6s7>b#+yQ>X+a(4i1h4(5%v{#%fJ=vBQ&pv7YB$*yetfGxoEN+``O^
zSjIkp*Z~;F`^@a`E13#}L>Zl3mf~F>m8`l=CKX`p!)iLI(n|i=wfuj5GTbYZrm#ym
z_CF7pCXVm0V`e&gSBA^OXA9=0|LeVfFzgh%DotTY!r4tPk-S3L_t|(8DrPQNsQ=M2
zzBnHFeM_;P_>SJg(z^&qEJc@Fn#2OL^r<r#7fDJn<c&h#BXS<-zZbcRx6E2(x%D9x
z{s{>PEVq!z({WcYH^01R%xpUfu=^+*^!ra&Dap+mZj6d(bL#y0^N{9u45x_x?|$Kn
zKuxz1DiAx!&I<TTe0m$Maa)}rVTO|pKiw+<{vRUCS1BO!9>~ob!ahF>6%RhgYPDX5
z(!B^xB9s3p5}e@8ShPeR4Bd4gwhKHXbEKTyf+*vmgNZI`7r3pG{X7Q7Uljy`AsEA}
z1nR)_H93)0yDnmVX;VJ7nSJeF9Pd-E8uLmg#<Q)5<-bz>z2tW!ptW2bL7mU4g5UjS
zo#q~svVnFoL`TRTT4E3bFs9my2K)dy%~<`@>8-L>)wJL$A!Cc5Yr3yl+2(q7w()Z!
z3JHE=13>xL+?ujvOciI2_wCcORU|$WW~ZcBf~7NkIOLjEp`6NlK0t>2W~Yse0+hCu
zk%R@Xz{F%8aTik5=&4;wigznf&D9a*a+=$Fw%-}-bs8BSklgBftVSZEU_;uSNkmkA
zK^}3c=ZLy-(RhLS9R)FpCyY+iHSo(@N#7es5~;e`f^$W~tGM~MQ-6)SB@XH9=<TOB
ztIp5*3WW+<yCkuaRy6wd^Qt3ld}JCeU;LYHn2K&g_q0wt02TiF1r#rGKg0VHH;b8d
z$EsKJ;qy?Xn>^d&O3HD9RZOd@3a5iLNzl8b%?$X|r?Ma)fdy#t!Q*mIGGKcJW8d9H
zSzMs}Ca{}qY$IoK=Ps643+fUS91fp}Ag9O1a#52Gee$*bJPNu2rO5+tvZ}+N{wAMX
zBtS3-@yvM1S)epPt@42b*7BMj#j_3M1TZwhcjNHkK=Cb|L4iut*l>cpVFO7u$3ru6
zlZ(ZV{p9hy5ibmbpF#LtHs`(3KbT7DXHW$=1O3p|C00pi%!rb2k2q;Z=ixt<r5*P?
zpYFAc>M7|Hu^T^N!m8x#0{%AYkMr;j1aySo8;$v2$_vOV7$9HzO{nO&l!Z6a9@b{~
z$vC|U%IHbBz#C;LzZ3BPp2t3YGaRA=bBjaSm{EZ{J%ezXZj`ZnBmepv5dgt8L&?W(
zv3k_sCp`{dW9x2UIa3~;?1+A3qW-D5#;5;uD+Ew;6IL&`OBT#aPx${RYy|Ky51AoV
zFKLw_)HLpx1EasXmVck-KY%{$4<1p8jO#KS`QNq)wZmVooy3dv1c$+IE;rW$QzL(1
zxFL={Meb$PS3YB+`jrx$bxg!VO3Q1B)cbUcE!(FixbMt!&Pcvo*B~1LnN$k}*!-k5
z)1`q7;I$MweXRZ@onWLuu>5{j`-dz9<QHeSbw4C<wsx>0Sr$vf5N`<o5r2ybDDi~3
z*pXCYlOq|0_YCgH5)&Os_-2sA6gmMQ{U??YS+PmBWX`CZCKbMF{3M`0ER|X_Uh}Jb
zZuvme4R1g5ep<MN2PzS&qH>-G!qeo>7EuYenAaj|^ZZFjzKi4cKM>u+Md%P2i5Zl=
zY)|~x_ODdBUZK1wH~pbk`XmlJPV@7%HzZpj;yK43?&L=qo_tx03#d6-r~td+lnvwJ
zlJ>Ako!Nezf8~5Ce<vI-zC4uUxk1`A7fjTNZsMN>J;gyRtU<44QolU^Y1so523Id1
zKcjD{d}gC~Ve>S2=aDNN68JZ-AP>qSd?R>f`&m`x%@F9QLB*-0Z*Zz8kq;!QoGs8<
z2grM1k>GlV^e2-xe#xPA(dD|-IbXhg1T6CkjKiheP-*WTM;iIrYXV~M_I}dQHdKd~
zBHsi-x)oM&@nj#u#u}oaq430#4jSS3t>>BoT&FkctXM)y5i{Bi8MDWZsre4Hn+a0i
z9K3!g?wcpgxW^w}+*x*9B(Xrt{7w7gdk}CVE18x3Qb;V9n-dWk0B~#(XfdM}?v><r
zDgSVR@TY$BlqLqra>(U!3dDMTHc8>-eaLL<sQilwfp;hnf0lS}S<^7-+TpVanzCV5
z@o7oXRF6fXueB4G6ZuJDZiG{7(vuVY36dS^ml~AU0kcNgfVhX+3=FHp)&Sr6$NY!6
zLA^HYvSCmj3pYM-^8R5Y;8(o);d6OR_u}tBJT=}32rPDPsWs8+ro!%`qDlgq<S3j9
z)Xo6L6BLDWE~V=kVr_Hew?Tf$=4MjfmC5@q6Y@#kJk4)VoM)%kXf4pHN>rVaZ3;Ki
ziCPU+?8Tb9e!x5_AP<rB#57;!fSF3w-nQ*so6^_+f`&dIRaZAY>?+Uu;@Lu)O2)j)
z&dRFG;^m{gllsr5@;pM-C_7Qg3jkQ#<q^$y`MG3ER*OCD4u=?D6+>f^f(Az1r&w{G
z^0kJEdlRjd_aud0q|{BB+h4RHI-o^GG6W3pKc4PLET&bbirW}wPK3oN)x363j^y7T
z3?$H!b6li?8uDjf0><j;)JIZIZy4{6vL^g~r(EPI#{^#2(b8v!TR(Kbe0n;9ks~>M
zCIkGR7BGa^vY|dFYohbirWj-;Q`5oDz0=EC0Ib8eNh5YPF~M7v^HleoCDCJJJb)o-
z;e&BFmLD&vnB%{0Vf<q&(Ig-?)Z*M4urFmAgh-2d#c6PWf9m=B7~XXd3;#YqvOpdq
z=*BP+x1b$<z}WmD&e8*=+NHAT0EnOG%Ktj`B{2A?iTL8{SbNUTx-{paT!FAyE;>$f
zQk^9%DIbG`fV&ikriQnTkAI9)ONc-gvoPT@4}8gdzJ&uu!+SkF{EzPj<b<IE%Cr_R
z3V32{#8FfvYhSFc13(!IM6|B_D9%d!$$@USO`6nckBsK3D7B1<xIwkmu|e8O3xFkP
zfq-GEvgg*MFFIzWHyBeLYY!SQkTvQDx2X*J+>M|>DTTJ+o~cO61j{Y<N}yp=c!NEs
zqWB1zPXOpBq>uRv02+!I+id$j?7;N?Ui;P09M303^mrqZsLBi@l5?u#am3(wVfK0F
zD2kOMSZ8@w?PdF?Rb>U)x;9-aM|lPY9!?DCuF~WWd5YYjl=^mzo}%2aCMXU(Bo2#_
zy_)tdaB?8a#l=-;?%S6q0RjCk0(1~~fB30BXM$gep{5hPe}@1-5$2nz&1lC83@|8w
z2HWudz>?)+z#+W6Ek(?tjf0tOLjSxF__Em3E(4JzCq0y`5iWh$c=pURBd!1QJC|7P
zV3_JTvhU1SJWpn$l?n!*T)<ekfdV<BqJgn}Z;A6a%E5vIfyL(=#o<ed`0G=P0k`<l
zJ%GB^w2i-h^3thGVDst;loqnTB1muDGI;BG;?kNGpoeV!;Zb9dy|OY{9G^65Xpp-u
zEN$^&tsgU^{vsTUiN^)<5gc@qXt^p{ZX0Lz?)=SO5DL+slpY|50dU~i82{39gw-O0
zBGYq}iHFu7mX_}1<i*#6ik$o?Yp0uU)gZ}D@qLryqY&PZDqA!rp6)*0KUoaWSf~&F
zjA=sIi(X;3A*q}8*2aIJBwG9z_7?wdLujx9;nadEKME|Bz}Ir!9#}4coV+il0Ek8n
z&<6W79?%!>4v;l=1dTu=d4C%KZVNV%=U15AW&jMi$41vCU&;ni;38EzVJjI8TkDsB
ze+p<5#HUb-JYlZUe_seoPtl0HJkYAL#1;qv24wnX)H!6rWF8%mO$XpF=pNuDJjVb`
z`1U+d`lT1g=i4%%EztY%{_D!+XQ|gu{^bFIMPcbvR~}|y4B22#4G$gK&4({?u)X+z
zkrTK8Qbl_&ZJ9aGLLo?=A%|Lw3F8*OcEwS(bAz@r!1r<s1el}MUgtAnDI3o*HD8Xu
zoBlh2r>2?x>*cfDLBK$LTjmQ8_b-{nmNHhXCad7Zq$DzTA{Z|C?X%d~ljM~bcu-A$
zDRj`pCrLi;?5HL2wHAZz+b3YIX*9w3k6ySz!R*Zn@7l7}791Vwe}T;zUpbNQqD2Ua
zU0AtvGm=hTkkylgK#Y?6xhB{QFH{;tqAK;afUB!Vgl_19!y;2sN-OnDO;3+SKkID<
z7<>Ss2ZNLXleBQo+BqDARS-p7A8T?oFUp)4g?kUm*e_{aLk62esTEcl#ii~NmbOtz
zk6t9BeyeE5KrXCyo~;_k2am`ou0+CV{!eyh88^478EvyRi5!vC=2$Md->~hP&t_ip
z{|CSX)JWR->NQ&4b1wgN<INARdZQYmI#g#xoO&{XX4mVP9Gv8~mCVBWkP)mS3pv#2
zoW_<uXqzES{t+3(@zL3$#ihPJDs}46xVxd(Q_|3sg^%|$=FVGdNhlp+$qL-p{x=*N
zuKJv2YeyoQrxyw6a?UD*2eX=d&9{5AO?eRawG_c?2Su>y3bw0n<fKLL-cAU4I}PsI
zBo23QY^@!|q7Nt=C1bG?`W@D|zX}=@Bak66BJ^OMvLMgA;+hc*0^(w6R<LUS3KmLU
zI#Z5^dV-HI#wN=v^9v_<8@1*8>atO6X7^8+3xhWEP>W>wF_*!THylR@jm`FN8LKPy
zq?Ae2$Hv8c`t}0XN?B7<zilN1d3FB*hrjY@J@LLiB)@ikf!#fMQ_C6R2?^oc-i$T2
zFeO5j1}dEmrbO{G<QR-$D%!i3Sv{sA)Eth^L~>9C_s*E5l1&f@c=if3y>5$G9T%2Y
zpUcFRi&#?+DafwxSI`nmWcNtVJ7z*vW!f{}D3q6z8?$-9D;Y>dfG&4X-o0(sd^mcw
z$-2b(I=|nBf#k~wvjywtO4pBL5l3U;;1Pzqzr)U_Z633$E+uWEQU?R*b4wZ~Ss(<R
z!tIOpZ(eJ2tktUtD}9WEt#6|n`gup!b$w`J7{zKncs_D|QB1{Tx;;WBB=lpfBOqrK
zWAXTGkK5f;G(;LG4+MV_tIk<`gm}sgo|AH()Th~y;bf?r*UwJ<;k{OMLL{$xQR4j!
zv1V1H+mV&?-uHtdk~N(SvhUQ>^gz>7@Jk4()dEFyqh`~pDVvNUKjeZsbA6Fut20<T
zb*({%(g;qDvw&F0M2KQ`&^*v=R5N|AUsk^~Kcj23l4vzc-iOz>7rzk2D<CzJ`~~Zt
z%TdtJ0Pmv6{Ksr3Zof^DaL5lx(EGTpR^^}fQTbc7D2t@Zuc)wEjrUXyXWL=fQcxGu
z^-%UiuIsO>na?;XFd780-X?#v*GOZto)k?~eH6p6(8`4RjHg#M_F!KNO`X_+{bj|6
z9g2T%2%FTrU;l9Q;SmKVKeaLeUiN)V3L|lXfu-Ynb_=q&P=;@VD@$*%rpvveGSi#l
z;G^T1E~ibU#x`>#=x_=?8V7>EI9mMar$)fO6vF*WU-{SjW!@dm*y^|EE|pbw!#~aS
zvu8g`npnk5mEX2nlrScceGoLSXNqxu=*JANSqdG-4~-txolyT(x+qvdZ)Gy0XKm(m
z3kSm|Hd6SAX3C<JH-rSqUYvCqtceA4AI)HTh}fY{_GYtI+IjXKFP|x=Cn_glOOGMM
zkpdCXf>^5IcUWJ?QB!M#?VTQ++d-$z_}Lh#ex7jtolSaOn7>m$MCnK|P+j!AElKmX
zpwF(v-ef7*a6RjQ30Aye=<*{CSP?DVZ4p?xe?Md;nUlWRJgp)SLmekM<!TfiKlCn2
zhc)ZU`KnTllhKar9kvu^;~yXtN&#>_KD!ZJHP8OI1^E>zdpqnNE204mwZ8OF_kx^0
z>c#oICRc{Ahh?F0ZFF=v4~#(wL&Gxk+v>4~a%;ohA7Q)VW!t$TNZ@i3>c|K44&SN{
zSO@F41uOmQU3*|F!(z8-ObTqPevD}(no+TQQefnSC?#TrI8U!dCgWuEL_*dP(Wqv$
za+R0q-Z~;9DfcRMISL}yDRsXL9Qnw`pd55T8SS`Qbn9ru*hNAmzZQU1yxl9xZ6JY_
zr9o;{D3zR-!7tpq)3QRJM_+rH%tpXp=^A$8QQ?j^kj&*zV)>~(abJFSouybG)s7;9
zbAfieJwBWJQ~R#as$eiqlvsu%HWK^g@rc|!-UCXC?Aa{FU=la4ow!D?qAz%TaNb3h
zM?_c7SeR~<v8j2Xxn@_zI@m=;yCsUa5MtpcIryJm1P?>no35khZulLS9u@bZ5w)R9
zJnyg{z2mbSG{@<N5Ve!f+>`rsXvyMT&#yHAY=yFK&i%(@(SZEclD1!IBm%kw+&&V=
zwBSRq1&g!}t`O_QD6~zQ=4n~<81>RV+Yp-jjuZ%^KP$XVVwL%s0d>qo<A_32D_+6e
zo~)yZ=8pQUxSGjTV8#2wX{0VfjkTD`SR%%0cV3s|+^TjEI;cNILLYz=&6S0qy?*KW
zc_LVrdC3kXj7|<pDu_~=#}l;o?itLMmB*sl*8dz7Idb|%JZaATdq`XjjX+4l=%a-}
zFlPB}))bSpo@1;rj!pr8QCXcgno9L`s`Jfmz?abtbX)T7feS$^myvYx^ZgWVqEem{
zp;2Wkx2wXf5fS^jB6L4tGAkHbb`Q4ul?k{^@{CHh)$B{}zAb66EA@!|z!l@fvtUU`
z&c`Xc_t9?giOpK+yEmn2rBQ`z5jBfS2a(R$L(s<^XC%Wu1!PVU>b+M!eo6}>t{qkx
zW3X2!SK%?#1hX!=k;xuTNqx|o1&CSZZ|V)Pe_=ru)fr~*u{mYC^`Ha`x_qh5()nnC
zh7g7k%&lqvJw7<dPd=nos+VF0^v(~ROSX?opSgMN3R`aMG^9Pa={A3>{#5Z3OQIw|
z7ua%14VFnGH0E0Mh-v0*fs2l%Mhjq=XXy9L`Y@!O9AOd6e3odiL4Dx@b2YMf7&?~M
z4M9oS?Ovr-yxwdEVa4Xb2dQXZ3qqH8%-;z##y=RZHIL{d<<%Nq@`r%tiS}E?uC2rD
z3}7>VW3DllZPgCyCo~b0D5$s|`E}+srxKhSo2RO^QOIeD{WqD4{>tcX2SKG_`vSIp
z3*@O^(5h?i{4@^h6}m!TK1NP=LECoNsO!hOLQSh6_(rYo<oF}vo^k0XbKPvx-&syr
zs=OwI(YoO=AxhK%zDO#?$A|0aQyruf3IPVBl<0!#8HC$;0YkE5Ik&<E`?yV8^xs?S
z!>M~O6gOmCxvkb{daWdAIKEhao}V=Ls#fv}h;kA)saFw1S-F~b=aRsTDN=9kDhfh+
zb238XRb3Jq;~j4z^3(NX^=BU8tSX64*26GoOdZN14h}q<imaf%X;^wsg<srx;atpi
z8&iHxJB3W~@#OB6T_hZysHr+Fo_2<xV)hakzWzzS60%I$5tsDr8C|{KIEBh~&3Edp
zJqh#0o}W}1oW*u-%Ah(0RmeByA9o+{cKi5QgPelpkI-Yc>NcAeH(5`#PU&1uLqkj_
z=>trq#Uu`)VF)z1&pqA_*nKBn8uajC-eGdIyK+I_z`N&f2}~>ODT$77XRN#`U<S=j
zao>m9Wa+m$y<lHZk!12*yo!jK2yu#7kKISP=~XyWThck%)I*&aFu7y9B-2OmIYXpy
zos~Dt_54pq3k>X)k~3txE)VHb`2_sn^FZyZDf8C$%_?io=r{E)7#km?vLuz!@;L8S
zn{R762WiEu6YA`QjU0f=ptKI%?I5!$%;+Bz3!OSFRESibN7tpFbGcT0bHCVk3C~L5
zv`xZ9R?zW#Jd!)g)t}`q&(=2)b-s#F-&e5;*~L_Y7A}pt`0k*YS0{!ZvoacND!VOC
z!|8!(bT}@^OK><Vcuhknc4$$at~6gIT&m+lpjsXPUPabhyk8ZFrhi9iu@zCHi5})$
zt;Uej9<CBexSH%XafX+>b^h3G_vmVo-{<V6qytOY6O(H`+Hv|xr_sIc<m=~8?cjAa
zJ*bGm9_#4g@q~f}Wk+>RVY6RKzopP~wQ0E(U5Kt)G@qSFQf$UJ>u<&usAL^xn5rS{
z-Q{*e)g9ESRmxNKIP7!st`0tI9-=2}eu!8_RwxPr$)5WmP}P(bbUHK9C^|V7jr#a8
z>Y6#9jQ9ozk-m#J5bViT&kT|yVyhbc`VTZ4-90hk1$G_xf-<Xb!Nso8_j}T73&+NB
zHnh{HoIlM<d~r)&xKM+mR_d)sFr`zOqaPv`sE@W+vFgU9>(UNBGYDpQgbb^^LPbv&
zEZb2yqBA<HB3xYFu9|9hb&_7katvyiX^56HL^e~tzDmUa`7_CYk8ld6wS#l2`3mF(
z(0TpJ3w1H;21$u`*9gI{-dti;r;hJ6X{Sx%fqBr`mXnVfw8c--j$7NqWZj#SQRPEQ
z!pWs0x2n0U<LI)rf`TH8{jvh&jq)V*FIU7!47c<1enk|`s*RJt|68qtm1)Gx&9Kuy
zqAB;ElrRcjcVS%uNt?A~LHXxL6J#999q1!c=zG|RIoqGrrK!WfMGft3i=moiq6*%m
zokl%eA?X6OmLqzV!DL06zvs39YeqTTim~-@VHmOt5j^XxA64N?UZPD_&bZvd==xxB
z)f(|DI!SoKDj=(|+dO!sMq4~>Hrakj;;vP$x9X598`W$6L~apkxQB*LJv}rcF&I+)
znn!fn%$s>kqU7A(g&wd}rb{S{ej83K<%XoKRhIoWw?`{PBM)J{wK1SJvbjwLSN$cr
zI9`>&%=}K!DTb-oa_K<7VBH6Mv$iQ!H@FR(IkYm-)IN!oaW3^Z`bb%wpYkYc@6>X9
z>WT(q(5(}fgUxZ!-tVTZ<(;Dm>u1QYm(2hoC=p<sSWftV*j+rP;G$L7a6b}U*bfAJ
zadqo-S^AFmFzeJ}(9u%Th21aeFlozc=QgUz{DrfLWd?Img6lc$cq-bFR1b*`TQ-s+
z8l=VF;R-98DscIzXXU^iS!3-D42(^86l|s|QY8wmm_#4Agp6fKHAwjFhpWjQ8`!Is
zh%Y!RVhqJ58Z~`V;0PHMQ|uG$v69^~R)cOPv#f?d0k0%kEt|(e?87vJmE5Ewsn3_V
zuXLW;iEkD3&_KCLw>>KMO;|iOzdA&n2-@8+>ftQKrmXL~anZ~lUm9A<K{kN!KgHfC
z?tNQBM<H2temL`<@NjzLR<F7nX7AT>kQ4mbJkJ*EiL`a!#2I;58>g=bS#ZqK^rx&1
zP69HBHTK;-7ZykCl+z`V?_})(ARAo#%BgyF94eoN>*P%A6$+A|Mu?s~<?FaLc$BCx
z(+9r|xPlqeizJQ$ld)_^SutF+zGP1(h>OSE?+s~}7%s{5J!inwEsWf|vOoADK0*mt
zgG(Dm$%639`~yIZP5D~(J!&za^44E}44e8p5i#k75^(^fjYPbX6$xGa7b(1~x(`!o
zmL^+}*85t0tL?{zY$4PYq`?w7pMpgT$=z;UxEsGI>S$e&AT6olt*Khnx{XEIxBw+$
zQHW6?s{fvSxglN8z=qofgAlAuQgBF6y2X-}C*=`2!O36;c&&zg3Anh2Ue7mCl+LSR
ziw_8tDS_wjF_|d_?DCx$x^jEZzo`qW>!*bqZYq`T4V?6%Zm>+u;l2@pfY&G8aR>Jk
zltZn*mD;mUzzcP|w95G~bODEbmUs(%ml|DAQ(M3K4re?w?Pt`(=?%%ONitpqG_UQv
z^*YML$GEl`3T^}a;jpjR-UFQ`tSadj5|h@UxS+9X&PtAA+QBv{Yd_?OhF;}6Ng^X2
z@uSlwi%qGssSXUqam7D8DB@Pud2vfiLEdo}?q6@)Fry!ck<X~afV*yu@czjj5rz?m
z8xKdK2wyNee1tkMlsRX6s|Or79`a_giGsk&GHI@0tfXB`cLj+lalKOchX-bwY&vD~
zA{&+T<S3(qf(FS0AB8IWgN8WP^GYoAx>_1^{omxlf=P_lHHsG%T`Y=7CZj3n)~jrd
z-05U&F}@4vVjctZ2+X1P2LUz2OcqGFg?nX#%vU+pca<^y>11-BTxNb~MPt!$t5UP|
z7Fkd_t?`ic%(@YePinh&_BPsTdEJ`(@PNpb<b|&-9BvJ8%2gajo<8c6H8Nrf#BTi~
zpk#(Yo3*aYk%j6cVQ0ZOQxIpf0W<~CbwBM7Q3~VCV~UE-SOPMq<i)?Iyvx4!vT%_?
z-zHBI%QypVn~@gmDgIU)XdAUDY|=DL0X8R_!~*gQ!elS5J6GBby`13!qYN^te#wZg
zkW3uxU1AJ<YM(<RJIy{fA0}>fyudZyls{P<UkuOVqK-EWX(0A<)yn7dwJ=IE(!Q2B
ziZ_5hKb{&(c6!4uH$Vw)Z%rp)Re3!RX2=@ok7i8^-yxY=tcV6jsOPA-2KIi+##?l8
zYCi5b4X9!_S6Y^J#G|6fxw!Vpjg87<v^zbG-&U=rO)JmVbFy2)Oe$mkId@Qy1Ct}w
zE05ZtKYv9Ze5Nk5ux!2byB!8EynXagyth8?T;WUVRwiw{Z$OVn0r_wlZpi3V^d$Tg
zs}oZ)%5f1iE|O1(LayTC4tAGJCjSHX2M?f3njK!v4@lUT4(GgcqoS`Z-#U3rD#V)t
zV}isQvKh}fH}D#!Qk>@%xd{FWIGDuhv-wP`opZAX)l9FSp%UD*k0uN_9J1zqkCFhk
z?N+iEiwXLR5nmAadhiCfp9aIxrIo^oORJHl6q_*VLDK%nH~z@X%abc09A3&mmP7*p
zeL`iTs}%0-h{SGnneWuMkjDr9kfq_)j2!u_>csvYNjR~rD~(GK1tkp=>=eGo<;wYl
z|Dl)QA3q@nzlWeWU+U*2q-g+IRw*fn#TppFq}hm>mUc#706zF3=DR2R5WuIfdgB*3
zM&73Z1jmXH)J5korSW^zQp_nGk-omF9L*ag1>3!&v6NfIZM8tDt(y5$`r-)9Z+n8X
z4OfFO<Ai>F_h&g%x&B8zYeISY^p|bIl;<(IMt-!(>?Q@6^#H72B|CvoD}zehK(e|x
zkIk+&*i&<Ocgl+L4pFjIqQFv(9>nXs+~eU>quQL7WoXpFP@zVC^!<L?-Z<Q=lr5a}
zYOeW1V-k6!i2@!g8?T>aQR5@KWi+r_XzAxos(UH@Rwdu|(>?#)5H&pk3>Tu6>nebn
zFuBlWc+t!xQ{O`<d+UJ~*kxyWzm4{GPAFt#GK&4RGsiV$uOs#6ZnwnL3%N~Jvc^(i
z2WSEslGco8`o905>=nZkS~cr7J)nN9_9kvOe(Z3RGk$D%Q%iHMo9^8v?b_5lKK?o@
z9;I$c-uFLL4lwXn3yVvs+q8evrezpVe>oIB8df!pEioS*9Y<NJ1-mgq#;Pi&hqsdl
zR?3KbYYqWk6&gC}MB8FjU{mh{bwQkwtO9alwEZ|IFQX>XL&s8x*&H4O#H9AhxS|=5
zR7+?P1uGgFki*cEKdXIcE4(4zlCX(FMRTaNUU0}2_Vj?OznP4DP!TK@Y2Jvx&g-bH
zaR^+iDf&)qKq4_<W?N99(%4vI-wY&2)!8(x4wwU+CV{glZ|Vl1%u#QZL!*(3HDrDb
z@x4z>iMgDov_sq8?Lqi0tmf7<bQplMzc}_@GsjG-{wVN+!l_GD;lhV5KXEB5E8O01
zPDOh=y2(VB$14jQSH#H{l}?shO~~h6pP7}!R@{#D;DE7VItiFwgWZDLxSt=S%e|f8
zO;`&y)&u-m2X9%68eGb=e$>|9tj3u?4l#^Hz~ZI`mvz{F@N3)2d~1)JCCP;;Q0f+;
zw+8!XBoqYfTPO%s<M-pVw7%!?`(YiJG=vM@bIX~Oe4`3EQLb;J<6z2OIB(pgELZ;X
zY*uZmq}|x@J!Q18{`>sWn+oJE<&!%5F<xr%)lpRxA;QNVD~Tn|df}kQ7ywnKQQ`1H
zT5~~}Ub7Jz7NMctvwu^l93;|jA%hzb<*VesxA0>qfmO(kfyRIPeHB?8BXz>&C%gk=
zO{A^<cfwdO@c9RrlD1#k{V$S29LoC6y^MSG#SNs5twB}mBg<hf;p2OBQ#josoh4UM
zHqE%xvmNlrWT>;df+Xb@oVcx*P|th3@AKv^!4xfrHr;(EDt*cBLZWQRvnIa1dKkk(
zUU`^=oZD%7tPyD}SIP{=iV_;_ay$$mYwg%oi)g^<P&o|@W?GaA9mR=IFOQ9Bs2bs+
zWX}-#w!aDoDK1LYC~<1it9larlj=kHTnbh8ygs{Qazd7!CAUX&S$I7Yv!T8shfZ=E
z$JUMuXQ-38H%)_(jS0KD^`g8~wPN4;QLpgc)rB+Hu;lm&N&b*hm<591PtvTje1Ksl
zH4n@01=7c|4F{c3Y|==vF<?PolzG@Zqf$E&9J}_R%jrh)tzNJy0M20Ms2)13q?7Ne
zlze5r>p6P;#>(bbYY&YSI<Y?E`@M0k@E}Mj*{nI0!E35|Mh~LcPS2*lnDf_UppWW|
z`A-A+A0XNm(U9vBzGLe+0ZX;ad%dN{IDYA1Q-!j8mX3rioH|!MnP<U!OKVTD^w|BV
zd||)0zN^)avKb_SzNrtqrUt5cD}M{CC@OYH=Y*QxUY=rM!2jgYEl-@8O!57@0x)z|
zT8DIJ6ykIAf)+G=W6XM?>bV2k3Bf}&661|SkET}WGm^zveA+eVh=KiJx6MdXg<sTm
z?Sv{^24Qr#tQtEM?i&ZLH<vi*x&Cf4%bFfD*i)?3Bb{z&l+C|F7h}8o+V6e(w#y|T
z$I*jEqseM7{LKs9WM;2A`0}>~WT@T|wYH7tsi;{EoC05Ip|?2H_hP&K&APv-v<M*+
zc_6<~*DsBB{BA>vql>f1?(Bnw0Bg$HmCz46P7}Zkg!^sOrBKciPZAcEoFpT;R!=`i
zcr~2l(eCWqf(4D%C*9uQTEy=zH(!%nGi`9o=uyDT7s%e?lDAPf+DOGu_S~B`Hl?~W
zrbj6s__7x5`RN2RxR>9uclAuLJFba81QUHs;s5R14Iy(KE69g?pWKGE<AD{s2d44>
zG6c?UXL5h|aImUg{T5tBa|G{i`nLV{RR-R`gPLF6pG10+xMZu+-g<QD{I#va$xm*q
zh8+lI7@y=)+mb%r()nos2%Id5I`>~{lrrI(*|?Myrz%*|gVA%^$wGJP@%S25(R?>h
zzbno#Rg3G!+ITTyj|5|GBu<OtdSH{!o$+0`_oBnNt|-k*L$%z?{iMI%e5zJq64f{0
zd`nY9xVQ|dK6`K>sywpsd{$_JP|e{TL#{#>K6bxuq_d9E{cjk&yo>WG(Ymn0-b90H
zzfG}hSBp;-#*a#JJV@;7RDA=q7#mJa4@ZT@YRZM~nnOzYV^cD6j^a222gRGtjg1)*
z3!T;HcC}f9QKebSUtAUn@DjR>>Z71j%wh6=RZ)0sJlGq%p@GLJEIeLbcz~R#O)&$%
zh78_XY}VGql9l=GWOfKNq`S74_T<k`L3rp%p?TZMw7gZP8a3<fyK%=|mJp{G%73$2
zlT7MgsrDAe%{bMhmivAU=4OnWNtUtLqo2@&d#a4__v6D2PPnwdFT#y|h262nE{O#N
zN4mY5D1S|Bn>F3M|A})SU+vwC!5PkPzwk`J5IwKo4gh0G$xU5T{qMvxW|HvQ8D5pT
zBFC(Vn!+s%kGG1=IDeOAiYNp|$=i0oC`Sjx%!eHIDI~;v)7G`E@&fE+&Y74lw$V1+
zb<5;({WYsZ=MNuzmH6$H<0wrP7Q5Xp4>@DbiG#Xk#z#A8uQBC6Z`~U?eAp8b_z`9q
zq$h6ruDQmidKKpWmmbrw3uDRc>J$@RdbE8^vQquT6fm*UY#5iywn^ib!07PV#7*)`
z{zC$qt&`etujNOi7LG6LD*@P>teVn?#<~nX=rh*qk)^y|m(uw*uMX5^nz_q5>wl9n
zAN^uQL2FW2`mIpjB@6Fk?&(PKm35FICXEU%npJXgVCUzXysMNV#xKaltUlrW%S-is
zjZ%%h{x=3^DuX+B5F5pJYs=NX?Empx7Ec6J)kQ<N=WP000MFqlX8}Tdww<$p4(vjM
zR(Ny=!0x~ofbvB>-@Epb@6mt=OfN_upu}a02A45k9K|B<zkKT!l7=w)#ChTKX(6~Y
zKJ{c3@a0p;v|WdYQnfiFQZ2EC^s$cpiJEgFR98&Zt|GbSNd)x++EY@a@7_e5Aj$en
zI+LTrq!yCT>viX!0!qsa)Y8KIU@Ktcx!>9H4#|>cYKcc999vsl7hwDGY$G6`pQb}u
z%Q;f^HeVAPg?5}UaaL1zScLLHUSuV(zJJvKzU>E4KPE|~RmMc{j#v$F4N1G&npksD
z7wHKFoj!4wKrc4P+d`YLK2fh)cEJ)&!ygEI%q>4Vj`>v7Vpug4K7hCUegPeSJdJVi
zy~W~xVKliTce7W`79jLe{@}}9!nS$^1xEf#=E1$y3NK(rp;;#Kem%E7sxPtgRI9IX
zbD7{ye#u1Uke?uv6yR4WC443GoHFI+gI`?MMaVhjgkL!RnMQ@d;6(X2=zr9BQ)JNz
zu$ut(K?#TF&}H&*NtFz|j7=N0KpEP%=awfBasZ}3&yHEpmaok7-&zn5k5dthO|x20
zX9<koRs#<U^&WKZZS<&T1mh;ngfy1AIQWoioBVJDpKoDfM=K6M3<tzr2@I>+^CDI{
z#9tnf_1Z)>ud)UNYCv4&x>HR^6xxO^)bay@00uB#7jIlfDPlq9N#oeD6=$gr)l#1Z
zqK5q)2=ZJe1gLP9oV4dJyfjy-mhXIq_nxxG2ixavn!|*^a}PnSm#;c(m5S-QKr=@0
z*LqhKv*>Xkj<Yg*NyAaLLi<aBU!)E@0o;qGHy^92##B|`$^|%aW{_D(Yn<G>Y2xU8
zIa9p*exG<We&q~2lgeyq^w<-Lu|P;mT!z(*TSXgJk&+yKv7yGe`5Nr>k88(A*nc7&
zU6T4fypWEDk+r-+Pj%fG2JXVo&+du;rEXFQq%MoFZkz<jekT)ytnY3Nt16h*BCF=h
z7AL4s;6`zhQR_&iema6{l4!UE`iObDwLYz~jfF+<`bVBBtL^uV`Fo1>k3|~-GtEG{
zxppQD4@M=Rg=Mig*N=rEG1_BNn?UX{!6wK09{@+|4XAcB1~|k^OCSG31(+DqVNQWy
zd5=LtI^+A^R75|zk5n`&l&yeuwt#{$p(ba#GJ7$19V%|a+h5&ggL`i~LA`@H>oI>M
zNs(uU2(USmyBPS$NEw&Im9S+Z4UDrR*n;iG&us@$`}}OmT9|ea?8(W_rrd6^PzfZZ
z3a4Cf44twbbK*-V3KE%5%pqwXwk+8A_@3n(z=`rLo0C{6Bx|UUX%Yfd)yR)m2jQ=5
zmpy@`n3IPW@ue&O6%rJBp)bq3#v<jA{T1^Tu5=m{*tf8+4KV7}k6@_SC+m}Q*Eouf
z%}9Z3r*%WBxJ#XrQhgT}QWMpoN@BcED#y#iwBMMlx!u$1LMwBITCp`FWD-~rBU3?f
zbpnx1aX(WDaJ;MlL+6#!y7xpvvS2h%pFY&}y6Q9EAo~wc34{1GtJ({f#QS9uf?q7v
zR+mVhnu;jl-nlRd-X{VeCK;`EYnS{O2fjN7$}0kVIN?a@3OlEfc%pOBK^fdFL^GW0
z3y1cITK_y83YHa72#o}mHZUHk4;zrv9xGA^B@8Gm{(H;3qPWF%jKxA6c-<q^S^nT)
zal^i`$)y$9rcyt8^qA0~rUKs3N;Pnc<G4sVY!g;E=wN(=A7FYtBv|1NDIfMtc5wa9
zAS0_+ckr>%>R|t})b5{btJyM*{#n33SUkgN?WHeQ!9QuI3-Qf=w?Bm$8zFzAg7|a*
z2d_YC5Gv1+88@FG>P5B&aMB#q9mz(q>!NLI-OMfrWDv&}7!&uVUt$C?QfB}+DLyn=
zKn8JT5{F#~0u+q|V5&whE@*s8UuG12B{SARkaj!?p;4!eUeB7+cQ&tAC^Bgc(9kg>
z;&V|~pa8WJ09$`Na$)!1v2;o*or3nsA=toOZ1`Pp0`?C(?4MaFd@Tu}zpi>#t0Vuc
zHy>=lga#jfm}+b4+l7kvsdrAw>41}45fA|X|HYpgy;j?#EZtt3FF|06n)TguaE@;j
zZnGzdIMOM&6*>*3l61$C!ZtlGjHH}cFBS(e{UZ&_H=Yj&-Lw=LmAB#|94Z(BGF+sp
zd-{=Ap9<4BQ0Uv7sL>JKDT_DMR1U2*`Z|P#rB!rH$q-sFcw6Yfj1%S@sU2e1A4_=k
zsJG+~*9QVTm?DW@SS7$ip*_*`z3^zfA)YsepKp0RTd3-X+7PYSkzQ74-~NfA{_7yI
z;4SoQ%U2xl=dI)rF!VsX@-epy3kAmka$a5eD4*mOTx9bu^_bsqPqg`6Vj21XewoA=
z#KP!^C}V@D79U$HtKlb0Fi##5d<{dcdAC4&oU7&C&uLdZG7fMX++Pkb78^NJ<q{Ie
zOz0@@cTCheDx=vuO=?Xw`iQltr?6Nfzw_`Qvd93${>6sr=}GOw&y?u%?a)V41EitP
zM2{zyEalTobgvY;?o0POjSxRNRCx<~s_P2v_Gh}B-A4-IWFUd^&eNYq2jf|WeIwG}
z1)TD-jU2o}jn)sO{`A&lpQV504Z&`t#fmCdcoS|LE4t>Gw4s~iLD;|MV4@DYx~pkO
zG0Ay4Aqffrw2XHn$xL`#pb|2vD!l=4p6t2H*Hs`pMILoBWoeOXF6iZ}bEr$I4}{oU
z3VjI}$YjBVO;7sZDatcxJr}Gv+|>}h_px}xx3_1;3DrX5j^%?(h{j)XRLd~H26EY+
zULAZ^G9bhuEwS6sC2)-LnWd)lP_8RkXUHLwq4`_D!2rhh0Sr@RZbv=%x~90IlRqW0
zaDVrTu-C&n#U~=|vwTzO_qD~QA+aN%NVU1XEi^UF>YRk{^;~5?Z$iefl17-eNf!$;
z+cUq;Wnrm1_zr~6$B`b;>g7dVx|&~yneA7DYA8eXj%Y^J(Upnq;GHBwK~TV|N?>|$
zr;EWv71f!ujk^A2NhpxT8@Nkr?nuPX&kfiNaFzvNFpuwae?0#UFc>ig?(}`_GbQqm
zGA5bgC+gxEa;d*3V*#(_$&*^r5KWC2kXu!|(8vzmD3+BpHQJQJ(ZFk0j7v{UjAf!s
zP!Wg9SA80*PV<!#OGW;3I_uAp-|%rqpb(hHU@CL$JKxoXjo4MW>)vruh*4W;)OwyO
zHeesWKCy!oXLj$$avj`sGB2B~sPeNyvC#Q(g&PF;FM#*&Gf_E@n5R9&aF~7<p%P_c
zG?yoKWkdEd_X_yNVSK=U8FG9H{P&C}fWPnCqTxkI(kN+FT6<S!+b}5-6NOOUrPsl%
z5p67Q3HIs{!B8h4Rq84^^)B7o!C})BUcmo!sQ~JRYr?`B25Kh-7g8xd3oAr+vX#1_
zcFQ1n3)cULBsh%~!v6@wMQdA<42eZvk^jh?HXC{|bd?0Uv?F5;saG{>%N`z_k0&j*
zwph-zT}`syOeYd!NvUro02K6r7=JHl=rSp_p{=oC!`EFb;q$!k1{UYO>AA(y$e+_b
zfTJ<OK|n{Y!<lAZShV>_-4DF5`a%r@it^}tJ{X7wIpTwu11A;{=N(Tl!SAnMO}S>A
z3iuT49auOVPZc7G3eK9ot81B`^E!NM_5&tX-q#;!atsOXLNa($6VP&+zzTZna+fB<
zjN${Ro&vVH*1`j_yvo>mEvr{@np{q_?1^|`GG*$xpjPX>OeFR_n#E!5xI(9&rOT9x
z`8-s?#<?1BT%IO^Wv|MiBQem_>RwX`j?BOwzlEnzs$4|B=f(P~YY5v<$<aCKkB4Vl
z;weFhb&;a-A}!Q5>4xc7*We)kZV>WLn??vY%T&u3DlykwOHlgF#78G<5Aq<2d_R?D
zabUy(FP%o|tg2SLc+<0SP%I7V9wcHdV<&G$mz=IM_3hN>CmypF!kY>QwsAO4c1PWi
zbjP|<Yk%x>yQgD+q`t^Z!gwY=`evV3R69{$5!(dW0OO}KtV(@xwfJv=Q=d~a>txjX
z6qql{z6i@a2nE-<{9L}SOWS>Y_@6U9ehC4TZY>v`ZQAE(2}bW3_qI!>LZaXY4ZVYn
ziXuIAT)2cido-Q_Q}_24Ekp$UtLSt&dD*e)KI$mrNrVL{CrZu3EKq+bVXa?nQ;0K<
zgA?f&3c5fo**nAfk)B*qGZ3Jtx8Nfg9&GEqMT^?a2|``M6_i=b-n^_gx{}+#9m*)N
z09|b)rCgOLvh}N79si`!Coz!yp<tsQ_;7$HFA;w4Auv#~1BT}khDr0tWv1~EqcNC)
z@m!Yy84zDI$ReB1enwZzb2kJKdw(P8x7Kj?KK~<&Sk-Q9G+|90hpjgwCEg#)d2zu8
zfACldHr{-zXegRFGefZsmvHio+{BYvw8-Q5%=dE&42`2Elq@ickLmkN2H7_>soqTB
z>?CJ5N_oINvv7KDUcv*X0e!Q_E8gwspk3nUV`4FTI~=`Xk@OIpJHqS<(`v+fSgy8Z
zZqpbhT8dp~0L!5o`wQ5ZFCxo^#Kjx_y*~@4DieQKmfU+{2S4gKY({;V#-{mC%n^TL
zT!n|Aet$L`PZ0dj`hA}}h?|&#JEj6=!nOn3U*j?#t=3CGw%^wQiGX-&T4fSIoKJgw
zx3dsb%htppyImhy?J9m8%mm`XwUtJPqV3_cRr79haU+vtRB%i<Ov&S^W`PiD>A6V)
z#(#FPKilR7V`I-%p&M<m9?}Ib+*7t69(oP)1Z>f|_?lKEa@*fi>rs;~x{&At1E)k!
zV*^s4L1odD`C0c_6K=&DDEct0?9Jk;$=!QjkaOYx=4AweEyqY~nL@$8{?yp8oWLZv
zg%)#5{<XeQL2W7dUHW+gxiZQ-TmvpI4k$2APvEQ%)!mOW5H8FZ{YQ>As*pH^`?8=H
zhplRDIgurV+cE$^N*HsVM?Gr1#sYk^_)zLS@eQh?tEPDqTQuq-5F=eaQnnD_YYBpq
znk10<KYELQy8VSDW1Es^k<F(F>PMKH)mVO|N~ty@R9x<LB?~`enR(^UVj~2$NnIbk
z-`mGARNG-5+iy~PRvOJt)KJ4>`KH1K%4;;9q!*j3+l2K}&8onKdddgp%>08GxvIls
zq<UO)3;1A5mRIuMVEg|wkpcW{IjuHxT5~NXOLyS=r$E0<m>hjMd+Tr4D5n|-2z}Ld
zw^GuR$BtErc#;`%NC*rIFy{Q~f>g!K|F6BTev7(!!<7<&rKFYyDUnvBOS%LJ=>|c%
zSsIq^mhMLBkPbn*yE~R{Semnb-`7{KbDclo>@`2_PoKHxiTj?J=NU4_&8W&WBNGW^
z!VZIvohBTD1^TuMIt;LCWGZ~2Pc?&PVOB0D8uJTIH-`*;`YQ1J;)4>8qHa3og7-*;
zw#JB77&%DXktg4MkYPnjw;qmDg}54AlpT8zPh*dYsmV&0jdlL+!qU7n+6oX>5@h4(
z>CaZgWaqQN8-zS%HJxux)B>-3#PeuJfDgoR@xXpc*%y5Gs>d^?E?qDsT&!lM{6!{P
z^2jDtt}I8A^{BPt0g_PdGN}{EDZaY$99F)<Va<AlEI4zrMJ&@pq~0IC2Ep7B1XDG|
zYc{ruek|_e<9tPf%{G1;X**H|OHDaL_S)v$+0jkGwgADD;tgk_rK1`x7!OEp*y0vQ
z@8Xr8R-@KJIMFC=IG};ujtcEu&ZKHX|L<f}h~gzmU2_~tpF-yNe}NqQUZ|Lo{)W?{
z$R@BLLQaxg9AZbZz~!lc!Oah6dvep6r8s9h034E!dk0GAy*TF-g1xLs5t0dOqHxpX
z<sb^A=@c*OYYZx9j;z?tPQA!WE8fShg<VP5Ft<3^&T#pjy{{sIx<TsUzx`GL^_{yE
z1vIOFrm9n>7?;S@N~O4k;Dm%uB^vAKSy0VUD~ROdqu_Q~-RHTN$;n@eS%l{T5n)$z
zr_pb3m1X;lGY}u#*cmxu45-B5hP>|cB4btt`Lad7Lb&C&8ZL*%>FXSQm2egAnna}`
zc70yilAxzjx>$)1Y0e>`UIFA=+Ud!}8R@yDn``PQzvfp^yooCRwPN?8=F@mk@h0DX
z)|je@>ob&|u1-q{WK*VYds=z7rO@pCO*BubYt09_b9M4k=B8E}v;UmeTj(YB2QRmP
zF>f}N|8|N6pToMN5Vu}<M(8HeCb?0<_MO(pOsBTl)fiG%w@<UFoxLCmugc7)zFbmU
z^P9ZR17v@jP3NWBM2Ay&>hdZ4U~sVMn^FghgzlzZ?YAPm$)_#3f@Lbr=5RGlbgYmE
z_K=_l1apScONZz>N&bxWm9@u0Iv)N{u#%du_)cpFZH(*U)T4M+b_1O~w?W=&p#Eiw
zj1b|Jp8Vo`IS2#aFd@k8x|-^<?5}1UWyd5?-Uq-NoamZ`ro$SoMAEX90r%=A3o|z_
z6Sly2Cr$B<pH``*-v^C;UEel@_nLPWx)55eGRDh`e-vyMm+Lm`)4kxX-FxUBHc5N;
zS9J!~0^%_PbzKIz>+kZZ9};?(2;8`M*93=G_31nr1I!2n<qRtorond)$TE2RIllWG
zZi_H&4k~XBRvQ>5ik+G_jl-mb3$DHIc5FGW{>Fa16^$vSF9sSPeQTpH;D_l5dv2t4
zpO*vyL?cMYS>i8i4r>|m*-DP5Ni*>(1n&g0zXfG&yghhN9dORck{Hp7*$hXtW`|N#
zvFALARoh-mU@l=m^TDLsZ0<&Mb%Zkr|3*yj5GtXhHlgc`vwodkiUS=+>x!hF&Go5C
zjUIWlK9bE`|2o9`(3~{NtQo^J9|K(kTF=CYvmqLcMMbgGAr{i3TcXC*fqzy6(?mPS
z%o%6JS5RWu#^BgJ!>x?MLNKKaOvRrU8a1A!?&?C*p<$^k>70A}ruOl+>rFD@V3_en
zG+)m3vi*|F5v;wa2lPH2)?oMk5bD8WaVghRf5_UfaB+tE>3Sgef%DWt^qB+I^G+q+
z%kZ|U%zpZ7-=hAv&<6sM#K<Rh0zQb6-v1jE^v`T)x#<Po=*Il}*ILArg@*nIIY2*%
zO`k_#X1h8tlyphBid8>(f78INHmR`@jynyRL1{(mW_GRK_wD+HKE(&nd2y5dRhaeg
z!J3^1h9HDI5D9{RSG?W<R9SwCP0EnRPYn7oZcBGFOY@QLlGWWsbfeUY${sA=hjX=+
zfx>}xfK>mi>j;n4!ibX2?ll4FmZ}>_m6RKY!{U43s7dHnqRU5q$U-ClF3oe*lyQH@
z_KLAd@zeuYh$+&th`MJ?FaFvO_+T7y*jxu9Fxrx{JwJ@ODOoi{iyUA$qhCb<8n85y
zzdlrOzrE9Y@2HG+`)M6izSpZf9ky^WH{-EuaGP1C9dtJeiu;g2j61=~UMT1!w<O@u
z&}w32<gI^Wbr)vNe~5qAw1;W9XN|QQ{k$082ZIh?duWDcQev;DU#ur$@Ly12&{Ckn
zv%5;bg}#^i2WM|Y1KGBRyb}W>4+5MmOg}rM<jnA8d)nTxyN$EELwlaQtseC^66_Yj
z??QN}`<%&QZI+Lluj=;*Bz068tnnfPle{rH?)Fn|2l*D3B<NkFzj6w!@Uv*dz8FeP
zGO!;M19-_Me>F|Ks$RWSUpZJ`VjN>)=0-t)qSz93i)qmTho)s%*)aDvpE+9bfsgoj
zXV5;cL)VI~Sv}>W2B_IRIXP-m0y5Fm7T#pOeAD7Wvn%M|iXF;7?RdDNnJ{#oY9}a+
zxMW^O@p!vb^iV)A`E6;5yApC@xYQ?x85s*;Jg!iKtfdTgE*Fw0wW#yi$(aU&FhJ?Y
zef5Wibc7Y{GOQ;U=bXcp9>{iwXj{uw6xJ*1JzQ^4a<0zxD<lt)O$HYhe<*SYAq&7;
z4SU0SA7?kZZMx^S1F;x?)}llj$_hR9x?Bz-WGkV#gvMmNOK6;SWBz7QX>cuDF-NhE
z>%fiBkeYk7V;3+=6|hHbv}~(1#9eM;7U1c}_X6%Y#XkeAPc4)KWo`d7O)Uif&%l2E
z(sPD+DvmtUQK696?#;N-N%e`{`&BL}ncyXL4&~MpwX)`&OHQ4*h8&1!;4QjF+?}+>
zCR_#SL3FWt0qg8mxM_=#hQR4lc@$S-hQPqKrS<oxTR+4fhtfRq6dUvAT4PM4r1Z9$
zcV64BO&`16JX;dn4#7oROCR=UQ+<5EZ|k?NPB=?wkR>dz7e!{WDywtLYd8f30Z#E4
zalz9~joZpUGFngOa-mVsV_<Nzj^72}>B6qo&!y}QDC^V3U4F<rJDhS=Ttl{L%<`Em
zYTO`_Z95sP)wSf_-kkn}0On~jjfC48F3t0`I=PB1J<1@375##7J$Iv3<zad#m5`7G
z$>`FRXXj?!J2Q^f1J!Pv-+;kj1J}_A<$xAEi7>+cjS(>s-f$gVX0lfv2=g^rOH0NT
zJwEMPz_v3nH;nN7Y<tH&lv<E{YC@@i#IdT<?#m{hDXGDH)h6`)%||$6y!12NZ(@h_
zt3*V8d_n;(W#K}@tsZTHj8!opJ%9%HK%_A=SUl5#i4kb3OYq6%$<yPB4;{l2l6sbR
z>8gozH&7RLyo1?h;#I@Q3<<Lvz0UJP4$oI(Cqc@BJ91<mi#J-uPVHY~9!Pfj^CA6#
z1U9zvtbQE|P<;H0{U2*&t!oaR(q`mtlVuTfy>e|)W9T5^E>rCx;xtOE5OfCBEs+*e
zZq7M}dL6&V>4pWJl731-hvV!BLvR~U(cF0qw4r%T^Q!SUGTnYqa?fsdhw@R`IoXaJ
z0p2ybXlm1ywDe&q?(2_s1~)IH$Uh;$8*we|N%+#qgFlzRzvxN|z~fgWJkroUJRm)d
zFmG>u@T&;Q;-Q~j=rX20%+)hDiQMOPeD~n@KJW)XBTl$bv?%UrH)vxbp1GBS26Gsn
zY7?u}t;7(GHR-ORbNoK}g!&TEfq5+f<VAtby5SPaF~>bAT{N$}S+Wj?a`pVB2B&s$
z(WCd*TYVsE(g^RQakM&)oh%`z<sEP|YXql)OPhJTr^G%l-Shx(k1D;}X~ReTF=d%>
zq_BFeps;aRsZ3#^Ii`q&k1xR9>$IK51<7uRr9VKi><93?ch#NwR_-%AK0UoI6F#F6
zt~&7Wy#rB7J(5O3e{=<*>1uM<Ma_5Sl74MJX3)~I%`UGQO;Ab+M{w1}ydu=lOTW&&
z10YpH0zTYBH(|%r5@<0Bu*T#gdkW99e|JQ&F86dxvmgP=I%1sgpYu|)HX%N@pE7bz
zDhK^GS@0EwH_CYB@DGY}NiJ*3;SY2=9NxoVY(8wjN?Nmr-IZ)8$xkPaRBXxCObp8T
zZ&Q8geIn^l((>8_K_ofo?bNdRYfk!h>f4qx*s&j<4Jw(om5K6E)fd;NU74*H>1W=E
z!q|0I_p;8cUZe?+UDKi5YW9{-GD^@_Sbbzk6VMUrK;bgwTdK`+W%r*g4!y(7<EczE
z^N^P!DMJ;5Y)c>1zeZZ)xKKKaK&zhcc0YN7Uo9p2PI)c;UTtArdzBrXL_mq1&ZxG@
zW)tx|yO`iB#<iDV-p$V)jS!L=<kCBoef>C`V@9JpBBO<|A4_jX9k>sAOO)7~yc%3=
zwB<G&6(U$<F1CCrx#Qv=pQTP+>9jUGN5~HKUzV)dhM_cFd;0Dq9Zi=g4vQo-cEh~j
z51c~qw({QMM|F>)Boru7PyRQ&<1Fe>B3N{N6gDnxbfU==xs!@s<Kg%zb%nEqix3uZ
z4Cj4ou-@5b<M)Y7HUFY?oO*Vaj3!X2irshDnCLK%cULKIIeH^pk+&PHd^AwV@v!`n
z$7=#21kGa24&;%CJdz5KUJV$IxtRLj*=pLaAf?9&Ny5vJ4aA<a9p9*63U{HKbx!JA
zqeVmAUKuUm0zDlk(9&@3%m~t;*RnDNsow6qen|X0S{7H?L+`Kz;L5t`Rxf6VT9``b
z`Z+@M>7ka;RixNYv*#!+ANeA%;nEuP-4?M&1FT!uVqO=`UM1?1%1i38!e5>eQ!bPF
z=-8WxHjp>~nU>FAkT(y@q7&j8meX~gyP|oL6RlzwJJ!b%Wc8!x5A67dY9xFsT4382
zijRLE=YSCH7FLn|-Ed54qZD&6;XLkY<P-lo5tAD!c;i3>t|2uBN3x=#J;lJVx`}bw
z_csaiMvU=po6I1Tg70w``_GDj*dqbj-z?E-5mu25Wh1JmZF?fWp^Ng!A3FPul0<rZ
z9VF&|J!X|{R?tk6qQ5b9ZBD#$PzX(<wCBBXDp}e5-1NjcQ(_gpdK%i7*-f+gh}b{f
zdiy=)t$wllZiD(SB;dfiR3^DwzEuzWNtD~#oRX7<jt>OR;_%owthvq|B?hCR?i;Z!
z^l0rDnayo<kcRMO9>LOhTi4N0wt;}-bOE|1VqRF*61n57aYTLbAn_q;ScUSZb<SB4
z+zwIuqINZ{L~%XO7vJf=l8)46oq<C9)pGPr4NcXuCPd%bCFD4QJhSyQI7dDja1Tmc
z9DyG8IzeXH9shY6ee@C+v&^1dQa%|Z+MX(_-;}CWB68fWw2DqS-714qA=`fPPD5*C
z(~NWaR*Ud%L<js#;<V7ZgYepLbGR&pd;j$!G^y7{3yr@N^(Iw!6gEE(PU(YqvsTyi
ze+~P8=1q+VN7Rh7_Qp2qKQDMdRME^cntD}H*tkODjBE^dc3+0+nU5}P)$t+Os9>I&
zfvIz$a#bOxIoM+AILo(2!caZ~&4oB^Y!Tv3r&YEcJh~NOHO^3q1mTg;+dv|VG`JHc
z*>zJ?b)i1Jb=SZzk-|0~(p*tkQ)1|>qLtdw8epr^VuPb&bmal$549eup1(qlc3b`O
z7^ce)Gt5H70Wkr3FYvNS54WR8^;86I4{P&^1aU~U*4Y=^8!o0!qA6Z2$hYa!_klFi
zw@%KMd!O+%hFmVAnKtSHZTGyDI7g>AMMd}iJ;c~*5k74UrB`8Un>5P|>ZTm^IYv6d
zx!;dTK}}?Pal~bZ{2U`ny1hDV4OTH<ODs=#oFW*ap9v)}q&eakwQG-ft=uoRCen=6
z2Kh5jqiM_ab1NluyugffHwOz4)G!z1qCCCVZL?^2YayLn&QjM$dl{1!b<N<BQj*B6
zpfbd8Ub1$Ag|gjhZB1q&>Y9A^z`xz96u?LE@r&R^YulUO=KqU#h*H9MN47hCMC@-*
zp+JO_#lR<6WW-0KeZN_iNF6r!ge==|oWjVTI14GIK5*J7qr-ALqAQj3tJg$rsNFq2
zPVTVOMX;dXz$fB-U$}(*Pd0nsCk)4!yP+C8sqpma{Jpgy-3re~vXXUuDYs?IN%p15
z;&#IY!zyJs=)gVC7~Pyv+m-6jS6+~}AAznua!121wf$t8mnAg8W-v-cV+gLs?tv9`
zg|NMx`|#?NBrH!bu;N@9;EGFMGy@O6=W#nm>21xD#9%nqOyBCka>gYLfAm%>iu9KF
zDf66SrTk5URs2l}>uyDqP%+9CvoU*AAFV5bb0PN51SWz5H{_ExGe;kZ1NTKtoz}3F
z<>H=*&dB;Lyx3lTD3c}T*HiazGMU}8S;G~8G$A^N`sG$PEh0^xr%u^g=6SB;P-GoF
z^xu&jX7EDUSec`|3N5(ZQvdQ_YAh5u5$V1JN|r+j{j2+zmz+P`KFd;bMyL_fu-+7s
zmNPWJC?I8#z?<V7dlzrv4Q<?<2B&ASyGx+j=rv+SHJ*jv7vwUqiZ;)?Ig;`<)nYV-
zzNKabAUZr8g%y9y55wu<>8Nu8roTRC{<7=)165x?{PA7TjIQ)xyobmU<Il8El>+I@
zfi!3FB5SmR3m45%5?A+I;oxI6xB5e#5enq!P=3i-%-W-rO?i354TooAF(0X6sS!}&
z<wzgDA(VjAyoksR8MO7-T<p$9o_xY@h3tBh#-*tn(?AaD%2sU^a8O1Iog*vkA3Z*h
zp#K`1li*knrywnhX?^h##^{`tNh{g@#%KW>hS8w_3bN>b81cd%!?S2BF!ni70S5a=
z%9il;;Mr)LhJm?sd2(yB)|rzSwnWwdZij1%NJ5)goy$+a7G$6S0q$1sSAQjB^ksp}
zR_c-w@xwG$L{eB+3#?pGI@X7#36%$0sgvWHb#U97V=Ohlm_*~tAHw9o5X2NV+n)jX
zXBo-jRz2JV_~&(VOJw*6A6C%tEPDcPw<3gcym;EbFE=>k%MvD#IwKE@U~$1;e@C#h
zYRe`A-A?BfK$&OHoUtf@*&-^jLb51rXicBRD`o)Ob{dgy;(t`#Bu7tfmg|jrhm8kV
z1+JsdHgDR<>ar=DT!yd+w^*Sy@s&}i3b-Dy@7jU&gi}H0+89Nq7)aU^ISt3Pdpbq4
z=ijhutCD}a<}c9;em1h5CPW@8Li1a21;N1`P$s^$q~r@)!DdEdv*kg;DV#AvrTuUr
zz#|j9vtzz}mp|uwOL5~)ega-5uwAQzcoccQrnt5TEK!azOZT^6SdSbba%6CEhzP*t
zL|uj$p~$rbj|?59bFtJ&48O>*jba_1Gh8mR>Ua^b_`^+)2}Mf`o@Nv2+2a9+ccT&Q
z#@Hu9lf!68Te<jKo;+8ZVX+1KLfxSvsF*s2wB<!~qTgA#nNR{TOIac#eI?ov=RDL&
z^i4eRmVA8P_$lSoHA@)_@$x!MpKUO0)bKl2EY>zWs`WziZnkd{bC<S{zDWGCM!tqr
zeNEIf^DJO#(S1XzY?rNrg6D#QCbPaC4-$d{*S5X%k@m<=n6DyKP3RQD;N>6WR<0T+
z(q##-5Y(3qSZD}q(4rt%wlC?wKiNPkx?d?ys$GO8->SV0d2J=)nmh-dRulPck1+8X
z6@<uz5EY~wZb<tZZJ+>ro_Ti&m50xamg!n$Zu>12da#v}K8busyiag9hVyN;bjIk5
zzFF99Bg<n913c0eO7Y1m4tIw2d2oCNOqIa`bX=!WH?mI1*W1ylnY_3i6lKS&YOUQv
zv=i4|PD$sx&Tl*@WCljXwBR2oZRU2@#Zm@e*s^aFJDt>r==YhT>;uGt5nd0KS0`4M
z78Qv_@GtT^x2hI(o}#~@p1gUL9?>cL@JU)HegR<JlRCiuh$iJZH8p8Y1is|lbp-qf
zX?W(lOc4Ej)n89lT>{2N_1<*?dsT3dckMJX?DJ_;nN3*Ao}5V_;BlmMmh>|viE9r*
zO%%)YM|2iHN(=?XgWiP-Z(p?>zEy0kq2G2?iTQ`b{*&vef93kqD%+9&ay>N`5}ez$
zne6ccAYGmi40<1+u$_;jWCT+<G4))j%-l~9KHQ(=v*P5Ap&pf$wPBshzOGtpj1^kI
zeyI^l^<B#{vzf-mV(z6;#v7@4x#`gnCU8RR?wzn(!oGm390p}7w}tSJP{p#~sw2-L
zw>yX9r^PVusCxywmbCz;ARQLY=m)ra>N7jko99b<#_ZY6Rox01R!xxe(v@U|FIuWi
zRLPmW%D~v@vHv?a{-lHD#x*aI7Pvow3m}(igm8MVq5IQ_Uf3Ih@hqCW(!mN&IGrv*
z!bnp!vT538bU}Ed%0EprC2+z^I%CsZv9-dMf`1A|h_pQ5zgZZt%mU<lYJPOZq@}~J
zgTRb02XJJb`}2Y7<47#czIa60)3I!C4^oE6%~E`Y4|Vk<%SQSJ+u|za0B4`#1qqyM
zZrhFfqKiRpnEg{_zHj5trQ9|LpjDFFmEv4Cis0v^i=>`O7#+n2L|Hn6{|+5lD6r5m
zk`d`k_uH5$z%QSDww5#>g6iSkxR*CpQ-1c;FHJ%Qwa>ssi2ksW>S;(9C?FABrsb)&
z?$P>wZ>_?#rbY*ot2<?D*sx5u@ciY{u~ePIBVsgD)HF!1SFG^t)A5ZCE4RF2@n{|g
z`Hbe>6nl+h-)dEfF=A-BIE8|?UX2t9Q>64_B=0&joa;3V@mO!U4l2UP^{W;=QO3m0
z6xApb@!G^h#D)d%_~0tR`DaP#$rr`^O^uwbq+x`6f9rj5OqjVz4A*X?{2`n|Mu^h=
zRwC&~<n345Si1o}sj}*?nRJcclkmO*h?J!9+Z7j~lSNvN&5V)pRF@$KDZX8M-9l4C
ztb3_!D-ZK}3dDH6M7pHeWnVUEnMgPnOvC%fcK5c^uN%2LtrdVq^gS+KkVU5MZSSC6
z>>j$(%(dN%JnNA5yXMDfVJm~V!%tF}#TTre+~<5ib3b>cb8)CgF{GJ{zY2ACa3Cw`
zHszk4Szvx<#HLmx^771D>Y^)Q#O8R)_o8d>kK6pegyItv00LMH^OKB<6XDjAe!aUP
z)C)vntpH=aN{7Q-tt0_Y*>>6F-JlH<O<orHi0^%!5$PYwwsp%UFl0joP^m`D|0h1E
zqihhRTU?ug-=%>8rI?(TO~vd=U4!6M;*2!1Qd2GMae6|B2~<nOv8?{v)KbZ=X+ZrW
z)y}~Z<Ar9*i+ZpnYz@}p+Qupwds#W!j<qAOjRT4DKJM9F8?M5odpD3|t0acH4As0#
z*u%I8dAN{1cuwF@KiBto`G4`xQ8}0t9)0k?_WUz%tOy|~7dU|MvS_TE{vAfjh$chC
zdbd%~B|J;dU`+eMKwS@9sr?j(;fwQyJZ4j~am|9%)(IvIX902LI5Xd@TXjFSW!krz
zmtqc>#L-Vss4>7X=%66|d(NH)F<*2Z{!UcF1SCR8ygd(}O~~Zy8Osh&ZQ{BVS;Fa^
zczdoX7mJ*ilQy9Xv<0NCaY~w4W2yd#l6n(ZYE4!#M){ryt_vQ{1?3DNS#69^w`wvI
ztC5{GO5{4UP`nyu$kcjfzxLG5i>Xaf?RKAZlTP~iTqoFr=7Y7Hp?^&D35uu~Y~qDB
z6@QVUFhzKoep=~<O-i;2-(z4ha7WWPe{SG7$v=^A^65!2JMnj1DftSqIWf_LYKRl3
zo$X#!v#a^hp|AeD<%YoW63x&v1Fai=$s!C{j7KuZ`Mmy%?54(|jw2p<*m{YRgU3!I
z4Z-~#&K2@2P{Hg+f5&g`_7#`_QC5ubLCG(&JzPwC#ql#l9i+z-mpye6WP#NbOujll
zbHW8Rw$QWo18dh|Z*3FgI@#Z29YUC3D;6xOcRhy^lU#aH7s$FV6^+3U+aWf2XD9$z
zQ{RcQEgISUK;HjcF~K)%oJae-AysZXbD=>?qC2$m2>GCbgyr_nwlUmuNj`Y&`<x8t
zvQF&SzcLCSxNV`vG$!FY(bFuqau0w9z_e=|UM9NxNon|sYrkK#BqXkSEg30`!;!do
zI(=>~Rzlusx2f7gjyk2;V&TwlRe~7I<97R^cM<sT<qJhznJW^vMXk*E_4MY<ICfVr
zV43Nc&r$=yczXmPgHGfC5s=8xd*a>g@fEzoXlpW;f^Z2AU<dyx`imh(tLrJ2Jy&=9
zle*0`5m%C-ER0T%jPEaln|v)BgX|lXtp%Jvk)B$?w3Q!q`RBJPkO2)Q{Cec|R-}2n
zJ-fqBfkPxgg+03<W&K^d5lFUn4wrYUB80M57c2pF;vR?cP^khaexm+KM3QE(a}K%-
z2&DfHDndZ`Im4cKu#{2_(NZ+0UJM(J>>gKhE=F+sMq%5Cw)QptQ$qcLGcFHOj8GVB
zjE6D#1TP@z1KxLe-C#Jrc;Aq(ETD;yv^o>sVks7x_nS$DhbD%wj~;!W`B_9j1!%yQ
zQ`{v?zHJwi?9Jj1M8mK6JX)h|CMT5Owu-9yjD`XZBkAwt^5WNFj9+m0pWsZ<i^9m%
zAEUfZ#frKJKb$4#i|vk0D`!YN50%DdaKy!Fa7+Z2_(nIXH1O_jM9wFdRckK&3cu8d
zAq@CIosOaOke_wf)@cN)))5py;4oPaXAc*FQQ9{ZGda>sxR<3Z&yhvoPh{FAHYeV*
z`iKm@OTgK-Gf-Q%XzN~hjbS&0qFstsX|)_5YRe&x5%~Al%E3}0X#sga#~=Fx*U_$U
z_~-_btcbB<?V#fnye6KvAr2-<1n{HfxKX7$0*1>Vxu3Njb8T#>qv{a%KUK*R(#5|J
z4O5FCNJ17Fb=VKYeZ^&fC0(=19qw$5a5x+JVY6lp76j(jx$*-If0E2b!Ipv#oc%V*
zpf`ZogvsZGIHlc3+z`Wx=$-Zu7juAlt=p)9Nt&{t3*}v=%a^~t7`7jZ0~1W_#5$D!
zC2zRrLGf)d$Y<1V?7zQ61FV=mw<2dT=<Q~^?Bd!VuaHP|@IOvAu5$oJDw9V<>uO$T
zErImMYI@l%QUb^)gBHTWj~T2*x0md<V=4P`?wKuM;A2t2D2iewNr3g91@&P%1~<}m
z{$?sj@M$+at42ZlXLRlYilc!s^!lmr%P4yv!+N7Wu4eCUn83LeuwW)>Z7f<p<zIjW
z-Ke%6oH{Fy(p>eL6F2+~HMmQW(aq`sUXwnKT|25r^lQ;S7XI(S(O(n$|Nl^cfml~w
Y6O5+sG?vFMp1^)mVsfIT!g@ac2bv5i_W%F@

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/k8s-pg-architecture.png b/assets/documentation/1.27.0-rc1/images/k8s-pg-architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..e71d629e8badd2dfcd34934c8f9581eff3818b19
GIT binary patch
literal 256099
zcmeFZg<F(u*F6jaQc4Me($XDL0#eeA^w1qr(jhPoC>=61NOyOq0wRrcg9s8sNK5}N
z;8ySVeV*_5{(+a{fEk7>&e(hHwb$MkLCT6!m>5JD2nYz6GScEI2nguL2nfhhXehuZ
zPM-rwffqz46{+V4B?Bbuz%TF3v}DW`6c8AJ_h<+xh$sk1*M}g0fFJk&d5;LZCqlS$
z^Em>71|spF_xgzRe~%BaLO}lK7<1tD`YRUr2G0KH6)6qz?-kQPzmG;YPDA?r9$D)8
zG)>v!Jm3ZWl{DB10fF%T^*5qL>M$@J&|NDvEoUtSd43anTUH}edt)<JciUIjXCXXu
z=Lg=}nmHR$xZB#;Iq|y-Qr;ZF54^wrn2nO+<`8FVK}szJWePESM>7f@R(4i)N+Api
z3W{frrsn)A;*$TI4*VuaY3c0zil2?m&CQL~jg!^h(SnVGkB^Uy{R!KXCoI4bEKVMF
z&PMJmc1~2c7x{f1aWf|qN2^!PR`zxj*Vi>Nws&zBq@=vQ(Vwr|aXMR>|Gkr)(?8P!
zCdhXE7d8%7cD6s)22Oo;{VBhSnUlSZ%k|~e?W~-Io;<rb_<w)=_indmDLGo10pq<s
zO^D;4Q~v$g|2|&K-u9KFnUmA?@!bC$|L@QK_wmY>_RjXeT02^q$k;iXIRYpDbGP3E
z{Qo}UpKCp1yI!t;E#K|l+<Xdbju6H(wm%y!gfWV-L63kSf*>O<s^*TkIfv@5JC^Y4
z>R9o`PJcx(%dx(h4C{fSv^41PiT(ZiDiqMSn4e*)JV^~no5sYIz5b(fG{hicH1ti{
zq;r+FEQDCwd!Kpw>v-#VU97gR1gRpNEw~Ca684%0IcNEgQ}!QGt@n8hdPr#Dh#(*$
z|KE@QTZ8|zga31b{~suT1`?D}HaO#B{TFXZy8^8+?RBgWQ`HC<Ff**V*JFr#)f>w-
zXqBjyZ*d8hSTiZue<+$^6<ob9I8<(Xr-kk1@P3%_6sdJN(P1J=^HE+2Hk{A9exu{1
z0CP<Vb`5##h4mp3!GGPAB~^-_o!VaGDcV$T5I|@Y|KrD3TK20H=3On-&OODiZ|L=U
z@yneTYWn$2)Cx^zEUKQl5EYH#=9zVi;#xOW&CFyKyCgN8x8=WJA;*^bZ!2K<@D5rB
zk)*C&*niv#?Vfhpc}n@x5%ai6&ZA31CLO=xbEu}qeA*7*hJ6+GT8EB~OKfrR(#Rt7
zSC>kZm$qO%;SGsQg#R_<+h29l5TIIwXkTV<|HB!fk8#SfUUuHYJ(l3F9D9P<(je_u
zN{jW;o9c?7#@70=8{E2Z{ETMzWW2lFgso>gKtWdgzb{>e<QtKqypue7`v1LdXdR&<
zQ?@d&q(*67R=ii$@&<C;Xbcv48>_Bh*qVzRtcwNxRQAA=TIN`w#$^E_e>}%}MdeL&
zcV*-iJszG}je@0G7ymE!M*Y#DVOq@o;?)V;;mKh}+aLX6^^>lZ^V<?EUn}|j#`*cC
z4l*{~he%9B|J!;~7z67aJQ?Bd`}lwCE3il+^5|;C@eE6zsVD?`g@@W%A2reaic>#>
zWjq}-Ota%PeId!~3yRUv;t_Rvq=*`R%~v7|6T{<V_-SMALRxTVlMoW&3F_R9qzkAX
zQgi9|Q`#`B*P{L7Cl-DDQxz#~%mG+Q|7~w@AB#|Eh<n|`2mOcb8>^%>nWxtkCpnwv
z9tW8z5L=SsJ!56~BF#tsDqB=DKgbwV@&tC@`APBGiFQ{mr+M;A%UHZa1;^(|mGZA*
z!KvdWeo1n@cB5}<RuB7I-+%r=X9jN_#T<==|EC=QcYpX2x_0u}F3)=4;y>dyG@Y<4
ztHQG!MQ^T1^f~Xk=O+=e$du)na&W#%UMZ#bN*2vJi}5i$$u(6;al-~oOAlY0lH_yW
z`#>U?$)SNHI<gr=w086%$JI+$n>aPPADfKy%S=7Nf6N-VH8lNx;GF%Qzii;ywF8PV
z8OofHK3b9+ydS}&qiSs$B<IWmPBf;{Vb+YbgKI~Gn6A~xMOZ81Zh4g3?sGO$wFc5C
zG}ubMfon_oCfSw~bsUj?bxGE@)(^<ePFK{w*p?9-^!>NbwbL!aB*x;_@YQ+Y3wt|b
zt=%DK`}F&$K6aiJ!asYE4H7gHQH(p!jE70co`Km=x#)YF!ZGRDd+jD%hxu)#1X*pj
zTHh;Jhj%v89sbML4daoS^BV;8rmGCvx5j<2YLA?>NH54PFT?j|GA>ACW2USj0j;I&
z2Ts2%T5N}1V~*Uu;6e-nX4L75Spu@bXF@f_f*kTL-)e4c=UxKf$YPS+Vb`m)52}n^
zm4>|z_LpDp<yMbSTz8+ss}gHN)^$Nv4a1LTVVQR4u;Ryp%S}vcam>_^jJ6eT4bL})
z;eMw&H2O*M2LPe*_w&x>OQbjGs-qSaF9cqDK{m`m#k2&bvS5Ax&~Eui<cLOL`w+Ob
zFQ`&+Efmb}q#+!~vsLFIIU^P!=Y7VuUbUV}6!$N$!oi7$D8;&0w~EcGR@;kB)U59e
z`CwZ=?|S2CZA#2_d5MKNbe}YEdk6k>;n*nQ66=iH%5qL}dao^@i|E=W46Bd<Y-I6B
z2|)n8V0{&$!zgC~M~hh3j%1i#9P$q+q+0B`zZDu((Mg~%XJkL--^;^N-?C{t>~6<Y
zX(chWD(&#s$R#BWzc%0P*s9kdKjJ-=-GHYjbfZ6Ukk654{IZ8?aOfhq`kK(v&h~gP
z`p|WbVanwow5rD1{8LM8I3lBxbmK*ujdpWOX)j;IU!xHrL9fg5I$?IGw{S+*Noc_u
zSv5KpDr(AeDqE>*ZEYX+!Ag}o6PT_I9;;G#*_zn}zICdHK8T=l|Alxu0Cbqq<aH8Q
z*SA8rT^1##e`@7~MKTs^Xfvx7Pw-DVO8fOyl^ffRc{J(6YJRMmj<jxW9SVLB{|jvt
z1b2FNeg?-lRMr&_ZXo!Zd8>2Kaj$#*RL@zqIu(umhHE)OQPkWu*n@@HGd;JE#vG}=
zdqNiNFBs8VL+6ZQ^lv0zk~SRIvx31iXjoq-m=CaDkjhnsMUkO`T(k`^dxk%*3B9hY
zsws(zBcCKiJ<JKdu}CUr5sGm%zx}7kIDz+}dxK$kZqL(jGm@FdbuYeqNvmRLpW;1z
zG4h_;^U!Sk(l(+*50=(-f7Z?xZ><h<=BU-H!KB9fQgfna`!u2&eg~7K7yxzv;%$d#
z$Az9v)-=oceI2(l8kc$9%MYsb4@hXF`~%(Mfg%zL=~#-tq6glbG1%gTZWXK1F21aQ
z{3w*~9u{GajeNi^3Vt1){57p;<T9;@#~_u{Y|P4J<7~<LBE`mYap+5IZ0^5|mi;+M
z-7PMVtsC&5Ch;Fusa@}L@HaPio-V8!sg%(r_=LCluw9Tsg|J4BaVL2$NW-QVzOrv#
zkY*qaRs&A#rd6T%QgeqWUFlud4Rh!y1KgG4{F@3lfUa*uRxBJlWj$(Jz7v&SaO%h0
zTb!F?b+Ia>5*vvy&8C*kX{k`Te-4jE#;oFB_{EO-{+sS}^~htK=oR~-c*zhH%LLnz
zH+*wLlyvZ<tbTEKy~&Ek%=9H4y5ec&sV4KmcXQ!x|6(mTh@iVW36IHk;;N}@*F=!*
zm1v$o&XgGXV0_sgS)`ljR`}sbX+?9u%7iCW$V(|kgxJ<@)Tf4wU6xi{UJ|};3dj3b
z#1i*w`yfzB!?&fUJqqVq1TZnI@x5_l6)&G)eP(KA;ULuuc}Tz`H9M39YzRc^m0_%t
za>M%m(~(JLx&dx$h*YW{hi7itAgVcd@58U@@oxWWf!7cui(4;UV+F#X8(uiz6isN%
zT3~82kBD%)RxmMT9F{q<w5N)%X)X$?PJ+L51By`sR)Vxa-#r}*BAqJeFf|<)J-iMK
zhnsp=LSl<WV<ELIJ77}Ly}S7f7Xm8Y_f#Tl|88<<_?t&8c61Ph8T8u2aY<=~gPu*8
zZbEjc>DC*=AYEwAIM0;N;#-?JH~9gcg!n>zf|>a|RlL$z%tEq>LeHT2jTN#F&;Poh
zVb&dUh+Sxw`$DE|eA2<!xMQC9tlW%jI*&$_IO|p^iZw>DGf`byBBoD-BMS~S`I)U$
zLlX|q&-nY^9O$E(A84@6%;)B&s!tg7L{hcJ%wh8$y7H~wVg)-W@=7Oa5dAth%R+lL
z(5DgV!L5qCVUe8;b33Viv}FYpRN&9%*|O;^ef$~%x_$U<xx{^FuyBN86N{wf#crqJ
zQT{gP08iqrMtAMvR0?`)`m4uIY=5EuG2z-n?#ny2ROiL>ja^N?5>xq?Q>C;&EF>i?
zI^GLN>|!c(^_65=nD)+_IEu{hHnY}TRQ&QXfQ4E6jKE#~jYa@u_XzVUTI@E<RC-xL
z0w6z_G$A3zrviI}$8OFC9$9PmGzArrXBTE9mtAs54WGP?|G1Vj_<eFpa%(3qPLi~Y
zqpVY?&|B`Ra9jx|nwy=kL=sr&C55yFM6_KLF>hQE3V-ARjXwNTI4!2&SVC#h$whHO
zx54(kh9{z0cABj-92eg5qq-JEOgZU}i{j0#BgSn|FtV9MzlDP6?{EOEyH5{JVV2Ox
zY^hMd(a@-Cc<p>}JX${WL~{iDM-E*;<6Dy#w1$#jS{sh@njF?lch;wE&jy#G*m^#z
zL&7Q;RdoL@pBBDWm1AO^H|a;s*y_Aib*^<J0hIXMUuS|CPgFX-hc8@WeK+^5=tIC9
znQ&-BHn$3HzhqnWt6)BJ$QL-eif1Uia?}k1qDqG!02RAG8C0c^mtM3jBrIK~1;ROr
z-c+XvBa>lP5XHr@nt42$#*v9E8YM&hc)aS$0a1`L)NqobT6t?#bk7hOT@=i5wd05J
z2OuNauEXYMh^|vGa3~kyJEl@i0oos7y>Tbs_i0|BzAWoV5vd$FZM<l6m}<DH6SjRF
z!CkdwAd__Awl}=NBB<Yv{%59$$o^u6dvigsr~}02LkpLm(h?A|Z{r`SzdH(?3dkd9
z)Z`G6i1@z0d`9`BgoEK8wxvM;de4)OV9X1wK1zC~AD0};kAbT#f&dQQAR;m!jsU`?
zRWA3+2wYX%l0SJH%iLHxOyjQmL{v3cp83lGuk4aHvb2G|cQP-P^ilFtCIPr&??=@`
zZ#}Z75S85h3ni;sa+pHlJQj)Rzw)QHGIZvGda&+Z#55iU%PeQr;B#|=RoTug4vwT0
zD&6MqCt4J?-%d#bE;tbbs>@vLn9IrW8n>7#jJ5{KCSKwE<)Z)#{h3Q9U#HqCe3ezB
zw|Cl5{770QHuZ57fOA++dC!>r2-%_FGj4YHR)gv#bj=lFXEtMTP(dCtcp7fgv=esO
z^v?Rmk&Tsr)M)ZdJ|7pfOK&J6(O*4{b5f*n>6wgJI595a=qu${%1=bq$+w<p_n!P+
z`)))|OT9WVeXalz!v%WJp4-bW_Ttmz(bL?mBTo(s^*Bk)R#X0BGY6xxgMGf%Ho4`@
zw}zCLPqW$O3TPk5n#&q1#l3pwe@9*<Rz_3n%r*Ig?Mrk6)fu}7y_e~(C0?pLMf@a}
zl;M9Y291JU8XCM&Sk-S_;oT%>v9sm!a-KT5o|k>HiHld^Ou%!C?2#$dT}Mo=5Q1<T
zeu-k1;Qvl*deG=9X|&{2_`#?sDf7*^b}2;;M4P;ZNAaLq_}5gB+FdvY6V_Pe8TGo*
zSQ|DWjM35O#jTP1%?x9HzRLe{mcqAU9)IST)PY-=8BWecCH-#&v5p<ulc=<TIc{k}
zK{XpD%Wc~QV=$o+7UY|?3hzu1X&j`RIZAyW*0_;Xo*PX~yV5|zWOm^#tVV_c>zHcA
zEdW^L?RwqIZ>x$~hpnIG2_wiAtvAmJaDV+ixW`dWAs1Ys$}NgE*WB!Zc~}ocHS1Qi
zWqC%eU~we|WDMQutk}n5*SH_}4AF;EYTn{`5ROP18}#HjS|;N-#8`)XoUK{av(d{-
zzoCz{8?Tb~R{?K+qyTSQT9FgK@^Wid_1402HmW{xy~-Z-AHRae<NnOump+diU)^}+
z!uUmc9HEGkp<CvzTcU{r>(KN(Yw0E*ZPGDGWNZx?O8Lx@(=cUiZ*SpzuoG*+UpmUJ
z3@vDs>xetJ)4#uqn=H!ETw9yO(>pu-400-ZD&QGKRPUrG3eM&B{#HLPWidIN#t9dq
zw4Gikx7sSC(v(ekd%ZyH!yshiu&SqnVhGTWcl(N2-&4bTryrg~qZra0IA@AS=$PZL
zS|Vt$u8Vs<4}SmMf+%Ta%)4u)8i_8ezPR~VWol2Vd}}Q6^m}cy!58qKNg^T-+*Q-C
zp82T#phS#{`zsTn5)(|uq+;=Tn$mT|^{|@2ovPT0uR8mr=rfkp%xVxdJ<UxCpFVAR
zO!!xW>8QP>P$wBR>Oz?~GJ;0b0A6_8g!eJ@#{jU%24CMIAs2;KhOtz*TsZ)7ypF5-
zXlx<fkI!rTqGGq@>d{BaJ^JfmL2>U>;8?#+^SB2>(|sc{Hus31()8Ux>Fd(@>@K4X
z4=b7Jhuu;6CY7DvX|Yf51V;SQnVI(9`<xy{6zw7(o@%`TKY@IGQ^aPae<*zH@_6-k
zbOGX(T3cU6()*uOq-_pnPoa+__$q8(Mk-dpv4AZ_JD^uy7-eMJe7bDk`nLH?Z2zzw
zM1`l=lVQ^X>#rYn)V9rTsL52tTI*!z<W{Yt&`bH1$p0Lx%COmOu&Naw5hfa0*wvV0
z@Nn7T;Pb30kI0yT130W9Jks^<!*$fe38Vz_jEuGRj6AfC<hJETJQ})n*5c#1Dp43=
z$tCLrgZW<CAZZ+(Nu^4=-luYUyr*d+$BA!>lBE=_&oU=IT}e*QTq^R+x7JS-KD~}m
zxBGyj1d3G~_0mRln9YsZ<_V-yu=v>EWgZmT+Z#xSx50l8bQYc(V^O;kSE<1AZF@c^
zEa7a$aAv~vYP!W!|5J0S$zR+mr&aa|(42k5Z&E5(>GLK2)mWuGM9L=z(&oXDKhlmX
zF<0K6yKzyu(NYWrf1?{0G@yyX?U*>FnX0Sd*<h4`-Yj|pI!@qN*jpsPd{05Ob=k(}
zQe3|_;HQk3nq;+-hW)JFQFqKvj8%exaM#91YSm(U#o?X&UQz++zH7NcUhLu9U&~DV
z?{<idO21M3p5_}7FEr*l0fYN6vawd|QVh*+35hMUeZDbi`F&uVhZs-|()AXfE~BZ6
z<2-YkdyShz&-`n9KaasbrL6qxBG1t3vNBHnrYCkWy%o?jjpBguFm}hhGrI$e6^BSY
z&9oHOSg<)22tPBxWDz`Yi<g}~QZ=si2J;ln5p22SoCAv`^6V~7;Df<bAr~o%`*#=%
z7YeDKU%m+8q0-&$!!BM=l+1D*erWri`Ypg)IB18q_q&q<l)C+E;hsdcCEPVLoi$|R
zC_NKq?H6app>H<+y3+xTvdfNfxuBAzX9R3WZls#(`(8q}N@5b3XRtT2zj)fVv)@2?
zHJexBVfaU?1=#diO9u8nW;aqj`rl=8MpM&RNc*U{F#M6y={4ies`9Dng%|XXx)0nA
zO!4KqW?Zz3NcjcE{gVS$oW&-mT&f$}tBAdX$2=kGK&}*=eX2?bI3$HWknRV^DJ6PR
z;;e%n9LEN)TtazdOW^r=cz2(e?Jhs>9-m!f-la1nqMyMgi3<~eXLaFH)yx$o+b=}L
z=0L6mr7&Tdm!ZEcwIf|bz2Ab1{>tY<piF1*-6QoD=N>KdkHPH_0xCVT5&fyAvq0Cp
zQLCQFvVD^a{po38`lN9Z;`NH%XMcbTic3J>YEk6gv@n8DMEu&*F(F6J;90h^;|T0^
z!`ts1%!?yO?Qm2j>EaslJ{zzR;caaFRb=1euO85@-!6IsHi7sQI82nn1Q_o`bkVg`
zz}^8UhQ-5@GLw%tXcF&w?=F`=q2;70G0d}Zhw>;~m7DEwc*qFwCC*H@8&Er{1ca&e
zo~mDc9l1mDS6d2ngzgEbbR=7$IC;@m(dGw{)xSJ?%FvBI(}C9f0oXtJMN{u6VE+uT
zk_&cxlyr_ZOj~xMFs*r<g}ZV8&M+P)FRxw!HK=IJRaT?!G_+qfhK66OqX>+{{zz1R
z&P|tRs~{?8oa|J<<}7poc6bN#^YCIzN=1gr4JhEq03kzSI9C*m6Ucj=q7Zo<QrW)O
z#Vy%5dDLAYj#MW7_`YI*N&hsxhsPkUhlF2+HuqDeP2-tCX`Pwe<?L#KPbsVaav5ig
zJ{^7Lpm_sp)UKu>jCe$ni9x2QQE~e<h9lgExQJ0<L-)u$E{py61vI`;^)t5^Lljj*
zy@Z$VHU34GugpVI;}Nq})K_ozE6zhLOK8l<X`uw9&X+y&nf$%mUsKKm#4j@{H|I+#
zH(P|{I~Q*SHZf{I&cG3MBnA?$_iqM#)%U^PUA5e3g)?Q?BSwy2t0)t)^3hmA$W@VG
zVeKKrI@9Nw5`B4*KN&<eB^A{7UGj_ds47ZWu!8cQ{PqzX9Z<~iz)01P)^SnN&h!UK
zJUlwAsbEUGIHm*qGqljUHlySR@LC;L>w?Hv{Wxbvd_%5rn+7vam+pLr{+*H-gQ3h=
z58%z3RsoW=^o7yL5zNWj)T(zY*LEJt9zJZ=RJBfOs)7gFOu5O+pYGd*JeoA>u3etp
zhQMr<s+<J|Z>TLa5QpN^V@e?u3@D&r^_3=22F1z{y1l5=9;6?L45@knTXYBz=;uK8
z#D6+7O3BvbB0bOV#dyvQq<vZ~N<F9CNuLbbUi`J6KtjNN6m|F9>#BapaW{AQR`>>%
zg6@Q}LH%PjPUd0-9T!dO)ZR@?me1J5Vp_X>j>D*y_?<r+i>E~tk(;LlK5|Z3KJ1Ww
zm;YHBeU!JlC&Zo{Hi4aT?@C&yCg_*lM1rdU8U#`52Jj_S0XF@0bae`?Bkqk{!OQJ2
zMu?bz0!*whC1rUm5}uv)_})7sNE_&NL~^7{=~i6jwDNk(ByIO8(y;3(Q^h(e=G>qY
z^38Hw{{YGY1se0|40B||N8&?yVaO43B?+ARpI2Roy~xVd(+ziN49&N_U!aEB%sX-E
zb}Gp>UKmZ)ZCrgyUViv{m*0qpV;n>two}FR(?1x-kzBSQRDU-OSpq6kElP^K{t4$j
z1gRQ79`msnz<9R>h}9otmR*B;=ry>1CubiMqo71C*k;8QII-Z@+ZcYelAs4;l5;-b
zuQYr&@@>)(S$k&2>>|9q0sseePLI-~g{j7l)w5_D-TkwVv#G~_aXqw5WK5QH=rM%+
zbhIy8yxzzs!8DilU5YU|G!SpnW4Y?w2(E8s%X>i+o}G!b!m09l;h02f>aVUCC=Lxy
ze4d<r%t1=w2(DX7C?fC8!I#P4wLF)uljHLjX+@r{x+pWUNXFWHnxRK*G;cg}cCe<W
z(zu~%G~kGKy{Lxx$iJ8j@rOL9K@K#^FT7)<Kkaa#S$kSGb4KAUdv0+hs3y`~y8zc2
zQ0r<te@&FjNg1y>w~k_EV|BMB&de;N*QF4jMIp)$eK2?vYaJcE<%8f~vwMM`mj|Ya
zJ?tF1AN?bzH|#E*thUPYYm5k#M#N)(nopsMwU&4ES%VY2bJ96XP)V~hdK4swCDgio
z{zBugTSd|;gPqE26fV<B`O+mg!NMg;I<)&;t07$q5UD)uGe5#t^~?~S1oV>x$7Ojx
zE-p9t&X-Y06nXTLnFmb$K#H$n?(5{kb0-hFYg1@jyc3UW{nNDx4-wfDsF-B@*g1%3
zErk>I%xRPEe_rWc>Nc@@e_;1z>M_pG6Pqh(Tu$RGz1l{Wnsb?eNG}l}Bb(hKLA{lK
zu8Vb&sv;xaMdzBfN?trwI5~pl&MzbDm|Mots*QyA?)2Sj8MIqqvnLgLP*Nrweb~5-
z@8LTT^@^Y5CRMq)fLvNZj<&_e(;A_9JZ<C(pSQtf!nz>Zt&`Yhsf$OV)1Qvrn&>sY
zvs7Guyl7WP*}h4YhH4QOw2o{$9ssOL84B)oqVC_vvyE<|Iw*d`e|LPWvP;HD<K+z`
zYd}>G`}a1j&j7jUbbGLTtKImF>!EdjYD4NW+8_65qerXbLW83cy*&&XvM}J!6qlDm
zy$kxvTJ~+LU8N97vVraBN_y@q_LuE|q=wY*|2i`eLv1ekvFmU<|Jr$T`k;c`L617X
zF+M~Q-0&3jMR}8uYcD%mw`rUsm=VhH8@!U_DY_J^bt1W`cLGsE1uq<p6I+xb9GRf_
z18vauYSjysN80fFwxP3HLN6+~NRjS>s94@dFGjALRMLPa01_LOR$tD{q`(|i@Cxil
zat^;srN@&J@S9#x;83TDYK`S&ey>T(Y;amXFit4W?+1e59mEl%xPoLiKzByZ59d}G
zRv`#cKXl^TH<q4{d@nck2m5dy3PFQc@H%DPHD+iD1B6VAuy`QH89}h5SdyEG=}~-z
z$6877!BV2rE=VnCEFGD9Wxod97b?mh^iDiIA8gluNOq%!4=KEPRNfHz3a}Rxma@Fl
zCk~B1={tj1&0V@%%wV3d(Z}hmn-Sq}x-&0lG+leAa>ifX8G^Kjk&ooR7JDuBNw1gV
zuV<wb<Q1KixH^0BAJh<9zc${kJ0EJ_q{2A_2}FE|U1)BglV@}}!*)#DlALO-;n-l3
zx%1mxp_X`gMf#LWp4t}cTjOX6;15)B@@!wXaT>sxTP9(hdt|~h^sQ4BI*Pni&ZQ|V
zt+AggYkLY81g9>jrEV_bF9*!TUoQ5H62~4C!%hD6(L1sUNtq#%Ce~h9uSKlvNe9Pt
z-1AK8`Ae|)OYi=?eW2FkxTLFE_qqFCc{6YCBn{lT>Pw__G1AH(l@=(Z8n4uLn6Y3N
z&s5}_n9cw4y_pdnXo}yuDuJ{Y*|ZuJ+bos-Q3<2@=is1-1lfPkRD=s%O|8{Hw<Nc!
zm1+cRGt%i0G%&2g?NP*|v$peUx=hd$#4x?Up=Z&>4_=_oB}(+WYuv52OWkCE5qAN`
z5`@tIqJDjYHtjS3wRqL-Xn?#Vla}!VKE2^CLQEqntg6CwXSR_*F&h1jsBMfpEWHGm
zdC{TKRMsdK1udB5DVSVWMb7cC!#1(tRYVS>7x(WA-d>ebx!mzx-Eva;v3^D}$=x2b
zPZ%yn!Zpb9vXR5HTvIOyX&*Ap6<c92rBWyu*?9jLMfoT0QK|u>xO+NRmXJLGXEuW6
z_`Y5}4|)P_RW%o-7)G9D9a)HE$yxZ`7UcA?v$Du$tNknwpN)?hHD!Us3wDFV&~G?s
z7>N(VQC}$m`KA?OoLcd@o9+8qJndfJP*V@L6Vq-PISj#0ArLN=p}7^)fMOI-F0NRe
zd}QSmE>zo5`0*XD71^O{@*}tsuBs)*pOS1xhKR&r*Fng)owpjrjw<QQ!&5GRYoQ`?
zI@wPeGRyV#Y295G`ShK#(R<fWl=OG*4SfOhGGzQ%sM6b$*xE-++-B4~<D0LvtXQ^g
z1+XTP+3=J<xN6X3XSZ^Anrzhh=UOYAINROI7sW&nuiGWf23S&{CI<xMyQ!2eB8F<n
ztozbqXXIa{7Kl!N<?~Z6pL*a?%UE<6i&79FKT*AZQE5UdG)8gQU;I&`riiJ^K_xFN
zYGDms;D789A+s{r+t1bY8Dk=R)`Jc2jTxw13n!2cO6FJIkw{4+@f{ej^D_@+&EHOF
z_!b%DH?V`|Jx|^L%c0#D9R|bU64h8U1Kf}U^a!Y3y4ci=CfmJtQkXjxV2y=koAH17
zK5=g^Fg_yG7nsC73}6y|<c#Xi4JYr=E+o@ObqS|`-QRH%>b-{x<~J*1PSPk^AMry8
zeadD+3=PDWKBzO(eo@0!UDF%M8TQevsz`z;lv}AuH8ob1t@ci;DfS<_WH<zR&}$L2
zaw%-9gN(^yke81}Xf6Ak;99pP4~>aq6~Ib`xvmy98~0BrMp0vaJ~esPpltDHZtlo^
zY5O`p1xR8-B%TmX_T}M6G{(a%<rFvyAoQG8F~9O@FCo4nMDWLu8m8b7MjE$uRh45e
z=`4+(F`GAqoO_A@0sL6M%Zj|DnP%!yfln=zO-jT26jzsDb?0!u*HqG>WS@NoO+4n!
ziJLB<*mm<L&7_!E`1RU>M`&199J>>a<@hSf8UDvMArV{`!L?)tEoUe#rwaj%+-!X`
z192gomjXu)MEkIiUO*k7!YaPT<sA*us6iiw42!0<3fNr!^qNRYq*)K0^bf2ib-bPE
zd&K4>yZ<3zN|K@gS>C_jp?)0}yF7Lo&iT=-wy1k4(mE^coPkf5m?-~&7t1Y1AQ1qf
zRGVoNBJ?Q%yQr2#%7Ud-cZ}j4&XX}0r(RQE#jm}-fPr3D<bmAgx=cMO+KpE1u%u9@
z?N^>c@sNo?$ZF$vfi&|*UeSHjN+9<`px1Etg8@(Fs7IhJ@{$Gx3xnw1aFm(UTs{sG
zT$@3=Ngb=@r}h_g*WbQ`h<wUq=v(FpOT{8}wsZ8>Ef&>Mt+M@eeg9>PENLIl;7xu<
ze)snQW)FgTotg(i53>eB)yeO=WMf^sQ5G6|oOzbl{b(epG$A`FjYNupW#+Pq#R~<T
z@oHovKAFjITqqy`E`NT9NAnTyv~XCPzIz=K4Nwi^tO7Np-{$tv1JUh=7|~mop#6`u
z4=;nkz_|*Ol5KsHuRSbZWzeuX)I*p<3M{B@1k9VMvp<CD%mQ_a_!^lKmzEi1BR%fd
zB%)f1_%$Za+p3tZ0fE{>?1yD}(G<*7kf~CbmzI`MmgZU&M8ief(hGlY{Nf$}XzYk_
zb(LgaDT?49RxsoT1tJs5J}}#Ky%%}mnmDV*AtA5*KCKgW2e#oYDbG*(x0DWr0=+~{
zVlxD(&MgcISM#1-O+Y~YmH27>6AwtzQ1V4Ma|%iH#}N`myg0ZOO5j6`Kj#{X0P33J
zFE`t$Cf)-*&6haiKwT<5U`mRD7P)URH>tXnO3z{*Q=8d3$JO^4(*y1~B2v+ba=&X<
zGGq^ZUpC>>8gUn>lcgXtTKlAh!E}<<v4Ei`ta~H_Lr)Wt^_8Msvy4pUx3!mREG_hp
z#SdO-R>X)q*TrfU!8&ApRP!g6r`+j@8~mE!<&#e64kGjbG_}tXQPfN{9IpboL1=H$
z;zcP}6SY?+r#_c(#+u6c7V2W*3o}*-(&u|lNZ9<XxFVygjXeVhOezL{j)3OIX442a
zLdqSe7J>BeWq6Ru6SIl0oItgIyXa-h0M4-@gZ5DtiPz<aedL*&2!})n_{5@l6B6{-
z{cFn43a=cHMa@|?GYwRIw*_2f@8$O_iuP2o=InmlP@3_Fwp9j?!TaP<nZ(-0Q*Rpn
z41|!Gy_R47{#+|zxv%7uKBvWp=;bVfpIh~SP73t6v*`gvCOQDh!wa<Wvb8d+u+9(N
z!u@Riin4F<@^nwQFNBWw({ryAc+OxMADoR(J~kNCp0iJ6IOjIE2|~?Q*00DXWPLhK
z9DjA@Ocn`NU(*oD>)yCXhaU`R;<+N~hl0lSEx6k5Q9zH|$i9C?8Tofm5CFHL#B_~7
zXd5tO?q!6%eT&h}c$z>mN5=J*`m;<P*>5V%&JNw}^~o~W&|mi&X>#y*0`Y?G;{b~_
z<oBkx!qiLOzsciQRu#(Nc%!&%Y!eW$A(;WSjt_r(lt@~}sVk{-3oZUq#Uq+0g>NZ}
zlnIYabSOmq%7K=j?roFY?0W7z9h1;Hz1|LiLk_+}M;#j`WdQ)e4S!vC<p}9)hl)7g
zW!83RuG7VaTe`$mQpyj)M-2t$k?%Ke|NN*$8Abj0b#VA|UMtssm2sZmVbt_eOCm6E
zA!Gd_9c%p~+R7j>!71(z05(*H{PMvS!^?+$bTssY>9%?-9x=i(4TOV7t3tXr_I>T!
z9WiYg8@*NEb{F{Bsq+jDhSxivG;*<((C0CO5D`ae;<G+#HHKRyKDS_xH4BRyjpj=P
zU7)L^p;l>KcSa!Lp`H4f7}~GA1l$`8u<y!_mCG<5Sy-}5ld*Ze;-Fl(b1wP}pfdWF
ze_plt65gJh)xRpQN?)063a&vhx!}1}%j5XH5kny&oqIvX^^okXkhg8>=wxwCjb1Qn
zI(JY2a5oX*JHxOhSi#lK<~UZ=Kqm~Jw7x~eqVqI}>~8SajV6E0-w~05><$5IDl?fv
zq#f95V8b9oRLcqNlOwE*G~hby$e#(!mk2y~0x#j#3$6^V^4@KA`0_jk0BY!6AYQ<I
z(E$tQpjB?6RPrlJ8IzPruQXSW!T?yV*XrXM+&~>DwSubFhbUTmEB4qytc~w^uq7Ic
zYKOh&vrEbje+Hq|27`s9jvjTYtr|sbdle0Av;%z15AVyMbYv9JRG86H4@ZgR7FEUP
zv3|YGriVK9hhHyg8D0v4mkxz8w<1+?pP#%1F{HA8zKt|(_k`H`6^?U7?2q|Q1(>bV
z@mXx+fCP=f&LQt9u#)W3fcv4Kcg^4g%0R)j)Y2*gS5}#(DV08evbAhXO8N;Hg&rtB
zNS|S702?oK#WK;7N2y-c;<M)q0pa=WhD4S>Q&7Ca_;Py`pCZ*|+$VORqVc^VHXZs5
z+CAAcE;_v#D!T0Kem>PwmwbGd%VH9*Z;NSmJxPDyE*`h8kLr7uVD<%R%mAap&=iC<
z=|x6>Oyst+kwD8GmHSQnT8z~|_eNg37;79Xo6Q>1MZC)*zIDA3Q1m(!S3XT(*X8eK
z#TJjB>Ma+2kMF~;H`W+3#9g%lw!s>aQ+ByvD*XzgMYL>lQ5(-t`cFp~aK1Z%R+(`V
ziqYIEwe&>vOSxPEKJ0R!s_lo*PBl@Q!l~coi_AinymGpbeU4>6^uqPeu-)<U3V!8i
zoV>KC-XD%S+{twS0_2NH$;GDYFr`a8-SSh4Sz9;~u=O`L8@AR8G#XsgF3BPr>!cZX
zDomf&&49bPwx~UB!_<p!&PK$Dxoy#(Y&h}-#A0od_f8>M8{47pzi<A*!d<GxF+-fl
zv~xf6_fozA-SyvB$q~6p?GQO%HX9q)R`EM^#GIUb^Wi!EBUn>v0Qm;Lf(g#Su`&>a
z?BWe*^?A1<121OjC-d&g(|?IJn?q3ouN!-$!~!HhviS}EwMrOxA2EX|W7#hw9_?PC
zh}j`>xo%EWmXkvxvu(8edwhk~&wzb2-(?;SkLWgeBF2^o2nAH0?51x#ui5f%D#Ssr
z48B0WU|N&4=$DuMbYCI+`ZO^n<&u1%{!J{=5E_Hny$2(H;kTjm25S7;npQfe2~L8X
zrkUb$9(x5Gxn<GN0DT%R;)}k>Kf(s%0I9%l#|Rt+Xd|40(l(-H_pWK2h!&!cmcQ9I
z3XlUeJDkAQLrZu>QYN-?97u(?FC|L$K{Y^tmR<}7f2U?+VOWd5gdDQwYkAoJ6g~R0
ztq%#~ArUn!MG(jF;l3I<+2^@vfFUQpkwaC{<ERu*A`gG9t&!nAD?CaykQsh=@{f3D
z{9=)ymfDkSL^yQsL$wZ%OA){p9mtG{0X+)0PJV`P?kcss1Qxu}3SY6kZDe}NCPG1Q
zg^v^H2Cb?%1B8)prt#YGG@Kz$$pMp+2v8y9Cc8L@nmUZv^rf|23ynHc&zZYG?r)|D
zoy3*?=|ffZ9jG2<QHLgD$0v$si1<hb_mRhuYgdI-WiCghqfY%X1Y?af<4?TRERN-s
zK6u<?(||xt$HxZP9P)D@>x|PCE|stR;qE(FS5(@Qk!bc2b?QdTLVEzzP}JUf1L?Ej
z*Wf~zSDULJ)CXi`@bT6MfW1T_lvYxFZ@n6h?UPBv5B~t?NN~~A{)zstCB@fL6VzE<
zsP6?=$|QdB&}C&nPo}k@VkZH`L}AdV&QObn^q!&u?YdNJ4+U<x$MtS9V?>wMNzYKG
zx@oZJsp9IV`#lFjn&IL#B-Q)aC4A=LU$Cz4G!taJOejn4nz|{zz5?>El~F@tsQdl+
znkRa?+vI$Oo8!(X6IM7u6QoZvBlal)BS_PP!ag`Nq$=Y$hH*=%sFGpuePR6_U2tB5
z?BJrLn_s8W*lk12RD+F6Q%2FCX!t+Zn49AU&`7n+9t0-;%0^>mmH30i{)*T6kh|_x
zI#et9B84@KjKj|yPmJ^7y*br-JP-$)a(oP94BlNoxK;Pl3v#AB2*)qb?Go`{Q9ywn
z^d)%;xpB)((+`#7gbFOM*#pz-AR=Oj1IjTPW`Q)UG^jJa6k-pY+5JOWDfj`hX$SD+
z-Vg6s*qCrQt?BQA&_Y8+@&|-?9}7E!nBipkMJeo0XcifMFDoDih93IJ%}}a-P||<K
z*XLF>aQE8Qe9+^etDRHn=)y%w*#$qoUo;>RUNblcdZ0g$#Ai+I5#nwxb@WW~eHuP1
zAoLGjM;V-lS#RVleCo^x++}{gJx{E5_7ChCT*lg~X~O)?dIEKUa#@ph9mJJ@U9g+!
zE*DM+KszKg4D+!no^Xmdv&P2ckw%GLL0nTz{v;oPuF&x4w-9)dq>(vb&Z#@kI(R^6
z_f*=3YdWtbP?fb!#~Q_7%07dWqVusgU4|SiIKyHjBQDvFXcUIXpR%YAUY`2)c1I1g
zVk7&jQHTM<w2`#>Dag`I$g~1o^t;VyujM8Vip7D`w^|xQp#r^J4?D7Cfrl8Nkq^Ge
z%0%;}BNa2l3Gy4<cE7~F{oAtI&b+83vv#RuA^SXv?4k#pJ^jo9IS1Q`qfQXuwC@X$
ziu<lKMMKQYf@aQ=(@ZvRRIOiko;?NZ`UAS@<ia?Cw6g4TPVI5zurffr9>S0Z+CxcQ
za!pqwN5YALmKN|jSq#wW_x<S?+CPTb3^J>w2{MC#EoRq?+9!+D61Zp!ol*fl^AO-v
zK_<(GVn91cbu;{9%~@fCllKH-jlY_qolAkcjtk22+h^ro4K<FPH0B$-y5+@O7r5*D
ztu}ga?EV4UnOt%hyl&Dpd9sDy%56->ST(r_^0V)KY(&y6jmHTANu-ooRnrO-nycJ5
z&!)W%lVTLgv8fCrpUr!T0~B57`YYy{LSEX%h83o4@_!+?9=OOvZI%}BvUyi+UO<WY
znD*k+AZcEajLfg?JsGIpI6y=?KmhsQo7}gTc1o&55<il?s0UYUr8|k8KehWK`-V1&
znDsl7ZaTE?f7}6c$plx9e7FHgTmpBq!51gJNvM9Q)AQOi#1rEv<ff%ppg51LCa;RR
z;zy@*J@+tkHnia9-#sJJFViQeYe>FYY>rVB+fp8BV1An}n9(sCNi?}&<J7zjv^bfd
z5Dg$nyeO!VkWX~JGFG`iuf~xuRR*Fc!hL8A&57mlP&*SK(wS-4wwVdY-kp{AIBX0@
zD=rzi$-j2#+d{Q=f90#LJ|%c1yms%?-Wq;00MXweSZdzl$SQcv#>0EhD!mOR_L(2i
zS>+pyAdUT-*JUUJ9pOaohTdPnj+~Qz6wKE_C^WpS2&U^{b&P8@GyoguT)7CgYprxj
z4Vwpg6X@1#G~zb;fbYQuMoix)f{n?^&CRVRzJnV!e$%e_-r#YGQ?JOjvW9{f{@1Z6
zW?<T<y*~PhX2~{S?`7ZAFPOIxFpw58?xJ*Hp_f%bLR$8d<tYM#H5Udojr;P_y2M_i
z=CSL8g$fLy8JYaBP4Ax}FX;f%@zU9T?$Iu_a`~RvY3Dbp0Y*&)#%PJek~e^}`x`8-
zE7<p5;)SD^*;qx^jDz=vr%BtdoKvpj{f%$jivqScu4=#C>)UjFQ>kNc=-0?KprZ}w
zEMeQ>ql9?xE58z*-gKO*+Q<fc_v8-aPBLSS98zhK9M{mg%EgHW5%-gtwIc9d(d5=(
z@YunJQJ+=!(dcB~+Z_dJDLpYeUmva*@GocxrHc?Kk-={<C918|V4kKif}hiBW^34P
zFfOdH7Hfp6o&^{gjyk9>@PRrx;X4V#_aO7=hTfJzVb8sDmM1VgQ&I3Gh5eTqAS9)M
zfZF4((iFUME4)@4MnN{nIOnk=veS9^8+Ap*(W04^#(6#q4pc<1Sm3-}K{g_Wz95KK
zhtVaul1AoeNEJBOdVxb+M(7DyRLJaQ#+vy@Vpa)QhR)78mGAf$ql_al=PL@a2I)so
zzn(KTzb8FxTROAS8sgm|XsP{<G^wWQ%;su!WN4W2x`}^!n|Kj#(7>*nc`lJA_N>x4
zcTz=tzhL`HKkH%@Xfi)+@NVJoy!8C1ASYf3JSS#8{-t_gDX9pV_7<Wg7lACV;_4UJ
zYNXXnfS|W{y>Vw^%UUuA`5CaOIDs}$QJ-v_shA9BV5KOP!TW>!!A{xxYnc1JS<J#C
zw*kT&y1MX;9%!S(^zM03aoJ)ahF$TedrrJbWTi*R8ug1?^2&MJQa&uMWETwVI-s@E
z3Vyq5&u89Q(MiX`61BX7>MAAwSgM91R!xI#Tx59vqb5@7A)^FRQH5&MK@2^gm3cDt
zx{N+#NIe6^Q18od4pfUa*)+3-C{bs{RIKvD(+TRXLzjw{Zt^<r#j}|sA%*f^S<*9j
z72hri4=$i&m52+$yf>yu!M*`f=T3Y%b=pu#0;q{}su-2Ge9VYo^5>CJ{v4R_9Dl|q
z4rshozom}QUw8mVx)gGHNn#J$k0pfjLTL}dDrp<v_lH-K@6w{Uf~nrLp`lk*RrgXs
zJoK)CBgL|p2`B(R7i9lpG^kf=eD`<2d?<<-H&C<J;QB@${h5=lT|<-g<E_v)sMg4o
z5^YstKIf}j!^1x;9Vc7VRT}v%+cdJG-6ng=f2KTI+MVCVZmY=3Y8~Vd)dU*KPi3RL
zFuAxzH3^Aq#uh9B^exOs`LCa2;G*b7HXlnaiSwg_qdpCZ^%mJVbJ{)eVI&^6LGwmA
zyR}>Ksy5%oeVWG}xv?B9%8L81Pn$z%QU94sJR)+$`Jqex#7Cs$5Zl(rTe+)Wa>$=z
zxu%$1hw(sSAiZ4rk(ra>z@)6c?|lK=4Hvo4i=}~7Iwt}TU7%o<1FQoVf3oJPuIRNb
zWDQR^qtf_-`hen}n*%YU14FIED`LR^P|o6HUQg(StmE+QMxf#T>Lo^9j%n^9$u3v=
z0<F0Z6vVzdu%qzWJIJlPb+ZDx*@Y`hHkIzE-WOCU64j*rS)e80s<5a|%_f97!0(y!
z0_($5I#k7!D6w1=oOrWdbC;8p4+6(|Hm}!osVAZ;Zlm5JVO~+aK_!G4+cI8p0Gm01
zvEHh$hnU?ctW6pN=upoB3i|VlQqwI;@HFhLB-3j_dPx&doPJ$w=6gIti=L3bACa9o
z>dmXJ^80@QbmHZ0e;C%SH}z~q^+B2c3_Nt@FWnYucsUhfe=5c1Ha{H8o9#LwA4xYY
z5K-;`1?9A7JHsYRtWH<@9%4%OkI8g7b~>(D5n#>5hR3nwPw%FwB5BpouKql!y|A9i
z%@^ofb<j1C>ZoxEH}kI7b@80TZPrZYs@;jv98dhZeA_0B){zQyX&D?GuU3e3D)2v#
zihU3GG^OfdbWZJAez*p<w#}KV0`XpEnn`(uDxh#&xdOe|ceY1cce@VNi%AqXo_ff~
z$`8lMa6jx18O+6u<;1Kw{so?T;U+usi03$y{|Icm`i#={=y*AMOy_hLh4oggH(b6`
zust3gwp@GgF}bzK0)OSpgGyPc7UpNTh{)%loYwE%)1)f75Qr;l&1TGzYE;65LRC{V
zo~l+8qi*Egy4>}C44~iAW(&@KK{h>Mlu*5WJiYL3u*Xq%Mryj%2#`8}KUt4lrC*Rz
zo^gep2<cS<1Pcc!E^#9V&VrzU5AupU#33g>^vXgJy)bM8E-@e;L&b^!u8oiEN-jv%
z>f@pLGs=6<XzJC1k{@=(M6SpQsebvexiwwyy$cUsvC`CZM70qYK?!1fbnlj{=WIiL
z6rLfrL|xVD#C$r{h?NS7&dp}kJm&vMaDgwN1+NL=S`maFsvA9zo+j|~%-o=3AUo8+
zcAf#KSZ^_^OC=th=%E@L7J8kKIJ_>XrX?Rb5-nAQCM`1IxtoE?G6a7W)GBSi&0*(4
z1lz;m;t<~oo3lIRUdO$s+^s`r{CnV|Bm99|%Vh_Fj4B{rmQ&8%(qxyV2vTXT&p^<;
z2ke}cLe=YALwgX}$~Wf}fVX+0>;8xg4xXB>O}`*{GS^yD)!JT@do<Rv4j;JSw+H&_
z8*DE%(^|!fiYtu9zWFq#h5+r?*PTF$7(6(E98ifdTJ~=bE@-weMr}mFEzHR(_>*RU
zgpx`B^Vccw#X1##h@oTdM9DC?{8vWf2=%OF_ns+(vu4mtgE;V%(Z*mM4ZkB5-)wfK
zr+lTKrSkYbQChX4RMa!3>f@vrD@S>;K>@dV0=pVenHC;rLlC}Sr>70mwA14eOCtB`
z!~q;qgc@U$&sEZ=n$J{3I!TW;NuwD*XoXZc;kxa>?j+GwIUb>i4Dv9W+TGOLAsnFF
z;p>Y4O_f)UMgQWtwJ5_kGdetCwi+>0YJK;|j7sCT7m+Tu-nxBOw<?#vrs21}?xn+)
z9PGzuT|Z@=+>lXde)eJtET`ps+1B0^9Cr1@s5Ev7dOMfs<(6SerxsMliW|4SUl#ZB
zH7)mMb*9G<PlA|poB!mXY-6?J%zHL#hlf=hiK*y=;qFkf*7(3*FjWy`oHf0)mn%`8
z9~Gb>_n)!Wt6Q|o?zz^ef^q?A6G+}Rg@77==QQcL>CExt{^Sw^$4Y1PcznO_Y-5In
zOx1|SzNL)ZzZfwB>Zj<cHX+0Q(L8FV$vJ24>Tqd8jS1BLTUK6$7QGP3kkThMAhMRN
z`nd;a9<$6xToI?RyCXmSUW!ZbTY{t%Lbz?|7~<n&Nfud;erksqgRz=VsE4bt#$3<q
zN?3ii$K|84S>&*nmE!xImK&dJ&muw+%IhcmgKVu2QZ5D^Gfs@Ab`2qWBu57vuSjkJ
z9MImbrg0UgRicB$OK~P8;>!(+d|YN=(do(WtWl(;_)f^(HBPOlPFku$uQ)-F^=oTo
zVHL{=T)xE*GRodEQln%g9CqXeJmga9oov%|^}w453T~GkD9*fo)MM?ekDdeMefPS(
z4t*RxFjdA#7Zw>Dl*ki*4R4Z*yM!(pMU`QCE9KnHdRqm2dZ<e-a=8n|1$EB_ROWL9
zk$1-Y1Ap+7&l*cMC4u?nabChESh^ch^JcmmlCx&?-MX@%)7a^@C|8j4WSkt6Pr0R^
zV_m(gWyR!@N@mXC{^pf)jJ7TMjZCMEW!<fS%C(s)x0SLgo?^KJ$NX@s#Q+Uwj2iRV
zPTM|o$^>zW&zxpxI4@dFkh-qb>t&3h1qUsj?E*Msnk{+k^c>BL<Ks2o2j34PPFg2+
z1ceG>&;^$IkaZQlR{1%7UXc-%l+{e0!npr5m(#>n_|<cRu5A4oenGY)QQOuc*!TVg
z8j3;-nt@xI?I+UNoV~QSIV#|GIY4*T#s1Vu4w+SXk&vHh{PAj$R?S7tk(>P3%x8}`
zimQhE$5sXb2_hzahWSy|_EduPg{|!e4o}a7PB(TeU)mCmw0=#yAckIIU1>*DpRg{P
zJbCn-*`sG+q1>mPvoB9zQYrqp69&kh<p)+OgvcPkeHTUyexzb-(t6JBMTS^N`<4J&
zEQKSoD=8n#)p5`E5J)e*ek2uB@ZtX1iko|9On#+)Hw)35Lp!}ytgHc`0uM_rsQi^f
zdosay=>kL1!(12?jOuC6Iznp-pWyA5nInJoh9E2&>NTo+(@(`d4cs)Tx|l;)ITX+-
zSElRDZn93CZ=l=*`|(tvD@kdFEo-xjf`xY^p?!1V;FFe;%&whL9<k?j&l7h<enbq$
zfobZIgZz;;zQrq{CT@-<B=K(XQ+9no@^3I`)tUA-hz=`+<m9qiI?EpG{L|kEWe4ti
zY)x$Hu^8I50*lapeiU)b;S5s;>Q05(65?gLjAwR+4T}u;!aKTiuy_pAeCq4;_$OzF
zKmLFTzYorZFYbl6gj08OT##7-53jc;9IolA7Je8yS_*Osb3FHI?dm=?x3VR-d=o1y
z@I`fL|3Y`O5<(%kA|m8b5=H|MFyr-+ELOCK(E71Eu+8aA9T~*;?-FTEgL3W~0UF1b
z`|Ophf(6MGxkMyWq&C2#yzx!E6|(%H+2A^_3iqbzAmfD`L@mAx513-p<CFDnmFQ&J
z&Z+z-JWRG)NF}GLIc?lOIJxunHxzllK%-XAOGhxnN7<lvU+bO`GeiI_r^jY~!h@a>
znvS>sWC4mxn5SDW-TG{H(QEs<bI{7J;iiHH?1oYiL^b?_!$2SWEGS3%O8PCK4$#5h
zK8@ZeYhaXn#*^8qfDr4!fwT2VNFl0ZsPBXMG&f-6o(hdE&v{Bttp_Jw-FDbO@7_H3
z<g;6=*~+_V<J>nk#mbhV;RWUWu>~ZQBp~4tW(rZ!i<%38t(`j8rzsC2kBf>@(u7Ne
zip|dIYIIIx*4vS-m-)^FfR>e~NF^vs=BEM!FW+d)t$XsNt<zzDD8k+z+<=?YzDxfy
zIJSHS(D=_StgFvJ<<y3k3+BMeYTeJ%KEW&=SU@c>Re2XbRrZ@=Q1~JPt=;mM2d9Wq
zL7T2ty9%&=>!YVwpQm$vh?cg95>o=?wPegC6%v7ON-Za&*dY9~fSrlEfM26e8YZF~
zYgH64QtZQ8&EIx@1~k>Sx{ONO3sPJ(k^b{f0A4|X<Yi%kZEzcHwlj37=`iEb#fdtZ
z`(0~*lOsSikH}(Lo6^BQ8e*Lsn>g5vNBY&7Q)yz4A7dgnXBB?Y(=pe$H}cq81z$oo
zKtgjp<F$2bjRB99NG$lc;{3U`jxZZr@!Z#5?tdP|HGBnnz-@pNcevG-)E^f}KF$-E
zK$?1uwMvWCess$Twr33(=9C`O-kgBMGSP_jc{Y~j0r&La<J7M^^7HA|ng-llNd0n-
zBU#d@34~UQ>Rg!A`Sx}(e*9>2Rk-qo<5sKUNX;6vKHcQ+UAAX40bxj=_+j(Be-xT{
zkVq<N>I)U@V4xvhGVMGZf7f)w;Hh3^Pal0xB$Ii}5>URxWgHqFXT`p<dj0dDq{cob
zT-xAKx&)b5d5`9D(98w8ZD2g^V>9nLOL_C)cxS07j0&zDk4@nJ+z`>)Pb9~ZN-1`~
zSd~W>gibnYD_w|B>p&=y##^RG%>H>Iz)<Us`5cTQA1{1uXSc7-iIMJsY-b0@EymD*
zfamJ>QU`6ZS&Qd<l1EEUARkesJnXL@_m4g0z6k&Bq<vq>(rT7f&fNO+<2yV+X@P#U
zNEZ^Thx}4&{(nS$by$?o*S8=kQc}`LE6ozpp>zpIH^S1=-57up(hbtm4bmYUOM^5@
zv%n(Vyo3I}&-=I6g)sNbnR7lhP30?J+`dl)x0V2ZcyY@uZOgckIi8%y|BQnVCBJ54
zSL)5tq-}{ZM)r+OY_6a?LKXogPxoXb&uZuIq&P9Vc>Fx$nsVr7f2Q<4S0(QT%vMhM
zI<Z!3Zw%i$=Atl;)K*l^|6`J9WY}tF3wvbpA$0kC&Nctam&(=R0+K#2T4Wb2(=~nL
zJL7S?{;hx+RmwO3SP!uA!Upg|ECWBqxm%?kyQi98r7(=s%Q&Nhb{kw`SLfmP?-bKA
zNW3BofAX?ID5Lh6ty=kt?v&PBh@;s^t9Lom#L_bR8u5Ix+zcX5-Ga)zoX9-rr2NY0
zLRuKewaVaI>HoLN0O?*VXzjV3_C!P)3agK~XtDwvJVZ2*$!00~2dvt;_9`Xs({~|L
zYqgr+zO<$2)#`M%i<zOQNx(di_1zNka?m0Rb;fnITKIM<b8#$chd9GG->v$ZFS=jp
zA0L?Y`m0lyOqY|`4(s)0QJySdQvMYu6J!qSd$)N8GO4+OOdGK9@Fblt&#WJ~=7Gc`
zzRz<t&Cxr>mYcPhE!;>sjQ3cmpa()g!7nsK<AOc-z}o&}2g-@vrNE!_8&$s2bKhk=
z8(`e{I%ip_UGVr=oQ55hwf=_=qO$2>P<bkiEgfDaGSDwcB3HO*HWuf&TRUcijnJN!
zX|J7z5xI9HbWWkkaUf~S8P*N5!s2uUlSQb==#+)kmr%`7Z>Du91r8dN7n-iyFa`3*
zFHg$#+1^f1s_7gCrQgQi0T#H^j{gJ+flr9bm&%Md-4?54)lmuFPxiH=A*(V0JQx3<
z>$~qeP1B?M75#`_Liaoz&MHwt9A5QXzZMU#im+*fkhZj;aS&P?>1D}f<N$COy|WP9
zWL8dclfRapV~LcD@r|_Ap`5tSf55OF`WH(WWn0GCMli#a=`dIt#9ql$Ga*B#W)s|~
zN8bj*9^}heZ!0yN8l}l(Ilg)88c1I+$`Owvj5m6(xD+9qIw=Q4a?*|w{wIrrv4%al
zLQBL1b5MutCa|Q_^?6f=*OWbL#czWRSmA0zSxyDD)O^;)DJSm5e)47Tiv)rbC5o4T
zE9tm>9}-ciE{}re@ZfdvH@t+#DbG!yg39ILU-&nUy$a0d+uPq5-(yX;6DyJ6Lu}1Q
z=7rB>kZ0FRR7;p9p~*$6A0&;^Fk;vNm1sBdaT1?MG79^*Vo|%yJurRLT5WU#x!dLU
zgl4JPUHgG<5tR_(Ux|qN$U4Wr;VOWz#!ze#Qgw>vVauE(J$DF2lT2J%xr4mYkb8#t
z`u$tapbo!$ORCI&%-Vrk;b5<NZ2sHnTKf{x{Xujx=ZXHe`;Ys1v7gulze*dOv7d5*
zq_|D?u?RL+S^apgqx@;NXcQKEJK}7@fpJKM^KTd&c>?U-@!y;D((Wuh1P~TRKoh-e
zX)EJH9QgO_GH)S(Wq11dNw!6mk5oFJq&3g}cGaxrmZN-2lM7IzvH(Ru*GgV1-9FOX
ztmaSetK!zyH>abJX8wn^-i>~zM=F&qCtP4$3iK|QrXjn_dg@jQ=cdC`{#v;nd@-;U
z6Q~Z2kHh6iDGfeb5;pE23zQ}HP_mHlf?l?i($0?29+wCjAZ7^+(CK^zcx3gVFGKo5
zsahm{k7dX)?)SUQC-b~#ZN^H}sjQ`bzL&vJl$o307R+XEjp#`*TPfU3mnw0`f&E2#
z!{UL=r;%4Gku>gS{k&VBqMQ;vn+X#JImXM(w#eHigF)ssSXZrB**l3n_&jw%_?`4&
z`^<kN1Hw{GIa<<Vnu@~-Y0vn>m+X^s#&IM7q{Ze7C)a}IoBFtQmD6(0@SZy~^3(w-
z_#Y9w$^J^?jT)gpy8|u5C>?dPWuD)$tiMd#dobCs?oa(vzk|(Ph(?Jss^tr8TM)+6
z?HEhR&K9-w`5HjVuw*Sa-Vrx-<gQ2-vxPuBE`kJC9kCnFW|Ud^_we~n@&kCILcPby
zM`teow#41+l?<XdHT)Hl`}_FMrcVOe#8L7}6cfzgV#jQlfpu)m0|~Tgg?GxHtQRy8
z1__x*)Vs;0(~s&r^u1S?4+R-)ayWoja~lnWFr<(15NcU&$kiF@K!SWr(TtL!Y{ox1
z$(m0LNAjqS^Tn^`49q)v-oW+<Hj;C5*#<kc;#Ui=FLOO+c-5L#c?I^bZu~@p2L4e8
zn|fb8X0(n@uTtAS++mN6PsPdyz^>1Fy<CkpLLo4|$=tjabKl>$)6w{hpG0FgzB6@c
zb2u@jni7Aa%KC=51=#3xxXp{{Jw<*P5vOx9BOT5tPV=S9y>Qw$Yp%YOyp${EPLo((
zQLA=ot+lUvxc#K*E}=u5rUj+{twMD51hoxKeBRBr_MrP4vs(;Huo(|f73Kf1!IIR6
zmM-32miyUX`>ZAy4(O`-HhRRQPr3Ei=q|!qrp0HJ?oF{OwOfKj1v1IQI!=WpWX$B+
ziswv9_oojSL}pk(^oz@&^v|0J+nQFLPYEqAKE*dZK{s-Ed3=0LQ7TUJ=*~v@UL}y5
z#vv0qCSf73?z?~kIRrEQymIVH@{Up5#N*uJ1qSA5f{S2_X;X6>nGm@Zyn2PMW(8ig
zULIM|(z3T!7((RqKyX?Kd%w1}G4@qdVMY5ZBqS-Rvr>)V8ap;`A3Ij<nnE-aNvFzO
zaSbYPWO_9CjgOgh@t=)+2N{}|+*#~Dt^B34t%}&vixXP=@NONvP-lHb0XWxCgd8s-
zjY9|z)1G@lXVp+j+Fw$*?R{iF4PZSAFTL?mua%BawZy(}2d`3O7lx-N4#z)Nxte){
zv7^>*#B>XRM_{Yf<dRGXyLm@3J3--+PWcZYNkvvKJrB59Jo|DuqEV&55Y=XTrvZ9d
z9gx(#=knq+#dz!{0E(@=SIU;)^O2q5{c)dj%w{-_Ek^QrDT?&uaUoALFq;~b@0aIA
z4CPU~eaXn&Li7%AZX$Z8Zg3z2Z{K_mqsc3=tQTcuP#}^26`im)g4Kg|F1z@#Ed*;b
z66>xX@B(oKy4TrXX<tQRo|7I#oD(270%VUy9!1e_$EdZbsHmFJ)6Lta0;CYV0tay>
zS<m1r<j-}L@`Fp&>+|tl1m-vmS9TVO62%Y8FD7TbgJR(Z7YOr}Qb7SSp3i|RCbbKN
z;a$O<Z_n}o!}NXSVah+O{K)8QrLIMz%k}8_$4D#P4#KfVf^t8lX`Z2y>FTbDWz13O
zpPbZwsQhy?)Q%qPVGmeY`udv}x0=5Gn`uLe4Nx>zNXpwpsPyLAj?A|<aEq+gPoE6v
zSZoi7>)6e(xLpGHZ7Acf!tIVU!=neNdNB@4J*z|UOA8gC`Oj%%zw7ZI1>R?Z^{J;U
z;;@&LxklS+7g=r4+9uTq%czMgjb(_`*$Cz8HMoo;aVy;~d&U?Z6}Ad<w8qyA-DHRD
zW#`wlu7m)A`(^>HU9#GG@R*suQf;y5*tish42>E}B0H0sC}w|Pn=xv?4P&U@yC)O_
zl?75ar0NvGKnfGcjMvLKe!M3%8`s}{B&=OJ?b@)IK%0NIF^=cO3VCMc_<a!{tgre(
zvUu@JXd794B<yOuS6S&m#XmJAeigUd8b?XTQs=@w-B0@W^>^48jr`jPL(=#T2lcyM
z7Wk8xSr<Bn%YpscDJ()el|Q}uJreE|#>=XJ>D_pK+>8fGs1*j|Jtfq&USO>G_M`ju
zYZ|%Mdr>--+tOyoU-U^|GDu64@Vx{s@masbMQ>(2Z40x;O-5~xorzY&pO$fTD}I?q
z2_F^|isuL_k{tb8*`#%i+xuy;1JATJsP8k%3d!6m8{eJhN3tph{ZrRHxg`sKHqv)z
zd5d?$0|{Jno+$1o7E_bJmkJlq(p0Eo))0uqf&z@BB>UyIYhRi86L-+LO(s=FU)zNM
ztFQhAsYb~3MNS@zaOQ2qNB4WG{#Y<qj3b&6wydgP_;X;aj(WCS@lN^+Ba;VEnR?~K
z$2&a<5a&RKHY_^UleTMVACxZN&;G7eW19CmZgQJ{<2KKKANnD_(<OCYpKB(AEKc=F
zrr?h{F*))eK)*ET^OVSv2bq}eunj0O?Y}7~KF<b#8MhC^FWBGB%=Of`&lTnso?Y^5
z6-a5mkudi^kh`|1XQ!%_*C_q2slOQRbt{lLto;=!9Z{4l$z;Q<NQhwC{F(}eu6|eN
z9(U@mZ=j^*#T=nRhXP!bd;jAcP*8+V*e-;!Ab7OxD`PafUl0oSrz-&s6hh2-%aXA6
z;p!G1?JljDIpn?;$C5#k09<Q+apbzC6iP{_RB7P|-D__?g*qK+>9&W1=eNWvF$(!4
z3QlLS)iXE4#nx*Xoku#r&5(&~;svLz&LISpS_c-PQ4SKm+T-T}1{PUQ$Boqf^;)~4
zdTvw#3mP7C&xjDQmunLPb_VD&J_FI97`~j3w87J~+8iGup;gEy>|48F@NR%@cX1ye
zGv<4lKnn-Q@aY)se&H)=Sq2mTsALS0$=77pEgZKZYGszGs|z;l5dBAMOZ<&BTf1i3
z;DV5eu!Sz2DiZ)jA~cXOO=B{r$&Gc!X}QdX;_^k6j_M(5+U|4?oucF7$V2+?CO0U+
z)`l^(RLxq!WDMm@DqPY?N~(bI)u3pNjGg2T+<bv8>lH!H_OM0!{wkEk^&iBt>J<U`
z(UO?*C{hR%kM^$1%MUn@@B(gw(vCT`XAEn%wCL6;jW`h<ns>x&?USL4Cj^oid#;UU
z!0BJ_H1)i1BFRuk+OQ4f50P2k86+qX`a24OJ&PDEp;+m3TVQ7p94~d>#>$=#o+@#m
z5C<}?8*Cc9p*y|AIM@5z<>C%CB?Zf|lnO8fx;)6)a%tv3h|X$wC^SW<9t0^@U1(0X
z<Ii(bmUkswOSaytSI^kS^sSV8VJWCA?=+tFZc>utjsJTT;aOSM$>9zkb|4LLs%+8o
zp30`4Ao@Mjpz|QXHtGe($PAZc26p5fr<A4k^=#}EjtD2eZ_bZI01{5t-Tm%??hEL8
zCUrcG7TlYP7~^vk+B<?*9qe9Aw`2WG)=PV~l5qVxyZA;^NFa!|MDf$^DQhw-YVtuW
zLoMpy4hRG^on=8+nL@`Ut0?BV?s6*1BN3o9v9dP3e39t}P6^-}V*THyexEN&!;a_@
z#OusyGQTSdgdn~TxCOEyAG<4g_}Y)7DLhOrzfFA0%6lcx;ia#~c)B@2u8S7)aX$^%
z*OV;|oD^XsUZj_F^viDbIrK~hc_eGHZxo6^s43x<nZnUhjB994u8+8ShW&UuWn&PB
zF>c@}0S)i3&6z_p6n6bKI}q9t1JY4l6j+v<0)Qqf#3PVC&ANt@M<isR!SD40L!E1h
ziWtL5w7$5^VgBsorAEtWF>Dig)4CIRaM?tb2VnMI-_A7Rp2?O9wy)f7e@%5JTkG?T
z6^7yWR8)jxQ=r>4eGWCWjifg|r*NpN+X>|I7;Y?Y+hcRo*(bB*MC0fVs2D<tta3~g
zUP=11I%?L{a0@4u)0ix&kSv;9xFG5+^wKamUaaF)(`vr;zGWev{1~)ac?{*Zttj^V
zeJYZv&ap%nUU$gD@-PJXZ=wGZuy*s1`vtY%ADU<&aEexF3){!B<czn$%;9jdi**0-
za9j5DTF&2bepTed*7ElXSH}B&O`LK~b~k>kMQl;-HGI-uOZSrvSE+f@E^u?UVMp}P
zuU3D{o5iF3+=j77dDb*#TLBi}qXDz+#Zc=CtIGW=Ezbw0RWtLB*^4Pn#Uxm8doHAm
zY2L};F+8ZWS2|S+nNu7-ilX?EIhM`ptod;?xg+-@n><+Cm7dksnam!Ow0O?*b%2g^
zrKV!h;z=Rt=?7}BOE6N>sUEGp#!!qBSBly|dS{+NJzmIqW!X~gdKK*FaGiOhhM98d
zZDm(6KhLNB?4X(d6;}xZ3Hb+cJI9Eo)18^hoV=eR*8!d-=kHAV4Ac^9rIY7K!hX9@
z0I&yOn$0MRX5CUS#$aD*$2~JjB$P*LZ9eoo?^yLeo2v-p71^x`SB&50Y#3|`*PVBn
zs-+sXe3Mq}$Bo}&dQ}Yhx-ieDKzpN9QG6;VwXZVfWO02IliBrmtxW6D)29>Gx1UR@
zv^`hEp!wo}Y?5)g^Z3-gdLca<>2_)I_50g`;U8Gd0iTOLuP#^&(e9695d_aMlJ|PY
z569;<JW6vBkVN&J>dEEaFXnM&{al_vi(>k$jUY17$(ai!i@AIUCcXPIV?#I_6ZreU
z*C6?Jg!X)93R%ZV#`Y$#ZoxI)%&a*_Rj^cCCEFUR$z5ffCQ>Cy9kh>6tLis4_$}L+
z$8J}NOjs+Gz{;V%Mi!x)9#wlHR1IYPMvrm}CV(Rx%m~TIZ0^b4;XWHrNyGOhj41<G
z@tFq?e59+*OarxtC^tgRGA2~wHIx}3MO_al+ijszrb&y)jFTmDj!XJlWH=^$rhibU
ztSx3de+fPP%Vo>z2Ii&_fh5Y`wo8f^La7wRbYIGmP3||a6-gxTF-OY1lSC5O;@Cta
z;ChrL6eNibK2+F%l|IZJIoY!i5=B*PIIJQYSc77xvkZmDt}iBMV`6Dp@qJOT!rJWp
zG+gJXJMoFS#p(~=cyA6N28zDA1vJM}uqwpgA-eLI=Rsf&F=sn>>8N46pSB{VrA0SA
zhh17-DCOC^?%%Jy%6J-u#dyYOcJlhXY33YRjHT0C6~<c=zp_pbClpkeTX{(?P3M#x
zs&e7B{EwzCzuFMQR}`;JdXNsr$7q$WoO2Mmc<oZ1;_ivxwI^_wobxvqWLh*95>Q=B
z;{ek3!Jq(q&Z>$U-uOO^&o;+y)0ZK$&qiMOWkXI|(Eqvv0<CDjm>T`EEx=qZeW+lu
zE*#{Ff+tHDD47<>zjK(*!FeumT0%+vCEz$#aMG(}u#*^}BdYLS>`y;Etd{hZ%NvF4
zR56+RTTKM$+M2J>(XOe1t1*qow^GniS4t^HuFX3kMbR#s4THWez`P#0qL4R^)Cx1^
zk}cnLT&8W1kLXFX|G`^DGJBQD(e5S9U-sL<<AnLuqy;`7^04b&Bx)8}&(j*URm71p
z+}sj*J}?r=M)9K#6`bfZK0Q$Y={c^LKZOhbM%&;SAZg)wcp5@ohG8>cKfOiy)C4gN
zwS#t&gM2xtaj-V-rj0?A!TM<r_C<g&|BE-bI(YjS6LG8kN`l7pV&jL0CTO3}iv1Jf
zBUHQ%JO0W##kn8++`GXcpfE{)b9ZC@#!74%D7SbJZ+~zhl>8RU`X0=8*6PAw(s>~z
zF`#^)y6i`eyb2cDBWm~Ly0$A@wp7PwHD+=-wlwjn95)jrxw+TtR?1R``QTzMek#5Z
zjiIRh^@R9(+1O}PSVc)S!a3&d12_bJYGPHvV%+M^**$soRMB73UjC-vSt2Pj8@5<<
zUQ3>cHm?w~KZgoJ1K5=`EQ2aLNGN^Z>WRg~!#K7@MOi-HSG}t|iUddlymXpBUyNI2
zi9_%cagaStkkm9A&{|*ilDeaXPn`_I7wxTS;%$zk4IGu37lKKb+k@I<kv#?9Bqudb
zUp0Lv9<Tacbz?Xycw_-*^b65{ZhJ>m_R%|JhJO4$IFm(2>2aqr@1w)}mDI6{Vp`)8
zD@TKHq|`jXEHjkygEGT=Sch)fqxHeh{I=2^pOk#jMDO!5ilH9RVcM5MEsT#Yykqpk
z^LZUv#5Z*3TX<hT41{11k{Er%<sV0n<Xn-25<0x$-fVYAiI!-aC;U#V5HEGz?yS&*
zDoA6NW|%+e%C=xRhFi?SBh~=q#L=n9&~@IJy#0o}kNc+r6TbkHffFf{Yh|wL^kC%K
z-`fix6`cQRnq9$-8w^~fv_>77dx0p#y|UQvho5s9Plr{?#luQ3u`7Ix_Nl~LE5%Dk
zs-2O<BB`7CY=f~9NfXN^G7_W&vqXF<-p15681-I7ddjeVpqBp||0Mn!v$~dbI{i@J
zqDzis{jQXOlG%Ie6IQi@s^+@!O3dQ5?$6m4{a~V$8=UDjZs)zO$*#<e<r%Be_cW^Y
ztW2S}NEyR9q8tfuSHAU~YK&`L(fSv<dQ{UAGUk6&-&jZOAPZy4owz5SFysdeizwMA
zDIX4Rj;;C>Sxp`hG2>)N^D4z_z&<6*D)cbb)U9!0Z?ih4L%yZaGZOvMxd@!>{9R7p
zDjo;(IZ0ou%Bh$*Zi2h~C{gG_80D)A@H4fdu>G}7Jbtu~Zh*@+G;s~(lLFJbtTNJJ
zz1WUKjfyluNUj9vWT(i3BR$M@w-wepJRu$To0`xo!vkKlU9qO~=X3KIcd811_sTVc
z-l!7$IN4U!V7DYA{$5*uSeE4!v}4n#L@hb}Y*dEsVo{LSmukF6lU!JW4j0S`ep=hz
zmNUAaHJ`Y@em?wYWSJu7)BgMn(R|8tlW32Hhx9&?P_HCPt98hLpbEk$BW^vyIXW>Q
zuPYR=dyWUvudq?N>5b<Sgd)qPe73+)@dZSCh<X0BeSNc>#aul`(jU23wKwTpAN_U1
zTK-WCPSET3s;`vG)e|%721q9R&u6!O9ilDksFiFvWK0NeQ_Gh_RSo{`o<CUMksSt{
zAebXmtqf%^X`Y}|j*HO!U@JPYd-fLEaS;zQ{FAV_!k(zdP=fuC`=kMcAt1#_E<D6L
zu<1#%sVHWMj=FeXJ<t0?1BP}th=`kFX*+$WLds!qu`Z7gcfv?STF$#|uhDknxeyxk
z?Mra^xadFSO)#w#o^-tpGGS?mG8KGvZ4+nQI418keRg$tbtdv57CvazI-Zd-mye1T
zp2`i_<-D+TEILl*K&jp2<*DRdA6|Y&W$Y<@S*k!u#2`Vu;!bzYpOe>0yr%@sPcR1}
z4fSH_`0IwuYCo@@{~^^<Ahss^0#8vYl++4K$DyxO<BhziJ6d0z8*|Zn@9Ep)Dq#2*
z)WT~;R!G%g!OSQauTQzFUdVyvgp^aH>IBxXV3_^3MQ5uM-vY`}%7hbE;e)iUVmeNC
zB#8KCTC%hV+opT#Vzkb0Ea4|gl-PTe|J<?kIpTA>0=kGUSOa8#zMx$Yl$TelyNEBC
zV9#$%*ikNxUq&mJjXfMfc0AO9F!(UCBcg1Xs@mrJk?XnC3MB^~Y!46JPG)2vK5y~A
zkuZLQBHU~n<AACRh{#bQ*%|{YNku{dYWggN!5O>|5~M?W@3|W~*mjs0o=qR6XLR(z
zm-HQ<4a}hiIdan$S*gvqr1Uw)h20^Gp=cSS`Da47RL*pXFh2jc&8+n+(w;YqFZR;@
z{_f+3ZQ#V^$XdC5I?B!I4G@#sNhg&1v*j+t+<d~dh1iQuIH4r2Zxt)8VI7zRb8oyP
zO{tB_8aMzH$R-7tU4>-7c%Yr<{4N<bwG-_$#j~d43H?FhE+~V|p-ElKzbyFWrbDSV
z<ZN91Hkiz2C=>dtPFuF;!5ZCdq#(?nPX}B_Hb-*s*CA3?Z>58HgSKe{+AL8XRE?Xh
zq?i7Bv5SdfI<z-9HT({DvyYuz^jASmZcSHZQ$^|x4#yzR0z0g4L=FSm=igkd0nq$y
z)$*H0!n{ej_MWmB-rMS>su(2{#=A7I_h%kl$m%r4=XWi1CSf~)`o5@x9EvFo9v|pR
zR<Js)8=K{KVvXQ0u(e>WhsG<ESVeMDkKdhgkFrNaJ&J|L^Y)Iz-TScSP8y2rbx0KC
z_n%^SHvqqW?RWRe58(Qu&u&xlvnm<oDarhbf~`1$h)=xtVce+pDa+{YuS<Al4Y-?9
z2IVvVxHc?6$3D4J5$P$47kMJj<Zi&nj7yp?Y9z$w?eV;g-=zw-NElvpODs^&nYS}3
z90#r2Seh*N;Gwc$(3gno_K$Fsj@wl~pyioDG4VC<SMmK>9|=_bXz)?u-f=>{X*lyq
zM%f%QdW5Txvb}~Z%^L35*dH7n@6*Ew%HqGg27Poue(MhulXKq}jyj<ekG4PEL$;>_
zuA)5w)6{E9HcImgiZy(Z8MO^eB~AF}4XuHl10M@6I7UeQl0ikWp{Bi$!j#?O3VsC)
zpT#+jb?du)daHM{1yc$}m|ojutoc0C?+*Z0gakULX+4`3zhhTrl>>vy3%qtoGp*G4
z=Qn&VeAc_`<^_y)zG8N8r**whkZ)tsVk?O0zbek;)&#8D*%9m*)X+@TkjU0bg9|jY
zkM4R?!g5MF3~Ve~y|dm^I0)lAW00%^5~QS=!@VV<$B@yKKXg}*F}|egh0bFBhlr2K
z%tc%rIu~^_SNK#nm&Hh9Wb+Q&FXQt}`bPpvY9sFJehbtg`)dCA+)LH#QnL@sXpU>0
zCE^4%>1io2Xv|_pr}znewXNP*2GRJk&jZVk>}%hj8dlfbX5T1Zgj6{)V!%Ij@pdR`
zD-%s+vwcY-n;_f{KllO*t3mXJ{u<X)D<*G^sckHcoisAwZF&b1<N@%A^5|<TUEm^X
z;itBjC>?0&dTQU^`5t!1dS)J%>gb}6FR5-6f9|6)8_OAH=6ScIjfX+P8Izov3(1Y!
ze5e!I+@$1nNeL9G;nAkoa><%4>Qf7cW@klDC5(5#v>3h+rbWZ)imX&;Zn+W0($N?s
zUR>ZU_MIC!hV{$J?h#K0Vbz$6G!Ci3Yrld1!>$979DW8*SYdMTPnP&exibvH4b@^g
z2YF+tPWq~OPVbLlyZ99mUuEJUi>=${YPS}ZDW7wR4V)>!SOvbvx75|47rk90vvp0M
zs+Vge-rm?9nb#n*#k;uOx>Zz-k%Wv@Tc;htU5KtEMwgoHx2K+A4~{8sw21XB-XHFd
zN2G?yGuSC9JojJ|$&{mPd)TBJwMLK8StD-Exr3kSEnPeXyR1f{cIN8{d){iQ8a_d^
zA^2HG##jwykom-&k9X6zkI}OTezwocs(^66-#V%s!?MLg3N`t=IWUkQc+$Zc&*A-T
z&fth(&?ks%>b{pSeA+^0x0b0|Q(a)-Z={V2fANWS<IfhfHapkVRBfb!X5S6@n4vy@
zECcS_H5$|WBRHi^ycNM^^|n<i{k-4*A=rC?e=s>)H_qlgh>+FkmWKrtIE0T}CWMbz
zpBP<CG?C~N1wO{eLAi=9G%97VOd*e{Gn(ZQ0jBA1i?QE>$`2sw$1k9C65940z4$mt
z&IFgGwMmco6jB)0_fC+MRGsrz95nBi*n@baS~qP-aC~Cp=rW@du~brJbS-{s=%?M9
zd<=KN(-h{HfJ31T)vE@&r)41=`?0Zv)Kg1cHb?MVd4<adT=$=MHz$&|eIyxsgrisf
zQJfp={eru81Zjot>}~K3?EHPz^}1*0+Gp!rWopwZ;5`VO_-a&YR~X4t<s9#pe5IC*
zunpHR_>S|pYV)8txiFfZ?))(KB={Z|DjoM69rW(W0Y>(;gEWrQrsvkcq-|I2qEF)o
zue+G<CVC%NbU(y?;;veSqsVyDBSD1b8g(t?9cwL+eGc_UEUp_xjV@DU%d#H^R$x3t
zbqQOOq5yI`b;j~}PxJAorg?Kf3m>>j)H|h9(O^(OQaoE{X9w>eIDYamDU*4~vzS!X
zZ8BO{4vTtsPdLmKh4z6NJcPkn{j!Lpwl@Vm0*CsI)#CtdqqwOPpk0Vl!Tnb^LI?uS
zsRyFN!irqtWv`=Isx@;Nqx-Hv4$1j^S{(615uU*@^x#a_>jldxi2D6UBiHMhS#sm%
zV~rPVOIwKi+M(DD5#Q^vg*pH2#?s*0OXWD~aa9ikriQhVKW_z`vSiS9xF%qggE52g
zBMIgU>@7_(V^ilsq#$hN>!pd#Dej!KKcA8qT)RUJ{rO1+sKI@7#>o1@3ds|T(TogI
zi1DS2+ktu&|Dir1;;9f)xj}G}QG@(i^|K*VR~KC%9(gJ1*MOd8#M!&n_^C$rXkH^<
z6AyHozg?>%3m%@9zl;QwY?y83WGKrN<E2cS8Ir)%ZsG?^@kPJodd!Z>)daHlaa+Yw
zKpN)9UQ7a^BgR60LxhnlW^eW7*2^&kq)>XCt>x!^xE1m()qGae>Jz;8cz~ec*I_x|
zF6!A3&#phpJy}+yrAHRN1F{O6t6+Y}A?%&PS@JCvFRrWS;*!vg7h}aJDt*p0p<^l-
z3Q~8=0+Mp=J}l1P+)VPXO{SsG=U4b-MAx3!>Rb~+^pN?P-cr_r4&xb0vJh<a)u`UF
z#KMr*d2z+-cHzf7xJRF=ATF<S&(ql%8OB}`6ZD$5bV&P4Ki>+l3l6Gi;Gro}xL-9m
z-Tr2wQcs=B)#lzbGciG!Z*HwotJ<v`HB~d=gZ}82VDnuqt*w^8s9_WS=h+j3w#j!*
z_Z70$Vv>ha%nJ$aDgNdXehF>tT+c;Q0J0|q)R#3oIi?90wri)H3JNN94zA`|JxEw^
z3>5Z86mb>dk^FV<KF$cRV{^s%^3<HK_>aKBGn7ZNZAb1qPE*sB)@dmwa5@wd4HD=8
z(Px_@0fnCd(dFu|0>A{jzOf;n*0kI=?cS>}cj}FMY2%xo2cTaudZ*iORNbB`Z6`;>
zi9cgjx9nu#_#w>!3}AJ$SchXnE6VV-097VO%t_f^+9mqJx&uF`9Gb8(z;I|`DR%TY
z|Hi=}5gSDrGf~HoeJX?Lu&Ul`MURSjsmEn@kyWQ^P4lg?Fb{}F5w}Ir73@F4T{N;3
z-b6pX+!@uMK#|cPG7C)-7*jO24=SY{d<aQam)d;{Dbjo^ZM~^*^y~MssZBt95*LVG
zYc_Aep^UjNqY}Y*;hKqN&Nczt8s0=~`Fge75*FPyRtgfv@_Kkh<<^lD>A@TVHxb^*
z6{%DJ<tj#AhZz1eO`-ukW|iYjs=O6F220qdpr1gZ!OUUwnl4hfRjPK^9TvvW^+@)-
zgvT|N3BI@Z_%hj1>hE<riltpzy=n3^OWL0{0xSj!J}0R-04u|V=`@`$KU{=KT68?p
zf{k?pql~SDk|nXzbp6k}7IvL<{@l5cUMs_2<h)xMK`P2zQlm5GKX+-iP)DI&?}-aS
zwH&}`(xJpGr-+ony2~0P?w@<3S~`aQ;ldo=Q1;SR&l{(hu)_8lUiwtXb`;U@HVKjS
zRJeG>Yw(EyV(d+WSzG>+>w@j)w{s_kTf1{K!-$`vxoQ23xt~h1$0-8|rDmXCg#fie
zUnTyL-=aag3x95I%<)5fN>aIgb1sUB)I=8N1LUFO+{|iy&;~6~-ZR#r{!-h(D&RHl
zy%u-ro#pUUIS{m;O=$rt7OQ$sYL62x1a6**Xum_FMIn3+i_Vu&=9Ln-h+`u<PfAwf
z<bsCrNKBq5m;Ue>DqzN_>CNGvcRqWMW<eRVdl}hZ`a)(nb!w#Y)6oZN@Ze4)a8SU#
zaE}b4_7DTxmy5Bn#_!%ejfIYeY2FbOt0bJb89zwe@if&9LRnKy{63V^;87#5BTnN!
z+pPWC;OmQc*YlCZT&{i{!%sh1w4h!4joh%1&x5JEHs~qwzMO(gUqK5_!PxLloG$e^
zLbcErCC_MOA|dyh3jb0_`PA<Hg|LgScq^;IrMTj4Pn&238ejh`f1R?Gzs$IuSGI|b
z?$NJdnjEQ&-x-4Jk>U?gI-r<!yS>+xj2HtOKp%#Nz)X0~Q2sqnoBNpbr@i6qwqGe!
zhhL6{U)|ciUbWU|gWeD$OcNknqw<dWJ{XC{IY)zCg2~=Ve&Y6HxZ73Lre1WWad7u*
zPdA(i;cFznO_SftwO0N6!QNH86!ST2rJ|1)_{vl!FO#Qq!(Ddgi}^*!kJh2ti~F1I
zHt&FIr8jw3u;XoXKEt4_UXCki;ddRDURpesqnkg}DAC$9Y#<La54)yVy}1;|mqNp;
z@UEQoGwA2B;4$pRLH7m~xo?lh_?iVA&FPvXxZ!^6N_7ig>7*i5yrjN^53i^mh;@H#
z_DJ;l-Yx0%eSx`4{H0J+QK4bx-gsT5Nt>XuXsdXp7`~~&P4kxIZTT(~Xi}0ytz}_e
z$tBJ}-y&o%ohq4k@FMHy)~(*GAeC0nt};L5GINEvv;Onlgv=fID<3<GoG+i&2xiR_
zX$V5^IFJBjwVmsFaOj#MStW%t35&M=lP_Ev_;90twsDE<nFYXn@3Qgo=D0gEs<g#i
zIL1ZM$2YiSit?{1)iReTuialPAg|ASZA8r+s(VVleK@irY1MS(nZ1Q57p#4MA^7rA
z06fqEw!!s%a<hd7Y}!_Yvk`N@-c7OREb;WWNZPctI~PW@9!+s8U99fxI5enSn8vnS
zzHRV^Vx*m_b&7EF`abLi2mb6S+f7`Kn;}b?{|pzUeX(`7>m${+KN9TtMJj1Ax@{;1
z=H@k<mf_}PS2;!(3$@U#)66-vW_So?dqD~^_SJ*QcE=ytw_&<Au0IWWAi7DDWE8dX
z7hqaw@OGD~bMl+!X@(N|WQEN~mfp8`VeEyOW4%%6U2$jtLd)u({|spsf47*bpPNSA
z>ecS-oRuWmnQ>{8wBX6h&s5=W^qm%2j%~!lyO1!)W?SMswzld-(T*2lG*rU+MIbqk
z-zUBg(#-96n$*U6xZLZL^!g)X_%CAYUhca`OTtY$8C)XG4Yn5&QcTch@62f~;AsoG
zse<^FdsCm+VTm{otGOglgUDVx42^ktg2&lryjMFNSXhfB_^G1KsfCOT&o4%QQ5N5c
z`@no0RO(aD=0)w?P`2U%!eRVn9ySU}mWWL*ajC;0hesz*2@hE-OQighYD>pe-HUi$
z*~CE~>M(Hl*vYs|7Bj#OlO$-?4L|<(Wqv$5ZF3GPkG@2wLDIEAb1WV4{%j=Ls^fKu
zPQhEt9xLprNbGm?z;lZnol;0!iY5!-VfZ@Csoa6)?t^jS%kq?%j=5+CX=TT<0z_`E
z7wq&?{B+qL%8M06j)K&Ubo&C5B#N9<(9F{w3|69R_O*@H5cE^S38us4@T*M1PZoYX
zM|q?Rj@Y@no!$?AMkSWv$y5okaWrlMP07}QP$SQnMVl_}W&ux_v$LtrhFs~jg3g3r
zZqpf&OzD?SdkEWIox;NiCmy~ocO$HZPYz-H3Hh8<FpTmf>0a@H@FAD)1v`|lh?|$w
z2+El9gUM?(+yH%z_j+4!@w%3?eycR{vAwr2I)FQVKM3QwGyt8JKH$r$f;!>%lRA0x
z*8#*cIg?X1=^dRRQl*MR;fzA1SNWQ|>PCIF!-mn<En$-{v<fIRxG}01c@=DL3vO^&
zCj2>5f76!UR_j8opB>KsnID;3o(?UV6;z~|Djd<uIB`#%ua!2eZ)K|X*T4N!kCq-2
z@1P&jgc10jK=$~={kcV_^{(xdg=p)DwE1)LDeYvI1h(b$POFZK)d#P)iw~#yCI@~D
zzm0#J=DAo=E$=mzJ?3_qTY1s)Bf?1&AA=wS9_eLLlS^}sLR@2Eeb&~M*~UWP!=NS<
zC7q0)npA+)C$BJyXdh`v%9<}*ThGj#LGUlR>Pj3w9JM{Q;;~U#65k{#kXteF%lz14
z^8i=fuefpgQo+qfquTBe>s&P|(5PPyt~L9l*+P-Yde=iYEgrXJeJ5$HvbxsHAqL>G
zUviKyU3d_YTFt*K(-t_25IFJ!X@{L8SJ`_GLtl9HEUvzr-8{T@ZO`yPCoAFt=9JQ_
z-!n?T{Q2!J9cQXet)0I0Y=$p$W6-CFkK0N7S-Y-*MPFK7-`C<%JN(2O-qk@WHKrY3
zWTj3jClWnwe6AN9(Ptxs+k3GPEO{#OZViSYft5s`YkYvwf=QSr6qRZezZHts+#WU#
z)odcygUWk-vT%@nL_Sj8N%FjO_>bSkAR6}blWw%1OQYUfxQu>SR!ATVtwww@ZA*>#
zyQ~luAY}NEw6O^a%C>$ypB%=Y5XBu|!Y3SG;+h!d`ni<3gnlV@!4o&;aNE7r67eb{
z_$1IWLuTSasB>yUamv0rt#zW9F)~a5+g2~Q#mz%=aq2?N%8EG!gQQFfv_*K&bKZ6M
zolV&6CGRc9uzPkv=)1h+?^k?E6T<9pvM#5xK^hmcQ2Uy(c?^ZuWJD93tUVNsJQj-9
zp3Y9-t5__fFWCKnWMx+`N$y<aXOPQJ_l68=XNvWJhs~%WqMs*?ZAQ@CE*`UCj6BLE
zJSRPD`CZHf)|7A?S9bRcBf;o-A8k%J)A73b;OCM$#`tDUU<^$mgeO$)?QI-Uz|5+C
z<=gK5gztDXK&{deN$;KxqNzs(R)`dY$a!I7)b)KV-j1W`i}I|o`nwnlG`KoLxskmx
z6|g-Kh@__w%-z&b%sDM|N-HR96nzI7Jc>!;hy5&F8?9Q@omQXrdlhuve&m6_@D?SP
zIq_^%gK(N3F0y0y3o_50Qe!T}n!(%Roh`IvedYG%np3aACNo233|R}W18VaRKb-zF
zkwzCiHPpeA<v}`Z+6&|*r*%o}UFzTF@Mj;L{rj-l9;(kB*4AuMuaU7-HZqGd?8W=3
zFy$t~XM8EsmvVg|XA|N}nK%3c<%Noue-GyPuww(_MaGMdBEzIo<dOoTQd3)1{YIY_
zZWVOAhanf05WtPQ+K#T+psCnHmw6!McZLWjtkemM?%NCS>Pq+yLN9OFk7~ro!xct}
zEl4mWl!!SX*Kt9JK`}AoMm=WCO3=GwxU)16(NeTJR3_k*-56<X;|22Sd7GDRf7Z5G
ztx=>!Y`^mw#oYwsE4CdcozR0Sm8JKqX0oA+A&GXaFiRqi&zNJ}kbtIKqej=)=X*bT
zWGGZcoziyGyz~x27R#@+r~K9&MPNxTn)%nw26Uxkjj3h+OEb>&95Luw$^-z#mqt3=
zU%B<PR|FdG8>+Nlw)Sc3B`v0oc9t(wt5RK2@+6IKM`I4YMo8jfY1Zxrn+?snM?Ero
zwn$VO3V>qP#wu0ycz+PXX+@UVs}QG5u&A%~4BFrjzlo6;EH8vZfsJaM6m<foxVsb(
z`oaKDO^ZFb!9mVaAkU_^*}EapA|(g^*ye!}?=l!mSTA+I{H8-l+bL%}iL?~>be6Y|
zXbvCk9&$cC|GiaJm&9x1K3$=H4ZhWjR$;3oY3uYVpSrigS@%c%X>IB@2enQcWvYf-
z<+6vimA@^FDD?oi{Q+v0fJz4dx9KwiNFSaI^%yzvvr78+gmu`~d&wCv4@6xW*W!gV
zw`IOrNJjR3M}bT3Q<_wcllonmZ+@EcQrEG|1LS0~EG}ifEX%;8A(Qp3bNlM^s`ca8
zc3OcBG)Kl&)y?u{<CeZ0CcUOEzTSqnut4{JSpfTD-&((@pjucN$1i?M#Mx5isBJ2!
zGQSr0@@{1sUi7vmOU;Wge^l=Bvag`)>c{my!{@Vm+!!5zs?=^1zB)@-YW3+Rj^8lv
zuNl~0+0GmyWf_E7Jt?0a3_Bj|-Vb)I^=&PlIan+Yb{LoZAPs=}xd(%{+VN)Qewwy$
zc3<X<M_V3{Lk(x&(AYJo^sEx;9bN>!1`Xb$pIH!5(Ss}E;aFC;)}w)%gTaN!wmU*5
zOs8$W%*<@wrJ;4DX|zcc!b>yxL0}eyRx_5<fC)g+?F;w_`Dob)ay|bZcFKU87uOf1
z!iRC{xB@9c7N3pu>-$7qMuXm0kq%uBb79ad6K_t_ocrJGe%_ND)(k}}YN@K12)gOq
zras|$H$)HKNAkZ^<kWoMzR~*Srj*=#p{_|C%8+z#h_ndw9&d<N&PFj=TdLI5f_BMX
z9X)A&D)0t3loZu82&1s(MVCuqB0f!DEd^pLuH-VJS2JzaKPB&Sb20>>%2u1lQN7wI
zC^i+K?0k6KKArgb3H5XPy=BIwzt@A;#l_lOE4ct(k+?;7V@s~;7!NNC7V;lPW2!Nc
z>bGy+w|bK~G+n%<<l0U`;$9>Z_XXvz7P(~iRtZ75H#NFS6vb|<hL_IYs3w1OH!}WP
zTTZgTgr#{7e~)9O)6805#q26rT#dUJVzK?so6Q*{t{{_i;<{;!52y2LjTY%p%`}a%
zF4sp7e~81!F~&;WSDQ$BRktTZv3&^AGxj$j?|&ZXGt(&S`~Z}9t3-l}Z>cBz!y!8V
zIe6+%j@6j4>g?hT9lGfnG^aP54f3KuCnhm4kKtRJD5cMhaZdY&sTfUBT~kW?2IfV#
zvRVyhXEOayEAQF72(+~NE%gh|6%J{#c2UbWf@<rUgtBjR7OTm&jI)~EDFvVD@i5zb
zMze6;vW%`^hvt>TlgYX-xFhcPZo-h~8i*~oL{b!c+q9=TR_!RZq#Eh$$c;R9h+*Df
zucZJcjG0=*cr1;-hyjHqc*P-A!gy=9>yhGRo}0Bk_13qr*Z|fH9rmh$!(+U+CUm5#
zAMds%*q?M*#k1vq=?sCk#b+W+daL!9CthylcMsz{#9}qjp?j*CAA-<i6JEh^g1q~@
zg-Fzi=O}33f_xqj|JJ&ac;cGaR{SH=_Q{WcY(0pt)H*2>_&kcZf&LdmSoq}D>9_Mg
zXPE`I3h+<WL&SwKcDUXRXDmFXdT%?>+MmpEt06oQCD<8!Po-jI#aH%9m#2<ngfvAo
zyIqTH*DBm2!Q>_+87H<r4mCQ%v->i>lb_TaOVMzK?XqF@*dVy`<yZtX$w-44v?F9g
znH0dLh{?`5_PV(sx%L<>4YP;_(*j>{zb<TB2G8TLP1W<PUdhxi-QcsGzx=z3mYrvJ
zL1}pj;s7b8#Jsk%b1A6%C5qjkt8b8Fg`to?*@j(qf9}7{<`~#xxR^J*h|{2AHb5}u
zzo|AB@?GaAz`lqqbp>RuZd8B?<<iBb(`s`_QMpR_)SdoKUgV!ER*(k=-V(>YPHWuQ
z-vqvhjL}@I!X9S<!@FOXc|W|z5D)R@_tzzo{wvkg_f;5-%X%;4mVh)@^tP)ir2`W9
z^FWOEF&xYO(8*1O;EpctBNwq6vTd;`IJ?T2J~R><+joia8p)wZ&2QIYy#BiN$|RJv
z+~{zirR6Z7>1IkoU~z%uoQ6$A&jLkTSC9L*pBuPI4=@r7yp*gZE#%c(Z%lpjVV|_}
ztPH>nPlyD0b`Z5ux2aT1_juqcU~cNtd^f>Ak$Lwkc(M_X;V*PNI9RqN^0G6^loz~S
zuvaYKH%{2}zZ(eLG%ryHzv9L4Ex06qC!V{pprklZ{d)&-`T{|RKJ(4;2H`RqcE^EK
z5a$9p?+1a*_Vv7_AHw->LRlU5f695<ZM467H8r}o*o$suRfN+5IyrJjF`>Jr2<7JZ
zlmpD}H<{8&ek()++g)b&L7KfPireP$q0vh+A5l(+l;Z18q%Qs3L#Su(pAY%p>t48$
z+GU7_UZ=tQT;a0(^y_G5hUS@Q4~Z1qbo;+^@KPFC3KlHQ`@b|CSEWliajA#maaEb5
zO=>e*3C`Y4ba}zz_WrH5KNoUw*>QUHE=JD!yK2<*QiVjwR9Ir<jhoTPZl@LI=IttX
z4J&qw0Q=5$iUXir8Y|R0D0h?;FySFy_T=NPXa<l&8(&QSjV3<Z|D}7jb)qOA9rdYb
zwmy+j@d`q+J^vP=f4dQymUfrNDv4F?*Yv9R=oaL<Qd2!$3C1K$)QjR6*p`<~;qB(1
z3;O}7%1uea<llzCS^@(zA&D*#j6}`#BzMfg))Qm2w3HT=@uiBDWmV6f4l*m&p%kj{
z{5Uy=avlE&|Kko~$A==*Co|W&`^uC%e;m|!<GaIj04Bs0qjX5Zvp`Jf58L&E9C%VT
zrxVEiP^7Lmmd<1?cp4uTYn=0fnf#r&N(N@zbHWByox;2>0n#@fyukoct;BSJ%SKHs
zhmab_l+;%<VWOrlHE5-Ky~)ovKfx#ca%jH0Fzo%e(#SD5n268n-e_8Mz{7YFvrC`L
zuqX4sL*JJ>P9J}K2XlfjAO&N@ua$%G8gd?two!veWE9*E1;x!9p=X6`HQ?{;Bl+IP
zQNl}2G>|W$9ZkLEg_NN(xNLc7D+&p}iIA0k^ArMLv3qY)a9$ee8?ffqAGwEhMZUq8
z<wLp<ir%G6^V{`2AG$sW)>?AmpO0S=9O&<=++!(P5c-*{42VUge0T3GJ3B+q+%q3W
z-`*YBeC|LbAk;J)4Kocwp+)+?iuxpw$!O^*hwU7Es@yzbeOaG<c%f>t`5jR4$vz0o
zi<3&OT4D0yaEz)GfztGNIzMxD@eFh)`LD_Zh)<wSwYth$Y#-0N{jAhN$mo8j4i)5Q
zdP(Dlsw>DbibQ++)##8;14L1dw?t&UDt|>*#VbXd_3%!c2^Q+L@$pB4gTZx?w^(zF
zOd?LT!v3dTU@PW*23P#}T3WiSkRAdgncdoeM{qQvl-~#{C&T5<O<Xfkt_Q~+^@VW%
z`#E@zi8<BBQV2glyJb#ITNxLc2iDHLn}z0sD*)pk$}lok@zUqu>!Qkp2a91;!qWuS
zZ&MRgIozkS<^R298^csCFQhQ_!98A>!~29ifo(}Zz*B2|5M0e`Ktnq9nds~j&ZBx!
zHG{#2+5_94ULa{d1z&^q|6fmU1D9GVmB#I;Tu5ds<-Al<8HN`&NaOZI!%9{Om(|Uj
zTFOSP<5Xq^H9wv0O{YZHM=1-+IA<9(=O`C`c5(@5<QRJr`_H-wE<1Llfy&MtnmNzS
zL<)f!_)m)@Qs?--h<@tOtC=X4PDhL)F!g97mrx=mX^Jy|b0Mngx9GKq!_=UYl9V=s
zReOLl3H*PzK|os$*6VePzVshVIdG5D{TkLH#Y%2@vz~EWT#`y~y~@!W%h~koCLga@
z0NWv_S|c=m?Zbu8_9y2pL<q{u|N6t1gx@B$Lq(DS=Js-U-%nwj>Jr&PZYGGjx779i
z4<YRooV(2z?CvRSXKPm$)9*|*MjqWdR#u*lA5(V;YEb2?{B>;ZXJ*13P5(=6uwpX~
z;@m!NUypANUVCZ3RQ|!7S5~S;+Dhbj)8Ppq$i8?W^PlG)7jlHIT^6F5pr#!U%VYJs
zDjkn$C+F9ZDUR(_n*iza-|b{dXDs?|Vte_^kay#%nSJX@mS)UrcB8U(Z4QA4I$*MX
zNn%-V^YL}sX~1HD&%C$4X|iT&8oQRIe@}F>sR?oMOaH0@v471*1<7LypBCR+e1XN4
zZNxWxBi*DOk8P5QG9s;1`MYaPP0X-tVeIA!B@x(Iv4cmNTrZq6GsN=MU?~Qm@5#aa
zbMb$hE1Lwv((4TbGIddhBWK_GMm$70mQKUMei|0J0jR}0F62AD_SvXU0o$nRdJC=x
z+)NGMaC(BKp0r@m;J?ZXGE0d#t1h*O%s!}vJhZ$x%IvCSPdIS)D}49j1UIe%2qr^W
zMyAgFhA#eKRnW7-Wg1{G@5R&y^~P`G%wpI@9GBi$gXR$I3ULaI#7ittXB|(UY;8Fo
zxrb~TM^@p2g-Cw>jZq^c>fVpYHz;X%307Oo<I6?<qvX*=&BwfA%upU#XWyrEl1<P5
z`>opEqbzO<GK%Rns_Lgv*B)86cY&cnMQL-j30TfeSw<#CY5Y82BUs3qNDN<TJSH3Y
zb?8XGU2~T}{P(NnDK8%bB(5T%&XZ+7dS}xvhQHOVqwyUuHOS%x0vbwzb2r7y-pMzI
zjAP7}x&+%in#`;vNLKW}!_sz!azZKa1h;sG#`k`yaj_`r7Zx+n0|>QL9TdJKSSEmG
zHNT0`SelARIr_MYkKLiW)BLhD0;S&CDs8Zcm7b%4BpCc>f8VZ3EDuOBhv=!t*-i0$
zc=0(mlR~s!x?k6iwo%g^JFW^W@gJ5EuW8dim;U*uM3B@to&s5pR4oR!W9U3Oc=Uq&
zPHb`ahZ%39e&S)6sn|1|DWYVI$bDVuyC!ITy%E6;v;v?3NERxKGhUwdx<9s4Qt5f)
zF!@_h=WC!gH192t;Qad$K)g;`AkjCh7>C_xus|kSv15}{y_;WYGZ|=U80p-V4~pcU
z^OnwXO%k-6<2>)<kE<+zCH~dC??YMRw-&9d7VKdHQhxugbKtiJiLgjfC6zPHX~!PV
z62*!u5^!`81EsFbf7M3fO_)3-!dgCoOPeB6nN`+|HRqqqkJYrI;jGaA4j5htOCTxg
zOr;e1$JEU&^3nuzwn;+T6wvQ|_$3LbBAOP|w+9Mv4WmaHt{EYs>iewD{fBGTlrHHR
zN$WE|82=qD(3Xh=1{JGk@VZe6uRkw{D}ATU5mRWslt5|I0MKP6NpQZR_mwDJV~A@K
zWR)g=fcHqMPI*ZSkm`L@m6$0r`z-qJgvfsfE5%xI4T<=jDe>Y`0+AmHm8@x!Om=zT
ztcnF=>41lozdy3HYt_w%U4K~AG82Gnq{gsM^YiyFzeC>;{qJJ|?ZzX{f|#M}UH}|6
zsONolt&gp}Qj{q{e9pfB5k`0+G@Q3E<N^+#R|thg#6k+y!(MZ&qTGVg*kWo!irW9a
zxf;r|1Bf}mN1XN(S=I}+ciJRDmqH!mq^eBD4{BrAkRJZZr|M$csIRw<loc%_-fP`s
z!u8TJ9}<(E{!fn&aBOYN#8~qh@Q|^UN<!++E_F*W!(p!Jxx~!*(e}S}W(OSbQhxT(
zaeH9gcCiW=>@69KUDELHLYDvS9$Az?o@?+dOFAw2v7eb`1wFIql0dZ9xqap7a70RM
zCY?5DL_F{~t;W=mXO~QPJ&V+VlcIqiylAR`@mnPJzXKsoV~w176Y)C)f`COAt}T#-
z9h*(CcZdGIdlcxqw}R=b%=i=BPix-d_VN!>wGQFEWeV$B3VLry>qpZ#i~rX&iVvb7
z`(?Zaj5>KEj{I%FZqr__n%jwgUunMkbF4d|^ix7ht6Lk&pMThz%N!Q8k|QFDc$z&&
z5YN&(J~>(acO;BmkU!{bWgflv#>sf>7nqdGpO}(G$q<SC_ZoAg8=1eMs<;xHzKnik
zk>(@#6W&p;;dD~`pqc*(Jb3&gV9EX-t&s45K4Hz0cf;V(!HmY%70H6<8@PgJJ~p=2
z9U7)=#$6Xd`t}b{li!Zx>(?8N<HM;>r)Y)Pn6=moVoag!2mg<;ua1i{?cSG0B^5+U
zkVZ=B2BoD0L^`CqyAcHe>5c&<1%~bh=^A2yp+S1+j-h@JyX(HYzt8u5cmEp)<hh^w
zK5?CMu5<2@KP|foWr_3rdmvOB*kPJ3lMg>;jZ<rKY55I8eXbR?yjXL#>mq7^fwYt;
zi68|dS~xab0N?x9wisX@;bL_wzAH{ZNtOgo$yl_#>CO1eRo5-EPE<eSR-LrA6P#S;
z;^sn(a?qE1JDio1`<T^rNq-3)<q0y7Rf`K6w<drMIcmA|?C)eB9Efa%dxzC58r^>`
z?q2q3Y2}hm#KWSqxI$`KXYLt57U*&ABcb7Gi<58neEc6c*N=K|<k;g^=t>n7j;#lc
z)+X<)6Lk?h&iq~KR*_lA)5i&fZl*nFX}LNa{KI*9pf*6F^ABANex{Gy%XGlLGAMw9
z<r=HbkNe$NheoyUTHXZ=R~W5QvPF%S{JMQYmiG+t3H|+*t8Gf}@%*l{Ja#l-A7(p%
zVc&n`N@$Vk(CQS+V;b|2G{iz_fjf?eX#}46QXZJ9eHkBm0j2@pYRScT*tf;dU2yEt
z*Pe*EE$^|#4TIbE4pfv&1~=<JEngnt_wK=H5Jp6A6u=K7EH#RMo9eBcyG84ZD7j~e
z*{<-la><2!#y;ZogQ>a4VO6Jt?Ti2H$*X%tS?IK1$!VuS<g`@o1{h3E`rQF{CmEiF
ziI!n9pBd$$LZ3jd!yOysHQ%T*?5e9%=K)v1|0Q4=y_cxJKdaM~4WK4F3FZQY`~$CK
z^efl4Phi@BJL!@!KXn9ENRtIjWkYsdJyh7C?umL7G}`>ln(^cD>#UMs0c-U?#`*i7
z;XO}R%D-POb`JHt;Ck4-V9+D6tVq$mAb|XWz-+TdwfF>k7rXrvfR_zG*ncqxbpGt}
z=2g^Q`rQv0MJ|lVA0Jq-SH@LQMm`5JSI*H7Mz3*_cEROIJ&-JE+dMXE`MQVyQ5RAq
zfa;ieMZP)DPa_1BYPBH13y*n3ls>h2CM!Y5ypXa-%=_~4UWE&H=-~Jy6_~`7wtVD+
z1JKCR|7_6pQTgwv0}zvTkZ4Z0I8Ua=?E9s7J(QO|G$sVhKoX{1@@wstkb&0x3Ho~w
z0HRhmzdQcN5l*7YNd*&kCqLK|e08cZADbhPc#m^(&Ti`A4RYTUQSe#XNC-DSQ%cl>
z$W1L0BVF24S_PtC#+~vSb>zsg51`F)+RZ5OI4-^KIn4$dV5Are?y@e_hRW@Yzqxwv
z9}kf|q5vn|EikKj!^!4h!GKx7OW&r^{~HDRR>1M9k>k)bMyB4Z7Nyg!L?<C^cU}QO
zGeB<yd^utB?uCc%&pKc2BH(^Dh~2D>T<;1W<DUYpiaZHtbhsu{^!-fx2_VP7^70?T
zB=j}!-TGYQaf+j~c0$yof*VO&E9=;@nSS%0SDAl!70P|oUQUUhlN?Mlgt#3}S>Ag0
zbq4ijF-qg4k+bOJvRo}IoUOIaS+95yDvgXXu1#5Q1B#0*Z6dKi8Xx}S4`}>9pF<@~
zUXM*)aQY&q#4YYSOHh78O;*#*5v%aYK@n6=J+>)gih5-0mvwmO*XG^vr@?3FRY(Zv
zQt0(JoP|7sH+J)-7<H+z@&9JFW$?_lYa}nn2anTerrli*Z4ZG4*QmJFI#v58w+Z&&
z^%*Y#xLL;%@QWVlKO4GAEV2($4Lu_EowVO2zYdeR4d3l)TUu}X*tRdi0g#_s3Ho*}
zS*-DnJ`YK)^bqeqtEnM;+@F4p(89=uC5h-PQ!#2?`)whhO*MsrgkqFRXqwXrp)0=P
z0)pBof{)aQdM3*SGpim{hK>G0n|O~u0WB&c7YNqD#?LHkvOf=YyLWOU!WIc`yDFFP
z%{IN7=OQkp+h033HBgDD6zRNUGY9lJmGw_wwut%G^0L!odl!H}cJC0#dAt|z0oSYr
zc{Tn}(Jyb{!LAT#ZD--OFJsl!;9Ts}uxxjS<7oc7h~Ros;s~K%d$Nm6=ZnZbED#zS
zy%XiP8#LlXs^a5eG$F44>Q*IzYqP~XY=8Ee3m2D(LO?ov-&76_e)&PlVN|)2u1}8C
zSqyU3*R~mzpAb~PY4VM{)p__hjL=$DEtQ%neq8po-*xy$ceXr+KhEOg-7NGg2RO2#
zZxAgbLhvL=*;7_?;y!~k1Cnqa-RQJ)U~h8DgZ-<Na2$Iy7)z=W1JPj0Q{i;yK%(+L
zhgC~s`OkcL3*XsH0L&UWVO4KOZf%0A;FXrtQy?sTt_#pf96HjkYvzt%yoxUhm=#&m
zM8s_QYO3w(N`9FFs2HUP2TLsfvR@7(nJySj*$3iSc9;hX>Qe_$+ui#WReEgkyYt6s
z?PEb))fu9!I_fMw=>?=lKN6Nu|JXynmbaKjxw+kb)_p}{;W92P1?ub^4!|%AH5DcL
zB4To+w69WK_7;O9We4c{=f2=LyD%*CJhr&;z_PqTtp_@@<9Z(&XQi^&#1ni(sII()
z*oWqsP*55(IHG8kWX<pWzGwR^&!6i9Q=NitW6JUj7ysS80C-bOed;GbBw7;Dz(QAO
zu%jt|Vu+eaZnm_%68G)xcfVv-f9md$dGZktr?+(TTnrYgaA`z5;`AnHkYt^hc}W1M
ztmrLFh<Y4<^WS1R#wwx&XKXn!4)&4V1iRDz{(PvaD26J+>m@clW{5~6RqLpgjLhKJ
zu7==dXh8a1N8A0D<m0kafW<zQ*n&!2qdY!ycpEzh1ML*=s2a7RHl}9m<Ice8@a{;0
zwH*`e9~RV@eKPE;&YoZO!YL+My6OPXPy})~SoaC5c5prmKTmD=J!tp^CV!7d{{Qd%
z^9V|qo3o4wUrXA2GFpw7m2}BdkcNi@r1fsd7g$n^YPkBAZD7M4vCf7F27udyCthhB
zDqiFgN=9?W1Cu~}sI~an@Y4ms@^&kjI?5`{YyJ7s%klE&vk???EIOXBzMtMH&Yeu?
zW%BTp){Z~S;s3vizpjx^wPj5)Dm8<@hb4`Xm@hlVgGJ#9>)yzT_d&a*K!bqKEipE;
zI&%B$wt9CxpV`f2wZkhFQ1WE#99hS4pY{8**!!#RBz&;5sqamkh%)S1+=LTlU7WSz
zM;HR^=|7RqfBn?+EHXKY?NeN+n7>B+itM;ar%wG7ADbAfS=V+Qw&^B~@fq*t`pCjx
z<wNOX%MJCM$zfk06UYadb$oWPvgppyy|N)r+<^dI-)OMPH0v~LEny0?c%Z*OHYDU;
zPft%&MMcF>!u%j-7`2_!Z+)u2AlU!Cu;*yVS65dK2g^M}u%B%~#%mCe!`4Kp(ilx*
zJT>i@JV~UgNd6L^nE`TFz2}OQuZNDp$%%l1(JubQnV>QOzw`tBI8iXFTa31<Rjn*_
zA#y=Sw1cU;p?O+^;d?GX+GDFVc7=y&ZLK{t!(F$@_NDvEvYMK7A2F-rA@U0gftqjF
z88VQ^{}r_T_fL4a$aIvJeeo;@2YqZoP2AQ~G*#9S>eF9l?lBgKXemP-r33@Xhw&#$
zE+PdHi|+<|wkWzc>gRVEjX1(@XOJ!N(1R_?1<Gj^(?$+HLA;$i_#8SiH22Tl1VF5&
znj$5Kgp-ZVVV`qozEmU<7qiwZAoHEhIA(wU&hXd#+yA|hzr8@@5c0*zb_{*Gm-6*q
zkjO`q{*Z~s@=EHO&}V3bhtxYc&pnU<Dy#<guF#h7`)2P-LB~^S04pr2`gMccyiI>>
zILGK|T2hQN78lv=<Ui|<wu~PSo|m$Dm)j@3dF4G@X4yuu(v4(G0MAq7<mBwe=9!_C
zmzVEn<$gf5@;?^#YkOsA^-Vf7t8GA+N4X+#VWd2gR$4AE!(w^T=&waB+OG%{v=<U(
zl+KPeM`qWgmCX853_ythGv`p;O#ad%^(g}RdObawLm@<Tb4(A`{q>Z05R{(u49031
zsqa@k3}+wl*zKV%J6_T24W{<|fy2nm92?=iWq9C^>m}N6rA|lt^v|;AuQmN&%Z9#e
zIf_bYI*?_p6}PakSPtWvi+o70P?J38m?0a!HBU8pK89*oYm`wPm9b9&&qF!|tH&>Y
zCTEBwR}>*@WU|lcc|iHWw9F{eeJ&mn2Xqv7y7wOGi_T5XFeK%@1p1(;F;fLyM5`JP
znBd!dBrfe^YI;CVQW4hGi@Vb@0IBD{%i*teL#4l#l_|3}9x21&@TlWWSiPoA*&Fh?
zY7O?oXS9*gJ5ybfPN=}WG%JN-UCVnw6W!gEtV^o_iu0pKrcXEb=>a2r*+{=bQdy-}
z4CV0FV!oP(ckGrMNvJdunC#114=u~h%j3lZz_WQbYqLcEIYatcJH1gy2;l>u`~PC%
z|F*q<wR!*st-F^feAE$26lBulaWZLYtgo;C*+BoRT0kkc%)4u>52b-`GwPMo(rJr#
zcqvhm+1V=+8T**|6hD+V(FUdMhVG2<YH{9bPmW2&;F#0et9^ha<txVsQ2_?<hrK0Q
z<qcJ*c-fLg&B^iJJ)q>^@NlI({mN<`w+oXk`#)D*{&(B#Z_e^YM~8evji*(eUJ*yp
z$6)%(;i!eXhY?IG|C8qOBY;XC99<X#4U=uA)nMeF?#DwKr9L9s-I@(|fy<R`cf0ky
zlWqFqL^}=nN#9NCN1Zo$nbh_dKXZCiD*VAO>A`US#}#?0iJ>9N^oyCbS5fuU4Y7aX
zrT@M#U?bo7fB1mRx0dR-42VZu00u5jQeskR_>&pd+K#Zr!>CUdm~^k1X!+m=tNxh|
zM@GemUx2JPpGdThB5pH2q!FxG>u1|*DT+pQ|ID$O+F-zGCsj*>vd=;`RRWy;QXdv5
z@_MkRt%zC<Z=9%U5A6kq0nqjT&!!OIZQM^3c7eid5Hp}qcnpvCA@eZN^GQs$M6K+@
zQ(lO*M&5&x9mm)b64TooYfNpWzw;M@(now{((T?Aa?*<xscTaU!<wJ3;e!RxaJIZ8
zaJD=;GzjiBv2(mPHa4#9o%}b_b;qCM{u!6*T$yp-a$atlLpI|U-!QF@Z+@03M`?c&
zT2~VfH7%u(H_8E!T3ib?eZ6u(WZVTU=DV*Efs16)9ujf-zUGlNh$z_jX4cMMI(hY)
z^QF2Eg>3@VIP2KviniHvlLWQ{NIp3^IdF=~@Bh3J?0+oJfA~IdN^<k{@BmlVoQS!j
zv2t;}uh~s+*_9jfD7;T!L#>I2n@LPlzu)07kbnC;xmeH3G#k~cc{ujtBm}BknWYfo
zEXf={e0R%j$#rBCxSJ|i(d*SCHeJEGhjs-2#x`Jz6EH9^M2?IoYczUP8a5aDs|V2(
z8|7qv88gF7l<_Q64k)vapdK2C)&`At(F>#_tT~HX`7&;8!VxpQOHR)8hX?(a**P?+
zOM*&TVoCjl%yy4TebD{eF1UOAL2R|*HLJ;%?Oy*<T-wp{3kp`+gCCapTp_;29J^3N
zjUEZg40KaGGo<Ce&775O4!z*>%II?c!ObYL=7ZfiwaaYeZGqO{m>_R$opU(mU8_eR
z3vqcc`e;R3g`Dp#h|W~AdK+o7e47~d^wXzL4u=Cg^}UPUhN9D@jh6LRyd^KIoULQp
zW`kDD29@~6J>?MSh{Z<4=zlIS|F62YfQ5{tC(0g>6de~$%a_Ne4ANo=Ljxv=x(1#x
z&lBqs>($R)?YQ>ks}>mDT>s?#Dl|PV<MO@`@-l{Z`!m~El%*rkgmNAs()bjm%6o%S
zR=M5wCeucn`=DUrp(PU2IMK2PKI#-d+k@%r!fQGb4-tnEmF3kc4WNE7Qif@OA6j=}
z6ARk(-JPm-Sb1%3ZS5S_F)gX+8v&jymAtMwjyPC8p<nq_tsA*>z2jCucl`ThCja$?
zZhw#{?*G;|pP5yQc@4s=1}WfE)MV14?MP=2R!cq0gMl@u0k9FVDNe}27CW<u4iF87
z@z0<LorA4-p`DmXheq)EK>z?2a$f5*?3w02d%j&<zn6I)opzN02~_1W`+2J2V7Lib
zW(5l7#R~>hZlN0$xUi4idUs$T`uQSJGj9dCEfd|@MpyBr`V)`sr|=DzWrwip5M_#A
z!Q+2lzklNW<(ySumRnJb>!7bI0|V14;o}vwn^oIuNp71NUZ)BfdG+Syz;D*?GU$h<
zMJR8sk1TI3;!@U$2YfS`ZL?{G*=fs^D;~KYjYxJ|8rIv52;{)*BfIScrvyvCGi4C)
zajRwmzVT?o-aid(^!=*$#O)Y~Z+9LNQ*d)-aXxo{o*Hu#YnQ41k21*rST6jTKHbrC
z@7^5S$)gu3O(xJaGTYE<+c~+f28cb43^u%@i)Da|oc2(Qqa)!^N%3il3Jq{an+hsL
zot4(w#qq^ys%oNABrVWRD^O0r?^-VWp`|EHvG?0-G46KZ_wSL#KF0<2D`yLqxV=O-
zXA+ZMW`}Qt1}lIG7BoU!Vjuj!o^eT)%<sYyg|2(jdcJu7BcKp%xIbYa>+9Q$u6itE
zt5=-5F3jqE<(--D;;q~0wc0S)EwI+$__nKSk#f3frKo-<8YJL~qr+P4R29pUDo`=-
z+6nF2alm78)_KNW`NGfXl)L-z^oavO89y4bKVuDD0w=QU&UeD;YpE~-k^^aM#7gw}
zm_4B&=i6Fd-BPZ_(>-BVJ182FHXctnDUMa7qR<JWyTRr|)3^P--SG{8=k0?efRC85
zTS9iVn@z2-1pY<bCCM^04WpJ)B#RT1!s-2%iLt!CPmQlv4<DjCA7T@xnfKklILMZ5
zrUBF&KO)rlTedxJPQ<m82x551Sf0X1W7eV6>l(;;XVBa2fbY5MZ=-kJEku@)Ij7Jp
z8ByxqAi&&vD1x@`A(Q?#{WMbY-hhMdbs5^2a&iKk*}$6sxeK>>B^kT#GWw=lN|=h6
zm^jnzc=^deq4Runv)dk<WGY%;zniKmyO@b85IJ*2r|Wzz*U#R>Qon?z&bS7a|B;XX
zA3k}XS|9OQUau6+!O8}XE&Fir<|J!p&IZI%zyr?Es;>$hd1R7nBC8^yGI6a=L_kQ`
zb1OUF`lei(jh5qOUu&McA!ZtW*!@~I>Q^o;hFfNG@)ku<I6W$RqJ@+pWU%SIVPU<U
zK3+1Y1xiR$iDHv?&IV}fQjB(HgQO0x0!q;n05#VrHRxDajrH2)pQNSmIcqx@aGsAv
z@}vagn4A=J=1-2i;gfYJKj_GM3b1Pajuii|f3{#I3NO!q1sU1$382kh8EYSpj!tUq
z<n)e~QYaGCPMWBQV7koa{+zIDb(_Rs<uvaT4L&zJUUY`YWZI-!!cuT&Mcq4~U!tMG
zyP2*|uu**xcGv$IkR&|CeY7uhg4{Hr=a8&dTI*OfF}?=6#|LCW=eAy(;%^$_@y>Cj
znvOSEwSGV|baOt!ot>-HVZCWxIp{`6{ZL3Fk&COXyl)H#KVs}>0m`?*?+LU2uUGj0
zzSHkTlapkCR$Czw<@L(pjwh@+wo^w+DNP%B+6~^vb4{0dU@dlC0eT_TN2)}%DJDJj
zS+z@Ku1~c}34p{v{1g@4^`0Il!epH%GaJUkcvl5kPJuhE`bU*DpSx4@X7-%kP7x@k
zVSlaBH=fDYE!#@4=Ec_QxDJji^BoQ4ST(Y$h~FmK{nO?{X!H@u^6BMpfO3)(F?FPx
zBD|TW2`n*(ZT<*eE|(@+ZlWuD-(yk!(qV8}CyJvP1Qb4O=?Mm|3PBX(P|&8}3P4?8
z?CZOQ!RY>TJDG^k`uXFKsVPmE3z)l~qQcVGsc=iUYT8*QeI;g+>oB{?At$k+=}-FG
z|B!jiFH$W>d?`()Pz-BC1^__|xV^_!2*0ds7w~wW=P0HdAD}98VHRXJ^*bUJ$OCEc
zV}debYNXTV-p4vlnz|<Ypk&XX>*(_B+T`ex%GL|qAMU7|w)8`e8GX*uCMG${%gZ&r
z2Bq(F+#1fWQ?d)Db<$(?Lzt6m<z64i8Y*EI-8M}A15|#FjVeb`0T1Q&9)WZmX{0o5
z=1HrVAvWaG8y)vg-~y+mPsshzR6j+hyogQQ9+kN|ncoPJ8R>jr2vnI3(9#~A)#cDQ
zNnq;m7QaUJnfnmjfCi)lwb_clf48&lGRWLCN|<rFk$-=Sn2mxCj!aBz=1$b#23!8a
zx^4kJO|2h1RF}U%LT<jo@dbxrlCTvtfqb)L+H`jt8sY4n({}77EIUQg5Ywg}npJx>
z3;lMrKQ5W!XRse$;WCruA6R5Qf6KmA^}k4X&zv7^1zX?UwC6H^X3~b()Vrxn^s0w+
zTz=D<G0TV$Qp$w{{3;avPr=hiM$S?6h&qw?3@DYOsDk%}A1`i~pPs<G>V%;y9zecY
zIWlh5rfBd~M8f8v{{CdL6|h%yT5dn34xQ=17pVy{ig&vw%X>i*;0P7{ug$RI-U`k^
zwnwnJbz3jX+3Mw}<A@pss~n$Hy=rN%<doaN<p1o=dkFR{=PTfuCpnCq-jg|s0`Z~M
zgLA+owS9GRxt1F7z@2dYvqrKeGO`00GoP&Fs{mDqVM$H%uGam*g#mO3Kci)NoVdlL
z7<!0{RfAGG0)-lm?_gtacN6*Cpuvv4;uTjvUAMe=7=J$y`(La_=HYYT$eJvmrrX+b
z=~eLQ@UcI(DgOy{pC6byp&Y#woV2Hro^Z~SEhiO`XHkBkxA1n1N~3tXtW2W4X>77#
zYLV=P%8ycUnU*RY`h#<WQ|ha{E@9fnG|`fzF~^SOpFn%=KW`3YJaSI))RBe&5j58t
zQDs>9@p#e`ab&0(0rvn^N!q$_7f6;_h;Zr%<z&p3hH55-jLUCxu?)z&rsvRBpcmi+
zK<ERXYCwvYqP~B6;|a&D%P)HL_R(Nuv=?mIwCL)$0c`)MYe~pCgHuO3z%r_@08qpq
zs;;Q)zwyH=ue;Bw8d4?9r0VLC)9XO-<K5BiWc0M`3%NojuECtKRc0$7?+&i`TK@SM
zm0+D>J)!w#X};bfEgvd49t*4Q{a1Mo%5mhJ-KnGZ!1KGT5p^2TdS44m`)8$Pd$Xzb
z@B#B3Lko-$GU|rx^gr6aqFBp2WLGv;axT4nD52ZlF^2Ksw}GN5m>T3k^Wg4pgzA45
zOLbs6pCvSCTbrAFiYBKxg%-Gm_MqG-5b|Y3li56>b9#2zy$EIEb37o9!_iJ@^j+7f
zfJOQAI8C7b6^e6U83BKUiBK!*j*fG2L8k`sq;jlOB<TL9e<Om751)Ha<giWGx?R+P
zF4PrS{l^296$8Nc7^NFKRJvDbfC~-@tw&cOlLkHXpxi>1-YAkQ0~s%WE`jlG%L`pc
zuB^I>@yY@8e>9_jxl&<S*zV)@p3ND&eaBu0j_iEOKIj|0+-~_S#KCuQ&lpkg_t2@+
z4J-B5Rw#m57D)9m_dMNOQuEoekoK?$Bv>Y>{dWhcpN}S|R|SW<u+9nF0z8};*{^v;
z?X#4!8`;^bjX?O5!2-m{oDy17YG!!jgb)>0fWte3HDbjt|G>F1w^`~ovQayhz2AGp
zLcfyrFE^9u`K?)*u1yrSg`N&XUm~lbO)4jE;<Q8W1Pz+?-E~N8uTBTv@#n^oweWmG
zDv*xFmRA4x4Jd~`eBB~9JTW%AlJ6+fbP*A6Nl*Gu%5v)f<i7b;D^4G|$E4Zan~!{~
zSI1}dj@dG;qN<srb1d;)0yQ3!rmd^x0E<U{Ed+Wy;8Yno3+9webAX_zz8+S+0)MfR
zk(Y6dEBzOq&`-1hKyud5>TLkz%tO4v^a;Qu*&+fH_eB!sdDEDJxcxB_<kF0NpV7Gt
zk;*1EUd3BBRC(_Kkf)-rX^ELmcdDdhD`@$b^0H62uswZp;@zd?ou}x8MrGt+89g4C
zAa(jI)%p!k)O{Ho?8U}dtHWXTj!&_)p;TMNGWs3VJi2=m<;1UHZ~T4{-Lmmoebv88
zLQ&44Hh53x>`ou~mjfLe0Bx#gKzg5Z{FG4<DMjf4C7xwQr0h;NloCA1tEi$HNy~9>
zR^@{4v^>oXdAhzz*44MVU{M3EQDn{ik17w?<Ig-uw)0i+3vTZPW~f+;990Fls(n_y
zuTEN%KfdPvWJn;O?GIJuu#*{H!bYY0Oyd=gzzxC>RBp0~g?yzJib(wy(ia>2AOD4x
z1B89;mLuyFVVkwZZ4}oXL!on2U^0lTWXOf7C_Q-{$GIl|F$)!*CDm^02;`pkIiTrg
z%mZ=JsaODpmZ2;uv`i@=gy%JMvEu!kms@<-GTpVkjS?{(qEh-D^UPaV<9TMcBkQIR
zKhwLU+{l5u_kgBD{1$?XL#lU(1x6=s9&<~5Zt%+pBZN=QMM(i)tLV_bm62x)+e;@W
z{#}-hd1^<fkKPi7%;);E1ccHuF2+RQ+8hY+1H8B}n7vGw9QKd8vGW7>xKGguNgK=t
zLNch~CuGi*?YoC^lWS9b|H_8#Q~&WiMftoQqq|v_7O!G5hAJlx@bemJ2UI&dKLUP<
zgiSBxSi>9shEqW_6J2XVw#$=SmuL;S%Oj%JV*T_&XZl}xL%d?-Ibj=H3b%&w6b}hC
zeS7E9i;wZDG#wJVu0&;A_yA_=%!Ezp(#JOpo{vZ%+LDuA*YW4duos?UAJrxs!g25X
zt1?M2<?ruA|BCecQajqcvXQL1=hNO)eRX2@F+bQ9eDMqw1@8}OG!3rzk(IwcH<AgX
zx3CjjTjBaQCh9jBD;M2jVCxlXJP;Ef-bW92fbLWPr*h0<3(%z}PFNrbEQv}CbP2aN
z2>lD#d;2T<&-6{&pLNSQs|`jg*4>{VDFzhAFz)bNm?fSoHed*-faLLL+JV=W-ToPh
z{Q;0}hX69gtM5jRpVU3p=7+Prq#ReDTLi{28)*5$y?QS5U-d|nhx9q@82rgt{T~_R
z-~KAV4^31By2Oxf>_E)>@GS9aY@!lw-P^OHN-%KUz?~bqv=Z*?4^(B3=dfe`*YB@F
zhqrfOq#)6Bim2|rOi^z5WECL~7{y@^7JxGLWFzD{MNNZJ!@NI`OY>E@*uTJlx4)7I
zjQm7`G^*1^D|t57e<>`z)l|*WFAJ~nnY{Px(rL@U@slO!LTA5N7XNfyk&ltjlgyQ)
z(&0s5Md3wOeM>O1e`%Ax<`a>64z20!WNb?pcYmW?4(jQOOZTtCn3Q|BL*scFdk=9J
z26yIkcR@^Kc2c_%;`~(V83w1ep*oqt_ozt1Iv*Lby(sO9Hwhh9{}93u@-^dV4wsjA
zCw$3+?ZP+Rf6~*mYIpmImQQiIv*{ds9t6^{N%MY!DS8JP&+iT@<sGEkk3uw&kCUX$
zU*wI>%)MF(TN!;1U;oBp$bsi4`t_c8G8H3z6VXch%A4XdEBi3%%({3@{vo@_*PF6%
zeKF#(s&RzV=>_d+=FAz{>rjR4xAyYvpKtP$3%-}-MZfNFsaCZ<g`bqL|9=m~TPOB^
zPsKFupO0>C7zpQdxu(=SUw)MLFyINm0_!6O)AVr}J*Vj@58n>8QZK^@eER!hZ`b`w
z%Fnh$$a4g0L~xU5JqN31<T)O-cTHm>b+`)}-z7-VptylEYN}RE<;<&*CtzKR@Hg%e
zjgMXJ)O(t%9kXuoqEp`SZ+VoMDiGx(gh1a^Xe!%LMOf@U*mUE?TBcnduB0x?*l+Aq
zO0C^g3ud8uyxETn`Id9CYNucFWXb#C?l=EDl-PZRjjVYuKDE1dN+EbzC?~?UI^-dr
zn4P3in_@@fhJ^PgT-*c-nYC6dUdZ9%`|H{_uK#$s#yDS`L7f45GS(YVuzrl~o9Rrr
z34*Ly85Gx8@n^0(B}a*bIXrYo9e9Q;!DQAmXS==xRGZSK8Wq-5>8Ct#-3~!2I_W%v
zCnv3A9v&Osp9jU%icxdK{&u8Ic<TvC;xAS)Ei5c|H9^BpjgOOHWByMS0jIm7yy+El
z<_}{zu=1j!>yYfxc^vqsEC6TTjcL?rqTGau9I5rOwcM9qo9pskoxz0h!L!(()jZ9c
zFiPgR&(WnX>omG2N%1}#A1afThi5FmVkZelJ-2@p*1Ou)Wu;g0vxVSs440;3o5(mB
zX`;YJZX-#W@Rw`OLz$50Q@XC1R2l8*40Rujt}5;eRcX2wV-T0ZlO3t3>4a#IOSin|
z>H^XeB4sn#rPNJzln@+3hlk~Fm7C|Mi26}>(ui8UzNGC4n6}gzURpaD?81%MlV>!&
ztWF*;b^-ee?@3QPS-)J^9K6A<^JAs(VBB}^0>u-jyd?TeS?Y+MDq(Bu9x*qw=V}2r
zv#<N!c<Prs&j+$;2@3|cHLT-1{anz`Yxi}?rl0#CO7gqD`0w0L{31z`n)13Jq_6&+
zNmd`D?VQfr11A+V`oI}NOi=S&t!H~0#8tbsRy+{dy>u9j_<-TBvJ3n<nT08QwQ1}h
z9%4quZaxFDBdL$Ec>Gl^(&UOk2==SvSfaSD)N9j^q)6dJ$gF5P!ao)2U#hbbVU-cv
z3GL0^?@WTu@opD$a@m&czVrAp{_*g~qqKm8-E=41fejAmHYKw=i($DGlp6XZV*>N^
zgXTl3hwHU5*W$3ShN;`1dXlv}!y`ju2hW}GIf+?WVu80kNdC$D7Zn5agVq0=d!7!p
zRG>0Lmz#gn!=;_O6W0wRjVnJ)Su^dMyh=1=N@GDYs*gm|0^k2tyFb>q6iezz5#crs
z1^)ar#x|^_HCG9jl5)FCBW3=qDG1iOWcG9+P&7RYd4n*$Fv&5Op|F>>GhZt|Pf?k|
zqFUN~k;@SshFOGhqQ@56@hT{#U`s*n^A~!^7o%ePo5Cd<d<}Zo8*i<~MvV^{xND!b
z`#5iEYB^<Mt;VX!RR!Y83XQRaNAGd}ngw7yIx#0rb~MV=L^QA^6i~Lv&Q*S@&`*zZ
z&|nD{O7^*ujy_BE@#tK78>{?1U0j>Q*}R8+>P>CbGg2mrs5kfRHJV?VqnLYKza24U
zW0u~M_f0$JoIM!xQmT4`P^}zDMk%JAnGf<m4bhMIo46qP-lyplSK6&Wozl{vx9)Yz
ze(bKY(egC~;Nm)<bGZoL#M(6o_AwZ>Me{w!`pp>sVV4V9Y$fNv#%7hed`4=DI_~ck
zfnrSGFu58&1}wLq7!nTel$x3WsHwQha$<@&1LZ0vlvC=Rwu&6g%SFgpouBLK@m(E%
zS>f6l^Sia9X8Qqel^jlIkW873H?YtH2&uW~;%xAch9ho{Vk>b`T3Md6dNPBQ&h8Jq
z9IYIO>deo{TQZGXBF3WB#+zQ}9)aX}BCfbP#M{5ma`M?yU1iMY9l?t}jSFA30M@XS
z^yBexxZ=7y{@Xz$J#K4^VQ2;?T|!oqxY3Vjts(}(t1d>|p<}&EP3<oJWf>$PGKSqY
zyK6zL^@pee7=L+fe>}p+RJ{)^P)g07g(Xi1jSH%fWdv<ix4oi_=g^GdCVltHiRQSk
zovj8G^`7LH{{n25+r1g~RUW6EmU1qPc}8T6Cs+G-HES*$<wYcK4}|yO*>tDx1Cbx4
z_A+d>*7-9ZD4B^-+g?{OLlP^04oM>1*65FxkGeQlHWYRQLetLR=1~RR$c1=#3(8>*
zmfL38)A2JeQ#vYJm6rVIajNpo^Rk0-W)vMt=4!TH;GmR3p7F=jeEBxR`}I1`xp+i`
zyOGv)8mro=Vo28V=5_WlhWT7g3fJ1Q-{|#G-?xOJ%?xqp@0>okC+!!{Q$=vaR<v8~
z|LT+}6HyUHG|I7);w;uuzS3<sU%#;5D3i6Jv^tUbmlSu3P6YeS1id(HAAEyt+IzuW
z=E_f;tw+)e{hJi|+Yv4(OCu=3ClDMD{c|zQANOD}$X(b-m}laC0i;8e3(|glcunOi
zLIXyuN{QsTEVg+`NYpQB-^7Ah@Vi@+ARkJW11@ZC*b#PJQVvAeGNc*AYEp~+_D2Ou
zu>8zkM^96MtDhG^I_U3v?t9aGK&icaui_aqBcBi~3dU06e?dSx7xe8ce=+f|YJr!A
zOqUsjFr~G`oqI+0`P1q*zmwefC#+;6<tbFF(f(k6izs|a5@zMnZ!iDm)pU^Whu6nJ
z7)Ijze_COmvU>W(Z{IXoN(zX*z#leZPXw!wbjS-pGFHIE*peY}y<2wUK{+QTrlDpz
zN$m${GTvtTuYG$J`*U-u=<=<KvH)9Qt~KT|(2y2RBSAOPQsHkf3k+xdNMXS*Zj5bQ
zk>f?q<;pwX#h^lv6k+nieA|ke`)$gkS<VZMObNz(-B?x|gCb@v882u=%3MiP;Y*z_
z?1miXMyr^;1bsB(bPPNau5Wj<Sc0mRj8(Fog%!~o_#~TZ3m!p2h%TO1OB>R3gu*SL
z6!lZZz9%LkN1F@w0cW<6ZUYVyNo+XUpE<fhu&B6R$A|Xjv{mTFdM|n(NFBne>MfUg
zYHRYX2(1a%Vy33r<vm?dg3g2<FhZ;=_xXx74=>)b=8iFch~lMe(O9~A62tY{om@p6
z&V7wP_HzGvsjF$q`|Y^;j+K2bw9azFX~lqwf{B8I$EUbAZ2l&#LF$Zz?=7k(0nKqv
z#roTjN3hAMasK=VlUlrPhKk#|?#C`cLVOs@n^CiIaQ-WMA?Z*Vm7*w(QsN)at`l`O
zor0zeGxZ33Wr%RkMFvjpwXbQJi{<4giY$gYN;E6j7F#w6vz>W!@;lOGcjYkcqBQx$
z^1S<Oi9nyysvfMH9?mffdH&@536);JD6!YE?mC3)W5i3F`h3@(OxB=;c;?LVi@{O|
zj7d19rh(SfF`CqLE`%`M-{Hb&?Z#|4t-~Qft8Jd*ENX7<l2wQA(qZ#5b=y|qhGV^W
zQ@8r$(}<tIu9z)^-c=YE<W1E7U>;2>`1Dm^jqt%{-x_W+E}1tSUC3^kHV%gXtE|_P
zj?lqyi<NpS`|T&y!XnGCis!Wy#}DQU-KOD-`~w;Y3$2ZIQ)L!w{tAsl-PnYfAfXpp
zDov6PvnHsT)GBJv$-@T+&Gv;}S*KlJywbrL{0s2L!$k9M<;$!1CXSdcZG9uXL?ri(
zFoF&H)6!<1p(tg%5PZq@HGyyRF2d43(bUX_L_*SOmZq%wG2(CP#ER@yejL7Jn+ZjL
zGWeEF@Clq@BlFNf3^fbHc9`IcD<zV&7ybP3<UyYm_Q&~p%6cB#qX~t5cIG*xM6*`p
zuAD<6*`Iwl5a=Y)!XGol?|g2oYTmiiSh7lss9F~Aj3GbK5j?vwQy3<0=i%9|M2vgT
za!mAD>N!8oI`{z=QBivRt?cY1pWNx#6vos>bPKu2oP@JGovs)@hK-3bH~t*0HhG4m
zbtoQRw$vWR*)(iZ%rf1a`UKyYns2=uG!8PnJWZ_@_ft_TiE9wTc@l|&d0oCO=3%mu
zzM{d|Ham&yF5v||klRlN&EClUjH6Z@!GZ<fiDz^1mD#oSOvf1&z_l1+UN>sjn?8vP
zqhF)K;K%BFY$2qH(_43PND5wppr@tne{{QXWx1F_@W8_|jSE;wJs5RpXIp%&I%3+9
zkWNT2lxH|kB$HL2tK8);<H0?>a??k<@`g5>fiR04tIvB!$4(|1^c?i+%R#zsB>Q64
zH&d55jWs!&B;QXCJ+I215`}JkTzlj2HhRkXu>Ykw+vk<$hp;<R12K-GO;7kV(`R=3
zHebFpKpG(TjCtTkpP(C44U2*CyVncxH53=Mn>g~_U94MOh+gS)l$f=11r&v!jaU7A
zwX``$hL1jSa+GjAZ--u_xOhSuaNJoV$Gtsln#~U{oo6k%X_e|PboV;AvUG@~e;8j2
zns16fcheB#Gwv|fBwAwDV#2w$B40zg7L3&j>b63}W9A%G?XR6n1h9>2Ck!%NqBXJ>
z9h0+u*lC<yE!BpAPQUT2#RvdH)tc_F(l6tif>%U+JYik;@DtCfx^qtF#!m^kaRA;!
zbooVU)@5Q#+Db&W$gt(++}DAi>WLKak^KTe@e+VI1TM8zh~{*3z*aXgIwvCY?!t=w
z3UC1}RBvZA)@xgs>0<rP(#C44@F76+Besioesb;FU#K^4L*Dh5sN@dn4;e}h#(3q$
zjPLm`AtOcY5Fknnc!=b$?oyh;_HcH8gQiH5_f;&dc);KOTeuN^o#T(~b{@gy@riNi
zYG20$DSw=UgKLtsc%CE$X5QiC;~&E=4jo~e81(bGGoQV!uSk2@PRR%Qu2QX6UFk31
z^^h%CHMvD8EnNDqJ-`T<ZCYlnpDbNw<_)Hb!7vrA@diQ=i{=<m;greLdcV@qQ0zr;
zH5@G83zD`?MX2q2%*v3Rt$aT}cua2H2J+F{!7!!paOlkBWNu`_>>d{0+x%h7qsW}7
zz{6aZH{Gg!JyFGGJ<%HDsFbc`tiN%GwtnIoff6nq=YtdfnC=7BO4ZwYe#@tR0)?)x
zgs<NBdXGvO)jE!a4-zY0o&mH{52ucY3Z|!(dC;(PeS@5CZim6Uu8hQc+J)g9NZ0lo
z0Y}$Wxa;R*Y?A|z7JK*>EIhB1g#lD&A9>&Oo#Xh2ZOyeUbuxLV>5Ij4-s#N7)lJ7w
z)juOPlN-HV$6#vO7*A48O6V54=h(^aAbPim)|&-{tI*$1rbJvcc(a`yko-VeQ)xea
zT)A%w>;8gYQDp#{S~*JMz)rgvmUxXW?JNnAqv3&Qw!_eCStd`z`oI<kmx!MvQOBQ)
zs~zALkaxVIM%d1ex-<0@OTN?}3LmX{Ih-E8aY>H#M4lDcw~@z76$AzG$&Sez+PsDA
z``UPfUh}RX@fX2(udI^ympsX(GTUoiuZWs+bhzrdpl%<F(FP%2A!qf#p4mE3)LosO
z$C81Vd-bmScBs-4?ddf6@GLd22|PA(O~I4g+cu(34t5(~=AfK030qh1IKuJ&7T=__
zP(~4MUThz*H88KK%r&HZUpBw+wZr70<Ozpe4`$A)KhH8P9V%X4+DwTO-yeqD)X)z`
z{5?j>zcUZ6x%enx{h@@{aj2pA5vn%cqh_4)3y1^p$LuEERIY`C_X#6yRBv9grhHdW
zOTP$qU@A^Wg!EA|JNx*ojy#W$_f?M-4vw$i#?cd4w1@~Oag#Vztm`tyi?3_tj56Nr
zRDu;`at}7~ONL5#w!uuqSoyswDK<==5Ec6iyj0(~yzJ+RNKf8>Y~Pc%!>MOG4dXru
zADFDIDe&N_tmtbFr?%&CtZN)IL*%R~jvK8{Fuo4hIVzbM|ERkJUy0GPW5Sf3J7c@2
zNH|$l6j{&NCiFgk^6TSa42ktz0aA*j7uvOt?1_~XNlcmC%}*TLX`$L&rfYr$#>dcl
zPoXz3*NzgsI;<bcYukC2pt{C1pVci%M3tJ6FqFp^#MD$%<b2w&P?j|aI-*Z_sh%(M
zR-8cR`MRL<=(efr-2JAeKrl=7z~X6clH#+MoMdN<HcOjd5a~X|d;)p=+aQ*kcNmR6
zKBk+V+<jBi@dI)%Cw}f+yb<Pfh0weExCZ%(?7J!ilq?@>zu01@g@Ox!eI@qU6?}fK
zo3h(|2|CAJ?84eXf1kIxw6-a!TZl^3>m42lO0v$I$=CQ&UaCMKB4{^uCWUn=q-dQA
z-|rLB%gc28TP8*Q9#+2szQ}r1a%-e?WB;18&|{~keqYo*D2r^(pJT<;2d!lHWd1$-
zqJGaVKBrz{JT3{1gR^Up=Z&qdS3#FQL2}&D5N3kHh0DBa#q|*SB9^Z9qA8eRnq9@H
zKYCg`O5U%}-@X&e)B3umwwLW}#atUX)ON-WsECoRq$p{>drse!;9R9drM~#m9>vnX
zTYTj^;2MHS+t;S$Rv!d;TAV5a2q(qd0>hMWp|iLrxBk&HS}Io<0TYiNUqI(=LahCJ
zQA=p)q+#q=8c5AI+a~@_jAq|N^jz$>?*@_HEQ$AsR~F*a#*D`nD@mC<W?R>i>TP4#
ze&opcg6GfVu;lQ{HuONYpbz$dl>RQooD{24TekOTCoNX)vb?hPn6P5nRjIY!)P%qz
zwY9~Q4f5BFgBso@nnWT>s0Mt!R^K3;LcaO@-vxbj8>BgQEP&|fO`Y{+A%W#M`cpem
z*vM6%+0wUxieejz>=4p|%emE&Z}^=>BEEZJYn6*LS{hZoCMwt5m6KoB-3;62^Y+Zl
ze`G9EEm|pBERpt!#9n_74=J-C1-E(0>pu5sqO-(RTyB|g1;zu)FJ8SJc9TXeApGp;
zfn~4p94AMWG(oJ<qMh*QXmBuJhkLLHf@BJ#PKgT+-_gYdZuf91tT$<oTWp+B%_yZW
zaz=P>2HOi`6j8W`4dk4azp}aJSMze#*@U>`+lCXhLVe!|yRI0n4iZ5ss%5lsdGDBi
z@BYCf<eQvBlP}m@@ZNR)R^09QYBu?c#!;UfTqJT>A5?}#9A2P^d>*_|T@?7Rw2J`=
zx3$}#1VTC4b!M#`6BBxB4AS1%2i*sr_IAlGS_+SFlVx_Aa92<qPQ9WN>|NEdhn7U)
zH&!>r2kvTAO`As#=B0|su4PH0xz)>`o!3J~qK#kEaipaO6b0sBf7_JO$z*&nt7W9P
zG)Tzjmt4NQ5l|b_aXNUjb0&W7qdKN7flsAwslOqb486fx+|qO)W%<CUW9;r|d{TZU
zM-eTo{t&BkUXiyxr99`xb%5t0UfIwyvs~gi_FuEnPucK@taC1ZOPRo&!IE{_UoOiF
zP{bgpb=MEzRz-WsE&*OOGNnqf2^$UIAVHD8W!LaRknwXc>(q?2Mljy&l~%b{spMvJ
zEZ}<XrxnA$Q9MyPQJbB#R-J~&fNnA=aKL!kch+Jijo#4@vjyqCy6@_3qB63)EL_gX
z<1o!XwH}<Fmh-7zq?)x4CFL0p)HGu^zLaO!{7RuzVd=o^DjG4xvY7!Pc+bfgKxVWD
zfFgJy%dRpI?D0>+9i1Jyu3nO@-LpS@XVbyux!yHGm_hTiAo))GlK4=RFkW9mS2xe+
z^VaQ*mqhExrQ<`EoAa@*DjZvVR||v@10<Omz5syJxtPRGCbb!38GGF_y;k4+l|Dx#
ze`ZvLXp!_2*}|&);c=C>_0oExHYjvpTb>5Pz}`+V4O4$9rRIdh6cico^DOWtW3l7J
z#Cd`z_a>>Gc6_<hKN1L@BQ*sy3uiGlWIJjbgPW$xKc?~R-yOI}LFqj5R~It2m~G8O
zncupIKWp6{ZKAhCF0J{Pka^mjM1>h(`?=5ByF;?h_nhK;L+Q-aKr3;>b@8cBX6*B2
zEF}wp%snR$-%X4PHPj+L3qUud`X)DbA;+T4O``SV@YBKhrAysKa9}_<dR_iB)5BJ_
zW9#FM?+07OjvZ>S%AHgq)8I{i61R*eN4{0w(t|}F3Wu{FMPh1iTp#+#(jO0_>lO6X
zdbk|x?sai}oNqq$a&3;bmc9=EanYO2*A?pEaJle~{zLFNFVAPc0m5t%XndPi93`i5
zM$Apmq@P>WJ*CCMwvnGkcTef}oz-#L7w=5Iu}EvcJ?`4x@ERH1?Kyjj|M6nlc9-rt
zt$@1;Qp~C)&jz||z`Wkhb<s-aqjXT(PZ+m<vfw9pz5k;iw;}89^2*8zP<W!+ESTXn
zI~y;y&5aL#RGaebgo5h2VHK+gn(g4%Hp@UXz~o>Y&x~wG^jXxp(*8t_)wUa{7dWYd
z#Rq{7hbNwC4LDeT&E-=PprWs2nW2<2bH;>gMaqi^`8+2GADr*fKRQMKU~!dc`@pw{
zE0t-N!?bPjfX3`^;iaiR2Hn-14c?=ay|9-}-yRr;+*8k>rMmOee+AbZ$nAhuz6g>v
zP*!8%ueTymI4q?!@_eaN*vV+NzRU&MrTE2S7;FzFLg*y|)8s7@4*HYKwYhNE7gE%H
zHLgBPzf^C4n7+H7q{Eb*ePo*Jrl$6cfrDEG1QtA9eqq54Cf)DyIZ|XCvHBD+O=c|g
z-PZD}8mze}$@dF`-jem<O4Zf-rLCG&P-yC>?2OV^<!8Yo1F8e4FW7;^_Noc1X~}mh
zVQ~7uPu_%+2B&U`WVi^~S(H!pkuI<_L6muMAMdvLWmf*Dt{+Sqa^<;5PYpiG0s()j
z@8^jzoKcFewR!_E)c4Nvw3@UwE%Q~&IP!ou9Bq1Eagt2OmWd-EfHCUsf#7>v<m^$s
zPo>gd(ZJ|JLH51Nn0PnY4x`b#a~^J_<e@gNt9}@g)0e&$!d7gV403U7x8i)5Fc~|2
zBYuY~o%95`ov&uSb@xVEB$$%cHYM})gGljHvhODs#-|TW2_42CP%XvDiK&Htu>(Yi
z%-aca@p^BCGU`*eMhr@}n{ZS7S$^EO<&7|#>B`X<_hso5y=GkU?aa)>p5e=#BS*Yu
zVN6+_qRR5Hx%m@+ehcr_(=gy0P&bmA2)TA%__IL-<w8`QD7YEy(Fz=e4wC8j3vr^+
zw3Nt91()-!{x2L*?kX+~SnG{s(o^=Id=_Nw-Ts;u(|WF=MoC%);fut7HNWp!hIpuD
zE@$=b(X&TJVZ|T*An6DQkdkC3W}-q^C~dJTZ?h9)w@3N>UD90rg)_2J$~&R9PcAGy
zygF1MCITi<-RZrYJ}};V$OB33x=7i3`C;W+c9PF3u^(oKDQ8=;dzFu<5_2~ZU#^GH
zuiNG}<`e~*gr=;qfxRc+FJKOy_13|x*iY2e7WDl%-g{NL1_$Ix)g7<g@Gi*N2)Tbb
za5-+fo`^_}CmArQ5g%Ee2|faKL-dOapJ|D)1%E|9?&9-ugif#aSzokuPTKPc5S<5Z
ztWgC7l96$V8Ko@Vk?@pHcV7&hO^c&l{^EexV)30nW2=8jba28~KbtMaT4fR-8zH0e
zTGaurU?XImZ&g8hvlN}5dM;+eR&>r(8Jw~OA(?-(M!KWzp=uq|?&*gzlPr)t#+qUZ
z0NsIpp&|U&Fn%G}j6Dy$e&)#<v$Wp!l_p2C$RMGfE{s!Pd$oJ?vWLdhZOQUTgr{-E
z$-K$r%JNWv+jumUl}6s_NO$j)%V_d?7k+u8o8{$Oqrc$(+ML(CdJD(FZ;V+fIgEm=
z1hIkOiQVNxBpn;;;_~p}o{g~WT4_@VcKZ9b4tZS(J2~}-L+GUr>!E|NJA4o0eTY4c
z>E|Ep-Zc$NhywUnbc~f9p|DY_FJIf_r9R~IO;~D;aXXjIuJJm8XMJ4xK}lS}%%D(-
z=i|f@IwEchhc}s^^a-8g{y7fLtIPAx=zmGzBVm%^f5v;Me#IVRW|?<nD;}`_>cuhJ
za|afnD$h!d-zo)j4tqdoOsi5sEM9i^Z?3y#5?fdE;@+(H4^W1<H0;zEa!{dc)MZbI
zIST!ddj6sBpcZ;vd2SswyLmdUQQMw8bA)8>1)T;R2sL=)O!Wqf9EAEpG+#V3L@nes
z6Jf$g=!Yio$DXzg@0CUGlFOH!P>jU!j?VjS=NVS)L<S)FZb_9g?9=ezlpvNyG0bag
zS{v<PYrUJTJo}@a#oHnsd_O~fm!07kb&jkK#8P~Cp|X#T6}qb#T@whBq%*U?2C0=F
zP$-4W-KFNmHrUD3+lh;{xgd31YXOd2No>n^{L?s{D~osJ24OlWE~>jZv=>eGrb^kP
z-^f09++U$zWu*PSRoDV@Y?*Vo-nyS{2`WxKJ6w;Vps3aW{VpX|E;C`_J~C4W7TVFS
z=>cWm4>oF;;Xn#^u>lr;61!H)v$fSY^bm%JWB1dc_j18<i&sh0&FaLAgt1Anrk9iJ
z>6%-%;I6f-&n@;g!zr%SA^n&{5cfT44it4X;WV%qW*wHi|Ay55NVvi^6#}96JglEy
zW2n*A(Y@YU5@s#k{+?P=hh_TBVU#yuU4tTR*Q`wb=4{K}X>5<l3NZ_}>-rK<v@FWZ
z8k9;~)*LTG>*=l)MU^?X+#oYPaDYo+lg0a&S`Cn$83GCn+4tMa)ai!1-D@jO;8!}1
z@4M4PVLA^zRoe1wXD(wp22(G3g9MpH<ezjr|4*R@NCWA9RX2)AqVHX?m#GHVFsHD4
z-|w7%ox)VDY%XTrqFzX_QZr+1*#|Q>S)t4Z^4FH|3Sk+vWVmVY$R`JMmI3kE&m<qS
zU2=oJ2!>D53y3(YOAZgS&j4A`MXNIQ0o8Z8Y5bCE0vi!mXJu}s%HvF0sr3#iiJr*&
znT_S3D)Ko6QXK27O2W-JWgF~8^h~y7w(4zMQmL+WNNr873!8ml##8fv!h)Y*bz7Uu
zdgoM(vq1WUA1c#47fsIUb<!ZIo77Auz4q4hohkq#SeRRs3V13ePt79X3LGQRK+4kB
z)x5vMBcp4@Av;~I{3m5udu2PRC<yB_Pr=wC=h@1|g>@o{z>Z>xySknOzq_TAlUY?g
zfIu+7JS{%{#FccgpxV9?Tz>jWQBUk-d|Ty%&Q1B1m~r*Fkl<UR?d7jvnZ-k9KK{v7
zyBfJ^F_oR%dFC{!dU3phDGN=@v6m~gYF=yuZmyE|oLX&E6_7pZ%0Y&W;DXa{jaQB?
z!jmcUvrW<bYo}uT`~sW>`FQDf$*C}VG@v)@EuhP<sph2&*%X8{kKXLI&yBLxve|#-
zHqAP!sx|DKv_7w&0g7O~CcNuu<px(`2`mu-4-K>XwJ+PSt3>~vx~oGyfIeVg{~=wt
zEp;={qF0hBe<}OLv~KlBq!2LlFz=b<67~kANG^T*8y97}tiJeD(zd_CpS^@T2^Cr;
z%L@5I9&J0@1G^(<TT8K4SR356%l+OlJGa^It#>&L&V0VY6jlt5p2t9?`7?)@xRkh7
zLXT{BCAz_}{D$GS8b(b6h-Y9<UfEfQ_84NDk#`7B#~rWt1tW~d_5o>e_6!GNSBg~m
zWfOZ8MA6-5!lWe039Dp|25cD$upsMWrziUZy<u@F>y0eCP##)Y>($e&wuI@Eps-9s
z`%~>pD;QC-C^!kN%3mE(_A#Bv_orDo&c)%PBNw!nl!<d`F8nAfulj<4ErG4<XScOp
z;U=Zrz$KMsBsZRHy|BBk>mZUlu`h1W|D)_HpsL!|wk0H_HXxmXbV@fHC6tivl<w|E
zx}~K-O1eWjrMtVNyG!t2oOACz;Q7w|zJH887;9`;tU2HLyd7(#^1Vez7F)h5zCr5p
z6(={6f%}SozLvB{3Qc2u(H6lR&H+X-Qakm@(#b-iiGTS;YiXn3*Nrv<k~itYTA9mR
zZJS9D2E+G(ujnHZ(v6R+>%&OFwW3<v<pfqGWdc7t_3-OP#kKjZ?IukXH|!m%HhT5k
zZuu&zE&eSxsFxP(c~hDOU}j?|d4czxoK4?uP)^T0i$Y*+nMB4s`Z}v#9^Qe1yPh*p
zS>&S7@{Y|*i5cO2#rq8}N$FUrRj)^(wi3^7$4s8(SST5%*TFI=ATK5Q_o&d?uZFA;
z$~qRY-bWSstvUVL!FS?)97UmoD?n4u+W&b@7};BOgjDPA?&!0?afTuB4j);(*8B(S
zX=_3p<jT;FZ9Jjco}3S*JPA9ejeK5L*jj!pTFkDc{2J22)3{A$OpZCvD0p7GkoWci
z@jr@hmzwKUF&9O#g24GUut}s$b$VQL7*Smd?PO+`rRByHbeHS&E2gg(*fh;%HGyzi
z@4SuG(L(W7_A7QY1GVMvdbJ#HLR2tWG@y;Fap)?ooYKejOva_FQ<;UFUVOXS&UTkf
z=(#!AE0O;BMA{tFI;CGQCC;BF5!s}6L>pgoc8(X8h353+Ev5R-sT_h3qi0<U%(dQL
z=*^AV(YRgzLSx;wSm68NzLB|fy3(BZuXtO}vkZ961{M&!Y>}4HOn|IDRruPC!En7*
zbwD5gtBJNX@f5Y#P^hh%E#_@2DJBEPnGBi@6Lqgds0KkQ<uhghbzO&kb34Yg)cb>W
zDEZ@{VXcW^=jWNu$yds%t*5O;Zq#OF@~^7BGp<f=_Y>&QaHK5o-FQ0$@i`A}$S=}K
zP_e5roO8;0u#dch13A$P@{7%L(+|!W%ENRXWq3iGXq%}q;t60{D2cS;69mJvD3^PF
z*8u7oX|*%O0ud*!;q;>-U{0-FWd*|ntRBT>Yn!9^c{AW!Wy0gUWeC-eGG%}_Zm(|q
z!n19Znb-r|Z)=BY|M_p<G8O~wgbUqk-RHhU8<gIicyfrv&Tz~MhZX6f#Fd_8TUjP%
zC@d)L8%8ePxNKvq69n*IczeSwE*z&EZ&LL95P!aA#PK#jY^QsA=!YAvI8`P^4!>yA
z-7#jKMSdKG6U%O}+0Cf12jhN9uw9{D#cuP(eeB8(gCgkIr?}8V7AG~DTiV9P9!OTM
z$RF|``19RJnhF-!xy<8iz8l@&&8ek@Rq5&{zAIUNCl)?_ciE@xnO?WyNimD!<K(@^
zdNENzF@T||Hd)WfH}K=72f53!Q|b$*3&)wH2CSb}e79Te6s&9Ln(7y|T{GoF8S{7b
zj;Kea8tli$JJvtdjXmMM%QQ6=6i;a-XCo)klmUZ)Pg2LEi&I2`i1poWroFApuJzuS
z%}rlDH|^|caW}wBHZPw|QjYFju>M|kOEPO>)vs|xNlx#7)uMbb(|3^9re6O2Tv(-k
z!-R}cTz#W}k778CRRps1k{bxyMso#XVt8!Hzq8zV#`sqmA5dci!t4^0NTVzdRGG;n
zVu_c)3V7qr<AYK+>+c7qC9l9P0^yVv6uuQai<eMm*C;@Ld^aP8rNX+dQMbeCQJCab
z$QMl|yBf8h2jp`CiuCmpDiecTrFc-+OoICbL1Mc#vynov)Nbc~P-n0O!3VkXVj1Pa
z%AKjIw<Haukj}32H9RY&#sH@mg%#(V>i}hfE1f_chfvaRx`(Jo0x@Ly`txLgYg&OM
z>E+W_*_bEviZ=%Xwiea%vTUx1DM`U<DN@Mo2``>%OGH6dI5wmnXtYZbR!7#}l6a;y
z*?lurH)7g>=7v(^VqMv^DB;MEaZ~lSD@tLhG_Syeaxu9WJ`DLV!Fu|>uNt|I`BUnr
zocK_SNN(elB&e_n)PUQT^8^=@si=)-2N~6qtQKL#f=ShC?-k6HYeSrjn;H!0xp$3h
z&Vh)?RXZ8Xs7~!i@~a#F94{r;5Fm)7fF97{mee4J)V|_Y4ARqBTdI(~Nq${yafv7Y
zu4S`6slk3PApfgUfw#Bv5Bs}jn>Fb?i^3eBa>4kz)u|o8fjB)yK%dMtF)g3PUD@{2
z>$_%@gh7?FnvwcG#+^W%U$Z{Uwz+$mA8}4s65?Wr57Au)rRrh~qRGZAwV)q5n79xb
z!(iX|cNIoWN$T?-!L*@~djSUg@fGTPmoDEI`QAf+K#D=p)e2*){KkXyNTGXr7B;6U
z@=CgvE1Gu?ciUdTI|LTbjuaFAz^TWcfJLb(53-tGor{-<-?-H1G+H;?GR(5JvXL?C
zsAb~)_GLG$F4P;$q3VClXh*hY=YYY>q?v}F!GG>8Hue<-xpt%)IYKYM0<GzVIbSM}
zsyf{amy}ZNj2MyFu5a7Zy_Cw~bWy189h{%9;x|p&tE(Gzr@fW78EphdS8d0QDZV0F
z%-?aVIXh%47Sq^*^7G3=v2wWBw38M-TeabrA|y&a@hY>}ZuK(G+fThyK46r3_I`9Q
zpJ?#;wAE?6_vxg?EmJxNp=t5A>SC`yjsJSiMmG{hS##NA@^5F!qzrs<FgeJPSbOIs
z`~wtj@WUUr68JT18wTY`Y(6(yeTtjoLldB}4rUS>ae^9%t=mP`<lK$3ogNa~OhMn5
z>lw{UwZM0sW%yRCAJ1^%Ds+u#mVm>E77a<7nWn|}<Zi)r++Y&jpfMUMWz9P{JS0x!
zmZ|>g5Od~5k7#}<6q1NR=u7$-T93tzgO~W=pvRsc2j-HXaDqN#NXF{=+34v9LDIBa
z#cF+-&ml^*id`ZJ*y!&#yREFT9yxtaAh00&3Hnc)kNr)1oJ0Bv>CA`JO&yGG`{Tv2
z;%Pb3#8Txu_k-+`fkMz4w>CSVjDtliPIS7&v6WC-M##MUx-YZ6OYmFo@*xdH6ZjYJ
z&EkYV`!olB(VRaz<QleH0}(#s;nh{D5)o0*WUI1r-T8n$*+~~a+pSmzH(0mtxZ=ur
zwz2By)Dgdb(91M92+M@rMxh|^8#<-T+?e95L0yv+EU)`IB8N5J3&_<uCkbbYA5nbV
z8u4<FEK(9{Ix+rdUb1eH*F*1~QuLH_;5Q2E7DwP2@ca<hSq5^ctQY5JN0Z-Hc6Jij
zJ9AK&deLwgJ9R_tzfs>6Z1g2Jn%;4wR>_-9?vliPNQz`v9^Dv#^FSG?F7vaNnC#@{
zFNNpfQ-s!@reXL>&+%#ly4Lz~ZJW{xrXWY3rzrZW!R@E32|voA0kuJjAObJMKoL3n
zK(y+#9F@Z~VlNJX8Toa|Y6d~7;RIX$(#tj8mj+F@K$#57$z!Gjm0)y9gyvwE7fq$S
z&<@*6+LV6U$_+Bvyo%7x43<N5CmaJ_9Oe-cG5Pm2CZns~UOt<@!&*tNk)yLBJe?g3
zy*DYlV!WCD1?RiyP?|_AE0@b{RK*}#!GYfJaIE<9(`j-J7w@?VqM5YrPaVod?o><y
zHO4yS-#_6y%F~s}ZbFHw6=vjQ193#$cK$AWR?PzuSr>GS$=y<OdMfI`uwFuw`?3{s
zbHd)jvgxaSAtw#Hsma;%%Fx=>M#l+Q<>V=s1WHAY{@QJz_HCr8xBz_~TS>8WfqZE+
z`C@6UjefMitwBlBTP}g|lLRZbyREL?w5U~v>U(%eTVOynWzTax3wx8rv@tJR>r`bR
z)O(q&OI2xGVR#+Z5m3J4#eYsQrD0=%^wX~B^160?^D-$JtM|gAxVyD;=W_h3Ng#hB
z0qY%~wea#*7`e;*LHNnmPJ@`~xj(by(aqF6rV-01C)7Y$yqm~4vc%#CY0>@E#Knoz
z4xnMB8z+1?kR)wFg9fXmz#kXIh}`O`9n0XCFPbe*_+9l5^U>`)yq{UhAW{LEG!*Ni
zp=9)HC^0mCttD~enf2M`w|4VMF=F%v9CRMftfnO@t=4BdY7efrS$H1Cm7hSWLkb`1
zWb?(d@e2zRD_}+Re_CyFp6$c^NO06J_>w8JM}&=0gqd2h^^yNgy!3hr$Z?DSRn{yv
z@gd~bx9y98iPrE5?ry{r-=GH5Kej{m^K5q^qV`$!PAz`TAmq1EuAngB$%`f}tv-b3
zMBhx$MKLCquO1t6QT>&%WrD$Os-gPJFZ<x5zy@HJvZF8VR!knF9k(AXX2n-H9!$1R
zdqb99onW7J?iN%4;#$Y7gA3`Zuyg*kThz7T^$%3~MK)Dk-l*B_GS=g-vu%xYfP9|g
z17R`me_eRToh1Xl3cMnTnt#3{LnEpv73yf=G%JdSJmNpgKSIkVU+_!ADm0LB+dbaF
zmVRKQb$aK=`K=ex59w#Rvi)I%1V+Xd*-b?*63l_+5WM_5%GPqNcGmkZowct?6Npl+
zw)(LYnhKO9B|{ypc@I1Jp3a)=7ye6pkFB2ks9!Qo@>u-ZufoA-=V_f{^PS!eFPSqa
z<?|6-M}k?-*2bCb9MJ~4<^kXQH>q-(VbtN%sS5s)q%X|)?gvs>0qmWl8KZ>RR<&uX
zsVGI6k<PQUjuz&Zb=lE)#s1|u3qU<Yt>K~XwsGO0YeUoeiRSQi5Yhyn3lu)|?c6rj
zp2TZSIJiwQpJNAm5rG!9vdah~6x2BQ=)}84xZ{d_M4RR_MHw(@oM1F_yIY+_ZrgF-
z{4{;6?}I8DFy*t;-nV0fv0mh(Lr!o-!+A=byT4*axH#KkX|rhr?a)nn-vyG=OZ*lK
zbYwUjLJ1$)$!Qc%vU+Q#Y!!bx3zVrX(lsdVeK|n+`8Fw6)J%Fsf3cT>U*y-+C1xR&
zX1=Y>r#_&lmPLJTY|DJrTF8TUjcf%G7YMq1$vzj}ChPeb@|Nhm><Pszv{ilOmf0)G
zsD6FU)j?mV!JNi!w}R1ueSUvoy%0I3UQ;Y(a^#@IobHuNiuDw5&INbq7n0htF-xZu
zFoX9>u@28zW`EMFaxEA#K{84Wd{CK!F4eXEVzq*z=D~d*K}_Q0HVntmcGmRZ@T5x<
z>a4n`UZ|cZ_<i0c5t;eaAQe~gh|cKvbj-%M$e@Ho4jyUaLRGQZ90zo@fimR+Y16xJ
zE&D%Hu^7r`58iFykti)iH<kxle9be<rtFPl=s}?es^HjyE*##dlCF{e7*f6+tmw9_
z&ap3sTfbIPAG^ly%AQD$hT&-IbNXVd^g%SeGOirv4(JdF?0sd%QxSj3J1GKP6NWJ<
z?cTICdo#<IHsUAa<`5p@;tXK%{hwHD0$c^n$;(R~UWU86Rh?QXXh9p|FEf7GDCsDJ
z?vl`OW|<N(i5(Xaf@{pRK&v@9NIH2@aS%{UDL=1pw&^}9`WYZr?(19IGWGMD7e&f%
z%32Xn7EviIblMdneNnT9)ax`Dm6L8g^hsJ})%)P|RG#EyJXL|uKs}CU=)+dpqK5-N
zFZ0Q}o@hwDnvhkbj3UyzqLZtAp%v~iVY0N?rVT4C3B8jKPONNgKw`3a|AHzJC)|FH
zd&_*Sd}`R%;MRfe)~))ZTXG@Z=q`dOZ+%SIfnAav3GAD@wM>J}`ND(Ifo=6Kh_)ft
zDTwdzXv?INO;6ksv3?*L=U}A>C$?`)6eY}0*j;IR7Nh38Q!e>o=Uyv@w@E44_E@;3
zVF3OJXmJCHM7CjV6I$AxWZ@^mt7C_~By1h8L!@>tbAc+jRxV{eBp6b>*gmgEH9d}G
z&Fs=dsz=XxS=QY9k7e5>T5PUUg?>%nrH>3|Ap(;>W%dPkT$5T>W+D`oJI|ohAVr9<
zGg3RJ9mC-2xg>QLR{YDqPm?V0*QQ=yaS4&<Q@A@P5Mts~pmp@CS6XSs;wNRD@1zo4
z9a*h?k8b4u^!?T@1Sl?N_3vhPSW9#e_LfEuSlhW(Dm%bi!CS*`&tMy%Z)JzMTF#?e
z`~?N1MfQx@>PFof%rs}G=8YJ*zdau+ZkM=$i$IbzKPx<|DA4^jw>EBRW<tl?bWKJE
z@?zf4H3J)a0PC6<85X@y8goR2H9jrNb=P#7Be`?Y?La?0jD}^M6lx69;MjC^2{yd0
z>03?2`<1@6(~T-w40|_Kt>x0+z<T(H4TMXSnzJFKYLEy==<G?DWSvUx7_bPNgcL<|
zo^W>q4QpXveYNVkvb0y%R2Qd_a$66_);qSVZ7fc$&UUH|%y2=a4|eTUJTa2oBlIt~
z$}UK3OcEPRy3B-A7@X+qB-^AXvd_&POh!e<U46np@3HxQ6-)@^<aRR`icosLVP3v>
zEz;z<B<TlU_Uor6JQ`(xb9ps3vhccmfxADdLv5h$n{{wxt}L?3x-arroHOuxur=XV
zP!9vpuce4vbu;hl6V#<=?QAi*WJ8ES`C{!{&%bBEBgMfzH6cz=PU7%YR&ScBe)i#U
zc;iq>>tF7wS!|uv>6u)#n&I9?q|(g}vQlR<k|m};u<`Iq;T($4UWcQyeHNho#RJ_7
z{-mj~&4|tK%%5#YK2===ziY{SH8GbVU@3wjsL9qLLWe7rKg{Z6nQp?=V4pCl_+oXK
zC^d~p%){E@Wa26|mR8o>?__7w?9XC>J*%y_)r;9@+}|~W!8Hn~EX%>?-9^8KC4x7o
z*=6R{7t^yvYdxlk4CA_nmcKsD%gwl*cXq^6|8}Udg15Y16$Z2uxZNh&o~)<}t(U+!
zV4YmKE~ufnHll0${^6!B0g3!cz)2lI&{zkmj)nGP!_?*Km2`Kms{KYr4=@vavrs*f
zBwZzvFUHMI$5Y4%Jz!-VLYqwbF?N=iyozw+1nYsa-TTfrG!KStbG(RGYTa+SfO^S%
zMTg12H7F6S;I4qPoEQ&#7ynC_F~BKgXr%bLd(JeUd_-zRzcbsap1M=Vi2NuuRRh{g
zOb^a^HAE$6D;pi$(P~}B3ZmK#TL9w+=$Qd7sV<w{ZR7+O1k}SQGMo)W;|G~Zm5tKY
z^8A#Hh<H-Lcge0hWf9qLuh#&_>f(zyQgwsfjUafm@-*=k`$(>vWa(W(3e?jvarUH^
zbyaD${VP@m=`6U+!-_pjb^?a0AJ!49D>BjvKXfI!1)bDgqpn#|lMe4~4s-vuwNMOE
z;x;l8gy!h_cO-ZUnk&aa*Aw(%YvuE)G!Pm<NzZ9i9qYciJ-ibsD;?|0o1W3rwmS~t
z0X1tcN>Wx*58SNIOrst)u4kW5*4!<(vYv{$(=b_uD)!WdVy)S7Fk`VdAT-(Y6Z}-B
z>NpLBBiTM=gp)eh3OBnM5pHUl$Jyx9LARkWRA?b9tTzf9K%jr+Jl?t^cwT4{Gve~?
zh_hXJ{Ir-f4*T|E0(ePo;vH3w&a{5($boEH!uEwMK`|;$>%NL}xQu;N`K?thV`Voc
zzF{j_hla*Yo`^u^cJ0rj-TgCS>|(nGN2eR7o&BnxRz;Vqwd?y%FNhrM#8~@poV{ei
zY!zC>SC|a9E0Z@?FCY!-et04xV>a3Qu-&XLlW(k@{V@B6dk$28Fw4(Z{}kxaOcjYk
z{`Oh_jI;YXxqJBT&?Tj5)RJm~NKBC<q2HX}fY4P<m;Dx~j^#3FRwi-Tf`4uhR?b~K
zGfi7m9DLy_vG`1r9;=%yef)ds1yCz0symw?f=9!iI}dTSdvNi=0eNO&BRyxbQ&>77
zQIlo>uBU%=ZI7-E$VHRxcX<Djj2_0%E>Qf{#B@a9sNMnN4Adrk%`Eb%3Oty<6*5w%
zM=xY+Ou5Xkn%;3*HLog4Sj0o<aIj%{7{3HJGkfvjsE@x0qsL)r92*3+r8-q*52fC8
zX(qn;#Zf83aW?^>8!$!fFo2`_)+zT0@TI-MOG`y-a(0&Gc9I5zDH4jBZk2X(icr-I
zwaFTqC$)BV4I|dMlpbkz_zzJ%kF{jYq{f!Xm`h~E2GeMy_`-bK(lffatO{Gu&6++g
z5-1*k*0q9<ZtM3qa*%js$Nn}53Ve)y9Fr&t9|12nA@v>>7nu^rMMa2FnX&@RDXh6K
zBBM*92UPgsyuu-QoAZw9R&G{CEM}#iGI#bs9`vQIxRSqWPYll?oK$K(m`#XgO@LF0
zn3MXQlf{WimjLR#QHy>Lgc1IeUiRv%+F0_UtZ|ZzfvUFIKq#vrH3VqDtiBG|9b5+9
z$wV~CdgF3XKS|ptn;CTRBo4H$b^J_vMhW@Y(Xa<f6jWIoo6ldDQl+>jCE|9y8-7B?
zMxt;<KT1QNShH&#=D2wB>f|EZ`sg;Jpj6zodO8ET^KwPYaUKW=qNXzE4(CSW+Prl1
z6XQ8%tpY|WvJuXR<Ns*uf7ysW&$#VOcBnGXrx{*^5#MV`AS3kp<eMUXYIs9{n6fZ7
zsUTHfLq&!$#d!7jEIwls`}ZJEUOo?pAk!GNsyU*?cuq@c`k2e8uJ5cK-2`km-pKy}
z00<e9``j#Rq~~_xO@sAV%;{7?XTfSCuH)Ib;#M$2V@VM`nG2)dMWP`=C;0GLeUmmf
zK>_En1^*f)Z7h~i$0|GY0qT{(U>h@OY=>id%`a`U(g@V(#Fd|l>J#y=9)?|k{x2a<
zu~@UBxi36F%OFZ+f-l3xz8<zshI*(s<=BTGAD-1h>A87XhcwQiG`>)?sfn!`sUkEu
z@2qk&8eJuxpVP7tDc39_YSFK4x_fd2)$ihUujF}UJd$YcYKl0y_>hqkBH5?8zP-^s
z{F$wr%d|k=C>tHPMC`ta2OA*XH>|%)Q^+trxL$4r=mGr0b}yZ~XN03fJT5adocXDe
z1RIEv_ccan;vRs47QHx#y(1J*qLzZ=k7J7tB9g1Qa9_FjE=eLwfXe@Ka)9=yFVHHo
zuksbA6Yim|CSGa;Yf2lvM-R|TV{RW|4-&aBnXPNWgWxxCgwe(kB#s?>RvyW^)syuO
z+vkD9^XL*%+|xtHY2yfih0J`u+thBk`J`|y{OVH;?FTp2H=YFQhPwk_c!P}$`prc_
z@y}eS4QW|^SUzt=+XP~QR53+G;bOK7bjsPk721FfrP7KiB`<I7uR5{()Nt#xSPETT
zWBl`<ZB2*1aI-x}HlH(V6J#q$KhC_H?*3aB@qd8x#On#>l6V4toDuU@AJADsDY1Qd
z;Hrqy6gfcPShfBYsF@(>=MZ+KDG`fKQdKQosHW+dAzt!(V$fd)bVej_^3UD9vhrj9
zO%`!`Mb{XL28E8$<A2~(p7km{><!RkGA#ShAreo;O@(Oy`H0dF@C6ctT#TX3dG`&y
z(1nLb2fM+2n+E6>{WV;6yC^HP`a(4PUB-R?Jd@w5OKAB(FBGicyH=nKRch29Nd6H!
zKE1qc$}?rPv$Y@cNje&%$PGW!QsGkBx-}zG>iiAJjucX#V!=DOs+qn><sDsZG9ptb
zewxIX5#*r!x4Lai*c|bkkBbi;E|eBh?b_V<?l~7wBe6rD(~&s>RDtI46eQcj&|)Gq
zlw6Y;ADC7%W2gfyri{;?lV6a!PnlR)xW@s#%79}{^oRmWUSK|0?LF?XN}mqK2)_kv
zNxanJgKflv^h0V14*M2tk~bb#WDGslNkwWYD31f%4*&;Vf~yEZWOs0LL7}78*d2bq
zS44lGsTN<1rad#{>;u|_p>vuOj_ppb{n)*2HcBTSSu2cQb7LG#J>6l5&)->DjY65S
zhi~osC<@cwch72zztl^oU4F$2QTixz_Mr9Dk>=iGgKhdn+5q&0UJEVfvXoySiiU_*
zD68v@exS~!Nhd=7`PL%X$%zv{3~>cC?kq0V1ilIH*Y8#2(qV`Er|aK6q;j%GXTl#@
zU*KjJi1Kd1>F!e7v^)U~_&AE6g8OhA%ZJa}nXu_UX_^8}(5#QzS0CK&we);Sp)$GZ
zwmv!K?n*g`y;D}-6oyQMLe|ZMcMlyxNn%f;#Yt<*1P<J6<~6#I`bN1_`8mbM(mYk;
zO)230lpTAOTEc&^4Dhd;W55>DDN=X=dK}Z^Ov^01uD~>semn+^DZb<2S$;e{cs-Oy
zm6#7KdE%+3+q2ubjoB$*$*01hZ%`oM97&p$i$(E7d6l70UO)KLCy*L&mc$b%+{pHH
zMrjZ%&h8L}?$(lu2A9Y<ZR<m!s5U=zB*H?!ocdsYLudn8Qi48=eWz9FTCvm+|7%3Y
z!z2Ftx6qNEcZAh<gpR~}H0NX`PdO&YXG}--b$z^g(Z9fZ9m2PhaEZBh+~|?tcN=)h
zdU4n!={t*v`0L}7{`dd<A7FTaF@_dbCl;Yl#%{m6KTYv$(MofTzz`b^p_KgU>?1-v
z@!3g8ml07KB_Z`j|7Fjg&$;Y!>^}_~um{A?!;ZxVEcmxeFY2_W&cY^G!ml@>x6i~O
z=q10JFt^tTOk%}mETabKg$?Pp1%-yB6=Y78xVBggEx^ANHiEjCnVGFuMUDOVfRX;X
zG_lC7{r4<@zf<qD<X_Z7IY4H^`T^;bJEO}+0z(t?eE<*hhyPmCJW4p2mZ>kI@;bm&
zDTx{h33C70>HF=%_{!WY>EC*T{zI?_;QiMnFid6hz-s5f3wGOGrwLM)n2#$GO^2kC
z+ki=8)ZS-9X%kjEw2{i2mPOj#>ECB1=JjQaq@QPxU~g<<A#bbgv3mO(_5O33#6!@R
z3v7$4v59wtHTP*WOA%rU&iCwzAM%PwX+_@fgJ_tp5v6@coRffbx~XiY@0v-t_c@rD
zpDOi>xO4*9cH%bcDz?{OMEpD99_$r5!SfDy+|9bnk|Ag_3>?<TlMb}z?HVCTZ6lj|
zGUQW<O>xtCiGR1`*nQ$5|Izd!1co%Uk1%(7XS<gA{|6rAX-(Dr7mZhhKuuXKsa7It
zaGBxU9#mcVfRqwj#iFuKaWDqM2<?^cc5s;w6RaOE=yMXkGP8r-?T7#0#}qbQ5E$MB
z-@+q%Wlm8B1v8mAObp?iuff0J2K7esBzA!^8n<Dfqy?Nmas?T{Ilg4f(hAbQyZ+8)
zY-BcZ`r%R9^FJr^NH+ZOEr=4*RWk9wtXIP0K=po>h9k+RD72j9d9BacdvHyqL&yOC
zs=L3liCm?c!GGcK0UOdBA!Lw1@}2a%gsa|sWaICzApefH|MBSHo<rR7nl)|!BpfDQ
zLhwq8cDyzIget~>CbJ6DOLcs7+W$6M<P{=BI5dew1dG8Cem|3*KT2eW_VE9GLzV?k
zFE!W}M`Q68Pu5))4MB&#;36~O0#{tt>Tre$f`T2m`4FX5b3F1MwDleaaf@iOXimmm
z-)7%83}dw8V<T_<O;C)k8UL@F;+TMRWk@_Q0th(xCjqHHp<zk9y6&-E?|PR~L=nA?
zG7qMW5{N>gc`+mI3YjL5#toVD#Y*a$xS#qw7Q^KKPC(#U*Dlkp#ejYYKg&mRo*jH2
zHcl8F(OP@1=c7RC^PQFi)H`Iy(=aL>TOtPaW*+r3_Xqmh?I=xUMd?K)5&t|IN?y*k
z8UM!zM$8CJiwVVA@k7eZ#=_WGB4^_KrL@M}%e!xeFKh&Ph2l|U)#TvG+IPvKN?950
zaa|xD-~Vq^d6_>u<TY)KqhoKJ426NvM9?Mc7}*a}F{+GR&59_&L+l3^pjLOFDw79~
z_)K6`IH-KI!-fJ_wpkf!@QX;3OSHY>K~<6d<egb`<Y#L0xz7b|*pFF1EEz1J!_TF}
z8-YBDl5rm97{{&6SRrk_%hn@$7cqi1@o9Ky%NnQeAB2+^`1$7ME^(tjT{RG{4?M8T
z5NMu+j1R00QNqL(dNUZF8G7Km#-RCz8ALO~=#A({dG_N~kYho;+@y!2;zlPkbP~K}
z$#}Bte&!Be;{cbcm@2{^)x6NH^^NMyqxujCxYK&D{H+#s5yzWu&$aFeI!tDHRz!Ki
z^#EMzx0-LKyL&tM=}<qd1(L2mOn3anI2`AYt_KMRAA0wSs2pCD1|WX?kP2@pOe?YK
zm^`&WDzqq>aL0)A%5U8Y_kC<Q4L4^P3F)WYw`?tz7tjNQwrmn~pYxQv?}FUqG~}~?
z7v4k6z#Hh`D{_Ar&y*ZY62gAix+sx|W|*@&{AD=4&)r^od>ZxYaRlo>64%QUW65R0
z^+3hk)#9c=pv#XeQESQp5<ff&&7eQVR<}cV)p616Ma{(X1TQ5RE+KausaUCr=8|G)
zLf$QDCcOTHakIs`_-)*^nVf{~-^Bb+VyW3FMQDlJSn3_&8{555x^ETw7m(D22|q^9
zwDtZ$k{$X#S<GK|nXq1UnQ^tiLxQ|}UP32n$hnX@i}1tFUxRpJ>Zvbe{afLK<P^$q
zZEQ$BR7z30FE`nXIm(JTSy60z8X|?YEa3_9zw!O0cv_h`cHyiGvlS+d2Ma>HpnXBG
zp~F@Dof7W^{Qt}b5UFs7yvB`+{TBsm-!Cez7T9p1e^P15rhG!|3RsgoBvg0s0qkK@
zUFfV%k&8`wEuCdj%lWCD&5FAmBjlRO!Wgz=STzIxY@){olBdPfylvRw^+=O0?P2}A
zvpt2dg2GH|HjKE`{cw4m<bR;eW-QphhQ0sd>y<|3+#jM**xR$|sVOk$=1FKm;_ks7
z%*yo}2GUsH_mSx*qi9`Pj9tJ~E>Fp)DZFdS)Z)v6rs{=_rC}5MO1^zc>MyY$+Bv{q
z;i@tjo!sSjzeeR#FD{SS%jfa!G5OA!_;mCi%&wsf$Rv1^<UiH~5UAuz10ay|YhpS+
zKXG9yHh(BP67kNn_9`edymZU}z30-3qq@4t?XSH(`JYC9iP~&9S<C>6ulw~cz0J?6
zQUi7lzdRn*(uiK76jHI)j4?KhvsxEZ`z?Df3rkkkBq7m8hwYIa{%^?z1SKRr4}?y5
zjod((i*@TRQ?3jEig;f%3n*>D*EUV!O6WLi&w5pb4n1qfb=Y|ekpxtzX1Dj=o0^)?
z$5F>y^Cyd0nUs65I63ZW)ovIuiZNGubxKqZy|h;8v`lMqR+bAsa{mRRz)XTHEP^OA
zos54tIH{+Xge;4}6LF+J?%53x1sMWq6i=Ce4msUr?35Cdbc_H!mVr;2E%z2eI9u=i
zsVzeL=_00w(_eRyGb;eduG*h|TX$}O)iiZ*ID1~I{c!s}-e6T1{Js1nH*u88S}TzJ
zI0|3(jc4fNRQ<nK=achf(PrIc&=n=&K&UsA`NI*fNuxt3j8_Wg+j97JrjX4oH#na?
zUj<@Job2AO->9ta!v;$Z5O-iz$L`lF&UM#SP1;0-b3dU7@`{EeTR9%mhIlEv*(=Ye
zGxKG-`^7mSm(Zf`KY59l@}38*C%guY7X=os;Ry%wq;O&k-bX2DZ^OeU%zMC4xtrOP
zW(J$#zEZ>!SL7sZa#v)%VnWKVr=i+-Nt>w%`I}B{xC(z6vEi8-nWXo3?8I<2#IR!M
zmMWR93&1{Fm6m3+_N$SW?Z9)2+G!J(3Ym&;AN#Vo*yBq0Rn276DZ{6F?*vaD`&|Df
z7`Ryku&v?`=!zH4qpXYL4>))578BQ9#wbO;#<e&~KFcHnIxhoAD5;zcCHLPDo6?Yg
z>{}^r7#j}^nWQ4?i;|v0Yj+c3?{j)(ZoYIrDPZ4Pi(wdb6Wh<I8er@HzJs@8IJ$rK
z934YUId?ibK2kzDf(?tTpXrfE1=k>qv0%!WxRfa(QXSz@^6w#thD-~=v_;6XRO%0T
zwaIRQF@9x>{H*G1Q;=r&TlvC&W=Yle53(O(5|Xa4UrxjBQx7sxW_GM_9m3~O{aTA_
zH(Nl0?Y<YGfOeK?Hf55Q5q~+(QfY5C@m4LxQeIJH6UFyEG3GGh)tV^aaMn<k&-s3U
zJFR)*v6MV@Ay~WG%e^_vyEtQ-%Fh@q=0FvGIRz~mCYkla=Xp?gAcc)!X8+I4ho%6S
z0|CG2V!cxqb35+LqDSKPyB|Gy*~e$)i#ez5;}uqmNQ7}b1!y;;6i{ADY$cEG{Y%Fl
zDy0=R!~pI_Zf#Le-VO>n#f9ZWHl}!%h@^9LkW6q=zn>9kQ`)P-2ipvQwea~SGIaCz
z*A$>$t$2D-bd`6~u|uL>UOKeRM6L&#hkR}|Yj3VsNBBqfx99CI0{GuvNy{{f#1no9
zl48=2C+*W^68`i~FdR42W^P|}=%M}qs!_k1_MKjCuJrxN&i0El67en<s+Rcz*OO=L
zJ~b`QHoBc?V|1f2P?FW}X~Im(^$)_87+$ICHSm_L6@RaLuPs}*-uS>UZrze+iv1hI
zJnI@gm&uTFm_h4vIDAsC(@Vn{d5zIZJ8xfRZC`nW2ynrcE57UxMS6COKSB^hE)aLb
zJUY!dr^^#4Tk%9G>2&^89P?CnX@w>Qc3ddr50Ot?08N7MV{x&D&sL0;b&Q{cP@-rf
z>sAmoC*Yay=-g+;<PJgDe8E5~vC<hYgNK6XKc>Zfa99g4j1vH}HJSC0HlnNTN1T~f
z7HG5Ri9!1an{NAvGj#9Nl$B10<|_J+`Tlo-QGmnX<q29sX}5t*&F4|r)f6}|b@jii
zTWgXVB@yz0X;0Cnct|Y3<5@`s=IyofUy%ohL>h39UuAt>OeQYK$lv=p)dr?5O%l-E
zD&zPS;cLJh`t8wN!oL*0r64g-3$~7!@CFOH;nVkxFjxd=NDX3MfuEN0<}jie!_^x@
z+nvZ=^XWYJxHzTaF#VFTva4Sx*+%etit)neprJ3lBZ*K3T|aYBnrx+Hoz4SXzt>VZ
zHZqI`DH8DJA=W+FA-hE&i$h4ZO3^&Y%CwwjX=iy<M@Fw=Dk+?+kotg`Y7Z#**Ci~Z
zbT%b!JZ~iVhGaI?Q`zX7ZXj_8Ym<Qo=|%AgMDPyqzGt|&>g)%`UdjEDNPbD_N8aNS
zAN8@!2bg*arRvGgL2;2%z~d;%O_y9ztWUJZQSW^|v70p$t8!nX>sJM1jK%tK_z`_Y
zAtm-oZA)IIif-QoZ7j$wu78-Ip};0B*B|;Ue&LZRJ0B@Zv};}VnmY<$wT#wGL~hxk
zr~j~r8%Wgea6!zS(yqEZWWr=J2bl|U(JF#h@2+%Nu=f~zG~l4U?&CqvBY1M_74qb?
zSP-ArHB!RaFH+QD1B6Gk{a6r@9P-D0yv02El@KBkqD3tCIL|R376unR72V-BJW5ee
zQJ;9PiCI13<-8RqU4(UEh@4^cjF)XkygE*~rd$YGd%TvHf6%diGk9~Xl`=fGrSCuD
z{x4(VUq|p-o|sbsD?msXx&2up=1*Wc@;U}84%3=qfueN*Ptb?oPmMzuk~?q4XuQQ<
zrLifr@i~N&9?~5`{Rq*@dfVREu+fXC;j~m;ho2b)DRFRvL2V4r_q4yDKitN{wZMsa
z=|-T6&C)_utfuqcKVH9_{13B}?E9wX*pNG_mF>g72M`A-lvb1d2EJBBV?<OlusJ`7
zy!X{?rM~p^&A6R}?L6fq|AeyU@OvWD6CO~$N6^-10wT6YlOrGP2nYj3>SR>b=@J8M
z8w7p%xq~S}F!WtzI&C`j-}wIyqeO|eA{eSzbS8Q!U+Bx2mPBtULVcM-#f94>*tZ*%
zrCc(zp<8ruVFtPOcocX0&~g$XN+KHM8={2#;T6O`Qi0p+xtlO8!dW(-qM+;%UjMQu
z>Q4X`K%6VREK2Ryh;j<i-@@TbK)n`R{fu;$e!X!<@i~mfQq0}k89}o4VE&?XJmJnE
zi|_3+&Zde>ayE6o3-cr5D0CKSZT*D89|Dn*f4r;_Ya+t-|4Yj}<YnMnAlde=w3gZ)
zCPJNxE{h*y^xBf+ZV9=a>n>Zc4BJmy@ipys3_cbzASO^BZ_9J>DHj)AMJQCU;CC8&
z=F3|zwmg$F9<A;J?rm+T6~@hP@)D;j+vK>hr~=bg!g(0+brXTsK1gN@M1xyGwfvMd
zQz+sOr^Gy7BWN2EkO(UoeR7K<6Lw!wh3O>&fX>;7Cj{F8JSpP3x18nD(8GE!ze8^h
zXjebvdBEL<t^(HuD9xyK;}omJEah9AR|bKznimWt&%?w}is&qIDpP2GXf1f<k|%u9
zv1i1X{|$Q&{#~mgv2rxU7__!>2vn;OX$`YB4pKsy4>0_pSGVH3o^P*7!0K-qv!xht
zVt}}c^2Gam<f_1>e70+qXk631Lu2_5)kFO{I&J%(t(yP&iF2rLG1uV5kSBY~t%VCp
z3|j~Sgl516rqN`G!BLp74;3{KZKoI-F;7SGpNUDMp=Z66HNvYTKJ3xydtpS*WdZ6z
zb4K)k`d~MYF1<=XOJG_FW~p?29v_j9Ku@o%ro<=B#NC%aNtDl<9~Xpy79b@^4viZq
zJ36O}YUY-hj_~_%ibG&X=;1l&xj*tvPm9X;f0@uiVUL>fH+U~foFRai_ShAAv}Mmw
zu(o(+)u1-zkiE~o(jkm?XfnSiqMzVZmVhv=GSp)}0N22?R45yoT}3c?_lnJI-awg+
zE#TBY!#`zF(oIeHjQ0-xq>rV+;bljBI5aq!{cFs?l_XN&b`b9jCO#3+;L^uiD`ATG
z7{Lz!2WEtC-+?L(unx!$#?B(!1Ez~E?3w_J!jaHfg9-~~LgycPL^}vLpJ1??2}L0l
zcjQq}x%w?7WU(_BV|Uzye#C|2TW24*dZy8rN1v%7i?vC14N_K?3Pf@`N6j=RZ>+JB
zigtGIq***%lSZ8we`BkMi>g6*DY&!ZfT)`(opEf~AGsn`4Zi@U{bF?-92JjEdLKJ@
zL{o4V{8)wU$aaR8Vy~Erk&qGhndNKB)CA%906#*c`jrqx*%K0~9)YEp1|&^B9zPC*
zsfI<?sl?sU#?fn`5u0*!*V^|5|Ak7F&jb@myG)s6RQ=`3T1?lEeLB(|>yKYOwIGgd
zAz{+CyJg}6Ox)w0-}DJFG<049x6!!3fa5qdq1kCUHu5?q>D^N<9&cuiKpF3(Gf`+w
zA?w=~paZD0T}HnkVx7JyBR0&upsV|fVt7C{zj$a4oX*AhcsDsC{NqhOB-mT{mx3ZA
z%YN%cI!qu~ZC_V}2{0`w4r0cdA_em+h2J`;fwrqObdIs9cQm~-(P{Z>WM&oFJT*|o
zD}v`+s5ts$n?cMPR);bCAL9q`o=bR-kZiIC8yl^@SQOI962#kFHaY_4>~5xU$CW$=
z>w^_Nfey<8zYb9bl53^JpdF<~;`i0O`upHlyc#LMoNryE-x6yr#LZbSoJ#<pj&#(8
zEMYY|L~sq|$PMbb&}>;>bc$ya_K>iO>&~dyet6bU)fkwfGW^y*v4LR*`@_pxQ$rRy
z4!$rZ!794PDeT9_z@fM&v$jz}%aAHF;TO`Dc+}qKFM81ID{Cm3JA{K$RWg3#S~xAQ
z9&%L2ENJ!0kx7>sLxakLGIoOCw)fAy6f?@hU^Lc*MlLl_by@K1j@|U7*AK6yOKrD?
zu$?_jm~YMAFc+Q?=PS8?jGzZiSGsf3CRn41cYb_6`<u{w5F`bmLE1x>enO?u(p1j)
zkW_CGANcC;S$}9B@Ha}<n)*z6_{M8z3mS|`TbOotr#f`CJPYxOVHt0do$;w%IBC|q
zsizv8TwxsL0?@J@l;PfI1Ql|+1gaE}W%lE?QciCuD(zIdUY>K)eFw_p$#Ln+j0hOY
z9FQ>AkRF+m4;FZTnRWxImLN4s>jS1mdJ7K4X2B_CLeqgVJ}3cR7w`Z9z(nTgpfsY&
zz9mH$mE25v0AC|QX_2gl)PuBTnp=0v_|ObC_Vs}SMD5|kQ_8y}k6iwT5A_0}22940
zzwAMXcw^&?-EwK8Nvcen(J@$52<sQ3r0@*!FKheW_Ti<JlA(Ys7OWyeZoC%Nt*0(T
z*>BFzq=b@q9$z%p8PK<cP`}+0N0j(5hW23Pe_X;smPXWmdI{ArGK9Bkw0d%ej0qoT
zJ}(X1@``|8^JmyJh~mJAoJqSI|54xZ6X>5WrD#QGsc?z~zqOFL%zhP*CPZA1r4~gZ
zgs%<CM8El*%gA|o7l_?=H|6liQhNl}bZSrrO8W{_XlT##Un0Z`S`C}z63VTYl+4p^
zN025trR<N14SKd)U|y|XuR_A4L10`4y)13JXRS{Qt06?)qDX-$C?gP=YeM4pn<#%w
zH$Jq05JqXAVenq^$l^FsHf`y(I^T>SxQP7HeSgjfM_|QQMpallge%}be&bzg!^M-R
zAG8N<ivvb0?~xM~6DyTfj1=ph5ko`jHWTaEygj#SUf0^CxhaJQTJrEVZ2DUuIKGoi
zH%B0~s)1j^KUIJ*s?6`_l$h#v;_|;~93Pz@ALnJB=N%vaaJP6eCU@6b?3}lqe?9r@
zDFo;V@bUTx->&_tmLtWo{@L&-uK?~vK3Blg4YgW=Szdi1Tf353VUqgoBHzP2TM;NS
z?<a7c|MY1-CRr+*HJl-mW1XRWU6A)ahN7J*-dvt2A{!U3bc_cWOGf<U!RHg67bQaR
zKzQk49($$_-t*4<TrE9>;#!l{RvLKrOD;@}%1N+e%xp1)s@Fd~^N;U0C7Sz};YWRx
z$Rme*<ddnT0x)!5DD<G_=T0b(!@`9^{khYB{~YoM`|O1eh6Jt3OQCA=_CglKKf}@}
zEJ{Szu$#r`%vY#ZCQ|Bp3Jrep-#)Q#o7aZABELv;XwyaHHr83(G+@xSZp#_W$U(h`
zO@Pf7czpW`^lMa94d1P<q}B03XKxm~JX5Y6JX+DO0#^04aRkK)Y9I~yb5x<d-|l;~
ziZo~V08#~KCV_w$<ji&(a}yP%*TK_*XXYY-G`=gp-Pz*>{^YAj;om0uSpc5h(I>gs
zb=mr>@&`K*(GpUqO>4e6rbc0zYzBI3eygE2!yjn)H;wL*@#vEQuM1Zy4${VPL&T&X
z6yzSmV{uN>Wy@-Po;L|hj(@z$TKLPhS6r`HDC#3Ez1?0s6Qr*0|CtPLrV?RUUpC5{
zZz{Lpd6;J%PHBw%01pqb@yB&<q9;uoYOqRva=-*sLH(==Qx>Q83)&A(MD%0Gj~;pY
zatWzp^HPd(%kfOxBjB|(uNWg60|G*E6-(e@&wJRZqwW0|w!G3ej(WS&V53Jc{M%zY
zNIt!2XOb2x?V*lyr4b9j$WVQ!=lS%7!ndCxQYeq;GL+gZ4$#=!YIz*hzV7;}ALL7;
z<fx|?I$otugHUX0`^mpfVWwM0*3R-&Bmn=n1A0U>04-^{(D(|$*}F=~`U2zq3X!1R
zc9Md<ZPFpR9hpJx---MYUL5v|t*s^fn3lyS4MI3s7KLv}Wj4R8Z;}p0@r(DjtD<_J
zEz7SFN{`_`BG&JZB_@JAM|=^R%a?jfV>R1@sy%<#g$tvW;fE+f%Zeoah~>e0sGkqZ
z4}&@s1}~n*Sb8(5x75;DmmM05<a20PeHE~;k8FWhme;$blvaI2smEvnel-sV080B6
ziow7U>DP~|nzSJ~);>zoCqVXx)@F+Kht(9OIl;uo$BZA1<n>B3TD@o`9VYbvY4|AJ
za(b-rQ&7z}_R4Zr`Wm#(d~R+t-SXz6JW%Wu?0?;L+V%Yc#L3b3t_=wYew_-QRkAI7
z0d^m+ts1C<PL4KLg7%UT<{=Y!9lvDU4IQCj-|$g%d%^WeZMu~vykD?xw*82jzHw%-
zl_sBaT!d;c!&BwI3oK8t5!_UvwtLn)@?akdACQ=L$E7l}nGDv<rd6K7tKa0Lls4pw
zqn*!FML<^A*K;xBQdxz@D!3NT3%Z~IOw2t$VNQnNqbTMb)bQT{7K;RtNEQt0#V^d)
ze-g8LFC}BQbxwq<GZMlPW?&w%qMoEy06}re0aDo^wcy|!+;B{H52gkyhj>M`8~qq@
zoyOjW<(PQ&$cW$3^jPWvzdfcPj)3dHpurByvu6t?RT$5{C-MkEDJ~C4TYj$?4e6nL
zrWAvOVvgYK%m?whk-lZm9wW#pD>(ibV{8qm3A6W(<7OG^g$j}HU!eW7BKi|Eo_x@|
z3SzaOUR^)ZSU$tJPrduUCSL2Rqz|N{zNTeGehh5SeQ4(#(p^WgbePrF{Kj}-vy~->
z#+o8MM*y}Z9Q3<D{}oQawuyznK1zb=W01@(s5C+ug0lKI<aXU?gqagYiVUqRkJsCb
z2Cud;^if2~mTVa&bqjvD*%Z)y3LFx)o^KEdH_JvL?CWPH)HwZ`#dxBp2>zF6_k8r6
z*M46tLaPwfm{z+^y(;0;5l!B1Y{?B`%B*$wH$-~ybTB-eS_&KmaJtJ<-ffLa@W$zy
z5dgwU5``3L8*2?>k|)@@6xrVXcPR<{Hj6~-RpLl6TLh__fL*`5A1IhoJ;1lbXZ(yt
z(BvU5f`Bwh@Nm|V&#HVtir!@YFraTMUHXDHw~6c21A%}BfsdlluNUc0{=3Kkb$NSE
z7g)8E<ZXi-F-Y2(%oK>)gaOln<2Ta+2l@+bJr_UbJ1!00S@g_6upYOD-T3F}BhlAL
zGn*Qi8g>(}9b>GPO8*AdhpPszdjdQ=GOgN!;)&a-Z;!eWC6unY(qSGEMv4!bWEeY{
z05BZVNE)4s*ab&h0PqwR1#@c<ELnPA6qHHV!M5ffUv;FDKf3d8iify_1EQRbB^@VB
zDOi?f9n;05O_*FIhyKg(s@(7LKbF9Y5ux~fxX%_GLQ%>A!tkIY4`5O(kJmbjjT~*8
z+t(Xg8BAd?)UAfVJd)s#1?s&q2PQ)=G4xfkY^Oe2t{5v=!_D-SGPUFuRik>2@<=9p
zM}rgAwl)6jt4LextbwZev>T7D3fVc%UMxchp4ri}4QZi#<UI{w$ZYjvU;S?)kP7~D
zWjZ`n(2!3S53wLQsy12FsQwFBl*hP}>W7A0#%^GHt}s`WvSI1XQ1YagD0dE14Ej=n
z1}#j{o~wRD80kG+G4(~jm-YXZzFvS%i-Lb$&{2wE75v$Wz@J<^n@driC|s8th`0WA
zdr3XqrIMqaD`T{6z4MlSz()+)dbFJ7LWvbeJqoLOuD&;gP_6lEXZgY=|BKA!1|C^}
zEnj&^LH9#bnb1`>grHPLw15k%6)kqn>UGvb#2u3`;sp(tLLf7Dy;nptKh(q2@crVX
zC#`^|s;pC4IGyK%%QK~y;XQAkSDLfG+M8GQ74ZRM|NUrzZ#-W>GvSxQg(>-YrdETZ
zjFO!R@Jq*79&wBm6}0|GX)Z2MicS5q5gHzXKzY$U<{cxQ<?%u~tK}FD4FcT_nrfuh
zd~q2i$OmNlJA|J=_QrWCzc$RwqQoy9am40DzgIG!!2x=w5MbclUw_@~3;K*GxD}K5
z!M^?(b&+B*vLBU7ODm1Puc1i3JgORj7NE?XELG&$w|&8_d=KyZAFt&lnlmwPDd|{`
zau&uDd-z#i7`;JPsAMd1_AoNU`HM<&oL*KQa_|h4AO0{QOx}FR)0)QsCe4-Pk7xVf
z0$vC=mzi!g*in9sUxx+de-XU4WT0TZdb+?(6>z+s!ouqUbs{t3s9b@5#4sge+|Tq5
zki&-2!otE|o0?Mn{QSCh&LRglNShWV%aGy!_}6Ja;Xe24TXQA<u>RJyXD<s3l(Mt8
zm$9*7?&f+4dJDon`tGYZ7<?GykKVT2o)?7gVoF<Y90l^WIvU?2U@H@Fl#l2{i_vh0
z9y(BR@5HAAES9gXked#2cdrBy9)j!7YirU^FWQ&@dDerZj#^bVHIZu*b8ujiY}qcu
z++yp53g_QuyFbUt<#t`cr1s6)_jS6IlRR1_#2<DLB{2P0Kf`WkVz|m|Hu}TKdcSUE
zY;|@+nxA%#6FlMoIesz67%{g-GEU*H`|D7^K$$JD0eEy~(wxjhIO*KUO6w^gZ{Xq6
z7NuWbQvPAl28lnp4I_aPKL7iv`k{AOwg+`k-#qOlf$qK8OAnmL+tFODC`EtTn*KFj
ztCj~YiQgk7#qC_#dD$1s(B8g^huT-=PX~2V6zo%J-59s5x_FK0#6wtnGQhocxZGA@
zG)k`C`&xfZU};_4M`Jr2&_Ju>SEW7sSYzBujvd<h-s<*3u9f~d{p541ah=6Tl~26p
z;L;W&@F+~5-orQMe#N4E&R@CjQMD=Zq^SD3RPg=%`n8@z)GXi%;jYP%cp3VUValH)
z#0eq4c0wra%VrUw^&wOHVW?f14xLH*vNgYx$Ro+w*%^@z&-YJR8J*$@XW?-il}g#x
z6GOALXW>yt()aqZb%ZGKwFzT$Yd)#X2bl1Z)$z5!o_$yrE(u#z7oNT)FLS&-<4Wr>
z3%KHEw{BYeAW95~Q*Kcq!nJ$r8SDfCH)ZgIK^gxc-#W;jOwMYf3*X%@SBeYLvVo4k
zC0dQ|UPy=oDqwjyu#{9`TTeQ<SGu(}%@Fh!6$CLc*>q=zi;pi(r>51jW-Toy7QB+O
zV#)Cqrv9tu6KsY1<pZbMg>V2SPD4B%(Q$PA?8>+Jkrho~-+=D~$9cE3b94T{y_%#;
z#S*rF76Gzh6qT$!tw#M`J*R9LDv#w4iL%s*R}{B>4^sr7T}TJg!017{@dAIlU%pxx
z^!6XizeWc)z46HILcM1m>WC+57Boj+(+BQ1^N9$c{dy;Ysv?CK;tPd7xoOQ-2J6o~
zv#7!1`D16rcGKhKpJ5={;7>0uMl-_sL@6XwlB!Lu5;phuv(I)WNBxlSzUJqPp=$Nl
zK`HzRqG(<SRNb?)v*9eUxXt6W-m%$PF&y^Lxgakui0jiFehEpwtCzRi#dp*I)5f~Z
z#>ze|mMl9A5>ga#_CCeu);JrKt2)f<H_M*oD!|wO^aiPHb-Zewsi{))JwICo26XIO
z083<$?fZWmM>@d7Ux%Rljqf!!I0bsiIgx_V^ba3dUKoIxyghh0DG5%uKGX|DLt!p7
zLphOU-=1eR6C{UR_SCBbp693?{dBz8J%%J=cSYQ)ex}-jXm6n*5f>L1a}cEZ=ceR<
zV&u*@c<knKFuAAg?a&0=_8}ThYZx7`#AZRLyL`u8q^AoPjd2U7+3ZG&It#>*aTKlZ
zI`cQ2U$boX*Nn4&CBJ??+8U+^Te}B*Eg=Eu`!|^10HmP;M^zsNYYcVICc<dorna{;
zlnD1nCHe+fe%5lB%)Pd3h67;7`jM&Us~jZGI*h&#Iqh2Mt^$_EswYUSA8PbF2qb@O
zz<;Cce6<!=j#*>9CR%&Ycw@LTQTWna>0kE2xFi_5`eMO_Vcuqt*LJ-R$9X$9=WQ!`
zUKE@|(`gpN@YZO~)*GU0&>ZTxWe_7B`%&C?^f1L2fVLS4U{LUh4CyVK*U_)0L1yhT
zSM*n$F_LKLsA-i3{EGj_)n7+t^*wLEup+{ZbR*r}NF&`H0yo{=-K8Mi-QC?C(%qd>
z(jAiep4-p&_q@+~);j;N(8bw%_RL&!%{BY@Zv%E<#^?S34Me?wIx2r(i4`K!FaHVv
zM~MGqC>e-AplS&%u#n2KzR*GXfH&Q}QVJ}i=f3e>ssodW7iPCs{6CFVW$M!^VE>gH
zc!K(XTkzkND$GozbFxXt2OA)NzD2Rw>iTR%fc2kg=#imFdp4SE(pfWjT*A6;GB2oY
zHI5g<W7LH|`o8QEQ8_4x&IbE~swX3BFT+F-q+5Pu*IrtVS9iuQ71QTC9+eqvV}@5D
z)jb@atGYs1yHV<UYFKD#IpCNn6TMCN2k7=8KV9?lmk>Y#7(L`<g`@U*{#%hQWJQ}s
z;Ys@v!~pj~ouP-6*y!^3p*BsEi{8Lf*u2-7FoljW060F=*?%9i=N=y1#f5^A2=ZVF
z-ThBpy#{&c|Eu-ES<s>>bldQL4}C<lfQ^!2grGaKU-qbujEJ6bDm5EvZ3s*q$xuwT
z7gA9j0IQ&4=@A%QEg0w21*w;x>_kBj5Ww0TmjqnWHtW4>f(ke$1x(>WpwIvVIa6Vf
zW&B?#%Yk_R@emsKzgX0W;(ub(h%ePZrU#WP`N=04Jf00Hj7HT%Oo|$60y)A{Pt`gy
z%Br&U9-G8<zrT!RzraaJNM%;2(S3fo>}#-EV!Si_zY5V`SP;6+&gVo+s&|q9e%S~E
zsTlf|^fb{b90A3M;m<cX2_t7u@`{kE{wwM4M-UEk(ZT#j;O+tm68rLCE-a)*PT~Y&
za?<ZBi4%wi<S0TNx?xBoJwx8s-vMxRD}1X2=zrNo5->-i`@G^oA<8g{VXB2E&12$o
z*FIf8sY)6Oye)YDk4jnAlN78}Moj~0MOzz>=ile8>JIJdti?PENEmqoH9$=Kb)%?=
z^65IcTUJFyWrTEZm2@dZ;B`(wETxw`@j;XtEkC}`K+K*ZN}cHz)`Fv8rKH!?&cb*b
zGx#IM)q;U*r=_ciyQ)Dj%EJ4AJiwFlOWb3*{~Z^2;MM8F`y#}F?DB;e*mbp^LL!O(
zRuu>=L<>mltISXzg)34l25Wj{6cvHPBg=v$XD&^8#brHWA?q(#3mS&MR`5Ai`M3=l
zSP>NklMV_){l~NfXoH3ucgctzLr4dYkB+3yNhiUMm9auQeN0Oj#@h>5KUyxOdl9>q
ziAeQE1uJ%HhILMgFyV&icnNkCzePd{fpfvUUSfR|V80QdboLCnEExwLT7w?g2Mw<d
zutz&gTURj1f(zZTTd9*j6F4f8C$*gyWEJ&qkjLMQg!ZE+KRiLxE?AnxhMr_en%b7G
z;gZL@=J&(k06{q+@XZqe#g8aq$a3`|zLJTJ_`h61F9;Y8zUN0-88ONSD`9kTBNW5L
z!{J`ka?zj3PPN&ur)EdLCekfHdjX4fuZwoE6EH0LxH#kg^L%MR=nhB3$Mpk#2}_nF
zZL7Vsn_;qO`ZS3~>z~L&hs*kW{W)B^uP>${P_d&nnW=ihb~b23bnQUlj@_=iz^lyE
zL)UCl0@%nO6}qf;izJU66<SOqr658BgFLU`p~2I`Tf;k(+lC00t?-_cCfjsj&1e32
zcB^z9uW9D!iV+vS4fAb$0z({GX|gQ!SK8EUGY{dxgp-Q_3%Hr6K|)PcwyYCIZX4i}
z9`6b8bi}q(D2mUL+hQm1i!viS8;V?=OEn751TdXvL$7Rcky{eC{P7W67e~P#(dOt8
zRD3ncJhHwtq5eo`t&H%{WMfjd&@kl?D~<J2FSisQ>Ae|{3<$wTMo*@=i=;IIEr$u=
zdQd`O7jXa!<lH4B0m)uwjHvKmZe)izI6J;r0|{P$qUen<C>O5YfYn$7pnD8B3luTx
zy#LFE*JDh@ZzTiC0zq_$@TPzt0?#!u@e+!I>dUwpe>_%^VimXJna5oEW`cxmVtpwm
zM!q`iF9^Tq8C3i&?fG=n0`V$bGw+N+jbi?%5E7?5!1uDd0>|tKC$EZFkrDd#)J+sj
zjuARIAiMKD0jHpnokL({JdJ6>*`N4pYJ8ag2s%^x03~S?+Kg1Ka<W&(xp`||I=V`X
z7^}j@y6~S62ck7e4FMtz8A8_tOUKFMua=}g^O7YN?R5u?sw>T@EeqAf)#<vcO*2=w
zqrpc<0dg379g(uh#af4(_fEzvCsc#SzZdCxx%9}_*eX&;U(iTWLPjuR7c-b;ix@`h
zTFmLX7@c@gqXvFQI(CXF{wi!D1z|?=AyLZ+K#etS<q`?){R=%ZWI%2!yz1NhFN)9r
z$6Kzp=gS=mNc__j4Qg7AF)XJ}$o{AEw-zIs5npA*bAYO*>uI67DABG_6E%uC67;_<
z{y-6fav%0ink(aj9QjgKCa;^anVDIxM)HI&+YcN9IZ(CdH|K;tB+E?Gv7$QeFa4vq
z<pe-S;vIb(+5y0+wqS2?e?d(L%>IQqz-dYR(2HraVDZe3tbRe<H2hnIEB4uHeKcdx
zF%2udAuX1AZ3%4|sC;J*E<n{#$NRN+hw3V6b#qxE{TSATY#&+csF*$ll_e^+bZSkK
z(^P%>IE_UoEU_a3!=RAXCNFD6d?OJ2+66P&hOtD6e&@)0i)MItdBv<5NHJvmbz@pI
zqOsPO+9f23nSF$G0Q>u5Xoh8$_TFFaKLVepVBRyFJIhUHRwlck(@IkaE5YleSQn1O
z$UFvxy32~{tC`?q2WX(pk&?>DGu1=|84WlR(}A=T&l~Wc2vj`}r|AKZK})O{3E(?>
z@HF(lGz^BM;boEFuqhE@wofESb^!tkD}`X|)44fsP4m14&NxEYK=9+wzNSZ1_uCl>
zn!MURuZQhmDU6~2<4<y6-?kPFH||^MJ!`V^w%!l3AEIYJh&pN%$^wl8d|hT)fWr3x
zIV}HR?$)kIST$Rmn?wzCZ32q8Q)k$A-PVdi_ts1ePI{pBn~wGeiHe}AID*QGJu(Ax
ztsEsvDmf_97RqlAs#=Z?KBrrp`J}Ve;m6z*Pev1pA~?p0bV`|byDohZPYt4P;aD?n
z0nsT<&G<`jlBijTf<u!I-E2^=WJ=?*4DLm5Rm#YP$vWdg=6+!t9H~m1@{<m?PyS7}
z;+oGRr0Hk$5;)qDtv4tpT(P(gY5!Upq^0H*n1)~9P`FLW&G3}%#f}Nas$W>V0As--
zMgpj<#2vU|eN&AO;nP2l7Zl_K_HzM|f|ZsfK=RWdQKqFXu?8s{MU|RTIFlYwEX?Qq
zshP83+A71k1CiY1p}YTiJUH4LiMQCt=l4z_hhh3Zy7^E_u!`aH=g+t6PE!>1iB{9_
zOdW!5n;vG48r<@-4`S}@*p@Y%qEz4eymz&u*e5FG<$Vv@+vPH<+yO#kjn{fF@RF9(
zefa~lv><VRt{kjc1qNtH?2F~wL{NF$jnaa%va#669g7Q<Q-G_rE!^}sts)nvlvb8W
zgCoy%_yll=>gy&9a9o9uNYu;re#Q8D7GfQI%1l3<rfcWB4pnM4<BLAS-fT!0;mAro
z)F)|}5iY{1ygl5Nr)02p0zNq!x0{<SX=C76+USDcTaP=71CM!!W~h^C%NPfeku-CA
zpAPbroK&?t<f*ihRMlG+KcHGW$mm?23D;?@C<@v6X=3y?1=LF(SRV4jSQEe7n8$~&
zIXa4jKJsBg)v>z|#83SW5@v77{mt<_XGL}Yizb>73!we*ra%K(AUGs&1XcjeL|<k%
zpN4?!iRFd;HvB@bpXF7sMdjgwpKuH9ym#>|A}!5-2K(8$i>$K#FHQRU>p~N{|9mU<
zhL43Mc3ini?D_WvRlP@-BFBgvVmi)^*iqph03qO4%hz3&eRWaa`=vFqaR&6~gs}8B
z27Bq+2OhAyz7q&yKtrjD{+##!mem37+m?@f&i>4Knxh&i)YeFr13!X?UU)Kfe3Ujn
zIH`$UwCZ9Ir$8w$6SKGwu~$F#b*-tj$iisjO><#nGutmW6SiOrGb5(po4JdR@k3Yz
z?W>G4SG9?sK4O>^?=*`=4NPKoHuP@m#5nNNrDxPP<kv<MthYVr=0Dg-&Q~UhflsW0
z(d%Uh-8?8U0<vRmB)_cMEF5T4JWgN?z|kqqJq~q+WL8amn)%M-6D8#zl&`S4K5ig6
zN60j(7a+FOFTz$7sOb=(CcIA3%jj^gIWTE#y6Za#zsRH2y?dhf*K_5L7t0!2?H?WR
z9!0Pr@&lJ-2`MD2e&K=uxQDl*cicQeSn6)on^$i~;hm4NV3_)USSA<eTEIntEx4HT
z(cd}{e*_qSv9sJ@Leh4fYFHNw4WoZJ9I$nQRfM)x*L7kwxdj3O0(BJ_7MW0%k<HU^
zIUP-x;0SRxRjDbv^ygk}s=1yQ-#kEBw6oeUBsUvkj$^7;>q6~tQB)}h)TDkr<-t@e
z+C5j^5ym8P*Gby{5t1sVEQ&Y@+Grh=IY}383&2fnoQ|Gc!l9j%{L*FCTa=DsRr4Fo
zteq{k(ZC2jer}9Hf|dcQh~e(lS<N9{Gi_Gz*wpm*$9k!+t+mc#gHCg!DaB%<i{{yd
z6NvBVvlf20H5iFy_nML(ng&b6EBkhcDPzZe8rc7&%p^71VaW|!H@<A!^;-DZ7K{1l
z<D^0<#$O8qgQeF@vqTO_-gz1w!O!aLw?XS+qS9ySnu905Oas3+^eGigJK&wba^LPz
zN8Vh4oXq)X6!1@WjdHWoqD+A=*Q+-ro}tb0B@KCxJhoa`Safd4oLEX=1e0eiP_WzM
zOusUyA1xnBe-O24+e?+9WXuc-yA~MguFwu!^uf~;6|mhoEzAbVq*>-Mw@(F;-SAH9
zWLhZoiW1tk=RE&?wjP#OAt}E0qt0V8(RX7SSg|5(X7p$(JaZdnWA?yO8}$u77r-|L
zL5c+m@)(BI!CaAG6r23OA!xCG_^J^NQa}-|?9Wu?@Oi5h;|Sbw|K+@XlV_>o@u7CS
zR_!i111O^CP4={XeqsIJT>vObjosf(mTLfJi?4Dak9xDq$Ls&)x|`5@nq*7(a4IR1
zj&iKmLBl=Pfx5=UbPnxt+b=1<#JQAeKYUzTl{<B$=%wQYSh;f!x-EesU0QWXHbps<
z=}f_`f<)VzoMAlK&=S!v6gxB~d{k|-AGki04*!fu{d4n$;B$vlTpM0*ka2A7)B;O8
zY1J^;pa&}Y^H{Rx`=sZc-vSDeuzv&b8`l@u$p^sZJ4VU5x+WE7v1_<?vzk~nA@AZz
zC%3yvr=_r!3!&9UT%6WMIuQ0_j!%8#a&eWp9T*adLpoMhTq@(@1G5r-;5E^GW#w)b
z2U}9_&iCBVABRp2Es0^wq|mF_;cdxl6rWaW4ta##%Kn++TsWcof^lU!b@~DKdg-Gt
zbsE7F_u#}e3$+;T{Sxhq+QK1rmrB1+a<LeG^6RFWFFffmS~Fv#pp3?1ZCumlmgp`S
zCk<N0{tuZg0mmRUyY}=`H7xaO{pS9m78k|=CKwY)LB<;Jm}e70_W!g;F}?|MEUh_4
zG$}<ikxh+K{)9K-qa)nMI{JOth;Wrqj6x?}S@6_@U<)>R7%Tlsn<?POfA+rR(^1#+
zdHL6*T)6+DccP$R6}R4>>*RP<Or<34bPk)<1nr^&(Z9}tx+(DN?ggBp$yBsj?h8Me
zXU_0-FW&$pg!7uYS$U$~shJ;lA(h15d#FUwpDT2>o~=VR=80k{H>+|~@U^!dskXbx
zeT9-7uGlLZh0%f%lV_Y&8N~s)(TYoFM8pa=4D&U4q3iN^y!-<?+5L|+{2`K|#S^6-
zcRZ<Ti*#$n_n4^ime~(o1KzpkP2aip%6%uz3b_WU(V@endTbD}*q-x#F*K_LuQDok
zHwO%21hc}6fr*pwxn!*!H9NIM%}z}R%}T!>H%Ik}y0+Y*???^HIF!(er5PX4cFsno
zienit(C;K#*)dzHez)FVTnD~N&`RMm@z;aFNB38S_nFg5-n<S`Ui+eF>7>TOR6pBW
zeK<&L-IIDV!*LD$eF9P}0t|pGar%i3x9A$!u`fnw0sZnlTOe3uVe{}B!!Q*bQYg*n
z<)NmcDkiH&9AK91!%?}&z`)P|knIg7DgV*$ZvqTaW2~aIy}kzr$BPX&N->eBF~L`7
znf*{*zoL~?r=oin8~s29U(Ew3r~p+_<G|=S9f~f6A72VJJe1NR!sCj;C=u&aq(_>_
z>!ZkVt*54TnWV>z$Fnq%jrrom!0U8GkQlfs&K}M&{Z6|16YSxmmF+dl+zy2U8VTA=
zGS|0;g}@^uq}q}t_(RcdGA=e*_3S6S{q?__5`;gvE8Jl*xPkCNAM3wv=;A?{K(bXq
zUSKR;Qix_#D@nKJIMN*}BF4ef@rc#<^S=CZepreuw264JXF9*IZt3rw>dl(tU=3qV
zf|}_S5_l>1P2^3E+!oU#jkm1=ska)#qf6SwJHwc&gYxO1*gJYSkAGax6&&%Z_|?b!
zf57=ofGpHLiVa!48qlYLN58ZT0#klPu`)0g)3jo3EOq*hA|v;1&JzV_bCBy*l+1Pc
zJYTYkB0>Xmy^vTaMnOzU+IkP6QAZs2R&ReG`^Ho(zK9(zQE9jr27W}CodWwW@anAe
zmSZJ{-qQhiV#mF)lG~3`swU-402Exr^Y|w`=6E}KS<Dy~_)2e!-m<`HTEg?{m^{;O
zSWi=PYMw*)G@5G#(PPuo5ie5-zaoFFVm`r*^4;TfIt`J3_E`~mH>Va>yBh{7B9DlR
zm@8TtA!8@PR-<T^(JJ0#97H0PEt4#nzM$R{fO>{xaMrin*_tbjQ<^)VcgoT4Dw8dS
z)yuiOg7UDCut&bNxKBj((IdeR8Mj7wq-b>|oS4-crS+*CV<$~dlJLsJnm%mqt=D9_
zIzv0t@b~J(|Gki9&>?ggPtR^q;#rB65uK5zgKq$5BvLM-ZDUm@n_LAnXRg7JR(aGK
zLYg_TAYl7rdr1G2`vhcwfRA#M6-yhCp@97bzmutrLz65*b%eFh4n~1XskT9KVA1)p
zPbW?XlQXBM)^&H+tlq!RH%2^Ufwe#$fW6pTz4=D;;ve+>YFf+DCeA9sd!Y{8#)m4;
zqYH=y^qT;F(1wt0BiFHGbsl<q!La*n1ruR_5Y~(Lg*8KDz0o&^5z*@Vc4u@$b}kuo
z-`ho3fwRN;DLB!G=0(xN?aZg3a@O;dI7fL2fS}&_kD#7~YiKKy`tGe9n3-D#*MKHm
z>HJom&pCf@t7lTz%2M3L#WgM_GPzju1JYxPLVM#{SYNU3k$JV15Nc8ay5TvA>s}h8
z;Im160kkF(mcv3#j29w&Uvty@Fv_OIaKvlCgG*$g;Fi`z&rog1grJQ6lRA)rFnCwL
zquL05919l&1Qb6*RMYeX#m$AaERF+|%aeKl7JF`WabrUc5pi&Bp;#4)?Z1;c7Ui$)
zwTC-DHy3Z+uAN^8SIZbxdnpa@sI|MQG2c5JuGAcdKBSwQZ7;k<VsWqGCA75{Aq!N;
zbOp&M>o}-fUdsp##D)#odL^WNe)<q4oUzfYun@;3gp&z%+El21T!u`?L|h%Y0zV$7
zL)Gsg4To2d_RHk@D_gBLesO=Ra8js#*`m@)-ZYfKL_6LS!A;(e50EucYe8YTni^))
zcOfNpg*7(4*_d<4l8<(y$n2aas>Z7R&Z4<c5-n3afA!?<kbU-@)HKeEt1;wcy+(xQ
z_YVfPfxf^DAYdj@0Kk-StS?IZA0E*_o#tH?*I-9VER}|Ei(rf>Fa`H4i>2yE!`QU|
zY$pnCBvtK_`=H^cyOZ*kMswVMhe?ndJ;o|VErbF|<6scdn$!t>IF{6l5%)=C=r{(*
z@`a4U<4bAY$}+ldoLc)YePBwLcx+RCF|dhgKw{v_u7kZTA61KTp!$!8C*p47xuU8k
zl+H+zC#ewJ&$AOWT2i85<=+cDU6%<lvUY16VnffF^HVlqb^NsH?zA)oY3N^Q)-D?Y
zAL999lEeYJ`v1?ah|=Nf^33}x36Y4mg))bs*(!ZZxD0ce!#8Dlc7&IceWpQSiCs7+
zsdxE<5@4zlajtn%c(3`|OWMXAs82JyLPB+RcCVyW>D&7nj$e0Wo*iz=<=q%Eql3>l
zlZYd8C~8|?C(E9s7|!ABCw+x3m`bdO0Tt4ugi$e!0ZB)K#0pR{p-r)7O3U~_ZtB6C
zzh#oM@7H7n^h-ad155YnL_!kt0!j<fLawz+=+vtUOzI8#zBhRMKb4pg^d9c*Tyb{p
zM>i_DdAl5yUvjsReuRY%eipiFhYRNmE)GNG?>1a{`k^YSG&?+|!)++`*m%a6o?mvf
zDSFFVzNxN{SjyWMg38A+exZDlk@Jb?csim$?zE`qw}rjFuEns>QSrCcJ6dQohd)`o
zcYU^CI>Mt>T#{CEFa<i?S3kt&AS=lcg%%~ZVXG|}8s8xrovJ<V4T8T7V)7x;b&5~T
z$bxyg-SSgIwSB*m$cFL@54H>0(x7>Ur??9#*$a%|lJ#De{)QuC9XdE|Q6_|fwBjP8
zl&%C(%~ewczG08->jNK=Or$v-3-XnkP)RL12qV+~-UwcFjhe?1<6qJsjtLUvpW&!G
zjS?f)r-mp@0x3TwbeA#DeON&7lM2Lkvm{K>#SMs!Mg0&oOQh!F;=;h7a{7NNKM$0U
zn#tYXg4C#}l%xG^hTGXc-Fd)$ETg$lKxKH$AT>mX3Mip}{$X$tOrDx=nUdY&){!8q
zAM}-UX#9EUl{!?E&nO#N#T@yZv<ZXiG9trqkfHKbL>nz3*|v_4pW#H4t3WSaOQ87s
zxSD|!4Zx`?eK-c-5oGK1`JpVPx(t=Bry`WhO+z%b=DLD2?S4}*BtMr2yUEYWaISyi
zGBTM-4$WgR64j_=Ph+Z1o{r1!tor&p2^pp6T~fnkXt)XG?{K`dZ_ZOs8UsF7wP&@2
zK$8y#s#rc#nhrF>F>9~?U!m9|2(^-Dg9GLZg9^xi2#WJ411ZN-v#Rh0aUaktjH8g~
zboVF>^bJR#pPrxRuI*d3_paP$lMDuNpeW-rWlgD4<*Y;P>Ms2{y?sLex)~kjW1#3m
z)q?zD$Mtw_xNzYW>5q%S^q@~-#3-iY2VnO*TKH;Rg2w4uCANv{v0!7(woS6sL?!g*
zPXIkIRuocwZn#vg2B`bE@{hkdUXu}%*o0v^o_m>DAz~Xyoe<!QD^!y+Dqpm?g!y{s
ze)n9lk<mq4UH%~mtpcZ%$eM)?rbv>K#D!CcUzW#5y8IlfD^bXLBh;Pm9R<Y1eJ6Uw
zcoS*B@9VfOuTN#N0v^4)jD7YrO#sd3hf`b74Ra#BmhhM7m7uYy?b6qE&NvHH^MM2O
zxei?oY`0V8B9CY7%*KA3hMCIj_T=a>4pz8$m3Q)KhQ%vxXR@_ybx4rxMV#s1vZ>qY
z$!<fEXH&4vYz_1K;d`#Q5OGZAoAaxBCl>co?QdDWPe;b3XsFUvs-|pN3skxKd3(^k
zvD88Ck}?K?l(M@9!{bpBd@rWMMT}zx<vq>u$1wVB6(9t}LU?*DP0i6V-vzCYNgAoZ
zO)aGq^$4b%f6I5pb3CItHPuR?4PQ*0KOGmE8>f--iRPmn%LoLB6grMHZ<2Hs^Rb~~
z>k<&uPG7P32B5Iq=lXQH=vqHd{F86Bg+rw8T)|9(<A-->%BCFD@8Dmta5`R~Mh1He
z<rtoPb(l<$<%>54@xJS;s~-pD5e9Lz<c*G1QD^@VZK2$uCr24h2D&njXmeIxx4gHc
zq27WyDL@04nsVduCdo{n({^3bHm6gKLLG;h<f}_Mg>>VKjcykWH7O%fKqaX8iy<Ri
zHMJoFe0!WLXP`Mnc=xR=9iGUiqHk7~T`p}b2E{DZscMJhwDHet$zIydo;|sspL-%u
zoXCV;vLD;eSf_H)6Im2)mium8{~W%7gHGZFQdiP3w!hbla;!uvaSZa?_1yyznQWUm
zZ98t6P!PouZ9ad~bTQ^|;VPW$b3KlrsL|0Rw<;+21w+0{kW8s<f(^g6>@r!sm(rti
zvjLbyOZ+YZa2P8hSXSs7m67xvwB0IE=ZNCpi50h@MTsqHL(J>GThIT13S<uI+r@y3
zuA{bU>eW*3I35f4pQG=HQ~b8$euvAe`=0Aow2-p&vB}h-qmB+};jcWF{eYv8rim&B
z1&DsxR}EB!53e9!m#U)a?-hJ()791e++f4Aw1KrgS%JaCWad~s^z|cS8|xrbK50Y!
zoPt-|OSrAhFpPA1grz(QW<S3P(3M3pLPmZf7`zs@Ag=iWX%{By8$4TO2Ut|A2JKtE
z=(=J#tZ4LODhvj>@wW`h^x<pP`i(wBBMYM*MN_PHeEKz|=QJ0NPstkFL2rpCGfvNp
z6`-YEK(SNdJfmj$m=O{lr1Ows@HPdkS_|o&p62#_?yBuj!UfSM0w+FMn)&am%$aAp
zUu5l&BRTWg9H2C>Mdi6_R{h&s`|<_VK+VeB(xiE3V9W8Pm|iV?0qa!xd!JHIvD-kI
zHs-!n?Weej%^#EMN4=x8mZWJ=P-9>HLDV))SSBIjJ{TW1jf*R;I@TD43-RhHaqsJ6
zMBylezVzwMH*py?jP~g*s)4^K3p5{Kv}+TX%p?Zl@p0Q0=@XKsbiBp#fJIGTUp0&j
z#!ayQ#y8Jx|5w%c^y3Qh6d1!{zGNxRxgjiAfF=v=a3>_Q00H~203*8;A>N9~Nw2-Z
zZ#6Vy@#~mmF0@63#}C;<p-26WCU_>?u!S^)X@xsIe~4qSo}}!7_?|)Z{)u2<J4{=s
z#~jM@jyIyptuV2;6U!nyR#nq0qN;j5xXWva98p$_8^1Z|B7b7Evms(2l#ZWBkMhRT
zCr8mJT2UsF|6F(HyGzHG21*+!_%sU%oIsL{fUnkC9PQ{n46?C<pJrHB7laCsrefye
zN?C*!U6bs~T|+p(auErQ5X>onwvV<$_~Yo<$zC)-T{sJpeH2-x)th518T5$UD@8~%
zujMGQBC!Qib{Hs;{kTPgdw4yHf?Ew%lo|J3xgfkCcd2_r*Bs1)9sttGMw-Sc$2IL!
zy1qt1eMTk+dM0^jH8t0R6T)W5$aEQ4niE&VxcKnpxuW1B`zj+ddI9*lCu~e(os>^A
z@vmw;tme5gDwH2?MAocFM)ejpm4QxTrIM$QdJ4yU;ud$$&{T&)&875uRsY>F27L7|
zD}^SGq&3!=mJ3NxHP`sh%*=oDBdVjj^K1r%c9|8$-rAM7rA%Yl&M(Pc`nw3+k3nMt
zsIXEcqNqwH=;{<=YN0h$9hvbWnLnHKvh%~VN527KYTz@{<2`SO^*4S#7Lod{H}8cF
z2uZya@}uh|9kjyMg>vfPAbLQ11fJjtX~N`hnz)w3XAMltCEm{j@TT7rEub5wdK#9>
z8X{TZ6aCk#UFU-mNlsv#;P(mFhJN><2`lk?4>PWgYFA;}EpU_GE>_NAxMk~<^sg_4
z(p8~K35$&~Pj2H^NAMiF;F+4M$7WbZnj??Cc}tRmS!0<ABV=I#n63Mh?=l{A1gXE5
zcfRC-TGYMfm(r@{)<!HXRZ<ARVbv+`ciq!ExJEY=lZ!0yM7A~~!9oK8&5`FC9b253
zB>5g=$C!=Uu)frViFA#GY~f7YyE&O}^|w1Y$&*pfQi1<uJo`d`VqOb3(^(=t{l3}5
z+$$dVZiOj-4rXp4sE#z2<^zmvO$b@cqQ9A~=3zK?CB53{87|}3qIz^JlZW2-cxT$E
zxyZH%GdebfUfeumP_Ij0ddutaU2Eck)H%B5&n#uQbXP0{;H&wX#*NZliCN;s1$7JD
zAK!<OqoSHTE=jKOZ>1hoc}f%ak{(yU(-??dS6+Cpt!c=*{2kOVNwLGDhYi>l2J-g~
z{*m@GL8l11bE{hl<JB}Ls}yNJM6*B*D0cdfEvt$VHy9eSg3lMfe+BaXOxkE!(EZ1h
zdrei1N}7vRX+NPSL|d)%sm_9_SjR=y*a@_JO4s;Vw*KsSD;J}Xsz@gK5PF!6gX(q{
zY{O8tl{<&@+2rd>2}0KS@yPveD4owX13$m=(S`e~g%o18sHs_v7B{sFF=ZPCr1=Zx
z0w&X=ZY{ikxOlay4AWa~{~o~KOukcgG&SJU8C?K|N+pXdP&OP<cY-ts_vLylZT6W1
zbzbbr+Dpzxjs3fPT;jUCBG1-3pTMQboT$Kr6>Ypfh)fSBMHME`z|u|Yh{5Xk$j0i#
zLdVCngauWXM@MUgpgg*Fo1~4yCQpFZws_Y_rrouB@Y(NH4F1e2YI?{G#=;~r%JuUN
ze%ePYT>>JxAY6=X)dX7g67pZBUaLDKFvx(M(T0G-QG>1-_*WboSQ6kHPITru=jn<F
zvjlrQzKNT;4(-K}p6IJYRy-Y4&)r`ZSS&|wa_K+q1I3G*R#7@V#u{b@^7#H0pD8_t
zuTi;I7M}a-h&-;j$&_Z^?~}g~00m{3j9_3awgx%Pw}K~J?6b{fxo3{*yv4!Qh~CE6
zs0hTGH_&B){vqE*`SwOdI#ea+F3hmkh7=YY+{KLa5JTv2@V4W*KAptMuRBjiGtJwp
ztvt7(J!$u*FD)B|3DS|wOXKnG>@aj57f7_nNO+)6^T1i^`6j!ajn%sXhML;_su>{I
z1sE!uiRHCvNjJP<iS|`mSe{rBC&1!tDAu%14J@D7m|WXgslA-Cj4G3ufnr!{u8#&i
z8tEUTQ==BYkalmEUa=R7O62qB7WCR+N7;&i4%jkLL@+R3kBhAg;kWC;w4JS05y3=N
z15C)9xpT18R)=X(Hy?*ouK7J|js@>N*Ue~1knf`f)$5N+p{JmQRzI-}nfrL_Fo%df
zgs#z@a`o1X8+>sVlDZL-zm98z18&Y<tH4CeHyw`Ep*bW_bwVHc_7w(8qV$)<6a`Qf
z`IljD<coTO6Nl`eE}yz6Uz@*NPKy%M%bIw<m|E|iX*X;`yA?0TZ)S4?28<D_W?Lss
zcEd~{BnGoUK+rP*C(O`Msruwxs@1z2vjBGB7bbwE;uX3*l|D9ASrk9t+vKU*98G;h
zdqt`*{I26s?WA>kMwGyS{{;a$OfYBiW8v?!%$(ehbdguEBs(uB`+wq+gOslvEOn=*
zk8IdUHblX*Q(nhAFQoK8D1Ba5a)N>fNO%hVexe!;gKwN2(Aue^@S*;^F@jZ%*+eY?
zrAZ}JIj7IP*y?=}==E~_nWN+*h#mr@lP8&%@Eev$&l+i$ylV(R7~ud>(~Bcj+;yz-
z2v=+P3+7IO9^kj`x`jT~2*ahwx+2NB!b^p)+8iIG==wQ0`)8d7y^$G%xgl08g%(w$
z={sq&I*k6^q*6Ro^oe4y7M<V4Ii}0iAnf1{-GGAYk&N<bZWpPIhafN7)@-c|YK}`n
zK^9aURd;#3^ToF}9V(n*)%L4izZxvq*(GO9-i!M*XChDFZyvkgK}3E<P@Fx6Pkd8L
zeIgfl0<KyZHIu)2aef7xV=fX7Z(}y2PsL}VYsK_Jms4ho%eL?*)E#>|dBaFXkF+k@
z<<hl<p3_v&&zS12D+UpcQ7|wbrWgv1b?g?Q;B~}1m02*SZl`8Ar)UObV)}opX=)_6
zozB%NtzFD)O7sSqa<o(b>>ehWy=z65p?kwdTq6q#c~-;oLm=%Frs+=`3Y4@`L$w+Z
z)7-I5#IU()sJN-mvFbw3$XKNAG>G?|f(zy*Hy|(4BjW0Lt?^$P?`?RrSO!-#HjgR5
zF1n*$+xyCb-$8Ms_I&o0PpLr#eL)0pw)#Y_sE8o39aOA&!ZTtTzr-h3hKmSV`(Q`}
zq&|!145X~+(Zej$zJr#f#160Fxa^yfJ&0n;Bq*H9z@hXLB?^uy3l4?(Dj0-{60jee
zo_s{ct9kfNEA7zl#oPbS?zQNQ)>U<~4TkYemcV*!I*!%6!l|oCZay$PHn2;F&rypb
zT${(~UFDD49%_40Q+GL96;kb5e>rNoc#&JLbVe=Cjkdbu;9A_q66+yHEADa3Cx%m~
zZdn>SUA@6CZw5m^&cvRfA*v?tx)p~_`A^PKqYa{;zi_{Qpm^GrF{8owPB-cJ_&FyN
zK=&Yerdx!WchAk!+d6o&xJ*QW+!^WM2$#?SFi0c~29}LDhwbfSPkvUWvk92~%1v`U
z*&sJbx}fmZriG}!il!tzy=GoSyR-jhblA7cd+%lkk#pfvf`ym&G4~yydJq(XBo`Ep
zQ=nlk^yc@2ssqjp2xS;xEAf&}&u(<b=;A+Yw7dj@S<2M$EV(My*F+#`5f5rs$+3;&
zI{fGDTyXYQpx;Yj`fb09!+;R*+Y(bK(uS84Baz#O1*tZ!A8INvg+o=VB^#Lezc=!f
zrko!8_|XYedl7)yhb7an-LJ-qDkD-PJRO5<2ks{M1Pp3O0dL;RbNr#Q<&h!nEvuC<
zR~51C?XkX_Y#N_1fc{<C|L)b=x&{FtI37_`s<%i0wSAU%qHg<q^Gi<70CCMYX!!55
zTXaSqA(Ft;<;i`F++BnsKSI12y6@KeklLh`3#bVOJ*exMkXwuOb#+n&hoIR;`tPfK
z=U=MtTM=L#U59haQDpG5rW~@q&COm!w-d@dljG-wboIagNP>zeFiu?~3E4REnqe$x
z+7KXo&>iaMmJ#Q?3!v%#MIap^esn8vWR_SiLJ*!P))tosF5FA5mgsCn>_mXfCJIWy
z^)r0qG!ChO=_Gl&tnYO8L|}@R@$^^Z0^!K^NTRCcS^Tvh6ko&5pWlxH+<W;h>^-=%
z9^f?{2cY&o@+u&zV3#^vqjkRaU_IRh`!dX&hT*~XQl?#}d(=#01j8j9y$QZ9cN0s1
zUEDb>P{&PSeRAaxCvY+F1i)<X-y;{4SY!x^Y7QD-x=6{mnn~{di*|>Ey%njVLNN~X
z8WUptK}-@<W=F5c=fzKH35UY`DCo`S{(t#;F_JDHfY||R%m6RWaoSu=rl@6$Su>?x
zvM{nG?`>2W)v2ISOzc{_?6UlFBY18;nUE)(P_D7v5Nap}u@ZKw#W1GmxUARHpyLP^
zVnu4eudyLwSwR;xz}a00)f+xQH$V@XHLeCMW1ev=@Yvm^mk)5KQOkvx1ff_tm@Y#>
zBarBC!)7!a2a@rz?5K!>$^OU&<BF682}4?Om;uylrho2lkiz<D*9gjDyU{i`FmgXn
zD6Nj|#w+-Q>+<~;z6PhsX~oU$bC4j1b-vj1Qq&pNCWcgD{807g879H|C9|V{m$iXD
znml`B6F+tBNkJ~g??vBHxq<fg82tL)@rA_gC7?Nh%HZAqW@N*}h`qXZVR(1EAD@|K
z8<w~@Ck-1>9)X?Q1GMZZ*^j@AH6mPKD=n>LO^GML*A=}NyhCGQCq41>7?3<~BBF1l
z<!>xW?vRYevWW0op;L%$;*yzn3MC5bUfV#%s;on_H7Ke&Y6T0`Kxz{0oQ3c@*7TQO
zrjZFJgUgocdV_IErqiNyi`5V7_UZhfSAdcJ{UEa&+$og91NW1#n<tu1^F5R$)GnJQ
zNzze-rw_Zrl;44FnOgmG70)LU{90+i7>u9-^cr5ZdeB&ElcFg2;(5g7!>9@pP>{Vv
zVGa?b2&+jW0OU5nkY(r_D<7RFkDCOcQ%4$c`J*`}MzvH!I(WJILra<=!E3(3Z8D^)
zyI;zgV$CZvN5%2)<oCCqdhv#a*?(g?AOgU|9f!bAF%v~kY&fc98Q!R0^B=}z4X}Pi
zLN)L?zdE4C55;PAHU?Dfij&ZyAv6bHw>+OoB5}r~9M3^8NfW`1``#&voG8>ZZ&5#b
zJoHgT2TEv*X3)q_)(d_7g>5zAxV1dA7K$SsDBoOpdyJc8Z>-k6#70VwXJ*Fy5il|K
zq6Sfs*W#427XyD;W;A-zi2|@^Pi$gQ#EJ|M|7MUtJ9`sw3O#7rNW{_)j8#RA`WNB?
zIG`3mKZ;aP9~DZ?icX`llu6#?MwCl9qy{S>cmXixSezhTJLQ>$VRQK}5PWrBLlK9L
zyQ;h*BhuQ@tT|u8w-(Kj<h}u<edgoLzd!7|tVJd7=uT@~8kWS2UV2t+LnneP^=nmk
z;PnZ;9_aLODu2mfuR&TR{<Y9`cf32>AiY4)*s@5#tYD5cTnMqs`W63mmDg-9#wc63
zc|l_Dc5YoIFD)di>q6r%;*8YvcGgU5IsXg@3DxeXEM-Qo^uXKP<5(O~czS~H@&ZFA
zN9uM&>QCc0YDjc~f>cl~LrZYvb#DV`DFLR7mcPY(wT_B82{kPS7?$0rCLPR$Q~3;B
z{2}c|uE+`ky^S9c;_y<(MeySavk$ZoWd?>sYS!Tz+IM=(Kht-tj`fx&vhUM%C=-<z
zGkRdS(cZC=6{UZE^7YUf>TL$X2(FS#!oL|HVnuSOl_!E+`@r|uOeFXQu_<I)D8MMm
z^+HDm9{+8Wh;e-p^q=cfQnb_pu<Y}IO<@zp9WWM04GVQG6rH|N6BfJ3{@!9Dj93S+
z9-Hjh;|Ak*1=}~I)$UQw3yz?Q6u6MSl%R~omXlBX-)RF4UCzFFy&Uso0YlUn@jxIC
zm%{e=22Aj~e<S%2_=$+HzZVdC|FX9)O`8r>Tdzz$Rm{;xL4k4|qQx@0LWfm-dXV8f
zx=rCIDz|(m`%i;~1?AQpeDtRZR9PA6XXEKHDl2eYKRX4Z!lY1ls+JVq_7J}E8Q;{N
zDfr|1(5|bS1K}uE{nf56TX@Z^$Rt*Mhv=r<IrG`kAUpYwcmH(~1GoUMh=L?J&tNKl
z5QN-k1r4_fO`=|S{A}9e@o*(Mi1Ytz==hQHU&|x|Smfebv%*X(39JrL^Gw5zvW?Op
zX%emJhuX1ZU7EpYQD4Uy5h~kJw(p`{Xr!!zRay?smJStFPU0m|L##SubGGS!7>zs|
zOO>zT#3qc{m`;z?Mw@^zl5nfU0s2A+0b`piB9TJ+z-PYMR-+3H`8^*msu&s+*emCl
zK&`r8P|_5c;)Y=%-6ul}^6)}NhHR!Rf<me)g+hkDe}k>`qB%1Lxe7$bMFcMIUV@(7
z9p~ikP(AHU0(Eg&=Z2zr%t=$+!O80d)|6_VqRtdMbgmtS+p6j1ExqL_BjSB*SZS9x
z@4x~AUv}-iPSU@Pib!|nL^$De&%aadbd;MK>i_Wk(6{*TZVBk?+1SFxWs2|+LsSL8
zBluOY$#<xJh-t<u`3Wsu9|0l|_z1m+Ut3ohi*&IXqfIr%yqA%8?nbU|2nE^j(HQ?!
zq9AJ<c<OI$o&hzXrr?yqkovEtCYry@5{_EHV|Z}~)IoeQ+hz!-gN5pzi2~O=4s(Sg
z^6Rz6%yT^rrVHy80~q<ZVkrYq46bczSw!O#OOq2a50V9saM~G``6PM_8>`C_a+BAN
zABH~vc^N{q0{-kTD!~69SM(7<UvL8=Y64m2xNSuqX@^~4w0(u?BgwFY(T~0RV+lZe
zLOrGzvTJRA9HM@HhFmruO(91CFb`6AXxBrVYD4W0sTp%BF>e|YHN)=LN~Nb~-gmcF
zQ{2?xJtls16GjeQmA>9`?wJKbU_NAVg-f~%>rTS@6Q1j(ezEzpPs6#3TYP?3e1;3b
zrz2e<J?=DJnYF@yx(1iU6ZFOE6|$t7Yr*=M;HIlK4Q@V>op3di40rpor%~0eOR@i(
z00{z_KNIZE=|Z3`_Uii+$V&>65FdnTEx9QhRq{%SPSODWKZ3~oFC1VB3PMXFSp}vg
zba~x>kZ6_32CnQ6ZTuyw<?uFHOrzR$DbDw0+ogV9sd%dXeJLPm>lLOGH>6D4L!LIy
z89B9S(E0_fIePQGrClwbu9t*BWE_^XGBxI#I8@{9T)@QqQC7|wqR$sICS+{K^<A^S
zaz->D|DGKn`ge1YS-*u!6x6pC_fkO9;xK^Qe@IA0IU%GQ5_Br@;{wT*6a`qIFh}`&
z*BWvZ(;@%aIeY^TJN<+GoH~abGN;?!TB!jfYni<a)~%%@E!@1@Np^#$RZJ~7+zGv}
zi-Q>33t8Mt<(L+3WI?J@gw&JQ?^sYZLw{O|i>i-$d-LF`1o@nSWhMyVlhF-hSECu{
zr(td9s6^wvZQA@2qjlS2JuM0=1LkPu)%fhG-vWBM8s)Apneb#e8?ZOPd4@bO$dJ%+
z!RHnyY=DYD208vcz0iBwBnJ_{1zH4Jw}oG$_QX>lQ(b^go!D0Ms_UtD5b6)NTO~+9
zy~GSPUd8Nfe2Y6a-Fq@q+`G{j-LH}FP3$%}#H=)88Z+Yg?4%2P?cUvaomj|CP}^7?
zQYAM!TLVN07cFF_216Lgs6mQ-{KSgB5KJdb{}rX&IN0JsJi5u6%g`cJpAb5NM8Ce6
z4oW`a;c#U0qtOQm8sNoMMf4?9+HzDT8E$+s|76{fU>SyrceG$hqcL72wSoD@iQ$2|
z>qb??fXGgn%d)66CVmfIv~qcLC`#S4*<{|TkXS%)fv#ao$EvfTj6{@^(wdx6C#*-B
zqODHmR`?&Hfe0E%-`aHV4*ulI?DDJ!`omVhHdvAoA0TkMRqQYag*GU5lhq;)LUs};
z(?TvsN6s||q<MK?oJ~GafN0gYkG=Pe8mT51W~(oV$kteWT}g;u3#rg`(k+Vc>gmiy
z&QNTsh=|(@-G}%)Pv`N^uT<!nfk9(M90=?kMDz*}<VM9whbvGY!r;vWrq~Wf$5F>J
z4MyHbR2=_#o9D7G)nk2M;}l6(>6k6>IgTUxBLpT52laI8;1s_jU>}j&Unf0CF?Z%@
zrDvHLbbE`$5&D7tg~ZJ8CS%AHOV_4C!L6fAC+{jLBuN)fOG^D=TP>|#b+VDxTEwAb
z_E~05HIgLm?SJ#?Z=fS6V=A|<=IIV1t6)Zft6NH-pd8O1deSc>n~ZaPB^=5Ar{p;l
z*4I%9AzbH^W7@Qz!SNF`{c;^NuALRMYI%o_`<}ZTZ`bwDWmL%`YN4kq-0$Ul{NaHT
zwSC<vZ+sj@eyH(vi7Zu}6wBiBmv!lWFzIMrO?V0_-0uf*Me&csHGH6-gnl0QW({>b
zaN`dmd+-**2En92B0ja3VEE{ZfmKgytuR9S{i~3^2WkyCeHPc-gjG=B>>HjME(S!x
zuqP@wN#Ka20SMTH6((6`^ovkrSgoA~9?CllKX25f7?S5Ap&P)sRfZ@}parR~4rZlW
z7t735t`3N03)Bp1B_aO}+qD0m0zfely5S%1$m3*_L%S9x4mc4;vVR8e9{%hqIGx`7
z|FbbN0FDRM##oHn<sQA^4Y^?^_-Wzy<V@bwaKL~3q22l^G#sX=^0pG)We>i%J3j6}
zwvm3g%uRfF?fQ+&sYTJx+c)psLsl#?gRhi9jq?U@3$pWbxh0A6QEqdErE06A+aD;b
z4Qfxqyu9yFdw{EFdXypiMRQxj1PoI3OeauQIY&?)Ep)eQuWEkOYIDe@+MBIP;T8!o
zVZ7HdV7%+)Ag-wZr3_ojtvt%ib^EwDYM=@l0W|6@1@S@5)>a}K!w5Ge#_6^&D^b!T
z{6omhC~|*O*ku{Fv={gIPkAie)^P9Oxjw85adNii%BXJOhz43{dHHjEf{mocGJzym
z;PHP8&H7AGozZRpT*3(C&>T&;VeY*jyv-Ep&463AqW%LbZ=jtihz+39`A|(#n2hYE
zKT*wxg*WWvRkpaxh-%dfU2*7XS2UJV2)fY6%+mS%wU+x1lDWp(UJjhfL-^7iuC`fA
zr%{mb=fTAT3G)j~G&?hA(&HNs_trTy+OP);%8V->1`VdOKqkZD{Culrit@-N&U>Zg
zcJS1*Lv*!Cv<Kkvg#gX;XZFFs4pP)2kYLTwX(x{-e=RJ_dApDG$ZnFwU@y8-P5L>f
zd7$F~(JiY`-wF6%?}5u5*w<NPGja3q{Z87K!WLMxa!A1t?`8*(#Pv)jLjsEW7`ON&
z`^=%UCSJ8%x_Jmu%YHmk)Ayrl+udMIr{YTeK%(^^zE7uam&+q+*QRC7&*m-@ILUfh
zzuh^UQiRz=J}vsizNoxnq?{I?;k6$oZ(YF*zz{VHKfaLGF#LyQfLYST3oh5(X63SI
zPe|=f@|HWe<0`5${GNBT=D6hFcndupl&x39`u%VR$@~152UE(Ul7TAC(;7^-CDt3q
z@M~|gjWFVkrqN=&=2ZXCL7!5yokwGQiYoQxQiPRzHWk-gwS1!_OPc`e_Pqvcjs(Z-
zDGS(5bDq6C?C%`YABGS%M!!~I6?Z8y1Hu0!w#OBSnXQnDzN!GAQxmWQa-{&YA|@8n
zSfOm-mNX!YVIo1l@T}h9PLE~22M=`vd;>+9<4@f}sgeMqJ3EW^!B*$#;-_|o+o;MT
zo3!e<3hw-XRAwD~#M#6v;`i|Ozfzg(=$ViLma3iR+MAYU+QfM)Z5os$A`=I_QQJ6B
z^U8NgJWH1({$3wLKlVMs+b=r!B0FtXYaQfHYSOt}>hHqOO<RK>Gx6Jxiv0vW%T4M0
zj^iWNr2ky=L!=yU=jy8HMd@j<v~<9=H0{n2Db{Hu%2d5h&arCdLv5Ec%io894MOD1
zjKiFdSin6;w8Kd!E3=U+lsxmUN}Mc<mQ9Y>R=?MkBeY-cj1UF1<C(~;_QE9>8aB{!
zA(ulic3ujz@~(|?*6ers>bX#|4MP93CSX1|ASdO!nSZ4;yY)&nb!I!^b8T}nGm{?}
ze0bLrTKeV=d1|_6m_CS%dtLTd0viV{RzPOD=3&)_&iv+HQ4=LHyW{d%>Iw>Cl!t}A
za}uLAUNKRpeWvjC%f;3z*OZ7?oB6>YmZs9h7ntw?+4#A)xY^fp`<qfcjup}JdW5RN
zL=20A8|hl5E<su=<0r^7PSy7eO)?7=$xa~|GHQ*5+FkW`yk$i{%t4S>{zCKCgNa;T
z-Lp-H;rpmTWNaYuJe##)-gr=;CP5Y4>Xu_-#jlqO5=S_>l#*|*d{`y9W-uJF2~0>D
zcdp&8@n3&AL`QqQeD&p`SOro51yr_KZOhOUIt~YH04oXer$UcGZ1zrVN>#QB+?6dg
zT(yp(oD}!cBHi9JIa<{uQxynbg%RwpLDuhSVc*2{{$oNpNRR)oqQqvQ7+B-Rj*9XK
z*_W%o7mvE`8V0;au-R3Z#P6ZNc6M%Wny}ZDUfRAX?p8_Zc~Ry0)W0!tt1f_7=;v(_
zA<WG;XRjf5t6*nSjC^W4JgkK^&vn{h8<dGu;W&2ze7K=F80vP??sm2{Hb`X9$K8*t
z(?mrY<KZ=&?S)+r33F64d{m420Id;4hI=Vc`Ru`<I;d++rN<_;G_h)GzJN8&%yL;z
z#-|>!q0ZDhi{V<Uqt-S?Ob@HAKj}O+C6#DV45Qtna+sE}<-;-Mo3ZMo<^Q`Va5UM!
zY0IJ2t;L%zU1UNN{BXUkCm&QgVt{Ree&oh?<B0tE=}d)QRO`W)b&0Pw(--=Dc}D2M
zcb8JLo3-BVXM<L0>x|giBIk@xb9J8H&e@;cA?zcsDP0oos&I<-30WdfcdE`mNaroa
zQjEcgtLdK`OmxsY_b++ce4WDnT<iJDcYcHCRqxn8cX58czc-Gm&iF{4-R&q)CCx!T
z1jn6R5(HlLm55r=XM-S?HvuN%g2J@tNB1*hpB-50l_t86ta8|10=A<tAK{D5dLMZW
zE!HUZw{92aET?d6tWMQ?X)T*a%m{x!IA{XL;XvK!1!#(LW<4s)^nd=N3}@(v!kpAo
zz$q9|^J~MC9z>E<8!V)i#$MRFqiT9s)8NmH3?)XT&r$5gp@%=O35(VF!9>YFP|Rnm
z3dS=eh^_k;O!Ru_=m9^An`w&syj(=y{@bTMy6Z{Pg@^GqnZV^17;o4^Nox(NvN5A7
z@Agu`vjH3ABm3Dgk5I1#w&?rZY-}{ph4;{{-Pc)bm4Ea7lWujm)a9e%Fq~$`d*&!(
zyRdYwR(rG6#wtX#JX_EbCPjvJfNM7_tk-dv!=yLfZGrU%(YbYQN&|kMb>#kpPKt;m
z>E*?CANI={-V@EZFum4WJx0ba>J|UHL@&USDy9Wnvf)NK2)-8WY}k$dHR}1kI&Td)
zpxu9V#+*;Jf#vWq;`!`WZ)I5j`um)if2)EOr)t!8&}94c`ulvMb!!HEP@wmBK&v!=
zKqUL`Z*+K4RP2iA*QGTJ9k-$$t1bd{xA~dB-g~xB<4aMsB5HrV(@p3V0%51XN`>%y
z+Kv~Skt2&1Q|u#{|EdPaWItknh*js8laSd|A=pR{27HDeDcE1Wb@5b5{SmGZ7Dl&B
z<Kwi-J2@raVq23uIr(lO^D2k-`(8NizAfC#8vw%BytKdgfkrCj#?F4E*UL_=*d(zc
z0+fh~rj3wwNYtNdyaDR+j2rqM&%BU{TA+bSmq>5lFa4tj1B4^k)BpD?<;35O6$c;d
zP{a~nc`?~XvQIk`r;?t_Vx<d4BkseSKkKHuJ1W05y}X*F!7=_(b&^l)5r2=~;@25W
z=;PG}vf{uoc{`8Mxq6|FUql}Gv&xm~l{C1Zp=@4$NB7P#JG;x<o7L(Od2=V%&&v#Z
zghjo0%t+`7c~Vc90EVkScki!f)ljF^#>kdTWuI{Lt1{>7#!ddM->ZJew+UhkIPGkt
znRi>QqQ9#v3h(eo#b%?c-KIlpHIQh)%h*p=mV7Vz)W3rbT{vE+%t(jpQj?<VQ~!T#
zy#-KQP16P%A;E$ZBxrDVcXxMpcXtWy?(Xg$oZ#;64vPj@-0qTBzW2ZPR&8yaS`NEs
zdV0E_?tZ4{=BFNrY6*&u-+@7W2f^|w=GbTKis+{iU7RXv0r|QVSY_DOfNy44Lyv<3
zn&zuc4}(=FIdIQQ(t}ZG07wc#jPq?7|IWuuPSb%Q9Eh0-7J<#ZOwrhAZ$u#*OJz>1
z)j3f_F`Ag(_M`1<TeqWwrB7z=O^s9d=Nsa7qjP}$-xOG^>jOEk?P9?_{cPZ;%d=wa
zOiaYbTTaV|QC`<h4>$5jhuYZO1?yNd_F(k~h_3zL57JdAu3ix)|9Wm79!Z|ei<7fU
zazBdOAPEKl^Gy5(A`Uo(!zCZiMB0$-iV#YxaJ&1jnE-#n@Qa=SRY;mV{aE-=)TR69
zBL{j=?34}T$nP2;(aXsNq8>f5q7agU^yO38_mpky4fs(KFfa%FXoN(X#;0yXsL@MA
zJ=wPwY$)H2AU{Wf_Py(%y^mw%99<E><)c%Of0(WjeOM!|ZN+0%sjqA3lk#@>nX=wc
z!E|4(-o5&K>#lYP=gpuXNkUdj>Fp7Wm7uU)npG{o#NM$kK10zzUC4-;cqxlAwbn{?
zEwhWWF)gLN6CJk<A3$jZ?YXl>^>Rc>*bP;Cc*NXcPhVzpOr42QKso00Fz&829auQa
zAGN_gnGezZaxLK45@U*fz|Or1Gow6lydy$rcy2Mg#+%*8D!FD+_x9v}h3_(MAC|p>
z7H|x7#T`Qkye_9<9uBNCN1;~C7-vdv)Z7l9F#wfoB~f1pM%P+5>Qg#^Sw(ecK>_^;
zE(;h;m%>=2wsRNu{J;b4JJx%Z@B&Hg{pxs-N~}>Nn~7G&M*B^)O{XE`R#)~*dEfo=
zB=9X2fC|V1!fA6SD*hzQfo)weJB;ge1$S)B@3!qc?Esl8XWvY(X66`}etR&)1EePU
zIq5iiDGE8w12jyVzbySWlFhQ-ZoMFA7x}fv(-Hkf{((0TzrZFeFVTwKg?r8GFk;tG
zc9tRtN+GJJX4bwxz^pZg>D73=10pP3l|?a};F^nZN-(KV-ISdDS5*mmj)vCU7B<f9
zUEdw&Q3~<d#dW@^g%-#eBr=PA^eI3bbm+}hPE0i>Jkw5RZ{QQ{CAp6Gzf!Tf0R-sv
zc;RNFzON(YtbA%H`Jtt%EWqU>5*`Ty7BA!P-N%RF*kY}Dwly*PsH?{PfvH39^xTP%
z{v_qg6tzbMaT$a-(;Jj@_Q*>bkIMHN*!D=IJlP~Zvywv6m8`X2#^`jzF9U6U_o>6@
zZMn*-nhN6tprm;}w4gYdidh8M)<7^UT0R+S9T~<qVwREe!8lP@7+lPC6q-9Iuk@v3
ze>1)M#ql@p`|;!DEzsNwL4SrO-NEdkXltHkFY(7i&WT_<RS0pN9ig?vd=H7*Y%8f>
z+qGp&{k-(*Mf&!L-@aXu;Z>~v0_<{01ts*r&J!OXA$0<~3K<aQDcFmiqrBa?Ku=jC
zeZKkS`PZvQ;<%>dYw>1ho2z*0M;kr&@R0fg<WpAg@PAe<+=rMhh7=Fx`<_n7Wfg9L
z)-<<6ofShj{snZmm7^Wt<nRu#C9=*zc*JmdYLWj~)n;xhHJdFh3UeQRZl%pZ{Yp_y
zHSSe7j6Mf=aOYMpoEF5bm!~YOJQMZMD0_agjl*wN)wFzE!}MyFHo)oSiX*$alXQDA
zRN%C1A9|A>Cyu=cVwGp#f#q7PuyX9pAR~LK*6FB@CMLm)+xCjtCPCxB^>Xq7lK>pW
zT#(uK3<vGL-T`PLO8C&M%!VuM$;ZW<D;;E=HFX31?B<VmC!HT#GwO?aL^U}mKjiBX
zHH`^iC@mhoTTmaK!Jn($G<7fYvpN@ZR-M^zPt+{)PYOpxqCN#U#HL+I<{MYJ4q>RV
zKy3PRi>b+G#1~1)-B_<Bx=kU5^dDvlSItOQ6+)NKJ`xlXj_!GCxBa40DM<@ujBt85
zT~Q`r`t?%;47Q;uIyrAn<$0LDT>a>?sq~B^+p1IM`l=_N>*n>tcwK$x9$7^R)}AHm
zO9gUCDyXph_hjH=yqE0MpHD&@H(qH=P4YZ_G&WWH+Fc#C7G)>8U0$Ek$0rE`y<trq
zzYxksY^kv(a;!>2pnDVg{H0&FPDZ#ch^b05C%#E$%}(<`@7GLeq*{yNbvHHmO6n>U
zHF{Z3k}<jQ^YCZ8W%=janIs`ncrjL8gB4*g#f{nEqx_5`0>e%~Wy6r*^!eS+>oq-_
zt1UsZMF%9L{ryGfE4t=Uiip+p{B907T!r|!KAs@%PI@luL4IQ|^51%m9Q6Yf^9Tho
zm&qJglu1oKYZ{w6O14b0Ei4B=Cd!%;o#dkiEzHC{r<o2mb+wo7yQSH3GL?24%D{qn
zIZp64Z_$B8Cn&Wax}P3ri9-QGLo}IP5MkAP2$IP7+?3+qm5zpDF9yEX^(GHhhDtyP
zmrL-0wg?Im>P#=9Ph2J~k1&3^XMJ4SdWWTf<=kCroBY*B;nl&2BoywfvZ%?rq+pFA
zJ(eaggn<L2P@nmkVC(ATEPz%Gq6i|9tIhjUdmKMr3&U_333v7@?ZHK-c1pH&RvJ;J
zWZ?`><VJj1t`W)c%jJvGLmvOwFc6UQj`K-H+b*lO_jqaVIL1#B_;8(BpG2iR;75R0
zB+bPtVZFGSvvFYK9$SC!agECUwI;dz@mv~ahIv9_281GjqE1O-{vX>|v2w>dn+ehg
zW*(j9XR1z$^E_AgiJXt<kd1_E2PULuv}-Yz%0?yA*v#ZshFgeG+V^7pJ9jf&wrZ0;
zX&wPzgZ&a137?*CXXG8yGp6h$xnOngN{od7X`QPXt9v^^X@}a8QlrQ739Il(pAZ)3
zO>#F@=J^>L-)U4r;RR>>t%2F~Z+3}?<O;jBo{^!_p;`JAJ-M*rc;|NYa+()RPG3Id
zwx?>NGxTh6=~s8j=RcBU#oDBCi~}y;e}A}<rj7&R?2F^6xQ%Q%I@l<qvNCA%4SEf*
zM&V%UE-WB1hj8mj6nZ}`dJfmCUj15q^wuR0QfU)Zb@p4iP>wR<QeSB<30S{qfvLBb
zH&^S_*D**01*!$!&u6O3?F9+zPUjEh_fIeGx6=;^w$3HqkL#>%FAZKT*NH}Mw;0TX
zJ?|qW9{|r;cf7S7bhhWG<bX`iwR&Ae{5e;-&nF08xOX3#&bhrDc()Q8ktTvkBs0tu
zA4`+Wi=wh{h=x|^7Fbuhe5oAWCj8U~`*lf?0E0DLEz8U)$(jzByLU%X&%Zf5Pdd+}
ztsZ}W!~hIXYh*1{kT-A9rA=na*B_)C27Vm->qLfPz7O=6P*aBt*ucp;zqH~tM$r|F
z$Hfq?Yu(aWLHG7Kt*D4fYtoUPH@IW}{Je$Dtt{7zGmy{CJeg^4Hvy^s7VF0GZ2X+R
z=5mUZda``6O%78P^}CevF0+)$xkAZfHBXg0?>kugL=Kuh2ZC(b=!r|e^}Y1+)TA%E
zW6%*_spvhoP}vSo)sJiS%q~<^2Nm+ZSnKD^S3SAoXl6-ts>Wk^>uZ1XJgYc0NIl3W
zre??fSs;WCGbd&GPcML%tv=cZ>kS-<#HIwzqS}ISHVnsc#gQbz_ctp|%+to$7UJ#*
zv4h5x>}*3e!Gb2z8tFL#=*u3xqGUB^^Gx7#H7ciBDFYtb(+gJ*6Wp`Boet(sT6pnp
z3pZ?THu^B__uB4<=qP?AaZ2ge502Q&1G%Nj5A@n{CAY^ZQ1S~KTKW5|Tk{II&(6<6
zC}|~e^St8iRvo4YgQ5_<l4BP;Q=<b~{zlC|&Bl_56OD;CYx)l-ZXb%rE8XamJ>@C>
zJ{|*<|5yHy>LrYu>>8y}sYor<PN8>IA{Jxv@N5>bB7}3Fu;y?uE;XlAGW4JZeyaOD
z?u+xuVRq;JG&uuD=8K+0qt|BFw}%YpbB*ea8e?&cgBhU>&wVJ*7j7v6Xw|uxXY7uW
zbwN6j*d&N$;ATz(5aWC`rXgx_{7i+;LLXt7-1zg-5}8&Y6OL`HSh@OG24>TY7>*J4
z)it}p^Ld*)D%Sc+MMWeXHD5`qlk-$Zg(cA2`|J~2U!?MpgX$g|;fQlhw1j}788g}S
zO$Z<cG7InX<LeST+;5iBG8mle^)f=$Sof-*?;2_Q(P$Xs{lVl0aYRJ$VMK6wphO|C
z_#i}a33zbfas6T6YjpJsp8XtdG`L=WEIsia7paqPG$E|WPq<;9pigCYK3lyUH@g`h
zXFd=RzF9}AZ*(qgjlbSr8Va<uR}t%xBF4arj)M<ICzTZoL9;S9Gb&ftYDiaLrK$s+
z2VQ7C{u7ho^Pd*0xSR4|YC^aSIrQ0kmb41%D3U1%4GhGM@p!%z?ShgUO->sF<7Ajc
z_sKi@k>_W^81^2wB1@X`5(}8OX1t`JRKgaK4smbobm5lOjQa6{R^L@1w%DWy8VC?9
z!2jO!7Df0vCN;lKQEGi$IE+GxDQG9~?(}ioAPA45%ujqNC1p$Oo>f#W!!CEBhM7zl
zuRQR^%8UszF#qXRDyrzbHrR~BX`)#ac-L1Vg`-jIC>;q`cwU=C<t)+t96~a-)DsN>
z>z!=BLjd|h`YH%m?z?eNe}wf0pe1T;a7DG2d-C`0iqnnJ!p8~m!XevKV!CHqGqv%x
zEwZp$<T@Jh2LI}Jh*R-q+mIHx>(#S60(rLsSdK@9wV5#{91DRNi)hI2x%JNV#o0(W
zKg<O1zVGGzI~>?70Q0!-zz-MXN0N6JWVCZjRi~VtT)m|UYtm-{+rsf`?9YK1;fPAy
zF_x5)88$vTiuXW3Vnx&y6=`pTwe+Ge?4#1+Org?4n3FjvOByY-_SW^8aR+O#LeLNS
zYk-~`0TAMC9-JN{OR$0}Mp`*1o+qdqT>KZ61=i{U76}c@;@|OB-8T2<fY%da-w^_u
z=~$h&w<Ho%-A)5yNKj@%OvD=eh)cnDVZ=G5tQa>QSftk!=Fx|!_`uM`9>xQywdFky
zDD?B+hP1f?CPc@Oqd)DXuo%mOF>EBKTBiT2gW4NMKT>)a8Z~)`{pFnYKrhmoXxn8a
zsfsi*1Q!*oE$YWpR^nU}8vA|^AH^x44gs?9%~f?3L2|Tl1?2M8PdW=Pt;DQ*H4udm
z9d*Ntp}|3x+>Um9X4BHo8BOMC@#Qppjue#6@yz+GuL`_^UvPh^6KpK4Ovf^G!GBI^
zzjnASG-Fd;AZJO9ftPSj&k)hxxA7{~9MOHo-dG}kP`!=%K*%23CtjsVFH6aHYpc!0
zvUL0+d;Z=`)(qnLq<lR(z--I-c5ViV{Wt-%0r*V18=7l)y%wnZajtfJe*0dW(YC#<
zp*n$|UCrYA=kraQfEgEx(v0$kNlELZ8RActv%j|3_lx|=%IB}=kj8iJse>Mnq?N`{
zBpt4Zv2V{o9Sc$+I<2%)vMGdF<9A=B>L(j>nY7ff+;HTh<QI%;W_|2Vbwkwp*RH*0
zYV6K*GVyWo%GpuWObkQYi#|;>_@@5t-QQRO29T>ZeH=Hx^V=0<G;|%dyv79UNJyoS
zUI#q~$Z>Y3h1sD>>PrJ|1Ex}-XG8>~fAO~8Qparl0>V_@qIy5fGNF;?-FA@=bl$DY
zl2x63#Vn{xJ~+BECfRzL^;4qG5V7`-t+H6Z7^oOl<0F1~`b^2NUbdRlju|U00g{=W
z&==2_Hh@^igYn0v`|(5%LQEZoTibP@K%aUdmqoVP{E}LmR|%2sJGg^6IRy7$xptKy
zv}uR#d^#h7%yw9Nh~Du^t6{0IoGLB0G?cNE3StJ9=(EiW5tSaN5a|u$^WQ(KS}h`5
zN`i+fRoEl=DWv2Dl-#3~rl+3N3~hHkN1b%E@!BW+5>mZO^JOJrT{5iMm^cMnQ88=`
zS^i{T-h`zifoO6z4YrQY`Xji@N$iVhj{l^Q7=&rzVYXAIexw0hzmR(J&IGgn=kxP&
z-AL)D*uaaIclJ*&T#Sn#7Tab7SZUhwpdL<vX&v*8Bf$fxd4h<H5C&)=Xi4Mxx06d6
zT+E*2!#@B@!4Tn;+}wAHZ+Hw)+}T=udLT>Ze`%AUf{p~mxOB(S6Y22B^>9(A^o(EN
z!_i6-MJ$w&024=qI_E_B5>hcfzl>0&zR<2zxLf8OSyOyWUKJW<%$;^yQ2@|IMn5Tn
zi02wTwxp+;J>2}QW5{0eINM@CnM>II?56+qSx>)#vaG%&ER%au#GPezBe2R?)@-(`
zgUC*`+Ub<MAkfBVMl~9^L*L-!oKQctB#kN~UPM$K``h=RhUZikrF6|fs0y|6aPr;5
z_9~j2nRI)F_pMclEFbRrcsEtu*seYCh@>&_j8)M%=Qgs5Wb5n37JS&v#&d5DScG0l
z8`t~vW-I5$E6IUUU8pry6hjRph?}Nq%`gfF-oP81(QAZ7=zr29?>?-H;?hiJ#p?AS
zQ>!Rfq!qeUPv1HW7%xBbe1^6lNY6IQ$XEl4!xlK>DyMaZK^$I35Swy`<#=7Se<jd`
z>YJ4baF0|VTd^-PyE49LxgO-cCAmM!iXAp`J8WJ<9;VJK{tjPcKiDdBLqqt1utb{z
zPXZ}o$ca}q&N9oQ%;|o)#7s{0^>{50*v&3%>Dmx+TJNe{gO~lVCP_|8#WveGk>L-#
zeGmJq7!EZ#5t%oOUD*8AMHg%B<`Cs*60$u1Ni)h@j9G&<ii*=cbXtKWO0*m8#ajJb
zoGSMIC}<!7K3H2vH)*NYFNNah;wvL%eH!aImqL!e3UW>Q(x_J1@O|>H)cT?(put#P
zDi@CFpA^hnzWqY9YZ{9ugY)C#m=g`bQ%TS^pW4@7ihNmjWDH&FaYs5w*wzC&ksIzp
zv;)lJGvJr31DM{p^)jHqvr8Q^e%5Sa+WpalQ;hXC$=%#Ls8zd%TOH#JA=~Ti7tr3l
zN4PKM!*PaV@6JrbeyZ<RdLn{_D~9`ZyLiLq2Qi`)jRa1{c326c2<#<9vRL9~qhBZL
zh0=SUY(`5_s1}Q222We^m^oNdWS|MrUSEtmY#0MNhcQD?Q9C)WIh3nEw?z9$K;@w&
zQbGN&2}gNGAGP49PP0(_8@uTR(*0+j1WcQqX%#5g6RaYak%xZok(1%#udhHqF*a{C
zFz9?Y9NdsiN$TEMJMP!wP)^f^Y0#Er6Urbb2csq1Uk*ETs@o)4f~uWs8j=&W1GQ2a
z`~^cALe_#XYKQ!u9qgtEHADQU-Z#^POswm7(Zd;RGX0r6LN0L6Rv`gK0|2RXPuktT
z>)dapZe;}cm`Ji&+a`U)@v}}0sl`z3ZpXuO_VwLp2RDSo3S45T1g7aLYn+^O58E8d
z$67{t(XV=+>|8kK1SA+8^~!mB^Usi^Wgg(&E@*Q?4=5cw+09vv=5ig>r}S=A3Q%>I
zoNV|wezXH$Xj?9>pn*$NGmO`kKtFfpZ(vGxT@MLyB*6hzdfSx8a1-YZ<asB%+^;Ur
z(RfNDhgS-OzRd0L;=`P`^9XFcne_q+jW&V%A>tMMnneTxlL4!Z6nk@&!1LF=SeMtM
zdB|EhmZ#kH)r;H$>MH34rh1Gsb~&VmBzNFm^uI?Yp=E&ul2hmgdlS32=vgbD0K`DN
z<WF~?jv@oZinl@mtX%td$vdsLoxXA)`_>_voj*<>a=lgUe+l^meuViIj>Zh6N6e7H
z$^})m!endWvkdIb$^-<849>twYn9EN;mlP<>85HE6FZNpL*X{7lEe|;B2v$LM6%r(
zj9S11t0Qpwm(cR~_ZyX_{6%nLb(Yy|0JKC!@7Q%NWDasMk{9PNcB{sk7<XNh&lxLo
z3Lbxb5L0DpOH{iepk1TH@ZiYh)M!E(Ps-ltR8z^#htux)D4n2Su=dLh3OtsGU_^gY
zMQ>g*#de0pGf+g0oz-`I7|MBhL6qXB+mXGg17T2D8!!Mb&AA+<oh(fKi~fYZUjqqj
zQE_N>KCIWxM~n~eFMJ)Zcc~uc!=<45EDRwCY)Sq}^>wM>;#%`?15d1CQBf5}464LS
z8yp>`#LuzhnXxK2UV+G(wr31tr%2C-QK)coNQ?UM$*az*uW@yUny^TBLz#$d{oijC
z#wNLLJP1c*ETDo2zf3}Qt}i-F8#-b*Ax|w(W$+{3OkyEfE4ooDAJM9sE{hXy-;4E{
zj+e)+?S%?gnzI7)7J(-$Vg}NNa}<};X%I^W2<HakMn#jp=%Nfk?P09PW!0U4R6&P*
zUxt>)s+F(5;%66hY1b$GfdMhIO?y^q%kvw~ESFt-R+=FGEoh$KUNkolE<_YLijd?a
zzGVW0qdL%npIKkWoK9pfBeC@(qgXpyvjj#j)(8XaK)0`pb(uBDskRT{qxh?=yR}UI
zIjRl~>%*m?Y<G8-_nCEetE$0VDRd4oXRM5SDOTx8_Gc9RW;)lz+Pt4*M7?6hy0R?L
zUin&(+Ai<if5ZlT*W3Pn{CHw3o(O{Vg5eDX)rttZr(~v0kaZdj2NoOoEO|kNSbeAC
zp=9@xiP*6hlv!x|wdp4(yS$;BqcLMskTv<0aoi^`@3)J~cT0R39lcXQhyJxlb2wv_
zR2BqrRqQd>2MYilg^bWLM!L(P3kBuC!t#JbxfR6JX*}BJ(C=NtqZZPZ_!GUfy#Xnr
z%LjbJN{whZjX-CPn_I+SsM=}56itWIcq%c-8EgUHKN~UrvL)fnAM7?{<u{}->_d@b
z6v2bAXVu;8@-6GC%VX45G$*J9B^*x_G9-f&;4#GT?qb}uH(Y$B(lRVs&*9-zlgcx5
zDJU&7JTxe=jLxM&_+|<c7ElCLXMu&r!^a^205$&D9TqSk+DVI9!^mA#T%z(?;RQ2}
zq_FoT(uixxeClHp?z3<$)sY;7m)0`+YtTcN+OQu<VQuJDfsA1*Dm3&VQfUbwCS?R(
zEup>K;iI;iNK~yd6)mfhHUEWPf!l@LvAIb<zkI@{`M)({6B<m7ts%){4a@q6HnV#(
zqP4OocGcpQVsxkN833d^2dVG&@7g_R2ArQ+Y0vvGHzdGTK>w>B!J{aTp?X)q9B0X7
z`8Zp6k%X7^jqNkY{cnbWX|b=0crOE<czG1XnX#%G7DK8Olyoums0rzK*7D`A&jM=M
zE1~g8a?4ClKACg72O?4{A8^Wxcz1F{(CLNql_XETgPlPwp>VDuB-@+x-gZ2qrf@-=
zkp0+jqN4xYr=jhwv`k?5fT|~|(#-_!8ERy$W;)gHG{#r<@{kQTbXZyrvF=|&;k_>t
zX;)d9j3pSQmCOgZwY;$A7^as%6F_Ws?}HR%Je#IkUbwNK?PjFSBG{lINbfZ&qgrf^
zFak*DAX)l;a&IQ)05`TZ=|>*hYHBJ67hv+Lca)>@M)&{g)s>7_ZRt(gKBoJUo)T<4
zOs0+;6Q4)-i}wW?qkz+(tk~31VU((>UJU681lRp{A=nhBi(Q&qt}dhjK?_ucy(~LV
zT6|xrjA&yhv^$cE3v(j0o;O+Ao34>V4vKx$?0jhzGU;vOI<z304kATChfWTaRbZm_
zQz;<nh40WoS3HzyPpl}aB9uVNtF9Xg*;S6~z^QDsnQ;jUn@}64ySt%0KR#=a?brlt
z$4FQk)ue*--t=O;ps7V@hcm(pXZmkFc=ur^>IXY^P4@>1&&*1<o-h5Mn`&^qpK8zm
z2)dC~2m_cn_8zA*KmH_+e?yxz^lxwunsEw&5Xd7P#_3Q!wS3nih^FQd$Ro>->Y047
z&i}<&hE2r=c^S2v%D<26EV(bA3t>XJRMdN)J5zWe3q>5YW}xtE%2pt}uNf->1E-yC
zsoehdLD-iq#5uak`TdUJwAJU7rM&pM%kH_D=9$2}9iS^2nJztHhw`jrcAFnlhMgz2
zAleN_5bJ94hS(d}u5<YQeL`nK1Fx6uS1x<VG4|wwETrw=gzVt2IxNp5%))~L(5CzR
zu5m<t6{H~WdzJmuqJqhQCE8hv8m{|=ESXZ>6zz~G*)AK<SpEvaJbZW*H8D<c^n$q&
zct70+R6|2CxVbs@SC0^+Lje~e<6b<@GhrNFQdH{=q{zlHF|8rK7tfRW5+Qu0%t#aK
ze7R!c|0&QAUe?fDReGzfJm3%3dV8h7Xzyt7g6&dU9QcT2t%UT@&Awl^c(e(*kaH-A
zMx+bNJyKD);o<#BayB47ot0DzK`)_(N6LGnM#nAI4i3-tV}pezgb?eEi_aBm#Ah{T
zP?LkdmC}XVCy`3>j<Wq4pS<sLQ*9GDie^nwnSfT%r<>OgmA6r|k8Z)N9Zpg-1J>V1
zFB&F3zQF)o8JRf~|4rlP!Q?G>^|R;cJ$DTny*E5*Bf`_mxg9}PKQSclk?daSUU<}v
zF4jk^`Yykz<p#UO+q|N-H}HX6uRH-$PuibXoIc#zsVeQ8Xj6q)zP6>^GY^k;Xa3c3
zIP)fe;)Lvcz&vg#EU{V2aYYra!wp;6&>odg_{M8Zq`1erUA7Q={#=a@`)oHl9IxMP
z@5o_){SntxUklpuL0GqQK-_1#kjl->nUm9nH?-mjFbZsbjtEVrjB1uRX6N2cI9a}@
z1x9(oG}i9>1NX$QashKal1$V(NG=}C)zMPcIJHgm$(%mPo9|);%j;&c*dkt`ZoqN>
zb7ZAQ^p9Y73QRefuX=(24$9_k+V4YXC^Bud0LgCnmxDZ{VZ6+0qZ%~xn_Vz98vKw#
z<32#xbZ*KJ@cycBrgNRsXz<*+=cJwdJ5%^knufcj7_IA+-MmnH9E}GZl_~$VnPOKC
zERMHrR-M_&CE@PYg|8do$)@Fo3aEE5Zd0h&OS1c|CMZ||c1lZ6F;^xVmw5|0r6ao4
zhMk*}-D%`s2c#ia85n~icbrojFKPVq(DViZKdv=pv#Sp%s94>6Ef(s}v5U+Czp`@Z
zEdB+;E}TB&nLJ`J<}&`uAvt5n19;^;uRiXy*AG6CJ+OL_=Xd#fZwO#V`m-HK`TL=K
zZpNv|%xPX;df6_V`^8>^%Cg|~U{F<OK{lSo3KFxdankOln1G3$bdeHH3|fxglA~0u
zMZ{lOFPB`doi?P1(iKOoSKRu5i5yz?E2TJGfp)oQF7y(9yxD<N2wF9~I1aY#5o^@(
zqUI3?*kF0DPO24DQ&FR}R;ydgqljXVWU%6|-13Tm$PGQ^<M^cKJl}iitcxpf!t}NG
zu&h7JrQ?ar5d=~&BT9l6D+=J;!e$^3Uw-B#_JA5kJ8jg``DE&TPposE!BNfP+hFI+
z^io(BN_s6zhFZc{{D?{*&kz)=AgSWr|NQqcQ2*F;9Y_(DR`jKd;jL{$(KC#Pt84~R
z&i;9gkI-=f*#txbrPx`sHh#6%3pr4RIm{u2hJDkF$HrvqwX<R<qaxVV@MW{ef!0%_
z1Z=7bRZ6B!i8Ag0&kuyH8HHcU>O|R+$jPihZ3B;3H8x_})MlpoCASbz^qy2DVAxqQ
zJ}KzoNg?sZmpx*6RtSETe2@(NvcRF#c5R!vZ7M-&)3;ng6`%r&NwfYW3)SVNJKgQT
zL%;)HTRo@(>V8Nu>Ux&W0_RIwkU)I-Hv$kS+_V+lT&>67vD4_FBN@FoonUyw|0~{P
z(V(qhG>H(%a}2fwe4bGimI}-5yjeS8rl+D!%;D=BQTks^jTkd&Ey4d-2%1o^$T^b_
zX}!Tb594$@X*>IsnsoTFD3X)@DtNnyNY?U>O%vITtwv-chV+a%2_3K(5ROaGg88U&
zl(UenKts&}dsWQ*rehRSI8)%g*+YLp<v>B=v9)Kun7Ol~(@#7td&f~}RS3lq4Fl3v
z$8P~Q0p6oi0S|G}Asc5wtsN14Y%j6etHl9wPxew+djO93F)7%bjdICp94m2eTdR7!
z?%41?Q{DQ<eo^4DJtE-SO>RMxJ6EL>+3s`_|3CaZkX;w@?fTWiP-+&%@JvF7NSPOr
z15Z+7(ujqPgwBUrnQE}&6tB{s16Cw4+g6Wq3z-|c(*x*xq{@Be@F=NG=koT=>-icb
z<NWFf4hT?)qYuB*2m()~6KDOBwLZ?tDc)(Cq}4fn{qqFYCN>9^cPt~(1OnmkFuH6!
zqtFI{Y2x|j!;SCUBa*6>ZbpR*33S8!ZO@ugGLk$U189JnRqg(lXNewU3$7$1>F|=;
z%`S;AHtKG3+YW;Mgy{13>0BPiOAe<2^nepWBuhhri_2F#n3cu9r~A*O|F-&&yaRXg
zq!Y<aqeb$k<y{`{W;`oJ&YbnfuiWL&xOCq#E`6EW#e?^Z=Q8K%)2$$C+BWfhsX(hB
z8Iq&D=vOr1dMQy&@o)@b^+5snxHQv=o166c$|hsQ8dFRR@?EUxXdZWQ7?#PWFz8|~
zatoS3bcL(AhK}-7=lD-LS?Okq%wMgQZ!76<B-dQ~%8TDaX3XwjR%ESIUBoh9^yS5q
zRnjFz!Ce(uQ%!;CJdUtiY`r?6V6;1na-ss-{8NtQn)=L_oRiEQ#a_nsP9HbA5jWYn
zO69`Hk5`n5r@5)JvRx=<&KKq9r3OkP_}bVfm_i#3I=x08c4GdGh2Qy1;mXV+N~et&
zPqq@;18knb%mA}(z;Ge&$wGH9u0<^!5*HX~+w_3nVNh^#ZG-^0I~(=$3rR{8D5&YS
zrc6h*z>ehaYdw`&ANm9>vlQpdZsE)_y(*~7_EGD8oJ>Merf0ddwwz5b9a;4}gnvSM
z_?nCkYg1EWYaC-)1&Rx8_Bf!XBl;TSkYYxUpS~_NmOmlFs*i8s_Sr!*d{49pGcE;T
zbppV2ulbUou_ROc)B@oaWS0AJweBnGcor}B)1_Wol7VB93q1L}>jL8Ub<`#Gly!sG
zKupWg2TzfI{XS^oT!`O~UVuAk(G1|AQOCat!6$|YH!=Zg5kGNgozC)cxA5jTmHA8O
z%0xCrG|oHSH^;we3C2{H4CoZDr~V3Q-*n3!cbMurmH#qMy+uv{+;};cqVvC98Q{Z)
zbSIuS0OWACO#aZ;u@?7kW=NRM3*VyE<9h;xgvpbN6W=VyTZcES^y|W0JI$q=r1pFu
zC?TiSa6hzr3`%&=b2u&qD;QH$)kVhM6)q|Wn9iW!a|1vFkn@qe&|$xA_7@3Sg19RS
zEhRDaJ84Vx{ws)5rIcbYInJH2qA4x5T;4oLw(SnpF^yl%;Cy$thA|clCP$QuX5?Tu
zOd1KWZ=ILS=l5Snav^0?WvDvG`Cd6oGq_pL`X;`ag5SzpYpWxR<9JZUjb~t59T&NL
zRljohK35w&9>WMqY$RY-%J|zqr?`N}wXA9G*A!8KidO$%sxJXN=E@MzHPgtv^ZS<o
zhf-Fb1IqR5x-OZ1=JiNUm)yX{Q|bm7@$Oa5hZ)BD)BpvuWM1w}Y4O9(0W0<a_;u>4
zpP5|Cs>PTq^HYWpFeK}V9glqh$T<4x{6RsVr<<y@c(!@P8zv&neaVLE9KId=B1b8d
zC4!F5uRMg1+`K(W6Z$oka9l`kIi4BI^PK_;X+l$3o5s)U;kp1BZ8K$J6O=Ar_R5wx
zWwRG81h>|zaES*AFC?i-+w)PPhlTlc8cZ_lgfs_VBgxEe!}fq#x+v>;LoPMZ6zD=|
zn2YZRz`IFxoPbmMmK=IZ?&+O>GSDi1xJX)IHKg9k5qI{o4)un1X1x-X8YWM@7y0mV
z?G5at&Rxxjo3C1zIBsBx99vrr{;$}6bp3|!!t~bBpdD}?g|_z?(1?Bm50_xW7-}Uw
zKy?Jw)^+UrOc(92{-Wo+HSRwA#G7LkW`C7DPoYUJQ0@-tLsN%#4n##at3alTgvmS3
z*L#PDl>;IfElpy{aLD{(c*%E!hP$aZJGW#a-llQYF5>jv22Fa~Fh>u4H4gsm${_>g
zCMddN;*hj$-zkr_7aY2YSgSJvR1_&S<9l-u`>2vpN+@F2HJ63NUp&NO>kFzQv~+Ca
zxZ*SGOK$lJkb%FmR=A4uuUCsUJ81l_SnKs*gRaeWX;XvKa+7yv!A^fgFmxsfnwQ?v
zES+sK4_3L<B-?c`hS2G`1t?y=6B9754Td;UXb<=XBH#9kt7eNzC@n9Ff}&j$;&?>#
z6}IuDt6Nu;-jYT)Ij|wTZt@cL^qvHX9k1aYG-0AlOm+5%To&Oyg7XIRa9zRl1o<m%
zqwmY8FPgbldjE7X1+8L!+|7X;sJwW?sttkR;NrZK!Ec}<NFyX~pbRVQHLg!*r&ln_
zm{{TD=DMqwfC~JY#~NY_U|CQsxwV(YD+f=(9l(>C_!wFAVm}EVD%ZU&IWgVVtJSrh
zJ<g6FMlc%`>?z=%kbt6}d@$@ez?4xfdUUqS4ErsWjfAN5me6O$s3@93j~MD0Abe{r
zHyw0kCfY0cAmcV&NYP_D(Pk?Gh&qBamvak8oUh6V5GTYer41iQNi_HZNxfdgb$EqM
z<axYJ`*Jpf1^i8E9QXTc++*a|u;~Or0ht8GirM9L(d`nkw)juUy#|ahmJSO$S!~E+
zYxe`v30F<A$MTZc`Ga@|xxVeuAu5y+oFS~Bq|5unHMk5j!@}zcYZa?u+xBKdYsj@n
zhsa~T{}w55X-wWc<rl2|yPGzefhJ>LOpw)_`mTeT7+nrda`64svS|vCs9b-PvH;7;
zgzQfQL=#g0kw9t6!6Fx&YJZYu-6Uc3>;=@y7&Ez3(S=n*9kZKW&wQ$<)xJ6;!18dj
z{`l-vcR^`?AL9+XV2k1|p~muk_V-Tf)8@<d!th}ahd!s=LfSy8;arvHeS+M>ULctl
z&5jz4Lnx<kyQjnzrsDGAob}o`RB-jlXpz(uB#I`0()W`}m`k`3g3|k|mcwQ|vqrQ>
zmGxE0Bra_MaPsigf^iX)iZMyZ0($zMuQl<i{)*jr<&56c`A8mTm?<tKNI5f6>lN8j
zD4qby%yx51Dd@ZuQ6bs%j_`cJ=%&Y&xI^C(gniA$|M}7PRRoikFxkHQ0{&FM;W~bW
z{>&IJhYg}(>UoYnF=ap1;<%yAuu;5nF_eqdn?quQ8-weu8<2T_)(?~&_6&02PGx6|
zAu{e=UUTNSoZzf~O{Vp4QmDStY0kkm#(?9hOVe^W5b3<d0u@r?^UCA}B>Wg5!(2xA
zapX-CF4jpH2xKn04N-I<tF)h8F&f0%>@w!+7EjJPt%`i7g*2_K>B5hP#li|z<B;6?
z<Uo?~#8`VdL?P3UQi+uC*T8ddyPTUSE?YSiV-9T(l{B>0MckiEfe=4J=3U2c%9IRK
z%?JPZ7hwMLj;0O<a-)m)-5~qbCi4e73dQp9HUOOCu(@4&j@aL??;(tAko4LO^gW1p
zMNguDcKa>j<7(yZs^P(*b6Db0sl6o01Is`-v^GVSA%l}JWhI8j1!u2elJZ<x&a?GG
z*r|cr*+W5ag_UCcRyr!r5p#S}Izl)HWz*5!I0~=c&6m?8rBB1GCT(dY5%HU~6f$9*
zFbQM5&Zn>>AQ57owq+?1B)ZG#lL_qcz=yov^^T@mG*fq54AHwjZi}h{P|j0_eO3>V
zSdnJMXVD6_=jUCBN6UGe!CM_hGL+t}E4IZ<t@Y5Sq5(L7)!>9j(NNL8hsE%E;bDX=
z3M#D+ZXq*9>6xKFt8w@~n+jvK4`LUrUMO7;HmWTTeL350S&)jXww+xlDJ(cshGU#c
zLhU8_z%i60lVI)bil^D_TjLyQ4yQeOz+2I?<|ug8<<hE7J^c4Re~@qeA;trv>GIR-
z17QG@Jc|3!FhteP@0G}dnj>2kBt|CZFDsrw94>bkerbSZXyfTiSEP7&|NTc;NWUiT
zrqGv{4gT5b{kuLt?+!=*NZY~oFlA}kZgjSm^XN%GkoXSbJlJWI+%jKpmU$6rWBdt`
zCsfQ#emxL9CK0||pV6{)uh)!gvB^RnC&eHZtkO5AxBR4bboed6*xt+<)$v*oV0P`a
zO@JT>)7#rK2Y0?Eu;6J0OS%8sza->_T9l#opk#rIP0HGK#RwsBSqVFAqr-XPGn?lN
zSj)o`I>Q{V3SUEcc_04bO4jZaF{alfmbId_1)FH|Cr6+l>=cRaN5#kowz>M*c1LZ<
z3f)M&E~Ge_gwCHAUmmWt8)wdXzM9FFTGw;KHD*{59ASX>uSAf^g8f521;ywDAh;Jo
zGXN?MO1xa<&Vc*?K3{f8L>@b1nz!Gfo4LR@oR1MMN$_RlU3@Lr*T9_$!!N%DQ9<Fo
zPzsMOKkBEa%fsqxzV5x}6F)LTNVv<q`;!<`F%S5!b+^Tym}*r%J-f~N)_Y8G6d@<B
zq;WlGh63PZx{zh81X`@nHd3{y#21UZ!$&HI*B@{83BuTKehs0-3QF*OEEN1SEs7Fp
zO90y^(CVb7W^(@db?hKI%&qlO5HgOrTE>+w(7JQ(@w4X__iDB1Z@J;hSo*sB#3?|n
z2O>*Tgt+Hhle$`wPU5~#QwCZBt6v8@umd_>zQ@tTAU@b+6X7*npTv+;&1NYX1&~|F
z;k$#njYw)L^geTpUt=56W-jVeU_K7)y_JGQkmIgyR0A&F_g_~f#Zb`v6BfUR|Lyew
zLX&0EUO{m|DCv3g+6Q~z$rUo`b`&EhL9lz?ut=EvL*BQW4g%ktd8b=}N7f)RkwlZ5
zw)kG%TSPt9dR-M<=phP)fe)An4k3fX2_ci>ZLCAvk*E4qYPG>3%q4fpGJWdt50@Ej
zL39D_JS9rMbYFo^6B|xP%xhvJXqhgiopMUuRARy1`FAucXl08?D4kV1iIxYy!)tqm
zgXF~YSPF;)fPwhC7==d<PNk*hia!%-Z)<&)Wl{Q{FGDOtgUVRt5s{f}r%nQr+AZdo
z>g5@|D|=g$f-ianSZ;c%D2xy^T52hM>FO3L2VNSY41E5#`rbi&i2x<{$M1C`&(mQ*
z7fU*zdPmnCo=t7-ItwoOoQ+ENX}`qA+VoIn+j~A#?mf6#$NZHw?LG@(+&?WK@`QOn
zXRtGqs(v=d+l(=spaD2~HIn%#8Qi!<FL!Oh;DAaUdU(-nMu-$4N!0BNr5q@xuG0ef
zH?}_2-#DlNQ4o0sOKL3jZkQ30y_RSG9`W#@%Iyk#O%-NEpkz`0M5ls;AV0+3VKMdK
z|7<fTq{|MZivJz3<%1PJrd3;uXGVfISZCieg|?z%Dc?qk#jaRH;fLi1;bOpQ3gybO
z_%J%4*<h85*dl!iS6x)Oz?`WN8q8CgKaIvD)8+waR|-KJjRWZvKe2hRTPw|Bsrk}O
zJjM3b$PCdolQSPz=q;%3M;TP9rYyZso;3u>p!j_C<QZKw5cKdrrp`Ms4Wus24Mv<R
zt<j4yf$Bf#3}1TFrCBssP|1~lszEs>=6t`n;ZT#0g8Nb1u8%yi(~m|oPv{HGTM*ZU
zMr89c3&G|tXKfNmPZT)S$z`q+rQSaoK-U&>5_9Z)K(r)8W?kkzx&@_M3AuVD3KOJM
z{ymZa@;{=n6@HfkJ+MZK)%cz=GeP32@OoW(G#yzw&H1an3R2#HiYZ47r=90@>{6o_
zs3MVrM3L&-Oz?Xce1Nrn8?qZZoQhVL_<wQFk00QWI+5qR$*`r}m>chr4M5uCLg^DY
z4_j)%(2h1gbCtW`<burB|31BK@X7r|t3*+A&Rv#z>g(GoL#qSRIskFA2>rpQ&oGFm
zuEX>bqJv|(NtuExGjJqX)4AzM1t`TPPRz6U6`hhyR=fxpKEUgmQbhmVk_7Y>RbX!X
zsAr|)h0J05@=}f{iVebuox-0!z7OcS`PjZSXvp7<%XK+Z2WX?Ojj!J=An>0#B18vH
zQkI$OnZ+BB-b{`2kx^L7G1oZpzQdzHwW<DdF81Hk*0lq2^0zE<tx&WBP5i!JKu=9g
zXp`H$3o|07SYKx2m*nKE(6XnAUBlKwiEK6-IFux%(^Xu}oA(wu)0{zYbawi5G!rBm
zU5AuU=lUHEO-N=FoBCcdIsWL(T1!r2_210EQC!-?{|FYymz|td^_5vjPT2THrWEk1
z!c8uC6Ceu(y$dmj-B>$sQfd-rL~X*KCU<S1#T(bHwB)uBn=W*Y9Z_#N;%#K1!aOE=
znq3S((W)_02AS*IqGNVm+xdBsZOaF&e+ye69qyK;q~Le6oaj%j9s9l1DA#iv?@EsA
zXWg@=HK&c+O&h3u_?F2?HoD}lLQO%3U!fLhgJj={!aKaj@C;)%Trt<2MHah3&J^tF
zziJJ-Zi@yP3N078Ny0z#O85b`8?l2ASnCN<D0`H}%)nk>6qt$48(fe<GALv29K~Vb
zk2vz~(;I&Zmqz4+V#S)n{07uvggM<|_^1s(Wh8c>hf8fh$F&f80)r#^u-=<^beP#i
zSn>tZV<xgM>{;U7G_lfFlKIT#qGTOtq!~F3z|Cezn`r0g8wd$x<b0J9MEYTsO;*gz
zlx5L8O=Uk43b<HtJ=$uq>>)>tx^}TBd>CI~!5LoyHi5t5j6-hO@1;w6y9a_KGj$&I
z@>yqvo364HB#+Ol2S^cPC=W~cS(8{BY#BzjCVcIzE$55Q^|3E^+gzoVzgIORH;DdM
zDtj9hDCENb!TK_Jw`KB2B-CJLX)7gxsD7#liIZJ^%x&Vqic8acqzHjrPEPLY$9_5Q
z|K#F-L?IL#(axtxf1L!N>pHCEqNyc+69Y{7#KU9r7*hNkuBe%`)#4&GDM*6*P7xgC
z$r0%JQxbElR@tBNL=ycQe3T;i@eE*eH!kq$msP#P=Q;>-!|EWoho6yF-pjE#Qb}Xi
zqpwE%Y20De-JjR8eqjgOvJeGbZ6$}bHs5Km5(P{o=u@5TyFJ)5s%_v1^c-JIW*S=`
zc9-6eEFUw+(BU1Cu-676@}~}2=eO!@u<nM#`}CtguRTl-FyOOC&Qnd~524c%WY*-e
zDClbHvnMDp$(t(DW3j37tKTL@%2ZAM=^*uQ>f}e44#<RXtJtx?z9E->xc9Bq{sxpe
z>EKP_SqN@M1nY#oY}ZjvV$A`X9Cu3^I=sPqDM%4&ZyMMop#ws*Lmxi+#1KqQ(#BSx
zub5T)f1?kqo?9f{E|_wS)mYnZ2B=GxNi@?$e)m9zIOxg5=2E_q_?+rDk-%AVaoPNB
z>>SR$6hAHxPBR&ES!5*kQqrqhxDdz05D0<Et|(mF_5afKesB<~8W?cxC3*XU4h`5z
zH{#7*`{;F7Yb<2pLFR4>88)zRE=oJ50PWfZqDBGnpMr4LA~8G?otu8}g^o)1Aua-~
zSaMMeDlMUq3zdQi-%o#*UY5YilHU93q9D-2#rf=S+8at+w0TqtT|M?>9u4k--8uH)
z&ktq`k^iM)|3B|E7H>?&;*Pmp+Z=FRNUZm_&hf0Ju3qyfo{#W)08`w5k^=f^JPI^Z
z>HaY|{L$X1V-b`WDm@6iD5=<*TQv`>6(j`NK}u3)j!iC|dwSh&CV<|U+wdS;7A{5>
zoXF;%X<;BWkpt<={<c+R5w~*Q_45>Yi=*>wCW&!D{v?rFtV<|Wip!5gB9z}u-H2|!
z6i5F}KmVU=kiWL6ub*EmpG%c)#aYxH?M;OLtrVrwSU0monE6fT-%;)abeWb2kRk~5
zMO4gAv5w;5f-K}`CmAOLn1D}CZpd3tcZhr6?FH2t9B;l@iYcn7@FXZIHog=T6in5d
z&RDE$JCie&r|suE$tVOHbGBtNHYd>Ov6W;~B`>!IF7%-G>#`R}A+g{{O|h)`OeDxN
zG-BOpEXn-LKpUS(AnxRTz>?Xx)$x+YYjA?=R3HA`alTp}{0(sm{mcJA_y0><cyvyX
z4$lBNd4`VrK2Ia*KBrnA_}$G|Fp;0j#~x_7e+M&SM$7)=Qp2fy!bwo{YmCFC#HS9O
z41z19A*=~h1I_x>wep@US1jfv*v~oCyoZ=AR(dj$(<eo1!yS8A+K#_$du)1q0rvqZ
z^yTbrP;0m}BXNtmL)RX>n@!iC%|Cg{|E;=zJ_#rN;F<t)qQQG0Fa%=rFmrMiex~)!
zxaRtvI2X0^)dUQ;cUlGaFY^B%v-a<7<Vo}J!M%lL>7x);c|6_|ZswTJ7dhbn-thmu
zAoJ-VEUfkyz%adiCZ2m%!GLthf**-e18RcKU6K9>B0&1oh;2TVAjE&g*j2h+VXtt=
zo#z`cr%;$Hl}BlHtl!}SrG;ZD^sqpzFC%Tg9pAx!w}bpqDPk~qw@FAe>cPlJh{CJ!
z(Ogm_eNw{j=}8bMgZHwaI=$j-qnxWFwCB(E=u2@Mob1fXC3!>>J*ZYwLvyRT$@%tz
zBPysbzw;VK>MT~kBb8-U6SfY>R=5cM&$Q~WK!8k^O(`fbl#U+x=a-!!80wv5Y$?GT
z>6hjEB`pAdhBll7`OJ`{qPgZ$r{vxJM!`c%1M6twh@{G#dc=R_5t5PF5M}OE=B>iC
z`ZlQRWJsNYAlj)Cm%qEv;0S8^BMgE5UnxdH-~zMp$=2ggvCt*7)wtt8#iTeszf<q+
zAt>nF@_Lhko}^69fJPjWytj}SYB&&EZONVFOC_;+qEtS#k^wn5Dji%qJh{KB*SR>f
z<<~bB8$^u-L-c<aB%0J)#w(L*|IW`i2>*@f(Dl^^zre^^WnQh+@-?bV-@`NOxym6=
zvNwt!>F5h~jRQ?I=y2!XtRJ=okN2pJCewt|4lljG$~Vm&!0UAVcLexS?{dI}G4FA|
zeSwC|*Y-S+NFCOyUTv5;kj`$FM>-t1wJxN)i8XA5K(T6f*$`~BK)|&eC9So@|EtC1
zzbZ)M@s@t!YAi<ov-EUqz}(7}YLWD=?>NPYv5(O-B06m2Zy{@fzgTIrwQwLMjxb9R
z3qgY5h7v?@QP~-GUTG+Pkc^lCZosGe6_}ma6j|W&%nl&N(x|USQ`X@Btdy>7kl;77
zt0RVaUp%gC9<N7E1XNu6uInwm(G?e(WM#6s3wncQ(4l8YC`qU1CkB7(Jlw;K0EpqN
z3SptW>}z~@|1=`}SBZpTKzJz+0!Q+%>I@4Zh+QF4fu&jaoB<(jf~U6*1g*b@qQoZ#
z1U_M6FJy)+1`E)w;hrDDUgCuvPb2xOh=jo=_v&&F$Lo+tIoSr87F#Dob5UU#WDG~T
zs=_cX)l8h^g5{L8GWwK=5&t^{9g?6a7}&qhVkFH(8JB2u?5HaXI`ecRKD{enO)MhH
z^t_^}P)!uwIFNCF|GvGmN#rLVq~aZ@hB&A9k0<-rdf<V4p)dkh>R*XK8?jB9kRj3F
zxt0h!Y_474yAv4*mmK)8qu}=L;`u34rG*mr>bF}#3}+sHCGRCgX=_Z&LcfhPiHoiG
z!#w!>Po}DFXzdB+!J9`Y{!!4&hdaKAO~bkH{|Py|T!?>6`sqJ^nMjG%LF=BW!g3(#
zj^*19zRkl5Kpw@e?YQa-XxuT9j%+H3`LAAsuF*6>svSk;T@U+*@2Df4T~px)RfZA4
z{sggJ9WH=rWm;K;d4`=J;g?^Dg<T`G2ik=9mhUB&nO_yW^^mhX930Kp>1nKsDAw^#
zO~dT&u8=VnTpgFzh0`>a_>#9Mv!IPWMS(mL44a=4@(UTISbnx;Nsa`Eo{&n!)cnF<
zW;hfwKl+EyLLSqB=x4Kx|46h;g$OqX+;|{y`T^)y&&HTki*HUcxlxleU&A4#efVe*
z2Ty(w-A+tFALQJWnLE6!q<#}_F#%OWfUIYx$1*k=nMaCF8;^`C<de><5;u9ebkZz-
z6c*xe&NaB2I2*(IJrqPnA$_Jj$2oB_aDgA&^djsJglUAr{FeawXL)@F$q2)SWepUp
zl72h+Bf%)7MQs_$C$B6cC3E}+RqbiIXgi@UXimL*bbl2H$-|S`?>HbcfeLX#ZqEG0
z-p%*s-F7qij0l*xp0j0ft}-0+RI2Ef!@-e&8a*rD5ViSHe*L5LB&e6vl(Q>>`N?4+
zeI|v>^d)iRCnbzm>M-9s*usXoAf@MuABFwkGnC{zrh-N+l3Vr3b7lqn30T0bA(WP#
zJTfyteQa=*+X{41KuL~<GhAQ5wcGDy`DGyxIh?-=%aqPbl)T~k1;KWK8D(I)soC0$
zy=86I43Og-$vlJ8xG+t8GB;vzMq^@fUKlGh*1ElxRto6zBf4%Z+0IHwmwp|1Ml3S}
z<ce#PDD@kW1xmhQ`M+LhNMJ-lvvOi8_=JHBaT}YCXZm{O9n(X1COgomp#3!pvUwrp
z>9&iWKYiz`((_LuK?jG%``hgO9I)mV9=b{@`o{LSY*+^<b)1P$@4h4gZA;5r5l2Qq
z5jY+n%!O_qhZJqU#eMj2nn<<mS?s&Mm@XV7J%8v-3Lu}z5IUepE6xY)&x%@KvkRqC
z<xEK&70pS(^rGcZfS%LRT<Cwi0_?%r-LLmnlBo-c*u2y9eEAX!t}0K|FJn@DGovi&
ziD5ZRn(GaRN3fF*L~D8Q1u!`3QP|J)t1T=_fijTwp5Ex5gP8+BBK>9^!A8pCzT3zt
zVs{O9vX@m>dDAsO$}la=7|I*DxTHd}HLFH3@SiSNZ??1RC*BX%j;omv)((57MG%qX
z-G?4Q9tSpIF_>vAtKoA}HXH8|n+Dd*qdBjL%S72v4p&RFEuW(PAIjbWD6XyB77he=
zcZWuT2Ma-i1nD3N?j8v48r<DISb$)SyAxbOaJS&@?*As|<U8lySNDJSRZ(3~-Rxd_
z?x|yrHJ9q5t^P3jlgUwFn7Cq$=Gv*U0eHa2$|=Tj7Y51@`klT3T6wQ+f|-mT+Qs7)
z4i*bBMwN)~y{o*$6$^_q@TBBy1WYBxxRxR_W`PceQUU;#jDd#mNBDG-CBd&WznT^z
zfNSvc{6~s(`ZLK}HQu0Gad^JR4$e2<Jy(k($kIBUa2<De<#y3vD$A+$nmR=A@dJCa
z%@2Zv5mLA`l2CEd#_`)hQ29MlxuqtNgu<<um66QDc)JhVzZ$|}O3-$z(mkeABUW@U
zvN%&?G#9UPXK~H)MmvV~zm-_xBY{}%HWSf@cZua<UepzS+HyapwiBsRkJn4Xz<yg1
z1W;#Dn{&&Lc3Q|Yx)uvv52em-$E$)em6@dTj818X4<Bn{9mzOd4^mPH2gr(C=h9;^
z!2q$747vPUejxE=@Sff-Bd|-bt1@OgLdeqLmGbu3J`YnKlkut^y0S`1s_Z7yP|ivS
zt>}FTH*nGHL(OI{5z)Ovtrb<A+AlqH1M{DP&#ppm^D7U#_YG})Ek1u}4XU`o)-Tpc
zmiZ(VE$w7_eP?ek?6<x%uS@=qe-6V3+=oGgkhb6e0sIqONMW6y6Y#q6ycJfhv7mAj
zebvCeLn!3?Z4h}$i(21NRZCG`V1vtV+|i2_>s6X4^v=GjL!if4Lc*{&Rk|%rdj+m7
z$1ypc+_t#t3gUqIKz(z6h73<onXBs2_+aSFfdFf=fcYn@iUAMIfab@EU|{p(3T%;R
z>8sU~?<6%x*F~d!N;x9ND6g;e#-m?^&+Y74OB)|2bMP@UkJGltyc{|(%k)S$<}E_H
z{&%3HU}J(o%V2X&e7#$R;(C^6X2ReWV~dL>zp)33A5`pIEH>PJIoP<c5Aj2~J9ioa
z!Vng#YTDgo&LWNZ^57IRCH!I7bV%9|6{r#cjLSKLWTXFcT&xQ@QBZDlW_#qRlgWpx
zw>=Q*Y`R!Q<DM{36$Bv(F8cvrY~($4=vmh9s6(sW=2vNISATfSJ_}|uZD~kvU#wBY
zOjxs+R+B`tEFWL_R{#ML1ZqI|#xrR$0F5h(;`vi*^w!Vo&f`o?ue!ci#pKXey%%(<
zZBC5v$`i|ip4*2wEzRMsb745MP5^oHNaZ*9eFTE$!1mpqj7JQhBrmQZsF?^q{dUp9
z&OCR5cQ@Itj7P3!63I}NrM{SUu4B8iHPl3sza{Ud;MqhUUt)Nu_>oV3QI@A!;mus=
ztZJEI?ife=Rt8f_zkZ~a{u@a8>sSGkw0w&)(wi=qkvP&kf3-M_u*k!Fg&SsrwN1_{
zOKBJZcNd~uu?r76v6IU-5wxzl#&Lp@_r>G5zLFP^^Whtu-2A5d$K30Yvo>Yl1C`={
zl5{hY)iJj!k2xgD|C%UfOHypg^D0f&e6amoSB$@+wo^hpl<9bpSp{^6(8^VJw+hr>
zzgM+79X4b%mktVKC}+F4I<vc=&z&tIfwMj=e_>Qv-K;Q3i|Mi5ak^d}SW+wWGq1yi
zYwuH`8YUI<m*jUsb&i<9TT<_K(mS<FW$`BFc5LEIKJDhTHakXLkQ8L5+&G4O9GOyK
zNw+{acIuk_BuyZCf2?C*rM67+;(hgoGV=X>Yv5Mf@r%N>vha4}<2{_46Y)w(KRsV|
zy@$vt^btxtRiN87Y)BRvRLY_`L45Fj=Sw<i9zxgRoU8Pwm3x2)dam+AVbqqjB4wtz
zX4$X8;-S*irh#(T*W${3>>12&pzW{R8GbM|?awR#wg>=viR68F_26t^0;s-0SX*$2
ztLee82mFVIrG@ih0^;s`$Ekd0qKT3-u9nNn*Xk`lhOrUl2*|$PCw-g_M*WR#Nx;Ok
zKgWR@%jKZnmN2G~SB<*x$}G$UWAfD#S+cnOXt;>~FuN`WSp&{rXwg_KWkZPXPi@>z
zQIXDPW1OcAi#Z8=!Dq6qbJF+KZP^{HN9=xI{bBaVVILI_F)g3xSUOi-+zvnOHd3T;
z#Q$AfKHVXSRaR+>y7ZwZvjVd;cv>T#gEB$A7t`0T>{)}c7MA~+fc5o>4?)M(xWWCa
zEPQ<n056*->RI7ACxHBix&4%l>*gSGa%yZ{2${ccVwLI@Y!2R}<x)&v3w3&diMB8J
zL2B+I@dIpV%#WH@Idj}B?3Yr>J{7bdF1I5whhz&UxN62oBQ0{jDeuF-K8|a=WecR=
zv<_~4I6$hVmsyqfEAdlBWwN|EzE8!CPIi^2j#O&D2lWKnsJ1UAGJe2n#~soslqgMR
z@=$+CrzGIFllpq=XHV^DLCjl?#e&hdF`&e*PgLBYC{x-f<+!%d^uG)aUGEeM*N+Pm
zG~^{Ja1yviYXyZeXudQ~PizilqC4TdAnV~iQWw*I^9HKFg$qpA0P2jfQ&yk&O5!W@
zZ|Am}0aPGBF8nCR`xfDMRkX*r=guIvTk62L@9Laa6Rzk9Q$=@oA5T(#pW4uCI^n^v
z>d4n%FLxyYAvgIw$UY!acz>Ux_hwhkG1TvNpxy>+!Nn0P7@ofQeythFbjzBousWwa
z7EdTz$Pja~B!=5{*t?b<Q={3fNo@%fBMA8OouA>?#pBZ@T8-JF;ReYB#ldDgYt;l|
zs-~nBEat;x8@-P7f%Nu9KM8_*cPBd3C8J;qvN-Ab9=?bA@%-33T?6g&H}{;+-IUz;
zxc~e9DA>LLhaa7H+;WeG9+H7D*?2iHp9MP=T4@R<KG;sZzByKr&3@W=SyH*GxxU+_
z18-Y|O2u?<qvT+5Gw31k{ywyaN;{8a=9^X*P=xY>wnXlVr(AMkM21@3J1N>LNPB~Q
z_Zarp(Ia*%=cR>i?#O%*z@EcED_7xX7LrE7ky<^y%nY9QtTJ9(0XGA6z)OYfahW;S
zjT~p+z)JLG)PZg|#DCJsBV539o9Q*N_gu!y33LO6D!{vw-bpDa9Jz8s+jSy4tMPDk
z^K2TTPQW-ljdgxsGcCWLrnUGJ^Zxl$L8V8nyKe0%w+G4IyddT*blhL4%?(h0UF>-M
zeDJDg5zbZ_tQLFh%CwA-rX~*N5f8j*Ik#Y`Oc2loiJu)5jk&asCZ>|$i(RHALWXvD
z_CvnwI8BUkof?=s1gSvg1UX+cfDFHy4l=pAT}PR1n5z9ZJK{v>)i@n$wTtr?uMers
zhvkSd`F=)|vL(DleUJQW*x4*WCMTW*`Y=)MvozILqOf3iCPYH|Nyw>RZYj7)S<7jL
z<S78oU)CXY(JjNC(~=b{9%>WzrIbmD&|CI1jN(^=TWdiX&B`))NAmlyn2jP0VbmnH
z$FBmN?Tt#0cvZPoPW$7N3l}t+TF-IPnhn41A63pUPF7lx)mVU6AY-Eza~34pwgZb;
zbKL*6AQlBSdM~;NZCtgSCih4J{-G(f?E!kVQUOmdEhi1V=|BtEySeC`hcRGU{E=O`
zCZu#w|MOAlhQV(vbv0SIC^zsTp?a+Nu_#AQ3nAU_jd5*!x?xr{-CkX&{AW_F6tN<2
z0qy#eVUWA+M;U%@wa(6-34qY9o`CtbavGS<nuC!tl!a0`%@I#DE6OlEl<`1dE;u3G
z^U8iTtaFhqSV#Z;<UUj92e-bVoUK#4szA^qz+kBqUzn3yo&JO9{-yrel5Oqf&9&t8
z3V7RZ?Zwyze_6X%($ZNcwJY|2$sDvZ^27+-d$>Ly*v^aeSQ)pAi?jPkg%cxQ9Tq2<
zl8&2)&?W|xkcL<6>_pW2S-Z)&@6{JIbmZzUGk!S;b0yi=)#C@f7Nx~7@6Fus1L+|O
z{Qlb&X|y1Sfu|!)X~OHeg{WVP__Cuh)q=tJB|v`JFS(5yR;(SPhoLVe))61dNjaGy
z00M?`w?60!{gXBV+!$J*VBpT^Ch;`)Oc-$kbh=zLv!NjTq-gJpB7Z-%^@H!=G~r^<
z#W<h8s@S?KQgH+M<=ORbf@_;9$od*toaw~oF3m^}N&%q%#dF%`DD%M6Q(n*7Q!((M
z+o}GTc#h@*jIxewOjAH-D;~>+-lk(**)Bphpr`!2r6X~`hEb}Dt{wIDOw3Q4v9f(D
z)<?TkyQs2*A^tXJcFEE0?ew?FK(2qS8A!NrfaXUi)(g4z_2A81PP`ZH>oGHM<#Nud
z7+Up?L;_cP2X7o0(?y?ad;C;<ZS3-m>W)Ye)ZlBnljb%zfm;cFd-Uq7s`EE>8TZB%
z`+7$_=#h~(O0w;slz|W)mQ)PJ5rT*JP5SPuAuj!teaFk3Zqm@Cf@<03Luo0JHY4f;
z36GRaS%l0r|3tO6O(3W*JxV-HFCfhNU6a)T<6Ttr7PTbyC-VlArw=l`E;{QUE2!1l
z={qazBMj$Eem6Y>(!89F3(cIEI*Hz`ilffXZTa$g<V30^kVzA_ri(9se?Uvcv(lBA
zcANOQ0*sKXc%?z8GRx{jz~5Nv?crpJ<zEK>j2%%fAF2FI4>3~N;cVCc$0Wml!%krk
zgK8O%^K)izGtzChrKJ1g0mf*v+~)8ISGB!+27%;>v1~}<gqMZ7GSmIRw|E?)y({Bf
z#|v|9&Bb>>VQRlzC}lZu*uEUE(NpA4)v<ugGcDl71D@Ycbw*S;)b{ZSyL?UTh&Q65
zhJueXzRPZg8c3(;uWFq3Ep6!Q32h9|!*5>mA1JW}F#pd}n?%6N=Q8}Kl$rmHaFgD;
z5;sB7PPw2MJedjmNBsd(=m<}CyUpHZrd9Yz)sA3%hbKTz2s)nGKq3eie@D(rn{R}o
z{WUNe0YKqKB>+07;IK%pObQQMGseI~vR&XC2Q!}gO>1mmn;tu&_|<*wfK>W-P2NVH
zcR_29?yOCEi17caAicaUG3$WBdu2g-UrpQQIqA+R1elzp(F#zHN(4Ov27MJx^<l&%
z;1mohyJjdIuUEWxO03fKF!YqhtA;nUx}FkT(IYMe3*U|Sel5xbEm6ylRaFij?4E??
z)~pW;dx4a8!^h9g4QZvSxevBEh>wRiDFptzP|Apz3`KB3=Ogw=v1Z&`PZyU~TUOhR
zc212MAjOy+mHan4dIbkyfZ>~jcAu%y&7asKZIT$%E~CE~gHx*}KV)b4f&5T?yqu8A
z-(?|cy#9r0hOvnk=+zd52y?Z&GK^Z!tq6o_xTBYs){Y&;4MRUr^428xcQ@}>2haRH
z6Xgv8n*+;^C@zJ34_-zc`4wU?vM_l~%7x~jq3z}eNbIc)N3HN8Z@56$eRED{Fa>bv
zCw#{HSh#IzX^Yo{KkU=19_xzftI;+{-?1ffxvTT2X7^(GS=Jqunkp9tWkMA`F|I!G
zN;);}ncGFp#H8h;t)yheC7s5yo^+gY&G6ZtHs*L-Fgrk_mUvm}^s&Mdn2%Js;CNj*
ze?-E~&ecx~7mL(ixUWOtZnevhiUIaB$QzW+`dLDzVbXJOKsNh~GJ*8b`{S>am-70+
zv9y1=>2x};!&Pr~V8d)WK0qyf_n8-d3P(rqmf%(rBVXT2^;#*s`y1qpg0!);FDaPW
z3DJ48G)+Lj=mx5)0_+CpNgD!2nIka~;vw?V$KFmj1eEBu4`|^0TDRKqS2%i7$(0rD
z=i+_tY6;719RYs+Ki10v3#FVz+*RA1R0)(9&F^&N2lNFvp&h4i#<+}4s#kyasej9k
zU9^o8o`9kJXVUVRoJ1r(fxqgm>=4!QhxLfyXAB%Nr!b5?<6BKC^$I;z@3^kCt+rJJ
zUmeK%f!sFV$yn$0QzkN$jC<gRg`(wh4ZPHvtPc@|lIC@?==*}xFBxpFrrAWWRa{k}
z)>@E*o}T{=ORL3?Zafe)?@;HnlUn75+lUmkj0e?d7P6hPstlt4&qP%=Ht27M8jXP5
zCN}JH0Y-+<I<QZP<9MCqug?ycvpHfM!FZEY@-Q(@$onoCr0376>>kNd;;Er}45{-`
zbe>G0({~G0z(5SoBypf9CwtSMk$+-lpC@>cleKVFufQ$_cRNDPBCW&|?~n=KRMqEp
zEO#(TrmfYrjM!Qu=|=ppEifx6x;jnp66%zz>+>L??elz~j`-_G_Z<e?5R`}yr&WQ0
z{<G|PDMTBUlGB>F1QIEsRy|(W2AfC61tU8YN?7E6qJoZ<I}nV7gEYNpbG5CBumm0v
ziSSZ`X^WnUaNE%x%K1YcY=C2n^LG?!DYlmJEIi2w^gOf4Aw`}A_1o)f1_Q)pcHW9@
zHJhq~Fs3;curZGXu*Yw1l5WwsRJE{JHBQzn(d=tEdJSPuRzioXF3gW9oKr4i-Rdmh
z+=;&cd@nwjA4|0xhXzhNN9!*ES!TEcz(MkrZNznoe#^$yOX4t6m;mX_!tx1k9;V&r
zM*&=%6&<I@)5ABN62$(hS^@%w+qMrKzoJq_VFA5vhIxl{awXp*^zu1A0*ZfImh>v|
zVkAT^D-L15vYT~#48%e8X~~IptO{mTG+j{(IF|fuIk_42u34YFFz0K1=;F_6Pdj&d
zi)GbtuLZ6y`@s=us{iyJ*-8+THlAVXsV6ns2w0+{9TYr%eyd!>osq`F9R1)rRd2sN
zqo8V%J6JqHyZKHkGsE40L96CtVM;Cp*lRyp#tco>T&$Y(HkrhhRgiWZPp~wqOT)Es
zx!)x~-v8vFv!cG>EHEQYlnQH1L-XwD%WemqnWP9!A+3H9yk|v<=p%?x4+*5x<jtIv
zE_QkEjGIgQHeY-}n-#zSE+4FMW%`0B&+jo@7;k^TemYA%EX^##kdeOvc4`$mtbE$b
zPV<+3C1Tg%5WXL0CrRw<B2=?Lr|Trcu4Ol03LI4bM~miZb#Gd#Zv`D2sg{_5jkw42
z1`$?k%exxCEwyLrTKA5E4F{U<^j)jCYVpMQ>`717c(B2>6Md=Q@Yo00hZHBQ?QB0f
z6tt>G_7TS0NLlYT0?@Dl7m{Jc*MLol6ZR1Jg$oSteQ}F`6lJ48g^|HA6HgaDpbs`S
zeno*~bHe>N$cVk=^9j@bSSU0<Q}1XIt4O_ZyP8_Y{=CUVR409IN?0p`)Sj?k&%pX`
zwX&{Wq5o6Oc$dFz<A;|F;R<o+o^^hk-O4A(n76qkD5BHiTvL3VQ)i9!ew>FTqbSI$
zaCeSAXmcXiMh^%3lc&|?4t%}gMca5^>@pl$IR2OutMlw04jxA?y~P)LNFMn@Yj8wb
zVP!Q#Fs}mk_MuaT+%*Ul=SO=ECmt{C@ocnKxg${;H>1DD`KE=Ul5rEOwW0@w%TS9=
z(#AU}nhCS`u;s)h!PwVon#%9zq^W+!JfL=cdl!}~;n5H<J8kENdYaZ|z~y#rYFRxz
z@HpTw`_7=!AK1FX<wq0O4h(k4&y&EO;w^s0cLUOG`Ic15d#~*Ew?hZi|2eJhLkpKD
zIeMK4IX{q8+{Q-mwg_PB46^Ge{FoxqS@*H=ZIee-<g6Mkc(ID?B<6uWoF(+#tP5k=
zHBSPv;Avr0sw#6+UhVkG(V>*p_vw6?VFXpTSybH40GKF%ntDXz4G^%;dh@sfUie<^
zpMkdZIO%wSa@6%)p1RpO^SivGr8GV0EsB=J-IP{0yyPfCI~I|=n|;T~dFSWBV-w$e
zlt0d@%?vSV^VxFNcN%1KT^Mawp~Q#N5gT!n9HG&S1+L&LQ=n4CT8<LMoDA&QCTG&L
zHRMB2;OnnhU&rNnf~}`(K$yLh@Oehv?<f6Cd=bocTd-!UihAX_8JSbQk|K1V_`{Xk
z#N0aUc91K8LQ8-t8)ac}^gxyDr?}$XuZ10*yx4ggKmG|%Z{3bu3^LiK&!}?oke9dT
zm@01L2>TQRB&M)Wxq6C2<bUH0zX2QJCzln`5(}@G6^YkPvgEu1%s@IhnqdCxvnn&X
z^Av1~&>D8&a3$4(kXg51r~{Hl@*1L^F#`D?7hX$xT!(%Dhe$9z#n2<HGIeH>#jk;P
zcbwrHkUIHU<;9mxsJFuVxP#po<mm*q;-R-w;)wNmDT2it+fxS@)vc~!4yOCyhe3d&
zPk6ZvpVy<H4xA31e}Z?_*C6X^sKI>y$(XeG2TC^BSnR!F&_(^;ft$i-3KW#^qwelI
zWz+IAc`<9N<~bydZOQ6gc-oEEW&46q^$A-tC0w?H|L||G$e<)HNw<U9?VIZQFLhCD
zIz1l`DP7$=q#8c&D>mpFaR-9zA2=d|B0G0S8#C6%3O=09MW{<W0BrWI)mVVdUiyKm
z0;|Ys)DJ9Ympt2zhUWh&8B4#t%9j_Uoz`EZv2`v(w@qpZ>{NGF7qs%Bw9lX(k~`lE
z9*FPrK<wGt+{~*QnKswa7Sk7Mu!>#5HD?Jl17>x(nr$v6bXHCQLzeTDLdUj4fz8d0
zgBIYR?#UWiB=p^8mFrti^cU-$&u7jcuiWFM8z6=L9Y_gd99AS$VB<#?NAxvi1-^{P
z;TG!vi4(JeI%w9^S#MIY08Q{&z%7~pYR=!zQ1=SpSse1#0R2ccV36S2awssQ?RG`2
zCrQHR38{Qh#AEi%)k6-RjLkSg%&A+8_@`$U@qU(iLDHQ`%53;IZhnZ8nl37Ihg4=>
zUi{L|goy8#bSyN=1b8o<M_0nW6{*IPF02ySgopiL5|8P&P-;F+Bg)psh*z^liI)T6
z698wOdo$8SHq^ncGyJw@{DpqeHX<cJPZ2B6da$pki4`m|$xD!Brs+v&=a#N#O`Mbo
z&Xg5o%gaflsmh!dCP?DrU<GvoT?Ti#L-v++OP0v}EX*jg;Keod=TE@R@1G+r=#ATm
z0zxTZ1O3UW{6Kn|82|aaMj$|4@%ez=&JZuU(Ip-j<JT99;ia?(D$ImPVXB@_y+cNh
zO8<P$VPvDMycl|g?l$4-D`1cdl6c{hhk(Z%{0uCnO^UZK9@pVgeHK5rnCs6Gn;*J)
z+Jn3+*?t-fY<5Ch0Q3G#VP6ZK-X2ZW=2_#NH8C$A?s%Nf-U|sv`SywF3lb`t{Ed?O
z%sbPw*3Bhe>55k`5l5WQi>>DNXWi^Mx;Uox&P+mp-li*Fb{c&logO#Fz{gTupvM+*
zYpwBJ7)?SAA7)McE6=>s)<5L44lv*zhmL{lw-@WFZqS(n=)+S#Uv=|g!8EwJn#|dZ
z*_kn}zXwA#>A7sdIF|w}A(U1Tu4?o>31;-;H(V6I>|k6QQc*-8>kODbo>_gnorl-+
zgJT*pMpJgA4=tkAP)j<$c|X)b`A`fhuc7VYm;}S8xxtp<is=u-xR!!umu-vxWos-@
zr|vyCvCi#IeJCDlE5QZ%O;T!bIs<JHIC@Hy$W4YeMx=Xsrai_bqGS!PJ<4ur#D0~C
z;`$2AFWa2Rze~uPhGnd<2n;ob$X(Q3`h@RO(0svS(*avAE#u%i{z<obp2*TRIU%)5
zK*a=XdIbEIKl6`c_hlx7FlrfHPdzTK6jI7_RjXW4)(*ayK-mDi%|20FR|rv2hE$Nh
z-2r<|J_3v;#uj%l^#-lq2h+MsQ*JF3*hb+t2JcVDZ_cX4Q!sY@pQDa<>N8CrVMLh)
z0VegaWpeA1@;@jM+XLYDp$YrSfryJ@!}GwP>(?TwEAj!RSS$S#@eNQpTDrWbB=z!B
zfVM@A1~m1@6w$rlACm;CV{qFYFkq_1`1&jNAqe2O9;FfgI1Y?tHoee-wg9@-X;!YE
z22Jn%92Xu74?i5=^){<$>FqO62+7a|4Ev=EUFT!MkYH|Yf1)j_4!yf`WkrAR@UXXW
zL=kYP>wa&u=G~S=X+5z=kA!}*Y3=7>Kel~bQ|6~!6i+s<&iApK9gpwD6h?hQKJ64i
z{p3IF%+HBl*|!nmV;m-9>8mZsu+-$WFh4bu-cpi~y%(X;u5b-uX3ClmZK_%BtRuaY
zM1NO8S$9bAX~zWp?}*6xgupUI5j{RJi<0facprML-!is{>u&bhR@iTUQRt1tUb{3{
z`pR~feXdQ3ca6UjxHOIysp?85>DzXMS@uCig%lPRG?Q{QPXn;3*rEV}`%`n0wg-Oh
z{PFsExIF}JiQQ3`KZ$Y*qq&bOAZXL!pY0~(w7S6f7Q>IUeyW0Z!30C1k2gkk^jz%i
zmO-huAq6>Dtn|~~goXi{qW{fF(mavTu;NAnoSrt*8vcB~aYfxhSbT-%J-gxfT2bGz
zMgN{|zsWQ4P@W(;+LR^l?Kgo-jqL+YKUy56^xUGk`_=bYKr3VzrlBzm|5qP7WfiS}
z?eO`sFhIkEuAd-1Td3`Cu6A4fs$;tks1%?O1piiu&w*YpvQZ@X;+2&O?(omv?u@~R
zd7XC-+`6ZD)4{V&q16X$4So(EIs9kBg03?{QmZF>4>{S-{0Y7%tC%_U0aVK6D>raL
zFA%$VUnWHO$E)|1t~zR=#gI|`Y9=cuY7C(l9PU3JF)t76WK<S0ObQH$Fa?r=FHg#}
zT&8ESc367f>TV`WWx@14wc%$H<<c#p`46jHvUE*9*z5Q2Md>V7_Ln>~Wd`x?!#Zwz
z*e6}-r_h@Fs>Ms#|9KD?*7i#_KVt~(uW<ZMuI$5Dp@H7Om3F5z<r}D{tw0&1rQbYT
zJ;P?1otK9djMYm>T|3+Z)8YOQz}ak{6o_}y<dZ#cXF_*(z<qjjn|!ZD_yWn#YfqtF
z%`BdTH`z4k>V9YL;^TFRR4&Uu`DVZ}UPp&6|G9<fF2IKL_vS)C;qaCP6Z-qf)>OX~
zVh@}AC^jn5g<&w0Nx}XNLG#gdCTZu;d24Srj6TLJaB*!G`ac2X8C1O2bqh5IC}QJX
zig4fwyRkf>p1=hn|3#_0fhUGGKXm=a-fB^+y2Ify;XiXP-X;JoA?g9*;&3zo(FsiC
z+qmi&z^}d~g9_%qJTAu?Yb(wj*J~b%3zk90JX##~1I}$U%kucLf{6?VbdX*G>a#m-
zCexTzJ|_##9e$P?`?^E$FH(EDmnNenAG3HyuBO6&UngL+V3on_%(iFM2*1aU{fYxV
zy_S;2bIttxlGK&z&j^FIUaTkmcFE?#Ah3E8v6V5->M<PjTtwn~Gl|4<MuAE45pQ^m
z_HM~81C2%I&Wan{EeRybgr`Ttb_esCIXB?#D3#CFw`-{Y{=XJR4Q*Q-WflOaG|qof
z=|nG=2n>8&*-h4r^+sVfTOd%^BKB5`ln}ad=qQ}s{%e{dAv91x11z`zK6NMnb^>76
zV{1HiI4df7?IjWTP_uVh6)mE?=y!8Za>F{Z1i%Qn?Vj0Tq`w`9HFgw_N<$+t>YyeM
zqxYn-IPpo@?;f@*v~75lnLm&z_|%S`i~aMJ@`$e*4qurqE2^_`X)*i!Mx>{Kq{2^=
z@xQr-vnSW!x;OF?A<PKyZjtMifh}&--sxnF7W^N~_fjTiMH12v2{_8vKS67=bbejE
zf#Ruh+~Ro}kU;<ioe&{Xq3(vleD8P-lY&id+S>v51RWqi)pPf9iC8^_2gLu>6Hj&s
zSkAG3btnTh!{iKQFFe2r)q}RR09LkWy_A*b{Remm6MUi#K9Xd@Kh2i`mYDDp@8-2K
z!X7gK3vW0YI2C)eW;UY}Q2~@n-2rTvCXFDY{k{qGigbTf<szjF|EJ1`4ZBR8FMsTV
zz6pqPIOD-t84eTxM|4sS$PSoIy_P~T1y}zTNUAAqng0p&US1r~5eIxe(9gHb@LBTm
zk1&h_e^b}s5qr7bl%U#%4+A4J&p7`G8({tc5pFBv`PtLRBVg4%{mCLiJy=jSws8QY
zzE=@{0aV=7fFYy8L#@V+E}Q5{I@}QZsV?ljF0RkEljK^_1<*)u?5&-`oRX5)9o`Jf
zz^p>5>7}8l$fxf45)B5{uRKlcwb@LbddFTa7{HYNAk+6x^2Ed@?Dh#AV_<6=@NC(#
zvi?1e7!%r-Im*mOllZ?r?>4umd|6-<S^x^l3JA?DwdsUsW)SS@AC!pVItCn!QV0+$
ztmb)(0a5*F1m{cEWMDoUwp!|0cBz%O1gZdf&Kunv1l89_`FTBC4b~p|1OjfBc>D(8
z<5I$W6u<=YPV7kzvr5SlMAule08PGssQDDXSe~ktWCk1i)%BuZgacYZz*x!EIIkuU
z>lAc7?G`Fv$wYrF8GyC{a^dYyL{}K-MG+tswBiM*zs}UwWpx1|rm5i_CzXP4`3~od
zesoS+V*)0le3&1(3(v|j{`8I6Z!%L~&qh`f4CtF^`r)(cM9J8#h@xIU4Y)Z%g+6Iz
zoqFbmnIK;O5#x>OA#nyw7!cilqbvO4ZO86`2&|SjcQbL(IJ*S_@=rS&38*L@Z*5V_
z@b#8k3{cYE+T;HIe4Fu8V5-a`dkznU5BM7=DELNUT?ClU@{vh{+-@SsB$cUUeMeGo
z@iGk?oS&*kz>(iMkil<mLOJ+)fuWU)?%G^@Ad@Vjyoll#ByQd68Mqd`J%9<dUC~lJ
zo}RQ?p-IqB1udHSzpvwM`J`+ApC_MA^=q$1R3zH{HbkjP*R&xoMMMC2)4<E?ZfM}K
zg_nf#fUmm^7<2n~p_Ca3xb7=@z&5vlHJ3hFnsbCOdLY%^kuIgfxg?HAni?<7a+XlC
zrs4Jl^|lT4B5UVPxk%9Z@mK`X8{H!q$RxL^)j;)W7%tJ49D0dlo(4Wh!NhCn7jauO
z@XgwC!Vf*`o>~u^>z+DRD_n9Vn6|}U|Lhe7Hu1b_JVZc3$ut|%k;X4g0>=aZ?}q6>
zp9rx$?w$x)J$UxG_go1a5)l4IAKR{;QpYQSTHx=xr)t1SDvJaGC8Dk54yn+@oQrh+
zl&-)2Q9yx~J1|-J7u(dK_f9cMiafT%cx`)Q0DR_GBn$#9sCvB}6QQ@1S!2CRO9U}T
z4Qhz?+8;R=DjUBDz6dCDl+3hYLvW__t|pAOpZio0hlgo6)tH{{2qMX9T88^4TzY3=
zSvxG*Otu$rT1gW%ANLvC)3=)E%PczsCdx|9W;_bhU_Zeh5{gv2OL)My_cyl+(5h~f
zC#UeEKt$rrpUr}b2+(lQ>!{2$B22z&#Xb2|w;x5xxB(v4C2~1rVGk30S~D^|`90kk
z!t^lQsYWe=6b?K%0)(L9mB*Pz>{q-cH^Y~YJL&GRA9F@pG-{X*E6n@2b>S<q5u$|g
zC^Tb`o8Vb#m}-P52L_w_WV8jjyD?g${4iot{b1PimX3X(48RpkGZjn&v$-QCY3@1=
zxA%{E4Gl$Zc!Pq?cl{Z*#adeD#nJW;b`P6h9$N5oA)kxm;>L|hDq+Imt#p`&wDw{>
zr#;`3@yUoN!(k93tYx(^s!aAiI-Kj*TiUGWI|=d6)A~NAJ5x0uU)>XX1_gs547_}!
zV$+`2LnM0K51(6KtLJt(+x9(aKdw}`MiTUW2F*)jJ<(ufyD5`uI5_%ai36rqavoE%
z?5}^P@Pwsb-8^hu{fU_r^33S2Ape*UhL(;EC$ydt5j%Kz6Dyc<|7dGr^z51Fw4dsR
zDc2=-d4PjS`>@ILi;l6ZKGpMy<mRIvxCBeUSLt~t(Q1>#JDUf`B^2Wff$3ys)e_2%
zYn>no*`&`;!VO4I(pE`rYn)zvhML3_rU-;hP>SzOon(%xEzzMM#*2$|%?lRO41kjx
zI6At1A6be0_bp;1wX|K?1cJ<)E)%VyPc5`g&O+&ohQKnTBZG%Y-wuD`Vk8lJ!*az}
ztcNJsj>Vf9O1ban>qyVDzd+{0d=e5yuK`s5mCM~podXODgD~M^jMx{iwlJi-JKakA
zFakA}<5t5>ce$Z0e4BDa<TVef$wj%^fs4jeE)6U3BSq$gdm4RM0w&B}C@64SP}l1!
zCkPi-_+)q;HTc)nG%9$FdWxt2l=;45RWp*`p+p6(>KuIgta&r+nE^cXDNR`!|BKXJ
z#<hf8r3&{?)tZ(0B2<gh0`lGZX(?eYAFzVGT^bBp@czEt5UF1ufV;JBI-V?AKd;pU
z$!yN8OOC<vLQc0sNk`{~hWonCD%&eJYJ`=<lOdW-!rUdMaRc_+)rOQd5|*tm572&J
z$y*IOGfc>=N|V5w7Z>;~Z~ikOG$C}JM&r8wSTW%(4P|Ro8r{QdJ30+JhN#<M)o;;9
z7r}JfVvrJ#nL2xx<SP~!jJh~4kUq*8`KTDgb)VGCAC3HV#nfx?R+)B%xyR$g11>Y>
zuJfi>)pmvPD;5D!n_%O!RObS#jaSeJ@5I|4_>~ji<}}byq2j(*)6if^2;z!nAUmAW
zE=%Eps<fcWvqOVMpzwMIys#NSV~6uW5}8tU>d%ob7ZQRTvYItqs{;4Ev-AiFNN5j|
z%4^&GF$gr;Rw7O+uozgGqj&mkKWVB`D@$=i2iF-;Nq+&f5V)N11G0Sg(4$i?Hcld-
z)hn(`{1ykuV$|98`M*H2ebu46h8gnFJaVOMLRjTA4__qL9K7Eni=x2b08f|~3j8DJ
zyc&dEkzgjGyk2){5=_p+sT}Tx1`p^g56sH3piJ9qQD|k$CbR?SzXbgiFUfpfFPPjc
zkqf7q5Is`31p&ipZ6I|;@GtF4QUkP)W4CVtqZb7HR)5A_mned50x7a@erN1xzj7a-
zIJsCrJ#?S7S9h3ko{a5(F<<|{e;pmP4s1rIv@j8&1ytC=o5CbStPrGLAt^1r({*~X
zTKZ)^Vf_FjNyA%AUo{|*>$`28_{wp5{k?4q>fg$QQRnx}rU&HpDoi;2X;FQlE8KrC
z>N&6!JFg!q6m0O&amSm_l1qh!VZTNPLGnuzXi2}a8Jy(2@4Tg(aU8k@3Eok<+$gxc
zjHqNUg1(N%#gy9{<7~kZGhWI>>C*o|ls1haU4UNU^9<UKMK_rE_&eFY_-5Qigi^ME
z(S&s8hGabLNAZn2k1G)v3<4dB=;7rztIb%E4xffpv>Gg7d9c=dR95N#)`cInz>+_=
zLbZ^4_aS09z55wj`PY)^-vUeSx|(#^_>7ksmN8@%={Dr#&0{e`F_d0M(HM~)yX?$=
zYQtYIP6d)PJ5;^wx9)k2TF4;o=l3q2!RU<?gVa1cugItRM(9@XgK-zvY{qA2hHW_o
zP(Ma!M47F!oCucaHJ!tB6<X~akyECD1#&AnPIkuop3lk$KA}`z!jcr2V>pb=QQI%m
z38KWBbg+WI1E&&D{Z?V%<(gJ_KHADE?3NiCY9)foxsRXfubZj_ypAWgLp?XN0v2G4
zAZ|gwHgiO=YK3g#Dc0zLMAkSuH12`uQ_^Ieb(QwVEHV5hb<4Wjw2I3X(PX+Zt}#IB
zK@L~nq15b$z&A&!&%GvDu*#v46A;#lyg;96^nDZH+Wmg3|DTs1A%GYmWw!7C3KYMi
z#fFU6%ZH|s)2`oE$IB$I@t(G{)g$eT>2^$y4nH$#^Ydh<T^Amydj9NYgL`j4ACZ&c
zXHulR?+EdkC~w=*Ed})1DgWH=-?sZd|LN7cBVK)?QL9Zk$Exv-TES(8hU>N1giv2i
zV=L8^N15O)#T*B9lti#<FhmT}l8pK5#sBr1f9?;*OPCWYI+dF#-pRaGbEjxPLNI!>
zS@eZj`h*`uC5*o}eH&>_j!Kz^19SH)noRG1mCj#Y=YLpvGIS__gih7!P^y%w$GNoC
z@LN?sJYvo`PI;2ML<x*x_GXAN5l)kO40|spRT)QqA{6v?_?MV}%ldzO2~o_XA&S<S
zZIWKJzJJZY8vgNxvvz@V^binngbLtK=soFA*=;QtJt>^{r)h#aXV`vSM=T!E?*6Yu
zLxF)cU1sQgH_4o8s3a<5VpX=|t{KR17od5cHG&35SN<ha_<=_M8oi3~PIHq_suRhr
zEaHz`|9>R|EJ3(N*g?GDu0Nc3t=j=yfj%SeZ<Ua;Lua^44j}}j6N}kfDh3gwqQ=}M
z5zv>}(6VFs+pzzySB^$<PN%EYZqd|sI5!R6a@|<dq64k-t$&NO9GD-PG=w=}#2f(c
zp$N@)l?VpYVJ&MxsQ-sY_<zc(jR0Du#3ZWLe1T#;cVv$vLAvS;leF*%cLshsJxSOD
zq%ZY2w%kJ$L6=kADAW}Czki?@1QNR9?%_=abL$mlh5WY=qJ?Ak`t1^(e!;ejTv%Yy
zK=-CbQY0dPeD|}lm2>R>!=>x|+Ms3HT^nf)icQPri-y-+Ca{7(t5~+|PGmJhWQ8eO
zvC8+nn>tI5?9vV?Fd6s0zy4oJ`x!JgX4x|0Qk9XfxoQQ)sl8kwC*kf~#r|sP0Ds%0
zGxT+05botmtn!}@7vYzmNkspood2U@|9Qik9p)>hoVL@xdcFB4<(CPP{*r5{wqpxc
zB&*qbKe2jS#h6&jIqp!H7u;Xsg!(&`|F3lqSTjzL$;(NzQZ+{6M3x_Sew*>&&f5m_
z*4yf2_-P^;ibt$+ebPoyGyxJBZ8Qe&+|MIFZ+P(k+BRt!b^BCH>m9>2%bEBH!To3I
zI`OH8EqWDGOf{#cte9q(o1DA-bEF>c2Q37aWq>^Pe=8N;7--C)SQVYhx7^I7LpM1p
zjF{IY^LOPFYVgx2h-*4j360mCa-u^NgZm5rZx=>_PNy|!-r1S3b#WY0T`9(3y%CtX
z@rG5XGk^a%hvMl0o=G#2v4-Gxi~c84{h#*nU+teQ75dG~$&j0!AEn1lW;6}I%u>RX
zQe3>4vFZE30jirrpawRUbVt{33QXx3;BNKzI<bk79WqbmXvg|%TjiVat%TxT>xbA|
zU%t_MM@c$XRVmAQ@ovGn*dwRL$J^at-HbUBmwCZh44H2-)8$7b4LC*rUQ|>d^mbB*
zI1bAJ!XYwQa2<7&Zty=#6h1)m8#qxnh<e{r+gP*8ojY)u%!T~@c#Zc!^LDA%^|@!{
zgOCHgDk5vOC1tj@w=Ca>9LSUZ;h@I|7h4OTDouQxb&#BOg&S45XyOB@U&=MC3T&rA
zl7&5J_4gk%1I-(6dGC8}1AcLF*PcfO;pzfKlQ%z3*)y6#Z?NK{X{bq(K6s&KjlOoD
zm09hDU4}bL^HA~b^$jJ@?dHvHfji5q(GFfgBRF|HYqj<SST*h*hcTZQ;9sNXYl5B&
zOPfEXXq~TvwH-a)3E_i1w5J^A1XoM4AB{!+(WuNa*dV@&rNjA7QoQUd8_A2y%J6?=
z&~^qBbB?4e_iG2=$JKvrbO)&$VsI2`G|7H-j+iW^>}WBUaXS`t(mX-t7hA3A?xRB&
zRbo&^6ksUu#+qNv>emig6%%=h%F!<2-e<;Dj;FBRMJcaM6#tY`=`6TN-oOQpq3?@(
zXw)pZt2)kKZUO>YH>OHx<{7#zco0epnpo_Zd#WWj-nT(x-ZM^s<l<?blX-4``dLK&
z43zjrcnzzR=~F*+?j3^u2G%RmEl}%(e!E%&ln_Sc8Vm9lru-9MK!84wWy8?~7Ks_!
zUn#lx9Y+6HRRv6UB%db#SDWCaGHNwU(fMejr26Dtn?Ul6D;oqGiH$}B<UgryuP4-P
zZY}7Y(IjP9P1=ap99MUZD{PUDE)sGW{nGCD8Hh(81YGuZb@FOXZeCilf<#C<O@vBM
z3PqV5^Xv%M1L?_}z2|ZAi<n}07Rt0+9?mccBQ&&3ZKa((X?d2;k!Q~P0)4f*T7E2v
zL7ew&g2g<AoV|^?Fd0h-2cu{1rZ}%&CLmDA!$9M8#_gCxMGZbQ<Xph^RBgV%rx{cZ
zk;jzZY@@#Up4@EbmJyqAC&q$Y!c=x*EQJD^^3C19oDzS|2BiA`@hNw23AddM4CgUP
zs1NA<G7@IO`9_c7Y$Pb}s*X_pHkPOiXl~6VRR_erie^;hxI!n2=odmub~h#WhOf+E
z6jBy>gSlFlYe822{iiJ6jQJ`A{jc7xOww5M;zGfE6xZ$ZdEv6)V7BJw7MZ6YWf4R>
zbo<r3-Z*rxzSc##<<$^NN^7uchp$j<ML*7^JQE8(-)*NhKQ<6#*lL8MbaTJU=P(iC
zTn_}PB%pXP$y1g0$AtRKAYFcMs6INvj<mNj5it3r5B979NM;hqZ%1#DhbBE`k#p!S
zh6)c8Q6MXL@-zJTh+PjamoHFvBFn3T^!~AcULh#PN7_}?l?WRho!38)0x9LJu$>G$
zWCRX|r>O-c=c7^kx&OpFHa%~O@BKSyZ&^2QQ5*6mhn?DMqv`12&f(t72v&N0-yyow
zR@|%8=|<hb83h+ZY<fn|k^GaZK8APP!>y<bae4R2%_HsL*b~0kgg-~AF??FbM+IH2
zRp|Qjll7BOQDYIERp#gq*K*NL^9(2QBP!OiknUHVi5x|4WK9%vhrF4WmArL%-zF`A
z+#Cg%;$GmjG@HYpY^YSyyf))X|0+d4Qo^o}Ftp3iBwq&({@%sJL^vQY(4H)AnKI4S
zK?`lBWw^#u^Rg>|hKx8tmH!(!&4F;t!ZW#f|FG78yK#ARjQ2++a2A@dIMv8FN%*X5
zu%jbEd_MDeQtMDc@*D_c^x?yY!b)b}^EJm$W&5n)b7#dNW@hHZii(hN^QkYTedsLv
zn;$g#!mx#Ipv+$Kg0ZWa@<Zt0V!p?-IFLU**1r;}ws~X#b5UwjZPK#|ENS#BGR%EP
z)=8>-acK|%rFHQM1uKM)soT0-0>cWXJg}8??3H0}L}Q((L3mv^&YO8Xn=X(+Bt@U;
zMc{Ih?ELadP*@T*$0WT?xkTAeq=YTcfh5nz9}n2EgifkPKcCr1aAVE={nhfnpl74n
z<9Dk+ANF57jIwTO$Vp5h@YE6$Xncr`-&QzBQg4ka5t5u_4O7qfMP6xVKm@NUAR=EH
z#j=@qdF_Cb?11XA-~&<_l(}9c@(A2ThiFsggL@%5y%3eM*H9`MY|^AY6Fg$E4yej`
zQH4&!b{*$PHJ*Z=c%#7@xCRf&RT;3mdW@D1NF~Qk4YHIaM((ZJl$<%!Nh&K(-j}VW
zEx`etqb5<z=aI$X9z$0<Fu40D;@C%?>x8#Cdp996<mbeHoc~b65g+96HCMq>v(=Ec
z<OdgqFoiKJ1Xs)-ui_pF9XaIAu*lGhbI9PUMjJcZFx~yV!0XF~^)_MKg1H(&T`2jN
zeWt@$C2;nWMrA|LY5GY_1lDgB_ytN~O_!e)j>l9<`-(AxXA9#hPNWO+^Akc&Ueq#`
zO0q0C#)C0Z2c6b0X_QNJ^iF&GP?$}m>(-cxn92={Ge>iDgoN3+K7<SW=UI!vFdYoT
z6iNDPsK+P?c9K5td)2uTkqO<+tZ*EVVQ+LB#7BE#$98YmZX;0;$`ex_U`F$S1urm;
zZWT3@@1+4+xHu<V^8Q<z*ib&7Zc1hE>~e`Obp|&=AWf*hz4L}h+hJdS|CMqgMxl=N
z+^LS1={b^zmd_+*oo(|ZyQ;fLMLMNYiyZd~+77nQeS)77O6((_P3!yXqb9{%XLYB{
z^(#d!5&1m%EF(AO-Q5S<Vikg7O&#rn#KU53eQvr$`fuTF*|S`Os<9xGE-fqdgq-*i
z4N01t>MwGU>IU`Y<WMj#VV??%>wX1RDHYGHLsZt|K-;k%Pg=R9$NL|Zp=M?eV7##t
z**p2hZ+D(P;4c$ljo+7(;^K$Tjdk0xyzg+!7NcJ*?0s675Q{B^h=-6f4QdTwBLkbn
z_;O2Y!LGOVlexv0G?(Y+PISIhLVf){WZ&*E%5r#x^h%8TdCZG-Ao`s#)sT~%ii)={
zicE70KWy&2uC<?2YACtg|B`IZY%o=!LsTbL{QhAZ8JeMpL~4s9^70dgI0e@_{!ajb
z`kfnOK7;kC>sUbz7t-_(1L+J}Fm9HwpoNMvp>6M0)=@7E`_@r=df*rXPV!auOF}C}
zb&{`hco{#8=JiC2dYFG&v%}j+Jlxsa=KZAsIA4W_qvnY0R7?qlX7cBD@HfgZYs2+N
z5+QO3J2<YlRpuEGoic+rqLv!!(8_F@I+QK(?XKU%3P-?0I7N7n@_;1*YOPw`rzhl-
zuzT;&`q^szF4^*nUNgT$c0#_Az{+{uGP;&+Lj1n3ZOa6+YQ@str7QPJz_d32Q8UWF
zSEnj%wk-baKBafxEPTSfkB=3-)!H{mK1bCk=<veW$|J#wsTI2%ZtZ<R)EiRTY1A)f
ztd~`2a&;bkK58FVPXME|gC-)V*Uf*C>}&)^4(a|mo)LUl6B1TZ!o9t1nRsx(y*+9a
z$<o-!cNc<IbTpjV>+$KQUz;irJPn;{2loxqV#=3%?iIf#z$s5mAm@Dhm^D5=36`m5
ziQUDsAM9j>qnfqz-4co(F|p`&r-5j!P_Q#D?qXFjNrjSCy-b?^J7|0RVD(1u#e@rP
zP#lywXEzQ+@<HZJ?BwJcLwPjC!<5@`z=w*k=hR$*=p4CqqQt?9AnYngw4_CNHwlrI
z;%>#{3YwO(($Ks4W$~EeeTh!eNrg8Vso0&Qc30RPDt|#Q@+8ofRVaz(xZ}(wEAd>A
zq%KMr3ujA}7N>RBB00%~!{RV<&aFvTSmK*hMDKDK$YNj2v3dHIVY7LC0RH4N&4KF@
z7D}~}%c=X57S!@r3w@}b1QWo~>G3uUtvoMVm;H5qPQi#wUGa@$%XZTN_vWpSp<0uv
zZrS+R|L!h#<80NnLb55wbCk4H=8&nR`cAgf^&nQDV*en+tW?zru5{lJj32BD1qX()
zm2Xo|mY|+UF*o`iT{BuO{3+l$^)1LjLL$`OQ8O;$XJ~_YA3}ty>+Afj-tQUV`gI_)
ziSZ&KPwq$_HLL{CrwLOZ<!a<_c+y(?R0SGks(3V;+x9wpE})bzN~;^c1V6k{{DD>J
zYF}eiN{04f+LuG^KSfSG>o3>ZQD^Gc_%?x|yi6CvfWY1C&0^xgHKY9mSP<Js<6Mlx
z;V#k=oA;Y_k@%gY1=1wpLZ)WKoEs+NYO9eAU6!ixHmomyzA0)W6gViOMCIB*=mO&4
zs<17>-=3`sEo*#&uFlmzU#C^Kb@fYMU%$L^#NjZIdMcDP_#c!^DptgUbk*c)-XZ)5
z^b)c+%BZT%Aivx#cA8fNB9ws%;nD<y$;{#oK4ej^(82bCcj%Ou%ipRU)o!aFID|>$
z-N4P)@bAeO!kNx6B|3BTd2<cx)Ba&gqD^mWmhKxXR$EwcBE@c`jBDazS`J7`T!e;M
z2P8XFI#@T0FobnAy@M|J^ZUr6iE8bGRXB$4OF?0(!()pcl!Q32h$;=^6nz1Qx*`-A
zuy>hD>WbCj*TC6IYR}eVDmjCYCh<*kr7RYx?z_Yce+)%9Qg8&RugR9*9${BNVsbPX
zu^JtOpvFx+_Wp(kysvQ(dPtQS3_2>pUs|5hSdB#T%`UJu@Ks~cPE2Quu42eEG$`8M
z)3ip6VJ6vm2X~Xsu=hZR3gK~^ew|cYMI)xl7s;Us;=}5z%TBE``00uC1R6hCm#spZ
z)iCKe<JRc;ozT5owILqZ@Hn>k&edPHSz+KREQ;OTpoFaz`YDd?8AWO~IlGP%ms6q@
ze-|G<qN1PDFbKQ30ew(c7u?zGp4$%KWm2PfFBPeZTbqTtx_#m<68I7*zP#J<oF^vC
z*1&S4aR(3btS*T4IyLjB&u8qc@*5%TjtJ>2kJ#n<qC!zIqi(+NJA1@&7wJ%Hssh)Z
z^gd=!MPdQ680Yp2qT;d6qFF=OAfENmnO8d&7MnTM=V4V<?HbFKe`W!E89A>UEtvz}
z>vC<@2WFAN`grZk*JD!?FeRNl&&ws^XO0gDSg$Y{vHdjc^3pr5I!dlumsP9Kpp8yb
zrK7wKHDjzGo@UbFrNGB<XQ;hDK1dBesjsfXwYZ`#J2zKNU29&Cy+>^&Ld`Su^BX|~
z7@MB!_bU;SG%t|3D2rM=l9|S(Q^ipkHGhl@m%XDM^DX5<3N{_W;|60m(cExul+|T3
z5;}FBdWX9G-FEb5K$?#7dDASSxQq8~ZcfSAxM-4*^Y$F6Sh=S5<pVE~jok75QF%M&
z(W=fZhmGTSU}1?i{W)r%D=hOStNL2vadBdC-@9nZ`bkVvE%(CXF8Tb=OIZ%6Sz_UR
znn`v*r^OhyADn#xPF3l1x*!2BWp6UajdmJ4^k|Ing&HsePry;AOs<i04COV@q3f5e
zu{WhsHYn@E0y1``HY_eY>G6sME-14?sF>>4_0CyRESl!F;DO1*;e?HZtM3379E)A1
z+mA&6oZSJLXn>UqC03DIT~V_9#H_`%z4IY<musLqV5)vxDas^LEhP#!)WO8ou+iho
zVg-v)ug%{zT2i4`7b%floXH-0cwL8jz0Po5M;95sZ2cOe8K&Gk`^07YW{6swYnaJI
zh)ilF9r23w$Vxns9pua)vU?(>s#=WEfR@0?naF8t`0I9EM@+?RFkeO1%-i2#o+1(!
zLZ{Jcsh9Q8SlVnPt5-o*;^PX-xLIq`?88+?Ktz<(K5>Nrjc|5W6*?%BhxSo7E>Wcc
zZfV)oze{~G!{j;2E>}@b&i6q_J>qZkJGhWAt87~~N-tqO1c;U<U24MAz;});Oi%tp
zX4}(+R?5bMTU$N;_0DuEK)&;Ku0rEohcJ<!D{{dl8lqInzrJI6C*zk*7AAaFI(#8Y
z8`Fl_0$+3oOzo-r!sn#<GlP#|b0|aC{G1JA7vaZOulwuD>*;d$0xJdvhS+XUk<s>O
zb)QSxuG9clX?Ln-q?$5eq1~q$BGjaYD*YTK{SM`}uU$9Jj(?Cw?_dPgdA&XrRE01;
z_4WA~10ts{QFcUjs(b8gZLH38R71Q7?^H62ij>R+(@C97e4}!~Q++YHW`;8r=dnS2
zdxt)-S#{Yms}ai0GAj|=EsTPZztNL6O+bBpL9?Q=oa&{0Dn_w4JKw*1v;tX<N*QoY
z$i_#&3(Vk`<@9hEM>O!>S#VSJ#K<?de_-C!aPP>aHQU=K`aJNIe_9*eE-&L*(1>HL
z=kC3V5H3M(`aFij>rxKB2@px+abEPTIA4wIJ-B7vxVax1zsG$`rOf~EoVh#~t6a9$
zalo311vCP#tw?2%Eb$d)M{w3o#>*sf;2aj8b(7upBjY8D9PmG-%iaF}D7)&YsM>Y^
ziJ$@k0s;aOlF|awDWEi{NOyO~&<IF(g9u2Az|h^@A?c9PF~CqW#1MC5eCOP=&RX|=
zf3Ozp(LH-V@B8%c`Mt+a_{KdYK3096njL4)9C5%yxi=W`9t&>nBW#VGcX-IC-t6hm
ztZNUngX_L2$HvEpUv4Z=DC8*kguJB>DW7DuBOxi****7@E&m%iKu7Z|p_V!(*z$Ii
zl0*GgboXNwFyFSufx;#xA39Ldk!bBAQ%~UWo+}e325AZR)fy&PqH;VhYMSW^5m;ZP
zJ*52=J<3UolB(6F+mXOQLHrL7Q1gM1i)FEeW(eUS%d#^2l;qe*;Dw-qxLzcxpS}oA
zbM3fSHkPhUlS#3fcS;f9A(d67oSo-uK`Vjm%$nc`)<jDj^_lOQPy&Op*S7pC-XHz%
zQAS&$5aiN2AlDNPJ2n(@Y=`h!P$h)31r`z()W2H>!~{<+9vK#V4cXfN@Ww;C<KTl@
zi5h7l^V6N0p7AHoBvH79J<PWph?up%20d=bO-$r;SU&aUbK8DtK84C`S#Z-jJEPTW
zdihx7sxftUIQtu({9wJDN=e<@sp1BWL}vAD^pxzA<h3o49@^Z*O2`)i>fITFQ+4af
zu{hno=2(8`&4YFCDL~BQwH+kh;X1?j7UQvk)|VsW?yeqhb&!CfgK-i1WWJsc_E#b=
zNkBWG8fXt0sS$je$+)<iY%0sUNT>F)*08LbER1V!bF_BlzP+SyqthPlO{DQT7*){v
zdy~X<arIIN+q}4fk5AMm!LzJSya#@ygb@qi&`rqzNtQ>qNSiMj5h|uf3r$h=8y042
zbcHI`u~n8O4sgsBEYn93Qx@71#ZX#HH7EhlZjX^@JKd+e_b{xrI~Q{;x0{>KC6n{A
zH~mC`ENkD9Ut(!xD=nZw<xz+l@(L_pJ%6cmu$s_T$nOA7lPLPjpB6=lFu4A{6J}y}
z;k`0H<?(`~)%_(Qn_5m%@Atqi!jPpTBu&iA^SALnBwCE`?<bM(t$)QjTl+FeH3BkU
zilu2*fhH&JKV@P4rBu(A<d0#!<r{2y`sQu@ajbn1+|{{vIWl{sPJhJY$3Pt_%DvTS
zK+KIf_C2zPt8t65p%`HT;Hlb`J48P5iIF-XmK}sMR^quhSlqav)lq>pm7n25s8VYn
zIWvo<a~~=*R2~>AZ*o}e)!{4b2pwNhw!doJp9o;li}+&Yy;s)*hkf`0Wq_6s*w`6g
z)Yrev7H)*cDyuZB;PWL}00*JqMFqt2y}CpN;3bsPsC(ZVWfW?fp89tj92dV_RjRj-
z8%E2}R|kZK*cLovyYykig`RdPgqV-0ee2ED{5I1A1ap*1lz0VGV#Dq%4--turEJti
zCyI)PaUQ$MV3WDODk5M4iZKtPM0Is*kVm#YcfTjYNVx%{T~gmwWl^Tb=)w3coh9oV
z8V9ePSObC0i16T_LfFFsQJS~8_C0~@E7*qU%aKVsGxBq9azy9_T@EmgPe21<Y<qT&
z&ovlHS;uP)k62jwERSomU#vv(FGnt4#w_*yOf%QDDVOOL0gfp{`T2S4!)4#J^M)=m
z{`&5%G6h2s;L$$6hkk!Ss;$-$)<ba}ig@3k0-iX$%#-JlR-WvAa-TW|!}^nb9m3n=
z1*z7jw=sSr^G{oAhN%e(MV;LW=IZV11g{KE7u{j6Ac%vL-eKgmVrIib1uB*6eV&}g
z)wa)PMaENUHoLK0VUkz5+M8?%8{&HPDBm{4REaq>*wk*{_Bw38((SDnxssTf9Z@_f
zJQW0<3Yah3|J-;yHf{q3>rhVXATjC?^#ZTLFZbMN-|E<>RO^|K*)NO`w8kCX`(6Kd
zMs`bNPfcXI)R4QejshgeYHe+rf5hbp0CF%SfbAPA{xRCTLU~MW&OWV+j0=+^{TUhP
z(^Rd0iwK9^@4Qb>1x+R=>kz}*=nda?4d7iy_PpdG$>;NXr1KsTgrwbjn9|Be);_wP
zad})={zh`K_9{@dzdwOg@@ae`cYTZIopT&$+4tZTAcg}f(6ttmR1na1Rwd$oj_qjJ
zMXuFlt9Uum5p8}zc8SJ72-#{*mcGy6<zI8h_MrC+`&YS9?lrKZ$hgo47{y#*S7kf%
zN5R!%u+$%uyZ{^|R2~?|5>I#E7AUuz###Mnslz&Jd$xwlqTXMrc?bYV3~W444DgrT
zeis>9QK@1+zFCRP%)I4ha?)`)$cZzKBoG1m^Uv}`ZEf>+z8`42oo`X}PpY;Ic9Bgz
zr4dX>D4yV7&?f`$8@TfP=~e^CiiKopHA!c+1Nw}MYAs$L2bJcO8!W{YrkbMq3qu$I
z6L)`c&1GnjP7}jQTh=#{=~0i**SX=BRzS0P4?{vw(Wb#5z|(Z3Y*gNziB<ztvv;bS
znTA%Q!3!vuh2Yu8D-od3wj-8*5sRI{tx+P3c0%VyiE1LzT92i}vph1m)ZwxEP4ZgF
zovY0cFiH=SgGHHvqZ5ZKGBI@#hc$ih>Fc-MJ^lStQa(kp_~myv5fwmT;^+40qI~8)
zXMfyVao9_J{X|IUzM<BA5i~(+6wW7l_C1axLVJPoExX3H38a;1UZ*GTbBzm~&78sn
z#ENZAm&5Ar{B{gR_u>=5kG|onsH&z4Uaa^KK+(f~KFJqR$0Pl-k`iwjZXNIJ#%*O-
zY=8g93CZkl8Vn5D{lTORxGE2Ny?m?q{pPm=N%$sb$m$`zLgj1eKJh{)+(9mc6Baq2
z)9Hk*LevThZ0*#BD^GH&)n5Q?3~0>kRCo*nyjw(yp5o0%yDjwSOyU7p!0Uf`56?SE
zrgQMV_Q*(b6-+-*-cU!|37p_&`mGYL1yPJYKEe%&Hx=Ahni0FwTs&u%RwHHvR-{z|
zt%#?o$LG-aYyor)Y>?yEw1l8|e2`px%+asbMRM$WxQnJnHS<b^=?Hle+Z9qb`a?oy
zJ0J|XS3mYMP3IP=i;Gh_B4&e0(^c71WbFZjz+gq|0C(}IaDrGIz4F_{(}B@+KTQ?@
z6{3yvc#_V>qr-OV3%247ibDyX*W0sYXYTB>z$;ntrXuph*Z(f4&vE36rZPzRw+jK7
zQF)yYU-DG4lLIf+>V$?(HpAk95agd9*mwKmW&%a2a6u6bNaWU2eUfm`hqqAQeQs#b
zCUv`}CIo_x4U{koM&qOYz`=Z}UZ1#PiY9JH(<Lhc6`%!{Btey}TGX+@@1&Y#x9~{O
zuk|s;eH>1s?~fghl<z%k1nki3HW6x^;NKf5j_489Ua}xb2B6^VXs6oU$<H7E%GdN1
zP>U2;30F?uJNgYJ-E@z{#V3>r+bq{{!$kFv#sfLeNn{ic1r=pvu4-RX2p#939R|mA
z`UGU;nCeM=<mgVlPhm`U3$+{nd#!z#mgCSsk3fLo%}akkohoXQvH9+>@nLw4=J!iK
zW%b1(1;;_b4cWEiAM;=S<*SaX)^sidsfTk_I9RiW{(fM5{9uW!!$6*9MX1UE9pcvT
zO*^Ff!Be)9*y)y~mMHu9c|b&pD9UTO<;L2E>n!w*pkDbCtNuClN16di!Bs0)L^MxE
z0(D2)IIVwnwDs^%O1y_`2hvL1lj0K-6_=Gh-F(?83L-3Nch*OJ;e2XwT(>#C9l(+O
z+KAzdb{mBY41^x>3CfY~pVDq#$`yqWWHpPp;|87e&X8F=_{<yl^PjgqMlVvYQ1^zW
zWkl1;P7QwJIphL*ab_q?syeJN&uNN*a$_jQ?l)I*)KHZl^^*~ARq$lq9MWW6du2U%
zA%k&{DY1Obh*u}#TAjTiVDyx596X%W#tQWFo}v2!($Z#a*tr8am;f1FU(r`;E-guW
zepJF0{mhFdSa%Uhx>h~AKm~`(hQ+<l|CPV}<tvS@X4?pOZ8k;qxr2+55COW}p1ykz
zOWwoRy=Dg%7_qPhLWz9oC4Z%RchLx0G?rq^5HO#&E_<h7CztBgAKDJGKcinbd|)+E
zbCD*Md;XJUP4^`ri03ycvcv9nS2^<g*>QrPThiQq%r%3Dh?ig!=k+uOCoa>{Wsqx#
z$4kK^H?D_a1K*C)%FW%pu3FgB|MGRi`vL}!r<W}-%vQI&NS{aIyXi2!IzO-9*s?j*
z0Pu#&x1d6{N9&q%&py2Su)3|e-26+sd$oPPe$}Wu8eWXuon3f3B8*H96L9xva5xF9
z;{=Qg(Jj(#v!nH05>TTI@Iu0DC#^}pD{`&5Xo751(^^Lyb=zMxSAVo=gKd^}Acjd-
zl%{~K|At<q;T)jl)4^oC(oNcVwWoJej(J$?EuSsuv7B|kXQl0SqLlg;#dh~K+0N4s
z#`-|3z8+R&)v_UZ?zixuF^4Es696+kQ=@u@<@@oYyBlO+F%Pn7o0u(`5qJA;dhAM1
zI$-a(BMJ`zR9vs^Ek$Oj8P7?Vx{JeN{+!n@y+yD=zf#1%P>xt%Yge?w?J6!4dHTu>
zk*lqkigmR1J&i3SHh}a9N|&U$EnkAW$kx{G8}kFq0c^jP5!mG1;iX&)m1pe%N*c|J
zPuR%k7@CC0;%YJS0jHOVJ~74Jn=sSber5AnAC%dooqpH%8ye$)%<8ss*eWEBsGYu1
z6@0x3L^e2|uwjE6@OHV*avr?#CG_l=cT_4$mNm!6IMU89&4pXo_Q(Kiuj^6(eHTg&
zQ^_3nvImg4Ty||l*pNTkj5GWg?|iyX&S$@jModET$X-|gNFz#7cVK_XHrLAq-73qJ
zEuL;X$cv-LuGKBKYTBw=N$Y0+V<yCWiEwtJC8(CX&$iuk0^cX_S$$_u)t<|gR+q$v
zP1YK=+{Z?kei{I*`or}1mkI`x+w$da46%toX0hw8;{|bS{Se2Vwe?h8kp=U=b9(iM
zr7_RbJr8FcX02PO2nZ&rn+wY9tDY~EY3SG^OZrpRv%xw`y)mY_+0@x$E}a`UErNh2
zqobu-1BmGcUZ1UU=M~|1QFNA97pA&#(@j^PZlS1~3{e+FbBepaS&4`i+=Am22LOX!
z_RZH{#ay_@mcgp+@XJ_rE&`d&cP5%KmAE?Yj#T$WKoi4@+i-!M@SqfB7+>VN-i7EQ
zSxxrX844ceCAU&zdN-g}!$%k<4fyD!Xy?NmI-O4<Ta3znjzEoB^a|toW;8{is_xbm
zt6G&s9AMJ45A}-*56Bd~rr~<_@W~qOLr;Z2MY(1C&8^+|pYfmSN~ETZS6q><&+eCd
ztb3!csHR?bx_4XH2vgBV!id5IhVen+7TpS{hi_Un+BN6ORDAB1X~dOUogT@`Zw#kJ
zlL<64Nmk)ad-L3svVPjiBYM3E=5!AP{b4NjOV@Gv62QW@7*3EMTW^*TF!9u%Ap{nl
z?Cx%?)dKB-GSJbMIQU8Tg%H|eH~@;Fef{Q5c0@f}5|Ag3aa?h|Rh_o$lRY^(=}k8!
zk1<Vm`|f-tN;O5>$9v1S5wCPOj=RJv`cj@{3#s4=OCl9M6fuV7&yEWmfr<e^M_$Xe
zFxMfO&Mg**8q@uU0Ps8^Gj4KtYYM028maCzskv79tLizse62F`LZDWW{vJ2t)jXTb
zZc;9ltz+BUqpglHr*qor`n6BhauHpD^hfYdVSq+b>b2Yh{;NhJ+ahJ5(`i(~3{qKH
zdH2I!C*!Lq^7)NeUd1$bd$EkAKdw%+)gZvud*wQ=yIa|zgD^q>T<bR2X*(?&nW$J4
zG@N8Ur{83l24s#-<FaF(>%pG{Jj7NapS%XLx*jyGxlEsRmc7#C4o0)DU*B3Y_B0_~
z1@}li1q%t9=&RZjZ{oL~b!pjFJO=Npqmn+bwn(&PNrN`H2|-Y<*S5@V>#)>L>(GJ4
z-SU<c)Ke7$iu+{2{{@aASsCsVuYbQMe&sKeI$FIBER8eouFwH3Sald-@u;^Fher!J
zG*VMzxVPC$B;j&Iq-|5c@JShkFA8occDxSneAe|kJw<OEBLkaTiH%qN1M)IJ?iV#j
zCG}FY233gTffNL}db6F8>X(3h4!1j~CYr78HRs==u3nP+Tnv<N$?V>e)y&e=w`fF(
zuhP(MS<>K{y;P4<=e`3Zx{f-UMH+>ZQ&XJBAGv1PqM+1v=)P!}BsT>-1MOS04k@fX
zGPRGPZ;4o+*CpC;7Zt$2^!(X}H@N@)hay+sTKZQ++<Lnnr#{~+)%_7k1Oj}xnWDyY
zEu?vTIWmk8Waf}WYkX!e$!Xv7PUl|63%xsNZ|x-+5o$ap?Q3ef9tX?jM4+8TTYJeD
z&*RCUZy>)+v*?R^_wOI~kADm|J|fx0HLXDCn2Td;5_=c*#a1OTYp<9<&PhNTrlw(P
z+4fAcn)80}&;h$OL-cYA-#T0%d~xtmNMeOU2@=_K*|@miapw-QGlHIGQH^##q<67k
z`#Hh`eSke_L2*tnF1Ozj<8$JEI89GQF+qPGKK#O6WkFa^pWa}%5w-#JyQt4+X9oOu
zj11*tg9*$^CG;#%fXozZsSnlp&N0i@a`8&OvR*;Of~S3o!>h5+eXtxAC)MBF%<T0J
zQGv=Eg9O&<g)xVZ;Go--iT4ISzo%7Y8GCYvhzFe5-NocwC*zT(#*+A)57JjpT%+sx
zSm^xI9hnBMg2NpnwzjihK@t!OB%}EIlYj(IYEvyO2rcHyl)263%EUaNm9++qeUS~Q
zjzEFrWaKe9Vg);l@1izaTH`sQ^fVCI!6quL%h;qdjrL_-q=i~@Wopw*j9=+4UlIbi
z4Cpt&?L~Ky&B&zx+3SZ&t?p%&d?YOP;<2{1JMJ|_MMZV1w<jlorye5g1G4`H$Kr6k
z4q~1A39w?DHoWR&paYeMCODm)#x&dDj#jKY>Tu=SG#3H7D>P3A2F-RzBI;Z4t>Uo&
z;L}rKUrQC1e!0%WRgAhbuxcMzQTP*#Bp@x=IK?6TqNzCt=||+esugss!%hRloxh?p
zEMG8Kh38d8#JHA<O2LYNF0JL1RU%hmNjw@RDZSI$*civIx@A*p2gT-|&Gd&NlM~q~
z!d<Syrrl4K+jFvt0{V1QxQ~=SXJu(@LzA`}<(Nbh`?3NFz*L>y>g+nUc-cD4mE$Nh
zq&EAjeYYJhPLIZBX9@WG8Gi?<l+OfE2uXJ!N5QGZYmHSox`p;V+gz%lSo$0>eR$%D
zESj+O{WF#3vf2)VNEPjB^Fe)1A<w`BHAy`uU#GdUcO)c<4apsW<S8z5nfBKON_W@d
zyUBVYVH+oZWgk@#{WLSajRe76fonIlHNxWFigVv8jc(myV^5|E-LFdlLbaEX<JXrP
zZ-Gd(m>~?v*;^D|#MNkORC$&}NY2g-%S!g3J%Lbnbz-1oW2nXEOzv`-HHmroPcoev
zU)<5o*ttit#P*1s+@T{}W4_&<Wl=NAMeZir4m~F^{{ntM3Ss4PTL^Ljihd8Jz+fjF
zpBEM~S6X34;KHa{lin7)dS#oL(&wtMWTY6SEm~36d1jJJ1BATYeL$niJ&yEMXCPjg
zZodNEtxk=mS*u%WuH}1y#Ri=k4Ngv4@d{}I{LWLxAXU<~caOs0D1`fS890{q29DYe
z=HgyzuZ;+(IN2c?h3o4b{1h?c@@(IrlX9OOfK>LUb4^Zs-*r0(M`*>QAv#PzMLQ;3
zfV*BIy04RLk_)qQoy(HPbS}wDu|efKDgYdG)EYg_ep&PaBY~G#%j#i~DF2>R*JEcA
zf3vl4Wlx2ilhBY+pw#oq5IaoZqt@Ju5><TrmB+un3PYT7De!Tn{@o0qj=~D*c(tge
ze-s+Q%058isOZGV!lHN*NqYWTkbD~G6V=xTyle8CWZASr60bk|&}H!g^ShlN*s3I=
zx>)$h(+$nDW-#~#^nhyI+Z%c0ly~-}P?NV9j;S(LgDQ6e1Ekda@o_S2HJ>eA0ftyr
zH9`id_C?-J9TPaREgtpg#DiRm76P%a?74+Ey{iy1Rb#aqE=!XIIRsYjnFoprpZ$*j
z`gyBGg8%``A%IOoLj*Y6fmTD_rJQhokL3Jpr_Zkd07eiAqP4v<RSlyvt7^EMid_h#
z(HEnfMk`vAcIF^1%X81Pd_#^Zk?5+d*<dEd(m{9h$;)fr=F1B}ALi;-91uJ98tIC6
zqJgg6&pbv?2UTm%{s#l!=L&hCdB94{x#^J7MFx*+<_Qx>1nl$r4i3^@vZ0&oW3q9C
z*i6-7_cC?_PtgsWv-;6&9pjJX$ZfQ}k>IY4Dvbk!1a{2lkgqnrA{S9<oN-D()tdrj
z)~H|B1F7iQ^tGY$tt0%Uhi<HTEiEFM9Yix$akK&7ADG!}9^`uSExP{*m!L~xHrUX#
ztv7^!u{4g4L;#1}G|*0-&a%xS*F2E(4EQK#l&_VQ3!O3HZ!O`NGy3f)q*I&|(G87r
zaBU95D7>()oR>jpLWKY(%;v?w2@xAN6pqh{AkzX+02r!z<A?5Uhoi*Ap<Qt}TQ6TS
zihL%$rq0N4H}Q#!t-vd5AqdICE33a7xOy6(04X(kF}%Re6Daxw18`&(`<07BZAZ$=
zlXa99Wq002MDXVwFDsY7uGpg=gWK6f?2q{s=oOt#&X7)<0k2<jY=$PCL}#UrCf!|+
z4Uk`tGkAGvSK3ivMR|=Amg+uME3_xNUk7kPofR+8($*Unw+Jb*3`jOCNl@*@60m8R
z;ia+x2QntAg!KLGvsW8{f_e^<&5m2qP8Bb)tr~4)7X|l+qvPesJJT9!M#r^=dY{=6
z;wR?;WY-saDIR;t=Ii9Oi%ZQCJMXzS^pkzH)XK!!2a=<k9amO^Q>#5>EF_kn#*)Pi
zqrwP1o|_*U3|M*5PQU!QL;mtbd05I3fMsZMBz#uj(Qa1xj*v}f3Fr#jynqrAvgj0K
zqrQ_@Z+-RXi<-(VUh}JlVEFn9iH_Pzn9;nLJ7jO006<)I1->#8)8j_%?`PDu(p1)_
zpK=w@%J>oWEPKt91*yn2oYpI(DYpDlzFsEbpvrS`#yxNWOy}3b2Pnr^QFZBe%*0T)
zT{#9WT0B@%F~un+<gzYvqFGRrAyT4<>;#r*eIl6KA-9OvnBkSr3V3$_0j@`m#{3Mu
z#->a&L?R2U99m^zu2wl0@j`pC^xX+dLZ8zM!6`%aXC_BfSQFi;%=!a(<?bHVQ>)CH
zGu3n!kg;kcP(&Xl9i8HED&$W$St75<P(`{ivQ3LNm1}%uwA6m~u0T3ar9gi+p<2#H
zQ&c1+(;<)AR3wf&UO{u#&D`2Nkq|4`3NquKm@&Q8dZ_-}0`>~rVj9nwAcS+@jic?I
zo@V=&Y#4BZcqv_Fo;B@Akpq>hbaN~60g$8)g9l+RpYJ^aTGbj`K-KPKXmw))2y+(}
zw9uAn0sH7N=rw2GhIM3^@T{1{G>4V|w7LtEJ36`>(D19S@mUJhpzKM@2HCDQr=U7s
zXrYo+;sKPj$g^dFHvhv&YJWW(&w`rZyWqleLBZAShv$`#VcYm`0ceu$y=~$m&&8E(
z!aH}7-3^a>Fw|P3h^xYFv1*)MoG}W{(OS|ozm~JAx4bSyS8-G=wv`UFE(U-TyPtHc
z6%!ANhr@psP0jy=35@{U6-juRUNU?P8k&T!@7eCuxo4F%)8k%i9#9oX6ai3NbLdvm
z`F3cTaGN(!ouK!16<p`o+$E}YczQ&~+_8v4pUUzBy<Vw!TpypA*o2P0A$<s;ji18Y
zS{@qn*)K=e<FA2*>ZvnsZbbBO_5G3iDZIFADIz@@ijY#yrMh=D1J)TTpXx%fi}#<_
z5Wd+n&Ei+TwXEtlC_y{#l-}<hSoG5E*~5I6+1bm#3S>{{@tm#&$aIB)eCB8L7Qm#(
z0%dtIzuuu9WnLUooWB6z#`I^bYPm_j4)q6d@(oGMu~Xf7vX|Va`kZ>YKU|=n>*~wH
zFoFK(TP1VL;YP6un$sC&@5U0yE1bhr*B#5#$=cZ^gRuJ`3nmf5!*xr1K)3d2cONL$
z{Y3UYxOZ$eQo)_Ue`ZiRz*5Xi5Dz1&cWBCZZR~ts1yS>ggp(^FKE6KP5$e>t5hBOE
zQ#VOkTmNBojOz*;K}%}%0gC4b&wSDn>0AC?BF7Z*7@2}T&G6m*t0#<P%`8P&J>!Rg
zuyrrlLN!fM%0*r3&NyTwEh2hpnnla5!@e3i`bnj^CguEVU#NpHP!E>Wdt;r;tgFUi
zI^!{xBrUN}OiE*r`_jRw*!ss4^Dh_ih|tMLb4%$fM61Jvs&`YFf!quS^#bfYyE;)Y
zDB5o`j{$Zjk;v_7m~t+DdJyDQ2$FtYaTZLdcQ)U``e|%h?d9l?AEJzWO!u+^ofb>0
z_sjfX`_aQ6_t!@JIgF5VE)FSzHY|Qcxs4G+)*;qqr=^|q?(P}0B^#?_M#YWA%0VsR
z^~Mr4+4UlL-!9(>fuSb5BgS}>@Ud8q`D(tpmgkMTC7QMttj`#$P?@kotqR&=uuM}1
z;?O3+15hw`S%0L0d}TSt16A~_*(ri&{|2!h#6T5~e4fV7yWE~AieLEwhv$AlF+3<W
zeM_QvhcvmMwj+v%`D)XVy*E0HmKod|&f;e+g1EPg6Cr(k5z<4(?iD^~PN{d$Z3e)w
z!%*3!7@J4c3>oc%3WFIca+tydvLGcK`PEAHLDinHozXyY5=$qumvW<<{)sR?czrGL
zpZF=~eS-6_B}|>$R8d8tuuyZA=X@%6@h@>wUrVZl%jTA^7HvgW*br|KYjK%b!O6b<
zofi%&rIqdhgB*>CYZbu!Nx8SXIUIwV9!gMo)moxEx*L8Tu=L5|FDrEUl?0ge7vXEy
zFIS?ZX8GF>Ikxf3w@Hh1UO@3K%A0ia_0~MX2prtXPfVmkv^7ff&{ZK3jP?AQaI$X4
zGu&DpAT8kVEmYw)qB96Nxl@PmhnK@(Glwx*uI`=u7eC$ugE|y18$~d5CV)C~`EI%K
zTcw!UYqdKk0{|GPo9Gcx2*c!8XdKFxSNVd#&%MCFt4S|nM#uYNby|CNj#h_;>8)Cs
zkUf7@v|EvgV=q5Z{-YmbValCOO+#B+%+ITO(PeY&%5eiS##S_Yc~^W74O+bmJ4$ME
zId|=hP_<b<S`)S`O{y)egCksI6+sPj8dYa~Dh0;w8EC^dG4yXuucOurktJgN<ZxsL
zG8UphlUAS9uvaQ<I@f4inu<G+%*AHYPq=l&PGC8=q}uq<bWT5l$FH00MQmn^T+fqE
zvZI6i7}y^GmezyP4+#jwkq!B-_YP<#F`QuH$%N4a1I@rWKTQ_x#^CfS{lkPUuc;vj
zi`wOTt~)#;spD|87Xa{`NzGZT9J?)%7>?oox~6JjYVygc^IeS|Jz$WC;NtvF%_4#h
zO5(?Vr^OS-vt8}g^;}&$nN~d)fC~se(as+&?o(~zrvXTz<v0YHfL?q>YalJ=D*fG$
zm5#W`niuqn{W<09(@wibHUcA8s)9g^&H(T5b8~6b)<-6+E;z+y6aDbO08jB?#dP;B
z)%(_Ws71;>uD6u!<Vg{2D2ZRc&a8f)y>d^89MUd8zU^_Eg$Z-FV4h7a)8UorWTV_l
zR3a$t$HcU|0bP$I^6S)FH#pC4*dlw*&x<^UjPwn@>h^B@N(_EhXB1jBq7@nTMo-(L
zUc??qK8Q0La1DEN*yP|_Yq;+Hj%BYmlE>Ze5e+fuls&kc3Vc_4IWlE@L+1C&y|zM0
zl$sbH-&=Rw==OG(4RlyLGpZ9-u2!_3riBt&I3GuTbhAumN8rot1$WVVm%MgzVdtxh
zG1U}HO_)`3M)%T4dH^<+n&Lu*-**wdQGcK(VNCl*y{1+n@)PWy$c%uqzeG`~lmZwA
z6tfYb@R9S`0h~K0H7y0oHX1GO82fug@5!lAz1~6LCI?7Atxega_1glKL%&;zN7t4$
zJ8#)Suk>^sE^KAz$}{DPoaM~T-G)KB9@6ho1lruuDxPQ*z3dx}#vacaxVj?Wn$EbZ
ziG2*^XtY7b&R)7RZ;}<Ys=5BoZ~(#isy|4Uo6{fqizV?9vEwPb)B{kwB>*7|0lJzU
zrmN?r#1*Zn<4O0I0qS#y3IHTzA86fhO3efS1wYhM=j*cZ1pVIfFB$c)+N{+~Q|UR>
zFW)D?{Odm)*YAyUG%+FRp=3p#w&E)Zmh)l-*k0BdLnnbG`0V{jj?C&Klk})-9@^*5
z=o&Sj;dgFp1cC-``D|^Ih`})s6&*jLR!WDi!}B5uW*9caVFUvJXF4{YJ=8^f`!U+2
z@z$-S`RU0{2S3epMLui43t3k5&#<BBJwd5<RwQAL06(i7V#S76ShoKVzrspA9Y6~@
zV}dU}ut3Wgg-qNEs=?^CNk$R+HXWG~*|cEg2rQwu_u`bfKlJ2LIIKXRwTKRJ{#gz+
zMVtKYhLaN<EK7sQAMfu2`16tC1{oarMv}*yAau1#8io%U57Yn5Ks<OV;rqezFTFlZ
zGGeUT^oSyEtDr6d?;U+C@eAh`4oSnvcXPO%k6$#tVf5a?wStayk-MaKJ@%f{pROS<
z!O-uI6ks0SH^dPc4mQ7Fj}H}!WtV!&-4`wp8=^w!Z#K8oLv?9$FG;L)nfPD(KMx>e
z5a0$mS1D{!d7mxV9+OSbqK0S~gWm*BvDLbNup<_J2c~$l_?qsGYWGPHGPNXgBL9PZ
z2+obd%TWw2@uRg2+8SSeZhoS?K3(q3*vF`z^ni6%lgyv&*Q_Ey&oa|h1$5J5+Lmg4
z*cGYXl3dHrpH3W?2-m1SZI&o%$`EFq-8)x2plTs|4HIyCQ(a^|kwk*!QucFpP@=V4
z0SB+n1coV;6iq<RIUiejVO{v_8zi>cY0G>qB(is}CQmw|j(lfaU?PXr(tKro->u$;
zfY7G#WR(|IzhpZ*wma_g+*#s2C^F6R+ML5`useD>{mb&fl2cZ~>_!wDML4HzhT*^F
z%79JYhp9G)d)&%(rl@#~zg274_`Sm*<}6rXkW%|rTsYUOPO1)8os>;{NAf>q9>9<v
z(LSJYfFBPokk!`TF6JrCDUzb8P<W!<^8<#nja7L_soWF2VCsBdqX{@m^@2a}hhQPS
z)HE#(a5k>?dvf$?_78}zVqg-D&?#8B<r4*Sar%=Aa9cHi1_BbJLvhNl@Cg957EP2o
zJI1r~(#ll~uWXEpuW_CBO5+;tU4tajwRP0vr2|rZqk(!_KF{$v65#2cDf@oFlwy9G
zY25t|>+JErJ@376w&+NKZjq?$fB7Mxw26b_{Z>iNBcwm5VU7G}+K%z!N2oD8B}9!%
zb1lz<yKnr2d@z55DcpO7o~apV<Q`Km-t)17g<x_#ly$Ku6mI?hPnq8v{MgzbNK(K&
zK=OS=w$X5^*)EY)>r;pt_BgVz)ExGsRIsp5?cW^bzd!09=lSo~o`Fzs$+}%u#sX4w
zAI0z(@AY05FUxn%xWUHx1(%}QOUy<>j>byR)&JQ&p`=ib7UrdSW=-L_<T}opnou6x
zfdyGPVSwi-<Ocy3cF)?D;fB9F&=CG_Pxarf0n92)+m<)&d*eeIs$65+PyQw8WhM9K
zFT=GteON1z&8EjDEf1TQfCN)Uby3fi=nrb<zuoOWu00Dw`4&uHNHl5UCBB+e;j(&c
zVoz^Sry6%^C@sZ!#0Vxc+U0fN&etXR+aCX)PY$#vi!?uR31;>}ji7gBj@J03J7>=N
z43}xISTEYK)6L@&!Oi=u|77f)5N(QecpG=%XgkMfX~6V=$@F-P#(;Rk?!rfw>Kk#Q
z*Yaq}KjO9k-Ww?Wj;X1poMEB6DXmA&%~JsjH3Xn+LuvM~TJn@wv>jHpJpQRLv+pZP
zQB5(sj|}G;rr}75an!e+L)uJ;A4d)ipV<EmEBRHy_}%*Xmzn*y-+CWB0+@UH2+DWC
zaANwk%{xK{Xly1Y8}3!AMNxNCt9OVW#imIP|1;i$3K~6ee3irmBORfo`ItIto*Jo6
zjFzOdlgoTML!rkD@VNp^hq6Mpf5cmnjCO0}$jI2sc|Czzj7lX>D%}dJH;5+Y(Y-zH
zm<MhbqH%j;1phve{BLjhtJwFyrID=cO91CenO1bIG2QDOVsY>6_h$2e3FI^xT(&ID
zn+mwEi8@;TvxUJ#VInkv1M<96ca_a#x>RU#97|&m(GB6>pZ*x0i>|)46_WHZx6tQV
zlRww*gyz3J+kae3w)YMEh{3=XVxm(c`0=O%KQ=hwtpB380|#45@E~(P6Yyn%hZhWi
zPw!{{|G80G?_&ZCCQREE?p?8S6zS0tMP=R(T)YnThw9G_PWQK}ZQKy60sl;a0?}U4
z7`TZ=sc~8f)+7OwkEJv@3>UeI<orx5+Ft*R0_8qNk(yeZGZ##zZVybWF5qYpM_$(L
zL3V@f6?9W{6>N8<dLrU|mD9O=a3I|G2Mh2Yviom;CTF!S*UK<OnB;OR)7fM!udS~d
zs)GdR7gKa~%U2e9DpiY+9X#`6^K6P_!lVmb|HOYpi*_CvLE5(m3uzmzQv@6=!z7AA
z8lx6ge2V(iMgkS*J(m3*w~XTc!@IVQp((4YhR!8dQRj0@cYf@Je!m|5>{<reF1TD8
z_o;;CRKksRFepp_Y}Nm<@&A@c-qX^YYL270^yuIOhS+>ffjyrWcp)C`AQ1q6bAljG
zYFkqK7dG-gEc$=@^O?MFcRdj2#<&CQL+9o?E>pq^QEG9S^KOg&R3U6ZB4Y~zlp<5<
zWq2VH|Ln#9LMD`>;Aw=3PMfUN&|HjwCXInSLi;}G0&Jqai{-NeAeJF+$6EhPU2h)u
z>mXBSHlKjtlMuC(lI=0g29aqd@q-!*j;XHwK1EBasTjxIf3|O*qb3^RC`v`CjgJm?
zMeWsHf1p|2b+_zTnnfM}^AQDA0{_hJWr-SE8zbnqaG5k|U^SrmlUk`|>ZOg~F8sr$
zrk+(#N!x!WOElkZTp<Iuu(kE5;`H`hlS}IR^1NirWG9!!-WL=dNsmIi)@D5-Wh_BH
z|Ln%nzV-bMH&)7<5wEXLr%bA|-%~zramIefKUT_9=%Vc^GuacGl063Dd9*O}50pyo
zt)4w%{{uQ~TUy6JL4h9Ea%K>xD`(@>cH7wdar3*8)@V9IGF(lLUlXVQZEODLwblt#
zfQ73<q?W-$lGQ3Mm<!)l|61ICjL0Vy5e_#xbs%f<KdjOY%FPB*Hm3dq4y5GIt-%t^
zBMlCI6lvq*z+fZ8-i9!Q+F#r@{(~TCa}JiGS)UqF!+Cpy`Y#OD|Mp6ME9d`GVqf%o
z%thc{L8d3ifU3TIujwH&&)Rgm1Yi0whKM#0m3m$RFqF9|vVSC2EwRtdUj>iuD-!l{
z`IJ6)+_<p)Mm;6h;=du{sIctd0TA@~ci5jz0YI43fXI}qSKvRn^8X#1wP8%Wi<f!6
zY%Hv6tUipTs21xMWHl7r3Puk1PvOix`G&UmaHN5{)`U4d8YbkSrQ>pjQRi)KSei<U
z@{;zok`lFMwUxBcQJeqWwTrW(0&5jdU)9EC0)|j($w(<jM@Ng)gb>Uhy!K4Pe-8;^
zNWZT&G_Z|3Jna0$>P#4!gtrV(JN^oQpLqdveE6I>R{ZSwvS|S;xgU6Mh@1wa-fy^-
zzxL>|*xFNE6z!~7LZ?uKC0}#lm6<@vb^vOfA`ckUSbD_=FbJCdCDJq!-dArcKJ9KM
zsOnV7^vh(mJprgQ0z}2d{Tq?<Fa;rK2aX6cj?nRIi&O$#N~_~FHlGxUB8DryAG|Ml
zg@2(xfiGUI0|@Urbtu=?Lin_|nI8jZfY|>r+<NB#$05Cm6vW9uA&DQeM;6`wF<{k`
zMSRb<0gUknH7XSac^ZSEbtvx@+oi(=nQf9a^hzhLY=P+NYsbb6mu!imj?X;5`Imxw
z6b59zS$M$`kDgS0(Q)+^vQkz~5ZrIQU66m?PSi{(;IboSy>Tcbyy(H&;9&b(Skb8{
zon&=qI<<u%=&Ozpp$wRpfo)L5?=7j<jQVtCBuQ{l0O&+&DGYCTWQ2fv0Ky2pD>OnC
zO>cS0^H+@$!&vfCcO=f?gJUz|>=3s_ByIYsqqLfj+Eziasc3WkQS@W}+4P0Jo1E}J
zmGgH+=086$x;FtG{XmQ_WMFLfaJn0eypjW`#mv1neI^&m2=CzBxUDEeTJ%j!Jxef<
zn-#Cnk3xEr0s)9>a*rMMg2F<_BtFm6eJ8e_jo%&MU+U+J3%oJ4)D3>`&$o)|+%R)O
zr+bE|-;4TUG7l<r9yV4{!Gc50=%x8MV&I%fYzEWxEiAKp^>11Z3#rmsl*WD6fkt+j
zl8*hF45apXLVg1OFviUtTUXJVk8|1Nuf#on@o@g}(#bcJmo%lk0Kd&2jrSFN01!sr
zWed>+=5w<Mz7#VLcq8y2%~o|g(Rn+!kE-OUrnClN7pv^*Cksh^W3)cmx|dh`(<j*2
z12`E1PwtY=t^yQ-Uke@`+<qvW2H37g;-B;KUIBw)RK>-`V++DfnIc3i8Z?-M%y!e}
zmX-tL`cB~jy>r$lO1ipixw*LjWQ1vce%@wS&~mR@a3s!nAh8Z<Zex?Uw6w(F<EE~j
z!mQh@Wl)x!tf;6s5)U>$skB=X<Eg2vlrlBl2!?(KL6BdHikub=H;&=(2wvN-0w&1w
z?D=WAGf35tT~{c<TOA!%B37+vFc|!;Io9is%mH*Cjp!V^FpYiBCP3|x-B9`qPyz_2
z7Y$J0l@_%A(`@AHZi@MUrW>(Zp}$K^kb1r>&73af^D@h`$_9vK2pQU|R<6g`de&|O
z1aXSNL~gGOM=U!qdf1%$x29|$-VlyD6FAl7lh6-16@V4UzBlJGYYiaZczQo_S!#_b
z*@e<(f8uwR!G6q3i6e4R+PQM@WAw{F@Rgefyik`VmB-d)y1bPsnHjQqyfuE9O>rre
z?tQ*xA6L$8Gxrp<;Fhlins;VhVyJypT8a8)z5z6V<Gt^1PAi5sJpeE@!Ak%Lc}>H7
zA|?EXKTbdC!v3AQ^^caoaNVSVudh5pPF`N#VdpzLh|Og$mrhpB<0y5JnUvegPFl@`
zP%iPW<I|O>f$S*ZZ7|tR&DuE}x+Vm3i<&itttn-k$IFtGdo-;?3gpz+&yXQce6B%f
zkP+|oDVBoXh27nn#l6_@x#7`ket!Pd5c+hx4b5e3#IdOl!n8o!q{*-+a-zCe4u0O|
z+%aM^jhxiIR4&^n+Zs&aJggh>8ZHjH=1~@D=!WW?@Yk&+YR;{BAI4?yS|a%>PTV2J
zNzyN0zT7U{(Vl52-B6$zLyOs(^VnW4`dh_cG6JNdXUic1o>8B}tu;HzQs|UIQZAVG
zeg5o!JsZHhnDQ%ip9no&QL2ePqxWY4mY)lV0N-wHlF2Qqh%w_r`;H^ew6i6P&W;z|
zuCHTuDZC}{2r?$Yatn`}6EfAbZmjf<ko^k)=<^P&_3cObdHcpqYD5KqFj?zN2NGGb
z9VVux`ju6+*Gyz5&M!7ZVD9}SyQ}r}{BGCCMK)C}`!2H}T9SzR)uNLom=`N#{R#;K
z327N;T#&XLkg}pPdHA@_y0ex;@T!H8kdgi$dYcrX`yonNHAWN-&GOY(OE^Ai;O6sf
zT-6FwjRu$E)Eb+4#_N5YYsw&OG7@{8(v=y@l7y4ylO{Zc*O-xz^0Klw3s;DmhK+I>
z8rfqEI$3v&y*`Bc@+9o~3N}#h4E0muNOZX{q(CMYX;d*9`nYza??%{qX3I|0pDcK+
z&DA+Bbx=36dD`($<A_L}etc1)Q*CQz_SCbtSg~h>RS(8^Y9srF6lOZ)uI~ZWT-;tj
z-o_D(b|-4vsIc98dy?)Y{D;}-y(l}tXB&Q14J=iX9kGBJ4&}G^f4Bhj@PctcsCZYg
zwbbJ`tMfBzNfrS#G<z0UIPIH-dv>1j00AJ6!S^QOlZ@#Mq&xA-986?DhOwMA?~HiL
zSK8<Rw@_jRqHO^mL3Z+C<d0%A9-GCo2_IxVHnT}^{h}JT;|O{6`8z6e-?rlQv7&J$
zO_3drsBakjk<rHNYj;Q-mfH!v&mny_oqj-Eh~J31!{}X+(-#a3eS@Z6yOz2F7I=yC
zQCPCcLh2)$C7x?c6`+yL>dR#x;6^)a>?2X$$JyELGj%1dT}-Pd-msHbH2M)!1Ie^a
zUO#SA*!5XL7V)jF_h46hz)+aWaFFnECa$y^g4N2bX9rf<SsLZJN?nlN><4>f%Qrhc
za<!L&sDP^5sx6sU>eB&mN(Z;I0bO$8h<}BTzS01(vE2QzT0<xL<;ZW^-~Y7M?+xYy
z^v@w%N`Pq#;kepl-MN9EtiNpq$`Z*`A)jPA`v)m|Yn8ay-|205;q+lqoR!5V%@?Ap
z!^X+W8~0B@aGd^Zq+%au&+vflf;(CVL7=@Fo5n3t@{-KVC-95JPlg?$f@iC74p$d$
zpuyP61w=J)0{q=d71ow3XbWq`*`Vp$j0%E=#H!<ac~@87XXn!`taow9<AJ%T`Vmc{
zE|+4xQywTEbV}1!9xK~4qbhU7uP?U5>QM)guIHObav??+d1&s_%{B(!5%;chVD~?=
z8s0uE>miRz69Dyx;L~^d$;&EKkQbpyLZ1wHrhDwwy~B}l5qH@uxtuA<-5W~ZjgchB
zB_$sTq^?}(9GnSU$Mj?-9;j!(+5@$uo@=>w1&(9pB_<Mr6uCcTz<Z5h?OJ{Xz^Ou4
zD<W6oh~3$ZK!-|HUZik?D$*u(hj@pRt#My$zl=R;yr~)f%s5V{kaiU<uBqn-a@Xtb
zxYa4z^d1x%7ewwZg@7%x?e6ZfzS(23bqj;iGV^Y5mAFNa=8aa<d%)Vb)c)pa=>jYm
z`x%eo+)^qoNKVk?<AowIFemlff9J6R+{uS7@dsX<{ii?_cby-kc;lz;O_<Odgh*0N
zS&0&La-DeBYiFzg-U;lJ_~9a#&M;z=F24yR3e3axe+~TT=W0Zb;#+{htXVw>AARV#
z5a{c%-v;#h-j$YARZY@js#C?okB$1CaRYp|Q{wTo;O|D$GtFKNnl;zzQL;WqJU%OU
z{(foPPM>MX5)u-OX=t>4F5v*gB!NlQ<d_gRoy|)YFgq}`B)fs?YVNaTqL!yFVA>ZD
zqmH2=gi(l+?pePoFoj4V@0CEiyR*=wiA^EA6UbVbxo1`Wfevcjm(G*S-1fD+oa4Kb
zxS;Um@pyr?Y`pu$L60`x7{%o`in=G%yPx5mMt2aG+46~kCo2@!YRzXuwk9;*^G@UP
z#Q8pekxdfvK;$6QM-&@ecJY9Ipw6(L`FNgufy5WRMKf6_Eu)}3;vB(g97l@?$RE#F
zZ0Ky*7uL*R5kab77Pg!-l}S|Vm3tvLO`00fgfdxl8o$FAOl;zsPJYw_(2L)ZoxwxO
zz2rGf`n}#`V5ZG=FrK03Hwf=1@DNxdQ(0n>@h}cy<BP$Jd(}W3+l*?#*w4|zAEOBn
zNI%zKhxSDjr)7A)4PvT1$a7K<jPX*EFV==Me1G+M6V*zpT8idUHMy$0bfNH7Dl=bq
zY*zbtq3-4OgbAW*M+?esQQ3!=(k{(5bz5oFHx2GWklr35vvgU#@a<d7jIzeZNoRxY
z-oawQ>x&~|X|*M$*`|xxmP<|7qz_)qw+7s=07tMu0)-TTm}O6a-?z&<Ys&IUyy1n1
zRV7|5)aV1lRq1u@akOdyiy*tAf`UF;BXy3HA^bET=vqQ1%eUD2AZLk1qLyG)=_7u9
z-miej>yg#J$Q2$We-?Eqx{13U+e_x*06%v%|3qY>toL4bXUu5=5$V=TKukZaJs_Z0
z_vJU;EZ3nruaG){bdTj}RS~<jC+raKX)mgUf%ck-%qD<)8|VT9bm5A)-yhgPgcNhJ
z=~TTD6&Zb&x=0OkD=R0D_6(eo*(zYpw_qnKzq(lR3Dj-C{ZV<Jdo6~$NBR3z{ESlx
zM*Yp@uCRg;G^WG{71p!W_Hl83j;0Rg9rq%6)R!T?x9=Jqtq<)z_YjtSP?6p}NH4`*
z;jbvjP9^euWekXwz@R23uE(oW#hOY@Q2~mTsL!A;Ei1PGUrF3>?St66Ef@P$>*9J=
zh;L_S&?<Q-#Q2C6Gc_2cAH|PSy7PSw6VZ~b=+gOk#`&B_m(#&U_Gb3U*SVfBtv8~#
zUb5rSFuX`?{9v4fwNuWgkiK{AR+w+0pbQ#09(4MWewE1Wwf)X{vOp2OH?`#s72+RU
zB5K}8qxVSUr{EnWiarPQ;(Lt^9cSG_^L(Jz+13fT#Zmw6eG3miNW%{I+uy@^fN_yx
zd9cGY3X|Ghof?DL0WiR0feZ4%zY8Av4}OsN*qQoTdbSWvpL*l013uYT44nqeplfBt
zcnQh4)+NA?IZ5Zyf@%OE(Pt{D_4Xsq+V8>JvQ&Gi{w|WQk?pTsTXb4f8QIUdxm^N!
zWa;4I;-OSU<<ZXxaOkv$ui8g4sUYHsCwJ$6FkjA*+BQBRBfGpSuzhu$U@^AzV7{Qf
zUc+SQ<Jx`kFI$n$yzSC)bkabw*&w5{;NkAxxU_jbn@JX&>#Mqb2zU@a>uM2D7lEpj
zrDdUZ!n^7U&#mOGf;>rbH;Lz^ER&V`9e3zE5=<UD(!(2$$7Iu5dEnEIx$2{p^DcUc
z4c<O5KwwR_LK}#977;9z3DG*IIBev<(WXBWymd~Ng8T-Ps?J)Bu@b}jlh?gAy9GYr
z6uGUnLa%8bk@4%3*Y|wSzqXEkaCdBQ>3=w$$b<1M{f97mCr0Q8b77J*+wo5lGieJh
zY0qrSpHHmv1XIh=RHEG?7^Tbz47`Iwt-Q`)o2mRAFu*+dK15LzB09%gXdb=XST@9a
zPOCAJ{o9j;#_NMAIxa;^Hjca*H5D%Knl$ks>@&i`s5=G_#d}*A&d$!m12qmJoQS$|
z)p7m%$W)v9ExNk>cFZ*(+CM4I+feXNJ<c6?-fJ`Tk;?(rbP|fKoV*ne-EG+IP0;0T
zF0>(a`&UItitsb=+GDy{myr|v#{zE~UjH3wJQRCxdC^wj7?Cj(W_dBeI&tIL&K`dG
z`ZVs)OrqZKpn3ik^~%tFUo|hP_*hgGZJ&q&j~Z<e%L}s<kpc)fD_pb>!;FrW2O5hM
ze(>rUGB$FpSiSIhX;0d7@hQ7Jrjo|DPEVVi;!Fl-%8kS1Qn}^l<lgL!25t#+&YjEE
zPzWLp4}pU_b~)p#bC8W`Ld=scT$~U^pL3;enb^*}Jukxu&-~WsMm7;#r`CP3w1+_W
zt*GO^MGJb<a<lFYM@~I3R*Frb`3+8?lH1l9Yk#cOUnpB>o1mN;bk@G(^LTGb7bMr7
zo7A+eT@uc5`rc7W`m}HLh{K;ugOV9VYsJ)?j-!cil_bORVz5QI=!Ul0Nbz%hxfXV{
zX7=5#0Z-}3@|yfM+mLWIf1ZI$`b002bVy$WBGRI;e{B`*qjUrS*Kp$H_Nu$3R#jC+
zoM{$F?=coG$KRRmg6EVhmbSB_hNw@8U%cD{A^l1#;{bAkk=~;b5jNZAv%Jl#IqW`<
zg(Gr4Xi)_RWT$kx?>KoI3iU$HR9Pl*QanDokQ6zOxlc!`R6nSif=&OW17};7o-F-!
z5YxmoU>9@q^12JAug&!4flP*WS{szMvBR>H9}V5z=r73-H^BX~@863OqHcojW5;+)
zUh5nSoS*13{P`#v2T+N-`GZ{E*E(7&C$NsUfP^TgQ6>r6M47M69P1W*d}iq%6pEyY
zF>AUQ2lQnkTBu^0H&MnTl?WB^FR6e-7DUBF{WYC7Mbeyt`LWu+9rPnp^LRVj>83_0
zDY4qeq;Cg2Z<Wk1P|D|rU0!Z<;w#2;jtGuxu62{zI#riBZM`i~m_78TxM)RhKV&TS
zBRw@%UMu=?%M$SVAiuWr*^oOtkT_D&Drcxlg9c)6o(Vctd^Cw>`t|GAPmWpeHaVlc
z`rAVCD<-RB@HxjqNarzpR2(N{Z>4r6GOl7ocowsFtX{psqz{nm{Ctkr2plm_w$VQ_
zFAV$F=BdL6l%|daP#Kl~P#GCOWd_&kx)rUvxV$ZhEP&|3*AsIhc?sQ1DPEL0<1S~S
zXyw7;;M^OP2<8-SmApt|W7RjWKChxxThFee8JN@2V@1|qUm?fqH%p!QAAc5rsE1bW
z+%bqC6PW6&%uz2IlP9rT!)9{b|M3D+=a|14P(!wv>nn3<Z8-diZ()5L>()|nbU-^p
z{wFG)MNh{WmIx9qnH^CMtheKa;|!0aa;8dJuH0v=%{O*P7f%C;9y<djqTkm0D76xr
zud(lo<0-1ZzeQvEEl)mmHIURsN<%(~aKaI6-Lz9a(6~k-$Mc#}1zZE;>VAl^WD3jR
z__I5JBgO%px<4H09kdt*{P^?ztv~kx{lVE|wu^wBER!t4+HTMsucdC0eH`WKTFE5-
z_-xzq5oZ8_n%gBhUd+f$gc-On*3d+;vhXSO`}er6$KNEqu=ytzli3YDo%iIlwbQih
z+R*ljj%<8{A3e(@P8`Dm)dGd36cL~1nqndy*B8$Xm7JZc@Wa<w%`7b)!=z#KpX~gI
zB=Rt`zs+4MH(EhB=v$c!*z?40x3L0|KbwC7_~@kNdR|kxBB%*)BMTRy1WZN?f@Cka
z;5oP6A)<Y48xLM>6CevFDVacHf7OKGk6#NtI-YIvs6l?Kgw@S7BWc2$R>V#r$dSrV
zUw2cy6XAc?>0%i5PDqa*ZGnz`^0q*yUYnp(A*V=h$#QgHmj7o>Gg|jXvo?mfnis<W
z&m1)T$K$L@ex@^*sC(+Gc9zMO)l_uu>K_tV+l6Z2hD-bg|8bf7ffEDU(bv$;_hyVJ
zDd^9+xcFWOk$jKak`01;>{d-10X|?s;raLNFx`tRfJbW#(`xLmY&1+lUN}IYyios9
zf9s%!;$*$5sAIk^&Sbd$>Ky7t40eJ5*%%X0+6cg}T?Hd2loa`14v|;+Tzl8dpu1~S
zStRh3pbhcEGjY76giqUW&bPUOWrHRL)^fyobiCk`<?e8cH%uTB9-B{EZfgmVshZOe
z2tx}{_?}bWxKwR9Pr$d!<J>;)Q}lj2%)4@5w>2T1X#UD=BW=S=MPA4I%-B|VyuGlb
zdAs;4vH>w;Y5XngrLc##{@z^O@aTty{yaUODKK!F6@Le$SpzcuMv`m|HG+$qJJiI&
z@qZ}$>bNMkE?hxEL_!G#r366)r9nVSkWOiklJ0H>L_knU>F$#5W+<gw8V03%q+<l`
z9^>e__kQ2`&OiKyntAu$Yp;CPv$8!9HHb|(-*Dw&6;9M&p3jHdf>7ZEe=)H8(2|L@
z>qk|ST+s!a#%`Ok(DeQ!z&`f<ECM~iQGg4)f4_f}!{xoDxmIOmKZhre-Wu{Q_n^OL
zxF}2@>B9OP-Oka_Q$9b|(mT#N{(fI^mD}D17ORs|kk%6t@2hk+z@EQp#9%vJho0rJ
zO;0g-9ZS&-NM3y5FvKWLdUro8#6!esW1OnDx3{ks!+okmO?s<(9+xRcJla&0VP=$$
ze;dns1UN_BD9?B{5{=Y`WE07nG8p&|#`PP&V2%~(Fp1r=^)18c9dbBcjPB-MPM}5{
zY}!xG;To@Ow%zjpd5!N8>sHM&c^+ro6U%TTjNxe9>>Mi`92^PW<K5)*4eWcvMC>jy
zWd>xBy}`bd+5%*fsZXjZQ<n6Tp>fL)(TGMbCa<ZnsQ;cln_liryTF;PakU6v6(1j8
z-`UG7(v)nH9E`ZqiqowvD`PKGgY0mOx2sawK=UXzo{SXnEP5cgdC5Kt#8yIH^cLUv
zmAt-t8F*c<hee>R=Z?K9&?e|eV~vHSz_7XV2^r)d;^)oLUBI>pN`Bb>Y#sq!pQyz+
zw63szpgFZn3hj?T9v8Ec_nNL~en99|^PCv!9eajC-Ve9N3=c|V%-)A*4!2JzM*v_w
zWibTd1j5wDIW(+^xA*Sd6S<hnJ{-YkDmcOgJ(dCDsk&j7{cY|oQ<vA-vR7BCu)jyQ
zL%?G)Ql=Ze6;?AmHJg=F9_uhq#HK{@m~L?_oADbm<_tvj{-`DdMY0w$Blmz-CNi&C
z>VO>_Xa*%CPR!7Ya))N!s%g8o-#~ifD|*Q)r=w=v6UH09j)ybO-2`%v^x&NHrTjQ{
z!!lf*um*QX@*tz)8n^p_MRIN-(y2W@JA}eD1!kl<tIntG`!lD4iujW~8_5pY!cC_T
z6KHS$(k@q-1fkSriqcT(iPxTDExw*&JI+48ILGehUl==zJqAA9MjMA`i?8{&1vm!K
zI-y?Pab1G2To)JA64d+M0<xWO+fGMEqgxde6Szc1cUu&RWu!=7c5C~yqJFrSB79`p
z6k?=A+LaL-x}lp3qN~m^=$RwZ88KKL%4GHYc9dah{xPe<e5@<c8AfkuX=&<=01ixm
zQH2{aOKQK=vyF3q+0&#yiBC4=9bb8Bo%G=@NH27g+_MI*n}pXZ$Jw}&Rbv4}?1~e+
z{kzJE#El*Wo{Z%9f-dr%0WD`{_=#(8kHb=|ahGj7Su`Q@2n_b%CYM#j?6)PZ#`4-`
zNKON;V`>!KwckCVsYFRQ9uQ_p?X2sZPnMKdg-K-HbBEw03_B&e%)Pd2!J=~^Kj6_A
zg}*Rbcl+#(`L55}D|lkOaZ3lPI!QG`SG<?7${fmr-aln?nh>OMj%78gu|PPYS=O*R
z@b+Y8NWi_Bez+1-pdHY2{ZQffPC%shcv(+_jnZ`lp+25sS+iWDzX)Vgfg}Shk~K?S
zxIK0#^`XJf(^U<y=sckbjkqdhAgvZhfh8p@SxJ^x$R&JDl;4!%Tw*u7qlG^8ICxwJ
zTg!FoW=Lm}C6oIm&;BRH#MIULH-vui){W|CN9_V`Qo-CyH@FX{?Hi7tK2TEW3*C9s
z2#1BsooSOp77EjD4}LkIl}p;VqM6++3yKo5m-{;RUa-H7jK`7k$={=oRcdC;t;|N@
z=21$<HO-L|x0on>;<Py#S^gfkfy;4C$#uP;Dj}LIFcN@4@3F^hB*Hzicd>e3?fWr#
zG}D`3NH8iIlGf5tNv@jp<fZRcrmY*gK*1-vKUzw<+IWKP)NN3gJ39E8*0RiP&2=z^
zc9U_1TXr$d?B?mnq8lRjAW;sggkTbxY4L0CT2o}&cA6Qs7w4HAbKA{)Rt;Ec+Hk-2
zEX<ZYJ(wFuD&gn&!2LR7R92DYIt^}={vs!EO6Pi1<eYUbcqtl$z6pdUWIhPHA^44i
zG5N71F0aT0&yz)1yFMQ%YQYYt!m3ixu=jW+zh>BXfUBSk6uzRpX!`zBEw(Yu@kuv9
z&m)~N*WC|KKa&dBW>tTrnC6NCk&r8n<EESzLZ>mLvZB#s%e(@yCh16<KX%mY#THN7
z6OC0Ce1BxP&30K_xBX0|<`iDEZ^=gv52dr(!;2lMVlTSG`g}2xx429>nO|crEaWW_
zZnp5X2QkyP)WSf|TZfXMPZE1xWaBGdQ1p@8<A{*(@x^d^FIZIvoY`fL2*{O1Hqw<$
z;iFaa>Tn~?q0j7)MYo|Q2ArMCxFs<Kr%PZfCu5OYnf+r}B2wGxuAl-ZzAAk-Y|`IT
z?1xACT?>0NU$P0BJy!>7tiT&P%GJt2CX#okQmA{6v&1tb7ib7B?(0?+HC|xzjv`7y
z&#dkCgXcxKO!U%T>gL5X91KXP*EJimG0K!|v;Ch3R_S6Z#axYimz62C9=>*2{tF0>
zb!Rghx=&(tn6Ij0Tlgyb%Y=T^AjtSlz3}6D{kPJu1nOdQpjxe{GM=}Z#M8{DB^#3;
zj6P4E>r-r119q|JClBl1{B~1+S8o5qD>YQ2Mfx3CN7ZWqh9r^l+YrO2Drd8_H&y)H
z2aH4>yGE0|V<u%m|K7}ujk@jf2wPK+;CFBUUJ1GZU9f7Y_7~+7_z}xxn;@M);~-At
zUS-m!Y;zcrTIkCyJ~i$qe*a86hb(%-Q?<8Rg{E|x|1908ydy?|!->ccd4y`Hc#pom
z*gXz7#$5T_?9)0)Oz}J4gG^sO#R5{F`IzjNE&`wMfuV`Rb32Jw1BqUUNE7rUNh+or
z9d=$RF}ch7{A$36v!tC4&)VdK5#6~JJSVqMGOC}{8iXR??Oxq4)^EqHIX#&2Zy@9R
z`_5+|Lm$~!Zohnc@aJz7LC`bz$hw>q2-aO?6r46QcqwYh?QMCq=b1OyOO)gk$b;+Z
zzxmVNjAGg!;q49eHB^ulCf}Pt|KoxGwt@fG$uwQU9}r}mB@Dq2SiDHG%EnN1{zBw7
z-IRZg!K7O3z>POl_co2bKl(4L_{-7wE8qU-FDT1Vi3|<TDxcgTM0x1_mD%fNZ1=mS
zmb~>lx49-YZz^k1iS;Mx{@9B@{|~J7KYZ(rg4UIG^_+BDJQJG6Y>)PQv9+P_K*~tG
zrSqULIGI=dUE1yj5r}5~uZ8``Zw228(p<aL_D;=pND@7V5}#pgrJJ9vA59O^1?w$m
zNjDfh8vG$0|M{W*_Ou;>lri|-ZA(f9UrQ2-uDvlSPM|QPa+cS23ZH0jE={Ms4Mz*d
z`A*;0;onqlI&5&Vx7t@&TUWOT0)+l{s|n0M4=W<{!fEg|o{3w3@kP84lmH4v=UR5G
z4-#neMw>E@@HG+ElPgMhNfq{txn@upp=TatCKU}w9VGJ^C52reK?K&nAgv4Rzul<1
zG53^!!wSB)8h5x+>mSk(Q3yV2i0|+g_g@dt)IkWcm<CCz!I!}zZ<wM=2os3jh_lH^
z)IZ;5tSePX3$vbx+*c+lwJ>@M-0{Ed#Q#?$e(fR#(0@b6Suwu1Nt8d0-8CwulOH{D
zeci$C?$h3zNJC^8Iz<bd%3pu}AH?C;=iLYtd`cPRt8el+?IngiF`L$5j=AyMwxTlC
z<e_IwWtya$_qzUA=|5;XW^r#5N~$RFjOU^89i3~b;@y$q)C>!v3|&xtS)0fyG`?fH
zp2Us59psh&hxhs=h{A*cX#TW;ZI7>BBzhxyWsp6ALi3EtIQ~_l9+y>Tx$V$19m^jV
z0pmV?kf`BY+v_yAW|dXs*4CDgbvi!9z=3QWyM&vYTY}T!*sG5pMRW7>BMuInCZJwk
zUU^wsoJKu2Nch~!H-Je4>6rBmuFWoQ^jhmv4;h)DTRaXOrox(<n!5Lm{@BzTHNa-E
z@>YQ__RoJ+je*^7L52ep+`wY7(TyVeURr4IM^mw|+Pc=N7BcK!cLg2Ln&)*He#j^O
zuJ8i|y<K;gIuWzyp74$&mpQB&cq5|zSji6wvamb);?Mh*({hsL{B-s_v0Ot@F&v4^
zidr4c?q28&&rG`=CZpgJ2l6tsNH<g9{J6gqyj?~=t`dvY^uwBywY-KAtC~e(b*N_p
z7X{-pkL?ev=A(?+CnKslkyBQ6y_$>V!?NK3e=!;B1<G=Zss7~eM)Fj<K{^hZ<ppQ<
zz{1ipk_+Y{e6|w}?T}(>SjaD0zvaGB68yx~wMI!<nY-DDjEoG>bcS?LoPEWl%jr_*
z?)7q*Wl$}2NC5f2hKf(7AjIDRYlM~T5UZijByXLQ!Cm|bn2qk+y&)agUr7(?LPE{z
zoZ+|+jL3h9CfLq;U^Rd;uVT8%`@4y#<1Gjnp3N^WzWpc*q}%)5)qu8En;f*~hP#aU
zYOa|g2Eh%T^SH@0k&A}k70?ZDRMJZ$LqoR>4POf&^DK{{pakH$8lxY)jT*r|PWO<^
zbs;RRSq>zwo1gS~vNKERfLc#9FT7rn{el^DI0m0-);;H;7a3=?5Yjd+FF*y>sLUbX
zqm{J?HsljG|E#1@R%N9Mpxr|vkwPiHea1`^QgjPE5s|eSI;daQg1^g@itfVUn*NMt
zi#|5kqfBu!;BNrXL*Vo3lR^M0i5u|^RE8Of8V=&D`6^ELvIXudW=U_4OtHmjtp~F8
z*`QW@FAakr&(fU*X>@<x@EzLkzC5haV&m6r43P6=0tqb;Q$;h8@(O{!6wMK2BoC~6
zv+w&wJ{<1hpQ`*}{FR^TSiFUrPH8-BNS?u-mh*cws_T3C)*~1BB(F19_zJs;1e;K1
zJo^m^pOR^09>)1?A7V8-`GKmIqjDD|<LnzF(K3VY5Chb>m))0Hyr#j}V|2X_7tb%5
zeIDT$dqz!h+#%*6q?Y?iQ>h#KK{e&7{3p15GU8bmW&Y<g_MCN481wB(<Q=Ob>%ByL
zrDcdw!;N3RB*t0`hZONCn}3nlx{)XbxrCo9rff&Li!VT`N?rc9P~6o9E;6EzZ0ra^
z{3AGLCAb75h!UqE^j0%y>)QB+Q?H_R>S%Ol_J(hJPwd05%W4<FwgkSwP&7TDbsmyd
zUVU}KyOxtaJtE@&*&PIN^~Xy~Mj%v!&G!OYsnG&E#AX$5>xpT~0I)p^^}BuH6J^Hk
z>ttTvw)^nic=mK|WPu`Z2b1SE_MqOCsi~>Ne5GhDr&tqW2In^-x6|6wTk-e-Ua=J9
zsOXNQ+2j-Ly6CseBv6!UKZ7{bp)|CHVRO7h7*Lu4b6mupB6Tspk9+wR9U`hQ-CL6a
zG2XsVmVBD8Ul?0xAuw~;?|HyRmm(`rMAFL6FyVJy`!2|u^jYmquYewAq8Z5UA4*oR
z5oFAdGC^vOFXs0^(YyR$(@vKIK|T-D{<}V2MSpo*OhX<l$jJIUQ@}WuNqtX(;04i`
zAft60OQjGk*NFQrA@KJWuuVi6A#NWMH*^`QWM?^=jJM}LXh&k`IXXGH?Jg&|7lto(
z6{wXN1$h9Nnd3_@_7s3vlmeAYI%F`s*xY2}3wNJIOotHdY5BtulVgobXfb3!*<w|?
z9ZVQ6B4hWbbx1%~2jAiJJeuC>W3BUG-Ypx{>gh-hhA2LVxuflQh_?p7l7)JmA9_WD
zq-rx(>CorG@0p$5M0m&P;Vj(hBNnQ?Kg*+UUt1g8?oT_<LS)@%@}HfYEriSQOckqM
zF&Zh2{?ji5#R4E+zW*p*7{uaT0YoAGx2cJ})h;I2d5`53d{Ygd%kR@-d49S5mMkaZ
zn2$4><P$+3FLoPHPjVjuG^x|-aLAVyzo%MSo4r%5*UXmgaLJ3S4m9OyS~rYb&sp@8
zKi3<4k*QVZRHNK?_H=VtlS<AHsfPd}B)Xgn=Uy3IFKi#w9LANk)h|{}ORyOO_c+NV
zjbI?Fd*n1q(@MfLquUE$b-I96C|{9|<Ce|_(1zui(+~``)zH_?rl7*y=L$L9AA6$n
zXQLkB(-)p%$^56m{Mf%*uz&gJvo-S|pY`&4`mw1AwM17kKL<a6gIV)xe#tkTr8vrb
zuTo7OYr8V`u|stA@owNmHgyme`@G*1cXVm_Y+&3qL|9i;zw@T5tL-&GuMRzFUu?{G
za{?;f(-Rray^{_g!+)~oc+)R|onaiXJ4csdHGj@Od!_Ix6?Ir9oK|Ls*mAmBq0(Yv
zt``&A%mCB9H-TF*E-p?aIlqLCOl1dK=ji1v`yLinvrl*3!@hx(Llmg%4uTPjV_J=d
zJ%9Kbq1GVsnKPiynhk?nlOulLhK|S|c4e*ZgA+1_4`ak14OCmCCgEdhCl2zGp_${3
z5~D6P8}+T<h)V?V(h(?@)mOpXq^1R_aB6EoFw*eKj5v!r_+d-@*aa#C#U(Pk{v?M>
zE#6tWQCU&MY#L@L*}5;nX9yvs?MY5>m}UP-SF_`$Ut!UxsqP4{4!TUT_d;%R^{I}H
zkKbJ%D{^Li)|<pPrOD~KV^D*v9ov_JKzmS-1t-ECWK<D20lS=nf3-P-XMS{P03Mow
z$zXAytMk&+zd-o6V@VnK-6BwYgx|6J?wLH$#R%Pz+YUH4D)%ylE!AI0tKYPx*);i(
z9m0`o-dBOQ8n8N_QCQpZ-3z`$n<7`3;B|J~r(nKx2WQXLCv&Mk84&q#Bz4T59dH%p
z`<3XopDa~b&u+!baij|qe0<Jgt=8}u^ZA6gVeX{)7><$FA((8Cit%(pk$Ip?JL>(0
zQGM-dR{TN>HWQ(9^<!tPUdgOx?UNzHNm()#g|d)UdB4Ajs0I+xuhErz#vp^}b~Ebt
zq56uwF!w0jZr!!aKu*UHw7t}J=c~0C%`I=W!MV@arVQzZ=XzE7wQ179abNn4^qI1O
zU!O_!6<JWh3bYGxnkY52QrOVLaunz5O)`|z($YG}UnzFGD05O?1<@BOvkF@1B(Js2
zX(tJyJv&}sSqV)(+socTf{(~u7p_j!Ia_zhtnr6D+7Ukn_)8|>1&G(+M*iXBE+~SB
zx2jlmUKouo_#I`@ARR`FcfF*A+hw_(0I_qy+vZXms;$~>7S`u}^PjE&64CR;Tf3d}
z8*)W4Bex?Lsd+E7@M{C7JXAw>wh_`N?}UB*frAQ&K0zs!X(#%D)*9q)435<G^2$oL
z?ury)qAft#rFuO9pq`0&kIdSG$(of*S!V|ZLL)b?I8%c}DAFR?PNg?n0AV)&7(dcf
zfpe4dXmsog=6+^4u3V0K&t8Sg_H!K!Hpj-b_jwDo>xJQceX_Hhf3wTUKyljT$v~;A
z8ZCaeZc(a((Ayx~Vic@XMyApaIR3uElu;n?+BW8+muDl1voZOq@VY~FGlcV#QdbN8
z8P$i4MG(NGl%pYm?zR_80Lkbk+P;#Kk~pZVT}&0m;@@r~khp6NJ*_OV>WZM(ei3Tz
z&5^!7J`8l;#zcN3Chs?$QKy9G!ft_9lu;Ol1)5b4K4?Ic<4~mh*{{fgMg=bnj`SD|
zlhty=ZsKKRc@>H8xaB-;YX^*vJBqpn7jTo+>zpiY?0bG67G<a^&>c04Ky_&9RQ@)v
zp^PAtQ3`m8t3UQ<(M}<6*JY*w%dHyBtjZ=2AtS6d(#wdQ^#|+}@z!2@D-#5njHD&V
z%Ap_@_9MhbS(=>cr%#_AUXCN`?$g*Gl49xvit(NAOChB^)uJeW3eW1<4Jp6|n`O=0
ztova0vAL-KVp(=p7OnfJ>S&KVfW<Y|KJK%asZ|C(`#ihQES+q^U5#ifp3U;%g#>%{
zu+#wDa~Du+>q5W&jFK+V;hkcY=`d~0msd9vN>3>`kk#BoX+xy5Qf0FCDHqi4NP(6A
z<#S!W1Jd_ZJK%KJyZ>lGeurNDQI50I2xshQ;*$XqW+nIqz1IDux0>zwS4DKQ=jDQk
z`%5#TG^EFAkPG@^BOM!2KQaP$ZBcLzT-S25ANdh6sB|DpW4!`rNAubf4>l$%x}#B~
ze9~bE*x_W}Q5RjZM`=$COKaW~z@*fJIvdQx3th%OKelFC!l&S=OkC&sx7~iZiX2_X
zgW}-0%{8Pl;i^+ERsax&onYts);w6fYZ*bHA!eGX3JcDXB-bkchUwwf%mL${Ui4*9
zd!w$}_@5T}?qW$A+H<0_@++z63`J1E+hOPjbgDgOEXoG0r83BhZ~&QwvW^bZ$&dt_
z;i}^O)hwh9cgT6<%(EDw2!=ouhJiS=N|L>L1r&9n-ae@9$Qy0}I5-CD0KVCmgls&7
zvq^mJ^>^Yb)<I=+{}jRrIdM3Ko*$kc+{{?8qzv&xhGe7p>hqhn%`efBcy`(HhJ)Gm
zxSBPjL(R^`<-T4k{1`yC^RyE^fscM)qrBtL_5UhQBGuq89VOTZYU2yC37%qGp!odz
z$8Nw!9G<%3j5T)DO0=+xJmzY&+WZV^+3wq4Is!fn`1&A{M0&{FbU5=__D5LlpS6Cj
zY?%b*^J}QUYbNNG=kWaIGP`{S@L@KrtjG5XVuNmSb%B`kUOR<Xy=t97=e5CTqvt~x
z-U9<di+-g*t4<}!b%_Md7E4I(@l{BtlA+flvz5xMGM`2N<3kjkSc`1@^=V+(Wj{y6
zV@Z{1K!C@5z1JbLl?}{!pqr?xoYcn28e(s=qRk&n7wblr1i4+lrfiItwAzw`g0D#f
zpXtXErB=zwb@@Nil$1J14aV?4XfQ$*N_uJ)=fFTUKfXJ{<KS-hvnB5Y%{<}Er+T<^
z6-`pSN!EUyyz-R&t>$$PC@8}%Zq>nMyR0%}6WJej^qpiRkGyyf_dKj??!EG`D0x_y
z#of%r1izOiQyn;U7t1!TC|N<MW~)GCKYR3%>)oV|vhp2(CzZO~GNeZV1$b9(Z;i<<
zpoD9H0X2Zb8X8*%dJNf&`yxP4LWizrIbJN(czy~;j2dJ76*>VJ9rggcV}=C8)V!LN
zzYjlD8z|{L&Q`4!jx!tdV`Rk$pWJ&ZsZk;8TETOZmahqkJsQ`-as+Owly$!1Fs~O-
zlr)M*CO+;Gp=>fvv|ce|4h6+Glc9d3i)}X_#P!Cg*341{7dFx(cVZBTfiVO6Qif(`
z63apNbGVk1>L=Zdn^x6Az<P#dq%diTvDuh@9*>58GtA!bv^qaKwPIOqfEqSOvT3PK
zO~7E}->OYsF<71p<MGk(I&Vp96cWXKkxaHZuJS@~(G5p8yd$3lMSJDrO=~ZP(~2j&
zMxfRd;(?f&m34ivVfhF8P>^yK>EU08!!>5lXijl8ef|)3DxlNgIsia*22n%KNQihT
z*fT9R7VULe3{-KU3O$)bYR62=;v!q6(aDttwLMm*00OeCuKTO_<<19+UyE-T3coHX
z5?M7K8yy3&U%Ah-6r;ZYilqBXQZ@4G+`?T9A6?Mo_>bLP_pZ*4!8Apw&QW=kQgETF
zDk`*~UC@?QXhKN4)iTUV)nCEF)YO*Msz3+IPp|pO<}hr%e+*a)QQ+E_xvb**kXl5(
z4kw3t76Q0zr*EdPpqa51s9~m|I7qi%SF8T2rVd%V1AFD>hASb4(6DZdz$RrhG4AgE
zPvxo-*yUg4Dz{z2%M5~0eO<2;vWqu~?1Ef(RXbO+b+$ODMu*MFH&zjw9h&kl(ND<k
zxD0U{fC|xj;6vwfrw_X27RIjMx3J`+6!=!OUhjI@?>fkbeztGoIBOF1dp55)b{1`Y
zXj#A%hv4tTgCkV#g~b+Y&tsnVTEsEy(Dv|Diu7Ifk7e@i+af<6yvTIqJT}9km2}o8
z>ScJg+_ekszCEK)bM}NKOl|AaGu1o(VL083pMl%4Lz&VnSaaplP*XZE`#eRDZpq3z
z4UUdRDS#W#J2pSobRPmhUVrI5`S(B?F!*=D7tZH6zmg0WyuX4}vB1|F@X)%{qexTO
zLOU=+AT^k=v!IvtG(U3vy-A@n^X*FLTy2>&{;0x131f0(#|{0lKZD6%7WB6*{o5<=
zX)K5Kr|8egK=#~uK^<mCvvbG&ZBT{s6$ulcKQ+^Te;-ObRI(WfZ?&17Jv@+U^f~?N
zT=MONjpmxVm9+`_M6m_#|DM8Kc#@Ky*A7i~@hF0(+1P`2>QD&#j=Fo~Annc3F9iQC
z9UO`Yj!%$MMdV;XuZm<d?NNG#q+_OXvbquODcQjnretmyO~;#YBnINYukiP8!CE)9
zX3iSg`~uZH!$SK$q$ihXs;DYkmFjVPPhb81)Bpa8QVyAtzf4lHBO(wulYeqV7}kN<
zxX&2NBiohs(~SQmB)`Sw|Mx1C$(tEZ=0@-J$Ag=6+WT0;M%F7IcTALsrA;5ywx%@y
zvatX7c7cT62ZiM4sm$!Dv(ygu*hPh06UF>yRpw_4w7G>}=Snx8{JX6poADOR7k7C@
zOGB;lo=MPhbMe}1_Q|)wF`Ru#nZMQl|8G%$`<W~8ig;f@1zo?4cpWcl$ve}uYp*?r
z3X`}Cg+#|x{@uR!qjr*%+;-oc_ARfY#%B;On_~m|)M#QvDmxsf`yl0iek?&Mw0CUJ
zKXe8t2M~k}@~02VO|1u6=Y&bffWCx3UAw>Cx!=a{*Q>iP1T~GTyozimwu<gf-y$io
zKp2h{Tzh@XSQRLh(SPwkdT4IXStLl~n2Fu%m<uFe4Bl#$60UoS2Nn=VzgwJ*gFos?
zzvI^b`U)N21jnd#h|{6+T7dEk`@!=EA>WQ3zV3ECkd(>_jx=F^{;%qPsF%teX>g>*
z>HE)h<xt|@*+nnXn@g3HmY!U*ACKHhjgGyLj~?D$T~_}`!1FgL_<!YC5C#3ILEEHu
z(-O^QTq>5<JC}uYD}`C(Dt1ZbC$ayktaX`YU~*z{)?VZ>8)GVGpdh2Nn&*tfwJ>fC
zhipH^j#rBsUw;Q&|MXa?=#xB13|xX>{^R6`j8idc)k#MgM`hNMlD>a;2880|am<e?
zRZ#lHb_!Ls({qdZ%C0jeNOLky{oyzK)6MoHHrb@4R!Qw|zJMsI5xE_9&pETyL}W?U
z%+B}^r29W<L2rC;hEC`j%>%wDp{V_$w<#(#ZN`rVpK2*s{X1E}zIEBCZ7s|a-Rhn7
zp~CF5+}`}79$t~#yBn?A5B>D8Eb;z#li@4$S=Sw`?olK6l})=T`AKiJu$9OMzKvWX
z%AFZmZvP6|K&Y0|kf&Lz&*H`KytGqCVZ3Gtr%l7fvP|Um^3*qM+JC7cZlJv@)02=+
za&?osF}YNk>Tt1St&86T|2<!TxX6->#lPGB&`Y;0;Codx*JkhS=vF~Xi|sRS2Hd%d
z)3%e<sv#=nXjsD~_eVDFmxB3E$J#<=lhV*V8|p%%1X98Cl5F_qtJy{|dRQSP{e1~o
zzzFgE@AY_mV(*MptS6kWGA*rm!CU2(wnXFPfs9vH5XoZP|9*GCRJUsnLm#nIk(4~P
z^W@j9(sz<d7fHYRuTIfd1Q{PmUuwH|RHN>+`J9dM%k4Tce>szKWBPxgT>{W>X^q=J
z{P8k5dB<+H*mr+~2wdU9&%J3V|F1IoPnR&15kI7TQC>_{S12M-4JFK@f9=SpQ4fpb
zrV33<vF|be)eXFVI;vkL#9JDT{SpH)Uj76*HMPnM8faN}k$?&f>kMo)0ZZoZ8HHc}
z^B>;(Qdm>tsH~Uy+_vz}G*=aZ0UIzGco6K2zbvh`R%=<Ry+^|Po;CzWSM`5iD)S9*
zh$Y$C2z6<n&eh<WYnR)2a-YqGVOt)wcD^#S{}(Q$1F8f`3C)h%3aKfn5|6i9cXUCN
zxIsST+LE-z_d^sEq`dYT%`659$$Iqw|1}yD?@OPDc#tU%K>z!F>2Fji;~awI>)Ri9
zgKXYc)MlvS++%3^S7Sfo?{+WZogh2uH=N>#;3R!84Q~V6ric}hWpUMej_7-7CG2Wm
zN;aE@Q)9z<)L_Msydts<;ez*zra+RnG^F>jKd~bFfUd~sj_QdW@!tq>K3<CbSts-!
zB8=gLct=D=MlUtne*(EuN07Kvr!xcttB|(iieyS{tt_o9kA-})9@15yOl;EgMqI8X
zKO`P9RS0S7xDNasklOHjw0`w<hx-P`E!g89D*qmSi1P{M$KXUp<HUUy03|pWVe>)0
zrKsRVp4sC*ysmt8DG!Rb`x}S7-+zJpz)ULq4d*}-HibSOO#~T7CQ6e6XeXCNW4{QO
zpwpo#Gp1Ob;y=Zuz-0UJd<I&S4_NH2Q`@U%%K95MXk`-?^YoE%{Ehr3huzPkrrA16
z2sOEWDmM5zZ+jIg_&4S>^n)tLqYx%?LzBl)aq?vqh+E`@=G%sLl6le%b)e35(Q0d9
z?~;;y_}|8s5qJCZe|r+kVqa2}gyf^9B=E)}FzR|jaU@W>5I_LQYky8QG}ADp+J5C{
zDk$QWpz4^)F#O?XUbWtjh%axU5roy7ny<hAcTm$&)T-U!ljO)uDY=7!t8X3SJlh}W
zko{Z_WvG_7OTID>FV`_AKrt}E>%Q`EA5`0C)YlJH1tQ-;ml8SMZkg(>ec!3b)6xK|
z-FQ^M*&C6C^vxWc+P`7Wj*xVvVo6aSdgXt!D0!7(1v)SWE3QbboWElA7kr#jrr)46
z))OwC(E=(qZutrJedl!XoDH|V&Zn#mcb8P_4Us8LZza_Ek1}DA4E>=K{uG91{E=^-
z3jE>%*bezZ9?~vyUU+r4{MIkRaPSDm?HIX*oTtGiI?(jgRP{bjI7b$A`~5I{yc~=M
zn6p6&Sjh{col(#BFZNM`@D8;gq8}kmN26c}mdDlub7mpcUf4$tsk5#~c$6P@aAbDU
zna`v1=~i07Nr8L*RjlY>6PhlWWNm;Ae3u?ozzHS!bSKuq(UJ?#X;bQbHsD&36xP*w
z%9-yHoj)-bf`Nzi#1!rMlLd<@_obu3@2aO5%^@cApi(vS{fW(M(Nnqi(uq8(dle9b
zsO!Om|H6oB61#di>gsvEr2^n%8M-z=p^D3EksE$0d0r^aVH&p+d@y#0czCb*SJeds
z$Ds4zG!o|Ne=d|uuej6^fxXlbOctNu+0I~|oHDEMUWYLFrZ*w#Bz!=xKjh&YO)QV4
z_8X2i67t-1NFt~=mw9GCi<Jb6Lxy7=Zv^L>yQ{H2lFm<QYn_^KZ?|C^j=X1E{BWIu
z4Mp8664|UWss|)pQd5wkSgn3R1a!<OKgD2F74<2uMV&aDHU#depy{Oza~uo@G3il%
z-pAZ3s~vc48cwHr*TVb`R6~IGg41=02D@#3llI2?o!tC5Jsz1L35Gxl0U4E|Mm5ko
zbXvN#Z){M2)iGJVZAjn;ODumt1g=miI{VZ}hD4d+)-(~T@zzd+Ty8Zg&tC2sWjdGk
z53*RK2)Wd^?(u2^d05Sw9gIL@wVGDqUW~wt_iXpuIaxPfAOeDMv?R61`z|9#Foh89
zHmmE7MRq@nai87bm*628K0bdp1lgm9QGEeFL5g;FQev(3muBbQbkWmlW^yP6O{5xC
zsT-9}ub8io?w1}cLSxsz87~Y_l};_Jc@%4*wJ;70Fn=Ub5cVl5KTozA@~`9Ng|S1?
zHzcYq?}OayZB&Hj#nW#AzIJMl`N*gR@bh|-aq=olpJ|YqNiF1c=-p<%h0;*0PRBPB
zB%4i7x-XDfs9Bhk6XCjqDxs5@xLN9Xx?6e{w7e)|Z=X@H*<|C?XAD{u+EC-jUE*AK
zJU;e(puISH^%RCS*cuSulaiQd9SfCndUcdz@{0$FP*e~>W*xKcJJ@g<yp~}U5e>Ge
zKC({=L3Wd~-sFU=Ki0GT?a-tolo~7WGMZ?BprK(!XBVHG5l|latx@8Zmcmdm;t=O}
zx`nD3s*n}uJ?syUe~6MD<G@TqD+!OZPsvk0o7B4GhqhU}JgW<D4W=q_c0Sf}Eb*M9
zhZ8y52Wz%30rO*ndezi4)@qA^(N1*qh5$e0Yh)!0c}V>1WhV*aF=961+W{?!TnB-I
zE@%fB7fa^0$6AMZyre`uDOGgUT2|*tr3pRTikd)MSO(F`>I4IyB_g9Ia8p}>rTL0#
zjEBC6K)yhzndmLZ>W9JL&3J=!Fci&om!Z_Kd;Q9tcPcUHmwa_n^7E&^F|$fJ#H8d7
zFYyYzTd|?MD6_2=?cfN#KcmIl^S;De#rPM7FrrvcuAd)>QnCURG|m~OF=fx{y<(a!
zw=J-k{Pw=SVv%DRCG48f!obzLW+<D^(lN}6SuuKjjyby$;kay2A%g)pGoGh|;~@O*
zTDaW&cZDRH@WQBV4D&&4omuAewCY_3b7@y=S@>9uka|0rS7A6=cTG|8D$z2j*Ev6G
zzSwlM&&7N6-dS11%Z)F!=jGTAiBGyM)>|H;sPWbH3KLIBL!mPTOUP<p=#2k6*5?h^
zRHDMj0xFL5jVydRwmHwF2?9O<;&2}#agjvx1=n(ma@RM8`Ku3uWG8Hg?wc>0dUUfd
zS9p9d1*3kXbw@?Rt&VU2mfx`t;eD|VbL!Hl7$|Ck*`2|x0xxbYq3Ou5a|!IxNAB#r
z2|R=i+c$mdC@tesws|z)Uvm4Gp{ji`12<tFqnO9oa*oj(c3jyr?3R<+<CWHpI^eB5
zIN${g8Om!pw**jAiE?sTPJ<=NfIg!cJ~xSF)(<@m_URL*cugg_;_Q1MGR%yWH}7}E
z0UtCHU*wBtbk!8eYqNZu77#z@)z_K<eZ=P`%b7NqxEm~ogxXwVhfAbh>pXP&DvYCw
zLs_>Tq3RJ0U^0|@ZB1)3j~$=r`klr0IlTG6lc>PK-dYe``hAe(I4WsI4c85TCxKcN
z5oGOj;I_RdcYM`+5M1(zG%U9_y=6g86aOxccZ}=PhT-})hp4XZxE_M_C1sUaxUERK
z!ZN1vse<Eb7~Emh(sG6glt#05C#_&r@mDl3@mL$}p`nZ-l$fZb4jiL_(86YwNeMI4
zSSlQxULTku<EYWA3lo++lJ3%U^!Q=?D+Sv>JvjWkj^1kho<IhzPskR*B{m8t$$qfe
zO1ZYU$J@gZq&>!{<yI=3BYfQqDvY>gZS6JOIo&Nxm3g)~cZ5xqBBTmzt;8O$+j#;f
zdmxE};<eLYzO302paxR*kAC{=egp%v*mXT$pKEDZ$0D$BWND|{T4ATg&|4huJ8!-g
z)|{Q0xx?#hbx^on6_45Eyg6w`-bMK^&&D{KFFNf7hE@;>Z_Q!S%T@o7<gK3Q$o+F;
z9+S-0w}%e!$SsfthhAhxrh8Y>aLb(~swB?l;^)GmJ$9+$wqHg({*<)=<`8)m9gmDo
z!9KC1_uy44SSO(ZcTTuTB;DEB+FAPq?QItEXs}|rMMMoZ>(}J6$w`b@Zu^p5JIz6u
zXNN;t<wLoO4OV!aQ^Oqq1BeU`=5!{4T@};~KwVsn9C~Dw7HG;@R1$75J)TQ@!TgQu
zZ9|jT+Z;QOh<Qy)wPW>sYY)S2y96xzh5XD)H(fwo5}VlCBI{!qgx}cQ<70(82eLwf
zpY(OlD7w4n+3y-H2lvXJ>qoEJZ*X#1^YCcQD7%1rLUsA!Y48%3?5zGqOs8zJ@Wo<`
zU7Gp^^Aoa4jGy^1(U&heU*<vS)>>gpXIe@=r9BYzW!U3#yQYhu@=tjpN*bqgv$Mqx
zHYSX=7%bi;@}6ulgp!RB&5?P3xg=t+w^G6?3cnv1yYOr_gpBuzLx&LLhS^;pLSIh#
z@Y&MM143t<?go2cct0f=x4+A*WcsL4HL2cKQ;kg2igL7+fum~Gl=It_S9i*}?^1_y
zpvYWZgWa;_ksEXywl%YPS(-LD>6xribyGo0EBXe5Ti30+NrSG*bu@#`iQUSL2}|u0
zD;|{-n!2;Q-9W2APyr>|kO_}auM9yC!ey9>l}o562p=-}%pZrWFGDVQz1Zi(KvJ$>
zsEj^|{bn#-@~=Ty%~&)iWV|x7`q{@RHKy}>yrSG())-^(9GMCDLkF8=Ao4R)v*YHl
z3Xi5M*5Xioo8>nZVvT}YTIu$?nYlGj;z)bD>$&3n`AesON4zJn;vD!5P9XMu>NxP4
zmW1R8LNl4jd>OCh9&9m0aN~IxN2!akeGTM@b=|wOi(ss)<w?MNu;=+wdu)Bb0j4@$
zCPu*w-_Q&LFe`Cj2iZAkx9HecA?WsU%?(v4D50&f3Hhoph~GtnN-|v9<R>Y<=<iTV
zL>}`prY2>DfjmUIN^BmdP8=R;iR6(St$&gjO7A;;RF0nRRX&MNB#%Y>nF80kNn~lt
za3iKna2N;2%1u?6x)?vvX|dlhpKT;7^_rEPFt!SHS%lPOG-zFX5`%w39W^qNV+kvQ
zWr?G2df~=;#LXT8`q#%Stkbe#c|;-YJ<0PbyTTpKupU)3?HbNssYAgVXd9mGnpr}x
zJ^c^36B^s`Pskki)1T-lX7}!rrQq5F#K{(n-+$FPrqO@+e1Jc|brAm5mWAyx+MZ}2
z|8dfaeT;K<{~%X#oo720^*G;SLhdU+eMo><e+08a&5*9dX1nGu8zwF@H`$oq=X!~n
zw1Bi{DI+aSQiHa~M!OlWvU1D0a1k<gfFKw<Mk;9U+uo@mFK_CSd*3Dq5bZYjl(W>v
z(WpJe3(Q*KuDRJ-nVrZ9emL%v_lHDo&;1jePs@6dQ!lQl>K--+H_^6$z2<aSz<3_{
z1ZJ50x+L8!qtedhYTdyB63dZ=O4_4`X=IA|z6-14P1Fc2ES)3E%BESp))_LCSz?>8
zD>)L^*XNYYmMK?E!K_|^OEx`kFgA2W6VtuB7MB23@9Kcwqv@vBlas8*ogCVt@Qm2`
zQocJc3n#C6t4?yWqNv%1pT7Au5)}U~xp$+dSQWplHLVv=zvOWR&R<V)Pn+FRJpFOq
z)0)*^H;U?bwQjm2`^^Z>ZsMZU%_@u`J`djoJ6>v3K6D}f*#Yld7IZKj4-(Uec^Yiv
zL1*%_;YE)ypnVD$%;TV;E6PbRT|KQZ(ufgf9lhda^)1`cQO<xyWK^o+3O}KIg`vN?
ze~JQhaIAofc+qZecZ8-UiEQu1ba@*TGOYAUr*gRGOZQ|UpQ61lZxqr=WxQNWgt4-C
zn?webjb|Z#<P9IKIr7-viSn?47G}^7267K`25qFZOU3*oknGcK`re7x3l&uo0L}J_
zHf8WDAK%I3rX}UIT<Pf>EJErE%gUAyF7I>frGDDOg4xbzJ!G;L^9Ga2ZLNb>>Ttz|
zCM#!G#Vca_BAjyeR%0qFeIB6`6zg*;dItd9jfBkR-Q0pf+(uWfM32OxyfPlKr7W=r
zR!-vudr6|ND|opcIphdIwng3)i2Q=niM|m$@$`4aZ>w=t1RA;&Nbjr15<bzN;13N>
z$g+}CPjQN72cz!p?m<XJ-ecm6Z#h4N;OjuCw~NI*PsrSaKkjk3A#Q=9<3kAJPY8nd
z6*M<#r^M5~JZnROgvA-ffpw1tXv!hct0e!&6m0`d4iJFER$C9P$r^i6Al&CO>)x=A
z7=^979l9m!;SbY46$pJ{<S2!P6TF7}KjLeL*Y~L2C@i5^;ZzS%=9{qB38^$!u6}*_
z8iBRdfR0l;<X_WCe!cuTfZW?r7ca|$ByRn3=JW<VuO`_^q`1=oXl(_(Dx(%hChqe{
zvYm*lmy*HlGes@ysovmoFZlRG+Fzo~I5s%k^$7=acLoKyl~~uLH`|tD8Ogea&Z!J(
z(-6$_u5EgoL&h~O>1!w&n`8xjrNIZVL)ftsTM-#+Rv2}PT%eNbn543D0Rj7Bgv_h=
zX3nq-xFgSFjs`O7Vfvwn#tF|M1Ij^{`u6Fs%&T59U9;6#wQpAQsu-_Ptjsh1#S|l&
zFQ^06Pln&%xWT}98jL%fY(sGg>wtHf-~T{}NBUd@ajVu-4o|q|Sk@%0KV!pLDHf=w
zC(`HXqB?yzF>Nw8HhsX8EPq>)3gxJoO@-j&G!FF)@A1CW{sjUPe1Ilxqq32*yJN}s
z^vkr|CGGk3i(gt@kEUk)d3)lGZjzd;t*!07ET7!dyFw?wo&vPDmsWCh;}`;8OUpaH
z_u{7SV(RsQHk1=VUzlbN>)1Y^0AY9t+(y_-*U&mRk5_~V?UaYC)hmYOq?Zuu=9<Rr
z{@8x|=0=bnV6w?cm*T0tcsO0>u6<BMR9F*65}?evhW0w(ut@O}&8OJ$nA6mR7RP(0
zIH=SLg6;3DxVVUVLaM!?nvMn|CQ7_A%CA2&ZVJXy-Z$o#N~G6R;x#6f55Ga@p4N~v
zTk2F=KA*uQmf&okE|UBTzQM}03(H*W!`(GoFMzKUNHIE(vLrr0tvxX$w@HO{3}lPl
zW7t=oNBgX7Qj<1GZ%!w!L(~A5g(y3wDK22B$M%I461<`xq*}B4s3C{;%#p`iwQqc#
zHb-HuVSd{;wWR#7WcgiG@4Zu8NK0c?aw?wRLh9_7Z<N-a0Te5GSK~Phq3KoqU*OIr
z0<C*|(iGH#*HdTpcyX&Xz>g@>Kkl)doRDdIwXQj@*fpS}qo|OYWG)MQI>inDGP&t9
z0Kc)t^{W48)>*I*tp}dY0{P%@NyuID(Kj-dL*lfCL*j%%p8B27{;XA1N$;O2C~)h(
zD)_v-=lO!)VbIxH2+ptv6TZ;~K`*sMH^dYuYL?#uZj&3VrhmX$r@8JUykRV5>`+;m
zV`;=0Qq-(k)29}>8fI#g=h9<PwAoNN<{!Diil=07uhR`=isZZ(EYybXnKzyq@lP?2
zLxOq)8MpDI9yT^lKVs@X`!K9qqE3N=R!W~@D$jvB8_1PNm~n@eQp%@%8l0Vy^4@5y
zGu;aY0k2b2Iw_sF+fEM^8Hout*&Uq$|75&wQKO;Okm2Y$%liHeip}Evy%j~FxXPNT
zPj_IOZV)$E?3m$_VVZl-d9T#DF|6U(rN=dkTfw+%)U8&~XJk5Bh;zHxDv^F2KfLzY
z`B+_2pIEQkV5uEF+iFs}p<8%fPlQZpB7L1>U;SwOzC+Ce2BxAFh%%3yAI(xw#VTQ>
zdiN*o=+)&nrgl8SOa3oiq<spcLnEUqgbhlc-C2?;j<n}|vzlW9MwtDme#!@;x&>LB
z+`2OXw?UAr2(+!bn>5trvm?l?&Radl8pXEvd8KK!Hm%VRWU^Xma3N^=jdNI9@6Ue^
z)fV*H<xIa6;}2ED%Q4~$_%f|i3~tonEeCC{<G#&|vB=j{E222=Vvw<|Eyso$|Ic;V
zpP|r!VSUu`9zOJC?Uyw=pJ4)D*QOCzF!#B}$8(<EFyR6B%Wj%fE_hV7&{TNiOYVzC
zd<|i`TZAr$I8SG!1~AE=IcHn2+B`hOOF*D+o%*$%UYv!XAM*RC%fXpeq%P*|@o2-T
zX|^b6mI(H()Zqd&U9J2muG4}o&)|2|4vC}(BJHi4vFe8qm+7r?7E6LQzV`{fY1;CM
zbDfI2y<K4>drpM48IdgR>p|g3v-7|`TJhtR^T!`x<iMA|1buNm|M}3h>?C%|jx`bP
zW_6yTB0IPin|00gqui?SWDST$OYdYvGGA%51@=P}i>&bQ6|~rF*}YDJY~fE+^rcpw
z%!O{1`xAeSSqi=BEp*6RAI}XiaQ33(W;)Q;P3vmF&35GU<DftgbrD+)?|FvS1X)3A
zE%fuWY7X<&Cy+y8cHO&I6z9I640Gx&q%bFhq?V^LHQlqdWP&xI_Zp2jCo;8s^%mY<
z1leGGPwzy`sc%7n-PmVuzV-&y3+8{IFlQ~X7BfSu;FU3b@BH?=6WM@zviD?8;zD-X
ztpA1bT?6No>3G_uBKd3>BSE+={nODpZCgW~IR+MXZ<lAF)8K77d=h2I;`zxIY-I()
zl}J&bKOUUQy-WYoYZOeWMn^pj_Qazdhp(*r0PjBwsz*+kIy=ZT7oZtay_&|Q1bq1F
z@NSf!VVGdp<?3|DE1x`i=L}}0Y`PoZeSGK*OLEhy_-quf{97=2?nU9rQEq?sg|Uf0
zn~mSISgLfIBY){`P34m8jalVy+?Nd!Pe<rZWS7vMOMIIsrWonKZhN20+u5l%!JuO`
zq$q2WkArYc0i4nJW+;cZABG+j&vI&#-Q5)Dj;(O>sYt+$a%y4MmEu(e5W2?odd=Br
zv#QydVjFSP*D3Te;rY#qlY@ioouo=52$<&B7?zz+z8kOD30U@@(_>2MLeo8gn+;HZ
z4Z9J?QQuC3Mb4?`J^lH6xAqiPoDClI#r?cZF9c)I_Nt7?wrce8gN6{O4R|^(hlFl$
zj_O0A>2-H|CaUewR}dYcB1C~Sk<U0=9xh`Fo`lOGegftl2bT|R;3Cw)#EJ_M?i8O#
z1sRNM_=^*b<a@ji`$)kj2%27Qo3ouDx)sMveg~i7T*rTfcM~FOk<T`d=1+Z^J@WvR
zDVT@Qr{nMXtQw%poV+XrF2jj)tW#l6@tYGX?bnnK3fK&Hp>1~e*X_ujX{}#lGOl4u
zRvYD_c-HRGb__NtqkE?FejU8_tqAuvjelK|ds!1?>}0`ij!k10!FnFEcD~`7txu3M
z+(d6omaUkcm<YoS9pwd?ru_%bqr;T<{@gjym!Pq?O<j7+e0(3oh%L^E`hOL3C4~fi
zs(1(lAb7_%`-g6aLV=(8&<-1g;CyJyRJK(B2T8RLL7yos)Q1%yu0R~Ed<YJ)%NwmF
zwMN~sbKwjtbc$N@hoiAojfhJpQ&6MZqlTjltJ=bFw>~~JoTwp3g2Sr`2pkw6#!NLt
zK&bz9->yxikS-EjzViT(rwY40KXI<)_~3S_t@PoJVqizz2APa0xnciztm7N;riLat
z_K8(7LWOnH-!0G}nj!Q7i+cW0s{HD&G!IB{^`Pw;Rqz*wsZBxpH_GynF#Yd9Ung2T
zsp=<5XI{LmBV7xlCM&xgu`165ns4=ZAYNp#k4=^R8$?nYDlc9+rsnk%3$@A5VMGB$
zK}Dtgj}2XwK5~5ecQCLvWQ+hP;YxPA8gGkDA#Tmeo4=y3Y$vOX{uAr@-!Whpyo<3m
z9*q;5JOx0J7vfvS^K;z+BdoQYhX@0_UpL}sn(DuN8%pF|*=J?CxpH95K(0PtbZL27
z9DsoCT~)VYBM2}w{}*M~X;g{UYacU}lTJd$T4vTn)<tD0M|akV14Kk8R(^Qke+l4^
zlFEPl_EHt->{b!cX1*WnS2yx{GzhFQ$4jk6VT9<Zrn<tF<rkcP5dr^~#R07ke*5C;
zcq6nIjvpcbmIt5iz-oIVqB_xYKYjgsY4OJ&{qs)Y+j(yyG=1)S+*7+cdK^X&aK~1M
za@2RQLXRU`>mMKDulL8tH-WE3omwV(PbSe_BuY&rBk@*4qUBn!Ef<MVOa2Yu(N{wk
z(WncmYVnUsR{i9;Ce5ZhE&(mA_23%4eFy{TRZxZhn7H`6q2(V$3I*-)gRci?mAcsH
zRCZ!=#jN?e)Bxs2x{o9E@FSXDWOPuVF!uU&f2Th%sQ-QYLS?|FT?En|mPQgKPbMl_
z{*<P%g+KQ`PQ||i9MlL74fuxL@K$pbFt$}UfZIRvR^!C{nHl^CX+nzG<NG$n4N@As
zb*GjaG}KWPG-LK<0@`=3##+L&Y8og16{3)eSe!J9nS7SP+{%NmO-9yCV;fIqT!~MI
z=BW{dx;-S4PwH2!{l7dJV<=$&QCPOL{XCVG-P7SW0{BvM0OBF0tSb2=mgxb*YD(^Z
zyeR+AF97zpzM*JjHb%`BM=B?X>5xL`YTpxT>`j#rJ+;U2NZgmNS_(*$B73om{J?~R
zr;3X6y?9FFwT^jh^N?m}tS3M5TM2d^)HxeW)XRf*eEn{Xj$M0?{Bn-(3`ShU#0_Y4
z0CbP<KtDr7o2`B5Ptj-I0WBDT-|RQYsZMcKZ`T9otHs^Qgyfg2{6kJam(3o`8Qg7}
z1A{M`oYlmHUX&`&h$S-MDe+isYpp3DWtB>70^0VGWXak$`ycH}gF-7o!|~Z=DB!JL
z_~K7-pfcF>Ug|-O$WlL7dIbg`QsnGJc4SOdT85MHI*F^QMuQfTZeJ_{1JDm-2b#Ji
zKy&<O#U3NY&qx-}jalgI#KMQ`I*f0xGxaSkO{fr~0lI%^CuoZUB-F^3C6B#yiryBL
z3AA5NFYf{{7=8kn$7U#}!5$KL5P?13S61zG{}=dIw6UqsXLD$TV3)$gd`usBiTy-i
zfi!bB<3a<~zMKyYf)b$keO==!$p+E11JG9y)lR;SILzv~(*C}gubDC*a62HGVHQD4
zwD{!o)=b?K9j1o8caK1aksWBL?nrym2$c=z7ycW!3n3I(#W?~0TPVMt_l4l<<<RX)
zhdw?M>sGJAPM4c!_9EDC<#g9!!e^rG^Xm(K@I4%sMIF+~nmJqmQgdt|i8iklIeGd#
z>?%X~EC(qVk<&^zaFZ5H(1>0kDBn_2P@sy|cFQ%vpl}~@w65FabOl|Un`XOXh9dVE
z7&6n-Tl2=GWssz7&j3XstNzC;MaW{rU;g){h$JM_2=DSOmcM=~xP1vcrAyz4ji%(s
zsV|q8&UOvzdmC8X@A7$D0@l+ov9}7T)fY?5-V;AmKyTO~4H;2VRSsPC{!a6AdU>Tc
zR0lNU?trFZmvt~wqLWDVSs1H}WZAO`AvG{VgNW?J25=f8$DAN3^pOnnXMj&X&SkW^
zte1DITA2TIRqn0P`19Y*_`shS0wg>NZh-LbcYn=YE0n{-Q}5uHVVoG(o_{ZMf;=%O
z8a}!Ggd~6n=i*Z6l)TE;O)+x^naGGIZxNxdESfPvKCta_+jEwh-9BE3kQ(SWwF7i`
zSyx(~2B_*lMs{-w3LHnZs%=sUd^52D-9%zjez+X}gr+s<b4<&%`m1V>^mS79Ko@)j
zjC(oYx6Fw)zQ8a$T~md=YbST_;Z-9uo!{wZiU$0XE{+-lj*b~Y$i{NjB5KPOpDzas
z!Q~}@`mQeSXU~W*@xxEBJD5G)T>EV&XDGY(FC9wTirxS4;d%f^RwK{!WI2-O>PE&3
z*p=@h*-4kY$Db>t1n3hY0XSnM51Sa~u`5$#1}N%=#>ZEBr~LGTxj!aFg5HIbrQu$a
zI?>69)o|fh@+wk8_xRO=#NOSoO{Y8|&dKN?%WBUFex?bF_$g6PZ~9@Eyge?j>|Z$z
z{uZ!2r@=loB~2IByRJQ>!Z}qi)g_83Ex{RMif_-J>M@#{=KPC>g<4avNX#Jvhm5~B
zkv(M%Oo7R{<$3hQD)KPNEF%c1CmMGmi#m|)ImbiMjWo!Pb3TCb6u${r7Ga!se+Vcb
zJ1jup9t)6$z$3F8kJF%~50~D!o3w}<B=t^9Q%3a)0hRvdnV^@!>2bf;1M|`R?O;$+
z8kD6o{dTmityP?om<KwViZs}sgG6Uecanq0u@bVUQ-oI!G($%>xF1ToyVseh6e^^P
zc7j%N!^N&hRzOIog9&(-Upm%8-9aWMPrKYiVMy`eRtpsLKh0sptP(t2PWEaPQ8W<x
zB%93tW&UiXfUFfcdV#I4ZjvAL36<K;iy{f+48SZES!3Iw42iTNdc~{`Fv5ZU#6bSN
zMDoG$DclRr2zs<ahvfuj=%Ijw6iIpVaBA4`LBrltfKu^%FO!k)es;VJ5tdv#<_E2p
z??z_;^YNqI9yY+rVziuz7_#RETr=E&WWoS696trahxTfol_P)}C4{VI7)^SsDw2^Z
zLYdt9z(gAn|MrAOuB8b!Em*9UljRwe=nU+_@m8w+L5+JcBf?dwOk_r7P+bvscO+-X
zO3g&MY508R<{*3v@C+Cn?<}$!_uX>eN9h*cr?6?w|I5c96nx?7Pmu_k{oCb>+*h3k
z;427Xg`bxf@T{*mHe%>a;JL0_pMXIn=Me|aBTCek<9M!h)Rq8H*NJ3RxE04c^y;jz
z4_O=mBOz?io?ekUs-DpHcsRxQ$@ncVu)b_hZYRyGOx`P!Mke|08lm9Of*iDQGUWeI
z_TKSS|9}5@*%B#9$S5JZ>=BNH?6UV>$Igzd2q7z5_RiiJ$1HmvTgY4XjAI?^`+Rx7
zug`T|x7+pmeER)UB<H-&b3Eq#alelVg@Vb|<7Mx2b1;#7u%<-H{X*JL4vfQZvd-2z
zntvJnT=(;(KSd|WXRot$eW4bK7Bmoc7#ar@2+1zgE)#|hfNb5ZjRt32k*9=8lrU<t
z#xAwu2+)qfG0UjEjttH9w_MbUv|>2Zr2Gmt`WK}clYe=Ado%6{cV7f!lWpoHTxd<O
z;3p@8fg%q{8074iHZLq_r<4_i7gcI~H6Rk$UoE&amFko#nl-tKH)^k%piQE19I$h9
zQ@ymd>ekuyOOuN;UC_hLjGnF1fyIRd1$&-P$u{+BY?IB?=U$y{oex}`Dh?~ZL<^6^
z;UvNB6NFiFN+Qi9?YsalenC&Fmx|w&{p_n+-hhq&SG2N1q$^@wmkD#%DQW7?Oc>5h
z97cpdmRJ~i_)7EnJIc)gqK>&)qJM>IwAaDVQq%w_X!v*87lTbid6ocl%)baxd{6N$
zh-1wf&cNv7{HBUu9ydv>h(@xl1C9UKBId`+c^sqFI>BK{249V-VwD@}>%76v!*hH4
zDRR{eJj0u&j!COiv42~dg2sRo&#t8>OMmIyI6N9o)?T~$NX^&A!w&?c;dj={ZadP(
zo)_@W1lZ+C_n#YHPS%4I6BxYXxr;OXIsT1>_K%JjR@`(i8IV!*vJGjpgiC_xmCWP~
z(F5~+jFEoH?1TzHDkuyeW9-{8QAAhDLd3}a+0*ungq=fIazi*8CyFR`bcIMLu=Z9m
zKX^+yQvyjZ=@uOdgRHCi2U+Vm-GwHiRhcb3E<PV|^k*D;*lzWnF1lE6EDX_B0rGii
z_PUh^uLjO@aH-vz_qOa1PCd|QdF{zoJ>okBEL)KQz66-g8RNNMbfr{ox|bEtQMwL?
zZQt-dYKv~s*b+pG09mc+;c~O&VVfzNp<W%A0A8L(K-KiQS2OWVZ%QTI9$;qaCG%Nf
z=iuOQZKT|4C@yHxKns68-R=3r>9g9G3Yah_doq^16z2AYtZROQ*rb#!m(6@ybTdrj
zUw8ADn2#6k84+NZy&+QT{cFYb>#cvaRLicdY?p*q4!It5x=ovlwQEaGt(@?_d`9~g
zLs$68<m<G)xzc#RK1bHo_9J+`k6$^G!b6d86eNw*&@}xK04_`WmHtSdMd6_We};Q*
z821l4CQwHbbsToHl<+HNSTuKsd!HH$0QTNwYh|=?eGb7GqneY2P%`)9MF6M#ja^|8
z*hej-$MqTzsJ_WaDER@qGZScb&!NH&UQO4hVUo*2o!93=8*2ueDm4^Wg2fZPCi~32
z!l<f74@^SMrh<E>G$wol(9ix7TnOd*oQ}s6FO3<04j2<W+A!CS2L~*CwCe6t@8g>j
z;yEz7;)xJmS>IlL;Cco{9bRCVv#ugTGaJ?Qa3)N6^`*B9ajY#EpC51;ezETQ9J2%B
z6yX<VUt30LTr$T1`XOVxc9t78GqVAO?>tgat6w1YV1=DjGjn9xBf`PqI3c(;NA0g$
zu48Y;87ntf?a{)>4NVHX+&NL3J;1M?eC63pjsk^FZUC6XcUhXbu(*<bh81VVE(EMP
z#E{ib9EdiD`F-X7lt84)KNxLu;d{{W-?aR3;GV8PCYGQTXgBmU*-Y^M6S)0ShIwO}
zXAw5>liQI{n>3ha5niNTUn0g!Z9ecUVjxK=(Ve+9ci~@>6J!?5N2m5pl+|#=1S`LY
zdA5xyV_R;Bk0*X<sNY8!h1+rUb`^BrRu#S1u&>tQX6{qOXN&(f6@-_@;QTxVia7QG
z?~pd9`z7AadM!2<K9M-zEPR56;k4mYm07+#5c93t5KRFYtHw_g8#D;+woLC1|BMB!
zRBzS^RR+&2J#J9RWF?Kjz8ILX&zRW{`><_lSPK1+o?gd^gC_$i3^7xRw+jk@@+%sU
zw~QYi19tpwz$dVTWqkHK+}lZQbe@dIVx_R6-$67H1%$+0LvRS;#5z0M30XH#Y8F@G
zsJ>;l(ONRF5>k{i&YVM(KdOC6d;<dJ2W3_UV}YWlhKv)^TnejMzAx5p_C8&-waD9a
z5lvmw#q0zxXQ}@)&FrPeVg20Z_2d;I%38o~FxSC@r^r=W`-w<9|0>*NdQ@T{$qNXn
z#8F<!6MwdrdShI^2^a0@%1HRva5}}Nq410~oXf1&p3@v2p<c(NetvNN?&6LqnyS18
zidz6gS_eSbd;Gk|0}HAubE2_OQvqIqc+hP{FQ<4(RYsqq7c~Bk!|o1Ym^9EYu#wxH
zP*>Yulz#d>7W0$JcZZ;%>M*S-^7m2VMJhtb_fsY_S<?kd?f~}eR(XW~m8;Qg<uC9a
zVnwL(A|A2-{En^Hu%rIGgzRPUwO~NM^X@@NIZOF-Seq9qhOd7iaXH5)&!pam72908
zcEY5Jefeu!2`Pwz6IYSzkW|aQz}%XgtGw|3Jx!FobLkU7*_&ZH!Bo~<>y`d9PxOn=
z5=Szb(ym^0k!B<bMhH7&)yXttoj(Mn$mC(4$Vj>w6Cd~;MDs1LCPt4h3Y58G@)SG6
z0O90KLI^7l!Fd9arn!7lA78!2gJ%X3$JuhKhM3aVQ8<VfZvY>D&*`y;Um{OWtXY0}
zh?($k#<ZnmF<@T~#@Vu-Z4e-a<!F|3W5(a<>o$GoRw>V=n~-r;C{ezf$b@qp^&1?O
z-FI`n@lI>akh%iF-HMuu^*DX6HwDUfr>3p$u=f2j=@!GK`XyhMONP-Zv90z*Ov>}*
zAO_HHg)p6XwUe8>wY+tgtFpMmw(yh3|9pJRD=;OcG_ON}%ZQ$(gUa=DJghJ{I2b_x
zsV@LS(ghsECNAAxR<Iaq(Y~W>i8%sG_`5}?UIydX;&Iw%LU^*%azj^m`=YavmO0G2
zt9E)^r<&3IO}cwJ)R()?sZ4uX|Maw8gv&#|#6iqwkEmbB$<nT0=-}LHxq<G8uUzMd
zs`KvOC!|yID&kJF9A$51iyWoLh4Z>IjoDOZ`<zoK(=>MVCO)>2bfLh)Gb~)1#px7`
zeC-2g%(6##S#-qb#&l%QhhG^dZQU8{m7}OM3dTu11>y7ohJu{7Y<QyBTEEaX%1^Ji
zn!>`g94CQSSQ>d<hGHb6#8}47@+slHVV}pzQcrc9w8Z<GvqhD26$ndgohSQsvJ<{?
zzv#G4xG@DZ8*1{{T^?)jE318h<MT9knEV)~TBVsjK}nz0ru!liTe@x|k~&c>m6PF#
zU6!r>_%6!bbvW-4M}LL*(iZ++=<py<YHdpGRgi<lv(tb~Vs^ycO!w&3iPv8r7}0$+
zo~X#I?&hIbuM;8b^o+^T4P)}z5uyMkT%id&zz~1FMDZh68D6czO__vKl3+wRc{1$N
zpa^WbSw&X3;J%?O5<YdZCFfnwH9wG{vW<NrF!J{nX#cYX6&{M)4icAJuyN?F?zz3#
zU|hnvOm$HI5fW=AmcLp)E4la8)T2bcT{~H|jeUyRwql&IASr>jcdpKvMsTm$?}o@D
zAlVTI2uOxgBcEN|DXbu#7=PlFnr}Asm``Fo^W5eTh#nIDu)cS$?OlF8X=9c{h&0ou
zd~DNokk9vceePs)cr1apavRO(iD*wFkL#7AgqYEqw7HN0a}ik?jc5;v5{Xj~DTZHC
z;XC#V<bH2bUAJ|LB}C{M2YbzpS#ix<3D#Zg$WhJ#K9q)}nW}B{6nLK#_n-uL+lJ`r
z#H?4~p)rTm+{H=Lg?5<mfyN{tU_hw4`z0M%0V>S%oYmgS^gHftb+y!nW>ZHHXM4>m
zk$GPt{ec{Lm)X?dq-dDvx!ZR9N)=f$d;x@_zs<1m^{w`Vj<;phj|24?-<~m^YLd>T
zm|}6hN@JpqOWqpsZ~3c%N+)bg$)C$enwD6W%jgyH3n^IBy{Yd+{iW0Sbc4zmf}4p7
zq<Q+WsI2VL(!up$5lh-=GjYrO_%t>lu9z)lF4B+WT<ty7d6VzBF(bVU`N*(&dPX2I
zCNf>8$QlnqxgidOZ0v^o@)ut&Ko6F3$o2Nfe*5`?0iSG~S)L_RP<D1>qVtsKnUYQU
zUAVpi|2&r6egGk5ui32CYIV-ahiDwt1fx{z$*W=q(f)NsRL#aIlwQ~EGEWA}7+BEX
zg=PvvDf~&#5t)psF1+PCRuK1$-SCt38F{vtsHj`sRn+>P!j8LtmDsb`tk#@0s5pD-
zSE{s1qEk4(Q)i}pO(b!w5Sh%RrW0lwF`_XR(s+rPt0nY%aD3RfAfY6RwB9ax)vihH
zNciS?VR=pV<@hQwq3_Q2?#?#aBJ`b}S;duQs=rL978^2;b!S!QJOs8Uta{%_?Rk8J
zF!aQ#&?yDlfUZqlZnEv#oU=<?a+K)lKAi=wrq$L|)tqE0EKW@Wb9fc^_oNc?V1D^w
z6<(oFCqK02GAM&cKlyF85Uxql#%_uUSNTY?On+~5v#U{-N@K)w3Kl`Ei*08NW+2;V
zz=1iZq7Yn6#ED%=uFMa{(U>Gdqgq=5pT=nO5?W#d;s{lI`xnXVIS;3P$d*24QZHE*
zBtpq)(n-wW@rjB%^THM-RWqJ(QOxZ(1m#<YGun|$7fua{t80MT6P1#VBuONAV5ap<
zH@$^ZP&jioA=7w-_8#F=BrOBN;-!|>ny~)3RYW|~y!Z0Fka(}lL8ijhJXh{`p$EYs
zA)BMV?t&*=ilyNn;mGES8zM(A1(9PD<ZZXgir1^j+zkBerLPDG01=WjX4%y6_8pgP
zK=-b;$yRMwcUF$s#2u1|v%BgsPV`NtMiDKds9M)O=Y`nu;6BwfwUfQ9?bA|V%+D>(
z&+QN0#YXh1UF{d*-+pm0yY*!ovFg>NIF@T-v+C8Mc%aiS6pX<-Kk%hl=FVkh`W9BF
zdlKxKcmVziVR2gkAxSd5SV%2gyMngLiLR79VAdZED11J6eyS-(F0Y-;ofhd#qY~fs
zSC#?chT|o^rqylH(-}oBzSX(ST)Bk5_T^Kpg8M6nA~X1m*Y}Cpz-@OFFAr;Z+oVc{
zI8XBq9M4!73DwHUs%xo7aM_%KsBhQB#%$_^v!AOrXUEz;Iikx06zp=QXZv=cI+NXY
z$&qU|C}Q#$$KUb1q3h5^FKy>wE8B!fuG$qvMD{h7i8R!9S!ZvqrH#J;{8uz~Tpli=
z)xDL5wma1yH$1b2kOAkEkH@oH&#DiT!4X_N0%qY}5b1g0HM;>$jD$y}MGv{z(&=cr
zGXj$`S-HxPMJT2^UyZPP56YH?p70n}U{}Rr0~#-?37BXp&*Nv9e2?%@Sw4E#YyS#n
z!O*wnVJkE%PZV&>nX4k_GV7cuGsa|6Ig7ECP<$&lbhr=c%vHqi<mtyd7h8X7S8FPT
zFR^_hl)=mbn#{605Lqp#1R0rYa|(^n=79=pS5Is<{7qk1m}Y8!W@7;Uw_%b8XU~er
zqd^sFR=BW5bt;FEoyPmL%(XmMKYriV%kfrrNp`Huorgj}a)-tkGg|9$IK~OL&N;27
z_RECHFu3jIxgIB+tvwlJLPcR?O)5)Hl_c2;zx~TPWjw_zX_>*}x_N_4wfq-eA<tsZ
z4JDhB&4b@Vi)gev2XW5<ICO0Cs_<<^{oEq@n5M~aFPv5LNL_G)4+PgPtGh$Qco*y-
zNTBFoBXjS1gS$-i*>&SAuK!Koi=zr=GA~?CNvM8Fhhc))45A*`w7kkW8}*y_l$vhA
zM#E&=fw!+Ro$lJ)Db0DIOfifFBY{4GIEa2ICHAFrCPh%p@`2~)vjYRmXWD-5vKSN}
zONLGk-aCJk8S91J#&TDJHJ#F*i0|a*rZ6Yo@BR^!uIUYlK>G`f$j@!AoV;FWf3p{z
z<lIFK2E6b<Yh`>JFv{Kd#yP$2g_7ESIb=;FsGBCaWMvS0Mz6Td?gg|n7Xe2cm!ka1
zD-N7^@1(>Q>1~lgA*x<oJT!W#n2IDQTWGvq9rX}-WTAbuh3`>piy)BLHi6p+N)TRG
zB2Y#tWT<@q;TdU(m?`!Z6GUX0-9T>Wxs!$5A?$PqHMYg+x$|m7t@?PcV!K#J&SdYD
z(g?dIT(;?xa1+-w>TZI;!#>*>g)%PvRgX5TD{Ez(%I;I!1F;A2i+X&!an<uB=M5p_
zO8JgkjgGz6J#<h~26MvV-wx_8>#j<1m~Dafz{Bp{&j!D}FrAaL0XL9CFJR2ey#qV&
zmC0k}-rqYgDb!_xg>**OxSCB(6hzB&*{lS$rb+<&fXH0Bz%wa^87u2JS+>GHbeLhs
z(tRcFgB5<b5N?<MFg$(0Kn&<5W}|#?>cDK;EP?ftX*kY(jIvOi@C1f5Um-z>pTIV6
z;tJc$HfYYeEf8{OtA1@V(-N~8-%u=yu~$nUOUcw%+Lyxoz@7H0LIbYfOH)<@C^E4H
zt9YiP%pMMV2Lc}B!@5FW)x@$MlZtZW;gmDsw_)y1be=><rmv<8K5o@YGHnr1^&*bN
zu}LuU7T~j4dNNZeTXzO36f2W(-P{KwpJ+bq%X*X1CuO{B;!lDV?o@`<r5?mqqv{bQ
zkz0Es<5-Fb9b+k0b3>UO6QNS;W;6#~X0j(%@cQCizO%B533!s1Bt1bl_w?Q+KAxBm
zSl5i#pI1yF{}&c$m})iQ+%J?k$6`~Iu)S*Isi$r|@J6bFd6}y3&ImBFzE0S!30Ph3
zNyYc3owKiy+d=Md8gbD&e3s;Xl&GO%J~jA?Yg$tM+{JWmhQ73-Q0A{KR_VU)@TlO4
zjip74u?)~)=%KW7JnRmUz7QF@7c5M)Hp7^vFUQjs!NlOx#<~{-%fYwENd+26J-ZXe
z;m5j3JXWz}_P2>1j99~#gp0_(Xt4lRaYE}1B(>!mAdzDVcwF^#mrEK!(2J-$6Ycwv
zc~ujgctaQ!(IkWUok1@CCr7UK(DH<@#zD00fdnyO=+Jc;K}JMltb#0vi>g+1w&(M4
z<s-uI*W5vTqea*_VzV&}*w_)eR?Z%4VhGyb*&Lo-1m#?sXrMQ>=+AU*Q|K-?L4vJS
zxgWiUFrg7L|3TG?^!NR7{Z#9UP|FI>{rEL7^r<)Xy3e2r2+?_8uZ~1;00ke~>K&Ty
zQ^q<{!dA`}dzbqB>65K%-h11l4JlrduP)tKxwy|>*am-CE%&v4p>IhzGxr=J7x=TG
z?bPb$B~k>2jj{_x^9k&^KD9BfCR9yBW&PJy{OENnXmX9W$z=3C*_}$JFSSurwNNjU
zC`b3Ba{BRwxjx--4sKeBahtWTM`9UHQj8#P;_3eygGI;YWXqVRTKmD&2`qeu0I4}9
z2dJzJ93|xS27~Ts{1-BVazH)lEub?bN@2mvqKrP=-j>JB>v2Ey!O2?*-x9A-$YxIL
z>t;6#=C5Z<t_vIbQI)1lQ><0h?U9J1wu+yv3t;RD_m7s6?9c_R$XjdI&M>=xKF=};
z1bI#lD2sx_G`W-$GD>W47vc~4-9~7uL91zCE(RwWlp!3w7#{1Ud-AbUygdMk)zLI#
zfdz2_&ityPRYFsga1-Mc)c!g#9vM#s?rWt?UKJ7-YxZ!sjJ>t^^rnu`>m|75Nyn6R
zq<!u=>)If7EJ+ofH|X3kSCREJzEs43nGyJV=Q_?tPIiRMZjwSqhscxBezxpz4ilIm
zsv}XzKsD=KJ@fcvcDquRA6bhC6T}c^GT@wDyH1d^(pPe@e+5|_KJx?_FgsGj_j&H^
zUZ2Bic3iM0RSR(BhfK+JAYrgB;A2{^!gf@yt_@3D-*orjnoS&+-k;FrvYBWK0r|<i
z$mBRT_#2nzZE4nt@x{lPS=SuX1|CnY3X}Lnm2kGcO2d@Q@t|QQHXC3?U7A``#Y_-Y
z&UsQ22HMi5r3DJ7n+D?Cap1niEQglX;(sgW$;+j)|8`R<=xkBBDPk36c^ivU7nWN^
zDd3Pb*Vo-GbG)v9v6iZ`a;-1I)Lhnm{ymw=`ROsf7#lr3J=B#vQvSN?xM@It64H>v
zH)_K(<MI{A-Q!@SqpE=DNb`;voXv_hK0)mzrb#cEd0*)5eh1T3?u0z=8OaMzMi$Wf
z@iL$RTx(f?Wt`6t394FMKq;PhM<$k#b^ZgD1wUYH!<<Y-Jsc#$Le_6G$S3}4dWVy8
z28i46upX?+5XK@ywOk@5@fkn=6y^BD;;v*A{u*%c?f&$;!GP6e8Otr~0%f$K_v8`Q
z<^jl14T=fVVE3n>#+|XPT5mC!v}FaD-d!A@Az04#D>_bJ!SppmlavsFB!ZHdm!7Ac
zz<xIJcVG}v4)M>1O!5GzbkJMxyGKOV0=cG$X^i<Kw$_AxNA18N^F*I6H>*QgVDk*J
z?T07><X2bZC_xNg!$;shYn@cM!h=QFT?Y!!m<2p93x&U@B#U>L4R{%Nr;ay?t;<nr
zp{j<H;cY0Ury&9G8k)B0i3+}n>8h#}Ymiq8M(B|ZT8X%nVfyyU-8ewo>uzo}>?v$7
z&w6YVmh^X;POFE*t+vyv%^GargB1RzP2;W8E`i=hT#ru4Nw-LP@Jte6;>tSLdcOG0
zI2cvDBOKBRUV7{Gq@yp0bniR<w_T>ZET*&;irmi*!KXmr4V9X%T$=p4ojgi9@`u-Q
z9_^0Z)ia|aMn+&_Q&Z=q=w{~t%0d7b1w;|be>F;${dYMt+z%%Skb;V%uw-+o?maf}
zxlKy?#`XOKyppGRJtKr2eaP}5l!B+b=UMjECt6N|1CZ7Mf!omdVEuj67Lli?5Ntg!
zGc4-#^sTq3P0@<9^3n4_5lx@MM<@Tq1;Ba2byeF;lZNLm<LBg_!tvghXuBV$_2X&T
zKq7vqhdtX@Z_2z+$?#oM?;dwVem2u?uM5>171`vBotmbzB5xi2H;bfp!L2~6&Anb^
z`Lkn#&nptSEJmlqd^xVPRWf&B9QVI8UJZRNQqGMYS-2VF095e0L4)L*oOHe`I{;+#
z5o{oztewa!W`+8O$$F<wZ)<anLHeIbb%WLgyiG^nIZi!SbvfMQRAm!pdmB+@ET=qI
zdgLzPda|NPtzv;@RN;RImn1(M=-fL(skeb;$vjSOhGHAEE%fyq77tX}9LGjIsF^*o
z4DNELj44Fr%spKS1E)*~bP&A<1(EHL8U;-9iwT!aR$Uigasn^vJIZc!o-*r9;cLv!
z-0tRe%>$RB(LOm!!M1nj@|t!A;~8`FQ6MPg>!>!(A^g+{j8Np7<Wx#L9E>Ga#wYML
zo^9Hlj0^0ydmyMYjCsiI_P3YvgA?H5<5Ki#Qg)qV<j;FIC@4-{0c|agS#N2_v{w5x
zIOXGWas64pKia*eTiq{qGM`$J@iv<-4QJiYySDMDDC(<6Q7`jHCEfj$s(X``dJjFQ
z2LMsa!y7tg&S;Rv5;(oURMzSVzU78NfQO1`zKVN~);+LJms>mvKYsWCsNTI&5Iu9c
zAgHNc)n!eTc%k@}`_Xrz*5P`b;;(-N!x-2IiO^#;jr0dp*c6o+7Yb$rDVv_Px^+%)
zT0B`yZ|*94sbH^`8@SII2)+$p$=;#ikCK<QIF!KjY}|RzfrX*V{Z&dA=tSJcYaJF@
zk(QR~FmCdabtd$$P<)5_CcW&!HyH(`V6~vj*wD;UK|`o9Y<zrvvh5+J3ECZvil}&(
zhmZOj6kLTZdGoe`^t|uwZM4W}y$rW_JkCl&GxO%BL{C7iPhj$a%X3u7zZkTtn*}{D
zYylzYQeV=ta3U?Mr>^IAwMt#9{sr5rc{s>J<o}h2+{U}G1$jtf#}hJ-zBe7SnIHvm
z<CC!m0kIVOIkibI6ex3ox&(uAIvWxjw4&bn11^T%%Cd2Z3x$3;%D;38Lb~NB-G6~-
z;CPOwYUP^s<jiNCR?7Eud#1-U&m2i59p6p@ZWmYXz?*$FatA0a<?eM9Jn`oDXh1*B
z!ue`8XW*%%I&8ar(13=-0vQ`Am%#bG=Vi9$mr9Gu3vdBgKod8!iBh;Wk^glD-}1@s
zV$azlFK^7647l5X;5sV@p?$dzRbR?J5P|C;&>4cCa<__TLJ}`4GfzG-DiUD{&`(!a
z@e;ZX33T%qNQMYzcfZJHln0$a3Cxb+u5+i|F2<hwf%hIHzLvQ-TdxdpSsgD)U2)^K
z=t)T#nr&A&wyMefGCjTSrbOB|k*!RZNCJ~*DQK}xMUUh*<XXJ^Onrl}0l5i!+Q~cT
zL&jewhq$X8kE%Ajvev|<rrJu#X5-G#=vl>T1kU)Xu25o&JmxQM$C%nAiNo9hWT>@!
z91_S3PQrE!j`p2|2=$Q0MPy;EOjV#Zx;}Gr|2v1*E0OafV>`;3z!^o4RI2@&!))iX
z-m(xchE;PC?8|ONJ;-J{ix<eh53RVe_Y2($zXv6iz|S0Qzq<o2{T1IaY*amIg-zww
zw>t^+Y2Mo=IUf-n{-HG{4Wq8_&e_A)<S3`W<$8%N!;5E4gbOh2eb#s5!qVS(H9h)h
zG5pc}N<X0Fe0y}&;k3o~p{5yWxF&n4<Jmo?$=YF>Y#aq0=TX&j2P@LP2bszZlZ(L3
z*Hy-<cFd*-V!R?A<j$vfp6x3{;g;p<Z1wU3j#jod_g%@ubkW3iHOw0B74w~+E%*uf
z!!za#)(|V|bdB9%4%WyO*1oJPvM(7gxvj>+sDv7rPEZ;aKO;pfUusp~Mo>yA3tAlz
z3-h{%wlWnUsS3=9kxst>bS;CNdZd7^qmJ&J;>97*e!!_Ko<wkWMqTQkMR;O-b~TxM
zV*0!b8&rL^GKxOCW>t6j^MHSCeU%15fkASJTAD~b+c5VfT1TnAO6X=8e0}EuV_L-n
z&>FV!YU23%6Jv<-Es{xa|A*-L?;GCAXF}x)3ucOQxqMY?DC^Z9u;TH%D1@ld^Bsz!
zbE*SyrxoJ~o4w~>N|>`8fjUsaF3#lOk~A5Zd~+^4@$BOne~6ewA57cb_~BGsVYI?Z
z$3~i5CbrqjN|0YY+Qhfsw=H-gakPzcNB-7zommv!UlzTnMQzW`=@Y4Y0SO5AaidCI
z^QQR6hR@tc?2h#>&~dKfjhgv<rPIo{*XG7jz0mLr9Qz90a;dZW+D1lHfV1+{l-*uK
zEcK|;T(}lgO+E(79I+0L$)mr3B1cuzd9LUg+(1iSH+{Uwsarl-H?t}Oq`d1u!I^nA
z$DL{uNW|ReO^dP?Plk(^sISQX)Ixc_-5*tFw4Qo(;ZIdZnD}=717iwaAsQUw$X9&s
zq5wvtr*swBbw4vK`qctsk_7e5h%a?GZ%$`O?|*1lHkqBF@u#4xjTdB-Vz|-qI-p)%
z;f(rVo21Y12s3Ti7{h%z*z6`VD=X?GjpjV{=o{mdXZqaSO;Rk*7cjpZ?v>}>Q`)F3
zG0d+h#-w1Js8z+=Avh0LrOQ1t?tOn<Ibx3BG6lrYvx>6Q*%b<yH}(%b%wrDFR#)QA
zaBpmer<|^u-}?JP34ycG*}u@8cMCcs+)vm(yWaiK`}S7@9alI30s_!*s`?bxB)FS6
zWa^_4??Y=obR<HzsV^q92EAoo{qft})yn6Jw6C?E<*F>%X%ZtMA8x;P<W}C@PnZ;3
z4JfkZEP0aSNJixybg%M)wxZLR2;YgDE>@{8flF!&aX9NUHIlEq2pGeOD$D-Cf|}#?
z0wE0Gg{US*ftrCQ&`N#43c;}^8Jpio9Z)GtLKq#Ba*${zymeZk1Yi4I(X^|Wf5aIu
zhSlkoq!koelW)UmC=Vh!)#<$6YB9+|xudv<Nl!P&RR+!aijlRfJ-!6KO{IeS!=n~C
zQ4U77l7(ijoJKs_FRkjELCS{coCoSgXvHytUjSf{2GQtyQIbL?<|>vT^UjbI4Lz12
zTn1il=&TaE3{B!CaDazfqM>t#>H#Jp;Nd169+Ct3Ht?XDc3j6RgEjrPXcufOr8#GF
zpo=&e|65Hr!G?}xRu`4dh2=ys=^v``dii7jglo<Q9fz`Dl#8gy*=CC^u^NrX2`K54
zE1HG-x({4~w4F2bA8qae^5w2rHth|DzYA`7mD(^-WmLs?cJyRss@UyIgZKkP-*kLo
zT$zwOoVyZ8h*L(Es{rdw9M<mc?ymy<GfRWc?Ck8_c1lfW!Y7YK{;mMKtHDH#Q5Eg%
z5P|**I4-`A@NcV+ys!~hF75f)pVSgy!6C7&Z;JeR)6fB^I!I{P7BsI6WkNL3cu(b#
zYLK1*z*kaRnEyQx>05nm#r%U;&Wd@6E~-LG)bG({99MfEteWjTbIA{2)lku3)r9E>
z)&Y@N@imJv?LH@4vSb@^E)u27g(qH-176xChv8%m?%P+-@=n*@<l|d@Pvz1lQ?f$@
z-`1$+1{ekgLZnMhR|wmvG533k`7ciQAo(=k{&-OX9&T=|Db2r8g|xa?&#p_~nJ7pV
zKu?Naa;$Z-ff|m(x*L}kSh+OF*Q~I^^>Bgb!Mhf*&%4rc>oT!fCWzRt-jkm+9=P@p
z3_-cb%jVS$g%~&(VQ$t)*u4YP#A{TyzXDeOMITHeybTG_9}wd^r!lsQ#^qasrV^(6
zKG$<m*^P`;9(2M#Z!QnL`QBG9OX$rDpf_jMJb>8XD%oLU(_<ee09zLL$r%O%91l3S
zxd?N!Sdf)`+F&gra%C>ap&x0H;2@SY!raINv~Hj%Dus<hbng+=Lt_ySxQ@Re!;v-z
zf=zs~VNA+@u9^>h#9D<ow9%5Hj{j^36SN`Ju96?YTRXi68={-uEdn}`zSa2PbKB@y
zLqDL6NCAf$>1b47fp0yn%=EegzEw%LucXRTP<vm<66{5HI4)+{ZU&$KhTFQy_M?Cs
zH0(gc$gvgM;Um8nkp7LI6ZW_vOb1ET2+G5jt;PqgpKX+e=(&v#+&wEyzeHdDss?Xg
z>v>8p4Bl~&95^(mfCnd+S5OLArR0T9y~}fP0JbOA^;z{bYu0Oee4paEq+&19Ij7qx
z5sw(8Fjnc}6CY2{MkPE+0af3wqMF&n2y$7Zh{zcV$?3QxmtRsc5ZXUXaCu!qZw?ON
zoP`b!1lxZx==0A`WkZwyy+JS-Fp)n!FKyHyHQ21F%yvg8<R~VkUAGxWm%D-&0JjQs
zPGqHo4%_R>zCL)mqTWh42{a#T#X?1#%fA_sC3@YU9#jvz$2G#b8*hveL$94xT|Pmx
z4@Byifr{I^rXP{r0QF}I@S3{-(=KCb`WVj<$QwZgBaW9=--2#Zy&+G5js<N5JqEyb
zegY6*IUt(w>2U@o5kCx4#sg8IQ>!4w<<dB4gBuT|O+z6GI*S6Zo;IY$9?(HL!Q#HV
zuAGXF?gf_ENsvhy40$)K<AZL`CjdoFF#8(-K>UJuu&_q)>2H6)Du6Y%YTl~|;C-Ds
z#)IqY*x1<TchTEiItSzqX-#tUeAvOvmcKIPC0bhe+Dqc79Fs6b-dWMr-$uX+pX8>n
zKM@!Yx<NjnDDtM67&wA3d?!=dSf#Z<$OD*yFmN`!4~P=7$i}ipsurkqiJWXK$a9f~
zeBY4IyBu{ksr6atH%1tJzXqt^%uNBIOGYZ;Jm>4bo?i+EG@Ts~lo<UpVW9~6<g<8}
zCWZ~)es(B|XdT+C-dlr|Y*24l^Q*n#&+X^G-E?AsxJ(t5L+AadR2oE&V*<Ur9rQmp
zZh_BT(un@ju-na&kxK3|G|3BSGG!`kh=WXN#MUGYzE{tb7iD#`t}O^^+K;ojh*ytf
z9?IMGGMU$tmx&k?HJ_gx#I;GiHblDpnle_$HOe<n74bCL{ne#c8k6#9m8NMU!x3c(
zi#=Zn%<{T>us%L8>koDEePFTp(Xp}JKWZIK+e67`b;Hn_#O!F?D!aD}l(XSpu`e&T
zme@iX>}{-*Mj$v1zjC0f^5zFQ4+h?IeQ-I3L<2&>-6CF5@U`xBm!(y6ZS>37({dcM
zj{8#AzC_fqC_Q<8PT5B|sk}~FoBqutZDv{TjR|eJaGq;&^YL;j2RK-TP{C(5nPpxb
z2)IX$>v_oQd7n9x3%L}oaDND-a)}50kL^8$myL92(N^$)cw!eoH=E4VIqM0|0K_)~
z*3wjF!ehgCkk^WoCb2$D{`)fyTm#!uaozxZH~0zMZB&*>$)(XLZr+)1TLhij7*Gns
zEH`L**WAxDcmQzb(V)onvLBlLfJE(1F?H6j(O#M|a5TEyPsX(EAb%JYre;138Q|Lf
z&nkiKdH5>hJe|e6Kv-kzu3p#_|L~?As&O*esm*hXZ+N};N;ox_N<V+_@$-*T#ll-U
zqEa$0#i&3}sCJ>MuDi(Lsw%PU<_*;IvPw%I7saj2H8t@$rz;2y*VyTAGXijA(Q^6C
z%Y8e%W-&EaS0}hF#o=#}X5%Jupdw5GYJxg0lcqozFE?w--vu%=SFwig0Jm(z%nNzt
z2T)k^i-?>Gnk$%MOXIT_1?9Wpk&$R88j4D1055S@rr4^X;c9*;kpY#hJ8xYjY#+6L
zCHTHb&*O!fQ}sud;;+w8W{A94De5=RA@qIIiMS*cQ)av3L0tZ?l;&<5k6%TkYJ=$u
z(Xz^u=jAK&0oEfydXlUk2up7~FM0b;)B48R3|*QsY0BH(uGvZzj>aRS?iZ#=N`y}n
z0D4z+{@qTB#b2Qcjni@XK;|QnW)n-L69DmqqSC<O6Al`Xg{~?2Bk*Z(sBhOnL0Z;*
z;JdgZCa|EVRszo3Y}MCP!{*M!OO-ob{gjgw{@Iux^=Q@HET3VNwc2UK)=R@UDiuL;
ze4>ePuWA5jRy~7Que87Yf4M%a;-2MF0a8IoUgWq-(d@#9{Ql*_hvR|6M7PoK2z(du
z1j>AR)6?jns}zU@dbDh!;D2Xj7uE>M$0#Ufi&mKR?dpY3@(O<I{{*=<TgZghIP4kS
zyk+5Fo-tXM%lTuWFgf-mE(HR{+R^2j%YeF}l%je_nNK^|hv9xz&%1HI$gb;)Y5{~w
zpB+H&uV<&<XQ^0qu6WD=-A7ad3<#K*f*Ak@fE)7=mAd!ZAGJn`C{YsTkiKzw1g2QP
zLU}B@LDTBQR8afKv2cY6d;`2o`E0e+$K}hImj$fghH!Ogp(dzC$8ZBw1m(RCvdX8U
zO92}N5<6>#y<LrM%|Yc7Fpf?dpcXe99wtqf8WIu$nbdNtarXS;;ycMXrPbAA+Hq_P
zX7`{~;l;ODiu5`|f0%vEZ_s>&{E3nOif+isc2m>iO#@ykcsrCsK350!WrbSE9YT5B
z1rHdC1r^_5TObhNJq#1LoP)6j&pJgh;wWZd+*;}1|5TG3!JpJY4NQJ~Qj%&Sm(k6b
zm_ECKm2i2*JQPOb`9HSnG7<tSUknw8SyUz&p=|_j1O1`P0X}ju-x4WgQc~`Ktx=@8
zs@KGb?X<SIU*G*sH%NfXk8rXE@+&(}Xm7Eww*E7^^53uVzrKP!2VR*n5>tW?+Uz^v
zn`sQ90tYn%bImH1Q68L*xxpi)()%Z|5AFtiAMu|&<TZKzzh2;<2m9}TV}^}s&*J{`
zeFP!K`ZZa<Hv7+}<wrFvejg`mqRGzgN8VyVcSPL$*T?$r-~K<pGV$|Kkkxp37xcGN
z1_H{ecmr0jjaG-sWei#@b0OW9KYXDXmQq)()_|WOyxhb=q_?}`>5WP_mtGFu{M+zc
z9=(76M<VvMTRHU6i?xs0(yu+|pi|p>oe9Ri{`3LJA4E85J^QfyoR?J?>(%vd59rha
zP8ZTC|Md6q?)tWtTjm!M$jjb!bYLJZi1Q8VHI~Eh)le{C;>=9T{NoogiD|C$hvO%c
za(bhK3n@$p{5}{-7TyVHWB%i{AYQTc{e`?GIN<Cm>b|=V4hU&MSqsI&YmdlFH}+@C
z;#2`ER+P>A0pj9d*_bmCxWxkip-B64@_$!?LKaqnre87%aYCTo_cN0$h?D@wi04)i
zsTWDbpUX?s;JYDjZ7~xzrqBuSu%#1;0A;h^29kx6oJQDl-&y~7es|Cl<Ne~OlIAq=
zTd~~vV*~L64v>6=<l|Rd=yu^<;uin?8N2-H1G<+H)>^IDhpgefR|NAj!SWbcwkims
zHvWgc6Yw1W7>obwE8j4J+qVO9=tG4B;s|9)!MZGdW8Q3=8~irnUybYhZ-4iHzFwUy
zFa|Ly59MTEfKch!b;J1?c^TffwY!W1|2^&ZZ=M5stuzG22XIshOy+fars|s>iE_Au
zfs!(2%7(~LFqHiN<6-1!4Z#gs{8j0H4YH&;0YGp@Tv@pW@!IYFAAcm`36_@{YRUX;
zhQ^pczTl1Dx8!T}B_Cf)CH|nf_Q$sw&ndOJu66ilh(N!krqjT%f$<ir1h5ILO^@EX
zSyEE8$+P~$L-Yq%0Y-+;A4Z4otMR03(psbY9{6k$$ipCh-(x(hH8AI!;mx&i=YMX?
zzukH)-y#p@?DFdS6SEUXI;Hn(Vl&8s=x>oRF5wvSkYSW1vgQ5xfgZ&usK#w|{m~#(
z{xB|=US<0cjuE`cb@f8-K5@^BolB6%e>tdsXMkYi*G71_rCW;2e}?e?mhvO4t+@^G
zG4aYKG+z>Nau_Ow|4wH9#F`JPVptK#W;1PZZ_h@$e;7T@uD#D^HFW)(!$aaARc%FD
zHQPo{DB}N<7xRGuBQkX-G4}CNZ}jou_STk{$<+FOcO_BwC=J-q-nr;}e9vplfAC`D
ztUI74+OuBLv~{=xbgw_(d;RSusEWrx83M?sC?+<5x_87U1wp3490H(O2+aykmKg`$
zzH>(g=zBuNNe55^=mv2<{T-{ut(2W#L42n`=IqnEcNliJq0Hkm7{|Fub8|+D))DJK
zWlYBKjdQ8EeAFKD7V`^k%(Bl756VPtSpIm!$n*yfjAv5U3=#vAp$rKxzFdXmwQ=o&
z27qzd1+WY(UZLY(pBDW|6!0oXM@PE~N*b9jfYxqSo#1WO-`i|bVfUES_1<JdB|zV0
zvz}Ja&otRz8=bXBqgF{0V1*#balh&`_1p7cQcCh8MGRY@|7(-T=I+gOYmKmti1(Cp
zof-G5Jstr~jVN7T7;6rL^&zDX;~x-Jm^1=i0Ipvk8N1<xf&i;lB?vW8wL3l7-F2uv
zUP{W&%j>k0RU5jl2_7!cf_B2SaWA>BKP<-jG-2uhNPu=F0%5x?`IM)cP|r+mlliRs
zm9N{6$WbAgXPM!mOuJ7tqjh2|aE#vPFccQs;ZYgf`4i*aN#qMA3)J-7=HE9PKziP_
zKtdJcs>;WYA00rCn-R;9>g`U;EI=rGfkaSAM`vT(3Z&}}zapi&HO-S3YhFPGHzj=Q
zDP4A+d4K8O4IN50saBidXx}m~&|oTKwxay@`g1d`Trt&)_RDI=zrTB++u;ocD;Kll
z^sZgs0NwH^kP$rqhi|*-qOnk?cG!-F+alsE=plZ>Ct*0U0sIEL0O;NYjYrnNbt^db
zL5smI6N-8tl4#Vj8EUl(l<)K-_IwyTo`qHMEHj1<H&gENPR`gkAXDg{Pft?5{1->x
zzcEs@Mi|~e$dTk-X(MQDGZ3~8rx)o_g}xtzZ-SAr83s{NeeQ^LFzz)bQ347qojLNp
zJv*T31kSV%M_QRcQgF}NB7!u~S|b)Z^&$<9f&5B#AH|t}6lz@7cmI>IEEoF;S`!fo
zT;@0d4q!092h2M!!jceaNTNher<IoiK*X=tsC6Mr`V)rDDvpt=nwpHEVY-UCI&R9`
zC;=!8XNU@FtKF7S6v&sCmi}-^65b*7UM74W^r-|*^*0_)VHCJV2PLuO*YYc|nU<L+
zQRYcFSw7>tF8i5n3*{e}D6XNW%t42H<8jE-KREKV#L~V{MGMp!_F;2CU|U9DyI~K*
zX8t`87j4Q{Ocn7G)--MQ`MJN3M#I=|Uoh1TyxCjox;UG==mJ3bERg2tkAsOGs5SZ-
z06rb2;JICmCtK?!>lUWt#k#uy@ze>WYiVh)?(Xge-8HMNri*h2fbZ;qxF0C&$Hq8;
zFe#9B-%H8yOyx9{38^1kFvN)DZi{cU{p$2>)wSs)87TL<)$0H)_@?#6p17XPnz=0w
z?^Rj-D1Z$Aq0dX&XOV-HFV?N+HOQVEX#YsbXrAmG>lzw`U_^bL12Ugx>JFe8=9aT|
z0VeZ3kh+#H6JpI%>1W#myN9}g>44*ZPq<%@yXm>Nlqc;r@d_XuUt8!s2b}jAyvKph
z+?xN$>qdOQNZecnBj3N@rN~_vmBpWqd!NO<UE)f8BF{v_^9T-&IHCXg%V>x;$)ts^
zPK+OOtTU31<e;EM5yE1a0I^g2^~&`0^p@!XKtaGXAbQd81I(g=a#`TRnQFF=fGQ()
z?&ADV31|)PaC^!V1`nq~GOp}k0CDI_c6Bu9q6Fh`zy<yaqSNyHf^R=e2pAVWmwHMi
zs}*Y8_c-v!)cHmrqFrwC;ljNO<2N_Kl;`2hvMJLZ->GXhP=6#yIYFkLKXhE~kAbFM
z(FdE96LJ-1lO^ez9bnYy7hlt{ywXMUC(TYKUtQDD^4xL(VkG6;&v5)UyLT1}@?TwV
zQ*O4Xd?g2?Mt|TYpTC0nm4bomc^I*po?eO$pt*o!8?MGH3M}6CUP(-s&gGL+<8Fq7
zy4?8}plIBkE3(hzt;v#j%&ZEgle4dp5n9(Rgb6+8Vsg&1Xc{KO7>3c!oR6yOZ+6PM
ztkeoGW+i)_Y}PD-UbrS09^Xmht{*G$KC==f(Qrd(f?@I8Q$XDC0I$bqXNBOQNt=TS
zg0*3t${Uk81?B{#;Tl3U&J7FmY<AXF{*B!M*7fh71_k?=(Yvpt2bzEyu`jz7@fd_h
zv|(dg;r6Jz!G)L+y*O6nKn{a8>l?dZ!9Ip6hea9CXFdPR++a9VTV3b%d(`?kN2ygG
zg{gU~;7=dSU!oU#q7u1F$U+$k9~7ujcZ2arMyQjWQjn02+6VT91NR_i>z#slUP9G|
z11Mj00~Gd}d>0>>tQdmbPv+bPHTYdVWT+0PR+;3QEbO`_nq_l+F0NZ+7KO=l*yV`b
z<FSmk%kStS0ys7Ea1nH##pA>~y50as=dK3z<1EZr91CS-WEyO^_r^dM@e)2!^LfMD
z`*eZktZ~JCvn~FKaYL%fG%}VF<D>j*(DdWx*I+#VI{g!iQZpDxXp_u6EPH!_$H|kf
zD0bNl{nwiPpJ6`j0}KlPeK52s1{#yegT{nea8Oh&(L*$>UUg;`?2FBk$UR1;nq+$e
zV{*1X-UA|})KYiAiQroe8K;=}w!jk`im%z^U&BPu7RN*3UJvVCw-3hPOW6mpKnR;*
zXM}+LE3EN+zr;gK((FAB_NvN93OrtbS1Qr0_y8tHOQbN$1ly$j`sCh#H#mbqLuozH
zOv=4qnin8PCNG@-@%Z@IVXu#`=Sj!C1-lBMf!zbOS3z*I!x>tnhnUi?u^4*5VQ&j4
zD$c82vg_)mwD0j+$G=?`n)@AAf=F?<y=MK0`BPmxLd-kGhwk+UzK4pnaY@h5^D>2a
z44+na(Y)6-gfRDiko^K2J~xS4IW6nv378aT+FKs5Lp}yg2d>m(Ia)WSQKA4MDrP?%
zLYca{yu3$)dg|(A8oUJPw?Z1dCXSrzNY4>iI=yV{QIgfmA-=}nAEOt(Zj|>t@38D{
zeNP}?rA<>mEsdK?J|J@R6Vv;1;_qIf)?M|lq{%M3^>b&%ao>9@F91G+b2KYF@s-t7
zB^=9;ezdEvJ!bj<3zzzncUOi7A1<Y)lJC--%&Wal0tNYrpE+U$HWtxdh)kiZJSq(I
zA4DF5Pp%3zLw+ek`HJn-$mckSW#M*TXcl>x7E4_Tkb{2u*hXJ=V6xgKDNcG7SbH+U
zrLvIZGnr{;nR<xLXcj1Bx@e6v5$xyEN#q_?^wch=SaC3nNQK_L59na3tS3rawBwl5
z0I)Op$KZ^@l;@`znRP*W!=nj!z3zw%msP^*y}38bRQR~%lhgX{tJ!*2;$|d;U9p`4
z>exJ({jP-VX_WfX(-F_)WgipNbV`#@{+MG%^clz$teK2>4N*mr<A&Q1+l#7f7%eqb
zP5(iHlED5LlntS_%kzqxGxlwS=PKTSXGf2C1YGSkd9m?fexQPUbBLC*{vH^qbpXZl
zU<C<vARi8zM!R4UWa04qrb)m%!sds2BbKY5zs)X*8y>a7{U!%Y(rR9gx?hgMy1I_M
zlIk)Hq+*!b?tk?D{rhuUrzvrdIuUP)yo|G|lY3e-Y#}q7S$<Q1s7kaNI1hCQM&vD^
zDlsRO1Ke~c5FLMxS=lOqdDU5NlMR1-Lwp=HU9X=q?g&!8I4u1iuVqZtheBE;V?$y7
znXzU(!E!q5M86(!#S5!e0fv7V1X{rRwRrs6ZPvn>+TcIu&cyUr3E$O$_<Rw-X%Ff=
zXPn2o2E5N5U*GG{9?M@z@z@gJ2zmA8^=h;a;9IaY*uOaOzEA`pJrpbn=Vh|<m}W*o
zH3V!cNqS-&@Y!Vw9u*h2T(#<wxVQ#<MZrW1Phyd*x8B>|5*(DD%+?b@dj&A>sJ4eu
zt#6kU#Uu;4q7}(`tu+e7%+K3}byjT|sfwwBQ~}))nEte@c&4eTISeZVy3^c?P7$jO
zFOCvDj}pBEPYjZJZw}6h;UjMaKc%CjVdSU#Za8&9$^E@M)Gn+`raqkBR+3f57XQ~G
zNl=Wo)aRl95Ya{GVhAp#;pisNvQj0RmDT-<lEuJ0JDIy+pI<%MAT;YsT*S47Lu4_Z
ziTzEh$63`Vva&VH<(Qb6ZxJ4qhiokXsF0!{Rl04i7)7GtItcHhXwG*69R`FCgK%)F
za-s1?@2QCU;-~JnnP*nBs9g?956~90YULSX_Eb!u(vS|MA}09;Hobi1zb|Geli&oC
zcypKbK7-M=l9x5S_Qxp0`$}+c=AK69_9)}y?gOtpT$k4W#ZUErMh%1V7+`X{cE!nl
z9)hI1EBAvmuwOe{Oc7#QF#*<QmiyiOCJ$Y#E_=hyGmj_f#mEcKgNoD`DH@xw{J|@!
zbYc7tN{euU&H%v!DyRHpr|rffpeu_SEl`&&howOCfZS>8AWTSDIiFT?KeSb7O;>(o
zru3m>p~xk-{&OWAMP3e)z;YF|qwaxtOb@|!QGwW8cIGB#dD|!QR({TlZ7qSL)Tw9d
zC1djUas%|cmvkYquu9Cbd*<0mBm*@4DKeZ!$9DykR>4S4^NSk0Icg2Ff6-U}pI#91
zk)0-2xkwGZh67iVp?rJR2`O(>ejUDp1SC2f03{Yqk`q2%VIJN@Kv*u#SP-53UN%(+
z%tCI{>5vOL<?&^wD_G@8U^d-h*LhUZbY6FxjO--IDxeU`--fkl<1hTZ)w%D=`+cp9
z@9-{>Iew|G&InA)ELsoY-jycir(`=FNqTUkHLa*Fw7MQn&LzofH@o3%3R>eJFs-Q^
zE2<nn+??jywE1Lnx6zEIF(-9Hpwcu4rs<q)J&WM`Ij}Z=rj~4Z%hy6te&w6mgz>PG
z#Yg!fsf?+CbZQ%4kuzLeoHUy9dA#XnoJ-izzmFSl-n<Kf6{x%EJIk(F{@kqpGr0v4
zo3QhV1Q$OKFK^=a=<xYMwF43EK}$dzGaHWYQtq1Nt1L*LYPLFDsOO?tWf_BrSDWd-
zrlzD6HHPv4j13VW(;qvjT}rfiI3uU^gk?U&jKV5kMNJJonHyy@4xB(>nQ;eNcZi7!
zDKI8Tl<cnL&E2DAwQ!)HMo5ZKqwy;7FIlZIbhVyp!|16F0D_?(tgTM1Zn&~6=!*a~
zQy~iV5IWz^f?IqK!lQ&R5GPv;lJ3j6IEDH+|2a;E@#0;kR-mJa6#&&xIsvT+rp*D$
z3FOuI>zI@m9%6oV8=PLJZgyqq>0(|-Z8YwaU%BbVL2<>>?oOVSWC^f`dq#?Ivi{)P
zZqI_T0hbEj8vu(|vYz}=s7#-j;kk{>4cD~(J=Fg>+gFY)re@AdXmKsYez-rBlCOVT
zSzi9*CDcAnSvAG`{LLj%$k~d@C*7Mtq>XAN<GcHbBJ}PUiCFN(>LpeW52>F|nYFj`
zKg?Rx)pQIIecL4}t>|K4$uF!T%Qvs}kz_ucHrFtS28ap*){1{$Y=D0HT=VBzK?xC-
zAUtgpia$Z+=)80T#%l8x#M-A!gl8WMyMswt8kn%;k<GrCroTEPXEPLR+y=#P6I6FW
zh!CWJ8UJNv<ikO)#5~gtW#Iu^kZJ})NJl$&K-<-@A@3!gw+jY*x<TRUbZjA9bhe~M
zt<0|-c(;XU1;LpG0*;0V2Up$AXlCRn$njU?6)gk-UE!I$%hnJ09TIAu32RVu@j3yc
z%MbH&zM=RmrRd)l>6I)_Pj*a|$)*g8V_3PwzR)#R-Yc;BrI-11@CS@72C@%MDo-@w
zH;S`@VXV`1WNVl>;Y8QDPJ4t)!I<cON;*KrgW{nx@Oaqov_O8=V8Fr^4Y3^f{$v7y
zKcndJ2Ugv>5$nH%*DBwG^gj3$P_q!3NDRYqHXVScKMnx{X)zE5A9Sm05@bM}0AOyy
z8I$R90sxF4&$B7jr?gLV@tfxSfa1t`+NP!p;3P1Wx8e4~AQ5$a18~k~HlX#%lAGfG
zrRj&(Vl(Cq6yK0R0qAb(JFSV-v+8_(Y1{C-9afrzm>m(CmJY9C0!%mu?}nVNNpGg&
z_YTv3>0z($wO+z*Ia`qu-F;Wo%WIa6^8;ekyCz4@@4Ti`QKwAPHon$2zALo<eL^$t
z8tcq0P+7g>p?gQ3Wo4MGFDm&k_>}*z@@KohFu1~mRr53L`*@$4#Wgp#;C5~m(H#3}
zHF+U`?dt)U+3mmUVgG(<Gg$4R@)>=c&aKYDtb{L4T6F+7uFWlk1d|MyLq7NVUS>;h
zNv?7`0kqf6WVE7RHg`Pp=NX8~VixtTdO!d$7lK+!7*x9GgJ^9iZNG{^&GELt8*#w6
zz8N=l_CDZtg#xl_liYIsy>|rcJMEcbW?F!Qa1ojS;p6>eDw``@_~lD^Dg!i!o!ZAz
z`rvyjn5%r0_)6AqxUx4@bdEp+$!ai_V=K6*FPL4Cys`d+!Y3PvpP1om2&go35#K+M
zFa}fekyzxOodF6u4lwcL6G|ndhT^wiD74RE1-xH-g7qsr?g%wIGDNK6hm_|2VP>Xc
zJj6xv(b*8C^Z<$<O<wj*(-2ADK)w+(QlVtf+(<{y(e$QR|182A3?7y{6kdnO=l?&Q
z81w@N^`FDC95HP~LabMIjuygClu_`~Q80P9jXgg>8512HWG1Oq?_vYe^lh)hdVJ+k
z0156USR1xhb{T@@fz$-hZibkEu_<3b|8!KhKc<an<~R{p9Xmm-(gA~2Ph)M8l6%!;
z%Jr<wuheO(e!z3f(E+`hn<S5PzXy8mhfh6>2~D(s1BmnO1``<@ugpKc4nV-uW+xRO
zQ2$0#Hjp%_U&#o;NLs0kao2I`{%#MZT3^ElwbXATB<*m2t@6D6dx?hGzPBg{mFq3d
z?Q4}rW~*Qv=c_%>@!aSN`?g#B<ZM)cS(L}tdo?B%`-z#^%cs?kh(i{o#dY70sPW{s
zBT<pd$*y{|Jb>uVkp4e56b1<~DCDwy<#H^DBXM44D?7;uCLh>=3d1?KGnk9Uv=iA&
z7;vi}^i1~HsvU0f_MZIuIx|j{d9sn`1PK_d==6`f)wA@Qyt;TJp<yEBbNB&Ea>`(e
z*PvHxsbO2gdIiXQoRc_}Cr=(b6P_jl)3^Z^RIi;aIck7t=gD+_8z3?h7XXZea>_q{
zgYsMKO#Pvr_*gz3n2P(=?A~`R8;2t8PCs$Z!l(~lA1p`t%38DsC}-`Zlne;0W_`jq
zS(9Vz<K+e9g+o@ekokT+Mh5X3O89kx`TVvrK)|}MS`h?~&;sC;nS%&%qMO3J`sm@f
zTgB-GMGE^Cp*+agE)g@m+$t&0El~E`Fjquw;)e6f9Z<R0TPd1)23!J<rdg_kNjAo*
z$~Vsr{p4A*Zv|y*-Aq2<a_`Fe#7&lQ(X~@c(%$3ScJQ&Ecm*Da{iTP%6j>gJc`{TP
z4>&1}(mwuy(T&6E?&(4FzM#m<1mg#J*`o7u>O~2FFK<iSFNwQN&C9EijMX$pcw|FG
z_tpPn>@A?8?6&`L7zYFd2?1$_25F^p=<b%3ZWW|+q@`QwE@|mjy1P51L%QMr;Ct`u
zdw*;FzxS^7tXXSdW}fq$bN1e!{n>HYO3eY@Pj7-b*;DDdSSydsP2CI|jr<|s{Nn`B
zRS!|fVkxRg-3{P;E%f^}*;o{=(}lDx+0BR2&QPiLHXalx&|MdI>MqTQDGJ`FD-Z`7
z)bgXjf!Ac&U${QEQhAz1JZ|w@r)^fs>ohCRXE~mY#agen{Lw`Xqx%LFxOd^Wmm}6`
z6-Nh*9G?{4ZzAM>WjcK90$5I03;J8c|0M(kWXa@%fP~U-*x1+?*Sow1fgytXPwrmE
znj^7swEqm6rq8NM@817KYO;{LSVfpu%@9F#e9j%b`)0o&uj+aJMqo=RYbT<3LG$Lu
zU@ED((SOIi4=RI40$S2NE2LRB`K$7Jz=i5;1c)0t#ejWE8!lfYdd`lQB-&gLhCvH!
z7%I?Zm0Us_CHW=5h<gV)0lUwWqK*JkNa6D!rvw)s^?wyI0A}b?KcHV%xdkTIe!Y@;
zl?<vhRt*`B=YG7m{(Xr}<a1qiy`X8#z;Q}gh~`iBQ`;Clqh1O#n+fDLLzkC^b3w58
zTQ_Zk0@v36%Px8V_nV)+^@1m@jvR-r&Rq9WuowZi2}fC3?fLEpK2N7oSoQ~S`RaVL
zb2=ex13Y37i9?^<n(8r&I^)%VipR&pQVN91#1_2nZ=r-w{%_p;um27Sz&9e6Os?!@
zOm3eh@B@%ds{9ROtl#K8vn$2cC5ai(>!r^Uo2II5eNIi!hFN)#3<i``1pAU(lR7WK
zd|fQ;1AWu~iy!(M&kfOm0P-PYa_LcfqxgaDS9G>=3<TK9CxVA`uc>k8n-qgbGFvFd
zQjj=aolay~1xfM34~wAbYTd;<ACom98U)0Np&<yM?xUlkqM*G0+w(=Fc<b3uS{=Be
z0gD)_S2C`WK~rk1qEs{Lr>uPbp(gU@3AmgFL&i9re~ma>?Tq}C=ouc*mHD*OrVvai
z5#9F+h;#gp_Zlkq*0WNGgA*(1-(h!^J^>eO6Bzdoj2LvT9$uTwA8daNWyq$F;D>3-
zg&s`%6c@jZ8L?b=UL{pLj?QIWaI(co%VI4T=?vh{D17>~|G^CgCN>{|?J!8sYSL;S
z*fU42HYr$guyD@jGIQ^D2PW&#(p_lw#>cdub)^8OqMR2#lW?4Rw4fxc4j{|P?aRii
zo|;Sn`bJlDBvf5NJWqhVrE!OXISl_dacr>K=`JqYsdR3nE}2}X8-AAe);h{WJ6MF+
zDJ4d1v^6x{M$=jf(wrR|sm*EHBZc)$a8Y+r@A9Q5*gishpUcrO;Pm-j%Wa3G%c1N0
zBx<igAXt3_wBPOlq97)7HSaxn|5fwxe<KMX)#4X`<J?9u)zuK5EwBANk9;qY%IxuY
z_pzENg20R_W#T9L1h)f8ovbaZa-04Ab#Y4@oUUSMVOg}qr#2=Qq*J-~+>Uea9@3&w
zPPRw&A5yAS_oo>Soqb9$!aGeC8eD*e>=b{c5svrjOZ*R%H5^O_C-3Xm=!XWc5B(_X
zC#UBxh`u_1DV>89dOiwxU8I^xIked^+EDx9+oqBId(*C)Ep!fM6{~QlBZ6UQf-1es
z<s?BM4`=9%l99g@Dd#I(s%iw_WW}LUpX_quU^ey%1eS?n-5rxo0s;3LAXZIX8us6<
z)dTdBG63q~j}jMe#N!yWqF8nXZV|hMI(4Abh2Ssd><o)l+9)W!ACtp4b;)Ko_E9;?
z$JAk(+NlxCvz^8xp$X(Rfm<7Z-Rxe@yb&Ai118NJV<ODqTejg~P8JC0teNM&{6s(E
zAy*wM*ko2PJWC|!A4h}y{~<$2CjwDtq*yR+H{e`B0Bs?~en#vXLG*4)wfkV4bIX+=
zlMExA_h{oB=)rGu9AdcAMfmc5U{Kr${AIp(R|bdO^az{t<9f7zqgSe)-LGFlrjeaQ
z&%1hesC>>ynJ+IrvJ0&1zb=DCrKP2f2a>oK6l`pYcAM|-UK+G`w{ZLqbOVsziUw+L
zZ~yHY0;q%GZNs7eCi}53R&R9VV}+>5fFuUj{$wm07(1_w$@tmOd&i`Eg{ncRlws<b
z*1fX@GyR@aDbAa4N$Z42BA(I`9ga(+hxA_HAW*q4yFm7HL8CWAGq>V!q2_95c>F`_
z?rZLgB_ER^2<RFl`M(TNR5-1nL5IV3juvpIk3A<!^qCXT=+*F9oGU^I1huZtNRup|
z%}`LLbzXg`{c571rfXk9Y*yTt%28Vjdo2MjXI3rCKh*6$*h}0@%*|<1Vta*)01p&5
z(LUw5a;Ia~W3K05j`5#CajVpr)E7>0RPwq5n!vf)0H+Yd3};HX!E4=Kokri?Ue_x%
zyC4r{|1a7EmVy=7x%wbvJcKcb1~!XLy1;P;Bir%^p4UBr?`d3L$!DK}IX?NebYvVE
zV8orxyx$KL-Jlrh-t7&fGCPTirjDx{efE^Cb7>BFb?ujuNFRAP5+xFs{2W@>45YrA
zF|ux35v9qu$m0L>O8%v3AlKllr+DP89Yi~b2E;4=x)BkSvthqNT&%K78)ir*l)pG_
zl-Y`GSD2qojA`R^{a{o2Mj%Grv=??m{^|-a+F(O`RFY_v&Bt9!%K@%}<3IhBA5}2-
z{ks={dd0+(zE7OvH1jDBZI~Wx|Nr??E(Bq24u9^<?tHQQ(qO2|8V}1zlDss(hL6bi
zr@wx?*Pg93hB{Ws8HdRmNSq92^yEBH$E~UDsNrm%&|#?c8LqHVB4r~Rdk7u(7T=+Z
zPFYupR?UPrtIoQ9Onu*RQ9_O`wG-vPjN<ngU+O||d*eN?QKR8~BzhklYHtq-X$EG&
z(R#Ui9@^5hG?tpj5)-{Qa)XG3THAS0M<7!YXx%l@Rj@;tU6Ud1k4`Y8#GH~U0=g1<
zHFUj%zZZ5js>h-)qMJQ78S~&20h&#wAzx_a5Ha}`dw?<CzYZI!rBGDYrAeGm^Q=c5
zC~-GR)pUUUj<kGAJmbwA*s_nooT}C*<#xURDjk1k%>OGXjuB<7#;aaW18AdRYEbAn
z0JOd#MIg}X(t?TSPI~{yNnfmh?+C|ZcyxVMmG~$A(v2`@%<kgS2)MS@Yv<b(08K~l
zafR+kdj39_m@-n%u3{Ik*JwNO<b%<nInn5~IK^W?qqOdM#sqapw5{e&P6yB22NC8p
z%s>-1XX|ipPmI&84NsO@!G9-@ba}#eqE&ca`>>biHdVQlhJBM=SKwW=fuPiDQB_+-
zdphS!-W?;7HM3F!&Pd2f&)_S$f97#SC@;l^b98lFeed5Pri+@ns69H=RqGEOv(sD3
zA`Evj194Aq?asRS67k%@{pXw%q4Y6N;m>uvM=}2XBNu=s4*t+HJ>qu_TgV=n{q5gn
z5%2yZ8;uf^c1n%f?L`r!uyOY0hX(|SK1gGLW1RhV)I;XN36;H_cv`QA{accUAj`Xd
z@1ry{kl4@h^0GX>6Vwf+kEOzt40Y#8yd~49ItQife`Xq~f;w%3xW30qII;chvoGU#
zmd0hzz~!76^dzWlGfL`Ir=fSJk@9Iq&;Ov>=@)6!rC96I&$YHqTN5ISj7)X*urD^N
zvsc>Irw12wh?+i|mi*Ns@izbkn%%%Icb@oQ>v1q_+!;{FAk~1<cZkJs*p+n`;n4o!
z5Lh5HXp;8$Q<clFzrC}6tzeqT@x=HoWMZJBS{F^w59Y=wS5-6m@2be(a%(PUpqrkE
z_O<8!MXl2@^~Q#+pS5Pu^3N4ln!7rF>tx*I-(}%{4FoC!GH$h$3UELM9hP&iaKU&5
zx<19GiT>`~@_Wldv0z!#r9_?m{-=CjLZX}<#8u7^4Q(28JNQ{$CdF4i1{MkZIX?*U
z#oM&?_2+j^fyZSGNoT_4dln)sp@UDrhOw&SQWjhhKvS7N>V*O3g0O6@DPJ}gh1N@+
zVflo?RdZDTw%2yWHQ+yfHMZrZZHL&(<gTMRYbNC^?Drh#CAJ_$0{YF?8dnOH=dS9_
zLn-@TV?ILxvZNipy%|S%j29k_Mo;@Aim}w-N|;k)=4pMtfyS3c$v<O;gV#5Zu!yym
z{yf0r81L?`5!(zDSpNW(X)d`248UP+xJqaSnfw{HjDeBT7wp(cO-5Vx{hN>0nnF<n
zdOiC<cJ750ho+jY&n`-H_b%E$w$xe$ly6^hC3&k{6j#=ZHTMmkyA>#`Z3T9Y1k)^v
zEPE))`@MEuy0BWSN31s}O0<=SiyOsA6bdqFWlTVh=j;&WtW4m%OmA4|zvmA|ggrzl
zMp`(FPgF}`W&Ay-`9aB9!*+q=TG%{ddF2AHM|Du<P#^zW#2;=Eg<Lq-B+*kKGF>Wa
z>rhQqWciY1CINxyQv3L$vlG7B*x0PxU+rf9x=lo=*v}07GEjTaeU!B(JSJ`wGDDry
zx7mg+z4p_m|BU{7GnSf~<?j|3RwkZEKb|iANUmERGY`|0UT*_E7p-~KD6=53i~a8>
z4QzPm9S6vaQxXCIoZ`s^xe$j=LC4RVc2e5*tMtwJN1x3Q{XG&`((@@d30GRexK-<j
z0y*>zzNc`&d3%p0c_->s`ZupX{bNsiGY(~a^LogbiR=Ez+wE^6;-JKT{itju6!t9I
z?!5S9<<k(+XI<Z3+dmnO85F+`*A4TFtxz4NE|v0NVqj&YKFgTTH?4Zza*!&-KPlU=
z%I<y1@OInCpM%lTvDFf;AbA!HnZY+saca5eI#qwpiRr?J{nU1n5wrPW(Gjle?K}WE
zS%Q8O#IRbPC#`eJDX9*9g3`My_OFWVhn>sKq&Pc78_c<n@`7t1@#TGSHJ}U0hCV_!
zGXmwgRdgqZemv9s>+rgVZ5}}nS|Hv+;Pq*BnByJUn7@pF&?FTQmiv8nTa-eRGu;12
zvyE|bbpJT@dlPtWd{+_Q8p_}l3Oxg=5ffJ%432SjUjPA+KN;L>HQtDC#%pP4JcnzE
zSLBRakA(8Fs7iD9Q}??i{2KSJGVK0Y`2Y<=DV(a({!rx)eV>##Z?Z3mo>n?k2W4P+
z(&bw0R3YDi`?qvHMP`^*rDWgl-++y@?UKTWGwF4OLJJ#mT7smc)RJRV#~oQ2>;Gg`
z27ZL9+4yW$_`<M)`RNn1Vn0H)!4tQ|1N|L@HDAp=$T(pYei1hRUQL)awz>HynuW;y
zE+U{Fv(K7{*=XAkmgC=Y8isP7<fy?t`pmJ6=g$qu$rM!<X-NTK09)aDWwKmx{>X;m
zLq60NY}jA#mf|L4{FPCvPVXO^J)$0TJb8efOx?yDHVO$HP`EL9fm9&|!9_P-omW?;
ztK9Eq{^OTHoDc-;n0-|PnxFB=2@dFDiZ77C#LgKUUL6)!o`3%jF#>)$m;?LM0@BKJ
zr+xGww=d4O)Gu_If%8i>_qBqq7lS#>;GJ@2|0x;RLk#)!)d$F7{OdPLK-2+=qudvo
z0AeqjoU;!n_*U6*QS@`J_1&M$^|d4@przb5<^4!rlyraGI`E&-6is6U!3s4I>U(C6
zbgIPuMuA<z@X071TXFNtk^EFo4qoHh8rNDO*im7~h?Ie7sM}*JWfi6>4;at>E@3fl
zXh~w{Z7Yj<Q~N{>D||lgkT}=p3;izu4Um^L&l2l2Hn!<y{rz!Bgb3((Vo$b#qLJ(_
zlZf0PPnT?|4K&HyQ?Qd2xP@FVoZ#^{sS}C$x!y4#@usJ4X_?Dmzq^Yu5+91|z~%%h
z!<9|k)6<-_Agv$gt$`T2{mIG&T+H5mlxa;J5(2y3>T-kEOT0$rk8m-~b<^^<q}(!v
z&p%4$CwhebQ6Ul9pmrSgAbjU`7ggNF)AzPgEHm=YKYMKmpSyM<x;1~TS$Jdrj~hq>
zU5aB1Ws<%uqaQ7w$Z;b?lKJ!}LmA$0G=+5QTRWk(+3f~G-KhSdMGA3->V+5dzwz@m
z3DZR{`Vwl1r}cxL01a~ma)&%gIAK!+f0W-GhVxs8AKVhzy!NdM_C_Zm<-G_*E<K*1
zmAuka#rByh|27GLKP?S4(u+!Ri;+}YWwu8l2YQLgz%<Fx<d+6cdS(!()mH|Hgnu_V
z_{-qX!GJ8NE?cL9Z9r~QyS91hK{gDKAtu;H;vBC)N>yslf2cpmH3A2AY^|4DG3wK?
z_xq4XZzFuOpCYlbBZA5-2?$J%_uoxyJl##r{d>ufM1>9d2b71k@Ih4jH#z_tOf%FW
zT#dY@4vEWgcQg(vs<-4l;Gg}IM;5UMIt`V3`BvBbOz1X@%WEccTEMYmG8A-}(;^m$
za!wtwXX|SIC;0|?_JplgD+riO3NA$nj^5&odY=cq2@eBkCi@bnzOwU{6W@R6aNr>b
z5?5Y2*<8%EYB3&`3mV^VzH;)d#R>dL9N-M0pSaRB8Ch!L{zpMUEm`S1kMzytA26(F
z(wbg(I#fWrk-_|&yf#hSUz;BIY$4mA{jJKOXDAG_uNh3n9n#@>1fxR314fSgIo@Ex
zIG%t@oUEtRm>kgLY!;p<{9c3KFM&BN0fbIcYPupd$M+P$B=Y8{Z`<r9k=KBlScg`9
zQKEZUQJ+#ayx@QA(p%6^c879f`}gnC!j7Z*>W}vx48RAV>p#7^(3|{CV(CAYAGV8=
z=kWGQQ&AC*Anny)f6KLOUZfb9he>hqqR{P8AnECICnBwl6sLcbWtQuwjU@ZMIqb;z
z1-%CnZJfCQn)w_B7}7+!+bP2ZTH=@g_pvumAXfnv&0NaNp`n}?y{bT?4p?1BbB&7M
zMWn`Q==*6!)rBu5Ex>v2|JE=sWudu3CHA=@=-8dZs0|ZAk_L=VkSg?-G8gNVG|Il5
zJq3i#>W{FMYb^OV@Mf{@-(OA>=Osqu(cLXh^R8@$Fr0(RPNv$ZSooJG_+vAMKmNzV
zPpx}y$aMJ<*n83hA85rlW||uFzbIWxvB9!mD8DW>oVEQAYle%A9jnn>UbKARHt-Fw
z#I;&%vi?yPAo+K$Kax$xrE)s@D&$8={|1GyFeL1{#Y^=ATIBs7k%B!x>f;aqFoq19
zLv4HU;;P>5Udce<$2jlViLYSELx+>UkSY*9JFKBND4rp3r|P7O>nNZ7ZSjHh=c&~*
zl2hu4kr!U;7;ZTKP#j24xNO(woz!ifgtbIkS`;?3PIX~{k{L=3maX<r!&;KqjN7-3
zjT|3pkAL69IKta$zwD)ZV{53FMc%CzqQk4)`lv*hCLw8w!)Q7GThhy)+UGSY`O(BP
z9O-}SW#izMsD80>8lsz(u0iABR@l;wH9qrd7X%iSfWIFkUN)ck)408y`wz_3A}h7K
zCK;|Dc|?VKpADcy`-fNqkFJ4wW@6B}g<Ca!)gEReS<pXrum>o?uR1S-nu|rkHX7aQ
zInn^SZHuxK%9<%84yBXu-dsduY@#=31*JadPnszd7iklF?8(G)fAJNDID}CW6!!8!
z=*E-6>*U0{9+$p_L+SGjNh6gx+l;@T27>VhHsde;rQT8E9XPBovPW+8w~i14$ql6L
z@@q_T_FR$g^Opas!NkMFO+yq{JqHu3ZOz`%hJ6!W$v%HrQ7PCQ8gLrop!@m9E<-}E
z>4}!m?XwquOFkS36UX^&KZixBkKUcv*}x-#PdhXBW@=jy*8>A<)Ts_{w5j(81NPPW
z1*?<??eCKe38Na~Z=xGw;vq^mM6=9g(Hq#ELCIVlXsDkJp=q(caAZo9iU*DHjK_jz
zZMyw^#jdkQys3lR1C91(>k9{kj^_gwScv04-J^0J$$W-u%!TK)j^E?#_*Ks+|J)=_
z_3<1Vivb24{NL9iSQK+)_uUt#nTlMxy&`pc3QGtJ6dbi8f0(eEcDS2+ly<;!)WU(}
z4fn4L{0Meo??*WpFSjz0va(D1RE6+`h&1E_S{b-Lr_nfz8MDkXv6O@3<@bMn=_Rb;
z6AzER;UTDMm_Cc}=i{S3mNRei2qL$X&iYv{Q)E&!_&=k<Kyn9}REDmd&dO&ts|fEF
zx1<uAVi<t+IKrya3ScjG5<}&t5dZmk1CZD_+J~IH9==C%Zpl$AXNiPLgq9#o5q@v7
z#-^`lXegwF5*)K!>|t!`fjaf(2?ZJ8e|}#P#8jR5G>MKSTyL}||NEuK?}@+zTW4U`
z%IW53<wW-EB$%&kE*BtEA$fbJVmj{wg+a)x;tpIda(l&o#-6HDGjrT97UgA+CdCzu
z6JTbyzA|`>bRr0=eMK`gCS{c0ROTn2Y;#Y{=GNhyAmBp8&QU$mJ$gy3H)TqZAn1nG
zpM)#&EhjYhkd-1orz%Lg$BM2x?c+#M{v;3IGe>WzIYxv*{bTv+`;x716BURfI)lE5
z@O>jCNNmRUKH~k1RONE&t5_bL4l<^BFQoroVGKAJ9M#gqBuU(9L(X`V_#nb&%tzO$
zbeq7~n_2PK-<Hwc1Ddn<?RW%LUpE?{_yzbmma?=zqC&c$fTtC`IV?7i)y3TWD%|FJ
zC$p}Q&HJ`N=k0>i8fvm+_02^&i8l|DF9a5|`?BB-RhCx8fzr%`v^^oPiIBj%S_i}1
zE|<ocU$!lyUaa}|n&$r=mmmd;ohVx<347tFQhNxoRPego;Yt2_9_@kqhomTZQ@0sJ
z!_~Oc_>s25%u|(AzG#IlqBxQfCy)wtXgXnuZbqtP2>soep5dYbPnTKEmqkJirsN|1
z(@yP$?4tr#kLwOA=5#gs^{rV!x8+AKm?}k4fASkmb6o_Z7iG5}&n}K$!TSqp-OQh!
zg&9#&fx%F3+M={5>5FfRlmxdSSk-G^W)$IJ-yx8E7LB*gv6Dpi=}b;Jc~Qk$Y_a66
zt!mF6W>=5`&Lbdo9s@O38+=u85Qv1HDZ|au)0fZ6=CRF1z|EIXU`g=7EH`9Vxo7P;
zaFZ5U2zzzXi^5@f_Pu}@JPqsppaek-BpVTi+DA-hvgmI)+bm57)ui;ledfQ1K;S@k
zQgA4k_YKUCxC<0D0xt~R9?>h~4%pbg<8yp5sqwr529<mk@nKX-i^>!+!O?g3eKRL#
z1|rBuY>DytG)Kdag)KoP4L%JWIjiRixp_#mV%X1OAQ+qAj!=A|aKVPSV(rF2J+BSg
z*tkiwu9!H+FH%p|Wk&`X(Z9Y492flD8A>9wqro_)u)f}v05cC{cM(p6rQk)WO;!>H
z$kt6UMSopC4^g8uoKVrPi8OAU|I(Mp9@%u+)?e|nx}J70;c5D}M`h^Xj}cIjZ$4qh
zny7Es_ZZks-y;9mGL(i1w=CZ=YU_H0hn9U%I9AV19KcZ<RSx@%1n7ZZ3ZNmUiwzI_
zE+xOZCL=^by`V>3Cv+*kYI-%VE^7A|1!Z$Uo{osXM<JHx?-hTz1UJU!5a+ffJ^$V*
zh}?ofZ!xNMhBe*0h5S~znl`ra${;Y?JPiz6g24Gn8Z34yss~=w*~gdVc8#=4X6^)|
z%|M};Q-gF)I<|6ZwPQL&8Rt9YZ_L}Mkx-dn>a$<5#RS)aw|7_qdgXGT&|4tndVd5I
z;sqzX6#vDxK6(Nox1lq(+$#3F(VUQM?pM@Nc;&R16!|nHS_+AGPBgW0ixLHor7`gE
zKrfUNM9u8Wk951Uf-%Ro2@>*a+w&9nf3`a5+r0eog0^_2%a+?!`iIo2#Biupd_>__
zG4g5eiy(=~QD*%aA;zMGjiV%NLI}nh_~|=QVOBfVAXB$blrJ#BVE<3ho^_%LC-;`8
zkn;kvq?Hq2mNsQJ#gEW;7~V}3r3Xf|JAf;;s=YgfIqavBA)0c>!~5yxsGXS73J(d%
zmk0K!@F2phn*{TKenfNe`#>{BGbJ3bJsE9XgE9?WP|H495#%=%2T|KeIwApD(CeAE
za9i^My7;7gS~W`K*(;1t!-Es6;sk~Bh4PO-B7`Rc5oaL=<nR2^w2w63*kXlx9Z+?U
za8{;+Kt6I16BV+e=?f<PGkAxsXWS+gA*8~7)7F0}SW+xnx{}kapv1`W6sBcr4%N$(
zB6>db7&E&p8>z?Vhs&=#xhPQS@Q_26RTGAlY{IXk(VG4I(Swihw7LmqUT82Ri)COa
z+3|b})Vu7Z8S7D6jU|%q8^a-cft4saRcHKNm8ToshYW)82|N(5s-mt{WU@VD)v$gs
zH4^v&2~_~TI`NyguN!Ka=%kX)JXEDKl<1~x=@TH9{N!*R65;RCk1?<|Lz_fMJc1qt
z4kPUlNi^}qC5Ws@zVstbHr8dN8x_mC>GQDK<SZe@`|)LE1j2Fxb}!-Iyyv>^j7%pb
z79YZd$1_C!lGV0XVT#ikStX~D20)9oxL&ibf9XjoIKRNu1w7PVQDAy8xw{K+?6*Gk
znr;O@4JwCw#PIC3DzqgSYV_6TX>w)G<8=3O_WPEvuLz(9v`94-jM%ovc!uNer3tlU
znG-&ZZHm0-eJ6*psQ_|Y9UQuxd+EAPUtPYhGKeVZv{;d(JaUv56`PtYrE1I-O28e0
zrk^y{wdL^m#iuyFi?|)pUl(gUkMR4==RPm58Hl7HHp#yg<GUs9%VOS$*pxeRYiKGn
zfo{;-@0J{ftshR5kIY$|IPM{e8eM%a|KvJ|8BHB>WPSaz?e+UD*+I{MQ86!P`UPWO
zD&C)sM>E<1TQr02GvBDc@O$u~mhr8XVoHNwUwqq(euWT6XO*pb;6CwtS<qlv{iMU&
zq0hPam)+UDu_v77kVP2$9;_83{3h?s*@S@sBB*iPsnCEwfHmp_mT7i+;)69Qv4$-;
z%HQ`CvUqz%oJD@6S8jkpQ&}EKa+6y`c=r)1iD|xWMlLW(GFHQy1qCk|zX{A<thgnT
z@ECvVd`z=VV)_p0%nDaNTWOd5K|vu|gA@ZlACO{`o07~I1%b>;amZg*)$V>_dV&o|
z2J{?>$k<Qv2|Y%C2EP<Cv*!GGzpmmV*mv>>Y`4#`<PutRcA<4yv||5KOD)t9t@&Pn
z=^IU;pFK%YB1)D--4W!8FirT(CyBcnzca}|9h5|6@ibIf^>r(vPHjbaXnn$zfr{~7
z4?@M&Czq?U6S~zC<-5XqS2EqYQbwCozd1Wsr)q9E<Gv}(6S}5>*j;OCf8icU*)W{d
zgcJLlQeL{~fh6X*9KBw1j$d^a^H{gvuL><z`Ry%j-*0a1J)M3<yX>r<D{gv}cpbOH
zl<j9vy|WQ1DNk;g<`~yWGu;02+iYe;{`b3`=E5AhXPukld-Y)|I1)VfW9-3F8Jt07
z5zacjK5ju+v34)w1?J+n@dM_bNQIJR6w}PEz#Z-}FOnzLHI&U44~mRu@9sG_A5A$}
zV?5vEe(R#fKi@Ju`e2`^J1X$yY+PMve%i$hrUWXhcd?qp?nRdL?d>7H-kv*ZQY3e8
zGw+W_nv6Q)N#JlPY;r>k3G{d)tc`@hm82vYI#H2idqtgXvo|ehgH-whJ0Qe6k@7`F
z=*k!p)33L|mUr%?ox>AkfLz1m;I5t?-}*GQ_GQ*rrVlywrLuRw;(O2MvXQykAb-rZ
zMOg0X?lmZNHA1m-;;L#4E;$ufDbt`-K7OAEgO*}(^$l9P7xQE37a~n?KkjV+7I!~u
z;(~m*>)>cb)az<(9sTav4V?YFp+W@1_%i@ULgBEyg~2G8F0+o=Er*<bfg!aCvBVev
zWZTE=T6x_2g^GP*z>CUl_j*EnOvpeI*}Pb@-0xl_G`+AY2<63&MaRWiAeAL4fJb00
z6s0=`b+#;2hyvt2P|1E#5@)Z~!^961WaFlc?L#IrYbF)DQTRaF=Giu8dWSuBu%A7R
zc70SuuZ$?kYeJKDlUG~4;l<~oEHC$?ZKRB75MLW!+)p~~VW+w;%w%gjusXYbEXh=s
z#6u^*C6=-`l}+P5S4f)`bl|qRp0}0f9X8(0c&m{5GLE#W<Q(r3kGHG!+(gE7MA=jP
zxYLVhJaj(fy8V}oi~8Vap0K80LzN`xmg5Th0dv8;wlzsi+HA>Hx1Q*g<z#+y)cQI<
zxs2+iFLMVb;|~Xt*@ZYiMcW5)UWz!CoZyY-A3IgwTy|Vrtci&<m6leWClR^b?`e!Q
zaxzaU7+E(5%<f-|DL3ABYA=o-v~zJxs6-8h1toX4S642y?>Rb6;9Nr?w8&j=t40xU
z-RR}qQdO|-7-?xjq!5^3r8ydsgm)qnP8C{%N3xVpy3qV-17W<}Aw*y(ut7F?*P0<i
zC&Z&JMLBDDyd+X=disW;b9}I5HG{yP!Pqk&lc6NM(aCfb#lw|OWoJksyyzkf4yn7=
z>@}{d2ensd<1rm6g&Kp2!ox}Aa3Bx_;{u$9!MZ3yE82j=b(ez?$y=3(<AS9oM0Yf%
zJ9kkzds^|bAPfsEoD8LBo<mRS<}@10`$#0W$o7EtJfV>H$GjD$M%3ZP=>&4p@^q+W
z*r))`TLMc@sZ^)cybk|BrSgUEO@)Ox0Qx3!G1bxBz`@^#f4zxJx%<YIFv>WoD~|Ou
zKa*B0Wgsq;8}L?E(Tk2>{)qYjI}PoxBa65SrSs<r_i)9b%3j~>kcv}rc&%Gyj2I;1
z!#Wa21VJDF`MSeg|Jn4?N%!EQq_+NiySNci(oII+N}j=>`zgn#3O+9jOIs?f>Wc7J
zAx*!QD(enaSAwh^YVzH8N59IQ#szm+47-z18CFm!{aCB6679jN%5=pb%M$FoUecxK
zKfqycN{RWQOYV6YwO=JuQI0_5CrdeKX<*1z*1#D$TuEt12nGuWd1pPDcj6g*X;Kt6
znkHyrA&LX`Pw^J@(`$r%^Pb`;_@1;Z8El0so4sru_~32=UgnU~=L516;=7WAh|_c|
zeY(+c0WD5~?7FI9&2|nXUod<?A^%9x)zhN5QJ6bFB^>xW<zevbhiCKJ&ToD^F-yDy
z%PcGzhB%BjR0SyI6z2h`5KIL4O*6Lm*yJ`A;&sYP7e2zGx6x847+=T6Ia@J$Q4mfe
zs3Byogs3RG#Qy7d9N7(uxFZHEE?!hi)YVmfKdhPa;n&|4<f7bJr?x~YJ-7leg|vd4
z??yVWE)9G5zQktrv*aW*Ep3WKQ7b5;^c?WA2EHDMOcfaH5Ptz0y_vSzB0MAImciGe
z;z`PFa;A__CMbUE74=SDfsr<LJ=g-(L|Yk`04>pRUr>x@+MK&NPg<duX80>fqZ1Be
zGakN(@?n1>cjSQHrspSN)`+@;Dtb9_&8Qi9)FjICsKnOLVAg4~1MSsiGR&{VwU+SR
z?lFAsgX1Y>(lJ!rp3J#q*5;P4+FrYzg2MJIgbye}1f1^KKLA*4o6tRXDEfGY8*Sy9
zG&QSd8}arfeSClV;4dz04Jq9z(?GG4<L3fH6e^5wexBSq>13bBm)&pwB)+P;q5C;#
zL3PWmCnc9pNneswe$l9?qn??oq`H?JYbeT|N)Z*rU}`2zb)=`HB@nU~H8bqNdLJ-4
zjXNx@EYS0n9+N}dr@lDD%)vom_c07g5z#`YY(=2m-|9HqBoV}{$ws-(lm}~xz<f8A
zk}G+|A<;f!e_MA^zenjc8OVwYcyN$k$k4@MNA&aqBqEQ_w|as@KLr;6*M4(9G0x>G
z$QC?Y%EwiTDGbKC_##2foBO5BbQVfeh5LC%@lYGY()MzJz)c6YX!@6vt*a_~Y8PWB
zjy<(9mtchN!?qCswoMwwRxzj(fEBQN(g1w#mL-gc6Uf%WFrlNO;auutGjI(G(#c0?
z<S}~!$)P^cgh>X^6_-SNoy(TBniw*mOIpAoB=uOB(#oAdO2a>D_xxWnIo@5JlAdiL
zYFZW;-q`c;hqq~N4G_+f2=rEA1yxWft1BI_wna(4F3>%Vwu>YSU54kFz{;e|?0Vnq
zb&Sz|yV05wC~a4if@fINWXL49{P?HzQyP<Px~I%Dmz(`AL>{XOZ%NY+1YB}$&8b79
z?3C~gi)sx?=!{-XpKo|kZ;GpyGm>xNw$swbH}5o`w)MMyU|>b8TkpB7*cjTXl8<Yy
z7m&(zaw6rdq_(eMmikUZcP;whqef9HV{;mUb9s3}SO{7z1!|wRIa6hK2|DEr32_u`
z=i?phlr-H#Lf5+VUdC^D-Ir~s3eLVu6<DO^7@Iw-=TA9HvDRsJ#VpdTZLyb>a$(F)
z`F^aAj$sYvhy5sU<u6Kf$(VT~|KzB=7L6U_7X^qe5rrG;V23Y*IbSKeoNPkvhL9|(
zS>`u5Q24F;LAr}%`GXt%38JhG>e^gRQ9yg+9X3p@uZ@?U<lQs)AW*t!+UMkJ`O@e(
zDYiYhX(N5s%Jh{<Fkl-T+~&$emq|nlJJe~CP2LXon#%s#4nq8Gx&g2Bn%_sbEyvB?
zDW?S)47??7$3^m`hL@7Mc>lWC;plYD`ZA#s(*ffbJ?K(9(fq38xr?lz@+yyps@x<)
zk~jt0*0(W%m<L@UmX=@3zn2oClRXg~(ECDIMM<i%8>yE|#AuAnq42$z#_ZA3YjTNv
ztL&6B;zF?u1N=c|^zUxulXk}RR8gQ`sl4Iu3k1hU^ggA3z7>tL<)bPxLLI&@UXfIj
z9?+#_#eb9UNJkZ=;(p}9KN3IIPTLhvrf%c$Y>)4qbe*#lkHnCwzh=2Tg9I(Tna_TT
zq*u5`F=IZBn~|>x(fO}8*1w!s8x6Hg+)kK+K2Z-3iuR!Gbr|u^#+|P`a?;DrwNt&N
zOkUMKpb;X=@J>T@1=(1I@g4KA7x^WHmDpv5EAZQEj6n^|k!w~YpSbCGELXpKoi}Pd
z*Wg~&Nos5!5b)Ip4(TKa?u2;nBJBW4)}!<E>+@()qBE*ly?GIC1e_+vbTshCIPWZx
z`->Qpz3&2+W73*#;3?ezvba-!Dr@=mxh*%BH+Io84t%*GOg|N`Is&5q1+vHim+aD0
zh-{<`Bq4eEO}NdSM(Gi3i0a)hYxsaohtKfl`v)pV$9fZ5>+*RpZ&HkRY>kpitsLb+
z{>5bRs!HW&n$^yAq^M7U4%Zl)PvA4tmFRh$$2qIAhoV)TkB+DeMPGUJX!5f!U#SJV
zJ8U^7IzPQP@2wZO4u(yvA!k}V<xQHeaSWmxPa1s0W0Az=8DsVqOCrg#DhK&&m&)}v
zRpQiKYh=x?a+Xmxk#AyDhO0kuyv(pBF4LJVGA7*6fHJZ%Bq~x(`o~=Sm|YfaCar>%
zk+#O{Ex#TsQLqBf;<!ouoM87m=8z7PXGY>KDQ2;!Lz~tEeaI)=@*7+>(r&68QpA^6
zyvQH?RVsv_5LF~ef|J)_mgZRfXQ>~oXDt9e7_t-&#^T8R*0lPFWQO0;xqQ9GeF8iX
zvmo-s+5z;iNj*g#z;+QpOZ++^ZuJ*Sc$<-a<`+<$E!gZ4L+Qs0m~%g<yEvJezPtb0
zmv1?@fnl9ze7;p1;3+&5K$RYe>1JvUB<{1e6<C_5TR*K8c&mKfDx@C(EG@L<9vMou
z;t`&Paah!HXyzAqt}FTk5GL4@Z1xX1r9CfQYy_uQDSI%$;G0xv&l8hE?8`?b{Ct>m
z@`tV2^xW9jfq7x1qL=q=EW&_z9s)J6ki0zA6vPD#qr6^RxlF(p8r9+8i#qYllpq*g
z!FM~iaRY^$(B*=X1|ykG<wMh@tbI*FYQ|^31!G2ks-WD!KtCA}B{$(tUXQ_2Qo?ja
zL2;N<iyx$RanKOAH)i}wrmiLC#+J9Al3Ra^XxOl|@#!RnaGuzwELBu9nl*@F>EJ1q
zotIiqm!Cg&EavlB?J0u+JboeKT<O~C^SK5c&avq8f+$2!yc;u)JP~POF|Y|OM%S|0
z4?T+^_A6g3P8&48OQSF$5rb!gZAO7=lXKD=+%GrC?{wk*a%YE}oEHT*c|kIZk)2xk
zXQcdJ7rOv@dzk7t*Li|VW$JRBP`@Fvs-bSyY{vPZJ{<SK2X?vPqhKE-K#-S#xSg%H
zq-dFkk@#yi?YkN7$^*<YrCScOM*XwF_!bPA?@(kAyevRy9wa{YLyBZZ2oroE+HgSf
z8VdP<%vQx??&aEq?+p;tt+!m9RRPm1=TJ28O@w!cH0G>^v%%F&-`2#YraFF6GgztY
z=9lRkNyv~5s6$c-XB;hOwOEHIalif+C7~tq6QVMu+I;4@UJ)UO6v~e~TrF*UihxP2
z3^|7l*9rR%8+b;f`W;qsg*qg(_<@J&<DVBv`SGte_M82gv{=S>B4U&FmGsoLJhx<{
z;)7L)Z&upT^Ro&kX2ilJ&n_PqlLc{^#;}DUojecoHDPyubq2&az=SZ<fatRvmu!S(
z_nfPQR%<N+>*!ARkHOyjXOJCUEa&+$aXE&_QF!LHz<`beyGry2?{5j9<yx=xgcdP1
zubxVgGBZ;d>Re3aYV7RbS_FrMW!1lZE#G|GOH=Sf8UslhRDO2B)gQGck|{1Pb>Wgx
zts}&}1xdw5E#s;CZaYhjk}3Fg-h^mdAUKn$@0D+##<k){09HH&U`3r%38L_KI6tJV
zo`{7Pz}t<XCt%?KZ@f3`hbwIi`)`#2;_!jBU)ligzSknc*<qjX4rGmE%024cdJ*)g
z9X;_k3Y9Qmb^DcoLtgl;nKu6Y_AoPlc^rjdC84+!fsj<CVvmxBbni}HU@CtI0lu8R
zyLk~$VQ03e=vDQgjs(E+vl46TsVUT6;!x6Uf9kdTP_i;uHr&6vwJLX8r(#j*jxHg7
zc7v&sOjVTD*GS_p#Ymh5*&VoW8#RM;XzN<Z7fmI;KRv;7@d_a#*>jjGr+T#s@S@SI
zCYf{LUb|f4osFSN4Pg?G9@gVg?vuRXEAC8-#bu-ht?wKfeKcSs^D2Ei$_1~2FVeUX
zAuE=z`OuWgev{&X;IxCy1zn#eAJ>Y3a%Ezq#~3^8s=6cH_lt=E7ORuC=UI~R4${WP
zT--#ZVoFJhh@>!u0c^!b5+xi#Is5@JzSQLKYFn2o<=zQ;q=<>1Pc>fip9d6T)QTpz
zdp3Pux2uD54x%Ne6@ru^LCHpLuh}tB{P*=6H~1eLHr!=lY;j`}!GpfbEqxH8GSQ;o
zGM^FbZn{MO&TrqxWR6_H<0-EcslVpuZ|m|iDo=Adn+V5Bd`KSu*&~<%^}FL4s+=v|
zF2?gQL62UPaLhPSD%bnfXjcNnoku1vLvzm~D+0tR3f<+;e*unoy0E;6aqL-}{RDsV
zBvoZ{h&D-JFkURQDJ-cAvqfE>TVYYHUFk;{Q9Tq*u1IxqXjiJ&*;_>!pifU6YV<46
z+MJ6JZTP=z3c2}jq%4>_FG^XWhc?TIhU}$MCXHskk*a4ej}`5?dP(>Oe^i}Bx-YHT
zDM#_^IEI)!96Ss{6QQId_GMyFHdFxOw)<5`z(JN-6M2f$#_Vy#YQuVsu$)r(Cw2!S
zziHQND`@gVysbqMkd(~pvB$z*L$_bg8#bUJPI;%qQAh6c<4@?w$z>I^n618qi6+H9
zr7{@-sPrNy%*F=M7$(zBVk9Im1-zD9Agn=(?J5w<NS~uJ9ZL}aWaG<wQ5bItJ%7~S
zXVk@f!`Vl;i_mW&bNdbVBmhmdc#aCZ=-h~rt+;(KM*yt6VlT?9kJ*z#IO(pRcbrxf
z+Yk&EaM;`49Ckwe)k9CU&`WHI!dkn1V}hVOO%!B6YLP%z8cb=~h!oN;ib)?{N|4rz
z;wP8}mU~2m>Nt|ho^zMvM|WIVAK0$WeR;;GJ8vCv3=lNR9!9~rayDJ9@2pUGDoeg9
zD|^OhOt>_}l;{Zr08ZQZ@*8@WdtFYZ(evOp3V<tZSI(M{)u}><$gIuQs3O7;H0N+o
zM1Nu*W3O7mxu`&i-)ZnkF!bEnm84t7cpT^0d@Rs>zI5+^l+rCi$K}$RfYTJrUd{Dc
zBPw^k29p@)`<9@(OGv5c;o)^Nafa$ym!CJ37Au0i^KSHVJ>N?8J1Lhw>jV7&F9xNk
z-jl$VpB>NpdRhIQn`1(6B)IGIHW9559N0e$Kw(YOB8$t3y^1@$OuAg5fQuPx_O6^H
zhFw}hxqE<D96xNsNStWuDLDwO|7nzDgX!>#?l*2f=KNo$VS1CPn>qE7TyvgbUBbHs
z>EzT+b30wRd%pXWr}+s9m|j$XhJ}(Dy5~Nv0OdAglXtKh5dz`7uKt7x{#?86@6y`Q
zfx?t7_HH$pqw=ay2o$NJ&Qm_}O}KWZp{^OrCQ`%~gU=9*DDWEo_fsp}VIQYrw*LD@
zej3fUi>7pJWTsi2Lt;D*YyG@-&e*9|WgC3D2>HKo+6_m1SyNVb2opUB-be)`PU=b<
z`etV34)WM>N&l<}9<VgzqZSvWyV145sqLt=&dOP15Y)z`V2J!i<l#<6nDR+dHRtjh
z&9L9x%SPK<`_{_%2)>r*bYJrb4Ja5EhlOt5H?#(bZHsGu3Vs@RA9%PpHQahy@M~Lg
zzh>Ev;8j6Us;H&g&rqKj&*IX|ee=h#G-^o4*Lr39ym1RH`-n42x2)%nPuEy$muMm?
zwsa?)C=U}d8QYKsxq_Obsrb`N7N31b2fqTtTBzVW9-k0*IK72z@)qtyx_qM^+3F)-
zWs{v1-=Ne|ks)vc1c(sc<?Vq~Z#J%@|I47nCV9HVQd&+S<OXTYB{UaB2?qLoQo<6=
zZl$u9GQZxuHU4OW@yiU9A$b8X!PE6ll@_1V(=e2tsiR=3amMM=iK^;nV<<UT<ztg)
zU~82dY)8<Ej@8_lG<c{5=3S-%ad~qJh($&)!-C=s?D$3QV;9m8C}asa%Q`NCyP0!<
zA~e&G{lf~e`EIZc0MB4l5JW~JakN*Bh8<xBndw0vdaq=*0u~#z6%rwsIWfi?@uSEh
zqOk=D;#dgHQC7uC3QC9+v=;G_>Iz<4rcw6vL7zg>0^c345?0sGLk*siQfv{2C~K)5
z<bQ&N;z{C*jUX@BAKTrUSd$7c^l0wcX_FgpqoJcVUo2HpMwW$;`$HAp_3$3bYDBqG
z>)VVhT)c9{rWyY=_S`lN2tyYX=t;K~0&(*sb^9?IsuiL6MZ>ih=gJ{J3Re_X)r=C^
zJS%3_XifIc^+v>Atk%60sn0!b4?X>g>zWW&Mn)X+n^gD+4l5Tf1@eXDGHUPJtiq~g
zZSuUKX;|+@!$U+$mXY3>aliP@QLrFE7lptc0q1TGr6;dEhMi)L3C3$2V<bC?xrsy9
zE35mYq%2%?bBDjF3Ia5tIXLQ@G~HsI`eX&?6#Uv-7{~LF$wX-VZ05N@1rog5?xID%
zf3#@TPZY@&gtLjHkAUPoL^7p8(qx82B3$%zGcn}Rl6)eC`5ZjTfwb8{w4%E=iuxla
zw3vQ@c=ngT-xO@OtlZy~V3W)HJkMtK3mi7m!6vWPZ;r8T9C#L}Kq~we*a>h!27Zx&
zw4y(>BGX1PBok>x1?(3S<Z;L+zhNdyKO;wpY;KCr%f*OX6*FGE8h;WXN@jQ(_1rJ8
zIix!Dsggbp`8MB!&Ivr?`sBkPE1NNlU}=64mXC&mfn*FSp3qlxK8f!VucPt}M&nrX
z@Vbq{hw;&e5Q9H{Y@yn<{uK-y+rC#D$lANOP?>mD{p%{Dq5+7G$SQEf^Lu-p&3U+r
z(rUHJe&O<;WXk0Cf7Ri`>AvU4ADVu}udh41HtoSJF)(}7D$%|CPWiQXWQsCVZt2K3
zeU7F+f5mC5UMUjKP9WD|^zw^;3A;bvZVKBQw#K``Ov=?g={5Jqd-xw#XQ*5?w7mH4
ze(|_2g?*)s?}Y5If5~Otp14d>=CRxTxG`pz3{VTht>-#L)nfKNLCgXbar@1y(l3l9
zxTLB%jkdX-#V6EJ%fI=&%q`(%qk8NTdeo=!)})w;-*xi1c~RuDFz+n)u%N7mU&Zi*
z?I2J0G*)@RzT^BO-uG^|0;}OofXT^@Ml@<I4i`el`1KZ4+psR#T_(OZ`Z6#5aOaNS
zF61fL6$+s{1Nd>u(k7!&9_b82-IuYMKvh}K_;32bM+Wfh78}~(!B=7Fql0<%BhNho
zxTum>^6E8oIAjEqMGvozj3$Q(XZLPYzKZF7q*RW}Vo{CsFzLjf=oNuNrjW3Yj<MhK
zaR!NBj;Y?q<fFxUQ^AP<eTb7gB5^(Y6mAyOb-xn4rp>H*jXwQ#<^koRq5&w^-9A9r
z*PIrIYrFVE*2QL?E^z?XL)rzD9JE)J!#$E0%Qk5gbEfPz_4xP=5V2Xpl=KvcSMj?E
zizQbm_%5SbNWU(d!J1Tn3b67^_u%bI_@l(#1_<EMtnGy>Z(60^#z+ivf4r|Q8ZKC?
zX_fj?X#RPJ)ga+}&v5&3t}7A!%W`R1rA*QHFPgnFr^-auL|sWtOygaZ@1zp(M7w)w
z)!5Nu`cq$NFxdourb1NFcz;q@?L_I+iy<>`%9N`gvX-aYktc05wbdHW8ZL@(-ORaq
z$tvS!%);FX^R;&mdslZJhm&#=iq$QX-5V_+{rbY`JJ9G%p^~Vqp*i~_sc+Bg9=t}G
z4k~7&9%?WAl7wc_CS_&y>6DM}lppUEl*9m08y59bo5K$WVSz_rf6aL^KLHpNIzi;7
z%$Pc#Fd=L^nW<?H{z2S^=OzlZzYnxt<{f9P1RMfXLPh<Ku)K%ZR61ZY0^Z&YIe`P3
zR*TM~%?}&sD0d7nS$pbyCu<Sf)l>)ToU|tU);`pV)2+w&&N>lua=ak~gHoWcct`eD
zDg!RN1F0{O1x50iDO4?57MH7#KO0Rx?#{aMAULaWx)3C5ch=)|3&K-D!8-@O2srde
zfx>I&Uc6b&1Q*L6)d11INd?S_)O${o5xns8N?Os7lx1nMi~$-H%*+p27_4WQCV{kC
zxTR5QF66<&lzzt`dL@*|eF2R4RZ%iKT2_^0Vdhw2QQQyWB_{*e<OeK-@n88*gJ?x4
zZ_{od>K06EYd+~1tn%V9WItL9Fb)F_3*MiJ0XKj>1Y*2XXp&>6<@A)efrO`(^)|%~
zpUcN&@Y=`BQ^Ma@Q8rDD5Tqg>0gg4EJIFy7?~03yN*|urf+}}?=&_r^$iba!py%1m
zH8H`PZdA&jv%q^ruOaK?NYTmIfWDF=&qI_darc)5%<VL(lO=R0$g6K1*iE%&8;&}J
z_+Q70ekhlwC<%H97kf3=_=FaRMUI6UmPNnZKbna<zK_lHx?Mkg<l08N>a1#}C9*da
zFD>YC$6rufnRQb)WigmOTJdvyz7GCNA!8xA1q0>Pgu?yCqg$SiTZhxV$igebG^#nz
z&bg6SDEax*%dB|Oj#?@N+03i#VM_C_R%_krY-Dw{)Q4>|Nk|q<Khtcy67PAL;x*P~
zZiF-YfTj4Xo~j3a79HhK9>E=b^=8x)0A7j!!1rpq3Ugll6@Bp~r#Iqiss?=)AcF2B
z;I6`|+&~@y{m1J>lD8pslKQ8_Sko7SL>|*Mci6;(KWd}5K4pJv0N|(s_0DUfGXi#8
zz;Jbe1q5OxR*(#_<gPKzEP2f>MX1t{A>``kwxkm6Sj>^7PHN`_o^bK%ibA~%3t5(e
z4^dJW1q8hyluWTm1IsUPErf~btA$(aL=>K+7HJY;xC%;Sz3uA`3+6uD^9+p0<Ho_B
z*i{P`SEg+M;%#%!6=2}=nsOB_pZK#Hi90vcj<-5wW7KY}|D>eDX#d<rd-O<^<f^$l
z1>TUBY5}f?7kYInP8Q`@?7iP)!40Gb(MBD$(Pm&wyIoYItY?h}d=$U>^pVV`aqFP@
zRyv`*Lu19_Ew)miq-A9I(<~P{wJU8ha+lTzy16xj;sZr#7&dt$aS5$x$DzkFrSm?n
z$rRgjG2pDqN=w27i<x%$Th@u<;(%KSiz+zEeM8DC{5h3&fTe5=6A~&d%=h_`#dt?N
zH~(_=xC14@!KdkH^PZ`y1KM#QxCk{cK(=-<Irr9C0_WOA$Mdz32-;GHu8p~21?2~h
z{_1`$-u*zl(;(whDg}(qi0?()J<dIj){r3IBEIVwuB|$dUjE=?bi%e{NU5f&EVmMv
zE;<2OydR&fGb=B&q0CM@{9dy?srJP+$9s)xfL4VjbX;YDot-<cB12uD=7SkybSv;H
zx3=M)bjtt*%Ef={re)GN(DnIjo+~B(-n~V0@16E%_tgNet#{44U8^TP%(w5oay`Zd
z7Q&oHds85k+o~Qf1g8>v{9W?(Hl|Lc2)e(%nttvTw}t=@Q>2FEryXC~cQDM<$Kag{
zu5*k*A%RHdC-=_%!)MvOqXkBf)}Gb={D4E>`rrUQSh2AEL-nVSA*T=ef~(<IPlNKV
zqm#}zM+<jY#bF#xPug50PLu<tFgq=funcy6Y%q{iL7m(<u8uB6CKod#<(;?H*_h*S
zG()y82$!DW$1Imjch!zsRMt(faHL%j5gLhVqtcCe{-*4u(&+sH`z(d~XrqO*c%>2O
z(O9XsWy#2I+uunGS3W47;#mOd@C3y0D+S_(6Bg`22@e$C|8Nj$Aw`x<IdO^_NEA7-
zB&ZMODoLv-ioN494M7H9`L&E3gybqkVoi(~5ep=TvhV9xmg>ugM+5Puzpn~Rj7Nn|
z+&yV@j7Sqi&ThUaFm}ST_peU~$3A3||M=k1`OfjF-$R579Z0d^X^w~G2qIM+I?AU`
zv3hdx9)_exwr1u>Q5eK(j763da_A;Mz7~RDAjOob%*_Vjw+U5;D*sq6Qy<FT=%<Sh
z;V&hQc<{cXXRD5;Pq8s=QIMUea<R1Qom~|MJ~jb!|M#VfVQ%d(lqfNHNYEBT(k8{U
zhbaAtf3AIb3Jr*e8jN?C(S@vpJgc>D*GU+}WO`V)zb_9O#mTvX67B>!%pdH}x#u|*
zkJd#znn42q_bhMF|BYViiOg8*fIiW7xz@AIE2>ww?n`(ie`W=Y3p17XxmzDb4HKT3
z5qK9mmlV6_7}i$*|B?08aZzpG+c1nWfWXiVLxY5L$IvC+r65S7bV^A`NFyj9odVJ#
z-6h>6-Q6Jl9`5~K@Adb7KJ)LKv(Mfup0(Dq*3PZR(r*@TO3r+&W5%s=Y@zSlXe(47
zuwAsub_;mN-=t!{TS}OvjHp1g33tm<Z0#Mz`;yCd?ETmX;4g{ZeU$9w@2Q1jRNEM9
zdRf&wZvJ31Z;&G<%qR*fnZ`~*!Xn2iD4HP!o{xr@AP^d$IKg|98qUezZuz!=IPw3`
zpf`{ZyFDtHxF>7^##|cig0QqGnl3NW+1j=?(H;02de9u+3H0{e@yT$8Y2X2QmETeT
zr$8YU(3TAx!~8+F`_C)@^zrhYoPh7o^+;5K0FyTALL6<q>!QKldn}wKPD{nursY2j
zZ(sNm2q~W-{AHzLJawgOH~Bf50`(Ud^e33>+^38^em&K1j0|@G1NMLR$S%NE?uc(U
z2dI|8rpmod0V|#dX@VByRvk}{KOMGtLX6qN@RhE669sUmzjt?o#E&!ZLtLWvE0GZC
z>J=xiAQCLpuBQ(xjp(BYuXw#@=m~QzMV~({Qc5UAxpy<af5I@k&<T=U_gQ1?@O~_A
zpOl%BH8wvn+6@$%SKTIFo%qW_<vmvUX=QVh0YG&5`<;Hzpk2)QIRMf5IGPwQy62E#
zNZ+l?nhr;UoAAZynhTGB_m6j)M3}-(-<s~J1OM4uOq95Bo?#$!GM<^(ojp6SDaJgm
zJN_!qA0CBmSCh)w|8#hr#{2_uQVIIM>x2QLWZOyI&lje|fhj=_-{xdco{Z|breT06
z#nOVj+mD&q`!%UF6^MZZ*MHu%578Lq9qP<I>P5C5l}|jTl%ETNW|?t_X`^A*5TSPj
z{D|NgdS6*&T0Z-gReOFZ4J9*Z$jw^}jsUP*{`d2cPRk#Yn~CjL4|B~*rDtG2%S`!<
zUM~jNOI)(<)yhuPXPyRM%xH()2o#AFS~I9L{vt&Gvsr$u5UzvcncdEQM<>;)>Rg4Z
zN3^dm+I|KTLjs_Fp{+$+j-Lss<_gSayR1*xTQh&N>i?BSUX+Rw&fT+><Ixp6y$Cx|
zsgR`kQmzc*05BA*po+JW@=D4Dh5xnCHJfJ$pJ9ApT`AHxAoTnF1$B_`v&6eXpA=tA
zzQW&im!CYLzt3(%--7ivYwOMquKmAHao#i$Nv@zbyMl5a{j=?Z3Lp$`v#Z5JW-FW0
z$Kn;w)zo%GJ>2z3AA*`CV3gag$salU_|mCANy&!20t0D|-}15X5HaL&4HNe}t3<uN
zdhT6K!2Eao4Av{bhD#RC%}td#5h&_w!;Qbmj55aYj`bd9{>>u)=Lx{31&ehD4ihUp
zu@$AI@lIhN(b~i3$P0q`E&Y;DEPaJ5)2^3m_Pht};$w8{NnYI-^#AIwFE65Mz#Auy
zcc@>8dj+{|38qX^7o=C7bH<9X(4b^lbL}QFqoQ3ECN>bV3CzAq<g|ZpB@XZfek;b{
z1HWJIsRZ;jUT$X7sz{u*((uqlMZtW7b-b$kYN~LVP|#yy45c;E`-1RofPm|_$T>;E
zXlvt!kC=LExmhChlBOoT8pjN0e`0b&A+(^rX&-xyLZRh2%+E}|?`p6h|2d{6WMIvv
zALPcl{bh6fAFek#ppl9`(kUTY0>|*|8`ZX9hU2O^_T(3S?fyTihylr3`!I5t%yIlo
zkts)O1}W|=o>nrxn#8JE3L!|xt3DN@bE1AYAh~~kTi0Ib-^Buj|6|%Q8hNZRuGl^=
z(d;@S-69>2bW~8f^n$4YlI7lOl3bR2=bd$h_kZ@6utE9Sl_;KtLNgva%<Sa=9yaJJ
zaC;>b3VO9ZV)K5rv@XWZ9$9CeGJ5sCQ1bgnhSO!X9_gQa(@H~JS+?CN5m%N!I2s{8
zhy%B3X_#Be$Xw;}y0I%80)~e=_hAqVQYF$wkbh0Qk7<8zF(CwZf@|<yXZeNk*L2mC
zo#~&c=>dHdBzmR538q1C$@vvICyExgsKzw(W@L})!?Ur5qW_{%|N9V}E|%i#*<6P{
zW+$oOt7r0|iah&3fej9)S8=Nd%_%Mi{CyH`bPzr=&~?+X!cP6CP9q{AhQKbx<ngPY
zqGE2Q35$i4?vvEK-~{eNq|);FY2kW0@QZ7zL!C@STb2bQ>lfD_-9He&=^Xq^HrgbE
zSDAS6JEdL;;U%}M`uDLU2856MOod*V)k$}T!bq9PEzh+Ht?&2#QOc!dG=#XM^s)<j
zZ_pUrNz2(^NnoSWp@U{=2S3(_+`0D?*HSE6j4Ku?nc)0KxDdb};a-kRB*uoYcRewu
z2AQc*!e^1bxQX``M0C$nwah=~xu;*f<gMoC{_Z=AA|-;p&s@^n>Hl^G`9;wW?$`|r
z$`RzH2wN#;ST-(7b^8EZ9>5VD(5c`)m*V^yzEIhTZe=bkvqB~;6iP=)RV@A%0Mmb)
zB3J;*D0k)X*$Ud|&MwWBdReC}nlaZ$0f<v1T(>5y+&6iR8TMQSIhgtb;fuahA+7)O
zcGwxL>@07QJ6MkEJXL4@kOio$Q%WIVm0oVU(09~#KBJlm&lUXeTr8VAyo1gLU_Ja#
zWZ+%cP>EBr<cN}*()M2Xh)ay{72|zF69R|~n}OvHuUNRB<h;{S@|jy6Nr({;VE=Ey
zxPMh*uh>%~C|;|y<WK}s;q(%LJ)~gvBb@*>KJ0LkQ%X}qNAvX`u0MbofGb5Zi$!_o
zG*7;FiO(pb^FK$?W&8MD3DCxy3u(Jb?^rGl-DkUkpOs$~R|wv?t0trU^HKz$2Jh=O
zum@P{z%lf-W-F(+RyL8)`oQFVGY%k2(+MtnZoTH*$@`v+W~tSW^Wx7>1(@55^Ah_Z
zyftHo{uQknQ`fXX#(m-BYH!$dp&RUo;VG+kiNM8-SGx0*@-qMNl>r=xRXIa@qXs_;
z^2&_{`&CSC{%1$BNxq0FBjlr89pe+wjt;(eX2qED3=^=Wez%Q|Sw3{~QS}ey3cy8F
z#HY=5U@Ryc=XhP@YtzR&6jHPrPnHKLv6EC9n@Fr#q2Uik)PyfzHPKnPyhqt?vj56j
z{c~IlP&>Pm*>gT@Ela~#=bHRNNOgFBT`-%776$+lw85y$+x#pZ!o~c1YKHBIlGpv_
ziiAb~wGjY+9qQHDa3b`B;p?|veWumm3|_S#ceuJPX~b{uCBE@>O@RlRXGj*2a*|tm
zz~ed!5Mk}V2aj-1hmnNzF_*H+=Y^6^8^#@g#D9TzKX<l0O!m#ZV0`v7=@Aj;!5xVj
zE(V{w!EaaF6bX@aN+F{!%m3aHm*>0u-2Sn7l?zFBgTbmyYr6^@sCG^+KU=!Xrddu?
zFH^{GySy{o@%@kAguDQ~>&GAdB)*L;QLxNqc^)Oq$`qU%k$>uo@Tk-Sp+Mg-)@OUc
zJMvh5KK7Z6_{gqYk3?w8D?~~9->%b$3KkYK^5DZbV<~UVF{=Q+>u?Q{GhkfEp|bAj
zz1pEI%2635$j~9Ye`F38h2j*0o#m@XR;BX7#vV3+X@ZO>3R^Jq?|5=p(+a%E;f;54
zd>C$^x1A#!`1hNdX``ZapVA*c^)3}cC<^)M^n~`666w#O1*_YqfWROx?ctKLuHXg^
zk(QkcID5#c5_Xuq=8Vcvp%nY=Y=Ood>;Zxi_OrN3Sx(D6PoT`3mQAJ!EO!pd@LoCd
z({}uEdcv1hCVr_!a2A6G-@m>9%!nvV3lVHI)5+YIZ&S%#rjwtFC(2UqtbiNYq2P8T
zIOsX?ZVSHBB8bNgWOaedgaSN}-!K7Qf)kaOhEjOU7Lvn13E4)J51lmuhJUXBNt1DS
z{R84MpB73_Wg_L&Hb&H*=#0T&@W04eOn$*liD>GgDpD$$l<EWvW1x0oIN~utVt5YW
zs!lb<JVjk*#7JgMGjn<9_uF&%!r8C~IiblvvN@&V<6wze3Owgz07q!kD4BN+43dy;
zO8MTMm~r6dLX-=(B`l*{Z24{aVQe~JrB!W}H`37;4#Y`DmecFNq9u+oM&Z7YARVMr
zR$0%24+J-n$D6{_n7o}kHy<gW-%XK#-0eROSWF(CVFb7&ixk6|j1@E>?oV+?zPEy2
zbaotH<HAWBjfIqBTjh}ZaS8tb-(q6$l%hTPzI4a-vG@x+d1y#OQVIW58PfeRiQr7`
z)AU{NF_Gwx=AYmO<{ouzIuy{|$MOIBL7l)#YXD&wsFk|Qxjjod(;RoLvz+rIhE!ky
ze&6p6JuWF@#wY8{V4I189@$Xwq;PfI2#V}KRC*9v;%M=#_@ItMki;u|r_=|M81jM&
zw(uG-2g>#}QFwKeY*`F8Ift^U8?Rkamw$&xKoAH-j})JK)6udk*UE$KgOkX!viP#V
z?6G3#;LAw(;t)q-gAy)jRbH%os5mc)43$(m)qmX9N60THfdrK43Uda^y;Y+`rnTY5
zdn4lG?vYv~a+Uk@qt(yoWKD6PL-$Wx+=LUn&Y%-Aw+RWUA5P5<P;5m1h4KQ(rSF4@
z^;1`TzRNGOooBDB8mbrk5tTusz%*O^0Kj1^=zS3&MT*iRohmIK<y%)o=#+*f+Z(Y;
zITPNh)XkWgVU@-3Uu*$iz=7r-Q;$0ZaIjQe-IZdEe``vmG-JEZFmOjXt^SP37+k%k
zdi_Za*Sl@8T>tY|zXpMR%zq9F0feLk&p7aQpi5m@ERZvOH*>=Rcxm>^OhAg**uYA{
z&&7#>|9%sg_1Gfky%QAw9b(+4H2DC5yoqD}QIuD%l%7IuJS&G%T3aZnf(#^nA)wdQ
zT|-v#stnpweU}mV5fKl5pAdqd5o|Dhq+0(<B$ql4E(C>c#388RxP<1Wy5N&D=4@J1
z^O^4FjuO389UfdtyNK=l@`rfYf!oHdo_mO7<9&R4V5dT^^$vO?_(UF>!n?5d_#x>a
z7?n?Iv9}V9U*ybzJJREsYjCfmhg0BxOaTIxg_ZNLCnG@}^`3=B>)wXzLE^Fsf+DiS
z1HUGE6{m`1vqI~aUY)=|s3ioo*-7!RoCtNr`|{d9P+<WQ+_1bb1rmtXe??xqGg$HZ
zc-o}=UcDBQ0L%Txar17xB~OCOq{Eh!&ND~AUCN6yoD545M+Q^-j|Uk+zW;nR?e#da
zA5UAiqp(`G+$$Q}<j!cy53nvxMo_{^Z%irc$dVVPbu|X6nn;S~5`{q2_y;~c@C3b>
zEEV1q>UPv9w-Yc+y3#6p&66$5c@9WC+^7kH+eVR2WL><@-6`Z8{v`;X7>i6Uw)4Hp
z|F;t2UB!V+C%(_fy~4-qepK9xX|tbil&oxTv?DN@Q}lKn7MvRP7>DQHvi#!|05IqS
z>f8CyAbbG=I_#5>3sjkMsowyUyZTr6D(~BrhQ(K#AHl_2EL`zTMdyvN+|%#$+zE+f
zDepJ^c}NW)|LiFO*h3;Mug34zcpxn?N2_O1kCDHEgwfcs>?QISz_j?wG$~@tth@CY
zqY~H$Q_H%MC}GT{+0p*Hk_~jkZnHBHnMGlJQ)dBsdQqJl5I{lR?Q^$(x^W+gHrJiE
z%M?s0tO$9A2o<t!uQ9l^U#l2*pAe#!Pib)er)&H`AGGx0R_Vz7adEjvwmN6E;ko+o
z+WEE10U;p-ND;PB2PU&-wa2lxwQq_~DtHZzepE^Kb^jf=fEf_&e@)s`C6QiVwbKx<
z#`Jh`lFcNWS;;&APUHXum*VR(cc<ku$2Zc3$zx;ys8mi+qEI$A9&}}3{a4Vg6W}a@
z-Zti5GM2Wn?omrlU#rQNodRAbx~4q@8R7s0k%{-0RWf341o{kk{grFfK7Ws<mhX}X
zoWkkM`>)b0B!JtP4Do5vS>p2q6193TpYN|qb-!vP<$L%5lrEbF6G<`qYA9oxRGjl9
zD2_UV%Hl{T3r+Ruzuxy30np~IHa(yVZcA&W>i+45L)-pRe_HhcpzV)A4-VHYE^F*f
zGp$FViF_FWl0zwimW6)=+1_$#Svjf`uA|(Z*k~2u>LbK_$DRIm0_Qz5_)vdwtCsZd
ziVq@QA4>Q;EoUpQ#H+jL7X4u-7qr0~p#>YCvyN$uJrpxMvjr#ATXMW|Tr>c!3`+Es
zeswAIZh(~&V`Z>f{Bc3Kn;Vhfe?eZ5uW!$8j@PC;ZmR0a^44_i=*lfFZ3q6<WC$JL
z*wSeRKb{&sbIc-q7p0{lhdqVyA76SazaVajzAea+AA;Vcn4yX_<+dAL;r=e43=g`2
zh}agii&*HrTXQ7X!$39MzfPLdFUZW1OkQoq9!`$`hi7Yw!Wo>z6W$a@nYvh|O^k2D
zG~ma^$EA8^GYFJ}#22>ET~)vDA}!mQ_8oR{hgs;D29y&0i$q{-G+-LCE+r+YjS(G#
zk!JvhtjgUeUMNt4L&E?Us1*|UjSVo<=}U6#6KA`~NCga0TjP%a9nXJ&_FoVDOh^OI
zgI^;@#jd!_N`&YiUB5^plx)HV9CUh(vy_a2<>j=z(xPJ(@!OFiRm$9}YE!*ON4ZQ4
z{|aYNoNpG+q&vsEVKk=t&UDNDsDia;@*e3wJn8j-6S)q88@~zSHk2(Gky@=(toS%V
z&O>tTc)j+__@5*JkddNMX!7i2Rk3v}a6iMIQ6Fh&RiY4GBby6B?W<Qs0%S`b^g!mZ
zMaMMgnZeKEpv4znGTxfPET70F7L8^5Grr&RW&Tb>5ek4}c1^UcFtXP)-7v*RT-3sM
zl>~^)f3PmhVzIymxq)_L=RS)C58Mv=p<d^n3sAzBFs^TW`F@U3{i*M-H$wr&+W#_I
ze(97d1|#qpUCLoU?MtmQ`8!lRTKx)I2~I5o07j>wfkxu@vP+D49g3&E<VvR4Ikwe)
zT9)|(2C-RyX^vjCT)Ysl%kgb9YNbgWhx6>J0-3Sq(FjzafBX)cAy`z5bApwoETmt8
zK<-q1WKtY0_x&H9#z+<tH^#Gd84;5xy}xZeeFp@yjv9yZ<>yKjzVHE{*}q`D_wqdW
zllCqR%aK^w5ZHO?=+cas98XNWBjOJWZ=`~f+{-c|ETNY?zC)21b~D`A{A^Qn9Z|P}
z)?Yx<;1Td)^x)8#S<+}%WF{$*9&60VRZT3JmCt-0eC_W~OrP#|>kbk8$6iaNm5zxC
z^5HE`QKdFJD+5U-CR!Vj(Sq1z*u6qgvl;KQhE~k>Abreus5&($j<smaW&2ZhEZ}#N
z00I2)16<ELFy$ii6ZMNvk{JgvSNtvr7l^6?CuDSdc_)Dg4k{;s&wR){$Eu!WcXffa
zLfvqwjNh2wzFY+*k}u2U&pp>}b^jNbq)C8czS=wos0Z<*Zs$XJ!S}3(?-w}xpDh3c
z0x%K_Qgju*9o!^y(5Qv;#(bc{EY<~^FhBSg9yIx4^F3EnL{=hDiEZ8VB2)DACnmlP
zAAa`bd@ckZ_%L5si9;(Ww1oCZ$7Iw^3d?z4^Vo769EmEq``@f0l62Fe!|^ord=*l#
z^ve|&uXrG_M_z)s&_<~Mq%p1+#|g+-)~`3s-54TE#3gwna2$Jn9tr3PaR+5k*(F^s
z@)$q*2U72VkC?VM>rHeub~w47cs&I?Zb})y@Fc&HHw-!oMvYt<IyuDyhzhT`mF1K_
zYO5+M<aDaI>3p=3{vCQDfNtc|KB>ofCCAI0q0z25=~L}njs7@vY3z=6ZIpQ#BI`3(
zykgG*B{T&|9cq$>pMwQce1ay(Qj8F$Rx3S1TQ+1j1Rq{REI9nLtQas2P7{Em^3uLE
zPh4Y0`@c#zvA<4w00P}8BQ&~QrCRRy>p*>i%nBn{UUr{ufnTKSYK*`Wo`$8D@LVxh
zqWuoffSwf+#E`en8#a_=Li+GBTWplR0!z`CfnC~pG~~}V0a@^c`(iT)CChS-_bpd;
z;#ob!j<5ZauB-jt-~?T@_Fqrs3r|HcU??)CmBs%s&T}cC&BHq<7LxSsYC41mI6VX!
z6~ff+{&gi6p+?>Cxz+K!D6*#br-1W~!3O`w<RihGx_R&qi2^H9sf{b$vZ+iXH8OO{
z=)L_ypBEGP_AJN2(f|(}FIta<im{*jX<O?!3P0bNyMiyzufBavk+|TGfTj_vtGIBP
zL5Dy#!`NL;-(n7#fpO2Z4)bED9w8kO4EhLP$@t7=)n>SpEuz?$QBxY&Mr6t}9LPZP
zuf@HT1tL1Rt>b{>b{bSHiX$HG@mWR2f#(OMn2NxW_&rU7-9ono;}3CJHAgH~1_GvY
zwDj0sCja4wZ=};o<jcGb(vm|3p05`!b;xv)Utz0$8)y$H_8$bs2T%fRqd66l?<QQt
zjn@*P!5+cFQXK_7aTDCC;9STjd``7LGIb(YQC-@|rwlrQqz`%~5+!DoS^8%fU-le|
z7($SNtlTepzpZ7Z#5cP#JE6Dk5%0Oh(bd#qBZ4Ecx=n->tq6V_U7#a~2a#8%L9UM}
zmyF(l4^=Dn+@4soq_|UC2jxiOv7*)4p6|W>rNP)<wZFq9a;Ml9q|3k180U3du+0GM
zZ~lKF&mcW$$>6bS2@sYWRR+;+zf0E5bUTCBhsP{qUpY~dJ_60s`2H%M1#{=ke)ZmS
z=$CSfBcP}2DVT}xOP5k#WaP*@2N3`+=-wyz!Kl*?NBT#AsvD33Sqj;b;Nyxv6PAY-
zLnWJmo68hoPy;aVl!wneca|z;vJyX<N;R&Bx^sCh5&mKBY7}9$h4C1vOf(_iHuWof
zRASGZ1&Fk_JVo_@@ZxP~)0R0tj@0B7Vq4tV@>+KJ30I&PxAxPA|5#nXhy#&_fju`_
zHv?5S*BXl+j=t}m?~eV9Tk4ZYr+tY*K=<JHiAMx`xKioX6ml2-E&dawmeGq={@0g{
zg$D4Ej!!$~qp$uGu@5pL%89!DvO)Y%exCn&=*({Tq<HwycB<h#6YzFGuXv&NSy<hf
zTOVIl*8!V{-I#bHo5%P6!V+Pc1+(@hpn#Jo-~tXO#vg0VL@KD2tmbcfsN>!+;#-pR
zPOHB-mw|n+uPKp88Vv*+GzV#mdeR5JtMAMo64uqznH4*K2DGu7gzp`1+Jk<3;z4Q^
zjam3Ro%uyhQ1Qax29AS3!_&@hW<lg+y>59ZZr&#tr*JzjGysz4T6R>P?tJpDou*#&
zDF0z)al2B=#mphjo%tIiY&<|bjO$`7&bGK!!t?hxir)&tpH51Vkr51in{8QH2z5`a
z7jIAmq6Gg>57r(6!Mi`aIT{D3*%hLTW}k%)^CgK=(^9?G0LO=i0(~hPD2NwDr9k1U
zKVejbQzrfWdr0P@s!q>&0OjRdI1DFhz_&NX>T<&rBYRbQkkMPt!%psw1j}?g@=FlV
zi3~r=&&eM<w;ieA?HYRXg!Z+>W9WRqAS%!bk#-<U*QfLRN5uMhUPxJu#Dr^a5*L1B
zG%oHx2M3hvY%e1OZl)wkM0*Nst<t@6j~Q>1C7ZWk+wa!A<AEk{DJdBy&k)>qe(+St
zLWoD|0s2AngF_jMwaVBj1=9~TF#xuECB?#$LX6{tX*)`)`nCy<6GcJoskFNFL&_Z@
zz|294+Tj-zaqJHa{eniGMC!16a8wy+2M0GdudugH@pFEER7Qi>rHavAyYED<S;`)-
zJXCSsJ^qGZs%rPVnj##qOX*^13kTkbr7rA(Z<*C`UI97Yv@a?6%3+HGGGKKr17Jjt
zD+*~3Yj&(Vo<{dWRQ^@xxF0i_K~lpsJT1OJIt?u9hf_B`Iq(DMGg3%pe!`#kJx7)I
zM+{d}*)1eC93g%w@!{plQ$)aX$gVn*NzW?6s<u_-f7XSE?uH`@89pKdpiMCt6@$L?
z_(JxXW1)JkLurFV@=6;b4K@Z0_5L8){pu~<ol;U=zm+slC*CDw=&mE)0|qis4DlOn
zE7s3Izq0!EPV=hEHU_LYXFu;{Ze+l*)QP>G2rvX8HN&ztZ_J*6_Vv`NqbRYMQ4|Dx
zX5|wFL*IQ#j*&Zd{H;8<YqrB))}zHomtS-Px1)pq1qt|JDBM9SgdDHK?N<LuY7rAr
zxa~a^0-^-!bd=v@^OV<-qS7c#6b)oeVy9d{$B?%sk&A1@_RBOGQaTFV;g_GTt6dhE
zL;_l$)xh{7WQsUJ`-}X=y#1bgZR}3#q1Ct#O_-_iZT#W6;81>{+Znk}q;|tUcfSCn
zvT5LoknlV|V0UQ|<)SG&bjU&o&AzS-fZ5$JxFSytcoJpTPNj`CC1gfoxnR|jd;5-~
zv%KG9S4T>gTT74uyRd;WX>r=Yt2=)fWuNmR*<*eT&0pk2wSE8OL%&-pyBPE*Z4A>4
zyw3z;S(Esi|Egm8!D#Is7bjzsI0k6aK-$NSa|Tz-CFijwF*a766>A!(%fHu@2ew-d
z|0Hp{IrRJRU<<~E3pT<Q#vS!^>T?RGGpPMcW#f9Z)OK9)tzk+Gd-VlkE@Q=m@8<@Q
zc4?fDlW5-+w7J-h0T2rZP-#fy_m0cPyH8sh(b#><`(fU1m)lb$Q_#imbvRS0<2@<9
zoiwsLo^#DaJ<w~#2f{DKOS}@SgIy5gk@Hi$KPPkq0bYsLPrf$H%;1o9DuaB1^S!ot
zw6lz%BU4`z*F$T}2M=f=PU2~Sne%m?J3^kBwe=q1!4YYJ>K*QtnTWtH{eol>Xt`V`
zCFe3l)6ZnAesB~(M+Tz8)rtISnwxi$xO1J11GLl6$wZS*SoFxOWp2addqfm0pJe~q
z^Vb5F9z_SO-Vi3{Uov}U(5psDQ>5}hW;}LY4oDR|W)MrW2EE*Qe=*c;@T4`so;uU=
zEMUkm6+sw4#Gn+Q$v2^^R?D)dOj9NUGkSD`{kj@z@lf}{hf^oG8q{GtGJ@JjmB_QX
z6jAF;J8xmETni)5zexpXJsDSt-tTr+SR&(c#$%FfAz#$&(s8z+%_WRM=8lmd1Ax*X
z_kG(R9u>jKyU*iunHkiUh`3Z*%s|aX1zYw>-eCAA!NlZ%gLst&?3OAZP%sIS8DWcv
zUoFmHlAPR@(he?pA=z?#i5pJrE_O6OnjtLRxrF^4vu@bytvEF#fY0x38(m_B3%%5!
zIlt7UomA%AR<EAd`TV40X!mdD_nS?ASl`wup~C<8ZM{lD3unEf?<5*XOngC7iD>ND
zvDRgX;}^j%w}L>wEV(B|w!`W<1P<~>sxj}0$X5xJC|~G24o#9EeJPQFN?-?O)_vj(
z)2y4Dl<%81cdsvv{SqlCxbe;mH~<xTSSqIa)WuIT&#32g$WZqVc8dP>^jnPP>sq<A
z4~?->^XbDd63p1HyRe*&zjNu(EO37bQm|0fwk%*|lBlP1$}q$prQXaUW<{Km<Q~lo
z*HNr<YbwfIVo;@2;LChllj&+WWy3<Q^7Hkjz&dzdltCeO6qZi&nknPMe05R_H3rbD
zn0W(i>}YF3vA)pklb{eWUtdw2D4|Vk#r_1RBdNUt!Rh;B|L9A|o+LR^_N&%8B|n@g
z!zfCF>L@1IJ)wM9;}KMnonw@$1Ntf1<$(D~*&FxTj~%&y=R3GysV38x^;U-8$5Lrb
zpiUFcjV<)l9Jc9pRd<=Zy?mQAVlpf-U<{PzUwK1jFbyr>@gvlcCQ2NzfD?fdgX_l0
z+MZ4Gu%uR$DAwJ6?<RP_?i8cVmx~n79b70%BXwZG(@Xqlh?O{SReM}j#4}Z4ON<?N
zTZ4-w^89snP>?nsNXskN3%FzgSOl)$O5bY5<)_-<mPlYLI|;W*b4g>Iic*&<tnQ2F
z{U|%@4D8(D4P+dGPNO^5alqljpuXVVeu_(Q*~PwrSI>dWqp~(ag=Zrs(q#=MRDG)(
z=h5D2`%vVl<Lt2-9NFB>ftfXR<yRgbx~c=QtGe`n0Ki)gKu_N8`T~R+N8=iLH$QI*
zpWZ}KOiC6!dx1`jhb3LGCPA6;5lB2RA$G^6v}3&zh?&N~XC^z95d;cC3)lyGAHQ#s
zWK~-+3SDd4*p-Y=^h%;o7N@HPf1h2VozIID>!7sMs?`XN(t;=Mx}QNV(5Ien{6ZR>
z2p9qo2Led0^qu8c5V9^~OUl;D&@J7|4=PTke1`1i*o1(&*7=L$l<pX~rln}TaC#*>
z#(*i(p5~!LL*B_i2eeocq6CY@CQ!!XYr)SHyM^YHEXSmky0eA*=1b2HT#K|jKm>QU
z2^E1ymjS32*LlVs9_c6sN~FSd^TVNBWwG*jxv;N!*25FT4@jdGL~?6r6J0{D+G7gV
z(B*H7+Gn!$&EY`x5zq>wd58W4q^|sH)KF8e&S@z-5zNyn$l5$RV#u%5=AbY#6reem
z%HIVF5doo(Bj6@}i#E_>m74VKwhkwG)2H+P^9t={1Q9y{8JsSByxjlS*8IF}#tg%9
zUegam$rG}&hg;(Ee4zb174@5*xJw630<TgMa8R<ZZI_HM;z@GT7>TIj;t8h6;K_>1
z4ef|!yA6Y+2L`STSP(dwTUXDVDGM<*Cn72#h=1{%TlJnj-i{C(Fm&=I=*8g4Q73&L
zgliqoblySyb)846A?_=aR_0v{twfg#LCfndV=n6!hQy{HQ6Yu6A&VY9lD%JEzsi2B
zB*u(txEiu&=d4XBZYgxjXVrU)mR-L(!_xm0f%_h|ZhUOoLdQIoNNPOVr&H%^B6*S|
zm(cfd@X#J`)RfZjhTM61zFZ%lq};uRNQRyLpKH2}qIDivisaiUJmz~5K++tp0*xBg
z^AT|B5K0)&>5e-R|CDdPT4koLb29PE^Ni_w>r6seH^1$Duo+U(q6cv+(0Pv29yF{L
z+FZeBBM)Ojmbv&aK!1v@d~C&27o)8y;dmbYbu^9p%fbo8>oV$|)Tt|>XMf{jKM^dQ
z@<kpO8qY{kWMK@LLxVLR_Wlod^-Cu!AV_MKO^Z>F>Yi@3<kCAx-~TmynlKc+(Pbp*
z%MS=6A>{hWw%}9gr?1up240^Qq}G3MOcCuHINSRsGQ*kNQclFlk!Ti9(RYdAg0NUA
z{b*b0lKMqFVVEX2PdSn-=W6-!yDZavKcp_*XFqLnzQl{Ft)W3U_p0?L4_rZpj|p$Q
zK$L<Fnk1q<6d!#mye;M`obU|=W^uZCO%IKh0R9g^|K)X8eStc}^fmw0j8~!3b?%|h
z#*j7sc1re^&OKIcmVw8i`-F&Er|2kHKO&nqbD`8f{d`gQ#49Gew4p5(XZ9Oc6or<F
zE+tjUR*Z;b%O=xHSuQ4tEY>;l8ma){K4Da>+rlqHA1DiPjggphYm=n4t?1+_mvSZ;
z8MSb!3~M6uBvkKH|L_E`)@!5Hl3hF#(TloTuM5)q==(lSf|h|r1U|J|`uB;_{}Nl&
zD(e)HDBv|cx*G&NSpW92+;V7?@b3{e0pK!zs&nMd@<*H_j~OYyEjzcj<YqF`T^ipO
zLj4O*8!}9Zlz1kS`mWv2$VFu?I4#Enp*L0~hsz!?C>2;s_zHn3biTs-*09m^AxjcB
zyClpg@jm;RyN3`X_Tl>d2o38lB~X#=Z=@BPaw6BMjLHc=2Cs8F-<Kv}e2`#?a|(<U
z9_5@V_E;qw7B=o@7dxb9usc`Ok%r#+%2>s#n!NX9SnZb)i(DQ$xPo2*hNG^McKIh{
zI|xfJkfHt!5>Dkc0J??)gfNdN@=(dTOF<^}XSr>Y%5Ef=5#%7r^K^P3$B^ELTu;%w
z6~4rNUUmp}ka%qp*d-3MvgnkMWq{k}tU5z%_TvH)ue41gugHt$KDORTl;focrajeQ
z03wD#?C&ainLez9bUNZFNdo=5g6D_ET<*ivKcC}LC4U<fv<+S~@UP3~K724gMnJtc
z{aGdW5r?+{23S12DG`0((A=odewwsCIlOdj_`2I9ybnOFQPferjDnG7`1<RgpPuSk
zpKioi^LTd&?rV@~^(XaWk>~t1!`BZ+V<(gw2So8!sh^||ljH3SJtgS%6&g8Hq=V+0
z=WEYPI6f#4gL)KM{58ouFDfHj5?xh5YM)&lI!gfRPg*0SaPHuN$e8u@l=-m!Y;XU%
z!or)m=W+Ha2=paP+?|57>C%mB^F+!ciRd=r#`+mK!FOa*AX*6c$^9g0kMqd~t>8)l
z7X%^`3%1v+UVNd_{qDh{Ol_M-0&|-obGCbYU~WZgW3t{WAaf|dz4FG_hC;#))2`c_
zc0u&c;6|Vb%Kyo0<gUzom+&_2`a@#rNB_MwiWgLD9mDJk$`Bk`zUMow5CuW;vn+}Y
z9h+(X+tNi~+Q>pw16oc18{1Pdu(+?UWE)3V2PT6+^v*;gV-mFrcB3RE2i1{MnI&n5
zYaT9D+p_b%338N|2H7pv=UI)3?v2vFh)+NjUfhP1q%?9Fnd&ZI>9H;p;JD??#5ZF}
zvWpRUfXjYZ)rFUEeWA=<W*?A{P*hl*#~_zr)^)wdCU2AAw4Pr2S;x-rN*#f5%U^G^
zcbz4`MS9ioH)5}rFY)Rybox{2%iqsl8P9b8h&X;T=jKp*u2x{3nt<#jY5>mtE1|=R
zGHG%rTaaq9TDtqdWF83quCZQbD&(O18Gf;c0kS|z7v+@RmVl*&s>xHjj2k9x?%oFs
zTxqE>34Tq;iV5<EH!%s2PYFDC&8i>!(Q2h{ZE(124`ihTWkzb>se{YsGOs>~UD{d^
zm!`x!lPw`EeZ?|APV^S!RRV(~o&q34;tkT}8+XqgI-U;V9;WC!m35#iN2k5k-Gm*V
z9u@5el-llVUMSF@+E*SwYKU>(h`sB&CCD`+cWZ1PwiOT<LIt#Ay-k3B(4@==F;?fz
zR-`-<IA5D+U99k6Ws<b1IubX2AWCD<|09h5GPe0u%2(hvDMazO=2Z2=m8JIJzHh0m
z2l%e;qyqPpl_oe=$?HqRqG`5>78~V!1v>;auU*P$*=Q?8RWYK+;Kx&GR<2fG-D{G;
zpM7wIq=6iahf76~pwL*T0O1RFBO@g6Tc9E|&laL6X!6Ciwq@W6_PN4i4EM_JGI|q>
zNd}%SDsM{#S+u0C8TRX`R(#ZNhnGA<7JJMTJm^2?@)CIF=&)rX(0;naUzH8FI!Ej*
ziTfP#qwEL#wYn(mlFpmUjN^-eF+R6$F(5+`161>R%$$-}HBV(w06zuKxDH#cmTN=I
z()5hucy4jEXl&wzJk*#c0z^vK05EbxaoZO3DB0s{C`#<U-d$pPuO;k=KGmW#Z)}1L
z9e0i5DfT%fYm+ug6k-Z7Z!NxAF<mZ*Qw(hObY&}7xi?uxZpeVt#MY1SbKrYPD9Yec
z)w<g+t)U0(YHFwip#s+dNCVj<^OUau#V7+Hj86T;=TMs8UJ8`^p8H(NFxH%e<lZ64
zH3?E_VLmE-Dm&*8{Tag{wr<+AZ^WdF+vd|(C`zWnFV6K0@qiCh8HAK1Ofou@FGdop
zZ5DV`1Gu(kObb?}g4>||3&GljP~+@iVI`5`pSJX!&+nnf0S+jnRJr^GO)^E>8^v(h
z=bk0(p?m>N3WmTD?tl}?lr9(C@c9kmi><<W$`((QMy?I_G*HowxyHDw)PO>rD%P$w
z)_{`DebPk;kzMI)UX{@E!J6Q<nONQ227~rlOoKP4E3zj*)fbq#2{VekX_s0*4(~wR
zR~VR>AWawuV2_VR`{tkOyTQ^%IK-S7mdYq1-Dz^6yCh{9)>dEzv}Pke;DN&|P~0{J
zJ(k>F<t*j2u^j%SDdy3=JXPg#Xyf==g5xoXjXFYChWH^Mw=Qo#?Qr)JgGA8Bg20*l
z(uKvEr|f%?;)GbgW8BAqON{XXI2<MkG)*w+ysGdT;hhqkH9JvC$oJ|s_N3()f2orU
z?)lsyR0A6X$RwD`rls%Ve#sL_c_v~nuZX>@{obM$J{4)5sHYpfl+k4e%r2xfMgzYE
zro+%{kLwGKT&YvW9DqpFhZe(%7ZBflx)(;@PrlM;lk`(qZI%w;MUf*T9TDp%pGD^0
zfB}}hDR{-}cBq^5%j&5=(AE)Y6HqxdO7|f?nG=_NqWR(bXscAokwk%4S%1yohfsmI
z!&z)>EZK)`?8z`Q7+*XFBm~BG0NyE`U*!tqiRdkDb}L27ogxgQHepE>?w))P^jhhG
z6pP3Nd~FUK5bPZ#nf<LYqa$tCCQ2Cc-uj=RzYPf#LM-lbHNM$Eh&fXeMiOy2#5*cP
z1Sl5rX|uHDxiT4zjaY-fWF~m|Dt>8gH=P|W(Qp_4oPI9=0h1xpduIA{J=+XtvHgTB
zj5E41L8`mPn^H5K$Dm+tZ4-N1nGhYc6$aGsfT;w*EhF8S+fSFqfgzrVVgQ0b0N2Ph
zHEdd*+02;j)+dmO4IeWV_T481u=w75i#lRjb<a|*0DrN$<uwU27u;njom}EF+Fd#=
zsqiBB2K*hA43{gSCC0Z5bb4Ve=Btd>3J{7A{F>>FB4@gydAwiMABf$u#K#y~*-8WL
z>k+<uN&DA#JD-u?kd9T}4SfBwN>xozZEU0dC}%RJR1q73s0Q-`$3%(CQg@3!L3ucH
za4Yw0tH)Ed6dfZ<loEvz9&FixtG<j7U-ZGWJHD2-;CwFI_S|PLG1}ZLEVQb3=a!X%
z-EqHnj{jWH+Oj{{r6k7VA=zc+%_pR+IvYQYkL^>X0c&DeALid>0FYRc-cJbwfylw)
zX|kk}jJ?xW`~nc-F_tfN{KcNGQHbr-d5qnimd|i)=k|t?W|%jj7c}@W=x)g&pzo3(
z<?S3@lCA$hpq5Cp9wgyTjXP^wv$=^CB1wd(`%PmcfFU=-!0oYhS{jh^Ljak;RH7>V
zoFi>+=uKg=C{CEd_$QeGP3c=&0xNhMG+V!3t`}*1GfePMFW*peF2;K~G{#qg2~q`S
z<SA&uw7JDDzL2~8O>629Z;C&~QSv)|ei^y)*($ANMDf!2L=5%?Qs-G0za{8AfJbwt
z_PX8mhIzEFKTKw{v+f6N0p<$|fO9YkPORT03)eVFYlz6tpMWfiHT8lQf?uxHt}DCf
z_ahnLtR!5v?xz;g>$_+E^}(p1i<jt5Wu@wk@f^e()t@aQS*7B)xWx4QAykqYb|q+_
zA*rSwtgtS8L#8$>Kq}xc5LifcYl-)gY5(Ocb)*kC!A=6n&w|qKOR4{y;Npi-v#4<Y
zDz%|+LB89#PO@Hg)%xqOuOh)-fL&C_IT#lFo>!bt0A9TRTG%ic)xo>HpB8hYy~|u5
z*$G1!?<6x2t}2B?R%AWFDx<=U9y~Do>3!|AiTuEep-I7Mk0>k!F@F|_Bnje^dVeSa
zw(U9LHajmO--}OIw-*Twuq$($(_f{x0iXzM_jlzFtBs*UnPT&8VAF3^EvSY9R$_)L
zPP0$5BVE7-iS0#<3Tt@P#0RZ>5D?6W4)iP(g=(bF=?caK7?)_2$ugfECTP~j)S)>6
z1I4mr5HaNAXSlO|<oeZ4B?hlo7^(wWUB@YsRu~<1L~k&yLP6%e;1M7aB#6HrBN1W&
zMd%DUCzTQddLs)hd1;Rat<oMt+8~YoPW0U@4}~<}HuL6XO%|%SofY$X?xspaKQtq@
zg9YP@jM2WzNR!C@vz~Y&g9b9UADVFI&?Cq&kIc6qpq0FIG_9G;5?v<r9BR~4lf$Sx
z83VpD030z<72A83W7{J2YJ$wbVduNcPZ{O)U_}35Old-p9|O$DwI;7#nE=tu+450_
zYROY(AT^2rrjl8B3hTPL#MR+2*<_-{qw&Ga^z+q4;d1y?I-&FK?1&L}FI7csJT_BL
z`}Gq+>(Z1Xu~^5-G@<mjNczxVVi3B4h%Cu<*WDhAM4)OpoEaEX3OrQ~CTdPny?NE(
z6p;|7EU_NEQr}$ZFP&DHAA3exFxF46u84O2*>onuzHB(<L~MZNte|t|D#)UXy)Y;b
z)A(MbfrB$jm=JuBj*h^2cmxxGNIn40TB_alQAzOi4yn@2mGCLrb9Wa_Yu;UE=3K<u
zyHHz1vvx{gB9dQdJgagL?-S#IUl@364Qt$c)@jA5)au62!@!3oFsLGUYudB22kS-f
zG->;^*vY+gBY^uud|3p;M12VEEaKi1_tTubz;cRod=Z8z^Byjk!0J=|{cUpcs`N~o
zziH3K>s=k+xo8;=UEYZ}6id^0=v=@_Z&0a><ctUgqcZw<x;hnM7u+*0{UF#3T^<3P
zCSIRu2RBG7ujkeud~-cP=ci&IWkm<AOT)MNU&m`*C9cRM2cEk>N3QF5SP(j;YcDH2
z7f`lgMLLP>mj_$mL}(LWbNIHGrz4Dy2wH;y0^#^G*D-cD{?yZj>w@&|Q67B^=JNr(
zIMs9CwNFpIP|w7gO2Au!9-F5UnuY2clDJFWJi*thyjzWE{=q&xd?1jjWLi$WOcim@
zmBu$R9|UKO!M{+2Bb`ytEmJP2`V+-47daivEYeBxF0S+Gvi3edX9w7rdXUp1HvuF0
z3`>mlR_S8uS+>12<wrV!`qBa)T#9B!z$}_kEo8ewdi2d=D9Y~Ra$iQsq{Cf{eI;*c
zA@RPp?&bo&K9TblXGYQsRVc?eN*A_CF<G3hoAX0Vu|}Bw*_rAwe_5-NDWh6yBm$Hh
zea9c}1dWPFN~B|c06`dniXnrkln^3xuo@p2V*|2ApI~)GC}>hyP|Sc%sm5>VCsRj^
zc80D5&zXs%ePwVt4HGvlRiol$e_y$)?t}0U>wk|t!1{D+=2ZBo;65TjL;_A~uJ0wz
z*VP?S7OTyghdU?Cf+lkBJh-520*If4FS9d7M9LlqYcn>&&5Q?iWu+^rKF_5eYLkwE
z`A`6v{SJOersUn26XLfrj|=j6XaAar2B=@NaU$yPZA*T&{zYJ0?m;vheXENh@@_dK
z5%nxw32wGH+rG+8W?=Pn1bh==qboY`K0L<+OQ0SJ5ti8;<Ooa<0b8Bm0jgEs`ji)1
z)&U0epuNrZ)+qXc{?Yf877s0@FQYws>jb?6<qlNV%76k7p>zf37}`Kf1yAKe+>$?+
z>`^3K<A-Uni-knl8@IiKH|2p>6uv8YJ;Wz?L?vDSJPHU4Ve$~%75pf}LUSaiKo2Q@
z41(PijzAf!nbFosWJC$9jVeK*Rj&FJ3fY}(fpuF+Pp)h`X_mUrTpluaQL!GAVpss#
z6;RZ!GMz-aywpo3Zs6|E&Y^oHK!oz~f-b71R$RWW%KaF{K`-s6RLG<#o@mP|P;M51
z5C*|{w~?NZF`W0eFtw@g1e~_oqihXtktrH_6(&Z~N0=IDcfJFZRQxIYVMI4`RALYU
z6dl6}-UPXKa{;wbC8AJ=$k>t6coSF5FHg2tdd16n^}ThG$h$_3N?tR7I5<`UTO5cN
z7}RZX2BM3OYNt!tPe?KP!c;et8Sr3#sV{8db4~&PvTFGRwBBj{g){w7;!IOBylY2=
zxf&f`s*MPDT5ZlQSFVhk^Kl<I!1QdO8zfGHXb)CtoG}fVUT$|OYSe0;e^YnWO8a`v
zODS1!8K-9&tiB9b^pA<~mkL!%-iNI2Kae(qhVFF@s5FxMy)7aw6)cIMugItW@Bw#D
zL`}j|dE66#45@(c42JpjH&BiX|KLL_PN-kjba0++&j=sz{E>|=lpwad`-bK3rK`+*
zWl~^JIIXEUlj+<lL4^jBgY4QuQ#|=EKj7M0!+M(DU106m-n>I)N)&d^+f_=qg<is-
zs-QB`MYO<|Ha*8`@^cw;Kb~Oi65b`8HEBg84(F799h=aO*x0hS2ke+5rOM(<=;8GZ
z$$Z#*M=WsaU&ca*#_m@$-Bw0q$#Hkj<!Zush5L^uU1~}eFe5OCBP?f>zmCJWyZ4pS
zRX8w*8Dg2m;yG#^IG3K|=LKbZf@pbAY_U1a0<X&;f&WcxgW-ZhtEvWluQF}+4=(HV
z)yBl15NNxZlb{BYe#8NHz!#nlx)YsZ@Smi5%*O^+ZLk+3UE<uFg_Unz=wx4h$LvHu
zHQoVeFCT-OHq8tXf}x%p2Hxf$Eq0-J;9g0<XqeULH^*`Nc=A>Yh&HR=iis9+>4=&O
zN*P{qC|%+VA^WjmS!`|P5=_CU6s9bax^m|l^!;&+t=wgVUBjznsxR5j01Wd~94>&b
zUA09e8Q_^9*Y@t?ebfLY11p)H+M#R?L;(=95vJQ=DRayCeCpjvZU!cZl6Fwoj*hrq
zA(cow*ui0{n38A^_q|y<@7T!bhQg=(zp)$_c<UG0+g={_pQbmdloM#JUOV@qhyV$Q
zZ%R)VDVut=7$%g}7}Xos(CQK+a9PKZvZX9V0d5g*dOcVTrCr$(s$#DDf$9`OXf^Fb
z8~5S31UM-+y!);U%_0FA<|7PmuCWXlGenZ{-lJ}YlZ};Sx!QP-&nBa6i2iz`NLce!
z{V_V#v(;p2ZgwS*-vU<Nx*C~a*pJF5Tmw(<M1~g7omQe@me7_S*xQ=T=Gw@QC}1in
z_+#2v-~1l&in%zrwqgNS`nUiJ3y0Z&f138V`+hEM=+z$8ft$*0nDawdoXSOFWhYHr
z179TjGNT*`B~b4ymIX}HMZ~rq89(+Y(G&C@c}<@C&ny58;2y;dGNk0gs_^o=3;=6=
zOoCTW%(E$okp0v%-_sQHxK}1N5<g+3Z?4zDyJYh#J320vCx$mJk@c;$?+Y)P0Uxq~
z(v^1nIdFAOY+W2zCG}XK-wKDcUB_aVY`C9_)9vr)`aTkH{XU8aTUo2JfgrG-+XkMf
z$^&Af>S5AZQFy)c?gC}UgOy<T%k597Io6c(0vFkWL!h0kYHYLjcZjSE{DN#$NTVyP
z$07ppyi?B11x?Gbmg`|OWq$)LwfZ2iC%uYkg>vV6EmU);(`e|9nSLjK$qo_dTXJsK
z?j@V(pym6KBlrDE{|_f~hXPuP8c*V=sA<0vOMv5IU|w^yV)B;oHv#=|rx0>1eWeH6
zoVjB-R3ycT4*{S525h<@6WAaWEG1;#@B#kfeqVyIK^Id#R1VKurNgC9L$mr1<>eks
z{U9;kSMhK5o`f)ntq-5&SntQaJTP%GwXS{j=Gw68%J!7N(EBc_=CVVSLIfZ&8bLsF
zh_EGLfw&PH$RZ33xb+|e(o!zI7vI%CmcQGHc*GM-s-_-wdwBJOSjc(wWfm*Yavug*
zy@Yko^-&p1h(};z((5JUumvmh2l`gOu6zvYMN9+K@A2-(NZ&WjD!U(Y5{!V$D2f8w
zfGru4PJ>nXCX>%nKX0s%;4V5b5F`4LwcVUXfemsd#k&>qnZK-eGPL)VoUcsx{FEQA
zB=adM>gThks32o%l}=h|WYQW}GXRPk*CKw0-mB0rDx;n$8HxU}onW;*Q3Jc0Zgs!r
zchn8H8bF|B0d667V$Ej#VM~jKS3rPJFQJHZ1v3%>aTFLnm{F=!6e`%wL<aT&7qF}x
zKR&a)C8eEt%)jJHCbRBwGyHX}SMqMs=j}=lEf*BR?We}mRIjI&&qBXe&CuB8<UA+;
zLD}NR6j+g5EU{2W<>^~#d>lWxB%}*lTfkh2KIHZ@7S=<8zrDgBHpBEd+}5AMxV7tf
zC33J{4f00n1$};DzPb;@3ko6jTRz=AQ5&-SHn0f{n%m8#>~uEu{LW%QFrvINzD35t
zG1rZ;Vgc;o8jW2=Ka;x@R>E=-+qxBu`+gfFu@H5szE!VEkiNNcz4@{waJlixi{9(O
z!REao>HpNk?ycok{j1_unAV3|0@uk~Yl*ji51SI_9})Y)xAAjNqh2s-wUBgty{`&e
z_7SL53{a9%`&5}m`A;vq;!oYrd@mS9!C$<Sa85D#H`_BDvi8V?6_fd;K^&hOnPrYy
z@7%PR%meuwkI)R%df5R}=~MIdm4}2mh3M$UBhJiJbaMbZN`CZx)17Ylwg)?CIPXg}
zp}@VaAb_Z`8D>NzzwH#4a*kJBpjYJ3RlF%ZxlDh2d0wg)_m~umMv0Kg?+vTW@mVzS
zeiLRh<4x_x!^czjdQY0t=UjgYiWXYPcG{aRlWiNeUBHYUfg~^zTs3O!M2#P9!XDi3
zlCLj)8n5V8fz9S*7Z=wi+Do2R!*;xieGR1QQ%xdY4Deex{8D!1^Os!L2>DqFQR86$
z{?%2dvxv2?-r}nyH(qcGaIZv@3_{nHMzZGX6g+_N5zKP$m5Z)~r^iqqcinPZQ%oGj
zCQdxD`&6SXU`pw{Z(+YwHw2BsP%e(wh+>vm&b;wEnv#_f3<}2+>E}OBf3;11hEUFg
zBiG5cX&eDms{#3(MUtTDLAOkV`i!6a4{otNMASc9UUB+rJS(A2r-$nL{abiS<p)*I
z*B00r#7GEP5Q2Mu@H$RQm2$h{nPTwgm90y@&s|%G0{A<A!!m+yKh8%-emqV2ONOZJ
z%1Zsof;8hbDTDF`PU9}LKp}sH@jp;-O;=-Px{2KL^%{qfKJ=Z48xx&Aden$Np88e<
z^8S-=uUl=Be^@A!{+l;EkHprGzU)ePP7xI-W5GpA-4eLfBVGWU0V7k;Fx~T_Ds9xu
z*yxu*HZbTm0PFC!=Y8SZPkN^$&YF8J#B8f>D?F5DuOhwZ^GH|4Pb>y0ko{7`1cjfg
zbSNo{*pR>V7Q4`OJ+4T6WV`&mw~HcLngGqbSGCfCP*Q^nNNB84+7&8I^J*%pkeq7Q
z=Mguv{(Z{P5L{c9RgTR9-Sb}s&kDy=II~g1rr=c6p+j&ZA@IXprRnZ$h%)!3tP8CL
znz{KEv-$ik#lX+y%l9zF3tv?4^w6h|mZ?H80c}Qcd$~y4qa;wKnUKhvLAA8>x3r@A
zy=8Id8l>JO6Z}B=a;EFk+mtEbzAc`OIeJEVBQzk51S6x%a!egCLZd9>+qmwJLjJ7a
z{u1A+tS$$CHuvck4v;j08Oee=w`ZI`1W00{hmZx~;)?^0&<)arh4wt4=^iy5plvFb
zIXH->=E=<pc5O~%%QU`ch<{S~*LRo-{4_sSR!tJ=@q15&x1?b3_;`K!lk3k^EO8TP
zzS%k(QT^L{c_If5%Ra%wQ7j*fbuvX3C*f8Z{0qYSV;#iFtuyDnI&}7~&9V=Uo{~QL
zZW`<~x4*OQ+HC=2dk9jSa2t0CHQlr~bd0g{NpOz1auce<ylKg{hbFA{0V%90A?KEi
z`vYeNvCQ6#w)D3o1~JzWlWzQ_Zi|qv-mGss`jbevGF$(TtFHixvi;tMrPBqZq?SfN
zkS^)&E~UFf8UbmfJEak%kw!v5K)SmH>F)0DS$yB0@Bf?G*_j>3hv%+yu5+F1oVyoU
zWstmd`fz>8%6-p(`fQFQ5QhYm?C*n46$>0O+cI<bdzFxP#}|sTvu*f>t1g21G@4_R
zvX#6jK>psR9+|j!iU$>~Pf)s9QWP45F#=$R@O+X$=4I=XAno0tGjcD1l2KV2%FxW^
zU9H0}Q*pxHRG?915sARl9g-_}`({1+7v2XMq?VCcWUf8IbSxzy+|ww<c>|JprCIs}
zIDm12hk7@zGl$jWJd}-0c26fL;(>t=m(7CQpj6heUQV21HAQDgIZyIqs@FpJ5=k+y
z1yG2M(^qD0<HmEDIVj<$Ao!USZw4Puu3D9z;Mo)|G28oIvkn(dumelpNo!Z$pw93m
z>otA1mndKGp9WDr<S0*9Ux_hQB$_ge_0eYbWDN2x@x>M0o16*@iD!i~ba($IFT02p
zBO$hPf-`SJeYoi%-C-zkMVDl&=kckL(O;0OLEHu2pCHPoTG_=7fx6+r;*~Tx7BF!s
zfJ+}|FDLsXbf0*~zFL>2uVMXab1evQIz~bwwDEbBF;6rJ!%HdRghBatWQFUQ&m0_F
z;N)?Z>1OtlZNM}6gikc{=`@?AJrzB92*iL#L5HE#*6AjXlO1jI2GgqZ&wc{G<n+Cr
z&l#U@OmU9Vap@j4p^qJkI!G_b#}Df*d~={<ysIwU@De+kx9d&X$ZryT-XQds*n`eC
z$RQ;^1H>D%Bpe#*i7*4LAV72qhZ9X5)F_)CDyeNUu*e9<3=0Kwz^-~~N|vS25KGpQ
zG5RxlLdb+V`j^c~^tUH~ixz8Ha~b;)H8HxQBP_8^K1-ue0SHuZ*LO!Eg9=?K!gBgw
zyellz7#s|IG=k(xDr=?(+|O8uirmVD0aMNmMbEc*pX7XE-=^PIUUPbVJ;mh=-P{(y
zN(ay<>+3Js2u~bnzE>IIXeJ`ev|?>_omsNy!izKtmzFxKReoi)0bMmj5Azaf*tw8s
zV<JJXj<|$3af`mj)RoX9CuMJ5jRr&a6ZD$JH5~sE51ZBQr6(s9tatWTH}_;|B*k@=
z$qZq?wdIFs6L0p&Hi>DUIThaUD~So5%}gn^YLtar8=9|ITJ>hjc15}$9ETX<qu~Qu
zY=UGVOL>L|H<gDyEFJFxK~}<Z2|Rpr=qUt15+x*E&1OcQ#^Ki>EQD8<E5=F7jsAeU
zM^4fL@;gk(oGeLrLnR={dam&a+R?jhQ(DHk#JB~dpWH@R&zf=?YJ$@AFpUl4k&*!I
zCIJWRl~>Meu~pQ2i*cOaVn84n3{deJ?Zc_JZ3x<mm28u!=V@-zKd`mU_9tRx?hCU>
z#R_(g+MOOObW`&gr6d>aXy&V4%`Y2P;(iDXB@JuDUyR;CaHhKkPsvF(EL7E^dO#hB
z-UvC>cF(W7@J9#o2P1&#`WIve2m3CsY`$L;%6rL35N!a=y7_r#Rzu_h7ERld76c-T
z)!Xvq2e0JZZ^_L=fB8TI<xkFjYjo;;4sDt(q1W)xSW+y_hh4{=@D0LUg3Xhg@)ijl
z9puM90eSfh;5CL~jSUcXi1<$P`+#*H8|mxF_lyr5&5ZD3#NzJpC3`TTEzxj^KeY0@
z?-t&e8jJa=hl0^Kh;in#x!CjVRgwc?p=1tfun0h@0*At1Z$hvjVq4dn<J)*NCeR}X
zI~WcTOu*%P-Kba8cY`#b@13$y7wAn>u(7@BULz?G4EmIwBBBu{?n!XNBGxh(DOX7)
zrHo+CpoA1IgD7HmhjIN3*Tfu0ef#8GB2Z=Qo>WHPn?##2>?y2?`;w_+9=)y&;Lg#d
zvRsFSJt8L#%buz`j=d|eyZK&(1vL}EruY;iBpT!I95rRJ-{2khQJ`(eG6ks$mNT+D
zytq<riFlG9d-?Nr$`NN~Sik5k$@I@PAyh@Kt6`pkFvij{hwXb}t6B^q$l#j0@XhY6
zGfur)H%9LV-4e+%9qzd0lHp8TnrT0u5oF>e2wTLF3P6h|-4u_PmrYnyijYEM7#Lp`
zutoJ*)nJAH`d9wW%!Wkg$fsxd->>(m9uT|3gGoJ*GN#7g8(Hb|njY}z$zH8RG@vJk
z3nME`95kmoN9ikz#<1*?I3vKtd!6x4<|ff|$;{d?rE$q`Jwgy6P$m2RoXwjFs^yyC
z7fy^97;vFzF~H$-f(J4WNbtYx!QDgGL_B+}uUAd)^3!*nDaj-<*JH^S3USWNbI2m#
zpVd_dhNH%qGI&-~IE*Ch2AH<ka4a)hxtU5ZUJd(0eX9<rL!H-LQTT5B;6r~MwkYdA
zBg3HsP>!c3gZ9PycyIRRS_dZW(0yqp5{H7<`m9#{nr%pOVp-X_Va|gq88-)_yA;@w
z4AN#iFO3|>7O~Q8+lk<kg<7~^3BOSL_p=We&B%+_cX1d$dR1WQl7xf@1ud1jtsp~N
z_)A6}lCXUDf(fpEt88?yccEOzg~@MzjSaRD_2+!%Wi)R}JHHtq%h+DvSn*iRc@(-1
zmy)&#0Is1Gx!XqT_+Zcu$7I7w{mGMy3OHa)79eCC&eJ`X7(0v`Q<su_{+SAR-GPiV
z;t7v$J)0)Uc{LHL)q~QqpQ*$OGC$(vda!0M-{G8{9;`T19sGzo2cKzth{3#X{e+bh
zSIU$_b&chng!5(hSlQgj0c5T<{GrB^5ls}pQ8AF=u9@-$UX`yAm{`j!^gU<pmUt*v
zz@@T}+XI4a@w~ih{|I$JyEe6CcU&>CetTw3mYxt^WoA^q5C{7?2emYCLX^dX5M{di
zzq4LSCQcn%Ri>Hhui+Q0Ms<$!d}(1FJH0I~TW&H9y$x2-lmehxC#79oUPNz-ldqY`
zhqwnObt1*rQt;3a1So<6$-8;pe!t5!uQb;F(qvre&UDr25(*cU`W@-jOhqit@<dPt
z*+=*<%@qe~{C7JRFM7iJ7a|r#Icq*dM)J>YdiKLmhV=DW81;JF<<**qr=Wx!vA^4<
z$_;w~%(pLc_XP=%8?dh0*KS|zPQ3f#+a5p%{AE}G^D)2>6F)=pZD<OzFzY1iwo32s
z?V;xkwWut0K23kFNk{hDTweM!aAV7oy$+a+g#y;{)E!7+Sn;`ghD^2U$?H?RndG$M
z*_JgvI!iu`s@ba<yLHAta($ocaOCB6SZ{Lg^zU2jGFxX!L`o6aW^96Q@C(VwmO_3i
zl>=)J15%dAA}@=Kpo}_UdxIvZ?~weliaCBwX00l<KYF5@@O8etOkRjI>BBXhKlpoJ
zjITghyxRM4eZ8mfNfb{@nN@`c@kDosLw}!4@?PF}d>>7q=44jLln6mKP>BX6KM(?`
zGHmiHP}#YB-p*%(ew9ED9{`5VJs{$sRmyY?p!w<@9xKKwSY~>Nz>bKat?@dMf!L_4
zL|c`nWdZA!&mfr4ntRxM$`^G}T|Z#c%=6Ux_SNB!ac!gd*k>x=PR}-uF5cIGYLejI
zXfmaJcB+7KWnf<rCU^19rm8fR&TYmDX3^YK-m`WfT=4NlX~F7i;p(c+=GZ4&Em+XB
z+*kj8`Pr8Gfl;YU+)O!sZ98)O+YxzoavW{>BHlq(a)!_8@cq=tvswK~DVI#Ft@y5Y
zjPJ6t(>|y&x-3lm+Esd=Pf-k%ktHX{Jb$_TTnZrTM8VOP)r-9SHKQD(c28d~CFZk>
z{&SYaC}CR%wGh}ne`P*jU=2I@q}M4EC{Z7+@ItcAMvRt7+N^xv*TUJ+8{<pGZ;VJ(
zex(^X1?SNFsy_FKfRi}2@(yC4i7TJITfG3Uu33yiX5i*&RV}Uu1ndUN<@l<$@FncT
zuKwUlpl5d=?$sO|3KV@noZwAbY;_lQ*j@L~ZcE<-t}bi>KMrBc)Gn*qwfioa*oPF!
zBj{O-<pmOnLg}TltcN0Jbid#FL;xKXzOLfOnFBWxw&j-FVs6#)vp1m@{%JGTOQ${T
z&v}#y+wcH*0|S4(hdCIio-+_g&6tM4un~m_enJ7bo$y$nb%ZlILH{u!14ekp_=+PY
zh48aC8Y*Vj*ID6mL$AC!b-CX?)2`vf(a$&T_koAE{=_=hvJiJhMYhnC0`@e)68wCd
z7IgV3DurAx^JTBkM^-M)V^`PD6vL>IazECMBHn#=Kz;+w(_u|JmQ0>hT3;TEpvRcn
zJzslQMnd`%6YBkZglxcC&WjVof%nMF=PLSWiPxQ|gLWwuCY(L2=oahbkShA5@)LD?
z^)ODNh)Q^2n=6OKpW5a3rRd34sr6eIHsd#u6ppCgf(N(59l$aRl_U5f<3x8((O!^V
zn7nz#5c)psxT;KWuImrP7m@>a&tFoznDs2VcBWu&_0Fz2&Rb1#X?#(XglPbE1iaC9
zKfc3pZuoKc6OC{+csMg|AW^out4_N-utR;%#Flr^y$hkY`<Tbl=`J@cp6MHKVh|yR
z_aW}QTEDUr+ocuk$#G4SijgXyfu#+oJJ@vh28U#HVk05#g{DP)EPk%^B7=TGpNfm=
ztpOj)^Nc(NxlyDFNu(e;U2$Cx<~^pb**}SoR@f+XgSoo*FR5_f&I}+|qgeO1m@G6D
z-hR9drm&J+gy>cp@Q%tc{4?MO8dDkpU5|L1H<=?5pMgjaILcr&coU7-2Dhk@#_`vj
z;oT}*aT9%sPjUu+-DQ|hkz+!lsnL}0<>kBI->`13y!S+EaxeFzf8$Y&^*OZ8?_Sz}
zKed3{Jd@R=VQ<%Y;;H#n21V_7T(0e_^s2hg(6oGpQ0o@WfrFUslxCq<W)ds5n<Y8y
zpJkOo8DC4tc&;fWecRx{@q=%2dS=y82UoB*!)o^s-diq}uJ{=Rt%%ftG?+GNLPt+f
zO+2XRjVF>%^t7mG`+4MUQZW4hK#&EhTwg!E7s2F<1yZ{eW53yDgtSi~USThBk;5~6
z`nT^Vm#n_Bs0Y(>pDf_4Wa4H5AUqfz_SK!ZpF5*I+sVS3nEekk_}Z&6fiFf5Yi?B*
zGrR0!;RKi8DbmS~6*%6fZGH%QK6@o?2sb71P<*gLL#XRKq!TJzuzX<cM{zW3>bTY0
zp>u@@O~Eb0yO3~yWeX05b>JP$&wh)6g^vk>?qXmr5?gLDa4c+Zqo&Dsyu1=+PpHHD
zqn$?@3!M-I=W_GPNe~8<;H_reUunC}xg*_mQ*ZZl49b4gwt)}vORTqi;;k9vFJzXV
zH~coaFWbOS3j{FnKJ0<75?s@CwjByY8v76UY&kD_A^eXM+`@y?JzXBac=Ti0ZU4~x
zK+2e3v{_b9z?Hr-J%jCVSRNufb71Zv=~h*WUg01utefWRievuUGcBke->$TT^5kZ$
zC$=qeHE}8UNiqxX$t_PW;WU6q#iCpG{S#&vMMb!|XF43{XEX?fE9@+RV{8u|e!m^H
za&n1`93CO`tC_PjzuAAZ%<H4<#EYdM{`-+{u%+KUQ^;Ht*{iGeMTm0+U{OQyl*K&m
zL@{UkP(y%zg*_wK&8hDL5!>aRAhbgl_Bauoy9c?aXZXiS_H~W&_zb2=OleDswVWf%
z5PE1P0?;7zbUW$Zyuh^y!89(hHQf9In!{s+F1%<bHkuSIt?z}7Cb_-d$IZBLoFT8x
zog`+!(towg#q{co8`OHP!%Om_5`NYlX>;!<hsny16F3+B1c87sc`|Q^=G0fU)8WtE
zGDPjgLvQBf@pkaz32(G6Ub7pc%FA@Rsu=nKvKT)f#*d};$O)a`+BJ=$#W_3_w||fk
zEF4zB;$rK0<i_*6B7E&dt?qM7X69?*!S*+;xWbVWwI1+E+HNZ)DcR(Rua$N~Si7$~
z1-`j9I(|u+y_?|+cppQYsA!K@;+>kIq}vKJ09<KW=FcXTX*oJr6}v~ms)PdFbPn*_
zyzcxzqMWc_wc`e5{5jnQAkby8m0#-92?{ft=17vt`=o^UiTlaqH1LKSa-&l#x{Si`
zwEV3n{0cebWjCe+E6F=)^{~wN#^Y>1QL!xng_tWVWU=7+ctES~pi%On1}3x4h6Qkz
zMURkFhybOI=h+?EjbgN1rsp?%jd0kCG|aWrbdsO{_R{_!1X)=?Fo}3T5Ug70LB#$c
zEFEShm)D0k_~mMhru9gmU!PPPaaG9F(Wm4)V>I}Cy}%L;eLoMe*-@Ka{oD%ON#j^r
zM?}PX^I3#6o+aZXbk_t!Xt>lSCUmdo-kc@p%5el)GhfUh68pC`M=<OD%}c&XS&y#Q
z-rTWu@M+b~Qe8<XA?2=@D^IuWwTtu+SD$Kf#QoYjcdcg~^s7m>;bFeyYmHwi=F)3h
z@X58B$sHtj21p7R-)=BiWLOX&?ii5JFuBNI^AJt44hBx}yb2@%aPJrxkhNLbs;i+{
zedf6Ej1-$6y83v6>dhb@T;)y*ui2lez((`LT>i|Jx6@xND@gS)Nv(ExWY)!@;f|h4
zz9jlK+~%V<)$9s`3BS~+m|Y4->UmYGZ3IPYV<FDg<b-U(qvtTBv5QU@SrpVRYbvt)
zCH`&xhXv9IK&nB3H!O*-dg|atqgE<U&gj&%&~h!Q;dX#nY(tm$NuDw*Iu&nl>rQV{
zg!)&0QY6N$!{4<iyi&IKd<JXHTNh~-+|l)xY~IY?#f;(-x!!BrXqFBR*{lHo{uTO!
z-2FR>1W0?RtCFf$t9l=((0f)>${GD;{eu9_sLIV&%%!xvfxX>#8$$N3=6x@&OuF%8
z{8R6I!&lw#?nop~(R(C-gy9w`O?Cq*Ti*e3VNrF&I1&<O5WdCA)imJVC5dZjrjRU@
zsb8h@7zu*SK$2Ikqd&ND%JS+v9zOf+O8yC@K0&ixa*oADB1&kcHjN>a5~KzQrn*_U
zLkjXo1mcMU3OVmxhDFc>V7Hug`$snOQ+Rnc=Z9`ZPAgy;lCEzmx4J2tyaq!fm-^*h
z%Z-lX-B~gRv}7E|Xo`ZM^ez}^{owE7PJa+^ZW;pqXwo;h+IMpkfs5E<hw^8pRk5_7
zMn7z^W$68)Y0yp2y-8B!OIh=L_tPjhRoW{)j1^-l2nq3*Qv0mzWLY0{#LMaeO0K&A
zeS!M~#bY8uYy*%Z$?FQkXY!#NwPlG*n>n)6+!rxn>#5cx(RlFLK0f`!w6eICDRXy}
z^xbY!Y=M8^50n&&uGm_!*)i}4TBE#Ih*@FdIn)t2d6Akbfnx6!cY&A!>XLvA4@OR~
z-c0laDkzliT%3_J&=?Vo{C-fnKi|j7W4~CMNEMW~uU2geR@AQ#z>~Wuepam50fd%9
zV3gB2lGE`89QIYG^mO&$pC-kPX%<0Nhr5QmfD0$c1g1XRJIYA4P5nYw-roMnq38jv
zw)D{rzkGP@=tswVw{VKeZ@jbhI0bJH43SFkifngKUMAaB6#vZZS-WJWpUv}NApC7?
zCQ!Y-4<D-d)xck>p)wpnr*wU+cu=ze>Qe$jTKYP0(|APBn8fl%!KKB82C{me#9B<D
z7#IdVJEUdp;)}A;?L|n5pb=$HzmRMyCrdJuOlD`Kwk3dN$%hNM*Mo#KAHXDK2fs62
zwn<Q*>I`a|2TY5U?tdlzxNu<Jut}^}btSAf{Uo8I!~R=9nVu(>yj+{B0@Q>Dr1;$G
zo}D)1tQrBgW62X|-}<R5r=r~Mic|nuM<`IT0TpwWe&$A-<J)BO-6bhN#kM&VJ0oe@
z^_gH5xpGu&=~|TH_U=8vxAtTHNN!%OvYr=r>q*RM*S`dhoY|*iCS^$e6j_YTcj}3{
zG9gkCu+E<RNIs3ZgrYz>d5aqSEpOc?D_k(AJ4(r{-SdvFcV-(&%*PaPcygHoTOLV+
z(kEiYiXt<CES|I`SFI};=HcYO8p*PFW(bbawda3)2KZdq!LUKm<W#Sg&=8vAGsk3E
zO9lE$Bk>K4uA*?M-)hFRP0Fuxapi-%07F(=<G=ZbruAtdK<Qt6>AT*!D6Y|WaT%8s
zdAjA6MyS3`w&D1#BwmcW8-97suD&o$pPtlsqxd=!W({eL%CCqYQ%m&r;!bH0nHH&`
zC?rbv8+m%{a-a4E0aLo$OdFxo8NyE%avD8iF(g<=@U*s?Ld{-L`=TF4b(=FT?ke6V
zV}$5G&5&B6;Wd7_k|$mMX5Ct5xGlj~3W?UPOmsVqU{7f?9UGBQ6iOs}H8MPSEr}$(
zVf7FJHyDyZ9dwC7(#^B_&`8H0TYr?Q^LgF=Y+Inp3S}TOutdv>22k%QVHenJWoydN
z*Cc_LpMP`xp#4bX`^*4Qe4mXgqsH1mohz*Jd~LVPqMA9?agb<YSe)|qD4kz{;bMH+
zD8cCbT8P+Gqt2<PJM#~R4{7tF#1Z!fH3zCj22Mx1J?z$#mV@yxHMRG$3FEf%7!v6o
z={ylBgW;vqcq-y@z9BvFV2MgTrtH|a4bd@G`36s*8yfg@${C#HotfY+E+viDo|wbs
zEhNY|^P0;fNW@ZCsQ_Er;I{jdILi)_Nn3AcsTZ%t)PBfr{Gb+Ws@(T?6(-8fdzL1t
zhAPRaq=uxU&xgmBO*KlM=)&g<A|QW*fJH#8#*1^3r#&y*{o^w|6_J_43ZZF37<i))
zAI3Oac>`L4zS=9@leU;dfmAl!7bnwv(aBR}43-B420@5hAJlQmXM@s&(aW1w6vYN#
zsFj~p|KQ2-npZ`j+M_CStf-s>tlsF?;-o(WrifI_U@mgzAm8T!Jf?yOVmN%|qw_?t
z-ZNEz!VT~ROh_9HVG=Tp@7#*TKz3@KO}8tz%C&@sN(tov6B%)?>ZC~N+w>GxVx?E3
zUD?NVKzR#q<R+srQVHuIJzF+QfEb(P#w#&6&nTs>91>*|(~_{)RWbUFuWO40UHI~M
z(mQ%zLTg7YP#SxZ%N33fnB*Np<_cck@C^K$wuXQiK@6O7IU)A0Zl_PsUXWS72CNKa
z$T&Y<`OoJ5S)#1bYpJp1{korPMmdtq>JBJNMTxfCntX~kZz8}4738b6fS4vhQF#jH
z<RWC6K>sY~<I^OqPW`MUITTIC6zQGBp|FTE;{*tp9K;ILu>i>ESD^!GLh|*syXJ6=
zq}uaJ3MvTGKatm4_>yY(v99Nl%|Fp@o+5qjil`PM3}AvA#+T0&vBWVvh$eJ3ZMiD!
z#N1narw_^XhZ{NQUb`m2UHf*;OTFI7%ITF_GTAl0(`<Tn6))f%>yCT_SSoTz`Gy4s
z$<l8QATMN{hOtwY!U9c=$w>nefxO1I;91e%p*MKSB591`XBf_b*+NbxsQOXL0T`4g
zJXZWHUSdr&!%lhJlU<hY`2)e6fl@iaap@HjHX?R2!Y(aVws&ai0xaCiR~1fvjM{M-
zO0BXPUm1zCE1qIc`w49#cPBl67r%{tj8YMo5c@{NRlWb;D;9pjGgh0OaNLG}p#6^e
zt8I|Q@~0$dm#U(<!r+?fK6!UUG`k|8!Rd8@k#0^bNtsEWE|+=RvkGar;Ex%raSw6`
zGt`tBWW}^5w%2gpQ_Z=If{|55o~CynpGGWFnnnPBoeHH}&WrhJqN-?qDSeUMV*6lr
znV1Tv&Yv#l5JcpXtJV+L(u=E*=yyj|$G0OT?;RZcdKXxdW3i1|7FbpfH^~5~l+mwA
ziImDFO|EeGFb!LLqo{VO^<XjG+0VnuprP{&$tP`~A22X1ju#cf$k+u2NTZrhG`6YV
z#~oMM4nG0JW)K4fs7z(U(|`OKXsTUxy=aG9YZdJkBgU~RN6?)U<LzE%9Pfzn(->u{
zsyw-1)Go%t_tj1pPb9Nz&(SZ*e{=K`mdz_xv8<xdcfUB~4fU;pXXRY%s-Jck!~}a@
z_flsZ#JZzHm%EjG_$T6m_j~c&FokChdLl@*lL#C1pB`&bfK``}Ht5(3VP9&Da@=ZT
zE|2Tazf#S?#7zvuPG+&jGw+R^OKy}8CSvJ1phG~rv$W;%P&&hWFN4WxKO?N|US8~N
z5s#0@gq`?{bfeg}SJ%lT$TOZS{MQ&OS4P(wiz2Jfl6w+<f4U6WcN4>1*4AEONC12&
zeTs#*cFsQPZ6uZ8%}#@`(;vel1pHeay;NtmHIMAb1`qOT)h>k1lN~><Q=rhe8xqZS
z9vNR?*B?ub^k%w~ybq(-=Ol4od6o~}IY#`|PX#T-a?!Kqk(c2!j;vhXNk7b^il!cV
z`tZiws#GRKfjlG_8QWLDh3>Aa8Hat-uF!m!dP%S6N0|u)G8D@L+^u8@U0sNlU#Jgz
zsGN=ye^j|@;u@O`L2@=P@AAHy!Wu(gP&cci1E1$He5`Vp#9P+aRdE<(qc9X0<j0cF
zBqVSGyv*cn(8>FVfQ+{=i6~#8&5gxZItg)X(t3?w=_2-pYqxhPIXZUNUress)cf4J
z>lX3FHEe_d74hmpJw6Y8lO9>ZKA!$6`m>==mM^0JG$n_iqIBC7IxY)JYxLn?QU741
zW;J9ij#rEvyW~-MCI_&JF`c>NraaDD<+xiLGM0y%&j_+3n?D=s<|M-j=<J4b<gNF7
zvv%`Ki2rf4XxkL@^HW}EPaGTPUE~k_Ma{Ci6YE5`w99d0=o|rB;Ny!q$8V~;3`HrD
z!<L*&dJ43a?rJ&Hf7DMfzAv$r5I&>XGccg!^!67c)19F?L%PFzdTb6}+CqXqJfVZ*
zKRw4BSTr}aZ~o>tzpHf0$;b9e_^cGaz-5Q7>Dvc+JW=D(Qcg=2Bp)rj=f#PO>3oxV
zE%!d<u5@w$^=1H${;}bLtNA`nw&o<{odZmFX0<UCihN3jx%W%C+7~`=fls`LgyhkB
zrsYTobSby9CamnXkR1wGndU#UB#@SsJ|z%a{h4n>oE*(f9KU<l3W=(#OUq)s8ku1B
z4xEM<nfrG`dhkEGY|zPISgpnkYF20FjJU@3-MiAyPG<3h4{jox*e*XENfazlY(8JU
za<acJ0L71!{e<FS7|_T3RJtEJ=2f`MWje8k*02JB&>RT#1NH)i9T-IwC6ldh>=Ioq
zb5+6`biDr<-3lqh`J$>pk!xQbJfCzObSu5?K#7CB%s;ZX;yf9<2DeA-#<S@(0)FR#
zC^*darMY!bQ)Oe5$RSek13B?6=s~x#PM;=d$CS6c#^wXgk}4^vct2Ix-o8?;+m74)
zdK|dfb~_iS4}*ZIKrZ*XmqWL48Lmv``SIGf?LpDPD~woBtPW+FKKWn=*jCJU#+Enz
zWPMkHE$tD6E^#r<^CjcRw+Xo2#rgm|PI-nIH6Xf87TRR&gY(;(wLQF1Z0mzKKz_{e
z_3&Q0_Acu29S7M3;`>6wrKXkVXO}@tpClRZ2h|=cM1B*a5SLhezEGUpF~b_Fz)8IQ
z1=T}=#i7z6aV{KL6sZ=G<crePP|Q*CFbv9NE3X1M)XNYoOq$L&P3ROoHels&${rgk
z>CmW^zH*uNhn~D$k8iK2a(Z%?MCtLHzl92aF^_&rxG~AAg*7uE@maHbv^Le|Np1R^
z(<M7j`DluK#|O<T59hqxL;i=}348~)WNy<(F4+;HG`AqjjGIs;__YW{Sy(r*51deH
z<fr>5jx)xtvk~Q`?)=p<6K=b@aTrx016GUjEHtE&&S&&Ol#h2uy2v%2BuroFZ-%Gr
z(%pSeeTK1R15sV<b69T$I_*teKGU8)3f+BIew4#kchYrflbp(V5^?u6r7fRHUoOlX
z^Tw?3ah43w;Z4M@t&tcCv&Ap0`(AkUXy1Bq1{T@@-K`(jDj=z4J0j_j$Z9K^+FwYZ
zeU8O+V*-s~k3^LlMyz?|9Nzo=x5lA4loD5|xu9{ur$j-wjg<#8k+Tbi`Ffb}BaH`R
zXlyF_i6m6+>3grrqKywZ=oc1PM<wk(h=K6Fx$drfZ;;?oT{tK!{Xs`BqeE{EF#Z(M
zSuw?4jY?X118uU|k?!dXTiuiAQoVuJ08)d`^!Y#=h6t*V6iNgq6Fp#QD19-WoVc}f
zBRrs$z(S_AX3Z7b=X(FPEcz>JltmYTsC0I)L_uO~#gTDZ>V^E-X>n429>>NLO-3~`
zXyUSk0FdR5d+!St7RN;voU%aL3;!IYP6~tEa18ty4lfMBeDh;AcbXltq{`qW*(xGN
z(ot()#{B6`@~YkSIJ^Cvwiifl*9IQ02(m^eLyk0av-a!FQrhADdUjp2Yk^EJa=Jrb
zAOpGzpoDFYdCdIx8sjo25mEI;I2%V+j3)XF;0S?FcC60_y)>3P(TrY*hD$HD&g%<e
zxRHns>1Ld2;&p=)uB#1Pdd3fA-ua?-L9F|_UA#MbXZ=ac0I*An;<-w3M}^7}UILf9
zA@Tpzet$DD)5U+F+1|yCcEINYJ(-@+-S2tvl;PPE*yKsqw%fkvOaecR36^fP8=HI*
za2;=nu(AX7dpF|5%gF<ddnVMy#G}rlkPrmeBtXfj`eu}~`SFT9tgQNt+aN_0LQ`~T
zZlnS$dQB^nnQrB{7;g3n>X9*%^d-?A#Qh(OWS|1d_zmvE-JKq42r}g;TL#^05At?D
z{aGT_{Ipt$e}{m0^~iT+!r+}ig21dH0im%tm@HR>l^dA~M;KCZjM2g?DwLJ?H3;CX
z2YxK8$p>p-mogL@p#3lx{+DHn!`5<k1$8LuN!w0xl#sp&LPxBR&fNRDu7zbD9CMBd
z7#3rxr=x&E-m%-(;W-=EU7YjiT!MOey}y9>ghPtJRvLEc^D#p-5Q}unz(kCT!&;R4
zU~sOb$Zg;riQr`TXCR>o=78^CGQsAks{jLB%ZdN<RhfoZ(eR|I5npc$Lcv?+m7oXe
zm@t~7_*=RagA<3u&*2!HLEWZ9P?kN<h)BLo&uvINKKgxd5_{SJ#B*D$!Srm@;x+Xo
z2xLfoSeC=#RIQL1qS@H)Jo?U1nB66|95pcPpAcAx8@XhjI}BUvp}cb6u!hdP8+4Dx
z?f-y2i0qp)31Kdd*<jwd>YL`KJVPH$IAF?=(Bzr0op6%~f&-N<`NIUEy&YV+aZGUN
z@3j}zUoFv6rKMpIg)$rAu|gL<=`MC+4UALn-|W9(a3#6Yce~&05}g0pmeATCopLu;
zd3)VfPE1Uphn7ilIN{*Is83Cz(TvZ#zhO>_2IQvgI47vg8we!vmPKH1ufLI4?>xEW
zbCA1Bhw4u<`?PvRUp`Mg2oy1*1iya}BOxiVod`RoSu^)cLyFPWQA7mFS+D^@n2?$a
zyAPQGHj;d%E;y5Sh9zu0lOtHmygUw%NOD@pC`JN1Y(BHU>+AfJr<S9AnLEF)c&~IK
z88<wy4HnxFvCxPF=O<aW&BRy5G!(ToL&G8>h1S<~n!7HF6z?}X&^EJAEw{;`2PNDO
zD8<EdKM-r$m$MH|(<MyXDwB1E`Ns@{gZV+MfFRwi#IerYjt*uAqVn*Y@iku9M2-hC
zc}>)lb6j09?n^CN!77(%JJ)i5O<EpZlJUtI;RHn~Nk(=yaGk@7j7&LRMZr&D$jPV)
zIJi1}=`51amfVCL(N{PqE~6?z+590|0dnz>dz<z!f&mpjK6>#Hg%%mj`C6Z4{_{u#
zorOa=m|&v~Fex9>4)N%Dt9zH!IVL&xTG+=u5|s-u*(RiN=*HIaz@Uqvwm5v5cx~5i
zf@IH5zP_0w)w{>xLG8s&5R+7X0$Oel8bHPasnW>Fnvoxo+n%!GxFPrIfHwRsqvMhe
z;C>vjT2gr(e=$p0+k%c4i5_%}b8*?e0+;s5BqS(|vvL9UQ|gDqidc#PfB#Kb!UR=E
z*GST&zR>d!lwL42i%1FPo|u*fl*5)ovCQuR95HZh__O(a{^i>NuhI_j<w%{DZa?;M
zUz^f<mC2-#`HzBx45W~hs<&DRk=MPOWeb?@F%`C56E^uh5i9&JB>}?v4dXP;2ZCi?
ztH>3U%C_u5;+b6miQflsGk9A5`pEvA@Er3a$~VYMY-pXQ``0fjWd?RH({`+ShZ2M}
zpi(_$IS5neRA8>J4;IQHT9XV{4Y9MbISQZQkwD573i}$5#X<v4$)^wE+Tmf=0v8xO
zo3}HTe+CDOJYIb^ye~?OoGmChoURsq!+iJh`X4g~#a?mnjMm2%4)Y|$%WUe}-lCFZ
zx-Z|+Q#-swhN@1zLAK-;7p?R~JDU?3RPD+@wU!))csIC!+W+7A2^WJokBmW1K6?Ls
zK>TEqbQvc4d;IwKW1b=pgW$vgLJiUWI@WG<pn_p|ct#SCOW1X&|Dyi2|Gg*irpWdw
zuyuXusC;Ujl;5jXPys)X!39GMIj7Ej+AQ^I_3j=AkbzIHe1T-GMj*8A=TJB+_j@J)
zb)%gO#@U5`Wclp|{ZAPLMF2vKIGYOxU+OhUD2vaEQ4z1uCpsItfV^>Nx)=|XhW7~t
z3UpK^#|xjue9unajkGSjT%!2}`)@!6xHX6i%J@NX_UYM)c59uAFQkt*Kaa}IhP0Oe
zx?dLHzj)mPr3wyqoO<$(VZ`*^J)?h&Z4Es4TRLFcpl_jsj2?<{i(RYBKgB0$Rp2`O
z`H$u(R0yBpa1^Ca_Bq!6kC+!b8%3%W|DGY}vOrLtt~X1IyebSNuL>hAvQ>XXJwoD;
zA0;u76V~I-0`!R8&jsXxN)7dVqkj`LP^%||UCzf@u`p5)cywS~lhLoW%>p$UY1Gj2
zR$U~8vFI^p7o~j^_eB3eF6+m1N3a=Gy}$lFtOhXI0C4)8W~MOZ5p|t?Y`C*WIZ;x!
z$$D3y2tbZ@I$tlQ#Vc$EYB-nD@ghs3Cui!OvTOnWvgyzvw`hYr2g#08=Nqcv#DIz!
zZnjCEKlF)QR&`ziDuWYB*_YV;>@pQ)1p&xEJ_7iE02dEYs{9%^e@eDZ$@=MhVAP7K
z7SSUp1?^l|2%Er!FUYBF+xUA>9?GoZzyND8$NiE;3(&1#L>?v=CFkbe$QhWoB^ssL
z3-ExxD;A%LZnjQ?M~lLdy+%qZ=c6FQD8nZ`{i$oE%IFB!7i02BAoYUbbjj@50Jr%k
zu?c;D7-Ty5*XK{{EKjlb7YfHI<G)2;4+=DJdp^^Cfwv}SBMiwyiFbV7R?DMW<61R8
zgtZmr5oP>XAO4TiF#zt!TVP4~;e~Zkrqt;^(<5d@v^7Ta9Pn8}{W#GIq2EIlRjr4z
z5<fypmAUOmNW4qlc);)jo8E%fCtPd9E2u&M_;H9s;P4^oZnk&=KhYHYy5R;IiTi${
z{_XI63s975$ea=qaTouLUcphjwvg;^Yi;|73jj8OK{dP$&q4V@OtC;ylWX*OhK&+*
z0~sX>=}Iy;xoPF3WEzr-;Ux(VMQXp);{FFS17i>WDD;lmd?lClOcKyJD#HOc)B;Nc
zuK(o+XauC?b=`@we$(>~Dk>eF<Jkc^Sisc)Tc^n*5*OHG0MjowBfHFC^VFUpDYnqv
zm8>XRIH(yu)d3NpO^M*Ys2n5amnBL7*VT-RC|q<En7qj~BPRJ1JpB27fWKz&?spzG
zH7i-7=_^mS@X^0{3Epj|f-QX4sG=jxG%3g~AG{d%;>PPQ`S|F0?oo){z9h|;GFL3H
z=)98`Fl++SXI?jl(GNo_$jD+Wu$DI-H&PtxHRqd}Gs2km{4?Lu#>s$M79j{Hau&Ox
z&AfRDwDrh5{PuBCy_g{=iSD-CVT+upgJvw2DKjol?TIob6lMvx^lZ85uXIQE;_2e)
zk@L>j9~rBCa^$8FGKl$)MFmO$Bz4*OPIN=7y!@S?ObQNG7fsr}W_LuDmwQI40)3RS
zVpe5tU!3pM)?UEbQ$9n_Fxbt;s%%meJmi1eDe$}vi7YRD{y9GG-g$>~)|m9gGfqdu
zEVOlnk4>V!esATlq7wv7hTXJPle~U45j%NN0=#{epbroq2<-w{RE^zv>k{Dp4(PbB
z7jsVCrmFBNh3cIE;Pi#9*KaE>fgIS<G|1>YI@LQZmV*In36%{=jHN_9iEjvSAmvhj
zR|lEXH}LK&`#VpP9g<o)RYxTz^(wYR_R#h&a>9l-gt<*xNL4G41`&5BV?1wi53xaT
z1*<n?XM!~TGaPb=Qc{xS){a2CdzV}9F26tKGY4MFk?`kGM+L@#-%WeJl&~yQWIJZw
zh7Grh&84h7xbO+aR~$H@m()JB_Ff~uA5Uo-15gy{pk=$FHHUa6*P;HxsVJrxKigL*
z9H?D(7(V%EI=-n+nQr3Qrl<-?{#pD$eSkRSF|!LCu3<1;x0fHkBB_QVQv^ks2eC@@
zt>gg0&4}!8C1<oI=em^Q_01`|jGTquxezT$$$#NG^Z^9Suv}A~_n<kxq6wV%$?B1c
zYnL<dIndGs1${dG)X0zrsB$?8Yye_+peiLn@Vr10szw5*0*YG(&I3LT;67q76DY#N
zgU<6UY5wjVy|%@rYiS97(<j-FU$WGs>h|GFamYcsccP~t25N_5OTXFfy}B4w2Q0#D
zSpWYR+wi!SdD#Uj>*Jc+t&hFvtdwQxY;hDKy5xRutFg-yxJH{RB@Wh5j<{#&53&<U
z?Ang={IUL>17ILTzJZ>1?5+bpdaUYI-#lvyD)y1fmhK5LPJLqT@6&^PS{`|4q|8%u
zfni0BPql;N6^mNAI6^7}fEtJf3OXM`J3UOvBLgg=ki}G%xc>F+a(ojP!<2(#u&uZw
ze!3uEL@f4UvDT8`TPG}wJ;FmeYF5g`Jd`5p{JR{r>b<Q0d;EQma4hH?#>OYgRE&s|
z^sCUP5G}X&FXCy_QaSB!9arKY21+15=ba0M@won1dlLbCsWv=<RJ_{>lzlro=zq-j
zpYQNUp}S^@6jx_zqzrG3E1wV3KzR){o9c5O7CpjFASWCu<Z+PIwJ^eFF;!L^((Ohv
z<M8$xZWAzL?M$#*55^Y@#%oZILIub%eRlGPOwCIsdQC}~xYQlZO4b}lUj<^B5(B+L
z5J6{Yi5IzW`If<KFD+8QwB4pZ5;0$Cl@dw<$;Zd&82bHt9)*45VkFJkL;IjkH9e;G
zTT_yXYOF=)D$0fzMn9lpBmeD!=6)kpbD+ZQM+!8H7{Z{SZ~te%LUrOm8;&2f@uO3U
zhUvy%D__zIrmBB)8dLe^O4a%Ew#2TLlNXuY`D|<uZjGuB+bRW&yP9oX@bco*;}rXT
zqV@R^!190#0|Pv&97{^p+aG&WpkE@Uqn86|Mmo2-Dk^axS;k%?j5YiPw5VTP79Xhd
zlvYS$I@Adkai}lL$^MFwrw0juc1`-{Ly2S2U7S;I-8W5l%rnU!m=G@GC6Nly?<>)!
zCP(B%$l-xLad4?FfFE!eY|OIso2QyzT#AJ}vF!Y(pzqI<kePfN+}^3WzoywCmQ4uR
zQ^4<mfC)d4n%B_(1myFDC{XlT3WrM-$FTYOc|Gxz%1ENsFYX4YxfQZ&Z%cZd<~H%H
zwSus9onw%8oM1;%+E*Qo#J6$O^N9}0A_)NMgN`e-Whq4?Ql^X?(`S^EeBm=wA8i49
zzUrg<{olBJvv3NA`1%RmJhWQtl#|~GWTczrCwv^E9c%vrZ%P1EGm!Z1!}1Y{D0uj#
zu(zQtKO<k3Rf|618sO&r>j9woqL#JHF{VXn6cn!V1s276AwhF=tM%i}zG=cfcTT2%
zU+L)D#XYAwMMno)cdlKJ3CV#U_nq}bB(x|O24oH`gj;;PEEAd5H!zz#rN)c4BV;a^
z(XuxeC=(dxcqz6qAoGze5rptY6)PHR>wx&{=j>iHeFs6sJ^##H)i*buB<%!$eY}ql
zGV=J^-dGZv{Yl?SWggS(m!8;Z6(T;ws(~3o9FjSG*qft-vSR_8D~xuvc06smDfUi(
zcQVkeLNY72MWITgNy;9j_E<dcIezSr)!QcjY7@M)il;QwDPhnHv0S4jRJ`19wsgz6
zFIUuy92ewhYtK@w)d4|<5F`ygP<1@$B)bj|`d;m?d;$G~l)e4IN!aq16&@?Y<XIAv
z*q7jEsOK1pS;gMLdVE@2%B4*KxXbpH>Rw3}L47*}i2vuE<Xc3nIR!iLud=U2q>t=R
zlhtJ{*5jX^0bLD%hB5GbSa=%jabFuplEO*E1{GBRm(Yx91YAw@zY_{+2NFSy<kljj
z`lfZ*!HvsqZ27|x4EUer41<r1uYY528cMeP3Zmz!n)A767kMT9&F_2gId{_&qet*J
zh%F>hQpH&QxM)k1!{ucOqf^aY+7<f-<|RuFkUbz{)gvftM!}|WX^U9u!~{=Y*N9Ht
z<Ou^q^;ud>SZ$zmd2F0-^DskV*xOO;8j(UlH3A@hAHfau8%zkYJaJK89xuLJ-e3UL
z)kU(i8b4<*=iv1v4+_H|S9hu|9SAB|=H~gurPP{;O@_qsN6-J~31Cdn*$tn?eo8G*
z+pVn4iIfV{Ob=}1SAKt|`&~8oOa`TL4tC$|Nn7`jJrX^__qpSK-vD~rLoC5olo`|p
zpg;mYAk~a+PXsNI7m~v+=qt{3+d1i>ur*&3TMOq9BN-(`GetE%wl+)@@2ljz>3g>I
z3&)uX!!3nIjLVwZwOr*m`2Vx_hd35I+Z3|vRqP!NfoGA_p)huxDpCg4CZMnUaMe`>
zX*naFYCQO-jLzD&*`sOhlx47$e?ta9O<b@zCFRI{Id66Ms*FonyUMB4%9kw>XyW9L
zeF#*4{1SuqKNHv`@nk&LwK?eKD7XY<xk4>I@JcDeK3oVCz{A=JeETEFs4MrE`?XRU
zAYrDn3$pmiAJRBFeGKX)Xougq4ig0x6_)-qM>$n_hMk!cyQ?apkF@$168L_ic<KEU
zUM9*rB)vi)PtO&!LzLP0fn^|*Q=2~=V28M&b?wz%N#p?mj2`zeYvvnbI#T~sTK!p_
zEb3_c1K!HcJ+mg!90SHr0?7h{rl>gea=g!w2|`-3eo6xc6RJR`u39aTG)UM@ReYw$
z_zgq?x_w&&VQ*_rh7cv8KOnCF{7P@JKl`duOQ4KNm5x#zD0Zojbf=eI0b+RqUm;`j
zOj?Sjudc&E+{*{6yA2;hYq_qtgUSDA)d2?~g$)GHRDI9N`hmKyt-?+Pne=F>F<Qmo
zF9CI&Ky5B?x1{^Qdy=&zE^Kf9Gw7AQY?3*GUms!TBRYdRVIP2XI4J&n>g=HvJ2$h=
zqLZhT=pGlzv|$g!n^u8tmkIF;^6776U_1O~N26Dk2dvj8)eUEKIOuMF34%3ge+CQ2
z1RS!D&@{4%%{4NgQBzxQkJuT9sw(!@Izyt8Rd4xVwg520$Y`+1krzUyIJge(dY;rG
zr4hE~Xg&OD(RUVF0j=VH4>_O>QEX8(W8_(C0HnpC9aWuzTtE|u4XLb(;;0246;TpT
z(FHb?iYVg5xdLvqT;!%Lga5>K;o=4ZO`0*mivyfdYBdINaX6dn3`xV|AwAnba~2^j
zly09du|;^j%+@9zL7JyQaRE18m1{OA#Y%O60Txn&mI$i-QeZ>`R_zq%>HJ#JK2f(Z
zvT(abPAWJ*wUj%`EZ3?CzX;kqC?H%2P4Z*oKqoj;yF8$Py!M2Xe%=Z#8Riqgf2~&C
zpM)OuLxjJO?UdpNKpa%<b@fUhKvTk<b2BK?XKd}<q$L)3iu~|F_k<fWF8}(W8?pai
z!vX^o14Y~GBWf>mU#6KAeUx234#+g}=$dDjmut9w3XH28x!V4`xHf81Nw#)~Q42$C
z87<BCqA4212U;(0<Oj1*1axldqyT=%iU02PV9E{%n5qlBrl^@e(qQm(>iF=Q6R7#m
z6+pOwfYm^iRKZ^xLqdyFJQLt!rrhJwN|}|FZLO7<!+ZX_Qf<Oelm6DUX+`on>_wVD
za_J8za%x8*U>gUd2zdg5tYdXz!?mYrYqr;5iw7632|u9~&r8Ao>*-2nodi1GxSaIM
zPE>Vizi<NBsjW7*F=+EA-)O98bwMDf{z_0!U2s($p{Xx0n%QnGsxunJ_i<!UX{6D*
zhVf@$w(=;-w=?RWCLPiTebz5cx~crg#!oF;Qc{rRD^!5Y?v(KyWpt~LK%~9UZR<x*
z;+br7GoKo(f!=@5)l0Bel_jO%oavUTfqZhb6jb#K@LJ^PBEPXKq*_|F%g-~dvP3z&
zR(QF0N_TdEQ_hZeWiaq}u>dN+^s-e>Ms8gOlE`t*q08#ctLrJuE8WEi)c)f7t}~Th
z1CN>YK=RZPshfsn2(tMoNItuAY7Yv8POd>e{GsOC{_ev^w1bS}iw1P$Ry$%O60;rF
zw_gB~p)0-O@v)z>1Oo(+({Ny;SiXcukWYAplZ(Vh&z)h=&#Qb;z;6rs%QXOX;i3@7
zF%p}nZho?XR7D>{&5gTj@R_sL9AgqRftYGTA*)o^thMO#KJ53h9>f{&F<YhjI`*F3
z6)&vu-;u$9Xei6K_n(H!-XYEL*-pv|&~khfXm((cmkVqX9YVZwq=d+3&GiyVCko*=
z=V3bq%wv9YwONCJ0SyAQ;}lT0j1Wa_2Cxz^zQ1uE(<=G*kr5QGJG7af;#+!qC{p}+
zx82z{qvC|#dOW!cll8k~4@9m6v>=*lN{2s!Q3+`cKKus~g#VF|)$9TuyxyHflj)PN
zb<#lYC3i8j$<#|4kV}5pIiMi_S@X78kd`jWalewBYA4_T=OyZY{I-D}sJ3e)rDNCT
zK$n!CnkB>5z(ewSTzXxXl#1)AZwvMCNB?xtLy|j#m%OCQWjH3wxDf;$FrQmcA)Qk#
zItUt*PytSA(PVAa(Cej~O4(xDkB%~(S7EG){p;gRFGCAv47^XFy5Q=}DuZ;3&BGJ&
zm?2!`AHJ~=uS0|X*o*9sKKWwq6y|HW&eznrxl|+040sT**b~G%Wh^^1;jZmj{*lc)
z7qSTf__Mf<JLBFVw_sYas}p7A4(Y#31ti7@Q-AdHb{XHsW$U-Dg_(_}oNPdlAD@E*
zgx~K^BXdf;FKw4$P)e^2=NyJF?8BiHTT4BT59MS%Tl?b$gkVx2HK%#<F~fMx<nz7X
z7>!I$w@6CI^AA8{hiZ5e_G{l>GsV|>NpqS;dMrY=eTsz;Yla~d<8F)A<yU`?)k`*C
z+*;bv_KqhG;BMEmzG&u{SAj9Pj$q{MApd54P{NB}X$Zv`vp0bsGATE8fqTBBk-jBf
z3Bcz39TC8;OaAVSV0gZ84aD_{n^TF`!r*QlH8`NzrXUP#P@i~5!ix;D{J9_=QRKqt
z+gKX}?SgA87%EHvLBM|m%!HpGRvgsp0rKvWhIfd74wl5ZLBU)63hfScFfzeSpwf72
zCaa7Zl3ofVG2F665J{N!gmY=zfAnnK;)Ro=f}!gBf9xNm6S-vO6hl!%FWcm<H{T14
z%u3`70k&>2a`h>?(n61W(c1&{2rHK>pZ7k;Rb)%b`Z44wasMZ%3T6c*dA+00mAmHK
zA;~<gsf5-B6mtXDGL3qUw0;sXXy5&QEJl8wj&eWkB6md$CAA@78Gz42rPl2SI0_(u
zA#ZUWXTx6{>g^etCTCFgMoA{w$w?zYlfdF9Jf-$M&QqA}GDZG=eHYJ<pPecXd7>nI
zesJYPAbMEyr#~JvzVp?hDR)0XFv+FWI;fM0f&~UbvB?1J);*o;Mi!whM*-DfT@%;a
zXqj*7^qD__@Zj$}(4c5NH$Fj}<ntORzCZ;DyOeyoRS0(<NqC_f?^@)`duz6c3oV8d
zMmbfc><9tgS(pM4BSC!I*&m1F0s=}8L^S#`>rH|gwF@j?hFaKV{e*wUcVodUnZxCB
zcC)fXReR~ZN_>le`|jP5D|YAKRRCODgbyuvRY32IS^Gi?sJ5AHH)+_9MPRo^1sXQZ
zw7>RV9o-<M5MOn8_oXe3zoHXq=O3xhAL}aAf&)(h6wrPxt73Y??O$a)AnwAbZ)apz
zlDtRkQGe^^DVdo$fyRVjbcHkb>ORbWkmxQg!0^$W5d!AyBl-&(;My)2UpsIeO$I9)
zfT<&?Wdn6QjzA(W&g|yVjP-H=diS`GXv@h_69St_yL78q`Id)plZyB+JOx-<Ly+cz
zBUT6P?MDnsLU&X=ukTJgNf_GB3pO$`!DD0+g1snGNF|gtZ`E{WMBp&<4<=BHXqN6-
za93aT&_Yg1-^mdC9hk2c?V+#>;}OF*H@V@TQu5MYteIa60Sx!nlh0(7@VqyOJuVF)
z3LGxi`W0a2xDHRjwGGlUZ|um&<6!}mnle;>U;*y50T|;Tq0T^DlaLLd-h8Iw3(Uqq
znus;`Ym;lLvi|0!m?xSje7+6mdi14Mp8@jpVJgvi<X3eFYSqQHAj%`${ohUzB5#?g
zm}H!lYrA&THyw>zUfJwDF&pVcU;`JHLc*5cE=K!fYSg|@E8kV9JpgLsJnsd^M=K-f
zGYL*Tu_gYy=t4l61zNdwltvOZStt?Yia+paw<nUrxH741@{ngbgb8R5dz1t8sGxrh
zn&u0R_T*}?<<o!z<<S7`OH~&IkO8(224n>aRc=3KbLl>&C!`o^G}u?`edUb_c>RKV
z$azkH&l_a=ciY*qMP^p}q{!7ptQ1q;4r1L^z6xzDe{CCZeh#ID5~ZW61X{Z^u6PB2
zibcTae-2xhr!2-T%lN>;dh)5i;Z2(`8SOLPy3wG;RSk2Q%<sPh^RwqQ*vjxLq4@dV
zk63_D0xQ?T&u@|XH@%V6)UP>d2aFG-WREN{LxP9vEDn*8Cpo^XOuzzS)Mb?b*w?wV
zH>EE&ECssC{IGwYa6iVA!n8iMhQgAeD9|~Bw80OWbj8+;H^~G_^_1vvnRMK4Ri{u+
zsK#PbFfuZcp@T4!QX?m7Ji^KO{aqeZQAcF_#(2MfC(F(5BEDB_{|_ArjFlh+CP{jz
z`@K)j_(PcUlgv<YdLpsX*StZ4nF+o5zj4Q<#3H;Jn^)u}fAzK~Z`xdgnH_$2-O+j4
zp7Nny{k0n{@bD7dk<=66VLUKmh<<W%=Y@%%3}V2_@-02*kt@Wf<Zy%Eui=2j<7N%G
zPvu4Qk~9TmK#m4LIsoYND-ZLomBJIr&hzmkqQC<7yJGWZ*ZIsi5-)je2O9vjy5B4i
zbt^3JsHxkpcoB>dX@`e$g=DN>U*$&xrZGK?${;aTzLF~){0bB?tUZVk|22ou^UQ*M
zNFcH7Fg><y=AD_wV+#7Zrm}^Wr+Ds)+KC}!Fs{7mClA3p0@bH!tJO`I4X+6?{&!C}
zV*lRNN<A<e;Xw{qzkV%3Y`&a8J!)Ebx*G6aKi{DLH$3950&o9$r06Z%CbGdnG^Uow
zD;c;Z9w1W`)S85F1PszB9*S*GJB??6y~-kD(D9Hg_Wb{~ccqU|wQXEd(qc(u9fS}O
zD$CfCnk*@@FOSI#lZdQ?v7}Ozec$yokv&_?SjJOX#-2oku?#aF%V6wGGw<PjpXxt&
zzdYyDeZJiHxv%SY|9;mw_kCSQMsP^FGCnka%f{C<C<~%y9j_(KZjEE&cQX>uodfU8
z`Uiuv@6So3f_3uk#X9t@YHmLv_L|jSf|lw&InO=y6KOyrEn0`v8tX+LJMYGa?aG~9
zeS7nD=jrY@;R|u$$F1qo{IG`NQ2d?1WgzwSP*<Iy<D-|MwD7DRJN5Ep!&iHSr+@XP
z69I@SIJ~4#dzxvjJ1D#mSC+u%vCfj~0HomxRR$eUny|V`=0`o33kH2ATrq2Z-&flg
z=f9UT$Nx}<6DVQ}{K*|49#_6YetRepeZd9~301c?r6*RM3C^`lUvSM+x;j{ib@7o&
zJ)fl}+44<>@1<y%vCEOW;`qpCewUv{nVH|7PJCHecwzSt@38Qd3Qr&{bD!q-HE!t4
zU-5I9z}Z8qCg>O}rz!7Ndfco`s=Q%@gwz?EF_E_qV@K3F-T7HjHyY77(P9TOUtPxa
z#>NFh!GP|t`OCBaz6JS6=K`Bu$Sna#@_6qRy!JH0G`ID5x|l1FJzMv*3f^tJ9$;`m
z@}nJ00w}%NN)R*T^y6TW)0RfaJ93l?oh$i%rCJ<XRHFDItbc!%!uO6(DOLaX&GGmR
zXg3Eb@dlk=R>}eKDPlbEX%)sN!tC~&*C#~~mnL)_uf7p8ZjwDArnGAgvkaZM)@f$V
z`@N-aRt?@6qOjbq`g?c_L<th*TV?PJHKKcrS(A3$)s%sct?_DZLX*%qH5cxy(wzAl
z5S=2f_lu37Y@(0%X|;n+qngV4lBoxVb<4`My@pr0fXp__mfyA^0nf99>9ppn!FjZu
zo|kxdcZ{)wD)*#yZLkljrFe@5>Sj4qMKs02G;Xl8p4##xWxR`rvdY=^fUlf9(7%Tp
z;FAHMGj0W*VtZZ!N*{EgQn_1xWJuPXzkQR_x@P%fz#YxLxjRxjMsJ*6UAy*N+Wm5n
zS?#*Nl0&vTg=AEJz<{Ge@|a>XgCPicI&Eq~S($zHXuo>yKfnYkcejXjItD*_a+q}3
zrawx*JqOCk2VpijN~nmzUGc*u@FT$m9{1iv)l=)Hn6NB}v1_LSmnqEquPFaO=g85p
zs1t_xlMF+4X6%!7_NMq5HeegCm7w?}zlt8l8_4_xXVSUBp1y5xI3((JVB7$E!rv7+
zXKTA2C3~x`ot!$lALt0|#cd}nyY^i}5-q>qpL|LR{k5eu?9BCP$1iW`j19^rq-<V}
zX&Hq;HqNh?WvkM81`0<9O~u$<bf>O!vhY;Da0$0Dp@wsa_H}$Vh)BcGxFTg=6opLQ
z5oS5HQY!5p&UB6QX`QQz%gJ-*ul+Jol2mK@*IQkedOK0h8m`|Wk%+~}#;V<@i|R<q
zDAv12Ii=Eru$ogPBL#o(QgcKFF@X1lr4#rz&&@j(vdEavYO8x|88-%K$@g^me)*K@
z-Twit*to2M71{aQSZhLnndJzlsLms%1I)G8UK!!PS1fWUll;#liZ_*;iF|L5Z^Wv5
zSW6a{WXyQ3GUrVY-(tt0k!l^Qqv58#6<z4E-f52wq@txrH21AgWO{Mq&AqPn`<&P~
zN~2EhqMN3{Q&ro@g$dJaEEpDDX<*Tgbi+UPiKVc0_0+BkCwiWfa=7W6uv9R=geciE
z>gv_tmcmi{DeJA-z_UF>vCzg#Mu-$!Hcrv<Iu^=qRkotW@^(b)hZ4R3hH17es(6W@
zE+B$ua_X(=u5g*Hlcmf1X8JM+*jfd9<HtsqxzBW#1r3}kzSX9CR`(3I81YsUhQf8=
zfAeNJvX-I4!=W7@y0gRX)TUiwM`mT+$xwtuYErPSW{=@&<*oz;S^Gvm=SqHLk~tDV
zK3#^Lvj1by*BUfGZ1h+tdOKG$bA-dM(r&PR6fg6eN%bc_Xpeyo3Noad8mGZp7&8Tf
z$u>%<csHB1lj-2>=Vy8Hn*?8$ju-Wk8~&GGYW)#9|B(s~PTEcS7+Zjghd^Kpg~V^z
z_x*rHXY~(oR|HZK{Vu=&4G8Awq0p^6)_!y;?7N+?yp)v(o6ucS^h#J(ocZIV#mwg;
zZ{L4AVrPGdYI9gTF;%?_QC$O~ITI-9e1Z(WW^dv1slMIcQ2Iap1@&dq2-?C$fpKXJ
z;*U*b%21^pxy(2&DbiZ}q{NbFvG+)<%Gvx3?stE5OW@PnUoK%tJ5pZrAJlO<sBl`a
zdq55w7ss#3YbxAsp(|*nWb%ZFL8ygMnkn`>MQ-UhL|ck;4|-bboa`EIUi&dtj(Ts2
zYVty>$3YH!)NlEoyQWp@$5^``29pq0M|m-wSCB(S&2xPs#<c(dmUE72EH~%y32hN+
zIVD1cem>OT%)_iUvQAEp)4|9XJ%&2rW4W7x{|?Penai|>>2J)@Hz(}BF$V0m?>kdO
zrdr<7N`h?+f6e+P+k#fLA_cTHRxsB)gV7pv$%l>H<9!MrHL>XUp3^q3xPiHtsR%J{
z2t@NE?V=c&7|#Bx)ojKpe(Y$~(H|bG0T*LL0`gWl>Jt8e{v(}Owgtv2>UAIT!m-cV
zso|nX<d@ya5A+tE!12^#=M!t^!Lh}OBOB9~EFEKCb_?%0ez9b-04!o?ANzK<ui!0?
z3+4bG*=Dr|927=4b%Co`B~+#Htj?pqO1XzNx1J4EldIJDWe+Cpz=r)!JxJ1xFU@@B
z*p@Om6ff(v*fkelDlUk2dw>}PDSNN3I9p_<O58wE&D&)Ec(2&eVQId;l+Lnk(bc9x
zZ0^@~Ys!<{=YYM1TQ1MCA+iHCI~W>wh%J^p-n!|hPAZ1QX7i&Kte#Xr3ROMYgi0eV
z?_^tM*NSx}SaV5v%@o71miP))Pq>ByvfSbB?qQqXfFQs8`9s*O$Pb^d!MVMWSDKR1
ze=ouHB#S)}Whv%U(UqnaE=vN!9YGLuV(jMEOHPKXDpf=1<avAp1cYpuGDp2BJ>Sa^
zk5(Qx`Ef@mbdGhgwi<X+D-LE?1wkAr<PuB*u*>2}X;kqhN66X4Gfk<z<6Z7Pr`}Z8
z+tzRor+m;)PaDX2_1?E1N+?pHdz(>tJ;*7KC1+JrQ8}qhZ;Wv2$h&o#%{(>hu}W;z
z(ySm~xqRaIRG#>03;%<u-2WxWy&*H1V>JRiEQ+;r!bK%FFdlhN<PM2C4U{-9n4FZf
z7Oiw5LN8hb+`TdUg+}{oq)f7k0xOYJGglzq0s{tObLv1v2D+Lf-O8vt82ra}v5H0D
zv2VY1pUAw+{vbM@-g^-iQ%Co26+S4-k7!3GwOhSZgpf2l;H6%;(;&%l&%1$_&nk_t
zSddh|hm**Jo+0A(!?)XR0gDqL7(JRRZKAMU5F6bKa2)jfk+s%Pw!z2MihFmZY)PU{
zn5BOHESjH|cFw2z)$7lOa(TpUpQ$wCKR@FW7Qp+7j!^4_5Sb&wgbujAwPS7i7RE<y
zTk%q38cTYYx2*MpO<|CwWmxmaimjg1CPs{F)=vwG>P(Oif#|@$FVJ*&jz(NX+dBk!
zZS}Mdy~yn?Ax6z+1tPm4-6qM-|GoURO=3^e7B$&vHzr{rtqb1P+#*|XJ>AEAD()qJ
ztk2|%*H?ZIy>+*!XmSd<*LNo0em2$iCu?(BWixYVctVc5Z)GoxN_q2sk@C{*vsd}j
zN0*}wDQRH%yyZx0@@;~WAZ&8|v!ozkV2tTPUzDa2Z+e4j=5~x=hSxxTdguLkMi)lh
zvN5BZ2g#t$YzXdQw*(2W?ci<`6H!X%k&Yz`Xz3+{GA!cD2x}OFVZ$fsG-5sa{BiL1
z&Q0uT6zcWhgidG@G+%DpmN|tgmx#4#E3IjI*H@z6Ui(@O4NmMG9@Tp2Tqe{@_Qc7P
z6>??G$uo@!oHFG4je>c*$s+Z55Yf7u(Qq!Vti6uwe-irWuRxxm;CryqF@|6tUf(*t
zcx|vkAyLA9gyT)KfaC_Bz-%WUn(Ie!XEP|^ri{Nw%W27;do8?+HO)ecL+EO!GZvO2
zzD6@!O_}Vlit-Df;Qrn=ByK0MEaZ76*H52WIRIk9n7+#IA%xfa1RK^$__Sox()y4D
zzRp@D3McBc3YP{!WUhOV)eKPU^L`X`mTW+bUyzBHz#`Fggi83@<)*yU_dd6bAN5tC
zSvPq*W@o!ViY{qPTi5$WS-QTra;`F;bu9f;r2qCF#oTAv2=<hC22oPA-Wn(nh`s)`
zDPcIWyEs2|=^CWtK0r^Vheaii@OSFr{e`qmEgI&gy2>_R6Dhys>ecf@Aa#tSfUQBp
zimNr#$~|74po>yxPi!tnq|60cWVMBox0DF@G;vZJY@zL)9*syd6`_Luu`EE<Dq;XH
zO%_}Zz1XP@dO!ltIpc^inHZQtP<4slx`FHl-tPGj`gDkLu!Ihjhb=AQ{fm&}_F@3l
z2=Lx({`7pQJAumTZ8`|?%9;rXwMbZ)?N<Ee<gt2(KO#tBq#~_X2kyAjvX%SJc$4J6
zmhn>@{<7hcE?&nmKAET}k)$gi#4u-D^ZG#Nr@j;p)0TOD1*a}9?Jjz#LMPaZI?#N~
z+EZ&lnfTe{7o)n~dG!L4Lu;{`MO`Qgk5Vg&h2Oo=9<Z>`KADoOSu_VHfh#|2cnh2J
z24`ul>Nf1G8)~Y7viH>E9OnftS037tI)LxPd}YfShUv!(y=3FV8(o(FEIGS<oBn6+
z11<6E?r6ipi=pS67-kzYaQXYb=Tb+yb>Q;cV$q47Q=JHR*m%&T-)t$%Glab7>K4`5
zH`|+rCX7UB7P*Q0k;m!vN-GyIUu+4Z>(-+th$yc0!l+1N=Sm`+Vw<K2X%*#GetRll
zG^^~^FBZhiFmH+wxUPDRJI0`kHsnE&OM#uc-ZRHK=Pa~)QYAO=h*r>yzt+gGn}fR7
zPDftMUI_b25CE9()jrMro85hCSX)nidZW+|_<p$^bsuq9-l=`OFH7`NMw_I+Oq-fZ
z@m%k>Xd~#_`|lb(iRq*GqUaq{kiCsYjI{YQnHq5U-GlctzG!vf{`58fl~85riblwe
z|8M*w!rZhL4u(M=S{`>BO4ff7<UDHP7(<m)gix*}kT1{7?~y+~uZD`@K~+D^UtLd5
zLk9?*Ryy4751X{(^?@%a<}T8PXLB`$0kN;wf=2&}Ab_*lwndgmI8GcEov?II3(&rS
zQVbx9Ls{f^?MNUxnTjpSUWx#QAe$f-OsF7}?@?fb5VSB#FH%$Ku!~+g)c0I#3<5{Q
zVl_5?uJwN#doj+>VCUb)zt;GT#{N&(DB%iYux2_jMHx^Ji8BG0{xxI0GF|B7{{Zbm
BvNr$#

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/microservice-import.png b/assets/documentation/1.27.0-rc1/images/microservice-import.png
new file mode 100644
index 0000000000000000000000000000000000000000..fbdaae5432657df81e8db27fafae03c30fff656b
GIT binary patch
literal 66198
zcmZsDWk4N4vMvyU1b26W1$X!05Zql3?(PnO;O-vW-Q77raCdiidnbEk-`-u$kD2M|
zY47T<s=gvjUQQh03+@*%Ffas32~kBbuup+tVBiukP@t4!%5Mdr3%H}AxG-4d1pX1|
zLEc1N5+ExJMgzKs0fPWX1^e_j3+M+HY7PeZk9#mM3eXi)R1Ww*-{wI4&)ZLdIiLRL
z9$eyY#w(XqMo=Ld=E~|$>asH2Mz+@U2FA9ACiHIBc7HQ~@w#z?Zmmt642a#Vt!x~*
z-S|lVk%Jp_|2LU|l=vT6oGkfB)n(<0MQj~Rh}r2G=^07+zYr4>^Ewy<xD`dk{`+&#
z6CbIWlan1c1B0upE4?cVy{&^O0}~e)7Xu?R12Z!nC<mRRyN#298=Z|K*?$%CKjny;
zI2t*a+c}xr+7SOO*TB%$*@=&o^lwG~`}be%bTSA0vnCtI|Lzv3gA9M)Ffh?GGW>7Z
zpig=KrgHyqFgF3!{I`65Cf<MK{Fk)<u7{W5Z{`1AWB#kB|40ROmH!Jb!~YH&{}&wH
zEod+>K`=>CA!Rr4Qypl1<)H??oORD+`QI?27vtzg+V-D@I{L$mC|$NulNTo@e_RtZ
z?NUbVa7MkjYTH9&b)y>zD*Fo(!_InM=m<}DxvI96tCoeUwtZXcx$b0UvE6S^bv>A{
z-r=SeiX$e5fq@9{`<F|1im?7`%5jC0Dl#%8B)E{^zg|d)fjRJy|2GwsXOI}87e1;d
znO+C;KYW%Vg!AeDRP?vn2qDNI9Q;5AomSd^Z;2mcAT!jzw*VPC5N1(RBs)GX?sC%i
z9c^bYvQNi#Ett!3AKThRNeOM;Z3n^52MY^}_hHqsx~`5TZDDc1`{mx?<^Jq=-nwZm
zWO!J@Xi4l;)60vu^X0tl#%3}Mjq>v8AludQfxvau|MK$EW}%*v$mfw{d1b}^W}L&4
zp=2W}3eoHJYG|>+GP%{a4}oK|7mndHDf9=s&FW9<mByZ)9`LTm0R~3v<$6N*-GF}?
z)xVuh!2<tf3RPBGdfB$|hG^UQM3Iq^ak&|Yw0$7(!36-OOd+(Cm(%iIc7Jkv+zPed
z@P5dxthAAjAXXc64hag<pDC0bo|s_gVd3<Cc7lY4HoDm#-+V_%<TBakq@aM3PNttT
zz(hwc;F%ZTblitep{^_`IqHFD79qsN4flOJ(c|>IFYiqoJ7x*;eV)ngcJ8`gwmc?a
zWO+>Ac!jdJw||a~HTt)yWn_WCtfF}CfhO7vqs;P4PR7C~Ah-fGS%Zn}xw)o4JXJL5
z3%y>a_L_sE<IE&;juAZ?3JSP@Ko|HPhjZbU)en9BoMXI)=#SI0vq<)jlA^3$qW4Sa
z#l^+j=8rMGchm)K$H=%pwf%QTMcIRt*<RCh*%cLZ=j}Igi9>5^1imjT8<!WpA8lHM
zTqysxwr<E6Pvd%~rxkhc7md^#t#BY9ATB`#1>iuc;{2Vj#9i5yvxEfn*F6Sbg(9GK
zHDnl0ENH%Ipkizj5)%AyaI77ioxj`L*W4?=oiEmWQqy(+>gDa-ro%BHX=FsE{;Z;|
z4g(O@*uMKCg5+$Jr9N;SjHTOMqEz%}b+vqXptNE^*OM+qXuIDcLC@>z^YZd?_w)}N
zfwDrxul79Z9;1tlA%mz*N0(cDW@cvHt1XTO5gPCJE4DRuTf%Oho_J+>Lu{%BnOu&5
zrjyt6J2ZhGE2eKJ4*$L-0Ae{aqG7YJJdzHxk}^L%gnfK`4lvZTr!+J)N+ui~9eJv{
z-k;?Z#gz~Gk)1*NATrZ<Y`)_AhS!ZOWy#m$N))s?NuYtLwROcgE>leA(a}-ntF&T?
zT%5kMgSUw6Mc0SV!9*sHC;CCBU3xSjUul~-dq}47P%+QJC&kFq*Y}qT=Y{L*Yi=VW
zBOVrJW~T+YZ2mP#_NdmIjraSe%%LcPnamTS7^nJpY~45MwWt=K+M-kPkk<H=Nt=hq
zpjlm>s@CJu3D6M#zL`_gQ@If8Ldqy=XlQWk3qi;%cpoX^TMukqyz5HV^(b*1Ph-n$
z+VE*Re>>h-AVec8z9ik(@s#xW{C~w#w=gneY8ur_WDU99tJ^r)BId;iWp;ntMQ7Qf
zo}tv`Y2D;;fml{nmQ<_BFrJ>r(QgSkIn`;7B#)Zg<9RJx6;uvu-K5SMQH!}!6)BYj
zYp9Ek2i>zXgBO#Pj<Tvw+&a_A`MHsM2L%NM;(aL{qZNMD9_<>#V0xsLrMDfTkHbPA
zZu4pK>V&Iq|4+meD4?DBY2^grtNmMlyWzw6niPbk`cSL$Ndo%ydE135qT3=YQ19b;
z!Dgx18ziNEaKM^2!Fy0fobg<==UZ_$AiCb#l!+w4)YfHhe7rwM30t}8P5gVe+hO3_
z(ux~-POJMFYo3ed2P5VL5IQuNl}u<m9=Cr<u_bhb)gDtz7POWy*T!Q2C>rhqfMzwL
zRFWiZdn~FC`jx*63k~0%@A$%j*#bo6*Q2F5z&}hzrYX0X<<%BcD;xH{i{=PCmP=i}
zzDS{TA<nnXoeq1Woi?s*LygI=McFA_lq0nF=WAv3loS+(C-W7}pnC7>j-pbRe4qA`
z?Z@bv^v{+XT2H*XEvkSpwcKaBBk^r(@o4`hXR6^LWd`BTm+GMLkNx@lEM}7Ew7MhE
ziZto~{>s#etUo-vIH=J!7M2kTfB&Wy6Wi#4mEKZkF3f)Pv6WN2y+PPd>2R-2n2wn;
zSrMfBG#p_rEG(Qo*ZHvS89riYO1s>@7;{{9KfBvSM@P4o)e}J^S?0VTm&IFh3hj&)
zfzQZNmiTI6%Mw3{Dv`u{Ke%dnGg|fULL3P^z9cLpIGDOB?zBFrkG1{neuW0G?!2H=
z<na=p{R(N^SJ+E&`8LV_BEyw_1otH>dFVK2lJ`cY$qGMU>+x!b>f1M^g{2;N>6OLY
zaG%oRV)@cEV1b=kP!9!QU7auPl)(8rmsMX+AasrK2&!}BN^b-@%g^QhNyGi0D%uT_
z*^+=c#d{#vY(J{JudgqLN5Jo>=de_M)pQf{Om=&GL2nhc&I!fkpY%WSU&j_}>Q&O!
zF_L%KYoCkQ?O_nTL#m34B?d5z!*bu90jytP|1SdYGa+G&vc{5~Dj@oJ9CCYqIuM#r
zm)Fs$XqSsaL;H<e;!Vg!r|{tD;Lu%~xtsABNZxrjueD4&dO{JJtZ$n_o4UgpFvx3A
zi>2hyo0q~{nVdbY$o<w|1Fcr2TQORPuBcZ!VC}UVE3WJga8s`>Rw**}<i7to8ipg)
z7-&TCE7xc;{o`%p1HshPbS?k*<YbPmGQOjr)|wdFtn0LPOqmd{$Vox^5O!jasA_}t
zkdA*??4^A_B~GNWE_S!lr>oJzr(MN<b+f1&hr@YaUb?|B(FbG?-PI3?${sH*>3YAb
zYU_Zr)+w(XrODsh+mrg7uo1>yBTL#8`!!(IRTbQ1U;Bl((RWuK^;z9c0|5VV()BK_
z75Vz*-^S`QvA!ZeKDz`@LN68k2_y+%8c`C+{{xsI*5`(l$)k`mAn%^0Ns_=RrNeaz
zwgz$%1#8Ot@BBTFaRIT8|F$bY7|h>5On>ofAaJ#YE{9!#mz!3nRoQcS=K*w(Djvs`
z-w&_TYG5e;M=<ASj)Lt1_)|ZgxcqOz<1era`2-$c9EK>~SAh7RY6hSA3-^wy6Vv{~
z*VXDE>{h?1Muvd)Z-=r_w-XEuiy61oZ@_;jmlhM;0E+H@PNMHWpgTqa5RObk)GE>V
zSK#@Nr(fT@=V$50#>PY}ENH^R!{xQL;iE*{?oTz8Ra8p!lmzsSiMSvKBk`d1^z=Xg
zqkCgR?=2VvokkO=Qy2{(9y<$ag1e^@SY<MhAvmy1=dRQQo^X@(s*y?FJC9%YqS+1B
z!UtgBZsQ$=1utW+h;M{Cp|APSJ-Q(k4tp-A0~uV-`{FcaHZRUf=JDt%tnI3sl!lDn
zeESGZt1BuHDCIIh@*mpn_0hh$wUq`yOiK&z@9z%-0|N$~@^F0}P*E}BK2`JXBVPZJ
znVCt&z@R4MV{T6U$iM+=%|wQfh6WB`JS{jF4$JWVbg8<jiD;^Eq)!aWf5()0E|h(E
zL5uHlxP;{=B3wXnTROLGek3tZ>I2yg^Dgy2;dKu3Fax!SUv#n!!u9rx-sb+8THjEg
zH;|0g3aJ16`{&NLd#%&;4!o_cE%jEX63tsr4-3vqrs!L2=$y_@LReVX#V%g~W)_wj
zhdn86hmo(B_w$ShM)-tfXFik-?KLGh^m0+9NYtq<m-lu`MA~I%39Q=xoUK842y4@o
ztA_{vzQCr+(DBC_Qz6%NpuUO8*S}ENXei2HARME%n}|ip^pIfA2LJW44@te&7?#~?
zF^7Cuq)I_54GugBavvjcI~?N|a1PSF^8c5^2f>0yj&K<S1j+;rcag=`W};?(g9Ur-
zG>rkhA^@nRb6XHlUTk&#M&Ei!s%<}jVdpd}0bQQ6F)a!wn3J0ePUQQ_gh<Hy^Q5Xv
zR}zjcM`Jq32brp*7<EKX0DHvxpDXr|$iL3|%*=-W*XXpz>|A5_dJmL8389@s4Rkt@
zbG@q}Xr6anA<S$qaxDEK&)k^V>J%29eS0?@jj_<lx(e{e_WKb!t1*(WQCZaG<^4dQ
zMv@Dr1tcvKXOO?0wy`b=BkNO&RJC7!d3}Aotjm6bpP0ZkCBvNNH4h<#cs1}j`Bl+u
zbM~3Lh|!~IPyU}{4C(KK!s*%g38Np(=4qF_^XU;%>Wk%{bs-=jH!{IVbeT=s@ACuW
zL^4hw8lmn4XS)EwxNJpA6X%yQhA<I{W{#(vY8D)&;xkbf1K8fcPmG#t#E5A)#-QVJ
z!<UF-)h<xNp*~;KXA%!QiS?%0u&sCFb)N&~%NOno?%x4hB7WAN#81TS9_8cGB1ryB
zO@-CwapSM2M;4GhQGKiYj&}z60@bR&UMnFgdoN<|!=|Y@(aX_|KsR17EX5GqR)n?<
z2qs}3)Z<0L`=nZ_!3#lqCBd5#+UHpt6R+U^ybM^3oi$p{(5KZP2y9KGNJyORS((I`
zApa~WO_$eVkI5AO35A0NexedLk?q$-F{?Z>HaUcK#hC=ZYEW|adT_mQ6!V|T6hQza
z&y$|%LKU~EIkDaxWB4)R8dCKAz@)D?Q&Ls<?<b?ymT95M_s#UoW|whhPOg-5uD~EW
z^*W?*oY&p>AJw)S{JhVH`L*gq^9#g@<|vDGrbzsco1b`Z|A_ny3!BnS(qkc&SJ4WM
zZhG@;W7npK&&AmYWaDpbDM2WT!rX3Sh>J~#i6%9CcB>f^U7J{k0?)O%gmV&cHt8@#
z*5SjSeVdN6;N)H*vB(ohstOwjPL>HxZ;NLWCblNbhe^O%h_5Gu4fPoo6|<nm#np6z
z(?+rtZ-AX%Tnt!V7HdYHF}*Mg+!p@QGPjQSA?OO!MfP{b+cyv{AS&sL<O{_#a$1ZC
zv$>&=e2s!{e|*U-rYaMGW^#EgO6j%%=B%^v0p!PM6{#Pe+qP1%Y<n_3D@a*8$$*&!
z$RVcSc<n@TD5v=S1*&$gSRCaPZdi&YSP)@hVN%w&vEqb6PEPfkhTt%>u_O)bsyUxo
z#nbdZ!_3B?4dt$BJYIK*7Eoa1hADftUff%_`g&46vN!G^W9|i7R_giT+3F!`@!)+s
zY+<!8CyR;K^^ey3(cMX4UR-J=7^>(!BgOtq_@G%5nqEYfRGATxE#St~OX~HVn|~g9
zj_OF@%8Bz;1T)KhS4&xCHb0(Kob@B6;Uq`bVm~y5#%T&_fa-V#w!?_VaVDCfJF`pu
z(+5~IiqKI<mFwpA*PG1~Hs(pZFuA4IEJa@=kB2qa*u=zO$}BesdV2adljN6xZg-OI
zD=HBYkwl&23@*pb{lYK>SKUOZEg>>_U6oG<l`$x&Db9Z`Baa{uoas0py(#!T-e44?
z<BzpYG<tXNrw)uXKOa^W^R#AeRC+mOpNU(P;>jz`{9J67k4uRl+~z5S9;Q0?5|U$E
z_hBLwu;P-PU`%V9U2&5+VX$g&^!Gs+<ZH$3A1|QKOx6miw$lp|f9mTI3NVV^Hedm?
z&Z}<(e6)OgOF*B!je)Yj78+lbXAL+CN)kGiqifBq!9AG9sJXnyNo^n<qPflQzRMqR
zD%4vG1Zjx4BO@bjr!_-|My%Y<CPP5l`n)Iyzh^w#c9coJ2Yg&Syo%zz{QQ!;NZCiP
z1O8|An<4c$Vn#d2MKMOc7G+7unYdqJxkg&Z??p>@1hhS-4K2L^U+|Z+*)PQ;<b=B6
zVX8$UeysBbc(2S%%?`(1I_~I>gWvJZ0inh}5ZFcCvWl5s*Uk#KHIch06WK+BpwhOS
zN6BRUz$||ypwC+z3NO6=84s?k**Md-<)<2~*2<Fm%EUljNt%Acj#fYKmI#E8q7aMm
zT%u$dmLX;dL=t$dc5`Fpr`RopMN#kc;!<aRT(+!Ay`)xbV1m@n%(Pp09%Ib%=8{H*
zgz^`(R*82=ixox{`c23I580L5iIZynJ<u%J7z0v_5PThSsg6$8ooALgU^$r1-hGyM
zJXLi$*H@O3>vS}KWGM_D_aPEtoNNQfJ&#x)0#e;!eO=CFC&WpJ<2=$T=CI&+`N>hv
z5F7vacWhd^!A5It2@ZpAz2p=Znjl-A%Ka$({M_7D_QxybIY`F@>HpDY`MU-Iewg4%
zh)GFF+b<Vg3%YT7Xr$djs!wEelE~OJ5Gojv!*bumEiG57k-fCqu104Jb#!Lr)5-TB
z{ZWL7zt+IqITzrTp61m5(mZ2eFuseLGgNn!EkZ4Fjl5{~<czJbhI7|6E@>qf>V8JK
zM6~PS499V^q5qSyX<s$i>Eh$0Gn35_0yI=hy)^TsZPEY2%PY=Lo(h*bwd(a0jQ*)c
zO?A{lSG|f)pQq=mbdvsZy}9ZPj``uCNcY49B1nTp;(tCQn_XCl?nKm7k8UL548Ls`
zhO<m$9ZEyiXH&rVHi~V};Zi{qaB*rCEvY1ejDBh&%P65WL<}*?*IC14<0eaI)c~gl
zc$uIJxx?v$(L59zgzWB7IQ=}dX@{Grqub7$CS1aaCNfN>Gj@9g|7QaF&C+85!5TPM
zek8aZ3$N{S#|s(yobs6gX<=$he1M9@?Rr<T0Hoi7ObY;TH9{JgLo#Gc%n%T`3J^(`
zV5Wmu&~1iCqYO&9CsBMU7V91x!ZC<l$Nmu|Fh}~p3+sb7K<u20t(dICW~;nIky+;h
zX=n<CvICfTXg+8Q=bF_zJjU!z!^uyKt7d(Tb9NL5O6T2mfgkz*CfnRQiSW#BM}8Nw
zscxXeG|uSZWz4|ys%$IFB+?wLL2Gc1<V=c@oJa#&s*T|tu{k3oA^KLGv5dmkqVFeZ
z*`S0nb@Wnjh~a{-r~HhL7B?~3lMv9%q68@xfr8zAW3Z0NAx6*b^2={$r0Y6u&1o!e
znH%(ZHVK=S4jk<4`6>92ZXVH51dBp~)EX7={wXEz&6lGk=wvgEzeskO%5|ELBc0dS
zS~rYNEpJ>&Ioi<W<nB=w2Sx||S(|Jjlggud;4ao9($6)^In>NnPg3~L@HrpKmNaK4
z^K+5#D-R#1WM<=r%pD8=fa#S*IWCgb_tzK=#UvyIY1wwDY%ixc8jsYqk?7mn{y5*W
zjERl)Kbk3WZKI?-i0<Y|?-Fsd1H&gco$O*RF_0l+%sLfX<;&b8I<15lt5X{|E)A(1
zsNrW45I<xy?)Wx{exUpdV%!^13@Fr;ZwSF;9xhQabh}x5IpK&8`~zdl*|t3M3`<2<
zIaMrUnJUm>?=AOzLZ9#uvp*Bv@4Y<k%iwrKPWNpT=DMeO)?Y!kI!u_P^1W*#t^Cvw
z0Y|9fK>mHN#aN_q$I5(>PStur+nh3brfgv%AiL{H7|9+e<jJ$*|4H9~%d_4KWZG$d
zJ}wJJsjtTRIu1_XvWtpw;sCOtkTwwRgV(rRX}h(yAUal%Y3V2^#4Znyj*ox-xY`%8
zwx(;zu)$dhiRdZfd)y365%BG-JfOEhOle|8<$tG_VvftyDD`<EeboG|7$q<~wCqT)
zq_yI=8_(7JTIx9YhtCS0XgG!AVl12092H)KEmX|SppW1N1^YNEA^yqCIv*MBbutD;
zS&c1Xv!!M|o{2XxK}60xO;p7Rxk__?fVi94em*4y`}Hc?_w*_ud|LDM;-X8{KneZ`
z!ZzVg&=e5w*;gV3$;WGw2A@AB<ieFa_5;R+V(@|O=4)4ujQi@I$6)HxCl9m=j*N0f
zcs&k4b#rsdtbI6>ZPp^-7Q4lv=M?7g`I(f4<_icTjE4L<MZo=z0CU?Q7u{3N-tPHe
zvuB+IE2OQRflG#^Z3o`o-oAN$PLBr-z%6P&8Oy@Bas0+6swKWUN$1u8xiP;EWq`sD
zlernFMCl-}sQ6og@8S!~h%K?oR5{SFA%~r#h6635b!aqYLCBy6+NF_QLYi7k3$NwR
zfv?4BHr|6*<PblDS)%4$ui0<Zv{Z%itKPCvvujfm%v>R1>D!k|6Wv?5*a73sr^}13
zb5UJ6uHe*7&idt+9>;*Fw*8QM4}zu7a@iP&F2zoyOmNP3xK#%hHVW_a^DfJ;*2Gn9
zXVonEPEk9|UA0%=Uak7}^nc{fC$usJwij!HEYVh0!`FIo#QOd)w3_uW(1`fR0K1fR
zSruzO&O%}a-E!*0<m8>YN&dcAGVz3k9cV%~u-Mqx`PpEFjrqKG3#&CJ2uf6kR?I$`
zRyNU%n9VxNbE@mK$9%2i?VHG#nxneFcKms|Jgt>w1r3F=?ItcRo(PZA2xs}hb|z)o
zn`L@M@12^BS)l*HB%M>kj$Ym3oOY9I^}sV878zLwOjTDq0>)nXNRGz7!+Ytm$Fj0{
z!FNaKit&h6_i7nrv0@cw1~HgJ125oF{P#y6ty&7gqILBHg&$}kS+m{~$}00)N_lXu
zZ-#ULV3?q!IR-AC2KS<grl4baYQRJtrKKZ9)Yxk`-9nlUHy1iQXjsIf2?y3(H~11f
z3L=OZNnxsI)B3XP7*D2<S4>0&Pj*O#6lXS1j{I@r^PY!IxSHIs>_MvBBgj;4KlL4J
z3uJZotGgK<!m7m=rLFrqE^E!{Lk{iPSQM8=KY+(de2yD1S)eC!3mOo4UEMM(_~fdz
za3YsXa#Mwd<4#R%v>Myo=HST4f&i95kVEPwiEGf)Qbj|Oj^F!%xRmBtVn?H`c<%ig
zDm2TQHu3}4@P1Uvl1f#Rw$YX=<oK97jw&mi<@H^InF^@y+Ha!kG}M<i!S0>mNAa9w
z*~E)ZKujTjQ}y!tM`}*M>j3%-!)_SSMhDdAr#%VYBsrQz)~Z%^t!c%ZYP%_8SuhWl
z0E3FOZ`^?D)>d2<6_wgHn?WJ+=yM`)H8nL5EcljQ{qyI~cQ}bCeiZc%eV6P9x+8$3
zWSHUm<D0<CX`KbWy5dU#-2pNcP4VECHxAXe5+<q3wu{%eeE2V=nLdTcdcN+EmJI2^
z4at+erg%H%P03jBGM7AIB~~iO`TU*d2ZXGn(Z)cn4Y>8D8&+nyWU55Avu)M4(t*kz
z;bbum=){f3b;3vJR;Bj(C*xA3uy)WHOnRWaFEyNQ^Ub<+apfe*Y91QM*r>igz!<>Q
ztCIPZF8XaFJJ*(HW!l9$&S@MWixRh_c|W~Mz;`iqS}*Gfe!-Y_umed~D6Y3-vE>b0
zJvafUH~IbQ>oV2knX4|mfWQq`oB`)psm1UTLbser`PZZNuv+Enh6apZSPYFxjnX_r
zR1hE+u&CK2DL1!A1S#Wvt2amwe|?(t9Ryj}l^5|SDT`{L0}^jjaGK(W9IlpLLWi%U
z(PCZS7c!eqW;bs!!P_~hXpCQa<@yJMdr}SIlGJ9YoQWy!X<_x#BdTG2F0WncP+3FP
zWpHjph9<PXYRI1bK4>ImXv?TqTf{6q(M!G!m~_G;@i6KtsK+%iY519nF4|Mqp#rSO
zRoqe&IyFCMMeRETIn26=ZR?grQ{mL!4o2Jmi1$55{h-9!szXAWrjYo?mIVk}Up-_O
zm|Z<G#B95+F*SD~Z?rTe4G?ZeLEim-Q>eML|BU*n+4e#*gEuu8EbZI-yDk9k&W?go
zkE!i_Jxlc_zzMk7>HX4;$XzItYRDFu91<l9Nkc;ulbs#CR97KhY7%BkbL9lp&bLat
zF7~+D6A1DOaa@8tSz(Ufr12%7tPL@yL_Arl-&V*S$~NR&Q#V;s1;iJf+q%Lxv)hJ_
z?YPjjDsppSb@?l$tP|#BmH^?dA<`qNL0>7O&^^b~v4x?bc>;@~qm*!N=AQ_qe_37)
zO1C96iLCXiMtbwlL^vAV_+$0AaG6l$)|?&h7qbhyP0Yq%>12tpvE4~&F3LG}&x|3^
z(?=Oi%LwlWJ5Rv9sa|Y&LwULsn&E$)!e00TF}}L_@sL5Z94Siob|^o6ds`1-9Ow8O
zP&<YIe?R!GY9so@R{M9#SchkPf=H^leJr461CBJ*YrY@m`eo_}9~~2u=77md0VIn@
zU>;vy$Vf<f;?m79tiRD#bk7#s{jxd96$!nZ;JMhm8X^)`S5Nugq=H){l+#*@^5l+T
zMt0Oedd}zK(+1OJ6TA9-7c^Dlvsr7BmzPee_WA0)h9dS*lyZnYUy~;(0X2{Ur~Gn=
zCKlCR12O~XQ52^pK&^`v8ENX{@YF(_nR@0qCjZu88!V;bmKpEUY^hN(O-+8uE^qVq
z7~|M|NS4rrje5no^o$J9;jPJN`)&+O!!Sw;u54M40>U|x2((X*kJHacw9l>nDVEi9
zdXmA2zae*zvmrqkuz@#J<6ra2b^O7Ag^^#~S|~Sg1y2Ep;gHBP3Sgq67fv)?;j?Vm
zz|-xAR!xt>*^NOJ5)%6K?Q07pI16bvP+tRQNm+uM0g_&;bF+Okz17acgL@t1Jv4xn
zMYv^L&{LcFx!r4_c|9$h48wuu!ht0I_}G%$UJf<43$bb!>m{cm(Z(5~7&$gfrF_gz
zU%<?5q>6st`obI+lYmyIQ93IY+HwS_k{fJa((7?&BW8)T{@k!d&I-3yED0{9sII78
zfm!($>1_kH0?&>%GgLZ-qVTTnyXNpEaVI<@164UjO=pE^|4L_nz#T#Q7fnXCme5Yx
zfy6=xEWz2L2R_HgBg7+go6*8OxdZ)-iLQPSig6*MhaoaoG)ZLatQf|Sqi}&hMg~6m
zO%W{1FsA3eZ0gf@I|nB)Y1j&qqm-V(L9uE_M9Ba@5Qg907Pc_1&q-jlKq)ROQ<^Y5
zZ#f_g3e{@7b(rl8B5{c@f=h~b6|JzKVhMab*f|J~fz_4ZN)$h~OXCc%Xi}r(0_l(h
z1yIMuhKRM|Q+as+?j{kl6rz&gWwH<#-zVGpub@5iA?7%u8iT`mwhtBU8P&w)XamVS
z^D8z>HK=Y>saR|xcf3dk`zFI6U8s^wAe)@(%$oJwJ5jUV*AHt6!9znpBJk87_)7=^
zu(jk^E0vg!b(V6#H9bEc_R)UF_kO^@LB_@vZ8*xFA9xUZo((Wk(4t`GMurua`zAn{
zLCMYzkDnK8?J^Y2AwV`<mD5?WR4Uwa7%<PsLM4Yo>xC(KgARd+h`6f}W5gthO9MeU
zQ<peYmYc-k+_IqOO8_Drd{rsdDD+8~6#&98vJ6i!)(54Bu|Y%bb6QlMN2xbEp<0~{
zTAt$>Kyr1}m3`_pZ&K@%x0uK`3NVWWPA5&Jf=-|h&vCLgfkx}O2yc);6x6gJk&-U0
zIo>`hSQj&}8@z%!7_eU07f%inbzB!JwGpzo5#jMQr1;zy%Pz#K=yEb-R?QdV&ZOQ?
z%i&AFh5n766t*R4Dxa%c&cLnQku&jl)I%m44G~)0@bs`0fOx4rML5H-hXix0d^}w)
zHI5fdNY1wLI7Q#!Z%Eyd&BTPdB?O){o#C^RYXs$PKmN<=9}5Dc%v8Aq(RO4eO?S?d
z70G{GME7(p_up%4dV3f>G(0`J7F^U>!?YoGowuGSvxq%EJ$rMAe^fj@0n1g?IOI32
z=vXBBvp!J357aF_KVkgL!v6^tj^!NH?MfFumnSH4oB6Z5&hv7#R1>!-bJS*ZZX7l&
z>?q_iBHXc$Nq~l%ZIF9v+Cg<`^cb@>E%t{|7lAn9Z>0!U2GJj1f)K2Os@1gDgp;v4
zJd6YqPCuWF_@gpJaWP2uD=9h-v)Jxni=cxBsa5wWHKCW@oRGy$XTzIdW}!qmFBAXl
z4_DNMJ>l8v;i$ApyZ7oWAkUEW$ZI6dTvTne+Iq!6IhG=<AeSV^2nxsPY}?LEMUvW5
zIH$fI9pv-x1G#E1K`3pf<shpM?FX+v$c91G^*Z;~eAc*PHzUhYqSra-`-A_9Jj?gp
zeeaLaN~1NW{Wc`sYpHnq3a^}dyA&=qL<Q_fv8M^yqgp!PM_8`@O`4na;JM|^)rG|R
z!RJ4o7agH1wq2R4!j|=m;@3~lZ}Ws>H=a>MbnLHX(Lant;J6@)=Q*e3e`$Lgt_#ud
z{^1OPwNsNe(M7fV+38{+=x#Mgy&vuB#kCrQwgeXv@=P;?tLNLG_c4{fy||b{gh7C3
zlu0#ORRDI4z%3aHAn~;Es>9Vfge2O7m+XVdYAecwKK;6|wx+=paQdB<nOWXl=XLvr
zZ#4c~JwSPX;LvkrC>lVmB~ZaC-$v4__fcY>yGu@+qFe%}BBKGoWc#>1kc6h!Y62@M
zX&LRKpNV%?qw6`EX_1hd5LRs*Y%BgsJcM`t5|z2)*A&ElHwTqDuCJH6n{`Ll9hVeO
z`D0tz;frjVajj9cf3h!Q2A|i~<~iKUFcl<sbN7V*tU47}v)i9MpxBXh6YFfT<yl1}
z_Qt$lX{!TzAt0asol)x7_3-@cXAq<|z<ra=<|mk#NaI!}dCFcwsm|uXuz7fed9|d~
zn10h~bD_rTSzJ`tQKBpHZWTKska(GhtjY`bsBYq<*k-ZTV(hEL7+SHiFCRyYDtJai
z-523$tE>-G-WY(iIE8ioWwg9|b!kU}F$IQ>UL9YI7>>2)&*ez5^`awAy|4f43-jqd
zyGJL};9&duWt_-2q0QMa?ScNQ#iBK-hVk6DuBxs!2ag)>lNv{h0v-2>0fJLvO3B#b
z;__Ts<Vc+U@0JGvnN$S4DG_&g^u+s&!&WsjV$W>D?bzo1vLEelo=WD9`D0_O<7jLG
zvx7dATrnEoafRlFC+Jo2h|^l~vx`IqmNM9Qa2Y;s;NlWE^zYJ^MpZ9wQ?<X!3V58t
zW74ICbPGz`Ei+estB*UfCy1hiVd2E5(ljFgQB@W@UZ79c>yjzt2wuqwyO#t|S*mnD
zQ8xMG<gthx?p9{1>vRdlZ%xe|U_Vz>(TbUvLv^m!!c}$NbMH@N2F{hKN&=<eaIo%g
z3jIHBXQBd!sy()>s!JMbUY^~>kA1|&p*!6V*;ZXQyq}|+Qtq8C6V^v0w(=i_Z9<c7
zU#CBrk4i#a98XkR_E=9KJa&nh;#=3{68Gq))Dh!0?1Dg=N5ZaX8*z>acrkovObYUO
zXi8Ym<7UU1okQc$tohdEy>s6dS;^&<{ZJ~4`)y?ED#9mAJ_V!qbX$)IcgwR$b(;qR
z+?NXL`adeav?>a;>I!rmuVj|tYslI(RO2mKxbJne32F@IWWE%8E7LiV<v}2G@Ilyi
zyj3h?OUg|QM&L}<YcM|(yp6PDd$Uk;6yZ}--cT8TiS&J67=XMM+bmc_rq$&Btmkc?
z^G&R1{gtG(`)O$k7}-=lsFuDnvSLH+^^@ZDaYDLV@us~U^=qtv+a<b9`<C!8eW)`l
zYrCFR9Mv1rV4V6iHMYx;+AoLV*<Nz%Nr*iR0WOmJ+TqQNn!M&-=ZNij;QLN@h>#yo
zavI^oNfZf%UpKR>I>Dh8A6nlUwG!*?{8S_xQAE3$y=*d1><kS_dHMK8l*nzFBx>0q
z-G(@#VSH4@YDm|^$PrG-#TaYmLQbcwk@2t!XZ_f{JN2*<wCa>83^y7W^&yC)fqLvE
zFX+k2q%Oyhv^tofkB{-Yid`Y?b&-9!eIxlHI0;O)*7>V$p6-D=hp`cr!RIXl-)zG#
z#Rf4JXa%JlDi!Z$o97lHyuPAb;J*Ay>W`aE$EPzvr;7eb3kw9&<aICi3pO@PH~#=3
zO<H_3U=9#&X9t*8W%GVYjEkEd#%|X6u#D3!v%WmG-@Vp{1ASklC_yqI^3j?iDBFn`
zB>qT7N(z?k-KZtGK;(YwQc$p~f3c26j$x&IN0BKbuIWLTmlu$DU~V~RS+G)Bhl76v
zJ$4g91U_Hmdy@HZHEh%+q>zu0w0^B6qvgorMJdCCLuR%J#{*3n)KAy9ihx9>fB)6(
zX^!Kn$TUmb-Mz&?m5YM};*CpZ$!D_|Hk-e`bZ2L$#_Q=i7b8g#Ans@VIX>!uYBE>m
zG8zT#Q8kdP<mYn0-0nX8Pm+ZV0!|-VC6UuaW%)M7LwPxHbzEkWUL+nDa$@3cG_1<h
zeC7Q{TY>UX<@k`kT#*rU&BBq>H-adr;S?f7^l`nR+&6P7+Txt6@$*Y}nfO|>1w)sf
zILT3w!*}lybb*S2!$sE{yWUYaQ-evQA<5uYxkyjl$MZ#d$UO}Fx;iviaU}(L^+H~z
zw638-Ykwfz%r?(-Lvp<95d(jeS`7=r+2^IU^X=a?)wwaqPfx!`3+4M@rg^8QVYq8u
zt3_azqJE@ohEis=e;*HfSYHVVAZ3=`Y!OSR!S}q}`Qf4&p{6k3U7JJ>%xP#Z@mbc8
zR}az?c!rG19_iV}BkC*odZK?|rrU;_Bt_r+j#A$mvKhAVj%Ye9Rz%tDqZ_GVbHa1S
zIPYhA{t;F)251}fPjlyR+v*JlSO)UC9l}&&P0j9l;q%+24L1RpyrN=UsW7IN9P_*F
zKWR+oYA{;5`lcSD)wtFR*}*KKd$jdL@`ma<jd(rAiBCo1x#pH@qxENfvZpLE-XdlS
zn$H5kv=_YD`s_1xfeq}c4BcD&mrQl<DVaFM#cgFp_B5?joYOR-aE;jrZ@t=ICX|wA
z^%}KqN37-Ad~jM#grs=B4$V``rK9MmWX+}*_R1=Ak%*ffN5Q~fx_&j=V|qRwe!U2D
z$TNjYv<f!`mV}UT$vRQLN5XS(F)TXEQn55kh*?69%%2Jf6n}NSy(Rw)M;tt<vZWYt
z_pcqBF(q_8lM}Sjy(&f&F%Hiqw#X|KbPhTJj*bi{`Fh~y&Wv<>od=V>-gXiVMOly@
zRQi|w0C|MY-9dEQw-l6xHJ^$L+}(3|<ip955&2_QlhlX^c*xJ6V_EX1Y>|wl@W)kL
z2}(u?xDv#A0wllJOOy5<3%pKFOhCz8_L+%u&{cpr-$hzbsyTk(PnojKh$)hVhryC)
z#Yj`nCuAzZa@&(;T5Nr0U6>a-&c}Fs{k7Jt|3q8nQb=O7uAT4fmYtpwBWd&z;Xs&=
zbER1%fsZ->JG0#@$pRf7#<PMEqszlF+gzxiqostz<Eiy}_?&o|Hy*?18D%t73Hh77
zRN$V&dOffKi;j3jBU<6)4WuAlM*Wa3KHKL}HC$tZo8!nB>SVW%aigS!{!KdCvn{ap
zx=~*;ZK5Q-#BJ^v)b)ZN9((}}={7SMPQVqG8Xij68W2T*LO@V)UN;YW;OyW;EY7mq
zurT;qTM0M95ZFL&09COkdpA9?zYpNOIlcLr(u8SXFYP&E@;>H+qQrFGn|?Vh@DYsl
zagW7Z=*sGwFJ=$->_}s1uJc1yHn<a7LE19AzQ`6br5GB@ee1exUun=$+Awb-yhN*=
z7IQ*}gtW31z%-#)t&b2}#J5S0LByZUNv(YLEQTi1>}U!h3A<*$Wb#XyFe%MWR~H=;
zrN(p{Y4LWA5w7!_(RzU11aaE@^lAtkLuzo{DR0Q=)#1U1<w20Z=ix>YaVsnx?qox2
z)so;cm(v@=WUN-JiHq~|04*DxveTUHo%m{}Bd0Vn0x8X5qs*bsx;nDcvk}Z>LIYAP
zu)xC>^V-pNMuf`!^0}$0ta-2dH+Fx5AO!L&UOVRo5szncZLh0vfAm=1H)3L-z5tlU
z^VtKt54c(vEao_j1=B4;^mp?^<Mz9CvDa71CUb_dDja0D*9+V3IOXp*H#ba<`!X!V
zB+>YYkc*Oo1g;fFO{H8n6agPlag{Cm5SQ5o%bnglbP&^Xd5f1>Y?)&zO@&Q!o?2=;
zte;*N^gOOzIqs6buVwS|g>S#Vw`=L1rF0!+dA8~hMN)!nx;t6~@BB~C&v9>$xm#6k
z*p|lWLYA?JX?juI5#7-PrKpHR#CP&zi7>dG@tf2)_OFL1ePa&%y)f#iWWzcPG&G79
zd1UZ`yc0n%w+H=Z#nJcI*NQtP#d~zWGa}rj-O-XZqNbSlp#$oHzx;E^-L<u~hhx<P
z!I)$~q%cky!L+ipv{8rVm*BLMt3aR1vLDFDrQe`*<i14MK+=5sHi9^4>g4JWaaSoo
zDJBve*cYv=tp33vI`}Ft-o5yZLv!#|a6RL{ieBsz^!D!f{>gw&Q3z^kdrnlNDNBTc
zDq7Qt*XPwu5vi7P2)r?nIR}8G(*CPEF!bzH`Je=ml9F<|&sDXnJb97?`OB9tAm4&;
z)&<RotOo)Yn;Ch&>NSMe<iUZ14=C)U*7Qou&W^FAH4_X|<EA54&PqvMDGn~XT9WMT
zkc6+QGJ_YkwkMEWNDv7;E8bAN6y(+CWKBdPdp~Dq)9^Ke#ktAXkBOGY5*te)g3)GX
zfC`A)H2}zy2ljCwie-5o6`cX=O-xL-fT=9Q<Ktgl>rHkQ%H){r&UV9o;m`v%S65fN
zOVQrn-@{4ZkdV}dfK(P}EDqGv)F29TA@Sf+_|#5oO3hBc^A$wGz&IfxA&t)udwZrY
zaB$R|Rwah`EqozisW<?s7HvVWfdNv0-E@Iu3Y#S+U@{9qKtRBGqdEh`9gn&QaXsu8
zVj3#6koLXX&yKiY__ay|1*!f$`YTI2v8gF@$jG!6l)D@^Cnq+$(nJL|xDprBwrzup
z$Yl7If|JBxJ6l&ztmTUt&dnzw8M7Wi`8ZzMgc>KnpEN5dx)2=W?TNu0Py~jEq9W=*
z-l%e^;LflKCYlTn56{49^=;JG;Mbv{cAjpanuG)lDJdzV{kEusEMY!&>nCW$O%QFi
zlpb)bo;KvG2@5HWm&#RMS}F|UvA0gdbyin1%A_)Xmwb670|v^ycmX8b)zWZe0obVq
zd=9%X?wu<o%Z#q)+U43UalHO?DnRO{joFfx$}dOIojv^n$?4Au2P(coqe9A<Qsq52
z5cYn-4KyAgeQ219#mt;Nu)T*F)zQT7Qj#4`%#UMREYQV2!X1v#7<0b<?=pud`>(a=
z*1?E-==Zx_5(HAYDuG4WKH(RgFNmkADPOH;ihhV28y6TBr}!I%#OU#}7_~bVm~5wz
z7)cUJqk;(HWd$KXU`<d}YpbT@X=Up%jp+C9)YOD5uFGrc04R4;|2ZKIh!IqAANJ&j
z8>AfK;R!SA3sJOzE(@i~Kayz@HPZOhgfa1JZuM*&(~jZYXQoGFEWvu-cNq5<8_{!R
zYVnlqmI<Mvl?w^x=ZUUl1~Xk#@+tx5Wwwl-)$V<rwKSH4J#_j2yNTAenvXsKJV5M?
zfmpXPjYr?AOo`n8&pcBI^;?8T+)gCq_rk8~xKA_8qxg{((RSVncXKc~G+UyywY?SD
zTFCxvDa68LjNc?a7SY1F)R(xO<kZNP-(HUH?(QxHk&={Dh%J?bO0Q8H6re;e3@jKi
zJF6G^ZjEMvr}anT%8zrYZJC&O5iwpTWAkhu2I;w>VXnVol%cGr5^YIhj6uz0d6|kH
z^KIvVN8yjOYq;a~&Uu6&5l25=GuW7FdGA*ZoN$sg5DgGSIxJqcU$Jg70FnDgJMECG
z;c3bOe?eo~G!vQLTZ_FyPm&nk(*((B!Q=7Vl&z`kW-2I-+1ICc>A$_%IXn<5Z;;>o
zL1s)0U;m>?_WNHstF$QKby83o!8d<RA6a~!b|BLG&LEy`fBO?$tlp9z+0x$dH?s7e
zG^l}yOe3hFSmO!A%6@p}n?d;0>>{{;-Xc<)bJ9hpdQu)15y__j;l5ZU)lfQd#~2;$
z;OS$JS$5X^;8dYF=4B;fbyIO3w^r_+>|>a#8$sh74ntutiC6eLd;no|7PX*?cYbT3
zcbKyF+QWm>chMZILYd1U;34s<(+NQehiz7zlMg78>2c%ZP49Pz$6lfu4RulDtKA3l
z4py7PC*hqW;*&!}<FBWJ5~mQ5{lI`W-$grt%E{;D$;LcZ7Fc)5E3=X+;oAV|Zj!Iq
zj*?0Ke!rLCHKAyxzx<Oii3~YG1YU!K4;E5B__WaVj?w0F)=Ss48ld-noor|KKr%>&
z2Cd`}o1qkb+)CkeyW>8cMee@dj|}zHY=p^Vbi$Al^%)L}X8$6c>}b)K2D-%E#LUX(
zY!HaU9=n9@iX}d<DEkYhyF5joHUl*zjHL4?;{D)#kkf90@|KlnD9z}&g@w7&!sB!7
z%oAtEap>2X-WscC<yB9;>RJ-7gG|@U>oJCJYx|Z}9rL^AH)~#jOh#uFW~F7KJtdzc
zp3ilhGOPn_`&q9!xnq0fgL<aM$EsfryeD*pEv3WUC*_2`+tBa^k}??#GDC_^b~j()
znxD7}h|*xQL(+}|>=wBxFf`yn3J+6lN{E!m|Ev{%rU*X`@<6NGCr|{<&KN_NGAbyZ
z$_u$4cDql9vifWoM|pwc+rByR#qUI`r|@ql@*=2R<|yw{j|svNyI7t-4AcyvbZn2~
zVQ2XR0}1R1hFHSwXxf5O+8}5t25km_66IRF82;<$j}9Bu1-nUk!OE%#N}rh0#b>^t
zqot{6hke5w+73y#Q9vE_{dn1Md%Igm98yg3tHn}OqNL=Av!id7d1F&e&SgCz|DqI4
zd>1-7B?rtk)ekcKqG3HVHK#<t!`W5_sF9-7n<-3s##NlMRx6@IVABs}lf514iexh>
zrl0UfV@jd*zl{#>n^jrpSszi+(*7H(qYqE|CmSuF2`0?xze(Nt5yZsofp6_*F3s1V
z%|aDQ52Bq4Xm@yB?Q@7%KM97%HQp($9-e)#L9@G?=A7kd*zU^=d)yMmOcBD9GCbNy
zeP!NFR3*!=#!sfp2>4!OU`%=F7wtkY6b2+U=`$-oA8i%$awV5#s$Zx|^DnDf%h^Wn
z1hF>UKyf_@O8AXo_#?ZgM@6SFLXANgns_JjI&mU28FOZ(735*MglR`9IDB%MyT21B
z8%BEO0)<V?3Ouc{i%p1iyaP9h_y`EWx2hXlX93B2|5*CU>S%l8NxkV3sQ+ZbkBN5E
z#`S<~o}vS&Ubj=?C|Fpb6$QAh!Q=tuE?f!dhi4&{Ndwe8y{?S}1MBfiA^^y{?2Xyw
z5N~BQt|hwp__NJxoY-cAJKB1*x`YIk2vr9fBifq!I2D~G(ewERNBgs9gwa%ZPid1M
z`DEkpxQ$cmO9=0=_94l8Ug#u$vct0$;iK}Bt#fryD8(?J4GT2>n;}jiE@%by;+JA{
z>kW$SkTP-TgNjRQaG^?^fV#%!PUzpFpwA!(q~7x3Oo%H|7D=_otL$&|FKID(^dk@O
z^6Dw4(w24!qjfg^k$<+kHLGrTMA}5zzwn7ehf{ihVD}FezQ|usn+4>v(iEOGdtkZ8
zgv&6#)@^?n8cjLKAO(wnpn@mI0szW0NiMB0dcN$*Gvccbj*rU@5YmCbB_8|o<8S<h
zUq&gl9EOc|d(FA1&{MPds>ej|5csCaL-t-??bik4H6C0}sG$mJET&Q6O=Gz!oGuJJ
z<~u3P+Jh@vJ5yYId<4AbTu=;@gg3l;^W_?!T--1T2>4R=C3J<l%V8K1sHmx@rof_z
ztZi*KBBAV3m<b=W8m)RjVSVTbn-{#3c!fkDkkyJk&r7seU`q0oqu%Ai2QqY1uy&W*
zsuS8sL5gWJyFK5UW1!hRUGLEpZfxBe?gjnkC@k%oc=2e~pF1_%Tii<zEGZ_Y&a%HR
z?@D{_%vMnj`{5%25n7+Z!-a05a%XI`7?2mftP58g6l0B?EE_F<g(xB{9Fv*3X6e&H
z0t1f)VMIMajCK{x{|wXSdZBtHnR;ckJ#i)RL^$+rT-Ax6K07)2gU*F(7jEdIyre|I
zUMx^Vc<YQPqLw?d$pGsM(T)Xl2EVg*aHm1r#>U&ZYYNEpZr4FtB94sB4ACBA0&Ugq
zUZdXw!N|8ajzqWvynQ>f^%W5k0(ZM{1_dElka!MYs1+Yv1*BrNy1wqxcTeEVi4LUz
zJUCbKD{^tKJY9Bbh6t5%Qx{v(yShGNR;WLJ_Ky|x+mUtTtRmoXIW+StDx%~}Vx0lI
zKb^P<J_wDDM*7RmXGE}bDZKh|Rm?T-ByR`f1tFp!M>3o?veV8o1;+7WFCopJ3rqtA
z>-cUV`922z@r!lK&ELf_WLX^gwVUagl_S&cwgC7j(Po@son_6&W<i9tr>%%NeW95s
zt9)OMQI(Hk7!Hew4rSp=3KPZ*E?dlsnJ<!}39Tz83FX|XhuMop8xjFU>!jfN*W~35
z-5doX@e5j86Zl+R#&f3WM2?&PMi-_aa@jRs+?e?#oUR=;R@wCl&1)@IK|Amw%493O
z0!N?CE((h~R(OOn*sa?+gU<zDAn*c><>=0-cYOj1Z6y9Ov1udpKHTabalPANlnDuc
zW-opmV?la|5R;IAGju+Z&g-~iaPtY<ljlRepwdtqE4D3{!(T=9Uf<m?@r)87x-|a$
zLDxT@;Dt_+p}b7zQ}54B7Jk}swo2`!M8?13_~l4+MG%0HwX5LSvwQS-)gg`CwPQJ;
z{C-;`fI)3w%OFyjP5{1stB)(MtKk1a_{4xeUedd8^t)c8Di_?Ro(Y@pLQ&gc?d<2J
zt2jWCt})hpx@qMnRE#+)XwI;^63qODIC)NGxC1lAS&H>UKm82phx9a9vwnb>bAOzx
z@(Bh-?J8PVrgZE~g9+(lqhQ;Q5SK~T9)G!5R|0}7_R!7+TVh*vSq(<_<&~gq8r%Nj
zlT57#!{@*Iv%cIbbI{mlYIpM8u?8R)VJH|s@?vI7!kA{>GXkuvtNXRwvX`j|a=^8q
zVAHV&;-?knmEz7M>qR9uWeB6VV*=83Rgd=Vn3jICQ56@f9rHh_&^>llz*^jhnUl&F
z9zSF5CNGfkb46o9@;5siDF;EjZQa=-=Eh=v5tno%>8So9T^O>RjKurXG|L@|q5U#I
zv4`b>C*dHP4-!O$zM7V1*cvTcAgfu0g1#pbCrDLyifMt6epr;_tH?pUt2n#7xyp--
zoH4G9DKk8=FjxK@Y$f%roSf&4wcNNabkBa#omOON2&-Xs=S0MuGj`8^3{xkfy`N}S
z7!-Scp{jUS6WV;cIF0fM!UhW3iXkmny5Cth3q-{awEyRS0px+3-kA$ZB3y?-amJ6D
z+FRqTzus3X;8tg|%j5;L+uzli|0Kq}yr@E?!L^G3k&If+x<#USLyEFIq{e$doImMM
zv1L;LWIv!f8mrqP&dL)MqMa*xb(#?jyCff%oX+z3=YvWX&yr77sxm+((=E5<#f{=~
zDw4bbr8;w}o~nrTVdTip*AftaxEA^EG?cIJV4wzi7fHv6-^84W)rUo&n)Okqk^Aaa
zM!A{X2x0Jxd1m`^`HFi|T1zx+8@n(q;$0?67jB<_!`$AJeZepqarB%V(Y~(5i#Vxl
z`$sr@md~^Kn+24&_V-fBu%d~WNVs5cY6kJoXBG>}DtWQJ&30Iv3DQbyT+y9!Hd)mM
z(Ve$k_P>pg7;Jx^?_OMl#t7>5%cd468$qujqhTIShQ-1X@mZ7sJQqN|EaUm8zA2gT
z0coR~)t?7f@SNPsG~<bHl#X`9Tt%S=mTddxUiM2>NCkQ2t>Dr-q%d`I%gW=zc-Fdr
z`1!FW@gW1Ifg)>a?ut{yDiD&m=}lCrMf;H{W^c|VH8yGnRGUtz5){$7Fv{vspK$=E
zw;^x1y3S>~K=7Teg}r_l0Gh|s*#NV#1Qp#RU=n5?W;nc1?@<wk*~C6s4U&YjKfm(n
zTwY_nycB?saD6Q<x9(S|r+&QohPCyZVH*RX_;<CDr(B$>nmCM2=M$jX_3<Fv*GJ-v
zjaFG#BXUOu&P*;L>Hl%{&e4&)U(|1$Ow#eh6JuiAnAo<{$;7s8+qP}n6B`pwZ0q*-
z_ujkiTJNg0`p=}Rs-LG$oxRUzCnru=KwCIB`Taw$=JNalfmZ;Xq_f5M_hP^Dw-DHL
z_*k8ROggJ#x*#^c_zbjv4+?0V8sH$hwOAWu=5&mxH6<k3m6;or)xtmZ<r7$pn@4SP
z+m)#zmFbXQR9*7t_-i<54gO+fDntoC88Iep$nejecB``&s2pvur~-9BP_PN0GBPs$
za@ljsU2+v-^9*W<NU*U+Esi1Q&ir(~*k-q4Ep}6`@GA=H66~=#1XN{neA7nCR*Ssg
ze(fPURN38|ET!J~K6rfZnv<Ly?HwBPmzArIYGRV26yN%L!l6!;eCclab;fz{wvo3(
z85YvZKzVV!+VC@Nsiph4=Bn#8rC#B1cy>0v@XudHTIVLT+Ff9v0lW{k$)cw>M<bK@
z(AfEjHJqu6rOKP(aV?ca+}2oqMlL|H$%0Raia=)c(9lw72u?2~8JClzLmp>0coF+L
zSj@tt(yx}pTs(Ba9H14*T2-rWB{&K)p@j)}0m@4k6w<_HD6E%HW8FvdG~DEHH`8kK
zm~wLyqD?cTZF_DqaPRsJ<HNFfztN=9vA(4dqA(_yYk)i@wV}S}PF~%aJxgMk{zBhL
zxk>tzx$e)r7xWg$O2DghZ!zZl@YJS<$nSmzdMjRsAn<VU=IDmd)T9T0y&nsRT#9JH
zcsH8AH;`uTy<4#{-0$=ApwnGn24Z4IzUjy?<u=Nj7_8(#mgUzOUgq$pp`eDhH<lQm
z6hJo#k>&S>ybsJ2=B)xA!Sz6$6eCa*R%v0?)amw7v1@})?aYA;V{XA6D1szCS3Mw<
zRcDN?hO8@FQJ_5VZckCWS$09hlV#u3N;(LH|074uf8K6URhl*;xA^sDj1d}Ty#Y}6
zMT73~wReYob}c(}&!3P}8!>Vh>8gI|D(OMJY>DZf`2u6$s7oxLzM<M8qwIc2$3mw)
zF;l(PUY;89SLQk}2xRvt1LJ}l;ne0iOe$=>eO*BqSKdFO<FUKH2G1%M4Y7S@ef~8i
zHug^Q_uo-*Zu5?@xVpS9LCjrvAKX^^V_td>Q!~(=Gi!oCxpfYrPtSdz({0+KvFtgT
z{HNHutHJ5cz<{vRDtG>gm2B-121`NUck9#1_H-Yf4RZru`E~mKp2j3PVrl5L6shv$
zm`24}Lopko@a{yPPV1jY_?z;^1lQkkrF<J1UAMUtV_uA##v8ofl<l1AMnMe#yO&|C
z4B!+p6zMoi7o5rpTVL!kRJ5k?_|7B-c#h4p#aExXAh9*PkK;A#WtS7dUOJ4E<nCIR
z0VAv6Mo!neu+?@4WVkpI8a}a>Aew9L*czNJqnlQreQvYlTtJ@0MfqiGO;_BW__5Jl
zjNAM1*C%p3Q(~Rz13ax}lLBwSsX_vz_kU&Tm`#<n#L#p_fru*dl8Zq=Z>R%Wys}cU
z70E~<Vm=K>7`Ag`&oXOH4LM?0i6^T~?h-kvT=;#4{f}W~GUO?z$Y#Vjw$SXR=!jpY
z7+-Z;_b^*!@Ze;xDC%{xadLcIlnw;UKx~X^zx!<jbEdZjhY`1q%_0${<@>af(k#N{
zBti=s#4UW`M{b(~m2Wa~EL!WVXe@)_CL#pr*<++XWEGA6y{5pQrUF&318#8}GO5)v
z`EoC~%54^~5QxGFI`OV(fTpH@1qiKvshM&M8(|r(uk-9)5-zL98@7)ED863A<N4T^
z7mSFI%W=Y2ABJpI-J%~>bc%U7ktYXX6u#LuVQ*OB2r7=xBS2W$?yNeboL@#Ov$%K+
z8RxJ8UlZX^1p=%$VvDhiD7aG6f1H*!=|20IiDx<#%;kzntEpjbzuA#8ORS^H82eP<
zjCyH#kPvvjx2ADh<N7pxo}%L4y{1jvj1m12eyo>)jUuN*G>BZU@L?6XpJYL#tSakQ
zyhW`ywE^(2Re$@&9-|&_rVZOwo|_UM?z+7b)>Q=vlF<!oixdyRY<qzT{1Psq7v^bh
z1@&DBy<Rc+-~SoE|Aq`6*XYnl6aK)mDKM_bIfv9pfnydK^Z0XqVOxgjJSB5mBVY;5
zILOgIi|)^F69%}aXl9ge>*Qu+fO|Z0r|wJ==KW5+0he<SD7k;aW%!vxoi&t|X7Eel
zW6FwofBeF=&{$36&cRtYB|gG?{EqTip5kfb$5Y4!A1&R*n+xfwCAIwx;uF!!HL`>>
zcTo&}wr8r*=k?NCU88H?Uh^63RyN?+9#<@m%yC5Nzs27>JqyDD5`u@rV&-n6UVhhu
z+Q6F|97Ah!Nc8u|Qu8kx%QK=nCV2@C?{*{z8!=h=(9Tb`{&eMz@<?~2#|n-~=s0-X
z0+Ik?mO!uB>2V~C!(uoDmYLOh>Syh%u1M0*Sc8FcRSlnw=(_sCtGIMDmb`Z?E?YWy
zxr@=S_Y)jiJx)T7EvLjX#PpMFz^L((+ZFK7TN@8eC~%<=qTWl4i~{Ath-x(TX1u6d
zX?buCXBJg0RFB1sL?d7zvxI!fc?gh@O(2=Fp`BqMJ$rl0Oh10a^p)$nGuST@ipp+@
zk)k=47MszF`NDei^}M*C(PY4H(|%}*b2rHJOxuK{Re~cchty*6gJ({|wA7cE;kmQ-
zCl#JHQZBm`q|w;OyGsF9*Yf_A4>K2+iD?{;v}*zQVexSHJeW19n_k!JvTvLlEBId-
z1p2mdtERq@WdfnZql(^$E|%xr#_81-<DUfX*Xq<GH7(P(JT3n#yf@$*Xbf^_ZDt4}
z%5f)X4CD)@{Fp{La;?ZTq&Tx(*j~6dp6WK-OtDMnAmYNe)M1qtgXoF1;f*~GyPN$7
z)$IN}1Al2`N+SBZrdCMdV)P&4uZAD=g@8KrbBrkv-CMgtmmQkjq1n1=8!@9Ac<DH_
z6O!tH-SWZCn`zIlp$HmVA={~4f9u@87smu6_s}$<Lx2)=mVX{k&LbHGH4i@(ci*(V
zNB3Pwm4s>xhz{QpG@>4FyCH0YIkF_6H^zmGWo%cyT2>GrABfE4KgY<f!hgV+dYGUb
z$pM5A)|4)IQ?{!m>SB4gkkU%dOWe?@{>t!k?S-kiyTydQw2@>l&Xverw1@ZO@%eh4
z;`FT{MA~=(Tw-RnPT7yYu@s@3R{#2w1kL#|C>D|WyyNzMvvc3k$6=;@xaLjTr^VJq
zWhm`5qhW-I=~AI4QZar0FA7JfrCOiGm4wOTVvM%ppPJQh6s7231hwUomqD_{_OHW(
ztCNVw5-lypR#Hkz2}i}NFW#eEkBpJ7L=Mbt19xNotPwB9=$FMSfdSjEGgr6U@KNB@
zS$FT8!x(_jGl?VR+{!u}rj1l>&JW&8oWLoa_#oQ51bid5#F=IUBIIGRv@q)2o@Oi_
zVCkj%%P|yPdTa1wQ#I?{oXq)>PIbQP`GYWb#0|@qwuMn^7oGjvcK!kM*DfaSZRXGG
zA>&vQUN2!=-T1TPa6h&+0PeBD47y)W1dF1fIQ6+ii0gTJ{wb)TSL>lcJ^C0hV?t`T
zkfE9Oi|5tscJlgVTiMNW64gtFhpUQoCb2imh)P#BvMabAU4>|_=X9xeG{HYIJYI*L
z4~@%2yng>Tw~OLC&bH#~*{J7rYP3L^Sqo~tO3mp5!U9ukJXYG{K97o*(50)LU7Zm9
zU6xuZ7U_dV*R9^~D(LJY?bLKH09Ps7DQZ?}w#tFt$G-QyD}$tQ6oXjQ68Q=gxH9ps
z7#`h)>_ZdrLL#wAwZD=B%rznx<nw(fnHHRS!l`^UJS;kvWDFAk%{Ma39QGyKT6{cw
z%KVi+y3|%YaH5#q2ZGOTZ|EBcdDE*cnX@7vzc@{90&lA4Q7Xz5@QMh8VM|$j>Y|Vt
z1`X#__6)v09j@M@8obVJ&x3W|WLxYn)D2s;#AT@l#JW)IdBS5U3T@lRmSCVjn#*Uf
z@-1aT{%&N>-n(-cOI|Q}n)$18nyIDQoZp1%(b6Mje)H?sFDK9Mu`i{$?wB^j^=Uri
zv2-3&ql#}j<=LBhHmyZ-!G58YEOUO`g{*$6qZ1Xl*K}O|h9?B01@twGoaz|_z$lp2
zf$3rJFJj!f^yS$7aG1JQUAeC9tRH*9AiM&Vwv{pE?epv47cXM#AC0MwDQ0u<h2}KT
zRKtPIX1CY1<3E4$PIBu%$C~Q{`@&cPK~qQYTT`ItM+2AK1^;ajo|TbUq$=BN!kEBc
zCvd&5SCr4^8J8}pdc&AvEF$`VMU${_W68fr>mP<BqfE)12JeFCu)Bx5T~-obH<##A
zxNaBF_EOQb%yH+A9b^GAyxJ1oBaHPENYXIUk&#Izj6_6W#KgoQYhv$N<esrsX|czb
zotUwDttiDWd>A_VZue^Mv%0B!Pp*1FsX1-R?#xz})<PrWq|Zx^U$ABzPpG!7ymrqh
z2ATbHajPu$-m=i;ZS4>LkSc>(=brr8z}<Xqg?G_2M$_*n=RF38GP%#0VtVO@Rhumu
zBlut)9ZI&2|ADF7{mxozG;^itFuyZ(;#4x&4^DONv?>4T-^dWsU5N#H%cGIDE@-O6
zf})Vk2qKwhzHy;2hqDgCrFcY|cvR%Qbf3B^LY%5TKus+sIv<;2WOHKjalW72&rO#s
zN$wKD+uIMgv3{5s*->E27@cwZi5xWByI3a`$$RYL;0c-vI5^{~6$8CS<kwXE=&CnN
zTR+*T9dX7&9HXuo8r>lj7XzOIE7n}@{)OkxXEe?1nLyc~uE-8KzmCg|&cey`2N4Gc
zCym8S?kPam3{T)Kp-l{V*a~ObKnQCsXN!#pp3v*I9lF`Vi7nU~rkWfv2Z3icM>dC7
z6EzjYLo4<f@K|FX`i{h2KTSMsdw6(q$grP`;O6pu5J7<AcbA)S`6jIrti*KjGhNXm
zTlgX{tsk$9EJ4*&C;K8^TPb=kg8PTejOzSIYYW-#_u;}DA~R;%^n*6m=xILJAL)hw
zBAzH#B|77!RS<10BOB-78F<xwP38qLc>Odj>Gsc8Kv30P68YJTwg<)bJuX&tWz#=s
zYlp~whn<tNeRmCcpULuMo#5p#z?qm)%L--<=%Ndx;tUEhG-9*QIn!#k`=oE0H%jO8
zbl8g~`B0J1w^>d6caFUdR>0f!Z3s_}79;A`Rpcn$q?y#}pN#SBwl`e14>(_?r}wL~
z_B>N73#Uzc1ismXOMR>UBkojhLI|vXTN|g{7>qB6ClCRsL9@}uqPzGW>!pjLJQhXF
z5aCXX7c*z&&@-Ymh|<t%mNCIyz#FC6-BFkyK^7<I<iu)aZeNxAs1z32XFln<SeiSU
z5YxW%shn!eFs&+ChyZR1qq#t}_>?sYv_^i3obt7h`*X#Gn^%v;Q3Q_I6tn-ZeIDL#
z!SCec66a)>l>jf6Xe!|$g@#F|wP+bu2l=+oWOxJ*GDGFtOUKzg*J0AX;19w@ak7kc
zEL%O<f##hLB|-*8Ruc>_4bT}*)5cJx%UlGL@y=_cR_Ws)WqKQ4z&_vSY!1nz_e1OX
zpkXUo4|k^_B_iDBOM}P(I=*OJi3S*p)kPE&Q9q?WSHW^2Rqw=q2{7IK?Wu>vG4)yl
zl_-Dz{89L@BK6Tx%#u$?qMp)oVcP8eKw)!cr;s@>|C(VB+_$!}@9)S|!E2PyRUmA$
z7jaW3-IjFUO%oE7gbBwn5yuG`pK;+`yIqg_uyZZ%4gsENv7TX66fk1^C@~#xf^$wL
z|NK$4y|sqwSm;%6{N{p<(50)VCUvt=HF-I(P4j*DU~wWz63;BommCopVhYgU#633X
zUxdj=9@u5ypMYWtftctbROQPT%+9u^D8sr2k`GgrO5A5uMi=dTSyc}zp>L`*8}B2_
z_U9AO+FrC*KtmH+N=EBUJCKy^1`beJ+1ZNPic!~s#;ksOyon{SZ*hz=``pR4e{52@
zf}mh?^x63WY8t=36@c5wSzNT)DS-u_uSI}l#TIRxkHm^w=E?%-bNi;0qKX8WK#*Ym
z=ucDGetiHmjWfooZ;G+LgUNIY4OKN-m4v$5#HMgToF#x<!z1dPrq9FoWzREfmW6%u
zX9{dK37V~7uTm=craJdQ<&}-EQCHt%7=^cO9SyQ_=xDPjDJ!e$r{ml|JzeRI!{sss
zj-FU;a2+)VVj_o>CwGn6&%<=IoKTyk$%FWDjwHKBM=%`X+HTy;`zs$j0~P#JD9eeb
zrR+CGD=9TMM=_r;Xgg*Y#4S{`<rV++YLl9BIlKb8$4Rf-#1@t9_TBG}%q!<VZhw?h
zjW1<u4+^n0tJ5&Csd~QM!CO@v#~gXMcd>ljyWk?56&Qy!#a>*eo8Fj~v)}yK_2S(|
z+~KMWFF8~%i=HM*Kx&}l<cay_)GQ=!-0aYXMnF(gE%gNIv{>TZZR!nvo^g}Gszv&R
zz^wK!<o`r85R1d_#hwT2*_Klh&=WuXx&6zqR66+3xrvHX$okeZ5sY|s1DfC$Bq#4`
z05rmVq!Z6&5qGt@o*l1nI{KF0-!#6H9uHh_Y|a@1bgb<yldBBWBB}AtbiTFr9=t)w
zG;$Z21AwZ2RI&-1B1J;gt9evCi&{vxWPJ~3rH4l+&w~Puu~-~d3az^VRk4pztj!Mx
z5^{3QleE#HA#BywIR+NA(e2Ov>u+%Ve|0nC?Ww`VUA%+4?sF`3GPhr8q!1eF9|qM`
z8YyOUIMJpP&7x2s3WrVOtkZcnw-mJ1Rz<kSGDUyHMzcXQNus(a5t?-h8HYE+uLf=w
zBa~2P3Sq&*=Q7VB@A!ORfLee@1g8$`+zv5UEw}{}J90L)<>;P=z}kLq_e(ZsJTdJL
znKL&L5(W-D@EVti63O0JM3bx0mh&#j3R!fK_c5e8)pVBMwdTI=R9=j1>dEP{6c}Ck
z1A6Ueku2d9u0}U|!%~UjnfhPqBVGKs4p#I~8XFUn3y@3X?$l&)K0IkKS;eya9DKOD
zk}U!GMKIIs2O~;c)o+j46C;O_M#=DOwek#MhyzCqy?r3$>M{-DpJkxz9m$tTSIgS1
zCCFf4T8FGKnwUY%V_;Ce3sT*FtMACIy<IyiQ>dLCAVW&uxvBpq3J-iVO~g`6q4*VV
zUHAzbJlUAf|7DiO`NazVi}2tgA}9#T1PJt3wJs<q05rxtb1_i(yg%#Dt#1aE`nYiM
zyWO~^ne_dmQdO9ET8+j0yZgvs_xF_tmB;KPtW}lZH#d}6<TTMN6%vHLT3qlr`g;fX
z$mvFN^fa{#k>|I=@4upmDs4y6>p4=M@$#*L#@+j@zo(wkLZ3g>n}g_^{L9taW>sMw
z%R1`8_mDgH9y<v(c0BFf303I+z{wQi^xwx&wy@U&Y68IcQ5}JV^ZM!Blo`4(L=h@$
zhl3QgGqWZ9mBhiQ#I<2+DCmvV&b1s-V|Q@3eV5n!lMb&CSmq-{)ObfnA`}o&6-iSq
zD>GkM;$N%(5`U$nqa|~2%Aa{ZK?n8`T=O?M)BpY$3*s1Qr%(%F?|y>2ROG~Ljpo|v
zqbOt(hQ?$Ur36>l#K7g><R<U9o%&EebFMnQ>w|1rb_oHee<&B5xvEj<l??z2Cgs5v
z-yie+3R{yJeCNc`cMW_{u*mqor6y?AYJ$@x927i1hS)J_Q4g>=Ts){Petg-%)5-8?
z;l-z=g@NYhrn0ye&S#99taI6Yp+6siBtBouu5LE_LYq(b+Rs~-I~5zLTdy?lFZ&{G
z$4_4aj)WJZ`uuzW+5{e2+A2?Pp{=gFKjlAlUFl&1{J2oA@9vZl{AZ4|g5Emjd3jss
z2B`(gO(4e*0y^pS!CaEBu1*Th%WtJDJ*??N6L-^ssz@df_FZ?}@f?q5hD&5KuR$tH
zL0MUu_*%RAc67tJvc&t5EXXGH*k=0;t4(*4-{xnldV(`a-w{kz4d%HGBw>U3k~#*^
zG5G5Dc}*Hld6!wEF?or2@c}_^iBRFI?W*PWEU!lin5L*IndZ&V&EO5?MML%5zrxr$
z<58r=#rrG<(0z+f0^PU1OiU1U^t)aG464sB$b0s;beJq+Tm`WV!>20kvO@4G)sak}
zZt`XL4VPztmxSozLO!}}_f3WpGSIf^s_QQ17JN=yQ#u!`YGMK};GN?*BKKh#v7H|P
z7dCAmK-4h9#^b~3cAXdThA!@(w>CFufW{JAg)sBz7vixqa;ms3E*Uk7Cb35fn<Y0F
zV@_~UCPy6jT1G_pAY*OlA~Z$cscBSp)snenwJL2f5KlVc4&a#%kB+`rf=q7diGK&q
z=KW198C(XLmI(B&Z&#o&T<q_N<O^|sa(w2;cNh=0)OS$v<i&$DRCMs1+4JI+NS6?r
zI~GQ^f=*fbjc*(rY(^DVZoKx>w40twB+WEkMy4vcr-$c3g&CN$^ex#2ncq#pGzW51
zQ$s;WoMXO@^W8oFV7$xFz($@u0XHPB@SVc$i>zv+SO`)#|Be2Ozb^J~Dm>-?EirJH
zz80fl_@Yt@(#?$+8SIWwX(OJ#n`%T2tm8m48-0HS(_a<65(WC*<fd?Enc9EW=L?$5
z()1cu=0Ut*Mv?ynw<k(!;~rQthkgLa5?~P9>chWHIms8uIX^KkZzV9vYS8fH#_RJS
z^M1NcZorbG+F1Bj0?rCsF<zbq5~)G{P*F(EDyW43ko`^i3w0}o&RtLCAiF<bUhfxB
zh#Rx2m+)LrEP<#G&glt@PdKd(9ml0;06fb*)X}0Xw*l_}TVJe+KDs61!Y_^3BqYk!
z{Z(2^oTUna5#>lxn~*0|GEaA*{N7)aksMIkARQ-i*~WDvN8?#;w4^K!59|+zOl-Ia
z&dns<j)_%oiFe(0|JgR100k~B<Yx^d9$7(Y+hj+yo5TwLQTI;mfU8>2^X-zAAypR9
zUqlwur|EC0)Zs;qK3~89h4xfBws3#wSzLnl`hN2Dp2y9i9lW|Dj3@?Mn&ZpG#Ejbn
zlzx*s*53_VHYKOQ0CpFoFx__W^BSK2+clPE=#rSbl5&(!#)tYc4!etr?Z2kJ3GFIy
z=fT46UOGAkS<|)$|DPP*_A0I%ulcv+99&Z*q<BZ2A!<O}wkPV!^`ei#_kreFUK0+B
zLw+jv2fW%h;G6s45No9M$(QY$eUvzuslH350~tEL;A7jbLQe!4I^%5=NiGgp2;~x)
z{+s>L__Sa7gv(Z7mQLBl&cvhNba3$?RzkcAz+KB_U-aK!?GHGd=D^@_Mhpi4=$<IL
zm{|UF;`3waGFXU2)-6<jd$85@LqOvEK%GRZqjUz=g~_QxMtV?Jkz3QEI<ZGTIb05N
zZdNgpF!g-3s{^wF)T-$pt)f6vLl`c0Y-v~ykm;~1qDHe(j7!@PFV_W9oVMG4CWc5O
zLqk*DaxuEakjoY8XR+`I;K$V~GR1}bjABj5F*-|I>iyK(J`qc@6tje!`Ey`lGC&Ug
zPJ~txwUK2Zshda|<7hTFwy&?RpI7M?9)d#DpouX6fVKf>nDkCrXG<<hjL`Y+Hbb9{
z8`4f3Bf+m1jrDbd_M<zno}398qghs?l@pWy`{S_2UUVTNylOvEDW?-)14r)KUTk1H
z+wH5{^#(*^#G@(c9O<lPS>BE)>5%%K#qC#gwJkcj#{MiO6DYs>%V=z17o@jL3h2OE
zRVrzVeN0M=aFqu*z^8HIAxIdV?5*h<aqG;UR}z367>4Alm1UgqCkW;JJH|_#E%-9B
zQhfpA2xD`aET_L&9+nZz@<{GDQy8=Za<{xW9L`1z7y6xOv*3aHplRYLa-=?df?a6!
zhH7i_P&`E;J?s^g;IFRFhWYLGqYTR^j0N39rrJPZq$xiz&s899oa8#5GqhP<LXnSW
zVncn}IS?zPlj!6(&gbWz!0tI-MD;Joh)P_$X=V^#P6Sd5)I2E^ECEOLq36WxMX>FC
zz$EZIuLpm){aWKezAlTP10#g+hZ2_XR}i_9jevuD7K9$Ahc_D4tK%4oC@{Est(x5y
z6cj>L^hidU&%93&L_>qi=J?tjnlxQ-ZFEiK@|rZYO;7i{oXYZ%%Ug!l6n?r~FA|1O
z8@rUHA+NB&FJEhDRH<1}k~(N;(yAf&qo-oRh=O8>a{l*-*<z70of#PMnVH7hbbr$R
z9cJ!TnUPg=81hiekIV(4a%+Z<y0XmSVhTYa#b{<?dc8SMxlxN6!?mCV2`w}XLAZ^Y
zS6}N}i3arsM>*9^MeVH5yI5zK%h|H5ty25ATSh9=nk5|!EsUIjU$dwTp-omIg}mBw
zLgnEt%S<Ah^wIdeB+J3T<m*I*F09GP9-Wdb>ceCwtMb4aaq`Ck4@~$MoxNRc)Ym5h
zm)))(8KruAwRY=Rc||N}I9#{Z?8-IAi?z!uYVpc0=kr`%E>72%A=#SdczmL~@SqG0
zsW7P-DW8#-S!{r$;C`pg9)iq%FU=p)d>jX;hjh79iQZ>N>wQJ=;d&c`sMMfR)*?7>
zQ+a2rL@&5BeF6T$?hG@zvpotQ$nOI=<=(JSkOqg$K=Uyxplwu0GscnYLuswutRk~x
z&TM%>U;MnvfaPjIL1!sCnb3>g@Iy36$-_#6TO4yXvs${$tH(TX=Gq$snwbEm>ZY8%
zwhepFn1vg74%A{B@WrKq<6eU%oQu_WEQ{1ja~gbxjnePmY8}k4DovaRgwiXZ`X{LU
zWol=ncpUESQds?}I>?c)5^r{VDt`9~Nh&m(aM*5>S#LDOb8Nebfbc-+rN=ji9h_+?
z1zj6**sMsG(sOUV9ZFCIfX&<jqXSo~Bs)>{Yq9Xk4V?@ZWt{9m(py$N&w5)%6k0W*
z9Cm{NBCYA`YrAxI>kQL2IaPXE($bIQay|W&+95lKc1CA(h0QuKa*Qi=DfXXam8=`-
z2yv!svE1OZobERs=9MF>ir)eq)ve<%CWfaLtw}s72Z<;ORl6+`vf4yS<a6mkaCnCi
z9JAlPkLT;H$F!i|2z&^*QQWM+msj$~U04_Qfu^LCT*57C1({4##8!5%Ah+`+30q+y
zaB^V!_NWYTzRlT_i$HDCvXl`be>8S1MHbK5O2W#j3S<!%|5?#rNi2{aJ1M4`uwLC6
zeywQt+qXh0xJR-5A`9i8-N~=Ez&6N5`h!+*D3R<#br4%e6e0Fh<ChFDyn0O{BilVV
ziQdy8fX2}_ug5xD=*x(pHt|0flAik^29Em|euKLE_@a8fvhPe5{evoKLiUKRD53!(
z>dPZ&N@e-3tpp!~?yd%$xL#{-XM;>C*}VPNH$RY1KD9!%^3-i@zF67}Pdj-@8FQ2?
z7lZ!X{>vB)*A4`LIF)&*?P1hNNJwZ}kst?(>T_NbpDZ2%L?Mk#&i1NrM<|oszvC*@
z#H{!$zI8Z-7dHI8dT_{WsPmi$+jF@?fY!wVl2B9PIu-c-_E)43Q>mi1f6yu`cxo<E
zIjMU`n%!2HVM1Xvj4MJe3jS#m=eJ4maB9hs(*1^XM9uTh=1@thq%2}$>S~JM@Pcny
z?UKPnvM`O(UU)NAy^otyq#b{;61T9SX(^FS8@;(0Rei}DRt4OZ9N=Q3sC}vuo^aLs
zDkGo{%IPSIo+lHMq0<1geS;LGGX1lge82Y}m_G|tMQEW0zEQG0s8wr`->EQ{Zhhl%
zPVlF;PbMS2$V-A#k6ec2L@U5PiZc#%=2J;S2om7$X}TnB8(uQMob#M}4Yw?FMt<1g
z0rD#uTmSo$-(kwoi;6P-KJKO8?ofQ2!BtU(Q%%mrr8(D48X*JBx$987niE+k?@;_;
z7hVlXzw7zoZJ&16Gn8sgbA?SbC!Ndh-J~Fa>G~V2&f~!%oyWDN1RTS-ph!x`bFKZ!
zFNreMozLWtUm<KU2%kI;qV-2T>`LPr<jm9{1cnzpSsTMR-pCQNqu>V#>4@5@;K~N9
zwpRM-896%yTu|HC)=FIpPuEc<>){d4YKMQrWMKM57W@o+gvT)c$Jgy5_hIj|H{d+q
zV(5JGr>SI0Q&ANwGZv14PFp48)uJAwNO#apQgX9g*<QrU^Zp;PY$mlU6apqB{h**?
z1P*H%u)5HVI0t^0W56I33EwH-hMA0j+ereGR)c82WNI0@WxD&QGwGHDjsc%U(i6?O
z<5nTrdL>}kPn)Ul$4@<Y20XtVxS*l3!668^&>)j@6(lCNdN*M%(Lto*tA*v?X=W4r
znswN4VgPJhKl0eveDH%ZK_=VZVC20ca#@$zFqD-BT%wSV=W<EE4`q$a1sP|cc#gV^
zh@POIZr2^?YXpw79HCli8tzat7s^HPt*s}At0%JW!)Wzdb){$qM6>jQr1tg@$KaRh
zHDzU?%oujazUR&|kWpD4d_SbmNNdpVD0A8}Yc8)n`*SWOw<K)TZK23)I`unyt<G|#
zX1>SU^TX@qVs_h%$$%-&70?HE4gNe*42wmAZHjI7m_;f@N#<GbGmf`JSc3|KG{GQ|
z-<@Ri(}fO(_m~$zdzXbgKr9s>hc>Eey*))HAT_*0sA4k-mVyDg$o(<kvk$vP;FP?1
z(4iQJM6p3Xcg-<XTbk%AjnKc`jYdCb5MTnROc_~#W0Q%P*IEr$Xqkdu_zzL*l#>Qc
z6KJQj1(~{7y)&A{P>tU6mC^|1wX{J)uWk@0{@<{3sv8h&6l-$YsYL#+h1@+&0r7yz
z)J72)cTN}r5)e2EYpiOTzgn#{81_eFSIpZaKV-dyd?9=GN0Z*<>%ffJJ}>*3O?hSt
z0>P^Y;6kQEs$O%z98q*@nlNFkxv=HWS9kiuz_Im%`kB8Lj~={2(#9O9)!0-KVv?!X
z*6VYg>w6<HVWJEq&={nW+##d}(!%B&9FOJ97t7+0&EGbR@+6Fi8t+xYV#Alw&WLKX
zd%r$AgF=3&tM#~L|0CxZ)W|;_l+kHZTcPZ_+l!gc6BET3`2EB1Pe8(T@H}!6PKlGK
zkiP@keY@yV4psTOemQd<y8^V#K26F>F*B&vto>NBmlos+9!B4B<_|?q?4Ixh^Yt0U
zz)@CAXsMpPx(N2spO}$FD-UR+gTjOy0$_?8$nF)y`~=4d;mhwbLOLB1{l|<!SxKt_
zfZ~BkyJPHARiW4#Ye+|zUaUc*3w<J&43cV7sZ4n)lIo9v<nf6F5A^pn7fe&BO-hH^
zW!J5BD6-mYQ%n_Pd0MlL^zSnAOY1lA_k#~43V#)Cv-tqktLp_WE*r1haeN$bzp7r1
z-o4TrEfQI4aDE2XT+wf-IAB>&BqPyLIadys1<^Bc+fTh-P(ynXNK2Wpg_!$(&@Cj{
zrB_X8HK`3(;ti`O;VhI|_@{VkHCq%zKK8y{^0*(Rn;pdPT*iSIeS%_9*!j(}n$4NH
z`}jOL^qH9QH|=rhx%CG}Idqez70=ZR4vyvBBeB?&5ln&YqF6Gv4-?5`=VN;L^ptte
zz(XMv;w`Na>3{tPQRn&X)(d*6IFO4tGH(WL*Ve>!*kx+f8A*s-BsX*U)F<oVMYu!A
zE!G+$r=p<}RzXTJlnnUjp4h8%>)UiN?~&j-qLwP<WI&{1iNcJpc|R$|!-I1*YP{oq
zGFixif={}u{T<Y`WjYv$NdGCMg<xKSy;Hl<*SlE(=jC4IWOjnoS!il58Jh;5OCCFo
z5P2;USxdE)b!y{(jUOG8>(-sX@mGAb>YxG6;ayp!aQzs3WgF%R==1Bpg?i}I2Z!~b
zkQn;H5<1ln(X#_qPvwMWRlAe<Vu$NpAskM-ycT#|#P2C^5UB!R?~d&^BY1}({NJ>+
z>zbbDFc539t37sdea*O7X!NeJoBhwv)|zMKd6%kG8iEeKKO*%XSjK>%(NSqoe#pUS
zZpfrA#}3sSxlDUn<pGQM<K)my@0gaV@+l|>VcxP0yRf`3*5(X=i5<*u={L2!I98?8
z+yOXW&_u##Ajg;pnP_>S0S-JX&MT5@o-URr&b~GxY69ADASwAzS85q{kl)l^cYIO{
z!2f2z1cA6l;l0txOB<~gqWrvB(2@S{Mnq{wFp%^Bw84c|TYaH8&@@S{lh82&H~XBu
zJCzjC)Hl0_j<b0=v{F`XvI643@AV!J+-!52a~e}vPQPill85adBV=#KSKAxZl7l%b
zf(GA(oeymsWn<a7%>nDGIs*TNgk(EgfTjVt3k?q^lATWg4dDr&o}lx;1^qLNvpj}i
zp@yIQ9|y+F|JH~bexJ*!+E&#Dg(Od36}}vT_MF)94uR3}8CA!F@KIRPBF{%@vlhij
z{~wHkQ$$i_Tb_?&3$gr^Zwtws*qAlT=FaVcOVqr_HJ{ukVo1}g3tR?$%Q#cuLcwks
z4KypduGwC<<3DddTz4!EP1+rR#mUr*-qF;0^8Gdg?4afR9Tp%62?x2_tvv^(8ff>$
zFA6!3yiwMWr(FA3^XaOAtMG#&z<UG$fYQM>A%hG2O&5xYM*)Hb$2##9=XeR2*B2EN
zPO1HlR6Qht(OZ+vpk(=~yXsxQYzM_@QC0g|n{RbAe{MAZr6rZq#p?ks=8Ec_aXt4J
zCYq&Hp)dZ|^Z5=Uvn~#Dogob@RH`Yqo5gfN>Uz$}I>liX9C<D1&KPD>X~d34Q#US>
z{xQR4_oEDm__TyRuf<cZkD}$p@Y*ZCmldT#Op#*f6~tfK+@Fq?q)>iTHvbXH@l>-4
z2=F4BLvH;(%pK@1gibYBt7e%J3q4nprE!b0+qDEUw8T<-45~e!rf8E29#mdRh($u$
z%oOOcC4G*X9ap)wuDX^#FX#cg5bLd17_a*^@z5@;T+=53ImqV=7&ce^DrStkAXsPy
zNOU~e>TH#3xm`2MEpNJlEs|eJ(PQCDSI5z#P$6h<sBE%Oko6(_%5*tf?{KbMcB|3v
z)oaykwosK^&7_AEcvpSpy-SwS>ypb@ib%wCu9VPp_VvjN@952m5Y@>K>ND$2BYNuk
zNZfqBwZqAKeZKmqc{^--cj!Cu`n-N!&ip(nV3IZA*5UdE4$9k!riVDM&0zcOeAT{>
zY3)vv-lALL`;t|a&L#GExt^6fO8bXTJoZPzMdk5iSG?`ydimhNEy8R(abRwJfPsJA
z=|*Ox<5Zq4(@EyC%hf6g4c1JO2<$vi-y-7E^C~CE3U8;yFna0-2k(ZZgXesk)9nQ!
zyvMe7=A*{VNZ)4@`W>(PlbmR4>?v2T@m&XPd_qct_-6*6;xcVIsY$>+^miw{W2at*
zk>4AX1lX%xF6~txmNh=BK^K|#9-I!(3i$$Fa*iE&#|R((R-x?!el)a!QBA&IpSK@R
zJCmV=K9v8fbGJ&;Wi;y4Ov~5(LRDX2ekQ4qlU;UKH99FgKp)R$lOpro$IZO|vLe9b
zyzB*qHWcfaB=J5S{(3pP!taRt*i6<g63wPok{*6dMxdd4Lq5vRL-EpA+v4$E!jzPd
zTNo_p8vaiHTTat!pts9Pqs&Pq_~gxrPc)<QlihYRkF5a|UAK@fmOZ<7)_Yc=QTCId
zUB2aNmAugRLj+UyS<B3_TB9?4XoMqfOzH+rjemV*OUh!8o!rePVJMo$<f$ZCsnQ1W
z#Ph_R8nd{2#^m@8$vO}dQWOr7#rI7}%;z}(@M79=zTGaW*WFvY`MSt6f0H%Y%@6cg
z*L%5AZk>pcJv+E}^z`heU;vpSPH6wVbVUv8Y4bAHnNKsj-_+<i4EC)QeQ08x^>*qy
zbn84_N2a4N`c7!P{9Efh*!4%p>91U}A%fh&qeI1j7n_9Vu667XSO{E&#Dvr|Fj(~r
z1nyUm-!3yunyjbUnoJ$rf@WclB(0KhH8=m}4*qW`Jk6GEtyM(hOpSV$Yc`hLpRLI2
zd0w#La66TCfuftFcF#yMT|a2?Tq%HL-u+v}J6xp|*nKb!!2O+d5(%8pQ9@sxQE*i3
zC;>N%S7LYLA*UC|Lkc=LrNFv)YCa)doK5ySgzv@l<$F-_<?5=*6~9T&k~>dOlYfM`
zR1PJn11XH4&kT#p;JAG5%ibT)G~7WGyg<<06F2?-QKs#T?TULxtwl0t`vuG)L@9q}
zi%p{B!tq$f5(4m{NwH%{R3&*`ixLnU6<-%d`Qe)0@N=FvRY90-6!1d@SBJH=uiu->
zfrw3Vekt_ogX&vCgJa<@v0<s|b?1Wt7M_W6>#L^WNW|Oo)?vR`raG@})|cBQ@n#|o
zYF5YUp?9a$L}@dj*<&-AM*>h?1de?;_Af#T>|HWtI+Hq=*SA&%=c72w_k!;z!OI)#
zzg6Me0|T^ez=k7&amZMJ<|FJAZ`3sl1YgmBLA|}~d9%S`F^!5M;M3}Gy{e(}f~-BI
znDylo`W8&}%H)wfC)^oFpa206#6y8Vg|SZrnQX$URLRLcb$T=@ru0cOUC7T0uJfh*
zIzO{o=9``Q$eWVY?8C&#dryo}UZpAvirDrGR8AsR6Q#JX0b%KqlAb2#v&K%3f6Nz3
zB&DPxd~(DIy;bA{KJKmbLVe|ys`O-QdiN5dM$n(gCKC=Tfgqa6T5??3>38~6e2b~J
z3k4X|eg-}^uKm~RTSc7ZZaAQIba*wTs%k;bg!8HN#WVeUn;~Ro0xzU?|BbkPEDqpa
zd%cxIbKCdTMU&gCVQ5G-5!V^d40k@DeE%SmBUj0$aNJ=%9cx@RwwEfucybK+N`OIi
z?@ZFExMCehzYzWCH|&SNWT!(V+v~G$Pd?;LPA;9CvaCBZ&N^X@r#@+{?woRgw<48I
zQC;-qNN71Zh8WvZk=!<Culitb!&}Ad+KK28QR=YacHssQ>Mv`VLVXpp(WF#sv%n78
znvP!H_kT{rUB6L&Q*;()==$Vu-|g^ZL41x5tyOgT`|Gy!McGG@z<$o5u>hmg=``nL
zUGN9xj3o)E`p_i>FiVa@N%`?$3Qw@0NV~Z_5!}x3rNYtYEcy{|U)4oa63@wacy!c2
zD@&0}y*Pp3{fD#30h1KuRL@B&1DcT?s)rek+T-TYmeebM(Cq_G7bS&t^e`n%+L@Ka
zzNIFGYcyLV#}!8h^ng$ei5DBKlc!6S4?n4>B(--fR%+<}OInai5K&XCL1a~l3Qu6+
z+0gR!_d)hQ-x&eGpuLd@crpG$2vFZHG%~MTN%=x-XISuKuhph+Mf8wQna!r|^|{MY
zsa=quKX>ijWO^1US7|QkdODy>zpRI)h1rbo*W4E$3qsA6N=2wiis7SAG`!-^G%v$b
zqfNmh^wb@l@p&BxynUIB9fPd(A&u6~RVXMZ`*HJ$^6eWHm33!FZBjybDYdUBVQqLC
zGhZE_f)&$se;yC;D(Bb9*Zb(}TjdH2b?b3j;&psV0vU48XZHK;;Rf?wVE%mGu=#wM
z^Jrp?q}(PIp86NL`n|7IFhGa?3b{i>%=fXwGe`&{H0Sk`vEFj8XyvGbum%mLzAD@M
zaqV`DG<FQc)`d=;0EdK;==I@{n0<_P+NwRAOtG-sEs{)hItc^i4!{F{)Ld+f0iUhN
zw9%AJYN;hrODy1*%T$Dtv%*jkrl*wagOgnIyvgB@&O{9!BB`-Tf~NMFoljM=KkmyM
zpxFfJg!m69Q&VH`c_u`$bc>9kESD;Zb=BSZL2ttU9W=+YaTU#{(y=r)3uFKObf>=G
z4F3E{T;h3^S^Q$ITWr2D!)$m^8sJGeKopP%s%s4f`y!xO?&IDzUy@=T&fJ}St#R!6
z#Vcp{4p=b+;NpIm55J#i*&|$#nFFFO2Tpn=uXu9eo?m6NTRZlyvi8b#m?U_@{EYn$
z3^v%SQoeMYqO;Z?AovJqk0ifs$m43)Y7;KqbvdOoYQ7$mbrbLg3)z&R;Qc(-b1v;^
z)vAU`XyG_1a)Ed$<gERM$D-kvF22>zbJ-?>pbAo73V1*67j8kb^8bby&CSi%aa+Zg
zU`grh92^?tzAsd&Gqi*9;EIx|f6jI2VHC6R#*?vmfB9%Ky0!oa`E`6gU(DKf0}u`b
zzFuNu1g2s+CH68T$N>c0X*D`RiBQC`Mm=zaph|loMTXYj3!AW}auJ+$p9)Oty!yY3
z33`%-A`|jby@+b8g~`ZcRbYb=6`4@^<8ba30wU768$dr<cyLGx79(@j1@tkSnan#7
z;#_fHmx-%JN~HVkd0GqQypWcN@5|83S%m(Tq125U3vmgF+z*?PKHrp%F{!TMkU5%C
z<*=92{u0XD&&DnAy5W!o>5S81&szt=MYiog^nekdt_d@(F*rEr?4k(&7i9g&6yDqd
zg`73}NqE<7*mTNjBl>=QxVpbxv^v*&SbQgm8y*^xSZe?_M^ZrVDl01kd(q&L@wtlx
zzK0>t&B2zmZu*Ls(H5A%%c=zs+2k)Wl3AJ;iv6rgY4gj7ZH71^sC}Fm81;(=@n5re
zJgXFI!)cXo0!$#I%XM^9rZRSUtG{yYM&;*Ux@b(c=3j)P488cCG=-TF*9q#d#~>it
zPTA+oj%0BQS$1bscXH~iX1+_xZdZ5vEz@WJT(aO;q|X<iTv4D6sOHHnG=`xXL@P8h
z-M3i0u^RYn!M5Xr3G*i3;44-_+GbaHq#&PwNtSGq(O63y;eTt5cNm{Wo*XdmJ=xcs
z2Rn0eLEGNE9UK9??#dFO7!6x)v{aw3){9V5#3s}6^Xnmap`xNH_4;^UgoH2I?hS=E
zIGre6z+32Wm_rI7p5aTHg9Y`Yy;Rj;<DgP}&)(_wOvPlZ2Z)J@Sr9M6##&|8VN<dK
zR@3^0MVeP)=ue;gcBx;7nswPAQIy-YO3pxEZ;bDlEgACU&6#$*U41M51lP0Ah)9F+
z&%>T2a6(>xLOk#)<!YON3>1Q5hRY4O6-mvm2<k`4RtS9VhkRQ&crqkBwM2z`0o!`p
zBvIeu(fG3dYQ%=40HEA?q&t9r>?MmI_8@4V=BtD1Q>DbGtb1&Pk`HQhaqkigGUv>e
z6y?rrJ1V{tlD9#lK3HtKV&ETMtO3FlejWO9LbzQqiz*uph)h=Vf-Pp-juQ&qrfm%f
zs!O?Zf|cv10@27OprSU6bXisIX`*@<mA=|2Va-mnv^I=A<byiuOIHjX!%E^-()0L5
zCmL{c21-&wCW+6}MLL7qN9Tj5g!!D)dxliSg*x%MB)|hJnOZfWO^Ukk_o39fC}#eT
z{tZwUb6D__5zNr{^Q>I>2ZnP|1r5SjOSC1Kn&vlBW9o4~S23w+m}!&h2KW-{YWqke
zv(v@bnPrCd6GN`EhRm$c^BqjcnqjbjZI;{*;z+Yk;<jE?<hQ4ZVWnbIz6TzeS@%7|
zdVq~)uaX9-2244fTdx$!{x=O6P-h#82Bt%IUEYF?TXYnOd1V|s<1v<T^>CoF$h?!K
z3B&6qYNy#D=)7}V>f3{Ix=SpVgSyV$t^&S3UX>e_)P4&SNLb1o+5}>_hQ<XX#~}+s
zU_tTwd7`{>hU~f=jG=zGQaQ`>n+Szd5!M9vgUm?8KJg%0{}xi)>Wp@sgj$srT_(GY
z0`AJ7QhtP#1v)BS$BaSoh*Gyr(?Rjf?mC}jgVh2xR}!~~i|t0<r0im)wz{18n$CK&
zW$Dd@OV{d+CIAWz63)NPA6F0#DvXqA4PBd>n32X$vBiK1MFtx#HY^E=&jScpn{q@-
z>(#_+#>-8xN33x?(istY3mq0j?E@1g$^|Hp2ZAM$P$;HJmL=Ioj}kWHW!KSW3^wDo
zF#4{8nrb@6eM>3*Is(D_!nVSs5X8cns4(R`*a^tyD3b<h4(MCOw1IGeZDAxP9jKI!
zOg;l->3pEVrqN!<$bv0-^;vDc<RQ4D&r5GahoV4u<Pa`aiOn%f4D_}lxz;Q>B9lh-
z^>)u<zSvgp^frsr0b}A*RfmJWF7O@zj>qy3t7%>AKM^v52`0i(w%O=?{i4t;(0{Ls
z0u)%tj!ueFiXtYXgkwz(Pz~4n9OukPy&3woN1-K!5V*)mmL9#aN&5BqX8Ur~`F8@*
zDO$yHUN6I`SC3?W@9sA3rK81b*kYj6V*zPG^l#j`)>o<*$F13m&#K*t_X}_yM1J>b
zKRU8xd@T9FWB?Khe#Lk98U1$<$z#_!!`ubYd)hPg`RStf-y}q40U2qU&;`Pp0cQqj
z6+GBz39V^DP*Oqt3DhO@io>gh{=cxDA~XMiQXmiR7<yB<9FL`@)wYW6oV|-p{)IOU
zY5pD3AC*p_rc=dhS<2nYRHw<ei+X1=EZFp%-CEB$t@W|){6CNK|33W(1nq0eF)6b)
ze72(h&jratI5rK2$1njU&S+uNmKvc*m1p?7gGa22iw8+-Swz&>N}yq&ZMZo~PfK_9
zw54Q(2Idk{qY=>Izaqsc#NH3}{3GqP2EA1#rQtpR2RC<2c8y~v{lq~SJvQsP^Y^`l
z|8?mNK%M$sIlyX$#ibX6i;Djs=mPi;dh2=2Wd2G@P0@9s8^CJ@FXzzcvBDv?VPsHH
z)P!!g4Q-%Lh;FO_ah>q+GE*tu9q48QiLmvW>zmHq3oD_7?)r+p)jDd)moIm80=)l<
zeh^G?z2Rd6P*{HV|L>arpDX{r&nIjmQ$~%vRX7kbSA9ho4*FmHb@EIhBep)57IhK=
zy3uXj5S!()Ood80+VvCf?dY6Cl?-(G&fhM-Sn^VE6?LX4RMpe*Fhzkwr*gh4Gte$B
zBtW{#ZVNiI|NlUN!lq;&Fc=K^IbWyT$Io1qG(;_}Z=)+3j%B4qBS)=9S&Fbhs?hR#
zPIzSl;hral$+%>wm6!B)LZgc1x}xdVi&@^B>02vy-T!r5|4((O1AYDP)uRcmpeWz9
zUIx{5_Nx3dm?Kk|#d0*d>QmK3?+Wb8z2V4Wmy7iPyOWRuCQme1$>528^g!{Exg@^u
zcA?Jhk-{5nf&Y&MU_?a8C|JL1EFKFrtT9c5!@#Bm+UX8pA*b+pj_(4wJmnQf1SKTw
zsu5&irGhaJ)s1rLQvW+gBIv!1R$GQfm96gSOpZxkt>t(aHtIuc9u2mZuKN>@2-X@+
z$&r{3(f?FGK9Bo919^C-$M^z1GLIBi<A-NR??Cg;)=7}J22vo-h#vy9a67-D;DdAk
zSF3B?z~Ddg@kP@$*H)B4;?26x;E?qgfwnWHWo%mYM&tqp`#Tin<tdN-c7Hd7Zw3Wl
z{;lQ}Kzq7UaVs>3=<BQ4>!Guo{;5@_@r@>JBOZ!>KLowlC!vKtO|oriOP{?i70LV?
z$6#+`r>7R4vE0!h_~#vxwN#QbmCmNy1M1NKr-wL!Tn(woV>=RFzAGucrq4Z!0?lpK
zhdKhyR+-ZXFrd9euP*tcxzzQXQag2K>XRfjd#lB&#7Sizw3)^c0-U%%oYvZn)O>6Z
zSNWoz?iW6Ij%8)pdg#6j0Gg~<gaV=oE$55U_4Si<(S1Z~XK@+WQ-l~@Ca6j!K$t6&
zsWhfj7OlO)!GrBd?n&=cN6}X0gM^vsgAM}g!}`k3aTbpIIBojh40IMF6K%P^30NUW
zOF*ic?nkX`-VsD{@+n%0?RG_W2IpSEv^M)-G8--P5bIt#m<T8s`tAdgwcIu;%4H%r
zc?~XU7uy{oEIl{F_`Y86uz^u9M>G8av9*dM_<pb`7COVkonx>6_6@*Y-;Qxt$t-yS
zCRr1h53Tzob$g2~LvKMbXKlDa1P<>S+0hCW>hs8CGR@Eb<|L~$>V>!6kMY+)UB>$p
z$Kb4`j+h_ZTH-MTJS7cLDG3S~QjL~x?CIP-5i)6vLPt~Sq{%euDW4y2lj&wTR89L7
zza9JO8VsgF9S(NE%NHJLIS}cLX}{s6Og4Pmk(zX@O?5Bap60aq0?CywfS};uapPEi
zlEBce-BUKWoL1V5GS-!agPTzp`2Y8&FuKC<-iGlCByr`^H?OxPUS3<_Vadc<OP7wL
z#|j)haoJi{9GbCXWP560LBf_f|8>v;6KFBoYjxQ1ep+W!1ce^@=M-st3pA(zIdYi|
z`oR8c@En3d-4n(We_F20f+F8ff*3uYE|-M&TC6vMrV7czPqw=|b)4oz=Uc3`!=s{T
zQ3gKj9e-J=n(w^vYqCBnODd`jjF{agfLcDjPRYmYv4lL-c$jhtveG5eX9zZG<2DwD
z?TDU%S4@IadCnLQ_<A7h@!>G>>^K5LFLk8v7G-otn;GJ566|~eaIlK-aJ7f;_Fh?D
z3Ph;$e!6ZcHVOwndjE5ro0zKaEt?XvLH59-e~Q~Nh+sHVo6Rpp<{b<0c%|Ywjy$BL
zdk?Kqt}N+dy?6hA$T|zCrs6m5Z^RfqLKr<7q(*}@0@5MUD5F87MY_9FK)Mm7K|&Bl
zBOOXN0xBTg0`K+zf8X=g**R=GV{vwO?|pvH^Z9<i-gkWlR>^8tb^F6MgT<<Lj&lV8
z>&)-rXUZd}T0@-JTx68X>?a2Ux|0jQgKQ8mWU^jrab3VpBe1u7V_{)Y5^#GB49~TA
zBt`6}6v#+Lt%yfo(!J$0kXtzWY%()W!`IN^YxF^MAK{VKBqCJ#O27H?)~h?hy58s7
zj*~`DXThvmNPDaJcBOnD;R&w|LH#*Q%lKGST)cH<i}Ur6L22lq=SA|%57jnRGr`Y8
zBZ>Di_SM*iR@H2V#HBtDTW3fi3JXPiO<$~h{37B&fZWNaJ8g`Ei>vm36gT@~?;Gv>
z;8MKPdlGA_NlMq}^#Nms*<C^IiBYG#Z$B{{2xLvC%nwxRpc0X1^S_UIrq_rj{5yAT
zWLcv0>4U(JR$D!R(wG1*w?(U3i-I{^Af^idXnsu;hTaj-ONtq;J}+}k-RKCo$$Q$M
zXv;&cd9xv2@vOY!nd9pZ&*Gd}KETb(eEs~_YTc+7I$q|zdM<5ZOX&DF{{^YqDg{uz
zfFY`!q9<H8=gB8NdCWae;?k(hq}bo?3Z=#nE>J8`Kf~8bX{t;wIXkf)Ua+33d+ghK
z8(v6CNohc^66D|8-4AlVi;@1awdC$IsLV>PspsBd{AHW;d5uQl*j4Z7M;7~KjQJ*~
zimVg5AJvpEYTY|(*+cjFFfl7*cdI|k^Ge^FUg_h8PlU8AjIvaluTNrJ)`bb5Sl<lI
zKP|JuZ9SQx@rd7xlLN}Gm|#>LUPzb)C&BgEep|uOl=U!|!Q^nsioKNe&O&&7z?gHr
z-^K;0Nkg)N!AJJV@4IR(#8t2Decue`@i+jjXT6km|1YGn*}HeeAHREmMfPC8QkVhr
z!NX@s+0N~9*ALmefgY-W{ScOspmpZ6>Se<ry=tyxz1^$Vgk|MyD%aI#DNUANUfuYH
zD{y+AkL5~yeSGWeR_frp-bu1p+{us5>0FNpm}<M&@)^^*vK=$1npPP4Aa2&7`aFN!
zd;3OO_@KGQz`aA>``1)!Lyl{6?#W%iY}4(MWsryK4Ug!Mu)(=b>8Q<c?^iObvmfTF
z$Y+g+>I8+WU<Qd=hg=rN7d#RoHM;8>jwQ2IqAEZu-d)Dd*SfAJ=m8}5kZVA(QRzhU
zx<Q6j=luO>@T)urn_DJUdHIs|7-51MZJi-Sy_EXj5<-&l^20eUTz&he3jF)UZZ2jq
z{iM9MIMce;fo|Q=i7y59zKe0|v6)&p2&KJ@UsQ?xW3aob2(MDym;}y8>+MRvv-5xk
z(sctc(>DUbxVa5*E7Sj;#@2t!NShn_e!74kTgg(&WTB{<F&aQfzr<IXP&T~&O+jTf
zo8u;h%=%)iis|8%9uSjOqMOY&_4o72qjkM?$-@0Ui#00(uj~^RN0a07A_-P`7NyZE
zx0sbMJu&{B#K>*QoyX5O-}l(JZJ}4Nq;@X$mdXg$21?##oj95b?Nn4KJ@gmgNKx+x
z)^A;)-6G$MhO>c*5bI%s!3~CihXIu(KxcLOuc4upq6WVFP}*=h1+7%0nJWD}d*oA3
zH6PWG5?0p1YR7C=rlK4n=Na|SIg1)b;Dh9PYfQ?Ay$zH*!seEc(Y@x?>Ml?>eLnT5
z)~u!KYMaT_`QEc^<)S;bwr_>E6>f(7*&vLyy5c9FWTQ|}1c!x(f>&Hr1-I+aEf16a
zcYE%gj*>?{=<`nQf3<sqLj0;`QgY_Fk!|i^dyB&?Z*C=Ce~^`)#B9x!hxWz(Vq|$a
z3p@KSLz|`es8NhTtGKdvZ>WXe7j`VFp8ft_C6TkblI7TffDgKk)wqv%f7fxF>U5V@
z9rebb$#L&c?eP-c(el{O5f%PE^dImL`<<BL-xb=~zSWQJCD_o6iI9hSACy!3KYjPa
z`8Ur{P;6!PF7OV2qXAcMxmh%ZEZ+wF75RKPXt-|qui`}@;fRRw{v&M2Mbj)ARq%fN
zYQt2Q2Pyc$?$kJKR`EY|QLSC2)(!dpUKRYi1x&T71T(pW=3`?>AbVNRgbX@T+MdSZ
zMxYEmWQ9agHU94!_rJH+e1S3>&W#H1LV4@H$)UiM?gd&rr;GxQy8rh}%f*1X2q3>=
z8+w}lpPKexjqAejkEWTx3;mNV^G4zSe&+wW7cc<qMYjnSi@|+CH%MT^EMI8uMg3z4
zLufF+JyQc%hw3VdB`u35&irdM1myquG58BczT#3O$2_}W7*9uSH+s9=<@8z_kpc$D
z`E*^pL>Dsj6!u5u+sUGbUvKVLImFXbwyV5-M}Tj!Aj$&$?b+sknhik@AJxpr|Gw!t
zZSITo<zI6jUc;s|MdUv6NO4;Jtg<tfTWV1AqTY5qPttsCuFkR^AjTw@Q<wXSpCqR1
zYDwuORsiGYV<7$8##Gw({FRhu|Bx_%#Fg)@1{NJ&$2{Qr0R*&uZJAkQ0QS0JJ0Oa0
zJY6GO#QJmGd3F1->aV%F;zsAy7xV#_>*}-Q<(Ow_$js&Kr0MOhD|*}~4NInO?tyYQ
z%@?*`T5$yL{<Y`E*jImEeZ2r2op?X$S3R=#-u`{Ha;G#E0OtcJO!npMRfgS}s?>k+
z@p<0cR8-<_CACi;1^Y+2k4xWF0>;too8N$C><=K&e(W-LnE}Xm2H>kq^^A$xTJs(O
zx@MdhB1p&mov+mFy8}PKtvBZ&a<R?Rx#PfN1-g0&jJbx26Qv*C-yQ_^H7o=D<>4g8
z$3Fm5zf=-tr9mK_Qo!jR2u5R7c~Co!o4_Dboj<$i(Rp|6P`%)?Vv^(VLHr1H-vmd(
zfjLEy;Q+y(l`kgFBdKf}DM0A!e+ok&S32h%W$X1yi)-<c|HX3aXOZ$)1R@bA?fwF<
z+?@#|qkO~`h(ZGfi$AV+Ychb|uY97%O1t+|fgC0eY|6>lIIE<j#A;FT{_a*7Q*jY#
z2~EvAyxdGw19%B*z~J#1`1(`<97U23_vb;zpH|a9oh@(a0j)7)m@xN)vfBnxjpg;$
zaPyC9cbZ=g^!vV_f#>jT{yKy3;mp3}Vcc>)V17lqf+!yiJ=x@X%RO<6y}!C*R(r9d
z|95|>RX6YEm&ChOF-`rnN0r!Jf@5Nj+0-+W`1RZcWxP8K`Ux_uhucjU1gVGn7`P0o
zzunl`*}eZ({oF+Q>IYftud-}`KUOti=G6e*^Q_v`DBl<0R!*<{Z_dBcc`hZpI_d}3
zYP|>m#LgQdWdE*d-&*8d0B~4%Fpzv?kk0%3A&tnZ35M-&z?k9WFU+~~w#o1MSGjk`
z_(=rdkZrfc`Bwq>#<8rG0mSeJ@K4uIv1ZhGTNQ>f_yAC`=^MuL@jR)m!}XqPNg+=l
z#5Qj<@AT&9WU<@*?Zq%YU%ShcYk=&y&Z{2gAK33JC|pgP*Z;de{rrTQ4ZE?G=L{rH
zCS0<knnzErbxok?ViOZ7g^mCoxE&SV^YYDiJ%eBFfwyNFOD;WxZo5^@szC1Ynegsx
z&Fnxrw^31*FVxHMU)#DI_c1`9HlEW$;sOrZ4y2a@fL1l@!-uLeFO`*}R(@O^ZDpAK
zKL0&al^qQEQ`os=_h3?i=^3yp)msf*urL35(0R`btFNuCjT52T0Tj1vz_K>OZEMKB
z3%O|pyREb6BDh+=WpsNvi(jI*L;r8MbG%yaoNDldH;I&0^~bf!%tP~}QAV!83T4in
zz>jdISz9?5clW?Iy`ROF?oZ?91-@;J?~<DuXzr7&c4WH}fp`C{7aGPMshM0W)tEf2
zVAb8~zKnT#mH!by<oGyJKN!^TB1=t}REGwe^OKYE1Jjk_sZ{`Uzp)@ZB>D^PIzC@G
zkdOTP3oh4SAEg;L2Ouk%U?1VYKy)6}2DxG%3bY({;|p&}0HdC&!EWloPat2rSPGug
zJi~HLI)CoA`=6=&`EEm;?|4mGTnhCq>YR-^7T{h#3nNe4H#y(=0zahhuPLY_`!0cR
zC%yW4o6QIr)__^Sl_KD!e!A2bA_@4Z2d@AR=>MagI&aUj_1_~qYip<fjK9?Q_CZgL
zO9}9`d#S;<jt?8tR_^WZ#}n$1564@Wa;znK9<KFXr#M3YP(V~C2o(2V9frRlb+KgW
z^!1#^8R6_sk1sxywmq6{>)R=1|DWbc5*=^~BB0nUFyoM<7Kio$2dS-J<@qyMYi$P|
z({aRql#qgy&tE66{5A7CQmneV0Um5@W6SCQY>~BrnPd5ZqHO#5f<vj^NB!d-Vi~)O
zNx&l5Y?Hwv=$v#^bf)Rw+~Z%H^m!I4u7zlufQ<;U7tNkGK_S1X8N&6l!G_)85caZ`
zNdD3-<Y}p@3gEuZ<^+>BHAZbr*ig&P5fT&6TGAj<L2PA)OqjSg=WN52e8fqV2ftZm
z0{+(1N?h0Y##7CjHL!nmAb!E>Ea~PLaaQxJLi^VndzoLp7l>cq8WM#ZJR?~47kDFy
zuKOR1ojP{jCW1|Dkr!h90yxuOjco#h85J{o_Gz#m+|Z_zlgqC9oy0dyiJL^ei_lTz
zj3@`k@mFWJxSaok9{kVr%=sP{NCGJCX;q6q6D>x|()1s6FsAiT8mBQBJ9U&kQi7J?
z6A4ypo)r0Zrj)QKnqH|5xuJ>fd(ck}0op3vAbt5TUXUUdg=JWWLv^dtxOiGA2a9S3
zZ<YNmU{IcoE9W(Y;<S<$7{?)`E~#0kp-w~(_#i5=tf4W>|19OQ0^~CaizfoG6vsMG
z#w4<cW!HzKlwd-1z$YJV%{y5N4H=00+SqmR+;h3~3NK9Oe~umdz?cDb1l>yrkU4)(
z{Birq*z^dlz9^h6^L>`E1Kvz0u-`kZ6NZ2pWx1kc`)&<klN8;4z>9cX`~Opd9nY9J
zTes5`V~ZNAV99VNK|Sm^T^D;tIr;f@fHPTPG&O%{PLJviPZ`ea!~U<HnzEJH>eLFv
z7FfYW&oS-3Q37$w*ot}CA|}mFRnadC8u$MVZPUlI*_L@*HUABuKT?dQzmL%yNjkfj
zt651tw>4v$4!F{P(Rz>PefP0qs$k3hx(C}gmDKv{Ui8zCI{2Jq`sXFS`^3PAv>y%V
zd_RHu1yQ5uP_RQka1a$HdkI%Iomug}cs^RtP2P~fs9iUUx<cLekjm2@0eyr<fjE)Y
zL}?IrILFYOGwioh=k1%|x@}CdgrvcMu9dUS`&+Hr6(rlznl|qwC54jK`=_Nbl`p<5
zoYc;)PEJm~NSv1LE;#Z#^huU7v_hi&Ea?T!3d=`4$r%l=fP+hEJ{gy22yOK{!--59
zXcUK+rG>?*F&ZDonI=qhNkT`&C4br?a*J@7b{6(=wOor~S-O$F4`=8>8uP?4U?!~W
zdsv(9lB}d0rgeyQ37L891P(t*pkt4GJR!ROT8}~-zmEnJj<0=6C3~gy0=oU=1$c{b
z7fl%?3LQeHu&TY>VvHfd<bWGBdksu7><)Q#)Kz=4dHu)%eZ~y@Z7<FqhoPwBv@lqa
zxZxsgSQ*le-)RV0_1Yw)6P0xl4MCuLg(<}S*YfWXEKpBw3ZZSRaOS~64V)I@;E7(0
z0x3ZFk;xI{JCVSweH`op$7kB%(yx3kynh;w_zaj8kIt=I{KksHP1lGra02af{wd?u
zgo~LP#i>2KV21bi_1Vwro@85^QbLv0R8p+n+0@zu`O+Nd;Y_#r_l8BAnk}u52HZC-
zYlc}xWw>W0#hww-DQ5ua#aFR-#O08`zg6JNn3tAz{jUF}C^~3RZ(a+#G)HCBN!7E8
z6pEiH1YzwHw0coew`vFt`wMJnf+kvO31*cbu^1FA;tTJk&T!*?=!fXtbKppw)1A|b
z_O?;qa|90QQ}X4ae2@gj-fc=$?@=#G#)f;(z&rkS%z5>^1C0WWQ*2ABe9x4D+UL1v
zTzvu7FjDzCVSa~QI6irWE{Z`yXusfhLIkz$WA5=fNLXql+J0N|HN7GvPw`ZPn^`EU
zbDabRao}R*r|{NVgEvZbqBBVhNusETcS$~q#n9sS5o3DUqWJ_UuWEVcQc0qY@f;T#
zzwYw9sCgpZorS*5zopw+2fDA7HGLDZ@5zO*tO>ihUa<B9ZuZ10lI*DQ0e9lzFJx<9
zZ#eN~Zo<NgBEi6>{Zd%rd9V_q#z8<nLWn`>%F_~5i-zI7>xEI9)=i)amV@jHJXp-T
z9~hVxQt^m5Xa(5|kTJ}XHtw_(pelTUID*%Ej3G2+Ia)wf{b`rO_(>-1Ld4pd>X37o
zHei%2$HsNRi@6l(VheIWsMw)qT%v{F$xr@xJU4+X+EO5kQF==Vv3O#th(I_V(DT?C
zRJwIzbFh?@^y*hLMlXuy3+2oOjv0LL329+cz~F52{EF}S{Gsm~$J92nOZDHPGG`?>
zdx>jkkO!pd<NFIwY?AQxQ!FU*$QLq^#Pnm`I*8`cE)5%X#v4hdxl|A-N*1MKQCEZL
zr9#dgW}h=|vxV|2WPHKUf@GSeV!!JoF|0$@I|F%_R||T14)eA;==Fqg`ZTkGs=~+j
zdZ*|)%l$^}*Zd&&U-oAxP5H>tB}J019MRLahVo$?nOfDDDC$Dz79-Ncp?0~}H9|Z5
z&kiYLYxX@0J&spE4(9in*W2`X&n#et6^6D26{evZ8Lx^s^lED@N5}YTMUGwy$mZ~w
zv#neby2tN`TH6nbsHaryZA?iWG;}UUgWCnxb_tLM(I;&A*h3iPfgF;&ZF>UyqY?60
z)WHT2KkgalZO)52cFT&;0maFFdVH;+tezxuZqFZ;2uZw;EGjrun9*=>H^v$(-<Q*;
zx7m^p7y>Q}@3L>RR=p~y5PLyq7Tv@nN0l8$;}cZvrjp>TL_ylF6F>dV*pn=1S*Bb*
zekjywWho)*ow+XiE}i}(jPZFt^RyM;1F78FaNNZ+h6@5AH>fM}5j5EjXR=#R=j$mp
z^2n84I4GU8nJiNP3j1mc#76XwhPPl+AY$j^l3igvku!9o#Kr;Aps*yxV3B^1e6gT3
zh65;!po;Z2)7{QqeOs{p-4x^~9_a>amz8_=${Lr`NL8dtT&{(fP7)y@T9c9TkbVL;
zu*Q&s-}SrI?kfA#?}2C4Y)^<7Qf3)CjByjPe+18Vq_R2Qd1$$;INZOHfm9+gFFdij
zp6JHaLW+l1f)P<3p;DNlT4{#FXDx=alY7skHQSObN74SLr_)-qH>3ogL^lYSV*%4w
zQU|OXx^%pAN$4YWYyt^&Q3`4}B<M?Q6A6a-LbP{CFp?h6OSgbS5dDc|e~1VbqT@z|
z?qguh4&Mj|V+q<(Gi=i|;(J=d4Y%oH2;nHW1^Jf=lT01puk$uf3~8oi`9=>aSvb@h
zv-F_@9x=@fIi3Z1Un6F&t(0shPKDQF?q3t`cKq@jAqWa$yU&8Z@Ex;~2)ni0t%rm+
z*JzYx#dnOFE1z7xT?*lpC~jc2O)lVScAVc`3J0grx2QLWrf?Iy$f#vKx7=pvrisST
zNkb2G(`<}6duilBC~cP>)%~n{<J5kn<hXAWK#CXsQN)jbh-`*>r%)Uk-WWbW<3EK%
z^}9}tsRTUYyj@9VD8r%S_7Sd-tRf&_`3>o~-Vt9Awb56B<lkwyX>wqa*lXD_#VzfV
z7;{0{9A<bj`<>6*K7!`X!6~3&eeP2?7E8Uvq_dId*i3K&wC}F#?5;QU?}71UX2AeD
zwo$F!hZSGjtY@3zAN@Hv%csCCWevF9mWuxHOp!WoN)CWq3Zks+y#Z7~z;g<o>($@T
z&^%C`6ot34nIKuSb#dwWhwsqT{lxF=eB|8l9PToFV?~U1M?;PCiu=FQb*sLD=u2*H
zL~m1K5T!0zbwQq&*N((z45m<g{}d~R!K{vj#{@S@nJifE!+t9@09qkP`@zVD$F=~X
zATeEZ)#=_E6FhowF-Z}JwXcJR*+p)ia-IWn-?hpb6>mqNTFie-1&d6$wP7y_nBj#G
zi%Ma}ai_;s3f*%cGZ~PvP&1GNHul4G!9QCxZ$iAI`Y`+Fdnp8*>uTc|WM0&eZPyq{
zRB|rmn>Xn^LnRA>$c7d|jQSnFb7~h|7VyoG@AFGz4gXW_Ht)n;?X>39>6Q7<@T-es
zl(W0gmd28BNR9j6>}zpFWpBqe+g^O<Z<b_NC6?@)BaYth*CXEoxmV`9Whlsn$U;$#
zXn0U*lDO(C(IK%JEI_};@?74<(oEz}Rv6_3#R*NK&;}T6hdl&~qpTFPBcxCycvz`N
znp8LN_z5xu!BP}up8qC-Wr6~OjY5ThJ&vxBmmU4!?O6mylCXS;QXKsRziGGo(@L?$
zW{2)*!i&3o_u&E=`nT9UKWsM#Hf)6$JO0G>g(#-rGH`dJ0$e7X(Ogf(JE~t9wV5uw
zkuu{?DzzHEe(<@%I9@ARbLTmutyw_oU;e+A_JK2fZewqoxy%o+Fei+1Pr|f6tpn;h
z4m>!Dcu*Dg<I07xPk5Bf#WoUw8L65!`o4Hx&j=^3O>6{%ii&Xs8U}k)ju`x6_yol*
z3APbwb9K#c2;lTB12=wa1#d82d0~p;hOG44CO#m*gqqKTDIi*?Dlwk19KcUhl>ly$
zM$O^sY8~2zB}qnKS0*_d+@XCNxdUTx4%+Aucj^{}VS&S@mp~(*MdgxwN&HUm#NV<G
zIryGmqb-7{8_I}SyD3hvW#xi*GQnvO4#`7{$A;ZxM65U`E3Nk%`|Ce=aznDCi~FWD
zO(t+L_jWj>*ght)x;bQeYt51H7DHp=B3q1XvzMGL>~+$A;2bs;J4^m_x#@>L&Wl^}
ziJ22lW~ijRlaga3kk`(6H~2TYtTHM^=7xK(NsUu&HGFn;=hNc!SiABiNK`7ot-z&O
zt=fP}`QC%>WFbfjP7bf-554o%$m=DRBT}TGHZm2N{7J#m8hfwgWYPpbq=RrQ2XP6{
z*pSk1J!v^!wtJ;Uf$2Q}8j>hKv@w=lW4Z{}@mtdfK`SjiJgV$H;J<gRc#RioIFzd|
z+%5$Z16!UcsX+Y^?NCMNj7%CWhnb61Uy)N9@<;8OH1}~Y{}kUo<7J^=uLce9{zbMH
zf+yVK{>6WV=6&l(1&GGyHgXm?s&`^NMo_N)zs_5EAR)MzA~v-ys}xT1Ws;if=dXML
zIEw&Md-=}zT`*Pf{&x$s3>@K<2zOL1NAdK$g@XwxwU-3yR@O=5Wg)fqsaPaxj0}Gi
zYm0i5NHB7l`>0hUdizKp51)ZvxVDs8Q1yNyZ+_~ggJLcB7dRn(qTEfj@d{Tl=+D|y
zLYS`|mP&wb@nV|Cdb21x#kumzkja(G)2Gm@ZGawMn&5IoAj(WIXa>C>bkHRDUbJ&l
zktS5FLX<~l{;9ZT1c&plYF9xtD}IRm|A$x5!DT@w6t+V@2QQ<oVTr^k>?CG5NpOfc
zzFeI8cv%UaYXCInFgA>->tcODtDDJ7r*gY@9>9=FoJ|D)IygIdIrTaKT3|?yD}&~F
z+aeDtOexV|xhdkieuC_Ms8trQz#LmaHgcIWa7nYv)?LPqnrCrM3tuuvWd0_&RwwQ1
zq}s<y<=~SQfKce`*FE&M=MtT*k3yE}W;PTA4O3E+3bASyCSb?)V|yY;{@OX@U@#j~
z3&@ca<mk1_%MI8Z{DUqI86e7<a=(3r+F+JYz6EpB4dsY+9uqsw;x4*D8t~Y!j-0XV
zDG<!9Ut=M#<Ll5~9M4Dvoo|PiCFrxFo3I_nNtyzK(&SfT<X55N5LPpa%{S+<*|Z~%
zoZNa*avxo<n7_yv1+VJ?dMB$$@VN)Gop)Qp?Mj-TOCI}roGmHuGzD(5vi##F%?%8G
z3RqUyZh3hy#`**&B1`&bMwoz6@Q%M#hRE7$BjJH||J2}bGzj!@o%Sgbw(;?aJWaBJ
zTvEqTT|^5xMFHngIAYMtC=Ke7w?Kj61la#*-YR3!>Y`_Gu~xek<V*fZC@}zurSTvG
zr1rWY5dekru(pV^%q58sf7sS#Ul_CJxl9zudAG98&I+(egNE2iY0%sfyS7`O`F+jn
zdO^I76OROFQ=%!h*sEWb1r!u|ddm?BO_&Wq>vxMvuwA|vlY?YO9`HZA!w_IE^GBLq
z0%*iqG&l~kC6V+=0tuF7)YlKY-i|s~&vRz6_(Queq#FnlXvLq(2nLMxSH?%sIx@YJ
z#g#41L)?wSC<G4bptX5Ag5e8+-|Xbx_Y#an_ya*~_JKBk*sJ&|^1k+m+2>Nrn?CLr
z7@K61r;Lq%6q-3<?t{$E=GGv9U8r9(ZjxOT%?l~Ywa!@C3-H0Z5=H_`+9HyVt>%<p
zO>31xw%>spZ|s&d^aX{u?bauu{38A8`fP_*T^0!Kf5)1u0ZHTM=WH8FIq1*qb+XgU
zg;|U_o=BsG<=1cZsk<)gYksZW;R;%B9p<x&cN8^tZc*p@`~|}Mrg#+$1+!@N=luh7
zx$%h(-qzD;P9CwhfRa@b;-Vdt;@)Z|zh$l0rFlM=#X`4dVwX<IYsz7*&pCUV_Smh~
zyq#MztL#GT+}!jn%qr0LicXxhB&RXWWpt#6BNZCF;3TVAfnNU4jKe2q1<$w5+;9E?
zz3Ar0PBQ}!H%-Rb4Tf0}JF%_u)5{BB(s4lm+pdacw>V78dY_fVR=1eK@*^!m;LR}g
zbIa6v5|%Nvf3@w|^;3VX&wpF}zvLw%2fXHF7j-IU)TKFcxt=9QB~)2C&XZ;}2|lTd
zK)Dv)6I$L)?9U#2*R7$cT<xcpxqIt*_V<rAuYN`|N@LAC%$j!Y!^}*7KD)AE+xFDe
z7|kjFPT=;fm7bV%+euSd7Fp`KvojpA%bvdhkjhvC+2`-9lQif9?bd(_;(Ir}I-WYj
z=q*YK2ASVu#KW2+or@tB>R!xt?x=V!sw@+aQr>3Pg;Tjd3Skw7*e@C`z*<~xWj_+>
z$k&GIJVq7|N^~_?S-D|2aYAiCeYvg-a*NRjyKDCsT0B%(`u)A4maZ7x^d1>;+ed<W
zWF+R_e?=Svvlts_@>)>QcQ(bk2A&&0RRc_*_|Y#=X)-pAR`G&(dDl-Kd*pVt-rwj`
zQf*V$kFKj~<s9u0OL3mvn=)JLJI~0|#&EH7-=06gWvIaF%=P_bLc_ZQis2;J!rA71
z+mjzp5ydTA=%gzVBjvn}WA^jT9%oe0w@fhA^fZ0>>F=A>(uF^_K3Yol5a#%BGGy;!
zV-4}6JNKS{(;vaSReqt{a+>~(>$_Uo0RuiRbL}s)OG{>%2etr;@#q~kROC_-71|^Y
zR@^y1ng+K0eX9bOsd(aXx-jSqJ^xQdfBN7_(60lXv|4G^syPJC{Y7!f_?6nY<I^4H
zJw|SfQ?r26*XI6UuLZQ4%K_kHVSTH$xiy#3IhazT#qs`3G2x!=%UQCJNu!EQ;OX0K
zGTQRf{OzmbP%|v$=Pob&P5uq}V4VL|ocOa5JYtukRv^=ktxe0!d>_s{wMYub*L}Pc
zBP#p8dm#dwsF@4%@-Eel(jr8W1OidQxepAo{1z-Hk$9+*^?d15oNt=_z{#Q=*{GP*
z_~RfLvd)l=o!u7cIkpQ!t@`ZpXvD!FjDDI05W*}Kp#r2$UR=qE@qag*FMrU}Sd3n_
z?@i6gnoy05V^1?ywS<H5*I5cCsidOAWxS&$q4ju0NXvtw1P1%=x-oyGdx*5zO?Sg5
zF7_e8b8V2pU$uOnOO}XKIQcn6nCkh6%p0eqs70UQaT<fXv{8~>M*mM8)y=f6MQz;p
z;_qW&7YD0mX13(U;v~+ZISghMB{l*AjD~bBJ(u-l(2>g-&W{<Q$epWmNU#|3zF^<B
z`)`I=(Q&hSz2dla<~<VqV7E`JAIDYR(eNc-o_tp6i+S)#FNuY6!fi<@+sr#UjyKSd
zf?nnOg*$PKneJ-po!Y8P-QO0c3hBgV5)YUwzO_`}8%MscJDzEJrHOd2=~($+uf*Li
zMIKCTIxO8_yaVih`{APu;!<XBcIuuroVOcQYTTT+*_ngrPf9ahr2Nyv(Qp@#fRu3B
z=Z`VrJb%HOp%K3@6CXJ5q77~rh1a>%ubb)eTcaOE{%VX7pWY4tM84fvVXnc!a+#0O
zk83eqLYdInV)ER!V{_8BAruP=_)x~9#&3#>ioX_k=lLCs;=g<6bW(BYOHLh4@rK0&
zNP%~^gTR=LH|*)!)n{S<Y*@&+8#6U?yk6J_nh=mfAg^+}{+hr05)bk>oz7LkNar)F
zUhay<o~Lv(WpZkNmfkMTQB2n0T!7{KGnV*=^;;&tq0)ojBkmkYIY_6)M=J9V*w>jw
zV&Y(<gITXeKOfdvh~<v3sSEI%?3HsY9Znc7wP*dk9y9hfvaVoG%^{P2An0EL_y*9Q
z2lT&Cps;Hoo^ERJ-}&-)KjNfQk05#XyV#dtU@xTkTa_y?w0QVD*lhf0b0z|?89j^*
zvB<(JM7!;Tv9J;-na-PVX^py)H-_0HO(t1U=e<r6SA#~@-Kl)Bv!7_sd(Vwz5BHv+
zza99Xb<AgGW2L8%q(BmfR2HC_x~(x5>v|nH<=H1F@zVPBXH_Oo1x|IzF3J2I*At2I
zlkG=0&rkV-`f{*%_Buzigs0t!iAB20<~)s<y{l?eE=h;v@MdqQYjaXZl3ZBZ)wN4x
zMF$tnQ>m`07nuO{@C0AFoHGZjIXE>Z$X#eo3Dup*aKX8hgG!sIM~b`7vk)OAWQ#RO
zu`I6bLi-|zIi0e&pF)X_g0HX}f1*!+O=CyId*xLIrFFNsn}0urkpC*7vy47{qY;o0
z9+sA7`9upkebw4odthD}H!lxR1eTDK#K3yCjTxsP1#K^)T4!-EHigqqP@NBGh^rod
zlQ+>p>V|2-xOi=Y8tyDfBYk_SD;KPE?M!YKB&tY?!QpDM=fP2SDS6aO_9(Te<Lgm=
z^9^13em(`}3xN0;@UcxJH9Z9qA?^CAP9WQo{KrAlTsRjxk|D6EL9{ZP<BloI3<V@p
zd_0mMmMyjD<dLlzN19H(8-qK&qCmSMfN<ny<bE4hVc!G#_82G-KH>#xL}Fv$YjrFv
zsvw+o3FOCJs0>*P{+bF#<jAQZgJ1^uxoFkMBpY((f7TfyF53OwAS3^yA3=P=F-kvS
zF)&Q8!a@{STYrl3YyKcabq?fDrO4<Ad)a3g<=m|O7r7=lymqydpC2qG;*V)pH5s?Y
z7M-LtsY*&$AO+?~Q+bNT##UXx5cs!_BCEDr4hBjYMIXYw0JYAUv#E|zlp(bW>0^IN
zp$nFm?<!JQQFJVmp=5)1qAqK){!t?qWn*|F>9!+?85IirZZ^j$1O4F6UhYF$O$TtU
zHcmfizL=mkdae7ZHgJMxQCXZ(d-b=|k+M-Ea3#OqJyoHv_qqXpv8gY}j6bMAk>ByW
z37BO#Fv4Q#hBz&<36lJiZzKH)4lpuJ&RMV|p@KJvZpIZXmR7`FOs8wIZD0%FbMOfx
z=8ItYb=6*mosUXWc#ukG<0kH2>g)?&$FeVDCyxLd5;OoTQszmFc>d(pm(Nt%(8~>~
zCo{0&-r>-Sm-hfh^b1qLQy6`GLnbrbz}RjJm_|)I;4qRn(`MSvV4es`pwv&pG2oOA
z*H(l+7!G8mM}ScDhxZVm2O1QGL;)O$oQ*xE*JtzGHyC(w1dMDYxQYlrj@fQefyi|O
z5|(Hw&u)NW_<;SSGAxWsj<N-(7?TnEuvE!N-nZqW{9~7RB{9|rT4~Ca^vcgrU*Pi_
z{#iF8;lO2=&GhiO^nT$SxI+Z=TLcZ|?XenHnaLv6%_&0gF=aU7rz;h?O0QZ)tzY3e
z1%&94b*2LX`w#KIhcF1I$7V4K$2~-GHgCer6{CS!WmTMdPA^&a8uct9N;1m=4&e@l
zIagBB4ur^05o{EIg}!`qeq0!qH0T^A+VcuwXK{vn@n9?i+9NkY?o@;Ztg$|+(PQQE
z*N^rfCV1<(ky|Wr{O=G{g8rLbFalWINgr8F*Cheel<kh#y3!ne<kKaOlew`lqPYDE
zfRImJO(&zI6kG()7NZO{;3u$Q=nQdXEV8jN{)U4BK9ebmrq;UQa3Ya*4Q3XB6_RqX
z)P+^bEcD?=w~n`<a&)p_mb=fUe0F<y20~mre&Bd^9p|*LS{fokt3}av!Py+$a8>e6
zn^7rf=-x?7rW@S}-F1-b2C&P1Gk<0^r<fdEnshblr!*hTM1svop>+P5z2J0>e)~~0
z1%DAr(Q4G3uD6uN9JYxQ0sjfp_m%uba8DfHO>NJ8GIqXv?pZtXpm}|C(aX<<>U5?>
zYCDj?w4|}P!S<e$X8Z3$kA?i5dm{Xao@zaJ7R6GsPN4Fr`h;yawUVXvPo(9?H0DZ!
zm6u2c+lxaCy4qGy>sC@?IHs739SEy5i$!Q}pEj+*`8kci)GwK#ZiMn>V7L`#qXU*S
zaBqzA1zs8P&2ykBPc}S2_U{Eq%Z|Xn^{NtJT?mP@CF-nW@~Mu^fj_l?5oS(t{7s09
z`xb%-)TJ1z#MyN0b%no_20+l`P;h&%c7hkiiq-sn`Td+(3E+XWU=j75ND)$~6pBMU
zX6H0p{oFWO^!3k)I7=IPcTnLtnM*FcfK`<KHOYXoh`(w%|3Uml{|SA7<pZH0N<2I@
zGr2dVhJN28O&06;L!JBu6<tj2;^+fk73{5c$fqaXKO<ro%;`c-B>Mlo<ezUs<@~L}
znt6gFS=2Cu?W5lJB@ob7F4+e81NJ)qxd4VHpi*dEb;~vldLhoYL6EFN@J-Hc?IGCk
zZ><Hhq=m+Sd}c~YkyJYjUYF<2S6$pYY4OWpsim$%^y9sD3oKE2gfZqp8h;qR7h5rZ
zb*a&(&EZY)w=a*Z&6=wITB41CbA`n0lFHsB>Vfm=C%2Q^lbehZ{cNYFrFCu%xIAQs
z{AEsNTr@j(4@t~RpQ(Qn)F-1k6t%$lKe;t+Z309INt>!PF1JT7eu_FlB8h1^xLwgj
zkqwe_{1ED3h+Wsez8#g#`KP2MW<yF|qW8|+yTlaxPtmDd2&JiJ17=t|@AJ<;Gfftl
z>PRW%7hEu$isCT2EHr04cl@ueB-);GU)l3z{=qHF><YpSy?nSSuh`GBBsS<1X69~=
z0Y2=dSYsX)m0s2~AQPkz5@l(2#o&L`%e6)nDiT>oMz;R?yW5L{gHG4FR+XzPPlL_B
zzse^Cc6WD5m8Q>0b=yi6`fqpHwhvq<?k1TdtqyGTSiG*(RkSo_f~Q+V$;(7OAoHfr
z&HoQYinb)b>=Hwrm*G{Ex1yI|w_eSQF9J(EU*Q_0{9#Coj`eWZbre4PIjv|Q8Jp}B
zB`N<Tk&&v3zLL!gQlv#ZRutyQ(0=O8x-B?mCP^;s92_Ro4S|tI7jHe<n8;lxU@>OW
zUp7Fg)m`GH-Z`=(x)HxBzJmHU&`+|sef*SbOfqFtu&3HB0|qW=_KCU?T@Bn6x}M=F
zB$-FKL2QxgT5<U!@2#M{JHCIGS{DG9;wI!hTfrsZvOLvwge5kfbzN1$Aja|bw@}8h
z-mZ#OsTVF6!~O|lDVtO3V-*t?>tWUTMw?c=1SgIR(+S;8<VTI+ozPmsZEB#=hIDwA
z>=FXN)_PsP14e~s?L6rdim$>4DY0D0<Vmo>Yz<699JX<|U4M}fB$1Ka%a<QCFS|Pw
zH^A)t<G<;5T;bqzX-vDCafyTW)cSN%2LU7NB&;a$qi?*sWaphsq2Q;JmZL$gRtbW9
zV7ON1bdJD+O(fJ#`rQ*(1Is@;(^FIjkxUQ5ZQkISlk&O}&MRq{%%A=8CbH%eS_Qqv
z9ga>tVim`6AZ4R+AWEl6`wr~y_1&QAoRxDk+i0?GZ^=z_d*ZI7y>?AR*%DQ#nrW3_
zQ@TU0!+<wmpkV%J4jX4CiGX+{$_}mKu1+hylLPoh8Q<i}{5yQn9!9j%2#N<e3mHEU
zd5K{IhGO@Ia$7<MA8zAb+Gb}dZPQ*H2g@B}Er@z_N{%P{N0ZNjjIt1Td9rNMaQUFV
zH-NNZ_m!rd(;N)OLV{ibVfA19ntt*ka9@w=^c&e!hYBHQon<ul-7m*?=f6_xH=6Ii
zUQ-oYO&6)uTaL=BtklU(UHqBM$F#rS$h8&EOiyv;^}boHci)$v@32aFl_mUCKmJCW
zEl@~XMB_$(sMPswLtA4;^NNqI?fej@-8`Y!!)i;Q>$0*csUNV-qt0(UC*^x?m%)G~
zhE)ql<GnihiJ#1yy>EcP#)HpijC9|IfyW-{<!Lk!Gq!;Df~~MexwJzcY*BWzF#Ogv
z|HA%BOjb!kV7hL+>svcONG&XL)ZEVPE+>NRkRDk7mXEn5Q9rnV_xMHyp^};>HloA^
z{}E-)jjDSD7!3*5b4~FMQK~9f;~>$8*b}I<YH#eNqo_^+clwV6LfNm{&;VV>{>ArV
z#>v0sim|c#2TfM~?A_kke@WJ^kl-Lg$fVd~0+0v_w1J5(@B<>Vsf42j-#;08jU_p9
zNIo3q8scUCGIFp$G1ygZutby5*eOg}DDa!pdIwi^i@d`n>d$-I(>cq;Uw0#c(7;Rk
zR3FOjFbHWxl6+f9Q<)RxEmMmdeN_dclhR_yxahc&KffqAc<|fHADBUcmGs{Ny1QGs
z%s;VIF7t4HRgupn$@8qaUX%@g|C1mC3nPzfKyT`x+~OAUP|)1g@jFM<%-pFZAR5Am
z2Xo(YeBfAf3KApc4&gA!0X>e1C8pLtCr1GSX=8_2TQKioN&S<P;jALUnVj-AAz#AV
z<0GsEv~F<9gVSIWQVQCoh+0I7HV7Z$%i^D@UiJ-*q3xDjLBvOpLMK+`yI0kl3P&h~
zzk&I+GT6)+p1JB^@a^UAfhhpov><te{Uu1(4UAfW7mi+)q=lgF%s=(}05hq=m@Cae
ztRXBruhkC!Ge^S>Al~HlQ+*vxSwS7Kq@UgHQpi~&E{-VNHq<SWl4L>K7*)Z}4^bsq
z=zob@t6#7g_S%K#EVyoud9AJ=q^g1Df(PB1<0=%!T10p|551^esThrb{TlsXxljve
zhyPtx{z1rJ%==skMrn;bon=)`gi^mrn?JTa=^u*R#oKnUz$bw+O4@w{XR<_rFqjEQ
zurOuY2F_sELP0G>7<On4u(rSKZDc_t1ZJLuHV*M+)Cci0lV|nMUIQdg%|EvR%9C&G
zboX8Aj0B(Q5KA);(EH96Uh%{cF#K?KOT#(Cph;HFATssj7w{*T&h1ALD>y(<9EJB$
zAEk$q*akoBXG^|t1P$8^MW&JIppL4!NAIKc*M#zi3a#Pzx$e(5RAWF&OVAr80#1EJ
zc65}bP9dD%zBk^4T`|Em(6+`RzeM`MjB>R<fKudW{OmNZoZoSw+?b!c0V){m7G4tO
zeTYks<PkRglE9A6Lj;maF3Hxi+8a-HLL`iNo1&X4#&nxzovy`GKDDruyjKa%@;c-b
znwmdGH&k?+()}dYb7fModDJyb<vLuNIZY=i``e9@?B*i@VbbirCEJz9HS5IMOWhKv
zuSzY<$vCQ7VUL|(Q)Ovg;>a_o(x$bH1^nCvNWLFjYueAY{m>-#|2fmIJ-`Il5o|2j
zV;Fyl$J-YT(oaMfyYo=n|6xVV8aZR{Gg3P?rr8M*7JLz!rBP$qnRw{qjwyWM9k4m;
z_|jvNt-DebEkh$p0gz};13`-xkmzAKDodfu;BJOEn^&)1B`h<8>UU}x)_BM6g1QH3
z*8VtEdLx(ibjRfT_S}(ufR1*WpxQokS38DLwg?{jt6u<c7DV^wMPy*e`U&bk;g)Qv
zESBAr<_?EeAa{}TUVI1^45b1^XfL%gfzSvtq_E-7w=WkfAF&nx6e`#2qP7gpG37l9
zcB1+6=6T%dwMe#6nuh??jL)!H6!#=S5HfypC%WpV>${B-k5nqQ6AnVeQ4*g_HV%lV
z(R=-b4M*Y&<%v!BhDlt4(%41}K+fcqi(Xi+IdlGD(%gO}7oz(DO3VZ)gP~`bW<guY
z!eIjh)$?QGTBJnWrJ!ymZ%ho_y?Bu~b%(2<LPa>`r40abr}@A0PnQyJoBOg9mwrX~
zr9$sxdQ)$MlC~ZE5-^u*WL^4uem?56Mo%sjhO-V%p+wz^J+3bRdnLj9xZQ~#VU80d
z#!}|n`Y-QYH+VoyY$NGsbMSF{l_#<!*z<SbBP>5!PMqE8@Nq7<FzqhlYSX`;jalJt
z`!p`w;YfjPhB&`@J4^!w?c--v_-{o=<}96h{%tMuKjz1ngkIcU4}CACuJRQg#t}!n
z^~aQhp?T<-;*i@|jaQ%*Tx3@N@x~}uh(#CFNlANC`kb!P2kK*Z3wx%a&afi|HW+h$
z=1rAJnQ0D+2)ArhQx}S>iO$}p<`!jEikq+$qR>7!upMFIJ#QqWM}=Sz?u{yT@hp$J
z=Ur)-R=n$Jci-k;;e*s-6^XfoocM4rmLWylhsc!Q^tZRKN6-jt3ky+c(a&HMQgO)S
zIQldNV_<vg*QXXM*yJXgf#edJu4-4}jzR0G;)z^bvqy22YSmpac0uBa5}bJ|af}n%
z&&UzM{gyAT2ae-NLvQN=k2N37_3-|?gSeY9wd}mvtk&ThYu;4DNnFG44VX(6`F_VL
z{<tTU2EW=dRMo?to_k7<_>u>K{2qxRC?Ob#2$IUX%Iu{OKmuZ-j(z?aI7>x0KVFOs
zA0tBr#U1vsIl?)r1v?q(?QWHSf-oZvBO)M78~Z+{Dibznb-DJ5A~Y(Q7VJreB__n!
z&l7{KWs2cs&aLg9!;ciPWuO%d3VOMLGs=JC2o$DCf{=-X`W1voFcuU5bt-XeaxLv;
z4+R})BHoJ0WAUVE!_=i)4C^VW%wtbLvuL<w{F-z*)9_WL;Zqmefn_>GpJ*P5of8-j
zuLs_M<87HV-|+rPpSOT4#-|6Vv3jAm$#3dNscA#q$9yqD7`$Zhou(2t?{+BA7HKrQ
zRVMw}-^G@Mc3jE&zDyfJNiu6yX-YB1gZhFmbyKa$hsFL3^o|NNgUjndYIyu!P}Fcb
z&-9Meedv7ObMkFcYb*fBtg@oCzBP{)!GrZsiY*p6&ddWC@<)5&9XNaAGK;T;6my!z
zt<9}>_6dhdOCDV5r_6{<(9Qc_W(?4Yz`b}y^D!K#|J84b*?@B^au3iuYa`+j4R)kV
zl!RhZh|^kbKmWF{Dt3?u<}w<vln*W?l>XLQW5Lq(fT7v3oIU$j?4=?15{F3CtTh9J
zlux7n(z`j2w3IY?%e#6ANFGzWx`3nWG4@KftGpJ0EHi<BXy-N+)D_Vf<8TB;f@<RM
zo7|m|JMI39k3v^!H##iAB#?JMVbqyKT4=gn!z~wl{y5ld7j2iJ962yUk?840Ru?wz
zs(;;W&r^&j!?8fINjXju@#@j`IO3s_lNy8j2uaLcfnl!4=l5BgewI>*4n{br83+C>
z%(79%&vIT}ZLvIcFi9P<O|mVb%9^CZF-rjx;a-A{;OtkM^M<as?!y6&Y?~|{2R<l^
zp^)6G!x1~DhNy?Vf)-E52F=NuesdvFlu(m@xD**B5fa?TO6JIg#W2iRrv-fpwPx8v
zhfkAft9E^>$H9QPq}YGCJzrd?BKM@rluxrmE<-D9_%?l9pqL<L3vK~JOvXRZH!URQ
zQo)>GiBPqZBB7Xg@Do$yuhZQnvj&Hr{GGYx9Q(!F`3#xGH^VuRD_xhzgoM^~OudXy
zaj>Yx(j4lQIfsg=!h%nx33>Gd46bkb6=cWgP8=a7;rVn)u?`J3q$$*Bag@(6Z+{mF
zI-t!9&NN|1Hj4v%QU0$U@@*SB0ebR&tHr*dOgh<F)I<#s`9WZw(y=bL#*9JOPPVP)
z3M$?^X8TJyb5iWmojt;`EO<*D3y;9Tti&Y`HU!@D-9;sHrGpYYEHRuyn+fBNWY%(<
z-Kk&+r<SicY@L1v?mh+TW)q4GGc)|q_QB9?CX1|ApkCjOvM_mfy;P^=kb8nPuF6$<
z?|*p#u(OyJ(WUX_wF=r1dur=)k(4s|OMt00RuYy%I)4*T_t`lOnAZ%`W3rOVf8rxc
zg?kotgFc5<xTwivm`MuGfHI{lNSC0mVBE*nF;PHM-t^UDRaN!Um!vNWi_)Uw-ll9>
zu>M!$$f0RmW{T~hq9R@fUk|-`ddf^EU27(vu$RhgADxny!eOt1n^Nnas*o0|t!^(^
z6(90G8?F_&QHb36D3i~u?bya+0}BZiz}QWv0ohPC(}Zztb^%r@1VxN1y|m^>h~jeH
zD8-*4xLc1ZNt95Qw~T{pPN5kXAyjxg+&p8#k0lwio@c&{66?+Pg&o5&t9@u6BYW}W
zO_19lebRG-G$9D;1IbIqLqmG7>6T6$RpF%R?q3@%z+z^ePN$_%(j7DD8|H3;px_6Z
z{<pLIEskT%E~rmzBJtvhq#)UfV2hB|N}X-)82kh(lyp(Sn)CwFA>t|l+23v{)m3>s
zx+Iv6zW{WyB;3i3`#x_tR~I^7ha>|u2ThKsKTJ?@)h2h6ULCocWNS`mVXZJ&LTEYv
z<B=9>AGuTadP>w`kuYc?$OV+B^DX#?JPW%(^_O6;7w1p7Eml;s`02ysu$Yz}tt-Z%
zBBn4)ah=|_DA6=)aKD0vPT&$Sws2x{h$_2;$$srffT=2jR-q9sJ%Sl3DPa~XVakQ-
zVf_eDy|j+L#k{R!0aR`+?9BwRrJQW|N-f*r>(CB<HakK|n%i2o!UrS%{ZZkxifoLS
zh7XJ^H8F`oigZ!miJwK?uN%i|I}8auu$XQA^AI33AiV-n{gFj=inx+hnND6JQ9rCo
z8M6c&BTD{gyp8!pt)j5?*=>k*nN>0)e1`<u!>m=3BD%^H&+<DT=T$++^!Z*=Z|?4o
za@W)!J&DrkO{zV9+wYc5A1f~(@-B%$n)?X43tH`U2XZ45$tISl<&rjG&eC~n?fqX1
zj+?ItU9sC)ExQD4K{nrL9{=W6h;v8+J7dsb<d;uGVzaTMv`$7i-c3t|yV4ha=0Ns2
zWuHK0G{K|oYH)Q-WFRs+Z!ITLNqLjH(z`##VZrsGrn-bCn2-yf0aNK`uLfx>bZrll
zZLyNe|LHA`yF<0`fT6q1@;l4C)k8L$oV*>3E1K<PD^cPfVtB>QVQAR_WdYkduVR?{
z!{1RF9zODgvaVAgXV=EHJ%;R9eaNE=3+K8<s6EI1p%_2fu=dA#Zuj33sp+!Te!qq{
z1ypelSTXp6<H(So8n3dcvmjy#^2r{XroJ4@+Woao(6>lyqgsxlOac}xp9HMq`P)fP
z*)TbJtoX+|n9Y)8)Ds5*a8~^7(PY(6*{a_~q)HY2m?t~(0%Uy@)E}&q&6cEo6VK#r
zn;A*<l(|$;&3MRoTiqtogFQ(6e32~{3PHR#{9NnyuBDXe*zTO)FA8jWG5N}u%-C;E
zqfp3t$FHzJ{HKJumX-5sJUY31?Rm){8Vh?85H4=F;%aXm6MTb6qsauboh(h)%Ms<@
z|Ao2_sxQgy1AWB-KZJF)VJJq`;Y~p(oV5CAyAN%Lw%&=o0MNEDYL__Unlv%N?t&|k
z+2eR$kr};8Zw_`6HYywn1@1#b={h*ItgPbU2^Kjlj2VTE#m-?^TP<NpCw0JCxmt<a
zJTSTNC^TG{=9LV)IY?uaa+M&XBK1D$_o!xu=By-Rp*j1KwASZ|L>c+vFtxMo=cnv|
z+|m1>N2}!Xf}K<6R)5@HY{1@%2we$0sEhp$>d02-1vG5h%~AC+!($I^78lQ)q-}QE
zvsV**`}^|-R|fq!iPq8$jZ+2?FeV|!)8tI-1qIr|XsTWf22m{wthza!6)d>~&v2O1
zUj__({vc?m;r9wIwc`h2T*rpmW;0|h87wcL#h~;<V(Cj+?TGc5m{KBxr`(w>*%DQL
zrsHDKsikZjLBeFBPfd5JxTs3v-)fm9^#!uT$R+iuMO?aKnQjc&b4|QEiPfcbq^KDv
zkHjPu{5j2D8*fkWYPsq83%@I2Tuw^n`0<~t<|O^eg0;{`0ekOX8H%Yi@nka+%XoDP
zjfDFeJ1M;ayo^FiD{EX$Mi9)b{a^!~mzRZofGl{e7nJ3l5}HKveV^KVr={U$aqMcZ
z)^gnZtV<v~yg$3mOQ$z!(ZW8ufjNOFL$fjfq|eE1)w>Svt!K(vpL!L>l6KPjW8FCZ
zP)S~T1La+AH3FR7`QRO{T|bO%m*tlb(Ktdwe0Mg)3fe3Q#0Su8CVJW$Av-pGna%C!
zzLYuFrT2uePBmIS3RSYFvT@wq^!%Yl!O@$n&oC%w+P%82K8~S~y^{->U6nRzQhz83
zDpzY&@(c)`##7iT=Qi11l_vfbF_vfj02qwCijJycdu--s^v8gz$+$@@xk;kaap49p
z0Sp{rjuns+EENcq*k;4eAu^vF88i812?$S${zqG19aUAg^$iFI>F#co?k**zr5mI{
zx}`aQG!oKrXcQ2T?h+7bICM*QcYWLEUZ0Ea`2KO=7-#Rj)~q#a&0o<|;694r2G~>T
z+HZF^csHy|5)(exE+Sv@@)$mdR|F)_qj!>K56@6ymFYjcZq>U&477CG&q+oB|5`8=
zKlkZy4C1t3B9iXo{*I7pYO+plaa+p2eih|!6(m38%zyVEWE$xoOxujl6dkKtI<(#P
zf=t~<Go3|2!{p6}zvSNBK*_)2z-LU+xK&JRYxW8r+)d(jb!C`T`ZXdxNl<SK?$RX<
z@{+QWeltZ#sR-g_-nPNx28KQqHLENNVR%t`Wk2U$Nz<5L4ChRoxXZ1k=|_5UUj*Fn
zcB}&GSeC)<>E_@1hWxm9rNfHURDY$pJ6*|0nsM4vt8f$d78+*B6z^Wc&cfmgfQH{-
z%Pmh}GY3aw&SrPF0rmSF6aDm=%bY-BV8qDJw9`H3a>Q>0>)lQ(vzbq3Q#liP%4sT^
zZ{VJ2J)yDN*;6exa*W75>+<^X8I2KjJ%}nP%McjB=!D_gN@+Q)Rq80H-DH$`W!3s5
zD1c$%Ud=)bMfqadZMMu%R39dl5ETgB*}AkqtPPtv)Dft_CwGenCczaKzeoFbG(C&<
z_o59REBzqj=zTLS%IO?fzwDAda39^4E?m&f?>LzAQ0vaHr2c86rR^bQ!!s~QKFBkU
zNCFnCIu!CF@2#!Zk(TZF%)&;Mbv4*+*ktc)j(l%Clf1e*kS3fH9TEtk`~?Gxg&hZz
zvf*f9!EoWDIY&h+xUwL7K6B+aR5{(5+H$7LnAUU^;%<q)5R=P6xQm!7X!}N6Bk-_J
zWnV4dZU>u~6MGylfBtJ{@DtX<Gzy=gWMr?U80ZDfCZ$(~u|i?{g!lzhr>0n;*rZ{&
ztA?Obrb6t+?O}6|U}nAV#+G}QFXFZjJE`1FMOEj~t>>UVO0pTLt(@~@J!PXvW43OG
zk;CS$K7bjSXs(98-e777u87}`8@shxG!naTKovF20^G-$E`hshHze=V5oym>)V+Md
zZ@C+5Ys=Xm$U78x=b;C^C?O@scYJIISH2L>Df*f1>_yM(`NE4%2NqH}!Su406=&Wt
zJ{<}Qdxw6=%FYiZL>bBrloOXiK2L`WnCA|)ne>M%6c1A}FUvgBru2V|eYLyT$gMBk
zZ+-Cfez;le0n*uHcR$Ii5-yq$_4`FK!+m?U+%puTvoG2mSb<N>9rzD!i0bu>xFtH=
zF}x#kY2JbyRAe`h_K5hJ49Cn)KFJigMf#~ov9n{Y=LZ9C;NypJPImhq=6tt7e;YcN
z%5|~Y8}G3iD?Mcfb*-{%E(ES0lU~fbXJI`RNS&B3Wjrul^B59DvK$?#wki7O>i~6q
z+Tcw3^W1PYE*(!6&{8eR*DE%%hX!#gqjCorpLHKKjSZ$BL+tvD9F*%3*NrM!TCutq
z(3ekm$v;$Q+Zmz%`fgCoSPUw@POks;L2)-Mt>N|3Xs|Q8#cP`mJ<UC5%JW<#&x5)Z
z^r?3|bIwD;xA{htALmW8-bVqLPmw@=@SvOZ``(Fly(}JLK5^3qV(_#rdQR)=wtL#b
z!?k|lWLCbqzlqg=AH&oM>bA3A1X0h(_E06)d0GJ*A=g0uc0&#<6;^WXIS)Mi2a}8S
z2eHA8gHH2mm*#d#mgfV4;mxeK2xf)R#`~$WnD}XYq0$@K4cLcgjtA`Ey`54&y4Jm#
z*~q-6*6Z=INN?v|o*9E5w`CX<B9TB0gK~9sC3P{(Zql9nkeAN)WZ^_{DaBOv4t;Dc
z<vODPspm{EnmI6omAq%vjfZ`VVQ`%YnuWs|ovR>69Kim3{mN%@Ql1xYXQtXe#t??y
zpd3H9fJyA!;(*HQ!AmBUj{wP}fJR89eg_TFD6I4|mZY{J)j{!mIW&RBWS_(GHIj!X
zTH8on-#xNczD-<AZSCyfi<zUQ)1*KE6!sTzrMK;TZ??jGfVe-EyLiRg+nzcA06H)M
z1|kfz2Lde!%po>5Mw&^H7v7p2>-XNkcmS!Fo&z*R?M83j#MLWV`rDM5Jaa`oisvYJ
zGiD0_!iK@(yU*`)4?#q(RcB&y$2FW218@$p-{n#{12@*Es;tJ^$ilqHF=3nSlID(;
z3w<Uvla`^`F)ALnC|tbSSZO>&?7b#*Xp$UoojC%f2fK&@a+c~UUtKhXBS+_GLP=Ai
z^JGsxeq={8Sg@#l*?f06l-@Gw(JJ88<?q*Y%#+xk5}goxG<fjt<3+jsqDa&2abLMk
zsaBH*JAeq}U-WEpaT4sU)A`GRo11&8(VbP~_VAUOnwrto@tW2*QzTu<_jT7z8(uI@
zCtU*Uk@S5Nq*gO<MW1OxbYFT}u&DU>2$Opsim!MXSP-6{ndydbX70C?x}lBZi{I6c
zI98c&i}?IfgZ=sC3%m0#Eq4pMVhV6O53+O1<_p4iemt&tUC(}sgofX~Lz+4^ieF-L
zl1RnE1qDmfuyKugl+Mdnd&t_v`kJ#QroNU{w&PsTv1ZK1nSl1a%G!Amp`!8;Oo_x+
zjll69s`b4<G00E3$mc|H2o)q4dkFSLCgpef{`3V`U1&^94={g<{r#zBBq2N8^73+M
zWTffG5hYy<-Z3$KaPyZhFK}^jmw?|4@3?M5pXW*f^_-zDplL~AjAO6lLvhW9@WG4T
zfN7<k8xclElo_;!qM{#`R}-ewsnRj|2XNLmldbo7baZr=y-L1;b#-+u2SK`Z&HmB3
z<9cbSZzXku2PS+P>YA{tUC)NU=9oW61r0dmHxyae2ewD20j_Fp4x4m?g9fDK3o6=i
z2?p9}RTUR6$-&+%LXgxC)_0|)UIHQ&J}^Y2SP`K?YM0lDGnxlSDeXov5_;J&Z~|I_
zf`YS``Ere<)`u$k%op|WG}kEbeM=~teoMrWA3{Qi+dZwVUv$S%#6(7--m5PnB!MrQ
zP%sgV2+nUrn3ziTS|&x`<QEop_DGmiBl>rnHF^V66(TdKfNp{=ps#b<7HanGRU^$_
zQPCES3rO3RpJKnB2l2$ZJi~{rdVW>wzTG%fDeD(~wJ~?d8_1WM!Aq2hA9cyuB_U%y
z6NcYhMq`&njzY&i&IMS(dkm$mzp2P!!C%tSApkeD@AE~wS+c@`+q2I$MxL|f!6DF@
zJ^Ne~I1O&6l3Z<nE(VLNY^03fGMWJ-(ntgn-GHQ<2aqb^_w`mT6FWdJxI*AA4FWXT
zkvb)M#j*?-j4~FJ>*KV;!(_;ZaWrBPqI0HbZ8`atjj!rnNB|*3%}8(iS)?4<=!?T8
zTnG%pGqC_)q)l3(>++cVyQ?9;!K0PCIMU>(T~APRStBa9N<cSeH1K8sXmgVt_<-Jf
zk&aidKp<zBi=RdgFpl*$$jbh3|9w*c-mt9aspH+*WNj3MsKXLWPYec=SBw{h>SSOA
zlJB$YUnU7jWHuzy#jp^D=-enaW6C0eSb&wa9GVdS4V2y6T}FxE;I}`gT!uuoGpT^p
z!6JL)!Ssy2Uo~^RiT}y`?4`T}-^;-FqA59o8Mt6^_Xgq;6oe2NqqpyoUj`0b(eX%_
z3Niij-0x+z9W{BUgj1k`JXwMNuH%J9g|peOX*>VBW;O{px%G5T32C<h<7WLzlKo&f
z+(Y<)<1g0UKGZ`vioqMdIq;tig5)9XqkKj;<o#rvgrxGe<PmUoEJjxEUYaSCrcK6;
z=l-VVKfiv(U{uMyQbAw<W`GYO<>Yg@z>1NFt;He4B0=ye|Ce5{7Vr&yoSXf=^TxV>
zGcf0L_F}VgI^t@mZCBI(tk6FV*_3=pTtUA%Z6bO+=f7`n%Rm5lb2hE|S|5xsz|5f=
ziK~eaNT)t<xh+AXn8+ngOp4fCZssuD>nVnu{0bu9jnOSBP0hvkgA~u4`5%D-w&Oqo
z`=A|<={EL$v$8P3{d~7)DuGu1r;O`%0#~|F!dR$+pmhb~SYSvuzK55Wv3Ur^R|C>O
z{*@<~s~c-j_V<mzorHzgj>5>OoB<~m@<iqq{bTumR;UhlU&-)_B2!I+C6iS=&6$kx
zg2Lvz>cRNiMP7U^9o@YA3iTiKtmovm-|y{-+4;vYb_jx(ntEZMqMde&g#@F5gtySw
z>XnWB;cJ>|QJm>xq>n@EU<KgZ<^E;HoYGQXu6Fl<sLHbO9Xfnk{>?@v4gT%QJh69*
ztz<mB@8UU+@J`TKCB3J&XGb`gAMXd@R)p&Y;!4Msc<9qahyzT{OAy#XAFd@E27wfb
zDV-l-WO+Fn|A_Mszn?8tzzty6X{Wur6A+cdIc!ftyPP~HCgr!{)`2BM2q1I+x-+$U
zG_XZK_u!3}>D!8~nNAX9#tFtGSY8>0d~7$8_Gu}EK@dRtE-6{#lc=fuPM(R=(dG55
zg}3;>8xfME+;E|KgM$+}mLfuxJ5;Eyx)|v$YTw35F+t7P`gu~^sOQNvxFbD>{&tda
z+{4&{EO7{_BfMT*Ch{m4mD8nxjnE}^nA5F%&HjRf;oJ2Gcfui7VCsRTT}}Ia%Zk$w
zpG~HuAH0iyWwH72_Rvv1+8;5+C43e@pN2-U|A4I7)z!9Gc99(ivisyZ;Nfg2oVloO
z(U1OR1=ec}duptHQ{>dK0UFW+%n_RqKCAOEr_>n0kg{%yxiy%0C>pNE`Y1e}-lsrw
zI6YVk!SLcQx0%&G5M-$>>)BXl_=rmp;rKasMp3T^M`LoLx_JZTUm`<1K{n)G<k!3V
zYnFqu=}b&KU$%Buz&jcS&>b;lRRvtl8j#iG-DmiR`fB9*u2L)N_c%|luihK?R*6N1
z9>=nW&CAIOS>|O8uLz%rGuwIB;a&(EhIQ6+pjY?_YmeMG)ZR2We(pu^eSqFrWV8z_
zwRlb3ME4Ep{NU}>5Nl1Kx5%r`&$5iQZ_ec}WE0twFXwyb=<(~nCe4`1Xo%A?FUg@&
zTau(yp~%Kk%v7t$G5GW%X#w7DkF`({Io{B&GjYD!!`5E-XK`A-W=7Rgwc%%ivN9oF
zLSAN!u8p43%g#!?XP@p))po^=Q%V}oR^D&LS+@s<!FHQ+#;e}ae%$ksqXM^QR@JA&
z;cmVWYqg$1^yNN7<4gZEcAi3CIwYX(Z)GypIEP5^$9gPz!tEzmlxz5kK7aQ7m6THs
zY=+MZis|E<-ft)Cga<u^bQjlfT(TtvCYJ_t>Jhb~He#P#&|K-Yz5OLjT1E#r+bHf*
z38kJ4TYv5p%o;bD%m($7@5FGU1hP9vuD(Fs<bSrC&HinYMKAWZdGDYVzx#qRWD{S`
z!=3%5pk~i!qSyQOBEr6^d6M;4YxAMNq93Ce#sbEz=h8*M9ZKvX;;jhV%|&}WgCgZ=
zx2x3G_V$)6r5^_bF~Se2cRjtymn;me<$KK_zjLwjy-tIs;lw(>CRH%WeI-2WkGi&F
z;te=)VN;u=QT+55740)aUo#sh$g;F%hXXSZnd|O)k#CplUwboiCZDS{<!M7L2j<F+
zpYYhuK*z52_RZnm0~1NssCbLjFUCD@mb3VM%8q>Z7Lw)uSU}+H(_>J!uwplV+H4re
z6hRx|uAY*(9`nJMFgWQPDofs>qt+*%_w|{`=xXh2ou|A8q}GwryVhCnh<0CxWU2l+
z^!}sBn6MdDW<$%MBv2r78g5}_0Nhcm$f!Ql6*}X}&DmqU%DZb<M#?#rfu5xD*OQ$F
zVm%=8c-q53`~fsRo?eVG=^HAaAlCIL3^50PUY2BH%iZf8A;uOV<4-{+8eCiglW-}9
z=C1;Tswj#y2|5vpPzAgs>xKW->ECBMV7O*}YG}}`T+<F^<>pkn7s#L(%9?S$uqJaq
zK}9?5z~gY<T#F-N<JZu6lJ8fLBw<NRY7N1s?n@d#?r^8|gG4`!iS1_q1>>`LftBi9
zS!-|8l}$E#C@)WLL5uTJ5$rqhU^Lf6^Xb+V^lVfRnZAmz)W0U}_bGU)D|Uin{T?Yp
z9lAL1M(*@1&)N(~POPF=S<2~uz^{Qpf*(r5^<Oj~2`dStzg_?Aw2GUBM9jUZD<J%o
zx9q88;41d%Cz!9r8Up&0zWxb(hPO*Om?h~1K^r0^os8JH+weT+Ik1}-Ng;%=>w{n*
zpvcAd<Umrm$q_d*_T&tIk(!S;>d3ZvId<-~{K!f9XO%vf<r_p$i^`-gI%)9lIXEpo
zh$#=r>F&B{jL_?%(9_@iS~!rTeqP{uXjq=-cG=bN6bYARmDBK278wZ*p1baLi4ld|
zvs4GJdcrQ9xbDtI8qHu))4pnb%S(Yj+XTtJfeE*@fgXD$&+D_@BJtCZx7G5P@tDhC
zsn0ql1j1S<W)BE)7!}1GiS1ua<&W!YYcW!76%NnYd-A!qU$~kBN78>?3EV?HSofct
zn<Y-_`Y7K{$Pm?t;mH%ibnNbJi0+g6=jye(@9)+MESspr=OtueS}k8gM(EUbl<CD+
zL>Eij)3PRVUpKh&$bBzl_S30q+?>5(=1a5>&MG4q%vg%CNeX(~@eGN2?e1#ynh@((
zFb19L_c{r~{!bMlQ5?lvCiWU6vIh~Sfh5xT%5dT!aI~q=YGvrARzlX`OZj6y)pQjz
zW0sEG90e6kjky21fdGXeesD9~(B1i0XZ^0ncw~slH1iUTFD44`O(q7tcs1YlQla>^
z(3A4&5x;=VOu~9<&A51D$g`xxszwBxtpF!;1w<Gq3HzDncDcTzHMxCUu3hJ>#D~3;
zQFZHqMkV~L@a!Bs4qx)JlWAcK_BC<(MV|+(EjIzc%HO!PjW&oAUr)Y4195-I&H|qk
zy5a1-GykGAs9z3KZ|F_Q`(@$HzM&%dOw@GcMuVTE_N#x-BC!Bt)?vzk6p-pCeR)(9
z#8Ja88(L`y$cn;@hfx2eE2>eY3(fq40*&w45HgK$a1HH@pAE*xC8fr|8M$(K>Xm$j
zpf^=FpA}(FE^Bm5uv3t&)S;3y<7#7i@22%Fs${GwXY>gnebvR5vINW@P(gdw^gafy
z*T|4;Y#=q$xi_=~T~<<7{TN(4@zv?3;alK;PNDy3*04tVZpT+$gjp0Tlq|((oK(|g
zdnWc_HG{ES*sWRw(ZdkVfUK{Ww9n~UqV6KkUI{c!`si0b(=sPSi(|>L=%^{Dv=92Z
z3lT`Ov=0Y?uk<5HgeoT&cEfh+GW=UxMSX9I4Rfxc#@_ecE9E@UdVMlo9a`21_+p0h
zmaxYCCNe52DmzVSjnMz`*&mJ!;R`LH5LIQ+c>(;DS8soIK%791D+`7#0`wQF$vsON
zPUORt71N;Xg*^&PHC_2#9#_D9sR^PhNruAd!hzJU#l+yZLH#ek1Qd)ktGRuiWlq5l
zg?b>~iMXzyOIqNJtKmf>gT<v^(BCk<c!7*@d*uE@CcG<i;2|J=Xz{~<wPQr(Gaxmi
zWO$2`+V}0KXK^tiApy6xh=B2bJ{Az<WWrZ@S=#G@xRVywP6Bl;P;D*S4@^;)<wi49
zBg($p=F;`v8v5ee%5&wKAV^DC?JT4afA8&wv|#gDx3r5cVg{oWAc*P0a%0Z<m0$rL
zMsUAgF_!3H5|a5Sj(0Y5j4)nCg<AZO;EVO-z)_Wft7&bxfPjFyGihGRo9}c}r?-7m
zXV8OKK4TW_Zh2`B?_=#9^ivXDRhsZ`EgjE^C@hPMzhArBIJE!ja-zBT`rHe$({uOe
zltC@=XILeI9=QRoes^+XW|a$*VFSEZuJkqW%AF#vPKB*sGdq_2=UtN(I*#l}c)L{Z
zdyv&$qoovtHu8d>k*H}<s=?dsW31xKu{WD#gEKXCuju2i()x+Nh<^qpqypFWr%2*e
z?~crBs(Y@-WnZ9>T@>jX(9F8>jyu0)n;QGXJ$-yyr8akVGOMht6;x{95;0UO8YLx1
z^LC8BFEZBzi##c^t^8S1mbz=Nl^Wh!4($fpYv&kB+fyw)=QXGPEM5!|k!G6?H_!aK
z$2v!a1sG%0MyqBk3%v0J?0SxfB1O0{RiuwBnW|$h1xgTuxG@`Y@r?Gd7y6P}9)+MT
zb)MUsZ3h~Kpn`D1_^DLRav#+&kiXUFjD@}ENSJYruO35X$iy$TFzBlV3ciI<&p3^j
z;P#5Rx70ixjXg%nI|h2wGwKQLMoOBauM%TqLVKb_r(k~29H@!7?Oww#dOO2NySD@t
z&@)nFk48e+fZ2Kh*|FU_{!0!kyUnXZ_}3}TTGlVtK0vCirr+p>g={<h$;)UbgF}B1
z<`v|dtc^Oed#%S{kuNl`-iTbv|L=HY^M)6q8iLg1Wo)jkvJ0>{RKYvx5a&xCaU#v^
zN?Op)Hx!bajlR4jAwn!F1?vyoy~Tj%hVilXLd%@jo=i+OxNtvB7?*J>D~mVNGwxYZ
z6m?hQ!dTvVLqcDZHYYV{(g&eo#<*ePx1w!vA5S3?>ifxfD7mhJi;tIER0nTX$eF)Y
zhw6%bYNcDH0M~lG9nKTHR4yZHy*SfAfKMK_nXE<I-A!qHN|?vM`n|5g1Pd3M%2sJh
z)ACQk;6EE7tbxn?Xi?7E4k-u?jd^$HQ?D|kTqRlI15BL5K<8QNEF(T7Bf=>%L8x9k
zXeVH-*pQ)#d+XzHp&lEW<QO!gb6E}VQzqy1p6p;!#5JhqQ2q5!Bn4qCylv)r`Fz38
zC9I9xHJiSQf`q(3jLLO+hV%%@@WSXe2G089SF|5HQEjpT=3DXF2DYyZWNi-WGTjPc
zwaeuxa|3j9U2sZEMR78%(q4Bz72V8ZMWIKiQn=3HM_Qa)G+M<GdOj~^IIa7knC?@M
zB5^$XD8>%$^sSd6bfsLLSd|fHbd$V#yuzRxW+u-!HBUrLht`!T2lQbcfWLN~GXg`I
zmCc2#2|!>sB#}p&`rAXt3?N2oQIxHHjh6Xd)rDE%4kFq3UMk3Ac`gB_KOV+ma0(`O
zT-gG5Jj{GITT3mumYrPXiOf7#|E9=H1Jp35N*yJz{H?*q5$4k+B*t@J+jieA-|b?~
z(CzG9!BOzJa@Fi-`r=7{<sQ13z7)-KrN{F1I|*S#h>|eLMN?ShUK;o_&jhA=T=7Xe
zd@su7DeEtYCt|hwuqOUY4_plcS<-6EPGZPXl+Rgm;{JyddIaLxsmYPH5v3Z8gu5=e
znXoR^Cq}VHA5tR?7_vtuXQ-!$17~Wtuj{pr(X9RZjLL0jSRVN+fQW?D`>zx9Z?Wx{
z35TsC$wwZE%h%P$ni@3vDaHpK>$nI(qBnN5su0Q>vg^6sAxzMT)*Tkqc6F3jkwQWD
z-;~f^xHiAonjpemvUNci7ki_N=c<<j3Ovu57cQ%(gpYM9Vf{v;0)P*>rssmfqQeI*
z-#4iBaDb|q&HIc<5Dfo>NdHO3e8psQ&J;(>|CwjTR=c??YqZNU^X>eEdpYiP$Kun4
zCffb62~jUN&v}EMGqS!~>PCp{@sk--jW>)=tFHC%o|A^yA;koUB>GaW_;1jVXOrB~
zxt7>_8MS~oJ$6JyO3py1iFK5=XDLX<H%{?o+?XGUO?1))(c(G}^eaTbrfBeGgF-j8
z8!B?&mozi%6mu@wEHyNyY8O728|%aBLS!`!jbFfkWIlc6NVpW0s=7SfHM9Jp&tKS%
zld67XsHv(ixLs3mfQ!o5(~1Z>Xv`9G>-fHR{fx|^`StPRM}MHA;J`D&!~9q|fA2UV
z5(hfX%ScP<qE_X~B5sa89;S=FrggNi!O<(1Ngs64&N?9_rhAF}GtFT(cg+&|H65F5
zJBTZlVVID@vdN)pV`2#I7N!(T-!utPyD04$z1*|V3^7URm)d4rK@m;R3(<9(BobfT
zt+=l<(t%(J(f3@xbjEi>1)Vi#CV_&_Q<R8M-F(P|%w-i7(a(L(`Ozu(!<*7^fGqq|
zB^lv(3pQW4IF6j*Bq4B5U!UW%3mYvPk(XOrIHBRul2YB4@>x6x0IIOKkrAZl@<`&3
zM+`{VHNDZg5IB`U8E0_ELrB`>?%Q#i!--*E9!X&mmY$W9XU05dYd=XN2Xmd}dkDO4
zixwY0Oj(~t+qvYE-iQJ@whP-ny=?i-<K00WZwuhYaYtd+P$H6rluQJq=GclX)m05b
zY7)5mlr#xSyt#ELp`c!IQPgF*HD;HSCR)VZO}f3xJ3jhlvk0oAqpAvIVDeVPv(`2?
zOlBJe5084hB2%JrR2it~Jq64M^{n6neE7%xheK<|xn+f=3Tm5cTZ>ruqrT+mH61V5
z3Eczz{i4QjiA)AT_0AhVF;r|gt9<kyn-q^4{}iBP^__Ku16_&1!D>{a30=||WDO~h
z)V<!#e*^a;DKFnHO#U>7*_nhDscXM8v4-}jAyW|!hvIoXeCyrW<x#E8;e^H6<+Uk}
zFC)^{N=I|#T)>7LWeUx_S~Z?h1Socg07UYf!DZG*n#7F6Mt3I*lsj{*N!2$q**jG?
zFKQfjPt73#qV(0B;;>9Q{J62Z`%dVt-<gkPUJQp}urn{BHRkYg6;`ydd`e=I#%k1i
zDwS9z;S7(*-V<#|=t5|sOdou8vcdU`^su<?$s;A@V}z_+cGF!MPZ0WfQ#0E~hv)kD
zy(o2+J}!~kZ^Ls2M@k&Km&CNqKa}{hjMW|eL=e!Hx1mjbe)Xi*Z<^BNi7stjrBPO1
zblqXP7!3xbhNXp0c7vM`x^%GJMHN@b)@B(6J*)MZ@Mj_dPgU@JN%F}sm3=3wIw;G~
zT=9?nju++S;##6m5{_!VIj1ta#!i1|wpm(nH!py+3kg#g`bCoR_IV_%lYN35syCf1
zxZR#I)KUuxd9xLFm^?m=AWCq=-d0KdXB@qKpTE(k@0$Jc6b>DPyAG;4&)}RfG$%S^
zZwOy-Rp;CH`-<Glfz;0*_p(F8Wb@(2`|;7#BFRSZy^VBfg??QBn^eM;h^=oi)G1V_
z97s%)nFR0hl7>T%^Mzff9-{I~)rY6VF&=^ty;cM{CJwQ;qQCUiCUF{P-{FX)DMIwR
z5AKfl4Oe9Bu+|NI1m6@IvY7@LNjD|0Iwn_aYj6eA{)#qS2nMFUM;9Odl|GnzEvCxf
zPe$NRp@$nj3~?J##i)iF<TKDEEgocjmdJ+>nQ2x9mp^!^R`pX8TdyKQ^}T6LP=Fk7
zkQ;w>lD(pw+%mygw}&X&6p*RxZXR`2+ksSuTYvl#Ki<?*iyq8@C2t>*#r2@iMT1#P
z2SJSuvzP(6u*WTb*-%k|)q2zE^OTq$c0;cL%Qv9i&K=)?V{w1evoDrw<?WpNgCC@(
zW@2yq2l8KZ2P#fvdVF-4lPpM|R*x(YRrV%#E_GCSy;H_R8y{4R`$1pk6)j9R-(|r{
z73;;j5RF#^y2d$|`;0&_hkUdcIAeb%uw&CGDxPsRglu0*{#bUGNg8EX_{`n#!EKVP
z>Q1D3VndGOh8z27x1<aD-IPLAb0U(Vz2_Ak7h;e}|LvNc;SDWOr<UU}Nz>t|hWA4w
z$y`fI3FW_$JVfjPzCYb!*tdHIn*fJ?p3wr7Q{EqvB>J_Ib^A!$;sz>fVCPlUFT=~u
zJ%BM<WASc-Ibcnx47IZzM<YE><GW7EmFk#^WkYz_b6=U;8oXh0zwPgAfDvBdPjNjp
zm5tB)ym@qJ%V_C7&PV`n0)Sy$Kx+^dTa4JIRKA-Yxci)9jS`gb46HJR#S<*WV`Lh$
zS$?~T9RHKJ_lNVr0#1(h^Nr82+3R~_EQy7*l+ZAP_qtUmn^-AFCw>p^ME7nssH1dN
zP566o0{mTzGL&Tj8O^yxzWX!}Q}L6tF(-@m<4fFI#5ylL5y|B3tPM-YoWmnkn!J6>
zUEI%jk8#~}#6>peG&U`neb;N?*66xIWn>&@uU$)$2l;fgHAat2ekaZU82dv?Sk4Wi
zT@NCz<(oQ{mdo}oDw#0B_{8j$_t6VB<(kZuely@YVQD5lN`0B?HRZ+_&}&V#z349(
zWQIjOqY@`GbZR)?cigJuc+0a@j?rdvrKAzJ54BB0dB1)XQ?{V19x|9Q##>?51(AJD
z-mLuH_<@%t;WA373T-IhGQ1YMSXSie(yoYm6pHU50DLUJ^PDoY8EkhRy>(nUW=kQe
z8hv`W+t=VVq0xd6hfU4hPC!9kwN$I5NhtfPGq5RYT8g{gJ9L#6DyDRTn;B;Zxf+F=
z9-az3;>g`%EemIZYk1PbtWO_z;NgwN;R+gEt9&A;Kse^84+4`(%3t2EYEq=o6AJm5
zW+4S@n>|WeEVE$JiqAG3!A^NN5&~(d8RM7N=Tb9WTrcVU>OIYpN4QT@E^MNpI5RA7
zEGn|KuqVANynF=X%DJ_h6aX&}-j|9wG_}?tn-<b)q=Wgo*k(3vxK>p0X7auKfO?%%
zrXt~(Gb4RtSj{Bo)=qc_=_=Xnk3Ad1IA=n-dg-~A%*R6hyO?5mA*V1_ZY};Xx68t(
zpfqe}5Jfz-3K>6fHgZ4v9Np=<q#l8rsM(EZ{6jQ*6=GlmjsDm8VN2dIR}^q8%T26S
z*(`@#+)qPCJ4_B!?;KEwFdhgjjFe(@)sF{+(_`+j%@4x0rM5?5@}%DGI0bs&wI$}y
zsVm+-;?X>^r9U_IPm-NM4E9kGm&R{Q(ETjpCE?o2!Kb(Hby`=B=RYw2cy9eNxBuCT
zM(eb91uO5b4ZxBao8}??lwV9Ryi@@d=Y4J0qG;JK)31A>3gks_iV`$BkRmjG*XWt8
z=SSalhCLDdc(caRuXSY4F|F`L7aH;DQIG@?^Mh|P>mI6tr?_>{E@E#{0&`1C>fYQ}
zH-qebbYiHtu)nnH8Oq6iLUVtp?D*lVrOv2gMnLzvA=i3m`6?c627A`MVq2Tyg2P<M
zhNQ*uRe=A;r~TSKj9hGUC;eFtE*Hh+Jf|WAKgH7D9EH7_YTklXTeUD*n3*MfiVn|l
zA^UICIj1akf;u5|E_6DL6EQf<@0&nj*DQp(%t0itnQuTJ$ge#EKY%xtl`}8fXXZBY
z28o`#&PC0oBY8Yd&SC46GKH;Rr-5%Kkr^DVCV!n$8-vl^--!EMbx3-m(B5Q2)Gwy)
zRF;t6m*;JKPp&4}hYTV2;(YQeL%(p<6bh2c5JjyfV)pm%@E^&oG0oC*Pf%l{Q7Zn+
zp3Qj|?PvE*`9BF)HY|N^_{63A-ruCGu$7-p-pE-Xic_!~`=G#|O`(Fkyb$E8GW{Hq
zUGVh5k@ZPAhf}bod-EavdqdRpW<ojGoS1Z0&jLGg^xUMl%@CdmUZK5qZcWr^V?q)u
zB<zWKO}h8Z#6kLztgK@l<_Ur4Kih<d=EwE1mQ95WP(a;kxBZ#YSS!;EL`0u{jx%cE
z#p!k_fd{uoQ<I-Au(A>67NlDUZNHFHPIQMR51gb4mvzcXeF~9H8ij;v1xa*MX=UC8
zzFZ~%u4-7;s@ht;tC=?XT*@UfW>=VaZ4Fh&traoN8jo8U<`uigX16BAX6SE+MwD?c
zcwy2g0d?p<as-Ki%S^N=FCLqOVWRIx)MP~$S9HX2v(RbK8DGnaA>Xoz#7U2vxj`}!
z&<F&Ij#wBzW$l?FQVQBe>Bc_l&#iwVtFXdmi0r(}igFz<*U{-AvW6)NfPjLC39U!O
zRCLL>Jy4?*#k{XgiE@*l^>s$A-G2Dr=l$V26~vx&#EvY~nMo2Vewz8Hy6N$fNV8!x
zh<#BX8z>6HEzLR$w6kCg7?sNr4;f(Ml0SJ|<^Ij_L8QwcsJTG0YI$-}V(H<>W&5jo
z4Vuy*XRp1cYEWh`yU68&WVV(NH)cERaR5$mI|RpLF5&Saa3TK4m$E4HP%gjQji?bm
zee-zJBmKg_%`z=W76EpScjVX4u)cTmeJOi{sF@W@jQ<m~e{|pu|1cIwxEjSGPl#)}
zsW_qr)%vC9#>|r;Xn6Y)5lYLS`ucyWGkTN|ptGVG=&bk>--}w91Dgi2Sx}5zBVj6Q
zVaO#cNj>8Gmp{Ls@PGbKRX(N52Z0c^;h@@h;Lic}n~O%T1D4|~h7$-1_4B6{s>ncw
zZ~iI*4Wgg|G0>nK+8(*LFQa7f;jakRx4@vHSGpwR%|k#bi({Q-=fv$*eZb_6y|JQM
zgbG5|_e(|f5s~$?GT-5qV_6)Aj+DJKm^lD_=5*z*GmGN>me3HocfYlF!P_c&dDngr
zvwU$kvR@p?IxpitFEPLQ7B%UMDYP1LJ+cug-W5GqUnsKPa2xkFO?6h#%iHc??ktz$
zu7UW~Xj+!vf@qVU$AhWB^}*PsU#uv_?Ulo17RCo){3WRqYz-><6`jLZxWO9K2@Un7
zZj>=)P5pq+C#>IDCk8qf_R5S#!qEoROVUa!&+R&cCrh}^lblYI#OI;B&s%2KbVV1!
zwkAtmr@l?5?Rm|JCb=IdQCx3oeZ0TFJ-%PQ>%93ODtddrImf|A>gzY+Z0g7gTZaE!
zCm)T3#|W5VzOODgQ6T-_CbF0v*XlqJxK>X9mZ0p0_ub{zL6i|2H9fhz@U^vO8sFX3
zEXG6smRHn8@mNxT;2#YGm_fJ>mo8>bxB#>0T~AOZdPcy-12ws)D;7lJnoT_%U8HDR
zzN4TrRwJIc+q4Uk?pbd8YJ0g0=5^S2pLjdV8Pj2H)fUI-=g&{@b+-z`_dltJKO$0B
z3)6$zaB=47x%V^T<Y*&HKPtWl!=$7C<nX-GZ^tFFr2h$Dh7T@Lyv5t0S=~cJ0F0%?
z`B;nIt@(&4^Qvs|$2aX~d?~>_`&aDS)-MG2z!Z<dC*aS0=C(xfixv@<vUviE<|lHm
z$m}l9I+LqC_~{3<gGA@*ewD09^f3JDX}uw7YHC)|R|$_<@J7!^V3?h#-%eaKI!^Dh
zteGx93lq(4dPdQnjb+<+75JC>IrssbZg}8!vO=@@@-ynLi<XvXsDehyb;i$h_bCk~
z6rqAfHFE8I?^Hp;We2k1zl3R`?OZwFu`c?D4F9az-xHn?HFZO$KCj@M^6>klA@NNg
z|NHVW-xKGUYS%j<Poc4=sC%<pKWE-r3Xwb<Q~agJZIN)h^w!<Q>k=6jOnM<jm$6f~
zNro%K3m6VU&Z6GlcY`yzwMhi~^}a+>k*|A_DC~LZQ;?!UMQq4^_jx>0%6{fHqv5&9
zvY~1WRP-+WhlBBnX|d9%%ig;Ow!n^riufoW{ib`6ge<R0TK}{6hw)@u&MO&OZUZrq
zW-A3*5$cl<f*rYUqb^Je2H6*88>7zaIp+S-YFt7NSP=M?l&A}0bgW}ws_L-8Xtz>j
zD;MB}F7`KCe!9y)67s$F-t08sB7`EMJYL;1BN5nWBCbVllc+}p>)*@g`@L?fm-~Nz
z3gUnDo2&<^72SVP8wMdA--vCKi^~0PiBxX$h65V$+y}Hw{-UoxoFdBaev*%mb>kls
zCIakbz0tgc{jX(;!4?7rPe9=Z+1~<*%a#QL7C+IithC<U+XI{Hj%jDrpOBOmPoz9L
z*?#Mt&Tks+9Gs5izWt@_E6}%fhdP1&0>v4Nh>TO~!;0f0mH}lP7GRfduqKHy1gruW
zSBRn#a&i&Rzv#J`V&L~@S%f!yd+es;9-0C#r*CaYD$_$^m7`PK^%~n7%G=yDP+PZH
z4rgR>|Gy=+LzjOZ=(xYXzg)|3&)Gl4BK5tI)gsxR+m8gGv10v}m`(kT>G$jI2%aJ#
zIW`J>d-<5&gmwT`g_pvmB_)^LFBZU#&mE^O=AQ7~jU$$8Gut_ub6@p*yqcjY$F*27
z_-yj}b@=~v7~32O4$1amGM(;!SC4#Gr1ZQ;B&QnA@VswNDLx8WkyDQqPzi~6Dl3gm
zKts2iUi}!F17B}Dm1tLj0Mv`Xq@+p61Q_vuy=cFe*8s@CRCUzzB+I_p(%OZ<U%%c0
zvnif<iOfY_he&;o$&4JvB6=DlCuO9S&^J`tu*y|}$Doqp4$t4i!R|Z9SE5sa>bx-+
z9D|`MTSuBMnD<DN{Nv$l+aWbGn~@3cnjPOj6?kGIB08_ncA})k#bJL>rX#(&X7sMO
zG2_xH4V8N>EoO=94W?Npz_x-9g>7G!+G}oV#v&x1cB2P6UAcH?BQFwXUTfJf8Wop)
z+;D=bCqO7!Nh&HTe*7Sennu|$zAojZ7HV=ev=ww*Mp-Ci`M&z~k&J|tis`ZuVq(HX
zbiwV}{rIH~2i#0=`;8_y^4{Rnr%!xtyM(Xh<W%0g3C#JG`%FY5{Aak62}0Vy#JP@W
zXlSIh&3r_3wA4#)QUItGGmRY|32DOwfE<2`jBGuBMR{9%@p++)=`qiNupVJ1Q2frU
zrKKga-ROZ?q0&r30v>?7GfTa8E3tg_>dC=a^fPaze_e4vjzy5G2I#+x-AzKFr;g5F
z6$9D{ib_i*9UKmqD3YcBqAwy+6#^Iu32C^(j0xAlJs>BC`g>1LqZhZf=wsEbs|Gfn
zoSYmwR;bkIYNpMPT;zX0^0G(#+uxdbM_`EpijR+vjgKFD5O$P9MvW6QFd#pTA^897
zs$Djoo{E!mOonyjVgC1To7w=FIyT?i%K%Z#n7>R420rj!ZZm&H>fBNmV4<1;;o-=e
z@Eo~PQBIRDz8O3w8Cx*0)}rbRb`#L~{=7|icx7Ct>Qd#9NN2)x)upvHZXsBYiN_B(
z#I|X-FLeZ?Q~>y$Zg{R(Ebc4s1LhmuP1*wyzAmy~$UG*lF};HZTXJeDvVw@;<>9h%
zciR{@SWH`+$jRB6-FAkHQ!UB$FB0pbq~oDlD<m=NhG-gic9k*?{6td<0N@FYM{<B`
zb0;L3FhYN|kklzdRN0F3CAk-u0Gw`p55oO$z{Q15POjWtEb`uKEzf1vasOo~A#fRi
z;uI7VB|6o}X*{+$m<V%HOJ|dYy!3qGQBkgG0u|JcH_TQkR%oQGWZoM`XZh|O7kxbY
zNpHn|CY3TEw*W{YA^`Vx5sC9l`!R3Z(BMfyU;*0)00gSS^TZseD>R66YX>hg9YR%=
zh~{5$6VU&C$Se`VerSj63kVC7$tAIL(ZmRKsNsCASU0$)f~>$tgol^E?F#pOH=yuH
z!2sd?3g3VVa{Ub#PZF>MK-vwDpWmj#J)!@Yl@()==?SWxb3(DeBx5t%PyU|^VN{3g
zLV{}TKB8;ijF-CU1&lWD91q<PhKCy;ANN=aKm;HZL9}#qXyRxdGLHq@qeiT@9g_Lp
z!-H=h7}ec$`77cQK#dgA1zT+3!{J9D05<?BfsTHoRXmr7*A>{0$#}>XKn@lcUc9{Y
znDf2a8x9kidbw%r?w^*SsIO0Uf7v5SO-F|S+;MQOoT(7_>q*kzUS_j!Mn}iXIlqTH
zsfYn!o?`aAjP|po7XhQAZ*nCaj#qmx_uX4}zRWxQA0OvQfCvJ(p}8Q{<8t{!l-O_R
zM=1%3An^P#4f3hN(s1^x?*8f|eK(@h_Lq+&7Zw?{L@Wy|UK-6qZ#Vr7;h_0~{A)ch
zUPG_W!N{h!*{j4q8Us3Q?HWgYx6+X(8!vRO=lS;WvK<%#d=bFsI6nplyH{dF(f$1V
zOeT7O#`ha)5mktE05F2-7XSg*9fXAAFz-4^#l=<CV_OIJm#6|#Q5Yy*8d!t94;&J#
zt+yQ5I5-tfYp*wxS@Dtiu*;|4O||-o8ob}4yS%(y0;ZaD18PfJ`g7=SF@eQ(5Fo6Y
zRPgIvtaoNu0ES2b3PSQ67C<vM=|{FQ{4mt1D)wOX@zW=>Jo@Qs8v?0FLgU*JqwYwe
zPMjbMg~x>9#dOeSo4VI?a&n4nI|R_$0BhOx--``2PYL;*XyM@CBEu}Iyq-sFJmuoy
zA;v-F=Hh}tATYqa8$RD#J`PS!EIhp6=}HR{KiXlVkN?*V34lcc&1Ss;tOPoR2r3#T
zH{UR2J2}@TC-A<**X3g{FffL)65?u>4rP^n+m)cZYZ*B?&U->kBBCvRU<mSK@6sRf
zDXItCCajbY!edDWl$D%eY0uH(JI>$HCZJQ~2=}6gDJy;|WwTYlr(k3y6(zpDGz$EG
D^$Cl6

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/monolith-import.png b/assets/documentation/1.27.0-rc1/images/monolith-import.png
new file mode 100644
index 0000000000000000000000000000000000000000..82c74421dad21202f7ebdb41020dae6e8e0b6f00
GIT binary patch
literal 56714
zcmagGWmp{Bwl$2qdvJGmcXtm2w-AE6OMu2TxVsbF-CcvbySu~JIp^%V&%OJ7p0D{)
z)m5w4s%3MIG3G2nl@+BB;c($VKtK>>q{UT1K)?YYAfQq(P{1o#wnv=61E`~_lqg8W
z1pX25i?W%P%vS{k5L)0l3<ww~8VLBGBEUb8U<(k4f1QJXPy&y@s<J`<zMBp9*IjTx
zHuzuXpi+Md&Z4~n>ju@fP}g$OQjq60v9)G2GPN}}V|25&`%?gf-;Eb|YHj9ZMC@j5
zW#h=}CP4bH61>3kKbM(EiT_o^$x?t+OF@}f%+|q-n3Iv2k(pEwj+mI3-@)`Nud2A@
ze|`@9CP4bl$;pnFiOJQ~mC==r(bmD7iG_!Uhl!b$iItTBSc1XP-Nwntjlsr|?BA9A
zRgbutqltrsos)&F4e_6Pjf`!bodifp|1|VJpMO86lf~D+Te5NdPq%;_WcqW5iG`7w
z>3`}5{*?dERbC|r3o~HLf9e-x;s003|8?y@?eH`GY5cz)=HEU2*HvIw1>yLa{%6<(
z;XdhaL4$w@gUE=BsJnrl>OmUnYRtcHpPzq`IX<6CRLz&r(M{6B($cbul}Ln4B+}8+
z!qPIer@^c%r~|aLa#^gdt=(if&d5;3$>hbQkRK#ozIMEHJgl!itT|4&j-{3ehY=IQ
zz<~Mt{jWn;jChxqw0^yA-T%7$S0Pbh=^TET|MQzaHxY~=0x^)b(wLGM|5>SDjHo*l
z1gMBG3JS!3A8>kLU}*4rxC|Ke{?DC1<wk!%bYJZZUQO^_bd8N6xURcXQ7WbvH$KhH
z%{?CGMR&dMadU4beAfSwkdUzMefMj%*^$cU<&3NTXkN!wLQ5;TW9`{`twOK$@}#o!
zzC~a#ilFyl!*`=_t#QMLPgGQNxqOD+>t>wmo0V0c0@qr;c0r+nf`V4F0|lq;dU=C^
z@7rC|ra%1hX)ipTW_ec-BA%g%Nr2GXkrEEaclB0pQ@}q42?zTJs2E&$c=**A+vMg>
zv`|n+1_7bRA<3%aqyP?|ixnP3TwL7MW&rYbtQ29l_rqH7_4Tz4s%S;T2?7jEmy*z1
zV0=7AUR)20$w1e}22t7PN+<&ZB^lbd-Jv1ru~d#SOg15*&UyE<l%^(bW*$Zc25Tv}
zlw@cqsO`>=Hzr(MT#R|Ia!!`l&W{%%yEP)8$D9^udAN_~g-+w!!|COsSoeQS1T!lb
z_<*<5QjMA0^)S`e{yvnBj?U{%)`xn&IG#|0A&a&t-Bvn}<18f=71fzu3;X0?U{Fxc
z=xCYT3!X<&hgEcCWn~Lzhv0i{L&N;aE4IEH=%l~{K0Q7Cvh@eBo`|xF7FlhpC9s$6
za3<rqQVr|-+Pb<v0@u}?dwUm`0X*BbAHb>U92czl=b{{t>M~61X=~%>e}CLb7VzZs
z^76VoYuxY;1#3kUyy`<AK`Uy0O-{yXyI;2a9xDT-6Q3M|fX6A1DzYAvmIhDBp1OT_
z7?PfjKc1Uvv)Y83WZ=WYFCef|&ebQXp@F%Go0yOQNttH_>iM`8yb?q0(*9>v*kA9;
z%+AghyHt;!%zZXMq?FZNY`+dB@)7p-7Ffg`IWte1%fzsO)=~R}H=t~=#d)^TNd#Pq
z$?O(rx3T*MK2MM{g$e<!t*srj%fCz(=IwU|>a`~y^jj~V*cZy%_4gtF@0REqf?>yN
zib*qK)Bc$n8d1z<W@^gLq~F%mTwE;8P*hOBVc@#vJic34oEVD3v0>MXIF4~LUub5z
zP+?8!+CT3sUYHt6&Y6^uP+vhtx|ALhGc~4GqskE{QI>LYV)68RQklkOy*ztv*MVho
zlOq=VrBMaJn600uf$;{RS)S8&siweL&%?vRQC(f#(b(Adq-CZ^iAxQ^^yGR*NodXM
z@p5b4?CeubA}9LQoc`R`%#$Lw(XXWQ<Km(#Ry&Xm!PXtyVRWe*o)_)=$byf;YtUzw
zo8HIA$Eit-ddu=QIc<yQg2f5u?+^DYwp>hFRoPDsD>jzxoy#j6H{vju`r_LhWu~<M
zFd>xwe%)(QJQWcP0sH$5McZ2KMVTIOz#%Tk?G;zNydGt0{1U6Hr<YJKmqcgaFigSi
zd>mghP>mV!OS^H^A-tx`;@->>U#EC~JgrDqny2t`-ScA3>b#a_@Ltb-FCm%PNYpX|
zUkRI#5Q$X#JHg<4wdMZPLDohK^5E9nfzXG=P9m?@qg~aU{bZ&9aZSi@996*1lZR@P
z4{7yci*s4c(DA(el35Z>*{+`JT0x+P7X7}#$Mfg3wI*-Z4R2SxaPu^RIxL)(Nudwj
zez)&|?sc4H+6^c*)Kj&Sf@SmrEh}c)|1g3P;eOq#QXEPBJ(MkgHBk<hZ>LzLWj@2Z
zvIg!azZ&C5smr2k<Y={vmz%h2aNy%)75GWe8C@tS%1qPVZs*oAoU5y=wQ5XdTEz<G
zQ@~sRX4oo}F7lU7;SD(Otq~4hga*jrD^<m#=WDGiu&syl_7!{0jt7~Rj%n8TX~VwD
z02yBG@6{%QNcGP{v1D4EJ_3v_hoom~Uk*}kJ73OQo1XU5s_nLV=I{7>&#UBNmd0KB
zLQt(6hW-Cx8Iz&Fpr`;VjkeH5A%^|R3fhe}1j)kopM-q)hx%2uAJ|v;YIv_)6m*Te
zyxK_Fmqn?q5=`V$T(-^#LQB3~EM&NAewdaOFmCNFiXftz`g>e%b~|dm0Cy%$O@A&!
zYR_VfT>01O&6(xpWzGXbFlo)xd1orcbmc3+FS^??=8`!re~z@2(^`q246y{UUgI6C
znE%Tg{qZ?FB!+em)7ja?1){^-l<DhRz*Voo^H9;ekLx@KG_MyTEH<=jV74FUtrzjs
z<ITidUY@6v&%foE>X#zbxbOu$FrJ>Cz6-!lSKUPdKG(?^8Ra-^nb!2sV7BNa_f@Zu
z_lq?UjvNu*pRa|du$h-SuVPWE%VTf=Ci}@l^$a*9(&%ePY3SVV>#8JXS5|Zi$_?rA
zU5u^=&+Dw(XD}wniqF7CPnN#pc}S+j7ex^07;pgeoOmwCS^?kTiq5AfeU_G%XqiZK
zQ0f=hw&F?uv6Bh`exC+8acg8cU)C-zkIO3k#dVZbRddy8WlqJL<-bqJZBu^t{QjMG
zaW76>x6AY@PDyb3G*_LMhXJz8yrv-P2IW|7!gNjz%~HiQ`ee_sc22R??!4#e=Adk6
ziMGUgZ<|x_`7rO;jZ)CcVzx=!p^bp9*ultn*xo_D0Y_Bx`1NJu1Ig3#WnN7~UA@>@
zm#VDP;gp!lqx1H++?=5NDt8g70s2C3Ma3#(hYi}Y%F9)Cw7`9`D%G3~a#@puXOq6d
z){Q+s1v-zW@mvSvdaw*v(Y2xR;KA3Vxz5);ChK!RA)||l+2`N>{$P8!BM;(g++Sl?
zhOk6CTwD;%epc`h4N5t{!CBKkYEg#xzN~Dp&kd>nWADj>{O}<GEbms(EsTlp0&M~G
zAc`#NKUNITmonpnK{*o@+@c$vVCob*t$lK43N@K>6Ox_IMw|NBLiU|n17fuQYwQ1j
zp=TV>0ByLGUHkIvLS;cdpm&$6U9@@bfoG!Tl646-y_0i6P59>=0`Zrj76gJM9O8;q
z$^Q#FiDWaOFc-gkGhkOf{@;-6Ki`0lEDDDh{A-r}9}C3aZ<vfYe`?n@mR<QDg8~8C
zO9H%Uw<tUQ{{Vr>{J>fj-mzrB{~x{m|7p^2$$&v#NlD7eioT|{Ha0E}e8OaLYRYeW
z+nD35(q+gUA=)n`<rC0t8yOja+S=OQVWXh<#ga*pa&zOf>5WW@ZYs<32SGx24R`D7
zJwliH4CLMvl60-8F?6=RQt7(9BS1WP46~9DyA9nCUj)1o4qfEjLa&m@`c5^zbt9*_
z81Fx-T)MbwY~a;9-&IvNsNRUZ`9h7VX&D$qn+!%70S!O5$1OEJ0Rbir3>=()WhE03
zh;)S>udS{cS}fVFIu&nR_%y%o?|;R>z@V<lN=kx$my?qd)78blzPVxXd3BRd<3vQK
zl=rKzckZl{QT*KrgC8lUD%9kYd4AjntvEnJI)rR9q4>Qy6DqKLxBX%xjno|duO%16
z4fd(|>GI0X@(s%U<b=p>Cim&m&Yp042*g_v4jvx<YLuzd@MQiM3@mJSxpwXBU}u>n
zJQ>k-2(mp0EiJ9x<)+B#dOMzsj7&10D<fmaqj6JfV@xm!(xhMe>(}q@8qSFLr&e<u
zedGn*YyC2Bmq?4@KZD@^haz;vh-7!<pnkj`^YJ^4qG=@~x5Kmwk^v+nB($oHA(4m#
zBW@;z3<Ph3$LMBn;O7vCtyUTk*~};Ueiz6kNHiaCjKmIz`Y{9?ExBuXy*rt3h)mG^
z*ZLE#L@6#U0kr>$EX^y=g)>XgfVs7Rbw1MQ2jAS(j}wi8e?2P7s`7dB&~@7aXtlYq
zSXt|oLxOKU7lcy!37eTwXjbTkwtGHox13a{&5NObOJvVMhj4%o??+pNm8|(M|H><s
zozsEJ!GTCUQYP%K%}{PlzlpaA#s_U_r=_Z9!ZtQOE}aAh<OR9Tet-fVK(=<Vb4FIq
zi)X&+J~3G%NG(;=`Fl6`Wr%)k&)ArJ+uQw$tn_Z8j*ZGTDL4waMNKGim$CRo`vYNH
zTifNJ&^zk=Jwq-z<!^qAAS|#~@V8;)6Z`R=n=kz)b)2K+|LrU@NT;Tz0!2yvPc$>S
zmJ<eJ(lo*bC`rA)iHgT_RW#YREoY|cf_xBvZfaUG`8bD|RbMc=j<6f+bYlk-U6sk}
z88O^dc0{GoZicyf=r&A{J7u9UP3o-de8*id@NL&}VOI*5_lyM5$$V<wZtCrPzpK2w
zxjAvpP!-uA>8cJ0xErjxQ2v?vH&M%GgE&6HwLiAwT=%wT+g7sI^p})?N<rbg>D*^i
zs~?*e(O(h8nZsHpMB57We0M<I9}D+y7Yko8H$ONVzNh4UsHso0yYpYFs%2Sq_xRn=
z!CNSmZwF)ni$KOk=y}TW^zEXIkL0dS#PH?*Osm1_6QR$ek+`H}!xAO@fJk;zIX)ei
zRd0qIHY^MK1Vc<M++S-l01VUxd##=Y)mESt7Vxz9jnse8Hw>YH1n}jgPC6%u{kO{H
ztxJ!b?OH^rT5kg1Q8vgB4ED6OMMkvXGt6K#(IAkPQ3X!Ha9I_nJ4~eWi~w%y7xcx9
zjklGXt>QWq6{+ldDQ*H$Qg8Ks4#57^Y+)pbJs<vZLJ(Kx6C&i3**9ZX75x%wqqx-E
z1mcFNzFJMuaR+$qU6bn@*(!@S77R?y+ZBNC-Hjv$M$-Mt)ANq_8Y$opd>!F>*o{-_
zS<=3Cza2!x9XZ(a3IgIqE`8rOXH#=?WHagrkF#YVkJQ~8N$Z$&-M=j|6g`**X1&|R
z-Y;r~Qr;c35%CN9VM`J}2J%=LqHj9zM*LzhnC@15zPrk-BeG@Bh;fiJR6V`p1sf9!
zL{!JDG_OFPW`8_O^M_Sceai2sdjoAs&+~*~W@+0B!n+)ytIRGf{m{QZuXngS*Hh7m
zyx=+`PeOWEN&Ih*Bz%Fg*vOFrVKySI9ApfmqbE9vB355c;>Cc~*FYW%W1QxlDq}c+
z(9F|c{Oi|+UT=$iU3BnD_D%XR8jUIIQ2r&52ct?1+3+*hSZ)w^Rpg^nDfR(b)*=_C
zEQ6k8*YrA)D`PXpemN+E#NWM#_@Pf4lk!E>f&zCLy+;$?Fnmr~3{j`hd_IFDa2ZSd
zLzs(IOS``O*leZ6)6L8oab52{&f&+|d39lfZ&7|#TO0mG+YQor`-6T{Yirt<mjVGX
z2+#(s{k=V-(L@HZ-LOc{l=Sihsr~%_)<~w3V47aIyCNKrzUxZP#Sdqadf|$?4agRw
zW>`=}$fMT7kP@JyZAGRWL<WXieiX4fR@L?^gfnL2hh?aib_7llJ3D(o;!ANm?#oBu
za*Plo#>hhcs30~pGb`AJPhv8N3JZIOCqI{6f!Y!5JmU!rye;o`vv5%O+uIt7Lwp^J
z^lMELKo#RWw;0O8TC%KFv}~_<j35nD;C3KJ4X;Q?_z*_U(@hA^3s9L@S)dZ2qT#pS
zhA=iUsdhU0-62>xO9kVE_XCJ?|9GTyG>I@H)TU?uB^)e#!^Jr1v%gzo-bJyysT*up
z(gU#-qSE?;j>$4Z>SGOKq!UhjG54$#PMnzVdF!&9JU;2uXHS3VS-DX<=+ifTDjL(W
zv2m^q`W{yB`+KC0pc{~Wpc133uFn3*s8}KW-!n<#*ERMO>vl7mX19~UW@u^a9(3w#
z$iZ)dYT9b7GrIjLOd8_qFel$fgJ{k*9L$>^+9|USNoH%SH+UL|5P($dq}4{73I+!f
zR7y%J9VirOHQHpTOb9J1JwF{AsHifYHwU~4j^6#x{vD7cChjAMGY52!42TAw)@#9N
z(83kiPKm?i`2iAm=&7+{^H7~(jdiV{0N8UlcRwYAAOlPgpubn27H<I+nE{~cRAQ>n
zw=6Xe4>lmY2^2M;4n}lqOhdJ*Uml_8(^+6E6r;R#EicM;Kudu-&0SJvX2rE8@RM6!
z9zkAg>FEnrBJ%ejctrXEbs{&AteceJpdeCWV&PB8e-w&2z2wh93t4ZU3MkHQFl!`~
z`R>GpW1xLpANWr<(4!gfqR~Oi3!f*nkStPTQ=&^pa49r<X=o#~OOIOnY(NSxX5`=;
z9UQuRjVajo$tVuaVL;!FV3Cmrfxt;U!bs|6`1zb{^TdJ|t~W9=@(;XeuvrV+8H^@l
zW=0{Cic&w4d3}4+DB9WH2D7w0IX5WAC;8iBdq)W?C?Ik>irCw;sH&;OCME^}RT%!;
zDKYDbe%ZW>4@>mlYVgzokb88yT0LwZi=vCUem;q}32LjG$yX#W6a~{JQa@GnrxT^;
z=Qwif>VCH2;~AM1B(2x+bmm}jSKfHi&2L7_VIy*v<>=2ol3CrKE>%@kF=KpHtt6hJ
zgD6zWiW2a=hoL#e3^PY&WGn+YAg`-of9Ep*Vz%)#uAQPRA24K)u?#+Jpl*`1D=pyJ
zYO46xurtd*SXo<l`|9iK;|O}W1zYoblj7-cri&^#>(PChMG<R2p*3D?DS+*l*n4#8
zw^@BE0^snmU^Kh;7nd4al4xVN3x&~@=j`4oC=4hR^}A;fwLKk!9$AzmVG!~<NqYx6
zyHS}15F468EQXCAsivl;LP^-*koAW4R$pB@Id?B^ZAn^>ba=m90!=X)Jv{=@DNzG;
z$%th_p60(X!L0z8&@cXw<I-i#<poXQeS~Q>9gb}_g~$CH>&qM0{)_W3eq#|}_&n);
zEgtLZ#%2-G3WIe=WM9yh9=zjPb@Qs%KDVwaXArE!_Wb;bW_G<7%}V3%S3=tLetdp@
zKEm+Bd%oZn>Bo~A)oq2pKH+%vk3XuRgHGqi`^zLx%i^fo@YdfZ0ce15kMXKK<?yxd
z7iAYk59`nu8VBHh_E+s0j0z$~BD$RwT-a%BBdoqm8Q0*ScNK0R#kJD5{^Z;``*;oU
zSUzarV<eR;2uH0%8De6j5W(-78E-l}M1nb+l~T&!1son8f?C|4P5?$bz==Rz<P5J+
zX~6M*<mZ#~zunHz;=Ju88DNQWSJ@WT>HjsC+*Dv!)jZS;W#TiR;0?kHE)aNTwV)@b
zx;1|fjn)Yb5><R@AV7XS>NKS&AH=9Z;N@NVxsd#cpFiVj>qTg13wphOf?!ZZP0e+}
z1;@ce(nb&n8xh^Z1S?xJ3Sz)T`>%f=aLWOpg#Gm3wL?{9FHpE0cu}Xfx~m#$j`bu2
zxKs7!gdR7+SKSXXfC8W@^7j~^Klw{&H6$iMA&QH9eum0*7l+VzHPi_=l#3v)oI&YN
ze5*_18MsX1c)@VqRVM8OaeaO0ebJDfjyfB>JS(*(cZv%?v27AY9e5uw?-?3;7c{G!
zT!_N>YGy_go1(u!j|l??CE2yIf(MOE$bP8}<$I^?4iJZX5puD;SZ{wkt)0Al+=(v3
z>FJKH)6MyNRpl4#(j_QIj#9^U!DB~?=_}GG;>$@`6X-nFh2%PrS<9j5t>GI=zDH3M
z?0q9wJ-oO;f`--+7k@UHJydq)AG}ALeH1j|r#M@c;=u%DWo5A}lOA9|v;aWjdR|{&
zZ3xKt8l^UW^QaBWF4}k%zeRaB?e7l9g`xaWY(-&SP(GK){xy5d&Je7>;f4`!BML4N
zo>rRPsY}A3Oy2uVfX+a{G6kZc5v2iT_^UX=jhJB-75%R-XdBSM?!6NelCi=r6dYV!
zT)ZUmBSVrdBC#bKQS<lpWB?5f4cd>-CxonIFv-+lNJvPV5c{f7SYW4-mq6(;0Mg9g
z-yceIr=b4tg$*<)s&O~*#PW1kWI(|s-@vN|@<5MSmL?(<wb~NTvRDBn4FzjU4)(N6
zSxQr)fksjSvU_>p_aO~U-H(#u3Kje4<r8^#eI}Z^+FG_fPPr8bP=H@#B;t2VOUOul
zVmne22^!P8+%Ox05gwR7viRm7q7r)8>RfgDUql=n_s4b3_g&MZbQvurr>H)YFA(O*
zIP-b=#b73sL0tohFqyfY9`r#@5z&=&rIz1Sl!lM3&&oHq_d_s8xyZ<Ro%n|akl@8a
zvL^kS4bG%Vd`)i#8!$w=W>Kpe8Z^no3)dCZEDY9u#1*^wQn;1U+#w?VI>&r&u)N=~
zFt8H3oDyQja-k(@cUkk+=sdr($jW0{X1Z(i_Gt;IyzgLT`nLyQW=9PPALcb#GZ{62
zKeG%av`Rrnq~cQ6p<_?8h!v^dNb$B<U+WEBl^oX@B4?OP=Lx&U+BfM9dW+xfu=)nJ
z0{wX{3Ztg70>bPbv<5ss45;wq3wq%I8Eh}mZiju=cZXCGd?F`w+XQ`mdWW_HDxTZG
zNP)VV{-Cdtz#WFZ_nk(9saJ0hBDc#a4tJ-SFSd`Oj(XYi%NY2Lmov0d&TBj7W=UZc
zZ(>nd?U&g`y;>qA&sG878JocKh;E5@)aAK`iH8Oso{qOSYsg0Aa|7F}Ih*jY|4?28
z1&Am@Sxv?S+>`79Ks=4X?V&IN-d1$rBmFf5S)($k7sE#~=Wjyup{;@>1qmxFTv<6f
zY8RBI)36k7Z(hVAMG7(=ik0FL>beVB<hBcbFBf8c&or6|9ez29R-+A{7luT7?c8?R
zeP~p$=H_O@xj_!0%6=+wutuwusQd`s-OudV^UDO9g1uY#tVn`n=3SPHrs9eQ^1eyL
zrah2$@Snhyz8q{~!{T8Rsn2r~3$VclBNGfDZ}<j}>u{2>v8e%him`i{kF-7Uq~!yl
z;wXr%mQq*{ptEru9I^RrMWbv}z5)XjJIgly<^~e)`Z?d{?Xd>X;BlvU*XDe?S`v9J
z^luyXLnOMZ)wV+7i|h|og#J&^(}|$(U-@qr%G7l?YnZs=s&hnnq8nl)UD&KCtx`8n
z4x%U)#=4m-A4uuSP;Ri~yOOK7v}(U%*VMpo5^aXEn2<^n^*`p=DJYCfj}A+Oe0157
zaFE4(+MDmu%mH%M7H93RP=a7)W@bQj9k0P=<3~-6gIjP^V7n{MDj2EJ!S1{{ww6kK
zKx&&fM!_Hnmq6_GghJn|`wapvALXRwh0Vr5doYXdGDPxSMXF+SRAgj7kW_^DzTafY
zqL$Bqn+A&nfV8gG0G5x=Ew|hjI0E)tc18bVvRi_MzkCO^X?xA0&czQHF;iEG!J^x|
zECy-&IC|5%=_PD?n3x=aE56?nNC3nf$+8jp+~VT%;0I^$DRr%PL)msX6Mdp=h^sci
z9+7eT`uZr{_B8ND&X2y_J}|s~Xh7fr+Gc=ixG=R>)-l)({<4Y53)g|p)P0zZO8j9M
zP}e)XhW&cL<ABxky(|{n7v;k164i=+%x>jZ<J8bNPC)u++A{*MAa~s528;1j4z0Rx
zu_!$aRS2OJ4f1RxyCoR^nY5hnuH%dQ+?vv$VuDux230|@{7>*q88GJ9o~KI$;k2q}
z>N=A#-H8HeC}_u#Q_4hM4{Mt2%Cg~7M6HM{EG3K8J2<qoW$NvNO60_XBm`Sq@A<LD
z0#4oM-3jnCr=Z^oePGJCyqm2k8m!(CLG!*E&yOqhj?8x$q*<Gp1p7_b&KdZO$h5t5
z55n9&^y;~;gDNRa`dE)D3w~-nx2MPPjnPpeoI?uRxX15-G^JrT-O~LT8X8JVI2Use
z+oFID>T`Z8;90oz#UkN9o{I#9dWfkPna)+E&EOYW2v1siX1%=Mr`lXY5esTo)@${#
z97>-{dS@%j1ywo-2oF;3Mfk>5j~vn{1Mhm!l%*$gar4x<YP!$XJ;jH1;^GiE+o~-Z
zRGy}vp83jj5P1hD&H}$qR99Nzg20%5HQQl|76{F=FG;rV-N6yOsqvu-Y+<fWa5#33
z&YfTZQ4)MZ*xp8Wa*Z_uCz(p&9+E?TT^BYN)Hwr2R9KvkXMI9h1UxlU{zt@v096y&
z9JGBP7V3;2(#fkitoDnL<R4hrK>Q(+Stp<C;(RxvS7+85gw_x;M&4(hT~&o(`}#5o
z6MZ@O@!p6lGn|5vCGDJvnzO~rWh)R;cZ)CUIc-XtBt*PSlGp=kpVl%zv^&e*cInGR
zYB%N%ljbC{fOK5cJ~qZstN_1xxD}mb;EoB5&4CO=+1NH87wsdY%q07t5XSYa*mimk
z88Tx3SNP2uwdv@-x#_gjV#GTBS72(7F};fm=ZN!cIz3>c;+>Bsnw5oIRJxUetG+3f
zbGiq}#WuGrL<r3plLZA*)i1L&WiH$e*4LfB8u01hq2*us0RUIl2H^d&Ll0uoIr}B}
zn=`4YxNW!BWiT0SC?a|0DW`L80Lk7{f4r-EzK?z#+qOTk=s4>W!*9vedJkH=#o5^)
zy}`&t2zDbJe^YZ|WR$A<`a;`|36ocT{x82xkN5xy8hNszobK1+iz_QX@k+eJj(bar
zP9l_YJeM7KDiFa8em#Ol>335qz;GbmBZT@}Zo+t7&%uq;rr^T<pn89c6`AyUzO|5m
zp?D|}F-jcyOVkG1LSbQHAbu+n!lMS5z(LERs&Xrzt5covH~AtrN2XQ)lpCMk$%-})
zbHH25%$l=MnVsZ~L`D6zU|*gxQ<smlPD5r?FV+7i17ivgLTmVaSLR5`Bfv;%5RT>)
zCIz&iqplcaLjMPN;an7<4>c1FKJ!^Z&^^KrU?BVP>FMs&kmtKH@l?v<bas<;Gt7Us
zypISmkVur2l)O1qba03EVcbK8@jBa~&=h?sE-O>(F52JU2cm$Wf&vPeB^QC2FJfZg
zv~+YTDk>s1O&rJcy1_sq`b4!-Mgv{yfRB+@<ml)~GyD~mVwzq87%PYDoG%4x*=?Ob
zgab@5*}Aw;>KO0-6B0YQ=qZ&eXtub7!NsZ8*@M)E8+;#-nONwAVWzpgyF1&68(ETv
z164!eW2F(!XZa885|AVYGR>6+>yxW12ScEh5b``~Vz6#tc9&CBlmsg0zkmOh9^fR}
z+uI8p;^5?@WgQZq7#@bTv9Y<lzt`-eCnpylXEU0`pmbtkVF5;cF;rDmF}8MEk~i&*
z&<6dffXL6z-kt<@Me=gcN>dYy8<Zbi+9uk@D0gHxKKkbBN+mxAl4Bs6C>j=>vJ05e
zU=ZhAM7Rd`&}FnnI^41_YcTqW%H?jMB<R+icT{bN1rX#!viA@Ht(cFX2NA*G!tNBC
zM2G!Hq&K`I>1wV3=6*nr0TA=~0hCg3OCF838-k~+&FDa_QA$-6ZI7HrU3_q0Kyr`Q
zWRzIvX3=5Dm;d7Muvi)gIwvS7$at~JC?q06z0c;~;fCVU@L>Yq{Oc^qr=P!~U#~`x
zKb28jdo;X4LP8qt4#kc<51Pg@1OSDFQU-bava+%S$k<Ra^aXHeBtu~K!6v7CDm$#>
z!9+hWAb=rr7R6Cpq~xLC&VqJd-e2`8+~bQxCw|hWT5JjJpJi1-UGq)nJZs*+)*-fo
z$OFB+Uj;4KYu}snd4m7u4G8)Wk2>iB5BWe^N+|({j*fl>%*EISYRf<bR9@3&FHG}-
zTuTuXijOWvsU<(M_`8V2QGRT(W-zgzfX{`ROPSKy>WYqrM#UKWv#vd4Pj7F6Mzjp!
zLO(!;q&2=Kjar9%32e9`+p8_95xLy@Ol4s);<yEBmdnmxzJ^it99_rKfv=ub%3A?5
zg9>ler$LgHN4NGXBDc`W>(h<>oW^IP)h7GW^^Q(}xn;W3lOFfu%u6x-M1S$q0-k`y
z+frivSarDN_PVp7D)&`QYt>7d@9{b5sCR@P(7-$r%(a<&ds(Pv{8yJ*Al$N3B3Z!;
zq~(o}&u8D?Uaq!+iD+3ljQe2z#rRmw;Bxcwwl=q;u8%#Q%Ons{*%X~hNX(F2=I!#^
zsK)O&sD~!SJUm)zU<L*U>5PXpdx6nk)t{qBA^3t|&f{3r^ktIT8Vse!I=Z622pBeZ
zYyqf9E_SXp0C)uk28LM;)7>QFn`(?cbBtn><C9Q~-$H_&8IhRjG)iH?wE|uO>C7I-
z?#bTo{JQDs#UV$}cPG`x{cv+pI=1bYH~ZsiSHS{)MRLK5+)akdzoAhY9XVVWJRx(?
z_etz#5wx`GV>TEyjI%S~W_IE+XChXuix}NOTqe$;c;nQ|BL57`Vt<QJ`R?)p{mtKu
ziJ2R9(-!W%A?Ei3OmbjBj2@qX`yQs%Mh8JS7DEpr*Q(#JS|LeZF&eZgTui1C3!oq&
zEIxw*@YS@W)}Jg^l+s>)tWB3-6B{jZI<Bxcw*-ksCUk`N02{}D_SK=BFFq_j-FP=a
zJ-fUHs$L%MXsf27%CG$wrY^zRrh+qsTQl+40zoV&;Rx-}ff1TJH6waIrpEV-ea)$@
zQiAo0D409v-XTNVi15qa$i~$upm(AhJy@={yaFb|&^^oo<7K+q0vv-6ck!@>v#SL#
z_yXv|!JMQ|o01UX3IL^DH*QbpySt+aZ37cAg6p4AWN(j*vzi!W#>f4e>KGBt7&F3M
zQ!Ic&`-I<ce{ubP#dV25LupQ-_D|QJDt+JJ)3|I0fLdsT(8tqcmHj<2SW;j+iv@Q=
zYVgnN@9fU3w1x_a0<NS%K7<oEO8Hj9?k3F6%j^<h3xv{L=W!(=3X@VAh-FDGtHOnJ
z6G#nVn~`vL-H+0~@_3&DjX*O)E?oz0q0wVfbs~ZWC^cXgH1u>T=dYf@i`c4!=Hc0-
z0EYL;-&Q@dI>T6AUvDO_fXNG`(~)JB9k_&qgall<$PL`?&nBlmI?8(bfn#x=cCQOe
z)3eIRlT#}B%DfT3KSOlS5C1}*m~DX5#AFyHL(4)7=&93cdIpfVomxGLM*vdX!|&?P
zP-{%(ArJ`EzKvPNIi^8@WrPx>NYWKx{<UDbrX;(H6Gb^ceBSOB9<K(85&)Mu!GvHe
zqF%L6IGp$)Vlonuq$+yN63!SWNowj*sx=@{aCe#m#W<w#LZ{rJ<5FlA-gi91+57lo
z*v(OSp-bE;Kjp}o(Ah#ZGlUoslEy=VDqGonR^8E9EZmDJK5MS2%H-cDdli!A4f9B7
z@sq(VY`E3dXmtRUt;daz_aY3%CDM`7f*?j0MboQvpOWV?+F>dEYgp5MLgCYfi)m@{
z={YX-STUD_I%g-18_s)%@3E)H!zb(o4Y~2Uu6T3C)@C$Xi-oE0ZeKJ~qkpEWFQQJH
zhUdFJeiNT;g_?JXO6@iK1E|DMeoXX51rd`w4F6|1fcg+{k!(kPHA)2Pe$ud={Fhze
zc1|~agO<pKcbPb5-Y3Q!)-Gv;m=Sd5k&+V51RYCG5Gzp>0ij=%;B>%uSg&I<Kl}HU
zgX!{GlNU-ss^I4!CfW*ynaC{B4yYKcN$hDn-U+vnHY|+eh0|5)m(Kna1WHt1cXOX*
z`GZX;UuqXyJxaL6l*>tyT1p+_cME@7n!}ckh7I*3Md7BJ_Y4-KsO!0Ft6AaeQTI!R
z*GKPQbBO<*o<UwmHQC%o2a~hZ89)Db77fS%7T-^u|H|FVATv~#+bY#4Q)lcMB=khc
zlZqbjaQLJrg(d1Tcq(({?AoJID^<qbJIRIL6NOGAKpD7vP+3tns90L&w~b3j-C#Gd
z$gC^m%a0q%PM|a)LJ&H6NN3e<imio|(`vRwuG?-}f|g<Atf5JHW~*AfB5CPK<rW+{
zug5SN0P|x)_kq074rR>>y&c0OoFIjo{x|)95E6->Umu3c7G-VvDKO=*QkN!)k%I1v
zUYx^SIXPfD6GM}%#ZZ)7GRV!yK)%J{lNs2;XMhQ`$;@?i1braC@A{*iu7Z8I6~NT&
zx1_50+~>vRp)=S^r|wAXh|liuJZ4Y_hQPcV9Na(80Hq^O(wgs>&U!#8;BuNQE7eQG
z0tOB~*EO?PZK9#5rb+eH*-(+B_vl-Cdb;{Z+Ucnkhh5&V?{`JU*>v!Pxo{q=<eR9l
z)Y6=+FD0FPFm{>xK2fe`%LVa`JY3X8y4$yMz;K!RlLrp~{ovh<g=?Z@bPyQTrxvCn
zC-=+poY)!#WV!noV9{%VU`d9Dgd8e5ni`076~ovO0aGJamZ9z5Er7y4r#DCu*Uo{@
zT8lHc`*r>?_@is)2Hv?4Fa_|7qv6d<SB~I}be{3>PYPiEWy39~WP7iJgBYnHyWG~%
zOp%6SH;?0fak}3Nx<kB{oYZb98w$T3KC`W8Aex_cD;E~PbZ$mzhPUi!btSGgyz2Xk
zy&Y|Y3>jFgfvyNkNc|8a{mG?p1CB$)_9;satpO=jqmqowk)7`nG0ZI{nAos$G~dnM
zXp#v~8rpm<lm}^!JJ1bni*yXGfnz@4yt}?uC2CKn4Z8W6n3!0~U+@n4!|vf;%EvvN
zw;H@4!@dqoF^j)cb>B|+l5LVdz^FIqZjRxn2gDCTvM!=J`q_a19JL}v$cG|+n4U@Q
zxK6HhH}I5{6xyPNKv?uy=(Fwq@VTeQ-V`A>+mE*lzXSo<Vxk?vnf`U$y9A2GdT%;H
z-&ddu2$k66{#*sr+2T<*z2?%Ptab(>e|h@>LD`7JxHkx0_svVs1$6kE9x!`hQ_wFi
z$5GI7LgVa!2n2aU7(@BE23NJXu}H9Mcp2fUD5}J+=;QsN)9t+ZARn1|54yW=nUV#d
z*F?hqb5drf8GT13eT{0SYqzAx3=WlDk;0x^Fns$1&Qs&Fxpl}SeHSu0=gyX~5*YiI
zbRj!-CqaZzQ5kJfH#NmpI?6N79udt%5w!#gGdq}AzjO3Pk=bZsPI)=Lug5M8zAR1m
z@gu*iKpZHYD&@V4b6z}kxZRO+BiZ82r%;}P$2&XL`3fb7)?mkuX`^`m0md%KsIT*j
zZtO@pQRLHS7D4q1kU_E6mwSzC!2>-Q{EwRffAWeG=BB0|l#a0>cttliy93;SdY;|V
z-skKk3KVEG$LbqH)PgVH)dLbi&$p6mP2ng5J$na6&{~aas{|>*wV{=$ZLyhfr3vs9
zuQoL&;;&2KHmrq0A&yssw~#9Gy9Av3a9+>XQx@y5%q18<E`x<a=Bo12NKPW7K#+ax
zh?JGJLS6{p@Q@0yb`AphaqDc4z}vq0F&ke~G(D!Spd6n?<gc<?Wycg4a4HiClgO<?
zSM|KoAA{?Tl~*0P;d2tm=AYyW`aQ=;`*P{JoU{we@Sb;m`0(G&s(p{?Kg4E41SWK$
zfaYn#EqVXc`{Kr)<$xJu`BmRCHTYaV3()+jPzt(tVi|2Enrb@OaHBcWWfqGv3-5k#
zD-oW`sJl;ELR=~Ki-lAP+xNrXIGM`!_5j>rvj=TpsHPefhn@wH{=2ZM3BqKbzNhs>
zku)tngl9iVubpRHURIxm6`n30Pg&BQK~Tq68F8C>5@NX|KNss0q}ie~ZH6EMzui;$
zx4_4yEnmxroG?Kgq*y93QB9VwlF-|e$bx}M`W~>h9Z!W0<81c=@i)i<5T&K1e}wX#
zYr3RO=^v2yr-ES)aP8l6nV}l)?eRUmzM|3|<8JM3NrK}S(L|6a?CsCpssQ4TX#~qc
zwjXy`l6pz@BL)h4Luq{kTN}WHF2V<^O|f-(-$?U`mI?)%E?Q0)&CG~ALPjyuc)@fU
ztV9%T1S$3GAn!n_)QP6D*PwS3NduliJRKm%Y03r%J5Lu@pic{b#MueC>hgGEh?XF`
z`Ht()LE{&SBt5cuclAaKMgjBAMcM;mV`B@EBI_oHV1RHP+Xkdn$-zqT+qYuY>Dmx@
z*KYzeHj4N0-`3S=ydAs@5SxGFv|K_T%;(9(m#<3|lo`sIN&3*#=aAJ5W)-SJfX;{-
zR`p@jtVHVwle=V2Nbt4?<A2Vj;Ww86S3)&~b#koh_bhuTtz%0)<KKHr!%ed=EJdPH
zb?7?oPMVAu&<iixTFY{w^B=yrzel&oA32G(tZ0TJ@_l8|_qvie``#j8AkQc#r8uC1
zfKU)lLoG}a>5znlofG!E^OC|2F8TPn7Ou-hv7*Wl((swbKHnXi%XJTG@9Yc!VxSa3
z$fMgl=F&<6#h=YqO$MInF{L?vRRv`8(zI;7IpiaIa+CW@RGC@kUGwv*?lq@^v0(y5
zsw*^RW#*ZgOoI0Z0@XuIC4J@7If2@2h!vE1nNTchL-6}aVqcR*o~$ivmCBm>=qlT4
zJ~!2r-N(ii#m0U1YkT$b*bhHUVG=iUADrYb)1Ns2!%rUy+u0YHY~yPiJ{g!?LEn*#
zWNtR^_zW`KEg+ih=OZK_7Gwf_2Ws*B3<A#<IOCVqSO&iSX7s@G;-^;9Oif$XgUQbA
zHn}%*b&uStPNXb(G}4eo%v4zjvg$OWV94?G8K~e%oy`dpXBR_AH8W+qk}`Gr>1xBP
z%r9dre~53SpFM-YAHx@O^S1V^^{U-L3f?LPLOz-7UK-J|i$3tz(8Hv||Jk26N8JaD
z&{0n`m8D_?+K8TCf*?Ig*-_I;b0hl9>N=o3znCRO(dEX@|B^ySmDuK7O(B#S>xqSU
zYsOr9>l*37rw8k@sXb+-`;(CJ4E5vq7`F)tF93aI2cvuD7l)s&WWZ3n*T)fp!_N7)
z&B8ru!t@dHG7?{E12$KBEJea7=NHAY=yQi>Z=TFAA>mjOWs8_=H%<*e4B(&fg0#a9
zyJlKc6w@RnP~gCmMmIYlglj{#I;B#ftccoMV%#*VnNWhC16jxTrq1eeE)a-(MAknt
z0{5fa2nUk`tkzr}P+4hfKF)f04}_cu9@ipYc)|z9(u9bF(y7IaQr;h*O33_Uq*yNO
zchSD&Q598ivde=!#86BRPXt}RKF9D`P;gH&>0t6i`Kab2(@bd*laYzNR56Yh6&4yV
zy!VC(5JZ<dk*2YKD|;JTd6wvQc6-Qt67|?;Ggeg=yZAjw<XxQU{*lcr9*GmxTwC<%
zE#(4@xkfFER9RmI^rD#M(Vgy1^W+KUHV=O$N3cTnv2v&TC6UsesB4|lvKYC^XPsM@
z-wZ;l%pY1`3*qXUtRR*F2cZFQzeHD(2*&!<9zB_Lr=>?=-06Qih-@h8=z7EV{?XAk
z%@fbYyQf9UX}b}iD$BKhdi-N^idi042&%SFso)2x%%}Msy!mi&ioz=RP2j5<G^#^H
z%mo^E9tPWt>Ul0ku1q=(1OgeE8#_)|dICx3KJ>)BHhDM004LKJuI=COw*y!;%#pw9
zF(J9ta$OzXj0%8x38ZDIDp&8a34;+P8%}cOSWxReDkA7^%QHJq0SWzDLEBd?ZpgcP
zzr$#`b(UQo-(Q+|e)Jb>UW8egs2m-pKIQo{e4LW{-1x&TI<h7Na)0XzMj{q5O4j~D
za}^a8wV<CRF%ng_VBMGV<~b!ygqKN@w~5LN3aZ8!{3|Z)z9M5{g}0^Qyw_cH3vaol
zJf$ROBe~|)=``95Fo$?cV)!fmhVcvY26ct6n9QlPBQk=(_{fN8TmeBTo-7|iD-PaP
z(Q~0=XtqUTZ7ks_!|vPm1&@9|ZcRdr$*=g<k`w?hGI~n|h9=vaSuf@3N^4rCdlwmb
z>idAn@7+;^=P{zf?!*lrPtXR=`DA`GS}Z-MA1awo6^7(5w+vtudkL4@uKt<Y-u)}%
zsDc%WTD7ew-ojXjNEK_IxURaapIV!cxlLjZsshe$K~wMZ%}tH&o+G&(44Ll8X0c-+
z*U7BFz=~WtnKs*|Q*)oeI+@3fPwLu;!>^T!jP3^X9=B^JQLuRM;rFwmQ)Y@n{lC-6
zvgSqlP16JDeXT_bZCyytN>+;ZMg80L;*-U{+f;|8Fc;y7N#S1YlHcGPPM$L-aNJQ-
zj_MPX$XK*4eLFrpjz8H0@&4=}w$n0xsQc=0!y!HcLl@m}JydFA?_8zU{Q*e>NgkvE
zrKF^^rWds801?}B{h-+e3?$vfv65P4SQ{j7z(}0l#*Q%JZ)m>-xbq3w1pwDvP#?$l
z6CL_*ElfWlY3P?@{qfs##ZM=!DP{!|_4?T0WoasCr4XOJ8s7q!<vX=Nv>&w!Uv(*H
zXg(Rx>-^ZwhXAS)y~TjW-X*?6-Qe3{PRi8R0|LdXWi3%6$fFPie*bYL!C$`}=$nt>
z3LaOfs7^#F_&0NHrwZVMM;Hl+yRIHJ>Jc%LDm%GM?8$xhmmCY(=yL99xbNTWM6m{9
zLB>ObnfBg#R?^ar6BZ@S2^oinhaZpAFr~>)f`tTbrX{`hchI9Yuc$I5Z;Mr$T!s_g
zp2sXrXm8#Egc<rL9fYzgzdeIQH8Gs`sfoY1orBlF$=QdnlViz;^_Bi&DCrw}q^rrP
z7!7#23YB?$J;9V#QWO`yWsm46_I(DUQu4ht5WaO{SM|L48D+B6Xn8q)ozUb$Q?QWC
zAvTnAkH|IE2BdDFS`8?yET%#hn$V{fz%(w|2C%9|5cEz%rq7Qa+$3WQ8LR!eTc_W8
z(^1Ob-B~H3RmDt87GZssTGhsm_(j$$Xc7DSq<sTb-{g5y{2X2~zGbe>tm2==louH*
zsnYJfDaF#W9*l3fp{UXE`D*_N`%S9r^tQ%b?~At`eW7;Ka8IDa(fI2LS96{-x!O*q
zk%?-0y&Qn@vp~_{XsoAeh09HQGe{r566Od+Ad`g%2;Ej?TyOD=Z7m_8pB>39-+loB
zpHp&WjfWLqVgw@e_F-?!ne7jXX7^~AYf{vbP+6-1|3oDe7E{%smGskcWv!UtY~nYF
zXuUq6r&l@rMPHC^^nIg=UtC>1VLrhT>d7J328+9ZA^v8(kH^j=W|L)%RkxkUZAH_3
z&)?WZ8k3&T$nC+k?P#2M=;z@)CcP-~-q<<<KC8}QZQ9o>u(?-!JvP7LDUrZ+)ZH%G
z8}rkpN&2s13!1ANa1)&vxwzgEt$p@8AFt_7*BXgLb`FdhLiumD)UZecGM^3%+)!tV
z6uW^67x|=@0lydJ7ijOoBL)}F#ABWYU__@M^r?Mw<Lzuvt;*)ZqTO4Vygz$G@(t4W
z<m%#`22BjuONg12XFvb8bfgy$1+vHX$IUn<yWJ^~Ksy7w^+?GRczXI@TU=g0pXubI
zduuK<O?n3u+-`GTG@|qs(#&}4P?=K;VoYGQMUxG1sXVbIDm)zMwA|xEao9R(FvPkw
zds)~=hEI6jgZK7RxTA8BMb2;MPeWChTp0Vm9NzF<6eFge`^QaA79uqSt)jctm2fx8
zI=AtY@<jyN02O*6!soEcR&-tI{j@b7EsWkpd%@@Bp?qdO4iVJuxR*xbv(FcsucNk-
zz^vxUpo_~Rx@g0(*=7M!0IWD1!9|Otf!b`#1U*8VcY6_!&5Q}fE?kSlYcoAgz}q9z
z4<bLj(;<$Pi9(7){l+K!$&-sC(Ol(qY0`QLMItuJG32-)$m~SpUz`Mr-yB0agV|sa
zB2?`)_>-NO83Q2rNM{9KqoCcnNq?-)=H{&+f4%gZykTmCSZp<VMvVRwj8#}0&^0v1
z<@aHHl~n9MvZkZn*xmpp;rO0iiftrYCpc!|f!^0_b;HUXAKYTze>1wOS9NgzD#A_~
zi0|2H_?wy3D^hxd(aLf0$)s0<C{a(na2?vEe!p9t5vZ|#D`(6@K9B@Pr0UCOpM`{g
zZA(wKW$+d1*?LTR!3f;E-;NF1Xh#)&+#_UqT*JEW*Pm|~rkHIH!reZHB@|HHflh>|
zdJB{IQ1t6j2Jv@IdUx3dZ?E7F1O-tz4iIN;JHyM^1qpO9=DP;N>uia&rE6rKsh9%J
zi!r7>uTF26dRDs$*yPKZfRQJp2VvFmjaH=S_d6N>r$-aus}Sdhs;1sds5sIrfag#0
zOrVD&TdU1gn{e<GmoS3pWl@su6B<N1N8FiHnZ__Sy3B;V7J)*HWJDVm+@VVI1YNSY
zOGZQv@2J$-y7HfY53bi08z#iu>fU{~HIeI<5T`beh83gj*S6x1_ZyGz43bKIuXo_n
z*Qr*>sLkY6ps=s>W*&FMdlH*jZj;%g+C8~{cvx5(<qoHS<OvaIlPe)OwiID|TBXR~
zjhLNbut9HAB5R)TzI^q*b!E~vzx9njER&mu1q%}G3Wd_eEu;HpSSY|^%H+?FhNvZ%
z3%X&$r%2Q%v5Tf&_<JY<i3}7mqo-5io;~;VDM*Z*(=pX2Y3!&mPxY(-%Fj#B?sSnw
zK83YlJoZ(;Q&^Kb*e@2xb(nxs0;V2sM4TgR^?B7l?+W-jW!Z+&*%_<tGmPEGw3ZGm
z-OX1HkkS=nBy;YB^zgm3C`0&y6l!vgHL<G{aq?fowT0~~waAEHD3yH-6z3dLx3_r^
z<s_UlN;zYo#PMju5<V+^`}QqO?TYPVTaKxhh8WI-@jXLE=q9hkJ8D+ZhN)3!WK*=O
ze>(Ho&!OELr1j?>_UCPEv~VL!qJx?Vn(wGaxabv?$W?)H0f-&hf`%O4LaAy*UB_*@
zkDiX=et5u_Ps)w!?{bDF7aTv_P!)fu;P{qU+(WKbN+@<>bjM+B_a_;Mn3;{<9kmi_
zb2*_f<I*6&!>dtKQBcIv7Ny`u?qXNA0${OQ?KorTy1Hjl9ycamE?*Bix4=gj9Jxu*
z^TdX|gNE>Rkhp$-LveLUj|)Ygbgj1|HBh`B1%04vBvhO4E}O*rwL044MdNc20f^z7
z{^HO&&2T!>3w(Py-O7yS_UcMRSlI8}=B;Bau|q0Jv77EeFLJOVC8#apKC04I&;|b8
z{(!>mJ_`QoKF*bTulKp-3wh?41OE13{|kWI@5SH=;a+j#ZQX{)2>8MV3m_n;>ZiSg
z1xa%UPkk%C3ua}}2J}6`=0ltijOMgwy0}`y`Uw`{su6(a-FldYQ7u5ToPDf6Q!<at
z3%{GjnNmJ^YJVzAvr;mSfkHad#Ukyluw|2Pi&TrR#R!;OQn)N`@fjKhfk+U4Y1et%
zMrj@u7iEs2oO0w!?RE8rtuqvgbs^55QAa}SQod0=lf-Y2eeWPkhT<WCUm0(63*_b*
zt^hRqgmru}syPE*v`{x!r$C0$k*~S^dMs`C>_{W;^z>9&Ul)XMbBZDIcBL}&gw0#n
zK@nBch9|5~{un&INPC6sScV`}V7z>|XNWc*pD;gEqK-<Hdu#y~m@SgbZEw5+K1u)U
z@m$I{nla4jXstU?)1j?3Pl-G6*YkSd7mlXX9u@$2fm0UXZaN_nhegzx6&NlaVF0`}
zFofW{G}_6Nwjao19<LF((j2*A#cv@CpD#X=Mg4Nx8CD?XjJ)oQ;ajwG$TP}a&=@6e
z{ms3sL&neu!2{S^^rThLCKA$iMWLd}ii8iHs4Dn*v#dT>NA$yV`%ugt2s0f97;Aw^
zYHYkTyRYU3?N1o|UICXEbAwlxC!@-`F)K*#)ohGiQY);?7o|XD^yCZvQZp#03zFMY
znjVgjrBUmfS%25RRft&^cNIeJyFeSG2Ya6dj`Qu;R%I!o@p6a}0CYs19Av?e(cUy{
zEIW$$%cUU-GJkaf^Xdw$jD688Om)TKz&!yUD)&A=@8^~0x)aU<cblS*Lmt|Pbdr_+
z<F0bnF`y(8&~-SS*Ih!`mQk)z9&hstAAIu7c=SUWJz$6gUHqMU-(36QlLARBX9Fpe
zGQZ$M$tmARG)t=<mj+gx1X@T)h#!SFxn&YTJZ`V+Y`V*x#f6FNjn~@xv}0Akx&}=E
zJSZjL^a<n8T{B195%3y5=6jrxeY7N)O_8bFh+Le1!Tr9T#yn=wj;t`QV9LO*rr85?
zjUf}l69p8SU6a39O`hw)5W2qmxif)DP4;!ay>QqKJHe0{va1etEaGF^Z}-7caQ9kJ
z(9`%ewgQCCn`+6v7fXsKc-^PSa@)k9YjiexAip<zm8oj%yqe(KcEesU@W47@haHO_
zQ2`i`bU*CTG7J}H?{)=8AmSN*;1^HARz3}ix7tzlEewdV$@}pX#=zPe8fM?yya^g4
z$B85+{C{M<V_;oTxBcD5jh!ZqZ8WxR+qUhbY0_AYZQHgQ+qP}IJI}rM{p(Y{<Y=F>
z*P3h2F@D29D#;ruZLJ*<m-}mX@AAu_qf~Zt5XpG!smR<w{LJ7iLb^J_xpJp&UYgwy
zeik*L&sCQbY*bTEQ7o$j@5gAY-)@v^WW<}$fJ9UDfRV9fbW|$R_=o!??RI@>9X+mx
zyZWkeBa6=8mEQ+<PxptKJ?6ZP{}90yl_0uwhCqhI(GRdB)SCL`iT>YZ-_K}*xcs^k
zkVpetgm3iA+IfCMu&T?E25cjiiqFNraCw#xarFI|3&K3^b$flhS`IFHYFpJ}b4MsM
z&DfY))#~NBIrED}gAnanU&l2LVu!k#TY!|yFuQ)$i}<!?Fke<Dv{JS|i;~vmbDt!q
zG4YH#3(2-rY&&S)>rFm4;i2VyH)kC=r9)0TgeT|yl`1|V=C5+7K4NrI5AEj2Io&HV
zBgO8js8##UV*5Ed?v=hOCVJdv4E9=2>~$Ia(6K*tW4bu{7x+3;SD7Ct6)`<Op#iZU
zwhObRxc$^Ubz4RdEnAT;t0;U_$8Qu0rqW7&KzPuiLK?KbzHUu*bU;Gtp@nrk5xYqG
z95PAcoX0UJ97n&hJ!;?bGF*eNCj|!dSvHL<zo}}H`dRymE`o>r(Fbq-WdZGbt1-=i
zyE}y|wtaTW(Z>+n+`pHEi&Iwi!F9QFAp_lGqFj_k3`~(_=auF-_FVIrSj(N=@kit3
zJekpz1nV0a(ewq=UFjG8O>jPBp1bT<75YduUhJ@WpVzugDk(nVY`#6ZFSH+=@?d4k
z7eTPS4QUKjZ&TCnoS69+lpvFgA|oT`6qh)UsPy~ak2-ofS9ab77@2etPEJFrb<Y)e
z<8}Rt1~+he`J%HSro#6gIZMlx)Uz$64!+04_Pq?^Wo<Zm^Wyvq#xW>c`QmJ`Vm*R6
z<A#(oeBMLA4dw{v)IK`=Qc#1g>>Cv5!O@P)Z&6P52*!9VYImnv?s87o+(&*B7+hDE
z7FveqNTUb&bLu4$CA{t#SJ+b7YF_qMzZTAwdPi16fg!vkt3P_B`7Zk4Y%<D7D2@_O
zS)w8$$IiV|JO#Y_Ywd4aTPS{Ssj5U*yZqRTZ4gJ_&emFeo_BSJ{z-K|+pa5)VX@d~
z_%g|kPsu{TCL{?&Iy>0A2&nt0a9R=|VA=Dq-Xl(;&UMFWvJaviQ=J-jg*qlm;S?J{
z<5-cOjnLD*Uf*DS_65&Y51E|vaMw8WI8@)ycJHxTszT{XVKXI<7ACE~TirS84uYZ_
znNwWa*C{Z_E-$EwU-@C5j0fhY{G{#*+Xg#PN(wYdHyO$7^E8~9Wk4aH4S-Zp>u)6_
z`}4eOGMdC7=zec@zmPG)SQ+tq^asq>`wj<3XMS;;773EPHTZK-EVHT!@lpi4e6=1v
zhp7GUj^6ox9WO2!Qr$U6@+0*row5^Q*S*JhzFp;w>&yChS;dz4?HGWj$UKEc5fmRE
znCX0(OIt-yFY+({MJAh(C+|arhR}Bcr@pur=ZnACGMFo*O_BD>8l)t;)Pg8e9kt9$
z?ZpLod*j;@^nfS)?d)w8#~$$Z5|fbyYTE&F8fVwD2jlmm$2F7>0c~k!oyQ$QYR?l)
z*aZTw5#jiI&)4On#g`R?CcR;tkQBDkjTK5VCTtL(K@q({Aw!y(nH-MPtz-Sgu<^X6
z1naM7w6bvXBNBm8<GJ?i(FxV-k8FbwaidL@5z9HgKfc`5B|yL3{~v9u)CPft_J2u>
z&g@z#tT$a8Jo90tz)U7GA{1v`AzD}bc<t&Xe^Q)!#N<aAf-t|W&KBYCPU(qi==`~_
zD8E4?F0&^j5zVjI{O(2e4?+peC;-xKFdTEHCG$L->!u}SsD=R%3JwmukmH}Yq*5_i
z-AdPa7Rl}~bAW;Z(09;9CNV^)PbX8TbG1%C;K5JdhGy@0y$>U!s-&bV#X|e%S;51n
z*v;oo_tWq`hrHBUgLI5}$mx(kPYq)JTL#zku>T3*Kh2GKg%HkK?9b;68ipH$aG-?J
zW~KMOtIEN;_;-bz_N%UR&rKmRmUw@BI&syq4rWlVDk$1<SIxY+!v4K4=GK2%Ni_)Y
zP66&oXkY@!*fJDeaF$z;7RBnr6=2HygjQL$81|y`3O3>O7`E(nMDwtdN%gRGZu$|X
zns6~-xq;g?hR|8WUg!M0TKMDYrSN^Ng_<$Ij{))WbI=Jk#%v6A<&^hudFqGI3ev9-
zj_><@wb_hP&0u3?j=x_s|KP97qLz$cH#^*tb3AW!=j*HDrwWYs?G~lu^;#0Jl{Rv^
zOz*i8@a_>umc4zyV^%(ENbP~P!Dx(H89w{_lOAc49?Zq?#<jr@vcJuuHQM2OZ{_W2
z1~08tv32bilm}6F;!<6WC1m6*&pED&Pu<P%QooV8egD*3YqTrrz0K40-eQwIk%Z(*
zC*Aev2_eP50X{!SI)KnZK_g5d&|ZWviFFHnMUl^bUe~CtFE!@n-d{YEuQqi>gWCI8
zPNM=Ln<HD6nReo$c$92%%XD4<hZI#rNMt1Q-9v!3mb+f`2Py5lp=ct($;+2d9R*>?
zY1|kHlIO#@vU{M2qJTO2uR|Gq<l&BOY`UTojEYL!d=&{3?glaB%u@$;aiXFlrXG%1
zkc-|ou32_w$XX``N$*;4dCl|GHCr|1yG?&k38UZr&N(?b97<)=vkRGuD#&n{JP-*g
zDt1oxfvK*N4hE297z(7;NWE9^u$Jiy)<0UaYvdw;`EL@`<;!SEhYgd0R(wpz;ba3t
zE4HYXqIQs(tRt8EoZG5rzZ0{B*L%~YV@rCin&>xgAx<@xKtq)zsG5FWZf=~1RY%!Y
z$p(A7?z()0u7P#T)`a$eSt89zHD8v5>b0+LO#v(2XIn1zFG`%n?Fta2Ak?!i?@tFr
z1ox-{tL5Z%+14o}ktj@+rG3V^+?UhV2Rm)m`p0zP&y|tTD7~R68nbirl(tysbn1Id
zbaV((u$}MECoaJwj2rOC>iS?{O$d5HT674myM_JwOz!697?G8GJbJ%c*)y6Pu+KX^
zNZHy<*MEgLK774}kB@##;sy@!<Kra=n@*^!7@vx`<w7$?+mQ=leGlyWat|2c<ZnqW
zyI-p&!%_MDkjzTy)+Umw7GYs3><G<pufpN46zqf2h@_%e3)biD(+~mWpb6LUjQSMR
zbd@Eas#snD4|)u{SZ>kOtstYb5u!}NF5zFJw&u$rs#1+=$r76UuFalrGVCn9|Ax^s
z&zJKJ$S#_8;4hgak-((DzeZAEQ`6>g0sj(YxJ_Z)mqsO~MXCBm$~NQ4&dKqGC4acd
z<p?jHYBl|VH?+(`QVJWLPdxk|Qe48qdBUaWefS}wgd<AuX^(=GmQ!k|ATH+VpMh8_
z;9d$-)_&lFq52^-rVX9&B*RmOGz`f~h;KpZMK}m_X~kS!1L+d?@`+ftpnl4n`G?t(
zlTvq}jOz?2^Rhe&BgCLk>$H6b#Mt;1Z7f*gK{Av&(cC7BSU!7ocGMq_+Ez<#NWL8(
zK5kKI5Rhc5QkY0kE@*p?9&0_`=!46?_bc*Ay^tuh?aJTAg&yVFXz!+QNSYE%buh%$
zSs*}wHK=bYSJZx&Ek9hX3iWhrj&CC<&D2gs=?gX$BQR!Bgd6`jqLanXy_Uk`D;{8L
zPqNYPpIXWltUl-C`ZJz(1Ul4eZ4^Q_N_l<Ni@<w`J8iNQzaAz6?LQ>R5qZ1QDyJzQ
z9#V|a>${7Jta|p_Id5!kSU?qNGpWblfQE?@sPYV~Xtb&gf)og}tMvSljkmsMiQsf6
zM0S~WLp9K%|4lslyD`r_zSJ$#oWKxcNX6$ma;{h`k>ds((}S}cJPsWsMf*2Dy3g`4
zSk#aL8+SK|yoR!XxWCj*py4Ob$N=x?=vZUVKc#~Dj_Thn0EI~$Nnup%)3B|4KpK6b
z#rBw<j)wC~{A&Z7a~+uN+ky3B%ZuS!j1y{t@=gt={AHFC!!tAjKDc}+40^$KJR^4S
z_f!3-Ku(selgf@hqA0GMi>i5Nu4fLHEt(=)I)VLRZnpQ6L^F$`VADf#H!wIN19UJ=
zvc~zh7mMG9>Lb@j&(k~de6%@QUcaTglxp-ini}e}?&sJilo1ZdcAZem1Sky{4+KhH
zRu+vT4PgwU@cL$v6vYwCA@-PxJpO?j$|pIYI+{%M;a#-AnD3c9n%jaD2n+V()tLS6
z==swo=(V~jR^8}KJc@LF08x8v;C0pM`j>S=Syem#^Q~TwHVP0hitzcNxi=$-5!yyx
zkFt%DP;Ex;P$cnR)y)WC+r7&1yuZ!+>Rn)l+|5GnqN;9}EZuspisQ+NdVhg|cECeC
z-t+5iW!agL<>>|pcI)}2O!J=IB{|0K=BSj2|CjPl9Ye9k`3S_gkU!8*UYsCz=$vlD
z_k$a-5tr<<n?#A8m9~mOFF|+x5tXFSDWVdJHKbY$P1F>k%-g+QO7A(MzV9!fN(@xb
z6%gxb<x_`Ymx<9vIVJaRXGT(L(2@y*7C}runZfH&smT45vGS^D%Zr`Kqyi!)K14Hq
zzYUtmC&P#FG0lePyIoRh?hA!JJWfBHRM+hql7$^79XJ{6F+X1CbIF5n!dMkii|l8l
z-ABFJ<)2n+@9Y*97SXb_P5@RWN$LRTm$S~klzj{}Se~V=BC)?I+^H(ZMz!st425$0
zEn08n#)#!msb3^vFSEDy&QB?i)q0X)pnGmRrzj}OPp9A(G?Ykv>%VL{t|4UBjg13=
zk)$$?+4UHtd**J205^kY9Z`xaoCJnML8$jvIGd&!b9U~2J>%oJ540Lz5Lhw1-i9HQ
zn0%<cU#0uc0fEYw;vTeG5q+zWACV*nu8Yv3Sg&I2)d->pr}D+BJd%=%p_>564im7D
zP4B(72m&)!M7<?FIj~1>y)}q)(D}*@ztYN1Ox1}NFmVRa>Zb)=yE$f7LfTIBl@P>d
zfDAWRYaX9h-O<bAr|d>^OjWJFL^caKOPJ{}RZv){Ki&7o4WQsLxSTH9Xv^w$VAP}K
z@1D&YEEbhhD|dd(G2ssd1}NvF3TDPZa~`WMa`tn2G36Y@fYhZMHZD_fKEQ!|+B{S(
zofL+0(_CC!7CXFKpD$CSDrf-R&N}UeZg8W>jqn0E3L7LY0>W*M8=qv}L1HwQ>x)nU
zPDU`xW#djlu6UA=bsB%39WYEciaSXry+A3AaA0IJG4%SyD*^3L1)#~4R8@D{ZpIbg
z&kss;8vu_#fTY;`z9$@p9;0Cfs^fd*j+%(tI~=1h+@xrA(Jh$7><J&Rwi<2EhV${x
z15QLHC0J`6vL1I0>96bv`g2-A`7|Ur7_z6QCq4_#ll@kRVrhL222e_WeFbXMk~HF3
z#o_eApvCG^vN*2u-DbOUL7jP2(hv!>Bo({SP{NqH@u@XP+-@Rzi+AU$23x9M`Rwy*
zio=R#YP(A?d$ztWKXg3Ln7tk*xygwtlf^>Ims>3%2`R>1W)B%INlLqZS9bK%))aV(
zPGogReTYH9RG|@@cK@Aj)e;w?$H)KT<Ksh_F~7Y0oK~%hqrE5Rwa?ijF#iMh>pAEr
z)F<ES<N4nQpS^wcHQ^Ou>GKvDZg&~`fjr)3<Y;cP+l?nM;^OHdkh1M%b8V<sCsK%w
zv%^qdb$<C0d2(icbmpnQb12{~_wT8hZW5M~!{fP|(*Rb>OF+-udSzyR*j^CzYi^tX
zdaxe5dnDCv*IH4C*xtH=iuwu(^OS%CGvG^>{rO>8Dt*+NnZ1kNTVjzGAHNgw*mREG
zfPPNw`U{HJRlzxo&&$NWhN}j~(in~;0BGfTN|E<?X;;7glbv%OOJ;;bF*o|dsSIeJ
zC<y4244|2tYN($+1?7@-?MiS%RhkqByPV$7Oz_c%iuyhk$V8WS_X0k`G^3}7`EwL)
z18F>IW2wi=Jj(AwddNe*-sWefAO|=s8V9F=mND8Q{noQ~5Am6z<5TwlyRA5_vu#u;
z=C8n$dsIXO30;avjg1taxcIj_Pq<m>df$EJij4t|JxXpu2ST<q!JE+s<CEYX#*IWb
zaqTrxKXCnu_InLsc=fyVmoK#T_V$aNzMaRQTx;4}C){w&#?17NW*<Ct_g^FGq2S>M
zND{TCpLuSL@v@pZ-07IaU^|L|q2^A8Lt$?^LY#mLL3^MG8~Y-6Du^$8LSb#Jw7s`6
zF-R}_pq6+->TpKKEb1$=V>nWn=xZC<Zv(`;e-5rLJnJ1tc7&vG2wk^_dZ%GmisC0Y
zXJs+`*Z1$Zv`Ig?pz^_+C3;dhw}N0W2su(#Q30w6U?tWIrI_XWcfo<sW!Hv=p<|-J
z=KbvS_c9d??d15_?r@TzY^6n%<ai#tG+857)jz$SJv0nDezX~__y$0sNuho98DP%{
zZMSK<{D~qMsecfqPAi4Xu0)iGZM0Y_+{h+}r=qG|TsHHHG<K8&yd)^nS82Si1n&2l
z+plH%-JrKAJbsEn<!g0<zIc2p0+7d`q0lg!BI_j6kg$DZ{L8D_U@aL%m95OKh96<H
zEl{VC{T4pht&EmZNi`kL`OxD?ZcGe6=4buwu``MOv>#HH5i%PpRUN}Vq)C91RbQA>
zke=+SI1tg0m-k@DK6U6B<c%1{sVY<q8T{&`QmK3wryv*y;1GaQMsZ<b=4RL)&}L71
zgFOoReKcLhYkM!&hw!F7fu{I6VufJWEa%wh$6#V;N`?{)W7v~x+ZinxAx(PkKM5ve
zI=&mm4h0hJn~cS;G<q*wNL)SD?~acK(a<P>`TIxuoxcE*w#zQa2XJ81tr`b9xD$-3
zo|b<jg~33ar(*Wb@#&)tpjRGX*P5q!mJ^lP*<Jj1F4*v<g=$b+VoHi!ey%&FA18Vj
z{>f6_K4v#W6h{|~1fQm%rW*C{_Y{ku57gpojqMO<gg@KUCR4OeiOsH2b|me`sF{Qf
zTMs9mn+lI7wpy&>A9k%ZVmlyXa?;<pCUt<pA`e<AxeCT3w@z?@#|2x2?g5L*6l}OY
zL4OysbF5Oylbaqo%pv**e0A?%Occx<NgFHAnVUE{<)|&238Qs%Vm(zb@YHd&pv<5M
z!@TV+7}t6NgU%!8hsMVGLy(A^SpU`F(~~2aO=N`IC3A%i&kMK!?vw>xedBd0l}>yT
zsF}a}eR4j@(!nT7k-fay44}Or+{#|r1N^^5h1I|RRurk?Vkm4owBBMu^%{pA(Kh72
z8;mtLrkD7IwR@DOV1>=)CihfZ+X@n;QVkyOz4BDqkug_s3;Fy|r#*h2K|U^Ve6;oE
zqh)S`l}53s8EXGopJuB)rW-9d-&5-e8?0>$;eFFzkECn|N6-*Q0)yZHc^$n8uA-y3
z;8<zI$O2p>g5Jgq*y2eP#6q2q(|m(`%XCm?h-@p6i-cXJKvV8~7KvwEOj=sGc!p_k
zSPAiv76e<7O)gYCS^y&K2CrIj0T9B+2U&OLiJ@Jtqv0p(cz0~!->1ubx>LA3SAvp6
z3F*@uhnGh{w%*T)U$-m3Ok!)qTiR2L$vG@~?{|h5Wr%BkP3uc#5ib%2a8)}FvItu}
zB>{Nk(yn(vxC!w|+Xa-uxLmK7y^nxybM8=4^zPp1EgX|E#>L4pGj1%SE}v@9C~Z~v
zN?WnDru5X14-CRkN?&zrJ8I(#9^E2Ky#Gz8L-vKqHMw11TQz@G35~h(k28z(8eLB?
zHd+1t7piVWiUHwIDDnM19F#*Xp?w4T6<j1;8WR^HlFk05T^>L3_3~67DOO{>gA0FG
z6;u_Bc~&Kc)v*Kv;iDDa=H9U%_>OpcZG+m~*NO_$84%0{VTD$FJuR?hPK6)E+}N&z
zHX5HNcuM~`bEgb#euS71DODu_D$C<)hZ_bV$QS&0RFTZiHvwWJv~4v7_|*_>kD1_g
z6XXzc3&ICX2e{Ho+gU2Hne>0QR#pQKE3%VMtMMVy>gIoHkTclqLF()4-M0Ub#s8IK
zB<xT425<Kc;4$n5aa=dkUDuDskH(uXoFyx|{NH2=^d~f6Q>zctUa&k3O-6N;c8RxI
zM9*1V6n9?*zkiaG008o4FrMmm2k+}Q<tmZ|N91DjqMiacULt=71@4<s#$z1Z9{RiI
zX%boeN`li`Xti&tj#kf);G2IeO>--jkZJE#h9pA!2jDggA^tD`leW@{aWb@TAO+!H
z5c~l6nZZ-2anr;3OA$hqqPL&5A~Q?5ZdlW)6m!<Zh8?h|WDtI?7}CE{9l|Go`w4+m
z=@Td>0o(2-5+AxkMPjh1u8&dmQjr2~i?yZSjir*dt=18uE-xV*p?lmvBf2e6!*~8i
zyjRrnfyjSaoC#U{)chMhYg#IXjMDZ`uH_Nh?3;rLRZ8Wcpdg8_Q-gz|`Kx+&@(FOV
zVq#qYQM;ln$Xgs*-TLan*Asby=Yue^Y%Jf)c;QoWP?%^Ey_1rf8r|fI;~;y{J0r_I
zMTue^9Veb2z()pUCq;lDf`*Q^bpg1eN=p8qFE3AdV)^yQpIqj=oGWi*rz;Vqa`N+C
zqq=~|@!IS=(KN1mPytv`BI*y5WUM?VyQ)DqiAV1nY1ZPt4eW6OVZ`syfTf{p>uXTZ
zETkNKZ;8Y)=;=^;JoRzf#eIk8MGTJ~ITw^eL^)IvEX6K51I4cVC>oW@=KIUV;Ho{6
zTE`PPWr^j4_&OK)SRV@Os32<chbr}li27koP0bKAVkqDaE!qP}xH$pw5=#nfrczA~
zG~Uij=)|$i)nxtS%g~*zM$oh=Ke2(C0pRQ^r2fsi>PBRfH?FL^wJMjEXn!!CzSwA+
z*`e)GKb~$Br|W%$_bGF!@?4^V$_88V&o$}lDe*>hu9TS#41}542|=t-&Yh;~xa1NV
z%7Vnl+Klc_Dy-t9ubzFBz8$~LL?y?NZ8&9!nMu@)*5+$%)xJhe8IS7^%tea7KkCQO
zWl9%G=97HSY(MdfDp_2|qsV)J@aMz7C7n)%CLAjaA@2{!32DcuVii(4JuCh&b<g4Y
zo8y;N<OG%{enA5!CMMuv`+AV-)>~uc!Ll@#5w~G-vCipwzG}O_o@_gw>{v2gAswc@
z{#0OYywZS}Wq$a0wR1bzAfeKjPf;nY`rx*<u6?Gnma&bxJene)B5!6!J`j$Xn_ly2
zKpN5Zf**iCHJD<Im(RzwsYr6@<#V#eiQMqjEE#K;$>1tB<%_~*&$+Q$ZDK&4uDO~u
z?bJJ!+|b**?>$`PLQU6X2`J>~q@31C$IG9mJXbcl+^bC7>PA4{yiazdSJvLyfLYi%
z$=AFLnilEcHf1gtdj{>KL?|{_XJ>P}%z`JiDo<if+w;E67}h{JNJ9#%uhr@9b`Fb1
z$5Z^fQZ~;X1nwTfT?L+c;Oi$?>f3dviqKm+qk}A<Mx$hTZzQUts8%aBFJ)u8Eu*)w
zaT1*v7cqLP)SjLYFK4n}7>U!@qI(dZT#y3^rzq>A8GDS|7+-kmXa!dDGjzp$BzdM}
zgLc-Mhj!ntILj!HRR7@j9$S+k(II;cX<o}&OWTcQPIzpvAwHs`83O#-YMw0%!F`ht
zF7)+{#oPWr%b7WDofB4Kj50(JmV64MKNqbRJYFAf51+UnfC|pK2{2}=txgEaRI9;n
zlouft?NzeLa9eD?JQqFw(qysj1J3mo+`{%}xXcb*9{^$hS7IfvPI5gqXVd@zYv-5L
z`*gko^oU8Va`0OR+mN!=5m#!hyo=)TwVDqwWQCtj)!)$#{}QH^Hejq|dbYIYR6^VF
zx@-y`=2c*zcuP%80`0`gWya#8_Sst($$FLJB?<&07Ft{w-zU(O1n<)JRtQlSAvqz-
z$KOI-Yh+mkbYZuBilKhEq6W7*Y3v;cz=3|?(Xvv>QrW|D!j;*Fe^?H&NEE6}lLO<1
z*AuRCTqlgNP<FFibYN%vfLCZke?hbD-)T70>&p`-lItt|GaQ~FgS4?rg6XmP+Rk5!
zusmm2ut>bsh=mKhh?NYFAMKF3xs8w!EohBgSI^*ItkmnlJ|3>$hQ=uF@o{mNuw=d4
z5Z8U?PX3jwRQ%)o2>20$6Tn9S^?G^5By_Ri|A28ZkRn`Leb{-iJ?5T@G+Sg&VX9{8
z>TccAGFYx?u`;SWkE)WZlfrEI`wt4)Heitke*BD=fa#HH+x45lwy((T(Jt}<JyT#Z
zTUoFM(IOUEPLu^4K`$>Cuy=T*BVr)V=x}j!B3z7XhIQWKEc}XQfL$qxMhlk|bQ~{%
z4%Fl<b^e7R%&bB{ySx+fQ;<eZ#wf`)mk$pugAi(#^!KCZj+H(^!g~$aCxI2nF1T%p
z;5={2ElI4Hb&vQFv|X_hZ=Uvy&Fc<LHE+|`4eGnom4fGN2KylrlY;H>2+^~)qHEjg
zj^1i&lQqQrfEinA;=~>&IXosMEaUOBW-fR`z4)6LHx8Wc2R>7jm47MSMHued#b5j(
z2)An*s9AatPnOE=vc`<rUz7cJJ!)af&06jS8Ne_1@6TcO06+gPkfR-6yF;O9yUxc-
zubys$t1PytUoCqAMPezvRU5SvU48ySlaPG_aSq}8&viYyoZp=`#@BO95r}Pv#C7}f
z=`!vKf?+TkLM*@XJRaardO!Oq46k^17T!@;%R)0IFBG(eD+VDBZO)UNTjw9Fboi(9
zzE5u{A&?C>Gbiw0D<z@pN!9sxH~V-(TevxnegUPqG1y^ULA2F6^`cH_cO)kra;SCC
zBNGP)<b>BYG0z{`fYls;-QB%$J?+LFE>!Ab&KaZ&j-~wCnYYiC_$ezT(H+SRiHMQu
z_xMW)?Z6IUTPfLmyq7+d*l+2Gg5-$X>s7MOdtKrM>pN=rz(}^NT9`^mcoW#!avi$r
zK8e}V;P2c@in0@p5h=-TGP>0W?H{Uy^i0^&nhmX4Vw$QSp-UIsm80T{lPA|PNw=e(
zcGic#n=_?Eb3@3%elg7#IANrbbAo;SA+%YR!u58)W{R5p0x?btXMaV~OH002d<g3H
zJn%Ing69|dS?hL(>U%CTNh9}DLdGZ@ly%v|O`q4^(aL;Y+nq{-iVlVB8iC#GCav+A
zePYI{<x=*K>l<3D3106CROrqRC^9tD+ha|<0p&(6Cw~78?`@MgI#kX-%QY6&HPJ9#
zI3<-$MIX^H)ARlCqCTXj=F-_?F#;?q9`JhtZWgeZ^Zu4_mEV7&;_<Lar272)4Z8rk
zU+T>2Bo>#RUT!$tL>^43``!W`_OT3^;_x#boOe7l&)H__JFD&#TKh7yB57{_3DjKn
z&5)KcE~+jaYZFE6@Fnug!v$n}3j@8Ki3uryytLo!`uZj=BQuZH3?yi90m8@SWcc>z
zpVr!vc3Hf%c=**ICoQ<g*UvQtRkTx(`##Slq`z3XisqMD{`6r~@_6z48^B+5Yt#9J
zbEm58Brf6Qiib5cd2ACknJ$|`nXkg)@v=SzI2r}x>y<*4eOTirjJ+TyYB_^G!?(lp
zdfi@w3v)NPa@zPl<Fq&2|69QA^);30&b1vAX$=b_Q)Jg?zlc-a+T9I52eqaHi>qEA
zIXJII$6?X7>#gb4M|!;N_l!x14|ys05cT!FxmO&)=D6hI`l%3iwaB@le^rJ+e=&n;
zw$_ZXth4&i#zgU_5XoDQY+&u7O+&(to5%eMm-_V>XN4fhBHiPejF&It&rQkLzRw~t
zMP9*KC{;yQJcS~?^)l1sti$naaT41VOZefM${^fIt!Lsqe1%%IKycdQ%SC7RB?8KC
zCq-QTm2Dvd%4sEX7+18oD)W#`Xyq+9j{K#vdEB4WU^lAqRT5|dG+CXAt%Rwj)gE^i
zXEgP4$st%hYQJ6|A0M-9H#)wvJLKsIF1EQlT2GI>p!^4`uD6lEJJsY)1&iaF2$4Gx
zJ@sgKesJ)W(P$LsaMlu^!wJvN_@)zVOhg=797-7MtEZse#XPTb%;5S<n+^=ycEL+s
zLEkM;3;g#`9Sd)QAes1k8}(8$yCv7@W?0BJ-%9OJh6k>&5EUFL+4?_c*Ylc7LInAU
z&XHfzL((~1z9dGpVRA$0<o^?d^KcM2bvORueGu1@&g$eiSkb9+c+j1OdJWc@B?sGi
zrQ>bmb~8UDCdosW+48zIH1Vs9qRc;Guqg<b+(nV90st!x9k(rTujiw}Wq&CVk>B&<
zB*l*gPGo7Zu{k&+;kevb3)-$YEhY4*7^2JywITiE%C)sMRn9XIqd@bE_v4kZqUD%U
z%Vo*f!`ndFi~wi#ky0TkF|}MuD2~5oFsq9=AHY^>)QXSc^HSqUYha2_lFPz%5vc=6
z96oM7d|uuME;7vXjCG9Fzol4Ea%pMWUHts~aPC@dn*ue0h(+LFu(F|W%2IL?>elOQ
zI%;ZJV){tqCD96a+>XJdzYPD181?aj>ZQlPy;0e=|Aj+S4pj(-`d*MTP}`N$<msU;
zN2t1om;0z@|Iy{s8|&uw9Dh20GTID3BqEgY?MHElLnwel7RVh15Ch9Uj)W<z&Vf)6
z$cleqk&*L4F<1TPfB~>v`1S2!<Ek4H?=b5j++NH8{rh()z*S-0GR${<baXVNuuD%z
zC+qv&Y+bxkhQ31O%GP$zIX**J5tSgXncNV6`k(nqL%)Vp%5N;ZDQFdJRdMwfsG*de
z<-yh4Q0d%d!$u8Rv5Rbfed#L0x1Te;9-cdRF!Y-v_H1pIFij8)gd_J%L>Q<VE>Ix(
z_>*<Up58_`p~B0C=cISmw5_Za0v;on)@V*<3nsrr8>R|!9RCiJGylRs_+GGp`qN7?
zOGEL;a$S%+`n4uvl{;7yOTzjUrUA)AMPYP8T8QDuO;Kv=fxGcWl@pK1+7;NlPOZ`f
zT|ELKQQeJQ?O!}#!GW+0=!@292WU}5w6yTB60+q0V(}NL4<KbSn=ARtGLeUF_c=_j
zw@hR~Vg~#Qkl%jPyF2L!5>Qyl^^-?*te@*$J~NtbGf(9eOfD>_#!X?hIS)%9R&jvT
z6igl?Cc68_px}W^i)E(M%OQY)^!Ct+WhSKgK~|pnrJYi@&l^2PJZJ&nHYkw$fUYh}
zQoXqV^~X+ggw0k2onO9oi{Qcsd{0*=9^?v#c{sLq-uf~s5I!GUjOht|(Rd@#)p7Pa
zf-|=buP9)r-@aD-X_ra<?en%D=k|CEM1^!y-U@k0OuIK$JCD(+z3-@c<m4F#hfNvE
zRTm$*|Je=3mji`btSgvo;*I6AcsC0jehfrSNyO4%vw#4iLMq3Y$)r<$0eUUuG5o+j
zM{B$pJ5K->q%l*(90V7iD0f#}2KMZBeD_Cmd#Ao2dOv#}T10oLMwyhmJ=?+C*vgA=
zTZRmufB{Kd+%!7-K2zCOcmyS?Sh}V0+QgV`=t|KU2^l$H5^>L;iCQRiJT@)PFYNOU
z>POUr<b7M2+vK1c$hOE~A}q{7AQUr)^9B{9zw3Q6n{Oe4r=ZbqNfAC@J#aXS-C%l<
zkIU%VJRwa!kG1CSGC{)M@;oZ#t@2*O%TmW)_=mgJh!c?_T)c7KGUnJ$%^XA)c?z0|
zWC4wtdWp1WHK0{Qfr<onissM1AR~0sfN@kGWOZ^&pK^sj(YAa1V=DU~UxTXSZDQk&
z_*?s(1~fmDy!$@Q&ns*D8$-t1XHC!ke4f9W^QaodEX|~qb<Xa@RI^yug4wwk$h^=K
z1W!9W$W1^TM*CULcrgf>P*zkhY0$TC-!`8`bmIEv=7S0vQyXo1*WV!RxSo?z{KtZI
ziS}LxIKObn=!<bOnPd8m^igod$A_;CJ`mBp$)>S8O9dB)SS%r9I3NAW;P$j=v&O-o
z$i$aRgo=ip=9)!}<%eEK{=SahO8!$V#jcB*5NZ(x1b4mTkkQFWJSM_r9A|(fGi=BO
z<8NNJc)ER=QK1zS$laH(vHU&~LP1zLb`E`Z<R)x7l;VaBNJ|ZBGiIkY>jkyd6dM72
zK}c0F()vLc1H{=R*J1`@*Cx>d12j%0AXLCTpq(5wKqXBeP9QBR&SEY99e1bEn5s(u
z%>ylChZ-c+l}}Dc)v5K-0;j0sr?Jb;J(ai&@}B{WiXAaouAte+9kn_uoDRV0QfIvY
zA4uD(G#FhLs?x9<P@|6qW+a`htoIjC6!3TXBiZdHS;1?aIh+{dZ~kWopw88w-6M!a
z?tKcM$7-PrrvGpwFPCZt@iyl<&JiatB%VHsC{LEg1wvwKJ5zH<1rZ3_ylw079H_hm
zi6|XYl_gG4u;G1DoDOrPFs>1OjmSDuKNvec^x+4zd~u#{j}%Gb)+o_LWGFGdsw=9|
z3dQ~>P|aV00N);(3Ote6<qOzua#fT>MPo|O^ya~{fW<@+jgzW9OnMq+V?lIZY~G}L
zd9$RF<z-O}F-0BPjeJGn>qVJuwfzh!(+LL@s0}89>4JglK)${~`5RC&PBlrpzOkb?
z^2PKDKN>DMaNTZ#YP4FEpGb8457UKDn_zQ@Vd)s!vAM#U=)W#R-B!cV!9g&fKQL1`
z%%3N3DoP6ci}diD7V7ezPsF1nGD^&p%E`}gSgZc$)4Y(zfK(cbH^e5AAJ0x<&)jIa
zy|h+ti947ukOwfM!q#9;k>LSYH`1@cQkdg5SCsn|$N!tBS0xQbOqyyv9~NJ7ju>s4
zb6!<B`j=`jgfgx+qJZR&p%woC)$NrN=mMIGNWkBO=!1R=Yod171|=C~0RKuE7o<FW
z?IQ-ojnycah}5`(O2A~3bl$Idi{*bA7OXd5S$X0?A35y0hTp{;MEF0S_`kC7n4`Wd
zpe~28VN+O5=lvlif;Ezj(Cw9o?Fp&+^61_iXn9|he6m<ggastU9o%t$6b6wy+z6KP
zsLs2qk5KWU)DKLx%A@YTHD$HsIjoKVo0b3-DD~3+O4|T3ULc`9pMIub(c2Rsp?R%o
zBjz#rqA?TfdGx@K2_l^y1ZlUr9Ch8LbGib!pW~K_k5@+=!WJzHRvE1x&fEUqo$n=<
zi@VSN=Q|JZQ%0;RWDbHCh1P7eDQEWNbUEcyG2v)wG%wkKSIHx(Geh;Oklz|o;&%q<
zWsyM99Bs555SN_S=k^%1G=atKK`t#VQ3iDyD}q=B1NPmisi>-pcEkcTcF#Cm6^TEK
z5~}J<EVUBa!9m7bq-%J%BLij)p{Z&9fHKCj6dwe5VNA0Q*Nb(v%I*99zP`;GTAIlg
zbFpSim>-Z&dZ%4slNIVvz+5~0?d8Gna56guby?uGz1B1=I>9a{U{2>@_~&@v_UTfs
zvo0beoj*`}HA5gGeh-gtGGtEFr`c7C#x_JrfUmbJb@)bwkBDmJYt5s~o!i|_pu)GK
zl@LChaCL-zso8ghc=-*grnCc}M&}MRB2}Y42m2{GnmI_tT4U~C8d#)Jq>O>j^AQ=-
z&_vIeAnibZdC%6qhtDtg0=T<}fxqo5TT={)26m0)R$86t8{Q8%%MI3H{DBZhcBpey
z@?+`V1_znUiOGK*IqGfW{#N2Ise*mpxJdDo2?e?v9c;~(+Wp8YVkL^L3)z*FjUo7Q
zXkgC|C&4qG3#xmw9Gt;>XA2W8*6Sg|1GY$mf?1vuJXMWXYA^RV<r?zWQfg@HSpQbH
zn1Y1PbHZo^0AO6T*%aZOdPv9@S1zZuFI;6jI}qBx<Uu*M6SCK?ZlwbOC72+?Q_1?_
zDm7H+d)t@Fv83!?b*UtJe$M3TAURYKOEGqwh$QU>Sy+_Z2g0jIp4`RHqdW{)1r9T^
z`k%qGZA{|LZ!hyZQl|``GVePO-{wEdqJGw7j09L@bGrfDQ2&x+>{gGh*JBK8mIOJg
zTrh2MIiWFKrZMce5*!S8NyG81mDPaj{P`0+C><zUCblATq@$zzlqdqd|Nl^00fn`}
z>7xC2FMF6>v<5zX`Iu{oV-VH)SyG;RRF#hgXdt4YcOc>i5<2>CAcYL!Gte(7iblM#
zl+^GfXF@JIH4uFbaz$ZEVkFki3c-c$1+N9R6D`&EwaBOw*k|q|{aRZ&GkhGN3)-Jk
zq<I7Tp86X0EJ!`!GTfgjs#XaD_>>X#R+2f4p$jJTQYS=iY#Np>F4uD!X?u&cEiX?Q
zWi{K!B&8Zk>I$A6;WNVu3rY@p23|lS2k&V=@PPCZ0(a75*_+b&bT(oNVgv0Kr*1%v
z%>bl6d?pJ536uFO-{24s79tG+z9Ex37r-q%ERG*H`VEU20HFDEfD3VXcUO*nInTDl
zS;XKG<^Fvo!RwDwKC_kUky(@Hi{_5P-|-tOd4kBdc922Wvi^S6wd}NQrb;JV2Z1pn
zV7)RB&~R)L5fa+GQ`POZWZdYv*Ug!_M_zG<a8G2%q+n}!Cqp$R-3mI$6a-YNmgoB<
zWWhpy);<Hbs`NMIjnyX$J7&zA8mULFY6Mm{!SnA>Mr2$47#WEy7t!T)_qKqyz{JgP
zz)8yYP1>q<>PqeOocAh^u+mzivBcXC`!G~X(Tr|cAebbG*d3q|&RT+C(CLH&6rUXc
z6*yOreOok;oYB?AS7$K?O(YUNNnGRoa^E6Y4Q`v8&n;`C<8#RV{1toY^~by~D~dG7
zEk6vi=gIN8`Z9&eMy8z=D}0$Yl<bGzZHLa7*b|uATZ)5!C;|SjDg!oUQe{5AF9n^i
zg!`lEQ5(K)C|i`YrZ-_H_n4y-!vd#~du%O+IKSa=0!}JCQ7bC8tt)=sQJPBvKjZg3
z4Bf7_C*Ez=x&2h9!-$Xy=Z$^C1{%fv)f0NBAvrDIH^b?D$w~os18^_^<aGIbn@Il>
z?5=k8mTFe^45Ilx3P-&YO1k&Q&YY@_icDfax!pl*emmi2RbDjO{??X1kN5N8M4kD}
zX+1m;@}<4gc+3ql#(^-oYd5w~iJvD7$z-zv+KptL9e}B0CnJ3^q*@?U{ldDln*q1{
z&#d*I2vNuaIuaQ6m#-McK0dvV)lCk4^rOkFc)mV2&^;PXLUt$T_4lwPkO;$M@c2(d
z=xJ<qKfGUV2i7Xb_y7nB=&awWfi+PV3$M-TcUU|Y)EhK*t@33rHzhJKA?MOLmdx+9
zc*DVs+p}BRC1VfWZ<Xz&)*TH$0<|i^zVcu+uCl=|yjrro7Y-4;1WXP^LRl+%dVd`>
z{07;G@3H~W#Ln8)?z#>?u!vra19mDbDaM4If;unbSkzj|bbBjLnzukuvH+FFbITfO
zr4`EkuTxa6wgCz%N`Nm;<+6ysTw6o|J5~m}FL~!B2H8^xX-ek#`Rf+V2|QSH4Zd73
z6yP)6id?bnbz@druhIuqDbx5JSn9*4X2j_hRR7C%rwGd%qIM=O2FDi+(_Yl>_)zDO
zit*tq==09i3+YncuqTd6gx0bIRMpsq%ZgAqrenL!P3gP&O@wA$aG}KwPlU$2TdJw&
zgwh$$eTc=44^NX(*B7m4zdCm+<!U2MaIi<MRqiL3Rj*z(G-PYggi5X7pj5tcVDfk1
z*)*HBL04)rulmG;*nC=}`t_&9KSVazznv}DmkJ#1p^EYY@wuS0OwyvMF2|L;>cxM=
z6zINrd~h}SFkrE<cZ-$_-(JG}PV|N1nrkc#X4P5?9g{YX)WD8!MQlzk#-d5d*)u65
zq9VzD1SFfP49ME6T!^!Ea6Kz`LI(t_M;q{8Dz!Iqfc-H2*wAa1s-j82S0<Au0;m%7
zqa2*-4Z98Un_WfZ)S7(mSG@%{w{gIjZmC}|N5=vr^;xcGP-4;(LPq0-(%8L`<z#9&
zoXn!$*Oqf<XbkHN%a)r3n?v#Kct8@CxzbzD9wqNM;nEO`mfI4KZCBqyS6<Z@u2<UP
zpb7qF+C#9Le`^^dOXtZ)-4;G9TJ~c7VQ~{aEQ0ZR+ay-V2$WL(Uoyi81S=--a_JV^
zP3amw>VzT&(~!PnRSX)QcXYSV**V-$*3yxW{tIyAC%vAYz~^NCiaGo(gcl9e)|Src
zco8WP7B8<Z0HJ55_B;XcY8~f4TerwbqHU_6UtUyZLHhGijd5W*zsR)t-B0n^ja!kw
ziGL%#m=E)!q0rILEeym0#0d2B&|`_GIq6}uN2td+#roZEYq$?MTe_|*m4Iqrzj#vZ
z><jnz8%8&~>cWA?N4K-tP*5<AdJb=+&dA)9<YaLeIUtwfq<)-9aC?~snj6n?Kl!Q7
zdQHjORWy!Nx=(7{qMj5}71G~f<yAk9rII#2)~jOdrIcj?9HGFvLp~L1Zr^j!DwWls
z=4q8%MNHorONN`barI#P(BI(&Bv$GkJOYbZ;Ke28xD^2yCP4W5uGsxFQ_AK-fk19}
zqe&51slY2u9Ped?dJXwJxqjBFJ~iW&HdTqG^Kc+{?PHuk?qZ9%{M}B;-BYvOuBpI0
z>U`9J;<>>8q%Q!OfdB6q!lfq4K!W1)q=N-zC!HPgzi6nRukxQA=AKXh`YgX7FD<|i
z4e_&V`l4Ke`afxP01vlo91&5$%oL5Z|NjlzToLWcm`8=CsC&C7Ci&kV^q(UQ@K_5V
z8oCavF18w9@3W&Luu@4x@tIz+hyn6n^&3v=Sce2{J{nkApdS%03efD}u$FKrH-)Mj
z;m|Z0R9~0;H5g2S{&)FGW%sp)!$y?t1JhNvbo=1)?xsJATw<)qRJLL@5_rn^AU~wI
zh>gzzKPzCN)Rf>Y4)3;cQ@<5TO<K_n;K^qDe!PEYGDC!b{q6?{s);BliWS6A(a^R4
zirHU|!m>UX3|gTmTyCf27T1f&gAC6K;wNC>;>515QqcUc?g`l6u)Dm0G>#-LcL#9|
z$sd;UWfa3NpRHFw!9gcB@M_bv1#x?}f&qlr4WP(!+4EzGE+gfO>8sQIxz-`%;$h0J
znoX1v9<MyV+k2hXy;k5YL3!0<soDS75{s%|Eydrwgkp1$VhOJF`r1VZ68S0xT(UW0
zAkZw({bpakKNL-^)rE$(^VOm4dV~u7hom`YZf@>X7brr!OOwLO%=9$9@d)ZGFr8`v
z5}~Z8`%Z!Cnhl7IvT46l@d9X_EoA`2R0QDfF*EE6|NQwgIweJ8{|*3&@=$Bki5<KF
zD!RXEmLAied_4le-+FJ)caMNZfZpj)Zl>3{<82^tVJF72<=A2L$qmcqWCM!gk3IUo
zdbjzPCSNzr^!?$hH#@sQk+7qYW%tF}uU_Z4Fdfv?;_h@vxF0lq%^C-)56=!hOLt^<
zxtB+)%L+FM-oV!-CyS&f#d6U);P;<z@5>wY5TpJJO?Q4n=whKPUYS<2f-b;ld#fZ3
z2TV#Dn&?PK{<pVIQkgtBvm^3hE`a3s*bta$_gOct{pP%AL$O}2n=+3C=FSgii`9ab
zFJiYvK`(%~g27^zTnmU5{uBvUc|O=&wjl7nR*i4W%%Hr#zqi23$jD@|#Qn6Kr%u-e
zYSTO0_Z{{&9R~-8;f`q*XlQ6YhovTa!}L7WN}Wfb<M|nH>FW9rJEJz<xZ(2y2<Zi^
zJ=0*-yIDBar)$q-`##r{9<XiD+K{mQZL+4D8+5Bdjr+F3fe>(%USz?j6uXi+OcZpB
z6j5|=E<NS>PHkxHon<mBNaMa+6L3lT!moKgMsjM)H#9H*KeYTg@;?XGhDnS4+_GID
zrwN<W1@<#*1BR|GOMDRsoeL(BOaLS;K9dFUz|mbuU!UMJg|5za0~ZFJdeS6~hlj`Q
zw0aN`4K06yL_UpPAEd?QEELEKwy2#3f;xm6^E*G@e*jv#Uhaq0+<IFeatXuZ{<OGq
z>-ZSDz;Zh88w3JwnK%IK;VEVQP3(x8Qsi>#_P!ah`+K<u;Da7B8NWH&+xr8-nm+GO
zrjxsO?GNjMK#u!-0@gvyt%sYNpK&UOGbIE(b`f*jz*WoRI4~kxU@Y9edlB6!{1_FI
z*Jr>jFkWib2VeI&6=~x%7Wl(5+24;ASdkubh0qrAPBf5XI3XE>jThFoYBi&1yaJCH
z%@*V$C$1p$zw>*`!u^!Rw*Yi9c#1+S^;Da~cHf^zAbYY7Jrawlq8zw=F^k}=7An%`
zamO=xby4a7J&<&nSYDBQ9%-aTpQcSSII;d`m{VGMy5wfINi{&=PKl?{?Z5_lZdoF+
zyOEs~z*KhDm_UCQ=+dCp*4Ea~M{exLCMUaR6imD}9bH^>e&D`_e`f#zVyr~n+?vK0
z#01B7?+c3EHvWeNaJEt}5^GYT6)5JY5j)fpE34B6S&Hr*MoP0nuz!hry3w!|kVE~n
zFIZ>g%U}S1K9Cv}E@)r{tKoVSq>1Yb#~+bGNW+fA$wDo9(~!Qkf9~G>1dIm$J0kYK
z|JVtAR&hfu)g@1dtrs0(A`w{W3lL(vuyE-|{;9Sd>XuOE1`-B<q(j$y3~Lxa=s-R<
zDKitn;=_z~WaIaDlN4fqE*~Hn8#9>R=k+o6Y;#jj%W;hPnbBsI&1$VhnX@nZ=m?;p
zN=}oIl3GZc0_|PrlvvPwD<<n@rPS=}Dt&0nq!I_bF=0VL!FutMtJD`W1Bu%C<%IBA
zqto>!<o1g1L8*A&$}uwnTt3<eX*84rE94VrvYol&dN(fGm+!Nh)y8uMus?hod87m$
z_j?Uv{$_+ins}L~5pMk7tr2`ZQ7AQKMYC_g42A<{ic`Rr-+mrRS}=P#MFBTVI83l`
zeZ?k@D$Uu<5}hG=)a*E&Ck`Z$R_oXT;Pze^T7Ctws6r;ed~vdciz$291w4g+Vuh?s
z=J^HDFC0#XUlRVvSQj<#+^JORl(*+!H)coV?Z^C@d#v&*Z~$~@W@mWy8BQ98Zs>17
zl<FP3lw=`0kQmO@L>j9hg}mQ_|BG5uL?d>-1A@vLuYY(LlV87o#bc27qX;hV7n4mv
zr#LA^vFSF$&bp=DbDuod<+7^TTygL^-Nz}+*FTD8x_2bNjtTa4MKr6;PNcyXQbB+}
z%LHg;n)U!X9SvzkF%TeD*N(q5hv<8X0uM0Z&YF(|i|PwI`NsSHXn3}0417$FF&tTd
zO!^VQy5WWL@x0K<l$<9*M@uWinUrm+2#wP^IXW9H%ln4<nIfhWC#ERFQJl?A*6I6t
zB`QrXKGf7OMNagOzjhn|`k}$f@;fT|kke??P41TyJN%aW#|GrA?~viT?;?3U?ImU<
z0&zcVA}F(~t6J%i>$1s^3%t`-3Ht@kB=7wCb`CDx_QvQE!~e#*kCKS&R8GL9_YT)P
zfkHAePW0hq&0l{DAg}jw%C6=~iAU{BHFgTV*t|*0##nO-@B!`e%9_P*KdB+xcN6v|
zhdfB4(}49dix!c-hrs+|HlOXfB+Ox$8Qi}`0GOJ#2y{3sSZ9qgPSj!$Bc*VAy6ia=
z=g%@x<bz@jd?(K4u-p8?^YMCv)yc7d;m}UBz$;R67k-al)|ma!saTxze()Fa>VS?n
zOR>^lOqM<HQE|#cdy^BU!JmM_C;5%xRS+wCOxXK#Qe~X5f;iKu9U)DHZVt)3kMW{6
ztmF2g&4#3xG5+|r5*($}TE67q$$UN&(}~mU^OGk%cgM~_Pc0!)Ths>6;Ua*~TZoVJ
z*Rf&w2)8n%e~J$&w!4*lx(E4%R;fAkzg9bCAP(hj?o%o19L{U;g%?QdE-_L(XP@Oz
z5FCCCx)*@{*G>WRja0@PMIVXAetQzv3Gb0EzuLL`50R(y$o?6vzz5afR_F=YRuuaO
z|3&wL-XfeU)ig#?6oTB~Xn*}y(0<##`EDcrCOK3*hUtvFUGxho7&e^$bq^*x7Oq2Q
zfFBpi{S?G$DC#uPQ6K`38r6`3qS{8ku=#sM$DMvy;}W26*bM%8l>9I*$!IoPzA4)G
zj<lH~z(7zh!!1E(hNDHI`ag?ym(J%pey^aYAj99)jf5z0xCzH+qx-+FWkGxqo_Kp6
zT#^hQR!C>Ny9Tl;b2L8^ji<v(NEq(%czsr<_0MqT6hh#`{umejALZ_6$9EAN<Q}!K
zYCxQT+xPu|_oLWJn869OmuEJCo`<0Q*ZePflkLfDLAsDmF;O;v$vm5w<*FQrkF{Ww
z)(;d!O62f4_K{xydwci4VcBwVP_t|lUXNSB&RiWM=-0p^TdM3ZTdv6pOo9t*`s<Q1
z_z%U;_s7#c*X@7zHv#qJ9nXN0*HM1rI42KKainp%D}YDRaoBdgB7#|b-sWnWV*i{!
z3vhYF&ml#m!k|OuU%{@J%x}Swifq2`UTX>>QMeI6?RoO(1C)Cp^#(wUj44C7Xp`5I
z!|vYRR!M0^0MH>zpwavd^k7dG{cStnSj1=%0LqTx>zea|_IFN~GM-HTgGTF>0z<T)
zVqAd(jPRSEs<OaoM%h?8i~Y}B-`#@)OE_FZ92T3^raUypBJN5?pately8}_7Q7@6|
z_|v-6=S^bTArLHz0Un6acGBv@04R@bJ5GLr<@guLu^Acg1M*%6>D%;3<r?)MhUmbc
zR5dZe*hEWcn;4Kep?wZHJ%$nw0yHBNf&9KpB(IUs8}ol>f(A9}7wwenD`X(oQj4PP
zb4>-8KnIQ^9@O>&=oU`pMfq>N+#Ur2+G&wE!B_!{IdobrK&~#b34}Oz19d&~A7EVl
z-~=>xa6QCO`Z9grF=q;87tAtvys?Or!sUnB;KqLZNo;InMW@mD1rCFL*mWt(b@hwX
z3>F<&1119fccg>(_r)j4MWb-RrTGrVQX!EA{y(z5DlD#T={8t!celpfEjR>sf&~Z?
z++BjZOXIFVf@^ShcXtiJJ%j*vWuLQm_WAEi^U)8h=bBP;RMn^&yPicy_)*z?Nf74`
z<F%;>G9L^K$hhq`%H24MC}hg&>YQY1e;0MVP6NFLf}pRt!hU-t$}ea`s~*aObRW&k
zWug>SV-SUAgqS6|vU5=3rJM}CM@R<W{$AZrI%?+gaaeN*ci*PPh2cR8bI@SW?b$jZ
z5a8<t%1#0ZZJWAx62u&D0orRI8<YZZkFG;Mw!Nd{3@DD^Ex*OKXW#D@x`(~q+uPeZ
za#9uK4GD=eMD5=Kzi$H9+YR+-T578K3G+itWF*w0oa%Kd7#siq89;KTe2<q$`lGff
zh6-2=ETv|#-ogbaSzZ8|LKdp6&PS@{`t2*6;nu(b5D^sZa=O9xa}=AemLrUGQ`e`V
z8x-gQI4@)<$r8W{S~qx0^AgA@m7h3${41fg@|B*Ba~{lPK9vg{4_t>tb93=T(L{Wz
z3H%s>y@-b+NesX1Q~i#SN@Y0o9uIdMD~HAsvV{W!16iil9v&Zefz}H%2VbagnT>nv
z%MXUNG%Rlysy?6|d;)OG@o{=_L8B8ueOX~lOjjx5N&!4L6d<SadJ!|-$S7OU2NANt
z->;9Zo@7MPXXB#dX+@Pq`L96-;3ZNA#BLdno)*-*GW^EcT{S>%g*W&RPlIV5T`;Nx
z;6eUa?0o**VEfwP`^@Lag}&({1TOoz6BVc?+jai-yXx|tbpU%e0by*H765HXNJ?6$
zsi)g*_`W=?l+jf^ek+JgPEsfxEb%TZ*K5_VLI-j(`j$G$yV;-4x`9$l8#d(g=!bd>
zW9?4{mxTx?&W?_6RSY3AGp*WX8I)TP6Ta1cVUL_+0!~V`?PW^YzfF(<B4B$0$(A{S
zCbW^7PijY}8mu&Jgk)+PO~(nKp`pLs`pa`z%zyx{`}b;OPIMD3L@<rz{?EJ9vbsDq
z0!>X#N;$8KZrGnZ3hJfW0Fs&b_!^m@a9sV!I;0S6TJEf2Ob<9-?%zv`Zz`ooJR~q>
zo^uzby%fkBk^nRi>dM*s#-jo_K&hshwd1$(ZLy6utH~$3ufwa!i-O`}9L;NW^x)wT
zM6XII;UY@3Yqi%MlU#kiAMIYCBGI2#pZuk}^WTuc?>{F55Wpc=5=r}z%_aE=hz0fm
zeyoDqa3e7pt0v#DcBc&~KXT4TT+`CW6yL}RCg5ZcGF8!4(C*FXGeoGb7bg5HC0yJ8
z@;59L@s<=Bz*#6=Cb$=}%rcU#+$U#MwNNMAE8JNc_%I@;b2zwrZzo}Sf(~HXA%2#~
z0$h<DEPhYKxW|8nRv!6EeCVSWKkP48&Kh8Eh#?%y92bTkb0`T1moK$1U9YALO%B&K
z3kZB_gez`*jwpy|65?|~0F>jcE2CmG$h6hInR7AUGyE;QJI4&UADmjcJ~K2gD=s2!
zXfd?3?Nd3OS!6`sXoC}>u-WOKAfTDYD!fR21`@nOb7lDn=MgUTyRF-i7MNRwl`iOi
zueW(LT9%-=d1h-U{MFg?9)6l&XJ~OlB9Q^gwYot^GGnWSW1#7c9ON>`FA0kc$s>TS
zfOqo@h$jpJg!mheDB~YMNI#9HtYPyek^ks!^%BUBbn~!~9Cv0_%FE(XG6@wej2P&a
zRFk0&OT7$i^pkFHeK~iy4I}5z1{rfj01+iWZ?dk`a<5K&(hf=+Q9Ksc{gEU<`LC>h
zCzIDfj5Ic!?`3_^hnkCPeuwWszyrBsc0Bm}srD)t*CsjATNEfS9X^WkA9b>k2}?+`
zf&fubkpn`Qmi_h43JY@Di(|vX)7gDxs<aF5TvnN?l+F)asECTI_1?V=qanUKU2DE>
zn;pvuzedrxfXzXSS*5)>%g)aB*+}!U`)F#K{k5u|w8$eVd0@szf7YGla#c0T!sxBt
zg_mZvUgR7yBogVa_hKr0FVeii@ZOgqxH&q&R6i^k#~xh);S`0=3w@3B$`zc~ac1%o
z2p<@4m}SYASDPFPHV%YC(phmkg0j7?WE4yRMM#^|y<kJSsMN@VBdcS#I@57L6Xf0)
z$jMBRuMtXVzMv9zq=oeQK8O9F6o^a6wob|~q{;3{3nX;-*uSWC-G4pA_ssKFj|=j*
zy7@PM4I>U6m^*qidMku7q^#b|A2+i~#y>8$n@$^7Z$dW`9wy4l?M0pdfmqEu&d8%9
zr09+EqtEFzhAbUFb})Ln{C|`BMeXKap3Z$8_LDS?fQC3!LB<DTX)8_*{ZR_8j$Nzm
zpWKM}9Q!`9aQXwOVNUsWs|;!~^pmN)z}hf({PT{-$_@PvuVzJdAi{J?waV!&*_h*T
zfPb3SN@2l}5wg)9jvo$HlUFUAU7VSsEe9wU6(0vCbXB$ArFV=0oN3vghH{H0VPAmz
zcyT7r@!tDpTIx5?eMDYra@%D1ccATCS?!G0^-`BV6oaJYx2&wZ4#0K66rA|J-s(2Y
z(R2725RKO9UkA!EeJWFj#ew$rp3ywx2^;Hx5gKH#GBg0P(fUz@Je6bh$tXU+ozS!g
zmXqC30JNo{a})}Q$}}owwmX0KYxlbB$NlNSeG6?zr?gB1H^&KiS6@^;Ag-$ZdJF&o
zek}Y5X7n;$F(iUt%y#h>{QDv}qycG9D*r9M-lcjAHSd_q*gAD!Zyi>sa7g3BQUDk2
zTh*s=Z-DUiGxHjygw!jXz3C00#=ykiCQ+r|eq*=033NVl@mK@k5nL1yQ`657*9RPE
zK-H{U5?3z>sA4e~iX$JObGcKfSOXmC+t5Iu_Lax@yn}eD<BVpH&N{I7eb>0aD`x#?
z^Ae#mAqe~HoB4g4tvzTryBBcnp=lxgj{aKwo@o&U4+o5-wk5S72mW$tcvv)F1RC}X
zCH)sFPyHD}J<=w`j*fnhq>mJY+`)bgi&%~rev^&zub0#tG+S6R+cMsG)C$F}aD?m`
zdM$;8!L_sS^Xr6Ov+2>ukE5Dh@rg?274@o@4dQzZ6qw+VcgQIOpVQw#D1IlFuz{u7
zOy{xFpNYx#zSCByjJgnt5*-y~4ab9L=tZ+xZB#HDz8j2_0DS}+=hqyW$gV#FBGAsB
za_K1GZt+l*qwW%q*Nn#iFbxHiND_loDP-F2R;(Q46?ioymJZPwHiRF!M!-~ZvKNPT
zmK{IXs`rHus+4pYt~a>q-?qA*w&X_5-P!w%*CtYzGoYfP0%@irc9ntw_cm;FuvnmT
z=j8z5VHUs&^}hbZiJ`JP(vfL1wY=;&_C5xADP%18q1MKcv0Esk)_gku8q8*=AGlp6
zAAEReEL3TbRa21`qZ9^n$!53f#qI7}WZ{7<Bo(zT&p5shAkD*5BN8G)F3Y)ZZBM_t
zW#AfJgzVljnhS9Na1vU&a4guy@5sx`YYbKIB4fX?(82i8l$ao|V@!z=(J7`?dTRu;
zgC#7QP6*@=0M=}wq+Ov9+T9?bPCmXHAckPYJ_PM0#GBR^PGOv>xxuyHbV^QUjBq?J
zlLZ#*faZl#VB<dqaPPOxxdn&hlq>-Og8|_^d1_M64)cfHL%<gZA+()>f^m(5dW|%7
z5Dv=76s5l0mCGU?0MyoQJu;(rUIno<08&~+nJ_%qu2Eh!HJCX9Zp`K}GS`R`jWtet
zTLFty{`(FCOq}`wS^O?D+P6ouQk`4Y{#fZ7gaW7&+1KLarhUmQRwykym?&i1Q}~5N
zpg;#%_f8ATRW#ujKkx((AQEVpN8aKS@V-GK&<}!tg8~-zKWQW`6x|<0;d7|ay!Lxe
z6Zd4}wRmogK*lRQsQsb`vFWHNL!<(AcYyuuc)K_B_VJ?mFnjh0fb$+}0K&rKw#L(G
zv@Yc`AoAmIWr8gSi2%V^cfbPNK4x!bnhV%(`7OM$kDCzXo>g_~^XD=it(6C<fAD>3
z$kyeYItYRu?X{XV%A@G%-UUd%U*NMXJi)2`k+>;0P(_1H?Evttz~?kNb|mHE)CG%}
z8H7wFo&o{j#V3sW8q(iBoO6z(<}o0<(+k+W%Z2xLM{XROvnR*AOP>cK?>Aaptn9&w
z`-V9~&mrg5mUO-V8^xP$M;Z~?XizA2FUDm6g6*->_vLX@r&k>EX@sHbn~=W_2%*6W
z^c86Ns90*lhOHPfvl3bp$hRzAfl8yQy@~qf!f%0ujm0uj%d9VC|9KOT!KyRVPNNy^
ze@@zq1Le3oP$Za`Jd!_b3#KEC_TTkE2ptD?jvGT=^R8k%(qnKmsv&fSBg#w_DP-J0
zp8?8(oQ7n1W)HmGR&%(+c*g-fo_lz~=Uj?@7aLkaF-p8DJwAz(Fvlr})me3?s-wfM
z!>--oh}nZOD0l5dqxQPJULG&4Zs!Z>Rj{O9${%Kb4E{9DF6YqUaWEJ=Mpnl>o|Dc%
zsOmTCB@24<R(0sGSKZxiE}z3Lrb^2$^CXSeA%CIiw>x0W<$hrh%`r?pDAJc@Gf6f#
zmT)hL%wa4?XiUDVGZtHz=7Y-XN+DE~dfnb_<wRs&PnkV>n4CbA8E4c1+EFK}M#2BE
zqN_!sAL!C`i9f1f(@9Q*>9}SQE=_2$w|a+O{go|Pu!62!O?4=Z$`vO$h=pas^=f}W
zo6*&%STSpcqu6WcLG^Gnk%go8S5Ov_4DpBR6Z@!%P-4v4YsoQO&JX&DKm&uD0L2^@
zOm1GVm}|&Ms;#Eg4XtiM7cPSt^@EYAR3Ai4bG1{+P<hION5fM_olOzT*h)u-Zq+lT
z2>TF3S)ABoB_R6!<9WX|NdwKx?zhL#Bf29d*5l7(_KPpKsB{6SiMcJr-|Pix6S1o9
z4&AeiOY=o4%_><sNiQL7bHjFeZ92|G2Yy7c<x`R77y+Dn4Lhf)Ngsb5Ixw6i9N*A^
zUzS9dI&brk=$l9X2sqf0gPsn5C>xB78F_}%Vb*qB%Gij?f`cIHVRjno`_t9pa17Wk
zq8m)94bowPaJ2J;J}{ISN?fUl5pfy@1lSA(EYnoNWwhDnFZjrcfe<Lo#&Tzq`Ko<4
zM!?wzh%hXI(r;xe5aBbMt2cnCp`nfIh)`@_>}|j38wG?>48;X@B}EeZVHmFFkT~;r
z164JEXa{d}cZ=1bl*$v%_-KY9oGo{PMDAelBA+ilGjb<N4zUk{ye_B~3Wr_ANb#-K
zm+7)Vuwb+y$0v_B6q@6&eR9fx2HRx1$cZ@tl$_%?e4;&UqX4G;tpn<(V+}S{RIb}-
z%Gm=$ha})<mTWZ@$|O+#kZoX6TyV5jOUAP(Z7?RzNDym;+0Bmj`hmjji+Y{59Xd&o
z!;_qq{&gnkUM%WI<~1KEjVEYw8;F#b!c!^OAd??}oZ5IIsK(q*mhxg<PL@=Z-ppnu
zP700pX?JE;8{jWb@Nw_;g*y1o^*M<J_i&5LRpyC@euwuxFobJ($@I#%pONGYe$9S&
zKW-+2g|<-2Lv#G`eU0ve7{{0~W0s+_*2&xt3Z9wT-os|EZbyx2G}}7N+>6g9aAt(j
zH$_Fc^};ma<t5d1Tw|Z3-Y{j2ra7w}LMG1)35j;$pjF?ciwPkT?S(DzK!V<7c3A-=
zbdn*bfasoXBAQ*=Om8y+lrJ)@ymCrq@EBB1-~mxK8Q9=J%h~RXywaVnxQ}2=XCO;8
z6X@CtN(?l@P(tD5b1*mO<DKqzlGaxUUU{AV>)k;4%#D|=)7G%iQEK{FA$L??AgP++
z2T3twX3pk{Fl9OEL#vZ>-Y)7(ZtM+V*z-9?3`~@IWcjdmI&#j5g2vFkNS(J}QZN~q
z$MWk4Mggixd+kd-h^SA^ee*3bhA{?@Q=VyAz8Hq(&HY?uO*@|0NjOA>PZ&ga(vd@v
zaqC`J&R%p6yaB>0ISprt%jefg1k#FR83=5LPxeNB79|RtE1083d&765mr#S~poxOF
z(KAOfV=}tZQJoJ5gbIB!V%ox>1JE64ma$b7O-5|_t;~fq>-h0{z1JEy95M|*W7@=(
z(1Ud<!ZnR;k=U9R3c_(Tfe6@BuIHMs*`OY=a-RbigU3=NI^2`QOj|3bFY{Jp4EfFY
z<e^=q9<^;>#7D3(Gg#0PM_U6!NXU3#DSDr}@fSdmlPRWp*l+E^f?7b&S!e0|bp<(I
z_t|l%BV96=dKc@;TPMrSV|+vVp?NsH=ZbBH?#EQ}ymoq}IQu$x?cr!BK*S=T<qS5E
z8cfTdnQ^+CXU+NO>B>k{Z;!L2%bQ>(d&anL;e+Dqgk~)SSDUDK2Nd5${{{6#h9^=d
zzl1$ehzyd2JY*f|T@WiqC)9*Q1+t=)lsar}r3Uh)FV133;(1+pq4<=Na|U_f86i0?
zA0_-!;Sk^UOC~@AD*}55rKEXVg0vx)NdAflWu|m|t2HYq97+_$yi~7b;!~Q(bvAF;
zVOQG6fTGm74tz0+u}3Nht_8CiVFQ99t|0I5qpl^q@&tM1$G+z<C}Rvv@yH%0?bjHP
z7y<|ml*74rO-H2EFVYAW*-}ozI!#kVDLPzE*AfY8H$|Tt+z%||t1L==_k;qS@$b#E
zLqBg8^`+ZHBvgl>K`E-DK^-XdjC8E2FTLhNVGY8I7n!z>?@QG&!_cv;7#pT{IFx{*
zAuhS4@_9=z3(stsC8H%RE0Y|?w92(A6#Qd)EMflzaIm-x$+vg+8uI4%TI2U=xOK}$
z4#RakdaV-(bmdg_*W-9E2}16`9;_c4f${r4G75I~E!2Ax+zwbd%73i4DOhJCRm+2?
zh38ug07I(=T1W74b-vCnI>cWECF>&e)!>dR(v>?M7&7uu818|f$MYX-j@J8X$Z|+~
z88gmdBaWPk-G(}KM7zS&zB%15S$-nh|Fq<#U{|pg1f^T3I4<?Ts<t|)xTgC<btkkZ
zCH_cm>c@C!CSu3~cn2|pg>hoT0cTa!GrfPxHisBR0I9>AH+L&C(^Q6t^}@u`**O#9
zP%ep><%8mYPja{kNBir0e6f5>TQxhP1Uu2Lc(kp$e%vPMCkekmHk9&a?u@_*X|DH^
z@UIl-9E7=oy)<i~ikneoh+z-jysh&}hj3`eUJbkK;E6MO>FO4QCxsp6Brl*2)RD%Z
zMEU9Njlz2LaRBd?lk&(-=E-hX;sh73pV<QvxhRJ`Tyt!oLf{gC#aO4scS|@0(^6y(
zo(4*p+>o%sq{V%~=>nR^FVex$<e+d)nZku2s|uu3B!x9;5O17`uPKt3w0X(9d|2xZ
z#PPR$TSeiNT&x2I%R`$t8CnkPiJ&lVoCfZ;*W)kp!RdUKG4e8jN0(o$)#~Ii#qY{~
zaSx_07AB_zda30-kk8g3R}0D5OIy<Qr4qbv<iqe?fZ-~$CJa$77!-O2Q21gWkVOlM
zf=+6>630}C!A3HZT$94oE6U@JJB@&jFAO=2GSO?aP7?}Er&WAoPs}*(k(NEGXnr>;
z1BXH2$ywY?F>b}@YM`e|DUB&ziD)8NEe|>b8CfraLdvb4xjDfDg6|G8PNVO~8l{c;
z;IV{+=fG(QgIqvuSllu-FP*5G#scAamN7-P@tcgXl%r*oXcOL|2Zs!oF@D2V5CkZ@
z%@@k)ryHxhKk^uIG{@v2hms9w+?UT^bh|YmfeBR8m!gHQVaV?v?Aw=OW%z)y^BCfd
z-f+>z;zY!l$=qs*=bs*>Hsl6DgLEqSyU_DGQdZu7KQgBAs)5`~<-$a%4$)~FiFiEh
z2gSi?{KpB_=sX!%SQ0O`>(2wYFlMz6kUOK1gS=|}DGdG6lcMk+EHk@JLPuPXu(FjN
zozvNBpiDfoM^oTN2XHCPUYaxpXrTn$)AR5ar|_SyV_CF1qQ(V8W;q*c#}y;%Y>1HT
z1>wgd%zHZxy2ThD_BFkV`DHpXwUrn&%I79<Q)38TxpJPk^UV(9D_q|qG&saIEbCkC
z`g~vI;#JOnz&7)dJi&zMP~)@bhKo4TLn7i;PN3|dl<qRWlCB`DVB<|KTBaZd+g~W!
zpu+mkWnQ$8bQ6T5!y`BN6E$5DkKgmaK4YPnKU5k<X<;DppBZ>G<pjD`3huq~KYt&H
z<(P#JTL{tt;p$=zh%$2VXMWqwO*jQ>&<}*3d*4AN2c3J|i68W^*OniMMbpY4z%GM~
z8B<EtknX5BQTMp`M5rs}#UUjWD8tz|t@`4Fz^QT2mp;7V!vJbZ4+_%3M)9KadeKQY
z*k`*lX>&_XS?$|MZ31P3R8E}uAV$2R*a=YhQU_)@#=75Ja#nUf8tL4@5+&Ao+mGYY
z$TpKiL-AQ!)3uovewSJ%SsJ{4_7EC`0Tr#8KGkeQ)z-2caPb|9yjl8C!$Q+hlu$nw
zxQj<}*syH76cXK$wHJFoeCuqT(3e7b7YMQ_hXUI#u!R#I`<YNZkHzlq@(UTg9Vg`q
zp1Z)%T!3fWzAc6SNQ^0k;T?m!<Z3Z8`iXLRyPcIZMmRP3&>q~|^)B%9GrFdJq*j^`
zW%Bos`$_KpVMn3ROkT71JG{ea3pCf1C~caG;Omw)&9g(Net5!|gr)4|Mrq6C!vtj|
z_0zb$Y1Vtwb^-#u1>EyccXZ4R9yYU9vIE8(x&tp$US^IkK^e+H`vJQJzDqMcnI>(;
zT^&ZkQA3%fgEUkc;vXc2gj*n}@G9w3iY+3NFI+*tDl3&|C*2TNQ>Di#rbJxI%@peP
z(qA*5RUmJFelXgJEbf34z(f(_EijMl!R5EPbYnn11*)VVXw0BPO0>N?4VoTacQ4D0
zD|@>4&R4jj?H%kFgLw<2$M4vXV5o#?5EWt4XosZd@@Uz?m~m*Ih&J>$zFeP`2-u*w
zGa?sS5+tlxS8?gNz8{LULa4A18@biX)Gm6!f`z0Ac!i$(+7CJihXAC+iOjJ8r;SK{
z$3r9%xx@`Q_sSt4<y1`Kue_)lH1EKH1o9wO=2Q*rcDmT7X`BVR{F7Y11kIcvi7*|m
z_ZXG%TBW9lniUT~2kj#`+YOuzLnepm67maW2Y3bwPzXs!Kgm;+T`tqF7ry3(pA*s%
z;yXvZS{KI%UU$APqHbK`ZV&r`vI|=3d;H)cSM+LX^1ZAn7+x;&%y}LnthqDdk$G!$
z2t}-^xtIig&d;2vd<N0%h~)LJzi{QyaDA*t!uYE+xQhrvCq)_4h9zjK?N{S-t0Gr$
zBT7trN^DWy=J*r(dmcLp>5s5M4M+Z4VU6|TH9sr%4^1hbw@mv^pAeDt2n=?ZFzcJu
z6+UQj26IK5j~@<(lX_Zkjx|_4BY+G31jFatpqqB0tp+S`7*(&~=1PmI5A38IL6EwP
z&$lOhTJ2Y;oJUKjPj)^ym1nq>;WgAcm9`}2Ge;OtGQ5q1q`r52>9o<)>j`!&+K2|@
z$8sBufv*-(9HOxnvvqU=tpuo&z`tYN|NTKG3K1G{T~{(Iu?kHA#f4EF$4W$K#q5ZF
zW3}voiNNV^pL*5nkK9};FvYGPQNmBc^mmKMHe2DdJ?}h-Se;010Wsi363B%ZwIP8#
zC@B7{+*x$=zcb<@X!eZImK2KQG$}`Qy&JzUm(()F$b)acHNSB@;m!8Fq=K$*!_%v3
zBR<<0i0EwT9DY5Lrx1CjnLGa3n05CyZK-C~(QmDVrPMg7YsCryne%~yhHj6-;orYN
z1Rcd2{HrozN=}F?_=c9jNDw**O9ypTXFQFqPXE&rvcw(Um!ZWiopx6f=7EN2V%W_v
zRN?2Zt|lMSoTw@QFv;`7SxHfI1_<T+y$V~raOyOQhN7Yn&*v}CsF>99B^tjbTEtfM
z-^5~&k_WrY%Ub?u+5B~Z*(RP&p0D;oFwuNahiJP&@~p7BGin!1Hut8bF@w_Bf5vGE
z@SLo_#;LOZnUxY1Xo9<MZ~$lUn^thrxck{!Gyeh&O|oQpq+gua@y>gzX1n!z2nB&v
zA#%=F@OF!st6y!oeMa1f$uCY|KjfE`lxS2c(r^Ie-WmVU{-}BlvXtK?qyHJdYh)LY
zGp`0Rd%v3?yLzBX(hHqkMX#O|od8_fqAw%N=9a1yUgGJ=SwkT)p0HeRfdXSf`gmiU
z{oqfw{t0TQ?XLk2DT<E}(8o)MvLHsg&T;Xdxp|`KQr6%k^!}C?y0yD&oWkSS_>FOb
z-pHIq^;3c9C(%B|QI9)obX6tNuNgDNG}*Ofu>H1v6(2?Q^fDPd-rgo`0uA%&)lH$E
zYO8!~!GV8IIT_p>4KyJ2%nBsuE6AfFB5GIPJGr_Bl+)F(ey=+Zkh1$=!Xt6qSLt$x
z+?d!g0ymX)128tinwogM09{{NAp7g6@0kCu$B{zcovw!d=Jx=No64X|tM)Ci6%3i6
zY{y6U3u$(zLZ}wnB%=4c9nU{V^HWW{wS*qCG_5t?_q1MV=uB@`e|F~K;rZQQLt05`
z5a8ia<<Zll=4F!qodN^c7}(KjO^*ArZ2%vl2~cyNZgsP3ZTeb^fRCBt*UMHsB5R~J
z7=*Q=?xJ4Bx-PX59Aw;DV>669G+EQ`ZqMmJWwBqp`tGjTyvdX6<0rG&rb1j#SIhS_
zFqCXwK!Tw`v!*!P6Co6pv@*eQNb+wMC6M6t1n4Zqtdx{cKxTtEnOQI5cea>Vz_niA
z(2~teM{Ic-EY>tf!R<)LK)H3WAG)z990cXd+|%;X9y1gPn`bfDVejfvca=0c`7A#M
zq41iJwwSuT@)I0MhyQ*Kh^{=wFOq$~TrQ99i0SKEzQ8L>q$9`lJcc)dg2%O5jyC_=
z%H+_pk!sTChodPhgKZwytOi}LD#)E3N`>b@wK4?+V%4s-rNTptDEi#K*ce@RP*qa1
zicj{=$LvJwwMYsp_hMRQl^4j-CG%IfID6#JLyCPTx}j@PA0=)HP(t#R_1{`H5INS=
zq7P~M8)ji^S1GU*9#G{=&A6Vf9Btjj3f|#`pb&o%MlvR+_<Lc1+N#J`fFo)w?c*b~
zP_7*a#6l@)Y2g4m7$*gVrCXF`qGZP;Ia%Qa5zejUC=D->UWlTIt0#uy*@j<Mr*B|>
zfEV<CS_5HsP(T973ND|?8~St{U){8tvwol|WNWhtCfx<!ueyZUd`tbSPANg>vL|@^
zgld$n#7vXZib$u}O#;$=)#j@qkm%B?H%AA`u?&ej@;`L?d;=&TS>OeJn77Q#e~)+$
z3i_Lb>3{jkQ$WB~KKqTf65L|o`_?U-n5-yqRUQ7820QO=w)gAgg;N?<MIj^m+n8Y*
z-j#DX<%!UJr0c<IkKD$a-$_+Ur1O0Xq!mysCXUWdtG=$k0XS9`-vQmIJ=4N3OOE~7
z6iys!qJ!Ma-+Rx?=b#JwBzwit6)ZvG?_I@0MUAJXdRKY%I&84~-%Fu1l!Ccz*R)#m
zNO)|CxUHA`9<C3M8(sss5J`ZtgGNG9xkx_K#|iX<y&azGE20-ep#1xl)G_=aO}rB`
z%LjtBwSktNod4~Da<bV;nwOWi;y(ryAfaJks19eIGBl?Yhk9dcC22_Kt-sTrM?5(q
z&0oY9tKcf!Gx<!p?_AG*Dlh7)1D?6)CzG;CxKNp(e{c89-8a6fWMLK2;H}$fjwW-y
zH2@d=9jUYWz~17UEhxoKG*{<$sg5B)7yQ{fVFGa9Ta2~8+Gd@Z*Vfg!4ECZ({|AKp
zwVS__Kq$^R_AIQg>nUx81P2>#b@~4$M4WQNdB0OehQELkz5@aFv$WB&sT^6*8*L?D
z4f&9Md6^Q@B29Z}Y~<~399agVP(y&O+feNPEmfc(Bd4>(Q5sf2tCoY_!AP*bnX_nR
zY{k;~!w$2?^^X{!t6vu=(H-v4sm8jLIb=MgcXM6;jH9aMwltaq1Cb$`t8iWP%}oV1
zgDw{9--CyR-0!C=Cw22UW3D8A^NQU6(91DXz-aZok&xx;E#>F`)++x)t3AQ-p8<NJ
zogycx*$dk}A{A2=R%b>e^#=G+l2@A^D?<NpFHk$iiE&<atoq0FlNnG!kL_aV9I?A(
zpI$b(Lq9z9jP?p;F(c5GUsHo%(4ehh{qLC4yGLh*KA1KJ<|qDZhyd%Zm#t>RMK}nH
zU#EZc2?6pJ-QPgKDMy#|SmaFR&pe!<`ily()OLzxBx(_jr}~j+00U5t5^>bwzax!A
z=LI-r{~}wAh>+3nR7DlsIY~?BJ<TO0s-u-~K|5X}#HGh;TP-Fa0==03xz-Kr;IMFT
zwr87#3xv?bwbjh+DwIYT;N~D9qXVG2{&&&lMg1HQ@RI}drH`D8gu?6UFwaPZ5q>qg
z)w~E)-xI`LAwqJ;bY=HW4-JhpUaHDo{ux&n4thzf145mnql&YJN0N%FS`aH+1)M<a
z{<ee>L?UGE0uVfHKxx)hMyqCl2G9Kzdu@1ocT-&zAZPK%$mdS{^%UO^oiG&{T%w^R
z2lG8C^^R`NB&JnEeJg^^L&E}yG{vvK;p|6Trg-F;z2|Xn;x1X>qW7$g>xrPCI)a9P
zl{Dz;&my{+*l+yTgInO{26=-uKP*VafBlZHYs;4ysy)hHb7a7Lbu~#pZp=0lY-zmf
z|HhgxH8f^ikL^yC<>vg`Ydbd@tppNat!?E}u3;cx#SETn8@?^qFi{W$^G@lFRv`SD
z>H^B@-7a*&XZVZTQg(7iRnxrV`~96x-;V}^(_UD#kUwIvzk6Ibe(?W!!kZkcH%%92
zc@n?|^~S+N6ZMA&y`wpdD{bLL8+{z<@5RS~OmRLA68W%M3m#(o_v(KqhLnux+Q-Gx
zIO=dj^m`}Z2&lCpoe0ENH3TFN<$4^*tCa}BDq(Lm@LBwDHNmMoI`-dQe}lGjs9Uh7
zES<;q^XfgY^JFE-KwX`CTJpL9t|GG?CUs!%+JCP3-=#+0qGUhkEI3h7XTQ!i=&66U
zW1wt>^R*uBb}Qp>05#_Je4P3v_L?s$hNTM@ahA<Z0jKih$iK|fgY3-^j3vHNgQT=!
z19|xe{IQo4E^qOIb1zljmz$h4T6+4R%hg}*Pc5ICGe*d|f~UCl9m?1jlj{F$S~55-
zLjQmsvGR>t%w4g7si}sY#BgY4t}?hz>yd%X2JMv$+C@YS2@b6dK{iw$#Voo$+)fjN
z?w{63M+Y$~-fyPg%xOoDewjci`zlu31|D^26*o9e|Ii&v4zwfk+_1aeearvg`UW~Z
z=yd^LUZ{8`ZbOdJw5d8x{)dM@KsWZo8Rdt~u_M_}XvIv$seWe%*MXq2suEW6k6{r(
zb4In?hNcu7dT}AU@cr9V^kQ&&fY+mp>&A&-uVIBV`d0Q*jJPpi@zM4j_1Vu0B-1gO
z{*7IL(KOGftKzWo-gSA;Tu^i?Nt<D^H6f+r=Wg5P!Qi9-tuPS|L`Nq7Tgl|03f{5}
zAJ}}Qe49PKnQzrwL(%^*$xx#F(2J)40v|VSn-ELqD{Vf$i~Gw3uD(k-Nw`c4ml+Rv
zYe({fs?okl!n*iO{lfB-#J7{2Dlm;zr^n%~RW}2Ty$`9+-Ut&VUL%-+MAW7Ah}<6;
z)aG?>tj>$FW}K}LzQEb^bA<w|WbyYgzd3}>a2H9&vadL5ovQDporgQ3%B_j`@I#p^
z-X~_Hfc~+y(EdLI{h0dc#?*Hcn)*Nzl0jB}vDs1mDqKSN8=Zi%4mW##PZuuj!~mDi
z^@8cn*9tyqpsUzCJpXx-R$3(ci?dZ2JzpF-x`L+34{s~(g|i9K*ac(<Jz*thtItNn
zElEl!qbiCTc(^jOzi(d=ct|1osi%_B$CO_aEVLpzZ%v2KDQS!@eXo-fe;pt`)HO%$
z-wVURk<5_ndBolOUy3E(`?sN<Jb7Qt*BD=PSVb*hEVzCWDjLAenRr-s&#Vt@`?fSo
z)hPpsET&ak2T3?L_H=)bB=5t6?lj-hy%+TzT};1rY3_zmks61hGlDvIEc6(c!)d~3
zyi!;Gi5_OwSGwP4|FZs#MebbTp#_g!+vVG_Y{AyH>%FFE@-9z8&ldr1jW4y4*Z-lF
z%Y0%YH0GoK8%zA<+9*50ecaEUCz1T1_K`soCaa3>2xA%Td=1}^bkVGoHzZA3Gh5C|
zEHeqgK5+(bL#Xe4l_n#T(ll0bNYwww(fdtIhKAsG)9&OcehW`tXNMtno+nb$S;tPv
z)oj4UV=>c0!~bDWijjc<XqJG(?<oK0g8JLg`}?A8t#pgir+T>r*TB5zagbb0t~8$>
zf@xoE>7E^jhZ1N#F25h#Gajt*!fp~G<@1=Il^&qRrcm@YCtb-++y_{AW$z0dJO21A
z|MlVKK0%kb$c-o;KdWbo$cfqIj3*ATur<KZr6rFGx33d!5$szy7e+AQp_kVOj@Z`u
z8(D(FLDu@;e_WiA;1%tlI(n1Aub=xK8ccuC_FM&X5SqC-=Eh>yUPr{mdz1Tv;-ls0
zBs6T}M>cEoO5()ixac4Meye|O*W492fK}eBI)!M_OF~?h^+C@xu5<x&pkyhqd2TJu
zVr>nJ{A9BmnPp=ymeK*n-B5!)A9EsJ3f$SPCuqO<ZUauO22Kwvo<YHCuzmn0J-EqW
z2V1|X<twa@R#tFu1kubi5ERe<igGt2;WS=JG^QUPj<;Vvpf1g<M1xB%^jX@1iYY;C
z^pk>9{J$KIe~#4`Kj6T}ZQe0kqy<M@&?#k`2E_rHc9Qlu9IR}~M>yOzuSnr^Xlxdg
z8+CH>qNq!?plPL3C;u`8K~XVjaI>Wuv(QgIJ@iJSYekGEJB^P9mqpeU>$`R#U$%65
zTVM904{a}`2u)l^t|Q^|c-}Hdu^akK45>+uGW6Hp){h7)_Ny@}NT_KMu)8*H0%b6g
z!7%oYjj{CeChtsu>iB<8Xh|pBl4@qp_x#Lc7aS>LCQJr!x86wJs5dFiHuwI~HG2d1
z#ZxO(jYNFw9ev!d&sl2?rL?1Qg+sfGz8|+z#+Rkl4zeX99#k-;^YD-C-a9(ba+6jv
zBTs$R6JO&TB0No}XD{_ZRbG)6u6nIiA*NUl?<UI9fWxNbA^LQa;{2<Pjqq{=J%);}
z0xl0&@1eOmZy*0|X(1PAQFNP=oe98Q5497?)k}PbK=;3=jtknH-SXVDpv?)OX7hKO
zn+WNo@8M?7>kEB&{y_iwbfO<~@xkZ{&Q9`%z+6naVsnI;FO`o+0kc<35;V_T0q?A7
znj6AbS~hcefhVrdxS1W;d3U%S;-B4A*@+u4x6(a9?<EN<$(hCiHShZw?qDMovf}d_
z;iau+aJC9{F(^37|C^;K3*|w<VRh|sMaR?6?H_mVzI4}GEO%rswWA1n-qbz?$in{t
zIKSZ`5s5#M<dpOmRXGPT<5zuo?jaFu(zSPo*+e$<BU}NJBW=#3-EZF9yCC2#1f)wE
z&z%)XlPO3bU#d@-5-6LL1eumPV_o;p$e&tMOIqN2gi)7_nLW2KR^)-mnId0b@G3}S
z%1wh1=s2goUZ2+#R6#hZI+*ujWOODZe0mXkyM`Xs>XSI0@($rIoBR(1C4*CzbH8yu
z(h*Y&D!DA!O>;%Bq-xE=I&P5;&Pin-z}+A@gd@XrFHy#Nu@}kO7(L;+CU7e)zLNf)
z2XGCic}P)d+!^fhZ-jKv$?2k)O!T&!bs4}3g*DpH1l-nPxH+E)j%e<UR>3TBISD3C
zCW4<d`dw5CZvm?C#h9Af_WnNbWg_IiVe#)GkOR0vI#qXh5A2FCcTVfvH_<I+ahUxb
zLM7ORoa$DPFY~jQIl@Fykvg1=<N<R?>HJj=c3N$Xafefn-$r>JcVo6U%nRF+!S<GQ
zYDrX+gmeAG<Kj$9fma_n^6phanyLZci7C&h_z@Bk@?xND7HuAccl>hCpZ~Q&0?^J-
zSQ}4Eg<5)Z?u|u7++SAJ7G*k~zAVvPi1u$F^!sx2fSa<e&rcT{fFxR8ty}6fpU{?9
zvqJJ!H_gVv?cdb-VsLxDiCIECW6xw*@XGRWB8g1G1H(lH8hnYcnNH;AueT;rK?c8_
zEbfuYMuYq*=Fo~{S&A>;0{sBel42Colh*|8lbjK0B|TG;?wvN!8F-x-b&UgGDi*o_
zgiqM;v|JNyqY}4A$0gX#JgDEPyrB-D6kkfY?iA_>Yo#Vd)EHOxc8xNtA-5RO+gc^b
zUHxz2c?mJ}ckxWI%0W4Kh8e4?5%FlNCmq_E#oC%keN^`oXQ5=<;RO`qiIO+Aq+f_8
zX(0#6?h=yj&Lbk%-)(suUI&cKemY7LeB+FV5K^}_mDVzVJ#sW=HZn>(Oc!oahi3M}
zoj=d`I%LU#vvcjrq!bNL7gt72%NLVFeIp^R=gM+HG4^Yib&OfIJDfxDZp~JTaJ9|D
z*P+pIar=)_`+4<TUg8v6XPC;nZYkOB2o{%v@p$dHW-;gDA4eCOwpSRYi{0#a1vKRw
z^mc>6NdJ54zC%M$D&|eD8=o#9(uu1OY3fTIF&4dXP%FyGqCCRK8qyFw!w-!k5x!1>
zKT7E|BO|Xsi;caT-=@Md%75qXFea*&1RritIP;9}iNznMT}>|Mfj{0iEb$KI_VK*e
z<6A|KN*q?BMjl<jQ|1U&FykjN%NqF7->+4hO>BpS6VXb&0av0lHmp^y^@xi?@{165
z;a6BdfY*;;NlV9X+k|j#cE0VW2S;Tp=D9^|O_OnJQR=s>SY??&P$WJfJIeZY+fBm~
zQdLQ+cTyN`obvtF_ipd$g4OnmTc(N8A@Pp?ePJS4|DR~Zap?`l*v{;|E`dzgc?ElP
z$h#Vn8%TMuvoObX@r9frEF~@hb2!Ndlmlczp!~XIv#m!iZ7PVfv`znn2WgFLX*zVv
z^*p}eSy)Cu4Y*g$3}Jes4<02Uyl4ti>()h6B4MD(WQ{L2M`oCAspIgK;vfx~5IMR`
z@f~fFBStOOLqSZ7GJ4m^O(F*G8}DD+H?fVAgNvm8qTO()C}LWp8s_K@@GJGU$f&V9
zT^Up~!y*3*IeICSNq4X`La^BDB}#m2Ty(Q%J}dW{)6d~mt|SG{3plaLSK#mIh*?5z
zW~M~kK3+|MmhdNIuBA$J%%o4ZeI%c8%E<0@QOyY)0|+|RvA+b6GeEXwB|en0bG$ox
zr(uF{&1Yh$mlxN=ZdkSn3kCIyt;DzLr+0#*+y6b@*yyyXjp@Tj!C^9tjmZowgcux3
z`{p6g%t~porlvUs7IPI6T#hhVy*I~O8aqTGY{<UL;DTNBY~_PIL>^PaHUv@8Lw1#D
zJ+`+n6(1S}2|pz{rOEF%h485&rd2G!;e5GbTWZgkQFg4LkTKF0qZoDx=KErOHX`?h
zTnqsjwD;Q|{P)%U`#(%*b}V>-(lI8Pe0mD`{y223bibb-Tq2vMw%;nk3?>(Bbt0uv
z3!SBnm1|#-(zNTxOMr`in%B+j6d+^2C!C*z(!9N!I>>L0**D&O*0okKEoHvp9g)Mw
zzs%o<8&|=<$?l6g#zE%$YH|{9_iqRHpOGl^<?k{SQGs-IDW#c6;0;qF7=D~4qOsbN
zHv}<%&#lpz!dl^0ATa7NU}0QNjAmxio$d^56&jQlhdlZ+;imZz{KXzS#l=;;QYU99
z_s&_P*Txbqvb4lO<7g9}UY|U?GOlNa4NUoe*5miRWe$y(!@6RvmrKVP#eqk%7e)4g
zhPXW2G*3_6z!PB+(Xl<JS(!35TTPwllQMB3w|&pPKAu~6N{sQ6^1h7Yu(QR;+HCK*
zOhy=3S#@;CB@!s*nL@e=@z=l5TwL+tL=CrWCtnl=GwNV?iU_)dSP`$wqC^%|LnAEz
ze@o$?4pf}&Vu4ku=umS8cPHI&jJL!URsjg|1q}<CE8Hsg2Wf-<TQbk=Nf+NxqiYAw
zN|AnCMs<DpYxIi71nlJu&N<j!mg~8q!W$h~M|1klm#jdgce*`MCls70&I{@7L&~@k
zU+{uY(|`BHr5}0{&aA8WNqnnhEs-8JGfLZ@%>2#@dwkeX)id6aTP+CEq)awIhOM>U
zg6(5#2PM#wA_Aa-Z>#G<?j*v_1od%9EAj_M)ngIA?3G)p;9Cq+vAWa67BH_onnV5g
z$xtOtP7VjJK_X2U4Aie70riC#=LJ;e|M!3j4$_UiJBB-|;MmWZLOp1ZvC&Jt;*^DD
zX)U;}vCeROjoI6EHIeGrPFivqDaYI;o&%zcrOu9^nsGqhMf!dl=-K;b(W!G?7b2Nl
zCAgZ5&t#(w$779h@uyMKmHzkq1=3258nnZz(V4v}spAm5rGCAHp)dnn)`L7gx;?uM
z+~K@!x_8psd~3%~8qUs~+&1eW?T;vA)IZ%bc7|WQBK#mDA*zmdb$z`}xbRCivuDcH
z90U8Wew~?_fA#AW-u>OL6A8k<J1oL7yi$)p&ulXLWpg7-MDtx1BGC&NjeQadjSMLd
z2_g}n06!u?5=OEJa=tOLak5d&YSXi9!Em{`q2ms@qQh+UzP`dFj-FN)QAhM63Yk){
zA6z(mya+W0`vxeb?J3J%T;BFIn6T;apmVXMxtGr@r``AP^;7Nrat<^s>|+}PvBWC~
zXf%=EANDK;hi`(@HI*?JkDolx&S1vI$`W8-%9iBMZ|VXV6;!Lr{131nN3)Sa$MA8j
z11j~|jh*AHx$Y6UnFy38@XZ2R7${wE$9h;;&MM<3mEdaL{<^uAF*Qu@Fbz_cda6fG
zxvdm+iixKl+`4#1hRE6IETLnbQQ|9)7tRuD@zD%+QOaiqtC_yVUr$1i5|>2`5Od=f
z`k}3_pKbjzsK{q;(Aj{YdXlRiPROfBEw5z&6Sz3DpL<a<u+FvIenU9(W8*fz{326#
zWHO$~?lj>r`=uZXk5AQfGM!GXNS>`z9=Uh6(%a+hKd*dY10iroHwR;6H16%$G9{N4
z^PP(!-ANgWn~DGGkp44u+?w^<Gt&$hL+3)<`P1#%^PmE@<+iip$bQh<4Ba5j=ldVc
zJR>Hnt?#Z3ZL@w&ff|*<Zt5IS6?q^`8q+$y6nN@zrs{H2&dI*Z8zkX>XB<;%Lxen+
zt1bm8H`Z8WQ;TAIMcGq09)`lfL#t00h1CM`I^knrkXx`_qBR@4nJQFKqjEV*p<;J1
z_<GMyAtZA%E$oucdu$03zJ}87JaSpCzO1UX9yUtjwjt;?{Q3b#(eD)`9NAwVQ|}<!
zC+*x{L;y{LuSA@b4rdXqU1bYV8(DAOTkVr%3RCsTO20grs9gQXk(2mp@yp#Votb_X
z4c#>LSD?T~756>LLI&9+d8qtI_<K8)#w)n*=DXYpZTf*?$dD<M2pk?Lf#uUO>%Nbz
z^I(fJ6>I&qhS7$}t{<<`41N|y?lvKa=E?O)WtWwe?JKdAC*6pLf;`r&)1E(LW1zXa
znB*NVkNfGjf8M+ZUnux?LWfDzL2cL3AWri0jvzcLsx4b#Tlc@O^80;s6Z~Eq^1pLR
z(?&W-*x?^OHGupi7+y*6vkm{L)x+Gbj^4r#$a~kYNQ@*9vJ8vVX^o9j-v(I)Prq<I
zCZ$bFGVv?ium~`e@BYkqr;xDYIn1jj)uF9&!;ERb+)OnmE0-6)fAEy#xJN0qOPlvj
zR6v+Q{AvICK)-Kwob#PvXPGWCs$R~8^?U!wgXaz@QeQE}gT2xEebmuhhn!YJ2t%j7
zCjVZOUp-u^xXGYR-y62!;bDso#B=n&4%lBG7xWMc5Nsyyab6~hO+lfY;rS~TpC`D-
zxtd@3w&bbHD)^Pm3UT2*PTKXQzmw{%_!XejukUoe9Y4#Juco56U*KfAchOFN>?4A_
zc9uy*FU+kb+ko7HQ2M&8rDS~JMz+}iC+f%?p0n5AX#jSV0#hp_4aPDZC!nW@fZIn;
zO^s6cVVMO~xGCNI5c3WLkLbHg`z6Qm4N8`0@eQf4rqAUb%jf+3p5qni!2j5VzlLp2
zpL>rpfrrWXA(Pk^Jmt%uYT5GPdNKWK`)Q28<ChZE!uLFWVi&K7N)&>R(KGXDrG=g>
zhM$MEm+H-B!=umD)05=JXV|GVhy-b;(%HY<^F;7HDRRu;Jn%4-TNKzRVA|*uH+p(n
zRx@%#7>cQnqQxB*C^T6A@|<OOzvrl2h?L=4ym+7A**sVSx~KH8xGuZef7I~w{$xS+
z_jdOaIfOpRES{P-CQgftWSwQEfgTMuDsFSkooOgtH`60l#|?a#sO#5AkEjWR>W{kB
z9(>4nb)EN#a&Kv{;VK;eT{$a5uq6Saf)g7(pE9^I3ZZ33Sx>}twu64zT!U_$shs18
zX+_X`7ll9icB5VyKYNbVroo{%2^TteT+;fd&*VlsJIE&92FF2$Ad4E-&4!G&{^&m1
zl=AO0NsM0Yl-*PGG~1<o{d_bxsw8hvg4p9+|7~t6!8CZv_gTE=mybdw65H@$1MuDS
zaC?Qs4Z&73b=>zuhyy8+I*4{*Ylf7?@x*D0gs)TMMkN*8G|Owf?)UY|9LSAdlMbiW
zW5yNtZE=O_0=xQqAj7{WScewr*vw(e%0(jD%<2<F{9_*MPa$0=)Rx-5rt|vz@YBCa
zYBmIC+H+-zUq7w2FXmQ_mE(LzIJnDk9#Y|GP?y4R(Xpsb%l|T~ew%ks`n{Rcuw4;*
zUgFwQH+Wb;OV9WUyCq-BjmGj$+c~v!%@|TluYay##iCBH{3~GB)M~cPZf{feRYfcN
z?nq4|7gBKd)A(i<FQOYItIR=v)==%YNw!`=U9=k4cE8@*xa!J6H>H|ZWteiZu{ze4
zdYX}^4;S_J92OWPy6SD9(x`n1L-VzAQB_bSHFYGg>?-y^5oVhOWFf;ox+t_qu`=We
z{S2mMs21=Xn6?!Ad2qOBpr*;#?xboT8Ele%E~mVt+c$9TB)nvmk$bT=EY6)=bo9sS
z2)-lhgSJzXf*$_Tj1Fk0o7iHm@-$4B7OR-Xr^4b&XsNyBY11?OTt0OfFB__cAe*(5
zv+uUA*c(!KtynkhGP(81R6^yNWP&yPMA%I&3@hm!Cv}~jXLeE5ZD#theYd)vR?(A+
zLQyRDeBHw_7;)M0Zb`oikm|mJryJutx;-uQ|1%o6Cd?^|wDb)_L!GeJ@tmLXQn)D_
z7}SB|wA;avidHKnRy~<QR<>damQ`vpz%r4wK#EmJe?2zh;(u~Jic-cm`p(AoA;TnJ
zM$vcDOdQm|)>#5!^eH&ET9BO3CWrOq80_+c6zsCcRAuARJ&5mkLVEmhj7Wp{b|q4x
z_m4eT!I}~&vy19v%px)U9BJ-kR;N-NY?=Gj!R<5ltH!Us*Qbw)ydZ&2MawaS!lEw&
zk{0Rb#phh+b1)7A8Q4;{8+|cYMX|0D!_<#KgSQE#a-`sw$JJ|9%eTl<6S|=8?P>k#
zpFc+xAAWpO9QN>yjmml9s-vACt1`!p{$oo;aycNMfn(F{4Y`+d5d8lB#bWB9^4qt~
z53Y%$jlJ){c101E%5D{(FTiRfFHYe}G?%Ku;mq&p*i6&E#84|LA%jJnlnkZhV2uZ3
zGzNWmbjWBKWvN+oC<(~UHZQ6iEjO)H->+Zl(yvcH2gJsXcDN|X$ml1_>s=8;_MC|n
zDgGBaiF6^ta4H!-oIlh5Jc*Rlydh#EQ(jmjCXY9rPF;{q(q^UpTB69gXkZqh$kA@D
zLCM4}`uTO*Sp+j<-OwIIn~iRmwpP(?W0OE~yqFt3_sf_tnMjC2yEu4IF=edRZs<(-
zMI9rgP_`320pzm<cQn<v!%Q&8{{?j3+j}K50AZCh9bbndlbM|n@Xzs{GKTg7#O~hX
z%FoJt6ZG0_V$k(zKLWd;=C(fR-J`dxE=*6Zg$5$OeDWPEM4Oh<?Q4Ju^0W=;iP483
zJX;jt?2#weW293%i$g4ql{Nk8I=pn5-$xZ2ms*Gw&UVBgMq%`3q3&wuS~c@A9&6vr
z{4ETJ0vZ1Rzpwm^a%@&$#GmbQLb)a9fv~E&IEV2yP1ny1F|*c3Q}TVQ>u95eDc4+U
zaqtjXLP-ZD;wYybw5XvII;j^a9uYm%z?zXDy&U4_A18EHx0A7VcG$vB_ZC5EmIN5s
zEQZtY7?#;k;yqNXv~%F8qZ0lr_vIrjDaq2?G({;F^&}Y+8PVR}Ic-x%&>aH1ZyFw}
zF8Hlta*b1`dHcPnVoT7UsS<_wFsins^OXxNG7>Iszpe+=nyYwc!mG17zng=4x;WYr
zYd@A7!@@Y*hW^{ud;MyE?fnyvm3sWU#r$UqI+hNychuFhz#UUxR4Z>ujC@aSNmc@p
z_d0}t%yQaKMT(p&3@P@MGF<#^#wWalu{&ui0pUOMgZ9k=k^t{6@-}7unsP6JqWI$n
z`_79f8a-#jv`5p>;k|9qnX)J6po;AD-0FAf*)`-KcEuY}(SLxf$SeO!c<5AYnb14L
zL>di=;m)*2#Mr|*og>;74Xe=tu2;l(xMUyFF`4TIUdx#)4{8$FXcOLJwQy{6{Jn?&
zdRVR+q`zsO?FnFaNm2VonvIHO_%}Tf!WFZ+h_Hyh(Rdp{meZAq`e#+_e|Lz&(r?(p
z{>OCxp3W%~|5tUdN)%6{xKR~!&X4jbgVR$xtabx6-%BdH&j)D!%a)OCi9(Dk0ZLuY
z*s6NYMKsvRYn<lS=RNH{i=)RY30k^U$qpp{9$j^VAA?e!kXoCjU+&bWDr6?{KNHZk
z04YeNlvlw5ws<oub?O6SA^fj_>C;cCU153B`G#g-Ux=%vpFIKH7e;sbBQt#ZtO()0
zxyYrlPrhbqUy<ni`gM43#`8GPuduI-u(EB2@7w>Y>dfPz&i^>xh;>x1W|R<_orn-w
z6*9xd<jS2ZRA?NF<Tj4MT9HCTB12fmgqmiuJFZfRZ0>t9$dMyvR>n2q_p$wUeVf1L
z@p<rhd_M2@=kxj;^LantHdXUpA^6!+i>`a)Y;MVsu;{O=n=H;NW(r#<C|z1=V<jgV
zy}A+?jSgotNSkh!jTRr^KM~n;OWDB8+sMehF5_%XCv9!OX@s5=S4sC%xgI>TTA4>2
zuL<5@y{e+(O*9ud?JEgPp%LQVkgYY!W=%7bw?Ue*&KX-aZUx|3LRzCl6u)*iq4Ey=
z;w6PNUSFx>_uNrx!9x{`b;VYw$hTtIXQGR7ho*ne{A&s1KuALMd08)PT9zg(%@PNu
zmTiSTXZo+G_-l3br;XD|#Cadicw7oYv1@R|r5+s-{ZD@yq?ND&_{OaU59wnJ)TphW
zQTNdbz-;WRaO__~I@2+jD*8NWtFBwAH~%_Y3hBPkRn_t?A<By<-oig|ao|~15Up)l
zFk*a$8N620v_d`W{`|k44;UKHckOvknIG?VM2DlDp4YP^%E~J5dRD7=b@sQmX%2ox
zo3#L%RdGAvC3z_)#n|naSjpjMPK;spskP6avYMCowHs9wI$Rs!AhILoV#R`3Fo=iw
zLaTSJz{6MAGtc{+jyI>fM2Gx2k$2_@QtpGSU+pSK?9;oyPAhyOUod<(%}?ICZMsOu
z+S+p_^4e0*M&m6szAp1#qn|rN%sJM;>8vgy*HZMQBL3aB{WEA8N-xeAgt!oWy@&Dm
z5jZxeIASBQ#Qo!AEmY8=$=cxVFX*89f!9B-^_fKhV&bOdMav)YTlE%6ZJ#t2zQp&U
zQ#;dfE$$^&&XJq_H&oGPdanu(Re$07_x!!RuGP8_()5@O2E$#Ai^c~k!pGN_s`JJ<
zf*$^P)2sCtF{Kh8IVeZE)7zPx(t+P{3gh%%J@&~`(W<~jeLM1fYcU~`n@?aqphA1d
z()Psa-w8}d_BEnr-=odi-0s^}dI9ZjcCbftr-$va!WFnVIj9n0Ufkg_k*1E@e8J?r
zZND$4nz-S%;g^>>K2tMc(j>w^jaV&vu(9!V0_*ZnE|Pa|+KSNUCt`*CDM=eWI<-(m
zg5mcF!-qKQK{WQug0aPc=!U*0;T}G>BRDN+`<GW1aR!b-ZBENUiK^Y$hu3(zTzNy@
zedIly7N%J5=_8@D@QlnNZONvo{@us9;wtCJbm}(L8kQH_xv&7DH>Zp-4;^l)`}C{-
zl#bqe!)b*$?1zbP&q>9=x@=8c!CWz0`|1bv&IFQ&d8v>9bi53h5%2=@A@4m@p`|jT
zs<2qS6bnm{?@BMDK`F=Sq(kz5YsR*vLrs7Xxn@}JtR&l|pyvFJsQzRz$lwR%hxg0K
zFC9c7j(qdc|0`MsrIeAM3g1A5kwAD09C+5iQ2+bVjcvDvy#MfgU<8d()|&g^`=v>U
zS}}C(yPkcpgT*#V%rT!nd;1#I{3am#FsZ6WQK2ps+4<CeIP%aec1JdM#RP*o=`eEZ
zl>JG+v|3l@`N+sRr3bmuHyVmebG&Xn?>Y~W;0SxrHEiX=@E)<7#6oKwou!Z}rp0Di
z;Ia3u8Tf@i>2q|W-O$r+5U`u{pN#;dn~9YUJEze8Fk`>pR|_waVqN9-c>u+n)@adO
z4O!cKHIn}1$%!g&<UYNf=H-|03&Ynt5Gjd?X~eIqSTztAEa($q)E4=~IF~9|HGL(F
z;n@<pA?^=%Ye_McNKa3%d*q}JnNu-&${nPV-K!2;06#TJB3*3xa3)})*S5MjhKf#)
zDYHU_vrI*^PqS#j{r0v<cU+3Gb5m5ALXG^b11g!>Cvizc;z$qxVnEiKT`_$;d>~uL
zQ?{5?qT{n`R5%>o3=)^SZ)wdHm(vVH6YgZP>W_(LpD>R_Ue#v2B{v3GI^I<*#+ex{
z&+HXfjrikuF52vOlWbWStSFy#`ZPjzXHazL$B5|`-1#^ykeNIcXwhdZ2r~Sp0tAVD
z3P=Fl3a|;26A9AIc#d=0gCPgQY4o|+M%N-+4+{5h`i?PI%{_{G!_m>v{DLXIpA!pf
zt(9GZ9hg#xVoOI0*|u`gFA)|B#sZUH2ahMFq-14e6sUPNS&LUs!4i{yDJ4A>6{;V_
z&+3|#?|5PQDVI`gBVelfpO$>oEqtsV)lu!|l8uh84^v+vQ7F~`YObWOuWxB*C%?v1
zQZyQvmXUdh5`10r;q5ART<P@vrq23-0lS&>`!fFi{-VT1@tJNMZLfreiJqR`A%zA(
zG#g(&V*A}74s_1fH!t0?a<Q?|Hy;SIqDzV+5GX+MqnP4zPElyI2TacZI0G`puHWWT
zx+vYN4x5~u?6=!jgS@`MqoAPhqq_RiI`RHVh=oUg-tG`U|KDWb4Rl}7dBANgN>#O!
zo@2;?Y|2<(z!6t0E$`-Pg|v|*Ovi=IVH@M|3^_xn%*C|rq3{Xt3QEck4h}x7N<)hL
zae)im=pr_dKkz`cT~nn)R^G(a^j>oEUPUGSPo&B7+%%WbiI#M=tFLb^pha+ylg*0+
z9tZCD2VR&1Ih_^<1-KXr=9ZSSw2r?Bu-&!PM9LmW&5nGa0o2~{w<%eGrtBC<FjzK;
z0T44=km3{>6%}=MKfxJdr_m#@YTYqF@^M>P7&bY=7FO#Gb-p}OA9*)3b80QAOk}6(
zn8Qa$HRL7LJyJbHIl%TyCj@EUyfGg?UIiChX*s^M7Qy$$w;>u8N+r<q%^kJ<7}|qm
z_gl87@|xHtG4u55RzOcgojCCX$JOBt(GzX?4lnaktMfm(jDe}99jaNbm+#GGV`H-j
zP?(O<lxYW3$=guLRRDi~P*_+7Aigt#=K7Ar6Z-i8wzk)S@0gAb!+Yr5&kzSbd4?hB
z76f}Oe;x!WLS2<KT|Zsu3LX&#5fT}vMk1_0Y{-;^)T0B?4#Z$`bPJSM8oYWH>>Hx$
zGBPv6bpt&0%)~;+;tznEst3mDJ4Y-qY4b!pPRjRK?G;x$=L=p)hfQVU&RdL$2YAi=
zN?>3CdRGNZTITCc$?yKFf}bJ*pN#<tQ^{P7S<c~Q)bLfw7~lQPt*z<%Bs7|5dr9{G
z6naM4!T+3*Um_4FFW=)?1aQY9rU&c6ku}dtzrl}yvA56GX7^Z;LHNbYNW<1X4_FCg
zk$h3jqX~yA=(@QTX)iV-7q>UQFXMP49pf2c@q|}nsV*C{w!rn*CQ(aC2AzBm??jm7
zztSyO)>2iq*nYI%$%8(qy7bg9HY=!vOty^L{6aLoaf5u^iPqEVfDM2co+Slq2)C-F
zY8_C%lqyGz=sNV$p6r%5y<{oCl_v_GdXf$J0Eba&WjKUbQeOPsCjUCJqb%Qit`m*`
zK?)Rvu+HjeoG1b@`FpsI-sliW8jSX>2*iVQjfpz)5XZ@M)Nwr&6rkE`Hvi$-eKc&Y
zqS_5`*412_k{5iGsGP?H2D+3)pS^0Zj{U8t$C@~=C<T%97dhNCIGm<=_a1n%adstl
zX<?Y|fKo%D-cS>9+(QTu_>x8S?tj;uhMWYn#w-?#6`XQ~7h)`7Rx$w_tLKw+=MV^D
zvT_caL>L+w-31h?n~eQHWgZf`XSPA!%~S7lP%<)@OcfVp&^Z5UMIv-ZfH@@)dR#t`
zYO#fj2J@5bL)R!PFDF~_gE)vm2mLOpQ2SXc%+~eP>}=0s^}%Pj6acF4Umt%7$YA)R
ze04iNZh%V(ZtcTxjd`o!;O7V#kmt-A$e~+Lsf8NAz$+dE$#RL@JUsS$dZsB>Nld<;
zo*uhBA~v?Rtst}k1@b%sTs=};TwHYjek2I5B5&H|>mK<|(R?3cs(*+#t+{yV(s8*9
zxx)M4Kb`Nm{1Tx(eez8Rw|aAbuLs*cE;@4WVeNtSLQG&Fg&CNU2id5O?&j)Ol3#);
u(sq`=?Qg5OgobwZO+lz(Kyjem=oZX+EMee+EJAq~_!#P6I9I86Ire{P<fRh;

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/multi-cluster.png b/assets/documentation/1.27.0-rc1/images/multi-cluster.png
new file mode 100644
index 0000000000000000000000000000000000000000..029cffbcaf0e469aabe87796fc25e83cc690cc40
GIT binary patch
literal 202406
zcmeFZXH-*L*9K}sL<B@cnsfxEN|%n(q>D=Ly%Ty1MMP=Rd+$wJXrU*FNbkKT(o28<
z0RjQSjpsY>Iq&_(xIgc|FJolym6f^H-g~XN=9=@FPZIu4O@Zh>_5B++ZV)NHm3@EX
z#yy7{H*Oc)yNjz?L)~!4oo>3lS9o)yYWV3k?nA7lj-r*S>J4^W`QDAYH}BrK{YT`+
zE!^SJ-{qUQGW89-zv^$?(7H+UPub|^^MB<-ZExK9TgD1^{_{%4y>YGoKHtv0`EQT8
zxBer2&ms5rf6BKD{xlPDto6p72%O*Qy4|=z@#xR{rghFZ?s0Ar+J4k=*HKjwH3v9y
zn_2+OEV;cMo&U7DA?_`TD>_=bn=*JiIykwBdP^|<B_WC{|EcC-V)#qM-Clx8NA(?p
z48YZrL5TY$_e&<p`wR>W;;t4}qVHwp|89=^B*A3k?(Qtg!{g=U#qGt<4RE#Q;S~`P
z;d#l&!^g*kli+gmadJ2H=5lgl{+~|%(~qpBo4Kp4v%4+8iQ!Mbre**ScL^q@KNtGv
z^*{INZfo`Lm7LuEek|Mr^8ERRhnM>$&p&<Rnu`Ca6@72%25|8B)4isXt-B<j_+P^R
zyZYa&{ZA`(S6fTm{r+ht$@_Pc|E~Mr@-hHNXID!%w?FcNf6M=O-T#(<X9I8t;Kth3
z)?Cra-O?4;`0uOz=LY}3CI0S9oafJQ{nzmQ&)ob~i<=zD`{F$ROtj?v$@@FcZ`_c+
zp(y+Mqxa3-C4x^+<(hvSf~-6f9BwVEF)-Zu{IFK!)zJ+`>CeAAmV;PJ#mQqrt>3M^
z?2$(evM!I7^a9Uh=|A^>2>Yx~%(Hfvlu02z>YgjJ!kW_CUNHX&G<_*6E3GQqzQh{n
zc}<kDT~)SUh4oNJfAsJG-@AS59>b>_|9AMmG59|{`2T$wEZw?GaOa`)jiA@;&fP~=
zOGj4C4m%kh6sdE(vYv5_uC@qF3rH-Q!<|md!C@!GpHzY5=*$1>t{!;a><<sVx>ve%
zn&YAV&7IYN_8oF`+;;t^E#Ua>%aA|950!)F(9sXp5b>Qect7vqE*J8IvWZA&L$W@H
zC7t-YH<IO-(!4lhhM3q|#s{H~;(=iP`bu%>3XzwufGdi+;>$3TSByk#qc%Mjoi`Jf
z^KVT69ODb*{ojrNdfxtwp5R}SG#k`+&;AnTZ#W_~vUSF9c05vyRi9_Of^HqLhi5jr
z*0T)twL~X)oL}rzv__=Two=q6N*PbKQwY#EDwkX;B{#rICK|+`#|kw_EhdQ46ICN!
zUq%lVjls_O6alut5A;`cfeG%LNQ=HiP0LNEfF6OYk-eEq#%SVm5sUjb|BT{ahaelg
zh$NbR!#Xg6B}wN6MSaWB#BVD07uN6EHJ4moi`0k;Z?JRWMthmh_sl%qStY;>*v@Gu
z@v%%&nA-o0?Ml6J(?<~zn>}ioVjMG(Ksrnz@yPE~E_cWLm32|@2_{?Shm8u}2FS0S
zC4T0vtM%SO5#%IU`qj;Q45QVzREaWB@2S)U+GQSX#J}%rJM_JHA0nu4i*S|_T8e_g
zclwZgR~46`CBq+Kv1d|4Nd4Qkl~>^*V<yZuCO+LH@=_7X<<%v=pNTrSCz0c?7kL#S
zbZd4(aAb63@EQ_6bV^+hQBxoOlD4*aaygS14&@qwxF;F#b_$l2`Z?njTcG6TU#_ua
zi7aa&s6uRKXRD-8LbmZDE&JAjdo%Sbzm<r1{9#<DOSR!N?o@0D<7<+2Z%TeW{vB-e
z@NS_6>g&!S|F(+1>Tu3(m0}mZc|ZjWi2q1;wdxr?;TN+1vWh=UNS|vtmHuM*9=@Oj
zn#%9*#ANu#)vGr($IsF5Im)d+*lA>+?@1)%SYdJ@zt#F+29x`<o0{5e?<B40WP5Q-
zEljk&GC+>vOu=viv^F+1(_5?iy(;YewJY@bGg&{XTmGUUZpl)VAf!mf2yVz5ijgUK
z;c8byy52lq-#5;xQ#aBb7(Ypq-}-8N#Qua=+M0KNI-jaUe-jI1Bh(7i*_~E@dy&Y-
zJa6VT5q~qtIS50au<Y|)d$3ItIhjqRc38E4QZkaLtTwwF#ayjyvLA66uL3K!=6Af2
zTT-ud*IZBVoMfG=;7NZbeoQ=y#J6mBZmC>L9^6D9Wo@?_bjd9|p!-&PgkEa=)-?r7
z<>r!-Z|Xfx`02Gr6@YGjv@4TUwNH26c{Q~5G)m-s{eV~_gnS?INjLb8bAU}Ot(*|)
zf0Xv-a}x`(tEI}Qiggmc_SO4}MbLbr3S*j2`tuM)@+AIJIQyn_Zl+H3`*qvrY#SL_
zsDtN~Os{yPMpfs8pMjUhO}vvB<vqvURyZr$Q=hHsx94qkeXVUeDdS7-KF@zpn6LP1
z<J-~4ry^TbNOD4683-PC=20f+R+E~x7(ZaD`)QfSCUPRAv%R0t`qs@m)LIOv3XjeW
zD3nS{o~EWU7O!0LBYdh>=*}CwyI9_|hyJRuBApj0^W{e&H}Vp1zcj<jv?5foa9h*4
zlj+gWj$OtfnE+;Mk6oSVHwH0u1$qIM2nqdbOhZhhN|MDy7GL9PY3(#^k1Y7eIl0?U
zt%0UlWf9>>X^_K}N&kxYKdbrX9gH!9soG5KOcvioao$x9mFwukTZv=^3#y4^D92F2
zKvfzChYb4Ev=)P8x?+f#EN`kmm|{C;M}{rM%_#C`qe<FR6dr?M<{HLGM&-#ATaX&C
zCNN-uyEYcs7Vz{9sm-gK&_VJ&zPc#bD{N3ETDn8*nqBW+IB99#jUEdkUi{(wjf&aV
zDk$W!AK2Pas6R5rac#yGQ`wc{=X}_i4ww$XLzWHsF1<hY;8NW{>y1h^cn(xd#OEKp
zJR%mc`{)6>D4VdVqyEQ2-Mn)*>k}f+xwYn6a;qVOsLJ4ztJ%8MphniG@^+z9{-CtV
zLJRwyg`fjHd`c9-T)-~!*9mLqC+ULw&i;T&3E}D^i2KSCX8ZvE7R`F}2p+!_<vli>
z^`n0O=`Ia9QV8-|(qii?`H0rl155z>-8&HklUJ#n$y6&V45OK;1yQVv9I6oyPD!uw
zyn>;|$BmfgH`fkvzo;#v6PFZxTE+&`>|-=2b`oepH@{5Uxu<fY+0!n5aD(+s43o*y
zLeDGeD@Dt>7k()HJ4+9xa}9#r>IZg$`&Gs7O=z^Qdy20AdhNZ1o?sOwNh|UY>7Wyh
zf~XoVAIoOBdPGK28>y~79H#J?e_c_`d9w;>$s6}vFX(ukap2nG?W+!)Ej78-LGMV^
za8uKAW<K<IdM*C5Pw3XMn(qf^`YYax*H?=W2B_C~>V(B`*|+t}a5Vbvsf&a1Ch7QM
z<^#@k!SGUG%a8PXTk1it=n}5BJ6g&qdfT`=GwGl=F1{3=JZ)$?fwc*^(LF5(Ns8!?
z1R4(#j%2+&;?260cY5dPXVlXQj_cjst@o0J$JwphMYYJ!pqd=O87H<eWAQ43qi*|b
zCxAetLz;A5IZJ3WeKA{TNw|iJAl>)jLg+24Hm5EE%%=F~nJ>GntlaVE<)EZ4vh3lz
zyr2Jj`<@~=8(3Q!;HxU>fUuaB*otgq<#9N-!zYfMq5@wE44H)G25|WCd{BGP$XI-O
ztJ`n3^__hcIs|xouiR`X0`@#(v?WIZ>}1VTS@#mMEY}_B_Zp~r1*vbuipEBu<UW1*
zL`~@I58{3P4IvyfTq&%C8oho{0Z(7$1Kepk_`P}C<qpFqX&HhC!*^+zcy@;REti3I
z%i0#$K@kiT(v@c$zd;#QZWtUzSRzi*!p(FySo$)$uOnCTVdLRJ*6F0uFAbP#ooD&%
zvAeGL_MG(PIle@ZX&v|>M1v5%d3VL|6Ypx_-ZG@fzds@9?2Cxh!(<whJ!L(gb8g*n
z%sZ#*XsLog^uS;=(#9={9wDm66^6_baE%|_d-ca9n4_VbsM(RA8{@(xIc<8e*aqZJ
z(c=RfM>X$e9B&Hlm&3eo{l|v>+5K}L1wFDn+Lvpl*;jN6R(sY)sNNd{JLq`)_Dbsv
zR-8%cB%|VpH?I{vfk~2q5bo`Aws(XiT@?C%whv2|`m^WSDyhX<@hdWK*nb_9JSVvI
zfl!cT)+87ucO&9c`k$c`c|o{KaZ}q1K7FVy(MTWL7@)1ND86efSdk6D>m9g7c8}p5
zO;E?YNx>J`&w5UyCRz1Q7dr$8WQ^fJwMh95_ejD*+Z~nlrO8Xb9--QTR#MxO&<fbG
zfM<dG{I@PhU_a5OxVTb!y8PYby5%TA*S=*$?Xv0iFu>nn!W}Z6>$rZ?jEr9pi80sB
zF`_sRg&nu5!{2%5EY?{iEebKuRxW-f4-Iql1r@{fC-(CzON=KE*-lUdiXO0B!*xjV
zkW4c(DjCVzm+Xa5otLO*Hy6$tx*{60gjVH%c8-jvo5a?6uk@!|ih9k;`5T0an6Aqa
z_n`3d(W%Cxx)dbm5Z3~J{-bSSi@w5?Tg!2GIV;vuIkU;o!~=OU@FJmvR;S$sTK5pu
z7Wj<K2;qoQ3o7Oat+1b9S@*t+;_)M~z;*rl{T*3D7+niU0rBCj?}K#Qf((JgQMg~y
zx9n%U@xA+eaYpQGh1^AF&FXP$BO^^tz}~ZF=XsjB?VoXY<;7d45N*^;t%61Ln;4k_
z__yJUwXfQAi5ylA{evs_!CB##C3nU%;E9)7Wna$+2icPXkgXg2*IuyxzIh!L!cHqd
z6lLW(ZCTHOGKSXIND7${=+vgjozWr~Se*HSd52!K;z($^R~5UM4(g*T7#XY(7H+d%
z6l#Wr9?>`q>Yu2of_gsmniyh^4>1sz%@^0PBKVw_VVtQa5v<Ncq?a=9hsVOag=b5@
z_KZ(Y`5JmR)(c!I#(a&9i1~8Ci`A6+*!S+5m-D-OUzNtDRDEk<y8bPDZ<isrIiv<d
ztr$bqCVmP88h~yQ8bj)RbCVHfr2jV>yLw(-cp{9MPoUoc9P_s|SCb3OmM$Piz7qJi
zH<x#cR$KshxDwhcRxvDA7$e<_-6+>Sf(*#Q2UQath^ENNODBKhz1a_dTlQI>X+a+M
z3y$4FRRW@He8wfKJP6Cd2CZ%B6^eU1-`R~N)@9pu;r(GwX<sd?=ckyb_QcBcHOgSK
zAZ-?bbH>2JfIz!L(L{in%ZbbW>+Xy7@`1n?GJ04AuP*#c#N<13;&DE7xE_zYxluYa
zlLr&9yJq<ez|`+12S*L@<}}vX36QoUfM+3cK3VSedk9Ey+6;@OL3#NMF>#0JsR?x>
z_SfigP?+lu?FFjMFb1e0zbG<!RXjld=ya7@IylOYy!at*2d8#;ykIHh4@q5PYg3GL
zS(<L8pJc9QIM;cpTGyM2k50xpZ+fkjQrZB$)(ktb7FXGs+#G^tnVwc^hX?j8a)E6P
zo(iV{4vl*;?kfp%pQ_#6v{h165y%A6h3k*nE=rz)5ayim22Uo1C||>9gDYK#Zh(hX
zT9w8d<$)0a;~tM^d&9;XGS@CS;cJNTh8@4T>iyQEJ!T;*)CxUs3#85+C{=}r@Un?7
zbh5^dLLvr#8fKrS2-mv|0xatM6uIrDLYVMmz}>8M`Dm+#R+G5er3Uy+?#Pq7o2rfV
zm+#SiV?L&7;lDEYE?`SX)Z=%^<jCF+^HMcfc_mB<7?&*^XRE|7UXAj{ENF)p%kdeZ
zJ1?X8zoBI(_&=aGKS#%G&02f3t52*J+i#}@wrVHB@BZA8ye`nWfY*Aj@YE^aUz(YF
zEW#WfD%)-a=_Jk>cR}|@Ugnj@7WK4>usd@`_{q{Jg|}HwJ{cN$V{7ag6tJni?Hany
z^^16k9YrUpldPhfL_jiR{S|((m^5g3D5S`Gt$>c%RM7T%(-<h<*j9G2!L%g2xjCFo
ztDc@WclaYr%d=U#_>9`|q|k#%`$+{<n=NLWp#NM&Sv09XZJ%0|)e8To@9l9>jG8Ua
zxDIoM77Z(x-Wguy4cd|mMAqEzHd43RZ2g{{=9BMjzh9|N_OE7qnBIb7o9G(7LL6X}
zE^tH_K9-q9QvB61<utMrHw^vx(>Wo-nKsxoA$C#rhwVLEIrg)mx0kv9T62wh{^-Tp
zH-;C^PR;|Ce>>;6jU_DM(}n*&pqi1d)<Pa}e!)NI9?SA5#qQj0rp?b1aXX%A0a@fB
zSw1pWvUL(-PZUz^TmBPM`BQVqxDupOonoJMHe2<4$U;5qjZnMjN`IGQ)nK|_#kz{u
z>dz<KWhO1BCm-=Rp4-Q}nn`}(!mYRPJj?3KDG${o-I$LfNSo%9Zs^bpYAf(Q&qdd^
zsx80pg>Q*HuV=?3xFwauuKAkDumsrKEyePv3d+#lAuqW3O^;Tr!$2NbRjLUU*$4(!
zc`_b0LoXU$v>+^I=IuO?CP?1SqCWBb5{9cdjhC}|Jhr_~7z)=tqtsYN8TwK9tpdW0
z$NoPK@ToVhugF7Do)Y_VMZ2o=6B(Q0_N={`<QJ2LuZ?bG-?;OzH02Y=#>+1REQ4gG
z8osJ7>S+}8kHTqBSPzo)Qrn~htL@CA@?~`Lpw${tQil1q>QpsL$dfnTN@L)#IU^Lx
zjcYMLX?Sl|lg56rnBvE((y;lXO~esk)IHnyV#%#_I>E6V)XQmHA9@2WH`mC-ykJLX
z)%UK>z(Aco=|NGXV{aF{_o8cE*uj~rElNoIfJjU0MA@7uCB-gAv9Wz9mUxMkt2&9_
z#!~I4K|v4FBaQ8y(hy&}c{Uxj_BLFj1>PAGm%ZL3u-~N25|D>D^Hp~qlG^lo%HFq(
zS&Q1-aE0{`J{*cUE#pVkw*Af~Fi!_F4wPp1<>wSd_x(&8(ScQbo$rcwX!(G8=un}N
z3d>S{Wc9t}O4bVg*dep##nn5L<m?;Ft@Z_#`g|b4Z32|PC-m^<T#FC#hw;vkgvIun
z)cVlM5n%7Qt-6f>SfF+3Lk(Vk)}K>-ly&(j^M%*0fFOMi*(1=H9+1-sqU=vk0`J{`
zbgq^~)>s<A{k{n?qPk8l-yx9MBP_xd<8CthZIR6X1na*P7%C--LrCWB<$B*C;W?@@
z^T#(c?ZM)ia2@7YiApxUBbmyPa}rXB#yGme81U@9PWx1A@i}dYEgju7pNp4y6zn-N
zHLml-^czBO1l_kN6^bq$r9b%yeegkTP&+SjcAZp{%Ec;l+U4u<sd-@w%=QSK8)!Gs
z?OFNNzmxuZUiaX^FHKKq*v@P?#(-24Dv?W$H+9kSc#79}OrApV=_UgBai)(hS`Q}H
zd;G}}u&3(|E3psb_3B#oF>NMuQx{PgA@As>P7^rgX;$Q4brB0GfKq^;dE{hUUqu<l
z_ch}A{e^5jDwTU(ktfuYKd9%w{$?u|<ndgPB^_Etks6b%q?K^?<x*#69bocXKPYaX
zo+Jq0BijT-2R-H<B+uOR^6Q}4yMOyay-l9*4n3+ng>1`-RUcxzXQZgH|E_;_i%`2Q
z_*CFvnm_?qU|^zrB!K~4UzqMC<)P$gHHLVbO-{gR{S?d#nwb*juo4hhm&;A-N_nfz
zv3%41_UEp=!y=|g-O?mZ`17QS74MlPo1cqSsHhh}BXh|j+t8#eSW5LIZ<<()J*7a|
zy5yDX(1ibE*r(@S+1W1USj~n7gp~_qZH>4}`)-XKbw+bH$52f9`BIwEM+3ydPt$Ev
zkcDrxGel<%%aw+CWBPv1b~ew~iIVgllHhF-&o&j;MIGeCEB$or;MmI7+d!&Eb~#Qd
zi$zF~`C!JDWF}i{e`k}68;WVlrq4gyCr=sWP@)YaOYA2+{MY-KBBY#a>>V8OUB#@T
zt+mgmGiU+1adpRxA&B(~pkCYI*d1zr%H<M0PcKN9mWDOshay}3!0e0i?EXzzks9r<
zd}biIkCwj<zbopE2o!qBiI`_$9_oDzM%Z@FA}Mq)Dg8g$Tr(YZ737P0=1XeJCLve!
zip(!o|I!s-`vGOr5d_d3rz=U%_h~7C9wRHabNY(WcYpfcdb8?K;;=ZopxmfT-(&u2
z2dH5PD)21}<v{YAM)zh|{Q)-Aegw+2EDJH0Jz(qPp)<SIbFH*QTfK8t)L<F)H{N+c
zIAUiAV5~zDH3ZP{l-Mt~$Rg>Sd^}ZcIHV~Y3*}T+2At|E@)B#3q(ZsbOszt?!w&)9
zrYIT<$E65!cy?0n$MiKstJ_4w;Ee{`6GE!t^j1bi8cn%A9N?~Uu4x&0z15rv|7`Y5
zu!*lx?(*x`pCece2hL<y%(6-VQ9SH=wq7gmdo1?(LIwTxX~dqU(tI3ivM&^D>pJmE
zkkT33H~sb?jZSUtUghIfo%9U48SPy0?@_{7g=@8ewvy`JilEXjFUEbf(O2<`!uT66
zXmcIE?vdy9sYC{Tl3%WIKVqJrLOKSu7ga8AHoj{UmH%~e`TJfzW}keua&7UQgUBz&
zf9%F_j&!kPVJ`<`rAO3AuuR}3_Q6KJdl)ZUZ&+LoS5~$BizgMB(&TV;#OgS#SmGzv
zAjR}3dBXVQqfgpac5db@-fJq}>#eY|NSlNYDD6oJ%RMb0OY`1fN0<mZiAu&br{sr~
z%C1!zvjTC?d~t2rG~~mw+Tg$E`V?muC}$AB#2LjN(kV#r$%bC#!qN`8u+U|;zD;Jc
zCRFfby=}egkg{q7QW`BDnoVH;ZE_6FvO;$A&I+e=FcBQq=N?=PvV9KIm)*Wg1GSuC
z=5(u@=AOt{Q%{D7a$HY-+fv1Ng<>7=<%~Q?iDPEHyHY74@^G3gcA5tC{kYZQ3ejn)
zfv}mY^-v$u_b$M<C*Ds3kK|16AQ*QsvFkPk57fPK42j;u_H%lSK*(FbA$kf^8^NBn
zMSRaOOvJZ0ZkBRz-tP<MdvC5TpxCeU6Y{JB^@hX5oE&)|9TyPcA<;DUZG-22#l<C8
ztu4ZHd``r093!a*|LvPXDYPrQz1XBXzRhEC{Y!F1Ih#Ovp{{OwQ9SEAu-3Mx(XJ@w
zu`L*IUA1r_QL_!&-sCy<_IoA<fXHuDiW}`ot{7)6<)4ou3pnHJ{WN<5%T^hqj0R2l
zK+M<Pg5Obs{@%ig9ZAts-84Ca;!^_dvr@<8T!B;V%E#n#n2++|9dB#)Jq+bOwP!Ru
z`ZnblQ2#dG48h5#Pn(~AR4OxV4~_U^DK7V?p2p!Z{i8L%-uy<<F4#09mT*37qrI-1
zS77#T#(48~nY2ORHFkGL^nyo^@1g-~m@8M`dII8)9dVFeF+d`O>kb8}U5d4g+i66b
zTAo(cy<KR=oD-=&F_L!|zDeP}CiQ@{#FxE4+z{A2Z7JJ0sW-`dg7&IcF7dq9TLn}v
zLuFD_PvFv(Q}Yz+-g+baG%^&{Luz?0T}=6}JbkAr)|;6k{M-i7yUp`{-RBs(6A!+A
zAU@p5U(;)p{!*+jGNqYhk0NZ~i)|*LIv#GWU@)?9(nMi7UhXgJOK($~S>x9v75(nc
zLz_E62WSPMH~Zy71##hgfm5M`Rx{{}w5*d~4UL}g)0<Zh+8MX*w{8#X6K?QGZaYQO
zjA_#s(kIqK)w+70D*}ewM;{x%5vj=#u%?eaB@nhGYxEeL-orR~&I_BZ<BN`13zQ+c
zcP^)Z+of7>D6ftmu=;!oIfXq%wme*ezuZq7>L;4FY)7o;c{MrryYZpYWBSj+du)EE
z!ov1>R|yDNj_#aA1u|L9TAX0LO`-?ICe%cflDXYMLtC`+PHy@8fq^qY@z7dfQ=*>y
zSF8y#?L`Z;?;qBdgF&&419Fu-8;)I<Q<!LdN0#5TkBn!k2tjeDFVs)vL!UBpzqT%u
zSZFFLZ{^<fYi(GhE$EqU^-UR*NPgR<O&C3l9(OQUD0397Y`?WB=wCTfL>3(7ve=6F
z<tNb^`ID4mrhmRfiYX<tT7*UraPAaua~@n(E=Z&Gjr5w=2b>vzc)53T4aivTjZ@+0
z%52v!cmlBf-@s_9tGsfF?8n3eZrOLQcxl>fj+D|Gk2>R3uzH<kHmND+F5*VU8pn8*
z$1Sf#Eo;7<Zu}n3U<?)<`SL4~Sgns=&Q(&S6+**k*rT~^IVC73OXsl^qF2covKd<1
z4qPAqnnlx}mE->JUI!+3ww!F38u6i^o|i6Q@X&*D?<d`8mbt#hs@T)cv~LGLJ||JH
z_h?f_5LQi85DyGFSuOTD@wtwuZ+ipg#A8eE-V}=f3T`<uD*Gyp>zDMc+`f*B$_YR)
zr3qo)XKli3O`Dl*eM;0MQwbuJB{YQs6Ukbi+Zo6|Zmw;;`36~|XDjjkI#8k2#!gpW
zMaTcF+ad<K8y0sEnqM1k_tLB)01$OOr6KQG;Y39GRE(QBE{B7u*Gs#ACi>i!q);9T
zRlo(-0UB_z>WxibcF~U3@^~2o9-4EKbkDDN39Z?pLKXpa?p<9MZM0XA()x<i>9kgS
zGX=qRxj5_-S(ZDv4fC~$v(W6rx==|)Z2PiUFRDOD>M+K#FA@JJI6`fSn+ASqlDklx
zU-ywTO)ZD(8yhT9*cym<<{Rvn3=7LnrhxIAt_QVsQ*$qZL!9)lENR`oqJNw0erfxW
zmC=LfYJA31Va>GbZ#iI9Bw!4(g?=Uys!%;0H0rQ!a#`r-IHq`8-4UYiUE2qF(j~~U
zMXNH4c(<$UIy2C|r>ZkhLrtGh2cRzdS`g#yX0wi`=$Oq-L3=qOeYrxg=NlaGWmt^u
z;pS<LBPKS4XQ-R1PR6s%nI$a~gqJg?=N-V$)8D@iTkWy~Jpxn8lcZIAqe2)af=QGv
z_?9*aPc*qiI^)0dY;ouo4;(DV*l+b_ra~h_=o9v*n7boU+--IIvpSv648(1l1FSbn
zmjdxO_>YK}0Qk1g47Ar1m8&hrqc9N(G26b!V2*r9<wxEo?UJz5><Jb&t7LG~3H!+V
zH`I8|i5R6syU^n&T)*)V#C6|j(w)Cv63uO&Mar&{=In7uvAKv#?Mm+4jtfL95q`~~
zQ5sRc|4%w0sPs<1W2#0|z)Wji&E{4odkVR{;vYL(#?}w0Smv99Vf49-v&-6}u6bgu
zDPrIHDPHeE7`Id>L#4gy<Oa1bm8(JafYhFK!D(j#K*rdMR(C&*ZbT=W*(t%GeWZQ$
z*vStC@tyCkb#Fz+Y~RTbO0c^2*c-|}D8F6y0a=U5%@4z&sHuCd!fm^UrO{cXBjg(E
ztq!l$e`2BB9+uyyd)lmJ+&)tu{xP_<bZFw~$_uHvfHl@7vX1+(D(###;o06VKKlby
z&AKhVyIb?$U8Mdv_m+doA_`vEQq{-jkhq-07q~Dy=Ldsh^;jtF^8J+z#{(<RS*A*e
z?zDqA;}Q3!EWi_fHDa<Z&1$^ibafy+`w&50H7kAE*oIM{sx?;v%-p3>pZ%QCUUk^N
zh%b+qynG8=e=4ZnG?p>oJJBW&p-SX)%5iVy)VWIBFt1?aDcKsj;I9)t7-{Jd6!&Rl
z%ergJOt1a=VPl7vic|Zh_mGt{-14Xj^h|fhwqmT#Fe~F)Mt?TD5^sA0=lhIIXSztZ
z))R7*jRyq-ySlfM$?6|%vCV(orngkysZxo#_f0=#n{UxrKt{ACr!ncfen#AN?>^!u
zxE1{y>|s!}aMk>?G@?YAHi1BF&XV<2=?Bvh>gMoihc*LwlJ<AOpQDs2&PzkkLbJ}O
z=DSbokPxHRy(zck^V+I$TKLoh0*~hRPb!r9^24P@j6Y3v^FSTPK0;9n*umuwRyK!-
ziD~zPHgagaXt(T|Mh{o%T-l0uK<SJZ&x4xDW=03epZ@~uD;%*q;vWZGV!ZihbK0er
z$Swd?7f@ki?rO-%45oTmiL3G4=xZ}z1N^*M;zI~`X+&7#?y**uGQGgzgK2|jdkKr3
zk2_3t5l^@pjZ1ta#VB7uAX2AZ5}FKdiDdjNiKMp`LZHM#5x%R{Mx4`l{0|l1p54~f
zS{z#F5B*1@TsvSQ7*xxeE9np~ywxB46oCr_CTIG57sZ;^4m^C-H-uZ1Vf2e!8;-tG
zwkf+35pHzTKxOI;n(@<}w%<+kof`0Owc8$MZ=5dPCV{g0Z~qAhFv_`SL^arcO@kSP
zQ>6aI_aF8w5$iMQa$~~NqYrfU?!Tzu4N{dN^Zl@tegT<l$Dz>kr7J{`cXy53e`hdO
z-28;l+jpeB2v<auTMg<9(pPy!7vM5OaI>=e9F7&jo_jGK`p_pjP(*;+{vh)S__>$W
zN(cZ=JhT}mElOd+<VzdjWodaggf2mjy3@U%TrOq*)Kb4EDt*I0+r84ql+|D1P}pg!
z{A*+;hoW261LY<oO|4R7&awAZaFhJ&{a58DCMst&;D9}zZ&lpSq$Xf2cB3W*lW5o(
z`!50ejXjLa>3qJ=vEX#?ph=JSrkhl>Tx)ukKk|IV2yGs@uZ?nA;#u&W2*qpZrVu*(
zV5@(gua&)&oUoged3dS80o=g<_;Tu_8B7oaHRu@MNfV%s@pXD#IZfV!3Z6V{-E`yh
zha3&bQU1djlg`9Tk8j-Jcp+5`dFl(Bg2l8;8OD^rCC$t=MC}7hEq{HJuzgg!v~Mmb
zp6&#m=sR2{(R0W4Cgi|!Tc-!(t{RA@k>VJ6tm+E3qGV^tafEVRmhClF&8GL(RfPwY
z%Z8wyR{=!lEW5m>K@zuJEGdj|Ko(NPtbU<QjGgXZdnfj&C2mGMNA0DsGuP9Dl)1gY
zk{biFD`g4Cn<o-S2#c(J+OR47>&TLh5bS*$YTw%Zi~;_OlA>*vt7CEUGLjcwP8dzB
zWaJg^(>=)Z858DRk)=CCLPs%w@McaN-kb<&KkoCgmn>4RkTS$_)+!nE<O|m$cqy+Z
zo;pnt^zqbhSh1OQ5=NOVmUH&wY-rsef3mPW=zdArl*|0HEmKT$`;$k<+P*sF?b%f2
zm-Uv^3&%0wb<=8Tq}Bop{bV2xnx;gO+?&Cm8EtdUoRgX(Z5r}>ECM<svY+bAac(wZ
zA=Z4y6SJBabM{%2&eX$|`+@sOLQXmYK1o79&%jT9!N^)FvcpsWgc}T5;%{TZMh0SO
z8|(^ljlUIQ4O8lB*>vGjLjhRJS;1!<<?pl9l@dVaq}PuidF!+Z32i7(JWRl^CyFpy
z%U|#T)saj?BH@7I1gV5HTA6yc{?222pNjo&jrOSxCPGCZe8VWA4SUSOG06VqX^tph
z<Ri8u4svvxJyof9c64&uDVD?PBl@HK)*JiBq+dhDK*W2;=;(2<v3=q>H4kg@CO&c^
zSb~Ob$O~k>y`Dwm`yLhkPo{MA<t<F^8$OpPA*Y<3ZK`~%WjkGCz58)wNI)?-MSf&2
zP6gvWA&H?<4JI-NYriuV8TYii`f)q&+=F!Av}mF55~hwYR9_zuU;o8T-XC_Zpzzr8
zmjrt5b-NyvC#6b^)IXR=8_r@?Q8g&_alxd3u1D?hW`ytB0*@hQ{dJYH##2;RL;Z-$
zmA8KkR#Z0!h|lBL_F5k7Fbc$HzSY{<4-~8@?+Bqm=QIbfQK%T|zXV*yEI&ue6{Syq
zh1n?&MB{0xFnyA~P4I<$fZB#Ef3WPy<I1VK6x)Fba+N*ytKUjE^fR~&UsX8-$-Q5w
zT#jR<rEU}?$JT!Z8w#(>SaXNj=%3(G30^8*nPSNxKLT*zO(?~q`x}+MwJNJBUg-_x
z8uH6673ZJsQl$mhCkXM0G{0=IpFbHT4b2-g=i|b{o)ivN;ZNit-_WpL(7zN?cq69k
z@0;9U<Fb^YDP&>PoPXM|ZR$VOjh8fJzydyO<No!m@likpn$u}js{Zh`ap<F-wO!ze
z2dh;KwCdT*b}k%c$?NV+)b9AS7?{w&k#oYgz9MBTJ~?LlT#aTlkup-KyWjo8Ocu9e
zHc?h*|DC=zH(mibZP|tXg!<)?-L{WHyZ$BV{cq1iQBTH6$iN5B2T!>>+slxC28b)S
z&80KqLs6;Y3op>GW=7~mT;@Nx#BJjr{Yr`@>Li!C7m8fU4cqpTpwXl85a)X{Vzw)n
zZD#@3S5$gc$RR7fD?g-cM`{g_;>)D-d&IZP&TrHe>c!JGTPeQm>aZ7Vr@8OscjJ2f
z<lo6V*usPW<jrJB)2NMM{rxlSwu_#1!UI+4lpVxHQ>MO0&3!Y%24(odvfVg^>D7iZ
zmB8+a#0tU!vQKLuq)C5IXy(EzLBz-axx26Kz9?My?Aqgbl<NZpA0GB8D(pjZn_vlg
zZc`i`PdI2?{bLVT54bl5!PU|K=sN!x5<lHm6(xXuk!7E=JHbH{dD+<>eUnl&a4O}*
zgAHDFk*sOvFqEWc^NKxIfw^_yG6^t2_v*MO2t=MQ6hE8T!v4~j>$aW03iY1wFJa0T
z<JD}|A!Zcl;o-{=aYJOi#Ou~i5=M{0Mdr;sTe!bpcAKPmJR44E&;;4>u=)d<O!wTd
zRTQd+bk7$zVrCtM(PJffI3#jjsO_dETuWSO!+p0L7*OoRs|AeHUGz;6-e0H$*`2BL
z1){WuMz78!uByJY>lHWmX)adwaSpW1tb9rAikf?UO6i|oe37G~2bbD!;te<6Awe->
zuxnRESLytg7~cIek);%IGOP8|(I#y4R(UATwIL+;%*<dlN&AwNG(>MAAHf9(n>c6e
zM;eJx7Y!4wa|R3i8=#RA%m((Zglj)BJo6zLOktD(O&o3H!Q8tu3qko$Ur0cHpP-TI
ziYeSFUV0pPSt{wKu)PX7lUWW?M<N>gV{M6~kx*AN(0$8aM&F+Ihkc*KjAom6LcJg&
zWgR+9v-*IM_lBT$kdtqzb?wT?Kc0x0bXHzF=#N!+MoWE+p*!`jobss6MiW;+pLC^?
z;CUv+J((*iD$fg{AtBDNK-iy?Pza6lKAnP;7T33ilJhlPq(8t>TuN_YGg_ir1lKn&
z<RC816_;z8#VX1~+0!7`rISoY>`uYS>1Cr*#gT?T^?Cr8uT+^W{aA?>wourX0?~yj
zc(%boXBd7s?=fI;;n-g8^(vSGEIYomHtlrL)(OCIIa{36fCcuCbQa9Vd&yu1x~*9u
zt@@Qk**b^92F~h_vjRsaV3uAG5SoM!JtC%PrtkkO8aNe_Rb0*iDj_$A=0SK341%={
z&rq8IXG4a(M#*Z#f&TA4OvoY|G#}~gq_)+2K%n<Gs66H-+I94on)}k%$1S?cTHATk
zYn)n14nX{D?tQ=XE%#-Ram9?whH%!2R_je2KHDOkn_a7h%p@A1Kd)88;IittjG^OG
z*DO7Ee>9H8GH<oxdh8+9y_?jYic85iuBmj{*YnUpxz2Z7(OLc(JnUr2wT&U&nzV70
z8tz)=UQ_;B0*VZL#G9ed+krtur*{%Xg}tp9@BPCJWstu`L3i1f{6dObwJ)^JGWBwo
zC}B_Dj!MU={|*|bCgwkVVY@>f?^}T+G%A?y)uq&5T8}pRaEYPI#1GcXX@YE}Qi$)a
zwQ;mXnW;s+(eLCZt?`&kg|QcK<D@G#y{jj9gnOnE<5pfu^a?nB=r?ZDfUWnD;tVOO
zT*%k8qhD=gxni<>vpMY2kY<uyD;Qk*ql?$r0XPu#4d<22BP=A4v=u;1W9`x`*jLNd
zBlA4CukFb*sS2+h;h@m(G~1NXJ4PS#6@f@%Du;fF#6BG4M#TP7hsI&j+KbBnz3Iyb
z@@k_)$5PFvdtAP}k{^s)ANolQevXDpRceIS0Q-w7WpYAD(Z2$*Cj5{`EaF{MT+(wK
zC^F$6AN90+&|yHLzP6-<dgr?QGp$sa%fk&2wb5mhk#8z+1@57}ft4LLg4R8t_sl#s
zKn0vgC?bqL6It;QoD^R<6=3BQkb^2(7cpS<?V*6{#lAH*!4>hqLPAx)7vfcesYlU@
zX#WF&+3NO5WPb(U%wv@XlP(s5Z3DS0G=&#R>I~NY+clZ)tTaGdbh1W}a{Em@!u2QE
zu@Pc45x~S&;WgPS>zI2)x>R+&M>JU@LJ~a{p;p<;=^dKKTVj`r{YrGII+u=-(Q$b2
zvmAAAz}s!${T1xNiNeAZ#xS6dUYp6?yCfh+hOUU;(><;^D*L89a3o32s$c#Deg2vc
zd02Jj#nT!jC*Ln7{8;yf#=l19iu*U+4V}^D{tC>e&(_tR@Xw<*{Q-C!1Zm>WS=xkW
zSxS!89!D0fBk>poGwV6PixdV%#ltJh!8oci{^z(QMn{ekdy?;Pl3%Sbp&WfTvkk^r
zoL_t2f|E>IWDLplhKg6Exa9yxkMWJxD~E&jZWC5pElBHd-F{THx&B!+dvU#F58RyK
zPY3F%nV{c{&|7N-cwc!LMz}%V?p7g5joA>mMB)kGL<2_KcQ!!WdFzQ|bsUs67Rr&!
z8@*h*FE=M!y{t@<7&qf9e=d6?sGBUeLw<Fy?$yTG%fRAY{#vWmzIk7aDxggec+tNJ
zs~02`(B8_&Au)^g8g0S;nsh|Kk#w&R?>ogO#f9wzQ4NZ3o8$?rW^P~q*84>xGE8H;
zSC;9_j1q&EA?C!`D(nRulY3VP)U8>ef>S5Z1JocK2W5uWNKI#4D0n^NJQFrGl!-gS
zkuT;RxnlWZC^!YZjwbY+A>#|5Y_Lj>@60Y2vRc2)N4C-@BZ)ct`#+}nsJ=J2DdylT
zk;>9Yq}3*Y9yc6sKJ>A@|01xpgd?QBe%ow>NZ(z^&nooP+w`<ojUw9J6Z?#(*M>w)
zOKnEb+ip>yNKh&nuRLS`7ZMK+r%=}_E+k)m*u1C3WI^U5kHfxPuxsAeXBFL@b>CNv
z)R{Nxpr!lOJ3#95jYJ|no%srEM>oUtE=9|5LsHKcnx(Kv0cOA}A!R}BFo|vT>WWnL
z(I2_<PZ;#$2YK~|))nm@pgJxVa$iV1z1CQyT`KDQ)1WSItL%B-6v<gA*S49Z{k8ad
zNbz7qwXnTXZQs%;0gh<Uhqm#n9$fJyX)^2H*ysEO%8qa~yG|xu3R(s!?6f0o&>hqr
zJ>@Mb>W0e2GfVTJ{c>914vGOjfgwao=L9-~WE4TyaZ<GwHvb8R3?FeNm>fJst@|V@
zk(c}xI%5{adP!$y^1}%JKz!zE`I#F2CIIstOy;M>vAd!G1!tcALR@H`EzY%nIr5je
zdFa|%_qs8}0Uh(H27d={rg0x%hQ_{$9>v56d3E+gv!MFa-f2vmTfAKOsiCmH<%5mQ
zT8E#>e2=<0`Z#Fl6UMmGk^9=JYn%J#d?l+=>z7*a3BDF)GD5-T_U6#BY%$-EIbou>
zFS@&`_TvMBm-rHjbvad}J#9&QIG|UOCRxnP!hYXk>@b<J3OF-!+xAH#3?!Vdz0D}X
z`_Oujc%J4LJ(y<U!#Xl%G0B$F1xNJ9K-)%kcwI~x{6F5bbv%nd@UvdDmp;uolQZ1w
z$}4x8mnZB<qcc59z+r64n6eV2U2vilB7o$DbGlo7+)!Qm{-dn94W3-!PUQL!pAxhn
z06X0>E%~JMz)fPSz7ndD;vDal)~(s~EFc%+xm%?!ZW!ycvYn4hIAn&FC@R;T)@tlG
z|M0Y1jRE+~kUp^)<mSWS-lk)6oyN&2<vUe%)G>>ZP4Z$F;Fj)p#xo`(LE~Ao5&Xzb
z6XVG)B)QI~xPq>%0v;QG)`!|oJOVBfQnDvYWMeaqy#M}G>j81lq;V%lf0S1K=7Xz?
z3%67OwoO~7;h{ba<W^e}o1Lw>9YA_G6|9aZHx*v{GU<67RdUU~fSmfi9%lk6Op38P
zKawi)|7jkSl#Q+iR{wza7MA->Y7R%4OH7&Yu$_8QjnS$=eG9Qy(RYatsqvb$-H~Jl
z$%kL?KCFjsi419%#5>Gs8gKKxMsU@u=^Vc%t5e1L;eF5w7+=azdM!(ppg||5k<F1m
z=tbp_#uB`l%A;K<+d^pwFMz5|ufkqeof_IZCEFGlkHKlh*6&hKweuc(y=Bg7EWqVp
z9xbE6yBXKd&6FPBy7$X~ffRKa2a$hR&06>nK>W}P)#&^Rk^RJ0NNSX@{#xEb$9vhe
zEZrz|8jLO6)ulP~c<!{iD8^WM&V%%9ktZD5@U+$Ukv3{;Ra|VqT+GM*Fg|CTU+66!
zHWHi3!ln2&xC*R)rlKtNZ?_(+Z1|_kddtw-XAdarJLD@u^A=vJS;58lP$Je{#7ljZ
zrz<rAI3Gk_`NM?c{L2+VN9ltyAqU;^g-b38?s|>aSs{T=dd2p>{jEag3*fOXDkehI
z$jJT_pChf*)SH9B-+uEu-V@!|Ltpfp*(r0#;$Ko&8+olv^MY2T&yRu^>^s9r`OtY+
z^}Ib4md6KDwyQ}a>w_Avd;?9Tty(6si&Ujy2i+%ksO#Rr_;&ClhN~vU{R~3{19b}a
zcf+~Q(~{-pvh|f%hgo0A#&_aao`90%;5y~+?uFDbc(m757g%ZuA$o+}gLOyesU$Lc
zQ2gmMTr0iu@_6Ix<@WB!HzB<|Ym3Ba>{eBWpo1Nv$si^QeR7BVDiZORXRh&(>0hw$
zZsaFbN%|J9Zl@fI8DzT@cq~9a6!?m<9cvlT1AG>DX=!BS#^&&gD4u^EZ%<-OxJi_7
z44(@}vS;I&S0!=8e02)HUcSXEY%$RT&bE7*LUz#_xkXHDEb+cQP@zu2aZkQNe9bs@
z2!wyk)=whn`lV4)Zt%7qV0ou>_(efYH(~saI8R^)xr&_6uB=a07$1E7h$z_{Y7p~&
zd&S*91|zB)1H^BJH4be}VlW4A+Gg9OrljhbyfA@DAF<Cs4Fdk}u^jw+)C-;v*FG9m
z2AsYbGt9<IV0~CaUC3VIvU@K3z@pv&Uldw2ZK3Avw4Lzrf>(5sEXvf^1^dP6XPlf+
zfp_^X6Mr(frPxW*)1mzr2`j<iz^Uwe`yAQNyK6EUxMP!xNw%OakhI6d^I~%2ClRB0
z?Vso-Gpbv6Nb)+tE9MJ7zlcn1+6_z#icGZFxD}`cO7d{>o1P{W=b^3GLmK)4Yv3rJ
zfngc+o-ge;5&l#onTjcS)@>ka^%2je`lgyKx{CGu<{b3mX0g@9iztYA!b)6pxuqY1
zX~-l1PaU@Fq>n;WxE3(edVvVi+jmq>&ODqY(n=mdc?hktxIB{s8h4e`t-OYI2-4xp
z9mm|i3|I|8*`)qNV}bU}iD>)T2Z4Gi1~ebS{iG&jEf;>%@V?os^9<fF4;O}=%+}`0
z#NeUG0DeO6;01PT=IPut?_pv7vUGbo21fIgg*)FAUQlzW_s<K9!&{Xa7k1F_r~5er
zm){;t&FFD$ZTXfB_3NKB5eWT2jVzK=_n>4F;SjSY|3y!Dz!Fp)GE$YAaJ^>pG$4@L
zttxp)s#5It2xfEV<`Uq-L>(vr?6sph9s*Zc_t=D1(zLS=b;1j*I_O9ZL8Ypyfit4t
z@WE9pH!BsWi?*Xbm;|QH?jVGO9j|1BI$bJDsCU<Y^$vvX-z%-A+phhdqM#*}Ai;nT
zH`|rK7@n(`R95jOBDl=^CJ)?nOo}D(3q1&Oh>s`rw#^Fu!(9=Viar;QhN^xE6vnJ#
z=+-^PMW%43ZXf%0+g>AnBXW`9y2+4-X1WDPjAbNlue=mNg-&CP62W9AUYXX08$8+4
zpK-kQpgTu7znyX;6Q(E$ntr;SIp+(c0WH~3AuJi%b~i6V^=zI`>&T=eZoirInj$b(
ze#X1^0bAU6{n7OahZJ`j>o9=<y6C(6nX2JTLO9SdjF*0D=#^1VCyl*Mv+5JDr(j6$
zl2xmw@$FoQm^Z#7r|Dqez(Z8M(BfP!=(UedNqeGhxiI9?AX&vVip)3Ey&s+-1Gs-Z
zTdVtGFa2;;uV%F+sKTULpZ)D(W8pV8BT&>waU!AGZ%gWxl9QHJl9YP9&uZ1i^`U85
z1K?O#I_8s8tJtu;n9c>j_vw}@Hr7-Fp?>0hCjZs}{<(5a{}dnr1rUBmEyj6o*_*!4
zD(QO`3PPZ!DbGRq1HA&HFUgK)Gje-OEu#b%Kd<@*gzdCyKTdf2Z&K_g^FgVHu=}EF
z?{AZ#S!olTezeelyW5nnqbJ%AaM?(d7Iz|mzJ|A&7EIh^vZLp3WA3?S*1E$<Jgv>`
zr-!=CKH#fKj$;wz03nWF&3qu*a5bB>l=XV4`61?UDAHz&A}``z#`E`^bNQB+qD1>0
z74=uKP*^YIej`BUV~^V8W<=>xR(T(9PWf2lVH0kXYf}^bj>}c_E-@<yxU^z>M`!p`
zC@Y$wYsgr6QNRpt(vgA((UW>OaQRhzm^{P&ErHpv3p%?mmyUCOX+{r^0QG1tIDzBg
z(gJxPJb685VV>iPbnacH-<)24$tQ>TvuMt=!b*)jVero)ghbWU+T?ss;RnFv#a(nT
z^E2dF5gN?5>FFqPk@kaq-^T~c4RmB^%ly<;>9yT<o!?{iRy!7taC`pljB-!$=hQ7$
zN6feM9&%04kGaCV!`ibSfooi=mwh1HuT$aFT7{wUZ6f`t)o|SJS^~BBmh-1U<>%HO
zt?!>rXvP2NeW!}G_jeqyO&Xj=+S+fAo%E-T^p5w*u^Y3`uE<rA*x7M$$_e~BzkE35
z#lxiZ<l8@B??dJw%gXstW8jTr67%)8*3Tp|0{uvJ`#?rSHaDz#p?zuUD|hypGMAK*
z!P4N8ThY3MZH~J>j1T9s3+fDnYow4ay?*B?@xH)M0Y!Wq8-7YqRiYB;A6t{~W~0op
zn!K_^DW_0^f~UOi^FPbf;A8Z;K@>Eq2bZM8K{*QSJ3xF1M4#Ud;&nx$n_3eqprJba
z&n)d2O<sn2&fKjK^Ho&wZ5Gay#<4*taR~u|!Kw%sc^>gIAH^cIsr!WfWqE@gf(+G<
z0!S5!#h`=FG*cX|lFPyGP3*S@wVa3-?~tfIMTN;#Ztjqs^Sc8LgDOA2MwcWJt~CoL
zba^aL331w9MKQFc|L4B|3govZxJ@M-zYL`kT_?1esUJ0DdLSF?{B=%okrsmEP4r~j
zRVemr{cn%+h5;7vy0lN>s&xx=!(rG};r;h{A!+9UBk^rrUDU=$!xAX8=rb}VW2T?O
z>_g92XhVtr`09A``dd{m%Q5pMuJT!vz15al_1=6-YjWjeiWwNj-*A&u6u#uM?4RWf
z5vTND@4wVE-bdu`hz4?rSDZ@MSx$HZ)P?=$C|ghXeIqN_fuz&0il{G8BhSAGg_rwD
zQ8I7-U7;c5_kipRC--^XftB<xC~<7U67Y4EWv#1Iq`S2iP}u>H^$f=mX=Xr=sWmhP
z=nk+{5pR9(*Rn89a>sCTkp&9BG-jUsKs4=YmWW%I3?KDlCh6g0KZ5i-Z*X{dr&y`f
zpH!x`yaqzs?0W2F%HTlMJ4chpJ!%re<Qi*YGqL89+6Bl}mo}(^OV(gg1O{i7Ti&1U
zEGmwiiRxZV0>qa)a{o;EuF+(ydGJGSSs;-y+$ZOM2tbd6f)-5*k|iX+AV-Fy^kTuF
zP_`|%K@4BYJEs;tip_Yc_PjWgv++JmqUVkYMDc=<%O(`PF?uq2<uU*1_gl#M8SG#%
z^{UQAgEDZFVaa-<c~|tlf=VCVtNWYJtwp!Ah7G`PS5HSmz#rU4403xAWY13HJeA9Y
zE#-)(oCr62$@!Jguf`;ot#o++W9uyu$*xXVI}+AYFN{}u8+P(RbG_i@nW6YHape~g
zdDO8~I(8~TWD&Uc1e{$-L|l(&w`t+8I@sziLO-=WlsG)hY+=6nJSyjzGKt^EQ!$fB
zEzmOv;_ZgOS?N0Owvp+$<gz^`>y--1qois94t5gyaEeSv^Men>v}pXk2>ZHjFA0Iw
zUl}&I?-vYsMrr-bsv8)I7BAZ`8GwtPYUgms)|0zG>s*<>aEIEqM3U?{%ugt%Nu=oL
zekZyGE$kU9fuJl}x&)11^eXMO>!-<Eeh++7QG)3!lc*1+w8uf<hn*|zkILvTFJKaT
zHOnV5C$pp3@yG4e9sPu9SK}}Yv45buC3(}I=;&~%d>xm=HhviWk6C$FDZSTEB-ffX
ztsQd~@;o3AGo3(GM*~*zEK6p4f`ErOIGe~0q}qxpPqc*0En9y6;g@zJP^4hIzH0Cw
z0(fK$^yJj+N#3UY0Jzs)W0`q+>zwwwOhBODw`?>?i<0+`<-vvL+@%e4FCvgO?Mb8`
zw9jMY`DKP%N{Se&THMSx+VVXj_rVjkz~*dg7zbizzhX1KSq^c2UyF`!TdGmkWp{Gb
zfK(3Zw)|?NTr9+m2-v;q>mRcsI#)Ne&;OT2(i1(Tlh77l;HNrs2a$jZmu(6%8|^)K
z*iF^{ANJllF6wQ2ABS-yq(PMKQUnB~TRJ2aL|RI^1f&^J5b2f<K|s2OE<w5*hETeZ
zZuoBW+;i^np8I-z{{8)4_rHN*=DqgX&wAFg*V=o7{h<<xxjw3kzorNZT1`G^A5hvE
z$1Uk#aKFP_vZbrZo^ezAueU!>L%klW9;j$u?#&VEy!<$^S&6ew({8}_W-<X3lJsVV
z5p&{?kFyW$dtF|=!L%|Tc5YN0dN?e_?k}|G5cOg2vqAxmN4FB9<J!y1t&BQDI;)oD
z0$)bQu<Dg$PA@U;PV>qvuJqP`=gfK^LMykX#f+8}!)1aaCBE#t7D=j->P6A>EQjoF
zN?pfLuZ%x$OdZUP%*gY?mU`(2j)NyJZt>fkos9a8E_~q4F_b1Y2p*v<aC>2c&obfJ
z#Dzwh=Bs2e=a*^J?wC`8Sm}Nd*1#E!6Vor=BFoRNULWtawzEIDdJ#7Im4wA;%~LKt
zDKu~Ajgf9n8haVZBs)*;%7&}(m<GO6=~(j%ojv7!PnGh0KArlD@%r}g5x?S`1cY7W
zgB1(qX3JzOhbdR53B#8npT)1?=;8<{l*^FP$HolHx;2m6%j>wE@VOoL3=DASjMipu
z#^jx3cN<#Dk@Dq*XN;N~rrjXjc(ajoAuRG{ff;l!#`w{tf89_3D$+zXkg}um<Kti}
zBcS1K_kUWFIc>(^u*<(!As^sY?3plft%75Wm!(96Epdg={-XJ`cK1-@+n!eZe4C1&
zh2}g`_Z(CAn%Xm`Db12OS1b<&w`_O0Nvt?IU#YB2djuyyV^|a(xq0lq46E69<$$dh
z-#ON}gh~wGt=lAxs-7#to_tbelwIUPgMDbh$l5PbD{zp^+f6KALRn!?Htp*rP)Qa@
zt5CcZF6ptAV(U>B7d%ln;XX2}8!1o_!n67POIV}jm|9tpwo5@cdXEAcSR+Y*)5q-N
zct*6(VGaULQKzFd2`eOa7aiHIC71D4ErvA~jzWB;<tH{rZl+ZCogf(ex_$A})vi1H
zS@+`Z>o%P$VU;<aX)?bqEr-2staU5#_(E|#RbfP2f4Yf)zW+=s&!~?=wUp;$WLKNT
zkV=SPA@-ly<f_U~6%1M69(!jv-A({OlVI)}+1AOMizC<eKewqZI;;d&Sp2N%a^bz3
z)g7vdYL(|8b{~$6;we3x?{{?RD`nul2ll&tfuig%t9*gS{%B+<OqtU&{@^0^DQKF;
zDreNp5bJR7U44;niR?Hf7IzwQc`bK(3})E5(Zy<KbD2yxxnjNJhf>G0KEzYn2*qkc
z!(~bsy_&lJquNLDW0O>gJFFxYd%f2Bd4Cm`|9I6W3Sn@}5Gh|2noa66{dw>xt5)>!
zVOqGq+F5K_eOi&Pp06^L<dHX}X%M`%&1L~IvYF2_Th?^_T*(N5k5Qo$tyohnL6SBH
zR+f5ls%J_Vbn}A~Ec0d)qH~@?G!z5ANCIoyc5kc)o^F|FRzGobJW{eDgYDxz6>P6X
z^j!wmoy>ce{Z&u;^A)%n;l+-gkr+7J5l4%`AtV({!X<AVamj*aiht$ylmdv#WI$ZW
zbJSYD?f$N*yf0^(4rT_pgP_6n0kT)v|KT)9TbjPl?6ySNi)bxrnA^x?zR2@Ube)f3
zx2)3bN^d>u9qJ8vQB{;`_LVg}BQK|E&R^`$Q2FZ+mME18B#~n@nRb`Zi#PSB;~WW?
z4s{=^&0^O2vD1XISrmkQCD_FJc})e@9dJC*chbs;A0GzvLM^+ODP5;Y>ONtGl~ktX
z#0hrML3CXn?-c6>!R>u3;;x`SGsT}9nZe2E#OoaU2?sn$WfW-zm?NmML_d$bpGc-m
zx~Z7nvl(e2(ZgKqx5isZAi!k2+AaA61VK>MQk(MzG<O5H2<-UupUIwjsHs|y;qK6Z
z;$q$HKQY+iwQ`}Or|G$FZneH`t@$8~LgTIvE!Urw<G)N1)rP8aD6O?vQVFyq5u(xl
zbPLrpnB11+2FJS3g!~Z&OhL0!Vj@$J_}3i(>M7X<4vH;!Od3?i`7!CagYyEbL2e#|
zzE;sMX9;D;mgreRIzSfg(7CxnqVVlKar}c;y~y#yo`^8SS<Z)Mg{jNacU;wL0yE)!
zS|3~eJQM>8yh2}|NV%*RlwaM@k?>0DuVT-y8vx$LG-TwhWmxTJmI+pS-8VewZM^>w
zS5&_b{hpbJ%!GRPNL69&4t%O(&1F#GC$RQ(QbrEb_`9bDEZJ@t0bxuJyAJ_aO1-Wi
zzLeB;b#!SMO`*O_7JJH0qv%m$vC|y0{rFJc@I7Cbf4_C$pJ4L8-~G=+e|CNU2ZsM&
zg8>}O&2})sm!|aC)Ag5l?sbmP8m&z%bJ9AWl)8*tO}MS@_ZOL7y}Dlk<#%)#B{iJx
z>n&S(c_Mp$iXeBM+%8qjM7@1oD?s!fG>h^5S8FP8kHfzuf`$~r<-@8p8B)tqI2?Q2
zWhpUasH4zu-^O=yQGCx~EM;oSlK1cYExHcf6MOwAF1vntDeuI&vy-jf-C0_?HG0fA
z5|g^`8)S%p>j<0f^zYB1!pkz%QK7@)4i-8XqkTy${OQypn!9hzAatFF8=PzU_u14(
zLVMwIz%><UQ7U*kr)6Eakc3<)YYBmz-xU>7soyEF|J$D<!Gv!}Xlgv}L?M-B@$Mby
z>KT;F^Y@rEG5JfF{>ru~GuKN4tK~W?<V(M|aK*(wt~Y&$N!7=DWpYm)P3GTBMuHgM
z7^=$8V!+}y>H5Gfzgz#5x#)n!R6r__h}y6vFf5E#x}(sbiNmYis5n7W*5~gN;w}0F
zlKohY+iD{6SgYJRQSkC?x7eV`*FI+d!>u-ib?v_TsI3n&GW0!~veILyAJcDR8bfPN
z&CgQ8;{Nm~9<Jx$u<K<e9yIsmF_+@OxG7~Uuif)SoAt4xSYHx@m48#<e+*O?lK;I$
zO-YD8M?J6OOlZ5AAPtN2p+<onkIhuoK8Ev@<LJj!|97JLp*NJ39>_Qg#{XR>U{b+c
zM+u)y>5C^v^Qw^=YNsEFyI<s^1{ntPNtG6|3T)Msu%UxZU;l<BF#cw_ZwoPcx2yuG
z%V#{@KA{GOc3JiNk}jFskj`NFGZMkX7)6EpQxFT5_x}c}`%KWZeCE#;jV*gCgXK!#
z2zt)NsfU~XWQCo5$DPbJYCkfXd}l0_zxxQtl1B~u#oICUXOj7~2hUv2wp*Kuy>$2!
zFXpYvrw&}7LcZV;ErZ#`+7s$J_;a7#FROWBS*!2wnyc8Y7qxC?xE$ABY%Fm^39Oe6
zD%zi{WOk<dQN)pU{RV!pF@?o;#^bP^P(z!#pl0X2jlg7%%Cuc4OS#}i039X_b`K0t
zbh_G-^lt<77X2W~vi82iy3lT~Us}oB-25cZ#9YCkMNx2Df^UCF&3L&l^{tA+UuT<t
zdA9EdB%a46I;WuSnRU&!)C^p3W_<iOUtqJsFoP}pJ`^PlX<y=+T|x1q-=<>W#?a^d
ztXve*eB2}j2Affhg!Rz)#>GXG<H;pqMrjHcBkTKfzkLP`QwCPORi{;VSi99elBcx`
zSE~N%&Jra@F8(n{@D>9~*44vawiavt_CZ37y|Vl)BcGtnO_r_xgoXXwq9$yCw#ua>
z=DC)j9NxjMzrzFw(2q9+FOKHy`z3F;TNKo)SD^P=G~m@xWQ4w5fze&La3bCk<2M(w
zKu=UP9+&<J60Z@3&6s$VQJE%i!Xt?Lmxlc}A|bMb<QMr`lzzW4f4%7=AjLw2b@j&n
zYg-1q7q5_4{YgA;7bE{R6g>3DS{ji|(UexXc9kutBo_CyD?(dHzJ7Zr{`Zti)Cbu_
zM$zCt*yFF%bJlbfwGkoZ;k};4NRn`xm?!o3KW1W4w$f4Iu<YkF>EazEa!|Lf(P|&9
zJK!2OiMO)%A^x4HfWoAUkmWo2=JT~S=jGt1N0kV#hOr_;J-5~DOzn^;Of*b1FaVTh
zYa`l!8}L=|)7;GZl;4KXH=HOnJLTfy(#dq`ZsFnK={!5$H3mF}XAKGX%{tK(JLt1#
z&*r_aVTS@_iSIpO8V_8%hHC?WK2_kd7;CEAj>7R;)CX|IP>MjX<!>k*(n%SpqS<0r
zDYa|yGVAf1U%YTgK20dd8J(p2x6}H+5Pg3c3O3(p$5!eS4d}pG(M<5Kw(TTkZ66Tx
z{btv)2uyDEeX-DsJtOCny_L*W0omTQSf^yh#FwgzY&?N>ztaKkGX9uDuaGeS-OiX{
zh_P&GOpwRkFq7A?#>baN*NDYZ8lmp{5{yZ&(h}Tv+OgpDMz{Z-dXQiz=#g3)kH?y%
zRGA|u97-w&6$RRJHB0P$h<=|WBp3t+DE5gqF~9RNt05{yblamQUI_cGA0q^nhKYdM
zf18^37?Elkk)!%^z_!GUDB06R)`Pu4rI=K4zeN=Gze;-l3YP1T{Pp#YzUxg|I-1o~
zfwEANhu*GfzGIJ!elAe|f*92&$ifie0@qmKNKfa~twZZ5aU7usJn#O~L1=ik#xFFY
zd&qBePE^_j(&C!Jz8J>1rtxmEfD7;b7H_!HFjYs%aTL;%p=P{^>XzooAl`*YHG9VY
zKr0dqAM)1NOk>2!coV+_FGw`^N^1;nQgQwkTv+#%bMu)HAgRP1J>BFECgzmF=9>?l
zq-yzn<t3W(#+zBbn!|BZ`RO9qsX+$gy>XMGWQgFa9a|XV-yI8+!evs|h%_tgpP1m6
z;Gx?}tZF552wYYZ4J!1Q$NOy>U}I<%#ih(@w=qkqI;XEUD$wAHfKZw(S8Bui+xWdj
z=Wg80VeWV^Huh5%NeJv&ro|h8uo8-J|Laun9~n>-OqRk%$B2**vqN>UbMJ#>v}R2(
zTfAH3zdN??9mK#<G8TpOncYjvO{tBNUg5O2yZ`6}1!Rp+PR47KsfFu_q^-OVJA5WV
z^=!uXgVWS(zxg(Z30GZXXi(o!YE$Y_0x!FB_<zoRmU2p=WgbuCZpSnsYw$eU(4&;X
zMsRpuyF9Rv=I>4gm-&T?8XQjy6IP;-Zf=E6ZroG&aAm@8k41~T^&>J*XIx<So5V_`
zEKIZ>y~1$s+hmzr@WSMaf0$QHWToSi(B^(=%GwzCBvG`$CEzuOe*)Ew>o+<_^4B*y
zz7ewe0%M;5cUIY#aQxj+m>Au+9A>%YLa+SBcX+f$^KD_3V*kN9-lA_I`IZ|UW0m3t
z#DYA*cF<WW<yV2KN;my#A5#1lrzo#QWpq@YZ%qb~a+)Y?()~xCq*BfhH6Yfq@m-2)
z%+bDALX8{ieE=;{+WdkM@_mx`A4bgq`(h7wV_R{m3`lVf(#HCaKgrT<P;2R7_R**}
zT9lw7K?WNgM>jq%5e1uky+`;vgvF?opY|v|wJ7hN+60nvL6PG>$>Yh5o6$uWo!_3Y
zMvvpZQ%Lzi#3JZRtHqA-8_A05<D%V+F44guMa)|}%gf9E^LV{80~0k+3haxzd_^N6
zF0EO>H2bN0q`#Yn%mPev!s3pzFMm3d886WOpNM&U=i42_KRuTrI?cYy=lfBcr}IB7
z6U6|QnI*EPIP;MHw%+*{NB#y!yPIGKDB0l+mxq6`<9~kzLuLWRG~`;hao)d!>bFt-
z>&JH=k+8UDD>T|bA@+~B|2t>?-73r%pnr<FJk{CqoAmtW&x(>=e^H3nTKh2RH$49H
zkNTn*efox?Te{rX|FZAjYKs3k=vgK(R^Cm*-!5AIXIqdU*Pelj-!<36V!Qv#P^oaG
z!C0H^3POJ)=l^0FP)`rWi2AByf_{@#|2zc1{(bti!ESE_|4*K5@V=GO*y251Yf1Kh
zny6+KFjl)s=6Ur0V(#CqLMa6>K-t?gp8MyS`OWvBeh)T0%;{1q{hvH}KLx-5K%VV?
zkpH{eLE-g(kpFLZ{vYK3Yv}%u<^LOK{=dZXm%Y<24ed{c11@<u5hWfx<E4)Z-q7Kq
zq0@^}L044bgjFQmR|iFebD4xanBGtM2_u?J*}TytC?F5B#F|A(kO$UGA|4fUA=b`%
zV~tFfrW5T=ojVdMXCiuy6|3tVdJcJ(TE{Ev-LRolNXX#IH3+UZ(w{HeUO;#)jY?gK
z$^QJ+zrFj9FP-Q@jawCs&681TuBi^H(pHl=x5J{Z+1H#_l<t?xy4h6kVeJ{O781u?
zLo=!@F?xK!bf@c1<m}}0*vA~QCXv0NtKsH$)ju#g_X?2UEQ4I@liLP}gd8^^d&~He
z{p6L8t#!s#zQmMJs!&#_>yVAusX&N~j&lUrhPC?k$GRhL%&Zyz6Z+OfAtR=lB)7HD
z8X4kVG6YrckPW6*#@+JA!a^Gpg$t=SJoQc!YV6!?vS{?CU(aUS555Wb676^QXgbMn
z;oWmwR&7<6Ds2u|m5SNW<7C81K<M#>!j$xsMvmCp%BdTL|5KfkA%#4YZk64@n;cJ;
z!detGPYC*UT})5K9Ld9dboK{wJueR=j)Ly1)i15+BTDmMiqKxS)S}~$<nu?eC>OKJ
z^zks<xHYqXl5*fr{~8IK)IY^l)kMiFBsWKg(c-WmD#k)Ly4x{6qq<%I#zI2^IiLw$
zYma(sc)P=8c&WX(y>mVn-BdQ1u~j!Qorj&E0sb{Gkdz}3_^s)tt3B@+ylaU0<NF|_
z0~T)GAzv`B_wgZz>#m}nh0bO6-9K9B7)Jc!NJF-w^~l}%ElEqH9=#hkm^=3E-Wdzi
zXzHk`GB@kOCJh-n*KsNx^^MYuRU<2Dl1jH*^X*{~p=a<5y0zcH7uThg!xq$TU}$5i
z^Efv4^X|a~>-OgYF9UVmr?qOK!cblFF&eKNJvP#3PRENo+jYSo_>;3|c3&1+b=O*{
zY~aGXPexs0>{TbSFTCJ2&r|2O1u7hE&6Fd`;#Fi<^k<${e|4_ynds(4olX2=KszlF
zCAg8k{Y?v}Ll1r~`K(F{zYjt~9ZCT$^$AbHIXSt=nTZLX#IH2z;j*8rA@%4XU17iB
zy29vfwHxtma0Oau6}yks05^^nChl%S)1Q%Q38|(A;BS7IB3R92Vv5C5-#SPt&pEKQ
z8uC=HI-vQkLjxDC$|u&4CngWd359~68cVIG-(7cTWhfbixalxPd#(ygU=+0t7F(t|
zWGKh12FPD(e4ScN?#xl+Ka@B!+}O20>=Ef8H0%lYN_-i6?{4gOwpmUrbU~MO$K#o}
zOy8;9Qg90z5eu9}Fuiox<>u)@^@QmH<0)m#L!~-xflcj7<5{^_jR$;!XmX(SZ^85N
zbD@nCMPqhpsf~(dJVmnChLiCy{;~4Dz|-pM%tF|9WZbhzDgnzHT2Jz)>z-|T?CXxJ
z*Rv?9;$4Gv(WH=n@T@*Aud`5GAglCP*(f$YxVv2;6wB3zNrDAu@ri6##+O1uMBgt(
zCkV8XCwc}oB|=`;^1T!J9WVr(>e~~gg41E~lWfT+O{*b<nK1pv^Uby%LfsgR=TUqq
zoBlUny5w>=iqKsD>8$X~&Qgl!VdG1|o(V<y1OW<DelMtRxiGdE>m^o44f?t@&{7m=
zfdkNKFR}O9lGk((bWEeVqC*~4s<M)LFtn~oovMx%y4$Vf;_+D;4IBzS6&i!<leE10
zv@&Tkb0(l%w(s0wgPp&v6CiKW&N9qw{A74MJTLebWBP665$n|bw;mYXl1nDx9=izm
zw=#sd-{||gr`2ySu`x5>Tnb?N#jPX_Bh)*EEVjaGyWJkqr$%Td-D~e<30=>%+)v?`
z7o-SjY!cklnSa<&2XzmKzVKYANca4(ycX57iM_HGawhKUWO=eYM;T>Pe`a<3rI@Yl
zGhfcSfT-UACSp<fE9W{AvZWT1q?BZ#6>)|l3a0{OtlZ%B9QPIBHqm{%Ow|+VIuuY=
zU?F}v#?*T!yx&~9gFvH*pN7Wk0}EE|M(IHIPF?$LEEe8aPN_0*Kr3bEakjDt_H9L$
zB(i)a%L}f#n6`ej>Y-J;W)hkpt<E^@`wR?W^y43Ciif_)6=N8NXP@HcC9|VHj@rm|
z*y!T?wh~dUWw8*XKDU*%_6*)x)r~Ng^NeygnJBYAuQ2AdZvK2mH;Mzd+Lcx!8E}R1
z-*s{Q&YR6j#A0lIQK7R*?dThCu(aj!<HJA`oKUJv9Lz|bZ?MHFyvWgyZ2dE(>i4o}
z^0b12tt!0>hs8%bJw;2H+2X#nXix+Xm=nhcii4mstrr`BM+-`vFr@Ea9Oo}|#$1jq
z*n4!bxh`}>*{|i5pG3GzQ5ELc#Y`40V!N1K%Hx@5mk?pRPcJRhmJ8@ezhAG+XFe~H
zt3(aufQj1Zg_JtNWgRRc9+Y#*X-Qi&8zhPxyC09dw`mWwhc^VG-9>*p2B#DK<X=kf
zZ6&WYj1Fh<aFp(i5Jx(V=IyCJ`pP!Hl9`PC;M=~d*Us5)ua{t`7!<-y+ps0Et@iGs
zs9r-TVI-Jju^cywC6wpc!3l*)%b*yoXRS0o6kqzA5|_mShL$JG`Sg!!*d+ToO7fi4
ztSfB(J3g8z!g}UqvH~TS;;p-=Im8_*hVGtUZR5WQqovcs_8(Qx3m`7;U0P12sw1U3
z2cI<Fp^Wm1Efi#FU3#PFS7PJ3o;#KB14}>fJ6a*|mdVla;>`Oo1H%vZwzRyGC-=YT
z3<%(!tSi_0NIf}zO034MZtt+;JAR{FjLHN3MQeI-n*9tthfbAS)%**!L^8A7-HiqV
zidZLi{!5LePMzD+^pwJLO^eS5WNCn7@L$BqYC*=}dymQCEJFKI1rhSVLE6)$D9C6=
zw_w7K3fAg<D#<<~2Zwj1gZd1guqkEx#SK2Z9gYFRWV99E=cs(u_0Xl_fbh7xj!P9W
zu1{nK6VR9z`Tks-!heY1oe5%7C}?I^wSe9=R1RVq*&T}7b5TRKVjhkfWjH~JQ$yu=
zcN2$Tm)WBl^?1<zQ!q%FLq(YjdvpyGEZeTT3W@ytH}<7xpL?kdW-7%<2HZN1aF0VP
zeOcBfO>z0|toP(H42G-w&6OvJn837i54|Kky-;Cqn-Pj8D(dc#nqK(0<%!~t4gSIL
zL2$8v5Xu8rMWOOTK9{vIE&Kk+06I1dQ^sp4P=-P)^fv*^fea~^A|X~K1@DWj4u-LW
zN<;u1p1mx!o0A%^b#pFk7(LiP97@=t*rAR2Bh?dp{S?%aq<$RpXl73+l&{({f3NZ+
zgRxqR++%=k^-K!_rNZ?U6;sb&_5=Uyr1+u9t>8mGE3y^qgW-$i(oW-r51h?;7kKMp
zNC*=gp}v4Usubs*XR7R4*0HYsTVu#ph*HA|a)<ngW5S593&SH=r_pz<ik;*MT_zqm
zLvp8PbHsLSBwrCUH<W+MkjnR3b{(HGIx6aBq~;OO_;iOcsAHg?T_*i5G(lRlUh=UD
z$At4R4`qZ<nLv7VIRa_cKT)ae;ACT`Zy!h2QMN2KP~r?-A2Hi|)4zw-+o~kF2Y6u+
zT}Vy|(AeG(X)TZz;o>RkiE5Ym`_7$7!Tc^6W;qHhB(yOKyh40IgEycYZ@gO<qH|i<
zwsm?bJ;XN=yOC#W;5cBpy*tTrZ}|F!<-+NkLp6@!+Ppler0f~0@<){|&bi_RnWN4%
zY8<DcTDWac$V6QpS#_Ipp2Z|<W|U$Ka?I`1=!Xkn;MDGMJw#yO_#fpakM7xfoQ@&v
z$0=DcR&v=5UX~@WJKyOcxuvO!1@VMTG|Kjp3;A`42}rH*WiC-r+W|q~Zx~>-gx>(q
z&^;W353PAq7%_keHd&2Q5d#EGTd2WjrhPo&b&|k!hHvdQXS!q3DeM)lgeD5EA?R$q
z7kV1wsrbGG!`=D7^(0+hz&gw8%{=bdK$TLy=Q-=~D#-n{Zj}4mqpnnd@M&pn)sHRP
z?QrTuf;>oxd%sV1PgwB|RiHw`&<mXcx)`HX$+++J4TzlRd0Y<Lr=Pz|g=@LU^dt!?
zZRE1635uCUk=zXf>YE0?&q2DES}0~O;Rd#A&q}4=pw#`Sqpw9)+lKyhXdl3wbxDNB
zw7}^@xLEiikPf<IT}_8@y}iR4g5f^)QLZU2${U4vWO5Et*&axNUZW^61b#@+=ZyEi
zk??*mO%+D>r!TBNFPtpASQ{8ZELtqDRa1oOZMyLn1<{a0uo=8P<db$ZtFOKuK$W{@
z3&~4T>iehi!Mg9Mr0E&eUzIr-1*C6vY10{Ye8xPcqe6mx$Ln*D?Y$#Z{@N$W%@upK
zQsx~c$c<-DY0x2IX!;16et$1wILn1X7#hqLT4?jVEffcE4nIt1!_VC&nR3ON1JhBl
zU&3X5lC85QT-MheAJ@B~4gJ+H9z;h|2WU3R%KLP0=#)o?nMQ4ns)i0Jcp^nq4&(OR
z?4sF4sgYs4_ziVm@l1$Ra;Ls{Q<Fl_>AbB1$XT&T@jjFR`q;<O5iv3i`tq8F&tv5I
zox4oIwmg!!-k`g)moVTU-&^!8#d)I7L8VvrOB-;oR1YpX?z^`@a^HH^R1jcADlD-1
zrok3nf5uln_!JEIC4I^af4z0nXnJb-@clQ}>D3ls8P07VYE;FA(E)%wp*5^woA(?A
zZwOd5<E+Zcvea(aH?_E>e_Hz>cECsIu)t&LA-AWw515MzVAaOouycaN&N2)W_5vWc
zAC0(E(~8)INHzJ@DnW6zSvj?mh>R|;_!cD8qKy$5$XY+|BrS{~GEM=j<;tujI)i!e
zF<R4iP_S<S32}?LXl%_8@!Yh99QPe60KFg+%{2(F%x#GA_*?tA3JlCCp%TkaX9n%2
z84oi1LX{v8+;<|#=S^NQP7}(PXxr2&&b<};L6_lqRxOEEx9>`qUJC8b(9bm4eA}iD
zx``&ipbxj1x>h?N(0BWoLGB~I{>CjrJVL5aWrztPy02wGn-`nZ;O48Dlhb*?J4AB(
zDp<RpSaHh{hQG{@@fIf4>E+tpW^z?rt&}AaMz%!!7`J1DN&)k^RbPMKYK6Zw6-S4L
zi-8=4*-;9{JodI>$#jxRk8goN&smW<k)d8_ZBR8b(I#fI9|z4y5V`iNle1IEt9_9I
z4erwQjw5zPdv7nHDn(t($>%SgOMT}(E}PK&NQGgFb&UugSLQx)y@%FljZSpEtKVd`
zv*T;6m%gt?tb6)6KbEo~*IR*QoTfCd<(qFMS5gHeV_*F8iIa_+GuMo6eMY%YM-@s1
zIk9>qw6r&gf$eI&$|v_O5kSVtWD*(n>T2B<pLKMR+)%}Gp$%~V6rkrhy_5%-a2@nL
zSJ#Eb?Ax6lrjrcy&(35iUVO@-S#f?w(ASz~xiUtpQFoARe{7)_UjFPbbN`j<_;F57
zbcgezyG*e*qpmVpgx0Eq1he62%Hz*(;pB2DCG}dHuBV5>2zW`Y`h~?7ZSlvA6mhd=
zn=z0#TJdFZiCBSV?r$efej`<|^^U|jw^H1SXV`*htxMKHGPz#?5Kp+YXfL18Aqe4k
z*I@kTU}Y7MNbD?1g$Izeo$=l(fK4e~OrH*bl{U4t76cDJ?y|$ae8E!l!8~&-D?S*5
z&&aYN1OCzGfwa*A^CdNqpaH@IbGr!7SpO!4i4WFsFT(^2_poC_^{7Pz<}TY`?aN+0
zSV><Afp^?}Vd^1(wld;Yd%m+kUN7${&5<QJVojW`;2S;yeOfK4L5WSuAQfWm_E>k~
zGMw7^%d$DKn!0ftEx-mHhzGztD5yfx8a9UV75WVQvt#fVZ<zc<?Lk1#HjyH3Q3lJv
zL<PY#%*qmI0>Vs0TV`>0D{);PqCbHkx8k>{Ru`E|V|l$QbBPypu=EjWH^qdW!8f{g
zVt2m0or#n*9yF|o{|rVhh~C8<OGg>&6e~7gf)zgx7T3Ol_#<dX8}VfmL$8sb__E$*
zS}&`3EurkIl*=(Tx#v>K!7};$(FQveX5df3ci5vZ^JOhPx2-VU5K3FRN6ili^QF{~
zx9DB8H^o-2<gcwtK4DqLb14qJ2EWpuQ58$%rbdEE5cCOHU{=)lTcaF<F<ggSa-ZJ-
z3f?Nqr8gh7dCfSOB;~0L6alw%j(#hU1p%%JZ?NJl2*2z2K*jcG=U|37Vd!<|J3mHT
z%b72uX;455C|B6HGgpY${9^xLxVYTKMme~x6uqQ*PT0;jIn^5q$}$fiSG-O{wx<p5
zuf)B=IX|trC>0^};W%8V+pW;*Rus&t1ns>!t_(6DoEs^Fbl_9UkQ1zK;qvX}$v52Z
zYytFXVA@J>ch?aCEXQd}1Y1tXSyQMq4F?#zk#OWg@O3*vl{=Muqr`F3Bf7LWWUl=`
z-(LUq_V^VH7=xRna6h`~)$%Zbe}bS)7nLDpV<mq5%BKTpS7c~pd%t)58^^2<v@4;|
z%E$7Z7}YSqaMLIf-0En(f&kJ^1#%pU@x&GOBt`2}R~+ecxF%po&|KUK*E9TBod^A3
z&Fyy4#Y&1o6GkuwZ*ymQEBYC&#^MW~y?MKl_^!y<DO0s2(K`u6{TZ6w)SHlODj;Dw
z9Lcy9cQiGs72(4+oPBYRxxR)n0C1*9d%GyE^5rbCQVW8SzT%D)ZD0i!6<I(Kw*)vh
zujc&E34TSuyX|YDSM!wy2ZBpPja=Tzk{o-^>Jyo`QMO~*!~mprANXu)Whe%+0IqGN
zwtee*qYn4vY`7#nXGUJZAof&=2W6oRTmz5%B@>w0Fv5_g7Fl7Oy8RT`V^3>X<ZTU-
z9T^~5vguQn(v#vF8wH(xI^P9+IMzoTsf#vvURkyV{U^(ooey)SxN5d<1qgz<#D=nF
z^9vPr`bzWJ=6>eaVwiu@EM~tL0ID!`!Ndlx1W&n79`jx0na*^Kg(%~hnB?yIM{>o|
z8HXw1LvHI@;i7|>P+u_+Dz9GfS~779oeS;6Sb4E4f4)n}JP{EF$~R*mt|MHnL0miU
zlQCd|^&M%)8#1)9FaSXAJblFTIY}$D^l(rNi`p|I1zGGiOqi$IqB(%xo+=a#LYZur
zakf_K+&05@lz-;lxWQ3wt4b5s&Ko-h4^+EztwR*z#eceM-+LBs{LsJ!C79Jt{7W5u
zFiSW!E)I~M57n9t#O?YK=H)NTiO_=Xa0=h#z8Ma1qbk)P$g@AW@HDb-wE_Ni@gXa8
zT?Pny9p*9awcIRpFf|Qz<6;<l$Y2s#k!v%Y>fQ7!${nsMoKVP#;2v8~tx8MqT{X_=
zDcfACR=8%W1UXuIlDDw1C~EDk#yZVG)PrskMsqQ$C;<AmpF)~^XN$od>emv1h-vR`
z=bXP1i|b;dy^n;XeSBQ7QDgY{tQTKfIqa0fiVz?`yQ_Q)twuCe2p~=X?<GFBmal;o
z3NuWg{9I1G=EUWAZ{&2o@fw@#qt>FQlFF2T2#}F$v4jB=@k*LXV4;l#A?<P(OM#GE
z6u$#qze>zm#AMtz13(3nf-dcOh9$f4H!%priB>=9<07AB`NgNtA||XR*4eAKHy$EE
zQqeywWw~Jc)pfd5Uj4d<_RBkJeJ{wOi+NJ(0VT4~8zg9gl)lcc)A(eShNtrnzDmQ+
zg8BBQ0s$=KxwoRv@Ryy7XoCsAHn!iOUlnc8g?=ax+iwJMMkz<FuK`xFV%<hqQi;T*
zKd{>ttGay~V{Sze4*)@m>;?qs-nag9nBodw?ozQ=e1#~?hjxq`l{q;zljVwOhYb*E
zoM|Xmvvz7Co!7?*08NHmFv^UWz#)0R6r;$ME(>DhfbM>Z^O$}_P-utQ)>e4HaF3YU
zPELANp(;ZV3CmV~o#>5Xd+`xQ0tjy5ZNPi4JitP}*B2jc49tL)vUsrbSe99K*yhEi
z7|mVv4|*?TBCe)QvO!RKpKQdz#eT)e&GEt8+D3Q=uJ9vq{SP4c`WyerHdxgr!wSVR
z*UjF0WH!IPMOMFIf$+RH;{q=bdf-eJHAU{{5%VB{=`=>RGbl<1ta9M=-X0hQBqP?}
z$CV+-)j*VBnYV3Ar>&b$a><B)Ef&-aPmD7BnL)<_ypuk<=A)qQYGboHJfG~khFEO2
zK{iz60ghfKX@dX4L>O3b1V2kv0&L3*Ipq%_dVfQ(QZ-h~^4FKdcx&)k;rildZG7f2
zQeTLcOJYQXN&|UW$OF9d;v9IV`>i%wItI{t=#TiO4dz5Uk(->kMamm~Qsr2Lw@ZH9
zQn8R*VvTOB%Lf<w0>)D4RT;NIP@~&{@0Mol)6uS`E@pz(t`Ah9cc5Ln!-C12#tDH}
z`W9e|@|=+{Q1McX9fHRD&f8Nh;(ny4noT@)2}gPJuO}n}vM3D(F?AKR13=_&y!k}7
zRcHsA8Q%rs6W^K^A)}$AjYa-4<WY5Esr64o@@OAi86xq^5C#L{r{h<KT=VM+r3z*L
z!w{1c%&Uy*2H{F<#WZX%X!7=fLI=D-8z42($Z3qJo0#x3i3>>Fc|eCe%=RnOV!Aso
zMwJK_Nu_XLMgNH59_v9xQ0u+)L5;Y&hYhmOE{9>kn8aq9p{Lz~T{RD<#3=xWxIz{y
z&67H_w+zhP^cM{lqb8>N`9XO5d%M)dEjgsS-SGjPflviVP;H*?;$2?suMNPEb;Sne
zvt>#->28mfnFje1yD_w{{(@*@u~#l}`rRdoebWf*qaIg53h_7~0rZuAJ@a7QamUs8
z>X|i3efZ#+7|6TYT)hiVjf|h`aN=+lD3Ea)z83w2d%ss>*S#mwjsqLS);apUJBhTl
z*E|OLM(;jajZ=HTevbMTjp`c}q{8Bjx>Lyt&kuYu?uR}!w;|kM4T_OR1`3KG$-!Py
zds_*l-f0!E+{+gE;^QN)-6%T?JopIE%V!r>L@7dcEjrdOR%3wwp*Vo0!Y_{*;zz@x
zt~|zJ+lGk_Ar@~C)a%~mGeqeS1q--R#vh<|`L51Yuy!Da6_jp5O`u0+Jn3IfYR-M#
zLprxfZAf2*0*#1Xqk0LiaXj;Wg(5h+?P}!Ne^XQ4^K)W#!cbk2ll)z467cUf!3uwu
z-La-AamrfzUv~jWoz-i~0EYXA4jf<rV1g0eH<*dh0LJ@I9m7xLGxSi>XNK8!-!n?q
z!Bo*i8@QoKxms-Xh)eAhk#YrX|0XGK6g=Qa9q=$tb8J5>S{&7XZ|nX1(!ZL0p;FLS
zDa4wZTk)@omIJ1IXdKdR{?P`6&Ex8Cn9K(@`G%op-z2E;JSejtyt9SAH=B2oXTLPT
zc6~tN%Ib7lK$QIELBirl5Op9>a+TBmY$!I-7nV4cS&r?0Y}lA%j_xQ{tG^{f03;Mu
zXg*jWtbFD>!9qrp0A<Gj2|o_BH;mp*Qb6~ldpCS0){xcI)l6A%U`$|{!)R?!g*U+j
zX|9Gc5CpRN)B`Cm(74F~-=Z$70yNMsZ+*udE8ZF%7=m-!TF9U3@;NLr(u<VSgi3>O
z14|LG{LlC}vdjtKc=aVD)E(5gaoz$ixhrvHgkje|F3CIEm8BZQbkb`mR8Rh7B=9Lb
zP#lVYFEjrH@w(Q%(kzTWJP0ZSBwEgG{fj}q2$UL+;*SRg;uK(Ij|5qf0t-@Wl8^NO
zf`pJUZsy3WYp_13?HF43+sT`_751(#S_3;j>D;Bbtv7r#>kR`C?Yy{PHHb_@1H7sQ
zEFD*6d3od4zyNW;hXrx%?`h$@>A}&ARk(TtHyy~=sjAB$xb8m(?2AV$;q8O|<K|>z
zNBLl%v~fr{MourzOS7r(qt~`O&TeS(d&*Kh`ss)&@T81@Ps@y8NX&q7bDOh3r3HK^
zaMC^K39746Yoj!zyo;><F0PIB42vJB9!9$V)%!Axpzil_;FiZ*po2lxOp{(x2<;66
zn70?K^9->K@7r(7>Z&Id3?pxOySq&}XQY;}_XXJ6*rME(cn6xk>7Vr#w4GL%x>=%T
z6K2u!Q~+6mGZ`QYhF)g}xGez);*d`cMENyveIAJ0T2gfWG=pCGWWFVz^R$j?q{yp4
z>k1y;yx@-o^_}L!@AiSg#`-C2&&h9G_41$u4RzNCsjT0M$~wUUyO|^GDi`W<9@n19
zd3#R*23`MzcM@R@Egr~g+T-CwhYA?w79gmk1%lg4PLm@@7qyp2e+<~kr$5{%?e81M
z#cz<l<telHq-QrusQl8!W&elBf=6bJhDlU!q#3;$JtBf-%44edqgke<)fhv_x;Bg7
z1U60>S9aDjVTX}S$Z@jA_g(vyNcs5$bkkF#l_}wuyp!rn5xdW()^<jPlu%ZG1_Z7G
zD99-I@Pg2g1)z>if7Ak2WmhgQq=f1F1<D#m%j+t}b|u&bfq0_TGj*nP)$S2mU~O+_
zy)k~=?Y0?F^$Dx4cx8??#y@JQlho}}Be={m>?E2eqa;&TY9T0!JtOltpKq8)&QtLi
zSJNudZ(+;Ei$1j8zF*1svftF$W@;w=;wXM#s7hRdd`?T#{k>98djIYBn{3p_&@-F|
zI=V3hb`&od^iWG*fX4Eb?!>}B>RPvu)Ehq^5B~@V@~66$&Ks*%%AE>4X*6hR^Lcy&
zt&1s<wWQPZ`m+l}ovHhF=3yQ>ujQ*rib~7XjGfc+OQNjXWU-$UI21`s8e*cB+M{q-
zkGvxnqoEpMleyZlA}5b$9LG!L7xL?8SPF*oc!t`0dvMzNuj>gfDQa?W3yPB`5^3;`
zIO{w(e#mDr`TV#gXC^wIw>FVIot@)~#zC1+UcRi~3=k#+c|HER%;PH#0$35%AA>#<
z!0u=~iMe*z8~1}%Pn$Ae)_H81bU8fHk0Qb)VulnL$2U+T%l8DcPQS$Z)Or3@E9~3d
zf$1litAY#F(-W5hF0I5OF&*IqY}byN5BADP=Fc2X%Z&y%lTQMa++8JuKOgMvFV^XG
zzRso$&v4kfS>9=wD}6T=P;abq4O$2Rh`<C<8UXo1LS)PMyrD4eM1u{J$Ar>pL@uFn
z$S~$ldbeJbl@zGye&*YjuAIg)yxeXS`Bd<M`zf2P_`9}*_v0w0K^HL3m5nW~p?e*7
z!nd@K9%%}%K*a0#44g)mS4pdkKSghUBs}~~t8pYg*%k5tng9T|XtcrUgl5DI3@}-X
z=?7Bqibqu+=_49NvRRqf&<O2|<&Abe1h{V(r^T8x2B>-1ohMsy9iq;L(M;IUj%hY+
zbl`^wjM~a;ndS+ebO>a?F9?4<wCw<MDq44IetX`6@@BzdGf@|Z3`h|@Kx;bWZxZuC
zIbs0?N0fDrg-d#qbB9aDIX%R0vor1NxWf!FwumZ``k_eJo2A1oT>8zYZU<d*&RAvG
ztoVD|C(&~m(5pS2M<u<`n*Ka<w{}&be<fpZe&o13Ywl6>iM2xx3$uvRgtXB{W4*lI
zn_a1W%CUOa-SVB%iDPlfkE&@-o4lrHs+H$m2s#nw8Af@^+B9-G3dH%VbXFD6=Hh(=
z)<x9sO+Mh-QUSPJi|PrzA{O4jhQkBFdm$sWG@#pEiTP?_bz6QO9;+b`_;A&CZ6BLS
z8grx2j;4#q`R%JA#m^V_9lqS1QK94C5SX4nLe$O4oGpY2GrwQTHhg@cMy^w=Jh^(9
z)iSbC?74*FE?~KQdV*TD5LI4(ca+6VRXd-c)%;ELQaF8y2;*R@9{tzr!vn*Ebg03#
zR2DO5I4c_#yHlzk2V4(>&E|4z-EUTr+k+$mE~oeCq_g6<C4i^D5&g_cAEDZrJi_UR
zBw%S2%sOaKx1_;FP>Xmgaug!IotZp-m>{xxT4O&!==-vw8ScBWv(0t6>9D!HxfPAP
zk9yhjN#`opw-dM}-I!G8`Ye|pN1?ems(1eB>=~cs3sWp|unA+nz1Az@vK-vRxWTvW
zSJC5jnav{$Kk-SviZCQZi!;Dg+hdS86o&83fw~unJP{b}RCjUhdCK~WoTx-Azxk{a
zEbmZ32v@7Fs&rJs(Ya(f|L(jU(*;ErQ9+_9O5z<j`Kt!Ko7)bS<FWSL1E|LCU-8>_
z=8uD!v+oH@s<WQN@~ba+z}!fmm3M45d10lCOR{S28S;6ww7U0@R0*<WDwsTam07c!
zAWhF!eb2VjLZGg|X`Be{XI|?8TG9c2LF_RLTCDP9TFl`^R_aVDsE~g2Z-sb?cwG20
z-#S)eP}4`9x!cwpNg-zBe3PC};bd;iq0XNBE-0uWqOdzVb3r0e@M$sA8(u|DlSlo&
z$uiP5ej@VI?2g7%*1?v%#VQ-QMJ)*%@)oF}e$Ij<Or&b}pY>$%3xzTOvgeHfu&b;x
zoyTo^dF8Cp`*T<F95^vOx&a=CdX1dv?gzTLj@zgM{2X@+<QN_&k+vc1UX<<a;|SGp
zD}OhdCo3zFQat#EA%0<B8__br=PYOKlr16;m*O=y4(CrYuA11VeayrbM~{)|!K*wp
z1Q%b88$ks^4s>Equ=aL!k4x`)9b;F{e`V|N+H$`aHDzan7~_%toG2zvH3v$h9J*gI
z@5=%mBLn)x#B%!X-+B2wy3Am&xlWVzt$0Y<c!~R4(~iW!#w6P}??pt89GnNO$K5UE
zZKJ8DM-bLy#)i-PCB$89XTOu@_(X`$;@EgKm%I7ZQ-$C2A{Pb#?qcw^>a;xP;78*H
z3y$vg3DfmI#9cGN^15}XhjbD)_-~VWXoRnK-CVVdl%^t5KVRQziA>557SqI)iKiXc
zyw2e~;077*wyM5n=U{XZiSwZZb486|COufI9euv6bPK)NUlf!~UR@K4+LJ7_$zD)e
z1JdU?PzU%;gxNiGp$lCGoaO?!70)M(eL2Mnl0EY7QMk2)=10v(6YcE9CpHRb5#4z5
z+-*?NVI;J4n!Jhfz5R_0y3D7~T!T+bAjtwG&d}LZnv*0$@>U7TytJm~H1yQZVW?o1
z-+@^c>oCc}wFMh%;+t;v*j|wf$n>%dg+M^=t19TF3~zAZ$m-0k!AeC221i#zPK5W1
zm>Lzyd>=*;>DYhfvyiDOepMJO94@&vks6}N?)S}gkt4CEn^j#pLm_+-PEaqvRlbGw
zBnVXC8VrD*z*ggJdh0C?21u6n!Z-FN*xW~VoipeIdWDYlRT}oS3_;Kic77t=c}V{$
zMlqst!NJI44zB!lU}*RzhX`-U41zLYk5BuJ{n(3T^9Ms1QA9snuZ=(X*aDrsS_Uiu
zk<6#G6i5V7qz0k%{u43KmRG}~a)iQB$o<mX`bQkwoF&)#Q(H7LGCYza1LN?E&Bd(u
zX3UF)j(yz_{5Y~^-yeu4$xntSYZ<g*M77!D@Vk~ej`)6l2-dRS?nB0S{O%-tf7n0`
zsvp=Y51JHiAO}mx-Y_9yCwR)Sc`y53)&o;5MbzYE>$>cx8_{?yAIQ0%xdqyo9&Pb#
zZGP{?xmYJ%#-h`5n}FES0A0QdypfRUAccvX3CeJMl7oSuK6AB>2ql5IGGblk-)vfG
z9En5yGCh(P{K%gIMX#mb(V;lNcXBogd1a;KM|DUiVFeGPMOK0+HCS{tfF6iVurjC5
z8}GR*M`zljB<Mrd3&Zpq-r+o=8vCARlcH32wxf~G*tShQq;qL^a65f(ew*pGk}m6I
z?RUn340zT9ztvg)#a!wY|F=GlFHfcUgR!$ea()hAkP|l*Z{tXeo$HBazwTpWJ_M(@
zp%nuG9^So*OTE@WT!`XTa{atW%=3ru`Jk`KSp_$>H7l1hSBZ3#np^ZH?fpufhmTh+
zMUG7QEJjS5Hz-cjmbQb>@fMc9L<e7k@oOeQ?zEAU%b-dJmu~@C<I<?<TQMp?l}FA6
ztFf*2gx<vk>WL!>R0HOobRkiHlL70SD~4bUZRo3ijz30}MxBBlxfIntJ{N<ce>T@A
zvam3r0a>vPGd&bx9PM$<EU2KW7G;fdPZca$%BCK^9jyD!p)|`(h&R0}*=}V>{!E2$
zQa7_l2GlxzXf+<yKjbE#B1<rSr^mYjX$Su>aef$HG;E9nR=T`k$78p_4buu-TU-!L
zK9SwZKch)h{c#d&l=)JRr$+r=HL8(8`{OLS58l&d&kw)1UdvM;cgt4Dui_2Gz8%Zw
z8D%-K%c*B)ddNQRwZ|9B@3auQ3eqeSxsG%OmCcX0qz)O0Wg#fVG<=$t0!N_<w;K)S
z8j5a%4HJA+ITiYHREl6#WlI5`zx%T1U4#-SRqw<aBEowUZgD0fNv9dr1zYiaaaO2(
zTs-MxBP&>TXeRIB?z%-HUi*zl$Ol8)e63w;X@-V%pY8Ee_G6mZrw^!=OSgg2nIr=$
z?qRG7{}f0XOD;R}EqtS>9eax8He_y`zmi4(aDe8CNhz)^J}@AnwEO8#2k0*>OYT&z
zjCN+4>M|!Ml*zGveufqaB^YyDW?xy`!Yt)*n{|Y}N^i^c-{QE5TE9Z9egA$REveHb
zFK;JqL7tana9IsrTfDNJ(^cwHlP)NA^qtmmY(TKZAD#)?229^c|Gd5@8ixjAQxL@F
z(uyD+t**`~&haE^eWa4japmO2Nbh{F-zY;`Y-v>c1k3T~COCaEAB%}FG8s1jES&T^
z;UF8vUUo*c<b~bxuqeMO;2iF3K3#$=d-DasSZzVRQ0(C4DV{p`I%|7x2To74{HNSd
zff!HW&{4z;bG^qJ4y=?fja>f1?W<S&fSoDv`}e~L?isBMt5{8L+R)3RO~&~bA3i>T
zM7;w9ODqpIHWqz0*2lFK1iqT9hamkd8-VUt<j(}VBfX&B-rQjfdzmid(r=l~BuuZI
zvADcD;I#8DQgpGsE&kM#g{}VBxU9*%K2=7*Lh$$`4_0%}IVpkrd<J6XAR!PfxN~Tc
zUibCri(<X~4HuK9)_LWoZ`j4V4E1d5{dY|&)1?)?QRBjhS9$tG1UC4OhxVL1>U(RX
zqI1aKqx&<0o|B*<V`*WXS<G3sNuHqcY1-NMzTM({7e4~uZXzq7+D!}>(p5&ERue~k
z4P%m`NXJ)b@Y43Lj|C~1pqBIP@Q=MZF8j6DT9Dy_IM2$n7jsJ2R=%|r`!BWY6`TjG
zTTipJ0_MuyiB%2P!q=9((!Gxv160O8&LeJnijxSC8f)xQ-05VF0;0NkgJjQnb#pCx
zM$-1|{sTEsqiy2_#fGc42vBm0piZ&<<PRr`QiVZDf^8x`cKZk<_dKpPsd(*a<3Dnc
zi@p`^MdpRj=w`lFT)RlkXSirZZR6%}X=AjMI;{GnO2*!y!@b)4LHP#9kdWgli%Q}>
z{;H6UWW74o(k7V<d!m)){21D9(sT{-jai)WBo+IUy%4bJivi|+3Hwx^P38>O=IM#s
z4Y^EGxEQiYS<7i1WUgJMp}XR!?LafoU6BD>2S8Aong@V|X&kxxtYsJDb=Vu+`;>+|
z^V9WThk~8Pez?}c+|(6oCCCe&?+L6flTS*iZH2N|yGP%na9+eU4e~1&xhpb(J2Bog
z(-3w*dyy5n6w|3G7d-t0tc2!dPF0SZOOnG46Zc_NS2@x2DksX%1m1!u0#WV|4krdB
zq@OwQ7`lf?+h}m`#=<8;Wsb8&FAuw!{LDqIew+BLI_#EmqzF4zW_7tFHkq5Q(}*yQ
ziD}T=L17xx?hDHl>ns_`{>g}OT{Fum27$-~pM5ss1g`ft7}~i^Md*$z2~#CPuVls>
zAfA4$VTiz@@=9hzNa_Dzi%aK{6<1`q@3mLc@Z*qsD}wxyz%?`Gu%->i;tWq)M7wI4
zVM}_Nc~f4<#)-)B-fnWlMv!<p%3!t2@)@}Qf$O-@mr}Ogj9I~lD(dJc4zZvFHZPLb
zk}uMjDGOK&mTYMr_o-3hd1zw*x7)IUXFE9dwo!+I&DS=u`35b(wx5M078tM`mH&Q~
z5iF9h8#6smLTcej`<o7jYfrQUEYdR!^{Db_Ifq%vG*~M2fV#788$~Z?){=_piiryF
zWH9ZmRm%_(Uxk`#dmQ-KPn3qpDXOd3!r62~1*A;w_(iPsxM|;&NAbEOQ4PcV=j2QW
zX~{zmA7bj}jcKU9-14BMIJ;C+yxIT7!f{PfFX}joqs*xI=Hktc?{I!c!48TQ^1`|e
zJ&RtunJ{LNsh7!JcjNCwU5~1x)pq*qFt<9cLK{cI<mYX8mHa=NqufAl#RIxRaRHO)
z4_)yX!lPSg(!8NlIe(~PtdJ!rJ^iHe*+g}4RwBETjM9wV9d!YNWy42;n+aKmr_3*;
zgEAcIzajiT>XLsQn09<Rxw;(GG3%0+D2;X{RL+1)J@MT^6D?K(Fq`az(LE;`?<U{G
zQZc<*MNxq#%}qrQx0=5rBtNom>PS!l^uexnhCP>R!2)tO4yc|C|FmU>KT!Dy{YB>c
zSG?*K!`n56a<`dooY4H7DIriESalS|0iQm)+OU#*2Y*A>n^t8#`?l-#U$gly2KZG#
z_zCjgUW%d+==%j>s<Vp!v8K8D>VN*2j1q(sqqXxmD)YVkxr5sjN44#9SL`>spn3qT
zehLBIvNlyMA{5kuS3VKVAlt>`-|v00s|`0Rj~HRO>Mf)@zVW>pE85T6e=FU+Ys~SW
zOJw{llo%h%;rpxm(SjKX14hJ(dnfyGNXG;=<3S-f4{BFopH5n@b>BA!TZ@pzxuNUw
z-_F%oZ+RFW8q4>H!aW4yR+9{7RP&H0{6G@{u&^C*En%Q>uuM<~g)xz-msdUYBN`#J
z2QRsrGd{LfYh`5COWO<b*@gLqHsk%YQ&GEfh5Bb#NJvVIt;nk96#J*00wM40noTH7
zbXz9U*A+m+(R73Elg;9>c~Y;x8DaL7w|tcvxX!dH2T`E*CGxWa0qeOcvrfkC-sNnp
zJGkMzkPFl}zEzkBH_n5m*Ddh3k`dh3$I44po=ggKoCO8m6b?HctG$UZamM;u?*)iZ
zfqbh_<%8M_ssWJ(N_`Y6v+#<;{mW=n_(l6DVk8M}aCl;SYT$BsS*x^Dvg6KCbyDTW
z5<p5I|Es%Il!wr(0zH+Ob7@f=E)eOvb*MiZPCc~G$%?MtDB`{&0LroBngaeS@jrV`
z&!0)&y~5#lf<8p>;pdrm!G}&VlGfWluG^W)p(VI=cy)Zqrraq@j924c7rwcm6zZi}
zr+#uG;K8BIdRS;|XJ`+$Z^)x5AqjsUPnSnOV9|L%c<IUEMayZtaVs`tO1{X-X;gXk
z#Lr5gabz2t^y?>)Dz{Ttg2Oy<`!8sF*n4u1)*36?3bt}X0?6LbflU{nlW6~3tGxat
zfDYSfh&P2f5VT7kIKNtI(#^cjuih}UQgs4Vf|3#^{6U^wcdp*0=F<0%uehv;;8o@J
zqvK;(rjfLC-ufCZjXd*W+g6M_gOk`~m?}gwN$?I!0!57Q&Bc(P&-6#qnw3Tl5|_Uz
z3TJDn8`qWeU!yu;q0<_%rY=g?VSux2Jib+rZHREc2PTL;+bI0I{P6gc!5{tHpUxjo
zs#Vl2=mMRq@KJ(iAQeBS)=$b=tRxG_Rmiot>bv<HnkeA5-GuxEP%MXH%hete5m?JK
zx6AC91q}B87<&t-D!1l;ToEOd5Tudr6eOfeTDrSI8V=nc0s_({l1g`jG}57THv%Hv
zUH^SR?|bik-|v6@mS?#Rhr{#Cp4zi#J~PjT8P}6{(A@KeOcVXa8#HlAt0GC);VpsM
zDde8%A8TSt(CVNCC}d!&69bTg9WfTns^Fa|M?nQ(fgj{}TXvE**SDi)8wk33yP1}5
zO4dUBeR4c10BOJgkOoXvKYc9iepGogW#K`q=^_8KVm*;Yfg7||^KnVlDfoRa{qGBj
zH)Y_X!3!a<P@9w!Ze0fFo6k}tXdH{BIPq8JUj#leTt+T<1qw~Nk|0&mZ>G12`SBsB
z;$VT;1pOnVuE!RDmzP}MKOCy;t+YQS7?Od15$Wv`x&{jU%zA(74bTF!hP~APBug!g
zLd;g#=aaL?5W}C!rt2|$uK-Fx0=HA>#X-|zX`xYoecn^HvzV6l%%41;Xrn-3Xgm}I
z9d#0*ObP`iZb(D%5X7J?2@cw7FB}($9%GnWSu)?k21o!T!WDVF`V}_FP~#a2Ji1{p
zrj`PzrN7U<dzTAZ29l#aK!8Do7j0UGbj6cDM`~NgbHcsFFQD0=IB!fa;T_P-MUjFM
zA+GD*j}m%+7Epo$-6{Y<>(DYu&y6QRr0WFuB7n5}R-xoY(ODfp8H`Sk{tadD-ELgF
zUP{aQo94G^`LXBf0M#uBoR!=@KC(j?`abmI#Ll-&LQPwsf<4R~wmIu{1`RU8n$$AN
zkbFH05CV|yp`xJ{Q{N4XOQ|8v`T3)J=uulA!HmVN(t;iWOf~lWnHw0CBNU)B{3uVg
zO@Cs^$oHjUenFZNXis?LLI$=DH`IPRg}#A#-Q<?9M$(}P)!>wVVX3>}2(X4_g~S#K
z4$8xCy`O?Y(MIb1GZ0U;O6Uf5=`Du*tREb1*{v>tr1Qc?N;S0rSZ{=mx{LoOca<q(
zj(*$WTZjQA*v<^=p=j#>dHC@dC;;O*z!hPdNWGAhfJi>b$sQlb<h&I*3MgjhtQ01<
zy!`}{4npza_wLq0t6pP|D!+5mnh7=`11>xE!*~GStWRF7%3<;3i`~5{3?r;}p2bkq
z;)Z0?^Lfm;Gf{XMUA<kFoNj7XMduo;G-4?z+JO*|VxI&^>3xTbS`2I?L5>uVLcp>1
zsL}kVrU8*%dWm$Mb`fzH6kMkc14Y5&;2%tn*nM~w4G5<~hY;zC0@03_zp)Gs!Kxqz
zdA#u|#lb8~P}(4ah0ILsT?JzGbWrM$hb149PuO&!7}=iYN4#6o28n~Ou%!=5(WV8@
zf}H?Btm~JszYn+idC)CwC;$R<A(G5fDqd_o;LtpIgXC+n0&EZonJ>1D><HPnVhLZ}
z*a~l7JiG-fngOt4&WbSr*3AH59f>jTI9me-bd?qw8=PM&+j`$~5rrc{36#x}0{7R3
z-AeW-n`T|7;HWZ8HVmZH){nRc<QdU))}91eH|Gm~+F|ZTUs2$rrR3n4`q{IIquwUb
z{_yz09`rbOM6?6B)Y$8|$Jkj=bj{D;vK+j365+M?#`ehw;3>>IefV*2&^)pu(WJLX
zhF4#Il-SMjKprl1<N1yG<&f(F)L1VBU&1g6pwFQIJ%E9-4Ay!G7#eR22P+Rn6(g>d
zBLJEbym|F~sv3VtVYr~aL-Db;ye{K*vyalOIg;GlW%r^x=L%~VwRs>3E&FTox|X<G
zZ#8yjF7w3_CSS>Q?Hiixyu-nT9SrlH&Dr6aB0#pk_&(|Z8S9;sY;+<D7bW8c7(6Ka
z#zzqyprp0$0Z?cOv_DUPI-)XEImepU_y#(Y?(dx(>?#fLH;G6Lq`YEH-w>wQI{mRh
z(FQmgcO=~@|GrQz;_yd+%Z9R<NPx>~u%+i^t!+8gUCmNlsKqbmuaPemMp?IZMh=5i
z2srDMuN*DvGu)CiyEY*`*3#$iIgd>J6u$(QSV~_pKXaTybAI_$sl3{#=#$qquThL)
z^~7$^9df}p6&kQFo(K>LL(!HG!T{PbMX5}sYj`k6fP=)%%t`E;zwuUYHUBSAD8Qnp
zg<9g_@NN0?lK`X(nmE=3i129O6P*>J*!vZ}CbJQv2JxF)XSpA4o+Am5xTG!LLuX`K
zig*W(!I<$V8K`3SeL@?oPDd;G@IEH9n!Twrx$pzZ7y+(!BhW4ifVkuYEs<}qU7`bi
zV8wb6Q;CAajm8n->@A{+EY3UG*OlQx09V`$wQDchXAt7vfSA(X01Go5F0mwC?3h6n
zBLlWdvPuHbgJKwWFEcZz)+Lno%Ynm(eSFe;6tJx7Bnj}aV<vNS99wh%e)$WE(ZZ3t
z2h&Bi)1npDHLztY6s4nZ6f(p5NQ{oW*gE!^90H6uF_b=Ie70BbXE|1qAXiKKNYxb`
zW=pS!9)pXtqW9N^ROaMKYfT!7Y!?-4X>pA>@M|5et;t~#mm&PB&RWs6>9?~V!FL=3
zgT?4WErUg<c)Gci*blEmj&dZY1RJG>O_Pdx5LQ8#1|}ho9soHrX=T{wgsv-eALl(x
zcuh#JKev(g&=nLQTH^o|>Uk|AWrJV@D1)`WnrC%*)V+PgXYyrxaKNO~$N&>>PfQis
z2h<*@4iLdU>>rQ2J!(@}SSm^(5p+eWuRBTgewT&?hz5XWsFA*(vW1tPQ{ScM0NrMi
z+x*t4_A5RGktqp`!uQ(%q$7~Hzp&MeGQ?mFcbNaA5>ZKRq$~Imv)N9fBXTr!@$-td
zO{b$taB|w)ap=*-#5jNpbU^7jtOi7$Ef|)EXVJWu8++lfYX@Ob&!O(9Y>VTnq;KHf
zWRRMASuZ`zHV_o0UYNU5704+qMh9f5e+v3nP{nwB=!!%i3`^tHCpQc``4jLr`M^$|
z*DM`L9S5ph?gzj)6}sCU!Ci{;20;5;9=)E1@qvB(fjL*=sC>QARk&1(;Iupcm^_=@
z<Xu|>hfv@9!3OAh$B?)z-s-ZZx%*E$ENJ;h0vtqL{V~!i)6*W^?3em4VGn%8E?;~4
z)*$Ef1eN*c{+#kNs5;ZkD)e2$y@-+`hc}hv?_>S%Zh@RSp=;QUDoa-tVp>qoYOF~v
zEVBIEkdhLK0gHDZbkP7{buga-m&9<TMNv(;<q(&ds_m%k$V<ZP%;Qy8DXrRJKPg32
zv?s;Z2r$8_AV6@0`h}4Js*6NpuC{(+QB>@h7)rtfPrs#VI31ZU2JJ}9OpSw&7iE@+
zN-P7@gDv1yNsCkMbGaR6XZEb4ie%4StCyY+6-MEtwQJPItLp)qYySM{4h#Zi)8uzf
z{j26jEo&_%?y3waF4dpPv#LaA2T{V|&X7*YM5Ou8-xsRH@%}XY^7UHiN`ySs;EUjw
zK1|rN5&R)LslMv@8_@CF1z?OwDO$|i!<0&93E4?w{_Afuw}+0+IohKbl^zh210xG;
z3AF?zJ1()&tSIw<*@zcE!8e^~UA45N)<|08Ks46C4OQpy1aD98$f*QUh9XI@r(Wn?
z@0$fEYr<?6u)4;H!$R8*^3`0!zA=6zS&97~6(-Gm<(VLEAoWxAjim<jR0cg1sN$`y
z5&h^%w~9%<PO=&#%w4~m)z`1pA7u9d&I^xC#OiHRF~Z51RTieS@g}AZ35Y@FFLs{t
zMXwqSA+b(!svGSWB5joGr7~Z<z1r1m+|2HK%D$EM%su{0EJkYWN5{#+^H<ABXPe*H
zhXE((U;Mpq=Ytr+na>YQ2b`H0|GCexY0IY7Z-+sWi9DI766CoQ2HrTXc?fB_X1#ZY
zt@oWuSR3pme0u^;`E3ED^5D#MKr)Y6wRE`LJyyj_rQ;3?;$O$MFzRO*p$Rg&yK!g4
za((p^X}QZeWep6CnmgjQwI?oI+QXNXQg)-CKAnF#m=AY^d2sE={{{gxF(e0Y($OVT
zs97O<hhaH3LI)Z!e(v<~W`*&b${e%uQV4ww`mF2>gz=I?qL*Sig~s^El-8z;=TiyE
ztfzNB{(Alqp@lMa?22nR=3T%$SCr_gVZR~&H{l`z&@QoWy|~b3g8#HFeV{_9kSKQ4
zmwed|sc;wE1MVQQ1%E0QzqiXmxae_(f;CCAHn}2Uj3747-HoZv6I)OR37>`aEMK`^
z@;biy&i=0A(7G!Zph(Uq!_tpafAPRtyyCx}Pssz#eWGZ~U&_+CvpU;(r27g@8$Q~}
z=oC$#ouMqvT%Tm(Z|cwW9t=~|OJl(ppT{y>N>_P;=0o<7fjN6h-AYRk*_uBI2<dcB
zuSr+GvcF78CmTCSRV5tRY41gXln3&)rx88U$nPWM!>zPmx<5&5m{;?Hz-WmsiddkJ
zoG0sBM=I2rrzQu#JpmGJ3p1)CTP6K;)GDcp&7poJ7MhGm8oL1x)cx^1St|Tg?44|C
zw2ACVspxwNUSj8pWD(|aUR?2KfgU}I-<cVJc_TtA?0c8>Vc5A_7F=X1jTaa$SJ|_8
zLC}af%A1#hsEAR9TYHu*jB?DTlx2m{`qbCLY?c)7qf?KOc_W>9sKq0dBzK_nupq`I
z^~P!`$e+>o7FL39^#Q;Q$9FF*RCOJ@e<>`L9CNc7W`zJxXEApjyOA?PeKu|U#sOxM
zkqgI~)vVxkR*3V{Dt(W)!{rkE&<4x{%|Sbw7r&BN52lCg!co0I0DJQMY2nLym(p2V
zDjb2T7US=Mlp&Uq+>18!x>L;&;wkPP(L+aM4l3L81M%sV%o#Wv8kw&nZ9x=BN-P_r
zL6g^aQmSZ(H@C$%JGRP2una=1Snbfq*a-Ste*E6vv%ADaPBtbX{C6YXK0Yz}KDXo}
z#Q0!|{h+)%K>PZWyIxOGMjE4b0LFt>bRTa6;K?GhTt}_C45TChR1RsI3uM)Vt<E~G
zDd*19Uoj@|E`?4Su$FqR=gH5xTZrM{2qF9u-3y$Yb$xA4={PRtZzq;r*%kbXzYmAU
z=>VS@j%Vy3u|=)r6-9%og@(HevdW~DgF)%^l|5GtkKhlGFhuJZ%{8=0P?A5&&vLrA
zCMiF5P{T67<w9mkC2soQJod>q7O+F7BlrwSWcEClY#`nb&ct@zz$m(KK3?40wDe-T
zIe_a^hR>upG^+`nAaFUlwlo@;u4=|7@)^JLK1ZqhHD$S&VPK6+O$uPp?_TLj_V5bb
z-$=MCDvy>w6Zs}y1Rr`@y<ohPH-kOCYFT;hI5fAk7axaGod+VO%B?99Jf}JeB>Ill
z^$|D-s^H`Pl?cl7%`M;D@3XQ=#Eh%32h;s_FZ(cfOb(`*;CMO?G#9a-JdbZp2OG$O
znUYy>Zg$m`jB)?wsw2WK2qS_Cdz{6aE8Bt%A<N}CKO;9`3Y<L6CAOXo<+5&QsOJRt
zg50J!g=`X^`c=(|Rkh=Wi+^m7UC<KgP{5U=VfIUKh}wDFZypl2J{O6Sf8J0xP&XF0
zqAZ%al&i%GIkRg8sP{<8`RLDJ8!xBrpu-v5xe86&yK<O|LXxUOWQIk?L4Ef4mrAYp
z`r=!wiw^c>8V8F>_2rGX9?u0NAdwXskv>D3B53g1wU){qS*zgOTAf=a!qBXSCb1{6
z#GdC#dR)*bv*o(LP|=n#fRqXjva_?b!h3cP({tVP-&5n!R&%)YzImcoJ{gk1Cg_s>
z*<I<ET%2c}bvnUnA-d7oruZfmGqtOd8QD92Cz&{W%iJi^5Qo8una8Cu7EYDWAYyOf
zIWK-`;<r|)s}Hqg>6-jx@q$=oCc1#Z5+$I9M>sBfiat;~1Xm8|(dRo7woH}uZHU++
z`z;lL9J%x!A*~d#NNJ7n?hlV{@K#_aa7ODqUh3@oIY;p@IIC-h>zb&3*0b7aOVm(P
z+3&!`O_;}t0@xNY{Dw6jP1tb5k6JTM=`S0YCK#PEShEyoo3HR$1^FfQmDL<SU6?Io
zEnNvQc4AdtN=%-^=`?Eay86%|mOOMos})s1EoSwpDWq`OX_AC^eGmS;c(s$36xNeL
z9$aGWNkn~SxEV{b!;)|WD_AfSRJylp@{kWSZy-;85AuB^8q|*x&G^wZ;?D>OA?#mp
zgXhTGyIOwth2_;%88U>8<Ui<8O{kr%7@9n|6mg<M!93i?o$S(2tU2%%_j;`qak+-8
zxpgAh>@}K0g3s2xALu0hk6{r(j>bVxdQ;pR+|Apn3`I`gi;Yl8J_BdgH+K_S*WrRo
zwhEb)XP(PxO$L4^<Wzdew>0e7Yu3NHcI0cBHv-O0C{wY?lO2^A0ka28REJEC6%r$3
zY$Zg$crO)7D+4Fh#?1O_Ee^7Ks`Km*uVF{6lp7g_p-FJm$ficA2Ekt16iVonqPP&X
z4X%AzKKrf11M!qv84jyrbaOEqL(U*?$8XLXpo%_0ngF`W`k&%nsULsDPZ%IU-=lfj
z*4FFm(RcE2Ik8k>>AL>Zzy&lWF6G7*G;pl@u6=#QR{6a*D9xIhcn740_M)`BVjM!a
zhVPmRT{m9$Wp3`74Y7eK1y&MgqG=+am+3vXm;liepV#J9lxx~1o0y2x&-QG_u^+Hp
z)1Q6aYhmZ6%d0AgbsL=}b(680T46l)T7w%o<8)T6#eQe#QtHlSV`yR&+>u015Z1w@
z9Yde7b|JL<MW6i3*?Gnf)sTa1(&y6Q&u24^>8a@o!z<Cuy;@C0BMJhJB`VLDKBDTt
zxZa&CIvC;W&+^>ZKHN+l7%L*IeTkwVnbn=tvlXpmrz~9bDkL3vW%B!FMG>KI^dk^A
zBaMl(E%hbwkOL(-1pOv+#JIl1&}23J4B91OND3mTWW$er6S_D+%US-QlD_N-nC8&P
z%e5ces*z*yAtu#Qe^JjikM-!&v%{V}5pjiO*mX9!O&GS^85}qfy}4$0)6Sa#N`f%J
z=e}#W5ZFcyPa`lh>j?35YTRBhZq(SmYxW3bw2my#TqkC5Lr#9aD~4O9@{5*l7Iq&M
zJ|(-1nqD2X#99N7OrY1;8(F2koDZ~dAzaTD<;LrZ8ZW)=;~hUD71o(u$aAE*8`~(i
zI!jsyxI3M<JYIKqp5#ie(Y0^o{OZT0fzoAt%!ilAN_N#&y?w+)AdgD17;{#&+*Na^
zCo$6NH*tS2eqzj@9!06R=7_Mg!Bho|xYEvCb5EOOJLh_AUl@jR^8G6-WaYh6fRT{E
z9>S|$Lej7#m$-}F{)dB;W5h#<!`s-GYxl#cD!<PuTzYs(@iZY<nqM(r#^=mAStRaT
zXlm%hU6k3n?Tk&K5~gSncbrcmxsb_AdV|?C?0IwipdUlL1oZD1y{LX+0iCZyaG83V
ztESSmwwbp)tFj$qc{ufo^}YBdQSC?$O6P&^%iyoI*1^M7A}+^u0z8$8kX%=Z9DD(~
zx2~J{pSFq96PrNV268?)Wi+y()NLzH=qLnDm1&@{e0J0=#UCz|`rf@O(|DhNDSI)%
z@Z#W|(uE&=_eAdfgkK$x<76x}z&sp9_)7Xu&Y~3V&2;O>gcFqC9o*>0Usk{kz?!3k
zmY+}BTIj1j{e64^83;uf0B$uW>Tx<v{29G3(rC{AV0guQ(#0SS!h9myGFl9YRq71}
z^RjYUiUOv;HqD8Jy82Kl2O!l~)OuoLFnps;eiGFp5)gS<d)eoQzS5(^y0Gy9pAFfG
zRV3!LdSa|?sd)Ej_v1U}Jcy)$<G8c%>N%Jn(-O*~;NYpZ>~5QP`V95Q_x)<Wk-blA
zPMwE~y(m3?Z-yV+<X{QSa_Lonx;J2v&{*o}?Q!jcb=gIn5`X5=(azD+UOj^IIxaee
z!Nm*<x6E!4<cpyhlL)6!9+iV@FN7mX)bHS+@~}t<nr-?ZIj9Gnu9aWWnsM4FlsLWy
z*E`l*Kk8HfhLAx!K`)G^bkZ}XaI9C=+Oucv%byH0;i7$4YhnCVJSkZ6vfff}IRtWe
z#6j!;3o@rmA34T4K~^xjj3P0nCbYlQ2-Hz}vi(&Ca-}wudX3FGh$RKa@U#lF9ZHHz
z8b^-k!Gt#nFllCpr}BFyXPH^l0fRQBQ(-V?qye08d$!PSsa={fM&71qTr?AFu{BPb
z!~+lmjlbiczw5mf<tn7bWmE1L;Pj?{L{qzJ`{eG^DqMT6h&OITj`3@nabhHG&*uYk
zQYHh*)jQ>_ch=Le1n(D3hAfQlvXk>=2?p(r6spr0=79NK6S*@s%tABkyCShUY8@mp
zRi92p5lxHi9MHV4Dico#YF_en+UH1a5|f(5^d3De_|(D2nf0<z3FVnJwwI5d(?>B2
zsxr#E1?DLRAGc=3r!vFd3`(1J3(@Om4PBiR7~7Lp*nVmiDYfMoq>TCOXf4aQXIMKD
zT8Md%je$Em{95Os!Q26Ur_*vzTTE7uPFP_SnEeIe*PvjR(Inmvq6n~li#CN0Zv^I{
z`Kf56S7>C{l1#9AT`m;PbjL{9=T$h?W2Zbc0}of)AL2R1X|F7Cd~PeD%Y3FIf?&a|
zAiNGYaCX+-Hix=dR|2|2U8;W?O=woB)tn!G#YaY3gU7ZNz4B$@&s<g|!et#Sm`&V}
z50<0t#a1TJ6|oFQR7P0JEzraY)uLKaN}=qbVBG&6j34F~(5Z}<sx1$WVQAi58iZSh
z#N}++I*<UXB>X*TEtxUKDx2Y;ks~3trRi4|8pf*xQ^uqoKUHmV`)7CxEvCJN6SC)K
zEpo61MAKeA<iNCquz*o3p&pV3%L5J|Z)u6}i|~Dd>lDe64&TP8XkIJYLCdb#*R(`_
z{TLkaWQHM>O8p4ajKV7)UPYcFPJ+z^q_Li>b}S5ms=CEt!Y=B?!egFip`$YNj2%Wv
zSp+KOsJUSgTLTxQey>KV3HC#}IfVG?05(pnmobG=ZKDQvH7~r<XtL6jYe~7sww^5P
z3G?B(RU5<GGTQ}bKRX!e2x*tby28ZIuFDaPMd8N`E)o)ZlmX}logM8sHrQw-S6)(c
z7rR|5U9}xrL_M@v5`~kNzTqy=1nH=0-G;giZHrnheH0I*aAQBvMT?>vmuYLwtW5;&
z*atYzs`+gpk{<w<`DRT#{_N|4OH}W^7N<Es&&xc}8>$sjy9AmbIc7aHCtWAg>#MZR
z9t<bE!68r|d9&N6CxgR|?Ag|8m*J}K!}MHmO^t&FZn&969b1E0j)9B5^0|6iSGs2X
z*Uyy@yo}yS`hU+|Tq|BtXr}i7viy-%J4f3yg0~s>aAbOQ*>0(PFC!LjHXRvZoNB<y
zxmy{9(wcJ<vj>u-{CMgoU5LSye9`uKhDgougNcFWH>L3qk@&-;no26S6W4<lh1P<^
zU~9*BQmqZb=dp6g04_jO4a@t&HiM3qOG$mW`Y7p=$Bg!nU|>byyd_@_6CdR=M#fW{
z!#HrVL^qe(=~<2w$2-<K>mO}{8E04w-xw0H3#kmRsAQ6-KerQ5znAL>d5Z{#I|k<S
z*vGpD=xEO!8>F<fznu=sW-ikzxx{zPg)qDu?vp=s6U$$y+jB9~xY$A215+D64oRUi
z1Yuwu4kb3-?`9J1bGn>zrkV>`aGxvcw!y=aUS6=6&W>&D${y98vrMW#EX_DVfy}<=
zY6)ao$_fsVgiA6n4wei-@k1&WH+%%m-z(u*ZDMYP+BnjG@ys``a#{OO;mCoFYU>{)
zL*N$m$S_G&rPT3ZYRMDO-hnXmj<!0MQRm9Q;lWJDMWk|}CUw=UYaU-0CF~CoU9S~6
zj{W5+x~}u(H!|HyN~46*v&9PpE)9BiiW8G|*9*_DNX>X?K#&g2!>Tb(;~rXa&V+fT
zluBF~{B)ypS~cg|jw9UAcv|5Jg7l3qJ6Lk-av;&;&Cd+~&1*GHeykw0Ef|fLa}`qU
zcJy7&3<=ZAsjp?PV8#pg8$9}u3DTJ6#rd-gLm}N0SkK*Hoz5W{zNe_EvxwJS`+a=Z
zyZiutIsP6@yqb7LY)?t%6X)nItUYy|#y|0PkbG~eEewh)2g!yPflVI^Qlh@Yd0}Ah
zH3wF8235}?-*%JP;QFN0J=5TH!@JkgV7PT`__g);290h814f*YY&XWO%?^5sfJfk=
zJSgy&>Nr*{SaVx9?Afi4UF#TxlZ45+X&-}yl_<@x53E={+4`VfqTV>Hf6l}zZ3L~&
zw~)zxG_owf?%|YkYRi?P3)Cy%{6-AHyM?^m0YKp5#$9sX^tICcN2Xvn1PIHa2rX!z
z%CqVpf-UpM!+Zvygb6yw=8N^%Lkw-af=Ut7xobNI;R(6H)IyZR@pk%2B$=mfT5E1$
zqIo}QQ=<9W<#}kJ%``wVIrk0dS@$7B8l_cfz4BVXEmomrs#?qi(XBychfVE6eP1c|
zW!+?*lw;+Xdahe`o<MTJoMFyZxw|>rMC7xZ3qk1$e+KiE2jr3tk$f+@FtD(1O2AN3
zp;RYI>Y6Q+`+wcGb{0PyDe;AcRyL9G97kUHADM%0R7p~<!67=Q?F)n98YG^MWyvWo
zyo%(;X4AHz3poJ02dRa`rZ?~=5^zq^DLR)qRohVwK3DS_#I{<6>-STfc+%x%+nayv
zn5e@kks?B^m>O1JEz4tX^Ex8gr{Ue@po!tRMHYMM=D|ZXZ>fW{`QKP-U2_=GP-~V0
z#;NBL?J<d_H&v|PL=(+x!YI(h=6$V&xpVe_b4fL?A`br^`(qz|G|+Yt@p7Dn9HQ3-
z(}R7r(uBSj^VBPR_8DLMdR1qU#x-lsDyOk{rUuT6UC&RoTuE{$C%TA=^QUX125XI{
z_u7v$DvC%A$Lz1*W>1orXIRU__lpCG)gnPPFWtYXbWeev{i5&ZCS?ETwuFI<d8b>s
z)WsM*U$_Zg{$}APzt%y|PLZxZt+`;ih!7FH$$0f@LGCS!-(8;4B(jO@1J5+=CS}Dy
zD#F|Q9{iIf#m@A-dD4ANeQhDmJNJZMk;15%4y)9BybD{Ht4^acaSGQ%dOC2`0X;KQ
ziH4o-CGTQ&|4NkS7zd;D#)_~!EF|LE3>55rS8@XGEOU&88V(#HKxK?3#XptNy`kUJ
z!MRGB+UtIb4%u(TD9wMxGd?WctQ}DyWepvL8PPu5kHR1XKzn&plu%9=KlEuMFEiA%
zs>a{4Dj&{ZJ;XCwrLF2Yr_iLsitdZ+PDJDAcTx1zs1?yRout{k)QVmDC6S?)X6Vu;
z*mIZze`659ajd~BVlYNOG?}4KF!Q9&xUb-`JACLLd!s$cP0ec>hB_^F@<Rtfig8J#
zoKjGwowtXH`*zuoKXHa*y3IiooHb3+b}F*MmbI^UaRkMx)gMIc)`JXH`?0~vK2idG
zSjDH~FWj2PPIE@5nWz}n@vphdXkKEJLd}va20BSDfkK<?cuUK&T5B_UR|m{i(~7l5
zl#~0<YVXGNEZd2l|J>qJ+mZ)e{TDWKI_`1H34)5lp<g+yu2>L#{ON8D$D1A@k?Az;
zGb8Bj1~+)OWQ@^;WKtM=w?d&Jq0#(A0?NOg$5iwmNXC+OO<wa8(ZlbgQ_v4bt0i4*
zl&?qfrgDIM`5sen)GPxMNLHb~6Pa&`Vu+JVo_;;@L%ncnXcG;3<?)avxID%fw2CQV
zW}(7K!Ak>$LJ8xj@_*syh_+yDM&EJC!$L0w_!lX7Cm<wUH#0&PCRoy>tF}EEJuznI
zWTtG6(Q1}V=7k9^_!1b}rf#`#y=pqv?zsrRb(39#{_%!LDqXECFZ<<Ly5oA3!W^}M
zT~FjBMab_qzu%4y`prLYp$*FOZsBM!Iw>B(ip$Xy8Jh`|h2alrG08IMaiKkv&+uUg
z6Wn7!mp)IThCzd9RoWEkjgHa!pyX(=_0lKAMQ<f3b8A^8K&0d+KZCZ2+m-ye#eeQ*
z40=#L1cpl^`gAAipB^^L1kb+VjL@^~qB}j?Kp`tdFoXjBu$k_LP2T;rvTq%?Ta7^)
ziy`hETQoJW`S^ybG2XKnn+>Na;o>f7=#y<sW?7$f7*5icY})MvIY{wuc=+FUMunI0
zrep)v_DEeAliW19@*$B>T3TXydQi>q;=T-h%jHLwz7G#tobg3<HMOg`%YRAdNc2};
zs275J6W^?t%ZI5tV=qfs=hX*N4Hw6V(!gutk<&m2#1bwOC^Y7OFFQRJIOUw>?UPXz
z(4T;kvb!4!nj-J;-w}T)ph%u0%lEP4d44{(5P=dza)jd-nEM7=$pv+l7hbyP@2VK}
zX0Ls5RO@kr?9O~%Mu#pe{h`llT6>pHjFhG<3u~cPvi39SWbSoyh{Qnpmu_L~zeM{V
zzTXNQOd127ZL~~l9Z5}tr5t<B6LS%zFJ7ns{K~R<nN{pu%8?p%H_baYoySo72gO{9
z<*<mXxM|WVWgQxZLu)dDxuWIQE_K4ZXpz&P44xj;)OsP|@*}@?d5%H{CvGuuZ`jt|
zJl0((6XU(qNcd~4|4SO){Lsl4cb~kJ7f)5?P$@rlK&pLMz1DFI)jgHIdKF&gQ;2P~
z$Wgf6_|pXuC{JvO!neC3tb0$v*ye+Tz0d&@WXaDBGB*_6GEIWNXupAT-DB@!(7Fpu
zP7q!CHp<#h%Qa;_gmM28n$H2;`)?sJzvox>4+&UEr}j}vsFVn+V$7VyGFtA59OQrm
zf(}D1gTCdHs1Lv7aKP>k2TcfdZV!h-2a$J&;B7^K*(zy{8rFx`^PjnlN+)xCp*JCl
zg8xRJNY<#jBc8LF8yA3bt(9y!PPVS$C{YDzen-x&&?qO(82`A3ei*3S|E7y592MHK
z1xqVvK)$2Dh}lyG044!O!po-2yhY7>Jc`hbD!doAe7{Yx!lMx*07(nQB*cD{%>ztz
z{QUSsxC(X32iK5o+#O`G5Xk)akf*BEv~!qq+Dv};7*#+>pH$<lpj7UEGvp6Bpgsti
zt>|>pHOO}KeOUuS<dQXAK-$q}w74_I>@O!m6b0=lONpA?>-H=CVpy5+$%?Z<bj>YP
z<M$SQ<Cp}R@)B95YSuRfa9jZ@@y}huD`7(`ts+JXg-oZsIFsXnH|l&<pE;6!fb!G2
zVzX)(y4Q<WCWPqGef<o^9{iS|4XO{u+6QjhuX#rc&V`;)F}cHk+Pj+`z=k@Fb~0W!
zC|<2(obGivY=>_(DB~RjF+guxjOEjQqy^&o<Ij9ITP)GDXz#K07*X~H70=@};l2He
zte&X=LR|GgeE9TtKuf7%WXgPDwSyL3MDO>kpv;Or`ny(BBIILRe%BLH8SD6r`iDF*
z6qxI2w;~p&twV<+n;zGR?y&XMPcK|S96}btuhm0w`kk*gE^F>8eOn>xmI_@moBU1s
z35Dx&#v#x%;kYu>j+jmqE(la09Si_UA==Sz!HbpCR4r+OXwm%ME1>s#5zut;nOZ(Z
z!OXO&kKH2Hv!a3%8uQ<%)j9h3)K31VD29cVS5UB?xA!7~1z)N9gSvWN<g@?WJA9Fv
z#jxCgFgC5g8ae}vND21jA*IriDLenXa4_goCY(3Hl72LOGgRX*h5ZVfPY^sfJ;qQ}
zwE^D{0|pt~iieG?f4D&-iAmf1*F<Y+8PaW(ohY4J)!5?Qlz2NRi)daJ2E-HTWL`mf
z2X5<Q(BL+l2D;oJ?#(m!4J$sn3N57A*NHk`ZK-1U0dVGz#=VI4Rti802{4euKO@&0
zzxg;^8TN?1!SL61_B2fnRifoTV$M5vX<;*!3ZE&qK*#R9M1)3~f+sBWd-?{CIzC0)
z;UmuB{H2k1e0E?NWRV-x7-UWm1<1`qEgwld{$r#~p|EBNI;{5Qkkk7&n9Kj{bgJaf
zMwW_gvrk!fA%=xY?!%Hqpyvq<9&2C#p>DjG+%+SLwU?1^<X_SYYq~bs=AKWdD&@QC
zH0|P8Aq%1kO4Y~g!|%0ma!pQF>)T=1>qRI_=15Fl7~cQJK}3ZuD*)-m>59LPd9^)e
z!8%gU^BnvuD=TZPN|}%z85x<|D%^5CT&tgqG4JL*tnuUA-Ch6L`J*}J(;)L>gz!5z
zFaA~3Y|Rq?m8Pe-Pq);5!rXl5Eq4F1tgX?)dXXFYbF>Le!TL5OYc7k;<Kg^K)s=dO
z?AnOuWZ}Z#X+NDL76jdrsbU4A{zZxNS~vzdk_EAY`DeWnEF#Q>6nD{x{=BGGV3DoM
zMPI`_3P!`lK#%-QKo07!u>~_z&EmY=0a}UUpIKrnnH{kb9L}=PKkYPvL3&sxvL1q1
zvjVYIV}pK1#R?Ncs}z^!<fi>`c#Hb`+6HmQk-Hp?B6uKHjutAxIJxXZ(&8fo!}z9O
ztj`U<k0N~vb(IzJ7ecrn6e#8m`}>uei2mXg5}Q@RkvbLPv+);c%f$cS%n`zH&VWSk
z2K!4bCF?9^p7RrzmuN&j%!0aAu_m2+4pBy1LEGt4E%%JZVzc5RBFjFI@xzdXd%#%Y
z5fFJ<zIbsC_w%th5i;~?Q9dnF@#Nu}FQR9dHL!n5!$7}z`wGW`t-&mhR35?Wx{&HY
zOGW{qmBkc|5>2UEG%6<gA2Cs*&3AUlzwHx>x`VL9?IVGa*ZFA%ZrPnfjsFjaeRN?S
z1)_cPGcV(xpTaN@dYS?8lPJ}>)Dp}vBKh;B8)10Ig*+=Qe4X}Qm6hX_d?xW93H>Fi
z|Ge?(L;#PYf~0?Y_Q(fG*l({VH%Bj0V!I|OJrxonYa0LV4>xbv+Kg-AJ*<L@=_mMS
zd4H|*Z*MXLyc@hEeO)<te?~SdF}uuY;*`4QTTEy_32MEIgpEx8go=XXZ#3D!A6OUX
zDHh18v02Z34DY<gM2ea*tBS%L!IKzMFG$xL;Y2vrgZal2|FeRd3%z>-o@4bnwUhe?
z8g{L5Y+Z>>cBnQ!xgFaT0lQ^?yD#q1BlYhNP?5+oz+22UXoXC-cfPH#6HH<p^eD3^
z$Dg)w(o0;C?fd{1OoW0koUbT#WZvJB!-t+UyPcrYBfOYm6XlRIB7fEI%y_C0d@rM{
zSK&Xp_LtKA^@d0R_H}Utb?G-1Pi<D=t>mlBi(-g=H;b8aK84%pYV_XKbOe;Q-ON5H
zu@_Xwea;%0g*vEbESMOD;X|IaD*X#DiWhSrnnMkrj*SGNi|?d_fe(i9tunmtz~C9y
zch$r+{iS3mC0#>c-LOp0_5Y7QVq)O2U<i+y1WI8?u`DAsGV5rH=uS8%v?SAuR6o6W
zHH=EbvtG_v5<&}I6Oj%A9fKzIHTHG7d#%1^ch<Y!cDr_75;!x}97@Ofmmih#QXtyD
z=_m0yQ$ieMI9iePiYbb_q_}?Vl>cbMCRedgm3osq{_Y=7bn6cO`9C%cXb{UHL%r`)
zjk~whnPMH(s(No(Evucd6Q!h$`bJ&^@E0{^x%dZ*tfn~T<B7TlJ{KZ|$;L%LZ+zDh
zs}H4#7g=2Pg2t0l2e$}r5E*jVE<G)U^wdz58WQ}+5dWs2zdxKuP5t`7`fVrtx9MWl
z(9>n*_;M?4Ll=^??^9Krwrx7e$4cp^%+GIF&kEC`@;)v~WR|+8DnF$Bb?0`g&Nk|j
z4Ai!K+$n9w%GsAHO^do5FN5Vh)mha-&zITMDqW<aCzu)kZ^8ILUIDo*pZpMYS;Mw;
zp3HVLlv@a*Dmz?q_`Za-6gB5{l)rf6vzH$F1e&jO>xlAE;Z<4oc2X1TEQKw~{+1Ru
z`|)!Zi=%TKuKKR^m9EuBq{tBA_?*1w$~MNY{%=zakAmuGR9wae#@dfvna+(6NoH-E
zFO|vl#QPmxCxJV6pq$cutXi~?a>aY3hjg!EKppRrZm+}Eh8qzo*d@HXZ=-7**79)p
z3gpZ)d*~H(x=w7J@BAN2_W6cRHCZVfn~y{4r;&E(o^%?y4}U5McyJ0Km)zx^RX-_k
zuivQ3kG_-i{+fMvA|F2(?uNw{kFi-U8<`DSKIh{jcYNKYf>IVP16v7vsmd?*AETSX
zY8(Y|D_-PtMIXXr40efr3t2W9{+s4m4EO#_;ofk+6|*hz6#eq*<i4i(U#6PM0&g){
zDxrP4%I{*?s<(Ghti1;+hZ%B@2+9)C!KTB}cz2M;<BM;D`5E4-an$fti;8qOV_c|&
z86gF92lUY-e`emI?_xD;qDD^;8n7sTD;M~>8r|YoYJ7ZoS$0FwUM7dm+}OX(VTsGf
z(#-j^t+mI<V*zdAi&3>Z$Ew7Hd^zu&Ou~vNRAv#VAF2-|ahR8lzeeBsTh!#HVRFLm
zAduL8ida<`kz&k??`e`r=JO67IB}BjW!8i$ETpJ5KiV?SGn778_VtdXyU=wKp~EI8
z?ngYaoQn<2H~1O2xbWr4jatLOWDgOfTndcJ7+utGFgs8D$|sD2BfE9ZKJMhj&WF~e
zdi(On2SJq>-Ia7zG1I<w{x^OL)km%8L62LSOq`ruifyK9=IvJYmQ=O^;zPNxu`HDS
zddj$ulOdcx6G5@};O+-6PjqMD839UC`drrN;3)#qd$`-w^m*(6jKkJB6&%oYJ-lP^
zZBp%18E&=f$5-m?Dm7T;2=yp8p#*>7WAC`n*Yvo_iY2a3%3~xapVD5gABX!Zt#|Hy
zH#hv?O5h4P5@i<PLTNz^bu)=;6c3S5YT0VGztNN^SbsV~(uZvHGPxEWYYs6(9|?&l
zS!Psnm2yeS*y$p|ya<W=dM_1~t<<nMi^eeBNdwr{FgSVsgfVvzS}C5Hw8{3h`&ZP6
zS9DkKtbe)nD6)}vII%3hLe513Ci7m%+*li`FMq-VxL>h|XH#40-T_tj^F+iF9$Xr1
zd>tV}<+<xR{w~?Hy36*e-AEiq?a}M<tVeUl0@bOTa)S-V&vVpEN?G!iMHwvI%H3y<
zd0h<S9;Sa*p!OF!*^NwTAvdJC5uF^2P(_rj$3SL(Ms4=@fxVE?xGa`!#_zf8;WX-D
z`awqd9Y@7)7Jr=FNSbOLmREgG;g>?Tc1cj(=(_r;;WpROH{}5FBpTL?kA>^%{St+1
zJEAzF+r+C{Rd&BF8r0dq6d2LJf(Nmbro`nr7iQC`9il#FEU1Qi!veUd=$rF6-{T+Z
zw<eF8tyU4ilDGKu{c}4ti0_DaB<vtLcv`1DLhRzDmnsL-!Nj(9ZT*G$F>Qw9@<*m)
z4iJ_>%vXjCtd6a*8z6OF7;#XIO?~zFgg4OjV9EHr=c!g-bP&cHof*}zO))IxNDj|&
z?)XsX?MtO}Pl6CWp`5lB#&tdpaqD<BSFX<EVji|Wg09)}!E^)3Z>qAB>hMD3Kg$RM
z;=(GpYKs!rFey(n!T7zB+x3VML0~rVp8o8z``Z0D+2}@hVUN!Y&$7SqF~Yx>B6-`T
zrPT)!VWi-+b)Nc_I?LYNc~Y^Ubsf+ZW(vIo(G+a+r~xaDvcr3(=4ccVJTXF%W&*xf
z+OLG5nvo%(J2M)>>@?J?dc50RoZ=tJ*<jk}ES_lTkT)Eez;#Kk#~GzNJvm_<tMJE%
z`aD6fm}(d)Gg%HA$#C%X_)GKt>}c^s{TZtz$rcL^zJf3lWPsZigS}-2-)FF;Ic76m
z4OTT8HL}Y(;CG`E{DL1=7_UE2D>D+xcE1hoAQ4T8A(Da^>#6>=l8d<xLK(uG=_sUj
z>{kR7I73jQ=I=%O@U)bm4Iyz9hDp4ot3>J?u{rDQ<IxN~Dkh}g4y~0^HbY)&b!<T$
zDLPoU8Y9DNB_Ts1Lw(ojhw|-80{GhyW4OsKdXhslZ^Jh#fmAsGCyw+f5BVZvIMX!k
zS>#nm>p&Jw0ho9)S&pdq=i3()cYFh%4c0p*JnNcfsU?f>Tpo3h-mrBt>AfKhhoo3p
z)IT6X3sF5l{AZ@XSzoN{3_>klL45Jymx_lbH{LG`o=hQZQy%pyq1>#kdoaiNAx<Mh
ziD;E!ceuiiD)w(icQV0va9yMvSU6-V_J8GO%^mJ587z5m<34I()rZ$f8^61KrPu9o
zJ^!+wc&kwGqPk(DEAXCA(5R4Z4oioYQ&nAcBm0JDL95J8hni{%UqnVNwJF!D^5Y7o
z>Iw<VRP&=zShX+%CY=Tc10kC#WBwAsFYU+@iQxy4aXnL>z*`#>r-HRb^T6N<jXL?7
zAjM*oiTLw=oikL*F2@_$VTeEDP|SSw5~@#XWW}m%e!P>5qy%yPXbgr=n6<LK^p?hi
zNtY*u7aAQ}mf}}gVn&EEV*Nd-v(<?laz`TA9Hzvw9wenZ%#6Z>Io)^%BA*S^PIewS
z$L!mUl^;d`)=Z4ga+5Cl`=FpU{;@A~iMK+77XS~hMh$09e9JR~16x=9y6mEE-UNru
z<in#BcFlG=0#ZL=KOAoT*fOie1hJWR1QgCHo9a52)u^|t)38#LLFK=GF|;SRxJ~1c
z2pjc{lh1P4;sGV&ASn)RH!M`=SwINW=1>ypiw}R6l#n`8NOJfQ^eh>(S<g~2O1V>y
z8W&PR_uOep*);xi^Ay?T3!C0C651BO&k*M6P5uZ8?XhM7xQ`|FLElt&<oYw2s|wXK
z%u3zLW{j>!&n2%bFEeC%c;zePok`=Eoto*MK{ePgo_}^du=HD00O`%<2TyW`(TDGW
z<vi!_Ws3#fIeaO;AVJH7#5UNBRrmZo%k0OUSodeA_tdn$aK4b^&7Z-CyfmozNWy9s
zY@vy_mA}r86o>4O%Q6bz5tIX*10>2D_tjgb@o-M0iXmB@3B5J$^t>6O>C-<xx(609
zD!XHCmEBm?7YUm@;Mu56|FWDG;v%HnXvgg&D<H$Fq6Xq#wYXePkj2rCXLPEpH*w=F
zSrDS}c;rk4f0jUh{M(C!oS#Q7{l%iOh;PUj=VoiVNoBHa85bRb%T>AfIt$3j(;i57
z$a-^JgON$ZY8qOW^|)XNmwmb+w)oEzy*&e5=<+++d_vZR5d~X~{U3|$Ba`fBQ7{k>
z5_@2O-Mx*`V-bF_e`$L6;%ya4&eZDwfvHK1-9Bt$fsX<EM?VeAslC?au~QnEe`2hR
z709tyf8NG`2#%qr%eS>Ai~bP$dE+2Dy<nE*WumX+VobztHqk%sZ8;WjKEC#V*v+0<
z#oN8}^s;Naho@yLLM_kOk29%zGD2CXURp6nQ#d9m#$iXBJSWx5NUBmfmqfA!vnDlp
z_}8??TA?cb{wwyJPwf)e7H^|rl={c4#+ePxD4^2znI<hR5xlR4QK=fDF2314l1?No
zy2yE$Us9PIiikpecyPk18s?wgW(X{<T0(auR&WBlT~|mZ^^O05d9l5ZV#or9LBeP-
zEnY?R_mL4HP3(yVt&eL?9&Nd-&FQ`IEK^3cPcSgV2Pz9njn*+IRKEyRQtbSIO*?qV
z*C4w^=-H?_ckRmYX$pbEj+YMpCa}i!*~_Kuu2^r{gZjC@y~rqlMD<1Dr3HLLSm0%J
zn6w^v^2jzM>}ySHBASiHy52`h*WNsnPZdE>qFIr_fBl|v8ufU?$!c0PukhWK`Z~>v
z^`g&>n`c6)(SBzdIgN(tQU37RA<ypK1`27g_L^TV(i<&_dr%DC2c4N`tgf%hba-=}
zH~%tdxDtGjJQ&S&G$YJK&LJ}S^{W@)iP4892>p3$`0`v~GI1=sCFyrokLQ;ogM{BQ
z+1F7{ztJa;iBp-TJ|NIicR+|?8$-98s8JiufvZ(ASLx1mpf#NFpRelvru2NdF0407
zrK5qy7a5N%3D>^+P{H8zW?MCf&8F<eH6!?EK0=Jh7y3ETw0FK~@#8z>-*Q((cqyxp
z>ZQQB0PO=l0n10W*A!A~>``XKq8Im#qZesE{Ys91iSyWK`o)1LB{3(pUU@`5f3-H(
zMAC<3sO3Q3-&qrI=x1!Clq($hh{*?k6fhu4^JZ~Sl@tRq9RPOtF?gclCy#u58@qia
zYsFL+;S7*2nsIwg<-=GG>0&nTW5<lC$Vi<8+D8i_vF@LDx0Sx+0fY7fbacx-n<U{n
zE#YP;R*re+8smGQdyDKAysV7k76XUOhksb^9#rio>dRTi#UhW_r1F+a`xv8SvOI9V
zP}Z52n@&pO4x5r;*tcpmJbc9VbCnV2ezjht871jaKpgVz+3en3=N_?k-4@;z`!zZI
zxSKP?DgT{We^fGSM?}hdEene818k{arMgUXte<gO7i@l1mYVDiV(l^9iku*?vubj_
zY`3<G-d^!w47*;i&C$@}S(Af`BQ^1HYI1g>mQ6ClKXfx%2xb`F=;-s1E-6C8zH(ob
z!Yr?_aektlevz3{u6RJKR(eEDE~CtwfeFh)cAj8Lt<;X@PMg2Tee`B`>IYr&dxU%8
zZ9;ppQ1*n&!8{xH?s(t)o}dkE8d~4H_APisSp}_Ct4j7YD$R1fX+Bdzta27_`QXuA
zO1*bPZ7sQ8!%}cGORWi#Or0ixqUHUO<?4vP*$}X&69ieAB}%mK%n#D#1W`YHvHy&J
zdKTf+j!TbM6+1g~9?NBb<csvwYXVmiF5|`Lw{dXGUlw|(!A5n3{yHm5m0mI{aB<%G
z#%4fb=JoJA9+L(Px+N?!wKdG5eYsoz)$YUhlLOj<wShOBU-kj=Twb8r$N!g$)(5<#
z!i--U16+fB&e9y_w)jG=)H9IMp$!ou!+eThO)afVF&AD3eOW=5dqB!dsm$gq=@1(`
zMEd4v>`o#pEc4*-b*4^tC*fa5V{6#8RfLMJW^v*thz;UBd8sqLM<|m5uTdu69HC80
zu}l`{*Z_qmA_RPh4pWI)xrryB9KU^q)7@PQj3mcQoXyjFD6LR9)?B}wW1T{i_fW;{
zg<^rclB?sa!pC9jH8mY=EZzK)yenoL1GrBrVzqU%dfe7%z@0lBJkfg<L5(8V{sp<?
z6V!+CH=s2glhidDNz7-!&($rDDY{XrmHYM+2-bFDmM8Rk3UUSAs;L+VGTiHOxha2d
zzqhdmk&itvmT2VqZzw;ditID$ZVV&3N``ttEiKj9aw4r~R=$>^wthnrwhxQvFb<*W
z>M6^d#rqHCeF6J7>SPInbm+}<faM@cv?tWinR0tO={vKG>PGWqy9KqiSIoNw2|hoJ
z$tBAJ`WXbzJ29On`MD4`sc+R39q?su)of4m@7pYR|CtQ<<u#U7JyPV_9^S@RsKFDM
zRHRPZZzBv9M<zADaX*=G`^A_mEg(B9<wbvZbFlK+<4<i!CR-bL^G+J`l!$Lh@<yV2
zf~ob%ubnQ1F<=n2xnAc#c0W$l8djJR^-M!5PwP+qe8Wp#sNSR$QuO)#!*7TYnE{p0
z5Q%<($Ml7VeUIbReljb$z~*==%|j+9+ctr^1c9HaL2?&`sX^f}s=sK+?3oZZ<YsZv
zlrXFZhHk4xQCD@LKU)-<JjV$ES+~DqhY2}&yGuVI=#}H2@MaDk+pNhPPU8+Du|JVE
z^`!XK4%KU!Pg=saI!OeW!K*2peD5Fr0h$T`^5fRSwSaw=(4b#4&33@n7aN2@)6Ecy
z7MaY-t^0$nsi!^pOek@i;w&$}@#Pz$=T8sEM7`b#NVk0vya|jYVSZ^^6gJi$jwyNV
zgh%|!2-y@1I2cDc&zcm^slCa)q<%y9CN4Rxd^?8Z>?=t&-r+p#J%Hy+L_tz%z$GG^
zTL0EDivG3ACy!flOJ4zXD|J6qb^MpQS)c<RbNtXd>yPSTLXk(ga80$CsBE*NNSd<8
zYMuQ=CVJ<o-!JY~>)I=}C)bD$HBw&V$Qdt0yo7vu@#Kkb@^eij-d2p*^$P*6cJ)_m
zYu0wV%#|$({yC!cGln%jH~L35KO9vMeb4ixo84hmIjMu4=KWi}*pO{GS8{oHYQ#y&
z*X&a9&%b`ZyGc`CG|O@L)aj|ojUUd3`r&*nrr5ZD>Og8a;PaC!#A2O}j<x!(?Jg&~
zhW&iYi7yo_Idj8hp%1&zy=@;v&xahs8F2_EmyZ&PJR2P$3}Jl&bE8c^P@5$2wodix
z^w#8FmApT6&!L6A(E>7}I|h1hr+u+V+=G84lxJL_3i`F<A`(jp)FNzBYV<dNN35P7
z(e#2cMmT>wG0=keYDGG#e`!G|RCTBC>&=C><-FF2nC9BhHV+9cR~T!sOmN!yo$~y9
z&=b!8>~48Ve`x9bO}g@`o8+HtEOg(DEyV1R_~WyFd#+#*6G*r#y)M>ca`oyyXEq<9
zGY=7iZa(tDFT{W6ss4U-G7|42^hvqOZ<?$M{j;~$rA7j1SF2H{qx~1{3}}G%U8PT7
z{o8&Gq!3iZzJx|yB8R9=;Pm|;|9MLbYV4g!xz{oiKdh}Mrf!o%)nZLL)^ak@!7719
zf3Jc-<7@|DxowStEaOx^_xInV810pI5vW^!tlX!w^ZBQMp{WM^yIyXHoAl+ixBS3_
z@&mIFt>>TNGnuS1_{EcRi2>cT58pM=XZK`t<q9%cvWGf>9{ihNewYRLR31Oa82T&6
zxcZP=pD77@afosFvfAE374u&PQYr#0XI$m|1H5iyy8+`<-90!02`N05C`1ez=TY1L
zNp*Qve<2VgLwVzE7Pki)!!75vl>TdrjuwWpqrr@2T$atouDZsiB0xUsOuOx~3F$wR
zHaF)TG_;+ny#6hH)#$h5AD}TxG%x|hZY=Kr=yCCHuTDvD+50-mxE54#dUpOUzn%=|
z(~smTAOBCigTVF|3Z8dkdY$*ow!1(t)OjD~$~DOKv*s5Xx_`SjHA<j0I~eI-{UJEK
z)?Wgo>)$+prjh;`dw?I)MVjUs_Np4?dt%(6%jW+H|0rSo>G)z%2eXsm&;Lr=pGtx6
ze@+%lpT@HQ*&r!!&R(qEUmq#l{!`Tb`z`p*U@tal%NzTV)1bHJXF%h>WO3|Ll^M7=
z{O~`yCy2gNRg_Kn`K$jo4IUZ9U_>5vIe`$EzY=|a-|XZ`=dE=<UHUm<-}nkh1PE-Z
zot0E6{=sHY7J-_77p>YBkHsq;rWv6ONJh7O21E&(6aG83H}BI$?f{C*EOx6}HY^iw
zPWXdl^F=Aylr-P-z8XON$=_a}?ywdpp*;YxE@lE*7L*v=5i{4=>c66wzutrs-1Xw>
znM0OjblQ@Fn&-gd4`r^Ql+V2`mnS;!|C3_qSuh>pWJ+yW3q<5dY@<&Kcc)(}(WvbH
zPy6G6xpItcd>X60HJt#p&d;R9l{N+ckC(R8Ua1bGQ97tuJG5B3EzAFHec}9rK!S8$
zTy(3Cs&ACc@SS&~=iZnO4kuk1`QNk|s@Xmep{BXsy{eXOq<25i>5m`afppWc=DtJ>
zjm!TdQ+CE=uFhy{NSXc>aDi%k$}J`Nb#m0;${JOchno9{@?Xoo{SWRPzyt1GIjXu=
z+gU?-`!4jB>Vc<$9RITJaQ;)Wd25r?DbQ*pQO!P1WsQ}%BKcn)^e;*N_Z!(WSeiJ`
z$EtrS!&FaUDsqP-{YUUR+Y0~^w%sU00iGZRwwuU@1|v@__zmWnIfaxtTg>KJ)$2=r
zwQ{QnI_<`n;HVh6r&duoBcX0Ki)79c{ZYxRd#!n-)O`^#zQQ#&f4rP|*}a<d9|{PR
z5vqf%dz(Rf?xo_X0*7b0W3L&$E5XSXscVTI7h~5TT^76&y5_GJVJjjD6NWDAQ~+A(
zvVFS0M~7_T;jLLcX0%nU#cG)PN{6*YE0oo4w9uqGFe%KA-I`&NBo4Wud6gfclF2lb
zqb=(4YhJ(#Im^S@--2dxi2)R0_9B{M+_V_rDz~;1CsoSede9qrw2WoS<o$vm5@USb
zDK$wnNM<ZHeT$pa+ns!(;E^J674e~moSiLjbK6hchDHTBHq(ae&YmRW?7U?u8llts
z|F}A<xTped?JFQ5T}p>2Akxjypn%fdG13jfP(w&}DBUUD-6<VIcX#(t1I#zR=e+0Q
zyPm80?Y-*%JZo*z@Ooka>>YROz2WU0)$Lr;Oqq$BoB$YyxEZ=w@<l%@!yv{(Mwxyc
z%{k2xZv~-{;$7KNwFrBpkLedLR>dQiFp7m|bW6>KGM}27R$CY^X^V5~qvF+*-Sc@T
zx7i;rpQmQGxaIpTVKdb{RT%#TXVim8UyZ*p`8{m!ZQ*yzChhIG{}wu$VD$MlOkjs>
z%8V7$Eu}-lbcF##IF@k<IBngiC7>FGzCFd~+<wU8ASmKIPII8vk?UmM&V5Sk?(+~V
z08U(lf?Fk|R;VIene8y8vkb$%wjnF<_iZWH5lub&YyIe_U2ERdlw6T*v{r3W#a?tS
z$=xHcXu?{^kbH?r`{B-Rh5q^@eMJ&MaV9-ug-zLT0YFrDBu4~iRsAgE+>meSsJ-PY
zJxk^>YjE<%G7sL&2Z?S6vy^2T1c6^}#9{vO!nZiSxcEm-d&?h{-fyR#rO8g<3>Nbn
z{+^oqor?-7vr^v(Wt<j0M5)B-4~#*1UVh>>N8$O6n+b1wtli&>0ds0w;&n2*I;|PE
zGY>Zj!&wW?F82rul!_!a0r`Iwv~?!x70CMsP=X~3pgkQT8k+<1R=kcC_(DP3&C_K%
zb1e2b)x5<EGA`DwB@{CoxR?Fq3`5AGqNS9#TLdQ>OiNcyc1s2B)J-k$6Te$0p^u19
z*44PeQk@_MuoEb!_rhPd!F1Sqy_fxO;gp-ORGcAPM%8oJTAb_7;95qgWvlU;A&Fzc
z$ExVqeG=u>ek0(a2}MKBx$%2^AG`mpyS|g}jC|Mv?pZAjN}7bc_a!IQB6%Y^{TEuM
zR{6p$6^rI%$g^X`MSNh=l8g;M1`F)>s|)8kSMYX|i&V>^mS&3#nsn?|KDSTKLtE@s
zLwgyQ{6BC;yL};{RQnq|qT>?(Nh1Mq1VQ@7YF2QA1I)9aPc?OW5!19bRJOK;&nLXN
zr+mbtazGxcJ3vDI)Q|Bk=;}zRqRpHT>uV;}QyTNIa&+&#+8(&GUu$4yZ+2E+y*$R#
z)!A~U=6?Du!B)b?A;o(o4z%IF?|zAWLt&kNS|;ctgG6~7JoB9H#9eMFB!8&%8TQ&~
zROsjLV8sTQ-x!Ugql95}GH#hbag2r+N3Bg4f=oG$XXL;jg;BoZi2*Nzs1rA5g?N^w
zKyhT0NNe`NFN1T<Wnh21AN|h_aqP26byoF{&2D*edc1=e`ri!+N$i%Z;I<0$wBR=3
z4(nX1%T0U;3Ym53q!Od5rd+H9lw>P0wk0Evk~Dhz*lV4w!bf24%-F}h>Hk`Z7)qqF
z*E&O@xZuCWr7sno;CBx{v<tKM7@NM(7<N24g>%YoF(_$3$@p<axCG11${WzG)X~(%
z(E!WSw-1QFJdPQq3lNtob{%W7-o+5gng8LCio9b3-KUftDlynPcL^Rk>ThNCQC9pA
zH^~rF0kJJMacawuhqg8vdK1d5=6&pNKR+H~^bH5=)A$^E7wbNpEFnIblbaFaS|G)T
z)H|BS^<D`FgIT9RYt||W8GU!Sc-^=xg-2qmw~B4JgP~PNLy^IL2s<&X0js0!@BMVS
zj&91qK)1-~?Qh9N3TEOkeX_2h`|8z1lvCArgykUtolviec(QowMt3hR^TJm48$(W?
z6(m<mDK@cRju{?Rmf07Ew2@Zaan`p@I;h@Y|J1RO+TxXOk*rj2A{;pUNU9)_?#g|I
zXvB?60b;ZZP2LQ?!O;kKinv|hLq28~3Fgn$AA8(B;}Et@@~q()-Suj1c8DZYZ1~a3
zq@tx(m~HMd4O!q<r1Jm2w8n*kclKN*NktIR&CBUD!`$>^fTvob<JZ4t_yB(((ca>a
zXR-yCv(A-w$v+to><PKe;zb*vwZ;9RNa!&Z?Cq{5S&kE1wp8DIlpPE(PVC@EE*SY1
zU<9|^fN)v{@})_(AMiM|-$uL1;9dSjcNS)`ZisOKEq;SFpP1OsOprzc#|ic4kA$?d
zJlgEzjak38Pv1BFt*ssYJ?g=0_#p8OmU3}7h(BLMt7s>hPw$&X>u`|qwj~=$i7^24
zXUn6anRf!0sfoBuRw<#I<Fc%up>`rue6gFtMvZnRIH5@ifWqzvd?+U6z<pjQW!rwT
zq#n!-7TOQ^BhihlbHb)xSL1P2&%$xL6=Z=vU8bSAIAeQccGKgRxqU-@`upU;9CNk9
ze-F#C)m8}nS5-yv*8h0H8Ml8w$D+kGZs^`>9!PFIG6h>d%$^(0fv!&E&f^XtJ!Vlf
z8F%RZF^i|{quZbV*^qym?`8D%kJ@gHJ9UrP*4?cFYy8!=`2XRz9EP7b^U^a~xxh$N
zyIoZcx%iSGtT>+3xyB=YgjyQ|@b$b8$~T~cf@xyGW;Mb|gI5E4t@xXN(NVz$T-Si)
zM$g~cI|}$g$6bb0_yOc1WlJB&Jg{gMTinkG5QRQ}u5(a9m!~Zt%I<K;l9f8ZuEn+^
zH4oflciKD*hD&<ubAFq(*FG!%bdu~@bS0Z=%t|Sm3bkp!4&0uE8fy~}8p*`{jYxVI
zjG;FHQ;DwX(*S9^>_y+k6<0~MSwZs@W&oDT{vfN^6nP;^?IM#95+L^VTPZRPdz#28
zbPhcA<es>?ucLh*xmXKThDodJqls{xMk+0tie@<Y{TP^IRO6k;CMXCw(1FATUj*x9
zC9TxTPnY{iC^L&q9@_nudMf?QTkKLG^#U54ko*OP^pB@6r$3tRkm3U7IAr^aC;Ea<
z>4gkQ24iF<+w79dxsETlv>5G)2zKvrVV+Q%*3<$S!;$CefU2N$qlt&!%gaX1W%Zd_
zR=;2@UA*r*G|)aEO13)d<KZMCznHZoKez6`ZE`**&S3v&UNnb2&1WjE(iZJ#2Q0UI
zhdRTgj;W5ztp;H%nss&H3b)6d7C30PuF=<|-|Rp6-$^zG1Bs;Ub%k+#6{=p1;l=38
zAG1>YKm+8`>Xq`|Ta_!F(a8tY(3}zAX>8@%rnvi;Kd$IQ<VQI}qD%>Yp5#MZoSQw`
z3$;-6YfP@m*puvw*A5!{4!#kc#F`BMJc=3P${2G>w9)pTELfzHyKVjgl|xI9^`Tt!
zSKhCcZx79Yo0MBZq*_vJOvh515IETmDc$|B!JHD3V5X0YePAW)K4WbZGumsYPcOOW
zwYT}xl|7&Ymu^sx%f~ypJu$c4XX?Pd$e^e>cdnmLn+Q~&`Nv0K<(9}<27UND?#LxI
z9r<w4Yz?Ds&I7&NeNDD&_~mNIW?GK}FvS67A4o^RkUu1jq<P{MNU?UH)nK9<RzH9!
zgCBd|dY+YELG)^F<0qRHtj&1<&+W;Ae>4AT2kBOTaT|w|gTXgoZ?f%13S7BT>YRR%
zkkpOsf?_lG{&Ay^G@wyFrPj0hvHEUK3H5!8b?`g~WpsiacFSuitXwXF+4lXr2b<l!
z%bPe?)1F!EjCan~<La!dTN36g0j7l83mj}Ri4W;JBUA;$A}lxf&cA{0uR&`og{KFp
z!yuU6QC=_OE}FNy7LGl*Q1vt;(lx%%3gxBmhvR>J=)nXe)K>V&=K4vtex%=-{~Kzp
z=<?tn$+jCiJN~n_l#?Ci)GG(RLo71ikl^4gknQ-F*Trx6Q!yLf6hlvC+?^(u4n=%Q
z+rrJ;qj$Z&CvJh@8K><sm6k{JdlaG>7e$`Ax!tOiMbU4Uswks>(=Fo0ys<LXE1K6A
zl}fFcZ|uJR`Q*^o&k2T7C^j7jszENsp6m%Dyn}@bGfdwcN?(1{SNOdpNWG`$R7#!A
z3M(ddHDjHHVca?~`}X^Zqpj+C;w<f4{89vH%rq8^@H{wfC|>sEH6YdS7eal>Vrw&<
z>rRaww3>m*5o)qWa5+!a-SYIejTPF-$6ls4;e2h1nR_V@dULfB0GcO%H0(*G*Gp;o
zXX>nOs}Whqchlts1FVtFf{=LSEY_7uwfwR))-7l<>}(tUYL#zLD0SEE`Qzb>h-&|7
z*7iM)XxPz(Bz0FQUE`^^+{6IC_?dq$;IZpt2L{9MLG$IfkE&CSLyyt=iq19C`T|Z+
zW>-?K13kW2<!X>rF^D{hFKY!@EgfqxnLEMi_ba|pAw*GR_qOWtwDwk=LreF0aSN-!
zLKPIZgBVC`!#)Bt;8*R9GVFjU879bEtPUH5!Kt{7gdbkh4m-!;x}`j{Tlzz<XSR4b
zd8f&Jtiq4XB;=D>?3zX>NPTAF3m}15X=B(Eor&Op<r9xub`reoo$*(N9(fVE`=WMz
z2PlL5s`arPdS<zz@aFH#N$DCo`o|ipDJF4&_9W<^W*^Ga<2l6+avWQ5h|x4Y*&$vl
z1IOn63<lis(81iaQ<Tw5@%V=yMd{fKPsOB49+@!ZuWq<r+*^cC^kfGMf^zx-lKNds
zw|!o8r>+_Jic+&k8EahE>94x@mRCeq7*fM|bwBd|cXDl#%rb7nxeW36#g#FrRQ)U5
zC-$hL<ts0-?Q7=!@`n|-=TpJ<Kj%>`9{Zi0&RXt>N$r~tB8j-0AA&E-W|}rjo#9_{
z=LSq#W<BQ;9%r?g7(gQ89=yt4;!mtdXUKOrU)<X4cfCKc9l7SOO{Ibt0kJm8Q};KD
zJG#qpJg?jQ2R~VmeR&?N=H5ZSlII65ykGe4uK76Em}q)^W-RySL;ejYC7-SbE^zp<
zfbQcgUv2tJt+ZLF$&4rnbnTfh+zuQ@?b=_(&G&hqdF1LGcN_2ZsC8Ae&lB@@F*UeB
zaC!o>Qw$4&euxvGC$aRJiY0pu{deUFVaw<Nq`&>m;69SPh{bJYk?rP_+MLO?@1W4u
zfskuHma@WD9oorOp3_Q<Vl~7W0AR$*7tmY!ZQ&#ljM@fpuD6htV0)&Xp<P`*^Wc%Q
z*{(gw^3l~i4y7HrvUgqzQY@aU)fVT94OG2t!Q?PoS0}R7+P9@yQL6yTy3bl?J%e4Y
zuO>ToyvwN`_i?0$a_Qg)ZlVnWK#>{iAg|cA#422rK4jqGqx0z+BTV-k%a7rKJ*$P|
zEQ8XVZn1)W>A?6W>!Oh8flxzHdyTw1`<KjlgG2ZHmUgz(H%B-eS!8E%w=;yN4Oib7
z<P=Ihc#|LK4Gd)l?I%VKS5%t#MnJEf#?Yy`WzX0Kv`&n{z+>4l&r+X;Vi5wUz&7Pc
z%}AYtOx2M7o7pL&TxPuw2@{ep(qrbXn^Ypnqkhb7(Vh1J8_)qEn;2M3<CZA*z%E>l
zSPhNn7l?_~xgporo{7cP^kPK*soaT}=B9r40Y8NL`xex)y<r(P_2m2dty*J<e{kZ9
zU0ZSKw+4@U*Fw4vb^D(*i{ACQupovg>4r25{?oM|hE1T3R7y!~LF$o)8GfhTwDD~B
zW->9o^&@skfT!B6U44NN*E&WMd@ndnig9-7w^ec~F*j(~XfJq7Y>GDIs`8KI%1u;i
zoy%h3wQSwcOl?<v#kFmFv~j@sOj_6Tdn7hy21^E&7&T2C5`ie{2u;*tU^rzBy9G5I
z5P%_;2J{qqc$H=Z^!zawn-+EDySA#7Q}Y^@=M>e#eY{Jy#I1DO<RBib<yXI+cH?-q
zmvK4S=mW+gJg%K@aIFzuR;Q;2lAp-%-r^D&di!Sg?|}7-gFZ>a_ylf2Q#$e#J-(ua
z%9uo-D&*XR+4YMd5}_lWpT<e;uyl{*TZ*cF<1gb%8Qld$;~KA<&Kie}$vhh6fs$7F
z*ojhW`m7^jM`|qhY$2NCuX>gZqTRt>k(=XqE-6FAOv62BqU%iwW?=eEN2drm`MPh{
zA)@c4o9D2T3slVWR2sUD2C==+tkCYeGMu`R4!s_6EZRC;3Vn7A&fa~>XPOLjfBuE@
z+o~<n%e*utH1tz{QPsACSMcH)ovZN$)?uiqmvfLVAFFa=j+7CGUCX;KSVQyaXl86@
z*P~zIAhMu7F}t+{ui=O;sa6>OF;Ad)zCLai4)1rLBQfBOG|#3arHyRcA@q95RCJHe
z;;;W0ddR2S=4GBr4ohXWcX`;}cTv8ab8P5}&M@zW#&2YBmxv5szIbGvTg{$s>FurL
z%;vA%)A4tGH4u<kOHX>#TRy@ytae;^50d)3Omf2?tpB&wgZ~q)IvBToZA#(ZaRa@{
zeZI_BY9l|Z4uq2HKG((0nNiDZv5~K@-pI6z@bP+J$I(um=s0EEG$=^Vgf7qDdRS_=
z1TGxQWy^}|p4zu$(0b`!{~AVxXOjI&;Qsmb&q$Fctl)|ziZD##Z2jf7Zpb^hnpVp9
zfP4A?+KUW%aMM}|NfI8!2-*LwLxouVTinTzTWs4Qq^EJ)VomEjs=Y^*ns4&vF~q1k
zPj&r<+mjV=#RNOOUB!gi8l`t!)?cbUu-ycOHKCy-FHErx<X!d)d)(L264;`B)S=uJ
z@#lFY^<LjEu~YIdN0L0VFomThEjJez2zE&oZ<}hO-|l#}-q1u5_JU-0k`>g^0_&ev
zp3WF2ny}Il-(4HooHGEmv~Vx?PQ-3etWEDY4)+;rbPK^1B%Tsac>?Wv-0%X&Uips&
zjlpJ3sQKFrmxkd}IA1BqktZYKT-#9jnY9|mH-des@kso6$`;f>V}d=)`QTBNro{B_
z{SJ1Jck`{i+7nA*EVZ(5d07GP9x#8OTtL<bR=>}niPJQD(VcMUlsYCzzT<00x)!yc
zc!7y}zAi}ILH*`&e=RM3M+<7h36*bc$Ajr|PkA(`ona#bMg+D5cx=PVA5N|p1Ne|&
z9KRSczFv(OyALd9Cn>#qw|+ty#i(i~iIn{Ag>mH3O;ew7X%%o-ic<N9zJzh4T>M~!
z24d+R{~*!7E_XAuhYBRp{Iq1Za!b!Me^+v~VP4-gNl8gm-zjmQ?T;qF_8HukY_H#9
zDrbxx+b0LC{o!j`>We$34&Z$I=1^+A{g42<iob0pGQ(N1SZjP;At06W5nz}py!p`!
zzxL|AeuH~@LFs;Fi?S#I4qLq&Zz!;EgKzeyIC^X59kDLETIW4IoyBM2ALssd!Fda=
zgAZ$_$x#+JSFI)Rlc=Mwu{cxCkcqLQYGJmIz*656(L!k~T^u{7n6~|7Y2#k>@4S78
zV-J%XO`g}|!AOxjvxR~52qkeHd0o%eh8h7nYlhPEJq(*j|0ZL2uo`~|CfGmdfopeb
zAwxb0-Ou|?(6Uin)aop_)@g!wW8HaAC>sv0ETl%3j(SFNf0>Z4njDehs@6MCcFIPv
zTrqEDGnVTXgQTiK<RbOdDm$%fTF7%4x5@b2KOaF!3%i+p9?$a4&KVUL!}J~z3oh2n
zk_N(uhJF)-;z3HgN#|Pr_&j$kYqi~_v*so7(!je6ofTN5{qkQ9vzP|`hPsb88N_t%
z3T08Q)Jw1Ao#jtzt9Ca6hk0jz{)&9E>-I)QAdvOC5k^O4bF>*@c*C4&aX`t50MYl^
z)zUuOK8HRV=4lwonFLI$5bl_kb@uxBZAtm(J%UwfDRuyR0*yT*D6-Q(<RZsp*73iR
zY?Igv+e_)0nxH3^S96<uo~}-M|K1Z}eFPO>tP|ghvd3J~LVloqw0UXmwtg;KY^rdx
zMBOjHrz?c$WZ=suJB*i#@qhGjxTud(D=Q1fjkA1T%2q9x^Jzi~`m~VmyUC?Ue9_R{
zny$&Mvm)y?pi1?%O2&mS+-A)-x7k`v>Ef*mlTysVeV)p*C$v>M1V1&u6<piiqh<`W
zzjyM;_#-vXm-^m!N^OauNQf){#r|<aB+qa6zA5+9kqa&k`RRXC-k%4#f*gOpi)YEh
zrr9%$7XaH9mJnVFR37@@T9A$fwiWBwiuv^jK*#b!b?s<6DX+zfcLJ)fvK~pgDv>=G
z&hy*mzqbG?+kz5Y+k$9$w1hR5kXY;UoJLjJ5>K}JQ==cA<qJAq`J?(r@Fdvk8GNrK
zTDA8%@J?~EDiUfqXs_Wg+Fy97n7}^U$#r%H={D-0jQI>@9*Qe$$Iv~MJ6cg`<MSJ$
zK1w?gcOh{Od}&a%9m9*(l9~mBS-A|poVG(6doTZ!iubovALY037Y37jhZZJ;Dm`&q
zqOq&!GetI&=HJ8K5-d0Q2*5t|%k#yt!mNV3hz}iK#8aTKsXE)yatGnNt^VW)#&4|m
z5R=YS&=Q%ruRK9;_bh*u1P?q<v5cA}?aRADhEdkj=^K<6{y}Fme)zf1{j4j%s$=?E
zGraOG1S$b7Pi0?(Ctc0mH0cPV9q%7^x>GFf;z2CtorfMfiq3}YJEC1g{HTTYMSP{v
z(E&#yY3=^uD-I~4Q|zB6aq{4D9;&M<4Tjdd6^>Y%>|t-x;WGYFSw}NTdx>8<iZ2G4
z7z`Wnx%~Q|S@^h&iPULh<jaaAZ8&c=`u=SCmf^<qONjtozVi1%*@2ufZXwOOfvKaW
zy>!fYnpfQhdo6P$w+N&Nb364#qzBgbr*G-@je70tSCJXtk{wi11+Qly%XWw@0DWXO
zym9D)EqjKSb7i7&x`KV&<$7i!ek@PqIz6a?7(AX&_Zk=UTl-&K2JYIIPE9pcEX!?;
z=oQlyzb+=?4<epBb&5~D+^k>)N$aqTD?eLgAsQJrb~koEJaOEohr%r;qS1y^j}^zY
z+KRccuYStNiKp&WdY8~0v$qiLcymJ1EM%B{W=1Z=6d7B(rhxnzePrzZ5$Tqse!{P%
z+Kqk*(g?p(W;G6gJEliD)_hKX0l|tX{NF6Iq<jKj*I~_lwD>8UMHR^|VH3;5YlQBc
z-Q2V)EsY!$uLTh$`2+LZc>3u<##$HI3C06FR7}9|zlA$Kl#^C~#v1=@nFI!9hcJ{`
zH{96VfX~luB5Gc|ZO_Mlx%H;Chk#O0!9{xkF}dBmrCH^vTgivrV(NH%ZIWM}PT!{E
z|2#(r^?NrAoB|fR-UNK@5<DiaiwXv-HsZD+IN373%z3@<ug=_r$K6xZif_BZk@0XU
zc*<2qptWf%TD$QG$d8kRt_1JhFx$o9kg)Ugo7PD2bpp~VKZdfTV@S6$NtOcd<=_Zp
zgt_3qaEJ@V=sX06bqeQ8ml3;rKd!6b8Dx^lq8QPi@R6VBT%Az=-IIlWyX|gF)T2{m
zj776*f$SR_p*%HLV5eCn$3ERC-u_EXl6YJ-tYMF;rk2ip`OHauF#3Rg66bZv^T%t;
z`UWyb_&)Oz97hFWCpGSlVvIOvoId%bjrBa>hP=3$Xqj(HbIc(_-uXv1c7XkNbP2L9
z!B?jkbjsE2?kSd9ZK#vR>`^CP#2K2I)K@v4fGa2MG5}94hJq3#6rJaLM8yWNeFbUT
zj;0}rq|>9@31KX~ManT3VVra|#H|^kuSA-ol~^cDg6K{5k`<)TUbQi`J}y3R1z`HE
zzM<j+9^>{fx&5eJvbf;y13%|B=4TdNyjiR~=eI<8!ny;}Y%yYgMNJp#7N8l4p3qLI
zy{Q#C;<3T$u%5Tj9XEixPq2*@J6C7}Zmae4v+m`VJ9ha855JR_oc8jjrDvZ}Tyt%R
z1VokmZqK}#6Nw^!z;^Dij&PJ_YTj~QQ$_Ew!%gY_Nqx;0sVDSJvaU2%;}uJK<;6L@
zJt`_G??MuNvAI0y<_sUbJm-|${>o$%BB@awr7^H&GP&M#%uq7o(6!Jg-V97pdGdQc
zJM5*PQHCF>&>=Lp=|;y26&eSp4sszn2046%>0boY3h=)td3;AT0$)6@+01=Ts0i4Y
z8nH9mt%8ix?U^GXYOZNo(T%BN!M-k7<i1sXO@?~gr23IK(X#E$dPd7eWIEFO(%W3Q
znc)J5sI%R!Pi_^=3+F9^0EaNQ^ZjdmyGV~d>CO|;<qvRyUE(>sE~+wuFUj)#6wCRf
z{*gP2+Lp7a-S3=(Y*8FC$#k>)*U%%7R#P79v$&oR48}#|g^`1UNif}Z<X3xv!FATj
z0Z6!a!rAqQ?<kaC*-d_aI82AF9hUYnhVd@`;&(j}ie)|}s`9sW_qeVpuR@(=)9KK%
zgFP$k(V=3yqsL+PSulh-Idj%Mi<4e#+d~FmQ=+xAVa9R+4s>{0kKJy@8_i!bxZ6@s
z530i8dhrIKDAbWYYfyVTPPggC$J7#`Il^3JgVa0fy+*V*pA?L+rX>YW){!{EU_&fo
z5y_OfHHnR3=&@M0=_h1wtJFv9BvLl6d}4IlJ65*zUr>+idAa}M(s@Pgi|5JMv(8|k
z6<i6)j|E<c3dP<n(4A$;Kt<VZM9kW2GaQ{BP4X=Uw!F_}SwI5eBq3m)qq5fp$U@W)
zO3le6ee6Nuo6Ubz&6BKu7uxwd4kF-=qavt?*N*M^kW(=|vbB7wamV4471sVT<>m;A
zFkD&KaDPCW<Za`d`d4A{+&LFZz%{lg$0>B%ET6m}w?ee1?|jFV*ap!m_)DYoH^JQ~
z5LwHw&9{z9P5$K{CqEch`dZ&2@a6KcCKFwNxcgI*PYZ;INSP0-Wr3ra0|V&k7Tx#8
zdn-wE#o58jg4||4+tvv0GRGxu-cQJG?snar!DpN4^1Kw4)F$c4@9<k|1%hr3nQ&A2
zWAPpbZ8iQOe4innDnRvr$w(gQTrG&5k)5~hPc<1&#_AK~57{OQaU1FwZR&|mYI1V0
z-y;H?CVeq~7+t14T&b?o%R_!egKin>i_({>-)xElJE87vaBKEJLlaB$IoQo)9oG7S
z`9Pmm|0BiRXqwi_2+yR_(I^#p*(P`t-X0LF?wZTv^tq)+m{N(lDB}WAi!a=e(u({0
zZ!f}q+-9M_F)JwgjObLE<v4l{d9uh`D(9Na_^|P{@_@eO&H(txw_1#GT7JiS6L&G;
zK$51<ks8nC&D~m5c*b>#BhOX&z|7>Vr&zDPT(?udp<fpI%_m)masz-ka{>x`xUo<V
zHR#Yw{P6~)vSR&kJhKmdsFfi+ZjeA?_*Jy^!;mstb4x+7WH9X@v1Iu#X<YA4<67T{
zi9RVUr$-u+J3f`j#Go<q-GHZaa{KKPgC2qV_s{p(ygEf_4l+a#AmH{#j_SblQ)(FN
z>}*Nr&)ec`WZ`BOH|!^uXZ8dBrrfPRlzV1JVzKUaQ(lVdC2H~=n(*z-z-+?qu~7rz
zetkZKI4I2*;QP0sa4&}O!-@xQA@lPCJ)?XMD0#Bw57_=Mlk2!Zk804w{ppMiTN&X|
z{JwqQ22(_JglCRaR-6R}`}=RTLdm+Q81q5MH^B9c^?dKSrIKnubQGe|?GfR}VqHys
z$Y?1J^&YrkJzWPe@ec>WBoBXeGU6^%I-^GBi32Vd1L8ZwF(`Y){gf9&fC&Ry$gp<6
z1}M5JXb?ABLXJYbv_`a@OWDjx4}Oj4@R~|G=Xqxx`1Y|RTs(!gR9%T%?MSLb$tE_A
z;Nz0b)I53v*2U{xX9DV%Sv5SR%op1D#wJK2dNy59u=hyEvhn<_B+;G)HRcs0!o58J
zkyT*&KNtJ^T+ji3BRglP$v8vv3W5qNGe=zu+Nh_J))yuqU@Yp0E(PARlFxho3Sx9_
zRMh16ii*i6w$X>Yj3N<Ol{Y*`Biza6Q^&EV+;f?Zu*a-MZ;wt<*+;5rb|nP!n!I>z
ztZUj6J}xSKa?MRN0~&Tt_jL+tAc7^kt71d^4sA%{g}HVG$W^=Vv-U)X_Kr3TsbewQ
zTmN#naGm94NdW&YkRHzLfq0(D3k_1wf7#0#L&t#O7vD@OFu6KZgeB(vTx~4B{fqAf
z|8h&EX04;F0f|=qj;xoq{Yyc<*g|=CuYw3VbWyX^XDs^B0m4}UzMCW+8<^hgsY0qG
z+G<KYRCL5oU7tr$)BB1)IYvJ=Is~K=1d+18ss1A-*v>vQIl#c>>P?;mO8YMru_P1&
zuiBRahXRy}TKHB+naw~c#RkZMwMz*_^(#*d<TvE#xmt$F=P5p}=JyPgwLna%k7R?N
zljT=$xWnu(oS`@_?tZ&dqoRb&#$JTqD|=n9TyXv_RLrzTDK~i;{4;k%430KyHNUS}
zk&9MSB$dK*K}H7pMZ7U`I}hY(MBK`bH1P`@6iohzDoJA!{wvzdbCYA1{fL7y8#1^q
zu+~@tDBja>^Njca%pBE%F|>%pn+t{Qu`c|0=k-6q+6-}?cM@&Cs<KnjW7yB~Gl}rn
zpfJPE!u)1jf$8y_+nUb>B^5cz<)S$I{p@SwBEWt}U|_xuBA^AH;7!UTR(N2iiYK{~
zFwTEpJW$rFky{;3ZuU`~=#@YKXr>P4=NaQtU`?QMBEGJ))ofsLJ}krUrSHVvmfM+}
zI|T7t;)b<XLnom}+;2PKBQ{wjuPwz`3xQaV2DxSOsxi{F*HT7C<`Huv06AP`{WSdL
zn)70b(1gyh0-;6EWO59Xh|V8R=$@X_gk;Z~I=)~#nao}AU?z`C;zempl|P!vV^kDl
zB*U47G=`p7GH!xKrNk5}zEsho-&j)?{x1C}S)CR)+g}5DS6pY=fGa+_u~F};d{O4R
zkF)e$!S(pg10?@>V9%BaIel5ZWX4)jh_^lwPwT!bQV`(UuKsDi<K`|r7FUQ!$bEim
ztk57$P@-mJGK$%Gs7Hy8`2MS4bY%w+#rRh{%Z>7@Zgvp-reumn>h4X%9Xc5lzgJ*!
zrw>$PSboFHEzxI1S7cs=bZ*2G;`=KMzrQVoNibsmHF^!Jg_WyN&lR#%_Fn>LJRCQe
zMNuIYYQ6P4rwX&H_AqtcnpGF<Al%`sDCgKWvpu4PUD1xvGuL2?Nni?sZ=NNNd6tWA
z6=f`ys*?c@6N81YlMsnI{|GD1X$c^B<W2H8k818s-`KxC(R;(Yt!SKJj3}|9hOy2l
zvj{nHqY?O75?d<doE@1CyX7L}#|AQdKS~-v+r|3y05?G>fC`S9HrF0qVvMnFkQ4!F
z__Ri|aq8e&ChOZo|5IZh0b_ktpJumVQPxKRrHKeHJfvQdrX+lOarX^MEJZ%=F4$RZ
zw8CwLOTvYM<sT}=X1?RYfXS{lJgLo@cxp?Trl;^VRfi2MNx3a6V)vfFLdSm053raf
z$sUT||5?QT=K!8Y?-V3<CPOcJ;rnZA6hLrsmYIGQ@N(3wOJ&A7D`LTB?jiXxpZ1k)
zbm)zXZiO#2e<kX^a5zH9|NZ|2qxeqs+@Dk*dM!kQ|2M?TEhDh=&XO9N$A%n-ydq;B
z=ZO~3(Jk|7xD$B3Y`<C0vi|ah7TW%Dp}1LyF4+ipsbF?UeUFPve6bA;wJ#38l3ad2
zFIwn@_XYM>SY{wuE#rbQqa~(SRzO<`%wBwyaLPq_lV`JniW*8vX*m8&Z7rQeNg%`+
zsr~l)QQAwMLkr)4@uJ85+O9tMcp@*c^N6XH4fYC9Ab8X9<@EVN#8r$IN+!s7@19Ng
zmY|nsc)KmF2*yXO&n#ho-&22*^+~0{ijpViXnkKI>Zo=~X2?d-CFK-6w1#``=;zDn
z))z5%XEK~(_mJf=n`!?4M;<a{W3WB-@PY<;k!m+UqaL!xdv`C_W{pBxzjz>!DTFwL
z^d1rcj(hjAQNBY(Kd}o_LOdSHe7o-Bn7c6K*TkZhw7CkeX>ng|I70|FM&fOLO;01L
zwK?f~BX|LhkB|XxhAp&Y=9W4270K%W{6<IJMsMY$ybSJS#+tnsy_h^|mVwInQs>Il
zH$7Ca={c<c_W3&raxCeR%VCn{&Ick&p*wM2n}u}}yT?3A9d@O8wc0^#>KkeRny6YL
zoWWIiaOD+saY%GHH3~JF5*}6t*Wayn;bJFe+)^$Q@c^7!t;_onHhq6==kj;?6cLOx
zZMDGf-F7tfABV`L@FZu^^{f`@>PJ1mVXaTU%V0x3dT`E7@+E9+lI!=slS|B+P|1y6
z_Aqy(e%{8vS&(yXtz2??LU<*jvnom4%o>W2Y!C=CeH=A}HY}-y-GPf>=RakSldlHQ
zuB<4ojHkF;p8R&mh;H^OvuF=<Cn)&cBh7j1c&;+8fSBMYE<#M`7bHAPCFhyljqI@l
zO^)ev%_XP!jPiU|WkMylJ*wx>=ATke)c_~R8q?0e_zO#`5T$QX>qtWf2zj(T4kC__
zFb+*;)kxW`OZnRI#w%Ufl=29qW*nLD0n6?CiFHM^re-%L`k`Nbor@<mmIb)5->64}
z6F2?Vc4Ukk=Jp?B_CLq*<h%2;iwc3$oC(%|ixNjREaRbnJQzbgVYK>B@f>5MOWCOD
z^CIPmHdsIBUM@~xmLvD>jiU4!UWwk#gYzYXXxMEnpo4|9Y%M@mkCGfUcOI3zes8>D
z4-3a8b7?Qyo#cwU7GPOWp0umDsoi&bVTKK|k<Hhd??)H3KP1cxrgh4xpQW(P1hV^L
zh+3T4Q*(vggr*xN-TzNiv72Iki&X%R?`Dks8-sBG1z8~W1kR0)D#}|Wq2yeT$V!6i
zNAt^+cQ(l0>^TA4>R#NaTU~dUQWU#Qo%OyC-Wg?<*{MV3h<2Q(bRNKZT+_(UY)3T5
zta|$+|8z|aR29U7+J0@hD(zxFIdwraQ?8IokPVhwRLfUxEf`NkK!X?PPSlD<D0p>w
zs*s0a0=2cfsrNc#L8~l7V7gTSpF-q65nX)<;U4n=5W(kxmCp+iL_O*LnLr?n2&K=E
zI03Ve7gA(&%V>Z`n)CPL4PU6uKYvKzKzOIT>}R#Y_l6%>j;feGeFwXSfI4k;LP<F&
zu}8}k1Z!B1iBK`TyQE+0kp=$h&gt%C#|^!SY#ynKLfcAE(+AT+9(qr2_sY{5d|=0V
zO;%^0wmUVRWVf{ulF35FPW#x|a)x=yUP8fk$%0`&lg9c(zqIf{#Lte_ThVEyygXWY
zn8yi9hiXeYGu<@%KhstMNOx9XD3Eb%f;EnEtjoZDw_{?WkI@_<52mRr*|Y*2gNM8Q
zOGzpm1aToWz`SIaNz$%h9VSE=F)1&wH;-zl*nGTXGV;4=kbGri!gu---fzVTF&pPl
z(M~)<V5~GFU+)!Hz6Z@<ov6!Z)7-Jj9=R?j@pryJZIV#vqxsRjUpGNU_&FFc87s7&
zi@FF*usnz??w96BQIdd=$LedR@LAX!<un#8wr1Ysl2p!_I*FtsLL}`!Au_3hwzcq2
zE8{4xCDtyAV^G!)J;@w-lzVPpT1z{Il>n8XhQ)$?3GDpKHT>HYyxyE!HELm<UjMro
zLGuYEg9KXp=sE;XGwu@nn=ZP%g|*JUI<&6*dQI7de^l-*vwEA9nyoAB@%KHdPKE7}
z$p=EyDD|Mi_FmN)!M{w2K3>K5=6<F*_7WtrG$R-ilM-1|z8Cz9bnMNQZG=HkipA1=
zO|-gquU4e!weBiZ=S{ajI0p?6Sh9YXV&t}_8%(Y*WL0<Y-y;kk;;@2hRzzo4jOgqx
z^OvY1F8?v?U}1AN-ue%}a2zFNguP1lL{sO8P!*`<-~;#BB2A`i<SPo_u7!_Fkclb$
zBZX$H=jV7vJY^|Mfy0|1K_Q#ZpixdoHuJ-0dG)uL-snwE$`x0C+`ANnTSj@p?ip8A
zZ^Zi9O<!Mmk<wGg(yw^TZu?u7KJ+QXVqPh)l826w(oQ~C^?&gb;TqUD!HG@m@7Nrn
z<F3LF5aV8T9swxi(jp*^1wUsZGad=|rudvz4~5-$NN^s)6+2nD8-@F&b-Mh-DSoSb
zCGV@LRm+fEttbHFk+SyL>lk%%aa54#^$n(VER!YP6k90@=v%h9Wi$XcRg?1|ht;Xn
z7`8G*`zA@$PQTQvYSksQSw|Xsjq}l^s6dM1X<CA8!^vf;lBN&4br5atqOTp<G~Ixj
z>-(~eEO#L7Uxb(VaR2gj41EjXg8p3&ZD}lD7=4Bn`c7mapCMFB!)%~=YajMOTJ9iq
zhTbLyb8N>{<F9{SiLXIgCW!rIP4tK`J|s3|;4A7}sp6t8$^X3gatp^e{p=9c6)VuP
z4N$+CHw#&W9Fnga!fpQJK<B*^ld?gB+#G44al~}hDRs@5Xq~jjeZ#_VRR-L-;v@5U
zCgph?c_uX5kcv0}GmJqgL4@}bqhOVX`r56cd#dm6POQml%6-NPzToxK0ky~M2OY8W
zm0X}JAF0&!{NAA*V-FYN<u6Yo0K}gPtm8n(Yg-Cr(7Rsog;jR<%ltVYqr3B<44tkM
zf2#<9OC&X4#*$_Zt*Hq_n^UcV#<K%q_;erT=i}W09@fj%7thE4=QS1(f04}<Srzng
ze4AKx8)4oZeAPC_RkFQl@RpyJWr{MHM5EzXu|Y2PVjXK9kvXUGuGW{T4#lY%SYD1R
zql*7r<?nCL$ws8Rspn467%MDZD~+NmI_|PVK-L^PvN7JIF~VG$t>6>;XRZ@x=F<tu
zHi6aN=I3OiUn3VMwed`9Ki>B2^DtS=FD|NEx4=489b&dUV1MHThW5s`lOrvs=UC#+
z0XFHrz83Y<6P4H(dD)OoI*mmwh!4@+b$~+u0r*C5Z~T1OEdl3T_C2~X7#ibyxyZrR
z^3`>s@+00Mj|&Y4aK(k$lIZR`F1fNESFHK;zp`Mcx@uD31^PKvW<_Fh#JeF5?ye3U
z`^m6ueSWN>2sPq^wumeouUsQ4gweA3djpd9vH4<c7u&^ui|v0DwJNXu3llG^@hZx>
z0}?dkhZv(u-?IS!Y2@}_pR*n001B}TN&@%#jc6EgIKE{|4GH}0%x-572O{p<>uAeT
zq!Q*4dY%!Tfr`bG-LJ1=7;zg*!_6yS%K8Yl_WRXgrZexAt{$-3rR$Ixa$Prn4i0N+
zb2u7{x@yFjnkNAz8xy~p1I-|gs4lVnoeBgw0jj@=GOia7Hd^~(7SJtX#~>_OdqHx(
z8%PPUJo92r>_f(_-ZC3#U7$5dY1p%}WUi4(lQP-yY-6yqvT@YcPxR8>QQjZ?Rq@t3
zAo0E&^ZSJy=Zn*JCvJi4tKzeE2A@QUg89!+$Qt>5PR61%NxC|}XttuRa!^M7rmrIt
zboa`q)p=uSkzuo<>C0eL77&c*oc~sh#bI{wl(EbtV?pELk=&QKeT{{w-gIk$+f>Fi
z<<s1|<g0;c(6CxMP?W3kFgO^=$9O^n&I%P=3g_5Ej4=lWs?*`;Sb<}X=z3iAob&8~
zkJ^%2B>vc?l31!FHl1!*Q~F`ptV(aQ@sZxPh$Bhjw(h~X4p^Sr4&HYSAYYY!?`2!O
z|7A~bl(IYIzL~PnN4Brj3@Z@lRE^*A7T;q16;SjE-^Ds$l>t_Nyl3*yFE{pNv1X2_
zCqfh1jp_eu1^*T)rW7JWgt{i+m2y^QJ7A!&z&`m<|74foB-+u*MMJybw?xalb&^_a
zKu2hME9Zl3nln;0pATa>h42x#`HM!o4Hs=w*PYUj@X;=+?aT12a<2;$`Kul~Fd7ys
zOKbVkN@Tl4sjJdC$zWnHkSJC@;hv!Je;vQTWOG<(t=NpmUfR|6AlvsC2cotaGyAgk
zr?u4hM4S^Rd-EE{vn@cCMO_D}L}#v(8|{jOrhr4Z!u;KNWWwUX9w%F;vn;+B?F$04
zSJb^cy&;YP-9NKhv9A}z_DtXT1}jCp=gWSvPD>=w79`Vvs=qS6WaKA;yFW>T2o{Fi
zO&{g|V1biMdM=+;giO{)rpqHVgJ}%kanr6r`}(fqDGW+8xNTbyxhZVgZAxS4hF6}C
z8uk2RvEN3&psp=R^{VPHRgcMJ`c^8*>Dl3-zq|`|5sicy*Z!oh<uz(9ZYrNpBKwZI
zHq-9R!nw)NhnJ1(?oO9W8BQI}knlfVD=rxzEwM&qI-YRR$&qT|mAZMIS%bIM&+}2z
z{fpbB!O&z3abIH0*^`hetNvTbz`3u+?ftRCH?5zkge+pNj*6(>eUq%#-d)gmlw>U5
z#E?26<8>H~ilWu)0Y9uAJmL}bHYW1iuN%YG2o2(=L<MAx@{IDN3FfFazBoh(-gb;~
z46(Z#g++m#ne<^N*q0TKY)h#q9Gx@=8MzEoF_;~!R3B~%(HVIWj}u{r|H`B{CiKaS
zUCMr8HsSdlEk(C!8{4lM7vZUU%GFamhOfM5pL~)Zhg}MTB;(|v->TYzj8MM8HDFEJ
zBazwD4uo;O$$HIi2G_$j|Fut@0t*l<AtVyy;;gHc5^Z~g9p}q<{`k>kTfRf0dB4M|
z?r;FAHi<8^gT*CcZm+M^$o_W?&&U_0cI*<q7;&^^mUF2e*-?Nm`&@Aw12@u*u-u3<
z1z4y4uAB?Hv;F+2Fkbn~?%7wQ)}1jGpmYtpMQ3x7@xI(&|LnS+qRD6PJoi3qeHhyA
zLEO~%&*ozs?@Q;;%h0X1jQWppd73AnFQGXLbh{-Qr8+rf)-GbYs6kc0_v&q^m#mR4
zwn<K5iS)Xr3b(oxdoks!v{b>2mykEIaCgsgWU+|jrRs{QWUF?J3)_dCv@SEJ?vEKA
zfxZ4EF?W^UEApybgi23n%MFm{(3){%EUV5Frz%qUt9z&)zX}aYy9!O#9Ivg_RADiH
zzF3a$vwUbO@L1v0Hz(mW6ML6{YYi^kYMZmUQj9)wF7;7Y8CKStLI^@*3C{@yKyaH6
zmA{tNTioMrUPPI|^HXrn@(^g)33P=2c$?d3mfV_H;|_0DLNd#ewKsGv=$b;C5^+Xl
zdPOQuVx0ZcMxx@|tuW8pAzEk6hL6u3<`234+{cneir-@OXV|KxMV|@;fSDtl*RwY?
zMHNsOlSOCoSBRy@zeAo>qNnL}C>hkSoPu}0zJE^uWW8t4PWSmccA=vK2CiQ&u%rax
zO)$&n8IHt>4a(tpq}RWvn$tH=!zZ|n6HgtcBHdi+g<caF)jBX+s*kHEs3>Bi@A(=|
zrO1E(FuMOB7vJO;R~jZ&4D`i!4m+E*(5%t=?(r=#R*!do{j)JSYuY*!Wye+>uoAqL
z@!_T?3<?-}A%!J1UWxmOB=F}WuFZ<!iem<qQ$vMk7*fF4&pdDx2QG;@^1P=2%$o0&
zK_goI;Tfw>QI%0FzVr6t$n)|EcYlkF5|t8?MniZ0W35BK#e>|6rnsq0?N~cKdY$tF
zt4~zZus}=tjw3nX$HhRBW$v<3Yu)GMg27LT<$)hnlPrnmSO`H<N-MkyJ%+aP)f2)j
zt#s_wJ#0Lm=HjkAo>w{m2Rn@A2YEY!#N_8<py75t{vgMT*Z!Auv)TA*HR+JT54onF
z9Vvfu??3uHjt8f+GnrA#VX9#m1?x&M76jw8uR(PJxY@aDgcFS@KU|^M;7XEchdM}z
z|IlerUHPRsZy-(%JwT73m4CD$5nh>r^J)r&*w!D-I7jt({qHgg;%wmh*Td&b>Kh6d
zF<8&auSYZglMTYt8vH0Ondj*zwf=n`i&P(dgiyV0>=Rxv>2jO+fqXcb(P_NFhiGl{
z;E<BwLXHnES1G4vW&<}n#q%9@LzlXz6RLJ(h~`{?gvK&<iMomNOd|FLeQ#H3x~ifM
zE2lbN`VU0t-c5erU}IR+C$G10(9EnmGJFM$_Culah3BmuNuBFQJ8&+<WSP^4ZAo1$
ze^HJyxe7UK{sWUk9A=b7GX)RWXyy7!!)^CoA~U#=D@f-w=Eo)~66Z#L(SFYM7Y1`L
z<FCFqSisRVCfZ6yJ~$sC|A;`uZf71^P)^FDGYU_D*AA96pYi->$I+bjMEM2w(cLF&
z>N(N1Rt+b<)=%}c*I#33j>kh6`AqV@iy4M31X-5u@vhuX^PkLBOA5oa*Ql!`-fidu
zvQ{=+s`xWeeC1ZifnhJ$$fed7ZV&=V>X&<yKJ!x{^Bjhlj6Uv%OLl1jna~$lw5N9)
zcH(kMbSH=PPEzlZOyztGJErvmHhLyB=rGC8--!p~OI-#LJHL6ns+6X1J-rce)6Q1K
zC|{2Jr?Z@x+^uK_9MvN1`aL$k+v<eQ34ju+M##*>9Ead>U)Pp&d<OwOo9Ek8?}aqP
zX}Oz18s}-+fDo3Dqwt`dUuZbZiiVehg78YJ()F^J-<atPiOJ~@Cn$!w00)Qxgoo&>
zdF)8~=9VYqdqa(u0K#E^TK}0Vx2(2>XI1^*AoW2iq^Bl0w9M*~yv@0vV^UZ;*06dC
zVtzsq>WBA=UG8V+x7h$^j8q1R6i?nOOg{HS)bw=NYLrh{Bs*4<MKtEJ^S+ILFa7%=
z*pRST7*~a&=akdhlkFTA%Bt;12&oCCWT~%Lxl2Uh2yne>C%xz_xp$!8=E~25Hshr#
z01fiT`qzm2XUCPCVy<IrVzmZZs!GZRic@E5;cfB$UW#%SA(ZU$AG6w2Sid)bh)SN4
zGuGMCk1myy<%y7>Ej8Tp`Oo@sykr2{k+%~a(I4?y50W_$+ERPv8W(a#48jrWB+*MV
zC9tR^3=a=q#_@poIs-#Rz|qkjlO2mSShwxx)A%>$%gr8~8xj~u^t>#*+)A&~4U4d&
zKkgm7)TbSB3HbqS07!IQir3(w5X!z&V_pjEHwym~b%;$w`#mpB3H%2ius*#@qm*%@
zg~CNx8!L1l|6KTfPG5m-0*B|oKfmaZCq~n<&f0&B?zp*dC~bd9^ndtpXi{FPj~X*!
z{8R@etw<0A-lZSeB`77L_=D#44cN5Xy84er_@IQ{A-K&0oBywVpPVE#D!dEmG7z_c
z>5`CLtL65(2-5)!U;GPiEXmGvx9e23llfNjvboY62VP)qG#b8TkRbm>5L7~Mt2Xr+
zB1hC8y4e(-Lov9EKLe7zO_pjpIU<rpgCe#`geV(GLfnFIJUIKrLF#PY)i{+cMQhN(
z9L8TFVb)<n?Uje9`xsRG`vwBK&>?ZkF*C6}#Cjw&Zg1{GuF&wpr1g3hw0H)yZ0_eX
zo%%;diZU3U3VC`xU!nKYOs?S@x0d?evoAbh)^B>-Y!W9jApaAl(cbUCH1AsnXDd+!
z-wC5qN}{15zo8>3wK*!T5*cwyJq5p}O<zlS6jjB-&R(9L*jiXCnh%LFRiwBnyopr<
zP5q!3Ktk|=K}zkk@gB2E+J~=^iL@kU$<Jvfh%=fFC``e!eQNJxU?_M;XPLPfzpWqi
z4&J<>djJaDjV@=8HM8w`viKZ(<g|FLi)apGAlB!<Ph@umvNJs+Jl~uAT$QzLhN71m
zHhQ#EGX!nkP>-l1WzT6c@rXiAhE}^b=?6=yYaoCZ{uL$?-EY?@A62u8jIF;DN2`@3
z<|v|*tpW!fq_#pEBp2_CIoVb!M})DKHND*r3#=Se_XF^opfJI-v93fOlR@G(Hqhiu
zsY=iNKu6=;D^A4bOu@?+5c>Mwea^^i3+5LaU%wA5+pi?)vVU{iz=aId#!sd5d+0XU
zgUa~;QYS**2G=FJ<)66_Vw199&X|idPUhl?Nk1`3gowt0j4^kZ>)bg{{mXGqVf!sk
zD$1;bG~=Ah-bI`S=gMX2y+Rhl_xM{gt7n0ZYyzmHec--Rd5<A9hW6aj0*vyn<dK?a
z#*B287CxPPKbVVQLlkr~AIXT6lxQNNejzr8-%Hn0uLlGcYKaR@%`o=XmrFOBONnMG
zyBamx+qhqz_otDx=<-~Tnfg~apIU>#fUBk-EWZVU5vEl&kW@}H_8v4L=)zA|j1Z2C
z8U&%jU)!f4rFyRYH*GcDKJv?)&ciht+CO`O9*s&-&fd7eX{SlPcP+k_i+h#+Iy%y`
z+mP9Odlq|b<sIKm%h=OhfBP+^TO!xxD-dx6()f7|dA^HO?2N8DGX#fT|I7?L1ZMD%
zEJ(H$S7o#|B!Q`n)0fwv%V~4;>JX?Kti3A$rN76VW0{l!6Yf#!8Z|}ngeuOSRch4f
z4tdd0v6uYLc&Bi;=A4)HlwPN@g$r*yFUY&v#QCpN%o^o<Wx8h2uKX8j#8>+%g-y(k
z$6&7C)U?7IMK+mlywY-Vr?z=cgh)$}k@4QW0xB8FC70$Q$ak5GZS|gcL3Hs5u>EQ3
z>5Zc1nNg<exM%adbT4P2P3Wwb$PuP5nuzXrSIjpXkY`W3=#!+tpCjt@<6^bqoQzlY
zak4j!0~h<@3Jd`ab&)Oo#kYSI&Am^l+PSqG0~s^!D_ja`vA%Gf$oX@#S<ov|J~tAM
zz1(|k?`~nf@KCu>Vm>U*CGv5MmMfMWkuancZV?Fst7sb^;RpMdFnad0&RP93mZ;J|
z2!rBlZ@m5IW7x2Ea$g6c4e~Dz4~Uv{Taf}2Z)n3OpA<P|&)~h}2?Mh^Wq``E>@6>3
z=uZ}YL$|2PS5%h&kFc){i*ozk76d6l8l{nL1?d_|>F$=2ZjfeFK<P%hyFoe?>5v+_
zVdxyX-v{Fy&+q@?{ldk?#XPh2+V{HGz1H5(-WBQNt<Mb&B7=#qRu`!s41AarieEM;
zgNn59ZysnEhDPji1TE=tnjFYidfi@x*~T8sfw-w2=6zTYIBZ#-AHFGyn37O!uhYMF
zu9`fpgOl&sikfrc9WQ6;b0li_KouvWb>^Al!1woFJ2tx6N$Py+)dK27NyelW_(>VD
z2%V(-YeYQNBSR^==|P#sz%uaMN*`%JT@*+SInD67)s5Yca)VYl0%1%irOO(TI&e7t
z{s+Tgj=6YPN)f%zayRW5y!a_0SP4O#psRORRHNd?HCGvrMa~+0+0l!n4?Uj{dGd_m
z$@y6mE_rmj^s;_=W!HtLiph=a?BX=M-m{+8k2;ila$fo=z)=FN?*p-(b#$RTs}{N%
zq9Z%oK_^vTS8zHHdw-2#>H2Y54S#%Y;65p~U{d)AG>XTxXyctT8gy*Y_04(U43&bz
z&U8g;eb?3dR+1v?A}~fjV}RaPPP<I~+IlzBC&cMq|H*!gnAgCf`8UXVRS)TD9aiw*
zyO+q1CprixZfrTegQwlKGwMsX`IVDz4K5_)jP8r8i5o~xHB6GqAyom7yu>KaSq$Zf
zdM9T|r)mZMhHO&4Md;yCa9HQ`JC<>s{aXf53Z^jwH?CM&Vu8Kp9RgyF`g19;&_o)|
znr72Z03|ht0o}mMeat70;H&g|qR9{CC6KY8Tw@vq9fWb{H$ohZ`*SThRzgfFZ8bkw
zogQWYi}i|JnO~<$+Xdy;nw$DlIxjDGZ)(tl%M>c47aH8!+DQ-IWs21Kx-vD&JuyOW
zB=X;UV@Rps&_*Ny9@Ec94fd7MV2(lx#@NB4HWm1@g-T%z*}#d9|Krq-!51UeYJU71
z%bAv0J4|k&FX|_jb*0O7BabaxKOcC7_>qba4_T7m4qJ@-^VDdVXV5u*w!L*~Y0n(w
z`~KSZSaF36vG=V>aMjLQdyB<-6kbaIym<q)>LV=R0DvJ91Y<U_Jfw$g@33kCFYYPw
z=bm)E*;dwKl5y+DJ%HXG979Q2E8Zk#P@?lPI%!Q`JbS2D5A3ItP73R0EinHKsAr?>
zOF%vQtH3@k)r%d-1VCOkJwI;=z3DrVGa8s~ZrLBGXgjis+h5F+^;XnT-fyy>C?*x)
zhXvHUv*CRMOB+Mt-kH>sbs=ae@36#~4`1uN>Ba42XD$UU|5`<lViyvSNMl8f1U6>k
zo;oPh_0?O=wXA-AIg;z`(V=|0l(<U{i3fF>jzh>~Z@({J<5QTQSk(t4noQhjX<Xhz
z)+?A&eEJ-|)k{r787m^oGv`Sc_W@cOOh{A2*(+-0v&$}pA3hu&cHJLzaOm$Ar~;$n
z#U$_bAX2`$M@{(B5;(s4ARM?JizLBkY@%4)=81R1g2?lABWwza8-W`RH>**c%~ZpN
z$#!-z9+~%6JFCtPH*s;uOldoh<SXwJhURq*TwlSLFB>N8d>+uR0kK?cDxrtLa$LGt
zj=qnuZx}$mr%zpbW`*X=)M7rDl)a6aSl2eJJhn!ydMp+%lyaW$NV30Fji-21@l|Y+
zx;;c@Ik20Bs)RCH!OYv;1%>tgM@n~K35hpF9luET&E9G}S&h@XhlB?P3&?iz-+U3j
zH#V$n^(Jw9ow!X%8eY9;TjF03XlDhw`d+iw+gF|CaY#R&EV(^+#zv(Uz;IG|SiL5j
zg6wK{Vz$P!sA%vRn+hjRHZtf~uk(<AN^wU0<@was)sH>XCZBf*$+v43kNvTNybnH%
zJvU!`i5NS#=IPx`#pYCA8Zjv}NzY56=$g*IzRhLNWdsR%IZhXEWV)<1p)<@}%2VT1
zs*UR`K2dKSPq+_k5r3$FdQ%X4_%=0d=>1j@FWH)dA46YXRR@m^<gzu^__4UXtRcTc
zPk>LvxT+%7(LiM{rzOP7ZDqU@TAF&*^r1W=8RIa|LxF2SV4VzWL7va;9M^g8(tj=S
z9)%X>Kp%c$NRwcnC)?$ed1h@`+iJk)^i{qG;xD#}A46P7Pa1D$maQvCrZ%?SMy0t5
zE7108ggHRRXyQel0+&SR4P#OAq3-pfx|_E>6^AElcwd5fCt~G`hC)u<f1V2nbbCPN
zIA!zphAjlo-kpl2c9ur*rjnz-V4_2~Kzw|!?R}R1zATSLx9vcUvBD+J#`R8y(=lNe
zyEd>ZGFKpsjf!z2`bj71<xc8u&0AdefVWl|T|&CCIiB4*%3lIxHFPR{1{ZKEndi7(
z4CCVC^}KK4&&Y(@;@4hd3?D3<ySrT#I&^fJwLhGGjEAOdb31x_)iG?@nzsV8EpeDi
z%0mk*`YPUq^FD0Q#zTn@t(25^F!S_z=a*86iHqKCq8I3geG{Eu*51Q{YFK91SoG#h
z6Lp*E&dBEhEd*?zV&kP-XSsQPhAKgZtotBE`t7uz&2p|ECGmTV^?pmWNuI86CtqG`
zytX*}GM;!&S3>{bTT<>tvt@u@sbM<p=c4<$Z`PhZJVMmh$@npZ1~%{Oky+;$uFFlU
znaR<U`}XSd@<KwW&Q&4~#>JvOsWQociNnbL^l01BfZgiLPN~y`Y)4kw0$|OJZg2h>
z@%zV%#I|b5rStdT%@u7kZ#qtpyxnR)D5e*)%dFPPo(lL~UJFB(o49t~gOXE+kaW}L
z3&a)1Vo-JoqQ+9Dj)e<?cdq&xlS?(t<adlF4__JWS^k*5yd1e(i2~37yfNy}6PsM4
zNnjaR{m~jX2-6OER;-%|jEY3&xgTY5urA1R|G~p>#{nMNN{RmTnbPY`EjRNcX`4?8
zTvqhSTCUD<JW(wO3*8way0td8i!XW>yeNkx#Q6z<g&gb;<Dhl)7n^C^F9UQc-YI^w
zGYp*gJV7Q-+^v$+P0AX0G|A*B-K4j3T)#+(V6|X@hCloX!QOLGiEPoV6+fK{(Eaq%
zqqDjyo?qcI`|TgTMSDp}$jYgKfW&cR6vG2?435z^FDfk!6rJg;ibi4b#Hv6J3^Ark
zJXOtb0A9Tl{gIoQU~lb+%jIp$^XY_jYuXW5nrmZA-ii(3ZS!II7!g?C@2$2_jbBbi
z!5Zo{d7!X7&l&>-7U*7^aF#;)4)VaKbo|2UaFwFVwk%_2q>D02F}vvXl0j4bRU#SS
zWuE)zPhFNhi>0x=5#QCH?B2L?&&8Gn+ZoD-c;i<_E0OzNqS!o3e50$GMbT+mlmOLX
zZ=gHdovM^%?Ig!fw;J@7mnfNDBkWAXgZb7FK5kKRNNhcFQ#KxgA=*&<*mbU+@j1KR
zbrAf~c(xP-gU0FC=jQbk<oZ8+;_#{A9dOT^5pVz_gSPwA@A-RKq}&$fW{)4F_i1p5
z%y)K&>2+8?j?ugC7SrxxUEPy3P{Vx^BE08oiA$vjO=XUKxrPbh<$q)i*&+j8ds%*D
zjpdZnNw|QwRa^HBp41xa8}{j=2lD;HwkN;^c!Kv<3O3urZcWW{x3_ILC#e!ihZ#{&
zbg6vb`AR8or1{DpP`rbFO8as8U0r2=67&)m5$kqX1rt|nqlt=&g2L~pesV7N$JLK`
zV^_1?naSh^K6XB+$5Dl=jlikn>D)HYA>Ue-a%${mJ*xG&T}nel<JjU{jf}v^2H|?j
z8z)<q`Ur`=N{8Uhm_sBo?laex5;B3E^hc*0{xYYvrqd=%DVrC)-34Ygv)bzj$5tOy
zZ!q%K8ec*Pwpe=_R2I4wu#X8>E!yhL>dtfrpnIk9;Wwwkx1?jW;`w|0n?`Nlwo;^)
zqIM<qP6?YUjm)-Pznt;}&39~G+1(}=*oQ`*7sL?;6r2vVA#5y0Nyg)K9q;*<9C|Hm
zUtYQ|Uu;%#1@2BVjpRpfefpAJUXsT@(n|aYEQ~eiLvCZ^#mZ^&^v8vCwFWEUYBE}u
zS73@lSmVeSmYtnL!#15&O(dc9Zi```#&uTg<LKfnlIkkkFxfVqPK8o??zO(7<_k2n
zS<6;CB^IC32fb$1KCTb=ZeNxD$n`L6f6aZ$tiAUz7uBg&I)r^P(YyRa9adoBoT02<
zR_JQKolB~g$E6{{I+6Qyf<4CHL*Chzs)5(FGe-uRf69F^KdjQEbZnD}=5v8|K@@r}
zRfM*mT6%7>$KW06>wDuxxNXaD?W&%G>gvuNqnzuLwkP#OqB1Ol+%!k6IDEwHN~MDr
zBWk`;l|E+Rl~sYg#LE6B!6(_?k(i)+a0tT$Z%(RSRT_46ADzn0uqhuCUgY^{l=Q2n
z1RU1X&T-)!V|;RLzE#c%O=ax8Niy@66M8f~N+9n}DAz-PHv9ggO;Jv+l1!W1uK2KJ
z?J2YJk1s<D?|`d?!}|Cst2L0g*GWU218se=wbO1K7q1RI%#7OTPfv7aYwSL<$Jgf8
z-zdp%CC-z)X6bXy)N7kD;XVb{_j}LxFD+@J2U-Z~UC{(g*s>kxzysqY?s{)Uj!|WM
zQb4??bWtrtX8kvB^vnE7H_!SFy?;ar#4qu(!4b7P3)K-K{2U!-ml53TyY3vV#PwKN
zUS0b$TCqpH#t+8^u@3ds1(1(u^t)&aH`R~5S8}ljiyz*cR*j1IfmIse)yWRxC%D@#
zP>=0|<@Y>u-m+FBmu_!Qo)+SZj2NkpWf2x_<Z~5IuEqNBRI4UIH=O6E8_0yP?p*ro
zn?dBR@aUUpjgv;EopO0T-s@$`P%^$$xt>-NG}hQ<8nWq{D-%euV7|Vudx&?C&cMNC
zqO|pZ>Kl0F!kjMJ)#UNGoz5D;p>ZRnd12Fvr=V7GH4Pp*cw}<ld%zC^mi^(mxJ!6W
z{19EbQ}31CiQ2p^$XPxq#Idz;s;)epRJ_6B0%O0mBS5Ssg^EI<0KP@=kRYRTFiC|&
zF*K>HF>G<@^rlG5{`^9aJ?a*I7xtW<eG-Q$%HO6zrWhrAro+k)<LIrUt6zaACS)sg
zv%C#2g5lWFQ}q@8*m=92X*EIb?~(o-vjH8v?P$vrOVPzId`1noohb9+$~mb_tlQp-
z=sa^QBNDPvMzo~Km__ODcYG>uZqk!Ny)e7-?zOZ$fvy;ck(W7LVb^&MQJ0_Ac)NOx
zDg^Ov=tbRRZO*=`!y-4J<Qhmq{Nvh>C|BNXA{9lu$U{C4w^Y`il)6vV@^jjrq@HTk
zbnS8R8&n6HAV&wc_9Z-FTT?(QnF|`5WfLqrNS_P4V!{LyoL=P;4zC7y&02PtHDu@@
zYO44z6QJ|XPbt&fdX_3#n*~`<FILiSS7x@;n=x<7XmlX`nbo_oKCbu0NVpxatm)yJ
zca4gUBe@DRZy!AkO6iLveR^nSJD>0VYGu!Xoh%lr<~u(><L+2}MWCTpqY|3xsiP#m
z=d~s{H!aC9sjUEmBWm(dIKtj~z9sp4Vtql?2=(u0VKHVcG^xsMyh%KVP7uPzsUww}
zaQ$6P*Hr$z=5P!N%ADykOt2E(;8()igW-N$VzhOFw3?*jF)&$gM{K}~vUCdr0rO3;
z6H?FXDA|~{SQ%L1qD@guXCuX|SI1WaboNkYStRZ2_+p|rlbcO8lS7-BxdIH3g3eHj
zngo?nk|@h}N{eN&o#25sUIff8p}T|G_fo<s?;HWX!g*^tUO8OiK5}*x$!Oet)~0M~
zm%J%^G{)sk&Nt<nGvkkkyrKmRUMI-0Ss44HcqVKjwi9})X+s6kmLIh=VhT8BVU0<p
zCM#3SuO|(YUo5M_*FCso3%djN9m2CH(>m#!ydWg7Lr4p7+D&YCR?jE4>eoddR12eK
zlRZr2*GP{YxkLoA-gk3SQ|#}tdQ0c1$gAo1P8;iw3%V70$DDn8=%@6GOQ<;sf;U4u
z0Mo5_^Uh}??pZ!B6}!d#43FVw(!8zTET%@+qjPIi;&;{b@M8|+s(W#R+NwX32KynC
zhsOb@8AGAg6v{u1a-%DQwK5EijBe&vq`9O7s|$Qo<0;7Mp3d5Qaq@kWbF<;mis3*v
zHazy_Ec7&P9sxo0ruv#}c*!z^gJBf>mIxC5eR`_eB$=i;<yC5*21c*@1K2jgofDuk
zMIT4>qr?A%6j%otf%2uB(QRTKH{Kd3Ee%m`^3>wxT56v(6FKwTR}G9HeKV7}9NzJ>
z?~xeh>lM-s<1D(s?6KT_)#GDO4SOshd#J^uV>R7TGTOeP@SUdcL@m!3eQTCSeRKeG
zJWsM-zVl#Q_ptA5n)M5Z)&Madxi4r8F?f%5^HYV~0Lo88P<23DyhAuBU}4;a(;Cb@
zLbrh|kcj+y{_^9}cz$E8PPW*}U})JF3?)&b?2=Cm89~JBO5%0m)I}KnMK!Hb-1o@-
z4Cr_8Vj~1YnT&Xt43{Z9^9oUeQrIF^Ll1j<1n@H6v-d?}Ae1L`u<}Zqrof<cvn&ei
z1T#mkzDOLus8^M3sXZ2+miJJH;lLq?tF@kavo*JfbGjyx{NaV4<V)uXXT;O1fx&pi
z_{9a$y>&iPZp1Q&R;OirK59Sy(Vr;$4YM|!XFo@<NFq?_A)klQn;U8qqipKh9iiOF
zX4|Mwql#qmg^xJV=l0>2Ne4<ms!^<D*d~Rsq-Ok#_p-<kPCuu?6L{nmy<g@yq*4xi
z{Da`1FvgAZEl)CG3cwqOV0d#-&$o3XP4S>erQ5xFm+s5m)87e_oA~^{R^3NkhsCg%
zwbKHQ^41mX3(Hq%%a=JeVPb3!^;&wu#Rome;N+1h_N0eCpkZu2d3E$gTg679koa}f
z&gL2?$6QY}NM-D1U3gkAN>}3pP@5n>o|gyiEdY1W{Ko;H1b9CU`RLVbbhpaLM-!jb
z*kyHG;?CM`1i!P`#s%k>>|FLe{F8Ei<{jVGK?J9B2Eh$j97{lq($v9~JXHp~dI2p9
zzL~1-ceR`g2zPYGQ|(^(*XFGgg?oYSJsGfQ)X~Qy9!V4O9DzY2G($vWp*L&H1QR#3
zh9m$!$e96d8GilxC$;=Dmj<tZ(4($AR>h_+WeA}*sb=GOy@Z8AFg-Sz@PFq~1enKC
zr}JXG=9oWc0Z7NSNzwZ?7FX<~&PQ;Z>eJX>T?IG5zl<jh=?Z)$DrajQn?2vqXPS@6
z>mDp4jXK7SQ1F^_^cE^q+Q7WYKy6fl2bKX&Igh5741NEfIi*4a{%WNJ6R>&{iIba5
zXS?l{DW6+hDAu35TT*Q+V){Rre}K!a(Y!e?8rLGlE7mqdruTZf_~FruET=8Mit~;D
zC|;th+%rDkz=?JDT(NJaTT0A)(A78Rz@}bni}|p;bkzivA7p#^=ci8<-Q?k6+r@Fy
zCs|W*P-NUh;BfGE7l}I3ztd9}0pQQbJyCNGOR46YiAcPF;#V3YkP-SD&}s*x95?rW
zV-k#wH3((UZ4Q+0fT>^cu8!c9iQQM^krgx6Aq?qpRq<`#gB;Z-V621Cs<xwk%vzyk
zd%S3xJqTJEVE`=?a(H~+%v`3!d+1PpaZYBjAA4zKGwCoQGW1A`hjjX>LKl3;DekeT
zpC?y0-`_}D2?A_ib$v(58Qoj192!HY9`faK`ZAhOYs+Nn!xOL6_?Q1`sk`6GXwrIB
z4<zFnoX&$@c!J4v-y9ZXUU{EM@V@<!C)<(li$0PS+c4@*(svNN@qkG*t?RDvsvzot
z{!&c8;0w|N&g(b!CPJQ2V3BK39?-QbnW<TA7R<iSe9TrQ$HAo3ANcA&F>()n3?ZW+
z5lOcsP`-X9yH`K!3P(Y}<w|@u{zv}P{UhAE>4?{EJ?;A5biAD=QDk{~LNo=D$73J6
z9zgon#5wwUrnFhVSWDGWGGab91g1v(?17#8-xEg13;b1SUddmS$JlXbDF{2d@rKlV
z<Bin+=nf$99w9inNyQZ|MU~IswS=BW-~pCw?@Y2DQa#NTr-ZrT86Svn2$cA1YUX?2
zFl@&p7OyHGTF&J9tMW)7f{6>g^^{DbZk2?{l-i1{8V?rNGoKdBV_?I(F&KF21NSE6
zas^sZ{PNUK$b()2?ux$P9BS*JAex<pzOzR&HX7*=EY?MG>6%D5_`lQiN*)xKyA;J@
z`<z&+@zqWLymwQ7sY7;vKzH9DEoXehCW9(wXB`(m9j)i>Q#T$6CzFH$6=EJOp`_P9
z$lqbses>kuCZE(JB707K-WzHARMC2O-t7G1=Y~)Ii(oi}2l#_fI^C2z2&(}Q4pIh%
z1RgGfOJt5~hn^3*S2}YE;wG24uhs5ahKZKeE`rx1EGA-5D|a;fK{N=#d(4}k*wTBR
z{~fn!qX2ve&q8s^u+|*st`3b?*W>M_MXPsanHFDh|6ddO5S`8?<1&Gfn{B}G^S>b2
z)U~=;zM$$o!eq2~6Em%HuTv<x)rP|d#C&<dOfWT9{?wsOWav{hn`Sm(n5?Slj3sMa
z3}99X5!ol3=8cGTU9M{u-j1Gw34HL^J7Z)%9{&fKt*rn>qHkx8vr$PUMKtxX=<6Ri
z*IgVGUdCR$_nxftN$g8ttFe8;{-00XgI|TOzsl-WJlG&&Y^JDh6k`woYqL}rE2<ag
z8q(rr9lUf7FGoSD__UcP;sk6_sLc|;Zsax;0FF!Y2V%CZ)kyts^nySDNxnEMg%hv>
zmQt%1j2wmyX{niJr)#wdwH{G1E#Ln;>;aLH;mg9c0aNxIh87;;4>pK5q8y6gC^R`V
z7N0!Kp5kMuAcyeAQa)1wg2JDn)BA7Z6*hqpXP***9ud*V)g-wDB{}_&#12Nd9BZzz
ze6Lc=kTu0#@P7x4gvjf`D;k%$6qVUWQST`xOpXIzqh~d}UlovPRzRUxQZ5EXcJ9;6
zaGzM`b5ZezaHX#HsqY1iO){<^ZE}x56qpl7kE#iAovY4_cW%9U#*$YJCyKfN*fPL~
z`k?=bm=55tQmJ2BUQ=Fs1$y`LR5`A!D%;4_4t%ueIov&|!hYtolURoJUkHP-aR;GP
zx_ZOVoU^Q6)t@#h12!6XT*Mw)ulel3PwV)o6i_{t2%vN*-*j0%(`G4~wK?Wz&{$q$
zxVPfKQPd;3xn^c<;vnG`-<T0wGk0cpl>1b%Dp2LlXE7JH_s0Lx)^~)c1|X^;gW8^1
zv1mvANL$})6atH=Ba^Hh06in$a;7#Gt*W8;dtg9pzS4*ZbK;SVivv(Dzu|y~0=7cA
zS{F_{^&ps1^S%|Het+xQymL&E()l9e6{0QosMC(@quy>2ewGHjcmO(LE+Tcre`BZX
z?%u~S&EDcYC0>simsRVEeDf$P>)9#SAzgvw3e#Q&O@7CGZjzE_Xy2XDeoUC3rm~wn
zO1_--VcDk12}htp7@b6QLOJst_F|u_Znf{cVP27@+WQTfa74J-*TP7a>kdku2?D0o
z>o8mtuqT1Swb@L1{a`J-s-UVPx><oU6RQA#HmSW7$9ClC3SU+Q#^TwatX?kJtFJ>A
zqh)OLtcOy5l`k#$wX<?y0`!$bW#!R6616VB#u5xT_=(u?rA%wbJvokDLbtPb0noOV
z%QE71!NHpBl3-7d!^DbLh}J3|;>XNp4}fGw_X7MXOXuWE62qmIT!cZbd+T=CiB;sr
z@@)Ys^!laM{oPin-;ScQfD^#q_-aUr<1zMGfrmmZbQnsH4S&vJw{>2fI=`=Q#L*xt
z7ZS*%++@L|?53BN1AC)FI*ApNTddb6`$$44^Q2CPq*U?RQ#l0pD2I!V(Y9q~%<x#l
zDpema96EkY&IMFDBw)Ecr^z9^k}t=7@^0^D`=4TX<jN2pX2|4wY4z;fL{C@1{}yLb
zBEYpY>GNjroDa$q0m(>Ozd*sWcDnYep{2>za&~ra>Qt?JW&<tTrtia_iF-Pj<32jk
zc<TU>dTphpIfi&#oqVWjc!e0RdMZKBs7&b>^_zXus1O0(=<;abd?o6ILy~Ht!%+^4
zVv&fzq{D^d$m+3(Q5R?*jyV;bHDYMb^w%-p(2d>wK|~r_qM!@8R<bR1-yPiWOw|2u
z6qkp(@>UWNtmED5SFMYrelRbL3*6{*SH_6n13Mu&Wu_D(4a8kkpBDB%x@P2T4Xt1N
zQIZpuw=++RmV2co?pFP%jHB?6U7zo=)Z8pH(cEr!`Dq3qfPTbXX*x-lpJg%9a_#7_
zPM<Ur5Y_N_lN<u@0|}zN_(I0K<)WMDQYL;?wQVaPIktUO@!=cZK~TKJFKq+H#vEJ@
z--Ly+AU%1{;p8S6m*{l<2{;QKZN?*}pDWq`-K&3dtC+`hyd-vd^j2-6XGN{@n2GW3
z`Z&}r?+9(68KFa-xA}H%(m5HmnOo7C|1I!kSohPPSGcUjt$?QO|MO+Q<x1>a@xCE1
zNSqC?x_eV_1@J4M?^w?;GjcW3$XeIeC}RU;9X=1=pB&Je<E5TgE)g)-trWNSOta<E
zF+*GbPkoy90uUk+aUM?Rou7X)0`l0ip8dK}ghoX-VRXL=TBx&xU->(wCEPL8e@uPF
zjQJ@xpEt!at1VGyFWJ5HJBMO<p`H#aj_#VM@NbU{V**Axp2qv4qs7)w_qOQYxSn^-
zgi-B4A6=NVg}Scn^xH}~dSr^K3guD(AwoWn;Q94=h1-0tN_A0H?6ZbYj6LGXxwoN{
z46(oI3lxF8?hwK<zwQvqvbXLK_Iv{t!9x4|VW6V_k8C=-OTTLIPhE=^WoeA6AC5?R
z7G#gvF)KexsdF>TS8h5S>ne82J`xjhX`>vHZoX0&{etwUu+#Xm?@k##kqCWv51x{-
zEOSw3<7l7<MAKuuJXbh6AC$>%$Akg?Eojc^04?LPiz=JRTt8N8xx%$}E$&?oBXBr$
z<dS}dEyFFWE}z@ja7~hL=VmOtBbraduBapD`i;}`uBH{2GO)Zx#14F`l+xU{8uwgv
zPs%S-@|$9u(@|d}u)r2Qy=TdzNfYWV#-MvlUt@^)JK^G{_zEpV`H#8t3@Wke`GjpC
za`zBB9MW_3LL_vp>r?!YqYGLADKZ7Ax?LTlBH+h$9tiG{u?3yXd)F1W6-e)BoEJ~6
zJ#DxM)8%NWJBWDm9u?kARrbdT!b(ay@rVWKgkTjw;Q7`XK!J45ItWc<@X!|IHV|jj
z^)QY$OPo+mj^N_fo2p+cT>RP}&>fOjpS6R&*8PtD6yvRo+SA{X-0-f-n!OZj?ZEVM
z&R#(>^H#9AS_^@F8z6`b&0yqk-JZu!EZ~Q*)fcFVtA|At1Txr1^F>vg!QFw?8f<eb
zYQCYB0DBSD!OzOxA;bc8(f`J2J?p4iN}P)8lgDXz{`HZ|B;-s{llxemX6vpZ{+S^B
zo?<>k%<7${woWb{9)mpP#q>&Z0@O=4bMEX@M~k(GU!H7X0{VvEGhOzytlXULvHBbi
zgc-yVIIn&jqn^v#$EPkI!%`<&%qQqAa7alB5*X^LbyNeQGNpAlX9NP*=V9m^Q`6Ph
z-4Zhtvqzmoh3nEg&{1iuzeSJI>ml^Qg_wDy<3^WZ_R@pk0O)J{<Qmkw3-e~?p22ha
zFBUV>-r6matqg^P^|<O?g<9E8+ql2boy^Y_K<6{s>fM2slX4S7F(AA-I@>M{7nKuN
zkBmm{S6~9qdi)L)aGMqFp~|y|gL0$hvduni95u?VACt3hjs0ni+In!bPLy+RiqfQd
zH_Msnckdc#?tLsUJzuobs0w~4`3yH0IOq*EV7O<!Z-^awrx@3mxmk;MCXwL~{Auk<
zH#Ki^B#bk8d*DYXCs%4quLXI}$E2-te7X~N+rAauO)ZBOM({m&P0Wv?jM@3qjfV2^
z#gY(2ua^m02@qo!7>5#chC&z2*ss=;Bj9Kfy~Q))%q04o4z7R;;ohw5A;A$nsYR-<
zfNi^(^=2lL#*np~7)?%OZ7C_y>OPs8G^!&Q9Yr!mzXL?5uL#~ZRe~N#dRU2*v$uSG
zq}q4ZiNcfX>W|B22WXG_<9fl>=1(JXWyi{aLHu-i;7fzAwTQ6n<rb>7ej$0p<Sp<M
zpbQKrg42FM9GH?l<>tx9;84&{gM+>{TRqEy^sx7g`x}rxL-x@Zj(~qm0Zrx?q;y_w
zfnP0{n(r5rtZ>&9T!$$hiv>khZ=H})%<2}feEI`CF?xUxOl=F#^^M~NBqWJt)wR4|
zFVemqA@Z0HM;aHR3$yl=nYwmg*Sh25XT$KDL3q=^9m^lcp6T1@5W1;R71URLk!34U
z?8PrIL9n7~D?|7>67V;?JbOr29oj%l5WYTDryNhU9qWfAN`(dZ`Id=lRo!pU3%2G9
z1t-&ZSvdv!iB55AY;=hgT8pljvKZ;ch4efxmw260-syOP^6msXP|D@k>}s%fiUtqd
zbO)dqmk8kC5MX+(rgLslqN>COEAdAarCZTGH+*i>8YIyeu&N_@6_~vSK#D&j%nb+$
z#S<GuI3mq5NKCx@#cuvQ9!cZD(f|Q8dzQ63;euo7(PgEbIL0U76Ax*gi6g3Jy@g85
zKe1Z7IgU7f>Qd<&Vt+mTEa3M85$P8y8dg4jlIZ$0A{Py`Ha^CfC%Krt)I*CGPt!oW
z*%MAA4N?UTB;Vv1sOa{|_i9O(Folrp$K-cjbp&J{Tb%H4%-(d6kf{j0iU-sHT~q=w
z8XN)}jRBFZciu-o_l$MkL!$|&GXH|0NSecA;GUshj%_3W{@JyLuD!;!t{3z?RZ`t1
zh5P#ZL{=#~c1YLm$!tZoNzk^%JT=J;2FHMYoD)(5byi0h&0P+f#9qfx>lV@O3%e;t
zH0ypdj<U*#E}c5duIl1Mh+h!qXi3oZDXLUT?<@9i(bvTXhE+J^JE;`dcNUILEM*$I
z_dCTa^GW1DWTMy-Z!Tg1D77=CExnktZEO}1Db^|S*FD!b{@zBm!J7tOCHdse+~q7{
zfCv03_F*@O6?M$#_t?edV;;%KmWJl`>ofXH#d<z$TKU!<m)F9BMCv>4DIfcXl34()
z)016&UWYvK%(c5mN%!1sV!iFPvYK4$OJI=;j0-=fpn_=ixyFLq3z*6)L_GQv86D5z
zJ+0AqE4xfTK6@p3ZhcqA;abJ{1%zLMd?nRamQ*>Ocaq77;d7g+z;PZ5g4O2@WA7)x
zCFEStk3b+bxB4`VQYWgrMY$l06Lc4oX+?aQvHFUmeZ^pq*=7}UHNSC7fd}2x$G;1W
zUm2v;7yd;mVR%3c@CVQ$nw2$LH<$ja*^I@8(&H@Wh^<87igX?x4Us*5AEpBzbBYSA
ze?AH%Z>IgGLu;YPkDkDuh)dNlLXV}&OhMObYY%VRE4J02OL~FQ<hY-D-V=Gk_GwZ#
z{C0K%yDIrch{i4>a63P%>57;6=d+;wS^NVV!!;X9a~h%mU!s5uU-$?CdJ?1Orc>pj
zfLBUCQWE;{$}vD+E^$$+E`+6T{zzvtEet1zTWPl!_4n-mWa2JX@Sg6Q%c!1+lofxZ
zjLIFTL&Zguk1!pR&${{Kfmk9TWxJHcacuVuM!=~1H@0*JDty-(2ZrjOh<%&^a#ax9
zEI#c?E>K4&iGHq7zj1Ekw!xOmy`6t6@YY=dbW_1$;QskkK0Bog*B@By_~lFAPxs)6
zXy};k^cbq<!nrP7owZ3=V;SG)6BEzXZj8F+BSl!mWcN!V>*kL-mtk^l)~V+Qp$Qtm
z65r&AAOX>D2>py#&<(QZ?dxf^7$QKjBMI(<=O({+@9xpXA*qkQ;&$JcZVH5blp({3
zeo_S&&&NVu0t0{R9N|SI`l;L=ilns@MKp}NLw7m!%#X8A<>tolV;OG?wgL;XJ7Q)e
zPouQ29r~45Mbg)cysc6^9`l&~)0#;8f`B|hSA5wIdFl&_K>eWVSWBx?=s&HR){)>J
z4lUePD}Sthl`Z0g_R(>z)>u45*IiiAO&8IeKdru-I1hAt4khhfGy2cM9~}l59lfL(
zP~~EC3h`DJPVG4a)#59|l+(se?XAppK_c%8@8%9BZ6I&PJ(k#Et6EB^x1}lu8$IzQ
zcD4=DsqbR$ly!NP-A2PV)drjJ@OCo~bIT-UF0(7r6?~RV$_d-50nhxN3ZR6*EQ|Qz
z8qj#>j`zrCstWDziM(LSczNYbUS~0BtcCD3DZ{d~1^2=nS7}arB6e@A{t)HQ`SfFc
zR>F2%<IDTjs0}Wz(bm7Fj5TtG5_lRSRarU@ZXxYO8%+yp9+6(h^tEE$p*2TvV8XCu
zeQEYyl1jFJhm=6H6mO>?(H~r<Mc+9!yP>}daOx1U(;2119-m;HrE}PeBMn9`bv`lP
z{(#3-E6Qu--9LUjHZdpT6#vDazescmTZ3(gwb>xPsMJ+5h^sCke@fu06}E)EYyqTU
z@HX<go|3Icp+w4*VbgGDws`$<KtO6~Dd}1SPHui6?Y|KZnu719-uU8bB64RMSO;y?
zH2_Lb*yIp~I<}6gfi|k4U>Ua+3hU}zYgl2FckS8ZItxg;F301nyWJ*?SBU2i-3Wiw
z6Z!}BcW70xgRjRrE+1(s&u>$w;nO0isD#iL3%JB<5`~N5`0MS`aX(}OgbebE2039!
z2mA}Cv<{+6<<qyuvCJe{_CvxoIv!aP?(Y<N)*e|GfWxZlbIz7G)0Launc7x65}*Ck
ze#xQ)7V~+ftnOA7g3DURs>5f>dl(;C?Mt@44hmSNiRpEg@K`x|GSJLI@8h6V)%Qf1
z<@VB|MwBVGeJ!}WcTc6PqiCqWSpIj-^jpJVpad&5nKLD?02@<Y4mCM%tANRt8QR!9
ztUw(Fsdu%~J+L=8jc{v4KJnTik?^Uja!{44an%ToI*Wa83(M)N<lGjD0U=gW%G4Xn
zh9cVvmqs?c+T8mbHryo@Lht*2ms5b%S<Ju)rc|u%*1A^o435ERGtI+{VYUZB?X{>p
zUOCFmdG4d!E)|sY%kE4=TR_JbMVS~@99KVV;itG!)~z0TkO%MO$GsCQmhhnm{tvwF
zpz^r7HAg)6%39fZ-d=A;kDg=qJ(x(E_8fU`J<1Shok%IBX&-+$XgHqJ$V_R{9rI60
zNPEX#qNhfoo^KFhq3)9=UYcq1`LG79vrAsZmIP=>;dzyOjVw{Wn2#!0*+1~?fA$$~
z>mRaKfxn`Tk@ANENN7by<!@ocw4^@xwwso%6I}>9>0GN@amUMh?z6p6dX`Dcv%*Rc
zj79PowhlzDY=~=p6$g{`O&<4XIgM&ex033*pz85}{hUsm3QrW;Q7l_m$KL?+ZM_G7
zOwtYg?2@Xhwo@Dqxtwv>fN{nvSQj6k-pe(@y8|I6JoDVgnWhd#*V1FDLfd^%;8{?D
zs!^O}SV4FYer>y|pxu4q8ZDpYgBXj?(Wq`R5FCLfc5+K1;R<=g00dRfS0TMQ?p9U3
z2L<+nbp<JJ&OfY(3m>eRlKzGXCdj}JyrQ(fa9Q@VPz2#4Jhhk^>a58Fp+h1Ktuw3a
zB?LCDz0a3W&l?#O<nyZqRl3<!TgPxv{&~XBiIN2KEW=kg$op*?K0B9ge>F;@ouCUO
zX)~(IuDUyskc6_mi`?nnP^*7juvn$0N+mHG(@A)g#L-D_Qjn|4D9JTZCj(*M_(v84
z>0cKPp0i@Bcj)f(FA=ZO^Z09rXoXalLv3tp#*$5nr)h2-fW;&=S)-XF@8@)!M8CNb
z03wk4_0VMUQMyees=N7)Z6?RIqvd>FgD$=^1kG!#9z!B|0HC$%7>GE&LXViH^qE<S
zE33lbSjjTSIL{z_aGGT<clf>%_n%RcmjZ0pRXF_;SkMEQkM|0z?vx~Trm9|o(7h<8
zIae*No1>TUb(6(g;xR4B=*Z{efj`ao{lkwoEr35>VV0S#Mw_sHyP~R_o>{M<uL!-z
z3UVLm&Y5&-Z~`hjI|XZyTo(<G@tFLA^vbo`6<&^`ZY<}cG_9f*G97}ufdNm%%?0vu
zyPJL;1F##z2z;?ycJ;bSeOK`-p)Q;ym=LXV3W_G-zOsC%t5hPr{4?7B8A#ek#La?l
zO6pLOF+5J!>1;{aC~-gI=xMD||2E#|e0TZ499a~CStoD(2nd=mLfhS%v7m5iXJMxy
zVb`LPH>>O4Nk0v9b0q%j?G-R!kDDD%7d$+2wEy2EMsBr}5SFOIGM>N7B%iv7o7iqI
zQJnm#_)p0FGz+|hHQ40HU)`*gk#T=6lMUFDakzEGX6p$m&_%Gt{gJ#Xg-OT%ldZxM
zuglZrIjb}Z=?Yw?Rtl(X&SxCLM%^Ait=Zod<oPGTTp%J(tk)P|0MG9VY~8&7vQD-t
z^6hJBkm@5X>D(VqJp^H}uJWjjf#C#V?YlAm8=FtJHgyBuaeVQYJ#poIJ>saHS>Y5Z
zFQ?pAf{F9P78M{lr8K_BF_+^WMj`Ge&YEb%i2&&c=K6Ov!R%^Kc_|er<4!{y{~^dp
zY+%chb_Fp3z*l;JhAQBb=Ga{i@^}}^)T8QlxqPVO(1berStxe=3pM|LQY0M05<-WX
zzlpTt%)4gI#G+Y!tS$59vgczxR$c)Hcdg?x^1<zpuF|o$&^QZ=Lv71pc5QT5*f}NR
zN(Q2heGI#338D+<@2cglR`a!mKfJ+@cnQFb3jC4K^~fF))nUz`VDvlELp;xy0yW?~
zr8t&D@rS)=OaFBX5Ra+won&K_=^tgs3R5^eDYP=z)^wk$BjeVz?uM4loL6&=75a~B
zsYVbhs*_p{I*t+NMh}rF*xzQ@Isbl+LIpg6RrGf8+BYl^c@%uJf(q%(LR4z;X2j0U
zSbb%Y^YjY4gv$4v=Qa$O>~8wp_<zj{a&)!t?$`b3$ytZtBAdy{&2U+CmdW82T%QS=
z!%igQi#P7$bUX8yC8XeO6stEF-8&W^XM}8E(i2(%gbuJ50XjZkB;*oS`}7|0u>JE~
zU=0}1RRlF)8Gtg<QSVgD4?x9i?U0%uX)$`q7qdkDU_I?J37TE9A51n$zrhH%{X0c<
z`GDC}R}wUdf@KSgL{SQS(aq|r*mQ36sd+^2fju$bTI(y=s0)+|R#6(z^IZrypAZX(
z+W0XQJ8DeDh5Q=^sOrAHA>W!@SBQZgpF&zQU(vf4jShRfsZNMRsxW5a-wI~6E=wn_
z<DdOuzj4chGnk3`kVAvAh*xE1W<3z<ygK1qi*nI5>9s71yiy5L5ql?4B|t8uC}7c8
zH$PQN%fi91D~2`;^P?1Cb9^DPvU=!6WBX^aL7aD72duXNBgnv;n8J@tEj|J&9xrTU
z?S{T(ntXc+RoB?uAN(41X4baV{{-F7?g{2&b8zQ;acprvQm>PXw#sTSTG!Gi!T9Gi
zbi9}!fJ!x+8dJq6`O3ah-$ofsn5bQ(imS?J?Et~9@svAm)><?CI5T|Fzi9EtH(+ld
z4O}pP76B5C5^9kkW-wlJ>I62X<+b_8q~{~_`YK?;PMHk8-ssk%-)*a(tODR2Xooik
z?VyhhYNAV6S4bXLr{^k`lzAE(=E~%kk5vf%V2$6V@CBiQcMVi__4i`<)Z9$;<2Kzp
zh3|BPU`?ZN3I7Z;gaw|1X|SCB4`vji0TAOtt)Uq}$5|Qv#|~<jHIOt3P7#<%Ds*CM
zgwp-_heT5Q$a)LMut|yj%Pwwo3&7E&qwd1P!%;dNTl>?{d|6coNV&CUubY>In-yK0
zR#=tVm1Zv{l6V>dVnP$vIfStEN=eq*+fvruv~W>Q(8t&hsPKjCr#2#U5q!LAjsM`W
zRfW9ngL(avyXq4>jD;+b0XxHQnJMuX)SP}(>>Mr8q$=e0)=wu>OG+l+bY^Jyym(RS
zkDKp&mWGQU*qkMzH={<cosd*c%DGg^gE_EEP{z8q|4O+=7kB}Kg~P^@`C|F7n;#xo
zgJ5D7E0%9=H)6i{^wVABGZpf2i|$I8@nr{>M-?qsBK_mDl{=rEqp!jMpLxOQ(=j}<
z+3%KDKkf>3v5e8LvPtw@{TMj$qC?g-cB8P8`p@TnGP43VJg>r1ky!E)`joNJd+D+9
z1}I3q?gE>WfzkBXct?1Xuh&GPklp1fV0^Tzy>}|R$E0{Bp{mc`03lFgVKyh+VsM1g
zXKGvhrPdhB(TaKK1ZEv$4vD8r@lOBPAJhZLyxUltKVx13G+&kep#tfu=r{j|3XE$w
zRC~}2{&d%Wr$Ue%A_K9areHfkV*M2-y*dd~eQ$9LZL#rLRWhDeV$J0?Y(GKKAp&)3
zpS#j^pc#klJqQK0v6}TU(bH2hKKR&@W*JrVWPwiVaWYj3=`G^e6BDC9vkOcqF1bPG
zi#<MdU~h!f|4@X(|A!)|=@p<AYAIg=M<-0;iu*q?A89v2VO>*%bqa{q#_S5;E%YWy
z!NT}=yE9LB;Ob<L^A1+MEtgYjRR+h}(PkZXB1q$T5-1$d&QE<C|G{(}K9JnTmy#X<
ztfgZhZTV_f0~&+GbwPz$9h<yN%cqhi?w2GuVqz`vzcc|Nmm|*-f8plVAVD}9&M+d5
zWYSHQs*-T@`QU;jY>Kfi9c1KMcV)OkSGVxd#U6HTm&8<wtbv1EP%d|q_A|n)Y|7OX
zRd&8~=f>4TH%&<M51)yaaJc>TO@jdH_B{X)QB#&(_-+m;{i2S-oz#KP8^Ixb?tN7C
zl}z#ak6HdzdUtxZE2A~BfnlXsfcLS8v3jDi-t0!i`SNwSp&CsH??in|cCHL32hB+d
zR%-TzT)@>vvLft&nq-Om4P}bI8^Qy;bqsN6%~qpB?xvTseq3N$ML3O0Y<CMwVK`%4
zZFY}jnm;1%zj+z+8IXev?=4aS$}Y9lu>l?yRpY*rE$~vBK)s}AI#od=Wj$SfH4N%(
zjuQ4)&iKi<4{+b?N-~*=XK+pqE`-Vk(VngJA?m`!1LuHlYGdv!y^ptRbW%;N$hM~~
zv3wgpd=7m7&!U1Taq4O;;iyloEm_9{pp>jTN{RAlel9@qPx}gR#bXe8xiNREf6>n-
zkR&<rr=Df)s{#r1(#DZD)-#G>?(E*Mebn<S7;3zZEKas?{oV@RZvy_65a@8h?KoaA
zy(nd;H2>$tLJP5V%U7^n@R9%W%+OLaEvHKFWDsvQ)45$o+u;*%B<}xZ6~?%&u#+x;
zS0L;iB5IK>Ae|R~7$Thdu1Y}YHN*lL7$bPz6$xKyg>)g5d{f2FW|~{o-DaVAAAu6#
zg*0J2Uzg_Jd<TRS=4VZ!Xn9fy4dbawSI2|64^Kbo!*9)TW<=Ink;gO3vYbzM<aufw
z_kBI>zAsr`G76m7f%;2YSfBio7ClY@I;HM<y3d)92Su}2yO00vdKs$$S-sEQ;RWDF
z3NVI`sCUyCZHvY%Wr&_-_MSP!1kh>%4jWHv-V$%9`-co>J81nA?mvA9ev0*2{YfnQ
zs%y7oWj!?c+D21-FLu{gHdYSSJ?+8Bq@Rrevzy3-rMu0>o|+&b1j;Tzn&9yA7Gr$2
zku~aH%u4t3I38iv;Z=MYFf`Za{3}_v767VUt$hM024Qz}!X)G~&Df&37FFU~1q$&q
z+9_AVUh8+1<niiQg?Lf_cjpj@9z}&a!(rRW)@peCdOKDMg3~%kh<m3|(WbafT;%Do
z9Ey>@BV-KaU3qzcykTl#jjFcRGdOXCc&AH#Hg#$on?L#FJm%ldMOO%5QJwuN6LNGT
zD3SH4_Vl;m-LQfM<Os<a6E<l)?;Vkc(G$ajfF6N$_zR(E5uJ;MrWVy#^4ALszMyO>
z_m#d`h5L`12V^Tdm=x01p#_=lup90XAhj>pOO*foa<IdWc#_Kl9t%&STo!_}vlsY^
zoQX{fUAb`UlRvMhwL*w942fgq6X}JqV-Rne--{mesKVHPdFDR>+~o@x{sgpwdG|8L
z-~>*@<(M0^{PYTFHP@Bt<h#f4o7A&&;&um^azh?Byssg3zXU1RC>K)!eb=-OSXC@Q
zN71aLI}t`SL&@13JbzKxul{dLE3hjXJMf{NASshj>F&{Y_bG1E1lKZI%`ngaLdxWm
za3BSDk8GN`KC3e|^DY+PB<{|Qtu=WKU1-u-H@Z@T2+ZcY>(A!C6DrC=DR@5glZzmA
z1xW}N8s$d7-htoJ3EYPQ=wTk|P(Y~#AP7g~-Bp&&x8gs1+oGM2sPW&Xzh@22V~it9
z)nX0^<MLq^C`5(T<f~z`?kMtUzN+U6J6ziWng(p8V^<US7@ax)rq^G;8Oyd3RCI58
zwQcEA3Oce{6$T?(GbL^Z>G$!&^AJo-5J#2@&2zkI8lZvj`IpEKJA=jx>yv!=#*C);
zEGxO5x|SYv<Zwa~3u9hrAFtT&MBq6@5Z-(@C-b(8j&ZDH{=*9Z3dG@>n_dL&KLM6K
zs0SCrx@c3^!_`l;(26uhFeBN?EMm0f@*{ik)xX0q)xcyva~TblM?HKYV;v-rCRa}-
zlC=aV9$TIJKK_%o`Zq3rMb2G{0FmE^x7~9tT%=%|9=_c;RT&i5RKb@&G9wQlhKJjN
z53@PxuDV?hM)!)`o%4n$7Glf{qPu#ZFDhnuv<;fON@(o9ZJ-^K4*02?ltcVVfGWY;
zsam;bcpb_y+gL&J*GSrc*Itac-M548!K1+M0Q<a(0;Y{K+slPL9%Y~{>$}%WH>T%B
z$4#!76}lTsG*s;}SwcSNrmD_r-t-O!QiOR-C6amnOH04xN;o6fmjS0#sV&`DaB^iY
zvEa3UbsrH~*VQ7=Q~3MH>*)@+JMkrO)sNpo3NPQm4uq<@9|>ttpEfQ>NpM|KTNR6-
za}bw`0PVdkZu<nsg{X4;e|aB_g$bC9Fvvp<-_BsSqns>)G4_$`{Nix-fNUfoRZW*B
zRcJWVea%i<jAvFe$FD>De}LjfS!Sy5cP1RaqnmlUl<_*M#VSuNgp${IOv6&(^$F?w
zRAdc24NWrOTvj6YGV#50&O-l}W&*==m(Pn+3rNC~*d-oCXagcjg{$cA4hT#Ipk)50
z=f-GYVVqjCV)dJ5ul-nF_cscK%oGnQG+vCApw5%>*rqU!F?NEcEACndf0q?tPh8}J
zIgYuh<d8Xzi&9SPs_xYBu*fjhjqnX4<f-*ILlz?V`qR-L{F4;vFL>o3U-2wdW`e2i
zcrQ}y7w;*yVb(o)2_^q`$eMV7jw);<CI&Lne!lP-b7}4_US@|$6l=kA;UCFcksF!Y
zOX|}tbwYHmB_}<~<_K<|>6>jUL`wMXsISeWI>F@Mr~Ud3HyEUXsGL-nrtA)HGVJwc
z6J_f4VN<Us#cX0$ihs(tP5!VFBI-3(YoK+No=)~r0PC?Rh--UtB%W7md9*Fbp&y3I
zV;U*KkC8aV$>ihxgSDn~JA$V4cs)c>F40p9J*+UGyZF#JH#gxWOFZPSuYV{B_?V)+
z99ZxBj>eyZI@(W<I&x^S1M70*V9PIPQGG9su9?w^4jCy`g`1N){cJYi&~prE3f(l?
zfBGiBpQrE;egKx&S42`f9#nR*+d!+~LYKF!@GRhBhF}2;?WnAM?6NJtr3^#d3fAc=
z-i;{nrT2pcqzVZI%!Istk)pEEqNY+{fG+=SGaqs?p-_|hc`r7I)H3Q=cH`PcE{`e7
zQYE|tPkKfPDs%0TYR4w{Z(oZ%Tmle~D?|O{jL5hJt@_m$vXy%2bI(pwV;&b7&M4G)
zzjZMK-Ee~BiJ%3IUN@csyLl3;5ZDwOAq-%hzj2dxhPYi|rLz<GJ?CqQ+9Q#nX?BV2
z-1HiZrtJ-8RoIYUveL5LEZR4NHA4Y-Q}``Hk&4Q;tJ6*8fQG1d97|#8_n+O&PjXaT
z&Bek6NX83HvFLLb2(#!c;OCP1!~tae$NeBM>VCf&hOLgu@hZWmXi09XFxmQs-e&rM
z^92=TW37b{ul}5XMwyT&yvlfKNYXW)X;O$*Uq0KMG<QQ`hwS3r#*pE6(W&r_)3C$l
z@WMs3@4QLXV(l((DyG{qaw{r6YH?mIJ0kouI`A-lmy4#<ZMRnTJN|+h3vqcbNuLPs
z_1+@|KPQ*tVuJ_ZVC2RxnQceh^)ClPI@J?Og7ovYeC1MB!_8c&PkEJdyvz3lE42i9
zJE=`@`<5nQrh?OZ)s1xuY)X;vqj)hZ)@vDeC2i5&5}4TQ>rV4$>mOy|j@faCXFS`Y
z#2hdL;Nb-dCgm!BG(x`H8+A%sCQ2uTrg3A)nwo5MThvBp(#G~`A9pXWu{_q6E9*d>
z83)UCH&~OCjK%naRC;<v-ZxK6wY@9+z0(Akx>xGH6)N>gR_g2U(^~!aIq}Eq+p!)~
z&JKaMJ{=wVKqsW|%7$V^u@sMs_Y#+=G$<uaSMc|3h<H2(lH>uSp(C^8tiYUr((m%A
zA0Ph1*q|SK*ewYeig>(o!ax_c{{8A#!i&f)2B);)uacvK*__&<IxH=<kQF<s2WEXr
z0`{K~t(=flC6l5F?j~c2GyGE{W?A;NO>fY4<R=Q0btwsVaU$UEKRn-i#otgDXd=Xb
zz8(WykCK=(U)|>y2=&LG`Dx7G0s9yvE#5?{NRH!$NLNKdd2kkHW7#d_R4@TM@xEIV
zn$qMm64H=2tQ7+rxF~%rf#%Pkz#yxIPb<BE04c`|O3{<o&}WF`3#0}~gViAJMO3GI
zQ9snN61Pvn-|`DAIXrkRg7)QY|9$ou=#f;E@8{)5jnfVf2R2ZZ4ANY+U+O7*GSzC?
zTYpk4YAYB=LJKM^<9=v*H>1FAuUJBSGCqP@-(DM1tD)5zV2e-&m%6No?oikDyI=m)
z(YUj7>{=>Ddoxg}yR6X(*nH9hX`-nhzdtP4qFmp=sLCkgp(Qcm7nPjsZGPY<CXuv7
zLH(^>NC+DqkzqmUCDDx?Y;V8tc-BECx$~&N$w1j`jc$VlO*+0%T5mp;pCy0JK7p_%
z`UM-j+Pt;Ejqi(^(^p}v<Tt>ZM_<cCkMygk5KvV>VFBAt6YWqsg0N|NBTN1zdmg05
zgfmxd6O)=vMY?ATCq=|=a9VyLR|4cn=TyKjJ?n{9fLB#f)mtqz1Kl&eHI1*#=%jtM
z)a$IQo@A`g9g~u900opY9bc7@j=XPB<rsSVD8xg?zM^q(vmwMigK7T%QT2_{bvIwQ
zO`66|qsF$46Pt}~HMZS2joH{X8mqBwwy|yAU;6&<y6diWRzBpzIWv2n+56cXWJG>q
zVEd8Kp5yXTItt@MTn6i~fRM_xguD6~^M(I19~_n{Rxl~~y61J4YcCwfFCaOMSVDOi
z3zx}9Ol|iJg0~XKEP%UK*`lU-K+0t*0<_IJEsCM^W5%g2dfd3*1Lo5R#d+%RjjY_=
zT0>QdPQ#gHto4&ten+#g$MY`0fX4avgbCBY@sowgqwvV;$mfPfhkh};Ys(J1rXfmQ
zm3$~HEv2VwOml@vA8T_so(1PlipZQ&e5!`@*9F9JBX#~>%_bpFxK;~v{~Wm2s$9U_
zD;s4U=`GUf@#fledE~y(C0_oRyD9u2eKagPqF;zp$4CNx(6Is>G&Bbkl>pdbIP7_0
zig8K{G1_MgB7LARbnrvm?`SVHZjn*^Djp#69O^D|*Wl90+tRL+xj03C1Ii)F3|d2`
zwDOO66gnQi8LKhREz%xORUp|LE05J+tL%XD6us%bh-X9a&e}37&0u%m_$>ZRyjw@h
zxY$}zQz5NtyF_8xc$yq#qnG5^^A`nZe8u}&Z>{HO6_-eyN4-|-bW5tiZdMyXpp%$j
zfH%9e%q`|*i<1ePnL?V4q7Ixtiojli`#av-TFH!o`m%5V{pxoah}y+B2Lf8L^h<sF
z<1C`2iu^W`_;wk?S)!Qj<~db61;3-JZ-(L-vyZ8~ezhykjmT2n-e3@kfR4i7)iPzS
zf=bFn_z`JQpf)hJa|Xgny$vchRF)g4F!1+t|Eq5uuXd`~4$IrxII<bLgzLYFG3hVu
z+PQ+8#>ZG7MgJ3|sam?X!-1133gz;%KpL~TuOwKD$V3nLsg=xrc6Wmt_NDq(rl*v@
z@X()Q{1CN0%uj9?S$&t?xXhPmQ@DNV|H4{P4=UXa?!;Kkt%zx8gePYjFz}hG`l%YE
z+-!gAd*AbBYmqikT(d3q-=3SBk<ts!AtG)>vUFHgx##St_|?}4(^j4fF}Ia_a<uCw
zty`jkQqZxE*TjH=xOOg0dzi0k%A9xcExFyzYTK-L?-lCv=|C~?x&a%6l&5E8;2bhy
ze|;4X<%W(1gZvrM*Pd@ZW)KnJ+}Y;U+2r!gvXwfj=BtSl8pv4tYxDCvi4=M(lsK*_
zci-cJj_o8MU{wX6SP#s9Uvod4U%(kVsfc#}+Si|GXmBVgF~{T)&L>?oe)?F^T}wB5
z@k0>UTb~_fGb9im`qd?1LUkDC;LX9QM+BFzB%fb(HY3fexJN~^Eln5NhIDO{msw0`
zLzFT~0zmh2-xRA>NGBF7Fd7;QP+rV_#t$T5IOgCXLN4ZKSY#;i`jMV0NMMZ>)}KL$
zBtSZlndH2}h&+r%nJnjPNJ4U&Yd}g0OX95pq(@_WtxX7T-6aU7^i%>!1jKasA=)js
zG)nTh&1!S~J;#ROIn175M}O8}33t^3mr3HAq^6aw#%&;l_=c{E+L-bKi0T_a!z(A{
zW`4t}J`M-M-|l%jmsN1&WgfZoK=T=viQ$F789UGhMKsDJrQ+9;``mm5ShR_DLW&@=
z_u}O<OknZ%hy2Pn$uv{n3?UjBKF9j{dUx_R*O5f#RRhIN`80M1ZA=cgqhHVo$!g4O
z>n$SXCdFDj4s4ST*D&CNcBU{FhFVT;4hSOXfK-s602KGjOQdXVV~x(ZmVFcF@RR4>
z^zW?4GuU-&7-Q@=08SC{4qd1i*(&NV8(#E4pRdd(#l!+YmOF+-;5`_{_DMt0^6A9m
z%upsJ29||<0;TWQresV#zz-cbg7R-BW`Oyq-5OSqmItoQ=!PTEvcMGC-la0}rC&et
zBS`R}8_v_%`-g1|N%a>nh;nFcZr2E}tNk$V)_pViJDa@DMPq1xz9fT*e2>Nh%At+7
zE9<2N8Ny}2T?XQ@0#JOvoURASis+IR5?_qyu53n5t3oQj0ZHvI0D>$hrhaI>Bgosg
z8R(%0l%dMIMYw)mgas=DN8{bOJVKI7#?I5O(V>#oK$o$7Qhq;z=_?}|U@2eKj74c2
zR}|F}-aT`HD!@*+qxQU|ESmJ5N2@7|PwJ5TD#NJmH~2cw?!NQA^Mp`6ulST5GoArl
z{^a!YOGF>V3p~CThBeRuK#&WF=KY#CA5B!DmNSW{xd;;``XTyFPbB&DZ=#(wxJ8bR
z-8I0nyuK7_1%aNAQ`ILZ;BOMRY@?Jtz}qXjudnj6%I@>Cc-8`9d=TH0Q36b``P9-1
z^2!meX_mv7K&tk83rh^AGL1>e=z7M#oiHDbP9cY4W>-?`k~{%$GTHdal28e3B&GQd
z!V3P+;*tuPNBP5jKHT4|$2~do%b-n67NAT98+CGG9$o%S26lOJBG-ppvImpVv++Ra
z9^~t-)Y9hvH_ML%SU{YgPs25fDf}|PZA940KYjcK`*fqXu3ubaa8Szv9tPf`^3$i%
zschtacI8loKl<Gz%wB{T9afx0LtoL^^|+MH?jtD7q#WVs`=@}Crnq>)r2z1+K7aYD
zmVje6{vB9s&l6rY23?R|^a7oK*YC<(4~~PAb!OzSTl!53aA;$}t}0FWeWH+S7R;<`
zmXa*l>B&!{>(=dSTEX36bgIEV7`Fh$WC44LI3Nm%(6hO;VVSAzh)^|{A6xwB{}*<W
z+N$aMF|g|(Qhin6f)>Y|61vkF105c<u6Mu}&7zr1q>+&5f6lHPq>Njd0K_;SpGU;_
z6IfaROo6U^S8$lD#4pIB(@GijEjUp_J;IqfF>p8n<iS)wpLwUrV4vH~cpvr~7O7f#
z{ac$Eos=Vnm;;TT779;7#?N3c<p*ZtoDm<+8gjmop9+^%iy-k4#n1pod`Bwv3aE;a
zfc^P?>Ano{bT>;Y{JTfab?+A~#dS9nsM!_JnbH>$)|1znnmk!V^UndO3M(sD#|^9f
zQ8+@YzO?$)S=Cwc4PDsU3%OMnP*6A6<ma<{U6=gR%HbSaR(rVU_q)KNJDTL2X5ST|
z14VWg*UK>(`MPx&{yg6l^=K-l7D<dbup|@Bge@R@*8%fyNyCk;B0f@r?@L-Y`EN;V
zyWaps1lY_L#RFS$9fe0#t1y8=pqjOoUaBkj_voIh6yv^(y2nJYsk;M(-Z%2>b1;8g
zn0>P|-5dCRikFB(v&4iBzopib9oL2*_-YY=o7IdtIk8T2<U*SM6VR^W%LL!hli1O5
zh+|aVSCp6>K=NKX1gyvjJJBN-rHv}RB_H_3;n5Qg0JY52fTS*VD52p+0c7PAr<@7v
z#5Ti8qYM@RCpcdZvlx06E=Fcfnc%%9*z9d>w5mD^RM%C0vQe7I_QBYS$LAB^ugm`@
zBWoR9cbB=O->#-`fEZJ|SZFrTUTFJ^@Yk&`aLvbNsA=iQ*@Xxx!0Ta0U|1*wKltPR
zTi23uvI1~t865y~iZHQ$yjD0;*b*Tn1U%h`&R9m1i@*8^%BdV|!S*DKK>(09twyF#
zGCoXTCq-%)twnsfmUy!XcU55r4hx{F#?J@xrVcCXx~?=!WBL!c=~=_Ojs0zBe4eoc
z^oZ4xXJ-k%uZj^+D^Y@bW12xzo|D;DR(=Aip8(OR=psga0O!JBqye-?!d6<>0Wu>B
z!0jOVx{3cCBF2ZM&;GQqKj+XDkZcfE%PT|i1Iw{%*}(r5Y=dOM**DWYJa~bI;CIb;
z0MdaOxd%djBqZ5cqAxQ26k9AfKyP$e<9YM{odw_nmNx@vza?M{wC~4VpaQBF;<~Ol
zYv|tC%XDjjX@eoAR0XRY>IR1?q)P(k=P%eisGQgqoOGamBbY@0xi!Kg_wTn_2JjSg
zpc`R7v;Q6a!i~oA5Vb@A`X^PC=Fq1CCMRW=(EMe9wjkCf!-qd<3H=zq^_v5G!f;(H
zY^fuE>`|joB7?oiydH0xdpFNbl>4~gMSb01Hbs4hKSTL?QWHuRur`rT*DUS_AyLO8
zAI}>2!okeGp|cYr(V$={_^+!PB&RpDF%Yzapqq94J4{C30~Zgpfa3U4;*pz@hj+O=
z$1=TXaS?2y6QDPb_ci|U;kv=b{0d#{EL@K(N7aVc-m2Sq{lT<s^_lj@5r&fF`Y(Z+
zOmYF5HjEkn-rGsi!reV;($3{a0Gq$Y-qnwWt1%KpE#3P@fu~o#q~drI#aII%fy9)H
z_=@HAl)KiwCr@i<WqCJJ=Xs!$_sy0QQ#A(sF=cjQw><TAPldk~!YaQbqu*7_NGsWD
zc?@`1rB6LT;1t+rN!Hj!UfHAEcxy#8@eX`Nx8ig)xPKe+zBM|#^Yebk^Zs6vUnCzQ
zP=Q4_@hQTjB(|KQw(QmZsC2rlduD|W>n!dHlK`Uf41NgnRguBht&wG-Pm~u?YuZ_r
zOS;VQ4?(5|MWX#eTNxeYhI@|2r9t&B6S|4y-GG8A&eR6YVOaSU&c^#DIe<+%{5#Er
z|GP=J_f4wOS18KE!mY{1Z6H@)?BCvg)~dq-GM|cF_g05yYWzL<#$a`>D~EJXaU8|~
z3yNs+yI9&@V?U?MQCaNbD;FiygNUeL^Yla>PJWI>0!$EKcr`SJ)iGp$*>=!nsq4^3
zYxAnSIt?kOd^MkFJdPy@=qgH@8=Mo5K1h4rtLIK(rf%2A>&cPY&AV92r%imEPitR^
zFqxY5tOM$S9O(4D_}n`Yyr7C{zAT3Pg5C}Q)Jn-2I2g__IhIo~gVz%k@nO{hg$odq
zcw7i(gN{h|d$$J5Y1egSSq6%=fU>hbnSU9=sRepS#IyzY)7n<1I}z$(r8mOqP_QK5
zQFr0a$k%ys^z*%M@lv#_oK|K3Mr4n!Jn4y#iAyhZW?Y<dTJKfflY*U=>Ro?yu9^O$
zGIvJOzzPL)V%hACG~$74{7}ON-u&L;_lucmdAR@H<gCRsYxXWsv8)EzjF=4Y>yOwv
z+?BZuNRQYq+yTIV0WL~?uf`Kgi{z-&SRAdSC!n{a<kNLsN!HYT&PTV#6i>iFtOgZ8
zZ<qPmpx@@??cJEjH^P>c9%HNw-e#{S69C|OH^4?3)OtW5#}1or-R>CmdXk7`fU}pc
z3mLs=q9pDIVpS5<!p`0~rLS^NL)!wbL=#!n@g=#}?nfY}a2OUrT*ChkC<P6M2;dKd
zfQ5N<^>4|&u2@9%kHrAg*E1q=b&fW8@ccs+!9M$fAy7NA9pvXDw)K(ynngPWlWU|(
z25ZB5<?h$E8srersYD9BZ^p`}9{|`C`3)$Yp>N07k*WsXyrYCMuHcUkyf?+oiY}Bw
zd5x~D->t7sRbz=DkVAnvCk2<kGWR#$mI&{vPWDHdTUW{92Do<8Kh0f^#Scg}gSfa)
z2M97LeLbtRmS18!UKGdNaM@FojuP7Oh|KvuW5ro$)$Qz*vaDQWI$&1?8(xIu)^^g6
z;(biNTkH1&#@waqD$(PMYtSx|q~{=V)vu;&iXS(%@;K>_{?YCCigrmJ$}e@WFMgWb
zg_CxaS8oZx9?rfn4&g((%RK05Quf)4bRO;)&jAMCYK$Bj0%+J`d-v+4CL$}4u_OUv
zK0Q-ZNeQB85F#Xa_l!E>fC)%BBxgc7BEbuY*FP<5fXw`*kN|&Pmd<Jx`V0J#SxQps
z3prqDte;>O_c09-fhM)diT!XA(;JfrS1kh3Za{UQa^Cw1tiu7W&zUU>Ho&<8fO}T@
z^)SqfnsW2R!`I3Km<G@5HKm-Qo}s>1z^~_h{q5m(WOt{>sHkZNZeVUWHh!&E;FIt5
z?P88+hnur&G;edW7QXrd0jVL7=|FdBJ{<hgY&=A%!8cSfd=Mr`f=6xlHyVd~=QPp!
zvNq=~f@N2Em_zPMvfUumT=S`09-BeRtKBkfwAbq*lf!d8Y>KkC-Ot%m0g?6Pqr{C$
z^JE0-^Q~5bQt8FB#<G>2Qx)qP6E)hhSa||2ZiAP-*ET&1l~-F$CRMqgx<p1Q)snW;
z3vX8(T07!Z^%A8qa78-X<?eG1JC|R$tX&F}iwRMUJQ{y9_%5xYw-(}+hJ4QGa51d#
zQa&kCij>Cdjmc~=Y+-dFIF{V;&9aRvY9ME4#W@Ad6qTuh>h}q=&_h&uPur!%SBmSK
zhZrVo&SI-TbI4EWRc|?&-_CiAZUGPXn;l1kfIh%)Xr#^%0g{}FrbQHk1n`QKjiA@K
zkcY=yy)R+=;1Y&^?S*NCAwR!F?t#N;5<X!63iC-iaXF&Xh5cgaHwvh*!!#weQUp6n
zRe;b%LBwS#tXrF2*Tb?X8DN7y&;j1xa|i!6kct7!<FMk8$z-qh<;9FNHP&XDJjdYL
zo~+#PdK}DYzRBa$!`oNA#UnqMx=gO!Qhdzo>k^Z^oqTNk=GUqlROZjWi;DGQ%=o?4
zty=TZa5Wi+t<}H~@{DFUUZ)5*yla|mXN;7qL-}01Jd{4^W6h|^6(?%RR~^BTAL!_n
zd`Fba)WA+-FA)fM*wSt<GvwD>UD^<^>@&#Bcg*N)((LFkOm~~LkC4=RLK;seB=~s{
z8~x%VKmF@yo%Pk@fz^HEy7w6;x~_Pf%;T{h)`IKJzx{GG3V$vwh=z*c;)xD;>N{u)
ziT+_n>jexirOE8Em_?jt+dlEGk6N#vRUZ5Bz?+)U^!p(lsh-j$i<HK&TNS_;hD^S0
z>3RWu?6DXUK637zDQjql;iJmHK$F+^SfQ6~oHXIk%IBLnyQa?UJcjx)f+$&0?<s9u
z@K1mjkp3lW2fVY_z-(iGY70ps`c3~R!+;?DBj8o3LR_<yX3YWAC~0dUag(>ATk4|H
zajcI}->Q9SCEzQQHqHV-I{GN|pPxp`pEW4eDm+scH&V0_XF+DY6l)O&L-KOTZ_izB
zGy0MD);G^=rDi`U=+nqOpp(|~_cEI;9{qlQX<xa0eU3T=+o}^MyLFgqrJtLq>gZ(0
z;G9~y5-&Z8`2D4%;fLPqM$vo<q-C$I<NUM5!+m!^yTLX6f^aCW=bS+Rq~*0umG9v?
z4}QB-DemDQv5$)8)w}#e;#FeCaI(@2zLcY6#TKBgx#LwE{M+*V5mldi9@LFU!M#=&
z8)ohYXVHKSw!?5p4nsJIOIg5?*ya)H3MSGw5)a|m2qObREw11^JZM=eM!#9knA5l5
zu|cUTPg<xuoHXeGG-;u+vQ)O}tp0u#ZKkT|4!>-0P#_}&$fP=qHg_`69r1}0kWyL9
zQ5d+z=g0weC$hDmPg`go*_~{WJfM+`V1tklU#CjGaA411JC>maf1VN~Y@rCg|E#i+
zz1r9!+i|%K)+~-7TH6ZZa@%IX0B5(*HjxxAyw04!jF1pkE50*Q_0@ItvhKccuEH6a
zJ!j~z&zWLCYMY_o@XnFcT}#v^uTp4_#O41*%q}u~_`)|8uQA<Id|hdKgLgbnigqWH
zC5`mPTshsg7m<_+O#QaZAq7ZJhf=?5TFo)n`Fgo1fUwVud{zB>?xa^qNPC5qlmw^X
z?gCw@0L>WE-Sv&7uvM#<&YgOl|L{nxB@3G)>Up7!1^$V4GPl1yQoi4e%SVT590%m#
z6;^R8Jr!svmW>P%F;RM<K_6&2Xo?@1hzfWsh3o@jgpTi#2Hwh72I!lsQ9G9umfiOr
zTrRM!4ZR>;`T8OfE{WV_6HJiT(E4~x#NFcDIWbz?2j6R{y5}c;oIafJ@KeFfC$rfw
zrmuo`F7^v)6}em7s#w9yQ&3*!MQWAzTdy5P(F#4m<?Sv>G8OjMbTd8KGK#|1$MPhL
zn<EyK2~6l=pq;~yYtJ%yUgDob_ZPuIZ39`#6X@c__(Z{Rx~e^e+An)AwIx)@N6wo$
zKMF|^Dr!gVj_dZ+$TBSQVCU7np4hptE{SV0Syf+;WTrqWy+wCrM9MbqB^s~wIV=rL
z2ZhZw>l~YnTw5JFwMBXSSY%3fGH;05-cAlk6k4etYYg<}O9W6tEDl`{roS{ltxB5T
zbf9LPX-_E0vsO1<teMh!BDQf@0<}-1pCTs8F5K~l+ID)HOK65eS_SZdIaxrsu2ya6
zuG-*vpkjsdgIO)MG{8EM{uBCm0BzJaj0pT!eczq&P}7Kbz<Kop?>C#fr$uUVgehmm
z=#H$Ak@EAC7RlEC@B8T&;YhZC))Xi3{?5(_lL?{LKaZdNk<sRoZ@4pxg71n|1aU47
zqR(6g)n4b3;pQhtUZ{z;q)U?{RG!){(uPKv<Q{r+19}4Xv*C=m<!<opx5A7}5)QG2
zDb{!b5y2m7U?C4OI$o^eS#R>ybV1gt4h)1XP|>#hu8iu!Sw@~(U*+1(lCL4k@8G8@
zZXfnvT6fm^1!$p7PQW_7G;|u7R7#FY9Bw&2T$N-evE6h8O6sZERtK-^sc}5cx%6*K
z<a1QAzoeIVx{QCPw#V)_o&qJNUmj)T0y8(J1sOXv*62BS=k!yPy)?ghsYXsX@a;I0
zUK(CACV|9><<o&o#x&Z$E5OyB_xVh<zqX*}SffpCJdx<@;(wyUyq(jS@OCgCeq@66
zK-%KBS^G3QrzhAG?+y`6rT_k&myAey=dC!P=ij~flCZDf%^x7bmAmfC0YyyQeq7Hm
zvTtBz5_jvr2z2Z^(Cd5YMou`6v-HBer_4SBGt}a1j#CU9+jPo3XBefQ5N{T%jfFND
z$vw1M$H*6O<5#b~3*Xcm$PAQbM}*9~4i9?|^|*76SYNi!9Buo`<1pBs+zd%usK=<e
zdK!UYSce4PGUD52Ph8Db)AT#7SXT6lP9Gzb@j4GCj>K0HnQt|HincyZaPc+F9++8a
z5k)#NR3g79kwYMvM(14g9O`^o<Naxn4jTv%OJ$HVr%}5yZeBTaEVJ{(Zj|h;m-?FY
z+EqByizb5k6@O7wvXmJx36q7dtlw<OO}5~6Y2Sd>Gbt5n;fDYb3|5vJ&=DcA5Et3@
z1q9&BDm~ta*stpxKp&tb@L#cEkDwu}uuj!P(7WFi!W$s-L<)|JOl*+Tr}wU;OFcl4
zm)qp)EL#Mp{i@_)T37G?mF&82`;xWiHB93UL_(%97++sZXgx7f$9dx!cAVu=+l6C(
zdO!G99y$xlACTfTWzSskco=(H63!n5+w*&-$VR29qNH87*pX6CSf9ndxpzorDm@j%
zi<SLV?kC_@d%itVX23F)gbLMeUbT`vG~rP>!|nh4)tW%FJvLugVwQ}opn&>*C)|Y1
zp{-@U0Btqbb8}E^coxJ0x9Dc$*=U}`qf9u$1LbwN%v*SLWsq~B!Nxc85Hk=v8ZgzP
zev3QQW^V(O5vu>U5&t{-*I)mE?-^X12t4RNWH}h<&P_V%0JCI;i;U#|UyfcI7V8Zl
zYs^C?x|~24k@|lSURs`71VY__LeTN=a~=YHv$BS{KH<~4`M{K}tma+~6)lGj;jrA^
zx*hwYX!ug{6bz~4Bd1)34t83{jZEHi@|S7j>TTwOHDO<Wbj9BUrX^<3pnZ0yv^$xD
zNQ5k_b)_)AMtqg+S9zJ(A4w6+BU1gzCWo1_tl0fxcXDymDL2)C1CsP#H8BuoG+LTg
zza3TK<3##ziSGzmo`Ur~Iu7)}?0{1Ps0I*he*Y6=2Ht<@W<(RuJ3_w%94IH))|G`<
z<`%ojzZxV$VQ>mORU(QpiBl9JKK;BL9`}1Vnj(U-;Fo>b70m#L?TnS3(I=N7h7F5E
zywZWl-_wo!oVreYP}1B#y9waZ_cs)gl$ed`^LzzYR}H9=2CU;))2Q!B%!PZtukbT7
znN$a#%8GctX&^KLh5X!D-FAau{HBMQbFO3?PfVw;Pv)b69D|+fVrYE-b{Em+ccDjN
zwB)$$D1itxp2_^X?Iv~J;qKTVtIt<!JInv7MIIr<)VK<4%EifNRVADYl$N<)rWX$r
zgE6Y=T@iF+7hMVeIk5llV0kf%DI13-##6tgj+o8bk+z$A2k1qmreiVM{|)fm{(F<r
zo~Hi#a7VY6OOa8ykT4S7!+Sa9uHrENOkLta1_hB`=&|BvP~_TmwGX?hb3(*~xMdI6
zng?69dMU4Ikgk^$0`SyE{)BVi<+fvcZJD^!84<(DWjKRV_2WYkK?dOhz8cT56>zN9
z=5q8<M}M_Xb=EQy#6w!fgSJ8zaHOXNHT(qdffPmp6o)_U|B7q;kgI<)ypL@06HtJ|
zZPrgucN~_{V5M>HTWr<R+WzZnlX!DzR#Lz`hj*c~!P|URYumhMy;R%U`Tg`!I%zPj
z*~sW9%fq>m_c^-4dxiP`8_M}WrmwU#1%~XJ2~rph9$#F-NYE=@XYh!Bz1;ZeWEZ5-
z)t{~zvTC>ayVieQJW_(Vv169D#Vm5KGL=5Q^r;N{&N+Cyr*jPtuJ(Ry8F6X`g3W7q
zD;XGCT}TcYN{f}uYxRRk{_!eU%vZ6iUu{E=M&9})4v3W*w(iF&`CR^mVRn?U`3{#<
zOk_sw#44<9q0|$e{+gyUZM`46X&3+3eA7jmi%0Ip5U}~391${Wb#!#U^Br{y!S!t(
z#RKXeh+&S#Q}yVKKreS324n=tl<x^}$PV*abcExc|CI<c({<@Br(n=kZ;dJIh;+Ez
zMASRrsghmLjS0H%`N_}YpN|-o@(esy{&n5EPeilW>2Ct>93RcFZ5SQ{o=S_6pozB%
z6u^h&ZO~P-3N)F5$eQ&)r2$<swu;6VIH)MO&J;z*6@+|8fNZH2t+U+GvhZ-WZhzi?
zWh+d}bi9O5DfZZ(JQ#Du**=NvyNW6;Ijka_v$+`Ba*;UmXk=+-(|&Fk1qj6;G?3LW
zUge_s@9vV&oeQJ?JRfSxBn5OQtrG*ZX}kLM?hSvIO@e^7%DCfOR{NEo?Kb!6TXi<_
zaXW6+-MW+P++o~Y>-OMUlA*YLdZ)BDDn$)Ck9{~^<DjT&4c(AxqetW8fm4gFvuoRM
z>sAd1GK9oA|3^FjwZ8A#e*5=hdvzgnwt5d8-kx4{SEkDA><O%!8A80qyiM)mT%rh8
z5k&nMSET`tP|f%Er@C3cgT4Onn|Yis<Fa=*xhsVAYYD@Ju%URzt?L`fYZXsPWb4n3
z%P+W2CSHZBn1xC;ja7MBP=h+FqMen6oya|})HTf(^27E7trdzb=0LncAM<qC5^Ckm
zCeSy{MHsm9Gkg!KMlR@nNSphL(@+sf8qS$bFx3%NmU$qm8;=weHD~cZKIP4_>@Vnz
zR@FYj`$ZfEJ5Hf+E*j*FjeV-G9v5YyStHHVBn%_^pcCsp9!@WD`n8i{8>@vl=L4Ak
zEZGNOUgj-=1tj=i=)iI6?t<Qj2-27VwC`U6hD@6J=P|YR%ct&(HafF|Pu+I&O~DCH
zJ8H&xXt{`-DQgW2nK4+jr5V861DfkQ$HdO??7s?!4R8=;X`PU30dIg?c>E#<S&ZaF
z97Lrh2Vz-XbAe{PN~2ft8B~&%ODcy2Yb^v~ouv==7lXWmbxGy4)P=7K6QAN5oLiZP
z^@Yv(eFQ&1O#k?x8Wg#vr;g6fPN4k>4EX~XvV<@AT+oBlR5|es!jeO`Xy*pTbs+_Z
z%{P~+7p)e~KnV@PEZoemAiEyY$IBL2RHN`uR{1rxzvUcs>C&Q*AcV5ooU*ejQ>)kt
z?{^Y!>iycKcz-n}xADHT`v@|5n~HwBkKq`A3CT@(aEOmz=VwPYJXaXx&OgFPq8vhf
zq|xQSCiZCHU*`<-xz(ju;$j^;l>Bs@k}t$^r+kW%@l*40jil|5uy^qOk(o-I8!Ae0
zmd`Wioq@c}qYQ6es6y28zPJ=$0D^Sts}Fg5&tGlaW6<_B)h8ldk$SdXg?xx!p0VGE
zWwv!Yp60q^gmk5N`7LqT6p0d7B99j^0&1*$B>C@Rumzt)i(K;s{)|DX#Y=yH#2MPj
znlDhRmKICtsw!@rS<vN8oVOO-5hPTAh`LjkXjr(7o-8jF)Eq>+EZM<V^&%^UTv8Zc
z?gL)#oz`#LeFZ~$d92Z?HxU0}`zcl^r)5=cA)P0HUY$pSOLRexamFkn2N4dnDHQMD
zF@S-qqnmc1Ra1}h(&R(@JDNc&@aW^?oC%P9_uZ7<#&lJ?U3lf67|fkdn$aF*TuxzD
zV#Jx)9S@3@f2OmR;Er4;%1o=`e)E=Fl@k&v&l)I$b3~lt9^F<O_$m2vAJ<^f@;V=F
z+Y4vH*EtJk4s-Hb1*5guHF<_=F4l#t&-C9|2@tQi5$h_<)`mq|6jpO+w+})=-b@#&
zU#BEoyl^b<livmsdlz89_&NlQr-eOo-x`VQ+fgPr;4_?Cqel^GDsxC&S!ydA_Yh|-
zD%|ct=qQwj5%VK|@K+}K0E&Ic^vfIsb|*s%cC+yqMu%Ns0`K3s7eg*>8DPU;G*wNc
z!4BLcU<}drSPrP@_<H|V@p10a!Q&`9fIHodY@l=mbF>)Rn5|n{t;6>Y>Uw-W{)-WU
z<mB=}u3in%z>F;}Y<{wek@POa7BdvRJ`{w&2M9&KF7>kRTl~ZPlc(i_`x2ka!`CEK
zBq0uM&Y9{@n}QPX3&v@D=FdoQ!6|=8q5VGm`v^#(V&Ps+<H={`<Ge1)tmP5WU!#Ni
za-`^+?m`(LDqmBlYOpL<FYQ>`2X)y#b1k#<y5km(gQ>Kk?->5vh;J8m;!9pRW2*YN
zymVNo;)<7x$(bH9dK0m|KBnVzm6a+?A7&uRD*|uOJ!jH(sam~<`fGK-dEpJOsH5_D
zAa{ba3S@25a^BH1dy1PDdF_6d{m`Lu7`8D8?ZkO?5LqZRkESwdv?Be@wk**NTG&wJ
zLrX4}zX&_w2XHFU4<5M*hlt9M5V_<ZkZ=_8fOnk;Hs*x2<R90#hrdH;m=Mu3@-wfY
z)Cviz(mwC?u{lk>i06I3T&&bxUO1g!rLn;zB8;JfcwBYwu%m)bL2bp);#ebS5pl5E
zMM{2(`nL9ZDE+v`;(1Vxev_}hIG%#)1XV7Nb5Qd<rLFm`zzb1oWgwGJ8||xu23K^g
zA<hlwn!=9Kadk}4)&7BN2v(KIGQA|j{EA{$RHmSkRNuGZE)cMCP2dg`?)a0uUkKnc
z2nnu3&(ItqCe%iV^~>9@hd<n)`!78bXhaMFxEN$G-b|UHW+5}D+!Ak2a%|o%CRCCV
z0A|IX#5F>$^lTev`nTv`OqNGI@>S9YHp;1rq8aE4s1cV8NeyQ&kV7`_ZO8YzIGtIT
zYrpM1F+8j(P}l8En_Hb%*XH<@^Kv}+3D>u|j*2?G{3r`>6e>Vu&%lJ)X}h#kPSTFQ
zikJG%o6nFh|JnVqhc8QTG-FR~hIc;Wps&ySlEC)YOkMhE`$~}|{X}Jb+<n7W8Trh`
z8F7x<njtke``P88PaTY`6ds`97nC1-@xyJuiOlDpFOk>!h^*xHnDJT|`=))Eq?(Og
zi0&#}>;ti)1PtZ%1G8WQWx_ye`{5BOLTbjNpUeaab)W_06X-!f9^bnbAtKD=j5Y$w
zGz0`9C`ri+b$3-X4j8ghzHA;|TvH*AK`8lVJ^tLAJZ_oZOp_tlKcA%6#Uok~F^1fu
z2qufmVjh~?Q`7o6fVS$T%f=`())p?@c&?nqyZy7rMG<d+sKWRzQ%?7V2sRjTU0o05
zS3;eGfmBJ5@pn&RIT}!IC9aJOEEuptgxkZ*>=oTI_;q^`3{&f;>WoPCFJ4q;a<^5C
z{I)lw+@9B~2`&1(yH{!)({W2a47ddNr@2s>D@9Z}rK57m>3l)+m*Ka=ia0wvpN{@G
zAWbEKtgkOU2fpD{1ul$OFVJNN9|~=l4>h)rh$g2q1?|?M48!X_&<7LLdK`(Q#jl%G
z5k<Fo`Sq^ZayIKDEF^-0M=gwl4k(lV8Zeyfcy!*MDtOp>N;hdCOgwcDrgH=wDM~3F
zhI`%Edj^-3G>6>Q8H~c6;pQYoWlv>bg?c?X(tLD3;aZeLYOm(Ev#P&xCD0PuA@dR4
zbF{_Fx#LVgfPfI_lJEMa@-tQ;byIL~2fuJ+B6GJ@<AN|SM&2zI&_wSa!glET8vLHy
zHIRK3>)VpR+qFfRZP|7ZkMyAxYu&08$jZs*r*QJ1VOo@bcFuQ&pxzH#Zy?|Bj*Drk
zR5g=4$oZa7da-TNBamD*pDD+YA0$Eom21bkTy0SNiX2Ve$nIxz`p&Vx%Dq@Z449*K
z`|=MF>Iv~#o|h0qredn=&fivz4F@j)!lkKgbal{Xq3%m+{SpIGXLW7~vu5{-yUJKA
zyo`H3w$dklVeF#E80K=4>YTt5w<LVWDXe6tj@t&x<^c{}$*&paQ_m@P@2+63O^~Pv
zywa%~q$3MK1jK7V3{_14f{sEAnUkm>22f?=L;-N4mOH{jByb;a#>K99WE3#_#CyEV
zwzs&7(>cY#`MY@Os{`nP)93A4#m7<Dlf&zkH?QxHYr2o)%_<!#80;xvwO*NY*U`6b
z`&wpdC3SiHr~5g2R{Pf(t!}CYgEzL9y&GfkPgR);l4kNW(B-WAn?u`AV;`?)?zj(1
z+PyoTZ1-SZIJn+QO0lwQzX*}vZ1@x;u7kcjR~MH+5R4iN$H>z&6hzZekukx>BH>xY
zvbXor3y@(P6F5QA&si;A430$}ZfhsSCt_4wt4T|FS!;HoxuampcW|6jBmY``5yV{U
zWSgb&Q|PchZn=z)#w+4;y^n4<Y^%w7gh+^?LS-))<d%Ws3O@L*i8=5QUyCd0kxp6$
zAv%4Z%w$JIHYfmr!ovKep$1*r6;vCa>3zf~X{F!y$r=HNv-oXa#eyN;%Otnz?q`jM
z0>VqDR`SE8!gQJM$-Gw<(ZHeTFWe{-iuM-4qf)g9X47i>puyQk;+C!5K4rBM753p)
zi3sk>R(*21EH%+LhlM9n0+YGT>b<8^khNgsW4)~&yhOfEt#|d2^5Bgf1?dY{k!&vN
zEmkf@8CmqMEX|!Y!QUhP*PeMlrtpvr+f8ia`Qn8*>`1cf`!Xo=m`L7;{F;WCadnJm
zez6EeLO_=bf)BUKj&}uoje%1Q`lO+c^bh|ZAPfZs+LYT|CJ$C}hvW+>Rx}~KwOH?P
z)<}X6)yCnzOiQQI>|#ujvs1e@4`Da$JbvnPy798+Mmma_kIs36S>^S|tI69KwoanM
z*fd;Aq~%1#p7<&@EmJ>1ij>(A>vkH05a$8$Or&&qFh&j~TXtSuIrz@p`GnJE%d8LQ
zpj(KE_rn#>nnfZ7^m8GyDVWKjL9tAj>9RTiG$qzLB$rZ8O!5#&Qbse0d-b=<OAy&}
zCw;Ve<3V;_(K^EOk(H%iH##liK&0(hI+TV^FS~tY*9SW$%EoY&n#tFIHUHDCA=+^=
zW7Sn1gFxKjQRs`_7MJy`>7Ll#%mRCWw{EkAj^1gy1>NoyG17Fl44F0J`@*)P4zD5t
zL%32<_rt4<#aM`rxRU(_x3_C+FL`bnQ-z+?JM00&ThkIB`-_z}R~02`h1(PK)yYgU
z=vC4d9I(;uZzmRq@K{!ZYlZ?qzup$#8B%TSD&=eq76vY7;SDWmjxceoM!fWabR#Vc
z(>yZL=QuT!5|I8qSujzfPHW8ik^^(^q7c>9m6r}(rC?|6xDDLv9bG@(=GazPCoViG
zdKJb-rx6|7>^;bt60?^jWWw(|0_|rFbN$I2?U}dn?b{Mjcr9bJDuVFO_KS(O-Y#S>
zXCJi=))YvvFUWJTtU`YeQ?pyRTh?7zG|VJJMzRI2XlX^vQ0@H1gs6@5Go&Ry35Fta
zLmqC}BRKibI~lYAmv?B2(Yt&W7P_J)?mw2_;7-9jYg%+1Ae7ze<IcsL9s%5xkD0{R
z3wH3}2Vx(HlyZ-l_QSJj!cT{O>k!5)14j&di_``MV36Sj8lv+)UvEueixlN&<)v~?
zW%q>wX4s+Q@M~2SqK}`_xa{_w?E<8cY4FG%K6?Wr$(y5O#e{S}QPf%K;MfnTeb)uH
zKrbhiN}QKh^Z~Oqk7?1j2bYj3lZ|F+=SrT$Ksgsn^MxR5^%-@6c<D>w&#(*h=OGqf
zPZRaRUM#ldlrzYc?zn0{o|u@?jvK&f(Eg5|X=p=9)#Djta*R~Fi0<n-7|N*_I5|cq
zzemxW=Ak92&-d{|2znOdGTK3@vV=}Cj5<CdV2ywFS5^Fc4MCJ6YmC+thWErHA(S#W
z?^MoX6`F6xg*!0*F{2|!eq*y5-=xo{iWBu#I09J&Qrm|Fb}5;;ZzYg8+My{f^7!}W
z<b|%@VjL{u)y0w}#$;)bPZg$NJ(H&tmG$0Z1eqbw;)Qt|8_0>w<!z4la)SUT89^XI
zY8<|-zt#OKo~{2&`|7S9f5VRv^P*ROqS7*lNv_e&<tsA?cnL4;lxN^|XTFxbp|$J3
zvGiXIg_Egn`kb!%>dgC|E%XqlE2H(;lh-%g!%4?)R;&^(!)SINR2?L~*Cj24uq|>1
ztQ3Z>GTa0Kq#Oc9Uj++LBw3Kh{{N%sE+{dRjQk!&B*q3&ZuX#fOr#-G(gDu&k&LQF
zY@P0Ac(Tc1M77kFODYP6VhU82EQ@&*x>DDNZff!6>p~YeywiFMA(9^_UyVvac9q2&
z7D=XS2c)87sEnqjbOR~@MR9@#aM3|{z%vvCW=+d8Yv#Osfx#zaMD&+DCKB#W-8b<=
zKqSpH=MHx}Xfnu|SJ_QoPyw9tP}hi}+w1A}wAOu!GncO$`rp2V|3FZ+|7pP7rOQQ{
z{zKC^anKp=S3fqH_QDmyX7zd_*{pCVca_Y#Z(5$D)pjUMtLD|xU@l>`HRoYA6nnA*
zzvyeKr<)~JyJIn9Omf^=YY5);WD@i1d8Svc)L?>mWAb#>eDaJI6yEILh_;F$TS+eq
zyWBC!jhDHn*%{1I)>u1y!}IeJn!TyJHy66K7lyqWsHlPt$I>88|8TtBbLtQ`o+W&z
znw2FU2?yN<r3}Gn0XWkHs8i3(NbcABO`og<MEf<G=_!_dI80(O#BdoCqmY{Iu!Yop
zGbC#yEK7-HS5BEh5(YfzRn^~_Jfz2=q2*1TkE;j%mWJ7v6Ry_TH!E7;{YVrk(X%H-
zNH$3MEUk`ypaieIxAi<cDDJ_rGavI*to-Nmb=m9XCm#}wp|Wt`y{68VspN`4eg)52
zb>>!P((-W9biR_Ghg`Eih^yMG5HR!72N<A@S->>V3o$MTNps?R?}7FTx)_-Y!um4_
z*RJ@lv>@nT&Ir|ex!Fv405zjO?d}eBLsks&1l+)IOrjl(zJM49+Rkt&BJU;&D!sPL
zVlqV}p+h_QO_0P(Ws(;<lF$+7XcBSwMJ6r{eqe&-qn;b`G}>>b|9Oida(^rtGIM>6
zw%~3y@Qro=KMG&-@dvpg!!$MxsIq_`Ok?l-SrBH(XlmcNp?ZA3z+3bhG6XG5`SzFQ
z!3ADHeF;~wE2_?vDW8vp8jLmnU%gcn^Nt$1Go%#7L62Nm4=Ya?fVGy*BGu5-pIp9U
zGq>LJn}Pu{qu>V*;?6t5{V*9`T8X%6h(87-1+5hBiLEA*ROr#cI722UzA2yuOkEMf
zASo>5_RyoDsk7Ke=~N>Q9C9lIhR-WpnMGb$-aftr-WJXCeI2{OOo;3biwP6FKHpQh
z*E+BY@ANEjJB-DD{IK!f<~*@>oe5%rJNS)59#n4t79yvR-@q8H%CVf-({;AT<un{{
zJR}s`7{z%Y&+))7M!h%wQ!)EE>S<+lD+h^l{17Heyya?^kgm94N)OPu$BFR0G1~)H
zxVeMkT*u+%xC$fqE)NguHOG;39=Uq5!mVf6<0c&stScCgQ@Ux)Zre_KU$uPi)r=Zx
zqCK>ml~194?2y(o(%bb16TrDE?ES`5QCMju<RTUGW=W1eZAQJh1&nLWNf3Y>Vds>w
zXiQ+?XzN`hGi-T$rf5AvK^o-*2s<c}(!Kh`9306AG|!N@I7>W%v7t}8H{vQx<FFJu
zR#=ydG_t|T9B1ZvT1!8Ihz;wB#K_=Gl_7Zj2Y>Bt@CglQMnHuJ;yetRBh(wq6%%E~
zRlVN57TrO@^Up49zxh37E=yZtE-3h~@duA{S);a}pDO6pCU5XaVOFFauS|@L++Yue
zD*VtK{~9EW619l}0S-=>P3EU!0Qke+#C8zi0HFdtOX7bB^vnx9*`23O%7zcZn?+d@
zLBBB~Jm}Dk9_C*SJYHhr@t2l_qmK{A_yjc84O3nrWy6FGa19u+kBiu@yRpm=T{Zff
zq?`h)7%B;HS!9VBN`(s(mO~E0KY_NPt2`u(=i+oRoJ3#g{VFLBqKT<LfHRSN0HIuq
zFnRurQBZ^le4|d8wa7U)M!TmBIgJ^M7%UC8Z8Ls0Q1pHiWG`<zL>l<UgF_*s+}qms
z3ke@C5DrB+9BvV7i-l%bsJ7$L-^eL@=Imt)pyb!_H+a`$b-xHG_LL!e$U`xISX+I~
zO>%K*eJH{cG(u=5$LF{<9Ae>kdYEWj_8y%Tqqkg?5V5VUv2g$kQ;RocKSXYJ5!{#Z
z3hPN7Q=Is5fn?rF?$;BySMazw*iFS*PJ%0DLRmf)EaN17oa0SE$qK_GI&Yw<J|M>b
zi@sEXNH~r(8=7jGjZ<c#!+EihZT|Cgu0~?Lo$05s6iu-m+)NP$gyS_q)v_Pra4^EC
zVNLE!!+3A6!GGy$m)rb%Vn)-orIIt)5_|Q3M;se6V9+<Z^fftTVL29ys%HEsRx2NQ
zdPqbVm>m+j%`)IKMPTpE8$1nIo_jfj&%njs{S`T8MaVMe+LF0a9_scN`3$#PVEa9y
z!m+4c1RHXRIWGQ7UvCJqlQ8B6B0<GqquDx<{5alEffqUqlPDGlFj{XcoL*Je`K$~f
zZ)sxB5E~vB1bQj*LO;+KzcO7C=C|OU6FP0UP82;)-Nm{gf1%lqcSH90)9ig{<%J(u
zI(!TkzzQh8Hls*h=odIoWJR0;D*V7y`J0(!z6O!_J2$AysFo`Z95ylYaHyP>Dm{t4
zTCnWU_o&(QXFz!h0<Nya*>4E^!2Z1GqyIokh>Q(3b>)@OZaqk@s1Y-eLoHUkvV(VJ
z<ZWC)=**2;Yyyh?w%3hqEkni8SuAe;Hp?76p%vm#{+7|bpd{(gbTdQETTbIJH7dn1
zl(pCHU83BxJ^!f%VC`{F5V=msp>$yTVTDkB;q;ImxgQXZ^RdCOtnxKN3JjgkmR4oY
z@DYL`pw$M{u`MND32+IZu`DTftPO3^vovyWAAB2YIFS0(g_{kP)wFyjCk^#NLXuuK
zv*UQrX>{Ao5;VWzdv<eXAW+%x$Q~h(#Mq_d*$<RZex8-=lkQ({5KPrVe-1rH`k^=~
zMxJ53$E`bz&pu0h+Tz>D){4MB{<D`r?mn&B(JhoV=?}zG5{J;0B~-~EMzeh%f^@4p
zv5i?C?uoc_h)H15EK<yn?a5(f_=AtnDfC$Bm;9jBejtz>IS~94Gl>Wre=FLxmP!o#
zQqZoi%|f%iDG8$nB?L=_@-heq!(o}vf*Yg%i-aWBZewtdfB8>6S;wNpSg-2xtq@lJ
za47NDKT*p0w4yCsq%ssC2H4Vw>}j@nDfO53N+=h)ipSMot7iDw$(;NQs{yW;GSMUg
z!^RTQ!==o^fx^U!5`X{=?dQh?Rt|gR_`8&GYwx2OkU#hr!N7s3Kk6PeCHYvtB%ht0
zv8&s?VUy~PpBj&;-Alsqdf08CsZ7wEyu37L(_*T?foFP#+e0mltU$t=<nawrPySPh
z9sCrr?j%cRf8Qgcil|bK1C=He5Ypo5k9ZYto{`bq5C5!r|H=Oz83-3opnK%r^Xd(<
zF+u28$6}3RYYh7hNN*TVd@+<^%xs&VB|w|_BE^L&B*NegiO-Pg`5ldg%$vb;kCEh)
z6`}pnw4xqXqDuTRYfvQHEP>P5wn4(KuL_ae^}?CSRx*LMdLEbe%Xd@)BbYr!)-Q!(
zlIMql6nHG(@*F@oK07$~-=(5(Z129>$J#H3NN|N3^tY63;Sh<Y+R{#QB;2b>jGCDE
z(GkR-g)v$mIZXXHihgWpKDHNDHKc+3xCv%NhNCTFQLUgJBcIjo;m@!tPP>k|SwpN?
z!g!9$tctJGzKbsHQH3w|;L*P9YK3k&@;M-~kqcskf<6leI>ll4(!*nW=VOPJoSrJd
zpv}N5A|f4HGb&vSn2P`*9P~d*Z1USEiv0V3oEZ2kpbSy!j@Pptp7Zk{EFYDH8q`5o
z3fp%9WRa40=isLS$t$U$HX{;6sYs8M=g?fb;y8(#Kiua|YsdjyVn3|b3p(HX%Ah*-
zR_A9Eq}yVkmtHIIhE7c{A|m$X<gE>=?PpVCIM0^Q0(kf!pW-CW0uTFIg)rS<`00b0
zbdEJaq&3bkx-%nwk%n}5Hg<*KH<0JZedARbTQHHC3|01Hu2+v8<(>7ZqD`MIB$~ir
z{2;g5>a_3iG*?I3atq{s+1u546ZSD^RrKvP4QYQskB22jl~+K7_yHI7z%ol+4sKB^
zL{rY0)BJ4;-{Nn~$FbvI!m8+A7yW&#c{L&#w5Cs+D#Ecuh(wH;oX5Kxj-tnOM!Zv<
zKb|rKgJJ_+QSu_;=H+fp9OsLFiy>A?X*Tu}bPLkAJ-*glg#UI1BG2dm?v;LjJxSF#
zC?MsC$0+N52jst)^na0Q339N!7>c2CdF})R9TX?ggY)#<C_-c!z*E4EXU%(3IAx8;
z@E{Jt@G%nXdR9wSPYC9n4(=KtFfZJ&WjQ1FZ41UbL-47_VX&^PnkcECHfm&5EXgp+
z#*)BnU3!i|Q0pBTC{h!-6>Q9E_q&ex`&YQlq-}Ivf<6@;-kZ4W+E!CrNNp4$Gv49`
z5pl+-H6RBHzBF9PT;>CjeC}BrxE3Fk7&H*jEGZw9(xD~^w&NnOJu$07{0PQ?6N!4y
z4z9u8C}mV`zwd_ha-4HQN`G)o3<-OI>Wq~buE?W7*SyWnsH-$=Tg<*O9$b1cGha3h
zkKid8VLD4}pa5XhgWhv~TTu^hL>v@wjpX*N2hkVT;>LRs3JjT1{zF;!b2*U6dS(eo
z_@7PqM_)?h|E-Q>Km0q9YYt8LD_3_0VN509pkLnMUW*(&LYRrS1Hi+3NxxQYf#)?O
zZC5m)w(IHML^g^P)GYvf^j}jSS2%S|8aM9qhhs5oeg}{ATHHNx(gN<NaOp#yw571c
z)A_irgNIOicpzzSSUs^{3<cU*<wx;Wwv=*BWnqR2f(@g9-b^}LXpb09AL?3Uo;q?U
zgr>IRp}lcE+x*PeuM8rFfhr8I8e60kOYtGZiu3MeUk)BzqbQ4nd?xhPupH=D!yZ_M
zOZ<;~+St^C`A(K-zURnl@<2+Q%@zZ(W8pEUx{z4KjS5tZzPO2+NU@!YF^WN>O`Veb
zcTWWk09Q|GwUx*El<NNy9sfYJY1ahpj{0K{NaSSWL$&0p^C}E}gis9la4j;4R?r_G
zs@ePf13bH-Ad0*3XaBj#PedmVr+Ul#P__-0;|!%W=21q@=bWBn`}PP*l2}LtQe4m>
zxiJ!NdV#!Q)&%(aMt-reD8ty!Mi)agyHf^;!k2$hDu_ZlW?7OsAb1@Ie*rOsYf12d
zW=MMGSurfoi;b`m!qA`ax}w;%FVANSgk=I;Q^&`kSxLED#lKi=e9f2X=GPb@L<f$+
zU!rA7sq*WTAu+ZRDP(NhzOlbYep2ke9kL|PDP;`z^pAh+hwmHdx6XsaG5nKrow$9!
z{4|z>y#)`LnP?y@{V6d*9X(hO?0-!69X2r~5XhILw;;Ip8&>068bbn2n)Oc_WN%a=
z2!^7B_kEPAT*L&(5{}@%f^vFtS9a#=siW04eRm>Y$GEscMH2$RZpAK(GC<eOi919O
zG!%#~EeB&g%Zwj~*`5obzyQ(c@gvwZWpl9O6*;QPU7{QQ+Ma6UYmLivKVk&k-NqvK
z1a*J+LS;ZBXmyGzR9v~WjI3|#5rq2$vqhv!G@D7-n-)lH(#NjZn4h%1HlLe*8T8V$
zyNc~}(>(KW&sh9qPS}xXH~<KZcs!2vSgA9OBnzv!gL%J2v0b0tSxvk3|K#}<(eYZc
zqs_2&F8?>29|*JTTuGms`L4>*n^p{J98+!m;GkDTG!Jbz=DoF0`lH@X0!f<H<VC;4
z<s}>2^QDQ@z_|A#)O!Nr=er~+Hi1m?bHpFo|GB5V0bMt6;Rk!k3n{}b0X>7KTa2}+
zQn#;kYxNZ-le6ApVTH*W-(IX|z>|~SHUy=LVp{#fftMF#Pz46j;<IxlAm0x_ftS7M
z6NF;se{g&j4u?%8M}9O}zOImf22YXHcU>W@NGZRmy;!>{HSgLg$fyWl?Hm^4V4%<W
zVTKv>AtoA%{WXTG_^}!%Zm>7ZlZ$p(9TF$^8rp}OJ(eggA09XiNg1{0!zmrsl9m`#
z*^3Y=6k9YPP5YzranOm|qc&Qz6>>3KKag6=iZuiQ^HPO~D?d28eY)3xr#|>29;i}a
zM{TsKaAVCKtQpi(?{16pvVW%~scKogb7rd}mP~Mvn{*3SO5He<u$=3+0O#ByJ(1q6
zOND#wi*z=LB~Uyg((-nl7P7xNL!o3IyMY$t)_#AnFis3}<xn~!8L6FI%6#HUAIGf9
zP+H*m^Y>r0cD|2458|bYn;5^j5xKWNuPemehl&vg;~Uo7|4toB9XYSe`R)G^8Jg&y
zD~ECU^$*1Vq3SJwvh23^VMP=WY3VNMmhSFG8WaI(M7l$|ySuxQ?gr^@q+6t0zWv}i
z|MUB1?s49k$M<&cwO3y2+Ux$$p^$lc^78we1`QP=lP@=$KJsk-JfPmqKj7ZgVyKIv
zl?zlk<*?3b)P~cCd+sGe3cOh0fg%Lflv<kfixMDW0$%fb8YPoFj+7*{*Qc>-kr+Q_
z0U`w0W(V4ODcwR#U()d3t$AK*_A>b{WfqL@XA~yl<|+6}R`{3&?wnYIA|(o7nC3il
zki0%8$Ir-oo5)wQ8>9Q#WFq-M)JGJmtr5#dC+9BPbJpXr(nj9BE7UAGWN?fH%GmM5
zLzK@QLqWhPQ|Ovy`RmSMP6XgL{vr6BK~6woo=rf_cE};xlvG13@TIyVAcp0urc=9m
zc4(;R%vXNw{*Rs6C0a`PaDAxtSX*IOBCdBv$2V`Nr!?MM!NwTc6az>xpX+;E|9*|w
zU0FwF`yS6s+Q_epchcJ`zF1~FSC@K?$Av9kHDcVT7@~CRksHIq6jS*XNT6aS%>Z#*
z4nQ=P^;Yj(iYqDeU$lV&rIVzvWfe352z;Ot|Aa-t5MS68lgC?rF6U$a$Rq8>WeG4H
zAyCdBOe1c^9INrbx?RB+XP*+C$A&X(I5f?iMK~hgCMOSp`e-E<yze9n8c8ULzVrD%
zsz4la{|4t|ynJ~M_h|V@6h?L;(Wfv^AF)*3wY;C0=VKqs4>I7tTq)~FTD4lxW99_K
zJhK%YLl?arBI1S3;R40X{fc*t`}Z^nVy{(OvQHyCeE3>^T;2jP(7*p?1oO4l#K@&*
zefWD&eda7K!8f;WDC(V>wm4hPkAHIFrq#IXvNP+mbcNwBWU_zmlhPMBMQ%0SxiVF%
z{c5(P+9;y+B-+6Qd`qD5_kALtJkDAYO&ascymOSU>lNh@zo|L$#lGK{%YME5@RS(=
z^jv#H_;vP?{r!ukYy548PLJxyep$@X%iM8)oIM+7V|bU1>m#%#H^LW~!zEMhpYVUI
z?d>DrnAu&49`jwl^*6q`9G#i$V@N*GS5VG$%cr_%0PwHvRa?rAFzGA3Ww(ygt(*zI
zc@L1++U`0s_=hJRvCKr+1cCfwuRoB_c|X+q{4y>>Fvwcxk%mBq>?<50>FM7xW#To{
z^Q&K2&;p*Y#hn$@Z#MqbBhR3tWPhE>r(}fo{Rq~fJ+!E)>=v@2E<I;A8#J*t8A~`n
zo}27FuC<?xi;f)rx{%ssTl6)cB<1QEuA@W4cVg`5;b&Xk?IN%;<$o$VUfH^!>0uqU
zjG+svy*;Y-z7rt&04E?1&8t|%mt3G`0E!S4?D7!l<*n1G<Ygtz`4&T-TwjX0$bQGY
z(6YL7f4Qa5iPUx5Q$=R+p?L%!()2M_B!aWjXE#%)%&58Ex@>GnW0+}NlB+yTQDr&`
zSq-#<a7=T%*yp#M1#kZpDT`{}3LO-Hc1o*@O7XoySupXFW9RW2c3F_9ogkr^R(-1=
zo9kV~DKfz5PahS5UxjbBN1AVTe-(p8+m9jVJWsj79)6s~&(jpY&-q5uFfpdf?+u=x
zC_X{X*LLALw_{e#egeL0yUjCbk{yx14{5S%RkJDaRhIX+@JTkeFWB40et&s^68Txz
zjX#?A^XA!|u25o){j09nkl0b3@I$issVa+)O$;d^KB|%E_n+}doDfBk5sUJg+h-}H
zTFWiRoR<_vHZY+D1f&Ht&@YkFH9P#2JK6++g{_NHri5$>?hb7scrA81A!{;blSGK|
zzz#e?w_p%YkA%nxKrED9K4Y9po)De?kf+Ztyy)>-2PlQPDGHL1vp(yE-9@Wo4|2IA
z2|#Qw><mBhz%GC7^p4=#MB{;_I{yRzltV;NLD#0(V&i;lUOi0LzrS8abl%*Sw7t=O
ze4Ji4+3@ovca=92f#uRL`f%5!aO{s__`MsFb$k+d27wyh5WuHEdDV~s+R~~E^0~-U
zg+vWHgbE$~y~}L6rJwG8rzNmG*vO|5%?}NNmP54pnnClypc@1JZhp$~_2Zn%2=;?}
zf2NrAqthW<uwtKu2cP8QwG_?p&Rp^2AZ=@S(H-{^*%dr{<N<-{wud1+I@6q$>({Tl
zFQbj<6EYumiRw5(1AG$E(Tp(=c|brwSb#^o|8fmQ9|<R^8;u9q!B%z{RCn5{pO-2w
zy8axuT3v~{=)U2pb)CaFIwHQZtAIh9&x$>pegEps&L(L&mX`pi;D=D!ix^8@vs~p6
zq5n4+`L`2|+VS=2a)i142;fD##q1a=u1zYEd5)Vfi?KBsxI!G|nicD}?y4)nBIEY^
zkCTMPw6BwG6ef1VaC!O32T8oLnLjP-57{>D(k&(BfvTUUw~c@Hxe-MSLub%@CvUWT
z_1{?lWt7S39yPo+fVKjxYMW<xei0SR+~DhK_SQStfVJL2cZwEEk|U95ZSJ-N%a0$#
z)_sMWZA%ihk)yUYnp`MypkW7)DV~rBIOzQ%JllaiWhnBt`xT~iMeSeE_TU$p|LpK0
zg9zonJM{8&6yzNPmw!I|MGnZ?QP@<xY*pO)Q%v^t@eB^}Za=S0OH1&hx{loB&xbwL
zWxFw>nv-^f=$OUbTmLY{gI%bk#4U{5BUX1LJ(tB-Zo!s(4J9#UDQY75^7ab&xaJab
zgBEn&=e@)fZdVMYQyqTjTbJ6m``EFzBky5KlT?14anR_hhgW;`^Cma$i67VAO}u>l
z;YfyVc*lwX{g5ta4)d=llUO9#gL%ctQY+u>MK8T`B<9<_9+_nJZwc5v?VH10a;qdH
zZhZS2Fkg)`{62f^CZ?AhXNWuKd4(q-UH;>Df?9O?V}XS!s%ILkbJmnAvmy-(a9VnP
zs1u$7P_XY~HYY`^gL-Ktmx6?zgoqC}l&mWTVJ14?F4x$~p`*_|czmy45<Xw&7N4w?
zEMS2Jx!F_6661uWi1MG3MFB+tCgH<f!&9SE>fY~_-J$FT1z~9}Ji<Bg%Q!r)WCWVG
zm4%%*LF_79nvtyje>XaDZf`YWrIc37eLidGeg%|*RAmv&6_<px`{IF`nvpU|3SygF
zzQ^lGYD5<;nPPXRh!g_5&_IL8;dIL+k*NI0x0*J4&WLyGS|MEoS{~JsxFa(%$rerx
zHJ_7K+YJr9Q{DfF;a(i<XU4Qd@Ww4Qb6~wbmgjbkk$x)Py=nk)S8>4>ojU2uzwBw4
zKtm-SZu1NG%ZK+gOWib!oS6>;6n_{2r-R_C&s)~rBI@Id2leUjt<71+2G+5&e#4h<
zp`oKB0p9ysldn8!M1wPMFz7)_qHq*6zA{>$%QF|pDH$I0QHxnh*&$KCfZ9N9FRJ*4
zLj05~<nTOySp9h0U^K{1BuY(5EcqqG`DX;R+uSx=$$WShmKoMNL>p^SVXt2GuC7d#
zS3C>I<kj<CeVOG$GgxM}2yddL<1Gb4LtDH2a7{HPjq~}nSCK!L5ML1-T~^e!XM7W<
z$F*IuGsF)>k>r4z-R`r838n9TwrR?S3P-_CM-QhR<;+t-_cxRO#ml_iF!vI_W3RUs
z0x8A0JDKS&y$y~ANKk&jV41s7t(Ew7FE%(gU!{QJR010S8@V!SIj*8rD_vr8a#l*@
zEnEGg&bV<g9>&#`-$&i&#M5059og7;&66+mKk&zOtt60Rp7WH%HPf1KCMD8Cixl2W
z-0Gk2%p&DV$D%38KZ(^x1q#yK6%hfD0ZFItlLL-8g+BN2*xN~?TJ?Nekdex(x8!EW
zTPW;z2&Z3>d1+tyw;+0jmrI~YYq_R;S$5hta#$b9wtnwSJ}sjzoMV7R=KLf#_Z+v(
zpIrXV<X{{Wf3Z7SyH;1o1G(~6l(9`^1y{b}D6U2_aLyMI8>8j46iws>49#Z@7Uw%H
zEj3#{!QCtRsJQv}_orNqrc>=gZ(wGsFeBrWQ><MAe9X=!Q}TWMs4DLk9{>$#4{7nc
z7~X!!)Cw!$_erPHmwE+pS=1gL^cA_&8o~Qp9Zj8$jq-La`=1d-NI;FDV^7Y6t35cf
zwZcOX)hGy8(;!m**jle5lVy(5r$fw{f80d-E_9gwmZ}eru5v4?{^oFft_W55;^x8a
zobRKzG2Ct+^<RbQ)A6$kjjF$P<u84*eb5{?yf>zn5Ar~@x^L&a+dgi|WnIOvb|G;A
z^>iT0Eq_nS(p9HN%GQ7JQm*tzw!uLS7BRXhfmSB!IAlpPdA(2Wk}TZw?=i!}5{nb7
zbZS)m)Phh5QTHD`RDWl5c?^%1A|B*Z5mVl70tSKwOLIq}*&f_pwT~R4ZF6H({?7xu
zKV=7ovO>6wKdNWni2hz(7|v9Ey{F2yq_BD8=4Sgqm>es-UNp{|+_XnJiEm!7xXs<>
z*;QJwh4(={F1>A55W<POWoE7Zy}j+9TzIEt^FoYJn&VK4!yBQ2Q#+aP(~HnHU7g=Q
zA3GC$Rl3Az@^8H@qTp#bhJvkBH|vsr=?JUuLZnaATy>!~D$IX1q)Kn>U=6t524QXP
z&HH`T4cg4?vF?_I=`LR^e~wqF0P22ZL)v)whX-}Gc<Jq&!CMB$+s7qpvC=t~{NV8@
zTjGkpbI%4|F^LQCt6u2OYttttOO1BvAyL~f*G(I1P@@?G@RtTREY})cIm`04vWV~}
zmEr)Is?ex#+aOus2jOudWFk-lK7X5p|KK<sZY28|55hDSK!w{~l?M(1wK$Ghbk$8(
zSj6ro-GR%vudt)y%5@`GK|i!2uuJ>;@@FYvI+M?TM7%V6!`7P3QVW}B^Xd(o0ZJ&z
z%Vq|%CPasuE)KqizPVlPi3<Ht&w{HL6d$<P7Ve8fQ=fYyoG4gNW})8hxo8T<C4X2`
z$k8o-e^G2bvZC{3hlk`FUmMc=-G3(@xsLtaMD{G}$8&gEs7-@`B{eS+&;}c=u((`!
zP_2ZxNIgm6x@?Fy`QjC>lanURMPZL7&F#>UbIlv*iDXarlKnnw=Q_*vAG2o#w9}2Y
zsg7{{&!Gi~2%yg)-eE)W3)fcRW0ww)PU^z<#xIB<!m!N7-<}i^j&55EQbVFl0RMly
z<-J)1CwYKTC}GQ@;NyML45@FUFP)q4`9Y}8zB0;jFzP)vBDon^DfRJN-DB7zV<t8{
z69>}^Zz<gu!ldsX#9?BDhs&`{hV<kyi{GJ-0gi^TP`feeK4P!w*><#dO{J5k+y;**
z*%OLrE@WvyiYWSfc}aAM78Y#`q7)<c63ztRlxoie?*xfrf&CS`^W<AEqbagKEGh9{
z$%x=9yn-zNg+fjqiu*^1bU5!*6P;eZ!sYS~W!54Xm|->MQT#d7_pB7k>zpJbMA@$N
z#J?!%Rb-lf*B5gCVWAPh$08yNQ#?R!$$@%~oz1K|okjR_-)z3V{GXU`6ElVfD1Z)a
z-wHrnGf+Z_myk^Ngd*edPCC&;NIu8VqhPX>w?mv0udHm5RpxGC`JDJG>WV(?C{9#|
z4PKT=2+2DVxl!1Q#uh(~f>7+76f48RN$fA(6#4NQyHyRMw!JY>nuEmhUp}Y{3w8N4
zskyl~vpohOr~}BCH5$Gi5B})*&*;|d>4{32e*jj|($6(*qRq*zLG=&8?zF|_h8wME
zFy|uk*Kae1_ap$4dEz3=UpF<%+c)~0N`R;qgk9!7<^S4HH1z=jo3)Lh5CvLS#%kxy
zmc8>8*%I8B5&f_@0~{a(O>E*v^_jHcZPIK9EgeHRR{XD{UuccFVRPO?e(h+I{Yg57
zCEGSAl1|VEL{TUV5e*@NQhr_m9I&ohG{z)pLHQgvYLL-Iun{<z$cs7I)^J~7qQ@-S
zKoGGT9<9w#%!6)d|C5FLUze7*$I_++j#JMBo6YYJJ}$U&u9lpZotQ>PBZm5!GAWvi
zQFx^p-~VQHt`n4h&&Qtg%*z1Hv&{IOU~H7`!e;cuM&LEL?O=fXq&9M5sZkp5xQ~BY
z>TP%ojuK7?sA~m}J;x#90C$Q>GYGSp{S0Y^ze9(tSg`EVe21%m0idTfu#mUMwPW-X
zk85Qmui<3_Ss*)uL`bDVb_GoE`V&~J;oNhZv6ItwyEEvp3u8O$?PD1kDH?7I$NM<3
zM&HnPQ@uDa^IiSv_UB_rE5_OKJPR_?9xEc?!cIcbl%vIOoA5F3MHeWihv^BW)z-P7
zrHTR$tG~Zx(csC^`YB)7gEiO`j>&<2?(Jk`I;;VhR-g*#J=MzBOkOA*MM|`k=Uyrh
zTCXvZVT(V4;O8HX#>V}}atdLyQy8ahYa3=#IG}|na0+|fXI$Zm-4&q#b?dNr{)%nx
zn&>_L2=IP6ub!`BefaS5m<>H-TnB8`@H-1p1R`_=H7&j~oE^9WqX4GN<YrJPO$Hvd
zvdB<I&&8p-S;mjhXW8Thr;Raa$<^;dc(x$%9xQAx_wivO{jxx-r)bGtx)i^BC`D76
zW<cRj9={*_aQm~&OV8QWp*(TDiUi?YWV=!0(b7AuACEl;%F6&19HHy&7<%X^EYQ+v
zP@245Ak{e56OK@~C3M03uuwSiTq|y@@1>Cd(G9eL`5+ch_cuV@&sx)@g+EZmzBQdU
zWFf4<hgJ&o43WjoHXRSwyZB+g+y`*}Bc~efWx!rj|3`qH7Z-SRzydaM^@fs8m$y)0
zp1j<_hraPRAhS}8&rE%%LQk}0^93U3nb)AczmI5x(>F$+^%skc1FU4kX~bh_i5{=c
zkJ)wuhpL68kR@I{-whg4^auW$0_;SE1acx@+dp|H_7fI!a;`i})pqat$R~R@PG*I|
z4HQX|oJe1}w}6D%{sK*IOSAS7i~@-pDjBt>HRgxSA$yLU3`RN~;I!<ZJeZ={G(bv3
z0TOWVh3<G@h94z7qz62N{A5-Je%jl)D90E<HC+CZY@|1Xd$B6U2t^v?t^*>X&E}NW
zH2$IuCW>R9HtLd_Vx=`6;lULk@%G*2SG<u<?h<fNf$ty}>DF&K^V|_l`9Ng{GEL~`
z4_MRTYa&y`(}S=hWJ;x9;7Y<>?|#hJl)WiWL-Y=XwtpT3^?VXoiE?k*pnI1s-+aW_
z?sBcUsxaGod<$r=8emyq6TZhnEs+GOzP?7jG(-`vAzFp*{M-%_S7JQJwWatmL*L8i
z$jd|dH-0BpHw!-9>-FtP^5dZ8Ja0KG+8Y7=%AKEwPDvZahy+VB!fxJwUw%Ok<DsVc
zv(s>q<G5-i8f_@Hl1-SLAnkknCEFp{ogU|}rS@~MhxgAPuDkE(T#*FS-lidxc?uMv
zfKGP3_@@e{!JaafxdcViY#R!6Y~?NuV9hzm5lmG2%5=At#jSpBB)sYSRU}E=8pRS&
z6yVoQ)c^e&cXX$Y9(N@FY$4qevY%z=Hy5BQsQ|nCNZ<|7!)Tp0++>*d2!A(ZLu>w?
zP40Rf;O>@=%H?i+OqPX|RfD6GjZ@bX3$Je{L!%4Sx9o(YBLls4>*5KP2=*nxF?~;C
zmobPQm&~9DYIeDRXc>u70Ji`U3MdMKLYQquBTs}(kwNzpWC43!pY&sbdzeL>oP=?t
z>KIBU@F0*JQ3E&{rQVVd9SKJ$vE$n6_+eO&7iGZS$-v+<ne}Bhd(2NC=H^_j(4mz=
zLBAqbGdzP2XyzBVC$FYd?L@3|i|Xj=z|iuoztE&TY2c;p&nP7>{UUEEab6R=qsy^u
zZWpLMGM+&Myw02{KBnnnF4`c2-vl_B{N@O8Xq1f74(Ix)HiajI(2#SH<8r5$0F5Q&
zuTZz&0<RY5x-)5Tl99^33s66u3;R1ZGsY1Xi%~AT1-QAWA}Fpl#in&u3tayoZ-FE<
zj<(7K1DPUG{x8$B6@+9NJ5%a9VrO|%&}a}&JCO<WwrnXt5rN5TT(BPAL3pZZVA?Da
zxXTnr@Zh5fTJt_2L^siDU5L;<bUl{<Im!=C?>;Yhl*5|ymzcT*XER3QTc@{g-frFl
zZUb-jn&A1~)Qzw90a9FUTOOaKVy^N|U(bXc5`K0Qn{AXdqU{7HqYRSeL7rioaaK9c
zs*rU_TqMe4B-d!=LP@LICA;-*baYDx8&5-i{DPg~?(smJ{%&B_vB^Udf^*ic#=0DG
z01R*(S=q036m6HRFk#7}KwoFgWXHcP#!by!mHlD|F?tp^gym*9*6#c=@Wmz$L8_i1
zAw~@rbd+5CNSSC`LzSv>xHdsC^B3X`G)Ct-okn{Cd}B+}QLBPZlY6{KC?FdQXj-QR
z+r1>Gq>?|DlfPhH06vdPfcTe+rda-xzyiSqi5{XCX+R6e(>SGo{R3`Kc7qC-!mG<Q
zCeOJ#kIzz1bIfHx&A{}g(#;`UZy}%mkmW=ERk9A69L2?T=Oo1*p)QwbHBIUJ2D0>S
zdwrMS;4oX5P%5rh%_>)2NPA0rzGQwlxZy|<DQHZKU)=OTrc+Q$S&-k1yQbh8kU=rQ
zPZf!e+p-8$K7?4wTc8;hSS_yx5RQ>QH{`A-ppVPr5U{D3cUvgw>9y^@Q54SfZLP`C
zv_XUcY8wa~szPs;ra{SIf^UdCaBr%rDgryDDZGD&pR|r0iusixZ4n4_tf7@xmDJ|u
zeD$xP2Ht^GZs7Ox7|^#shKCZfq1p}nEXc-thKxi=SkV_uad|$@V$PVwHlv`q`2_}-
z;qW*gbG~1cX-1(;^z80ta!~zhP0d|m4xK5@D?(lko>%c){`>gT`8q+)mmHk$J2AAz
ztiY45Wg=vG$n{oPOpuWB*(WE{VjLAc$Pbt2Nax4xDy<`fvqFJ3I2^!I2@X-jE=E3s
z<RtkFNn*iyvx%e7RG?D*EGE#K79#iqeA_RN>2GVvYqW4O)5s5cRX8sJSusKzqVC#%
zDe=LpYN126mB!F|;+U*i-Z3_Hf^XPTA!*-F_sXpYyw_j=zigubjS-Z8i(A|O5;}_<
zz%n(P->(4VZs5g>EI|%g>niS;F)kxD_5Mcn0`^#2X<@!Ey1n-l2grGm8K9WA4Gv8V
zeeU&DTrkA{>7UySiD`k4;KKEJ1QhgVae>~H5Z+R-+AXHPDB#xfQ)t(KxJ`{sMS2j`
znju*fICadU!;z~JFw*d_G<vVq>|k$rR5tr_GC!VF+oCimY7>{O>My{WFaNV<t=@hF
z=pm3Y^wSnrP712Mhg_xhG61f`*!7fgj`34W`VInI=;zVV-1O9Ci4T{bN^HHgzP$#5
z5rZ};8Ayn(%*TMkB+`G2%K04lCvyI9%Z5*!=;-RCqsR`x9z<jWdXqvpv0Y3-f-Bo~
z&!_5}XyhA16hR4*G35j$xYtS)`A^2=RWMcgB{q4SyAzzE=YfWXDq3%+1pgkGl`_Fq
zMvahVQUtjjV?Sv(uhAwf)CLMjb$Em#b^OaHnRO))pibU_+LyC)fgyAI_dt+J7!;;P
zsdrNC3>R%HQvZy$$DzcqD5O;F4)LU8=wqKT7%CL)%?Xi}IESbRxv%{y%%-akN&o@v
zZ|LV}&;}uam3|?dPg;U<16D3N^2PxoYmomm_mg}C5lw~Y)BAYPx<q$=SAD?9%q-+k
zX%zbC+(cT9%O!V^L4gA^22KBDkV(%JmR>`l08vv4eR>xytY(1vHp)vN1=Lvv1dMOk
zdOv*_%2YhHtsIY6K_7d-l=00EWvX98g_ZH~EJ>(8zAq%xm!)IIFq9E`CkG631~~5Y
zzq{0q3ke*$o6i8$W$?o%gbCa1NzkN?ZY8gS!*G8?d8wlT&`upq)E$y}OSBu)zvNY<
zzEruL*#k{;+r?;#T|!;+%uzn~6hIv$a$DPrZfqakTWmEpMdVd{KSk2i2T5`i4c<iJ
zKxaWf$M;i1%P({yIpsjfb^>||iUziN6-=+nmzGed>5lTWUu1{+GbC;YCv)^3)dRLK
zGV$|3QEGkZuO-C#WBeH6Bts|zp|CzKbpr<Xmo&4H>bwx}7NX=aA#^R3uU0H7^+P`B
zRq6+(2oT`_HNik&U3vk`G7P$NIM)CXcn7Xa<NfIyi7VuXTW|W?H7)$}#bH1I5IuNc
zzc9sH#R1m%u~q8#+KR;(8kG-dqEu3Vg&!vF+xV18$V2xLMQ{MK6dl2Ng}cG{^XHk8
zi6qk2rXwp=&(Rj7!<MUjqNn`g6$}wF`EzV(=Dc$~1&Bk5se}#0_p&->`{r_!_)|5y
z8{HddlT3<d2syU$EhD94ooq@eA56*XNeG{w%nuR@{8*$QX%s%x8pMs{$`NM1O9VXk
ztnN$wdI#Kdk-#IEm^gfpl1ORu3#-L&%uvEXzXgk<A|tu;?eK%sy}9X9`SQ!8D=l66
z(XE&4_VyH~YG*5<A5IcT?Ho9|eypfUGJPq!s#|S{Q<FG^1G3dPJ=^uOiJ#~x-iacY
zU!<rke`yWvHAF_FFWwsgS?)hIu?I;Q26tRP9B=}llTw`nN)`d4Nm!p`P-@1Q@P=NJ
zK{z`D8NV4=mLUFk^8!w4gcd-5<gNUfG*Ub^F$v2cssyz@o{*1_ac?212C|mNL%eZ5
zL%QS+JH{Tv8fbHVdIQD$1+vtM;1E_Uv)#h(zm6pii+jO&<M^|wk{|==Zv6yI8XLHa
zkPv)qVQ1hj<jHFL!1A=xfRE}W0U<_zyn_`OojDQXjP`5iEOSSwv0g_&tfVARA^mAn
z0ug6qrHCmgwLHrtWJxRUz%t|5rGDxHdCHa?pHbMm*e}yDTvk=l?;p{S)Gg+jxPtiS
z?tE#mFvBL$wlptR&U$51_LTZb{92L}wY}@4j^bz&`}_kjs-6Z7UR~lIF66?JhK4#r
zi(Xx>PqS$^luowh%Gm6l#s^h^NEU7=Ra@4GAz2W0XIA2mB}*3SolVg9%BFmu=9LTw
zG{X;bIr~b^7v650*kT2x;1YG%ynukJZ)%-&ZKh(9BXX32Ju@OPFjX)-8@d-#@W&v4
z92pD3#_I_(Fh9jUfLNnB7HRw;#28J_S#3oN$B_y|zkn_YCELSm?@(CITW!kN^C+8k
z;fDub*E+VhL9U*EZ#bh13tb}8IOb&K3HS4&M>1ih1+9_$d7$jVTpL|AsdRW-V!p(f
zBBXsU#n0^Qbhmz6|2@AV9vNz*WpVSxc^|#DV5yE<jp5_B1^Zvn7w6gOs1ux&WVvt>
zJgej^2PX3+uZrm5cTC`qYegJBe<E4Yk?Nw(Mkw?zd9B4*8keTk=6{LD8M|AQ$%8Cm
z2319UIPv35;_Zbq=!E9t4a&W}M}{C}{qLYQAhB#PFaNnks1MM-$T2C`g%gM^lefw%
ze7*&U9wqDD>&C39L(D1a7T`hOHvRSP5R0MR@~)cR&*QtST{}@1wvI%ac>Jn?;O1n)
zdSvV{?n3ua)7m51#H};M8h~y@+-^m(0UI-aYV6*SIy1v%ENekbS5%{H88*`{xojNV
zBP)9Nfs|0noi)zqIQ+^o8fgMEjm>{#C-z6*V&mSg6GT(4aY2ejmwwJ&Nk=zDB3QB{
z&#o_-jf1F3iXR0haj6S3ivai`;_!Xo6c7l>D9K)cpaT92nv4v%gnsA$?DJNf?BF@L
z_nsEs?g*(;CaOOw9?U@kMJ>-pA|SM$<ODZY2LeG<9$R3U%Xk*Ls?*aP5zl5!?^p;Q
z*=r4`@+tf@eLc_DHs+!Fh7IxJjS|J<C6ZI&>IV5StPnrt(4S;?=uJ+BnoT7=clr-=
zXU3+Lp#~(DV%>JNj?)#3OJAZ$Wuagb-0B9vYeqD=y3}ZPGLjdXQa5cIOvYHc7a2pr
zcM&`Zgi%gNBD#**lF7sCT&?FyRW$aA{OP77CJS7f7eflj{^I>heuwZN(Vf#RFb<Lu
zhk4F7yak@_04*j459l$uze}?e>m7hBD0O)~U6lg?g`{u_cYOL~W7cl{8a>3KTSp=E
zz;-ph_lt9jy%~#Aa{1nV{(ZgFgjMk$xIZf}SM_s1=_17*KeEm*vPU&JV%Uw`kT{hZ
zV$aH$DCn*rbK=RZ&S7_*h>6wm>foU7HOcZBaGMUf4as4?DxiQBkpdqnkO(Ay$NSGm
zgKMW?#VZf~3*G?C!SIsUfp}}x$6QSd^VG${nmvL+e1eRXfmtPw2j4=~o`fkFo5F-o
zA!hF)TOsMTnFG<;dlJtpEmM1N<D_t&q2R+lWFM7oOtprBpAVvDatC0HZn8hHg;S)r
zSk4(o)I~-v)mUOurwc%>=p~&F`l>kYUkGGw-Fb-mk9x%N^tdCv@`9(T?F##B>_Vf+
zz&%jFK$4^@)jh%{L`Kmk&9+Ds9xYg<?k7~XA+nFs-b8nC3(YFU3*}gstDBBB4TvQn
z1;4awAw4??ZiD-jXfei1ksS@u75}-0e}BUeuRId)(O;?cnBG+DJbbG0+=Xh@I1EwN
zg*)Iitw^;a9jf>+0?JUXP(;o>T=Sw*Yp_DcTVk-wAlq(^X^?&43Dl>s0{<`NuGaO5
z6w!@{Fw2l;oe_y3yr-_=#=%&^sv3M$78-m8h|on_zl2zl_QBs|uo!b9Gk7I$?K_uu
zlhVf2Hb&Mm4;&`vl<;|nWLDyqh|N#&f-I|m5)7npxW{*B+!D^HV0*lG2tUGLyif*5
z`<mzo4A3Gez|nnY9_$x^99>{b5F5ao$%3A3D+Q9II&Do^-b%Hr3!CUnhjE*5v?Xw1
zxa)AnTDQp|jsNry^b;o)IJTrH(lhGHqDWF?5_t(MPpND&s{nb$LQ$ZL4qFBwzP7)$
zcY`Jxt`x2yDKTa3rd|b#R$9{1W>?Mh{)vUJtDz4CmF`!1f0=<Z3sO=}S4-Q;r9f|U
zvR_ue8O>{dln3Uu*b}GLABvtXD6#NJVfw#VC!+AWZJOWklj$|oV(Ae!l5==frbqDr
z2Mp}5TL4A^Dbb}NCnu>F9mCgzE=~kx%d+^<#Gfw;htROLAGryZl%%>=@CFTAJ9Sf7
zUtZp%czkrv{dnKk`Y>*rX~K!L?B=B(Wkz2_`)NZ+i;pKe@t8Vihy)@b(bUj9P`{J;
z013f$q;UFHkc=->&sOmM(E96T9V}Jw^*04VImMlUzyC!#DVr>-T&3x542ys5kDUoS
zX>AqbEx2c7q_AL}D9Zt231scmex7L(=NMz?iO`saRTdQHHGAq_Qgs`%XV-Q@jcy-T
z3v5MATNFQij8iGL6Ww=fYo+3!6}6eGw=#y+J<mR5TZ-#|<PINqIzN%Rn+sdVJ&K&3
zHn)Zb$PN<|Wq{9)F(&IM7swUZm!@)qFA^6Q-Ytl8%t(0cOPL<hmk{Qm-Em+@1#FJF
zh~w4dtca4^%XAC>G3W=H%A7+w{svis*^8%kq<|7DZ#n;sD|ug`Wp&XjlW%Se8mF(;
zu<7JNA}tyLy`sYQfN2U)e27}$3>LMEemVt&*|kUq<5)@_he>}r@-N0z`de7)N3PoP
zz-~Z8M|4&4^G!L$+2$Knomhf_d`mT}Z{bRWoONDyqL`yc%5rP$U9bj=O>|w2NW;&)
zVn`TshlCm2)Ke<BG;Z#ex8R)%+vzj=e~I$z{ZdqTjRq7;G4+Las7Rz3C%BILd^99@
zfOku~ioj`@F?Xx`6}8iL^^{G|gZX}<rm%yFcktjf>7rPzJ?~UUha_vJN4J#S6ilAp
zPb*Xio(Z0N=<Qj=cSE1_rwu4ldk8W_5-CaA{)B8Bd3ms;d-7cVA&R+q2*H3{vk)jk
zwnDlXcY*N`A;fD9rq?+?Qz=x{oXS2vJXYMxp0!esS&O*c4sk5JzF92TDdLYZI!z>=
zjdtqnw8yC{+s#5sf;YZ{<GyI>anMyb1@J;=JHbCDp*ob|OWh)d%dtS+n{DKeRFw#m
ztidh?MU2-T^dP1ghAk=kLsHA*;HlgFWLJWM=dfh40>_4JTY=ZpdTR3ONG&2SlidYh
z<hxN7Uc9GvHEr-WIKb)81sBR|ihJaKui+v3Psoe1VVPqwb#eZqa?m}$@#xk&iHg>t
z?33;e`15_<?NCGCYKWwQ+FXXG9`=8X><v_`wFm-kc^;9kznh{{ek;eMA7o%pV}`mA
zqC&&Hk<}D;!+Zz{(!Kuv#Uvz(#Axn_WnuTe+Zm@amNH*?eby2?lO>PSWLbsc$gKL-
zR<y5?Rz;ad#4HanM+9FH?rAw*Qxp}Rm{;A4pR!xKh1D1iiT&*kkFmzkbN`-w$N4VM
zi0auP)_94xpBf1*Rw6p(HZ81j`)4a=)vmoFv^EtfC#S<tNu$!4*C=nYuF~>dg|$XQ
z7$`fRE^ok!6U7fV?0{P^?{ot(kt%mw_6B`h-Y4pqK5=3GODJ3y&uB1v(NcS*H8p|u
zW{0VG8x>J>C*WfycGB6e<^!s}X+hC)kHre#h7r{&Jm<tEn{w9Xw8Q9A_P<M}bzeb@
zo^SCwh1{1SdVn3$;~h7Hc|E{Q!uRYm!&wo`-nvtZxjN2Wb0jI`)Dy@()gm;MBw(Q6
zNEp`(veL{5GS{-4yHIVKQTge3MQG)oQd^MSBEvn`;6y=+9Mh?zJ^o%P#`B9r{y!T7
z+ruIs+c3>Ds$G>sYVk<yRTrioEp2&~l127Q(;k;o&4c`Kc`u6w)ZONo>rnsH4GRhp
zd}1z?x2jhd5F84AVzjH15|~F)03A1gTqJ%12;hi+(V3iMTLk2XYOCev4Rvs;nS`+%
z38-o{SJVYurc_0`YDXhEoH^0dI<b@%8Y4Zu+w-}XrhTNgBBKcYi^@BeAC*&GX{^o#
zo)kAv3G2V(c;+>S_U8@K*qy)o;NqxpKQ7Mi&bW_4lf@&!ZXFsi**44Ultvk;uWMI}
zO@7R33jL<qF&;5o=&1bd>TK!2)Zk}r?Ck50G1K6x=hWi@;YmV7eg-#GZl|d1&-w*n
zc*CjzxR*0GhX9Sdeptxw?*xeKlm5V|K-EETSyZgD1mWdb-hoPqule_v%Vg;ZuP~Q{
zMt(dZCvkX>9PZTTacdp6V*KDf+Z*<-;&eqji4A?x8tC+j6;l=@q+lP6L_~hhUkQVT
z(+lC9lswi__y)Z{a=w^=09D}7o*p!cik(gU^Irc)sTS|Pt}krG+suDmXzd9#J27I`
zFmFd6kZ`C9a=wT1XX2In`vp@duKM!lMs_ZQSl-aw1r-=Ej?VVBl(I#Yj)4g>PAe6r
zr_bi~5>m$>!h0dp5Zb|2N&gRLQAUpIgQ-x#@n!3xywOsVebJn0&p`1vM1hPe>$q(r
z1TRQL1?^Y7tvp-$Rl#x<4yO|1Of@FPnXF17eAd`W1QCoxxUDV5w3{3nysj6JHsDso
z_@^q4P-mQcdyD>LtqtRkaBIhty1<t6xlM*+#?aFiY&oF*&*i89KLP1cRcE`=x?RUB
zzi(gDwOlUhO(NQ%y;8JM<#9(oe9Y4}!gUJ9y_Vk&^k`;Qv{s6KgWx{`f4l5dvsU13
zCyLQ%XXv1G;NJ<cp=Z$R((RpWF4e_LHD<P%Mm4z~IQ(`OM0r&-pM6~!XYO_bLOvmm
zxbYb8^T)M*>E(m^2V>gEx6)4_Rhd^J`sb3~4MAAuL3M@ium32%5?p_GLnhg6EaFWA
zsV#XQk#D7#QWJ_V$YX&;g2#Z;>u(2!v-?i`?$xo*r$P1Xb|pz=nvoF&97$8v)>N_-
zOExSs*tKe-%jo;iuVi#?7&w1?aBQ)1d;WP<uXA#u%t;Co<)6#vm0Qb<GYPOFOMsY)
z%ntRZ0)@S%9~AfisJSs0v)`Bi?9b~QZuy1z;oR6IYBi(ipKCg#IA!%u^Xn!;J!QJX
zuhdD(>@%mO)y_-<8`pOc_(<sAvj1Bv<WB(%WUN!fiM+11oC}yof1RkSWXqG31sY0r
zOlpbA_6SA*h!wS3Sil@{8g4K)vYGB7jGz_4`xiVTRuoEDd%Bchfa67FNbr$^_N3x%
zA#EvP#u?zO(;wcEi29!c3B!?i&MSQv$i@N+)ekH2ra>~-&Gt8K){7%muKDEAG<F_X
ze^hKS(9{Kgp@y7@AYOO*qr?izS+$AcjBa(ke~^WhMPe;}c+mfoat@i7TYg&ZEdM>C
z9THwxy*qdV6Z6t1Fuja9PTu;a_VO>!!t9r=2B>jnKA3;z*6#|%SwfK1M{LW_@s8Mb
zSQ0UGjPo$p#E|rFIivWSLZB{yQw4@Mg83#udt^`|u5Hgums*FX5cE((|B&haEr0+}
z;34z#tS9H|*DKMyJC#rslqnAx5{{xY$XBbMHy-^`)X72(vsZP~Vi4+@>05Xo`Q$wy
z4(1tjRiuE~F}<_JaowKrj+P>8+nB0!=+;42BPP3-00&g8Z<mS&2lDT#!ZXmV?er0W
zI00l9sMD2L(L{gl2i>SRwtAAwi1++ZU~FYtJiQU`cnIu;B9j>-GsKR(U}4)okwU3U
zyatGdJG8-ck8)E`p&3y)uf3zO+>hihY6wwXrg(SnA2b7SAi@;bN4Bbp?6tI4Y))5e
zVs+4R#P?oRvfN<GD#o}RqqR503mn?1p#1WNO_dFCjFaV7F98!yJLi8F8oiic-_&#O
z9=+htu;}}})3%p&rTcD$)!Lflk_sAHDWE-B7I9%pyPfcLODkuP<5jW>v(Jsl>kE`3
z2=vbh9aiDx=fjK1u&{6S?rzcC_F%9q07p}cM+VG<+_wsQFsYtnlbN-uU)s-F3pf@3
z4Dp*17+#gDrUOOjgOGK2VWBvlWq2=$KYDUc7?RKH&a3UhmseR9MdSSR`>cXm1v!1M
z!*^q>5z-!WDq>~C`o8y(^wQn0aKUV+L#8h2-+CK7JwLWy;(6P`l@EIU&o-XW##wHW
z<nR^QW44EgSN_iLQr4Oq&EBQJFhBEBN9E`tc*c%*(KLCCKa@ReUQeu*X_tUe)p4yk
zgC1C?23QP0#_ip3&ApkHJpv;VnzyF|J@6ifhkC528tupXb%=hCH5zJ%nZ@(!*~sv0
zq#Z#u;K(K4eJXj7v(8oEfxMtQsJ(*yJz`MFHAYt`nAW1S`f2w<JvP)8qEbZ3u!j~u
zd|79Z5hn*p&&r6eHqSm5tz!>Jn49;1TaF?C%+QXG|Kw{B;RSqe@2FMVZFLyUYID5~
zXJVS6td!5ZorqPOg0AxvxQBg%fP3I&FkOdb-E3FE=<Z8u1o_|knW4187rScfYx~hE
zEBy@K=_v+a{=o`#lxh5C!XCmJ^6M8KP$wxg*sp$Z6VqZ_kj1s*c}?bXN|xBc@MK<^
z2%8TP|DFsoC$LE*{zo4dP>0%jnQ8g%%tqYR4@Y`m=RNOWLMAiH>Nh3s4u&7qW<Ps)
zRrX-%Sj=C30~D|)3wnBQgn;;?JKMxH1=rkV)!K!z{77*V*MinJLfGz50bYMT4fTVp
zRJsLDKc$S_2*^k=@Kh2j^fr?8-2I5s7wteE-tOT<U17tas&wHzzlmUYTYmeORXN4>
zl?Qx3Q|(V>iXJ|Q>~rv*-@i<<*7^P#1k3Iy;7|G6^1Ko4)HzktLX$XD(~PDL{9OMO
zGk8^s(K?YbKs1e<v1w4&NcK4Yo%?FgiJuQk;-D_;yL~xF>qP&cIo@xC<&J2H-N#2X
z^FMM)h2j(E7g>xspETvkxnQATou7|!%RWkKh5hwwCapxm<icE22<g}`2f@d`S$g|o
zyol<>xn6NBJMNDQm=Bxqt~7PgnxbzJA=|_j{uSiga{eXSyBq#8#v17$=v86oTB_CE
zrq1$`#mQE5GK&!A@LsmB-MZ5YV1v(~_9Tg}XN{d_2!A{|;BRpKeL|HBvBO=#mEpD;
zt_19x`s*V6WMNtys1S7)NJ2K=QXlc>DxF$M7Y{WjtEB7<ETiO8tDaD<RS(+a4yRbh
z4d<LY$_=JZTNHQ7l#BkXL3aATFz*%ej*)pi*J8LWyYA}IbEo&{n~7P2{=4b73_;Q>
z{coS<yj_$gbNyQ6N^t^XsnV(E{xnz8UiL~?7BHLwWqjr(f`)~+Ua_8v!Np~Y^$o|R
z8~GR`GN9S4Tz3k0fG%%BYByT#5;KbRt52EcoVP<Am8k^ijYJGWCIJk#csD{$GsP3j
zcqn9ou1zIxHFYD{i0jutrkH&TTWToZuPFZQWuG@73ZRN)B*sQ9%Fns^;XM4#K=-MK
z!9a>Ctm4uWJR+Ju6*s1%QTcC{{iJ5&XdDYCY@h;IoLZ=3xs{Pw;w=BIiB=c^yrDPv
zM3q7eo#y=X=WO15a}{&kJZy9VUD2?YLgQ6W$;bftuWhxpnT?mW8N*V2E~h5l`S_=^
zdqgfO59dX4gXq4BQ9UENYCWC?O#Z*<Xaa@;$Ob-$pFlMHlLUxee(InuWexyiyyq|Z
zq~b`+qw6xFw1fF2SE}}~r`o&Owi<YQY!lQng7J*&#t&qD%{2}k9tcBYzkN0fpLlX8
z62CZb&F;TR7k)X#Z<eynV&^w}!&VgRSJ(*Ki?jc?<H;@{iU8V;!tHyOxpF&R#+ISG
z1U|xnuxg!XJC|(HZU<i}XXmBTdRa`Y{>qB1FCd~aJ!krksS`=EDEC%@plK(5EbMIl
zk9NrDKlGg*I&I;@Iy{}F%4(SxkM#+On7>{3u65^VDr;BbA7%jef`6_%7@(Bvq8K;d
z1%i+%owsNVR&SaFEDjfsb605G#nT3iUXJMX@jQn^&xj{bBe1Zf&v-C*x}Tp;wVE!6
z@zDo*6GKL{CO<_(UK5L#sc|R>`(ywR>47Ig1A2Q#N7gWG@4P!MTzU0ZVEy~DMq}a+
z7$adoFKySMPr0s?_q;I`%JNs^6Wy)|2b_Ot?6(}&i8Lsni%Zp~b`|a#I+FG6^eAj=
zr>)^>F8rFH0Ieyobl^vHuLgQ?;wmnZRMsW20XH|c`{h$GQ-%^;oi$l_rUHQsdAyp#
z+#rLAsnAZ>^ZDd%=(M_418DT%LeL2^92mp7<|nZJ8LdDDD2%43%7T!?1*P|4cH_2|
z--qhl{Qs&^=5PUv0i{N}VQH0*jm-3+-VUMlpF%bA!W<q+Kb2$}n3_3<1?e_>=ff=A
zcv<7Ot-(pa#z09sI^6qncX`~uNvDC3Z#)Io;R3SB+sY`_YaQPt4eF)wF;|C|=}h1^
zd-6iI@XRX#)pOof<{JqMvIHGem1(C$w{iAnAa3DZuaR-RYn&o#3cT>Ip*^`(!m_&s
z^QkGzOg@J(0bxGdI7|`3v-dKQ90-sj@PihKcP?TGUlne6UuYX}coRvbmLKD?+t|ZP
z#w79cdYLtp;@4K#pCGX=ss9aJhOAH%m9l1fA~c^@lHvEQ%YxhbT0*TJfy;?!4!xIE
zBMG<vBz|SQ@}szWL}RRcM-uvc^LgPUmx)?%YLcU&vrV0E^P!$_qzU>T?ShJS2Jpgr
zxHne)QPFtos<t8*<iaSJj?-DX3$8<Q!Yg>Dn`3gH+x6gz+DJ!`{*y{4kUsN9ut@=I
zv5Ba5g=r|9fq~qV$T1|VhB8EIr+er9)-{b&4E7wuyQmK)8g^wRJYToMbNzdI$Vqio
z*s(rvyuA@#7$DUCiQg52n=(mJ>_iE{$b8{!5jU-`$#L<IP(?rSHTXY_OuR1Dy}cfk
zqYhyVE4X!w>l_xF{$FSWC653R|Ew6H&N+M$b&~wo-**J@$cfJ@6l3?LR257*RI;Tx
z;z^+WOfi(*7ZJM_-kLukIKfjJe;S^BQ@)YI^c-fiOD>t`*WxRGYjt@8y^UMfA}X9L
z&gpS%a|sDuZkOKywqZuv!YLs4>Q{m4Dv7o<t((xBLBrn|Cd?Zs|D?<QBV8_?4Owxr
zXG~wm=SoE78S1~h9SZ<3e#96lpfgJJi!N2_1x>3&7?S&!xs2wOZN==+d=npv&4_+D
z6-)$WJ4FMJ>mq3s27Hed4I$LksVMHw;!WQ7iKX#|!M(3FQ`sT6mY9Rv1$9d=t}jtl
zv;8&gFRI69TUBxCl6~g-6Q>W15g?}b@99o&-#77){@`n~mv~fHEoims^EyS%Vc6$)
z-|z{=FYP;oDmGsEhBCRX&eyY#5xf>EQD%EaKq8xS(B}7*$|3KwSf~C}El+i6N$;xH
zO{*z5btnkPzmIJp!%%-`sm^K-4_IjeV5V}w&a{7BoRUrWx7}R2K6nzgIf?k%?6fBj
zV*-8ulbNOT0|e?2@bo+j@yP1nTtk0%lX_RM%dq+;r%&!PT(d*>8o1V~#CvG^8`<T+
z@$3^ZZ$(20!F;bDUgn4*s+M5PE8wk|p=;ACaB<8i(P>2`-o1PYnbQCN^niqnG5eN;
zOMj-0q**$h$A5cDH<v$f<1HzXuBuC!bATAFub!Fe^=%zxxtsjlK|L}*)Vi!96ZluT
zU`|aI1EHM1IKVxay7@Bje7%<v9|5c16A@@O@c|37kFmbC{FmAaI3oj0&G{V76b@<}
z?N<b43+6-0lJW>bvj0U_U!Y$FH8*Vrhb}U^&6<c%X}<{mlkXDBpbZfe<4osw_(CYV
zV<r24aUGDL`hgNj4l($2*%*96n5EF14t??9Mc<sH4wSGRO~KCToiW+0`c4E3vrKJE
zc%J18=K3$|nWQOiPJ{?Gu3tRWdc;I)-_GXst93V*h6V*2&E3oYqK5sGk5bGtp{yL^
zz6?zwWMwEPjI@AN>D+J~@wjMQ;p!2+tJ{^#u`>=d2dJHq{p=3j9&-e`@{KV@82kFh
z5EsIXXUGBU&%Y_ocN7!IU2fm8B}$e58Y4#!>sRF}N!}+@9FwHoEb1gS-9(nELZ26+
z*g3I8I|ZXnAa3&M>8FMI`nxUqaVBL>2+>DavfQYXWeab=Ws{!T{nDl+lrcdWbSGmF
zOKAwQs`IWU{jy)a=Xl#VV@>NFmZO5@3$P~<(RS7tVY(6ut`4p>5H5?hD%(mrM6>eP
zX;4Y__C<Nm`Pvvx$)@b#4uUv_YMaHaN&EZEod8Y<Q9^LkjB^2mTAOd63Ps!3KgGu*
zDeZN|E4%mU$}TTW(i2r-n2fA}DFK78n{CfdEv=occd=Y1|1`DMj6Ea#Nw{|kW1lmz
zH?-wi(p+US=fJ<7EGC7#CrHEwy>NH78|sa?I%kh$hHi1EX>oq@1HT!y(^VsmC+qCX
zMRMD72p{bKX{kUv+4GYMCX|7JfekB4H5oGarDSNR-}7opk4}%GqUG+Q%D1pCW_F{E
zN`NsJNLt}M_^dRE=NHQiCU2xUoq7Go&u1=bAvNz%Ew2QcVtK#}D&_YgpoqRsz@-w&
zfdQrAoK=peeM-%@dQ#QX0*vD$^R<f@bMCq-CgzO+Ffl6%;a>(2u>#2qpBj<^BG6)o
zhEs0K8!Gn`@%`4jhO6m5pG(FaIv&MhkWl;5JiY0%c2t_&7DcT2r>`F8xsk3Zi;lw6
zEedm<!6BRO;+xpNJm(b@6@8ojQshwQF9z+e>R@>%KJ@e>s?lC$6m*pC@8={fR|-%*
zQ7h5Q!*P$iXkVDCxtr!?*&ZDD()GUlUTUz};jV7yJ!{%Y*gYscnV@xTNOi=p?2c0m
zhvv4!ob?0=>=dF``ek=OKhEvrG&L2AQtPw`op(r;A~$c}hyRKA8FUhkSKK&nLBIXr
zLG2ycvV?!NJB67>*({TtVBa>TvWoimM%YCJAI~3;BG$>IRL(st1~psJG(2fR{_+&!
z$$|)*h&V><PI0`W^*e?I$X`|Z+|eU-t^y@rRDElNP9vI<6EVk|t9`48Ysd&b4vl~|
zmyRM<942ztJXi=Nr;MKRsmn;8<6n+7mI1r#A!@8p=Q#ot8Ctj<KbBH-fl=MJT6D<s
zn}6Rc8?OBs8z>&Lbmeyibn>omw+%mvLF<ecN8Hxb79#0`94W&O)=EP9V=tAgrpT*!
z)E+f0%KvL$&%E|g>+A1qY(H-p%WB4W9UW)1ox7)=N{3H0m!eTNIi`>PB*G7pe~+;4
zS$c(FaA3!a9V{13)5sb*ex;r#xP;7Ai2Mut?vA-D#%<+Oo1$i`s3syT|3pr;4azrR
zVOVY=1s3Qz{)5p*icX`0aHKE@j4Gi2?pcSJzI$UmJMtf}tMR2#MLg32XpWj(e(B*#
zfr>RG<S;K!A_Zd>rMLjqXbtl`sNzV}WKI(SB`YTpY_fdT1#1!|Jsi@`*}>|B+t+I<
zj82lVVio^)s?9SfR)Gw=!)Hmh9XJb-moMk>Zeo^B8Kz37w<coONw~-9cJ77vkDJwk
zYS)~cvO7rj!!Bui-GxbsCNk<jFR<0<X1B#6GX`<;!jZg`io;sn$IdtW^^GC_&=>4s
z7tJal9VWkJYgI8$y=mzcm-Mx(CNwtdk9=eUb1ni&RdFYG?dT4=Tq;wvgN)xK%+~&n
zIc(z|P?S$7Os~AaqlaneW9v76h?g0ogtHoqj^ur9a<vCb)mCU!6S|4f@z|FRLk?5j
z*-!Q5lU3SeoFZb?HKq@{RBe4>udJsLekl(gojdp1V7rD}pMB&(ybUaje!MLWhDn%t
z_fAy;HJ6MwG>Cowbm{5O3-B2t1M$ZCyXwXkcoz0-GZ=TtVx(3nTqPsZeOtNu7!ulV
zNz8{J378^;(!WC=TbQEcqR%pY>p1i$95a$opY%JXnL&^wVoGafVnRau_lTkzMGx3a
z3Ze}8Un*XSad;tlAwnz-xtr_g7nfgrCYN`%p|?m4^`?$Uz>M6J#XvZRz|}BsnXQG;
zAiv6g$o&`@oIu4m86meN4$xO7wB2+AQr+tp?~7aIg9QaF3nQa^G@Ja9ZK2K1?0Y9F
zdF-xb*n0vyT%-COoOSb2CA(3~lM9fbE<)S+n8sF8R8bJRsy$4c;xb<1E{Qd9JSu+W
zDff2!UrYg!rJx-84GC0N&+?-j-0<z#SC@D2iXKk8muaPaGqd#BAA!uiKMSU!KmGvf
z^-A2`n(ONndN<E^D6$h6wp=kApIvzzTuQcI*e3+?^Ks`&!h0{iB+NubdJVl#>Xm-g
ztI+D-FZtWZBr(!jYG_LHTHL#mk|{AiIUw)(i~oc+*5|NnQ|~LDGWpPeXZ|hb<Vu`>
zls?d4yl^U2_ts*T@J1)7NI{l5YZ?(Pn=Cr*amplZm&@lt8Jsq-4eqf1bIg-|Jlgn<
zD7=85kK_NI^O!B{xm@G1)1>TwX91)oiQ8oo)~!m_R=MscaTM(>@%(-Zjl=Q$uliE1
zVPcKSh3ciDk4ZPqQrNP|Tg4ZSl>q@SEG1!;rZ2w{!1{dmRE7>4Kx>u0ysAi`oIrJ*
znv7yzZOxj44Wma(Q73(S<;(WZhvHCxZQ<<L^yoa<xdg08!txaDkff;n10JO>TXg?d
zb6DrGF7Lb)R5ah<OHSyFj;m`5vMVn!9K!#Py|;|2V{5ubg9Huk?(PJ4*We_$gy8P(
zE&+lQ+@0VM2<{NvCAho0-6na?ImvmS@4N5)f5+H^vDwnyyH>5LIcL>c4HAJ}wW5k@
zfciN=zJro8X#Ly%Lcf&CC4D+CX~Nsu!-Y994LK1-ALsnp^;tol>qBBiXos%-pnk+v
zXI`>pd#;`9lQpR$^%_%A1qFqEPXnBu2t1O6Vqy_nJw0Mkaq&Ce@I9PxIEpW3Ha1Ka
zbJZb=N=j6~X0$LcFa>H=hOx1+BEYMeL#f<Kwzic^Zkv84CMN6FvE2K<8=59-1@aW&
z*IMyQTY=}Y)6le<sDQWjAsM5v2a~6qK_2k2261S?yaHa_K`b!WlaI&DM|sJ=lR07-
z>;C4Ri091`+@w9>nryL%?p+_06p~4*UBGaKK%*Sb&c{Jw;?^H5jQrb@7F&+Axs&3~
z_X7uCskB9kB@wBtG{SPdqS1EVVA7YgA$g}4oQgy6D{OpBGKH(tAnh&6j8sE3XPK;n
zx%%l$Ac)I6p=%JRBex%-i1iI!OwnA*JMx_@-y^7(v?*{mFJhPZqq1Q4E0uJHfVkvu
zI%5A=#J1-cdSUtUEjAK}?A6&q1V`DAZ>MyJgTWaqT47Y`1Gq2~Uk?wq))n)tX+?wT
zKY6jsTNkJtL8GFhk15IV0&C>j{h{qICRJ$e9@+Sw?(Nj8jiVI1^qEId<ah-AAQ9g6
zJ9ijXjas!lh;cjaXT(s*DLOi`iHeBG2f^dzY-EMeXEl4=nGO{qaK9^#GaO73HJd6S
za#X#p0s(^<`D(LPU^JY@SKM^kPZPcDN5gZwoo&D9vUO7u29`<II(#}V#~+7%Fjb19
z<v455|1zFdO$ZVm_tPbXOp-`cRP(qF6-Dao^%nn=WHP%|-tn>Z?e$t@ZjBM%{!d+B
ziF|}M3odou#a2no+YQo(TvFHjTK)hr=`eP{nhLE<Mr8U^xCalf#!H5&8Nz$n;#h<=
zQg<2psEBDvy6hB|91kk8cO<SQKiErf*nPC}J9Z*bJwV=nb{1C~uu+R#%^)n-%~r_@
zFVU-1hdrTJCnSXlC7_;`13gB$@uUa-7><ub`1i|oqBJ@l{-BaM<#IizjEjqtL}{F>
zwU8DLe3co-(9EG9GetOKY;1*f`*Z7+nl~A_P&kz0G|M0^juj!5q7h<M61<}|2FIKj
zPU#Wyo!IU)^mRVAqSUb3igq0Z0|psq+;LN<TC29KGTtN=)@eV8nL09i>Cr3b?XYv4
z3f%OpkC5u#E|UaNE<uX-K%o$+`mt6WGm&)>rx=v~kZ*a9q)X;Z*iF#l^>Cq*TQqB)
z*MsjiAYD>nxxlp}?4qrmrkKF)tQ#90O-v`9KpzLeh(aNoGc%(q)6_7x(o1C3bP-R=
z2%UpKE4E_L8H{AV<Z(5bn8f#~**|Nj=xy<Kf{tfY(&{$R)ek#4%B0dNHraGOnePb<
z315z|1Oty8jux9beY4$;n%I~5HrLlj;^{PUZfT{8-b|oacNF~ALIIcZLXH-Xn0)@Y
zy*rAj(!VUY=f<KdG3h~~4HH4(k%wBGiITsndO)J_cs<i^_Pu?bM9+5x_4nan0)|nN
zQdTr~A)x^+lu~c9u&712Qkp3+r7`#@yr$lWT$hG+iNc)7zm@IeBpeZdYL!!d%vh%I
zO_z9xp`)UTB6lg(Zc^8xwXh@opgmQlBgg-A|9Zh?E7g<2*@bmEyY;C>k55+U*PiAA
z<D{(w)fzn<xw%E)#GSOzUXJSP++;Aa<qFicQeQYw>HJB_sa7GyC4!NsSL|uD{0m6m
z`P2GO;`yw(px?eXDoONF!Vgtkh*{V{I<KobEfjYD+%R**wuQH0Oe-GHDsDl}6ccn7
ztvyqZS%p8L3nUyt#AP2Y@l@4D=L%bNag0P}1DK1WB^|1@@Q1sr@qy2;oA~tYJY?ar
z9$N<q2015tCkmBVEhf5#LeXfpW90aVzBLKacCWnRB$l{3Tqp#_S#bgp9i*Hv;EoO_
z43tBwzqD?V8iTc$HQ$rde*4peQ&_;$g2hbtuoRo@hitYR%=|)VmQv^zocjpy-LHx|
z2=o77l#vOj@}q!+B5YUz;sN^f9cK&p>{yt%2Zgqo$B&G2u9Z9u*mogW0qMbAFG@wY
z!iI=1sB|#iv4gATytY!I#p@frby#0ap=KNp2czkJZ(HBuAcq9)mu(!Zdy!<iPp}Sc
zL<{NzBqwmW7oNn|A--N_yN|DCF*<pnr{p^I!YR_-qnTg7W@T^ZBfBIhdPv1}SgV=V
z&Sqb9_M16U#`Dw7<~p|qmbE;?*b(sC+FFH%M4}3nS1FvNnfVupU?sX1vu(zs+Wv<o
z#SvePS4Vh|q+UC33HnS*kO?hVAysj3==n9WTnh3IOL34Imd8R7eUuq6UKxqRh0AvM
z=tp1Vi>cRfBB50gc;6};>f_Al3&(df=lRlJz+cB9*t1KNtFT^mMsQ*#J$&Gm8Dar6
zC=b-ru-Bt7E|M^tEWye7xSUd%cGEhs$)H~h`;xoTYY8k?Q&cUxLDtw$p9tfCDU{rN
zy$UPoFhpUo)SRmNwQU7-uOFU(@6A!mQ}gC&%IZdD5PsJ7wy_N7Q8}Yu7tPb%(o?LP
z)>rFHmKmk|g<~$Hmo-v^yu4cV+KP(Nm4i`CswwT8oB}G;g>0Ji7zeXeLCrUtI8<C8
zcM;isr?94<UWhwtMJw_liKm7pF!Zf?q@^Hz+=#{8*=l0aCOFz)gQ%m)m2P;MfbTaP
zM>1S_BzTIHdV+BRp5JZmzJ$xfUN<2@n^6Jd74^1+^Y(BAK37jsW;w<>5k*}0f^2Ge
zjUu;Cvk~oUO{CL^Kaq<)@e(n#-KwZm>LxLl7$$KQI6M-oV5{GYdy!)lmquhb!#Xa{
zESIxQ0Q#i3UTr2@<>B+XN}%|_<MT*V84bU?7t77fRYcX1jT;!%DmFzlSB}FS`UT+%
zkU?TFJGG~>C1^=I5h40f3h7QoxnlJy2011D@YZc8I8s9ys$dnM!VrKTg)q5OoMv>>
zkR4S`{uU=XW=~b50dDAhpLBV5ArFAP!phSim_yrm5so=qXok<X({w2eQA!MgkE7hi
zJ92$0m0o3}5_bU#TY#|NUGFHRZv~JvlB(!rrweU_UM0%tG4hp2OEStR<|I<BednMS
z+d@aH`r$EoMr&jwK|u8Q?DGDBFT4sKx3eQ-tC4?D!(!&iB#UW%bG&GP3JM(<9#-jB
zD`4`xcQ#0eqy&R_^=W8p8#jd{F1+LARIct?aaptCZ7&WGpg9*D=Pme182keQMz=?^
z3q`}w&xg2=D3LH!t3lcVAq-LvQ@9+Y>YLRQGx0NuzsL3K`6;Cz3nY^i9uGh{h@d&}
zn*WkGe~FC~xFBhrOgsBLl89|o@@D~zgy~9|FfGvHvQSex?OU#5>hf2fk;mEKG&9Sw
z3_4cf*`UdF2t^KWu(TGw$-kjIIe3!S(P>I0zh|Tf==E-5Uv(t&Lb}uDf+26qOIUH7
zrKna4rr}r!RubXbFwU19<+#gqt*caEU-5#O+6*(sOzBn~9urwQ;$)zpd_oadCfbN-
z(l8)Uds`BBOmhkf40iz^$aTm$-o-J>+oy%1aP*>GivIq7MMWq(ez&VbIvM@2;DSWj
zftWdM*B!DXJ`b*gAN5KNcxi<3Nl8U}!f@xFL^DvasJqXg7#N3?7hBmMVeBM0WsAqJ
z35mL|4G5lMx`j2Y%+L;w>Ccr`k-=s!dK$a1-C@LEs(FwmaUes{T!67!p5YMr_fk(i
z<+H2hTz~ZxuwKFE1nr&HSo07o(<K^6^xPnj1UuMzPh@$rHPMS?V&uz;?i?E|f#-e{
zMT|<e1!qAnLS3;UyPIZ=;F|ZQd|LdO7d?SHBR;l45{&f6(Zq$?*w~!!R}Cuy;5m-@
zqT2@ya^jn!KAcS3=hV%?<ndXf^iq+7<u+-;ZVwn14^hGcn^Zh*M@lfNMFJ*0@CDDi
zgGRN&RIkUIP9))VWhPwplinzj2|%Ke8ZHfoVQnj}^b9&p`hgx4x1LK)9@L<pi74(I
zB}2dEq2mkZNikibMw0H!`i~avEr5r-+=oS%l`=-m!}#_P8dgAEj8kM+(}Unuz9{sR
zV=DYKnwd2>u4FvLgLTd)U2`u(Ou8Q^#crX3&PE&owBiv^-SHu@ZS%u9z9&3K-d`8}
z+gt>5xi+`4n*qkd2P-tgk7fd`Njb{XFY0xm{RTHG&H*Pnefwh>r2-EQdVDLuZFVDG
zM2@adoDLIs5?k?wx5-r-d`G9IDZYM!lsi=nV_pAdn7;9FwIqkYbL_1tLOVB-e4eLV
zpfCL7MH`pm-|?K`bR{4B+Lh2h%^Q<z9O3khUg8RX_;8W5Mxm>Rfh<rVDORZFFs=kB
zeLl{p%tr(V=l;5(2Du`1a8!PWPGL<Qp-U?lOyM5F`V|lV-gZ4)msro58VMisuJSx<
z`RTJ22F0VWt!9g;Bl@`+%6-OX$i+2Z)a>o67rDU6Gs#>13cY|po`f)kE3<m!^~7Cc
zF+a7nQS#1WA}cWwGu=V$o=C%{!gJ>Rw*^_V=`V4LdB@_H`}^jS<wyhs45D?qqmZz)
z6Bd0I5S5#ZX(>}8Z0Hc0P74mFmI8Y%_ZtkMx_)xkXT$tp=;q~w-Y-eaaivCe?BOGh
zGY)AG;Ip$-MO5FvUFj<1dsm`L#M+LesK2HLxgQ*L5Qt+r5{$oY>q+lU!1IC^fDEyw
z{^^jgL>#6t46c5vvXbpoVl%3(cH=ValJnmj526j}tlcz&&irg$lZt?Ox9py2ni;7%
zWO0jZuDs#O@w1=nnUJ<7d$%QtM``dAD=iY)l3wPI`8Xkc?&?v+gqi>WLHGQK(e9t!
zKCMVd{GmKj;uH<KMfzi+fUT#kb(HW8dKPtvuKH#V{~D}dsKmwYcV}j}d|$Y!d<WX;
z)nZ8n%ZyhmG^ThcU%&dQ)mpw2+Y!AzAn%HoM6!F(RK6NfvncI^eWrt+0B55--U8uQ
zSUW?h;8$cr*SStEn5;CA*5g+e6AQG5k=rkdc=<$@&!y5)4~$i~uRv!!Lcwg&R;*jd
z3~zF%c%$qTNK7oVxwn7?$}(frTWGYM;`D4$%I~?5$w;ttJfcWo(ItWiVjo0ULMV~6
zd`V=su?Qlen9B_3RfA#~CaSz_?{L{zRQJXzKYrQOBHTdUKur0O5494zY#nE@hN~AS
zwd{ARTNZu`oW4f7b;o|}+fg$OG{QO!1v&Yc-7qf&9LG9y6RVfA3Xa#goRpLz2Gu;k
zj{6<=rb^>1T>K(i?oYqRCL~Z`NSYlIAjCRLN=jyO+HH;i1W+M2^7cm{R|Dj*|Hxig
z9vD71k3=$$3o|F~#_Jzk4!i3L9ar>Qb(+oY^~!CARX1qn<(Oh$zEfDIy{Xa7E^55S
zDx8nwB6(b%VB58oMahm(Y`fsN?FXQm&=04YllsQ}r4}9Js`8N@rA8%1#jI)uST+vU
z!TX!DNtu^54;u+OV~b60adxW5ZQWNK4!g>^DZ*;~m+4RUL8>o0yB(5P&B!h6cGCb2
zKyrSU|0`VtGuU&E_X!m8?h2Xhx)Tv;MP_=pBW<W8I<pvPi?D6fLDs4leqBaSr1bvg
z>8>4NAp7`XN#W7qtQT)KYh@ABbuj~4wG%g`DCg<eVccV0HNd#-4VBt^eYAE22YbcK
ztCVRbXC$aFyvsWz3+w6--Ebwit@vH9OK1!e&lnBm0bKa%gNg@O<Cx$;1!{NomFV<d
zvYRlyPViLysLgl^zBa(Uv7fV2qsP0)H0pbi@L{<ebaVUdk+!9^gowASiY3||w@<cv
zlOkBpv6K-cKQ(JwcDkJLs}^e0zNBqH&!?uXi=+=TAU=Uo8GcZlF7qR&kwGa#o%F<}
zGk6e^gl&bIzO0U@)|B4|O`?RVi6Aa5@qdK%My^IuGJRW1iO3~Jb+<0<7W=v#FX&Ru
zPNLZ_ZHf*GJG9p?1dIMod6H?gDlXOe8F;X0gVJ&(a@vuX>a=LrOQLI*tNM|cD;xSj
zz-0kkd;{z;Ki!jh!(LgOeVL6Tw7okVCvH=fGLsD-%4Sjgal5P*0HdpFcmNiYV&aBh
zblszKeZ1Mqr9|uZdBG-|##30>RYh2&hoNaL_*NEnmUD7t<Hj8H02LMwPy(_Fhrkpq
zBhy37#Ut_K{MlWz;OgPa)Cv^vDj@3G^k5=RGmV=2Kd15>$BVMNH_w{C>%`f;oFK+>
z;H-THuNi#El$B|D0o+G<C@y<Bhg~Ao`DPIJ33HurMUe}l>DWX*!3XJ-dT=+F18Q!R
zj*sEd#(wSn0nw*SC4w15$huzN4R}L46&LTAPjud2qMeXp%ii_(_|>!#cQM@gj-AqW
zHdA2Sg?1)==L(sqe;Z=Um1R~D>&m8)Q_YIi{~)r@pqD8+9q*_YC0dS7cdy&=4T3=e
z`jQI}JqhKVz@ND%<w#u_(_P36`&^5c7qsYb8t((~3be}3&W=>7064ysK`I;+n|($G
z&|KNd4)S4Cl9{8aWAY?_D{+Y+%lFusTKdZzzh!e-C<&o_9k_FzH>wG7FBE24(<T%l
zi5o=1@I)2d@I$AeER!F+pP?N6^Zf^oWxOF*07a)(OyYfo>UI}~&MS@$C~<|a7gHL!
zz2H3APIs3FiW9y7a!hjeZug5X)u<cueF+;IaV%i8-W%1=XJtN9E=V$k$?M8;(*FMC
zEQe5gdjM?i1Xkm4p#VCAHg2`9AOCUjpiTpZL(^@o7M?bSwsU5C+;}~$R)cZ_uctO3
zFDP5SP37{pb1Le>#(k?lmLsVsE9+^*G1qgo<R!N^73W2$Kid5f>oqA-#8`%@AIbZH
zRBjcj6(7c736tqBcn<qB3RGq0ek2CgGm>l(%L>ZMk5)7-2~kmKnbRBPvE(t5^-k#6
zJGqvH`$-%>o5n8U1fmXDJigti_tO<3R-&no8@EMp?+n4RL;2uodR<)1vgUbyK84>~
zj3D#C>7q}Oc=<uZl|?Dh5)ai^K$xr*#g3NTgjzPv$|nGec5azWxw{=H2OAnqrWy=X
z=9!$Vv(s67c)~7IP<wG@o}y@Zc`T!h&FU1^>fWpGo~>Kp*O;uD78*(R#g#vIp@Dq%
zrpe>2CszM7nnZ#@W#;!?u!4Vy-cZh6E+VHY&er@F&<6faAb=Ve7@Pw{2iYrF1t-A@
zP(gh|cx+}35|Hxc-=9E=w=Zjk<JJfd2g2cqT`jtmp$-aoxNi-m_S0_#D#JovzsTRz
z^?4Dg;Q936RCsu}@GZ^`bU|KxW;qxpjY<pDBLB<Y+aMKHRZN>(1U3g(%m_o`gyN&f
zrI2C1yEjy;1=K0gfj52Kexu?99?GGKZ6>la9K8K29YN1Rf-UP{(!2pkS2+8k1nqI5
z)Ow`bVZFGC-DsBR`OQ|k^xf5h69F6^m-5`ElOZ5EDgyTcXmUdle=MLG$NFH_z3ec_
zposx~k2unp&2?0su4Gfd28}w;Y<!qkfn5>k{s6jX6Gd#mPu6`N7gi48gH5t*?0`Pn
z45N^DEA+lcMPZ=qN?|1~J-8g?EtFt}<*R>`2_mu={0c7XGS?xBaaS;&#4iJe;UW%i
zI}rFOdt8{60mdEsAi&1cGkf2nKd7ve1_$|*CZ>aT?x$oSjeFp;aY%{weoyX;Z5lSh
z!~MI$U4R3+<at+`pelR_?Uk|>4DExRPrK5KwtJ4;JVZxJI}r@N?uv^i$QBXUio|mM
zF@O{|(+@*-HcK`xOJ%8Q|9od$3Q7D3${<2AcSU`sfKJ<;hDPO!vJkhe2n@PpK^OM!
zeA8x<S&k7&LSeRTufgsGNhFWZhwhJs(W=4=@K(j?rCeMRhK6~hQ_EbX8juM=@x#!$
zJ0B}pKOD<z!&>+V1Vb4wDx^Abh$INUo+Ogj8_udvF3V1d_Tx*2X79P-2?QfVlmeZ4
zjOmRU=`o5~fy9un%2jg5@A*%u1IVNeL@)S}B#}5*D2nbM{L%|jkmQ`#D7#GCy6~KS
z5Xs0ErRa&m4cpWzH2Mdi1xdo_lq~kJJ?AZF<npV=v`~h`O|_DJ9E%&&v#`V)N@B}r
zO#bV!OW|X=&@lQELo>rZq6-<9t|P%%sF0FPwd7>c?MM;{)0r)B&iNf^eyTi9zPJmJ
zH<~($Q;>z(&>eU#CX^J5(1+P#Vq$Vxa2T4-qpRQLH+>pLus`4=ggI}#l`ms+vFSve
z<p70*HE_q`W}~lPN8UKzoh(MH@K<y;^vkwQ0bDe#>+PZnEZaH@)sMsmO}h1h(|{tI
ztS#;>PKYwGaSk+aQ-AL*?%f;s>0Z%MV|j3?1I}n51sY#hehJB@WUFi{>!5`689`<Y
z3ah5D>&4pR?o#Xg!a%v-8kyNdul`GL09*zN3&{9Fft6F(zUjR<HFE^0Qv67F)SM0b
z{7*M>m9ysk0h|qH>3q!r-=#z&0fVyjR1K<3Q&CdNAL#+r;1}Tb(6MO`Ui!3ynZ2b1
z+xYB8M`TJ<mbSL4Z!rI&TmntRBV{`LNz4YJs4L4e6(6MZ!`FHurFX~<o9`@J9yVA|
z?-jJ!(B(hku**snw$EGEX@nM>0P%k$jn^&56gOlI5CEh7@hd7S6lc*?Gz9?xSB3A;
zZWkH<x_sFWlAG7{{F4yO>70r^WIe*;)Gos1&CN|TWq^`D3rjJb_JAm!MZow-<Jl0m
zr;UvW?5y)h-<s4A(XI)Jc*H9ce-szOp(v$^VP*QQz2fv1BQMhrIz}H$vHXBWE^9bM
zsA%s^yh)cJKXdp=VM*_&aINw+_<riSy{g$x!v|yKB`1$(*93&KFNPMBUi+G%>27FP
z($tSS8O`s$N+jzY*^~k`{%6Mat7z&CL}bTsxlDYXXzzv>{88-Wv(JVf1u7QX!2FLT
zhWoCvj@klHAr<+Z+zmV6{^dh#VY4>k6E1#}H>r~pzf8{qjjD4`j8(#kTHzG2MP#x>
zXt>n=j~iq7R1Nbblgp*OK@St%#mvu7<Z>vAo?DOPf6RD%xElu)<otOXbZuJIaske6
zf<7J38-rE%@JgG`0H9(et-#8G3>hS&zqXCn@^Fc>VBG;X#wV`fyb-6ez2LMo`N~zb
za7cmE`TYlwo=-%=#``lBom=2$X$1RKm6Zh+^R;bk!aM?NcC)Git6>TwaFEVI7ALER
z1ut>By1J?z59VIDsc8=;=w>(UNY<Lq3f*0)3{WNn5ZBk&pI=Pt(0IfK2x+#i5)U!-
zAMxZ{DZp~aqL^BD*nJ%QaE#rEn*`xwiUQQG=Ag`~ePV8KcAO8f)2Ahjr;;r(PkBYv
zlkQ6VzzF4)z%@^_D4*syQLj=ZJPfD79pdRttUKhCmG(z}iLNi8l;eQ$AiZ&2rZ|0q
zU=;->0LAR|`CeIzRLr=((7{|yHY9=jrv}FZYK)gnm*;2|x*uB9%iD%H9KZBcE&4Wt
z$^tXVm<znKCo!v~nN9@91=Vw%eb9qD$%#a~`0-c$`&Y)Cpaa48=f9l!00<!U6scSe
zStn~f(owAI%<saTcE$oGGQl=JP{^iaG&b_MsDzeeqMK1d4w?S|#;V%m&T+LD-5e-G
zaoFX!cljkhOUUu`TGY93R*d0kVH9u>KB+Rceh21?l!}%^+^u!)d>XM&ws_<_$?}t>
zr^keAO}5Q<^S*G+mKMjWdj%cbr=I2ARF>zoL_~sR9Ltrd+)l{i&L=EPUvde&CJ?Hc
zJs(_iZ-G21$5Z}=ZmohfvSPCPgY^Yptzbs;bK$U=7s<ja)M952bW;2KcA8Mh37BZ$
zjqHcqq6itp0wmC(&PQeILG#e$D|TiMns(8%E_2>5#ZhKi3V&74eSjVIfar~LFA~?n
zFEc3DS?J5DXzl9Sb^RSE_D!nj$V}^adDM`D?c9V8=+(|EL|M&H8@7q|Mv}0y#&O6o
z0fhJkI5n9ri_%J5Rd3Di5o(1Q8<wVl@{}thTDWVZ1g_sNk?a|)5P+tri_lHQyLA(x
z)>+JxL(_aMsjiMS97>U7Xuc*s(G{`S^?^ySV}bWVM?w;8a=XfN*qf4^Tn~oYwc}WA
z1DGE@U5c!qC?2k;PZy5cm8o#E*Ud)4803|pA4FmD@wWr4_iKQpN%Uw<@X@A)!{ej5
z$K7QdyKn<N6;)w%Q_^M^-tuQM9(sN5trR=s^X<_wM?x=a|2P2m?7b^J?0nI5rE(>7
zkt1(N=_H=RTz-nFx!8jZbO8WydUs8!a9c_72O=|8d+$!I3TkL6y21i!g_yGHg}+Ub
zSOpm9The7?Cm)H(Q@k!(PyaVJ;=LB38PRt5BpOGjlxA<u(ewW{hJPa9^&0}u3AD>p
z%9Hp~viWk(EZR$%yu-wg<E0cJ#A_;V)TEUKx8&K<HVo?3%Uilkf6+oT?`3=ji3KU%
zoGGCUE`B+vRPZ$QB#5pxw#Eg2HOyQDz3|fYTK0i7?vJICg71orMZE<;V$L?sZkj6$
zhw3MV&xL!=X-6*f(*`FT3@Kb2K&_p{YLQ31Dv$X74giaks%;SBAS<;q&dXg{h>mZ-
zO;gfD-OW{srek%5hiVEn3!=l5mb((xDN#>fFq4x9x?b$Qm6QYJ*3@e20t&pw03#Ud
zdPbG%K%Jr5W0>~}5g~0hMV5jWDE5vy0+c3~F>Wm4+RrX=D(_@wuETjh-1!(^zFgzz
zxdwNHFDV+NM?5#C<JuxCeaV*_%r@5vpT`8opTB+l4h;=xHgR~<I(o>{pIYtnitO`-
zC-Ixz!Zixt@Bh)F1(pFORg{7TQ0Z~G&gOCz9gnvmJl}U5DBdIrWQ&CpKWh26pSz2W
zoja{KYm(DvA({KH`Wk})1Th4OQ9N3Mmhtad5-3i{$Cq~4^5p6Ia4{V>^aK=T#>9`S
zhPb4u_I}h?RSx3N`WDa*Qv@N!hAWkp+mMC;UZ^JJ)h-lFk>>2nL-O957hRp_w3j3{
zCMH{CUYALdv76Wj$Eq>v@n+bII^W~&pza(vYRs&riwI)`M|%{n{u&6jI2`oEgl}9{
z7I91d&a1hc+nT;Gh5}ifN<giwoImjF;I*B@k;Upj$HD?`k<r7Sb0GiJW^vY@C!5;Q
z{)+P=T>X5k*~2ZDXTk$Ihj)0Z@57P6kT4!%ff-P$p1eRg_Ih|cAeYZa@7NJpgb0O^
z&Vi?+C(RbbLHh0m%K-ygBM$Vask&iw#QmMvgv5YC+Y;ppg=r(;wHAFlI_(`DCc6`b
zM9H0`Eefv9#3Tf$U?;h@WZDFL?unI^l@p>fKUvLR<^-bkIyeLZJ}p)EWZew_>J**}
z%@bLou%TgLN|yjRq45|{f#G3$SE??W0;|lXR^CRi@S2%9hlPapcBb(&7{WDM&9+Y}
zL>u;&0gxbyZRdcLX>xnMqpYb}61!tjPU#J4Hak1pzw#_(qT=C|?yJ<c4d{Q!ZRR<S
z`M!QpsFZKKqc}M7hL1D^)zlXw%;0>#9hO0PY-N3O^O@A17f~7D^2G)qH<FT0$Z~kr
zFlN6k4prOOwdF<nG`54ixXi>FSvtANdHIf@gAHne0yOOiP;D-Dc4Du{*eby;WE;}B
zYH%Sc#2(yuwvqnAVt{r616baLU+g+07`r%qdzk+zHtV!s?x8S04W?eTBcV(J**w_K
ztW%dq<?sdf!MieTx+A@xjUaym7{U<|DC<Q22q{7hPfxxFpqMw61NQ#J&z!b)xfc!4
z2yCOOH<@0BA@JR-qvWQ<?Ew7-QJ1{g%I<*kR@<zJ<$iJX>jG{&=<;?v>WBTf%&wsc
zQ2BkX5{v<e&t8-Qs1;<JjOUF$7ZA==UohINiWu;Jg5x{|n+7OM&NKBx!SnqNe2GRB
zcf}sx6<tdE{rmU*WY5}7PMZQu7sL_;tdjm(FloBiW4%ht_x}EzZ4z7<<yxTcL3OcY
zv<6UlStxehqQBp)I#A63)_j83Ut?mAY})VuR2IHxY{AEmcMkU-R`ARHOe2AyiB<ym
z-Ve{Lt}qN5gl}F?kIHYKvd4ml0vU9oP@hyds1NkS#_CoZ-8Sr0N>l{_W(2LqhhDE$
z@_XeHINmM;$m21u%c;KW=4YeW$TQsV)gA(`oQe-UQg}vfps=rGQ#gnY?6^JxJrN%P
z-y-oK+#2}=^tTYBgB2Vcemf#}AO%MUH=nDPye$|ccvQP?+j$E_K~W|qrp^QFTNDQ=
zw3t2-o{ns4Hr>`2u0S*<MS{-1)?MQR>a}5tEFtUb`m3=Fv_;Djm}$hQvZbfT9SA6}
za=sOw54Q@6ipVzLaBS$6jQsf5Cj+nWkI#5ddpw%?b+W?cPZY&lm))8GLQl5nZUKMM
zYhpYDsBGf6L;>kw^I4){q$e=1S7WJC@(h5nOoF22$-v{XFHmkFf6^8E{Q2`38ILH|
zg<yHxaCFZE{v};x6K{VxEa*ivVBd?=iVUTHoDIOt@_Ro;sRF9&keSHri0J-id09NX
z0vqa0BoeXf(!*hu98z=i*R{=vrIfyKj+&=$YUiwLZw`3jfi~A)$m>7&i`pjwj~jV7
zV_5>R(#HQKIwp{Ug^_8?1=aw}nJ|`QjfakZ+~cOr6CMCh3vu<ak<oaBuwgBN+jy!(
zt)Geq{sh&v7jn?>HSb9$3ed+uQBS#jalFzIGF}O6JN`7L8T9f6E%S=#aAIGo)1u@;
zgTpxYe%;5Tr+5v^%(_L_FirXd<%BMrN^fD0Q;WI<F`y_s6@HCGt$qKBGdC;+KJczH
zN_pm*v%kC0O55##)paY?33c?1f&$V>MjVFR+E)9~OIUu>IS&6ET5|<)#+ALImpExX
zrVTo_cRcZz?vcYE>o=%@M&Kq2KwoI`64@sF(*iKh8ZT3aoV|$enCiU<50y+>IVt}^
zN(!z^)mY6|y(`7_8JZ-O!Zj(=ce7G?$9+Y1z$^F*oGShu1iYbCY2&HI2fhJHy~%Q`
zPyfQHI8d?j(wW_=rlJ-2y7%Q<u#)07me*G!kn3ctX34Z2iS=86a^-BLd!-F=ZsDeT
zga-#_yzdB<jAB%+me*SQ3_>e{$!Z#ls@AUKhP(3tP~W0C0!X~BnH{9yFKRW@kB$Hg
z7Ei3yYjB!G;#iIuX!pT3U4M;*^8VE%I*c~J5LpcRQCE#IqoSg)57RuhdI`%KPhp;$
z6%=C;4`cFKtrj(r7aMPPi&4?gayj>B(>8Tk9ZyeBW2<;c%zIZ+4pquW<zvN)>sL7A
zH!Ij8>x*Y;Wg&gkpXHj;)$Xpp^U(8?jBe;wxtvJM=gtoviiPbKs%B}h6aJesG?PY)
z1fY03xT>gA$Z!QThe;19Ibi+NfBzC1o(~`(<BfKaB1B3;;&)BLo6oj#PSGZ!u^fz$
zvgwPqpJM6Pg?vAn%HKOZ5#)uQh09?ru*)6x;<_OuBt-G)27h&JZL$t4+M=0X)~9`X
zb%Gf8Gcl&DEyb>H!lY@O;@4xlO`{GZTA+JQ5LXoZovdz0AY8OWpI;B%>e|&bzQN2(
zA6KAnCCl|Gctr4@^a${of&^g7!Q5B0%As-;2dY;w>qLo_6IqVg_mL&+qg3U^a<uSh
zL>LXd%z9-~@M*;Ak1zicqYCIjk_W{i`EDr<jErbxLbkCX6X-O$SJYCZh}Z-&RuF*@
zyTU_r4)i_#ZjxuSrXfLfs;qOu^;4xt4i_Ey;mO!-4k%!}|0y~A`_n-CMP%xvUij;v
z{1DboZ2Xe)d0ha(P3YpIaRDpw|DxUhc_P0A1-?qd?BdA9%Ie@`YkMk6+%JZ4qbem8
zii-U8Lr;V)($v4d^Yai!P$g<rfri6rr7J|_BKJgDW;~@-o$ydBj6gzVEr$#|{8zAf
zW*o4fKDVJfB<2#S3^X)u^5!#>PN&b6@l4^M|A|VT&E`Wc=iSrKV|dAU_qn1*oXJrz
zW96A5t?<4+2ezL0x1kQ9z}IL_L(AJ1_#F3DYlABl2(!#JiIxJtZ)DMF)Q$vTXiET7
z!ItUgZ$e}S-5l4TGF^BD!+i`EH7`08pR$Ydd#mpY(2E2COH2Bu^D*gXEVGjn{N-c@
zNW&N=FaW=Riv{9yrkgcq7bF$g2O>0eIYo1Qac1m+Ofy_MAAt`f%jJseQwUVH^Wyrl
zOJWi6O(E?`thL`dAAXO*EX<&7x1p~d51+=Q8PIfOOiCJL0cNoSTx>>pIimy9uQG``
zIITFk(!ShUpMYg<>eypU!SxtcKi_{kga2cS3_hgt`Gc`*RSN8l#$4$HZI$%f&}MG|
z%4ZDE8@dPIB58&&OjtKh#Tq+O!oI+`?gpStpq9mf1CC7slHj-6j3XScgcJMCPLy2!
z(SiTdYe6V>-9J1)9sydpOC<;Ay>N4#Y%13Sd6s#3Oku8OcjzaeQ(<Je%@4^$IPkg0
zK%fS?^U<CAv(#(W16Af)Bu)$EDVwi(xZHmpZyMa$oX6wVzG)&8QpCT%SV>8#)L}tf
zlK@;u2AGXSNDg68(bAW^k~oo%8Z7cml9`=pqK@K34l=lJYXWW1p;+`l-v^;9OvGQY
zIvHEX%73M-bHI@~40ax5dTzG==OLhlQczUZyIr;hXlBDGJ>sDoISu&3_|K5z99L=A
z^d~a*@rF)3RdU!9vq+MRO0EI3UkIfH_VoTWjemNjI`Oj6n}H8oQAXWkH4`|R5a2(d
zP+OH_!~Xf%kei9yoKXWsdT((seuf4}0DusouTN31q{pZ%7vc0Nhm5oIt^ZNL0Bc-C
z2{^cmdXktQ58`v$lC}s3!H0?FgeP|*Q-PJMmy({IC<2w>!sq$;%Xj6;K;MfeL=`g1
zTxou<*jNue5CG(bh8~6Anlypq)`;p3Cb6=7=zc{_Pd}wOcHp?hl{(ZCiZBPs0$C0Q
z8vYURU?2VwW+SGDuNK63{kM}_k`}8Fibpv%e35GaK7I=dk)KL@IW*ejkxdub9#KlF
zA%}!Hhx<hXGT_f))BrEqqbX7@Z)3LwV8kn;epP)I?4IBS%$rS-L>2WGPu{rrctt?T
z?=@%p9`v)a;*$ZzfqWP2b6uxz&D}WkIykzVq(#yf&gjfiyGP;AP{k_K3bZ%_v{4iQ
z3FP>&ZZneTX2Fth+`Ro2u%O}3P$`c89lDwOw;e97sH^<peh9x1`lCB~prClB1_>#U
zQHX5a<v^-51j4+vKP{?D+ei4l4{jq1j>LVe;gkIDhLg_*7uukKktlC-YWF(<$cz^Q
zTN$dfG<^&m8JTEkZB$~S#KGMAPgHhoz@iF5YtX}OwsnbZ=@qK8zKs4Inz~kl_z5!o
z1Mak5WHO8oe?kS;pLyr}cCT#w@?ierOBWKW7-3}~K6WgtArL!nyc)h=J*C1M(x0mJ
z=|g1~L%0j|(TQI_3wR?F&@<eTs97H`h>7=Xv`{yq)EAVe-X|W~p#BkU1!Rz*a?64#
zzCap~h<yykh+=!Bk;N`{(tD084SQd*iG%|`Nn~cJyfk<o!{r!(ufdh0`&W<w#==W5
z49SwUeC&G!B2>Rk9iXo&*jvIz=()k0!1LON1ECNhnIg;L2T>=s3tvPwCO9@PfThj}
zPJ(Fe6e{Snt}?n%Wv1a%WbiaJbKG#Bodpg2Rjp9yo#(61uP^*mIX}!P9pY)w$hQ94
zoawKLI)Uhubc%L!ORm0Sp=sMk76~QT{Yru9O_}X{t%b?;@rwPZD29TNkgqmc?6ZF3
zP45$2N}yO3=QYjy?t0p(cj^j#;lsaX>@IR|e}C3wvC8;!o9%jEOmk9InBZ-!!T0#V
z^S2-yfN6mcnd7lq^)6l5C0D#UK#yT;Ecy!pPmp>~+J?icm%#Pkf&<D1D*qKV^9J5!
z(eg(V3UHkH#{PdfY9_J#cykstEZa3i0A_Yjm!69p6#L`uULa?`SOUFPfliC(SaeFt
z8vva(7iHr<XE9Px1+#pmiS9ZU7R?o#ShqcOTk*QF*bjeq+Wbs(MN%0V8Q#FE3ZSs6
zHD-H#{C*V+rTGo+U3N*yz97-=vNGkfMuG+m1GTRC8;{6$d5!W4gtdTdGyb*Bu29sT
zU54}d#*)+&y0jc(HcJuYN+%{V8_}6Dh3oA`tOheb*Q@>&=zMk&3oLXLYQS+$!$Xe~
z*kRsx)967PcVgk;$>93<1>hhdA)x|72k~I&58R&#l@JNjR7VtJHbI_4jjHF9K#R!7
zY!)Tv?SBF=FkAw0P{HS9%IfM;z)}R~<3S`AKxP0lm4;%44-Fj`Q4Y5P;{u5j$bbeo
zXK=3!eP!1dLX9f^K8xz8+-eNbO>I#zl{YA!udVk8<#|DEzL;ZMq)H!X6|S-y=2*nr
znMlsOU1v@#nr0mOUF9&Y1mE>5qa^hWe=Rp+zmuErD8o^a2eTs9LVl-gvjz+<5t%Nc
z@UfvGBpMejkp)Kh-_qdo)e8`UcVapvV6MsPG}u$YvZnZ?_;CSWLI!MoObmQt0?NlY
z#;=5)gmWSBg(`{nDCKW+$6E(9^AasUu{_gW6N;T45igYz=8+s%V=xYE=AW$ccZTtC
zl@<7CWG9Nzg0?ox;4lBdg7=8N0TT2g?U@cfB4zpkXa3j26KW!-tUwGHtETgVd3Hd<
zUJ+VZZ&0R92tFm!!y_U9WYd4cC4h4$d1KmZh!U`cT`*VB4)*t}SGiqTx@ld(PDA>1
z1IkiX_oavp|G&;fIKlxvkq4aZB@S0)4+qd?AS;$#k*~@Xwq~<x$mwGAx+2kGH~Y7p
zrv5&&kZ3CrHZ?K|G)xzl&N>w@ar^^NP357!)XHptngiSq>RE>c$rcj*%M1Up3O3;j
z9R)Z6(U^Z<&i^pR|Nnts76|w8&Sd%le)#)#MSnu(BI)HmhJw1$H*)nMTv1_D^%g7-
z;oODg4F{|4|6>F|5JyN}v<2e-3cG)W>)$6g3l*r`V`MkZD;8;v@9i5nPTx%CZ&A72
zZeZ6xegD-<@#j%}<dGPIiim*5jEg954ONeQj9Xx9oEM;zz+`;4z-Im1{w~kw@fK-4
zK36#}nsM!p3A)y~YCUruN!$=wa>MTcJ}J;aLWmn6<{E#9%1c0%wXGj^aTmB#oxQRE
z?fUAs2{WP!1+0ivO(Q)7)a5_z@t=PQDM97j1xLwI2GJ?B_Vz@W&~lo}K0Gh&HP!{s
z8>JmxlT<7VUzKB*v6ailfh!wxFMQ?oyCJ*<=unoQ;{T~X{`))`l1R?`Efa0}d91{t
zfpQfPU^d()GBKcj$uE7xq*@<dT@ZF)0WB4g5K*9g0!v@hbCLed#N?B~31<pq=Dz-!
zKL5E4fm9S{XSOc&c9V+U*Us@vLtl3;*vZGpTO6!`JEdg2M`TpMAixVp+&EiMGAWN-
zqx?N!z5u#62)lC`5se$cf3#yCEvyUyzafbk#IHQh{pqXIU*qUAg4Ftz%AR%<85n>C
zlvdTk!*oH91D`udQ)zTAT4GcGyX_AUv)jZSucS_FaJ&APn~1ic*E1-#ImYFDNZxA|
ze7tbyF9AFi3%>0CicF^ZudOF#l3#So$lTqm9SUYtAVE2n__u)J%;R|90RiI^H2B?B
zraS&WEVV}Z1(kwn0{fRgncN>I{%;`zybVGd^sk@wci8#AJ}EE&MKqsaw$=o0o$y~B
z>HqK|;Y=&{f4hYL%Qe=#dEpzb4iWMFkG%BXCgDF0@cb?~jx*%{r)v|)hzAx7D|~OY
z`E8@N|B|Kthhe;R!H)jlujjY42xLuWU_GlT76<*W-5~zgCP6e`#{1t~(m$W^QGZ?&
zPY2fXb1%66!?64}JNd#jg8g5H<-fco{~dgw#+~=sCo<5XQ18#-qQ2+WE3Vgf^hQr;
zE1~zws?8}-FI0;uP3l(24{YPG`~+T59|cwz_&?1XmKK<^DGi`a$F%7eQFi>FCim}_
z7RaX1H9mI=#xWlQ=4ukL_k&hPFs?z8hSl9kB<gG1k9oA8Qhi_AZBGcZn-pOucPU;i
z-25uUgNrRMe_~r7keXJOb#-Iwioh$QDmL#SEUD!B)s6S-2l^ly7p>(9%w)j-46}&)
zs?c7LY>h@A@qzLlxESF~3j&xKTFu`E1c*D8f{+aA!GF9};1l={e9&S-IdO;o#SHU-
zkN}(=;(BDn;D7Pyza7yhPzLx~;KTih8)AVCX!kZ|nb~%n%UhwJH?972TKwUL|Gecb
z2WpruZvE3gz<sun5|pOlC|GG<At5Ds{3#{;ZGQm=D1Ed%dG$*%85E1vI~0b$>y&?8
zm~jaZsEteH(67*#L5F<ZZFAB|jbzEO+S~h3mweyQA@`wT=#-jqRK6~xy&%MDC!uUq
z@nTN&c*6ZIo1Rgb9n?F)<3o%0?GqEYFZ5mJ!}`D=xpV@)zGc+%nf5C&lFu3xH$2)n
zkSRAV`f{@**Fho8)nrP=q|BJFYHUmv%)Xkl74lmq$I;?(#nivWS#b41Z8&hO#G4a8
zjMjtMo04u+83f~`%iwZ6@#L&x&bj(NGr+9~!@gP>uQ*#lGInPnYc9Nb*{A;s0inP{
zC(iV&f%W3f9v%IY#S*+t7zE7T-1w1|NTlEV0r_Ki{iz*Q<FK0k$B$#hfz1D7{Cr-6
z!>2v^ZCbesbYvS;S)O-JQUR{$A1Kf!w*-~%Ej_OKzndwDcX((ho@<FTUnu<ga!}v@
zoy#*$5RV@MzMlLbIRppyCD&c34>)akN`cw(qVwpTG9zp}A`ES|XJKtQAY!Jdol@>g
zzr)(_xbexOeVn?ZIt-LlzTV^M_uL|@JebYHm3y=ZI#<x52Uftuo}IK5=wA>h@}h?+
zC;ANN9piEzvYC4J<SYtO{<RmtdIlfq8RU9NolZ_Pe?rvjv+A*&LIavmTz9@2*PA76
zu(Q>-VN_<_RZ?1uj3S~+Jy!8jzLC}QUnX$ZQfKxkVCWHC<IcqQtD&=d-zMtVynzx@
zZ#m@?J;za2Ag>Kod6ae0@p@CMrQx5kT)vrDAO7{JVy$pPc)T|OQP55ZNRDo`N{2mG
z(GFK^l>|Se*X=1wv5B+5Th0o)9^@3x%cG>~%i!kQJYpXXY4q1>;g6=P4J;QT+T9Q`
zX3Tn|ueOWB&rJ|MIc#l)cIdTEJ&p&gBd(_HJL%*`!xi^_wjl@B(NT61Hc`1=Q%X6n
z8c6aiQv>%Im`=~Ux8f(OtI5g2Ba#p1*fW=MK7AY7yj@mwdOFz9@TGwSaGH<xwkhYD
zp$Sjao!HzVKhPp*r1LE&R?~W@Jlj2Xzc^c*S+xK+rc`b)NJTVTk0oIL{5^eVl3gL}
zF3&mD@AvHNGe==fZ1mdWyvMo>mY;VMQ#7FNm|7f|>H-#s$7zWx_HmQl0m<vEvb<bT
zy_p;Hmumz~_d-6cR0|CevNHH(g{J1{ux){XP>#<6&dx9&A^H1UGdX9sS{<FtTIS2Y
zV;MH`^QH@9<3c)S0Ro$QN>p19)6`Az7FX|1+B|5`+^;xm?)00*tXq*dOXk^)=gLDP
zmuVAwZ<Yy?Y=`mgqENXmdYvl|M*=}g3%1C63fE#u_^!7+PtnO_J^Yg7CWZtG3p6U;
z68mH1<2QG$t-0UW7&$_q(WS|e;ixEmi)_v>IHSf*7;3~Vb6XK)PcC$kUR^T~M~G*)
z-;}GvJl=z5E8%8?M(Wp-(Hh26F@ZK{<`RX{UcBPT+2@wchmI&y8XXgjmS`LMl5I;n
zfn&)uPpT4Z#BB72gt}^vZP+&`x<)#eOmDe<!g5MZU)FfztqSt0JBwdsfN{4)oeSO;
zsQ4|k36=IEEZV?RsJh(KCt3?`=ShRna4nHdd5tz-&e)4?Wm~lM!Z5NGA6|pHV3^8e
zsj0G@%XEe;6emrYDT}?DiyYp%^TzRR9WlD6BNr*>^OrKIfLHtoNxJnw4{@S&+oTb~
zwU=m)H5@#0zOB9sm@(lb8@x}S{s`fuhLy{I#kk>h5w*!<A|C9f>KsdjKL4n-etClL
zk{*owTafWdB3?#b{lRQhp>k$v>lT;!TdLnpdU2=m{_l((9^+kMvxt5O170LXxYi{O
zhHO@#VRX`Ib7C`pU|$s0RC}}LW}p`y?Lb3$5i01}i9KhyklPh|auw7W^iWm<X@7az
z>@25JlKEw~|9hVOs5T?I-9@<eq*||{<7%Rc%jnTrQ$KCr0$K%Zew{><ZMjZGU<1hA
zW2(LVK)vrYxr2>Fo!k%BK<50g0w@qqeIq21xt!5;WGY!6x`WGNQo#U*ia?`>Rf90f
zi%QQ<;xqwT;ew+kpr%7H=V+NF?5A;qXl6`P<(+B&jbTMzbYZT+Qs$8_4BcZ(sYJmh
zUnBr_OFk+%dd<W{=tVZo)Nz68aR-KC5^AL0{vUGT-?{A1CoF;hx@Bn#iqM#%Snlo1
z`XOhui_3zT&mYp_!Q8drOo8=bt!cM>q^&^)N1>xCnudS6N}_6b6ocajUKpeAYxY!E
z_h^Yy8^W*S?h~~HGomRFWb$E6o8${cqG4XA)YB;DothWyx!Um(qYB+rLgxd>c`DSo
zj+_@>b;$V|&@~l^dCq<98Oa6;{`tpbIwE>hYBw4q7WJVplpaM-EVzQ~*xS(b6dOaX
z+#_?D#rbv%Nsk^7<2Na4RwhMf-?Zb5icP@(EH?atm?HwvnAsm1UB9SozJ-2P_I`i-
z;sG4O8O}Syin~y7h%ukJ-0MQ4F)T8t7#d|P7O(xehVEi|%}15jQlnX=8~g9k5;f|w
zd+h=h)<<Cbe&nSFQ=j-qs8#gr#r9@mDD)6aDPDoS+dUp+4y|`=RKbgQlt1qQJ+h5N
zmJS-4xa2=8I6DO!^9Z;i*j31OPZ&1@H(lYqQ&7EX)}G|-3Z2{Ufkz1w<e|HK;~z0b
zw?}#8wYWp7C$=PznsAtnPxWrM`J1;o&wYszilQkZuTQW_7a>f}1nqeGIbVly);orQ
zoG;0;&q$`=qL|=Q;oE4HrmQ6|<*YB|GlXj!Jx#lx5HpW&wAj<K4)3H3I;N$mN;Is>
zTvIH`p6(bL`!8Sy4!9KNueKDo4DJdCTbc=lm0vfRDyp56sYo3u=Zk6-Zme(F@9i|j
zxT2ZeHq-!dzU2XFx7r$ojA52$3~mt7#jEjkkQ)0F)mTz&P^NyS{FDa6Hc{qG%YtB^
z*M25`5Z=Vj^ufe_B~!!2?@D}lxIh$ZOoZWsB!yjV^!UcHi(Bp`4_8us{8%Nsf?!`C
zbx3*Y7v_EjPC*J=w(*sZXt8M&V=v}x-L+p&K;p`Br}i%pEm##Uv`FwLn%RBBx^df)
z=$4|U<vlo4mOY48D3>crP%BU0kI<!fac$nv4|(lk-7<c56<qy#in^|Y;<SmNPgT_2
zik@g6K5iC|Z0uWtnsw`un~J=vlxuBI<&;tsYxZ11+2CIM6WiFf^CiTN%duOMPW0v#
zJ612;DQ57J%;N$2d?hGnS8+s5iMQhGX?e#?PbsM~6nXh0XpzXTn%5Gtrt#}t+<P7^
zqk_N1GN9~?0N&UlG8v?ui9je130}fgNTB)#$>A~}Y0=+lPm~<VpyP8)A(a#QrrD*(
zfk+y=Z}j40G_B+T>)XmD7s;w&?)SX63g6@~Lif5Pd$NWI1fzuMGZcvmmX&EuX|zvp
zYQBn#qgv-h6Y&TkCnut4NRz!!{ibxs;F&4BRedIPwKBkwYuPYnAsZI`z;FQRC400w
zFifHZG{qq|ZDYUJa#L_FdsMueeXVneJivm(`Ysru`Rx}gV|3vVxklPU-f);^U|Gsm
zcnX4ceqvPS9bwwjLH;^NYF<6WQT0uamq<<=ckJmk^u{Q|SpGs;><L6Zd4;7G12`v!
zd>eueviSRx>e{2h%tVE0>MjKgO(DEyEy12IymC2P93`=5Vuut~3O_DTSPjy+??28z
zIr+4+lt?2`!9{5M!|yC0ui^=-x~xYBH-qJxp${aNnoM~b6Vz+bGh>D)*<Q$6Xx6cL
zrVk#u$Ex#QF>Fj-*BwgmQ)PW@%#Dq+`q~#2NB<Bg&0b0-3$kuf!Tv*5^0gsV7g7_X
z{5(QS%-BY3$*mSu55zxIf`tV%8No|zPmyoL{;u)xYWx#@jPccpOSS&Av^}*|vaS0m
z8h3$=`_0o${c&sIlF3?TWI*Bv*bP*(r(qnN*)#~U$b9Kr*=*~uD|3r_1$3W%o=Z9l
z?pw6n;7iRz=9^EI5%5-`eq2jZMo#rH>RoYRS*4fmNj2s<$~}h@7;N_{xa`>dT4a9F
z6eBNr3Es`cva1qSm`~H#EB-J-hlT!umK8hG>$vI(IU-;~;Lgyz-_eB;g0O}5P@9;&
z9f8z>6vh{S;2FS%pC$@#RA}$IbU8ihAJ(FhR2hdB$~E2vdGyxz!jWi<QZWMS75VPs
zCUZmiR`vu*;k|a8A8U2n@P~_LuhF)1et&0!<m=!vd>R}|`XXMqL-*wEas5zux#M|Q
zbb}J!WBLQ$dT&`+AHk3&Aw*p^v0$UwAg*ejAo_zV+%7R!*sc1LSf#L?D?If~ucrw1
zk*+5Ed^9(md|s0?GM~u%MG^HRrMq~e@nb$YrRk{ziHCWwQ<c$f7Ov0VM8}t`?PyQ#
z_!@_mP_d>o?Ml9UDLw>m!QqY^%pDZx!|)BATqjSsEw9G23_&^Sro^7vLEjx;bbEEM
zx3GR?G5F}TtvaQCqFEW|cvCmUwBnBa`h01u>K(kZdAX|o?4b%-rkL2HWv-RGXTCq|
zcBr70bINGBBWD*)B*CnTJ`^m4k~=JOjfAp0@!KXGaYypFTzpb|r>dt;-OGc1I&Kf&
z{s??xr8DqK`+cGA;NT+dcbvnX#{8UiRei+wu$$=3UM>5t8SAE=WT?X@k0I_doX4Q=
zI0s7SrDDupK?uX?Ogf#>C(G<c&Kr`Y2^d&Tb~|lIMSKM~U4@re&Jx^*7X6gVqjV|R
zE4LZ?MFyjHf#;rB0ZTH&np27^uepeumNq-t^exlhbRSzc6@es7ZaSFlUhUA*63#c{
zt){`DPSxZuEd}FaqPLz{eavPKy5jtQsC(<MsJEzp^oSxQB_)y)(x3uENq2Xrg!Ite
zAc&;2v~+iOw{*wQJ#;fL%pH$<&iTFfz0Y(1y!W4Z7-oOJyFP2}wLWX@y+gyI6y2v4
z{-M;yo*>^m=zHVTyDd>5=c7>Z-Mywpe(Ss7`n3c=n!O#2xszsy?nL6VNX(Sg1;h71
zFLzTo{83^n0*~X=!{|hdUnQKjv)b(wO(1!yO9mRrwJ^=9mKl{cMj2NG>5K#%(!L@;
zz4tvpRx0mMeD@xaXp=T;eXC93;9GLe&>jjvWA|0ElS`noI<uwSN{kfM<A$)=VH(~8
z>bY{@t+G9QSNwb2kBb{1GPr;7b8A{EC$?mU>us5_ylhlxw$uD6Wwb$8txrO3ic9C+
zv#DVAP1No9FSz`tf`gu-46RY0;P-M9%DiqUoaNrXm&S#^;my9k^p@-}xATE3y!B+k
zq~2U^sDQbORs6>e!Yb7|!<M>4vnAmxrViM;U6Y)hp>+lU!9J9XjT7MlhHsSo<+`6c
z7uR^65SFbZ@32?EH<$h~J1!Fi1otGRhUUNT8ETEpD?Ryy=K;&0Q$Myf_S3JG%Wy(k
zQ75phMU$G$#@xS?W6qR>TXCL_;=^{!AELTuErGcpb3BBnWm1{n=i*<9Jh7QrfU@r8
zqP1o|kn}|<BQw0eJ8~<9JoegA>tg$?`K{dk_}MEdH^qytT&~y0xUp&EdKf8?z}h@-
z(b+U;Mtvm4*$0zhMNH!kU!8C9RZ-i;B=T<5;#(AD?BdvoO~B_{czNz58wl_$l2T|9
zm2rdN*t1tkt}=Cc`KVQ>%GrDlE0@DencTz)BD6)<E!1AI{B3uS8&&0Z4l|EuS6-z>
zd23@Ns6JOXVO{XPAbQEWEBkVxMo5N*L(6dV)O}=_LQ8rF$PcN}k=0Cy-%=XfTiILP
z<KK-B-Ih|6YSs2>>Q*Xn{MfZk`*nF-_A@^<K4p(cynOI#my?rjL*zXppC&}T<L;YI
zc2jNKmb5<&KCkYWQDyfyErsM@?lq8k`PO9*L}2p`{{C|t>*FuC(E`TJSolun>^fYp
zZETbEOPk|SOO|7VZ|-?%yknn8@Gj`RN}nK~nMu_aVf!&!ppdP6xka;%+ccgKk-J^T
zySWtuXAu%{tyR6MPV1KC?KosIJN0+4<qs6^UPt>ZW)Pk`Sb$O@VWQMUu&?{(cLwBD
zFRFSYn!=M--g4z*4%|QD0v{3-Y>t{Jz0_*($&D|ewLiI?+TZf=kQG{=YSd({7NWbN
zbiDsqKy@S0bSTw8XhOp9I)|<8P|!qwc{Os*97illn)j{LKXd_=ddy4@gHK*_8UO3W
zQYJkd{U6rdP_z~Cq0hNdEU)}?E8r~NwN>6y<O<c5-8|+I9?VP?8S)HU(SOCQyR~)q
zLmb+^71FihRa058Bt<5Z99gkNXx3Fw=$BU&6sRmKSuE1&SAS``082R;J*5tNy5D?0
z5&qbAM;~XUAvzKkv(*>K5|Gs@hDk<!E3WxBOCS@~`i+LYp@bUm5ZO<tThmmzGp0=G
zLexh!F2QDI+G(1kpkT%HN8CpCPN%oPA|JM>m`G!EI5g;eqFmY%b%ICfZJqwjxz4&-
zSLuDqSr<iT(S=M|>ldvhj-GSegWp>X;8`p7KRuT-q_9P_6yNM;{8<<-C_Rl%eXrLw
zq4(IW2d;&&&RuqA^=4y>g4nyNTJKM)6Ep%wYeEITC46xte5<arqxu7}Vs?p&sS(Kw
zcQA_aJ*M`8I}fHN7kncN6_T@%tJq6}sHbRfJ*3oVSEC-oNbzA~WAHCURq)*0xvEE;
z4fngr98KJ~+2ZD)WmZKrnJK37;9L+5e_<%w;??6O_Pge;$M5xfDIUppJVm2%&3#sN
zW%9oKoXt6ZH&JgNF9s`ArN?5UksW%sIrTOkV?eLYX6Dw*mKwjJ+%3ehp3$&f0aSaV
zvFX+|K>M-t<N)QL4TkXU<0CN2tVS-khEZxaU*9#vs?zdtA{y-7^5j73(6z}a$evB7
zoI)W@^mvx}@&=0C9F{h@Zyc)4z{Hms-|P7G?c#3AVcP9Ghx|3c%X(9hq>Y|9)ZLC{
z7tQlUr7@pgx6(f(p7AlwU6emhY**)H-swjTt>t5;@Fm8I!d#}jL~`@lL39Y~p-g8Y
zW12|Y6=yiL3I#)}_g<|B<3EnEnIYb;<!t;iX)+sow@?wkHGWNWgxeV=D};OAT4o`2
z%ZFW&_0H%cOxvp^znAq48hNK_{KjU3m(6a@vu${0#)-@1hfjPMmbtcP-sm`Zcj57|
z!uhUoWBx2`k3?-y?Z``b{;H-!k>lp}VI^+;aqb{S4hzolKwP&!kx%cAjdbc^nN$mR
z{4GRf&<$22b=U3vTn}!l>fE4jTRuS|j_PXk3dlt-x<MZC|B`~~iMD$4<TsJC)-*xD
zdCK!6O4Fem$tPlN0LLdu-c!JVsU`LKt7gv26DCr!ogqu^D%Rl1m3U;B9Gt)*!11N;
z=K7n!c?$@QlVfAIk@Rdn*cBY61{r2XrWpi4?Wl_gEce}yB+RY!Qz@RXwEDn^+2gV*
z@R@X}zTh$*HjDbE9jZB{Q^stgp2}>8nd>Q9Z2>e-+UacEzPxZ{u1UVcNyKUP0z_l&
zWD&+PiLe6U*WT(@IcKM1#l*`=;N+lg`-qn0`AE1w@Zy6`o{-nzF@6))w2_IU=qeo2
zbTyElXJSgBZ-DNE?sk)?$2cvz%hsHc{J-XGIK@|)ZXJG6HrWhvWyudqU9qrf@uc%?
zl2`p7))aF!T-Ot{v)h9H31G32Aha4SagaQ%SH@C6j{TxSwCCd!jDcYx+Gj&7m^hgi
z3=@HgCt)9R4pgb!^H|3QT>!en@J99uOw$5rN{xVVxDyJlOKEAReH#iIVG6z;FX0>I
z%fm&beek)2Qj)q-qA8m_+{_GHka3d+A062yg(xI0v!X~JspV|vBw~@8CM{N<(-zFd
zWqt}yL{IyOlfes3q|2z8{h+_5#8ncRXBRwOs9~*J_u41D)tf9XkkAA>JTDQ->BmXT
z@Hy}2LB+pA2LeVEtMbJi*SFv+Q_m1~ncg?Lxc6(fi~KftiWv001{is%&ZOyJ)%3})
z@H4<2nn2=`!${b9h>ApcjJK>?yr+cA<X;dq-e7&4!Mp>qX~c3{i)vR|^WD2Czz@E7
zAJGp-zt>sm3VY~Zo|-_#Lfi}ymL5d3XZ0)YwQFPI)xsi5$TfD=QMW{7$Qp3&$BV<O
z&O17|-(G;up3|DmrmN*qD0?hUPcI~ZY$7TwZa)*tO1;_P;pL*oI?btG-c8Z-&5A<(
zgcTd!il=R0uSI?NE)RZD6796IMY4#eIP}t^E7UpJigk5nV4S!R_NhyvPUqgx$fr~@
z3M*)#G!dbZi$H9y$@J5{>p}QoZ~lPaj2T0{bSRzhO(UuZ)z?AB<IrnI_>TE=&Mk(!
z5&yR>C~p{z>3BL?0VR8)W;IkU>fOvK%M_P`9p3O#_=k5c6XS1pq;RUHwlbFZ>}FpK
ze3tl!C+o)P{oiP^=-|HdZ_D1jRhX`!?C<IS2T`U%GhAJZulQ?9MMGQ9>EP|RS?lCd
zp~~EJ)k?x@-wlC3g@1p7_!{E+rsL11ST<*bW&I~acO)AR0_{kTB1UYjmU?jeSEs~r
zyhCpT%F7(_M~IIdY18&J?g6Cjf<AOi2%Iew^eOl~lRBb^DwRO4J@ne?OD=a2+Avd(
zPn~mgKdSiOmlTe|eFEpSGb=3p*DW;M1@b~Yl8r#!ExVF+Crik+`9;iG&#XiAps0qL
zJnL?-^^}t<KK9?6Jb%&CFIgYqD^Ss3WXYirC<zWoF4&HFyf%knaEuvcU5^j>R8635
zpzcPuE+{~L&{Wx`OVpgi`0tAxeYEEsqD-X=G~Dou0`Kj=vI&(yBO9Yku*uM7zQCs?
z=5G1)BiGg)s1s4W<h1wP31{$Xsv<9z8?L*f21Bhim8wy5CKA!{lfwuhk7Qe}a9bRO
zQ9w?6N>X7=1UW@uQaODo?Fi2d=0e9s<7aub!$``X<98HIqYMona*+Z#g?NHiBTqT>
z-+WFZOAs$xGRwMSxl_J|_=$+;R|}Kk&E$Cs5F#%7pTYYz?v+pymj(tUFlYIt_IjiY
zm|GuIAB%`~hi-Z3P2ycR0@;O@Cb{iwOxU*eg)b7kSzK#+V(2vvIt<eU4h~9PLXokW
z_Lkd9GrdVX#d+D1Da;S%$-Y$6@a$b-x9!<)flW3&SjWKPvidG7Ujp?K4yUi^-LD#D
zl59_19B<ow#-Nn56W=$rTlOnf0}(mnG|zWOGE3YpZd8$|ybraWP4jL^Y)j>M$}f1*
z;e{*Nex&4n9|df2ZFO}y-)jIn?Aq*%z7C~ZsM2a#azTd49_6t*K|X$^i0obA)67<C
zi3#J5q0-nj0M!caEQMqaX1=w*2y{H{NELn2k(eyU%O{yVlaD2h=+atS3vFj!XQTCd
zDIPLimDz*m(>K(2=_&D69V*KwqX|ESnJ^D|oE5u7Z8Rk@Z*K}_F6!%kS*X-2^lhDb
zxvgVx!SKISstMeTH-%|K;CC_k>Cvdy3CN5Mrd~QbX`?)Nrh;cKj#<CSZU1nWR!&{H
zEPSsmOZjhtpjq{kAK_OcwnpSwRDP54E5Z@gDrHq+Z|x}RHfi6UkV<?=^-vIjy>he|
zBvGO7M15*Rj4+X~CknJRcHMD~8{K)-xbwq1A~u6SN|7%wcQ*bimDX^~%^1`u=TP9E
z-kPzFw;UjQX~0t~EkDe4Cbz_Ntzd$UvDw(Xy@P|gL5mz8q1)W)1o3zs5jMGSUzkZ5
zKLQ#c=i5zwzUaDDb;+UZuiX80L>yXP+9G7<fnFI7r-s$=q%`tM_448+$6cF4;t=Y{
zDk79ni2iZJ$jAOdIYGK28ihr#XD%?b?8FkLDZYYKlS$X<sJtpfuInD_f5f8fEt!M`
z@XSpaB4W5|mh)POj2fIccQ%h0;8~3HrdHy9&zva}8)|;%R3Fh;^S}_dz%Wt$DKQzP
zL%1OJr6?cE*yRi*Y;@V{uU^FzA2L{Kqsc(aHSihWTZAlo3w8B3s&6CGl0wLzK9Xb6
zuqg|nrz#-G2}zRs@l#{D%jOU*;u<|;u2;YGNawOUJ3LHtjFy{-JErP892pro@|>C2
z`<R~UCID;<y1D2|C951q!?5lrop%Y5n+KbKuC7z74WXv!x4^ZU$g){LSLEd;VhQeM
zoW|<FA;6?xad5N<^Zvp9w(Vlm$7h=kXk?+`+t1JTy)Rc$An0OY0O-$ON|e4l0c=+X
z#Ohb?lML%#xP<Su*$C@d5<HxClzFLM9CGXR9Y17Cg*1xQhVM3g4!THUbb0J^`IMt&
zH<xWTH-6q}X+A1!cKgQWqG6m|ZVpO^hwm5?yQc^c@{qsD2|48EyBy(4rmv(XnA;Hh
z68yk(Y89qw*FpLD*w$2d<U8r2WyXBz!ilJ`p5t0D$x(#P<GSUtMc0Nsw^FYO{`K|e
zXmh)}8>K}zVhppRk!kK-ccn+BonnwM*#M8DeAuuLIe_6EB=GJ!Iz6F2bPU?$_(*Uo
zbzj`cQTaZlyl=Ac?9{I{N^u6bG?j3=y|m&Uv89H3E=|c#<JAa61unSHu{kl2SWPw_
z95JK=3Be%bOn}oTnk@pe6JeGD$GcRb%BFPti0xz3$@pHcx|I_M|CITnB>Gm87VR#N
zLg0}{9w^0`(y7#a6_8xnNk%(m-lR)0nT8v=B8CU^QZ9OMtefHE8`5qGe<(k?rJ34@
zg{1Qy_sUuZ27E5M?wKuc{ef>!nb?Sp20xU`(|+=!<FZrw%|ZL+dc}q+n|o-#BT)t7
z5-tNMa)nJxeA<6>(_e61`644d9Oflm^bv&JrU|r|*E7{G6iOBYG<&DUuXsBdbAOxj
z2U4lJOg4M22pd*u*AOQrZH1iQJI#&irAwEpXCDuhrt%zB68Tt9KC*$_+VYg#-E9E&
z2SHIt%{t{B6Vi`M!x1wsQth$^uXv{r{2CW7y@n8Yy$vTBMz4rxWos%SqiyQ5l+icE
zgq$i~%#CWmki~GAM-v~iSr@mw*Ld8BGKNZ|@@V*zS0x@-Z<*?xyYs&L#GINexeF4J
z)wOu@HKp2$b#qM>I8bTq5TQ{-%bGt=rhhokm9<nVQTXt|xVqeAb~G5YRKB#;k8@~x
zmeP;g9|y=eJ6q9tp6H&R@fR90x$j>H$mCyf5Wcj9Z;70nQz2X;07U}BZQ2etXhBZ;
z==GN$wiXF8=Tz#PoenJQhr+`cS6j(@@=hQ%0G3^F8q59oJIe#<YeSEB6o7{BzKXCb
z@6%AwGU?FK7Zm;WUdn3-hHi5MV%uE8t{Hu~L8O9tVyB%xMia4fwUo;oyH>I83W)tn
zy8g86>BPon`rSy^uxjIKu&!qp#Z}8az=;P^EkW~{$e$HZ;<HD1dE;Z+^O2pg$-328
z|H^^gAWPSq&uewS1Q+AdWkGFD;rq0{4<V<IRnO;RT2;ypDwm*Gp}!tI!4iOfEQq&<
z7u!z6?s#%|wbdH<-BjPzpC7y~^O>p`F!J6<o6{)2AMU3m(Un5VS5J^#d1VOpgruHZ
z;YK!9&$kD#XGWqu|CSwdCG#+FJlE(SPq4^_d0OC8_a)6BeD|s{dU?V8hrB1Hy=T?7
z(e%7*(+$z?I5hJZ_#~j>@l|B0*fK%M1yRINTRKFGT(H?FvU2Su$VT7m{t_pRds+KL
zVGseJW^*%$pmCoi(rC_++3|8bfMAng&-aVEID%TC1pxG{xUf`TujWBoRqd`#|G4$`
z79C!wap{igj^k`XoYkw(Wj4Q{{mX#SXmAPryY<1bWgg3Ef@R<Eb${m8aSr$RNR`n_
z_}wW-IPxS!Mfa4f?x=H8+GMlP<hw0w1}{Iwp1@?t+a;I6(fH>4x^2))A9u+T8?KAH
zpY@P%6I_SfHxFyyUz@3I@&XKuB-?2jwJ~m64dH{sgLzz)9CW=5Lh!uzVjX|CcXHHv
z+><A_cz6JAq9d(IyrgzI=WSL@Huh1<OTAKn5s@l<fXP0xJ*pSv7y`vsJwEoT%s4J|
zoFK)=eK!wj(2GhAp$0S{S-eD>vsKQ)a66F2yC}sRp{qnvd<uOq_iF4C=#jt1CiBGd
zNcnEU!8CXVW<IsDpKO{c)ic2aJBDr|g_o{DghDuyvF2OvbEUl=v6|eG;O{kssu9yO
zs2@8p*VM91C5a!0eiUC;UvgHJdJItG_bju(XSpEmD!E8@%L}izHxzCK6WN;&i1J(X
zJD@pPs%i2sEbdo>j7x5Z9@}S?cjrB-d!Ky<g)c75sqaMt$h<YtFhB#43_i<#7c_?B
z*46=EbeC`>(78xJ0XQ8^-3pmFgYwJ<Jkp0tPai^@*G>A-p-<<0E+B2A(cr}_$2O^!
zRP4e={o(2PJT$wC@x@MK(8tE~%Oq<3MOw;Pj?HP7Pn3`3k4#-R+E%_MBhd0WCA#}V
z^v|1u4xWQUiEZz)qW0_o&HGT$f<iFjFYsgaOFcpWRGw8%<Zq*@`0$N#aQhc!%_g>4
z-E<O_Ov=V7-d0?1dpK%KuTXNVgQ^Mb<n@Xhk3X&?c)NtfxmZICv3NgzK@@a!w3laN
zgw`Okb@N+4cQHJ5NNB`n3K0)KA8u>h?^t~N7_h{CbG8fJ463%0Q0pr<T~_q2BSqIN
z(WG6rl1{ccV@ab2G(Y&$?|2(OdXemLHp_cg&!W+VN4uQ)V9s%^GN?65IuSIRroPoY
zPfyyiS3sfOJ#5-^_Q;1O$s_Z1SvFN^{F27uZu)3%Y^d1NFbpG-Q--5vz}XX-`_>|a
zQfp7b8SJ0(4i|bq8QeLe^SxGs@XNTN8t0AK*6pP$oiq7_rqo$g#wa+jvL4q*y)(4A
z7iZ9K1*YkxJ9uqwow>(F*8CL+t=<|Vo10=B=FzJj*}a>XCKDqdTJFQV)$6jq_fJ0B
zDuAUP4wM!Yl_x{f7p7iz2-1|6CmT}mX>@I|=pDiy_QYaudW0`I#&i;MCkCC;IaI0k
z4w-ML_!{;;)Rsrd`cJ4iqc1VgGNF_^WpRa(*eWR4p;gjO)C;am`|vgORq^h=?7_FC
zjIPHPSXb7ROuu1l7=OQHw;q$+OUY+I*(!7I?m@x<Q202%AaAw#)yLwr@Y*UnVYJ5Z
zFc080+z05CamX8+n@aN51>3~i3>N6`TVxq_({MzGORKVjANxGeJWG7pCfx<W55SbZ
z^9^5ay9syKd?R2LlFm0Bp489@Oqngcd0ne9F$Am*>!?ao&Tn6|)^53Bm@d6QlD@nd
zzin-0a0zI+4pbKhuFm$nC&p<ab`;t|@@adeLD|^yU7RIO>o3WB^vzzeSK&uQcSm9a
z!I*QlP=lkjZ_J<X-zc%s8c^0^4)8v~PIpgn)-$FGxVb;-gG~{XuZfY_am=DYFoIc@
zGcN}t?{_vx4}#HWg4LF$#guF@cU6Yd35G-9DT23dR0di05&WEEyeGIs#n_;V@1{0R
zJXbW3?RUqfvQ)O6khtfv0|!?uscbp$c4_JFZSrP?rd>0CmbFBl2?p*q-#xVYqH_e=
z)Wh$94V&iD`f<HX+Gib^K6(Ub6!Wx)W<2<!gSTt2Rdw3MR*|Uy^crR9ZjZm|v>ffU
z?#MHrK%0BWVx0cS8uO!L{fGH!fL4IO1j5m4H-*Al+FQA|L`%wa(kwiE1RB_MhKpKB
zODC=-0IH3~Jkm>*imQRo7vZwQ<KUgPLNcMz%xU!{yKuy?<{i2nHSS}la+b0d)+K^v
zIRJ&&m>G4&&T}3TDYmwuwZ0n!z|6xXrWVkT_-M$5EosGzOP_ngv~`V>=h#kQ(4T#Y
zD{g)gZOEqe2TyheVkYDJkNoJB5jX^b$4b-p^3?|%1mf{Vu$YyqNU7IHSOfHnu#^6=
zgfw5`BJfbwRmA&(b&6fx!m1BEpp;5Hm>Xp!>0SEnNqU7_L*>#qe|k8V%Yt`8`v+b1
z`IO#Ukh@r`v3O8hwRxD@61Q>@%vIfJx&r<88jRI1;io{m;!g=Tzwe@bqv$*Xqx&^1
z9}zL*Z6}E2-q#;*1-w`Gexh1obx7PWOXOfPk?(zHwjXgV>d)st2#C8LPU32%(B+w*
z+(uDKkbArdoa&QDteO%dGGjC_s(RG1vWH)GhGa#>>DYOo3U0}gpkn;i9rWEd{4Dwb
zUq(5pdwH2c&?zqN;t~<oeYBN35-bn2i0+L>yFlS?YyR4%U7Ve-ZJ>&HbzIg^z#DmY
zMBp<qR8=;U8TXJ^pX{-Gx;4ae895qK>_Wd!`tA6gdht2mEg92XiKB$$`1O&$;RNp%
z9>L-y;Z>zd-G`P-qkHY60&f?bR>;t;J;x7At8P&bVoIf4YS`ZC23#|ttIJQ*JQ&c;
zI}&aoJwcLgP*eaFanW%{i{A4EKECI7adHl5<r)azTqU*oLT28MXkPD&POw{fs$X_n
z=qO0V+;CVU-F9WIZ>w?ce`e9D8C~fc{@wC9k->A1%2IvHRZwK#N4NMQEAFrx6>o#}
zRRIDjEVA-71ezt>!HTSf-dRGn!7^|cs+8yq4MF-DlSVdm0dK_O41YS%akaCf%X63o
z`R3L(PzNhi`c#mcxy*Rz5CLqz$bDGdv@|vARHWXh`W$XW{xl^weSKlc<``^AuPLxt
zR$Kc&h49en>_ICVHt%DYP#44m%dzna`BJkk%lPubVV>09*Zqx6^UFz_+gVEnmwobe
zmFqJMH50&xMiu~&v+rh&5%l)l>f5kA8mh$SP435VQ-C(DJT-(7nVJtS-+fxvlX=}f
zb}k)Q4Bjrnn?oNjJ8xTW`LZrAIH8@phEmJYfE6i_^<Z=yJ~>YEl0w4y^~=1@4_TC5
z$&IUtwyGvpQT_I_1${%|#Ou*_*BfcBnrjFGhS6ZN8$(zLg@fyMf=dlHM{&$s;E1$(
zv+d1`OHOF!H(m$Jw<O+tIA5A9mnI($nIQ9Q`cYf6uy@Z5wnp0as~TGAd^~x+`u#Mn
ze-4XrzHgHz8QZkDthK0=R&}erxiD`Q<S>U7!&RJRvHHc)Qzz?Gn9XTW=L)lD<qa3;
zeBy!I`dHmd*||FbU2Al-Y8-1rN%b(OK1H@@q!Y2?(}ozS)nJxofy;h?S-9*W0n_Z<
zT@Y37k(m{2&Kk@BmA@g_oLy;;U`qI5@7*qeKOH{T$bF7bDo!7kxkFTGn;aog!gVx6
zrdwjV%-c3B*OX6ws(k(hW8XjCU#UNhUOslell==IN7cLLa##f6%$oZdN1TXM4D?~Q
z`7{4tBP3mj0o{52d{=jM%I5(&>)<b?O%VU+CbyIjm4{Ta8;I8uGSONgeTl~!j1jf>
zP9QEhnv(mS`4}=T6IWi6$)%t#(>#ZF`gcnuHY*j+itL#pzT^!C^)VJZTLa@*tm|{!
zYt0QvJbc3YkEdr{Qf|g|G7*=m`A!F9tta5S2l}js(nm%3$!=xuJ?qJnZdBg9u{%iu
zTMiyChx&%Qvi&vz`VD_tJvZwU)tiV*3Vx}zD_rknMGy4g$G4f?qO%%SJ!fumqtT98
zA}Cp&G=*$eIXVS#EGQEJtc(mQSxlieDJJqrPkah6mh#Y9hcGyWq?vEc4OabltP%nu
zpS^Evdg{f}CX0rVd~jE}w|ycr=dHf;L40xQZPSyP#iSp4ro&^6d9Z_IoT+Ke!?ZL>
zg$AP5>RGPk)vz>t+n*|56?&_)qQ|c9mC@Un1JQN+Od*eQbM+%U%<<;dN@jtV7l-in
zwE^u^IXbWQZHEuhVyg9TugzDW7cCb5`k9rmO>#UH?ctj<T=pwt?|Z(M!9LeYh~vDB
zvP+}<XP`?mpEjhjMQ`dpr)<9{4p#A31ik$H?%?xewaow)Sn;7)+KXW+NK0{c`i#1J
z9w5I&mY8-u*S`Smu8rxU_8iDa?RfA`O`q9ksLIk@QQn&W4CZ$BQk%}I1N~a$@{;j-
zB}}KvPBC-cS=OqWD;eW8paFcGOG(GEc%w2IT*A-<+*rTSwc3pCwf5pMR_s-0crfaC
zIr&(d?fV_z<uW{hCp~dlw|BmpmdLRTk)=l5UU_J4_2KF)f~~@$3*mBa-^XGlH6~e%
z8Wcm6`k~|6Sv8zjVFG^ugeAw8Dtd_OQ?7FF$XLRg*PB~yW(@-RaJcVQCN8g1%wE^7
zl_cP@kw_hwWdSdORk9bhlKubER!%1hoRys?O4o9i6#^D+)~nRLwG&X-T={aDQ;<7S
zrCyjq5$AnJ9=-F|VZ}t}M(yROsUD?rE8Af74yKAFqwDZAUPLmWX&f>i{9DEeSp?d}
zdi8}~ex>*GW<8#`52&r#HGw5Ct-M`I$gk&5VOWOdm1#JzHj;QH30)a?Pw1y6>fqL(
zd(HQ4Q!y=`w{Mdc4i7fDv4NHnP92iPFkir%?Wmns;xe`RS$|^PL9Y50G5?p39FQY_
zb_jI4Rcxr*G0Q{Bq(7_7;uJB@0?MBzQ<#)lfy1_XB~Gb4*M0O=T`BVwW=l3T0Zas(
z=Edl&+_~j1*fnLdoeF5%B}Ez991McPOvd<-Tk`2*4HVKR{`%g93{>}hg?uY6Zc(AO
zDoeAO@^6j+{z1s{)y&uznEH8v4cEjOXNKqHS~nc)vYWceprbfIiTHs8YT#`u+d?i6
zA<y@Rr;a9<T5#`H+1=@iJ!&=l=J5~xEB8<Y0K^$2#Joxgfb(Tx&hrPwbHza>bxeE>
z*c?fy^b(u95oGBQrxmF?`4qx*5HlFsWWC2Dr#h@P4BK`>2e(w&Eb^S2?v2+)UT-#$
ze+$LX&i-DjI#WDOFtj{1rWf=6PDFj1*&Wb0cS5Qn-_^^gf8)8wFe7B6AflJAFzM{3
zl8gx{&AY5>bMLHLj%Nr&Ox?^y(yBUT82!L^f5rj`obXO--jy1w2?t6iT=z`Mqdc4G
zuTo^?Ij&8Yy?v`F3Xu9Z@X5MncL}HFbeJI7Y5x`!@OV{+T9A@sicyxB5wEs@Ya{)@
zh0+A~Vt=yOLCR#UQ&3p7@=~twW<@*AV)p(}UJF(UGv%qpEHD$X#WI-9l2cTsB<?2t
zp_{Hk#epi65l&9D;xj$RUZB}H$59DfI~hlvM~B`oLsgnOiHKjYWm;Y=fpFiRdc^>>
z$NPsfMeUDTN__aVQMK3{vu$Sg%Ls1H3|TwFpMbmLjR=2RUzNhXzTpS;5!Dok2tbU^
z4$PK(6LtOkOW=!M-_6#Gi-wE%eu8|_JXpJO=E62@iEfkF?UrurN>+ktvNp=#IUf90
z2XW$}k){J2lm!jgU{x!N{pH;!74KceeW$A&Kuf=^KKqeIjh+4iNWq;+QZN-!wx&lm
z^f_+%T5D_*%T9RC1c~!>x#>y`*fwhB{Rd%UpDNCB*8xDx6f~Q4Yx~?$-)fP*Axi!!
z==_r!Y)g=-j!w3aKYfSjQ8!7GK|59xX`5O?SEQsX9}qXz&*eeX5_YV})N~Zx&qjFK
z<<;1@^d?FdqXO(Pl4Buv;VoTO!ILX3ILkfNu;ecvvX4e}W8*>00Vj=cu;wl}b=h|x
z@+jK)XWpNFUCO6h#tr!)zwhrB{{Ue`05o$JzxoAzfq2yVWKFMwf`>qchb{B9#q=f8
z7v&Wh_JOjxmFY9RVc%ExIgMa0Dq2gzm~C!hh=|P#3JJ;fYh#Btv+#&i#3mj=yk$|w
z%Iv3(l}U7Y`7sX5X2D84RoTdp-9g6)qPJAEFIHoEMlJXD=Ubx?_N_Q!aPnorHex(5
z&4d!Z`Q^E;^^8ZlFWf`P?2n!%(`@hBZf%5v^)2*}-_-T2j>N9{3UsC<uP3dpv-$-M
zIhagzbGU&6>8VvSV267p<Edl%ivh4EK<d`5r?tR(`J02XL3?jXS^CVG(^V=X^Cg^T
zW~Omb+wf`C8S-!<+(4VLy#<OSUCFdqIexqG4Tov|HJY};qIQofz%V;JON>@8wX-Rv
zf}Dg<>p1JhzB==nas|z3l;3-Ban2egfrwDET{ey=y%RiZ(bc9`rzj5XP_iUV&*?EG
zJD%@BL=1zttdnEPuK~2|yu{$1S26_$AD#`cg9XrI#)hZiqm*C$g9Bt{Jf#Yj-Vfd^
zmGo>6N?y<D8{ofAm8&n6LyMT}5wp9D;M^2TcEYs9i<}oyb!hJJ1M9ns@me)5f8VUV
zjg~ElDSAY7cy_+`Se`k{Hs8m%FvJB$J)5AzX;5Ak9fG-{SSaRysw(&Nx1E-q^VcIH
zb2m-Sf{5p|6)ai-M_x**Xnb|adk*_HjoSnwt>lf!_x{Vt+iqbb@oyhIn=~EUJZjh)
zi0&Q(y=W^vE<0INxbAdSeQE@NW-<hB$7zLTRuL15FbMqG!s~|JmksKfQ*H?@>{n>V
zliXhh#m<{Z-Taq|at3NjMp?=tn=P#RM+fJRMN7r?Bx&$4h+n$-XB4zY#*^}ld+TEI
zYaML`WfkAwc!_Sy)r`D!VOnCh^CKx`<w{iX9=qPubHc-mBDyYR<~R($Q_^K~Zbn5w
z@LmU#Jowk0b9s9>f)G8aJfJ!|0?H;l`}L)~Byfs}n4e=p>=>;yq}d{#aYD?)u%B0R
zLr1#T28U3ytHx-R#K+l&>bGMnKu+_dmee_n#b5)(@_>c1IcL4(M&DnCiSgjR#pAxt
z&p!!Y-4E>uCt<!4<v~Nl<EEJM?P3~E?heZ~H93gpvAE9Wb7hUrS+dabiVwVvZ|Zj<
z#(O>;m(A@GH(6~1s{@(ZGh-T^NHdw9l9l>+o><EJ`tw|YSdL0?oPD&QO|vT^CB=Gq
z;>+B6Xz?v;MLt8XR<5_GlizmcR_|(YYZP&K&X<Rx#ougz`NyJSyvyKm2+?T^ulg}W
z%lj#g!hw3f74x~e8nj!tK>TO6!Lo19^YaR?@!wN%p!Y80c$)~mVE&%P{BB`jUG>;)
zupw^vDKYWDP*rj$bNhBG%SX4t=DJn+sByxp#r?q`AIful-aP(h@9ex3?LCz#;jFvk
zjiJ%FutwXGvI3w5Ho^N%&#XN#9&ECWAFAs(eSQRVtQB3b+bn=s4WOkJ7Fo`MM|NCh
zPd(mSXN`n?vC?k6QU;x`x2C1P9hEb$Tqj*cM(x~n+Gg?UcnK_gHtX_r5VrxF?9Dp3
z@D7OaY)->1fnTGr+n=19I}Yw)kQ$e-R9*38R&3^yh0B(X=D1FAsy6SSBj{YN9@=BV
zx@la{Ti?6$9|s8h!_A%cXjkhs&&O+B|ImMb2XuuZs*XVWAqdTnoZwc&5<&5rGvl%$
zxc{N_*q|iuwP-G|G=)REC#z)=IndIw22RY`8f3uzQ!&@!o~fUFKq5i-vlk@2-r{BT
z=USKW5QxpJ>Z92i_26fJ_!0V_R{6gD#5Wa`dPN3*u~G?D=x{+F;_GS`TOo&$vXY_3
z)j<E$YZX%u_Be|3&&;sg0>f~ii$i$h_;dI{LNe>QK)bS;*VojI#`iN(>XzWa9O&fU
z4r^2sS|j}mtXw2{K>QEyZ!cz$H_kuP#^0tMs`fBCxxKU8rcpN9AP6^<&9)%7TH4t6
z-Pf^9%vN(Yv9dmAou8K#DRkbnhs)dKq>82Hrfp?0=6}doe%Qn)spQ^(XIeM08^_^Y
z12rOaZ+7xr`df4soT?lgS7&BL#46^z&d)E`KPU9y*F*`l&d82h<p6U4-9C!yM0OjL
zO=~(EbQ@|qM0r+rQ7ruPVVV9TkP!gKe#b1v^}%|s`RyU=Vxh~dUDRr{DE`HB$NMO+
z>xtDg9@i`D!w{Zyx6pKDlS>PERTeMD9NpRE&0JZ{7P}0Zek!f<>~d`?<kyYfV}M!n
zk<7fB3JXy-hO;BFZQHE4dTcozT`+yTYpu9C#u7w}2rtKkQc4Wmzj^%tdc6-t#Pmp7
zeSkKNThtPIr-bV%;h}tTzYgUu$mDj7CFHPHwEK{l7ok!dMs~(~>FvYnRdr<~@5C_U
zlM8;ZDPBTmP@=V+!X3qcBNiBql(XN1Hcj_20GzDhKF{ShshW@1@iwDVDDKcBc!qZi
zJznc>Qy9{lyS;mPt}mKv>O{#^T)*)W?S&i5cJV#|&#@{Q<JRI>1mTfif*ig9Hk+2@
zfqA#w=jX#NSxLP}R>e>-S@jYE7o0Fm6B32{lE6>?Ijr8fgV!(;5c}D(TjXOU{Ngow
z#>L~YezW4j@LQ0LA1zwsynMh%UeiafFDGMEhG8N@-VPNzI!jXCqkQy<8nC+tD_B>}
zL9f0C45Xo}Pg+w44>Rob3o`=K8!y4t{bF(jH<A3D<rSZYmRjdixFI`LZx`hjk25pJ
z0se!{n7ln|AdeWR$3a0Ff5Z0&)7jj&T6SQWl7|i5H2dOTp*CNED>SU~DCq1re2TBE
z2t>=SifEAwMXHCxU<-NE7SnUz=)YrCzdycDBOIZ?gzK7Q>-ah5dy7x_WLq*U8t@r?
zSl8aZ#^71Votw+~aQ9U&#wsaH_oAnA_T|}<e-jt<N7E#)+bKhUyH%MVZ>@Fzksd%M
zN3^9n!$MP7&j^iqwG)J^U+Y|2HdlzQKW8-7dJq)WRom7j_JtOxVKdMP=YuEb9wE)g
zVlVIUr0z{jFB1t=ToMpCj{D)@MCQNHuH_nn$H~lKB_H?8U=L9?931{anc)50ira@x
zO@O-?EC@O%1<^40Q3E+&qycP-5?JihUrZ0eMAW^GDIqfB&Xihwjag-#&wjjE?&GiY
zwd~E4e!zC4p3Dx%?^j$d(0?bItooWIHqXn7J`ED3c%S9UsDCY4wGZCy1iD8k*wF+s
zaJb8v4BXNzhHDTZc8ICuLmVS!+8`-_hjTpn#NCj;nWePe6*#jLc~S9)S)${%z-OwS
z&Bb=h>>C1443jdRJoOf>tGRAU#?PsMhssbE=L1wIJ@cjy=g2H;WYd*yGdPgP5QU3x
zK<H7}_C*9E*RnXoCHZ}Oa9=XZt;CIG-jl(pj!s%l%U8y#u!218)<g3RsC@iNL7`6K
zM5ey*U9E(119)nKNX*g+epL7Uu4hU4o~x1a;Y8VG&x3YByI9IF%W>hL8`%I3`I+^a
z5D{U0-yRbtMi}qM*UWicqox!b9NaSUcXf5Urjwqc@%peK3Ewy#SmEe4B=`RGP~eXR
zW1J(Pr&b#x_R3d44wZ_BS~82XLSB?j>udNQ*5IeV`ZcWms~*q(W{V!=${b>R^;M_5
zcZ%fr9Cu`tVGPCNea@?v*B)odT6?qB45^%3^Zjfj6(-<3zAwX)%{p*v)VymuAev0H
zM0@80w_RkLrN|2JbM>V#Ch^1j^4F2KiHA{3Dq%f=x=s^mqvisUCCPTNo1sT+5H?xR
zp0^YILE4nut(&NQmbn#RRY2d3z|n3q8;L16H_t}fR!o9tA)mhQ;L7!6n|RPkP?jf>
zm!SYZA?^v138T)#X!ezjWCjXgu(w*5v_{cDDtXDvvCS))aWV>ViR~Ml;F)(p{mt%N
zTt-HQg=K!F)#y6ZsC(@ii=&@|@@{Dtw<T}%+0uTlR>{qAvR}u`%GJaNj*-ee9S%fk
zM70UIL=z<94_(q!-Vx<P9pX>ZzWmMd411$PnySHSOp(=XGr6zPrF4JFU&K7_lNTzv
z)NU;!N!W>v9A+!~x91d;{!b7s9T$KEm)w0sDdUp}%sQ*03Wc|WxiZdKxm3G#`z~7~
zgA71jTZ1t>R%#YFnMhP+uY8Y7^DUaT`9mr_{|!sW%kW2)zj$*$MuHQVQ}Pyit{Z&v
zS`cz#^31xE(b(>%<+bl$Uj1mAM-v(PkKQoL5g41o5p+BKY?t*{id}n?v(c>#b))&g
z72$+Kv^VE%h6K4UQ7R=L+%ExV(~a)^bX3}plEr=mv+T@x#D-7lZJ6$E^6D$(QTQly
zz?a6cR{%(#@6qCu!=oXGEFt15u)gEeNMycCg58x$HSB&#&V<^Fl4ER?`{Z%>QCnmg
zX#!D{jN+fO0I-eK7P_lRMG<o#Befj6u`PP>L~pwh1)flI6b3c<!C24bE>&nx`xZam
zRB)ev$7KJ|9|gz}%PgQ4PU3V-^7bC<bJk;CrQ)>awMrV{Hgl%Zpi#sMwyd(eqr?Bp
zardgOAiF%Yta7C1;d>;x%}Ru<@snxn<XOc&r#!Fr?xI7daA?y$&Rj^df*{r0PD;Q|
zp^F<77rg>8p*w8i`C_hFV(x>r*bucl8UKxKYU4EnT+mU^q&$0;+DJGILy63(LCS53
zE(75|5>@DFFYt<7>n=Oqf+F~2p`}eLBV90$VHbe}MU8B}1f9G}Ubwg8x3&1H3Lb`v
zlUrt8i}KGE{(|qUJcZ$XLyd<)f;Vh&212yFxEuD8jklD1#Nl-GRa{@yAvc-sC6C}^
zpby(Sbg_fCps5C7Qul#eEiOhl+4PgUVcYF!D}sl}!{dhn!}m_k6Z_{8W1rPpYByR=
z`k5m_pBD7z-oE<dw;mx=U2BLPxsFXR;*`4yLydqRHHpkI;5>b<Z#Zq2sVh*=T`T-=
z21{TNk$c@^5;AC_)qKY5RplJP>$V~Z;>N7`D-?Slcswl0FymFKN`!AV98^}FVc!7H
zX)0{aZflIkP)aWySUJcqoX47PtNd89G;B>kyoMmXlu!Ca$;mpfRg+gcRNd!$VbbOP
zqzUWgA%O4A3ra<jl7X_4qVY<0hl87A@sSqkJpm^cl0rS*Ua^rjcBeYWl{j$QSZ3U@
zSm_ru+dWNy7VnUF&90}~BD=0(?a-{ZVQvd$E!>1-bC=a}U!JejcN!LB(z;AjD~0JC
znf`zhb5^C{H%~2?yD6EdXsef$ska)H!L-_CXZuw|d56T<WzeERHrTG4lpK7J)P8u&
z50$nmfb~!06mfa4Goz9VMsw=&oqIU693hyQ^Owhf!frU+7pL%btM@ToECvws+-nn#
zD(jw(x{t&pnB{yNpkRVdCu;qqMd+0FuTcu_$Fiot2h!H=QEROheDmJEHv3;YB3nOZ
zDcp!-Yr5YyXu0Kae9xWCrh9poM?i5|>T~GEl(LPkz)(#mD>nC-{maDu=i}*h2l)$Y
z=6QD-bgz3^eQ!@OP%pYO3G+k}%|rHr4St_ZL~()@t0YLCTX_q~d-Um++1(Dl`oH7}
zO<>EUZvzhfi#Oe+ePz>ICq_x{(`#VY`SH3glEz8Trl%nb2`fcqjl_nt*D2C*>I?IA
zAQR8l9nR$39i!1&?^&pxZX{=Kj5<7?wH?lIzS$7hf!S6(LE>`0sXhW#IKL)59zb(q
zo;AC3A)znERNBwqXpGqpP9NRAfqMv){~=hE2I3b*e=#g29@{Kw!_d+eb>Pd??d<Ib
zJ}Ws;tmyB+{S=CA6^&E;RBRB!Fmxg{NOm>$XFOlvQL7_T<<~F2Syv{kRS#vfv3Irv
zO(V`Yuw=DVH$go+D%xDtxN=qmYsRsqV<{#miAK$;LsKGO-a~E?q9Jbhi!6%dk<9Nd
zD*#|d8)QEapxb-kq6(cxz`NM9nY0K~8!uP1&*I+{D%7m_u>jNCbl;3~R9b7#h%%Q#
zMPg?`exs_!{4M)z<64z#=P}w6vUq7=(`%p<(cSfYao3cpO8$P#d{pC7H3u_!zS)5*
z-o@^8vAcbVEjQHjb)}1-IuYzT-ool-`ubb#eB*n-AOnNEO0($gFw|=<GoT#jHycr{
z_1(?qRV~C;#aG}CwfaKZ<t~j{To^t;Ni6LNN88C2NWV)yK|5)oo1<Q|=hwaWKk~LK
zQ)4euR>ah`?><wT?ifL?t`Tr(V>sn0FDa97pSGFRt{KuMXvU|fSMyE~nH0!T_uxui
z!Z$lQ?pm73y!>S;IHm}!SMc&2rEtFcUCVC^_LsV#M@+g^aT&`1TfM~p8U6b@@Y|TR
z&^^)8n<ae-CGD_Gyg&AJ_{R^Mkc6|3j*Tx<(Ejf)9D9mDc_%l1yQ2HO(bg%{5|gg1
z=dP0S=Zi5A0P6x^`K<WWni)!^$NxMlphAx5lOa~LPU3fgW1ul~(eye68v!|6%=ZJ6
z@`eP{Z-a;YwB?HrBK$qFa3Ga-AGcdILI!GbAYc}}QghK0En0baA|bWQ8>v@ge((}r
zbAEY)8Nc#J`pw~Psy*b))Mw*%BK4QeUWDMeH!{s2-}I}9M9W_*$x1d-aPw-+?so+d
zO=`q&#&tpMdqW%M;+0iC$#44gIm(-O6AHq!KiMgNV&cD(RsP3UKfrTxgRF3a0{s8+
z!~erq2`YF5;{UgASNLl7_!ikXK%id<P#pmHFV=p``hN}Bzk{j?e^FW)&t7J;|Ic6k
z*N4A8LU>|j+%CF~`~PbA$(x=a&-IsrB`yDBSN-o3^>aSRAO9@w8`@0=KLhn2i2i@|
zFO(-jC}#s=KUHnNt=|bL{n!XMD5)a7MXgY-?o;U$m~fd<j_hBY`4wYv!uYJQ>Bk;W
z&8<b_NL$yQlnjOhjU)dgbo{FEkoCV0$K{<LJV9Cjt9s=W311gbSj&II`Khe_9zS~l
zxa<?x_p@O?dSb6k?ioc|J+fksUV>Sq_968}qfnboztN+AD}+mr>gs{!OD$Sm6Q3d<
ze)m;djiExz>T{<)b0Ax!%deLz(P6bJY%pnT=&PAZ%Cx}7Ee;7AH7yO#G(`T?i)AM6
z*X;Zr|MTBjpk_3FCywD~Pb}*<f?{p-fB2aC5wDo%O|HKAFN97?+TGfeZ*Qv{8xSo$
ziHVBW0H1~SRaL%&JAUPoejk1!lmv9@dumxPY+c0cPT|?i0*|2wg#3%FW;obfc{P6a
zzf$<Sfbes+>~`+YWVPSJLC>vdi2mDCCAv4lZac#hl5VMNqX?|b)opznHu0hn`0>sX
zTOSJ0ewB?BpcT|t?1uzD-OK2oYD^>15d61~m~cI{Ae?CQ6ZnTr<%-Ai7c^iT;u$9_
z*l<v1$~Oa^`TutCD}rD8a`yUO*5z#T*Q45f2taYmRMyIr^%rnUuwApFQrn7Bo$3%V
z-vzo;N?84yLn{QI$6AFPIrt2G4?q-Z8-I5f;sxxSL@p?@_IZ7e7A~U^g#O>k#_0Xz
zc%3StATQhJaVpb+PIk|?X#IaJB12Eqz^ESeJ29VlK0Br`PfVlKRsD;C@3L^2GQ&}$
z|7jC&>ybMq0;{U(->oHnIzVYFKa#A6-!=RnQ6Hm!<RRm>Lq+e(qEkdSOI*@MqZm)|
zt3<T~xntE#zS`Z~h(1j*dA5U<$PC^8Q5pFbe8#d<Vo~99=y!o#{yiLxiFTv(ld17}
zY|yA$*{8+%|3k1#ur=oTN2IM52UvG3z(o;?MqN`JN{Gq7w1tEoIh*piY96$>%*=$+
zgJirP0QhZ`!+V~s0Ut!%03{Omcz<<9NC30(<cU8XWw6p8M?1U?!OuRCS0!#0K&mxR
zcm8*le{%0upTZXpSdO;RdV^FyfYoQLr*;#?_khFY+NQrL`UOdH$3VVv`LuuoTOtHZ
zLM0~y@8^kt%cHclbL*FSe-d@bec_2|Ppqh9MFrtANzRH`98)jnz&6Ys0>d8j?>pQJ
z=}jv{o)bk)&$D+LXC0gbt?{a0X#~sslDuCstz)pw=B1{dm)i9KWQtq1aOYGw!HG6i
zf3hD_4d`<-<NJvx0VEW-MoD(wr7SM%CrVkHvAi^pmSgaYnx^5k#(YWwiiXZ3{gH=$
z)kjT{;(w#9AJOkbb3a>2x9F>vo%4ppr;Fg3J<|-L>O!u=Iz@JO?eD#;wJ<;wv=gGY
zYY%PUa#Hx;7Rv8Nh>ZP)9N?APl1rTMx@&nxjSXV7?Hg@}(Lu2p&iShbke-{`EYgfT
zTSkME0_lHR0$=+t2Pc7W9jWP8es^XSU_6K9%LHJVC%Db1?OQpNzW)})+vUF88hkui
zK7#N|c>aq>c!maY{kSrGA4D!S4RNaifrk7fUYeI>O(>#w^U;72;-AU{$Q69)6cIH0
zf9kDD^>*2)iA;lVwCaX}<|CAueA5Mn_qth?>S6K!V(1^>&ohig8=!lj(i&4*>g>Sd
zb~3lzOdd66gn!!eRST{il)#eKKPN*Cb&ideXCdKGok_#!dzs&>q2bwrR?m08VEccr
zZ<TWG;r$t*j%Dlz#qGU;?9-5F_oqNgoPS!~PASkH^f>_UCno${A9-jQ>U(Idlf|!4
zdTalHpsb}Aa(+w|{SRXP)Z)j8gG^TT{4kS$af7Fi+DZ$q*MzwF)|~&d?z17|vN2Zt
zk~x7C-(g|*Y!hAs{mRgFfSbDT)szT<*XTP_H;(e4e^*(7kH{(4JaM0;9KWR=nt4F)
z3e6#wA5*wYfB6dncgUYc)zyi#H*B1%K}qio)8uN*l}jxLs+(nJWdG?FdFYdaW9r|M
z;_Y`L3Rp3dsGE!56f;5v*Nkl~OzY!t{b!!D%i8H&@~g!Yy)8^#OQFyv^P8)3(j+cf
zeu)*<ogcqCZN~q|BR{XqOODT|?29B>jhx5l(%`U#qzh);e-<lyS-4)%X<Dx)fVV|L
zsNJ94`-6Tvi)?0ookUIV=hBJK%Q7>6#_(qme!q=lRmpUr)cAzFJ!faHfRQ)EGY^1?
z-YUVx{$Fb^x%!jNNp_iA_Yp{l7<<)lWDxV@)W;)XyFb%Hp7$i$!-6|c!i@2!I%+}y
zsF={+qk+aU4bc14;AypA|68Mj-}%SAZ0{aOw?BJnoih5f8C%(M-*D@RX1Wy8Ux>4&
zH=wi(t9wYB)y69RK$gu-<yi`;*+Ws{`UjC~KTWY4#LbJJ%2oyC({*{-O550RNo#sd
z=7>>eUVb&+T@}Nh;&2RD)7w5U>Lw6OfSkYj$&&OVaBl-tgARX9f^m_+4T5Z?K)8Cb
z*JG`z-mj>KJ~TCE`p*BXTJ|D8t&fH=wx8HFlOgwv=QcOx1)4+vi*;fah4u^iARl73
zX#b<&1(1;M?@7^X8$QIKD%6g%>m_ojM>@5e+e`c!H*R<uumNZ#SI})40nk{tZ!E+;
zFXp(#CsKqp|4+7srZ0bN<?a3i0R9X)ir-1%{zoIjdr+${S**xuZs?~({2X&CsedFH
z+3}OWhl-%Zm6q_UK#lLcT11^t_4MIMzNC!C2u}Hk-yjx8{lrrF*{&0koGJ_!S420@
zXP$aQGEW-ui^%!8zElZhrQ+^+uBQ<F976#xBE@;I^UTnUd5bjI@~$@MYb~1mY%N_;
zWXON#Hm;q!#qts1wBK}KO$Sg;x29CA%T#VMO#EX$eK~RB@4<#M<i)2rmdlJ_26`Dy
z)^pc-8k2aHPrrpwlLqdD%;+k;{P_<m8UsN*N|o%{L$sUtfy41IrCU#In;?AAf9<3N
z$<;#T8gAl=L;zb86t;+~7Fe>RpiG1^_04<8PKy-O&GQQe4ODPjudVv(VFnUn^|T^3
z_i@*brG%7a_Pc+8Ed4|Y`dK}`eC%hKk-Q1<0A4Eq>!NCA(A#=qqI||O{OKoPE$qJm
z7712A2UByy)@prSjiRDX2pGN3Ofe~yA}`?Y{s=UoXsjAa5bV9aJKnQ)9g`ML*oy`f
zrx*U|fL|CcxdA053lYuF!LQaK_w;jCYfY<u*;vyYPj&TwG4|JSQFU+JC@ctqAYcIs
z5(=nDsdSGb-Q6WE3?R)=4u~j7cO%Szbax6$N)25DNDe7AG@Lzv-u|BV`Ml@+;Ru^O
zd#!cl_lmXlwdF@&Ivg!;GBBP4o(m$KQ<Am^3wv7GYAIZ(s+-tDC7xQy>RV{OrNkn`
zKnd#Y*L#2LQR`Ez^jB>Kgv}^SXpu|S+BdBxZjrrgk>!28FO@^|yVD;E`~`%d6cJpA
zg}3Z&uENgl`>>NZ*m~LiTb{qehZtfMa2R*S0i%F}1jAp+&9b%9Ry+1|(OK4DkH8h-
z`|hC+xr-8IFXsA>YFxsmdVIa=<>|m&Xi8vOPV(Xmmtdp-^_qpU{*#MXA0Uf?RK({R
zs{{^!dm$76>Lw~iDS8^(M^Kw_lEKmkW3(C}4cM=O0^1CMh~OV7Ja<8~M7WJgNvsHx
z)qd8(y3}Wk!aoXp-}k?fF;5qgbe&N7({%@Q)&d<HcOla}U<}VAvB@f)HDYtKma)x<
zYu9F88~@q^A-blUPns#9zx3A}TyOP+qKZp$CwTapwfG*~LyTn)E*<d84}4g$;bl2D
z#{h0<RL+eyFG<%F4qaxVi2PMt`OqP@OZsi1ir*hX8s}g}cSG@DtSRjdX7u((PS&yo
zs`2Q}qlkO=bBe(cfy+ut<dOerxp8fSD~WlsLQ)rrZ%K4Up<(U*puj2`ac#h5Q}Y7u
zLAh?=uN&6B3SXU0I%o*I!N}M8Ja;gqr!z}N(L?22IDttRmte;C*ynKt#!ms`G?EV&
zM7xGgvrRmWan0qE(y#}!_IIvaZlMmL{|7ouk;lA|-wfhWQC|Jf<BE2k89ceU!#iC-
zT>B>OB+i_F|AOfu5U9jdGb>l3HP7?hwE{JoFLHe^)fY)}^ZW?@unfw4-F!l}g85R)
z)w6GTLVF_PEYn`!18@0T8|pWonlmgN!NY#OwNE;EsT{^E`|K~bq4#dtDkp0cH2ZO-
zHq%fN4t^|n&+)v)#hmqA<*8V&LnJx50^8QN19vvwJ7y*Jc&jC<B*|G0oUDBQ%Y#sW
z2AU4fEC?{7_6Cb^d~X<=JE*83@T%Hw6B=G)l4ksV|3T7{rHIELVFq#GC%EQUjnKr%
zYZf#Q8;>fhXOxFCir>AMn?x;WQBGA`xHmB_t#?plo6gN+q%m#fO<J`zve9GYzs(GP
z`WWt<)1TRPhR!YQ*CATeU7Ei!4UHUc2oz}|&$1aypep?@F<_hpQv8B0GYAxFOQ=7_
zf^2b$FYg$)D_yzJgi$%#?T=Z&!<^!AoFk~_9F`dlvPQ%^7N(O-<AJxWoiD=})2yWF
zs%dc>xX{Ce4YYLP0RlKs_ffuN$OtXPYD))u86SKEE8}H)bCFgB2541*)`T2K4!<Js
z+tI3!!_#w&0N%p&IR3(<rBLAlum6okk>!4p(RBK-bCcyw^K|gl<Wz)dM8@Nbp=m=R
zv1Oe;8=GXG4gL-!g=5wK`P1MJp(Z^)4oyRiEyqf+Q9OCwa1+M=EC;a7)NCS`S~QV^
z-!p<JfWYa?H?M3WRF-8hBAyreg6@0<n1sZ}lU@)dFCA<vm+?5xN-j~Z$j@iZqUav(
ze^N&V*xdj&R#^<n8I^9p<}OoA@-%7Tujn-zT%wKFo68jIDEQB`04S%+O@ZHc(;?VV
z;dAka{Nfv&)R|XNOOyBD!S)2+&F9<+VZfd)?r&@E+UqTcQU=O;pxG$f9Q~LrxH|u0
zV=YXcEns-~Du!FM5<o7ate9<v)pn*KWfdJUdyA_D<$Sq3^iPT!5XwGm;YxkMXrWBi
zV1d-pgbyhj7aaTqGHwsoJNUFinrNAigmz~2l>voKuYbQi`wrkTuWhKs0}Pju*wch1
zM#kR*L(p6I`0t_IX{=vR>O=n8jsG#Fty0k6yh}L`5>LQWV)F8IO;sHSpX4@X3;#N!
z*$~Xb9SSX;oIe~8AJkYwpa(?|)nNW=z#bdrpyuCo|Diobh9J=2!K&$Nd`;NgU1iPa
zy|Qo1C0dt7xGiM|FZY1{XgDp1mW?);`TSR<2iL2VY_x2f>$phU^U#p{N){5QY&Cua
zN_Ll?{1@e#t3xxDBPa9lW(_X1HG~uUi*{+(!KXZh$Pb#ry+6=e7J*F4>arbiVu<U1
z#!89B{#?*2^VI*WT^ZwvL!F9iy-f1sR|pS`Sn@v!{_)uud6|mfR~arXChqR&WBgL^
z&=2m2K3E;ta>z9OnpfN9Gjn0BK~7iScb6*!x+hxDS+7_ezp6G<Up6QDs|5)F`Pz6D
z3C<+J7n{r3BDtqjE3WZL=Gmn)e@y!WkotV6=sp?j2BOW04(<ioS?Cmy8p4?k_x)qU
z=vl4{DNk%ia=oW6EaaB>Yo~&)0?i^u<O%Z+LRhicVKq$$Z_HnOY1YE~ZR_S(YIwaP
zm#*Sx(x_3@XNO9K1WY*~1Q&Zc<jo4ZX`)AS4v}B!s9y4rie;CP^!ATy8^$hVI<MmZ
zjbtR_S?~nM>VFN$ZJJWZ=9`|J2Lx{=I|wn)C?qg&<|}5uHe5UKx7%*-vjT{m;(@#P
z=#9Qj5D;$30xc}PB{vuV@yErckrLg%TxzeIg#Jlr;jdbmTPvlcz^Qsp!5$?j!Pthd
zqhW1~dItHMdc?B!$46CK{%xMXOsTLJgueQ$uJ6=qfE*2#S?sWE)n)rWrneWKC(NO=
zSO@;zD(8XBA_(i?6W{e@5xS5L0KCj@4rHw2m-sZSV8vP4D^gp^bJAGU+g6n~-RH$Q
z=MT%xf=55pM<wn7ImUXL-BP5vBEt#>mKs+yY-`4uc~u8XrQdZ#*yIUGEzm1RJwK=V
zE8ImUf2rR=7}kVzVQ=4pZw*Y3UvFi_w5%;d5EM9wms5s}UX2D+7LV+|2*z>?vB>#{
zpQ}mAU2Js!9-i8f|89MM6B?>E_F0$FA2Vi7L;u|;6ue@QlAN?TnoNVJ2n^nUwJYPF
z2~P$vYCEb!eg*@`K9i>;Kb~Q`PXwaP#l;_%Sng<QyC33;O+(xp>T0NK4W*D2jEq({
zwud_u;*-SRW9Yu3+f{tGNW?XE$hzy!*#kXr8`1bKx`DM>ESrs2%5$`gI#k;d^F8h-
ztCJ(x$}|k<Y%qZx^xkzIuPC9i`ni@XoCBVZ^2+7jYjSc{&5h1%>nYsbJXiXU<SF@&
z_1>RtZ-fTjPD%bsx5LYYjgJF}=MC6PAn@bRHb8>{3p3@d3-zD4ahKUk%4e3;*B(gz
z5QJe9_S2rD55RtLl2s^Hz8ozW)(e37&jlt!iG22J0*g1o-|Aaf&oGRf5v%MSuGNZ}
za_Z5*Ngi8J*>`Nt`Qi0%+9Jyir>Yrm966FN62KI<Qu4n(qbfUlIxPIs@hg-ACl5J}
zojefljaSc?+<`_Ax(i5{z29;OJbqcY@%*SQFs0W7Rx2jqn|M6dc5Zi4(r~keq%DPt
zhcb5PY;h8UCvtKK22kUjWJ~EOtFxG=k36tNu5+@o=})R_;AZs^vIh?Y400WEN}PjA
zT3$d@!|YQruJ|1YLeL{0ku>C6{E}81;9u(?lXUfUb3Ev&qjGte-Gq_ILmDy%9_~1?
zZWef#k5$|)&oP`Ep=YQv#1tESyK;~%B5DkD`blh};CZlW&cG+_d_)!pzlYr4L>a(2
zVp3r7BKy2NXJh&U>M8Z?F`&AjluP9bmod2{XgZG2QvR1O*vAvt&ziqS1DRot11q*j
zl24P3eCJ9MOIP3oE!oyr3Jk2fk-S29IBpw=o^TJX`#9Nram$%nR6YjjE3)c2j$&}v
zY!E={O8Z<3Mj+b^I77DpdjXsxkO7)jw!k$vxzHdGYoilYSJ`iw8lir@-uGf#>~r~)
zJTWbFP{}6UX{B~g^AOjIhLahxC67}zJB%onk@6gpjONhhP%SlTZOE1;)vx2ImaN{$
zyf6pfvA0PX$_&q{hafaQKx4t7uqfIPIlvyk`Ua+SuD4!-wvzuAsI{sWsA@^FeyqR5
zt-17EfGgVM+)WgT7<4WmesRNWbIS#}eA=Z3ES$Z$YFL3rf6y3yf@3-4cI2X8d*23n
zch9LeZFoJEWcf+yF6Sfjw||Qcqtfr{Qqf`aJZE%4Jpc(SR_R>rx(r>p4nPwAJi1&^
ziY`ta)#zs6UMMF4pXB8X35MFyISwBDbCOd%P$-l+SQ3qYV3M}`+Zsj`Pi^wNFU>_4
zs1`u`@nsUTjtu=4-_;0Endwi}Tb7dH4p`L(tO3|u?%Jr>pCk(dzz^*<CAKr>R}lil
zSX2MFB|>YDsY4}L{)m0h^9B2KIo+CJ4l?G=+5A08LbCh7AkZ5ztP^#CwB(?1L_04i
zNjqv+iz(suOoMM)a@8#&oe3>5Qrv;t<pwemafN(8xsu$Y!h&`)Pr|iwIZ?BDLsNFX
zDX5165PPk(mbx=qjL-tK;L;HteFthGoOL{6w7mkD(5u*FIdA0^3Yw>m8N4~4PZQV$
zo!y;z-8R|PXSY}p&TR0EtFl{SSMzRs3#QiGqlHB{xTpO58%5~M`)yUr;FgoKZ{Tx?
z1EilfS3Jw}(ozBv-`<=p6@T5_3se7?OrU!Z@)nzh1aWsz(OqNZlX%99wvOOVlk<EG
zbcMW?Y0t@lG5#hqFr3tG?4RM3pvjYI-_XDt4xS(S!EGPsbc8cXUxWfm_W?RTxt)3W
z%&1c007HJrmY}@8r~wSgH<+A87lOtv#(N{fBR}*#$-LE@<BFW2aiGSna~j)8HweC%
z79yN5du?Tx9J^M`&J~Q2#S{i?(H~kv{hq7}P3bRP;dye^T?y$6@lU!hg8Ba)Hy$%?
zdbXtYzf0A`-mhYyC;gG+P~XON+dY5y-XFdSV(n@!3f(eNo@MV7;y2pTz*PFQ9vEQV
zVPc`3nNIOw@$#&Yt1naJ6w~FDt=6|M(Ia^x{ztMN04t6!P+~ljEK`hRjSK}Bi>J`x
zT7k?kS<&mvzk3ZlCanclsj5p4=ar(T3wfE(1p-JPuCW)st}NM1lfAN5yw!A{&n^J>
z8@CpBq%j6Bo9h^?N+tHg<JC0YHSgva`^tuHk_;@>We4?klv$7bsbQ#NRBUJ7{EY3f
z41idf>aul_K^<-soET%KFhyP<zQ6hC+F;8dqrj7@(v)J3qw8&*ZDJQOJ`@72qCjoc
zOK~o9e;U4xyM;VenhA=S&|)}uL}x(>0F|~$O}>f3&LdYaYe-7+;;rRJqn|xfxfT{K
z;Tyv)DW@9Gn#{m%n7aWo$@82`qlv1p8;xUGQY#>S=JH!Pu*h2%h3JgJJw60ECBq9{
zFGz7dL>p#^&4HQmGnE^arhOsY`}p9~=rV!rJ)GzA?-pj+*W=zc<CjD?_!i<lK`{cx
zxzq4Z1~C<&Cc;Cl3Z?iu?2!4`=qFzQpiw60fD)HWS5g8`v+v5ta;N`J)$iu;Qu>ZK
zDf@GmZ3_&%v3{Nrg3<%>BZd9x0iav74H1utZZiY=tzv+_Buh-XxU*R0M#Cfegz{c|
z6Gr_o6aP+-bEtH%^keuQqfT04i$^YZO(n)iJ|qP4>qH8l>dcx{sqYexOm-I82FA>$
zzZxyjxn(UR68UU|`680)#jJdLZf5pu<$R!bo~gv3g%C`}1}NJv`p%TxFjt1UQ&DPr
zDUxRvyXl4e$su0F9XEp?{>;(3r3^b^k9-$+=O)<=AZ)d#>EUv9tr~4)M}NLz;qrj9
z4jdDIGZW@VTsq+Qyfim~`+W97fKhU%H@-liF@UcML=^xr`)k~lFSHoxDUh5JsU9*;
z>=Cza53TxK(sIQIl4e9$c%D-L1rb(Y%mYdi9ZRuqwPRca#7nUcZIPEL;*;~ER~Ov#
z%?regzy)@-lw)0(+%7=n=aPWP%2a73oMo*+RT%HYs_wl7qCLhSxKqpTcOUfRVFO6H
z*zu)vu%LPLjY7*mk^*`F-RqXwja?Gbz7_chsJlNGp^eB;UXket;~OhjdO6@9Ps^Ao
z$aqd5kQPCYdPG#TZ}^$8w_XB(@$;z%Z~gIMP#_+$u)V>9i-V9%VU>4lPLc<3Sb@D2
zamP7dX+tC$JWQ*)yM}L{j!;ww0=B624wgK~p3Y2{lz91Pc2Kn7XPFC3!;kapGzp&n
zm_Lsx_e|CSB>+Sh8AC@KLWD^mHmSmh@L>wHY%s>cfk<?)?%$1uaW_Anu6#bV0>AMB
zTm|Uh>U+2s$6K{^&6MUJS^dM=L4%#L5hfS)=DQ3AB2{kGYoAWtxYH<_+Rg>2rwe-{
zIez<A=@#ykExz$PU}<-4LwQ7j=*{56tmh*uO1Bz>=RZVL#>Prc9P9de`WgI29W!bi
zfsUZ87f{Kq{w25WQ&qs4nLS|29*j@}q6`z@<+n!_&vX6?EBng2M*O@@{ID3#Q7vV4
z>;+=D{_zI>-Z(7zakHN&&h?O$budPN6xe=S>l3lD4w@BG(*;KmNWHc{v#}Ty(~R@x
z2~3^_9rZP*|6^{{qP-0(;7&s<uot=zi#2?KnPKxfUY~{9O12i<&;77@-X#ywPSP}i
zbMe&!h+IPrXxlsel!jzcOt)qh2nhO`%LMa38U$*PT$p(Yu?Aees_q`X>NHB(Nzdk+
z1vhY~serDb7|;9<nG$Jl-t3@CThfIjmf|ep%re&WF08BFOF&c;Dt>a@#Q3xnB1~K-
zq6577M;Zei!U!eVuS@v8>y+dZC`(Gs`-i|q*rK{Hf0KBr7O!UO(MEs}C1M6kDs#a+
zGT}Kv>+XjX3rkD|HdTFQsIJ(pZMsf{#16U(dkfmaU0EN#QRvpIemncyg_&u)3TR2f
zE%<ey?E9zKijA`(UGeA@T|H0Ab<GQ*?SX+j#~og8Bp1r6fiPY~W$H+Cw0nLx!PJ+y
zM7_JA@qVJ+$>Ul`<hH?-)AMtxf>I>04*3UPhH^6;_;YC%TqsWw5YaI(iSlB)P}sQR
zWwUPp#aG&#&Ecb(#$nD2(t>C;u_n#T$IYyYb`*%QaE`G1PE!t7=6l%*P<PyL@qkyW
z$48D0>0ka+1`H_yjZYTV)!T>Xee^z`^=#g|^)2?bEly_>bD;9Y1FUe*8L+MKI4_@!
zmAtN}z2oyJ%I8AN!pMGmd}#J)eyDo`_Xene&Y&-01$?)~^*N=!=ER<9*}0g$1EpcV
z^=dgd=>j{Laa~+{ck8!@XR}9LDzLyx3>vrA_tFY}Cr*1i3LxWm8~k7rrt=xmGhIKu
zOL2NP-bye6NSoz@cwnnFyq|^|5zTR06QLD2+UKqVl)?zzt2dfC?K)RqOeFm7-R;x;
zyQlm9K!@FI*`;zL`@@4i$hqyi_!a;?-|T2AKeB{UOxtSY_e;6yy5$I&X9<j5Fy!1B
zVT2Cz)8b>S?!Ij*$D8*s)y}g^7ay3g<uLw4VDo7$c+TlFizODtGWgh)aL^^y&L^p6
z!<gmMMAwA~T}a58vjsj-j{ySk>5+DwCFlMdu;J0~R=O-f%dqs@JH7HET!Q|%=D;3|
zBweLk@^$_fq;*uS|IXm=glGdX)_W$PDf1uP0E`n$|J3n=|A*kgE?2`<c*qA0(2sFP
z&Z^a@nGylj)rymaQFBM##H@p_{{(D*A9@KIgz4-{o8`SobYCnYWFPyB{o2rbZ}-(S
zfmLvt?usdt0*>~l-&IrlI+M|jK(l99n9OrWlU<~z&KUFeBZLnSF(os}|1H^oy6_WD
zQ-}*1K2w6<g!K{yo^UCo8BUNfTfzcMHh@#nA8;lAv337T0y|wyHTsksbof8~gPIZ~
z9H(%V1NqZpgU`R{ov9*?dHw&FJbxC%j_u0Zr$m8?>HnE>$W5qsi0ANU1ELWX##8Aw
zXeQ2owE6ERC^JAMx&YRPvj1fVF*5`@Tu|#_TvY9ps?v_m{E6g#|NHkp;%I~uwr1QB
zL-scH-@yUqfuATm5_}E4gFc<QO>7xid!j@>SZLEdur_q6L+K+O7Vy8*J(n%e8o}*Z
z>pqLWMeK{q(l~js>CRp8@EI$uh-FeG`RugzMs8#Ye$axY<<2;{{Nf}g=^NGGDfE9#
z<NViIf55R-+QBUz{Y#_S_YK|ay;F@3Rw)Q9hHNFmUm7|Vf2c2d>(f;W$iF0M<3Qgw
z&~>mVKf#}Q8m7fk3xvwBEbFEJJ1NL9mfbg7hVoxd(putrLc;x}-Ifly5I=;-5(=|x
zNdmbB#Tr6#s~uz{&A{a?*TDNgUFwyc((hz`dDT+YVp?2PMcjX9`j@Y~n96ULt{uhS
z$_(aDK;C5Vm_kD*MV<Mv(JPqj&bPbJ&SKe_GMZcu{jekgX3)d`>(lT{vO#*))PX+#
zhhV{EQoe%JIdClL6)p9Sw;xMJz%Ih-|C72Ur2t{UEHcMuf2d@*{ws~MoYkeIG*AFR
z&C-Y|D+5K7@UUF2duoolrFs%&0(1YGAt1H6O$xvC>{d3A`?{4+v4B~Z!+RhiaCpzx
z0wh<^Hx{`Smu&LqVSMojk7I7csOU~UQCWhlMNg2@I`BTd0TrqB)86<NEj#R5uHtWV
zB#~lkERJ{SBX`54s-#qx;f~Tvr$inbaU6$lfkOq<%qmcjtpM0n;fR-S^_SG#A9`#^
z^&N7nzW(__X#t5;vaAae^5_Dd_Zn-cw`l(c;;RRYnr>Nt?O;evI-7iWx#Pgud37?;
zWFO6b76^^XHF$2AJ17rm7c`Gn70A`i<FHs~G5@v4&>SFz)aqq{V%m%^dFWS{I=E=E
zRtLcLwbGfNfT%z@FewcpR_qLn*3cIW!4al-<$0Sw)}>EtI<2dO%(<tB%JT9Yh7aE@
z!|!8}{PNsSFL~q1mtbg`(9}Q$yPP;TJGI5KWW~K9-e3P=jd|6nuH@(zYQ%oohueEM
ztDCAS+u^&%$<1|51=%OqT<JOwh>Es?<%h0?4r-)eF&2VeeB#*Pv52;ZC8ZtBZEnK#
zjF$ARm$@EE9O`JE^3NuhYdsxSIu)A5$Xf1g`~g&vZJkr$)B0b-S<J7V-XpLqo2z~O
zjUr!7Z8?)tt|x2w`5(}I2^)}D{m|2}KJ{5{3rS)RQ5MCHBM%@Adt@m=2uQ;JvHB_N
zq%y9Zcv_Dk>yov7X%sP`gT{`lrRB=-@vYeRN(KXkESAY>3&3eE-|8dF_<smviz%B;
zS^uWliQ!n+L`~C3kX~Jjb?h&-rE@ce#61_Gpu7%qT-Q^YTN*6w^1u@A%9|*dh*Ou>
zOg@;T;ZFb#oen7zIGs=AgaZ%-7kdGj5!yaPjP6}dopmaB5v2ngTC$bk*71l~2@dFo
z#kMTMw@fX#35R(myg8~gkL_6$W(FKNA!j~`Q~V3rA14doyqh}#92u_Lq@3bRhaCv@
z2;@)&%c0gHlhnFp_XtMg?qX_OS9F=>NP*5vg_N9pho9kyM6T4AmNrLD2JAczOgIG6
za2kOpfxIcCk;8duyWuC3*@$Cw9eR0i;0IC<%HmaF;Sey)lD7rpY{Tunx1TYOXZfAF
z@0gf(?JkOy@~ufz(J)JV)Y#GyHx-lt0Cgfz<uwJvayu&Ux0}i=F0b)?`}^#9I!gLm
zkk+w6(wyuWD7kL5S`Gl}PfI3(!J?!q|2dW(9U$n7V~X;aLorF6T8^rDumIY7TDouz
zBgfZn7Dx_Do*4qktJ@<waSmciqKpx~*prpHJKrc2qv~eh7GA}Qe0z6-!eBdxp6b#w
z#1_YlRVbw(Pw!<UMDh)YmIb#e8WoJzK2B1Qz}xfY{MF3^Oa5+FcvdL@Xa<0MC?@8e
z5|y52>{E|;`SV(~e_iUeYJ&ufpASJ|=eo~w)Ka#bQ5cF17yug~v~^K6(^9|g(sPM+
zwr%SGUCILR3PnfdgQw==7Qdd!mOG6ISfKorcBjJ#+s&=M4nWa17Rxj6Q)Hh*Z6@<Z
zA+A5O>!iNX9EBG(uhLs`3%B?#dc`<!(z+0BZeg#If5&Ro7>CqYf<bqW_B(Y2ikff^
zcmM4XVehgqAmMx$=&QOMXXPbzFLWE_ryAv;NpJxxf%TNs0&xl0CIKuCSirG7^Uc*S
z`Hx+hq|WZ3X8<HbN#^#;OVFH~8b?X8(gw=$IPfrQL{Nsbn?6N}>H`D1VTNpbmY9VG
zO0Wu!8;KOBD&q85<zVqy{L-&@SqA@=`D6U*XI_izu&!FJxfa${d*AJEbV>uG!{cST
zp8K0+xx!;_XbLk_R4B%?7FZ+nDiPJI;b!n5FFLBXUcYFQS?a_aKBxzB;yl-*O~?qn
zD#U<2Mi!NXKmLzb0kz=wsP{ixyX&TMxSU*<`neX8EA$pfTgplRyFviI=>f3mEZzd;
z5vt^b>D9?BajA^1o$hm1Ro&q6hmT5~mJKJ=X%7x5BK4mvn`y5M{%np!Yu#rlSG-eq
z;OwEdBGkr8J|a??cjBq7IpML|cH)ch?_Sx-EI9};wrmTs`=JYmj*VGrQ+75AAqH8)
zqB=v#Y7AG|w^U%cK~Y!6@F`zpBCuIZsh)V8czb0NHrl3Xj@Je_j8CpkHeL6+>wJu^
z&^S1BJpl*KRb;9_z-lz0e*1`$O?!)J;oMa&JDG~SLP6!?Tzi_#(?N8c`5M=QKzn^o
z{exesha&}-qM~39$IcU+Q&pAd0ifB{6sK(9WL3~9mBY@a?U?wZyr9_k1(?%>Ci<>T
zJ>AOgt7z!XsnGb>C(^=UZ@ALuHP&{g3MQ6LsiM#kWc5s)WhwAinJg!r^n7Id_zv$t
zx`9Z?dg5>?L%~YBMCM-se=<3M)Zf6U#CMZ7Jdy|g^auVFC%h$X*dC(aa<)lvt3xnQ
zi~hcWbNPA6QwZv7gNJ8TasT-(T+4{Dz+P}rdB#$3aePdghbrXxAWP`H5X13I*ugu(
z?&f!q3Uwvb6JsMwcQRWfswJ(tSA4<<ao*BB{&|uO2Aec^$CphnK7x7QJPm!rY%m8Q
zyscrzz2v5)EnjMY#ZC3f3UVrsNF!Uh9x;CV7T)P#{g1>$!up(U=NF8^C;9b1bJnF;
z6@I0}FZrl>i`8iy!?$a2U)I>yd!5eD^6Yw;Jw(pD;E&#CV?eHzRa^?IW;UOZabsJV
zW#dPgA+!g{$X)tW>`t3g?TyJC(a}yXUdWG{)2w%H+62tI?-E;#g{NA^BW>;&aifLD
zN~r5+#jcI4Ke1SGrYEns9l@0oa^jpkE0!d&ZGW>`-||$~dFj5aepP1kE9D-Y3Yo0z
zT(*T1unxC-pO7p|q=tfm0l@%XHa&qtVRiYz3hrTS;`}84&F>~7nF3zq-`P<zz&-~S
z9&?S~AD=op?qC_^kJei_C*FiNd!onJS-1&$t;sc>w!V|)WF`Q*?gPBo<AYjnVoP4d
z)FbZundf+*V$GBNZ>`c9)x3Oy@4K_Dz2&ea&2B85lPf<&ow1wVjgVE_y_+=Jm{nX8
zyfTb_k?Hlpa=U$?<xN?}wTloGqi?a8l=|`Q<ZV(Q7jXOu9I$>2nCiUzfV$MhdKDzb
zUYC#;)JbC!E$`mRHwZ>jM~q95y=aq-v>PuDb3+Kk&WfoG&*NBZV<BjWi+gV%rE1i7
zLlL{wAs=L<bRJfjOgSMG(Gk_vt_O$5r(SNmSlr^O>t08PFh2(g+?NuIwazg0!UrkX
zh}()G*~sj#>iMa9$3Amf3b$22R`>)OAS~!5sZhB^mPjBeiGm4rpY9qxml=uma7tzw
z+2qZ)a+?1ci%u%8?oQfY<t0;i_DDwwxwYrvV-T2=@=g^^=pk%MGWeTg+}e}m9<@x%
z=`I^?Wt)xDE~^fOev8c;v&fB0ev*E3c)5FOeu3rp8S@JCu9Ou|LA!TrhOXA<ZNwus
z=#ngka;gmi3yvNT-gMa>BExYojkzVbi+Tk1gl+e*rPkyy3P;;##O!>`fxk#%<42;4
z;RD&iUIK1kBe~svv=)@}`&U}@U4|Rwhlp9lY0q}zE^A);;d#mkt}#;(kJ3zerI#gD
z+m$J<d3bFZ5uy?DLaovPIo{I8`_0|v@YYgOIPezm;v}Y|R#y8ySA-zh=Wscj9Xmz%
z3{7e7wqCaI%&y!zBkwv?FRiS|(zUW=1`ob095=xvkF>P;TASzoF?pg(!kXJMkIeC*
zrSR<ikoyMETh$}lqj$;Z3o~#{UEVccVvBN#UhbK8v-zU?P&&idDpg#QJOL)3v}<`>
zsqTj~eHI?Dx-pe13Yq$4Ujh@SGzOr;MVtz4zL}EyvFt&9XbCB9eutL(dPZ)ml?9U$
z?`psc@T?bbV+sn_e?r#sAbbY%Eoc$0fPulU`%ZoP>?7Gib|!{(c-#rr^)NP04Z1qt
z`(zQe&8uPJFf+KMpVWeYl2(D3`|(?TNtz=4#sx699+zP47hI2oU(2T3Q&WPUkCyJB
zeB=8p2W&jI===e66Fdt}jubM-V%`9S>}{^4KcY&||Ah?Lj5cAZ+!fcXe1ZJ#vl;Cx
z?d}o)U{XU~FSH(25#;HoXhug!{VBncv-3BKjaAtKYSFHucTu5a_d+5EMQgkGf|ND|
zo<3r8eb-+ZtS$c(O(8f{5B?aV8}10+u%bL^^;Ajr-1|*GAVpm>E7<Emo)d~pt`9mI
zuKkkPKl_abj$_%M+7$u$9AODmF=BY~fbCg#zmE+5EOon+6N+mzCs#HVB&pc}iQCN$
zcg)7MPVoBHcCdy^gE02yggj}3oViKh19bUnkDBo$)#@P|So8%PmfJciYr)j+;g_2G
zI6fU<vYY%Y1{}yT8aO}1z%5Yx)xG@F;EDobkPi8uvjBd-O(3G1ZemJ!n@zO-tm3*!
zml5JvnB}MNuT#m(AIRq2f=HSQ-c%9=8oanG^jSh}$x`^J^Pp&`I(eIQOn<P@82l))
ze3}(;wO)FGEP40K^_q;3979_7J7G+@3m-C_SUV%iT%$`?fz7MGYT`#M)g*)Um62Qv
zTE}h6x!>x4s`9TM-Cst%UT-g366C&Ty~A&VpY&RL_lui=M)O+KLj>^hv`?2G+c&#~
z0Y|1i8jrw}pgJL{7CcI+^{aW{F%|r+;QpF=N55Ih_L{WSaO#QRSU`Pw&7o5DD^0;X
zV=KGasJpS5Ia>X({j4#fDIY<8M6R2<ZbOWjO4^k{oVpb1#%|0Pbt)j+VNQ-U>c5%K
z0Tz{{9Q8M60%!@5?NPg}`4rO~q(W<O>>7@dU9MZdzuZ8YijYQxr=KbxOuXg#{yl6~
z>+(=Jk_|0A?`zNPt_0bOM)>=_=xQL!$?*0X&j0O9Ed8om`yPYf@q#%r1HB(n@@>AY
z#&!*t@JZ~Z8{wq_+DrA%*6P=2ighbEAjr*C1TCef32OW?o6VcqL4-xQhWvdeIaJAb
z*L1Yg=N})eCG(Y+_eI$>F9lBIB<<Mn&xaxg*CU)<08u763fulpQxr|wLB;XJ4V9`%
z_SxtK<=n&i4Pn#6#?no+vIgQqYN4fTH%ZRW2RwQjWRqXn@UPa!FsC7<^$LlDOx(ws
z^+$7$v?nirfb6p9?CfNIdsbs5DD47jR$C82mmW|M^WV&S2BEBGC40KHo!pqPG-yd<
zH<wD43ieve=X%xs-drf*U}Ow7M>yEE)9|Z`WXy7A-YUSBX1ciEvy7k1#Rd7AaL;AR
z>|4)cn;MEJf~4b^C%h*<^;Y?(30+u8)sm1+E!4n*l{sy;J-=rIG8-+sHo3qxK9JYu
zCE@IqZ>!16Yg1ziw^T7}=Ou10D{T;G>jk+jkHN0JXXse%EBU;6`@ddGb5(%1MfuEN
zQD0V9Fi#0-ubPU6w)Z{Y;#mI^3;mzP4>7we&6NNM8n@l}b{Hrvm_dD=d^~N%rkcpa
z$&oO$h+FfA+m*Y1Z9d!arMnu)!f1vqk1ik9Ulu*)C|bhjty00KFRDhZ>zp*#sgg`5
z$Z^~fOrV6GJ_1Qc>9r&tzZdg=Rr>bTof@%~+m{@t_fh6cs}FOT3Ww+wt<97F3}NNh
zfJ|W1Hg3o4glx9=A@1v6wNEu$$1-FhTy&XdQ`BQrrp5;jQ11HKzA9v+*af*PHe74H
zyq%R@yvHRVF}EoK-|v1kcQjfzwA9a<A?7+Au{&PaOZ_e6o}pf5H&Ub}ooq2gjy<>T
zxE&jcta(xIG+om6;<$CG_lHkf<GVnu{$<x-aq*a;fKDd)k&Se3hSbuk<jt+at(MOH
zg^6g{=sVBlHX8`m4>s}$;cfcCQhSya87;zAFHd@8clF=296lS9S1({&CtZL_!)Cn5
zal>AT8|KI6OOj|&5%_fc>L^O*&rLcA0j+Irrl~ceXI|)*er4A@e3YMw+qDnp(#Vf4
zD-FM6Orsb)cKrbwOFPj4r3q>Jz~hR1?Z?Gt7?3@b(<{z)5JDEI@MlLM2Fc*xCg@Rn
zrL9<_cK)Bx?fCRui7c2$VGIlAI2Pzb(t>J{v$6}+8uw@jWi}GH)X8jnKj}#9cdhUf
z_i;0zeRoz(v(nc!p4vd<%QZ&e1UB)5CP~EtF^xvIlZvhQX`RiH%Uo5`86)`{ep)s}
zsFHrj(~6al<^$}tmc5MPux}L8ZznzLh(_$hd7|BsOEI(VjP^{?rqP>*f{-wQJqD)z
z5IUh6QD>Cc@{b49In#53tuyj8L=a@FmRH110wTO*KXk<Mcy48u{C7crL^l2Ur-z9(
z>VCH7QIMhK?Lw93r#)=2WEyiUrQKaCrsFG;ep&|KLnqfp4p60BWuOG42cq)ZZ<Y-J
zt9*}(L~uTm>Zp12S!MH!VzZWlGGm*c*g+t!@NwtTFXbU=!t_z2I9w}@i9FFn#<`fs
zeFfNL0)=C)^}UaTb}4nO`odRT*Fx&zCacTWN?ImYa&49tJXr#kvb2_p%D>AyI$Eeg
z0xY+vix-$yH!?}HOHk#)^Z~CQ{F5i_5dpLgg0G%7V9w-kV8P_i{DxOlTQNmiTam@`
z?wA;0OK-HAqin+27dS9z(+>B5I7F`K3zcV4{Lbue;{tRCi6r+h9oxRF3r&Yj#Bq!Z
z9^t`nLw+eq<eae@WP2!V(xp>M{`3a~SwLBYyd@#Pl5iuL$>yM{56&ALQ7)G&eaJ?p
zSHbJWCM47Ts=6>qj_x7czAAa$Xs9NR(F5EF&evqg)gtRM5kBmp092L9HPNL3;>EKV
z;43XnbW<vy*VNBJ?y0bocy*;sa83ky>#woRX$K0po*9)Jqif%K1nY?OC|ZN^^>;l>
zq1%CYuOq_Ir=Lq8l@80N5yfhTBfVp!^R8VYgUVvV#bQ<8<4D7HUls3Gq8JAGgTdY1
z`PH)`83JxbPMLt8S`iE#o5Ef=eksCtrG2u17)8pjw!Fodc%ZTHl3eR)OD=%O@cIbd
zo_kIEIW&14tMQ{(5qQi`)9QDAZG7G_*=j9W*q-HF=s+@`Ct1z`gNow2veYN9)e0C#
z{RuYAnVxWDiV}lGzdfxkAst9{DwG8*A01%%Mi*b(X8~1twFa;IUUR*^_k`$w6a<3t
zKMBIiJ<4ojZt6GHf2?1%N0ere<xP6U5LIswThvVSO!Rp3xyOXoP;UELKC<70h`P*w
zFs|H7ATfIiZx<#*E+}(-Zq=W0)7<UrTS>Po{34RneRUo<TXesrZY6TX@dG$4aZ-2f
z_tg;w<h{H!CO6HP<yv(IEdz1AO+&Wlm$~e`y*A5c_G=HcY=5YYFt{%!*eUb$%K?YF
z*aZtKBJ=vfy{=JH_Y{v9BIv#DJqR2@ekg0JU`W)MG$r2i#vMMA$)b;WQ?km$RBOJI
zqOm!riA8B-hYk8QrUl-uT0eX%@F*@%HSrU=L52P5wSM)LNCP&1gp#@+ae0{P)#2ZQ
zp1ZF`_B8k=GyWxO1U*PwQBuZ+3_uEF{$;6F(KR}w{$bBcNErl+<{SCKOFs)>pl=)Q
z0muG^{T>E~?PGiP9d=UA-pxKBI*6u;qCTy4C=(1GE-B~<qKR;Cg$~%@bR3M>V&f&V
ztr|8d850>PRrsy}M17!fq_n%NR{Y)6PpUfEggZKS$X`rSh*_p^cE~Am$6)Fk=LUzB
z_k_&4E>D6?jSPg(Mqg-f7D5Mh`LvJX+*}Z(ZFSRXlR~<QIk&YmvqVMx?9^Kltci%{
z8gBexj#6LK+MmM<B#z<)LJ?uaW|WKkUFx3OS2&5NEnjG_15mDfr_S(&p-{i9+LFnR
z?Se9l|AgDp0yw30UAE3tFGR6ofPptZxu)uF-a>bNEiFqTdH1JuOI5Q}!KVYSFwJKg
zynbW7@S%1_dCkAE0~SseD?mmRtc27=yH_n@H7pu14@w`(QeonQIvQq0QD^;_9F;&3
zLDmzC*B$5j*U*MdT!ijq7}D|WG%;kC2%A^WwcWaPbZikXuQ0w?oHQz%-fZgkN~y=<
zXGlg`9gE;@c{}8?1daV96qT^l<*bRfhw2~8i`1_kxZ8m+X#xtWMU=~r{Oo&+cT)>m
zTH33p*SI%p@uG8P4>MJZo?*4iQR^sm-bQouN$gZbY*Cg6l*~QzWvI;_5ckxKS^svO
zM63Jm$*?W(5^u7_lIc9(IRP`D&f+cU&Q<0#>X!0Ybs8zuU6@9LM(&c#(Qs^@#?%Up
z<?oc~(Q#~gu5#(J%Gz+E)fI#?Vbo%lbT<Mx9``zUYR9~2EHgUF36*6nt@vLJ^%B&P
z1t6INE?`xe8v&hu`3aF^!Suu-HTP=|ebTMLSQqL(jIaT3nJnmiKpxfy*j5UB=7gmB
z-syNL>VoNsfjL~uoI*E!_Vq|pZMOBT<j8r!8{2EP^TJ!@l&l+@LNF;l*OC+OOw_nJ
z(vLx6(q)ITB$0I7Z%a=Exn+-v7JqffXwvRR-6oB^^+G<J^0u@Gp5*aLsGM|;*`@Ux
zUlO)|f%oCNd}H1aR^|z(N%=XO>}o@1_s%brbNTDin{_2MZyYnnx0mdl^vJGH^&X=f
zPT{D8wS@%%vIq+pWa3y+T4<%!P`{gX|5q*|Rdb|6z!`lRLFy;H&{>9*Isnc~%cCaG
z3;n6Ntz;*Zu$82LbT9|M&zmpkCA`ea!h%SX0Z8rK@_jQEJGoNnR&H8!@K{Tu(2@%~
zi0<npvdkOlKp6SDKnOBA$9Lr4r#c^RToKuCA6;kDlyJ{HK4_Iuvsoxsuec$!-U43d
z(2LTF&}qMiNreD-1M@-j1Ym-#p*d4~UJ4+*)y8uOHI=U~wH3ce3OveT-w;U0_%yN`
zK!sV9l|BP_2L<Q#JI@%s(z2s)JGl6ntA7%nhU5v>{{FC*j%OMzzi>d4qCFZyfZ{+I
z5Mo#ICsO`A-0*C-?oanKjA0i&*a#X~eqWhi`&ifWtHbs#3_N*jUaUKQEO23>>l%dk
zqn%G?4wBhjQtuL!ZJBkip<@<)^>Bm*w2YOS&0hWeVVM9^E!thpdP9K3DaJLK!!y6p
z?u21Up*q&9V}URlZtujW8Rw$F#~ri#MJB19(M?mpx$)#hFe_5lQmuXLgh}2kk~OK^
z)OTW=J6}<op(7U}a?sJTwHgj5Tv*c0Ck#%hNvJV2b!UoSu@rfvtLyG&GyIsuo;s2X
zSzIuVP$$@GZ;RcnD48hqwcK<2`O}SHt0|#oH>HwHVGvxTz2cgw=J?RYYu1_R_sFC<
zp<6}`&@apEpW#yU{4jVeBRr>{%|DtMjPiYil21M@MGg%}Co4vajc65H(a4XCp~J~q
zH)j1!Ae(q*?Z~6Qdp7`fal~E%i}vEC<vuRL&oE~qV36`k2Yv?Zc98*QgNQjh#`~>!
z+gAa&KeZv{8KN$^i*-eiq{g^DX?+pgM75%(k=}=WHIMIwR#GqB(QqO`huPfEQrdu=
zlC4axYc1Sh$>u<1VWdOB2OFbNDot&vd0oeZo$+U~Rnx-sr;UjNB0m%-3%@9ySigA8
z9=<&95qqaL5o}gaVkcQtvjBFKd7ht8Iely8PVlu47HwKKyTQhDSFrF$r2Q9=ws{Uw
zxZvT5W^adv1sIf$`QtapSSz8<#<E?%GohLX(~K$Mo&;rW=~J#}4k8xI&eHNH&!Q@w
z5N>KCEDJRY!pa(T5%<<_Jftd^78#M@Q-MrJt*~s<Jfw2{!V;jlA9$n<#9erlreBde
zd;;x4mm4!Tll03$={2+YeiqJ>(t2G?_jhP0wh^JKzu<?(cEwvoL6iCNYNI>XmiOnp
za~Qbj6@=S-{EEWx-l@dBQ8arZn9ij)>CGvmE>$2VVVpmz+lYE2pl@50SG>CC^Iul_
z9mo>DM@_|r3NT+BUveK?0P553Q}#f0v@Yhh3DEF!-TW$+Wye{wDEQ%17YEy01AhD;
zg`3yz;b7l8B1NtESxJORjyydH*jJTipn=db6?}68X%rUN>eg#kby)cBYx1%kk9~l(
zF1~m@ONJP$*RN=XpfAts%Cr64O)xu&OQh-6tt;b(kTh4U9_@vhL*99Oap~?(-M4-7
zwu{KJd}KMHpnue?n!%-29ggK>R3En8MI+txh|JoMoP8MW;k%#2K4G1=OTQnu<Hy>q
zZyy{iMU%w5x_fu|QximYu{vqi(L$c^*B)?cmSx+i37*>?S?z9+pI2=C>ULPUm;7kM
z5=g++hHm{JQ>9ITd}GzOkNxDX97A$&Wh?fL=XuFP>(2U5R^LVm{-k%WXlfwx2KQI%
z`H9!{T2HIEb|aZOI?#}AsitP>j8i)N)K7R{-<t^XET`=byS*Rq%i&m_)T|tF)oc;&
zSc2mP!^7*v?`?^6tV*z=OrBM>Xz5ZKuWO@95RhwGV&!2#IEFF;L-%L8)$6-Y#lpJ|
z1BuHP`h<2Z6Wx&c4lV=oxgznA#j=E#-OCa-{~Qtr@ClRx#{rOKO+pDNY216>5>nrr
z-`K&T(92-aHpsL+=4uFLyR0$3#<Jj92QoW!XO()eQW@fj=v%ussLR(4Ap*K%9Dcu`
zsebFx;H52pXR^S~iSTFmWPxY$1oMP#w1LpE*ZN6Yf_ifJ+Nq>igAeK0g7C`x(TBl4
zZ`{i+B$uci>=xCFeZ<w6L(}EttgEXl-I!^O7nGS74g4CzwC`C!@6(iB`k;}&-!U(p
ztuEz>L^-@aMtIE*lEv8OPt4NX+|GHnk>ZfKxgahR(N*%!`;ghzC<<5b+8yfcYem(#
z1jak>3k^POw?@vbKhl|rVjKQ_Yn`cPaN3S0?>o&Lj5V7Q=_alrE~PnCzvnT$G&w<5
zF&%hWsN^Rx4aZQqS^g^4{bHJ*dV{)a9^~3RKU!7}z_HAzT5I>E*pv+NNwgH9-saT%
zV-^FG&jUXk;x^r~GuUt{OY??Yn||Co)vhM>FtW`F&?}-Au8R<AKic>5Q0HUKSo@4r
z<3mA~6HTjjs5dK0T*_*RuSij@Dh~5Yx|2}PZf`biBp6gB%;-NISc2B7?Vjd0uC9Q0
z-VEcQGMBxROlr#GsgO3cY4>zA2JNkdg{#F=RuKD@fH>^CS;jF03`Qp*hmcuigN4bI
znY+W#;9@^Nt=iZlmW~sYef<E@u3+}AjF5iz5Np;-rZma$2a+dm>4G(n<W~Y~zn4D#
z_h^u8jK&{H0nTz!L|f4q(0Jn)z`to_3~r9WY$LV9bjd*PV-9C(z3s9eYT)9>O+HHG
zoSf`pVA$JK$GYEhFJAyG=m@+A_)0u^)TafQkC6LFCmDS~;KbNg{3fd8_-&YQm9)_K
z2NFp|xy|@yul<Vc(CQ)|nxHbu;qFOek+h#$)vETtDVsb+c$iipak#F-X`^j^_`Ksj
zucah}KL4a3e1fvroJy$o8id@bEXmM*tOLB!$U7yVk>Q7Z&7(kWKPpB&8NsXgpKK7z
zo%&scdi2(x7OwR9v}mvq3qSrTzp(cV=C|<Gq!xXj_bA{kpQ{bq7!A!V#8#0Pi!%7+
z4HzUPX7H+lh9<p*1`gvyA8g(aS7T#i)?M3}M9<NNn14_A9UGn3MV}Z3uZ7k7xn5G>
zR01#!XAqbQY&0zq(7`wM+IP@x>ryksKuoX5q-CYHQZANRH%dJ{;b?%Wsz5#(X@Pa0
z%tSRrO)Dox^a$nZHeOaDU0<<yn}y}E=%1sC&k&6R8%R5JhgC{jahDYS{wAQWfDyi;
zWvwkeedG2#z%lc%Xn<Ww*D!n1K`&{K-s(RHKiiuDy$1DVhwD=rIU~u$32S%X)y#6+
z){6TBZ^v=>pwVMUbQkvG>%b;bgGWbjtv9(G9k#$DWuxOZ*p@}<7LvZ;Mep^HZ>Z!_
z)@^{*EFsN;Tq_?nRpO|RVjWiRItga|p4qLgW0=^>lnVa3ci?$kOCBVJ2sjO)&Y2S5
z<<_uyYM((LoD#KDh1im%w%~Byave<T-05{^Q0De{SkK>T7wk1qG$q*RqW}r3agJE-
zF8QLGrI68dJe1n?e$2XYp@qbSNh1xGw!YL;$3V*brN>#m|EQ9wv>4Yk0XYI^bC#qj
z4lN_r9)QcTxu{)c<B=R2o=HUSAw?fqu2yI;Sj9Z}4;2EtGJxFtZ4Kbxz^5cRAkP@j
z)nhlNB~|NLLK^vm0k}{_%5VcXBmih=G#``h{sc5gw_!7_rZ3hChp|qu-PxqAOC{0X
z99G>(_|;cT)2=6EWn}Sw=X<DJH<I?)*qL(hfmyACYx1rh5%qE4w%Ia6T9`xM0?Z`e
z)W)zQ4X!H}5Vc=Gf5P-mDQu@Yzl{O?IkdEP!6qtQa~%*gaZhl)s&GXSlJnQ$MniB1
zNokTQb>Kpj&}!3L9gozVq}OG0*L;7u#hm0Lc4xj(aC;VQZ~l<dvl0BE;|6(pBwuK^
zVWNk3YBfPHZk8XPqmm8rIE9nJHVp=;nL3u2B2H|>9J)z-3{@dTrJ`Iq?fOE7V~-K+
zlJY^PxNd?+#_E(#t$IFlumzh?*3oZBZR*Enxrp{bpfFOl@PVn+`1m<VrU-kxPMY}!
zliZLUVQa-N?MJ9(@}#fQb&f^W$7_;td0QrtasQx*OW1;BDY;)mg33}~hAY_t2rmKy
z%UMcD=gQek141#?Z4S&XeOcEL9&;dq%xpmHBbb+C4cZ5sj3z$Z-tT%im~mXmh4XQz
zAT%<sIDW+IP@Zr;CR}HUJGZIC{mZucGI%P(O^Qt;9~a0JMrl?KihMIdFt|yUyDLIg
zeQ9awnD0*dE$qt<C$E@tN6VMd`abu2dA0nmP`x2QM9pq&SBul`htV!J1nN{aFR1ew
zwwid?8Nd4wdzN|G_VHyegfQ4QA@;keU)lYbMqCyyr}Y*cnLDC5xc<=VNMVi`B`8zR
zUh!hB7VI+h5ii9ddVZL5`wOVfX2_*|y^1NZcHHMFD?k0$cul9e!7$fvwv<C7g}FLm
zwTVfyLhioXO{=h${5Fzb8>@Lm!0VN&j#{y?1Y$BZvP5h34D*Ziweq=~J+vVnT7|XI
z^*`N;f78aS%M@VIcSY9(MTU`$_Pp>a-3?v`4|)W13krI!Be%>BudIulP#aD>u8I7$
zenU@vL68(@>Sz<+;#+^Ye<X)u`!f5u0?U$2#p*){b?jDQs3QUT(=)dbJIAfYHmz_>
za^!DR`?V5)=vdFdq9dw-Kq`g28x91sKo(%Bl#OgD41*jv;O~f{Wij;{Y-mQya?4WB
z$d{Jixv*zsk3dfpQ@TMG<6VQw&Gdv>1(azXS2V7-bRdq*;J$q<Y)-dIzss7EEpvZo
z{XB7<raBEbbhvZM(+94eOi0aShkfTcw@TX2ASA-Py0X3yH{%)wLvC5ajdjo8a6GGn
zK!kHu?1X~QYI@^lF!077&PP}FscK=0V-hpFSJ87=g!yB#=BKGTorcr|!4KLurmY@Q
z(-TcdPzb0|@VwMAY#Q0?TxB5p&VHQiWaO@;Qb(a&dnid)PP_yqshwF^Y4$9x)99uG
z0_fyY{#MV=sBN$KF(>!qn~15m-|AY19ns6RwjUDH1~$}_%IwQiJ|)3`O#KO$dw0VQ
z981KfA#Q+7p{RdJf>ZC2C(%)<kh`)Qy5&`7eJ$5<^t1e0^C<N11(W>kS9BT~87-5}
zf^NE2mP6)lC?diXyD`^byrB#PC@(2V7GRZpFkEiAv$p%!>WaxmdGJU_6Oy7R>_^|v
z^#bRsgo71*>8IV0h5~NKv!(!mD;VbyNC!m1zC+$+sh2{^9snudO(h@|p#bplW%$Fk
z4X0Gx?(f89(&RRR$_wA^Vt|%SF0uly*O*6K$N$Zc5Z9xC4ac$K=*Qyz{Y{1kq-Ap%
z2x26wlcGFQCJP!q%;lT0(E-ir?PU1%ADy*yMmPe1G*9fBtEn@v2RoEq&Ds3m*N?cj
zD9xfg?f;4U@&KU<bOVoWwwg0#Ax$!Jze1v{u0n6(G&-f0``;|sAj7?dPis(rdgae)
zhgv#Q9F$Kof_LykqutH#dUI|%w2G%Zfa)b8VB)JAAE||A4i7X%DUJSrdbP9e161I=
zJ#yhzRc{nb9)(^=cuFqryqv{y-@^GOtbgPlqXDn6OGtk_1?X~yqsxFDJ^h2xxfeS-
z_pr;|zib4D()~T1?4NIc4F(pt^VXE@+yTX05=m7cI{!OxegkJVtW7^UeR3cV`_GoF
ze;w63&|_f6kH1~){&BnoWGbxtSI+jqr!YfF3E`TjtU7b0<OEx-jI6(Z>chTJN+xE*
zMT=LTNkcs1w!d>C!gzlSnVjuVypV;90ebL(HL0#Y0f2*`blJJ72KfRjQ^9XtI=hGS
zW{hL9Lz^Dws7pK;oi#JM@}5`sUyE>N8_aou5<-@<qy<w}5`*@6u{Px;RF5>T`}{Hg
zv!MT-!=FTr3BmOO#fNu(0O=SEf&X7Vpi+Qi{;CqP^Z)Vo=fLfcZ+-st|6wA)Eg(3C
z22WZK{y*Lx3)~)YRqXE}asU4(pMt4hJ|Q*s_<vvKnW)JCx3}Y@oo!tIztisDX)0ub
zlBKvCFjH^fyS4Z`rZ~u8S2qzoUfM<MOLZo${TeB0&IOl|>z3C#=l>y~`D=iUaeKes
zE@Eg93&=*~*`mx<fEiHiwA<<ci5DG%27FYwyrfSH&Yb5dmIc}e@%}g<KU%M9n-nMo
z!-g`X60;G~Ov%X(F&tJi2K;rw7S1YlvSmF-*vmFZ7spcmfxz7`G4QQO$ezD>Raj;r
zzx2$?w8f9ts5ap%eH*7^C`T24@$vM5^l~0Ph<@^E4#(Eo)U{m!amYfjH;PeRTD`u0
zpeteP-|l@tAOPb52*eN^P_|G{Mlf9osi<DA5Kzj>);H`T!NQRNUI>?k1-Ph;2F1xw
z)=RFm-<5|X`I8<~xw&?CnRULgSi6l%@0MaijuwNBb4w?^q_jtgB;*qZ30t{`%Ht7)
zKCUM=`dB2)Z%V30CkA*9+z<~BU%|6T3*Igc!E+~XfOjd$K9{<`;8<5)-R67pgD$gA
z%O3B<`S#C}X79y1uE+T4@m#zvB&#NZOslru+v@>W-&y7|b&vc_R{{jaxY$U_B45Wx
zfZiMHOO4?J>ru~^?^WwxQjggJLa$rDH~yc_zC0f4@B2TZlq4+_p^~L+l`Xqc){vBa
zOWD_AEMuprWJx5utjWHwLnUM##xmAHmT8RLSjX_aFD-BH&*$^_{qgJZs0Y(L?sD!q
z=bq(x&ZU49sEp&GI}+Lhv#)=?x8F!EHZv6*d7Fu$uPp^|58O^z$WDB>w}o2iJrCyE
z&c3Xs9}~{&NrZxf$&I5=>XC2KN*F%M8?=c98CnOXeAm@fG=x_@)CzDLv}pj)&5Fm9
zQTR6{!J19@VYD1VSA3?YnlrW0>qLD2pto_0)qTzs#4hCG@6y{Yfc27cPXbj}#0OI=
zJ|$!nYn_SiZRylJX$k)BA~bj*9IUc|s_Fq>;bT7qWZ-D_&X?_83NcR~2pR=vGTXXF
zvhjUvcozenZmpIduqgZ4nc=;hsKFgi1}llo<-nriKj#<~j8>P(Y6TA}4v<>sdX4{8
zWK!%8DO*G{NSdLmh7iD#&pkaEs{?XtW;O7$ppM}iMa)bFrhv^H6!Z;f7?*`Au$8@N
zCru#-owNj56Jyp=oe+^oCC{8#(panl8;6p3;_*9;EwhVPabw(RI%^G%(Q-+`<lQ|3
z<%K=H$F+^?j3n0`Es>!Iu`m#P3bZ+$EyS&hmk?#zE8kpdU<FInT*GI9SP3=4esH04
zz(Vo8i3s3Y^Z;M_BO^N#fCmpyYopiQ<4?>^MVhBF*u9+U(%_C#5SUlQ(zmN^S2}%W
zNR@35edi{!m9RGGBJU;{UAZcliTrHQHkl{ib?5xC!-6*rXhPHI65W`Eemu|-X>^(o
zP4)@?l9C1*LnQ^b^tKh`YwcZ{#XcbRjH4GEs7j6j`@H<J?d^Kc0n1Caw`ZM7M71b%
zHGR&j>#m}nnot!deKreJOeqafo#`}^?~1&WqjPE4uD082lfNnFHAYx;<ZVUTa_aN0
z6nQOkwbHL*R21YT*;&Cht@w{`@>D%TXHVfpag*}No^#7h7BQFpwG3&njDh(W#|B04
zgP*h3fd1Q+<oGEIZmW!}wu%cKpcXN|voPx23E3n{%2g>5u}nUu1CyO2x0ZX}R}zT;
zS@XJdqAravXFfcuCnJB!azWd&HAJ|&nW8CWG-E3_qQpuoUCYSQzb)+p)4|YfS%7;<
z6ES>i=&2cFFB#FzR?#BoPEm*CiM2OMHd6v2aZR32Bn*-EZNuyZw}m#4&YB7IbIc<s
z4^`ImM)vktwXDtY2bWYzJ97dl2^aNUuIBuN$Uv2eIFOPs8zqd!E5<l(6ka$rK>A%f
zucx@=r3$`PgRDx-+hwGl`Fi>)ONIXg`dj0BLo@W_xp9<)d&Ju<g!fSU7e>Q*4wefl
zh@3dyfA{Ity$$hE?nT?%_i}2ayEG%RgP@3v1-BCX8HnFKKP~~-DHiHDG<C|SOFqex
z;z015QV9;Rp))(-9<M8{(w+9n=3#DxebL+KZJTl{O1qKbhrsM;;PMi~0&FiZKk+Rd
zUZfu_Sha=q*82MduWj8NnCwp4dR31qYf#LJQkEwr79+iH$<K?7+Hc+wOcYsJWxW{q
zd@<pMheDJq<KsGtnJ1c8Y(5_wG%}2_7U^Q$s&ERO6;Egv91LDN{B-DCf)vTG4Mr&%
zZ=ISq5WJZ^VRSQOGo*Nfj-IDb{o%_<Wq+Soy;^-zEEeCtBD$o9O1Ce<izqIQ+5Tu+
zn<ZnT-MRyAj`i?9C)!+?&1{TX%>z#K+$94owVE3PKfW7}CF`JEM0mXvq->Bo+N2|0
z#p0<gv^3bI#4_nG0Y^9OsbBQ-eIhQRq-@@xJC*#SmJH<=J)d{6m4%0FJajlA?I9V^
z@)c|8GJv0A5>7?6JyeAy;1Tnmx>rgv3|qtm#(YLe#^aKO@eFsO=GM&?ydn%PM2k;e
zc1I#Q{QP^JPnKaDK^^4btA9Hm0$uG60%|Aq%?Dmp=FLCY*uJAjXM1~CtHciq;)GR4
zgWy^zbp<H0f(*;z*);4oI*V(*FAv@p!ESXVlJr*8l1AXq2lZFvBG3;-4hHt|*VRod
zr<A@?Es3qE%Vr45o*+B%u%qtt*u9Y(H$FEcN2}N5mH7{^*WikT3xrQ!u+}T&4;W;Q
z(x2~Vddp67m0D7>l%#(DlP|a+cE)}up?LcuE<jBeS3+E6x%Bmssy$ovjhOaOq*}hr
z%kf!;g}R1D$G2Ui)`uW+Zn#?LpT$so6?X+!&OIx3>d^f~Py0gqg}xaF9MZYS#gs?;
zOK34CTFfn=Bp#oeYj?UTfH^ZMwwf)-X!%~RC;^YUVbnaR8z$ZC$EmuWv*J`x)ib}G
z{VL~@p_IKP2G3=H@lVGPsfi`8S2#3yY^}&BGWy3erIl;NOR<foM&uD|204{139>oU
ztx}1F`##y5A0#{@t{T3?c)mo?){HbyQusbMCH4D<O-Wp^Ew>KC=RL|RlFTt$v=#W<
z_!YXk+Sslvp0lpaFO9we?kELtM!hdaD|AN^ExDB{&Dub&`##8c;ON@H|0*p&MQzpW
z$B03zIT9SeNcC+v@!r*V>Ajis`?$P@q4E-uov*ez`t(Oe=-M+9i8Sw2H{8AQ<tjZq
zw$-a%BFtbB<6mgT*FvU>(i`R<As*PA=8axUrCFqNJZ&PW69?C@{KD9&d2wFKX%O5q
za4AF!4t1uCfwuRBy=O7ydk@#AS8m;usO9V;lA?y6m5oLNU@UHS&MDccy{=SMj{n?Z
zVWd8O-T9M{ft^84uh;k>j!&D-(7AS}xY9E3)I7XI6Bm}J$XZ@WG!9<hE^~__v<Hog
zO2+1{)mZDG-8sS#z3%+9eqWd1Vv2b}xMTQX&J2bSr~Y;K#DjHicaQz6P#E;~DZOB=
z47^B-w7khRz}ts$06%mG%6R_(f#Q0h_fRVp%<&|E+U9x>$Q3}}M@X6&YxCj~HNwTM
zc|0kHHL<GM9~JLBg;Z3X-}*37jpR*WLo7wmlsG7l6}q;gDo~Ej``z&_w<@HnzqPt2
zZxABZa_Q7Uw=PSW%W8P=o#7fIJ0H4Z7_-ekI5!N%62@XFWXsNOnG)IEXQnD#WY;E2
zzN~JWiJ;wcNUnV=M~J7YR(g-654K0WLol|&(ri4q=;sUAFdB8o#gTfo$K%i_t<<aH
z3gU@2q3?%3=J<b(3UWERc5i!m;U(&!GYM4(BHXWO8y5>njNXVhH}1anc6&|RRk&^T
zrKEPXdyCW%D#G(%y5wk!7QTWLR-#L6A822?jY3El!&lWTF(<-ZR(?vppRr!~Zl4-x
zSyY!gEXA{N_hyf3N@?WLEt98NSy~EfB<-cKw`LfIZsmEM@vyuDh~{T$hztgAUMZNt
zdku^ukN|w8A*LT2g(1jTqPxOdJg+CadmZbJ6b)5mvZ1TySQ8W9z(neEyYrFGj3R7W
z3-P~ORs3>KKt*O!4%g3@LSFUY&;+eWr0CM*?_!d`VD=o$v@$?<q02Isi%+fG4_N_;
zBN||$SojCEUb@ghAZMW(mAv}Qa*T(XF+X;vM~P{GzbJIOc0xseWHsAed8F<L^^5hC
z;RWy64HVjKBC5%UhW7h{@k<AbaKbwPEN#ZkM6i%xz)s$lx0fI-Mx4_=pMbr=<+7Dm
zYz)8Rq)=}2)obkjQa~lG&T-m4*S-+9FU22iJf>ezr;*hq$7Q-GX!VQo#<EWGy7l|%
z*u6_wPa$~WX+Egc8uypS`;8}>;RzR+pWG<sH5#!$LcGiQB*o$MbI$E^h<PQ;mXs99
zji?#-8hc-6T6s4&4atgLx53LIwT!TmAy0blc{0&jiOZ)GF7RO6`7u`LzBp+oe?b$I
z@{6Z$PL6T=J@ic;YR))HilKZ=cvU)1v%l6eRB&aL3z<<ZB|$RBrK}Ew)MnUN=j9|E
zu<3RmS;@vLB9^9(7Oh3Q!pC8_<}%I^Er!~QDzQ8p#O5aN0>f+0L3!#PmFJAd^G6Xm
z>$*JufMS8vXhH{79uDH9=$~*eC@EffwD^=F@NZVmL;j7vza=oF&YkbzyxMpKgljrp
zkYo1Wl-S5yS5{=2J<q%mKNIe`ImllrQV`n|djKJo>Tb3W8-$6ybqQxgKl7x^jo!Q<
zJp!d3oiTeLZQgwJ#X0-Fh8su<44aJDM#YiDW0RY~7PVJd(tYs<v2^XVR=#YQqFaXW
zA`u#DU8=6pg0cI^gvPmxvrnyxb4RY!PNhE1mn-hJi`h|(*@EFu)v-Jr7>0}eRQwz;
zIAe@>`>iWy=k1Z+7yQfn!bcEln-P?G>vshcwl-NecyWh`kzNJeUDgIRu{GI-u#&2A
zF7t}D{HGPe7ZcZ9S9LL6t^7x?VX?`^jPw1ELyP<j=?l@9rCo;jgi}K)^}oF}8ga^(
zEBAQb(}vH<2o2Q@d+@%rSjH~|Gg%t|u5ozpN=G^;Qc7y!8R@O{_9~(YsKR@+6PxwE
zsEk=pYlWBdw;fr7?9czqVT-QYizT5dE(9j~4Lx!Y|17CafbNJ_xn#DtkK5i>_j~~y
zw3BFKM&Pn@fjZz6pJ$-2w#9Yd8!6#|CyzG0Y2}Suj$I(`Xg&10Br4Lsa6uUhGkQ99
z2ltLY!aD_BR^1R_^ZsdMF}5*<G_$a6Oclt*`F`5&`pJ29P!y5cVU@me?k-O-rnC>W
z6y>INb}=cciuXmmx1<rzFwD0YE!s&lFgwFRq`~SQYq75Hy{s>c3wxY!Fl+tp>3Y<(
zNNVhCCG!scV+1X=#!R{=J6dc&dG)^JwAE^YdjheQW&<E&H5uCTKSvu;%6@p}rg!$i
zun*0MVf9>F$-Z!g9lAMQVt*hDyp=o#<n?*iM&l{Fk~i+9PXmhftlVoyXrEz)b0l~u
zB+vO3Xl}Uo(NYJdzq03)LclAEO<s0;JA@IZ+!GO4?8@DfMo|#Q{tc5@c=_g&*d$I2
zyh<fFZ~-f}L>5AQe4GT%Bp`0T&}%5z{1ig!lmPSS?kS*;7Abp~A|)Cosl%6h;`9Iv
zxQfzEVs#Kz3eTX~Uub4(X<DSTad+P$=(f*mG1j2gFWK1s*pk+as;k))^;S4lLBegJ
zF*xxx_N40CoPC{)c2d9^NB(>Ub(B`P0K95qK+2}=fF8$k;Z$|(w*`h348Ez{psKb%
z0iz0+UNgEkAhc-h(Mp@TB1~2Kv#w};f!VEY;66O3tI+`GQ2{GKk<!rfd|Vtn^S-yL
zbVBJL4j2bHd=f+Aj2;YoTUrhxroN$?PjNq(_e5vqGKgdEy|c}CE9~Act=5ihBM~zI
zu>37NY8{*DP5+FH2|+x7I2FmX5b44*@hjx`D{dz9h`K}bBCt}7Ku=^yflmk}<$Mnq
z!thw$!#jThCo`cFDJ`$3zG0RPuuZn?cTIv^^`adLftIi!_m}4kwb=MN;lb``t=Uhr
z$&k8%RC1ir8pQ;Uy}DMqGu3h7)Y;G3#8j<>H*&V8Kp(0AVV>q~6hS;C7|y?MQF=A8
zQdQTomWTh{fg`j5T4!qWXd(*{w%$zCa_{eN26vbYw(Gt-+UIKjQpBQbP{{~SSjygb
zV?F!TbUE>8Mx|TndC9Fx`$Dz*cBz!n6O=Z9ekllo%_mglKoMdpPYBz&WxB||oDd;~
zRzScHR@8}<SXNbFEb|ansq5BtW!SuNcp7}Z$`FRQSG%G?#)KPFUMj5}3V5;fApulz
zX<dk(Cu5R|xc}bch&8$JO`3$g;VxTWCn6AEV5nGoARuSzq*j^mnSocwZOd~tep4@!
z&l}{cmfEyIOS=Ij(Bh-Cawv|6T;+0yxAxNKDr!wC<yu0LQ~!-I{nh2mOpGZlb{qg@
zLPJRFmA#dQqr;nyFWAfJ^^ZM!{8<iuJt8pgb#r=#MEST6axjl4B*-o-qov!#tGl<S
z|I>&AuL#XBS4F_V(TEsBPrftxZ_q^9l3W<(Nl#_&)NEPChP9@$a<)j!z3_u(<wmFT
z$B<sKnAxm1D5G_Hn7~Ojq17{XDHvj|ya6pTC)|8KlOv(If<x-HY9<*IH+}t@31af~
zopymeehKIUzzyOyO9Lp)2*Srk$cPJ{0tI3$z^laHz79C&SLiwHQU|v{)EywTNpC1L
z`BYg{Mtqw#szqtPEsTbkgeDxYUY8<qJcj=auYPpt-Tb51&J6)Fix1VsOze@1e0&UT
zrRQbs+AssF^HCt&Gw>y$E_NIjt~{lv!Kv)BRZ9qOo<baaZk3ua<e*~Y&xaRH>5eee
zVg~g{cwKXQNh-$6nrfap>@Xqw+Q<o)32jqb0m;|ujRP3r!sd6eXnTjJ!9CpJ%O!DH
zYc*XfCG;=^qam(RxAO_TXp&)O`M4_e#l4{S-~N~Z*zN@&mMoAiKU|Ume!V#GDtYr*
zBG5m%U!ZpUcR`nQU_`4z34{DON{R315<JR7<rI`ZbyNi;2GWvUSrG;{oL>>+HO&|Y
zA3@u~3EALp?s={=W&I*^B0~o7#FcKk9g|{s8llxF4Qn56rf1KFS-!Q^u#uagDBD0u
z%qDoV27C(@zk~MF*1aMb$4#o>#Jj4|;?-WQj&-FS4GN!AXS2T^VP$~-$;D*-X-Fm-
zvx==V&Jqt&{@M1`U*JISt9G<KhW|Z%o0iz*Aftt3%d;l$+ZxSJo=<YS0oxw0j#ggb
z(lp;fm@T}wP_Anj6iQ@lV~AZUOiL%2e?fJd-_9KT@UOd0FcI8!okG9Rc+-oJZn-P&
z3TzJtV2tSSe-#CY)<cju`9ksOYr73p1CA?<JX0P?)zdl{8`7IMah;{qIOvLTUD<eD
zvg<DU%jdRYS^$Q6lMwoj_x*W*z9XPW>W1*kBs_tz^mNL|O$neIiyN%@4>Yn)cH3EP
z7YS!K)pV|U&NP_Yzn%(G2_Cvu;j}H#wBe8&gBBYyW0TBaRuV0}Djq?9`YL?zaVY;b
zbwp2#a=)ylsfR`6lL8-_+HHPP6%jVF>SnoxQLh+m=l9m{1X_ayCVBjl)PwByYSHey
zGeS6+>1KR=8CIEu@a*Flj-pmhm8O1IbDVGNPlLhTD@)e^L|}d%2HHaBna0XG@Z{A$
zGE0JAkC5pjfy(V(`FWTD@XyC`T4jhl7swH>cpia9Q0F>MljB~j5L7A~t~WP_{AjXH
zJ5}((s8q5S-jbhi$ip?_3S#S{po<bzm|_t+u{E*73kpyWY~S1^6><%>ha{-`US#Bq
zoJnj+l=|tND!`HFIb_!;C{}BO33m#spJOfA=X?AIU75I)<>;f(8bcHQeQu2?E}%5z
z<gXcP3&x9_qIGTJe%n4mJb{aw*%+1zZ$;wkFY0_Eh|(T?kulu<0y%kS(1DNWr8_V+
z+?m2DLIehrZtsd!Z**~sA+`^8WqA%YXRd@GI%{3lW!d4;HoYN(<9m}5erHcbiH}Sc
zgs#w62ZdYK&b+nK=JN%Mj#(QB>3L9ZdKf%VDOF;Z@yXO6&nzA|*M{7?ZsK9!U~ru~
z5A-afs`28?#QC(q0tG(X_KF8Bshr!#n5$?xM|}@InvKFeY$nz}<7X}M)V}PRK$3YX
zC5aWu%8E`Oi5!X<Nt&IDTJl7L`i|_C)+fdbeHLm>%*`qqoSf)|^N&~8wXg9@q6gt@
zqDx;N&k?*qvf`~<n^+mwY79>LTW<ZcErB!TzLfl1=G#lv?0PlB)59Td%KlqqY^m{T
zitnP|ed2CPn?xeE6rM8A<4lKgo2m&zn)CVR#ZA84s0mIul5!8+=!LmjMePzU8uvU1
z!t@?yH!SMIYguPjUYf9nw@CcVR;%SgR#ok7t_hwj-Hi`f1CrrA{*z?k5Ke*_f-mp3
z0LVUd&e;DGl+xwTcL<n}^?24)rG*!{9%mhI&Pvao01)?r=nA=|tBT9_DqVaQ3&yBW
z_?gXz)Di1<uA%Lx&C_!q+ZpDab({%U8%N(V^>lrAA}?ym&suC|9NWj8y6%-&xWpZG
zYmf_O)r+8?F_Db;)-^T~Q7U~t;e?9&u`fh#{^0kgCt>|=7$-x)kr@qYa}MNaM;-?j
zpd~(h&a0Dg=M#ZxhaSop=5b3>(bTmEl~Ygko({G!D7kp^XE`C4t6gF$)Gnf>H;|~G
zv*B)ILmk0sYg-a=)Cq|d=S7XC^?`reQfb&GHcs|PjdUq<UCP~iStdGL(7`iHc_%C&
z>gw6%fXt-0=(WeT(f`6I>{b!Z$a4aBNpoJ;%e#Hp(x3n1)Y^8nMp}*n(Cbys9iW2Y
zCe&plUlYm+fw#y613yzc3-I6BZrmw1_zK*?1ZVT@u(SL_7ful=H<X?I1rsoKBK5TE
zeu7Tbq{E&`!_^omD&zJ1*>Qw((E!bOQ(#-)V{huD(~QVS)T6JP!FD5a3BCSul?*}N
z9_mXEZ+|WRV2~0jeUaH><L%KBrnTO;b)y9!W*si|G>RFy_^@eoV+>qildW#~_0xS<
z&aqJaxN)X&K;;K-$kA2&xW$~AET6}ZPUF+B*H>9d!QBRV7Z;a;rQ&Pc5G|RgLt2!Q
zChI~hRYk@4GbmBB0$95W;a+>EyWhsbW84+$utg(vR{$QKKSk(!lD?vSoVBQ{Y%OnI
zsl|xjv?VPHS9su4ti~5%S&_rj@6kPn?B7aUso#IST0Y8=x10@A)li5|CGubL^j-|d
zn~aov!uR9~lx>Gj_}+auE%M#3eET9Z$&-4>HAC=m-MPL-cNfuRJNKP_P9B{BM=|3^
z(-WxPl-+LMe-fC*A>eueq0g+glFe;>o5bMi?12&Da(iTH@@APv&!=3is&;TpYoE?T
zC7*X$k3iA3^kWM?&)463dlm6X9+B6GQz-B+j*X=?y2QK``SoV#)~74{3Cmk5C{<25
zQ3O#5)ACGONyS|ESp60@mDT1<PJuC8a8~1y%Mli-+1iQnoeZf{7g>WA+IKjaw<fPN
zlFJ+zY}?uio?1?y%U{`IToXiW`#IsGQrY<K97vflse7`Xq7C=_<kZ6OD$=6HlvbaS
zqW9bW6V9%+6QSAN{g+mzBTG_=)iw0ToQw~7N#)KBI~Uc^<NBF$<O8Mk&V^9!e{MPY
z0yVt@qc1PCFe}&GK(1h1a;D)W_|~CIDCUu{qlIYG_thb@#HLZYsTG1--Eg?IY89I(
z@?UpzaSb3|eICH!K(?zwN$px=S$slz&c~YB`@nV+3M)+}aKCW_{^tc>7EHWlvcSY$
z0A>@SFf13^u%1<+wFzEUO1!OU-0-S?RepN~7vAK?S|li$s#JLE>6{yN2&k@WQOJ-Y
zg^Pxg+TpjfBU-tIU1BL?^<jR520xRu@D`Rz{Uwa(WtE++QbG$`TD_yvNO<B%s7oo+
zYLSvr#u=qtT@KQ0S1<nitGUo#e<8cV^G~Ow2R-{;UsknNbx-&zM9n>t#b_JkKG+;C
z&<xGi3KYsx9<2K`i5kgi49>_w2P$a*9S~G$7$i1c8&^I+-lVDP$-^$Ww)S<*wy<~k
zd}PBsGw&jLYs);@Eq#wSDU&1#ft<bKExE(37D*N5@NvGJ`n7FBKT7lDOK>sid;{eL
zudJ^?f#7P8kZjO9c?U%3WvO}GZ!Z}gc-9nXwD9ogkIXoxmBkgf7~-*=8oJd8$(Ed<
zqsFiZs<zp8?)4aKcIlvko!@$Wc|8-(9i=2NSHSd<^$0oBTp@-FWh$;AQpJEQEtKzD
z4?_1Za5>Zb5UE>k-+5`B8szeZWk+^wbzFYR0Hn<mCnV2)<gQ7@c5UNhSatZ%(HhcI
zoO8W$Q_O8&s}oaizz}xdz7tf6w{G0e9S_Y=MEA8#oMNX)ort%F52m%FQ*xzN^>Cb3
zgLnC9Cs}*4y${01=H_)oKACo#^W*En^u5Xjmobm8JSZ2bRg@mL!)*$HMinKaZ$!Sb
zm$<EtDbD3%^u20o2|s4(1tSCquhxz%m-lqC+Stk#dt`_;7J`)3?kNb=`z3po=B*?-
zT6b`(=?(>|EGBr`?ZgnW9w{+hGyid3IJ*rPmuh|PH2)40L#fZXJW&uj3C#uU2}`3N
zA=c?C0M~*}0%WiVFOYvjC$1Vv`wv3Ftdp+rYOn00@yzYCBT9@#TG!G0kg=?n;;m{w
zAALJQ<+XqvJB$1vlP87xXq);lRzX&zkO`fq=*aTc&>dr!ow5J)%p+sJ;ZYV#hQYuq
zt{ZgJ&DwN!nPSNOath-hT|!fuA6q~@bDf8)o>j^K-;E4-eC83^*_1MxRV)@u%+>T!
z$O*009b^^MU9uxXsID_K)blInN$|S)+!YG9_fC=Yi~Y$$SYE0_Rdf1#K6pfw9B$}X
z)Le5859q@iFDi%A4lWM_(O=L1l%dDti2&y201QD7GYg~CdENgdxAA%=a$lCeTEBZ&
z%H&%0)0tDk-ESz#+?ISoSqF#)`&aX?u1N*yxN}@@9o2>{_6opMc>)#p1WgzX0aXKP
zZ>2Gx1NZ=ql3L*9+vR40wjQA%BybW<l@3*FSf&7|*UQ8F(xCO~G3faTkcF2Sq!!$Y
zatPw+tOz|QGD5OaiRUqJb{I4g*#{}vQo5f4cQ?26Gk3y9BNA&xf3l~Ok*#0A_%J+|
z{ihEDmmZkDut|Ftk(HD{u7c9MC9W>XO-a0&v_SzE8aeOy4OqN2<g3clASxZdoqkY>
zjpO$6FFUcg^mA#W+!sc#^fklo0c^`|kFP%{78wzcB8Tn&W&$~zB>>i8HH!z|=-_}d
zV@=Pe1nDf!_{!%NOHG+mWOO~0v^%@h^G;Mqb+;{M(hDD#G53Y26mmzK(;1M<5dF`h
z!R}U1f)ux8p13(A{Gbk<8GQCn^%r>7Als0SL=x!4&ABEEnl)M^?B=L_dr$VwvZ227
z`a9xhBDS5<yG@b5`vd<{JQns)@|w8mxVpRP;!`E_CD>Lvi>tsl(w*^pDn?cO{PPL4
zf(GZojDZ$R!%?D~UYsx|^y*P@j?BnPIKp~pjm@&x)3)Ucz#9L#C4p8_0(3q}RRqC3
zg22Ic|6q9EC7XnRqVak7w*CtpV&tHe#kBs3IArg9Si^jm7`7pL7nE_4a&`T^;A8zT
zY@G>dJg8~1b+3)S4-i@XAavkR9^j*Au8{dF878Ve<56g1Nrxz>q&N%;%LJV>Mn|I%
z1J5|WoZnqn#6{2|A#IY{Ke>oCLX+>3rO@HM!^$uL)4yAeAy(ryU?m1H@@&?=eN@Ha
z0N0!2BqYi}F`#0+x<6d{7XmPcH{U4%wCB+!o)s0}!`;U|>VthZ)AU2{#C9BkFcWnT
zew+rE*e$YvTbJlwnf&3Fe@OMeev&Bxg!=gI;^1Da(EkHprUV`+Ou5DNzZ<mfIhNmZ
z^+26zb;E7`XW!cYo`y>u1dxt@*js4vzZU)Hv-`^6>sE?|%zFv*Pt^23e*&Z-7gl<f
zd>WAKznA)7pWWpJU;o73<h=Ll{2P+}&%uFb2|?)oKM0>hNl__QEat^%5Wgr2Ra-)I
zNxJV#Ft^wgDD9qwI!6Clf-me+*tWPZ$z`rmLU{F8qE@DeDpgv#D>1L_Da%>V_O)9M
zPz7Lb9#F(+Bq=NZIEaa+8hOG05Q@A*gTFd-(jy>U>QPWm%iqT?!N-hp=T=;7zKm4R
zI3}I_-2^q5`|iR<^rnaH5F7S8SQHD;Fx|4zp65Dv$eDG|N_V$E_}7yCkR9FTHvbVR
z!QcNqFrF~l_Zy1TcK-LkAw{EHfN3?MftB9PUg&s6ZeXB$T6#vPW!&-3Z$X#IB*!5;
z2>(6uy>lcNo6Y$ln48VauSd{*&FB=oz0#$PVkaf8gIC2r1_QY&d19Ic0k27Kt_XRJ
zax>IpcO7a-w(n7*5<lROefP>_MgLNnjG{M9W^=xeFj9eE>g)Uc4nW(5u<flo-ZjE4
zZVquE?!^Sy!)m-)lg>iPw<n8mXX~@LmQohZluh+36c+;=Hhg&9Ji|MnL1R-uxaRfV
zh(6;3uyWAHB^aJ|oe!GVSMF3&{73b?BaP2x#-W1e>u5i=8^-a}`XX9gv*(VVXXG~2
z!v@xq{o>q?`{ZX5<6F>P4Z=Nc4*7d{_m|4vWua?i11~QxKeDA5xB)oAxx6`!jhy{(
zoV_$vX)<j?5P$56#7BRaqVmM|^%;+atx<u}ss}p%^q>S*-=R1)J#|?F+M~Pg34+VZ
zg43$Tx`B@Eu05c@G;jO%F$)LZcD`X2>2Id|jsMVgjsle!k3;s(^_uTRpaowH+jbWw
zt=X|Lb2t8aJ5DC$P^z>@S7KJMbM;wTz`{mg!JD84o`O*~Nh`xHh;?*HEA4^uxaeP&
zNbvDC+cY<qNR!qZZ~1eayW8%hM0q1on%zIOUXMd{SjQ|*0zxoODmk2`5-bJm5bWuB
zU5sLyFMo=il%))ptQo(}-|)|}C4l6md#7)jTN}D9{T9dFVVuAf#z;E+#ABD-!Ix#k
z)l&@5giwRVVL;0j<Q|mw|18GPr>dLDXTU5ScAH<pz`60|p8}5!@@*YlV)V<$iJA6Z
zr5x9y_h{TCH(-!kC0N(L*=>d?7_x8nR<I-Q_2U$bP}gj^+M8!t$?-RhgL7ZcJ5OG)
z#AUl4g=*s=MHoiEfK=LPy_4E)Ze?;tU=J$@2FXm%>jK2;<ku&FVZpcYN<PlXFm|LD
zorM%QyBP3R$TzBPedE~v%E4r5*3kK%J&iy95j)*;B(UVP?dTZ3Mu|O2vyB5p#ET5B
zhU~UlH#VT|P%X~Q+eefK`vBMO?mq6?``S0Sly5z-Tzvh{VvhldNcGlCzxSg^u;lgL
z{s}QE=N8v^ZEv?ZZ(KLrl?eEu4%Peo06z<=Yk@#8qTdwBBu$fRm`z&|O&69IX^>SQ
z48n~3tJt=RI;Gjho1|q)MS=;9zh!WD-)%f#!2(8-A-hjMB^i<zpXgDJA)N!Z0Wg``
zOD66d`}pbeAyf<>PI)mn*YI+i_r-*|KO?N0r+CXXXqX4q{7g*yRS^GMl^(M&13VG4
zG5us_cb=8wK!^=dGY5Tpp@Ml>F1xv(Ob=ygeC7yvpi24&lNU+Rva|ayJ&N;uyg4?_
zA4zPOW1R(l8nD^@Q5|5o-J;^|-EBkc2Q=C2tzAu4TnX6<Ue86PDK4MVPH~)R=xSa!
zn;PQfO=SH;4d2xh3&@*0cV1_RNDIss3H+NL0A;GDzKb&5l^8KVj|Yu!a?W*xK=c@Y
zfQ_T$k~NNvBG|}hNHH0uwTQWT<DBu^o;nhL5|ab+pQZPciaMlE0E!Ec{&R*LsH+IK
zflB-Cqx4CP&<wI~Y$1b}dDeY84k&~OwuNq2gTc-ZYYpf#`M!eNT$x()u6)1wy0}yZ
zYh^j5(mU9l)wDb_je-rfb{911PyM+HA;DGw)Yo0Ee5$!i{Yi*n5*R>#<D|PjEW(FX
zzTW`7dVME@U;)D~l(tOz?C-a2iA&l(c6hV<QesCk`F7CDIOAY*Qc>Y;wb-sbhH#P$
zFt5muU)!B+;0_QQ;i^&4cvlF*>M(vO)S=K-A8mRP)6psKqNm2h)PT$br8_D9X=H5U
z6~C2Khc3AkJuX((5AjBVpV}gB7$9Bjh=u8#QCIdPm}IOWt91Y!RkW+DzB44nbBzSB
zg9|1B9P^}`IwLR>U9BF?CK*=NVI<_fT@|y@jwm21$#OzSTZlEF$OXMhB;Wv8j$(pZ
z6roZKHY!{s$X@Ym@1-^%3-+{H-X6ye$+FBvpuZk}0YRtxd;oJi8DK-^TYAEEImk6|
zJ7LbU?!250ckqzTG<X<M`})IOiKIWd@I(PCZK8fgjXoi6E&Br>^X+`O4>Z7c`eRSc
zLY(DpVBZcss%4=C6z{-Fvm=J88w3)A2Q~{~04-~58x<u2<l!Ce?Tml|BO*}n@ms?2
z-#~i{7T<b-RJS$dtSEYxB1&rs>$;?~U#@UH7v62k{cEP;3=rR$bsHA7hBj{i-AGZ~
zZEhFtLN9ks+qbho9#CMQ^}5gb%2q#NOf2l)e&I0TK6S?8g2$%6Yik6neJD*Va6Gu4
z#?;9?GuGV53cC%H_<|O4-tT-j_P(VsdkNZ<p-Ve-TSDQ}m%1y>PYtOA-+`y`nDB51
zL10~c?qb4ASHf|Fs{tr}JjEtWWPqJnsNy{%yyx#$0pOO)E;JORM_7b1q(%l6hPIoC
zYC1bj7wI8Uv_;Chq3ged1np$#R(>6BG$q*IR90gFTZadbPr(tP@fUO!3ceY_g&)-6
z_{P=rr`iSk35FuQOy;2l_jXp&r1rmxG&}Q4W0%lrBlL9_V~TA;Bn{i=RoI5AD6O|-
zt)1G1`EmVMLd~J0g_sEX2XJ4`FYW^e8q5wj<dFew$N^txsH$c-_c}I6CYUmz?-nOv
z8YN;w715^L|9~I=Hf7{Wri*u`mXSN5U`zuZS;%4fYdkKMq%4hTecR9nC`Rh;1r|Xu
zt#{>iQ3>-i9Smi$AF`D7{O|q4JirBq=Kqyf^!Z##pA>IlU_`bWx{urv94zWWE5Pp7
zlRL|2tsNbQ`Pu%g<#l*Od?oVzz^~ap7Wo9LZ<fz4#qM4bGI|==;iA1>lP=^ezN?Ij
z+eHC61Eo|l%#M9V_c05I8f?<coT@nSvj&ru5!2<#ldzu@?saE6y~yLP?#fFMRbM`5
zURDbnrJcfE7M)WSJ6SFYOw7O3i%|rln^o$bg&u7JiVlpv>*Rhc1Ea6dn|o6gXMR2*
zyreiETx?{{&y32FJ;+pNw|crG{cId~{u0RKBdWfAm*DwD%4KWQ-L}?-sM^vZIt|A0
zj_Zf_Or#6N7J6%H;+Ua{o`H#k#%_;?(OFRX?$FAu!h5+EJX`jGKZ>_iZ{^-J_WM6e
CYXp4&

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/network-storage-architecture.png b/assets/documentation/1.27.0-rc1/images/network-storage-architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..6acbb881ab9de37bffdb0c154ad6ad1e95cf24e2
GIT binary patch
literal 214390
zcmeFZWmr^gyD&@)I*3RqNC`+PrKB`UOR1<Rt+d1-L)U<)NFynYq$u4Tg0z6d(A^B(
zIrCiu-p_va-p~8%dw;$h2g6!x);h1V^IG^mQd1zlL~{uT2ZvZmQT7QA4g`aPbKxTN
z0=ROuZVdYe7yd-y0ZvXQ-4ZwnF@B+BqN<8>8yrJ%F5q6k!N=Z$g9kpy{~qIlV;UTS
zv+FoG&v9x0b*zWW@n84*nBzeH-eUs(Vt*pRFL?UzU;HH8|ALr=_s`uBOcMS-#}_VQ
zAG=ci<|Ft+XruTNj)Ox*j{U_oP3!^W;1QWWePQ=PRYlYgX2tW$2=>~T$H~eD`xK72
zlPEZ}GPZlg=wxMS4HtEixOsMmC^*Jm=Do>yc8i^b#LX9~j~HcOw#JNtJOVs-Zc1Ka
zWMmY#H8K%>A}jy*ad0Ma)6CA!MwFM=(b18|k)H=<Ys!09L_~!54j(TcA2+yz8}4jv
z_sWUe8qRzU<R3V)#&APha~nHzm^C97?yJ`@dpn7nH?a%->*pL#J9Cr&TFDyzmn=Xa
zFZLVWyF7Pz{{<U7DvrG>s%~p;3|7X%m%J-}cISV)_FwCq-~Y%AW(NaYur)VSvbHm}
zwXp>pIeVJ#@6-S1JN_rEC&qA?r9JlHXV&I+lK%ksAD92<Q!+3suqYgk#aQs~n*V<7
z@BQMuSa$sz`_5%^b`=Om@{&03zXUCLsVm6O4+lpYM@jbnQzzV&F~U(gx#)w<1&OU1
zrIy%Z9CF)`kn4&+Suagpfifk1dbk0R``o|6pnL5(+0|>0DXB;UiTuiL+GcW;F_J=k
zNC{>yYhG!QYf-vFZd>IXjF6J4=p9?9li-)&*X^&J=2vl4SGVskW$TA&KGPgf+Lbwd
ztUxcATvOu_w@ougSEFufYU;l|-tH{;TuOwF3>QM$0xc53Oz3E8mbN-i4F36(-{Sn+
zb?1*l)IAh^w8Q}e9+c4&2m2u%N>GMWv0Vxgg7k1c+P3&z@o;3lbizXw|Kb(#(ek8(
z>8c?6AjiDz@#>ytRu2fNG~*TA4EXC<imu+yW0_8iz2RaD2E<ZYl-A6r*n6bXIAC?`
z$3v<~twKAo8ebf|VybWR#U{UKFzG7Md_%1*(N`AiGV*ivS6?dO0vsOIcxvQkJH9R-
z%N($dlW^UO+cIRi0NJ{9=N%I-3ByfK=|IRE$#-An59jj;$tJb<nF#Ll0X&|2J=C*k
z8ao)6eA?I>57A%Lxvu`{nO6%~-s?T#J^L|#HC@N(UZ_)LSkc~l*5KLe9CgqO_(Xv$
z%$}a?lW|nk-0S9fk8p8w1UWq)hC>-cRJ_V^1r04u#OA*kcG~c~<F(f_Ozti&Dr(7l
z)sPCCsOd>j2=4gt^(#}G=Fmkz=qKHz>T2B*>#-PTtHHec<4!ZgLq$p%7*4u4Kj*K7
z1EmZui%eD!7RE<KILz1m*k*{Jj0T>ba1W!RD%?4v2jt~Qfv@3;%y`gQa>bv;CPRS;
z1-iG5gVtjezwKyFgSsLfFYr?fTgTDa)ZyArdR=UjJYHdTKiX+678@Z0bjm_4N6Q{l
za=l>el0425-yenZ!N$ek@)+5s|2|ytq8D@Ma9YW4o?jUCB_SPTt%H8lrQ~Ar^qj-%
z6bb#a6&dxGwV=7!g!QQ}1ui6%@zJWq?*bZ3ki_2LcHGBmPP(#mODEUW;;1;MX<ysX
zx6Q4S_1=Z6KZSsd>#lqC|IlprCXwXWA9GCP(k|iBtk8}pirbEV>^U$y?6nHL^UiAm
zXxSI8koRPl*^WQ&nc?YJ$irXrLP+yul6nSWSOw7{RNU?;6bfeZNxi-4Bw@cwL2@@!
zz4et3J)7uqFjh$iS&~vP=*?h6%Q^z%>b%>p2{&HtqNk@fl{(pIptW7C+uI=oy5erE
z7DT4#FI}u~C-s+L;Nh$me_)zg0-1E(wQqgJCV#l$omH~Tak69URZSJX@Ckdni2!Q;
z#`3ba!ka;0ofq7bqtl%Hrkz(;Gh4}b_9iIeF23Vx-J*_t!Uh-@e(m0n9OE2b#Etq8
zTRn@yuHy7!Ipro&=_H8Py<9>6Hz#7t-%{9wgoMUXsm@(C6;gZo!L19D`yxx@)vgE3
zNFXoV9|R><BW$&YzhSe%h!evSx0)d&QfT*&0z-W4s!YicFVN8A_Ahim>8-sU1{$=u
z%SzsT=4qj-p&Vq#>?zGkFkOKR7(K{{$ln$iSBM*NIzHq__VuwWBqD0=RSTehb1?&+
zWm4G4AGBW6)M3ib&i1Mjqmo3$AASx>$GuY*>UT~4PHOU(Ru(*{?A1?jh)knQK`avx
z49$~AEI<q1usvEUHc4%&ji=&;$LU;<KOv^O_oxPQx^9{<tIdylB>?b>MNv8tdJ@0x
zrhv@RrB&;X?flp}ibrRX?-);Zc`uS%L<YyJhhUnf{*lY21Ct&I@G)AxAvYkTir=M0
z24aXm@THY<ilm(0u-~Iyn$Toe-V94Tk=^mFfndFdmm@)uhOEMau6QxwQJlf)mAh7r
zpU8x{^{Sj`^&E%}<nKUk*ypCqVfom$v()=5TE4*=V(SACGa~D*SPzl8(yAjPzS&5T
ztbS$h1LZ=+%uIt1Nv&yXDC<l1-rd#qWCB32)}v2GxVVt-Y>zsNP29geU32>mo1D5a
zyy4jYOtaM!7ypubd>7Wr`UuU&oaQ1l{g4q~?>Lyo(+qcfSH%;3cYmRoSUv13JL*Sn
zO^i98<!#HYcQ|;gL}m)nNM9}CBX4B9md_d;@jT{}F%j^yMR|`}$?>31pC<KL{H|ig
zI7misNS)jopePDDurU8~pX;1@OFYqnscspP2%j4+iY1mq(-X!gEuWbO#8NN`8!)4x
zE4cD^1|J8_;sM;5A9X@ME~kd1JbmJ6@%!O2xiByou19UfCY?>S%t7~FXHiTg(%*qG
zRO>Enwev1K*N;WW%@X56UQ;X%6=tZ!2q>BSj=5Hr-AdhWGur)C2Bu$Ox1^m<AMlBs
zDQ|z=bz+5O7K(U1`e(~7=J44IdEnZ|uXV%cHk%oE)um4DoGJovI}dF~ljZ!a8`>m+
zGhOA>uzin%*ME&;Pm6!Ss&=fxK6Z(vx;4?w{rh^^+nJNtGbp4j%t`j?$oQ|_MTJ4c
zRwn&Mxb*dtsTcvo4ZElQlGl~Rx}axKYKR~vHkRMs_<+*DbiLOBnLSk7^4t)xQ=nu~
z@g7zelfGD}!k#8dopxF&o8H^z)tQ`dI9kf^uQ><si!gvj@HQN^-p*UQ;{J#FcU~#{
zc%8FzwU*bJ_T`=Do@AGsDCr3mK-hp@6?@0T)XGN93bo08iASS<AJA(Hm90j02yNxo
zmvdD2F{}e0I9Hf>nuVZfKSNLs>b3??q{vp5neyp$L8^V}_Q+z>0Z<8f8AE|m%0sX6
zzpMXr`E!dU&^i;1SG3ru_fb0B;x`Xfd}mm(<eC6Fenx7IfJ%q4Q(PXc%0<hSXV`q@
ztvqe((JqQVcXgzcY8NL8iA2`z7iT<Yk5hT*v|2n+RmI9}<&jcSBDA!)NV+hgJwJyD
zFg}LtOth?3uJe#co#aJ{WUL&ENeJeOZc|q;S{c>f1Ilw<(}?9dE`*$m)E*-9u28yX
z3s4(<u{kuj44LJAzhdA^u{z<cZ;@vhatp=B$5XvAd{1kaY`fsV<{05f1Q~ZhaUV`o
z)h^DZy6&&pHV_N9gfPieSshY7&(WbiKno7&Fdwg$>eu8x-Q`D&heirfy+)rLZl&?M
z-zs!LzBFx(HceRaXsrB&rxo=k{%H9}u1k5J=)lYJUn6zz%<%#Y?qoMA@&e)NNh{nD
zKUz#FaM^vso87tVJ088mzR<sRMoNxgAZI}`MF;TiM#hL&Lj}gRAQrWwa%&UL0<zte
zeh|uJnt~a48IA{=QxO=nF@p~@l>5=57Qf9%ZZ8G@kVwAThUt<<;!!vv0$3^5KWpka
zr+pAnwvJpYU%0{hHdYw67x^+zpHU~{P5cl0+*6TKejl|VRmV1)04Ya)lMd3=r%Z!P
zNzB*nWXq4W@?Xn6rtbZ-wdT01+f}Y~Nl7ghmCAe_x<uYB`V`gkXixz)+AZ{)n0!*J
zH|eL}-Ao;erccqV-^JFeG&&{rbq*UC&>_xmD#pha1Pa<?1TAJiQ0aw?SXZj<9L+S*
z!aBCBgofBc*0uQWY;_%ej$6`cbUK`{$gQ5uYq+wFe3_>?sgF5|8g-m-x1IK7AC7H(
zKdX|xUW-A$PyJ~0R9hPLG+Vpar;}J~U$h-QYCry)%mCsoV*KpQL+biR-*uKIv`eky
zM_t#e3v8x-c32#4&GqE!OHoU@IhoMV(AOvRa*(c2atOSuUmG2X76S&)HNa6mt;O&6
zWb^n0y<gikT2F;ecSt%Aqb+9MDy==WG7*?8GVlFaS!n%Px(3+lY$ANbBrI$}8Wtl2
zIi$ts=40Y~2|+I)&<Z;w)(?y!J9t}>+SZ?8?kMf#Z7%YjTS@kBBIWm%#88uV$=72n
zfDUWf7_-HaT{gy}JUF6I7iU_Cg9n`)4b(;|+;EmHno{=;GIBy6F3fcy(C~RCy8%7d
z?8R>?@5b;Bf%lAuAKNw;r@I?#Sq7CMxt?=j&=vzZ5wWnEp%L@aF^4di$9Al3Grgmc
zH7?RIUaQTSBfd0P&37(Qt^U}Pzyh+RYvB@z=#-f95fj^k!?X28*UDx_pN(rU=9%}h
z9S(JQM81oA&g(CF`FPr&x3gp2v5DHWWp_Y7(YZxo_etI7P>v+~AIN;`?g~wmfn&TQ
zKg1zuaEH9z%sKey5rHGbdzU)f_QLLixt~P5SL1)QFvP?ZAzU=O<)x~tmnu*>BgLOt
zISEF|E~7g>p!6`NT<n@40L(_J7C&h!HmT|n9<vJ*u2Am^lfoQ!&EYc~c!EI54rg>9
zD4(l6>d$q#h}>RK=B=L1E;PuH&aqI<-Rvqqh@0*@0xsHUW3nE2A?@4UJw4NND(sr*
z;|a`Kw&v^l!xZjFvzY{Zj<o}UFqe^@I1#uk!v>jVjbS}=Xv`(EvG4X-Qtwd)ScKGp
z3vA^Kdz0~r?DD3cg?FN)TL<y(?ryY5fX9C2MC$~4Pxx?#0mE@b`e}aN#4)Oaqptae
zYlpUJy(I1`hhb3_{TvNi%*R4itWEGCPZ`op^VXV$DuQ|ZqSQfsN8k0KHpAt<%;-%1
z(JqhzPx5S8XJRRVbxLJCkVGc#<6pT~SKC(b3vVIbF=3I^U^VbhQo9x!?N`yaV!^t<
z(LiFFVEz4CVCO_H63GT~`^dY7O)Z1@hWyMbr-+UP(MY}P;yc|kAg8YCuvqFzi&omT
zzrwgmExB6M>-VrwsL9+-l<a#`rn*9pKk;cZ->aVxk=;HG{-ySa8zsz-f;`c*+fuv2
zIv1lTgeS7AKn-vk7PrG(#(cfzcx;_bB2zw9o&DxSg}nt^_V6UUl{Knm%4eO1G#id~
zKk7}4^rc{L8>mIw=gO!uB&ER{$X2d(lU;V9EgSJ&K9K}5nPe!|;@Fn*j7i6B_cVbr
z2Vk@`ax-?d28k8u?ZYd-?CR#i?2j%Jui4SObTmp4#2d;H9BY!I$92k+%D8yLDG9he
ze}Wy7WnRQ#yY1mzl&NjzHhSsPM<SlGq%0j2#Yc~w6b9q@MM8z0HqP8nH3BC~>WH>c
z8Zq11mJXK^%u<aDQxcr^z`L_LHD!4xZ5wB4^}*wJ^PA05=(qE}ic_Z(pf36o6*PQ2
zJW#{Np6F)l6xD*loK9f4S65ec_b{#M9ybG?Fa8YuPOQ}oLQ6JU+=4#K{%&yb&JPy5
zq4H0!irgNwr}wn>1l=ty?4ajH%zjpQzLGaQ`8Dv>+=bPE-YYp}4@Ni56~5A5k=W^$
zZb+=uo!Fm1AVii@!(?es1r`qz4N5&hZ0~!OZht2bF@LrCxulLojD}u*ItaszrgQ@_
zq8v?9p*CF-`<HJtmZlFRD@Sr|mRzP0Xwf#Q*YmO*h>32J%1Cp1zwKk}h(PWSnKEE*
zw?`7i+59BrbKSFaUe3(m6X|Eih=vWdyG|UBhuY?(EZGS(j=*Z^4{G$B7UcqJ?^|w8
z|B4pbw0qZ+5-cg2SDPb#FzLOekJ;6aCi6y<2=Y{O*t)*keK9Qkf@5*90dvxY=@88b
zktA$o$f??D>v)q%><LQb9fbvMVWEoEwQ)AeCv2oShQ(Kq6@%s~FT(jQF&Co3sZ!<w
zxyrXFenUSVDBM{rcbsVo)SGf!lwsJ4EaV1RU#rDQ@8`=$(%HE97mP+CtRkUCwDkr`
z$S0qPa|AUWcR2I67N>veY^NG1PKRIg>xdEL%q>6us+Kr~*jlf@cyV}YY|N=tg>j_V
zB%R==xh$cIWLov`n(XID>X3MGJj^BohA9zqvQRx@ol~*=y#xQY%g*BG1#Mlao{tjr
zoAa;(S}Bhzw@rWjj#2rM?(UHCU(Y#{5hpVY(a@rseKYiS-S@q;9fe`zaplA>eS|9S
z(@yU|l1ne6QqzVhvQp3jJcwWOYwL)Cj}Ih*#G=d6<zUP`hejVSQ-_uxIBm7E^D{Gy
z5s_Kp^mRS7g6=XT8bfq&vkgy~KiM63R(xraqPkVS9$=toJ@i!EIKTi(-hB5RllXT;
z-?zv0-g%KOUY5+)>8@t`Q**=Wa=k57@h@dwQkvB&tQd%Kam^h!o(&2gxQWax*pUN?
z0jfCNWF#{LA7Q*iK}5Jj(S0EY-YL@De$W=di5~`YWw`pH43$&KSNgl6QZ-gc)dLu}
z-(H{N`nbe)+1vQp{T^lBh%S%4!ZqvYk#9x!yBX}>!K`rXyw`F|r<dd0hFz0`1qR0b
zK>>Wc^*PwBag2MRQjKP9Txj}aO%7JuuaIOhF1RQ~?*1^elRKp}y6iqJ6(O{d`;O&c
zo^<$B#k~zCPG1n_WnTLwn-KoF@=fN7NTXOyP~-qRP85w@QI$i81m<Mhi(^MTE&eHb
zGAI&jVkfcH#`N5|>U%`O-^_JHx5kNo1w;<i5+`^ZneYFI-rt~bvQKe{9CP0v^Eyq=
zGP_Z{t*+lp2Un?o>?W#^OIt+o;V~lTWA*xw{2eo0OIXlq+slJ>T97f^p7>TirB%2E
ztS+(oisherK9@ig>>yUsy~1tXb;4guXT{V@I?CdAytB)`bN5<XXS0lUh<?GNRL}7@
zDPiV79jZ^%$!$v)Tn0Ydqc4b`db>3RQ0wyOjjmhF&0@UQI>pv^tWW<ub{AzxqP0t%
zFqPb<b`;#mp%N5@y*jvfW3ct*;VKM)vg*0`-pt#mB#Bwf?!jB(MKkI6h7eEbI6U{`
zJz@o_Z~hGo1qqjNGirbj;`2*R&jbz_{drUL`>4Bt++D(UK`p(RW0XE7#$4t27q17|
zVy2@)dnKHtq8a;@*ksXTwXS^8z>gy+{Wi11!cI|T>zc#)4hpCBvY9J?Zi$^Z`kUb!
z<P(2&x$pGrnx>H+mA>2C@p3}@r!_()6<&|u<-8wTUxQvi@HE)xWB4N}*hvqLoAgat
zc+yzDC4+jRrd>PJLbbZm>X+X&-L;Rsol^AgXU2z~|9QZ+)d+o`D`;O<)ftVPR{x3#
zeu;62T&3#vo1&dKkT<bQn14>Yy+b*^aRMo4De~&j&oncPe=bn|?#4Qi{=vKb{PFQ0
zDKr9$Ee+h-B}S3Eh$HB>+x;2Q)16-UTJkpDp~8bj!>(<D>fZzLq|ex&_KT1KrMpF%
zW6@y$Hm><*&H?0lJ!xWE>)pHWzHTvJ|5-~SL8b4$+wWD&uO_kEw_%;7eVcS`l6c@(
zq{)b%<p)d+A?DOjj;&Re1r(Bwcb`pbX{_sv0R7^}e_dgZnx|LEU4m6@HgzP$2~W87
zj&y>2ZmI(5zAVj)D1l3)*42`<?_FAC&~$NK&Gp#*p~AMiB#ljl;@tO!2>7clhYIQ>
zv4x3&#K=P@hCrFbd8(W*$sOfUFb0f9kN|xQ`vOU`rP5Z(;R1J`-c>xjx0j4EE%49D
zc|ick;mj!iyac^a{mW!+v^-j6(agEpO3+QOJwoQxuxjwnR<IPhjO#@nBSl)!>~UX)
zWCXRdW}BHaeSZ#oZ|>4BU~)d@<~Be_=*`Nfc}*%EE-c$Isf%yE-xqX;zIUPMVIsXz
zKRGM<h$=&-eo*HEx~6q&KRBP7dFmIDO?G)Z*P6xe1`;WqowWO69eU1l*AC}+5x012
z4qls#EcgH5Cz-R$-R7q~Of1H7#_9w<!B5TG$M`z?3iUR`4iewVE`UIvbO^<BJxy#B
zbJ;P2C0Y_q`G5K<<6|<you{guy1QrKu9bK}_)2_gAMvpARbw@V>hA7|T+E*ZYr3^h
z4;&>1+?3W9rX1--6r~x}ytwSGl6Zo)Uo>7z^b9iS7HuV-(i3zPTi+uBiH;qlQmDq<
zFd-<ic5m2%f4hg0oWs7TYNTZzaN<hg6NPrv>aU>(nJIIE>T70){GIohwfp2?z5Z0y
zy3Qcw8h7*|VMr*S8w7RXE}-Z+>NSerO8o*pV#4U~xH%y%G)xg#frGK%v6coV-rO`b
zVWCS3<K_%%H@=Jg&hSK+<;=R#U%DC%l(dka0M(l%Oy09hH*n+Kv|*Ujo~RlYQHIYo
zJ5$%Onez6Hx`{>P;NbP8X$9sT%>9M&WmIkd3*K)(!xBuDKdq(6#FfG(#^+`%M=Dmr
zO}%SP*}AOVK)Yj)=+3)(G+$7hjQpLI<gG;Znd{uS3#$_+^TN@Gh*O0AqD%ueks_F<
z8I8CUX?YDAY+$oR{mtL%xA5VEI(eY)m66{ubi=#7J*8&&A)Q^vpyfI0FUue>kFbf}
z$0d4B)O}!TzZn@NLO-|ftL}Ca?wZw<nu3Gb@R4enZ4HCVuQ0@CFq7LsJTaN&Lp9$J
z-ML!DZO1M2++_<1t}Y{X_ZP^y1n%cOk13}){Hadas~2Kp;WX*_HR2vj|B~GA+n`m;
zN_x+cQX}|Fgz6L8XCQyqO=|-c9~IjXDJkYEqiD|)1&ZZ97Ib+)#f^Awp>x~F4|HZz
z2VJMSVv{^O|8iuXk5hTCff=*j*YZulHBf*vZ{H!6ctb~TSKn7?@(zbxmEvLMNAtdn
zP4wwHg37T*JRYL}D{j5^Gwd#kTl51BrfBQWNZROR)07Zi#RwI*7K>=DdQDQp7x)L8
z3PBHqp>fW7KK<FC!OIQw3KqX>EJH7>lJ*_?78U+s*txm+L;v*qO67XZ-+n0cIu<$e
z4;cf$L@(xDsJ6&?G?TbCFgltAi<Z6^!}&SKkp|QAY+P>PIp>Ay)BURL&h`%DR1kaJ
z<jda)jhc5=ji>*ZQb!zx&ALK;*5IHrT#Tg}C36|Rw-Bt%{)D&hAR{bs;nMKP*Tc88
zH1?gf!EUq6<qlnzn7z_k?ll<|yC=J#O1-;|cKZa{l#C&2pbrCSul_=Ic}>{f?=u7D
zpc$J*I)>S;kL%j0$+?$33}2F};w?Cv(}Xwy{ZOt%?vT9s<Kt;HRv~yN@OjzfE*w);
zZrB_|y#CYW5@btiS%3h?C_m40ui%)rRmgHMWLsHPRh7@U?dm$*eL7K$WoTqkyW7WR
z)P6vBoKhlEJ9>%Xq?rLxwLfGSEHN*U*#f?I0yTi#e(SZJ<oZM*_u=())mYnAp4^(F
z?<d=dn5*s^pK3s;4TI}To)3FKgC^km-JjmwpyeTxRTWr6;Fwxj*^2QgujD?_>o7aq
zaBM&Uzn6ID)jL^tVro7Xx3YJrD18s-q$${Rqp$7h?m)YFM!bB3{(T7tEX<CpV0Lt1
zp}Oz#QrT^L{`a_mZn+0;?ZGczJd#GYF4yre3(XR3F6o)XUms{qk)2>D(jkufc)IU~
zixtGK!LjyuOd21Q05Eo>w$n+N6DVx-9i%#|5}oIxy`&CymE?}9ZMx;<PdgYiofvfY
zyC_oOQ1nRcsrEeC;*`5Sn0Ry;c8{&5$Oqm&NHuiSAIJ9YAw9PyfqQ$5qDc;lbS$<j
za{Kzotf=bPot|5tLlz8^n!cvY5fOldX~D{U40K;UIFPuZJNUa=z>H+kN(?ly_#J5$
zzq#XK2XCHZz-v)DW@pA5x-@&yTGyUB9FDDfL^&&FRH{zcC$)ogkiQ(*ZPoAL&6Xs}
zVCH8;qkFO6r+Fj_MK7&`jKgJ~a`Hj`A|2vL;43Yx>TcnWag*cTMD)|5Cp1zXZu7_y
z=k0mlprh@J^m7@B$KH}VGoZ6%Gr#w0EQjhzl#Z?M;wQXS)*hm)C_R^38+D|Z{f73K
zl3?JaY*E>zCX!m^w#M_3CaV&E9_DH0>O~(CC%W&wT>l~Z`ca~b%DM29LO@kjZ`I<@
zr!{W1W2?|!3kC&UE?+oO=1hObL>%UbY3V5}8xuVS0WZ)=R11ymL=+Vj8Toh8a<6;5
z==ktqd`%2Kud@Hcw)_4?Um+IT*j$C5SQZ%+;|#?7(zRGV+<ZsG)1s5IJW1t#x{g8T
zVtZ43)}!~9CTbD$UvIz{IwKs%otuwWzisc=>`UB;ne$Dx@M@~Hi*S5dF0oOEZ#-ON
z?v>!JLzZBVd>Q>v!RNY#cl?FwXG;20N$RlP!yU=(=&tutZCNO@I*-$%)?CD?1&rsu
zyJ#MUuzrnd_h)1E#@o^l6ZS^QdR3z~4aCvoWZ7K1?;h$8{T!&-6BGeOT%mg-b}R<;
zqyoAK{U`#TH<DQR;E05W2AMf_MTlzYb-9W*$4f0riZ0|J-n*9k*%H-H5K1@iCflUa
zbNWi>Jo_2_O_r8=HyDA?@uGLg0jWixy4WTt^Qm<09!CXL0QOq2Ct&EZn$xCuwSDtI
z8=o`}+xD4mdoDI)XA`6ct0Z<4&6Cp~dayoT&3_zBC&D+<Y^m&p6NtFQF>6D4S~|OI
zI<>ojM(@JAB!uCA@*GyRV1=00`{VMa_Y*}^WkPo|-9-@zdiM?*tSeU|sdG-syWG{-
zRAXi_-`cm>B{zLLTB@|I%jM>~5)-5Q`f9@@>0}omJyCj$RwE_c+iy#Xmdx(cN0(vH
z$L$~m<9u0W^HuZJ(Tq5lj`5Z9EOFPKO*wEO$zZ_ywT$fYk?=byH_Y+Ge(t<3vQs>s
zD&*YdUG~~2Hg=NGzg>>($mrcI%+$zeJ09P!>2Q9Ov0#(yb?UktZ{-r`hVAt0At-t{
zrDyanwd?udR+e7B7VDlZ4)8B&(eF+8(9ToIRfqwdR9S_KMa9L&G^Y*|?)x29m5-Ul
zW<z9T^+liDXO|mLh$Er9cZWi=D?y^#Y^~<l8YVLFZv3?ynEaSH{2}ud-7Ig)E~P>J
zPzb(pSfhtD1*v-eqW>AT1{t8alN@DHw%IjN|AHeD+p!=1fSn$JAq_`e@qFcAe+BX>
zteW73!ZGR)4qDa88bOP8nl7q85-CU@;nH9Z=%1<@bSK?U&b9R(XUhuoJM!aPd_S#n
z`$iPoCU#uE2Ys)=^?qP`E}ZQ0p`C+!I@Rs8kCx0Q%7OmtOjs<waE9z*O95^kd^mz2
zRXh=h{m|~<^52pC6K*iZbo8$c1zFjpD`#E^8;U%o=OAV$KjOIWVn>H(6Af0v#(vi>
zv%}DXLoly8-zs1bAzl5foQePM=|8vrJ)I=%K3I61_dl+lpL*)z3806bCCpy<i^!Rk
z{Od#Avq>uW9l^Qn{OjuZ=?Zz$W>?M@i|~J3)d|3LzRLA?E5l#h|3Nnj5bqGdUXGpM
z{12#LcufJ|rWk<f-~ajw2e%Tiqwt4#EAc<1|2L`<0Nfh{V37acuAZL`vVxeTJEvs*
zAD}`=Hvrsiju+>S^M7Df#{)EA<+i%5_kSnjF9+EHT!s4o64}4s<N#Q2s_7g``=4lm
zhy%Fdmni=uLV3!7^_6X5qyLE(#{VZ$Ec5@LNY8EL|Bsahj+6gydwEnKt)Sq;HIyei
zpB>HakK_&w91&_uUyU__qfE>#V4Na)H6T^~1EHa%Nz>HeH8;2ZEID@E@(rD0G@A65
zFL@oBnXA5jAWVZvKJ^$R`X8q3<tc5U{X@KF_HA^vO^Nu<u*}xZR)(?mNJ*V!7Vvqi
z1Qo&#QQkf`xSE3`pQi^z-}DK-rxQaH`zA5(b{b=UAY!NO>5^vCE7BGw>0Fg7*M*ov
zq;Wf=3AwI@hTjGUnYXR^EIjMte!*v(Os&I5^viUSFkP6mpVCddCCYAjXRB`m18If4
z5grmptvgD+a~<BD;jPT<+QDJpo1|QfvoI22_mv?%<D7;{cSDIA2=1BE=y|e83F5`^
zYiRTt3E<+b(yvB0)wG-Fv+?G*+{L|hlMu{}zk3P|>+d((M-RMbqL}@8i^_xspLUt{
zVIbe131zt%hH5@vG;!!XkcFgHYo-%HX-U5&<1BRCehue<ye6HDqsG7an344UWXS?7
z%zv#?k+P=v&d>3iqFSX2aP=kRpeoHWZQ9qb_m|@^V0`}QrI*@L_}-p_`MOycy_J{|
zYLA;>VWh9=M16cq>9F&3;xj|SflPD_W~Ys<;6lFk$bmwx3bBVO9l6&f!qjZd^ala5
z{?clIVIt-SIJh$qKqeSJ-<!hQ9_WaoMnp4_aJezU9=h&Yey*uLQl5zP==q_*oAHNN
z0`5EaVM+!<&Y0H_9Sh$^{w{dc>oSz*9B(;ZaLeL*(OXPFY*&cB#35(&;Z!uAL-%0T
zadg?AHY|5lPHu(H3tZ~v3~PGA-laq_85dnd&Ljafq5?-_AF`oOpG?Ly=X~B?7tz-m
z(Js6pudqkFR9ks@t+Y}=*uJZRgqBP?X%BDs`b2ITVxE;xtEALAtRJP>_T8S7pBca5
zR$mj^S5q~dGhLTyf&Q)Dfg$ri_M4Lw&8C(KMqhbGMxZpF-q#?v+3G|JUl+*+NcRKM
zp9jX^r>Ph;Ac<}F7&;@RYIhd0L<SyvH24IBqpL4I)TJ-oGLd`Dj7Lb>-E>qPhiGWH
z5FBC;%Z*6;LFq_M{4Efze~8kYof=?>q*bfEf3&w4J4ts<Ek+QluUC02_oV9}xPW{P
z)*iD8oCTF$<&YibjT~^~0a|msc}Az?B2z~cM(E)~-J7sAB$q1*JtzM0mE|pJS`Ze+
zajmKtx=kO=7dtf2IJ+OZ4b>RBGBOVnZuESQnnm-D@-iO<LfuSy{5G)*e%XODXG5>@
zhBWC#Pe&YF0M>fX^lXEd%C*Tj^Ea)Z*HWP!x_33x(JtSs%9nogDA9<T@lxkEk9RhR
zt+<h!MO`k$^$I66OYx{3KQ(Uk8!$eMG4>j@Fs+-74x1bAn&70^|8o7HBm7zlEoL#|
z?wqN-C>e)7qiQwZoCO&^o-QyO2f<fFcqNx?I*W>pS~Xb-il){VQ9+dMW<gSY1O4ri
z4b5WPN5q>j6KY%t*VXQ((`uhJ=4zL{NCIX3&q1A6c%z2Fe7TW%LGrZ`zCm>qMFVA#
zEi!VzvLU}%bAEEuhmUR~kB_w+DtoP4kNQ+N2ZL;=Uyb-9`VIt$b+GPil&7={KqS3%
zrPbLEca^c13^DbwHr-m4&pgrF?7&~GH39m9DJk&u2&Rw1L3E2gKwZk_S0R!YLYG(b
zO-&6BbMjj^dPGNReKd^S(_pEFUS*%$Yg?>!J}q4*vCh3r?CEhWviEkK2!A%KdJP%a
z$tMDjB2b3DC$M{XIev!M%_@^*_nyrPQ_pk&&Q0Lnj=(068YHe3)qywinwF{A*sCW{
zy}Ps_wl2n(IaoqJNnazdT#3lM$>39<;|WinBT(5R<#^%=H~DO^l5h#v{X6Wyny-3r
z0uc~&WUlrBH(D0QYXwj1qKfVEI~)8YB(;{~m#YD1`ktCdX)c%Kf>*NJ_EbHHd5Eh{
zq<6lD6$TCG0jdwSfSM=P2?pyjAF-$-x<^j-Xa$v)o%4JWKNv%va3-ZJ6stie@UrZE
zkWA^26q<7(%ZZYGtMLRv?jM->B!m@h{?k?pyiKT0XF&7k7af#eYE5e55M75}DvM9~
zj!k&Bs5hxRUlDkP6D>MxpgwNcX=wSF>Arq&Cw((mkD9_mEtSk`_|jkxr-rs%khM3k
z2ik|9#esVRjwxc7b#Ioa<DmVrxfP6<<!Rz_I~@X-{5h$#L53%iSW5x$kVz}*3u%BE
z*1q2-lAFsiQsW8jw6Vy9KK%lu(%ToxJO+KL5BRtHTjVt##M%`t<ZLj7@6~vjzKBYF
zm-tg2*ctW;H(pE=bqUd3F}t?_+lM`zEg-|15zAJoOfsormgf?1-XB<B$pbP4lD{aj
z;Q5jPcl9Nik?9$^*}7R2@YftRMJ5Z8HDs<U^n*>8K!zHkDved9lc|w?ckLo;C0j)|
zY!FaFAA&u-p_~S`xhl5LlwS4#{bZ|tugHMcdKJLzuw{A{K~{G9VZ?Y!n+X5&x`bWU
zV)h2MGy^3)R%HOux3o%GL|7^S2cuaqc8auktyFi4HQ5deQt$YJC>8eNb}At*98wU^
zZ*TXsM}hAPv&zG;n>Ir$?RZK{{e^ND_UNzvMN(ZFbvaw?gh{9LKuY<iZ8FxFm42$f
z7hp8V@yx8|oA(Rb(gJeMN|S7suXFRVT<9QxaVwrEUf7;%y)Q^G&y~Q84T3f;Q!?@w
zkT0=WeKPbt>PohDQIOIbMY|dOvbk`*=u~uoA{AciwLAHmY~?YjT&-9<bwpE%aruF3
zig~P-T43izn^=B#WA4Upi8REzmzNbt2XOEnLyFeAMH?A@+6Q0?wRqV}uvBYd1nx<K
zy6X#)(=b?EBr_5O(l<(QI>-tLBjyO|3_+i4t888Qf-4|&^!4|rMZ9+dyELisv>eUo
zr%7DcgOGwsmwl~Hh)TcoaE3J|l9)fJyNuiGV%+hFHA0CT2qLwIksJDj8|cu=7V~a7
z!43VbvaE>;$-IV1k9wm0I-fJ_2teoh6Y{Rs0LxvLf-`xbpDI$|&0oS|mLqU0_XEI8
z>l<7JvVwKIu%UDb(?Y7wE2N9zPkyV8;g7t)GR%*xTa@KwGT25}L&Ys(RQU5*l2g#)
zOY3EK=}RAHSSR_-fixfmu4h4@qLk(V#!+rGXkAbzlPhsm(PKjI6d!elPa0r-C;;;?
zF5*D#CN1VCcN$2Sk{5j`yzB_Eka9wqO6RbUG(*+_M_vHSc=6u8mq1ihbarV@{bIqN
z(lmX8_-j~wyXs}5n`|G56j37bwFImR|ET>W?4zO!h)0*fSL8Vs9W4ZzvWy(0XnG&S
zLVfj18LadP&rqP?rrdh~tWjBr>$8>B2%hg!e~RXR0BiwFm(5&?tjF6^0xx~1ZID?_
z?KWV0Vb9OT;D5ZgRmWkK;5OdS8%wir>p<1Ns*wgY1NixYZ7p;d(_$?(9jtv7AKkLi
z0eWyJO|uCd%INc!5V$7gP$#f49XLRKuAddHcp$00#8RsO@2V5!1O=kB2;P(^tIk3=
zg`>`dst(ZD4?ttf{9?dEb>Vu{4=;Ir1L~UcFdyvCzsd=4dvSM9y`ZkiiWa{Wg&gG0
z>%<!Tqaf)rHNpXrxkmZ{M~Z<1Dr+X<(xj${x6}7=fE?eW!foQi)UMfDeV0Dir$xKR
z#_;w8;^4KCLI-Y5iLz5?vRs2+r5r4B*D%QVcr?lF;ze?1PJUO<Zpdg^yj|crO#@__
zIz`#%$3c1v51J|uHov_`#q~*tJm!S_tex0cAMsNOC4`WEi$2FjQ2F{r`6NZJ-`TPF
z6J};+(5yn>@u1<%q&XTt?bSryHt&u#3Zg$~D>iU{dutqrWmNn*KT<V5=)~S8MW22|
zOr+2IWA{1p0eyd1)~O_aTZsVg1Htg{2%cEKlI~x*(s|j$ljp$Oe8qCs*>W~{M<38w
z-w))RX#~ad(m56E@waD(pL%Vq3!fYd3F@cPg6-{0=cw>KQM&!N98L<6{uiMSsHfpT
z8yOSN={c-vH-)mOGM*e0V`{=8^?Cqo6QFW{xrWcJ6}iuQ154KwfgD}@-^Kl_ck=Iz
z0n%L1EZB4*$8PvMujK!|aQ7uk+T^_}cmKhEEY3e^dN$QMN%&%$eE+Lu;MEB2K8V5w
zhW`W@+KBCiRV6fj{P*Slxl{Tz=tC&0JPslK4}ftY)7Jo2dg`ySHuk?3X1t3R=&M9X
z_#c`oex&zY20!;ymY41aMj>msa$!1PZyBKarT}`A^M6qQDuD|-*BPVeJn{wlgq_S0
zuYYOSq8lc5kT1c#pc_W~^rfd>^lfkWy)!fnvGtL*9Sa>6tE7i`?17?8-5VJ`5=Q&p
z#x`B`1upH&x6|G=Fow9{%A;9p1G1Eus`-#tS*g!({gwwD<RyFx39KYMui>$;OJplc
zE~A#`W~(#WV0u;g?WUH}jM;eN8_e0P`rd8}sEEw_w)em;d937ofme+lOlEp@c1B2c
z&tL=1S7h9kl^H!RfbJK;kdaDH>SEDmeX7c+pR3YOUhj3zy*tt%zry_>OMcc1d~@5T
zZBaJ`T~cfn7OP*=uiO<f_OXS@wQ4}y6xXW=jQFDV^ra)V)N@rLl0+__VY>;OLLl!0
zzB3Ja^vX+b%%$~@EBze(T)yypOFR*#OM8F-F=H_4{fU!XmAhcwbF=fr%loDWGsgOD
za}>tR%}@G~rwHcVjjU&ib^4ocay#g^F*g%O_h+J0K>n#Ns%{K&My#%cH~^P#jv)v^
zV43dq0FU9ibDV&%fOF+osZ(T@lj(;J-R)2nx*~m(V=@_b<-~c(g15)=Fe%J~uBHUr
zRYIw4A>I9x-Gb%#e%tx?>g{D7hQ`5qm9B}^#rE-4TgV?<`@%QEYPl=AM%MH{iAf?x
zxtJg204tfhv~~IpuiV9Wv`H#Zn%Az){G?YeyjtsH>u|P3e1>TDtuN^h#2V@Kzs_um
zoC^gcUSSj1H;4f09|%t9jZtwQ%QK#%Ik(eZ`ZH|MU}#XZatqznyZur|fsYt2^A&U{
zuJgy+&P<Mxgx?61sIpr7>3QRH?$fI<eqQ>om<e@V)@*vQ(O~}dx6M?a;;up3t|o2f
zsz}%9y#T8CQ+~zk%$__!T$^<~<CmwjhgbgT-e>otz)c4igI3F>#g&#UsiK`%BI}dX
z$;1d6HHQn)vu{q?S0;}Wh1TQ<*;n0@0~YypOgfJIiX2N8P9BbK&WV#UfRY^8J5+Jy
zNdgY2Z4NiB&Lpq{Qb85<mth)bXFZUUg@=Jt9;QW!v_d5{@#QI&Tip$OvGO}NcqlHa
zg_K+9+d1AksM(5tX1fZn4W~j@anP2)S_A|V1eRqFHzXOhYJR|R6RP%=YzHjroi9|=
zyAi!@Uht2RgWM$As0(g+y7IzL`m0`aNsth))@p<=O%WCAh|S8zKB$CZW^zM6R(#x0
z@Y*e#A(A}{Mt}=s*qTrJHPso0Pl<rGv~Mz}J6-S>=7~H+Q8}S1Y%tRo@ljJvKkIzH
zMhpmZh4TJBLhy}H-~XoZaB25@=dR;it;cQ6Qxwh8%F0g7S2(`IkM;R%Q|(V;HI~f=
zv>-V%JMm9$lw>7(&pB)fW<RsmxdD|o=5$>j^EjVe-1=M_$E0B`_PDbe@$tmCUe_zP
zqMFYuP~`b^5O4FVLF^kVApBAR-PTnc{3|%=$;IlRa6Q%PDyx0&m^toBqF`=>PRYvP
zbWU4-LolWLb%pSa8TOoz(vq48`vEE5G7a?Ryi|49&aJxUdv6y2-=fxExP6qC1ZKar
zwDIyK-cDQiujZ&TJAc9gk^s36s?X2P9#Y;j-f10ow7)u@#ajQ^<LH%z>ksi|@rVK9
zG1^Mg`9Avrcr_~QoxZLx??7|(s&KWN^5pj8nu{MHk~UZ(=%i54tIWWu-_=^t4hIS%
z_covZj3_^B-C4HLDtdOt;`NHVVb-%gtjZm=ygb|TN})xeIRQD>Uzu52n#l8BVc??V
zX!+KxAA6zI6-(E*tI7q{R+XhzFWMi$M5;&~-KGv+DkNRUy>ak3fby7<^^r<$$I}I}
z6`E1KXfZ0Z;Cg=YUUC^l^&6wNJ8iOoys+s*(z7t(6$1P#DfGvgF+$%%)W%)knEAJ8
zUP15kj1*X1A3$UUEQx7RT03!%G)G(gD9P$PjK+BX790OO-!$Km{;Jwm82yVrQHmJ&
zgDl_=e);7iSiE$q`G#uZKo{u|AibJH?-!j$u1fep!CaWt`ASCE&W`Gbzh^7tX5W59
zWp+|HwiAjTtuJRFBKiG-I)ma852Xf&OZv5~-k5DgHUQC41tr>pd>EMbb?&`DF3_wo
zy6qr~4S9;?fRb<wPK)FjNAG(z?1`&f*jZd(E%g|287gy6DNV3=l?qd<Aqf!I^VnP|
z?itQ!My+|fUg@lmsLEG|Gr)TNesfmMZGbJQA7)JHy|4k7Q{La5nXsFa!q+$cJTQ=U
zMxQ{>4>`C%R0zWpbKl=&Xo3GoB(ZESu^l7iH$L&)H<EnwHi6u&XxnZac(s<2A1c?&
z^pUIRKxUU<(!gfocH!D39tY=Ou^OI>2Kab#ATiK{P*%!QBx$n6P`I8Ah8VG)@^3D1
zNN{2AI>-9NjQhA6r%-M{-$sUh8Elg)cT;^pYH{=^_Q&RWp2P%igZ5r%T5RM}&dY{O
zLp4H6gkkSiT?K-5?cn5XVSsc#n7v%%Y(f(dEJoZ?Y`pSU9KaWB$(#p!##&EFx`MAY
z^&?9)zxG|*KTzJ#*$O#1_R^1Ril2}I5j2@($;l8tATQ?bvY|O~jG6tZP|G|rTx##D
zr9i4S;yM6rTwTrH+9*({Tv@ON(Lz{noQy**sV1CvlOAGA7(T)|6RhcKY)eo|#X7K1
zQH@Qfr`xGW63?kl0)g|8{yefhdcipQ*kL_+F%TijI~m5AaEWeqwwt>VO)^n=T)(wF
zlN*V3<Sq+L%rr5yF>{Nr6xyCOqh(zjP*bZO3-2n8R*}WyE+rqzX4)MtmoSma0e8*u
zaE0P!60nVuAcyrAz$cZ~mrm{_+rbvsMk*}w`>^PYM36_GOSuK~L-;F+w9i}usSUvu
z8e7kmAq#cKXL>LAHOD))Lx^Dt6F*Novun{w>cmJ9NBD>Q)BVq=3_Z?$w;i7HrCCfw
zt@}#umNzpmp}>jNn=uxwr^w;J8<`2>B^BWWZ}hdC`UhXftz?>{O44k~t>?okF%Dii
z@DlSSQxsSqjSG1?Ia}@R=skAqvIF*KP8zl^w1|m~zt!YFTeM-ScsG|oXo;hCs(OFR
zn%Y51XK}@`(_KH5ctp4?wxFh&ULWb5N9Oejuj7!4%x~-xQDZ+Rzw_eP@%kdo`6DXp
z4P*n6HE&xay*9s0PO)Z7d{_Ng>6vWcy>(*e7<m9^>_HrP&WjeFJ8!!o>)xwYBgT6@
zKGnP5h_Xe6CwdfqAu4m5Xg#zxxO2yOP^H;Xyegt%8zH3o_u7T4Z(*Fa6Kz+wYsmu(
zAAwNupm_!k*#gtBD0QDMKk`q7nkJ>zmBv95NeYNRdeJt&vZ^^!jsy34qLw0-N}@{F
zc+7G;<bvIWpX92<ZI(AL{M}My3Dl-A^K7~fa-gKTok~gS(MQw6bLwc>ojH=~iruYT
zlgLD^!=gnC>0n&GiuLiHjLg!iVypNLePMl}V|fyX!`DH?AVAFAv6N3r0`82!caZ5j
z@Y|2m21&3ElW`R+(u*cy#GJ`TiPFgeyy}vR-NpVZf@fMO7(BCd3+1-}*ycw8$2k+6
zGO#YKCm}}oXD%0ffZVc43jdNX%RJSmN-AKQTNw%J=Pdn}AU(QJRyOk^0RsN<!rupa
znCp5ydNq)<SO0<VZ+SVRF)-=0th!d7a|xYW^qKY8HK~BuaF;!J5zLUSYBPB}_=5ks
zlYj2Qb{v<gH8ChtzAR%iwr%AJz2}sGnuv(&H38C!z*s<ZP`Y-GX6Ukf#hE7du#@hK
z@T?v5Xx^L!Z=?afMB_Pf9VllJ`is@PpinT%qy*JS|1X%@{LGr1ub3p9MG2InAcbGW
zdz&~j9n|H3*uuW|d4?v7Dp)2p0=m?Ci`0=9n^>vbWB6<S#$IJzZ{Id+8eh5culrNA
zJTH2rRvfg7|1XNc3cmq6hIA^hFH4@=@4xe^AIqz=C&M412LJhA0RJ!pi;zL7w4sbm
z$q%)u`|=J^_sV6GD$dK@r^13m!SXZu4pb#K&vTJ~@PEPB{UcM8kqW#O;bjlnk2qeo
z=XLNc_O-H_*s`Wt8zS>E0>PXB3KCG0Yn<2QcHcuRGziXX@;<lE)*ys^Jg;F}6<IT-
zlk%jM;mQUXdqE}t$2Nq(=sOzCCSUMMdk@&Xi>=p1pS2Wc;!RD!4)(3y)F^_tN?Byi
zmorKYeaiUgMUwiyq*uH{(dz%zLSKHD;o6`%m@)m|q`$80{tTX2adByDPzkb5=!~&X
zAVoZXM1O&HUl3^bakKx^MaaH(wOI}aSL~ec`OHzXH@VN*5Knn=3;Z*K2(t4o37-P%
zbI3H+^*@g9?O-c6J~@H;)L*2ZfQNmNf?5kK+$?8sALgp`c<`lO#Dx>6EJfVa{1UFI
z4H{y_zeH}}Enz#n2?c60YTzySxyi2=FBVk1>OJ}^s#{>kt1OBp8y-qY9(B{jICPH!
z46z284IbtONKDVB_5d%!$*pn%P1OVdUE0TyaSUQdgVIPLOFgO=rUXEBIpi31qTZuo
zo=j&oI+71y$8)TH(f7!trLo9-Eh7Dd9V>jldJGzV`2d{%HA74)kqR|GYe?g7ZK2jZ
zq}AU(*e|FVeX_kT=!4OKK9~;ZgC)Lxul=xrJF^%vGYB+3N4kuMa6oW=J|H~fCF6<M
z6-;NZr3~0Smt=R|$9otY4ZHb>)~i8*j_1^6hltK?_bB2o*Iomz{a1^Vck~J18aYA~
zbeIbvD$5afl_UF*T7bxGWzQLAgGA85KW+=B^A!*j!cJH5ul_)0hj(^%{*^Ds-xjP^
zvzcyKV@L~jCK!64!K4a$tp-nW1BQB1YlZ=}Ke#(LN%KJCKK;}<4oR2b+#T(eg`&tF
zsIC^u3&gf38T~ww^jba#GG#%Vi07y|St0ZvP7PEdL9+tbv;kVVD?RMO5tNg0FU?;~
zD=_L}{ra<U^Y+!*&tb+tLkPVrd3B5Lowx2tfh-)&#**z-p2&c%=~d3r*MQ0=hzF@e
zUb94?mmB8x_{kRm5E_*@v7O3t0PHun*pnNolVH$$!J+R~I@0<D#eenG12()Rf7&b8
ztPe~VHl88opNQWqTc>u07#9KP`~zSSeXQ1y9xyZF*PV-R8eNXlF}x5!Xmq+ex1Cm<
zBJr2b*nhSCr$ppV6WL#h<Od@BD6B=&G}#EHsCzs;U*fUtwS8e#c@uUMz`DhHUzGF?
z(7W_<V}-U9BGATZNn_WeIrzCpKY|_Qfv&SshV+lH)!j~IhM7FK1&fGnbjkJ`xE=&j
zl+!KRz~JFDO(KViWbu&|222f`O}t_*!+407zSqX0A9<DSF%UPo@&^GXgCHPoc$;5%
zB(F^q+O%cUFo;C9$n7`Z%WAz?XQ(-aQ*&#c(5d8HRf3HkuV^kor*i3%a<h}fdKG%A
zDgmwsyT@zA!jcN65YTMSll!R9rQ?f<ENd9?TkXEq*v{}RsW78-8CN|a5ngx6sDyO;
z^ed}rL-SQo=r`<mBK!tk8mPp%<hXSw{t!h3cD75vmMe4MxHF8TAmgP~jIZk;=?YK(
zm@ZvI#pNz1WcBB+-g^P4SxTbNj>JrrUATTYO0gQPGh0>kbwhBWxWSpMhbhV48%c&v
z0&367_8zd{7GpIZ+eyIpD0%mgz1ItA*NR5AlQAbn!t>7-(jrQqH)2N1(UIHZOI6S%
ziaX_+Z0>1tK{H^AKpmATv1v9l{$OD)$i%7sr9)TjQ4UJ9?Y`8&sU70M5y%_Tb30n|
zTL$kN&iR>ZLO4W4#b)Q^coi)cBWvo^vaa(c4fy!SN9k!SPkw&#z-K#6IDViuF3KUD
zY=yF0^gilBHZx!wX|}Qo)E9Q5Aqz&#2e+OH1;)lN7Qb3IUr6(|ERJH+@4oRxuoGpx
zkVYjSYKkA|dF8>wcVMV>>lRzVOD3R+*WL+o4cn`^B--l@mzDl>zDDyqDG}vSQR|^z
ztFGt+DlfZm{_+kUn{l#*R`cU{%7Z+6g&$S3I<wn2AvpemoG$xc5>W4its@g8z~0DS
zI|0Ul*fcS=!&ogUvv|NyDYLP!_MdLme>&R)a47OCQO!zoz?pLAL292Kb-bU(f@Sw1
zwcRXZy)`Z^uw5P|TTOGUiBPIJoD3hP(d+Yy@UGtDWL@0fIi?{g<&U^&*69c)M;gyl
zi)`_P<2<|r=&#e2r;x<By_(_=z{#R>Reg<w4{vv(Rxi=%F5vc&?LaCaJK~x4UPwY9
z+>c0lHUefE%vI3g5A%4wnfh#`zt|ReNHq<0xtkLB>2iCJ41e@nFq#Zg(S2eZ3N$_J
zA!kj|va=fORnINnX(&x_lja-d*L3ELL2Y2lkOg+?#j<vnD(IJEi1ynPxLq%h=TIGY
zbt3#kaPV)>=PV|XuMU2nH6X1XvCQATiG4GDruYg}_{3cI>p41x0G$XdI$CpS&lFJR
z4f>;0bXrTOJj;ZcImQ>1mdg?OS!OM2fk1JP&>DH4{>R|0Q;m&};ae0bo90y!*I6HX
zEPwj?6mTxBZBs&<Kz@goY2O2_w=|HV&*<+GJ3&O0Fm<aA_Zq+EPRZ!xV0PQA42<1m
zIiPLuIsfx`B2CPy4{W#pUxRQ#VE=~0T|bI;ma7PX1wYuPh@d>KoQPSkdVDL2`AgRN
zFz}9Cx=#$h0|sd*=N#CfI4;ot?$$feWOkRC$=)&ZRU~|s@d9An^iz?A@{-D^VY0aG
z8ndoE&N2kE9a+Va%d1}}?)fpY(!pS<LFD^2ySB`S@nJtAe2Q);DEvaz+MfzDc$E1B
z9rR++qVRqkh`6MZ8{jKdINg&KVa)1dSeY5U!1c7i>yN~h^@wYE`I_kkuNxEC02lV6
zO2m?N#X4_Oj}rdgb%MY_!4;$JkXj{*=ki#}v?-1Uj<ftHD)%LudhM3_%gXx<oQijp
zCU<YMKUesTqVt3lf`NSrnsxwzno5G7n2#B}X-J%JE^Crf6{zO>ZeZH2VO~5x+e<`k
zWybR5mH|9BAe!~T_b_bi&Sa%fuZX<&=V?lVipG!TKQm+<petgo7yWs9n9!_whysI_
zjmp5W@GB7u!_*cyS)1I*D;3K5+^LqZu2mW8=P*m$Y29BoCLBjYZ{D(4oA+=FxjT`E
z)<%|}o*_kY(fxZal8_C&3)AHfhK4a<hsnt=v*v;zw(j!l->G+u>Q-y}uLdu?DA{jo
zOp)b+t^lW0-u^S4mA?AMfJ}aJ#p335L563X)W>f-RpdoNF8zPRy=7dL&GQE=$D@EK
zk|Nz9D2Q|)=`IOrlrAahJSbAqA|>6Rpi<JH(%oHB($Wpj9>Cvy-{Svy^SpRIzBzbZ
z*Y3>hcV=g2W_R<U&lg_vw3Q3F@7E+qJ`#Eq`F-*7C2eh1)p++URJ9`0Pv(|shD%;=
zLT=QyZH@g*bxGZD&fDPr>O{O!j&7x0#*_Ed3!T+(5lOR_DAFwj^=FmZQE|@6tF3XH
z-6Rr%faBqQZrCEEn`9+a=Ap-M-PK~%*(HH@_dML^+u^QXDjrlg7d8AMr$nTH6;)O7
z27Ds)QGaGu<t{Hp$fck!EbHujvwHd9N`b23=&+eV)*}g{oOf)_pzOnkXh5DTvaz-w
z^Cy@F^U?g)2n)z_hxBAO9i2xy>lO#&03PfknM!ivtDVH&(LSn|i8!xwN^FJ~KO3hA
zP%V#lnzu6o`P4K^DFKkNjC^jkG-NzL4PjSOg0-vFvQ}@|Y>&4)?McaMV5r+yUgcS3
z;$gBF2*BD5Vn0Gp+J^89sT=%L5~bC)D8Z3dAIzm~=<b;QnwYh3RR6H7GteV@b-PJ(
zV}Q-(m~T$X%;guC!?Qf;;Mw>GsV6HBzKpMQjr5G}dgU`;X7F!O;xIbli;H9*VdG&U
zR{0QKV#>Qu!uGRL<DF`IrjBk^_BF6xUf5zV=q-&%_Ruvz8)C4nEnpBnfl-3!>NCJ~
ziG}omuvjx5PfU`}MqE-`PVhz-8sSlZNy<i7UHOML2GfqIARFzvF@7wzl&dTCT;0`z
zl#PCP9RVk5b1h-R@l`U6rK=QbyM15ZoAfQpx>bB~mYChBdnMXw*6}QGG&QMGfq;M@
zwQVn0o)4}vS6b!P;46;&-g20{?1MUmR2(w@G+IU611%2YC{D_N_2svF=2|XgcO7lX
z)3oL3$B4P(ay#woD=SiD>^Wz$`$H_2J7di2uivH=;00wqZYT3=H1tTH@W*%O2)Y=i
zB%}6nDUbc510FJI)&cQ@4Y`bF`MKM<KfR@yvCBXn#cEC@vjQyZ3z;q}>Q({Ew9)KX
z5$=5$Nn69auq?@~-af9I;Q=+R@5h+iirG+~FHeT@<&t>7-oy=NBm?h`p-E~Q1qy8&
zIJv$z@IAP3nQ4SEvb9oLTXXB_#KtdwcJ`m$g{W*eKdZ#1UpR0EKF{eBAqwi6zRowF
zqZ+p-l+is=wr(+ZTtr-hB)L~rn^A}nbzk30lXFHen%|_f`|-GZ0F}~VR3Gbc7EZ+j
z+>;8WrAr!dPu3s6>eq1513wI>m35~SrB*}B?%g{wcr^adoAUYg<4+a=1%^)9a;Z%D
zj~WqiZRvVEOghA(W$-0i;KVY2+ujF<6LFKDE3bvKTozl)<DPQ6CzaWfjHS;_p*(3E
zUevE(dB~pRjBv4yT0=1!s1pMr37iwy(f#KYlP#=QbH}r_C|-U?WnGNgK}qVym#cbW
z_mbFQ<;O?_PTCq%zC(EURZ!hItYX~`iYN^T4%&EsN=NhB*x&|h#tNzR?#^K$M(OtE
z7?Im{Vo@4Xb9O7H?8i3mpw}K%wsKaJgw7gqle-LKU29%1Q_)hBRB7f7VEYK;WMb?j
zx-^0{x1DB@C&0w;uH@OZs}?Q8JNJzobtg$y9p3eQb>OtTMfG6|{T+*$7KCWr5Xs_h
zM?V{BsVJgEqeYuj!?227BVO(JwYk|85}6;J%bfk9cn!X0@?3MnlVP4vhlorQUlK}}
zw{#s9pUQ|>H_4(OIQxTzl?Xbi^%vGO<7aKYCj^o`A13>MMr4t@-|^`q38j0Okcta-
zcVI`d)GqETx1~gj;sy<x9AX=3qx*5<!6s1#DP`dWTTS0h#57Ta!Qv5L<j#`=VLnT4
zYz?V5uLN4-S27NE@E>#LD+KFs(ro*xfkA6Y6!w83AzAQp+HZb}?!P&W+|}7hjwqRM
zGMjBowhPdoDhm8;QpQ56yExmh5roT0MJk5l_`F`y>64pKO@)iY>b(U1&E_jRwhjXw
zo%9^VqOtm>LoTv!LvQTUVG0&PpI5emR7z@EiOBx*Rmzn8;4teKb&bB2l&O_t0!WgD
zif>*|Js#ejn*-$%d7&K!7LEZ}MHWGy`*YojZZU@^ZZ~!87B}a<k}_EZvf%R(C1df2
zhhD#Wh>;x65x{lRw8-v+F3>|E*z!`^yu|c76KB*g_hD#(^+Q6!O_9tG)x`-Xh2^{J
ztyi!=DRWQPXK0e&8@)EpoE~~K6IeezTjf!#TVDFDIOzBl5wr2rRJTD?xa2iqbL%X9
ztZY0EP-vFVxGnBb#27I{JeV-O5NxJD9{OOpgYqzTosr3OoXTSubJ>1Oj&#>#UMsI%
zfJ#XUqy$fEf&4)&kXpGKTb1=u(Oz4(a~zldwU<J#h$(zt^JZ0Rm+`x2TYUJLBX4YK
z{+0=cSu$DP)fFTZZ4IALZX-fUhmaKK`KjD%KE!d$HV0ikGaD%xxMPEZQ#%2quL}}Z
zSWSzKO?-*Sc_`$QVcDQALv*w0rHE;9<zZ)l!QML873_|34V`GGrWUV*5+2R9CX4mr
zIrsV8S+}Z%Hwg{Zv;0mwpo|u*WIq6H3|C(FsMwhLY%Vp4{OmP8w}PQ;C7sO=fwkSV
z^`0)DYbye&bC;r>OgA^IYfuKyHb}suuF!0a^4PqNY&rVyj(h2sSO1HARelB!^=;!+
zM`YHmw|p+bQIeF3=1VVOPLTPE$r4_UO5*%#-_cjX{?=pZ9MgMSc_Krq4qYVg=$;h6
zTDiioPq+3F1hEj&xn7Lhoh(C68<v**cVg{vNYwI7`i@q#*7Q@S#rWJ)8wOBMBXIC*
zC`3J$?+aK(V>ONgKY(riK1^?vHTq|y8}-a)o92T(<laTkP<p2z%Y~J4&!MV8LFq6^
znL)0>seGlE2;F2~=LsALbR`ArF=0GYXO%iGeC7_X7&~(GvgKhu-wN^w3h>6U<S6!>
zRp?FP!Thm;V9%78Ux3?L2r%;{EM;TUnYa~?jkjb)IohgyZe~5wGPIw)BD!SO++v(u
zu5!!&a5!AG@zYIrnZ82Ngh$6IF2uN79ZNp2+ACn64JR|QFNIZ4qJ)Bd^U}sdw$Y4c
z#=1rG2IuyH>Y-Gd+d_7OH3^^NNyEWsa4sZ5K83e9oA6~Y*fhCTgKb*NdDd5Q!J0|o
z@?2}C;?ij_Q(g+*zDn#irXe#o)K@$c+pfc;cf88dWwnT$y0@LRetdAEmFu#6l6vp!
zB^-{tqgeInZz8O`rQ=h?a7hp_SG}Y5<DR6h`D%rJ6+b0~$J~DZsx|#2el+bpP*b(y
zX1VgJpQYkKH_6^xbCdDH(P8rXuO{D;1%#=@aLf@$!hw<uQ%Lu=Yt{3-)mwXxI!=b^
z@75c<*LQlE#1GoqSlm2%)cTkAoq7`M`Aph(L`LI|&IKA>%`Ai-B82=pZ-1?w&?RQm
zd`Ww2$_56~JE{9{(h~UrZ9;f^U=01Z<4S1*vWMXjgsau*yK~%zj*wOb%Z^}10bVEJ
z6p69x>ZHxjYPV74v(1_q;^nZ_XJw6I+uVxJv>));sIR(jpmwTO*p9t-Xp80c78RS0
z4zMQ{4bG{jJ&O_RdQ~eUyQ$H%?|V?cTa#=ay+21zI(}QAqJU}R9+aM{x}oY?4VJ|k
zM2E=Me{-=f=O>eCicai?<F+Ef@un``Yk`!Xdh6#KnN06l)$9iIv^v%zTm0(YFuZfa
z!<m<l@qaLTo>;G1=T<=9*t;>EH@0Ipc<;vx(d;lfbT3bk=Oq<*@g1e$`Qn{OY2KXd
zd9IJ+x4CS4P?h;;kk9IJ$k5?O2Z3+%MdNOZDTPjTOwC(^%>jsTauk)--tk<+<mH_l
z$FQo3@eF<XM|w&l(U)<UfHJHZx~6zRShl&8X;kNLjim33mW<6ubZR7=9hHX?MQ2qD
zpKBr+Jy4~dcP8Q^IVZRq8beUps3oRFkA3hu`*Bx0KA(*H{rM&TTDk9_$P1Pu#^vnF
zVGqALXT4M`T`B(R`6`~v$Rvv0iqDJv;2V~PXSo$5J?K^Tolp(*D)9oLoUn&e{Zl{J
z{?~O!RY@_g^I@+|Pom!^+7p4eJIuK}(`KLQrCy?Z2V1LjG{e4Q$5#IW6*GKdIy7$d
zoYA|*+ea^52k{NW&!Y3y&*3S^t4tgu`>ieC^5{eH+%n(R<<*m)kML*Mc)Irb#G8}1
zXgf!#taVn%1J&tcHuad14Z$}##TFJMqy75zWxAe)f&2?igo=MxHsv}A-wOR;e!b^o
z+Yh~K2I2fnk;^CEkEf^~0N4ZUo8Gai^VOS?YpWFtewF?>JP9n22?WmNMhGQ{D{FQC
zaxynFm{s-0#HBnh_3r%M8iSqy#fE@m%DbZeQ0m&6NQ}&M&|`1U>|+sBX&V|G5BmkX
z2X?_i{`=awamXAycA_}P;+2Ktw6@D%?a%ssjmv2_Fu6XBS`~uoCR!JU94I!`?RbuY
z0h;?st8^s?QKXF{;kl7huZVECTvUmya_{nOsg&$b;CJO^QLpa|V8Yd}0sWV93(}I;
z{m8O2J|499X@q_6DgLNgu-AdnaFUA~$6oe^@s3l*;agfJgUe4(i`hKcAkO3)ue+_c
zvFE-DTZ+)11x$kL#LmaT5Q(opPDNO(pQBFB2wgMQ1LN)NhtK&!8vde1*-ZD{zB8{Y
z7;$dJf!t#))1j!gyNg7PaF0|4%ew<}E|=A;<Urr^eWG1t9j#8B_5E>Z;Y`aL<RvC+
zm)Aec<we?kh`nZ5QN`jsDb`kSJAuTh9AP`GJWjWepIMjtLY|=>hHtR5o<lb!s!6R0
zE^Q@KNgB`h302PX4!n3(MW?=Wy5UYY){}k0&AR1|%}>v@(9h|>@UtF@{CG-xD(V0z
zcN&Z0v*+ke5C{zrm(kO#&{=UvTwEvpFY(Y%*cY=$x`>?L)msD-XU6e&{tZwCcZ4Pf
z5oTf69oJII-t7hHt-PThM5j5yf4y}!;n5>ZGqo}L#XW(I*uK1TI>eMGVXDrlbpD_-
zg*OAV3J^P`FMjklvHtP_qN=aNK&Yt+$9Kr((d?7m(}I!TnJ19$s(~ov5##R|S&?V(
z&V%IEAu??HER}dRqQ9wI0xh+VeWo@#GdE|7b(+VLhb6N7m~wX-vP2T+mqiqD_}wGG
z`g;wc6Ud)M%+(j0kyZ1evBBm-{?nRg8YB*LqxKsurQj!xABb{A&Crm<FVJM!A%gxj
zU&PVN|0N1TJO*@k8Z`fhrSo6P*uLCWFS$;#Rj7#Q3_-EZ)2r0n7aBmc7e)bWjH0C1
z^M5gQ%9$su_e!$Ba`A%1lqbq}#9Mb?3oFVXy;4_w6st#m_Rc>Ydo}{@qBWgU&yC){
zI%~q3FsU+FTQj%}xME2R5r1j|iBmB9)s;M_@gEVKwg&qFJO(LO%uv|BnmA)U^UWo>
zgAZ@+uF)V05mMhk=l_t%*`H+pC&Tx}$o9M47h4)}?ub+)_Lts#A;JP(Sje<$rMsgD
zGF^X=Q;2|SA9eK_0}Y1V*eic(Pv1Y_fyIQeH56)1=f@<86(t0yA_Cd(->~`jfK@*S
zqae-nu<OqxGUD*u=c0#(ardt%3)9<6MS(#@Wxxo#h-W|?OcO}CmRf>W89T8!&9sLI
z<v+0asO_0?q^|QltDP*+BkKfp01d;gOU30%1OA_!p`>a7Vhc_n4FZ2Yx^oL)CpD=4
zD1BG;sePZxAxqhz_-PI41^IA+p=y@+hWv-vKw7K}HXZ6wBorcG242Z8GG1=IeN(l#
z*u3!~CI5Hf?p4(1_M%eearbekV{lxke`mV=WXKk#hV*#IFfX9+5(E|Oa%OsRMbPHo
z!ap4luw5r~?r_Sas+R#L2qy=K`I8OSMRE{&(1@r~<}!FFd9jfuNT}E`^PEnE)T?i`
z=kxO;HaIs>i`JOS7YOnkM5u+9dn$i0>^n01j2}Gsk2cNmeD^<!$8VV(Fx8A5cJ3Nk
z4u-K@fIcvyZxDsD>!g<k#s0t-St~?gl|b)WHtUIGOB+w1hhZdX)}Jq(enXZ4xCVO?
z$+94Jyie|Ai3pvQB>a!0DQI&0Uj2KII$TE7Hc(Ynf3rp%o*8Ube9QCo1>Rr_2u(eb
z19xBiuYt2)T?`m@6DYRFX*(QGo!bC{DxeY<aCQnBE?^Rxk-i!J*#gK<lC3ug9NcM0
zN&^y9Q~$_r6mUnyf>CSzqH(nb^AlbMjr9czJrxiWR+t9ubrC<BT5SmgHcY4mou6X+
z?tj@HKo=LjfLu@5SA^|-3=bi?Koh7hndUlKxV@)Zp*Si2fA)${lMphX?pR8<sSxSt
z|5~YR1`MZZQrlzYVqH#kbA&#NN(lF2W$I<x6=rgw|EZ2Bw;6$<n!F;uZi^<oT+v8;
zIpGgeJ-~>u^(3@q*XaKXg5oe)+HsUHlLqct1Cpq7#l<l$P=e@p4WI%qnDUd7LShi@
zU1fz>q5n$V9!)roDc($>%mbNyE~ri*R*GZBDS-Pq&y2J_=>=Kb1qQbL$5(2z3*!)?
z15DZM&g7#F05X=U>y76{&wsqAhOj_QUq$~EGKTnz)3I9Us(wgv50o^we-$j`lal^y
z>Vg_BaN%uVa4JC67b-+G$RDHi8bIZv_|@dwss&Vz2=zI{d5`PMZIV-XN&ojD6aRdo
zh*)ndct9@wF+^k`+VITFVz>7q$Hsl<xiZ$;H?gRW{@~^8&uI(*QsnEge@rxByNo;h
zr`$o|xEImT9e{|q8B@Dl$I{Z?TB+H82sr;mCW@Hzzf)!FqXNuGsANn0aj*l7?TX`&
zC0ikv$~^%09B=OW(?ZbyA{DG~uK_S9BSj1S$q(4Bf@t7Dv$s+$m`HV8-+l)Nf?Z??
zmW<FQCF_tVI*6Sjo&m@9pW7%B6Jb4jKNcPL^&d*viz8M9jd$@BabLiCBsBCmaTG4}
z40a}f@nj0E6->UscOn78JS$T&6I}+O6W~cADJB1vF)~yH%9C)!FJB<KM;N$t?-W`D
zbi#j3CNd-N4z`agsd`GN<Se#!Ug)!06Ue#+R4i!2JdGfDmwxE|fgwNMIa0ZUnf|Al
zfVo$<h#DF1VpvbxPx=o0uc+-Gx!+d;<!wS}LHZXq*TD9GgGhU%*H*Ru!7qs&(BE4Z
zm-0tB)tR*9tpQ2&vMop#hy|9vbM8>e6dmjs+(YQj>bDG39NkPi2%0z5e>E8lCX51M
z;q^a-WCB05Z4~38A6k7Eo_RAspUhuvM$*&)`0mBcUetf^fA;5l#IYvXKd3GqrXv3u
z*27Z=tm<p}0~!gSh*S|*P5y+*+5Ghz)(a>-%5(RL{xGg&S0J4U+s(bk*WA%n3`6S#
z7y=@sOCSmi)(#%$5t4rd4SvM}Z02XNHlkg?01h>VT?fk4vHw$pIVj*NGVv?for~xO
zi2n|BQRiLEckc`67d`b}808KEXTNJVBBmZE13~|5C_TN*1ErTRNiPiWB?vwkw%zk}
z`@bA)nCTS?FfGI0^c;&yw{r%1q(_p?w=;C$+a21EJ>EU5M*olHy8j5Eh^0AD=|U&4
z>j(`&eI#F7ErY`bY)#(PpF~*y`S@H$a8rZ=-7p9`+X3=#{`_!!xwUYnj<M8Ssp!1`
zsxd<bsMR36+I(s=4^1zEt^}cM#pdE_*CBDt-yh=qA<6A)!WGZn1J7*x80Bs|exS!&
zy!(TH+lwWR*jqM#&&39DcgepE18_xvH3EjW?=o1bx?zSt{0j!*1;9^;><i=I9OwP@
zZQ?8C{D0f{3I*$($hjk$_dmsDg~3oz2!4u<hA8-0#zylfg6)L=c^&*YjRyv`>Sn?P
z9rUb)C?E&^`lu7&0ex!}SSQeo7PWLiyFd$|gsrY>^DQ6OpY9sj7EtypQ6BshIAzqb
z;HB@lsHh+uC%-5t==vx3prLZG`;GMXDO3L%0PzoC$s}XZnL#rJ*0<@I-O-(y5sut;
z4Qv;<89?|M%hb}x|N8t43cziYJ7@)d{#$?uBZ-G$H~u1BB<NQ#%HAT6|6~Q+C4wSM
zvPWx|#Y~=ZesE7Z1qT2NZml%Ug=voLDv<nB7?uC@HR0tNiD&5IfB5L&LKtqIl-f4f
z8)Mm}2*g=GVX8E#|6K_EhVWyc;Q`*E;ulz|7KUd!yzcE~o=fnXk%|#9KAckhm&W}w
z)?iuw+x>L9Wq!f^R8j?QYSjWwKngiVECA;x1uO-uD-><RG2c_eX)cN>(Hzj*L_-C+
z@aVoWaCl<WZBlu%K|8-|rvGsDFCl#c9I?Ew7XNR-@~@LYo|}$b*$Zn4ZcI!Sv{WzU
zu~48W6%Jt?-x=wZAHqaTAOim4xJXA*xFSk8q3IO<H$vXN9OFR>gJFpaI<Mv}pS+VW
zv~?I;S^@tmN8QF_+YJ$?z0SDIjYhl7j@Xi2LPGg2M)tW?p!}!~IqqGP<fTa+HS0%@
ziJ(?_B*-G`o|mAAcVL$w7{7leQewb%`!SuP*#-agzvn+OB+2kQf9eQgCG}&2#1yUP
zue>f7-+f#WvIR12C34N{|848+EBZH=zE)jZzMXyL;#1f>s&Mh1>VBy_1S<IuP<JOY
zjP?Re=k0hR+W861{)1w~Q`iB9xai$mu^yNYL*M^EAv?_Z!k8pjf};DB4UfD{=$!n2
ze+ajOVjNr3_OQY;iwI2#Ab~IbkOllTG@099c!P;jP*#Z(>7@tm*h8h8{|M?oZF*zD
zc2()Pa{p`uaGbb+Dy+r)R$TXG_5x4Y3wFRH^0H&hjf=tn1jru%s(Rf?`!&%%<;&Y@
zNxt}Fd<qER4KW_eDni#@!K}f%xb?v~4DVn)56i#CKHU1_<<oJ60lRvP`!X=#FAp=X
zKpOQ6R6bt2M?kBnOahpU=%?*L`9GNa1dxG;Ci(#Wholfp5}*pR;dvL2n=WZBm?I=h
zszi)*btHT70sUV<0pr00Ad{WAbL(PP@NHTQwGBC}WgRusOK@QF4jC>HL@M2cXTH+N
z$q?zmx%deZiZFm86E}n6Uob1L2Mxn46zw?3`4qGYYkj!e59f|e|I3R29nbGVP)@j2
zJi68YqZ4OCO$3oJ5*TJ|qs{M})TG7+1KwC6G%AQnb^kL#lehR^z97S(0%VE5oQk2q
z=rwyJ!xmHbZ&f=5u0BLzE|4x+SXA=sHOdLJlbBIwaFg2?pQTgK!cb9OzAiM;vqtr&
zlKNi{^3Nb9s~qI30yDWcXC8uPGMykbpZf5QKUis0f(vMNLflT@r9*;;d}6n_%lI%<
zAN7BDYmy;bKBAdE${5*7;zcPS#~2-EI(8qfrc9<lh1RRf?PiEFM3xoaps{KHbo2D9
zH4K!X!kSN<@rn&;P-urP9g@=LmjDDIfiU?O54+O?YX@^@G!L*)D#xMY9z(_UZ_p8#
zU`I5kvtgMvJVGt?7Qs?tGRm(HY00H8ns6SH>A#mD3<zk5k&=?SbmLXmI<*6WXbTi5
zEprT+#ocGNNSG1A=cI-$NNRD@!5i35qF&o~@TBg?5EGg4P3oALEwUEh0hggYzd7gw
z>&5cr_EojGoaLyDeM<3{Y(mv<5n?ZrUhzbx13}?Rk<lHZ1=ZqeSku$g?8HtS-1I$F
z3o`dJ0m|3}s8_m{+|`QNhS%}6@}HU_9Es|>$Ao61iA?n-dY@c^j{GS?wmq-AE9Yd!
zDB>fCW)nQ)#w<0OZSeKP!42Ein5EflOQi=-(SB_cV&XIoMZg9$yRnb?z@g-%Iq+t-
zXUpK4!5<`_&m_!@g%b3M{p#>zB0WrfWeSM#{WmCg2N57`5G2d2!5|9A*KEqNr>WM=
zkK^(DL4FC2E=FdaJ3oAArc97mB8<4w@As(thQb<do9TTFtbKWn*7K^6w*y8muuG;v
zu&Ap-R(EqtMEg}<M49!ec=YL;{o2+DA02u^h|Au;>Ftrsao`x)0<M>t2ZX`>$rIVN
z>C+jNpb&2aeKpKqI$TR~HxUTn)00HZ7!z11-MTQ1F>0l~gPNUp6E5;I#hwHRx-&^2
zHOzf=x~jVzZ5B<b65;w|<xbCV4o)W;jLS%b8WykZUZ6La=zT;;loAkHYln*K1qh7>
zguW>1uX`#Ofq_yvcfbFASkNM@_w@oDmdG3Q=Z}<39<j8tJ^EU81??7Z#*6i*Rc@tB
za{PO#9u2o3$`aKpdJrgmpl9HRl?oHRyug|W6}g4*XwPl@q4nrBtE<3%z}`c@vfh4r
z&$C5R*0aR05%bZhNehOhml#U!a#;WPE-K?x)w~EUypxGdES($hK|F^aqDFPJ*Y&}^
zcpTj(@}2#th-xg5Zep5TBcH`5QUP8tr45mIku)^i+quxLnV+)dxK+sUc~)nOEs(&0
z3^F(yb7wMPO&+(eOp_7Z#}oq2Q>_VnN_uM0{K<6nvI9RnLkX%_;o4>hzeI37Vvwol
z8jvI(B%1ZMX<l04c=E&nx^3&ws;xQ-63UxMSW$^#%rDE4FV^ijslT*}oxw$Dc`gm-
zsC`JrnLZR{re}$%W@EyG0eg`|ocM?eO4c!nqTj9i)9SuyVoeL1St7RC7gU80BGk~i
za5h&$CAaR+t!&*dJ^B=nC~Q9r|G3G&3yTK_>T>wIp%gFxn{Hn#Hz|VQI2&#By-tY(
zTCcf7bPyo}RJdt{)D#&BMM(f|PH??<yfkRgYr^HGZEKJdX@@Ba4Cq+NY>dTAkA0C@
z_oJrmB#j6S%L?Vb_i9t3pKijl$vn$~vwx<eD@YIuc^ob3WEA$+sT10EQ*dPx0EJMJ
zQB_a?Rz(sOP@maFW4CL{(!cbp7*-4MHQ!)@&+63LKSj=c{HDZ^a57=tv=encjgf<;
z-~in3()nA;>p;qxfoX6nKayhT56<@pO;b`ZQcwmBXQNDa>1Jlv$*V<PvXzOvdJ5I2
zWEcjy_%w&%sMs`z%2zz)zSuc}3oeDLdcG)}n`kJ6-G1oy!c{`O`e4%Fz67+iYdf8~
znO|j7ngG&jv3&tP)&di~@KNvgxA?xoUKWRqw^Bv~p=OImi7SZ$`yZ3^RUpUc(W7qs
zQj_P4uA_GSjX+^W=(fob9t#;75+RGl()E{hTYBbXG2iH^fUe-$6DYsB1f`FK;Q+xu
zLn>?*0YGLHe1|}4NGy!sw)OQ_0lRf(wX|`(FSTs!>`gO~I*e#|jL%bmrBp-xRhahv
z%boWq5O$TJC=<O5LUZ#%=Dt9^DreNh8u<!0u~uMYnkX@pUnH%Y$_B2JS8KA6s;AyV
zhW}(gX;L6;0;QCYy*4(MYbWpNw8HEIo{>Bc(E6wg=ZMxSv;RN{Y$tsf!Y`p<kW0&s
z@eB;5+0AEW!64BTD7u==_1+L6dD~S5VDu9eQKnOB<nP#}lXzq6=Bjb><bv6Sn;kAV
z8>8m!@hZQta0_QN)g&`YYI~!N=jM&-Ah)VcXCRr&NC(&S^il&O;P;)5q6mOW4k4&t
z<`X{x)Nj*-<XshV>5p8WLQqc<G_A-BH@<Zu{McKC*UW}42$p2q`tGZMR$GB^j{TQo
ze!Cpw@S$!w0b)W=MjRk~IJ#VQ!7X$1>zIdwx1D$QnG3(!W{X@hzTfjSuZso{P6WNy
zsY@pY_G@lJqs-pMGgE`fpin3=s>D!sGU18hFd-=i2Zx8~veG^KPlGl^;I<WHrt0&y
zrK*>32BU6kE|}?M1SYY+wSUY>oH}WI|9MDIdNe?eIrLhuuI~qke$NVMyvPMl9*H_}
zbupAPaSsm_+fNdfI8b6pHJQ+RFrSg&o{^R|qdO|oeTh|QyI<2baKwJt;xo825sNkS
zE_sM7S*W<cEDB^<rn-)w@Uq3->)bmXrEaE(o|m=cnwa>ISZ_<VM_~aYHbgG}`l`^f
zd?K}|X9>*?62kIXL9AQZDA7*d6D-o^9n3$AxdG$ZslI%(p^-M>uIWw#Ix51hb3>5`
zH_VsvneS5#JT4*is=|1{M&x}}=!OHM448qQf-Un`h0JluQ~ber<UcJ<7E+<gP7%jZ
z;GSOYd=?mFn;RYZt6kkZoItCupm-(S38}~yoU0zr0Ip4H<D9zg1TIRW%xN1cgrdCh
zf+=k+E54D5FO;fYVIZ6`f1l6XURN3ND={#F-SE{r%IrD>6sCx!Hvs)!sNd6S<gKoJ
z`Iro}@cqw~BpV=Me3Un)xr13DrFlAi&wHYn_1a{qu=-6%;znItI*tq?wP<23ilV_y
zx0p5!<US3F4_}N>ohp4MH-u)|1>D{<17?T_d=^9fY>yQ50lfDP$02uatPy*9qF$;G
zA~qXZ51zLqEN)D{lRd|Ww2p*KG!cJl?_sT2_iwxc=8vsgjHUanfM&fYe@yQZF~)}{
zEo>>)6w2jL3bW&^DjmeKD6z-3HF;GtuE4yzqr)oa8q&>HD6G8^+_ecvv=7yC7*#GB
zb2gjr&X7x={w_qu0Izc8l?`$^j(Kl#7>*X~EWhtCzfAhs8>S6?%cw>FC|x>~W6V)#
z%ymPiz08T-LXmGr7-4<5OFp4qM}m;RJ5$7VKIG(-3Eiy3dZj;XQ5=CS%lUA7)IsOd
z95oWe8hdx-Wx&kjAk$pScD~Sdn2+cQs}VOAjEoerJ>oj)jW<2!vWoi%qX9!&<M_>%
zV8V3?-xXhgV*BsfmI>^uC%bCvhh952x7-hJ>CKECF*ZgAf!m-(5=U%X2MhrnT%xr1
zR2MCUb47>tv@4t&(_^2}gPU$5z>UKaJ1e6iv|<X3)H2Alznml0Y*Z8aDHOgK9vh{K
zJ&<8$>$0O-aD+bZBF|Cz5Qez>H;h_Jf3_w1v+LfvIN9^38%Z?f!i7gG!OxNWxT)aM
zL+kw43ufG~%%^C8xBe`78qXV+#dbTn2hLh31dQtPra@ZK^sIY(!{)16uAJh7n56Yq
zgR(hkF$l^RDE*UM{McWXZr>K{{JJ~2F^@y9AvstPHuFP&P~3Nr3iZ=VnX#W3rMO|1
zl17aSU8hde8!hAR)5_U4k^b2qwz`$N>IfXFpN?+YsP{y7RZ%PC5A5iQfdXQud6NT?
zy@HX`lR)y^AL<WIj5yuslRHkKnU)p1hJqtSwo+m^^0i9oprtKTWm`CqQ=PW{NRf5`
z4hu!B`A|ce11J)wV%)IGb?OVtlz#5GDnwgb`%r`V!)JNl-elMEpqy^i0o6|WjY`6D
zA9`5#+m-NJ^&l*SqU3c|=y8SbA}3<d-c>THO6eRWUpt}ra_2U$h_{DaM2^av?oO09
zHo0mKCKJXbz#Rk&yjBy{M|R1)eeMKRvCqo(=LQAIbijgYomzDNDay}F<)V2WTE$aK
z#kw_Kb2PH=1|CbtYofuo0Q(avbZGEmbUd{$PAkb*T`4~2mt>HGD~q9<`2Iz%s9)?i
z??#*1Z}N~;Zc`ox1XFW~(8{*~$IaV=yfv5SXX1+@`2%-KaD`p_PUqE~E(^IM+-Wz?
z)a%KnQPuT4&AwSK)X(X|d6o|5rb$b4F>W2tii%tdHT3={C?Fe^RF#(9dtb&Qyw8Q$
z{0atCQUW+Lir{F-mmVXRmqlRXYn^W`nRbbbHD_api&q0o_X6r0R8@Cmr!{wn=enm;
zM@hnH1L$7|@KC_*6U>Tye&tcxvswg&SM#L=E3Dr4@Oxv>?GLx<YDS|>qsBzoQ+paP
z20RY1z+1t;@<e%xAhF7_H(p&c=T`;}aCUUHo1Qj~#8O;7YUA{%%~wYjOHoglGA67$
zH@h^T$r&2vM@5BLxAaiJx1^ft&4!m8qK`XtGi!qwZDR?_n&+Mi=8NP$B`l*AkfoVP
z(wyhKiA3G8LU4T(g6RD*Dit=WUphgpCacOXeH9RwI%yJ#u^IA#3GEmQIUe)`DIz?N
zX^M_)srC#LiUUkC`P*>IVElBvS)Aj0q-5B@)A0~};%$Wsnmb=u!qTuZb9($0m`<0T
zzr#t0H7@W-<iVM%Z$z=YW_9qnUr_u&tk&Jrr-2ju=X&_m&-Nz+fhCGkxa41+b}&M*
z8jWK-1`;eISCTq@pn~{7JUQ2!SQs(7KvUqm_5TrsXzHwkOj*ETcK&!K+yDOSANs68
z<Y;q?LBjmFwkDRhNfyLs216g|s-eC&@k_7N>XTHs{g<yW=x%~&$;_nmom2jP3*oF!
zB`UZuYZ_+xk&6DRLe>b-#Ti54Yk%bxxXaX_A>}~}C4!5A4ftaeDvF^)scY;fPm#b#
z0t1yd^8HSpBcxH~>d22fVVD0x8ZjbHhThRgT<RBRwcD9=kWlwW0Ici!^rzov0W^q^
zMZY!#@fNz|>8Fi*{vcwJM^WYtf^iqg0n$u#1fuje5=Z|V+YInb_7f}#)|2eQU>?T`
z%wxM>gr2j1bbc=R9!9`+;c#)`@MrF&yFJh5x*q%?pc$GFU&D=?mQ^z=x0?d|08>%0
zFd1*G#{u7huPx*MHJpf#2p3(}_y1>j|3_ych}2wZ1%XI{Y+S_Htyxjw{n6v^ca@01
zbKHJvrN2bN;GZ$YsZvaisXq$n6!9k|J_Y~`z@?3j@V+Ff((Dy2_#1TpA|cZqfxoJo
zCJ0~ZPt1E``=;;FHtJ7`SW!cVf&rV`dUB03WF1)=-yfC}MI>GS8<q0f2&HX~?Yh_?
zMkW=c5#TTMW#XQy#F3~L1&CGQ;p3v7t|l%HtGpHfsIsbug2rDu`au;E0<?`Y;dMB-
zQ$#4B?!nje%qSEp4TZuWRO-RMXsG-!biu65sUUY2WrSn@QfMg}Rp`J2#o>iCA6J82
zpY@4N@6fLBbJ5B(K;6q+9Jrnhhl^m*X7LN{jI>H_M&_YwP>5Z3)H&uUyW`-jc-~9)
zyK1)-<R(?0grv8JL0w#i87LnH#Vbo^G86?Y!peP)s!+<s70IE=Sw$-123exWG*<0D
z-BKB?U&!iiHz#<N>d7?;2*)tK!H$oMIoZ-gIyVm#kgCy&ht8Ya8nny;J>%8oX7SRD
zA^Ph^pKbQ;*$kPXAZ=W2xN?dP`8DXuU|BI$saCo_b%xjh?3S^@11=dVr|5V0C&#Ms
z(aGfzbFZ>~v3wQ|TtoDEC_GjxquwZcBJaxqTeN1%o+cIT>niF90iH9o!PP0O`hOCq
zJ_1+Twu~h08d8r(%uZX|{CMdQ&>lc^KD@Ys6Y<PGnboV$;<VB4l!`V^hj$Gf%IwXu
z<Oj3`Tqlzkgw&!wl6=hk`IYC0^@M0w+9Ww~)XwWj(e?HRPGiN>O@4uEvr^B_`?ROB
zT8(0wXX%D|jQ+?Gu_-idC(R&jJI2+CpN5_Z#h4bd6UZeO=C`=%gr9Npq9mL7gv(8(
zvQPFy@?(@~L|~Ja0;>QGN$ywwJpK^@%V(+?+8Io>Pn%MAjp$Le9(bRcavSU~Mw`rv
zszy@5l26)8MAS9pLM)|s%}QcLoX&|E05F-gIf89Z4XoR;NYX?~1rX8D26;3F8j?aH
z1j%Gg9MTH>oRxTxG!_<34kN^W8M$KFq;4*4l$nZ&fQ8;E!8YSjFO+{dM269MPqbg^
zciGe6f}Y_S#)kF9VH4~=J;V<dPLAxMB?)u6={p<snE+pLE*oJ|v&-^C83c4U7C|8h
z;a7U{@vwuscp{rubmtA&Vcci(me5#Wh?CNsY}4jaAwfEy)?}b7T*hJ%ZAaPD%CZfY
zBv=oXTh?wNL2yOEG~#V1?vvLxs<#s^y#D%u%@>K4AxnAu=9J&fzJ_A$*WA7OVn)GK
ze}-zY1r_giv-hAqr8-B;`|p?3<FC<fhiF%{-;q;$1A+ep*b*@kX|ln{lp53J?w+AD
zb;EZ{eH6*i^q55C+-CnEx7vw{V@tuFYP|cD(QjJfbMA;QUdZ(`nmdA^E6TB7!UoFT
zvxzqulpYrAs5PhFN0|nbE)z1DY-DJ4h2BlYl5zgM$S7%ls@T4x^(ys9=C~hDw-_fB
z8PB8tAQ8b`^0E4+;l0I#=+ah>pUB*KBd&Rrd}k&ukq?E6k^W=P>{feIUwIzKfrp=L
z#+(~59xU-C;2{EoQEg6!OyIz!aa!6g%RT13I*WV|>G<FQ8^^OG>&Qh*r|B-4E9JJ|
zK81FNW1LeycB*?SlbMIvp|0Wrj>LCw1}*;JW3e!+PhQ*ePSMxe+tU&Op(ccpgK?pb
z@HpcsGY(SQgi0tp)LBQDC|aSf4>tQ1A7Q59;#=UVkPw+C+*Xf8gFW8Fz~@IU{}eK#
zsjc=SJ;Y5J`-|chN)bsu40$edp|iaqyI1F}Wz|Qzf>DQH{48(*WCj7|H^Fvf%J2u;
zvbQ<dZ?`g^b4~&J-G4066P*%lOdfp*e|P`*?Q6ePV%sAA7apN&uD^uM7C)^AqI%pA
zwLQ;`WZs7C1eHi8SVW4vZ&x?5IEvvPJ|>JgUgR!2T#wQ*cJEy7E@oe)8h6}}>p1j%
z35!Mrw%u?7ClX$*qG$h_aaXFXfqpliqLRx!tY86;Ahhl}_0{C?gQkcS$>lrD@-#l@
z$_6GubbnWa2Tpn_H3<g#UJs@4*r>3wnZ?hiD<xJqZ+yfDBYm7hHS80bd;9NsrPwZ!
z`i=Y$CT?$P_$dC^6ihslGEs*qU>@u}a_$K!r%$O%i1l_ekf1r45H%PnPOGBa4{mUb
z$3E|~i2`F8TtUeg$`+_9nq8Wfzu75Ru%0p_LVrF|hfpj(<M!;-a!Ok1FO-5;!orOC
zm;_6=Bq-jJ@(C#lChCGduZh-sf5OTPzeh1+WPiJ_>2he7dUD_NQE0cMRspwgd&ryf
z?z%9<g<YS~C<#sW%q0)jY;{rh=!?F@C_F?_3x%E`34;f&A-2=Qdmz@*Kl{2-+$1>R
z7d+jCM^W8x_kB<lej}Oub>ITjc1#W3Mx|=8a(Wr^j)7LrH#;J6uTa`QWPYDYVG)B*
z?03FNQi$va3qy3v6qhlZMWKYuON>v4C|v*QEmsC}E>gSEiJu{ymqBm!{)4-0aM?6Q
zGO819E*<I#RQ#;DSBrVU$33`3n@VxH+nI9WxPJ6Ja1q;`&||_m#-hTsyfJ~|S=lfA
zwW<9s4cjhaQv5CpjWG_-%P=}^z{2u$q5vV*5BIcEbNL-A1LoYd6D(fX&}t?;T^p%L
zJqa0U{BY<RUteNNb>;kRen|J&PnzLX?0Z#QkE%Yj7j$-FnPo>b+eebn)HPrdsG?7)
zMZZuG<I<vS&DJOtj5W()e!E~9Ln0TpIHNae*{jniH1BPp6WK=pV_1ifT}6XM)Z4Xe
zvB=E0xkKoBZ5KI3|NGZ{E&H;gskU?7X<W&q!MT&g>c&rUB1x0@eNKZ$U_H`A+mYH{
z!#HZwpI`aprd!c+D9_|R&eo02Fm^WkURSx`w^2&xgZlv6SRK2fx^(~BR<yn2G#a;v
zt4gjK-%BF{{p`Yo`<TYb#5#0lN-EniD}kzNgPgdi{26Tq6xVnldo!GO<9@C34$8$n
zNyxmxslM1DR}4kbr|I~@y-_lO-z^?x1X)KR_uuwPkkKQ#iE=_vbl&MUnQnV4-PbDZ
zBVq0=mIFG{*1K_O!C31~&%_#oS<heMM5R)W&NlfVE)+RZvQ2pRfl;>lQGo7tJL_@j
z^Y*xmv<Wr*z(@76y~+j#2Mmw{t!#hWfEh@Mj+@jtHAmBib+Vso`}`vPN*OGudz`1#
zbBD{~yNUXsuVtt;dq8=1P<6I(QA36OjUmlcTd0MPw&{3byJ)9;0V@lq80EPxWkMl2
z7Bk{6b){Z#jM4}S$~>J<zDr#+lKhtRgTCVL`GFQ=ORZN;HQ)xx+p@!#{&KHGUDMT{
zDKxihJ-EY-j`ZjqPiuHav}WtH8I4f@`S*-q2RKnmM7jDRD}`hQcdtX(GkRuA`G~>&
zQdvbEoxI3;)i^pkG8qHRC?0(&lfX<ttvrJ3M|16AviPj{eG3(ZjuSLtuQ~nZlP}wz
zT*;?LLn%C;MfAx&rkmYVEALFlZz~F1seJ0Usm;r=Dbu`3^fs&STXwwLuyz!A`uJgV
z7h85?&~+z_^Sn77H5@nl`sZ>>VFQfb{l&uPm7AKCoCT5}=yx@Eb+JvB`Y1PDA5V)W
z$VSNClX;TiyQm8dD=jKcOA}F7k4?)ekx<FgqHaz1#JT61se;6$aNs!`Q92=CUa-tN
zC^{2Tyf8eSG-%qH@4_@coL{xsJ43}+wxyJ$GiTn&)sKYgnrd;(8f-t@YDUwDywHx5
zXR-d&8N+s~80N7DJ#bHH8vE^iC}Z4j?qFKTqYfU5X*-lZiuSW{L1TIGz|eY#-)-iJ
z>$ihLbDEwhE&gPD5Pd!MWtg!(8V%<-&Gt)mTP6$G;+ik0Y`@n`6>w3RrL1GYoP4%V
z2_wUX(<tk!CrOG+DNU5?*HWm3nz89C#&_UVu{`JcH7)IA7{DaE>i~`=wRG<{K}rha
z?Oq~$PojyuHT<|VivAuFL=7dXIk-Rn9aHZe7T1!<<ENcz_mrs{@y=}|S;(qbe)Y^1
z(xFu29Iw1t!E<Z9hf<y*a_^3gbyk=;SL&T?3^I&}YW1y$_bu0mqRWhfGVr4&OGSGj
z<*>p_mW@{Yde5JHt+GwcV{IVLUfzlL_)ezT(pHOQylMv~L3NFR;;zmQ(}Zeai)1&o
zJ4W(oUY|v{&{FT7cXl1xA`@Z4Dtup#M95_E^T%RtTjCbl(SeXKL>vVq!9qMykEJg?
zZqo(#aFjrA?Aa*h#eEJdg}QZqzOvppG9O)t6uzFAog7cWAr@&d#}s`a5E0(ftmogS
zBAM>ZxFBI9#pcO%f1z~0AcxD-vw_}QcgSNVrXi{+TjpuU{v%M5gK#H6#J9Vkj-~mr
zS^fjg^4Bv8IOntdW5|rkeddR#G->|JY`Gi|w6`shS@|^0>KmG)?9zP()jrKP)~$yh
zS?H~YJH2Dz$$q0>ZhCkF&5-SRN~?a^B#-m<q1PPeE0_{wJK}p~$Qvm(7oK|z$tl~J
zGGxT(otQ&g+{XovX7qeAJDLVJY&4E$PG-JzV3nYsjg>qvl8Z`=mScXT#zKb<+61Lq
z)*Xj;hh;f0iUX0+Bl`MO)GAHYK2BcVOj|M@)F4q6>e%q2eNo@(?Lo6^7Lvib@$eaq
z-NKe(?7gB$8DtB_A~|r%8nmS$d+?;We%F!QU`TO15UnJ{>>Q!Eg4Iy#*%XJ$V@a+o
z=7TRhKbd+O^6RkAA4f=5$3NlQGHP#9ylVTNP12*&`)=C%8&3V#kizq~7WrT;8FfDl
z(Ci{o^JO29S8TrGQR$Bscqet~_Hw0WaZf+%aTnAhj*z<<U1K@9=;&(CHPs;nB&a!s
zo<on#Q8ZtQB9uj?4KG?Tgj()&c<4Bgx??y#yt=Y)tBtIe^Qz)*%tSkl>~9@p!@6Jd
zZZL<<Vo&iUW6XTeem;PI8d*n*h8!+rduIu$sG#VJ$n)-*aGfx>nbmc#yLNJ44rq)T
zNm@$8jGQE}(*}20GDuQhty0DHwvi&f)g`z-`;B{ri8X!ANR}Vvd=gNn_$WxIXCFwQ
zXa2@yKl;{Xud3TgVP~^*0U?qt;~xCDOPE%qFWpDmvR#sjQp9U|T^vf#dp!Q##L|cB
za`by9xQmeuBuryt6;>k0c8qRi_Qb0yPHc%Lj(f1!5aa`ds;Rm!Zy90V#MZ&fY1Q2`
z&k%UKPY*>z_CQ3C2+5@_8g9)Ji|I3ez56Ripg{Lqvh($`DcqB<+dRl5r{%})V?%}}
z^B_NcVRDQn!NkhS@aqf3pYCc`iW9_kt^7dBM&eYAkF0v7OjY)4)s;(wiNC+1<L&;+
z%ZYZ8ukL=RQ8!?*Ev$>}<w$dcEp;!PXjv&|ICmN%N#;-2V~H^+0|BF=`}sy0sF%96
zQMWiH@87HXuw|saKB$9}GA&AQuHOcj_aDZ!GFjk%9E>S;GOVmwT8`;x$C0vO%4p$m
z=n^91LCU|(nYaUsuF}s<y@w?G)1oBrt_sqGR1MLC@r=3o2jjBqLE5^cVHLVpmI}6>
zb>+BN3i#iHHc3{~FwfT2nX?V_$4C!(va5Y6>!E>d8~8K^2%ZT9=0m9)vth`u_v!fa
zU}qt!yui_*ZTAxLZ!=5`_iUwI#-A5pi2ckugd@=so5v;iF|87cQow<<ap`dTO@A6&
z^z8Nr1?nN5roedILM2?8JM_Fg%^#d8sCV;)H7qNMy{fF#zrXeK91TgYH4-SRkjbf`
zVX17rT9#x1>6Y<`rXF?<JG1&2KQBS0L*~#nmM+KeaacUnYnM5=Z#Z;wyG7b%vK!Pi
zoGKTn&-=)gg1Wh6^yI_wp;1~Z$FiD9yEyit!L9h85)kMR-1E+C^t)$W_1L3bJd1&5
z>*e1@8m#sjuGqYmls*1ILsZ&n_<2TN11k8h2-Sao4#igYs6Eo}JH(&wHC8Se+p?)5
zRhwH)Ez(iNe<GMGOS~wHxAn8EHss#ud5-#GR0+hmsdU%5!-vznxl2T)D~tIHaF1_<
zr)-U&2*53hiAn=|`qOf)<<3it&h+Oj^l(m0!DXcI{^$`#4ABPey?DG)m0j9(${nxx
zQJ2Q*O2gymbE*B8bcBqQu#m!sqYoJ|6xS=BPmVi%PGH;{t&u6;n|QK9epZ0;mv3QL
zFpVjzSoY!@_gGWWP8Mc_i^oPwpGSiG&PvZy{r^Oi|LGK0xO&=wrd|qdamJPKrH78{
z%|6ujF&+BRiDN=33d|J@&In)PGq7L$JaH5y>acCv(WGYDm40=Y?2wT0z|712S@Odp
z2wn;8;Az>(e}r<b$@E?@U!uH(%yP>YznJdmjmE?zRWrtw{l5|_UOnw-LF94zjhy~#
zjnzuNgR=8Fvx}sGVkv1d;dqWZyyM=iimK7k(w*gqBFF$=?OA!rIU(l;|8)4|pFoEi
zHk8JS5pIWhlAVmk)NsB=`?VbY-oKO#o<ZgTCQ9g>ofhq(RD<|Vvg}q|YSJSkM5)PN
z+D8mpq8DluZ~L_KvtN-%=nj-+cJnL0YpDJLAtfYuqGmhZ@s{=CSVvY3pZ-~`&A*90
zM?xk9@~|YH>2PtTucDGsi?4&P{{QAP8tP@kH$JNq;}E>Rzu)wpuMlKy{?aHw$pb8u
zrma5I6Lo5tUM6zC*Z5YDvnl%`0yCu%BvdUGKQNQ}@b}hEGua@*eVZ8X?*)vo#Lple
zowIbDWd9d&AY@7x1!A~foz~?42f_5Q;Q4ta&)>!Xq|*O?C*V2#t|TL(08yR_&L8K}
z{4ka{s%a*$#ImUcH(#-S(B7GS^9^$>>ASbny<B<COA-0qKm7Ryo=j{%C~vo7ij9!T
z(I26m3TO>mB$u~^7R?tIzFw*d?9WZ_quCoTs5i|HEW0tLY(HcyhTo;9H?KKPwxN12
z#AW;>;I39#f#HzT^e@WPN28_vU-9_eByPRemdCXiHk;zpw+gNaT^JhZqRZdJXVKex
zAG1&<9+>x4xa{Uwt4o_@m#y#d@{LfW(f#Jnbu$l)W{9FIo(7c{|8jHsnc|bCQ2)+V
zNJ#6&Qr1pe%|7~Pk%U$QSpRWXh7_q<ce&`TTx~jA)z(P7t<{OF==O#mYyq~0t7ASh
zj;dD8&B`T;BRhrsvvW_IoDka6D-J@CY}*8OuV8@~A5n*|xWq-8wjPo4l2tiR74=xB
z$BogmmRq;98^j)KWQ0+LOYC_t=`iJI)G-_qmhIi%8)`@?x8c`XyYsaQ$J(CkBfR=p
zXeT1vfwwW>ac=mAI_7b-=fu$Eys!$6K{Fw}{#CxUwJ$N4WENv)EG3Q!Xpby-9Y(Gw
zQy%h|#xga#JD<!D&c1)gP+Yl2=ww>gy{9d?kA=-?)qQz7RbgD*rS3q)ez`~as@-@4
zb{#46;e9TJ?$HddT@UHwi~=f+Lw&X4vg<=?xdW?;a#6RXjrVqzhg6FeiX+BU4;pUT
z3p`qJ-Fddx{k`mkM0e1Oog`FrRkl1yDeSq2AImeH>g~q+7otcbDCZHHr9=s$JG}#D
zJ@^nd$wbD`VJx@_+8FP)^J?u#eMgLWL_(G83trwW4|km5YqYvCu{S-Ib+Xj8kG{&y
ze43X_4H|^Qs4;f?(8sUi9x4ltCihJ)jkbv&cv>%cR1VH|3BUYQ+$y3>^68Vi>wY7W
zYJ+Wle56!-iQp2KVpbAmV5H9t9wo-nIiE0bDhfLvlgsgi!}AXc=4fm-%&J<PTCImk
z?v0P`4J+!XCV;CHKR(Y`*}R9(X2rAT$Dgq@CHe+q#*Idj-#Q~J{eXX^D4Y~1Gdu{9
zx)iIrY%BoH_Jxfzy7ASFzjf=s_pLCSqqxWyHRy4Wh6u5QGPyi8RQht`&2+89A4`!2
z>&bWGXFJ#HaF6d4fys<DR{b)8E^1czvDSe^q^#CZ&-0U{gGSZjJ^w?CuJPe_l*#4L
z?Ey!J6310E;HBrpsy6S+#fLQpWHivTRXl077270CYPP%CWw1a9bxcRysY#Z=FAOT{
zbBK`IIeHS4g=wbsNGiPi*L=YGikDw$xq~0Lh=4J6XH2@z-2UUHYE3ff_MpDy-VtV%
z!o#(h^~tc{!=L_xHsh+&s`8i!XyZx&PHXLN;DVweO$fVnnbXpZ2k+Z&Wf{AeRQ)K)
znO5r^LAZF!ViQ{>mOsa5@8>~^cq>)D-m2h`W1IP~XW1+wcSL8`B5Q!fITO0t<ezR;
z^WF`{-SGC!%C8%P;*ml7lRd<8Z|gGz?nw19uB8kVU4~nlduTSTq~e||yzA%vAdP+L
z>I;*PNAg#^4THOH&aGG%^#?y`_Nd}oc**WnRXkTk8Od*JU|e;wu%+W7<?m*DRi!Q@
zp0GLMK!=8w&()uiIrpwir_K0IA@}UT4%TV%tq`HJ_qORRykLQtw>vC64+XDyY_pBs
zG>h$b)|t?W-^eDd1vT>^Ib%6bHRN7+Yb4Ewsm1wIUrhhxklxn{506b9%dFJ|{sZLs
z(X`_FL>D2B!DrP)@mC-Fyig>+kt^5JynVSys@HI($;oD|JF;=;ZDAItLp|##WADsR
z71v>3Puas_*-?G7-fOHkU>pNH-#aO*7DOAr1k*OKF&#^{JXClLGF_zO6;g2lEy}~+
zPa?Y>6zqhwKXXbwoJ;Zf%9zve1!0M}XI1r)74IO%iy5=QLYE=ktKqcvmK@5yz%Kuc
zYr3wdxnkytlt){FRcJx+M7#OEd8Z2+bDqQO?ZhZuZDFw+17jOB3oavfsRVMu@r8;d
z-k3<uUVH1_T&dw~5UV1cM4r1ZcCSjx4R5gML>#}<fq@zM{@zs$h@qR&*gKBJ!mLf>
zpP`nwLc8kKWHn!JRESZq6;unSSLp2=O{~25zMyRE8z57(zOhAT8ZY$0g8daP;ZS~i
z-{`m4#qlP(K}EiVe!Ky>+T+$+%^el)lQAMT?Jhed3fv^-yI<bef93jEM0gqdz8#}g
zOR%l9RrXu!{x7k7yo8Ha>#Ug6A1bWYyY7z=IY#H-5Qs{*ps7hnFcj&QEZM0LIPe*>
ze^bPATUNnHcqPnIL)3L<L!gmv*EY{Xe<;ONeOjHP$@ZB(xPV6fr<>(6Yt4dH@5)&2
zNs$OgSwdy(z`y`Yy=}2e#>&{P3A!J5ze8J@<^ds_T&K$0ii|<q^eBfyPW<W7+l&ZD
z6;xZZo;>vwzXg&aCMegt@Cr51OCIWsu}k3U))loU{1S5Vm_*L{GSL=Y=B~3%@Yx5?
zV!I@_FYh4QOXdgT@Xn8(`R4cvNq+5Z>jlm)df_A*G5Xsc(!ZwVRAMw@XHuvi%~W`=
zx`c;1<;)^8S=hRM|M+dX<B3luh8ZFA!~ch|_YP}fYx{)}K|n-M1O%k08<39l9t08T
zNR<v!LPxrE1r$V@^d6DkdoKZzUL~~90@9?0nm|Ir7c9@S_kPcLzjIyrW3J51nzin>
z?zziv-Y^YDEeQyKjt?G6D0G+wwKDDcx6!oP480Ho&YhxOEa+@`wD{S6rO}+>nrijS
z&d+#x=GoH^9OwM}7F?|GHPHWr>2yX|!8_`j=Qv3#RP-Qt0&S{=T~>{Vi#^JgtA9Iw
z&NES0sgZBM=yb9$4BKxon5)TU@*QZLKdf_}q0irb8S7B~ZYs2Jaad^DNm=z=Y!zl#
zzr{o=B|Y;2{n3!|uBq-5>`k5e2*P5T{`;GPYo<(Cy|vQR^~`>Iz_9C8bBBaTpJ)~R
zvn;iDldV^4id35gK%#8Rv5EsziSwql=c{#`sYYeKt4~IBCzBNXo<+^9DVv-rQ4I&4
z?^m~A76Vx&#e8PV2X=$K;y#K)$rq4Jh1{iJzn5U(GH24|cd}4|ty_|H(PaJ^V1@Iu
zCUE(PZ)miNzc#ky_}aVsp-frIq~sb)qm!8w3jpwA$M>qbljR%y-Dox`iY7}wJJ4z1
zRKS9{VLbp<94QExPTo8xGnk7kU%2Ny>^lI+s1s6caNc?Oc{|I0LIb?C+&z={#M`;U
zccB*Atu#<F4TjcS?egQZa%q~c8`5s4px(9!KgK*|$lsAuOgfe&rq3_MAR;QIYxe<K
z58PGu&_yx(W7zJf`CXgx^Rb?O=)q)5{VF;9>=|P26}g!8Y`OQu^{D2z3(;>8r?1N{
zkL{(nl|NXjZ7lb#3-m_^PO3XqL`#4euqoQ{(A}2h3<<5CXP({u{EylSk*~e+>i9H3
z@}^o6ACW~#OLnBtU0=7F7qZVu17D%lyzSNms<u8Ew^$uu5A1x^7>`G?kHu2G2Std4
zgrf{VCEs-DfYSSyX=m&U?$pmetXghoa1Wf9$T;q*$%VA8&VvKd(N%d?k;(1w9EP^S
zfkv<Wg~~w-*Ye@k7I9SrLH*s#SLKqWaD|j0l3RfK31BPgbhW{DO0fLK;n%bF6{4<0
ze<HbCS2*ePibRgc;IF*eeAU&OAw56b;BJOx&E!cX#vA~@&9PXY;OliCEG|qSE+5Qv
zQA&%e4p6!OgT}%c2Lg3MRYP**z05mk>oDsecKRj5=*j8MRx4<-f1k}WAZ2&b#O55<
zG1b2yhj7ns^@mJWD~4hQHBPKXOj2BEb8J&G!0U~!z0?*nD;75pUnH#$gLT>)l8i)`
z6jDcKZ8se5ZA?My@=iVHe}H@jCdY1;0V>2#H+Hs=<em~*ZQ=)<=895py1YE4yC^d=
zC9wDz+Cue;dMX%<4}k!~wEw4R04b{x@jHJJr~=Qz`WKC?h+Lsd`y0&x>Yj5pM2$v-
z4Uf{)yMNGJ;{Dda?;s2G%xV+;e&~u?1`b553Ir><GWO`GJ&Y)geFp!SD^Bw8K01J}
zLr1tAY9Ydu(Uf#%?=V|#57YKzbxzKE?~{A=x)*ItoUg4NY}dD0uN>#-opyWn^y#Z-
z(r|=vC8`#+Uz12Hs%YPRYsOdp8BzVRJrA8va_->j^O1*4(x&=yaFTbAe?qi>Oa<(c
zo!f5FdU;~wrAuz((xlwX6dQ<8-~MiPr1NP1HBy9#S>3)-)<@8AcdxO>3oQD+lNLOG
z$~rxa1}(Ccq*vrv;n?x8vtQ^6%|<A->B-_`*X~rQ_H7#g{Xih5+j*5q3%kL(kN7}K
zIoIYYFf3$}YPLqy45FP0%p<V^XAtca$i^gTA?04qajyh$<&6Y0HF-|C^mSjRJh3E2
zbo7Tj!-j_F6p{V7LJym36Q=KA;zfT|y=i;ihCJs;+CgS(&$J$2HWRvfZbUtK8`;M6
z8TmGFB*j7q&G#xR%D%&XTih#xB<hqEkFnB3!_GD`Au<}v@B5+J%$lm?4m!npUtZnx
z-W0=`7Syx7*MsCJ5a~R!8(K_$R(W=CY#J*5qp}h`6*?cgFV(?cOJ0|KjOo9FF~ZJ8
zuQuxQ=JZ!(Jh+w`H^i>yIYgu2$CJM|B0cC-gs(x$DkJoW?V?UWrjg`UTX)`^P_88I
zwY-z!_LxQ3*+EPi&L<?*<<>B7Zxka8%nh;REyKkx%~FKFfo-?RT=()E2`|;HY<Vf1
ziEHlxO*`hz;&>@Hp-D)G4$0f8iE8nCg#L<TSFwXGN_^WT_^Bg>#@S{M<T1fk1kvDz
ziFKVHKB{RnD83=S!(pF^OL{-XzPb;60WluM#ZSHifk}i_PbNOoNjg<1u0&b{lm#uG
zC3$o`Q)9mkY*Jt?x{^fSUGS3EQ1lffSTi5UeLfCBDa%_zADUyCqz{`lI!u#aLj@hm
zCZtJuzHtzyaZN<I_a_d(vK&b%&j`=+xH}m{=vch&csHvtiiq-F<$Rz8dYenu4R!5(
z5#;aplI;vpZ=LGoRAChlEPmZb5Z*!219RXTX^2)Ryi!XqtuNdubtL#vb#(D6)7VW>
zqPoBK)1`(rXJ4+1Rc?7M-=>_gOlA4rED>lpJbOrFi=j!JlTJ<!oh!IIg?a7(N~=4b
zOK{Vgc(}Cbd>x(O7nlSYztbI~?Kd3-tr6f>K@XX>GIPJT=bToP{4}%lHpB%KktAPC
zlgl%2M5sD(+jSlpkoF{nPmK_^E4m08@bZnsGBgH(D_p(_qR!pM0XXIf?-GDUbP-6e
z)3W;b`O?tHPLT*~pyL81SEMak=!!H)s_>x|+9Y;j?lJ2X#9(R}=dH7fflnFLJcaeq
zWo?TiW!~;H7MmYis_t~3IGU5<V$#BI>YN>F=S>VQx`RaDsQO+{Nb@Kx=dN`P_P@ci
zV&9skkd6+VV!5xb!o(Iwtv-o^mR<<K9vQc>1^Zq*2(NrUkkagLnu$JoE4b50IWdsK
zEq4%1q7kq^!z;!8NI=rb;4j$xhBnj<Q)Pu#^51!+=bcJcd`u|JHGR_(knG|r;ECNI
zQ<qJuIoZ$^EQ>LOokX@sqN$v#Eb+_X+wS4{$7}gwYDp2$o8}_74A0$qj2EqdL8|si
zOuN2t-h*(S_cdn13>dSzH*NI;UT1Q~cBw~gCjik^Q-1rd{7mD{VC`Nz+q2aHq9WZy
z?jbDXt8dHJl^<0K5aOd?)kUYV)hJ#+)aPV|`e8eoA2JiKBz)@ywA0KpGQM_jl*}lW
z?{BS`ra98<iFNT`FSf|@U3nkf(}#<~FYyAabA$2<Yf4=7(;NnO$M)JfHTR=c10`!g
z_Uo3$Wjppm`ZGGJ#jEws^E}RjzK~`;)lrnb@y+A;40YAxY+K?0>ysthcgM;dtk030
zpjl@37Tax)LWt*xl+?05eEOKx9`W@I>?>g#CyuM-4^!K-E<zMQQ}{bRky!Z+eK*PQ
z?N4dW+=cR}Qc+CzjRVb<C-9Rt53ocYw3`aCG2*BFlcp*ptTdagfybl(RhDy&q<cWp
zk>WT?!+T=>8}7Dhb*}~<tJ*`I%OfFqWT@#QHcjZ)eUY^OlE)IBylG+tB7Wa(g7rZe
zIm($hbAT~z3n*4G+H0$_K{$j#8>%5sB=TbY&5K9+I+-x)tUP`rA2>Z#dc9f%1*nA)
zjZ1+(OsR?lhTom>ljn~t#-Pohk7My}5bN0yPeAv?I=P+H{Qd%gI^s?hNb1})1ydC8
z@|8N;>;?T0RK=sd%~P&!73$Qq*d~TonfnbhWq&?1Srem2&2B@UsMWu0glsjea~ALV
zuCjN&8{{SRMo&Wy(#ks3)~cSYe`D)1<c=gTy4vc<nqK<B=~Q5j@_}=}j$S5hf-Zws
zonD%Mo`)^dN3LliBFL>8FFZgpqSV_05j+nkSHmW?WFOc0_DB=&78-n7yE_Ayb33wF
zGvu#jr@!nQDrR2~Y5hKUXE4hEYbt$`X6iTN>0p-7Bd2wq<e7Q-!mC)lhpS#Q%3&wM
z^@%E)2?#YfdA@K^)Z)7Xo_~0-yk1W7BndMeqF(=lV3c(#;Q6Q2E7me+JKpf#5gn}&
zRx@gq*OqaQDCwS8u(0<;7y(WDq5#iD6^AEtBX<wT4Zj}+ZVrAWcxFoP9nW&edOOrX
zS{EyEYz`OQ22hGle^`gZ+U~1P-%gy|9`ZwegZr9X!yM*a^1^V6czYmf=~ZXH2$uUf
zhq;WywgvPnSjL@_o7_`R*5^(j+Gb-~ge(Ckl{`s;XypLDw9xajJ=o^iDpeyU3|5dh
z+*AY7O9OZnIx<%q+89JQH7F1YSP%4)v*P(3EblLTU5hUIxEg9q1W!%c<Bf9tZnixI
zXc%&jPLA2crAm>pX`?fV;_v3|vqjWFIZ|}bPJoodouLe=MN#vCG-?f^L-+GBWYe*V
z5LSWG>wxJoE?BWOJM?4~DjfH6NU$>q`2!a#Kw`TwTdK_~U-Eepr`Fpx6uf1_!K$cc
z6ZE?|$u;qZLuRB~iI?CTB#T<_FH5ALxME6%vW(ZK%yAKuyy0@4;SS*(wJV+uDa+0a
zXT}EG%GIWmE+=fRTUqt5lo8uGV#6+ScLJ-O0$g@xiLO&JPD^>zM0J*3CKh0S=(2<^
z{A~27R9;%(P|Uc<Up4h|xR(x|)p9*|Ii`PdYunhs0R3ZmwuQ?R=Z<r1zVhC#Q!u2`
zTpIR*YcB18G<!%r8kcYgy&EJFPP#kpddwiDcq=vt#s)v(MUO2fLb^6<N-ili_4KV-
z1y~4uI?@H@Tnn3zMhMV5v8I!fmaTzEHor(agc#FMi}<cOL@o$<^mo@GY5Zfv%f4p#
z?V>ACBcm>G4&w!o{i(-vt<zlju|+oLooZk`Ms???i$U{?s4~E@&;4}RB0s;iCm9c(
z&x<t*$YOejF++&Vo6UFyRFM0zih7}E5=FoT$Z+phZI6V|7_+EOev<PuLGx?d_fsN0
z+V02VIF~pneQq$z_?hYHnb`;p`oZIiH``H0g6D`?#&LE^d<tR~GueE;4iJm9<%i0w
z0S!3;4)dH=$)+Gc{e#0C<YAIXOZtphnkA~^j_S#~!yRSRh)J8Y>fU;Ob*XC8yp;`z
zX<r}dp5_nvUTyy+QR50F>~z@JHVA+`qlAD|7*eGerz9-dw?G`@(1)G#Ycd_=tY#jB
zfdMU!0ON;-0mrCvt!J#S=IvV@yHV{`UvaW|XR~s==0>KrYJ=Arcnfp0aPITYSDY_G
zi}OWPZZGm|)Ubfem&_F8I&ae+KImZG+8wKuSZEW#O=@l5%QzM|QyjpzGZ2EU)=&}-
z@IG|{7d<(juS=0*F#SP2XkWBo8u)5`xW>lI@2Ny3mifXJi4+*#F0gV9H%ry4)*Du&
zTDP<9ImVgVme(1f;5@q29x3P=Q2DB}p2S<2CJ;YwfBBthtBavh@PLCBW6=mbAUUzf
z|2D~?r2Ur)LsKyKPNtA^^_uax>>Z0B(`X|@`r>&jG~(<fVc_mD&eM&eJRmbiTFm(e
zGzYZv=bMxd=_9iqXfdb`Yz-7mpdi6ziN1iqBxC@EAkwU7ZKa$1P}k|@*kaFWHJSJU
zKl)|D&G1%u=gdRXo;O<O$kxxea90+D>g?1CiVknpYFyIA7+&*@e#q^jH!v3R)#+u=
zUHV|-4p5pCE`GIZuJkI2dgG4e3$s&zkVU7$<7$`N*8LqV4zuVmCPvhc8-YpO7m?Ab
z3$O;ym0P%elgD?>ObvofQ&l_f6<FP5DHnw#Us10!^9b<39Ox(m-%Vh6J3G<Wl#Rvp
zAt`*!T6~T*Jq(Z1y-nOro#wX&Umbzn8@1!jQa_j*7-MVQ(iK~~PE+0MOp8#43+5dr
zIjVRYp`m%!fwsbT6YXmjOw|P4^ig`A)ubork+Vrku9;Xzkz~&eTJ^JbGzL)$YtDDw
z?RlnFcpKQPKwW(09rrmR*jDn2l;d?Bv{~De;#^;MgCiDj+a>SjVFGrj;FX;=uuLsJ
zug~U9IM7qtzZ{bL!s3`ikYLtx3YEK-av;F{<WOZNw4(2GAdeyF)K;ms)~e+Zy}pzF
zuIN(K4HwK%lU0H%tXmE;=$XVlE6~m0<uF(e{;1Ni3k8VJcq9(Pr$oC$R93Gn@4z8~
zUYM9I{o~#mg;uZvz`x8f4_$f7-)Z@ySUPG=j%`aJV|M&;r?UQ*-H3j*IuJoMl-<Cj
zGCR;3-R!=(4dSq|4^k6J-m9mRoAzg#ybi&7=&^?6zP|}X8swSf5zj5!EjI1rVl+W1
zU&NM&lPs_pGPu`rF_>7@x|p^Nyme*hVD#~uUWaQ~%u*mkGYw(NH(f*qm_Bs=5|Mu<
z_p?B+U+t3?R5?fHVnY-oRxuImGDO+&7I<y)tC-S{Zo`Zl&vRX8vh#iGW?U^P(Y9#1
z3}yO`tNuDd)PCee!tVt;`fzapNC?n+4#jKQAYsoi#N13j7;K_(*gia)WSRE*35m7#
ze8x4x^1d4P{;|d{Nupa!CBcE)S9Q5|5BvjfZDJ<Woeg1msXJ&!Lr48Y?phZ|w-iVD
zLq-Q=GVS|7g`~aKtQq`CFKfxR7zzck+!yIvj1Qa5&}8#H_I33~dXD3#1CHEd6R2u5
zTig}v+x1ydo)O#$M)NJ=T>2ctB6Fbd=U^=k;SSdWG0z>ZRAWg!0TwPMO6r#S#mgfS
zwHdIdwY7r_=E=JHWzwVrfHG0^Ni4VJO`oqg-7no19ZtE7S54wMn+861=xy}IHU93`
zt?=np?01p{FuFvLIJH3$#=gMBUCdi(QuYiiYra}IQGq07w?`AvX!~FWj#VUo6-DcC
zjnB}z*|{Zc-EUyKtg&PJrpYH0t3bq<N1=`3i;Y=9hH?LjB=tPBh{v;c42GWD?;K>!
zMT~Q|fz9w>j~XNcl9oaeG~!ZcRo13|V_?ML29RFPutqH<Xnth3x(n5RC#%$ur|m6J
z9h!(~4#KE-pYAu_ZV@_nbbk8|Tr(&5E^ysXP_WeFkZU`1AEYuWUbavE6D8w;1TLXt
zrJ(i(_g*TD?>yu?3pvrBXz5q>tepWiD(+aG@;b2Ah$%-V!1nrwpjGUBji;L~(^Inj
zx-u^t-$Oa7b6MLcAYkDKbBD_Uj%be!8XvpKaQ&=(^N)u$WN$-uaq)^0Y|5qpmznZl
z#6&aWWdY;$9(3Kr_6ff66VE)lbz%AlrwVjGYdNCYjrE$J^;)&-db1bJihfhFt5Ton
zl+?jo$-0&I@<BXM%kBH3+Szqo^G{5fdJ61ioumM12YZ9^-7yzKS)Hd3Skh!SEvBB&
zI=nAnn#-*SFq-yU3nxo0@H|hU>E&Z1Xhd;w!5h8@F=}P6(XYcC#`%Lc0*;PWZDsM0
ze$@egRjzJAXJ~GHwxTpT@gA9!9O5hl6Zlmxq@nWrg%Q^_DqV_HW=YT*@rg3zgC>sS
zF&hC~dZ4uSVXWFVFzWs`9B$@;xaDs0A}ZKHu^N8uJEg)2kV#l2ctMDpq85|rba<5-
zOXUkA5}QV=)sesLID$qQ9yg}4JB;omJ%#I~98|vYoxIb$GqoDF6uP=I%E|?Ma7_h0
zvh8QUxAfWH@@S_!l|go@Y)wvoTR1d9{mzAzZn)^AN_%jMt5PMT<db-@w*AF_$<H`)
z<@_`lJt46Cu+R^jQ+KE$w^c~1p8x&o{Qk~+`9^8>Z;2-*jwWe|8Dc{P5XFGX4$1zv
zgpjoljQrpb;6Qf#@rZUA@7|ERv|fw-d0$(dDe@pPQx#Cn)CiAhoh26F25>?ot9SF&
zZu0nSDtL>XRcw7=&ySCAo4=puZ?2|3_%4w!t!6sb1`;GVlArfzDO5p6na_?dD`Pg=
zoX+Xl0S8OkgH@oC1zmkxo$Wg6ol4)>_cVjCTD?IxtLMEFK=Y}uR6yB1*`V2}w?=SW
zGQqXg_;9VI{vK(5Xa7qOz*Bk<`+QH_&}1{<c9FWn56Fw|5Hm4o)Q;Hly9a>+#+Osw
zc8@zSDo6_>|F&|wol~Z-D(yf_GWT;pN@3{K1a-PU^HGw)tdO<WLzXjAo621&%W`3p
z?dpVOP<7=XQrO;QKu6ipnvrSY%ulJ78_`BS$*C1c1kvf=_r%m6-wB$&`mw^yAUaRp
zj;<2xHaylCSl_YrnXh6!%exRc)ST?bX?g-=48xdNrL}7RY#~MbRk5^_BW3>xdQoQ(
z{~9_#s@8IC5cftP=cy-Qc^~Z@_uV~<XD6k`Mzh0o4-<hZMYe1(0cV@&RG?!iUQ!~-
zq3u+gR-=i;$A;zXf;cy^aW{c}-clc_TKrd>UPsqvVbyrn1@pY7mfq(!9yEd;k6G^@
zx;Yk~x>ys>dG%IUftISW#p5e@kA?T$TXj-p);2E(a+#ufrmj|bYd;mswY;;+SeXmP
z=JX0CtIUoFI?S<v*9wtc>JYLTv_oedtE8ZL16+T?G@Kz(*wBa_YRM@wD@I?uy-s@W
zQ;6(&U~W@>w0c&Z=v;B>hY3^e$lOsvg=sh#>RLY#BJOm1#?5BfrH5dpjG|tuJM+_8
zp;UPl^l7#5b(cFg8XT|Bj<^H5zpW$8w~8*8sbILF3ShTxD;n&nhah?PIp)VwJR+eh
zZEvK0*~Xe+&W!P+YO&bt80?0B{XvKroZAoJvGHEQ@BWTlH@!iRgLe*3$yi1gVJg@r
zdM#CC8^qvO+Ykgeyn+e28aiZwV6#I`O}HL|+!{CO-ganuob4Y)09QxNw;a$Zoh50e
z=-je<HpiJ+0kq`m7!Y{i0(wiP`2vT_=?D95e2Oroc0t}UA1vKzu(<7>>F!|f85P=?
z<06vYXPwWZN89F@XSA{1;tv(NWI1|6anFGALE{qSIL;S+utj?AplOX5sUj3GT2QSe
zbA9WeZ0Bm6Hgc*t0nlP7krYYpI5ip^yb@n7wK8*av&Dq7dzT6_R>|kFAqWTJ^E3}9
ze#mHAuGf^6`5@r?T=+&LT{w5Xc0~5vec^Al?^~R~y{r$rt&i4-a#NibV*CRNd+$i(
zF<1;7b4O_86Ep_dA~JIr^)Y6F%XQk-+74%~SD~qnk}&I3TSjPW(uZgg>a&W+gvgXc
z4TTK>07wbieJV0*;)t^JZfcb~{BE21q?%B9`HCL1?soFxTACxELDIYYu5a&3mlnUt
zi@H(atycZ+!wyQ^mMDtyn~z<H{(8qypHJ0-lK2T#8R6Dwah6^YO1+qtNI<0GBM-9H
z?2DJ%m4rU0!jz2$@9pEw8%?1=%CS57$&|_23IRe1`8y4nCJ?pp-bYz8;GJ)0xVU11
zPkq&asb=UyJxSk$lQoMu@s!Akg1a2SxU4QLey?0_-J~koE-6*F;rwocK44)j`yo?p
zK+Xl`Tnz7<Jt51}HCY@g3J#r~l}~O5F?WC}wauNL!Z^d-l?>7u8lHeKG+5#HlL`$6
zswra)`#lk7O}^9Cun=D&r=~!Tg_@_^0~K#KltpZqxA|@I(=$Ir<HCgAC-&zD0q1A^
zFwFra&6Ff>9Bvr7+K)EL7xS^>Dnr6c+km#Ssaw^Qb%04_pIt`a0A<hF2zox?t7BHu
ztkfa0kG!AP1g$gUJ=N(r^FAh6w4YsM*-QYt{>rK*7d(43Yw(0@S~_97(pEhOk-a-;
z)Yie8>%A(-J>am!eBA9o7lg3aAX9-XR*Wt<eA(Q-8jdRJhU?W~HJ?{$&jqAybIu;Y
z#67l6K;b3dGa9hgvy_iUq3@v-11x-^w&PdKYbWM^`m_aH)&wo7Ok!tYB}u6<Qc)Co
zpumcknnmJ>C6=jIAf*xsVYNo{g-x<Lc~uEy)N7G7_|AbbR9i^A^UKKfrkQGPd&H#?
zO^M2+UEfNh79^pgphS;9zx1~2_n9~Cbr^-b1Rt1hAPLo({^yM2`2n)i<N%j)H>6`<
zt%TF`7)(wWR<VMVKi17qCY>6J{#oOedlA9Ww!A3156gJXz2oiEEns`f2%fL3TJLVo
z?`nKE>?oFKPui<$6PN8slmixQTJJ;*xf!x9y|v{?uie_PjSK0?17!Ah&(~We0Jpw=
znYyaTVgR-<jRuRp2zCo6Px8Cf^q2T6WA<oe{qs+)9QL8yaRF9{;zHIGO!_<#JW>4m
zZt`MosGa?Z`S&0X<vLxFQbe{SnIPnQ@2wzDs-b7f;}=e=<(*uHI_=@9x`)(Ba4$u>
z!Zcd}D+8ZQZaB^OqcD24`F+buD+6<LoZ93`TFss&xxcS;jw@`1hD=OJerj4;VNf5>
zjo*l(IXi6i(BGqN&Rk>inO!`#WmA4RYTJ6nfussi6|v=9r+xe(wwxOzGy=oL2cE)6
zPJ35C09*}GzLbK>^v>*AxP{8zfJ?pkaxTf8A@f8gm14NBL|_j<Wj6J-)aF=E4XNDq
z@0*98yk1bYSousgO;qfkan9zD&Ifx-eP$Axizc#ehSzll7G?&E_)YH}3hr3zEe{Zg
zwRx6<x<lS~m5A;gn$weCGVL55;g0KBbh0Dg!{v51*beL3;xcP`@vj>Z=_4{<tt8Ti
zz{%BB1J!QDNG0L)jw0+Wu6XV_Un~hO(Z_=i(90()>(LMp4(O8xs2CoYXVPHI*2|}n
zH(ipDsnk97UgG*ZGiX16{z|FsWh383^_ANbS1S8jm{hVideEks1}O7=>#f0->!^+h
zDF7}GbgqFIx6%hoo#{HWSE7%hHA7|e7%kfEX$v1eR9xZKj6K^hN~A7FLcY@KIctuP
zgpU86GO+g+V*K$S>Hzf(5J#zy5yQGtjTPKUhZhTnGC9zt@3{TJ0+2;*rh5d*O}%Wv
zm1Q(J=&Nar)?XxA(O*V7>vn6M{HEK|>PB6^Ti(&_F>=8LZj!{%%CC3Ct4W?et=P)r
zNl9!P7lb)U9npN}39OA{jR5<>m~ulRsgWyeln%>p5!TC7o%3xte||)wh6yO^E1>?e
zKs=$+3QfK3JS(knw%-fO<*rVzI_V5bL9NO|o78kw(#C2scCve4mtl0OtL`dMd*{Ai
zb`~zjSB^QE6bXo<^Ws8h*JDzXpG-dymp<)4p@Le6<J>#}1JMU{VDCdOcDB2?H=IP<
z@%;lYXUyGFo}OaF;i+%t7F4L#WlV5IjqaGNQ4^$77Wt*-!&T9+>=8%WGW*Gn5PpEp
znx3t3aH_GcJmtwW5y+I$CoZ35TW?l{K(bibf8LBq&<PUY^47-_qiW%-0esPu=e>hn
zZuaUcUuYO=m2`wT)Sn^<AZi5HRorHzb>%TBWCpV41bN&UnVwlBQT~*io?kML^E~`}
zfKKYZG&OD*k2?|fB|nce<|XC{>vJ2lJ`G}OpZV+FMa`&83b8wfme{S!xGGp?YWx9r
zk{w(<4q&7iMDm>L2tH}bqjTw#_tiQ+Y+SzNBMsQ`uw<R4uSy_ln}J_T=>Db$?b2vw
zTFs5KS2Rz~Mp#*Z+bAhGQ2A!F=VmP8^9IoEJcnq8>-c2e5R4>HC)<(=Hkfx{FXEP{
zwKANiZyLyJ9ZR~eY9c7lu{z*lbS&a4Y7HNRXXA?hl(&H$4jcjNxCk(smAUf$<c&`9
z!>Gts?&CU;>VfW$D!b~X6}vP2FQ%;lhDrj<suS-XmXe!Zc7MIV3(#9C5-aEPjTq{)
zZe@EH-qqYuV>4(jKTe@1=JGJg0B$Cp_I3NlXkM+NTRe#~AFl+0ZGm+Z(TU50tX!vh
z2dz5s=3MXp#2EZFgdLak^L#lrzThy2Iz`vF?n_YZ?tH9Lu#2)#u{gMA%pvOAmCyf_
z&=KLabH#1Z0$ET#@gwttFKoi3R&h`Ldc!@Pukz}~WA9uxE#FAEoDESwcXvoiDQ!7d
z^MBq}F>z(b{t(Xzunhfd(H+AmH%2g_dt&dlKvDg0J+z@aq+oeff^>ljt>HdhA$P`6
zaOHHp)s*8ifrQIZBh;q#D1~#y3nh6cXC{$)J3xq=16`^~wkuYY&{$=gAT5G=b+%)X
zPETE8z<e%({W3lc&#bOokv(1vfVR>24*2Y(i*21Q@WA#3B>+M_MhMAo$lwKIVZUj&
z!wL)^kf%e?(+`*TdMgi%s75AoW)8qpBT_snD9bFU?VGrFFz6)gJtiJ(uVIxloVZP7
zfjM=#PQn188+rKQXd$_oqbV<t50s0NHV;IXg_<fK7PNssvC!po;kuefO$bKM?0FC3
zak;!(D(!-C*s~6d?Nl1|JPC>r_9Zn@=pfW<R|Vbg92a8l|IXXg-#D^7Q0>&qKpJ{o
zMTX{RP%LM?+Yy&qtQ6r6o}Ey3;Y;?<fdc{(uigXZX7JN1<lUgUbvE>@Bdj&P%*iA!
zv90y`_mXqBYLl?>2vDng#vBrB3PC}51Ra$vsBfL6AO@B<S4VI~pXq?5&=-_)BFT}$
zhQn410l`6lYJdl>uC1}pZ5LO3kRIWti^F*0E;Y@ibP!3t0%^I&`h<5VK%d8VO-aAb
zGbOF`>X}bCNqcY**lSHaKFy?+g}aoYMkGy`YK+*;=EWDgG@GUl0#e~M0>VJIV`o$e
z+sM$y<1a(S$r!!$7G2M{OBdx~kcEb_R_top3Zi~jgS#!UhKs29lMf{o#VHf$ERJ05
zG%0F=23PbYT=uYo|AV**cIB<T6unnjqM<?VB-3<g@jB4)c`V#Vj!YTE$rB|l(riNm
z@V8CPt1xv!zH_RwGCdrX?)Qx%A`Gm%x47+c&Q`6xn8`jZ>b`ldMmg2?DYrISsZPB8
zPNXH}nZ5yf&(Z)}7ZR^QOQ3S%cTPl}qth*DI8^e%-^P_NkkVRmhopD@tEVYp()H%`
z?A>z(hCl+jT)zgg$%|^0PZl^d<Ee+}3|+ZT_lT3%5}ZxBU{^6Fg!Yfho7r~vBFFiK
z4>f%<?eL}_OWYpBJCQhqC4eLYOB)7qN_ceHL>iu?0u1;k(pF}b^K6L;f^Auo^LiSW
zd1C;@6&zZ8r8m=FCog`hnfemsFOS_xs~=Fr0kV@$aVaUkP&ObXbMpOiz~?9#ICi_c
zvy8nC8_-x+v-?Kzd@s=@O#uiX*s@vBa%7(;<Y=$9GG`4TBjqjjZ-+~H=FJ^0_&chl
zE%p-#;!1Mrfyx!CLB}_&r-paAw>ni!o(mY;@4F;uaV@{ty<x~|NBNhC<mPml`!dGA
zeq_%7yu}fedK%%k^%4Hco9KM_%)M^=#9(4uYWaP2mvPx9sNS*CVXnn>XEv4_U}<3|
z+XrEkklXc#k7T~)cQC33dsLHpRPnz|5_!@GQ`hR942esU^34@lgWg^}_ct_2nTcm#
z;Dzm2c)<WnJ+KmxUYX<b)5fy*t_wB%@Bp~UNOp_uQA(m6-}G}!|I_;z4YMzHkWtci
zKW$5HLSR0Rv5@MCLSAZV^G4zNHXSC+(($x&)@xJXN3-p~`?U0j(+9mC<j?6uzD}&O
z_MT4Ohw0`e)q8h0ub!e2jAlVS%jdqa0orLB3c$Hk&na9GS_XTxD^;X8jli_Gj$%zN
zqO7g!@n{jp%u(k%ZW(Dck%@sbeZ)i`@JCLKlH$L&jj*YUlr}Tz!V8d^Wqxxl!M1^z
zHRsmovW{p!&&cBpvB>8A1k>Kt5$v=tvZ~D^7zXa}n-^?EnCcm3?V{gDk|7*^c3&0T
z!rz)4%;2q8%1GbUv+I4G#s8xEBlhmkI#?am_G^326JDGX?Hg;hyQ&6~Vpeg5qwi9r
z${kUT%iMZ3{*>2J7Ykyn{PG%wKf@DKr_3Ij2Xk{)k%XV~8`v-mco;WsISY@!+Z_8*
zI`|}(2O~@$owxI`uh%O^&i}K?;9@iF!9{P}_QT!0(-+;?<*P1<T29?A4|@}%q3Hsp
z;Dx5Ssl>w}4aet{KI`-xA0wf9vr6ZAjwD$mf<xx&<7fdGLQf9$;@p}uH&WOsxl~Dj
z>7h=KA7pVDcu@`78~WZhF|Ad>x9&ulqEsDw_O@Ay%x++71P&|z5(it0bDXSkIX=ZJ
zt(WRlh0G=zq$OtBo<ar22sWP)1VB0LJSm3i3KJ|m{q#i24-!4oMkl2OPYjU0#Tm~H
zhn;8osc}_mAUovwUBk(Adm>yW2WXIvsJDyC-JWlE7*3@wqj!i9HY`Cb?PKKQuKFMv
zPNCRD@imzD%1+@A5ZFB!D9udOas49l#!q?jviq-;)|Z`j0=O{hE?)S>JLR7a6`47L
z!K1Dy`kh59bZTnP$!rc7$n{<3_{4YU4L~geyp)jECAdbCLXymPo_e|bASBuvz{k|#
zyk;b(#Yr$czw9tV5?R|LhzCAfoPr2mvd_(^x%?9#_|X#6bwE)*yny|`Ps1aSCE3o6
zBK2fw`QYU=-oCTi7v1xgM?ol*4p$LBuFaTd<&;@W0wqbNPT`)df4#^nQ5@yzspUb3
zNLdQaPsMyaav{cQ3Qpr%jyNvdaitBC&EG&j7b!y=q&SJB#MWv2-pHNXXV@^<t6@Oq
zGu|9!`XuiGpx15D{zGjTY~KkBINoz){6^A9!hAF^RFIt``l>oOr<jLnw`kb3P59t}
z2R>xTz6q*>QEq29Rxp>9xWG%jK$EFLhtB*RJ&T#`4ekZ)uIcoq+oqKdDeq4E?&Z}l
zt>+`?6dIrEB${h$CyPku^M^kXL}G&5ag{ew>!%XQ+b$RhL8ALVdsq{m;5ma6Chw2q
zGW|bS@v|w+`zBwg7*NVZtw3ahuLD->W^$NVnOc1x7opRTd_%i=vh(ElO!eY=jrX`M
zy!fk0mfGKLr|6A)%?+2r>{nZ%FU|H{)WI4e8Sds?npTj4@)%WXSaYRqc(VuCV<q^_
zyS2R6)Le;W+S&F{b0WDqNhh9#@NI98K#K*#O+r*=e5eh8;ivK@$l{9FbB_p)|2t8f
z_j-+B!SJMQIvOWc@$cG4Oxv;qY2!FA_;K@w8PxfGd+bH3?&q@pK1JLZGZ!66h}}#5
z|Ceq!nfDi<UpJmt{X`u4pCicl;?jRp3sN$t{~Gwu;~w02<M9P7ZtHodt~B=l*CVzd
zzGSMY+u-4BYwLo;9RHi1{Nu3bwTwpDIxpIIcd|8CNcG0(|JFB`b<s~|dQv}L>a67!
z_XoiF;)U|>B)niF;jb%2hDy<!wZ(ICzYv1|=Y@E0IG8Eow@!u6SsOi^ooo~H)}H*o
zbk#j)J8L$Pp6nIceNR;k@q68n{|oy1e^M2vT@f;2lFpI1hBckogH%Hp%K**)-cI-_
zQc``@zin@%NNS-J9ZU7$f1CeRR*HKg^x#J)Nii-?^Lix)JofYuUHs<!|2xe&LSFan
zt7Ilo<600OortJrLgH-g{nxoO;}U<B%lw<17vlEmfH<UgpZY^TTA278%Nl8iga_1b
zy3q`MwB+Bw;ZpyfR{pbvh~iQlEaeU_cXB#zQMk@e&pP>CSISb8W+iHF!^QuXJ4=!d
zb4kyg;@5T1aAT1rHn;r$m41&uMdErzeOcEbF+696dK>ohO=(%}gvx8p|7}kl?I20k
ziK$ifx9Zv)vfL;twLIPAww#!GG?rQdU$nIOM^9tFa{G#>;~oF7oE6`U8Es%w84)9o
zp6wa&`P{gET&^h`t7+Op+By>QTQfgp-+10=O_>7r)6;KqrPr^t7N9!vxc+FAV_tkD
zNqRp2>3Jq)E(p7Mv-Ivp*gsn$!&yehX6~`plZKFYt@v)qeSs;?nlSe~mBoJVCY!er
zfV%#e{DTgUW6QYc8%zGXhe<oE0yK;qoKsGTUiK0b<uP~tL2+4_9!0tQ1aH%kUyy8n
zjE0Ogz7|mRqy8Z<hwW$AawCo@eS`-MSMkU_${8EG9?*_ESJ3~re^p4yY@>*KHCwEw
zVAR>>8+VCvNdmX9&(pWBDgS!IYW7XC?;nbFNIjCE$fT}9^f8`oMO<t!a<C=Ji^*G&
z8$UDey_PLCui+2w^PRELuA$)nw6EHQ$?)s5LDmBw<qb-kq#B^Uj#cHj$FgwN$8~Ym
z#kEPnlGKjvU-TuZ{4qus8b5l2gv+#6WdVeULha~S%+bqc*YvKh66!bH?Z2_z_;I0)
zWlk@#5CQv$6&n~eBEqG`{rwHy-UNvMMy$b=S+c!JoE$z_7=-t?<f3gZe<=;V1*z&@
zYfD9%jMbwpH^wSzl1m!?@%;^kSQ!h5f%kg0NKRv}SSzN~HFJ)cJYT_@606^j6H;dY
zR3C<^KjamZ3sTnO`PhLGp0tuM9}dFAJN&^GEMUdwE+sn{W&;)?7aWxg9Nlj5J8v*@
z;H7`YZ)aiQ{xJCG%8P|+C=;mgAa}<_td3_UHine?gYDMgEl0f`3XQp5s;=Rzs&4cz
zc7tK4J&%Wq_kW|K;l0^piy5E5hmVNsB$h8!;p$RVJwLt|P>-94q)*6|y!!WMW0_h?
zKC!u3j%a~KBW9IEkAr5Jqo&SyDe!1D_37u5kNzuwB8*oJ*5`DCE{)C#8{0UR4>ZNt
zMU%;ZNPhz&;sE55EBA;~s#n^pbms-}lFI1r2BTZTC}XN(^Z70U?!OGn8@u~v!dQnw
z=df;A{uoF0Dr-twp=#sXK+jduDs6-=9DM9r!su}*AfVIf{bB9t6wiE)LVad{;P2<)
zkYB^v`-ReaiK^8m>DEmsD7>mu4SehqNj7HhJAQmL*A;Wo==UFsRFwGI`&ek5(b3`T
zJy)W&n6{IOX(hdbjo=c<`1tc+T<f@vS%zQV1fC!pGilOr615Qjv|%mYR>kGpmV<xL
z%082{01mbFXC*7<Hyiwp`Je?O#bX-aqWMjkj=$T>0zv#dcM%LE+HxkJ=}Idq{E6Qt
z3Dzmr%XLDcX>Y`p|I%XHffp5CfNu1ahLki^mhC0ajXBjOubrh|kk>eN<Gs1cQen9|
z$#0P*H90FVuBdEJLp#d3?yKyp8(Z}c!4Uolq=L+AWBHJTE3<a1svj2#?FI#!2YdlE
z_b1}P*^vc!FLUhh@>=j_+2fw_Jm*)(*<I!g36Df4<ECOVP)NqTKb+BcLm-`s_V8$W
z*f4KjXSYKEZGcs4nodpcdSv}$kF_DkS3Ld#<gZl(wXlJPK}&tmneomRlyDzS74(GE
zL@V8L7YBy%_Vtu)UPdtOY$eJ06(sEW6&$3F5PtJJmb<_4Sa9G6_eQ7Zv`kW6BNH>v
z>t!%2Y?pmoxiLO1<x$}A@i4nxZc{0vHST%kR0B<H$AKMGHyECziUMRz3H^n`_5Tl-
zaq|0ow&BSdcjkRJ5BZ(VT3Xd5!J;}Cp=;}0th4V2oNC&x_X&#w8+2;%$cJ=ajqJAO
zIFDe*>h%B{g~N~Nv;|`RNQ?~nMsl;IbBZK7&0Fu2Z<2o1&L}`Bn#XO%Xm)IdS!<n9
zCuV)IZJw<!%J8g8HS_Tw`dtk0DUn!ENTfe}g443^psVTvaH!JG8?nZ+N`gTIJmKkK
zOyOrYIay!#Yr9iw@H$VL?@M%l-HtY_4|2`n$M`2@KXFBW|JHu;<zltEDluFo_|MT_
z_r?mX4{Wa8KahO}O1^u!`CNv<&nobdejUQMs%oRydzHINS9o{dN{DtWecj`)zdKwq
zRyX++8o9Z-n?maKQ&ZC<huSF0TT?jBv+U5upJxJ)KqU$mX%pMoDIKDh$yYDQ2jsZ6
zFnrd2{Ts6D5^)XXn|I(3<GCsDA>)tT%M;bpX^jxY;HRAcq4T91W8#W*;DXb@ACD_=
zk+1&{<IVLa%<OQx59J9P97pK1%`+<6?^M{v1Tl4l*0aU;90Y>qW&q^xFP-2>r;Yb!
zxIFx?CWZ2+TeJ66d!DG9<_CRwr<|Q%AFm30Un89Y6UzAq&yOjemna1xiwod9#tUe_
z^r4MgKx<p?(&8V72Ob_*`Hc`$S0W}3EwpbpG&}8MKVJFpvl<xZWjB%(Ser-(0g6qw
zI8Sx>Q-D6aNa@prN53%<e+d?DZxG_(^i?gEHnFl=woH}GHwcK#wNcs#2@G(Y((!AV
zO7?K^aK%A5kkJ>0)=~E^9Qbays2lefp-?5om(PC#`r<y&@YwXQ<#?xs`7a-AAY%A(
zTQ~=Lc|Dhng8A;zg0ifF%;Q@fRVW2Ly;0*^zP!c7W6$DQ!>9&k&_!mZTO6N0F^6eh
z#vk*2dN(8{^Ase&$9u?H4i@Q4Lk1u_`F4i6Vcv~i!;R~i&FN@6=e4s;l}TMz>$g*=
zcm?hJT<tP7x4n&rkFQ*!!28edP0U{uU8eO{8P==bL$>`EJP%H(5zF;y(VX4_QpqAa
zQ%9fgU;fYaV3LUbi0rbuo3PCCbY+M@w=ZUJ{8%dN#jCOk-bamZ^76rJ1C(K;_{?~J
z`z@x*#BUikT>kSHMI8ZkUeZCBMV9mN2f9@)KNge&=)1CISK`*8z$-ignZN(qSuQ;|
zH~QQ`_Inb<TKF%HMOfnWCYe)ETgo;HaRNQBj@yTdy9yT>Ou8l%s@P|b@<so#$V(K&
z5qR-|Z}vMOzb9sP7a#K3=AhetdTUp=3Yuvi*j)1I@Zq$>;l{$CcC@;XTB=(=xV)!8
z=SDoGdxMSrgjm!+riDj<&w>XEd~@?F?rRA@7iLC?uO*C0aOhX5>)v8~=|VNrZi~tA
zKeW<S-oko#Ja}l$xb9|O>zm2*pdTrCA7iBc?IqK{*6NG@+<3}YH;m*rsV499c|$aG
z$ECV;UtNBFmnQvSHjL(AQ716pI-pw()s}U2W<YT&_rWZ4n{?u#?Y7>Nt1dpo{~$gd
ze#c)Ff3Y(s%gY-4=fow-<d!S|^t1Kh(ZY>O`8t#&50q%BsD$!+(7>t3p1qg<F|T`X
z@wm?Kt*T~c{u<!pBeU<QvRjl=!KHAlb>UUcBjH<ti9Qw&xQJil{rSC?Czd${ex!N(
zBIwtDuMP2+1q`)H9Iy5?X4c!(yU6Y4Y4&S{0z-`|HJJY+ViyO*m+>{QZ#$G9Q~jd(
zz2x?<F#2aIU;fhkA&h9Iaej95@W;0!0JnkXE&6{<RW=pJ=ermm4bk5NzI?P;X1e(d
z({yeL3Ro6>GH+J8x^z$EkcYEhd?ra~zU5jB|DP%UoabX<oV?vbW3myy7OQ*z<xVVt
z9dw0S7twbMCRj`bt87u?Nr0>#byvLT*%H0{A6@!+KunFhKS=)O#&1%*P9b>09hO(N
zq31^Zf@NxKu*8nlaaEKP%k$M8mYNl5^mnnkmxP=CNA&J9w_nq@r!b=jlO-L{F;+J;
z7^`qs$;wMco>(E6k{=1L-hmuw{vb}^r1_Rj3r<ZWy7@1e*C2WP=JKDl$%NfZju%VM
zb3!FJd}G=dG^L~pR1(t}<J2~o`<Um2W^;tTWaPwK-^)vuu_ny-p}Q5x8Y3V3ABnj*
zSPXeR)F)(w|7XDks`zmtWG}2>4hzG=wYNXdRkJf`(yF?OV?15ga7ym?X5izEmtwa#
zm^B&mKvkJ}Oz#qi(iw05*ZTY%X)heNXcKeUzkai<;1Yh^q?LyDc4vu0^WfQByt6*7
zNM;_e#4Ro9gl>DzUy$<>(_(4#Y=fHf!Dq&+tuj<B>X7X=h4d#K^1sLU^9aa=5Yid^
zb?vu8ncPgSDq~=ONUj<0$OSMjQ@$>L`aZ#h($*TKZjxBWF@v*a)5yhDKl9tpm@o%L
z9g!V{gmkR1w4qY?0gGd9xvjZRA%^Gr-<gIxwu{FtK`5L)<;`zdk7~~$Q+>c;ch3+t
z-yL2fI-jw~#1a1dMCz%)7=T>!yD(jS8DW=(g|5-$lAtns)7gVnI86SKmy1M`@#&R+
zh_no|3{D#ei7BFke-A!F&|O}pUa5%OubB<p*EV>To<eiWN`k#E)Ycm5B}yqky~kI+
z{gn1!!<bzR6G1`pM=+BJc8xQidThdmE7_{Yc)JGj&muiv$M@?WK|az{w!Z@t@89_&
zK0lxQ9E4ltWMF8)rJsMx6i|x#DqbVAb!UKn&U1N|mS$ii-)Dht^LD>?uIS_X@?)X*
zU6+3{<V_441?2(D<4ccz+4%M*0tZ1Mw_BXc)|I)YL|VmJ58iHz?CEoGrmDK3*3(jH
zZW8?ww_iN1xQ5d&uEQb?jb9@x-$;)2zLbP~rrUe`olr{UT6jqgnodVoEn8pedRp?0
z*neq71@k4Xt{bEWG9Q0Wfte3KP9U_R%30VDMMlDPH(FgU_H&E6w)9);qnV9|!uS4b
z(|#F<zb*{KL2dTfFXec|#^+(dTX&E)Jlp#z-&m@HxA3zA{?KM^C5jsdnEtQzbKsbu
zQ`vswH(^iI%w(+<!n15kj?hGgXDM^#90LVo!co?q=UvF4?<D`a`{`e1RWUc;KYa%L
zdE!kNGv6+9?G}hH<!NIIRiHI`6cZUAt|*w@bAB&~o8!+m@>`231TQ3jjOFGp4Gts5
zM_T7;8vDGyH4A_a^L`r_=d5|_&=S*g6hSV^)HU7`Bl-{izm|D^lW$h@E>~8T=C2`d
zJYBrl+N9TbOnNQwr`p;IDgCIdc=G|lb(U>PqzZbEnH{zNEr(ADKAn-?eEQcfe}E#7
z;E7fDGvMkIU6fR>A!VF>$`HcejXe-4Ab9@eX569d!SCt+aVc)d;6VcJFS2BZ|2l!C
zNT!yLQ@~_=b`Ut(sKe$g9t&Kh+B;gvFI@Rylq!+azO_zq<DbfaM<7Y@`e5WT^V~1-
z2$R8?vM5VVFtjB%&A|8Vbd$RGdk&?%3$vm!MEd@>>itqcJmSayk^waml?B0g|DB;F
z#~28@qp2X~WZyTmKc2`|4V7ue^1=OI_ClupDPBL|{*Cls<3475Q@DlxcvIj*Lcn^8
ziMRY|JO>Bs*mh=MawZM`A6xcY7Q$ZPxF~<7eo=!$Aj2F)qM|?b_Q9I@y;&RGvy@pj
zj{X;#96gXh#^U?QqD9yLI9<P}r_o6;Nab$Vz~6iQH$htN@p;Q}R>`ZcHcVCb^Uf3l
z&!TclR;c{gzC|2$1+cv#`mHDbamw1&aT7QtxgPz?*gcPF_b-M#V0V#ZuWNq3LF4R1
z7O$$^CylYT_Oo=7e#-D~${SJQC@(}m_e(d3Y4Dc=l=2#`ASvXf+LgeTamBSC^!75;
zAT(`{1WU(OT4E&sDTR2%4J>%8AVbN9U-E5ci|^%6rG7j!C;Ln|<$Id7lW{y(-BFsV
zq2mbT%aNwrq3q_rM2LBj0jI<*%OTHyozT6<XZJ|ZLlvCrzau3pY{;qgp-e;C5GAG9
zwR&h{QZB1?DEs|?jBy_~h9AMZAHPoARWmzyr_9b_M_s-+J24*1q5W8Rl~7zwV59HI
z=>K>>8}9xyg3z8{!XX>co-?>4*@}FI*qDON#j>wDJUd}!w<7;GxPTrSA}#!v48E2z
zyHKPErp#X=T;PaLDL|xoZOB>~Y@SCgZ=L{BJ&n=3nyDht<SZb>``5oj0T2JtJ-k)Z
z7@2#tzl;eTE1!@+29?V;B$`J+3iuY=^T9hJUw^}1b%d1mUq<k?3<b$of`{DBap830
z?lx%!1qD1UwacNKoZ+#9=%$v5C*CdGBHwWm5+d@(wQRv9ZAiBreb(RKpV8u|-{ijG
zBwc<DUSwF}NjX`Q`=cRrdd!)N6Z?6PyY)aI0rEICqit}`&nPcS8p1+1htq%pdHf#&
z_BW)fJeBY;xmsKe#Q4k_0|c^pV8QtVUMVRl9&YZPYt#iJOOCgL;XUXOgMdrDj2EKU
za<4s@vg^*i$O7+@ql>2}Vk9LcCD%kM;%Ns9pRF7v&T`%3Jae+>GBtWhDUy>n>SNO3
z#WD2seC}n>xYkih-go&6*0WMB22_PqKaZ4#SdKo;95wx}fKw?mEBrb2$%Y8q)B||B
z+c51Q72N=@r64C-v*hfBhUW!gM~PoHC-(G^HW>Tb?|<(asNI@Qdun#JiMo~M&cwNl
zl@~T-pmh7r6~7~yaAKYc#V`yjJQU(J{{BP2gYPA7nH0hV4I{VgQOL#-zsvsC(=C$*
zrNpQKgRba7oNB7v)1c(Hu1E;{Hpd*j7Nq`NO}g_ho~P6oOP3A8tM{O9EKTdeAHwI+
zkbioMBmJri{NQns*10E6L%t>k6z1uwW(7+&`?6Y5fgkf8^9l%+7k&K()cv_f$s|)Q
zO1lvuQ?y2b?@m7m=llHN9a;+4#ywXy=CwY*^=N!x=Q}d`p*d^U{Dp7y0eyXa<5gD5
zcB7vzv9Pih8M?dIh(zDJexbkw88Y(ngj7^ig|oP?rP;#T{IxZhuaKI&b)0*uu3u&O
z{=uai_$)6GvA5~Qeu!7et1joH5~Zfku6M<1WqG^j{9xBbWxS*p2@~<(5eQBeioMvy
z-Wag7V^$w6>|&NenWPIQf|%WuDfVi?ArZFkr^01}WWM6s9BBp2R$(!B<-~isyQO=S
zz&FYkm|@vG#!VXVh1NoKko0(=7F&@ixUKj{!%ro-`-m9;0M$9pKCz!H$*Q%V8cXCh
ze5G5kmGa3Cj;^Yzk_bR;<d@!kc4>?1%M&dD1(!--RW3;HvLaURnOFzJcO9}HtFTch
zt$<PQsb_255HQXqe$!1wYlL%V3dry;T@}<^InK?^%^n3#cF&SxBwIIl?^?XW`aUMX
zk+z7kfSXo;d6g;p>)cS}u7wdpe$<p<t)2WjC{UV=NjjZQ#L1|2vH}0Xwo~7WNl1|Y
zK+XNx8H`Cp?9Oi$t>l&v_`NR01G!LLn#!QK@Q+M0hNLk*5{>jN%Hf*bkTBES7e2|1
z%79xfAyWA(g(KtncyFGlU+%#TsC##@Sf=y1Xoc@XDPF!oZq$SPQv%83q?m_8fkeHR
z2xLC35s$}5Y$P4Px2s2-D5$88>6RPDX=BTbo5ygU1pILXQ3r|*mvg1Fe6Yuj$4qgP
z;4A9?W9uu!qKtyJ0T*3CIuvQ7L%LhKK^hd04w3E_>F)0C25C?lsU@VB?q=!w9@O{!
z-nuR>{_OH_o-=c1?wPsgj8%6q4(y=$5JK#AyId@rQ7L4{kIcqyth!N5Lh9kM(!)yK
z!;!*pH_X<U8uz*WN<irfJ9*5apx=d?{18~5guhTufsX-jph~cg-e*Rcm#+$(eugEf
zd9C`yL6yCp<FPWeIll%RV(s%p27~L;q*X-zS*GfT<EfcI`O=$%@2jZ#tN;_@kIMys
z%+j_rY~F4p3d|+{RrY~DA}!_6(U!5AQEqlLCOgNt5@KbD;(ZxSJ3u*Fs)KJq!Wck5
zf0lF|h;9mFvj)Nm^e><m3{x(7cm)apgKbD2{*SWz!Uz+DgKL?-#PloDr(ka(XACBh
z9+=b>r~TF_5i>J0lxb>1yf#7Cll!C7f<tU%q+W~PpGXgEfzaLE4ZGg07!M%!+$v3f
zHZVBI=*?t@G!%<M7-&d}Huoysb61&o?L~Qjh2VRaE79ZyJHG(u{CUUUCgynWGRGwK
z(11nJfaagGmBP`RATEi`n*?XUzx#%6{ag24PiQ1Dd@<lJ6~lxojbtkj8O>r{*cXXi
zURwpXso2=qz<}A5=n+#}jH|C6EeBaRoc86IK?J|}UdMda0sXJFDkeKMQ93xPvM=Ie
zQp(Od`*M3|WK-~pl?vF`X)&qNtW91xd%3N0BdQriUPK6C=}*G}RVEAae&&-O{cK3w
zCgaM6oH=Nssc8pLb@3fWgfqZzF=2w^L$~8j4rB4oZQp+L?bg-Odd+{*_hv`Btp{O+
z;Llp3yi38iOTK9D9UbeduAg20SPD!*;QQo()GaF55$}0XnWmeKAsso=P<?nAVCvfQ
zEVX>sD9Jaqh?!g6BOezHAxs>>4X_oGR7=vCpWeo`-1!~;L|_W_A}@aw)~8#D5<8$+
z?O+fft-@R0b!P{Pgwf94j7uuaZe75>-O=(9{joOI6p=A8Ika$T^iQkf2$Ru5!2uf=
z6(u6a%uY(!VJ6+WPwb#|)e)*5tXl=8>e~UI);BiR1ss4?oMVGthk^d&6s)7Y>3lXO
zu$S5}EZK>B1Tod`C=7owd2ScJ26RRUgb>G^!?*5ft_n2|Zl}s{#|#!!IC@MKk&r#_
z%k0Ba;1fQ9w*aRp)D`&;ezJEx-O)&{-sX@Fy^6`6P<0<tzNLx%Dcx>U%UOaoB<WRE
zkK=WMn|78oI~NE2c{(D9X5oSY{<D$}5a5Zk>%)2kVm_jDR}N-nh)IDImnAwhy=dCu
z`x2Kg%9Y*#8@GfGR_O_KR1f|1(|=)z@UZooOTUiEYLQP`UVciqhxrda^A3k&3>Wo%
zijob?E*}lTqOx}?)Sj!iJayckrNEv1gq<%owzhdM?64}ZvE8a(Rj2#$l(vAtBoAs3
ztIL$Uai;ms0$QqSAy}3^d@Z}5PC1%+I1%`$)o=)^plD#kNmn2SY|g5k`}>d{H+j0j
zo!`wbFZJ%8sLAJCyMRt<-IZnE0$*kqCPBv=U$2Fdiul_bw~OL`N3hYN=u#L{R^Uf0
zLHzgbOFrJRCQX~^ZlNLGN6934{LbAX=SnZ1ej4z9coUpHB;Ec(*&;{rdGm?e{|^KP
zd%J**)WRei4eTbKH#8Nk{1csSf()g{_Zy%GnQ*a*dn^V|n|~$l+|qog!-O{hWGhS8
zDjbUg$PXKQ`Np6r^&B4`|As()p!_lhX`r}GKRMzrI0rzf8Ef7?+qdt^mZi(p-SP#W
zxl;1KXvx=aJtP-jDi?lbxLeF-$zxSGY~`K6_BxqLJxj9v2zq_li-Y+m>$jBT{UTa2
zg~qZ#;0Sw6Dw_?W`?HGu-}an-%$@+Yr%s}S7;k*LR`<Nj2GOZ{6{d>EZjRmW|8EWW
zK7hQ6l)X4DXAQj~3s~wlx7$-(fDx#7*{Z0NWxFya3umu^%%OFZc9Pa-AX2ducw2yn
z$2dMR0)*=c89}_etaZ7RvWY?kX^zQ`!Tf)f;~9cJ!$OOTomTzlB!T>}yN9$oyG?o7
zhe_qC>8hH0OqTp^9kO5`ag5Faa*tz9)4Ug}QKUsk<7fLapIF{{u64tW`WGj=zp)19
zJxA5%`7_0gq@n(Jwc^*a-Bp)nCcSZkjnka`xgPl!Lu~c80orGkdC)u{7B;p!MWQ}4
z_sEY=2D5FZ+J*n;suDoC`z^O8gJD%}!6$vr7@P5=ie-=BA;~G=E0DMRMh&lP_{;nq
z6>u?0^~oWn$3jmSzQq1q!*AUmResN7<Ki&1@s)IR(wpL9V=rsHk#A`2oOM#!LRR|~
zpU*W|HT-6n7}y9^a&c+AtR@vxGR#vnQL<)u0q%oJj_1n-dEm}i{Is;BjhMdejDLZ@
z|5D^wZ@wv>ZSTMZ8|My*?#}fHTNju!@#Jk=c4@YBlfQAkLQY1yAiA|HCDl^tNG!cr
zW)g>`mSkNRWscCFKp9;Hf!`IDdD#Atj)aVSww>MytyDNh6!XI9%~AjkHsB~>&=f|B
zZ=u`B45ur>ANpDRUGPZOBgvLRLN(<Kej)`*T@#0tD)tF*yes}nEvpCWN;(<hgnm{a
zCnfdKaocA%hvWv`B{%zu1fX*BJ^W%FQFL`}YL+mErMG>_Qsa0Nc-VFmPUHboIy=!c
zNfQI+p=UB94gU=EuFZqw-yio9pKD2_3{oA=Fn)t{{)-(e=G~}X(sfQ`(+n6-c`M{4
z;Snb#D@0;(o+oLYIL+HUlbQ=gCjyCP&eWJhw6d^NPLyi0-ZU0G!DE|icB<gl0ua!<
zoeNT5V=Zu9wb}X)ffKMKKCR`p2pZ7a$u~$nq!GmC3gGXo8LL^D;3se34S=l}m+ZUV
zjAXXhBs_q&19yP#v1-*AqZk<(jUBJ{PKs>++A7uRdX^0UR%LyC{e5iI#wjqom67bT
zbz-M{-$r}X683OB)_ifKP+9W`AsZWJ{^KqzHk0AhSvpbBhWq8wr({7dPtX)!bqT%Y
z&P0(aGHx|V45=j}GRvTd|F8Wd2O8DJ1dr>55u;)g^G0kV&N&Q$ciJq_T)!MT*&({V
z$KynS3}zF4N{G-eoLMxJa0E;W=BAe6U-ujnd+9epl3Q@H(slt#ea?0Zd$E{#drD+b
z)@wfn`25nd-}<ibBnHXhiCvMRhR$l`yoQuehUzlyhVZuA6B$h631CF9L!fWW5!q5$
z=yvAqD)Ep;>!dC)2lx@ip)t}HhAAVIs8{4aV#{H{2ls*t8|LpIpp%dO{)MvU*Oce)
zk);qI`O<U64G7Wo3CP+v1MSUi!3D0CUzQsYl$|XM-wIKL(8kTwPM-5I$TG5XGTOa=
zl<8Y^Q#Q=y<^UmsgXX)n7zLHA?zs=wu<a-784Z>6uSTdxt#M`p<};HJ8>bAT!X7<j
za;|Q(i*OHH#KVZ-gRI@=u!G`l5Hd|wvVhIXH+};p1o;esG#$??qiDo9^dB+aoGkeZ
zov#$;LJeNzoKcHn<f=d2Ib7zt1-BgiK#omG!S}>L?tIPg;d|s%g)Z?|3X!N^lq8nL
zSQIx~%9fQgGrS636JJe}lU*3tO>5$^KP%Kwq$dTp8{EdRgxMB8Q8@M(C=M1h@yPG+
z6I#8c!VOnv_n{=%RZDRg7#X>cI#y3H5?f>!5yCQsHCC}~Yu#~&izIkI+B)N{Hbz$I
zr+BQFDn`K-)Ud8h(XX<{Y0L&sJ?_qa!=MlM2?Cc(Pnwp#7S~;c6Y`3W@Lzm5LjH;^
z;{WHZP9o|$Opcz=Xl<`AFaHd%D43Q2CU$>CaClw3*dPs3Y3?bx1Y(6^0bC0{1H)G=
zpj=Cjvq|;+Hx7_<Y5ZS^AKtI}rM4`;*D*83y*b-8w_WVs%eZr)6%+_DM*GFg%{U(O
zC?o$z8AVmS^x3E#m(Q7)nCL6CMwy6yDOA1r1DR~hvSGnk(8+=182v|rH|1!{$pGE8
zv`)Wt9xp2^D}xz#d4=S6V*DEbVJ+YHl>A0xF?OKz(TO@lJC>j)<>uC`gPXWH+-&D{
zUGjM*i5nm57en5cX#~WGViM}wr>d<H52XqnF`;G+x2yh_1Rf5}09GkiD{S{)Jt8MT
z@y7)wb4w4#GmOj2&77KADncg3dA>%!qQcyRrN+smwv8mS%UA|>)4Q$pMV*_TFn>eG
z0~u0im>HaPPCwl}OtR&pvE$OdDO<sD7vxYsE{Ls(KUFQJ-<KR8KSX}koza43awv1}
z&unTuP{D49H3>?NWXMEBt~cmKbt}?r6uG-TJN+(vWiEkR{|r*U(;jolbv2QxIX%Vw
zf!28MF`OGrIs1Utmq>+&sNFN)>c+YKawnO~CVSA2x1wo>_9i5{sN;HbkJB0m@cH@^
z9R~%!BnAK^wPv8}iYEMLV#k6LRIZw~9L$Wlrm@)G)_LA=4Vk_>`iZu)lMeu^H&w1N
z7=fsSJc_{N^djIq6ju@u6CW~%<VZw7fDzuNz~<~w(lG`r_)e8+m$cC^w!+?L4A4tU
zN-5++rIX351K-Kto3gO5Y(>kwRT|u^(i0GkRI)Iuq>wbA&tU;aNeSKez)J34&*_a9
z$_^8BjJulDV6QVRVZm;(-}mLaO9orA3~jYBY;FIx{W`q(5|pgvNyDDl3X9OnC_+h2
zbJ<ABj}yA4yB|VKZG-hgMiA*hy!<o?I#*OsBrpjHh|Q;G)Jj@V?G*RanL+@A=^ThM
zJ${&M_W{9X6thc|(9L1CL<A9=^^(v{<FU~Em~0YD_koGPtCLn{wA27xcqf+p{M#7D
zPS0!okW<5NeI$|5(eE0dp3NS0y2m$E`CY3$VaVW)s5cU(=X*0dv?4v<III?BtEDct
zav~-s6@YClN$0%*vL-1UVbwJ?gkM6&&j9;aoWcdpU^9#U>7h>bUP9A)6?kR|t`U&5
zAfMxex{Ewq|8AF5!+0Sc*^*n1$>Xq-OZz~M_N|Yc#B%TEu)U(9rM44-n_<70)s7Xq
z8kDp^Gs}^N<CTE;hP%Ox8YZZAE2k&Z&i-Xp^TN1JK)D#fr>BW=;&-%2CbL9l)CG{<
ztZ47)3p$j~3?e{^FEOioL`dt4Sx`j((Ct8gyOXbTwJCpGurBa9(Kjr?5$}eHVoAOy
z_GywoD&efZgb^m}?BzP>-5NUAVausXyO>s((Yo$2@{$$0MN^7ZTVwKy0zGP|=TiXe
z<z2(B0H>U0++aFJ_K1j!Y3|7xS}DG9vEU$P6_88?a4y&@vjh3D)KZt#SLx0x&mCOs
zdrR6fq-G4+DW6wWRqfdBilep_1XGpDc1-t3<I`K(jPA0zDB~wbU%l?0=145RR5s-<
zc{`#n(|-C><9M@nB=+K|59L<-Vx*iRmT4`5xv%kTW4jw3Tl2&HjTta}en&3~md7F|
z@j<+gB$4ab^Y*xR5}tRPcL6cTYmlK~v}Qy=2I_G^7*y8+vK-w507`C^K`*4D{eI^y
z-VJ}z>gDn3WVIBx;gTHvRo>@W@1)Dko0CDt{gF#olK5|0t+`%S(6-hJDH6|DSWNX*
zxA@y5z@)h(rt<o{lBam%kP1d>zkpCFY+1Zh;8FHV9q>2JW3gT<g9`aD&*Scw=Ix9j
zG6UHpn8c*j;O{Zas)K@R*<4&1n0BMrXS))(6ch0Wtrt2?%l`O4c2qL&81Qn@vdVI@
zvaq0VHUYBKz#lTm3r!BnaXu_V>ajX3)eq-$R^!1qbQ9EMe3G7zt~s%Z4kcbz1Q%We
zSwD!1FesNIT;2#NP~%QYi)`XMGK+)sNfb>NW-dL;omwg^Bt}Kk$a=C^wRk;;Kn5K#
zbAA`9+s1r{tiXR3`_aYa5jOMENj%tgD6738u`Ko6$&7ta(f+W$FAyoc&|c0=(Iu;o
z%y%AdRZ>2KN^ZGYgJh}K?x_qEM@@RPmz}@tvDWdt=GEQ@`oE=wu1WDce#e@ym^uz~
zZ(c5_2WBha&O<KJ-pS){MYpLU&t}eidychLS~Cm*Zp3CWrF;Sq7L>n8YeCQkC_58`
zS(R?hJPNLv9;gt)V9;w4k9?3<>Bhw&RDptmV&`-yg;V{;@Cp^fNBo0v-$fuSqgtwc
zAz$vOS7zeZv92VhHKeB}#5Sm4@mT@%MZcDIvtrNVA*q8FwC4qc;_>0JGBS?bzc!34
z1+rr>K=R`S8J;^TsPUc;#1EGNJk!s9V(~Ur3RqJa6z3S-=9m^xk=XsjAdB#({@z6<
zj~swXcw(VC3t){8bqJ%7MgTNyZx>|br}MiN3tV@d$hjNz+phiAaVx`>JIf$P685+R
zOf#W4J$ajKH%^8-nLUtJlyCsu_q~Z2HA-+vAEF-2u(;RHWlrU^N}qjYUh<}&cn~1#
zl$3YT-W%1D42XI8YJ4zN3tMS%pD0wir}W$W5h?^2aYA#$&mn|gT-|JcGoCq<Mg-6>
z8}p|0+>d|g&Zzcfxa)z0BDTH}JEp4WoN@aqw7QSR*0K^LltWAs(@9|oH<Xav^qMUO
z)-@nsx}ENI?=sn57GKU`ntw$!QQi!E;;8|-0#bP@-Almxl?$wlWX`bv{vh&jHR2_C
zJrN;zuTf|G8|`%n!f3|KlWUsxY;eo{^{%RqF_0Q5&OSL>{#k3gE`1GTXeQvhA2%fV
zL}}IA;}T;O^x9+SJHI27-YE2^%|6y2`)=`&HX;6;#30&S1Lp;vvLKiWn$EH-HxF*y
z8SKu!Pjgx%wNcN;tDoqxf^(UohgWCGH>N$*+bDSOE}79MYnY|922NiL7wY6!>Q)w3
z);i?~w<^j}x}(<|pCy4vL87jxP3xV$LjiF=PL`-eVpp-kX%y9QH{@`qq+*K5VfwV!
zj|XMoQp72+i;87P3b|S+keWOVF$v-T*b|_!f<05V_k=w#lPo?2)6fR9DmAj2%-b8?
zbTrck<C}=~=a%jB+gXa|K&3{YST`bJpcW`werz~?(o{r{ExrDh=fgytv7<@Y9h==P
z_EQycW#aPlbdu4;0bWC_03j?sA90;(zyWS1<75)x`)aVa-5fOQG~O@?gxKw3GI?&|
z#mP*SX->z_X90mIUj5;WK{ts(x+r#GXi>v0)~-jC5=B>6S78lW*Zx!(=VIa8LYk+X
zTIj0@zjeJn@^%aSdj36{S(O1q_c{9P?01CzZpA9s?eoB^%1eC6Yh<O3er%o9S|W9F
zQQ>@=L-KIyUD54zT1iickeRT+2D_J_z6*6*crBCdn&kfIwhqMBM3pKm&$BZU`R(@(
zGoD$oq>Z^kr8j3P;&QNI)jF<&^OI0|=j=)0Qrd1de0UHWLQnnFG_J+*{K1G0rie1<
zq9jAgZGXJy>2!sz$lq-;%7YrJT{{3C&}2LB-Uyz;WGo=9l?u#;>yac(%>hb|L4Sf{
zN*<TSOK4){xHqjt7#Jfgc5J}rb??sNi5y6gDQhPl_yVCEl-yU?dS-66#~23XpDMwS
z-eUyPR;p_VQOsxYURuE{=rlc)F;oiqbmiZ_-rrxemxSm^XA}*6iTMtR2*yYGc0{H3
z*`lsq<Ls(;(y0<%N?IDpi>xq927#rRcHE-d%NulD^Je1*%UzH1G!SNrU?*+t(7ale
zd<{f}w${eQ`XoXBaTfrsne(dM$VY;r00GG~KF#HA4@N>hXT^u_y#`6~<jQg6fs8+8
z-ZplvvIe4Sf>LYiP%W#Tz2-<?<PFA7?o{(k)7UoASJXhR;FCc#ssV}zRD{OKi7AND
zfck`{l_KtVlRXUraCV<iyhiEivv?lU^FyzPxuO^=gZg{a<RFShzz@n^%XvK;GIXt~
zSvt&2nvlY0!xHYA%T&Kd!DIPGDWAH<<UQT$<`lgTMC~dCuVsiZ4V7Y8hq-=|mN&SN
zrPqO9&1uPHR;e+N71yHP<;5JP2Y$uaj`IuEJVQQG@3G%#u!7`D70Z+rPbd)e@9`X?
z(7%-?@4E>4zWe=jm{&o(<KdG`hm>|neRuMS!dwX)AC2gbcuZPjDiU1#l>&LS(-@LA
zP*;&NU|siYQVIKly{?zS@>1OU`e93{sRU<A3@FDJIfxkL<lzM*@vbK~lOO~S_n~aX
z=KQPW@nQb`GvlfBm4V<NRxQW=ujTG9iJX_<1LA`C`6F(kgn|FOJBr(!%Vf5Cg>94q
zB=H3DY45P}LdU)0XoHEeH19mdJ)7y>HRcP?(^KuMKPf4x{NM$~gA{XJ(Tz$XF}7Wj
z;o#yHdtw>Uw!-d)-?e+*sqFe+EV?PQGPne<DB`{p0b3!+&uTqefA9QzF}lufi!sgp
zLZkXUb?pO)#6Znt6Ud@e=<o-Cp1ydMdHuubdm%5zOZDphY<<ko9;T*3t`~0}|GtjF
z(KPaBVOycJH^@*$IR9bMan6!Fyw516o7vEQ;o~UXLf3_NP2Nx%e+6;>WPbln!RtXu
zznUmi11(I6e0ttfthK%5V;84QSD&7be2r8kSmq`4K*=gTo>BJz76tWsSn&K9n^yfk
z2Bg_1n)(AUVNZPe@t?*pm~+T<i4c}Qd&rGuKoZP638sOWju3V#2;9E6hxGgFQYgJ?
z09q<kdRIe)-YA6V_XgP(xc+b#%V#$m5DX$gK#BE|SMr+_qq1Z$OsaJKSt$D*%R5x_
z4&{c-;B}nW$7aW}^vvbp%b|di5jcu>3S*zdw?Z!RXZ6>qh<~&2t9{jge+vZNPtl0>
zPHb8o(y7}GcOpC|KbW8e|4_v38U1R^Fb!l1_oJI$>V8eXHJ4i5mhLyP?_(TKO?4OL
zSt}A8yM5TMXyloy_+D!^P8mI<JY8>z-%pvPS!1kt?}C6UbwOphB{inRIt>|VT^(Fv
zx{9X4l+VTER~XhrlTVgJ1pP>d110ZNOuzKWzaBrR=p)et(s7eT!<gfy3y1e+^N4?V
zJB17gk<5hsf8VR9s3<&$n|u65n!QHXF`E6Y-z%Vg|8CFko0g3s`=Zfc{EXZ;qq=z@
z)@r8Dx526BcRP1hxesFGKaR;oWI&O7UidMAhQHPAVoE;kAdC)i=MCN<!}e}m-1T>^
zr#_J+OrJd5f`dF08Sd^o*O{G?OvN;%rPoE1XMQ#&nM=Y6lRnnAgfea11>3-E;R>!!
zxWvR(5nCm3S$Dz&f9vxTT!8tzCw*yvi+79p5)ZTMcSS)aXLXb?>$g6DGoicI=2l_;
zR@v0(`Va^%%Xps06@9P1t|%c1<~<&JGj31e4jYpodbx9Xxf($jJx&i3<t|XzjZqLd
zF1)<~AOZmdk`c(BHX)(R7Ch2E__kS=IB&M9G&z?+pT+psE1rkj(~@o*M`5)$1YFjc
zHQK1Z4QI|WJg=o%<KyGSz3z5(Ck=8|#+OM`zX|$Cm82-yL$L2fnt~p{`f_EJ*`=RC
ze$W8aSUTlX;S~~eVB*^7<wbTkzyGhdkt9&~$DnJTlKemtm4HhxA_s+FmT~DXD}}`H
zxlj*Gp$EG`3n)NTSJ<{Y?rSw1Y8X#%uVz-*htTa=C0j^go?nvXe66ld*OA)z9Ap#r
z?edZrNC(#{Yt@<KlznJ~cz)rFG~>zex^KLzUdz+mq97+94a9h}cOfcOZ?h`?7=q?c
znFq72@^dH9XkJ(M+iw6_7ZasPi|oXk^#ol>_v8MlDg%iGn=np)G~#mkq<FLO0}dNV
zv0rHD3%B_!ks-(J{PkcDY7FY|GGYZ~7851=m5dMNb8@P;G)N=N6}P-}ch_T~2a30T
z5HxtBDmHkz%rV@OBgawMlG+!^E=cK5hiW&CMt><E8IQ`!{7mtyHXQxDH(j-J4%8pa
zBV6YPJ5n#nqxXRrPwC~I^@XCbalQwW!b+VLbn&D8{9m#vm>JM(j|Ap*oPnKlEp(SN
zpy)U%U$UP^JoQ3zZNsb}O^pHdttcv>-(;H~pQ()RR<!G!iEPS|aV|RN{Cr1@#t)11
z{i+}%l8*(o8{tQ#J6-g=*`Kv^U_|&vy<baGvN2%SLn1BSSfFd&^-5y60!ZLbUMqxm
z2P~B}EJ~+vTE!~|RC?SvM%!9s0S1Feoo8xA9}S@mvoJ6??<2!-Uff;5$8MzdpwB@G
zYZk9{deuz@wXqka1&tgEw($;6?Wl(ATjk*}fD$7ghPTjavrvw1sYvOy;WE9t@WDui
zAk<SEyL^$0zd_LZFMS<2U~qWjPI$_p5-`tOBDXzeTaIbUCuSpjr=fTJA;kB{j4h*{
z;l6!uyv^F9E{5-lt2CB@L*lW6t*7u@@~7>3oH|6?sx?nMZtNC_B$9FIH8RV)sED_<
z>pvH5q-vMm!iXPED(SCDl|Qk|fU7bSIV@kZn?b&be#aa{!n^x@!(y#2Kr;uuKj(CP
z@ECJRg~gC4CwI>((%<Y%m6cp`eyH&`d6$lq?H;QdfgwaP4Wh-y-?!lT=2+JhDZRQQ
zb)t$|`ZX=-9e3&)!K{<BKr3@8*L43IexP<Kfj~Cer=oUju}jmJne^hbS;_q1Qp^kg
zkM76as1ecxHmzC2Tecjg_0Gron21RryjLk~W|)r&8dS6X%$c8Pf_stiBHxs$fH-Yi
zO1B&(SuTksPs@vND>Df;VmVh|=Y{VMa2{e46D3)~wAzGgBh%94s`U~Udn+`ie+E>D
zgMkVwJbEQ6V1U{N6Cs?#>HH~=@o%&krBMp6Q#mbkV4$r!Gmn0PhIJ1n+$JN6DiQeM
zk;-<^e9^e!aSc<FKyJGpIDOG+QQqipc$NiZFc;tc3WQse1xG)XzTN%^<S^w2$-l}0
zAg%R!r^HeBYxbU9{t@rRyxn&5VVhlYxTDgy(zP{1*ZsQRD$A1JsLcq%P;zl~Z&A;7
ze=G2I6M+yY6*Y@S-SET5N^?vU<)58~-pb>ua1YmeC@6b&en=MF(&+G$cq}>U{8cMf
zhaHus)o@-FVR4dn00#itU=u<*08H*{`1JE>08Qu08}(SPKgBmVgeh`B#V#&@L34N=
zF`fLDl?u4Cu|uy!HMzdbbA8pOd6U$~8*svSve@`D_CrzI<@PDZyzL-EF|i<?%kQtA
zb^QCudq!g+MEtI!GK{UFD-lBUPhrApw9#=G70m}cJ2N!}_iA+pSCuaZ`7l6+<T-_f
zeWc;;x4N#|c{`Nx7%T{6otiUUT8i{oZf84UjP189cUPMk=QuI2An7MG<KadFR&pQ{
zqp~3PD2XA=OMMx5x$6V4WgqQw=#a`SO<pO?Eh>1>WVA&`lU-Y8?I{9~qXTU4IWPKP
zJ5UiR!F{16$XIg8V|PJHGx$S`g|0K<@D)`0+cdCYz|SHkQ+;=jozu2ZkG(|iRqOrT
z&3G!eo#gHG?#r`LeNOX<K%n6Kj&t7HccGxo5$&dr9B@jYHm9mS?OM|)UG@aCDq{B|
zpWh<`0k@@^H4~Q-;RK{fxGFk2<+OK(MK(jEO`OkzeSv8R?-j(^9S`QEs^67UqsK%S
z$5QKhUgdH27b(X-CaBoUHOL3B$)vRNUk_5|kQ)btylo0J6ajl72p-VqN<oRU*4+qk
zep61gM8|m^M(Vpo8aqNQ-(5>$0@Md@C2!{R<|jZ-jxcTK0!Sb|1wlP;ETfa2&Z?L)
z<jZQBkLQQ&V6HKGU4=N}{n2}Xh(rm8ce;j*&Z)*uVK6|F^I1R9Zflg(fzh@~<LS;F
z!qkbvlbHbUBV<?;6Me^Q2otUs@|DHH&CCAWi8PeVe(EY5qqiPpPv+Z^?Ay(Dbwhvc
zs-1O(qZX@B^p$da4<@%^;!hw%0$eGO$$eFBA)SfgvtHhO@V)>pBm@ob2rI->>AKE*
za^MqbW#1J}cK%<P41<Mw$R|m}L-o;xIv!b%^JATl76bh#rekUk)7APIL#whX^J)CJ
zYP=$aTxQaC$u0d`BEV6Ag%P6Oj`ryhKizzH6c9xAkJ}Ch)(8i9;PGxo)Jy<hff{St
zt2C78iZn&%=8if}J^ADNb#)-92{Hx}Y>x7h|D(kP@Yfy50B^Bo!%d_Ju-@-Ng@%J{
zUF|hd`I}iHeorg@VgPu&8!w0q^PmA6#@{A@@BFR%{^##fd4M}x(k>heJUUbDIRRr)
zZh_hw#6WO!lv#j-liH2zE&v#Nmr`qO@7L%;>hSoo|Lw=engmcgt`@P0M>bQ>^Vn(!
zXuH=?PLfOwP06Ssf9gAlKw1;!`}9q-dp`<x9Zf@kh4;5S{-3|~Gy&74c|Mu71bk8_
zoSFST%V}zTT%;wj_u$sHCd4`vd;R%9Uhno*=&G@aKkR?M#*YYK7nd*O9~l<#F<|%V
z?N@U5_h8H6x9l{}+^V}<M30bFl$c_GicFPm_g~8WfAEk0qP@#U5;3t4DGwlqH4KfG
zoJdMfV0g{>%M@)FF^mGA3T3k^w&XdBjK-w@YZoLRcY(acXae9ycQ7KfAJAn7K~2W8
z38`*f7k2}&{a&w^=BeEzv|QY5R?Kgm*#U&{|G5ot2t+`K#U?!Z7l54#(3poLq)m|&
z4)2`pe755hhUR1m9lhlH{oH0+Gor0r{rmoxFoj66fd{-)s=$u}Ft@dY-pCkBa{U^(
zwT>f$7TbyWNxPG4iRey3do0J@t?^P2DdK;Z<sZ>n3zH0VJA8QL!TJP}TIW`#9$f99
zJ9xVCwzl<r=++fqb-sojGMHV-Sr!?5*6Csr7yIAxFb@E_oXi7wZGm-w;SqX+>9&s7
z8)0211Ux$C<wd&9Ppe=@++n7&Bd*vuM#w(1IsdHwf8CQPA-I8dN$0`BH{i#3Yo%J+
z^@}RekWR7)w-^rU#a9nV?H4vVqGa)g)cAK*V~W>^DU6W+(Ln_0s<i?j*$a2;mjG!b
z6dYUgrk!(&C@&zvaJ<c6J%6fH_#HOCwYW&rCQL;-*f#)C`O};K(P;6wFA2aovkQ94
z37niCesC4pGRUmRraRehYS{}WCd?^%rnkz4Y1o#3u}MpXa{ONeVc^ZuAH^GlegKG9
zBe|ntE_^)qFk<xZS%_Sj1U>%6!e|9Nzq8|OcA0Q?;0Zdspf8?EL2{NtFRiYOAxT%w
z>QnNhk#v7JApb>q|BL2&vx7^g?Y>f0Lk@dCQpqw@Iv+PzOYkQPv|u<$hCT9@b=*KI
z-MS*z!7@x_0>IVeI3Vu7ROspFY{RcyR=>@?L{s@(+nqmJkF+SE4w)K2nB}>6s_ny1
z_Kz|mMDpV~pk&K}a4N(g^WY9210&cIx)o1eMOp0{8JZhW#EMF7spouhYPYLFE2R=K
z&O9ZSn0cJxR4GI4-OL;WZ}Vw@1`YQ?oADAyrOhTb3(+?_Gi;r(mPp}!Oi8&c<_}*n
z>a>y8{!*+nsq|{Zx}(Cbk6(%iF2?M9_GLKE*};;#ROFUKvQ!PMKPh8CqC?b_`hI3g
zwC}u)tDPi3Nbrx|Ed&J9Cyet@rk!U9b&^7AlO7fy1zM{pGt~ANY_+2gom4cp>WYX(
z)X$15$|L8B+nkh5oz~(ZA|Vl@UK|8D()SQf*3=owDB}oIS(92R7FPUR!gnAIy}k7e
z9-eQsKG~1PL&y-rv<Iovc-}FC0+<A8tT=l-;jbcaFJe?c{q#yj6+BC8wwfweo0@-&
zf$&dy-$()P@#82jTbe|14n(T~OtmQHOFlN>Fv3y0{E)hEwa#W|hB|ad6HvZC?rmJ{
z@G*yHIHg1caot>iv26Iw6npY(SI)4_YPNjjnH4lrHt_su6NID<)reXt79&p)ZR)1}
zQ_k22ox!U{mxQ^m8;KF)3s2W|O<U|@5gwfY0(plWY9W>d0<R6v%OXo&ZRBu;f;3nb
zi|z1w{V%xj-qn9c5#1I9bf=Q4%VL88(?$zosgXAQ_2aJgz*?$94A*FJu$?dujWuFy
z{3S<TiQ6e(y7IEAl3y`_`*p$x9wlSou=h@AxUQv&7h4H>6}+)n?^zT?xOl6Gxf;}@
zUL75A$757k8Q)2Brng+?ms^Nrb(_(&d1~rco?0o?xHL9a-)$?nWF5Mwwlh{%s<DS*
zttI&{PF(|A-z<i=Qwos0|DLu9F!%pCw;zFkGx!8!QNlq7c>IS}eFeLM+>&DJop;8=
zbmh5K#Kf5y&KMEB!xplPx5*NA@#~QvI9b^g!j;qyTeGa51P4t`NE>ei){dm-cfHt>
zPRq`oNgnAz5~$xW2ur8F<v9`v4r485bN^yph5mAIL}8g)Sm{0pD3T$^vf}uCq2o>W
zU?`aDmOKBB_{YfW2_wvp7eFuG)_J<W*ss?+Rx<o&c&()X+mv8x4fKe1yhIo&?aOm(
z6ZqBi`t*lPNdzQiPp~rg$FC35#ESaZVZ_nmPAJk@T^gzjhB|p<T<bTBs<T~P)%pst
z?w`90Xm0|Ws*k$GJyoaNX~`b!E6OHKd|}Ykv3hs;oiTuHSf`Jy2y|0+;q*T$t#>;p
zocP`V18pEMBw)Bjs(C)@CRWsId^I9*0HRTB`)<$aT{v2BNHA8O$^dd0h~Kg|)f&LC
zf1LI(U;#E$k;?&A*QL<X88iYSsClf8)hXMpo2G%kVCPE9&y-6#si64#MQISNm?+Vz
zj%qYbl6Z|GN937v_MVK1Oq=WVz)b;kykN=s*VNY%f{LXVf5b<U3dT0JoMADEwX{`D
z!=AfDoCuzK7~Z4IW<`Sry{lxs;7rq$q89kX?{Gl;i`bI)eVmS-M9Ydbu^M$-=hcO*
zUN>3BL;t$Qph%)c<A}EQds&N&rdda($`40u{|=usB~TMK5f6k1+A#e)7~K>`88WnQ
zn%Tp}e6+6%M%QW}g;F2cLcZuU=r#~Jt8W{I<Pd9YnIEVlc=C1qm>fQNpS;zZ;|%(<
z;Ern0=YiC*+JF$oxr=M_P_4|aI<>+#H{bR@1H}d?Z_z7q^O4>bd2A2+OD;KxAXeY;
z5F@Qr>E%s4j#t=({j>w(A+Me8G|+OEv#y0OM}0EzQ?s;G1?OuVhZ<7+_-vX|t;4cu
z${}5T5#F-kKgB7OhkO6Uf%1{IzC_{k10vmI+vz#3K66&hB_I*9QgK+~I#m!bB9&85
zV<R9K@vP+yI*vp{5>Ps(j*zK|DnPYbyE_RcyIwo4s(*JV9r&+zXIb7m&MfakuUrAg
zcu7jM^yVy%*B9GWg{U5aL%zj~f@F$n`zf8Q>|^9OlzFFeRa!F!3;5sfnaeT)Jcm%E
z=KnUsSxW#~?PPC_252>dkC{yP=z%*PeS^;TT#Jv%+}X^4GicCRE>m9_|EjTu^;xPa
zDb5{#`n~=eWHEdh&E<<V)46++4WHb9C^d5mTnSOQ#YK$_E5nw;nZ{(c{63`vX88kA
zm>z-Gs}@lec#yeo$35VTela%IML7t$pjsq|)@W{XR>nQtcRZmL0tx(@dePiC+a`a-
zU_t>^I}fQ<s;5?i#i3g|+hXl!nsL}AxP*5&eWU&BJwORUI&VD^Ad%H7gKc```=4f+
zOsewVXGLs=*K0zc`<*$WL4411gx@pik^XC_e*+lxP*H2Zb1mWc^m+~Fy+?M**@p7@
z7>AjPZaS9ks@{>2LD(qF-Jd!bJOEwjTv2{pT9w(BPDY6QSJQFz`<?n7Q!Z#V1vwAZ
z6e6X}a>Ef1V_znN74rAgApXJBv)`Me@448;1~0+G|4<jn+Vj4FwpFP5uyXdc!@<LK
zqN<*1W8b(x_uc7qTEBDpTfRXX4D1?P)Gtl#`;=O(AzLepq8@V~PRrcC=h=E7m;ksH
z@s9~I!a-_neG5&HAXw=+!j4au!z>hQeZ`~pUdjR$x5O<#QkZ8u8CPOFfHQk=oDer2
z<^9f-^u{8hG;;bHpSK4x%9>dXOIo2IGD<&v?6fa|xWxF@^Fvx+B0__?Pwf~TovC!6
zq2X@2c;+Gb+M46Py-%ly`YrV+R>f&^e>HMWBOyo<Mf_`W7m~zGw9B(3d|7&UhaBrz
znz;KjL$I~+VSnh3q~v>H9G>5XfCuJ9<KeGXNc~JGY)IP9ghT1MTeRl)Wa?A6u{@8U
zogb_rn%|?|0!|u)>HQcU+XF3>2o#m35~M~MM+<w5$?c90E`YrP5TJSThsoR6SanGA
zZp7H-gV9x7dChgLe)meP-Rm*-)?MY=(mjk%pXN)XStj%Dm6X`LalYtJQc1VtzJA&u
z>TL9mBK=_F`-SQ8lZ6`e6XXI?{QvOwqS!tzIhMSQKdL=SRa2j>z1M7*Ou5-w-1}X@
zsl9w*-2IWWP4~<vSM1z@Sgw@k%^>wd@L-_fYy~by)rpl8>X^}okb^cJlrhZCKW$h-
z9X>)!X(1xETtMGnAP6D*_LRNr7}JsX<4p8@g^X>T#Oe(8(RCZj)@`^$ArzT++dAto
zSd3w;HrF(nt(J5_fW(h{K@x1DpsfGYND(cmZSah+Pr41BFRUK_P!;YAjz>8h&BW{^
z!()@p-*^wW^?^}^B0T10#_UAbfvb3s!ctvdwt+m&69p~s`O5u#!8Y>zVMz8Ei*V_^
z#`7I?q?xh9IXZcHc%qpQ>a65d^nk6$<pNJT0)V|BnzuD@-9RRf&$?T1u`bNoXyd3y
z9>?ptS8F09FXCY_df3^h;l5hE*FoPB))DCstLQ9>B^XKWVM1l`2o&6V7N|;m_^cYD
zAbyE;HtwXU2&O(-rF$X`hxQNr0lrC8?|y+p&1LMcpk8@|w*L9y`{n_zo&Cw$PkwEB
z8D4`P1JfdFk8V`77XrTLpf0A*(Iv(=nA=#!$oO)|wZe0K*c?=Ef)Tc(Fp*WY>-_K9
zjiqz|U>sa60cz!qg`iz6llH;Eqeye%l|xg-?kiQNrw#Jioh_J$C#`KXuLNH$e0^)H
zuc{GO?GSOGmB}VuJ?8MiH|utpVcZFS+hR2nHV!>{xZFG;bDetVJtqGTd@p1To{p91
zJ(9l2{c>*h)2XG1O;$cvXQ%cP{@L1%RLkrkBwGY#Ykk6>H1HiQ&cd0av*flcE4)<v
z^n;O(3VBMqnA#E9$3eOvwYAN$it3J__NxQ?oZA?-)2o=HI3rPCUd)e?!r1tW1}*pc
zU3QPIeJLJzvoFU>l)#%s3E5~;tYcqsFkGyZJ6wr`O{(em)0pIq`5o?^v7Gmt`Wf{+
ze<Q$8R2_BbrQ5G(FL)y1RIKS|I4FExFS2`yQl{Uztes8=TmMnT0oAG2^b=|NhbiF@
zCc%78VPUN+-17M4xHKKeD+!ThC>bVV8NN+n?NSh~?WnyEhPm^SmXhnG=pP0H_>>aj
zPYD*+?ZoHKkE(h}?(b2zZtoi1^sX{Q=TNc21i}i9f}0b+Kl=-~fK*sU)E^T$kIAJo
zV9+A)RMX~n!f1EzWwaxF#cP6aAN9pFeEaT<cU~vvz9kwTo1zEIRF!bcxY;ME2{5wd
z|8u3D=#hw0msRA9L}ANTIO&NcUz~z=qn;zj-600BhS)ybMuig(<YLW~Hrio2avxu8
zk|*Cmq7brQ#-pR`y4r@Qwc^iNt^S3q9f&@G>i1RM$Z^Mk$}}VTu^x!KXtWBJlYAph
z-hqQ8=u#lt5RVGWF9Ks(B45&1BSg=23%;CSBzUDhFnPRKz6Pje<0s4ePD>nbQ^qy&
zR3Oq{X4T?O9S8cqL(Nu%(S@KvP&n`e3%p1>-e3r6*D+VhUgHozXw5{YrYm?-)fNU-
zTerx;?Ux&u;&>jno)@beC8ujiV*b+(Pm7aWT7IeVS1Djjj_47!x-9S>Y>skq^b9iM
zMUL4yA69cJU>StzAmCv_y4&8&E3sY>aE4w4wqHwsTOtmgEee3ZJ9rV+<4{=zTU<>S
zvM>iuZKVUqFIS0<o%XdQ!;#0cbn79j7%*d<F~!2f6jmGTw%~@i`uAGwCZU!A>LX;B
z;P0f~ZR02e^9VlZWF*1uAhkmBsxmdgMME?rJ#Z^Y2+sPk*YthjQPv6k%bQ@K5F#8b
z2_xnqvl+E)qXJBsvY*w7TtvsLdz)5+S0RDJCW783_N8}Fo@;4AU2>u)KCda!i#&|F
zs2@bf61+mUURmh_cRB)^PwX>I?FfrT7n$k)EV5ywQQP2+bff-0P2&*T{$Zg%|EqvM
z2g>w3>5C`Ydvc#Lc%ar)aa)S~ehZ&ZGaEQO)R(uL+wX;Uy%LR2@4LCk1F_HnjOJnT
z2cu=l3dN#{wQzm?%)N&pU%InfrK;kwD2fpX2UKaMb)*b<MaQJ?%|3S5WV;?;1Rmye
zyk!|;u($acFt~op4qJE4mU|{&4o>}n)SZmFMQ4%Bb@Ifg11xH;i#IhO=u*@>%_xeR
z5|eOQ&t<09PRWOY@JT+?qm?To*30kK=p5EWpFGiCB*8L>h67o->*enmm(cSdzgneI
z%<vcN)#OX8^i?m6VF;N^cK)I?vL!lElP6fj?PWZSQ=iwe)$6_WswqmaDW*~LhE+N%
z&M&Xl^<I_ZEj$7klmK@<ymTUJPNJ9sGVHja)|TkU9U14uKVd;Ri?)EiE9OWdv4Vo>
z35HI=f$6dP_YJW;%+J{(z0?Y7^j(-PUixa_CGKbkZ*(p8pDZdvPie_pr;qit?M_Au
zg4^Cdc2VkCB1A#d{mV`i=x?hvNL~thE`H0Qz^QG{{AL?MCy9+i<y?Xu@TX^I65MrD
zX<KoA#H)R}H5$ai(`t4`I%7JuNYO2-gbVfhltZtxsV%7xQm}TJi6Ywki!TMoJ-OP7
zw}G)Y?U(#wO>|jE<M!6VfDwxTG|?%~@{OQ<#0c67;Ig8;D?Ch;r0~{pQ!}yntV(iA
zzYYx0U0y`AjZ5qWq9O=j1?q>%e3oVF?iE*l|BgP7l1fRx#SPgR4=mU*r6j?nwJJ`<
zfZ#Fw3Qd&F$Hl->zog-EqKCJe<G^F*HI7Ju-JoD1W8YL<ui=&MP{8~2o1-x+(WG16
z_R>SCjIYMA2p)NODp8bRPzKz!v_$@=0^nwMd`%6ZUlkt_F=RP5u*U~}`oRX5v1++1
z5=E~bbz1MO&*23j)y!AIr@50^3vPkQ)t|C7I6!o3wn}3C1vIzeE{)Scmo?AxPZ%}M
zgn3Aog1tFC3VwKOcBUfCI&eie67xt0oP@_vKcEBn@SU$W^+R(0L>`A6zTzAu%|z)Z
zmYbWBa^EPQ<GWG<4BeK_15OcNkhGE=5E9MP1tlyhHvA@s0{D+cngC_xXQx;rZ+Te7
z?@}ZC(wt4qAQR(AKcV#N@U8c1aK^P@9r-Of-(E}_A0bPOz_m7((pay?M$v$p4-cV^
zYYC$Tdop_=AFn?9fEqN)rIt~_8X+BGmb)cL4}`pd$!wI;XLbnEL=h%~#df^k2{H0?
z1#V<ds8W}N!65WXBzOf66Gu-{%W0cLjsqT9M5@%pX05zzYAWzIZg{1hL%!I8FQU9O
z+%)Mdvm9AO`zeZAcROkqEQ&;??RXoKO8kOgKAxWV-UttdxynyJ-&-n;HBjZ%=QIsL
ziY(essf%nlk^CzJ6~tn!s+_#IxnH^2SY>y?Jqs99cO?tIA<;uYh?-aT_dBWh8g`C)
z0#@)r_RT(<5rgR)b1)o_MI^F&woy}nMLB$kP_POukQgnUY5U;3!E8g$9`mMXtUjk=
zN1u$Kj-KMBHz${Tud)nQ^>V+m33YrxNWUI_GSj=Y8P;qz=Ls!XNzt~=eGEZR;FYE-
zrfVe@c<M|gO$=+ZHq2U10!S|*R<DV=X~52u9drq4eKX}>d}p!l>^^hSE+t{Nf8M<M
z>E-OnH~PxrBK>v>e=?%b01K)tqPxw@$_J02Muslsk+&Y_#p3V@P2qxWy_K1Onm%Wy
zoiJOBQkIo%<FN<VXO@(ySj5*HZ%|06|84eES&+WN+sN=LiVWi!s)06w;}2MCqqKfo
zKZu0ovHN|5BA<WX<vm3X*>0Znf=qdo;z<A?5sZwG-IY*gH^|1*;3ZM4TVOsaOS@GJ
zeGxK{gGnkulH}#dzOD7K?Lp@*NS$U|$X@uVQfdMw)Ac~)&32{`i5{(w^&wsB=WAJ`
zJ*Sm!KJ!{9Vx`6yycVm^!&xR%#91pyTtpZ6Ohh1fWc0+dxlcSgYEr))Ew&W3@X)90
zQVNxnvsGK59hPGC$h&$0&ph~|;{3HM@2mK=ZyZ+2o|N9ZlLv0G%XNH&Hrk%*T-z+j
z(^eFgZtIf*F}lxd5)$b<!e@5dr8@hjdYrv+MYWzasxsLii3L5B*cY0jui-V*8uEW4
z)pN`{CYnx|@d@p9ioLiVNcQCILj%1F5c+-|7q5CR<x7uxZ=`ALLA{~sN>#xpse34p
z-yRC|Zu>A%kRaVRT2z~gd|@6Um=48sp44OL>+sfiS}`NlQW)XLUfBxV>f|Xs^BX`%
zgjPhj8ZYQY0N)@?zEpe|tLoZ*YlLh$yWeB;1%2>Oux$>|buV7twSD~9v6(IWaYEI%
z4kFo31O06|ZA*kC6oz!(Nl8+2a$uypUx#5xatW0Q96pd{Yr$_0EV}+&`|_Db9w8#C
z5Q+ZtZw9(%QtKIsdLi8zO2<x@qIe69_QXcjz;#tX7QPxB_`^#<n1-LXmV#ZXIC&R;
zkl5kPY~^n=HMnXjxC~$Fo8&1$voRp2^}0$(C9Y*;dl~5UXFw>wmOpl=KI#p#r*6os
z5B7HlVqkM0Z|WO6<Y3bYO}w2I5-p6i8?CmQIa_FvQ(D$SFHokYs0_gIV&~rft)b(`
zNPp!ksfI{2q~?8+R)7eLd;NS5c*r*)uCqA#9-enM6d~iPRcp-hXK`Zu;vO}~!R@1-
z9@K>3L}?-H2MDU9TP9jIGB#o+HA3rixf$Z?rEpPo6tZNV=&b_`(U)iBJ5vO~f>xKL
z@>>|zlTHKKL=_%)_}E@q7Xyl9=!F;v*{}o-p;-ivQTolieIYm>JuLM0!7OytjT*)d
zBT;SCG<uZl0Yzsz>L=iDL_XHrbO!Ix%5E_Gi`#m-`9(*GZ|=U(mJN}TUv&3;eAF|t
z$d4c7f78#(S)p2q@Q-8eH%>)R@#G+mp|$L!Ftf=!*6x-3v;i0psbH>MUa@Jfo8~%|
zPi#481;IIQ0gy}d92++Q!V9g)D-nk|YM^MeHRSD^_6xuPf077toQgbAxMlghs?Zrr
zp8d3-{@T5qkaNkPbr%;F*Xceei46J?BE$uYi+_K=ULEwkR6HMTRz;Wk9;O2H^+(BN
ze!GJUM)vl5S?iF9FrUnD-Bj(nNq}oQdkXvLV36VAusqFI?Zxy-$IZl}fMfDya66ON
zRUr}BSxU$qzaRFn`v4jFgjDJ7B!eHl^T`IpSR>4ap2<>Ai4x!5p35a6rsE;k?<Czx
z1$D}XgHdKy!2B^+fP_3&rK_$P-ny<7&DbYjVq4955s-ToP&a%GKl$O!Ugml@r)=Kr
zyoARa4UO~Mcgal<d<DGlJkZ_CYh;6labg6*`jbv(Lx509&RL%|wi4pPM;#vWIE-1D
zr&gkccBB)K5#^k{GQ8s$dN*QPRzP#5pTkeNstSU|{kwmSQg6Kt!ZOe<QsB<K<z-V{
z%!qq2iq#2pczdUN*P=n>`QDy-I0(;TY4)STgMOrW*R(0CoprAeE#Ge_38EiGc-Nvp
z#BUuWodQ6kRy<1`Qg9$gW2_+NbdB|*0saNH53SJ^lpiZID_$)5ttg=b_b#dJ(=lY-
z^7aS>Dx_N9s<yUq2N*gifF6TxYYCy*Aflq@_LdF)=cbT!$>#SF1@LdYg}!52PdVLJ
zn^iQKYkr@?I|Fif;8gF@&(nZ=N7<ViNPl%L$BRS&l3WT67ya3UDdyG)*7lxpaVPM|
zlMn?U?BiW_I5z|6W{zp2d=65dYL4iAm8YNh8L@e_E@$tOTR#KN{Ez2+KllA=@vlkt
zgKHVVB<SIw)U&iJzwTQ5yJ73nw>uyN5_CfZ!SXpNi1F5wYdL-tf*To<sD<)x!7FGU
zdF@shBS6s{3}12<M+#88)Pz(vsB6aepr}e!oWo>CDWFH$Qj+}d{{bz#kLglk{*#Mw
zCL^)*tHrza_EZL-<+2c*htc2CHDLNC0ned+zh0>e_Rz@qC>nB(7k@h`(ebAtpNo`a
z-@lglTJN(i>;lkiHA=l(OX5BOaqSB{9u+!ubR!^7!j$G+iwAMs@~yHQgZ^X&YlL|p
zUxc<n%&pMZ5q)N<^zzzRa^t*KbVb#4AptL0Nn5sDmVg@~I@}O?&P8Tl<_IbsDvQXX
zgXIv0uZJ@@4^W4GWUByYlvJ)`+A$OQV*9t>k1Jr!d1#gBKnr{a1AGZAj<oD{(23x4
zF5wkLt)XD){rvrjH5Tw81-zMHF5%cS1KynW00Z<&GWb<19^UrI`u&kAeN{zcz<6i@
zEt&zfq`+Gl{Cz7@y<5VZirRq`5pH1;7+52(;)UjV2A5vkWCCn?JniaQ`A=oddju4^
zA6Uz(arx6E)R{!|@zikcaS>$aiB$nOu~evI+CLLo`$Jm<Zvg`c6~j>v0MT8FbRc;c
z_0c|bVK=|uOlXPL-ez<ZzS<l?!x#Z75-J#xj-s<z43fOQMeVOq_R8ctrk!YSwV~gU
z9~lbj07Jn%#=Djj5^oBBmk(S*QGzL?Yc|OlVCyTig<1Jd7Z0oW5=rx_01e+RczZO+
z_KsqZuz*5r+-M=DmA1j%fRIN=e$H0fOhShyPR;r371<=255|6ssfswic?PD${(Jq$
z6wUxcapp&fK~obQys~+9(TaP|*x<nufy`EhFK+TyYz6!+9)#xU1R_JuAz{@@YM&af
zc{S}S6LF1kN2?d8G^*CQCr^2&vN%xmCj)`9_x4@bQ&#N}DGd()+BcANn5<0gZ{gV#
zU|?hc7aaT`CewM^GdrZhrEjY$PJ?Qwh=3Xu;vhi$CAA@ZW$FB0uoOpZu1XRg>s`8C
z%5I3+!gz}-7MZ~YG2{QE>K&uwe7~^KHfS2#wr$&uZ8eQ;H;vt>u`zKP8x1D5-EhK*
ztuy`o&-<QrzC3Hqhnab9?fcsM+WXoi5EeWoRYwXN+xRnzaY?M)H*`6tJPBwH0=3<F
zh=^j69P%+x%}foSm|y>k>{YbQ^QOhk?s-I6m7x{?zNHyK3DtCOEHGuW;A08ZkVeQJ
zU-UQpYh5#Z;{B}=aLAC&0+4C7UT~{2LtR*)R8>C&hWoxS3E|07@>d#lT_6`DWb0MF
zaO&?=37sA~4MdBgsx^0dyKv^k82?$#_F4kXL2rGltB2DU%lnx5(p$2TWOKY?GY?o9
z30KZDQa8kEsv=dCTtze5=nzrjXN)^|Ns*kY9xvfwT?Gx`5ekde(;KY;f<^S6T{a&0
zZ1V_YLkwtVh@my;IV(e1f`Uk26CHHvhu#K8LImMTr{6uw)un=(&iIHKFAK%O-K%^V
z&Z3MTt?Zqu^jT8~VPbpsjUuj@kYS<XN=)*G`Xuu&Bk8_U$Qcysyy359{-mcvfPykc
zV|xp%-qb1Ojs%>r9_>g^5Ep6I$39-S_uss=tZ7*$>>6b+@B{~L%pTTSwG=c@RDR{D
z{&MLulcFyg-2OY3zt~HoJ#;sq&Ym@($5k{6+^Z287gcB{>seS3kaI$Vv16gTk}j8H
zumo^}Yt9c~5){4;q#+*X(Y40sNNNpe*QPIAa-1kI*M^c&_<Y;VK?OnD6l#X2515bp
zzn@7nElw{4FwdTsH<1s`wHFQROhsRv{Hz%zG%yP3ywtVexbBKxZ|>SJ8kssOtb~0}
zoFJX;8hmbx>_&0?RNhM9J-)=12==&(VyjfWinP~L-+C5mx~J;-?t1HcC>peH&xKS_
z=T~|IPi8i;w;s|hr%Hs|=({Q&W;f+JcK7Y7e9>gd&?Nqu?haI9<N}N*W310y-JA`5
zm}u5j7r%(c=p07=y8q%(fxXFsK&xsQGNNaNpe=E%v2?3D8-;)lo?<J}Whugzh`aA*
z>Jms@d_Iv~?eA~S4Hcb@CZCH!{&ZzdR|lOOH^r`eufD5k|4qqllP>2JP&dI0Uw8Km
z+L|j@YB*Mq)<JEySC1g+Zes1a8o|*|^%>A=v|TEq_|l5-ziG3yTp+%1`j))tj0ic0
zbk9;AO5ViHICh4#?W?4IAp_RFx3v>xYcFT+o%0PcqU+va`T>(?su9K=^J<qmy80su
zEfzP=!R8A|%B7$?$4s%H-J?x*0pu**qu2JH^i9K)^@RPfoa5<^v=%ZS(9>_>mK2e_
z8%qKgcoouLH?q$B;Z2J5@5V{HMK*u1nU6;H`Q5j8^+HXebN`N5Sol$p{+I<13~D9B
zFp`;K|Fig#K10>&FZsVPp_EizK5?@{gbD`rETZt&FmAHA!%6UAGsLKFQl$s?Pp?8m
z?UBW+29Fn_n#Pb;&jh0C+~-P+tk*ev)ZzV=Y;<iM@@B}T14w;$lgtBIIbJ=Nf_F7F
z)hFlNcJ+L8baKGN#70fAA-bDq%U-d8`X}qd#X2C(_OmNTs&hk96cCQfldLy^3wr9c
zrgO$y*5v--W=-(xebVsacQ2z1Ws~>Lw72UC&(~c(5oxmd=h2^<Z>a>|m`E%&)K>bK
zJ0TesZ;wsaqT}A$SRPJTvY6qeGi5hlpGkARkOy3x%5Z^$5;=oJG`F4yI0@COlnd^K
z4Za%RZHh3M!sfF#?$dA8*6n!WJ)h3?xxFu?y!Fqu#mxl~);SH|%eIiI?bsBgU<dF9
z1x}aOJKxn49sk0S%}cP6CMMLjsRa|St7=JfH;4#TvvBjgoi_251n0812ts5QB{8Q$
z5k6XM>1nD1Nh23T-y};q-%_BV;zZ{qK=_}z3a(lFnWGkSsen50v9kyHTQ{jxJ4-yl
za)*p*HT+WN{<i>)dGpxmLKk8JpKo>x3E8ElN%X~OSMxLX?=AgDZmqg*Ffu3(6Ec)q
z2wib&ZbwJ&Uz6xQ#EHM0MC~*SKEuxUaZ?J;Mc?Wzl)lq6I1LNRc+vhFPWCHI_tOdv
zV6^X@WkYg;kb0)ef}_l)pXv<#X$-&G8uuB>a8d(^P6Qw7Yod31Ks;ttX~jWNgxV1=
zo!fAQvDjM6uUV*ky}@3XSOGJip52eANH)(Btm~Kn*Zids*W4)(-{=a`%&>60EhmTR
z$p!y;=Xw92d7hftI6#?6$WozJ_rq}rgluPgyIPUBQP*Z*Svm4Oe*SiM>Gd?$aoA&_
zKbx<u)st}4PdEeBjO9M7bJ!3&yt@HQJx|shom#gMB}Z4*SOSk1)XzU;*n+QJO$S3z
z+1-}BA1-EbcAsY8{6l|WsYR!6`C!@UFC>_h{{7O6Fg~C}@Wp(AI)+cE!xS@a(oU8#
zqPb3XiSg$tu8V3B%)o|D#4oKF#{E6qx#V-lV)de?;c|7$>q1hMo;3M6N3i0At{N?Q
zFtd<BgVx{4S6F~~&U%!ISl7-uj6tNxZC+fX55NwW9WFjQKf**`^4=&_oY+9C={*hA
zNs(~{104~_N2aYJ(N<ffPOro2Rc%zxhNrwAR<MxA>P)Kd8tUpX7t+BcR4#Ot60Z9*
zXOkgOfALynh|%%ySId=PX3R2H#&Z3OI=ZfLB>6g?1=3AZmX<x-*q`GH%}94)y!q0%
zu>3biEfyz2+thxJoEzcY6PR*1*VBEoMzn?uZ;gDiK3W_6_9Xz+q&yM1&6ZqkZdXba
zgQ-A=7K6dOyUs7<qM%!0`!k(lqr&FStBW&e^)nD(8O6^r1+4(KX2B;vh&nqX<k|}F
zpE#bH6P!lmGGSWVMI(lagO1ndccGr<Yxw#T$`)!u97m`zAD(Nqt=WradOX0cOGEL~
z8NO2fqg!p!Gcvk$p@;UXzW-^IGL~TcB;gtn8`OWl>quE$JKs~3fOB5B+kW(CVwPwh
zBf#*rPWPvWy;g$yu@7zXao$3_rM^wXuaV>Vg%l0OaohXx<)J#XwNTvOhgACqFF(+W
zRcuGJQ_c)p?{k(StFJ@TPK9q-9kQ0FGjglLL_POAG+%67q@t`|z=^)cA$!6vjR$v%
z^~+=9I!o<ZFE)w$yc{P@9zy%A3K?{jC<%De5-~rz;>GChQ~%7=95N8b_A7*3)lMf^
zR)(m>tIA7OHS>_t7jUj-&mSzsC8(#m!Xb=SVqdn4+{$a`rKVb0M*qf%$NDt~Ne-sc
z(8x1PR0RKwPC8Y-llS6R;Z^3cel9L}h@bPexmA0*Nr0MVrAhIz^5YiFNv-#NJ8X-y
z>C2$ic}-lfmc1^d2D1IA#y=M=Dmd;@hJj%|9cQFgt5Py@51l;Gjd&Z>(4)qi^U1>9
zK!Ys_g~KH+NZ`RP3%n?;$IjtdxHA>U=MEa5feEy)eY!z4ZY&aAYBN(`$P4+Lm}k$D
zFRQ0_FX+Y@{>`IuXS6H4%KDb(bCA5j_4`snYUI<!XM^LxON1VMwD(}U6{z_&)q%MX
ztG9GX($}t%*TfM?!r96mVh;i06%u+V)Y!9V$T1b8Dytv-cTA}*;}INVbfy41F=Cum
zL2gM4Kd2udVq6WU*)I^{#%(e9GZ*s7P^H6b-EPS-LiA=;CrAU<BT+hE-fT;BXGk9F
zn-A=#E&BG>O_FFaN{uM0GvZHU9|H&|zRZK34%~9v?3K<YAzoeZLFpKze>rxrjMD@}
zG;YOhxS>Z;Dc|R!ROD^}i#zyW4g2}jXXh`~M~f_Td$(Tre;&j`2lrb|wQ7WEs@keO
z{^z6hgJS8lstbmIWi{H@VO3+iVv~C=+c6wV4ryJ)Ap}J&MF~Boy{!Fbxv$bX;wfK2
zD7NCzvwE9R9w|9{{PGqf$Iv%x2lgK1BFs6m=K@N?Tr4CmgFa^~u60emPA1v~?bcCu
zvCU~(`>aH>(F13p573JeIM2;%ebG&*JzMe+3|yw6x1Y;StmiIi;Ba3gEqJt~v@##}
z`geq(bG3Iz4g3zy?2u5@-#|Uu2vt5`30-x`k=CmSLs%54J$M>P(XZ>}`gFMuK=tsr
zDt~Lg)LoWe&3qTF9@p>ex$M<Os=cU$ty{e=&70pztGoK!K<afZL5{yl-M&|~c(dyS
zm!mA(EF0Ym{of?nVn!8xD&kQr99#QbHXW8x2~PYi8au<St-j(a*`Jw-CtYhe8_RMA
zF56$~<*LB!A8lwqzSGf0d9&CKT+J~t^6_?i|8#SnsB|XssR`87#gz&2s;G3FdP`FD
z3ee(S>Jc<p;zyh~8C1X47-VoQ^ymx_LlAZ|!<=P&ZFFC)+t0MOs^7UjaTt;x>rao@
z9k;pn<uW6W#4cv#M76R}SiOCGi^1hBV)W$$QIEE%;olziO?n&^dfm+?RDGX^E0S=A
zdA>TCitb$KoQ~-DeXq;kl-?3It4xoWkjiJ<&T0w^5W!=Hy}dUij#2ki^o$Ddbs^~S
zQ*&(3;yGogcJ6kx*NHt-=3656KvaPOZaLfd>@mEPO^fAU-qjL8#kCYi#yUjTO<aml
z55NSkQkuSO5CknX>C~@|=+&YnW8kHFd0<!^0((3Q-ZlvNnN7O{T&jc=wRrVLUVU<v
znV_wKY*j&=?ckkBN6Yct9Ci8T_t*M_&A0kdQ%Qd;0Yr13GCfj(EF3|9F*gD~HCnim
zykE)|&4$U<h>Rjj4r5xcWTV0s0vu$;`&;$$MjorD$m9LPN{YORuTdsJ^0)-^MRlGd
zW~`%a!T53II-u~IhqV)Vrso@RCnMS=PF<gs8Xu0cdA*IJUAv(+Ayc1w3&zusT<P$P
z<UTFZZrx^`pyP!)I?F)<lPu%x@pI#pEO05ZU#fGuG)FT%kO#n1NtiS$x_eceT3@US
z1E==Y!^zMx*T1psM?FGisDK{6_igoAS?c7hN`DEP;6!4jr-SnemA;>!AHmfq%czjL
zB{^B;l7Plb)Kr_baj5|l%I)@~c=-+7bEcnT>ibyV6wd?aJfK$85#pRdYDaj*OJ}18
z^D1T9P*j-TQhhvTnd1ve?DnVwAG_NtuwS=2{D@Pm{B&K~BVHexzLgZgsNqD5_Ryw*
zW)XW1W>Addmb89)0fK_`JHtEcYw3;~$#4?7bzg0!qKqF_Qhm7I3rkn2wPAq#DO-V*
zKTs>07!x<fr7l>>V=EjVkQM!KM*b|rL5ezw?0<-9+%A0#E{zWBD6(}>_{z%;R^2wH
z!(@ALtbDDJY&#WaF@R#Mc+2a${*X}A{&wf0c5c*cDG$c>vaqk9FKtnkuqF={!$|U%
ze}g{~LqL<03xWAeeS<-EWBi5l@1|cOb>+RWQMa2+dxw_{r$MpS%EGzOl(m%=c)jgD
zXW=xL6A&x!1?q9MJ!0!zSg;u=dhy!InA$vbR1s~Os^A>C8(D#OUyDOLyhp7D6uP$T
zhI((T;J;BBYP}c??5d_&4t>R!DZSUhKFNC3@44Y}6Ojaj%<*ICGVDE3B-igECy1V$
zBYN1w_>H}T*RJU~7bY~%AV?7PInR(g1{~<xFyc)Uu5r18d+vwMj<f08FXVf24Sn<R
zx~$B_ldIf`!$i~rtjqH^x<Gj({<SI4=e2xy&uZU~G3M~tjiy|QNDtkCpvP_q&G^Vu
zrEcBr6Gq&lr~{eo4>v)Khm#EaQYbXR<x0i0EfytC{5PpTiOvf{Jo7W)3eQnxJb4qd
zgx<B4X`B&W>O?6XE{MFO@T*J9!h7KnxT0_NpzgNm<~f1E#wm^54uNniFhHHbXr!QC
zq2}*TJ<Autv$zu&;s2urFyn9G#zZ)7-0ojxE8%siyScV@v{>cWJ~0u?hRu-(O|qq`
zcwb$?Es;W<;(63+{UqoIdraO|6Hlx?(61I1x?DqNeenCpQ|F-uYknFz$ggtk2+k>G
z7VyYC4+PIPa8Mv?13Ydi+g^<i*z_-#?d-kY@84qLa)S&H0xKwu!$tX726a81)9*U`
zG7n>*nLD}GeDx~WD|FbWkLt_k9}j9;8Vt6q`L%0^|4RuCNBBs`C8cWZ|K2EBaG8Ux
z|4;l7C75w4+nV8nn)(sX@(5Fpt82~31+75o-mmABO87MGCOmo;9M{k1)PQ)muuGs+
z*bMgixlw|HYj6@zJ7+Y}`_<K}=BDNF=$>H+Zg#rl(4>nX3sXjp_~^s^(7Qd?Q_}ez
zsWBKuFtyHpW$q|+cJ?6NdTe|8YuC>xA|?>lu3n&g$Tl%=j-*%Z*IF@QswHmI2<%H|
zO$zen4uoTV`}QceZI9!&q#$kHmsG8m-*CH*l%1_1YgP@Qztr|Any+$>J*1cZ-BTof
z4*DKIRBh}Toirs?00)u&qzFsa*Tidw1O9V<Rh16JWBV>9BRJ3M$Y5pMpuT|H-LJx1
zN$UMejSP!{7lEdqdmnh&)`fGqe{>B4>;E|V>chOAK44*}2pbu1Y)_)H#UaaV?Wh`2
zI}mC6En>nQN>+1Jh2AUV_MqNz&pa=EO%DAK6Pfs>@5|OV%GBYgHt=<%*ETn6D&E>c
zUXHz7=kcI9#uPucai{Yatif<p&RFyF^OKi8xo9rG&yMsU!w{oqO_M8za1Nuup)e&!
zJ>#QQDt_d=Rm~|_CjFy+r;CaCDJZgzWjWtL#KBV4^$~j*4Ik)zDZ6O>*dGK+`l-h7
z8%98xnVtrh8@L!jr>o0E%ES5$_?u|~FYaPN(MpcKn4l4$ROOd_JK8Z+953+7R2$;f
z=Em1hmY$LAF`k*JaIf6W1ln`)uAB|u+`(&AExcyC7>9pJM`*S%`O{(rm-n2=VL%ge
zNK-g6G<z5-b@|Q*nTD1v{vj*ET;C_6#WQDI8ls6*3u><#4Ee+hE0*F$rAj15W7{N<
z6C)_=`H}aV8+b+83Yy(<V#jhW*LL@!yv=b4{gUP7{@t_8F>Yyg6sP@tkXWVw5!;yQ
z@#7#LjZ9tjvjDRHOyajWX*0cKyS&Y9y`lCT)vwQr_SP??APD`-k1V>Ssr<|j+GO=!
zUlj7I$eF9elRx(h?4ZZuO}>WBYa0mI43NHc7sQ>no|{dRKdgaZ5g|K@obFamQ9rCH
zd5KVJuUriHk<^M#P@VWZL(!bM+^@L~_i=<tqt>YYU)1hCyEVs-W^1mU3lE?XziD5Q
z6Tg$X#qR2}%Rpyzws$z>n!2zT>w(|Jv5MWw+6Y1GuWir37ig5Oh3nOgYs<Ki3&4Fx
zdDR46xXV^skzrO)Bh`xK3*s&-3^lxcuiL1Z*VeJV!cw1x>`>SY3lGv0rTWPIEI!!Z
zFR2KuJpuW4Q;uYe({u4G7O>*H#elWqJm2SjKhbeM*>lS{{g9!I+&Flt+i<oz?)cp5
zJk`yyA5RA?#9n_46t%f$WRbeE32acS+QUN0^28`_e?BX+l&7FKcU>DwJ>A!pUA_Mp
z2jXcbDsw|2UR+zLj@j1CouqHMxf}sYHF%!YA^*!O|B>+lD|50EF08a^h}43POIRiX
z8bVZl!vDz5M8BI<E6KR?1K+8}SvHh;w~t66;im`{YM$f6+_P}6Oe?PFvQy|?#hDdR
z);`BuIR#d|3X-=n|LFjy3O-s%wdOuHs$`H<ydKwFPM)gk{86}Q7c0Hz)$tH)DVugc
z&qn*+;`2n$VtTCaEck0paV3Inq|RSS*0a+^ncMsIj%TFZve6vcM>LP!yhguV#6&r9
z40>&jkp9vfDRuAcJ}ocHL<*YPz!WFV_9eu)66&n}<}+6gfm^2ymO&+VVvQ>ri60Rk
zVuSv;Rm*h_)qI;0oM2qm+LI`q86Kp3>y@Eaxgyg!dZpJ{NG0;6*fA>mic7dc<L-dF
zbUM|Os(A1A)(&c(pGza^9&P53EMBc;>OwD<VH(X$>S?el6wKFl@aPd~?v4lZad#PP
zihChmuNs}ET5-R~$7JZMB{iLH(|%H;wb>tSQ)vKgJE?$Qp!fwCqk+H#D*Dxe7;oiK
z3gdJu*WjNTtq()+hWP`TlxoD3uwO{pO}UH)3YI~_0loXM*34q)gCxI%Q~6M|7JGg_
z3V!}iL|$Cw0|GJ@0Uek4yHo7H20=(1P&>kRAN)3tu-CK_5%FyqBj&sNAcLgP@}2r7
znOdBUhToqXqM)#%!BS+`ahT3)BAO;*X!OOzk%hNUM=RRAT$fSNi7Fxn0#{|6QrD=7
zbg!WGuTcczwvkb|7rP!cJF1XcFy%-hKE{a8%MZj{T`O6-&(QD2(qPu_&}YP?MVhJM
zUS_9Ace0h3Mrg9&uqpuRqRGMSh=8O}z4!fcW){}oX3qu+yc(_7g(=Wj`yRu*$G9W^
ze83Tm!>3rtQbC7rwqPpu4O8&&2)EV62Tp}|ePb5V^8LxCO>Ho?RyL_FtbL|YYu;<1
zx4gsg7H4Lm%|)0|Yyyug5+b~zsr=~@=0(I0XOu!(bl}4SK4=QFe=D<4JB?lS_H62;
zm8yYubyQ+X<%IB|l=|9WU{I)29!^C)Hrta!lJia8#4qS@5@5Pyj4!{?J;MVOZBh}!
zYSGc2Gig1HSmqv_Zsik<F2=aPHze1KjyR+UmnfHeiL1Fd&hhVL(N+-)$ZNSRw*gOu
zH8MMK5HfWUC%pb=YZ3luYj53<!hkyJ){yK`Gz1u_p(-<rx#&2{8xF#|DlJFqSS@*S
z-1Fbs30lwdm3S9-IEx*zLF!?=*=`exJs1Q`K*kb__&o|7^?6Ag`X}<o6VLsny6xJ`
zJ8bTs9G@z>UwxEL7*Y!2SNbiksH#u3D6g~l7KsxN=HJNtG?+|wQKlBwEN!r(N@_cT
z8s)Y&9E>2tj4yt;aQxpuEz#rc1xxDet+V-f{#<;<s=0bCiP6O9zIz$DA@d`R)^+1A
zH4yrEYtdC5L$03oMAPtAao+#*m-55z)(7L{wC06mtT^W+gc^j7tQa+2<iLu6`C+pZ
z^piKMt*Hg80Cak&LMg|-<mELdO26JHHK!E|*qb~=S&d&MuFg=PPQe^x-TId|tU_~?
zO6>D?xaDCQ64y5cN1aqd4@2^MkWw^ZaolsvaCukgOY?H9d<9KHJTD<}HBcBJvfwGa
zuIJF;hfP_@mbxE^lKji=7MrEaoY~lQVqJ<7##_Y$PX4fgMH{-jdur`zUb96O(8z4(
zt`l+R$#nNGm0OGr^Si{H&uu<Lzl1(qVwaS)5mNbq*9o&|UzvZegCmIYyP$33GoXp!
zW&WetDgH0C6Hlt2#|_<)B!!FurFdwF3Ry@_-GZbWQcFRW2-F4)aEf@p@qT}8OGk`|
z6u-KiLa=^3#=t=3529usA=+Vh^}&R<yp=9y?O>ND$6)t7Hs=N(J)bV#I$L$T+GgR&
zgq1Vx2-7dwZo9J#+t3@k_I0Ys$TeUQ*Acu^X|@8)CoXlC4viwtkJ_9K|HAh^;Ch#e
z+<SjVbXmskyJ&-UTn5V24A)#tf97F(q&Q;;Y^kivJy8L2p5#3rwm(L>^Z1n#j}6M)
zTo^9&;LW^wYM0I&WCKvrB@(p=RcaUO6f(S=%x|;ZY*`J@2GZP?i2+U;iKBhrBy>o+
zlu8_KW&+(jm|pSpa4m|lSoJ2ubc+v1xtP~|+5O0(FP%^ceW|nM_nlKN%;+bpK(LK>
zCpT|pNY}X23@r9g|1$K0O=&-b0RvzQAUMP&h~W2sWg?DHNpnirBhF5@PD-(c+h#e+
zG@kAGMov5UfU(GJa2YNB6f4+BlGY`#ga0&xhhK0LE4MNplX6wdN{M52{dMn~23@`F
z?vd91hK55*OM$P`JwuqZf1>SyEp7iGacx?mgpHMovS*lFOt8~X;IlQ4NBbn&jw>bU
z?o@4tl5cCXH{|VAaD-L1VlSh@yUPJHs;@qN#ADbo9_UUgau;adFIl~7v|19Q#pOG}
z6dl<sNk#r0E=uzfVI^~2_U^MKrMGOaHquRXRIb~o>>o&mwkyqJ^@n}V-TC7fKfUif
zXg;0E=DHyt4-L0B5uD-i(ERefRBrG^)PL4I&yg^+^D*9!gQFL2zP4aB8{qA<J#Vjm
znl+)$_QsA7jQMyGRvT{y&M~nbYm2^;O~5%+B3>#%8<MoMI|6fZ7&^q8m8#fR@gkL}
zZ+odP-J+k5F@B?-E;7U$kpIeLBFK<yyuSGN%9CjD`Wc7N$-}27ji2DQ`!^($?*kOH
z^aq5vETMn53Rnet5rPlI$edvY@{0-I&5I@yHI%K?eO~7S*#(X$$h(~aJ$rQrcAYQ?
zKLGZe9~eOOgj0|~CPx1O<@}sT^}W8GFkYhGh+x4`HdwM=^tgSk&$WfeZU*a|pJbkP
zt$#IkMcHSj*NP<d@c;;npH%MYr#M^Hk-z<|$7d-z;o(W&yd<3hiY~Nay*x!Sell@6
zkZKzFZ29ZA<55p`t@JlrtKk}N6BdYbl5{=|8C;B&<@9kiHj9&NMjjUJj5LF=<o~(;
z?PVE!b~H&kkFr4%xGHrk8IE3u2$Qh1KoN9)ZJ(Sd*#emB=s%}%MsYw1O>x<TsA7X(
zr89b`kEMH>HLfSMmnx{jzXE@`kg9+0moH8SepRHa)G+YOb;BzERTUd#Y5&<!&GhZZ
zZxXsk)e`S;jBZqdHk1<8NURU&i8}0kdPEFy0iHo$k=m(jWY+w2wB4+oOYQDe5)=!D
zmLEV|B|SMA;#<4fv7!u)1&Dd{#ZY&?FW2}-SW{-J3Zb{(NLc^p@d-dYzPr2+bX=;|
zr=s|fDkd^EP52be=HHiPbBDBpf>N?K2lT&kjuug=akKFTrS^39S7^5SDe9eeYiupd
zTF?kYY2sN7GZo!Ri}9ZK6ExdymmUBSB#NZwQtMN&eA!a!BD#`#Ijai#=(LI1{-X~%
zLvC9}e^)4#y>;Dg<?q$$q!7MGMv803I+G~d5yZ!er=`=il!LlbrQNY3J~1ZlFy+Pu
z>Ev?H43BspBr!d$%^Ap%bQ=c(VWQ28sxj#IcFKQ8*+wk=k?eI?z!S3QlY1fi-7xAf
zFCT|5za_ldhSlos2TsvVQs_|7OoYFzsC?YVvTgIJsLK{z2)NdE*w+%;ngk&<wO=~M
zfBQ1O=BvL|vQM1ixiqeHF`wPtHGSPFL{fFOZoD0M<!0{4r6cGGYM9P!(+&axTWk*~
z6i1Yj>FOC9eVcG(7`KPFF8ekX$ZN;v9>(q@s(pWJ>TCjh%#}ff<UxFcMjLA9p!$r<
z@NJdm2|{9NyB^{AKrdGYqsh%5?dzBFB}JF2P7(jaDz@MU;&P?gk2C^AKQO~VGGeV$
z=)z>WynJtqr{%hd^&p=Pdd~M}m{F^W48SIegr3^v8^B6BuD9qMiQV!9F$S(<A%z0;
z5}?hB!LpciwvZ7H_qUSivcMFHqD?=)+tTU7p%{r>d8vZO$-%k91E-0Sl+Z~md{t{9
z^nMYDEiI4}o5IA!#Z(3`5uBm-8}h8~yOtPHAA4U`biC^f%}};vn=)MkN-AhdbuRs%
z83{8W$C^r(lcvI9(^#?T+}p<Q#jr&qY@?2r^+t%b!{W3VTc@@1S$Rx}i{WOqNn>r2
zKafed*YIoGy_KS24`pZw20Kcw?+xDV;)xyDy5X%Rf<CAh;@>^1M1{hc^zq}I?WGsZ
zBKPN=CfhwdpN|7#lqb16VQ=qh1Jv_-27S@coZt14fBZ3z+<+IVpCrOyF!tGH8swT+
zqdzsf1I^7X80_9AdgRm$XiY>IhBL2Ra>sm>7nLJf4z1kt>MY8i+=SI9E^5(Q^ZY%u
z1JKVEx;*Z<=DJ?iT&w*Ob3N8t8sFd-@S~E3F%h7;!w*36we9d#iYHKBVs&P;Cgg9)
zW1y-Zg;ZWVB?^7tl!}exWpTZyKhtr!wWKz5jt+bk5A(I_e7hRZ^u6g*3%4rmwlI>f
zESHPK3xcp1E2?zTQaAi3Ll%%`dHEoiouTmpeBAfs`1Vuu(QG$*VgkpSz{Tram#-$6
zst8fpa0qc;tE$$WoDzut(&RpKL*-R*0%V>>XASGMXSLkoEm0e4>vYmt@~X~|=pF3A
z`Oaq_SIl{s_@nkp=G^Y0S~6(s#-!=CE(M!}e0CP@7c6%jI`n$OIF$JX*nmCQgrkNa
zv|16L>0(hl_p?3h%VC4|-hj;?vobo?XCjIy!bh@KAAB)={(7xaG!!`3ev?a?-U4k+
zaeBCIM)4blT2?S#shq8wtcy`+;ugGUx0~A3tU7d#zD@BJ<6#)Wn7$y^oGdsrk~Vxi
z+dl)-!eB_Wzjf>$x=um^zzzQI?0vSpn|za40v*9|vKZ<Nv(tg;i#BF0Y4tiQ&>+j%
zbiNk5+D65{(U8DpvOIrg@MV$EeKLwo5z^Os7T3#I@610ktVfL8tHkk7WA|f%gzm3h
zM-N!L*+U>HH7;EC3{iok!2a-B5DT%SuNuajcwqPAix^^8;bl^G7-Q{J39LWMcJWuo
zZ!ldRT0E9^*Z#K2Yt9erzkHtxdtbjQAVt+0=SokxvGj%!5jdoB<=)4g5<gt>x>;*x
z3p&XdD+zXW_6NM~wOa8m%_)!oSWG|_z2^bKS<1wuX9NIm6_$YF?-eV~cC>L05l0j#
zu;8nj7Q3BQ8snd{Ewy86r-`2-pyuz>?g)QM*WRZJJP&5!_8-=Y<c~L^aGubzkefB=
zv|##S2(kKKNiC$Y%;~a;tom0)`7fGyuiHS_Y&ez;>^?^Fa?X|H*XDC(uCU32G_Gj?
zp+H=ax{q<JyaG<$<vAfpskE5S?M4erXT0lRUB2|iZ|!>g5v)1<``8Ym3&P@z?r>8A
zqQ;u?Gn(WVS>pqJon*zE^r;z;1ivJ^9{QyzgZh32vqzkYsH)ht=(H;{ZUb93*%E+t
zploOLBu<83fxfp)b3&p^vDOgJ&}z!JWs*L8fYihVE8x9y&W0#L#(+Bhnmu>))3}L=
zU<AhQ`jZ|%NMwG9a!7v5&pW$4(rRz2RW)+YNOKpf_H~V9Ma;alDS5Fu<mTS01y5S)
z^zLM>G)|H0>DOC;UOk8TO@AGUDb%+y<?n*BUayjWOT9*sc8%S29NS?g@9*ZREe^L4
zWfHM|;$^WV?L356#O&EWT&`IbgNBlSYINmCcy}4`vL-e+q~&^l0yb=`R18NKC`Rpx
zc*}E^j(E~bP_)6!En_O}#md(KDNgM8c{hGM-;Xf_03YvizlCIylrn(kyUt?6KfYbZ
z+>ai8A<^*G`FzfVVqiQ$-k@av0Xrmf@1X%lT5l>`eV>}X-)0v;YvR-VQ+taozL+f{
zay@%+nmz_^^KPkGL%0V4?h@E2lEYAQo^P3e?aqni+zuxY*D`k75gPYfL750wvOcm-
z<thGvm6aZ)&;%7y?udHXWCQ-W**T_|=7*A8e|I57D9ZZkl<2{^8PbbJ@fU(7l1X^7
zJ+ICU^&aloCq`&8^CY=|r-y=}4@jHk3}N5?+$gKqluQdft+MF1mGnKZGm3uSmpyKI
zi1OypA<;AkOqWsZ7fy4zpcJL0odXDzJFBIz2rdPtF{7Ugr%$&5?-R^$^3h7=q<;&i
zU&8yfQX?fO<>#miTIh7H_JVkH)H;8rW}<)8w$?2BrEX2)YeRcx1*@`8fe|KyB@mFS
z9VXLPNn`0%TB?c=N0(OX2K68`At`=9i!ec<ecIhuAhY9<KOkSgAK>yUaow;9GfW0}
zH7fgP2wMll1E^cSJ-mh$Ge#fd1z~3{@;pa4RfxW7Nt8kqoBsnoKf-z&&cU3n2j#Y{
zR{_@>iluWNxI~4~nc4~m^YCiu-`sw9p9|kE8ZUW;jB80KFL;%7rk(#tK1iUDKbl^K
zbgYRbE2m)GLR63%GHjS|_>z2P{*r9?<I-pgzJa#nClkdLu`4HF1#M*z$ocq|Scs#r
zmmQ37sTH7a^8UOjLZVVX=BK6}{t_?wZSVub_IRSu)Hs$~aiqUjP-o4YD#I)B-uX+9
zXhUk?{h7}=?<`-KGr#Y*_PXJFO=$<lri*(Op&*q~YH82s?%Hyvq7IUcuXfoT*E4bM
z8(|s`&kJY4^q&Ou_F819@0mZT;{yVPZ`z_?^K)*$ne0WRP2H4aR8EXC@4KJ7tr?!z
zVdz2~yf60N#ce)C^@5L4c*^!?I8Vs|xYs{z8<RLE8DN`;-5(L9H=>P%>bv8Cv=MW)
z%WKL}FLP7Bk0kHLCSJ2x)25%F*GZg@TbDd}W_eef50z^C3(`I7TrPi=l)p6o3FvPj
zX~`4bD;79k(GbY<#<KIds&eS+!nHU^inyC=uqRuH^H1tfnTjZT8nH6A5_S1bur?9S
zRj%y6sR4I*86z_{9y^)UAVBjAxn$A7Hm?(>Zu@-i9c!AT+tZUGH{IOuncVNgW)suK
z-edZ>ap=g*LB*J7KqR{Nnb$Jn%_D`cA1W4#pv>|or~vWrK|`~+eu8O8&0DO)mKJ1d
zOBNF?QQdspPdAAlun0)SJ-9<8=5lbcGQnSd!$PcU<L8t*xOBYvfxon<-YKCGai$3!
zU=n?EzNe+@wRY@|htN2KBYCy(mYicr_b;@ptTXJS{x)z9`?f9GdObza%3u2nc-zjy
z&a%ClSLi5q<cCs@dy|T^u?fm;E{JSTk2=lAU(P~K4rT7>=Kt?Rpcw}RnsYYEZ_+9i
zyIz>&u1fG4axJh$+jcB}=c`}i2?*jQd;^=-3fq-fF32Dynj0o}cBSQrZ0<eMp$?vs
z#FkquRN@6gbbudkYTq3JN`4g!-#R~i4DNks`}9W&t{-iXP}%WY0J-_J{!MRS`}Lf{
z>Ys(LXOooVrKr`_1uO5XOOUuSkm~VZGT`b%R|g<5Z+SVPscDxj3ba&ynp4^rzHoVb
zOM9yIkic4jOqu4*Oh<1KlEG3h%K)4A_VCfyK7iT50y>YtkCU)hWPM4h#a~z4?R<<g
z470^9Kq1I-e329q1GsLTde&L^>0FmwaS%df{Dbp+Ly_7Le_46ajiguaeY^;<?Q^s@
zw=brR+nFLn81LK<nN`y1>>Y@t;!BmcxjE5B#^lya!Wi(LG{lIMDu?$#s1sk(K$Fpv
zU%e#WbbqVGKrJa|Du;P-@mm6<4xGVuvZrX@RVo}3g#_?W8Y2AtbSu0<Za+Y<l~Q0-
z8&tl!byY6X74$1AYAtQ$P%a(Uj$Ubux^<~*-+8v0ODQer>h<pYou84*S5)}~V&l&H
zg@(?pJ+kSzd<zoA=(q~yjta2|j7Ab)H?cCIEx&<XW7Vx`8mvseG3fki^k#{caO*%t
zm`HX4n@z!Ai)PSq7JA1i$FLir^4GE`6l4r;>!bY#>~Nrvm55nh>8CAlAU#}AtElP0
zWc;S7xutosLiM8h8ee*zK$(u=q6^?K)T=`<E$`en9vuFo^fTg!W$2#lx8Y5jJRANS
zP138Un>D|q999JRZp<6MF1+z7iqs$HzV^v#3(aNg!k+BSQD&FYBy+XzO~3X!6$Y-A
zaXSKUUl%>fnO+FN*CATcREDR;!NRAx7PX^!TMe1nPib4UJ)K^0YBo#9_)bfJM)Z&)
zmG|aZE&H*WoK+emryy@=hjk;%owB==+SwK%7_4vwD%+j+8i5J}kv@SpraPHz@0(H;
zq7#}AQ=+^vA|{Mwf^w9O8#7j*MAiAc9vw5LBu*zBzak|$6wZnfg}@#G6!BYW<E;g`
zdbz-EdlZ|AXi}Td7j4&88+yWkyZV+)?^2(n%*Fnj_e};)9F?>A?)y8QL?#LhPr=M<
zXs~5b_NWf6@!uq9Re6#K&J)*}28<uaCU_O&+k&-e1RHWJ{VUlZm4nIyy09-y_d%~I
z5D9^3Zy(vBy5ZI#>aZDaV<2@Hp$~3JX05k@!sq6u(Yi`ZRK_I0#g{vwFVRHGL;F&M
z_8b<n1e@Onk>QR$BxqEyDxza2`e|#s1^=9JM~@(l8TME+JmC2}+I(V6&yJ%P0SUI>
zgnn-T)EhZnty}rYgD7Sg7?`|Myx?p)z~SROCDVLixi_Ce)vdc-ulO=WnFo0Wqyt->
z)(j-4IvWy-qib^@*DHDZSUkSPo=E*Q8`_|`u+Gb?sg?^bbm6fE7J&~%kFyLx1ebh8
z<RqxUQ#4e%AQ5nfG0T<f_Ca34&5Q~mF4htbB=37aM$rz5&sO+RrVQVP>zqC<+#4*V
zN>JuP$-3w!d%NgLV`cL4hu%XR^bH|=O@oqYIlRlqZ2NVVh(ue)+CulvDTS0h23t@>
z!X^X}$fpOs%@R?%8@MzIDnA)dm<<ha$nFmoVrBLSHD&OCUH!Pk3hF2$|51n`!QZif
z4^Pab_baLcWHdlhJt`_q33tvUN@VEl^*L&o1>8h9_4;9G{PO0SzHq`7Q_V4;V7UzA
zR!FW?cg#L{0#o-e&KpV^M7T+p8W?fyqi-bh#phR6<^F6koK^eF?n?EOLEfSzN<w$@
znl&T&1jbudpAFqHA9dt-U46|07S36@#>g72A_Yh;1<m9U%q<b{C}@I|uhrxbo~Smf
z|L|{}rxKiaW+T3A`$xK>=*b|FP97<)%2mKB_Ee~5zSR7LBA2~B$3lOc6jeR`x5N=9
zn>I}KDER&mhlkLAiHeLe$<WEf6<bfwm%*GXX;A&N9I)Xb2nHGc-CaIa-rtr)A%0`@
zYm16hbEG9~aOV%Q%{Kd@v3AGreNz7V)*Wqjlk9J{;AZTq%nlr>|8b4~Nq-=pVS9d4
zsxO%}uqHCl#lI3=Ibg&s%sn61Y<6=p;vZ-5hW^)`yYWX*!zf4eT;9ag84_arQEthf
zo_NXM+*kyl7=$oj288~x;#r3N7rE;qCqp&6yMo4nyk?StGEU`vfXZ_N3GJgZt(BL6
zxczQ~nNyIlH5Yo3p-qXNY!)x~!VO#H59E+wEcRINI0%ZQ{zk%f#hETf=mD`YQe2Bf
z72+%QdZQ9bP6?B*eFpsUU>EzpY?_2)F+e4@Ai4E>*ziuB+RgZZz+L;vTcZ_|AIWB*
zEeP|I4I}s<&pFj1(hADUUtc=NSWQ}lPr)1f*$?9UJjIH^zvK7^P|g@+MV7`NbHON2
zk_8^GS^=bnP#{zZ-*=Z~2vhPAiRXVBD@b&~ddW$x-=&k-!=thlc4CzFn>WGg(<ifY
zz&0R*z(KsfTbS9Ba#ibRxzDZMkBT4F<ebqVaoW}z9l5wWY?M?jU{A_nV&gAH@aB~n
zb;J}89!Z2cxfi_Or_BJFPnOQ<l^7$OtxbKW_+@w73tv8ji*llNLI?j*5K~98X9gRZ
zuRyEz{lMMBkpF}B`7<4qsx?+rw@;YF9IxTbe@clrw82elm4-mka-w&?n%3u?i08Nq
zy-U6?yJ+k3r}*BF8JP6szufBFM*xHhaXX~P!p1r9y%(VIZ*1o-2AZF)>DZfpQeDgg
z1=<5Yrs1fZ#Ci}ClggkPvqh5>s{xZk(UT6RDB_56p9xtMpgsnRq5tjdOqn9NiQp$S
z_?o+Dw=|^kj&*!eQKGQ{r(>{$pk~fBb6S^EkbC?f*0p)lmk8S*Km90_>wc7ca*LO+
z`*2e;<SHB9w$xT#m-F6wcU@QGp)zz`2X{!;^)OV6yhd7fSs563vqg#dXtli3AD+Ao
zt^|@lpB)q)kU#SirrW*PcGyg=1|Fq>{Qi;w=sKRS%u-!nOcQ0|^B-b028TJq-JmA_
z+qkapBE(FRgM3f_$mVW1l(5os{9Po-t|gmJgAv)%l~Kfvb=`MWGDqz>VM#Y<+S#y5
zlWlE^3tH~ZTT1Jf*dk;5`|mhjD6+Z3ss4F{QSs)>Gwu?K!Le%4lEM`1-+DGg+Y8rG
zEQ@qI78fH!gL(KvRt>It#E1m@AMef?N$D_ykuGnJK9CYXK<J76sc(9m9;K$6@i|SY
zl9AJwwMI%I5>~jlVuPT&^~8qrm*d|mjs3n&zH@G}ET&oSoc8-}TK9E?5!nOWj!OuM
z^y<xa9nEW8JPS^`cv>$vE0k6*NA+eWUywhIWKqP6(63JGv3vXK=w48vAU6B(aLCET
zn%z)CqPGF^xB>s$)S*xx>7_2=YQ8@2GJdO%Af?q=9GJXlv2@}VhNQ)@xCRe%AY*Gw
z{)CXC<lbr_HVW#hUq>V#-M?sK8FBIkAAFUW#hbiL>q`w+Tpp%fa4AVT13XULyex*B
zW)c7ehT(sMaH|<l-o+JsV|m-JI$(EBX*Ybo?p;vcpf-oMAq52=F4>Xx)BWnY25);d
zbT!|W{Hc}=cMC#24i_~+Iq}FcOX2Z{*%*3dx&p9vMAy6#oja{bo-Vd#AZCtX43*CK
z5a9^1M$i$P{dp@yI=)l2{_%8WcJXgnKR~@oiS_vf-T(E?{E4kXJ3hw60H$#(F)8O_
z3gc9$$SjX#Tmi3}$W}H}R8-}$AS!eA{#)R`h~MYDFb*9o&7EOBzQZHYjx_L~sgD!@
z&Bx(GnX(o5?b!(FFsHw;iv+r#{5I~`ee=iIzY<c1{xh&8vMlH<o`0}?-sU&k9gH{=
zFiuijAFD(o5b$XRhH|-swre}xl=4Fu&2kMM5Yn_3@|tX_Fun#E-ub||>mOn!5Mrm6
zwX9GD5=<o{b58H$S8fy*li>@Z$tJ;VwXN~+(EOS5MTrQwswc3P7kpFC44NB54Bb`<
zpV5?-o+&DiLw3oL7xUxi=|Lftk$#)%r_W!m<-BiofeG?ce3QF;8<RhB;pJnCgcmD-
z--(GR_`d>D-^D~R*-GS&L2kS5|Gk$f3>9dta7G{88b~lA*L{*pm@cMgG4S4PrVCg5
zLMq69S4m14p+vf~Un*wS0fOsaZ8aaN4nCf$4Mdrn2y7zF2bw!(k3YV#2xcDYfY6Ni
zP{VsZwqx-z{~y(-|Abv(us?dg!7l9gnL>;*l)Nbs=!5cC(FO@+TAy^z1L>@jNjyN(
z`gd)1huKZ*${NX=UCh>ZJv}L#(??vnw(BG_)R&t_%C+U12W%cR%L_h3M;rS+_v&li
zSdX{e&C=@Y#mO_Hvv%O2ZRMG0Z-B7RQc1rytUE~>$}=VI>++wrca|L&D}^oF@zT07
z7XsvUH??c?1gWL;HneCvBNw$Vt>@6$A(wTcMgpg2HE(eHG5*E}Ahd~np`c5(5Z6dN
ztpDF|zW0*RK&WW4Za%z!UAea~<#u-9fk|>HHtAVUZ`lDZ;i5(yry5|LU-`c}x&=-x
zbH6i%7z}tcqEa)A6E8CQypsKI^ZtL&X$>g0x7!q=`2Sb$H~0ev-sIhYJkcVfap0T`
zdfe&O)5OPY_;yG&^M6&}|L+s;%fIdXMW-ka==wB(H!A<N1%tG>Y4`J4xg%gh>r8XT
ze>j4&llNax^DDZI;4r%v;c+KvD9*pXMk|EjXw`1OdpU5{but81vrAb;+x%Z8?@)r^
z<wG|8c2lhV*ys{26o9;9bYbF)R6~7DDubPVd1rg7h@Oc8Y)M=J&n?N6m8&vToczf+
z@BF;$Pi=>4=UZ;`0X6}%8bKl(17qe?t)|vH3s@Lmg%7}<+$6-E-R>5;sL70-pxL^Y
zRg|ZZHOrem9_62li2Pm(OdIuF6Nd$*`)IL2U8YfzkX`d5S<Ib}@VUL>HeMcKk{>Bd
z4U&ua&H#Dj;m7}*kzi9Qv>}-uM3qTyBrWvqjecyP3~+WiR@cH7z&cXcw8nS@@q@~K
zSJC4E2&dUe1qDNtjfYd=^rA<zz5sh7f1}?_TmxDsz1|Vm%wF7PdKH`?iG53izLKZ9
zmpJ}!^-R7Fvd~5kU&zy*h|E8*LDUL9q8-A1gg?pYLv<Y-b7F|NjsJ_l{PU0e2Lz?5
zT12eO+=l+d|K^zqhGJ#eYi`L(4Q#zdtZ<;BSW?~w?>_c=QdZU8L2KZ?C+GWDXQ&M=
za>i~D$g$*C^$+>SLo9OFE-r>_jO-RUi%)qBT{(UoB|Sq`ho>)ip6}_6edMNvwc=Lt
zf1E0$|Esp@@=3O=i<S-h!^FYwP2Cz6Wc+mq&Orj7gv|VJVUd`Ex2x#hdd95WIbZf6
zVc$%LR86BT8MBvA&Q!_oxL;IC##1IQwDCQVbhwf&f}VQ?Y)|-veq;Vw5jTy5U>&DO
zBj=8z$=4;33Y(^$$I_wLd_=(DjFYlL3Hv2jD7Z(IKQ4DuQ+8kJ4fOHF*#uKb<z)W*
z{X*j!GW^<qL~j{<WTJ}e!-Pdq9^O0IA92WZIUCZ(V*DpRYWnx{7Xm^RPFkvtPtF&A
z&Due2)s2p_sdicV5a<5+u$4c<{p>N>MoMQmBovC(V0`9l9#+{mZ-_AWA>6++1ifb}
z5{7qAqN|};3$`w1-Xc^PnaO!1GN%lmo3SW7yfu2Gb$q4j2@@G%Mfk>qC;0DZyHoZ)
zX4o(QoX}Z&Mhu&9&AK+wke`rMtv|g|_kH*mMu()TrT1c?Y%J^_wcM`~ycJKNqp&=u
z!~}%K5h-u+In|&19$7gMF%<j_Nt&9rf@vRezgsDvc45P$vk{VmKvSE{zIm=m-Sd!v
zFjPRs5xPCoX#oBh(w&r{5KlA)rErk@?h0Q9wrEmmX}HF`+~V+Sik!$d3H5ZB8lNHx
zdRj9o>Bw(elJHa^Bq$#vAd3l;)XR4NnqOxRH@LtAFv*p4-)EPa`#Ht>v-r8G78009
z=&2jxlA+_GA@cqYx|5-q!xaBcW+C+SxPO?tAA5?Zj47{gUTE^6@I(EiKG2#zX$G9F
z)g)GykIYZ(n%>y6+FXvsE9!Z`^Sa3rwfH4cKWkwvp`Fc65)^+s&qHHNb&szyayd-B
z8-;o2LHl8<2NDz;4DJobxJNd~{G#ka_@3Kp%@vjSW$yr$@ld+vbEmr@*XzN6roMm(
zaM^fvTD<7JF{0bg9b;oSMlN8DT>r(iyN)F&X}PTBC5s;m*hZDfk2-LP3Yr_(bACE<
z8F9Dw<Wl<Ukx2Q1XJh9>*wxb#1>w(Nxjl%;*&jS|Su-JU#dRx!p1xvE!^Ox2apTSf
zyQ{G)_~Bzpb)@*^s!!AnF-ev{!shR`SGKOUj>NZ1OYVTt%^2;=Fma<3a)t`gLxG!n
zQmxqrgJYxfGwnAgd5(bOA!_v*_n(t~?bGR5Mh5l}BYj8;MLe;fSr68$Sbk(_TD%B2
z?!2ZG@V9x-CbBx>gc8=Wo)jj}QpXhRfqs@KkdH<LJS;mO|DCP?9-vg%*#km^tJ+Ia
z(96elC*hY)vIJfZ=mTQqV+uY8w(6`+D{FZ;1m2r@eW&9}BCH6%mX@ES`~2S})ccq6
zr?tE((>*wv;Cy$zv13(ho97oJEa39~8!RErJ0!pj{L{ZbCY@Z%La1`}%Ah`s?Q$OA
znAMynhY*_0Cz`Cx?~7zfC7W?KlGS`C*_eo&eD1F&)p2#wekKZfsFRVaKlM&n^Y8sM
zY8f*$eJW4SMK73JNU>g;blk3O(G$uL!&{Ur<=p*ptvpWdlb$Zf5Z^<)q4jg$@63(G
z6q0r6xUp1DdUAI<t}F0fOhmvd@M|_{-L2Zex+owFS%!LFWw~D+H)CuBQGgL)>@H1o
z6u`=xcB0f?o#$hZlf##gXWlS;9`Y{`ps!~V5&G%lJ*@!OL5SWBd2pgStQ6*=xFJV8
z<3|;%bCJX%4hkg6^$<|P&Trmp_Ii`6&lSzw%m-N`Wvz)^S;$@rli65`s4k)m>$(o4
zKob;BPKr3o%VleU`*P@;11$@ij}a7%YT=?jqE7BuT@Ou6PnQOkH#%7o)aJv6E=DLN
zK)!cHsfHvs2yrOjq(EeJWk}xDK1XzQiWq{zQdM}svfCagUZ}IX)q+biGr%HgC*SXE
zYfec8;S)?v;Zq#_%}n9GH{8QRF!`iz0i=BK56Qoq15W|w&dm(<vPQ%8&Sk~@J!b9b
zXIg}MLRWXz=F`gudP);y!Wt>yZ?EhesyeGICW^CPJ7gL3YVOx92kM5gYxsk!5qO*N
zxf#mWrKPi?e6-uXipmn@npKlI{W49JleuzZ@gwz~7M&`}k;RJ2#3~ImG;_oWj*U5$
zu}AL#4m6f^L-{$8fK5mOcEca`5Cw*;v&>~jL0=gHqki%^^`GMmQ7-6QPMJ)G@;-(X
zub>4ZV2FfGOHb<zx2R8#`yaYmU{5k`yeGDG)b<JGCr!CSH0NeWjUW+w@&|Oj@O}r6
z6+N4GP2)b-L1+~Wz`gd{&?iBofn61(pmwI6>(qDu`tB%{hD0TjQQf!%FBU}rgdmvC
zwQT`};8AY1`BqhLt8~6nIqAT3Br(E+e*OipkVr<goKpeL`Di~8`}f{O^JFe+UF;34
zTNCtunkxK%*!v2vxSnTEWD+C<C%C&qa3?@;m*5^G1cJK_!QI_G0fGm&;O_43?mFxx
z-`{)t-u~YH1AF$Id*;mCxwpHzy1Kf$`cu`fYq_#`Bb$bahmH?Y0=G8s_X$RR68}X_
z01STyjA0*<jpxGG5`ex3w~dmOfAvlu;FC4=8dTa74>|<)eR3JyiwFfKJ_^zQIwTU<
zVirK?Xx=-hvV7}pRDw>Z+76Bn+q^o_;}0)wJz|q6YtByzOyiYDOzy2{knNMpi=AbY
zZvr{?4Tog|`<00~v-o4FL4V}m>3>9WZ|Oa=XZzxy#SWa`cI6PH8Cq+M<}OPIyQ50f
zD26^+-qVu4SqZILHu$)A|6W4RsmFL>m3sAQg6DPzjCKtR-Iwk>VM|-UcJ!mV)s`W3
z*9)D(P>LQgWo~s!{(!--qhPqH$<@H|?b66VK_zF0{poTQ+aB3<dsTnI_^10nsV0|O
zKJPeV2(yhVb9SXTC%4MYawKtfyfoS~zPlGKm98WbVky*19T$qDFF%gNb9C34MA(f8
zS&1MC*sYoO2OT{oMt`Ta=N@#ms^G!Y3h%-2)wm{k97xuA3;x)W*1}1j0cpz7BD8RO
z+Lyf`AlBR=s{Kj2{K9I$l1Tx!PH5PhA*k7Z&)b5xg^AfvIKTPnfc;*VmE~zAUP6f;
zf2HQAI6K{vWYIHg_*5`94l83b@_EkuFd_`+gHV%4LGj)}=DTv%3bu^8{GlTn(r$5q
zOO8wdv=wblSs+H^M_taG4J3(&HMqrbO;vg|4wo#Npq+j>Wc}@qREjpr_=NRQww#Ba
z)CaVlwLa`j-eIg#hMo+^#aRHAdWJap)?1E|@N$sv!JMxuYSgsviR-KKdtHzIx^J&P
zDr}71AY7QO%zeeV+UI#C$uzRV&3T*NZ#W`NfxU`w@&3zQ3cB%x#8;W!5H@POgB)k3
zjQ9`MrQBI5sd|xy%u>37nlp2OEpHG0$N}c>YKxaA?>&3zA-#CjMM3v?<hw#e%pDd*
zvihCQwrwe=3bR!#X3PmZIN0Pu<10@g&%(ja1oT$?Vu`JaVy}3{n2gh^6A8d?h<nMG
z`0lE{zq{|2>AGCwveVI()~IA!_bki{dy|@WZw{^YWvzGJ1hRch)o|Zs<hFA#S47Kb
zP{vQak!kU{hs6H^b=g)cWgzvme-5GG?x%5As}dK)Ghs!xvFPw^={`==KdGxP)Bbj#
z!1Lv*<X`252cp1UJc_h5P^jghSSxRkG%xa->n9@%XidNSO>qYSpsbsV;3Y!pno1v8
zF}vG6WsPYui_8{X{@FN5WF1x_&YHS#-}S2+TXl}5=XR(2IgTndmElC}ow3`Q(Mfr(
zmDXX^q&%N+OLS@a0D0Es;5=JHG+L@0yA$cs6&{sE`S<S&8i^JpU**e{+7qwV_g2=H
zFSFQmi`}V<Z3=6W-_-Z@Ru%Iu4b($E)2@4!37W;w^B%(tzoo%SF!9JdJIF5#cXkzF
zN<Oj#;?u;{DD8%%i}?@kix~BM1HpGf3@+W_(XXR~ub2yOmlmFzb;TWZ6g#9s_W8`0
zJzd2~kqbFnEcI0;MVuF0x`KU97@1mZhjea+^t<!$A*#;<7b!n8-dJ@?IBiP>)v6*A
z;h(hJdDWHmeZE!k?EU&7oljL`S>~gG!g{ALQm8WO*10A^_gc(`&1-e}<^JX92FYC;
zr^KEdOYhIRzgqAQ{#htOQ$hK^Mw9~!Deoe`SfnB`V4O2A`xPx-t1%p=I@WnkkUAC9
zS}kBa;}4h&P>o`z_V1c7xs0Wr>i^s<7HdLs?8uyFDw{S^HB2E7U6%jVTFt)#khHL+
z*8MBYJLbEz9U7fz!JvL3wooq+1$XJmH%qP@5}@OB5Av*<xq{Q5|MLEE53Z@TXclK-
zk;%6h=QHI@HYPS2XL0SPD4Zv;&IemrH}*i-RC{E3BiMrDzPmmx`!m!h4-FJOm~ZN(
ztLd=f%aMTBVY&6wrwI&v0relv2USIS_>j+9k)>t!CBxcAeX%=z7!@UbJeqs7hkIOW
zW$s~H-7`nl4jZxUyG+B_yOAzNrzaeyq8TpFnjhPv<Jl{-ukL<jBp27bECXJaWjxUN
zqfJd7Lc!SJSO5`s&PFw!>0KAp;yI?;FUzsh?Z`X*<w2O1-2%YEDV@0IjQ%k8^aQYP
zmb02$`_i=RmB86I764pe()|k2Up%_)uj>_*0On_LKkIn9e1<$yJ{|2b61Zu18rFWZ
z<~o?8IJ}$%mL@&nZ@%zi7w-OC{FC7&1Q|%|KHvS?Xw`^z(lj7XY~48WEqAvLo$P?3
zf3)yg#^0DSS9wY4GkV739n}byqtK>@j~h<ae$SpGb|Bjh76<ncXH9E2>3GBE3Lk~O
zbB^stzaA%Cm?<w;0n-HS5vwhplFz=R6qoRILcg=QxCUv!puE#Aw_$(hiN>wV`a~Oj
zT8p!+uDYp-?89r+?RlqBU9;v0fd_t9vi_vBJf9t^(4gCMxsAsF3H#EvFNfjO{ye6(
zN#%Y*+Hb;f;J6>px>q-zhA3XC6y!Mx*5Bi~LqpD=5EHXwTk-eM84K6E=T2v4kNM#O
z4Gq}-ny11j@BqWrym*-v?#*N+b8t5>c%o}OUkT-pGOSY{dAoUFSPifVt)4l;=ZtpR
zlG#U7G5SdfwFqIRgbc$o><5e33kKqUwEae@->L2|?#d>a31B{4*?I+)%pnhY86^!M
z#PBz-KE13YvlQSZ%}?f!;=9SHgSPlx(GmFom^S>g+AHeGzWkto&FhDbjsrr0O;zni
z^*(x<P;^>5RxjDKGeUuYnI5~dw`WEd63!UR9~9~lP^xT4rQXLZp+KClC*6NVEsQ($
z!ark0O6rS=6f_5?)i!US`Ug6SH<;wrg?q1CX|&g)O0eRi^*t1Nt4lM={iG@Ryp@1h
zX0K><hNlDacyN5DW8ZH6L}9Zw0XJLznYevnSiH)UgHTn~d(<T9e7f1MvBo@r$NEU%
z=*A&;DimU85vUiey7<&;9J{yAgAj+l^x*wQA1CN$Wy#E;-k{3%tS*h_p1qZ=_WLI3
z;3g}rtBchLrj#SU-aqTpM*!sh8ZrDi6ORD;#p@`VDohRxq%teb&fd6WbQ8>>D7eqk
zdEDKaJtp|BcaxmndifSd$vqJqh<cJr5zEpX*f+buk{KebPIS=#>{`;~m-SIz86DH*
zTBu|Ndg7S^n`D0lapg@W-6LthSRW69_!{aQH4o<1eh0DpDLC#rYL#-eh6!{+z;dpK
zj>=q}^2vQeU!g%zaYw#xK6c~bAt|><Y}}3s9(_p7<w&fFsJ1F`xv2fq{qUGnDOJW{
zcngb*hbZBaS5f_G;Csj(X)7Pye3P4Y!)t%6mthU%BMA6ayZN+e*q3p$U%kj1h#s2N
zfpJVkEWfCPI+7>35Hq6grrxT0N4R+aigJOHQB*;!>Cx+MhzIje*T=)W@Mf6&{gdS!
zHx){q$P9)IOuoigZp(=dAHo!zRFsFc`t?71qYj8m`0vx2=^gJZMU#J?2D<d0^p~-v
zNM3!WM6YR1EyJK-e~E%fnQ;_0QyY#4`+kf8;;O!?hjHLSu4k$zCQ|qJV3{BlRh8)>
zJhfT(f}`Qy8QZ&WeEYXWFNK&MNl9DD(6=9+xTK|8-Y}&Q?d(H@4%V)AzWe-b<}Nv~
z?ZfZuFS3!0a{V#^w<(g?oVP1E^!+^6al4}o*BPpv2->uQoOo%9?PMlxoX5$Sov@$H
z$A&btgt*K<-S+3o2DFBxykqKBlGnbOR+OUT`^{c=arJ_t)o(mj;ybJPYOzP6)~tRG
z{Xo{I!_uiPHI10&!Yh6QW+>xO-;WPW{92=iL)tptlau`A@)o~Q3Mur>@2C}p>A9WO
z8wb6^H$*VL6SroxIlLn1Ss%U!fQeDwzxI%qsm!Gnn0~T8MOH^`xorKYYOT`8%{zEA
zl3j*GajA~`9FrqHnjC8+WrtfdYD_!EMD#tX4P)0y|Lp1fwHM1SaNL|h8(^xl>ch~m
zn-aOaL@<$o7+P-v4qW|2K8JYngg<qK7aUWYP~TcUVp!K!?!N;hlQ#xV27>cUWlQwO
zZ`Ni8hk|%nV8kl_({Qd?ybbe|=dUC8dp&-9>d%e=knM<wTr~24F;bMfZIfs2YrRV~
zDmG(lGFOy%Xyy3?b!QYTh>c_Lz%8|vnZ5jmZ;3Nq?pn5JpcFrdw3&SLD8s0J=d$!>
zneZs}OM~;y>BH_?g3`wa^A9%<V%!G37#h8#tqqHPY9U8R-s9VT1kUTKuEasl#t8Mx
zU8G&odHZEV=MPl)<TCh;-pN0&U5<F54?MfvR`y&+xY0qcgTPw_lSe&0P;coq<i8e<
z-ts!-kM16MUd5^O%+j*AKJMVTL7w<?!9mA;qnU`|c$qKLRO5_~s`;c#oCuq}2RbI+
zD@x(ArDNIzcX_b9?>9hEB4~J@_=i`c5FSl@0NL(5FsPX+q$NtNhwp^;I*Wa3sJBTd
z<2hG--snjZ_1Ax{Zks-(J}TVSphLVF6Od_o8y{qN&Yfz}VA0ydw9TTu1pawarJX6j
zGp7n3C>`p1BazCP_^G}p&k4YqesvKqx<S7$#_pQ0D^A(RThfayBGh{#H)t-@IN^a@
zy_=nW$EIz-ck;#hlQ1jbvcm*mo+2b1^N;@eJ5diToE|t&8;7zg*5t6O(R6E_C>CA(
zOxvR?Wh0K>N&=P0q^(rD&>qIkWf~`Z(EL~pFg{+S22V)Z-X50&B;Ri-6wMp-`Dxgf
zl99F;r`<!YGT7qg432?7fcyIJ-J%FQem0!hXz5#Xp1?V}KG|?ix|@j49T{BpmUAvD
zb>9p%F@8I8@1)lrurYP(>WB_g>+L&{-9eS{y61dRul+$hv7FHw-4xiMQ_h|^9y5qc
zWzmYcP<Ohib2VM4{!`22iU)(X{ZFi|$R~nev`@jRPr5@`?nj&CRwWYl&<Ptmf368>
z|05SbL*#=?x+@W|+)H(a`Ah3Yb70F?R+?~ca)w;#2zGq)dt^8_A`4JWLSyss=VNa^
zHsAL~i<w+^M0|js-0Jq&B_(d%i8Zk%S*xzR>EtIr5GFcrRYac1L6pbkl&pK;?uJY-
zlMcRWF={?>5Q5PbHn71cht!orZgCcKiEqa~Wbb*s%^GzudmmS;aY8%oKCEc!TMvf<
zeQ?seD_O-#>tg!ehTL<1NFa?~-b9Q#g_9{7@|gS4;eMSV)>a|h22nlX31Y&w8%Ak7
zMYRD$KcXZpYrhF(*lcnz9?zAcdngKN_-M&8xm8p}rQBqS8b@<nucEwLgO44BL*;nZ
zvmh@tywHF-9Cd0;X|&pS72wJq+F{YPpd_YO7^#q#+RBkQ9-E`8lBsVdFIk|k&y{E=
z-W3y~nn(lopHSJ`nHenTg|EHY0=$`Wt|(Wr9t|yVqMnWTI$ayqu<no#ZVGK~3Kh%t
zZr%YIH>;4i%ce*$F|KJn+)n3R1}fXC?}tEAxzz#KV`}yHV;lCldu<9-W8LGQLe}y3
zJ2zQEY)<)~`fO<(y7O>&clu!CRzeYbuyk%W@{itLPUQ}MJ5;bK6-srtm(-7hq^14k
z^W~0)4HGIn2>KxM%|T?Oa2omK1FHWv0I=L7o=z8<ju*L@4iULGw?dG5^+8uGTeG`=
zcucF(a_%Hlq^htyBSjlo8E)qldPi=$$VH@Ct+J<z8JPp_cv>H=!z+4T+%yW^#FkIy
zVm@d}h(oZ<$63D~EW*;nb4K9<t@YW%V;&_9O1sN2Qv&strGWhz@pD@xa|-OSEB)mC
zL=pSGpBv_RTYUJ4;bcn>>IVW{ZX<h7xTCP}mjW-HzR6wX^W#JU_0deDHaA4?(LhLd
z@J5G{79rY!(pyLuh_ERFJbC-~oOpd)!I(^+(6Ei2vZ9PBbZ(4gY!O%?Q(V8RSj(!O
z0LS5@Zj@0PS!74Jb&EG+pK~FTiXFz@iIA?Phqs?SytBA8CJ)vU_d}g!2Z{3yM(WR^
z;X|mLo4MGl=a$;Yf^8~AmqhBHgKLHABk$=*)u*eKrH%Z)>MPtQ8dE%V6Sp*iJJL{;
z<vjWFsU<3v#tu0syCn1;^4iWYWAtr@uBFH6AEh@&IBmwH^kb*_t|JIV{*i>&G2>b6
z5P$7slwdS+$po!bu?$!QlpSO*m;;%GUF%HsF_c6HuZrHVc8zFFmhKXbzH98-X%&3>
zFNw}-JMmV450RF`^mAF5_xMQb%%lSwgmhEA_cHv4d&qL*RZH$k2QNGb_FtWEkkla@
ziH0b5Ll5O&z!#g{(Dhdu1L&{^`Rd>Swfym;Uo-=wRf~Gs+fv+{A#?pZ?#vu+Uh6ql
zO)BFB8~M<<!2n^+w9U7ij{-Nxf(uIrbLB4Uk4iNUpL12Q6W}Zxu(NS+f7L_f9~J$=
z3P@Z)XM|e;_Psd8170oOQg7TZ`5uJB1)XQf2IG)P*s>z)cDl^;qhMfoI@rX(8P6qG
zlrnV=SgUF|vqglh5sz5f3a~p68fa<`XZU>DATD~;BDp&K)sVRxsC~k7-vZI&N)35<
zI7HrwCC2DaSK~<DM&&BI-k5TRG4WIs&MD~=T=~BAgCb2WxTUmaudF3vN?T}KaA_y;
zNXWG?&FlIbF4m0m^LQdPNn`Q+UiXa5-uh0+Zi^bnr1?*f$BzTrU?HT-v)=pjCQ}Ow
z=SBl>rBT@hdLSK3Kds`)uN#c|72#k6Ox;U1MNo+l)1em_X>#`aUQ^C!)0w8vS+yQ<
zEr6$tkYmYcS#W*tqGEmtDLIhN9;>DIr=lnC&eI7NxwsRz|0oE|sy%Q<y0q-^zqk8+
zfOViAvK^C>dFMulI-0+DqP#y<Ln^gz*xL5P^nKpw?o%HxCLVosMssarCNPZ&9N<d$
z2tT8jPq4AYE(XLy2<2=tkLH}O$0DE4DVu+<3v-RQ91LzgtO5AQ%K>-wi7I3u^U5}`
zdo<3ckBOJz3s-+%g5HekU+sFG-hB8p{q!L2P^-+;b_OgMcZseuo(<G0&X)4-qh~sf
zzv-r4L3HtdW1Y3DXAj#&1Td9({0cTqdVK4xE@l4fice);>Jp5(RCl#<AUV=(CQ$1l
zTw`93l(}}de77q;Z+7OUx|4v|-+oxTXwBn}>lSO}`a9rE>Gy)JqC^+g(i^`YPcB!$
zETQ*))?x6N%6MgG+Klm)G6nvic6HF8@%x;;P-Xit@65L(oqR3F@#ry>Q2<2p<6=6)
z@>a{#Z;H@#%VP6FLoVyug(<6rUjy_~@AN-+H(x6xZfgAO^qMi7dfBS{VkZsSq6knj
z+O(P1Uiy$ap!M@-NBYD%;KJ&!`-+{;N!krRrKLM5jb1~)jsm*@bu^-ci-w7DT+<~~
zSt`E}Iwgz|^$^Tt*IFTHGkOC=M1A)GE1Ord^HT_koJ)WGZg}f!5e7)YlPhVu<Do_j
zqFW62A`r`_`6qx|i3M514sEX|sFF<K9@{Rce3KfzBO?fst3N-<S&i=+TS8i$V;OgW
z@>qKZ*OK<t&Ix8HHN^-q^e9|}JbQQ<6Axi0M$vq!_`@~{qMV+sZ?+|22SO+1Tz!xr
zmn)!cf0Xt|<%|YN)*at6*zdoYV?rDXNLLF84C26!JFE>+HYaN=#Rg<3JEN8O5ZEF%
z3m^}~gXR-pqh>=}i5GYz>2*%<aF#N0qqU13{z5x`#}R#T$zf*^O6O%mL0Y4{DB1$s
z9E^GD5~E_%yH0V=w-Y{sjI$D$tDF-aHID<)qb>fnb-|tz5_D+PF&*ygB@Z})qPZ;(
z=`BeRJhAG5by4@a1Cgh@rrH}_&x@XWss%@>jkA;IBbMtv=chVW+iq+4<W|fv<<>F1
zM;oC&BkFTc=O?R7$A#Y}*5Q9RQUOqYu7on<&fbFl;;zPJo;I8=e)l=-$14Ha)RMIs
z`5wbYXBa!?F_ZGWB;WB{>b4wBu9<M}&|6XI&-%Z`;ldnIcWI&T1n1jd34cDL7_vn2
zFbSN~{-ffqf4x-R=9!C%(za8RbfI}W4mW=*pLOB2{*CztA08gW2W+4CG=En#ALP#-
zO>#y0?d+?YjcYLjdvQbvU7V4e8r?~_eN{R^>Q#+X(&=6zB+!do0ViST8e8GgzA}vE
zPx(v2JJjXPHzXUhw|7>`3!{zg1m}t>!8o7QzcHy>pUum_q~D-BQ~S#G5L9=!;(Y2Z
zu6`a%rj3s4dv`o;YTsLc&p0hi!i^xio<pXedB6z~X#N?2SB<*5nl`mc_<K=e(<>)*
z(VFBX<3iRb2tp^4y*G@BDCbO--C|Ns&z?O@eDQ_>pp}P?GGaZ4e3pE$3Rc)a!e?1H
z>ls1vL)^x;X@mS@SHb&C{`b0Y23^tMMbS;YoB@LgR=8hh3YbZ21ZcS;8Ua-@9XvW8
zcCxKfJ}Od&I-<gp!C)&y=9-t9;$R4ddD+NT(r>EUNi8<#I4jtHhwlI*sU4Hs2`Q1?
zB>%Zq6%T(~MzYEbuoHqV`k+V(OiCxEpIHFF7?=AcK?tbCtsqYzDLM6nz9l_;*PfBQ
zXc{;VKiHs|?K?dhvo?P>);Yb~PHI{i8afV)9ZIx&aLk_{#>iS5nKq$2m(0JlEb88L
z|G6y`ly!Og4d!KA=d3TGa+*IMI1XV#o{0r!j}OL<c<kdb+q|dNia$U;FR<GEejH=i
z)=UBrgMIqQ&5nbKCsg2DKw|KCT(zGp5gvGkLL5FyVKY~GCe9>&aF}PK@g@J$=RfmM
zCr@M~H>kR=b0c`n!@Xgc{un*tXQF<P>FFFl&uQD%o?u3w{$P*=e^_M6R)mN$c^BC3
zx&<M<LDSt7goXA|BsI8MMM9MOp`$z4Aq_;%#Y?U<p}h7lur`g*6HNxIjmXLcWlI?=
zn>(ZB42s+}7=KF#<=yt?mYuwgfI^FM4_p*=zzyTw&f<gw!-<0UBz}L1P~;kv^gmO0
zRy7o$L0}m9O2x$eQOU4lS6CO$v-1Q<!xMwIuoUm_YiH!^F>3cb`tg_<{%$JRKmZdS
z0Brde2k~6S0r<s?m?|MA4NSa;F=KjoZVX_eiA+z1-N<Bne~6$Avv6*qdBQKUMsTgI
zJ0rbt_e4*OT^`=$ezirCZr6&UeN5PZ^oh`35&s!vfOxRq)%7i|N;!8ou0-QL3w7E1
z8=b}*PMDcyWpqnX<omOX7%Yi@C_#OR7*#YEISMfnlz)N9Mk6d<8z`B>a2a2+$H8k{
z4UYXhW9Oldcf$IFOo^2AH3-Ayb}OA!u)`-kW07rhIeWlhiWRQ;j5*^?fvO*xqeGo7
z#K?>47tNf^FP&xlzbR#w;l(0w#9NcBhdWTaZ?NiHg@G`|7qnVeaR`ql@TCGB;qbvg
z*&K$?{*qG_es(XpkTFT}LAq#fHM>Lf73?+w0J0E;A(ud+t~c9#pX4Z8YR^;m@f<t9
zFu8}DmnzJQWuS6w5p?q6CT#mCe2i_k0`Qrh<}w@Oj~fjds=v6G$1a(W{H6rr-@vaX
zG<Z(`?gfu>V$k7BbqK7{4(o@uPDB4>FOmgq>XF_c>AtRtz{S)8t4ddFZ#9@|A*LrA
zJC#jlzl7#Of&9RW)SF(}p^FNeEdX*>krKcFs+KWqzk+!ZC7H!cfn<NL@*@KjzWrEr
z1-k&X0A^t*&kK+v2)szXsRuA_hSj(ImRgvN&9Nl?pq3HuBU{W+!u0X4mq;UnALvmJ
zzKhf)M$SSNHGkYu;hkOv&J&{1BMA!&=(|!jE{-zy*B_|m54tYbtSU5YxOavkTX@Dq
zB&d=wcGgkuerkuul+&EBcY@|Xx))Z;j&mp~yG@&h8$Sl=aDvO9Z{W`HHWo=(C=hx*
zKOCdjWda-n6o=1?|H<Hn9E3QeSa+U84u2UYTu#R>kjfYV<0B8_<YqeCi{{W5%tlLv
zE`)c+0|ckqU_`lpU&P-e%9df-O)~wZLHtCbqaaTe63T(XK+Zd;c-j$YZzud0(7@sY
z&vZ%}AXG23OLl`&A1Ms96csGOrdrAl^l~#b>L8-riCH930Po9G$;8{PcrJm2LKpA)
zLtlE37=U<#H#@L8G8ge35Z)28?H+&5<^ImRSTZtEGD+k1I7#3FwVx?m0)#hGk`Q@E
zrpFjBVmpBBR-zu@K%f9TKo5!@g&4PxtP1%UsGC1#vPMAp9D@!oU&P#D>Wlp<^eiEE
z4Y)0ej0B~(l;07#PvAqM!8oh$@GaN(X8NkCU~w%n&n~FjN8I{e=pWwb7058608O{C
z58y=<hv*0YMXpT<G&B%54+Su=X+Mb#{#Kj>6BBR6G~^S>YBD%BgSH>SHIf!d0M0lw
zWQO-+fR+j-y@4uTV+L%oEH+3VHC>p1OSdVSra(Dm=Ly0!lo-}()KhCmr*K;|_;F?6
zxs_v5{TRcpHR|Ct&?vf>MqTwAF9W3u|Da*dFbi%bS>=PK7Eoz_?1V*C1ACeUC%nv4
zo8Eemn_t;2fChh^f2JTP7Ok_%)zb~D81t~=d5F{S<s0uuyJcpepM=dZqMq&Vyc3_@
zzuKa>;*sAV)a$==6_Cq@ZBht2NeDg(!7oO{I0JXtNB9JudoMX=_4)fo!36CERg_=9
zC@?-m62Xs=1J4bQBif<vpyG%x2pMlnL#es87YTB{!{l5eU(A*zCx{GGZtO+;&cFO%
znCnWt42%yykdI2G(H`~%uz@b?Tr1euN|N1jdiy3=CR_>_JIdzBnCOK3yT_`u?77P8
zyBp!I4yU7rH}WMf?_vTe66DhaBHqd2FIedT=2<O2QHrCe?^~dg0ER%E3rq{g+`nFr
zmbUkkioc$C<ugjn0;o56ZI)<sqXzdV5HRE?yM^v%gN-s%WmJ_#CJidif<LTgV04cc
z^uKd6_)5vhT*(gqG{R^K4?`+tu$QFKU?^@;yXa+6scb7{mqyx?N%mbG7!+WU4O1Tu
zR2&PCh}w(sf_8C43<I2@!HTFes3sIjfAFO%!DC)mbxO#$T@zr~eOOx_E3L!fVA{9(
zr%41~-5w;jjZ7VQrPHcgS`$YOCC&N<_G5J^$nywB&v;7%ryEaMgx-q2ME+39fNvx1
zOJ0@Nv_6Bo(GK$8V02lSe7dQV28s_vhb5_F_6uIZ$jks8k~U|60`EuWqo{5!a+YE!
z@9PWZ5>P>e(y<#?Qq`OhOTCF7OL#Jw99`t(ejTX<c->tnN$MX>w@pWtHrQx5NV_XM
zX?BxH4Ifq1B{3m5*SEBclosDUX)l!-vD}`eIoz)uvd=3|Nz)Ic><(0#&g)G`|F#NT
zd|UAvfJU!^(8<L|tMepzsmN2_nRJd0#!2D{4)R2rIj}34QYneuf>8)zffGLg>wt=e
z3F9>ai~to&9A*lUXuA)|Dmk>ZTLI47gkeGj>LFYSO0~DuttA2HGGBjI7es5#Gu-|3
z;HOS`(XtuBs$w`MR9(vQres^D6w!H2xSV1RgHi7xeG;OW-cqOf`U<LgA0`d$%dlX-
zyTJCJ|H4ftreTE~m09QFd0FwgB&F~oPppwkz&w8ujRbaBmf(AzKg-VAgsgoR=!+(&
zp=SEtdAk!D1gGMLr{vMZ{A=trF#G&9E8v%Xg>BGr`T?k;9%~ryEc|VbSqR#PCTJ7Q
z_r9?cRY7NEMJ;nKRtMZ-M{p=(XuHXOobFhcNhnC3BiD3(P?K4LK1u{A+3B$NIp;H@
zhwz&A;yzFMV~Psv5a2`O2NiLneARB8H-4rI2;lj0$O{6rFgzm6IV=NZe7M)6_wbG5
z%P3|BER4NZ`~-+Fu)=^kf)ehb{g4$3ZUtC~UpbE62AptC0uS$38G%~~h`dhl2NIuf
zaHS-U4WT=1h{UQPCM(i+Z$2b6Py+^zVADj00;G^~5F41&Q8fTTf*HVQ_GvR9L+wW#
zGFT6*Kza)^$`;t|*v%05+9x~5IG`G^ihhJ-xAh_<jD3N(G&0V@0cmRoFO^;;XaFb0
z;4pwT1LIYx;-8n2N}ml~?%pO8``Y@w=(B7$6V|e9NdrKgiJr|H4f_T{T@L=SXJkP~
zJ@s!>oMH_OJ5%t4-xTSwLBrM*>pZ1)g<jxc(9lDvP|tFCjkoN>g6JgDu8+F=73R^K
z7BPf@+$Eae%^HBOE@QdA;_$dcff;@=cV6IGIANfGA`v#6vRB>gm+-<P1a30~Y($%&
zEaMcW(I_@ZvgwHRCKaRjYfX}WHs)Vs0kB&3hCzUPRT%h&tN6&x1Ai+5<yOEPHws8W
zRx3P`>xRC!Pq!;DC|@oT)fa0oo<7+1ACSyHpGdD@2n^tW&U@MJ`kyZNj{wNke_gFB
z?O)~mQ`&$11OuB>fsxREw_}0bqkp^nXrOVPMK0TowEmO&fBUjQEC~B=H~+>m{DT_@
zl5~u{3H{$-@qeo&%=;GU-){Z~F~ULUK+u#JGeg0v|0okE_P<{&kTtgde&@eFK>7kB
zM{NcUD*BHy|E-w-6Gr~+=6{m(|Cs==;{OdM7<>*IF7BBqnwyb!J(+Ri_gcP6Cc4pf
zPAIXW&`hJC`$8etNHO)L_Q(l0H*88OrdwjXP6Z>~Y2n)n#DntpBti8OHNM19B*(j+
z*PMLQPmPnN#qP0TO5OX#)#tZ0XWRmP4yL$$vYuEv7k@m5Jewn45-X0jf^1F*7H{M|
z^pTraB%j>j+U9^EnFe3Y!Kv)HtXIU?YqnIBvL71yqosOw>9H3r$FO7Z#Pz7D^>N~I
zc_B6Zq)Ccz#kHeCQ>U9o>%K~#@3?lMV!I;nr^^O!qi%Q2Sk=zh_cHy1x|MG|=X}q?
zZ%rtj8pEtq<b_fT(!3Hjyc!A1Ah+U;L#0-4TD%CuGX!R?mKUT&zaTKS9-t7VGCs{&
z(=c^7;|rg4UsVGI^Ir#lJw}WCVwP1_|MP<MvfKGhAF9u|>b(5Ja_Jejws*MqRHHWk
zHEtr-aqU@|r6@U;*YYa&a0#WY7ydJ%;IG_(cBdXe@^y(@tH+D(_nxNJ`rWP9-J(RA
z{j1a&$(xC1C^H^5`u0626i$G6A<;lD^1<CSW2_{Ko^XwWmr-r(0Ii1Yqj22fD+swb
zD!pkbx%~=Hr_&hnN#K^br*xt~{$}B}cE{J*d_ZP|@0#bLUFMM!V&%4mTQplSR56k?
z$=>?1na)U!=lv+<h5M{!VZmP+Cm4A*9S-~|x;Z+Vr!K9Jx{`zO9NH==gX}i4dwj-`
z6FAVp^KMth6EyO(_C;9#!~!|%Ixy#xRl7S<)g6_OPfcyo8%BYst^E#P&N3<65lpo}
zj&AkjJpMAFFlN;pcJr`M7}gQH`RiNGxP=1a<4Wyay4!sHp9`H!JroXJcdZ{z`hqHQ
z<VK#)=Cz5gLanU~wnI}>yO1LNi#759C9y%9kRT#?rLzuN9=<eXyLMWJ_Oxh&t(B17
zUc(%OLTcstu%zR3qc^}L-HOV+IQ@a}q4-C0R!9n0=-EKkj?<RF$pc5}b`$qE;uDv_
z?0u^9+L4;2zD4~w<4mi@f%*}`h=(I5f+G2yA;T9b87jV3GU*cUdAjE7p0z%n*Lt2d
zEz((7uLy6c`YF`{$95^VH2pQ>{`<UflXqDW?7@J4?y18&?=qCqdN!G-6cl{cw16Hl
z2POn1%#3sq!+KhF{`N<n&YOHTg+pi`2w7Ad+wilBr%SPS&!*>Qy{8Hfz^?@BtHr{@
zn_30jK<a4M+l9hH$mf-WXLL%J<j`daAC!itesA>nygdn5y_NNjyQg$6pf>x$uYzgb
zZ~QN;2jKN`Vs5Di#d6}L98OPJw4Nu8C&$KR^_QPfLgYsBG!s3-w{@H-!!y`M?)X2n
z^f<qfLY2Qf{X<^;?5jn$Fe?^n-ETLP)zaj9{mZhzvpB{4ImNVycAw;|<(*U*Wk2Cm
z{qd#qoo7ae{I4F9^OMa%%!5xi58L~q)x#r#_Hzf^N)8loKY<)3#p<_Q!$0Rrx<7I|
z^rqgFeaRko_EhK3E98kydx#a#Ua`uW7vCwon9e0{4=&i!s7+ZZ^C(T2pC4M_Z|>l5
zE?`5Q(a9l+>Go4P{%(%v?SK@X{7&AVet!>sq2P^Bap9&^H2YSLDqb^70y)(nDaJ6{
zUtqWbD6NGVC1FZsBGLV4a$>^N!_V9(fsMu%mV@;>Q~qm^!jke-GqKyE_0n7nXDE$l
zjbqh8GtTqlQI$YwPtxjR*H}woT9M#=rz5idCuBM9#8#Gcm9Nz${kcV4oOk2#jYDC@
ziwB%v!>z5e(XQ?|-4D5bi&K=-Ke}G?HP%cEHpgf!?DN-*IdiV39B|7Xz}gMn@v$(_
z2j{%oR=#A#FyFk?@z75xMO+4=3DJM-lrMWeruWE<r_??Pot>}TJIiJyZp)Rx-7gek
z^AW~Z!DRx&$Q9RYxo44@*(Z*X8TI$Yda>%=s1268=J8c_x<#eTFBg}qL`pyuWW7u8
z%Gcu5lMQhos)6BK`ImP>&lU`ODrTdsTpp3zI$j+95)#E!q-S`Q-K{Z>;ninr%E13D
zOsaoEc)bw4{ia*BBwUMA37LubI27}D;=Chzc#q62t`^M#Pf(V03xDj;5?rqSm|5Jm
z*uRi|yRh2MKYRU|2ol1T(7r&-(`kP_U08i4VKbEe<!vVicB6=+Asn+~_3;+3wAqte
z^>x-SH)nd!vmTKUVtjcOX8HVzo~{n~T@Qo`I8YOMxtIPs&rhNiTMs{ux2`5D?J_sc
z){ZR0%9i))TB-SRwCDt`ai`bTWct_qD#E+i*P|}5HB>{NnT~=TE#a-4u7PuTZt0gb
z5UssGcV=@&GUPLV*@#?CL8<&Yte->(R}`KP@jm!LX2MI@mv+*SciZBS-G&H%`PPT?
zQ$|gTWc8YDPE+J9!6SJBr7ce3<;KjdMvexuMzGNiqHTGUNgYpJm-$MpkY=)&#KpyX
z>fnP9S%aMfIp#YH1mW_|yr~!0nkqqf{5Vi1080v8W%T=oN46~$u)01VE#Jp+LW08n
zXlFt$sjX~>(u40Dhj`K~XA;nRhWni@x1v^06x(MlTSdnS`3NcaM22r?RHx<fiD+|U
zrnX`5iJvQyoQ`kgoBh4vu<uvz4w|W*Ltk@F_MuDuG$m~FcI>)<@8>V%z4R#WSQf6r
z^fk+R=;Uy&a}ii1*gc5Fv=)lGhdrv^FYBs)n6l714`m3E<_r{^BliCVScW0siJPqe
zzM8R40qY;85oJohIM@q5$8SI~4ui}@(;0l?Hs=MzpuK)1>ecf^iL&1#vJaH|{(^25
ztlRc!KJ;nX{vEtw1s8N8qs=f24<kTLqUV_T94{&I!K$e+cJAyx;RGZ6umjTwIJFF*
zSd)b<s@d`Sw}aB^1OLfp+cj;#xG<2;7x)PNN>q2ilzD~2>0rGgqpCXHyb^bYVSZl8
z)_4Mc&PZzf$Y*y8f8<dgQX`-)70Ab%*|0l96><b)=ac&Aj5pf&hZmRxgfM1RdJWrb
z#lAd(<l0+)*#$iV5%MD2pG?z<fVE^Bg3CjTWw2yH!LCEdm+N=W7^m6Uq5wip4;3f#
zhH0uCx}44x@wbG7w_U)=fL>cywrEV-T1VjChR~9{J<lU^bTgP+K5BPkVea$>ThICW
zFsg*z^UE!M3^r`+YasfxS8}bSw<!%+gJTJiESIO7Zy-CB?)Upuy68Z^eK>uWgW>fj
zJK9nV5e)%1-1SM+Btp%gYgN6y;*sUizqjz+1dcKYnQ&Xtx&>{3><*WWJFvh{fkr9=
zTcV@R1|IOawsFB^v@qw+ttKkfKnDn|DCS_nBhkT-BiE`}Tp>%Z**rGfS{6yBO8ts{
z%%7u--L6@CQ2qlTaa~A9we%H6^gL;$UM(J3H;K$VU#PR6FA-N!yJjSkSKtF{t0efm
za^F7MP`<?GS7OCHb;ir8!*bVSCv$YS6k|L$<*7$=f7mH|DqhnZfQ_G@YK+Huq}a(8
zEuo?SfL*>=<DC5uG$QXOCq^4G)LnX*-vmRgvDW<$+;rvfp$(Jv$kB<<s#0Z3pQPay
z=A>WJ@tsPy9Y5GnxU+o5@)E~5U(TL2O}&LHYt8|dVQmJaEMXTBly<gBQtm5RX^&f&
ze++|T9x9)%sec?gmyNGo6H%lRF~oLo3uh6-v&SWjiWX)X;6OGVx(;SWzpgZ(2DEw^
zM5=(>gwd1QkXsTf(wTKkV$qGCV|P%SuLYRu+V0lA>xgvUI-mBk6z%QGmXN%H?dS1c
zx_%N<?u2<+pKF0ScWcQr!yj}xL*hrKM`6_uclwvS;#`p#DU#m8-^!Al+pvXy+q!*?
zChwM}RUb}u;_4r>zdAIE@XGrGi35Bm*SqmNfwD0T&g0NY!7EBE9XEZmt>e*TDpMF3
zXmZ7RcWeQhessE}%CX5EH^@B0j^um5<<N#oQ66&P4oO{t{dx^|wJF+utKLu?PgM6l
z^ZJO_-0yWrp}s98S|POG%X)+by1CN6FM@MJkmLpycpEI>Q<I(_=RNlnSMJF{sdiFu
z1|Y(VEE&VOkrYVWjeyLwe-woIp(QNh(-&$Iac-dNiG=|xd=V7FRg&wS>BKPg?$FtK
z^Y^TI&R1qC=^X+?!0Y8hDxLLN03Rw5HQr9gCQ5n~|M{GYeL{3*Q^nY%a9z3gt}iwF
z0dB7ct>d-NGFsG&CwH?23g~7Q40Fvyg;(m2smN;VQ51c>baydETDMZTFVSAT|Mf`&
zPp<*0`w`bdCHwe0cUF$z-GG50J8@rhfF)7XqZ%TYrwC%NGT|sgfUTqWW6ON%7I&}~
ze$)XyjgTh}JNzXy(3D<JXd<vD6t?bbMxSXyN>!I9V~09ug`V%%WJaqbs0J{0LQxMe
z{7|q+?|_2~eWIh4bS7hUAKCl*DH<TkIeEujRlh%J0GN1SFlyEFpJJrpln=lv7JaXs
zJg*^%%Hn`XeJhh_ecPdr>e0<2hPvwvV+7@K835Z0J$tfg+x|x~E4MrVvCJJap!JW7
zEejPYjsfrlzs-?%6s!%n3|3y~6r@ZopL3Am9)gYm5pv&wCYG?heqP~_DqN;4)?%vL
z5U&Wgg$|?jLDdowL7^1Ja~0K#iF!@C^;T+`%kNQC(ie)<&u_H&O#u$eYCxlH^d^~R
zvrHl1lbL)=<I>d97j<4KcjwkS5BXX)zOCew64P%Po~8xfD6aKq&sT|1eZv)r;pkCN
z2uWdJRVcwG^r3~B4dzVVH<8{DBT34vIbBt{=gprPk>1Vot&=l{QMAMeQEj^zQ8Hi?
zp+72MiA(_*b`)sWqMdAJp?%%`uS7p-5D=ok$?(0DZIzj;v~8vqSpDz!L7h?=b0;2z
zTsrIBi+gSH*mUxb1dfIpB*3$C2p&ym@W=X2yw|Pu-4CuiwXK|uy+P7jD>AJ={1+E9
zBS4a1P&-=Gliwkb;{2N>MCL8twNpUousa2+Jt*So@MG`L(;o1QBnbiZoI)?;`-Ta(
zbQAUjNbjCm*m5_MHsMy!j&rrV$H7XI2c5*n5Y;AlgGx^i&cU(aslKG)2F|>w=<;F6
z1<kR)RoA+Dy_p(ss5j<)G{BdrwhV0ivqw4iik<q`miNYQ@9$lZ>JU<c$-<$0YJT&L
zUCuU=N3m5=K%)n7z}S6WylH1`a+vrQkytTZS2D5+a%zTZdTv`i!|{D-1_=7jZgt##
zRX}(Iu5)TEVyE>ED|04pMJfN$-qH2+QQ@mBLX5~u#gW1_F7Dc&pz8P@ZVb$4mx4u4
zey1oXN{hjuQLXOTWnX9PkfqUAkpuOr!GtGc*#2-qbBn<5wQmZWN-%AH4YV;3;%cuj
z3)edc1vHwKnxzGY+oVP-ES*^}l#rRf7@0kK<g#C=cEFcoMG&l@XVEslLX3fb+bHW7
zne!qO$->5=EIr3cGIbk$yjsscqerpHL2(-<N3hm5u+KPO)Ia%x#C?TLFT5xmLO-ai
zaqH0;oW6HLXgb5l`r>^!9mxSuhr<d({|@@+zG(Yddu<EVb=r)qu!Jm(F>b2fowJP<
z+rG1-(S|6;5B&*nyQMMKXG?(ATS}5dR>Gg^Gp%>RT*$2}1;}}kAR{o?u1Tkr37f-}
z`g`c2ah9RxD|DP!Fw=r4h+nyiq}N@3wtrAyKsPUgUA|Lem=1F!18RQ-BNg1{Dl_$p
zLyf2{KuG8ZGJ7!4>Q+x?xa*s$(AXK37+H}BBcQoruY63icMc}gP^zDZdvZja5T#(m
z;c0qgY8lZ8`&^5fCBrtm>L`R^&Ll{h^U;HKeO8uYpn3*w-I3Rex=$YQY#ck);x#n^
z`g_s2Z4pTlp&k|y%rXN*y70oYPPTEpfgt>u>Q)&I!(y|e-*U#XVO_C6wS+z?uYdQB
zr(~PjH}Xaaq6Znl{OKN8Y&cTVArFy<p<tN@G32y;H`Z3`vTIUZ%c4$zcL){8TG=2a
zu9(a#d4mv!<%3lSz4fu}t-j=+sYoFo;5f>NcpAe2j^F1eZ7HVlrvgTet)E)blvuL^
zL6QbGFmmnp3XL}_5H*ij7H*#Ipm#9yXX9fN0h8C{V`PF`fGo2h_*^FVN*;cChHSfh
ziRsS9iKZ++(g$yAMp{A-h66)Q4_>lsB|P!Xn>Kz!9kPdavAh#>&-~4vKXeKqXJc8*
zfwOs%wC{lNjf+6QS9)Nt&6wn_LMq>2l7`!rCre?FBwT*>zW57q;v*ha9|&OU_&sx>
zS0T3F#QgACOr+Q$`s}6T;dJ<48RCPXI@UfkmZ0?L<ItWTn^?b=*vDv0P`TUb`SS*y
z1lkwmLH%6ge7&~l`m>x*?%}w@U<gNG8Ns|q#x{+kGDR@hnW01oP+h19pE*xNm7Ot^
zc`cL#Z{#BqMK^mtZ<Cil%@v-V>pEvWZr<Unl)v7P@vG#U@UT-R1G<xjs@$7#)DA}y
zdmBt;Uy%MpG)Ho6s91N+lvSvX)+PfGfX*V^My^Lv?R-r=dqZ@C!UB#^l9Lza)1z`G
z68#=Zt(Dp|M?-{=lmH%@I8b|(f?inJ3I$DYV!mRNU2WsD&M|zZp1s|Sb-8z3t)B|0
zGJtt06vq#o<Z#SpwqvBVwSs`XZ7@A`CtN9q$C~Buet~ixb;b$sR}bc4*(@+85o;qk
z6Kvfi>m0JvFyeceU~%zA4nYbG%K0t~7w@e!CXcC1>?2BSrTCFSJ#F-7!v_=uK<beK
z!BX+w1-jR%yiCw4O#Oe}pm65g*%;iN*vx~!0Iy35qjR4^Gd|x^bRt8qxa{2?>5sbB
zy?uAq9`;u;lYPjt@9>fQ+`%u|h6%E8{-)li#BeCP`&S>YgOE!?T@s>uN2?ROEA2|Z
zq2Qs^uU@x31dI76!@bns>-F)P*?|I;9>l-2o?QCPZ)piOwUGK#QI{L=Zx}1|Tv;!~
zKLV7KE_^UXzH4czs75X%v6T-9G8jZAn)Rhs(KOieKz3X9*JH8J?1t|7*Y~EFz`rE@
z2)(~RpPxk}U@An~9J7E!t@8WyORA|4KEM=^lH6liKO5os(7+=gg$oZwSQYspAd|4^
zVu}6bidX=6HURF*oh()zWY1cAUKSI30bj#W1!xpS)E{QgIaz-O%&AB1%bDhjh3^0^
z$x4HtLZ$EnjBv>mYuyX!1b;zPxpzqc<;)IE_Z)_HWVu$!Z`_HK3h<K|`kL8IidByt
z)rN~$sGk?lFFy>Bf2EJ$CmB@^Z2z|(vbIi1r_vd;o_@LjI1LI^Lm1s~v|*dux#aot
zvO?ef)-^6xdq6(m#er8?=#WA`!FUo@$3;%p<StSeIKdq14=#(uDWLeA`-fJn%IJ56
zbyX>GBGdFv#fI3vbc{g|s9_->$!0Sq`MO$PbL-fN?peHaFPROYlMA5kYzb2F$z8$S
zxkN4a3TOli0&tV+3w#JG1B}Wr5AnJ0Z=u(ptcX78$;!e2q-Vo7-I12deY?3C_Y}Uz
zNIKh-vALgV!KJ(Z5dbK?9b5a0b0tqa4IG3{G@vBg$yr;)DM2p%gsu;4RUs5CRG`_`
zFa)P}yviW{X7YHp3rc7}{Mk8SrzBnl<xZ_DaD;3Rvc1JpVSeCvONl7*Qs@78DM_|X
zCU`6L#*zV=H7QM4k18q|vASu+Zz}$XMlULW7JDm6$09`HUvKBitZEE9uoot-tp?(j
zuegFYwszOezWl3bR3#Wy$VW_SHeeQG;qwuLi&_UQGB%r|W)31qnPMlO1Jg7hqfu=?
zFm|ORKbqMQ@oI~WF{TqROEkZFF>U_-EfxWl_#_@dX%EN_&}IMArGmzizqJzKJ)OP(
z%e0!Kjx`_2+~So5o?KUW`#*(5wIyMkh9@>(-PtHKK_w5tMd{Z%4sPW@{U2P|CN+@W
z(l;|^)+%yqic1R?b}w`VE200ZR+cwDZ7#IaRn#W!Q>4??6aS+BpH={$;O}7CcyGiz
z7pec5yFg_HR4f&k<qLj6`ENSSNc*vwIK!J%A;|@_z(D#JssCBrKVO8|(UVwlqlg*w
z5z@{?Rn&aoypoD|XpsIdj{_581Qg>lSx*cPK%N-1&opw|1a(Qd8FjX$(|fxD+sJAf
zbIuUSzZA0cgOnE{+SYA5fO7+e>rDX8CkurF-Sxs{A4&AAbLJTKWNa!%=?|vSvo3mp
z2S>-Eq9!Q&orSq$0wf>Bvk7Cd3-3D?_T4J%tx{LYcE~7u0=^7PJSqvf))IzKF}3Qu
z8e%-Z#lS8wxYyjHNlOcw)ZvR^v)Z+A%xxLpiofbTX0m)#U~5<q=+A44AcGk?0zb;~
zkYZJp4TO^Q(b6GA374Qs>ha@7<jCqy?HwF{R4@_Hf!kmEhMAt&J=bGGvUQ2^nBDC7
z%Ur*C;$+6&a6szgelkD--}2lWb;sP5vId*ks7f0$<&g}ZPFnx+oq|6J@kk0X>aA&T
z2V=i4;I$x6X#7V@MR}KE*gj#?biE40n@F2_>ZrQyDq85Hs2Ud+#Ks3I3PG_HU%TLv
zI6jv2^QmD3>)E4A4!<hUFHxuwJPT+&qET#xGhc+Odq6=`qs+L*CHcq-H+uy$>L!V0
zqBw%E1H0GtG{)QIQh$`09sBuHkYiRNRP3i9c1mFjQUi>OtpZ<>;pV5xV~=+~Jm?*W
znnYpHNQAfaK_u@(p?qFtj<iqaLz`%?%HI}ucQ7@1=)bLLp5Bk#m91UNAr8BEaOdT}
z-5Xy5V#nll3sZ0QWJ{U^R*2m@gz(P>myCo*>(-N{ZWozlqOinllUJ+B1Xg@PVq=<r
z4mVMvobb=DJ~`AXA^i9t#r)5hBmq^H>I6-0slWwuoYovDl3RE~(C78;X1ym8j>Xml
zjL7U4U3uNgo!6Ro4-g?a1K0|8>9%M5o1Pa0-ii}K%MwF3&l@)nOfjbMS-a1r;9Twj
z?9JyIUJL_fNjUjZ;Q;udr+!Uyk6Wvgo(XZvEMiP%K(luH34a|zn>=3JW^PoYf!fRQ
z6E@{J-Gd8%L(h;{amTtE&vzf+(n7GU!x$Hgedp1(PYm<b3-c7k$wUT<3FD5cZ|u14
zfjAr9QsD67%3It2yY&_`_@ll`;Dg62Ht4(PV+YcWmMM{lMju$~%fK^c1hFJA?ad=T
z7xSwLrjd`z{umMmKJT1{(Y`rdm{7-mQ-3T1sW0op44f4LX^g)SEMO<GP*7;AC4k*5
zST8Jplbsv;+l?ja(J@$ieD+Z6%4Ci>Ur09WNUq&lo2I6ZieZdA&wd$EJ{6>^_{;-6
zwIr=hY~x`q^+fm;n)|2-lKI+a)`F4i&(2r|zg_J2mK`ydGT~(sHilEuz;Tq&GQ#>U
zbtl#Kra!;cwh$;X-GBRx=x;K&!Szb*@ot@_)e2XB)9Z>MPUy*Gwo)ao)<y1L%7<K`
zjc)sky?@Th*T&BC(kj?3D^D^T#xhf#qHC1xREl$DItbkg?vL968rW|xY}M<`8n_t4
zP%U+z^6tdT8<EI;41sigTPt<3<0L{7_~6_!C*;PML4!kh$<P+T+IeLKx*KKtLmP^>
zlL8952?2nJcDosBQZH>|YuijGUOZwY)xRfP&_~gLySE0__tM#BxriGG)qbk5bXjqS
zmaA0be@c8V!FjKce}J*Q?)c!Y_&XmX(AnwFw_1`~GHA9Dc?o4L;kiVW6mYS(dWev&
zGpa!PJ}=$H2FHtxhG7Ecl%}&K+rIwnd*v>c6*MXm#{2tC(>z483Jrq+Ie!i*4P<kj
zecXvC$0-p*HEJq?_TPf7xWW3`Ymt=ku2yB=E*?5`xuq+k*e`C!DbXr!H0XJkpD3a_
zzkM9@%=|cCZ}BRdfZqL@P;_RS&cR9uDO3YFO)+{W+)PI1yikE=;6tD2OwM^x;3#zo
z`rj4wi*29*YS02lH27#z1Yyh38g(V&2&oOz*38`wW`b9Oju_qM!MY>ROY3}Rx7W(!
z_e|;<8#8;0?~S`niVmBn{rjU3vpXNsG+w8r{X%+`w-~q#SG0^ZEf?s6Q~`2%RL**2
zcWkmh#(;f5GdNh8TDy#HV?jt#zT+C?Wvvf}=eL;?92;@{E=}=kyC5?;V2f*qteJ$R
zp67txb@tqdZ61Gd**gE+x<5vB7K35;NJ$~)I~Ga2qjc?6zA0-xkfg~$Y8t9*<&PZU
z?ZZ(Z$qn{oL*j99*ZSAWivLB|TSrCNePP2e48njQ-QC?vhjdAIcZifIozh5mcStB9
z-O}CN-QCT1<MTYf_xsknzO`n}A0y7a&px}(zOH>nwuheDbWCb<t)O#k!)u9_$ByUU
z)QAJ}fx%upUSwz1P_lfRP;d0=vyC>g#CwBa#a{|nReUwLM*)tN@S7PI_d0tOv}F`C
zqtonm4CkGv9#(O#j7q^J3ZiCuo@Y><`r8t4_B+K9?Ti@yT22Ss%w+p_<53R#pPw~o
z<G%Yl>HCo{yDQ<RdH$D_#SPZ=eXvCs@~S97x8t2`bG$xD!cyDHU}>@Wies2kPei-m
z@n^@NpNv~NxHRfo&rPT6-hvZxI%m9x<30^G<(*yKz%QFK>3Qm&saLJZcez~2c*kmU
z<6dqmdGeeT!g;r?GtcG@V1KWDYsB|!@|tWo0kcJlguurqUwzf+oCqQs>8)~PePfR9
zd0hvyW8rx3AcxWKCS!J`eehPLPNC_o!6WVQ2fY&8+epXW<9zIn`S^9FKbC)R_4_Ve
znwGWoZ2sssYv8J!Qj_;QKC1C61Y&#X<w$di(BPsg-<IZn6aHINM+%9;OK$4@p7A|i
zp=|MOkdoC1=e3e1i<ZNP!ClpfL)uwT`uY&Afy!{St9w_hdp3WzK;<QXRqn^N{m$@D
zrkxVE#@E4&Z*)&49Ca=FkG6Uehw^#~xu7w%A-}h(vVDKg94{7}3t!tAuPE^jB=3pk
ze7?P>v{9jzF@IKjT=cAcJf?pbz1&n<^b<w?v7&5;9%*B77R=X(cC$152h)pf>wP)j
zO{qC_cgLAY#&1N*^@Cz}0nZpfb_HWp)X)JFE^uz#VtwGAisnYJX|+Jjt-slF-nF*X
zXhFTpLXPg4+b1thWZV5S3I4-mf@90(X75GYs?}az<lPDyoo5Yl#}bGJ?+hW9te{9!
zO(wIxCs3-slukkv@RIZmcW~2171D{3+t)JmLU}U05)8(89hM0XeWs0z#KdO>ea$xI
z*Btu#Li6>DTxVg_Uo<h^@t+~jsU4nBUTTr$r&E@&{!b4a@Fh<^3Imt6l$(r9PSTkZ
z@_Oij-UNs@-Gc#Kb9^grzGB+++D2>WHD2)U#YUte9_Z&FBW}eMC_JAdT&8Iz6hHp;
zPK8@eS#Mb)T#$q#EQSMHcj_th=JJ%f)~ezGK9{Lw5f`EE?*w1*&?NeazS=>A;+EVm
z^jP{SKc&mBu0L+(?3tkq!#$(f+GE)4RjBw!B>Y!kyMPvX!+)@S_yMm`R?}RmdQgr(
zGfyU#O2u%!in!gT`KUP_6Ui8VOsD&JtVZADtH=51;7b?2P#pR9=n3Roaer^^19mrt
z6STgDZhb99uTi3M#;$H7eStju0iemTp?-v4d!8hOT=0m!GJtS%jR0$0HM1;V8iVyc
zP!OSGs0c+S5zZ?LTe6iN4PM^c?a6<;y&*@m^`kQV`9|-705v1bb<?ts6ykltJyqTu
zi=`rhV-qRQ0*ag!VXc@UKbMU(8k#Z)JsXDDG4r#7fu(&AgX*7#<xlO(%g7oMI3G&;
zLW%x$^^y0jWXQ`3_03D(74llI92;xi(0-?K$(d1#iEMOco16AqYSpnK{833Ho2r(p
zl|O&_$McJIi3*nB&ewbV2D=SypQcD2q<rE^DDl7Nh%|71st1wMXaA~;r>eE{SJDVy
zsZ1(&s7U0URd@<7&bjL@t|zoTnxB-trXM+0ru9Bxxb4%)-!7hhd4BR~c3w}o`E}Pa
z{V01ly?#F&CcMg-BbZ;TdvJSQo~{xq0;-3%c*6gZXGnn-#N{)Fo>s)S-@&Gv7X#;g
z6YIsMlRknkeVd@lAa~2(Y@QjaT~!BzG-;GGxh|K!Q2d3MZ}P{*UVXe<m5r-FSzzWb
z(NNKUQ+qo}Bu9g6T)lbA+(+G`>22kw-k`Ax=Ge30h7BjR=X4)7o9%q*+9FVYPOO^$
zndf=TM|uI=cR$eK0xS8@XGH8qZbJW_0LeuS`nb16Jj?C^Ta!7(e_)td(Sd^3P9$6a
z`daVf^~RZ2MzK4b1rNMQ{B<D4AWQ`nRM@>c>%=nq+kQJv!Tjb@9km6LvzZnx5B-Sa
zpt6S;;`$$yCu2MY?P{b?zQR$T?lI+>fge=3AJ<RL7T8no$wvtm?!bpG4CQ^iBT%i1
zIK(!aL#R2tR4XUW=q6@UWqL%)sz-Jj2^=7)(E)lAyg!)w_2FM?!<Sbp1$g7hbC#1y
zQHuO}N4dUQz2;92*DB{_XrWM0UJFe8gFvy`7-i@i2HJR23(T;-&o2MfL;2)(N2NZZ
zooWhSwPbDt4EmQRjRLjq=o22~npjY3e!jZdxb)Vi!&62CJ>4z(Sm||QLMN~=9ilo)
z@Tc+bSX%iPYd1B`YP4mZ*)r^Q+t2oDzQY)lYy&F2wRmc}6-flXkVB-VA9LAy0rc{7
zi&acz1Jg-1?H%j=-c>kpGM<Y~9y4@ur>Z<Z&*UvJe}r~h{g*stK-DD}6hjQ+L+ZoA
zx5_nb$r~r%$LB`^m<)dwd^yWqysGl)4P#skj`c^6Q+$~2qipeLvZ-vQ(N~5`ojMy<
zHC>Pvh{P}bS4jqbkQp?ePvw{XDr1W`?^vE)zxwcIsNUzv9~ZWK?k#0!kM!IZ?ARp{
z=E3;yE`X*GkD||V@Cz~OV`mZJU|Dezzr)zx+*~e2nU!BP1vv4KdHNGVboZ5VM02d`
z45w<FwK3Aoi?$(6C>U}L8`m+HhdUN3Uk1o*94%YV<muq5t}$m%*<L{~Aja{juMJ0A
z@`;{ZilH&-*;wy+I#cR#O4y45dp58E#c;YWmw9)4UXkTi$nS47dsv#oy@QwMRcCm_
zEV!UcbL_RfpLbieQHdxBAN%BmR!A_hbiKSGHh{*Z#6pau8Dpqv?rZwU6rR93KURVR
z5ykcK*N5Hc4k})RZX`6>H4Sq<RVBZgq~{W_0YotgGHo3+;w~E-Y?R%Fsg&{j{g!!7
z>rL_cxCDrb1cjxB&4&epv>9@7dASMz8Nx?-HQE|aU#nm-T$B?E-Zup9he8)TynExl
z=LkVRULP{6fiD)hG$e0!dkFskQX5@(H+vq8p6k}Yry%gAT+?_e1Zbwk!}pX|oR&L@
z9OX?nJ7O<b`%qFXp*y~X^UwYDng)&%zfL`K>aq^B{<D)QRuG|B#9HUhIL5pCqi^??
z_q_F{Gj7U<0j($@cN7agsE7TJr}KgxYVun9ElCMQb<PP7o;)aOE!bQao~_KKl`hl>
zGB7-7EVw}HOm>Roltxaz01l4RaV4u5d9BW^^9e$#V=GTw{k`egor$|W08)^9)3{{o
zf)X@*`Ng@+<10xsb7PkD;;DH!B16tu=PKvF&4$EaZ;1oK@zYgk6}?lEkH^RrUv_KD
zJdB0~>#j3~XW3$+8ilN*G8c}A$47mur)%!B?_1&my?TTsqKxWd1hM|-#eU$9?`$0E
zFlQZ$_vTQ6g7AzR@zfL7mG@5{_+*+k)U7V5l{wwBhuWQjf_P#D&~TJN`8rqkqr~Ax
z%l(gT{R2s_39QiizFwwJ86$-G?^B=5Oc#;F+5Jhatc|`uteObYW&K*u$Xso(B<2GN
zQn@<xDDWy&GK+$t3{m!UDnZ5n<oK%O!Ch=Z9aios&X6tb${SUG!EU)gHzsVL&3o-6
z@BZTo1V`FWrqAsq+oGU?d`>HH674Z7_MNhCb^?Mn24%$~TC?Vf{0lr*(DZ11DqCYh
zYM1aXpQ=`Ktz10W*_hIgBgn3=_noaGrfr#r{LVYjo|~#w=SQatiLf_6O#gB9B5+wn
z*{y^N{Xyn;Vxn84k;hen*&nxx{M0}qiuIc6-$o3S&!Ifb@gozEfWE?azHh=g*CCwa
z{qy+Y-ly+UXtwR?p0WV6o7cwBT(n%uzv<L(40CRYGUYAJsj{h`&XsnvkpjcrD<bB|
zk9~3;0uFfJ8rvsm?NLjkEJNY?a4)zcq%O1Jx#4xD$2+&@8kIc%yd$Tb9%6nRpuU?A
zeBU`DOu~co=gYW{{ViuMy));IEg(f^&F^JN{O41A6cpF^!_|}5YyKI5)mjrN%<C_G
zvDPwp4K5?(@5?xpN6ucve2hMM_3fBB#*frHKdt=vYo24<C)f*ew%~@H<7}jh1vTZq
zZ^i2C&+_AKW;i@KSGLTS3SD&KUT7cuj-*GXFQ>XbuA0|g4w!SxAm+d&|F>5rBncW6
zrmc~u=_K3T7}L)<lYfd&wuh8Gd3EZ&H+o1e(m2y*)GL$j%$|}GGu}rfvDSGetP3=V
zX3^M1Q<D{6m_VGk$DKN4i%zzeB4L1Lx<~pR$T=vUDZhhS(+m)*Bzr4z);3H^6M>L>
z)?tt#mRXIAgtxg&n=$yU-SShL4h!vQ=}pY-@p9(*V6+;}-Al(Gc#({O`8+H<EQ<xz
z-5e33<qJ>l;`#(#jLP^9$P*n@ix{8TO1Utx%v<O9HSnx8);2&bYw}C`&bArv5FY<6
z?^v$D0-hDi$sN?ew!5W36l5tD)W@sC&K#!9g-2{=zIDHAk-_@0ex#psHE!+-a>xf^
z2gj{pd)$I_F6IS|hRjPj!Uq27E(Ym=QaZ=<^HR#m78|~(*KMfN!HY2d`MIzVJZ0=d
zDfjuf^)>^-K&iGxxaT?qyZ1ro+LpzP8;4Fm;Qy4@J<48ja!iktOt;n^iZt*d41W$6
zG=i7rTAk^ykq2rwC`{vh^$PSk)G-UrJ<2OX{wp#E#50?)B4s{#{Q4ACwnmSJ<(+UV
zd>7|C_XrK+<a79}c6Y~kle?LzN8O*|Y)0akqM_<2o2n#>tqSfFWlyJgEhw+W`i5Hf
zTr4)t)t$Qz^6~v<1_aNC42N8yDG$9*g!kp3i$07*a6#%Y{~&D8mOThul<>ytIkVbA
z<Ff~Hh0LWUM`%iNkeIq@amAuUzaZut*ME{_SG>@)S^4&_8TyfJCG`QJyW8I$ddE&>
z%AOvmclB<H&-YaVrPsXo`IL6Ch24UxV1H`+IW7}jhh#FpcrQAfi+?OJ@w@lggg#I%
zcF=oUV#As&)F4>A`8_xuuzXF-wkAWG0F_~1Gt7B&eR~ZP{5b#BnfzFv*BP&i1R4hX
z<AELOyW*gTLB9<2rryVJLUS+vW#&|s*J_acX1gQb0=!Y@AKk>1O|3r6`~pOq=c!L+
z2H17$=ytQiA%<13@sMMk`H=cYpT=)_#)&TQ9F-yb9-Xyme2kdqwuFIac^^B=T`2M>
zUd)Px5A<_w<xR%#?Od|s7PY%Zy-tJa{PmQidyz@(5ArtN#r31aJ2X8)w=p%sN6*+p
z+;pE=kDB`p%V9mus(&uA=E8`y#kISU%aHuGBo2A=vpbeH3}_o;y>*}ly8JNEE|Ebp
ztbu&n&41)?Rr?m{ua0zc6t5U>ZC9ct?yiwlx>WW02R9PjB{XpL2;je7gN`3~R<<!A
zqTWI)>Y89SV=M|5EpT<?3_%6WVa198s;O7~-ScFj4W;><{UUL{eSH~7cCftgC=dR*
zjsCa&ydZs~AnT}?{1M~L#hZ?;UtbhOGDSlBk%XO6HB$XTezQff=XnkH{3wKi{fmmE
zfj0_UvUK(xQiK-~{JzHo?0eEP5Mm6)$Ayly=tUghC$z?=6xEV%y%YYE_;rvh^m$l4
zlB=-w<q6Ig4au7dPYsPM^ggjeJSLonoweD>;R$Be6n%Lqt-qIRk(}~0?WPO7{2HFH
zoo%X)azk;L!LEM(t-nwLm89}A9W`xPnDC#;kioOX&FtHBD?F_6awsycdD+9;B}S8)
zr@gJ%%TQ_y`-q3no+3BJ%gTYH5}<Yp6wHE0<lo`4M84pUg1djBbain!DJ_K#h11T8
z!)i~H%qYy~8r6K?xwTMcEE@jln?EmKD|T7R>r7kAT^k^S8w<~1Dj5`^dji@&a|ZuK
zDT4vX#lcUp=^=8-WV(1F%Tz~sp+W1Gn$6t^lI#2a`z>jWgGc5r28iRTAY5Hd29mld
z%mQPY9foOJdV$8TjbUiL&Wr{hw{^P6lW3rC5DK{nv%h6n$^~zXEhmL|Jh>YI?d%=P
z^IKsrH$VSg{oz-?oDpb}v4hl`HE5vpvG4VR4!M$%FSJ2hsZcY%2M~=%fs?KX7)uv1
z5Gq-w0>1=JH@u0mz1b@)_un|QzsKx^a8xG|=?QtzM$l%?+JyF7MCN&r82@<OufBTN
zt@pJkgb+ZH^+)x)I&@QKUx=Cm9a$Z%haPLynL4#@l1$9hzkQ=16rgv=?I8}+S2RW1
zpm<)*ExgH+vO_si#C;<&mAk(#5)i-g?rD=zMfXyo_T$9*FP*6rlK2}Q^MqHb554?w
z#kQ_Ehs93f%tF!t#o(nt5Cl86fWN#$DmmVgfD7<PutW>gel$cqX`X>m*pL2wANLKG
z9ggmakI10ix0QT5q+QGpEh-#LCJQ9vmXct(SO#ec;rC?8el~f(dE2VY9LdEqe|lb&
ztZX!Ud3fwyJFX(%!K?1}eMq}GG`&9^W&g1A5sBH$sR6&()9H0fodvODY0ermhVo0m
z4t;@|lQNcrL*sqz9AS~2aR?zAeG2dwQ^9#+IU8DfGkgXmuboCDXv%p6d4ha1o*0w;
zDKi^X4>C}?T;}Q(ou2o(?3SLhAH#GFjm`iX!rvatYvIhtM1=rI=ZpncjRN1N=Y;xP
zWP62;boB{C-&+%b;YARi3#^^9@y*O<0qr^>=M$BcS!T#4oL9d;Tvvk#Wvgk62xa$|
z_mBq(2H&`hQM*A2x6>wca^nvpqdQ$K$2{N64<tIWh<ke&9D_Wb4<u!)v+MG)zruBh
zZV5${p=@X;j#_BPzkgAAxoqavuL4rRoK@Ed4&&>IWAR)XCu835CE9p4?oX2G`p9nf
zSR3!jrY1x$h^)njpLj~e3~iATK8b?4*a1)$=m4Nl@2G(U6^^?FvNfI@U`Pa`?6fnW
zHmDu=6h0$FDnaFj_|h$|mG#swu90t5T)K6<Cnt=e33G`Q(g2`M|IYT5Q*j|8aK*8Q
zWAo|MQOQ5pi8nN8jU+PM=^9tE^~Z~CyqHHfctgPJOhf`?EZG{{@7Wy*_x<1U?w=y>
z|NZWhND2Ty100m}|NltsN081{@z#5QPWDgt>woV;uTi;n_n3{^cKf{}GB7d<BGYh1
z;*3>+bSEp4shk=-wT`wn5&RhOMwOhD5_3q_;R_c~BW$r|k^C#`KNA0akD^lGFelo8
z!=3LK&>_$f{R{k(3$0W+d0*EAg+5<coo-KaZFXtfua*+w_(X@A_nNkJC9%T(Ut;|y
zpC~MFD9O%FqM-mfcDe8~qNUp??}pQv?6pkO5cv;}Buxk1|2@W%n8DZnM6NyP-Px=7
z+!&gqW-9j2zpTXpkZ_k(|L-LVlmc+qCRCl#y#H1W-f8xYEEhH6xeZ;YGF}P5?fCmp
zFtuH!0TW(D0n~oy<E0z7-mC5og?~@pK?tDAhwmX~*^&SE+W-B;Ak~|e@tN<JK&>0!
zNl-*PRs8lPv`xfm-~Sfb!3H?n?6@&z|9NVe>q41}t5IEF3I6|A1>OK_LgmThB9NS`
ztY}s{4j0{fPJG2K?N2f*&%b}!!3Ds}+{lTaX+Q5(=ls}e$0>bV{2$c*pEQ2nv<Z(|
zhghnF3?EDPi1=SVXCVL>3jrb#mfgwTj*SPu6F+MZTgftH01;UdJR#W1t%nRDLr)6x
zo{X(#Hp>xp0n}&|=}qe<C{dxYUu<{wMec7OKL`wcxX~G(nZ6*J{d(&?C`Sw+;JAK*
z<fwA=zfdvkL30TZ0%qgJKkIp}5X(~~<*69p8L#0P(%%fEQ6cEvd^MOdkBZi3d8Gtq
z9s}Z9$Lp%IVMA$JUl>yw03WY|Sm;yDpxrqBSzr|3Z9^RiPiQh)7X0tw5tCVc0qc1P
zaQvgvBvE}W7S=p{A3&o*B)l+@!~;pN1NsJZQ6ISXKlG_s-5-3^%`Ajc!U2%A9WsN-
z3)gUy4?<s51IN0!p%0yRE2ulUQPltykSKu{-c_ANtefWcuw}4PM#ggIcmB2m{u>wR
z$^e_L*re9Gn4kp7%?v56Z$^<q2dF<vpf?cx`@P;FTXH+*V%jH}98`UNn2_YvyHdKv
z77QCsj&6lVr}^oL-*hFqv3w0n!Wpx^34d;Ol_QeL?1mOT3Db?|jT<9TAR7-jFiId;
zRNwfWx%6fRy9{Hz&XpDB{AZWDfq;lJz(7Uuee^h2uAnew##SYBC-p0<h&NTy0mayq
zA51g8W3O>>okZRJ3(5O}5002-_!nt3w4kiA=MY8=)I#Mz#&R!g7e0@9q#v$c{PkK;
zb#NEgHn3<n77;G<3Q%Z4+@Le4W`gr3U6#!O&OC*SHiX_gzp)5Hhk-|#GGPi9GjK%+
zp~^!Tt_K!@6hLG{^B}4vD2!tG<^r7KI#{74q_8l(>=&NORlb@#A`56XNYgweH%&&L
z_ZQ`qtB6eb16?@|FdIEo;BEDqV#-XCU;Ln9XX-xU%0Tt{q8F#}xQsPbROkyuumd<m
zQ&V;eztw<41IUO6uAdoom>b~`EvSYi0D3108#t9ZB0^Stz#rU|=uJ)w5p&qey7Rq$
zh(6$kl4ZDbbNL(jqexjirA*F(?U)em>*2Tg1`epw62jJCcN3jm?^qm+KEHUk0(zpI
zbO?|4UqWE>DVvieEvA>^LO4bmctDcG<&P+Ph*;8#gUD&v|Ds#`^+?D3*O^doLFhw4
zvI3|>ot1rp`ux<X(ujn_h%YFEXaLlGT#uaz(-v7|n^b)rp5Iuc&}$Tf7BrZ!9=aQd
zEcdqib5&zxpeM&wDM-zK9N-=afkdcD-eCZMo5ju8IpGhkB!t$iQDZtlL`LY@j2=&b
zn`IQ{-9$n-q)gqRRi!};SSBkO$vygP=|~j7eV|F^C8l+OE!sP{5&f686(Esmgd3^H
z(a0xGQ?<+ZY|^x?m&htSX<iLH?iAoONi|kEyH9eiXV;yo8cxLnKH33aCWy;gIp7=$
zuhD_p0yK`oc)KKVuw(%HOaX7{SkJkN`JdT#g>X>hi~Ik`x3)kK2T?%T3X<KU^Sm%*
zEzO7h-o9m3EADm$%pw#GdN!ix$?rw>*5CxsA^p6CPxNN8AU;0o{$W3CK#nfR#6<9T
zdqmKe;5G~EF3K);oIDK0EJYdFa>GB{72*)c_m`NW3aTKEdV~-{I_RLe4Tm4v+BAL=
z?TZ0HO&V+>*oF<s0jG3^()mF8hdOrkpRsK89+{e-x_QeFR9fk(ce4LN>se^do{T3e
zg5E8q_<?tO02P#dZ8ux^mYSBKo(Dgi;%b2WNwf^`1w~NBbL1mD@H8Hu5-WLM%HVsg
zE?3^)o)jpSAdj_1yIqrK(tA{3#bO|}VodtuTW)E2EUgx?8W`jwM&j>>13Xc!7N|4L
z*faWz`g7Hnyr*8&AG)cn)Wg(H1NwsTHua_B34tb(@sH1;0JRHc8N9)<<)=iVkAp1J
znQ<VoBS|s^nfa|8>G8OxQA)KBgm;wpAfoS>8M0j1Rdwu<Ul)yfJYV#hE+oxlH|N#q
z{#NrnU=mTJBa=vcHR5SbTB}^K%pBXtCqERQq;h3!d)}+D{=}V#!1e&No&}E)at+%n
zB@}gIZT|D4#J=IE$as_x0ZLD^3oZfW0uwoMa<VFgPY}wF!IUsLbL5W*TZa3q!350Y
z!f{Ceg_m;q6&roFunIulr7&Oul{UgwRu`M{Y%l4zrdtd>*5pXvZcA3IDK8%hrt|AI
zMt(_-DXhPI2~arbpo)k{EH8oS+8RXS1!gCsJaV5IY6HyvtFsm-pPFpOLdqT4wdm^^
z+pklR-~jPV$|{_0zs`)|w+Dw?&bz*Uj%TP>>_8dyf>-;!c+r5r#d_=PH5eB2^wVy;
zBm8D+)*-YY(^sK=rl_Hn8E5fILdRV94k2qDYP$b$!KH|S#scR9HYCvjI;$EO^L|<#
zA<HiMbR2=+vERVrK0<pHg%-dhE&+pf0E}t>YQ=X5GT}?=rGfv#tE8w(7Eew4N;W(J
zL8vkG4M5X_ldEGC*z3~*1bLkzBtd;LoG>{{k(<BzP5)Vr(1Ptn5TGn*d`@Y%Bi_4s
z5|=`Wxef00W-R(>SV8T*7AX{p8cAK<n*cM14fDH{QAoT_14dQ?WDg7<=@D^}O*MX(
z@+h4dare4S+Nq-Kcz>uV21EsZFrRS0I;|eEGsh#STZaDvhk6S>^<KtcVIi>?iymm1
zqqu;662g2{Fn>Ow?qNVp8BCcGOPG_D-Q(TYp-cU|TdD$e7UYPD<tj;H0|~_r5j>2C
zGL;!)-Q{C)3!M)nBcdlVX*`hYYlF^$`l8*L!VctLpIQL)y5iTU2kU0*EAWITNaHnz
z(}NsY3mey#g^F%SrT!KohVU3c9-Foeg;4Cng2VV$YiF2TmsIE4ZzST*hCkLAtP)aY
z%d2TK^&mY`D?sCHoo+Cq1-$`{;b{~DG!yxb2kjdXCV_OQsWAzX3Fq0}0ZbY1VeiVD
z7lurbK8Q&oMB$-OKg7N<ba~t7t)Lu<6`x(0Mt?%=F4B*maIS7re`%{6U{T_zFXvV_
z3+T)%>~9_*36H0?Mp<D-EwmrL{B{ORlsbztceZRp!c=ldSzbq}Q%xLQ=2fzOGAzd?
zkQ#7YK>TZPTBbR$!LyH#z6Z=$Pfn0e!HUz9VSEhnDCc0|umnO{*cr|z1}5n6TWW7i
z3ZD@$nvQj%P6Hn8>|+dOctV!usaz^54IgUl9xTUY?z;Rl=;>ynb)0WK6uuaUs+kld
z`p7{7AphTuS?8tAM1{AHfn#(zNvAw?<{iCt$XQSf5=!w}&^s8fe1eT~yk7R;h9WZA
zs{5@MLBww_Ri8%9UarH2JV{0sZG>)W+$kPCh#wyFrcz6~--UB$n`?~F0(#kIp5a=%
zek*QEa>ps#QN}CK2%6pIAaM6EMvm^mzN!aC?X#l6wtzLm%aMOA+<O6Q<-2WA3?;Uh
z>12-5EwxlX<T08!o|LrdxmN%C52@da;o(O=KEWXXs2PhaXg!~5ZA+qGk&6-%yz9t-
z$qfHlZe=&Wy`yh~RfuH9nH!auyzV#CtB>7ufFt2hMsisb^kv+jMdydFJ6mE9t#`xv
zyo_iNELFGbtGiTe=L~~}OF*s@^TYS+C*OdS-v#M`@v(80(0G9Cuh4u|EPjY-9G5{a
ze^~l_jJ6WftmL;(lo6yXSg=&fB|YzN1f*dc5|Za*ThC8?6(N?J=1}-KU8q3C=du=)
zKzfddxE2IeEDfR{f%H7zS5Vvf<oLBD+=@mD(SW`;yYp7iQz6$j8PcD$8n-U_!q~9B
z^lIZFsbt9KwU+!O*RWwm*pq#Nz5GA9Q0cwcQ8#7S4dlz#z8zz&6)nfZQ$kHYi=R43
zjY<h&L*IHaJuh!QH$6NT0Okw-L5N#Vt8<qNcDV(m^NrpIN+AmqfW*ft0-$Ca&kYYP
z3D3`8UP3ekLpH@nduhfyDWmR_Q0^VoitR8IqxHYS^g#}aK~o-?KSa%7?KaO_VOwA~
zf>#uejEpX(ZMFnWE%B&QlfQ8i6}8VtaI{WNVs8$Lo=TB;LS{Pqo-Qyl3o%a!p4A;G
zH0|cza%;GXAQMQb+;tw0|4GKD%p_!1PWT{p_AU6w^P?6A(BHWDYR?~|m>((+G9w+a
zk`b2Cg0N{Jw{GnUW=}+K2wh!%kMcNY)98E)L`rV~&`=43`%x72>1d8u=ed(RCcpJs
z;EsLG4F>O+vdinT2snTjlMI=73(|JH^xCN6t8|*WpfE{uf-BpY_a=9&jtYTn>X!w6
zpaT!xNef`<C51Wpfld~w@kST7P9?q~bXq4{NYqIfs7G*hEgrUX0<#G|tP}?5^?WX_
zP9Zlvwzn;GyoM1s*N1+Xh#hFlV(RAPVh$_AI3WYsQY1wXNq?cGX?2qQJu!=i{do)5
zPyBq=K1g49V=6}DmEg_I`O(~xS9cCW_U@FN(Sk5RP1WE^YV06+feqTFGcQ%-M70RS
z+4LNv;A3GET{pag*)=3QVCAim@B<BJTA_m0ko5Z9k1Eag?<)G}%MOlhq42%lG+slE
zEb`^LCj|k8)&YEvulp4N*wGzC@JqFSlsfdolGB2BocYqvW>lEwMAfI;IdM98HFrj0
z89)D#>S?X=(^<2F<q@CPr@TK{y0H=M5Iesuv{q@m=aQA_ema=LasGoIgtJvdgI$I|
zDMm9*a<<RHVje9WX^(*GyQxiIInMt|kFR$;^1NerVs(ME9InxQ=aQ!|vsV_0utB|y
zUyJz8vy4~MQusCo<3P?UQDtTdm%z%jsXgu0BJc|rvzZXVc|K=+q`W~&nOg!%KNi`<
zau$gBf^tAd?30M+w}b)Uxa^aK7K!k!(Ka<KH6=d#ax!A{AtP+Z-8N%7`o}x3YC-Md
zd4I4vJ(}yB0d`31M!1&A+vDryX$SjU0|CCNk>~!T5BE`HF0%4!OI$X^FcOGc0bv>H
zHM%`NTVjsU3P`87Wsy?0YjcQO=dhj2ao$zb(#HK5+%+Z5nO)$gDOtog^DM&;!^PZ@
z971&L$B(C>%CAFOi>roqVlYqULehHOL8|ldUeQoj4R_7v#Gu;6j!DGQp|^s&iQt#t
ziZuW9?st~cBXolgVNaCOe+pS+!Qu%*j-B9zo4u5qlT|^|oXXeX3rYr^O>J~Lat8A)
z-X9{M?xzv5zR71UVf4dqel{#loQHKl7jtB%f@?tMImr9!O+P?jSB=x$_g%PPdTAHK
zVPd*N^VRCY+O3eIcrDJJTb0q%^^w`v#3`pEG(!zjA@b8;jrcn2h<6Fz%d}e&^sk9J
z>Mf}iT(}|wujup})iqfp@bQ+OrvimU66@&Z`S=7k7o#lB3-nOy!C4ZJO#$Zz`_xn4
zXH;=7;ZanPq1G0yFVk9dueWq#cONS!>QAO3iboU)%RWVhyt6c<5FC@DOjq30m*X)&
z<WD%&!o^d3>V+m#rzvUUE>z&ieuxQ)`*X&}!1IwD2zd-T=}H1QeS(Dw0}%Gw%1V6o
zC#lZpN-D(7jc6s{b3moZfJ$!#aimYFWp;n<`uN`8!NLtGpaqdY7qax!IyYaBYma{;
z7yJcAhDA7;A=s%f&5_Z<g>0A4yrzG~tDyQrUJ@_NZEo&Mx|tzC1AJ28*EfWpK3h2)
zc{aQ$iOVtEmK<i(I#K$tFWrZbQm{B_sBt^Z#L$fQTX+~xc^(;G?WqdBQ;EwzyL0_r
z$%AnUoEKl<*p|)dKSC82qdsc~XFa!klWBXgSvxR8ThUdnm92t=lq}4a?)<YQ>RgUT
z@x372RPf`+4w>@x_4Xl;*7x?ju`${UII2$`C*?QR456gLb=mI5eS((Y^QU-)y34>}
zR0J_VN!+D)48y<W+4CQG>6Q=!`q@7;qO%q~%rj$z5ZfT?UQ3yF#d*zNfm9`gw|n2c
z85DP;UbD6-HyVQ!{%|W5(~h0aaBEXxsJ-oflo|fk6|~e^tN28lLIaSom*QDUrA0Tg
zHRWU*xo+@PP4)WryWR?0Z6QB(Npz*uGhhaHu6^~B+ur@0bNiEp&N6EFVK~TFj?G_O
zzQAGfI@8+t1a2{*Gn(0~-3U7whtTGJpYenMk^PKdxP7(K;Izs&k(I8G_o~{Ne+sub
z%zYHwT>x<?ltpWL9aZ}s$Dc(4p5d`ssYEg!5IGakyw2G!&rI+Tzc37b8)d#m`9r*C
zr%({hl0oqx8N+Rfq-1rru@~IOW#p%j0jBs<?4b|u<s0y&lI&-#{o8xoC|HcZ2e7*q
zmT}TxLp0*Hydfr`p-ywZT715l3b_a3z#%kRb6GLDsGBOnwo8KD_xmX!<+3!-uN-g_
z()~h1PuAlK=6$=&@$P<qel0*`vRnyvblb7lr&pGUyU``30%xVZr9|b{f7f+3BX=6l
zG5~H@Ob$y$4Bd1&5jlOQ?4wR!>L7>vnJUmlq~HU|L%X$ub-b?bnp2;v^^dvIg26ai
z2BhFt5;Z#G$t|qY09gUz_zmy{fvosCuXHcWGyyXVgR>YYN1CJwKGDJSSpw?-E&t19
zo9G93zS1SqDJ%pe0~+;uD2-;eiN%%GH%}^lfw<%OIwWVQ*nHMyBRr$K&%4uqj=*hO
z`pi_7ZL*4`^EZ%_i=0(snf+dq(d#2;agFbv5Qx=>bqgbPpTbsHr=K$tJA%0L6%+X1
zZ@9#jt1v%Gg$_<;jh79I{2pDh)MS=hbymg4I|;OMD86Z;RcE6JS^lyHTXJ){_9&}Y
zg>bBQMe9Xm=`WV(a=Mx5al5U^_H5$iT%rq)ce=g6PZY}_E3&@CRH^c{eUben@V-N=
zFwrqdBhaGtar^Mqg(LDne?lim)<dxdDG^WFubd%&Y&gZIv@cRrpYtj92NbUgt(~n<
zHkZfnKd(v>=_FAh@;5diBJsp}QL?9U0aSp+&%X)}MIYlwLU>HY&zXlhYH5AxRn?bg
znFdNlwl&}J;{GljXU>Tw1<Y&8?fUoS3|r9Iu%uf*pVd3w2f)2tdXx4<k1k9$1|`L>
zD5y)qS*-R<U%gaKsMML}jRRaiL3OXXW%?V8a6cAM=QdiJ%Zk_}o>puQnpGaDB`Wr0
zabBG4Gg6;d#C!=$V4QbqUtBvHwvFU-u+htRYm61<2x>-mdz;eloVWi>{*%d}<#Rll
z$w_}M95|4Ckd&M%b~A`?JD`#HAmDKb252B$wZX5ZI`l`n>AnwY_~RQmzcr_`X-iS^
zCPxYra#3B!e5`kh4@vQdNaC0WygOc62-iJUan0Ls#?3Ex{toVn_7)lVfMD(-n4X&f
zk!quT#sZl?j3ib%7XCoYc}Q{1>N$V)=t5M4We=zP6#O8ES+V!kL&@;m;%4Sd$p6b}
z8*rbe8$Rl0Mh`tkf6;XZ&ckPCmv4)M=@>l22B)SP0VNG4cx`bNgCdc*IE}gj39GSQ
zhI8%)HcOEq;|W=ITc1=IG{Y^o^@C2oC$!;x)b$MF%VwP+3KM>#ZkD3K!*#r6zx3&@
z<8JC#mtG~Ieb%GJo4L;DmGpO<74q=E1vvbm0LGRt9h%4JxOAsB63oz1rBNIAYMj6L
z&&+5CLf<XRs(tl}9>x@&hEB8?7G}kbC);36-+@dH9i{&0GArE%Dvp&nw<p}Morq(R
z+@zJ!3Un!<_0FFhdTAWom1eeS-fNuWe$|YLw(C0->!Fbmbqy}FK~eL0*>qzW60I(o
z*>#gZp}2BB!g$dXo8r~x_3jWE?KTCMzU*i!inbnS+VN1)<s?CNu|@*O;&y%lMNc*o
zH*i9;Ps$qP)(fy9ULu8NM@#&=yRG2bCwx)2xW+%(%B^?{D!-b{<lUXa_qR9PN#Jl%
zF2L_&1t5`v1!t=njzU;}!(%I3GmHe}<O0S&oZ?6u*@N<Ti2i9^wA3MpmWOZ6GvB7O
zvkxrX-q7yMxzkIFd|HenLr8JKJu8qMr^1~Od~Ey9YU8+rZTso`J?b4f#!xch6*t2C
z)|1WzHiVY;=Ijn$Bf04J+a_kFIIljnsC!PX--JsMl`MGSDIPz|YgT;Y;z+J(8+$dV
zc{S3N3ekG`V#YpMps$BN_&La_bMhHURqAXNc7Odoh+f>8j_jJsuA33J7W@5znRiP0
zS15XfHPe2Ymr=+yc`5nk#<`xOt9WjOvA~NvQ5oc)j!|_H<;94|*axlVIorQd+D2~n
zQ{UPyate+Kzh^{?Y1^P(-(no}Rtd+mCm(f+hj4FDM~APQZdinirT}yDI`=HpXgElq
z?=5IXxO*%Jg4fj7NaUBTxkCf8Iyc2|ua<DcC7&iN@6Kao*uHYPC<HvTjzPQM>y;aN
z<%g?u=S+M;!c#vor4fYD@h@9w^t6zbd!FNjGvQqDPPB4J6QW|`hdC4BbO&{LRw1|W
zZJ`(gz3N=+j+I}(JAKovI(8{|7OCv%eiNCa%e)^yThj~t35U53oJ1pq22jejck$g!
z{8Q8eSwBppSZWsA9z^vLv_+@?M@x|;0f9HtgT-|+@MrFv9%%(!2rWuSiS@e%Xjri_
z%B5O2UZ@!^FiE<N*|=E=qaRJZb`z?0&}53>9F7H+ymJ~lwTuXV8GI)D^eUcqzb9Jp
zA9zYuj>J$0#4yGoA84h$Oo!ne=G%3Es_iu)$au9ezKhoWi9CxPQ5-lk{v{!!MS>9k
zMAp~lGQv-|)aFFA$w=?^429to!Ecio=v1NrfSJ(`*6wV&O^4{tbcs7@n-a&>Rc6(!
zDyEApeBy@&2=jx^vvyK&0kUmjwLmZK_kXCevS0=^#OQ+E<L8K{mK=+FmdZ<)8m@=p
zyCdm~ul@plqMBZAzX&0)%^o4KPX8MldYLTmr45L2X1slJY*v5@n5CCauYZUb4rv#C
zhd<o1p|Wn7_zf&8D^xJo)$umd!dSW$n0NA1Rw}zrbJYE;Vtv%XJUshd3Q@Uir|1(#
zh_b6&M{q=7wc}co7l+ZZo6++t7@IBx`}#M3yKj*~3#gL1k>OWicU?qvEq7TNYUI}T
zJZ$l%B;`69Kfh0B@CUk$+{qy(>)Q%v$Sj+!qkWkxByd|h@-g=RhixSu?yYmhYx9e%
z$up;%4Y}#fLxu3Cjwcs;vg1V~Z-Hig&xl0jqnkHncW^=?H!-WeSTxrpvD9Z{Q2<y9
z%s2+%Ig}KA?%UL?kMmOMS~?Oq(3#(Qd@Zr{4INF9t^Wqn)J_}ocb3~5Jn){xrGDpm
zvrqq#hqtnMa_#YT%`04U{22rHT7Opl|DZe=pQJY7;U8!6pY4OOeTexco~4Fh(3HI6
zKazCpHrFf2wP+AP%c=%5sfA*^1=k*MeoXFb{3fTH9?}TOX?d`m4XfMo7w-MXpu|Ik
zuCr`Z9)FBQt}!dM<)$YGbgXqqns)z(lzM|Hd~T-^{pVS>V+oBQcH=&)v`@JV1q)=)
zz#3&=)|j8{@QKbC(~UXpdKorH%XyZ7+U%Ds{v?|w&R>~ZXV7;R#)FF*kh3`lp32E7
z^TbkFGMr4GBu$6i|0A_|LUQ4Yn__H;?(gKaAQ;2MZrn7`zyuvsoEPdVywceZda)t5
z*bzf)G=byah94{l7_dC3`Ma!A%9enbLxExio)h>eGWq6B+ak|R?<u+B^#c7Fi9BBZ
z|9k-l8q|LTLSq*vF;3Ie`qVlrIF6e%DoIiguW*a4duaO6a=7I;lo)#l)gJjl?i#Z#
zC_yKT#mr3p1!>7A8+j0CM}BNX@Gx4QDYvsk1SY@UUuj?rvi-LL0r*^m{kwBde#fu6
z?txs+CPOoE!_iU(U<fdy@y%|XaUWcOss3F3MfCbP2B8amn6SO({pr+?f1v$DZ=v?z
zmt3yTh6bNrKSlEK!uspeW_Q*>(qTjXLCsOt!CSg;19uBM>J?w2xL9u_a`c&GD0~#j
zgf^FHe8LlqlpGFgPgg(34u3zOZG2ZgJeDU&+t$WBvPY(uPWghTdV}xo?iB7Nk;3_v
zc+FVG5^{5HhR`(7Z(=M5@O)r_2G|RdhV3)_fJ>vv;`((c8Q%SA**i_!EtKd>JjWdP
zM#ix+xcfa&OF8PCEVczrRstc)=Jwuspw1i13)QzT^u?@z=ytc@p=Z_7Wsct^sw5MQ
z3CoFXw4nao@axI;SRw}q@h@EpEl3`OY$*A8kX~rFEvmFd<-x-qDUzoiP9xmCQv(F~
z0hyW9yL*A|97}8n9mR2B9U1CK;i&cFVT;28-CpC<u)jn(9~#n?-LsVw=Hk)jat}!~
z>WswDT!<V;(;U2fV7CGhRs-yAKYOH`3)6unvWO*a(%%sF(wq|pN00gJt3eA6!s-yB
z_Nl}S-sH7nK7*niI5>AGeP+l3s>DH6A??SDQ!5eWCvNsniIpU{?CSZ(duJRo9TflE
zvLH#~316%2ruY~`_vLUGPbqJcZLw{><H>z3PjM)(&cdYu*7~?Q)7VX7r(L+ClysYd
zT1ozc$X)d78TOlV3(1q0<_;hZaA$&)!Sh^{;=^pmYE-`$RO%BWJbjF$^gyFzYbE$*
zf2#5WdegT_^~+2%r<z{~CKz+&XZW{~GXB412zr<{1rY07S<(LPAPMv|D|XRQq2IpU
zaOB5?%fe3^x-rLsiS2apM`r0syN?$xcOwqDa822-ovfaFN!9EX;`pb1I@UxrI+iM4
z%A<c?RAgnlwo#Z}WYwpMUt#UG7KN_-dbS1^UUv9z{u0Y^CT<za);@?~>fP9Fs<&h%
z`zrvG&ru(f%5yD36H=2%k;&5JZBH}HMFrva$u-q8DKQ}Tykt_~<=qRpKroJ8WEL0i
zStx7`mGOzOfnw_?kD+!T^`Uv$fY`Sh96=3-Ums;W%}Y?+xJO<nz<`y$^$8~=<hmHA
zYrj8t$qJt2@vp%mHKu*zAF>}96bCQ{0ow>-1OcR*`joKAUb?HjG{>l!esX+CbU1~r
zVQ`2%sG<wMKd@Yi<Q3qd*uG&r@v0wr*4kFB@2)KSiY0}fM70b;P2I|YYj1$Yz7^=_
zam`v!>6@(KNplShnQU0GWrp{A3o7lFNq=|mujO}u-|>IcsfE>lHS`#F`bG9V$X>|1
zuZ7EEW3*(gyL3<gjCcK$)?=92d>O;b*RtUI<WJ)(o(JZ5m&3R;O_t@&Dm<hqaZ&RQ
zsxkKc1$ke#0-#|KBDMN(hHkUmOaD!hYkojvv>zMEQ602?C3l-vPG()%VZ{CKzL6_D
zAM;G`dw!Bsnsqp&dDO#2tMyurykSNCSMiC-trA{X%&&C2L<dmZZZQYh;{yOqgulc>
zi7@^#RqH~`0uGy_3Dr=(S*L|q3SE2L;J;={;t1cP3|NhhZ+-%Pph}@%g=p-ODuP?}
z%yi)YDSxiuKM}P>FUQ!1^COp_0%MFXaoi90SQEG6ZasS0*-J;m3vgX73X<zf-m?@D
z3*FLZ0~$)IZ4T;?V+MalvDCBo|Kq2ixPkGmpd~o*OQ$cshZPtipaqcwB&kkC<A^V+
zVX0@lF*2SK_1uZTEizD$#1QX-@h}m=Qt|F?LXl|t%MF##h9;aT@P6bN`+v)i6v9B6
zImxsq?Pi8O%g2%L#-Kov08ILOP8U&c(F@~zMdFU?3$DK-#_-0gL-JXo0pNNNAVrI2
z))Zn-UaMuhd0j_#^l{On!*XJ^8U21u%a8t#VFDtELICFRJEon~;?TdsvcCwc=^LT)
zwWjo=SjNyep84nAW68HL|6Haqj=IA==ey@dw_3znYkz&3Y@(m)+c><P@=FinztA8_
z(gwcz`3mm}uYZE98kFRkRn8Im0R-F_0vOk)i>M!GK)d&gId7Vb=hxpxqJNFw45WL{
z<KL-|xiDz6K8Ygkd8^MLG{rsJHO}@w5|z*e>dXb_I-C6S>&R$xK0@V4q12b0K7{8^
zQ8Z6V_4S@}NBb-#-dtk#6VokWu%kixi-{Rffey9j?03A1MyK<}8FWY+J8k~dmSU1x
z8`hJ>{x?J@1Y(tGT|_)^A9B7lbLcI#w~$4R0K4}Io@QX#*<7P6jle~p(+$BNpvZXg
z^AIQPn&<s7T2238e-%_#PYMs-wNmx44>Ea8<Ocdw@P00H^AL-m?iqyztfW?e+4-#d
zZ6k@+H@0p5U!$ka#Do3zaKu`7gJG)z`Q(PMQ^KicB233(>Hk+*ta2oh`um69J^EVS
znLhIJ^2X`u#Q=1>dA;eDjf8@S0I}W_dvV}ziub;+zn0)obrRx*#Wl$(6hMuuI?a1E
z@l^L}hduo#V|ze!LtmsylnEcJ@=GY<^C9v0DP4zg4wYT{t>~1k=Qw?*7?qNU8<ax)
zHvKxa7#dDJ4i~N)qg?hM37Yx@4TC3(O57uR`sN#{pap$?z2g+nTt2!EY>@1&&T`lL
zTuajk;JIQ#^V1*i*J{6^ip3#K$<0-VX77orOw?0{XFV0xlWy+Pe97E!GnJ%~#8Gmk
z0<JL$@&LWR(~A2{dj%0yN2*#kjlBB)3qf%%ihP7JRO;#{Tl(_>{XZ@QP_CM%rm^oC
zo|EG)Z9jfgas}quNFfJ0<FD%YeTg_92RJmWb<T<dG1oibURGGd9R3DDQL`WVFqhCI
zr$VhArG9uZFc~f))8!J1qyF;;jCfB<r?|HC)qBlsdR+1sjt?%hwf=s}NC$3!MbWR1
z3h-wQ)X96oniA2i`GK8kq`F<wlJp>HY#f>P8446Q@VASqrRJG?`uX+KgBq=$p06h-
zC!ehJB89j>#Q0pBP60E=zyz5ji4dTdzGg1F1a&h2d1B8?eg8`HcL=e49p54m!P6ya
zr56haOzMVaFU^x0q(n};!_+tcu#$4Im)%uj>QuANX?Ztys&wB#eP`8!CmPzCFA-+`
zbu0`er5FEiG*|~$di=Bv-<`aH3^SQNYHMqcE)0~b^!iQ1KrVnurfWhE8PBv`HI>x1
z!Ff0(6Uj!jNRN^Ot2nuNZ2IHVIX>{Wsu;(}w-J@(^uY~_VSsxFmfXl_#|A_n$10w3
zRt$D5NC7lNi+inQKPodi9AnJU@Pt(3E)5uoBA&svlbw-Q>vbPmW}NZzNqlgqQEb9@
zRiA!p*Blw>>u2;0IS!}uvxfUm;xqZA?az(O|Fo63wlvTEW44`=w900FH$$3vXlzQ%
zaKAQFXm~KSag#Xvv&4{3&O+ysNoDCPN*ZsVqol@GohFWx8!H2HI8vW^@HC*JKM=o^
z5wQH9k#ee5?k$ZPq1f2xKg52ScU!SfcyU3S&HmJPO^rb2+W9Mz_WnMqqM!<BzScfx
ztltU^N64Tdin4`%3@+Ck*nW1vZb}Y(P4#8XJwX*|0wW=XgrBOejeD0pe&EL~^LwY$
z#UZOWVLAvV1b$=23Yp|ldDso;3Zg*S2K3LMpDfl1^M~6^g<~8CvF=d63pTOcS0Gfx
zIK-LcMIp*h?_XzH#j?D!p3A*BO9rceb##diT$Puf<br9{WOaHdTj;zmI{2ZjiHi??
z*NGx~p}|(AB)&g;tynoud7PXOI+x#HOzrX=N@<4POe#9}b8YA(7r);8dke&CX%b1|
z{sc2$CH#B%7h}0MKcLJ78%wXO%(s>wz7j)WMlR4bVL{4?0fy&BuFCraGzuTIe|D5x
zO*2hQP0{%RCtpvH+tNqhV&x2%tBK9RG6&6s3_@l}p{t)25vn|+ti^W*oBVny5kh5G
zW60H8F|IdgRUQ)oMZ`pY1%uXH>@wdv-O41ol9B?(*`Qz2o5j7xreDC90U3Zl`8nKj
zsTvO*Km%4YBWN=~W8b?)b+DvCW>hRQ1mmR-#l^*L+Fypkn)`yRO0=r_wl_H;Kj7UT
zlJ7D>lOMv&yEFm!elKjBiXQ1vd|>P$chyw!=IZv=+7r~>EvqVlvyYy<RrP`E;y2yJ
zB{*HTiP01jYlU)|S!7Sj(lv&K=tZC#$m@4mrxF|fyYP15mi1Ju5kf@ebne|=q5Z%R
z!aubNa8s;<Y|EMLe6=<Ix9%8es?x@@kdNPr8oT#zC`b19+L`QU0*SWmv{-IAm~JQA
zL+saly;bgdn^o7-`Ig|UzU{uH_gO!@^iyiq@U)yd(cuq&y6TB^%&Rn?S9Bb9rjY-j
zwzl?n({_Nh`-wY=hjQ(Kxw;9yZj36g44L~>=X7mU@%r>`{}*X423Q{fWJ=^y<6}^?
zjH)W;RH=UHYv4N!j(M$jY+~-Ok&p5jr2NUHE)$W`gIFa=0w6sCs#iay3l81luAQy*
zK-r5=MR811dda=SXjNW6|C9#?RwGFY+k^U!2qQWwL>cM+4nqKNK0i91E-vd>BI?M~
z&?<q$KysT7tnE{Zy^GufUu2Iexa$wASPA+Fd$)?EsamPtV>ph1pxQT=gYxcJAVon{
z<7xmkPQk-jFex-9v~>pEz0T})5!om@COAAI={~ltYs@ddwC0V(v0!M|Hh!$?ghv|3
zY;Xl}LVMKqNLm2u%Mn#bMrhbiJSD)>0d<97T<6db!P1q-n;%B4?KKmg{4HTBs&NM;
zG{1vv+?l)*nyr~<c5ao!wp`=oly)D9UN<XrP2%e#ot(KXItnDWY*^~lbi6YG+eo2C
zROj<SPSSgoyz#5LKDWkqg3zO$PL_ES$jx*2qbt`z=!=_Ao{ali0TecU3mCCaWv{C_
z?*FUBZh!!&(#&xl75vNg@R)FjHK+KIjOi!ePWz+{!~6zc=EE0bOW<m@HE-`F?k%Xz
z3}^Q9TpX2aI$ZvfR+yc=J*8KtJaUi&w-&-Q#=H0jIla^nzYXXJjnru4s`WJQ0}-$5
zhGhUkY*xFfD-v?e4rx7QRjxApP$_TWs_oiDeOGPEc9Zkq+@HtXFLaugS4LIw98naQ
z)E4axf$XG>Br1Ff$t7*&&VMD@=oa|7@A!ckq^8{%WBe#3B-YwPz&^w5P?H#0#DKd2
z(e}FS*H`f$LC*kJHx&)<$&V%3V_h2u4Hx)TA&U!LWmPaw)*d6YXrqhUenE{i-a6EZ
z%DK!-+D}A`b0QR-Udn1Z>8~fj_pb@_?KB%D%K|vY-r(1$ENoe<v8?0~n9xJ4-64&$
zeb&X$bj$CUCjYC3?Lp#OiGO0fG#VTa1v^Z(zETzxq`M-lh5bKNeRWt=UH3K&ASsPV
zgQRo`f^>HX2uPQtbT`u7ozf*pDBazi(%nPn415RQ=Xu}X$2AxKoSAd>S$oBOuf6tO
zk?bLJb`tHI`(5Y&GW=>-FgIPGeNJQ=jZ{YT&G+bo30bLQb+k^+mzO^t6O?i<KS!jV
zPp|%vIm<gM(7fqjCWef{)}!ChmE}J0g3~;=^i;^}Fed)dC~{m_N}Mz$H`XO>z|=U^
zJt9&$$skyJQ+08}ESvQWLIVTdEYJIL*Jj2DQjK1yJxa$gCm(X16{NvJHt^fpD|DLr
zc@&U|Z*$;|U*1O~&@ju0e<U2K-n>*c_=N{=oc;DeA@Y!CrO)Eqe&i<*KR<sm%7R*(
zao&D`X5TfssyCQ?DYB(EUC8ljv-NYp5vqMekqOE(_C*r$Wf}P<6dFrD%4U>L5v&q<
z{KTH+ex2Am#fpI3&Fc4km`#-ashfhVDbQq)L`K)p-XHAq^iW(`ss7@ER{`nuhwWrp
z@6D|${dZlMF<u2n944zJj@34aUghi&a})AHzl-`dl}S>lEpcD6jC@|T0b0c-o;nsg
zCN~mxzd?7VzjJ;&nQXilHYW9qPFY|3eU~$PF%*9@BI@fPcTwAuB4xh^x7IJQDgF$M
zzsO<Lzz6a6p_M@5^Sk3}S3@d`5~mLi4!$XTNwjk%@qiDg2K`ar{{vP$>Ed<bN%X0@
z!Tl*Af#m4o;_)D}U}~{6)%Wm8p0#B{L5R`xKC8IviwXbm<7D~%FA3t-N<yy+fr9zQ
zim#oGO_!3}QmI``q>ivgQ~(7NMn-cI;V|os(5DAw7^Ri+NT{cLC%$Amvm&>I><tb~
zO10<12XXYF0p(Lycu8n;;Vg-PVSEFp*MDq^5OSo+LSiw?>{Vz#NAGK)bFC-fQkmKU
z<fazxA_5&`e|{cmQ$S$S_U~B$o^aKb)9=kmXdYA>UsIDWx}>^l=DMpG&L)4kdMXti
z@!!ZX+<f8lbC*ZS*@h=0K7(yBt{m7S)NY3JdNklmt%-?S7cBrxP6;G*&^uG$|EM{O
z-<Prm%X(k=8J26%vM%xL<N)Y;V4R8^#pwe&gTbKm@sGNdL4KG-CBxf$Bg!I3Mb3;K
znjlK~B02n)J@o?j3uVZFz~#}V*8zFMsdFuM%<-XflOhg^(99ofjuy^CoM7%5K1W<9
zA3-jv;n3|+x+iHK>@e)$gsjkK&MzdZUynoh)%!9%8)i3U$0jdCwtm+nr(sg#_iuRp
z!J>!)11szhVNh&}5qc>keyO{#3DLvDV+<=kRf1a5eB|`1(kHVBhT(hn-c^(uQ=`Qf
zEXC<sj$+6ZLU^npP*<0ueI2@3&{_>n@G3r%HL92_ABO=Q&i?oV<o|cWiRjaLIhr{y
z>iK~DyQrDF_`3{@V$ot4fJw`MnS=R<u;@{`o&!KTrk|9Y85&-Hf8nz~Gfy*ggkJ!-
z-}Z1ln(Y^Yzo=If{>{6-=@zbwwGRJZCMG5<pMT6MqDFZiN2RQ-jc~7uNlGGq8A(HE
zS|$}u(ZrL^akr#hajzG~j|jUP(6AN%T~QC5BvK`kQ&xtG!GDQK>Uk>MFQB}M9{#f?
zUqlK=!3GTn(`bjbprC*(oJ|E{5!j=y#`CH5deM@Oo?b*;JdnjzwRM@qn)u%Q9WU2!
zjFRSQl}RPYD)mnurzgkPA9>`St5gNyw*n+cBW4y$7nxws3sQ+c1UjWy9Dcv0z!7}6
zP0XRN*jPv8y7Q%-sWq}bu?@zahCsTbo(hu#{tbU0=OwDH^Qd9<Ig9WG-`Rlj$K_V9
z54t{3C)`)BMCgzc>s(2;;b#SBVH$R`N$YMGtrCVeNR`|**c7ZVF^gu`n^vLBTvqd#
z<s$Zz)e-T@`eufLauKN?x>N2dQo3~ws-&9syt!YojJOkdD0{h3H(op5b+cY(+I^zw
z^=d%+6x>D_G|9pKjGgF^#oR^mhSTRJBz+x*_bfTOux-4FZ*P%}2IAQL6!~HLr>OR&
z$VZVPx{0T3BJ~5dt4)U31K)LJi>Hmj%W^v%sCurW>a}+UqEgWCb>y-#h9N-?np@0@
z?f2tuwSaaa{Mkbtjva>i#nj{pJQ{7@{G=X7Rr($ecL!IsOT+iKSzN8G-hC8))Urv#
z)eBZO;b-GE@4#I#+1b&5teakj<Fi~Nh(nror7%jtB>`oh^aLyL$RFZ}w{&7FUl#t2
zPeEcr3TC9PYp?+1eId)DmzFv5mHpfIP$(<ld+Q^gszLKNja4YjjU?}H)O#mcxsb)!
z{9?0=&}BL5Jnzmc!v-RL_5{v{I^^KUX8p9^mdSA2NsYlFZrr1^H8#a3t+#4p?ikv6
zZ#T8tdl)t(MTHp&za?feQ>x~=ov5w^K(|s9{@l%0qmi_CZOC|j>t~X{fVy29K6!pY
zEQ3k`7Q8qYdO)V$vCOW|<Ic)9ZLona^7t~a|MNhL^R)gRutLBpqn}U9DY0$f>3{>E
zqordbjYjk;ujw(=9)<oFdLk?56iS?9wsvwtpa}{6+MSfHkB`#DouAj?gS*arQ^qs!
zP^#;L->MYqk7n?sd~ji=QOt?}{*)#Ntlxktp@pw(_*5%pa~;6_edg+ApZpJH`lP7z
zKY>O@M&@fwF}SRkLgdrA+!VQ!aZ;2NmOPfX?U!lF3F{@5>7?vPnG<|(kcRHSNNB=y
zV-n{Dnh#0N#P``2mrf<4Boi|rAjQ4esvA&?u-~}B@izqwPs#cjCr#gkgRv3WHi}^R
zxG3)N$Aho>i4wxgg8^a;NU{K2g7AeQJaCkUUsakBy4Kz9Cf&-oHgg3SFHAt^gMDE^
zfv|#oKKA&&;~O3x0z;9lp{P|Fit*FwH}&ZsouuQT3r;@^UVasPtAoIbjT}J^TO~H<
zVXJIvN}HCJrlh08uMc;w)Pq{Es%r;s>Rbd5DA~PM011HXMdD*(P8HV$C-4iQq$jd9
zNp)JbTaThbm0Y_W&`(7(0O2_wPUxWIc=6XpkRoORBq%^EMiGE}omkDuwt<jsH9S2Z
z$xp841bw>r;*nQzN$=#MDMbEC2^W>_MLr#&EF&AufuMz)+{A78ndx*&HdAPt86%bv
zEUYj>2k836M;A?ZFlv*P4F}j~Y;CwTHPaqE&27`lt+|`%V12i=zT&pK>@enC5agNV
z#r9+PRYj*1dCVI8@MQ!6+ve(xSDgJx!|o_HMyE?SVzL49ilVe0v^>e0^L(Bx|NV6S
zN$yqVJRC7Hd|a^a>qD-PsuSTVZY(0G$Z44z=_fODEs!DJ+V;l7MZhgiD{Dvmk!+2?
zgS$${_4ha3Kkso@Q)Z<Yg1sbX8nR-!{pZlJ$zebP676yroCCcA$bZ63hvAPePY9eY
z2lpxyEPak$il$bAtW5ane0}kd#108mpaVj2g{+_`yu`;U%xr2>tDgojRNNe)SEVf>
z?sK|~Y6UtxHWQD;J@VQG_Cc6Pz##*#=jg>EcS7urO$;s{I<<d^e#MUQz3`Kmet<o5
zv9G_%j=K|Wq&w`4sphc~6!EFNLnLwP|9XY_kwOUsiz#IRnsCpNwkVdKb>%an`4s$A
z3;xuYyK7w_Q^~*Lcf#1A>mxHxo^c9qcosqMZZkXFTUlAz-P`-|{aKD@#ceuyMf9ue
z)QX2&P8Pp)NgqX?>#UD>kcug<>6FjR)Tk7gQdA&A@-KSVY8ws>w-3e5&5(<@xVS<w
z3%G-{*YK@AISmTa*C=d?zeCZ8i}9KV!KFtG=2pD~e%+9jKg-qWkIEOEGkfp6O>E(w
z`&5chknboobD|;;JA$y=Ilc(-6*lmAOearM*65Z9L|c={gk#(&P5QASQ4zwjarZ(9
zI1YLR$ujkc1id}=s@hgD&*t=&Y*+|KF?gD*v`aDEw8P;1nhU*;!=hK6e#uQl{?6Mj
z<9))o=8gA5AmG4RTb{58m<WWDM5DSCl5E&a(Pn#A%Vv~G%CS1gDs!vgoO<VAtq!o|
zb`m_&XG)k~#%B<jxw=;g#`?|;r48-ry&L;T*-=P>iEI5021yDlqz^7qwTIl;3FO+#
zsfnR@VE=R12JvgNSi$Ev6<M35U<HqTeNis1ICWS=O%5E^5soi>5k6l|UQZu;fL!pC
zAi6c?7=ti&dyZgH>cFGwAo#zXDuFE^-ehKre-?Kk?BJ*Y9hF8$jDq<eBY%D)sjp(B
zU(&p;7llP4!IZKF6}sg}pI8eW3b$v#UwZ5ztf$zv7#^=oljaQJI+3G;$jOCa7>=pP
zsq;cuAtMQ2>vU?y;u8aj|8}<YWrq#c@M{z`JIns?BeUwadSlXkmhIikfzzV+$2v0R
zH2dIwB^T2$xc{{aMT+<Jj+)A|DYfTvPWw>~hX7o93*vhF7Ks|qPY*BQ8t)}3)0Elz
zqVj!z&_*PCb<BVIjfSB4T}{p58!H{)cb=-_%0w9+wHE2?P8^Hi2em1|h#>y$TMBd<
zZ5Q;j<5VfXKRnWF-_0bn$hq-a=@19{s{BOO-`1N)`jIRgRH!FoSeqm*av)E@)Bm5Y
zn_@vi`w^2<J@XF=NP?veAZPnMK_(5QOG9G|e{De3{`us*^s`*lMt1HHuKCp`&BQD9
zlh2L}c&I!~uOK%HaXs=prvW5h);%1Kxy`<q{BH+Q101?cO<v8ZtA;m7QqD-JGl%F8
z<=+r`zyUd^c>hN-GD1%Xzi>o$5%Dfxjjx{{M#ArsV@iW;A0nybQMa7N*52_4;>??~
z%VSv^X^}0dHY-THVh5ZG@L9*2fA7`xtMjyu6}KyUezj7>rYakwOV8B{=Ig&t@FRy`
zoch)Ifr2t5;pP~6iRrcNg|!R(IF=G-Q*TS-GiA|qZED)Qm`ov??Ooz`c!K9&B4xMt
z?o+qTa{dYLJS}Q9)SJ8E{k%8)4Oo*1(8JmKKTS|!k@g&&e48Gv`DwG5sxYbqdF#=E
zGm3K_F|qtaVgo~w=eu{x;|8qjjM@aHKViZF4P^Z=k<ExqlLY9!F`w9}ymVIQtz6{j
zbv2r4sl4cbw#fgP8ed;3SSaZMlb8?r+ZFm*xp|q=#1~OQ<n-|RkZ_dQ?%~Um$HS($
zip;maP88={__et_)eL{*{(AA;qV@tugU8+Ev%+dQe&9N|RLP?3@UkE;$y=kj_Ev-L
ze*FJ*v!w<RLRI_2vzbw(iz;i|#@!KKh5%L?AoSeLHAhoTe5hI;U-VZ3LwyCsV5J&x
zoHIVq3k!l=o>|XD%g^nUWqXl{EAusA9lX4_)2L~b6jg#MPR9G68G8PoBPWEfYiv;{
z$c5LMtBsBe=u`r-6oGq!L!gKVHs%ZdK)N<(#u0^nU5Nr=82DiY{q2OrJA#IiAyIC~
zJ_`w-v)N)woxv@KhhCodKeyG#1KoqoGg!Cq=zsSK%hw7iBW?hfC@|Xxp9ihHeIwd-
z!U*!pV4C8p!Z~aW9t@%+j7MYqtM<MizsRXiH<VhvAI~=3ett{SnqD7&`dpv0$9;nO
z{(mig{WLIt24e1sy3(6Pk3VXtVwm^}RpS6%au?cQE3S)n<Z*)IRuR2gW5hXW@IQD0
zLh}`ZM=H;5^nSnaaRrCPu#v&EDE@@JFEbD|i2r*z>a*4V^Fi|Wb!Dv$#ZQLtl_WXV
zLrP)&IgtVsgeK>4++oM%&_HPw;ZTAtF0-G1-ih7GM_7w90kXjkcsAEFuE<xR2fx*S
zRR4T<hnjhavWwxNriOq1Kapc{`K?Z=#!7M*csiCA$$T!)hcf{5E(YjAjL*({NcVWX
zm3SPu0Om`56&gG&>a+0vhJ!%!AD;kEtHf&rbu_p&>eBgQYp#gQMl%<)%vQ7ZW5XoN
z#TIA~{;&G8y@?T-3s9Q0T%1zH`9`V=%&Z7GU{y%t<%NbrqdVO1_T!GRiK<t2V-f;i
z|J7?D7!aWPOZl<4`?3kxLc^;+C_mR2osWz6FhG&lfG%tQs=rvg@1x})7LkZNwso6@
zbl!pmN(`XdNWn0<&>+#VH;tX!>b!%MUC&A>eorz2NH&DUZ<2uM1TUz~C-gHN(W7Ig
zb66egrv7cX4Oy<^KZ2KX2c<d|utK)!?8f(zzUC?>I+CLS&A46x4VXJSlWzy>a1*z}
zg2zJHnXoX@CEFHV%>pABjsN2aJ#p%zPihiJ=-d_y7fx=Nur3dHGY@)SjWR4@t7898
zFyxpzpzrk%fyxnT567~=C1C0z;McA#^J4@0NTi;=BVAI|jU^PaXba<fj>E)B0|o#C
z!lL+jo7+PGt+{_xk7(i$9Z+fxxU2tNdJ@M*7QsUrCgAv=K|KEl_U~UdWe5xO2F8#z
z4~Y1_z<ZX=r^i6iG3-VZj2v{41U=bH9zs~)%`iZEI+toqj|<S1DUo*&tdUjaHV14p
zpR+yw1mu6mJRT%O2o=*-sd>9sEAhZ#(6+(FY6lCSD=TzNX5o1FZOKS(ExDz&ANzqr
zn@Xiz!O=5Zf^4u~<i+0*(H<`}uoY)bQhhFf<zbM$=_YwHEPOAxn!>$XJs?ZNJ!me3
z^7o5>BTBAZyTo@_cJgt_geHUqe_s~B*<XoMOIMgU_cuu$-O&ExDMLc3HnWyiR*B0I
z<^ZH8L~aN#Q<#J%Cq0!EiuMp3S8_5AX3<u<>{D|54)^a%z<?&mb5=!-#9E8!cE1+g
z4e}}hYJrpv6X9b(DYt}X<vv(2NwMJ6*@_nWXQr43u-6PEtBl{)wO{gja&MU_R6B&x
zp|jr*#GlZF@#+7o=j53DAVQrV84U_UwZY~^)uhiptdj=N^m!y44u3r~?F<SF?<&<}
zr<N~z%j*Rnt1$sw2|U^s8;F7K0<o>WQbTGIxhi=Te<~R@lp^Xj2TybUwIXs%d61zj
zU8G|gMN3TnFZRk>(hVfwjg#Pi?&>j`rx%wy6L`^tbu?xgC$4yz?*_b()(m+L6GD?f
zh;3a*IV-!>srvP;ab5AKs`QX4UjJ71z7h-O-!Q_1yd;kwW;(DEmS~y#*<I^Dt`h4F
zF#G@^8eJ}~{Si%)0J^r&xwc|9;I7R`2_uXx%Y_TNfF(K3@b2-FnAyD_W!7MY7^&&>
z`~Pd9zCv<H^CI?lnPvRKiEJfgC_qp#69u9MmsGjWI?d<QLd$#A)TA)#<*SixCRt-+
zioX*zprF4Q5r>H2Puu;+7HeLeX}__xprpZV=_f+hY^k{j;r|rHP!zxhXV<_g9kV>G
z*qvI?3k1v%V%VcQe4ZracolEuoraBu+C0@jr_bj;!4lIl10sOnVBq5t+Rq)5ikuIp
zw>9ObDlicITqmllTU+hUi>dRX0&+1({&5D+P6OGGuTeXJvdL>Ylzv}TSj)^!?jTqM
zxQi#y5PgjHRheF`4*jYKiL&>$fiN~OFUZKAcD?wTBp+N-D3k6>+7R%Y1IoY;QAYO>
z$_x@SR1^Z71pmGRc`TBdqdd|K6xiLACNl1i0?0Q23Gl)cF`;oICY-e5@AGutsOX&u
zEov-lK%@TgG~@)x<xQ?SeYL~WE&=N{R&>Ys43D~H%W5viDQZS(q7%XB|MQgHVZM(Z
z2aH+NW6I1J%x#1HfM&%$D`$Ra8ebc%xVUL}@N~R!>D#T9r-#|8vj0wmg#K~Fua?Q$
zgaX5IMzoS+UVdfPwo`@g3|78U|I>Yadk|Nn?zGZKP|g(kvGD!q7L(|eQ2RMN=4sct
z&e4JpkvWR8H;IkA#U|R{*Y-s&&u(oc_y5?2`A`&Od^;um1RcK%Y{S*;I1R4E{deF(
zhM40bVdoFphMefX;9)Islxh~W(#6?p6&RJi@3X(e!zdha|78^WuSik>OKm+tt6u0%
zLi$WQ;~XB+$|SN|gm4kA`*9|a@88?PAa#fPK7Jsi8zlX%-KsDzs!KqKD@1<&jGFjV
zrgm=s<i^>hNh}x87f(rIfJt>Jo*5dT2vXRf0*+ZdIb)m-{#vUU8q_YmOob@Tz>Dxz
zwg3PAi9#q)&VX~lS<>7QialWjKqoo@?@nZp^JSDdPzs1j8h63moL^4lre6ZrcHp^2
z=^7L$|7fMX`nDc@X_WtGEO?z|XE_M;?AiW)-iQjhKhU|@p}Y5ZMF70PuO3i7mWo>=
z-TM3?mW7h4{U0fF=m^gc!&e$PVU!LU$$H;H_c*OSe0WbPiJGbQQ~x%Z<|}FGU+n##
z+4Dx;^T}}#PgsTZM(|uU!}>tPa_NPt4m{LQUI<D-Gy6`=4U6LRp)+o(Thx-QWY`fJ
zAN)It_su^N`N;+Q!%AY`Xaf;U@*N--xy)a4lcXtMMa>ia|H0@4-Vtlh-z8dI)&@CQ
zk58qP4FEG@k$~G(7PYL1=+X6=9IAaciM2hay&Sv<_@!>Y_Q45;Df{~`EmYn|x&$(3
zZz90>QG{vihWjB#-}glS%WGiZH{^xdLMO#Y3hC!WgNG{FIp}<aaG!yUczxmE=gHfm
za1;71GY$RH#=O6@0MiIWy$f`f<+Z%%mOTmmj?0AR16Dn%%y@S_RCV?L-&;<2jVg^o
zH^BK*X}H3Ss^n0@f53nmX#Rqw)O95G4vZqJfED{zF{va{<Lc(lpQw*GCN>c5S=%&X
z+g<RzT;f<EOc)ENMTab;eC}qvXg;4H&N=e`*iVcxJm>m(Sz33g;IUmNs*;*@45A+$
zHh@y;I^W68(kpu-D|?Sjel11>90T!lENUcMm`q0QTFt=>f0FHh<gNx5qrUr}yJCF_
z3$2^hy$#gKX<p4%sF9ySQhn~+Dh>Eus@pevTxk?df|f0XW58~Evp3JftflyAa36$~
zzmOEd|FNmAf#3*albSQZ5<JS_$(}-Y@_+of2&PnlWj8n-t)TIsHkvfI@*i<Hfmk2K
zN$fmP>znkCS=Y}$s209ztnj(ekUk^*2R8a9{xwglkuO?wi_^NlbUIJw<j|pu-|B)|
z3QJMl{?8k*`B^3$7EZMFbmCM&*?{JoKx4=DThqdo5DA@H)qT3QeDjcVqDTRuEI^2b
zG(YX`?+Mb9&P$8)7t_CfCr9&n*Vx6Dclu-FMt)gJ75!gV3j>dfgp|B0AOb-|p{Eri
z2{4s0F;jx^+rtrRkKW^mvO(rL{<whhKJD|`IRh%HJ#h0RawV>ot=%*xlZtBDq0m_}
ziY91ACju)(b7RO?;-B~lNDx~pkEjPsxv-oEG+4F7n0zsZEC5*1Fc9nnFD}KqEzcjm
zTfPXNa8FU~ZEU??AL*)-{U;PL3Oz?V!8myj2~O&S2HRkNGwlwoE_F>9gtY$x02t5;
zd_I2cYh0|oE*Q9Aa-c@-JKt$a$z!oBIjF>Z67F|}xyBWK2=xgN_BDdqy&SWDIDQ%6
zNGn{%|Cs0K^`k|XOzVB6t*q4jb3zMnW`938IO9Hwn_^cexMh1eG@o;d;p_m<@*1l>
z%ZCj_5^dN`|8*bw2#}B7yl^ENKmj9=8C%WlB%Y4EE5p<#I7HrlKGJR3aP_*PE@I(n
zp~v;w`>#xVefN>)_bj$~4=yXNk&e}8{XxJD<eozt&TtjW)|}|<H9kgNUcSuiRa`I^
z21|TgAm+0=QqlP(?p9i5$0xQZMMRngPr_qid96g<>!{1?vNy2(|Ib)J-b+>vE8cY6
zc0afbtNzO!4JBZ#+t@@&{(PI9+{%L-5WZpW`R$@a2t2+V@QfM@{B=6BeQB@K)}tMv
zsoXnbnFw8a<sRtU|7F(Q3GG5@Z#q34)#z1<+)ML&WOy+FY7z1lwj2`v_GBKfaNn`S
z%8JG#oa6!8Q(>tD=qMnYgi%Hksuf2jyq;@}0<)?OaO<}_aUT?M{QtvsW0c@U?Cz-D
z<vr3YuuC(G8Ih<60Aj&7zurbr{~JHnxm0e-F_Y`5!0OihAIlNS#iC1Z^o}UzXbTm1
z8_@UxVA8J)ZXeW<8kPP>)BOV8<UFO>cZ1@>6Bu45>zNn>s;%)%MrXT?lyoh=EXq|C
zCEm7)O*)p}$G5{{0W;lAsl@9AMQ9x1(nAYspqOs$_zu9&484eACyMrGDDod9Cj`Ro
z&u0+-QG;jco$`B}HjEb&5s(JkGtM$vV|%MGSC9vZYuO%2nMMwL{*4eCGT^AzCDTT(
zD?;2!!`8v|qD9iIke;7iO8*V-z640xI3m=#(>rne@chNV@491vfWQ_&5}tc<($-q$
zI!{8YIU9w@9d)bl@s;7T!;Ha%AN-QE!i?tgglA-s1}w3CLPAVSKi)*$#ou`Oo1X7~
z;FF3G7Rr1;L(lR+ys$X>D(#Q^H%dV3Yo0M%IX{kJ%VkCaLFc-9g&qlznZx3k2I8!o
zOpcZNfLgAFVu+oR^&y<-2UiSLd(J2(UDf7MTY}(!d^Ru;eJ{|yqrX}Hl0$xYkb)%u
z`V$Xvvw`b7)R@uyPga|K(O}D(g`kkOM-b4&^}Bo4t?^vB>vUgp3y#PLVH8P9+E*}h
zf#&S`DwI|(<uoCIH9)BS9{#f!jwPpj*{ke667)Xwv%39wMS%tCQIc63?~OX!<L+OE
z@fOFSF`sh}S7+zAb@?m?iYY1f`y`MrOs(GM;Q}xC4wND|<0{O{3(qPUG;pP~nOxKO
zg^O;x`c!{x5gF&jrrXC*!hrY)U-KQQ?L@3n5;axTgskjrK?OdgY=%b~B<REjhsry$
zeni@sgZ}Sq+ZfVJ5X)M%ahFVR;!9NQW?Ly=UvcD+WE=>CS>mlW^P>Pg3(He;et!Ny
z?uh)}m#-Ph=NxQp5S3q8yc6tw%3fb4!g2}Kmdyr@9wTUUwq62^^D8jOJo)zx7k$J8
z3y)+8D&kMXRUdh#$bRtpqjP_GdngPGAD1b_x6@xt@HEPQvs9HUEchyuSC%irN$z?y
zQv9K5I=TRMhB)V~D{suNZ_Yauvy!$SV_;wvL5A98nCj2D{_SXi`#sdLruX5rum+F^
zsY}#0<2Z#}LA@W#YCg-)Fu5QxmoemyW6(F2A5dCtB>l$-;FJWsFdlYZ9e3Hb5zd-E
z-GX8DPtLikNl~iL`Ep-h8&FjWCFNI$EEe23qw-l(58OQK>PY8|8P@C1Zm3RH^a+FB
zqQQM7yk6-Ei~-Lq0az7Ye!(`&PZ#0q5CET>ao39*U&c^WK0GErCP0TG8_T3re(TY!
zue)9u(EL8aqZ2}K!z_dV{M1k!=EAgGN~@4~I9B;sCR3LPir_S0rb@s4oeANx1FPY<
zFo8V?$l~+(nT^C^aXe-^jPfLh2d^P^uL`BM4h{|F>9)8l2cwhFF)$3>CC9yi4%4WJ
zeH?gCsItGuup1&dzvfYEp&2=SHyGVBt05hT6p7&H3xDMNVP<ab!xKFNgE@GmMOA0y
z&l7^8q3;TP{)uL*Cl3*9?1oT|<9(1;j{tBo82x8j9jlGo4_Fg7Sa0v>Pz@d<*!7Ju
zfO%GXp64*`eGXurp_M|bg&)&CU6p?nc0Q}PT2OeBmH%x;&5z_SRE@<tMNIJfZg-et
zj5s4H={kY+J`-F?*~3rBZj2O3%oC@;vyDs0X@>dBW_2a|eMPX4{#C9_n#&mM+YuF0
zr<{_T4W>w3MkMNYet_vsB{6B4T^-ESei<QLtTo3$7R}b9*;qjYRwV1ZuNO?yp(yJT
zs?T5`x<{Ksm&U>1;X$*b`OPoA26h65LH$Qn_!rNSFo44Mj>DjFuoka}n4qg7)dO#$
zQGEu5nAwrpLtGwl60mm#&{-N~7yDzVR8?JQ@Q=2zSNRVIeJd><Q~A>Id(9W4dCWSE
zx7Z!Okg!sqPuJsx(c9OhZI2BCoNJdENQn_vLga2p!~&iv0+3VD&y9|6j~8nC^t#dm
zuuhq)P)=<g;cfY=;blzAkF2Mv-SX0MWU~X0uiJ?(b}t*FPr@zXO^35%q3Gn?fayEn
zv_s5K9@(^xStWaaN~VcxH?=uZTa<rfxa^Y+d7)EW2xks_EgRnOon(+P1ZSx71JX??
zzSv07Ln(CpyXbytSw$|#=zG!nq#)IRN-Mh&48PvbANV=FQGapX>BVk+965;*Y13j0
zv3k3QkB{T|&6gfl7kaautTzc180i7(a#7UUzHYnp)37H@#s^dn^zJd4lC`Exzs{Gl
zMh|{8UjLT+!Pq#D!vBtgP&Jkou)18#c1S86KVG)GVN?X%%?u09NZY3$YjRja7cRlw
z%tPiD?tjyIQsj#c`PB$g@RxfG7R_>ym)8|Ml_yO=37<6M)OBm%1s%3V)9w2a=&^SR
zwuGXM;uIMCALiz_1|Ja4!hbcb(rshqN#*>MNeB9NbZ&={{6<WFb9i#B$C&FA&4=X)
z_TTy)rz|GMluW?zCdFdOfZ@FXWSZLFf`8X&6cxdzQbMekCRKav^;WrVoM40GV5@Jr
z=s6)A!sll;94ph?cDC7vUsPDwN}D#@>+ZN;kUV)cr>B^jni^}vV~-}aHlue^Fp04R
z!hzhTu5jKCFZtfB1IWsk&@U+Hh5K0#{ytEOa#>K{R#33rsVHz~+)|ld|B4h=Jb4w0
zaDnO(itW!5k6!utYb~44Z{csK&ml=DMevMTACyA5dC6bQMC&eg1P3-#E^8kt3wWoW
zkcOTQK+y!C93u*?Q82D7h>tGZteGs_0ayodcjpCGg83bRD#xzV-EVkZV}<UBU+?6s
zE8B+oh+e*b=>hHe>7k?=hq;za%J<@2qu(f3{h-5$Hu}5noE?xnOiQ|=jE&sVE^MPQ
z-ZZ@Jf)MzPO1uIFl|<=#H)XF=x<t-rL{Ax>(RuJxO!UZm3GiBbe%}lsa-dP>SnNj(
zxn{I<bx0`mA;90qa&T;{h&IdhTQ_tz{C(J4ST4vr?tcCubbeYztC5`Ad5*%b!Up6q
zd+@G|TWqm?5=I+U@xU%P*~mFNVk}UNv4h=vv#4^b{4G`=i7={j037{fhaJxTbfWY0
zwTpN^TVC#@JoAU{a0=0kQ_ged^Oc{}NUU(APxD!6@jm<6Zq-J#zdIlFa*ETqKjtSP
zX!{h&N`q$iWT*gFCk9{FVEj43EaTfJMoQ!saVf(W#Qfkbchwj;rG!)ttn(!oS{BLd
zAKYi<)`hhu#zn?p?u;S%iE#n)kQN49`A5f^rq~q9Wx5RqTStb8j$a2R_&S9Za4!L0
z^AlOjFbd5A@*q%JDQS!0UF-!p>nm~C9W~$v5d<jY6buNb3&c9y$&dY>Xs-ewOC}em
zuuv9EbYwLDbqWjI+8Ve|^=_DaKUpX!>6&t~`zin9k&ZW;kBk%Aa~OJFi@PWy3f#s3
zoI^vnx<HYxU+ZS*IbzA7FtBJ${sz7?lM;^biAFBPHobV;(MWzF^Z4-reDkX^Q5mg|
zjr`~K#b=9B2dP9(V^8J+6Zj+R5>IkqU6ovtoRYGO=aYLA4C?XzYV;3#0^vax*sAr8
zZEqX*W!o6&%Su^g{vHT{T5~@!Fpf@mR-e!H4sAAsJ5o58cA;bBPJRqr=V|RXcKE<R
z4&XaeDWRYJNBJ&>I}Ec++XyYkh!$$rF&G{rR5x6-&s&>^z&}H6?;`aSzi$~+w;L5y
zCR6kMK7XBFuKi}>WRjr3t0%5)g57PO_n0w5aN`5Pf>b{c+Tq2wfH{vDetvx24Vz?I
zj!hj4ZRvc)CoC;`<qpnwBvJs?6$=z9cF5P;)cgE-Q6;yK)PMopc*uNohM#z%GB&+Z
zuCjo_16(YW@E;vkV}U0G=GFjb4NBm8bSVS8eU)yq9lfj&B~(UJ6Km~8&28b7n$0I@
z43p<CnBGye^hRU_9<4VQfVt=Y(uXGt_E>HlTNS`NNkViE`HGv_^S)R1RqWfIlmkP|
zO=!wqkwP1u&BuqIEsB#I?o0rqO&Y6+a$r#6L!v^2jT(P;GVYv7eH!c6Z%9gJMG0v0
z&8bF4D-PMh&%^I<^b`P>|C|&B;)IcTP{#Aa@sCEtOi*VS*f%VkNX&qNi6#0T5bqDY
zNq9plL&iE=Et|~jxa>4Xz_R{+6kaAtO?nPS*}Fhl7!y8MV(tF0l9p7qWiq?REo|;x
z#tVv{);o>yp|!EX-3m*yS6{ncp`lV_WU8L5h@=R%gsuT|4kW{=)+`?(kD3S<rYTlN
z<xxEBz3pDF)OoXuA5+G(yjcpvkMmwAoO=*)17F^dY@Z{3Yq5DjP!oBksDWV`itLnA
zbzisQ&S3K83n4J7D0pJ$OfKf+@bmPz!in*k^>d=W6Ojq>HL7+ay6A%5ZX>4XhF;6}
z=nCXIifXoZGln~WFgRRSg+b4wQANH@6BH-)XZ0zKi>L%(=Iyyla_cqT&G$>#%6nOV
zCZRNZcwzD&c+Zj8$1FCLmcxR>`(=@NFSot%?^Il0oU%8`AA!Tlv?QGpolC;dh|@(0
zc(Pa|($mw;Z%&r2p+`qn2P-X24}9~&Dk?b7F`a3)##B*-Ah_=9pD&Az4Gcm4`M_A;
zMwbAkh$q(<DGUm_4tnjvN+9CxI;SKQM(erD6!AO2YU)|aZSgNmAs!Rfbt*DpyWq6j
zIh1!HT)>1*&=5l*Y?2b$cH`KDQ8-_{1dBC@{9^5y+fpe1#Dw1=1a}E@X{BH3uvH?W
zL;wfp@=SK!(ysJJ;LQ+!DL+tC*D>MisX|6dXl4PQA2JMrC-Nls3)8Lb>jHlCur!~7
zoQ@Y~yqLy2I{Xp&FQ2aK+JL$iW%9(76^`Fbx=uKPwtK0jS>MwL8}QOreCLHYfucR|
z(EB<VSW*>m%Z;v!Z1+%-0pGRv<%FbOJ<CQr3$U&_7b10;b&()wU_iB`%2`?5y$Y4m
z?Sl|Vr|pcOUYH&|6n_8i_lj9ts_fGb`&L&z&s$bNM9OX6&|;sbM@OJ|X`(;Yz6qwg
z^_q??4lrhkxGz>0ox}uME8eo3LS)wxZFOENW^>`iHv|GUZhGCs`|?!xyNKw-IW8-1
z!M|-*PavBDYo_<DUJsMLuy7%pT(!WamU}#5WII}N4oUadPXQepeZ6WvEgm<89HTK0
zeWW+DG|~vf=$SHt3E}5MSPQ{fl-FiRaks%&M$!Bd&!zF-q&9vt`Xwd3O5?W4Dt9Gn
z=<Stw{j{i5)r&x?;%4=(B5S)!y%xP!FqL_B5?9;X2!9*@qDXF6Q}M-xspG>X!1KPh
zJwd^aM=86Hs#jN6wRW2lyQ>>L;roz_u_7(&hQP%-8?t2-iko`ub_jtw!~hR4B1X?x
z6?E!Ba4}Ig*HHE2t1Pu1;{5^2IMZen?~ZQ>mmA?M*bZDYy2V{SdOpy1OgfDT-WTbs
z<0))L5pUlACWlSsnQWm^EnkwsN8`KBO5-$-yR9Q#6m&*C=M;~3uB<3Z%LCL2PGRVK
zxwCx*8-sd<BRYDa85KP&=oL-75q<OzUGv!+qn~po8NaD>MyxzWZt$=$_#IK3!HizI
zJ&=7I*-7ng2tj5A^V_%I1)uK5zM}aY{a8D`e&|3X8~4W$c%2zWu092zK=ZT;rBb9F
zDQfKroC;hmf#Ziy{7(kSC5Nv$StSYe#ZFHveV}DiL&JYglarEmlu;_-A;&g8vf;0o
z&g-La4zXfVDVG_Z&Mz+dkOQNb(aMJ_aHV$M{1ookR)06h(p2)ehA5b$kja}`Hi4``
zv|`!up<XoS%V|3V@MulqYn@vX1_N-UTG>92ZrC=Rna7(|$$k2E)k|?Nqm=TvbgL^g
z<m5@URN(vFb;`AY$ogV0kg6f@j-#4ngn{t!woeedGS{WRe5!B)K*T2zX`?slmAc2C
zrwa`ZMJfSgtP4o}WiYYjvH%j;xMJFoioaYa-4z#CfSe>$C|6E}G!8x<oo6%bNIhAJ
zG+fN6>rFg>>rR&EtBfQYq1S)Rfdlsvl9P8YnGMy~?k;wlYMyolpY}aR)faYGe?<5P
zP+(d`IaWe&FtT?EwcZ)`WA0)wZoVV#ONJprkr9k>xSJ6hdzC@7v^_VUdvIV;<PmvB
z7$r*CUWWZ;IECVh+hh>;bDec&6S*#4?_5l|Yz`0xx{b=&+@d>rJ>Cll3n^B)l`CL$
znkd9PU^N{tyQBzG25}j%1B7*<VxuLTo}PXwRoAWu?=oBu(g|%!*wt`0aNmlR<kR+A
zkbga}2pB7k?vr5@r*wAWuv%q*zvZ-(r<s1#B`kHfEad#~tdGpavSvNHuJ8R}c}>Oz
z1&h!+^wAY-u+saAp^n(*tqJFgMw_+vkMQ3{VkI_L;f;o>&ikdhi2FR|W>jXr&(^K^
zS<Lvzacw&~vK*mN9e9eaVXu*mW_#b49CFfUSIj7^e;J*Kc$4}jGuvu8%XI^po{7mR
z%poWG!%4m9Cp>#(xpt2TJi#db-ZgmZ&(o#Wly1qZG!~(uLoD30P2lDSE(@U;yCvjP
zB4_nZ$o?Cw$0ADw$8Ao_B%3Cm-O)_*rT4m=UT?ns`90zkqKJxfN@~>7r;p0bPm#W}
zEVu$qj)|11l>xu{BSW@O{K-;R`r~_1`94`fhb?6CSkK-q{;r{+q2+wj(G2OwPZ#o8
ze5qmK;mg&{yesv&D_(GjNpIHpdkOpWlbu2$ee)uJ2y7>)L=?T}g7u5L+5QBzQwygV
zl)P#<{{1H;Z{u8xK*4iZk8soXxEZU{$MvUHl_5f6V&cRzJqC*GM}>p)FkTYBk9mPX
zdgRD5*58km=3!z&&7{|w0c<<mg8XUm;67Us^t!*adr_Dw;MMpsa{+1K?yU5~XuLY%
z=^yOhDHudt5zGx+*rw2LpBT|#SBkG%ZdM$2+HI^)n!o}wio3_$vE>TBeHwXXb!IHl
z9el4OXG_0g#ZXVlNT4ui`2l@2Ce<;rxtrxAxIpZHLcy>p*8u)4^DZ9F{k2Mt5GkKa
zW89%j#36C^EEPb<zu)6I<P$V9BnXlD)8cG9VU%41`4~aT^NUh89mfgr-YKrWW|Q9g
ztHaE>veHtsz9<q-v+*1*`+9v6kl&6}(U}e8_RK3#oONp6*z;`!=dhjjo5OPk!&=;|
zxkf??jpMsu4#@!r@rUhV_hxQ5$rmWJBs}&3r0#nZpPQV&rdw$%-`~EF>;c}>qeQRG
z`|FlAzDCwdqh4+j&uDI*<z}~<i|Ci;E~{R3veav|b!Y3rWQA&FpMJ&uX>wsXBO}^A
zX}(Zsyxj=@(=WCGntRwU%62yGaT46mk6+q-53H$y*^>J7NyB>%zLU&ayP5r{F?Vbz
zFFYAvjY)i|j(%ZU509foc2Q*dByRDzh3D1VeRq8@Gvqqpb+mX9&2qUn(d9*gI7<x(
z%kKV_Lq78TAO%P~iCL+#Kjai(1d{HC(cQ%685h+xH6^0K=vjfTnP+bZj5c-^!EDp6
zWPPEE?M*(BV<`}>AoUM!RsuZ?t)LbYc~7d)xo^;dE7ht>&C(4og@N2=&$(QMw|Hsq
z?Q$J(l#)4v5q3vvMCF^)P5=;LVRXBh=(M7I?~2)Ux0AlV87+9NxfD$1z2_Ks#Raj`
z-55HWU9TgsB1cPdy;@iFxu4<+64YZj0m}H<+;5g${7ncZy;ib2exX5Xrxfy(^CSWj
zFcPriVWO*6$}C&@HoC1e6D)pA$Sq_zHE}6^;?m{;3jhq1d7^u&4<ap~ULMThljVL;
zGMWgju<^HRb=28ZM87|~+s$rb$@IEjI58sDNQT)N>)zKIj-}ZvtF8;Rz$j6pVoDED
ze-tM-h>AEOPEA|9kFeppo>PM~Tge@9MHqj5)}q}yNzb?UL|B(6%YR(MjBqgLb2iRB
z{F;X<tIXRV+bsLEf_KObOJ7|%CV<SyYC>Y72`;MpFi|X!lFaMweXmYWM`ue2w=j|n
zkWXW`>!XEBAZGB21Lfrz>B-fw!)BNzB_(!^6ht?)Yl*IWv9`KE@=77uQ1`0O%`NzY
zOCtE*SY6K=zX{V}qfy)IYNlJ5tI_#brZ1YT$fotKx8XcCn&%7-ZFO^`hcXd(D&>uU
zk5zl~SuYV~;=6Nca!_+zp!%=IxEqb5#;l`k6P3AWtR!z9G6bEc-)71avl?s{Cmh4s
zRc~x6>;a7B{J2F{A^5N`mXV%vA<OPfFhGjZd_(4ee5yS*fxbIz9(kyus=BpQ(WSkL
zHcj*S8JC4y8D9X2GtDfD?cdjUPQNx7LfGwRt{{NNk60o$*G3o{TRa+>Em5Hr+zO3g
zK+r6%s2HtewAKjrZR43VL9w>6qJP>GVaJCpfIf~UyWG9|9rseZ`ORn|Iw_wNfKR_2
zs@^+H<ccfQX(oegxbC;&6?wa&FG#)2&CN%piZJ+2VRT%UotW8nv;3_vISaX0J>%zL
z_GB2xD(ahQ$ttIZ1_r(Zn0E?#vkHzVKa9J$X)qqZE~<(Fhm%oV`aIqETyBy*&6_W6
zT0)lF*1n<c0m|bdiMMrVr45kL;3U&*uh~qJ;4Oi>t@!2L_fn)FfusYY)2j(6I#9IO
z*}7`+@-$W*m)Y%-U}uaDQ^A*!%}2ufF@x8Mp8s~uf7C6j4b*INn*9VZ-38-DK^|70
z9_Q{rG2k;)VekEZW+kbC=fpwhCC5&`tFv03YtUk~Sj!8_icfRMIet9s_73?svO9sO
z_%Fy6FK4xE+?ImR#^8cY6d@zA3Y*y)FSiYtKI-h7Xj;&i&v%TxbaYgYSN-aaXZrEM
z+Wcd6Yrt*aZ#H^Nq81q$8PCxB=3a)wh!=b-b-|*M9!>X+32rl)6D*mCtaD)>bZ7b=
zU>mV3FPnA<S05CAQbemGyj~5ezl_KRP@T_G5iz+jfKW~xHetca258ZvWw34-T~hhn
zE3RFc_$+g+kN1a^u}tSuLZB6+A2%8qzVcx*i9Oyvlgw@MOjQ7`j=VbI01HH-U>aM<
z0EuHoN7?)x#p^d~(Ae8Lp`YDtM40>Buc<AUZ%6^_H?;i4Wv8{d%(4Pas%MgoNvrgU
zEY`FuP*+gT_1>gh5gLxAjS2c7d42pRIpSgC+@WA1yno&fLJUT^UT+*-ah95;UE`l^
z>@}Pl6pVIiadoh$U<t6w!KnBp19a5<VT?bm_jEruI^*W4=c$}wGi8E^!WGjH;Zi=<
z%d305%i`A5T<uY5>Be5k$Jv^h!fq1QW|c9=Qwfmv;YvARyO(5p3@S_WcqQYiKDVAa
z47&3NL-l1_oJzwj;l;%Hzy_^4>k1W58Uk1{qaS@58OHBDx$3s!;-&(IDyJtk*tEUg
zZ5(4&p{Hz2m<rran>N`_xC2)8``Wzzf_AJSn(rJ53MeNzc$Ew?z6ovGIIL`QK6yEu
z4X8|epT;5ED_X?B0J8$gw%fhB05h@9PxkUi%x!rUI48<)v256P`ak8b562$eeOY1-
z(~DWQ>m#`Yfbi5K^dZyXi>78O$4~09?<;S)=QgwRZ@y+|1^7l+%`Tjc@;`|Y>12=Y
zoYT`&U0~8_&NjN}{``y=xOZ+joUA@p<#7z86nC4O0aE1->|)vrBC=);yW_iF5lgsP
zLr!Woc^{2MDe)eWHLqeg%frvOo}{<?E6TMF_lcJ4T03l>yHwv$GD{Iapz5qy;qtXG
z5tFFaHXnA`UTIZNghf^tSez?+4@_8Ssx#7}*+mOnOcWUyznl>RGLAs;d1tDi+sqRp
zndjPQMBVLLaww!T!e{(ETpE4l3RqpJhYLT08_#~cq;<cVQTLY+bTkE!GxeHL`PJ)i
zoZkksW%bVj<39W~&&X8zYK*B#P^D5n_9+neAl1!6KgwzwYm|6EOSR=<^n*2+PnWN2
z?6|`8X7*!$LnL04uYH1^Li0K1z&*TY#IMn+c_X3U0zuuD>#-z}j;`rT=SwFDsnaFu
z?qY-k414eID=c%?>X3=WZQ6ZdVJ}SaNsJB_YKqRLciC8Ex4G{mqe-1sT(+xhRt4(#
z+L+jx?VMLndDjx%Ato;36Yo}>f6zJVT;S`>JFPy%tD^^{1Hf))^c$^^vxx+-%#S1_
zG-n!;=mQJi+E#$-AymU9SPyh7BX4|GqwO+wpK7eJ*Zq`0_Kx7T3_vm`5qI3MHUyop
z4W!<;2JTPLo6MWrZ9*F|`{Q48jV5+~%Mqld*P8GHQIkb~>@Q1TUlIQ(%%h9ssb*qL
z<ca&`hQ8%>=oannt=Y@c?McmbSw#%aK9pg7Y>=YbrA@j`ZC*_Td1<dzIT>j%ZSvpG
zL+5^}lYv{h{1JU#$VlW7fld2l<4xiwSeCaBEFG`bg-6tqh3=}*5OL2EBN$FRmoc12
zZi8r2$}1nNrWpb3zRG*E<gncLoP#%$)$fXUx!H}8(fSp9+nDR4d+9u3t><F<65dc6
zaH3j^^cTA)%T1XRs5%X{O3ZodV@}IgZV$(G9_7YL3q|vZh|fhELhbhOTmhI*jGcZ0
zo@_nD3rS&v#QT#wrbp>EtqTOI7hwz)IVy_$i2%{e6s~@OPAsLa<CMtJPQ}vwmW9Qo
z1R(<L=vAkm39zpsd!Xs}mKQ)F46ryK*<R^x-{g@&`}fa>cAHUbPnH@uosTpGu2Lh)
zE?kk>!LaiMviRB672#H_e2#lDhY8wc2p*Sv>#e<r&B^*drPBCZ?>WxhBqiN})Ubae
zl#pR<@oCIeetZ5Gdq)8ru<r<7K)9XT4_7{Y`$6GP*+!-*Qk(ss9e)OLOk}{J^1m$|
z&R)^7iXeP9$iY#`;qBJn(WG5=7uiPJEM|xDTqHXntiMX1>kstWqHksl(kU&*NqfH|
zrD#p>kY7|d57x7)+HMI<QVznOA^zYz?1jwmv_uzo4ph0|xI9$x%RA<jJNeWLsU5Sk
z`kz0Tz+)rtlS*y^`E<pBUwWjHL&sA^(W}k#i8Cp;FTGg-?={XXapADN&JJok|5Igz
z7)ks#DGyQVPo2$;$6V7&M%#qOzB-!-cSNtCH|6G6VACO6{|oqX5uqtZZ00uX5iI7m
zNcj<9SB4Nm>^v4g8wf4IYL60QFg`qlCe2sS{r?n<Yb3QVE*!`c*$OBlN}HlyE&Tx?
zh?T$C0m!3E?b9b-6Sr1?b~!Y{KBzn%)r>9uF{pwJ&}JVg;?BkU!Yp~qFAV^NSd=XX
zV}XG>W(&~dn^$Yy74^XSa`B;ax+2$7gYg{=SQL|SBpZA;e8L`9WjC6FAIyM}<XTDQ
zQ{r)RLdx7xp$2-~y1NG!vqg{WyL|v|{gR6CloV`grX7iCc4gciVT%JF_qTq(rW<DM
zj;llQPfux^qC_i4wNt#3pnW|WsOp&k)!xPHMG?f`c(?R=RBSS7{jNu^O0GzUM+Xv{
zad9x<r%%|ByRw(*v2(QzxFe`3l%naB3pG*v7tAe}AJf>3UR2q!D6zj7<2|mO`sO}?
zFo=4Coefl8(42I=e16TNbIb0J8X9}V+S+s4HbmOHy^1S7?R%s5z{=G4oSx5D+_U#P
zWLH4i#a?f-TASgLor42NQuSyRgK;pdiMXt6Gk@Q0K`%iseIdWQG`OR#wRCirX~^af
z(BmJ0tOgb$>AD~o5j#0!xag)!HU}DReD05iq><^Hk^$7~Sl~v}wS5AEYFR*lpDG>8
zK6*5Elr@Zo+azsYS?(-505YgMtr0?>t#O~NUP=O_)ngb~+G4?^h_zxQT3Ea<CPe6v
ze@{FhG4<^mh}KIN;kB9F;K58;=##ejMt5k1s3*-^pyozy@hlNB-F!9ZMakm!jciec
zKYM|(C|=`w5K)Nw=s-S^P4fihcpur*tt19qHUow;ZR=*#hb7tAyL+a(rH#g8$QGW9
z1b$Z2N#oFd&=Ey;Hk!}BX8}+t%=h=-M8HZmo7_Sg4=WrhA2<2oeI75er+Ooa{)C+S
z!_WOmyuSgHaZXmr&dwFpomJYb&NG$WsF7*I!E*fFMi6>4J4JoCH-31vHuQ~}!~Zps
zSQ^ZZ;?<qQQoY@Y^%|4l<F3zR@HKc947do$c#Z3s;qI5+3L?nlX#~fpZRQ5fbFw=w
zx;+h3+dI5l*GH3NqZ8#>Hs(vHH$yCK`KDQJg(F!v&H6hSKDYi43-7tPlNAJ^m-Uxy
zDDN=*R4-H!-mziRsUck|J9=j+zoYMi_}{Cy-6u{Vyw`wj?jw^ValhM6&dhDjUIkK^
z(hfVrcC96A+^^EPzP_>Xe_eU*&@y0~*dZ)fD4)LLOtw?^1TZ@?Ag`Qw`xUDR!NFKC
zPxgoG+#K!P*PY?iX8`iShK$cO#=7a4Yu7?lccBlC5^Q7UDcjjA8C8g@!2WyYOHHh$
zUYG5805g(CV!O!{%LhrwRFcOZq5JdP9&yAUgP>y>Pr%*H>?&qC%vI`vS8Q(o*tAi5
z3vIQN^7+ip&hq+59sw!&P1H^nToXN2ce)LrLJ|hPTqsAAk$B-U%3W4M_eTW|#mnK?
z1Bb2Y5|vDbM{U^Z70(NKfWAeCM1DI8>>KN?fZppYcRSDt`cqPK|5d0bYVd=L<W+_J
zM7Q%wa<0Ai;M=0{t%3MVn?-*-TOf+^iiQHxow9ZzA<fbDPf*T|G$4+Gq*;1`-*uG1
zE+G8n7p?oII$YOx?6*3$9SFu~<pzv>PQwg1ZVuD<x~_gl&P^AQNJP64FL;v~eSma$
zCa3$Q*(UY2k<kidEiNt0$9)j<dkiPM6(Pl-&E%!CJtyu((PzPnF7nFOT`w1%Hlkbc
zjZ(F;44;*TGceK$T&NEm`G2+xV9&D#7gx#rxYNuGQ4mm+r|q0fp`7sra^_i&H$G3v
z)@@Md-67W5osiaEC^UjcAzL8xIs3CoO-%b1R)bt_{%mHOsn$cjMRkPtS|*Pa!GgIB
zBGI1GJQjJ=9PM*mlg*=J^_=3WV`ul2B*<bnLBYevpQ;%XkZtxMZCW5yQBa7QO1uX2
zz@>GBd*wm^@HEZr;9qmPc_ZoEDqbzLWa#Lfa70g4AM8ZCkdw{zoHqX-S6>}g#rJ(J
zh*Bb{NOz}5NOyOGba$6DsC2h<cY|~(64KpqrJGCVz3>j`$KUsPedZrU&di*%&pvyv
zz4n@^PpvEtUBT#Qi%uhB)8$%APYbITfkHg@Q}3z)yT+ZPm7j<7zfbnW{GS5-2l_9E
zB+;=8>zY<>KehFZog{*_8j)aQfMh_=BNLt${nU(@%LaU`eLXJC#Hshb{bsk+dHq)m
zyHG1jCI@o|P#^jAioPrYjq#D`R)eN-8|on~e)pA{f`zWLbxQ<%Dv<CKA17FD!4u-e
z<#}OU$bkpnY7P7$1Ar*v=97N9kW7mh0Y5~5Xd(BNd4<LR&B3m|M_O_&HXMrx76`<`
zm+wwViaSSID=>AgN-LCVj$f}59kwPBiqqgS>pyYXn;s%dskDZE)azJkal-^ZjnB*k
z57KdSYpE?2;#bnowtKfYy&`VGJ=IfFOO)5thVz#|*LVA9^c}A{Xleq8t~=O(uUHxK
z<xkA$>DT7d#}&8CV%q~0m`+KSnz7g)5FCb@Uo#R<PN_JbIv=<Dw(7w1E7Vj+>3Bul
z!r~>b%sxW7VgQsIZooek8h{fOOrVU<U>R`dMWHxy#FI9O6yEAwGZF)_9&#cZiNPO?
z<=y<~)5ZQK=DvbLD)Meqq73rR0M%Bb;P;8AptZISnSTh`)v;b<$dV@j-EBdTIhd08
zo=adOdVLb`0=h>RHfq>L@o(^IYNDU|i%|Mq$E7W}yue}ka)pZcuy+N%hkgG;F~~?e
z3gj<{-ghFmqv~FeGLUz#^u>H{^QZ4*)ib+3C&0C$B(6l{wqljYqdH}vQl;my8^`}W
znugD?<69~VrPSD9)!5Z3*P+h$Dwv`Vr20RXUlYQY)f4U;s!hwMmO!%#KyU(x&#x*y
zHuH(p;tr!H=&%%h-0!)_A8M{uu>On$&DzB5xxbPu!rojbqUhMqEB@=Edl=Hs1To%@
zgsV}k&0Q2IbO<~Y;tddIG3qy8mp9_%LOx)zr2u?=eHPfxTs^-2%8IaP*Z=9fh+c<l
z_tYg2&_jnK^^I;OWCbPyBk|!V-)+8GbDh7FEmw(f<Stamj6skfd4?<mM0f>MRgP!<
ztkt`AB{HHe<3Pm{KkUDT58%hZl}K4-P~mYZrkneRneYW@70C=~wp$Ce+<77!u+>18
zio)1Ixyz^W(Ae+-meZSs(jw0#wqL05GO&ZYRY>af!;Su4`l_%CNtmkE>Q?Ep`w&%T
z*+0A~MEQrH(ZwJ{DIUawIfbwKz-0A5LNI3sa1$=TaeZve2AG0>hS7fpYh_y6U|1Af
zo=8^LUE{Gl3d}Dv!-LNqXN#zFoxjOX8?bW?!rJAhTp(u?XM3;+VjfruQHmYXelS+C
zwzFkfafPq=|Nm$gra3hMyXBt;D!Ja7`}sY4;F-tD(Q7FRUzqBYus_?{jA3}j*r8PQ
zz;w{}fSp&csVOq{Ob!iIbUglw+Jm3;m+Sw>Kr|8scD!<Kj4X!+%*9#lWB+h(=mmjy
zjdRYGiU%2BuAErK+6q5BAgO>rYrjJ9$(}$w2!UDr^}jhol+!<;+eLZf^GfkU!QWNQ
zcv#i#&IfwVU71)3W%7Zw^GPx1e~o0dn1Jb?$c*m<#hzPN&C!7p{_CfFG+d210dI=2
z>C34F_LILQe~nL%BlZksPAf>~<_&;3-Q#1QC+T52<COrjjs^p}#Fgn>T@W+rXsR;<
z!fD<f+(p0&qkov$KNqnB;!z2|XYL2+!a3=#ci`Wbec-%fI-B&>(C&P|(jh(%r%xw>
zd&sMZGvHXq8Iu_FS}z3R^)xl2A6lIsuPR1=1#KVkCF0dm1N0D=4lHvV1h|I=C4D}{
zj)leTEZNLoO^^b!1@qq;jS#UmWd-1^0517so0Z|vJNR1!pn;;JxhEx&Lhu>MKihi(
zt468N6lM<Q*k!<{Z2M<8y#6W^Go!1o7H`}c*ro=WATN2jlawY5D(kM)VTYdj=aGzN
zdj=J+LTlIYP;AD6O~@?cp1;I>%#i-9QaeJKhoE+Xr;l^#C09g|Rm?3GJn)k~@h6FS
z?=Ri^Zjl%}fF6adWuar>pJT|0dF1o-1ow=^<3SRg;=2EqIz&=m7=b@T3}|&UbY-_h
z`LF4mc58ARpqlhLGIm%b<D&4rQ*U}f{pc}(#xJ0+I>;F+l-#_NH={yW<RkyD-~C}+
zeNEVw4q{p+WvdKI!s{^8k{tn{V-84af&M0=B-{IvMBEYrCAK$SY5<ETrzKBc5NL_}
zeg-%0q|7wN%Ai$}!^MDqyD{rQqlxg35%1@xidcrO=%YIEyHCV@Nwtm`pm*xOg{`9O
zt`_DfYJ`yX+u?g6i9Qf${QaEc^~Rk=t|NrtiKYK8@e_YI(%)5>3B$^jN5MeZ?}2`$
z&k2igg<i;5*RcKVn2a+CH0c}>n3j%Rn3ALM@N2>J{x!v!8!-j4@q=}i;!B4nu{DqV
z@qg{c3S;){rQ(4>U41?xRTv3&>7O@^eRxyBhH0XPur_FkMQ=aXyxzP(0(?rbV&m;@
ztYFIX$f4|TYx?nULG^3|!0Wt0v(Iz>$|&|tCOM~zxk>*dw(tK079K5h07K)QR+~k)
zI$Hi#(Ia2#&wLst5mH-a$?Ne*;U%iZ<Wih{3Z<+^*1<`6TnHA}6jSBk6KN+IHE)&w
zX;?Cp&QkmsZljr_OPK>HdH4A_f<`>B85Or@xvIy(ZTH+Fpf(qt{Y4uZ5#bTBcu<uf
z>4Q>)GMa|_UH^q4Y6o)gx8LVu=ThF7-e}rr82_w^Sl<A4Pmj#9LfK0H5eA)dCI*}+
zU=hG6)oA5bUXjajI4`am)Tyy+RupGCvHg2fY?ohbf5z`oAOlg3n1jhGkQtIc!1^<L
z43ZO@L;3%oS6?tT+$LQ_T4UiJ&s{heYjW%#m4Z9)s%NVaEo7!wYbA53E*?9DE#^PR
zOAw~9G#^7tFNAGeN%8Bc{g;4U$a7??{AU+1wP;22^51UXozK6BTQ(8pwR<2Wk>dlt
zopjP9mA^E5raQDFk+P4P5NTt+o3xX|r#6Z`B#Y$n9E>i4o7QQq$UVB?RWG>X+Ud2t
zWM%ySee(C+q+sWu52wu$<hyUB{+vIF5AFr7`Eomhvar<dy&&%=)z7`2?2L(Ek<kJD
zGW!SdiZr<KahoK|ynM+ixk8TKGTaIJzm0Ey-4?As3P~5Aa29H*58fyv8bUI#iX^$*
z*+qL?L(nB3%Q8hTJWQdcp>wVwbQ4be7(JagLM~ab567A%9INd7eb)-$3E3JS2(EvJ
z#P|0u4SrdnYMqEs!oJTUN)QZeDUEbsV1tXJl4rdZ;N}}<rx<mR-nc;NrfNT(0MKy?
zbS?-yY9i#|Zb_($7M{d5NU2HuZ7}-dt;?hy&J>0R2qcJa*JBj8T@@=Z$DP}{o?&uy
zcdCS9FSCmou}vI_(H^502`t#AV$CGW6iOTe-AwK<(>ct1n<9X*`zI0t_IaA$5p!-V
z$5d^=pVLzS11;JMO&S)1gw<gp)Usr;vYtX!tRezwWB`aH-UUYl0h?s($52Eb9nYp3
zfn_!Zy5`3#(F5TkHkF5mB)))iPIYav7mAT;wiS=pqfz?XB>nKL^#0}2Ate_jY)llN
zi+*GL;p&k;dwhdUHn19vMW&Ccc*;jDY^f1j9eekSi0erea29GNmr&;Y)>mhry~OWV
zR4B-wfVp>|sB*oTXY4$3OO&DL;wuSS)?mI@{{IcVEV+F7TTZe_vIcR^%a^zhEg#Hx
z0kgd?TjUnnOA@B}?(5^W(=tyI)oqkL5+fLIT-5sy(xjw`xEIyF_a@lrO>?QgEXeDx
z$UlxjWPIENFA(w;lsHGlLyZ-k4s&mFhy*2TSpLVO`G3VUf9=_y)K;#$|G<rSaFWqj
za37MgC`6seW`3RM$d04?+-Agznt^6H%~#BHK*={zeJ^QyVTVw-2<FGB|Jr9T70hv{
z5D+jTSQ3sj=UD&SY-qvUFw1+D#UILXHCNqF*H0%OJp_;~>O+vLOQWolI9ela9jGwy
zmZTF{51Zwb9O<1^-Vnz;EYSDCM<TjhUPN4R?(B@m{o*sHj{lk+{{=wQj2*4JOcX;k
z5~IwIAsx{1McOf+dxFk&b5AVZj5U|wn`R*E9_HMR1_#)^|3|bci@DZadCLm)N{Qbm
zcu{gf$^Ts1CW(UQ7xP}n^Bdy+#~4ij<DorGH@)qmTiDp{wZYWWJVg$d+(cp)vGe|N
zfHtKXaU9$0pw_EG+qmE5<A=jZ6Hn^V&1f*QaBlI+Wb#@UI&-`(v+L^vALaNd-8xN6
z?)=pq@*y8r(v>`g_vQW%zg2DVic;$m{%ILJ5D%_Gt3uTvmW+vV_r>%1V?h%EheM|X
zXMr=0`)lbQzDue#@ASQ2F6T+3Thn`|oD)*Mq++>>cQ@K^2HI24)mBdL4sV<J+&=6O
zbp?7DvSnoEO|&F2(QEH-Rg4VS$<TTCZ=pC;D;DD5I3j0CP7dH~xLxEWEKStb-2Y~h
zZ?9n6x#zZWQ2Y(k6aB+VSz4}o?i(IT(mcNIo!Uyd4de61qaKR<xXbtKX{t7MDASWZ
z()^AQo>y*>)x6(ldcBd2TJS_upAK%>L|?T<mvyY1*t8W9d(&^^J9F)AO=O&KVh6C)
z$BALzer8xUC1~6)?}UdeUAinGopLq|0IDa@Tv5?d@4B&>y2$#9xo(`TMmwA>i5XD{
zw_6OeSA~z}_ltWO(`aWR_JXr~BlsYN%Zx*5CHM*u{oR-2vdt)&g}tvM3oH&gZ+~_;
zsq4gEE8kggN>bbCc!i%4huzGg#iuY{v(hyl=qXEcFP9!kGgqoNFI=hnE;5>2tqs!F
zPflEr8NSmXDxR6;F<Ap0%10@m>w<bj7)f(=LTirgJpEjqGIRn>=y2{+tO&5^NBpr}
zR9Nn&2(6J)3QLZ`Z!Ts1>hW&VIDh2{TUnZevF|SL1TqHzQt9|sN`d^iM9bj)rEn(Q
zAq~#G^SH0^#5W;dcP<I+%2dg|E3=91*Lv3uQF*t`D|;ywV1_ikGd58FufbhvSE-}q
zLTOcbGM`^@?05MEqXHyE%<>L;eOKZsK9-<KgKlHU?g7<&`+e8PDBrD<9{%uyHw!>@
zJtFh#NCYb^5!Ieu;{^@XSXKD(i^8j0e!Z;tUe~wsH|b0wDmO}szn-=uowzZKZ8@p8
zSkrtH!k5Ooud#N=0bP!S(7$lXqm%!;1m4~Dq;8ES_pIYxr$M_y5dtH0+AJAU>sPf{
z8B>s27GT~h2$+Ufz|K;E@yfCH&ndPE*2ttkv6Db7IXJk|Znp>)4nRjH^cz15qZF>?
zu6ggLy%l8LdtS6gTG8!yxjS;T%JPA}J*j?&YGdQPwWFE_Qmzos`nI<4forz;J4JNS
zS=+gEsrdx%HT#0qr;ca0yLCqKv2^!Swp>`PUh4P1*vovhYy=dIGU2gU7t7GSajCOM
zFe^u_)KRi@+2WR#fUgTfKEDfuuJO$TG(RtA=Jtbr0fTtUx){LY$Y*ngGjdYMekCPh
z+*)k%z8lB$Mtuiz7Ix+JTJg8y!&bLG488(PzD*g8jK;R;Cma6xAHam~r2>|^`DXoN
zEnAXRgPwfmzDtKEtPS_}uU?Y)dHTl4(+_3<^OXVLC9L85x_P_zGmtqN>5rzyc(}W3
z%;QGfBe^B+ls8_7owS?d10oAy+FL*P@GPYQ710VwAhwrzU#Ds!dI&Yw+!a@?<);FS
zduvnRiZMw)s+~sBDrSz@(BPV^&r*{uh-n^JPZrB_xg4g-S%C0vBEgnfBloRAO7CnY
z_Xb_Np7*_kKIJjL7LTuTOB<L0==VqQ2oftkKiL2>?E~!(vtIEBt*%RBa=ovP_(Df<
zemdP=k)htZkciFn;w$57dCMocxX9&mjzVe|9fsYAug)*;(H4m_qWWD2Hm7MhzM(3b
zitRNW7b($`&eF6|ZhkS%f@rK}9o4I{-9_LVm#HqSrNal)LOpxy6@Q@(1S8$lH|;wZ
ztTC=wQk(U<?7E=wOWn9!{>m8&vCMSCbkJ&k#?1O<d<)tIUJwX;e&(KPd+G_}eTXe9
za-WWh_D-hWDe+h@V{h2-7<{pPse5qcc9=7Mfq6f?z;f*N?0y&;^TX>fQ)Yqtk7M{@
z_Z~ascjgt!RwlYngJ(^$#uar0QQ7*Wptxo4XfL;3<hI>=_3|U|qA2MV)m{3n8CIq5
zRx3ib(Fp4<2W9Gf;cT&Cdf`g;=_q|6des)r!LLNx>(SMY<btMCfD$sEBO11Nj!rk7
zsoU;#U4Bxjyi~Huj~0<j09IFu0`wM_`0=a`R8D-@%5|O708;l>1A6b5vB4&#4Ns#i
zJ;4Ax21CK6dhbsAwXGp_r=xCb8>zKQ(>imp2)jzXk~ls4mEjhlZ@feDKJ+SkzAc<?
zgv;<7{te@~J*IXM-?v<UuxMn^=f*a^{Bfev7iE&Hn#Ci$b4oh~g6Nz8$Hv{SZ*7r$
zb^~256iWBQ*A!apOwc$9wpCEpz)|liFnL6{4==su4Szq}7V<4ad>7<y6}g&^x9LO{
z>DT*p1iA)H;k|V$__tdNN6hHR&{>PO#>izno|1=t=xNhaqZS^ncjxX|AJ#zb#9TkX
z$FP+~o~hj+2ik3_`qw8&f!^QBGOn0z6MnLujeBj?TNo;8ABAJ8bk4ERl|xE7M@2w)
zHv9xjD)MbT8;Zv$OWR>dQDf?r>Iy~?vvP!g@He1uBeZLGMv<!TRjptdtuDjCce*61
zyg$+BV|W*Xa5i$E;^Vk^E~Q$}t+ca3k*VMfWZ3HYizF{#r-`FUUsF^S>e(jx+6@j1
z*O+$-L+QtU=V@FwoaRb>fPz08+r6*0wgYcXoy}=Yso)r&CsTO5iFgd0G10g2^qF|T
zmWNoSk&nU3UyLFdF?=6d?|3@!QpRsZJ{cD)Ho{M*48}-aW;wE4nL7t^K}wxHL;L;5
zJ1#B4uquB_AIsN_ZF;=TNosd%ehWuima1-J)qgR!YO-iL%8B9F+by*)C?}oJYyq)r
zxuE2~VC6y8iRMFGu*`+OBT4C{jOw&MECM+l%(Bp){WHZKxf}x0n?@^SwmUEAvhcSZ
zBdbaYi7Vdwk_*=HE!4y8d0`ul)Rin$&zDqt>UakaNrC?r+IEnt?=ei2(gTF@cwxi}
z2wtMn(6vbwAEFF#emg%({?niSUhwxv2K4)Cx+>wa7iE~K*duqoo;%;@xW+}@T(T#f
zrOV<@w-3MAjd92yURqqO=_BI{&X^3Ho3qLN897Jn31f$%a9H@id(lhi8)r`cN~;;t
zYPbxVT>TaODhSXx^h1TUW@33hdHbO&^lC<xyVx*OL(;T5{-~!z8N4k>gHsNK_B30r
z)nA;z=%kT{pZ@AEa>KfJZZyQ@4cH}oRi*=)Hd==NXZi}rqLbA`pSE~qYge+_U#pq|
zYCh2<_E}{ycP{6QT#ZeFVmt=M7|U1cinfL6@N#c%-W$8kG3L-#dtv@H!V9>Y5LsuF
z2{|_K>p5!@`2P^ZC$NaZ`XZGLG*i>A$fW`(MP++pEm09K$Uk`kt7m{#L}QojtJe_b
zT3(DyhV4{L`Ry3|yWn|>_W&W6hl*Rp#X@ruKnf)J1Bi45`Sttwwv@FM+In$4$^VBB
zlVkZS<Ujx))@*K6dZ{JE_9o$(KOD)Z!h!vKYFP~|vq6OK{%7d;$R(N^LZPKWbU>=z
zCkUMo8!+GWl36-jitv5qX0uBT;~rWT8Z~-j)c*zU{@ZBV(QQ#4F4~1@*EinSG<yOt
zZ~_A9PZm;jZ{`T4_hG(9_W)Tke49tF?rQ$mzXrQWJW8bKGc<-?^z6UHO+X0k&6F9R
zMJV#s1wNjfcnLhE$gP4TfL6oQb5}!)n|{cpViV-oxNjiNl}(D2oyT?%QZ9c%|BJHo
zz}-;4x&M7)mEj{S`)_lv3THKLVQhSw*-y@S)UE`OTor4(JW&o?vbJHl4@ioaMC*#T
ze6fu3E3XLN9(>WdZrE9~Ts<22??FkvAGX&pcJzwaQ%0VJ{V|tE9IsC*OTKW*S!r1=
zf0Nr8FJV8k=#N(25d!d4#kt?hhN+weS8I7;QFTm&NK6y&&8gy#E1P}@f_dUUMz4)l
zQa>ihhEh-b`3ytx0{%f-<nR5_+dyizKQ@KU6lK>W`#lr@SAvl4r}HKGz4lJA??)R3
z0&Sf&_px;|L=(vERg+`&Sk8wx&T*&W=MQiG9Ru#Bb7KYr8vK7sAR?K5Vy?8i)iO<4
zb$=~57|vg~H#ntLMsd%Kh;k`gob>kVdJJ<<$9(AP8;FS@Af)>^nhG2jQj%We8C_f?
zQWD6rGDKMnmF53j3m|AH++3cu_@d5ip&*f-miuF*Dq0o+F(4@6Y_P^{KUv$~>&8BQ
z7!~EI%X*w#9O2unQ<$5&mwwfb7TB>F*i~JU(m0~{s1y@S4FkZaSX3<khrqt~SN331
zvRwgeOR1JuOA{3dxOEJPf}*U-)+;yHwN!CT)AP*YTqq%i&txWVRZvY!-dKgrP<)Ko
zWbiApnCnea><42FMtc|<fxPAc&wsqCc>K@eKj1DNU~afp%)L|9gnt~G!agg_Twr9H
zXD^CPc`8H962wt^o+BA0V*^=$Y9?T6Ev=ZMBZg3Gy}7U7e@i2&g8VQ|vC#r%Z$~yH
zn<0r|0gG%O{o}rXF#b<X>$_-H;|zwB^zjG2_2!+e+GdhW*Tkq}C+s9(hZ%}yHOrOV
zVJ^JMM_!ne%yrxu<Ze+G%P1bQv}G+Q&u2_4LG{_f;mu$D!Z51ij{hg4?Mm|NFX>1(
zEam}3KK{c#$lv+LkTgOnmc0>o;$sJAM_tjFQT)^4LsGPYZ(LkQ-4PA1j6N1DomLuZ
zJ!Mm!<K?>gSl&zX*UhfV2y|aH;PrI8zkD4EC~5qer(i1o*1?~X4X3mlv}GW-m_K4B
zIl_LqcaBe@2|&||2}eq@@y5U@o;{V3*zQryl2Ts!-~J(vX43X?>W+0wb{1)bOdGyP
z5`6Y3RQfo07zVKCVdhxth!f!>QL~@+A~Q(A4Z-?%QC2~%R^Zc!`@Z#bd@kkH@tJGD
z{kPLqav+CY^(dP=?<XJY;}2#^%m^3i$*9PP?avn<1E@3@is|2SWQ0u{s@WqvOCG;6
zvvVD-E;mdLCQ<!yWtQbH{Ad*X{(PipaWbnW$1S{|tzSig&;Oofz>xI9S>iz$yVE|k
zN}g97lY!oGe?^73VY$^QBeVPCdpb&ZW%KYBe|{V-J^l8qr-DQA&sqrJ!BUx^Z%8yl
z2w$(cr5niD#o;`bW&f;`UpH|0*GV)5EJUUW_U?I7Kgdc55VOP4Ua%=U<&v=n1ZalR
zMEDZO59bv#p%&!eHIMr{=H&K<;9F{ueF=HC`)B+4BLD#Rp-@(o0JQ_^e-HkB6^_+$
zv?@b7K?{(ydQ@Bait#(ZQrwNL``e%b^1J-wD7?6gRH4X06)qLQZ<i89L!SvBO-O(h
zfw~FOd4(Op_$XoY=Prms`ua&D#X8dl`Sa`x6BcX!0L<{HJn0E5?)LKvoBjNzq)USj
z$5l86=3yLiG=Ij<4GwPAiq4=f19ojXa<7&C$6tuTl6iELFP4o%u@#KM)}IgbHwizy
zz7iZpx2?&1g6|@_tP6k(?;?kIJ+7=0oQk#&`UZ#6WDM$mrY=B=AyLPsAlMKUU;6Uz
zYc`@uV6`Lw4kn_G`L26oAx!8YTp)e|qnV_)T<U_F19?syqV?}d)Tq9DLQV3DMd8Y=
zEaicvuytWICqmHpB#<*(4(xWPS@eyc827lN02B{1fVQ0|8&3iBWB6>bf8Us4@s0}o
zx9f^9-^^+8_A^!9IBi?(20XSco5Cr5VPlZx!LFOESI}{P$2OI6`=fWVr{n86P_KF1
zThXMW>IQqs>42tYH<r-9=b9#uPWK7F+49X@eBTJ6B?I({y3zzLhebr8A(6gnf?;;^
zQh0Y(hY}BO38DK0`}me`5zTYvy&X4pf!W}ci~c931eCCpZ|L)|Qs*tRa@oAieNAFq
zva?KpyE%{mNV9fTuEN7kkl=ycKS`z8Iq_6zgs_)Dr)7DFA2b#Jb1ZPg%r!|K@gT6P
zJZdzV?IUVv{(#Lz;C*{sq#cAaD=Lt&$aR9*Gs(Z6;|a_j`gU4vT(cXsvhD0m+u!Km
z3EU@iK>p_q$>JX$L+pBe00;wlVLlA>=Mo70zTJMBw;nFU-QPP}-OSe`{r)lR3`PTf
zlk`mt;=`k9qzYW(=Y(T5u^(1aSUUdd6Z#*m&N2!8hg>7I&UFOKgn;_tP5fTK^ev?t
z*Mz3Y2#X@KP0jY{P6*-bh`3hUsUTlOhT`k5KOXR*a5pp}*GoXbH`JNr<$s}?J_RiF
zw4*?d^EN)k*ey?~?+*EoLwEvP11Dnvp-b12TL6{X*Jo!jDY{dP={kwaCT^f`K2Gm@
z*j5qk>5Z8R%!6XdM#`Mdf6Gmb_7;}RvlRY@nw!~wH<eqY?By?@@b#d(3Jm&A4XyXj
ze?6uc6>fwS&;iTybAzLuAaML)-5;-2F=A1xoX$fc>ZA@+z}+Tf1O8-H;&+usrK`+G
zo`{UGjGn=5fn<U~8{Kzq2dlF&)PJ-pf5Z8=2cLvh0t#6FEwltW_4XZ!Nxr&dU-K8-
z6eo*;>{{)@D*zCccmgZSV3_H2oHWlD!G+q#?j2zOdFPFt{psNW(fDE6(Kj2CG_I-Q
z_6@s1y3dk8`!8u!KDMu$e(FqbY;FyRJhaUT<&`zY#w?#2|0=De<Lz2mT=-K9uY9_z
zvA*zkD^LH<Z1WeF2`V-fZ;gX6){kC{b$gDhh04MS>Fo4ji_ep`@3(z;l_uDB6~FG#
zuYWIiZdrl-S?bFK+A*|owK`*1yTMmgy7nHV%i?2p)e~uF+5LW+Ugu=g$&rSGp9{pf
zBSjvgUv&SHt(w1wX){xXz%zgB`03DDR5Eu_KFtZJntV6(i>)O974Kc>$}mKRf3fAD
zeW)nf0vLO8i?0Ir!)gZ8`DXxi)LW5w(CYxR^q0Kj=JP}?bPXdU?60+N4;?(fV?R|q
z2f4<w!s(aYuZY8a`$6H~kqTuj<O4c^HV+~`?=Ok`%7<JiH_4<vZ-+b@;Y~K{aMA7^
z4_}w?<(LYbsiWP1h?0M46FE3=r}+4ynwf%z%d-M5iNa-iKwGgHHn}vHuDRb{EK?+G
zr*azpw2bM|T?%=gF?RFZ#MgosdfK199*y5T+?@UHoOh$k^3%@+Trx|0S2eWzV`8-3
z4q=^E2$#aNfX;Jc1)q)=T&Fj~-&XZb*22Uo>|;maSSBJTzE@<@H5d$K6#vnpeFF0e
zmdYo)$Xwv{qty{xAe`CMCBWI74*z2Kgrt$kAeyUO;F`s~O!)g)fj|L~gQhk;f>1;6
z_Z{A~@H5}T_orbZOEXNIhhw1z*wkK40h`~en+O9tbgXtsO|MRi-pJ($=?~@;EM1${
zS+V_YW(st-|6xO=7-VZPtnFG>My9K|OLtB^nDef3Z+}lsyHa!&q@j(c|EZH7(u-bA
z3+=+II_BSzIcPSF2taJ6*i?Npwx=Ui*H?MCfuuI=Qn=JB*3()+jRqVEO#q!DNgEn5
z{U}Sx3S(fDtJ~zb%3wJ4lMgh~?1+O<9Ei(JfXUdl?90}<q&~C2NV5)qwR7oKct)?N
zNREael(oNxYguL$AvWQnK)G=#kD4>(;W<k#Z?rP+HhJM>IfN))O`a99VsK*Dq6A*i
zRHUmHSENk8$W>cg9q)bljNYnq=z6lL65__BZ`x>q3)_3aK2dT_rRG&&HfKJbt|Oz&
zp+fEoCw8Hmr#<V|Qiw<ZNmP6e|DeQ80sE06{|oY?4~gc1o891$J$V&VGEm7BS_<Nl
z1K)LD3Oh-qP%ajaTR`MbLL!)P`NzU0b<4gb+n-8)JFEWLUL#XvrPt;W?#P|_HPOvm
zJyXF&{!2eQ2T<_-X^Bg-=&KW=eqa9aqG)dtOw|H;Eo07h2b53etFU_bJHE@<lgYMX
z{pP*$Ay$K+yl<O2V8>NmOYmY}CRWX>i7K@K-vs(~S6LmM@w*fP=__3pzAYu8|ErP2
ziLc27!RkfWdb5#ykXv-aTw*21KN+Okhr-3#^IJxx2W$dxM@1OS`Nx&N$A?*ecSfF_
z@AYn{a?lowI_hCf^#~I_+92@h03RgXZ0=lZcmtyW{~9rmwF>W5!Ci8$+a52sZh5{b
z$XMNC0*d|7uy8v{CX9-`bj<hp?q1$-Us22jNu2vu9iIjtMPZkOD~Ft5e#%ws`wF^O
z@|NOrq>adU`Z?(*a#H!EKXqe4AxUpoib31fT<0f|t8TUd;qQ$BMf0ib*Yg)H3@8{2
za8-g=;iX*H-o**TvO;XH5W;ug=?UI^*<KDc<Wk~Q_>;B}XGsY-$_821uk@L@NabF5
zvrtoTB;clWJwLhfCLmNW2TH1bex&{?$Ag1(_r^-^S|FkNMAcG6ye?mMBOByiTthc<
z)?D_J#oEM;(S1*(DikoqU96cd9Cs-e5uCVhm$}1HVB1396?+O&ZiH-C)id{>s*ad%
zflCL!$wYV{UG~@tvrw0|fn9IMPhBF&crVet$6OQwnMbc;gNN&Y(qJg@+j1DLX4JmC
zVQ;zpiPuG4?2H}Y=k>0&D<K_LA@y78!}n%jp5N=V1JL`yi)E`C3KRhML2AR?frUBF
z`N*LCN>NZ0s&y2qt5TucQWRgRf!3siMLsEk$lxqtmuKV3(K45E&<4pgV+W_X4QIS_
z8a^C69NY)@nK{ni0zA-;!UOkV<twj5pF-p3cc;vpyu;k=4ykey8DBp!#Bas<>?i6*
z?+it9zY67_1Ba+@L~BrnojE?=*4fuRRAGcjk!UdmU2WPMZ)G=wI0*(+5|B6QHr93d
zVjOlzVAOnwQ`bHG2VcPU4*T?<3vj5AjRjem7Xc?2GYRa<b(oQmjv&Qj{NgV`LR@`^
z0es1A@}z~4>UTN|j_H!@M7xjP^Fia`8k&CQ(z4RkRT@n`QHz8`Bc2m->Xt^o_N$=R
zC7`#<qViat>W(~uF%^j<H*1BZZPm|4Ze(E6&$6|p0CewW>vDJJpd+gLV@exqfZX*Z
z4~F`97nbiwGO}Fq(82~n%UpsHH^&!0j~m<1M%>#In3k7hZjke=znb5c=(vwfZG5W4
z8q*Y~r^dTHn}F(Z7uj75BhOsw=>3jJqST~!2?*^n#VXBL2V3Q%3ukVYQ}sRNgZ4_P
z)p(d!xqb2R9fIknlh0G;Jhj;9XQegHk8xZg+$YLT8EQM5Ef2bCJi+FdrJQgp#{rcY
zYb@PVzT~>z<pFV3-+AuXdd}$84perbELPikxuzzlhnrwB>cp?Qh^up>nHUk6!6dBR
z@3sy0k7|{Y3KnAfwgpFWdDA~JTe{%8x%Hi%o2Jo;mr;j~Sc5J)yz8cWr%oDG$j6d1
z2Xm2zsZ;g%UI)n;TK98SU!L1~1TMXX_Y`kK3U}gD7dVxZA;U59oe7plq{p%D_V(b`
zQ}#E`*;3A8FZ5gpxldf%>#R59k|>Km5UEHmaq}?WcxB`gJF&KN0!|#)tEj9lUA2UY
z9J<L>zI8Bzj>?ChS}xS4lOr;gt%H16!%UBZP$@3GDpKZAlWj3t-xjj^^EsFWG<;pe
zB-*&OIPW<oL8WxEkzLoVxUu0#@Z8x=m2SOcQ5B0k@YX9iUtZYYdb5vr%m=^zhDk47
z)((R5IwMrIOpfk^UBSRKp>!o8yl1Sw8CiQu(BQ$wzEZ=i$(rXdWc|&*2GQ-~HZBEz
zUqY*@#u5~2KBLE7yyYZ|WW29b;)*n4)C{4{Ppq-}J!WP)s%Kl2O*=eXEbW-m^#;F|
zI=)z=S;tA8Gl4;ND(rewUjNzm4G_aI%{MQ+$id*-Bx<{Ls%mJNw%62MUg%tnEz7~)
z!7j9)Rw}QI?09=abc!B>>7ZXrnud4gMm~T?4NK>&&aiTP`>t~8hUUpTWDJS2-FOvx
z`E%NrDl)=#x&;{b*2^I~&d{e$JK3qb5G)DIgO=rXcOOixgPneU#p&ltcS9T|*94x`
z99TTXW!v#rHen;Rd^6*x7_E$ctIt2aXbIvwi}*aL#;=QRcv#q;rjxeKP1M~?A051^
zxm7@yGt|35&3B&<mP#(4f7M+^E)t`6UBlXZiOl9aM6glj$3E-}#ZP!qe}7lX;&DQS
zqWi4SQan>`(`$SIk^R1O>h@RJb|TkIRV>Y<B!B2@^3x#rpN`JG&A-)r<?p`vM{<#U
zUe^fz#Vf&LXO|`do7}euK6C0`$R@i_2BR`eJ&k`y7sLN4+*=eaOrCBdQ$vt329?-L
zhc4MoiOWXg-7<j(3<&icnp!R)>|oQ>mQ>2OAln^!E6krED}9~oA4{Tk#WxVDaIR?P
z$B(veGy@7Si|R(y`PKWTpI?;DwQ!)H$ceY{5_dSS;!bGhTmi^}pTJQHegDWJpU1xY
zCnWE}_m^<Jel@!)MA63|AIy^1GNlkKk##=;;-67EHXFuG>r(rish{7YU2lp+u3k+M
zmcD9tSG<!L+R;92(6L`r;$8ic=h~9&UC{?S4ivXrwcA(fJy9TCKDlG6*Wsp`gGl93
zkXHIEt5aV{duP(1$gVWEp?7f@buqc_g0XhZ`NjTbcg?naI=Y`8mU@#(AZ)KTc-BGF
z2Zch+LzidiD9SxCl>fAe@<5GIJ{RwfZv+fs1KZIi@%JNf>l~X+nJIpSZb^&Z(%h|I
zCBHfx2P4m=sL=BaVeFpvEw;DQzYg&xSo2kbPVLDW`y3+PU7}R?zn~oFsCJwZtwA4X
zVns*ng$|bx#WI^+dI&cqt0x-ourRH>bnedl#s)U_l`Dbf%Dpp`mY{}*lF2kylnY!s
zPBFDu2*n1ir;NSwg)aR(!>+ep98QdG#-AL176N{Ac$?C0Hz?2R|9%9GA^DtXhI?7X
zDS40U;TU)Vi%Fpm<@C)d&;GkBCo!qbz?~n1G6OBIynBU+u+*M|@5SEIJ&C~H*n~oT
zZn?LbVQGt4<3BU(N1k^@y{vB0VM0L#dcw5wbdK_cV#!~U8up!x=_QTHFE^w<pKTkH
z>f#a)p^n_GKUX4aDI(Oz=5sJnWh_(LToPZ{4rod7#vw%BB#$|h9ATlW_+_^U9z?P3
za~E@63;A|mID&uVs)LnI)K<R8&2-;(*8AF3l)y6?Y!ncJ5pqi@g-?-#=5bJ2e#X^O
zUN`;1V+}tvA+?K6xp(F3rHKb1fqK+2RFVQxF%eqoPFBcl$(`F%qV4Z^203ARox+(`
zrzujyAsr}V@@%6X?8A*xRh5kCyDe$dbpzhuuZt`tVcHKHep>@^WpiTobq!E;JUkC*
zZy(@N3~lSGSjQu@DNKB7P19`~(YXu3L-t0BnJoL*{B>l-lMfG9U4AO5PX^?5#N1c8
z(&kf%v0G!8RCS(cFqb#a_pLOF@ILc-$=sxLE{~exi#xoQH(NELUxPKgRjWSL)`=-c
z2d;Q2L6Z-Q@5Tg%QA$Ujs(EAWDLSC5g;S9K$Oq9LQ?l035}7X<gWYT^-YVKNjL~a%
zJ67h;-}9NO1xtapYBn-8ySSW|`+5L2gY!*OSJ2)(k~0&>rJ~+zioISRox>!~585~2
zYcCW{8t=Vt_85*}hOIpzb=zGVBfc9%d>sg>33-%nARO-8cLmx59%s2M(plicGH5Gs
zvDYJ+<aa3bFGjObbmDuKpJ<v48^*}@j%GnpU+&I6GSozv{riu>kovar6AsrZ299Ku
z9EIqtt5rhR&BD{RX=M*jZe8Xw#S_gPw;Q(W_96I&i}9sQuHO-w1!~had%66zs~Z^g
z_2}K{5>jG31fCA;ZKp>X5I$A4%uqu!C~x`MekI<V<<M+S$A0Lm)t?+QczEs=O_tyB
zav4JO2otP|8s+<I(rXm$^lJ{l-rj@xnyYO)<Bh3nqXcsWl^sU|qG?Az6e{?B;UqSc
zvAuLwAE@G(1`*c7-te^ShO$Vne?i?G4ePMFXlmcF>4yyXT4vXEn4f92-6q(2L>r;_
zY%WV>!q(Ym9E->8W=^!<vJvVVoW>FO^z(<@n&m?<ll0j5ENllR2+GcItu$6&hjP~g
zev<w^;1$g6GOPBl?l$#Rh~&kHeD!&5<CCyp<Ritx!di-iYzdVEne(%qOtw)vFI~Er
zwOisAN?&L)tKI60x^{n~C(G{VJ{?Z?-vf2|Kzpsn1gcG|xe;qrdz~(P#ZcKTmDp+O
zu>@XAovfXdd%ktmP?`a0MGtBA-Sn5*L8>j;ji9Ec9#=;eOa}+q-<~zWX+KTfra7tJ
zAn{JgD;{oDyVzKj8#vHi3P9(_8MZpTZRVB+RDFk(tJ&|n(l^@Q*VgFp!9uT_Eh}R|
z+PaBDNP^XOpHD_YRjkXj_+XMi4Dd`jKMbr&XJ@lMDf$WQV^Xj4KSjQpsmuPXy8>zr
zbF|oSp+M)hzvu7|KA`0K^Q|K0S8y2D#moaMpq!`s7Ft9?04B9+yW}|72)bO>5z+H@
zgz?_zfShzsV>Yuou11~vvd6Neon_;L!iqH#c_Dh|KB4?=hx2;uN^z!aMev6+1I5>c
zKJ(kEx;sGh{Mv0@RAZAudY4{~(U8K9XI2cJ{p_P}ot6hD^3m72cvVeroyLWkOA4r-
zgL}Q*)N~yIFdpc6Mhv!l$Z-LAA#2R*Dwgk3^Qb7}PHFjbQYCYt`$vMpG|?_yNTVgz
zMbm8ihlS78d}z^=Y^%rLg&9XqnXF+3iY^or4V_B+oy^}8Tqr|!&bx9BH7Bm*Z@<Ji
zi!gB~oaW%qyz;dKIYxF|hGwfIoy$9vah*0X?Ok?E347}VE_jC~&arB5#qD!okgrKB
z^6d<)e7@_m{B&NKnouTxH{0lw*Ge9PkZ7T4$B}l)?agngt6g$wkyz=(saBZLr@cwh
zUKpFfzD5^fyFs-e>QE$NxPIV1_3`VM+xeQ7q|&=><q+<x;ubmxmTwNi{ZenK^($Yc
zj$DIa^5mFUdbtd^5LsABM0`;7y6DVjph?5Z_%VZ!gjKkc#UL(u$m0a)(e2kxw1%2t
z)}~B%X?_jV8}m-R!sy2L(+kni4Ib~73w$mnN&h`Qo*-3fu6vrvJYDwl+3Ob350c1Q
z7c}UXppj+nUc44L-B0ITPh$_xFEii&z75eT!bEht^&kqJ-Ia4Q@YzE5l$I!NNKP=g
zK|WMMR#&8HI6ij8-ED9!PCT&r@Pf~ME(2*UkHB*-Q{#TeaQK7{5%r}l8&+U|I7X)g
zLEjVWt&_6(__EPhbd`{*3|sf4rMQEx{Z3k(<O7kiXXWI;EKju;c%+l_jA5dlyEb>=
z*?N^N$@kGpvXh5IDkIK78AtCZ1}ZW7zE$`}C%1{vr}S3nRfl`t8mvK5JY(;J@Eoqy
zNkdJWi0BZv>RxT@R$NpTBwr(*?eMGKbhlWqq2jpdDT}5@1R5$QaLC_&b0Yn`1R|-H
z{5?A-uV~l`1>vgY9`4g+L5HY5*mQC|#LWnJFnbMYRR=Fo9%dS#{Id9S-UZ6Rv~Uq<
z`cT}ZX{ZFVNX9c@e9^`3YcCdAjqyJ3yS5y2q{Xpv>7$p*a<v7~pJ0@Br0p)u)M{-h
zn&sWbo30knC(@n7<q_quavs^D9vEzZ1YJ4RY;!&E{5O9twYS@)XO?w@)_%BnHo#bF
za*pMrh9NV?X;{u(V@YegSI;vgh`ngu#U9`2yE<Jif>FM08<KjJHX&-rNo!#&O<Wy{
zMDDm~HM^>u?xa~}E+=yw&K>l$4t>|gKQgS*4LH0i5t-Z3l}}!)G6A!0>C08P2}kgw
z0<)!^@21V;W<2*)63c>=N;~-{5yd>GR@n-lt-AUaUjJ?S(w#9h(j|QvPF(7kX1e`0
z%2;|v7;E3RHg(-?y0E8{S)xaeA~sz^J}a*UB9&~ftL1;VQQ~XqabbouS!S0)j8lyt
znubYR>cmBd0ZhHV`!(*&(**@@&Ik;w&Waz|03!1}58<~YD~(sti-#DgT9`Nl#48<f
zS?l+754C!ra^L#4mf)=C>GZTqjSkCA=y`(X3e|!LIb)p0@OBOs!%efmDJ^AclMEer
zMy@MI-jHAC`m^TpmscK~A?a>d@ZCuucRgeEsvbd)WK5gZbA{A$7R5@Y(-m7iklqT9
za5lvr1z~ciWI<AG>PS_ehGo7&ot06^bXcjwc@Lr8C!{$u9J;XX6XkQ4oq)SUzf{&F
z&==z<j^mKs(hOdW^4gT$e)j6B!Agl7VVE-I@_B>}uG0PX5^tUE6*U9kuQS(q^O?gI
z^D!DpC8&l_PIL=?)^!vrV#W@sir?h#JDMCb58CAV15SMkZw%NDIC=J=Ur87{NFD7w
zH|r_E5PXK)>aO<qD8ip*B8jM^IdE|rKC-v)ts#7?QPg81eXV;GKf8GrXVkJho7~U@
z?=aQD(wrp2!k{u_rPx`5<@Z$MPTAXtNc2d^#s#bjCU@Kwp6wgIyDRpx9`P`l#P5?=
z(=zo*MF1ZC0JyutuAbl(b{xac8nJo$;J6CHAT`gDGyTBuT0W$b!r<=C+!u4JcB$6t
z$Z=o?n_<*4MoVP+p8oJYI~&1!|NH|-3#rxw`o=l{LD@q(Suh%u3Na2ZRQY-2<e#Yi
zU_I|zNE5KG#tF%3xeH~nJw|UZsU5Im=<Ts8zTk&<mR3l3LNfbC6g?-5a70m$KiQp7
ztV?2cxDesZia=)eY|P<%Uih-+J4)ZPqSe6_srB4$cRhNQu*3=bWiY*4QTe2fuQWD=
z=Q|N;Ut0Ay$9L;|)QAz5obQ@363#EF>q}Hg-@@ItKs5tT=aF2Q)S=^rx3ixdjAt8N
zliK)GBRM%5lUselDN6)qZvC%+kyYhD6z^L4-gBg#RkeGQOf@jMDq)#C)JKT(;Ivyk
zzBqTl;BmKBMm3|Nj0y<zo16}8Ke=yP+GC6t`hHQ3{s<`Q^E~>IHDq(Ef}b1e3vC-^
zUFy4*IEG<m)#9meCfG?_g``N_yalPcm0{&CKTGQMBD9@sse$D`U8t8yoVLFh;ip&{
z>6V?>{642UVwhCp;>HedHQm6wcrXx|QU^y}1NlB<>78g_gD-RT)%8ceSf{I`IjLr5
z0&*_-)kh#`#~R#FU&ZccIu1^1>hg6WHQXtbe*bY!vvT(~z2sVhFS83nGYKn>BCCC<
z4?>ofwvBxMbzp09*3Dhgk9;owfE+mQTD(in7c%$Gde~kCG(mtPTD~TQsxV3i-ck3n
zsdV3eS^xvR_%Tpxn4(qK;k8EJobAaq=uW5z4bh?1Kwq2oP4;^70`5+Ci&ks@tW(9i
zML#ApY1zKzg@r?3!XghAS%XVciY4o}h#|bNy$QT49twC?YAqF?A4n9$Xh^W=#gK)2
zYrF$bkHK>*Tbhn=`_|+6w^5%I!f|Z=q_$rXf(PtEe0f}z5sj*&KszsS#Atg05x!cj
z?srICQ-yxtjR>3yQN8RMXObL{vs4wEj)<J~olAO=<RDJJ8Q&e+`n99C!ukX=sc}wP
zdD}aaDKEh67`vQ|R7#Mlzr((v@`h}p!29lSh(PuS4y8jGOTw{}2J(Dm177iI&iA>2
zMDf*TYEsD$ESz*(N(|RQ8W8Jxh0fp_;nlJbtReXmmNz&=jN>gjQ1zP8UvNuHTwTXl
zP=*YZraqbTj}~zjR9G%X*Iv7PJR+;?4E;<oDr#5qVqFxFYwnbt&dTua?0C<9_;&uV
z^7Mm|82csgrwHNIivA!B$yo9lzsk%(STdYpzTqe3#vr_<ym(V5c^M=1OA)=r0rd7t
zsTYE^UjWm8NKV!gJU_IC@@sY+4pV*@oc0kF2e>`AU=t8y0epu6_>RtiDE`+qYzPBv
z{@g+_xo1PEU<f*7`ZIP@$>+x+0U9lA+^sZ)N}B-p!|FVNosi0k<^7uG;icyEk<wFj
z_S?&!^6nHrwuavJ4z_W}eI5g~`ea|aO*H39tjadUq-lmMH#fA_2Cusf-oDt#SdMI^
z23_XkT28Y-5*b;r1U)pp`4$iMZey>-;x<5%M8j;@$6Bv-K_6}Xqq2{}+2_u_80b)h
zrmZb!cK43i?<@@ThuMZ%*AJ-%N(*_|!lvVYnd+>4XFmP5=dIm%jR?FE`=}MQUri`<
z?L*2QBj?C=i~E8KQ}4+&dFZmPtb1zWyKC@HC8Q}J4i<-qo;<ZO<IPVmi1Ws-3V`82
z_g;G%0tUoO5xXrcd0wC!X~*Sy*YDzZ!`8#Q`n{!%{4LxNOTtW|JLtwyt8HbMNppkf
zPL3d?Q>o7Z+syOTCri!DP&p0xH^%i?Qv-&4T!_H~m0EKP&a`!xH73Xa>4caP0pA!t
zW5_eaakwvc;NF9k;Wnxo^<xazd+K}A^Iutd4-?HC04H+2r9wKkp?>bYW+W!2=CFa4
zH2j6!DnQp#4L|*3LiQrpw^GoaW5K*5%Yg;nh4P#Jfvj{1F)c)|$~+y<YL&gg3H$oW
zOVI=Mcx_KzwohOpH;30l{M{dm)i);3)=Qn{>V~RpV+MPaNz}YEw|%+;6dNj<udKR#
zm=012IpROx@GZM{y`M2|({SA!u2&lj(K_nZJH7vWv?M-T{v&(aq2Eyovo$eLO;uex
zV@Rz)Y>};$MY)Ob!*F2;%NS;3Jid)FZl<{>2KHeLc-k}0_`L;L+GUIW%vW-ACDJ~g
z*BLfEBF+Q+4r}EG&$43U_>32w&e<njljSz*^1&RlUI&SM9_LJAV)is0H{2BQiAIZ0
zRq?J9Bz-P#`zUc04-9c};CNVtq|GW_mT(#&&0>K_#Asu1T`6u~GM6&GyqA&*EBxq?
zAF3a+zbwl9-Wm8Z9l)6i5Mb$Oz*^XIg9OeEOrxR%iYI~UB{b0J;s{3YY>hFrz)trZ
zL8c6n2A4d!K^S>=DJ`_rg_8=?){`|&xD-!EQ0xOonh6417OJsL#sH)=dyv$ZF3UI)
zN<PQqG^eBx0@sB~nQiS`G*YDz0|nZ2)Ev|k+IN{Mt$gRUUCiQH3=yf)hMO2OjbBJ%
zDDyb?u(><0sG|fVHfl<nuG$Arw96ZVIzP^Y1$HXi3CDkOMM4U>qzDzJ$obu}lHH^`
zAeiu8Y?!k;^oF$8k?yMzb<nQc#aN&?G$E*jpwt4$HvP$a*8wbX=m6*V>BdKiPr;~O
z{3rBMq{m)0hCDGYt1K0H(My5{e5^$*as{!o+Z4kHhay7m9ZsGRlCWukOFeD!=jvst
z+;~tOZHm*%gzcHAc5m8B2Ja5J%}l6G9LHWOEu8@+<Jx|QX>#3c)k%WQ?X?d~2mvf|
z=(Mt$Wo{`9%1f%T$Qvh}zj!qQ1<ZXzoI-tg{U72%&L=;*B)w^utI}vvyWsm9RWbq>
z(?F)%f-cRLySpZGDMI(RvYT&wH@lE?zI$F8Y$a;k6anZ@Ri;&j1}5SC5By5x8jVBA
z(aY7`SZ_&+yoxTQTF>LDg~V%xI;LX;is3XV1cx&m9CChi2e#JJU0Sdgbl7M9*R(Ai
zBVMf`7IOb-yT&@SZu(_(*SkSF`Lo)qxKMfMH~)8r9;pb|zH+yGW55R<Ytj>S-}9{v
zMPfI%;z%FN>)eJtw>$ZiH~F@^sOt)&JB@nfWo;*83;B;EIKeuSw{V#d$)}l5EoF~(
zrhQ#TMa#@pd*z0AnD|(tx=!dBf2{Em(jFQgO&8RQkY~telU4;KEYW7@@DK$V*5B1i
z<F1=#GA&MtthSf04m>NtE4f_~si?LYaXx7q%3B}T_EGJi&^m15z$y_1s~mFD(gcG7
z$&i&@Y%~wJN4ctvz1CY?9@C>$-hOeSCb57ZjHT|54$oOISq$xGi!%%jwY#r-!*-S2
znKwaY!k-&$U%Yx)5Pev<@R2LbqHx+jUVcnoKXRq~l{2$yPmAnm&4g-}#r+fLp^>W3
zG|o7-qznm@v1vDGrCIQ1;G7L6fyck+gt5i9{fPVJO?C*iA-Qf+*GlZH4{d50R?JsL
zRFL*a2xXe)r!O_o^s+%m(i6wqlgtlZul-8obTwm>vJZFZ7Rbp82)X4GP&XzmKvXp&
zm%4|WS2k;GNvW(Hj-{^MH#@_q;KCc7yVnY_)v8z=w7112bZ@&3@1mZ5(~}O)s(+U9
z@*;A)wt?fC09BE_j}K|KO+g*f_G3<kOcpSFq-VJ)5xmP$NG0V`!$$;2$300#mwLQF
z>7XUM71Y$$Qx7EhCBABEK6Usn1){WQOd9y{t_)aIXA*ZCQZ1&q+m_3^JqW7z<p$Um
zeFu_o4lgkl6ttU3ss)KjDxxB3+?UVw*{8KPn_tpC1Sta4hyvHxQYq$-B+s010i=#n
zEF3U3j3?-4hIWM5c7dNsx-}LZD-~0N+&oKC@xrorgI*oz_7ml_rP}xeyNDs%X)4`?
zl6q}N>W3uJPw=Jelg(zn6C#((3c@X%x)~bhntl5B2sSzkg1*i5DePr9;FIFZ?1jlp
zg>OvW9=ls8XY+bm#kmHfOch_<TVn_H514RwGDfECdyIXb1@W=tfOUw<PfWTd8+J}N
zFV1aPm>7Rb?e}vXv{?2IIe)Z|KZAR&q&|#_qsNTCF`z?KoRf4nIyjvHP2BpH_Sx=!
zjTw6J`PTZK0zB8<cu)hObuPc2x~vBV>=cJ&k-fe!pqV})=&?ByNSC6m=a@bhLSW_O
z4!!!?kepQBA9&-%0(NRn6qPL0I+Ch+Q@hP`=I+FKT0=dk+cClqtP8Yn89dp(q-%t-
zpR@S?*!l{nsM@Y=K@?Dt7NteHyG!ZrE+wVAV?es4L3-%!jzPK{q#L9gq#5!*;Pd#s
z-~0V*4YOD*=A1eA-uJ$DT>ILJD<DwKGZW&JLfG|Km!xgJbplLYTT6Dxw&vjDWF|Gm
zxfskQTe#Rxt(34T9!f9!+xVs0Y^`}F<ruegR)TlurIhT6K)P>uZj(SD=``X4`ZG7i
zn*)9X;0?0cc+EUn6j7|(^3AIGP_%|~ZPXd$9CXHK>Cs?iELS{}OLg$n3F+SdVUqj!
z>E*CQ7c`*3*LuJj&+Umx97%R;XAzA~qVzQWik$Agruowr$ygh81MzF#>B#0s{a$3r
zMjKI{Av=eLWOI93r*is}YbvC!^9e?}`af%qq(Gp_)gA*N8>&ljcpegI{9MT?+{*ej
zN$>%VnQXLrw%^c(VXd*{l6^yj4yDL<3_1*{jhIfSrdyu|{u4;EA*vPup5)ub0IHOv
z{;PScm!Y}KGtatQNOxfVdQ?a3WUsmexSTmCuq$sVu|jS#!wbl4ewa><D2S9b&TJLA
z3&_e@!QzX!DS`MLjSoT9v(+2gvLMjh<#2XeJ8PB2W<GJz*cO27T&z{M9}pA<t2=7M
zh+edJW*u(ixzQ=`c-QtY925xjk?U<?;j6Te?}9-`BHA@UA3isJu2Kp<rhr@$us<Ph
z;07MwQ7-HaS!+t#{8%CWMASK%UUBUz4n3EL&DT|&lKUr9pI2!a6|#>YvWMw7nX>bN
zdQNWlxZ}>73V0Dkd|vIF(_pP=I0b)#yL{Ob?Z3=`rTi`{{3QF;H?`jZJ5b_(b82W$
zff?H<kCj;;27V6<62}SLVR1Xa_Kf+2lr9|J40}KKyzkb9lY-wlV4Jg-t7oPl)d0~s
z`^BNlW!M=}$Ca;@1=Y`s>A!#m1-|}HpbZ5g@|EtMK$Nky_|j*E=2{r}NVWHX#<o~A
z?;~qTMgxj_^NHq)Ksr!XzsME!x%SeYnLqX(IPMdSG4(x|!7M`E%@~_vgo>yy^|Mkw
z&Kd$e=kh*Hhs#wayY<8YB@sqr8M?ZzRsFDO(PL<<mZwPD-qeHQDTzGlhZK;6-#l0s
zKlDT@dI)*|!8~yBp!e{Rcbi`sriV1rseX4~g?;~|FAj%9s~Pt`ZlGrl!h?%wy2p^k
zDsJV?1YMPR^5&|5)g;dxLCb9M;9qmai3FIdmxZ4n_|-^K1aSfAPM9nClRZ<Mrfc@|
zCv*W1xdTQ6Wc;}qF+4(of#uYA0yz^eW>9x!V({bh-+1FsI3mbkUk?S&76bDkc*s%u
zTiWUxhvhp<%4|e(C4AVWJNN0JM@W9Yg2Lq2NIinXz?>*x`Mlo?7T*F57{A+qMw~}T
zK)wRvHNGhm5)+j!IA5X=>*ZScSj;ne@X-1$E8Nb6EL#0$&!zRbvVKS#B>~SB)#SSm
zVARQ8pb82O5q#PsD<?y~&GS?0pu{vYg^NnrLEEh}0<Iqt#K*e%`r-bO-kn$W)G7qB
zQs9R>4r;^e&~=<F&(pEsw7npL6=^Ofyon%L4-lyPMb|G=X3ti-6ooLO>fHLzF3~}-
zW1fnk4$OCU=CEA9Pr|>`gdx@~ZgN9@YCY8FS$)EUz2vzDk7l_9$7Te!bifbDT_6Q{
z4+E5h$CNm!sPe)-eOamc=z%@~{R1FhBrdegrw?m@4acDh>OJC75qom=xA7o|75*>{
z4k$Af?^szDw+uQGDBoYu#|Fduh#|#cnEn2v!o+YK8eT=*?`$4z{s+Kc8qUW+GCgaI
z)cH{E@+r$^OF&g_hV#@z7Y!%HqqTH<Rmz8*q98{cqvLgqZw%Y}n6TIZOeMNBh=9A7
z)5A+TtnKKiM_X-9+Z`DtlC+^T@K4+>3y)rM9U6M>XTSRy@7~ci#)spehm>C?+vXuY
zeMtS?Zw?zjK}mfcI!fJxZ#~_(fYTmu@3cQg;6*QO4e7Ojw9xsE+1hvqBwrP9CMZ!<
zol3YnzequO{U?*fa(_w0IoAg1<KA-j`=$KzLL%@nGLn=3FqcvEbk<F>pwZF)A4%mP
zNcZ#02`5jWi)0^JpRbghEM%1|uw+zw&qF!av0_0AZtpW@fp3N`L>#K)Wlzv}U0c;;
zjR$h^`TNM;ZPKKSQM3@eLIx9M^6)lkzd$D6wim>VywYPsi-;qYE0k~hgn~^E(fPK6
zly7s^kMRo0CD5m(N_-Qa+{=fOSUzd3ImQO&2z^HO7ksN9Drlui7q?;Q#77x?jtEFO
z@eRVZR?zDC0faWEYoozs_!~Jdx@lq}*Q|h`S;*ZoYi7IE17^Dsx!w*Y62G{~KeY)A
zdi*1sHb3Oz{ENJu#+ty$oZM2_pY0~-fY}T1Z}_VSQ{Pq6#N0%9@oLGDw_grLBEPzK
z{n}7`EWF6qE*3Q{i=+Y;o$9Y=j=n$rcWHg5$Zha@uIy>>3e}oQz8nDyr64O9?Xjx%
z0miY^k@zh^T;k2`?MT5(Jxz*cCFKYDgV*H0`nOSo`SmZP+kXD>_knkKbjqQ5@h5K(
z;j!P;SsJoN)K2JdTJfm@-@cRGXKp$;HW5FH-EpN&%!1*^1W5iioX1HWpo@3}AAwA~
zkZzz%`Ctd{m59+7nYK)Q#qFdC51O&>1yx4AUpxhb^^~u#*jB>T*Yu#gcd@Z=3KTl9
z2p%L5MDleYesuY4M_BVJh?~nC`)~UPps2VH)%?_&iBq6t2|)DOSd{?^9b(3V?34UA
zBAwKC&l18+<uONB@=HSVQNC|vt!IA_1LQywDrl5@e2d@KGQmX~`*4;#>~1P}F&v2a
zR$rh_cmaqq+=)<gt?=bDpy1H?)W?;g<H&kMta7v7f%`7O-t<&2f?Q4mw}$xXcy`jg
zjqpj5XbV3od)5z0a*h5tcK^5!uj=M&rb(<?!sf3}1DA5waq+3W1!FN2-Su&eu*pP!
zP?Ag>F}x*<sH9Qq?buRMErv$mW^7VE7z7L-UMJWOyUnB7c6x{ou%WX%0$cxTw=}v>
zwx5-z`Vn}i#j>#BAEOfF1wWjd7oxtF?nO<@B@h$M0tOek)iFJ!kVj?P;>L++i}P+=
zG9Ul_hND7%3NIdzqEzQI?4P&mF@NAnKARN8msG<_A~C}LqI6t*X|fI69N+4}W%nON
zLr0jSyhA%+AbI(Q`$63Ie`Q2Lh)-x5I%>+iw8PEGcgab63Z5cE>Ldh2HI*nVK;~BX
zIXb^VDfKLvS5lhm1NS$itcS}n${-wZnY!f)B`oIZg7-5`0a}CS|12SJ;Zbp7mK-1I
z<3-zf-yewo9)H3VJ}+MGHMr0#eBvK2Ad2K)sm@op&DkLTxi!gXg!Hh%yx+mwYpa7h
zwujIavHmtm07oxPKT!_nP<~MqkU7p4+Uu$RlR6ug@K#cgcSTo#$GiFgedo4gf>?0#
z2vItcBp7!sossWq#-l%#fNxqEyvZy0Frfacw^G8Q!mSogKjbwp9ODCL&4YOpLx`Yp
zZ&%=ILBsIeWMxE!uaNoZ1gB8Bt}tF%m7uv`Fj+tuov(OHX7}`$6hsAI#AR6JUJ(-s
z;hzA#8T-GrBrrkM+dcyaC-{`R*bfQo`=Cz~Io8-ZFM4;r^pcoJwhq5}N`(LmXqE_)
zh1b{;e!_L@Ii!~;X+OkLa>9UNE2RJw;oY7OL9=6`uHP-ok~#p*2E>&}gMD@j>5qGl
zcJN<G{_Pv>#DcShInuZ%%jTRdDAtY31Grn_ex#seYyZAm+BAEG6qgm+qaX$wEQv9y
zJHNdyJqGZINT2SYNU=pY^SXkATSgHeu3^ax<_?XarK6oNOv%4}j-7;XsNp|HrsbLl
zr@Ft5|EY5bI-sNRjm~Kp*xsI`mDSh!F-x)%ee^Uy7!u0?b_P`h|54~PD`Z5d>KV-Y
zw-^rPqjwjyLX&`D%8eC7Hvvo91N);lliDpXuiAa;&A&z!I8PCLU?OFTs%9}otuOvF
ztKqZx?rZ;<aRE7j-n3~F>xSp>+I~?la5rm1m)HgO@?hqeZf53S)Uz+s!iNf6xQ>*J
z54I>6UHn&>BKWt~SDEVAD!G!?ND|p6!Tc%FA09eB?nUmS{;s^)BYfwr<wK;7->6=1
zMQ|UfllTjw_K1{Ooyse|y1K2*#-SML9}+8T0)5E#b{vh|4|s1jHMOTkma69wNlh{1
z{PpuApPiejkN0g-XGlTq)`T=y>xL0jx8(XaFA^4~co-N-{<ZaRCI}cS?pui?8>!e6
zl9t5{(pv4bKqOm?A>J33Rpg~3+Z88qGGV>_d72`Wipo<O{dKrOgrru(poWCQ1RZv4
zA~5<Hi@gu)$wzLJ2ETg)BS?!8WRkO30TU)lk#k^1OsA7gcA4^h3iR#x4p`Hsk-x_L
zccBH*;H8XjLZdO=zQi6a&dsL_MejZaJR`JO1m<TLn==9`ifc!#l6^86ED){t8fylw
z6kx~I+nFj#T#@~2WzEwLu2|Jg>*mDX(C7U@o!GA*ys8S}jIRO~+U$X!UEvfIk@&d@
zc0<UxUqAo%u8)v7DawnlnKt|*W9O9J--L&8zbM{qbiDVgf)L=Nwa=<RCE3yb6-Fwr
zYWfAZs4DxTO~)hG<)PXj6pK4z1sttv!TTeQSQQDsi@p^{8LfvKWj^SYy+<4G-K@zb
zu9(!lJ^S-Q%S0H7(fsVSv{UMin4tHM%i7kbwlQLIkSx?tC3G=@{T2bN38Q$Sbd0gJ
ztEEBHq(3;uz~3j-Q_0}uMAh0W+{+bU1+1-fbQ@EHa9%80SH*xeC0QI@&d`QD@{@{F
z1)A8PpRfLXK*1Ln>QGgXZ5q1TJM;a*?8e%h((Mdj?6aT)T5oEqIMJQu8=bQ~3`y}2
zH?|})2T;1k07(>tnTah;_RfjR5>%eVEE$u3v}>X1A@Q>1;>uX_E<qJ{7jNJhKJ49l
z)O&ZNEnSd|;)FA^7o<a((CO)dZ6XCK{6?2MZHD_Ggg;MTA^VYp{@#a*bfkSvgw)9j
zhm4-^Be?PS;-;`5eA9+PK|dr=7DAp5ZDmj2Fi_gcdub+3d1uH-$R4a==a`9`aNd@B
z-bKQFYT$Z8P4h?(a>sb;+;G*nV*Y~V{uaQQ!948^Q?9*uUYGql=2x*s@grVAKRL3c
z-0-u%URQ36;QMa=Z*f%}jyUX-y32n8AZa4F!*7xXs1$vOQC$)kO4T-Euw4zuxxnMC
zYPnSfZi<scWQ^mi*vGE7;UW&N%<by<MkVkjsz-0@uB*7|(gp&*ExI5E1_fvc<a=$?
z)gLkrKeD!`?z?W+O~kA}`EI<B6I!<$rVPfPP@L^UJHL_-ombsCZ74o`8T+Qe+B?5t
zzOi&(^G#jYqAWMpD}$y1(#KVt4eyDadsHW;&QGTIY_Bg}R5ugsYR3e>7!U?U+_B@^
zg9tB249kw!Ji^IkhY|BVyci{4v{{y1A{B4g4wf|Z&h!!5+Yi*&B?nJ2tSnd!Jsq-l
zXJ4ngz=KM6s&_BiJPrM5f6+9bCQo`j@3ou)nsNSVETwXM=ujVMkTZo8(SY(=mjJm3
z|J><n1+(b<%p)Q}x4ZTeVRE^|o9li1?jCz8#{kOP)fYjoYw6rSVn$a?*RZ)3^u$((
z_uR7r&swHsRIHtq^sm33XNy-VX!fBDgdfSxP$7Y@iws0k@z(UH%?lpaP~F%UUB?8*
zYGXN#4Dac}D4z8@SWU``sxNJ+!V=O&u!xAOOywXvYkK%JO7Io2tt*MM1m6#LYzKQ-
z6wJx(Q>zvt?efGA^DdiW<3LTb7hX7>;<!E9=y(FDgG@w=GgDQF=T0=tE0aqL{At0O
zz8eiB=pG@ErQJ76)|?M3(ligONZKuAR?Kv3mm>TnSIVq<757I8e0z7^QP5zpjdh&>
ze}$Vh(JvcOrw{=KlnJS^))@&goqh&E7U5>MpTIb*`TaweQZ)l$J~`XG%SyNzQ*K_W
z<KybH=kAXqn2!A{Bzr4{UucfuTfE6AMIm^l6{f<qu^L739hU65=%c$m|6_&|?~t@d
z0h+WgJGZ}=$|~RUjRjBQmmzf$&EwCAblZ;2<DwmVXU5Te*i^Aj4v#QJL)lTw3}m*-
zTapZCnBK(l&boGgiE90123jlcN()orT)&qv=lYr77o833=G&)xGc^N~ZOdURg&QUb
zD!n1D9?r6LFvYc^k4zmz*a5J&{8$H>q({F65-Q6KPGD-=TWf;j@q>pRA$LKQH`hNx
z0w&KU!f$Eh@zyN|*4?f2*TRj%4)nkUmJTwOn3liw%ptMy(n-&0c=c)+-YYwPK0(Fb
z$zqp(<Eiy2!h{g?{<^*u$_t_JBuaJJmRKLJ1(Xv|On$E4ygkQr9<sm)4QoysYJ;72
zTkFMI(23Y}W~!%tii9gus^ZtRhM%P;zZo4Z7C0`Yn)Xz8BB_tHyNUMIG%aHsTW+%4
zomEHm_G-0C(jzut4tMiuqmZ-+>l<(Em$Q!VV#OJ7taCCs&oHaed4~>pInr@m(&YAz
zc_Z|^0GK}|6<vg4)iPxhW18-rZVjwl-p+|Pu6Quxh@~q3qTa#!qTbdY?9pXeH!o^F
zQG6J#@8EC}0nk>@GaAs|dA#HJal-l}(gxIyXio`x%M;8KD}>jy8Asd?sVbw(=&XLU
zZjtNRQkUz`jwpZI7wolvDmo~n<T%g;Ou)=81S0?IBU0{BqvWB*F_{v$SP=HW2yn{I
zpB|_0Xqo0u-ul=La=l?a_qYnIaQ)5q!}r7xZH*|RA?e!<b3_AQ^2bTo#P=3u_n#M+
zycBHV>GDR{U^x4d3p@hPj}9)YlYukIi`u8{g_)^EdVTmZy*JB9u2#z?nXfUpqZ^V~
z?{0=@xj5vP5OFLZ-gUFocbui&I|6f!tMP)CiFLNgdP|PA{gC$JVE~|2cVcDF*R%%F
zZ7v8)&3#OLM=cd__xp4*!u>}n%JJn@*;M;V1Zw`ZlvZo{K^N2jerX}Xy$QzKag0A?
zf6Vo%CJeGvoF7*5yr;$Uz3IlC$8LcV_wM;NWX%Vr1xqq61Cj`Nvgbp6me<<HQ`C2g
zF}&`eddEY$TR!AwR)V2p)4QgdsGg}V3PzmciTbXD;b|hSndTYmH$(QkLpQQWx^2fE
zZs{9#yv!yP3X_>|{i*5w&mazEBMi=7&$JL4Ya<zn7V@>z4*MZrL<$`C<u>HySU}Jn
z{M_$Wx2IvhtrJB9dLm3EBY31up9HfWfZHhCwZAlB(woRiwz0>k!!}ey;&YX>y}k7{
zj3lg*v#0Y66`{QDbRhm?CmQ>qq0A+?D?~}-hLYAcJ2m72TR06#GJJa}hj<#>LAnYT
zwZ;}GUSOe?D8^QV2WrW$r?NHH(^JfnS-x3WX^{+GE`5)?HNhh0&|lt9PC7u^wJo_M
zeaENLxO}RMRvbg99sQO?btUSR#=#|V1Ry>)mssA~*<jI$*&6G*w4OtE!oWQgeLvB<
z+3^}pfkfVsI8I4tbxWlk-j1xmvF5CTK(ndBk+L7(mP$;VUe;Yst#?l^78RfQxHs`J
z%*~cSU+*}&q-ohl)wrb1Rxw!z=Wf8(e<bIdf#R%@k`7(9`d1R%N+yJCt<Tv!42{d{
zCM(9%l@G&Q*u!0}({bFA(}ssTE-PbPhmcC}g5PN+5TJ%PLO-JKZ#2N(aGC7m_tTa+
zFl*~2eZ8IM@4ToL*fpO$9IW(SylMXN%QXV{FOT-ChNPeyJMl7mOO8BHQ;Om-1|@%A
zOR2Cqxv_BzZhq4486Jxm#^d|cCpWwk`7}@I+!-s)61@X!M$|AK4qxT!<okX%C*6iU
z+uOm@TjI6mWHC{(*2;^e9EhEwQ*OfdWBc56xYq(e>ed0R+}%r7Os`zd9UlEWZ0?A7
z*q5mGpnN<Y>*eaL%&ltTFX&WTAyx6?d%wJZ_~Ut)-!lj5O#`BPpW|16cVIjh6?DSR
zeIK-%xyVg9Ky;2c{iH9+h1Yf<HBOl7uXl|WgaMzd?JtavH&&r0bcjP1h%*o543MOO
z-QVU>{t%Ys#<tD&KvH{Mxh3)U9AXKZ{jHFrlbwrm3<x!D33&{gSBmEqtVhtrj1(R^
zz3)9wASg%`L`A%ut(x#;Nbnr=Bp7=LA&^KPt?3~UVmScp7a!L#f@nev?l4T4nLm^+
zUvWktt{xh4?ZEv{P~|O%g*J7>u}r+Y&;9MkAu^4uy&7W9L$>Jya{YiIdZsUuQQbDX
zWk%fra*Dj&DT9@B&47-1dN%M=UJ|3BEm_p+TD9j?gkrsTj955(QaVn4(5Nw>I)Xgu
zG2_%U9^fd@8pn;dUBd1<N!R=vL(?TQ>+7dh_6d*Er;E+wgUFNGQdRL1R*y|arfq^I
zZY~hvo|j#&J5yFoB`w9W`WZwRSUG->nRHD1#@rk4aVBAZ(z;*bzKO5vwA;bVEomDO
zt!2xO>M8Jj{f@;KegR8E!u9;_MBW?W?XCL-H^qwnanHd;*{L2beh$%fbuvE1Zar1F
zYG>DQ&27mA!%cZ8{9^fa=xE)@=FQ%LC3ls;bg$A#!}?oI`(J$45_7Y*)*PwK@u9%(
z&_68gJf2GncO8(v!J{u}iU~>Hrfh(m4=P!viC{L=xi9y!TV8D<jo;-5TCoxN3JzR1
zU$EAhCKn{kdL+zV3uUkm&es1(Zup^i>{c^q$^YGwzaTzUTIhyXZf{S5&a(J)PZK0s
z7^mcvYVB~n5xtGOXGWc&b9eCkTGz*!jVP9w#YL^-s$rap*=Vw199jVtBmT}2_=dq}
z!qa{8$Kn;4J-%3XiDJfCD#znmjrz|O=4*>-8xtcFVuZMp95wn|h^2NV*R$8>5QS0b
zUSY89=*gE4ll_p7v>U0e5j1Oh*5>Ad@grMG{Pw;yz)`~$0jrNmRg<1{^xCwMb2s(M
ztv`BNGbk%9&eKtNaJIwSGi`l5JF;AdW$44^KZ!_<K_tfT+o`7?;`hG)nDmKN%s^24
zaK%yNRk`;7;x2`?bI$cjLTQZMY`8Q;JN*(DbtKt3f{drTWxnAE_1uYfXzh~edD@0C
z$=LwQsdfF>tuFP_6@93o&bg5;N0gnXHR^?S=sQ@)mg*=!JpEBm-t&ew6(|1-R}v05
zwSIxpW5D9*H?hOYg2)%nviF=qQQ&%htj+Te#XP-Iiohp2SU54sp1FzD-YB^WGSgFQ
za^Us6ymihmI3;MmKdLAwP!@*vsAT#atsw4;@tL<?(D|5Mtu#{>mJhI=sD0Br8ir`f
zZ^ec#AN?A)5t||1bn~hr*AtdadTBY(98>dO>{qjay_U&)<0*yw-n~wBmXZSS!C@Vi
z$v!hNmTWsby`u*yChj`s<>aPAN+n~}eXhxD*3Jl)qkHwXgL_fSiFg*wMeC!;eF1Ei
zxfFMu-Pz#e(4fZU;L5P*3HzKUCWBW!*s~A;;cHKUpjDTAzmnVdr&R0ngU-d*h^13b
zp)r+;#>Z7s@UQ67fT>WZgAjh3w<Z3i>uS%=EU$}ejjwmV#N3`=B0htDCWLgk$#g96
zyyDn}%)6~b)mU}YsuXf~p6=F?UtPSfuj7HB0*)HUY}s}Hnz#LU?v^*C2C_7EJQ`CT
zjMy^n^{bg|?EK8H^ST|e)MYE)n}^ME?xtHM)SYKfpf=Z-UiZ4q6}7?4em2wu`z7iO
zsAvE%0lSFMEB_*PK<gLBFMp1B&3pzgK{&BNbvWz`64!NcGzDuzp)z8+JimFJy@<Mj
zyRvp1&%s<*&s+&{4l@15I1d=8_#%J+wHb0j+7S<KYDn^`uz;g$+*IV=ni*1BE6AHA
zDt<kWF$(k*URt{S;&)r3s8c-N*KwGyDpTz0%Tu)8A!f7MTGHcSv);+v?|x4b;m0sC
zVdG*!-gd`B=x_~mtK^tk%Xv=(UGfC<Sth5}_{4!K=Pi>*A_Ye}i=9py@Z2-b3}?Sj
za_76JAG2RIej!Ttlq1TGeX(I#%Z8wK+h7!IU<F#W9YkT*U`>~mPO>g0=8nRV-Ce&@
zcm?u8C8rAJ3VxDxlG;7|%m4WooWs3R&sfz;P<e@abXi76(%2wOjq8|$(3}zAdJFBV
z6Qj5HO=fREZEbX7nOgu&TUKeN(^@{g;CXuPv~m9F{tPd#0M2k8fym#ybpnz4d)Az%
z*A^={P1KE({|YKQ<-??9Zk!VFnx35|48zJ^qRl6f-A;h=>rrI7!iG)qMq;6i+3?=6
zht-kf%p1c<r9)@;t}lT>+PJ`+IxzJLpa=Y68x1$eksA%i$CRW)_Fm@_43gPj$V`<T
zEVxx#PH`rhsz-AX4~}oCW%<LQ*GC+mhslciRw(JCZz{s$>6nTDUaVbB&8t-Fk<5}K
z5gX}=h3iF!lY%;>QB`*%ZAG&uYYDcJ=V+2{6BTf?($e$}Ep>y}qg4D%leM~<@hv#s
zIyrOE=c6AV(eS<r)I#o7bZLsZ=-l<D&7q@O5w#iItHI%1hYn@S>u%`0j024{>3fx<
z*t<4a-+_;55(3i)Ik9T5?aAt)CALcoRzJGT==S#juO}5pb!Ts4>E0QcZ&)(+q)gv1
zgIqM}M7<V3IbYm!Ex@B<fwf%_AgZ&p6RDs&=|B(gsTLGn(h$9kX8bm|(l&CH+M8bQ
z@64H{>(7nPGxkE9xPN=_?0M{gZbDQbht%`uQ8f9#HboqulMtB!{_EjHHF!5YM70u4
zM;>#YGBsA!GF=&9%xIQoSfOdhS;<M~q;<9@1E2M<H7bGq3}$Q!e~&(%>I0dMA)5HA
z742$MRdS@fKHb!y0Id2gd-I4W`CaESL!W!z#uLPm9?RWzqW>s)fK%H-Mh-@=o3C_G
zvRaR6HT66b{wbI>AY8hen{Hf6eRhcD<F_=t<=PmgAad_EHg_m#1*UL+{_%~iRkliO
zmjIZz-Sjq>_D=V1ad9Mu!!u4apcvK6tos8lu9>s>>7H-E16^0*Gk811o#k}OgOm{U
zvxbWOD)Ty^1D}Ug{SO=+@S@N}034sNk;Ykt>t29ehGoq>c`?B76Z8STufV8!wHT+M
z#tVf_ZBgp6=YlXW&rQSSFvn}4q8?4DAF@o=Q?YFAF%p8MdijHUn<iGpMwOOOC=Bp=
zh@T>}R$|bP`giG4qP;le_stta?n?XlP+<L2{_sl>lvtOFO+n+;tzQVuTw*Oe(9S7q
z=LOPZFVMbn7Kp^9XS9bz+NA~7jH#a@Ms#t%nq%Q=38Pl^pnWR(#sx|AGNx?}tZ&}c
zXYw;8MqqizT)&^TQ2pqgrc1v-#>KJ1cK{k8$clz`t|Qyblrz$HmAtGYyLC~{@~>a$
zlO&YEJZs}_&%Hep@tiB(u5fgj5@2~mGeY1^bBWeQ1i$;%bS*0>p(jXYZ=F2}ni0qI
z0tI1Gg$qvyr8sjK)7~}WA#T<XO)83R<4`fdT>Fz9pI{GN;dgbBapn0$-@B=3?-91u
zF%zIS5{dB71tpl_iy%nc7n{%i%@P8oL()!11=ID=(jB7Dkbi4HvhdUXCRI^WNprA@
zgpw9Hg53C2K8J0N0Zt{G-K{A7_M@^JL86kY2{^OaMLFb@t<%KObnwU%y)VlQ+-2`i
z0Ir~4NN~vd^6w^GKC$=U{W>e^Xhy~VpGgU5iPZ2$8gfb=+K{68)0eLlmChypO;2L}
zc3Hlzybh6-aF7BUgs=s>t?99t8|z)1!EN(cbY6yr%0<+y_#Fb09F&KTzQ|$^d)D^e
z%3a`&REY6EbY0&^&?v$^VR73@;spJ)tf#`}g7GO@qAEOC3xgnL^P9c|_;P<jbzE%6
zx+L>^+SKVlL{1Ef!F@&XwGVr#lOUGE_4Aw)d-tmg4zzyJ;lHU>AP4)-XUtDX`RiH4
z4xw_L&Of=tPI9<mrr=Vlc-lu<sxS(sTU{6&7O29t;FB^S3uE}yW_<>lZMP5Ek1W=l
z&IAuly2FhAY6B&O{C8ClVPum);>_hMMfW=}B@tI6uv5?^;lYnQU{`FUjd|){^ObKU
zp1zXU&uqHvZvWo)`XL341{bXT?pd2AyHh-;CuWpYX<fn&(JGZiF2x5l$3LOMeYB7y
zC~~$^+N3rgAWT%62|zLiAHjp|G3I0X;dyyEU)N+sNUkle3vjr_xC_%cI^f@j807DN
zF;32R^*2#ZEYuu21c7{nvHX8r&vvYJ{otqtt0CZWJs@EoD$#?a@LW{0R6ItJMQ<Y`
z-12j8ZvF_hZSXCzgrG2D&64%`$k3~y%tjeJu-$Lu;h#H8nQw8ocd}N)UKE0wVo0B`
zJV?-(8_xF0J}>w}YPo<kJ0ZD|v?yWxNJp~xNw|Y}^CLh;_o2>xVD_3!K5CDDSj^y@
zYK%u2BTJZ(7Wiu)#^&Cfh#cq+acusqw637%ZV_j*(PUDtcABb;2s<8xx8D@#)#^as
za#2MzI_s<=!$rCa@ci7zRNlhiuY+yT_`>{=z17Je`D-SGKb1h>8Sjh#AJ(Sj8VF4s
zd9=NBgoK`;CB8@C{-*nz>eg^-+`3tkC*6Z~8%enNNUr!+_u>#WKQAXK4YnY20)1DM
zU-HRv%ttivZ&LcNaN313IB!%WWi0H*FMf+N6YO#h{i(?%Y9Kt@@Q999q`7{2vs<#5
zGd%o`UfoNJ#QE)V9B6iuSK5*d(E}mysU{`=+tIqP|6xk}yF^Jc8PQeOjd8vN8zVo(
z17^)A0kvZEMe6J#Q`q{#01LnP86RGKGaPs`A#(Ylljcqrvcuu^Vzf$4-uTwkYo{DA
zB>(kdWI^t9cQaL8KQ2Yon{S=@14v19MX(ED$c;UD;`JD`A6O?Gcd92$b4ME5?=z`;
z_*h#Vh72*H{bPau^BsWUR8^&A`dtvJJ-Q6EE698<N>-YY$#}oN2_pj~*FnS9C*eG`
zBWWAyhgvv&&jG{<i`ESpd4jwXx<0e;5wd^l-y-2Z7j9F=$WQbhuy(x4VU<KynwHrG
z0GY%g$U*dyb+=OD5;^fLO<Bgm=<aoRyL&k$k-V#jl^NG&M=r}Z6Q3Sv75>WR{+Ex&
z7~&DuxyvV$I)ML$qVbRDzaw;BmSrp(jFlhI7xFG)o@8FNzBh%z6og3i<3NG67R>L%
zvYIv2zD<1k(=YT8xBqkHkGUB6y{;)J!lK$JkSa*@%X2zM6-57s&>J*?NC`SaY!Njj
zlv7oP3s$dNJc^OcOg>}#dDVK0*iWr3qVdE;QQz*p@^=xF|BpV2WsqDkO@<SFZkqcC
zEd(d04IaX)u?=nF%o>$p(5JgYkXF>hHCopZK8{bvRnbt+y~@zP`)^UB?I1A6oGDsu
zznttSHidNld$m--m3XT{ULGwy?BQc{b68$Jn>F5OZU~6&KWy;dHS`lSf@YPzXLTf!
zoA+J&7ZA3I5L+s#htqcq2o#U-HQ<JS7hezjKe7Z2E|-r2^^n)dsczA1)Mm#$Py-I_
zwV0rT3b-odRq*FEJ++%hwzrOdH|if`%)|Qy5>{@D$d-g-s}TjuyLZ9Lv$j4lV9Lk$
zO6`MOUfN$&^-P;uzgDyw;8TwUq5ZpW{@NHgw4X@ItMzgx3X_iPC@(iYmwbF+G$WTK
z{^p>1|J8Rx2r>JE)9LdcfK>l$1%Jf~rkHpeo7@bT+UhlI*N(Tk4&JM1n<27r43rui
z2NLoGT7b_Cg+2fK#zAE8Rm|ym*%z{ELb$J?*+M!df7^3{1X;I=Nwi>-&)4)aFi~dz
zF7#jBLeKBjSaIvE*~1y_{T#jH_J^s$2_XP1Zh}4B4~hC@cva5RSN?|>>p%1ofW>rP
zuv1Iu9k@*)0<$K+y}1WABaoxXa2NTt34K@n@9znSBIpG?_OzU$Hh{x|I-m}M;}@|1
zSpG*yQ|Pa8cQc}v2)9iMGR}N&Vq??Z7jQ+TN+b0PG-U;!{;$<~Ff-^P86>lw@rz7F
z0&>FPk5li{eY)_c?p`8vHRq#e39c^|Nx8RJCP%mR<_L!$hlsD~nRL9}wzSMSYgFCd
z;g&uOo{mk_emzV){I{_FSC~G((Z%J8Gq0;<N}c6Ly$b%N@Td?bCW!;>cwIksJ3e>5
z;M_>iky-2UnEd}+RFMqk4TZ_aR(o9W+=%Ocv2aodB-~44v_9SH|1A&TB$dtJy+WRh
zL#@{Pixn?M2k?6n5tQ8z%J`ov!6Zt|;P}pnoXCc)FlyMP&=T?wMgxEd+~@ab303Yr
z-Tx39@VkBxu*+~KvrIR+Q!fLLbtZw+>0UT&K$Cgb40@N#fBnB8aR8Fb=db;hX-<6L
z3R*~M(I1><Cq5kIo&Nq;eSiw}f17?Z9t25dz1&qlcD2X2xUyN7P?dk>+)3>dG<b$r
zRL(^Ie-*?Tfx2qG>3YIRTd*UmVBg7a<o?RPyak6-<P>zb)>t>@EWSB=(dXb`^W?L&
zhyVl_y0=q2_ipN-IJ`vCA?sDFw21)`*|s?zxbzZk+w675@LQ8{aKYHzvAxH<<@C4|
z!T3$9(V%o%TX75v6&KCIr2Gw!&e-JkzA!ZxzpvtP_pJr)E@AGB8jt6mjMLK|P$k0N
z4uwgNlAA5YX&tJ9^9nKgqFnpi91pLQqtoeyTs#iv(MzI<XfJ4QKyJyr2hj>YXY2?j
z3ndu^??y@o{b0U6X6wu8$n7tB(3NA_D7SBjTS;ZRc~RdPQ$Mq82fg-{3EBaV4B~`g
zzub6PUFM{Y(RD9@HUgj3G3IE!@7M6u0tG*H)=a4hqWU2!i}gveK-#)`qfd3F?u?O)
z6qi9{v=h1M9y|i%i{JWGw+nOM9_N&5;S&(%Y$wc^9_!)4jJ&2CZ^TP7s-`Xih2(Gj
zF9cQ6Vq~f`;PMS;Z)B=hz8lxPcGzBm#LM0Stw7QoSV55>H;z*Rr#!*xS@Z}9K~iuD
zgGQ3<F#|L!rJ=95T;_z0nV0cHDk9=$OOIy3W!KqPDtJuA<<DIvQk49rwBMkuH3p@@
zVmjZ%x&}r(uLPRw64LIBvBM)SRG*}1xQOs$<HxMijVg>1Df-*D5e)qd2bKxuQoDDM
zReWUFpAsi+H|NB=dVR|*WZQ&W3wZRAcs43|&gEafHOkrjdjiHI3uhlORAtAmPBs?=
zE3*9l9kzyvW^kX4hvPutJtQpDjuXnEFdD%V;1NejZk$(6uP_3zdYeb?IG5db>z0Tb
zu;C@Gh}9(dla}>3CxJD+>4K!vSP<C&GeFYtgU9_t?nS8K+3-YNy)Y_)vkW?&3n<NK
zQiLmkg~MO=a)cJ6Yi>uNBxnEWM!ZXW_)&ij5nXom7bY@;(ON=`0Y#d=)O1NPy)*!g
zWLh!9Yq|5mHe5z)<DFs8?CpfGQJ#qczChM1-6T1cp*jU?sn7f`g?rKRYVa`oj<oh_
zE`?mKO!;i4xPUNG7`=^v3H%a~`@syb#I$`JVss?XuhSisoAVSC>uHiBt9UYT$PugP
z5n^Ht-;u9_o)0Pt4RAxTFWT+L>Q6~stq-ppeNptjK>0?|fl`(Ll~MFr+EL9k!09v`
zb$I@D&XsC6S4-3uIi@La6)N|MrbC<PI~~aM_YbWfw6`{JMzP!i=fyK^jlJ)PC07eg
zdT9AEqgOVk<gi3^DYB}?3Xo5MXs32(LG5p}17LhGgTx0Q>Q5so{y1M@6!NDYJeHSP
zr&3kTDJF3g6>K7K!5G~uZ`?I-q>{UcsI%#I;qmuKKG7>%l&urA4D+W1?cDtaz}y~H
zG1Nm)pcjQ*>u&Gb-R3#1EiAPwK37sSK(xS#FBTLcmM#4}A$PbKGkk^gX6EqRxXit*
z{xa95S+wFTCSCC&7+${kjD3;i&^<`~$aT4UU&7JaS#f8-)myytQl4MC+2z>Bd##-5
z5~&x)e%_3a@%+@T7JlvwB=fd{Hk=<LbI(=;YH&U0JZY@8I6Srh>D3{NeIO8iP4Q>|
z@>-zn^#i$+Fb|wUZS~$k9*38gO-hsYaD~BPIoLA{@4zZ!ayneY%km1I1{LgCJUV`d
z8-ZOQHC>=_3Epd-UaR|LfP>=DE!!+H>mxS(v?^!3$$8v8jsbju8HK=bl=<t2-Xtts
zT5b2z(x&`tbn>r+`prk6P8$;c(9zEeA^|lSG2E1xFoez@b)N>*DW54IG1Pa?-0&WW
zVQBCb_j=7a1{ThK{nt4Pa=kbD*KfNYJ@}JONaEn9I)^0R$5X{M6-d?yQYD$OrAm>X
z3$Q62V>VloZM^OyIyn=5`_)<b*;=_ulscYkap;zc_K(0O&mw3ig)61=`)5W&61mx7
zeJJA0d>ahXImID{wTYE8S}qe39^!o$g~Iv}qgdQN;xV`5v62C63=`~ldl_iVXN<lO
znj2Z^=N|GHiYv_qm~~s6{0!tInY`(ScZYq1{aRnQcS1-3xJwxmj`U*xJC>R<2l<;O
zQR&u`XkketW@CFiGuH)wE`FMJIOro_?$mH8wE+j;*@}OxCR&<3sUgt74wW0d{Hm+<
za(@l;O)eqEM`*(|>Ev_6Wdu9LS|z7`LN$~yAR=ufpocs}7T#@P#As;{Zes-Q7Y|bv
z1V0uchgI(9X4Nhxz$xh#3%@arbFBHo(yW@2w5Fm-W`Y~pgbsbJeJ)C|=TYA^(l3ie
zOi`|t7SxIFu>~mv$Qp4fW)H8Q+e^f%ksQov$X%tsQDO|zmyUiRP7>@Aah@I8iHF%W
z>ZK|gv_ln+Dj<q8$3CQHv>`C1GK{5U1>P%i`XO0sAfPMEOo-k`Lj5Yx7`-&Kj6TC-
zJxZlJgxkqTiKODqc?q9%6Ona}LJWEeDJtjHRh({4ulyZS%kRC%vEQG?KiRdSN|F*W
z&DO3XyD}SaZ>e5#4$QBb5QteZyez#ekR$6b+bbeipe;AMv8cVB?b`53P1Nxsv-+5d
zFBGHPYE7G5PKl+mj7UY&-`$b&q&h0{&I-!7!#Ys3aBVAqyPf_o7r>o@Fc}SVbJ5Ex
zl})WWm{#eQ5n0oogkBoZ=!8pAEw4=%`Mf7h%f*#&?bx=D@=d4^1rs|@;Z=dHJ%^=H
zUDwjBLK*x@V$m~kT1)%&?4QK;@{%7Fs)Mgi-nZt$_X!W>30f9f7Qk*L=UT)n_X_vc
zO`lU(Q0Z`WD?__1RE6ty9S*D*=+h)$9yO4u_B)YGN*|vQemich;0`W0tUj{OslJ`S
zZK5unkX!ZIIKjnqo``|yr>G(79gs@cd?KTm=N!0N60&rMA&!sDT2Ri9UsksxaIdUC
zI{^DRVoS*s889Z9o09<4a00VbiwkPHYRm3VCAhe1%WmaL&KGohECK|0mOWqgGQ~@;
zxTkYl%;K{nkjqE4klVn8mW0pe$uG)RbiFFR#|--<$+WrPeVfK-bbD})d??>$&}3#0
ztbe@K@3QBGC?}+U+MA%7emx*N0LJiwf&BHF*Zj2;5M)WBRrrk+D3uiKQVvt?YS&q4
zLr;zXu)$Ko1xES@sYUYR<y*3TJeY)qfbAh$=uCRCTEB>j@jX{#;hEvLZwbAS3O2Ae
zi`3TP8;5orDJrgk%OL~>Ea1RnT4Rtj==xNW4lf_e3r0|ihER?damq8HjJqXCURQy0
zwj37ZHb#;mg~v+7GSvreSL?9tgqt`JxELk-nugs7hW#X=6ID4n5nYTzTd%(~ePTn?
z&Ivw_cEex@qCsH-e3Vz5Pi6)CZ6RM#0VO7Os1JQi?zr-Mtf9hU3yfCD!5$GPXsZe4
zaZKI8`8I@9q)#hRbO)r~A&JX>$2P#7a}iTZ=DSz0NSh@CGW$)<IevSxWeBBcA!vfJ
z#>5%9t9+bv#Xgp+;b8uZuT(=nrA(`~#;vH>BVqI<m@)dw8~-`Ff}m<jDqF$eY)r%A
z)<(#J^YKk)kyV>H8(lE1aHriUz#E}W7N6_2(0A(j%l~lyXP1Y}=2hf|^p8fr<rzD7
zhRJhlHU`x>Fhbl$AO@FnGi^l52O-aQW4)!29Ez~6blN3%D&T;MpWR}NGZEOT#n8IZ
z`Paj5lP3Ont-=WawwV4vq=nhwDo$cni6lG6OCj^}K|xoG4FXB#1s5zPD6-<g$JD2!
z3WCI3hXYjrf0W3;2pu-acaDLtsn|@f`0?prhFQxzE6_`~=e+-f%i*$apoi*qP*Syk
zCmCBanu+bJ`LV{G%94~ZiDNcFMeCSItm**24lh@NMa%nS*9zKgEBq5n>@F3zip;h{
zOHO7be)@s3%uY0p>0=Pn5I_#eKbhSCuNs@yvvzts*$gSr<`2hqYFr*F9MV5+xE%UJ
z$r%1EBK<_GSfa~+f;N*seQ<BUF0xb8U`Mjde~%@w;6@Ol!nDY3+owjdg1)0xr&!;4
z*J|rx{n0<GT40KAxyEk%yk=Lai*#c|m=yn<r^qX){p#mafTvM6<$rh@0p^q%7uQB>
zHH`jD)8s>Ra_t8moH7=67Te;KSaVUeYm~E>qXTuSG3p<-NnSNdlD4j7e~`%!F#c7|
zdBX;z(wx|imZA)~r)>Y}-g*Sj;_rP*ag)UC7WUBYCP-X})Ein^uSm6Ji1SgWla0wf
zJ`*3yxj5XJNPnkQ7ncw>6Tj9tdN)nqk%T0kHg8^8G*YiAIpFFVTd`1QjgWEx%!$Dv
zW}AZ*`o0gpP+Q%|eY}x<=I~<`Lx;iBbCJtzlcW+(nt=*3@oB0*T#O@hh}pQo;N$A#
z{+8pT#Zoa%bp_@#W`QXK_1iwFbKBxh1(Ii(e7iGEf%6jp^GtLn7Zwdiuv%_JhXvG+
zhQ5=Bu+mFHDM@~Z3v;{nD!C=(mBMXY(DKP~4nK!Rg-y(hq;ZA_qY=kh=kbk?qu<nK
zJn4rNRcYfEu1t37&5qi23xR!$^ZO~l!&rH-{XuWhD3vm*Gw!;r(P_KTM2gDE981-%
zmC9dSk^A_@kg4V9=4ZWIVXL$;_5Q3o0MTUOx~1V)YTw@pFp4p23NP8}G^>f5uQn=P
zR-~fu-oh7C5-x7-#Hhad3i-l1wh^-($&Woyod8iQDXUCnP*0K656;hS`t)<?n^FlX
z`*<A4&Pv^%u-r_jSj=2+=QmUQSA>Bwy8q^7j5B>zYKOX4c<yXM$4DidbKu{DE6Km8
zK6R3@$!XAHC^4b4+~H{Xq%q;@(wOO;<iu#Jifor=dRNZf8qt_~K*Z-!tnYRQKLoff
zQ~Vpctjha^1uOr}i3ZtPHIzgi-G`)T0|*({p=(*84?Zo>XoKee1)&S)yxgCt_gqtM
zOK3!AkD1eJdN^V2ioI@sD+dQ+--cHuU4pfflAv)&A}Ope7fhPlRh9FRU4_p)l~}Mp
zsB)!+tpxvZNfhaR2F8t%S~1$<txU_zYHEn$2mNZY-ve28C_jwO`&^vpYL(cxQKV~c
zx_=l<uwop@B%GN=2ss-jx9S$xVQ9S1Sq<02&z?CAP>}-7GVZxwGP0Fp|7;LQmI4oA
zL`|7s;0#iyWm+tr4!yF@RY_8_`z%zawqy%MrSW{G988xld^%*hsM7LLDL5~GnLtuQ
z!9j!Su5(Q-T&{oI28_fFriiQeKdyGM?(lu5i*uAq7jPO~e=eCK01$2gK>uQOysH=~
zZSPREY!)G*D9Sy#K#SHqp9S|Zd5``>PhXuFGWM+f+<7R|qx7q8fLl?om=c(`m&(za
zwcXSS9VG)u%34u5j-&n7{1^t0Qmqx88PbO^(IqsqgzHWeci?5nx^wC~sQ>URn%#K4
z%5SxJ-gN{0!A9OE-Pxr=`%8EgpS`K-75$qs2lSj)^~sQEmEiiXJCpHNTsQy=(LO-4
zY@8NS(@@_sz?Lb@4<B5q5qqtw&rc+*VDXaSlM3q23!s&f@LMV@rJ{XF+wsaQkWAsl
zL#0D3qs*KE<z!sxW`b7IjXkh(fI9#4FjI^<>tM~z;?wqK7S?|Ym#PTD=;zj`L@fKx
zYrdhI%RH}sZdo|KwTfvJUyeMVc-@EFoWv2?oETy>%~LlC@YtR-YVBKQLwy6rfAL1l
z;)t`~Gz=Ftj{p>bx{(Cr8jAKCc>8{C?$O>Eu40kr6!A(04J-5SPLIq0j+~;KUgb-@
z2I|>5$!LSkf7ldZG9XrcoLp>jJME@JhFitFJlC&ux8F{-TVe4!En`^?OW!a#E}jM0
zh(>Ev6EV&mk;Z4KZzUOd#Orl{Wug-{D=5x+Z4&`T+=Y1cv80tO0>|kn?@+hzRB1SC
z^`#d|O$qkbU*l2KCaiDmebbla;w)!ognan|W?RyzH~~4%)B(IfKcc=qqOJ%Y!^v4s
zqj<5Fm(1?C_F2xi2BWu>4_T!=YUOULa=D7^Jqz8=T8ArS^gL@laOy+7kHIt*mA**&
z{yxJo#-fr0DDN;XyVvk051^V0YYqq(ZCYxr-39pO7B7{TU#6Y5JQL_jPhr`)t?E}j
zq&Rh-M$w7Pq1IS@yN@&ob&JPX4v(agH9JRLQxuvsl??#{rB@(j{7q2lhiA2QhvP}R
zrP?STQGJl^-Mlr$ym38V5RfvQ&qb*|je;nh&YA;d8M;#k3sero>OT?&>e7vPJ+#{n
zM!<+4(pO$S%U;1xLemt~umtt74ar(cd>005RcE=UE9HXg?@BL+@in0pJIxH=XE0SO
zTO=p6POGY3D_9no*3YV4MHQ&4ZPO24rB~JY#U70_)Lpgwf=+z-HQ+=xZZXUXChL>m
z8CQ<{PQfs%^fvlJ2&eC|D3oiU48N?y{e^#~RVHNxL5pgn+v8lAr-ceN{ifu}r5P~6
zvWst8c96a}I%-<>a!T{3BtToLu}AZhyU(Fz(--Cd1*u(PSc=0I;@`WaR=wTX&-IxZ
zu9IlT)PeD|Rb0<WvQd2h8CM)_xKe*-la|S<ecmLv@{{hQlSKB8_}w9k$_KQD+@dr#
zXxRrSMoDPtHRe;dcI=xOq|*mV#&fxKkp_1tD)r5>PJdt+j#VkRRaL0Mv@|cCtTih-
z7P;F&`P5{&n#3f0=aX8UUVHb(#E|V|_&*s&VxOR9p;phK`IGg7gWpR~hNf>Lm90Bk
z-4C+!ZX0|@e7MmG{tzpHp(Z!fNX<%mm5U*vY%@%7JPuw{u6q;>Utp2?b}u<+n@d%9
z+VC-U9TdX}q$J5wF{WiBk#<fYAs}o@@(KjLHjm?!@4m`#<%l1+rv@xYb5)v1A3U7v
zjN|&6ukNHsek%S{$=+4R$8>>w08^n=y=KKYwf;BZRRxJ2cHd=F@_b{QxCO&JodT3g
z=cGP*FNO9)F&O@twblImP8Bz%NR^>9TY3lFEYhK<twdeSr#+AJdtyfZqE(_1t9mF!
z6TenTLMI``ocwlzr)Ga27nM~qpG*Kvp^9gdBS6^L{+Z+ms&neFWcfhXxXiEDA$cnL
z!*i~59-si*J)_v!Sy-L&u*l5EN?*P#!f@PVLQAf7QhIkss_Yw7&q))t+v&FMpp!{y
z)b4tJ1Qr2o-eA;M`5KGLb)9D=)k#tAdHvhP+P9V=`Zd9Vb{;I)c@Qg2JdcV-6ne;a
zs!Rl+9wAMR1|%VqJOmk??n9KsV1$>g3+Rkzs-Pam;L3Jc4HAYSeXgufjfOnys&94f
z@1GmyP)PDAkci_m1zYBXc0y@1qLyxkAyql(T4<8saL+rlDi!kWQ=<o-uK`*XjGSJ#
zV6j~N=&iNg^&ijBRiKiYg|#x1%G%*tPN(v>?M$Jh61s1nag9$hM|{r(R4&vYCzX_6
z0o+7a<fy82!;4{5LF#K-#;iS5vh8P|s^X+qBe0()r@q1e7I_l3n$4o$&~PE-ue+wC
z-OT>Fv^la0&RRb~i-L(`?~E)S)TnNBHc>bG<D4CJ*!bo9a)8c44_)HR@nFLF^ukW|
zN6rK1)(G{%7r#C0T}@C6ro5t040iN-v@adk^xif34v0lYy^TQcB@z}!Ca<{WMtx~>
zw&<YPBg|ho1~D*1e|cV$qv!jo<9VZGF&x=jXfmYux#mQQIMwGTSigaCjBAQO{u5Zn
zG7TU5=(L_h;8py$3H?81K|u;ewp+GK!ar@cfFnW<&v%VM`+Z~23rt#}bS<IOSlK>S
zy&__ZS{+U3g!+PXWW%JjGLqEw!)UElw2QAQNq^s3I{ngxzY%Fa@*i48WmVmpT_-aw
z5P0TY9f6I8uJhF^qZGRvHeg6dm#$jN9ao0dmqG-j?@nctQI(Q#7{$8PR&{(t_%A<$
zPeq1FD{dlSb?^e+;0ssS)%eMNY9KifknN+MUeS=Jq&-#@N<iS2N#W8C_NZ1rI`9YB
zQgNYIscSE5;%ds?AbZ=blLK6hn2S8ekxa`s!E5Q1YGkF^09T`$Gc4})7vru1uT;*p
z!pW$cX&tTafVD5Xtd6?M*Qx_DE;3cJ(6LZ;=uXdP?&4%R9&9oino1)3`O(Lg3I8$%
zGL9nEyWAw2erDAD6H|YFORW0J(^9DQMGi*njgC`+J+*!&xW{31N5bazBgtVZsq2?(
z(&6{~CIPg+5<XSf4eQJSVN!gQMb&cSu5$Z)>xqz@H_1TRUGszqGR44m;Yd@QVhd7>
z1V8ctuAM5oPgs+Se35mEj0t+ddX!cbhhi_teyDzQGKkqNZuIk2>yHX+zx2vA_u_`;
zRfC122m2ex%P0d#$+Ohw`yC0NF)d=AyqLx`)r-bVy&GuokPY|r`HCQ3vvaeexV;wu
z@Pr=pn6>VQ%UWwIDI^Y*eb#84q~>9A9K=<Gnpb?rit=NmrvErR!fKuSTc5tHbN2`j
z@OeDulm&p~?tyuB>fPr<Y6Fp^VnebfehvWE=tF;H;+vMEO*{D(ieyN>moqm;0DWej
zQ#i{o9?$rvJ^CZSFCsugt^Q}gESe*N@N@>V%~=&mxl!IHM}4-}6(>p+wZ*kXj#=-{
zo;~ifDWHvwJq>P7B+^%7haK)PNW>3!5z%LltgtA@kTSH%#)6it7AN1PZ55wJ!cn~6
z^JS6-0$ZbN<(0|VuvJ$D1XhcELi>UB2+8PI6}U8`7zsiDkFfWSYjSD&hZV6P3eu$r
zN|i1kARVO>igb`BU3xDe6cG_Ag7gj|y@uW)O7EffqO<@3A_<{}@CH5SdG2$5_w#xG
zBP7>evoqf*JF`3672SFBX+#6BvXN3uDUz8tc=RFSXx2SaW#oKUCYKHWNxjsll`BgW
zdCE3Q$w(f$F<83QbtAa0Skf0>*Yvh8khQ%8V)3!l@m0Jjqtcd;bq5hGRY~VA@ze22
z28IY3_M`Y!=j5*0{&Vg-=#6$yTqI&9$XmXT%$D_^c>FV(dbd%YpHAbLouou0?<uF{
zx~aVFS9LzlBb~5EZxa7BzugE>WCdzq!W;rC!mO)nv%)PzHn4^&&iF1Dswx6T9qWEU
z&zN4OpbD$sy(-GzTP?DwP%#WP_zlggoVad^_FcttzYh~!=7Ve>j%2fgnX&OA8_A6T
z(nu_>YT+B0gx!Bkx*kNU#Hn&H)rt&~W5%UXsQV>a9{@E1&<cV}%-8Jvqw;TQUiSE_
zcg7vKD+|Ol0;$$hBaXQV!GJxJ9~KS2`YV56140=6o<mPL!_#pGnJ`ADo!q1SuL>h5
zhLmHgN#6wA)6HYEe96O>^^%l}Ae@73JX=!cYJ4h!K~IyH4OKns%cp5s3@r#rg5iQ!
z=AWHSX~i$fkICA;Za&!Ij{=ZpU5iUFj;<T|+1h=Ruy3P;+(Fk-9eu8b2zIJuW8lZE
zo_n5!*X?XuanACoxn<C`&NV1JMQpNMva_hAZt!d>32pf#RtLMgJmu=fxGM8fr1>KJ
z#favy##cjp;%61~^$s@OWpsJrJ8VYLO-<+g)1H4WyRc@&)h4Z1G<uSM=e2JTXhU9G
zT2kn#xo*`&P$%G0Q7E1#@rI;YFO7y5dZl4cy4YxL%K)is$ihx?ZNhhK52GL1=<ufR
z!u>VQ4qvr9K7EHs%8HSb>-oge`O@m3=y8h&JW)4bH0yTd_L=O_*~P3F@$s`_dsha*
zfmoxpC6|uYcSZRYF9?PRloU;HHyPove}1n(!@hRW%k(JYJ@c;@Z$G~vCB=Jm<3;_}
zeT(qBb$ks+PJKF6Tw8%rQ#tIZ2D{45V^Ieg%g)|TX@+fL?l!QU)+2}H=6T`f?T>()
z_@x-34780^nKt2wNo7h#-P%(X6@n*d&FQL&JcAQ$IsLJbCx}|jIdFwpzL|dePXS+L
z#OPj|y_xMCe<?SZEv<4(M^dk}G?pr$LTF1eyUeQ6&;~9t=H6g$yFdUqE41kJGsdQE
zkF7aGc@HgGSbymwv5?xluSc+vabjb!O;qc%*ZULJU{Nki%(fKe2y_MxI1ab2E^_d}
z;U+2h1A!fpjI*SHyd4f)`$tnbISpqCZH#%wn#<)KbH;jl%y16q*5g}mZsI?@$Al--
zZNjN#Js3xPZr5m3-=;a-x(^dE1;q!7EX!%%!@KwP3clu}*VQUhpv0KjC0`qi&-(+K
zJb`kf2N^T0=mJ0Q<e5QHg_bF!jEapYAtrm+ZSThUm$mmm6R?}g(@R(b>5!(IUs{<H
zf$=hRj{@9d`!K=XnnYsR3c;j(+uQy?e=Y84QQg;$tm&>a7uk~LjxM><HkeQTrp_s+
zN_yE=XWUM@13j~!wc$&#Ri7%S=L&_14c(~ozRcv`pqYX%*+eD3LzHGkJ0y$Dym=-M
z7D=P90yTOv>~Mst@YVW8nF2T0$h;PsXLZO8v*^5sKHmU*S9=8~7P#j+s1uz2C0(R$
z68-dL(gYP{^Ymu%EXCb$TP>A5q%A=Oca!A;i6IdUS|K=&H6iDmzzjr|&zM4o7;Ehr
zyrQ;l=e^^;Z7=Z3vH1!(`TN%=`%6+w$8|0BE$jI!0dQx-$>Zpf14n%<ymDe^ZS>cm
ztGMq%@!2)TA+r0r*w?5qJa(ZS5mmeGuNOXq%sqrxZ%IG2z(*2>=Y6S2BTw*1Dwpt8
z)X?(|QRu$i=OT|4j=y8GG`3^C<PkArGb&-IHAhyIx9&oZkGm1|mIoJ}a}m;Rq{itJ
z?@C?Ep@h_f*$R&_6O{;Mq~|ibxB3(NR`y?GDPij@bt{z_ZFxYUG?%rMb#nmHVI!0J
zqGBBsr9mJz9dEC}+qTp)lu?9nl#-mcDL?-F{9}-UC)ru@jAlncTU+sW<I1X6Q{vTt
z4_TQ$DOJAeSpAC+(50a{RzZg`$Ja5=-B}q8KZw&jm5gL4sV|gk_qe%d$RSJq*mOUk
zmMXR)of+Ya8iP;u@q!!~gPR@u#mNFJ>Fhhor<B|1jlDCglR5f#gnM(PL<R91(bmbG
z<Yj8hvx5GIL!rX=4JxpeSeL^L2g&+6)luDPEd(EyVZmBwUb3kFoB?P!wpi_kqTLJd
zvNoQwzL2B7t6WQ;=(OM31X=L#4s5i9S=+VP_eod-0zpJa?!;$WOe9m#={vOUbU6>(
zKFVa)HPyHGt5I4DP{Wq1o~t#R`K$&+9~ML}=D;O%Keqxf_J`A_SZ3wKK%1xmsMy0$
zv=5gfzCDL^zCRJ0^cB2&o2B>*5G66rt8;g8^1Oog;KN%-N~tr$62EGJQdjHbc9Y(B
z;gD8CJJNw`C1WGqK5xoWjb~pgO^{7|`N$WNwHvG>Syf`XUjULHx<Jc^rQTf~>RCt`
z4D9gpR&uVO123C6B}rDay59IgX7hnOGTXZd+?66XSPN|$xRP;@BA);1C^5cqtG2ax
z!lCJCCe<buI$S-guI}%cH=`m6PVUl8BcRmA%+i~y2YP!3U)Od%-B_rdL{}-=(1{4}
zbGNdml}7H_{pct;HpFfYZ&cZ%j_VpS=PVjghu()LhZZ{}lx+f!?w$>7Ax#ljH;of(
zw-&$=J!<a^HsKu6GZRWycfNS;_T+T~^Nta&7BIiPgiK5+2F<UW-_?z1-HINY4K(&`
z2*)mkMqV|bnV)}Ib<p#%p2*dkcu&$W{I(`YUc^!2<-Cm0uE^xR+xsgxd<R+I`hu~)
zac}g}9zFaF#JfAiFOgPYQ}zCKM&Hqzo?gFOMuJWCWP7gf(ep}{u;_~;x1zZ%(|lc>
zQEd|PL>x_<U_)B+k7*tdaqzqDuzHK#pr#MAkDw+Hd0o&UtH;<(m4QNw6XAd?HWB(F
zBjadKM$Gc!kY>5f{QF@lUoZ}`a+wgbG6&ObJr{k+D1DGkpu0|voC=$`&z%j1Na2CO
zC~bub_1Zl($t^m^XhB5j1F`9HVtZ5fu`hm&y3`90RU43QD2KxijnPS`8gM0*B4#SC
z)ql@ZY#r>=@*?wWiDsYXk;}^9m-afAv$b{8a_5(wqCfM+m94F68UtLB1SQdARN^1<
zh7Qo=T;rH7`YwRJU)7VeY{LQp{&5PeF`&(_Ir^06`^NL4C?TCne`KP>&ax>_WZC-k
z-2QNpR@0IG`nDaxo)wi43i`}(8a~cB#D2l$$hudi4R$SXGU+y{CqvLtZC7_-pSg8f
zuSbnY2&*cek_+h*d9Mih)ZKJxe<sB8q}1jV5HPLNrnkL)E^v~zp>pfD33`T4<Mlk1
z&!U^VDS9wL?Z;q>!1{Ix*sEpN%W~GaIlJKXUkb6SrziPUU-^tOtaW4;*9i2kJbBd<
z+KxkLbu0ev^^wH;dL`!H<0C+|D&Wbf#P%UCY&Lq#^!DNnFI)YoHz2mTSY6PTR0A*J
z6&cQZS<>@?-~yfj?(w{ay3$H>9i48G6f=_MOhWW&6}6_A-VT*kMW?*z2wJ;bzzm9+
z?Ug@>HmNPmR;Rf(_kA>R)!0x7%)M8pQqxn~t9~MDE~TBOf%#>#G*tXEMP;I~6}74P
z@)1>}m<|#(M%%kl+F)3RkScC1Q9rr&R+^3N$<GddtFge7`uaD{%)-ll)q|;mC6zRy
zB0r}@+&7F8;y_rzDN>xX#TjYoFA4Z6N>+ecS)-D;vO#{NN1B{vRyakB(kqIXU5pH8
zLEKk|I1obqD0}OcgHK<*fuRXuK}vU(x((edTisYtIa``%z0N1dL0YmtQf#Ltv+6k0
zad%G8QDmvsN@nP>QXK*}5u2H!y*nd1>bhT!0av%pB<Ph4_v??oz1G2~0v>tCUYe=5
zZ)M(EL5K*Vek;@^X}EtX27hZNZW?e`Xe($Loq0)P@VO@V-lkY~?&z&>?q+D0#4~pi
z^e;DWFXdvi;o|E}nF11~KMKi@I~&iQ!}#dWEHB5uf^URZS1|9Dv1_Y2R-h=KH9hdD
zbF%1`ie$~gG)?PDSojBSQc;SxluzqQ-+Ve?H~xH>V$Z>=az>|isp2EE1Ya=l9la~N
zp_lsqhrTy_LBe}86K{5GFgH)bcbh{!c<_RwcUk>=*b)N~%NpaapBA~3yfLsh<cB-=
zVEd|IZ=0vB2b4FsE~l3feFdT>YMM1}{(G{QZ@Ch5hh(O)R9P2V<j^}5iHrmVX5Cp=
z5vqLn#aSzkSLyyq#c3P1S=G%&>PC#_R<oG|gEC7Buc~<;nD-X(Z@O}&uLLu&OEVJu
z50$uqzusyA9wpw$dDbOCnAgNFQIe+tB&8?AD~1^sbxRD6H4mN6KXF!9;aF;$+%ZOe
z@ZdCw(`DJ-CbTqOZ?w&j`9q=NJ?WF4gumwghg{uzh2@0_^@#bUaJpxL!}u*9Ojj17
z>PkU?M2yptd#v^}e{~)ASy&ZrYA$%q-h&C}&C7``Jp-1oDJT9n+cEsxH3IEqFvZ9H
z5W1~f#aI6@_V?hI@XR6WjiV7M?a8qfj$?t?GOgm{ViEv8hmaJ{{PZFd?b0aT9)-wW
zIHv}-_C30oDl?87K-qT+q^R;7;$hzsGHF6f*0C7468$GPF2%QYD=26&D{iGdyv9yT
z%aDWC3wBtVT0<lId#a8q57}(6+{ZnpYYEHCQy;$~Mxt{t_PIgVek18``M;GGC%A(+
zc|AvA3V}Nml^{|Nf$4wvLx5+O#c{+8`38<F1%roLl{K0ESIU2(J4M<I>qI@_uhzen
z@g9dYk94|6xTkBRf_x!5M;OezL$H>BV6W1;=`_;KwAS99!#_a$KlS61P4{^5a6Vt<
zHj+43XX{+>+-hKHbzC&G^YV99N?*#$`;+`NY>S{-5t-@Q*aY+z+`_YhwN>JgAKPls
z|3dkXIK9|LNI4-mQbv4XYxefds9fB9rO)mamMp?J8w&B)vxpUoGsoJ_{gmv9cMeYW
zf2;0)j3VuKE1ujbzAX<mUj8ffb|NPK?k6&w>`O^+m8)?Rl$s3L{p228fHayA3iKV=
zeoqM$yjf?}bPE~$AA?-}86?E`q!jb0ZvX(U2rsVGG?3tFjZ?e~VIB_PH^twHD{qo8
zem-qn1u<{NXREMkJf^hDitC5a2ZtWhxW7yY^sGH&fqdztin{qvkzK)e%lcM9sefXu
z#V2q?D}VRVl^`{R*E6}avIo$}2&|CW?WQ$=amMl$MIO999Pbe^Iq^D~<X*cR#^J<q
zUsrx=f?Rm}Ax16l3d#P7svu_k{$`%UOyeXLrO~IwZIbF!+L_Bw-`%^EyomId(m;)1
zTx~oyE9>kmb|V)FF3go}tMn-IV0fy(v0SC03+<kBCNi4WzWPs+rRVTJpwkl$MGOzs
zl8S?`jY&r1c!~qc^`N#mx8>f@B$?r2HpeaJOsCtUfyycMZ4H+=`cK(B6vDT&(uZE;
z8qW(R+&@*MrD4N;?I{1ysi`<!2P+~m6{y@&Q>4}^^5T!N{2St%JNP%^TbYd`#sq%o
z8|rbvy)!0fM@Iv2atI~pRMksB^+RHp<i?!&Z-1j}+bE*>7fW8^b@VgbxvNgu5HJl|
zd;Ng(TPz<V5#GHwQh50}{Kh)z%&>&O8}7$j604o@P5*xR0sd{|Vc%zZ_57irzt#WC
zU4l*x1q#CT<<DeI05e;z;<*n=v~th?Nq4U?Uj8xX;BuDk^%A1P#37KHGMtW72KS>k
zoOt<Z{10>%m?>#$zsBNG`#XUfD)ZX@rC6feL5W-^#)iPm34mFFm3#*dCkw2vo7l%S
zx>U`xF#?4aJUiUijgc$eNvHp&+XFwGus)pnOi^!2dr;+weC+p&$?)>y_!qV5ScGuL
z5$Qwt5B>dDdXq&jzx&(Z;r`sz#z`9!y|zA?H@UGm$z*9WxmGibYZ;GI3J20cu-Ib?
zLsC#us#?E?mTUaX<BL0c$HWIQW7z$wLeidycmE#m&D|g~37b6s)9rA=ammo%$gzz3
zmQPXNUwqv(u@(T~=zxAqxIGlgqASSzcsR*6iTLweFvxQKU5S<R`U_KwU;l}uOJb$Z
zNH<MdRD2V-luAg^Xh!`LRYK}89D}&XW@^u`&$b}zK4{i~fwE2#Xhj2wqb{zb)QlaA
zJd6Oo+<Kbj<kx7W^+Y!9tH&%NFKb1_EPE;b!2ujI##o=UT(8E~A;gpqC+QNs41Sx{
zhqU;`N9D1TgpjWWa4E7-OK9SdroPdRkA-Js0@4{3D~FsPkB(b3Oca!s)Nj>Egm^X5
ziN7S_+|;K0=NqJZ9=&9<lC#fM@3ZHxn6Kvliow>T)isgIFxblcb~2p!4z*k1*G(sM
z3Yz^-vOLc}@mtP~wpBFvnAd8VK`K`%4scggZgpBm+-USgxEWwiZLAJPy_KGu85lKa
zssBU!aJN~pjI<8irXE{$rJgw#VMjE{-bR(YT1aeaVl>bLszpFyvX@V!Fuv6D{$iHa
zxZTR>XP|aIqOcxc0@)yph-1?gxIhx#USkTxG#}7PjrRCll-FCX)9NWX?n;_IqyN|Y
z?)B1LO`G+e`>5V8V!`vd?^*zhKfu&EVFhYeX9l&^)S4D>Phe)de2Sa7!fY$r3L2H<
zXG1Ky^0;wxO3dHP71gPHV&eh;9VHH6&l}>2X@6R@+Q7sOu-of*yQTd|eEzl&e?#|+
z4t|rT!R(g<G2k&Q&vX`}yG|hvRJ{%e2v+%p!}zYumy6zkJp1~XPa#QY+J_7f*j088
zcH27<IZR&tQo#!rzwR|UOp%S1T}U&a-o4Z88$hfOc3k_XA;Zzj=Hdf}^cm#v^f!z_
z?X)kQ_fh&Bvfq{UQbq2NZt}e;^gI1&V>vQmtGUn`>W6F#&BIh=Q*&keSB2*xp)b+Y
zg0Fbak1RCj3Y@PsK2lIkVp_fs>r*(HmeeE7`=>HLh?LGyp*?`OP5hwEeRv_QJExlr
zQI|)bf^?CrT9*vmy7!pDfJ-3Ynb8dfL2XG?mWbPIuzL5@H-(DDN*%0$%nh|n+-0?=
zrI8XazYK!o!t|4B0{-m<lkY++{}D|7@xV2=CI<L|!EqX`2qk!_2N`TVj80@Tl)ny&
z7?(&mxHJ^}^4~m^1OlGE=s#uCjq}=_)glr*orzpuUZU>mpL4!nid|*vWxF_eX)#g5
zd87ZEtrhb0L7LTaVrsVw-G5q|%Qt?e2~s)_WMT4^`21?+PHw8`FPkc`^_S9lPm>#N
zOoW&7D<XNkYsx&%!|*UTYAbV&fKQbIv~GIe8(xFe>bLCkpI=)v5X(K3_Sffc|2HTe
zO22+tUtskDGLM%%dqgj`CZ?$&`23L0MR*<>P!x~zQXU?7H|;s{_I}WBY4Yb*7U3+a
z<<8k@@1;$9x1!G*?&zS!uMnz@H3%+4u?ChxA{)Qdx19YTGC1s26KMdK$8=5A20CtH
z#^|+j?PnjeZ_h#ai2hpM{B2o-h84d&4ouqHKf0L9+q!-->9+IPc_2L@a1<$q9q?(E
z&VPB!0}oGd($LDei?#~v7PM33qZ&<^=l4y7-+UXISMk(T9!|Q<M|GIELjORQWhysG
z%nwi|z!um7iPUo3J5BN$*e>9-f*YP$p3Q-B?GRP+4^Qma8yY+s?B0bcn<Xuc+4P3y
z*7S6CA8*j<fD#9$Y7ak$CqA+OCt%*KY~lwcFN$p_cWv}s%Pz04C@i=`<6ler`JH`F
z_f0gbj|6`n`-`)?XFisG`kje7-b!d}t(nGMvqg~lH0|zA?{URPGy)^LZCBF%m8RX7
zxannoe}P>0O(vqLo!CzU0n~R6PtKx`Ysi!6HV6S5+0ZRi1w8mnJW|=`{t@sQRkv67
z;V;e(hJMrnv;&T7+K?BsFy!3uMl$0B7|=fvqN!QKO{11*aT?F_xvDj3VBTI{HnG#6
zJ}h4e{|HFN{OM}Oi6r790)`9m<Ayk~>cxj;pM#4rg#DS}RBMI22T9p%NdOI{=TDkC
z&cs@f(5>h21rnQhVLuLC=Op2LF7K~2QMi!J@?wwWE(77_D9rL)+4#i!i*KBRX_BA7
z!gq_duObEIn0W}uc1%1X{Hy@il_p2HGwSY<V2#L52?#+pu8Y-i0Jc2Op-;>TNx8n^
zaWiQbzNdrJi$bovnzPQD_`oU15LzAaTwq)iI|?IYJPVbCNk+Fk6DL`K(ch<MvjA=P
zOLco?!ZHmDM*C1LBy!b60UdHo+oh2C=7fp<&83T|8{_hPJ<(~Lylv0)z6v?7NUFCo
zH9&I=Jg3fDa@tBJr>A=}Gk6uej=ygk$C}p3QUn&mx89H0#s@C7E!MrTX`57#P$p&X
zNe^r|pq`xuz0y4DmXomTvR8`hZHPGC3`sm?jRmU5_kHmGisItxOCn%UYmG`AFPEY$
zLGp@1tAdQjhTV6Oj5=63*eu9FX%5(iHp=9{wW^@=a1f^URNi)6u3vr26~H4Z6+yk9
znK|aIy$u|Ljf!ufCiYNCrU3?1Jce9-Snpzq24_8E|8w52w!)u^mYTO;+?6P{RbgC{
zp3GlQg)M6AoBcdR%oYgxz0pq((LorW#BNYa=!mR!HZ@&ap7^1tx`k~Wu(r({)k?Sq
zq%WN_`>|`9s8}@DyfGY`sZbiBa_?i|QuT_<-Ba0zGcf-$<uv1&+D8rx4X$pO{hqUx
zVEXREha}U`nZ2qv!(Axx)O%3W8=>#XQAk=R&q@1;o@oYG=L&xftakTdQ>wqzAm?MT
zdkG3p{4Vyq3+!h^zPt1=B*9Kdm`shdJ_o)|)<PVL9`3R8>(-weHu1OISb+UBYJVZt
z@2{2>igxnRw}GQD@5K2Qd$Gnnec{j$fy$Auv6{1$<|&cSNY+iC<`Gej`+t*8!8Y>t
z&7JTLOyvRAzGW_|zIwLRVUY_h3{Y*)!D|xN;feLrDT=&!ZMrp=qo7Tx+Rj<$Np_+T
z_oMsmi;SUXTM$ifPR8-DI}0OJ*m|^cR5c-RYvTm7D_7+&7gtJi?KF~8RSbFtiRHbS
zqj%o_!=kw$!Dju`F2<g=gnaux(3+Rp%WoSeua}W`gARapM<;P<Ndt3pEc}c#c@y*t
z)n`n^Dov6~v8)=)>~S5;ysu95TD`lF9w>~Lu!tCM7!vF@@9sW6gc4g^qbc*lb+m^U
zOG)?)tw=47<_3{mU49(X5q>+C^FkMLG9)G?g-GL-vm9kUPP1~W!)7WLV?gKMRy7UN
zj(Ht_eSGmCjpt2lwD8-?ML-9_+TjSLxUmYPR}F;$pQgQ5Q8>AKG}We%h=E>{YL=X7
zdmPANaR!La#O9d7FE%uQ_#F^q*6Fo%7A<VoDp1n3^K=6H{SMyC3$fxtkbO$;VMZNN
z!E)ts3=`YOcxEgEp$HRjWHb(U(scpWHw(1*Ej|!Pu(7%N5NK@NxNxyv-n1s1t+@GW
z3Gjj5z2%OCSJR!efUkF?_Q`9}Bkfn&MUeWPtV_D)8k2)MZr?il+`dBtCX;{esnS}_
zHzPJ}inPm3IYIS~2~NciRTO-Qs5yF!U9HBnZZ~--(J(~PJzM{n3ryVXN-vKT_xwO3
z6XrLah+RD($jDboKe<Zn(OJ`5{Xt!dou7weB^dzzoLYRYF*@e#w+*P`j^nXfjIFA9
zdeEq$sJe-IqqemK0|A=*^05RZT3wT8%Us}vpIJGnY^P+R5~E7h?gzs4b}b!prfP}r
zdt^hmEw|2evX6bW!&^jwk2rWZj8HAcsEI)4_Pjb1%Fv$oq4YDnpxe!TWj`y!MpAue
z<GCd7>*0F#dcxlIigWrNO6KwKIxGKbu?)Dh=|9llQR0fsb5K<JvWu4|mr;eZZrQ6z
zpKNW4q#gT%+#he89O}6|?4<jvv0VPfnOq|_&TFU_S>7TS;tZ0q{mlveJ*5&`is-Ae
z!uECI*zWliL(_w~y`_SM#$3z(+`bTGh?0GteUQB$Ujn8liX(m%d>qMh?${*%Zh5!p
zo=WadZ_v{ckHC5qEl+)5$2uHB1iM(XX5SsxJ5^6+_V0;I5cl7IPKr;XIGD`0N*OX%
z*qAEfo^Rxjo_zA|cP4;~wBckU&1$OD;1kQl^z^c*&2V}N%{7-b@vE6xe^muH-{SiO
zSQlu)!Eu~VVas_5pw?|A_*z2?L;w7DR136swZFda6B$)8(NopN7Z-+fUgoK6F?5$}
z85qkwbmW9o;qO)Ye}+e!6ZqR}o0K&dO;5T^pJV|k{H-+h_rL$xIHz5HBYBtocdYZp
z0Ppcds+=s|zXI?F>C%~Z)JsCpRi=kql=STV?_$R_RkoDs1lm_Z*$C8r|NKoRuBYDy
zbqwCW7bmQr*{+S*z0Mqjo`rB+(TaBr37#C(gOY18DA#!de7BVT)N-=%Mf1K#KMYf7
zL+ccYSdy^bhaKDCs&T6-TMY-57rkRW^ieAF{@)&^xbAw!?3<CGE_@0c^nbn5*Or<2
z!4ws1A&E}8j2%Rzux&d_Eqq+XIO{9|8)$GJj))|VNJb~D874kJ6%AOqkY0QAU3}=_
zKzf#+)cqY4wBfMXTsK`S;Vz*`(n+9-lWe@CdP4p!fBNBKmZOt;<#hqz$!MZ49KKe|
zuooxR0k}gvDGnYNzZudK{w9;yKJy|hoS0A#4pF+<)g;=us&Mx8?t6Tk0V|r~HH{?-
zw<}%!khQ0}__{|JV3oRe1_D-afiJoxV*S1$S#|5H#MKQl5%_v7)j#65&8MyVmPDe%
zoKoSk1s;|T(cPUh^h2!oJ8;<VM5DyL4W7cn2T*=Tr68-^o*$t!gQDyBQ1_x*3()5{
zNjBkacm9*;(QitwewliEiDnYx)#zr45r=(AXfRX}Uf((n&*RG2V)Lv$#daVLAKLUl
zn^R@Jo-iR`qmiQ9XF!h#F`GO6QoBb<0cZ9_V)}6hw-t{<SDW-;eJ%4jcLP#t=R6Vu
z2QqzCmQJTzW6<e-qg}R~7nE3(a}|2GD+ZW|-c71Q@)|Uked$mak>Flm#%74cRn>?W
zn7Zn`>W4hwOcYFG^LMh;B0CjN*8=Rh>*!|WG#b-o=6vMHbhxJoI4OYnX$#Lp3B_da
z8VW*ju}-RKPE27%6Xn{#I1ScU-$-Bo{P|X%u4mkaf&Tax7nRvp;3>13#Du5npCBBi
zk{V|H$Y;*;Af3HmEM+D>BQW)@jv0E@uu6$k)h8cdz|SAyFyN)1rbvPTCtIkPe<gtp
zjE`QKI8V+jz1Io|MxWqbisK++mMu0B36`9>dm8!`23%UBZnSD8pDBOWrFu)@COJ6)
zWFDwT*erd2zN7GcXqT0Pb9v_0VdLnNJjBm};m==5kD#Y6$`7P!P#hO_#j<q}&MJ!(
za`LqzBsgU_)8Ai!0B@8tiwGaTMJPmKQM{h(wk7GWSAI=EA>o9jxfrL+AUnbRHZ<|M
z)u@VL3tJgqtE>PL$<0W6CK%UCcCLGSy<pzybm7{wAGy$L(xgkPN5cuoY)+ch8<Yqs
zFI>#N_@zT8{>~mR8T`VqJQ@emi=T+xWs~#g3@lpm1GZ?Y+$5MMB(k5IB%s@)@%U`q
zN)xH=v{RKZc0_#Pb#7L!Zpx*%^h~oZq$?z3D3g;69j84}^%Jc`hR=uqDyo6(4IYlH
zau?0VVUzo2_8#4L;jg>-mU$m39{mA_*i_XfK0aWkjjsbjm*afQ|8VJ4FXetc3|O^%
zn<S~fvj0?prhr$MK<QANp)?}AIX~yPnrqkJF|JMQDcb^Uh(uXJlJy8UhbU|*ku$yK
zifhfLW8*ox)!%i>zQr;Is!`11W0W(doolikO+&(nGkA@gJd@ZNFdtPec62Ut@}qR3
zK9OVF%vJWmz2UQA&|(`o4iA)mMu&5(X%=3v$THwj44aZWXnb$-Xxam%^7Y=E$G`|I
zXS`D;NWzoIz1&Y8HKESBUKSWmH=<r#B@yx-<wRkS`9hSfPb`Y5kIy*q0QgkpR6Ksj
z<8FrJ1eNEGL=%NtRZ_^31TDE8JLe?Vk)}VE<?Q(~I6A$&Zzqm#Ygx?q&|LqKgzx*1
z(~hUAuLMMDh>ChIa$|dya!O@m*)O&|U#fcVyms*ZB_zRLCu~JZ(T)-iS2;am#>JG0
zuE5L)OAm)>*c+*kSl!IimZ(LPpMsUgbZGaQQqTue_$R=jxKtiX-TUd5hwTV2UUNvA
zx1dzCrDXTv8&Oy4d99OAWdk0$e!0CLwbqB&$lPxb?aXq6w-ZedsfEs&FGI%u+#~;&
zx5LA~rg(fyCd$E-fWb*8-ith|(5x+<i_#_Ts!holVJ!35mn|^yZaXgAnV2djeF=_J
z=`(Ah{Mk@6+UUs}5fu?mEn#H35;v$jN&Vb*V8WHLIj-f2zSvlT<!)VzZ&E>$MHmN9
z>cIF|E|YHP22zDh3INDbAj^T~%;H-#K!atCq>dT~zKT#;fZX3}M%y?<TX+32hcood
zE2q@+#*{;iRT6bn1!A1Mx$PQ|c}K1caiO*M<nN9b>F<Vl*WzOE`<bxkjO7p+38>?{
zX|)WB+^mpCCE-(p{?B)`Bt06^57CHTz9bVKAP~qCNwj14W<8Qxz-jb`=~j*V#$Za5
zDbSZTQ4Chs<9dd)a$AN;ve=shXyp6-U_!<i1~MU6cx4?LUwSqLn$;>0J|_F81N^HN
z@TC_2P%mr&Rl$QXDj<~XfW7UjSXGaQN)}Z|h$S!hp@#TzJ+`}bw`3a)VS_2|Iy*Ml
zR<9$5wQR7z64B12f1>tM%LT$s8+(m^qhh<ed*$z3)!%u6Ke?sNV|)inq!k1CY)%Os
zjF&W}{-vef3#*BlV}Z8)GI?(s7fY9H`}vjP;?j6X;5K9p%WE`Mc<gTX>j&ASX4=d!
zlwjr7ztdE|BZ(2ETOQ-PQ)*IbYxY@`Cz~gX9XHu%Bpp8YZVE$6H{N>szGjQjAI8jA
zSynEb$D~wQSZNUw`+M-#r`UWX@6;`uRVo)xCHQY+SE+p45mV8W`F3c~CVv;-dlYZz
z*3KeTA>Wl+cAq_{+--r1ecQzO(bOG_B24p9xcYkz?BLsu#)4uin0{Tc;9_s%e+E1M
z%bC7gku;PaGrS{u=cqjGew;J5%HuPNMF}UOR(aZ1o!IM6(n33@+ygP~osm-HfkYJl
zDB1q+I7$Q#e#UFwY~c>R0=8Ap6uLD}rXd~$e#b^60y^TBZ+nw?NK&3~3@=JA{<~W7
zM?7;O-!eZjdT(ov35pU{TvNux2c}J^3}iu*TxAaXSrBB681oqVMbX#L5$1nIUw>v6
zRQKqm&gd8C?T-RiR`W3Pjmm4$2#QJ~4Qk=o^K%;MU)TQ|V;_!);^jM^u8J_`2X0G~
zGORCuw~K-JOLyj*GyZpu-RpgNbzH0nTU73w)$%LNv{yjt%q$=928CI%pgM{HhtIG^
z{@Ia$%clKnh$`9FtL@Y4rae)g?{d~F2bje~N(JWMNq)i($g`4~_Zh?(o>qKJF_r&!
zX6>($KC|F~jv^MkqMts-mVRss7DQ&*gZngX9pfDLI4|ttPi0K)Xldf{{`*XA3E~qz
zrhC*tP6lA&j}Ve4$x=_`+ZOb&67D&QUH$hT<rV*n-oMCjWpO!mWt3<>vA>w{1}8K%
zi3Yw_@oU88WSUjiy3)+w#oGNdjr#X6of*<GuX>-MWCJ;cT5F{#7u@Tmp0Kv1YhfoR
zr~2pgOw@jW_Nf>J&;IWrJn-=pRPIsFK$l|+0#AeWhp_`9>&sQM>b;IODoJVibUf<k
zJFqIp0*0rO{}mTkZ&}7k2W0lnvYh~CYRy_5461q=?q4$<X1}0ZI;+3oAf{UuFT$%k
zAhp_@WqzkAi{rn~<vq!Lu@{z~hq0Wy9B$oKh$Jwt3HLQNRRTcjxLH%Uh<9#Vo5>Pz
zg~T)@>OKs$^6zr%Uow$SyLa3RWR#dVR!FK$VDvw&QA$bSVJ@)7I{KXJ%+@=WfIpGR
zpSAoy8TY>+Fv5y|dZ^iD8beu&w2i?z_S``gs#sjhOYcmdiRm_Mt6YEc*}MOzi1W9R
z{X{SkQJTEiZDpO`kgkbsJ<Byc5w@1KrcvVgTWJ4+?HdZ*?uxQ@wwom-R_7()V}5FZ
z1z6Yrlc@jmbkO0WitX7$_JiDby}x?_)F<R^3=TrLop}@IQm=g)(unBi_js8@^{=e$
z|6q15TDnU)CbjsG6B5D#i>zJ#uAmZ!D4l%-&%}h5HlL%aKww4JB+9z*@&8Lrl<?4=
zjPuJB)X!Mr8m%S3=^9uA0KgX=%SU$Bm%LiN<aGOgP1ir>E$xeMUWge;v4VWcE%6c(
zb^RAN{(kJC&8^Ot&IzD?$hL&Yc$PN)zg7J&(mvsatM8XsUk+OQB>w+1m=<oYj)&#q
z_w+4wj{mO0SAx#%){dk<xy@9`Se}b+X-=ss_YYWHWj%@yto$a=^50FXC}9wr2|3Qs
z8G>NE2XHF41q!|X!8E5ZIh4EetTR`IhSL9`Ict(Q**7jLO#Io3`~R|=oAE6YEI0Fv
z;QyF@qdKk~)!q?_;O~8O|0Cl68Av+fa%UZhklOFX|9|;@kF1y49?~rA9D6P{VT4RA
zW1N>$ZVLC{9q@nqe^S+`{Lm&o&^^E}c(D0=N?xr;l_CWw|9>Oy;b+z$97OUAoMZo0
zp8Z?gUsP|U`_=T;5WJcg%^HQSYfc49r^Tm*y?BYWddCR-?;!Ee$7=<J&nR?1V0BwK
z(61$1H!W?7=)W{CANhjD+8D{CKEJxQ4VOD~7?XItOflQ|0#{hEgLSb_@@0A2H*d(r
za62~!7?t66c`?RR1vp6p7$|33m(T?(G@v%c=tp7kXWrplO~MJ)ngE%Lf^PO*ZQyB%
zpY~S-=d@jx^SvT4KrAU<?Y?(VuL6-V8D}PGqv83IeK)^>2peBiUVJtyjg(gI{5RQc
z6;t=3sceBf`z`-uy@$xI5XM#_sv;vMw*eByn<b)TB6GKY3x|&h*OScpfxPD>(mE5R
zPh4V-783)|a636ljNDo!IAUip7JJg@`yr{TLoWw2;34(kL`g>ovOMH@h-P$egPo?i
zQ+SXx>Vuoh50Ca9orH1VsiwpeWM2q8A01lV<n%ZhDv&!>r)1yT_`py~Ia?#W*2oaS
zg-!YZXCO@Z%(E!RGtpWcG4Ud!j}xLwr;c%s(Xe4%IBfkX7&9M5RV23gfyF%ob2sKE
z8;hocLApVRdzG7*y%7M>;p@-i=qCfN4`cN22~RJD78E#dmXg~F|K7yV`BpmM&bA`O
zZx#9?K-N1=O*yU|<Brz!FOqB)h*Jdb8iT?XzJwFO+&kIE#2^w{HedIgmsXv>=MtZs
z51q)vYd3T-vpa(-?ATP!wBreacr?|?aWEs|BBS@Ealon$#(*cJi!t;88*=naR`M)X
zkt*68w{t%=UmSjuQ6iMJT~C6u>L5Gcmdo;&1|yq4w|KdPjDTx&t<AZ6_D%sdYgkz-
zcS2%4O%$M?^!CwT7MG3%ClUp*4|bP(A~t{F7kh>6=#L&$+u%+~5u{{jY4W&@W~6|C
zh+l8TfY*|WUljUA6Pmppz6BRsLJPxEJu0O_h9u?OqQBk5egRnVzIg=>eq?z4&Lp)D
z0+M4p=OJ^0A?FNZw4RAh9-acQ3Sbp-qlbxPL@9$Z2INe}ZDN&@G-KQYVqH*w@>KVF
zpX0J*ZWUUEq?aXHwdX(3QXetq+T+mZo8f+7*)`n^KGcR3Cj48bX!VLmhT|xS<({+b
z(%5<XPW9<Y)X3KbJDDNL7#8AVc>MN`lp#{=r~h7Kt>B!xFE?YO-0K}+Q_oVPQwA<y
zK#%#_8+{Xg|EmBt;OlA^q3~Ah{43$1_~@E|8~c5tal98J>YMcpqy|S-X@SWDi8q8F
zKk$@#k!wNXb9%Oi7Bm2tnVhP~{AG_s6ff<DK$~lZpY4(%GS4*ddD{U&4D~6D>yJIo
zh?g$g8?W8>j0xNvh~J%DPw0UDI$ePW90M2wFI-ltHIA;!@T<T6X?hOK$JN7lPK*y5
zdfObaEx&4|g0vvJQ{Sx#FP<OGrFlot5Y8pv628V89iU@bH{5~>AG+dD<e}H~b=oE7
zJS-+W@|m0sVZft=_}nnEAY-`f;7mjq`+N0cxAvhwh?RcWb89UU2|oMwod0z@Gxd{F
z$em55u~x1gMU4l4GL8&*hbwK)p@v?|uH|AWC4RYkSH0eSeBj8c2k0slJ-lCh_F*f)
zJc>fi)I>C`ha4}o=!MzmVcnf_`A5hIKlWF!J})duEhh&BwOeWLHzqmdgYOG8d;qA7
zIyv<dxmof$)`Ej!W9)mHu-WZQfz4aS0V3UKg~l;sq~RQ|Ygv~g6kK&R%-4I81>Kk1
zpkOW~U?^m)AIoLsVZ;h%<780}Y$qDCACHl{AU8n0TSYNsU8FP%r*+Nv&uNMrx{GGg
zH9?N_WD#hp#EV&}F@L<!kggg@F0EB#xP9y_9Y4@nP%N>&Vta}EYE+ZTQO3mC^}oWd
zHC&fw%=JtQ?gG)@dUB5#ulA;F9gi#b>$wlud<Q~-w%3#<1pz7vx;-D`eaUs}*w097
z4^B$k{6dGS1iCVJ+1{9gh?erI35TA1D_SNMIYg!EA!HXI=&nF4f^_eZo$TvVDme!s
z0}bg%ntE*J;cNhVfI57VA)c4pO(yd^`_<F7d30Jy-ig@BTtvB^%D&6CFxex+8izE`
z`{b*>-Dm>20)xt@7MxKt*hmyseJwA|GbN2D7#&Vce0-4pUb8cCekr>;-4~9mCo89<
z_Nr2Z>=&16u;hnv4;cyTCE1wdoi{xr+3>5+-&3Ps$}!NdwVLcP-TLq<kQ(urfaj#v
z|JpLvdwgR2fF*E6u2?ZO|Mml8lkJb}w2o8TNH#eWjNG=aNd{{7cqvV`J3a0epMB+#
ze>*MQ+wg<|X(V=JwBvSnH))h$AlF)B>a@4hdT3VA%rgKfx|`EVaJ_pA7h#DoWm}dk
z<thI#2|Lg&un8DxK`$hlsE29B2BuY&08-MraknX(3xpBBk(z7EW|jEB9Az5_7xWvX
z*fY@0Uw^>j1x@DroWrA<`&gIoyFef(5{CLZtjOEKvT9s>l#E7nWu{a|AgF-K;Ls<P
zaA>)V0@kBkah;|IMh_yQI#~-O4QSr5-twWzuW%e{os6wqC^Ksq=+>;>5yw~x2lTkb
zK-#4E>e47|;d&q<eFj5F3x-yho99o+BTaPg@nDeX%j<uAbi?~TYo0%`uk5Oh^K7i<
zXTT7pAjv(}63x!TTW6?~(-+uCsRZ^@m02rug|w~1J_T(8F9$}hWB)-LGG0*B3(ot_
z0}vIU1;hM2H1YUG7dx~aK*Ua!@wBXOISm|_^#D|84wYmTJR?&;95oPXU-eB=G%$58
zgzxz`aO4FP_lxV$q^yjTT-lLSG{r`{jL&gFh%Z!aln=c-=#q8=g^(UGyn|FHFqUFz
z&AfL^+-1$~0W+hC*!&y}t!LtLKbZZKYWCJgbi(ekbvWb+JDkmY;KQ!K^Mq>`$H^Qo
zbVKtZi3F^^c9>rbZ+cK#2yCa<+zp6k6rJI<&}O&r^p2lZ8}@pT_MH4|#$mRZSLLy-
zO4#1VoMQoqL4_c^G1`wM`-jJvPjp#hX3L3eqbi@jbV7U--bg&3#uxx>tgvrm%P}pV
zr$WCJ7>nKiGTp@F40SWY_27QG(dxVOO_pXpXN1d{_t^bFWT>mgx&>vzx#ae4wd2s+
zbL!yZ`$vQToA9zH>!!~umk1dqd|JT|_(Jw+13moqM!RL4PeL-?xpZ(x20VJ)>b-vQ
zq;)wekMuFPtqvte8k~A!Cqya?ld!{-)CEvVGSKiB44~o%?eE~!?Zex)jE8?aP1e_d
z!WQ1hx(O!)WqrGx6=PN)i_tz+4UI$iJ9P{jUs~T#b`f0W)SN!=SYZA05b_oWwwU95
z$|}Ri(d)}Je<2yY=b#tXY@Hq@5(A)jC_b*Hj(na{c)RSPN%&-J1CaHL6U)Vr=D$Uu
z#hUKz4o|cMp(5PCK#kn?96y1s1oq&smQ@@=tt-Z3dini>B}=#TFxSC?0~W~~&vB<<
zKDj-Y%n#QEuke-**D);BA7GIj*wTv@d4cr0^mB_0i9!K_;MgrVdotvt9>U}%BOHS$
zUKx|5HMt8&XlRqX|5A3AK8ibrq~HV^&M}@=tej9!Y`lJV6pp3x1#i_(koI-^Q0WqD
z`9RJJX~*p?k7G|dqEMXJoybCe1Jy@+A05|!oRhH{9_dz9E))SKM&sicwALYd`+8;J
zl4-LI`U%S>`zC};YD3tD4Q|@MUD9>DK@8w3snTzc`sD#ZdI@iTU3`CxqqA6f=l%g)
z_B6`1!{NqAhv^j60E`rXyrDuN0+-JS%TpGM;}O-`wjln9(N4n7YJPjN|LUG#*XZd<
zSYA(wpt@oIwhpGXJUm21_~VZFQ&jIEv$!hUV~xdWSiw)+?Bln)VP2|Z1~@&tD3{r-
zSsy)I+3t0hA~DEU79lfi-}<<F<`u=^O2-%SnS0m&gp$N!R&{mgTM##`*XehzpL3)u
z1+|N2EBY^tPhHw)-f^=FMl>EGoduqPh*Z<91QrHg<O>jTEH;HEEHbOiSO0R}i?xZU
z&x1fYqrc3=F7FF0zBI&h0+>AzSp_*Qau3FvL)odCZ#d+~@4|$X3^IzQ(*(%+t<y6=
zalH(lQ(EP{oO3r(+Ci;Avlj%O-<@lgd>5}<#dXiO)_9c<yA`W)-Gm%FWsnGo$BZ4e
z30#LoS?#6FHe@a=Xt}JjBw~bjI*P)J;vhd67^a5EfV)TRYh<yOYg<lVjA_jbi5u9B
zl7^g&bNd-XD;;r1+`(iwJ}qb$HNFyC%5#r4Xx;VovaB)b@X7$O6yB?C=&<q8VqU28
zIQ(_g@Dsprz#9ggYE5w9^0ptJuu`6izA)sL0c|?~PF43|ItL;)bDBO1JL;@y&*3^w
zqOQMpvP(al!mo3fzK-8qO90+-&T8uMfF+rY1!CUo*AU>E5;uh@UoL$%W$_)TQ`kct
z>XzB3S>p+pHb6;pXlhQk6}<(0t+7R*uQ`;T%_I23xkiGT(7<42=S*$rFgb=dMi1el
zDJYR@4hzYGBg^61uAbjM9kuPuadn>Ydae%EI@+2?3xTeBBz{Q!dB-q{GSA^)V`L7a
zC!W$fbO=KAZ`6C(&SgJyZeT|@9eT)M_ca#T5Qy?XD60<nVsZ6bdH~m?XQDd2KhS(x
z*k&sYB;Sr+P?w|E>x$4@@|R7z!+FG+=}nP-E-savewz2n+j*&Pq3&RM7BMm=$9~~3
zl{YR4ILdc>l9v=VIo`ZH|J_apKb@`0&5LoV%@GLRMb%^2V+P`DxvvV@>fgYa=(I_u
z{;G!^<(N*xPi>s;mIflullN@uShF`h&4o(Z59@sweZl8~bIwPm`DbFja}M%GEwN?r
zK0|r_`dzK#Ohib*6PDdlC_LIzN48$}L&lHHb)Cb8>`|Wi)v?45Q32ipKmCL;U*iwE
zY}5$=*6wDHy~;e|uo=?ncAhYr6eMp$y62j$s=fWHH&|njfibbYTN=^2ZoHSZ3*xln
za(;!9{Wv64PrXvdo6mH}Ho|ZqVlJT8!CZK+W;XEgMY|%&4cxjAC-@DXk*u!M<wEga
zROhD=blzPF{HT0G^HJ8s^X{){h0K>L0V2h3<gUV-rKLY$ryMc%9$sNXO%(=mCbLz{
z*`M9p2k(cX%<Tr0FVNJG6{wO;PmfMagJ%)#iq2X?b~$_$%o?v}vL4zcnkYHss9gQM
zC%L33*)?*Kmst{SqIRF%HnrGRu?}^V_(s>Hz`y@4-|Bsnt}NO(pP0Zk8sS{OWR6-!
z>uQ~Hz~HgFR&#kR?>7H}PWiGuSI6C<QhQXI=zwZMR@6+alYrzs@_DK;&LtMeINBFY
zBb{<)kD~~bIaF9J@x8?@HZ()Hg?lldPB_Ht<ql0Cj3lto_~N_$vSw*IlV<IJD!kSq
z6(=R`GGNj!?hcA|CfSyLbfHJ~Phc_KgU#+8qpc<_*WJZZ5c7@ls{)Lp>3LSpOS5!{
zmi1?Q+sfx1(iF2%k>ZPxh2_JJ>T`()v-OLvg2t!t`xTYsb$U78Tb{UsR)x4grwm@@
zf0K7y2t*N>f9oQH122a>(Cd)r0ctQghDiuT{&z5Z50}OfnV{Cb{@WAA-kWJuwwdrB
z1Al&U?RwPAAfZ;1Y~OQ#zUmaAs2LL-36BrT$vaDrk^Rmc<{s9|VonX*(DPD`>fwt7
z4i5DCNMfCc`BVVn+3Yzp$kk)G(&Ccqlj=5lzDf5Xryyqst@?db+mE?BO;7j+x^5nY
zb}_e?@;)FKM!L5P_#Yg$uJ11P3}Eg80z5^kndXzW+z`MhC<Kvfa3$dM%*iO(9=qE_
z=M_S0Q95sEauz)GMY4s`YY5bpcq$*p4ZIuYV61LtB^Q!{)^Bc$Y~>a_3Lnxu>+BGP
zALT5KOf2M+BRK*~Jf@tRklk6Bv(1#4Pe;DiW<p7(b=}RD>%KOdv$}Xf!y@KqFXn`9
zvkD39O^T5@oe}YzqxX(%!mVkeAMEdKrEY;ZXZ82u5p=4JXIlm5XU3_n$ztl0EKBeV
z?NJ4UpxHdj|HKoFFOy|FvpN3CB}!eL4|Gau^GM<EJ4`~oGOmp`k-2SM_#<^4iwc&k
z)`wGoPL}d`y`NVm=_3Y;gqIRMQ_*S)w$=jZ{6O}7z8r@9rv~ROJm=c$Swl5$iJyFN
zyRe46uuD~~7%t2TWV5u~I-X|O#4B;BlHS1y>_d^f<kFMDLk4S^qN7@hn>icp>mW~B
zGH}TmKHvo$44+oJJM`r-)rDpcg)6g8$*1ja8M#Y**pz%*{FuO`qYv5ZVdMf4a>mv+
zMb5_DSQS*7qpEcfGMtXn0&7RrC8hhTs8Bnf+kH@?v!BTS2D;c4MeXp#oQsieX`Xl`
zx`^4PHLIt4d|!n~u_0Mn15{$H-41L>L7KicGc4w*0iercy7sSPX{*+j39czbt&Cg$
zD)SX3L1f4^nnw+jPC(h06+351Z4?GY_wSuocaeZ!jJ8(+omprHGESfMjJK^fEaaTC
ze=eR8{HgEhRP;Padw}u5@63(#Lsh&G+k7^Wzdi}zQ(gd$qQ|V9HL9HL&D~EPTZM58
z-{HujlLKgHe*aZS^)wAl!ID2w-I^uolEm{sVlb;e@#_3QrT=itbBYLB(hn?y-(JM?
zk7miduuUGqw5|h>=Br)iqX%c>2Ge-@A9O(zzpbZgm*N(!vBO59k2I<~v<(~tq#mq0
zkMtv6=)4!z)L&U92Ae04#bGve>Qbs2p!Z``31hS3hGq)SscHKsPDNs$X2d;SOD==6
z=N87lQ@Lud+@=E!_fw;&yjH-hR(<}=5!(MGhgXAoeozXWJUN}HxSrZciBGk(l6l^?
z9EOpHQwmNQ^y9iTIH{&KIndQf38c54I}}}zg~nT|C1+R-e0Nk=Omnmi{FqESSRPsi
zAO*Z7yiEq2r+<go+yN+5`TypwD6`ny9Z7+Y7H8%{Z23>UnG3nR+W$TnG#4fvAeI2A
z{EchesmK{Oj(I=HZ42dCOWqD3wa<HzYJ+$FW}X06UD&b;1yIGNvD8oA)Q9*(fzbLI
z5HfL2Xv312@S(ttCUqB+L25WK(mXiZHy$NqAwbpDd@vpF8ik(x5xeXOep+j1cSDkn
zFXw5Iq6<`fo{4*PMPtrN9Pw0Oa0(r7Ettw&&$4;Z*3KaQCUto^o%b0fMZVA7_v`j&
zL8*dnxM(Ee$ZvT+gu!rN%Iy;kq8;ENGo)F`6da|Z|FI6V+>GzDK28uU4@WP#cBY)e
zjFI*Nbgfg}+>SzsvW;%Hg7T%Dq1UBaU6o8)QXKq08GER3rb+`qu{qjE_E)*%4MmVl
zU`H)SbYyyq*>`x8#DLr48^6lE(61$y9>~rgSn9r1l|P{`6KMsDE~suZvQ&nca6aCD
z3a05?H1rZ@S2iTv!5j1G+Pf1eGE%C34&wnJ68eCuVK-p(N9y=r{hQSjbEU(HDJTi&
zH*Vf_sQR%X{z|<;QfJZXL$6JDF*W3r6luS{0)aUo&{T8X!KDxEJ(X1pjaLwIA2&dz
zZ}0Rj<(zv|eIIDVp0m_OgSo*4)d9KPc9JP?VBxcj7cI=dG)IEAUA?UXvy)$ITfvpz
z`5rxxdGNi(VY%xj4^^Y`#SfQl_x8!rZm%5-4q&R=RJZhzyo=KZ8=bm0^PdWr%+!V2
zx*o~Cm^U4@ewv!RGRQY!*)LU1zNdq|o`kVJTe^K{_%(5KS=~=zZI+g-e`b7gxA*_6
z>$>BbTAH>XB8n(QKtu#VK)Qf}bQF;eB3(-8NDUonK}3+=i-083d+%LQdI`NZA@nAl
zkPyBT(D%LXckj(#`JJ51*`1x)-I;ynIr1u_qPcR-l|uIv!t`=i+?`tP|32nuyN4@~
zicUOj6*8XQIKKEZ{7xnrt10y7(Uae2anA@wBYC8d2E&i6OHYj>3&ZL;Kk8{x_mAbV
zc#_<ZEzzRpbMI8X`?yQ9Z+D}4GPXpZbIi&sm+F*(XH%HpOyyyE3cAx7V-o^I9Cetf
z8u@AgzZUqDgtvzQavu-}l`OciYk3N-J6S9&U93xKK~ruM!L$>!4<BTVmUs@!cNO{W
zs|-%N1gO?@?Gdyx8g^VzSvGxLhe|gQ+;ZG4MfI_b)j^Mgha0G)A6Op&ul-YT7+F`~
zNQ&w>hMSfNx_eg0A~WL?cC32#YiN^MxfOPHow%BWqTtRw!*AoVp6*qi+|%bh?vjoS
zm=e40zB>^Kl9DG`d(iy?3e{ZQv}%0`WSHCu@EH@a@tCk?7^RKu0}MNQ<&-==tMufK
z(fyE4FR|Ogo%`;ESE9W*DRs^~Hk=G^FAo2=lKok53QNB6!N5H!t1Kgd9%fQ=4jV5b
znhI7P*Li$^=3f1LItDwEe+xQ7@}>SNyj{7W%MY22C=lw1*+Ba&xFNMB?LY(>zfjg*
z1%<ivUk%;}&og~XZzPgCp5Cfxie*fo7kDtOWo_aq8QRG6scDPWC7ILU)1sd%+(qKM
z?q%V??AeCM23}Ry4R+lF-^!>=z%cW{wIS@Z8TcZ?c~iGW9wRheVv~Hw<-a=qxLJ=9
z>6my`kN=ttek#AVos-!4PDa6usJ0kl;;9|%0<49+2Ud$PmV-ORW0251&vxAw%fogV
zkdq;)J1#)t@pOBddaR-Hy@~sYY4IqDcFAd>Qto>Yd2FcsP<$Vm*z6HnN_$7Uzmtg2
zGLt%p@N92nC_6i;B3Up1>l``RNVK0imK8W`fwg8Z0`EK-P*c5mc2ffJ+j+Q6cy~+b
z$$rXBw+e$(;JjvF0{XrJ!H(Um!A_&^mx`}C(td5?wAt(_dBUHT&6bG#sFnYSaioNK
z(oMcEZsI%K@#JY7OI^)@t;9%=)6|%w?@)dELVR-kZKcLW4f2PK3pO@S*%}qQEE`>P
z0#duz*=bj9ICwC6K4%9N*4=(GLrv-Ee#o*W&;=eEPjnv791L9Lo(?~7s$AH=srm@&
zQrgoIbfl%N%48qWld~J>0u}_n<*6Kb*D0=>(*K&<=l%^3CWHG7F?A&Z(~n)kTw}aU
zyNo80HX$0K8#UJQ`=NxbZWV^V7JowT^~WB@R!%NXn&waB6}m4povNft-wOosE*kkM
z-Z9TlCSj&M2Zn^J;00dY&$KOu$Oi2*+ufL|XXp;V+Zavo2gz(`G6edaA4I3g>Td*L
zOpGfkp<4TQ@~)B;(tkC*<hetlHk?J@9PxlLjEvS<_zQ(7f8An>JhEt0*)EaOn|jVK
zKDR2<zy7}4A^C0t9ZIFPL4J`|)k+cb@>zhf(|$vpC?wzV%lFtvkX7Y~fdaX*Z`oSP
z**&w!1WtgRi!5>!+{aF9Ch;oYU9N+#MUM8W*g*7q<*R{e@HdkeH(mKUmvTlVGay~M
z_|_wnS*4N<S%C`;MpI?fGsLd*VFir>BR%9cSJ$F~PIHhU4&U>{y2L+lkaa&c&s|%w
zew?CG++uy=uku`UH&41y+2&Jqo|q^qrPgDh=^(3LC<fKn@75d}EM!<3oQip4+n;7%
zCUy^svSVdY%g)&N#hGZ`{Wfk>#554z4St-T*=;jjKTT^R=k@)^%`F392-G!^?M=|*
z0?t0YMIhVB#97t6FI4bN3P`Q=jeq!k2x;&CZk2=NcRDlpitskal+UUT;8xvj$R;)m
z*H>|hHUpmJRw`~2v|Vh}s^(;$t>;3N79k6jm~_`xh&p1qlMJBc;XN`;qT<&NWc}dC
zl)_M<p*a{-7}X+R%Id}Y(g39xvoD7bUaaqs5o4+t{8ia{f08<;`F*WqDEfI5cwcna
z?}yovtnR92vU-(j@?6rk84E2kkTYOlEaZ$#slUW}WeX9M2(`YNe$hR_Pv~Bl7lT3F
zmmt;|c`KjOpwq~gP4P_yOT9n#WBnC8fIUkKYf^pdbd3h$j#`<Zr`gCJrP{V3>c^O#
z&oFI;ln$q?wysjfkCV!2_l!Je<0Bb*kg{ZV0nwF9ph6N%`lr|)c88f%S=5Qp=h9bV
z2_+L_@B(qKXE%Bw0X(;(-3n?NKTm@zJ`aw8ILE5vZ*RS}4~rj~!HGI4-`zZ1`tj(4
zCw!YRlyC8V;>o1?VQiy%H%eaSxDcLYh%|R;ltK-dMNFp#VOF4G%MV6$X^x`WLcaY*
z9KGSk6*%rJo_hQ8;n^1TN60&l)7q2gr|Z`&CE`kcKrNp(!#39TmUg4qTqC(3rvDre
z`<3}nGI(R;@to?E`?@p`eI5kYobr^vN2Z;AegI<H^+J8idWHUZV2_$qnxcBAXjK?-
z#Sajp_2b&>A5J~(gWN+km1%V@cV!+t_E}0GeH1^s&a9GPGdT8Ik2@$oqslH1CTPdU
zyU{a%#wYn)Wh}+}Vtep(_wXZ@fTzI-9oXo48pob_5MY_RW<F*_AEujFG`D7L9`-F@
zZMgPwVl%*!a`=tQKMyjTDCktVVYW0C))yTTAMSUuuy=QFlZ!G2%+y-zxK&)FRcz29
zrp@WD4{N++u;ivvHdMdB!K+rO%k>Sl-lXk>zn?6o&JIf+n3_}<D?BV<J^5q4*GYOS
z$$vvDdhr3=-fLE_N{;Lf{3JE|+@88mnWZ~c6|X;yLfpdE*uR0+x?)7APgt6+2_LB(
zc`E5L+aLPYfTrgmmqPf}LVD^-sdT)a@Ordoa)>zoSgR<KM}U#S$B!f8AnClx!>B`Y
z!dSDGYgUWhFh~4_gm>@1@7Vnqcb~XYaK^J^6`EOz&MM0u7SVKOg_ORkI}-JhtreYC
zGkN7;*bz4os(~*yJO%}S1PwS7^)yN#Vi{8Mncb=0PAMY!F7DkhL&a4H+L@ZT?Gw@;
z>d_kpYD%qR0Ct^6f#nVj4%c%3O0To#rDrCMk&Q_qau-+?p=8R~bKj1m=cnP^$vKdd
zYmRoDrm8b=hq$@Eo$8LMwkc@Ssn@6{b%I#73S|ZZI`1ZwbY^$yQM?08<%fyzCzta5
z_%qR^yF7N_bhi*~S0;dL$Ay0Qq+(%R&xekWZRB9`(MmEeq}#rVLGG@t&Ur!);4zS(
zgIn+zwFGPL?CcacT0C}Gl&?Ns&7}b+-ZArBV2yXF#RNG^hYrNt<b~UM{P~+XagoR&
ze$HI;!O=uL%XX86Tu%u%mSTrD^_pqSP%L_LDuXNfV@FwfKz@wX60N$}L~X(0@{b*p
z2?v|jK)mm(9YuplLR|+lr3<i%n=T`QN#sX<Jr6q{GV`+YNEa?~PL<Qft~5jyGTmgi
zyEmgg5*1@~n6eS}<}hUcWA}pz>kiCuS8qxERKvrW?zK20GLx!%)>{^x+XWojBNT_~
zOyfrCa5x4yWuIXBnJMAOXQ97n#ME)`#@W2tMuTg5v=O}KkSPjH_z&_l{P_6z9C>PB
zBrPO#MuaA13gY5fa^KLQ4m>OF_0}YNxDdoK^m+<Ee>Ag06lLYXA>?Z!bXxR!0^?ZG
z_}McYfw#^$V`@Fdto<sP_sRyD2C#OtcVuhE92p12u;^)sWXhqHWTI_9^fY|V=en@L
za>lMBG%+{b@!UNFGTFT_B&3Y4eq?*bfgldJNTc*`fB6maqGQD6!Zay3mu(KkUCC{<
z39XuYu3yFKeOXava5Q!b?x4ZloJ}=&UWPA-h4|1khME6`Jx4r)U=(U&Ih5rqb3=E|
z6-`NI(;!5PV^&>Q?t$5IgpZLYh2e0VE#=;t08I>KkWEVD@6-oYfz?mH=plY`)wVzs
zPhvL@vr)nHNkLza4y*k{ovmM{%G4av{@M5|W1#|NMp+c+!8;b@CLT(vDW-(j7h_`8
z7}rK13YXqUW~-|cAjthcJEbP>OK4;#!*mO1DSyZN*i-OtVRz=AIsFG#1So=7VfG5J
z>I{FVC3=}Erky%KGO$hXY2ip?>t)am!(h&y8;SPS(6cpD{3CObNB;QHL`rv_hm3Kb
z!XK&{!#*1TSGCN<`WH+tu)#U7B6S_+MX_bFN|}@>eziPeT=P{v*F6H)Tk;q-Q|J3S
zYU%DsVe3K_TS0KhPMAq!we2P4%jc`|?_t9B_57=`H&7YGF3u?TFTW#ju`sM&!omMX
z74jcJT66#ggz#lM>3>B2FCwX0oDM*UAxG)jeF=R8|M#~)jrahN@6`SBzjLjdN@1da
zXw76z2rRe2D`z~?Nq^!NB!4@~=f@eM;~!93nE;c)64*xXska#2M^7M>bKf3LTtFsz
zjr&`yK8f}Ud1(934=tni?k}LPck>^lIE<{RGh|`m0$0|gY1{TZICZ-&(4}!0s4L3#
zH@<`4dMhLJE>)r^4)fSkj0m7Cm!o<8`c2O|a>ONAaeudMapUfd^UA9~D6ao%yo}#_
zI(4EJ-#iY++tG*<m2t!h@)Z9t<|TUnUx1h6LE_MyzT+QoaY=03uH9y5tVbQyfCu<s
zl;>PbfA8V=M{%Td1pO46%QTX=Lu{VUHpS~;#*c$LRptyp_4j`WGI^6^wv^}!q@$@l
z5Xz$dxx>hRhk}aYT^CFB?65Y;#@=tYV@}k~vN9yc6igZ~ToIE$@AxnFRF)tPm6nh3
z^3At#$LGD}bnK1@a-i&Z7ZAm`RdDE^_c`j@Wc$^Bu_X?=hrki^T_0^*Lli7hh4-{3
zI;LH`{5UZ#b9|6NYz*U=h4Wu${*Q@b&CD<_vx8*;wk4ae_cUS-+CcX=exu(+Hg8mL
zGhjR-YVwROF<#A6Ks?Esp_$G1k7C6?Us0ufqUt`N6c1(1h^*}pyXZFem|ilSTT-t4
zp8=6`()we!BVZ?b#+XRXS6)qCt;JVDoO-MmKw6-PsD^P(t-moR{BBqqlXrp-{f!=q
zF%aX<SEI{_gCNex?x2|t(+I6@p~@Jq;XRc`##f>|xd11}zbNp<tQg$is?b&|FCO(i
z&lSnYPiI;Hps>kf{B?e<eKJU|`QwuRYaezDMaI=_Y~W){k@X|8g->!^hnHL0;!psa
zhQOvr#QZ}HN$Of)&Of1-y){Wj%cT$?rK8-*^t?omUoKveb#=mC&x1X-Ut*|w9lSVs
z-XshT1qkzlehh=oY1Mvr`7h4%hQr$@$Lx4bf*$1v6D!pDRSJ@WeV20eF<c4_+bJy4
zTov^wMDJ!7?2PWxd&T?WK6KWgCjTAs{cmRkr1eiIA{4Yw$P+#KJ}zX*aqeGk>7}Gz
z0OjZCZ=I~V82?Q9aCKOobH)i~VSLycE~xg8a){fgaKB#;(%BBM={K5v=O?&-S3q|9
zFn7W}1CpODZ58b$q>&%(VkWj}xt0(@UwNWyES1i6>)$-~6?1R7j-ST~H?nCL+_rr9
znIR7C85<oPmkEJf&je=j!mVX)`>{Ocv@{Jcts-x|)zz<RYo6c!WzwMQ7529A0m8xH
zwj#20)H`qcm5X7rr&q`l#kiPQ3{%m(P>Bp04w&cMB^Fx2$&W5uq7gHvDu@m82K|5Y
z4S%LDEhY=4T!Gg<-%es$<Su@Np<08?w{$L<Hs1HiuvmJVrlAx;A|Z_P<e#mdj#zTG
zDpz&;FjBgZM43hK`P=nquNU<IjLaUH3UB*V+GD-^0jQKmj)J`ybT0?56DK`m`0LX8
zU&APQ{zYeBDo*&m{ZH`ot3joz(woNGpM=z83YnUxYCD-R$nY*?->EEMB%SYexkv<1
z1N8982Rm~L^p9&OZv8Vve%TSvd6QJDL<bSVNYA`H*Jn<4^Qm%nn+%9tU|)NcbLEk|
zVJ^D#ZU-D5cj$p~t1Qi%2NL)0`xa^!FwYPR+Rt;oE8vWb1R)lxGw1#pSnSX2y?T*;
zjW3|CR@OKhQn6_}vE9=DEdHPx?Em>~2!P1pPl>8B%tr^UGpx0hLcSzSf&rwh(omfj
zsTQ(~Nh4(D9<rS#LwJz!hY3BS;P=v8NMP;#CieDrsi3`KPdt?vjtR*{PHE`zq>5Vc
zXZ-C2%ktx`7fV|GYKg9fjvks_)Zn1JF=C1+g0;ey=uBEF8d{27bS}M6lT#j1yA%<5
z{3E9IuH_;r=ums&<<$AGTU<OIwvHYTO}%2;$ZEXIc#`2!ecP>lOOU&Iw1?GkFYNgN
zZV%d)16xjm<lqehRZ;`tvm&u0B1)hT3`w+vrCr!Mc=HTx6J|;l{8N_$TP|C$2wWc0
zni<kl_w15T${lW1Lmj=$*VJXJWdbpZ2qw?L#nX}lckF^bW>(d<DaSF1)~e2z8#;eq
znk_LiKAa{evd)^MnT}>qtBwu@s0hN^>U@8?3M8AsqM<wBfnkJe!W@t8!i=oigNB;6
zY-QjjtOhGUIV=a6R&BAlo}#qD)8mdtBzPrFVQ5^ceHOFAa(aF6zM1(#?~-y^qTj%h
zLj03^lS|hF7Q+CFhhU(RwEBZDPsK-NnGf5-XFcK9!Pcwtf5w)<HBO{n*{(e+V|6LV
z(oNJR0GBn)JT=yI@8%!zn(pV2>+F3M170%ZQ7!O+hNr=Z?X*sJSRylk##QEfreVBd
zX01UUe?>Ox&6JpJouZbUn%;;n;<QG{)gm!KGoj^0WUU^l>%sQ2utK%KJX_zk0XMk2
zf8|3V_L$R+w!jraFDS~s7$GFdS3npf^MNR-z!gdc46nn)jmM7y4#1PX2}{ZbW_};7
zCm8KBIWH+O?YZ&@VxAmh*;wS}MPWiN1$D2umEhAW-QSkf7yR_<`n#Ifgd{7}{HN(i
zU452ecLnujcrV6^!A0C9FH2Ib-f;4qa1Ok#8EO30en7Cm=Q41W#Tor=et3gN?tA1l
zO$_hB1{uxG1vbpfMzFi@q<~e?eX1h#O1ZA!1KIwk+l6Z%Wu7WSz6Z>=ghs6lICTNL
zh>bqSTNBta!?)1O0aXy_5@*n&4h_N;(_gXE{2gCoaze);=?Gx!NVttmF1RMUV>H;#
zVK-T)VD&2u{cR#1w#2o$%n&r}92X6Z@Qa$+2nb?bPjo4N$okWu4))QZxHohM0tG$j
zm-NC=x(uX$u16H5;N(OJRLj(M9utKZo59#rxG-7433jGYM?Iup$^>DmdAd^`sbLK|
zh$FHDrKPm2N|)(c8qiT6U-Wt(gD@w%V{!c!vuhmZa9vN8DAs{c!{$1XE-TZi1Mt$!
zp}w7v@Z=8eDL0DO6H(}C0RO&QC!F#%e0E=5tdlpOcS&XzFJ*c60&y6B2nxNx4~|8W
zcbYsWT>z<-ulJxDbhcQMwU%5u5D(jf)G;g5l$`+Y#>5oDYKrOcD`cf(dY1w}e9JM)
zvWz>TLrk~i*Q_hNou-@b=;eEG^fGTFUG>h^v=pKzbrbwj6@UiucOur`*C9F@-G{@%
z$KN;kp-mNqG%{dzPCIo}6RF6D6;h>FT7C)NAhkOYhGT0v1>1Jf4MP&K=#jj@wM5GT
zGFZnbCJEFL2H_y``YMpgC<3XKFX%h@!4TsG@cCf+Lm?&Uwnb@s!H+rs&u<uhs}Y2C
z{}XJryi4z)1MgHHcoJ`{!6W_})VVBJWKD<4rN@<MQ}~*w<1drO&4mpIA{Zo62RWJh
zs@OSXeWF-5hm|eOLL>byTYABPzQnlAMf~F)^PT~RwwG9T&L}3f<$gwUkB9cN(F~D`
zTCb+r-pZC@B7l1D_j7G7)+>elay2}5i<gaiNe1YZc&Ar7fa217kJV5NN^ATOLt`Dy
z=W!)AGFsyTd#<;te?0`M;DdZK++kZB8%&AEH_Y3Ls@zT!7h;5<y9>~`=e)~u%Wf8u
zi_5}g7W_Z9`psbDwX#Z%vFMYWm%->Ix<W-gX|7g3b7Z9@G=izZV$H-((De_oMte_o
zHsuuV6Q}Ilh;pQE%5L8B7%IA^u8t*p=|R(I&*<GcJ*@pdN4Y|Gse1}SeF-Vra@2Bf
zb4BOOMS6xnZ{Fz+*@*SsycUfBEob-+F0|u%9=s6q5&XG335^(PW>h(d$ujAF^a1r5
zCA@AAOuGOLlO`}9@!pO@&p%z^e(QhJN$uhl|1fc%`Uxst)5(;C-WT0N=lsQq@zt}P
z_`k_s<z^QX!LeGURwkCu9BBj3k`XcUOP^2x9mXPrR#^hzP@N~4MN)-{E>Ka0K~iFY
zXu6diV7!pGdNo))E^GPE%Q$cqC?W{!{BL~pzne9hXdphlK3@Fj{EX!9LLQt};s5>W
z**3QKDV9q23yoaqzuYkU;Pkqi^5F2WTm3naB^@E&vzFI000|L&JI^kjhbKjUW;|EK
zS#HVE9`~M6KA3$I@zy>Y*#Nn+QmK=}=7ily^xh-*5L`}VRGf;Qn73ZQoS^FUCeNA>
ze(C&AJ<lSH<6UtZL<v_0y5gkI4lD!(yu*u!`6*oNg{ucWK#d>vv^j@jYOwuZCI;Fu
z?pIv(6d4y6S2;1!5&mQP&2N!7xZjHTo=}*5At-6%@z#f3LOtqijuHVP6mLZtx+lZ<
zt#gW37%x-PtjFm$F6hT(pVdN)k`aWK_h_znp>y{tic(UV)|$_2CbZ~?d4`W$=Gbq_
z#Ktqvu9b$1c6$UMuyw{?qR0rSEIp0vm|LUdx)1l|q#GAr>1GpRA9ejHopGM^tsv@X
zFDEA_w)%XXN}HsSpmV@$iTHUturjHbh}TQ?VWw42O3t}g8Hw*$`WSJC+xv(Yf!?3Q
zQkSPuV3h?_b<Aq61viK8fU_&BYhAWtJ7i~QAOGohuPiQK%Q%2vq50%#RLp<f#fFsN
zfC>(uTxYfbvfYk%aD~O@2jYYo<_9zefy1)pTX>No3_$bXqNw#%Ac4jTc9`)z)Geeu
z2aFnri`xd5bC0&nU88uaZY}<9$&4DvK4Ih5yMQQ>hxU{0ygaQ!{;NQ?izZaO#4N3J
z36xZEtOo7`d7U`@MNZo-OQWKYX6ZVDU+7>BFJ)~2m$nEvMoZ2`*B320wOQ;yQpg3j
z9U2k3qvSZ;eg`Zu^LC!-FA{8ni9)|ou?Oar$kUCwd~4{o-!{I19RU>*f>7X$yh`Pp
z|5GEM6SDQjTaUcY%0&H%yk~E%(fHJNG>%PEaOl>kR#=VA5jCBUDixi+QEo`FUZ3|E
zKfe3C?Gm52{>(PIYXg(w40xu;6`-Y{neE_U5KP$!Xf6~l!Tkjv>uH7c#KHUPJwi#Q
zIoeRSRhHIHlCxNn=lRzbb!sD;;^L7O{Z=@)9=3bAjaeK(&p=qskGKGuA2A!e1yq<Z
zdoMyGLOL2HgD7ZvnK0icx?1nLcOAZ84f%fFx)rjA>9CM|9As-U_Y>k^{_9w2$#Gc>
zXL<spjrjo5#=wKO0cn)ps#s}amap~nreSpoI<?OEb$k7C({$$!(R&q_FJpXkHD-2n
zE#y1R4cu>{2w)z9q++Ka5A2XAfi78g@bXCGiD50bi&T1nYDERp4HZF24&7>4$Zr8*
zb}0XhM%jCDTlsSCk(Oz7<MwO;tX*7p#8tx@=p%p!XnR8s8nL}0WN{s+Lh})4g-gSB
z;0fucU6ae!(-YuE4!GE99Y4Xjjg`Io>HrsE=F4zne6r{^Z`&FqUc}`JDDD)ixNra$
z0$H?~Nqfx;jmVBX!xVY%5u_alcM-N%=(hw@f!8jGj0ddEG&W8;jp+85TWT=-13Cht
zptPr7a&lxjYu9;T<W5QZl~z5U1?C?ojz21)H{T?kMaI{9N^}FA{RDic8VI#~Z4Hf3
zh$qJ8J^}vBe%BX#@yJZZkyXMKr|H|D+Vxd1=S5w;Jh*&*<C?d_x3XxPK^J6$>xIRP
zCS6r&aEaR#fN^#x1-*XB294l&*TRBz+DH=VB`PiA*gjxgq6oRgJ!hPB;!;J{_;%Zn
zO3*PY_>MsTAI<_6;@)~2M8)aM^pwwY`xd)9r>$}GI>cm}?CkPnN<MuLvg<UD>|ea{
zeMCz9DvcaB5J%=Kr};WA1$`R9sE&i=?ANzUDNKeWH-o>JiF^E{E3v=*tx~f7lp%C-
zb0e>BENNt`iAM;&zAg-3ia`D>g|7z(r`4%68oOqcV(?#G)w)u50ZDblnTA6^H_L#t
zGa!`|;gb^{As~)mAQr#i&E`E}YMc@86-OH*&*Z+>ys}mzAt6yxQ*-P_Qb;0x0SB*y
z;FCj!fJ=smVqs6Qd2^oM(|71=5?uZGc*MV6zeDfUT;6f;;NcM~@L<IycrG`~NfmFm
z2s4<NoSYmQ^EzEwZ&c!FDJ|uVhr!}1D)<7L4b{2j@UYLmhFe=(+dnhIb@}pT7Hy|t
z(9GW6-azy-^=Ay?5WfsIa{^p~xA(;%Zg^Ww2JO<6;R1NL1Rq|{7EqZB9hsFmS{&5r
zEuxYeJZAcZgoUHi(-~Kmm&2Qy@@lnfi=G2br)Rdcx2L~&@#11o^j?KnU#BOkpHS;Y
z9H5Z`Oxj~WBhU-T6==DJ6g@+I<Wdy@9kC-0GnKjfSfQ^y1cHfafY{_GE_8GR?j0Ni
zQrRKAFW?f;g|q7Sgm`*-#w~RWa_pd2KPRYnS=_qR27h?KYW?hjx5w3R7;<ob#4IWT
zvwFkA=K?N<(l#N2UvX*xY#QoxFvBI=mkxgwbU#Aczeg|P_}DF=b^cr@bp5!Chm>9E
z4OFJ+`j?+5M8Fto^DhLCq3Gb3W&^5t#J23>5J9GEgO|f2yjM9{gMew95JArXzJunq
z)&YTLMubijm$yzmli{SfQ;Vdt0RdOCv$AG6zfxQUbnc(`u6n+Ic2+-Q=Eyy}G5+|C
zg$1h#g_ChI{h;j*@3SNY6%z5;9$dsy(h6=p0~OWsX6g>0rAYAto*geDOgx{pmDRec
zy1FRGg9k_Q8ii&T5)$8ab#?hu5#;6OMx~_C#}Pca2Iy$^hWGru5fu$hOhg0;_tKBD
zRzluinfynZvTSCL>2VQe&jk}q>EC_L2h^q=<!f`9hsRM@)`wV}P71fWr>)XPo2!0c
ztF{JSc<d400Csh)224ZR!NK8}X&A6d@0VA*dU`s3{VG~tUpKaZ#jhL&K(tFE%o$Aj
zNa@5<hi1ws0Lvu|hmCorRKx@azYZJF!y|5E3J(je+n<GH>&wY?P6%H7#q5c6&A2);
zI4JGnQu*ld;{ZLT&nq0!_ugH=^(L>XstT{J7NDZ0?sQbSk*llJ6{fY8-r%l|BZt?f
zguw?|+W~YX+WmB~A}WHPdiy#aF+rht18;v{n~tUB+K6Bke;WFb$H^O`_{GuLS=QaX
z_LG*kFxK|z2tSQ^Mny&Oh>CJ*Yim0z2n>-O^1B&@(QZtO3*aJ{y)FXQ$cVGUD_g%&
zmv5ZrAR&r_gZG|cR{e$GZ8Yy^w}365xw$z58axl<R!h@UH4P0p2??J^e0=<6l2<QW
z!0D2C{!~>~O)VxmCT6TY$sTaIuavkb6sn}6f{Boju%xQ$!6K*JA~jX*M;rH8!22B&
z`1lWsBvR0TTi0dGUILs=9`JRok8Ztpc=|6oUJtl{TR`wOCL;9mDLc)HUxpmWtMH=d
zmX^s_Y<haSp(%dC)31?{q=1X3#F3g!_*xUty%V3t+asOoq^6{yp=qC<hFXEajdmk?
zwLWWKX2fbXgpxK6M>j>H8T6UOA>-{YLoeVyC8iVe>6QDI4;bKNL+T;{9o<}JaM#%E
zj9M$jYFN4RidfUkD&6d5M?S#Ph)r=sMo#jVYH0WT?wa;)g-oFRsyE6wmVlAzkwJ<B
zvs5nN<Rj2+>-sk78D}DLi3{F3ga|eU2azL}DH}k4SuvPbgf)Axd6xqIU${8HAQruY
zj_6tJ)2_L0n9=N^c)uznuZoh>iFuB5s}kbi-MJDD3q2Y|%DxLmC;_9=^kDYIi$&{S
z@YV3~@p1R<w`ijiscHpS{%cGG=a%+_7Cm535Q<*1?c(7rE?rCke1<gO2W@9(XC|b8
z*NN~WFd>CP(#Q#(tGz=9Tfl1vY<T)<%tGH^z(tb$qGtf%NMETdJLn)^y8wJ-Bo&_*
IJkx*we>jhqM*si-

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/operator-capability-level.png b/assets/documentation/1.27.0-rc1/images/operator-capability-level.png
new file mode 100644
index 0000000000000000000000000000000000000000..45e6439c6329155f088f921060ea376aabc12810
GIT binary patch
literal 155789
zcmeFZbx>Db7e5MLK@dbzkPhh-q#Nn(PU-G$RHVCGy1N_c?(R<Mkmeqh=XvGcxijzk
z?{9uM;~dUDd!Myeug}^CKPd@8I2a5VFfcGUVIe*lFt8U+U|`@W(9eN8U<<rk!2b{i
zJmNfHV5K3jw;v&a-|=*WWW>S1oQc7}JimZ}T?4l~x52>d-hqMbYJq{V#)5&NStiy=
zvjYQCdP>6j;^JWBz%?`&2pkFQ8E^#-`~&kb0)zN{4F(3R1pGYv2L7MXZ=iohUpRex
z_RlqV%C86M>9pv9MU;)?lx&s6#aMML%&0%=T4?K0JDOSkdH{^wkrlW!)3g1E=V)eX
zZo}%xLGb$tR^a;AZ5jf+-;daua1bboOX2ZaSnJ_2P}5VtBjAL=!^2~@*41Z~;S+eA
z4*bSJU}$S=$x1`x;NU>*@SfVj+JJ_Zg@uLY9UToF9To5dm5r0R?MFu{bDOt+7Wro#
zK0O;9Ya>frBMWo9U+aF<wy?A1ARzelqJMw>&}nO=|DQLR+dOUy*dWcX5gJ<RcQpU5
z4NPVKb(dAr+DH$0^RM+eY1w~2`Q+Z?d)R4yz5Fj?{_OPkU0|!6Fzht{vW*i)td&F=
z42&C0n2$%!5&Xvjlp4y^1=JBTCMrU~^y_;1`stFN8tKHwNDO|&S;iW(H_huCL?b9V
z{zjeQeBx;W$S#LUCEwDfOSE|S<@g{V#&3rfbnRwaqhTr64&6Ds2Y>X()oOm3iDR)D
zdh22JmL8fL420kb27w0#{@-0%ih8-4*D6kv{dbT5wR8zIUJvX8;(z_7$Eh`?VBrn(
zmp-4>KmQM8{+jGbNOOz(7Xkm(<#H!T=)`&r_mw@||Hc?kfXpM0|B;)Xo|v$BJ$*qQ
z%+n12D?^1&S|9#Pq5Ws)=9B<enC@4!rv6ts{1P72|2paa3h)0%iT=+Po>YtSrw7xQ
zHumxbP=8ePT_N{?43VMk9hlLbi^13{6_4wJ3P)&&$I;K+LYXIL%2W2Eb#%7(Nb$H%
zaw_Z)pZ*wpEYCMlDlV1Nbp#`I^y~AN@y#Y7Pv*wpd8nKg$7I;)ZF_KiyTW7?4e;T9
z^lI;+ZH*?sOuDl6yi~^zT-Wo*eai~|`>h8AmM1D8el`DyDz@SZL$O6~j*Jdoygz2>
zi4M_9qn5ToA|blh8`H=to14b}WOPy>B{lAbAk%K650N(~GA8?PidtrQ1r0Z&_ebka
zHbjSH$qrXXSMd@4IN6q$AQOkf%s2{#gj5Ql6S@vb#H2s=S&gJ*bMlfXGh1|q1Xtq7
zISRRP_#cClf)$%<OexCB$TMJNk*`vczRq(%Bbn+ne%$6MjF?(w7&Y-i_~`etj>hf$
zFy74e4+xK&iGv`%zh+Z!2qVoD)pK**&X4I5_4CI2hea>MZZ}=(9QRd{50L~;dQZ7N
z*#7Zj^Wu06Yp<x-+(l;1?ea9DROE9>sc=9%e@6T9LL;LkQVymm3Mtw??MWBcF=YPD
zK=X{nEGyATp}pRcP4QgCHZ7xL1n58Zp!M7fvxkh{{DK`2>0~L#x$%tJ-vVEL&ecM1
z-W%i81hD9Df~1#~ZW;Uo17fO79*id<*<oLYqr!VVa!DUy+WrDm$YH0TqS&-I7t}|H
z7XA0Ak~4k$CN?`kA;l8MIkQu`SQ)+KqmtP`QwA{$o!bA1o{T#rZW3Ee?sy{Z=&$?V
zoc0(ucZ%?OC?p>)OHO|?Z+Q@upC%~_6S7N`9<>R(Ov7M7_!dR`F{p|W9d#7B*{<2g
zM{>$j9tg|2*heD4^87<BlA}|Hvww^najo_X-1zIubp2Hx&Bs9*2#sX6lvScA;Uc9v
z6mhqYiII1IiBsc#7t>!dQkIy7NiB3e3Uhaw__ubkqkwvL&?{~)g^k?yrTaqS<tb_Y
z78o8<LzWQb+@)MP-mco%&`bL5XMePkJHADp`tA9xjFTQ_it$)DE7X<f9M^v=aG9LM
zk>g>E2GD4^pGD)fMmkS~na_l@b2Ze|TdvL%u9$o`^05p5S3-eD1C7;W9TlwJNNuL5
zX|WLLk4pJOfl7}1S!V4S0eNNpJQPUAA&sDfL-`}l78DRHJa#%)t!;V%quaRU316J9
za-#3E-?mGPsPv{O<bK|PTg4))`2xl%?Wrv1E4=U5M}wS7@p~v}?#D}peoHGf8zTDH
zP^0>=n`};Lu>1|jR0U7+E|)#(AEgXM2BrL%<`ri5&k9r+=t|(+oz)N^ZGQ}&u_9XY
z;S7<MH&uWz*XU$$;jr<DP(MA2x}WgfL6;^eJ`ul2OkUJ!W=JO|)ss>4UbINdJ%!{w
zr0|B5`H+`vFMn^uNgR)iDoH^gCAw<vZf_#v`9`nE-_A=-R5)|UVLxIr$_gKjtU^Wa
z3ETVB1a>nw_A>4C)ViurRI;O=I3YbipreUbfJ-gXw16qZCHz|xEU#wmoOc2&PSg|u
z1=@1go&NaSS#$@0ps3YTBc?2b=FXXTdArlO!JoWyV#I)y{USWFh`m)>|J61RzZ9{u
zKgl0HcsfCB{@@Z@jipFe4z89A$sq6sM!%A1|K`%K(J%XH6JgRathy|VO`Kl-j*dcp
zKL7Zka_D~L@?eF-#f0p-&xFP7=WDHlAAY$SZVgl=Ys&c1!^NmkZ;=j;ow&~LGTQji
zj}BD~gzLSZ8u^k%FWe-GoafNNT!$Fv4Dydq@%WeHxD>78)@{j3jjy6Je?t9?dSZk6
zlWHP$NyM3=mE`gnKU3UAL?|J=9s`f?a-3wAjEu2y^3E@@^@qT)!Tb@MI$oG$w_-}<
zX+?R7BmFnVs~EDVDdm!fN0*ulvZ@X@nmxE1)ovOud%=*e#`DCz-3BGlTTKWUsXOJG
z2pTK2Nj@26j|q#v+&ctpZS>pycz<)z6R}>^P|zRm9iEE)5}bj%+_dy>!M*$3(iC82
zyD5+sS+wr5j_8~(4*j}6MN@?R-|g^g?HtRZe9sKmtGIP-Nb1nTgniv|tnin7+^20q
z8IxE@GI^ud_QxcTj;lN)9ic(L_l)o^panjmY9uSYE7O+5qsf(iFUU_WM~jE-7y;tZ
zt)qJ3Mi*v?-@tGB9sF{Xx3MJ=zgeP%>eYOI9T1HblojamGsCuLs4F4a_zme_HbQ_G
zTpiKYN+vE7x9(Y%xx=-un&1s}_h^1XhzMPCv;m4D6cJcbrR;av9yDY(U;m>zO2O6d
zH>LbD=z72>@<u(9vCL6%&Yu0F11;7KcZM*T89ihXlzQ2w5IqmnOqhpytg4f;Dskoz
z7QfXD3_^@F)OqWb-jVp0N~Va=j(Vtt5eyre=#;F5=zrAoJv3ovrm8tBQ?Z<eh=Ynk
zE}v*f5~1`fq<;zquVzT3OZGF=CEEjy`Z|>G=t|?^(Yr8|7)RN^gu#P{&*E)<EWUN{
z-5Te@4E+taX!T)6&E5<BWggsrqX1I4`AFfo+%C?joJhkDm``C1WumB7znv=>C=U9I
zW)0t#1+iY)mpco;GE@tnuTtPR=9vFd0tE^PPW;xUSi}*#(wYyt!bzQZ<|5^F%e+|E
z;w%4qnU*i0G5h`Wq%9heojB&=qya!H)&=8q$-X_xJqt0m%KZI4yOWBDN4wMh4<^lY
z5Ts>86v+P%_q8y*i~?eY2XoTR7jV^*?Duft?O*+7d_TEmNT14Wj~?dXi37TLAPi$e
zQ*)q{@1Oh&;a!j?^P+o=Sxg084_x2PD5jZ8Y$p`<qw#ek)Hoc{U{o4<{~FF$$YOGK
zh$uDr&*YXym!F2?@LbXuihiLZ7$@6t7VMmIe>rRcK<Y`iWSM%pHD)PNMI&Y&^wYF|
zY^9zX#)BJyDa9o6ENpZ_Yl*IcWfQbevwwe{mTCKj=aK#P(1a&e$FFcL5)?=cx<-|0
zM)Qn`R8Z_b6<OE5{I_(zN3DquHx|x2kV}t830J5z8BS}w*&&bV<Nl{$UA6$XQtMyV
zEtUX3&j_u6f%(R-+P1wL#P^rwJon1?^NY0lNo{95+D%peIjmv+r0Y}C?-ba}hhMAf
zN~w-?C(VwB+T>Uv0im~R19Rk&Oaw=~qq$Ta+gp{^&*;<*C(9?&<<HN)xvDiG{-p@A
zt@dM00WrA!mMc+$ULg8_KE}<pQ?-A$fdeh3TpN7Rk?8WS&07%%5_YtJiFny@?-Ra)
z_iuM-10xpK9D0%DYu`7xLODa_LHP&*I4VILSS!OyS4jtM6Qx5&lJWC`_Ijbc-#j|Q
zG3fafk|eHq4C+EL>(k!X+fmU2Vr!p+A48`u^n7ifUIuDmqyllR6C9Uwrm7%%{nx)|
zhw<~x2++3r22Rd5<20UZbEBssJlZy(eQXYwj%+)!MqR3L??|UeWsyrC86yEbFEaE^
z(D96_8EH|XpincDr<Sf_<&32+F1pAA+2-*v_}rHB@ww;`YRqUF3VyutV!8n?+ep6u
zu;w1sw?4`geZMS8^EDY^s-4Nm?NOs`(puVMB8+!b&8@a7-nXr~zdI5A0ZE0+chh42
z!;}TF@ZWBuorv((t-(xbsj%*scz3(Jl78#Dmyf*G+zhNO5evV_PgpDTTp;XH`sv7k
z2>yw1gdi?l_74U~NSS9@&_Hnbu7}B=#)$DJ{(*tuA&AXpgnf$D+<u9Uzb0@zaOAC3
zgWY$8{NIkvlLeBPN}b<_MlEu*mcSckBydWz<5<C;_%Uh&<-x#R)T<Oft9)wwp1wkN
ztZDS$cH*c6$%jq`2v%Z5fPgk$@xhq^S3%+o^U>Rr;`J)KmQbmw#I09NkdM`be*HSv
zD)xJ(XG<G-D0Qz2r3yYEbXA-I6Cgu@ry#k8dyFM0Ld`Z^GF8V1n$|_6)rGiXYuD$D
z^Qiido)|~L>n!jk2E&zXUEfcug-n1fb$6s`_&;QALsB1EPR|Xghi<+r5`IR$r7ZR&
zfEwO1T%Qlq8mY(4S7OT_hsjzi&r1ALfZ@eJUZ~aZrC4iM7BD(>gXPK8WfWLGCYA{A
zyjzmTXwP>1D@U*CoPNB?TUAx~du^?uk+riO3)qD$pfa&ez=gDbjD6e{JN+zm(ax$c
z{3D+rx6daBGX5^W^bffBwpeOa1Ws4WP{(fUA`oF{AN4N_$<aaQO;SxXUZ$jmH;3VM
z4&syS=J38WP(rPVAX8L>-+%aQN+aw^0^@KoWV`yIK-Knzu!i}uPK(5&UEQO0*HH8_
zCWk6il`3~wkLOFk9X)av?;C>9uN2lCF2=rLU!^ZZfFZYd8l>^huqE5)J|U}_P8aJu
zA?YbR4~&Vb*IJK32SEyYUSf+*hU>PyOO*v`zGxtRI49XLRG23)=F#BmlA<NjiQUNe
z9rs|!!W+~^+Uov{c$p$FyQ~p=+Ze$r?|bXR<=T!Al(pi&dQ9X{Kw(zL72Dk}jNIZz
z8=pnd9FYB;vX<QafQ+v)NvS9jb25Dw1;i+$<VOTy6JgqYl~7!@T3E#(i=8XFH-?(%
z>D1wm@l}q(MGla{8nyRtTV6df=?t_d*)be6XLQY!7`vvNgC}k}G497u3iC+PJZNd3
zLny|aNOUIyJ|^tCN>Y)m^xt%c*sFTdJoWtxKbgAqHu!gLH{)whBxgZ&8!_0f88J$P
zJEVQKpHCzFch%j%;D(x1Ys;co|AnwvZKJF6k;9#!9f!lwaGjA(3szdD3K9NYwe)yo
z6YbZ3EX&ggQl>U=e7$60ly$mVg9<}oN%L<F#be<}O1{^Lswg@$lS}zpX-NDxCqnz-
zUvhES1pgXc`1I9o7w^evV!Vi?2Rnme{ii1+RY6LqH}kmA^!7dX$mG`{m(D2Jhg-#d
zG<9Cm5~d3}Dh_uMm7(Sz6LGyL6y$%eTH+;`pWL+NSyAN5VhtTdcJNd-_`9UyOBLck
z&F;G6M83B6_Q~9jnh@feRdiEzzbH!Y`ufNuW!M4^bY7;h(Q=L9V4?;Nn34R%ZSUuQ
zyo;x&iWZQ3qojoACGV`u8BxDwD3p8(mo!v4BdgcM5oUhQ<lr!xMQ(dytr|CWi0VQ$
z_?e=ajR9j7ik(m3l7@=`+d2df2F1Exg8SGd@JQ3ei}@xSpJ;3@qor1R%8BpAFqOFq
zJ;6k!kA8f41yM+1=vzqjVc6t~;Ilm$u7}wtzz`E4*J&b?47-gH{h(aUi0A*`QDqwd
zavHfX%hfcbcv6=o^z_i%_iojWz9w|qfMH|&Q>Y-6Xf9t)?Aaax2{46j>3Vy#crJ6u
z?!Sy`dFF+^rELTk@{KItZ7iFjm$0vu59_yF-vzb!>yQ`?dXXC4U2XPs<?xkiKcR=>
z6;>L{TpK`7f}&;ylE%~Gox=XhSYqX#O#=;p;8<CkBK!#&%QY=|+hdW5VJnyZ&rKr9
zWnwi<7rU3S`yatR_IXgsq5ropbJdx6kw3`=0L&!(iM#uSnTSe+jb@%KF4EgwYCSQ>
zn61HVW?{YXz8G?0S<N>FPwK!8n&!-3gZm5kgibRQ-W!kpx0W=t^@T=XNJ@AW)Pl*i
z^r^_}C)kg9R^~_~whORNzpq~7h4yw&_`XM$dv-fo2^4F5d#K}u?%$piYv-yxXSb5g
z00xG<z$#lEn)QT(Qx=OETiNb$>Azr;U~3(nM+dqEnO3AmbWD`rxL8N_nnF%Wfw}#k
zn)HL#SllULlWyhCU0p<skI$3PmDbi}i0{#3JSGT7LW5I@@mKyAU@th_x^RQjZ+Scc
z#1Q=AG=BBKPZN)-yNRS!;e<&w-@wqt>P=XTmEQUFkvm1O1<Y3QGKce490-D>ss*GR
zO9iQsO8*vx5iOBPE<5@vb&=Ha7Z+)gb=5I{%j-?EDYm+3lq_+rbq~^6PYI9y-ym1#
z!!4%znslRXMXz4pFv$?d+rQDXcka9Nb;P-1)(Y<c9TI^)<b8xCg_aeZSqs<sXp{>r
zk}$?|8jAns0yk*M^4>M3Av-C>Xx4L9zStNB(-!nt3W_enELpl6U9l>!Y{y-sju&ZQ
zKM^N|AJa}|?I|GaI8KgS^|tFL0#ign+RmhD9t`^h0}95LB0jogcCXJd#lwCkFGfL4
zh_it(XrxcvYRRVV%Y9}KX%R)771H<D4%umdt#ly&sWV#GL8q_yMo!kUGi<x98?fJh
z@^?lFM}q&S3eiW5t>#FK#$_hVWCN=5J>(q2kCDRBf0bWOCQQR8Nh>ppxP(r6Y_yDz
zy}VGGlCx=Hk$M+Jk!634<TKNVr^W*Kq15%jmt^XB(xX0{+w%&4BOh8n!Y3kQqXArm
z0mvtzKHoeEU4cm)AxN^anYOtC-X~|@$0VPQ-ksTqh(*g1&qTw9H<<QlaXv=VAV~8Q
z$Rhwj%Gh67_GCp_S5<iuxj0$8n_!k`3Mpu+3_noi$wmH+-ujA*rM;kF64~nwP-m42
zP+@ptq}s(K!(TMrV<w}}pw6>Vz3!jLt@K#YsC8<|z~mQZQrH0f>Q9{L=JawyqZ!-z
zf+@p@_jSgdqJrgh@Ba%jL5~TYb)l6IaX2{!cbIHRUiYHwkzq&tllAq#eP?sXqvAm>
zAmVevaRNQy>`dr{LP<)5^Cz_igXkxCXJhlGFoc!(xAZWPd(shl2}QyA|6ucglkMNg
zH@xF?f`4W5F?2oi^>=y*yyXiJPU4r*95v<YCCMLn5Y`{GUc{L7*EmS_X5~4$jBE?=
z{K+#y9UvNDUT5G`-kuD;(vidug#|^l*^lkBS@#l7QK^S7?oYF#IeUo%i5&~RRF)wk
z#ta@F38S|ecZ)4Z@}X1(NZso;`bO%XImZn`V}Am&_Te1k*T#y~7j3g{K%y@LnVihx
z6FxSY*<PTUN!NHY4*kdBT6%c3x?($-rX&+Shx=9O(xEwCuMLr2UF`RxS)VKj-mh-<
z*FDU<+3Yt~f&!V7NqOSt9;!6P8!yq_*9n?PCdm)9@g2aRtdYD+kf#(Br?`~qTyUXh
zVE-`t%ISEF*o;2Y#yl%~tjeZzw91Pcp_|%kGm2a)WOgF+OLHGCY_djObg*V4HNa~2
zL=b_|HoADLmW=ar@et-S%TF~%#iFO;+k$r{(iZnORt!W@0=KmSv&jl)CmE^WyRb)S
z0I+hKgB)khixrY$gp#8|97e-FIPIat0FR8&4d=ykU%3;78kA{zJ=oYxx?Z0`N^nsI
zU}4(kUMCtI+Yhr<a&{*K58`efeG(JwV(UfR@+qrl#(i05D7amK_fAJ0+Y*^eZ2^F+
zT75YA<5!w~*%tP=QUhZWazHD<qS`1m9y=kD57%@iGd??sv^5=0VrNo=fo((Lxwu-R
z@^3O;c^$hJ+~p}6kfk0TJ(I>i6if4swUJrH_pOC+hJcbOe!goH5)~$0aSJx6y0Ak+
zg;cL`IOEOwd_2?Rp(&D6qgG+|0M242P-Rk1Q!=6aZK8cLd-|+^I}Y~I=}JiWWs#{s
zANf-Cmfb@qT+aKS;xpQp@rnKJ<T`5%5Cx#M`iksgftQsMb!T_4mhxYqvn3M*3)Z7R
zQE)YYQkvfd!x#y$dtBvPklhU?`Ji<SI3K7Nyb0Q$i_pND4(YwTlv<JC*h#h_BOb4o
zhuxhm@XPbDdhz0H30IxXhgzZLog3YOk-Qo$t=)>Yf0L(6BkP;~ZbYx+Tei~)(IL?#
z1@Ik2L<EqN6yC$zs~l;k^KPkCVK+jj+Aet6L~e&%=_riL=v2_vJ&vaop;M13KMd;d
z9WGF-2NKf6b^At{fmTXmNQbNG<&UWkP8iz{=jO~l7^0B4_`<FlB3KH1dzTU!(2lPc
zAS%HV9)m=PrWt@)J;YQfxo|mc%u&?4n1tlbVfz3@P^>mU*OO0*8&dh;Kz(}rMp&cF
z<Ad*3U`ty1$atx<Jj|v}QNB34E?q(&BjeSzpt~c_AoRzg1LR2uO|NjEXp1HOo`=nj
zg%(0c6D4#Y9=QzLlVWEf$@_U%+Fd$=0aJwt$4c?WLu<lsOqtjT{cg#x!Ih|wkR}9l
zWj7}()EGoqY<f9EkfE`>r;bSf#Un*Uu`t79>^sY9`N0o^<P746D^EJYpzfVzYAq`!
zR70gox*(%$9Cd~ReE_(gUpGK)h1d1CnAS4xO=&LAuPjoJ5U7+U89ijNQHWV5!tp($
zQ1`EcxXQQBjP>y`SDpabi}^xS2~6bWMBiG@7*Eg><Aq{_G>hlNct6C4UUFDgzV06C
zngg&vVx8o*HL7rHwR6`uQyyt12ILAEC3$<u&2hnhHrv2;EsQZ$jOO&3id>Jxe7=rf
z$JuVGBfeIfLEX1GFTvt4@Bm-j&MHDiW;@DgX$BM2$HQIMG6i6Yp|8wx?Lx0tkQABD
z9IC$LOPBnLBwnT{2t6S2-W&b7pl#E6yDwk4gQ0zSSRU3fhqUDo&<h1#;9@9ix~+%^
zsI>#|@jUN0LQVRejt%s3itl|K&VG%ap040l4M`PLiK9durU?D;?;2(lI9h{m8wL1)
zu2ntct%&2;+U*QWJyJuN%L5`V=zthNr_<4j0gQ^J#+u)`y!xIvy#5^XCgK$25te8|
z%F?_A--YVJ@UnLjf=2K)+K)-a$n6<CUzm-dL&Kb#K1DKlnV4mwMYS52r8~VN5NL)-
zi)C@}GS1wfTeugd=s?io6>hY8eLxM+@1TYedqXFr@+oG!v#Ptz_A0(9T&#I=x7|dr
zex63I`98cPDKa{2#gLQ|9^427Bn9hawh0sq-KIh(;kkZFkHxkc5<=!A<H^|9vRPy}
zP>!=OuJQ^3)FXBS<7ES6IzGNaMs7~^>Y_M7<$+HU*B3xG=do7}MB6zx7b!dvm(*Wi
zm!*Q1a68X}FI~qKIJvaI=*(oXwA(_SG#a%GO2~A`bFV}MW-GGbdy5eyqXcJ{bsd!M
z9u31^^w1$A=;5H5!HrSTeG78_BEJBN>pvn@3U#Kp$Wql_(RbQHsauW(2WNwnNNnbQ
zU^*3Ki>b1p1rqhGFPV?2s5wo^ni^#X(Bv*l(f*QB&CBb^2Xd7Q{VNr^@(CHEZMvdN
ze+|Ga<u#^ngRAN25&vL?K#$Ju24@!8MOh@KU5Kqb*&WoSN)`_d^74_zqh*Mi#9~d`
zyY=jZvpxNhG}7$nzToY0_V()xCVU@H3%XZs{$vEHEIF{UKV|u1tk9MEn-z&pcf997
zyuJsWGMP{A>*jw0JJ}$AKUg6Vgc)uSMvy0u93F0Xr-7v?Pa50J;FSxDI+CnIl3|AH
zV4f*W@OUHu&jGR>8NtJHrnCN5T_9hzjt~yk_TG;V{l@bj6x0E^#^n&lt%M=5k8mlX
z%tV|bI{iiAxg@5@i{Qs5h!;CKprevhzY#at<~;gT!7cVYuZ6FG1@LHj@t}7s!hIHI
zC*3hTr8?lJGEtZ+tQ!7CnPHCK@9D`0-gj(&9pc*1NI_&gR#zz;Y0vu$z7CD!z6{f`
zr9SXC4im(2`f|;xTsD#;w}z`)E&Da2*(?vc0|Fuup{DNvEhYZU&s<lD<b$$;)$Lez
zxoWHPV>tt@Ti+6;+EYQa*-)_`XpX`s-w^QRh(@AB4G$NNZ}?=?gZ<0Q*+jLVe+qe^
zKFz6dboMyCfO@aydcFkimSgXviI%Qq2hF|w@wJlsGD2pSK~A0KX!)DUd_`4;p=3YK
zL@Z)+eTupJ@+~qIn>N)eP7PkXdI-L_;hzs`_*AzZf*d@R6pD`r2Tou3euN1WA!C&-
zlMW1Cs@H?X4wrUa_z(;3g@xkFip+cXz%JQ~8n#a4jrdPWe(<(r{|BW1nl25xcx0G!
zL?5Fu4SSDo(4(}x8YtgwEhDlz-F=OuMxhQ(0s5p~YlSG{kDa*pFT@th0$yn-aBUo#
zKER++a=-5iY(Jh<<}QHp@=?QMp-PIz^&KaBX*epyM3awx2REsV&_t6zal{ExCa!gI
zGGTi(4@q_mi$*T=eks=T&(Z)c6c}DII|-j9!#<n&R=hw~rd;AS2(w~lId)%2jS|-D
z2SP0SPbOB!-HN`{u=Nc(d=NKx6E}X5vPSG)OhW3$7D>4O2|xY0jj;YU`ZXB%&({cT
zrU7L^KiB2VGPIUP>ARPXvym1Qp<OOYUihwsl4xqt@gn=hEaG^Rrfm9YzCVL=1DdtS
z2pbq&^Qgbj{=K{?L)X(zry%f~8w40f7ssR0?lu$-n%1p_On;QkwLG%A&l21%k)X8p
z-kc7KTCuW3<oU@;lhMn;eQ_gi2^QibUrhBvlqpG37w2#xK6>6$GL<j>Xw;@(i?*+|
z<Rqj6dpEjSoc+@HbFpJ8#;TTn@);U@!~n4nhg$iBRR01g=Uil}W>`r>JK?t}ezhC%
zNFe=BYKw&Etk(~nB@R;F&XITjjPG-FiMTunrdn+mW_7{`x;R%?vkoZ=*V46eutvn!
z)kc|dycMyc4E{H|K<dEc70BjbIKD2qGpIgw?-9RN@O{CZbs86%nN-Tl$L@kg*55e#
zC=1Ees}>BNiY&gy-EQr|jMZk17~8K|fYy(xJa9hG8uDZqtE6qP%Uay-=0QpB{2~p5
z$W?C6f5na2?X5J!kl_clAMndf<K!E>O&$Ju7ep*?KMz_bBD1gZp#0og)U>7^M&F0p
z<XQfRRugL*(0aL(&*<8wB!D@W!Pym%DT;*#2RfiekgGze+<3SdAdgJ9b`5;(C!Myi
zu_p0jK(*qh43-(Q&7w7BZyt^0<j<{h+(hUHevgqK&jhjRwkIk+(J)XdDpcmGqftw*
zN9E@^2_V02WY6WT6d7-jfjl`SGZ#)o?elxPT^T9I+CpS%pV-Wo-~_?t5|ZBy|318v
z9h#ZM@^;rQ9?dCI;A9B~-Arbxs^Z7Au>Xp6D8NQEuM2ni9L+|R@mc}-yw)y)JuBMJ
zL$v9|>e=VnL!-sFE+vQBYFYJ^=332TO|Lf;b>;lt99oev3R*KcPv!CqTs0`p+^<7n
zU9@W`4AQx($MmJWdR4&7VLXL*TsO@nyu3P2f1!_L#%U8Ajl;z+%8WCp0QZ6x8B|Mv
z@V$8n*J6&}qSEfi*O0=bq%%Vgl`5`q?bY&oc5{m7o4hTry$FCd*fIdc3EqJr`T6Kw
zHVm<Tx-OhEs-W4#D&%ne;tn&%uXuSGsSKN=l#F9CB39Xr--LRrdZ{tdP(Zx6JrmV%
zSyxf!R%80wZzR9WSpD;@Fd?fQOpa)jNOX<IdzK^%ZR~o-xJg_Vf#x6cykQNRPK||}
zDEz{%jf<jT?F!Km;3}sE0fk+XvlERPaG!HpxTeSoD1LBa^BP>)yvBgAmc{$@aN*jZ
z4c9nPUmv*;d-lUnrAh~_L#_APrY;f==piK{K%eCce4eXJH6MtVN+OTS+2-<CI<)#U
z40&HrL%Rw_^<s{P!hU~{?s^))Jgk+^8I~>X)kI1ai}h-Y?7Y4L{p)X4W(5(^hc^<5
zC4^MD`WRx7=f|n|*t0Srn*%vkNh<4WJ5C<Cd$&&7Y`AR--iKMhVJYjYm4cAN$*A&E
zm6K26syl^<Z3PKsu7|j@{`$o#`SAuOAJ~g0rtrv2?>h&o6u!Gcuh((69~)j@PF<Z%
zTAn|+3EICD)(AHIs0=NHdPMevCn;YswJuWxLjZNEN%W+r^3qtXi82Ym1?01}NjX_M
zES+e}A-cvFg_`2yMZ&BuG;3fs;OSNc%F6f+r2Vt-NV5EN!$bWygwz_Cj5{ttUxoCM
zHTNB7?6QYOXcHSSq(9<7WI+2S$gTb?r03$<F-F$QSTtP-)KIG&nUGS#1<epkc}GO1
zY<=OgqNFoky(ElA)O@x(nZe=u{`&Oj4kbbOM4N#V$6qJ93_GY<;^P(#xq;rbvsfE<
zo^0M1<GAzNn>c0Uu6}7CAJbgG_}V3JmGQcHF6pwf{?eIlBqeK~MX3G?#0s?bLd!wr
zKXJ3F5(AYdRPU~4;u;Z}Z{9z*&6arYVW)3b@C-Z`^u0;XP~_*u?L&Rp$N5jLHlxj^
zMtxHO>@W*362Z<^8_!vXwh9Hr300X^bZki^P-UycUB%{+Y&2LX#-<|bD>i)m$GawQ
zFLp&q$Uggy)ZI^!MG7#$(76(*CblZ94nehDO;a?zvOzkh$Y*4!(Cpn`VSvEH(_C&0
zn#<)1d8ZySWTkG_;ix;0t|K6oEi9`J=Y5X9T+*UL6+a5~`C5j5;91oqce1Nlwb_D7
zba6Gy$Z9|(=8lJGyP<t2{E>#3P)1C>eNBoI(W=^pjT$X^WT9QbT$wwXpY|c#53{5S
z*Cme&_Qty#qzU$Yz6fJ^!`-#dWEo#mE~xr!@o{M1#}>a2C|0buOXGLB80$Mlm6{h{
z8-n@DGjF=NAIMgryTpUBNX}Pjkfxj7D6DaZF`-yULA-frO-Uw+2KF8gPk6bJOF;^#
zesgiSn0JgRI(z8eYj{MlHr~=G@_uxK7D7APSUZB!NlrslXIqf0P%tONT{<mTRgF&m
zvDk4^nIf3vypwNXh(<y^XWW#yeLGw7J+B%$B7!AO$IDnlADQOW55W+JgB+Fh;|FmC
zaTAhuA@$-{=t9L@j9=IT-Ymf)ZM<};Ha5R<-s(X-OHt;UNfOFjNbWb1E|X4Jp9p(+
z?u14m&`O;@$^H!|YHVJoxm(zdAQcYq?371~AvVH<^pp829k~m9wF24GB}fozXgS;R
zf$id&sxLGIR1w~q2Cb4bR51BR^<f0TASq>4Sci#e23RYseyu7aIzrande3r&s#ns!
z4M{~2#ngaU7^vq)g*5;CW@>drIMCvaQcRlzG<S;=xD~BrpfR2a%BN0t3~5{(7I1(B
z(qT^vK98yN^Z^K(bT`zurfyT^Z~YFdW@lv$>@4ig${(hQ1Xf3JswJ&g&y1Q7Eb{%<
z3yl_LM_Qa2_Bo6E+bcs@E3;O3?999yxp1EuEoQgCLJJ`Z0sX~@8q@TGHM6c=c_Xp0
z=Q0;?Jb23m+&@*^E6n<J7?B$SS1;Cw{OXg@B?|N8=$+^2EDm_?yeCubvFZ!JF^_3g
z6P90hrYm>q((P8@hQwlDoUPGkmEL7Wg05^jcEdg!xeD>_WgTOK5W4le=y4DY>0``n
zb=RBw?Q7FL)G@}2?DPYcIiQ7JBf#&vUQFX%AMcQu5<40(DMcb9E&W&snryfrh+37-
z3sU(Y0#nFrDRi!2#0kIOoo+lc_w@_?2o<Y?OO1K5b?3LNAj7^nWMDE`Ol1?!bOpY5
z^C>IC=6XrPJnE0d>^Zlv8Y1^jWri@_St2P8m?KTs@Fv5<`vQfI8w3Ckp)cyBbM73n
z4?#_tkgziy5A8fV2%FG$#09aCOJ!RV%^nY+(U++jv;i_mGU|S7VIF%;8+0%;ux-}I
zPWvIc3T}T`f~{}U_G1&*T(zC(#0`_vaEKn8ecmP+3Hy~-77^}!%stb!aKa0X-i;2E
zu)vGE_L!ZU7c{xy?UjAX*?<GLmg`scXGPXoh}>}Dkw7|}_>d%4sKQN)AFf+rHWF<%
zS~Oy$qk{n|gBW$BZydoDx4L!=Af!>|deQFX`3#h1JMOFHLEZ{QE|@^d!r&{aCr5p+
z6)Ub6XmdM$1}D)g!^nkuc(aidc^af~6GNTJhR<Q!aY3r34N)96k0xzB8b{nK>Q4il
zR>5<D7_^F;Qhyc5966x@WQTe+C=?hF^TK$cDVq-&HaQDjtQ$=($33S|`>MO<Z&YJm
zY>mE~UCU!OpK*D~Bm%A4r&nmoP|Brg^(m$Xf8P)pEs`JP#6_sXD&n(&zg*UWkHg@=
zGj0{Lru59UH=RU&eO;U$di|>>X<v<_60iyQQ|8(Bt@g|i_;0LgFe5pBPzd2;@8vAu
zUgp>|SCs9-eSVSt<()L$gaY!`qN)H~ItG!ODV4TO6Dh@&^3PZFYBDSe37D;z2%eq`
zAhw~7Q8cv^afO>mWOMQpacbaIUs|?8xJ1_2Ds7BqQ-Sk9hcxUurvg9bvFq)ud>E!k
z%y&?)4LU<ZJM*d!PIy0`!Xd>Kz@A&odu|4~^={rP#k{}P@Dh|zzTZ8SlYhVab)@Wo
z)uJtIE%IA#1^%_33Ez7?t~w~FaG%ZhlNZ~vwzLsn>^80);ehIWy61tUSt(so!ODIv
zh4bf2d0Q<!kU{n5b3CmO?$^}WHCF+WwFTPfE~tuBZ^J{H+|K!Tr&N-B_0+d@fAGUh
z1)jZDYQ%uNmM^Cc-}#w5z-#NL(tIkUSk16CJc*Zfc339-kS-yPp=`i%c9)BzZq$1^
z#9AR?Pf01lXguf1c)=0)@vJ<y*(!h$D+_-)8pKx1euLKhurl5R904I?EPw#tf`qY@
zk@IM}A`efm*f$m-k5Tqdj~X#BWbyE$lbOZr(@t_#6V;Y#oL&FUYl*>NCKFA1LmFQF
z!^lg`oOdoz0IHmNEXo2bl9m)QrdLwwpxL!UCj3~EdJex=MZLzUuP%Pq#RX>|pAP=D
zKTwD2hO|7FAQcvBq#~*zeS7YlpY<Di*M;^SA$-7|?LVq<CSQ4eH^>x`{lmY+)o)Fj
z9oM9?5CK>6VXCTj1x{aD#W+3dOQaHKMc%%&NaQg;8NXhA*YRWuOL1bRGe;`WPqzqV
zPO`jVq++w01xRVzciEn5>)N@jgqWzC^h1kh_@)v!-(MvyKU2rr1T?`UV8phpt>U6Q
z><A00eW2WyrY^=(gWFrn5G?t)1BqGkJsgl;NX(*s-^$kfF)yeSQ<Qn!Hx))2_Qrui
zx&DpQG4yNLuV=JaL3G}tSX7+WA1Z_2Y}Be2?*7W~wL_lUe26W}T&NXoKBWcJd&A&t
zPhi6l#mp>VBP`G0M?i*REy~q4m*SX#t7*{ssbczt_~9U9#P^`+F7{sr3VGjXPLZ@4
zW~E1OL2Yn)m(!*9<-<#8UGm|29)zI1X@TlMW-c`(t6`bo;~rf1vPeM`JyibisH)05
z`Ok~{OQLLZbdBV6{zWFiJ#J3Axdg6oB>9tp7MwRm;WU#toFa;*a&|fGJz`5-=dml@
zBrDm2!v^_NWADqiMnrAUh64va*4-i9ycHn2Ij<e5g9<92RdjIT`Yd>&Zu;&dnsg>s
z{ypWyn<89v%6w+Pjm}UV9WFg&$SSU8nhHd!Bd0%4<-x0lY;T-MS#%B(amvp}_q$_t
zVF}KnQ5B}~IHwA_x_mFX+JT6p*PAootn+Dru$0AQYEJ=uHZ{pSc_c6u`@C;Jz52VM
zbYDZYAiF@}Cy?zS$!X)aTA))m$JL)jLgMxTz!gFm1+a#xNc02u=K`MVhe<^(Ooj9J
z2$=1SR?w0(yq+9X5NBE+5}4@C7wz*;Sv%0_oPw64&;fzW363o8IXLW&!`oceE_LEw
zS%4^j6D=ZMsA{89YRrmNFFCE295=D{8&R?`?cML<T*r%yiIDcl5=ir>YZ_?wYb>Q%
z=1x=yoxF`jbRn!xqJ2}8DZVp|@}mpuA^Ry;h4Ydh4==&>Maff}J7IrE>tZ^AGY#9$
zG&`^T;Vtx1mN>^R;Lxl##0GxG9i)m0H3m4dJ5XBScuJSVs4RPHNZ{lrLE2q~u@Hq6
z_P1}bw7FY|z-i+%-emI5ggY5tSzL9V!brqUMoZqfFX1~^S%sQcP#~te1Q}O+LC&o(
zgNrf6lB&)!wkM&UF_i0-t_>BcK+;2r62}TCo)fA=(R<rLt2u{ioi_X9nKYq!powbA
z?8Htj@p-PL7nI-9)m6WXqZEg;LBM`$L#5R_;M7?SwPga=jl^PALeuWZ_j4^Qp2#N5
zMZC~W9A?U2?Yb5mub-?H#F_(E=NKeH%~ksE2iP3>9Ms%g?i8*wOxT=1oU)YTgp^$w
zYN=mOEMr+vccG7PyWy(@4p&BU73)uaxO$^3eQFu1L_$k7V97xHK`ADFLhjHnVJGFw
zepZiao3N{fRF&(VpT=^S*y16I2#)`n@ke)+8_mLmkulLpQnW4;z<OdJWE=@U(|Q!7
z1*Q843nT0(bNPO)HkPodKJ3lJ`B<)xM%oSkLL8GtZfbzzmV5D(>p=u+P<^;@s>E3D
zdL_4utj7QPRw@vJI6SAw2&s;5G>jCVxvK3mUzzspF!$lt@6lIvaHRS#8QvUIl*<G~
z;O<Lu@=v^N(A<<>*Sy;RJcse@#UO6q&S@9a*s}iaNNfD1d?wEMGoz004OhyFjv?lA
zA`=VuL3?A(n=}dovJ#F*1~4NAddMl__tOThYwERF0N|DlDKk21)E~%Faa^dlfn`y9
zHhV;!#C-gP%Ql?{*rkB|eu1ceU0c^M{MM~V%AjTrCaq{-B*VvUykDuX95?OuR}wB#
zyv=|w@62x8P8s7_-6{Q~n+wc@e5%e4<G55v;F<$;yASYpefD&y)wA|}(q6{=TwBj#
z!kzMHLdb+6aetqrU92%yNFsvgAJz>d$a*);Bskd}s%^GgH<NmoQc;ECfu5*V1o0RX
zMRp!+IIi#wE<*3=M8L|a$BQeknJG6P2JZwvb88?8t@zw@0RU|fd+WFEn3C#^at9tt
z;M=wuYP_=c1WWDcszO$D9rW*e$=|(BUXgefZb7`GC6BIR$j=EOimvTs3ekxemy}an
zJqccYvD2@@jqWBK^x5i|QPD_2ItiZ&73GEgYF3@}rx-`gcH~2ogcM1uHpK50eE^n)
zU@5WuGQ_ZAYgKPcfl+C112rgzFs1(+4;~XFpSEnVihG^<rQwZ6pKt7QANjuH9iS4e
zxGK2+aLrBaV>;gMt88$UR$1o9w^tCHkIjrIHaD5bnw@0lp%SSxSw++(IX30;3WM0u
zPcKGA;OD3&f_dB9psQKZ!uSP}%~?(@3=n(-Hw1~bf4i~ret<@j?F*(d?YFNWDnLY6
zWHT#px0U5a?S~XXg!<^%iXGi!1Xo7bDPzWS0qm@q(sM{Q!PJDrxr@6U!a=J%S^cxa
z%g%MxTl_d91LcE`skKeI9Vj@Zdk>6Xc90s{Syx?e1JrM}7sTfZ@ee#a5=9xKdsoR;
zZ(!FTftq+9l)%EWd9!dm)G}y(8Gy*!J*CA5Ww7><1DX`_IfEJBhFe2a`F86$#4fE~
z{Kro*N|p~Zr{i0v7CTv+;Hd<z1y~CL9=x&z?+sjPF0+gUUa0j#wpZ?cZ}8}iCKL$c
zM959Fd$8lj=`hifJvWpm5H>ne9D_q{X!k!Bt~R`MC^w4v{`nJ)t+@x6y@pHaxe|Sc
zQ4zA-h6qLwGtZF19*R^9JHyl#lhux(YI@d;|K}@&ZZfX{!H}_^nAIY4^Jp|2*`m~8
zs90WjT0Sk8;BK~}cZb<dXZMMkwl6fazq2_UjtDkWE*D?bohR=udix)@pwHTKkohV6
zki(70k3P*r1;0L3-l)6dRh7mcfKF^KSkiUGp`LUBzVYeJ&V5tq^uXi%qfz)Puv*ea
zgJ#HsMVVu+@%==eOjqabTD`FsR_r^#r{2bO)v?`uIM;iRW;(0whPi|vY5>uGc<@s+
znysQ4INIt93(MQW08X3cbJ1!?4^Nw-Ob}%kkX8|44*_5N!P}HrfWLDmq7`&ywA&wl
z;U=B7+dZ-OHQyI=@0^|p&*FG2GGDUe4RvuM`fHCM2_iyr17!`xHNM{|{0+njOC(hC
zmAfxtShH!ewr&&kqPHg{I4w-ZMNOR-a(Z=gz<@Qf=7~7|zLk7nT_(2K7=~dXF^gzm
zv>yF#w4Kv&<FlBz3XG+VW{el&rc8Vh>~3)>gZK7JJbKV=Q)%tx%vIzGj=OD!72>5Y
z4}aq+L7-LrxB}vE<3J=6-3~!4Kx5hsRkX*+^^l3+rflf=751+-_JkuP<f;S`5vW8$
zj1z>iMuU%ts^*69W@hTld72zKTAHiuMo&0^gDR64^Y2hCCV@j1?c3$O_K_h`4-7)f
zGSqK1JeqW9ut(W{$az-d=CKr+Otk?=IsiCFKu<4e;dApP1X`D>!Fh>>0w{fU+k%^u
z?FLOmOnkt0A^`Y`ZmF4Oglg=2bFg`Tn?CS|7ykS$faKWHEua9KWG9?w=uQza6j+cc
znlCapQ~$Kqx`1dqr-fovy678?uQsaeCTg_13y0#)DuAx=Q{~n@=<XOzB1hpN%MU41
z+cv*py4~)y!{xjuD=x~Eo_wNaSnI63VcW}%vDov%VKFLMrHCZ|;bjfdtGy2`_+G?z
z#?qESyLoo)+tRoXb=&|bt$osPWqb1J+Svw?bIR;MbIQ;vzS=z9{Jtc3-|jT>eY>IN
zETcsuXRwlhnuBwis=>r+^oS>Ca{PwDY+;zsc9*<~{GPwxt00W+O=Sb2hJHP`+#7Rx
z?U*++1<*@SOvZNPifPXB`8kV7T<Lcs*>b1vz`Ys>LQ@1^*=Dd*RlE%=rG&uyhCCc?
ziUezD(Yvc~ZSa-!Aq|_KuR&f}wy3qvUGCNni6o&nOMF$PiA3OrG#&kT4I)I1pvq*N
z+{x(}>cu%*wqwS(xp>%{T_PMYY$hR`{7>1$xL_-<AqZjRwz8=(ZOE9F_sf%ROrx!%
zD&g9_xD`NYD5X_qfg>Tqnd$;!0pWgvFTWPPx|rxf=__7ar#0JCQ+FfCb>+%2C0h_u
zQFT0fC(SvL1BrR2*X1p0kE_@=xYx%7b;9|EVW8_-I{!O(z_H74W0~9>`SO*`!uCy$
zz7}V}Q7%P<0;zaSJ}3ITh0B_y-fzkJ)q>9iIlbL`8C8DVPhm2uqg!j1F;Wz6&N#_L
zVNF_hLQ?pl^Txi*klFN=_IM0e?X49nmtT@R^416iTrX2~o(yfi{4vlu59I~z=PPE?
zs+FlJxU6g~ZTsu<{d(cn3MxV-2CuQ4EIy%S_(@$(dY)4iaWpn_hD$#1K?V{$HhN_(
z+xS}_-+dFoMVTTd!i-Yu(G%yz;DtJ;N%TUKJ+3YPGVhCuw`epw;lu1OsNXs#Oj8u+
zkeQfb;&7W3tFOSt11-V>zF0|f%FeVy(|V-IrH4ZlFNl5PAc+b#no^n7Xgs>2uL}?T
zeQvG=(QA@t*Sc1FfnT+Cn_5w}HxKxVXLz;|v93b}YEQ@C8-SQo_n0E&`rwVxdWmp@
z#^_wH7R7JA?haMehv1|eifhL)XnoUUI5|G6kWgtlWVH?)R3CxAPgU7Y@dKcb9sOz;
zm|-9Sb^Dq0Y!$bU4U(SQeM)1OQHjaA9wOInZtpgj)u+dZwMQ4@ZNY||wF%#d)!@LI
zWmsz_e&yZL3go+ups1HfWz;N|W1GhQ_b+HH1`viO-4HjBBu_{`_7aEJm`0hyynC}D
z8mUn+!FMHSR-ZwJnCqs=;x@5t#9#rx7HGQR><FZ$%+yl8G`r`8ietyG%?e6CM+i?Q
z`IjD3>+|AmK?L@`3>fvlsIu|fjW8?KP{xt&%TZr}J)RxyS)EoMERP*o9rv?fH=2u=
zHK;5<ki^9H38|e%Q|-FF!R&yA=H|}xeB-wrG>Jc|P0i)*@6I6fC9Db@;*+PqHzy*u
z4+`xa%mXr2BppJ^v-*3fgrx<H_JW-D(WO>cI7m4jA6S7DaeyLf>Hucn<{M4dWh$9j
ze*atdU!T6z(nv-2O$@vlR-a{_=wtEQoJy*SP_b_An*Q8CiJ(?X@Om;*W422#VBf6t
zmb;KNCC8Ni>e@&cb1N0-b)>6}pUf)s2v`*gvF(m4yCabQ_+qtV6{djN`a-`qdT=TQ
zUUQhsGDA(^>Uuh}uUEKlk33UkcXJ~OolP>iDsoZoz(Rbf3`I^j<;~((!O)TWdA_nG
zyQWFc=im+~2p%T-f#_t1j(vKo?v=FUVQd$;H@ci&o6k3peqx7I)u#(;pH10OMA5n{
zDPiGO>OB*6agojL+(qh{41zbt%%f;zHW+xmH&=Iv|NO1*K8O8>>cm3yuEC_KM)_JX
z^o54RWLl3k)CFRw3R($z2J#6*Kv}5q^toFGAo%Fk0;forT^j}xbXMxnIqji97ciG^
zBJ&W4uuP(lswnu#1|s^jGYR5e8eyY5MD0eBr}|@ezx8fM4-`nl1{5X|DU;BQ0r&HI
zSy?iFZf(|hWZ`*$A+@FNMnxu%X<@(>pnf`_q|4k9r03@=*a0U$M|*C^d%Nb&(cqH&
zyzTIo^SB{t>{_j!b2&|<su0z;VG!}WW@1)QeOAQbCZPx_jnLGK&qv?jW0zl0ct0zM
zrCG!AjqFZ0h@vTGO(&;nf=v07>klzcM)LQ{^MiJka~;2qB__7iWS!@Jim_VFPDex@
z8{MAaQe>;ci1zUu13@~*Zi>VcW+mJ{SlX`P)$2r0Va0U#69wc6F3CJkaCzsCK_(FY
zI&<nd<anyZPb?{F0e+{*5Kg-ZcuK4lsPGD5?cS(7^hBKi!m8cpr%`*#nu=Sewq|3&
zgjsI5Kz+$Q2rafd8tf5s-kd&Ysvg<rVn3;7pwPjJP$Jqgw7hA7C?V%sD+*OVi3UrQ
zof#3c886YJ-9gH^6HVPYV=`qlcN~GDvi05SeTBVvUU&0*f{$V|b&yb@)x@>VI3#|#
zdmq@9+I;#rjboa>!xM5XNo#8CeplI5%zPO>CSph~nloj2NcNGaSG8%hFx^=2hN(!>
zhd#adjOopaNorF1x7<%aWzItQZfE3PZeiIX_I-k+m_(KV*VTNSeCaEQj2Chg*~Qkt
z*I}We%z4PMW@aT4ukRSP!ZkX~s3dHr%)gbox#TY5&X!^qE;cGMNQ%AOpVnZY`5e(s
zC#rNpp(#<>5Syb?MA^um(`?=}5(rA%E;J*8drme&9kDPLQ2lje{8(oPvBNjBu}01o
zzX_fiX{(@+oJ5W(PrZ-T=!!c0DD5TEu^jA206-vpw=**Wkm<mhuTB*@0RmtUgisQ#
z$oBD`p-TK**qJwrvOnz3&LNQAI+G!PZ_gpYq!-rEmZRSH)sntlpKKKCT&CX@eS43v
zB69lfQfozoy#N**8bSV;OaibNbY_#&jv{FPF4?bxCm%WdKxyM%7d6tMTO3>3Gtt`5
zg}WygP&ZIDUm4}hnhOG7dv|WQ2`9X43`TCJGtqedLiw3GmY3u_iXd<Z#aaNbyZR;E
zSuvHFPI19BHyQ))jVNp|H^MuFqmg-b)BxZ1t&sYv_e!((%5g-J0WzT}wq}w9wSBW+
zA*aTOoX%H~ayl-*)|3qd^f&ZJT`*HlCQaAn(tT+wZln{2aA1C;031+CL^ABr)9Yel
zqMlh5Yf;>!$_R*WM>AN}!iJtkIvOFA_S;aI$oqIzRvFB3+V~Qusj`SfgpoX=p*=`O
zI{LVLVi%DoP~ft+KrUUHPC>Z||Mqwod{Uh4ys_px?|=kkZ)Ox<t%zB8%p3guMk0#C
z!?4SYvFfn8moYWUjr0U3_jHcn;0^#0naW)b3M5H2Wgf+@=h*5E&J$4xN@yTz*vO;N
zkp9~X-!3(ORrUzJjfJjY)n2MenZSeTYI#v|nH=CKO!m@Jkr3xtaDS!slzClpMlttC
zbz#*!>3-bN)TE8Ry1?|M4#N)se8sE((;GWzXZs}PD)}P%S=hLQblqq`L_ZsY5npTj
z>~*C%a4_tl-hRE}#$p)~VqWPRQH(G)*SBI>m)N1)N}$n%w_M`+W`dU;o2p*VzNN8G
zSVfRtkGSEgwW3P*>zf79IRct46NB6=ShQgS=X_L4ZG!S9X2e(d+{>wG2*U5~b|<YJ
zV<lBBU8ps(UXw`7Ib)vUho*y);}aUo7~OvsyD;+lNmExR2gx@cZmo$k(7%1*JJMKT
zw!c$8tDI*vBo^K$2g~}->SuDHK?yeWCw_b|FG@(h+=S{6ycyUQ{KD%qH<oQAqK=e!
z@-3ufBAw3<jz|-#RM<oAOE=fiC*}qy6!EwQ3{_`kf>xC?Gzmg-CdVY+5EUB5SlM2i
z6T4Z_qelCHL13XBEt6atyxRWGl!66hyFqq7A^#71Z}k`T7wr!Vf`X_tNF&_{2uOo;
zcb6g!14wrmAky6+-5@c*&`7uBNTb5gHFOQn2k<;cZ_exY2Yhe1S<Ifj_p0}*J)@hf
zGhy@J1kq%0pUJ_au?-CN!4m{qQ_8g-c&=t7#G?{?vgzJFb=r3iEz=s5yH%WL@h2Sn
z&^e;DU8@D$Kz>?1;ak1ojD7a$Fl?!~!4?ybqU<Lec^--)Oe>}2TV|T3cyr^izcjj9
zZP1qD{qGxRB=?#TOI8Mj*4Wvj3>pQi7MbZ#1==9b3qHu(bY0n=QxN|=(imI%gr4Wv
zZo+^s1h;CsD6jK_tI!s*@IC4`*4Kw(N7(*+d~69sd_^;dh|KkzGQ>SvQbN1=Jbg?q
zO5iaQ^3+|vnEvPdUX7B`2?AHn74~^JSo8}u$}MR-)}93P-|jz>6Gvr?uJ4d`xf-R_
z6mSS*uQ6_nD*;-V>tY`9hL2UAh~~`QR{)aKNf^!rMscBXb!N@+dkrQUtr6c;@<w#-
zJ2{C{3Z;Y-^``d3>2k?Us?oUwn?_6~tA%x!(|(6Y%qSZNZ{=FFhyBLud^VYMh`s}0
zjWYDmpN_7Y&&{?|!`zvL-lw15C2UPQZ1)_(_%!S}HDc!&TsSa2`~J+7)l4lxMtDQ3
zxSpwljy#F~D6d%}&M|Xl>U&1XS=KDj3w8$?jyk`AC+ETqEl-{6V`Y;*f7th&zdz`Z
z6ia4#*cDhUZ@z{|i{`PF^e1Z-Fz1A3Y{1$WL*fG)^5@A_LbK)yds5a?u<io|?V+W?
z6ayaaa$b()gqlYxu@;*Pb(u#X`6TH%1)!~t1g(+xYsC7_N9G3SkSi^r{ay|2m#+)~
zv8gM4A|$W%JtsC+LHx4PH+%aslWe*W_Q<L{U1<@!QR}0HF9jWU$iD5wz0FjaU+3Sp
zzaxGSNKG$6giG~Q0{n{f;+S>c>7k6PZ><Ncs>iF2X>f5MA@LHr+aKU+)PDB;ddJI+
zgxg><?wcc4BxR)Q3LB$zD~_!3Iop))%f58Q^hRImu}+g1yAc<}Geb3w1F%Sft$`0y
zS9Ba}dh}#`-sf>aAJb~2?36pd=v<>Q2-(XTdV|oi5hmm)@MKX`w)Sbc7|UOB6wOmk
z{%m^-xX;n*Lj0d-%G0QXL~)j~zQ@hglIqr>PdjVA?%~-8{(ZzPTo$iJsx7eFW4Itq
zT3G^p*Pm_OPg5pL6l0~ZXCB?wdzzQH@60uLnu46K;z=j(#&QQq8?|E)_Bz1D@R5_>
zB@}9#_2goE{<t+H6<6k2ovwEX`@3O*L=WALlA~v#@?;j1@f0Gm!L?&O`l_zhmMVtH
zjaxe;gLms5TDSSJ!SsF)^qb(ZSIj;NF9ew!l+zG~7khbV=wH_r-B5_NS)_6Gcw=hz
zpnm!a9DD0gZaJvZlxPenc25j8LIvFdT+{ipb^7)aD$voB%4p<xg!^cT;}l~pypJQ6
z<8`N_nmA9M7Ja-IEZ28vPqSf<Fj@)vK)4;O!Uo&j5V9EJZwzlJrHpQzU!Bkd>tB-a
zev$2m>c9@iVy*Fd{rWL4d>)B`ae!9qe&n#rqR|iJX}MdS8w;1B90|Kbdc+LK5E{zp
ze5P2o+|PSs>tN@Zk6y{Iqk=T|s&OqmJ`8}Of*78kw5=u?rf_HCq^AQ9&Jdt#6w3un
z6c=jYQtJjsHz$Ef8p~=xKWa0Sx{St$YP|Rnfm>dKpZj-QyPaIyY<Od24kTabrZ9k~
z%EWy1hW91EB``>q+A>TOjJIwyQhu*f0wq5)jg)WrOv9dV@|6>X6juh8Ss5p5^y^vm
zr8mn$>tH&4W{DSlbj`G8scBjcm0*X@Bc<)nFqDc`&UH*~lT2~#vN_|)NsPBnhBHbI
zO-pxmV?D;p-dh2&O0%dh+t`m5BaoF@cE=}wKT;t^KWS`iWVQ#NQoi-kz}{W>T?JhR
z$%KB0F;sl0--I~eBgRoVN6>kP;OBm+%w_3TUM?^)L5liR6BPrlv_`*YM$EGxw#S+b
zkJRmKJHJMe=$|Tk?7`@7J#|1^>2|*tPVL)|Z7hJ=H6In_(2m+^u}s_jgy0AJ9=|_K
zkT4dHWE)Pk&0J89@2GZLIsaZfe|_Pxv<5sGf!CWM7Ub|Pp)z-u?~p=TiNS)XIb3;C
zL{(^|6?-~T^3=5bRU$eP+ES6I7&+th=ulCRfWcHIh+b*5mZYW*2N}q)*af&ZXO@6C
zw9CgZoM1K<@@WLiGUdC9qrf9x+uiuVhE%=9z{4TyIYdZrmfPB$=N5l>_?h{>72->h
zV5DCTn|Ox`9}AgH*eo#0oULhS5%&H`Mb_jVyspXM=cnDdYBlj9skOlpyC@HWXuc4o
z$u({N#CgmcPKf33QuIQ2*z*kCqg!9e_w;DkOlcEcD?s!J%|NlS5JT|Isr3U9PX%6M
zSSZlTRTSO$0Pb<rT9f(wO(zrabVZt-y3=F{bZ~6wQ%h7qnxsA^d6w+H@7Q1h$9v2x
zzG;ckc+OsV+eTnaRX$qVSP4E_vrzj*BYP5MY@3-9ac{uWi7NQKuIxE<($%aVz&Dtg
zt+_Nl=pBwzD);r|y?S1mmfaDC;ALl62Gxu7Q#j*z{5UI_rhV@i-puzsq2vhTdKypy
zRIEuC<xG_w9PJ+CPJ{aPDJIaBLg(;KI&z#Rsv~s{#7ggBrBBZm!6db7Jw)xnI8%m^
za8j4-!g(BQbC#bAbZM#vego<*K-iXUiPeg!)N?9?pS=`r)QHoq&wEZJV%vcGR#qrE
zSH|=qgFf91(L;G2M@MbGX7sr-J^YEIs~0#RZO+;nb}E@m$EgLvi6IkU)G(52*R>%&
zzC)R)O^r|0`2bVow>$G)T#ikgAAVX_t;#;Z*<~}+=zCvB>>G}X=F5g;#}z$d(~$(f
z#e$cjTmn1<T=k8oFVed*v?V!XDn0Po6nxF(m@R~=%LzYhNI%~oUQ#Bz+*nm0*q&rB
z)<@%_jBH1?KVB1Si({6XvSy;^2uD~x2(MLpjx7-{+7WDNSa8N&yaDS?-#dqa1oaZn
zroVDSHh?)|&6JR4Ecu2AGVMXG<WHX_MItlOd`2FonpMlItpJUIvTGL*!>M{6kOH}Z
zHGehYz3NEEc>|v;JFN0dFVIn_G0?vOy-^6x0gN!L!0mt{z1d5Y>slb;!}R$gU_$y5
zDb+wNw&+E-vOS~zmKv>$x5qASR3Cv=H-nMMDMqrpi4kjag%M@OlZ=PJxM~k8l5sN;
zLD3V)@Wf?eGkf$9ebJR~9Wm~PxM;knMx*aiuWRa3;+$fv*m%7B<5GhFz5Py4j^xD3
zQm|78R(5lBiGk5HZfu`V-x{vda?KtwvN?8v(P)s=<Z;4enqT>h+=yV&-Rs85S5S|`
zF#QU4;N7jhBg5&pZ1F=h1sM_qX2j={rM=l73wT9#7O@W>lBfsz{7igd2u2E=!g5d#
z5G9}38LT<WKTMmO^J6!7IZ}td#6mIY^pa9|jQ}WnGscxNMQo3MlJ@A^=CRKgerxk;
zEb#ePE9!|nTz3?9j_3p-)(huQy9y*lAO$KE$|V7md~JraH{A}jBjl1hvfayt@p29E
z#;|%c14Na!J*$-6tj>3LD9qIlP6zsH<Y%5Bi?u2R7)l>dyFRiUn;rtE8E=})Jz$+{
zR>!A&{vuLhG}`#ovFLPv5~QLylZ+LtI8E0_6t5P#Sm-0du82`J(J;}wuGxP&y30mZ
z=#crcsO%Fw-V&>a895+z_7JxFTFq74hfq#V=DK6u7X1_a({zP{1knR8>Gj=F(necQ
zx23P?tmcGm)a-<q6ZOSVlb7@OVj#r2(~k~#q;QlQp;m(<`9R%EQDOPK4_bC0Np!y)
zz~}doPfyqq>#*si)?!A&;e#+#Ro#U4s0!8&e}69I*Mf5KHHXFO?P~n00>%QYzQ(b+
z<lr3(?ozTr`3_I2x^!zW4I2sMccU+bCdMV#Qz_aID5-WQnplKQp9WDWGb|2<g9VJ6
z0I7mcKdToWKl&L&vXrW{18Xre-c&Je>`O|2#f+tb!6KCBN9=C0kvIOuTletYJ$0&H
zNN7wq)!Xn3`5b<a;(PRJ&9jxk*76A_Qm0*97MlCEiXYxWet#IBDXJBBuO3`UDYUmO
zCQwlTX88&ezsUpeffuD?&y^>^iY3-~bT2+ey;<kYLRi)8DtnEUQGnU~$7}q&P6ud+
zmQvqcty-*MhMg_NA)}wz*`Fk>q~?h`(2YRr1-NyRj?qs#=hACvetog4xH{O71^1g>
z>Sm%vG^?tO7VOujIlLztd8@tZZ@yIH>SCjAnU-ACq)&`3TMLl@9)y{d1l~Ma<_tT!
zP^`4baH9}XGQL0r35A#tp)D1(c73`VTf!&3`Mm%sY<*;+?6ROoc6x{h=ro*?So=L}
z{3Jis%;U2EOtIcWip$O+msT}hbxO|hU4p8@GUp_~#ZF@ChL(`%u<4^3F~<R_SnF}l
z*VBqXBe=!YltEqvR)S6J$Wkh8{}0>_|5kBIN~v*9Cf11tSC^tCvvaD-7fCx>Rm5R-
zPeiGr`jT8f#MExjs^=#HFDO$qB#T<PrjLjC{BYt>s%3tP->;s{VuyU<RM@kpNTM>Q
zM(eWi=6cemQPhUKt@tIKpFC+WOSCZXs*sY~sQ_?tP0`S^imS@ALd&-U-VH8XMV;B2
z)7DhjaAQ`IG3eZkfRDK6Ws;M#vU*o_7VOx5e+nb^^~z2pLw?1<3F91_NE<b(OIaD4
zX0Bm@G^@y2t{<<pUYquL{LgCh+D8d(z`HiBHLY(_y$e}A?7Y?n7GztzBBb6XNs-!f
zxqWNkqy8Er4gdT-^>?so7bMm6>CjJG?!7xBsbWG_?dswMB{97AVN$C&!A5;YHcP6)
zM@%a}d|Bnb41HEHJ|K{9SzwGkGvnZ&!gw0Cx_hEJ9xc5lah>~6UgTCPuv1eNst>60
zqQ=pYy4=MLuN^`*5lTR5o~x78u4MV5hI;lIcp&j$_bXAuy#$5F=f@Ifo=YnExJ@wY
zzGqrLZ7P5e*QqvWX7>ITi47*%&yn4-0&_yxQmJuQcvkWSWmTzGEQNv53xt&(_Z}+z
zEhpowmaSWIIoV(_O+*d5ckH8F;y7aWt;fjahnp`I>tc&T<A*ZZq!kgd+x!j@vR$sg
zh}97q4ITZM!TYF6VWQ*bE;f0-tuiD#gWW-+ZMqBU*?Q|8hFgv`dC;vnY3(}B50w)I
z1;PstLj*TfrrOG{bc!BYcnIZ)3*ekHk=xZwO!Jl~OZ%pa4Iga3w!xmen5~O%^p<{+
zyStjurxh$h!kF?bq^YR<Ak*Mp`O`%<<nl)(3X1FF@ihXDYMnX2PQ_Y%Py`<=<#Rkj
zHk{5>yf_$QRGbP18GO#t>cuJI#7_VCU^M0tvL(GpCq=Kgdx&af2iWE<Wmy|7mUyv7
z)@P$mmUGT`_Dq)pgte025~&qw?9=L8g~memgUSqCXlTe9ag<q4tSooFVY115ig+vp
zyc_}A&R(@4^>e7CONd*+oiWGnQ~hdh)$e+5yjT_^B9)Tk8xhdiy_oF(q%+?TJb)`k
zI`wVyGH9(D*3lky2$Z#|k%1Q~PS4ZHz*S_)=`|~N$VOxF5yAaD+$>Nn{CrXh`{s?2
z0NC!H<C_5w{$u4{RgOLxnOw&M)2|{E7b{(R<7}X{T<(;$WSA_Qrs(_NjmC?4`M2@E
zliOzEb&Hj|et7mfATqj@V_xvYGh9$+>eJ)|=YS`@vriM+yHAff_k4dP`mIGDSc-zI
zkClTbF{f*D{7Nyi?<PA^PKTK}rk7v)C4ZoJ@Y(Gx@x(J3F6e3RG0#U;4T6@cA?fa9
zbAp22-T|O3cUz6Hn^j->{8T5;cE^57HYDg!eJE?%yAj>b73I=?|FPb{ihVwUD6<|-
z#OFth^mp%|2oV=|q7khKQi(J_gT>vqnz3S!SN30XOvjh<K!?=ACJ$St@x|T{-!C50
z4#8s)1$x*rA@{RZi+3-b6aB6vUe>&b0Ck!r(8D=u?~8n(ov!?Ow{T_{!%BJ6tp7Oz
zaAl54q8D=>`R^Oyd^?vF2E19SLx=bD`{a?cXKJ#x+mMuY98Ij5TrQWGC(bNR+GaA^
zT}N;;SvB^9z?O2X)>`>~gT@N4>6Jz%^lMpmw0HONuuEUAh8Y<aKA{f?vw}`@j!pty
z=tYyY7Qdi|UaReGK9Gxwy}|hy!LwLZbSeFc&ck)g_|hy2k8uh!444hnYr!W5QRPm=
zDu5-MHJpXN&miGLGLi4*Ud`UZ>1T{-w72fQezcYlyR--fEg#Juf@K!Z9KN18#X1_>
zJDe7}s7l9G?GhtHm{b}X*_*~%YO8(Rce){XE_71B+X|j_s62jqj3P_FFYd065wK6t
zy7<(*!VX)E_LIbi8Z~_;$jyzJ&nD{E9yylRR?$#+IQR2DyyJ3;=kWdNVRxWPch@6U
zkx<PHZ&5?KM%nwyX|Ah5)W0rk-f}g)_<qFkjRA?ZD(n+Z<ozsV)%SYb8X=c%<1*_6
zqaP6VUCMaaWQw&22yDw3{6J_XpB@+u?}tNPP51w1Op}hkczdWfaVCY!BP{iVl?h}d
zr$@}XK%^8=qiuYwZP#j9&AxmNl*in#3k)GRP5VnSg$?g%*b7t9%;}KcuInQ*I+!fZ
zX#+DSYvct(VKq*K1zRG#rlmU}Ti_*(>0j~&rb@j%l*+z+vih!rDazZ@C==Nkb*Y_$
z)y^C1u09b<G;I3HuNHnqtL2j_tYT4PUi1<^m4XjCZsoqy^WHb`4yG@)hqu)|p|1>1
z+32G?<N49Tb4h2Xw;-d@{1FOh!CmBEAF_>`rVV)H&Qn%Ju{yJU(ajhrg^RuSS3u&x
zkx5gKf>v7Scb?Q0fT%L9evViYmk`B?lfFq`QvKSY{UGD(yqt2rTI$0>p)##sjtUtr
zR_(z?`lL!<jJ(!U2WiT6*ckB-hd+Y0glCeKe)(Kjb_*xZX2#iJ??J@8gRxtF#i+AT
zdwq^lk5znFDgt?9lU!%VOy=q^)A!=Ku=oVy)9)>P(94{-F#euwO7CiyguSk3gvh#R
zcrcV=DcA5tOJ)rYCHK*qWx=8)TXLk0LaB9AsXeUNC#dq?!TSv~!i20VYqF=@86tN*
z@FL=<@2P4lg*zU!<?!8qJfi^TZ|$`VBJ*ZgqoN4uW;eDcGE<lt{&^7@cha}$G#w%<
zyTmLt{rzFmPA6|(sn1BbLta?Wb)26rDvW6043WlS8Sry6t$y$QXghn^#`MF>&>+z-
zr1S?N>=rZJ&D%EPbQkrXruSS@ijvioC){%ePzArmSrVSsmpnO?4MpUDhFxsst-OuS
z&yc(2z8EfTl#)b{=7%G>fS<CCO-D69Bpe;MFk2yCpQB8?$8&ieSbMmY<vn}h{6n-q
zLB?Ee*=DfWmQh%oS$_<eGdL|CR*zsDW0-2Q0WNU+<cvk+6`Ak)!;j;;T(eCgN92pc
z<VSH`&ma0HVMQ`TMwE{Y{`xTZ?cNH?kgXI=llMWt{ZPqg7s^)*Ulffv4H#mQ%;Zm2
z=Y^csI2A8o_s?Jxgw8u*YZGZ5+Qbwszi@DRY9-L&i|5IGTHpFZB(k*gwT<$rEruBv
z`rwCx<dOqg(Fs3bS*)*hyHwaHr9SvMj?&{H=CtcCZLt@XH}ZW=iDVB1F(>z~Hs{b&
zl_suQ_w3F3qtk398SwC@qH*MCbE03G+E8cu7=NskWRg%FF)6i`{nVp&Br}ayX-1!W
zma%hrnbGaDJ!_Ga#PtStmTHu|0vYxhYFhEJ*mfK`PK^;!wi|iHV^8dQ)dYu*w9w8!
zkLrFy!#=0|=+|e0rNeT@s}A<&1A^dVG}9MIE1ouaRs%ozGICs{sj1o2Qb-o0?*x26
zA-JfY3YEa|8E1JEIQojsUfh{s|7rlATMx73JHM|8_ot07=;ZtI(@#p8Dxy=Ionx&Q
zuJ8^U^j0#4Ll2f8?LGiW_y6+wf$7twjDjVj@FkB3b`{#_fuqkiq(>||YJ)K0LN@O6
z>g||9p`d<c`04~&Y}S^?s=7aD#Z=;aR$vL$OmpR!wov8brda(HM=T0UFuzP}ynm@e
zZk(j5V07-OxeAKTsL$Y6OX6*1uFi^=B<YetqkLt&D8=Pyv`lqH5<m%tY{=AZ(JMH4
z2IcXvH%It`0?5Zi5~f5DINUR1169_+V{jVu-3LBm8O-XAhL;Y5_vlxdVk6F18kp55
zk$zrsZ{$K7CAUkcj4XtfP5H(`6Mq3mD_t_s7PmhMzJt6*<)B;|k{WerYpal9Gm~OP
z9D$?p`hAR`+S9MY3cSwkkv}Va77zsxJl?PoUnHYU_M99xofZ=2Ncp=pYSG)?HYF?<
z!e<P0rwZbZ98NxAS}W%*7Q3%_6q{O3HVSg)*GRL=dhVm;yl)lKHehoRq`s5uT*WV^
z>V<3Tc)%bQ%E-OswMM_&HNFOipR9_F5&v+J8ljR!&VT83QeHUR`)kde<cwu<c-efs
z)RKB`t-ydk&D1gGUh>>@aXC>`f6JWq4p}t|u(kTqEAVhv3%S=Xa7;rAqmdshy4);d
zZF3VS%0`LT?o9nY#_q@JQ9(XV#J*ThO@K$e%f_ce7~56bSCS&3sIh#>)>q^a${|b+
zoL#!7by>gT-)JVaH=XkCX{k%Yh!lP>zB57jmxV-CG`d7p4TJ(ru`yiYsI1U=A#nh^
z<JT5u2DJkf`Vz1DA~%ay9++z5`3n+P#A{X&&X<%zD9$JY^on=OjPzqtny2dLh=9rC
zG46F&XQm~OmJ3)zukxGc;pe_>;N43wNzQOW|I)7N)g4Y~5jK16rU-+OaGFJ)Z#cOO
z`5x*#rN8Jm<W9x%Zh@k-jNP+6t<C*TD&6LfjElec_D=V(zu$qG?<mENn4fJg<rTv8
zyq8y(l%WMPQy}8j{N$*tCRvhq3;Jo5l<b2WNqiW&GvmVp`_}NX;)NuyUxDW9y=MAU
z`PB#86g$|Wt?8mfTvXodTzzGw<14?3Dlb-IU7EjwF_(bfPk0r#cHlLIao2Rvenf!b
z<D|>gMZZA{If+PT(&R{!;0QFPMfbJT0DrXUAu0(^->`rit!{b`a#}om-B;Z7V$>c-
zSIC6yQt3BBT=MS1yF@w`!|mtEUi~%gC@0sw><x*>XrzPzoO%0d<xkW@=-l$p8qd>N
zcvtXnkdq`A1E5kp?d?)hkHSA|g>#D_SPmORD2shB7^j&y5?TZ{oEC;-1T?b+VtO$M
z<YJ`LV?lnKuI%CGp3r%pQTUpXY+m)jd6ox_2;15xbfXlLzLf;w)bo!ECh<=rGg12R
z*y)=1Yn5YssCt+cb$amvI#A57s$~OH3ZFI4fM=3?87FIfdE0%I4O&#^^&pc9e9IJZ
zWE<z1!xzN9wJ9=|gCg8kX@z(E%+?<0nlQEg=9b&x#>bduK&)5BWl;x2VTn>MBLgGS
z5&UXKj!u`Ivp-tECLqU_t}`@KG$ha+@@jX;tX-a&UgPO;9dzOlHhq3F`*Czk0hBnq
z7BPo<gaI2J;ox3m;<oC-6p`PM<yv~frDtBP`a=A4L*sk<fTj6X-hlHq<IDc+OF<({
z*vL`PGMeeVfFSn5*P!VF7Z~YYBRc=nr;$;p2+pQG0RVBBQFr%}?#~uMrz~Yf^bR%%
ztl&c^R>F3UMP<d)KU-6T=T53@Lq@%z4R+PX<?M!xE02k2-zY35EBz#8_Oai__Dmib
zVDmm?)dl5!q<iWwdWIfq=?h-s9GjSu*-&_PxUZf!)$>^p>nq*v`y|f7Gxet2{?)he
zrnToJ%w*5Vyt~=-sNyKRl#G&jm?w)kM8+7gU6MuZJ>6dSN$ovYcKY!gct#NvYjFDO
z)#+%cQdV|=guExkUZ>kaKfaH#YqJx>5cq|jaMJ73$tEweX63K_Ipx}2rTIM%m)}sl
zfBG!zcWHFLLWMPTDHk=mkO<6>L^tX_@*2~##rNoHkV`W7{3gVaL1}T%bKh&;Y!R!_
zS6X{&cLs*Hvr;$Z6m7unmN-&i&Ke^8z?6z4rOG>3!*)jX`68#$SEwu3YL}?GtD)a#
zA~BXI=SC^`sLvQ9Nt3MfT3Uxjm=VFeg=hda=24^ppJPsMdYY+SbM}Hy_m8ER40?OJ
zA5V1mu#wT81lXD<e;W1J=T|3z@w5l5J4{X&G%TPvUjo^cQ=$ece(I;|G^(_N2V|0t
zX-tqRGcGfMP6dm@TCUuQ_{;lhhGH2}eSOW84uYsf2@G_KLyR_Nga_t}LlG9e$xqaK
z^`@|rC?l1S`6b^>m`LX6lo@1E&#$$wZnyjODec>zPLd5-K3%J3E}Rcl^2k;1h#PWC
zR*zS&N~Q8r_;_WvzcWMT_vxNxG$6fOC}qVeO5_FVbA9)mP3QRA7vjqYoXcrYIAcV8
z)frt*buC_~e<0+5PF@Z8&0vy755i9E%FvN#JXRg@7{i6Vph8u#sp<?Z9_E9zd{t&q
zWcM*cTz&N{5j@;IAs+zu#O@#+hOvBT9#&$jb60L%@I1>K%yH)IsKp~ehnA!Er7`Jc
z;n0*>Zb6|mtEp7@oPD~si(L03x;qNe(`U@Mirjh(Zg!ByUsGz8{*dNm_{AHk*~!Wa
zYbk;e>=IWBc!nKg+y`$mB$Q}I2kA@s<-?=Wm{ZoPiL{Naxw++Hu&jXfiQoHNG*g8D
z(mchZ(fwkXQ=HCR8N@}_j@#xG^Nj0GJiB&z97U~pdejfFPtE$&@?eW&9?L0B21Iyg
zzQy=?olR#K#gYxKb6QqwWT?mL4`vk3l2)?8vN-5Y1MlEb1ZDa2Y}z*{SfY23P)3y~
z?ZY=m!RDI1>F-V#E|1oQxLnq;xE|o3Bi;T-I67W$ocerIW`*TqLD=|JKds}{^Q)hy
zpe1E;G)n(F$Y`cg0nr}HG2mm@=rNWsrcu8$7Kq>G$$(6oF!eQ^GSVEG_yeS7XUs7<
zS5@+?MZ{>Ef}dsZC?OR4dJkAVp~$o$c=6yj^O0kYFomi)i~6p=xA<j^Z@C23eGTnl
z`=EwB&F#LhKH<54R~WNoZngPM;k6X3yHCyAD)5IE`5J0y#@cF=on(F(yhoAw`Fb0`
zUdRJplTGVj>`vEtgb40+>8G>q68t%5;M{_c;@w7#L`rtw;hVd`>M=zo1fF?a#(>q<
zK$}+B<Ef=1fQN)bZ>ebSS|^tKWwxR_OYkIvzU@4Jn@q~1o)~jW6<tgeohgc2POci}
zuc5>*Pu<w+;cz@DZ&8cFFqXVNwJ4=KGH7Em-eyQ-SgtK~1GIqTc+!K-d>Vy*yIC=8
zORouhN5xWND<jf(jiafFk8bXp@|7~BTa9g2*ig-Ahs#1gymSU+CM|r+43w8&S_||0
zn!rVR%>Bh7Em0mKpvrg(qNg{Uz(NVgf;jcI+7Rn7_Z4Rh#sOt7oxe^bs>;O*Z=K}T
z1*kE?(H_iNf1mf3>a{JGkcG7r$2MS#a(j0I$k23kEv3QePC4_L$K=t_ggsF^)EI@E
zn?R;@Sm-2_CCAkPQG=!%l*yC$hNZNY0&X}W`UNGBr%CNWYI3_=63^C|IQi+T=(xt7
z+l2!t(I0}Kau1gJta4>iYU~rF1H-DL36pMb0gEOeQ>b1xK+t0}R|dr+7lVsL?Dk#{
zkyn5>%;O#qD)>lUWr#1J$}cS%E0CByioInW@>7+T0V1_>XIUFFh!6bX)bMkHNx@#U
z8>T!#W@XZjBpDLw)_ZM7aTvZSa*+?d=(!=@37|x)F3?r9EAY((XU!r;DX08aBmbe+
zU2sBvR?3f-G5}j5;U;-`yQO7hzAE#$E^|C~eXI3A3bQ?X{l9s3t%O<G?o)Ev%|^6b
zgWL&#ExO@nH_8K;pr(<P<8lRRp*Qz>$VX16iD?bkH|VYEpv8-}2|||RYHD?u#|x~u
z%wWHAC*jo8w|el7Qsuis$c0=)*_s|6AVF~{VYhM+$r;dPkwFVl_>vG--G5+5UTF#m
zE9tp=!_NRw^n(IJMR<}ZJBif>;=SX-!7#{F@{hKo$h~riVb1xKYn5HIJ;!_;cKJ+2
z81LS#B#<D#w+AswDphfT#<c)Z@)0+#t<e8pX5U+wk^H>WpHOB7U>rlp)RWs&_7c9x
zS3xQ?sCIz2JXt2WY&NjY3p-=(%V&|gxxU2?yaFdFbjYs~u2OtNS%i5Xd0tp0OjhdV
zj@q#5YF_eLY34?QzX63EohheCtL&11Xu!Dv$dwYMtm*6L>LSB-J>6~M-O9}=zg9h8
z)7uLc#R8~x@zvHkB6A@xBem;es>E)u4u`NOiZ<jqcidvlsD%iE%J>4FQo7l5|IZDf
zEe*vhl9#B@>FIWr>d~t=&%L_F-M7p}L-uf5iiD;Znw2vAZq{Q`Z#KF?<^Ml*u)3$b
z)*b{<&4;5H_X+<|viVua(&2dn#kG>T82p%GxV@ubbOX)i&?SyX!#tzuA`v~UlEyRF
zxaP)!qQ$lfakIz1%%hr>ntr?b)%n~s{vUp}<Tb~>V6Bbg+<KNB>`bzs{<o4H*iXEa
zTdD<k_Lz&+u{I&-UT{$5A5$aw#V<i1S0eMB7F^Db4#k63JM{2Y^knD*DpBFGfKM+4
zf&9^TM@89jZnug?id$gx%NcUCSryJIvs_$8;lm`5#KRQ#`P%aVhR+fin7WJ)pD5B{
z)`E`wHl-hv(%q-I5!!%PXwL=9vz!}C!olC1$xc3R&Q?MH<`=P%h9*Bx4X>Pwqaqqy
zuI$OiA1Ct|c?!S`0KBcO$vthcjh`|vlKS5b^(1i@3wq0jy}?jBwT9R4EWe-FP)ouv
zmcC_*4l<<5A_jY~yhf{_*ZgxACINfZ-&S+hTyF`R%pR;23t;=c`x(RFf2lm50GuUQ
zCi%2yqYhs6_Ev^2P|Fzf_2A1r+gGnS6Sl85?AK}?tT<ab*Z<gR<HfS|mHst|lP=@x
zw#Zd%gGjO!Ej#BQGbV%VLp%{PdJ5NL9NiWVTH3Dd((4VmwW?TX(V`jggSpj!8oE-v
zpmf80LP|s4_wL4Q_~Qo%yE#XX=Fg;jWTX|4jMSDJKY4u18!Lt{aSPmXcvUqY+l+mv
z1u)5K{yqtY5<3-CyPDV9Jfg75Y@_+E*q6+Qx4YHBEzqxzoi(f~0$+GG?g!YKO*7b}
z-zpN;!+`pg*n|d>$ttZxa&e=WQUN#Jzx~SGK6C%vU<&#1wNTGuA_?5MBmY*8fRg-F
zDyXilgHfYLvBEi``wht={vR=tIbzXWimK->l^r-i&=Xw_THBmP-Dve4WHGE46AB@M
z@H3kw8u^b&71pJp=`B5KcBb!d9m_KmrNMYbDOWq29nS{Sq|kJP)iVbM)Z3Ng0b;tL
zl(2IKcmrhZ8bVn<zPe|4%QO~@adxLbycgU-aR!)|J{o6iuac#h6HRZf7K<TZNRwH<
zcg#_raSQ=GQaD4eT>H02vLKm^gQM>2Gmatv9o@>FulR>*Z^^VALQtWWa~Xu$zs3IO
zA8%$MP!j{El{fuFg}oH_^zmJRTOaA4*aZ`G+#@=&!wO{6Wt(|S`r&^tivcp=<YMDj
z(thhj*C${qWKg$kPbJhVobcS96A8CKwW#g@z{`4t<WG2weCG~>{`OYm4Ej=@26Nx_
zRLR|4>MrU*4gXLJG{ih-oy7wgABY(d!BoCd-v|PIrD%MNay-mDSxSFQhvmwrLE&^e
z2sbIV@{b})h~`WB9*ibC!ew2{>YV(hY1$LYWGcxBZcT~<6^3cQ<L6M$vFGU~8=eim
z?;mDxT}ja8Zr;in4R%jFZAj?)?9lw7YbO&CVq~0V<~7poiGVM!DbY0>Z$Iv5%p>E?
z&IzreCzAYdd1D1d7hj+mXw}E!4aJT1#YbH1M;s)zNFdI4ME(I)er*snI%6Z|&Jn99
z0mbB@!^zKdx0nJ&b}_hrqX#1SK$mg!DPRlpdAl5%z*(|%H(L|KasO4{<!BddqV?H%
zwFi4`yjBFN&z$^6HfRFqr@>K9@)=2)pCux-1NlieA71aeHJHJ{GksR=cp!T6v#{+H
z(<x}d_issNFn-oj&DRnQ&JyIYNx%4NQ~Ng?QjJRrfS==KwUPALY-fbG*O2|~;2jW2
zxl5TgBmiQ2Lp>i$!DC<Xw?6Op$HfKd)eblSmWjEY49E2b$1F<VyjWg}Nwp#dDUyKA
z&)H5Lw%q7(o|^pure*$0As3c&$&+~%IzUKH)M%+YyH$z&hXv81@#;#hKoZp2ia11)
z#4olj!`GJzTTSa$fqp$O<?B=knT3>^a*Kd+ByFI*i+eG){|g|bDCG&9nz+ZFPuI^+
ze|Xx{pGW8M2bL%V$PY0vb~>)e!D=tGug(|zmOq{v_qHgEtzvelU9TU2tM$bt?z3YJ
zQE$K0D8N94M5Zf5e{~O!VDAllp?raiIax}p8A1qF`vL%VxghN9!NVitzeT|P>s#tV
zPZ*KbXQ!o|mR#`+UjzG6%jg^2EgFeJ-k6)KA=F?H$bth1KK$!f^;^MzC;HQXFV~1j
z0CQ=b8=f)&?@#xkM<z3qxb-2g0{~kscaAYE?|$jdEG*;|P_j_LJa6qCeq)ka(P>pG
zWS)9d`jXk0`Fj59uJrBS`J0t06%rgCl^$;ZMxPCGR3Z`-|D_%z!IwZFPFqzpc;DBc
zKr->`uSKi$R~r7&XyRcrCI$Kd*6%7cqA=y`3%s?0m8b`v=c~Egos-q73${~qmjo<I
zN4~qLx14&%;sEcZ=No%&Ui%z0&YM>OS*X?(qszAaqlo&8rd(w3f}t%MuXvVTMA-si
z^VC<>v!>(B1!<O>Zx>zsfbURNi@88QRb@W-^&X0c*$?sd@EdNT=zei6{G|r37S#HD
z5|NZ%0VNDsW*F1a*`vX|;p8G(wcrjZU#)`}Gb+Hzn`AJey;@aEwD$)8Q$9nUV=rR^
z4{()*9n>ZfKrVMjV4mj@VVnO0R9n%U?Z-u}<5=J13Jx9C9LobKUO*wg{87j!0o$x)
z33_o%=BscZV9CV96bQP$7c7YYWIpA%GmA8<Qp-15zRV<7KR|!OH)4f3h#tO;<eHFu
zRLPmoKUOi8HPJZT#=Q`nb%1aWESWw?`CD0IS@m?%8!E1;z80w^XFsL?QFQ&RIzi}K
z%|l}VjdNZ+HMxHSrQQJ(iAg-`^$(Uy6iE)pwwpLTJEtkJRS9m{q{jLMIuo=piKRa#
zRXWwI?m1|fxPD1>_YV_k04i^?F)LrybP|vCpuK($G}cOtDvRZoi#d9&ka<^YW+2@m
z?_!kPmYm@mZ}jGGB=OnbsmW(mxHn12E0FzK;t^OC?{7XVhI5VM7}MCx<ESo+$DR)v
zv+y_a{BLI9IWN)#VY<=Mk9Qi4*SeT!MSNvK9HPMh*Sz5{<%3z>-!BWbVGo%loyuyd
zrBXJwRR31Qx~jHZweoLMTA%laTdw4SgfExMTdr!NDgGzM!wV2dF=Reu`^w8Kp;r$u
zF}{8&>_)cz<tdHBNgd6mM$2dmz4+_~J#}l}Xs>hroVh(Wio)UnfTYXT33Zq?uTbSp
z*X;F6m!)q*1~e40#fM`ag*%#uCHT2l)w-1j-5LK-Ltmoi*!PoMQ_p{!t<~?8{QcR`
zEXkZ5!!$0%Yh8RE^qK6&aQ18>D-IS=O)2qp%5nJ4)f!9rR!z$p-AbeXwPC5x2?SeZ
z^K4GDDi5Yp{0-QCLJes>SO9DM^LPtB-Vsr<`B$9#lgutokZ)4~pw<q;#|uWper5h)
zuMYMTgeYdO(|REQ&?6K8M2u-xa|0Y4zF}yv8fo<5_gD;O)+Xicq5X@ph0j?EU*}2H
zL?O76oKs&YA}&&_vTfa??_ZmFQ3sT1?P991zJv-j$`#M^F3Zz>b|B_Lmb-O@0oay)
zx@1-wkmxx03#dMq;_nP;MCIRnJAxX}hFKfL7Je3w)Xw8K*krj`*Bq}WMkvKVbDPDc
zK^QUfs1knsk3UmkSScJWHP-};;Bs-fS=(^SKfzJOm}9^HP4<Gh3fA*(hvy$E2M}`l
zYq6H#FUJL|o3<5k|6@Q)RK$qB9}X#KUn}3-(>Fmk%Ey@^8spR_8_oiFw2RADF%O@q
zz5%IL1l4Wo3Wj_PEo1|-p5V%~jN{EXY4f3~zabqonJ3yi9*9;wR@gk2-pl^Y8TV2j
zn_dfk&M6s@t7b)VBA(H|6CXw!9_35@Y0P7B!Ib3+ZaqI<-{{N$jS9r_b)iauKiF`)
z=~XbP`9Cl_&}=xi-Xiv^R-zJaet%m_V%IlfhTH58%F9I<Q(TU2Cw#JRbS<oQc`-x!
zAE|{+Pvq)O?3d!_ssp*E-QCxJ+on25+w$mU^mI}skhw7HYwuFJfpb9i-oX5MRF_2p
zxTcuG=lDI#%*8+Ua7lza=%B<W3Y-=CjM{t%@zdh(RT)y5^B-C{egvqA4Wj1dh8BO@
z*^kQo)Z)|gwxtZz!byC)1iW|tyahm4)q?2yJL-F|(oZj5?>1O{jbp~h`CWku8W2ck
zV_5oY50&VaY{G`bgUnW=@wMPoH{Jya<sHrUY*+5y6rq$jD$u-}D0!lA_utAG_#C44
zKsTAkdVgC8-deZ!H|M_JDSruZ((kpYN+LK7&<@i7EAH~Y=Z@d!rI*JFn98K1?-jpq
z><y9b7n7gw9F3x0PP$g?B*-t{`A6FfJk4dTRA3KnK0@B~J)AmU$@p6|zn6?ojaE9M
z+DJm)j0;pkolU830nv4UWIn+b8PB~HrsgBv5>R>E+V*#ZR8>zX-+z{1W{nQW^x@Ap
zE4MP8)mmtNP)4^BTUBGjH5jXk!3+8)%o7Bt=NlTeTCr|gWpRZYy#J_?FrY>@ir0`*
z0E4i99KZN)%Sf34TnYH76i~7>-72#p2n@)~-vA&W<Jk=4qQL3L<oc1a#y}7wi%HsW
zW340KqL#7w#REx`iN43%JlVky^$x=RPC+;q>uNqo4zwV#nrRbv+@a67soDHbZUe|y
z%2WtKN@A^MnlBx9W_JGOM=Ox8l&xs=D8;i%0k$@uU=03SK?4kTqD@dSOwX>Psx{1~
zs5guD$RGo0-2@=qH321@u^Z5xhm-yToReuodbyYTb(rN6B81~a5_$TP>Hnyi_?M9>
zi(Zf>vp%yz!pNIt%ztuGmKw_jkWxF4&BrxPhp!hE_8EWUgXcxMhIS2SeUx~TN@v44
zqOl)d-bO{Y@$ijj`#=65;k}|MzeBF^`G4|*x4!QGT%rw|vWNLacXags`CtDmBzgxG
z4gO$JEEnhx_<!3N0IEol-Zj2+VqyG~z5ajsB#MeZ<$uTdk30Vf+kd+ApDFmyQ2*z5
z{&S<qX#b%C<o`^;f2II11pzE=jB=*3HMUbY5X!!W7$tsL$K^g+5BL(c4_S4!-<9v$
zf}elMrEBSUiLQG6oKu8pe>|%={{Apfe4_B%e6XV)&!U?n6Gip&IO(!;!S9Ooceiq6
zZhw5QKjJdn=IvwB7nJrbm*Jb7^ARFPIs-nsO`hO~WM@Ur8?F%=MH-B-dhbs_JmQY(
zd%8@x(wHxD4AlG~j<9GPT6vjX9NOiqkRsXbSxA%dPak45nw7?kdnv=!y5xM060TeP
zuJ(@b-u#}md_qMnkH-|kEDdfukNxOvCQH=n9DeS48JUs>=vJBc7MC}%#n37Byb$P2
zr(DGO?i8G^t`_6C)bkYe0iKK^0pr<rg0U~7xDgQ(bs(lwIwadHYq<2yys!Sz&I~)I
z$c0Mv1diTzDaLmTd7mx?klxo<0ijR!0#lvgy^hc{x8#)#;<r^7D;a*Ku>6d^z#X0!
z$Kv@JzV)e2Lwstr+q8~-jQJgx!py*r&kX~0Shw!*I10ZDRZpQS?{zMk`#_q#M6_`O
zbhJ5@W@Cl55y5pPHc>x8CgA$PO})IcbAX$hi{3|z;@PV&B}P?xMaCL)<1MZ+q<obW
z2~?$e;64xX(esr3;c^oniperV=J)q8qtb=ElFz?Xm98iU0>P64QmL}A`|hhchv_oi
z0+r0&^UxEM%d?$<{T(bw)Bcu~qcGSI=6)=^y|s23QIkzyt7NQr?-4Q0`2g1yD{pNq
zonmrbl_GrFd`>iaAO<43amR>UP^T+tMV7?nLGP?!@pU$b169p<jEL*}_wnnnWN<Wi
zFJ`d)=afZ)8+nl)xL%S;yDYV2$6`FL!L>=++z$b%@(LmFF?(0&+K<u1snrQfg*fF@
zLDtZ70V(XA<-3|$`Cd72qW&J*6;8rjo+8!Gs$a`5=Gt9M>UXgh)VS9rLnLG#I#%b<
zeh8JGi~ATt(94|n6c)nX>@c}Dy1ZSm0l%*6E#iN7>h=$KZ<>T|8y0^Mpi&M_<9F#h
zz^@wVb8k$bUupDfJm#jhyDBaxkl)||eQVIll0etJn8?~amoQSu;AqzvUm!68%f&Hq
zg4XGO9yh*dMkaR86gw$zLe$&N*6p2aKh&3|3~$Yj5Ml!u`!*G9;y3&CwYbN|plXG7
z<w;@s-NPi4<-Rx$r#Xm|#R;Dzvy*;JBO~lA*xUVWn*7r0NcK-ni@`GuCanT2-;8L&
zg))75kR6C*$PICE%DFL?<T$BoAvtK*9{6aqS8&DJA&S@PcgJe&d><bE)x6Iz%MMs|
zb&z)<TGhVUYF!M0bxA^bo#UxM!GX+MU%qX7hnkzS*6Mt^oY1csMm)m7Nl=tKtW~Z{
zt(d}tvEn*ymET)y1O2dI(M34tbr4C!WzOGF=5i$9wiQcwexwM^8b~?**m$;H3}62C
zamdxarKxIS%cd#vo|})bMR<(;G5K66OxYZeHQRuhX}8E+`Gi1>Bwl+XUBn=i$PNo*
zt_`1At8ekCxP$;U;&{PtwBk+ouCK)sVess^`?0Y=#rhX4LSqB{>3PrMSSHQB2Dy`_
zdr{!JwLAxU9T0C1Xd0ERT${a7X;o5h{Lu%v(zdctxTjzOyK&TPd8IJG=SVwb1?b7u
z_!Z*3+)`q1W~Y%_+jvZ;e$LCj$V)zdMm4nZDcMJpp;-ua#?Z64t(*hw#8*=9-2oet
zdZ+wg%H*Kb(m!E7)>6`~alC8}^z%-+`v#ovT7n4NkET{~G&guS?lwC6fI7%{Z0ii(
zcE(kDqhiY2iR+igIL+6B72#r(T<8}EW6F*Tm&dq^aY>Jf&y%fCYU~%boqq)rF6N>V
z^LW=aayl0{*}p3Gx8nHLw>d0~ao>H-cfHEBfGZ9t+(u3b(S3)qx5`7I4>r>TBEn>T
zCEV{<qkm>M>or>L=SSbl?83JP0@9O<iT;xm8=ussSM#%<8BVP-LEwE-mF|1dZ<zNU
z1iV0={%JZ{GE6m@EG%@nvAI)!zU|<z-7%!&>GUQf<r|Vwd?gJD3f2oT6yM83D9vI2
zbj{(^<`j|I7tM`Hcp*`n?%l?B>CVoIK9hcf5A9TsNBeW280-?P$J!x;L3bNpvT<b@
z?2KmFQC1HwU5x9>PP?tj_-i|U*C9kg2@km=W~BOqUMZD^jNcW<$9=d&HVFIpv9aE0
zsD#*UBNH$SjM3!Pzl%*B9k&J8tEG5-y<Xn_1o{oHlF<LjQsv}}zRg%!ji!~Cn)}FY
zGx=FbQR3#~XwClNNAB%mymH6eLO@vu@xV8L@pTcZa~~{AGDK<#ccYogL=qS-xPwgZ
z?_V=~hN_^L`eF}-!3V~e<!U$js=VxY_IJY=?Po&eN&{(e+MASUjuGY8F>X&Q>+yo8
zd`{`>hPHNi3ha7gcWq*VA3~!fXJzwWJptOC*FM_16__0JjGi6Jvo|pq);q`Dz5n<H
zlJT(6v4Ng_^u<l0ROuNKS(rS<YNKp<6L*nz0+nRQr+dzz6TA1`)`0@9+TI(7Yr*vC
zv4t5qcEn6OH69T+#}-vVtycX$^Xy4^iJ4qNc&*$k;bWVJGN7Ny#%^f}DLjVeLl+Cx
za)Zg-amD5JOx86bh*;;(T`PlC?(gp%nr%#$!cSM6X#5Ztsx8C!Z!%@w#;rS^UMIV+
zEoj(%nh*2#aOqwQH&IJHBuwl3^g)y*Ai>C6b-QtcEng^0Gyr*Y!()B(jmI7lGFqw*
zGHw=%)0)#bz#>}X=0<t~8U8q}eDR?-dFr9@&d=4|ntUyr7}bS2L3g-w3>#`PC5MKY
zG>dxD+~%K_w+Ih-7y~{^fh*2TLd^ZTea2KY0GF<3BbV@8ZmQBOn;e;}!sg-x9X?Ps
zETv$@doTe_4H@dCw-^!|CLS+m?~iB0CNoj%&!CnLFSzFo@Dn(Zs2qw^7%~1x1Cx9_
z3#ZA+GcK~<__CEVV4H;5nWlz;Gy(RDq{n*~r>T5uSMdJ!e)rpMmpjM^<Wl|G=yV~^
z6ThC(=h)xR{G;qcBQtyvx=Nf^acn;316#HWHA27k0pBfc*HD^PRiaU-mKCsj(-<5O
z%8Iq&Sq!~PrYJ$e%Du}R>r7mDpWIyqaF$Q>I+RhoQP~<c)pYAkE7UFg0Gr)gm`}Hr
zx_vH5a9#01BGjocF&nqq;ci{U9aF6Xj4zV*3*pX<@xnI)_4m^3bY_x`eYUtgcAAc<
zT`RBrkwz<*6=kQt0BDONKg{Q<*+;F}+k<Z{Cx)uI8_-^$V<8sZbf_mcHjW!sTRnP|
zm!j8$(c~#vQtPy$r2CpUgUhKeO`tZ_Ya1fVR+a=&*c7<Azb@=V5kIkxp=z6%N#0g@
zZ6=+sUqXq5^w=7Akw@mmc;_A7hx%?P7JBv4VtefV>Ayrl(2LSq!hLZ^N9Cm@LI@X^
zYio&rNZ#sWxW5tR_QsUDaLS=ov{EO37L?G~8$0!zTJ&>Vw27(v+^x*4JH4ZuUm`h>
z(Ma6_f@7%iO%GfnlV0UH(vVRg0f)aEbKZ0iJ?ppNgDtSvP2tybu*O9d|8X8q;L@4z
ze6tD|4GY-C1xhntDMcd_?pIii(aFBc^gUanAJz+QnkX<&k(DM9Fj{lB6QDJ#fwb`K
z%gO4_E>v6!EDxnXZ^h=IF(=yz67#r;l-cSP_?~B}LB;Ia&)F|x?==)Hq6k*Hs(ZLh
zqh}i<j$L|SM<At4Gp_RQ6}>$oG3Q<}GP<_p`a4Hzp56yuKtI5~!WzQ8fBAU+sG`Eq
zx5dX?7ltF#zpyYs`}Ws%>DIo23};oUefY62`Oa2QIH3r(DCKYTR1a7Zd|SX?AT4Ru
z>-glia?Uz}t90nxD$d@#QM<zGtzbE>Rnyk^iz!6Y*R+gt`*>jIksK%osoCmRkg+!r
z!X{Dzf;{3Qm1g}*P-8!ra-1G$A>UQr{T@TNImXV<Y2+1!?1a8VdkFU?*+KA##?$K(
zN`S&shi?kd#MP1S<aC`Ogb`03j|*+OR(red%(GJX98`FN-789TtMqD;)`%XH@h?5s
zBV^O)G1&avn`{0A##5><KawSxZH8OnJyQeX^zJ}AJ=?H19m`X!^f`C!jbl#0V^x!|
zhL*8v8~cFAi`{fP+#2lx+{jX_Rr-Lv%*$%-LtgtC&@Q!ni76b(=LG8mLIb+{nB>k(
zEOPNIjD&pqbZ(JcLocXP?LC`xfJlMp@ug0V@7}M@9H*6`N*CbAK>)YA`gJvh*FHX5
zIwIKvvfulW(121g*?^fhG0Frd%~9PRE9emgTd`JIv~g&|J$B3CqA|tlQ`&^_C>s)E
zX0Y|d0V{kUDWebA<g#~--R0RQ7aq`=WV#1z>XX?-k!GAtc@vL`?rK;#74LF(#K8AC
zd9%T3@X#J~q0n}!QugV-KyFL^AzQ=1L&ceC4~jFRbw5YK7*BCW(Zvqz@8p7>M*NOT
zGIifut`J@)F4csm`zsMgs<X?0or>y(1^59-Z0OXue9Y5FaLgd#fFHUZuOEGo7amtQ
zXmfI(!kYmw-x&5~V(-sj({F<<?d{SC^vZkB2X@EnTc-Ed>dglM8|zBfD(H0rl+ReB
zF%^Z4*$fy2TsKdyZ1jvEtp;Ps+#sgG6kb9X<&YfcaBmEK|A4Yc+;YG6C!>&RHL>zS
zekRNJX9@BEV^S}bP0!C%gx-$QsEct)`ktN=o(>vhyCj9LYGuAeg=D=Jhak>iLj`tw
z@Tw&3Mo_NX^4{)G>ePkh@4kh>M-E;ar6WU4t$~k7Qd>AK8wxcFqn+%X)Bz~|IQ-&h
z#@=kR?(L9sq32Fc`|L)=_wzm_G67)R#&bur-gPTFXGHGUX|=e#Z-`7lyumim)ZQx4
zke%MXkz;f!@bN-f%L)J*Bg+iy&*rNTrz;tpZ@LstO%UEd92o~$nPs{EnAE}ZXw4U&
z<G2w32haS*N(XlO`F?_E;V-Xz4|XgwPa$&`WNSMS^AQ`>3~sZ&UR1gghAZm(#~h$(
z=apvTE2+bad}>@^>P3l->lo(QQhuIpIl5-u9Ztq9a(PhYG+cg)&!8gO7t2Wfh=k{v
zA2l@O$dl&jD|OMU$+Ke$tf=L7Oc9!?DvAbjNpH*f)rAR*Dq#%v$^CKG+F4TH3{|6?
zPCh~Ga*zGyXDd+1<90bHR~_5;{kr3eB3J9x1m7#46z^B*-4-b;GZcPjsz4CP%unXJ
z3cNBeD1N3GvXzkFl{7EDwtw)By#=qycx*!y(8C;w;AlsWCeP8Dtx}vVa!?0}eNX(L
z{<o<))4X2=mSxMqIq2qcRounU586!wg56z3{U=kiT#W!W2CzX!Ki$4}GZ5cfv{VcK
z`i8;oT&C+ufzO<Ka4cF*2t+W!K-44Ne0pXx^?Li`0fNDPzHta#;Cp#CIz5ZA=5^io
z`~}(5&hsEjda3z*2lM@fCI7==4(Nxo1Y>d|f{jjXV^-Jnq~_-<E2XdtQqL|{(7XSS
zrtgks^Zozs`shSeOHs5&X%($4v07V+wzM{Fm59BA7*%`M-qfyLdxp053<+XJZ4m?s
zDKVbA-`{!uat<enB-eFc@7KJ0$t(?ZP3>c&9dYS$)J@S;kelJ(wztIg{kA&WshUC0
zM$;GjW1|)RhGr!g@u94fCSbpHHH8SjY5YO59nI~E8g_AXreM2|K#8j<qvpR2R)*te
zSlqO-sdd{P-GiwR$ImzyLR0IW=bE(JrkBY?bCgn?+(oO*lWGeyFokFsk}V2_tfd*2
zz7ynY_vkSVxcjb5p8;o_31Uu1oCPmXMoq08I}od^#oQ$}M*eb@gu3H6P;&1Ud{(Gn
zkZ7Ju@$kiJm=x+bYNbd$pQt#QXri%kRECkLMOb1qJ6Od>;`P$6fRI4ANoDai`N*ac
zjFR5A(3U$?8jCd{8@!(3^Ofk)B@lpb!C{RG;K9UT+EcycSChxX|I(9E7hKkcBGxsH
z0r*)|QS$tRX0LCo81j5yreG^;u6Zv0)vr90o;RdT!jMj7<#xWC`E)b^vYXXVXQD$$
zTuTAv0%J^{C(U4*c<F7Cee-dlW;Iq5&w};)ykYe&%?+7MmE+o~1}>LZPMROVc1-5m
zgu`c4ivq`%tOf9O&;2;%#PdowbhEwua#0RP#zytF2BXb~Ns@CsRTa!ft#SYY85Y_S
z-#@^SXI)ULjm-RC&9<BPs^;Y#Ok4js-EFUCd=d)vk6h<Bcr0=bhMSeXD*o4+7aA0v
zn9)CcbFYQix+Hcb2-o7bp=dJCY?g49@gazwbsKeTy4D-3m?c6l+yKD8`JQ1BpK}{?
zMKO`A`<6<1P4mpaxx(u+)I9oFss(^^O0RS!T^2ldeqBDUc22?ve5f=P?)@$~?<y2H
z`fjXyWkxfPEQ*q0w@VC6wpoF#4L5{fg`upytHXyf$GDRhY~d|#Et0L@0Ysl06*JdD
zas0CJo72N|-OF61{f_8e4F{Sm@4ZJX6ddB&K!t(i(>pClMEjphhE0+McPNI3nO10(
zpK?B4s$~^-j(i56Wqx9vVho$WK0qR5&ss(2tdvwLB!%1l#@*m>-h4o%!RY_p8wfDA
zxrZ>oiHY5l^WH3UJ*q8!)8xEjF0gYA7-)8`h_%&+mAPu!mHoP^Q>Y1f&0EVy2yHm}
z>V9^Sz8^T3xsnj`>*5*$fE#wBFD0=S=0r=h{h~Unr~@bZR_Zu`;oCAq``~$-o&Fi~
zZYkOZdO7k}*x2#?<J9>GjXMJUj*OA_Y?{9>XHXPp^gn$`;Pl#gfJr&lv5F<4jt@zF
zHLG6O)<d_p><}jFi(QKJ@{78?!AXZFWAn^*x0?=ElYBYB1GcMo+_)>~$sTo1bEUAA
zj>Sr*risuqG%?F!dQ989-D6)oO6x0TV+RV_AK-C8F%t9>gw0HY>3o#Qln18hnUl3F
zA}=t>M|wIqt!2V{36=B_y+YHnuE+txKz9^d2Z4_5pxOKHg2!kuPrF#3*e%^k)44-6
z0eJ0mwSbx0k55d|kh@zm^OmQD+2P-Hcd1!4os?Fh@8L3|pUp`$jYe(zRy_~Jw*92J
zPk3NQM9=}1MfnFSLy`}XBPw4JL$V%NA(LY{I$?}PKF33O%Ax3S4k2h2yRt3x5M}?G
zO~JU7B=Y$JJay>|7(zo{PSil@@l$!Ke|<Det@7TFTQe(ryUjJ&@M>qtFbvE(kdJq~
zD@_-ar*9rkr04x6DhkKN!z-ChzhX55%=qiX{1s2A``3|LqbRh+aJWZSy2WDzBdtn!
z{V%0{vG;!zSf0LrU;8BP2^L@CCZ^-Sy4NoNxd>|=wgd>pw${D=uYubQVn2`1yU>ff
zO^Xp%xp0KT)hboa_!)Z}<|^a)8?5ANGGSi6Rc6$@05vr(R3ZfOQRUYXUt0$_!CPKz
zyChzh<9+xGf@Ll*QfU3aY;#6(!|lQ7ydFiO_O(KQSQ~X4Oj+cq+$Syr@7U!FGS0jA
z0uY?6y-?hQ+c-I}*cXaf7n}Y5nw#aYJ2ZvkNYm@=gud67ag0>}FKXZ7ZnqNF!>Ro}
zFJxFFhmy*A^R@s?c3;+{1w=_5oglT)Y=~)TrySYAPjV<!tc1O7MZ`(wA3h?q&!>_y
z|Br$4)4Dj`X43NT-|h@R8`aA&1y*F1humO!0-tpX*~B4xkk*}q8qLcQ4f7n_AdpdQ
zeos>+tjxDVMz4vj>|_EPOl&J0*2|tbjx%+bMV*4U`hiJ#qoJfmGXTx;3~NPuAttGI
zp<Sm40`c)jWLi-??g(TOE;$8Fu-k16U#4YUcKv%zkaRjWpL%}PSK%UUt9n4KaIq1#
zMQW9rt@X4;F1smSj*TLQ`3wL^98#*!W-DPX4*_?vjj0phF$nt)n9_?cZA)Zck{7wi
z8Tf{eQU3^_g8FLln3aPW;uS&nX|KAr$Fa+B_6T>=8!OC2gWtla5qRE7WW5%$e%&RB
zhO4Kg-ij~B7hn|LmcEOsPyGZKIgv5;y;PaXtsl5%l*U@tnyUxh)}$(@R%}V(QnaKe
zNn_bl2mIM)uEt#~DzTQ)8m^;Vgf(o>&n%suo4^sd=Pg+Ow!S}QZp*H^30!H^g#F_&
zHj1ehV1VET=Zd`MWGZ>5<@M`o;@Y^LnTuD0RhI>qx-j}kp^(;Z6m1?Ozo2Wq(P7kD
zYc;CpY(gSvq0;Jh-$hZIXl~DWVof00JW;OEiLP_8c`B*h2kYm}tJ)k0qFa3~4KVTu
z4N_lS6#|=Eoe1ssB_2^`F<Ll@^FF)%74w+>WI~0Fy^3+@+|BJd6)xib2SZhFb)KIu
zNtk{=pPljd(*NcRN102mV-MhHl~$FginwRyILP?zJKHjDx_yMfEAMtMw35MIr}xai
z6dK~ZBRr*|eFe25Y#I^S`*k!`o!55IZWEPf!^VC@3CiUd72UlJs4w0~^o{;Nx<j<p
zlYJv$>4DnO1~-7&3kZL42<!SQJJ+mC9-;MNI%=9FtF_hHwKM`{9Brp<>nDK{8%Mn9
zo`);M22Hk@80d!ldxcr^oV*I_B_OYF7ur(FO0M+x-`y5$J#XqH>R!H6e~5@-`cqJf
zzj8SzKhcHtO03%FWM5T*)>=})K}JL(IZKU5`3Pi>Df_0v($5c%*iU3_?Y}H90l#XV
zo*XaI1_;avllh~Ev>WXU-AqmwTgd}y+3)_k;k~qH&DUF=0kncb;mr{jlNb)!%<d(R
z^QMOPX>TGYuGY#+I5(I*r=-08X)l6}0RC`fB0Dd0+R50qrpBJw<>Pa_9A7+K^L<`o
zZoo42j~V=PGEIZ(^&RwH`|;kNP!J2;GzV*4kQZsi{i@Z*XdS%kyK!Q89n%3e{hYj-
z#~mR{9_e6s9<#f*<^m`f^`Emi9h!@kl^)bBjDq805kbJdRu|Q2xC?NZ?Rje;BxhS!
zB+p%eEAO!5=U9d$foG{G-5)!;SGa~*=JD~3xbvsL)90g#@hJ4S2kk`Pl)c8pTnoJN
zs;NDvD6lBT=_Cw8zSS5gz0{UHsRc+>s}~mNQPE0C(U)anqRROa_-DkCDxJY|!gIl=
zZFm>6+&&)@EYXV3ntc@f4!txr?#hLI-(0H(x@8oRZrDw`gSI1(mR$;$YTT1Bh>O5t
z`(%IqBz=Mow0*n8#oh|kWA)jA|753wo<a0(P!hC0+sg;5AmBrzvFufx`ClDGKOj!z
z#WeZlCupBl-ixBHwv9nUuWSb3{Wg?i-D$ZnROSk1n3Gs9Kv_hG0EFmSWySLspxn<5
zyWdS_>YpJ*sZk$ubntk!|Dr0JR7z4qttmsQ>-XgyRCIQ(FQS8S4O-t)CGkJvK+50d
z$AqV9prU!9U3C3>t7{a~5FPgzxkXdH>6_mSt5_=^3}wb_VW+vL*b@pmtf`&^ck!Fs
z<)e8%@aIL{=>E$NptTH_L9yrJ@i%zO2^Nw%Hcbs%C-xfi1TkY=zGB#hud#XI`WQc)
zR*qZ<h*#Z)|20TD;Qr}4RhP(y_)L4X%F-CQgOsth#%Qab8rEMv?i(X|GU3uXsZD^~
zrP%oA3u&dKlvR3$0{PJBihslB*nh%Kv6;a-!f`oR-2G4N{|y+$mJodH3NNyP-Hq36
z7P3cyp{doaR)|eq;ELGYt{MGrlzYiz#Y>vca&?#x@e(xawQj!ZmFl?T+9%WL29@Qw
ztY+(5Tc#bBroPm)(d6O?h{-wyk%##(Yo`(s?k2ytn(iRokwi_@A@aG7F|nx^orWio
z9o`mc+$bm={7%z6m`Og>QY{#zLXm6xY$_(IX;E%Mqoe&~B2E}j%%*e6j;n>DI56C8
zE^)yRGP`w&hm~TAtJM9!SbQJ(@VD?jVIH;I0AA!4ABA4tI$W2uQ*d|5W+UjUe(DAo
zxn9=`(^kg|e|H(E<=At8W=I-TwhX7+^529^JI*!LWMy-q__p0Rymy`()O7pR##>==
z&}<)wSjuFktL^}3we5aFZLW6-O4N0oG=id+;ZE2fxB04rV?75r4TYzDtxW<U28q-8
zIts85Ne9QdvqG^7i^4$bKj4B;8daOig8zrkaQH*AOp`D2OigLpps|J}R_P*gRvkrR
zHudl)MV4|ac%uA3<#{wqDlffE)~&wy&;F`wu7CiyXkkERB}n9Hd&EblEoNDwsGemM
zulW*6moE&UVqSwuf6E;#Qu!uT*@os&D@RXQ?fmLorUn8oQ@4X@Zm-uQO5!(JkB)P>
zgFSTsX<5sp+%FRel|-6FdB{8dxt|Ixd`fzGbZ>>S`KO@*p4yNzgOJaO+V@4}uxcKJ
zvPkm^zRAY<#JSR-8N^E8mOfm|LR1i~wvIBG1-^+09>mK4Ek12OYhf7f3!!e^oaLOO
z`CGnGY-WsAuQP+?YKl$^FMg^$cq>csBsABxvVJP}|G;`1Arnutf-k!XfTlKl>_jTH
zblcL^rTv#48ASB4r`w9Jhti937Xm2k91y}+iVk86yrul8L!k1;zR%|wa}M8zlwh>@
z!*gn!fph9?5}Y1?d?~rW!1Pd&vl+fUi@&iyIZghKz6^z<Lyk^QE=zHL3Q8h4W*xov
zow7&{W|EedPd_o}L?G`XWi4wl{H#X`?K3?$Xv;f9ZOrkGqO#F6Nd*sKwKWKk{Lo9z
zMc2O??4~Vm3N(hlrh)isA=>yh4?3?y3rxV@=`mZm@%eF@=b6FPkt~Kr0t)r^bB{qL
zDpnjTBQ!W4c-i{RN*sBrObwn1vYwrUXNL5QG*5r4z&zVnXEb!m(=qqB*w2C3e2vMY
zJYN&=>iARPG1{L%>5ihcSUV=SsFxbl1pkxZir;TLQ%o$6O48#mv06K(pVF<XiRa`~
zDS*%zSoGqW;2IxrK!2UMaI_<4_2(SSLgfqk{S`P`<4yV3F+W2CAAkn3Olx0l`&F_{
zY%-%4m3=*jNyQ(4+&0#43=n;-FqdUAH-00xLpXi;*}=8Rq+u{Bvw&n+xnTI=8%AMc
zUuasq)vW!Lf!k22C75sO=b7*bp%@YXZ-E7l|GeXKWg<Kjn&mSg`3F3@U-y9gNR+n#
zGLxQ`pZB~O5dmANg<N!=a~tBS9#<KJW_domx1M|FH!3YQ(Y09!z7+88hRsMC7+<GX
z8JlyTjn)<0pU#)%jlTNI*K<Un=-00kb{{)YVFz3l4k6HDUY`Cg8{exJ!&W0u(fGT#
z7TYdJo9{Iid4*tKJIbJ{l1}xHW(V<1-Py-H`Z=fW*X~7L7aFQ;8E$ewqsXT@*-d&U
zixI-JrG@Kt2i2{0T5Np$3xE)sd`M#M<zmz%LRbe~_uuMCp9emmI!NW~Ru3o2<6&Y~
zqtlX-Y9nnFI#*tt->fKM_aS@L&zaXRE>32N=*VoiT6JlD%jM9c-Sop3_+E{&y*V9>
zJF}aq7bH&<KS4hd2dB71WW~HtSGDmNiQHVYFT=Q)l^WTr@7)s_a3L1=c=rBD?pRY1
zB)q_YO-UH)G~bY`6#H}oy<K=VU*peYGoge$C(z-#OW7%MMw4Y>)~ZIPp0r`9Qr9?h
z=^Bjn*~dUndpV}aa#T!52z|t4zJzXI9L*1}BCpm)cRNpjx8u5iud`nW!XYil>*gqb
zqe1Bx0Z|;D%L}jE7qX{2jIzz<)Qb$f{w{<pSHBc?8y@$H9z_VUKX{lx)+e}}z7loI
z2hZ7Fs3jXSYY@{xVQc_FNS5f+Mncm>;r1R)xXZKeRg}pOi=sPRkZ3ou3?j41G!x3|
zM$Zm<63?eCA^QWNEOu&TqWx0zLNe96Y+h@aSPI$Ap+Ix;qozR?N$|(8I`7S@9_1pv
z>jliF>w;S8V!L*(bmbjDU7pmlOSK<#P*vMd0rnsRf-ca2l<1D?|F)*;V>*U!n#+9P
znh6*sD!}@B1Q58EcpoH^D~Ye|_cFP{JM^-shA`Wt)9Lw!7{=+nlM@=7TxZ${klB#S
z@gtOdXe|kb^h!=G9z+Be8Kaw5`r?bExJR1XN!@JR%EZIEVTrCs(hRR(OE~xOCili`
z%WNC#?Wg6eIU`T;>oeQu9%R1QeJ+X)p)~JJL2J05kfpuJ>kUek*qnUNHmkzwG4uTA
z>fD2M^OYU$Rwqin8?s*-mO@Y4WRBLkb2Fi}bOy+FF;w_8!;{$95OceRMtlYdP~v(E
zET@&r9Y)Vt`M8gQ>?tnaqrD6BJja{<E;_mwyv%;Y);@pJ*DU8_K`7*Lb_%`++1_9e
z6%2uY0+%O`;Gge1yo`7EO10S*<nUd7UDWpHKN7f7$Lk->MY^uJ<C@j@OVlNBg0E$U
zT9|UqqFlfUt6rG=C2MAGt>t>@yNHz21AtfkdR@5j{zv$WwW^U9>^tV)@#{+v!=&vw
zVj>|;oROAm!eyuAZRyH?qSwZ;h1)_2Vjc!ylJ{NnYx5(`u>G23PdaBaW>+vk+^Urh
zDKF1pG}X7ZjLWd*cHDBr*8V~c@pKFf_B$|4ggmat-ByalmsYkt&aGKpS@o24mGOI)
z7cc(QZEibX$1ZrI)~#u)nTb;G@h@}2^VqTME!U{SC-i>q{*`@!=&WxJfLJJV)XS~T
zv3@+kX{Eyd$gItHZ2i5@eRMi4@=6PvY~4aP+j5;bwW|Nc+`BEqI<5<?uBkYM8&8pE
z4ifZFL6mCh2Q_(Zbu{epoWD_8&wwy}9Kj?{1NJ9g;tlf?eFd+Si0_5rcLdY`*(LMZ
z4Wd?f%?r?Rr9n-h`r~Z3+R$Xpr-n&7)lxc7gWVMo+&0{q4e;^k%-HSeyWf!kv+4*T
zo32)sBCJTB^`S}czJ6e|>V$1<p0bsKUapFw);WW&@H=@Dvo?-XB$O;ctiM^ni%G~>
z>1#6e+b%0m=cJ`@v9M6<r1PqpqvUB5Tp{EH>vwc>vQW#Wi7*U~*S+6@#bOQp*R}*p
z6UPh>x3umE=zgWlv+?Z<RSL5j-_qdL%3Jw){zTD%+m}w{{IA`L1y;3!I|aZ`29_3_
z)sBOn==2+Y{JOf`3~ocWQ_k{BaqFYeeeqWs0WPz7)*hsAifPf;e<G@fxX=6XKhEvJ
zp=?9CjLMo{(`ZORagg*f+FsUgw=}kcQ6tshp(=Oz8#dbJ?CRz9p6BFU*T3mFF&JV`
zFqWp<-l9hUp>Q$upb(Wz)bBaJWmn-(IYLxm^sE9r_>rXHmbT}ntQo}Zx(WgT8A+qx
z6pz!6_MxydzS{Rt`tuo)sbp$nuGU~r3Dg@$sGgXh?+ZDg_c<iaUuE@PNhY@yM_pwy
za`-Zd^RjXExP!#*Uf)A2NW#tIB&?8tIK+@>?L{n%x>?ul$8R#2Am*Fb7%WLX6CU&2
zOL)W(aXEz)=Kgf&p`DZ$R>~Ccnk;n7mVafl`7-{(pYw>_PHFF5Ana)gBLAJBp9$v2
zKabGfQjB~sqSC9OkIJZ{pxQO!SM>&!CHou2TQ%`=80w3X?>qDz!A5y74SGHK{Bpp@
zIRpBfy?EqArs5agT&pN=q{gBbLSXVrg@x6=n3?;TgCem`u9=t-{ej6*l-Ne9$L!oQ
ztUxuP((c>)xO3Ql!H}g0{6U7y3tD=qgb=w1>mqKgX(z3VMkuMJ8^n@f1no`w|28(h
z2xwX~nX<L2gVj8XPS7ewNV99awBZ;pR(6xx_^W{<`FR;IpU+t~bww>;-Xm&Bl)(0V
zsGa^lx`}81X<9>cS@}%+ux0?$wJRfp&K^spXYGH)DW^NYqWmKKjpASkCD8q)L`UXd
z^J?=Wl{auHY`34u;hiaS3<Kn-39Sv$?UjADK;qec7JMu{Z@H_@hkF7${1W$CtJYo@
z6_3lO&6#eh^9=|dme!TW{t?@{M`+8&uK2ED(ls5+C$w7Pqisu3c;1(Zt}5YlK84ux
zNY05rQ@8nC>@=hf%Zysw%XxqTmx~iimgL>pCTFleEa!N9cgCSz%lQoH(^Iu3YyuRk
zZJ!f1DfBF9a<^~!DYo5`?Y~b-$Zr^`$)XyTU^|@5d(v1qtpjT?=J_bDBk#<0muTN9
zgl%2?V8Ww#Zj}!c@9PV-($%Cf2TtQ}^+GEBj!yn7REz=lzD({ap-vb)`{+|aVcx#4
zK2%x5@_Ooo9f=){w#+usH325^O(S^DJU7r`xO!{Sdc$ch?*;y_54;p5mu+?5nm@&W
zaAPfXI6N6!3OBw+kdyR86&Vuor?U>1Rijy1oP4pQbehX81pWPcWormpR)VGF2gjJB
zI)D`#zCDyEpm#7Jr<HVaN|j)gsrz-Q2)W^^<mR9Ro!K#Ep39!`DsShT9>ruDrbMd>
zBR@?CM1A1LmvK)sY_yVw-3kln##uIMY9~akef;?GqVLx|R-R%XJD`{T49`%df#S|{
z{!0%W_jV_(ROSocf!?|2`ow1qo*bA6n{LM{9Z!r};Aq6*OUCQqf?@tUUif3<D(3>&
zcR2~?&s0VBu7Qali~fX|S%Zj!Zs*G$P4c!MICQf`p4+&{W!tf4$+@vkzhG9Nc;WXA
z*>30Ymh+5iFu@INIL45GpxLVdvm@hb_?$mAjKIm3Xat7oXmCQ?&UTzFL|@%OhBfuW
z#2hTW^cNN><5?O1+9|Fz(tz#!r3*seXuUxn7pySpZxQ7xFF|j<L`ylT&%M<8@8j}*
z50#z0yp#P$L6oOS3&-`8y^6}HWDqC_42zkt>RT0`bzn0*{3cs{5*JOkVE0vX`>5Tc
zkg_uaDYL+-oMV45B>Yn#p{Kxdj6RbClS#hY6o0^TV9J-LMesPnE9cR8z_KJr&O~z+
zKOdB=3HOE8S!$`@MU!SFiF2@<Esz$x7H4V}dOM#2$5CHX)~0*2(Ynp9FsM?iQhVh}
zDAS*n;U#O#w{3_o1!ee})W;W#u_w$YH()>Ub0Q_j&ZQ{Du{K{6u6_RN-#?<qvh;^t
ze1a;OOL1h?U4V$@Y5J6`)sB!aZSQ*m=jE?kDPk~ZC4W<|Du+R+k6nVhyzusX`#gEa
z^iFIDP5f}Sy!^+h@`m~_ub9F-8Ea)q9B+ihV&E?1n_Xw}5L@|<y`@)TNL-emx!ZTl
z=&RY{0%=KVfx2a&5WK`|A&B9;={AZiw=6Bnx=|zw?QI3Dq(!NP9SHdqQ+XWWDkGm#
zS#F-NwaLrce5!lERd0CFf7f&8ZJM!5;y@(8>?e4!9iDG<XXNLbOa`t5*Go^g&fO8j
zM>61=wTUMMzIw!vI__8ecx1cTXT5b7p9%DE>-IACgTNU7hN-q{XLyp>`rC`qv#^aZ
z*meW{^vIt|jA_;q-x==T-D)7jmHDl*KvkY#Xe`-jF~YEODN*Nyhp0<2+yqV6z?T5^
zhM*p0<gpJiYT?Xhx?R`N(HP(2IDF)6eqS8}C+um)P=3!Z#FJcEK3K?ieK%$aN<=F#
zN^Sl3FnulO72mbFG(h0KLIL1y)R0UKoo0sAC{m-)v;0>J4&=n{G|&ELMJSTy?*abg
zMW<Ev(c$0SSd_>%F@L!(TF3-lo2WvC$2PUip-bH20RBvVD?gs254@OeDw!pE@uQNB
zfWt=>lY@yR7?kH9yYO`i2ypI6f0;H{EfTUG*$MwnZzE@RT^Rl6zRw6|Az==w-Fn{G
z7uh7%2+%D#XV#)`KC3Xbken;yr?E#08}<s=<Jx4+vau;KeS%nG4;a>wd~iD==^E3M
zl;s67y^A+eJ+Em_J>;&#C$C2~1-0-=?f-2~KfPMC>DtsO31xmqBJ3DafR(Fe|CiL}
z8TsbxlPcmF=PhBAH0wh#fe4q5K)17}?@x7Uwn$iw3~YBXR3-}<vF-v**VkesJtRN=
zM=ESi<pA!uY&*56*|%=WwB=@9vEb|ZPW+es(KkYJtzI&GIbyk@T~b4#dj8-zNzkPJ
z$;T>4-%Vi?T|qRwpy;&$Tc(?u6CBNu3xGZREL&4@55i8g(qpDyEjxR0!*jL43}lkj
z@O);bv65B>r$GVS4~G`arc6W!f!18qb@ohNaatD8VhRLGnuD|b=I&g#941H7Ey2&q
zp4)H3>d6S4f`G{?gw-lh&9HuqB<T!0Zjap<=RQ+;S8ka4Ne73}X0O_rsJF8?48Nm3
zVF4JPd9;7BS!J|36rD}8<`d{HjKs1n?RQUv+is<9LIm_wXgu+UopT<gYk&1IZ5wU{
zE=3Thi;iyAO7Nqdj@|8s1uSTK9dNzh^sUT;QTMB{)L&6-lEGLEGpJm@Y^?3XZi3Z4
zS&$0)sFOSvbwe}s@6Opgk1R@cn(7l`0WkI-uiTUIxS#tCq>(ErxIb$)QS9P0TU-cu
zDmh}KCXBY{*rue%shh@>xJ%ncvZ&!w8E*4+m6M9n-7GfycG+rE164^EGXmGOcsd8y
zz(Ff@uu!sqp3ve_W{bN@D^?Omh5HCK9i?@PIFEhbv9eNcyKU|t_BJ%Vc8M}k-lOse
zE8N+lqGGdrFq1-=%+ix?j`wZXSb5AawMi~EkI{cHIPbIb|GNPGb8ro}gtN+c{1E+8
zM46gE(p3UBEz)%lu<0ydEN=_ii{2JD?;hmgo}~Id3lJQ0Nkc6A$a30*p!C(V8S607
zU{8YETy_E02Fd3!>iR~bk}e##)<DP3rP@sqfJ>qx?|ae0<x7wL_u+h2P+?X(%1<4o
zNCi=gm{V_caU%w8-ua!lbzXIxuC^%EOqY{g?5v<w0kIGBU}|(ijG_~3FX*rpyMg$K
zilx#0PI)Xs)%sPvc&q4B7cupuX~v?q)H4c6+U0jP{zo2&c=Gb(NV-Fokno?ypqN~J
zoWys}_=dfoR8JL8v;G_BIfU_`_LBo6kGc~ow}3G@pp;eo)>dq3k8py71MUeWHOo|(
zybYLFylY%8uCTj3sI@mdHg5F@yTKvSshL;DrQQ{F@X=~?v6}~(9?fww^Sk00`hdRr
zU+`V&v9454>XCkt{6tPdPo$?2Fs(2>yIltYNYi=p@Z$wz0i->Sqc-R|b9m!B1Qtt~
zX444Jn$06xook>uJ>oUOI<~jI?75;evG2x{S7(C_Zcm%tKiTH}o!aG@qw~Q_)errx
z#Dl)6IT~DCE-AaW)3H#TK&}~4<DAyfDEih?Zej!t4^p~dXS=#Ghq59f6X!-Jz@`Ik
zmjFm3Z#FBt)lQ0B-p|9^{yAkE@fnXLpdaIFpY&->ONp<q{1O42E<0q=92v3CIem55
zwAdxCqNK5TBZs45P5e3p^te*;Gy25S*%ZOX=-R$`6184yyPf|lZ<>4jgzB4(fA!CK
z%LQT_Ocm85XLA5Is2qJXDt<R1@UxzRYC_9mcrdPufw&~zrcySTzV!GH68lJ}&~=s+
zx$U^{B8aRiwROb3=hZq)%BVzr9aUMo0*wPq(n(gI4c0kcWY@JDH$Lri)gmI#e3k4$
zLBUj+yGM>ENBa!FteRye)C_ZoQ%87N6rt8+cbJ4b=S#fZT7MAb{SS0swZ*maek`hc
zK9SzK#x9%P1127yP+qUy+u&GPrpG80QwnpIky-2YODhCfVVj<-TbmoQsG$1TbyS3n
zS;nWgTZ0UCmr8g9jEuj^`<?P|XM5COo0kBCFB2KD^Yb|ofXzb2FiTy>m^XlFHrs0h
z_AfoO?pBf66hd+L(1;s76Mh=-p<Bx<%9YPY;=6v%7ewqhmiJ|+Zy`yJ<O!ahoJ<7_
za0+Q=eu|x;a;%*>XRd*@?uF)>OWoM~l7QH#6CQfN`^oohD;^Z&#gA{=p6-tN2PHSY
ze=(fDXL$A_wch6_k|ouCgIs6Bt@>i@XhErh(`{oc_CrT-h*m4*_5wW`9~6CUni|Bc
zq)M+9lh1C5q)504RWQOaM~FO%@^(E!mIgF%?q3U0Z`lPt&98b|qOH(Y#(FuW^_!`4
zLyl)TH2K*>z3Lz(3kT8Lg=Xk}8TQnV2W#0>pUo#2>0EJrzR`S_%kyJ<t31pCTRGy3
zQIgA1vE0f<FVT+@kG+03H@L)g5}B6Ue&FHzAJ^=Dx~-+gnnH&*<U!#GPGpq%*)cVS
zYQ9$Y&bn3RuLWSeFj5L=nN?@2G-CnjngaIVqUVN1a{%#Ch`3W)*<d$g>3bRRFx9XF
z$xyDwDdqST5!;2`^@BdKk1PXX0+$#@itYEaY20KSf*rEtd{mVBvVB(#M9F^fJm+a~
zHVLNj`)1DZ(YF?~yl9Cyq^i>UI(X)?X$Nv1l?YCTzwV@#O;xM3YHuGgm_b(4eW(Y#
zFkNItlb?2zz5#V=LstV3=@Cj@0joK`OhK|?r<k9xE&qwr`k9ZAf5)NzO0R8pBL8cd
zkI6_s0o-dGL{>b+C5CyIH^KoTdFM^oLnO)<EfyTf4wmpnZJku$C~c(emSK4!6i30m
zz7ftGQ@dM{ok3}#Y=-Hd;1DgUt=h{`r#QlVSPKJ$4WNJzSUit+`Qq-D88^N0BDZR1
z`D{zOIC#~FRzqUBly6PlCS=^d@U}!ZX`<XP^L_!X?=$2Y5pYEI0@em?_g@rZL@Rc8
z)u`2@>eCv_)^$*Beii_aE{a}oXBVBe=Ew6d1Fksr^>R{;#Xv8^&lj9t6dl$3>Xj~8
zG>V)ucc;G2uTB^#wj}Lnw<B@_+XuseAk5wK<tWlH&8tQ=G^7JZG6f7zw@#90YaNJf
zp_Lw_@#xY=>RynDiRX_;k6pdYhC1dRSP^l()D0z)#+Fyur7}-Kbe>xwFfntE)_-~R
z&Bbb-JY}d#M*B?{7wh!Up#jhGNKczQBhXbx&4|x{3e87#8?2XS?^I;XiE1>t|A<I@
zgZ3;*W1%$xU$ZW<fxpVLhvLx%!|l+)+M$LNd?Gl#o`H7pf0&SI2hxrm$&g24I9pzR
z&-2{hp5tq^TI^I$73v)TYxrEnJm8Df?XSt2sKmR?fT#VqJbB^lvPCw?B=@q`oiEo1
zMF|$@v9T3C=%v18drV6kj?k!DI)SQN^59Yj%Qg`cTYK)u%IN>=xCQ!A!iIF>Vh^Nf
zDayicu&L6SZk<=)M}Io#yNH36cakOR8y{JIP6lTynGwWjM4_6=^@Y&z`Hruqovxh$
zMh<oY(<8S_U+l_<%?tJ#v6RioGw7tE3x>u%X7}%7B`Jb!a{AT|<!nZ^H#6NI3l^fr
zI9{cl0X8Qe$^##!?z2qw?34Ebz?Y<SKJz2Ib7uiv=tc-##49FA?!45SY?rTI1TDVo
z^Kc1=rbUj3&&oPmid0|kETPIo{dy#*oAjjUukZd<mvV2HvEJ{rmsoY@0I9xd5y;;R
zirVE%DyDmSk`53=L7moqn|7Jg-AJj#F45-rd3apSpwTbCpO~3hYJ(0C$D_HL>0EtA
z^fyawcEww(9I(anH1;{nDJ6NT!UV0K-G4mc<IY88GVG~DzeEMZ^J#@o8@T|9m%VA5
z%JfIeZ2f#XMZwjJfDm&@^CzMW0^4oXIVoImX_FIeLD_&FHzUMiiY=GlQ4V!fSHmS(
z4}D2DHX$JEQZw051iMk?95p3P2FbmU|4_Is0=VP2-upb8@ab2Ngr0KOdST?U>C|v;
zw>*hHmR0VuRpeRc<|5z2&wSq{Vnr-#-L9p+#ujR)KV}~sdo^0|*05-1yZ!)OV1o^X
zt?Rr2+WWaKHZBc`#l_j>ufSVrcf;%fmXP?BUjFY-v03V6+4V9$P?Y%z4XwHR^h;Mn
z8Bm|sqpg5q)EWHAwyk@*xmW$EFYfzUICI42WKrHM!SjJAFVRIUm)-eT#d1Qy+^85(
zYWHR;)4k75j{G(=FCS}<v-M~f2nwFCsaPfFS^=JP*sC`%nDq#5s`!<Xj>@~-n_C}L
z83YTgnBxlF)%WFz9fu&w={EfMfIhp2u!iVqTEkJ>C|RV8HJLSOGv5z51ibzqu)vQK
zI51<NnIOC0xy`|vhn-Ea5@G6ZICfp-&+cU&fbe(i7|%1@^sm-bfS6v@E>eyV<)RgT
zp%AR|=umOn?~lI>H+<(QRM!m*MlPDnwWPDzx;~v)Vt0~@acyU_{o&t)9I&hS-TLR4
zgz>6~VU?Y}=l44-$XRO9IH#;Hk&T0hMC^+Q8$pFZIEiViyqj9qo+ICWxj#nfkTj)}
zG+zA-LTon4Q#VPyqv;OA#xu~=gRP`?9W0O;VlQ_!oOq<fooc0gNlD>S|6PAN_USbi
zCv|dKqiy4JSL>gDPmQqxx|2L{wNiwg-mw0iYq6Q(FC?b&UrgIZ%j~I%njhH|ma^}*
z_H4KC6;k&GgopZy#0ECR%o03#P1Sxpll%CzFZ3plws9ofP;XL9wy5()we7LE#0i;3
zBEyG&_j{T8MW)|m-nwJpv236-#SgBsvB&nUyEH}e^UkE9)nn4I3&uYPj~484o62p)
zO7*y6zrw&Om98LOOqN#0Q=AGC(R<J1&-t*aKbzwv<Gez-4j(Vr-9FEtUvSm-W;#vN
zH%Xme^%ja@$x*wZ!XKuOg)n_SoeZk^bmnOZPo0@#kuM(X>4ExOGL@GDv$nk#4s!XI
z`W!G^6-ym9W7Stef0iiz@g(f9UVD8tK0`OWWHYS6K!X2Ey=e5ym4Re>hrFKyy9cji
z4Bz>S3awmhiUGjf^!ivlZH;W;s8`3!4%mVe_~e+_e#T)xjCF2}zQO%<Ss?H2(`Pz}
zwvR0HHknPK+lf3<ZW%rY(w0h^L^X|4JFfc|EaK168JYnIV0m%7sVEudwf6{iX4n8@
zR7d?Bd}iLGQlGe=*t&wSr&Ha%5;F_^Kn{1M8?Z<;%V5K%cJknlmhj;v>{+ft|F;0+
z?*Hfpavq#1VwSK#6u_&vO)}SC-1|B<y%!YAt*Tsq&wcVkq1k*0qrlr-1%~RTyv*pw
z^1rS0K))Rt7raC*2lYiit-lgQ9BisF0jFM7MBwx0FKVrr-E@aGw}r3R<<ak&IWB;C
zGsVchX)2OceA+2n(qX0bkE11P)a9}~vwsPOFS4j-k%oVabMCo~y<Yuwc^f6_!vcF{
zn);&J25Z0Yz>w+RW_kPNT$D&IsP*q+L@}YDB5I&8-Hvr?tXpC^rcUSls$S@QCJptm
zg@wcZ#l6CG`=qsMmB_pHi<zCCx4I;3Tb))PJ@TB8Y9*<5R^%vhifhZ0B7cS9uDeas
zO3qq6jO0w7sLHHWPED4Fqa9{np>!cHla4<Xfg{^u)O(KXt}`hW`9-hcF?Y!D*i1T^
z1P?y#*+V*2aTQ7zCdf0P)A@L&)D)TKIU9|}NesEhRJI+YN$-!5htC_69zNq6{;#UI
zL0#w7LQ@dL_r~I+dCaGfF4wjD&5(y3Qy>Y$-%e4iP4b1lp5)OFt6{O+q{w5{HJkUD
zj{zhcyRADdbU~U?&5LhIXR%Y1N@@37O7CCxdY-3}Ffn9nIgtA50M}B_zBA4{n}Bil
zE}8ZK`;B5py|{}sMR`C&kao3v8(}2{=+j&7xBKmd*RMvgajxl+j_s{4_XoYmG<vgt
zhn<U1(NghYT18mtfne`_S-)0aWra%<nipK}$sI1I^bQpXP#3o@<XYZ?aW|~$J$@Sw
z(N;3zy|?+<q-Metu_9nZM(2k2{~{;mbPiA*=Svy~BX4ePex4<4opZR?9DIZQBj6zf
zIY#-nn%K9`xi)RpUzq!t!7};-%aaprk6z}XP=LTs`UAz_v{8v$z?)b(U<XaYMChM6
znOJFkEI{1xf17wtN02G#D+);Rd`)?4U`y?G^Zy|X+I{%WHUo&LWz7Xuk;<*@)}$og
z{|tP@Q`7h5zt`@&?jH3^b!Pv&nz8yjTWo#l@81t(k1^Kqu4Ra#{8&_e-AKgY!stxz
z#dM4fgSQ4h`d?b&rqMY~xdw=E4kGf$JBp7he<=p1)Z00Ti*=I(X7tKgr30fUwB=96
zHXE0sW4CM;uf-yVWhwV4lt6LA2AlZ@=uvFt*=H`7J;T<&>1z50Su02+V#Skk?DD=n
zE4C=d3|P}>o}XhOnsrjvWPZ%SM7?FQiE}A&F*ZNxKX%(w-x7lk7=Qarbh|8NR&+Lj
zxDr><LGtnEb^S@hR_35+=wQwyXej-$A|rF6`iHluiSJyq8?B#IrJ2uAT`WF~rKu;u
z6`JAeRrur$HC&`pw@`rTDILl8bhjtF*u()yc1kbqbm$PKm~f$5&ke?+rOmu|m6vao
z=$79ysf>eLU%xj&nS;-(HOHBHQjip`qWli-%mC)APOYeiP9{kVbMrow%m--A4?!aQ
zVwVJ|P=hL8ZZNU6hW$4BmoZ{X970q&Bfl_+i08>vzs11+#6N%C*~||qWhZuRm=a}I
zsTQ84;LX|*biMs?oby9d382}*y9RKBDUv&LZ*qCQ9)5%45`_+nW&4~qvDoEBg=GHM
z!#NK;Trs+owMO+v)Fafv6vBZi!sJg(KsmE5xU2a3A!%LjlG6Kqu8~p-(vwR)BdgFP
zz~yG_%hsFtV*dWjjqwsy%gg!)@ZF8_)1!D_=Bav<*?Q9gjap=!t1-;3X375glN(Cb
z_Uze*9fyZrV2?g*)Ti)M9AG(?*>@0HE4!Uu@wGQq={KYVeBJwEX|I3FOz$56)wI;`
zjtJj^Kv4;!G4iK@K*Cz!U2My!Mfm3{3g_4^`(!FVAhuB}4%dOG7zDhPz}Heec@Raf
z(jCTpdBXN0ti%1fWOxVswKR0?ydI6@h*^Z9-lU`)eA`&3^qpmq`_Y9(hNVT+w;Q+$
zA@zT&S>%>JcnK%&%EvA}@69Ow9{VG>{ng?^Y{Qf#K?VZ}!bdnajaK!f^{7TVMw`o-
zMb=4K-cfR|%Y^PmyR&{vU0w*GHb+lc3?x}-)EjOAT^OmJohs(nSE$5x$>Tdgo%4?(
z_ofn>bEO<`G86qR>PEneD&42`ci);xH>{&b1omf%!K$13AT><xn+4K?c3GlpC%xO@
zMs{}$pau4s&9QbE)6CUeEftAX7hY4`>YI=?FYUwDgg4rz(Cqcv%Q~j1Z@93vTlF((
zA7bdlf!Fn0_U0Tmn(AYniv3W)PueT`rSJyujJI$2aw0aXdc6u0n_SjXC2`)Oai7cx
zv+s2GvfL8V%vD7~-n6_ccN}MtUBq;d8;0=(g1ba|bDs}EkSfP-7v~9|RcV+cjNsmL
z&7%&>iH|C8tG7*w{Bj(x>6u%N6wQUikS?eO+Im{GU-`tP0Oq#8ak^Q95@G)cjus`N
zJbt(r@+z>X<X;n><XXM+O^)0{okyBO-ng=M<_-R>Jx13PM{A&2{5&7h98)PpFihdX
zLsDea*x{fkN~PW+tt2+k^~j-VB`MZCbSze#qsrnqFpM!1V_4|gv{|YH%~q@K)6r02
z4$sgP0FL=mF@L~TIZfW0k#we~WfM~a>*qi;+cSU|)Ue%pulh%U-A7x6t#3rUY&Jz^
zH$oS<xzZ))y+w7Bz&hoA4zX86MPzpWhK5FWy|>OtUWyx#hF4uwSd^fmZ85yc9bxl&
zjal>Lg(`fK<czH-X+)7et-D7#FK{?&=x6M<haK~I27d4*Q;&r%wNG+1U!NMiuJA*2
z<-RS9xb}`|rVWVK!g&_K(W4hH)As*${NV;rcJgr#?Q6m}jkWX^k0A5Dui2mA>r*WR
zB8?$bL?trUUDwZ82r?;G{_j*#`X+X@w@<*|w+E8RWdsYI2zSfqQha|a=n=<bskktc
zz8FTP2ce?U^jpmYA<I&I=-*@g#=gIYm~zacca^vgv2z{ej0WDU_p{Gc{)J?M(=jNk
z1<=8av6FJQ&3;e$wRQ*Oi9635z2h{%G}SJ{UAc&P))li$h^+7DNw<9?SB+TEGqVsk
zWY$)F`5?Gbd0XM%r*3n>e{V%HY|Ia62xx91R}XMwa6C@;LA2auFVwA5CQ9Mo({oWp
z)IR}DG^$IQFK&lvzWEAj_2{3`)H4vFvT{s4b<Pdp*kBB^WSDCD$gAf=bFnLurIOEL
zq5i{;?B72DTvQBRL^)M&IgsUDwA68EFK%UYLq)ZoxBO}N-;&bG=*{0BLVC@cuDyOG
zB8{GhpIwYClbH8*vB~HKTSpQ3ZmXy*-cN$0u(me-$CUF4kzKvTSGj^|SK&^eWf7T-
zMn^yx7_%r{@58Gc5#EQr!Kx|}vea1@%h^V!Si9Xs<BBOxl19>SgCczx<SwVmtpiWs
zYI#lLeGfZ4^xpJ5L?;>IQMqy)7Y$jcXB0pF;kD0|YK)kxW8ilERAln&;3j7ZlXgu9
z9e5f4%I~{2r($OcPmWH$YD`w)?ru*y&>I1@x0{hz690NxM<Q6{)6UmWU)9?K#vARx
z-DH6lk3zS{N_^&qg*7O-p3S$V^-as@fkD0cE#p_x8@*Q2@{>44@8)t3+~K3Or5<aO
ze;4ux3Q!=kh15zHsECw;y{>@&SkVO)`%QjenBh8-&WuUrNj_MQt*U2#U6AFs5TrS^
z`l%Gcx+C@*(vSs7+3+6u^DA~PWC|fP5SLA7LPNeOEtPpw*^*G+5WQ*ozDOkcrO;ZZ
zrQeAEs08UL_%FXs`h9u3=6ony`>-SO2fk*i`=sgbKPi1xkI|1ls?Lr1N$-HvuEIYw
z!7q9#1&{#aAu^-Jj;DvxXPI!*fgMNEa>{yb-@<U5J=Icx_(O}>Fz>s-3qrsPkAn8(
zadcrbWn3&3g#v)rD0G%(f3G)|n|tQ>ox+%Cu$sAzd2oa=?+j^BoU`D6C^47kK40Y>
zv0|Ab<WUI>P5vagqI;zYxN66)pWDn66?Co6-F+?=pWjW#?atw`^Bfv_gQV4P4EP6A
z8MUoHM%%e&q)Nfwe5?lWx1=s4$F@n?m2A@}JhNv2&0<l1ad`#kmG~t0BS%Q_!^xNH
z!Wwp5gDZonH5yOC4K_NvethnDu0uVJvGMkvhQL6oVQEbLNk$J*lzZ8WjL_hxk^G*2
z2G@ercygA`vrjvPC}tlxfD5K%Ddg%8B}8&MS>OV&w+dc-8}DLXNu3Uh9pn>-S$D^9
zX0N4P>GA<0YbogtO}y1Hqs6K-uPdE$+GH038M)G1=G~GXd{K;hy4B^>BVNzYm3tTh
zBk6=JS;c3AWMoh!KfJ$e_0ksA=550~afhoz`nMl%|K~$<KwE}+iLRj~CgUHaiG#;8
zKIXlDqsQyUk5TZ&7bJId*z&}*x>>(oy(4Xqlqia_{jf-<t~W`S@h;goZ89~IE>y_r
zyIV%j1G(FK8rSGK3$G@Jg~OA!TBE_UI%j5X<KseaG*a589u+Bp!jIcTA@Uu<&1U3r
z%OZ&w&3HVc;}+J$FVjr0ejX^bcoYYRf=#$rUc^29@A5t8*uSn)@~4fR8yLP+U`CK~
zmLfj0c!jN)<C?*gk5xaIU(yL)=<Er_@UT2vbaGJ&2sQw3G_FMm+po}QJ$=uWf$mxx
z0PiOVYAc4Rwp^va3@+`xyw5STTZb)7pCLAK$K*-OGtkYZW@wWT+i{vGv3RNTD{I2I
ziDBaY!>Rv7R{Vz^BmlX|8RL(HbPuv3`p>NLl$vLju6y8N##F9y<Ho%oQbIV-&vWOC
zgoHIMs@|V|Q6oFH3m;pAPfge9MSniE9?f-Zklw0Yjoo(@fM)u<`^0Q#@2XDoA!siw
zD$sejNl<4PIw@#c=brH@c^B{ELjx@HNKJ&YtkbA6bE=*hVhEae#ESyx``&xLN*76E
zI-`5iiE7vXoqM$B3&BcIl3%S^3IvvvnRK$vAv^dWWWr^O+m-xkdTOuMux_hEE7qdF
ztUD_2b?A0$P3f;bG4+SqS&O!vlbNDd8Jw5cyRjy4pHGG@JAZ+oQB%E1wj6y(x{KlV
zWK}$Vq8yR+h-E?Xki8PR*z5)2yUMt-$gqN0<13ec*kd;RtM(b|6#pCibf>1-jgVK@
z@;Vx<80;{+99i$}4r-t%I_-rG6|R1_rjvu-1GI72OgB_Bo1y8Rl%T<$&L=iEs`Ofx
zO<J~l^9RH3zrMG0^m@2Mm<r8!oX;CF02d5~3$^Bjom>TyFf@<Zn%wGo9{0t7)SO3i
z?=g$^)YV5sOQiuY&4X?#4G?UTbZ)<N^3B0{I72#it85mydHpJYY@=;^a-=G>m2Q<4
z3h>QXp_SZjtZdj+3^Be<Jh_2`eWG4n@1a`(tTNa2xCd_VL=8kvlJc|fv6U+Q8yYp@
z6`Ig8p6XfDb@S+`!1fy`t&aQKjY|~KqkZ&Cq21EhdGl!L?i(!C)#o8a!+?DjmNwaK
zTF{?3*nW0wBX_*6NCGA!i+dj!Ej2pQy6@h(6jfg{44MIY-!S(~+uPXwBM%76&s@3T
zGB{9m<$@Ahsewz((^79iY^7gH)aqN*<99l5dOm!U-RsRO`;eRV!1->l{o}62DzZ#z
zWEt{cx_Ieb*MBz{kwhfc1cck+n;AxfsGH_sYkKiJ4Q1;I=WYx#ZYA8z(XG>Y++Fly
zk6Nl*vB*3pj3V)5P&QrD`R|C@)~07}tyjqTa5z&x^zwg<d}0ceuGrqeu&f3yX*&{c
z(>yH1e_)OL9r^CykO1HXg-h37o?Fw6oWz>KP4ay`0LH?YZ}#kzBCj(C@oZgTGP=uk
z8!a6&DkPLV9X;q8j3U^IT~~QPjfUKdovycm7TxngCt|?cKk^P2dN_?)qFipgIB7lg
zA~fBc-*u^qe(=6`B&XO!`E^K<h``0`yUn0E-f}1lpjuAU!d#Re_W=bc3mG^zaqCY9
z^*T(8W2aMV*{N0L+0Lk#KxTur1XUU`yjgMM=bh`E(_R~!F2mw?^={s?zH8@B9#v&2
zOjlqMI_{T&a&vWo1L)<}-#5&k=_Pm`$^bXl{YCJinvyDls=XhVKnEpeY|T@KTYeYb
z8C;X_ngxQRvFl~EbM7;#FAeLi)%3zruV`O3<hac4`nA})sQPGeKsfV(ynV{gA5Qp!
zzUIg5#GZRDuAL9UV)vEI%K^&6&2+lQ<hssFXL{ZT>(3eaAR3w1RD&;Wu9H`bvNrm|
z_b1Fy-iKYut3k|WgLmDYB>oByVk{Ts_j0wmk%u`KQaZOewu~@<mIJ)jkY>Y0-o;GF
zZtEg}9qcBiWeZJ&JO1+D1kNR~brf|bHW^T6+~_<}vS%3!zF!Zvz>Om7gOdu^4xCP1
zjIyBod<?m3Hy_cd2FOy%U{C256ZX&p!m3=0UnMwBqU`__%I_bqZEwxNF7d?q??rkU
ztI%`L56y5YtfyoQYPKb<0(no`qf4X0?G?JJtEyc2H#}uarq;iRM&~XwMV8%NUv}m|
z4&7?oju2L&%Yd<8WfccajLqg1&K%d<#Yg*W6zh`l7>N8F<odqH^m9ERk`m2ww4N8-
zJa^qfJF}UZX5v0IrF?V*Y@#jlSJLtJ81X;mjBLZ<+MlkGlUEmCkYjZqa?)+mPV7*_
zLX+Q3*z1}1dS=|8Zf(gPOm;}uI-N~AypSf8i88Whc8H}Wg*}-rHovSVM0H)~8%ob!
zb!7$xekX;c?U6;b*>d~2q}D51aLudwHq3FMpRbf<UHZZ3W%Qu}?h(K)<}@q~g=+Z%
zrFb*zKbD4o#=%YWqFT4Y_tz4+#GDY0kM7^A0uE0@h(m!_8FlKX&tK$lTA3@aI<K?P
z2bzXeIG)>!hSug7)irn4&CpHy`K^tGa|<)H;XIaT;rszYR?PLa2Xn?jUJMceb}iJe
z0rc*6xza!Zn#J;EPutD)!OJreS~;Cb;{}46vE#)$P-qQb?n6iqLcgaO@O00PGfr-P
zxY;m;sn85>&LEt8<9sTf=x2IQ6>&lJTyF4qJ!l49;FpTEyS?Q>1z}xo>oq@q`<RWZ
z%mY7No}SsfXAY&NLK_%)-6sYUNB<vt?-|xqyR8eq3R0vAsB}<JY0{Arx*)xZg3^&D
zLg*a=BGRNOy(I`yib#<XItWPbEkFW<A~l2#0YW*`wbtI>+UKmj&$+(e>$>KTnPeuJ
z&wSb#<G#l|S{z#z=9d$cBAIO9f$ZMnpX~9oK9b8w0SEY_5U@oR_{l+<KDG3{H(F$W
zwpNwTo3!(2>cfCdC(4Sx1Ryzm?gnl8PfClZ*db?GcivJ&nS$Oev^_akN98p8aycl>
z{7jkU%zE#4kNxN`a(fCV4!lQpbpyNCeCVgv`v)hqXEuPLEne;XD;TBXias)(QHqrX
zRk<=`uurWv)L$;X_a4)c%w%z?74a@UDDbWFJ~&6he$;?Xjmo`+X4bGkC5<0VxmjP5
zN@^~0#$q0`bT5~n(+%~&_Pr&BgN=l_hEkp5xdsCVtk;QS0~yfWHyJ`7b@s$`dIVpy
z;bcqKfHnM{04Ufp0sBQ!48rj2Xb%JZ)==)PE80_A+J;!S(mq`Go7lqePYv4}F7XNr
zDw8j+@8^yQnRju->pMViv3awwH}E}#Yq!Y>dim|8X_Pi^^j0;HU+Dviq?JEz)5DF^
zdHDoJN8WDgU5U)SpM9DXft#tDJ->T;>rWI{RPA#e^c$%S`jO9gtna%W292s{=P`1&
zz)g`--NUY5AvM)(PI6n#ebTqXPg+iprV%Y(qHe=?CjYWg@iar3jdVWgCTFw1ZW`G&
zWRQvVda=T%gHx}Ybguf)#m)i)y|4ci<$QLZJl+Q<<0Zb-)s)>e!U9*7t>^~qt=ADW
z9G{Y(zd-}KTd&~dk2Fgv^^^Udhz`1k$5Y1+OPP0FTM`Y)AP&0#G)XyCv$fZk2!0r4
z(zD}W*gjj0uSTrZ;@F%cd~Z0n<+Z_qiO7d8s-=tc#WT4HRbLjX0{Cu3;9v)VZbR*w
zv_gQ}5W8<yK6ehC`@JV+FdMFdJ!AdW>E)Fy7mu-&NdNg~8*EzbxZo3NmQT6vOP&6z
zjH4M0zDNgQ#eCOzS*G!kQJ(;HmCuD_H*j$4FcN#ShkN-6e$R*Ze-}{mtx0R1)}GB7
z29J3v_<C=zfL4?vA9@vr5|MswGVgr~f|fNLp?--2Ln(KC7Rw$cHpLP0y((H?V)6TL
zw$w#ZG0^G9DX$;9;=$0UVm4=$wAz7iU02W}j})1$+Sz`@C!h|T?m+Im_!e7NJMQ6j
zGumb46^l2&#@;@q@Bw`jb|I2O*Y1hKUj{5=Ph7slZ&`WY1*I->;SDohD*<j>++9Vl
z(m&zS<eWP7ubL_S=16L-@y_xj7B$##1~<(3@`6aa(lAq6ZT46miJ$S*^8`Gy+AE|B
z!Kj-Vs9Ur3zBRN}33{x4DMhj!(GR_bsfKz)&Fbg;9fCY}OIP6nn?m=}l;ux%;Ia|~
zGZa&rxld6g4Z-sSV>YN^a*P?PjI5j{gt|Hxz+UO!47rw~J%sq|AJK)g$F7&ps?GNN
zB_pKLKn-{I2vKPu4_A6e`GE-xqm)!jb?+4Ps;X6w|C_z$ay4i&H+%f|7q>^NcJUO@
z#=<0!?^d$I4R!Zw$a(nFxp0X$8%Nylc!~Q`_#Fxf%DI$VcIY?UQ;vMfS#02H=VijQ
zLk^hq7b}N-jjBKmKy{al0vNJgDqAdsS5j_#6=S8(ij4*iMSj&pVr3aPjUpj?<4>f}
zfxNN%h#}<`z$)g{e{t1`K_YBo*AEoERvvs>^dlcov~zU*r0bCVlPo4f=XI6-u01_#
ziHT*fKl}ZAWA0vx7S08IeBXu5=hqCl%%6QQ+vBXCyn_yf4U!9{$@V^GhT)ZI<gFN&
zvy0)Z1~sLPd)GZb#2u&TMyb=&6tU?woFAdpBz^!@yfNxTl8JX-<St3c57?KR#{BJu
z@`#1)4TEVHgpG6in>I(a2Evdhk4#SjlcBxtZ%aJe9l>JING}M-mQ5mSqg1KX#*X%+
zArkLh!}Vr;rhlTlFKXGkoqb?wz5~MUtmZ)j1TUU^=sj#6sUeXUy)#5smDkTd=@ean
zeWixL_^+}>#P6Mv8B|%6e}YDJXIeU<sx*+)Hmp7VF4M6f#sRgL?Q{{b&hIMK%se36
zi(Ow$yUHI;Z6q|{5Ki^?ig4L73LrrYL7%YI(T*q(rMx|Cv(Lp~?v=Y>ey3MSumU<!
ztVS8~aMvX2=Gm_$uFbVJRGsbes4$AYNyhwFd$!oq$FxzjwP=vR5>Jv2kMiJ<@K+@O
zR8Ww)(!4FA7mwhYa<bENHq=)gjc7W`bP~<yKJ6O5s|<y|?tIVhLnrbj(mQkD`EXqn
zGZO=6(6U;(ZeUg18>rT~V)I0?u~>pUNPK9#cauM=s&bGC&>MT6=aQ7nVRsU>&|Zn0
z)aZJX1wf7)%5Mw17^ca}3?JzAPPg`9AY3d92mqa<`lRmhNk?*a{Gf(NJ?dAwMqwGC
zn=7`uM^2itAhG8We9%9prywwPzZUYFa2&PZ52~(Yf1yhM^WeJ7i-!vFO_Z^nD+Vv_
zf<O;F-C??K#!`@!tOxG4Am52^BQJ%c06x+6K;_c5KncH{&)F?-v;F5FU@c$d`gsR^
zoLt!-|LlgN+b`Nr+c~X`OWfM({oka}%_>t}x@o#@JDL@cF>V>3en!cpr}Z}Nxa1<R
zNsUB}Z=JwQqpBc&Yl7d>K>bJS$Q(7i=qr)$*Em$R#@^WFCteQR-@+elH-K{8{vAzu
zVoI+-1q0wNa<*pe=&{eOw9=A_yMKk)_1by@Kt$Gs1fLRPXtd|(PW!xn3ERttsdyD8
zj@U$d=AX4zg-r_)Sln9Dm^LQ(-1&GRZ7=p<mGS1)71QR;iat^1<(jFWnC>Q9ENg)W
zvjf~icBZBb*9dty#A7mO-l5CnmGRs}w|Z>jH)^EAeciU5N+Q;5NrEYRMFQmpS4UmG
zw9%9Z^*okO#z>Xz5?|Xy3_=H{5xWD0QjeXupTHJ^*ZsbR>JrIh-8c;8y-hB}cAYKz
zy`|oD<H0D$e3H5@K3)~-yA{ejz<M1jT{_|}@oI3w2lZWV;JwxL9)X%EQSD5VmAXhu
z;m-w0I7IPHrtqe%`Z{m>{60POADE8yD%JNeG6NP^H9Wsi&3-6YQj~8x>9a_<5}|S5
zr2dmga3I2x^S-|P(H5jErY+@}uFbqnJx3nc-l^)AH{0N$A$8<3?!mHTkDqBrioC*d
zbBiKKGGj0PG_vUG60Nj)Wcz4_z@V_h6u_N{ttMr6dz)e9&F)2>pOR@;koD@Gi5VkP
z_+4Tf-NYYZ2S9}L?5wUdXF4yuB#?zEuSnJoo&~X0F5xEEJ%1mrfY0{)E}t=J&9|QZ
z1$>B|lw`;bX^u&i@LcIvr}Ih$!i)W?sr4eO+g<CvLM^rh&+3L$odX}zJ%;tK3v<$4
zAIdX1T>FbOyElm#A~0^Sw{$RcGgS!H{k45l++A*aeL0_)W~jBH!?WcG<+OS8o($UY
zo3Sn?WgxWJWwzda?@M$<QLVp`wjR^<t})uK0|$Y@eoJwa{JFbd0s#e}+M=812O#SU
zZ4tK$D2#HoN?V((>9Xov0tOHj#YRC3I)R7JmESkkIyc}XwgNJaL|Wn_b{ngjH|VB3
z`p&A?_dE-{*5n<jpj8eTol>zkl;j(IDV^&^5C%C2!_G)=vyKlvV4B{2VYZVm#bP`m
zZB-d4-rq?vH$KV4=4bbb?24nE>DjtdasoMp^6M$L`Pqt({oQZ-t*jTA9rT4Fe~4wj
zLl%6M^V?~SlroQWr1qrU$TxPrnHK1r(KpVs8<q82>44#&;GMR@)O-|)OQv3kK%?<)
z;Y6@yzGba~Ye7+v?YtsZSbkimj8;#t&TqGa!4&f4Nv8+m&d~fuajB>_|4gNto>-4=
z(H;QGbm?tp4`-T^N^At64(WiIKN0!!wy85aZ^M#rL}>zB#iG$Ios{0^+2@S2^rkLK
z*Sb)ShL-MNVXry2Z`?WD%X7OvZ{&N|oa@UKBFGpHspZBG6kQ?fU%MaPl-GHL{W)M&
zVpJkHSm@AMAia3(14d^;uv<>>PqQfw9~AS3V6WiVMX9V(frYZWlbAzi7M}0Ml0Oce
zLDN4`i|tjW)2k^u^UUmF!HM@&24&C1ohrATz(=W0Prqn*k!&O)(=1o=S#*0N!F8}P
zj-j`=^G|_5HM@(+Q0-s@wNjVDYH7oE^M!Ch7#I)=FFJI)vifd^X+$kiW0*o&*B!ze
z{1A8EETOp)hm>azsqw!o)LME62lS0)T~%LpZ5v1cIos=F^oO8RZb8S1UaIk-geCK{
zAd^2RivLx5fQOZQAAm&-bs=C4<6b=G`!p}2)KnUGK3-%<j~4G3IXawF*&!j}w)CAn
z^v}C6w6G@9<DOGJT7$PcX9cOhs<QL?c#6F3_Z3Rclcr>{K6ndbk&Pe;DK*1po}oyF
zTR^@WwwY5*d;#cnkpkVU)UH$=W>lR3Zk}h8xo*Q5xI4?B1}NLzxd*=_f_r=Fp12%R
z{yi?+p=2e1)+dxniCP%$n^nF3<lT7k>&#gu8By_xzEDxrd*^rCI#3Z)IHuX+_ljkH
zdws>>Y5t-RdDx<ZPk<8hcZF$3JGXbrcYEx{^#$?Ikz>M^`;##Y4JW1UH;c{c5|!?1
zOp-&_gN5_N@Dg0)Zi<B#CH3HbZWhYLlZR%t!%Q_H=eU}2nXjEr*@;MCE$ijH@_5%U
zVjxEW^YF(qCLg(w96xE6ZR=T=<G(NOMYU=fd@{|X&THwO%~N<&jm=`%i5IuzwsUH=
zWwsB62JE^LSou+ds5eM5Q++n8p2VE~RiD#UKtQzfQ6c{{{&V7lU4?WGw>wX7W8&VB
z9U4eqm_LxC#7eDLMHRk|+mP9=G7LR<Z&R{=)Zp`hPpBynFRBfX-l57>wtA*mGvhsJ
zPVsACHE!dw8Cw4l4|VACtxTIR9&t@)=GwgR^LV$Xi{n<bVT(e@XxVDrl&)4p7%5kc
zC+??a?~rSIkIi5<zGUg*71s7RXKd*Wat5wA)V;bMLf&-QO3IP$x+&RKsiao+3ghIp
z{Ep23b6_H7v?bLfY}IFQEo0zi^_|sG5zdeCZ-qG0KOE_qA`DhGtBnQFFmr|3yC{o(
z;@jw>HK1!|w?mHSh8@j+EE-9?>k|wQcp&Sr;kVcMl7Vn_@Mk!$FM8_J;6gIL3TcOb
zV|m+n$`n^{)gcb)v(W_zGNS_cH{Kdgd47?BokDr@0nsm0yqpz%VLjxz1A~TdEF$JD
zS(KtR`7d<s)ZJ*-7mP}-P^~&wZ*W=7X@x>sP?6Bai^x)adA|_dUTLz(-`6N^n>gfE
z&p0zkt>66R!@Sb+?V(Mjnrj{`pZ!pRpgm&tVR5d!dU$YQh73$vI~L3Z(uFTE7w9Sz
zHfE={zaX`2LP04Pi9(yn{kJynaGpN$sHPBka{HW~a?cd8$>Cczm2w?klT1PcH3a;2
zXIh?8#P;Y{tpRQ%B8<w5o~0;hPjJlHK;v2YfP2ss$vu?20r8AF2(wW!fUan%f&9=a
zk-K3kvDxkzx*u3Z?EMF&FHt5KyIA?A@TJU(4Y<l{3jF~xI+Os;UWd|ie*o48{Of-l
zit)t4ZIQVf%G_nFl{|^ILsL9*C4w)dq20PjM=+3^_9U@J6o~)c02pX;<TobVazNf(
z@O*B7cH~*rGm-RROY=_<(um`#)TI7kBpt{<99?a8N_={_?F#Z*ORv9SAIo?#RX$#S
z8@TMB4<pD`r?S(U&oaPI|MS5^c|~>2x4A^?UQ8G@NVuZ();~Uuq6bv$MQBOOn((Cp
zq-9d~O8)fapY9~TaYximNXG6t4{5Ou!{RVNbNkN*0)eC3#J_)6o5-rpzW*=p|IYad
z=+`;{dVCI<P}GbL)w-wEw}jMH7}ogkZ_p3$(4vVW<c?n02JWv6aAE)WRe!%z9*e8m
zh6+BLhWRIs1sMQ;OvJkaU}OEv24tFxyaoRG-+}Y*?8Ln#>@~R!|J+RAyjyiXNl#v6
zEWhauz=yG28O(C9AINl+xtjW0dJ_;V6$d<88yF4+I8uK*U_S%5n;cg9GnS00pgr6$
zx5sbH|9}sFKc48lJ@rL?m+WsVyPXMe4Kg#t95R5&<fEbJ(xw#?!ym6YWYN`ti~G;r
zU^Vdo!04V6PS!X6z}x?M+;O;ii|?5*;LJ*DrT+Hb+{>r}96*5TV|w=OZ$LP3<(*GI
z%ex}f5RxFor)k?H9Zqx==RfX+Q@@H>V#ZB*>;!@C2ks#yUBn>6)H1jZP*#Yc!#lzM
zOGf~lL><MkN2RDCJ>$O()qk|9Jo84O0XzagK8hWKX52e`)J(zEDUO&@@T&`NEb>tp
z36;2c!<^$9<HvtIaYfM8kc*Qvps<6st?&Mr_;VZLD5F2EvU<d&-*RDX|0`<2V@+Ur
zwH`3l()r68Id}OsCW;+Y<AU1E0CHk9q1xb|p2D9mPH=x#w<x|48)y6HUj5!i45)R2
zQB^MBc=^*pI``5y00{*^D=SV`vO4lLQ@+`|23{yrOHa+)KKRG52{j`N0#v+Lx+ACz
zH6&55xjctMN%N7_fA7HZfEzCypx)Ym=z%t%S=_$`xPSpO<8Ry;(kwipGvpx=FOTq;
z{EegMI#9?)t%NzCtZE$AF!sL>He1eeWQdXI{bBk4GOPZ#q4(du3?1eAyw0qZ&@}k)
zKl<`N2H1a&wEyAc<sW(kKj;1b_V@o|2K|c*fWHRD;;2oT*gxj=Kh5EPe)j+RT+!&N
z$6oITb@Kmj5dY_B{=c4lJ|OGvDL$CO_WuuU`)@z`nDREev4ZpI)&D<FoJS70Z$7yr
zQ00G}6aR0Gx4jQMvhPvJ|JN4&s|z#}fcw_`cUS+n9s7Td{C{`#|1g37<wyUX)&FlZ
z`JY#{f6wZFwOsvA3;Vwp@c(nI`oF#N@4fn87$N_14f~HbfxQ~*RsJ-fKnN;!d5*`d
zl=#|bmEDGbQw0cJ&h?Jrqjfg|k*>|>gOp4XGiOcC8G!ux(;{=Vm-4#`muEJedfCn}
z$i@B2%V6)m{;wB6>4=q{0@$PNW_<IsXToe>zjw+?c+l>0keJoHK0yck27&ta>i5%&
zQ>@T__h+?%Up-~%Y;T@PF88^zPFtoL$*0Q<&0Oj$7&>g5*aHQw^a33@AZO9*W3HcH
z*6#3E0*Oo+)kqWmK-a2=|Dgo{Ho*aLu#}%b^x*YMknrS0(Ri^&$hbG)3q?-5wNvQ;
zg6*2b9ajnFM;zk6oK12c!}bb!gyw<Dhhk$ES=OgV9JcX=mSsGZ7R&pmXE8#vVpBnt
z1N}y~Y93bN_fZFv1M|5?43($WaT^o8o8B93AL4(;PC8^LDYJ_K)_K90#s@)%<$G7Z
zDqC$eCiDYgk#$rm+PTSl-AsiXdPqZ<mEYf_SgB?z%W87kPFek4rX4sy$#ztGg3k%j
zsebc(e-qCFl=G6@9~T?SV(8KluEaoXfFg~r5VJlkl`iD#ycZy&aLh#0tk(HuB7~+~
zdc33(|7}OzD-PJ|JJjcEFd;REZGolc0Mv-R+3i!khV8JQi{z-2eVtGWkjy%KI;K!C
z|E(utHY+UoM;3v%*ZsTcp(g+m3;1OEP3rp=6Jn<JxZ|Y<+M;@Lghpw%OGw`gZs$U7
z%Hi#F<;vC|wc(23u*EQoYcn_igXt2N%?p0nC~KYsc&j4xWLR{FGdk{6lp*7Mj#VtA
z_3=Kg29pIwTv!T5CaY%xr4xoILta&Zi<@5~X6>CSJ8oyCb^B`(?j4jFa>!pU_Sv^U
zur~?ILHKhT`>81Iej0^~7gj7=6hd)gda=w-`MOyygaaRe%0t^=>rpk4lN865=n<QK
zAVn!>cW0NrAiYa9Rvi1iGQP;<t4C+m*Xn(sZRG(-3VXnV)G6Uax@%!!d!BQ?_AL%u
zA?0P#J8#eTriy@YO5nZ~=E`7dhfL#EJ$8lL>8p7hS+cgC6BCidtk0&`_6XYi7Sta<
z<E>U?wop9gFomt1oc~otC~ZjXeUyBd1f<HetmJ8x31d)?W7@ub@8-mIyDfW5N-L|u
zZQ}X(0h-L@ZvVazh@12#ii?F6wrbKTd!FroTE{SR1Vqp#yqtXvVd8eyM7pL!sKA~l
zKtV5d^ylM2pqj_nvr@AjR*&H;b*%Z~oaH98p8)}=$#dyhdTNX0<pEv!p3Uc;3EA<y
z>YU7}L4D(Qsc6b9KR)!3UqMns2Le6ig;~H=27_JS$;opNaplcKBz2~8E8Qe^N2wvF
zCk|sxt4+xDkPLqalEoe<i7A@G2R61ZGiEUIyDH`5Rf+oxbm-8ZZRa!RsAdQz9K_!V
zSAcr}aMS%AfUJ~(U~6Cm`G1Ps!a4%HGtFZ7!<TzWbyWk8R*Yq)R?3xW20ddimpfq-
z8e5e(Y{)>r<eYc|uD)^_)Vh<Pbo{}|MI0#B;(0H@IKSD*9?kQKLZJ0lHonYcWJ_*q
z3a+)&f8UcYo5a*SIOSxw>%PYhAJcD83|X@ORm$5N<6pBHbXjfdy_~bQowmF&VJqh}
zD|JitKI>LkxcMGbO^{SSr@C%~WPe|%CA}TXk=b`w8juIALC-cl1?>yUXgN?XnEUnI
zB54XcvU!<wB`hLS#7Dm(>9Q9!A<zPoX~2t@p<0dp1lb>@DZaqKhL2x(D)m)*z6<qS
z11SDZjQXI$%P?s+L%QhvCQ!TdfLp1aJfZ&}(9QqSQzN^fYA`g60aAm3TsC>~32tHi
z2vA?00(65k%hnTyY}3zUBNr^<2O|4`+E|192LTC7NcOH^%Lb_OCrHt#3;|J<sM-z0
zTz<^u@I_|1X2|)VC!7(}`AiAC>rkovY6QOB^NriF^?k_cQw5A1UjFq1?aag@&>Fri
zKhC*vS9RsPSZ0AvF<Y@@=p&E%&K|@3eAq@o4rEKV#gIkQEp&}r%1>jI{wINvw5;Mm
zi>c5n)d~$Gx_OAIh&s1de!$C9{L_{fE5VNUe)IKRSfpw)&sn~K|A~5W61#n|zS&lS
zbFGBCsHz^_TE2crLTz#XuGTBIU-#VypD(a_NqxWmj(r7lYeSf`SkuV$s_b^irFl_^
zp`eC})$<3!=Z6`*q(WOZPlu7_Dck((D0kcTR(>czf+f%{nCjsnG$BD=y{%5b9w3GW
z*ObImEMmjFPRgRuAvLsMqg5ZFZ8B;LpmVO!s&gv-4$h-rRVx<@BrQ8*HU3x?@>0!}
zwef>;>SPf=dc4B_3GdSUbEEqTJ_Domq|V)c``QaA8L*+*VJ0zJ#)4(Kc*Yh6)R2^4
zO0uxNq&bViq!W;H;Xdddb-*nteRs0mDB24XoMqbbfD)omTA7us#1Y=|U5uUD!s(kW
z)|k96>#LKxe`S6%#q?HST+HvozOt4~Neql_;W1gen4ZF;3Y|ZR4NtT__e94*ubcz(
zN5rA}g`8|mS<|;_rbjEh45Q+_nTjKH&s;e5kH}d)pDD9s`sc_poYr_pooy69iJ+C-
zo+=XhxR8+GG1B;E>xU`q0EndBfAW^rv_z<BO8ZB>6%<r`YozGQ&$LB<zGqXv%%)GD
zinT^OaQIfk=38j+!5D5Bqqsn>4HFeeBwwCp8qkY&HZ?T5sCoXx^W;85y(7aBrc4*r
z9cwvNB+xYDZ%Qf&=7&z6;JWdDvJ?ImcRIYk6C0-<0$dKTthBG0JxvTww_7N)sv8W7
z9?Ni=M2&4$Em4OLJ(K>21Mu^W=G*4Gs3glEX-sy|=*F^aRlTfec2*~9I^qWB>Ex`#
z_QW!B24Wl4LR+Vo4`@}P`ZHWJm8s>2pUrs0bO)CtL#{GFLrR&XY}2P-w^I!iap$}^
z5_)0$!kHK;#a-rDrmN>qa4BykS<%DNez<D}M1_yyd2MLjh$Rq)8P(0=zU@=r-o_1|
zpJ@P1NTr`@ev=YQbx*ZBmQ@Z(8SGUn^ZD}U-Fyc;I$V!fGet419XmZdbf|gA?6sG8
z|Lv~M;Pm}IGY5Y5tFg9_z@r91PYmMz!G#(}NJW58XKA&O(MN5T9C7a;zj-~MVe+e$
zfJNim2PAQBZS?fdLNES+=Kui3bA^N?#}mn9pR~7JY5(JQK~6van8iS5X(63$*)0m+
z2kZUeO9k-1hb;jd8K`N7aP;?yd9)f~+$v*tD#LNNXkDYL?49q&lSEJ9v@fEsgEmJZ
zT15Fz>M}$F={tO_(cp%-x|7r5m~G--|CGDsojQ|JjveX_vaAUTTa5V6%@${I88X}O
z=PSAEkN*)LwR(QvO>>Oi5L%cMbei$fRtA3mKjQ}{+``@{ulA}+^?k$4FQPl(xp5MK
zdvrX;E^#dTsohE}fB%h9`eSU_*Ojkn++Xx=Y+7HxllMaFpPidt>MQx&ta3+8zDkz_
zj1hqDlBPgo#!~)_5XCFx-wlig{@9p7!oD!&=MFij(mNrq#u;nm9ebZuVg+UFI%)xX
zW(Cljc3XclWzfQc8fnqkE0LR&<X`zY+x+IaVe?t1AW)U^GTomecrBI54rh1K7H&UC
z;5dG6=-7bkx6cA+n$R!=6V81Bg<jVzJ%!7eGoTQj{ZgEy3A;tb;M_~K)B%8pUD>bu
z#9%P~*_>Sg8<pW|lY~wF$!G+vxxEY-AGjt?`uAs|0RV4>ftEQWP}8wYl`|))g641d
zj8TKS;7VoP#_spmy#T`tFro!Scb2lBeeugePB$Q4x;A+muI^D-4q96MshZ8=4fZd%
zh7P$rPauO+mB1|k({d_>hXWM|aX1QG3B)%dMNQG3do$!}88L3N+k^fXfKy0V;g(@`
z?GvaGpKwlQ-s91{8;d==MgfJl`(iGw5LKHsv-T`NilR=XWB7GPy~A~foGgWl<8~az
z20u$V6hY{4T#V#Mo5IevZQ2yv?Y;dJx_=4S?1DM7KC=@(Hw8S$iXeOIt1E#r1rmlY
zCrYc0k5<9{c65WSbstL*s9s^HCg=o@xtyttxCDy3QVs=Vm0UVd&xEv8VV<Nj=yK&i
zcEj!Jr-CCfOl|%9%@bAG2u&#=xBvq{iMDGETwM<H=V0di=s#_@3e}!s`sGQOR@GNr
zB%Fy{r14tKA%+}a1D-v43Jn!DGK40asRM`MkHu8^my1Hy!6DU#1Dt^U5My1sIqA@}
zkZqXZS*N+ISxPx&gEyy7m{g_ZaUwoK*Tlz&ws{MbW9AS?gjfnLC;5xthIqE6*rrwz
zY{RyngQ+jA$V0(Dadm-9dGD;2^R0$)m)>{PlNQpQ(%+K|qm3Tw`!vd9bt;duTsM7>
za`=Ugs>U=t2CL}!3AOQ)_KjP;i<i#qK(!YigU27<Xx4IoGt}RwmVqJlYgpI*Q*2q<
z;^V?~uRS1Vw}J2~<auAhr?oXU*J<AGA&BKUB%p*+XXIn}`j2V8UJ>nFU=a*iVJU4q
z$CkBZ2bU+=g$FCKnJ_9@!oQn_oFC451<c@`#w>leDTeYrmT}*kJ>E_`kEPVp9rhQG
zmFS9vgvOvuI`S8$?QCfDHim(Qbfx}~S*-)g6koP&+-YgRHEbh_v9%c@o~b80aJ?D-
zZ$`P4bMm`WvKb{)e>J>xZMN$s0M*pJ>shxCo4xTp=74nD;Dp=^9&pfJm@o1dxaOJS
zn$d#mx=>X7;19puS2Y&XNUjVoYS=1)qu<+6a?a1jc=e0u_1kU|O0JnUV}gJ!II)YY
z-0naeHE-BbUh2&Dc`Exckl%`DmuzpgT&o{nprTfI_*IXzKzm(&ZFYPF?Oa)1Y&t?1
zCAXv4e#j+IWGtqEasUL#dmdy^d*c<)hrDySKTiI!!B?BjI2N;(&ilU%*~^Cdl<pEg
z(976h)MpTW8~v$ht-!FL$$n4)|6Tn&jT+fVqu^o3^yxc~7_Xsyi%i#qO$*BI;0S^v
zz)Gl=`+#CIysIdxD#P@=42f$vg#+`wo@d5i8#>32ST}C>#_u%jcRhU|aQ3FIxn<mE
zit7?3%I_Rjz>j&I)J&LT-ERgo=2OAwI^J(JGn_R=RO!s`K)$8RR0%o~yxYBqFq#=m
zwfC9#DaH%GfbR+cW-6>C@bb}xbSJ)2w_%~A1|u>>TpKYUQDTKayO??oUm?iI@vo<!
zxex$qr@4$BkRjQC;9LE?W&2I2cV>}pgTt#9ke^TAc4kRE;sSp;cRp7(6&7r!iUoJ{
zl_BH@mmzn~_X6BufkLkX)A(!R!5A02qv-}Cq^sSJ38y;MF9FqWj!Y!oCI{;-e{7q?
zF;8fp2SlcOBVTrXCBKAUJofD@-Gj?*8yz(~PAIh*>XTdLWKFnGZR(M+Y(gFBUWOT(
zUG^q(Y!3q_z1JZgK=ilf*3Et9Mo@PW!Lk{9qw=&ohQxFmnX49lJ>t?o+&evD>lgj8
zzn|Yw63TJxD=%v{u`O?XMKjl)3avi+mf@$n8QibETLND4&kerbSAHD{Q<q)~2hGD1
z6nu)Sa`|4O1#uW&LrZU;u@A_VmzU+rTnJE^SXng^^%Bi6(~d>Ny)Vh~v<`%u*G|F$
zkG0eZT2RSJRPSp%m+ABG=|TiBDz<V{(el`8E3#Dk9EFH^-RIhXL*{FK)hwMeDUQlh
z_mh!FkfY?1o2ssCm;mLWTdt<DZ->1IX*vWGUZ;Z71YG&IYn8njpy{V6qW%}}mT|l&
zyu}JiKB^oVSsGb-gTcAqb1nx9yMl8=*=U0;&2Y(QFDU$U*OEPPm7L625~S)+&o)@5
z?NS^j%Ti4(<Kk4im?jvEL<}JU4so--i0W#|z^1oVYXVOWH_z+-ptkw}#Dz9(@{cW>
zPof6bOJn7qIG3rX^ro0+E#iFV9=SG&p;1YxAhdYpRX-L!yIZS|C8`e}LJD)=`&7FH
z*4u>)dJ)!#GNrKsXo(lE(K{_!*AbAquoBbP3AW!%yN9q8%^@j`e;k-;x^e-loL>>o
zdl0vhe&J^$;&EnSLuocaa~fUkM@xFCG-vr+m~KQQ5S1`>P$TnB`(i^;k9+Q9s5<mm
z7qn0-dwR?JGkEz)9;D$H`DOUwKJ}wFU%*;I7b~Wd7K?I=(CL{C-$xltuM=j)kYaO)
zMcnurZPEih@53`yM43kps#;qIZ5jHo3a@g>`}jQWvsT2=J74iRHSJ-R)6k@&I_-Ct
zwU`WqkjL(#>wv-$>v&T(hn!HB8*VDwOd$eSd_Hv1-l-)c)kBigE2PAshwJOQdaf13
zz2-kvKO9=LngQi4YGNB=MgyWKO-rY*f)Phoy$*VjzDu8p@LCYUu1(wFI|Qcku=w8L
z{`*xboaI!I1jbp+mqrZZ*ViPphB~0x6?CaGaPcATtp!$1T(5Mq@2R~{g&nnzw-iB<
zx=N(&B6Fv{%Itu+_ZB48PEsx3?tp`oE$o>QV{uV(eluv+%<Dqh|2qD7R(5|TW(C-y
zeY3XfD?L&17;;1<ZlsIdcO5nB0eN%!%`${AF*A-Zlr<Gwj2_t<+J5ah4XpCChv#oL
z@VtRr*6nKfAQnTJ&8uv=1+bt*NBhfBjma&%R2XOH+P*2wZY!|d71l^X1?kTYG@_U^
zP$ac2Bd}NK>h`g{YzuO)b@VpSGFE(#J{OH}1~J1}39-e_XGc2>T~H$i=qg{n8v&jm
zw*cyC2YbDb*ep!n+6pjD|0S?5TPH+G?Cx*714l+R<<xB^Qi%EFC8`b0(bNvc`LREH
ztTFTeCWr><g5X`UIObIi$3C>`<x7FgETFoZsAG-)XT8hh#VOp8?g}iB!>uz}SY&&C
z4ylCwfGo+bG^!mE5;JH1An2jC>a)@sN%{q30?D-IQmy|$_=Zf&cU5!{2@X2gEyy=7
zK%1uyWIcK$pzE|!nQ->%#XNM$zw0Z8D{KHLZRarP;%*X@W~%1Tbn@G9h01jL9=WDg
zWj=Sk>%C1|MWyW#?1gOPj8B*OCvd_+69%+Uvf1t5?~%KyNODjoR8o0c^?f9PN|R~7
zU7PS-ZkTmqhs-ndoE-wcGczQ*&rb;4Kz)VR;aejIuA)O37+7zV)i$Q^jYu(;q)A_0
zFx!^bu4qy3wd_@m9T?|wUqH)!TUaQCT~E<ZJ}i&l={jT)o)W6ZP}j_@F*h!##@0bj
z<rX&{mT|u)IM&X%;ZkUqUcU*^KN@k|z)p`}+@g>w6vjXh5k6;9ExHBgNj5nWDh?Wp
z?`RX(i%ei+oQv5T2|40+Z{B3~7njxc??UZv5o)d8*B*UCzKp9I-#%w&O7u{q+E-F|
z;d<T}u_Ua6SU!Sod$BRBIVKZm@EmK|9&Jk`(-pgm6ejhcjEdvX$Wta(x<!v#-1pk~
z#>z1yA^B4LLy>PJ)fR)o%mJHlccY|39hZDSm$}@wHwoUajpzt7siTz*=1T)24Xv`E
zvuN2<hLhYrS{yY*5NcfqL|-Vw$bn3Hv9TXGoqR}v45hA{1>?_;8fu5@%>dPXT+%ZL
zZqpxbM57C&{R!Y?8fM2AG<2EAztYIhD16efB(SkNw7<;>M6O52y#}PxyqeI<A%htO
zS(wY?_Tx~-i%h@H+3goa$~IBkkPwbl%8jvO4A70@88Ddu66*1t;8#<MAunJU2Uy6+
z`o6fu(z^w0@`Iz7(9wIi%8faAjd$r8a-wh2e73VmW}$M=pB-XL<e3Xm8(Y634-I~D
z=iXa58MQJQ)T~h<R`qMpf?O6@rrqs(&x0CY+`_0B+3Mo{kT<UII8f8SFIgweA}H8I
zjm}cSsC+PC(qa~M&|Id+KI_{JZ=d~4mG6cR`&?me8I1R>#LP+_HMB=P0-{Pq?HE5S
zc(PL+TuzbvD0fTWX(%(_Gt#u}-k=D!wVCKC$%PyDA<>|Bm5wMA8863nAV4%P-SJBu
zF&zA1XVW-<-`p3HCbbxqJyR5toDW~V*XriCRKhkR*eefmTY9(ulL!%eG3V3P6;Alc
zTP_SXqYNe@r4buyI`-hJH}hjh4X0Up81yo-ZSil4;_e+tZL{83soAPu&SrO4-M1g4
z?b~J%eqFdw_r49EjDy^fQ}x}X(!f36n;il<TL$c2`xFY)dbJ4hZ*;1xC{aeUlt9+Q
zpP3F7aBWkVz;H$)Ncw8m@$>?^Aq`HicNC^D8*1s}zjB_yEMw1UrV;Y-3+}B<Uk2<L
zq*<cGrc59^p>uuMWj~W_T%>|X?>bhhrz`wuuY&>RL_Ot-ITkF5`T0%h&TCBWexB!|
zcE?{YSv|+dsgcbWUu=@8OPt#zRqB-Lc7_!CWLDa2US}CNbduiJCs|m#bv^#qnZNY$
zPa<cQqw6gjtaU+5kzBmgvTLLAoIK>b4yu%pd)}0Ux{!l8?g%PPFbx9_y!@p>YPkQ2
zxK!et-|TZAVJtG(aD$<M<-h~fzx3`rHGV@&5QL#Z#cd1qgP=h}FC!ZZa{TA0+s=4J
z_%}xTN^nv|vq^r6nQ?k@``Jtqub#a^(?Hi}Du>ifFXf%koO;tvDlS;RVkZuNLWu&~
z;D7`Ah(64=Va_`NlYQDWc0}}^Zj#rH8Vk8p9-Nla?h-vGdIVm@*p&#XqenOt@(U-K
z4))7SmXsq^L*gR|G#(N+HjApTqvR6on>CG?T;;3l?taQNSuQQEm=%tbDXU^*hC$e;
zEt4uh>EZKlGAp$vd}t&+fs7RG!>h}lR#QJrm9Ad@%@IiwK1<)K+dCi8!*3tGx4s_p
zienG%jW{~o%q8V`U4A9}G21#m5<Mnh6RA5YGu#nL6*41xGG6K8W_adDLJyr?^zsA>
zQ2+9+^Nz<)h9(WTcd>#AOoTdwyWdX`_B$A7t^@wHlaCk*Dsf9=+FK)A^<s7TqBpeK
zcVu27I4)4W@Pi6^HS3b!$U$?Isr+P2uv4(xYCA9405NnUch)nxI;SfflyG6Y5q_8G
z)YdDg^++k}<2-*DLE+|5FO^SToLul?a<al>zE6ilijsLWWvYj7iUt<iW|6va$|fg!
z%Q};SY}yU+HDzSB6|xiEBQ{_Kmq6v8kp_D4j{ty#n#LCqv-5KP_x^B`9H*m81H6Id
zATAiWdQn(9Pro=n-i0#m(#y`q%R6&se|4$ac6?gS?A0iur-1dE0o?I12d0ybc<<;#
zs_xr=ae3&+^N*je6&!n76-QAJg_)ZBS#-V?q?8CL+~(pvm+yyfbA^3B|NgbecTH)*
zzQ*h(4(|oIdSOdnpk0kwaH|Qx>P*(Rf`d6)a?fKf3IP;s>WEi|Dyi0vB+h(drQ*8}
zvokkdewf>UqaE|k*MIGLNIJi%<tqU45*n(j%Jn1rZZ12WI$*}#B06BsI9D2*suc7>
zHE;KQoOMkl<3-<*yFKVWwIE|CM4Wu|Rn@`cTp8ObGVEsMXgUtx5fXB-?BI!)!{_e-
z>4~k%_f^79<6Y#QQd>ORJoCT%RHHy})~t%YMc@qLe|FE|?90+PMK}rV?M7NwW#=@R
zZB2jwQ?G01-XvS5AeCgvM%AJlP4m@|FrD`9ihI`M(*rn=8s!5XMi?!@fS7`d=Ze&g
zk)ri$*NBMXx98z-=16|l_Z8%-5Dq3mc}@zO9)Y9asP~_ATpUA8ds}0I+VClzTRJ#U
z-3WGik9RHjrX1*#a+v>GY)3;h-B`%{ux!E4^iI$HLH&D*BW;9`Fe(YRb&<~_yH5(h
z8a-M|52m&Y9lj*>wP=|UrCj`hqrfsg8U)>lNlorr-yP1J9VYkfNz9CV0+)(kW9pO7
z4{ulzM=@|3M~otr8CIQ_*)oKYyKGBu!yaDRccMM4{FTuhS--QF@ph+Q4W<_mGJE1L
z+A6wILTY@xxB|zPpPY>DB1(%~<t%QG-PssEiT|Z)P%qn#6JL8>Rr0%H&O?xYLvkx;
zFTd=Ompy&#&AHYX!oA*)40$qUzJ{h@MB1R-{>PI$v?Lk~NTxMX_ja}V#tN{SUhNPF
zk+*cm`lN@4hf+cuHSE|J#sE@1K3nVm!YX)u{q-UH<weBg<2lBN5ur0NO%TT+1IXxs
zIW;LRwmutzBpZ<zet10iWhY35zUP70?FHuqE34MwB;7{pfnZj$#kO6x1}~i-)(Rtk
zHU40GU;|!iF80>%dmyf|1jxCCQLkTH1?aSMk)Lzu{Kv6r&P#O|+ZI!h`*lvQS~=%9
zrra>&<9`3kVcvj)W(B7ssl*u{2mE;Dhcp_mO?L%4+HRUq4Sp1YHH_%?A{z0Ko5^ho
zrprh^HO+h)l(C4uCoi}B7j>=m7dt>9<Ge#Pr{iQ?jqk&%GTRTc?Ex$+-HPGu)VfvO
z8s9i6KLH^$(lbqMy7O)R7UH2U_u4AdW&5`K&UGwLFDWW$yd+m#YO#EL;|p;?_PB1t
z+ofuT?B1n!?t4crzG|$EZBC!F;qp}b(W{>v+2Fj}onu2KoAX_F?>ww=EEb)Qe4X%w
zcbv#~ZbEE%{)w~>WFD>Fd_MIRYkm#c+J=3?{bhg&VO$h=cA~DO@`J_2(X}PCk=onZ
z;^7#A3SAbgz~$5=EVU_Ey!w9iH@kcGK8V$zsUE)xWhP!pIBW^3S<7`N6|&^8rfHW~
z`qiWTt~r`$f2T`r8iCz&Wn76}IoiI-wLj7@Om&a5{2TpL<qCVzl_V(<J35kOPWgJJ
z{Ho3N2O4$9GZa!?g1$R>n_pnNkI|b*>YA_iUw6<H1g(r%_>0D{N3y=9t7~&h7Gj+~
z;*tI*dv9fV8p>aePBUD`$!w@?18w^dh7d|q*ZTb)>*|umx75BwQ7Jp+qdO+D!q!-8
z0g|o@v4qjbT|3XdVtwrvNYycrfZ#a1rh7PtxY!qxdU5DZ?J+&5RLA1Gv&hI<di&Y1
z%`i=2&5bQK7SMKX8vgq}<Ivkyzxx8fs_Su1mm8K=hOfQttXu^zzv~~UH2O$XJ)jo%
zOpSYI5hLcscxsZW=C&L7$7=@K{c|Czo}2Qj(liTFuS%<YVSzIB9>2D$3j?_No{U3&
z#+$^w{vpKh#qR`VhOS)vu7M3_JioPxJw@$hZZnd0lRV@F%F>>A&42qGK&mVyJpQUD
zr>>wmSkF2-KHL1cqTa&cbG=N=FG~U9N45;29wdsC&CK~;ng8|T;HZ6xg$=q9LPc|c
z(A~Jkxl=%&cWb03W?r8|)Q06#@oS-1?Rdzo107LpB7+y#TvIt@6(8QR^K+{qDF2(=
zkOxGp{(gv)%6RX+Y!<nw`Y8<Qdb?{B6Nig4dgKXp%xZYa&GTUyKZB4lJe#Uto4Y83
zjJxc%8PXlqZnVVK=-2g_;|j^|SC^U&lI^#>3eJ&@kXX+M{Ge~A-05F;79QPtLXhh(
zEAMOP;DFZac{P<cDt6_SEU?Wc4K9OCa^)j*v4=0u1j-Y%G$ViZS~QJHheShft<qww
z{ekdQ{&kEpjWo})wbXh_5tE$cY)3?O;FVI?8g*0P!|h+Wf3<otwaQ3mlL*h1=fB#8
z`yStj&U5o?QqC@rX8X)Iyms@;PKQ*VxSR^<hZvzoNc+mK&N#DfcL4m!2}Uf9NN({E
z(}IxELC+^u$vIW<=t>6}F5!_TMrl>sO8NxXn+hq?!yfi30(S{@bF)6v(vSACdR=yg
z7bKET`bs~AD^CwdnkDsy@z@kdDolGPTR_eQTx9M(+jTptxCr29fjYw%2D-tR9`sJs
z=}Nztt`3uJVYkSu&%YP$iJ{`>rE%j)5T7CpK=7!vE)DU)`bpQ+mw%<u(>%B}$Hg2`
z)|}d$r)QUJ9m-={YVArzUXT;;VH)7FKc#)8?*W4>+#ka*UoBJ=A=@;rDJ@Y!YG!c_
zLCKi7r&krz9aUd7ogB%yd=X?Ll|qTUipD=oAU>2nxpB8(U4vT+E&>(bZrq2l9O^j8
z!xx#VW70g?d4Ja^1xtaC2cN0R)9n%&2`h=@wWlmQzyjyuR24;b-ibs}J3S781@vmT
z{C1PV@nBenIBdj6c9>tdzIyzHOPg(}MXRy$Jo%Z5#J;0C1K-{64)ndO%~#6E7FxBX
zroKJ@Hg#i3K|1W#h@-v_8LeLO`(NsOtzwI_vIifDsNf?R$RvW2`)4j@B3k^=%`4ez
zoLBEZzT>ChDb3M)XiJa_h)#(8y7igp!|6I1+MuWVy6fw&1`+!daV*SCU2K8R-i%W$
zhhD}P2~8&m?`3%WqOh~&Nfww}xDAvW4$AMadIm@p&ARqcWd{hCi(OAEl%suVaAbX_
zBjbIPdQb=>{w4R`ZC!Onwv$13V$g8BTX&f--=bZh9=EtWQpYsXGk*1*^}Dqsufq1y
zAK-HP%)E~t??EX%FJ#6GS2ld|w|*XL)P=_jdrd8^q_P+z`z`|986P~2WKa#2lw0>R
zE;Wdp{|r!+K1Nk0=$U@B?3F6R?=<p8W>};Z@@aFco@{vY9_=<d;i?N}FUlyof?6J_
z>X%t%uRs+gqqKr8tfvf8;gdU*=?}sU&Vdb7VOYq5T|q=o<@TTkh!uKcE83Tw>ngNr
z%_{aHWIVpJ{bQS_N*Y(2A+TAmChV*`Os%B{X?g99{?ulEl9EhgSTSs^NZKV+iSgzF
zgo4)?^IIeIB|V#Rt>$+O{(8*=3-F-F!{{>ExCXyVV#H~VnC6>J=R!6f<_~FdH(UGn
z8&G90U5|64<hg*X){^^(XD6tJDHGAYj=HXL^7ywt>-sR>Er=Yu>$Mu|nzMWQ&>_}J
zX7#?N;1D#BJAf`WQeL7>j-L|Juw7paS)p2*{-XV$v5S$2hecOv>xHBy6`NDu#PquD
zD+P=QtrvEyGU$#btiMW$_!Y4*=x)_SkW8W@ng`<u-)$0TI)3;46ImlnlPNwo0uSA$
z;ilU#?Jd1R6j|@Xq`J3kXLgE*p7~+)5Z=mMX!*MV+z}%AkzC(6wq+)}qBJ)W5);qy
zC0V2N!YdF0&ez9lOLb)sjVchl8;j5&kaOGg+EUgGfHQQ)1uYTQAA^RGSyIqZ3GLHh
zYgEDI&*Xg}T8?PG{&C`#^NTEghqI_xsLrVeXU}#6CuZ8K85~0lxbIb)*14fn4K4g9
zW{K+6f=nJB&~uvmkzPg7>gc|9F0&3aj&ut?cmPbwK&5<_FRXCblc-ePUp3}nbk1H<
zMf|5ZuUI#Ms<`3F$3#Uk<!>*or8?JdOJieKO0$>!Ma<WnO-t#{!|D_3Ilrq3R$@p#
zl?+du@i?e*!bt<jF{FrGq6PJ3nZ#%p4<M2uZJvy0hV0!f&apcC^?GKE8Pee8jIGo<
zj|d?3W{>~aXsI%x#CX49Uzgw8IA6h5vkScG)j6e}{<L)xoQ>c8q*ou$4!eta!FV{D
zldS7@p#NT%Bu|a*Ze*dURN%a`#NdWTv+Pb+M@X0ad3MGT%BzNn4N4{x%%|&@NaJ&R
zPLhPzKI_9nSPSyWXYCv1m_!ECSZNj}AH_|TwX{dyjQ1N1TY@Z`_jl6a%&H{qU+6k+
zmxrDD@YspkagV^wrXBkPKm``ek|Wgv<%Wlw!D_vN>RvaRL-NfJY1g7T{qhA!n~qO^
zl|{A$gLpZ4SSQzbB;_~_&mndNKl&2p-!JzOqpqy|_6EbIsuWHR3|D_qGN5>-=%PK=
z!q+Y4qlJl-vigL4?C89?5tFS6)V>mxz!0H#XZ9hzxu?Jhw@P?$)qCtgR~B<>%l4O!
z_4A9!(>fmk996G4$|Tp8pI;*ermFVnT@#%t<_clLd$3OG_(wt%X_e(`W7eSI3tmFC
zO!oyt<A>7yxIwpr&?YC``sStUiwo`PsGq}V<#KMZrn{p>=L58+_EQ)|w%-^f6wKJt
zy)LUXNn$2#e-%A=ZeT<cG^<N)CL=<ZC8H#A9%;y=yVFQRhO<XK1w@PM+h8CxwHwPC
zD}B_jlc)*nHqeaa?J)xbQqCaL9eA92L%f8rZtA%C8qXgF65WFvw>?gzyb+@5qNz&c
zQr35>5~7bIp$C?Mx}4zAgm=(1kH5Gx*=OrjNT@o6BKHyzqPWR(=cX!`I*&o=<RTl-
zTiIq&^*OrfBW?K0rw;(yMUJe-NC$5k?Z#}XLyd5iXY~7D=Zyz@#9~NPDXkX+O41)5
zST^ptwhb5X@QJZ6&F)B5M?=-q;9c@dy;feds08iSm2gl=$NE6Fpa(9l4=pn__oF9Z
zH%$H<1j$l4h1#PB53HY-MoI)+Ew|cVJrimapA!eI@Hjb@ZqoR+Ov51e+{;BrRU00^
zCLM{)ya$wxaDa<h({~M~*($6^!IBuZ?h00sLaLrS7pi>QtLMV2vgxo_@w$`H;Ao2)
zje=ODqL;`bxB_CvbiKzY#i%d<p+ZNe3=%OL{0^tAR9d%i+xPsyk>0wGV%sS=oX2)f
zzTs2#wnbxJ3o%-zo(MsQ`lQ0j;)MR~9(b+(HubogMB#S&m}|S_`_HSiJ-2j&64tbX
z=kr<yQ(TKMi3B0LzcAO^4(GhipBEL@VqVA$*Y45}(8If?@WmfuUN8@3I4C!uT3n~X
z))QK{s6(0sHd)qqrh12;H?eD2JQ)ebuf|)NmSPun5A1&C1mDTSr|{R5LP#uYdF-Z+
zYiUkP6MMNgbsEPk^zw#ck4Wmp0wxY79qMd;m}+Q7Dqgf~jn)l5&Y56o?J0ykUun`;
ze0pWXUwr9M(rkgb>}`+<UW=mT#ygRuw!g>=AU0p}F|cI02m>MQ<)}}i6wp}4m^z01
z9i?pg7@Z{w-5h{Vxp(Tm(wfmraWdm|KJkaf81;S@p5&V_>$~4$*2QWla3hpL>4&<<
zUfy3{t<*POcTOqhKEC_-$ud7>2;KHIj`*A0Dh>}+h2mIpnC&2qIK_51rt6a<Uky#i
zHuj3myhO8M@l}*<t8YVF`8CClg+E4&3AzXKsb_~rr9Wk?n+AwywV_!Ks-*LP%<dNJ
z5zn2Br@YSs7FX>)+{pLcdz#z!AR^xPW-iv{&1x)(_DSgD&StN+1N~fss6dC_$Zya2
zS#C;zD%Yo^zpiVPwm(SJyW2v=2T|aQbMVfB^4&kXz5Wa!vSC&-94y_eg_jJj)ZUJL
z)!3y$m{)S3GKA;dft*e=2tE|*vc89p*c-k<(xUSnuBNp7gO&^Ws$-XtYfxsjA3$&X
zkK;vFP8<$qVuYlL43Bl|iHw2~5stQ{4c~P5IGQQ)B!t0ipAK(;a-?%qh&A6U?gZP*
za6lEbi`2RpJp9g;p*E_1th)J9A`eoY^CXU&j(hVIGom2M<aVe@+T1V-wpYP{e(b45
zHtZbIC~*E}(=3u!UO{5C6?K7R8F)T9`<pULd~i=)|A=k+bMP;NB#&!d_ulL3yx*?8
zqiYc~Rv_V&=t1U_QF5GcV~N4sE#A6UpjIFDV4~@Qk#(xp81$`a{vNvSTwvvKG0|{(
zZYA^Tx}V?Xh)s@e+z#h^iMZ!N0OKg$Y04_LwiEPvsrK2;wx&o!091J$IOe@_7Gv5F
zZ#t;d{*E`HZB^~O`e6HOQQ?a+ot%s*^`S2Q%~<L8Y)4m>nFGg-g99jG?m;MlQG#&q
zL%7;*vtRC39y`XR0UVq2G^{95gzuNPbYSI$uwk9YeNR0++VGIwV0)46tmqdx1>-%p
zy~m83^D^n}UjXr7-EZ&>GQvQoUF~^9P$d2<gXQc01@J%*zw5SosU#S2aOfhk7~c_{
zz8ExcWQyxQse|kS^<`L(;WQA+Css%Df&;ss_Kk9Y_YeK^<4->`yX>^1PnNG=I+eUI
zJxMrl0)6b{Ce|6=8cm3Ji%{P)U23^<%MBL(*p*MpxOXDd1JJQB#L$U?6FV~P)fsZ~
z^6>PVkpOKLAKCSw1NTcs^Wh+jV;IXA=z&w^AqO3hF)zwbFITm>)ajLe9i6nXHG)z`
zc|DUzdz4>cBn8s1%w@Sw9)36Iy*RCIx9zrWlpu8#Mq>=O@p{IeyQqIDC&IFV{KK|+
z{Cspqd*`9nw#=@7*deJTlx@D#nE^={#Tb}_F)tjLLljR2U?6lPGv$WgziEXEZU7F0
zb8srBJoX)#{zSADC|__kr;~EmUGnN7MCQba386lU3&ux3^7pWM2b*iIxIC4F=faeL
z7%FL#a}EFe`%h|rE(=6vdB#TYLU1yp{0-Z1ly$VxmM#0+IuT8FkwBQzk@u=7#2e7D
zJ>a0|h5DIi#FX1~*vIP;-?qjH%?s_RbUGtxxKA7v5F9ISx#8MWxljGGZ{2;&jyu+H
z?Pi<^ao)vYE8ejZek*)`o!Z^(>MobD{V%S=F=Z6aV)5;yr`=2Yecp#3yAFLEH*gpT
zjm#LieS}QDTRIX#eF?h<Hl}LTsye52e;x5(>iQ8Y^k$q(yWi0{;#7`P9FBI}AJGM1
z^@MdmV;V7u2&_^Bf_jnbKIZ6#wj*e)bE+kpS2+08-xq^l5x&V|?DR+@tpjZ)p^U)E
z2w}DZzNc_{IP6fg7pRA@XH!PMJbprI00`eL6575tw)I@5GRz$i{MXP%jBIn+%7L`B
zBl0WZsD13o;a~-9?H$|QWG-oajdNVZ2`Lm`ezT2^L2n16Zl;XtVB6tzBBI+Dwcw=N
z)3%}L_>T)6<=0$!xosD>Sw2|k{SV?vT-!6x#$W?_4l`{al*hMsZWo#EkZ0ZG#K!LV
zVJBeVC(hnsJCkF>R}n6>;llxJVZ9L6VLl=Xc~q@jIqmep-Z7DM&8(f*+v3qxc$erD
zEv{$4IWq}uRO&N?j#WQ}G3(3isrB4|HKLI7oxJ$+ICF|^qs6Cu!hy~Ue9?8hpgWw=
z{1j8u_Ib3o(Jtx8l!$-`lpukikef7lsvF3e%h|m?o-QqIFh8>pQwDa9^)c1914HTa
zyYbeJZlEi5>?>1Wi?sKW^1l9>D{Px?-_)*9pH6MevVb#pk}#NX-1tdu7iBnYHs5aa
z>HXji)@egvuf}feg?b#DIYAF_BuA)=;%$*=%iUOA{WRAX>GPqCMSuU*4w$7aiA=SQ
zSqw_?;_D0A8D6sW-I9*JN2Vzb`&<3-*duXTBRUf8;t%G|GjS)c(01XE%l1oM=ldLw
zZg@n>CJ;XkTLI4R402@(WCn9F@GUNrS2%ew;DzZDLt)^wkN8HPA5$%cwolkHy(a-s
zh>k?R#?)!kUH@yCPpAN(C-%C#YszlIbEY4_3xn$TLkQ4<5F8~xI-xr#_>cN<Wq--q
zZp!FT=b(-4`b)08$=Z=?xdC3m;coHJgAcOr-d>4L;#?cHr`A_p@A@(D4Tw8=g>B||
z-r3f1VDfc3eNW-E=e)Z(?=t|8LDQk_!sp9?L>!|Kd??V#z3_cu-=G}&dhudsgIQ*I
zh3)Ucw%<8dLEd$Ljq&4&(0W^kTO;})<rj7cd_iz_#g0Jx1e;DM_yYKTJec7d5x&#d
z8yS3X-OcS&Hp=jLEf+t5<zIdApQqH%FvT{C5em}1YSxTg&tZoi<koRu!O^R%2_wS1
zVnPAfz#4m#gb#`lvj~-t4|$!GmTh#T$Ayl>`ay#SZ|~5-%csX+%JhQB0vpydorHyd
zJPnEp4Qqtx7omYQo;H_triVl@I1<4tNpRpfdBuIx2=pVCd|C={FHKH7K2hOde^Rst
ze_XD=6r^E+7(WhY1}}bUD8C;64IR9~eVoHrki6fCj%h)SNvCC!pimuoM18jlZ}t~n
zd^ssup|&x-hnJ?7eNqM6#CG%#c=$f2@Ofp@AHy%#85+65eJt0GFwNfx#du!X)*0zN
zW9BTEj3@!8TccHy@Qi$iIGx`#YBCANjU>UChNCA!<AhFQi3pT50h~cFfXDv`5zWY`
zOWR!IjMQA$CYzKu=bv*{o=fE0PIB<_2_t3WqU9Z@eqVlnnGV;7nx$UjdyESP^hXEw
zH8keKbH~%M?nlnV_tCNKmHp6|9Z#2O9VMF%;dBz}HjBQ_T)s7IP(R|}<@3Zj?ojI(
zh0qxK;>$1nuGH^y)?paoeuyTKBsA6!&f-*%bX>Y^Ns(TtBXHvKLdR;-^P>**>=!It
z=#v-t7bol_VT6)z{QD8<VLC=8F{%!sqxnet43dNhD!wCw1|y^6^N8&<@N#yG<{9ff
zpDx`m^@i6SUDO{N5g;yplo}nwhuD#Aq0r$=1TusU2Vb9sX;?;o^~a*qWYTLeV5F<-
ze7>P0Cx)N6pwAZ6!Hb5i57&=g5jv`b=fSw=4LUT4iDH*Y(%lnIE<VI{LCc3s=heQ|
zlfa}YEA_>2026mhq$Y0=@&?9SC{WLY(>;dApl5mqQldus=zd`uzg*td0qMRQjFFVr
z2u8DTAeKMAEd1h>j?*QAgLmlQ6<#0p4v{wyMzAjaChFWAPVLp)I%>xa^&E$@^h5Xd
za7OdEv72_kf0pT{QXD^N3fVYGvJ-^Ya9XqEdYewq`+MExoQ=Z)FFxN)zZ31d=nbeX
z&uWp_hU56N?4TqsZ`)DYMJ1bWzM0DkM>isU#)bQdJ9x#@<hnl2b{KiV!8q>N%RcN)
zM6vTiCsQUtfAIBwrgWL?Djc`higqrJ1@StTsPEW^5Jspc=}YWG$6=IqI>A}qN8Ki(
zX;>GB#}KKM$YaP`*2zsG0;@U!bbQ~bi(dTGicTMYUrfzP)Jvqkb*9Z_px^`>q0u|`
zo_9_QtIx0Nvy1$O(fEmQQB;E6tgsH4^Q_M7rz@fz5IT7I>!e;A*!O<Z?&j<B40NKr
z^zwd!KF_{f%156^etxNslN`K!9(45jvT{)YYz{=6_7M$;vP~yqk}xpHccx{t;p3<s
zI(Q}Jm)~u^4&}I{HWk~8>lu)DI-&F1e^b;;r#C+(F=^OGf<2YUr=bujglB=E3xp0{
zVLEi&umd>Ur)3ckfs!GBF3&fc%b$-ZlkUnw{kz5KrzW;f7?c}E9tw|1%9lP&uL~sY
zFU&UdfxGUxFEya{GCO$E*9~F5l#6}_BW9%u9lXMH1mp0>Q%@5aF`W<%tdXsYk|eZY
z6_u@ufj03rZ+PxnwO00r5+$lAWYm*SyKJy&o@o0PGl{P!cqTqtc9@<%H$T`e>_hiy
z7}Vqi=j3#KzY+cJoy__jgJ?=>V4S~pqOg0%9vt72+M?K#hYoz$4rIF`!I9AR(OX^0
z_f`6Q!(Z&JUKh;Pj}ac1%kpM{j){%e+bhCj(esk}pGo6wC_KOBr!)-@OD%KX_x9}O
zoc7}pz)6(EEOoG5$kcuh(-p<?LDuFF&UoeX<h`Pg$V*axhL4DbUFu9*o+iE1l&6hX
z1Uc||>9^zvtPxILM6~doxO6bZjjPMIEk{8VgOZZKSv}(^!-iI-X?w_osWrU#aQuEf
z{G|d<SIFXp>}7}Q)%;?fU!M*o3`2N2!O)1ob>^%$?Z~r9uEWwB9=EEvW$G|S0T)zg
z0D6UGhaIY$q=MDwU86=dzi60ZD3pa?EjJ9)+2$+taDQ<ue`7sl8Q}|?8MXpNnMJ}7
z+J5wPLC$}4@J{#+=5+aZZ||i2VLr^)UDV=@@^}_AU0ae+iTt0v^8mA&=)&+Qb`exW
zL=XY7A=t$Rh#f^l#eyhyQGY9Tihwi$MFl~sfPi2@6boX<E=5G_VDE|@D@Fc!XZK|1
zW|Q2qcVQRKd7j<mCNq=Cmt;<zGveroIxojCVl#94ndfGh*KG7X5&H;dRcy+5p_06B
z(niv@K!Etq6=`anZGOg_a6Qub3;Ex>9P_ti4v8a{=z*B+_WR=B<BI8VMWECWV7Xti
z6@~vuV~astmRBRdi|hwU!CVAN!pCrG;+!Ib1py@}gCd0gROqnE^@b#Xn)(OXY=3bS
z&Q=mtj<G3@ui^xhz|@kA=UkU%g}?#>rjH9VcL^wke)=hypUTW{S2*;KWnhKEeP!Gv
zGYmuq3ueBSHW5%B7u-g6C?V1WM-jn3GNVZp)TnaF$JPo?Cyl`bCqXzs$%5vSFOwZ<
zXZI&j^TX5d1W$n6#RlV-lq5SBGsuxceBzsvV=TE8HpZ|tqAUT<Os*u_u1=lcbdmzk
zGT%{3V^G=du!OkKEw|s{mZ}P4F6Xn|`p@c!bk8b7{>^(>ZObhqyMj}1bDJ#*!bzy4
z2&6**-HMsU5RPY-Zu5yu7!rUuciud=#GHRVZa<xj?dzdp*o<mxZEuW<I-k-`L{Lst
zot1rT;lhuDbo33=jBRxj#x^lbGusv;ViYCG7|0GXOP4H>ewJ(6T5R=jGI>Efb26^^
zM0w$T7#ZW7%t?Ll+l$(N-_AZ3YS18_4`9F*XR_cT^-8j32`LC&@4C+2o&Lvuz6lvf
z9QI@cz_A=hhaFOs=`JpCLF(2I&Hk3-aa-&c%=%_V?QHw(B`CS7ujhv3V?W59z9mw^
z_xs)lMbBE^%c!;p9wBQV6t=fSmDgj6KzTqwmiEEc!V*G0O`HBy;5=egflTN<Yo`_p
z^Km)OmaIesPeWoybw5h@4}MTmT~2IxbcFz<IEv#jOrSzWhQ`^YDOnbW?3OE&2o%5u
z`|9g64Gw++f+Q$bGD3xQ;!OJIkNt5@c-p}~QQIy*2r<D2-7Ajrq4$N`CTKw>%94SR
zWhz-pYE=_*m^fsa*p(E3?%Pv++_?wgk?g1Ae+lf5>Pm`$B2dZ*z?0BdGWo-=8AoK6
zl7J*^bV-wS57@7fsa&~WGA)72NfYKvGvJkp(M$}5$g=5AX!Y;Y_Zc1O*`oY1>|;+m
z;?RSG!@i9xI9Rw-)!J3#_%ynu*a*a)AFiM4Z<2j*KP(AICM)irOl9bdA{z)l&h;A9
zL+_MTo0tSF_TjiTv3s)m1r#+Q%|CXCmncQrBQqBSrb)rWEE6cWC)r17t2FpO?IzJz
zb^@DFN&O|*YVpnD7b3aEyEa3rBzqBAE8l)v>?qh^AYwzhbng|63vyp^TjCt#-Q&BL
zfXQ%qd4A#J;orIF@8LE|`nyJ<ZXVT+?*|Ioq>;tQRtAxUkifh+N{TCptE0#BgFrk-
z%uoAeqLmlCz%9wz<#!C@I7U%|LYNtau{4vJSAH9%x&O_#MT2URW0pSnYa@U2O=<v>
z-^WUuR0^21f1G{)-lHNsrMxV6!S6UjDp^t{OuRn`z>>ObnSmsN6u)s;<Vp;de*N(5
z9lu?cqYw%kn7{wNU<omzedA`*N!^leiKHhT_ginjQ>-b3P}av4^6yQKWxB2D1qFp?
zmuK1r<uKGD*wL4gv=evD9~Kp0k7G)Nxwx`%#|dJaFzJ5ts!bsqCcg7V`|KGUW)1ez
zBtLjWjNEb8^UsIh$#9*xU<b<i-;;B8mwx<3xO@6r5lBP;VX)CYdzs@}wulYz!l-!P
z0}r{(gW=g(1TmqM$(XpJgc<8dhb<(5%kn$hEy2Z-F)FHVWoxitTp)`ihJ$dxc~l+$
z7@30ZpZt(rhTz#Cs7B5+yOm5X!i!g!<nb-jafF~BpZu{uE?~tkpO5`b3k@z&ZTa#_
zmBQ52apiD|2tH9|l8+VPSvg_JW52I||MPdsOslMTf?cvvD2XSKCBw%+>SVhmtH;RE
zcf0org9X2Z2=F2kC=?a^?#rkIASTIQ5@<kMNi*WBdBJ;>jUs{!k8XarnKu1t*Kc_L
zLytUWvnMn$Nwejn+6o^_eO5)!B3zE&e!xW1vm!Vy>6^!(Nm^{dI_g?_Oc4+SSUNx)
zj!haL5UJCVk&Be~1Yy2n<>GX~rP6lN)_>pq?>VVX)VZ2=$z36zugI~ou=U5b-xvRp
zIJPY+)M4ni8`}zFP?2XaR70{fp!<>Kzrzl0=A6!dKbPzC002M$Nkl<ZSVQ>iH|D0y
zAZMuvk(Hvdc#(BYcwcGpZ5cBOz)zQDMuPNt?#OcDG{_Q?l;SLRHP>d6#g@b5vq3|K
zn|mfbU<lGZ$~r&dvQ4EllEDwTPl{Ie_;gfN9Of9TS*nw<onX7DtY6g4gy&Ii-u$=i
zB#QfjtT`MLB0Gt12MUXUzPuX_1e7*po8;v7`5ewOmLrKHdA3XrAnQ?*>>1aF9#;g)
z5(3za3GO5yX!?@{%fex|!kLVI2H{A~G;^Tv8T4BwN+l68KRm$y29wHXa?YPDlS%og
zGQKR33y;Aza8|pv=B}~h9Zz7%ORyxvVapcH(`G=3>Qko2a9Ta}%=6anFePy0NnM=d
zEN!*e^8Z|k?4Cjd8o{69NMr@hqqD{Z5pU^D$c}3(+vC_k+Mj!-3+{q1ga30gUT{ko
z9dlIk6uWe`ZKo?=G>xiw$rPTO;FzSQZ%+*e7H7l%iuXc~C<2PW%0!^4U1`Z*mNn_x
z=UsGJF!>@}j(`LS5>4kvMP995t(y7mx8I#D=9gc836>5Hx0?%}3%3#Vn}8Qt;+aXM
z?aw_ss+c?GkB#Z>&7YtuGDlRyNj6S`SO~Hudsx0~RRr_g`@n-P*@ZkO=@-jXV$%z#
z$P^nK%64bU!;d<Bm}eceN<_FlWIJpuk3aFG3ko8j-Pf~Tvidi~q#sGP;I|=sh{^3Q
zy;4xtKkx4&1Crf5$v#RzW0HT~Z!e$wGP#L1bM=?to1FUS<JMODxcSQ_Xz_{rV(C9w
z60tP=v@DC+(Jsk~K1!fhhif|7?4&!H7B=G)vS!@mVqbPBiM(7A{oThZAN#(~INYA^
z%LsqxBu*kzDwNKS5N=n0uRH`+`yek2Y8bX50%wRgjH0HE4|Ik>m<zLHNts+$i1m+!
z;vz?b^WF^3KmYnu4(GfT<6Kk&N#`j4$YayYs4?SHs!~Us^ODv(r9h59WZ3|!v&OQl
zvz)FuNpVU!X5`6?B|nQ+x;An-j}f|SkKVx`8EylEFn>vu4u7djx<rgZIO`>dP0nSr
z#W0PLoY`eLIb;$vcmgXWm>^fdg-mW&Uw=ca&`AV#c*bQm_n&Q9oZUhal`g--TT){(
zI}^j5|1O8irTe{>DFRs>I_c`@c|{<f2#^MwSw~?)F)RpjD9D-_J}<w?-gRxqu0hrb
zIWD{drQnGtpO(WV-b!#O4dpua1f59oirGT`X}-_3*Djc~9Mn(PAzS6Oow^m{3jr=x
zVVVBaGYKt(PWhcFb}D`x@eTRuW<Q0R&H86T7lXD^%M|rHC{VbQDZdQYEBYPZc2OC-
z=XEGN2J>zUrQ->{te3<SHn4$(`5@$kefHkV1xT|zBr~ccW0x$|h=GC>-C^?Y3r7im
znUKudiYl9w`O+_c;rZt{=g;V|6P(crtT4ooO@Sb=^KEMMD5HztM%2E~zpHMsMO2aC
znEx#OdO?9Kcf#*YmesZR8iK%!HW*VVY627IFj@^CHP#upnedd4ATNJx%1IX}?6l86
zd;^-?Q{vVeXA{en@MP-P_FVLm_Yv1XmKXB%E+(7gN(b!U$P61b#u-MRx7khoWkQ~_
zGoK-Xr=pfg_VF#ToD*{c!l%eSa@(LgV@jnSCioBoVy5GLYVFit7-xHS>um15|3UNM
z!;iSYMuH$G-8b1xp7OAB6r6QN+kmg7*3SHwZ(B*n8)%h`<)Y71H!jF26AV}?gshc5
zi44dwf~}GQuD&ar)BsjVLGgb3QTzUPamSq_qKZTw`@;rG#NB^n1wE(;lu-o8<~3y4
zNEc|0otc2@885yR1Ovq_>mGGGGIpZhW;%8<&SJMrnphNdt*B$Nq-xZ;Opo~vz$%;P
z#^+d4is0|T;A%7467a;N5&l?G{`_;!$omq7+#k=;Us8!<GOi+zqZ5^cd|UJAyC-Da
zR8nABCj27f3wZ@uVw)@ucicJLW^4Gt@li6y@<&FUbI)oQWQg^umFljqSNSV|L|v2#
z+Bh!>((wH!lokHRzOT3OTS*a61XfQ3guilknfUk6aX(m4kVOkwm*fLNzUrB@YLJxA
zcFR~d;PxRd2noCS)mL1SGFdd-o_}xY#ztRX@#}@#O#8bKgynh2luWixe0NMl@=5qF
z{luo1FTxin6Hyyko2O)UO4t6u2Q?1*F~izkPHS_Lt3u{6SuO0~W?nE_VT1U*vEM`Z
zPcxP8lI)}Fub&^gZ($cxHohM*<%Ip=+k0}cBOpul=+n<lJoMX^XN^5TveWzL^SNKg
zuJ|#?E~hwX$gp7PW-_huH`-1VZ*$TK)=qY4u}kK|S5#8{y;!GK(t)r|TC#X?d6lD9
z(nHAMGOK-%7fV!#k_02U<cez|VOnApWuX}_zFek)y!-(-9N{c|mhCbdq$U&>jVk9$
zbIZ)mG2<q>OW=e&>4a9!0D|Czz{CtRmf(8+g%@2`lalr&*L(E^G$OUhvao#lieN@`
zN&6L5pZmZ0)<G`73&wVI^CR3cn?&F<6PuY^ug{v}0vS+J^Fb1E8#jYE(`yv9li#6Z
z?ZOo8^drnnGU*$2`rdq75a5Ne?YLuGIN=S9QS33&JUVT<n@ycbn<Xv7b%p*bjChvc
zQQQ9tzujElW!g-ay(j9rdQ1_>Cju31u!ye^XWKS{w*(TgbigSm9&hT^t83O@Z+(N1
zjY9RvV^5e*Kl?n}rX$N&@B*!J8G9ldEro+P(!^27Eb>#VBC@?TxT5S8;IhE37ypEb
zT01?T-C3tX(b$iJK`C<t{47rC-nHd+f`U*<c!IQ%$(Af#WWhuZdBsk4VA%@{PH)=m
zC=l7bqGX6%`{&DFne;EN%wdN#GmQ_}-z{4OkLNqVu)^|X1k_)8QG1)^?tr-Jk;i@h
zolfrd&*zFoWGD2XA`pXs`$h{VFj3_8JBG%TELZ{v@se4Kq+R!et70o9obccGOjFZG
zHRq3kC21$B?R*`}HLI{6d|RPHQDD1&&)N2otWb=>WY?H8*V;A;196$)!m<YtfnZVN
zsy{B3qz_4b_OFpt&OgUE>tp4g%VnQFw6(@}^y<f~V}OZ0%nHVM%(8~?gihC8X?C<T
zu5%@S`2o?}lG>6CYm~_aBWasJJ%S$~z85l=k+qFk#sB{MkF%?=d^bVX;Th7>hJ0td
z1N2Ll=92T7Zgahl4eW$7B}HI$K%kjjl5p(!d)&ml#~z>VY@CnUErdOfC4MrcT)roG
zQ$7N`GVNo!a{fJ(#QDqQjFEQ^vdj3qVlzHW3v~StK3rfYI(0Rtw{2ruAJ;NncQQWD
zQb7{nh3(?hQ(D`l;P<eTS~oSn+AN&#*Xfq$&YU$nc4BV2i&e0EDHqB|@Lev~WeMJ4
zgKu+_-gyQxDH}PXQ`a8mq}Ioo)9r-5l|{ZjmWe%8cy1VX;eYfSnLtSqPy|+g1hTQc
zfd&aegnYgx$FkWLd4e*lb;r<=LBJDZEP=I2<d2Q%`0n!MMPpt`?<=WK*_<QjNdmmc
zetL52<IQ$;>$ugF@C6WjgUvr_@=7+>qb;#rw?6*ZjH{9)hAie}PGhwL3G$Mq8p%S{
z<iO%~MxKxOmNUMXEx4+9e^MV){UzC_RGVlgT#;EGB6DloHYeJE@ty6&t4-WHK<vP@
zC!UI2;VP+L*`8zB#$MgKSbx$2^RUe*HfzotC)+WxfF-J5eQlQMeEroaD|-3gOD;B)
zeCY4l-e+l*U)S0ngydV2-?}Y32oyb~veT!$_T+^Zi)K1w^!lPOnl|YoAAGpbI!%AH
zhO^?c_kClnWTc8}YlStS<%|4f5r4EP@{-bjvmAgB&h}MBv**mU17?Acbk*e-n|&MY
z9dxCVUFwLxop#*bF-%f(mz2mbA=ISt{^ptvm&wnJw+!G_Y$h~jqe+lK#+9=u_`Wq%
zu<RCevJGGmL4n^GZ0gpj?f!Oa*uZqW;YJRZh;Rf*`tOn~6~aI+DKzt)qL$RJq+}&x
zKbJMWNq^2#jS!La9WMP}3T6ls{2gGk8k~3Gr77o1>&M0wi@v`_p&1I{YZB#8>QKo4
z-oxeew<54QBY<L!^Af@d*Q0Bvl%Ns}=ltQ=YIFKI!8cP9O#CGeNEuy{OdBQXM^arB
z3Y?P=%N&!f!Z%hH;nLK!J@b5*5iqH}lANnnt!hvmIjJ<s#_8mZlH|3#T_jCIWXlp_
z=2zS@9F&onVeGFgp0Kxdu2kA&6StJe3@bYm<VA)8F@{Gi)ky#R<s#3t%dO<o0Ym$l
z5ZN$U(uF^k>|&WN91~<a7-VOp*REa5$pD$OMHwG+3{c2rafDnhRB_`XSyYbcRuRZI
z0<$eY@Mq%Uh)hR}fn@*6WO;(5wtN}AB)R|rXF^%0e9tFykWNHw$*?PQ&Y7pX$s_VR
z)2%OK$nu(*)(w{<ODaKLI5A(g0X<|Lms!b_MK+2eU-v`KDGfpoXO=Xw$$b+>uhIYn
zvQFb5X>(F*%fntb6DHp0^m?*&_a89O47#<S)j5m!aW;5Vw7RNLI^B+P!XGg9qwD5M
zEb}1CCR}jdSt+xP*I8#{CmSLk)~j2$Shg>@Ch{A>5)ks6zhtVE$z<!>Tt*Kcth0GD
z0Zq%SRtS(aktKAeJ~qu|{dnTZX97p$F;))sov-O`yrLaDS;CK?OUBMzgNxH$r!>#|
z%lDL&$1s`XkY-KY--io7GWXv1pn2oXdCn0xZo(u}*JfkbWA|P2ayzfv;4KLIYmaW7
zQZjpxt%5(6YaBRun0fa37jn9$uOkiU*Q->rk>%8}gi6@NnJ~*A&e!`UKV)8?IonO3
zx!>;Bt+TB;V84A6TFBoiUmr`ybN{xPK}9z9?XdL5mou^T<A+dE1QdbQ8v)-Ry6DIB
zc1ypEKlbE;QZ{DHr=EGvO|;}X1UzM;tEb$XmFe+y#nGZgo~_FBQN@)n?c?|+-+XJn
zy9`U_-FQRCl!-6|Rq=QDp$D7RZQ2F4$Xxq{uZ`ukA+DG0_>T>A!le7%MA8ozEOdNa
zRtwvE&plJ@hJGKhBapNM`|5<TnP)!s+b9eBVOvJF69#9_n&WPRVER5iy1G~Zxi4Za
z_#;C(tGP%fJvm<*+nsmX!7V|JyvhV&0=|e{;GHDn>V@Z@9bDG8b>$-8=0krEI<ty*
zs@dgih5QV@a!j{n1A*M8mXwXYr|kuT{;WA~xN@6qwrQX+isBgF?zzWqt}KRdiOdaO
z#7~c$^pXE;Q!?g@w%Mje&{Voe<}bedGANtG=z~I~wDU<}mKD|(_5-}ams`tb&dLX2
zsFWFP3m1NzbCY7EV5to<YLy0k`srsuvvE#S3Zyd-W$Lv4>Z^j_C))Ix6u+|}f8B3i
zQO>4~q_WaCoCK`doDF^Y>E}W5Lk?;h?1y*Ownp}qMYU=c3EE%SB{Y)g^UsUUugdQ>
zsgHV25h!g0zWnMd=e*=PjStu_CBUoLwe$2X%a~95{uo#6daLjN0jv_J%ko=(fLFL%
zd4eU}Z17vgX%5Kj-r!`Ock+2J>G)}$yB^tGEl-w9%M-r%B4}e}@dO-8O{_s5aw*8I
z!AO>B+}avi;<BIAu>n*<3#~(DRnwlk?`Hb<xzR2g+st)^Z|9lkX1M)K|M{4I{zY;C
z&1XLUu2sbMGrg9UQv|X_;Dr}o4yrJ*C9Kbef3Ls(dait&ZW}a~!H!I*plC^S0lyue
z4`<MYl~%+b+ZN<Fwy``N0RhmrHj8yhh%s0KbDo>=lFfX)!jOps!T`H#gIyw<#~3St
z17Ckrq!UIK&ha42AV375m3BtaOuI<1z(Gw8G`A1vYZ~mbv#Uk`^~~7?wxLYh@yl(K
zqT40&1~PY}(?T_@ox-0D?6;Z8{>Ptu=88GzyS=AaN>FpR@{F_To>5X9r95l;u;8Or
z&+}uk&=ZP4DI#!m^TPvM-Ka6++?B9<#s%BPb%mfM2wC;B&x>ULxbkK3xbFb`x^U8E
zKKi-i_VrA+F4qMUVzGTroBnh@ns#l7y?T3_F+6GMrjqE8z8pc&T6rTft8}{dN^{=X
z?Sig9ZZmGIEK23MMfTFD>nGV${b2V`KKm@Hx*k&m6oJ(Y0fG|5M~F`>$$v&dgKxhp
z(9@XAu$j&1xH1U)^T^Q!GDIb-Gj_NvHCaJiAADO?y2)OjtpdAZT)#PvtRq>G4zk(y
zOQIhoT}RF#H%LN-6HmxIi<i{LXDf05wiE()WW}X}n>ChV#kQg^5y<Z^8C<Mj89(6L
zX}+=VYc|ApB{m-d^hx#-NBN2kh-*K5oIw6FPe0WKo=IkL0xtcGe*V4Z;w#FB{vPi4
zs`|}x>}0Nk_=c0l(^b_+y{^q1zdD1!jFW%=UE*$$j09I)dQswE$7?zS%Le!cbRQ!>
zyH^r3{oG@uetm!6H=rdgv(~_-G8B5^$)}xBSAK`Lk4`IEx0n=&tBO`w!!wl5Nh{?t
z>8FoZxI9kp`aAFF4#Pm_z4dmuNJhVFZ(Cq!p)e_`<4E4CxbsQJ{lQR#g{bl?R%D(H
zj%*ciH2tY(f>UI(NTPr2k`HmjEJdND3?x#f*tX!6D0Wy5h@eW=kT^%w-!|J7{g6y(
zQujX(t0YYSOL~c<F>jk?aj&M$xU>Cs!BQA6+oi9<efA4KVwYJHVktHyMPN-tAZ2V!
z69Ame_?X0BxAA5@B?W@uNKNMyOZUuj9Zy6Fru}qEa5g+OU4Ns_qnJsyGiLX```-Ie
z#oVzZz7$)@JCQ41UK7Et|84~bSMrW8lRaVivj1GeU3qL3$#RF-OqdXOJwE-ZAhmW<
zKss{Mrj;wZdT-cek^PLa?%*o;M?eF!uq3b{-2{nn7n$WJG~LPF@$%SXb_SS`@^3*x
zx21)^Uw{2=$m9jptXaclE>5T4HrjhHSDs~#lXO=KVT>bqD2_7K1(w+vk-m{E+@8#+
z<#_EvCwI8as{UQKPHk(9tmL{umQg?ZST=nV{RaJ%C1j(BbpFU0Jl`Zb^pIxmG&6~x
zdgfUp*}(|xizDO)W<*0g|F{5cobxZf^r~T!T(-o_b0Pm7kz=cJO9m}6u?eN)2TAe*
zG7#S##P`H9sB!eTT{3d{@&ew`pv1ae(KneiVJWHa+itT>(A9^gJ{IhUchI%{rCq}3
zci**PaEK)_l@x(B5rOJ9v$SNCf^R}(orqd8Hwhnq?9A8qRNA^=_<n@PaXcyG)oa!^
z&oVjL(kUmMV5%0bu<^M!p*h=j!sUxr-bjd!wUv_ewQ!r^-@7&};*C$+<#dzet8m?X
z|IXG9>R<oZV~!416G=Du#jlsiei3&oUYY<rnW*sU>oW}*IpgS2&z>6Qx&Av!M$|Z2
z3m!^<wvr;C2$X*WnCu~w6w#Mnn>j1?rk<PeVvq^Yx7kUBeA*?YP4whjZo9)}p6A$Q
z7q<`WtWqX!Ti??we7j+|JoZ?YtcUQE?c&+E!e!I`&H{v_qN%z{GXG6#CvAUi0pzns
z?NW^pD`K%EbGC&1A@2kkyk2_wHP-~efMoKDquo;Ur6ONyT=~*Eo{0>T<S(h^O=5le
z*%`6jobh6`zeJw5zkF&`Bdbb2BD2@whct6tVzQb)A&xA&66l5fB+ib8Z2_NeasNk=
zgp;fO9);DaIL7!<vqpgp1e=y*vy1ABtN<2uPLGu?0;_e97lVut>4wu0Gi~?Xr@#=-
z#~U@9%3m9qfT}13VgB3iW~9LS&e~rRGJj!YW)=;^GJ^NsKiTbv|2^>F!{#fyY#qc*
z-&N^slI&xoOlIkvC<5atQy+~w6&&*!!LJEQ9Tkplene1j*r+k)x8Hvce#;JwW6s<H
z=ZGBhx2;+p9b`$t;ZKxym@s~qWQj?^hIUzQBZ^pJ@vgBGqE1B~yXofJA{dHs&V-i=
zuYnU*m{(*Y_8`kxVB8H8&IANsh-DRzI`Xh^krMwt?${PV8xKDGh>6OS_uxa1n4u%?
zGH0Flzd%@}lCQYS{RWK{?l41g=<vJ3hl~C8Bgm5s3B@Xg4q)UX8xe$XIr6T%BOP9(
zFC`!qVhm!|xsoEVCL#dek|51jtdJ}UfsX~p_?G_uJJ|{83(>#+Qm{O(-;V4z+I!C+
zGsau<--*odKycT<Aw$g-S9dhsd-av7D{TudvQ#v}bd&-FF7S*${w#gN<O#>O4DNk|
zeHKx?7A5E@Ys_AKs7OJ}^`4l`B{C!_jwjv!U}RI1r%VkLNHS<i29lJ*CAD~@G*<M3
z<(?!{%p=wyf>D5PvRTu{MTJ6p$Z1C&ai}|rVmoB`D97_c#a!UP{CD0BA1=}FiT6!5
z<L<dPvJEnVicurml=}p-g9Sw9mx=d25P6LUAAZzGz(Dn_s>No~iL9&#6@eTOz{w>J
z<%2TNZMj5KPp*ucL?QeZeRS~95y7|Pcagg9z5jtb<P4>I6*rX1Ncopt8sWA<Lt^D#
z(G9n<-;K!1{<T)hewuL<J^hHo4t8B(sk}Sw*oN^hOz2H<!CRC){@7!JDibE%7n!a2
zZo3TCtro9#=d?H25#s3JgBl0&0Cgb7=tC2NyeM;gtD-(oZ^@E^pajlAJpVD{?r}@~
zwLAL)yR6^Bf)g43Z*t)NcIn=Vt~C1M>^XBIYmy}r9XE<F7@~(FXT{Zzs>d<DiCYH_
z33SzPIhn!Daeo<3DVHKM{u(bcQvQfT3*HI#S=J%yevlid7CIGNox=`clS1;Xq#TU-
zA=ymeX)nJzGqMx`)^WUw3J2`p$Srx!K0*5MuQ0*G!9Qs-8_SomOgO}(IvnOvgdMFc
z1bs*KO^+!886l8{N3=NV$e<bc#W6=0{gxBLTjh6ndr*_c&bG#JG6)E743{IIlqHAa
z$hRveO)QM7Uy|e4s&{MHz%@apgQ!eTj0FSl7;3KT+|69t;o4$4K90lN?zl5jW?<a=
zw=m1UzeE)mWJ%lsw+}Ymdfb%gaB`gs{ga7aAAj;mY?h5TY=Ae8yIcu<LM9>;7<~Wa
zDUnUFf<&D2kP2yD#mF`}nDSnvv87`}g$IY_18H0W!2M;5IrppOnYY_#d&7;rQ<jjH
zdL`Ln8*Or6fggv7z#~RsPc1Hov3d*gF@#gLS<@ydmnG1B|9u;|WB4bAj~e5aXG$q#
zf825B2p7N|KCZtN0Y#vc5y*9rOVcgU<0v*^;{Czo7{A&#-+pKAd*GqqkY6V_SPDDi
z?wRD|ahk@LDU-4?xfC{RR;z;0&7&qOi+y<U;sU*kNg5I`oyj$_Et9G5R&*NLf917k
z{))Z(PV2ji8t=2|7r2N_)cW}Bvv|q1WWp<U60xPA`w~bPM~5A9P>@NE1R`;|H9m;q
z!9j7YW`11wzubT3HB(FOwa4y(zxADW-?PDz1-?ta6!HyATjMY3+M`c!icESEB*kRl
zsQ3vAlguX9tm(nU5_YiHBBL;=E{am^1RJLm@ogyBO2Y3X?<yI6k)KXKyM0Px0D0F-
zqQBFbbh<=JhfDFti6^uQTE_-Yd`g&*$5`e&j<^?={_fPZrx`nbVz6ROTzNg79RdZp
z*0QTpE=r?p%zyhG*H;uznZcT_^8|y*piPk2S?$`URKci?vWDS`=)?}!bTp^8J;jh}
zd$FDM@wRnf-Tz?x3+*>nrOIZ(PYh%PWs#AJ*}@Ejeqh?UXSFk(yY+M*_q`8HF<;tr
zqfKpU%UU&Sxb%l8pVDs{J?E^`gSP#hqzGNVTqgTT0}adN;HZRdy?ux|v)!p?pS|{U
zGoru$;RmMxK4b&Dl8lJdg)tGF1Y<(@Vs<by-afbZ&z(2lTzuhq6m!Hnz8D@cIFd&4
zvMaAMXPkDbsc$25*S1+5KKbNR!^~CI`Q^Drt#wVNHqxx~JO~Qv*{8ob@r2{d?)I9j
zrA(S_?n_cm%C)oE?!42EX2T6Pa6t+<d715gn7w9|Dpjnr{5Ko$Gsgz<J(xICDSW-T
zmSJ|drjzY!D>qxgz5n)IoIK^>fC(Yg$dVx`^*t-|JMX@4F1L*NBzw=`Mru)xF-U_4
zbX?08))<w__)^--@dw}Oe)bs>@bsNEbYKLc&pT{i&pAY9y!eul8IF7>yiY>4?Cj(!
zb~%!te)`!xyY;LvfuW7m+!(~(cw?S*s87yl2~O6E7J~Vlddi9RTVHG)2QN5W{B++^
zE^d2To0HuAAT(e&VFt-jM;>mtSNe(}PaNsA(Z<eHjKtP^Mse5D<BGs4Lm*G@Cq_B=
zAY%?QeF<JY_2kxW35BKBphwoI`zJqa6{H1eZ<X;tXzF9r48gUmwT@Ckc1)RljdQe(
zy#}+WpuYB+t&eMIcC}+ZhGdND_gS7R*%%JkufRYkZM$tL871TzjCT#{*EerjnTCMd
zKK%!nwsu@%X$knpd$x}c*s=b-_dk>>CE6zOb{cMe_+f^CTa;WBy6Zc4cMjy8cHF@^
zT3HGS{w_SDM4d@fIbYD{=@m}XTVu|(vKa~u81r6z`Q=yUAR9pCWH~Fhy!`5G=7kqu
z3EDZ=%RUkuEae@H7~?127sw7cCqy}qyEO9D^Dn$)2wp=Tx%&DW+&fy&&cMc)zVM?@
z+yn(O;oQ*i8Y9c2$F-Nq@gc)T1<qxRTdj|8RUq$Kx$zUbgfoE*@-DOFOSXjE-KlF2
z7wmHXgAY5oyIIo%osr`!`>bBI0hipf&^fkz6s@dxE9%;MZ1qFHA0K3S)pU1>aSnb)
z5HPx8JFB-Q5e89=VXbXIZylSd@B2lIoE+_Eoo#F7TM5dJYYVv-eF@!!$x1k5-+XJn
z)5YZ5gvW~!GOnHQ@s;^aon-q?c5i|`=hzHtjBV%z^|q^1IJSN40(P00!q_IVh2Q7K
z2kvL}s3{IpWE;j6f&;dzTifZk)9lhmug{v}s#LC2**b)G@~fxplSy+At7Fp_##RWq
zDV=V@xQ<SPBbgwwF4m@iLxBv>@bX7(Mnc+zNXL)vl?@@koqfh>X3&t~u3GPY0}K<V
zSYn!`yuSSMYo`y9A#w*BK-=raE<v_qxlX@ZZV#LtZ_R((+<r@6H|tu?$89m3Vz@;H
z!ge!z&YR}gW15>fwQHND%a*$1cNH$DMjKK50NsmhA=o7d&>~Qc+5ewfUh>`tADH&%
zo<&thEYmjK+6k~V5YT@0bzPjkN?<U-fXI#T4E7-=??`~RJCMUaY#(H%M2;PC*BGnY
z{%IQTzn|H3(@m{D`I8Gm!2TrfMARkt&Q3e^WOMVagWT!6tzq@E&p)>g^!?q;T)ufG
z41V<SCsEZ?j<rAUEYrPbUv~^%438(9T#Xvl9WEI1r`RAemUQjc=SH(h#ex99lt%Q2
zB2dl|*n7|2oqUXwqtQNlrInSVZg+zX)^~PEz9aY|w#VaJwX^{#`#5JTfj_UlHp@A{
zkjHy;?G!i-{q{C5boO!#J(_@*ZEMvs3m1ND$bQ9=G$kS7*>P>OZF8d2Q#nrn4ZMFJ
z8wk#FI8Fz6;K5+IB<y{@{J>a&qX+uPjwNL7V$9pX2KanwCotoD$0iAdc@x3W+%LrB
z+?#LeQLKzR8S!sVyL1qIk8!_y&zqe6oGd3S+XL>{ov{fg-FwnGx#aohoatl-#&0I4
z&^Go!Y!m2B@ML%fStsfL7F$%2swLinzYy0z{`<oQT0d_yhqgNAD7Ta_=egHmBS*V?
zB?uVX$R4}xYBt(vLz~s&TQm8gsjjb-mCQKoLre^qRT$WfvzovIKjULTsoei#^LX|3
zS=KrHmkS8Mo(dmEu4MmB>l46%jw}G3a^mqen7g>G`t-IZ+sS-$Tsic&ML+&%SnXxI
zI@T_0Ww=MIy-4oEHKhL(0Y#wPBha+*frd<11dza&uDZ61Ir+rn9G_s!z^;t1D+q+L
z{={6eJ%xcv#~Wnaq8@=THEV92lEfg~9^<jk8_)^xY2G&IPFEEDi+e;CVR?4^)#&rs
z<sj_IXPuGi+jb{R{<LbYfzK3v4c1RS{hVpopuW>J@X`M7f&$+yd<8y&T^s(_@0Nj<
z?;r0bnlfqUZ5v1g-;c{YUC{6JfiDE#NakX6QQyBVZDhJdpGCI8zAZsM2d9}}Rk>0n
zXAi|D3I9j`Ke_dBW*-}%htH8^G+(rKnP;AR!R%$_N$d!bHW4cu=0fm)bXAs?1c!Ya
z?QNgS*DfHw!=;%m3(9rHUqTQQ)PKP3PELi-!)vj_-fN#1_XtTqwfkZJVYm3!>i_sZ
zyIEQ5EE^lJUER9wUJ0^)_>pOeS@virHv|fLfL`0Bdv7O0Tz=K{rnR;0Fu{;#K%4>c
zfY@|7=KF(b;fTWyv3~VOY)1E=41xdH9FQG|4dI^fH6i;ze0%tMh4P`lOIsz`rW=nk
zZ5x{b@eufc@Y!E|eHSNl5#zwSi>!uBFW*R1yS(ocCf)B&5j2Pleu1?sDCGx%b@J0p
z*=q&EvN&ZkHG*>&IG&h^3X^Ba0vKnQF!Xin*~dCFmpNmp7|Z-}3=Ak8NmOsU?cAEC
zw1e_=l{FFyb?JDu?7A(P9B>Yf8Z+MgCgM3R>Y2cjIKgBsvsOyGCHdhi=izqf?~#We
z>J(#`JhNgT>i7c;%ogP~i5M^>wJKShgm7Af>B`G5HaFM-9782W>w$xZhKso02zm_6
z2pC~H?bMU3vEV)TOn5evtTN7@PY5tc1D9VmywCdHEE|C_hc=}BT(FV0QKk{3m_-#u
zyEfd#DZ^3c{8xf@7_9HOv%p9nF29o%#{7(1;qxW^jYAt_6yFX8Gotsy1oOD4{khh#
zT{$?l-g@hrOD}3~B+CxY3jT7zlysd$l0%Fm{0X%`_iWkCXv<8At2$h21=ri1K!^h(
zE)b(h<Nckm6xne8KHJFV^`Ih9A_VgIe)1h(cGY!G*dySRzwmdAlM}v@GzJrJB!q&9
zKre*h+$V%p0;RbY$_YkL{=$S&`mjTqg%88niXV$Ol3}rkn#Npm(fQ_58@P<qaFz|C
z;xCK~<2Qy|_*O}Xc9V$l_7eM?Zt8!ldj`lagNKeRR;46-vRGp=2hwykrdIL8$#+co
z^d*Y7TKov9zRx|oow>`(a>zm`Li|M$fdm)<A}L=t9?>{iyHLDDRwFnd9g(@R^L1A_
z`HOE8#SbTc6iv1Pg82yY!l6u198T>5-r7IvaxNnm&XjBkXWDu8S&bY$&S8NZDza#}
zEdsP96L9!ke%_pLtNMFQMBwLNesP9R?j7frWYbB91+z>Ku*ONUgrIYgO$pt~CmHu~
zZj#jqzS;NY+x;TJK0zyCJ}M{WeaB$U#1h7WC_S0-`&nZnSxmAexkk42ij~h`9Nlok
z4Nd3kuXYAKYy$)U_3nF1v8FhHQ7bCQi*pxWc)qh8kcAXuW0ZbMkkJ*FU6eR0n6{W1
zECE^kW^z(GLU)31_vq8l$yZEx;x9~0Lh5kY#nw=lJ<7;OI2B~_3I=5{uKU+nVBamA
z8yK5~;5P&u31P#b3<lJ6#Jyp2_;A5TPKHaeksM?Lb<v5Vh;ITX1by-KX=Fs72x#kg
zO$XEU#y)OB7J+k7G7xnLNVu^5IeztEKO2O}SWU1b!Qs3^qby(IFDwV9v#W3~uUVNx
zGSd(=>IaU}IVRUJK}s?P1|9Zxn9PTbOae0)TlfnTwh1!xVslYa1j-!(X?O(RAHlNB
z>?dF*iiEdDos(mXU+~Il)1P+sYaA#tSysxh#Tm_npC~&o;}UWK0Xpc%KL5@|2KKMZ
ze!BZ${A7ZqEE~mgwfuz%J6r4HQnP6wPf(U%YJ$3C;#IhA)h((xhpB&@`xRpBX0miR
z5KPX8w**_iXqR0AS0)qpx~YJ-`{OE(bjHLuyM8)cxF*j9{)>IJAe+PM!5HlK2_64w
z>y#(>Jxpm{#c=W9H_rv042fMuPBIBwh=9DQk5+Ryz|$mfK+ek+EZUvcMt-{O$De$b
z@|(%E`3&+Ru;JP(FSC=}Zguulo)>>nbf67>X3|d-F*y!D2@{zhf&(Q$P|9PwASk&c
zt2szpx>W=efh-Wnb&yMQ3G|t3ue#h#ZXshZy7aJ-V<KxYMs&C=^Wc}rMhXw6;|;8M
zAhtH-?GdBKCN*bn=yYvLkQarq(ZK^{j3*(2Bt`HWLr)?(2CE7br);#5;<dv^;5h`-
zLPLfX*@wwI=F?>tU*NJnaqptH`Mj61Ti7HRJTD30_3N{r4rA<uJaY&iCOG6u_>K2%
zv{$fHBdaY$O&SWfPtZQTX(k~dn-S>EUzkWxL#8ju{F!n-$8UqA9Rztn$f^86zMsS$
z$lxDAQRt3Laz#gvlT-KIXYU{jx-@&{>21vHH|DzR&II;#yrGAj3bxoE;J*@V8JsBG
zDal(}+fG<)xJ!NaUXpxc{5|)&zwk8*Y$fN154(Qhi|O6(7UySSG8cbgVnXHRmt2@~
zIA8jEx_3S0q7gqzTHkN-(*L!0b}?-51Q4>aOPG+?k?Etzm)ki%$G#gH<Q0WfZpU&T
z<#M~;N~<MVt$3N6hKzGboj{QzN*5whGc5RXoB*a<`u2)6Jg&R$I&PL^^CJ$WXd-Q4
zGmW%8rT9!}2Dlp4s~4+#>@i0hg1=Z2CW;6sx%SG--R!5R^DFxpA1X6OF<J|WAOpkh
z+WA^@Y>Vb{Dt6oMv{Q;j(^8lj&|yOHys2k5XY7^bt^6_^!!dYk|K5=SUX*oh^y+5c
zgZ=!f!T#P>3C6fv62h2s#ibV+0=|R<8=n6K=bddj*z=iE-(KB|&8ng<@AI+N=+xB;
zg*aRyX+_b|p4~b}E)4~47-(<o)+st0SWy!t+G8d<Gk%F=k0LViU3c{r)}hg~*lC=`
zM8EsrhhU1pfWy3}o&A`OnC%heq(SH>xFK7@XwuidPvKc_(hkA^L4Q|YacNFY6=_Ge
ziooiCK=tZdxiQ@TUgSIG{tiF%U^8UUErx7;NrV#H%JR%Gu}n`mD-m+SbyoRj<}gO`
zFl}U=ykr%mOi7eOYkSU_7#kT!e5K6C1t;&F18=e8^9DIzBb$nhYdtMLkfr_nx{SBX
z6pmW9#4lIA_Dk^aLN|JBi=#{z8#E9Xpn+0!jWuRR8Tms^mC8?KNrKTJzK6yK?4Qwf
z_~vfu*DIEP6YznPx_g)FGiongAsj_R>^o0T8nSnokbej|KrV=tf5MeQzmGY(xizX?
zV=&}I5wh&nHjtaFMoNl6X(PboBQbPlI~$ek&q6b7U`LpQpH!-}iOaH7)5^SILZ3U`
z>U9JGr6U4A`}DXW(xA-uc(Tp3fIOc|Fj2Z|XM8?Grd+p9ZF9>_J!6AY35;WAE_!Vo
z?X=_ePPUO{V8i8bO84m6Iin?C8|}S!pj&h8IDIvI4Q5mKzA^flP!_{-ukKx}oUwhl
zYR13MJNpcC>HjWpx^z?}u<T)F2S31za>!x3@3w17mF0GZeWrw?<Mvx_av8m&44LTG
z@SjUBx*)bmf|jrW_(WUuIZOnf-Q2gQ3selB<2O91Rm&C*PqMS*gHAp9M04IbX9P>T
z(Pq(iTgmB>XM~*ZQP;h?!(}c|B1+!nzIZ;uGm~UqGI(~p_DYwjE$TY(P0nk8R}?yW
ztXv?F0gpg0MK=?<IoJET@ceU}6Sh*NN|8;F4Uq9UD!@xBF#cj!@`-P_Zk;H{u3suY
z`|Zy?%Z*VRMT~ijDcHxm-_X%!%343=g6RHt+;+2RY4sz<>L?;8yoa?@BBS^ep7bj+
zl3ylnpYa_TpMLpcos6rD{R6CCv&ZfY<C@6$IJQf&uwhS(BJ>HIgZb9|@N0yf>s+6u
zvVGn}Al1MDeVx4{>iJOztb2CvY^1$)R9w%OFB&AcyKAsO(BK+01PhSht|3U{?jGEN
z1WO=52<}ef?gW>{9U5<-k$3W)JHNSi?wfh*t@*1LboW`Os_X39d)G&(p>hjTD`(;!
z=7jGB#_4{gSfPr7z^g0RgmL+w00$H21=)(WgKF8P^B3$T_&w@P&Sy}p7T==7a;)l1
zC+erR$ma5Y&P2uN6A-|oSMN$^r@?Btq(sD5Dw~H4`fA`+!NQwe=eE_MQd9_wNz`Dw
zx@-b^D@!u^8}+Li@o;D=`hqFOp~h*Kgm_D#g$T(iCMcW>m)x`F%6f;Ux?_kC&v^!4
zON*Ti=<+4v@+K=*8sLheibZ_MH@#K93wex{6y)tt!q~2~H@}kSeF^k1FAO40Y^#0c
z_u~f~_QK}fD?9IcLYn~KLf^s2jS;Fod1c?MK78i9e%zveY|ePQJ-KoF-L2~BS^w>i
z#5W0@o6NcVm2WKC%2wE4x_C%jdfW;)KQH)s^>FAMAM>@{_}$n=+c{0vn#vAZe3NO6
zl8jZ#W9gTrx})x~+}+<;^ly8(YOnR&o4_iX*zWtyiWu^#wSn*b8PXbSc0I{6?0X21
zf5OA6c%>3k6ZsFH>ech`*w~%C`|xXwzI-yQwkYOHsd{a)%wK?Qg}|4Y&ct9!QrEE3
zH>wxKYxj=2{wL#4i0>y;nZgvtZ{Ag-D2Vp8>+-!sPHYO~L(=Lo218YUR#<ZVtlA&%
z^wS={t#PD_gh<-r^63-hNv<PEEq=%1^VU5;Du{U&D1=)4=SRTLCkt{UwCy_65W{Lc
z-oV2|&J?td2Xj?QZnM9t>N45xm!RMlcfm^4t6woDCl=oVp6)LyeByqNzF?qWRJQlQ
z&Uvb~9Ja6j7HoSO(>;>HBxA9%p+J+hRo(+y#a?BKc@B6X&>cS{-Nxt!O+3J2+{QEa
z^cET17{*iGJu8wUVc9U6-?fSbW_*)h3|P8Rk@NczQe<UU2<b<wf1z3FYgg=$DK>j#
z9Zoz|9Ko+)k^wE&T1D>mu$Z?CfYT1RdARTpi4CGy)ZXsqJXfmTjc&MZ`()GqCE(Z-
z!CucxlclGLmglLxp6^?R@Hjk_E>u0*avo1CiFFzj3zeO{P`%4ZDlgb23bMmDX}#SX
zN6bm=;j6JHrBNUW1de8B&SSn6mTyz@;_!46oLRQH%|$B@a?K_2;47jsMWi$--lsd+
zt=@YaDJRR78`J?FI-(0E1Q5KJ_QNDbQYhSgsFIG_W5e!M)K5C@1n)L7G$b5`?LdyV
zy+gu68;7&S)Tb_~2M?g$fW*cQ(BoZ8AcR-xW0vRo;SKM5A}D&Ag8vV-Kj!-ecOm!^
z)M{uAgpaSr$#mc3_%tdP`l&>;iFFHQ@EH2-&(Ufz>sQwXvYc{;dWEMX+v}vtI4wIx
zc-tI4uQtHpEjJLgVISv2hyT2bCVAMq5gf-`2wSsdejB<?298y>R0GEyb;A>22@CHz
zZynG@F4EW%tE<0S=bW^BJr`qNy#P2frrRg6rAfx@72_DXUJK_*@wijQE9L%ZH@wy&
zE4&9Ma)L&42R}1)R{j(LlHUWCoOFZ}zkY<2mN$0!cSDyJij0NY5;t2GYVY?gV3?fk
zU6xIS0fc>Vj=tZRFeZ`G^xFVEj+X-6GMxlck5@GdFiS6s%U_mbeB_LlSdo;l{JWIl
zc@hWIwp?YKQ_Mcr;DQ>SMvW)l%mu=(PqaDw6zxWTKwIp6udPgz{IV?b^Q=8d|H$_t
zaIq4$k?JFfP*r2xBWDCk3B>$z3gr-fC@wmlYS+x74uAHeF~-Ts-Z3kN-5`_c_2l?E
zDn|wRRZi$q&>SOD^*!QsezyIod~*SJ6HYSXZTrOTZvej+a&;hTD7f7Iq<_QFpLb~m
zE(PO);ak85$owNl!j7LU%%=5E$Ko60ZfgeItShkKPNCqScy4?t%GtLNaT2?k!-X<N
zC(FfV9L$fuT!^`89lumk#Ah8xvk*BsJMQ0iTkzjCxG-$F#CF#_h+5(Mtf4|wKd>^;
zUHVBX*L}gV$Sm2CZ~e!5y`220td$kjx2G{t2e)UJP(anB`Al-``p6iw&EZiL+FY7H
zFP|vBM)~+c6)fg1nHtJ4Oz%r;{kd>V8%%u}q4o;&aNPnO*~xU+vBNP)hF=}qs*ejR
z)}L3<!%vOvzUHZMUpp9A80Ar)0q`M#r+a-9YdIDiQT2l3##c~e^VbLi^ZdFy89vbr
z+}q^7Ap5F4D>0-aZsqz|hMR}!@iE8oK*e*8U7wiIq*OM`-{wj_7I-Y1gP?0KQJ({?
z*__XABQM}_f4;tQcjqmdn8mOaEOua--wf##a0X}~V@A>9k3nC|3!)tUo;eZW52QfC
zTN1vs@6H9K3Df?VA)c*95JE0HS^WMcPdwwU9a6o~M_i_2YY1L2gYVyzR!ozYP&v_M
zE013d{CU{cHeRsYe{}bjXjV&dU`ZQHiTIK&ob8w3<Kwcr#A$=Ui`Ch5)0T%ujhGWT
za&ZU+XXwq}9}>+cv2k6mvHC&gyt*XNQj1eQ`VXuPSezsg_!UULZ{Edsdv!Cml-j^x
zy=MKKk~g<^P;g3~^BSW#`XS(?)k}4*`?|)jtvRvTvk(Y>XSeN^!1r`~Kw)+4LbRBK
zJ-m}O>rFR0gB<aoaO+n=+6<VoZN>xSzK3|N!h?dF7)<x@iMuB7%?7(I5?f{W1TOP>
z@1X2@VP$SYXA0BLlKC?vxSzpknsLL6J0Fn%M-fT2LWyL%<Fomnl?Z`MXWT8&*@@e3
zoku;bALaxWp1~NrJ4o)^RH;qNWu{1iK^^_?U@i(Kb=c=a)C6V4XeqeJ<y9E0V{UJQ
zTb=iXZ83%^x(K$uDv9bT0GtS*8z}W3FGHk=>vR<cKD0RJLv_?;r18&&A5`o5_#!i^
zgaoxoy9Qkj$ajSmF4OTn3f=NbIbnvWCrC*5a%o2U&906$%mOu@{;B0`O0Zvk>VI)o
zs0dUQ$74+sC@)^|oW>fkK*}W|OTUQ<KjjS@R9+Z%qgaa%`p;Z8-hA{*TdWoBN6~rQ
z%&PZTo&|f-i|3&MY%+i`TZq309K>Y@UgRk8@_OH_)xPnyytArxiINhQF<DzP-C5W*
zc5G{RnFt)1F_w=d-%b5yS<R44^7TAK>ZA$x!o|;C?mve3e-0S<iw*@L_`6l>Wwq$=
z$n*?bM|7sQL!Z(Pt*FdR3Sb=etRmgxdo8Zy&BUKIf|jKtzrQSA0DoeMY~<xuID9{T
z&P}ma_c@11SF^n#Ls(}=V(H@tEtUBEin|*^wdQABV=teg``*UC{AVnw_;i|t2u2h5
z5!9s!MwYjxHV`dQ<aCbfyV8Y|_5oLtuV2#b9QllVd!J9!{@Lo7!3p{3C39wrRz763
zUk5xk|J#rCe~x4%3$R;KYDenr1Y85PB29=|ZI3*sOKr?ufO@V%3#LWm5MCg{yehaL
zc45#tqMthc2{@PE{&Bdd09;f@2HymI`v)VG7k=ClFAQ{6ZCNo&uItySL&C8HeU9o&
zgg0viO6vK9ji@6wFIjSdWB!aSJrmvG)PAb3=C*n&|2D%WAL&m4SVyB$O(@i<pQh$_
z^N+cY$g`}-1EF_2`WK^>`1!}@u>nm!l0QBUzr{jX<@v*T)l}c~_zg$*RUP$0I*sxh
zsgPEUwF%mPrum;0@crKw!oOZpsF7b>J?Pn%S>ou92DbtxyOJ(iEt)DoLCY>0SkWi0
z3*=xKV%w&FrM)u$`keWm?^}mkKeGp%PYb8(w12O=@%uk|+y1TkI)Kzic}Y{1S3yv6
zxr6kpmIR_w8Ye#s6=aIa<xirO{b4OT*JY&PHIS&Z^BMcz7U))<nzt<PYRp|>5Wh?x
z=4u+Svq8%K`oDe-;1POdFRyqr8BXb7QeT-7ngYD>-4)N%_EFSoY}spP3EIwwN#bka
z|8U%}CappN1=Y0Bkl&|fTMnmY0x;akT1gm3&FxO+py|pEIs)(*6DBOiFjT(8`}LtX
z$z~zX>kF5m(`Kv+rs%T@z$A{zL5cD|KgUEtz}g3TMCr+@pFVEjfZ7+V#@4kr!fS(w
zko}+hs`!37C0J6F*z59d`+7Z9sf<#DOBQ?$>F_=*vn6@BNlxr|Q~vHcDL-DUE6aDo
z$tqbzKv$T0vgDtiBY_cdrUYcEH!oT6G2)pnZM?nuW3^Ek;I_2`5d3fg8Q-3EJiz#m
z7jw)!EB=oD@0uN=MZ~83!xfM{OT&)1jTcn*+uo*7@~Rea3}ku(wYArruC38E1ez%o
zYw6&cF%e?rlGJZiEB!BW;kFAYpV`kBzSkE3>wq0KXu*9jZiV7RW22)~&~D5A;Z8II
zTX5cF+tr}re}#;HtrS*7OT?f#t1*Gt>(%Lm&hIZ?yUbG6%;mJ$qI^#ZB-4Ze6jZkb
zW+6kD!-GQk*fR5X2c~j#e8?nRMt1Ts?Mrr=`QgQeEvXAXjKpj93%~M}lotH^V;AHc
z)e-Pi#x0|;Z23~V+~V`xZ_B^LBS)Q=Y=58if8E4Sg|)$=TtM|2KvE7b5Y$5)L^EeT
z@*Nf`l)JwBl%T!8_Pgw#=<u&^{J*aH|N5T^q{u_#dHY^XhW4`mO`!WPL&v{HbRHIn
z;`Oy+x1bGZ*ZnuK=D&R}h#w1Bw0hk%jjQGVF$w?m-TxP(PT@j+Jy7B+&UIY&Ke$S%
zDcYxmIg0C!EBF5{c>cEo0v=yq`tNUywhz5*K>vfQm|)8Qp>4JjwY;I^KSi|vKeMxq
z2~6)x<8dXQ|H)Ns$q*^F>cYhx+YJBfJ>~ynTBPt<je+UazV$X*)c+q`MW-8Yg06!9
zDCqF`fAAbg-AaF#_E6d`8D3mc#@DI0Yijc8dU5e*dOXwK*53T3cEai=%D-y?{7$i%
zi5XJK;hhn?AJ{B>_w^-Ew7lZ|UGoz2Yr|vtyV7@ui_n0|4lGKZ#Xk@mg_^TI%CEDQ
zwf{C*TDHiK_ZMmx3EN;0_#(%qQR!jk&gg1K3kT8I?;*D7@Z?NYi$jT*8hVr6t&q_M
zTV5#zKi;vUVzosvybs5}xyuBN&N~r~HXoMT{?>-PEGQaIedW>&nI0DdeFmZg(3w*l
z@_OnAY=q4U0UnH)<R()M;CDE>Xj@_b+rFv5SQdtfe*^e9{bhrfj<qx`bRD#nd^^d!
zPw={|+TR)Vx)?R`Ia$xih7^Ted*J|t<Tj++*{6rY(wK(@P^%3JF10C+=+A|rMuQA6
z3Us48Ucw<K`z-j@u~XVyi>&5j-K$YxhyB{n&L?pCNJskm7udyONs{AkGA7qE_ZBcC
z9R&<2lN)SpW&VkETS!5urDfg+`O{S6<;}gncb9G(i_T~Je4qiJ!sDpy|8fZa8Z-~<
z!!A}Ka;YHIRv1E!=NWCG`>~#I9rz|*awH{!mY-Iq<&N{pW2iW`S_|FF4B)to8V5WU
zoXhI^2-!LY82R}XHu>DYn64cRvgO7o@HvD$RSw*y<a#-T2N~bPp<pXp+ocX>gfpL!
z6<GSNvFD(jc0*jTj??DU@%wMHlPxDy{%L>DqZcZ(PHQ3lPb)EG{Cy+-=H&}sMbv+C
zzU`2^cmtr?Z=K!p-ySHAH;?SeKTI-MJ`17^xLZ(eg(Cdp8Q<*oIW35$?4Gl<=A5fo
z+dvmhIpB``V&YH#^0vQD?Eu!^96Kn@-~2?3?<B{^(1&~T%sgCy;@O3JCxO6+)jR#J
zrB}%_3J~#5bVt{d;EQq2WWPVE|Lhy@XYp^Ym!KoW0D$bT2e5GSExu(Npd9QR*g>c!
zVNTs_J_7vT8b`EIH)Eft({MW1yME+SK{OAo^fPjf-{W%^fV92b&<tt!Aw3+c1-4{Y
zFn|THaA+@9sN$vabm)t=0@7xyUJOcljkmZGmyu0J8<?-t<)5)FZ@g#+(neTGuX;(&
zZr=2&dA2FuxNWxE%SON32&A)B)WXJGz|f$YiZg9#)ekj2qh>c9gZTBW7%pCf<`Y85
zGK>qCNPipvM%d`pf8vaI*Lo~z^8NM%@PW1Ev(BK<*A`Tvq)nLG8Cd|Ow+lk7Qn`#z
zvN+jTt|I=4@+D+J3obj~&cf<H2b=cA($q)!)b1GOblfP=_;jr_vV1Q0k|J6?%W48q
zSWw*T03Kgygg8J__Vq6~X+-kr-dwNFE>V-xvMh;9t+ZHmq54|6R<h4vt|^oL4MMU{
z$~)8`fK>WP#N*HgFlVMP2pqKTr(WvHa@pBGArraDpDt{9fRJ(th&Q`q43!^ILvja^
zGtZ?x;&VUcc%3|-GYsB+^myZNU(~t`QiKZwgzRS(N%aL++BAq4tKLhOd(#l^^|}Wy
z>#|nNv?})E-qINH1YdXSg(=H7E=s8!=+_rjHLkk&j5~}k52N(G4nYz*>bka@MY#c-
zwuV!W|Lg?sPw;MldetycyXmmey>W!0a<89OGpo<CAYby~Qb~6|>RJY$l@RUzez@Wb
z<Um6Wb`e{+J{C{GCxLdlSnF(Avz_{JrBoMD{Hq4OiGYdj4?ss^*s6|Vzd3}D<7LZ7
z-2;%KljaH!ac5$F|8qzHQ|6C0y>*WkGdX|olI!LGVA{GvHB;O+ZTxS=4mPsy5*OTG
z%4cD3{Q!bFv#ybQ27JcItX*+O8L?H1MZ?R?&HG!)cw2&@YOyOm8J~kR-dgWV$(e@V
zRxDQ^&@QRU<0^DN4JI+r)>7$bEYaG{R-L~s7BR%n**-JUlFtpeYdV_u)9QOD=bWQ6
z&z3X-ip#IZexH~t?C{wYw*P9&WQX0h>DKPCxE!#RT`XSs!4{UXmhXgWCJHYk>wDE_
zc@n@(i06xwU429P0ZK?n_L~1!G6X09#8qV!wl|P_`d9A{E!7M2oHGa1lD9ur4!241
z+s<-_fDWOEt^W1$WlXDfivvU6j$aw1>iN-qMFtPn)j!O#7|C4;pXf-W(Z#gLdkK&6
zuK3R3DZRv{_01gJsE@myK`~gr8D%kCStsb$uwMF8YV(cXK5M+N?$tjV<U8u12bjHu
zs@RXOw>QaZ_I>&J!<SKn1vueG|4PqT&Cz@T|LJmt!?K2)CO~t!W>TJ#f|;+Xv~1$6
zEUrqa;^8w|lD)?wo3l=XE}f%QOFd^tI)_nF!z&1RdrhPLtKVpVs{)Yse7>JIO(o3<
zP%U1jm!F$nN~LAi2V&1lTzg`{=2W(&puiF`nzq*elwaXRONl6YKU~c<*xZcAmW`vQ
zisCKWL>wCil7a;Rb4KCPCEm!tWz*>NxCGQ&K4BaI&L4GD@Nx31mJCo{wC%O5IKjO+
zJEE6f5Yh(R{xm#*+TCaZyhtFE5@QHFhQ&-Tru3KF=Kgy!6*NPEz<W|D^8AC(k{<BA
zhgiYI0Xw?@O#8<5@SUXSv9#RgQG}pZM@ji}Ms8j>{B=>lJ*NmFyEgTmU-#64|MztJ
zKXNH4bUYovTV3hBeo479P_7@l2_|RQ(m3sPe#@}13^wj7uPgU&usr(m$>aaZbm%CN
z|BxhN>*;CzT|_~i$XbWWM$mRxP}>Eu6<`F$y);v1o{k{=bnG$OpX>km@exk@&!*W9
zKeGJ0rPI*+>^$I-%)14pQSzGG8-qk^=Enm4AH&i{<{-Y-0t-L$Y-(XSz;R7JZxj#(
z9ajBe;ukr`!(8CUoyE0gA81{KzKhWBG4Ru)twi-Oo%F~^sk-^$FSE|7za?!#7wvEG
zg=)|w4Af!-XAzL&uLWwxexrESgE{N5Dj*`<PI4l3cn{P85IOi!Tf_=veg^jm*dd=d
zIBA=^iP^PYFU>A88@$*SR0{dK0p9kR$%6&T3<i%HH*u_BhLq`UbFm)W6AgbUruH9y
ze;DMXeBWIF_1&(^_*=ya60<wl)dQ~bH5aO)jRlw*oCgmBKf&ry%(>f*;R-w2IVaeF
zOCfFs!MN2mC5Yk#tWlt%yt26T&G1;9@W<nc546Q9Qnf<A$h}a7gdNsqNO_kGXmLYy
z#o7TNGi;>39{L)Jc&OJu*#KbCHFHTy1zZ1uu~vLtR`pN(EEgjF?k7tQEwKxAot&K<
zPmT3kLWgVToPJj`b5>0cRysRB9>+vQj<n`M>i_WiC6Rflhb3+tf2a_*a;z1YzF6})
zmDE6o0x0I4+<-^GG5H}*|MR-`uw;pYdhb!)?ul+}n&iCeIDi2??o;qop%z6Ew0jTv
zP$kCW+vXS`@o?nQf;?t?!cC5y%Asp!<hf5Qy6W#RYaAdxZIYHfy6SU+Uv4#rXnb<R
zILyR1_Gr0{-M8^AH4Rz?ces9>Dq7Gnozs_g_k?G|N;P4Eng#EOhtnFIV8%zmHaNZy
zqYXQ;O`t`lR+0<=^Z9L5aB1Xdu`-A<bNYi@(Qf-~DgtJuEY4!HH$OY=k!3pZ2ZFop
zIpa})X0cLp+dahnwX9VWA^{6e-7T$A4I3!b4L<@_tMl%`pK|JvI}B3!)Z5h!+?mC~
z!ml#|ifmoy^1yLPtY|nE8uO|8R_r+VW=aBbmAyPau)2#vS(>Xc_Y@=+8S@OVw;we{
zggmWvKi}cY49<f69IIdYCa*R7;<;C0Ps{C&K4_^R1LNfDF1X(TTcz#zfLQ=RZ8tk4
zfjW^s(Pvk0bqw~wHj`opP(*fy^+V$&*%J6kA9PYkfIhRNnwLUD-8o&g7SXGErS{P(
z-nfAu10fb<>!RC+gQ1?dS<4+4l~BJjJ$^$J{B}|%Ahf=fqsxBr(2z|$tb@Yi@ZAMt
z&;vsa&+Lo*`a0Fp;?QHJeRFXZPW|4*o>PoR01#e_Ev_Kc_9T_!u=!W&@t72qqP~YU
zR$x=NP|yfCHMdLVZ!Lda>&v682*c+b1_f}ennk}-u6tD?Pwb*ZJ@!p}Zod`S(A}J$
zH?KHo2@aFKy5BSB13ij%-n3cH{8oiVkbVvQOG|t2M{Da7$tW6Ah*uwpsC&RyBE!X-
zsq5dMPr~~w_Uz>JXp(=u;-lTHpy%#Mi-7B${m^rB{|>M<@wu;S&+lvDA0>I+{rJ`I
z395+ZBxlQ?eXJ7#+3;oE_DrQ-l1sD5k;dn-W^`~xWIxBEYZ^<_n(HM2`d!9Ei|C&-
zfE1S4R`hIX*ot=93rwo3AB@La^|az(X{o%m$bD8e4dRvxFR_CL93IT5AhDye3_2R?
z`o|ohpZSH_^V`rw*EIRvehjiBniE{K(oG#N^+lKSYZzGZRhuYuH|P@R6mPpcFBuE(
z6zy?NvZ#+{*ve|U*vW{Oxa+avzV9A1bt^kcx7dvOtPo$8fi}?4zXG*5PHlx<U|wl#
zS*<GeN!b}H5<TY3>e<@MOq>LV(TZk!^iv;XAi*GlmFwY48<hUt2WInxRW?a(gm8nY
zd2$Ey{i%X${dDLh)s2^>ZL}qakjaz0m5eR>c&LQIO`;d(O3x6s#gKHn)arPTz|fU(
zuI2HlyWNlWnsvQ45~Fa#*I&#I^?bau$|%|+I8lBe$)6dM%k+{&Q(t_vhCeJGa33y;
zEa?ar<xE48?{;%#jODq^TKiTFi&X7PT%bv2@Rfm8uIoqxMLY1GkEBkH(d6P`$&z)G
z(nGd}MY|&$GJg&xTJ)b}nKSed7nEqfIDwA|YM39EmExpkACs;MPfKXu&_kJpy65sw
zabPSbf=X^q#_#Q;HUGdn8v<7{nW7Wr^4}hb5x*=o2SfIF=k0C^AvLX8+knH&x-R^v
z&bpL}ZEhncpaF{YVIrb#WVoVr$8&a(_~ks*#V6Cr&6q96Jv!!I<%e(1pWRw)ujgxU
zGuzw##rc~Pk9u=*Uaomd=~J5{Mu<PWEt#ouf77-DCwZSNwDqAc^WrESmN-rSEB+}2
z#F#CXs7PBkauD{cTHLp$!}zLXdS*iSdfsnt;4H93!Ppb}fJ=q9-=|~Y(Z>z|tnH6Q
zONt_o?f0iF%U{)Zu?r=fEQK1Ii-w_Y4OOg!5k9V?W{dA)TQ3<pK#|DFT3!n@Dx+na
z&1MOf8NmwRG-oy!;(r-GHpgF?t}-zCl*)3o(OQDzt3cq$DezAtPs;k-`~Vl@7>_+d
zr|U#V(MQl0)1-9*eyD^_WyisXuUpnp<)K+fpwRjX?eRgvH*Y`+m1}qpvLt7N4c5^(
z05O<Wq=mD!Xfaiv<oxLF#PIs?4lV&IuBxlU1%3PWK<;xwI{Sz{xdTABothb2sl_QC
z2o?f8?2@C19}3N3>t&#Je#rh{!2Ma#CV7v=S_Fc^eee6EII<<raF(^n`Kw!_1olRd
zC$2B*Qb1v70EW+<g1f<8FDG@>W6aU;!wY=#AljlgcHJYoATkS^Exn`jf#91qUZ(rY
zQ;pT_Uably_Yj>Jzfv)(Ymd;S&?jd@^6s_cp1M<xgo3JmdIbzq#{27*4`9T0HoJH8
z^p(#yG&kVVEO^q_-ax&{a>$6vs06L@>DKWwJQz&%ILVKfbla4K49HVDtXUXrH7Z|X
z+gPitSTQer)pT`etZHzp=X9Zkp!e6k?v{^prwtAeHSb$7$7!fBUCQ;*I$B%0D9jwC
zbzd`=YCMQiQid7%X)ZPeoXc399t)CcT9KihP)Q7Ze;;PEwbwHGMg{jZX_k*W&n`Lb
zipm4XW!T1X6wu$n)W-F937`fwPV!izWGp$H5N3rmxdJ#jxZlX6LbDH+D#;06&+E@4
zLhK{=R1(`MS;?wGV_Bb`x>RjYNNq9^%Jp{-qh@xWjksQ}5RL$ef^9bZiI`op7boF(
zTzLA3wq^@C<d;Fw83Mcs;jiS-(b|U>L=&uIJvC#WY~zFv2F&Kxq?jMBAZf|^wALsq
z!prLif^Sa|pi?&Xs?{Op&!0XFNyIo0OeF5i%vl#u?V`ebZ<$EHl?#%HvB$_iz?XGO
z4Vsa#rZj2%|Bx%=(RGJz%>Le<EU!?1x7;1C%BLoFTU*k1(E<x%dn1(%A$i9RZG*C&
zj}Je}Xwvc#LVY?=Y&a5S9EJnO1yNkI{}BqoMIg^7X9r62z+KrD%Zl~}A#<{>`$+l*
zQg&X)Q*M^Xd`CWJY$~xo6sH(5z8aqQJ#Yh)E5PX_Ax~$}Yr$-pTGS!W>*&jVuP1I0
z1VAE9E7zHSN4^x}b}IdVUC($zVM{!QXx{0#1fleSVa9-n%<h@4cv{iB*u(+e{wQO-
z_&O1T2lplJ^SG4h_BZq&dW1DVl&(dX4w$(z%qC)^q3_>C#8a3XRipHCtF(fuG4-I1
z3r}XTb3(HxjV`il^Os9x5}!*C`xmUUQfJB5=8_*;Sd@9=B_vh`(VUg*$zF1bLG7$>
z(#)%~t-MHDQ4W?$d`iv3Oj=v|)m*nl3_S|mT2D5ww;`FclL&ni8AZ7VTd#FdlmLV*
znYTLJ#VocKIuF|{d~9fbX|L*VOqF>$Q)&Kfjm09{3YGslldC@d!uc=t)n}KKEMUBC
z%+bHtFJL41Nxd&3j_mliq0_$H4mBm~&4>%v&1ibV4%k-2XsHt~loe8LZ1QK%=}~RE
zZTN~afpPo$!&yfNZYKPgHVTxEMj#AX1#Kc>w#S}&-TLKz75#)1HqByDmLDg!jPjNQ
zS@&+&)fgxbHt=t{C_ZnsNL;7qk9b+<;uFd5S{_}X7qJIOpB6FVh|2owAzfj(Kp&Dv
zi9}EGro+&)ce*adostW?cDDpK>BasER}xJ_SY@PkujX9ePUcTmd9S)gW7b*)&jk9n
z{cIXI-in|>_mr6%n<H@<`@s@hW6tVJdrPNGHXvf;Q!stiy~_)L<b%&Bk?hj@^!#ff
z?QpU_sH=RVqoIGudIY9~bJ3d80D+UmOnD&LZerPs_wuUB)#FIJ%fxAqTu#yx%9JVn
zF6LeOM4d}xLdQhY_mSOssx9V1F!|V~B{4uebZi};GxBJDQsT)j4Ko{%W}F>!PP2{M
zoh$0cUN0PFuV{Cu5MQMRU%z9o=so@Eb+IbYfJ3n{Wa#<0u(P+L@Uu3o3SSgZy)Q9e
zPW50b4T!HD^V!N{#O1mRH&`dQ&-8>M^&X-7_CGfG0wNwGRsB@d2G1FfLav+EKSeQ6
zEwJQz2HW^8SM}P7rGR0NsH4$b;Dg_BR3g9TVOwBx^<zH8ACOniogam*a~$GC>*YT1
zToh-&o-DQvT6Nqw>;J}ADz-x???pb2_P)QfLvUv)rBK=Lk1~b!Db0;r;{FMZB%7s|
zo^U)8p1vxeow}XiKpbR-7E{xV5mfws+#x$#C7F&U_eQI7`-fVuO8F(YNFNS!clP#F
z#tG;)2!RDe)-fsg^~2^b_L5GIUieFi3h9SqQ4%XBt*7G&?7NJKy$XX43oj5H3Ctga
z&~mV*d$RX0nC*%?K0Vk;jzznzai_-6h|;GU9Ly=~N^bXTs@TFG;HnI47w7C1nJs;B
z@qbE+eX7fb=kd#jx9G`5(-T$-Hu<M4Dvy`T(kQzVc`BiK7eiZ|Y@rg;aQkD=PJgQP
z*Wm6&f8$)?7M;Xbb^w2P)?u<vA?P@b?pJ$TGckMG$+Ngl)Uwi$a?)A8;^?-ts`_I#
z7I~CYlLpU&jNN6+W{6{3ll2r*uLY87b&Oy=<n!ta1Z}p<_;%%LXn>BumTm{q)6GTv
z``8hG&dO`lby@)4@Bc!w4W6U;ms;pF?svbp-iz3nXejD&xF0;Xak|seAxTuvKRKM}
zv0~36$M4o`H-E<I!E?4c$f=VIX@EE<`vjn=;#Zdr)=EN4b)G^~%%l09?l@OQac56H
z{^(lVIlxJ~Evi{%=^&>a=Nlho1t?f#ge+W@)i}uu8)ypb&N%*51TSRqJ00g0(J&$z
zEr@UGX@7BAdI<p3KSoKn78J$~L8XLO)g@2Vw+Y-{X9nz0nm=1oPnAmw4aq#Tx>aiN
z<-J1#2=`5`)5us@<et$~?(IBPd_!-7ZGIZYeXM@d4S=2!raJ|U??pawo1tb>3d~#Q
z2GA#=o{Ad=ToLyMd;Vm*L1{l6#8r8<Q<IN{z*v;+?YxmbQ>Oqb8fNs!a-Kp5c!8#q
z5}GCKlUnoEe*psvPTNlVNlOgcw`B0^=r92j+55s%__Tedx~vp#y&<A<7jk?*EoZ$k
z_`z}E6l9!xHh$G6Jd?(=F%}dAz6@g1j8z_?@a`{j2#zw=zOEu4hR;@bz|1-&kg*xf
z-=rBkCwkfMa0u$E9t@K_bpQmt*efpXP8@Q)F5Fm&Z9@0xRX@yjq*KeO)7t&#{$^k*
z2*fhY08e;ug)3sz<hvi&i%$!Z3g4N}kjy}FNq!IKO-JK3$@mFsX!22c*!B|>#VomG
zC7E|_XoU=gNR;tvfB8$yr}RrfN<=G`$GB4wneb~@s4)?<G75OPK6y-{r-9FO%CEOw
zusqf%UUgiMJT;;K)UfOxQTOz;c2C*X?BT@Ac19vSe+`H2<0JPbvzpEi@SMDE=Q|4P
zX}k%2!1kGP(>7dBVqbB1@KATIyuh9p=mG6C(8G~?>5Dd6qN-=U1U!SNOug{60jaF?
z*}g2nXW)*_1W^+qTiq@^H*sYZZG*2646^!>ackTi-|Tkrp&8d;7&YVw79e|uA=$rI
zMw`Gu1t)aoodv;LcF^%KDG}}u$Ep^DBYnehY-ayResvE3AX*d>uIQ&`sXJDg_7r~@
zbs{<sXM;jQ%omOVwdZIAg;CZiHwU7adg|b-&Mj^+l8g}=^^ec^Aru@uvTp;^Buj|4
zokNK|-@jIRN7e&hg2_2vRfO<(R9h}$899Y&%=A)VcOe)};lP$hH#7(~DA1%0WUxjk
z7Y0DcAM5cD0=XODrF5in?M`d;qTwhAMrdZNY0@LhP3Mba4k+zZm>~4l4zDd#&p{7n
zNIED6XKoJiPv;B`F=m%+r)Q7Z{7Y8<+8CMA`;SzeB}Ee9d@%6$NI+H6kL<NYBW59n
zs{E188QphLy9rRr`xEO}y7#G0c==?Zbnm1n!(a1Y<+I{(^o@LB4c_%QSmf(%d}Fwt
znZ+XYlA6Z{&HM-LTA1c=Ze6gQlS)5jRwb<i?vc;sJ}t6mC+RQtR)qGD$@pC&;w?gl
z@h9=lb4<@<vM?T2?hs`(Ms$QAGHxxDPVkG4;r?&7d?gJ}fp3Cp_=+XTR0>rBh6a-c
zIM3VFBfcOCC2WhRAFs(amAk-Fo^hR$j1+fc$qju+mP;I;<2edPYW=kdu2HwQaK>Up
zZyc;qXqUrDg=LYOKY*w|<*r9pjhae<`$Z}qo^jpIdVy&IHU^0}%qXV_fr)zm5{*0O
zlGd>$6PaO?zjfegcGBkVlG4P;|LSU90;@hw4N*icApd&|@sYXEp@ka-mYQ_Ta}^9X
zQ_rs!MkyDMB>f#Rq{i+M6XyB6AuA$|k$hCQ@{C|yWM7XX=X{siTYKwfToAZkvjMpE
z;HsBe92@pzZLEwsR*M4L+(ywCUJc>c1SNOXn8|%TaUDX(5I%XG6Y?BNxxD}~Kj4;6
zzI+!WFIl%o)*G$n8_JLL_@xcWG<?>&SCVo8?{rJhwy3xLAi8dj?5rfkw~+1a4yCf8
zx~f8JNE`)8Qu3>+#hfpzrO#c&0Na*L$U~9kw6D?d28X=B1(M9brACcatVyBZok-B;
zbnZ)so^f02sn<Kh95zwSJkMlWxaKq??2JqqxZ?t2fg=?6qJ(_1h8~iBm##wD)8ZtC
z1a!oCH>M8E+tmj3B%UY}x%M{K&~DW}3$WddIP(SldHWN!iweXvijQzrvG7QU;e8s9
zPBoq87|=r|S({Xo6lJVNzw<WSbznm<5~?NB3>|nUZ|vt~G`4QnGI}6c?ftBkac1?t
z0<$Box@;`-sh-^Acp^_*VaAe*u)oZJZ|NA&v^cce=rRWmX`ONgS%o+@BR{@GBf}J}
z|4CiB`@n{7da-BmfMOuiH_E!i<^K6`YO)LoinS`U%J!5^mk#}X*o>U<HgB<uq%)Um
zJkmhwDgE+#_Wl#9?FXO7s_>RSxb0kneLJ~D4}$h40$bPi^$Fa5Ry7(*CIq^oU7=W=
z9`yChW0(OZx$cucyvh}?nTMp2Kgc~V3<VzsPZd86exADOTLn7cy8yPBv}we@xPbR5
z%t6)XrqQ=)7%Yices|fzKRMgwadpZVk1C`=dpqv&DS5pC5*SpKZGO*S8ce$;Cu+9T
zQQo=rmPszKv}8W+9*So4Cfuef#0)~^2wx*IEa9L_<MPjT<?<Z{1aRDfGGo-FALmD5
zu5H_dr$1S{NWL78!WPi$Q~IC2s1f_Pi!dZJTwm+t7S~;^I{3w~horxV2K~W3eK|3X
zaX&V|!(PHw;06{W46dWgX_Cy@r0r-Ae3kd}a$s{>6R}k`?uTJJn5GTBWRknldE{(Z
zy@ijq2Uo#3S|B#S_w7QK{7Mq^9N~(<px5n`k7%#suxXfqk}leM!`37?4cYUo?50{$
zSO09u!VJ8(u)Fgt*-=zXJI6Q$>y^;ieMT!6gtGqulm?>6Ch^f0k&b7^>A^is68Ts{
z^4!j+JLW6w1RJr{6Xr`*NqALX-{C)NwKv@9|C9yl7{WlFQ%FSKF&`(?rzRAR1mXFG
z@Zdc?Qw&Jiz-NuB|H7qtGJeX-EyRPgdn)s-DT9XWb;ifg<fscQ0kU7c->KZD^Qidr
zQ(~~~6p3R@r`23WtAbL03=TIL=eMnJFlwBgsS_CRk67t-oQA4<?M1eX@M{;2%?dT@
z67F*Rq~){YCY$V6zuZuIUc;e2_Dw*Tt{`&!UQ?Cmk?viR#CcFoz!<qZ$;o=E?gz&Z
zq9{ULWk7nEf?RBeQZ#>YXI@COoB3_VXQcS_LFp}r?RUU=S-^S<$`sPnIR5NHKS$%@
z((F5%F)(W0o|6XOlHHRZ%&E_yvagD>CW%?iYra;j*{ka4Q^ut>=Lnyf)MuX|ww+3u
z%qB}ElTXujTSrLsekgK?m#Uv;req5inJcAYq_EzOB)w^R;Z4lK8HWQo<D46{QrbE&
z@;TZ;UM5ugw9R1lK>iw;{M`rf@upk+2zky;x;bS1DGuJH)XT+XMslfi@qvb5{M><6
zK%ao=WALk(6x~(nGQE24(c`06ys_Uc+OO~I`ei%c|Lxb$njrfs@*tq}`P~qh4_3LS
zipP=n;Ue2uaq*OQh&t7FMt38trPAqpGEP38Vp;t(W6e3A$lsZ?nMMLEC;k6`QhDhH
zzK|<&tVlTuY<iAT@CR?89)T-d?s?49$p<awh(cKU>~AFa=+LNwak*E+2Q8^9H+e$U
zLt+Rlnxy*ZDpCFWIT~DLcW~6-u1UtMRJ$UY-#HFL)LGX&$e3FU0^HsuBRfv2MaGa=
z=dAV>B=n_6pQSy^u4sQ;97IK1%OEJur1jq7(avH@7d3JT)BhHabQ!Iyw#<kqJ}i(*
za$EhJm+pLdL8~5bR~V)647R*WBs<2pgr=*SWBmcl+RrCCC!wvIN@z(L7VSYQ{bNfU
zolE@9dx3BQPo7W?S!RyJ2NK`Q#O^E@%|c@J2*ouqNP80AFB+{e>d^yNgJcvlDZO4N
zqjj~F)J8&Le`7jP@MKGCkOo=LSRN6PaSuT=k?o^z6NOMfn8!d=49nAGK46Y$8lw|@
z@_n9?pXk|t?t}zOVlqCF6%Moq^D0q%{@ZOIKny~bfP=4ho1xKx^nG|}ZD~+o5(uS*
zJVMiwMq$#T`nd(g+??mxd8A^mi4ChwVk~YqPDezt#tD{(JY4~<q@g@}>U$~D9+Te2
zo<;%xjkX;ME}u@*2&%2%FZ;OWWBc}MiRA@$x}S}(K60$=P`0u~=Brl|n5Ij|TMU|J
zfpUHCY!W^`M<VK^9~rtF+$DW<TCiR|1Yv9My~E?PSXyX*XZ7+1UDdUoEYGRKEO{XO
zMKq~f^?K~yEl2D`xjkh=3bGiLf3R3^OrTv?C};IVDEdMO%v4-d^zu)#{t{D&2X?h(
z$1qQAqUrNsg`~+&!8<3aWv6qQBspUJXCgdM6a@9wc;p-LPggU1s<xX$%nyv85X{BL
z!(i2Ov4$F1af)siPB=zj;4FR=5csL7$yoP0)VV!!fr~3+S9_Zne_q_`XuUk7@}agc
zOszPutXX<9knsrXIM0wi^~|9bAh2qKE`6$?>!2OEN$tq~K8!AqJPgRov(?K+))F_=
zjh4D5aY&DNI+$*29MQ~wykC1S5~fKmOz>N$D$h@~C=>9Na6Bh)M(^Yxi{v?%{8U5E
zZAIt9%7$o)d=JZl(!e=NsPOgzHT%mJO^zG)l#s>LT4DaflAKtA=A?q`cP0s=Rk-!y
zS1+c&KaQz7SSerFe-{#Uw1_^=fL#P%jJekwCe{sd49rJwo^w&&yIk0ZjI1r)k;3E1
zixgrgHa%Zwo1uu4msA=v7$-l+mB3AWXaw4Gg|!H|5e;87_y1~-d2??H_FS#o4_x|2
z4?M*POYjt<k|V4Jswx$}KS2=x26Fp3dfvEveX&-ka{t)@((p0A-)tP~K(AfxJ2T|9
zxen)xRzo{*QJsxBPMtF<tY72x9$O6l<<l)Wm+%tTomqMZ9yPVu2t6f#v!D{vkA@YW
zr<6d!&_k=cOgoJhXmg4FPQ-|rm=fgruj$k1_s;GWxRg~GW9h5e+<D@5oI7SQ>J`%L
zOrI=(m|^t`dy$zAH3LhxcN~S?o=)`bHGW*;%6X&=E{+{|Aa<|COd-KL!$DVzJgf8a
zp^HiIp?N?fkIN+s#+tRzkBeh&qnTT22q&k{e7y>>>{z4RYERVd$#^&MY(Z)=w)?|T
zOZ|8bRw9Q-s6pgtQ9Z1E0KU`E{Zq2~Paqp)Ku$|lZRn1ACLBTo&xf|Npbc3tP@DIk
zv@8_V2`==QzAOBhX5>G5+krL(F@<}dP@^?;6I5H&N-p2Y=*`b)kil*q>2k2^nRA{8
z-64;L<sz6f3!TSG&+Cj;Ucczet(z-fyO-U&i(z~h_3Vxb%I@7?TvS`HL?DQEr0^o1
z4o;-YL*M5g@I2r5hXS+gIt#J~cR2o^`F#DNH3Cy=KA;qClp4VyWU&lGNA#@%uY>ag
z_9kO&V(gLUl<UOU>=^s~BX9{fMBT5QTE1!UmyB~KMg@|3qW0VvK{)9fD(d{gZRCCk
zG5RKts6{OBAo_3m7Eb5Z-%ZHG6>)QR&;run)UN@_ITB7KhE2pTFX-%cEYb;rQ7vTV
zDZ^MyAjp~22Qx0-EW=VsgPBe*NrTm*+Ww4>^oXvbw%%PQD_0~BdUD!31*~}nT@@$y
zeuX)%E95rnAX;#r%EDswOxc$Xzi)O44n#Ht)m`KlU5qNO36vCsY7Zv(C*3LrqYYw2
z#k>Jmfh$Mo`~!HkQc38!x`)@x>;W;fwqxFKhMMy-vt))4mTUZbP8A%nj>UmFm1EV!
zfs>(QFo;o*nLdrq1#ErG&`Jm<P@+ycrfE@2_azV7?Vp#<eT&#}KFDW1#>2=_J|AC+
zD}FoTlBjz*fiJrwttvEl_k>$j&wTRr*>qYN=u>dr5BmPI(W+1}cC%2$RiyHMT7OJl
za946wP@-^Jfp9)rM))B;=5b>;&WWGQ$(C2LROjyI0OC9=nZ6FMcj@*8FS+Zl-p8>Z
zq$ty|A*WW&($^kYhOt<szO=|^BJ=)xEXio6YF|J~ckD10@Z6u{Mcb~}3wqb~lb7tR
z4OlVBLa|O=)mgE4(lURdO-oRbkr+k=q`87Q5&7N~sr|Ix+Kk{vsk}!*;u#?d57Uru
zmKZb$%GV*1v9VTQx9k2+H}#sAF6@h)>PSvtdfib4`Uua7=oh>p`f`^T>==d)Ofzw<
zRKCW|>qiH#7;$@U_4HZZL3{Jp%-M9I=2al*$r$;_vtiT`so*ymA2RTi*^(Dh(hQeZ
z$x&Z?r5}1_GsNRAO~zq8ma}>N5U_uDm}Z%K87m|nO5f4JGeGO|L0vC^{MUUmnJ*2e
ztBLu@jxgVVq9~Ru@?}^UCqSixjoZ!5#!!h&6l7d}^*z{}5TC)B$HVUgko#NLn~!Il
z5KkEvn1QF7sjC=_Qp9Kz8SS9${Ijb`=ZlsYOswZ!Lh(EwQ<J)G<MS4u3TZmwCm08k
z|3H8U@H&1C=pa^vlL10lKQs0%YxoC_BoRO7^O{xN2fhb1Gn~zTqJ2Rt-(C7prH-Jb
z!SY#2iU5NqoU_j<)H<a!R$!5v6$c_OVWNmOs|7;}e(x)4;9sQ_uk<|T-jsnZ^7ROw
z^lK$!v(p4RXCe{}N4Szr*wUIH%CiinH;WEaXLr)v=>&h|O!#FhNoxxH2yUMVBStiG
zeC!Z6<=B=0wHI5@Dy{gQZKuVlxs+L{;9?=R-l%}z@{Cj)JRA}9-3|!JwWx0mD~uei
z8ztng1>BpS9?fohTR$t3kjG54$y?kc8{0uh-G!QO<8QI0fGi{{nWeD0=%gLZ(%%m_
zB1`>Qe{>ol<nE+RuPNo@Weu$s-|S6WX@43AbH#Zy9+|nMekFFiVeqIEI*9BrkqIP&
z5(Nk`gx3GodL=X_?DZrB9sc~Y`DCsrLjM3^gw9jq92<ipv`Xw{_e&*%$ktKhXGG?!
zUXh1qWw7HJ@d4!_r+;#mXF<p-xDo?`ukM)2enbxmb!Z{-PVz7ja;qwBdG@{Kak$84
zxS)mnE;uCerX@7(a*cQM#^j+fm9j1+GE8tHX^+9@Z?(hPB)LPs^zHFvIhKHRMOW+F
zp(Cnt+v@I#49iS<@rX^L_ASvEii(hjY$M%ZYI+)A=k}XKno@V+hyTz+Y!&KjT!Hsd
zA{yeE(;)~gOu!%kv_vp#T@+Mv_lY-viO)tbQX_=He~M8@59<+0?Mogfbwxd(n2^PJ
zNV&4^R91=~_l!JJD)Us_wB<(9XBUB4Zu0Vsgop4_Q}#tj6vGbHU}R)uU?4K%4hMiT
zPr}D{ky2NVM3>{v57d2w$3wp(i^pi9wOSG2r|r__!dKJc;p2(=aonYWu-V7^k#E}2
zP@Ra^M96i*(!p-m>w>0J0h`>j*kw&Ru(@PgdkP=XDh3B{Osk4FaGhjMD9EC@KFXWM
z-=Q@7P}i0(KG?Rc+0E|m<U+-Kcuoqfu}CK(*Z{8;4^jyIP$?JoN~2vrF?!%CA$HmQ
zqE2gIi9v31+=cEO&SSsSn1|-o&C6=TxG!j$uJ~K)$mJA#`hg6?EIm*R=Qc-;;5gMI
z2Gr6-92)&b>>UcX@NUes0r8f+hn_h(lN=oe!jpKv=|<iKhQ=}@m-xWTw-r=8FHU)L
zuQu4N_N#-d^cF9-6H4=Sc5CZgo<sOAs9bF7d}-1}T*_*u@_M~66dUBLHnE{%wmb)X
z?r{_X18i%o@yS^4;<-mXO|9_WpoTbDBrqh0L#<!MFobzslZgsOi>WPo&DOIe#x*{<
zjEjh;_p^pDVz^M+TA+~&wFatH=U7ljO)1V|o>B<0Lbx4b$ZgN03Tc>&ha1N3m<r1I
zms>k2>J9z2(IQkD9hl*d%d2g+)*+jv19qLL+isbRde2ql2K}`ccs|U!v99W(IvZD)
zOS8>aj6V;HfdtFf%$tbQu)xJ{I*<@=dHa@W1G4Odx-SBsHmH%cEx=?4xRskFYe_HQ
zy@9A^v5HY<#@EB5aznIV+7o(Tp~x}ak)U9*YnNlh)dZ=hsi`k8ylAF|43A;EUq<V%
zUQbG)tNgaf!c6bZ;7btfoSO)kZJM~?v(7BI70VG#cp85ySN!T4`!)77XUHQKKWrfP
z7enJaN>-H!EHJMlPXE4y;qP5X%Bj@*y!XB8xYDGZfH~zdDXibm8Jzb_UhTA_Thrk7
zR5Ar3XdF-{439Aihv~FS4mri|IscSYcYYP4VIdaUz%0jVj&i~6ONfH}leHTUaA;X;
zld}5K`t?kCHlMEhCX@$JH4M*1#-R44_V>sqvL~;G+kDB1aQ8OG{+lby-&x}`zAE}o
zJ>PceMIGJ@bUHbhW?71Nd5kvnc#cuY-dQA`z4IaSRr9Z06UE)ybbp1#<Dbk)En`QI
z6`nV+8{Mpz%@)3LiR3Jz3C~)r7v}v%kt4{)?)i?sPfxh7qLyVh*<aC|!={eBh)U9Q
zdv{=u+&ZBsiH00CF%R$fEreT|==aBbdB?1aJf*aYjQgRR3`JcF9>yaVh5n9j;b-Yh
z_Va59od$Jl*<k_)9y!#(5G#SX^#=+wNWnv?6HztIfr!7U)Ds;w6EE&1iRp%}QYGQe
zDZUJ9^CJUoA$Y(m0cvLOA<6aZ`EL4|ppp5NfC^Gh+~Ju7cYl3VD{H7PZPAr<?VC>g
zEv>ZcwgGY5$_~J;3Je<Oc^I_D!WZt|x<DHV;w)>~zOq5Jn@onIYzYY~;N#ndrN{Gp
zCukBDLpe0r(wFu<^t~`Whaly2x|u7GXMJC*n&i*&>nmP=*(uRVH148(nAO!1Cx-4N
zJ>MA1vseHhqt#C^y*&1N!|h<U2HUsJeSUmLnO*kqT#U0BIoBf(%a+bl1?@38(h0C)
z<MMUzTjXkxSmp?ENclkk!<ojc!K7dFUBZb`?2(p7mQ&yMT(<%PJk96k9eLshmL>Iu
zAFcgZ?PUvUO*g_TwS28je<P-DhISFM>&6ULGclWf>V-iR!b$r-jc6lVOh4MOZv~PE
zebZm37^jQkmJKEkGD*;3g>RWhxV^?QCaSBOGzyiaqk}IzcCk_)*X_<pia=On&DH1V
zOKUt^>g;A;kbukk-7Yg<O$m(46G7Fn-^vn<eL1K9P1Qf3KKhfCIfqi2vB!suWVv#$
zj}UFcPkN13j@30UR8ZaWDjk5Vmgb}BgbNT#zb6qyVZ=)F3aoN3B&NF!)vn{<Bx}Lb
zk;lgp#q3lrjyCML!x(GyMjPKmv!bbB__SYb85Sje_Th~MBhfDLu^DI7`}a(fm^D_Y
zMLe?6j5mZoDg!@+PLpl;;&sY)qcW|O)KWfvbr)`*$M~L4LU(FmQdb`tiO2Dws|T^r
z8pheVZlfkaZKq&QHCf%nmxP-eQY7Wba6dxmPEW>+JRrT&>>kw`u;YVlAiXcG%=p@J
zJynU}U5=-fhsbq0-AkPt3Rw(1g>Y`;*k^h%XFNyAVeXCCBv~9U{?Z^#ju`_za(;3i
zEH;H~p5=RYE=Mw;V~jJFmh>JHGCBY8?9qvrvX12M>!4#(9?j%;ig<6Pz?O(-)efB8
zvWJ|ra`>`fgvh#f%ts9bn@Z~j?Ai;8K(%A!tC<v|m1_41TZOwpsPs<#ILFKMM3vB`
z6pDq3&%;nO{8)NTX&dUgb{Q`QTRjU>C;5?){t;8BP|~IZ)(eYVG+WO?X|&z0D6P27
zpRSOeGu1!}OA`fh`qoNC)Ibe_&t}^%m~5~(=dhm$OjRvdABA^r2wP}rS)~=j$a*(#
z+}?erd=yYLs*Cs-i1tdi*+5|KuHsZK!+?w_XuLsw=FL8x?XxX4C*POyWDJ>lCfKNe
zhQ2GBtJwA400XOD+^3o4Y?*7tt)~}VXgz{^Q7_qDFm^>eKG8PO$gXd&Yv;`(v*v_4
z=6$(aea~$=@W$eq@&5x@L8rc{PCbdj2|wS%MjneI>JX^|!f3@$@5?b+_hBsd<BzEZ
zU~*oRRqXpD<7{kQD|?Kq>$j6`8>J@3-%%v<B<CV!zc0)Vc%_!s2sQ56=0x^u`KYAz
zu|FRdRrbrAPb4acC>1C{eImjc(H<aDskO^D81~DsjjqF=XTs;x?fVf+7cE|#QhdJU
zEg-G|(Z{gDS&SriX|PjZtU+1$FX=z>rk>q8bGQ((25r?M@4H48GBZDdb)ka!2aZ1K
z$U;iVxUw9Fj~PCCY`~xLu48akT$(leC8q$T9U|{>A5p~j%$y35bt5VzCEvDS9MuN=
zwirc5%e4x|A0nLjMq<()`mz?yo5-&IuIC7_PK%nS1Qvgci!!{Fa%=N9SMzmJpK-_)
zgKMHDNAb3NtM}b?n=>j7>)qzfe>)h<(GkYU$1(mC1014r`sokD{o^^2K`DyJ#32+l
zZ_2q`{7$n@-$JZ;!`Tuz$JhgpQ<kZ@HK;*e5hnB#haZ|JKfzF6)<EHMneOks=bnMl
zwqFOixEKd>{L|0A@K3w#X`Ul<w=Ty;u0x47&3sUj#QIK*G^4JwyC=Iy$1A}*M-lfS
zj`u{en(_RssA9n}ajpsu<Zs|GCQ;zRd<;d1kj1wMF`vg7f)fQx^!D&XeDg_!yh?b0
zxN^Sg4jEpQQynr9pW^UhO)ezaW@KM}G3<)de^F+SJqlz_>7JXkxjz2JOYPPnG?Ijq
z+$M@Sp{N(m^7W3G$grGEA_i5-|4wMYs1HHvAL%jjQI?1ZFNMj$%Qj3ezLIwgi{dDu
zb+~+ZUxcX`iuLJtxl5@akrl#av)%WV!i3h2BPQX)@|BQGO5uo8et)V}%Uj4rwN-7q
z?SjKU{7_hc5S+|lg9U5cfQQ$x<d!8Ydzk$9r=?w3#gRW?#+AwRID<H0ND=N3-f*$C
zW=E*(NB4>ns`%}1U#*(Io3iZ-Pr~gmxQZti&oN1$oYJW7C<2OrA`pu}vN4zl)2Z%{
zxq15q-WWs!$`#=?ohc#YCn^(Zb1~i_O4j%J^M#Dd7^oo(_vzauOWZEPW-;>i&u6+#
z$ZiOaAEGzK5rSNyu%N_W{Ex6gNK#P{D!sUbXO{E{#ruH4LlXrE#l2o8^`jKvQV$`D
zM9*T*C%R1>3BML~9s>svny<DIKM|4(@xBml8)A{?V=rao7tf)s?V=K*PLcw7mn_~{
zX+PbsyjzrOv}?oI;w-FdS`Rmf2sAz~hgY@`?|C{NUCQdOBA^JYJp}x3J)G*s?*;26
zSto>*JTj+IKFWYg+DQ_`HM34k%!!bsiIsZ%5)B)r9TXNcaZHSi*e+@xs2fKp#v~F_
z{d(3wIp1+9s(k&rb%Mj$3a5w^EhJG>WIyRQX<llYABBthr0Pf_jB`n0gwmh10dmhG
zn4~TWVW0fx-{i2oh+qDB*-m=?QiiBtM7%(dD)iJd&$*OovR{(FzBjHF&ct2{9*>B3
z5b~83D@raUMQkU$6Rg`8zW2UMQ3y|pvIQ)K7o}*}fy=92sy5-H(m7jv;2BTiy`MyN
z>*n#tj32_ICzaQ8>o)@BHi#FSr;{c7$jMs3KNjAW6m=L5V~`j}$fd<$38QL%p5Qwd
z!&}x}VFPGsGj9CF@m3-{vKESyjna-kw}sb}5_yHOyLbP~oq>(NCXjwa{T9fo|8#Yk
z?=!8NGG<3L?j8F-8(p$cx}N;=q?Q)rl(e$n=1sg-Q#TW)jnsk}?D?`^4DwL|=2G_S
z%hjV~zw!)FEEgquNd~v*l$EkR^bH4z;4W#m$jTzow&r=!y})N#endTq2qxEL?JS1k
zL=X)}!IX0R`c8FGx*ET1CXq<}^7q?F8{!1Par*qsj2HYOMcPi)!NePlao^(9K$LEg
zLquH^*$2iRq~FGoAH9P(=8H@s{GQOxlBId;ea5ILqZGN8=-Omoe-#1dE+Y1^=9oM0
z?ZC*vUvrce-ZdBVb-E}1jVC*6?5*9x_2TApe_Zh8=;8XT8C!e0alc-;EHd3FCt1qj
z#3?${sIej3R?>dDx%``N^4707oDs1!mU1}>$6lo5PHew@fxbI@72g;)ycQ3aO}8&H
zov3oYKK{qhnxFEbm%&glNq3U&nMPf^D92daG0)Dh#`tf{nd^+f;a||{3#A)JlKSe)
zm3(=VwC(?j@uYuDwgp%0NWziWeBL9@z)RX`-LhcLPx^K#PqvqAC~ggb+)Et0X|G=X
z+B)2J)v9?>136BL$s~fm;Jyijgi$^`A8U1t%7q_K_uP`&U)Rr-U)OIill!Y)y;@Lg
z`SQZTIGGRdM2cGgN(27KoispFo>UGjm{Igb348HQMG%1JGEuw!I-^%`{Z*^-^2O5*
zAvud;T!RHIQBPpn`AEiIbA!uQ%*4**pJYYJb(6?f;`s~3s5*YMFmNdBW1UwkoQ~3O
zYs<=&g5BT$_&wMz%0|+4V0<c8sOa#D3K6@^Dl>(`AqM4mu6`LDNpXn*pcq<7+b95h
zCdbbQEM@%PB%!IVOpr9BQg``x1p_qEx|9?FML-cKX#{F)zkP5Ce+=RvDT9Rk1&<ud
z=2zx^>Qvn}{rHAJ9b?-EYzo^Ip;S!F9S9mlut=L>p_cF;TUrJ-9j`(CC}QCvLj8)?
z12ak~?$^VM6-A`fk#o!+bKjcpQUY@R&b#k(skoXoX>3!Bw93j`RoawaLiqL@FxW-C
zL~wg?-vQQuekXHO>m$q|2OkhH?^6E1{)I;oFErjaQK)3wuj=-_l}I$SBi`*O&&5b#
zyL_+Yq_*LyP&Du^5s5YKJuitl+2>Wi`0`8py%q30;XVsrLOLYA2Z^}if3ul<SK)Sb
zUlC9QN*)3KTSxhm<QXc4L>Mo#J{6@IA=!nB`mH0-!K-xcy!p<N<&0h@r_7HtXTRt!
z!8(}KGGR*XLxF%PT&}45%$+jUVFZvg=Smbrt`$~<r@Q{@)dfagm95uq68XGKQaL<=
zF(M#hn?El5bx4CjngHYlVPfv_Q-X-%SIP-b!@e)vlk?g9(l!Rt7_Z~?isFa&jntQZ
zG@EdnnPL&HSDbz1O4bg}5j<&JWS8PxBVAp*e(#(7kdq&U%i@5DBVs@n+p<8USWQR%
zxP_8G>3jU`*8+JF-y>exN{T>H5a8WJxr(tw+*m5@Vl<RQjP)z?)4t@T6^=J9qa7SI
zaV(PcpBPj8@WT&5R)wO-Bva-nJ47UXOF#bfb8t)H^&}CIF*JpTVC^zy+;wKVN!wak
za|?5XjeHf39u_oYH+mf3#k~982W|~U-K)l3Z|=EovWs|xVO>()bh1zXI!Ur$9D$ID
zV}z4V_FEF`F2A45C-*<_u#^3U=iACw7LHCpDC+)&SEEdl?3cEL!V#W)o~k787e{cM
ztT15njl33Gg)NTZ7=RtH|GqX_#XHuiZjOy4`%Vz4<)e>2mhL;*OR!@%#PEn?>2x*R
zA5I2bZ^@Enelvx(x6NRF@+*-l8EVtIrBh_04|;gYRMV<?Q_JIS>=(^yTXZly>+Pz>
zJIK>$st#spA*?X&dVKnm<}vH&Cy{-nGZ=6jc))&+=jYg(5Fddv8}cJ4T|fQ{KFxJZ
z|CKrf81L_~YYs8w^gD==fp2IKdgc70Yi&DM^L4ro`{QmVyl}X^Y;@GVF;UXEmo$fP
z{Yn)pIp?3S{xICPbo)_rnO{c?MsQvc!(jjXy0Y!-WW)DVIX^=e$0guQxJ;(|mAv^s
zT&HrS%E6)VbH&Mkbvjg%yg|@`gbnyj(v7}l4Mf9)f!CgU>|SuV7z2s_EvDoBlVmp%
zwU$m{%RuyZp>H@UQNI8HKmbWZK~z27qgp~>7Rvi}Eh#*_G?xF1{>Q&&=yb5_Lz7e<
zx!<Z)t6hrjIQ|723L%l3$-ewz5K8)JjPfKaoSY-DQIo^H>~&>BbRpeetG{aGW#O)3
zBPR$YeVj?*k)=KYM<L%!QjUdxv2y;#dR~PYXDQdT@!?J>$RJ9X&O;B$Tf7mmNnZS-
zM*Kh^P9AgyK*D*`9t;GG6}jqLG;8Y8P9%9HOFzTEf&;?XI16v7<KrX~gPijhqjD_j
z*Dn`0XhhYEI_9^PbbgIp@P$djs3J7a<b4U(&vc)(B^UP_;0DvEItYiJeEQj_Q^B!x
z_bCPaa$#(JhEs*3f|&j)0*XLMB0#i7toWI;WML=Q^OcHQdvm*-FY2$Pqe`lO`<-_e
z8h05#5ybN6du)c=!C;4!xRCFq7A}`=A6`NPzX;l|x&G#KRor<P^DvRmp7faaOq%Q#
zjFdsxH~q<{ZS>H6O|O%CI!~=|y>$BsXl@uc#$12%co!Lj@(6JGn|RM8)45aolyK1L
z+KW0LA7>+~bn-FyG$DAzq8fSmybkXv*h0SNeU&N&{HR<r{OgzT>xRo^^3I0qq}%te
zcgt;erYjztN0?n;<W*q!p?pICk!~mgr3wN6Tff1M)tS;NtDqJmFMmG9v8kv;gf5J{
znBPeCDo!lSaiaVqqIHzQ*I(Bcrw?&`m-Q~^-+A{v_ZL^zKQ2)a{9~DJZ;%jCCet>g
z9GHMBhPW82`;jf-Sq2Xq6&SHe9r*?SutHzX@#|y1mG$^83i)eL*49I9T2ImyV1$m+
z9r;DOwnv&IC4Et@Tbw#owkhBlzFSc+-xa6LZ0Zta?UG9eIVZxXdU$z1n}diUQEivx
zu}tJqzA+?@aG8=Q+%qk&<rD!Q0mdo#S&VQ*7U-Y%x6{4H{@k0%deC1J_;OUgA4J^9
zmi)FzyB<!x9@k!YZbRX7)u>_SZfl(N)HBc8wfh=})7|&pZ=Is1xO6u?Y|6YSxhW1$
zV@3|KhFuSsC#+o4t^2L4nzm2`wQAnX^sq)`QFW7|FNFK<&okk3?92JE9F%i{GcxZu
z<rd|NOI!!1sJO8TBXXi!=7QvYY3pB`&e<n_UN7l29L{kVdEt;wq%xw0NyM(5cHF_u
z`v>g5k2CUu7sMcq?@LlO66K3D-ah#}o4+pi%g8nc1AII1N5B4-r@WSP;oo%Mb+|nH
zq<B2-loMRa^GBynH$PcpNm6G^`qQX7>5j?$;YgM)%9_us_;V-M;9Va&^2)$DO|Hwk
zft(2ku9shVT@Dxe_1}}Nx6Xe2Db%1ISmzNSD&gp>u1&d5dEYpQ^8$alpls%cr0eBs
zzD~LZ=lt)fC~H~2pMDghsO$RUf?qFO)}JTB=iGk2Fg9x5j4U5>FzH#rZ-}u`NzX?y
z-HSY&7MsXgML*~p$`&8*_<s2Jh0MSw;e|N%Up@=?1)Ry5qoRoUTvCxoozLbN^FDkA
zhIL_`R5tDSWy3ZG{x_J-x4YW2OYz%hJ5wEj|6YaLh}=)8;J-Ujbyu!jW%~3VXd`R?
zkaC)O@Eq_q>FgU)Dz3*nYUE`fzQ1^h3vrq0JK_sRGZ|q2wH{wk+)IC`jcRe*9TS}=
z#O#+}35>iXeIwSRnS}k0>pzBGr<~Zs3P{^H#VxsHS=8fs!ACU53eyK(*4L2NHXD-r
z$p{0hs23{h*4Og>;K^5#G<xi{fq@sw_73fjHg)RQ+{4!J0Ra;p*C^tBkJggtkAzF4
z?YN1wB(AG%DguhY`ilUJo)|L8m@8<M-)KYGbdipNof6(44URCLcsg|L+`)O6ZnfoB
z=9iVfn6JP7);#z8Oc#kn47B|&F_ywV{QK|!oF}+{E}QM5&Y_a-AbhQ(Y}BqMjSn@?
zKKFvVzdS|o8YfVFXW_f%B5Md%lyuPuR)-F{%z5hJA^PT=x18`E<s-&J7_twtyhl+5
z=Bdlh@LgrM??12b`<6{hDeZXgssGF};+d?VTga~~$4c_IsMqrqFz_itCCw|zb@W#e
zPz16=ps3%v@7Pn$`_?lV+v0k--@f};kKl@C<*HRKnur*A&7A#GP^Ed(#=*9~;onDb
z`rx<eZ~N{0$J1?ZZUuwc5FU&|C>uB4cuUzW*00DR;6HpB#wv^TRW`ymn6ajZ7ieuG
zuMoY9aU0_<qKrTF?DIj?nQ%vP_57vX!2|jRDStY3XlEu&yw{~~d}PYw=2UBRURo$+
zt}nlKMQtd;M~xX57<l0bc=S=NUGxL^W@H5O<}WZ$JoRiLL27BiuQ>hi<r3Mnlc~Tv
zn>MxV`h|de_vs8P(xT!iNivzU{Iu=<d?aa(xn3sig!{E&xdL82d@gC<=l7)?##$J&
zv_HCynPv@hpP!i*iIM0<$SXzO>_=&ly2z>--;Z&1pAMopBCDSM)HCMIx8}L^VpLse
zqa=T2U0BlVnbB8W6Bu|MXd_s4Xy4A%u3gjcoG<{u$b9+}PbV5)=K=?Rj4f%|FDZAY
zJT}cmyZ-F+&kcrMMC^h@_OPFgN|_gJ>tBb#f&1@g7JanXl_4FG|4ndEbQEl7@?HFs
zucyeRaXr^=VpFd1O+X#39RKNOXE;SM_uKl27LkUFu5g-v8(3Zr%Iw|>^c7*8Fp`$&
z<9u7)x^}WUr(Ik|6O^z-IDg6-r19QGk$e}NE9q||>iT-DY$5QyHN3d~#yp22#+df)
zjxsImx~{5?M)&8Rf4FgtbiJahEG>7pfi(mb%IKRbq72WUkHf|_a{Z)VfBf=w-%)jh
zm*HG^T*xb*OIO;c9%Oz@Wr~?&RnjH>F~6jFgSdMkGsY;(E6Md+HgD?W7d5I^cXJ{c
zC`kYMq+J8&D&3#(;685@*T141&xU9D=ih=keM4_-D#~@&b{zr}h=JE0yEihOJ09zz
zxw3x1fbfG47ny06$0c&HQZfQ-SMrqHm;danyi9b!54l&A4w3pmXvK<DD?~Z&|B@#b
z^6UBMu@1$EhaBkSrN+zR54#}#;KPqxv7$!t@~^=**0v{~(A{+J+S!GGo@7J(Gw`9%
z9dq?{=Gw8NvQoC<O-+5ggUKuFha3!Fo2XPm6+HapSXuhz{UI_N6AT{4Nns6(dSBp*
zR}-}VzI&Si{d=c0g@-eL&6*x=x^zD|<y@|J{P6Gpg|~99??>BH1Qdbn5s*;!=@z&D
z`(LUzX!cjit3fDNxt2c$an?@>#oXeDqR;kvRv(rzk>?!(iz^29xB1BHu<M9)Q~cqP
zil=Xsr!9+UB99Rr(f5RrHZuK%XJC<qK#ep6x88V7rd4Chkum{8;`Z&@nz!c9H<Knm
z?9y)FIR!(0-PNOu%sUays(+sg9lwD0>SK>T;rfoD^6hutW6n9VS4zM91ythul+D9S
zxkBL`QiKTk@0T3Q^f#^@pa08*ZzM&d5bx94BtMP!EjNrS()Z<mv&&bk{U|4E6ED4%
zB2ZQls93RJY?*lbO@<V2*;3VQ3nCg}z*|&8Y2Mf>#83vmy<lOmzLNA&L|WKu&pjfW
z_s8rXEbowO@^K<nQolYI<oXh>J%66Sn-QKO7bKYYp4+thfsKkGDZ{#U?r4s;e?lnT
z;c@uet<kP#z~EtWD&@DTmzE5^EnRA)l*;)#V$ct7wad;8f+9yA(bDn@Pr6hfPe1p(
zi+mB~-JW7-mcWCqNjMi=G{cR!xjw_{#VYpI*Ix%peuUfSoqc*rdqg7TkCc~ZoO@Bq
zxm@n}iWlM6quS3U?zHdoL|0ti-|W3t^tce!7d@s36cqu+DM?xA&pAbD&yPsy^ZRja
zeebUcJUObLKJLdN%)kEJ*7)#4Oz#WMjq5_j$BB%5>PbCpirvm;_Diq0^(0ZOS@)8P
zaom^@hWRCma1O#TxySK&vTD-N68VUA^Oe^5^_r`YRY%v2YA;vEko}S(?~gzJaH;Dg
zl4-8mryUF+Fsgwt@VcyDwCoqX!0|m#b>*V|$$T1hF4JTF8m^>ezq?u^Es<$pxP^=Z
z-2}9sm4QRxP1@-9KUidSB@4}d`|Rx^e{pV)-5T+eLaE<ZvaSYM3TX$SidMIgOY)uc
zxd)<pJ@m+9&Y1y4W|vOK7U^>6Qi!}xWH+M3$9+#UE?Bbd<HA19cM!b)$f1K$(t8q_
zn?Lx7zBX#8L{4)R^8fkcU~%MHew(_z?jnG(phRS1j%eGab#Sxg%WvTvJV-^{V5c1l
zMf;M1<vhdWbcRsj^rF&6w!gjuPI2bzbl3IgbJo+@MoRL(Z|0LE9VPN}p=jM~76Ni<
zsDyr*6T}IuG>tQ?S%nhUK%r<@Ql~8b`gRm0%^Sqw1D_=C@6mP)IqlRFQ;HI}hChtM
z&%d}|%DJNK;1I_=3;CHpiqckG9bf*#oQ>=yj{G@&iyZSTao5bnacn0fS}?}>Lk3=&
zVql6sk3ZxZ9lQ1njQDbK?RBw@g3)JPyt@qV>6>qt1SN}`Ki2mm`YMf;A-R!dQ1I&o
zoyp%2LoOB?ufG0<dBs|>%OXwAh3gb`pT%*@=1t6X<3<PGvfz`HW-97hHEYxe4yUuW
z^v@^Z5HwhdH~gIQpMCyCiS*QOHzhA^=xRx!O+!VCyz5Wqi}MZ7irko1R0I@(GKs)u
zo8?8ANb-nat_z2PFY3+ubG9!;qCI~O|FoE6u;)yjwyU3i{-rBZt7gqa=G%{y5pGn*
zQ&KS`r9cYT3-3$hO(Hqw3UjVO-}ko>RmP4U7NpC<kbCxvFNeF3^*&1ap53~bQNsrt
ziEx6a_g{bIEu5r57V|=)oR)q67lm@JNZvO*Y2+CdrR{IN{WhrPzqcsYC6d~=OO^x%
zj6q><1Mj+Tzg_B%fK$4#&0f`<Y}Tz?Cury6kMoSpg990E`1fAaHZr`F7E=Tifg&PM
zw@&S#=HeWD>#TW;L!@kk7z1&9BEo>AjBncHFgHI%weJhYi`$2&_7OTs#L2~<d=gb8
zC&zq6f^S4roW{Sif_wyPP*^zmxyL^x$r^kQ({Nv^R;>~o$~E>VE|2SYjBB5Jc+e_G
zqiC~D3wVYkz5ru^T#@h$v{xLSp(y?FWdzOacM(h3Fu1Xe#GmkawIpnl&c(MLf2OXD
zYA&?+<C6Ox<r?~{2!H@<Hi>@W^SDJp2ge#Qszzx^w5ueN^i?PoYgFGpD9XBOqmA<X
zxr;LX;xH<a8FJ05GiSDH(abps39o@X_}%wE2>KtlL0uF*I2hHhSJxH$+B(?2``-I;
zRZ8@@|GbMUcZlogXJ32~oFck*9Ho=}Ce7DzZHABgb6QEuemB`<6Ps?ap6kMgi#`sb
zcx`7RiuyVO9O5COe0~1Kmo6g-`$Pf@6YsUqS6_W2n~}eKTcUG8zEhHPY`deZ(|?{k
zZR)fqY-*z9^pJ6VscEBb3CY+X`{Ca&ZE9yB|NfBKiOgcJJ$Fwr@RIWKE0M!wUw$zv
zA;mUC3TchzCCKP+6at^+%TYO(xaKe$L{)dkkW(^dKuI!b(z;@ln+wX-e4VZ@{<w=#
zakf;;8~46UGwyxi>9A|nDi}|)z2@2~FNVh$vy<|zG*ISi&)mtY|Lgna+Y{qKGMM}q
zW4_OWAsZ@b`udv!JCbcZ$F^Kvx3>2Urn4_eozqMIw<|coBZx6%<HHV4G4PTy`kOfd
z>xGe5y2UYRh=fErD*M^~vT(qf7+SFKU8{^M`0&GRO}F8yg&OU;i)<G9g}D}w-B(_H
z!w{+z+Sx|HsAeN|lmu0-RLPvsqifK#KiLNd6E=3;b?4x$q_7GOcpC^@$-fP4vdPAF
zAy?l!Yl4MU%E3~+;}61*O?@J^r=%PyD)|9Q;uco4ofzfBoiDx>zOUSvGk2a#0}*#$
zfBl)NtdA?F#}xrZpll%^h9)R$;*5$A-in|s-QB_Di2-y}*=KCj1|eUe!!ch-^@N>c
z;}#f%))kL2X)FBekG0`*;eENc=&;rWrIS3%>eMb!sy{ycse($OEmBk@5g~4ce5~YH
zaeq;+p3&>%pqVee{5se!?nVQfilJ4@X0Dlk|6LOZ8Kqr3M}?AvmtTBUAh?wBale23
z5wAe`Xz|BRU`*ZWR(T={kEphi1V+67AKJ($&^9(=o9|JFPzo<(2+v#L@!WyXzu7On
z>b!h8OjMJwz+T?NP_?XfZ8Fr@^1fH}GcyW!=hzAnCu-Cv!10yWUQZOn{rOk?vx#V0
z4=DnQK#mZ|#XN$tNyaFmZixUV+(km?W3-htexV2!@5LAGI5_*I0^{PiRE=E6R|L+S
z^<wza!9Gz7K3tR+B|A8n!3NPKB_adfqeR^<397z*f%0A=dc<AF=UskJP-Hyojp3v+
z@X4PA<Qe+sWjiSnlh2PmKXbNJDfElc-Y1`aR_J)T1Fc##4-B1Wyf7;=3Tl-qTL;bL
zif8yUfoE85(;<pCDv@xA(7HA$^&5&;hS`s;M7t&H0xt5UjV=~PzCb#zOg6`N->p#~
z9G+>%oTRlxHtlLzMSx5SarCrJTPqY^m&);Mej7Gy;EE%|o{=zizUj%{cBo%JFgT_%
z<F<_J7<n!F=;O#P;1KlU%deX7T)|pzm!0$0CX^w<a;|C1Ei0Rz-Ma+MewoF35@jOJ
zK|*0!b<$c!>g3{=$cREovfp1;u9RX~|NhU5_Ti`93OBU2WWN#}>diTGBj;V|ml%=D
zeo=lI(;<xL-+t#^w|#(hIP*zTH)0eiYiJ_S2+!!3<(N2D&9SLICF+M?Mz)ElB_w>F
z?C1KIXdUg3KFT#qwAM#$Wb>jB(a(fP%N$1-`7?e%;8DL`9k(t2ghfblPNZzITr1D$
z8rjCI7hjR43;m{(YZa=X2i7?R{IM%(j7t}ROB_~+R)sNF6s0qADpV&8yPS*py3jR4
z2Yh3z886HZoh{fULZ<KRA!kUnD)fX+a~wy=&3)N%Bd=auosvGDZY~%7D{|wh)1Qp(
z&PqED<&u)##Z1?pez22V_U*rFOZXvl-AU{I;_yR>_a+mUEtDj?NL?!@wwP!Tnj%N>
z3@MXa%<e3at%O)>h(n1S^M6z9OG?4F>-Q~bJN0=a$S!On-Xl(Ga=kvcUKn}dQF+J2
zdn1L%qz970wc#!eQc?lPn~}|n#9-2*c@tNam-V(g?vC`pLYOTBA4=gC&GPEFilKj;
zKm5>x-O=|x_#hC3Hf?fvsAP7#C^kpioVBmNnU`iNT>E#MW>F|QRHvLR{M+QPL!HqU
zXNW%b*8H~%6@rNvKjE$*+}>e_9Bek-G|&3JP~kFipqYIpc+NqDoqcx3%tAfKGiT6{
zk%f+Ddce2Df7uGgqX+|r8*jNi>QqjT;i-FMs}`<Jls7loYepGWvWVtSNfA&4);$Eo
zIF~Wt;YX)N-r$1|M@LzRDvVNwv<*?pnfcaB^Nl%qA>=WZX<}12`LuI`9gP@G6VCe1
zyYDMB_tQ_>PZI3;ZDz79o}us)af-x+*2{S2?3ZGjJLc#%fe{h>0fypXLI{7yUH66$
zr|h?G**s8k5#0jsh$uoCEqUa_=iy(#?%^rX&(jy2_y$YicB1z2xE^@Lh}dXlq<9wc
zLlkq2Q0+obJu@THsE~Bl@4lDb8(i9X;NdBe$`7!fc+dS(%yc@oU9cUs@tF0zjZ%Uj
z<i7K+`+_PRBig~EUFiM?9*%rBQ65iz=n*Lv7{dhzim_47i|X<7PkE^+qMCzGmIeF=
zA1*S}Z2Gh);v0yIMu%bsUJ3g9?|&@cFd_0=NAVwpXVmrdm?EGE<Q9Rw_SoH2v(XYD
zQY1e2eBt#B=ZKnsFg=Qhta*S<Ed&vLYRc5<g^H01=lYv&HJ1$<YR)+4!q_>9iW1F>
zl=ZK?mggX}(~di&L@x<nfbj}vDTpyCYRvlH_U+mmZ!!G_Tw%_+piiRGD%?K%ZCbYq
z4v(KO(WR3N4&-m32*a4Is3g%WsGrWr%fH6e*W3^}pTHN0VFGf7wr!5^s~O>GI7kHX
zD8gfU;@y*?PPt>GsFp}87)&#!hY5b*I*a|qeFvESmk$Y_PTVJrXXj2GTp45v58Amr
zO!e#5v1zn7bcZoyh)U;yLmp0aN#rXTo_yvxGxx3eg^I&Z!JmmS<FW19rbL*-&;q&3
zkl|Mvc-fL5Ka#pAyTjLEoqo&hcZLt=bRQ?g3Kc52HWygM{6`T{wGi@?YBQHa3Y&dx
z8V+cg{oe1sZ*pYwtPi3TVUdOPpdw%q7;D#!QPFi6k7wl1kDG3~sW~b%mKFuPBdh_d
z(3D4~nW#uyL@K$*d%s(?Xew2LU&bJzdnQeel+oRF@BQZLYi~3?PCDJNe)5U5xI(ww
zc1L8C4Cb~dIj_`Xy*P5rxL7&h@4x>cMN=GLILJC|)R=1mW0as^{)X?Ym94Bg+*VQd
z;Y-9B8w1}c1w0OLR}33n)JvootH;ZJ|FN>)2}Qm}rWIM2BWHk6s^4_$?LkCPzl}Gn
z0a(&|;g?O?mS|kaY|x)T`|p=(<i&hbBVWNPyehJwC?zk>S`sM;WhuIvIC+!sEYy*8
zYf@i}d#+vEBW?Q0ym=F4ZImKBRT*0NibOAw2!8N9QL-eWq>sOSVxTN0Gl&@O(IVRt
zIcT1h75Q=*|B6pPJHsSJ%<S0y=%D!h4?b)#77Y`|W^uBna9Q17cM-^hcZF}e@BRl9
zL6Ef)Yl10{O^Yo1;KPqb9uFTB*%$^ZNrn}<ny<sx_xJbNYtLXFc+W<>jMCq-9>4C!
zTg`=iE;WOOj`XXWJ@?qnNMvhxmM5N$HUPc*-pMWvGL@0};ow@@>DXhA4&>eh7m0G%
zLM{n5#U<aF`)8YKI*vp)!g&nO!kH;J{`wnp0y_luOOn#f8@al6#|{Ou@&_Jz)Ud`6
z6Z808_r}W(C_n9qr>tCPn7Q4~&vEllxLx-BaYW|ta5;F=+wQn4d^mQ0*r=-_^$pwy
z&dLzHf2({O5WgW`cHke+W*a#cvM%WRAAT_RKUkm(@Y{LR%GkuNg=nY9V2Vpt9h5Ul
zdI$aIhV4icvDUbG{2j3Y9HQ#1ugA)-FE{?U9VkBi{BzU3-BG5d^;SjDi=x=KRPNrj
zb57tufrrO3QB7Fv^}TGcY1g)m3pb1>1L33}u}lZd2Sg5bKRQKJCt%pQ2NqKh%==-7
z928YFqhm}o{RRwn!g-hk7CUWPw{*%oyeUvdPq_1*pe^!W`;>0LLg|a(_1;MjxIPab
zHP)cOM$k?Oa+r&!tbv{6a3`E^w=SLhOXPGrU4OH=SkeGR2=Ok*9cym6El+sL!WU%(
zIqO+~a^DYGrMnEk*<4r3!k`gB3xUsTmN~fortzkOT|}XbA(F^~h3}aM9-30DYsj@S
z`Q?3oX2$a_G&Y89OvvOwhRI%SQ+XkbfZ<BQEtBhL8AU)5D4hs2KJ1V{0sNTtJVXf2
zoU)ZQcwMq|sb$okHYj<rA?9b4ew{iT<03qwAZC1F!7d84&Yju^Mp1s-J-c;v^Bc$T
zVr0H=(X5Ff5(r8k`bb;3q`mgs!!r7BxOsip$T8-W6ML9OHcbF2^)NJl&Kmqa_3U%O
z93FLT_y8i3;1z;l5bbp8(BAB6BXbcU6eZask3R0&i>fcj2wQ#ZF>M`IDDy74bf7uD
zb0@R+UVFHZ`(J$Vm3hHNG(iD~0ePQ`&XcOa@7QZ^uw!@L!UcYygIz#3u+c-AOF#Ye
zb8GxmusD;2M^HIo1Et!4!Ncr3@|zVx^tW?YJ9D_@Wr%k1^Dn<RZ}Jyr&2}wRu3RY)
zGD?%oeHeNX^@FsQ7x%r)^f<nYsaLO#d+#vric8xhZSd>QM<^IDFgW_C){d`Y9;bbx
zsUa|dxNc;6WN-BY?=*PWNYmzsR_5@-4>5#rryT^f@Bt9fEsn?+j=KZ-{|-KIe=AJc
z*(z8Tx%ahqzspT$%S#ZkmA;}Nf4~|_uFUrYM|gc;zVU?LPEohFwu(_9c+HwMt2==f
z{2^X^VkAMCGfz9&&GYmNK9N+Vd|yQ9TDo+(<9m5eX>-iTAwlSFX`kQDosM+|kMO~B
z=gl_*hm3Hz)vsUIDUt9*^!anYu5K#=ia-Ja-k20u${+vY%Ag!0V&fIV^AwXfjxe4v
zw{LI9L()aeo4>$C8$g&eX2g&}3R>D`ZAX+WuF0Bk`SRt~@M}Le7BapfY-eo@?PsGi
zV7L=Ujjd5Pa}UO$qzZ<TqIgL=-MSv<4At0Y%%bo6?X$NVqqryfz?=kOlopO$kPa`R
zNHD)*I1RsX!NvVuG;E?RVqnC)2j8*iqs8Wg?p+;U<1UuPKa8%3w!nNPYv)X=FSEwM
z{V%`5jk(M*2seo;iE*>s^PvYH=;k=Ty@s~$2rXGxqMT!_2J8Q`YxrMQ{$k#+bHn5Z
zr$idG`RyFvrK3Rx0FAruCbtgW+wx15DphoNAOz-lLI)qXpZm?`9}4y<k3H@pNh5pd
zc<eDL_ku!tANy?PSfeZyxqUAkWO{V#V)>aJ9G?Z2_doE6o9{BcE?5j7J=V_U&FuGZ
zxaH3(SQ*n72E%jaa0vbdp2DY5*3dzm0N_DyxMoaBU;VO0-6o3AR$Fc9WKbwzH?qp<
zHb=H{ycE3oTlSls{NN*rk+(Csb_T<Y<u4C%n9$zfp`%Q9`yGlC2J(<e)}US9!A!21
zX_-?k|NYLwcb!~<^#}42WKeZ#)p7!Io)PaI(a^87<CdS|F4Jphx%C49|2=1{IKOv)
z)45}N8@+KCr}TN>zDvv>63G{1S+XG%mr%|yN5LPX*uJFyKr3JDV59!-=nODETKtK5
zXv$;Gc$#a~t6L}12<7m@4sqpJhoX=gFnG8*%8m!DhcU1wq6cFm^nZ5Tpnad18{oxp
zxZpcF|KfhZ+=c=i+4`eXpKyjAr=HZ)eP@1s)}YA2k$b`iFozs@L<^^^CNdiBqQn#O
z*OS!kZw;^E6EGNR-t=%=w`EZG-FH7Qx8GS%H!Q1`HgoZt!~>9`=r}8nxNX8+?ov10
zJl?MPJ~5;aMD`1hf$Uet{-X4!YSpS{d)pR9GRPV>-+VKJ0Ux{<@7~)B-gR?&ajxO_
zE9rhIha&e`YuJda0{M=-S17hwo4@q3mHk>{=ydJ)*NofVrNK__ooD{$oxqqcDyr6j
zmJfTxDwJhTNm6j~Eg=J0wQ99BAbiUinDgyol+Jgt!0K;s+!DPDvTmZzg(+M8LOMKf
zp60pUV|its>m$~{^VE}igfE-8k0TX)5V`<(l_A4NTba<&hDhA-2F}34%Em-4fiX6^
zi!dSAT56vm^0&dmMwyd(9&hof=Zq;n{p>R{b=p(b&}2@yTFU-@`|cgcY-k7FQy07b
zhZn_I;+=)>IRh_@Xq47(1a`MFQ;aEjXD3X&$E{TkvpnQhTW;kdzT<4dIJ(;Mu}OqX
zde-chU6F^TOf{>lfi1`2$yxhhaFeMcC_2j()`^L+XR`gCF!V%@{QS(>rf=^Hf^Ot$
zz786U*kDcGwR1-^=IZO**)dmN>%Qwfci+vey&Yd`<%D94cF+O)r?f)-Q%>w|9Zjxv
z$C<A_vwS$^m|KXrJJaGuW*&(2&nH`6x>%IPKqTFGnCZ1yA0wMUw#^#(@+*cr`T6dR
zc6HAkLs$5;T#PgS_kUXj-QxXXO~1;HUqmWA#v190Q5@@kbhh8w=#m&H_wF~q$wO+@
zs_A68^A{|%yi>FhVsL>hHhf++i)vXHP4~=rANd~O?Qlf6#ICu!+W8iPL3kzj%|~oN
zfTZY+@QM>`fF1~gMvR@KbQMvZ-@)pi(V6h9k>fMZV3b~^N)<a6tg`R-d^<Nj;=b#s
z`oS^p-DS>X?mEuuWOm%KzLQyzTAcAn<QLdcRJ7MEDS{8Ubl^~@1H&l#8=EGwiPbd_
zt^Ql9YkSo?J|Y7VVjWzT2%Z)_6Z#I`oh!#)=lBxV=ZwGLO~44@TguYC{TF>*FO0lc
z4E$wZ4i>lkMG;=O;wch7Z|B6UsG?<-`}euX3>k5y6GF2%#Y;7cP@J9Mg{h7z!?AjG
z>o@}}F%H^y@4X|1>2dYL$2Z=1Bh%7)d?D;cVNP_BxCkRh9eG5daK{@Y<inP0b+pRc
zFTVWJDT=uU0&f1oghI8?MdzArw%Iy-D$)a|P@xPCWYXUZnsG&<yn_6?MC2g+v83$4
zqe#4pq#O}wu*5A2as3O=JIhWsSGZ>fqsbq~{fSo?i=td3n>s9dPdnvA>&Z32U7x{s
z-1RpVYC;(ILMQZqBA^JAX#|)%F*=s00na@@%Z_=oQtk;M62d_K(h*8g6m!gXco#<z
z9!)KqH;p>w(n}n3^ih_%&kNa%BAP#+P+l@7A&krgwQSzRMyYt!39N_|G0H}3fc$Zp
zg+{uuzx(mWxdjcvbQTUM<M{I_ld%+|b-ZU-th129Q=7jqF;~H(An^AIY*`2)P(=vG
zUlgIRL-3v{;f;cz5d&ow;*%yn<o?3-!R@@WPY)k<`^+~i;9>evU}KOLCImAmM&gL}
zg+w75$D{DBoPW+4cA;2MN9x)K9BfKE)2-5kzcAq$d!B74%7}sfuz<bX8o(jM$KXvA
z2H|!vu;_i^xsm*le_!ExN&Av6k}}NU7g$A>5Ju`gq1-y{)DwgLAynZnObEhWdiho7
z<PbiGK_dcVS;P}PARIw}I+?ud;kI>O5m>Jg@W!M#95NjzFkCvZ$MHs@;XL!)3s&J<
zI8Ey}cCLB#^*5c-OZb{~YS*%Yv16>FIWH<?6n{V+lxy9rK~NI0zQz#jHG3_HG4=4n
z@*-U))oZZh4t5+m(ixmn4r3ht!h}&ReGOA4cwKb<*)Brm7dArHPu9CP&SRJe;zwFx
zAV$F15PfL4^Uh}8+Y6k)82(72Dkil9?}d_rHChy5jC+E8#$iH`eewz2oYNA#2nIR)
z(T{A_n)}=5)z}ImNwJwE3xKEdBcg@-6Soh)*yXs6PR@ct7Jex#3_kgU?oR$g)EAx&
zO879P;~D(&GS|m_5A^BWGf#5@ZK(&p;w#`$WT70#fIOFk5dEApdpW~8o)bpf{AK&x
z()B5WVa6$>Fcin>5u;4sAVb>E26w5G?ia%fc%(5`U+)x#QELEc<0-4eKK;~_WLJL`
zffNM%_nhw@WnJ7@${g0o8dv0sE;#p0=K#SP4aIg`6ld0z{d!*zL@e~L&${ItI~HNA
z&3cZgJ5iB$Sm#`H{y9z|=GSMt&xPkX=N#6QDDAGjAzG$Ql+0Gv@O3lWmJs6+P9PFh
zTV$4U-v2$OZJU%ijk?XP5wB$9cz))KR^C~7tw9?&Ov7uG6s6+<TDNRr=Gry0r0R{D
z8*uVrE-ni394|QcEUV-j;^tA|qjEj2OW)GnFIg)v>La=vgkp}rFy&$m2cJjUP!xaA
zK6~#O`JQ5+j}yI+q<NHm|Ch*X{d!;MjI}YQV%>Yq^*8%Pf^CfTP*O)xw)%y1xN;4Q
z!<n;je!x)s*mg%*<N5-_f=t@Lkc!l&7-7K|;dsSgnE1x}UVMI#g~UI9VvnxQ$doaU
zXN!V4OgJ9!j4_srqjS$XEpYDRo`{?lrd+%y;Wl-@Y$1Sg491tp1(~auGx*DPjKhfp
zCrF%yA-*C0e5zy(vEfPK!;@$iYnXy@H-te4e^8WTKrZHM*LcD|jIJ^AWeuG4T{C7y
zMfN=Szyr*2)<|6<=f%ybU=Cl*+PPR%AR>)yCX=x&vSP%+6YO~Pp>?FfkS|VtUYt2t
zE{XA$r18bsi9ewetz6TmGfq9pMlrqGJuBAiq8sqb<Z2D%^QwOPvYjieGim3{(@rs$
z+4%xlHs2ZFahQ^x1x8gq;hdByAzL}aIwO;@1(^fE0r;ce*~l(@QwQWI@V`;|ZTf|g
zVI1$DEsqd)pS*XyPC3CjMQ|U??QurdjH41oKd!yfcpO~|Q3#Qj5Y3Cf@N;9m!#ad#
zs}zqwx%gA-&KaUw3>nzpkTxPrMA_(da!(hTAbd{t?RS(lu^72()KI6)jH(P%eZ2K<
z9(ZYAC!~%l6F!E8vQX0|hstJ=f7@E)E&3Sc4MU?C$KiDeK1CrGqzDFxXc8Af8;i}+
z!v~vv_ueb=68>NuS)ddiM7Vo-|321>rkz{(gu6%-l3`a22oC#UKZAp5Ho$G@;LDu#
zt`rrlu)HUV%hgv7ms2JFi(%WPeJ^re@!^ZH07SqPRuqTJ>AoVM2$Wp}P^z8SvzwjI
z$``tc8kYGTZpXY$?Yx%>A?z77Y*3Kq$FIXVA{P$m-#b#EEoJd|AmY##TNGBLR<Q;q
zg9r4rQ6=+)W*b`Lt6Wh3OD=Lz3>kxkWL!oWOH`wDOgA2wqwJh`$Uz566Dhx>p}Evv
zCmmr(M7bWvcXrV@qRJDx8y+BR;6+(Hac;V9tm_AJT9|mwc&%L8_u@!lYq-4Z(-t^k
zs4S@f<edESzVz>Np+PwuMetYS#*B#UH|-;g4X2(8w<FJm<DEMm>pb&$x59+dhIf(0
zRXQSKD|jQ24inFR<j{c**YG*nC(Y29kwaZdvM9cQ_ll?`M9e`b5JmodMV*g3#yfz5
zB}^=Aqn;D|<G{=M2I<_w_3$q5d+`O423}GYyx<Wf&50c67oPEAt8n5SRZ;{Lfh-Ux
z%Az%)dDb$_CCr;qgptaCe!U|NyrevllUN5x8X7syFXJxJJ%$Y);EcQdb5Yww2NF8)
zfPFJImg;r#3Fh=(Cq?oE%xA1)h77vYM$6hvn$PN&=q=0@ty{H-<V_gUiON0hsu3CY
zIotto5|ZdEvLE+5`0{?XPt7AwW5h=!qqu0|L`^|)0be2{a}4s6vra$789>XqxZjJ;
zJIBq9$UefvG3K7j`du8kW)7E++DATu@iT<8fjGoTS(HcDjl0rCkC0>XivSU4HVo`D
zC5+%va7Wz_-vjS*nAd|Z2s;y&l#mkMiEq-Ed&zU-U58J(;_?DR?o997FPF(M!+UeR
z#XX!_OWGky!`Ww?D!V!TJ<vuAj9W)=A^Jw7LN)NpDeUWXV|+7v*vQIZVr<8dY50)K
zU4*6Z`J(O<?Qo=>Q!svwT8A-q;b1j(^e`7OD(*VSd6T{coIH?A5@{idaONC6;tHoU
z_Sd&kR@NrS9eo2YIZqV5F?OxV+AWIU3wl}};ba?SBuwqB@fPdUxW2JQVLZz=+EMsA
z#ocGkJ@B$iocuLvElGr{A%iXpE)%uJ3r@ytfZvdTmpX-_6p?YAXMk*E?5JUKs>FYZ
z$kzXo3nSN~@CP_*#f|;hc5b&u1!;%k+9V2`@G3;@A;Lux5p4vyOq?Esd+6D{tCMd>
zeSb-9$DNbs6?dNF@D(`9LpVkfvCpSW+MvJvtQ-X=4YH*~5#Q96_PdT-XTuAR96HDx
z7;^NIwg^;k<26@VL-pizZuRQcaeO9D6k%cvLtb-|btq6$1c;OaU&gpDB=0-(1kN;>
zM5yV1$;ED7i281k$BnRab(FkXt|`BKhZt~#3E5znn6F0-8(i%9I^1q}AEQhndJ!Ze
zOz7O02l)1*?w#_?wHIG-PNdF`^Q>V859sHjX0l%_DuNEZsMkZ5h)y|9etz&l2bgou
zIz4E<D048C53%j+ZzB|j3Atz3d5cJfqel#Jk<!BDd4A~FGjUW4*DdY)7(v4GMe)mw
z`N&Dgx*`;Q7R)XFv254M@Wn*h!;nl!#u0Eo$?B^vv-*on3Eq~B8)0%hxLwEc-IK*E
zin5LN8P$dy%agrd639E`xcp)Og<Ku`jj~9LwXAutl@OBWmiOK?x4NmT?ATVIXOnXJ
zn~J~&7Pz%I{H9*Kr1v^>>FF%AnTW5sYNQKaNvJpRq^xE`A2awwO_F}!2-~~ne{0-i
zS(FgmMD-wqChc%7gl-7>(p}f@1Ka=n^REp(xY8ZovhtR8@Y^6<BxRp)os!Fa(@i!_
z6g<$!k3Ra?Sw<2;rE1kGW=H#h#R<E4ZSaPLHr{CC*nv$tgr)p@AAD$2`7CqMJ1Se@
z8X>{cd9adu_2*ymuCs~7j=seaR-F)nRJ^@?%A~(izx;;fT^b3$zP~N+1Cx&|CjImN
z_G%j<7EfKGb`d>|cM$_E(q(o!{sdPPM&a^HFY&8oyv?MCwez>%F0~;jSDV_kYnpm>
z>IBb2?kVc|li&D{KmTyo;=PVz27k96PNesM2!9zRyl^M&Kc3h7_Bnt3%{R`%wzf@;
zP_JGc$MldU;?MjjKAF6~(x(0@0*XM{L4a}SE9<TD)z{y;`Ij-NQNxCAzDhTCo_A4S
zr<_B;_3-_7xtm^O=OxBCton)exR*8hNSX)2NHNxuwq@zEW!4*@ob$dyu*Z0J=6M%8
zj~^BRcZ|O=T-AkN{yX2x3$N8oi3n17UX!{GK_db#<~kTuf80&i=J(d)7oG*rNAA6@
z^-@Mzna$izpTS_^d+*saSt}fl2<&&=W#?F>efT~JLrp*E&qj8>hd*GRiAr4%uA6Qj
z?^zVGc!6TLRCT*;%}!Pr4p!-i`HvJN@N_FyeD92f5LVK!KmPdB{Pz2At_k>ou;CRU
zjm2vhMK#K7JdPIFlo!mKykn#s=Gi3?Q7TBm1hHsDxB_0J&S2ih$dEP=@MlA`vCyWT
z{2@Q$C+RE+WuGn-G~SQDTCXXn!WI=A-;vFAc^>?+GJscwM^2jaX`843M6V$venq>;
z<$nDITDt4=KJ$LT$3S)9W9rs%{3krrUw{AQjw8Uy<h^i(^`9cJjv|n5Z1dNOQM^B}
zWIKmYhjkPwq8P7<Dng1n)--&pnG$P3(qs@?p7Fb?4WG~0=tn6?*A{7PBqG5T)`1JJ
z?Q95Mf`}0C1dMacXFKg+m4kNPh$GfOtc9RT6)V{>al^Qx?l|KXb1rix#QeS6uIa~b
zS2*Dx_?^`2Y?p=rVHk$kQN$d;TmZ37WxWbt^2sNk+52AZ<`EQp)vQoD6XKn7Yt1D~
zoJTV2I`|Rf82<Z~ZqA_{(iATL?mO2f<`~w*;WfM8r<E&LnScJx^R`donS9=A^UXH5
z#_fd-%6Nx~lnKwUeED~7t&BlC&j&tf^{;u+C=k?#4Y)}6F=)t0*EP}&V_3ktmbre#
z_usoznssW|E|l)fzZag#)6YKd(kKyC3`Gi2NirqA8Tb^4{)H6^;dXe}Nfip8#QR&<
z_OD*u+HP+3<ttHmrCYP3e3rC17-grEX@NJmgFjJ&hyn{=?7u%4h=k=%+1_&)1NONt
zd<yRpDIsdssNoDwd?i9uJw2uf3?Fq>kk0VFiMKiVAnQBUrbGZ@?jkyI()<C6>At6Q
zNHeB0Z!xFvO>kZ2lyuh(x661y`an|JvF0MpdNy-7YkVR*|45`{yH2ZO*CrU?#3{JK
z*Jm6cG78cCs8e;@Z4K#lqKw1R)g@yA{6k#b|4Q}?M#z3iPq)b?8(TT3mHqCxgIkw&
z?tYTHEevO}Q8M~iz`x134zGcnrG8y2Yt5IDC&_-Jcmuy}+0KUN;eABLPej)>c8(=2
zF7Fg$ZE@dw>5o4@3r{2G{9o42$Za+%Uq0=6*{=s*^x>k9oV<l+hQgljD=a(k>#&{e
z{bf3D`tx2`-;i$34EGT}fJ`><yhL_KE=3AVB3@=nM3-kCCG{A58_!o9KLm5+YU%W3
ztRI+*8Go4n>)Lj3aLW{zO#7?l$~FS<^RnhZc3a=BIWW%Rd*pp)jD^zarFb{L{OTL0
zmtx$6N6$+Yx`ESUGDoC)Z@C^3l$R~bTQjikjdG6l5zp0p?Y9};hNnlq{hgJ6Zdh(Z
z_g$h}m3bgsKD^HwfCznGea)KwH@BweyXOAVk<2k^b*6T`!dMm_!~FK8t)wxVweL#%
zEFsniadW=33ns`KezDhw&p_sl{G4&{vOz;#G1hRb<%&x1V~l4Q3)ZM!-5CqV$tW4K
zzxnoCs~`Es$(Z5akX_KXbaQPwnUC~8-58qgy#HNAtqJ8i+0H+#Kbc#R^E3CrFSF+M
z<?tA9`oV0t7CiPNk3H@(lJH($J9d<GA>&{81{p`Vf4<u~_K)|+pJSue{ERVR0*UMa
z{`F(aKf{N^dt=WL=X5QdjA}>D`M=rn67cb?MOIo|D_C7at(rBR{2}fglxrbFaNndI
zS2I~ZWU5!d=7ce}Ttd5<zB`P|@VMv&eqQ;Dsb$yfyaO20LNaDV*@pPMV$^eW4Xg+M
z)@dW$y>(Ds+rBQC03o;pcMB2-?jBr%ySuwPEF`!Gg1ZHRySuvvch`kO@Hg3epYu+?
zzFl?u_J3VPRZ`Sq)EaXR`N=2cQQDr1(U(N*>iXOHc`)&qP<p=x<Pl;8p^zP4)uI6L
zQB$a#h!#mWWK3yo&x}oM?W8MIA?Spe{F)Vo5a0F&bh7dsC+4AnVyY7}g1`O(-OmUL
z<uT2nuTjQ5Ob>DE*a=B?kT#*U`gWO}Q(OXS?L!oj@(sAq>I%C%$WKVLVJs|GRo)}&
z&BY%y8GF(Bmi7Y#=x_(b(p*5esZoG<Xn=;D){^E34}yy80kNTL#pS_8tWgT<2oKuh
z-<EeBAioa4j~#ZZ5AEDcJ0j;=cU>dia@Bs$d-wc6w&|BJdUV*;eU@~z<h@Fje<$;&
zR~(WFj9E$bh~1Pz*cTa8H>X210Z&ggdV{|wj_y|*+>skC>k6%-6)TSPx8MEWzLXxQ
zG5gq873Nz)bKH>h;0KN)cPVk7{W8x}*Y^AJW8$;N5%saRu}(A=>&h+}sW(c%b42&c
zA@%iZqJL0s6q1jf@%Wcl-xn7c6aw(UUWV%r@ms)47O~p$%hx>wzf<e@X+XpfP|4@o
zD73;7w)NECwZc284dcu)u1?d|#8ZHpeGdh^Li*+m1qCQc42W;8_^vC`yVvY{4L+zI
zE^D6^SmS@CPLBQko%>LT@xf2XJjYWz6W62G^Lw+UDT$TM6X1V)4Ig1ajE|=fEZbcc
zL<XE(n+LE!{=DUyTwyA524GT_-c3(T-sO4RO-HMP1<K(CY$8tKOy2a1?*F{>E0~gs
zqTHCLHqKjG)rKf(=ayTYh5Te05C(1b|Mq#-hZ28cGwLx*R7i4+MCP8cs@+N0FlcJW
zL?JfbUC$=dZc?I~0~gN5BFWaT`urpzaDGh{KXJ_o&Ru;7>);Cba_77&b0v!Irx5Z6
z`dzfN=hP0E+!l<b>tlSj>t9!*wQzOhm@SdWU5~z+;PMKA0YI{TZ?;b2`wNnH)=C+4
zeXeUsf;m@7CPeY9jqY#SI+RM161SSAmSbELUO)co_^mdM^5?pKZ6wukx3PKE{U?F+
z_2E*vDGd5D_?4X@iil_R{B)~Z-HVxul{QhT5ZRH!Y6-|HdTNl-UrW;cMwaCM`8w$@
zsHk5UIh_~Lg3K`V7wE%`joSZXA;ow?*%c;VZw~Kr(>%P)4?QK)Y7%PY`Ls6eUMb4L
z-8knOp{iX?_R}>CDm)<YJ^xX>?2hJ###%Nl=amM49sb@6UtARdJFe*>A<t^<-_|=7
ze?@6QFeTHXI(SxkQne?)QVgSP;z;l{q)-QFAvCQj1Me<|%OOu`HP(#cq@`Yoc~K`z
z$)oIRpX;$^X8)Q!RW}Uro6()LNYoPmv}g<%A`ALTHahG`RZ|2f+h|7tBFb@zH&h%&
zct?P!G~WB;dRdt%XK?elP7wdUHqSEI+0<}(V`ExED!V3suG?K9c+t)jq*_1s0mAcm
zbpYRM{aK_57gg&oOH9A2fHwz5i}M4X7IK;{84I9=X*i6!iau@KWWY!5{mPe{aI0Ly
zhg?=_5#KO?*7(ovX%x|G{-r!xT;8gmK>I>x=2l!<$D$p5w6E}z{a#Lk8^)@Br4DF|
zSC3fW{Sk(Fh#&-@%-u+w;z;?Aq?xv!+o+%Voy35b&LpM>Y56G`3+O*{85e9@0@lz-
z%OH?qSz7H4u)Chgpu{KLZu15UTt-t0WYRSXI-|JFwv%4=)%T5G(VSPL411;SCgr>?
zuBdem3&Vh0<<c_GGm>Kd5L-c+a>a>Ud&bh(4r@(mRp1->6}9cT68Tm&f|r{m@?Bdz
z92t!IUVnKSpiS#b8WZwHo&)sfoKn>UK;$P&v#)%tY{^i9atQ5kDE_Qg>ruN!<hW2)
zmk+G3d@R2^_*F*k)0#Lg<AhZ)C2G%`bm_@gH?kzIT8re@_#c|>-mDi6L(*8cR`Fkl
zPDj(X4gfxo0)SsvX6hUnm=>Xdc#v(?ZOi!pb9kh6J@588IDFZ$(C{uhy@bxI8<G7p
z^V3`uHH0yupY!5CaS1QN$*Z=<zu&~aMt&{&|F?dr55=OQkBz#b`uB$WXW#w5{3i>Y
zBui8$e_!8B_5WsF`fnrI|HhawWWX@`!hhKq{f`IoQ~2hK>;5ArI9pr(|I4I^BY<H7
zQ766sK3HFmqyNSf{?Cs{qC!|~D~AyVxrqEv{`_B0!H)qL218W%_FpEo|D&%%B?40z
ztNO_UdlBP*Hk*IGPS@)&|9@LF9YLyU)FMxlWk$XofOC$1fedJBB<<<D`r|p}-yXZl
zD{O^#m*ee8=V)Li+fmP@<EpQa)q{O_@AsU@F#JS_ysd0-`8$sr`)y37rP-x<4^F%R
z>r15R^7gw~mPKc*;6_&scHj-_(UP6DzdVh%0Fe6Kwg)1XU;>XbjkYEo8B{s1L}r(N
zX#xCSmM@h$)bst3tz-9SeX=@zn?alAd8>JYW5D;;th%zlH+#hxiSO|?5P2lQqMfn=
z*5)dQU}T)z(t24IUBG0*e5N9MNb~Co+7!}X-tK2>WDK^?5ROmMThies(vmgIwqxn0
z;EGG*xNc-x0J;9_96&d-AoD&Js#iHBFW3j)SB^g4?PZz(kjIhZL><QKqu;C;b@QZk
zB^gwN5c@~A?Uy#yPdC3u0IY?2OW&-*iSckd^R1Le$K&NVe}PHlA-T(MUC_fQ58sJI
zwcbXv$*pKJX44pawGK-hQJMje{Im%_$nSTNyRGj590z2+izM|rtHy<FpVkj83O1=e
z$LEwIhS9S1r)MfAOV-8Pb@tY@KVjm>%`F$zLjSt!lI`c#jAl#J(X@^xi>608O>daQ
zYOKIf(k-svlUW~(>$Te+gLZ+=1MJYD=vxRhidDk`-gBo_zZVSr=tW#+um?K|8Fo?S
z(+z+nnkoDUM+xMaCA3hlOlZF6ZAC@p<cQjLjXJOQ)xWmq>nkO#IPb$tem%f#8c$>{
z`_dX!>~!fBu$wTO^Ai8En+Bj?hA;@&JR>c@v0k9i8<t<SH=vpLS^W@U@|S9{NeT-c
zUf8t)Y=Mj9>)3wID1HEy)lkRNP$qP3p@W2Mgd2X1ruNbp+ZP#&mJL7-GQ4`na#otw
zpB=<M70p(d+$)YZ7}BVgGQE<e9CTbA0y+X_*KMXCk(>LtoH;1iBNOas%3E%N8t)hJ
zM%rJ>7@OIa8+*!v05O%;htxHnmz5fu-#HV`ZM7}LL1`S6Bc7gqjhA(JqX|D~u&7lN
zkh~i9$sQu3oYwXSDV^w<wfkXgH+kc<K<Yxvu5%{^T8)T9QZIA$Q5H>oOgBBYnQpFn
z>&lG|<fbC(Wm=8v*!2Our4wr)EURJ0r%|Ex=2I0Tgx)pK3qkx7U^4G-z4AKq7id2W
zwiLhb|Hmy>K}TjMJd8OOj-gK}I1VW37;3j^x3d3zmigh60oX78-G<&}wx1WX%bP`|
zf35P0GLo~cX#Ub4nnR+h4JusmyQDPM==2CJOeCPP>w4y*Vq+#TV6~~3=rqK~f1E;x
z)*+W}*W98*XxW5Gg*GBYd22IU63EwkO|IHM*pP6*o>FYNn?tZxux)#*CHed`AkscJ
z$Hwwq702TO0j_;p7JW%|X>8ePMXh=x2rnhm=Xv4r+|#e(b{owD+pxde0WX1>x5=4K
z$W_gwd2z4nas;qzWMwT@rT?)p`jy^ck@>$moc(f$efziV2^O2pR;dVIZHAmU%Y@`p
zrnvrf=YJ^@$^v?!DZzxv7Qa->O#sy%t;74D1pll(KtzWO;zj6f8VSMDv)SdAEPpEC
zoBT>|FjD&({t3bo*>ADdB4t{ZcXGu0$U0Hv=;hhAxYpIaRRInH0FoshSQyI?EzIOv
zNAq+oWaXhxq$>oz-n75^W0!FpKEt!loA<A8En0j{U7GuP+B`b@VoKNe$LrItcFr%p
zazC2cjxz%iYGD7X$-NaJW`;uIz9MEmUzOOUq)7rml<>O^Q76_7UWh{(I35~*?Fb;k
zV<D>mD5WFo!w)}p=`7a%wE_JUf;*roF0afrt=bwnU(%Q*S9r~W0kI0dI%^HQ=UJRZ
z;!E3_nia?Tvi=`+bmkxf6uCh?1cv;lGa&s?T5K+S0$6YV<)!LpK>Xzjj5(UpfGOU5
z4N&~UCR0?D{~td5&j@~15gi_AgGbfl?F^S|KK))V-N<YZD(;HLsimWBY{y!WhfAhc
zk8Ll{@0nd!y{e4{nJyoQKuNSTs!WKu$3{2Ht+5hJ4Wx<3V&VKQbA?Jp-;309o75{e
zJueTBY*PUD?NlHzXQ;KDWobTci7QetP913Tx&w^HuMdBlEL@!WU%H*Qy>te5`mm<9
zoxju#!R!A4UU_o<*ThE0-zQJj>WvO^bS(leyYz1TpEYXcOP;UU6}=xU3V^hyV6v<k
z`{LZ^;pBsAudVLlpH;Y|M0#DYi{<YUeQK2ws-Frz63lle-&<Vj>Q9;n40S?(7lT-V
zl<o(2mGuv5q+nUTr;(QPU9IY=AQW;|<I93zu{z|SOwf5??*+HeeOMR<O~XZ`i?vx@
zWJjEt*_zj7Y4hxma<RY8XN{J5r4l)k`8D%?0)>ntcFbVi&xCS+wB$a4Af>QAd(G+J
z4-Y8=7c3j&?_bKSz{+$zW=>#hyT8Z7V`DAX<zBiCXXyb1tW5bH%_{GX%G;$7AD(AQ
zwTDG9mPCFTJ$>aS0$mgp*XKt<^fT{0%VB=5$F^xX7X=e={ONcarKmd<^nxsJ<?L_M
z9HwR4K^(_Vt1oUUMVENoX};Ufjb8C=cUoY&Jmr5$u~@P-J)HTqvs&LU)c$;vdbb%)
zzj6Q|dis=B>cZ|8`Gi)ZG1fq~bycU{CmO8y6hBVb6JSeg#*NP@GaEeBP1dq6ZhYLv
z0ZP*NiYJA&?^as<F5c?zHS4As0DPKCVC|iAY<zERN8lh$U)Av0>z4O2V3aZX!+R;5
zOgA?BD?k~b$<mP!VV}R@48OhFaD)QS*6MJs+|n%yZ^@cuthLjzW({F{kyq@2PkHo=
za|&r~Me}mi#qa|M3ZL_>DB^Tm;<rDKd#CNRtH9-TgZFS!zqX?Gr#Dd-2Vn_zc<7H}
zxeWoGVn_oRU_0+eU8W0w7H%FZf#UE57^flbUiLq3K|g1xx3k72<5>i*^PLwFJNQJ`
zlbf<qoWtTLHPcA1=IS*($~E=GM+mdsYo%)X&y`*rlbN^khV1=u#&DB+36wt(-R#sA
zPpfY;Y$8)7@XiJtX<u552B-X4Yj@IbYo0<h6}#8UMxxC|y}R4{P+Q0?h0Ib*>!WsT
z)e~QFvtBm~dp50&ce|;agy_$B^m`os(K`C)0f+Of3%hlndCr?pL3)f&{WGPC{VdjA
zNuP9mgqokVEqtEuOjTU~qwk+*TVTEY%#u4!{MyxJ&|2$gw_-t)MzxOD0=|*E*T1sr
z?;`7p+_J><LVc1cWJZGnVz-Nqw>@_Tl|Q^6t&K58esHtTPYy-+u$Q+o_IusjC6;v$
zRK)Q24)S%m)|!mIlvue}svA7`X?=70I?xw`!-!1welXz~*rAtzE^(v9KwM+_#|z_n
z%_UAYNz9Prrzd1gPW4HkxG}<pS>8&k;(Rm{Wz99R)-!s^6951<_ZOcpWn+a-4$mUD
zybb7oQT}t50rjZ;uWM-!38{N*pX;-WjGdvH)wLlVrFSJ@BlT@k+x7hJw&TYAoe3Rj
z5Blro4Z;O)Bj}Djo9hB!gU#EA@%ER3ecX^NshL3zgVv!%CfoF<X#J>V!+KF0pRi&y
zz9^e-Y$|F`OF=gt`=Ph1mdHQrVH1rrYH`VnWuLe>0;6W<qC=vT;U4dg%7ZMwD3?65
zO4?Ez-{qh1EOg%P>W23NwgJ_ex!UPS+~#8<<)O=Oe`(bIisK{}dSz_>_I%o}@Oy6o
zgs#)!&Hm(9(R)>AE4PSE?d>mjORE7tKx*22mM2mno&vY;G54Q4vTU?h^INTzP7p~`
zzl`spJ;1NJ&wchf^}e)h0~0)9ow9LtNWm;1dUPXWdK+C&)0DQk7*c{3#)sbb5E5&1
z@1O2!G`{1~H=@`_o$Q=M{^<+ImcED{s`=2#=yYAavn(`;#4S+BH`Da{_B9!~G_os&
z^@VEzmMNYgJ6MF0dhMe_`Wyl1Dex|H=ZEEjYxskI|5$uQ<Cjc0Q0qZKYLbUaK{Zfc
zOh*(-${eqez7uT+yaE@aA4Hj-_@>XnEi@%q#8#{m52OK}*R|}+^G!f;i~EVj<$Vd+
zW{7ita5%PU1Ri^=ci=$)GJjS17_KS*n^iCR`IfV%YPt>HJ)EgvsZd))cakk)7eb&t
zUB|U2YEy!8%(i4z9Wf`HtW#f-xYU8fQbZ=J-kvM>0;=-=jc3y~3acyhGwluj#(wW!
zCIO9;@tYRFD1M}xS*HSRF~tte#o(Ub@%|HKADp_roDA<Jk1BFDH$tcOtxQ$;6A$D&
za}=_OIGO!jhqNKaI|8-~YEwOm2l;l>be}NJi;x8H%=Gve13(t~xzskWis!#ewb|VO
zE;#R8KS~tnXia5ZPX?s7T<2|dhoqCaR+ha_pKNZce6Ug>Z`WjH@*nvC=4j)p&U-EZ
zGc<xqo0^{%?1#g&Dd}3GnJ5!wp9+AuKN;)wl@V}LbMz52?NplYmfqQNlO?YUKSR5@
z@YJOrOdZU}D`C>N-#0Z{EMISI2HsFEdkDc*I|7e61t?tp{?Yujdt`tC?N}l(`)7%=
z$&YH8Doz&A2zXTtE5Me$+X;#$JW3*r(&pTRbDS<kgXkNe5B_qHb2-MQX@g_iv6l!?
z_vO;PeQaF|)#G@!8V_XotSKjEZt?npYcdgC%>e?CS(y7-Y(Ku@UVUJtYQJGL<0}d#
z9_N{JK@{h@CvH6HXGXF<A}r`f_osFSHPg(=VWp)qiy?a#J%2hPo@Ihlqs)W$x=h8N
zyz2Xns)cf$X`U+dmNQOYve~xZ#C>wsO}fruPKn!kw%r1l5I@ts3`ohkjJm5kvzVlS
zN^egq5wdzq)^nm3_7WwOUW6<RQa4n$*B|}&snxRlzZu*ELnTgI!ta~9TU1}UVeXqn
zrf?fw*uQT#;qlRYULcWEgNf2L%sy{%ULbG-8AWWTa3TA1ROoJgqAraS0T%?C^M<==
zqXf^g?u{(xla{I3aC7fG%S{R%gmJ!ZM&&Vp%*IsMT=CiC4RU1-tpnmk$J=k3-^2Df
z|1&Zi!iSh!wyS<k*yc`)%kgb&nzz6m$>KJ<c^NBG!8c;VWe<V6t;Ub(GG-YLq@bT0
zblgkMz3P=mcwrkgkmF&~ib?D0)8$1kb(V*oTXQoB>^x61`>fY2!w=FGJj71tcY8^I
ztP`Ru$vg;1D*dmIe4o8X-aee5rNu>>W_YeHGam@-36uA4*ZX5U-X5=#tEmp#-?iFa
z2#LBq3P9ecm}Ypd!uss+v;!#LZ=AVv5`DUmnXWenHU#^Lm-VQ9K)d#HafsRu0*qRC
zP~aZSVpHbKFl;c5W^lFV>4>K8!^wW#-wDo_b5y++?@{Vc1ybplpNco&IHof!j6DZH
zIr~@D^mcvX5pw{L(5$R!*CWw^U8_zx++?>#Q6}UEYL1<#&-Hu_C8=?JO)xX9L+*;}
z5@6%7#J`mWpT7C)yYdZ?m01hmfWQLoj!z9djaG8RHH?EpafDuf<Xx|(zS2p?25iZB
zK1FVk-9b@j2@4ZOC@@O#fta8BEa7lc{W?dtDAkgWX#$PZYXaXc0NM1AnmJxu8~Cpx
zX%@_*D@;~&(?i>!$s(F82JRLkx*5m`k9nL6N1qBxI+cmDt{Q+GPuB*LI3?MQ9ZZ%w
zlB^WBx53ZFdOOh}OQ%pZchXxLIaQQvn%+~97WN0KfUxpUzhCT++O+K4d?BLh-?{C8
zym7Pymg+YymlJjI`p<jYw{FFTylswR3(i5JKpO1y02G_`HWe!M3j@aB#R{kd#XQ04
zKYMW}_3W4re_3k%Mr(3)4zeBRxfRSVfPrx6bT`!yI^%^)rvbl30NK=3!6V3Y-ODWY
zok6wvd4`f*1>b5uT@lrlGFV$i8s2NU>ExlV{eg8&259TE$^e?`c{lr$;wV68g=62i
zpV;eigg@um@ZWE<t!*;#PyGh#y~=34G=JM<Su%;^%m8j$;8V=7PFg3hR4TW*t{ZPu
zY_-npYB_1W<;UhoMI>@)WNixFWxopoC<Jr00dyA=LP%1L_-kkHS|6GX0bp50)4HPK
zSoQQt&vaTE^y<wlULOV*XzZQ0R!sP4X_-?+uj@#|5kl-(_e_hqp<~mJK`WE?6^<?m
zWNosG?21r?t#>Wg-f=_-f9|Zd>HA&4^5W5iV6odRZtkUbQHC%{gSVk{cU^pmO$CcJ
zHs)i1;$6H+WgzGIO!YEj9})!m3edtEJMW<n3D^ncjb=ZI;+o>ex4J}hKJckp>L+pB
z&l>i3tg_dtk4x($=+gr7TgJH+H%k&6Jf_lDDJ$L+?l3YVeEsddhRZNkQFyeVi2c-Z
zY`#VBaj*6Pp&xK4RH_w?U~BytyM>PIKnilyq>J+^J1odt28hoe-y;(2L@0Ve(nHIU
zK*vrRmOBUd;fFtH|5<(SvfjX*^v&DWIAYMII<CXWQmUG5UwbJL;B)+hfjxuXLpC67
zr&;s0w7wE6JCCZBM8b2kAFHRMgqt=F2;$oCL+DV;{y>gc01qL%n0zB#B@jZBmJ5Q>
z5!K<O>+Ki@sp?TPVB)*=!mz(7Xg-EnN>FQ?j%ul&@$~EzoZg%A8{;O?=9bvgcOlGt
z&ch=%U%P!a+$3VNi16d|E9$f$x;TY36hY_!x4!tz4`(U)XQM*Wm&}~A^<azb11u8t
z<FY8DmOO;^@m7YVtd`h4Fi1$a8PEH7E%f*e2QH&WNhi$rTgV)~$w?F!*w#N&#k=>Z
z{lhldx=Fud4a)$<jm->(%>V{ybovLuAFYts)H+;t;$aggQhKDs;Mg`THZwI1Egg>?
zR?|n}biwh-DEV&Ds7i#5^xd~KF#wGB5g&D4x+<)gqYF3nd5W?VR6WY(tb?NP-mumu
z5z!^143PG8y)G|4X?9lDTi@Xq8v+b@quZ!|{UZF&lv(ddxWjR@3so#f<Uwz}@(3-~
zZDaH-46`d{FuEjSqSE!nk4@uHR^j8$TxrqeoX#_>dTIw&RY9A<pC50d_Y=v!53cKz
z#m&vQtaPT_15xm8anngRGB1anVA9hCP2kwW`}I%~w+C-)qd0~YLkt-9=yoy`zRDXB
zaT=YP5>=EL)2?BD3xbTZV?;E0oh%__J}R|Tic(pshuO!wv5s(S{2D0Do4_;7K2O}P
z0N1;V)9v`zHr;EhWE<rzsc#m`Mf!Qn?<~6yoN$urX#%lFA5kYi#1zLyzJ(j+lM_d-
zy-490a@=esi&<gfM_GY9^^9HnKoDoSZj^?YZG|dAILRyQM>rQWV(d11T5s!z$|_lf
znp=*9(6Ub^YA2k6A_%>5J0&2)NZIeN8{G~Y<&HO}L3W#5tqW(QK5|aVo{Rk?Y7-Pt
z_)p#I%Yxu~%8{*06XB%lgy*1m*W*P9;zf*&PYzO_2KLubzr>PD;koP7QS<;X2CoVo
zOso3Z+W<v`mI>MWBdeSb*9V}+@H{kU>8d$|ic2i{GOvp{f1|2KgFl4>&ULz!D|P!0
z--kNIu4=0w*E+)61~ihJu#*|~c15TqEk=_7v4<+IO9)8%jqJie#vv3Me&QHGy3mJ@
z9q;}4dOE_7HTEmMg_!()xgd$XKp)bZ5uU(W>-c)*1Gsj>1>jczO7J>89q<T&wz){&
z`zxmxYB&hSI!V{xari8(^wxW;i8UI%i1v-|_{tieDZ<32Qg2pp-FN2EA?e#-58z|R
zdOB#T{5~UT?1#(ZunC%EW|Ng8AhdKnvU=Qi&X$pZTlY9xXuRrlMHls3usu%@>5i1o
zZK=KCeTb$Kqv$v4FFW6dr}+_IaEOB=t)n)?-7~%C!oLcy-~th!U&LrT(vv_UKe!3c
zkUk*e*};+?mF?`ii=74mkCoCHZ$DcNVJ20DipG0^j-xOZSQN<h<e!<xq~@`FwgCO2
zMC9~DCTYk34d~1mWrCAgII%+jal89C7|9<r%60m<?GC7ZYTFl8n-bDV&4m-rQxxVD
zY9Sd82Cj|(XR9&BT`EIZ+&~|h*C6*8f2F`#vO%&eT<rXN{?~L=_#GrJJ&>bUB7~(?
z&Na*(Q8gf#!5Q5djNP=}8ac<laXPeMR|u1Q+O+3`)iqwOI%DnG7$JcTMT$nUPEoSe
z&(=b%j~mEQXW5-@z1T~>+aPm7kRS~GfplmBu|A?cND0K*SL$BfCqOOQl@{iT3+>9|
zY4!&r@u#p2TyT?A@TU!ad2E==FKd+wz27mS*&?d+K7t;eT&n?Xnz3#kEAu0+O~2j;
z2LL9XLfB7aTG~|Hxc4s3`RH3HoiQxJyMztl&%;5Fo+K^gLH2H`Up4r<<a9i{X~(9c
z8FCD~qg?TI_JP!d6{wjMyW8|hnT{f$MdiByZ3kyUr;Rpzhl#f`l|6SZ*3m4rRvrqK
z%R3J(&jp&=R5GNB`kcViDz-!G<V!j$Ilt-;OKKyV5S%2JOz;GIcEJ5YimcJ&pT7x2
zNmJt@0{mpI^XBQOf^#AQ-))@gmof5?btTDS`xsnNz$156Ul3fZ1kh~UGDbyI5#KHe
zsIvh~JFP-hY!+~%<sOoYRnc}>B}~J4!cy8Bgicb_ro~$8E%w-|QO9rUyt#9OU{Bu#
zvUl6gn3`RAITfVeae@0iqd(9yYIYvZ1P_vab)~-~QPA)q&CRykX^R$3%S|JS*(A+<
zaj?^^ziZcp8`|NeWy=Z~$H}|_7B8RPmSKJA8z;q-@Df|8_Wr8!toUhQGCh|lt|%nD
zOB-IFR(4dK7m$%G)4{_bJh%}->#oX%<$dPy4`})ibO!*?_}1Zh3Nq_1u(fG&<{ZoC
z6&qlkyC?_B25{gHt4?Vce^7OZNYkgy*&u3#CyBdGN@ue|XT;9t(X49@R<Y9XW)dR-
zxm$RIKkAMjHj?*e+(b6jsVxt0t%kY)S=$wnoF7e(A6UQ6x|I~ka$kQ;_2|-6lm$(R
zQ02CljEh_D{B#zSN8lgedcESfDBnf}hC0dS#PE+WBg8qtaG?4NQiXV?d--#2uS2F)
zz`yHa2J%e#UzFUY`1oWoh#&Kr_i%{a4wnzqs-v|HyQb+Yj@~QO3%O}lBMEj4JjESO
zx@tKDUc8LfKxmP)$ZUm(FTvcCOgT|p)0ZLg{?iVNiRj2^J~d$oF&PtDB{LT+43vUV
zujcs4WUKA?dte?q)_R>G)C<M-&bowz;o?=M$tXsfBvFJ;BL1C%L|~{pln5Eq1YJ5;
z!_3HsAHFUeV%y?IpM?bv94Fm3C_dcACd$-bP{7>P@xR<-9OMeeb}&d8dBk@%SWJqA
zYun#T%t#|lhJ?JT8gl=X-!1dLSzu;N2?g;kP>AGGd0Qy0t%?q{4-BDSPPGv?doEMQ
z$WNfs=KHL0DM$k*4S%IWLvJ9klf-xNub_CXj8Xy2#6YP%gKx^yCXEX%=fZ*Pcbj0=
zB4N!wlska)zgW90(8*=n2VY$R-uE%B5eh<cBKn|R3=}D(Zph8{Lm25GVULdGyP@AF
z8l_`VIEjBxiK?Ye&iJ+D4kvi~4gA9?7&~3M#*uZwq3hc@B$o(`_Q#{+AQwX83`!52
zCXzHy2CB@bDH?&g0w5>bIE?9%C8f-Ev;?FGxX0Raj9vs>h@rRg28CTi+wgLUr?>-1
zE_wT8u{)OCPLwN)9`+%bpd+TtP3MA|IkxhEwrF4Jo%>D63#A4xuK9aM5p1ZiSX>_I
zwN<PJJv1$N-jB)IYMG}tWD(y#ut>!VJik3(Zk{hRjV#rABLo@)V$xQ+QVQ&jfNaH^
z&?6ZA0nxk?fC;<dWWB$-TFVrtS%QRvgLvN*T)?A3g^P9#`zU~}c$l?EMy;7jrrGEU
z`TVNWl>QcZZXM4*GXQiQ8d6#>orJy52&i?)POls$AI<bZ>p=$a1bB*@mh9H6r&$xF
zZq^8CZ?m7xSuf%1M_JF!o~H{3K)|mmI_0+%3onEZ-G4(Rz9B*B3x1U|J#JrXlhFxS
zHu)8q^{_oXo{#O@*oE^PSNrx}njt8psn78P^$<I?GxHs}B+mtVRexm$u{T)}9uCc9
zr%?1F<GvZUONb1Y*_>x|fFUCub`PVd)2T<A`9e++-f%@Q@u9a)M=XedKAMn&I&$~w
zX9nW7+x(awP_@cnj6ILF{gy>0c@DE3m=VgaYchUD%B!!70z(1@NHrtRv(tqJfp9kd
zl(ochH1tT&BBaL&czuE~$T$YX1OR<Q$b!415(g^zqd0pX6dYp($_W)gI%w=5$Zpw7
z2?a1}&;n=jC+qtid1@#I4Wf{JKU~^lgu@Te-$;72*A<kH2u|Bdj26U(NkX9@`*yHQ
z3GZB?Puzw55evQZJvrObbkIdlQX$Z5Xz29>Is{mfwtkGmC-qu;f+hFRIxJFQ%~2<p
z2$>8VsQUbS12~_P?(PCmKMdIWc>BG(p3)D)@>T04w0_6lg4aUEP}suU!rdaYIT)lL
z$sk=r6!RYQcC9?xSom|m0C#YXFGFH0JqINfU02ll7ihc<&(|iA6acZ)mi$sOB)_ON
zTkb0PRjnnOkZ&Hb=PK|PajR;!^trv2*{|Nh;^og&Rv~+f<Ts_1c%Vn<golEo5Su;H
zGJql<Ul=cJ^1OS%I?f~<@Nv{}FeY12Nuhi~_zL86v~0TOe6!-2=?&(s2lGB<@YPob
z*UsrYG~aT1mhQRFUgBF1cOJkth6m*JW(OxdoVKk5Dfck%REY?euYOoXr-y*y!jku|
zTXXBKW&6ydfNenF6%!>w5Vvl3)teX&QG8%0#eKOSa63PSF&1el?<WAgv89aZlhICl
zW;KT%DQA^U>&BV=#Bia9Hx-schEHy{IOU;--8DSyoh&H8>NN4j)`gVxu@jbB66G0d
z9H(KOPq5MDskZeyQfD>CNNe;3x06Mp%ndv2yGhQAal%fQ5xR+qZkSNc<Al`X+jkGd
ze~<(hOfKDqxgr9^wGR^sqzG-Dy4JNcIOhZ~#?jF;#TR}txm!4djDfy_9iK81VlBU|
zyH8pF5f<i$gN=Ff&yNxF+beD{gy!C~`N{wS$C+Zqr66(DUZyevNtzQ)p=?*jmo^DQ
z9jZFiO&!E0Y_j{@022R;=0-yU?gGLT_5#rttSwP0nQR_^g+`59-na^(gAgBj;r<!y
zCGyCkd}R1QEGR<@*0d$W#+O=a?|AL5B*X7i+y2{I%Tzk^b8LG9ULq*H@cup*w2%)=
zHPKw$D02|++GV;r8<66}6$Z23vd^PDU?US-b5eZFLN3b*bD?6P3_0f!N1=6{P5b6w
z+4=UGRFMs6)P;Nq@=z(!!ciiqkNs<U=-=P0!n(=o`BNbXVbG|YSuET4SItg9_nX69
zMT(n$AQzW_ge1amAudEl(q%9ymdf~E@-T720sTqBhQKS1)vYi9>n4{l56}M+O?d6j
zg?tw@G3oyFhB2bk4*O$BUOvQAHq9EH&S9xwI}|TF)IHn2+5L5+=v62rIqQ{i26!AZ
z<a~|2OZA;Mq4QZ6+y1#eO1t5_UcjyWJNuE`zu!STKE!zYRoL9TW!a&5lMCNMY7a!S
zwwS#|<Ie8$?CvH8f|~C%3)Ez2j0(b*v}>B{a;2DO(T1KUfN=RX{VvKcH*gVyWlG5$
z)<1jctcZ;=K3GqID=nTFM$p$ah8rnZ8^+K!0-3~)>RjykTl(J0?T4-HFatCkpCjVw
z%?Xp)-5?+F@ZDgwW*LLDl|?S<g`sVJYdlhg;$sRV)Fy&Vfw-I+tBE};oan=z&n>!Q
z%WT3FCajoCGcrt3^p+=qLgdQ2fRgKCH|n~cQdtIZA)i%u1Kus9H^n^bB>kJOd5kl4
z^k|ewP(B0k4K8}~$$BpV9YG<_Q_6|D20`I6kafcKviW<#k*WdQ#I)?kN)7cMUN3EP
zizQ#MFAWuv*6d+-l-99>j>L4~Kc7jF^6vQhcz+Z5q-ix3f1ts0aM_!9X*JqP*FLkT
zU)#Dqe^DW{gX^*6vhf8<>ufm5-T;(9^%W%#-0hC$G9oNW%8|9=bF}`Y9}lFRtme94
zl*6~LLD#mfRlXMLLkwY_Mkymr9Y?Wus+(J0%tcvaKH=-b1`{YV&`o(L64v1#<^!l9
zXKyaD!e0>l_L#bBk?MoR4lbmJJFXCq3w<MqvcFa!ja+fSJ#L?N>5TTkhEK|BhjhHG
z#;-ng@@w67f*!BORVbZ$gWZqMJ9Spf<GN!kJhTv;G^qQ2&UoZUDN0||!+?j?=KW&*
z@HzA}__~YitnnvdC6b5_y`Wo|rALzslW#8;y?D$THofM6l)XiWL(dnMO5$;Od{2J_
z73Jl`SexPPJ@L?{ys51bn^_6Lxofm2QahE!MF^m|V5<lVeZzqMEfmks{O;n1elJrM
z!N%Or-LXPZmV9Q}aYqGvSzpsa?Nt0`Se<#?!)4knx?;%eX2fB;5k+z&E`j^B`{7>o
z{%}!KnueXp4S(inxcE<Q6puObKPtSFM>3GVJAB}zA3BGoALH#EfD#b)qXI~++yge8
zEisels&_6D8KmO%8))>nEppvZ)o>HBL3({zx(r`Y`~@I&=mgTyT6)edBEDB{QO>WJ
zjhp8{!GAztk{No^{vupkZdB)!)FB?c@9QH#ses`!Z+e<L0)77V*8_(PsZ|kimEMH2
z;mg9x_=Ew|`rV8sk_Jq;)T}&$l}3B<=c~DF`Oe3sMj42YU;g=7kXd(=S85L1&N?EX
zG#^ubCPP&VfPxcL)%Q;hD$|>-F8I_@BE-7fWSoWX1wIf%q=*uZEMmkVagd@7^BNdg
za5U<>JOzI;QrRI{-42E&ss6*FOx7m>=77ea1v=xl-_a<v8lMbrg&AOu<GA%Z#=B^P
zjj8$=K2b_CxJ;^V>KpQN{1j+}_5(camL*7%?!J<|{XqQo0~IdB1b2}R={|zRc267e
zO04I|U}IdsinUr0(%0!7;RC;?Q<eIR9;o)7W*9VB)J9@$zgPtS`0tmPpDTvJphCx?
zngbU!r$C?dG)r+&rF&vOG)Dm_nGNbpP@_0j93P{;Vr0GqcZ1+xPeRTLcD?oIDMG~P
zBThoi#%r4sLHK;MJ{(a2Nl4H2vOTvZ1E11SVxn1Qxc5#NN*W{mW8TqyC?C{u8TF-+
zU<=KFiT^r!j0=;DOS(V}{;^W1{S7%Zewc#Rl5C=)jLeW*-d<qb)WVAFoH8EjuqLe9
zmv2+8J^CZ`6|K%O2;9{2-o&(Mx6>zae+Z6hkf2my4!20mBDiw0GPa^et62{#Vc6`}
z((4z*Z6|2{9NDM0afNlu%e_FkSntabhqwgoOO_Fn{;t7cKB3r0L%AXoKa<j%B7l0U
z?K9}SKUIbM=Kayc-Iv=fERM5x(lM8bOBP4w99V%1W3jCgPtg7uv__0VN^CIrDBVt6
zc5HC>IyS7Bfjp@96Z-AN6{y8fj8oqB{N0b@3`HWw=bQOW``%HRXQ7D(_0}>+azqeN
z60rAl?ikj4@ajj~fipqWZlS@UTuy&(n*+pzUtrPPevlDBLFu%`MqzuB<E#503NCW|
z_+9++GhF1NXp93pP3#kJ3;qeu6OhSwwwyz9;&Kf8NNeE2(G`^I$m+a^5D-OxU-(N&
zW&~eIKQbxaNe^1J?S2<emJ!smK}*&hPv~luaT)Dm)SaRrt-ul#%16%tLu_R!AQFi!
z(0?jVK0b{-CMdAkw$I|^DaUCggzfR|<=cB!lee2~*_Tj7q)0I_td=>M-k=^{PdPAX
z2&%YfioA;vxsQ;;k+hYP6x8X6J^pCZOdc=(ya!#)j7pB+pceqWI`W~p^ER_RU=J+X
zFP+;!;-4}0*?xH6p;Uv_NgjXwf;;_S%sbx^o5BVctDdjk>o@PsnF?!ubiDv33y1^%
z=8$U)WP|g0F5a%(<3#?Xm$lfnr5$PHSg!oE@L^x{-Q`@T^XrEA`)7a)B1#6y9A6<c
ziuIQ`dQ2fzwav>Jr7lSEhc1VzK;Mjw(@G&Ds|gHQJ~R+`Tup2HU7W*6l)?yDxWDwE
zP!+^<5kMHH>9)n7V^QO}tIR!Rrd)iGyw#m6yFLY~`)nbm6)OF-6~azh?PkA3N3;-9
zytWd=SXeRg4s!m!vC(PYw%Eqlz{-q^7lmALqDXBjpC3gzar13_Q?9kBpu_fvU2!}L
zo$}5i6ejR}i;OzmABJ|D=6*Rk^n>3}bt-R{b+hnC**5-f$twlpV|@XnK}F%YCjD;F
zW?h1=Wk=$jSlnry1gCy+dMIsc3Zs`NOOHu$6#J{$rBlfRrNq$7Dx|-jhF=c(dK5F`
zB!y&}zFnIE*KTiA0Fo5P*fvdkv%ra_xP96XG=|Fiy5be=n{X=49~sE~fBMV8*Yydv
zc1hnB%DRVwtyMjx=Y0t3yKm4~GG@0Jk|hZaV%XHJJ)72^5FE~?p1^ItKOOsdNTtcn
zFUC0FF?k#ZoAj*Qre>->eb|#b&@HKPF-Er`|HQLmC2aFf{<deQM80R)(0RezW@feU
z0aGIDJ>uac)o<pLc_eLZr2EMGk&TSTSh;JSRa4w3<yFSF@HoFHvUVR+I~Ho+HIq-=
zsx%u;RM%Q9$m*QuF73Jv3&4Y)5Ee6wtdqH-HOF;O+o-^o^%Qff+7p(3LLaZ(1^o4B
zQWi#D(sEl&QoF10zCj(u|AG3D+wf=StJEL{jjFq~Gl6_d<R?rei3kI*5Rp^TLqKHW
z5{W>dQ7ZT4tgg|VHnn>yo0XKCy(b=1!`V@}WoxpwXAl)GlUq|w@uFcg&t6Gkz$B{2
zbFb>icG2`@U@zd-20xfxTqTm$7N#)euCi=8=q!w2u|_w>ys>r){)&OS3My#^d(<~C
zRYt^TQ8xz*w+muRweYOxKfA*0@xMF{7nr+0mDcl)Yn5WrYv;-TCUT!!(jIQe6vxA%
zkdSh~kbACT2x__66_@Dc(r9}RqBs$yyb(W-m^*o{D}+FNZ@yib2WL>$a7!TLAt1?8
zI^>)d9wxr`?6Y5auRhoqeaMslaD}Gtr@a300L$7jU-G4jbN%UI#aY-(h;FxVp`^@j
zh*u@ip8i}4eaALCBRuopm*PjcDVRLmHG>O(Ts7AO2?_Zp=__|e8YJ&8AdutEI4mU7
zpN2Sy%?pi$Be%c{c{H`h2gZV%uXqv*9HKeSLKHqs3qhbcCZb_3sIBkBrYtAJISBWK
z@;oy!=~T^A%yfn;7}AUzHt-rYG?R@wZg;H1Sj-qJREBn#9UsYINCV!9$haJpY)2rY
z9wh#AJ+VMBd^%s)(`5p%Zq99J9df(4!`rO5)Z#_htbUjt2K(MQR~~T%Qq}jebHpW-
zCA#HhE!;y#zfgCyRvkvj^X$y&JQ_dc=!y(s)`%!VWWza&20haaphSiSVx@!XI9z%4
zodbv>?j}TUzgT3UMI8};$~f$^l6W>Sdq1^<K)}~U+&jxMn8RSWYn8h3#yo-5+T@w6
zF%U}J7fL*f1I>;yIha$(@*#KC3fzo}HkRAxe$=Cr?O!Fopi`6ff+m14!`LhsxNpxE
z)!U4Q#Ql73J;kB9nkz!<!=32a7Kz91F2ID+$UV|15nZHWEt^_~d&K`#Lprldu!Na`
zHz{>QKSFuWqN?Rm+4xlU@Yz-PA%n*`#eBA=C~q5}-?kwY^B-hznBQ~_{ai%i)<`-g
zjbfypSZUZiq(fOIJ4|-Tbrnd=jf!e7(K+D^6OsPoIIcOr1K}ianaN~A4)eh;)K?#3
zi4<aG{Q-_Q5$~Oa2>2r`{t<LPOtGb<RrI}2fum1-1{HTxv#oas0Wa8HJJoA~kpl}N
zqrroXHqpqIKB$d)acuKBxmHH!K37Wz`dd+az5u(#j{-X%-%GK0rG$k^>gO8RvfI1_
z*n6kpcbw`_1d1`%L+|>*bewANWb!&!2Qx=H&Bfv{#am)`e&Cf`QTn{1c6`AI5Q9k?
z$T7C`sM;T`0ky|pCM4OzuB5BP?zSPTN`6Vp<ZyvNna@f$KDgF1s$y%)s@=M0#Ux?G
z&FP)<R(?R8Y&u`}$`4ykn;we#R)IB=mKj@Y1}fbQTWfg1iRNtcCq#Q)t^r+qavROZ
zomtLmu<1w&88hSFpKz!$v3!4wIF)tA&`9@(u0@P%{0<4^Ar=^&0oS!#P^g9C<4dz+
z`lqlUFj7-=c3@+`Un>Gw6uwYZ$-cQOGOQ*J{W#*Mg!L~s{Y0RTs7gEBeck%im*0`j
zN{N5JfvPso4hjFjj$tGhPn}2Y>xj3=qQCiZd=TCcPP*7P9@B=`gRj2LRM$<N{paJ=
zr5*Bok=L1(NIgOVqs<qM^2YBuTWIo3x^6ni#mD`8!t5%rVNp2`SJm;;=B9@Z`CYQF
zcg4Wxw|NvTCsCf?sg+w%*}4Q&$vnt0s5`<A&AP5U%G(&HxKbOHo2~C0<n26!>%G!;
zZoYrVk<npe-I~GqenE|@{4RE%|LNFK^Bw-LE{ZTxR-_z<<(GA`8(u_$DayElMSc!;
zT{|0Ow3I4FS!0a(nS%H1Y_3Q|7U0Ggl2n2>9ytq+y9@kMO?=G{IGa@I;;QIsZ`r^9
zou_j{m@lZ4YLstDqq{%ntCC4loQBm^e@t|q(^{g>ndl)feHi~a7cHLh^5MZzKKzE=
zf2`WZTj!hEXdRl8Onu{x?5)~Ld8YiHleKzs-AfJ6v7BRnMQ7cb?=voGpll}R@H0vE
z??&D+1g8(K0kq%VNlsV}Z~uI`*Iwy;$nD2{>_t^|%^t^!qA5ZClIEBjk^3veQ~cS1
zkw(Ip-X)Xw%sIV9>jj3L$@aO=s+HEp6W(#Q;kqH|X<T>tvY%fyCzr^HuoVkXOABR;
z_eUMjprm(`5b`I?;3&KziF9n?#&!iUY^Ir7CfavPkcP?W_f#^Y7o^lgi4;nF+nY`M
zEmmh?&XqnhIhNDS8$bzOc89mxrec-MbN2T~ck#h^dEPsXXQjH`d@jjriNSuiihozO
zw;o7kV(N5c5s81cE<!ax{<WPsmk--gXtX(_kMWmG^FXdF&labfz@U?8Jzas$3YUp#
zC{L}Vg9_R2L+)HYhHwZIi%lc2>mK07Ci(E_@kQX28(*b95WS{VqFSO}q}yHQKf*2w
zh))q&;C#%Qm)%p_gajDf7!E^&+s7s?i{L-~FRh%m`1yOkJ+7F=6c|Y{&`qq!AXHAC
zEEj4vxl)^~WuBEHIaHh>HDs5^{iQJBe>HnI;~#BbFP*lhsv9KPOg^IMH}w)<qeDfR
z7fp%h04}9hWnoN?X@4L7G3pQ@A$Dt!(esk$VBfaNR$(LI_*m&ww#6BCyU&C)vE<r9
zwkDdfg@~UDV>;jX7pDDmIruoar>U{0j~xzrv~T2q2YrqjkF(D6?~#A^&~6?_0Szsk
zmyvdMPMHyhl_O?G^ko`3IQ{J;8KL_bA+z}f3-iT_yiS-w9yQo?TF)`1=4E7Bb`<1>
zu;UQ<^efd<6rnmw+qU&GBe`8KyY&5&pMDORO{!yj<ewky4mST}a8Xd-Pd>k^mrtNh
z$F?o-jC{7YUEYG{8oQC5nmYf~_pKtdh?dKSTaNBW?$_m}Wyd3K{zEm_<+81(!iyyX
zqARG|HSgxg=TN@EuJN{t(GI8v0iod3EpB{ky2ky-yn@DCHl*OZ0Op3AanUB_rn&|x
z@AfHcAqgtoI;o7W5sL?31)HlYBk$9?P^+`r0~Q9zS1gA-bEbK#k`l``^25|C4e|;0
zyB=7zWxvGtuVb3`&z7&Da5~~lS}U>am6u`F%d(I5jTc`iXkg~08#@pj*jdel)Bm`X
z`SoP8gi@y9SX;+e_2XdW$icPV`9^U5itOXbsyo)T)S{{q4Vc$e$Ot+ec|%qiH6F~2
zqoixU#%A3owIrP9gU@8<t1N1siux8AG@8l^XmKO3SMQBYYl~cPTK9d{Jmq^hwhofi
zTsDJ%(F|+PjpA9>@>)=yRi9XcVfWe_LSIWSG{x07RAyMJ+#|<2w5WU(4$*P?fU1DD
zdLqkr|E1E35>MoRXZasvh<(jws2}EjnS<N5RJ5g!&_2N?4kzKF;p@rCxF#_6af^3G
z!g7g6%L_!z=vN&kwlF%s<D?T`+~#uEC&JImYWb}cne;UG%Q!r%TNo>*-*BJ<Z&V->
z7dnCFS7b23;)p17HwOx|BZvE_W<|$Wb>yv@Vl8CLU~a|MuCdODuBaWCzhm|ps9jLg
zM5>ZUXX6Tat?c{LEGA>>`CFt_UZ5{KhIKMblaw8pTy5gnG~3o%UiAsC)*|mq7g3I(
zz<8=myku$jld$9<+a}f1eX8x!fOg1wpm_Wi|NT5>@wfP>U>0X&SgjyGbPv`??`F49
z=aC>fB(AN*9*JfXKzKCQCV!(R%FN)8&|)$Bs)yJVM|Azk7b7X*J&v7iG>E0%$iG9t
z-f-VkK_t}p!?|L##SSW6Jy$O-vkpXw)1e7C_{v;^z%Z9(=p|(QnA2uUH$RJR4!nbH
z6dt1!+x9@wp@?5Rim~b1O9k8%$lUds1sqH4jBPd~TXv6~8IOypWTRqee3glTS!fL)
zf++J-?E*`7U0R>FOOjeEy}ejzaWhzvO9g=0uA9gTjPYt83+6Jcn>^neJGIYrAB<C-
zPnrFD&_7yR7L-prt2~MMXm))J1I;sv)bauzVvd_SpP#^<kfz*!HjkfA_m9=>k5*QP
zFh+hiLdiLR27J)_vz(0Ayl>8t{DN)c8y+_Fl+xbO>uiSyWvv9>>D#pi%$2}`&P!vj
zLX*GueogRD78oR=u#ex??=NUxY25=?qbQBLu7OUiU7|19Oco$~@<<|a*~A^rhFp`)
zshlqe@C+d%zP3vQ<M=ax%K}u}y3+@&z<hbZlY15iQ!Nks38B?3Yd#Mi*Is~br9INZ
zuCc}J{CM5lyO#5={C}6_f&W+;Lu@o<cp)wTMeBl;JO=+P{-~>^cc`jwZ{mc9#Z_;9
z3}R5P{lr$Jk7Se)G}05^3?%*z7cUS;-in?la%sZENWu|lFpB%z8t1W|_I}NHIH4BW
zHVsseXAxXI`zM;h;5S@a%Vvn^XQ74761iwc+Rs9-JEk|bW0QQ%eKc%_Q}Qt)C!zPl
z9icyZ=zDffsz)ahu97oI|65`M94L>?Xi6ETaADm*arKy4F#?jw6Eqy=;~?yp&cPPl
zwbk86$0pBwu~z;*O}Y_?d&opxkJ!eIrs7s~o>T9b<R<uOI>N7iZBdly4nj|*8#vNU
z!+7CV``;#hTkVqavNN2U;O=I*{s#WfnkLiu{k*fZi9BOE8{oymVQz3kE=L4qnt#lR
zNq1jlthL+&<+0Ha>4mRB1=>l=ec12_tLn{_#$`si>?U6ve;DLy-S<4x`=k9+Q8hf&
zbPO&SnB#-M^S57E)PKB)%-@B_jmlX!EZW>oU*iFs%c5q>R9dp>c**!o5p)o5+eh!F
zv9@q5dRhr-dKGJ0<r0m!&b|gDmMy+C6pc$DhFHM)@(h89H+#$0di!i<yU^}SzY=c_
z+skBvOoo_7lYD08bTr&kRn-{{Ve%n(aIqHlXHvzJ&9m_~J5t=K1A%wf&ClwU9h_^!
zlZ0?ZkUr1a(M*}K-6@IU&+!l^fA@#h+tytcD?8u%G_YXPT%yerRc5GT;rm;p#v+Zb
zMO5dqu4O#l%%e91*UR%qn1L!WS%x)p8OkSgP9~;bfBj$(piW>AfPx%({MNCLnLx;N
z{O79vr#>n|QOmhNWDD<W>Z3`A1RvPmv}uQ71^FKxqJ%GT0Z26%1}<j}=R_EV7l*$u
zDHtLnu@ylK6h=}f5w5F|xQfFc{XaF1X~;3nm1=X>w5EJVmF&UN@fm%5ejuu|iqBO7
zS_B?(pZVeoKc=S7#AH(rokiVPJ6c7Cgaxrl0TEgmJ4aR<dtU_}>9dd$I)?M+w6o7Y
z;bBHc0<HUf78S1w#g$T#Ml(4(sUS5$0@bO4GKS^Ls;4URwIe|hWk}rIw`fZD{#r}4
zahwJ24)rfXUw;b~>(4LH4)y2N)~IL@x)hpI#I_QLD8&vjq^s<FmioK)X#{0)T%XC#
zhsW*XKbnW`QY8&~#;F@7R<0;m5W13xsD+~`T0O_s6pS&jipaC23)%NX?H7&wEf)PW
z;n)zxHJ*UtnLvnU>?xECjrgI??hKDW{~?*#wQVj#gVpkzOx4sSX8m~DtXPuhd$x+v
zDRGO%J`2wia-<XEV`?X~fdTZ7@R&X(yJMPiRQ*L+9?qIT?6gR=u9iuH*7JO8*$Gid
ztbha6NzWiaC&gwB_u{jGZDgPTd)&VRegroY)u?syGtc~t^jIzax~=-7eiaA9gNRX{
zDeh^g5JsDBi;6!y{}Y9bsCK=Mqy4?pb);>C7tq-lpq85|qrEZ+(-WKJa<8>r`d{r`
zXHXPtmnH|vppvr$MRLwrK*^wp<SY^gVMqd!1a(MC4uXh)l7mCeO3rymgCaqOA?FEf
z-^;z<{kC>%>we$<+NzzJ>guWLGu8c`KK=IloaZ^G``*Cw4%bAj)5%}rL+S}ic0vv4
zCkML@20Y(~WcNw%3B?`vCtaPVvm10!RS_9o2@2R+UpA@v5G|;jf}EORE7L1y_0Pnu
zh?{)De4zkZ(n4QTXLNl{@KnO7-fOUbU(SejQ;h#UXK3>BY4S}_OIMe*{wXfDEhbkx
z@UDmamFwMP*GEW=wbXWRE1Z87KZaE@XJ3f8%}ZM6nIs|ePY@=*&>V;EiOVQin|F2j
zSEDk_5;lI(-cq^^-@jMU>`7fHuG=UB&*6I)IDD__M{2G_U}oUcpH16^&jxx?6dnFY
z7i@u@!)qt>5vr7|>pwVpYQ0wcd}vxPvb^YtrQDX#2I6ArS4tP^K*TzHIA?$+>!bJs
zlCr!C>+;K+@wX?miWIfX_Us46Z?fYut`d|NU+l7(r_<ybJ>pg8{7A;Rh%`IYg20C^
zbPk(*9_AP-hZ{NMks!m3^z*7_(IX?RS_q2?``G7?gLn1#ZQwyD#o*72;KeBkR~EKa
z0@s-=DOdM_h^`vp<^nz4^REG59nYW11+0t@J8n=FyoqS$cc8pq2=$r=NZD|?8fL^f
zZ`!x=C_<gz*PLpk_2#UdzVRZdiYWBJdq2k~F-*_x7EoIU!gwW`zAut?*7SHOZYOtl
zgMsLCW!U4@)z!UnM}w5X=Y!*qf}3mcP1|G;mMbl3OnnkH8m3m*5He*{CpnXtWp-mE
zpGi49F;)g|(Y?V^v9*n|{O#oeP8ct?H&!Aj@dz>V+T*xS#f416;uTZw{ZGa)79a0U
znE%<Ul(n{zXvo10imEJ5{@53DS7ypA*j?cp-tNI(*%<WeirL!Nsz*HCunPjD81hCC
zuQ8`OuYM*I0|5^7D=~ZMf@RP*$>Rx|Bq;rSm{rqsn|#@k!+hOAe^+_*;fv6-qnR&j
zzg%o~rMj$5y<b9CIe4D7WqFDkC}6T@Vq$}ZW+z^dH*rsbyfNn#&|4a~!d8v7W`bN!
zh_9tb%u?y=)`Rewt|}^p!}Nx;R8_+$CmbABgpP))soh#OnXn|{C(Ms0#cD~A8A`5I
zbBy%a@_Z)EMr(C%^oC@%d}&y0q`be}*mU?s9@V3UeHSk)`qX>p2<d3Q<jFpY2jODg
za#4cA!X);h{#d+=HT#AojR^C{IPur^vuKj{S(;-OL(_Dw5%5hB@`h-wqUd;I=PW+%
zZ-b?MJ$Hw8$=<d2i_NZ|%;eU-<8)~%ki&oAbHmtsb&+lc17KpAMz}_Sphanl#uR;P
zT(qx=n*3)s^TURNVfhSwJ~m<H?uyyU3~5Rhdws+lOd>g>8W5va57YH_mH5;TVnKw;
zn~VC$+xRDGrDn&8cHDz~#_Vd2+|vBcV_buWY5Vv@s<WNqKm(K#Z8upu;pg>y?n|Yg
zWb;C;fZVGMV}VW6_KPgty7HoQBI3y!JC>r6Y!5&?@95}4wEo%jmrcH|m!moMCfm`B
zwQ~EROi5Op^9#Spi_U?HN1>qk)Xyx*ET<jn8>65fs|l)T9X=Kp>NzT5sphZmB@*81
ze;ukr^}BgxZo7bM?ndtYsGL6gNjGRc4uc33<xWo(UQy+vCW3^HgA}m!4&*G~^Kc^k
zPqcf)Piuv8AX(xI@*@w<agT=0zLM#!qVQrkG@zXcdx7iOPMcGoJaWZ-OW}-1;Zfna
zmS4-XP2n1I5yALQQ+e;Z^r#x(>5>r{nKnY_bIsW4c_RJ0MiG>!S={idoD-*U7;<s_
z&RGsnot{}-r}+o`s)NaA>SB*a>`pG4%P08wDFVSZUc*WVUwJoL>&4TM4u5J$khRZy
z+2f7oc(5tzN~7?ULkzsRJjX!FJE98`--;myMBoUn$l`A2x<#<0w$01p=iak!upfp`
zF@7!09r5#prs8%B)t^$wcx7BXlc_s}+m2uO)oS$kqI>9u{LE}JHodp`{!Eo{gqQN-
z#N@AN;3{rLR*Aj0ZD}YpP@cd*JlFE>P#|R-tD*|o6`h;o`2BQIP$^^*JIU4D9R01w
z*KD$+Jj8(eB~#wB)N4X&C`oh}s0g&m`XV$>0IVzMuzPU_;C6%n1Jloz%3zYa`5?)Q
z(V<v9lg+)bFG?_{9yFO$=D2TUkEha#59nsRt*Ii->ox||Kol+&bO}4QiFa9ttwgxm
z4mX*n!?%v#M~*X*y~vqpV|94Rmm4^|M71SgR-WzZcWQ^Ve~)0oWgx<pDL48JYJE;1
zb`NJqn_*@*G!XsiB9p@Yr@V1?g8#gqH1n6R{bbktuz(3Pr+B|Or%@x&?@dXYrTz|V
zf}9;xA$zhVzKWUASo(e;CIB=KtZierz?ksnr*3>{A3NVGdRG<SyCJV)thpBycKA>p
z#599vHT|myEUK3&Ats+9>?Q7^QupP_lrU6Cufg5S9xeU!*wW3h3sc{0#y*C~wa>xZ
zWwSgQ5Pl%swp%mep%?q?JJW={=?K^5s%k#5ozdQ+-SJtovaN~A^XDJtzlfq{O6}kc
zu{RV$JHI9iDqJjVJ7bH;zKxw4pq9{}Gk_Zn)Jbam64DvC{L#!t`s2M6sje7GiC9a<
z8<p4WAtX(d?){ZL?V`?y^?N}3iV_72;s_?+t4;8x4|kYl@U13_+8{LslDz;==2kZ>
zb~k$O7Vn`Y?BLC_A_1G$Y+220?{_psH)}0=V7=%_QoTx0>#ZGwl++l>8O<HKn`fp<
zG+I^Hhq5xPz@HqilaTe2icQA}RFXN|POxS57BUOo!#zU0#C$2u*@`~iK(RCuEeNzZ
zb{^yRfc$v7<U<!5mGKzQN8<blZ0Zk|P-TjZE){MbxdmsO#PhZy0%2I#oQtF!cu@|u
zUV?{#P$_3}$VCpVd4P(;k))V*pt;fndbcaV$6!g!n>-?KBo?Bm$yqsNfOdR^VbguP
zqn#Tn&G^j5)(z{hC<nTN?ruKaciYb~ck^uB3t}D{hQ~h;w3yX#u8iiIySWuu<cGYW
zgmdI!G+P2PFgbF4@2^r|HY-|Y{mCoL%}mpx^n-ah+qbaLiy+h785?Nvj9pBN>u%Yx
z1j*y@!)y<q`0D0e=I0)OoZjhu*7tLE-E0Z-)(<fcb6=g2U1uVwl=)uo(DKwa;-{OB
zb?@l>c5N$f9FLsxIkb{}C6s<T!^9x9|9a`F*dC)FJV_RDI3Z`zqmxY*p5A%}ekt3$
z`kpB1$d)+<PE>7Y)Jf`C_Lg4gtbi_Fnt@u4u~F6ec=;pa4L-2KFqR*6;`ht<je-iC
zvH8ZHPmGuhzZw-wTzSj+e!*xow$Zq(h`cT5GoDLWcB2q#B)YIIK)vgXNckr)AC{V^
z+Z*M4+DCdzWrykegVr87o^d&Kw*a;Aw)AdyGUCVUXHfH7ly97|BSfOkmlt0uTh^c=
zt73j8bq@&K9o12FAs2I+BS#gjj>+n3QQy20&(pPCKX6NZcf89cvGz$|x?ei!93MSx
zeM5m~)Q6u}e~or>UJ>S&2|6Q$vunWmC-3#!w3S}~>MaVcSDYWotP4&L$gXOJd88U<
z?+4S|5Mi?d!M-^!C(bv!VBc%K<-WdLZwhCfoLHZ;-e+ZT7a1U6{VBf_$gz=pEKRI$
zw_!-1@-=WvKP~v>@NF(;wU;Es57B2%#|weeRU^5L*H^)bVHvc~!X)z<<YZ4HA4f&$
z=ENNRwb)kC;qk`GDwgImVXP0m*n{^o+V6E}5Dp%Gg*<7qRikjGad5|9KL^B#V>VyQ
z9ds#pl5OM$(t~s$qLNn?T7thZn{YdEC$HVg>@=E*R63z?!b+MQNpNq!7(ek6SLc=b
zF08$jcKDWI-T4u9A0yg3lqA_qB%+5#gLh_+Hu>V}B{VchH`_F4ZBGrjf#HRN5cW#`
zQ^-UkKSq$t5b7FIkYgAFzX;wA>wWOci!2}DZ%Pi!e&}y+K<#!tnthtj!ev>TYJO}q
zuFFz!QhNSw$^%pTEV=>FN{s)Sdy^OP<m`r;9>E83NbD%0YXjZ8VgOSPV~u4B+9O;)
zmwuXanaN_HQz_^*;i1NZoKnl=ERP6pK10IG5dr=VEH7i<cwc$Pb8L$y>?<By8Po*i
z%C+|*>?i5wjXFWIU+`BH5n(of5Yrr-9d~RGL7$qOd6dZXIg-je-xKN150%|Jb#PLU
z8zAa$kGiD`x$*{pGFLP|f={|&<VJONh)((Hi=n!Jri-WF1DAXj2xpr^t-tikxpPNM
znp}h^?HbCY9bId>zWv(f$9!m~4R$l?qu)rTq5-{0Xy@MN^H$U&`JYcnJNJM-fP`%L
z7C$xDSHmc6R}|}d%-<~$7+FPfHK}>|gl{}T{|M7ZqgKj)Q}G_QwbnHR?usBL37KaF
zX>)FCQy-DL-istSxqAFihPxBIGvfTh!8oMNa82!On4_ABh1TvVRkcImK5p+-=Gvml
zh;~Wu9~zEgBrLyn*RSw$sO?(u7jvk2e|vSU?1GSm2=!9%;p+J7kr_=COcT$2*<3yK
zCYp^P<ic1~|Feia&qqNSr|{VRkS60re~pnWB?su~-e8qhJhO5K(Fv#oX4RVJHjNhU
zyXabMYY|TCcgER`WqUS3QP?Gl^f(l{_|jR!*gs!MFV7-cj`WKbG%*SV7)&*Zp3FXg
z_83|pi`cq4%`2m}pyXaDTWJ?cDB7%Ukf`6yxY!sJ6EpNe&9N+ahs6`X`Vc8oge>?@
z%3N4SV`}5QHEhUR2zAg<z)e+7ao^GB$wdlk&Uy~lvu!@>^oW#KFDgPmX-GDD^tP*9
z=Z~rUxqd7&Vd+1VGC#B>#^Cm1VF7;6<=1|vk9yxp2;8cxY`nWocmiR_{~h~y$u|t+
z-5R{xN+Y&nM}JXX;OBc9v*=SpKRvNXO33i8Ek2%J%K0S$sazaDb9JRZ#Hd*TV4=%)
zJu;QcZ}-X*i&3dsnvrcl3hlOeFRTHdSqkW$CD(iB;9zIq@ch&GUI)jpupy4|<txMG
z7J^h?nyg5OGc0qZ!&qka4Nl9)Q0XvPG&oUvJQ*Fr+_*J6rYTq0UHW9OI*xlNQ|f43
z+uo84UzMf9ecFPUibODh<V%|MGu0%SfcGIJT|2jIX<!27gVb8`DS%*RT=NgS!ZBTC
zW;ll&@<F7(xOkYRd$OdWS(iLG!=GUKX+y4}a6@lvm#D0<=DhKJpfg+QiMa1l27uT-
z2rmy#yPM)Gxl7mWwGsXOb~%w~nCgbL7tk@Io`wSL6fsT1i7)5BVZ294L93C*AdzR&
zpZrF($A|fMu%;c#Gm3#sxL>C`$te-++zGvCZE=9bJ%T<KT4~NwgA-PgS^10wz6aZ8
zA0)q(yE~n>85Fcr11@{CR4vrLCb|3qQMxGZo*gIg2FTknZ7fFz?Rxg0$n-6H6;{*k
z?qj1_iI9}EkO^U#x|lfh>bBOr#A;2G;*?mvw?ir9@k}_S<&RTPJ)}r0cAKNuRq#Fr
zbP}0`V0d%OA>Kk*%s{mc1iVfK{SsNkJba<Zf+?zu_2dI@*`8ZIO#yL#bY-nf=qQA^
z2o@WB2$2x9NjD%cd~QWesiRswp}$(jy5EhcpqTThn<_JzCx07iYA8Zvd5<q}ZI4x#
zr+9r^-jf0y+VO(aMbA-HKqq2LXO{w3t8MFx%YAWe^xa!JZS1s;O-Jl>wUifEpJ`#>
zMR_~?=glV&250Ub!l`KOke2d#iN|Iymx!R!hYj6I>aq44^s_-R<jrF!J^qcB-I**s
zgnTd6NUD2dUZtCA`NJq=6tQq?J&E{iUMOaEm~I!(=Jbr7=vTW48B;t5P@#>~SIm2U
zcSPC3u^U+dHjxbkb&*NyF6)tXq$%*Huv<Tt3#J#|tMpFXJ)C^jeoeqsH!u!<Q8`%H
zd%BX~cifmMp)^`pz{34rJIR4zTubfE55nub0gyy48o!SDtFNe{_@lYW6rR!Cp~Z8N
zHIohZuzekCPd&)=8eto~P!AU}x9_^y`QiGflP6Q9oOh#hO3nBbW>+R(W+361-AI^G
zJy7puX?m|0sht<^H;&cwVNJC1husgI^{*VTyRbWE8oytj0t26lY6YnJa-fwruqz-c
zELs4>=BtE3j_%jD)sIm7227lRUZYqz;mB@1W~6N1WCxkN_F;pdNh5?pn$eVKp1Nu?
zn3U?(Xz~49X3&$n6A-k}*iUNK&y$oN2g{py1w6fT0g0Qmh2T311#VT^lSc2`oylBv
zr%W$Jh>MgIq~}0g{^Wisf+ly~t!Q{2<{j8EJ6~^q%l7{6Se1Ga*$KY5A@wwUguYFp
z_{YTz6niI)@adsAA_)>~{;_|%FezX;CZq@SZ~+mAD%}WyJYB3eONT`SzuJ+0H-%4G
z?2_jQp>=xgMs70tJpgU(g$=F=!5aCeqtDiDh?2Uf<rv#!1AY-xba%$DU*>Qw`I$Ef
z-k^Lx^>AYmowK+ALFU_7+Z}kFUDr8yVO^LRYJDnt1Q#nzRVt7#EVqz1?O>Xwbic6b
zP6+Fh5qo0E;-{e23bY%rx1j1y@V?$fP+kn0BFgv}H)%z!fuk=8J;-IpoE!*ky1G2#
z-alNST3i>VZ43pC04aHb?fJI}O4P97(Yy7RbOR14+>Nh^ypFI0<yW5h$s5d1X8j3$
zp`$NV5(r6y*aI39a9Gpkai&6Svo;GBFpZG&R3XgLZPYKm621sZG8%>5;kkOyTaCxs
z8jK|4W@_*#k~ga7Qe|+=Gjn5l<%{tWFdYOTNa?Y*9d8M3<kBf4V5L|ZyI*1|iqe*k
z<lS)91Ra%)R&e`Kj&Cemk*|wsjK?B2%GOu-et$Np>~Z6uINW^)%u1=5O&Lqz75ASi
z%TG^$*dMVTl~0yLED{?f?!|wTp&Ik0EVhxJJ|$gooMjTRj%KCz(3X790;Q=9S^a$9
z`M@TNf|rtWUu-KML^vZ8*5M-6Qt-uUhZE{n_2m><ta|jmEVmCub3E3c;$MeLiIxHy
z9ae1M3qGtj<ccnbhLFs*FtN_I&pnTr%bQ=ojt$Er-I4i?BN$z$9TfVt<{Hr0q51@G
zc!4B2u{>`l(lkd|=X_W%3o8+v2j>8{*PGjlfMb+#jL$lVqF3BrB5(F%ug$#6EVsrz
z1|NopV*JWNct<Zf#8dUx*d5I~Pw+ezTymcjKA@<I=?~HCNy7;dJ$!9vrl}!33$mk%
z#t7Y4tY_bNtJa?;;MJCe4St0{xeO>zQ?g3*si0~rGqhmj6K6vzP3uD!rpE6t+;aqh
zl6EevA?_QViSNlnwuyIGzk7LZ`JG-_HecYt998ZVTfjz2LTQv=vzN9JhT<pM)5T|f
zV(8RT58(peZu+46@a6Z{wD$NX?%z0DZ^=*%6X%BK1%I5O^Vf~qXP_HQ3EmqJE<x5<
znY=SXgI5~m{SkH}F)H%-JeoIo657ElKU4hsEMMKj`Ochlg~n$FsgBQ0|E=uxs<v$~
zm&miPEmCEi<!60bZ2YFTW{@wLD^mVq!~hd<bqdb7^^;6OjSEE+XNI06fEJPgq_yYs
zUBHOUJ#83hu3hYp^)fN8->o|YNiJ*`%5KdtrSfbuo!{|#fV*vINuq%29GD&>OB$p`
zLe%gq-r{6yH0AnNDLNgfXJ+DJ%I7nS)*D#xNUDAGa<O2tP_oW^X1N%5v)5-UDxPL(
zBd;mAalFQKObTI(v56)n&O?>?3ji^EnOemZXYlm7Ef}Y{=H}&@{9`*W9S&MihT@1E
z)LIP!31LALeBGwH2YGX>7l8j<Q7?K+F5wq`F}z%zudlArR<XW$YAPTXaE;OR!DY4q
zID6_lIAdeo2I-GI+(11;c77mv(yLMJ2(K0->-0mhTq7uJIFO$0k(aF=HF`t()4(UA
zIoEBT6SrV5U}KE$Mu98WGy5Vs`MUv~tWb5@W=Gms1014s^QUX+G3+6CJ6HL}Ey2Hh
z?a@~rzWGmMugxJq%Hh-wkk+@p03EB~kLS)!=~38?Dxy!<IMOVALm%B_G@b(9gf7|f
z%e1GvAELy?pku|GZ@!EDnG$NB=GtvnPsnJyp~*E~4fL|`bjwLy=fuTt8AALpJzVSc
z7o;d~Qf~C1>~qJ*(@r^CAgc)Ih&_fiWy;o?qb2s|^ZMq0Cj0Ks@y@=U(Mh5LpAVXY
zq0?qIVQv!eTaRG*f#MUZSBI|)S^GoEZVC~s4d!?Oxe<<r7PE9so3ItxJNY5V`L%Qa
zK)ETT=Oq8nFL}T|lqNhuIm2DbYsr1&UHtcEpy7oxkgeB)RXYs=Xobgz>4VzKD}?FW
zu5|0!Yh-u|*Eq*v$g%wY@bryJNz&g-r-G4>3Q-x0gKYP2c@3EySORWP@cNA~Rr+So
zxp(vs`GaQ-Xu1x)v1~hgGH2~vlmngvE*x`jsnRaeuhOC=C@yCswlCfS>Rv^m$^?|f
zYs&11#q%V~X~xTQ_sTk+tNF|*4sJFVw&6-?;TdAFE+~5h9o0kMz@^=#Ddu7wI#FU+
zVRWx#epUH2DBCVm%5_U%=>A{SoZooS;mD-tg->qVv^GPks9wkA9b>=Pr#Y$qaS%U$
zc%Mm8u+cA3*Q85E&F}uT$Wr-a{Bcl+HDP|PX!Q(gf)}tfU1s6Z4PoA);RoPxf}LJb
z0Al@y4z62lMq2Ve!t*Y)I9@Sueg)An?N6B>%l3XoJaHe7=6<oEs`SAGXJuqSCy(X#
z>^RE>ED1-?o*C`S;_lF?q0p%k=0S#TDi(k)$&uOK1h9_=(kdh*pP1IcbLGCABq%)(
zzD!^I!<A5GymVGM0ALGlNx|MvqG^C;$&Zln{C2Hx)NKK^zVnoDiAN-}q`NJ6DZ_~D
z?(m|+y?_3XD{44n?(9K_q>;8Vm3y77O{lgDtHjR%x}2n?<_F3LlQkn*o2YF!59HD2
zq*Tf+OiAJw=acWg`~BOfffDZD=lI`-_HTdrzY{Qg{uBjQk;?tgLH9dq`Hu_x?{_$w
zNJskwns$UM;{SEyyePW7w`Qbm;qFR*#^~>9nZE#z|KX<!_%~xP+{T*q-!LZSQ{k(i
z4aJ8&`xi#)k1-A3;suPiTHBiC{taVV{pb4DJZPfov%g~Y^0D<dwlF=w7#0#1==X0J
z^JL@XG~Yd?a6I_u`|ZE?>wocmbrxV;jl%A4{!N2_KJ2axu3TWsE_3hNW!~*?IrvZC
zJ4yq_PA8bvsY`X_zhs>3jpw@$Xx0*k{z@<W?a1i$1dRU|VYTt|ey0~lmcgHs|KD)%
zA8t)tB-r?wvUrkaruDBI8+HOQS@Qn@{kMbj|879HU*Jc_F4K+K_+{Y$A0177jdC^H
Gi2nd`UXK$1

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/pgadmin4.png b/assets/documentation/1.27.0-rc1/images/pgadmin4.png
new file mode 100644
index 0000000000000000000000000000000000000000..3edaa9a30ed9c6c1e8f8e830dab926e0a057c29c
GIT binary patch
literal 126821
zcmaHT1z23mvMvyUy95aC5Q4iC+zAfBb#QklIKkarg3I9U?gV#tC%C-H-uIln?|aFE
z#Wzi_Rb8vAs;jHJ{+^J}vSNsE@8Q6}zz`+Gg%!ZSpf<t4AQoUCKsBQ~S^i*P;M%4_
zLZ2msgor-dSsR;L7=eLNMO#KOibLpO^uMMM_k2P^L;Qq<ib~<cSreeHv~HvJwYFzv
zFTZo;-d5XR2657BVp;$5x|Ng=<m7uuM3ISkg89#Ot#UNAZjt?u7kjP!TgZ3h@%E%(
z9W{8|Ko-KmGHc<l^ykEouzEd8D!URQ64Nkk?$#`)rYW0NlFN%M=I*i9FUuw;O?LKN
z+OOPe=x<zGN4|T19t>MTTK|Sl(~N}GB8OLZK)p%Y8NikaJG<yHnW8?N7i=9ORQi24
zBr_!UOQQC^{`9<_4u9|&`N~ka0%6YkPKbBW1z|++IIz-+w6S8ZXJlWvspC52eZws=
zKKlzTNhok2?Dx=AcAyBwsflVXV`{(NROZIZ`Yb?A>^ZT7^KkG(1`={D&NDK&fc>aw
zFe~97dwB1AIUBZYY>Kq+ec3VxOSBImGk3LGk}+30^(?kteF=-zYe-X|hHMKGxW18^
zgt3ea*auJ<1`Glm4eSl51P=NI3o-?R{HqKGMgjT+1A7w_2nG%ML<9YO&Vu;QU8v2h
zH~%R^Ec|-#lcJD>1n5)Iz|P3X%HG7<p+L?<7o=o9QzbPAH5q9x18Yk<Jwt1KBRUsL
zn_nbgJT6?IqNS089+8Wsg_S**3oprEPjG?CzpCj;i2i!S!JL;wP3AL^khPr=5gQ!?
z9Rmp;91#%_kDZ}0mx8e9|B!?J<0Ub1aIoQ`r+0RCrgLVdv$g}!Gjeir(lap8GcnPE
zo}jgNwQ|sNp|!Fn{kxI>v?FX}Z(wI?<6vrSMf9s(J$-9O2VN4AUyT0y^Y?oixtRXL
z$;$qJx&`VW{jWRpjC2h2zaw)nHU0zHuRDK}{nf9(+41~pjO(+hi;;!8u&E_Ts-Rcn
zV`t*z`HRi}bLXEI{hLzR-pEeK+7d+Q!1s?@{)hPAH~(+KzgVjM!;+Dmjp^S!|8?tM
zq`&&WC1+;}VyE{@h<uDZ^#4!Y|2)q_|4YLElK9{1{HqqEPd+#v`v2Mn9~^%XryCfU
z0GNdECnXo~<Mg*_%DroS`OVFW3XplY^04HP7?@QZ5ZvHZ3{>zUZ+}Mm>ViX5#KFLb
zJ3F7y;ZHSIwyYW1@MPGZ?VO&j7%g~?LC<kAw-=p-xR2R;F~@E;xv#Z~rosgK{PEJ{
zgrKg_oGDg^6c+g7l>;kY@WYh|g5*z^O#p1(jk<Te6Jk@H`8qSTQ?#G=^U;;gYp9m?
z4jMQr${#NAMM#C6))xv@<n~iX>(s!xW|FN2ja-i^j5$r9iIxlAu)NbBiBWv>#5(%3
ztjT)s_5mg<%tAAQPomLATSdd!W_d%Xe_#oslIgh3I_p^m_=`;Qcras?!GDudEE7=A
zRb@n!iiDTg!Tcj>0}2e8B3Hl39F<O-nRFOzf4<5k3F;ym)GHUacqeLozjrH>_cP6a
zW*v#D?nRT$y?j%WiRvHaik2ZDkZk99x6WuUo!V4a2I%g|QgUi-%}}hUNhwgAU`bfj
z-ax%4^sHQA{k9q&tCLqBN@Re-WeV$E+a(v(V@UBwl@L>+h!;4h?Eat%Y3EqydOFIu
zC6e^wGrrmUiK<dSHdADZb~;<v2Bfma&Ymy{Sj}?@m)M>%9Ezi+6Skg2NSQ0Q*}P6}
zPp}SACCdK5BXg(}y*I`!C6)eRC)e^YJfq6vY^^`-!e238()Gn7j)sZzOyz@erG5wm
zzl>H)50QhFGGKQ~M#G6fT>n|Y`M1U;C`hE195bY86|)~Hn(IKFq~>OjW+@W=<h*{v
z5398_b9?aFb@DD|Xb{`75ZkPJGfDk<)5k#}8vjJi&cH%602epc|2=c;oVv@Nvlz<3
zhtbm*jHdwyMVE7L_ho0P=04@L8-6*h%g)H@HTUY1=&i!l2RAf{QS-z#=Y5yWL~3(o
zs?|p26SJLA0!}Zt)8ewTSB7x9iI*Qm3bqq~isi$2>h^;f)3Kp4ov`#1G8AcS&#T2Q
z*SZrf7m7<whMNn3VvcTk=Gy5o?Q3%gJRdIaFfJj-?!#2TX+xD{PCT`}(J;$Fw^jNY
zew*8o)lxLQ`!djJDZ`il)zqNHmyY&G_?VY0c}hx@@wa0O1xBU7flI{c^f5OcK0TDI
z*yyL7h-OB-_K@f)%Z2d>s~(0>1^I_;#fdN#OkPowIEpio(Tk}=t^$EDb?koSuZ(P7
zaWy^1@7>>TRn(aHxo8+uTBiIkuRA^cxno^tPbr&D{<QF29Wbt?2R_C|ozzh)a_Mz#
z(fs<%cJ{M^!f-ro<K8{R<IbVE|KZhzE(>V5rq@o$;X#sgsl}$mc)3Dn>F!bM+V7>R
z0CASnwz9e<rFd|6OF+oraaf9(y1?soDGgCi23{;>JIabPl`j$f_4TzmUn-VM<}mK{
zl!om02Fyr?f@|cfPF)m`y^L^MH<N9^1eGSvjJDk8{zipeSg1#2@;#B{A_I7$=z%mG
zpT&`#G4WJ!?AYCKpl5>9f@UXnS_DtM`77$<xC_zla5A}b-3T8LYb5<7L!)@b)4sNa
z(*t+n6PBDJQgqc(^SE&XiTkSe@Dw6<+lwUuT`X?bE$`LjK9k7Rs>&Icd7tii!q0N|
z2FI15xp&pkuJ(o-nJYgRYU8LCqINo$%#>*r=l2cr;rFts>{!dxk#2=jSD?^hz_?0z
zoe-v8ALk{2?$<r0i$WFVI;vl_*A#$w1X*<fkZ`+$PJr0rTecGU76Cdy3v(K`28Bh+
z%!f=y&o6)$L`p+B%Y5HA>P!XgwX(fIRwY_(E_@Y6FPiESJ3n^t+A2gw1zoG%ErTWe
zpD!0=MM8h)=l%UVyoF=I$Y-grTBqt4-jyN0Qr?}trbCJLKe3<a4@9)rT{N(unQn%#
z7}Q%9E20|;JLSuIMzLBJkAsQm9k4ck59%{kw_#GqvLudw`0?VwMsXVLyyDSa=1Ai<
zT%=re*8m<l^ZoO2og1dut*1X~zcwz^<eQ0^FHRw3gXV;{*gv}A$l(|~mfkr&SZwPI
zv#Wm0SnF%KG8s-akF(VLxp=12zUFk&sbRjRRu)!uF;`1)%l@o0?tU@r(P|GLsG9p_
zcO(ThKSmSAgRgecpHjE^0D*yeZ;yWEXQ!eir?fS%-I8;~Y9ieUIo7V*Tw>atm+G}x
z-0Y+$0mb@=NtYu{{M|`w|D>L^wafF!c&5ng^&(kJ#$uo?N8h!3p275Cyd>7sOE~nG
zA4R&c((8*Pu5SExOY4cJyZ#5u)nfzB+*rez(?;D^`bUZN0inO0TVRNNb)h|x3Ap=_
zW{uVAO~I$O*Ujl@-=12;%HdCQ$bPw)3=QdF&PX}tkh>T+`3h;_tCk{eD8o&)RKWEH
zYcDr!mN(tl@D&j3%&0io+Z4*xD+VBDvv@o7{^$iC*Gf?cmnx0YJyFF`I+;=~^Z5d~
zeYlXw-Sb+y`Bqf=*=SMW7`oj7OKSQW@5#ITX2PZ5fTc#}He6JqLc$Iw$go~~6)$<J
zP^-bI8Cb*XO<1B*7aWemX1WpS{n7ZgvDr%4IhDgXT!v)5!hFOzWJ&AW9{*a^8N)D~
z%u^Ok^=?fsZqiPaU>hEL|6bOaKjr%IH$;9HjT40cJ9hUQ;8x+-x&g<_bN{Ki_LcW5
zI~LY3a)uTAc_M#%dL@{F2d$3h_xoc^4cW8^f-`IOYTzk~q6gaaQK#|G3VNf6W>z8_
z5x0k9Ep`G<RNkZS3zF}KTHTK5(7kep%ZAxRTdoh(oVe>tpPyD_C`L8h2TwC!C!Y)X
z-`Co|>WO|MHCk0_9huwOdyREDcva2QDQElryi3#x14*OEgkzNd_=uZ7B`s}QSjb{&
z)HSp(;)p`mKW0m==fl;<UuaJVmon^$#{5(`BFLqJ=IARB?C>F}Tq(C76=!}Vet4~X
zhVdZ6SytM+Q6FpE&^zF2m%%kMJ&b_**t$EH!9LKTNTI-D`rOR|TSc=xDblu<j8mDw
z37o+DJ^4=R#z;9ed~OaM(Z?9GI@TpR+9oE0g#!1~xsHnSkp*wcwd=Xs4@Pjr!a4E^
zFmG2Mcb%V}3kL*V<#ZwVQoGCquT-psa>?RJxy|q2@rXuKbDDi`^8UE2YbTRdznhE{
zKKyRD-l03+8jQkgCPC{2SC!M@csuUx(c1HkbEYy%@;Pt59`}tHAu2GQ*6o0-r|2fI
zTEy$oJf4$(I!|^K<qS`qX)3_mBKLKC@zf*^QticL_EH8kjIM{`@+dsob8rh~eizlO
zOa7X%SS;-iBL||5-%H{S+Hvuv(+nQj<+J3wz7^BIbC#ceQpLG0PG*EKO2x|6gtcff
z?SEMnqJ&a3o%G<G*jFnacu&7pGaaY}UO0qa@t*u=;K_Ze{ObO&?3yT9F{0k1W|@BC
zAdPJ<O%%=2%?h+-aeFzVJ-PW0HK3oEe&wpHAX+7@0~FlunAuOO&B@)coPLb7^+nJ1
zV8&JN{kw&MD|P04=Us9hlkE}5rCXK?t&NMipL0PcCl~jxIF92+eO3^+7}hFrl1pJK
zuOk8}q*4@y*JuHDK%xeT^lDxFw%FMz+<C`!@g>pt)(Z*>-^ZN_oKURa1&zVh5S>GD
z19Gyhky^~)<dWp@2OM*c1-*1z->SE~HL2fR4{<1Q#pC-+Ei+uik?Hn_K~oW%Qf??E
zeJ~2m-r6f$siREFcpncf1<^U*zX*jamZG%Rgyz)aw)mqc$?IY|n%Oeh$<buCd%=0X
zK{2<dPiHO|aDj7K&4q~TDwiIzjD0HfT!YE^23E8~y$CVrjI+mexLS~+z&Jo3G|8bM
zt+`WqF0x=sy<^bV*_jHMDv+op{>U|G#qoW%__IZ4N@dYEwsp5byhJ%?lONAO+u07x
zhH75caF9Vk0^c#XJvWC;`Yre^SW#&>Y%ErSC4^+_fTt9a{Vr<vjrwIB!f`C2dFmga
ziKkS?4_Aem2=kMHXi{A&(_sWqr|J)VG|AbrIlG@JyzhggCFp1*(JJ*ctS=Et;g^6`
zkE?}e7R%mug!|5=;OSh-#d@(25`x-`7yc2{812Wl$VZWpnLsY7J_mZI7FaRPuDYiF
zCANLmZFZG*Jx|QIkGR$lFHLNwFN>6?CiD5qE2!=C`kiU?&1=)oSGEIj{jzC&#L=d_
z=`X3}Orus`QO{>zu6~fe$!zxHWT70_an@J~jhDoH(6_jDC_n1HDP3*>YCHx$2g>Ma
zJ{f4T9(6ep@*IBjjh?LFnXnjqfQewe*vrl7a(X>sIS;JRm6I`uis>KG?BuNUdenC7
z5tJ*#RdW0JZ7r<F0ym6esoZv_3aCP2$X=>hyw;1fsARn!dON&C*8AHPoPUBqB~yM8
zrpS~A?`qtnWWG>?Ax{G<Y1>t=I(6BYNn%eG+oZ2fMb*&~c910VWZtMzSZ)Av{~^~a
zHL>gQdd=N(f37-{yTz+m@;vGs4^Txyf1fwPm)@H#f!xz=*?D-78DRUyW4Ak6n$KjZ
zj#GcF2f5i;I?>pmhcBV6>Vg6^Rk$M&<PTdrHP)IhLG8z+VKXOKkqj@`?|CQJ9p?g;
zBGc+>#w)4Ir_csZkK;AgaQS}j$g%?~5%692QYGMLEeb6MoahnWU!5A1aYTUD820+N
zcZOm0qvJ?;EA{3_>VBC!YFl=9&)Xu}sXgzQ&-ZW+rt@*0F17Y@>F_u_o<?6~98BX_
z?w0SVR74M5y{BtT6<(`so@+!BclV_&JmuYgyY@f}69_#z^_){)DBh?@!rn8nVn)m#
zj?psr!yEJu;ZXX*FR4IJSF8vrM^z)zBNm(P`T^CbMTD_>Nmj@-y>O(MJ2;*K{$h3{
z&cK;^V%JUuK+0IzS6bz_Xyhzm7jKMUL8{KW<p0dN`h`M`$l##{i%wJb&i?BRwueaA
zXFf-^sXak<YQ?;P1WrHuPx01nj$f*YpQh!37WXereUcx8A~PLKwLfNtJB3UEfRtTe
zq_aSP6FsTHq6FX~#UZqD^@e$g)Khrzih_I*d)9J1j(8<{>$M!pDs?eSvdDLQS^gyZ
z1;HHv^=58!cUJm$-U-FmP=qK-I%Iv|VFfCPKRITn{rN($fefoHwvT=)GkG(X7F<Pz
zI)R@O&E_mSRxO5n!A{%?zn;m+?x^8`=69hxijP3nr?vgCl0Zk~sAMvPQlb1>mW+5~
ze~ySKr}bZPWobABiI3?0NlE%{=`xq|jLM`qAEa!0ghN?IoX10X#&2WTJ5rQ^)G3_|
zunP{|9Qg<4DCvX9uuYLa?N|_TqKhA#v^eWoRfM-EfxS1<4E?E^{^#cfAY;J537N<h
zB_1?4Dd<{f5aMmK3tN7>B>PnvRRep6eVtyzUAh|byO8_u(MrY!!Pi2Ku7N&7@H=n#
zw?;s_5dus`Q+#cQ>3`m%c?(IVsQngNLI&fvY6Mk+njz|aklB!E4*LHz6f8hO8MWCJ
z03Xs4VwM3DETB(Rsb?>|FeQQ}B=rO8cW(*WV-fIci(O?@j{NO7`c=99fs`ou@&mW7
zS@|FPK*kGE6sw*1BUe~({d^J~xBhhA`~3X=N<Q06VRi(^-f$ePc*=qk8X12yp0s2I
zQJKi1fAurw&PPg(S!uC|44b|l@-$xa-5OIxEV`&d8{cJHYBAT}TL2LqNM3yb8J7>_
zKBAm}$-_{i(3Q_c4u?ubPm8?_dcBKf@icK^dIiI&a+yFLzEF_@i<O$Oos!7x-dCAq
ztVMlx>m{5v1H!T>1)OdnV*B3;CJJ>T>nti;>60wPoqUe`JNg)Y|M&Soj{qU@EQb(5
zS3AH`mAg00u#)`m?FfYwB8J+)U#hPYO}Er}<E!h}TG>9QtG#hKgx2;t;cQ^^-k-Iy
zE%8e$d$y6c+RTJTVEmFboTTH)?X~7}Y=|Vf-50ApG+)5+2{~-C4)_om@x5;r02R8q
zNQ9hTZ_QO_e)~d$X#$^_j0_D8Q&>#X^6D&?*u0+Z3Nze>a7?@Q#?qzIxxVYSx^7YL
zcKE*O4np=muIgtp96*s%{yt9xn>AY17*_U0j7K4T@>r7%+^JA&83LOl)~cz2(*TXn
zf>=%F9RyTYyz&Qhf&jBWn6c10liTKUqdhb-L5s~s*YN_7-DF~YMpcJgVC-b69{D}X
z0FB~U2Jhpf7@=03g?f|2fxiFU{$y^m^BJ8+T`3I~oI!UWqE<9j9=TMXE<PsQC+w!z
zmq&8NCUJ^$I>|KET!&ilH$BanUJrwqgt}PqOajF;um=8;s(Irp6>Sf2oU4GC@UVb=
zQ&!1`{Wxk%kK?$Z&E9XZj83kW&S-K(7UOHNdll}-H*V#iMM&$(dNexik=9-)^2X^!
zEFe%u+r@hNaDj>PsN#LdxnFF1uE*{Oj(0l;U_3)6m94BjOqGXEVA#)EBP`;_{negg
zfpjv7Na*^oTt>ptY*{KZV5}RNAFuedf1e?sc&el-Eh@JCJ@NO^e-sv#1`C;zYWMu`
zGm`(sWu?gxFp_j}QonY((p+yoSI%Pwy{=sLrM9B|WpNGHz$Xl7Jlgbl+T02SntwQ4
zFSo@AJz09IFloR1FfU3X6Y2<c?!5gj9D*jw$bx3LzC!d3Q53E)he!%&Ec#tU&cSJ#
z3iw1m)1dt2k?0LY#rQX>0W?AV*|SG}Gbh(b@6n9s(z&QLW7;*mX8rD4ya&5u3+q+a
zlDhCr;36(zS5hve9P-Q0id;(Bpvn>5(8HBx=KycE2xE{zsa8a+Wi);14a&jic1jYr
zdf6FHr0g?_{qAIY^}6|uezDeEOz~*0V!XEdEWmW5NU_lE=V5Q8YHuj!S>s*?|I1x>
z9o|?Z&t>pRD+zeV4ah=lxBBqTcSlp@QdkCA{4(c2!y!it%1T)}@<#%##>>m2wIT%}
z7BPCm6HV$6K*Szj(|N@apUYu=?)7}58+MHhsb?ZvNJ!0kG=<gs@uVK*9rk4og>0J1
zz?w}rq9!TGxPVwn14nS5bxQ}KUGE{kbJa*BP%3>IN;m8Bhs`b%%>QRT5QrfIZNYk6
zjk25n`0mT1o+SXj`lkKqQfgJJKLX$U(>d40^X=Ld6(IqE6-gvMci@{8&zfGb%h#8)
zSC?2#pmF#pCMIUB!-0aNMvF^T)zeW$yN$;B%5guT_j0XyVr`AD$NeRylLf+uOfJU{
zjbY$t7KS`_+c4n8Lb5v-DJmku!t-cp;M!If4^K~5<F3Iq#YdMr!_-j}o(~6wcd5E(
zmOML=1iUF@NH|PAIvZo57*41H9*w2Vglrb&VTmiX@AIRnPs*cFUALGR85J;P62O$V
zOwhyP4rqOm9=3H!3@8=fuSs8OtLMi!x_n5WVyIio^~-3#YEpRXj`Y$Va`n=B(@Is|
zhrP|<p{f-WqD2x8h2Jb|`=(T>DCQo|kEOdmqxrOH_%N`FhFP?+;b$wzR4Jqmrt;hG
zcT=D4ulm13diPxjmwLaxJVo%_F554+uDNU>()ohFftrBwQfY`o;ck$(FKPcdtFfR}
zV-jsjkS3Rjq~aG*m|!oaKLSpQ_U@ya&6?*e@BMbH2YjCEzHLoHCtN|%%S+$2IAc#I
zoZ&eCD~}H0b3ESk-Q9Zk2J;$)yfw%{nD#tC6S%DRgrGB8YUl&^KEdd5DV2pHU-I0a
z3-{0l@8Pkq^2xT}EShJV*+9ghZ|`hbN_ceSy&Fc)8{zIb<5O*Vrr5CTo54hvn<%G)
zF)RDe+$g|<dd|I{sv4kNqSE?wIb5eNDh=vYxbUiNKfdrK<ZO{5WgFU6PVd!FgY8z7
zMV-~kA`l?QL!^)|8KCI`vP)815+<*^ji9skSFaM4vVq`-`(gU_Wv3-e9ysP5@-C7X
zLhCJz0o}}E<q}Z;Csf`O`H1&)>s0CYx?S&gQn6_of95x3&<EGX2DzN4yRAsmc&X$~
z>ZeX<!tK$$-BfGQqNlajms^lG%9G2?0QBp4KgS;q#nbeEOrWY<?aQ5VI$K>aDY!ep
zpjIFgxQg431f$<bW5{drCn#A)C4|qP(s8s6Vb3YF|J)doEj?DEW)fGh<?FuJh34@X
zZ8||UIHuFp2|y?_dZ;Oa-yIZ9HVWMxjUzsx5%Mb0E>{C>RfTZcJz>1WdlT|5fCAc>
zxAseJ$atI=dokgl^}F@wMy0;%SENZ^r_1ZOfTN2jbCnX!gs_9M=Yn8Q@3Q$6TKfm%
z+9AN0jj312fc;)#DY8zhqx0kwr**Lkg>tdfnr==G-H2wL=~20#@-RlZLIJ~;7Byfe
zL91UbV=Rj9B*#$?xxRRqYTmLLNk4&FsA(u4ej(HYibI~((4K0PPR||bal~ao+)CIZ
zqBE>Lo<_CrIrI@N<{dki<^a3(YM4j&3g#QDB$uq*23E5l18G6a3!)Kt3#IBn{@15i
zck6U6$A-kk_s*xwgQg>&*9v4(?Vw3BBI!mBI)kX%W^LGwjgg1M5H@4S)16mcpYCj}
zhQpHB$}c>CpTtPvWxw4~rsy{sTxkXAK$0|CE;hCJx{&nsm$6wcGT_3puG$ULK0VlU
z@4XupD_!$`#YfuRjYJY3M%AQ{%Q&{wSWmh$;bgc6*O!G=GBs<zU3J%!GQTg|PD1Pc
zv?q|--M<oZ26)P_TesVbXfwQ9L9ofYIa`Z7GMOz^zpomLqn^$d3fgC7rBknloJ^j6
zgMq_rTtkX>S1Nw*dbMjgl^24KFL%NM3oZRU1=vfNf46RMn4|5bx4_YybeFHw?q%Kn
zTqkkq%0wzOSFHSPYYZT+7Cl*qv-o`mG)<W<ROfSMHfA-LeXiy3ZL}y+D$)<%8%^!^
zgOo${kgJV`Y)J$oYdpUfS%=$n4fzIhOaVXELblN(S?me1@rE*pNGjpuyiKhF>KqcG
z52r#M$=n9;VpV`AdheZ{)hCuz4U}=tWr_V1Q=dd09he6ANov^@JWe}-B;Xjf`=iOJ
zJnfg7^)Vs&J5+AuSpG{snjKl?@1KcJP16R!wx@pvBI33rj`xM*hHNv&yPNuOPH(|d
z;C+<qVle>CPr0JuU%{5|zK;vB?!lIWX|8*i?0wuJ>pY8LUSQZh>-2+e6l^3Le5;3h
z##;iC!Olaoyt|yK<T=3NsMhz+&$#6Cf0s5y3uq136lW*iYHHZXUwQJlVqGG;M0$J9
zH6w<RA4tCvoqb=G>)DSF0~dQVaFW8)ez-mm5+#tcb=)T3@I&TX-^ie3UM=EsIu2e#
zIg_<+{h2U6r`2NY62qKoyC-bebL79_-r{$mpa)mzp)K$7EQGe>8%e3F{Uz;$GVFE~
zWR@=N`QR*pR!ovB^I6H4Uf;Z_z%#@9!&I?)Ml-!%?jMdSoa0MZhSAnTmOXsg6GUe>
z^yXY3VtS1I>xSR$FbP<B?PP|NHB0%dcq?c#HkY^fI=hY=GPAWbE-+NwwvckxckCo7
zm6*L{U}FPEfFQ$(v1zO3i?0hnEQ#9{t@1Fa(YcE73_9CqjU!${eMI8DyE&(S!I|cD
zo|#plM^tZg-J4gZ!F9rI0A+k)pEZ?!bbETMwa|I|xHgi>z;k%|ksn=oRCnfi5425n
zK6bah`|;?8EELf5vV8x&{OtLuD~s`axU~oChOcuQzdf6q8=Oko*%Y9Mk`zF|;n8wC
zArX1=Jc+^QxZ&29$Nzd^5;uA!FaLCMemK`Yrdj16)B_}p1ikyq`>|b3)*4Q;?D)V*
zMVAe+vn-rU&l?;<)m8U1UhUq6onGAfj|KZX?}keFz)2c^+Rkm_qCucDf?^l;3o_g0
ztrn5D>$@Smhp^GRx$rv9C<7=!s^s<-&a1NE=H(1tcdF5bN@6z>>y0nHC9HfZv-FXv
zZ0y=}kZCJ)+z}jn!IK}n_!@$y@!9z3!TrI$fU$eiAfx(?by@PeP!8>HzAOl?+Vy-i
zglU^0Mo*Hw8{Mo&P)AV?z(ztDft}!XQ1e>n=>KeRFJ<UM8j$9@7@SF=0K?yAvfz;X
zCUkiOT%?bjTU#r*5pteGh=cL&Eg_>mBv%9ui2$<+K_T2vg%sXpif^~p1NSZ^S<wY&
zWcS?3_kx424R$+{nkJmfX$b{sa(wsxv3Pk;4K_D+$tdG*19X<S&sw^bJLXgfu)`Q5
zp|P)YJM7`RzK3jAj7#~nc#x2D>zMh1vGjO`H5xZEPY}p*@_n!|l;PxA&5}YBEpy+`
z4r*vKAv?{PHJEh2lNR;%-b&>m43n3C6T8<LN!M~cB{kvl{By4H1lx5EKsd?^r$tbd
zt{;tcP<@aN8rsP0@qz?}x*v9c_4id*+I)B_9QNJ<>$|p-`P|Ll``D!w@wsvv^QYfF
zrMMRCY-j6<uP%=^bd&O3@{APeA2%9v-d}Y0B2=xePI+d`yp(HZvYTZVvcx~II8{|Q
z!@e0+Dg5syfdCVUPw={Zx6T_ek=5X|BA%OzEV+^EgXxOan=h$7>#TS-^E)z0nmpN;
z>jBe<k!2irl^gToJedKmO<kY5jeDGZ#GPERx^g@FmO9!z9|s2D-<-)CZz(V2T`Fj`
zx;dI{$Pe~3d<j4qq=A-bDNJ631x6vs1@&dL)3=;MAO}FYto0rA^*oxllz3<aLuf;6
zd1W4jvlK%2cQq0_;YvYJWI!8PYoh}_M&DVZow@H1w**(Co}Z?Wr5@7iEgl=KiUY!E
zXCc3LHFKWG%u_->>{s{&`n=twWe}*6H5fwv{B3#)=VswcVJB!iVoWP@1GKl#xB4mu
zP$*<?cen0Q(l4O<!msP%;A46DR2$xe*z+2FPU`8+0Oh}SZ+tnfn23^8YjO26{h@TV
z=^F!+zF$8-3H%1KS5jYTqKi5jpTn`?&mgFeOW2?8N^I?|JT?u`y{~(U0=1yggr4fO
zptWBtjyDV_Vb8c7jvpQ$EMS(TlI*Np-B4E3{TH~}E>7&<h$*6Ow5wP&o~}Bpckk&-
zX7LBwfBgLTF^)O3IaWeYX_H03M97Y$!0~8StI2^;LR{8m=X}%5301SfJ|}WrOh{^?
zP@1QS7?h3318=!O0sRy0flV~B5_WlV5{Lc6WA!OK`6^?u<ON-hM{o0f*PloVo1Nup
z5@ivFw2i2L0?Gh=-P$DNV#)WTApLo%m_;x0fRc<KYDn5>2O38K&_?u&T>%t2lI5@|
zEcT=ihqT8%5OEzk+KHqs2^-3JYuT(zEvGxBvYk|<J!&-!@n~hiFJdux$YK)*EP_rn
z2_3YsWcr>@k&!8aLD;1fDwh_L=X6bkj`YOt?=ceD#(5=^zkk`lo|6sDk<5vEA>2)1
z^iC!eJ)Yq!D^4^#Y^nt2$TS2N#vTIybq{kRxFiaA2GyP95J0NSg2yq7C#7;+szdXW
zk}u*O!D<ChAIfg$8$v)aX&B02m(O)DLnd2tN)#9ty;x=&%C2-)z;}87XMDaG2n%Ae
z@rie`umG)*99>x`?`>C`%~Zyb!QL?5e93qw)#P!$6n6|lcp1#J@w6HL=V;{5)H)Nk
zf#megAHd#sjScrNQ{K1sK^aAfecHn@dcXdRE0~0Fx;=P;8XetlY=0DpYgJqTuV%N;
zN$hGz5w^w54*r6++qlSAVOK<Agm!RNdh^$8`^c03jH77kLt8Tep_KREY=!T(P{&!8
zb;i?(4+eoonc1)bm9>h~9MpOBw(asM+Illxq>)K_SO(h#2M2a0QbtE<K2EQ(^YdF5
z4tu0wCgW1hh;Eq3?A82^aBzdKE|vE2gJ2}9C>CV0>^!@RTIlC<E{VxbLL%!qxH|$r
z(Am;Hra@B;e2DrmGNJmixnbfg;}nZwD9<-aHPN@!7495EohDiKX&tOJH_{<_jEh!=
zjIrFMP$o)G@$FkEQ^E>k5Tt_fC}mlx^*DTHsC1<cFc^3q+!~}_iOb6fn3V?QD)4v>
zTq8c>q|Sbv1La!l7>gA14O66?a0;{v#I?6Y0$qR_EdsL46Ws2*2+BhkDL^~(cystI
zBy~`pi6UcT1GKtqH-79cJ9<YSRpMRG#$hL`)w0pCfo`f$xLEf{lsidXXb3`SFjM;U
zle_JwBd;0v`6Yf#`Zj>^<lGoeYJ}&y=`|p&eD^N-k+$2qv1|j&_{@FzC=BuHX>)r3
zOaS<8{cD`hk6vl4o_R(5{6G<xhMmo<ptf#!1~>|+g=!-p^IK-P7~Av$Ja6xNT0<TV
zv#dc`Uyc`>Aj48}k&9$#-<X0;-O~z4fQL!Q&PZ~sweB6xMq2L>L)f86Sgzi#<(hhh
z`g}?o2dM!DXh?NNOw;7T^@ZVdYf?4DUlc_Wzm`*EBawnJGJz2%5$YInB>I{s>PK&M
zbWPR^<!P}wVYSmnP{5^!bo#<i`ZMIPWnvCS@CAVBjoG9Q>k!p=Xx1`Jb@dRfKX51G
zu$haZYz0aeerB6o=5)jXgxmCq!lvQgYy(WnIB8IxT|aN6W!qeT6lPb%ng%XT_wAAU
z;HXC7sCL#ci>L8Ofg$>a&~$}m?Qw>RVJvwmGUXHREts~sPLPoD(=c**6i~hNvAf#O
zKoX5_W#UN6ffaM?O`&FbZmUh`T1amZM>6VpZ@*E36FBAHe#;#MD@Et6Sb9I4giWA=
zbJ|Txg&Z|<vL*c!3yD+uhuI^{C@<b*CbCF@lPtsZTNbM^oE9t2Ac?QYTc@_9J3j=Y
zdm>lo>n)cOkgrURUdGHaRm;b59rfEvQpXM}{=1-MqFh%k*!B$xBG68?J!cGa$={gF
zyj1`mdF*WAe53D{jccK1)Q^r1kuKd0+e;3aq}yht2ScFQf?eGcum;d&>SesRdT+f&
zo<qYUX<_3TY5Wp^Sb;de9#+eEb9Z}DdOUPgaiRTbI$pln7nUgV;=PaH9uxD|6!}wz
z-~j0Zg~5|@SnQ1$Nz0ZJaK=RuSf;ZZV*wRuBgrcgL!t>qwx)4oeerO4gO<KHgHXZB
z^8yMF1fiBCw$RzGB-ZL9pUmP!`Y+kSzNN`IlyNM@lZwu4A9Q&5$6|!~M(9*O>a<&x
z!S4*7S{BL$Q0t79Ht_1V9Cb{--}$zn8E|E|hFzDa_3rre>Gb^iU@9twAE4qdz85|`
zpUL6L_Tdm>kj<R|90>;wDG1pBVuEc$_woU#w@wR(TD1JtW%S0hPh8spv8^*nso-1)
zg%Kiln&1rvT@5V-2<Wt7Y@%4UX=(rg`Q!=wWZS`t;249$$zh6f7m}*&V<#Sptp60@
zla44Su=<*;1v!X@<vthM<Wi^~LZi6;?m;R%G9mYv=yNqOUydcQB9q<h4A?TUZSf8}
zQfC06<XO>Cwf99YmVAlrqW%wvcJpQEFguW7o5LOqB|nX^0Ef?5arMa9dUO~rmqv?v
zFIa)z4<CDk`=AK{j$un8y~Amo_ED6;XTcEO2hxnX0v5jLOR)8i3xRsW7%bOw+UjhB
zYvj6!79Ds*vTQUjF@^<hHEfV3m=6V(nEi9oYB;&w061x|OVJ?2jFx-1y^2U#B!5Ik
z?`^-*AIb$QMi7K!hHa4R>LYu2c;SuqpnND1pRS!~vhPV+>+Zwl?C=UMzvA9X$Z&!<
zo06=1pWT=ZW)%KMzHyMD(jAuFik_Us$&xuc(v$p?K_z2{@G_DVU?2!m_jmcRMMLNJ
zs0Nup>CzR5x@C*K?7!L%#8))Q#^hSKkPS{mbage@#z$j~8qC0E9_uDqtH+7zrPL<?
z-~dKTFhD7zyDiVbdBQ!sjXD85Di?iVGtc>koNzeLtRfNVq6@Z>0|JyuQ41&YC*05v
z72qFV&FquGSTDK4d94GbCj(;NT5-_fdWSnFo3a-`awrdc{oW}$e{AQL1STP>!wkjv
zVR>f++l5_}+&!Fnxg~_y4bAv!5i&Tt-61NYx^YCDDH^*W=Ie5+nwditvHa-QQWl?u
zmYJm_^Oykh%6qHLuf;~+Jg%kPyGnhpdgnQ*6@=ZH=+v59ReJT==cvAE&Y!eq^4}X7
zzfvwjQcY9Omd@8)`MzUiq)Xw4{<h&@<#=E)*j1}%^i6~w!|x$vX?NRKE>8;GvjUgJ
zj6$`(#Kz-;ZMSBdDYW@<L(J2OUEllgDU(kBh0QU%gAeDS<TXL{Djsb~e&ZZpF7ty@
z3F_5V71iY-_b9>|9k<H-063ZHnrxk*K+U+DyhCPQv)JXWouUyN^3}T&;CvK%u1-VT
zWr?ARoG8S4J#3<YEOJ`oU5H+R2+h=_;ODzoSP!;&(ZH6SC${X=b!h;ZAm2(heUdu7
zWj;m6PM8q6cGdAFRp@Zia7W`eyUw$ZetOAXaYEf$vIR{-6%LCW-5tKfS4|8bl3nry
zf~&L<0T{V>M1vKSZ!+&04t_MGlPB5yTFmISVPSY|>S2xyTC{)GANPa9ehzsVYnniB
zjN?E_;~#VJPV{LXPf!|~0YtptId>5D<=L2LVqB-|aX@4X6p%(HRNqYH(SH})nsX|z
zdcJ+HuXo()$ui9pbGY~vja;puYHFO=w`DM<>cqx(VpFkxg~0rD$3nrBp$oB5U4O0F
zXlHA_xyf4ZkS9_8i9o**;hv+j(U33y%73KHZzsEB^Xjj_rbRwAHG3|+qtI4xb><l#
zzxUgJRvy2sK5+sZa(uSI<(#dz8{L|(g@9qY9cM-8!}zK6od}xZ;W?ZhH1U_OBS?KT
z=mc~;28{UF-B7OjTcgR*VWl}jqAZ_R?OYql;pL)QM40p5%Asg{Ma-hrw`PaxVh{)n
z;wKO=h1xQ4DeMXWcjx0^e&r<~m)<efp0^;T=*W{F8R-pXD>h)nTeUlyDcP&mn*(gM
z8i$5ZgXiX6#7X;Ly<xM4CDU7H9yGVm=YUN<9<=D0*Mc~HiJj^{exM;6aN#i;>Dy|)
zC^cjsXz2@^CJ2Hdy+HBf8Vno|L1>1O4})XrV>4L(S*`ZN3MiZrsXx|#-WnwO-1w9)
z*WWg|GYip}gVoWi#i)NqOcA{7xIWO42|%$wlr}6@qJH#X-+3l1NayiPNK&F!d`Dx0
zQz1$=a3IB&!H0XlMfk1z2Cr175d-I}sc|vKapPl`5RcG+s@1|mwe~fUi6pn(=5;~v
zv$V$j!FP3*Fv$>SOYB!JgSVvp(UL(gY>`TtW2qEa0E(PEPD6@5FiIv-%CZu~Pp3KJ
zOz;G<PT#ks>xXDl5-R5d2FJwSr%_F2+zA_Ab005!E@jx=c~?8UCaAD1k24XjxoH8*
zZh6%i^7vs35hpa*DgYxmr8|)r3JJYW1KpWHyDl9kedCU(Pml%SDNhICp<vWR6z}c8
zgszt&%1c9#9}GLWaWJ#_k9i6`?@85zDMAPE)NQyPvElnFA=`Dzux@`kD7Cil$<dV#
za6$CII7Hfw8wkBH`TQUxd`TVYD-Qx{ug5#nEiA-vG-f2Yg|b%K>7MgM9RWTRyBC{@
zi&9}NrWa3-?yaNT<l}KJn+45s0grP=<#WpzXatJk?xNU;E0|9nKCufP+1u0s+Lg(%
zgaGBuWK8f$IGF^wRB$p?0;SIuwt&8NOd_8ABzlq;I&dtw=3z(QH~7Q1wkeD!()Cs=
z9VUvf3~?EqV|OKXyg5kBBBZ16Hg{>RmK+%a(?;cRvao#Zld^$Qz+m)vD5CKzY}_=Q
zA6<D|Jo@)Xxt1+7>yaKll3L_RT6;U)BBS=Cw~+Qi1};&pcrC75um$xb-i$2q8tjtf
z=l5&^Vhw(JVQLas4Nr~VUBf;t?($qXt30;Yd9HqcPM_inf3Cd`6}p;Z_}6d)hj?{$
zySWM45VznVX0%L5X78Uz8BEmZ;?O+*9`2sYOg}DgeA(1{^)7SMby%N3!dyT*!`g+e
z-*!qZMtGw^1MQ%OECZDWhKsENk)xkhl$&YAlU<^v=+dgs9E$M7HMg#fxh0GfUa!s$
zLxG1qocSB|bj#a?OHa0pgw%MovSf%ViVjZQ%S9g`RU8%@Kzb8)%NC`ho#@W#z5LWu
zZKDh2hM}kpSzo-Nr3aLUSsdR&%JD^zb7#uQPr}z=3CfaqnoGC6cOx98X2<h2i;E}C
zsr<LDpaTLRfT#WJ<!I^9=-sLBc-<N2-K*L)h1TK^RvL`v3RlET{F>;Qp?CNoXsJD6
zq-;9V&a^Yzn790!GH=hp#M9PfayPZ^prknhGx-vI+v*?1pIfxHh9a*Y!5ynbPT)i?
zcXZ|PHR2F?rn4_1<obE8PtR+L6zkioLc?#dd<evbl85Mmz}7FIXO;SSW6x+xOMI~V
zg9VEX=IZ?29mC(VHtaA-V~g=@Hr8Gm!Svf7H-@8+OTy2t;^+zrxpl6fZH(hYuJ+@{
zBg<k0C}KN1E_ReKeZbxO(1o(f8`iixvzR=L8G)=H9O;oIsAw=jmGQEiIch;rgHB<*
zqUWV(0!!F&XJ(XYh@U8pkT82Yx;QT|pfQGwuCsO5+xd)c3mp!nqhw#nk;UP$@i0V>
z!9}rsK;%X;pUfP6|C0mdiS3?S;bY>6%$wfWH>3WPb&7Zt7+kyJ$vm#rCs^(AcWL_L
zNmgly)Uk)+`Fd%z4a#VP(EM{8upm&m;8=fLm`%5B9(buiH#NZc0^Wv+bdBiFjvz;F
z5{s`?0Vz`ib>{%}kjKJP*3Oc<OFi7=n@Mob;NZy5uWF_Wp4t#>xikVNJk|`aU=TRa
zr_E<=_I#$g(#%<sia3>DoAD^i7|)&WG<TL(?uf==2XA%1^pd`Nk3)DfBJ>69G7MuE
zu4@J>1n7QyY78Nn>3O{;bMR{<(Lw?`9Pfz^ZBeUiFSGFdhE0#*`k|#&F~OZUH70iM
zPm$nGJ7C(3i)CEwiYsmM8{csVQT42;pIi<7bk4nTm3(BrnY*NcAJr+rp#KlDC<+qh
zE~$uiwskWg>Q)pFC+$qIijMXjPEm?80(D500M_NlS9T-qqk`Au@*hgRsd*)ItFfrg
z^U^%XZ9RAHxoTBT<~wkSn*J7?X^w2tU|1gt!}eEtX*x~iTprSPWDd1N)0q64sTT^F
zQ!XkTFprSG4v*Br!x_FM+347nG@1icL49P36#)cDS;O{l1h^Zl1JwYlh^eGQ33Qub
zAtHBoMa(!L%w+t~NxzK8Lrtm8R>ZC9+tuj#*iO?9!$c5@%aD}-K(+ylMxcw-XCzc@
zF`ok@)1~$Rzmb6O_A5)#U{OTL!HCN6{fvoBg21Xhd~9$M0j#?wKki6&di4oSO~SNb
z;UobP2Tu*S&t5#__o=l0yH!3=1lm-eOp2DNAk2#{e(-qr=A7GoZjsqM&lXv<9YSFv
zNe8BZiG_CiOAj_~)a+f`cs1EmWJlV(Bfj7uy?+SSH{$=v8H*+~@5r>2>E*q$jnKI<
z*W05b<`QG;B~)t++CNS`goES|=!=Ps4Q=5Y;6u(VIj3nj0!6^qI(*1mu0x)Fz}}1+
z-^cxm=a+%z4?h!EdYb77z1f300yLwQWEo_2ndOUs;F=-9XR9umfZB1IxwY`cJ?fM3
z`316of1o==+OSW1G87T4j4>%jEVfr62Aox6W4JCpw!BqzDmX&oV2&dVa4GHOG3g&t
zX{bBsav{>ug`38}=d7fmO_tm&MJt9(Ed|jS2;ivVp`zvTr!-KF4Gn>yLlHZUDe8~@
zut~iQt&aEKZoi~pCtTf7Z1kPXP%#Q&^_ESTpM_qi7YtKe96!WHP3U_ZhP@o8^LBNQ
z0kkcsW@*H7+}%ji-%?1=?}ha#$z0h;>KmZK_RTl7yr36Yf}3>;4VB32pM_qV#mz%<
zDDX9hoE}t=Yu~?-x~53n-ll)V47qh?dORv<XYK)P892b+ee@jwgB~#4*anf1-Sc?7
zm`U8ZcyD{ILO=bS)B!$6->Mdk+i51sg(0<$L!f_*aW5VJ7A*%;UI9}e!PmU|*Km;?
zasCO}T^{;hL>3yc@8_X7=|m?Z_ksONnw<exBW^Fp8LJxR!moh@{Z^Va%q7IyT2xQ9
z?=Yz9sNy@BZ7*4RW7zMGU%uqrl>~s%=Zwq*<F3q1t@~S0UP2Qxqg9K}#79A12QU$v
zavyCDRikflZDGFqH~!354IL(58s|uq%3zAL<NK=p-gu#`qbnBM!)g3{3_(=V4NSl!
zHyw9DK+gc5`|Rro18!~$Q`;sa3ROB^uWAdgnGXyZHn?ZDG{cYb&?Mu2%v`Pig|rGL
z_0<J@{bs;Al(7u6Js9uVU;aE;Hm7Rs4Z>#)!m+7ZKhD_wFN*&;XXsm!?qfJq@(e>U
zb(2V~?lRg}d4lSGUL>6-qXc{*t~6a5^MsDX_z<<13G=M;J0QCNBwC69mFk1+eqBjh
zkIX-iHHMOpLB;v%%z%+-Ua9Yrz#Tju2Nu<cQYUsL-%5OUA>}w=nuR(uKBrq34tk=^
zjYaZwzC^gFdV|1e$Bw^Y{#l1ImGbX6g7SP((#aOctz2{vj37K6lW~h7?SCBMzt3Hw
zphKjD(^1qI(m)KR3V;xmG3-9`w_Y>ns`{Dgoc|1~e=>+TC=<(ZgX=^k-~Pc7{kz3q
zh{gukJhgUe9^3lQW$6D_^8YT2Z$h%L8=>)c9A?1yhl1HF1{PDrlm6~4i6H18Qc|bh
z3O9pz`ob8FXV8AGp8BuB{;vX&3Z%j*uMLX|PQ1kLMDw4X2nq>E?fVDjO8)lz&EL8Y
zW(6ONs}d~?`(sy$AhL;3BJCBekQ&xS52i!}r{Bbr{Jsmn+OUa752jDHo5;$f*9?XO
z11!~P$?;5Xd_beAw_ek3aj~@qg*aS}*ZY$oG>&U5#vi2dt0@!&UzccVN|_Xm8k1GQ
zfXk$Jn(k%D{eve<&en?<8*&9a-Y-uebS5b&DJb6^!)iXO>xNdr_WXET_yodtrG5cn
z-*5>Cw3{4EogxYOUj|4c5pbCDbUVLZEJ9(@{jm=c@d7O)GL1%3!WWxwXG<6A%w~*V
z?g7r7fGOuSPt`)%bUFU#YY^6hjKT3xDbpDC9VaLSPpw$Mb2Y;Jqrq&ZcuvQ=)p#_8
zWt@dbE`w*B@6iGjfuoi37K{H;UoqIeE*AwBt1YKJAwXQ#Vl&+hj)QzQgTCr&qi?QT
zI07Ij*sn}DyZLO`k7!ac5(qk-HXg@A7t`W;@KtP#K~Q$90E9iso6~kL0|C1baoHSF
zSWTx4JAA<H_r}UJ>dTq6^-w|JVI)Gn7!R(J-y?_p(*#;fyb*TB(z*K&XO`+L77i+U
z@wwTqI5!_bqBfl_7>y<k8k}!(G#6FN<gg{tsIz#yJv*BznQL*qN`kozXJ0j$$O31?
zuCZ9S3?lTp+m4kxw@+g+jlm%s6F3H;%|Ld*XG6!NQm*MbU#SO@<S%4|RolI>s1sl;
zZGp}GVzW1u&9Z4D5LbF+zRCbL>kCMmbBib@bLA`SYaXP@Q-i`A+oD;ev%Qj5L7LCM
zIe+Xsff}6nX)Ts=oY!XEW_RR(MwM>oYz>h4ylGEuvpo=j&&~I8xAg`ZNmx%hk#42+
zc2$ZDsO)sQ+-NeH0|bnVem$Pdg+>WpZgsx}Nn13MK&wK#6$G|?z33<GA>?tf0d0tb
zV&^7{@@k{u96_cg5M+#>kl*VG1a)Y8eQ~E;{dqK(NU!r!-Ij*=L8)UZSzhmVzV~m3
z;Y$SD^NoEc0DcaGCV?JgRRyR&k5q5!0tac>E%h<q6P6sUV}t~41*4K;TY65*u(yH$
zUvJ?s1O%2r?6Gt_P%$xQYD}kpfgHE`!uxD5<5jf>GkCd`*QYr2x*&O|ykDQ4@o?p7
z=gPI*7c_&jIV?`+tNdIUK&#ZDp_Q@Oz<>bdQng8(E#{F2PM87^;IO$g>wvkL<ToDj
zZwCWHjW>j`lM7WA%B1$`VCAX<jfqbhNlwbu1^Z7Q5bn|{r@qvgPVXk_c<Dj1=NN)G
z*@SA=Tj8^k2-h_<ptigHG&9H~5rIQDnJJzDq1Qm5zP=oG%cVMUrX)?66sl|xYO_SS
zWcKl_J(E}nY6$^iBtDtZKok%*Zd2f|#YFj^?*foco}j`>J7rdm{{MI}a2U<L)XVL`
zSo*d*l31RbgX#WaUxetF!;%WnxQU3(9nVo03}Rdf$JI$0x9tnd*9KNr^470@S;OTA
z*(GR5{XARCJS=a$S*%}mgQpbhGuj)9{|3Gef^-xriY@~IkwAaY{;occ*$=9OWgI3$
z7>UkpeM!lLqfZDcb(XmHI-9ASCKE&&7SSXkY}QDXYWL(q9&E{zF`Wl&xqtLVpe}tv
z`z2`EuLx~@oT$%ZcS=k~Wbb!CPUb`|H%~v%j{ib9NUIs?;nDeWTYYx^f^)Ok<zn-r
z;uQ$!x|!?(!qj%{#~>7yYqxS~hyMat_*Khg@`XnX>RMV;+UE3-#^l$B!y7U*Ce6jz
zZuUnK(#z)vH`?u>2&MNj;qI1eHK#H1b%#mxPXS{7Y!3pE5Pum&vN|3V2;gX8V?7c}
zi3}9Vk>9Mr&eBYnSZH7@mCr4HvB17)^?W2qn7H^59{`8>p3`o-q@s;Wx5EdN*a!Bo
z6@O3mi|K%;Z}Is$sIVUPVtgnuXSbx}JWN|(*%X0uF-k`ekvKX7g8da#8uqZKSQIJb
zqX?vr8jHJ(XYe8u@>vwLJ5X?T55$$CorcM){n6(N6Ny7m-yHMD&^yl#e<9t@R@&@y
zQ4f#Fp^!;&zd26s4vG{LNe9$xHRHDK<SK2NFXV{uTE~QBm&Z{n=7={TsLkPCFoM8w
zM^_CB&nMb!Sj<wJEg=dAv>UZ^+BE9b+d{~^+cHdy2;pJ`&md)BJD!e<UXa+-qR&@y
zex)-UKXo_u196G_SxYiIvua-Z+u({w4@Pq}b*kn~<`APn9}zy&$A@a#rD`KFKd3n|
z(F}Oq5b0#L6YoIP<}llQhu)->`O#OG1<lfl6YJ<xtCgk|`*B{7GXj)LXUe#pwcgqc
z#)%%FNBmin>(!87<Eg2G)k*0!(ilxvTacvo<EZ2(jzLagC^edRTaMSUo}CZ1j{$xU
z<dB&`4knYyNLUzhtFzhZBn3vJoFYVElMDsZk@&DH;71W1GrQFj>kA0|%`d01*l2We
zZ946rmjH6JZd&a^3U=afoyyCsM^?w7y+_Mydw7{|Gx)s;3SF9?Qsi)ddrF%a<v8n1
z?OgwG5UjBUr~t*F5(5+5fk}xH^Jz`P8Q<mTXt1RISTdEuF}FB>iM3o4^c@-gXN!I3
zo+mo@Yo(pzy8|(d5w)PGAS1r*<>81v;lykr>r*D5XHq;#fzjz|E3QZd2vg5EiapQA
z#1v!7<@Ne}3qo82Q5Nu>moG+`$FV0F2HtBKOTSwNP0T7~U+zn8LC|_bY7nrVu>+G=
zECTPW?XjHS{hv*)e;rCAM|oo{nMyg}^MCmI3aBi%t!o9O8$`Ohd1>kHMj9nv8fj_i
z=A|2?TaX3;LApCcKpIJD5J3?C&AIoS?|%O|_Z!2(ctqvh?)~hw*P3h2xkCmiC5Ds{
z5>W!-<y75#e|?$5V8-w)7;8D#DEw`7H!4@?PchG?B)iHjOzX$0RjT^>Y>46J`?rC_
z7l!X0UV}j$e>fK19*D3Rxj#uez{zv6)^$JZoJU>Oqd<GWqFdEw(gjzt(D$wmpb%eC
z>txf2l*%6E{4fX9#MwIg1;|XzPOiTwmrw>`NvZbV4yix{`uP36G#|@xLhIN;1c&&y
zAmf#PgMfMWIyvk*i|6uUkGsY7=X2u$_nrEw`q(!DzxL3`AQtlBJo*)8rvMTr7jZ7}
zZYk*Bo*$Z-A#hA@cVRKFJ%`3!DhT_F?tji;LERbxXa-xou00jRuEd{r%or(FIlbQU
zd($#74*)z@?-n-mToKnWl=Hba!esi4YVL^X6MC(YQSxJHEET78(8(VhGpVApb?#wq
z&cqiYzE@5m9UvpJ9E^YH(T7W?h)%*+2_yybsnJh3*tJSvd!I)$xPKfhn7^U>al9(#
zu+&^rQzIFQN`&GFQd0qQasj7+rWB4BIU3Vn7h8bwLnfHV(Oj_(=LtY2{|t^=m!0un
zfMU*W&=4`?l;L1D{zedwK^02LXIa9&^McqN5ZM8Z^cU=k{n=Z5%q&lxI>O8e;xtzM
z?x!X^!C}P;crkr;d?14b&5De2Kc*N<<s4xmeocc=k@j@a*FQ6P?W{>G_3NNiFgXUO
zas^PB$Ubg1Bmhzb_TX){frUr^feHMX@+V>ivheX6ok>*Qr+0*K6-@`Wdd0~}{So{W
zo<N2{Z@HSk`O?Stdrxv-1>bRN^$(Av?RRvdXSdh)yrb#kaA*H_Mh)zhThUV6?^Y}i
zo>VTZY;SQ8RAES!+pnHi0CKOv4btkh-@#}~M0#1O@lV(l^y?^mc-#;2r+ZU=Vwr9E
zKfi$K0r@B8L<Sr<zr$##>K7oF*L$V8vS&1+%*^{hjv$pr3$sX~SE(W5wZ-ojazCI<
z#Ki>Cf`j>5z#=kLM&H;};a}!)ToFzl205eSLS3l5rgMldAg@ib`(JOReR1p{dm$4d
zzu~+Ntr6s_dI!=E|J&2>^30+EavyY+q=5Iba}RxPPY0%C6ZGvqy?q53!MT=z&pG$@
zS=u)7$8S|1%J8>N1ChvgKUF-rRGw8r8I0vYf$OE*EEvKyF?SQrmaHY?GLr`41}?tS
z6&K~UyT6O=K%eMTU{|OmU)vufN^p4M{Pr59L1H9d2j5ymwf*>dNa!o#cNZ?E^1h$#
z+q2dV8I_IP8&962)K^t3UFoMgqIchmeH@RRW-xj^ULWsp42<o4X>4S=U9sdPZ*C-5
zKm35TJ(gjyR)1J;F<$fg<kT>SytgtLu)ldNoqrpCaDS=Ir`@fX!hHJPVkEVhK+_&*
zT$~wtXKFyKXnsa5QNV}$dn@h5%IhD?va{w+Jeg!4W2)QEh9mJ92rpugBQQp0YiOU8
z)7IXs1!F<Zeip`wLKM)^2Uzf)$dp7bHQ3-SQk<5h5?&lE%rxp@_$7m={qeM)WD1Gt
zooP>4|FfBAG~LwWIZ|Qh5`x7%q?{TW<)1BN6PKOZrR^<-m5k``)hF*){j%7>;&R!|
zRqm#j(9ETG0)fhN&-F)$`Kw+#*$23m)1&+=o;_BA89*+%{p|0DHf07jDEO5z8(Nv*
zB7-`CF1>`T(gd&e2lhJ2Fagoo*)ovq)VoPZS0JYJj~OUHzqYsnv8{;PK@m~1@z$aw
zy>5%ywPp3ZqNi5x$IVjJ+_)&nB@E#OMbqc`llQh6N_JED|KjWjU6SRrdiDhNFiaPz
zHopAPg*}`+8!BfCl42r?U!VY>nV@3gb685p83T1y4yP#`gzgU3n;tkligP`qCdNho
zbI#CFX0aZ_9dWMuMO<a1UZjq^FcHzym*|AiFJ)u#OgsfdBk4bafCDS)51g7cQz|R~
zWd?+WZp>%DycDFV_qiKnZIL+r!Mk5zWhNC)8==il4R*k0Fy^Z=M$KoR?FSns&+iTt
z9_;X+kM=)R=%bT0&i2CZ1947>xj}4&-r+yIuyk-t=Ud~%Q2$Hv2=d;4`4X7PJxFlA
z+drf~ezJUg4Xi&LD?FAn>USc5Y`ynX%c|*6nA5J0;O-@Cezig8deAkEN5$&Zld6_Z
zhpQDSAj{Qj6YZYgG_omHE<K&XD?RqKu#W56RA<hp!F_lH7i3-be!5tRn>6d;vbB4h
z=ubw!(Ai0lR)(TIfgJgO9*KNv$vCKDP62aY!o9bp?)A;3`&xay%$N6$13L+A{?C^t
zSz?k3XToY`oB>@jbNy^6-Jv8!x)FNSGSYc~>qrdqpyjrFo{AgAK+Sr_h?#ixYJ+aS
zUXP^3<M_E^$wPWXe+A1<TGAO8`#{wHIEeqv$pLc9vl3<R0c{c7KxxG_U`X_lR0zo!
z0=hIU^)groW9jVP%Op*}=D|Wax5;ly)3T;1^6T+leFEPBI{tXpFW=cv;7+8?xNg2j
zXea1(w-_uJt44k$-O4ldqgA5N5>frazG@8~_O{BP@$J;zBmt4$nBH~_2|unrP?;ps
zDQ%byWeTDfmMA00m1F_Z7BQVBeZ6u4xgR+1tM;8Zq4<2<GLZPC6#PQtH!J`VIR(9l
zjS&Ue<SuYBZ1hJU>;-i$rLiK%ve4Dhr1DH#ti5|us?>UN(1$@r;Cz{C=wSMYs=7Fm
zNwWy~&{TC4)Qz}3ZW;0oAT^A$5xg7LZTpj;^k)-1LL8Seo-l3F^b?wt`_9K6V56b}
zm;C7wND+|T+KRn_I^@M~+wMRb1}9teFXunbVsL=>4h@q`l-(lV+uNC0I<z^5xK^jY
zEoX0xYqo$*^J}x~ktY*Bh6af$-vrOlp&g@VHFTo2=moy1Wc$cuCT17m|I~I47*DBY
zpT6_)K1aj@VJ!RiuVepFiAc)<#U<tA!LKj@-ORSZph~J>*`cRvy*1=Nz&RZ2V7<ha
zz&phiWAV}Vny?X6H|#&@Nl@wcsa(||%2~`Xec0VJuFj7VQpDF<kdZ~s71Cd`^6}%u
z=i6h^5ksVz3~D*Oa<~ktC5ab&qxwR4>W~pysTLfOJ>;Ck(Z0xsGPSpuEO3G`C^Rjp
zEV>RLU33F|vbiS(1RK9nHixVJHyC>luLXV;UqkiL8aMdpb(P#_=zienVg3ntXy6ZK
zZ0!zlm#WI;i28sN887r~3wqRYyTJVnc!Is&WFA`gEQ_O#4?%&Br#lReczh@03w_+0
zfW~bl|GCU|FXsn8ud&}{Re$M(v^&{}>)T`|7psZe?Vk4q#y`JkmMEW2aUZ_;Wp;bG
z+|kQlZ$IU0c}SM_`W<Q?NQFlw*R?+vxQ9|-yV!qu-2T(OjBl=0A_(fO$TJLbB5oy`
zx73;0Ou2o{Na%zna=v)ieNSGj1q?Fof$EIL8B$(c3w^7|BOM}4D{~?GRW&SpGdF?=
z%<-zl0r4$RpRS84(8Q4nc2nBTO;a7z%j$f;KB%A2n+aRs21Ev{of0?RQNBVT=4zI$
zBgKx*ZT9~Nz>KnjB8VuNOdSv{HYe2O#W%_gLr*DwuH;F;)6W&n0}vrY+ka~w_D`Fa
z0*))aJf?*yICl_27z7*@_W6DH;XRhLYn5y36B3U71?i1j8xAw)*tOnHrq+lgS+R?_
z@|~^l#pu4A7kxc`CPbopG~eLO**7eUAWbQXY(GybQM*uYb*_K4-XnM4yy6}riR_?_
zjS;Mq=7>66Ot(1eE$3z(J&gMCKDvkZDA2N)%%89FOAk_9C*R!}BGE*IB`L0cbid66
zX)-$eiw0|)?l;`z{!$lmZ&<PuG&D3Sna!;nX;HuqwM@nIFzBa-`IyI&3K|g^^KLxZ
zGY$!7W#_h{f=WCX%Mtm&oyb{niXF+b7iE?9DRA1kP|e4tri1H5H<tf{+5f_Z|40NA
zIUiC~C!oxI$t`7jUDLz%i8)0zmwl`$;`Jb2drouxZKI54v9f-NbXO^by?&ASQLWZC
zubp1w))?>mL+3c^iv`u^9z@ne<m5-(yi771zj}>a6w2lHmCmR-_xVM66_JZnQy`u(
zxIUH*ZIyTFd@6587JG3-KZdBrBz7&b=v10S@Z+hs@+dNQA5Rx+;6|410AoFgALx;?
z3L4L2rVVKl%k1)<?At8qr*G+^bqi@DW3Ofz6(C9%0%%kR)ue#+`*++akuQ*iNy}lu
zD^GL5EbMq(1Sy{Wvps4Y43?7}!-g7Of%c@^gCf1f<W&ib$SDkRn)d61{X*SLsoIOV
zQJYR98`h3*FooN7PzTgTIBhtV8Zg2Q#XoqVsApUX@Dh+XDTOWTrv3ecr6~yz?zs0k
z39dI2AN?)?O7rQWSaSLnZ}Y31U*X*zhgPU9x~<CzbXs8vcsuc#e6RLvvTvL#pl;qq
z`>1bztaSxfPTT;X36W3h?R}6%kP2wDJ1If$*W~+0#44;a<)UOXh3)*xCR$nOY-{Lw
zscp;U*thM`)a%a*u8~k$&wlj1eQlO3I@d52Lz=fK-?<Kr_4MX}fN3xj3s(6?#HZ<7
z9zfqLkCt`|=DmL$y-dp|<g+J46R7d)v#W0Jr**D0at1<AuHVF5XiwOCJ%8W*x<8rG
zBx<COfqc=zOx_~$xz5_Fa;!>9iFE+3R{|&wY{N)rQ0TMRR2qLsJpqufUQ-Yp3WsrP
zGQ9??gU<QR1Vh+itk97O({p=f?Xr_uEwzLSaGK8x13@Y4a9|hEVBU4YW7Tl7KjXKZ
zwcZ}hcyj)0X97#?R$L3Huz#jK_a0)Ox}iWj{QD{W@9&6H(>u{w3?rr}kqf(xc1Gq@
zu={KS&w{!D$CN0#NTUyeX0G!NI(HVYvbVl9JsIA7Uc3$>+pb5kQraCrX^&gKRaxbD
zg%L9BgOM#vtyZdZO=A>6bbbO%|6ckF5U>fwMo_)I2ACxXP9&C^QV9UMLad`1Ij(bO
zYu%xV6P_-V!*aoC@%iCE5KSoJ?FN|F*^QhAz5sqTABeReGfW*`t~HkfSRYVkha-Al
z9_S16Oo^X=9Wpog0<f#zVIYU&w#jA+kxhI(Tc(jL45k?1(ut=4#5KW)df|8dhy*Iv
zpgK27_q`;`0Wz}rlq4V)Ac%QbqE`Xs%=)<=Ktw&R{SRf}ze57$DPD6T#3FR#`nRZC
zFDJ8xz>D&NYZNQ_+@p(y-909L`-K+hr_@g*-R=iVt2Hj=z^>0_3i^0CTgXH7_w70B
z=Si@_Po8@QGSM6Jtr!FR7z+na|JrnSGQXLfT0L`%^=d>B(>e__0VK+MJL*7tU^Ffg
zW<Bh+m7;quf6Z*UGOq(!PV6jrr5?wPgZ>KulHeQ%_GU`WVH~s-7j=UiEV}WE=+R#w
zHrpWmi=5LhR(w2Mgi)eL?YcGm3>@a*NLb%iu)Vvz25FD!FDW2ZR8Xps;I?48$Jn!A
z+Z^E3&fI;=+T3*}QSwj~{{NVf1U%%0rDSAxWT;9ekHnrU5Sw*^^#Ks}9Pn*uWG0~C
zHShb$CN!MF+~#`RC8#vl_)-Vy{jfnwb>G^TAGs~(k#{4X9a!G*-ykiwde(0W>Xj%H
zeZXb+i<qB8uP){;0f3t$Xl8Wy{kl9@aQ*V~ef!l$^tg66Ff5Q7=p~!(2YrN0ql3(<
z^(T?S!|Z;sun}4JUW@6=%t!tTlBdvgz6vXJ3elx1&uHeT9vW{8(37a`l1l0r$9Om6
zj>Mh0u1tq6>nnIVAkEgOzyktTU$bi_VXo3o1M^3JKMVeR6>xBoGn7G_N`Y3ajritb
z&zx5%OxOSWC*8p`&__5~xQ?Pbd%1)ktE^w4s87n^)BgMQc^JRmh;Ht|$@=g9SdtS)
zw7q$GlEEzgV~}uC)6mQmDM-<BOKwnR2)bI@1x(AmUFLo0OO?fI*DvmPcDerv4M{;(
zS?Hyc0WA&u5Dvym;mi_@dT&R7(T=gVm((YBE+x+ebhfze5bBOY6KL0IA~94mM<oPb
zE;g9;Mddpd=srCRM%Q8up35kjwowb-!+cxDt@+=(D9usGSMk5iK6}fO#u0J_nU2f5
zu=4h-2Erp1Xw(HYiNz#FE%LsdzWKnUr1LVT-sw9T21`skHm}|KK7<a9w@f2&c9TJE
zXE=55(9y4>(0L1N2X|hW7p(?v$IX$D>@#lV4*;A<Vo-A*PG<EEmK<J$D6_PHej<SX
zG~l$v>nt%phQp@%84|c=r8fd2Na)XXsoiv{pOdA@T4wleL^AC50XKrt2Tr=5+@C1X
zXF_!p8<gntpe0Jf(si_m48x!X+^88kaoV2baY!7@WGv;(N2snZVw-ymD#qYmeIdeC
zWm;{5d1qoy)i<84L)5}<cuJN%Zp4hNa41rFnx&#BS{jmbb+%V5DEis^|6nB?2vwp?
zcGaRz%GXxS<cXA+v`z+f*CTII1Jei1Kq)?vE%-WjLatcJOC|d0V@y&(jpJ5apGyje
ze$(;1Zlm%#P?nDweOxd^?q;-I19iP2u+Q*0YC+;qO_nPq>gmkrPk7Y{pwA=F-_4*U
zsO=g`c-Df0N5uZ}4K|LZem3I!0U&**bStQuMuV#NdlxciaxIQ0X0PA<y5aWy;P>n2
zZkB)&wU#CmGlKzJA|MtbV_{htlhIceDKvyX8rEQQ-f>ICqkKcBM9@04zYdRxZW2f)
z6tx5eJ_u;UTcB=Mg{M@jhsQ7eOQ-a&Cfk2}l@CGCG;)W?ec5eCirpR|6FD_odwICn
zc%@y}duhR|XgI!2cBAxUd}i%5?kV3pKjZSCq_meld9U#_2b6OR%bmszze)S(AkLoz
zji$1Z<iv@-OczSj*2OI>%`n5wpCLMC4u{F7g2sf);uYE^eWW*l^t}BM>2tiNM6!E^
z;J+kAZSKTVNjc$LlnL~F8M75zF-le@868bu(e8^7UqZQ0L8%t%KUC9eovrtzrS?Sm
z$S_O%Q!9g#2p4%F&v69vU+n>{r)gfb<)ZM`$-Tc%Pm_TA*Fw{cNno2GY+(p*pw5DQ
zmphs}F=27sSa%+faRTOdKHV5?U5)NCFCAraExUhy(P`Cw2Qxkm>{C%pmEEH*Sw^5=
zQ|nS*vn+f1H*omA%Be^YXGD7a<&Im!{Dio8EL2v(6BLVRsV^yO=zM>C>`=qMk*jO4
z9AZ;%c3LNKY~yPAZtzb{+dtMvUI#%^Y**;$${YRq<w97*S>O4xr&I<X#$COU@)DXZ
z3P_l0X`B`$R?kXcWP1PXmK`9zi}ZSc%&ud=@Fn`HE|35Cg$<th`NoPw%Kt~?_|M<2
z(Z<Wa>I5dXPYug!{#FbBM^Q|V&Ecv=Z~A;c^Z)o;gTMqFT~PBe<A3k$VRPSG8ucs9
z{bLgNuWtflYCyiYr+d6Os-$wPMFnO+&HKo2#Qg6@GeB{Z08p>yed21wzo_fILE=&P
zOw&aQN$kdp+U1&$2CKqD9ylfc=^d;PC%(oI;+f2pM6UQ95E4Lg>-kH-?^e2&`g*!p
z1uyzw_%D8kQwr`HiG^P83do<XwV1!hJEf58^BVs9HQbP-?8FN~d_C}}@(dtNMmZ1s
zlBXFt;uHw}{U3_|ihL59X!Rfm;r6>S7Rucq<MV(2(?rg|2WrTPOi3rsx}T*fHLy)8
z-`_Ig^(Cm&{CQ$^p`4(1CIxiZeve=KANMj!8@!VrAx@96eu}#8PoC0zDJU3s{t9Z|
zY(cw7HzHTs!@}Kz<qU2sU|(|#_Xt&hM#U50cGqWHO4&b|MVnVtnYQ=o@~#=HSIkRO
z|2=77zae<yBFE$Z@O~Eb=bDO}(XX9ztubrWsgi%G_qn-!Ewp{t?y<c7Yh7cfkXNz3
zSUKgX+zPJXS@NJ(vwIhA48(Hix7u*W?-w;DU7&i*AT0$kP|zhreC9r@oGDiN3^Gvv
zZ}RbzLrDx2USAUcQaw7Dd~<ndSZgK&>JM&<Vd-C4{EmK`G5pqsivWBr5_~KDPn-Ua
zI&TA5i6t@VPTaWlOmm6)z@T1EKj`mXJ{K%Lz<6oL_j<tY5_pyDOyr7zZsz*>`Yq@X
zsVOBhuJhJ&0cRbwrzXLO81^t0aY4|nc9Nm*JPLRSzbg-Hd!|^xN!J7rWq^_&6@#1{
zIN%5Y=Z!LrLP6JU--{_ZKu1vv=r2S4r-<;!Mh0xO3gr^v8Xpx-GE9?8;83*UHlu<M
z@x40nId1m=KtJ%k_^!K6;eV?E;^YHJaR=;_*dKJS05q+dE1GQpm=sMQK?lHoZQc!d
z0r!@H0nmigG4N!%0G=yHAa4U5tj$I)W~2X^A~R{qz7PwE#TU)*Y~xe&d2gUc?Oji<
z+?H{=NCw_pNaIn=JiM-K7`#{(-F(dS$KJ#ig6sO-s&SX{Gcelt^M=spPdD`>c95U#
zm;p!3hLWX5-{<;<KPhDMwRf;5Xjd97yL|d`#a#nz4Zw>fb<E8Lyp_O$0rVP!U-;&r
ze)LeD7D92h3W}wn6I=HmN6Sii0HFux<j?hR3VT5u930T;VAQQL0^L$|bd_6xje?d*
zaBrlwfd8E@UgWneEj1CD$H3=F`T=hOSifU1+n@~rx)?IX4_Q@k{cUUkOb)RcS5BY$
z28==Yi0Mohoj_I&&@voA-Qj->s3}o3eE)TE<i8?RK{6o5VU>*r!Yf~^bSrqh@@BvD
zZ*#aCHyMRq$ptLi@{2gl7+25Pp3W!0ucvLrHiR2)0id!*`kC~BIb;CTYAm3a6V36F
z(gonvu($UPJHU!;lsz`e+8=;wK0DbS*aRAEDv!S&f(}cad6iMi3aF{5^_RBqyDqck
zcnY92@B>x@F?2MI`U{{|ZDB0p=(vS!Hb#~<fIr)qRbT^rg#}O+MO@g}pspYP{QeC`
ze2jhb!@K$&&~62QQX0qulC<+BLqTe`V1yb08qYPLr&;9N^r=Gke2Y>$=JxW7<9$L>
z@dI}a9#OY-f+$ofRDSDU)ugxy2o3k8-i8EDcW$@(tNkp;kL&zT1N9GA+P?^sH{Suo
zmRb83>N7!}6bm+~X9kI^R$yler|5IU&@RZmQbb6Ef4HKKd;Trbd0uf1J^|Uku^nMD
z6ZpzVx4quZUjQVduRliYNDI^NZIafzL%D`=VW-dNwT`0o&PU|14wf3OE{14ihUXmS
zkBTjS{8*=W=wAPowfSHIhY(@L)m|}`)dmw?G!b+ld$|)%X90A!Rhq0_uj#HxfYZ?o
z<%_d^{qsVi7drOlo(*T6X<+c)!5Hv2?!D5O1br^;%>&L{z-o|#Sd^$i6>~Kx$)D^G
z`kY@JK7e$|&zz2e{R|Xn-+`YIG)T#ENZOT0s--=3oILd3tRN}RsR9|Pa7<vlQ60mf
zS3`N1<*xfj7r5EU)5XGWp^ome5-52<Spd)fYJawT=^1FNQgot!wtQ|6R*#^Qo{QnW
zbv>5Fucqxd9!Zq82rgrYCq)(pb*697cZbT@-Rc|R?F=hUf5hJNQ34A7FATZ9XJF~D
z)T>oChMYiDa!<qI6Q)~SMnF5EMKR3n$PzZK(#I1y)D*5gTaZH(&KQ9Iyb4@Dem1BL
z%73IeBZb3Y-n!^958%>6SqP}8VqX&SWRAYMIeGTknO6@Xh*rJB@AYx@7m*)Jc+kr$
zZmCg&5AJLZdL^jOm!7}={^_cMeU1)H%jY&F>cko|BzB8Zz!Z9=!8K;>-)LNEW}td<
z3AjKNf`)H(tM8UvCr(G5^vm4_<Edmz8ag)HoX@42fR)|ax9>JX@-K2IeChk>&Z5Rt
zA|=CVKNl(Bahoh$20G7ye)8pe=~pY%kA-IM9LCzXZanPuxcw`~Ea1G*(ikSM#&ejo
z5E?5nsuDm%rb9zQ$(0kG*d9tk!XPi7dItHhn@DOr?#ZJ#EBld_kmQS>wkkP~{@C`S
zUG<h%Y$*$Z3MnTScmFOXU`9GFHZVyw=@(_W5E{oO4;4G0acL=dvt=LV6MSwJVLcq%
z7pL$&c{p9v2>s-U`u+phPX%<H*S`VbfmF<I$;hJF{-ocU1J$wq)Xh>7zAeASq`h2$
zChVBv);>MbElD<R7VSRjM9@6UNmFNL3R#T+#7MoDT%g>(Q?#s=URoNhA@t`v#ZfB;
zNRSXk(Y4HG3X{`g;h!IYH<;{scOsXF@+O{ul5f%3#fW%r?<T!Dy;(u2a&>P2)pJqD
zmMsEz_)#Vb3O(P{Nb8X=WNM27{7yf)Otk@e>TAHPd4CiHQE|F_l`kYb;SN_c@jJLx
zpzgvaWX=LMj5JZF(Uwp=;#5L|t$nh>U2I!ysb+?A8H9{FK>WiJxriTO&2c}hZi;>;
z{7kMESqFW^B80tTQCJde7kHHEH{7SXHgIXaeNe@82#nZ+$_W1*`6&qNet(qGmDPuM
zz58ArUzxO9&9a;5U#-S|pJR1g-<5l6HaAX^^?vYssAAK51yOhg)i<5jQ_U0`Z=(=L
zX*gn&0F7*irMhin?5rD&<HUCqA(@uzxajkPYK7Sz;Hh}7a0^I^J#_VYwPtUmEPpB;
z2?_t6lAxVJ!K3FKql2f|rGHJqV~tJR#x_}M0S?s4hdEiQVvq)ORV~CE?#`t}Y;n#l
z@|}A=6fVQVDmd~}8xlu3qu0Jkro<slFAF(bt7xPZR(?1&d=-`(u==RmMkv4WW+3bZ
zrIDEDqb)da05iPD7xkNWa1qoZe(@yTD^(DxBCNX$IEg2`?8dD;N!(6jnVv^yn*(uj
zOIA%turVKw&onXlq<)Fl374%(Ckp}Jn+Z6cD+~Ibe`N_}dI=zrE5&pA9whYChG9Tf
zJiUXpKRaK>4OedhozVoGU{EL$s_lcH4IN3183Zg);LsU>M&Xr4c&h@u+GK@SXUZ~3
zn7HTRdcRoOH{6>Ec0Q8}$Py+Q+m0QE&-zA%RIT8U;_1uD7rG8f&wqJJmbN3}hfKIB
zN#L-z1l*_`BC+6TEH_ZP)49yA7B+bIelG}Nos>njV>uF|P+`aiO#1A~Bv<88Mm(31
z=nHcCUQZQ;fwPW!Sy50B@jR-GF~WPQqQFE-0|DWogoL6soTik5eD!K{VYr1M-w?g!
zrXxiTr`7oAn~Wa^s@G%wmY@-D?30mLMfvTWHDq#a5Ppo}@fGOB4f18s?pQJ@gDhc}
z9l~1lW#|omM$wp=#wXCdkIhodiFBv`Z1ci;S+N}1-a{2D^{5pG$yhXW&pp#dv5Qpr
zhPVY?%U(@3%Qr&R)GNh=$M})2_1%N+s-t))37rF%tVIRg3P)H>!&;l2)6}<;NN6PP
zJBI2nmCvc4zGV3@dd_PiIQ#0evDHWIHsT#=WMwsSsmC7;+K|;RKp@Y8*Lmd>{So0c
z*3Vnv=y$n<TpN*0J>adE&$&*m^Br~@2XU_5dWzcpJwp;@vGMj;_n5Ke2|opBmqfTR
zGFfI_W)t=I>=FwTFQ;l!zC3@{0qDI~s8c_+p2jXT=$;s-W|qc3I}6J;2kFwDS^m4t
zp|uUbMKE*ft%g+^WT^=Lko9C-#y#-%WGoPl?wRKpfo+N_l3#fju4h735`Hsg-2qxs
z4UI`Tg{i5ja-bdtX@^P^Oz2x>eOY`t>g2;Kwi&0Btbz?*0u9>WScx9FMsef7p(hye
zDSV&sJB<8_kTGXt`g7wO!e(`6nb9LEJFnseKFxxR_-YGcP0j96PIpqIN-qZT=mrP+
zDAy4sG?`D*ZgnaoUGgEqhI=1IVXxkMVj_Cm7Y<-g+lR_MQld}5e1|$Fm?RuQKoA%j
zUs+zfL7kht++f{2rXGEnsW~I-q{$_ERd}iXTT2RVmHEjb&bv#%S|Zgu#g``Gp+Ky0
z+HNGM4q!J=D7j8FdGOwKNA-eEsl-kHd0OO}f>kg%8tK*IBzJ94Eid&d-B(s``bz>A
z;b=$XLrfY6tFFv-=4yELBKW85M13=E1cl)zX+z0v3<e$sZU&VAh<ekZtW=<3R&Do7
zkxe;uvyFw~+G_!Dj`*9BoL{LeN@im1)5c2q@UO>BZRM`8-<9G82Z>h~0ODCXD^5`A
zV>R`Sl1(#x-t*0(v@nK!6d%!ou(dV2VU9Ti(_Vfoj3E47g~`qts<l!je9g^wTBJ(|
z^weUy1aB$nuwk6qc(=tjLES-}fyRXH58WVFegfgNINzk&JNbu<3cT}{C&f5_mOn;B
z%4o2~_VI6#$y>tBBkyES&nM1yp_M0Y0p^!+x#XH;Dolm=Z%x8SXT<1f3xu_N-R6j}
zA?IC8&n!=d;?VpvU5RxK6e~9t-X)rniz)28WvV@$bnCrd<_bv%1a>j6MW02soX{@%
zNKS%oiDgCC*h@JJi+(D4l3A2ngKH6p4lOV9L(#G~$mPPJZKovC8_-_Kdb!XwNX>}c
zOlPH0%e1mQC;uQ6kqtqGa!*}u>Ph~PQHP%hR)K5*>?A)Xf4vBDPjfOR%6v|Y2$|SN
zx6~(X-uvUEV#a;gkBH0z>ngL!2$an=JAFb%<?ZaYUv{mbOemxgs0C_#{!OB%3zrPk
zKT{E7aF)3<1MZn3LoZ)#QF!lCIdIJurQ{FD!-tepj^VYdLxzyCWA+l{$n%liz9sZv
zcMzf_@Do32;4>gllu+0kn2s!tF*g?cP;tX|UL<?ol`Q;{RQ4A%or!Blj#6yuH*_}?
z6WJ+~<VNt-&WY%SsWuAx1@APpDX~A>J#`&^(>>Ei*+wt5w_>0x9Fy<XMr4n<CQ|r}
z{k7$yhwS#fX_g8n8~s?th%}*tL^=m<WD=!gOdrMgqx^Qh;3v%zuwz2k)HaS*u6bz9
zZLVL$5c)5S6@d)e1fXsBFarCIEZad(jUmF39WhBSAxi{kMO?<OWvSa}kU61r3_3=w
zPg9lmjwF&J$l>acX`WA;8bv*X6sq^jwY^r9=m>gQeO1iq>AXM^STsaMBZPQ(AuF!J
z8YW1170-3MC!OF0q0gB17IKLQNJH4&=O$d2>&1GLOV#1+SI;QjK&*XtE3A<wA4S7%
zeQ?FbjlHHjT8W;5b*Jr(j*UDKm(2*Pxf;`~RS!IYFHJCe9^MHfLmoX&-cMMBY2c1w
zQ!G-3$T(>DYrbCZ6bK$A>_JXr<9Npzh16B1i=rkaOCJ-k3*io7T1P6xHjvdBGu-3k
zQot#LClYBHrKK7(LnDTh&1|+omM=B_;I93-vaZ;`Tzjx{hKIc<Y(rK>KFGIhI3O6;
zcCI}`C+h^WGX5MS@O(T%h;D6|%(67B2G<uU!A%p>;>#(Ym+J=!d-Pl)1j0zIDo>rX
ze7GGf(ua&FgN=IGH9Padt5FX{?aS9Qdg>btj?AtHJf<%ytudzf_sXzwbPo3WrL#W>
zH(zkPvw@~zxt>VR%9R)O6~iOpukaL*hdLu$`g>VVASyFexB0k#t4bq|N&K|BO_BDl
z)p$7Sctsaxfu?k$cj@4*-Eh%{^;1)Ls$rF<|MtX_N6gQg+eGG$hTu4of-eziRmQsk
z8uwnF&EzL4y}s{N_6+y-uMC^#D+FZ7W?TwN6pz>vFLUNHBdjrQ-|nSNzLa@G|H!XZ
zo9MPGeY@D0f#gWipm;4yLf#cc+?FMFiK^gw5}xn<N!sI-M=F^9Q~}fq=QgeN+?Jzj
zPol2mv!Z+z>H|qkameB~@(3XU5(vG}2XwKV7vqsP<3h(yX^{`_%$y^)2g3<MSA{Sb
zo-yoG_23fc=sx!fRU|N1kkou~K4U&9!=K&7c8U4*VX$4l@vX_}4w7nxvWkq!Hz|_-
zlSC0x`Ix9IQ_el7w5Ksv>k3=rvjnE`0?UuwudTn~!0^^Ooid9US(B*IpOh;gi?{cN
z^Ti=a1QQTnC$>h1rPi`HA|#o7C0h8bsDgQ)OqY2glsU@52qn}qiOEeP#tH4p%J=tL
zOamnylc*3RQ))f(VoVSu<ulREvyNRUN2#VxrJ{>;6~Jhq<Pt)Xc(O7vOHwj1r=o0_
z%QCW&7mtT%$pl%rdHi`~wU7G;MpxELIEEM5`;}nSgh*%k&JAYQ!-2~W+O-x%>lA4u
zEtM;5i`AmxT?J@TAU}%-MmQ&04f!y0<dGf}QiUb7S!*j9ymW!%G4~SZ+Z{5;jSz#k
zOy86m$l*YLL`yijcRm9n#*^QXmd`li$;MbAqrlCVv4l&hOTvH4@7VRR=7MFC@fz{W
z(n}6@vd1@RJEMmO%O^gbg7&oOr)AWtO`7bGjJ%I<K;(d1>)e@FgUHTIL?j;z({-;(
z7xjn_ggJ)t+V-t(1z*KXs+fsGC#j$($i2uv2`@x;c{NbIIiTc5N8U6g*7MX<&Y6x(
zah45nrZ~$a7no~>#t@x4j<h8JSgzoi_;#t~^rPX#P>52m0i{R=%rvAMJv9Xr7oo##
zpELy14|b)+O^Ks9MMdt6riH%kd193rP7rm8Oe1}?k*Cu|v5vBg;T*<9`j%{8?<<b9
zrUR7&A)esU_GZ-<uSbH=0zw>?ONb4^vc>kqMbvLG6+v7oaP1v}3)}W(Lq`sGBwSB?
zycu=7#toNm;hOf1_Hx54J#UE<A-d)#Eey#x-3P8^)D$><-qe^@It@<<%W%>d8B5W(
z4tmli#~f@%4K!90i406XqSNlSw6W(#2*|!vdp4n$m53WQN8zeLFm=A1S1+AqcB^j~
zARX)3XV=#nTOGwU$UQ`@UpGgt*wB47=_<|@{-8eH?Xk7EvFLK}&I?Nwn=@##A~17g
zLHooQ>0+(6p?j<<Uf4^fTV1Tb`!W%N)>&I_ROg|U<?xwEExcpyqZsC0!_PKy13LmY
z%4a4q7I2)asvN1heRLJVSCjIE&4yDrVKG@uI)3D-Vr2M!qrMtfUU^i+{(dNKSJ*gL
zt%g)yr`i~9rSZB~GG53wGV7nmjS#-0p)&oV6`f-n35<k9tL#!3ih?jsfs-df|NbIw
zimrT#C_L|KQ|fp%A0M`nUXjnD3@>G&;;|qKD`zaH<1#Fnl3_2(wj6n6Yq;<B)<ko2
zVB`gX;$%g?HQX0vd%97lXay<<)8NiUCsON71WS2yf{1mg;aeA?)Dvsg7uNLGk7w-j
zurj$AOw07HM%enr#sgcn&Zd&H4SlisGsub$^Q+bp+cY-ot5Dw)wZ|hZS-vo+>vAP}
ztp2$c0j9udFp1h0%<$;5+<l2!)?RK?eu|EYh~?Hk|1{X(GdX4o8x3}^V!tCH=H!n;
z=UQFFL-@2_m86gj^HkVWrIQT|dD59sE+d6~UX;_iNaN&$GR$lCE00J6rFEv|QHCXs
z@sM&2PMRM*9WO>;cu|yhbjwp&BiS7@sFFU6*rHe}br+Yrj<@g$+zCPDhvGxdY=ox|
zgd<LAj}!W1Yk9(=+FtxTT!X04a%6Kta}?BxUw>q<^rGR8;Hgx;<)*V)2^x_ejn6?!
zfKw4OMvk(v$s6yJ&ZMOc7IBzjKS$2AhdxR&HGgS)>5|`05Bo4GP-K6J(J3D^j=l_!
z+8vDCqZ^Sxh51oc?=<}(noQG+W1B>mYsw4#{ui8FQYiJ>(MymB6Q16(@a9qP0-ZId
z&m>%LaGb^%`!8g#UgzK9Mjv+&QA|-tLAe4|QZK+Yp`A)_x8!3HVJGQNPwQoVS$TFt
zAMoa+AhSSJWMVocLuG#{bB7xRsP;lpI;?3K@Cf;P2sBLy!f^;Z%DKz?Gt7JHrbA4{
zrAch}*}vgjVtTMumseMA^+5XvU5_B<xt6C(&}n1yefFdhpU&GTuL9s+ppmI`rc7eB
zG%uFuy0raxKAdYT7iIg5LxWIh+P%h+a4dX;v+q(`w&-=f=9UZ%S!Oxq#MY~8))3uI
zN2uIKW9{uxb;z29W(<8I$Kw|a-JG{YQj(l_<Tx|LZiVSo*@ZCueLTa^$<2aUp1iLZ
zEpuBlBA$1B5IVt4A8{5m97pdcGM|{2{+EN_l^7@%KTP%EJpI0ifS|qaG4_r3Tkag!
zcXhuT!^`^E)Q$z*!PbV)jBIM8m&C=VrIPFB6#dPIyo%r0hl947NZF-a(vDFP;UX50
zcihz8outC2E6+nH%&rHi;O-;?`V;&6S#uyG(Pb?9DJEyfOI^jG{W?LITpFYE6BhF4
zXvL7?V(451CqmQjA+4BcOw(m?nTc>2cV%P33S09|$A?gB)1hQ2427;_kdWcTr?)a2
zv8TZc-F$cE%YX|}`r^`7;kyVJg%e2(E|OPCZBd)f10<wRnA{XR#xSU!UFYp%cM8kF
zuh^Pt_x&VwF60^|#AT|&J9X;H!P;!-<d*tV-(5z$L^_uUrXyKi%-SgLp<Z02mLXWV
zrws)Awe?$1>itB01@q~KOMKTK$YEX~T}GHw*f?{8;_0gD6Xr&aW>gI=-!fa3=1BbY
zGI+g@;F2&N6l54Y93>Y2RyRrto17=i?BX-Gr|I|d;|cVVn;)5cJ~LT(Qb03P`9ZlC
zeQL~%KheTuVnFIAVb-J%zhjgMG_r#{(;l2#2EH3l-F%d-!icnH#7tFZhtcJ13>~b(
zN02h4uMEy=3r=FT@-JU7!xUQVlAT!`Loa1v>Cs~$DG<!?jrr9?&}Qo-fzz8TMAA4f
z6a!aaU#Vmm>b09X#monlQ@VPlt4$*l3*!1nHPF%sV5e)~zAEJ1laVrSF}55XNlk0k
zp*Obdx7d(5E9$a%9zs?0se78;DblMvEraK*>brWl(&q8no|8>qqld{{l=TQJaY?oO
zbHdg|j)W#GeRTdv?w$~b!Hbkn!=9ktj5B8(dlGPj>S}xt6f}g!#QnBd%3_7`9lA;|
zFKWr-HS<JCek4&k3zzYD(?gmU!m<PDAW#I`O=P3)u(nK2y@5|@irZNY=$V0srxCh*
zD)?@|>UWhREV$zo<M(6-TQ2H>_~4F`!o(-#S5K4iy@E0b>NP@p*o>pZ1sOUE5M8X9
zAqOXW35AVB*I3+E71{NQrZBUbe9oo^4G%5VO&@V$B5Dg*_s{zTmPF4H!#}K~wXQ*l
zQ$W_FITYD5N$q~2{EJABxC@7BTA9?8LdE2!9E}wxUB7!J$slVFV!u3vq=7<IV8UaX
z>UL^m9(oAj`~{yD$G5OuJ@s5a#KM=;m6GH#sPgf&K>DxXNd3q#`snX;G1N+ZN;cw0
zCvL{~RD1CSygZUfVd)eHbZYGHyEIdz0$)QgdH87DN>q5qyYa&xh_)0VTDlF4|I)FA
z{i<o{{F?ig<bxkEWG0d!7aby^Hf=s3sU_(HB{GXgp0XLKyin@tQb+xwhQ*YGVgDoE
z%%)EmfhE|GC)zsM&3g<EnePZ1S?lW9HH`9-edapCVb?j`uVy;N86TcGEt2psi|$qr
zk_bm;Z~x3QBqcK#-T}d~6Bfhpesmg1*ee*5YOHu<wAqN>qT4W==;OJbM#9Gg^)XGh
z`lr1&NK~5G>0Go*9V)Cd#-=lbid{eEB4CxG>s7V1XCL{^5IrtSp0jh)s{slCHBO%H
z1n26kq&8*hRPKm0XN0+tlus|x!{|Ns?WB2|kdzjC{(<yRy`oN0EFP9w10IFhkdp6E
zXF|>31=0nJjpt2mIz}EDwQ%@frhv9Q)0p6$0fescY2Ki}2Dko!uz(!2ZOD&!zOY7*
zyby2OhmaGngTh%Ou}~?a;RRj<wlJ=ka1Gn>rd=qcZ^;xE<yaNLn2N9I)lp|`^4SXC
z<&W`VP)l;M5RRtiCCB#6%qs+Nq}X)J$9U<mvJa7{upzo%o@cJ$FU*+XId1%JG>xZ!
z=kNbgb@*;id8c)jaR|jOdUX4>MJ|ho211nFgB~eFM|;2r>MrYKt&`O^FB`HX&<0lr
z>kRk*OwSNEkBAj(+AZo7&TqsYnJul<HtQXn3?)tt%h;NbeP@0V`qQS#BhS4gs`QDf
z3Ar?lZHOv8iGF483v}FCLy5CO<5G;8Gzl;Eca(V2(0<k?h?jXGmn_7dSf;A1ng}Ib
zgeM#RgHOXVJ>^pkVWJJQ8U@>;A-36PECInl)1A{z-q<kL+@ge2r14aJx){8eGSr>e
zp&1P5%Gl1M<KF$x6Cu+8ZDc8Yv@|N5-^NK>m^(%-uoRIcx)WeSuJp#5<3Mb7y@6MI
z8TM>mD!v3YF!IqdjAZBmfh{_+v8^(X)L?SRdjic`&#23YrbH$dL=^j2<@&92%@ZR7
zQd;3f9CYe=NFVV~x>eU3tYG$lB)moIOR-ZgzBYyU@8bxY+0*+87<Vpv@rE~Ud2$tF
zs#<PTmD?-E)NP77oHb3sRmko51kAOzxHmY&I@8i4u9Fm8v|YI-VdOJOuy1eDOboA`
zGl;&iW6orlw(y`pJVrRNoFAGK)B}d3{B7-ug|x{bmj%VL%LiZVVH&)K(RXLRXvwy%
zYqQsXn8m8+otu*n3nV?)((s}272$M{!7Q=ri%835$k1@?^`>!&5I;rEqn`4egmQ9+
zQ-$)LIA;()7Qn#Rq?|$4oWjYDzqLSp$ZfmtuJtP2O`tfYvq)L1k1_I^^Q+h>Tlpz=
z5h;0><C5{nH|%Mn))Cl9CkVp%rRnI+guWV@`wC0iakDEjW6*@0Z=~}%k9P?TAWqz9
zn`OVyeRuTeE=>Ii`^QUS*<`)+Gsk9$H)t>zRUTyIt4VT)H;S&JdQ-woRjeZQ73g(v
z8g1xnDxqhe4CW;&Lb&KfSTdCs(Qxy30-oE9o=cc2`$uU{yO^rz7m>06N{jd-nofbP
z#o8cMZYcqCsn{;T%Saw>9j~!D!r6RM@=!(vRz&!V8lsw0t}bh58!Y9C9E~!4_W^;f
zh(y>fp?%HQF2y7&f>d5ub#thy?XArrEEFwE+l4h)|5Tc81di)Ql@Cu&``g@1g2X~v
zDt<(Fl;Ae=wbM{Q1{Qt6c;K=~Ce9-qF9NJb$ZQV>5Hi}hPzy**m&W}cMoeJ<Zzhif
ziHvR+OnQnxs$NcnvXk20fxLialJbi(#~4%5M^Gt7MB~{V`!^xe;r#<Vgk%o%Zd@OD
zMV^!Y=>?E?_k#_Am@<>F67e8O=E9VP9G}A72YS%Ehonr;wO`oI`9%d1EqhFH9XSQp
zn*Q2|l|~OD`=DY^BEI`FriJki!qv~&X%J{ZQ5)jW%%xe(w%LP9Ubh}k*<(E1UBGQQ
zrY|0_XmRQ0j=Y_uG?Vv*AvEq0LOrJavrz~f3v7=~FYOYu=oxwf@EK=d`6jsVAdwv}
z{{X$!(;{L##0p8)?cuO0tBwz){#ok+ed1`k@>!LJ7||DV4+T#h1Mwm2ylrPpe{gV9
zp{MEa2QS+wXN{w6*oB$K?ujOFef$y@Dbp`XmWD-b-p1?wq)iSlJr-L^<tHKOj5Jce
zz3&jc!$s!OciCO*1+hUF_>jtJq<U|iIW|F1azv>FJk8jTriW*XBnUBxAQ)4ABTzat
zk+B~k@sQ#&FR!ZbHSIjmjxD4o2BM@q_)bNz+YkmzNv|-m5`=Qx+IY_s1$Q>Q)eg8#
z)qgAVbWZCk=7XKrJ5G=|XVhY8+4EyiOEJHdfNhn-Gcl#o73s_>69~c67r?WG#qeA-
zJZVUDdjP|*N1<3J%|1JOxAut3sIQ?|o+EVDTB_DjDxs*fcY*n8(xofO5i=|v#v)kR
z$5SpG!No+kkrj-f%-!pHc;16dcJ7O7suSm)l={d}N%G8i!^eVRn#3a@{8~2r3Mom`
zwm;|TP2YOexrIiLP$?yNl>*PCOh%fLW~{lm82Alb?nuRQ4%T%fXS~NXU|2#g2n)s7
zH5kZJ<ECsO4@^>F>vTTS1@M_<yEaBdu9_7tqz}(630X~&BzYAdMM<D0`HY@(D#$M@
za{9s~LcFNM7+_XTuDuUkgD=`pCg{e5bqEPd)r*Pk-0{exRi}5@NxGUzF%r4#xiba}
z+?(8ssM!^!PLhyVnFiAp#w<*B<dXag>a&aW1!QH$u+#P=`lIGI)7P=h<*74e49f~g
zD`c=bD?LmMU^0fi)Dv^6n)LAhx=hkvFfc&P?*fAL=t*{EZu>2#oJ`8NUZ1Eiw<#l&
z&Y?<*YK1B5>S3^8b17@bT-QL)R@srO$kMBiGTb497Pc<m*mEjt8;Q|IR*Qr8vrkF_
zosesG+B}gcJkq{@Ts%HXJuQ9JuQ|P#F=b)G&7sGr){5QtjrK&Hl}`V?yrE@A!92e|
zy>7#IRy&hqnGXuz6m$bk`7qew9qXM)SV(ku3Y*s_bm4?>(5Z-oxZE0^hqzL2qdy%U
zRA_`P?Y`1mWzV!ZK=7h|jb&hUYjdPx>B)=i3(YEi>}GP(JDw(r;?7Rn{b5r=Cwu_N
z>@|0%^qNiDCCMX#QitOwmNqzE*f&8;zG(fFcN4oZ(_-&M);4E>Z8`m*JnMm|m1r<U
z$fWDx$749@U4#cXP*K-NIrgsSyH#L++mp_C$+K4+0JklFh~1gj|De`|E*x2#6K>_b
z1Ad!4#v2jF)?b$241LtF9Ks~G8EhyJla%){h*f;lmKqYZ@3eI;@3gHW@-M%~z4~l1
zVz>Oty?GS9OL65uQ=+yJjjhmC$zWFbsnr)B3M8E)fuuaFFLvPvkIUOImuZvmIhi6x
zs)=HlRLC<cd!({C_9RbULAK?_J=iGHL=c9O2`KLOsxS^CUB>hb%`3G(s7-m)xF>#;
zx(6CYD77iRZQ9-F_(I-$7(P+ibkwb+A?XMi+ZUW^`ibE>0nM@{P=-K20@4lGC_|=J
zUq|s=Z4KP0wp|<EF+5qdd_ONdV&!9euz@dBFhbr<fhgLis*UpxqL)7?W?(4Nc_9c;
z6@AHoD0VpiCvbHow;$SUQndaUmpFp2VrTKY5U-$0rq_xFk$+z2CWhm*AjK#*mwaHc
zrzVi1`(KGj*bgai808?vaf(II`_K9>ziwdxP(?8x)8YSqW2Uw+AXBoe2tAAZZ$Cu3
za{?LRM&C~<ez_86UOpsre(tJ3!^tT?{Z_-;^Am1SY1zMdi~q?A{qy-Fm3o)O@C6>y
z<?+wE$(1cREQhClo*sTH3Nh2ZaKS+pbJp6tRT@UiRgEOyQR6DV?~wfh&Wvm3aNEgF
z6bx^_{xz)I+<>PjcfT>8!Toz$PKW|g*|i+>xL%Dc{%$D>g?d5#sed>9y71~IN_%zm
zBYni=4A4Fq1p`6Ote6v_`7iG-@byFvE+<s}74Ge6HuJ>42e0k|$L@pt*w=Bm=od-*
z!yOAw$3#uS|Gol&1-NBv5Q}JT4x7mWL#JX+52NN!c``o;tT5e(OaLhw5SZ-0G#%EM
z_S_pA;cZ8;RCxlT4iFUq%HlV0Asvf|2-)v@m#eFjb#RwccfD@)^HtyTm=T1ne=+R-
zoWuV$y=%&OK^#A;KDYT~m%NN)I21fH+&C>-wiycN){K+Lcai?YJmt*g{N3D+KRWi^
z6GFm07(ELM+Lkj=y#Pky9^h$3ZUQ+E!~A+r_`M|nxFOPUrOj)p*%?q+x_CbuB_$*P
zacvY(nybDMI0ZCDV$cQvvXtzZ<hVaso`2DL|L1}Gel^G!>#3SlgVX1|Z(Z5jwxnvF
z#^6;dZ6ae}+zY^igM*V26Q8>6o&Zy^18|olP<<?sL7?*X_Vz&EP+NJ=IZI$VwFiR%
zv?wPS;PQc?MWlmkvN#p?{<;d_e?IiD@gTwZ(P$Ci<NE?a3E*r!7Z(qB?WK+asDcLN
znsh#DBkiVrADV*Nnp;uceK5B4GPv*1Zr)k+A@S}vR?K+TY&i-7@3BUwb;%1wX$9f)
zv$IOW{wbigzGo<QC5_V3($<(5L5kst{-|01VF+L>O829vd-N4>>^Pd&f*5i<yEU0}
z0nZ;WYpGxK4-9-@UGdTtJv*=C=kxph@Heu0p@S03e13ZtOs&EpZSJjqDi{Z_4};iD
z7xhIy0XLHd@GkGB0Q9zN-;uAdfjx$XpP!$LYiePYDxLlR2tVi#I}(_HzZ(S5Pl0fa
zAm$9r|IRU3_&C{Xps8z}VN^k>E#xUlo>wJban;QHil<v`!Sbb;ci-C}nT(uVRsQSL
zn>VC6K|(@8H&AHS%b`TNd%qLA&L^yTovn_WLtAt246}G_0H2Z+om0?r;Og7|wLn()
zQ=<t3nh$+N3nQZ?AdA(&0(9B!{18h=MZ5<Z)7k7Trq@DbJ}OS~rO(^F0mDw{M%5*C
zT<q=?OM3)}tN4J4n@L7S24K_~H`;#6u*$hNhQi~5K+e8@ez5~P1`0B&B1A-;6RlY?
zr+;;d{|X=f`4FYjnG01!wP8v@4h^+U4iRf$IIZwtXgKm_a$sdVv{1A&SJd%;zvrH<
z6a?<>e4<D<mke&+^8<9=cbt_X$EzLwwzjs?(ji+!WMpGOZmHqnAt6pDv0EJBf4z`@
zf3SkPD=o>_zB~5+Emd-{9grE@-rpqV^Yv$O64v3ebyI1>fJWi-tbhQ;UsYc1B^B*V
zD)I<&9+`#hvNm+lc{VLue+96=Kb(XG{2oe9ehbVcR+7g;P|#rw1a8Nx-(wzgeKh45
zF{YIRE<JBNdMXXy9|30x!y-5Qznew;b&PakpD1P2&2v=GPZ#~d193s(MrqSBNl|qC
z?(F}tMPy74i1lK^Pk{TcBE$gXWOiVkSUjRz{ulH9?|&Iz5!_atAA$eZc>ey7=LUoV
zti~S|jsNTEC!MDb&Neieq6hygfd22OTCCI=XE7YCz*IaU`+p578Rel^D$__v9Qj`?
z|Ns4i?mt6)A6yBY`qWJ1@8kXJJDuEtCKK;}J9vD4r?7Z(jx$k=iCkkWB;4gnxcm>6
ze1EEMPI3Y&nbc}Cg?vVaAIsT(jv3=XK0R^ln}#QudqQoIqo~aeQg#S~y1M!a*xtZ=
zaUbx2hR4R(&Ud~A{^JD5&{NtC&%_%GaGDMmZK-7GijDoah;AaYWxKg_dhRE26I)xl
zdcA224lHm%Zd_d4@oc%)gQm2fV8N2v0`Da$tgMxQjvg488OdaL;r&m#4*WFWkvcO-
z=O74KOAN6@i3Oe?(V~lz>iDCUY^raQNah#>N0Jv7768jo%xO(rQnLHUs{bmuzVd$m
zGcxWrSmC>KfoMo26*gP_qN66D^*%kw?0odZ$Z5eMZ5doZnaE@epZHI)Cs_;*!pr<M
zn^Y`S0+~ngtI{3O`ws$uXorP~c?YQV;MTz=Ad@UADgu@ot!M}1zX2azeAmrG_YTZh
zC~osc6w4J|-9?sKe&FN3R`5R`@`SPDd5gciukqSkzjkyS92@fA9TG)=(5K#7JZl~i
zxW2xQNCdYBBmYExc;)l|2>b4MF8BBUh|sV{L}Vr_MD|QsQMM47Wv{Y{l99c)viFY2
z3fUvd%HCw}^~UddcTS!0IemZU;ScA14t3x6>wdki>v=s#m*6f~Rqn%|JZlZ-8XT*V
za&kg*aW+VUY`&-8$M;9<#;!aDTcyG~ftQgr0ft`t*RNkSz<&p{tYnabx7fs<rwOUl
zuZdamfJ+YhdE)gS59DQSp<a_fb0i*KFbYac4I`G$r$3g{UMxN)7UMVkq#8zgqMsU+
zTeX7jzHExrn}vG^Ju+-haXxOxvk}u_R}?+XF6Gi3d$uuBZe#S|0hvegQw;Z>$6=8A
z>;n3QF-RDUuohmcJq`NsJ00yUEu#5x*B^<2Ix_(n=fI9az*ejc-l32_tnIjv3M|B+
zPB3@Tf&^JG0%HR&)AlI#`EcNasT{x{5_2z3<hEgHM;eQPOXoXgf`*qWDkTP3nq45m
zyLt!B`s{|VZ~@;!GqaZf(EutA(bqiEg8mla@q3~aMkix0(8+CGn8rm!M;@R!k%vrL
zEA5tdCj7NUt?{FhIt&Kp#a%C4)O+i0z;Y>Kd$aX;#L}-3XrZx@kvHwvbXF6qE!Vks
zk_Ey-)*larriGbGJt4hc!LKvd986;>?vpi-2m{X;1gJm;RCOtQ&hED|<zI~6fI}WM
zC^QH#+XU8jmjizzeyDAGf+MJ(&thRoNlBH@C%yg#KGt8&SmSMA0FCPo?8~!1l`=|7
zsQtGRjf&Uhf8aKMZ0T3&-KUq@$x5qac20U~<UZ)q-yeQV<YqPnmSlxel@K$|Zn%}8
z&_v8-!tE<iW2Z;pNl@!G`nk|>Dr0DM;nk1<AEdyFAe|FqH?__)43;8!u~64xkgz;x
z*s!eAA>oCJ0Hn5O>ZMeiZ4d!A4Zt)WAB0y6XtdUC5iD=tzU_Q8{d<F1p({aQ(II;0
z25p_Q<rSC|sENj6@X0|EQ+F?zsPBDMVdjlFN6LYOjj?6n^n_;ais{#EE{P@l+n?P_
z_-`j@1}q~ofeROYO<65+q~wXBO=RluMVXDr&1yH0LO@P3xn2uM+8v<=M3a=4H@d)s
zF<YQG3W^E)<#+woJUsg)3b(gzeRhU(>>jW1{xrd}>}kscFdtMynf~8{@#iO$_&hQ3
zG3vN6ai#TMPaLC_K9!~2pkn>7#L=1O0CjogM96zypYRd3&We|AaqDJD=RcIXDA~@}
zp3{m|z(0ev0ooZ?a3>3<=Y8`+c~mk8nDtXCAnK2ysi18u8*^OD&B<XF0EN!S+YvrK
zKFp%f1DL3(MHLoJ<4=T~qU8XmMo8FAhkRwwr8FJ%Fk{U{2>sY+?4f8KWD%{25ff$n
zufkFdEySj$=rpy5&F%vsgV{X|HAS(|)5cIsdA^#zFleR`c>ewL4PNV=_IF-5sqr@E
z^#}gC0x6ad;#~afgWJjR5_5D=P_48LcNi^#E>hEj(Ev*C>k$nd5n=P;ARPW!ORy-1
z)(U1w@^L)frh*Re7Xp`q5vYA>Fg$G{uzf7g-kWI+2YbFjuol6Q?`QdKXLJ?IJ#6VK
z;`w|AVi|)&!B{!qnv{Zs|6y4WBc;<4dxTc<eQW2t_fhbUB^4aK<kq{{A6>XaV!d&O
zkEV4B-YG>zMX)B$HL^O7o$h3V%@Zr5JG9+EARncnrd<?v2vOPh@28I*0Dl@pR(vHg
zb>OiTsyzKTW(Orl|NkhFU;zZjli@1u+lwyGcyV7a9(SA*rxfZG%7l$jE<s>W#=q$9
zhwtZvzm1eTxyUlAFILUl$-U2RdbQb=5My+cJ`~2mL{affEM+rP1;uDB)K*NVu;)(g
z*v<UIu>9wV{bS)J;x;$m#lbp@gBc(zD_1f|t9XF+J<-QfwgW5zzLlCCrh5&Y4B7cz
zID1}gXL-VqWon7U#U?30oSZwqq&VF6eWuKBZ}gfBDk*PfxJUNaECr*X;MKPGr{GoW
ziA}CznK%2Udh$f8=eSBLB2eZ|<Vr7p9Nywagurh*hFW<n{khaTUSF4#1Rt$_+&9pC
z3AcrqXr8NHo?jq6qnqfb2J!EO^dH|N!XSLtapq0IGv!4W)3%`)>kJ1ae-0)|ooGQR
zoc~Z$|GY(4yU@;VaMCcv3*4Y%Dd@zJif!e{4q<EyDNUgJt^RW+O2pOi>nb>B+Sh9_
z$agb-2-I&a(#vJ|iK6^Z<t^eskE`G2x386EN<MN!P|r@?P?^I(y{E7Ef3M}wPu?K#
zF&Ue)h#jrF?IPb32cy@78{DQ-jG!|Ul=*GJ*~;cFUE2P>;Oa(yfwXBU%aT`0yg`I&
z{Fats#x~Wzp5qwqJcu2orG2HC`1wD8u`FBFR!F(*-MePsHGHc<iW64|Oq3Hi41BHr
z)>j#!qL+HKqNsDZMlxbWQz+Pt1hW`@;@%){Q?;X0Jn&8F`B!;<l?D}F<oN9rs4x!w
zI6DhiktRbk;2X^H12OyKdMjxyuTR~&Et)~ZlV)8%CTCj4Dl_y}Vk{4fA&-C3xjr@B
z=KB7>>h!P+?t)G`%-YomI1WoLM}~zdCEvcVsPKb(_ha#|V$m9;=?~WBtYNWtSQojz
zgI{_jx(9t?ZWZC$I>JP8tHm>)VX}pV1aJCZ&wEW3HwvU+0G^16%MZFxDbCK!Tp+uV
z0V1xO!<O~k$#+hCofo42tZT<3(E<$9XTQn4%Mvsx$uj4^XGqtbWO3&!X7JNXs*CJz
zNRy^BTC`%GX2@aQXq6}?@ERF2*zHS3d%x(J7tp<wXSX_91rqwby*+SQM@K^&7-1~3
zfeNi1Cy<mgt(l$ZpAzzGeC|-LvOOqy3{CM4x<U6YcsmSag<$U&cL_N)QP{P|^Y;s#
zGVl6kps!ydZvPW8s2zJLqHtUKp@^ECTmqxTEuDEQjdyIWL!Up~Zkxoz#KPJTN`h)x
zjnsc5XOrx>1ab40RI(C%9>4L8R&ghJTY+>TykW-hrBQI|TmyUwFbQYyG6jvJ6KwS_
zJcg?S!D>CS^UI)7qRRvNC00peSWM3@TmQ?@4k4-o4l*FLbWr-*@<lSYE49Y0uD*VK
zzrW_V7nt;0Tedb&JlB^byP7x1MeN!H-4WJ_;s*DSE5DV|Jvq8%A0_+?Cr1uq2EA7+
zu_V(*U%V|{GGIPP82jBOeT06iVi+#vB3GvCZ25&*!J30Iil#%Y-kz)BFKgXz?=K8%
z_qmkqe*e%}*OaQj>x$SLA0G#QX^)!n@^Zi!jzNzH|2nDI#WNz&47b)Xh*2IVkLjOp
zkh?G@Ed#^JZq3ON7-f-rLuJj&%<M-rw)cgl>G3H&RE+4N2k(rr3vGX)X{X$WT?R!(
zC%W&amwb9~|1M6ddD$+b;Jt6L8-yBtb{J@cFYl=M`tg=y3Ktm<<j2aJ=@Te#PoGIb
z%&g>V1jKwAPp2L-{ZZ4mkMxk%CD!Z?+u+3061<ujnoDqEHNqYRElADL&ZPuU;2r^(
zWz-&J1-|1}4r}A0<RD)a>2qGpEt6$FtN~e~zKP|52AW#2p?|sO#e>h{IB%amTOB=u
z_Iz=yre=L^z8);zpDhin!!H`Ec$)3PXZ??+Sp=QxI>;0qYx<t>A`OD_YZ8X1649k_
z1lCRwhrNedy$ZUUPYn%9&o{C#|9n^Ook8QU{vz%nmnT^ul$*_cu6e{nD<Ug-vMmgZ
zMGwF<vC`eXd%Hu71~r0pz;T8m{!HL}R0-R5EDph7LWrA%z&nl{>E`gVM62F-qiWtK
z26fTBm`g#kfSrHo>2chef3%;>FbeBX6Tq{bZjc=V$Qa40<r~B6a$qZf^xL)R<eh80
zWP#{%JFcIBBVSKXPc=tveLycz5V2OD5uw7zqjuo$?J(g<k|f-7NiWutd-CH6*wq>G
zCxEZcqmLfwP+@JgtU>=VQ4ZGq%OC|Z?#tN+-S!XzUD-cQfIWT`B}x5O=%ISAVa6K=
zAZ9~GIg0mS?-E$8+<fS~F2OgUauGQ__~T1}0FLZzLgyG+hlkFKS*0n{ONwo^g6a1{
zJ`iamqXu}-Qf+38>J)`Z%OoSF-`zS^mrmvP4`~?8jwPZ4T*}%NmpcS5QxS@3tQVeB
zAVb5_^J6`I`n3NP7+gDnp$RTKZ(0F>pO`T_3(lZm11;n6obXA@0pWSt{X@8Cc&DPR
zA%bA579^6LrBU=}Ip|_NR)@+0+n~!!3i|dR7fEbYT$=&#kBX?;5vVX#ZKM+8eB3I&
z*vz&++E##OGUqz7-}>Xro<1l(miSo(7u`hQz+?^o*6TTMp>mCN@cHAh)Oq+YftMNS
zi0r8#o_Q-0vE?7yLmN=xFQ2ew7A7tCwOmJy(}-U>lz#E9J#PA0*r>lwFwVaspqJg-
zpG%yYoaEr(_)JZKYAJQc7(~AS**y-+h^955G=y6M9#UyD^^@yWPV!{Ky6Fz!Pp)>{
zD4Op7<$Stq^ae=&IsKi%Z<`P8b1LQ@o;y+(cl)*@k8f*WYf{dyoh<A!O4`XXLH@>J
z)94-ZpId{w7}oS`x)+A36(+G}=Et-tAClhX>G9RgHmGJiOu>B+1qH?M=v}0=!Dc|O
z-|fLPlV!v(D*nXAr+l`pHPj%Ig>!|S-$EEcKdmlHw%_J3CX84+O&oktPWObze3)m>
z7MFn6J1EEc+>_obr^x1^WM+{k?1HtKAhUD>?>39uln$0GSn!Y8Paz$x3OhY}$H@7y
zQM`022;HsasJOVcp_34@oyVON8lur*GZjYEdS4W+c{4uU73#7MUeo?J0+VGTStHU~
z_LY_feLbyt*)oe5{-Yk6@epw})K68Mn~P%Z^?6*$<e){WzgoiB#9=?Gz3tt``oYhi
zD$!w<l#R1sZQJbWC1r~*sXLV|*>i#?;@O;2?Ag<{7C7C(RKZH4&YO2rq*4e}9B2rO
zd}!}eQ&SfN+!B<PlA5rOgT5wIt~X2hKE4&fWv4>$85mb9(#I+d&0yK-(v58c3Aq&q
z&jJE~O+6fG8zFl@1B9S2!~Q<OOi_G3P7RETbzaMsX3-wOmSFw)t<2%w!>t)&cWcS#
zX37Nk_@8$N9mDI>z#I1QEveAn{OSW^xPyq#dz#iQbTBOuZ_xknVrO}XlSu~wpaR{K
zu$i@vYchZCXn(`uW<o_oT^;qklerAM-V=wnP7}u0cyiIPU9QrDzyD+JQD-dteu}};
zW6Ahey>jGT0#?kNY;2TX7h-cm4K)&kmdJc6o6|;`>6)1Ug%b9~!uxzL=t0o^>rWc|
zLp&am5)pa!P6H}{N7v2DUZ`);>UMHCX1aG*Gv)RngH`P=7!Y`hUbUuWY8u2GHf?wz
zN_w_af<)^jKA2$}>6!GU-Mu8Hd(&5>B_SN{Vu@ed(w8s|v{qh}059E8#_C?v##Y(W
zu@xKQmd6~$D5ysA{$RD9iMqtZ>nmMaKZEGF=JcNz9mK-f*b=jm^WDF?$Y4p1|3QuP
zJB5yC&#Rt>%rQ{NN@tQ@n&I_38rdL7U@1|5=6}0oook18Yy5VmK11un)3IES@3RQ!
z>&Q<QR`CZ6bERf`UF~BDDpDg_lx%C_;lUuUXSLA@czUi)`aJF6-JU(2dkf^<XZ>h+
zd3pKxzHLmXn>zb&OScvqb{xQ%p@V%AZJaps%Bu(NGq~;{xC2FIINf@>axO<piu|qu
zgY~&EkXt(KG<Cb9N$nzyZn8}EW+y)!h{(K?V%dE-39sC>{>&hp2d)PAHd9Ce_DID$
zm`BMA?bD_|kb1Xu=6&6tdzlC$-kWn1Lvmt_Gm0(0b_bF1ZiBK5#)5fIWwkKKP7aPg
zmU10lcw$@n!mW@^YX|pQHP;MC6<%lE_js@F^_~2!jY4J#*Hn*_e@HE;7E^CO%d>TL
zz-Cg=x?K`zkbi%&>mz@TzR{3SggcEQb*q|t%c~pGuV0b7-l1Y-WTdBWY~|*^I6fti
z>%l-Axn!?1Ez{5es(<8RXW9kGo>IH7w!;ijyKk<oWx*E@8$Oli-rmj6pVzdRUsTEb
z*|oZd5I_-l&4F6_SG_r&Pj{~+f|O*oZjvQO;RQug*^sGFD5Dl}F&x+#L|_=9NB6F6
z!)dJ~td-s@+u_Nbg)8qADn7l6Wj@{Haem(#4Aygq*-|kW)$y+Cp{}p5O9u6cL)wF1
zV6oOT($cUq*E?#qPuTV3;^s62B@}!?<^CjlhUZR+!ZS;K{UVl}&RFX=liHCFmp)Hu
zqbryrTgX~@%v)YO=4Go4q^jJ%ddg#}dpb-R<Uz{y;j)9*(*|c>$VkU3eTrnP;{7&6
zVUVn}(XaJ<W4vo8%(+!uE(`;2?FtI>Yj%-ifDA8j8NY09re1N}CRYt8#;AkZWq0i4
zxc>o`TtQG!Py~xcQ8JxL?YfaFnwRF=CwzPJKZJn4PVGOx8P{p_@$<MBN#2>2u(o*2
z%WARzS<&RuId}C=u2wPY{2}V`E;QB}gmu98#)nbj*2Juu&G+wn2ZANaqx{o0_D7Ia
z11PQL;RplHWdURc%(P7F5eU_-+c-+LjPP4O{G+z`V-1G!xu>*;F%LZ%N>dM%_09{o
zIQPxcIe$ixEWp>|t~%M*urwf%k>XwiHRE9(^({j~!$~m0MKKHqxRm|Uy`q>)@|~X?
z!7*VuF!lRT85_g$)?z=7o-B4c_+iA<@8lZ<nF)&hN8gDEuI*m>su^oyBJCSWq-poG
zCxTlpeQ~cKC4|uhQ&9?9;=Pbl8nV^feHu&BJ`yRZ5-`&ZK5hA#X&oGtJ?l5sX8gHk
z01JIBn%Y*yOi{P^pSQIZmnR`KhUDHLg@1GFg`E`B;=zOW=k8g%u^h1Sil-t+AHHal
zlatK;JpyO^dp0)*AX8xZo9CI$IPaBTFXgZ5!@G9OSHxN+tD{PG@J5!p;cT7)I(2lB
z()u;4p9lF*h~OuDhqrbb^$G726jAeBMyEbwt=?yElwM!?|NjhW`N9>^i4~3qoXi`y
zL>qi*`&=UX?r<1930AK7->vk|PsZ7hHS#rd)%BpE;h>7e5N;>TdvzKij53(_x_>SA
zf3LmTRe(^^Jj=DW?yl?B$C68q+;^P$Dm4~hTE;-}8Z&o#-lRCyaOQ@Oztv9U?<eVd
z{O-euEz7{Zu-q)JL-YRKR8`rQu=GNglXMoDXG??8wo5n0#@NV|0~bc#AHUhb>MZ*|
z&|25KZ>ZR4IB4s{@hY0QPoAktI+{PTFF1Ej7zeMak}i6KFr(7L!@_RKVVtt+#S5(*
z&#smZm+w;+7^P;H2`^e+>s-i#(Wjx2k%lWE!!U&{Wp$a~1D7ZpYin|R)3It7C8e;L
z=!l3?7@tF7-?R}d{vRv#kDH}QaJAX{>^809ZIvwY2SG)225wEp7c|rFacILO?xCZj
z<qVXQ_*-`cPw)1dY8IP}t#A1$mYJ32#0|%eX?^7r+9|zk^b-Aph#j<15J`{?9Ui?3
zob58Kir_e7jI@jN!hYA)0t2L;FJF+0TmmK!Ny*7pNM!S2nyjp>Go%{;?PBTqsj`YJ
zmzaO{R6h%3SgQy#EHonh+g|p3Vi+9iD7^%VuA#E(&$L56)tKU(J@34n_K|g_O6puB
z>w&?c!Lnxl@ntYHg)yshR6pc6I78cm%`pQ85FIpt6s+gF9c9B5rBi<C^V@pp&u5p|
z{s#R2TIYX!V@ZXp+m<ui9TT$lF?@0-ozl{KK3j$)JJuz<<Rs08Suk0`nY=OFJ@44_
z42JUAvl~UW$UHH?MF3I4azjR4?T$LVM<VI~>lZ<VrmFR{7px%GMHLXxY4}Lcnv`K&
zAS<z5P!MSHBjp5-OECViTkK=Gd9$B(a$=Q8Rdao<9w+f>pE}H`bUy9Ez)c4g#srt`
zpoq7qTyMmqxm^ij^1aY;$m{tEZ94pVVQ7fqxW4HQCyX<o<x|KU&(I6b&8JGE^`lbM
zEIJjvC1Sp$-Q5hL9QhqGxONUT+*IA_QF<wXZS-750a+6#tzw1#l;<3{vkC2upJqcn
zpl^mr0iq)@5r%gF+YAg0AOVE00B#lOw}b$FV0o|@qiO>@Yr$nz9o%KLAvIwI0y}YW
z7A3<(b7%l&a1cORqz965WkG3Sf9Asj!<C>XTMf{Rfsq!)g)l7+911>tRKH6%^PrMX
z2~?(c&>50Oz}Rh3;x+O57Wz5j0x?9bd#H9%Wo6|h^Y?E7LjtsoBAT54S<d<`i@S1i
zxApEyN{Y<DFk=c(4RB@ml`S_P;oBtqt(6~;lm5i`&W19YsQPrZ2x&^A=j`=`feVn)
zmD0jTTUZT3ESLJd&)Y?Qh2~QGa8s|Hmfar#nQ@qbRkXz3x8IpU+Xal8b7#-`nMWli
z%AX>vg|MiYBRY0pSpAfooSZLQPYTLYZjz<8;5UXC#aZ2!mGuj+e}REx{;dS7zMYKA
zcnh8<2&!j^IcC7l0c5_F(Col-9kw?I*IpQXT@BaI)UI)z4vJ^*U@4JP`dUzM9Ul<P
z8MagrcZnzO5`Z80*Pj2kH_Q9^7#>fQ6?HOI$!F7>zBvS%mMNcgKAjt%B#)Y;Q!>}P
zK+c1EPV^R^HIMz;c*tC__|cv*ciF~@mfgrq!Oa=4R!4wEay*aKB#ag%ifB(Gec39m
z;J<B=m6Y_xyOCRIb&KcP6_f04G!}U_icXAKon^KBhk~7(R+1<m+BD3|KYa}Kd-Uqb
z#uM{GUi$CX%$a5&8YLcm3gW?B?Ctl!V^U3WCCK}?6dQ!Mh=QSXM6M-imR7GLlWCK5
zrY67xXyi$k@P}Y>;x)t|Z4mtM42D~A;S`{)!RI>U0xl{Qq09gfVUQ@dz!E>J4)<_M
z-%?59kiojK6JDSt7fU^LA4%W01~6;M)i4x%|I`7}KO&Nn5k*gCq3-}fk97xEznb08
zit&GsNjB6w#fmnjo*Ig;FqEZPyay~zEn>5tx;zvqQ*jq^>(P!KH;B}F1_%r?ckyyj
zu=YL6XJ5{YnH_Sqy{<PFNSSheoxb@vLiN(ypim<iF@3Ur5}{N)M|0_3jKo+c-uk0`
z?jouyTBF;I#qeKq+6?Pkp+WSc+mBLP3TZLkf>o+VwhtHvX%}agK&Wi>R*%e5cuSVe
zlE~m{&jcg%^K<rAx>syNc#6`*PyNJ3|5zTi+7i!~eddpfz69@IuQ^toxz+WP6d_D)
zDZs!bJRa5(;}vIwu5?$RuuJ^8?%2VH=CC*ge~!J4HZ~`!PvxU8hPY22EhbRfE!&YS
zjZwN4>l_i=*{z?{oE+A?a&sLp>3NB?&tjjum2)F9!$~q!&CZ$|+oVV1oiWkH`5g%=
zdR<J|ACFjYy0)FqDX#-3V4N@>3R03qxlJB@#mg?;5+uPFN+hR9@$lGfW@Q8VCf-~2
zITo*x56OEq@KQR%?7LwS*QQk(j~w-1b?WgoRC3Lhhs(l8``|^_svS-s2$IYn*b^)%
zWKF~$&2c@YakNAsnDKPw%`f~>VG5k3L5eNQ3z3Oyfr2{&uuzWxLP+{DIQKc;>3dJF
zS8<WW>QFCl?KsJpbW3v#yS~WWnRoH4#Jw1tQgbXc@dOhTR;{H+nLM431P*mbd^%`+
zbQpcAXzx6=xrp78BvwQ~R|co|r?-M?nhzFmFSdlxI5SgXU^ICWbRQPGkS8tntYVrD
zmU;;^HQf5pzP~=@EHN@F{rEwb0kgxe@=nPf)%Hs3`_KZz4l=&7gbRe%1fCK7z>MMg
ze5J>QV}*{F8)lpM0$FcNrX-HFHuJJi_-UNIuyEyh+hws&W3fm_Jc*vGS9snif4Qk@
zu{Y<pf9DG)`SaOX68*UuLByb4;;?gSeXg#iWAgnF=7=b|?yFLdAP!Rt2nS%M_WHx6
z8;_sg_L&1~Ky}|v6dqGSDfyKahQty!G20T8mX@>i5n&M;e@!Tm)#g<Ow2+Vx9<k8n
zg~5>wIH9-f)#a4rHquQ0+`B}|>4Kso@yKnzy`^6%dQfbg%aS=XGQ#5H2CWS+V}yY|
zi3F(wGo`kpe2yHaXGqkHG&HQbqBji9E!U1*D%6EsCu(K!^%S1fPus7<ArUQ5tj=&K
z;|e9h)er#a3L`QOC49o9{!#r}N<EhtBPVPzT!gL-S+GEa8oS+!rdJS<L!Pb`*7*4`
z>(`A66(D8!$S;t3rp(1*V&%kzhN?cc`mX9T_H51j<`t=Hv<=IAT5}l6&e28ocbsVM
zoxwoo+5E1SJ}Y4slklaXOQk@!bisPnvNU~qN>lb<lb%HU_glMxydOeXz70;t=Z<!y
zM$$>cWPl^ZBU}}Ae}+r1H4?echiRim^JWHz8>blYurfdEw3_-n&|9iE`jXb%R`R9I
z*%jw&)v^nD)1NjI9VJdCC6t)qaw+j^QBl`N21f_I0`DpOs>ofXpT8RgN1`|)spCP(
z_>R6o{}Iu&uN;=bF6FJIKTZ{q1-z>T1`=Kpx9<?;UAsL*U1a(Q<7^LplF0$LusKfD
z&az(E4@T17%UbY^NAfY@2&{lf8ze12^<b7Iz{T|rDx>9NgdaIC2a`-6t`JK8tv}29
zS_{mA^@Gzm0?*OucwM0zg~Ly^&Smr{ZMrq%&tom@xrpe)+bR7KfeR?gWodB&kNe9g
z)fEpS(iOl}>8b>3++AS+#Np&Dh9NxEp=3AB$@Op!lQRm6^dI#jyKnZb)F>RfUlGjr
z0<b>It5rKYz~OzLVbIqF+|Xxuid%nDtHLg!qLbc#>lv#MvvlTF!-~|%>Shi`zVL&+
zz9=^Vu7XyS)zbv&m7cr20(4hVT_ttqGty=A+!8oDSBny(qP+L@p<o9jn)iJ%j0P^M
z!n`3~Mv=I*J<#93SJ$$}skrs0hwom{sq9MR#QyxX(9lqLFP7`W!o&W&awQ#9(bD$$
zplc6_uTz)w1-GAmcxFc^irB@eOZp0QNXNRUP$roGipN4!B>LhEIH@vTy;@M@DH|Ob
zY1gZ)`VK-CfcFeVYgvs6dg!l~;Y}SuhC-_Ejn=a#5y~QeybqMfS!~YiJ1ztNwFl9I
zUe0^Ap-OnfF8!_Y{J8VES<>HUSSq^)8AXu{IQpQlFhU9nGeN?eLOWu#ud5+A_ZX-<
z$%Zi6+Xg>NCotI`xHabMF$Kh(o%>4`69L}d=P^Gc{7)18Jd8vp(8R<%&f=ut{#ubU
z;UXC<OsveUZNprC8C6p{A(8G?I4Wq-J%_i5el*R}FHUjeK~P?)LgO=-M?^$e(H)=c
z9q9#ZkaHT!0^tH$?~g*^JCAbaSt&@P2e~z#w`pu_5umE|CvX&OhYB#o{&<V=FmE|k
zEx1Zt&29Y&Z4$i}anGe<rpkWR&tb3_<(Pds;4sczUpkRS*#mwiRpQj87HG|ia`<`n
z^haP(s{|lQBdON0u&_iw=$A>?6>t%yukcJa9ye2XX;c6!{$KqDu6xZD_ZOrL9A|wk
z3C;Wqnuk5c<DW?RXEhw)M(RtGTzC6c5$DEgK42<-!u~C_21z7neJ%nMBjc|b9~VZK
zg!W<PxZVK!V3H)#(iBO487P<ldm<QteH61OkrV(QR?qr}P0TN3zvKP7t$%$pu8kJL
zp;%;^ZWg8T`1lKImN{RkD$qdRNR#P|M9?h~)R^^_<l2boC45*~a5|n_(!TG4y?m1E
zsM+ymjHREv^}WSz-nZ>beD>cJ(4@mp`A!1?(h-KSvfzqKQ-cKbi&v+i9rHR*>XA$5
z^*mp*ya>uyFoV9RB^S%>Pc)VqLr3>t0oTWJ<By*i2jqI!&y5cVX4VXvQaGzUQ&+5b
zUVdfW%g0V=!FejOA+gkSXm-hB-&C!bqu<=~iDasDZr8l&2n*dEL&t-(Z4<s{{6ljK
zG`EDTx>)2ZH=ZfUDu?n2^-dbURK}j$Xu~<t;1xjlo?KekoVzB9w<huix(uYt{2hBe
z#wXEIuE4*$8b#mt5{qC3y1VJ=>AgLBrsrO0PydUOa6F3^Fqblmp~Q;+^4eRj0DW?1
zg)p(xGHC*yj|VFPiJ7A*@GiUT4UD$r3w-on{y>03X+<kE-uF#a+xD>FbyK|We)?id
zHw~cHMYpP&qq0`?Tm4N`mq!zL#(hmr{2m}q>{bU3zD+am*=o&eNW4l8O02M$HmEmG
z;vrplGUl=aG2p9a56TR`d1-&@HxYT3U$vZoVSceE#bAiDB2f`B%#?;n`1%xnii?0u
z@{I&#*OLK^pkD;VpW`^>c3ey0KAoeafoIS<@Hyr~K)zk1&N_llF=4WF+AA=I%lvDS
z)S`_U0}FxMk(p7)z@7<f)v=PduvTE@^@I+lA+FWq^rp;{d<usyb)!VP@8A4Q4rl#^
zor?z;I1DzqDbgxGG<Vqe!nAZjHJF{<g|$46_VZO$x7}?|)$<Z*B?{A)A#Jb5w#L-i
zWYS8az~|wwRr~V|g--wr=Hlm~%6Qxtb|LBev7>&Wh0H+{htwGT_nJ&_gbncXmX;Ij
ztSRwRI$jxwe|*GryL`jirfI}}JAHGE+PrmLuj~TfNfVKbwzK_G<rB67g~L}Uf|#|r
zU88P?J0Fko7kaH)#dnPi497Q*`V)n%n=WuBIPQHLH5xwYYU_77iFY_S2ydhJyU4vY
z%*o(S;VDR;5Zj+$Wz#G%%No1h;e3D>LeW>YnPWuR*3!wUpg@neY4@>maGC$)ZGD2<
zU=T(^eBaFQ=JM(B+d(5$E{mNkH9UL&4GAJ2i#F67Y3LXU!;@Wy@@?~ccyQW#?b4?p
z=l`9iBZnW9+a9{ih2Na*(%kFyT69(49C8=55q9oCI5{5BF!iwt5+R=j+oe9%lRgB$
zE3HqxQC{^-=goAXQ0J}YC6a`!{tT>G$pGiI^(!|=Mw5<6IZ2$wPZ74*8Oc>`PNXL$
zmg%f^E|0lX2bJJ4Nu@k0eo1;RqJ+12v2uZJyrnU6K8i%swS(zgO)jx&=(|z-B#Fy{
zh^E#pReHf9voBo)Y3*df4hLPr&ceGhbG~7O?zvrg4IRw$rL0<f9^zu(xy&n=tX{W$
zKnjWey=DIR<mw4p(I$tOxG%k8U$%n3^-;uxOsc}`YIzss13Svr8W*o;LVG<y42=SA
z-y2u+NH-tau30&he;@j!aWjXrEU$7QAnJReS=V>RXD4n5r!DU)e!EJZlj-kEwY6_*
z-@G}c@tjxmFdKa}(dOf)cdlb=g}V}`)gO+`g?vQI9!qhk5mlYgnb~&Am+$IqoqjwO
zHgzWyd#T=LFN0mm3wyjk2z`HFMreP$^A0_iX&-8ryZDJk;}@Kh&Ah_*uVV;f?<Zw*
z%RM%rTj|8p;5@Fi_%JdOUi0T6|L@*igqI;GJd&7#O!cd58oJVmEuxGs{DjB8Jfl0l
zUR5nRgh1!>Vds)VUj0XooO1Iondgiw`HKsj6%<0X?YCQo5tWF_Vd*Pw<V~Gcd}ah^
zh4qiVYpmLi#%^TA-Z?6ED{ITAy#KD^wQ9A^Vw$$A=21ry&fPOfx^h|F&QQ~8&`QcO
z*3(c^?svtmw#V^V9E4$OIcho$jnJp;J3T(JSa_1jGGxaQiM7m^mYyKVAFSY)(jy;7
z6~Ws*lrp<wF>?(sld)xGrS(7aqG3V5i6dz4kio&pQ}`-7i=jLgUeRx8qWIN&rA~D~
zVl0|;flc<}=El^CSboXblRh{4lfzNGmZktTq0WGBTx6eAa=&~S+V8kTuY{fLQI9yR
zxl;C&e`>m$@6(=T=lKYq#2R570tqnS?#<G6?hw{KvMt}=MGR5$d$9`<W~q!g;#6&s
zF@4lC`6O(=c>S<P+23D$aQNMFAl<;wO*8Mj2f5PvVQpUp7?fG^&YY_Vq~KlR$g5(=
z{%X?DU$`6mpIayLH4VfhoHn@i>J}ka{Y1Dix!j2!WnEI^Q_||X*0AvUYyrMyf1=mI
zu{#YfZnx<<HQ|iLZI7SJFOVCgJJ-g^AyDDcCU=+Y#$1X8`Ro{hA|*M;hS;V>|7fUD
zzy1E;`)9qXlr_Sx8-ATt2XcqIXar0ge6zPUtU?PfyI?RMKd$EWHmr{cKQ|UX#X2+Q
zI^r-TF}E~W=sypKqXOfNk~dUiXEhmb<SdpS5x2Wsa9Ce+cZnPNvRrxGr-k7)mx79V
z+T?3qtgTLsIP;uLz~@ZmGWX&d=ReDIxW0dWAzq3YDm@N1X#E~;l4`K8kd{;Mx_Te~
zhV)}k1)r8HZRzS}M>T_--B$-0i!P1@YU8_6_ceS-m|o4R;y3I{?9SV#OxNL0*%^qx
zsV>y)ZBzZQ{_V{iwETz3vupgTHOocSV=l*1U9KeY-OF)h>GBhVtE$ATRny-tg<!AL
zSnTOAgW1xZlS6bSbc{Qp#JOGpmAl7_`69u7nJPzVhx7#<sV-4?Q<P4R>gF|Ag-A4-
z<pdo^ZWtyVX*t=wl`4FA?3JqR(D-!v^T*1{VeWXop>*bd5?cQDT2kU+UTgNoX52_x
zJ#+u*4*7ng*QfJpcC`I%)5bID6qw9n0c}$DIfVDG@wzoS`CE53b+sSufk$3d#ZJ|7
zg_9+fq7VWxVE1r#$fn?@7r=wZ<nkk&WAU;Jbg~|gq@yE3$nhxjlBQ>74ARoeHImH|
znehf~d&DJ)Z80#s-Y9)*vR>E;BE+9QeR5O(J3>DAmR94Z&7(n1Idb7wi0`b=5p7r8
z-zFz;lpi>BzNa>@Xe$+b8R+BljC65tT_2|mKc>%yR3_oqnM#y!N(=KT{xyV#3d$eD
z7DRk)a@+0m#)8#PWk;xq^qpEK>|8J3%xh|={>0&q9Oo`2S)9Y=4i6o*UtJj76ufli
z!GzWMqo#R@FFS7~`f^-jN+-qrL(&TZQ&R6+lM)h6i#n8aUB(minx4O8aYH&3!%pha
z@t{d9UEj5*hvzTux>tRuIkNqj+CMVyEQ2Iz|L51S7}eJZB9hqyTLK)3$M{4f_(4uQ
zOugb!)FWBVud7*b*SCGk9VQzap6(~=hjvaRGpK&kySG5VFU_PkGi<eNwp+<QvoLih
zL^rF6&uDv5{`ls~;ECmN;3mtzdhow?<UMqER1Hxz5f%TWwy-ePR4T*z?vc61vJEMz
z6Jid7b;-h<58|6PcZY+XFO_zDxNy`|MW?-}RoRYEE_~%rHnq~NI%b{zL1TmDHzyjP
z?--o&`h+iu*|O0;TGgakp%&}6POdXaGpo3f(7mtw1^E1JA^!3A6ULKlm24?07mRAK
zkrET1#7?78JeXAkR?*f4hSc8+r-%ZOV@z@l_FTqn<-F*Kr`GAW5}lD;>16zW@mc?N
z2%pgW00iGe^@VLyo6OCS?<hzACkOU#KO;;N)P8>iW#Uttt(ekCD|(YJNk4CdzO)hj
zU!sve{`ae^XxNtpqGDq;Mr|??e{zdO${B)UkR<YQ`$1XnEakz7;JEnvmGjtz$G15Q
zauGMY{%3$%yNa3fu<8IPikBf38|auu9WgUOC!p#9P@?Q`lhgR?Rj*TjwPXbhK?$+M
z<Z7}e(mhgG8KqYo0$n^lJ;Nx=C!RK#ej&xZdO9?%#%mY<wTI7hH@rQEPM(w20&Awf
zRwy>wO66uJ$ajG{i1(s(w8}{vXf#$<Rw_|6cLL(98c88<u*~@{t;CuL6+auzjg&nO
z19P42<(8UlZ<Cb?yoaL)m(&#<rEY!v*B0B#;vN?l2ZZ8F{vqUjh@)Z%3qBmCr=#o5
zxL^M_G8PIBTG2*Nod-~_UcG9dXyqBd;<9QXm9~`-E(VJzjLW^fy&brwIP#xfc@+A>
zUHHWUzV{LH<;$0v0Fb5KgE<dpl_y}$gOPaA9BgbBz~b5)v#h@WFxa~qroT4F)9%BS
zTWjOjuoFhL8(;Ryw(!ln*yCJzAvpYn1*ZNk^C80?0(OrYwRrQK7BBx%2Y^Npm^g@o
z#eA5R@Y$^(=L+Z;i7MK;F!})Vdidw!y<y;To$R`u+&Q(A^c}Fpd!H$t)C){{fhs^k
zM)qL7_%Ed*JnlFiD-Rb2q|2~ZX@bPqP^p>ILTcpX)D$w4gMa0{9t3t^r*7tG-M)RB
z|7Ab;4E?~q0a8JCAZ-rg<u&JG?J@|&$$v_<k73s>E><~W7Lp#vy|jx^8hOW1;5=2-
zUb(cMe7S75WEiLB`m=quwyH?RxsKQ}uoDLghZ^JFFgvhnVH~MxKjA4Pua4y_@&tDe
zxSf!zeFD=HDj{r2p}6i(z*Z%>Xy1AYG3vDHf()y9`rQ^#8ORjd9LdutV-*ho)>RE8
z3}DxX_cXul`Beq)ox{>$<F%e{23gLY$2nHZ=Eff!VtLkwhd?5h7<>MSbhhV8%7?Zs
zKW4kK=~V_aa1u&v1tJ7I_;aY}=%iQBuPl&$63G1^_jouBp|_HB$Lp58wq#4#Xz>Bf
zbZ{8Wdxf45n@wv)h0xr+`*`W}S{httCi_lPJeK3Nz$2@~QeV0bG*G}eJ_Y1?Q{QVu
zBW8K<(p^7QIvf=h)x2UM4dN2DotEE4$hL@CFw+cBP*N5%_QJ(2e$9NbeaqC8`F<-;
znPc3~%~gbypw=51rE99NfEb23hL@*jboh9?T~RwVKmU+uT8>I?jLof|TXXGLs7L`z
zv7FNOd<ONr&(52QJ6u}jOz#xJgIY!DwA!vl_gpreSXqi&%1*5OzUQO&I842KkRXA=
zY%(P+@#4U$@9V?!tO8h`u;HwEoT_sHwCrx}nG0k~qgAoJV=4mNsk-%yHsw}RjedUT
zmF#I{^rcOi@+!V(L43OIV@L*-hY7e$R_doe{BGgbWL!iu1V?!YlmzwUP<6N)u*07m
zEpY3g)S@x8g$L39jT7wWkxlsLsdkSHP3$a3wkNS-@{N5dR`31&J&XA4o2-v^XcdV`
z$E)j|PBt6Jy&kW+9hANZY?Dz*#|D}x1a`m}_)N^XM%^6cLL4LjR0TW})3P%AbzQ%@
z%aGIrb6C7n>oW;XE9&ozm0=1yn2vM*%n`a<&s#UxoeF_#4%s$G5bXoZZ)A>Y)s121
z7g}IH0K?K{$}44<d*~?Dn+V+YffsMlBUy_((v)(J4eQaW*U)sjcVTg=pATr@h3FI*
zM6ZUcKKz(aC&XGq;`HguG4aX|hLxgB8^sDBLVxaI03}c_3(T<MSs>Iu-erjPX#o*v
z%-WXgAo;BD$vzIoER|x>rS^@PHh?UpNIa_9W72N6T=V;LjQ}U$<+q~Ax+G}@L|pCn
zA;lf(G-j-N-Np`JO)S3X-#E8nV{LPNfg_W4Wx(0+FwZkh(#{w#S4moJmu(`G2Mn@N
z&qD?>?$a<)AJEiMZ=Ch=Dp<Zb*#`a!<%clAN>5EK)Sz5c;bBPuWvzWtK<t$0nxCH^
zIlFEHSU0q2E8JeBMGlyxUfKlZHozQEn7TG$m;6hM<mps=jN8GT(Q_E^THC$tE@lkp
z<({Lgacj?FbrnL=D4X;XrJWSd&Dk!waBvixap#hj-I=sA&oP%L9X-%m34es_ao4m_
zCB8Xi(SAyKYoyY{i+)gR=yuT&9XWXdG(0FS4)T}G=7Rn@FAFdU2hP@^78!@hrk&3u
zEMqgP2{$aHC`w}{tB}4DPJcdLGH&^>)D2PJM3P{a=|f4Wnl6viH1c7D&ILG6di0GI
zUtyGvqzmkD(A_VHT<XuK3;>>Uk&0*4Q=m?`?|B!d3~J&#$r6|2o*I(f8JvjHD~W=H
zt1DKMQq3r*&sf&7uK?ZE6yz8@TX-lnG|xqRaJza~tUJ$|C#&*>dEiMZDG}arrXGvc
zc&Wef2GChQh4zO^OS%iV*~YzD*g}6Dz!|5|{BA!XN@-oC{JWSX5)Iohq5107g@h30
zdSi;VfjN#NY6oL8y<p4u^Uh|8ZxM@5x5tdTdxOCOPeQKQ5D@bb2%j33m|nxRZ2?jN
z2Tmm<5p-U)#T=}1vfIHn+O`8)d;*9M;o%cJM=MOW#RRz*XjVa)!He-MJuMBGV!+=c
z=!h@Gn45+}oqvCyA<#UI(+K;6f)K=KArx|Y9trsca|n|<3nA9TO|Rq8RozT2>G@9%
z&M`J1tO`hkHC)9{p~<UhZknEmCP|!7U6Jn;<MB+V;869$b@T|$oQ2T}Jw?mpx_5QR
zJY8`~yFh&gikub*Nb+AW0O4bq*-#^g+F`9}VN)kRn0(Vw&+e^HHThrK1#L66i|#!`
zN?CKH%?e1E8vEYE%*EReWX{;H%Yzx+5bJlUrzIm0d<piGSfyzkUiJziUt55=UU(|b
z1;5~qAp=^(OZgvw?6I2jjQY=4_iue(>vLqm7>C~$b~ky^^xNF&XobEoA*ZQx)y`~e
zY-MsCj@y%$ZrxFN#~(JZj+fKc_<GY40!96arz~S7hUfjRGGBcCwxGmpDB=`(O8pbw
zrO#f`$guP$NtTuqkUPzOQ*V&xT)jWJ4Twx#A%JPA|HXqWqA_gKrwiI>1De~w_eKiH
zL3FBLnxN0t4<lLPO)2hFv6;CWmW%Zf`-b5+9qGoLU4;-_*)>PmUt4p3o-%*qL4=XI
zPw{5%qtLxueL|vmlb_1ipeF#|P@^x54$c0Wqnet1>`UyCPM*V>#P*J^mS};=eZ^fl
zyF!I<i5#G{kU|{V#^l0HGd1@r;G_%$KVok2P$_QdynAz`p@mn_ajUin|9+1>K1J#)
zqA}A-h@K5iPjK{2DWE?Dr9@$o>6f$%+)>y*fbbz+pBgjsIv>kc^CG=IbtlRCRMLMb
z4=tsrc$s>MaaT4Xb`w6jiz?F$xrFT*Mh=8xR1hB0fM>+K=AB!~!-Y0&O*n3o2Rp0P
zcEeT}3^>*Y{)2b%YoKTxIva@FVyx0x|LExb)9aF81(KfV>WJ90TCqlzhiEt~N@C(h
zsj(c_j@H(qujB&i^R0#BQL!v=!4OqSKLg5=e#e*O|JjfsKm1Xk+inzu;=A51t8zqa
z6e_yyukEOuejOjC->REzgSUS8PNtZXQ_v)go{UM2#lJ^Fj61e|1e8Y!pT<eFZ1EVr
z7d#+;+T-gP_9QbpB0crN1Egp6e>}h+9}2o}4VR49hCEP=L384&G#u%iD@zA7Z>RIL
zKvt4jeTpd`?aNWon4Z_DJ$Sf;c%NQf)j4wS+VFW!#P3Z+^g);8KA!0tY6>DWM&GkN
zP8N`ab3)O$T41UdYAROburqlUCdAR4Hi;v=oL!ZxvPT)xJ7sG^%+WngD(NXp10{<2
z#De+d%esdHXSgo0MsF3n_=#UsY=V7JhkgOqf&$|HLO;>viZfj|Y>$H4pd*?SL)9Gd
z5o9;HikDFbbl@EA7e|f%9UtrJJG7o+1u?VgU`Do_(aEyY6k{5@D|^p&X9JB+UCOn0
zm~pSiQoa_k$-&+t?dZ5_k`+dMj||gvpz^hGBM=61Of@wty%hZ~eYJK7r~ad*hvOLW
zN1u;4X3RzovEYj?vNk#Up+9!+jjX}m>a4o@n&GD^;m0>`%rEeYgU#3S)-q{K=kNPZ
zH~i*y=>W`U!&RkJ%4YYcVze--B_-us?$C!YZlc_c{OvOo@nHxG4Oi$Ro~bw1RNqD9
ze5UWpj|bxhI>p)3F|5DsLEZ7?souyMm*3NF4Z|hv-RK)Hd8%!C!j*4Jt2i4T)$<Rz
z);|`IFfL}hluzk?&%&jv-K7OF%6V!Z=Dt*-hR8;%>Pmyf#qS^ok=lq*vP+YCCerVR
z2i~Zb<{rH4b+9>NmEbT)C}rIBVvG6yn;(T=xq|gFLMof^Vdv34BC))%<w9v#szXIJ
zVN009WKzTL{!HreCN%5T>6d3xl(Crzql;XXW|{|39FiEKIpp7m{oY0f;a&^b(3!k%
zJyk=8I$L68Nj2>y)@$MdSG3EP4!tr|>w=ewvToK`t{on$-sy!<)xT}=e|`Vv1};xr
zNRSGB&fZt0zAy)S;+gC?7nNd^w|GPxoQlbMi!&3_bU$fA{{z#zL*D0ON8Q`eVkK$q
zCRzq}7d+IYC*P*LtYVaE;^+yrE-F6#!tCS6iTmBk^~u*#(<#QvmLmtQ8F@*l*j8IZ
z&f&tsf{L?}5*T#m=GIr9f!9e9@}_`%I=d|vD#Xb6Wcz#X%li6yh#<X8_Ps5if)|{;
zMy?IP5cmP?(s+0umjft;kHH+nc4e5??Nguf@9wmO2o)<0JJXws>Wb270yA$Z2Tyii
zacM89-DKjV*$*RNz;2DmC%{+9YfJ4iKXOtj=<xi0Q?~&#?8Cr-nhi3F`5d*PTr@{2
z$cTXO8Ezw0=>x^aF3{P)bt@=7z6x}S&`DPTCrdKoavn6KM)~ElWWLK+{CT%QX4s#p
zI0rNGDN7K<B6W30Ply(}NJ}0tjezu3ki0gheAWJ+d;ABK<gP18CB(u`Mb$r>69w>1
zf-~+V6}M8?nWm;db3xLl#`AlH6t_$t96k+wCT<)z^X-8pc!3~=c-s}um#YrGXYW_`
ztQ3Js0s{!hXlSOOZy*(N-aA~ap}aWX_vNG>M|i0(H})on0r+}Bqhq%6g4%~-1~`!Z
zvgJ_5!9F%bBr5vbzup}xc0qQk=1@@$yvTuEUFC+EtJq~Sasrd0$tBYEh=HAwFto+B
z5+p2vOiKkRnguwxO$7>@SJutJ7X0}08({Ad*_m25x3)Si6*hf7#@!orTx1DFT7|%%
zTXbMrq!of2AtO8!ik@4S`E0!fgb(Ivj)4uo4MST_)pCSM@!-n)sQ@~e2-D&B!DwOb
zAv%u-A>tO?!aNXQXx-3o>%17`N<Qs@ChPg+qZflUZYQ98X}F@{TLFG%iX{52FjqeT
zQUm=34mu+&Jq+nopl1pwCd1~w4SLGEvD{!=)eo7Dk|IPIc-#p=S4Kk&AUh8U0X($&
zL<IC>Za2H7W@WE^q~)5bw#!rC<ccDbvUJbGe3>5CC!N=r*^aggI<)Hb#!C#WJ-;O@
zlc0rghI*WS9n6(_(iX<U;RfPE*2|uXN>iocWQk5TIzb%^?JeGG8LbzF&gYKo)rH<q
ze+6(zcV|1seqbo35oGu=a8Sz)=S=KD8YEtHNJyPn#MKwzg?GUVss6i~5-0gG<LRCW
zfx~n&USA|_f#pOU2wpGqt^yYhJVd@gPw#VUa2Ti_kaSvT><k2i;2l|AxpG7t@Rxz(
z!<DV95JJSH(he2*!PbJeAB4~9K_S~ssxBM)LC;nSJIYffM=cmtkvr?T@sq@5-nqDX
z-N>uqU)P~5ET4(c@bK{9HXV5WSxN#|MCv@6`7V-z$AT|{;{vWE@6XB2-wJttZTxyd
zXlSv{M^rz-%yHmCczazbjrI;yy1?IotS*`XQ@Rp6+1R<9an9#1wg{D=qd7Fi0B~)B
zeD@HFqx#bn(HkH=WAOhi=-m0oVf;xlZObiv^|n8m|7AfkiSr)>=H?zz7C-7eB!5QA
zL&t7zWL=l=b-F(KiO=9*w7ck)E04M#-4Ca3>%B^%;nx3Z6=&svdey@`{5ix&%bssJ
zh7dmr3VS4r67Spf^R(>Nm$5F}kE7Hz8{ZtUB|x#Q_~Bt!WT_9LV#^P=OE2-+W`y%{
z%z(bl_9Hq8E~n{00j%N&>GyVZb#(znQ3e`Q`$hKb5;<Os?_eOsEGZyHs}kDm+3aEJ
z!s&L50PKi|hiA9#`M1ZFb=}HX3=9m4@$i7C*&aH~gsUW^@B*70@_v0#XyhhynxzV*
z#8WZ*0b@*Qpd#dys#7yadSZPphe|!4AfC`hE_4<&#eM++jUxDX#82^28^E|~2=@bY
zO^hrO1}!o=MVvVA!8FNnOPcyF_8J=MqY@=sg=2;DJsLQ5v|oO=tD(FWd7z?T`<QNV
z%?|^ioko6L=M)*8_2nEvrtl8_fVdsawhK&SAJak_dON>AEOg9kcxG?0;yUQeeZ0f^
zs1uC#q&C5WXCVKs&jqSFQr}UZ^Q~_N3-O+b)iDZ9NqP;O4!Cram5QpC7O8;4imHjC
zCOdcMP?DgO6`(CC85tWnoliPD-e0yL(opVvUkqHIpcQcN!4$C|L>=YEo%8tMnbLi=
zaPj5ar>$sfOSdojzkbbmz=%D<Y$j!}Op;dO>lNeE!l050raN^ZUllGcZ>C(-M+Pqs
z+?o9Dx;1~l^c3`V6luxL?`E0Jm#!u}dQ?7iU)`=8H0+u56%5=_OXx4JnkI(VrFxwj
z)2P-nT-@(bH0f3Pd1TinJU=+SbA#}w6G|i+M{x*^2aQ$&A5HKvNN=Bx*ScR-2O2%y
zl4#~|*-^jD9oCVxA%0r%9OmMUFa}-Pwt&+Q+1(X8%Y{Y4r~2TPkO#KBBuK;D3US`Q
zIO}tT_Q^xneS_kZWE;aMYV*;`L0%zw_V*Svfidw-iH_eH$t!?+uVr1Ufq)LKQ~i;L
zuk~3zxhvaz3?c!yB5&z&Jqymk<OR6>nl7WyPNXy7o!%+-k$U%htTGB2-pPwxyn@eW
z?<M(p!Z+X}J$mEXmq+2UQzzzH*1*BeVGB-S->h6N9U9>Gmf*}SJ{yLQ%FOoM{dyhW
zV$#NT#C<bHhn1`!_$HK@0|fT-Z@tvMd0(u^$w85z>^;t@`*rBQ5|LApR@YEke>-tv
zqDa=KhBt|8*5|n;;<nIVW>dQEa5Gso#%(@C<@t4^8iy(xdZ)`Ag~FcYl>DPqm__$!
zd`F>_XkTI7!NSzr>;)`ACG{3-Lo(@dpeN1pmvQ-yYyMCJ_vaWqaoZ_*WEi53LBNhj
z+WlUS27%|}Nh3FAI;;1r?g}NEVweyrVY2C9(M4DMH(pIip(<pH&n^n<qWRu?oFaeY
zBXEKzg3K-MKB1cpXukbEh$ftx>)R#Q$q6}*EWc7r3>z%3i-sHSXU?)s(hqw#gvU}B
zUZ&d!EtaCcv`UpLhV_VK%w|E6_@swm9HTBKCFeuyE-}AmwW)KLjQqB;;;(ZWvtSm#
z?E*WOoZIvGOAGGjUjJ&fWKdBI6xuwAp|ey{Q{12(2t*Hl?NX>EL`0yTIa^MYm0ueW
z;?}5NB(~ibSJyv8TRRnNPov`4+%)kuR9?tocf^h+WHR0FyjR&faa3$%lyqs%qX~%y
z(S~XOjM{}RJnYRG8pzicZV+N-?f4eFgC+2C5cLviSZ;|`TJ=iBqO3G=T0<$Jo3SiE
z`~6{XVemoX;lUj1;c2xO1r)5mii8w?O%89YAnCbctb^q3Z`|X5w)e>G5|cmCd#JP6
zQybJmGEM8|??lY;$BtIQD|Pj44$qUm<mqcXr_j1XPZ{}4JS2RjYr}8uPyJ-1zvA4Y
ztL|MXgZo~CjZLX|8R2RuHMF(;eotl8XT!sl!Mn@wS+vohqN}5;y1KITuUC)`g<DB~
zQNqzL&R~I-m?Oz)oFnyTxAi8B;77kfM3cUH%JfU6Gc5)-gHon_Ym83<8?(^DU^ZF0
z-VJHJ-MPF0lZeW=-~@L@I_v3RK@-^`8Yi36^Wj9s)6x;mVfLQ=Ib+@R8)2-QO+mQ1
z4aJ&bWGOd`N0VIW1!$P-3XB>A*5d6(0h{w5WE>K@D^zz;h8mSm(;I~b{dyIjT)FI&
zrO&R{l7t*lPJ3a)Em;JVS3%mD6g?p=-=XrPL4Y;vy^C_Z(}7hCDv8*^J6_m!g~F+p
zqCfh{Ha*=WEkk?~lGO>NsWb01AI@wx!{MK-vMDo{UZU58T^gtRCQ0I&OQ$;N&pvS%
zZC;Gfiow0(BE#L722FlXeIJ`yW(cTOT|Ji*_UBu9&k<8#y{*~(?q$;l)rQ@wg9bPs
zPjVRtzcj*-Yp%Ouk%CgN_v<$?46U94rEeB*i)~kz?|wVce#j-wv3vWfRphG?Q%lvR
zW;`vN=#X$amyKnszN;;LqQth*^ka5S?87tfE>^3PrMjSc)kP^La7p*P|M1$S^XwrL
z(n_XyCtKak_h_te=xKtF=)$vrlIOQ1!Y^Q6WyyY|_D<zzTXa^g*6`dldwQW3_uh#4
zGf_F1p9L*DBjh}6Qiv2wa~2)cncRPNj^mVQVr?lB7<UZydCX&%>c7oodX1lO(0$04
zjpgoWPfLi{2s%7&OygkUG&%Aui!b~9Q7HQ`+@jC;^M1+x9ybd1R8AQWP}}F{ANTcr
zL?0^KPs|*?KGeWAG+0M?Vm{Z*sVq5CrjM5aLy=(m``1WAmB48?UuHHvC9T-Wxh3nJ
zw9_>dO|;5we4cGF3giS;qy-2>;pL8^8=+;qUumhXU(a~-y8S{8e?#Pz>ie&A+~Ovs
zNN{n7-zx(a&v!AtGH9<@!zfSNg=5z3?SswTV>bI&CtxnXCvA}XpuCeDZT|A~JCPQ~
zCk|D&7G9IOFX^gWCi;;R*7^T9d+&HI|NVbFA~SntW$(RbviC@4_7<{dgk+Co?~z@~
zOhl2ri4tXRkv$`Rk5}is-{*Y3=bV3jx0^qNc)hOcc|GQRFofih27X>B?lwuyR~=Ll
zZOYp65hD%Iph&BHNbpX4nM+Dj66G?DRnqC_&jTWN`l|A!?MBk6PP2}Wp-p-#?cRLC
z^m&gAauc6w)=KPW@HYMinMBdFtKF2VN}Z9x!YJvf6QJO@k;GTts!|@Si7sO7YZPi6
zaUk~39a%`CT>k1ZvA?NlBBn9A4XkXoVB!0{&OvsDBiIzUNUK>@a!npZmj7&YTe&d~
znmnz^FB*RleL{AA{op6xklU4QKJD^2YvRs@eC<@Dix&;(ODU}&1qhk3@0$9i%_VF-
zOrb#=H!AZRR9XLfw4%Zi^78e&`+do*9A^+ze;<f&6cB4y|MUC#b@)3$j(wv?a=K>t
zEQ2Tpv>|VdVUK62m$y092+RJ_a~rMcfBditX9%njIgIMcK(kLocPEYNNQDzq*Z7}N
zM};KhPW6~iuRjCZD|8}FWJb$Um(cj>ncA9~i7RZCSUMz{du%EH4Cl%A$Xv&}0)o*o
zF)ma2Rn3EHLBa12RRkpe))qTY0VW8DqW?a0dud9i<&R<i_IUJcQ`h64sp5nN=@9Kg
zQRecWgB9s0+Wa@Hssn|0ZvXw>|1~)H$79oK21>C9UzuO}M@hTU2CsT~duzC{#`XP;
z;?#PAvUb(iAXGl*30(luyT4v75k2yjKYAi-%qQ79+H!DvCY<V@EGj=T6#TcC%a8Qy
z$^pt$u{QHZD)P?1#yvrVu3u#n)YfN*P2LcO@N3=_5LlYCNbS)~R$tBtB4Z2r=LI1m
zMw&Tm{=I&6gwWMT(~Ds0nRfF(zjeZnG%ShYT(DR<Y;s5tvLJJlg@uKUZO<Tp;A%=X
zrC$(f+UoPahLX|+1g!-WR?2@~%d}DsijOtXUn8Uol~xbj+kC|_tGOv8X#{V%exJl2
zB!`M-^cJC`$D?CZQr@Z8@KsC7A0Z?C$^zM>RTAkMEk6FdP2bMHD^rRnOXoaE;vo9x
zkTB$qrZnF&t6500)g|Tk3)AzVQ>5FX^VQ3;g)*USwMx%Ys6Efkjrx8SicW@ndh@Vr
zyor^gWS3PxR|G+CfYuA9k2#vG3V)@qzhd0KZeJ@EC<QZv=jOTB*S$*x-KY0mwO{ff
zF)#j<@#<e%qC9u}a+F8%)#=#sZVHZfse35BLhL^k)_>wv%Klwl{O2dQD0N{&$|9`0
zF@58auScKfQpD}a^#up_4Q?pta;M#BSzAiM{GW1i!RSQ6psO$LD;gp?*%;A%Of9n0
z{fjC_-|5t%x5N<ZMA5uEkywstOENu+PMrDX$UWK5Al5Yn3Xw22`Z3#b$($FE_|Pwd
z50D1|FhvNzPB9KmEa<UsPc@Ep1i?@Sq@r%_LID${yRtHv6-C2i-U_$_b>!Fnz+ONv
zEiHxqb&+9fw78#8Q{q`h#yV{Tknp&i0AB*6LJ*_mOiIj}aqFf6aYu3q-yM)OP%pap
zD<l40Uj6ln^e4idpo~4(;Qj{j;AUD1(+`SMNAD?Ga)Ug_j^?VWqE|mxPA^Z@a&5M?
z7?}*c^7Z~bS2aRU@z(j|KHU4?7R&Gal9(O3V##%2c?;_`5H6v9h4&?~2Qca?UZ76K
zZCJw~DoXB^*wfI^fCiG%ux%ZN$qi`2wm6J2(MwTF`0@w}ewm6F=zdDWEMe1^{I7l;
z)NT>NB9cq3uY?~=^-#fd<Pb5mfDVtL>(+af6gKpH*m+J%9#6^g4saq|4*&B!{rO6C
zdN2$r;%*4auw(;N!lAdM%egL0ar}M0Y|ew9>;kVz4I3YG^3kz$bhRY(pyRL$NWIiJ
zKJt3#jgAwe6gTVo4O{&&P^)prdNwyVM@B}VUq#SMn5Zdwq0_9C3Bx2c3#jHzm8$`@
zp^qa4vW10(Ae*@^8sx;&a=Mb0o=$cbnzwsHdAIToxIB7#dox5mR;~+A;ZajVT6hnt
zP@D!;!5w9J@V}Iml-9mh&cZUkUnnMbyR7!_9^(J~L`w-0tua^8chcMSWg!g`R-8TW
zUpFjZ;`*pfh`)5-XQQ>Dmn@pUYd=}m$N8em+0dY1{xDZ3vvw^JvBY0VuutxJOw`qZ
zhH~DduBoJ?1lqsPKo#S*>j9JIs5!oa6Tjo<vTC@q0J3Q4w}AN|nF}<oL+`8_-ItXl
zfIkjvoL|uB%Js@06#1IY81??Idmz{P76lsVCto3xX|Hv~Q>jjb-XS-vcATm=)c&HO
zc``BHP^J>7k+&rm4UBer{5#j;N7N*Z!xRv-Qt-9I=BKA`r@bgI&239N2gzi{+!QX}
zIEFbswDa!ri+=8wfp5urOl8GnzA%W3$_7--;ExOrO~aN)frtWWP8K;}c64;~w8rB5
zM!QqWpNJ3bTywXx&^>$mNV~6Sg7w8qXZiQxfq{T0SRaO>H~Ht`kwhAfb1qL{{pbeN
zy~VHRFt74UU}YC1e|D(Yc8h-|y8Nri3nNzpCpB05$lDn?Da5{Q%wnALC*w5wcg4=e
z`_wP3G$&2Sv`e7tI<X-%@9YJsfU3i|rVf}5$*blFyO;v?%WbSaF$czC4Gus%a|HMR
zJSBGQ)Ee^g@)iYATcL)_*`gj3(Gf~%qH=O_o<QQ#WrgYVJt)AEM?ixxE60QD-P&^)
zoCX0{3S1Nz)LmU2PWcSXiCJzSV`mW(CjI#Qg5ZWFd#3mgF2q@y3qncXn5^EAzI(Sw
zy!cMst4m2w#6&)S4Wq1@(|_e%A(U^d408q5oSc21VMI9L+Ex7O`C*v!$gA-mGwI)c
z6X0^hd>0e8`7&#`z8g{@Ygq6=L&G>DxX38yTM1=U%<Jj*MjL1qFDa4J8I5?+W1Kwq
zTd(3)2{B%K3Q!xDsfJy61FukULV(M!U8qpa#`s_kJ$~HKd!dV(P*qv)x%C(Y;Vl?;
z3#jicv1w#DO)m#~2xEDAZ%vU8)<MGotY-4(3=h|*fU4`n+mV^_cG~-1j+j@4INMER
zDTZLGVgVJJy}Nqwc8im)@JrUgl$<6m65U5xI_{M!M>L{v3z5LrvdUsMR^dR@(WmtA
zey{J$pzXKLKVc*G_$qL)rxP$*JA4RdJz8NBEcdvvToP^U7;J2qmXk3cn>H+_W$`8I
z*Tf8cibFbl==a8};rDx<GC8`sr*7n3(tJETcoe<xerG+$)F(8I6yhtmd&k9a^hND9
zXwi=LnD&7~f2KAe)6JplKvQ0YE<!j_<wpvvlz20lBt9;#nd$PAlP3y?Z}!UhwV@D&
zyON9HG*u%m_RY&qEzUXD;m03;6jxbzQxrVWe+DvU1g?`4zgh&BvACNPZp9HCh14ru
zWJG9{jy=3bYV78@XnN20EI@+9MWC-x@##W#yd;y#0vw)U_taE{UaA~H6*{V#!|bcM
z(?g7D3hM)MydN0nej7)+Y`>gBJmjsH=)U&alG%H=a9%t^<P;({BwWrH5jtT;3^soV
zRTqk_HZeag`D|cCQL3I5?&0|{&pu`4xO+R3P`g0>W379}Rj%*Q+A_VoV@cop;u(kX
zI$uUa&*RlOT95y^n8XW_p@W{LI6~56uTP+6wDG)uL)TAbctxnfCZkl9l7LhKEdtw%
z<*%OTKNe$Q>aCYHeQiu-=l`sBuZ9FqIyP6@YP2+ShHVB8p=yfyt$Uf;y4!V^o0f3s
z^?I9V4fgMSHmVx#PgY?<{NgQi-%D?np~`D%Z}u+&KQ1#Kq|DbW{5efXcF2rx-yDD7
z<!0ja%jXaLbHD!28t|_KjJS{51PN+}$#q`ba13>z+pU_{*Uy7zH#>356D>=~*|NVJ
zhGD-wF(h+l8{Djnj514!#6TBLiw7C#sWb2`-71ObuU|lg%c#NCVwWxH<><+aYD7l2
zcS_?hT=>Bh4YX8|c9eRcM8ceRwGyu)_7Y$WU7elF+j|5)UtoF;8hi`;mSahEV)ZZe
zD>amqsvbPs9{K?Q2X9aw2-xi;)zcda0Ug%gzmI2ec7aQK0;BDU9ssmLO+wGg+8eD6
zM<RcTfCVScTTd^w|GF!thOWjes$Cf+9F{%hIS{za68Cw%-}!dRy&r@zvKOa2LCSNC
z)ai5CvnG_%I5TiSK`14{A43dVO4Tb+=o0jiVXcuP;pYzVao@inZT+p&<Q*s_y|wrG
z0xuFxK=Tkn=zAEiyy_Q4NK3-H<|ccW#~h3!q9P;h$15_LtYg;@yKcC8J{XvS7YGO|
zzb*D#bSx}KfN266Cmfrc01t0&zGU{%nKMjFfxSD=rEY7>q;vBSB$=*X_ev{4UkLm%
zK@F>!t|QpB$ZOedkiatHk%~$mEP-B;p~|)1LYFw2umZSeMxY5|;OrCg`QcbPxB*?y
z*ozn6su~{a=NaVYTZVxyH6h{RG9z^&6nuydi|IB@kQ^AGhWq{@@F8y6$O-?#E5q87
z2mvXHH=rA0s_ZEen9giSB^59+pEJ?uu?l*a1t2MYx>Yf{#AWuO8RT!Mqx)>JVV0jR
z?2?-jj=4AfVdHhv1Tdv$-lHV&(GIA_N%ev>1HeHD*{cypI80>@66<f+cQwjuY2ir@
zU~x6%17q298p~a0R_NQ7O54NxaM{6zAT=d8BR%WEyQuY~o*pGr;m?-fE0lfs(_D_P
z7}XdNL7y|Z0^D^}cj0x}lY>@Rwjk6#U6uAtI^+u~y<sh-olEzj@`1hzx_NW!ME(xj
zSrA}r;bl_^IT_4PKhEYQ=<VsLYC#R<QW!eoMa8x%IR-_zSB6OuHquzWif8?P3U}>5
z0`x8+Rx&KINW$FCPj-(S_HJ|uM4di`Vk(>U=NF=e6M=d^R3(3oT-e7kW$@9gc`EY)
zwmKJNefQzS&al~ma1pULI#E(rN5S1Koa)MX)LmHWj1J1ySSz6IZoyz`>vMThlPYW@
zhz}Z&{kt0an<EzyG}Z?_svdBo5Q`hoBZsll-42`9Uwk4WC!mGA6sJH+ijhS}OG3|^
zKg@^m*8bCTSOt@~m3xZgv*e&ujOV^)8brQMwI!m^z_B9D(iqxAtDEm9+zIoqCRrI7
zwTZW(_`S)U=P?BfQNgze&8d6uKHcKrW6WVL*^Pq2!)$E`u;~+P;Rbpz2hW({)RQ>a
zPtTiu<4CF?32OoKx%-0gB;_!3K%mD~N#!(+)T~HbV+lofEa8-Kg(pGLQ8!9xew1~u
z!lWs+`~p&DT07{yAeM>%c}^}`v(Y)LVcpb3sUop>5^TsA{xIO@+2ICkV?=dso1Vs!
zlNB9qO;cQzd^tW~0ktg6egq_!kq%g6ZHxFniHJxdHd_ICvuBmUdIS(H<TqAjd<+f!
zeo06_TkGJNyKQG}beO2hWfA>l3N<9E?+(Kcn;^6BDfGus_I~WUMuDfX8?*RUQwsKy
zi*|q`^`gspscAj0i#ODjim(R)JP-g#7eQ}y*ou#_+bRc%S%LTNNU>Lutb^Mdp^Hzm
zL6?#?@W}XBF;bJ@X1X9V3EAd`D~&n-2GfkFj=j#Qp@^XUZxf?N7oc-=H(Mx)nr#^U
zCFSbgQeibCVb=g+|7cw%sLrJ>*@Y_MU(rgL8Mv}T<F|x=!+Oao)6%~kl9>lrxFsUk
zwR(Rq{+%xzhw+nnkjc3pmSWZ}DYEp7=g~;d`bn_QNKJWr3ZWU>6;+rq{2Y(_Y8HAQ
z)|6+gr}F%_)MFHH4H^^<r}KtBAk*=$yF`dJ!B}&hgzjYqodtuEp3=LzY|sRi1jX8(
z=xdnB#vtf={e>1FF>7Sf`O`#Z+d4eV#F9KwYinx*P0iS4tyL;WMT>qH#S0XTv$D4e
zkiE%YRkldL=Y1z!y7po8d@t?SUi9kVgV<k#X8F8+;bzD`>d{CsUku-%x`HHyB%mTj
zt$?>`qBd<9x(t0Ntl=AUsZk+*W2OXu`35k72q}gkWltA2&{9yRx)Gp*z51vo%IB*+
zKkbtwx^~P*Cwk1yT8?rnb-e<L2bT_S0>sHaeM=7ey_pR3La13rw&j8fdWG~ynHLj~
zIQ`K=prp#&<qVX{wtvtte=TCFIz(m);pRntYw@Excj_D85zn=b#iPgu<+s?Z-S%kX
zZy54r)tWT1v5rS(1(~)0smQp2R6PMW9?)JuNBWQl!+)9wfdR8ppv5bY32Svexg3T8
zgU9oPxi`sj)0^_AdFsp!I$1pf_KD^9Wh!qM+D)=vE90o@l#aYjHS33KNL(~g`aYFz
z+HW-nR#(N3ac`aTSgG<O7nz<@^QtmjjNfx9mbI+`bx-D7%50r7b!%q69fZRNS6loa
zt$&XEfWyo6ay$Nu16IaYl(iykZU>KnFrq|!`lnY~l*a8mc{scbjiURclXZ;c7iEK6
z>Tdb+(r+e49p*dO<p%62D<r0OfZkQ;O1%8eR}-uLtIrn<>i6dG&;gZ5jh#c;*IphV
zP;dR1MAZMl{=*mh4^zmp=5*639rGn(L?NTnt&Qs*57g{;{KU;)_k4eHD9kg!Yi%#{
zsX0<^yVjI9+kNu!E`h};YPZMKG3LE$8EFA}J0bzfYlw7aBw<P^fK2pMnd+CXXP5n@
zU*OGAUU>^i$Mfs!>26B3?Z$lSyfMg0x%#-3pFs)?@2MtZ68Q>2+S@szQ&&zI=A=nY
z$;0H7pm|i^(tWuROsWUBxs!dwa8Z4nh-7E5Bs@n)ep>5AZLzz8D;;C(uHV7<8<xhp
zJkMYUAxZn>B0G`<Ec^fr9kUBdDTn2DiU=Mv0(ONz8HNFmj7%xXUd=h1B0y!KCQq%o
zNg<1sJsj7U-a;YHZx8}mOo`aQeV7t_jeQd+MfOb4hB|ky!Y}K^-RS$%6)LU?OVbjr
zI(P7QI71+o%wLUc@BlNRPscL4b;C4cs!O4u&A-^Keu=xGDpqK4i#F)y#z<3fk|Iv}
z<k+jXEhCuxW`hyWMEAcROgEx93RdvFLcxrbzKy=~yMqY%p1Fc0LJmCKE0%y<b1#se
zz2&CaUZ-t-n{*5}r>sa<_7uK0bve3MZq=Zzm2dbP?s-_~Wpm*~H@p4v&d|M$xw-si
zV0Q1G)uZ%0?3ZGEO~HZ-fOHr{k6YjslP|P>{I#M^-6b43i_zZDC1#${(U|WS9U)hd
z!qjJz!<d@K2d4wc*RF9V*k#^m*OarMrc4o}mu&Agap0ZGl?oK|Sm|2NdL}xpNPqes
zupLTC680Px>xOj3d{l#YzoM9PTcyf+Y}-tv%=Xi@vb6~la8IHa@}H2H=ZOTxaY{O%
z;D4Zv9XNf!<G!*HqSG8Wq(`<-_Xx)z{kbAu)dDddQVVUX!Dn}m75%5@OEy-ICF~}<
zKlO~f*bzs?x@DS*;o;la;P}y1q08q<hDq0ef%qN)Z%d%rygaM8@6JsjsWO+f2LmKY
z`%s?s+wuvZ#*Svx6>|FkKD?HW`6u<d`q_5Dm1Z&RUEh|3@FD65&o90d&+qb`b-rKQ
zYivgSASkd{mWQw|`O3GdUM?|JcC*wsYF|TG)Vy3pXFGvn%p^HG%ERgCx}VXbfoBGM
z1o{{=f&)p~>Nx9_xqufjeqej3<<2U~trLMwh4Tq#gx4<&f0zL;=+z!x*F;i_#Epv|
z^iX#TpsY#m6&9|_a!1m#c@KK}PYa%Ko%PmbY~65Hz#AA#_j_;+r;g2bb1vxxuS<t-
zM_-=+>o{!)AeBx7c<3@lb9WrtoU9MNXTBf%aK6!}I<)Tlda-W8fot3W3Mphlp7(am
z<~>mlXr5nlrpqzu52g5-sB9ZMtS+3!#m&0jxIiOEO6ivL^{NZ1B~P=DKBWigSRVg_
z(jUEzR>da)c=<^muOwofYAnpCDn6-ZoV~xvL{^NaaL&g>8=y^|FcQjp_K**|u+V%f
z(!f?gWfi$$pieYo*lMki?3O*U2=1t?C0P_LhQ^qJTYGgFA3s{_t7^*mv`9K-v$z6M
zOxu8ffG|wrP1WVszvK;X-yj^j$rBj2N~J<agBj&haLA#SF`Y90LBU#HDm^n3O(lZZ
zjy!yM=^8mUHZO<GuMP{<>t~eFB2Gf$GUoC<<`c1<uXTe1gzIgsJk=aeX?Je_dV=wx
zOppJ;v<yV_>nJ=jx61_tZF*E%v$~!fBYV`P%3@%xj11pCT5x})H&jWM#z~fO(`+<l
z!KNe3cK7<29O(L=bL%u)D}79u89^E3BP9waN3U2{zsR<%C4GoLxF1-a|A|GNuZGV>
zcBXU+%fBa?%O%9A+tyg^ZWdN~r3<^GnNzJ$afV<weZ+B7hNXamZ|%POl6;hcGImV%
zPLFS?xnZwrh#}?JsWnN&R}^A_N?Q6C3#t!p$=U|#u*cF8v+>;LsE8CuqmMVhP;2%o
zLv(uhc&*Bv75=yTgNyke(+hijoom`;9vg3TtaBjF7%Wa{N6Gs1#O0-IeVwXat}pth
zE~5yptEk&ARZBcE#=Vw;rQ$@Yy%eXCHOFrndOPHa6BdJ<Xln+Yxmbz8qycLFsv?=N
zLBD2_tenEN)(X=2LPoCCil8SQy+ujuR7PK69Aft*nEcjF4GWz1G{VzsG<Z&oYj`~M
z76<mT#5=Ybchd|{U);APb6V~y=(nI|4<pC*>`*+*jq@rXH(yLpy44jsa2<^u3CZUR
z_h-y+q`^D{FUWCq$ifd4Ea`K-!YHqO*-~-Lqm5?xL49pHbzhvRI93K<x*9_!XQ`1N
zr4wr}Hp@j^0;hH}NAt!#YvlBNdNRHe^6o1te8s=@<>yCb^I-yHTXkP|67IBMzd_g6
z`(au+6;&xuG16yi`blETjf>dF=e-&_A|lj!>+XNSjB!#JIv7+NA__;oH^>?uA~oC7
zxy<QHv+KWnxYUmMuD{PHE0NepD?ytq&ZSA&h3V5P+XN*encT2y?dMPLCx&!#xJGF{
z^`f_pb(L~8O`TSezOpIdBQ(tWtOQB%iu|qs?-Ps(($)@y8H@Bhe*W37k7zUrx2T2A
zuMIkdG+mpuxiu+UC}}%DR+4J?`>MD)C1&+kA%!uia-1VHHG4zDd6f35Z(^S0EWTzY
ze8s9&HV6vN$3~r)qrC51mjw=s(fWrje3tfEcBUrdFAP&^p3xp*7%YbFUgMoG<Eh$}
z&<&#@=jJ?X6ig!SdWZhAc_;(3kkrzNd~<stuwhQrH;B8K2=uhf#ZlcoCiDhGgRFwh
zXBUgeJJk{&ky$-TqMlEDL`^+quu&yVZLyMR;6vb}+M7J2MC?(5Zf+1#O{>>>Qdn(H
z67E%&L^jF$;NuiF=kVF%#(}=Ge#xSxx3(?G#I@yX54zUc=h-lyjw>+aFi2!l4Y^11
zi#!@T$Hw4K8kk`n0&?*WQd3l_KINYiv#py4>K5t0OTI@my_e<lSbJS}6qOO*RYlY<
z*I|F=%V6>@7hCZ(oso%0kn`@()^|;5ah%ikT)WCvj=u&2{0xqhBpfnMRg2OXX{)8^
z=4Mfv9n^fyc*a|A<jk`Oq+gmFd=zrr>Vb5k)nWhKA#U1aEy<UoW_PoTc-lbg4%v+W
zi9tzg4V~VE=w904P*xw&hGx{2=p_dd1~;FA;YEi@GJ@y5nSP#0w{&zwXy&l3aWZz=
zbCb8&uNAC4_3h5`<+_bk<!#g+mgGP^PVq4;JLQhrjnx+P<ep@Ks+FeO$hIgMD4m7b
zr~+#Kg%9s5^4a-E<AdK~a8ab8aE#O^TF*ZZH-FxI&8L!b>-R3#>MMLzg9udbcQvo2
z$ZL`MyoCcXtsUjzQ#wi*bYj03S7`hG<S6>{fm(!7i&(Wws6R1JafJ!}JCltcBEjMe
z<~+Swp>Cx6&pGNle;GHpixgGkkYCPi*ijiFnHqHsJ=X65@Tzs^LvnLe!p(E_h4baP
z<+x-u6wIerQdO)qo<=KMJyN$lR2F*^5NW3@70akiossyQ-tq9An%_=l5i`Cu`klYD
z090Jk1<uLVvp<P<1YiUrsWR5^J>Wjr#;QE;Gep@_xuT<z8u)Q94e44TAH6oO$h@rn
zRduvDY!7o1F4qkHd-*k&v7*a->}mSTf{D6B<iwgeV#HZQb@Jl_GH(}{ZTIH8J0ou2
zbi}D4;xKjU;1^g<>#2%1M8i~Q=KX0=%vnP2O2-r)pyYt<%%=Z(!1ues&&HRJ=5-S+
zwIrC(GnQ?eu2F8dz9R=n-tOm|7ut7crk%FipFDq`!j3VOLUK>r_{QK^0cv5$!r)Mi
zO{{80yu#C!c<d~<%iC4-vA;QLS#d75m&}xChT}M|<w{5y8L`DAgbds_i#->t=WuL2
z$#xM8B$o2*IBlzap52t_s+j5c;WD|SM&=E7cpKfE9pXHe@zuMlH7#7}$xr@-_972W
ze%J&n{H@3>k4JOXZ7Px0j+yp(^u@1aqxjFxN9t<W(A&sc9681(-$i(*i0{!A{<LXU
zC&Q9^5h{u1u(n<OO(7R^WsjuC8@=SjZ2!nYxE9fMX!@;0VN_yda%74e$X)Q|t(s4E
z{Gd_Os(vKaYmZx9*wK*dz;nd7c-ZG&+`+G`F#E-+rE8k^QISW?yl4)R&&FwD?4;c0
z-GLR+k^!f$UFVXsBvM4-->a8}T{6bRp01YnA!golj7YJwhEq}aTvm5{u77BHRMW4J
zHJ;en;Xq^G%X(E(xi<e*+VZY0-z<&-gN~R~8n^AM?QaF%ZM${)GlpRF(bR*Lck4oG
z=i{m)hVjHJQzQTJm7m=|zHqhJ1-*V)-j3##O-os8(0t1mjY0=MLco-|=7Hpk=(MO;
z);(es9WFTgX`v}8P+VD~#9r7><Ir3BmwA4!615~%WuHNbEOl!EEH0i@m7)-Jq23Me
zB6&UYHPssxqXt_MqE`vVD#n<Z5+Bf*NLHj)sG_GMr!Qx0E)tW3Jg03PVpDo#zm;yn
zbG6qNd5V-B+mtR~xcU`+E+ZCMR|5yGnNv88+H?1D8$GVdK1T*4g47;t7eGZ0?u6ea
zUA(8d+b!`#gCIQ5vpKzZG2wg{+guU-QOZGkx^LAK!DLy81;xdj6H>@;bk=8<r!o5C
zqWO`$nO^$8+g{#8m5%9<e|Co#M-EjwO(5=S>NooiwF}z*nr}=@oDB5u58d=(K(mu<
zK{B>!goRnsR4#SZmaR=G<y;%j*K8jz%KA!g)p&tn?be+g>D(Ll#%%An*Oz<E5DP;+
z9)6W<*pjiM#xY=|{IqQ(?`ULmU&NPd$0FFo6}j&=O0*~vHw9s)A!V0#zQF=s<^9^L
zSxqk*9Y3BBk0p-fCPj(sxcT_4u;yON^FiWdtDzseHE=L8^6A@{aBYb+1Y7-X3Z%jK
z-dJE{?!B8&Afd06eUSDx|B#;DiMZOF4(VX;ZkPn4?YAhV7^ZlAjGv8@MLkkz--1ln
z(#4-)YbV~{LuN#>-g#_yMM=WN!1VgjnK{pTXXpxdO{LpZ{qWe6j9%GV^Y{_5PTEY4
zL!0l6(Q+15T{aCrc=oM}^%1k=DvWcmd9p#K=<P8H-F}_7`TCP>^Fa1n!`;-MZT4cA
zO_)QcWA{&8c?jlyON{;@Bdu`#+*~egD8A)fE$k$^*Qyi4)~OJCV<x0yc5s%6Chu3z
z+Up6I>ECO{$$bU-Z^*p8uy9X#+^ulMe~mF+-=-Lsu{CdRh!<r~rM;Q!#^e#YDIKwR
zRmU2;m#lHOe$Lt1+qqo=>E6|u<u#6GmBAU;^w3?V_6<xd3q1zjaG_1_z9!6<B-xjK
zY5X0_9J9W^$g!U{Oi7`wjQdXRk6TN{J<LEIO22P~E8_jkt|UH<Q5Jtpao(mY4f`Pp
zUlD~hXW~M^me}$!ijdRLn=jFzmSQ;8(BO+(dP7)bQ0BGT`JRQS$0IDJpp`V9a99V>
z|G=hV-OO^;xJ_?f_w*BaA{y`c9s5Y-;mEWM?-kby4d(rQEE0}6qaqa500v=&#`8OC
z1!7JG?VE&g;-Wi?Z9+)b+a@A+&)R-uT)eM7a5MCgPbEM`s=drX+AH}W`rGJX(g5xC
zMd2l~+WFYutRM1XD>-hDTqF~(sK$ikdcA6@P`c&ku=QbnCSYq*<ckeoSHe`!h2oRZ
z4(>1?v|DN#qS!v#MyyZwU!t@t^I4!QyOMG^o;ciVF;4q(to6}^^sYzG$h5^P)W!{u
z<@NR~d`HDqzIz!B9Gt0w*c_Z3=~&u6V*!Swqcnvd-6HFTjF2)H=<J;ggMvQ^%KE=(
zzbcO;99CLTV)s~{z`L?U$<NtoP&a_FDyCFlmbt^}_;z!@?QFnxp3>*CVbK=v={as<
zMz)eO&;9;Rt66!?<p!ZC`FW;&a`Th98dMMa{LR`uSmx+%nUWuo8(A1hWcs7^yUkcO
z%W<5>3Wb!6R+u}QtOd3%b2en3)fgAHXUBQepE^4EQKr6+>?On)HL*((N=QvOo`XGx
z<E4sCbNDuLjxPT~Ve5f;2G@dYu5E~wf9(-T=7Eb}KhM{&&Hf)2u}C?NPr{hq+q~<G
zrIc*$%;vs};GNTIDZP@+XmZ+_K1`Yx{I)fk)N&l>muuu6!5w}aihqV>B2*u5b@dGE
zoIch9d1d#=LuKp7VQ*T{TL(Qs_6;+vzL<wX*|qllF)rLK`8p;7Dn9y+F{^{ox6*d~
zt>!GQYwS4kV=;KpYM@ojbT*T7xv#}GCv2K!1PuG?CdG=5f@a0lSA?NAB=~sN<bQQc
zg_~qodA9O|kc$#|UL$77Rrtu8SeA0t<u-)jPV)9_;HscpCqhCG<s*63{e$pT5-p)l
zxf-YC_s3sFrO?aDJpFsF9}8T(ds(s|-^z?q@gXgRB1x6yBA|kdU0M?-WK@iy)#r;v
z7S3IHl9eh=+4Nj;ng}J29udkyRl@qN0m@O)`UMlyG9`q8$PCeVf1A|34|zusT<x)%
zn~T#nHhE0577-!Efl^$$LYtN+6U_V;cJreh_pI)EtkwJqGrGO{+=$nf8+l_ybgrfj
zXZ%?#ZqDsbNUrgoLoLC)e)pX+8r=+<2Tu2zh3ZSr18B0vZK*Q@nbffi+)TKT8RLUt
z&U^GNpt&-$pJbpQWKZht<D#NYk4GsyoEEbeV@yl;3X7b$Ty8i2=ES^%n)Y?Hp>ac4
z%tvpR$5pha?OpcMlv}9v!%514Qsah%Jk#bKSZWqigB3|pfl@f4Yap3ChYcIsxuy-~
zCdazzV(uD$h;0j(8na~tB9`>4evc&jzi!5%ztt_L)P4U$Ip&kp^ahPc@_CoyOJ>P$
z4=)ZjBtand-0%mPcmOsv2qJ;lQ~h^|skEB;ijPfbmpV+d#$39+%M}Toa+I$v0_dyp
zy6^~e@hNznJ{a62|3t{HF`6(s5W5@ilTO!u?Yc`0h}(xeEHK|Y1`PsU)OMlk1%!5(
zQzHhPF-mo+E4J0?=FM_m4VB8}EwD~Pe9R?YsU)7^<I-gPTY4cM9i8W{Tx17Y8TwZ7
zy+5n#c?1wqMX$WQ3SaoqO@FPaaThV;w|Z*#jUdB?OKwqAIv=(_9*jx-=`>jv9oXDd
zHED32mOM)_jX#x(+qxc)Hu3#Y)fXR)VCP#OUNYro57trCFlj6|lv@%x3^?X+*I8C|
zcc8Y4Sx+M0Rr0W(bm0S~DY@tR3&cZgcby&tGmFqwdKDnkx!PjP`9?bIWN?OVncl}(
z>NTts(P4`ej%f0)Mtj_(BTtiutH1S}+nTq9e)@`3XLABuE;<n*@}qrk*A+vuZLHNM
zmOoH76_k*~@88lIx~2d<eA;DI9l0Uw$l+gAF5xLs9-!u%qN4rqh*{)Z>6ht<`F2Q0
z@Aml$-u50|94>G2a?+-t3X!zlC-;mQxf&uY6}tYPjcV<fS`|u`8r1`s78R_9;snfY
zv2>G<$BJ8m1ND}qFZ8e%N+RBr8P;FhcB$t!zivy}I;ep&{st3qf&cr*Fh(+F2ElzN
zhVJ_xH(eIv^9M;fKFl26?`9~qcKYr&Ks%}awZ3m?C_|!?y?Auq2xoG{78L(EV*A>X
zE0UcUC*FCnZ|GZY_C9d*y?>7>Ne`J&T0riZH7+I2<Uw3qp3=bRRb!>_3Yj+dq%OQf
zl%B%1SRB!+7#3BgS`3l2st{b;L>#Qs$x_7uc?TO4)l}!MuCe9EmPhNvfAL5D1G5)`
zOu)j)$H+AS3up67a-Zh=y4-KKTiu4de`>8pgx!m0E)g$kF0*U@9YMhSzEOgnzJLC+
z1MXx`qVDRXNcytO&UXE%)hJ>=S7nCwuxR0<b5Ng(Y;ZC2q-{jtvf)!cpX05!vkE26
z0NMY92g8clj_oYTxe<2d*d%e8C7_i2^k_{xUoXwGO`}fM^2Uz1>L~P`xe6D7MI(wD
zt!ZZJx2frU`r9z<e?w7MQIK8fj`+r|Mi9QZE7ACVz@d^&Y8~)yPh$kc^$L$0*^kDl
zx@S&Y4+p=#q5U{I>;1cWOL~_2aN`S?OWs8q{JSP#RXj;!(sDv7WR>SA3Zzq5VsUzb
zUpf?>gp)NRQZ%2y9EP`EHBUv7X&^3U9Am?%mo(KcN_a%+)ALa@F6v`tc7XAg=<*gp
z=b3QG^(-IlkLl_5X<uSvVvb#3xP=;VRo*H3b9AJ0(MO10Ru2;LG9vCvNB|ySV{q-?
z$sy2ndn&CqRvVZ1)|z+Puu8wM-1gJU*;A*`&wT6aSoy%tOQKRw&2u7K{@%n{lfoBw
z+WP$WXM{&ID)%Rg_V{rR2iSes-#1Y$02I!#co)ySlEN<RQ*rFtNA>TbXg)r2zdW^W
zO&8z&3l96ACz&V#0ptT&ja(sTBe22JRK4GmGME>%|CNT+dHqwPX_7+9$y;Z;sSw#H
z@{CDV2SZWO$@Yk)Z$^mOEuaay2>2`YS>ONlPRrnZa{c3do+B_ow;sIvL#=40{eznS
z=zI0CKu8FZm16ECq}KO`^L-vSbfe=ix`UrldF`ON7`L>&N%Pv{qhSP$h3n0mr7mbU
z|6svG&hd97g!JGyzWB#)q(m>P_PX-?4?vX#8<~sZ9^laTquqCw2f5aakB1K<CbT2G
z#5cw{zE;}({w8Q#*`4-vAmxAiFUz%N03Owj$>xP#^g><?Vf6nZ@`Jhy3kq_4lLl!U
zXYyaVQ~!Bs;VZs$H#0^FsdC`Gz<>I$A1uho0FJ&=^WbkF^?$%?=;or}g=u<vYWz<;
zrW|Air4kP0o_AsYD_p_Xnc+`Ke)=Q|hj2mRrntB`7uQhZ-SYDC-rnA!-RS?y&u76$
z0oRyEYKo68r%#{sE3H~1er^XN1bo?W$$0WzW<TgX7%SD>1`sVM2l;gp>w|5}Ky(lg
zxBLNETB?}`08vm`HrV~|u{4<oUX_VNx!LwR$I~)xoaaj=$Ft0dI$T^@2$}Rs3=Y%g
z6EL6wwW*{O-WSV&6ab1augi?Y0w|@}X&`)29RaZ0;5z?YJ_dx|_W|O1FOB6tFC%<K
z>keEd&wxAV&#L2Yya_tceppNp=RSr;gJ)RaW;Lv0qo+5H5FO_*OiW0aOMf%XiviS7
z8`6S&cq#NqM7@CGM?pbJCj{-cmbK?GFZ5pZ&4Y(J*tYf$$L)Zq2EtM48X6iJD(ZFc
z?tzyRPrm+Nx&8SQgb8YXee`@cY^Fa164pD{BAieqK6u#uG<`3@k^<P?kFb`%gixyn
z@XISgW~ECHd|W|H4Inh%<yioZ<%$^sIM)Ith{B?7R_catADASu(9t~)INh7ja90Wd
z)Sj9IhKPX0e|O1YxsCEzRm%{osmwlEDZ%U4fuX3I<<!dHDmH~}vdWg~l{ok5rtK}$
zhMnfKZDx?3GY$CkK`C8R3Q##9+#-gxgg;E@kDy4yrZfIoS|A@HX74G^?aa3$Se38i
zqM}57cg$hG4-P<b6CH#%Gg7)Rd3epka<1C+D~Kzy{YmyiH<7Y9*RW?y-u|Dw6~Zqg
zjrmP^li27@pR)ROR(&o3q11`0iHX9XOXr-G5xMYG?jX<UcbLxK3`*6mWK||4;Bhn$
z%onGbX6EMR{?V_05Bp|CYCmi6b_UcyBLIiReYVsxK?sbl1&Hzh)LOhU)OAyCp+oG^
zxo@+cn<wM)<?q=`{N8X{IN;s2hXAexYCWZ>I|D^H5Y6#DYSE~D^MRLJlmUjV2p&5P
z4IoCoLR&vxrXAV?hDfJib%J2q8}@7ipB&Iw_|JYtN@Fl;y)qIcQhvGfWbimU@5(&*
zY`H~W>8%hjy_Tpm+N@?MmS{t2A!zf->`9f^O9J_u-$=Bd_r3gogd%a#Pg>MYK?f0N
z)H^l(T;iOs!iA@**54lsJ=&H3UTt;EX_DFS@EBCvzPIcklh$Z3UQ2QAiY@>4;rCuQ
zb&T^^$$Xr!m~|v2;?|@N0RNcfUeMhaccWU0fF(--=plel@1U3g03Bh=30!1?7NCBE
z+0Qay3uKfL*tIydD21qtNbg2KH&Foa8NhF^4QrX0tmGcScTqrmt%DKHgw#b9JQ2qL
z6N(>P0po`}P%0wXYp>Y^bW0HIApzLpX03J57eVugOmH6#dmfJkveY_`&3FNN@=atB
z&wX8CR4Ml*bdM{xIVuaMAv|cU<$$^Q{8E3o@lG{!33>J+F{GjYeAKnn;4(2{F+H*B
zioM;oA1<<BC2h|VonNd?XIvx1Xt}(nNb^QszHy92eZ~GUnG%?{@G#!<+XQQ1-&k_P
z+qla31w|0r0LR(Il6V4?BZLATV3nGFym-k|2kuOr)Cf5la8Z}_^%c2;wYTsX6-#ZX
zs9dX{4M^{yCJf(fz^MYyenJD~p)!GMk4AU4e3QfUJ3;X{yePG(!VM6V#F&N4vzE@p
z{+l?2KqWX2_j{1bWKEb^A9!k30_wcB38y8VRi^|{ef#unCF$)1Mz@Lon?A7$Khovf
zKa}d+&j>H=r{pG!b+{D8eEOLnXH}$(Ogto&rFx;urWki$#EDEHjhb)XI{?n_!2tiT
zF+l!+8So8wSa(>(AEm#nYG5!Y55vc~etmFgNI_T5y2J4yIB$)QcSWY-9Ls#Ht67ja
z?^AAl!%_r?otY^cygQc^7<x;<mMb%~oaw<zPa%%sx)uu1nn07Qb_(fQXTUy&m5x*2
z@PoPYk%U9A&N%%Jatw*O+$nnhEva2W2DbB^-jJ(kbm#L(>JzHPeDz)%#&I=ni$8M2
zSFLT`X;qdxu}BGAj}btw51`wG0KPn&w~hZUD3r36vc?KXL|Ns!Nhjkb$FE$DO}G&i
z2452$0p79<A`+t6djTg<gkFGb0|IaP{gA`BApw<L8Q{fIb2MPR0MBy|A?^W`rC$i7
zCGCJS0B36F9!Mh4RJ85fv%PWUc3xfzv2yVA%k*e-nKr}8x0)q?nST7AVnDi@aSoc!
zYro-z4$bg^FJ^X{rse+G_Uip)lXq1c$1a4-dK)7lvfjr>uA*2=)g=rhrW_gF{>e|O
z1FSus0w3b(l?@pXF{^Q<j=B48Dk?p@ItbJa#UF;%USoXliY2zfW_><>yu7T81?7gP
zvNy#gh#EGCml~WA;JSI<`8<q6CH5pNjGSF{gAG+KpMd}!6VrW!MV*t5p1xQ+wFB)1
z-(Q@of3F^BwT!G)gc5G=!O{QP?6(6Y!0#TKpaj0dHSG<vjO^^Gpsia@ViMp-PLd`8
z=k6IQ0NYOCk``v==jKb$nSpjgY9~t`U~tmz1*FIFcFDPRC}yb{Snh2Sa;<J{pKg<T
z6Eib*WdS}H`UFPSPwZKOj^RkG<AoE2@1Y{*$c*~n@vS2H59tJfk^Ya5=v?V5dJj!!
z4*y`wsnS#qT%C87hmR&3<b%NJ!HIjZp!KL!i*0hcX<k>qQ^+}b?6~?mMZD9*2xN-Q
zu?DQ#r)Z8#VNafjFhs`0SP8qjOuep-VL;oYp>p2|h$LoqJeogt&Wl}r2;y3X8I%0l
zB0(@toaqeX<^9CP{q+Awz5g(}DCH}qs+>PI#{LWKJC&HPjFz{y;_mo8Pn>Z~X7FL=
zes?c%l)Uhba{N9kE^oTCSe`s_io$xVJnw&rb$_B?XLRtTcwlYZ05G7M-xk(UKh<Uv
zR?o|2jvIZ4z?1&Z4{nT;7QtfSdk>pJZIV?k-l^vM{_md-c?<+6$3A4fL<K|X;CFw~
z7yrI1Dxye21m=}@(a<L+C!Nga@Oo*RsH#jtJevRTGr`&u@yBLw$>{!NX!ZAhmCN@f
zm;g*EBIkgZZ8B&xii7)gl2BIMbMO)T4RWj4xVUzCUmzYPbDPa1Ulv4AgQ_9^Jb-*}
zoo&|6IDNd&^$$@UFgdL$IS7p?WBWf3;-5C2ND&!?K`sGf3?gYwzPk%?6v71g$=~0)
z<be+!SU3Vv3~+g+AQzhPJm~M*62cAWz#zl|7YrCvlwq3gNtnL-6|{ccF{47P`(%(`
zI{jzEsv;f&xvc^0QMAx;a9#sON<{^8{&auU%=42xz&RNufQV72x=3&V^qXm5wiRJx
zV%`9)p3TWxRdJ~=ps=5xj^8t&F`KlbdFNdWDm%CUhz6da6!QJIVqFm#C=pMeKJAWo
zhg1a!(Azl-sN=~9;TC0jI=Y<`aMXd|*8%UZyCW%BmT=q*aj#jJQ21&_k^4~?N~q$n
zPkqWUXGzrfie3EJg#XJ?5K#_ZW;L`S7~F;8MgU8P8ZeFEu%Z{8o}LcAhjcm!wVtXd
zW@$cP?u+;zlo5O5By&>yq%0>x{I(t9kmQ4<*5Le;Wcq3gulECEwpe?7jJ*sx{=+J)
z|9J_cSwlAYCe1E>FA=L>nyglzB-c29uZJp2^vnmr{_yocWM;4~m3>yHqSOG@I^_bf
zMgyobJ;6vAP+7FODatt5pIl6D=#8(ZqxyrG)@l030KSrnI5inw0LQv?3XjXZEc<&;
zj+ax^)+O0t`Ty6O4jGldl9dCJP!VEwc6Q7R3<gIqX;hfYZhQFY4>}+G*b=2}y}!*o
z2?Av|*~e|sdmpH`Qj(Je?1r)-cO^1$a8y8v<Wv-@7A1?Yz8VbkeVjB<p`$FZH4g>p
z{AVC7!k1UG8$D__vlae4-oQZ{O?oW*xV;8h=XpP|N}8sB%VMawh?kP>)aym|TN=i{
z%NIqd{w-qD-~<274;qgfLQXv_-wKQ%E!#mAN2Yqb_GuAlZ?!}42)zg7D>P`!U`gr*
zQXK3T@BsaoZt?-ERUjP7*6TI@sia_K$j3j1?A~W>>*qM9gMw<ca?QuZduzoM_L7KP
zsj5q`1@6lJ%Rs-g=V8{&Rg1ZShbMimt8XF*bi<`3Yo<r`d7>PTWqy$SnPEyIeKWYH
zW#GQjtC4^F)j#PDFkX}I2y<gcSCCQau<x(c=db-J%^v%U&kGOj326weY&d|b>y?w3
zaK7~Q^nmO0XW%7<28dd;Jpo8t7B9bpfr0ZvM-=#~0z}^w$lP6VXJ2c9k<r3H(=`tz
zjU{R1(_0r4w6atP)*0Z1l=@XL(9x|)ztJ_MrM;C7K!~M65xP5+BmUO$Yy2zsiJmM+
z(2p6|9Lm2Pntozov<6^uesVs3xs7i>J656W?)o*_Pr;gj$dg3ZLt-~QImQXcFjY&E
z$BuhfeNXx?Q+w57w!HPbLJrB%E?H+cLXuXSacpdCUKvzB9twn-5K5xe`FEG#9}Dzd
zV5Pl}5SYm`sxn8~t{oZCa^V6F*7cX!WN(pOM%m;3&c|j1Kw+dgN(6ppPW3|dkH~)7
zYf`{kpyh?!S)o;c%w`SP|CQmqVd^&}SRiwY?k|22U|{zXu9ejs6=nAKYDx$!P_2ht
zxxZZUk63seDf`3Z1TCC;`v<GbCKGHChS|U?1xi9~P<$hv<_?G-&h5roJLG+_dMeq)
zf&c2|>U_~}Moh%vlYWM8&c?#P!pHi)%38$`bjp&K#is7;z7R%6c6P(c<Nm(Y#TOEP
z51%Sa*lk-i2ai|N)Z_kID6W(U0RF+pJq7M9e(T8G=lxPj0NKa;d|}l-l~mHy3|fd{
z20q$4?bUIo3#ii6kk8R8sv=Z9|E1E=f|0L%=QfeD)RAE4{lvph73p9P4@mY<*)v}W
za$c-9@6nE=uA)_$#Ehyxgk9hTnd_=p_YGuQTB|$g<{bw76jUJ`7I+$};IM!%P^@jV
zMudokdJqf8+Cu3GvD8bF1($ofbBJ4nAC0wr=8Wmjy$qU<^Do{q7;3B%yEGD~zF4Sl
zjZCk}QRuilQ0Zhhlk}Usl&N4G?)VDIrb92(I;!2rfKPh}%^*ep<I7^U<VzqX47f8>
zyXT4faP{ZU=}2eln|WzJ!u|T=FH^Wk>2f+(kPipNh?jk_uLtAnI;=>nX@Yj<K7t#V
z$M`qx2t?PY7d-7-QRR{EG@10)L+a%}f@`?+eT6&H8Tm_f9kC-EE~DR_;=@^IjEe;j
z5298khP7>R1WE)%GosN)Hi@j7kDB;!oNIK;^y{aqTC3Jh7`Z#SGbr^+WhWBKi(2FP
z^b4JQuFfY1t!!p|{;-!&UaxXp!!)3c0I3nL7Maiw7%G-aJ*mzC2KeNqn>#zM8Ws~l
zz@l2XB~O;5K;rv6Xqey-fnS~^-v`yXbD%{SCgm#KQIMB^MzG2{Ksz=%+H(X2qn&>o
z7Wvh4;6i~tV9;ugPtOj(<t>;+76=ImFHcu#G@yScYSO5n=(!KG9vF98O(#KMd$`o|
ztV4^<-S)5ybg$8M&?OqXp3(pd(%{7@=&7H8AU!T6z<nm@pGvfSrpeuer5c0dUEW$B
zz$wrF=v@BwcZC3=2>zreKKBlv_kXIfQN=M7=vqrzA({sZUpyvBM7NI5B+Zx9de+j*
z+G*d9wH;$(&srOpSvyr45UrCzY=s=v+kN$FXj0-+=I_n-?>u)7t5J96Wh#39N3-KL
zhPgU95!ns$8!@v!O1`;G0j2NX!|2tiqU$21=YFY;_UrzidYL0)RDH=A+3yzho!E4Q
zID3>e1#U26$h;7`j?L*4a4KG%rUs0Y)-`iD4Us-T_pym91>W{<8n`!~fGVNkhr5x9
zWpOKQ&?bXI$@QoN#w18aegNTi0Y_qsT`+HCyI0R)2{sZz_$<$E=7Df>?U0xw%$1DY
z`#Ikxa4tqb!~OxH&{7v?0{-C7N03aW-r<vgl%F<1mB$p^M`@|DRHf`93nZcr9b_QN
zEpYTP_4Cu;u1P0)YwN{!jjZRH6KD4W&#%TF*N+O)E$(0!X_DkwR<vE@_GDHl$us@i
zWhX~k5fOHo$<E24B1?biT77qUP<U4DO2ihNgsi^IttT0C47mb`WJxqlv7)Yi<E*8+
zy80;MPYenk#+bO%Kk-;bw(V+RzjDxlsEN%Vo?;_PP0d*7RarXc<!7w@q>t6sFOyyZ
zU;PFU)$ZL{S;q>i^!e#_j}7;9Y2x_lgk!Qb0g(<r&kIZ2wwYMjEGlRZ=OcI}jNf^(
zV(HMG(o%^rxQY~YKW+R7w7ZAEr{FeiPOn`HoiN{;c~23+>ckND5s_(Q@EL1vVx{Fv
z7-{I*SHk3|0&Ey%>p?tH!Mnn&<pRN?v+gBp7s=%xb={Fxr06tARO1Qr-T8=id9sMB
zHz3eh@OGg+j3+vWNsx}9Uu9F^^n3p8tHwQ|%dTdB^4Ooy4I&_$6FU%P_>_B_a&fM)
zPiW-;*q%Skp@J1?Z>mpWh{-w7!Z)U@*tz*Wl;)aF(dM<>%*;Lk<_N~jP)yLZ(2~I@
zvMHHBmgTE$<}2nX@Vfg)*<@~jz`T}^>B)1Mer6k@J}xon#22jNsOV<K{B+s;b|$pL
z#~(OOYG+o;XxQGDc8z?sH@S{>>2~4nDqexpa(VF(RG}2#oeeoukU8qBZ&K>NGLo0b
zyeY$gGq-u=0;t~Px7-HE2PT41BA*)YWl~o3zrv<M=1}Mr)1pqT?iOx_`fi17>J3>!
zde}}>HD7nqbb65G9|2CtUicAiR@>{Y;{WGTK(D{(HJpm0=B$y<6GHs9$!kO5?GxN*
zcjL&%BB=dAaPoG8VO1jb*3FU+py#~yxtuWSlt=#?j35XGZ-;@03rhhCnFJbIScy$>
z>d4;9i9hl39K+f=r>=w}cJx=vnDFOoIFylVLf)GOZCz5ID3U7_*Uc3jUiV4V4C*zy
zd8-&}+<zP>g|N_$5e2Ty*c6uVJ`fTpvsAJh;&uynd+Ie^XcV~Q${E5LS$C@xX05Y>
z{T8p{O6)+%!q3q943k2cz`QhAvQX8G?F?Hz-O2D9L7~#B4pVsc?!ddHL{*UvifNCb
z<m>wb54Rfapu`7iHpPb3!qOI(-QTJy=rB;P;IxWXIWF{A9kP8<16dYop*Fz|ivs0$
zx@zD-qt4y-;jt5g5_1TK(N7J>r}7pE!XZQJBb<*R1(7N8emc{Cybx80LyR3&#!IkS
zgCu^sTHHk}W3Rt~`l=ZQ?i0-Z7`r<I;wJZ#4KdC}k6&MZH7Ul-&v{c|R7zOSrmbrS
zqPg9q;s7p&6;@OfouiQ3eIN}onATWhJeVHWJ-Jg{R0Kjfgn@+oC=0x&a!Q?VZ_pB0
zJ%J*K&aJ9#JL}n14Fi#s78nEQ;c#7rjpa==sm-oXhfuczTNfHng@}WOIK&uH#9wCx
zXs*|Bxhn*zMhzl*N<a;=5Sv3;xmazoqV`{Fhh$G=AcuCUjea1(xlt?{W>btv{uyn_
z3J#i@h-*N{l<+L&1_4njZRs}M%IohCxs#cY0p9aO>-Ct=yTXnoLhRzUOoBTiT(mRQ
z^l`$U-H#7(*f-`javoZE>n;3nz#sgDHqpk9;}U0|==j7w&|n6C5}y{A20=*IduFHU
zJZ9L9jvq!8hTo2IcDTrXw=6g|Js}}@Rj?kzx|2&RGTb*{?2{sIhftDIYSmP=6`EeE
z6KXuou`2g_>*>!n!9RTr;*(GrF|@8FU28{EyIGx6$H5dy!)J}YVg7vnxu_))0#Tiw
zvS(r&BP>Q-Q1&@KjIVdZhEF~k@Ybze5wkJ9dAi1idJx0R<e#~GdX5_2&Xik>VZilj
zr!PMn(Sfx-#i%M_ki@(7I{yWbvjH#6SEB<B2|oMprpy;Ph?+F}HgbmHdi~A%ktpT9
zNcLDu6a#UsJfY)1D_IVoZ`OK`7m~m{Wf#;eSZ~-MG=CTT&?!&mevD)~do1_d%u3<d
zUpwlUE&a}xO+2|5U1#$0&RfoxA|r2%dlq&h13A|1O;m%6*{TiXgzKIP?80`}F3t7K
zmxH9b+mnoWPAHyh5ziqg1*2AlNH1IIxxH|ztChwx=GO-HIXL=_%{j6+HWG~T9mJeE
zt#WkX9U*kIzjbzG@0q;$LGhRJSw->(%-9=((Y;rSyyeb8B_jyt*B|-}|Cp1&;7(e{
zxFgQFTE5`%9~~S1kZqx6B65Pz4WI36?K#8#G=*K`5A{@7A)0<e52(GEB+-4?t?)Vh
z^y?FfZyyX2el$5b{hrMvAYGSmNWS@6;w1E>lN(Vs!c}-|b${8~&YJprRFhAKC~3r(
zZ5fgE<8@xrc#mTq9wASuFxT}8?ZjALw75hiIcYnp5$}b??Aj(W__y`eRGrDpkV$>%
z7v*V_GGBo3gaB>Zf_oqpXUXqm$0F@Rgj91*&A+cOSuPNgr<S2Fm`l4!FQ317@+Zd0
zKuwr8A;T=EF?$*q>~xdg`I|sM@%!N`d0XkG$E80_Q*xeVC#8^(5fIN*DJs30qP+8#
zTlJTft!LVISw~-+^!4BBfhmb$^q=?xQ?mB(Ll%_hVE;h|L~QMuXRN%0wv#AFv6iC9
zBnDMxMg_j9X2t*hqIN`~1(9{uUXODBbtG!^kK}zxAYD?28g>m8B?3i}!Hz+0VsFmt
z=XE)laUVQ#bU`ysiBJ>&u<*O+RtskNHwON7*Kb298HzqAX_Zvpx0NkHu^_J<?2?J|
z+R7N{w8&5<B7Q&#Zg**zB-%8H;QGq5O|H(v!l7j`UL3~OKU`;F(l6FAL6ge4@hxdu
zDz5F%#YskSs?UGkoU`@EQR(9LO?rMo4wgIOfoI)gcR68p70rxP&x(aJV6v33%$md>
zuUx|MuDhcxd3mVi&8DC1=>JF8cffPKfB#36k!&JKLS{zDh-7AukG&&%6(XAoB_sNf
z?7c_!9%WSamaS}MWkunC-gWQoe*4}3<8dDzTzY?A@7Fl5bDrmUo@ckPT}hOhh=xKx
z+3=2YND7<ZDgzv-pkrqx3?Kj+GB38(?taT&-A1bkmADE@N-l;E2Q`$AS{XCb+ywOY
zl^`P&dHm_RA?RtL88CbK-}<M?t1W40A{d2$1eSIrPlu)^&m7g8!ZC<((Ri3T+Ncu&
zYJ*ulADT-|$uBN{D<3^{P}C7K%zB=uqSL70Tm{Fs5U2U=TToW^g2HCafN$<4bhgi#
zs`$IuOR34on$1zCdD6!lIrM*9&d0tDB#leL<C^>;D5a^x{YM&zyaGsaT@>b6e8gv_
zep5khpF5HAW)!=qOwK7VB6#7AAWzhjseJysh||s*KyC-SrZ?UjK<-u*f?xoP#M%9d
z|DEt-jsi2IcJV>G+59`z3~f<bazsXp69;0JlPBkdykz_}8)Nzw?nUsWcZah=-rw&H
zy)OmiQYfr^j;qVN96&>;E6cY*WdQd}H|tO35o8gOz=s;=_QLJC+1r6wQYK3%>g8M^
z1Q2MXy3qKBx^+qT4TTfe-Q4bWNY*dhj7)~m_7-ttqz8aXr>kb>L?APGign{804mi@
zI=}r6u!86lnD;$To(%BE3M>j&vdSu4{^@*5Dbr;ttSX)G!>EcCkq$sBvtwnhk+7pQ
zvlnL!x}P3md=7<S)zcHXeVWM~M?=-oPoEC?D)yefalRz^^+)sdxX9;JWGW8=s~Mlx
z%0Xi?&{mB5FfZ(SL?fztp-9$$dMm$-g~0GXa=XmgSbbMe50q_1ZSYUOEiO*el$iTT
zJuy*e)QyhdksdXP;PGnUPlrYhKYnQN{tbBjgM49d;=J-XO*_SKySFr0fkSx-n}-nr
z9R03AYXGII_$WsM$(zo)(rPYB=CqpvieJ?@P_#z11Jkk-wJW@F&bt2xs86aS;j%%g
z3E8rmDeCAaMzq0+QYprLC8MKayvjc{4^o)2OLvcizjhv_Yh_5L>ic}uINGX@XdKOm
zcOB>Jx+)p@Th8?F`4a0Tx!Em8K+sl}(VRizk(g3fwfa*`B>llLrKt-yjtUfI{ZqwF
zN&7?h%jXXp3fA`(L5ci>*YtXClT0Wh6KE`^pFDwuei{^fnQ|~?L=aa#ic$YQxxzy>
z^e%_a+|P&owTb@PO1xN(`7Fxs(AubCC9~dfb=RNsq9)}VwL@kjr?;1O>O80N(gM$%
zg;BT8`ldsdQB3MxTuEBnfyGY^L!>wbI(4lQsqxRrugyaNeIekKpqGJ{5a|d9`j7wa
z$od{wNMI`GDN+%!+Q_|lOa}K19VRw|*k@|nwXJiyhn0o-EC(Y?9)qLzF7wHK&ep%S
zY4hgET$}mo<kQ^>^0lT$P%InH)0t^H^-G@V_eMi@+;P9HJhHK)xcV~w^y4(YcD6Fk
zZL>@ry~Ss@ZWr*S4`pmo+u158ymiu(3|LUg7WBzknUtT6*;yz!cfCO2^Zb1u;WR<#
zMHPVSjog>gA>mVQ)jtoeMHz|bkBzrp`&(8+c_SPZ<HbHl-lRwH$_UX5(4Klw7y%Ko
zo44Uu0o~#&)PN%ZI1R0!<LwWxZb6$Hr3UW<T8}S9pym+v4)iEaQS&~=0)Tsgi;e9m
z3P=TjorzGAG+6+Uk90>dI|I^Z)tOKJOITmRH{=|k=v8`)mYEJ-h~<_{BEq?SJN@KX
zz9N;?Q`wy|kY6mx@C4B~AO^5GSPthJ92D12oFM!%mhP3itidLzPcpTh2fDF6citQy
zKD9Vu(yO)7w<EwH#ywu+>Y$|51sPzZqI|2(Zp`s2RwAFx5ae;6+_-g$fB=L>1gt=f
zA5^+LfG=?X9=}G8`b$W6v-m)u34Pe;&5$G}O+5&;$jZu+CA3p==sJJVE;#N3iYU-W
zs~c1@K-eds2^s`lyc-c9PbBTSHmNuZ3M3K<fb25*tj5O0DWv^};CX<Uv^gs#<Hu)7
zTso*_y`MxQ{~L6}OTyE$N>i80dswz@Q2f>dmVg0RJ_dBy|7y?Kq1={+j*dKZY3aa#
zGeb)wAoh)o?;fu|BO0@Es)TxH5M<-NkI3FravJKxB7&~D$!Q2dl?%Kem@TT*2PNzc
z=q)HU#6WW8JwOx0IH$V|_OEbp^<X^{Mx=Hit4=Ct+~~Xg+37{gtV9R&+mZAw4&Oui
z0n*Yc1wgN@nTTYGK#;WSF)v|cV7M~{kn;&_?D$G0pWlh2zf*#axYJt(qFJmM&2ssQ
z*=vswD?xSw<I9k;PAm@t6U)R~9y3^C$?2wQqB;kFyc3cg#*1e<!_2!3isNp-etpC2
z;zd@C$JzQto-H4uzjDt7OIMk_rS0p`*~(qW6Bq+}5#(%$5uu(t$FDAdu1{$E3}l7q
z>FJTwcj%Ln9SHAVCM2vryXEP5tu^{_@ac`6z^piiv#`^pE{Q@2!__sTZ4~hZ1m0?a
ze{vP1@NqK_G=5<jf15Sr8eq9(ys~A7|7J-~*z3jD!iPCXz|M>nja7_|M5Je_W25Iy
zUlvQQZizr2KVRQtae2wBuQR^p3Gscq>iQn<aPT^DxsRNl>#V!mMU-QX^6u%KO#J}v
zm(6^!s7N*~X|`GjC~-^|?oT&ju%Ex%3|nvqa#fGnb|JnCcHIGjkKBd)Jg)b7Ah`-T
zv5{|MLC!dkc}tM5j4NZwM|}t}x3Ex-;l*wE3aefc#Mq94wun=5N&nnse}98^gjgZ_
zXm#rxSyV*0_PAwpOUuU#lvGq!MqDS{zjd@UH-C^JQBqW#Bg^1Az443gcSWA=;!_RZ
zrhFc(lL6Q#urkaU{700m#`CcDaM0Im<WTQnoN;F7H^O#QEcEj|T<wlJDuvx$?E(#-
zT(&w2!}qvncir=y*rD4ytO}bhlMj`U69Yv9()usO?b<RVgAx8rI`+ljB|Z*-pm1d%
z8zfR<pHT}tFA_oLBoF^)nixK2+?nQ(P{f~BU|Q&ml?iSN+$E|29C<*Qrct)T3)ff=
z>DLFz<7wl=qc0ODJy9A*Z#T+it0_I!807=#?Ip4APK&7?vWkYv#AQ`diqcooo_w72
zI4cW>dHMupo60&dF_D?_hzHqd2Gz=uUV))_Oqx|}x$O7%?OGy;aDTT~W?E-qgH!0}
z8PvPFt~nM=96H})e}7T2!gd^YG0k*X5&zs)78v$WbbP7b=IHRC4F5Bv6!X83n%bf=
z6a;62uOKppW|Ps0RQD_aI|LL&Wd?j=qw^=47NpPM!ULZ*@SAn?+RFJcv{;p_sW7Qa
z-{w!JE0qZmzmF(cOs|n#)KPog*4Q~@`(eEP9)6-7oW>oH`eF4_tGRz3Ot5w8d9KkB
z>FZX!d)1H<T&w?HpqV&OFx9p?KzIh5IaechC-LaVTkRWasDZW0nbYy2cRxuoidzex
zle!YAlZ~YiudyBkhOX9|I^KJK31}tDs0*stjAbuEnW}6+3tcCB65v?%bxCU?v11rm
ze}D0lV@v8u<6ttZa42gQ8W;RHlN5G8NDx|z<X?UvpGaRuoNGRB2hw=3R`J}X(r|b1
zIVs`$EJ-A`{&;^Wk=>x$8QRgrm}e>{kuoXtyzO4EqLhAc3^P){F)}vwI<^}<!$^*$
zTbuQhZ4owkwa|B5bFXeSF)1hHoiT&F6Xw*9j;e;d?!;9CqboJ|<?2MJNbCL_H&UNl
zZIA{O{rc{ru8rCS@zj$o=eJRk-+>J|d!K0q=#yf8?*PM1&&Y@wR#Q<s>t^$*+}e5|
zE4i*Aa;1<f-DRHJ+=Y!OJ8;DCN?W94Hp?uY3F{}T0XFMwf@Z#RjU^VFWO)DH558iI
zlq!~LxoUV9h9ZbGN6>O111C;UN0X?apQNBEBN2G6^Cc=+%}k0**yT%Bckq5%c4NAz
zI`!rP5WJ#*s!5bVMofrBghPsvS<E6blrfN1I^t^S+WVxIYYvEg4}(?PK2Pd>_c`pe
zwTnnC)=KMptjcerfAqsiX_qpUx1MmT|4pzeHQ#<tB26nHVTm;M!TVfehTicF^XA9I
z`!CZbs^Mx&Q&&0Y?by`sF7DR2iMR8`4bSYK<wO=XsSnR`jK;KucV#P|u<zqcPp%fH
zDVLnIYRoK1c;sicWef~qOV^1WSmkrAwC7BmR(DWJKphw18(k-de~)t#qeAa_eO)n2
zKil^-hdNg<RM~I`y{;7xV%Vu#*FUK6+}`K=e06Sq-hz)hOg#0uocRFSF5l@#Hx=VS
zgSnH<tlZb(sh-kH_aO|BAHBG6@%O1izLS&^<R#y@$)C<4)U|XvwTz{cashxB^>@Xf
zua?sriVe_Tt=r9-MN3?HuYrj=kBX|)P&{k%a&COUXRowl<3q<IY_{whu#d&*lQeu&
zH`$dIdOzqs;M?}~s<BXfjXz==^&s-lnw~S3r*UZV&|YoZPM3es2ZNgIT3RArVeMDB
z*ZU^J%xtLkr;DmzXa$IWpNOARnB-f`5>m!ur|HkqWN9a7ngxA}!Br{T!zfXT7Ye!=
z<C^SP=f2mD9?aL%ngh~aR^Ee{mv#@>Z<_^9)SVRk+GiEjP-Leg;%O_Ys`+AG2nQYR
z+w^k9QQED(TifyZY4f%1JQe{oub#<kIUl}o%8V`7O9Ow*le##DRzW|BX~>f<<qxW_
zc*cua8m@hXY+VkIR<M=~X>}P{w5sMeo-0@SwKLVW;ZlV#uH>}UMa`93>(Y%MZKc<g
z3EFVzR5CERSGUkxrD>_R-o|imYtjm!qufg~9?e{sG!hq6lKGcCfVXE>#>f;Nv)=PK
zuBLe4G9RES{V{@3zVzf5NQZu|8u2yvu{rk&h!Jyhb1c1Ts1s$~eps+B!uI0=`6gBs
zW8lx`X3o8DD<c*==4Xl>w`YTDbsu7Ut0@>qYRQP#-TE5+KI4@16aN1>eaA3wu_kTF
znzmN7T9h=`ys@%tgHD0g@UYA{$DmuTy;78rgUEq~5WtjJ9WG4d*Vk|ZkgT;AZYEHM
ztAU${o11%o6dcObghF_>m;g>?Dc*XK-XcS5M&_k~UL*bBhBCD0vqvoQ_BRRt`1CoZ
z>33ys51%V$E1Y*txWdWGDa3mHdeQiKNOBi-b8jv6%jlI`w^qDCClG)}UrMLTxP67i
zPP)Z$m|<TrH(UXyx)K)C6q6luyRN%ttz!`qJgiJ!fsewK{<gJ$?Xfl)y6dkO61mc)
zjYC3RD@)ofn5C+6qH?x^RH-d4F)|XTvg0w>5sM`SW9i!mQVgwEYuEA#j(NSyE&ia~
z#H^r`>uwE2`J^zt|K7E%nZ8YCyFX_0I_tM}svXtt3?t)O!nK?;`dsw9{$Boly`W+i
ziF>_Vc&LEosKt{QSggsunpDHOGm-19RsXUfcFCkRvRvoBUj5!x7OTwi^Ug%;i+#4z
zHnqk6{-lCoB>qBs#%;T{2X6-8Bckz;9?u{T$rClNsHBu|-KU;gg+r{MtW{%mwCppu
zYeYF^9!=_gw=Vo+2WZ%)@7VP1_PRaRP3Qv~&{-dLj=dWu%I`7RJLU9Jnv%|nyJvMH
zdB$#LZHxV_1>h#2UO|?9tF2Bx>Wf~nBpydWgQz;i)<f7kmy;M<!JD=%qup%X{(Ub6
zDM1UdGPsx)ry6{sr*N7i{+TnJWM8)3MWv}_{-Ky@dIc(RqiS*ZWlG9d$_#d{89lCz
zAu<nt{aBuFlwO@<4uxKy^Rx2uYQNY<KD-_tg+oWwi|OX(X2>l!(FN2ed+3QVXhZN7
zxV~nfI7sXjc8d0&)k(_26nv|+-_@Pb!5CYd6;z6xI85Ac`q65a7%cJ6$-HCol9?Pu
z+q8ytx4&Q7PdqBE{Mr`f^?g;ZR{Le7ADu`j6869$+stBiRDG!r_Yd<H?~C?r2nu66
zk<MP=v4ChZ-PNnZdF*vSc$^QDp}h{76gV9Cbv@8_^YHuB5yfcm2^@4`BlPYnTlxrL
zgva>Zw+0Y<LXv~0wFG!uzyYF~gW%$`)n4fH+~4*HUF6%I&*A*3^XYt{;*z<YT>nE%
z@Oy|bF<cAE_jdS}^hVGH&-_`!UJ6q^P<?TO(#@^c&29c(jL}_x`p7{c7hW4oGW)u1
z&6XL+ArU7jPD?<dLHKiC$^OpD*~*vmiQd3CL{55)Vw?ctY=~?$lM<d6{Q-ibB0wDj
zN$b1Q{qpynq0lB~%N-h`vQ^na*E?vuOvP)d0@V@+_i`KA!q52#3<QSxntK8R`Jm`6
ztq1hjfxJ>X!j01n<Kg4eDEbB*Iny{+;E82UM;|}(qGx2xpJsubd<=7r*|<cfZDU!V
z8rJTy0EUdcQV!oBO}WcHyfW(7E0cgxPMzkTS{9tl;BXc%?{}T`XUV;{T<ShvNpW;$
z4aEHx)6#qrBKMCVgge*42W@eipcjH1$8e!hVW$YX;C`R%rKKh4=0<*d3H*Q0AH5CR
z*!{P-M{A*ZwVVj*FvEpRHCoLr=?k0MDQP9#^L{{eVwD|vd~;bD8(i&v*LxNA6U#&S
zxi`%oo*>{=CntNsxg1?mT=LW%Z$*NE$c^gYLiOG18%acdaKT*Q5C}%R-sua|cg)^0
z(U$aAJe8fI6(vLLa|Hfk_jO&hRO9O#<?1yx#rDamdlNBRc2hO3oigV&?8aQCip^{?
zl_Go3f49@4c6st7w7w*as*(NXLX9+OX&}Mb9mqKg(1glgu9^jcZ)ixTt5()s;9$7a
z96<ery2~tNS`o#|G5eYo@X707F(T=*cY?$(>sPJ=t3hjBm78n^6A%3ZKxN>Z_oAfK
zK%dI2nR#1%f%V>9fGA>8b7;{!Wws+c*gBISi>i3j2j~;dCXhY{k-GP!N&+`l0#8w?
zfw;Z!S}kf0I!TD@`DdjE<ecg(EiDBXydJ6!5HbZlpY`-6F)3+3+!6%d;Os+Gy6r~Z
zO^V35`}6T34gA<P2P(7SY&d+KeZPET2C2p=Z7N=1K@&5d#W-j}8q4&(3~6U%Vp>kj
zY>QdU&-(}@sN7l@G<4%VLvXEOId*E3<+nlg3t~tj@2_>)cbVl`s-drYGmejmgKhv9
z!>;}f8m>nn3I3&;A6In9$iBmbJlr}o>q(*jG3lY)!kmK`7SzsVBk$K}mZz6JzOLAn
z4V`~C;>@++AEt>t5;>xf+z8CF8Hk>HAKA}Y*M0l+RLB_uQz=>y%-sR(2YRANy(X5r
zqETp-sk^6&&G9_*7Mm~9P7(C_TX;K9lgA8{+MA{lc7Em0@Q#%!BP}WlO>kF<+weO{
zt5U1xR8V&E9X6$Y(jY@O%q|GIDitZsuu@S`wN_OJ6%;tSxRkfL!S%e<2gp+waFi@v
z3|~#V)bP<_Ym;YexRP(OcTx;<@!s-;Z2%sg7c>xXzPXF&|03GDG3L2vdLW!~D9`j2
z)4_uPcfxCTV*hIT(`7wX8<aH%b|eHiKDGNNQ?lkh6q({1JWpnS+fnxWR&5g#V^g&j
zk=qo%JGvBWEBE}@LB;d?!Qsq)7uzGKf@z^rJW5gL@KzhdT}Z!oymazfjl!6t2`|^D
z^<KGUcDe2=iB4aiD=#;w8aaqO)1T`aQ~EMk_j+Vv`Dkk)0h{fssoM=v-b=bHLB~&=
z>dByi0--)@*O;VyCvpsROXZK^j2x^F`z##f>b~@)KP^5-ZWsp_;fQpu8Y@Qs{T#Yf
zLF{c1wo|#ON?1}<j-eW-x)cQxzxj@=02jDplalWb3`6`j{^gbN4Q|O!n&I@w@7eNs
z`c=ioXSXw+EKnz_-7pd%`M|NoI=Ud^nm?<ul9_iWhvM*g7-mM>*@<Gar%Yqk^i@2v
z_=ZoZv0zTBnsmi)_#9VZZU7Q3LY+UvU98r1-7f7{LMau|?g!>=edIZF>cww20_VKn
z53cmL6heE#UNs|2!k&ibkx-8OM&q1|c8VSL8pC9i384YM*<PVyws9iQAz5vIJ_R)<
z%DGRzIh=B??I}N-$E*zNZo+`j_4~vfrjWZF9cg{{Ud^NPtO&IK#PreKEP$xZ&x7lQ
z`vAj6TwH?>p7rU<H*R=4R12&LNa@d6v(6b8p?GMeVF~@qL18~fuH<BTz)Mq=x`5<Y
zNq04;3#*+W4T9FpSPa%`2Wfzd7cSh;N#T#p2d7j>cTppX)2QC0B?#`usYSU<_M@e;
z5`zrR{*QPK4gfq-R~Y#$eoZQ=0}Bc3v3Iw-HDUMMIKElk_GHN8@uX~NYN(DZ#_!8J
z0!P4UrHJ;HoSuSyfUu7XHH3IzIaP3HISYwrF2?qe*oB0a3yqHyMLmiz%Kg!Vt_~FS
z+GjS-T<T{1{#4yswvD+$PhQP^!YQ@s$@Sa3Vao{(9s#sA{4}<PWjL3Co!OHf8Iono
z9$%1tA@Y6J%|H`$OYB76$doy2x)3n)Qis9^oYnJFGkx={OS@9*-9@a2^0L2W=w!<-
zLK)4&1XjH4cNscHuadGCW6%>jHv_VVRp(T#@#Del#Y2l#yvXIy9|kSgR7b3>GcaQL
zSS@Ac7z>v&pb#qQ$vV)#vchARMgn*+&6twr$b!vCYYVd0TnecZ=n;<%9pTHQx9Cva
znqZ#rqUY0Dp|mNtYiultcVI?$=eB8J>iGmd4E^(&?bFrzm@si!*Dz&V_IHZ>L$OF~
z-;aI~X1LXsx^#1n%>$@o@xYpDt$rpdqgH16)>=1Eso|UZk6jt1(dHGt)8@0DA~u_&
z1Shw*V@LF)eQM1I-r9J&sJ&7Xwr4w$>1D-R<_3%v#GxC^eGy~D1@P@)>v+r|O~)hW
zR0|HhY^tFICnb-q#blioIVs*g4)Ue3GMg7sA2z9<DCrd6eloAmc241WPh`dYRw|3E
zkfE{x9`v%NUsqxMe%m$qs;JQ`k|BJ?+ZikN9TJBAP~~Ri)XArO{h)OD047jsw;p<H
z5=gj08(SBSm~6tc)m|;3kxn`Bvgi_>JL~gHWPjPEq&GOH&Iy%*y?cAK+2e^nGnAq5
zGG$5)Jy~ExxK*LB>0Nd?(0iq~P$TAkvJpdvI|4?CQQ^#1mV9EDIg(CUagMtT`10}l
zm;C@uxjFrgLTK_M`^@1Cd4@Bn8%k;4MlCCm$)J4M#V}3z{8@xuwyGB<hr22_1IjyN
z(^$mzw!d@=34O{&kr&czcNIU^)!G)^*3)Z_j<=k$Ua8%H`X!`ML6E$4XbC^@&=*xc
z6{R`g?v}Eqf2F$j?i%Br8?hZ(C%f}5M*@SO@RX$K#d8MYHlpqsderBZO&gIMjHjBJ
z4C`yu_d&}|lXGhHY5d>7<<Fh3U={AG1;Tz%_27=^{(U;3?vX<Cvn5=2rp3JCdfuRQ
zyZRP1I-=SR)GgJTR07*{P^)Qp)UTKx+MKGUToEsz?b!Ke9#ilvXGB-zGstsA98|_O
zmbCn-u9y!L80ZOqK^#L!K5HI72-onL8a!{qCo9z;xY(UF8s5Dr`7<ud#;ep9)co8_
z*gX_2aB>8l&Z@Kk5%C@tx+1|?al>tDLz6?9D#pM$<>8UjZkGsESq|l`iHhklLMZ10
z2Ovn*n)Gbq)h{K*YtQz!moqIF;vUG5XM=4YYkr+cc5Sv$dMPOA!tyQto@PeuCEf*h
zK*&J(bB43whl%Z^9Y3?S3awwCcv<o7*Ai`>>T0)>@fWPVJJ^lR+^goH;`3<>ma-1q
z0Px5Yc!r~2^^RY5RyV9$%I?m+&yU(deUJ4RV)o8?q|%L(x1ib<dBb>c^hX0$TBe7O
z5B0A1bmQw|fx3LV8*8OJNq57LEo6zkrKxZ3P#$z;newb6-bO99T}FlXfxBr`fVXSk
zd4WhXt0L_!3u6v@C%Ck;i^`|_Ia&7yyZ)N6CEQu5xsd&;qec`{^otJ(Mb?uUgoT#7
zk91IJ;yU#s6jsK((h$D1sTz0fyXG<s2-YigKQR4f-nrPSAyk%=(10($PMGLWK6ib|
z1Khxt$Ews7D_5kmCE5x*T;?dO+8tUjL`=~T%=G6mu8ibo56Q6(EWdm$d7MwA%_3M$
zqR(O7zm<6~&p22u5~{1sgVmHf16|(XnyZ_8luU23&a0BwnxJ!f{U58klc*wN0nEz;
z-%^A|k+k;>52QX~d95Pumb7K?GI=g$!%K6X8XZzF8;r$2nd_H8y|NdC7&Sk!L;fl5
zjReYK-A^<M`#WUGh?k7kZhZM7RsUY%M6+HQznNt*OS?~>E3nPCYaDzB$-PJ{w`H;E
z`G&_9RH0$IYtK}&@iO1iccg6f+e}#5#xAgBO%z5>&o}c}rp__dxULzVp!`Gv3xl}e
zfI0In>EWx{@IP^(hBmHZ;LVp|c0eMeR6E@&#lX3AvE2IwN}+#TRR){y%2+h^0l^1$
zO7^t0Z(T#2A0nvXRU75$#$IMuru8rJe@=DEAN@X7(t2%H=hX;%g7QzBjDtmVr|O*M
z(=~|K>{tX>gGe&AD#~1sQJ?GUd+v93d?Zt9`h-92pbNJys<_A8Y-+msVpws*Wi82{
zQ+dp<?P3x(bD3fJs@4^$(sPMJ@#@jVzfdn6*5O<&Wo5Y5a~&U^*pv6nN-{T(rNh@5
z8M#rOMumx^Zt3@_V@G(l<CS!ax!L)N(XpkVA!_RcKGEJjTN&4hjS*it<o3isHO_VQ
zo-mt7b&J<BF8O+8S|}E^&m}7A)F#__&?E}ak`-R<LgMjX=9CM&l)vIr#C(R2?l&oX
zz0X-p&PXS4%M54v{F?ka=iq&yyq=Yx%7d=xK-x3cGQWY+=-|PIe@^!ZGqfZ65pX&N
zQn}yWcSW;ZeOtox=tU|U{4&WAPr&IwdA~gU17RTnuKe9YUGfP0egxD1xnRCx_wg)W
zuU?(<bb_d!I>96ym8m4MJ@A9C*JFE`59q<*b663!hF_GiRthfP(e#2=IZ#`lsd%sS
zc=FE4;r{hnPHBJeq0|~bmg|KX#PST06mpsQ*Xr2g!OJmoLNwXrzz^ACXAQLM)ZASA
zz2CUb4_wRV5*)IEP?4bcsUFH_-FG^s28#d#8$GN6r%tzAZ4PppXESXEZSB_cJ6%eb
z66<%M=de-5Pb~2QWe<grVU3WaOpA6({;GZ^V=Kki_TCG~P87s0jSk>z-5o{a4xwq@
zpd&ZO9@P9gOvvdLO9D<5RO(OFx|L{V1&3X)_O}Pp3j}#2o!>O0`<%{51e|h%Y~_T#
ztF?8Gg$NSvB$Z;*fb`bqUaG0qIe?E`#z=8cQRSis7k$OjiB<U18vvKz?{cKUdm@=u
zphy)Fn@RfD0)s<!470UBz>t8Q;;B|}pJfswd!6oAGGva9V<grHeK7fi{`TBhp5-CN
z9bDwIcyKJa3F^xBYx@QCA||L}WT)~Jmr&8aw%6~c;t;*NYcUpT5UcjET<24K)eg=X
z5ea0c(@P>=El2$&ueUlR6K-AO*IeH__;Z=PCs_LJ{Qca3NuF5f=~NM?+Jby9T79?E
zg>t|AA~HQOhjK%F3=bD_2l;Yg39hwRuJlaS-+|xH-RpOgq=y>a7QaPZBq}egKVlep
zO$vD|bAp(mx}m*#fy<>$SNB>z#<6n`+@`!ar`O)h={4A_Sj->$gj&uV5_;_^_ve6$
zacOie=jRL?ur;XFh}_rsIZt9q_c2#}v(d|_n#J3~JSikW!w0=3^ehV5XXY|mBqD5v
zde`GeUg~)441VT%<^4T2Y?6TSpNaZ4);0#{W@ySWnHZekdpA!}=Vd*9r523U03-9r
zpCttUlJ;{a{YcJOHSV_kc)hb&HCly5=k-Z{e0~KEH&C|kmq7tRQ8x!WQdtJ&Fwm#t
zJ+uQbG=#l_wA2P5!+i+#&o=vYxS1(2Ua)0Or#a*+E;-Mk+wWI0BRg~h3!S*?5bH2w
z4u;r;ng4renr)keFy+cr<xb-~fltFEfJ{+9Q>KXK^f4?D&R43L&up+Cx=(@70sQeP
zbIkX?&cO{LowWf-#1>V?c&Qai{K2l#tn(`LK3H+#58iZ6|A~$KI_!x3kM+HHbxbRo
z2NO1GXJ;qW^C&Ct7Wd02os&~g*veTzl87pXm|Z_)r|K*A_yfos<cqY*%UDp>_sT80
z3;XN+8?;(p+D-lVeEu->G&S!#0cW__UB7(TNbp$Q7>;oNW5yp7-KkzF(p)1Wg;tBs
zfvWrn{08a2)wnnsv+grFkb<P*HhC0b3hlz+H(Kd(<f-0}g)Fh?)~o_9F=y?%xU+Mq
zYBwyCSP~8P*Af;Ezc<LCR(N|D5yth#WxxD`i76@R71uSsqxKKg27IkP<&VBaN7F9^
zLcU-VvXGk7#XyLFUVyxcP)?Ai-wxD1CDOWWiI%*pc=i<@@19+_6z?42eLwh|@KBce
z>3L9g05J%pH-ZneIFL32qh|!-22c!<3oMqP5OXs#s_o}Yip!IAHPpF|a9>Ez0eK~z
z*%}J1pt(W-P+Q+;{eafmd?fLc(EHfnP1ZoKO<`R*m{-?Hw*@Hd3z4h;8GZa^h`|Sz
z6BG7gV_v$~zW2O-;v)}%Jy7tVOrp~&Gv55P+IcQ$cQazupV1j7h}wqYwaUATPza+_
z?YxwyQ$m(K5ZH`M$`qZcg2cORs$xFhSiUKJ7EAz;K)eV-+CY}=lPTcn4{T22aX1+5
zTeOD8zx3EyZm9cwwIKH3`4!=so{}GYmC#=VGA)PT{ep|A5H2Id5fTOXsXMe$B(uwd
zR<xgj4Ks6#9z3Mp1LR8-;7*_?X1)FiK$cl|CSEtX{)pCd{l-Q5Dvw=z#Vd(WeFfzF
zWYLgVja!R7$+{Q_^<7=G;q;R8f!&JH(Y_X7p4+BNIk^Qqhoc#m*(q5E-**$CZV&Mu
zcrtW_;=4dtLrhCGz2F<*M;-)WnSWnjh|}RKW=8a`J0tkXZZ%5rIALylJ$bl#M9@p>
zJz$w5nj0X&G4u*L>u7o{tJ4OzK~Z2&=Jnh`>mqF=uesEp=`lg6jDUrX#67~+$<OPZ
z{+ckoa@%aN<jJy!f#uDk%cTyeqer3pg@bMj0z6mBsub5VJ<2?xASuCZo~i|}%tGm4
zf1CU&FSR~wl{V{vwn({W>dPtA(U+DTkt9nWZDh(6Al0DDasd5MgsNe8L-B{TTR5Z;
z)}M0L_k>Z*khRc|<B9;V9jPPex~dOV6(}D@n~CbOQMQX}*VEOj03<wU`7-IT24J8y
zaBHAHt!RtFHmSUye0=Ux$hZ4w^xq`Q7_V@c0>+i|5Y$%XfvD?+|JZEq-?d|Tn7Te*
z_P#7{iLvdcN-XP@)ZetIGlCxN9Avg3kn8-$&-5X?9;Cvh>!=sARp;3d>rjtb@S}{S
zZgWT^5N#}9KxczOI^^y*g*y`7^LSz8UA3UN&-S^_t8>?>qd`(?ZZ1D@6XmQBJh^4y
zvXEkBQFZQRNcA<tl0C*l_w_t2eMivj(M{Lpmcu3pX)ww58)<m(B<Na!UWL*}@fpdM
zlZ3R_vN}9V6yY8|9YQ1c6>!uw0JlvF_s3ocZPh+&gZ=aaBE8H9pMsUIZ8XDAFyfFe
zUu-X)sCHS=jkhd7=e?Y<&Q?%ZQ7yP$MrAN!%isBZNI8#C^qbg=eru*6W7Z@qnmOd{
z{;`yFD%n_wv6&n}7Y(hqWo)@ifn-l=cYt}iORs9%Qx~^E^=nQt=g0>-Y)vW9uS}xw
zDb&>Z@HEvRUxR~IX<U6*EU6RU^`q7yk<iA_GwNcK#qrpcH5$>xOYR!FbqO!pQ5=U^
z_Y=*zKQH@Tj0|+On<{2*GwZhMNq^3FxEMyCFSjK4HQuLS)04U~?@S_QDD}e_7IWQK
zMNF=2Hhn)#Ur;ZG8Bni7*;WqZn0JC4SVzAB=*WhZJ?lBQ%tl-cP_FrLax$j@lIN@n
z3D<Pkl)Rx&XxqXt*%}B~t49J2ZT!`(he}%PYRY^Qde>i~1G3YUx}~n%yV?JK`-%c_
zHylKpGcgAT4Mzvv!7p<#2(egS`4$J4kv%+IQJ?mh9r|^{AtvVm@w-l^g}FIhldsps
z+(d0h#V=je2a+I7v}yq=Gn78Uysixr8vXs%_de(3v3RlO{^eUUY7=t2lke#W6Wi<7
z*oHzYVjMrQ43R6WoJ?$EYeToIRzKJ-Tu3D7vwiY9j80#4!N_IAEQT?kk?!~-md-El
znuHS+vmy%YoPJDLIQMMeGa6^4rO^mE-^Avy1<;x`u<4d_F5QeT#_@>f&mq$HS<cR6
zb+*h{Wc#S9_sLR2uH|y%={?Y$vB^AV7mynF7F2;G&rW33jYi)h>l|3^O${6>91yXd
ztk~D8z_X!#s>O<xt-+!(k}gl#A^{>c28x%ozGj%m+ng2XJRGWbpzeS|uo`HUPB4!M
z5j1$$HJ9Fz1skd)x_7&iO6$=;oat(qzdIJaf$_&T{*dD6yDl_GHsvyAcXh(~`RXEY
zDfabB4;86gGks#^ctf{@&3^penXhpKcxT4k6}p1%YF4gnt=!|>r^{Z!3zkz{YVYXa
z9m-a(E55zes}{KRQJpQ=Ej}w#mp;#!kq@zy*?7(7(wAl#Gt>78nx&)|XDhE9=f|=3
z{Ya8Az{CaewJNoo>scW;=c1+pPuf%bP&K1teU6~iiDi&EsIVTCBNm%+?%W=ViP$HN
z@;(*q;T9`m<5&?jF!0DmN)VtZSIAtjGH2I0lSvF@hz0Q@Epq2`=wnn1%oy)Iyp(W1
zCA>VFC{2w;S#XYwK+J4z#m2D8Jd|xKyNm_$Cef+VW<Rw1KA^3sQw=)uHCL8X9~5L!
z`#aCf%tUG;9HGE7>3e-DS&f*ZT0n<U)$P*2jl`2#o(dI@+HX;6cyIM02hVe6ocf=$
z?5hm!m&}vr*o5a^Zk?+K;)^uWY{?N-DxY)MT%hdIIxfIiwwPMv-98AwCe9#P-Gd5g
z0>skoV9J#DY;2f+=8jmz(hHh!6PVm_#S4F%Oi$KCuaIp}!iTHNEhlw8h->E)zlM0q
zLiWNrH|AtD44INc*aKJEVl?tuCZ%<*3wH1Y^WD&MDu_Itop?TooSJ~FY+z_iy0Q0*
z9QFZGpA>r2jLDPbDyqigbC~&Ph0JRiDTa`p7^#94_tP{2&!VEte<Z2Zd223x6eQ7L
z?MGcN<+U}{QJ8VAr&saAE~R~-#uDO+Yj>wGkOxhkF%TiLzpL%%5U2M$AH06)*-TeZ
z*|&GAs{H9qbFPjl4U=toh7I-5=uCTaealV7Z1ZA{%kg3LYj#zsVJ{J;!5Yt55=taW
z#l)!`7vz_p<}y=9a`pF^KQ*EEFRJOZG9M&+v@(l~MRUt_%az#LyP6JVO>^2?wla6N
z0$J63q{O%&=8KNb9fly&{hFwSCuriVGnja*Mt57tTk9;pvoNw$SoKRQ!<b3%+E9j7
zj_E^UJ)^`5kFw7c3b;bh^lRgju}-f&FHvJJ<Frf8d|`GxJ<U>;b2DgvTSM=nrOC5l
zqj5-(r4X2Jf9FWtR$v3LQDqggOJ62#+tNO<dxKdl+igme5Zg%S5H2@7^S(6Mm^<fw
zBu#|ot@z}XeW-mQ%kR;nB&@MXNq73`Taal&1xJQ8nJk{d^m|37Lb8FBYJ+mla#%NY
zl6Qq(jZ1!%e$VyN7l!Uu(~W*0$mTcPI6~Nq{|H<YqIpcIQ9|yHHUEzYBOskM$;&a1
zTXZO+w53_NiCsab=LVarTMKgt|6!jF-j3MMt;UZTv$f*nPtcwFRxe_uOCo`<h53a~
zG*4rK;Nfbf>WjBO&hadhr}FNO;f@!d3T1uSaH`-9BT*Iu=6+K#h4<hO%KUWW@nX$@
z!KRyb-oUR0wqnxY8BcSe?-##TQN3(vjZ6})IJFjjK-5kYD=&o>3*V6l&Js3#h1iA1
z*fjPYaV=WWeIyIcW`W;KoC9Iz)ip5=KE9<UJ^O7nQt{==HJVDrWSREs3Ob8K`20AD
zM7LiTslsIkFUTNgcQ##$wKLbUpkgSHkIC02UF$$~^y8iT{wyy~*gLBJlZ0W75cB3w
z2Lc;oYt-4uSjxz==UNh_*!u9h>R=puu+L7%roZA!=WAKLY{k#$FfzA^>7)T6T0kT4
zb7~+A17(BP<HmCFNOQVy8Cum7>22UB+Vmv(bq^Xmy(_4M@TPv<OE^wI^|>@OoaR6<
zW-fcDQa0<<Cgn3&6|vhmH19LmZ{x>f**GfAbz}qw4?k0-_Z7Q|P4?ImE(qSG8n?}P
z>9>%~S%H4y(4Oq7&*6`L<?9B$vM<`xRm^X4%3J)l$sd95VK$a0%H(C!Tpq2Re$=ev
z>7YklU(x&yM&h?l+5?^00EWr<(l&1JrbuQsZH;8|N+#e240x8byKp7qh3c2oLb^HQ
zQ5z6|piysy@$r9A8Ci2++UBl5uP3Z>^x)JMo|&D0!o62=BJ4|wX<^pYE-z%KnXycF
z8O0Vqvu(Q%kbzELeErKUgD6h6Vew;reIz~JkDHn0@n3lV4Z!%_Ar~m_2Ol|3i>92j
z<K5v@eZzHzx4JVlt8sVE3Cth|pI)|c$wm92ZftRy-XhtBpX8iyoTsDpH{<)y{5{RT
z7B?vZUtnD4Zj|KlTkn&<WIVaMxpQ<bqqMbIc;Yrn^Q!}q{dwTCT}+al;+MZLg2pXJ
z+g{RJd~_nt@V683^E-M4Iv=e-A5lS0(PwUs?r&;+ido8nV=^Aed^q6Jhoz-s#}2hk
zMgh6yy<h=PN5(06<`aNH{ay|@{j%6-POH_ey4hz3ebpNCD@WfY9P=1oN6Pb?F&?x|
zmlKQ8m12&D=dH_5m6HjNpp)-qUi~9<y-9qha;4m-yhq2A>vIR|`%aP>3YvF)-?pFV
zKFyYD3*k~i#uA6EUnN-nro5*}QZF?%|Fo-%tbH1e4JvAuC+_M04hjLU(TY|jt-0Ol
zRD1X+COs3S+!$U5BX4oDL!~Lk@1-=O$$e+xMTn9ytK3$jv!WNX-bg&gEuST^-!b^c
zM^6@h>o;lTr?0ARi;*vC#qiDYC{D==w|b;Mhv6(R3oA}qTpmG_f8SnMg|L|&E3V4L
z=2kYkRe;0<^<|Z0B}F2-nB7pd;2#6~%kd?0#PGU5M2%i{+3@=k$|3{l`w{eBtd|W>
zC0iH-l1fT}Ft<xs4|JmY#GaHe#}-T0ED~kpIZqjmbN%lEaASo+bxNj(D!<v=izDa|
z5|ih7-0g&HyO)MOn&8I=Z3sD0!m|?Kirwq-$>i7yH<o|z60WF|MN06;hG32JZI8Em
z`d&FjKO%gPh3|c3!^L)#Iqe8!!`tw7Bb+4QLGzde<8J`5I6>|JB%}@_+RKmsclO~z
z*q@~#wF`L?suOQjXi}mXR(3{0sQB94Ent%Bw>zF^IF9UOdINyHbfqsw*F3IBpREL+
z;S{;upCfwaTfSFLyEj|Q&@{<Cw<xm+^KR`Xr{`STuE=kO?Os<!4mRr&M%@c*su1JL
zv<|Xu=5}qyX_iQE@b4fa9II4c*H*#X*>U4_o|4s*`TR0PS%KNMiG|`UzrXUd0DQqR
z+z4Q?V{sYEU{Bz&_{}u?`7Fr-UkQAa?q(BOo~KwiW4=(uN>nK~qLjTq-&wvS0HHGZ
zifv$ht>`JjD)SE=%II(@_E*}77R3MGBTQ$49aj+dq2ZF3g@-w6IRJL&x9=DHS>9&^
zf6#j22j=PnVxZ+qIif!@XrmnUVTJ#5a;^;9hddcWuRIP7%{lMWA!E6cQo`IMh0ILZ
z&zZT3p=BS+!Su~m4k{vd<nG@3<LrGUzEfQ?!;UL|+T2w^(7d%my1z`WZ$HmchIRx!
zx7l|Gu7s?c$PNEYZ?SnK;tSY=a6^w(>_1-U3`QV-Vp%hX;H=2Zm_P-}T{rZKaJ2WY
zWgrqmvW_>*P_2I<q*}g{nCF9VJ)=|qy+%k#_z2i^SH~!xC)w54?R0YojF!piN0oWw
zUUkB0sxiNb%r6zbWxP=?BmcXnK#r7;P?3%1xoHve$4Wg47YiLL;Bbz*{Q=f#ZFgl`
zAYC_~qibNUX8!)*CV~fxCEdhq%P4KeI+rnEKDGLZQ&~2;_$DVo$lrGRuUC8{-Z)pj
zAUSfnTAw4r^ASs!vg|lXzuQvR$SrQo6Uf1q%<~;H#gET-S<u<kA~dX<n1ZYis`wn$
zVJL;Ja&)l@J@vn~;?LKN_Z`X@|M++*I%d)7_Mj<;qFUJ4T+qZTpYZMz>Ob)+tc%YY
z{JY>LGBRwaadZ4J+7Y+oq~%>bWBj_GH1ECO<zg26H!6Q_^ScOg-YM7{|KkzMy{TRP
ze8CmtcK<Q&tjZJPkXNBoS;oBV3LC-)|6ID->8V#vH`_;_3-Qs87Vk_Cj_q?yzT#(l
z>x88n%Tt3D>-Ai5>4_}WA4|;xMo#c-ajH<pUi60DxLDo&F{*8M+fMDW>tky_n%`Aw
zNI!u|K_?<NX*fh1a&8X&y4#;NhqG%-UG~pgl-s|EyR+HXd408=SB4UBPv}ec{sv&v
zKs}wX?`~_$iQDZmK<w`=`bNFG(X~XUjzcnO+Iei4RpDg>(R5U#%ASGC=OepVswBnA
zbDvgt#|?>F9|G|n@)T_u;}I(=taEjWpy_^XGG)g%V6ecj_U^%T!ARU8vYO3j7P0h^
z;FOS1!b;Q8V4onQ9f#~MXgsb#aN6D8j{o)o4->LKQt;O`^?QwOtrGg(A$#Xy=FnMG
zs!TwZp)PJ#6EmT;5_2~6>a>kQZT!Ak@@W7AQAnvm8B3tU2azn<&g#4Tg~>mRCRknh
z3cNcb8fdEa&bQ8#^<T9?xl?Vx4rC2$yp-r!?7Y+m0754u?*QKfMncxL-L80K3;g@-
znVx-oXB`)<wrDUlSi7PovyxaYEhf(Bkm+9^!wa5IG3A}=b2aCBo35@_7g{MMYWXDT
z<QFW-wq*~fD(-jPvXe_xfPDoJUNq#0fof-4rprMAVl(4BP$1ZLXL$S~><%JL%v$om
z!S>h22=_wA-s35HKzvQBJ!`PQalba7_*MAne|@3~|6Gk8;nY}~=EVIqbvY-li=zXm
zy#zBoQrq`=idMxcFfO@Eul}NgR!l&%a*=#zte+Q{$|QW!i(R(HZQ`snOeI&BF?6Z1
z{b6X-1fdX5)T#l6!i=MB)0mauCnqZ`A|$42qpA^{nPhsKC#Umjqq!^OsN!h-``8!8
zk)<)+S4M~n=Z8b`q0YnA-MyOIm>e)9)SY$64zp=n4W(i2j^&ReAof{h6q7$Ty_A!9
z^w5p%bpE9}a8jRP_PT`*u~;c(*7WS~aZuQp40rQ;_6uzbl-xa2Kl0VZx?Tu)1azKQ
zj*d?DSw^`5j7;m_?VQyIgjde$?~f(AGSRNv>ZD!OdxQSCS$%~BuB1>gNFZ;2*9X+W
zxfl=Vr7YH*IwOKoBI)84-5gCdre`a7n&;Kh*|~hWJXWMnadQ@@-w4@{bv?PK-g#($
z)J<zl;Qhfq;Vd!sWRS!GkN-}7^wlwy2GK1oZ%m^#-D1;W%gud{P3rQZmXmum<7V4k
z3B~pUHVuZEgng|u1*q%aGS6H-T3F#7D3r9EQaT<MdUdQ(lqQ4$qwwljyc>Z-fu0CF
zvAS24v)p!PGh?~MyM$4JN_L7l7|J*B@GMghwLF05^CW;JWet(sYkpuka%jsUaTJlb
z-=@bDb^6hv+w9R?^9=E~Y-)GDbpbw}pjvX7*3Zq%#E(7wa@CYWti7!_R#Q>dCYie3
z6l>!=!cQyuc~a-a;Td8{3=ZXWC{mAM&cj%ajl*Mw_<=CZm{>sOg))FjAQsk4h=SUS
zNQm!^E0V~OG{J=<S!AfZdIHXyqHjgNW9q^icoZ$>ZB)S9&yCFRH<g%(q@IX}3$R;F
zOiZ@QASuzZ@?`U;ZxO@-CWZT>00CGv0Zn*-smT2RND3&?3309^nmuEksB>z9ZGz>e
zVRJS2o_qCL9U16Xotak2olh5y=Y}GQ6_?D642q9YmPr0zGRAi@sC~DSpX-c6i=USO
z{J(H|l~srG+IZ=<3cMLf;Kt&7^DF^hi6ISfR6o)`16}OP61QlO%gl^?I=`~G{_FTv
zxcjtWI7AQo&cRbdkJ+H4yKGu+{&5-o@{h8TFdwn7E#kM^T_EDegf{0@RqU6E`3p}T
zzX8m5@*a=uN!0^_#H)HfJU<h-QY6!z<u~<z5-x%+O|NxEahYvgL%fm)<gZ3-sRDT(
z+9?YEbPcX!x^oT+=OjK<tsU8ao{W&snIn!lluLa|;YN<nH4Gnz@<%LB7vAf@wC9QG
z>whT_88unp5{!Hu(F;}(W>su0(VcP-8AO<f;}(@exeNz0azD2q!_c;kdj#`FrbxFQ
z%OUJVsrY;dM_t#?WNnLsd*yZf^O-wB@osJ%hXtimH^v3v4~@h~t0UR7#nM_#aC`6_
z$}#Q;{CogwW2{}WBp5#oEV;`>-#Vk>>*X&iKs|=aV_#9NOH53XQcKrqe>xcHjPSQs
z@B2964W=(N#^#?qAq8(s*NmyKf0~<l;t%KHugh9Y6&nXdp%J|Er<3yQ_e3TbZ_pP`
zr2m??pOg3RFU&c|ZndQZ_5P;s!$5y6A2MWdcCl!l=A@tT{~yi)@}m?voq~=!_vjx{
z$loJ-3?mCTgNB&ne;)eRk5DHtl#(Fk0UrlG&dJj>>}np=|K~|!{*;iD+^mM+!;lVg
z$$mZfWS*aK5BL`UsA7VTfF!qt9O?7=i?f5K(f>Ie>iRGn<hx~aUH>_z$3*aJ;;-V|
z3jdme-+#$k0FxE;ebn(^vHrh4M)EQI8pkd93==FM%+4QQ$hCaA%v!wcpd;(=NB;hf
zUJ`!&s8;0^>Ax4?@8A0cu^H!AR<y>$MNo-9kdr{YDskKMk57P2rSBK-!SmpHq;1=D
zz9r(|{Kr7j>BXXp)wP#?x|jcVWgbw{DNxmtbNuI-7E4mc0+s_F+t0iI|2|!89nSp2
ziWJ8G{A3(-5KNKUt#s6XP5}{)A<V(LX6awtoIfVQPmLJ18*833ST9C0?b`brN1@ja
ze{3qhXxDf%+0hSZ{#2n+138;!G~X?4?K<~+N=l&(ejup{C7r!fs>^@A(PI^4x%c02
z+hVa+HbR=0TzOz7<>}>Rz>=W0e8E}h_|zs;F31F*De~A|J=RG!jauLANtVDEMIT(~
z4hMD0Zbb8+*Ya7zEqx%>Tg2as5`Sr(l=T^sp{s?A+kZ}w<TGT8xEGya#f+4v6B62o
zH2EI%+B1OM9e6zBcbW*G%mxDoa{4y@ERaWs;*tBbUuoQ+;HaQ#KE~(Zv(aII5Y)m$
zW2h?cgMDi*xPc(QwPzzM^5>KjGZ?!;>BvRP%2RMxw#gf>)t@pD5*3|XIQC^H&V)uz
zDR^@vmKAu}D@}ofQ24k6B*|JJsk^R>@<D9^B;et0(v?AKLCuIk>O2rep{A&>KYnl6
zU>B+@&CJa&>y>xdSGX<@$g(_#Lc=!T%x?lNro$cu)d3KSl~{1<6sG|(7eG1CUhd}g
ztA?C;>lu)<;B%aP2eS5B{T)C)j7~_fALx!3b_Hnx$ch6Kp{Hyha(Tjj7o5+pqc(*s
z#A<v%FXf|-HS#hvkRg|f7r2{}QV=s}2&qp<e!7L!LOBoc2V~{s`tAesA|pJS_&p*}
z2<`xNnEl7fnNU>g98g>%Zwmo<2e8^9Ogt3Di$TrBJ@Sc|$+4D{o%v_Xf1VhXR;Ws^
zALiYplBSC-4mLV>8PHHE3KiYC{EEq(e)PSp!k|wRpfJqpFj2jYh|EJ(0(tz_vN|7B
zHM|sm35jFXc1U`wzP?fR<jH%Ve$)ZzG$3*gAbf)ec;@t4M}mK=s;=(TI_0q@qF93<
z-^=7>>Ss0p=0u6DLv0VzP{7g2N#m$Tf)MJTyc&S^0d;zjYkN>ln$_p|t!5wLn`|v2
zR9DN@s(BkI6VfA=-egZr`Zf;)&0_lrA#8dLmHPu(TD2M*s5xEh*&J5^nuJTNO4WBh
zz5yO*Q&!wHx8nJ7$eC^=*fIZUjETD7a5wD@-m=A^Td(k)_hNgKrJbA*20RJ#5-7+L
z+mP|+B>#%iDUzBqSYCvEkiYa1f(Bgx$SEq-&th*o7pQUG8;IsF@SV9TLyL=xi?_mZ
zLG^}03k5k^{e$Y2Y;r6_`*ZLxHB7WvHy@|~s5G_Q+n04qZ<?yOXQTuo3FT#S3w7x<
zrr6w~y>-`ZEh8@t)td&YbzT5-<2BSn>kh+<SA|s#A*(c~_A*wESVKYcc#m=L2|0ER
zb~USHxtHq6-@^k<@~D%GRj^Z-Eg(DGG5LR%9dLUepHBpvsyx@gSczduGo{kI;x!>+
z^LUbnK<3C9zHPyIUTO>A+6=lGNC~9l&fwv=moN1sKOAN2%dE4k2Z0c&V?YAQ!9Gv!
zsos}TR6Tci@O@BPCkT(&5Gv8yI%`3+B*dSNoMIpu3R@&fdNouOP$9c3V_Id_8X|*D
zQ-gdudUsnP>{GVm<v4(v3W2`yHA=?&tjBV=a@8&l-ZWhw<7Jh5hz`zZWwXzHH_!M&
zpCpMJJk<ZS>^N7!)_vRw;-ZB><wDY(G!rzq`@KbwvyioVqKj7ob@<Z#5A;6Uj+HCk
z6*8k-CYxi35pgd=bSY1>JP@?#qETef(g`WMoHk<kQJ#Y!n@m0*KRb}=AseOIQ}rCb
zqT%upwbv?F6sV?`p(1~trEQ<LT@+tBTFp=0-|XH+pxAAXbU@rV?!@PqFPH7Mnxi_v
zBW8N~Prru99&vaov>t8H`T7!K*lDJYUg;8$FyiCW`zXcH@(mQ;Em5|E_p#4wq*hG=
zXBqoF5Ic1G>-esWzH1)1&>cuZxUGJr?UF+Dv}0B2aymucK<QnLoH`~;8*Ev-*i-`>
zboz&SukTPZq)8RtYJUyrAW=%grqKLlbXEF!UT4CAfdR4doI#9ReB1ay)3scvQt1bs
z`FfzkEF0aDnR`TGYdW+@%UL;%IZ;+nfIB07bNJey#I<97T$FUNJRL@K0fA!a6g{^s
zTDHkT)zK=iB~2sBC}IY#*>K=xH>SLK%%oyslF|ltwk85E<Z*(ze{LWgST$jH8$G*o
ze9L@e$UUK2sdA$Oss4(!Iji^CvhWVamn^TkLAB&=P#*Uuz87R}4IV$WpAv^f_T%Io
ztn=6Izv}9fxbm9sy)J312LFkfwPm?=I3(xqrKIErT@&3NKtc8-*^yO5#(vA#dr;B=
zTY7t7fx$jLi(P5L6b@gRQu-)!Ury_2+}kgHKXJo<dlbYMz&WHhWIFLg%#2J0RNET7
zTjPP1Zr5$6@RpX>vgg?ai4&*J7^g7PWEaEhhK?aTr7m|cd}Vx{r56cPUs5CuFbPT@
zQ^k-o{k#r^<(5-+e3j5~m~58@?u3!dol#Bil=A-GWVmf6veu>=8p8Rqd(vERubSJj
zJ<fhP4SZ=1a=k6LZMK3+@$46){4#!8e4n8v>8=#q&r?SSiKk!Iu}o(@S<t2L?-=4e
zO=Z+AxIk01=v`)1b=iH?DwBmeSAz!^MO{c~^oM^yf0M3y`u2MqY7q(WJ9$X8%Untd
zA`=qkH-ivwwKZ9H5aqR#(bn>ma$$D%j0|}^q`kYNf-ZC=i0J9rCb}<Y>t0k_dIsAH
zb==M-mB6BO&K1;FBW<8iO@U(|YdZdcdt2K;0UtCK7(OkC=brP@x^y^%pWv#yrn7Q?
zx`rrRnFvR1I(7836;z(NYz=*ihW;h)5bFlF?&kz6Z5O7F-X7DB?7OzSxg6w?<JX$>
zeg-sf1)-oc<W)9nXE>Xcy4gewcbR@5`h1SQ(&iG#ij$jbkYsT?hTM?9WnEoS%)%#c
z;I;gW|MFEC@ju9y$NavMe5ktQ;~MyYF!2`F8#H!u7G%`UW17)qY;j}eVB%TsDPi+A
z?9HEr0ulChUpv7+fOaTz!y#i)c%Qabd|$Tm1UM-GZs@9^vg2c-l!A*(vzH(d^lxjG
z#EW>C0jypKx@5+Y6#sx%xE@%*W?r`nkUZqS?`JV)_}c*Sa8Y=G-&YDQ%0l)vzdK(4
z^E|MFK^KWoanA*y2>jn4^pAnWi3hK&N2ibUe;@w$XOYQ+S6cKz0QbNDx%eeG2F_7i
zNVxa!vHkU93yCp)yh+hr5(u5ep`M{Lc`*PP?*Bdv5Wc?t{s-qNZvExBU!brYtiAEr
zBklhNZaCtN2{RvRI4@plPk8ZyQgV}?_ep4|l3Z}1CLf>ZWtWA7;OTCL|Gy9a_&!Dp
z^HsYMjS_eFc-=uTJrW+*tE$`}z#jBz+UI*ZaOGAT{oUR_GJ3y8?DvjBg*M#;y=3)1
z{qETy4{DLmteSeZ>o4Ff|9>HeSTnw5fvdHgTJ~hX{;)=nGwvJoUy=I%4U@t-lD3&8
zM2E-ZB@Za?4a!5@7x0Ti{O6njo=5=!!O$mt!vCGjzvs3VHix_4`u``+Y18$MuW#3l
z`~2tq^K(o@#F$6l7m|CClG}ZEC@4hty#qLwQM(#!fePNNfI;$?)x>)J)p4I7@`a<z
zFKj@x1kQ1xK!tj-Fesfp69cM-O0j+0o^4&;+%?S0VgKGAk;-D{Gr$?mEUdog&!)lE
zmd<d4-;CvT9|vp`vBstUN8MM3MY;Ch3W9=wASHr;bcuAQbl1>GcPrhYAc7!*baxG1
zN+U{l44u*~F_gr)XTP<#|NWlx;hZmrYd*krG0$^%{MP!d<)nOudGHqdUs?cb6Z;QK
zFHCo9`C$+i;pMZLX986G{3t>s`YA#$SE#PM)BNR<Kf<*uKRg5ekU#?V7!X~b$?`}g
z9ENiY6o3=8>;?MT3oH+i+hOyFlvE#_c_2!BtAKe61!g0x>v1~C!0YVlaT5?d0t2!C
zJ>V2J0TOG?`PkE^I+fJi+~YpFAA$k@U!zbh7bO1@e*^0XxD*M2)LM2A#omLsI?g|j
z|Df0a<d}PkjP4@}>0_g6q!i%Zx0>q=;xtjM@31ZX`Su6b9a_HVkMd(^*%5PJlZ1@A
z4r<KFj}>-yQ|&c3n!iaRBUpXWH!uLwBUc6AWxX)CeLc}~?b^>Zu|bV`24uOi^8p7o
z5k|Zx@`4N)gh?`T?I0Xmz*Yg%T5h)I)>FMDSFsD2UZo9t{GMCHKoSn27?03}51Yug
z{mWX=DlR%j2ILJ$Ica@KN?gW{3OftiS>FDl>;AFu$P$F4S1>Ls?UsY{YlU+4@#f@C
z@pK(#D;zs6%`Fm~X42j`KP-y~`@sJzNRtanP4YQ8Ir*~{d~KDacDtC6jG{~EE{Ek+
zEk75-b@+V%9N#F#&s6>rEh%E?4t>>8*UPh`UG8J5>+~9IFDXXq*FR^rI$Vp$1nmqP
zz2xJ^v1WLnwqx7SLE--FOlHIm4m94X4v`Rvf7Ak1M}Rj9a>F8ZbaW8+9m}TS)?GJ$
zAO)ZZu5>^n#b(S7#F;^m8A4ZM17jCpkfq?_ssWeBt>=a?OTcE<D%Kuu_VsSR2DTty
z07X*&7?I0<+nj4_D=7l#E9HN-pV8!!yG&s>??G@MY{!eiO^xwU6&P1*M%)gw1$tH5
zPr*%?lY^506Gpuk6ohgm(Fi<{UDQ)$q=W%|VQ>D*3Qce79q1olC#T9+`xc+2p6i53
zWo5|_sB<}d<yC*VA}pO{0j_wk7l(k(zGdkQ)KL26fqm64a0mJn-tj3W#%%ls=*Zd3
z7N}+e-s~n}pO<;gmJ%qACy?V~igyMn?mfr&@zYG44C&xX>p0&ywe<3P`>KB#W84);
zzy|tF)gaK{#`e1Hb!<1_^>Bb|Zeyb$O})*nH5$z_gA%hoV0M<`G9tS~F2Nn5_?O+V
zM_$yphsrwU^z3oKhdU07N5x`HI?4aQ%|z?aQ+!S2CDD2Iryau=-(o1I9Ud!6={)F@
zC-X7=df1XTsONT0<>)Y3J5kW$H~EW2@$$Ni^q1q+{z~Tlr4ZEpnw-Q-gw<kmx+Hx-
ze|q=i!HgR@C$Y%Qwfj9q;#F11y1~`T*(!;9<H4q&>leQnvh3^r!L_-Yt$Y?gR%iHH
z>g}}T<E<Dzsiqd;i0sU(3qby~9jK&y1#&$R)L{Hy92ek(*3_m3eE8nJ*0cmfWpJC?
z^we)JBJ)^8GUsJfDD;w~YjE2wDp&;)cKG*y0lPjyl8_ubl<OFi!g;AkGGD;%N9b&W
z^T!B8l7hg2M8vQ0M>x2=vXz#;oB`=zPQcfb-ly;@!ar?|xi5w9C|ds6unK|KD2kge
zm(&?hd}P2-L+U}rAY55nW0dk-j^HW6lf2ji&YeK1gQVZ(7(`$$03{m4Qzn4GNP7Y1
zA#|eaDng=vukmQW_}g1+sT1Jxjwl@Q71JX9JUD+Tr}D#t@RTM&Ubret7%*D|3snh_
z4oovZlO&7qnyWPU4$fS_DD!R@1><8N+e5IWq2dGvm{%xF0d>yQ!XmGy-ux?qo*4E`
z_-ygbJtSz;7FReBy3?i_=J^Kn8HHFfE9O9a22m^!0zw@9>mJ4b!GZqICbkG^y+m6(
zDtM4RMp3m`rNhPu_KZ8k`3OK5{n9WJ@A`E8?fX5F(GtiJ)8MAh)`6nwhhl}o6307D
zhX=POQlN5JtF;e>AOD(av~+Cn=uTn|lf33!GoX<%7;akjr|avh6o?Vv^SiitCIVf)
z(n`<nP>#G=%g@~o$LpUt^X(t!0a90oLnPDOh0AX1_a6(do}XGaAE=0AKfg-aESq%>
zE)_hO2__$S!CCIe1A91~Kjn#zaSw)|QUjJhLS2C%YosR@p&ucpzolu+Ao&GcRcT^l
z<9Kbx=-b!&dJ$qJVdD(i7G^q1Nu09X?!Y@!<92Wb@RTWAz2DzK!$Pl+N3JU8&B;y!
zGX~=c1d=R|i|Lb1+=w&N7@aOafFeOl>$@V79L$!oR?2qv_3LDQNv2F9c$i~S6*?!2
z-q)V$YEIITU69Kl74_U4jZrK=R>-k_lXh;cYEamFT*s0jng|as8!aPGiOC9j@?2O@
zn#_nAi<oohR`s*|w>-f62O(N_1(o{d2XYnEH7C`zCUQJ-YZ%80NFKi40vq~^xx%c7
zdz&^~gJ9J(&?zX=I^X@ga6RaMogME1#2b3vfxTe+<2kE?j&v-2QJmc57y~eFXdtHF
zftD9GE91Wd>~cJUOM*N`F5?#qVi%gKq7YU6Tw|{_za$~ZUr#Ie8JuKyf`wN%s}jy%
zDa7&@mC03e-VfFcXEnDH+5|9<7=sE8&B5H)3Fa5)6YC<^2dx{*(0rPf>sF0>#HCY>
z+b?V9Qj>p8&F0pp<vEpI+UDPb+iJ=x%6ZuBJdAhUereN?w=d{d!baRbmd5QJ>a{%u
z|I%41QnrZWuUA*7RHNQb@7iS&%2#HaOySr+ba?<=s9`Qv2KzEDoLgU{YGTX_pA^Dy
zAy(<AWonJYG@S^suL`=<Qlk`P<uE12o!l=oKwG3#C4RVMgt@_G(}cFC3B;hn)U3BE
z>M}BEO<E3nn0oRd*joCou@8`*&VLjfRQu=x;#<TDVBf(<^9I>7{ni6gGD;Dy>PV1w
zN`mB3$SS(c+saCTh|s|#etVY!2@%v`7j?XJf(CVkU2xM;yT1t%7r>fqW}uG2Ma(7#
zE0_Uy0S3u2-lF^QEQY0zX2ZVg17pfC)gpskxW-qBY(-YX{wV0HfG8{ey5SO92vfVp
zbF(H<QhpZ|eC^QOdQxkW_|X-Y=bLd{RC?&q{Jk=vK*dJHwZ(}eiGg2d<HO2@pNdzZ
zNeq8`f>!Cr+y{AMu!w!Uxihdh<i{v9jfZX7@HgT*odW)U(0C{w9r47E-*N?1L?6hu
zlSgRh+`A|31+sgEMJzmXB6?6G33tk6xX#I!JP;QJW2THnwfOOfxA(tTt#t)zsNs@%
zUO8jAjt*SOL0^1vI+|UW*c55U5~wZ6zu2;tCC6&0(D<fHMLRgM;y@!ve42aN*;%$<
zW3v1~7&~%XWTmO30o!A4zqaXaG7M_0IbIf(r`Qo2Y7LUaz%D2D>sT<C+FTLOVK^&z
z>J9r@40%3?OAYpPcdM>typo|{jE!hbv8gUL2C3}p7UM|-rQslp#HVjmNkH+@JBxH0
z1}nLmdbJz{k&ZOK3u}(pkt*fjb<R$mK)#aag&~J{v2+DLQ!Ghhw_(uyp`6#zj7)s0
zZ`3bUDSE$um-sddZA!C&$w)4QJHRyxgX?V-KWGw7By1V{jL8~D;lp*c#Z=>qm9u_P
zYnPa}&cqIto$VmFi$$C>wHF4p394tvu2^f^E@aa&=*M3o5L<k(_3JBIBXR%n)gnu!
zb(Zy;C#ZQM=PP)qm9gd4eLdJd1RwsKQYD&8pz<RaIjY`Qk^+vlXvB#zlu-aIAf6Tx
z?fxM@cHexe%;UJ^E6*{1lQ@SyJA?2^*66e~*=O2)#>|n_WcN|Y{Az2p8D~zC&-?wA
z0*?F6Z?8wQ;@q**i~3(~O~~AspBw7WaPxnbhblBIpMX{Td^lx&|I7EI?{900tRm#8
z6xHCmhm{5qF3z^3gK<(ic;7H~s}^<Ip{hSshxw@>%0gC^wUm%B`_0U=)NuoK#`G<M
zyJKVw(<<#>!ZgLy7Y`S1u0K;kl5U`KiewYvcB|Xgc|QSEk^eGQ%tC58+DAjzFtg!+
z9y9+|iiI(g*p?@AnMdMYE=XvWTGa5bfe>d$Gr<fXMO@jlM-o-V`d%@K1>JKN5voH4
z_yt@Jv)d}F>38^Wv-O%3rU%!@Aj%ryYQt(JXoU~O@Jeew<YWcO<#HN4tzjEsg{#>>
zAGh1<)!5{cRr}<$B~6>qw?0|Tepjx!&N*Gcl&$QaPcK!B39%<G4I%6q)0FQa&?qWw
zIr&ZbFHC*QIi!U?N0?^w0q<)aLGem}+jaol7O;RALJt(TG)ef(PugOW@kL+MSjW>k
zko%im1K*Y!J)Y8B@o7G3>quSp!=^I7;ecxLftI(;`Nguq>|BN*Y+6(pn)LmuuVJB)
z_rRM<U<4O$v_MItY}nAlMgSIm_EJ+SPakURcd|?#pE5iTjaVNwx;VBY_tA+Gpy^D+
zHb=E-l1wdK#X#g7$qoSsgG19vJ(oLu7#myhrKW@eRESX*jPzH`CDPVGs30g*keaPg
zs4mxD3slN-sRg(&G%7P+)wLQDM2{-5^lU=HHAY8by}&}7xSb#25F=5jl1gmVC#98y
zUWz^(*0i+;q)3^~BQF|*qETwjvK3-ziipzH1PEdw@`{04pToY%t%0KtB*K#~{R*W3
z(}`LN`!y^&qlXdZs*$~-nOgeV?Lad_bH-;|Do;7R^t&>Z1T^t1DYYauiW9>iF?JeN
zCM3KR|B{P?ErNI%q5lfser=!#&(Jc|!+o?sk!CO0D^~|&uqnhT+TyyJC5pBrK`2Z7
z=js{|FS<ySON^IyjJpi7L)BjfYTeNvZq{k?miF`cfi<|mVPX?P2v2XgGMTFq`}l3Y
zS+H}d{y4KDf9~*5ON3?LQ_U83%Aea`)1*{?u!*fyzZtA0oO0FWDnziYe)Z1#nHI`X
z-;C68qqn-Qlh2KTe&b?ME=@%9O^;4X$+-H#T`6C$fly}0rX9>OZUbeE-BGCTM`ePF
zkrUcA@vj28qBfEECG3UNyzP%;Sv<j(L((L4JR}a%635g{n4=5greCygGlt!<$&{j^
zEg-e#%+yZw(iK!qj72EJXf3Px76}!`nigOg$6Vw`(T~{V;B94vZ7{4tHbd@l0o5a-
zx6`)KU$Q*pTE|>mB@Y_aSRyQR?NpOtg208;21F-E=pxX^`1M1>?wQC*z2}Hq8Grpa
z)Dzvlu@uhfsz2uls6SCSMPphKkPuFWYrt|E^Kmn^muqLM2`gxe(sfXy(CuFvUkxv<
z_9!rUZ^GuyeGjm7Mh66S;cB0Y(Tc^gw)(+Xh0qi*`jx=NVFs`4cVWx>pRoq3euHe@
z1_&oxsl_)FqpqrMaRdvO#Jp8@slZc^Gvz!6;IJ`MxsClbuJ`8V`3%!TpU1o}%ZWm4
zG?bYqV+WINhg6Mz!n;SN_Btm^AN^J5_skf%#Hhqn&5Wz1os=`}WVaTE$w-}S3~O;R
zQ;}Cy?4lG2!nacla>V7r#>Uy!wmz-Z>8_|ga=sUo$c1$89%@ljU9Vz5T<$9wbYGAQ
z`Ey|7MU?dJUe?r5ScdgpRh>k(r!~#Tq=wamSX7LQ=Xum}yGzTiGQKvDRNS`=5yEdC
zhw|N;v+(h0Oq{hDvrQq69u(jQit;aBq>LAHdaFDamJ^1bn-ntnis0iP3C=-_Pdd`}
z4d8zX9tFzLXAGW|B=MlFbr8glg+CJt55G&JdMEuN1B%a}**YEbwUM$K@Kc-!e?H0{
zOTb-@MBgUL4*&3hktlmCb0z4DnB%vF;LB7Zh4kwIW}BuKqE9Az21_NkgqSQIMwjac
z$fNM)l&3z*KDNvAN`JtU{y=CDFQQTmhH4tapA%7z!TroY@go(R0FT=b?sQ_*h*3ik
z;q1N+r457B1pRaTqp8V)<I^j=Mf~4zkzBUAnRJ_sVoLvYm4AeiM7vS(Yr*9=vGTtB
zJb}=kXDOJk67{#HVxq3^vHO8Q#}hSF{ESOL9HeqR4k!6*wCqU^f|V5W>F+5Kq8S?i
z^n35n@#rthz`qv+95sL|QLN_tJ*lBhPgD;T-1B0$h+r+HYB};a|70}&D@6CFK<GQW
zz?|=A;o^z8Uf5fPS_~sJlVbUQ(1Ad_t-9qTQN``yiSHHL(r`IB)$QLX0tIKtu%bMN
z=}P(2#H46^JV<p)r<iMuG*AO56}n42Ugr7pW7E)y#qG8jT2$1(gns^26vk#zpBKd@
z@4QdV=@Sy-AO4tHNZKwDl!KQ+0jK?JL1C5xnLylV>(doeM+A!JL+H4}{YsktKh@xm
zBR?P&v<qQdT5O9%hzJQWpEUpo$b(52gpl5$h8;T){IDGb)T!S(E9lcLko+(T{i^-@
z<NkPNK@5UPwc0zN_&X%~k65J=0+-!{89n{|xqrMyT@G|n?4kL3-fsZMKi-8#hd>68
zZCDBazFBfXa9r-Z(s}f69}Y@x-1E|liwLOv{Z=W&pRsDKx(xeC$x^oh%LxlKgt&@3
zI~V^)9b3hX*3&Q}E!&?)E9xllD*Y!<?a#L;AVP+dhZ#$K^*8SU?-pf45TWosjQ)?u
z|Ix!w)IlSO)5wbaT`|F7Ljklxd(blH-!=jcS}drhitGsX-_{Zh9|9nPfAaPIT;zYw
zG%*?@EDdRdbnEXgkEsn1>a1`#l(L8uVqqz(E|a`Ld-5c3V`Br%1se^>^0J9MK@h8X
z;o%71|M+r{f+$;$qMjS9IL#nmvnC;7<0D*N8j!~ffix=1vP$0dCRedxl{!@{Q2e=}
ze2Mbci4U5kO;*%1CQLOip9U`*Ge17KLj5JumGh_w|JCTINUK_tMkRxMZ2SN?AFBhO
zMCaqRgjjp*%G2*bmpjMbgT6eO8O8kbGut4d&P}n>kJ3y{)zQ@L0>@%<^u6!LYzcvG
zEoyZ60J6g<RdR@Or7{96tZ(}B)%QLr{dr6-Y9p0M%aW~DPz#C!LEvNMvg(IHfRh+*
zApZ<B9tA$@A-x`#BaT@*V)6;Y*}H_T0WI>kMy0?9Q!XgM1tbB*%CxRJ1+UM&9c*m|
zQk;On9Gs7v{U4>BKl<v=&^WySlH{?Hz-~3Td-5m9JAmjYK<uP?ffGV4;KFcyP0^0C
zZ?iE10uZRiJ(WK2I>Nua9_Zu-F;HEsn*IbsiZYPg@5~rH0-PM3`BQ`4I6(x3BV!8a
zg96!yd~ik#PSfbXYI8F(-)UX_ZP-#Ofg$z1$qW;~Fk-Z<z%Uuei!e}7EP-g~(GI78
zfSz>#P?eqe@+w=kOl1wYoB*Uy(0YV=)d)CkYnz9B%iL)P;$aEvKzj5g(7xyxMYyQ|
zsZVf=zXlqf{ddxW0R>e#g;$j$n}dU+-^=xSIZ^~+EMnmK4yZnidw__}K3~276O+7F
zI;-((PjqJ^sSuEXp8^#B0K@4Tgj5sa&p=4lm4$c<P_}_Ti^({2(OD)9D{MM*z_nrS
z6P@xk_|I@Z{D*Ow>&)IK%6}s22M*oam>3>%+kojgIP4*U3k!WsTb_X4)s6#z9ZXJ;
zycZbuq}+0lEExIM@uo8n)bj<(xogY}Qd5BGg`m#>a23e4`+_7r7b_sZ{_AvK#ARbB
zjDYF*eHTFN$vjscv`^!6g0oGAm}AE#Py`6lEfNHgVdnw9brATuMrcUDw`u@6rpiA%
zLwg0N@iqasci`-v_OcDV!^H{ih6quv1D{j`?+NgRxQSZ;!v`TnNa+hQ0-F|JV{qPr
zZD#?3gT@U=>{ioCGA@yGHe$3@x&Yzwd}jnt4CLice|Z3lBon#-6n+G{ZBh)p2up|y
z)UeaV*#R#7eme72T)WAGeGtAh7rX-B0mkf!U{X(U{8?m2j49*G5<=}1=swePh_)~$
z`*UIMYK$d6$XglwNfDC!t%m{d`<$BhX1TyAfZ;j91|5XeHFDG*@S~n#;;)ifn3>TJ
zoPifG&8fAF(|7(HmL}gF$(0B6F8rPM5fNPHU^GntaSGrgBgKUveT5%_Xsc%RLG6qK
z<fE$oCL@TZ3<bS9!p~*}#Aj4-L!gNbw3(QQ_yJ7>1`0P57J)#);XP4f;+rW+A4}2K
z>Pt;xF1Vn83kGBiHB48j0dSyw)d;3#eH<=x)3XCWY^rfw@LTIk43poI8mmK2l1fI1
z%|jnhNzDQoQv@8Px(NoCFJX=N(F@eq2m>CfdH`xakd&5Ami~u!_dhlVkh*40P0z9f
zLXBfAGk_vCl0w(-cJEwc0|!heCV<#hryYZ(;{jDhS8AIjaVceN7&l{@6{fzwix4ou
z2-nW}5peGaRp|;617YJ$g?cP7<fo_sX1O^7<G$KgIdi$KsJOUVAi%-$u>BbUz53(P
zuBgVfB-=5gudh)NkpJtP0kuZ8s$meNa;TcB){iua0?R?>oP*Y6HHetn6yxM%WrgW8
z(i{P;6E6T@fCzIPbJF-6u*RX`C~5|#obc@ltsR(EcD_`GN}!hFtqB#4eP<bq^!AM*
z!BY?>S9?~}k<GVUFCEO#Fa9qLLBwu{Ru`aY2~xJp{3c2O)y~Jq2drZ7-ttFzW9fqc
z&B<eswuoT6Wlpzo>PACO)ItVTV@OPTn7gnG)9z&|lnQZ)^OM)Ic(Y!9ba;6DzG*AM
zA}s`5F8)OCRDX;Ve1e}g8XfbQ%yT0iQ}Ry43`93K>(g4v*2AQn9O@(MuWh;U21VU-
z_r5VGSbrCaMScWAwjL?hLC_Gt*x_o2GQ8N10_%wjE*VH0;JY}LxD?*uA5I8!NC6oV
zr+|MBvkjC-r6d?vms$rZx%t+cMPr6<39L0r5!S!OS3R*fTb`k}@7~{tFCt{tO^EHu
zP|rOdtI9AeIv!j9*k{qc@$+V;0h?7Pta5jmJS-p}00|#Q0WG15p0*E(!1+T#Muv$}
zK>z@PoRtzd5>)#hwWHBWph_U!UjMapr0dusG+I^FP-Xe8Zk>N3Z42?^uc7s2yKu{G
zw{FnaVbJ8E(!$eeFv%ZP)Iwebi305QU!T@K^m0BUp^R_JWyM{t(q&#SsM9FDt6U`i
z7QOf_+Bkb`_uDAYq<7(V_c5`yNRs)_>o3M{N6`-QE@P5<JM<>>HS4Lkg4OPG%=?cS
z*7RT30`5#-E~5qFBs>g^SSR2Q6n}yuW@L|3u1ER44al1}kcITQPa20jAcX60Sn)qT
zc~=Z6W?=E2>U9A2uj1Iv-|h>%>zQzJv9kK`Iy7*X;_B1a<w@wVql^2=th4gcu8HY_
zEVOZVazjk&!?=}uS>@eaohk3jbxVxi<oV+~31x3Z-LLjYU)mQ#9y@h$q#a-$<{p2>
z=qG__&E+bvxE2Mq%<Vc%ARj*#m$mu2Mq=Dh{`mWgAm1&zyci*NKFmNIQ22j*wC^Eb
z^l@ua^6Hj;Pa65|IoED*Bq6niiivUdi!wJ?KKypy!9Iv|02%EPBLKqi_P+u*`E~AW
z|J3al(w)gOr*v>=NnWK%XlSnfL`hHOS$Cnn+f?uY?cI`3=&#w3-Tf$VkdJ6^Y<tde
z<<G!dHIxImvh=Hcmy;*8S{fFv_V{Vw6r{-$<qDhva&^n5@!b(T!nRVKKE;k*KOg)0
z2@y0XUwlxU(yt^u&KBI7O?X@LD<{&$y$m-qa#s*us9cg-3;+03@L@oAPIJuadTFJF
z8E`JlSKUIFO^Y<2C~*yCWQE9C3oHfU9j8cGz3<y&{-ST5%9|Tak>kt#dD@2QPC^sw
z?n`=E=2jo79fL04Hzc#S+}5Cg^P{}4ejm}h|Na=Qp`g9D=+U{e;pD$UMPBiuQ24y$
zrr31nQ|!govD};y?I$}_qGvcvu5B%+P5XQ<MbSBB2E@7I(6-IU8fbK@SM9Shqg+R)
z^mV~?Yx2or$T<lz1*=eCSIlUYTo-5`F0s~_LOO~R*YuFFE<?JG{Az68#efju<IFs9
z9p2`H2*)uPPBefP`7~x`U08}C^(-|%W->qYG8r7)JN$v==pjxb94(PNWzq06w#+B@
zJ`RV1P`-WbR9-lbZ^Exdpp*@wFp0)tyFFUXm3oK`Y=;R5c&s0p-ItYYnue9ql98h<
zfEat3XTNPds=O@uxph?hH>wT0iZ(M!8$+3eCF|6DgD(EZ$vF;P=TehRZlj7k=6COH
z7NksL5xW0t-u*EF`@#Yo>gH02@P_c1w+pdVb+_%mxxfFiZTUW*J>>Go!xpPf&##ZS
zW+rN7nqtboP`~0HL|D(2+6yBl@zdy5Dbs}}NvWh>&<o>afu<jTPVaY68Lyq}RF{!%
z3|=m<S*(jJ+|*u~ep5Gbn=#L?u#^^BCo#Z0DK-w$MmB%{ve;5UVC#ujQfTT=R5I^{
z$&rTsubP-e=6L0VI;WJJ{WIf5)sUTM_Fp)RPZhWm`iN{Jd);6tos-nA-v)Ww+)9Kv
zcT4I3JDV$=_dg>6G3T36j(67|qfL^I<bBHPcCBUdn^D=~u2L^&qamL*KW(<7V?I7v
z>fE}~`?6~r2b}TlGJI+fc4xS>6h3;S?{3?=t^2;=k**q}@9IcX4{ZR^7GucV+4B8B
zE^(tajI$8Dn?d*7HJ_CVcCliH^_93=U@nnRB5@Q5Mc@Wkq~UF-VAEN}JmW-~8Kw7B
z<Cf-<yUr%2QEtjYC(ga~Bi$ey-_I`k?DK*Tl?w&a*yqMoX5q{M{OWc*>A!T+(+5al
znVUWW166|M<1_L0G9ffn(-P6|tlN3;P=3j)Q9RPxs@~Sp8?~34uXhZz{g!KRxTTwp
z>|U~eG+8D)(e#iu1eEMO#Yg3hr*92Pu>x_l$&i!NovT{X-Mpq`loFBS6&|sFwNPq(
z=;wpF;W_9%ubu0<_E|m%eC^*K5?-XFZ2S0~5eGfG=q!VRIp6^s*Q~p_4XE;)GqbPH
z?<ncKIIL#CBT={$U8`^74RMn-*bsY|Wv5H#aE0eAUz=D;%4FqM7A64t#tT{JSV#yO
zgc*pHBx?N{LwibS{G&H}58p%Io2zP$>*I9@ee9=YYfI~xb)i8`P}<S8-`XXp)rOkY
zxPNnFc?d62!=bX9Hank4wU%aSw>Wso^!DdlkAGBSU2W9NvAzmv)umxwLQUz;+Si7Z
z!lFN|-wUi!2w41b4)Tgu>H4aI|Ggjm@ypYs0Ldxw%4O};SM)D=D1JQlw&wwH4IE?)
zs*g<!4?CE(e*40I_A^nmzHm{qp2SQAiGMfU|NI4m3MbLYc-BedFFpO|rv$b3p-JSW
zJnE6a|4$$M{-APJ<f#9<;>gRjhSUxUI?qMVQ$~e|qJ`5e!j6zX2yrnDcEwatCVKp3
zO8sl0jf-m~Om=kZF}$g*K9$)4#ac%5fHwv#5A^l1u&?&1&}RK-6Z`jWh89Re^K$;k
z&b2KRC<h)ERusNa8weFdsYhvaFyJpsdsx0L;(Xe{5y|%8?O*%jpAFNhhBIk5s_53d
z2zWb34EUd1w<|Ba8Hnfxa5nJD$CF8OwFWUJMR-P+yJ9%n6TAMt?9sO}%{q4nKgYPs
zAi5N+UGJOYL%jEh|9d+Rfv&Kl|M91q{9ZjUqoNr8k54gk?0HN10em-BY!RC-?QkCm
z03MGHo&myEqGE-XTq!l_?_CUL;1EUmu+)v?a>QW8ltpsd)sE%92g~du+n(U6-dOPe
z@)7}3p5SKZ;PfHFSJ5uiA<F76yW+okjZnNbVXkZLY>wWK?V#G$RB=k>`vYW(ay7K_
z?Aayc89*Wd;kf6WkG*Fd8g^oSmHH!B)h|1(E*6h0ytj-HQrh2i;-v}1f5Y&+WY>t{
zj;(-yzEAxhf1VpL<x>}@#1x+^7<OYPn3P95TQ=qHo-L$V;kUFCCbL|B00VW9l@0V{
zUqV35yq;b2W;m6i%imNN2f2#&<@9ELS@N)-eH4RbDqkoISTTlC#vFC_nykV?|5cwq
zcW+!uYocXoGEAtFXSG;{HtqNR`BT@S;=WU;6Mb3t^iKze-yUhCi9!h(2s8VE{;!kR
zpT7UkM{7R;rveO=_})Jk<G0@}B%iSVe^;DIkHCr5%74_dMrP4c<kuAW%~_{cCGZnH
z24{k^I6ViQke2g)M?c`7W4J>3kZ;g);HbpWcN>r>7x#C7x?=M|2U9iI`6`P)L%-UW
ze(squ$YbX|HvjWp!)MNky>=DtgsWA=H)&2i3?i3H*eq@p@9i6QYcZ5=g!W!x>zu!S
z*tiHV+*4)$i_tkC@s=IIt^3mM+2!26Uw+>^XSS%7=}q*mFNku<9fClCPi@uJ;CJU<
z&4bGoI+41e;Ahm3yhsiTtp|ac*u7V&ZqwF4#LrOl$IZ#-mR(T3`1-Njw6pJY&lV3W
z;v0d9{PjqD^Kl9|_90$9dFvpB0I6oL%nuG7o>a$3s#Co&KbCc^CR<DgkK)}<D8%8O
zGW!I7**VWly(qA7{(&ssPb+mq>wI10#<Q+hzw|!c=~oLF$!0EN$aZ=F+iSw2Jt+NN
zW$!aR`x*^Wzs1|+9;4v8@G(SiWqP9dq!HH*++l1r9sGaIEbO^`-ZtR<G+=3~-2Su>
zcXs{>DKpk;Y^e)PzHT{z@a5*APVOE7fBB1C&QCjtj?&&mF*vD=Zvto9UE%iBJ(qm(
z`+O^i+UPA@Xj&Q`M#s-yuJQN}y&-b}yhtrpMfe<eNeF2Bb>2?C`iG?`rz8t!9bg@T
zUx=4*9M7%`pMFZeT<H`(sgQs11DA;+7(@Qe`r#AzFW*Sh;Ki2APw!~??%EnM=`TyN
zcnxD1p0&{lZOY=8dba0npBzN`U-D1X4G@&R4EDcVCZDJuuQ}dr2190mDH_G#7Sini
z#FNRdHl%^Ls!M$OzR$Y%hB&#`M8kY+gZZ{r^I<G#)B&D`ss6^=qo#I}`JZ>P`|k=a
zA{{lcE=|w{ItcAFKWy5N)IdZ0?|ST8M9QDx)t1&oi5^cGl=d!d%wyLvRfNDQ-CbxE
z2E83Hj@z;|I3hmc{QRYzIj^pr_<lC7$Kj`R!HWRU^|^>~7<o~qoQ@cCh_MHg&l@F#
zkoG68ImmNbE)r%WH?Gxrk=ocrw1M+Jg<N|65V`mCXqwc}Qra4U9?>_|7kLUUXs*o7
zKZ99#p(d}aOf+OC?W+3E9(ybXirkzJBJLa!2EF++B#9c)9rISj>lZD{lV-(OgLuk<
z!#^{BJ)LM=<3gPFp;*^HLqs;{ug?el_tH{3c5zE!uu``gheaJ%Ve+%qyOkYQY$R~O
z!>CBkkk0j2k=`jNh!&Wb*y3(r@;n<QGlTO}LQ3Zw<$M0P{}!TcOz(l*KEyv^1<oIQ
zaNn>JK1v+inG0W?dw!SH>`MX1MVMBj82K@n*GH872VS4GFPAnZ8+@d$9{QKT3EzBg
z`8BuiCXfx{PeLw7{XB*%C61oGdX;=l*YGlt1rNWUZ^&6Y%xcB+IO*AW{PvvFy_=(`
zFOkt6147}x_rkAt`#Cm*Lk3NqfVS1AVTH$BD{pWZje?vw<CEt;6hK5OotKg}=@eWH
zJZw1z)iH%Z?TDWHf;Gdy8vfIa7jz;*Vk1d9mLTyElr<~t;Svxf9>Ax9PJ#jQ_WoyZ
z5AL3v_@?todmo%)&G3v(*kHpcvb(hs&UYM;>bq^zpc4l%`GUbwNjmpn&C`p_pa$9G
zS5^^i2=a43Q!VS;>@P(7hS!JjbQ>SD2K=v&{7)Men7P90&7>ezPJkn)q&+aQ8_~xo
zn;rW2Q0K<|v0Qi3fhEj)W@di;dlBV9JB#1JCKy9UX{U`-!gH7c>9908vL>~=Gb>HP
zyNFfN;5F0aJ@V`0kw#){DoAO^3;Co!`p6pnBLgD-QQt{LcJNN<boS^C`DI44<bK@r
zCNZgMe;;S_)vn`&B$@qyw^m7kILBrEA;0oNFx;k6b(RdeO;5khjxgd54z&K<u@n*5
zmJBOF%7n}D)DK5^LB4OFXC^RQT}-sNK|194)q)ruNb`QppEh?;+dc9-&L-DMRyJi<
zBR$;Dn@V~LIFnYRms1HFid(sf7tPD0``Uy!WGQ?lzjV>Q@gi4P3NAkqyEmAAFjkd*
zW#{IzF0}92o41dcItah7oOVONi$4W6do($>yb5ONQeM6e4!fg%T0haGpd%2waEvm<
zarQY!sp6Qpe(3cTu%Wx2A1zhrj{6!gME@#M=mh625{CIGYdGlvNV}yo?63&&$@i#_
zi%NC6E)NkZE_%KBDgNX3CsAm~+?XHfp?Z4_2;1O1OH^UIWvtuYr^BqO=geAX;s^&5
zC@o2JupZpZUq}{Qrvc9Lj<k9>%6-^ejCr1c@u)5f*p)Pdi_lDhj@482iT9vAl<aYB
zrMN`QcG(&cL^;x{+0@X|#1Ws9s`ORsgH%en*Ty3wO}%$kxg}TDqcm#G<hVp@dVT7L
z$lwLi*7#;0>!+I^^VD@Kmby1>qi5eAo>cWFAi(Oua(MY>W_FD`_LXkX=cZlzEu8)y
zu%Vq!_h&oRJq-0wa4GbE+Fjjei0MMFNH@co-&eRn)OFzCN_|JMXj&GM)ony1z{fT)
zuH2ME2DxQcpZ{@jIL^v$scbc?NHI3qt!LErlRILjwYY1S+}PI8%uPon)g6b2kh)Da
z%)_4n!{ZB|V*(O$dSIwJ6l2BtXdcp9(s&M5do3-`)9x6s1@Ju9OlGfrS~LHy?z6$&
zY;Sk2*lt}|s?vux20a+{NvSGH%Jz$OT(w?FI^Vf%gZ%kXE}<XqsGcs?)QSeaa<i-8
zc_gy*VXmQ5NC=7D942E&1{cB)AGVE+0IX*<XQQ}P;nTW7;7+e^?4s32a|RV2mTYN7
zeKurYLbMXS7V9SeJ|<|(=R^Ngy<BeQ2g(G4W#Wk;Ol!sB=bJQAU7G$|8+(A;ia0q-
zcXBaLZv4!j=qPEGv}lqx=njcu&~n<Nwnv;Q%llBmf!QG~{8vbH)>qo7j|^}+spO+f
zXx!X__}p<G4_D5Fvx&c%%)TYPd5$HLfc?P5s<Q7E#0xfFw=GhE`t#Ecu?n;4MQ@Cn
zW1kKFUNl4KgB5uZUzgFA3m<hce|T2M#b?FWg74tJ$VyJAb9qUU*gxV&cCt9@e&Z8B
z+BC21ZS4`2adeCckg*})+eRnkyn`EKxIrB~Z~q+YAPe`~myU!bj`VZPY-|Cn2q}Ve
zbd+$iRGN6L^<=%zdJEGY8Q!tD&!nyJ1exyImzq74zs+ra`?6wcNq<iY_tb`B@hX?m
z%h@*E@)m7;Q>2B?hRVDEl)?VNOQ_yln9NthJ?OUfcM`&J4n{I{5y^JUyAe(o?8^kT
zr;j-b3_)}!kAFu&>jYBbqj_2M^jAnhYH{+f?{vaTd*7qT3>ep~G{oOzSn_Gmr0W~(
z7d`$!GZbv`QTdDNLedCpPQHQ81E2VY*<f8QSN5(QHUa|G3O`CD6%s|S2dVbxl>61F
z#HfmwR@8_3d(fBaXF+5nB~}t%vRj(cQirq!D1cP>fs_7+Rwx!t9tjMrb4Coq_n1sA
zY!k5E2jjf$mb4aOA%1NtLgQ&mH|8wfIwd82{EGp%)sgWDeMwko6D!|a?J$jFsq9sd
zW)2&f`l5-t5f8glLVC9EK^SeiV~`8%JK}O39L?-j1UENnRbZw`98LJaI{KCl9mQ45
zzA*-$?5pjH3c87Wu~&oi^Y5b%<_p6M%?>JP>^IyF($NExI7sG761uEdOmAZ`<~W2F
ziPI+GXJT)K*-EUi2Um2D#}YY{6|v9+vND&S*7K*EI%`IKgfogJ)!b9uHkIJ8#1cJq
zVY!+|k6a+R4zGRHlcwt;hRMejDB7wR@CowA7!AZ_&9vXhx{<Cr+jaE!j)lH3Ka_UD
zRIK@aryKe%{_a@(96)qRVmPacCbFua+kMC1aJoFS%aWQxAyVe>7kvc%+xN=DBMbFt
zzc#<m!Wfv2`YL9REB7IWk(7&_@)znGsq8Ph<s#$$J5=RbBhqHcrcaj+9_ejfKH5H%
zkizaOalHqhNuU#4V~Z@5{K|i&z|ipEo~eu|FC<7N*UMYeihZMi^{sL=vtN_i?SZ}E
zSIXi6QSXeZ(+CrM0&1H*jyCzUlZeWCgw4e*o1|V5<i(TnAB078Vg2Mak(;8b8@aFX
zVrTerY(ya;u?fQ18<(gIGc8^+YbyF?G(VZPl%U%-h;de=)l}qGnQi11CHu)mLDPfG
z`GTFQ+!I3==33^h?;TK}8%vp{!N6t0sJ;76dAopc<DpcEZiIm`i5{$)sE_DTYLXmV
z@oHh7)A?IFxv4INm-w8XNTjNRc3HZl=kCo%silkzIu%QXH5FNH=~5XT9&o7P?of|(
z3Hnu34lg(E)bn7URVG6Q%Wk9}F2*ysNvva48e@;?KTFW?a0zsYR@P2DmQ(QNcWcIF
zSm=J#S81iZChg5Utg=)llkmfffe2q&#-L$t%gKX9L9QDWD$3gV^;=~QI2UfSrOZA^
z!h7$EdoKYq+VBF`i|SrLl616O-dHhaY%ZZEi)?@Tn>&o$gEF_d(2FwI@o2pmMdV^`
z!L>B<lAqI!uot<FdE5)Hq-&jw=KjaZ%7R?3g<*bQLEqjj$Ggr;oa8&T=AcAW`GB}|
zMUnfjr=!of=r13=fxfPO;>yf7f81!>o;SQH#mjAp`f*<=mM{2<ts(w+mdif-1uSM4
z25vb90rST0XB^WVC8fry`@?Zptm84gX{fS)gkg$#k=+FCtVa%ZLsfRw2aOkpk94|2
zyp+5~P`Ko+HeYqDKc$cOjyVAzmJcws-F)Ek&X$^m2;In&JWSYXSPosyYw5ym{6&26
z6Jz%GCheJTBzeorOVtEc7Q6{9RD6oVih}2lpW41m5F!?z2m9gZoF%R4t8~_<5U&Y0
zY}rp<L9lMq<tH^>S*&q(OXB3n7#ZGl+|}`^HarJR3;n_l2BFnI7v2p|(>uMvKswb5
z<VjkUaqGialf&2%GI_wDp|G;S!mUyMVdncSzHa>YNr9m$n|HYqfWOY;AnFJ8VW?rJ
z(~a-V7X`QHc#c%Z`;VA8<{hGNsML#WFyU`eer{gJaDIl^KETgO^cfe@+siD<BYwz0
z-b5`dj#59A!BJ(7-%qUiDgRc2tdntYAq_I4nef1co>&#F=&m9f>ttNjWvA33nBd8`
zN*2*Y#ZxZ3J$@huC)GK?L@3Sf6d2(ozs04Rz9{^z(5|!Nm|E73Bggyg@+R#v{U+p|
zKi7|#hRXUa{hB-Xg&ry<UMPH{X;TZE`nJ^wpMIaIRV**6$X-juxvGYXRZlFM#{PPA
zBYCf;^WDH3ah*Yji6xc59a___k~d5EG^w+FOGvJ+AgO(nfx+^bWl}%x{#FA!R&9Wm
z3`cSOGn6tu`J~qK{vc3rovIuKQk`FJ8e&OCu2!}z`n#{2DSsKhzwOczy2Jl5ddWB5
zJ<JeJVJ@T$sS3C84t<<l6&56=B4oOy<Z<M7t*M?J{|S<uukqaO)65cz^qhMVw}Tip
z9}L7kEALVxV$$GqGgv7g&vASduCYVSyS~S`#?3XtRDNnm1s&c)^Y0xs_%%JjzB)8o
z)7;HjwingyKcy^iWV@R2)_(V;Cn;CDLikT;j0(0roz~t-&RZlOn<qVND~4J%EnFXM
z$7SQf&-vsrOJXxM7Zj)%aD|^TvXqRj*4)!*sXDI~=%~1bTw@oO=-e>gWoR5H(2?6;
z#h0>bp<pR9B&elc=ujAD+KjTHC}ry!+fDG^t-l5*{OO^2)eelQsStTgrKo9fP5-iJ
z1bPeQ$*SD*B*#RClB#(ZRak^>4J2w*8ed;7Ola|PN4ND*{$ktiD%DYAw26BU9mR~P
z!8*3wLibt;O(#Ew{1E9#uRqI<9h$#sd;(UZNBX0tuJ(g&mF{Ipw3|Ke!y@uR3iVl5
zHYnI)Zmoav?c+|=5n4i59y)>fXk$E$GR5%6D5oVg(5`&K<ni<B@kMW?#!Up9>1kBH
zXFK7-gDfK4yVh!)61tHCIa3&#AD!}_9<S>?X^2$m-rjT4X2R_AFUKEGg}@mK9CRsW
zeC#EoYs)a43+L<|<($dX#qMQK)Xr7gycwbQ+%h0`D9H2j9oA)`41h20>c-x}QmwNQ
z7XMH$4-X421SXS$HMUS84Th*`XmKsXlyq)skkfv4QsxI=oG77hWIOI4B4RO_fv&Bb
zS;)P?^)3~XEg`o*YRHk!6rqdG-(M=-l2hz=oPxRb2q)3*bmD_`aR{a#W``hh@AIl=
z_$aJYzgn{`TgPv}K{9?|TnT>kq~7HYS<{NFV0zNKy)@#(GS*;d+s}&7*jRSATjl(N
z8*Pk4<2ahSd>ZT$JZq(TMF|cy#+JJg?NubSd#HHyv6&49^V2+htGAI&m#GzS-ofjj
zGQXheOuMGHJDuUU^i&Tt5_JbeQ<oBY`ZH1klS9;g#nz?3rr_akJ;M|kqHCX4Lvof<
z0?B*h&*Kt{_;eiZ4?90}7RwWg(U6<~h;)igmBHD$CRbChGp|G|yEZfGw(eUe%sqPE
zPunjO+fhOfgy%X}Lgd7s6NgEB`zlk?A6AikL?Rbja%Z+lLo+%vRQ0*5dj(N_92Rfl
z%pQu|2R$4v{Kfe<m;~3Eyc2IlMmaQ%xNQnLDYj!&wPz~xgw{CACVvQsUC`|n6dk}E
zLo;a#KNPJoY+4pPt#MI$seX9OR3vFiZNL@E^87)ieQ$Otl}^}Keq8_lB@LNer30e@
zK8nK>T}ot>ZJW%Z_QD2r%e+{%x@`E8wP!Q?XcA+*$0(P!Yb>#7u0;GkGX=R^UG8m@
z<RQTt4BP3!pCLUW5mK9N+?R=!5w@pcrb@^ac`10R$p47shtsw4_AUl-Wf|uqy<~<y
zB6msjDdA>6@!OO)l%q0Tu#6;;7kO&O*_f%nb-MB8tk|=ER#zqOq4|@3gKrsgL%rWw
zxJG*_&E@=VYPl1Cm>1~0Z>}pj&S4;Ni^I)qDW&VwEo$!D6E7fW|LDJehiu_i04)4E
zQKq=xSl`@U|55I=Mi?@39@K_%df@qNee@l4DJo{}ZYrtC%}^}bY;??nhZ%5oy)Irt
z(N_B2by~aHT)STzc+Y!kGrg8f6&aZPf+Y%R**NT?bei+j&Uszj_mMy0vGD3OTCcpx
z^!U+2h87c5tOa9NE@ONjI}J~#i4rq0+bc8kuw<?_TUhyo$|#P9E`cT9={<jxHc-i#
zX-h9ZMsF&@!E?mOVWPQSpz0ehY7Zgyf{{pyp64(<LK%55+mw@ABw8PAUr@AZT#TU@
z<l)vEA~}!o@f%rSr7moXB2Us(PoMnV2C8jHUUPAJF5QKZYHxATi8PgQon~#s%5AYX
z{WK@Q!+P0=k4a3|bMTJgZDTw&4CLZpZdB)8(qFCI$(>k#s(19ov1P3gD#)r>)HAD2
z?L-n@5A!y3Lz`Hnz7-Ra6V#Nx@2j~ga9d!?Yl}a-m>=UT(~e(Kk+!-Z;HatBM4lcG
z)I8lL_{o6koP<23sP_3yW*%;=FQ)C?+g#YHBPYROiHWX+t7Z&}Io?wyVy2xw$`l7x
z!$AXSsPsw^S6Fke>=r$g#9NaKv~kIIB{Sk!-RDy)YH?=N9Qd--%gdj2M_!fvSYq*S
z_^>s*6}G*4QR+UWf6rRaGZ^Ee%dK0CwXzb=)vHP@AUmWwGl~i_;ggN{C(qSxHPZHd
zL)9dseZjuYfDI$LF8KO(`U{__d_V=tngec!0pTA@6IvivN<gN(;>2<W1j;c?5>|{N
zEWrb1by0&`F$r<XEkAZx_{NsOPJ8NHuwZ%zmZ2{qCA}~~!PGeLvDDMms>oFTdi#dO
zTS}Jej_r?Z&LKSb`9^@m-H`Cigx8wWJ~}f`%AdZFx@y=g%Rh==eG1=dy^UR5!iRMo
zLCsM6Wb&>)d4;}4)dC7~Q4msoRY$c6y@XWB2|J#~W^_2i<eu@&vq)1m6j2MZA8*hL
zE<)v$7}ihNHl*}CRTFK|@`FBBTm~6W{@}3*nt7IQ;g#LAn6t$$Z=L@`TNR}qUTz#6
zAG0W?q$XdkMM+XKrWQ|+%Gra6#x_Uwr0XZY9`j{GpOTO=W!C6y?7>`q_#;LUy}|vd
z1{7EHXXS(Pq#S#=c|!%e?G|BeW|5R}Y4nSVLN`u+6nDuO&&A^{+3bpw$M9zNbSOr@
zp2Ft~WoLIy@AY*7-5SEm``-Q~9Fstl%a%tkUmd=7WQAo)RUwbb^<qxV8#TJ1sG|JG
z<aqbk%PBL8S`S9NSW(!6tFFj=6IM@w-Z<{W(ky|U@^AQLX<JPf+CHCY*dOuL{+uXj
z$Sp{249lOhg7FE)6VF_@>!{Q%K0p)7T~s&<bA4pf-{}^V*ZBi0H>JoqNx@pGf3@DM
zX5PO*)UB#8KF7^HS?S_VbsI!q1+G1lJ@kS!apX<>R*A*WCq?X8b-kX^1@-0`?K&Sa
z1x{YCzVt#4H(*MBAtpS|ymJ^&)x%t;Q`Yc<(==0f$%4QZ`P<2p)iVB(FV%$(uPd+U
zi>QbA+xc{n#)IKncAAzG1HG#p+?U#e4uY$D+znuBR3YIZ7Wc`cC|CWA&DM{Kjt2r4
z#<;v|lU0Py_Er7krsOv{pOg$*3oBF)@IiR<>EMM*WZl!x27IS9B09ttzVz0G@y|8;
z%Y`_zhI-BFAhnonDs&}_+o%Sm-zumhIx)@dd1SM92D;^Q6yGcSWJl#PVPL{c)0NVc
zlu*DsG&ftC(ibM|jTW{(eYJDl@l>)|M(Q+A3b{F=Ab;<H!cz!R&aCCj@Vh8f5U&+g
z|9ou|;x#_oriA;Cqo6ys2_zp$pI3RNIGE4%mL92NJKQM>3mh<?a;%SARi8Qy{YaEK
zI{u8!fIWWT>HDy+5bA(Y4cmi4E`hjiqEWZt=z4Dd29)~tjBS?fSOdw|1!II~pY3v=
zv+{^G6E@eWJmZjve$KA{+0V&ss9C3t_|EsF%3hyGbJ^_~df4&_>_c;ILr(f!Z{0_s
z%-fGjVnj2H&b|kki1YqzOS&oVB{_n!H=0P=e#nGzfOVBomN@XU_k_Ots^&-!f8ldT
zDBCW6e$nKm^wB<HZG{Hb!B~xXh=vwlHMI`E24t&(5SHW~PWZ;ljH?7TS{#vNY=oT@
z-f<2zBqmBduM&|9ziBL%Sdac>;3#>{gRjME^%Vgm)I8w|ASVe`qsGdr{AkE<n7Ph9
zt%Vv2k%cgN!J;%ZtcQ2hSfK~IwN*{uU8-U|zOu{T!qwK%g3am4ue_}OX=`3zqAWQX
zo&Vj<v4U|nn+6GQ`^S_gTY3z}9Ls#)d6?&lgYBM*UDJmloVei_w9s1jDIe_yxi)Qk
zXjG4-osLuJMJ8OzOV&p9)y7OYhUTXAweEU}O_iHxu%-Uq0gULLf~z%cOf|au&b-i`
zDsq#FQFuo1)}2rAn&&yXU5t+vMVngWk}5N|vnF)&Vs;rB^Ti6B_2v?`s<pRP=oH|7
zFlMI`{&aD^UccE5DJ`8-m>LC%`G}Br6_pyaz(p@H4ilC!U}J9wvv<?8pAx%Y^NP7O
z$({aA+AA46BCkt8m@(_2cyWLoh;t@_LOUT~x*cEd*H(Dr{AM6fK2DM;CdhzkMs{q3
zpQrlQGt&N5$~p;U&Z}ikKEx%;n}<#O8jw25ULub^d_!>kM0VZ;Er;mo+xetA?slVo
zvsFrRv(=cO*iX@tl>MvkDaxbY2R23bCC$9;azS-XZnh>k*Oqi*Lvdn84hwAIh+?SP
z5TIfFFKDol;)5rUY27(w=aX7H$6ZU}2&Yxcmu5Y&>C&>s|736UJ#SSbhU!b*#yXFD
z8?O8pPDe2fat(7{?!pdziO@pE3A#?xIZ>h$d`(}C?7#30SY=w%N}4}&c<|F{5(P^7
zzV{6ll8*)p!=K1FfBC(f5nUqhMeJ0Z1R!wyg+uc1KU;Mv0pWys)gq1Nztr;yiY5&J
zw4v-X(Hs9nxc>(8mIt_aY3^)a)!)Acysx#08oWuvLJybpzn0iG6fk6JVv;@M{`;F^
z5pU|Tlh68FDgy#%H)4JOfc!WojzQf2`X*>Jc#}q=y{yZBX&6y7&_N`C@$bMaq>N}B
zqfoTR&O5J6<}H#-Iy?MFWa(HI$0iFr!t6KHFaNeIn#6$=ibnLQrshErA!3~(hz5>}
zY6TRE>g#=_F#Wh+UL&jZaHl!<P<HnSp#gTnaGIVBi3V0=+cG1T@NakgG{U~#F}SsL
z0Krtl#L-r5H<F~GZ8xn$4C;sH1g?hdMw**|x}+1OAo!P#|LcIjKs0>dqLa>lt!hwf
zF@jS>(Ea^?H=0BdoFcSm@&7xDQy6I0|0l(<6NJ9Q{bR-yqab&ZdTnR|%!o$sW_@2y
zMs4J;75r!2S?L0`Ap@cGNT8iHk&w1l;(4aKT9)q%?A)DbD)qOl1MnmPwXX)v0RqJZ
zh<4d9bs6a3;+sSu=F;)VGW>1ipd8gtfctH50TyMW8W(rxI)OMc%Y#4!Sna$vu$iAO
zeAIw|`Z*#w9t_Bel0xs0VR5TtzHN)_VBO-tU$^Qa_`#8hm2^b<$ZL|~rd^~mfvXbZ
zy=8$b86_*eUs3~hJ70fIFTolDsF>6n)WPg9sL4s&CNFDat-Y@^(y6e5s19o&Xh`&z
zPGI#hBEaE2@1hEg9_t>ijx%Fu-6%X$c=8h9wKvhJ3#!tjH07n2-^j0j_9D<pKwr4e
zzmYM%d^4JUeSDlR;tQlYW=$i7$WFg>UICIrNkXuH8(!K=aHG;a10JaBfVj~fB(OH7
zhKC>?xJ>mLXj)*+Z6G)RwuZl^Gpn+%DI13)95}Z`rq+RLSMwTI**U=4?3~KoPQK$Q
z7e^O7nOnN=?s0vTj+hoTRRC7fPSxlr^`6@%bLyf%K+7{zT>EE$^>L2i9_UWgYo5vi
ziiXHMywn}_`+gv{&*H-M$>+T(r<R+m{gw+@+5I^L+>F5Rv$IEk0U)Z<`nZk4pP~g`
z;;6sxHQ@|t-$5X%Rw-?lM*tb$kQS*2M!3zFt1SCc*OQ&XwUC7uhk$~hdTKX|hvoyo
z+NO492jJ*_)~)P!h``eC2_pLKvtAc*1)xre*b4Wv;pg8%P*LUq+$GnIAUzN^uP5NF
ziIZOpHSPO4GIxD+@dI=Wk&EHTc@TfsO979)syBc8i#@(hK|t?ACbtZq`lkXmKyP5O
z8uPmtO+R_&!h2jUe$9NRYz0tQBHg-{2>l+<7aAmy&Yussm$s&Z$~D%d{lJa?66C(Z
z({irJ6W#3qr{)D@lwSm89_<JY@mdPwB~D=G&)sK-!wr|97n{yGJ5^GU6}o=7od>Zx
z6TTTH-bci1=|>!WmPvNqR)0R}@}Mm1Mv!#ePC(iBcOBdX*k%FvEC^7!B>xFEFNh`3
zlRTUE_5N{)Ag3VJ!w`g(fg&iEf0OO@M=|C#1aIQ*<Cg(rjCXjNHWd;5;)cf|{@G`2
z<Fn4nU7?NVfX}gPN#vh(55b3$L=dQC0_p_8piM*{qNhWPqA_`<ird2TlLP-)FDuzC
z`wCv>UoyG?*J;%2)RmrkcWQrgrTR|d7r@?E5n!+0_0iGnphpMCmVs2H6zW?fa&Z4d
zP#zk85R}pTBZ-`ME8{*z5ESeHEvQ53z4HI+>#U=q{JKXkDF_1s(xE6IEkn0TNq2Ym
zAR-;oT|+lYcMS{!j7Y=K-6aS}BdMV1edc@bUH853`}&*p{4r~0t(mi*v(Gs@K6^h#
zmijyx)Yh)5?+slE+X>i=0ZR4UH~%dIyDXYZSemdO`=<EhWp3%WhQxrwF5-9fr1s*A
z#X?_1i+uZ(7oT9evLfF0w+doX4bk+z+aNIOZ2T#+gKIB=`wLLO9Q4BX!$8`#qPZqZ
z8}-TrUz9Y%S+$+Suzovj{|4~Pw8b69r3%JCj5u#}Q|Bt<ZT3?Bs6KX#Y$X8TPi4Wd
z-bQrX9<4!t1DFMJI`8;m{bmP({>X2B$CVSKP+TIG8&KQ8MY_=Js|vLM$8b6$LYA<)
zs&~MO;^2YhgXeeY2m09-4ottdRhb+)uDv|!-qqRWV;q^zzv8c}5g}$qv)o60t^n+J
z3}FAn-kn%@c1L}ba@*&9V<&=$Ru#26O51V}01=pOn?CdIB4E`m%XN!E`3ZUaAN8Dd
zR&&-_)rtRp?A2jJzg?!#KB(fNd5oqAYA-c2wZF;vsi2puPeJ}g@l&|)S9kGEl0+Vy
z?HbCbmH@vJaFEQ1DZO#PepzX|swLmQTNAmN3+>}d#<yUh!~)0FoC07G(nGO}Qr4~Z
zZQg-f2GSV$B+~I4fVR*1vq~Y_W@~!2-kK22hIs*;ly)?>lj!RlYe+_7dqpF9SGa}f
zPz)@Nzq|4zk7Tda3lA}noar38LDwPx>U%wWbRshLhG?}F*mX<+N~slqNfN8VR9M)^
znaw<(ypN_0%UM0Nm05_1_g>1w%^c(+RX`tzoDslI+cz-`2e#c|<si95&57kWm|u%b
zRR=XO>>>5->RCEshRX%tNb~NK)J68R!#5XYbpYbTms`CK5N~@VlBdyXyE?RYCTOU1
zz@T#Q2$00SMZJ<d>jrKf4!3Kt7=YD0{Pp>+Q`GPqphzLeVkey2y#SzPW_W<k=*6rN
zkLT$F*MF`J9BwXHB|<FX?ooNu;D6j=eg<Z;*Cm$zebl|}F;N`Ee3#FbN!dMVh^Wl;
zW-8+yfLRs2(BL-I3<L-p?}b+q`x^a&qm6WC*F$>7QkM4JVcz!HF<o~hzXfNsAKFBW
zN-+Seoy&KCLRotBk=t5FJGAW{F|V`;6sfSkI_#ZXZR@{w{{DPI-=!?i(=wI`r0AD|
zGHC(eQj>2Xl-j>grNuFdTz`lIfAj$4hE(6j^m{L?`tVRZ$g<x?Z*KwJRm|(G-3PLE
z`?n{7fwF}rnnY8CV)UVJPvAnSofmm0{$=5ep3t_Bd!uD^(!V`)*)$nuu$CbRAfoJN
zWS|V*>vIK?a*2XWJ}{WqQ09B(Z@^+X1C~|5vlm1Ir0Nx#3<_MP_i+tS^A`*1V5)m&
zNmW=6&oc)mVh7foSXF~n$jjw{rq0he#|wBksgDE-NNu%S4r-AuO_Or%@?)OOjU=B2
z*M&ZAfRJV78egwZ5?d;AGX!7Z7nbQQ_r7(e?LEurXdd}Rou`L<u|(F|rbIpfMsMJ&
zVJfa13+x=v;d2y5&KfRtaY}gbHJQR?T_ec0?4t-pg%l`D@7@Cm4an>KPNO>V9rI`d
zPq-DnGM<@`<yiGBLx9@B;ev1;&Cq6B<!_?!tVXI9f9H6wvA6l>9VMTu|FC`BX%Jld
zQGLSQ#PTBKnOjmU^v@WunK@$X$T%`$d?W&z!#C<mtH@XC{x+aId);TgTl!1KKpnvz
z8~Qc%`CfJPx@``G3BK~1{nr`}bs0~T@zMoP+8-Yk?gYpolQK^2%co_!UK*jMli7dH
zMe#m36%f5YBO(2Vcb&rmjQj%(Hy1Sc%Y?13C@40hME@o%P$hed^?h5z?7C91HuqrY
z=u=ITBVZLU@tD|2ctjAl)!Tfxo*6JR>qz#DcQOw3k<WS~0e~EE{kmV#G7&<eb3_jM
zBmP5y1N2@GzJAngm<^BpGyFL<I)+G;Ort7d*;jKZ7hIr$p>)r2jO_i7-nMz@pG_^^
z6e_9+Dtqea$tMfdM?iHJgmw5h^kvxgJ5Gu$St!jiJ!p-J!^i)ATlRyh$NNEy+|&q%
zK)1Qa#xaeuu4cgMKvD2}DRF`}c5#ZKF>^X2NiFyp-A1+Y^dDIC6%}Hg5iUe$!RF}>
zw2?yNIKsOGaDta7hO#p^EwEqP>Do(KJWkbjn#!8Hv!^DBhBufmyQeVsCte`@+q$SU
zHA-@b!3eSb{!t2$Ob^8ev?|Y4sf2)k*GZ=Z$tJZ^%`k9Tv}=)8%uq|EOoAHy?11oo
z(Cwqv;C&4Yb51c>fhEs_PuzhAM(g{`kO=Sg9HKt9%;+kSwCw_($_jvNjnA@v4J%#^
z0C+mRlGJZA;(kQTUo9z-nI5oT4hch!qaO(2FCFnO?F1nFG%0if<gci$6P_j)L;|2z
ziQT72O-q&vCy?)Htl2LB!6F8^WS2+fqfgHz3OZ7S^GZ!{dS}=-m$GPZo_VdMHg9cj
zT>NxJ0q3z~w|b^XY_NR)ocAh<`h1@#D`;a8g4u@esaT_LLekgC*5bWc$Jof8izLT7
zF371ABx!~jQFed)0Oh-8OBdCf4J9qGtaH}u%4hjq(4Uajgm3lJ&;Ie~3o_T}f}uEJ
z$cZ{O)gS}#JcQ{LW{ZCuw%hx{PW@~hXs1s<9y{UW@YSHnl=Y(C6sv@WP^Y7RC)>2K
z;x=IL`Z|S|ezcb23D7n156QUp&oh*k@hv$%<3=8K)2KdNg3oXVI^mE-zAT-jzl|mK
zL&W5+bb1%8;EEHP9xCZa9-Kd0Oi0(u;Rfqj%qxsly{v;&qPcmcI8!mc$DzxEzYq8p
z$&PLK`|Oh{2y7ym@wC)=ImGZN9xE>pwiEhB$8q5*^%FjqkJ09mHb}N{pyoy0GgedC
zq4<$C?r%Hqh*biBwR67|3NK#ymaOpK<3%yX(JUZ-3^Ou2JGU}NY(TtFCK#wi++ZP~
zCXCuNZM^$8J2Xc0piGm3P^D!3i5~%;1$@^?62@O`aka#8hpc6mV{S`|l$ci^?8D$k
zZW9xnsa(+*bANWt4C~V62jd@#(x0$%_w_w9PkeLIa!f|cO4n2}iqY5^m{GSNU8Di_
z$!ir=Wi7(C4GrF}#k|GQ7jw0OLDRj9m}(~zsn8g0NlyP!M)0N1ozf0t`I<C}N=TKR
zi*la&$vcF;=klYgh#`>!=l#m1k=ksJR|5DsV#jDLd+6K2z9jNT5sTo}&iE>{NDF7R
zQQ8Fp4$>hf;FI}avPMwX#slh?^9wl^x69=^+oO+thI=d<!57;vlZ0Hxmakt^Qc|wU
zySUq=8zz6wzeJD|GpB{HoZzPR*kxgpQg;d;CCCoW8H{nLNz++dU7lP=My9Mv$LAe`
zvS4eRS})-tVGqWRJa_O}Ugb2Rou+zDAU42FaJ9k@7@+;wj>JQ?I5w}xhqUCb6m#C(
zOBZOPW>3RrsSM+;zH8|qRb}bhNvG+R?&+`xWu&GbG7z<uXi7Rl`wTS91Y+qpqr0&F
z7?AQw{q?hoP;4vshhPpRH7myVL_9N`x7yhUbA%W6K63N|>U3vjQ|_t{MV8=niDyoS
zT_1Y%hjoJ}-lcO{*xbD=+hn?-YMiCih>8|uZYqSn1XWR6i2LF2K@V)zL(TE*SdDrY
z3MNFUUE_yRM>l&mrzZpO)6@*hQVAtW8>=I8b*2a@BSTJwP>1=KGYm0_c4hr&^72KG
zg<m>c?@n9d^LS*zE>3d^=NqV|LCCWj^)7SmWxgr8vy;9#q|!+}Ws4umdZaWaCcS3y
zW6r(en=<MnPw9RMnIK52PSs3_ZKos+EayqlhJi9)wP2EZsg8%pWJh{erBt1J35QBT
zqnGE9P_~@I+!j!$h(*9_1j;nCa5ce!QEp5WAWY-uR}~9?7Mmcb_Mte`Hc*>&z~_GP
ze%4k%Y~A$7u}Y*W=-R6;@30mm<e2R2h8nc%D<Ui(blR!F{GL27K?i!BPBOCgG)S%y
zMjMU1AVNmdwKw}Uw^EuBDi>rm9E{buYt4Efu>A<w57MydX}Kyu{*GQVra#ihcIu}~
zaIhV@BtMDvJ$S>yTS5mI5md_yd-YjT+_xr<m%HMx$y=|4|EVqRyoZj2;MgiA1Eo_u
z<iX9GNGY)<m|vMRu?Gt5>scwU2l=4M&V}u=ztPPg`>d5;F@tZn-Yj$N`2iuV3rvfL
z@Pj4QbTVfSKK^Lch)^|ssr&BT*Fb^UnBZF_q$F6Bl`k^9#IZ|H=k6-Z9cz+z(s5b6
zS-9jqp`C^Hc)ks)!=&YqsF2}6e(({!phrsvJBIuno1!lLh<zsM0EHkXrkvghf_1S&
z(1LGdd#A_3laZCdyVRMrGn>MeV4qYR4x0kdVAP|Muq$oU<PVc$g&e4bosgAM*Do7y
z%hOMcz94~vCAi5QU;q8Ii?y_wD89*phJD;-!MQWj{ys?GcOWR>t_N;U6=3q~mWaft
zQS*<xe0m>&x0;c@O0?=_`pmD9iZqdnCKagi0`24yZ8_X`tE`#NHzt(pS^k*V%75mT
zyO$-#>vOf_TQ<a*om*D>`MJtuCAQkN9LIadRm1Jd)+9GX^Y~$|nhA!sfM@Nup;)^M
z(uR0QsQqaiY_EXZ!o0TLXKLvQ>@hW_@YXugqYl$uxOFK^kFXTfCKt#q`b=ZBf%4Bp
zLI1o9*X(2MOh!zPX391CfK1eH22W~=7dqy?<3tSY)wy(b&miqies;?nk7I+qt9hVh
zMdx;^9%P3Ajify~VUO)JHoKKBgu)(7wNXpk)!Rel#1JPL2%0+e4>$hS#4;M(0t7R*
zgnzO$7t5xIp55log=q;jH=N5I1PJght?amXML$7@?Q|anAF8xs@-Zs_j&5emi{)sT
zlo)6H6yw0|V#VV;wGSd<dFRp2xE3DMWrt&`Em=vGC4uCfKNKHkH0wlC{JQy7UWe5v
zR=y_A)uZcmc*Y*&(gt=tGN|YowJiCys7Q68s{cy2D}A$Wau}%owb?%kzRO^Li7<-W
z$qu+EUeput!>2ks!7=KW?lxmyelg#y`$*4nNqF(CL8V$B)a#uhUQapAz|f;byGLy^
zdkDMdRb(Ymt10ih>d!hShtjaAgs=1K%+%NzRB{@&)v0pA+1|B3Q>;0{ocQvEyy!>M
z_k?f~a0CAb7y0!-^Va^~wLeuLi(O$?&kfv#v!+n#IgnLoppcY}LT-$f&(Nl(X`4mF
z3I)5Nz~UJ1n|+G7oreSZn5I70tQj>qE*LBiLK`*~Gpp#R#D-6KeVU(fEry4gye=86
z#DCNL)01B7(`1N-{DIU>(uqqV#k@<Cgpf)~!=DMez=)+sEQNEKdfK`lNt1`{n`9-?
zw)c?~5gAY{{QJ9(%(j9R?1T52^Zl;j8S^inrRwVYP$t83$6WnwTv>XvKcPv91n@i3
z*w|DcwasEhr_n0XZ+J@&AOX)fp7t&tFVnR<<php5pe#R3)xT>Uyl6)u@jWYNRaY&|
z6{oDD;|@&3-0jawZC9};UQK<za;zD8gVb-LYI#bD#b`iblsv^vQU=E~A)EActhREt
zvLn8q5_t5*ZN`q*{eV3#{%QU{2N5X{PBq4Fh4P~v%&<<~`BqhAwP2~ceT~<0KCDc;
zxwFxYA8fBn!p*`^)s7C>_4TUH^X}FMd~)z93{^pLM(~EzXekpfDBbW^svV?yFp$wo
z_*J<d#g{j_B=Sgy7$%QMhOan$-b#g++^kER5t;aBKka?t!#Fpg9%q{+j<<N|<S*a*
zV+C*EQ#|2?|M#Lz>a+K*8J9kapMH$AVGy!)B_@16<}5fgV0#jGzD-{RRZLEskuwv_
zzOV?sVPpElWhLY2(ahMkK_S`S(~nTn&JR$X|5kDP;AwY5PwnUz>mbe-Y0^aj>5{N<
zIdiU$8|fjhvaK(lJjCBFnW0@8H0YW$#jqcj+z(3i$W*}%SjZc}hRxT9khp)uSy7C-
zl_RGLbV$1VqW0C%$GTJP(AA#g6xwmNqw=QJDQhU%aKs|jgY+#byMH&L!aDA^&c=e)
ztYd(ILPdks9dH1@zP}v4x5W{YyejN~&NnU1y#Z}go2IS7J~bcMIPCTet%?!#ErJ^F
zATImXoMs<fZUON^FkIdsTaw{iZLU%XDM&dbN<OS<0Vtj4+o2p^Vo?rHxFy^qVlU<9
z*Zf2e(X|(u^AjRPj!+ekYG0j_;^Q-eN|#Ix#G)kTo4r?`AcgqNKQTPK`M2~RCIabg
z5lRl+N-AX*9>I_CFAc$;KLi-fJ8#RJBuH!fb?tbx07`dSc;2jb4YUR(d(_1w)lRZ_
zq@*Is1fPxG;|7)FLF!5Mkrn1G&E%o@iJcR(TQN|>EVS!xYvU^>?&t}xZ!#Y?UYURO
z%Ne5aGetQ{SE=URl_*kXV^Y-V7@49#R_ozd-f+%6{HCzc-lPA8xmHE_f~zzeef+eM
zddjHGz8h<n;l?EN^q>005_GZg-U7=GV0d4?`WzBTw`mK1Xmg~sS1-;%V)Fe)Y3`<N
zx|&~cZxv`C0?J|lVsSLB*S+_WLewN81uR8dBxj@}?6Zq37#`+4o*XVGl~c4KvI^_r
z52b(jwgZSim%#&m-fW(Bd@tyul9G>}w33L5AKY)!=|AL%j|o5ocTd$)pS{LNpSK9=
z`Yd&<Z-2t^0?tMY8S|A$kDyRBOne>JYoE&A)nEK6Y<lWY>WOGu&>eRS-}JbYfNA1r
zBkhCHu8VQ#l&a5+H8N;6xxG!yB6c*Rtn?+V{~Tp5p;$W!Ty_UAqf;7;22{!|`IM+n
zlb2$ex_`!m%%?90EmC0EK8UMY9-rzSoJ`0sISX<=ZP98@)8_L|tUfIcwKCoJ5gM^4
z-2P(dGY~Y~Ovue&SXxGmlMt8@<U9K@NvCjTD?M#wBb*u?u{)6y+hU;os{Wbnwtc?v
z@|=PrOHt#e>vb;pevr7I*F(7s9$amV^k&`}ToMeG9F0IcqwbWg{VJ`kvnw_R1)84>
zplieoEOQ!<0Vq-1v1$^#BDH8&ZE(cs7oF)`!yJXmDW)CAigGbq^?VmMQ6jvYLs**s
zB(R9UBMd*06}xg}9cu_KyD(M;KT=My_bW|ZWx1ot&ps`1zqsdS;SnU285X0FQ~o)L
z-h-5>#fUIs>NT0pGI&``mgKSfK2B0SGB|7ZrkEHfmw)eahCk=dF63qrWahHd=6TL!
z&;H(*1=}m2-gKl$PvCt)|5z!<k{4T&ZCXbFsqtfoqhZx*fLvXlI?)n8-ij?Yeku!Q
zyVe@qw4M%KwcVLaD(pnnSS%!uPH;Gdc7g};1@;{4iW?H&{!20qVd6<6x_o)^?rG$a
zwb%2ZV~a-kp{dyZRh-ruqE<lZd6VrN6nW!Q<VAhJw{E1zq<zP#pwB*)?08uD#p`$O
z(H9FBwB+?Cv`1=W+$x{Por>BTPSy5AE`*gm7WSI*?)S;{f@$~_!EJmzE{P&r&uuVm
z8LGd_j68+Rj<57DjIg#j$uSY&^~yb9h*Y3YX{w#w2n!qKD0<r4Sg6Vt57FYmH)_ZE
zP<|EDm0K=RH(<v(Ep-*d|EEt_?u&MM6w2hR$Rgqx6^GjFJysHZ;1+sm<`32vZ<{QH
z{}9%((Rsrq$qv4VSy89mDs`N6A>TKI+as`vBo2Y|^|o7H!ArHo&l7b7f@N{yJFwpQ
zb4?M-h)L!G{#sEI^;RJ^c#^vrj^%c;x263WYuyyQ8~!?yw0bUkrQL#Puzw{v#B-LP
zsGSA>xTMl+Lmm80xP494gq4{Sg7m}umho;hthLZ(>j*^S;U4O-DjmHS5$!ihCJ)v>
zHxM7iV#f^uIbceI<I+gZ@bmt6B3>T{dqG~%0Vcw}y4u6cTXJ~p{>iwWqDVtk_54DY
zYZKgbkZ^1`($<k8cFMJtEXv~keIUVz$rcr;Ff9_WWr8!LlP*Oz%0+F(-z6N?$NFW6
z%_>JvPL292?Ct@(4Qb=my-w@yqVZ)c-s>~A@q~U6!*sbGLRnL@78+67KREZPxNr%g
zioFIkdmY}{G;LiRi``n(p+NALE=$v_tA+D1pnvXN(sbBf#Ix^&B2B1Byrw$@uAH*D
zN`{0ZGDPsbB9U1RTxowM@3CW0pU)?nlI8gHkplj>n?y;~@Fda>(;p3R7r#(BdH}<u
zLg$Q?UIF#lQw=I3==Z80Mwp!Vh6-|y+)<1npgfbfj_~KPt^TL;H@t(&S4GDDin=C*
z={xcC=7iUE(7V<ywtp%nd%q#X*V*}y20mfvXd?wI9yeC)2~X-II-L9eHzWbl!U;eS
zy2L6c6G$Y_-Nhi?%0HO%&<jK$Nm-W>9XWP%j6p$=lL0rXvxl_aw|-0bRi0FI?eLSS
zAMrPU1_l?zF#z8vi2qw2+Exh=!`X+W8Q9>r8C@%$B)D1;w5y4n$tTnRZR(;qSu?(#
zy3M2GF8_AvAE49hmvm$2;hhmOLHyJnZqh^F#GU>lh1|Ks=-LcFXZ1<`_n-KeUz}9{
z#<4$wC>H%IWH5Ihh(9{9@}0Ay4XFQm)r+EWhP>-^?Z4v;G-#XwWMj+lKi~{cfq$yv
zTTkBq>xlKG(b5-;j1>JHXV^#kk{&xon*RgN5Y;IMJV(PwIx*!HaNz2*V*)J{a?25m
zwg(MD!h6Ljl&+4>+TwkJ?(Dz+tH>Pjolq8@)UgKM?tbZlFAvc-W?0_*6Zr}+ivWV?
zKV}Ue6tg<3<Kkhve$w2sK39JikOVDYl(YO}bo}kVUgpv)fPm6tx8i>PG3oyoAF0Lz
zkN`ayK_-&_I(+np^^9adQjqcMyL^ei{1M<?VFNS5@t8I_>aPP{fC6*B0)6{@{BLy3
zeN2uJU=figffQu^I$&oMAh!#u^}QW{82yWa{_A`4mw>Xypdy$a|8>BE)_~kXTPx#@
zf7isAN5JiqwU#CY0_y)&oq?V}ynx)aZpU92|83p=zZo%?z5nA+$gH5<nj?wO9pI%P
Mt143~Wghas09O!K`Tzg`

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/pgbouncer-architecture-rw.png b/assets/documentation/1.27.0-rc1/images/pgbouncer-architecture-rw.png
new file mode 100644
index 0000000000000000000000000000000000000000..0c2f4327f289c983e9a8dc4f50c62b6819f8bffc
GIT binary patch
literal 169722
zcmce;by$>Ly9Wy6fI}%IjSSu0Aq=8)hjf=nN`ur0294wp0!k=?g0zB^C@o4i7=VPL
zbaU1-@V?*P`|N%GJX{yU%)`pN*YCd9MC)p+kPy-l;^5$rsHtAl$HBo{z`=p5An?JH
zbdjnj;18~kzRFdcSDzS`z=tG96E!C-EgT;39)W|8i;r^-YJvj;FXU(Malv~!96aoE
z9Gn}t^#8uM!sYr;`v)#K@Uu2f;4k!(4t_!Jv%lx^asM-7KJ1^?cnkUG{&^2qfx6w5
zl)4B05O}GY`rzPDlS99_&Upi1J1`;_Lla*UElnAFPj>-Z2Twakfk1aJs27f0pbU8H
z?&xca40Lz%@R13;!h&rf1KvZA1zC{TCcds$SWL8ZkxHK4jz|dsAps#4c|s%-Dd+9r
zB%^;#`K&wmbcN-nudkPkpkP2ifIxt#fTy>!ps=*Gw4jiPpoj=RXu<Cj<l$=@$nW99
zdOFBI<6Lv}vG;cI@^$g_Ktki%+Ijl<USVN@Ci?g1be+B~PXC$7!{=;UV1t6te*}dE
zgarQ`8+4U}p33Mu`gpqeLBkt)xcJJ8$YC4*&&U6n?X;JUw~HfKFVsz5_^iu+efB@w
zD|xzmc{}>}K<&lP+W*&Q|FgaBO;2A>Kx=Oodo>SVM{m&iY_@+E_<y%J8%s_QBG-Q*
z-zjgfPXTk}3FQR;Wwbou5aBWx4h{-O?V6%tAnxikQ4X6?=%1r-zkWw&f2Zv*+YCp+
z78Y;OR}uN0zhfTS#buP~dE{N|OSwi)PMXUZ-9+Fy)ELA>7A?<_MU!%#$}o`SX|$fA
zzmWj!+dbKyHY=O8jPdF59*c(Dlgy$!4R?Z_w6%<l@?Pv;%5!>As*@+Pcqe$p_he;=
zn~Vxhio(JD-(MbTwZyvXtRnumf1`KtyuIJ?QR--au@oHXpbYh0-nhW6YH;|$HWA^V
ziR6s@)}#2+FHwGb#XeF#+{z<a>#fyi6%K0HMy8uTPdp9`fsFWXFNKCSY1KD(kF@A^
z%}c~Bp5X2}?g!|ryK2;ss#c=Pk7YwGcq^1o9?z72-9JAsu%zRC?{4bjmJm|@0hS09
z11!$rp;BfjQYZ_Dl~y^$Ru(2e_}TgG7*8s<ENnA#+{N`)76W?aM@UzX5#8KD1XZw^
zH=(u~8EVc5?Ljg$%dO;HI>mRf$nsuG$b>m&pLy;r7|6ntx%&Z14>`z68-qB!p8o_4
zMKbTah=7yk_Y+54*M~1tnG`+Qz5X7(+dLF;xa7B}f{#GX-H#B|aZx<JA#p4JSb${s
znHRHAUYl}}I)d$L#3SP9n;eAEEi|x9x-Oyn=LDHa-{FKhZGK$EMc>5xDO#|_zQac}
zg={Wp-PPf3Rg)mr+T(C>b<bERcIsNpV$17anIwoGAA5w44u*#?;wy-Wu_@hCq@`g<
zVhw%Z=ymh6M9-EC(GjPw{JyOFY*MN(Lum4Vekui83?Y=vO!88dk(7oz3H^wemA8)y
z&O(*nA4h{(CA*mfRuMTj?!F9vl~N?5eXK!e(0sG(tzUIO_fW!;NR3aHZ?)e|RFh-b
zkH-5rFkwPs;_aSR*7J_mI(4hE^~M)2OYGcZwEsIV&nOvQqkX%|BhD~7IJza|X;y3-
zOOg$)vItxKU#{SEI89el(Ma*DPk=)*lVX&_Xm8y8UT=~SvWI$e!Ecnk*G;GG`?wlt
z$rPOTEi$jTzpAeFY96IAzi-K`n}M<pFJE1q5s=;XV7jcQpzd@e6MT%%c;)1to|Vp!
z6Ko^;mH=Ta3Wf(}X;CidL>LkZB|jO6bVgj`K;_ZW^3$@CW`M0)46Jgdz`{8UicFh|
z3x3R+mmWL$9uoLab#1=N{1z0|aEtae37QSD+a!4B;%a)ItVDu*%uGguBTAmHuCs}4
z$fa7uyO2)n{x1Ylw;2e_vLxGiI0I$pH&y)e*=Uv`tq6HhcYgIyQW`+wACVC#RTxvo
zJsH2gi{f=f!_u`9b=}E(8jcG?ro)1N8F1m`0u^^=1%h09WR~cEmKvq_$<*|HSeG6*
zT=~G}#wwH-b>nFqf=vqukeaJ-cWg@(yizRL_A0880GA$jUz47F0GSjB2-z;leCcLk
zOO5w^v92Az!o$X8yWYGS6xHRrYo0%{%EO`;5y&KR^pmzEw~6g!xACp@PP)BHBm8;t
zy+%3d_3Jxzq?mx_crIpG7r70aQsqSK01Ig{YC=UMs{NV-Am?Z28^M2w(Q$~+&Q66-
zN}Qx%99*+}3M0M6Y0j7pZ|`-2XUlTyKHZX42{<rrs<H8RN>*csWt4|k{rDUF%(976
zXmU7(tfy1uRB+JIL_*27-~1aX(3FV6AT}k!tOq>xfKf|kvAUPxc9(#3re!~7H)_dg
z`P8K}%sOwLW&Wckwm<dL_N&5?IB(X77C2t;1*Rlt2|4DYb4O{?m`59U(h4qv6Qr1O
zH|1RBh?Z+W7KHSqXC9!I;R901%zp9L?$Pn0^2SZVw-X|ifKp!&$G?7CqeXLTgeCFj
z6P|@sNy)$~T9NDgGUakaFoc6azV%{uxLM@J`HMS-=gLyTq$SlPqxy_SBLFcYP&T-t
z$*sM6#(qIhXuG@?y2=;V+gkD)anTM$7>$^|=1?Ev=VrwuOuW6qk$C7bKtZRP`4UN(
zIM8?3$_g^vFH5dX#l)<4*PS0bG})7<F0$T5rQ`Jq&uLzv!ch1b^$Zv%G8$!1hjvd3
zPr1{p-$#kS6K1M^a|Q=}eYy_IK36EMTdR|0(Uj>2C+&QQDh)FgX}y2+VB5&b>8IK=
ztK>s%Y4aOB{e_aO42Bfw0<h%}a#B?OeV_;=loF2Sklr;5TA3#Z$^Fy_x0VnW&+v3&
z#D$CS*!&h1E^sYgov2gl-SjH@kYX?|w=|+w(R)eqlVBVspedRQ2}=N6Z2gP>G!P-C
zjnrbLrF+(yYru}m%Y3m=D1wOM28vhA5yWmbC&S2|m(rg;+6tfR%~_926*RU5v-AqL
zGSK%5KeZF?Aobx>Ytc7aho@p#SRx{1VNPt3oNN4oNwi%y3x_@P^~h&a_x#|MJV~SW
ztzUvrrNuSE9T$9vZ55HcU{|ItF3Zs^QGl+TnjQ3mY)Kh{E`B^sQn?{*B~w4ewcIr=
zNfCN2Q}77}))(ni(!qQs6RR@@EY81c2-vS8X<-Yi_Ex_~+R_tP7x?CvIGYldT$8`t
zO(jQ<!PoaVG6#f>{C`giG#wk8$pw|pWG!k3nQW)lzP^j119J|Jy%-`utHOVZvf8o_
z79t=key;iWPSEYeelui8zx<OBiWNv;?zQ}=y+BJxmzw+je1iLqL$tQbMj80sd>#M$
zrLf)1JBcUP5Nt|7*Sl_Vsz*n#!qk|$<`AqOR9^s&>6<5bvwkK8x_-Z+YEYS|Yyj6f
zH{@+2&B8GeQKGqiQ#6nQRDN-U^bL%?@`vP<{)f`FQjI{Z>u+<>!9Ec(Fm`$A1?}~!
z;`<b+Krw)g7_Lv8P)AJ6hm=@f_3Vp=Zr=%DF68<Bng*`=)NnfrpoZ~TjBi*fZtfn;
zsm*^d6|oi^aEcl7CLbX~*-+y8lnHgjy_jc{4t4_s{bT^!_+5?1t_TPk=b)-AtEUcU
zxb$2)xiv1qJA^H=AcwNY57?|x^M~uqbJaMZ#e;oHU)!j6d)E16CuAX;IG=5z0wR--
zltLZEKC92ocoO)H%Eb@4(R=qLaq&<{TWDaDNIeVq6gf0-N{S_*P&!MIS{$H|T~^Fp
zmbs^3;MkW}Gg-*$wLguzxM>UaA4EyVcIQ<B!-Oy)h?DZi*vCqLlzIzDQ*Fyd1-n3G
znB(ri7Wtn4`WI3!Lu527EkjYE$!{VMOUx>#lHxuCTz>3vnUFdiW%Y`u|HaE1%i@4O
zzS(ve5YgDM+axe9(CEK5WVGk8a{WUA+aU44@lQlOg<RhAg{KvWdcLIUN5lf=`VuN&
zBu00dn0u&oATKGSPN`B6Ej%t?zN}x`q0bTxeHEBXjig9s0b!B~UhnJo3`#syK5@bw
zbmu`3bwPsg`qdUw^oy#vI0vuVA}$)(Cn7d?w#bcq%FkB-Wp^f`$eELLfrvy&Fnp+`
zFyZqYh#Kss=+C`z$&fev5hNfs3~0KJBp2^Z6VXqy-@`LoLJk*J$<PkKUovO@QZ69_
z1aJWaa4a-=1qD+RBB?~^Yv3J6<v3UM%LqZ<o|LQ-eRFe;G*3IA#iR%}n*?T7516@M
z89}OTR5U@a%0rD2M4>v6<C0t2JdqJZFg3caxx3Vks!+6XmoD}xOA;|yq(e1DQBFjJ
zF)b!<LO2wb`3DlpeEs~7uN|&C5=!QhVFC&mx$t1Wi3}fG0{$FmDHD)+St8Xyj8<0|
zl0X0=i4i2_dGrs!DUN265=AXsij?5cJzfJ@UZ)!FaI8kOnAx<yZclOCcUt^5_vuon
z872yWB&|bz82>=$%=BI0;(-zla6>~<>4prh`nuO&Bx#{z`ftbg2T2$`7l$E+*mb{~
z=-)0Y;q{q`L$ShNW!!r^8586xGa*B#N4^~mydA~!+kBa9Dv8qC!>KKe27QXQq+U0W
zoGSeS>4Z|>R_&KA-GCzQJ7}^FaupSkvC)UAh@Ywq`<n6~ZX`tmqQIX!jGN%<Xmbmq
z44Txkvdy|BUqj-msoKJz(JNeJS0b}u*f^5U316Ux_j{13rh?dmeAt4L3e85q=E$a$
ztjX;f351J&3TO2)dK2)gxXxYFTvR7Lb@biKns<lXSQBIk6HnldUFjCOD@lP##7W~L
zQ+<pYHodMaQuyj#2`P+(LbY4<{(aon-+ut=a+LRR3Bw4;fJIPM($l<yYyGyHLQ+yZ
zL%|W^{Bw=`kHU`XmbA)$Km<mXpUe*9rhG0{YVy6zp0HFijTD6x0K%3UW3O#7Z=-;S
zV$=P*_ww)F1s6$&NF10c<@4K`B~l9xU!r6<&GM@nH}@=tt10FMv5E>m`!Bp#Ao&M;
z0hm?;xIU-u?HjK@nsy8sVF;NcP$AH6E_LMWs<-8mBCh9u+c5vW!Pu?c3CD$3a_fG_
z=-=+`DkiMaE{ov26cF6ExDox55D!?G9k?=s!HWcGfmBROBhgC~Evc7v{<ku__^O28
zqY>o51y!96&EQO=-AekL|8(K6js$8U)ucN6XDpxUUEr+nN@!TtmZk?y0h7@cXG7cm
zdX^i4=p8NSxI@+%18Dq#%$c$38|n%f3P}zGA@zm5Hk&Ni)Kl{3`-cg;Au2W2>(_D6
znus{5VnaqB5j2XO40}vdjmAOmrHZi)qmcSQ_hVQ;$tb_|5dmRTHPLC?0ju!k3=#B;
z{<Vkw0o^Y&`~c;x&gN(=vh_SWcIhU9fr2*!1^-{?uz!zbxOj-(^Ke$_|GUK&0z_CU
zi8~M-{^xP-bQn_Ih?WqPP%`WP+2a4Vh2(SF1plAwC?K>5Jj5Fqo-hhNTAJ?f)Hsk#
z&8@nN17m?N>{0$plK-|z6c<c%!l^Ufb3dFduP0;uj>DwA_xlM2!7I*qxNt=81}(%g
z5y2MK`@P|CaNY-MQbC#DUme9l3y}*|j5qUo_ghSUW2@Ai-y)gQ^5*`RXEI&rc@j}?
za99_5#IX)ggaZr^CoVO79U1^rffKqAwG_yT9pNKfz;gW)nfRw5={LSz?Ca$^(=y-0
zC6Gx*xE{w@!|Bgvz&sIzapK9iNMKK)0i-}^9n^bQ{Pd$TMd0*ml|$HKW0qjE!MTmx
z;|{QC6~OroHSFs7gho{F6Iba%?gDgI1|fd}()QdbyIJ8ge&1eyS$`M#&bvc&ma8aJ
zG$<h_bc$ZR-&7H~0)sD99TVgqgVTm7IQu!&E|o}OmyH4jKf;C$a_^*_g(wxD2Nv~n
z{6%jS{&XvO_wS!@U6JISM<2vc^X2*0`gXfI=e*b$?yn5#80%{L<hlCpFAppY)+=ni
z)G7*=g%pL&TR-eoz3=(*pw?o0;^KwTW~t<_U)&QNKSsu!$|gVsLKkj|xM8P6&0$(5
zsooixZSWV7D2xS`yUA8-<xXu?=LoM<fBof|8{VYp@|fk|U^`<Vt-M;YrYA%2*v@6p
zIPA!1{PxXf7JmDeyt}K5ye&GW23+qXtfo2d$Z;x!&g1TtlPGYx3tAJ%Hm^6Ds^nYY
z!Zx-D*TbMyqG1K`4qW&PT4|c3Pjg!uX@e^AHv-2)9qLx)8cRKjDmF?RP!3o<Ng@CQ
z(i9U-y9QARp_qSoZQF_@OQH5?@%@{bhQCevHci~4Vj<;Ko^k=keOI!w+Xb>JpKoSm
zs(Xx2%_h|r*ACQv>yE2kT3`6y&lH9!os{1hTP$i8(hUjP^&HzXa`;36U#3I~S#u&i
zA(|v}0U=|nrE^q<X1o~%+z{)~I471{1MqZhSySy?fBllN9rw4^gkiS3ds%(1^I49@
zu>{@O^ZJZ%2{W58DaG*<&ADl(ppN9ao;GgI&f%To65>6jf+qIWL*;2QL8J{c%4P-@
z%?1ho1QZd~QWeQ#bxIF-7-e>iChP|na;`N&t#@J13x34*93P*1Z)~5ZaMJiyi>N_6
zNz^G<K<9VZ3yi~5^W?=}NrETKc|W2pb-J3GLf>=Z0*(5$o|`gj8C;%u=Xij9EorUM
zM7lhbTX9@{Y%k5Rj|Vman>rlMiUFQK0wn|gNZ%!7Lc?b?6z5Q3+1nXumO*`^c{a{r
zx9xgfMq@^KSjo4bGlF3?fDgoK{7I@nOMqAhp+`bWEvmg7yKKK7$5*~OxHsTawf;U{
z;YFYoV`q8b>*X$u1Bp(i=>tyh=7dH`gQBe2GAEC{?C|5A^}W1s#gJLSckg?z&*r!a
zTq&<1_YbStZk2$$0qZfz^#~uZLiG`9i#p#7z)!>c2@YKHb$hPLm#22;p8W`&J!UlB
z>#OTwI{b5MZ<}bgB+&IXo6?7mdbv@LXSo_|MgLLKpQ0*B6}Vt9;F8E-)B^P=88aF6
z$?%G=GXuf5=h6HZyT78}e|T2;EsE&F6lU0IuR%qg7sz!<=H_qe-;W;D9hYrRtZtiD
zT5Mc)1+x8m`-3YYjvZwa#>Z%-1SCcuvQeqxT*Hcx_&n4Ez=w#L2v(L<Gg}(88><aj
zMT3uKw9*Q`_r)G59j&JrU*;;x9uiaQ4Yl}a4k@2p-OiqH%FD2Yl}qJ<0u4cKABgtZ
zRu5lnEK0)^0YT1xVc~~p?gha}jkw(MSmAU7N50p3Rjk;}!HF1VgBlw>wlj<90&_X3
z8BUynP6l=o0)1<I(*`ormU#zxtU|WB3MMbVta)QMY0!|D-qhMOQ2SkWF=M3Exb0K9
zOn5FU>9vULX8eDqLnB#f1x!Q!db!84(*8C*nHF~SlwHpce9x3(O2bO)wn1O@r|}`y
z0ix1?-dsZHocikL%w9{$8p>`*gO1^HcIGcho@rY1aB5xA8(F*adZg$5q(8%q^s?)`
zAOnLG+e@vN@3RxuXs!q``G?Ir+AyN?f%%M#d2|^Pg6AzaS!r(>Jp;D*FKk0m`EqKL
z&^@u_R*q(~EeHBjKGy)jbS<eMIpwoDx-la~gR1$Rw|$GV)6gM*V)*T$fJ=vM&&$)A
zy&V3iF1ctl6;)fk12Q+fx50o$Let%RL<LP(0R@y(fs{~SheF-}#>nK&_^HpjiuWly
zAh-8swiQokfM?z6+N5=`{6zQDO6j@T+Mg_Y53IvX_leGlr}TT|S^C`B`pEs#Ks~#b
zaq5OyxfKwd<-?!^6e%!^iq)#IfM{%n;AlYLE)|1Cgh?9!0at&ll42)*0$Y>$%Xo?X
zWaYd9d-KHJN{o9=Zpi#M!LAZfE73!JXN?CIfo=D^*FGNHVow`%&b{GtXYb=ZOQH`y
z3@mCHrpzoD|4IVWvl>AH@LHr06HaU)r1bg_GB}i8Fom@?x50toBmbvktac}J301il
z=iHf+E_&)ITR+Xi<vH^wGJYo=wz071x$G-ZfVa?}9q=mW^Ba`JPNQ4$h(*{+VStfa
zc#*TlhmCbk+ePDC$rS|r5}3{~ZWEgBKR_fDN05LB+6^Hqi}mKJm=^X}!SoOTYo4u(
z62}$Q@-y9u5-%Sq9LFcB4VJEj1Lxd6Rk4*8$$D-%cd;w)-B+C-g5m4N1F}Q1EUu#K
z$B#7<;-}W=mosVvPaLkj{dT`%gLk3F8qUFzl--#fcoC~4-tc9{E?p}F(PZ1|BB^zo
z>e0UK=r{)iZ}aQ*uV;|}I5czQorBZ}7rqLAq2mx99vNyg)2npyv$liB-`8chT54Xf
z$@aI%o;CF}i^j9ZeA4f}mYJGuy!8J1m%4M&c#7>;pL@}doyI?mz^er;1-(oIKCR|r
zEwc?Pu=~o<Vh}a%;(@gQi_0_IB$fQ6`iUE~ApJ1?@e%t{3dSzd8(|&lZFFZM4GuA`
z4HcJ8McNxZ+8^||cLifSvDyBL({Y7H(t@9z&wTHRwzEN#Mdj`<yWblk6P3REUF*Xd
zO?<O=P68aZicUCAwkBuObS%B>uj@8FYgW0Tu(9=}^7+_h|FBD$8*p3=^cRJ{>9pV&
z3U=S(4$Mpaw0!CX>?cNWk`9=-n~aSB>v@4fck`AspCljM+_QUmd2Bt2flkUWghzCu
zIQC7y#@4#sPVA-Z-k-Y^Z>ds?Te+L+tp<;dFCMFIZ~fx+c(Dhh@z(FCc!UX|P)8#>
zWfx?T*$AV=lfNGBdGZ-SZfBXon)gb%6?cN1l$@8tF8Ni_<fl>rHp0KIDT_p<S-&Pe
z#7Yh--y%Z3$|CZgxQtrLeq^bL`T+mn$8n#lM!&o9exJpk>~NNOgE34<c+JM>CDV|j
zH?l<yb>{NH3lDfbXv{UMi=0d48n>L+=dDkwFmfH{Ai8Qi`YQvoCm_WzX*?K())z$-
zC7o>Rz45~~{+sIkWkF4+AFa`Y+I-O@i4Hfdbc3xdgjs3j_gbvY;~fy9&EJmqAiV~h
z<_C7ejK>Y~4*+T?Y&qZLGu|0bF}8l95S)Th*&FyWrFZNbc=Y;LVr&qwD9oJNmMjKl
zZyj{jtW4_y9y9RK`zd^jF96!otmpsU3H}i%m4W~n0ko<g5JvIFU8M_aYrjD#@o4rt
zW^DLGYG~8{=!)HCTYlR`>Kku5Ic1?pbZ}&d5`^PWphGMnV}x~17yv>nM2!VfoXQ(m
zHNcV)y*i``b=aZe1W30#BP%xO-~DLBdi)4fBg}T^HW;@Y|IX>o!1gLxlX|p`O1S?W
z1xtYc`Vvo#6q?<Y$cKX|{_FFzkI1l2d@!c>-%f!+n5JXO(!#U#|Fva3vzOOg($xBf
zVE5n08xM%8_gZ@VF7d4%F7pt3D(9<%)7C%!#|^LTauBJ1SnU>)@pNH&L{ZZn_a0jh
zZE=R5DLP)$R$JXK3iCo@S%p~3WH>G_FwHkK*{(uNdrpP8^Ft8?KN%Si$PLylrjA^d
z7g#-{n{Nv{b#j0ed_<&}e(x2705E30Ho8LPa@1q%$HU)2S_JA7#X;)NMC~8;#3(fm
zYhAD}W$^mF(n}Q4|9SF1-yu}MW~35+oYMV&AzDO48V)*$mxKJ2>;IjuQ5;Drt?P{;
zUq6n_UoK;fK!w6s6S$2!a`wG1E>6Q2-rr`UKBd8bpVu7M`a(J<BOM)2csGRT>1MP%
zv{xS%e)g(YDOeP}mxS!XM;ihV%823ii12XQGjD*})SR~ATs}%sfIT5J3=LBWX;PY|
z%>=l_$QcG;x{==$P5qO*yjAy!9Zu+;23Qmh42^e-!GI@08Z8<(M*@%y6uSn5Z1~-{
z-Tp7Kk#n|ksh+kb(&y&+%Nw%aHY|58bV8EHC-e=Y@7LQ^N#dtd*mAtCf06h?>VJV`
zioRhCj2D>S0c=k-$srQejmPteXGCfRv%YL_1%zq<VG{;zDCV2G=+Ou`k9@PZ{4CjO
zG9Q2@c+Vh}GAZ5uA%q)OdDo++_wzcY(1Br@{1mVmN()l;<Pc&aXB$T*d81>hV#Ghm
z6gTc0Uc`kzJ%eqoz42UEM#2D+<{94~0B>N^0LQ)<RJ^_V2VqX$3qzvpuqHWctCZF!
zAc?sucnYNoG2{C12?M~WXc=Sh*DNxZ6yr%M*Ki%+zL%UYx#sw3n)q=Ez!3Fpr`XQz
zlCo4hT%yxS>aJ6<L80g^q9FjFF!<bRj(v%c;_*sx8%W+t&-gv}DCVFwz4;Wg<p-GF
z053r7MuOTOCAEYwbg!O67eXv{U{e~PPhDr7OF-!ZufVFTmP4K2?~6@%r~#9sd8<e7
zw=kUWThI6T^0k#Efm4|gVg`6iazRH{Ta-xbA1%Pvc6L{|J}a<1Lt^Zg6kEj6g#fhe
zi(i-G19>j5@48~}WPXq<S=}z!EFdi74tJbweRoD^4zNE6a?I2%CTj$_RDcdfqX?l0
z2AfZ=M<%5LIN3z+emgjta}<|wae=HISlW#{dS)89I==;Vg8q0VZf+U(dKeswK)_#1
zJ#2x-E`j}$#_;RnZ#DSx%tEuM5dU~o8=U8pz=+fVreayw0#53s2+-HUZzkWb(sG}J
zQIJ00Wf<Mf(Lrj=0F^YQ1~_Ml)QH3MgMCgzn@G9m?B$qdC+D5*s2lg~SR(+?E1tkS
z4WQ-kSO4;KqimY)MsgyMLN8Fm;{aid<M}`Y;BxMy!bimEMgR|i!0<gb;59lyK+hbR
z{8$zipw|3JG~77|?Y|20Eo&L45OW2&5R~mHG3gcl$l%Igf#{VT<Dw+M<pd;|bEwkg
zf+zDqqpJBAuabZyy&H~9!!_hI7<I{Gws+J+)q`JBY9PR5`|_COX_}-(y@f%xSGW-1
zsviNaItSsZSmd-FN|y_3T~{Piy^9(Er;gTC5g9hXF<pCIN_es$;Mk!=A^vv+s2f;%
zzW1!#z<uWR>r-?!A`RGt2hz0|`?vxkbdU=DeLLp4LIC|KD~m{tt5Xu9L3+oXO^HR9
zyU-jg&ZFjhks`7cyd&_Ci@AJl&a;OiyTl-1ZPMs;l{T8VKD{)z2aO-a*!N&)#pbSq
z+ycru1HpC!M9|UhGK2{ct}r$FuDL9xd9?@-N5kl%S^fjAml@c6|0B1t(&Gaqm}z;4
z&mjBf+%^f97BG4>Wf=t>=`Z?z%drcsX`Abk!;@KbZ`VEolys5kjt0=C8bjAy!ew?f
z3>dqOF76x48~{~{UHPvDu~5`&-1n8q)=6KSmHf<^UHi_kDSC^T2s4SB-4L+7WRGH+
zx@<ybq7GXyu}z@8q@gJPL^9NGAE48FF;pPYgoxt>%5ghd6_~^VA~rv^_dmtIU4nlE
z{9`!xAOnOCav+%a8x?rP50;nad8>M>X+79|e5(@F0qB9L;t<5Qu4wfrlqYs<{*92o
z{H3E{e>YS9@=%B1rmaBLSV7`ld6P=8Q?dmUz1JA~F0J>*-wfUSe-WUAM$Mwuk^dBX
zICncM3;mhz%v|s)MyfG(%@HH<)Y8F*D<?`7i;9}vNJC)$8hM!!%1<ADB_i$`&MKj$
zu{49S+nWsXy1}2+-{J+=1PlIr51;L8XOrEstu+!XK9MU-bl(qDX5zTntj5HV-=EBg
z>*FTW@$f~Fbw^jWee{OL%pSQu3h1299CMJ_rwqwhPK}s*qUYb&j`(Lzjp$9a&k_@0
za6;<jYnSb-<RyOE7s&TYyKaOu$oH-+5Tz{znr*cvUjbQY+xIs_i;LW(Ws<-4_taLz
zpx%OW;oxwt-^fQe+4j<VIGN^2{oi4gpzt@wb&OwBw3#+DVv@exlNT)@(W$w9d8D;}
zu?zR;<z52IgYx%3`?Qjrb+TFaLJV$;h8u9$?5hq+%0Ektq<Egar}fsF$tg9oO8%iH
z*VXQfu*Yu~x~RjsBbAJv*%Nv{4$*GPh+3w==v?L1Q-)hm1{UNded=Pm`9;0s(eHD2
z9Lz?2UECL(3uCpYu4ne@Qc-9MS?Bgr=U)!RxPvr*U!eyFmuC}KCh|xiG;kktxNLp&
zKG_@BXZ`m$iOzCA&qi89HRciV8r?DOjfr+bkZ%BH&$a-+G&z%K=Ta!<cwjTKxLK?!
ze`Hy(&tFtvXtUHQHQ!V-+y%D9Hx5LrS6SAeM;Ly2U^Z*9$8<mP>yRCfXwBfU(t*RL
z>Nnql7|3D;T=rbUl;n#pZpgl#`LOxY=@$LQfzMm{-Zky?O#+O4n}OhwdctPrS7OIl
z!GIM?iP1Fo+rc%Ix;}4HDZvq9io%91@{T*XeYEDy;kX1z>bT5D;lpUWX|V;nPtMt7
z=!UH?+sjHP6@`XK5>{IM2{A)n0U+x2g^#EDCHT|cw9i;bOFTLrXzYjo<XkGSWa3)_
z#Uz>m2l@>-u*J@czKF4dO-9j}wPmKC8NYMii4?eUur9`Oaqqgez0mpj-K*12cyJ1X
zwiVrKEy+o`O`r34iC0Vac+OUI=!u=_vjF^Kt;grPax&D~uiD6y^<85INk3pv5+pRM
zKZq0@Yeuxf>3BZM>)6zBpgixAaOesfF~vFQMy2w*&~_zNIz5qzhpcQ=u+ompzLXE_
zPOSW0{2!%69<Ss?3lLgNa#~mcYXbsyFJ3*3L%;^+>Y2K>jJtMj|0kc5!`+RB?O#dU
zj0SJ?8y+UlH9HkH0!*>=!&4K@CMUBT)BXIlxT{jfa(zaQPWxGOtn+ot)UW2(_rAtn
z_%1jG-|18<AZYt50VfSKvO&q0xvq3y={4=KE<d@4slxCrkqhzfyM|)))@=no^c<{^
zSVWm}tiP~sVK|rj*}j#FmA3aaD9CUF@S{`lyI3^7kDm!9R+{^`T3$0hm)#O_8@F_B
zQ6#r4Zd&C=dPgrf30&sk=a4#SCu%135yVgbL5NYbT7dfx>7Cn{^i%TA<O<4+*pu`;
z{*`Ty8XmY30_DY{_;ZBRvAOCT%H4XtA=mep2Mj)MboY!7OtF+(h7|kO2Bdj9U3mg?
zO3ek^*B~h{1Aw-{rs5)HnpenP)+6G6w?Mle864KmiabBdo)8=kQ085}qh13{(~Im;
z!%uOkk_9Kd?3;T0gW}&umm`lwc)kX16k$(A?7DMi(n?uB4u+d0wX_yMAp)ooVA*4!
zxXSj@vF}~C#7C2#gMQWvFGSOS5MX$_CEV|*)vk)<Wxe=t*d)gJM_y3p#=GQ)&q6XZ
zu8HcY!pV^~O?=`#i8Y0nLM^pDdwoE?Pxq>e54kQuj8s+xZJ&+DM~ZFLJ+lMz=kz+y
zw_uaxtTxIbjTL*Q+`Fu=&_73lXaqEuGm6{AaPa)BBjg8<BwiFmIlYzi8GQ3RWAAMw
zyWU#VAuEWr;&L#Ih1Xkh#y<62tdY?uEghPe;?Y<TOv^Or6JkndLjcYyjCMS<CL*Jn
znVNLVlt)A<KV(oGY1sLdoKahr(lj9|Qa0Fw5Y%4J7u4of{_})c11`e-NAxkzA;Vs7
zLe2^QuO)RKoP8Ohz1*V)hnqKb-}+ugQ9O56%Z<on3b>>BVW#{*m=)LDeuAliK&K_n
zVXS`Z`gn!kyW<|oXFlEO1pppo;j(sWyX6mJ7=y{};&QRUst>O*laIB&Jb1&+r}0mE
zzrGcAaV1o)KYe)r&IaYtyP#V^F1^jqrVsqPXU;Vg6_s3{Fq{0afoM*re^c9}M&yfJ
zxSGj3q3IRo-Fx5|(25r_%XGYRc(~x~P@0e|dGb+(uW9N^NWo}SAGfvT#RS7)7O0?V
zA0X?xd3lj*5><7XUx>xuwsoqzep+o5sGRDOB1BgwIy`KPlOrSD?==iX^rm_O8>w*k
z-E6{7rF`_f!tyuri_QwbqDdud+{b&B;VOnYF}-xNq{s%g;Zxi{Tw1%R?n?Ab(3Mu)
zJA2P^@1gu%ASCY(oR;6`BzX)x*o(jAAxFAtC2;u3Q0zfQ)3MdNfOh}!*8vSPQ(J#-
zvi};@;P*(%{y|j0t~%h~^q#$>hKm=bMz$-O`C@P)L@S)VsqV%jPy;d#3N;*pM>Um2
zhG5=qlNx51MeXE&&x=hzp_T6c_6l{I?fn8Hz3cSc*3H($1c%*<De@jo)!%k{B5-9;
zt-_$iaeGqIHM$ScQcvyUnLd7dE%gWw*iK^2kMyK8=5sQS2RH<+2WE4q<I_GLZs$x0
zTNe9krzF%~a2X-n;)}mD_Od}zGPK50Q|MTH|M{@@dB29PQe&ptp7E@tLGfC%FU9mU
zs~M3h7rL8rJ;npP)_yi~$A0)TFMp-Lr)G+8B_=!hIHM(Gz&r_@ASwZ*YT?0HTB+qA
z7TGlhAL`=|k1e1D1vnc;+?{qFH@t$AB$Fg0(0mCF4@oi@9gP8o{>9ysV@(9;_47Ss
z?9xiN%1P#(Hw=hmbg|>6HL3!WGU)t~_|xx7POo<%D3$(jW!|u4t@-SAt@j4gVv^!3
zB=*^$TGZ7o?=vRe(!^zZ<!JH3iddb5hQ^w0<|~8DxZ$fx!QW@6eW=tGCx@IeD+98t
znFuE)Cw^#Vy@vN1K2uUslHu>mCnml?ocNGwh&z!#V@pQ;m;(H2_iRS1NsKtl3a91g
zgNj!OGiLC}`5Q~+D;7y`0rTjN)9<F`5Ael4mtRQ5Sjk(#4duqecfJQ<K-~_)Af=I%
zMkzwxhnS(xS|npIJG*dFz$wgp(0U|maRk1YH~Qd>=B&T%X5LG~%_UG1E9rC*5l3oL
zWWPx55@Gd2Q2cJsSS}eV!QJG=yL78Aq2KzS&ELx(R2)Z$)x|J6FJ(OmxTfHmbFI9o
z(Y*Y8_=nAEzE4EE@2$(Bnq1WJD^wMev~`UgE<rCf`z`>izCd`A+3Z8_iy~Q1-mE?B
z9dl6@HJsk8DszjJiLu>Tz4vXUlQP?J`S;5K|Msbw1a<)c6t=VXh5fS+NoyG)$8?6}
z%It`jYKuCLU;9-3*!<{Jz^^3p)F*H=@3_Xa_@_nLuLr%q22H<#SS8LNJCxam+v{;o
zx$S=Grb;xy5U7kav7nIp&d(xols)s=SOQ<_SLkvO%gdVk4~=j)e<r=A4mYZK^y~tG
zudC`;ZIbu1FAPTHe(1ho;U+}yshV^FgzFYm?aC25NUtNU@}M~&&idMHoYQXRg|#Zo
zw2o&R8<DkaST4ssd;y1*;D+kLTRA9vWf8Fp8CRTd0Fg7*3LjXx?k3P9*}A*PG~DHN
zG2XhFTl6|ro^+T@ie3MWM;Uol8X7M?f~pdUk-T@#DmH1_YE33Hg}6;=W=ogoo?91(
zXPPyB&BGy4YVx>e$zA(%Yox*IwT7#H<}7BRZXqz1c6aO0{(I54tzCHV*6h;vw+-U^
zYnx%?$cxKAcahW=J{k`owjCtltalkx*g@^3?%dBJ73<Nga7%FNjk_4p_wbxS%8|@c
zyq4}v;c!D)Psn4~z`{q3m%kPm`8)_6Zm~sXYoSW?p(AzKLd~!8Ual+I`Hdy-mdv+q
ziIsi{uRZdsG#oTE+wT>t;qX(t-}0qphK|212*b`f+H;lUFf+5AYUTaZw*rH_fS*&t
z?H?&w(~C;FOim<AL+8zZkJi3cSjll6c(O}nKr3G3>)OO2&`SOcrHwC+<LPn5Ss+?6
zW6%BbV*g6x-)vt?m3>E_F9t?@;OLDy2TrM<QHQtvANNG(ya|Ei({16WsL$58K<p>d
zOc~e1p@qsr>fSCNs`GG>E6J_6;V}^rh|uDOyt`Gtn|aQE2XC#!28(0%j$Gd4c)gg>
zJF5Rnk!^G0v#?#omjECDnE_JDbGUE@ih4brBtA=N2V<U-^7%^faQloK2GdRJ4Z%<6
zEx#A<9CggEi+j>YG7^wJRE(&)D~zlnf<v<Wh}eEkY`17(;Rb)JN}2j2*Cyls+s!s<
zBW&G^;&++p+-aO$Jf>gn%}8tWSY0px?QL%*Q^URjfw;dyd&46)w`;pmp}JdObkqLV
zXl|{#EBXAo=fFu~xMV}|!nv%qTPq=IGzlPZIR*E|$?Em)lujPGPk5T;_@xK%#97)L
z^Y(1&yPjOVqTyk?v~=jnhp2~A$MOF8lnA7kW`2H#i2LVf3#|jH=xl4x-#PZwn7oFc
z=e>_U_M1}gY%k3YR#Tz()C7MneuZX(vU3g^AkK*19w{wf`=jupHR5l$d7u2(4)5vM
zaCghqN#|^hU+%CC!9i=Y(qwG<3Do-MX6Alm5n6l9TgTsg?UlvB(e2pDFI%@swgVEf
zKe7EebbdMT2!W=7`{u&V?or%ASnO12yUEJ!n8#C>N(9Y(FfvyT58eo(`?E7E7kqc!
z*jEe>)DuI<=qsY#^nx|-b^nzYQ}t8uePgqto$H=+ZD&9;IsEW^nMUT0N803#91*Ae
z$r~0g&ds0P>J_^rNVU3S{Z~F0N!kRec>ZX0kpZ+;H8J81ZEWASu1SZjd(M+=Y0@u8
z#}b_?rkaNn)S|HXDasIbEYpzVw>i6f$+JfNj`!~!@y|k&JTE^9d1fX!oZ_`&H*8do
z2b*wa_#USnJ68tJuk{$GiyJqt@%9vV{_0U+4_doiS~}939V*Q?J(Cp^5_lJgHKJFN
zG|v)(G=CHAUYtnNTMJyAZ{j|A8}b{ov}SVqN%29p@L+1Q$seXOWEC{^APh`DDoU4s
zR&e5B{l=>|nBmHJ=pe?W+j{ffaplxmaw7ommD$Eas!!`twZ)r_C3HC_oJ*?{ya8o_
zH<<dn7<uzDUUAEA*3EN@U!Q5JJg%Ext~vi}Fohgkra<(ntZ4j(6t5DG@ZL$~tB6JZ
zbgDIB(|3oKtTP+;Qp~o9hWz$lE}!2w>v=fp>hUM>=QSBu*QR#mQ*bzkoJMFz`?ckQ
zOPfkf^WiTtPoV<bHIu)>f7f08svBoIKRNw9UljhwDm%3hoBKw!kf7W8T6@0w{aouB
z{rO(gy~<FfxemWyiKAkcVD(-d0KIH{8ti(?RKXPrkj|Dt8_Dd?UE#GF(IcdiT;wi&
zCzvgsU!hjl7|bd+8-mWdk#2WrWZlG^F?;glFGVs8%BJApo`(a9X&*GDoJ)5oor&^@
z+zp=3+zqBS6+W8pMFs61@BCO7&%h797=4P<gZlvS&uTgcq;+nQrGGSuJ7LY3Zsz%T
z^qLo>RczW1>#wmvnLiOeuMA=r-D4s&o}9GetPfiLlk7f%CY5RCYs=z;lRpZlWJyNO
z?bT`KV>ZONPB=nm_vn&F=?l&icV{#1#~o)!$a-RF0nMqiqtSYT@wW@(`|#%|bU^mG
zu~!vxE*${(brX>TkQ)3ZU|2dx4zr%1a%~Mcx%}qvS>ngHI{sMdM4+y~8my10Ns^ll
zb*NfrSIX0PM-I7m4+77h>JSN))I|7^<z~_6xn@qLw2LP{=6~*dxJ-)RK-tJ+s7t`+
z(W?X@KUy!7^jg!Ke+X?>xqtuLq_x{6dljs>mr&I^h34%lg)`VQ9ux`%`o$gC8=opd
z6mNw`ALmxxg5>)?-)kNxN&@B^Ypk`ExPbTob^MH=gla0htma~BW`_hdPv~@{j}($i
z!z!6`LtmdI7p_v)f9p6YDp)v?Z)Z^H@6K?YkI9o44Tf2rNy}|CeGyV{*Z8Mr-(;I$
zNkZz*JU&TxxWr*&7a7_MzW&ugN#Jy$)Fv~Vp)PA8K63&IWv`k}xZi}h|B?R1%1cUn
zT3tt~i){XC71Z}_bj5Mw%k<|@@Dsu2lR;b!W$#n2O;MOMyhhGW?79c7J$-LhKOdY}
zC1jU&N1Q7>bB5tcajWC+*ZNN#5JGnHw7;%#L$vz{t}kph9L)~gouXH>J#2fn6+38s
zJy|mIw5*CWBjU~N;BebCe0URMmp~%^eC9eoxrGQeMR_wRqI^elFHa`y*lqemhtmpQ
zRDGt|GGX)alV<+4%s_c?<s%T@80i1r3Y&w`XZ-`}a|XWnr6f4ibEL}bd8@XcV8U*{
z6;C~csyLxW)bJZ>Rx?%KJbiy0TK^n&+B*5Yeq`0RD8tBok|<!9D1uEnAxSe^Uh*1)
z*_01H2bga^3C^Q_qlJHH{v%*ij?wf@Ck;9YZ~5ddjW@azo99I`!|E(|CA#LD@?YN{
z)vRxCI?SLX9PLbV9o3P#ICEOv5zzw+;0v!({jFivF3M@8c@p;S%SxWmv%_}0pwmhz
z7@mjq-<;zaImfBwgJXqdRC!{2b^;tB#nECYksyxv05P4M)oVU+ZJ2&5hdJykA>-d;
z)d=s4E)xw!bIqnINAFVdLvW<AMc)WEow>@Ii=A%|!j*Kcl@GM7%<lzfzU%w8f_L=o
z<k@xx^-}!GjJoa&ems;}$AOiQ|B?Ge<WALp_|ZWTc^ejo(XmL;vjK!_(L>AL$eKHp
z{+|A6r@5$rc1FQNhWwOPNy_NS49`n~0aNuxyp$e~ct=Ds4(oNX=73c7Wy>$#+?uyn
zCo@ipBAbrcYAzV^)j%V=59$kpk&#ZgvkG=KDmwU(FT^qlEk+n9-S8zmH$W<W_?h;p
zGC_0wr>u|^q0%xq`D=_X3?bQ4HGa|MGzsUW*Rt~~EOIZ`vU%B#k^8@7W$R)7)`T5>
z_fPYunbZ{|$iOzSTbU;nIACCegGtNAYFK1Y({$%Pv4Q?sQv5!iT+cyW%e@GDs5c|8
z7?%E|Ub-#YJxOa6n1G5sE^^3@pfq7k^8~kM*VU^rF?}AVi@6zr)67U8@k!u21*ql7
z6TbuHL<jh7m{4;)MsF1ehOm+YVELXBHyUAuViv(uodD}m1KHlZO{&5}Fg5_r(|x|0
zS+%WczvBW(H$(_#!m%0G5B5CSq{Cf=r-BU(iB?2QBZQ`d>CuIRfwht)phcmC@H{qE
zjZkXwZf_jhF11aKmOEXcYDL7+@Fc-2w(B|tAPx|#<?(~oNXI;9KI8QuyIJC?-xyXf
zBY0u8lHr#;j+fO_^e#Y(gvKWbtToOQe;%?*g_Z$+a+IKR66-0{Vg3f=yCH9QqF-YJ
zk)$iQliAI|ASwOs;(2lGQb2b;P$1B+?`mKSiGVt;&MIt!W$IA8+aKu(4Uby~NMGW1
zc-Oso**}!~EdLBqS_|Zt#ZAYs8bxZ-QkO$CYM-#zQrn2FPeWb-jL`Z_E1Z`r@r(mY
zD>5RJW2*RiN{2+0E>t%3K{XNbn?f-W^9&oc8GjNhsU=SBU(!w7Ns6Ib&PIxO#jmGc
z4}`O`3HEb;^yz@be)i;22~@Z`cQ<0oP@-3O?W&I+K9(5D1Y-%9#f9?tTg=<1#S37H
zb`WvOUvS(;L-M8A;_s06OSP2`qo;!H!bdnZ?OFs{#4=r2j)PVN_&QDo`2M)IxER{$
z5X@h)<hytK^GWm}b~QOv6^(nPTWL47jnmuCDizKyelnATtv#wphAIe>6mk2#6N1PZ
z9^Iv7E9}M&OiNnvZm%?t*8vsDb1G#*_api}JA{1$x%WVEL(1&^A;5W3FQt~9RT$#3
zPjAB)n^bJ5kk1SoF?f4vb$|H2;oZmoiYQ`;7v$uu6lbv1^fGMOURTW1yBOkt6|G7>
zo1nWgi{n~k8IJ19(B%VYdk8iYkdnVkpZF9axHiGArsH?RJGwMjj_<%dC=X_>L22c?
z?SgCA_8x>|Csck_hp9YOux)E%QH^UKu!P{lTUFi;>J|1}QWL=vvzkDTG5=z3v}JRa
z1nV-m4gk?l53ue!!Ev!6m{XlT{T4*A*F=Ho8B+)88GkygaQ)AU?%HA0{8cAMMso}0
zWOexCr@{allU%Aeu^anrSLuUY;38hg<fBme(8P^+HC*gESjfgkR!kRHZf_X7@`6JD
zvuzSkBBheC7e|5iroaF(Wyb|5v3lCVh`v{~8XmrvZv6C(fvoyjs9pfa9KY0CU#%0s
zJrKO__v^kSb`gbEE&lC|9flGmCw#h!*qu(mj;?GsH_J8a%2Hsj4*-6X;T9|QsVX_w
zWdR~pxnAqTF0KsDr?S1*bmVw=<A9y)lmP@}H|Y_d&j-U7C<e+XDgLn>n1?|7qo4o1
zjGf{UC?F9Xh~htGSt=2+FaGY4V^CXzTsXL?1xX3?Le5G$7i(*`d`%JijE>pnN?JUe
zhJWl~Ooh&A6BcrsRgymkvDwYaLxc`ky-1S4O-un-sRzo2I9sUSmnG?9+oB18Hh4V<
zf^l~COr8!e_<6u3+&e3~nWO1V$tgqM!89Yy%8_dU=D^TR{!&^3Ezv&^CW-pMpnB7#
zojScJ9-$%U6KK}^>N-xRn*e-pg(S$5S9%^BH+g9QN1@z%2MFMe_j+{LeUHJj9;~YL
zQrGXfy8UWPz%B!t0Uuma@Pv}UVAuLQHq;nrp6pZ!g<))o3yrbO^Wozi<Ago$jx9Fa
zQ!*>J2#y_5T_?irfUh>w$lUOX!HVP@CW5op`u?g4k<5+jr;j2~mN2Cwz)(zgvB0ev
ztQ|;#;l8TXR%F$`_ZsS+kVaH~s_b(bt%R-i2|>J^rxh!OI{77ix996E{`oF|;~&0H
zY(~qAb)xD1EosRFb&Gk?PQ}TPN)W?pSr<YVFo{pZ$MB%FM#RGI;R3A#bg(1R=Q!mX
zu*hPN96tG#d|Gg$&pkJ(?f88>kxG-DG7Y=$&N7s1)zMlxGq@%&-cN7|TNjVunDent
zx3MYozus~j`-GRhm;p=w1VWQATDx47%4DJ)c45~9K3i8PNIzaw_J34&UKT4<Ugi;{
zFQ+}2)Q#(aG`=P1!b+MAaLm7e-x2MQ%fs3UbR1!|#Q4cEUAJ&Yh_V8QA^n*^Rx;b1
zd=R3)JVXvXuz3orH5d=P9NK>^K8Oix4=VBQ#$k2<cPr_$2mV!Zdm>T>+Q|pTSSfbH
zb33<Tk#Lh&T?Q)>)dbbV6DP-ZO;go1@>^KRd8m$bzSCUwoDkK7(9{Im{Mx?0Xo=mX
zDcK*lMMyfzLfD?426SmCW)QhuHW)Wt`U{{nKv^GH?$J9_5oe`)gGgZgv6tz={yE`%
zix}#!J!urbt}|mr&yKniuO8e!8*iVHJFRDh2=dSXShJjoRU+_SwJO3nXfMD2`2(?V
z;^){ZUhtg&_ZpAZ1dA(a&n1JjH<pG#Nr=Y6g*C%0ORxfpN`=+>^xlcXBv#UPV#(KH
ziyPi~yhF{p!04eGgFQLTrQ&c_J-&5;&|VPG^|QQ=KGwcD=(hmhk|(_&y7xDK0K09L
zH#ng-t(Ddv&dMyS3BeumzG^z%azjwqrQ^4uFAZ&688=aS!G6f;^l+p`i4aNCN&xEp
zI-2{e&>Ylr0G~2*BgPjyu04^7j^lfV4SS_^9xMZI0eZOJ%1)2@SGW~H;Bo#E>lNtV
zEnG0jwD$@t5F)d&+#C>?JCCJc;n5)K2uqAM@;^jjCZ>-r!fq3iViF+$6<BQ-sz2@P
zJ)|4(;yruRG`8VKQZ7(n=K4yPhLzI_EAc4g5sY|QJ)GXT@jiS(^cXjPAIyrn32XAC
zM*X1?X3CPL#V(9Z1KHVUeLmA(-ZWmr<sXZQwt?!SgC5agrBe*I-=Bwm0mBrZbXw)c
zO%2f_>@$cUQ?vCzVbv+?kVT-E!9;~2#P5feEx}d_#g)<T+{c))+Di}H!!Z~qp8xgg
znooh#slNtiE`lF?=cC16MXl1Jvp|3B{cwl{6%n3$jt@)RV1w(YaZ4(KSUhM%yvuyM
zbcFU4wF32;1c4Urk1MDO>i_EnE<j%Cp6q7tb9s6=<EM5i7+ri9n1EJh<=$t<=M?eI
zwu<b5Ol?)!wQ1~wkJJ@R!aB2}O&r|VO$~4frPeVC=YiN%EDZkq-xysNcuoD(IqZEh
zP;3VzRMf6X-gyRF*PUd64v8S!zysE1>VEMLtbDvC+)X$3>@ef<zu&S8w%H-ca%$7!
zBYu$tU^qW3r<@*ZTqyteKt2;J^DisvF?JO&f-!3sDlT(!*17u;N7PD^-5RIMv$#~j
zRMe8eYdo3ceQK+C=k~TkZ4#sx3fzgkPw)Q#wF0;QZJJ&muR<m606F``un`uKe=XSe
z`B{k05|&irCdY)0Pau}#fP0ic8$2iVu~&|)aLa9g*tCaL+cb*XoL#EB#tV$am;Gc}
zthh_yxt))8G<aYp%LlaL>&GWIA$hBWyQypkfrxFmA{DB&M<MypNP}@o{8jD12SyU>
zXRv@c@FD&$uXE{i0?H`iv&%v)t01Z##9{hZougtP3up?Y&Q5;Ruv3P5>))LXfa&D>
zUTQ#!fR+MrI2pJwK=jcxZ2R7+A0C1!?zc=K(R<G)BTpk!s3ktwo+nbi0gCVk*lnac
z<X9I5hgXN7ODL!oD@Z3EcxyV^3u>ri$-zf7HnYapqdYXN24Yuj38H(Dnvrwa$l6(9
z?B&rfH6CH*r;QZSjNB5pHYDdoY)?2*pk`#&+(^MsDzLeK?$X#W&)xCQnA(`{hNZA!
z1*8OPW0(xa3)e+aMOd~&3pEBtV?z(CU*Hr8!q(ZHwsGb+*Z>uoB!oK)V!`1yLkR*`
z%b0(Ic{n+U1!*98fucMI?Up(aihD`hEy&Xw(m*?$dybl^105x80@&$lvGXGwtXlT#
zZY~tzfN%r&L-YCKQ-OR%uxl5PA_MH9rK?OgHZ~wl0iMFh9@yj(y)hE3ayP&Z{eA1)
zxlC!mF5m02VK<NaC}*AvFOO^^!~(k^5uT(T;0>35Ik*3Rd&96+@Ai<0o?T8es+k8^
zJ_6sbsNB0~j_7R|yPryc6;kkmPy-$YD)of+2?9`H?R&^XPfT$kU()#km6YAA-97pE
z&!-pcTc@YFe897pw}h{RlX+bOkr^wAqA*0~cA_7^r-4&ZwC61zY-}u~h_;9*{di$V
z*e>jDZzJ}m36dQ|by>;x3+W1=nsMxxp@7D%K+JpZ;Ch5mm%$59r)hCVU;R`iVAGV=
z(kM<vaAs|Qa|8W!tg`j&AUV^*os?dn-I{Yc(Br`h%TGLSJP_a<UD0%;2#u{c4?Tpo
znr{nPDf%1N{7;P;0-fUw6cR`t*)KI_?BFb<oq)8rvf3Z+A<QB`K`ZE}&oyUyOr>Qz
zT%uoz2ck2MhTK%>h7AgN3-^Hj_n7rZCcn%sCg=$c+5``#xi~WE7SJX;vR(!0Js81`
z(uQt`=JmJ{D>zb0UVR)2`Bh+|LK|@IG9kGhDRVAk!S*CuG>&Ar`?76&$bAKFL+n)=
z(0xD<Xy=i;CJ9&$K)>W(6ZPI{d$<>97WED*!Sx(-kek%t1chl6iR-6Q4Q5~l>UohY
zr3_k^8`0ROl@5lD@#7rbJJ8zS!@|IgrR_#Lu+sNAXLEt?_`n0V$_b;vHNU)0r-IKw
zs3Rg_O^!A*&h3qnFI664_w$YP&$+3?8b3nTh3_{hwxQE5a_$v?KBmF9j8MgZSWcIw
z3yZ#?3W3R+!<P>+!FH_VAuYVvxOTfCOuRIG=$|l-RJ9&-iIPNqfDBR&S*K|NhPt@&
zc5xpU0&5l<v1`qB3R+7KbZwcz4uyTWN)BKasEiow763etyE!&=aj^S$xPe>*oP4WC
zBb+yWk?<^7Wt$tnKu(m(8%_4m0;s3$kL$MQv3eU#_2=BQSBHkLCAS<jB@T>&jB9r@
zoZ|NPE7*^;m*#G*#7TrWz0k6e7uC|b4)Nk4o;R+*o90LKEy`1L4%k!iTw%m~pLM8m
zkL-BJ>G=<A34D17P_Ty>2gsT_m?1wKO7tv+iyYZLSqFool=0j=kC*o}?Nh!aB8LBg
zOI8u2G+o-}1_ltf%+SF0eh;osRhSq-LPhfc*2MNYUr*TgA^4v#9;Aq8p%n2wE+8@2
zG%F$VD#D*cB-C+OYX!bV>$pNU2pX;c!gjWRcXZxly;_5n@@}|XF^YfCM*JQyJqBaX
z4I%4r^C2opk8tn+NNwSxF$ighKq=vsc^-EgN|3m7`u}^%Z-)X~d<TCl@NpH{X(;iy
zg96jv{@|`UHik4r0JP-dz_S~x5ul<MkQe)+24Nqm=}&XOr-&7pbbp<Ioh0kR%a^Ly
zV|vnMNVDJUxdu<<WMMnCBT47#ZW8}Le0_CPTkW%MOYxRs1zOtT(xS!P-Dz<sQk-JN
zi(B#H?(XiMKykO?65Js`fRJD}wBPUCd+xd4U2CuWk(IsoD>LuRJTvno{|gcN974Do
z<0<~YL>+So0pZ!Eg|ZoXSt;oKZIjCNNvu7%_mjs?{EvG1_~0T`&I_Lr8IKMz+-xkV
z>W8WCAp0TXE}&ldZGC?7=}*hEZ$C<z)UX3&wtvy@?SG9HixAO|v5IN{eOQIB$Zd}j
zu`lImKV+r^7E=6~&J0q<R=-eYDo{K1AIA!@gwjP1vW=kAc-Yq^d_-WG*&XZ(U5NY}
z(1|l4Oc)U8mv$J@Hh%aZD~J*Gp|m}kD&f^52u);s+{zp{&zk+$yx`-av-Wu$kWp^a
z8V<YvQ2{)r)y3O8!)}jXi^=PMEY%OH4sb7`=b%^N;a;1B^iO}B8g6PF1HmOR<n8pY
zyqNzOpa)q+5bhAG49x#AK!5f{xaq<8Tu^a6NJ=YWWs9w}d0)YzmX$C$9u$<7!GOnb
z1z)I3`oB&noc<reg821$4-w}>UBr^zn(MkN>1-cf>D#S*l@*6ysLk$EHl^o(n?!`k
z29UTiW++Gnj>KYyZbQ_KS|rr8H$B6i_b;09)81E?k5LH7{FxrY(dw`!dP58JT(5^;
zpBa|NjbyFQpWOvi_5*F*$OX`UQ$0ocsW~i4ukrx0k<s~16J;<q-|VnoKlKCug7!d<
zqea(Ho9&O_tKgltf5wN-&Gao76<<*shI@M-u084MD|ayT`1DrC*bEFBaKa|Vxba%~
zE2F|O$ahd4wmgfoLUyuyTt;WP)tu`)2Y7~1;?V38{#84IuIc{-3-Fi?B=6GsufgJN
zLIh)9k-Ie2j)_k1MG<KrSB38UYa^M{KYeP#_Q*D#Lxuxf%N4hqt`|fLpm(2|<e9Ed
zyDoMlp8qq-cUACT(EY5+%C7@f6%4OikpLb#5pQ6@9_MTAMzou1|J@<Y=+GETWwN%u
z$5qVA&Vk=cIokq6E40R_uL&6V|G0?KX$W8*l(Ulpp1}21>7s8HD$3otS7y?`W?tKp
z`3H38CaZGWDs*a^rTxVilJT1)Ms9PEV=O3@xtSa%10l*M3<D1*gEY_wW3W*P9ug5J
z#F#U<LVw`gCTHWJEj3a5S7D-reW&SH=y<?F^_%6<aR9Q}egddBOHA8Cy$ND#eVb5@
zHBV7)JuQwq@$S~ITYE^`lq;_G*w)MxBhY^{8#p`(fI~(9uEhY+hpE{*CAiHG5m%#g
zPA%SRP)wu*)*lIBeP0D<G}{dZ+FCB>Vhq0iopukk?+b;RO(x3z(T6;_)yu7W%9^aU
z=(D!u7)v<d2GZ;>i6Uh^Nr5;97#U>*9>!CIqL^`ezsHpd$z2IQ-Vm#CgON%CNiY8q
zgkYq`3?8kv8{LISryog{;br_vwi$OEEDm%3nXszwB2$}i+mcxhGoVqJMhTz*?J6Um
zFscpmK`7J{zi0$q8-lu^qkIUIrEgRbUVfYb7248YVP|f*t^U)DjA)S|=vTPUix}q1
zU$H7%0m~$ALhjAu6aHeO=uI>a*)D{})DqH@s!XiVxRl*2Ctdc~;8Y>bCR+sw(FYai
zLUIK=@OF>^a8Wa6-^Xg-gPw({{7G*hxL(TiyxLG-R)p2}XF#2`+RxTCp#!6T))5C?
zEGrj+ZOE6bOILZ{cvd+?8=q0*=ko+H__yZBp%3f8&G_vg)Zs#IO2;p80xEIin;W?b
zp23A{3?Our%h%=XpOS`kf)joRHLW3JXWsL#LdD*+Rhu5^sfh@Ri-(m)#wcUW-E2Rg
z)m-n?xE>Kbfx0{7_q5XeNzqOqT)W88gtQ0y>WIF%)%BRZM$H43^z2Ovbz-^2E3X%r
zPrIQ)*|0<GD2=euX?HE3bE?1XjbvWFuM@fU1~%!R9L+(!DNtNn%N8fR>MGlST4N@e
zrJaG5XoFJ50ZRb;FCEaRhwVVTq!**@`d2*f$q)d17KG;R`4JUOpFYvT+rrD}`SCHL
z){k`D3sUSu0BiTzlZg<{LpoKE!?ED#|8qMTD<VmD_!}3iw(JbL_2m>3oG>(VT#<a&
zuth7gat+vaF&vpK<$~Y&+rv`0G;Fv3VMZB6U#eagJ(``-PVAeN+hf*;$S725Bus0n
zS2oGpuav_>m)lwce%0IeEa-gQ?EVL(Tf%Sh>=80IxQi^q+#Y(Y08O=r-3k>a-#w+R
zAN+};KXr46=J<9mm6_D_o8`#OT(IykBJCFWDsB0}0)*f-T`(4EqisnvM7)aQA^_SS
zxrK|h$w`etwRzJhxiV)>lM{^po;~cM!cQOxVPH_Uh^qsN)=^g5z;-By%kGf(m*m{t
zrAz!In^9hufADXd8Xq%|ZK(Hjk%+5GiRBD*pz{f^6v*sts@p%a{j_W<1_$9PA?hlg
z$zLKKFPwwYcJu0T3o696FAY1BXVSS&L%jxm0$BWZ8naB`DKGp9=VktTij04IJXTT3
zp12OZ1R1C;Wjtv#kNOg;rVVOb1ge?-$C`-xRx()5?131(K`_e;<4b{!gl%jRQk=2I
z1N|Vjp$XfFFj>DQgzw$=P<w~ib1KYDlWg7U3(3lMf0z0EY1Nf+uJS2a9~jyZ8#SVQ
z?BV5W=vN7z`Lx*D`n*DKj8Bdm7_v<Ct&?95{MD9V*(~d`)0FxxRcpYlZST;GU>0ma
zL1_aPmQz9kqriDcK`68Q0UfpQPV%QpS^$k2f;UsT>J|z)UAJR8g#?vDf{YItbA%iQ
z>vS|86nZFCzI<Bq;&3vxbZGcZ>qGSyLg|{AR<E6b%nAbhLLIh}3g9qZx3M#>ii3nW
zW&#8)1qZ>1G&O?bMObmP*(>`hqdCs1TCiZ(#3bEqBkp;$=+qB~t?)hErte+z_Ftj%
z8|vmCW@+`^mVrN0E0VHG8x_33$sl^cw-B%x<T$=>8}PxDSnm&sh;Y_NBvRKi|4Eh)
zo=eNN`yP@2&$9))DFXb@Ra=g(x6fN)8$idIM3WEt?*Q?@zoX@TU$xrd=n8^kYsVh}
z0zlD)W^IOuLa>&zJ!t<qz;&Ylv~m~Y0pS3VBI?LK(M7%fy@!OoACg8=zUt*^^->Vy
zd{@B~vvUq8hx=V_ukYtqa%Gj(IyJ`0>MI2|I@f#vKvYSDc?uZI{!-s)%`b)c-TY#m
zWsSLk*Nqz&fp)&bs?nqokAdxe$CWFg%Hdb<)RlQf(tp;H``!2y1#uE7(4btba{5l5
zG(m1CO81w@Ed|%yO^|bl%s+U?6O@+4BbOE4bDJZsqe*u+rHf0E);jma1akmst(<&`
zD&}|iaxum80;SPga62)*`{#pJN&Pnc=QiJ!GXSMR`)~w3mUhw&?l+Ou!-G*GX7Bij
zANM|lX4=!Z{Q-ENP&H64bx;=+U`orBXS-KVUIdnYom^l-LyGI<RGR$buaV&-`0UX~
z^09l_I6M!N7ow<Xw7#huA&wK8SnqBccrUFlaF-$TC-(9Yc0@u;y)dpp6-i}}5?nbW
zz8$#=<4Gx@@YBB54TJ7Qi4EZ|oTt`f&GX6#S@K4y4R6Hq7S-#FHm@n32HC{-*?7I9
zBN<Xr`goM#f#~8y6d1V*1bax6D#=#tiC_)h`yR{rpD`d95#|UC#Jg&aC{!+}Am4{h
z(Zm(!`SeP1E3wVFrps?B|5K)hId>UPQ&D9Yd$(PSF4-nixnx`W?8DqKNKI()&k{$G
zKR$W})lAFcq^LbNzSQFDYqXe%J|mhN`%ZbDx{(_53tj$oL~io;l#tTos}%Dz#?7Af
zI+cERDg>+*tcO@sA+qKrGe;@f`9p?8K8g{><(M(jnZ^rjq3$rxuZ*cVF$Is21i<vc
zM~rT5{%$C1k^BST(&hGNqZeBz_E^%I&;7=1ag#krccNa8A0Gb6Aar~(Fb`x7S~0=3
z^5y^*gcCb>ci`Ka8|&{K{3!GUuF2geC-BW0$C8}oZ3RTT&hH5S!L=SEujB9Psz=>T
zF+vN!gvel93N-?pg*1{jhoT7p&qf-?Dj}&0XwccwF;=1&YORhjne1`ao0r626MgS2
zT5Mcvq;H7wR=q!wwC;^op<hu2Qp*UUH<5iCb&_)$Okv(rE(?=nj$kg2ZIIKsE?ASY
zJWw3q+DkSkM3%&zt34N=Z!}(eS2;8H`JMFakWRkQ^>YiJ@0wu7Lm6+gp!4BOdbG$X
zIouHsn}ngV!i@L|jRvg(nm^nekC4J~=gt!###PIgQt8rn(v|YdS2cCu6-pSu>peTy
zK=hu9$^9>sNzk-~KE{y)QMs$~*%LyCrNtfDf96hszneb!UT2h#Px;Q;{Ze*zn~~Mx
z{;@!{0F}RW?B@8P)`BfbrDu_1q)~I-(E=re<i6hIYmAA6fq9hz9Bw)k-Ssqx)U(~8
ze&48v@#fkwG_`bVB6W7!l6^*Re<T%3iPPG#q{eD_M#ZAi@QfMFZ7V_7B_v{Pq{II5
zVm3JOx{QSH{JAk@;&y_-<ordPU`BL-sRP7<5Wz_Sr)?Y>vK8b~7G7rBsaDxSMKxJl
zK%*|yZ~F^K;C$1{(or%1Pvg(qF~>H7<C=kPbjQmz|J1DQ<9&zS)cU6fS6JHit?=(8
zD#`Xm==O0|1qx&NcKRyr@tkOTrd3exoBfu~PCZAGI(^Euy9;Cft!U85ao%iq=qyKv
zoP(Qmi^`*qwsBXATBwmCrJ@LE1<PQ3nAc?A3T2<2y`5L(S@Yv_yi2yMAEmrgXjELF
zsoh?pXEVE(mg={S{w#QwDl4U}%NnWQ@$(lO<q8@vO<xP-{cEnF&E*7#i9T&s=YJ~S
z@`dHb$a$&^GOl2_`aN{`fv{ny$!IL^s;Jb`f810m-?rz!c-d#2?~=cLo$)w{8uoBb
z4^+@Z^fz>LkI3JYS?)7C^@hA<{qR985Vf?zoc)w*%spsW=$;|jX%yS|dW^xQiOU`+
zzr=^g7-JBQyIbrn(?&A#C@BhDG6YxxPfr6TC(nXOo~`KUwiXmTVRczqw!itcXl&mH
zC#wxoHS2LeHtvPMUxnIjx&a!M3fk*19#9E{9YnBClD>(vIN<8mo*89a%)1cgWO^1(
zkdXf8L`0+zvo$;v_E(5tUV|<lAk9SRgNgoCf)zf=0khpx@}Eb#XXVqZyA9XvXqe2_
z9q=^~v<#2J8=L4))`!m05)^HTTpcI8#py#2imzJ_7ufQsp;4C%a-|2HCJRP22B#V(
z_B&4>c$IxIFxU@1H%-m9b7w<Qy<#ICrCt1XkpF`JGJ@-mO=kaOFj$~rJh^hL8EUXy
z#6>&uK;DNi<kBS_Wwe<DN=jCJ)sBD~HSoc&={Y;iLMKuhfa$sw%?hU>iyaSsCYxQ0
zkKE5$ZB&L=1Gq`S9g^?mg)G1GCN^RLmt$)S(y1d|?zQ&;<Xz&S`19_=LYD>Gqz8E*
zf>|%u6`x_jV<D4;^UMQu*LF{yrwE`g>GjdGT@Q$<cIvxC3uc?R_wb&Of4prfjNPn~
zHPTzOi%AcC+il`$!wLhw<5Swat&`{?XOX}3S?J<S1_iYiGl0YKG_B~Bu`)I9zR`*6
z>hHXdexe{K!{yV;J<lXrpx^jC%tK7oNYtUcPRG00gG&wo+C{I1DQBTAo;g5}BO*e`
z61fWEcnMVXeuI@+Jh^Ahl;K=pbtEW}F>xQ`O~skm$G$VGinaw&5U^kJYc;MRq0+<&
zmNhsVU7qC2mqX<cCheK5cMTghMmBg+w~3&~M35!;`!s)Xy*?J`f^5STaBqIoy)Zsz
z&WyQCV!n^`jnMtGCC18G5<8w_Q0)FSEjND!He2cbuw;$9rp$ZUGk-Di9eHOhLUZe7
zMr&eswoX^zxVGX%0o413G1+qkICL2VO$2^eaJ$NcPh568BOBr+!EE-dEE7k!O`Am`
z54_bE%9#(I0+twgT<4je30=B3FZjaKnBDbSbTb&*XX6PRa%b0gw&)8hS-8HZ^WE$4
zf~LteWMz3iF{~a4m8BN~C7+K9F|}#$@1n4M@^Tx7Kms)$+y6~7BDm#*byBT#oK1_k
z6vr%94H1)z<Mcc0%hLM87a|=XJZ9%$oOsv!3_`PS`uw^X_+50k--8f22j}IRG={~-
zHYK=QsUam`bYTMIU2(IYU}u|$h;2g?$j1UP)4s<i$w{7T7qujS+rF3HsO$2GpKd$Y
zT&Z7#>nSLEt@!bs=e;rW$t9y5n?QMv@T8!{v|%7s&=!1KveHx$Ho*HU>K|#ULw|wj
zqx7oTxpH;VD7GHcOTO){o%}tk;iC7Khwh=i!1Haa$&Oaxw2)JYo-U_T*Y=u-zP$d1
zp<H39e1K@Il_yM$!w+(|e70)_;?lFGYy#M~>7MZ-fTLY@PVWk{w1xepAqX$^DA)cl
z<x*p&=Pd`ZC$NEEh0SxM4FweCkwI#)#Z=ZuIlkbaJgne&;}Ls)kofM_19ibpQHn`^
zzDaBQ4sKx~&^=A!dm{Y@?O$#4!9Y!Vzq)X4>hR>qnzbl**Pm${??!8^EcTV#6K6Js
z=l?h_76j&#^j$6IP!j-9AASxn^+oe(UjUCz!#4RE!7n5!3NK>U)!PGi(!t+9KEF)U
z<|z-~NvDI19wd}w3$Ut(z|tb}yDURqjN?Ld94TOXPK0;fK*!RXFX^s7pqCC6I&_og
zd6x`~J@O;rdOPVSPRZ;R?soXzxaLV626DA;eh*<|k0dj;tF%gDO}hL0vlhDp9e0VS
zA!PmIRWwF@e;jR=r{_*i(qnDS_TRUEvJ^HAKrf$z#2btjpIa<WDHxD%I~%(E`C&K$
zJ1Hbd5l|V%nvNV!q6tX&^e(UF8}U!uiN{9U;@@{>j=H#F%jG-Rkk@f{kJ9ONxV)u3
zfUvpeo_j>E_{B)tU6-rF<1LZ5=>@(A`lKT5tbD6n!Pv?<`!ynX%!jbJpJ6mJxZgxO
zJVN$oQ@frwD8&3Kom$#NMa_drgHMR4nP?qzlHVaegjI;D|G<<~V}mo}S60@z`jy;l
zo<@L5{p*1)UfuA!K%>8@%tyXo9>4w0bF(=4*;9Qy6(a?dYU-1ij90%k{sq<jl*djo
zYp27~c&EWdBfbx)L;^cpEa6PZz)NEOSmo!Fi)02m;fsOL6-+0y9(_#aaWBtBDbV~I
zp8Po~{`ZHmoB?!{payt-I4Dbm38ai%b~M}S%^gD&H-7q}14mR2-*pqZ=5B6LwPW{t
zyiH=y;&QnyV~E}Eku!k@Rt`PqqHm{T-eKbGT34b=s4U*|VbHu$OCL?;3nNl^=n?y$
zZxyCQ86GjvUpe{s>do)>UXhFkThUmRxXqT`SpI&?#bC|AGV&;NUkTDUiLlBzrSv(P
zRE~Fu&;brY6wbeDf3ZKNfI`R^kKax+->@kQD=xV9T;7}+C~+Y46dqE=986^$OS?so
z!lU~ARoOo%$N%vmg*;5Ajo(<Rtr(Mg+Fml^<_^Hsne#!ovWjh=?sO_7^oCu}WXdPo
zCQ9<BVqM|iYYVPvJ;%6+7!zf3^Q}8BfeawCgFI{2W=O!9!XHMO|2atnYD8mWw(g=P
zC*e_fMeGa9LH1UmuDZg66-9*J*F5*ezI+8WR<rS4I!5lDpG~hUe5T0EJXH4z`yX!L
zKgRUGf4sqai3?;q6~Nyq)%HVSEL|B^K`;bpItH{!Np;-EzQV8_+_|1C7lD^vR4bDP
z4Gp!O9-J*jG28w=y4PB&0K0=?hVu6nv3fL&ZVt98=|DOTLnIcNZGgY@>i>_uT8;7v
z0VQ+m^?V}OVXMSVs>E5BAx3tTO;LK`f3`m4hSipNIaz*&4WIj5>h;<-R_eUo#q!(T
z@%n+DqM+Vq+kViLdi}1sD;v<mV(-vRmg@mf`+vL#5#>i<BweM4Y^X8NjGC=`nmqM|
zu|89eW&Qy6uMrlyvHie-2#x?RHeI;N6L9hQri&~(nfvwQtc7x|1n#CIdTb}t75N&B
z^zTK491h=G{?840c<X9j#{_rA^CyB0^0B$6fJs6m2sNhqB-w{z2|~hy?8k63y*6DE
z20>CVIB@!`4He>&;s~IXJ6C$rS9nc7G_=TT(aO#Njr&Wg^4~Y-kN5ND#Rofn{ISx{
zbQ_+C<HG5C!Z%;P{+~5;{JIS`^(CD*k7Jc7&tkW43+lAm-=~Pv57t^+f>iI~{wcox
z>q7nS2Y=JdlH{+XSdn_Dg~&DUL~-oCZdq?VH;iuXaY_aDRmSY4*Z^coVOA^f<-ylI
z3!Au~h;Lo?80p7KdxbX7693Q+{ohYTJU<9ovKJD#;hF#4!=fjfRpkXT4MWu)r>h=_
zpMNK8XXrp5t3hXLc8QLN0Dr$9rcW?ybniZTVal5!vvqB4{WjxE;lB$_k#P9;6)GNL
z=xZjH2NstILj}#OtVWO9o|9IAJ#*_=@45kt3A*Ic&MRiZDMHM%gLSt<Z%=UCndi2>
z6cxxZ@86$Y<rA`#+=LKFLMY`2eey0uxyx?2j!?PE#0y*Z8(;j&7<WXM!^sPd`hA!6
zt+R+5Dp)k?wpr@zMSIZs*irptZ{5*-jSI=i#~1o<yc46w`J`<h#}`O{#1T>c_%ZZd
zP8}I0W~g_SPbh^ZZg(h3r=o_cum}Ts(TjZTNAY;*62fjlKQ`~c)~u<`?G1^oa>p^C
z6AV5+zKhnzBSftBb?>OVhjh{f7ws|5qkp-Ak&x_8gUZ|4x4dwMbtVji_A#gw3IYz>
zFC?tV(l?%dWPQ4;!517V&70c%UY#%6l$L4|^g>SG;SO%<MSE+zsM<vpksQ|*9pmO+
zU7e83aZ9#N_6X_UE?gNh&da!Z{emTIKUaF<!yOC+<IS$jjK}?Ftibv;Bc6;c<!O;q
zhM(YHdrYQAnj>DKld5p#_@Vf6|ImY@-tN5J)?oif=sy2)i9deK)to^C^*0d2R3vLj
z!a}lq$6<lFENkIN`E-%%y3{w|N^T6d-q`y3`eqC3+Ab(JX(ezGrHoYk4YKf~f4Rsg
zFq#G~*qilzgAZAFQIN<fs+@=!vuw`A%D;a-2+l_RTz;dr3XHLuF@62?Xf~h6!sJX<
zn<R%uOj&_fKXD-~nNk4RDF^dkcj1xm8|qb>S^Q>w$q$rtk9BZ@osq2gyePtIG%~ow
zG7mE)Xw3=pttjCUebnCQ|F*af-$#`qv)3<uK0+f#^Nqs&#=AT760KdM4d+N<SB&&T
zzcflMBJ^M9iI_i`G}3qyHXd216w_npL+v<sm%<xrs!1CANi+-b*m<jwjQ%4IH`IUK
zV6v!L3}GX|%FMMJ9sq$A-%8I1zNdT42CpGThHvX)1J3oQ4;6Ha-uG-N@xSEw*M0O6
zw!!l;5aim+J*vWyPLY2*HCaq&*^j*jBv7Qi&wQmROgiNK*2u`*S=4i(=W<uSWF>6B
zbYsr%U*zIJUWA)4gg=nl{3;UCKo4$CDOWM)zpr;J_{ezNP05g<U+NNwa=sJoPZAN9
zk5zv?9;zMU=+Zo@`gzQs``^d;2>nOOBV<T6O(>iqqN8CiuFZ)x+=$#$WrwH5hmSkv
zo>P-|!S8LaBHhQ(%b9%z(&>E}4ebacqJI&!KO!h9`e;;N%nvtS{Hbr=US0AvyzHj>
zRcc_{(WrN0?Y76;m9xOmDn>Y8@cq>lVS_K^abf$I=<WR`f}Q){Gz0NHvfLwLNGF~+
ztcbef*X4zd%cKf}2k9^8U9M)V9|0Fu$EI~tA_IpXoJH%8Rp%M8@&3PpBK#mII4^5<
zu#h<Li(Sk7-5};RJHRu5WDhYUKr`OUz=PkZd?MCHDMK;LbE}U9r+*Ato2xCOB(C%e
z8Mhbw<;cBLf%O~4gT~zb9qJ@lWCp+dQ}q#6s2FZY*w)i#C;i$I0&m8GP0yMrL=l^?
zFztAisY;9xhMCIP<e>@aK~S!sm+P%%(L73dkv2^Gg?<*<kw9B2%?N_|G6EdATfGO>
z^nNRl>J|vL)iLJ-ZP?p?cD_zZ$dD}F`Luhrms<xNXOdljV5ckc?AdB^KS#n<$g-)I
zbd)*TmL!FeF3Sm(U9;v~m-3oHTjFn;ooqjP_Hcec$`6arU0hsIxUgjB%y3nMHEWP@
zMqIvG5@~&IRrvP0VRA=KC<o|#L#Wx4rjwCbPOK+&#C#-MPd}Y|mQNQ`=dyn&v*2xv
zeZ*52n{ac-;aLku{BNLDCJ3H?crjwb0tvVlSYF7OuL=r|<$!IbB$(}w-p9P-VC)gA
z=!k7;Z0}>JGlkeMw7Iu8N1`JH`;P2Ur^g-l*h^}B>D{i&t@PhvC`SVEd&F;_30bD6
z0s4~_V-+*=djg(LSeLN~`9SpJk}ExYHQ{x#q$REHtZ#o0Q9MVS9U^3>3)g%5a=a<r
zUYm)h_+}Bw*DDmu6^Bw|Af6CI!x}<+>xKFZFF52iuj_VGqv7L1A|}naj8=ynEt}nL
zL7d@KcAUq)3`iRKlOd=e{z2&|nVL3=BqH)(Kgb=5MtY8FQBz-~LWh37Auwol>X7ui
zAhFC1jy8e%8oPbjR)(8Sn>mLW^XVgY>6a)RtnMw6OM{)0ON(vN>iGiMcZupl)zr8B
zxzFcb!82CcgdBdbL%l{GSKEOR2ywV|;(NV}yIGSL%L{Nty3bX?i#VYg*3v{LnLhxt
z*xBIO(R>Xd?-<S__!MJh;g4;n#Ys!(=!YMtGaHk7^LSguHWy)gC33vu{oSYMy=i8<
zBh7{%6J|@@F>;o2frZ{DBc<$ay<&RyXqi^lV>aQe)%-3nc49V%mq0FLvr~0aFq=w{
z@CREc6&We|COMK8UKBt3yJslKFMPEHibO?iiGLNCtJnD4k`mTM)?sdGkpUz1v3m;&
z#$htC#mf!F=X)z!b>53F+`^#D+dDQCI|IsV_R7tEiu(ooeT2xu9bCRiNt&QnSLV=C
z)bZWc6(`)mN>D?fTZGN)PuXpt2r@Bc<cz}$UTfH##SJ5IBS%pSqPgdn#OhtDq}z+Z
zpwf2fVvQfzwktwmG=eA8J=`~-M2B3^Dav}WQP?s2MYTj=uZhk1V{1PjE+p#EIL=JF
zv$BIp)(NATm(J?(nWF4VI_HpR{S~!PLOMm#XSacPi&$sx;%1YJuId$Ra*`wO#W_aV
zK35hSM=suRJ<A=4WIBHr2UR6Y0HTpJZCSY8XTwx$%wH*K@fXN6OFx^e)X~1k4lufB
zQGX_GNIF4_^T>CX{82b;mq%l_SOICP^<%Z+>F)pnTld<I_P0+rmNRw(o%tt3Cn7+X
zTqF4$ar@<P>nU@(r_k56!ukrc`m2o0lOm6hktoNnQ$*P5PO<Dy0!sYMlP=uzpQIZ=
z5P#8vFp@a3NV6QR^JR(&`S(|SNDEb-jB0c`;q`UcseL)r6bmIe&4p;V&l2dhd@*~7
zW@5vyIKufpW?J4$k$OT?7OTHef8Wntf;{ab%3ha{{n**$$D}Y@x)Lntw#nCGk(c!8
ztU_z=6FMK_UF6iOdoAI0?sC#-X+d;h;qQfQvG4pwCOGU~P4{ksc3U}Wv8KM9dVtEc
zD`<54OpU&(_v3XZzS9oXh#x7aP-;9e*Dm|!@zKq-;{{XV1w*`~anDo?XnSgbacJIn
z#G4BL2}b<>WO$+zTZU8#r8V)gutTPv7&HRNqf_9ZDzLT?`f9YR54%ZC|A)p>0;65V
z5H!>nPmlTBJ+s2Qj3gDzv!?zW<6%_{f)Iwx`5n2ED(<_FNq1|{Uq@)yihI5iTODg{
zzX^w~HM6_f_BqPd@O^N8)cSF{$EgVeel+9nfw)-<`MAjjU0{Aljl0fpgQ8_;dXz*6
zwMLc#;VIzQAkp7xi#wJ4=1RfUDRHI#Z7Sl6Nq-LufkUVa*n<?6I17vl`IX+qz4yu>
z=Whl=VpXf<2^^BJojnr(pIHQUx1gp0UK9YhblJstlk?Mkm#(hBa6>h<Ck+7}YPrwr
zuAr`T7&-{qc|)~&&=MZ!F86#rxTGK@4HQ#hK0bO_i#~z|bbZbEnQK;FB|6bmKvB0s
znq9quFn9z9E5!9Ri#6L?=>#3Zi>`#=+la!ZQxhgVH(K313iyR?MTmd9{;(icqASq`
z(6oDj<XhHG1No~xM$7o{DD-b`a0U3RgZnCi-?#C`A58f~M83j*E?ZpmDY?Xo)toB)
zb`v*p>xNqK?oPqs%n+*<k<7*E_eLg58uQ-aAB#*v*$Ifl(M7d1@8jEbH$1w^1MbS{
zFPyHde)D7;F?zmW*o*rZaR;HV*AZ#Knt-1D`_?25Yt(jE`uwUcM2X2G-zDm*(14k<
z#92RhRD#`r04+0GwL71~sW|-0QDU9Jxf`7tLzjo}glJFE$6qG66z9&9E#>sP-nPq<
zv2()_a}?@pF}#cvd66Yj5B?Ln?`~7$Cdk2Q52aieRmikgIa1VhAnsT`mpQ?!n?4b9
zqSli(X)7heJK&W@G(=XdfUnY9_=tEB2K18cqPh4I4y$F_`znPD-q_)nXvL;^4akc-
z5z3wn_<c0kYQ7yKLuc7-Yx488OIa?tEl80MN;@G;I9~eAwY^l0ef5Y<<(}x<s}~Q;
zq=S5xh}+iYbo_x>2w9U17*zXn8)c<_Uj61mMr99jh`yEoit~dI_tDGv1fccn-M2yt
z8z0bpe6W$Aj^BSPyaO6+nf2DpED;WdEf2|Qy4QY6{wgTBdaq2*Iq~gdxm>Z{g<O&9
zM9tmPtA6q!-?7TcC?->plyv15O`flx3aR<dTY`;w9GpepUE4O^mTY~k-ag!Ft7{?b
z>FHf$Oh_IRIqRHzm(9abH1UHju0j;Wa098VOYw5N9$&WC_fGQgCp(|3u{@R~XKu?h
z@yF_4)U_%BA8F#OJe+=|l69)QYEIZpDba6d>8X80IY;KavL#4~C?lb!N7YFmJG+iN
z&UV>uUyUhr-YScK!i2`^viT-B{Y!IV|HX^rRpUiJh*$dFq`XAxQ6PM&$&sS}EzcN{
zdh1+MV@QIXvlsy<4>`1N(8LmXi;}GA+DaWP<~fE-8_x;|%`Y|Oz!PV9G1f_z0@YUS
zr3It1&KP)MXY)qt@qL8|J0CNa?5~cw?q>9rC;=LubDDhW{Eo_AHqZVV{QkIp(epVn
zT;9q}gg&vC@c!5v&#iaeWf$bnH*9}qRTD_gC3Iv+adZ%0t0}#_T&k?cd=DEVo$Lai
z&%|nm-Mz0ETYg_ISAf3kdK>o9aZ@}Y_Dq|9!hm*8V8?ks#w^prESL~jCI}&U)9cV?
z8t{}A#O1Mdp&I57*4PRM0hU_3#iN&uYF~>EkhOXW^WX%tBh6nMM%I1I5+cjO|5l^!
z!Rwh^mkP+Cc2pFKTfPFkPaf5;)p<PV`w0Cd^6|krvVh}(0~5O`bE;@0z`ZcLe#2gP
z(Y39Q{x>}5ApAu&nt<b{9OvI0bbhsoXo?*8_fS)=g)^|E1Bf^}QCrKDo>aT0O+DaN
z>T(h+L%(-j?;tJs?gj<-*^pFVk_iqzSxZ;RTPsXscn*fuEX;{Far=03J>R`R*<W5K
ztJ0Gt2B3S(Q(xpl06matX}eRCoVtHIFUA<8N@FL?WqoBRcH%*^^<w$X!;&y-nuZ1I
z_fMhTZq=YkOu<z9!1|Bg*@ZONX9L2-{fhVQx}KyLrhSHZgO<M}aJiXYws%S=-sj!w
z-|HD3m-dfnoM$U0LXAZv*t`bDQaZR3oky$udF@tSE=0Ado470v8cP_qUhf6U**d{A
z<9_b#?bSJULCaY92e^YMu7+&T)%fPWl)<fbxa_aGMR>nCX43uImMw7o9BN~_+CSyF
zQZTgNz!JkrQ<)n?YwE#$uycvL`1$DaaLbK_jcHa%|L$mjr%bmwV+gEg)i8E#LW4*%
zODuRAv}*OLP`%{L*q@pzz|uGLP~Eq{12%4a+wUALr1lscng!{67!5AH-*oY?E$j<-
z?+RduV}6-Q9+e2%neo17^-3l6fY9BxLtNClP3Zlwss-ppM&;J$N{gjC4a-cp(%kd}
z#(x`-p04>+Sz?7+e-Zdy_T3j?*{d^SD|Ku8=4+D3IQR=6)Rs+MxeX4B4a{wAT`+4}
zo^Nx1f@NwARsP`_<kG6@us&>;=;=v2=b(}fPF_dX2v`F{b3s>ndyGE;2LfL|({2z)
zxhF48sYVT$HYds?)to2*W`SMMjm|^kD^w%HT+Ow0I(mewA7*-TioySJ{UC!1iRjBx
z%^k<@Ds`2{>kSa!{VM1{?wrH2G_<$0GHUs{EZsfAjS2P@v{+qH4$eDBS&_e(w~9{k
zQ(jxGzNLcZn7k&O3<3f6Cw@ybW%!q1!_@_b&JRQ)uv@Kvewh?q2UI*s?tk3@jIJn$
zx3n2a^Rxod22z(H?@YR09j@r)VRxoEa0DLmM_%k`Wr6AJ#|R;e>xUX#7|t|X>>xI;
zEwiO(8+QWG<a(+CMXFse|2#tDA@cl{s?-5Pa|sOEDI9IOG5p6jSJz1Uc22!)AJsJn
zkjE>YEdFe(r_+;e)N?J=QuL?`{>F<VL<Z6DGUQh|PzTNxNx@zF>isR&Z&*y*C-7tx
z<XBdor07Le*9fcU4Deio`+>bb+{wngoFb#Ehp6C7TUwwG85zvC^XEFLVYZvjDX9^j
zk?H)R2MuLe*z?}QlNX>@FBfZgxV7TPe`+WPEBWT!=tO*>^(Y+8$WuyeGiytg@oo<&
z*lA?VFq!>4IpA?W0kK)A_a!VdEIfnswUj$IT(^Q;uJk$kT)K<Yt*)US*^GVZZfs0;
z%_Kr^tA84@jW7+ctxu7H90vT~;si?~;S5V{Xo+Qd;z_57YT055I<%0=OB;U?q&GN$
z81T$OvfQ8NA);;L#Ew-arRKS$I5$&<6lo<d59Yo$;13x<=*@(eS3&!Mk=Gk`LORXv
zVR{n*9^p7gj3ceA>u1c%1ciz-$^cb~ud{izr?Y7&iIjrGyO-<5gP*61D8t*Y#R%_Q
zXUK}Z^pFH*Jl}Av<#$qa*I@3H##fqLY9agdU?yfwxU?ToY^quh1pVZeQWas>)(6@K
zuEojb7nh^s>HM~obI8zBz^*Qsbg={|2YqgsKLT?9`m`fa`JqBMO|GR)`aq<vIJ4D(
z!pX|3HN&dcq_~#*ndRcH<o>-qnl@}Ka+`%<Z{?E2tpUupP4z=oLkD)%6hrH<sdVUK
z>QelzXkmcKh=YU=h>QDjw(OfAhBw9}6hptggJo<sk=yQIp{3F_e3#T5-h8qB;$mjT
zrP|=0F_P435`g~1P1k{WdF9f^?d#xepca8lW1zvj=0WZ8tRZ=wnlicTCUK$=#w=&^
zfW!xH-6<W-qPq+hR7(HL%o{=GGUw>i*=$!AL{L^l9yML_@*`}y^gyhk#%<d_`|0<K
zq5PS$FCdNWC#qr=H#*g*xO(C8Z@{MjN}v!d7Td!vskGNAAwVS?^Od%@R=q348Yk3&
z5{aDy)ndXea&TWlvP`y_*wl;VOBP!4Z#AcoDA>SCWo^|!tpyUU@X%(RJUjH&VuW~;
z5mt?#;f-hJ$&dN?8L?hKnw;JK)k6D}g+Wl?Gm$`Ap(mXyW=Bg7{LbS_Ic4(hzO=k$
zqm*jZHPnM_nFl|CmZ{F!Xtd|X3M<A=b8~?kJiC)V4Y{M`3C7~|aTUYbMe*THjR#rZ
zqhr{2il^Ha3ViFEs%>|mIESw1bKlVMkCt>q?MCy5<~>Oc#@IY}?^e_X6U)TG0{od8
z>l`y-uk2hK<Dm2~`kqh}C%S32%mDZ;72lYzL1su!M-Gto5@`1lD|N1K<5rS1iN8?D
zK%_9`$0P`&+q7Lak@e}Ur;HBtCZDL0ATb24!M^n>x#Oo~XWKJ%jG*a`t+(=`Sv#MB
zef{-0Xtyv5OdRHwTioSIIwK0rF<M3Qp6UvI9aO+dfGh+W+z3X8ZR3(6*?V7X%dHRS
z-MrbrFx3}1wmhRPh&^^KXA7x`!gPKWydETYC&z4cH1*Sv&r3rEpKnrqmEKAXyBfu}
zpW=}UXS9>xc<MKt-QH1c*PiT3;9z=@^aaUppMbNYH{ywQT>Nrjzb1r!V<5qNI{bAr
z9q<Rk3ie`2u{S5&35mCn331!p@dkAk0r}H!*^RCuNk(!V&B7O5Na2GD@0f`fXTH4!
zA_ML286q!=+H&IGi$1-5BK;OpmwwX^WfFC@(C~aybaVE&4)rSQKU@Ise^DqgS9PA>
zBXFh?j71$>)G^nu@lx4s<_3Erqa)YY-qvL#<5QL9-^!)3Z%$RD_BNC8-P9>pb{4LS
zp&b58leg4AO41Epy6@*Uf`ZLgnP3~1wZZ8461jsqQIXu9>t8P?2UcoY^0ALDk;3=x
z0q=vy+43?RbO|W@UgNHYRdo`Jj`V7KJ6}rV-X3*ky1y9IIiT;?HqXTa87ww~wXvIz
zfcyrs6$meyQoR;g#{J%IFEeed5d3`z>?uX_3ZG45ph*>HQ!$@)I-EeNgcybuLX*Mq
z<6ud1ap2g?CF4g8=2p*X4oC1wwoa<oj4@s;hrU4VXs+^#o36|kT;(=4<A~zoQo3h7
zp6b)oI=0X^0+H!WNw%>4c@RJ5RyowWxbi(;by^<`;dytMU33bfd8(6ii`eB@5DcQ7
zxuajWJ~Mo$7Y1)_{IQ>g2H_taZ4FJjy|UWGM1&;tKeLx5-8~4kAp-#5j_|vTkW$Xu
z!^ygLA|9|q-i=pfb#Pr)<Ktj~E9)DpD7AvK!c=#B2({Z)l7^2d?eP5teqy|*p`{?P
zShXlMt3to=xgPsW57e)46`bZyxA9(~4pc7cdf=%N_lZW}iaLC4+70gVqwqSSjZ$!B
z!=$kQ4*D>htE{&WW2Y@PggUEC${agESILE1$_SiJWdi4ieqVC7npl=kRO{5gV_ja7
zLPpL>MugZC9+%@TmB=OMIVA{~`89^8xvnTVuTJaZ{3|&9=M=@>o(VU?L88I3I>Tuj
z)j7*2+z-KdYDblg(HzwfJ`-%#N>4G@%s5H(8&8xRUn@4%R8(Wj6altszMBg{9s)DS
zvJjI0wx^K0ka)_v()xL_du2DbF`Q#+GykH?RzKG=FkOjgNy|t3S%rA6Ac;7wqFJ&r
z&dAc^vaMal;DW3+O*x#$*OlJ)=1G$MnyiO<vRedF3A&OTxq;9Z`S4rJ30-DTzjh$s
z2vSb+Y-dh3iPgQ(oelp5Nf+~`QDr_@eT;Jvk4-qH;LZ^r*WZR%go8fAc3WYkF&<v6
z?veYL`lpx6E2sC&UAHUzdPy3>@&=u;6}~e7Ee#?C7$VA)*T60n3kNgyT)Zf>BrTV7
zNHAeUNf_j9Jio26<t&mAolva$S$~}LQ6Gr=B|GRfGsMPJT>WPenOrJR_sCTuU@*7A
z(7o**OKiHLIvxZ{-&la~yi>S<6XZouGTHG&p838jrE=seS~J*~EFMnpv|YBjBfQv9
z@&3Lj@9nG|D8^U4b_-0E+@IGJJ|((%>ms1bnnlI2tN+8sy@H^8rS3QN*pc=1Yv){D
zJVriN+#Ekd?UmLAPdf*cXXd#BK~52W_Cl!eR>t$lCe_4qFlZZ)bU&FsH{i?sJ!X5x
zjESpaAVI9;CB03z>L+Kvq)R;O@3%^IkC<Dlu$-C>oipaX#{ynM5{EXorP|(rzAn(D
z?a=UToT*9DU<3g{nc4!%;jakuhK_~CK9uGsR_lq`TcM|lsg!aX>(dZtrVMYlkl0FJ
zTodJl9WzNPDZw&_*d*8wOwKg1vzx~DFJLV@yRe%cQUoN|5SzKxB|#Gdy0d4mci$A{
z1==#`!ju)<yx?L8N0mSvUv+pMhS|xF<~dE@_uJucW!BbtfY;(KY`Z!-7VN-dx;$_U
zCjY%Nu~2CMy<OJHyHiew7-aO#yJ|$MMNl-UipVnvaAzmlDa^LhuQUm1gV<E{^mX*d
ze3b?8w_M8>!xHa;)ob2Gmw8=hed(1u7ODxIsu+7w`sfz?*87UMVAhD@hG<HOE{<M{
z{9Pt{Nk-a=;KYI2u}ea7O}TqbM)3^big#zG&G`~avY_C<(iESvtTFl>M0}-96yyGr
zq&qKPetYm%4Ir_}Lj{v~FN;0m+7o2?ttzBKYJ>__;R-#l>*Z74@Xaq8@XRm1@Sk4J
zFf){$(m3fAR<9eZ&;Nzhracpj7yX6^-xLAn7uFEdFh`oDbh6;%KK6Y_txP6+9d6_A
zqk+WH`cdNUPQUxrsF_GB(~}eJ-XkA>uN96k#nyaEL<WP545`b#&3KNhju0>VCwK6<
zY3h86P}+5>b2*nD_XTw;koI=)a?6_op_H%H=dFlz&Jh4pbg{%a`eIUi{yrW5i8D6d
z>lC^-+%1U(jBcr3diUkkX}ZYI@Wg|mml|W&bu4YxV44leZ?~7zCA^h7t`;QMA*HKF
zw47Y0kNCFW#@(N4?+u@P#_qh-w|aelmbhdSQem+)PzGmbHq!;zWj9w+<oFg?smLv4
zE~=}HO<3<a4$8y_7`J)$A$V|E7uKy7r0R_0-pZKZ>tcpnj#7dzIfmrK*#X_yzUE8x
z4j4qWT>`krnY;%TAHknA7cnIGI$1AGf)=K1#Rbj9eM+n@!%jTUe+Id#R+Qpy8r{$}
z2$lGuZ(TsLCIzf}68&rd1~W>e<M^aY8-@qk6-Oerj`<QB4N3I8-G~04ulKp$Dss93
z%Zau2H77H?m%IwqNBR)ZK8L);u3X)$jh^X^P0yhm*s=!MJ`(EDQ_AQyU4Tvjy5BZ&
z+p5L&8o?}Lou3cQ<-|1}D#=11SK}roKRl4bz!(JG1#KiNNswplg6?t2R8YxN4YF<A
z0>OrUiEmb>XSlF9u!ysmwi~g)rJhhq`>>Or%wW*<(%exl&?9J0@pwc@cYj@DZT$4s
z>bdnJHB*tyq}dp<0z+|kHH-YvC`ds<`^bKNh8KS)e5XOpH05)yVV~X`8bLSrnY<GO
zzMSfXDe9ET@p_sf<CtgROXkFa)xOxUcJVjPi!v6$i)Yb}ELxPD{)x6XzBEELQQ)^*
z;fJg&-?k)<_6mi7AA6P?5J6gtnz4-X7%ML3p2*7E-z);l#A68MOhYJVpYY|A=Efgq
zX=vB{>OeL=FrA^2?ij5g=kfPb?S)g2I)41SH^JdB%9}QVS~6c`+cDqjTcKwIeEH@!
zP`5R@l)I})rn}d9k!N~TMk*Vz2g(`ILbs>k<hyk#`=2%@Q6PQuH~rDE^QlGg@E>M@
zeGxww@{fh)3RS4knl-{~@evjBt>BszDQuxC3sU{gMINYH?^N}XJJ;*&p>x}WfP?MH
z(!<QJRFyxcyK=$H7W}PhDQRpULs@Bh*%b2C7&WH0mNnI3MNp~tv=@NeEr$|Jqt=~q
z#SK^I$EoL*F?;S?IVmHb&%Q65_6om{Js$PI#>Edd?EQ4(uH}D46~c^TOXCe!3B)F4
zdyI<{Y=}r-My|&ORk+jOs08a7_<AJp7VKE9sHC%VF{TH)kNHp{aBXLd{u((Ykzt{q
zq~{m|tVc`FBLOanYh?o}LIrmxgp7Bd09Wa{QHfMB(Nl{2&vh?=dOSlC?`#RzgFS`?
zxNb$*itXq31K&!sb>iV#Cygp`vY;d-bTPHA^B;3`Jx-LXsjhV%vUgspU*;!kfUBXK
z-K)KxDd%oeWuC4fUS)A^+EsYTe>o*3gIq|rv_d17r9#H3Nd20$8mrv{N8Tu?)smBu
z?apfl+uUxLKpMRv{Tu7$<!jv3Y5nq~FV9u#RHlPsll!CTU+XEYm&v2Fnp$;l+Y}NC
zsImZ@FQd4bFE)M7sQAEjcbv?vC$hO#-1AB4Pd`vJv|m(*G}Qc5AQ~*CGihU8BToU-
zu~$s}s+?(yi<V(mYUoiD@U@y%<QCTvbZ)sV_kajpGFFEk1NUSSAq-By4o~iAi@*}m
zJ-Wj&a!a*<&kmJiUV}zN-5FK#?*iHS2QjNn7-BKq`a>LY8;Rs^!g-Wh5vM>4Ks&nr
zP>;qV0EoGc{E<t5tTfLtyKRtmF%n1$K3l}MmI$KUsAW=xYPAc5xVP?TLR=S#+<V|x
zG~V}tJk^$r5Ny6i0;yfMC=41~^42jC+lv5JfmUG9w{)piqo<cE6i0t`pn=b3fcE)F
zylCLzka!7GTw>kN)jXEWXKWe%bUmXpQx0Um$HZ}~K<qW|+j*c`oYnRnmW`X9pO2e!
zq-#%l6sQz4O$<e`f9d_0q&u8YH!7(UZlIW(7OOwQfZJ5`ZgCy#CAXa3vYmG|jkGNo
zRHQ2FsZX~9S4}c+FC9lc2~X^m_a_3*=oUrQDaN~67=cZQ=^MG}!P1Es<MLsZnP%@P
zpZB&0+|SvSVxnlxcj=$>uEtV>TV5O;_N0Z|^qS7z9n~2c1sX=leL3_Ij(ez=kX3rq
zaunb*7em`3^Va0HW8`L*d0EDjdqmY?wNBA7A|;(qO2Yweu1>}N%*P%cU8m|s=1Rw?
z;bia>k*6U>daCYa%229W9}@U;j(v25jK--ALr@jClFTJ35nf*7<Sv+MIxe&%XjJ}1
zUj&&Ies=SkosD9~e*Mi*YR5u~%kf#UBj@xrqEXFNO@#fU>ObOazFt)2bxn-77S<RQ
zGuS}ML7tF=_lfk`qAQ0lru}nMf#x*p-AJwklRj?4X>#p`HTRZVnEE#8(o<_|SYD8#
zvjJbR7vM$dJUqW^Y9+qfK;f|EkNu`Mdm;WHr67SyM6k%%qNS0n^v$tXek_bOmKyKZ
zK(CJeP5$f}0X3ZC7B@BjA;CUtc=r13n5d>eFlTxrS?tRxBH+f+x49`3nU*AQa;-<`
zd_q$7gocoZ@f_B6BRR8(mrlkF_xFK}@=Yd<b51Khea$1oT92l&@OkAZ+%GqKkt_9A
z=OLdg2DdWG=06hk!d+{e<-FW;6e=sqNpcsH=&KM%dVRy*L59)DfrY-yG5v=7P)>ja
zBPBH9?LBq!0HC7$P!Mfou<HfJHWa4<@-iaZt))?#FPnd-Q!w($E0^3KL&Jw>9yf0J
zE^C`Sci+;QzsDql^t%@w$li>JPoyPcFtG?w6eJZec!V{4H61SVj1OUJz903z!@fMC
z%<O+9^5XsInSd0^GFQ0lQ)3-J0-f`yQTqHGj()yNWuXYC_H>AF9|Jx^nAi27QT6SO
zS2o)6kGu?~)7!R`S)Hrs+ZXj-Rj9fgbq%LGd+k~)wXJpX=fwub<shOb78{Acgd~Xy
zKwfUDE9I%0o$GBGXcJNWuzs@wQX3vb)B?OCM?~iz?Q_Nz+>yUd=fW9s2cr0^t8V4#
zbRl4Q)`Bg|%WNZt3YHm(Qx}!+yghd2+L<1V5cbsi!^AWF;w0{rfe1sLDPr0BSvq?J
zet$(lCPyUY<xyEZtY=k<-Fk$=);iat+wg^aK+4GmS*zuMxy)qkHaTvp;C*lk!6;Yg
zyT|Qx_k$f4j>D1VU4Exp#MCQwjXgAZYVP9oYZmkcC>|(EDZ?>BpKqblMC}T8vMuIm
zJo@|9h*$si|A4PhiaqzcGoGlCE1<{@W&K%D*t+A#L#xo_=hcq^Kdq<3n%~$yJ8u!_
z@wb*Dt^A#-0>ot@sC9)(b`_M>(TiUFBzXObl*RB^lF=w}!?2(`ap28BuIL5iYiUvS
zg$q{5xYsFo-!4^+{j*h#Hafq0?K%omz)aNuvA2l2@osiP{`1>82Ew^eVUEJCz1l)^
zqcdJH6@B%IU6JA9T@m$!E6f^9(ZeU#_H<T^-pfW8ONSs?l4RufYGq|CYcqF~6^A%2
zd?8907(4ML;s_)rI{WlJDQHcQOEQ=IO6gb$KqK3u8rhhouXDD9I|J~uA2%P#)z|4<
zGP`hl;>omUqV^fcxyhBMZe6r7Q@+%=1ue>WLg4D;n{;wo=SPh=VJ%a$SFjP%8v%K_
ze+olLug-s@*In%h&_wQ9J~m)hJe!E~d!eFn$HxnhFJH7ml*iOe8)AWDLXziLZ67Fh
zQb6>%6O5ET;({_jFQU$=_>wi%jo;g(U_gd81cShilTk$7GxQs0D_GsIK@J-&^0p8x
z>G7E+=aOW_+M~5U6j=#M<%zR0+MLm+=y44g(W}+cSlcUwl?52H4rt6dm<PFPrY-6H
zDt&x#Cf=OJmHZ)2h$ZBO^huuqA|=WH>i101CqR66VYiu(*?ay0K0j?cYEXRU{mn<R
z5lUusasJ2X+mv@Nvi*H=g6)*G;z4^^)UxlGEf$rg{1yVRzPP{fe#)r~Gfrg>P@k2}
zv-|9YOlqmuD!AP0gcUvuAw$&H;BY^NC3$~0v{hM@W<S=h_0+vMqvjA?-m&gdG^>du
z8tu?&(D=3gX2{`vA-U=&Vo?sd-z+s+NA-zx>VX0BCj1&}<n>k|5dOTFwUhBggFbC@
z=G2-2MRbjOM7gHkaZhg(NnD475`;iwSRDT@f~YdL+QqwHw4DLM|4H5IE)2^I=3aDA
zI}Fi}0WJUR!GA&+in^%S^fF9E-W!NJVWrMlM4wRnzxa9!s3^O&e^|y*Qc^@Zr9-59
z=<X6pL8L*Np}V^q>F$yS>FzG28|jAcMt$D%p7;Bov(_xuFfco=+Sh%>Z-198E&a-p
z6o=!Weq3R@$o73tUkzuX`Ldr;(}D8F2}QK~Q1*I<L5XIQI_vxlt!QV?RtFc+Y-|8U
zr0|K_der{8i~8wec!x0JSkm(b=e)yDA$n*;4&$_i3e7o^d>v%|EngY5FXB`~3EAtz
zDCkg}2B;;E+4iragd}CFWGMLRN0^(&zl!Lsa=vO<0VI`xD=tKc>y}$t{cTBE{~cq)
zv@+#kr6V5@Ks~*k`W7sk%w3?P$?<ipSp5zsIsh->^~G8e`J-eyr7u1DzZ#p2;YZJ$
zEa1;LP|l&I_ItWhf^Kn@C-ZaN7mN*UfGyQHL`=Q5z3hO|`>sJgsGZ1?Tv~{@m9Czq
zSNRz`2PZrD^1SY*>th#J;~qu%A;FvYIAxWX8L6d%r}OJ_t?4yDEV{M3ugaYUrJ~io
z&;XaFzfqa=USO?xP4;zZ+=boH8Mobv%qy|^7uzy7(8XPw@EPkvpp3yZwbZAdTKuB%
zT;Z1SGV~6wH_-iEXFoRP(nLjEkd7Alfifx~*-99I-*k-b0fHL6eT@hw#~DMW62#^i
zrO`rfARkzXayR(l2<s?qSBVEp=S_`0!mAuKg;-mJPKp=c6A*Bhh$qpPhosub161)U
zD?b@2=GfkXH@BS#Sh>@ON#cvCb=+ijarhmo-v)J5B`?Xikm%CXaw{@lM;Q%Ie^xY~
zjo$D(bDuoVIs0a-&1_$R@qN<G!o{+q!-4A)m!<)^%mpX6CF9~$4xgs2IIQ5WqNFvs
zn7&V~QB7J*cqvPF65Z}@dTmu0^j&tYq!kFl$@<iv*;rc!Uk>bkj%F<*KigQ`#iVbU
zU-79-#+Ur8CLNiAO3ymG9YmeUFd0`hVNJCYK3z<EgtbrC$su#%rbG8>vr(=8a{l4$
zkgy4%=`JQ_b!9{bg^?BTPhpJvw$E+?gWC7SPqedO8+i3To5)oL{QSkVu-Rq$c1Dc#
zu$u&FVvth*q8{PQMdc@4rv;l&id2EJ-qdo6ad&;SmREg>C69$&nwKN~#{h$q-^X&#
zYp<q9!^XSW#vQgFx_CXWbYZ8x9t8fu&^urKvcMq2u-(4CF?Uu|&12hwL|ZBV$#s|Y
zL+v`hqi0Hd;RyS9dG4OYxbuCFE0D+fx}A`-{b|`eTs)V053KH^M-ldV?$VgAw${pZ
zkKGnID{W~AN@TmHq2>4UsZ?54c@3R}^vZ2Le+YRFlS3|H<-7aW{unm$l-t8mFzAWX
zW+s<95#k?@I<2;SiU-XHj`cVv2K?dRgwOz^mAUmPz3?7Bi({)SvftW#nq@or$CojY
z*jdev!`>2;qpO(`wW<a?68zQGH}8w4d)!QVU_eAa!deU5T<!Wv65VB;9Z;H}540!m
z1z$CDJKhADny<nz(KVoDE1Tsu8s5&p>t70r`lQ^{V#|*bjI}=oBU7JL`SEa}lhzoe
zFiASLPr9W95bzCscKu|!b88Bu-$b05A;T+7^pX}2Vjs36MXSC%rh6|jx{We0>19yW
zr&@gJWxh?ku_*MN9&43p7soq#hEwrqtLCpl{K+fg10rLdq6@u#Sg3+^xPl^8o9Nc-
zrgOj;_Dk|iDU)v=b@&-BKg0RnNj~DbbrtrZs$SnVxFt+nZHyr&TIrXaX1^uZru1Z#
z;=E?U1=D0|JR--B_WPo>LgUd2Reizo>g!uM8JKn#^V_o~jR0CR3pZ$`wMNxj+bAPU
zkd0FD98$N7$`0~*EsZCCf`+{3m4fhoF})(q#KfhurZ%;#){O5i_Xb(gmz0w|UO-?p
zQw=C&2n}$jv5^_qu{Rmss}fxG9qxZXm}DyNR(^`KZ$Ie=RE&xg-d~CDUoQj-Zt$mw
z#?w6iq^y^)vaS{d<qPmq<T*8YC@b&ljpImioMa%D|2!&vhg5Im-A}g0;6^u8BaYX^
z7l8*D8`ARO3tPtp{dI3CN7w$jy&$(Vi+JB?r?L-pZ@={`GGA`U*Z6+)^N=E;YHOr~
zw=o{|T0Yc%hc{6eunQDhj$fF3o;SuwfDk3Z0Tt8I28b?al0@Vwc2Np_HgZfmB1avG
z#|1=5wP+zwSK_ZbERKqA?2hY2@uTPnm%F<q%kH<IO;tGZb^wKVo}|A93x<(kp|#c9
z1}YO5*ThBH$6l)4BA-S0&=zy@(~2gtWF+0xkT&(-1b*fyQ1J99jtzUM*4H={CT%<#
z7#z~;a2jampNqP1tSHOkD1)f_z*8F=K}~2U@s>e`<?aYw<vT4+5B@^$5cR5qky#gW
zk>Q$nBHX*!Uw&S<;@{#^YF`|@3!G!EADxMNDAB>7_ki2*GNaH4-oF>=c%F+s5Hx6>
zP!%5bsai@~s%#6{PFjwaL`8jQg?l0nL%Uq?W<Ne;1A6N^h=;>+#cK!IypA9&*zFdb
zz9XnG22T}F`Qt~@ovW2-*-k@m$%0hUwPp?w@SCK*t=8wG8Wk$H?~36uIUxeozt-ir
z`*hlN<Et|@<peTmJVtxIHw#;4_1*ZNFi{&e;aNMydrfz?z8hm<V@?)Y!doyM*e@9$
zK+l?N9;9Ux{Tld|6H~IyS-^%s5H}Iiy5oRHltC{f=!g6jIjU$0kV7-r{Z?Y<g3n#U
zmp4f~buV=7nwJ_^$1x<AdZLro?eRtI-U89&DI05`h9kd8;O1ry!voRvr`i^~Mjlv!
zGbxQ>)}u3`!#cZXCo32t2ZGsw`W!8E@>x~H@eiRs=|J^^)T(%%e0mMzPd>MG3P<bD
z8Uw3R&{NpdAC&xhpOG_xYMMcZv;(J<LeLOfAs^5aKj~j<O%Sl!RAYoysa`?y<;Sk(
zzy(lY^jYZ2yFABfuC`qVmyh&Qw#-SrSui!H_EJCUfW4t>gIacDrQ?n3J0@ZfNL~yQ
z@HVq-ck3P8Hw-ax{S%hGQ{~WKn^NhCK3mj0ShClN+DXswCdBzvnsG5#E3mr)J70;Q
z9|C>qaNZ%Um5P4f=(I7DepY-M#fknRGDh>kG_YaAwk)&1q(q$eT*%PGRzQD{eooX;
z&XczAT#n&Y<RyZxh3&RUgW<lnVArxca@chr!MR@DsM}rp$vfAh62-daVM_$kPLs|{
z9$&dSiMqsOyLi@S`?<>omGS#28jSsGn9{|yV_b}Vx(4Ex`)kkjT$~Z7hionDp+N2k
z8@XC3HQUX#JF)C$qNKR^`mS)mrKCw)n8#cgl_E<29V3w&kYP1j>o;Rf<ut)8xM=y9
z_tSJtaVePDFGxpetms47Qol$S+OCk~^puN>UD4*`Qx^i1^B<FO-x?Fkd5-vksRdok
zW%LnlmEBx;R7;E}+HCHNkNxxtwbfUmRnwGCCsJpgs7%L58RkuD0P^H$%rL`zhZl(d
zQ)_x*vr^)Uj`C;Tr<du{t_Ts11W!3&(>XWO9SC5@Ebf{q@87R|IC<4~Y@E28w6wBc
zwtou5@*ku=tdD)Jr8y))E18F1d98)#w8JkIAQp~^S~^USO_(8SPS_8+KG7VT7|Mce
zVUB*%(ecAyt8}dYY0g;uJ>h$m_&1}s+B}Ho$~-e0crc8sHpE;&93eTJMjtCC$AY2h
zmxMJNDpSU1VidF^mP`Sc)UVA2@}kxPs$-o2v>>=OVW2i+v$HZWth-~wQ0C;90X4Wt
z_R2_rus-Yosgjin`NPn6sNj#Gxg&;&JsB3|C3GJnc9SuzSeI8jhab_JE#lS-h-!ea
z-z>=&&UG@Lx9Jq~mP7Ru5?C~nrO3%c8?5iD(v>^wIp7)bEnP9O9tNp#7sqyx>+@8Y
zte3TgVnsqFoV^g7%2DQks=&oQLKf;|X%4}ReFlDTqU5w&DYAU`tHoJw2`-?LY<o}u
z&N3(adwp?Bo?(e;`>b2xR3Xk+b5`NKnoynj!;F9ps_0LOu#2Vj-Q1@aq01pC?W7dQ
zI3P#cucQpNXRm~ABoBiok%DTiA_)TRzW2_kE>ALEg{QV0D^^Qp*xEF)TAp=Q^lmUV
zM3B8II@IyYpzb-dJHfQi(~K+D=+@1UK-nQ>sGZ$%QLwaJyYAPPoG3}hzLcBZ9B?to
zl5M!rJYZW{Fs+6?(VVi1sAAYuWaA)@q6}MLozlZ9)%zJ`XyixJ(-F}eC^2_sJ#U;@
zCzpoHct+L?qx6d$90xxs+R$+CtDGQbf%OnuJ|{YPL&Q~jPA=DQoN?ZTKooP)y^Iw;
zCiXi!jN7+w@T#G;A|t<`^Jj%|DNvNj+}JH?JUt_lsQK}3c4cf7bzf))iuB3hj~qJf
z)Ye+(A;M-a{5oKe4>{TSrYxVO!`MzxYd$nU7d7Y&2xRBWu*9sW91|7pG;*Yb{SDcU
zCUs=NkrEUBpk98csw%(A&ut7iU7GvK2paAZ-js`esb&iO?Qa20vemjGlWeZ%ihJC5
z$#b2oaqv9|lMZH+b4TN%P3L)BG<4gWip9ETA6hp&ETGRiKe`U9{#^8HR*;{Izr{6M
zC?9&v_8y}H?$^oKY{&a|a9N`cZ=4O_8)kysf`pIK`r8(xwu$<G#)>76_m}Cm=6DNT
z2RsNh{jd}tMlw+XKNd6pLVMrh!qRjtJf#41tX9;k)*GeoctX%}f_^otbRrIhVg@pN
zM}C@?$#@5v&O$vQXA-?NWoJ~t04Xe=4c3pXiDFg2hw6Uj0>WH^5>8_1+P7=+C+&jQ
zXFtm<ws>oX)ugP$scZu_is`?;R1fNBPH&!tAd3pjx-F`u&xo22vkub474xr4s=VWa
zn>JUIS+0Cli=caP7ZlN=(4IIr)A4?aCLmt)>c`J#8qM{664t6xOe++_c)2g;D`SoA
zb#ilt&r-H(#sr4inCzv#SiU>oU6vfUz7-ajl%d4F*{#f7U6GP}HmVTQ%K+akOGrAJ
zhr;Z?9S~=*9VXd~?2z5h(^${HcUwrbdB5MLEjNx>A}3zuI*-#n;VaQ&##%sleeQ#e
zk~CeFwLE#xpLqI1RjJ&j%ac<)N<4G(&^b<oy#Crh?kFn<JLsHDeZo7AcJl;C$-bUe
zVq*PCbW!Tdl2ozylcJK&J<_R2>VxC8N&noIO9{TzAus!Ip7v}6ro+kmsN=(wmLxnu
zsQH?Gk?dt4P$y{N+@Y`V{y@??O|6~AX(z!2&OoR{*)lKJ(=ce*dBvdb{dT)WvB(#>
z=_&g$ny0ySGe%R@GJ=+A$}Vv0cI$k6WA>(f63;B3JWN*Z&V+uE9q&luhV4imYut3T
zXG|aiVc%)x?DX{RW2bIScyX@^i9=Mb0@?@V{KR;|Jc5~&Ho29C^|l*Q>|?Zn%KCn`
zTODNO<Q`e5DVnUnMY@E30k+-rBv;0}hL4|-Nze-nR!+tVY@ngygjmhr5;}r|rO3ZM
zhvk}T9Q$=+vw4Q{4e$EbysGATXX@=tLfE$ny2F>c6(UP8eKAFb8-#qDRFBEvjb@hP
zSy{rd<aNcOUh|vp^W&B6s)=m+xV3!|KLjA;wl?a&-hFgY>|aV2<#F>Llvnv`aOmKd
zx_we3sdm)+<9^<%SJy;zU}8XPN6n~%bJU<v;1dW45Qcx;VwK<wGWT@H2dU?dCwebM
z_Y8-laJa>a)(m_vB02-zVAN4tvxVv#6&Ii7WJm2L`LjGd2b@a*kspht-SWG>)8p%B
zlltPmI$EY&{h}$}&u9#=J@<iXD%=~}LTxETk<!iV{UplJ{RtJmQr3CAVe~zm1kj}{
zn25xk1G?c&>=1YT>8hBZ<L8KXsn$po(qITjf9`Sjhl~jN4?j@KV>539y2co5oak-0
z6OSY1c~waGCB>L!1t#4zaW#j04i+vBR5{C6^PtZ&<9P99%;=ljCi)_*IX1VI$#UMT
zIR|#hNZZxt`@QJh6>}p_Yu>`g+APUXb5l>c_a%=roC=UuET5#^6nr+iaBY5OT5V#2
z8)zrcJEM|Im(UT~VrZqF(AS4Dnl~(iN_Weprc+#%Efjy<W2R^Lz833S@n9EOQ2ffs
zRT{5TAVF%pWlA2abyCQVU-M$?Ih1cbd#tv0--2A*MO?K0x;k|4(k}NShI&^HV)&cY
zz>uK#TbDj+<cTCEtPCv9FKn8D$5^wvoKsAi4G&WxAY*Sb>ASchDuYMDXrJRJmzI>z
z*El#FQ#1*Kj@4~_gZ$8+xWFQQL6>nss$q%d7;?3SmKuFKXS(89@B-=QS$UKwQg{DK
znFe^y5tUBG)=haEa5oC-1?uqoS4{>z?XzQOJ_`VsOeZqtH|x1Y5}zu`uqijJAnE~G
z;`guPtH1N(_xBdhyvE|X*x|_nn#iuyrk1umr8w=N1!_GF82LbS$HR9g*>43(dslN)
zLUNbN>Kw2Qu6d{Jw0dyG9-a=H%%(Kl0c02}#`?upHI-}yt{KSn2@a3m1<1xV`Pm%>
zc6ugYyg0y+jM``st8{hL#$>CtD&4-2fOYhd9;b9;S(#8<f+1)=gU<ER>`XM2a+<%I
zBC%?khX?wI64n^PM_e7Ax)LtD7DHPbBr7xTXP77vH_($^`l&_m)@OLvFjD!mve0af
z($rcI=G<`U0THyM`T7cOH{Jcb6TXO2c<U$aO_Txxrz7VIQMfAHC+)xpRX80yXe4Az
zDY5JO+3tH}rl^OGwq0zN5i`YYr&mKLOw~J+9s_iQPIfmFNX3r*#Ct&VhPQ{ivnfi_
zgrBq@-a8Ylwh}{dpOqbaMf5q#ea}c-XW)-pXFDQ_ejD5L+bTlx__NEP+a}U>*YZA!
zxg+=(dK-+shtAJR=B_&mcJ60sea7ZMxk=b3EB?bIyq7;y;BJcruHyKdJbiSq=axUe
zse28t{19h;nfk0L6@PB0eZGE^p?-fh*0=1vEQ3N>URyskWXXjn;ksqP<Jkqpz+T$j
zElktd`pHJK&>9<&0IixOu^p9ddRcst!`dR(Y~3$`xOew<!1<8(`ewJZb~Uvsj5`}j
zbC`ON<;t)uwp?O|DHK%pK`On6W8x~vcjXt#b*0Ny%R)h)8LK(|iZ>eJi?6D@xNQQL
z*7SbDW%758V7Bx|XaB&jB#G^Uho_%!+GOh%yNmSZs@=G@$yJ3~F?PyyS9R-+loZ46
zQ3RmoIrPr``@Cc_itG33i0cnr72W#TvU%Nw(--4}h=wD$we{R6>)%dA$r%Asu$Vq|
zm{{X?#1!Fvd7)M-As8M$fME|*N|8cycKE?g$K16D>%#tXdN#N%GVy2i-?6n%)nnCs
zzSLyygif5~T^ktS7FZJ$Y?d$DV<x~gu5b6x$U}X#Uux^6e7`{F@keE9AO=LYw#7Mg
zSz6o5i6P29TVk&;-!kP@7gt<SR^@YOt_$Fl6!&g4FXVEDnd&CuD8jDQF&wU8QD_(=
z>`yZ8s=R#Pg>ubI_F-zOzC6tZG%V{jvVTQ-$eZC0>~KBFti$iAhSc}oll;_;GOmWE
z@S9X~UD=&0*L^%r$9KD2j19J#cyL10j{)$rfv?*97^puT$6oHVxy8(KYN<B~yc%lh
z@VsKZW%C`!!gZ5zOo)k@J1UQG)Orj6>|wA2O#^oWABLLz>_;&Omol^cqo%1RP7-OI
zx|n8y2k;rRHZ%6K5d0wygE{(S-`}7)7ZQQgM!zWX$7Te<qhNM9zYD$&ZAiT@WA9h!
zj=C_*4r{@ct>v|@3xY?s)u_=$=VvZFaNK_Wp+Vm#{i>Ky^(bw2G-u*>Pgm~(0o({o
zu39+hec#TeP*@?Sz^GfkByTfp)955SO2siGEwAj{^6s3)2E%P4;CZq+qVkz|jjo;*
zp2_s`F9*RnH>C|#O)tYWfAZ!plk;QN0kZC;&}!i{tohMB{n>FFL}9LU9aH_huyJjT
z*r46uPZfH=34cYKQ@gosPf93e)eNZ6^4pe=n7Wed8QatwVkItB^n*A0zTM{nZC!eu
zTIgrxc&An^k-gt*TO3pC`IhHKys^ymO~Nq=teQ}qixGJ`J>^Gps-LH%pS`!cIJ-Bf
zMIK&H26|L;LvGUJk${$k%&RuKLi|s{ttQ&R88W1}4e_30Je%hA6eGNSw$wFid}_z3
z<pm^`dn{Eqt#)CHNRxFDefr;PPohFXFws+8TS#8MdWA2lA@Fd_lIdA`bj7u)OAgTt
zn%ayi&^Fz(du_>h!*rEQ;f0d-DQ=%&$_}43pJDM{gNBzdS0gk(Mdz^czAIx6-iAgX
zu0)nCH{hfTM?iLQs--|O74g_<>um;FZvmlOo3{3ubx!x)qzTXc_u%v{uC^t?2F=@5
z2a{#>`hw}9L*ki}yt(7r7rsF)^@6rTf=ArQYnsB&U;Mw^hj0wP=Jolso`q0>E<I4b
zz)`}}(*KRxJInAw*sTRdIc?7OIDtKO*|HQT5%Sm@((AII8h*hFrHC?-Su(owaRXY>
zF4Af@c)Krli*7P=trTi!_Tw&$?i{f&bP4$)*9*n_`nVcWyA@rU$JVr5$)3QNm+eD$
zBp<7p&l{WK#JD^rb_)rbhL0Oi73Hb-)?$#3k+i;@OP;7@hxVRd=4V!I)j}t>dnF&c
z+^W7T#$A70ZIVR?Z5K*DOW+#wB{)^C{A=OakNY5Rkx_e?z=<gO)j{z$6Alv5A0*dl
zz&Y#reY%JsXpB31Fh(&Fqf_Jnq3H2XoFcQ$lNox)MPsbWSXs4K;6s)j?x7q*&<kBs
z)nxAgD$G%$SpBBn2eWJp-ek&Wb0X{~n<5XL1dYkE<y0*XJz9F`Lf*Q%b8RxHH_Zw)
zBqkmK*h%fQ1CiF>yy|ud@$7bvV<?m!BNf`K2%Y7ZplA84^D8oWN^#GgP`rp@J)TE7
ztq)dWRi3F5Z!!+agLtrC8*HX^U0TgoiBJwDm2$4#Q(p+zg+_1FaqtConK7z>#nnc8
zUjCFd_mxXdVz=W|@=|r2Siw|8zQ1r9E2X~|va)tw$rU^ZTbYND({^Y~q_3)B4B6eh
z+H;vQ=knOV;Cp_&hgoT%tEIOZx}32A#ol@^7{RA7tVg7W*vWx1dBPs<8dPk?Xl<KF
z(cYm}h_G_;(ewdjf?m_co)IfI|IvW~;#x07rz#>VKU{$ex@cO4Xq0<Lf|uG4KO8q#
z8(my~U5e|#3b=HQbX@28u+)^Lb+k_G>M>E!O*0$)(`1iAqF4eQBZ9$gW2crJH(rhm
z3EW}ez7W?r)FSodq3HxAENa7+dV14f;*IYW(NR>!5|-!o*!;uIcjk{|Et#w+(<=d<
z3oHh&1{~yGfxTPrUG}$TBFJ%qPiwcQ<DQFyz$ZAbgihEzJ~VC5y@u7#o8vT`o$5_E
zO6~%+Im=*(Isx&B$5*%oJkr*$`0XrJ=G9{42b;IktW62zWs2IEBCgJ9Ni}(#zI2c1
z4??6cXj&)+>U(|D;YCQ}&yJ=TUC#C_y4Di1`l<al9tw2^JzYZFDNCh*6sym9Lmpp}
zhgYkzmsego>aTH{-i@=1jRk`j);W-;pi!CDIGv@*O3kXUmv^upI&kdypia4@0qW4_
zikN->0^5KvqZ+!5o=s$Esb?03>}tqpm(Qj@ZCvTV5i&8S<nmDDA9zu8tcNbX-U;-v
zKLKa>xG(IMn9OzVnFC$bo0IAK54gUG0#K^56^8Qgz#l=7V>flAD2_;20jPG?@n(6O
zrbvPSlu`P0JM2Kl|AYcNn3DkmD0pE=(+qy`Z%`V}sPDhol~Bbq43fib@HYA4w}oaL
zP7i$4MuDBN5u`J=a+P#UW)bU;85jc(mI=4Ci4L-Z9|=4vsslV+_@?335lXzCxPmWG
zsCh1Z_mi%jLf%<}-wu5--rQn5t-j{KWG&)BVK^J8R%6F&<AZ@)yJPBO;GoZ6^ek!2
zYx*d&U4b|+cTrg39O}|^tjHR$Ht)yp`qSHT!|X9UwSN*c3e+(GjQaZm>PEFo;y*jX
zO@AbWK?mAMr7{m4r!O&Jo68x?&GkDImJ7AHw_`(rR$rJ$T$q*RjgVQ{aR8)XL#|$9
zG-*v%1);N}BYxXa2z-(80=NZ)NGA<4h_E^SBT2LllRe2XmfSg}T4I>)DLRA*1?|_Z
zQm^3C4!QpW?!k?LDw@HQ+7dZsuJ$vwElSRH*4JmkQYh2kGIVFki0pB-kZ>?LgR@sh
z&FyS76FmzQy^oO3C0N9T+h1hZVdf2k9WZ8v?2lO^LBkXCqP~7!{^(%x$2z;5N}uL`
zNz3C%{_y_2iSwyu;uTqqCWXyPrCo1|IJA8_qTAg>&qr#Sk_>?ye${nano(PU8nHS4
z<Ri@>YiRLj<2R>+JHz>kK?F9^t3yh4rnUt=7o9c+oNo^2br-PKmng5!@t5$SPa$Ct
zA_Ta-g_e-}g_=a^b>%E3s$5E=VZPHgw$hPOH--SurOcqmvM1C5KVMQ~pw0SUC`lf9
z<iF;pw8icLz^X_2@()ep6d1>netX~g6e#391y7l3NwD$R8g0>tgb<+$gLV4I17%*-
zBm8G%9Dp&XcR=HJ*uAws+Q0b!KZ5YT-ux?Z_gDG<n1KJ^&r#VYo>yCZey?Hvk*5DO
z$iJq5yhH<Z<#Bn5+Hf7o*4X(NaruZSd;j{6|MN9KpT9)y>i6Cu2njxnilUaG=Pd*T
zzN8hOEZT0{>+X=t*6H&rDjJ7+;vrYopPo7}g#tJv|7Vc@`4wXGI9k900~6$JshAF~
zG8iE)$FHt^SV%c{-)>60n@W;i)*P#B(J>t5-*oxkM3iV64gg^iI*7y8Ar*{hWi5bX
zPpRMHET}intrR_zGBOfA)qHd~|Lsfv>(>l-ci6gAs{et8I)pPF7fnu7_^>Se-=Lom
z;2gqt6Rh~+D*`+*{ORj4#H`1-?~e{_`Oq_>nLl7;B!Wu2e%|_3J%ica_MzI>_!vm{
zh4WXv9Oyr;1VYpe@6Ro}=1AWbexsjd7+a)Sp#uv@)dgIK+=-}+)rpT17Pa!7ci>BD
zpq=~Q6z6}4`umO0TMtDFlaW--+Fc%Q!ItLt(HLWI&~i*|nEkyVpMVQu$G0=e-L92F
zdbY3~fvoQTPk{b@@*~c@fqOXo0vj;FNNtVU-aSu1bpkr&O9eMRMTGyAK9K-@HtTwB
z0J+WrwA|fYytTY1*lKMrA<%}t`dg~^e*sT|fYDJoQhQD`yb2ouJTO(xnWr8-L|=60
z-yQV)EE;0px-7p|Yw-U!bNPP=K<0tOks9PQ-5yPR$aI6))))W+ihGGbxSzAb$FK62
zGFQ8CtRhoA|Jy3a&`_^ZdX6+ad#;3*a-YF%u)Oy7gb1O1$&sGAiAq$6l}Rbeq#y<=
zc>WXpQ2D_^t`t_>aXJwvy^L@hns6Us!6g2z1*)-?fwzuLqJAh^C5Mj~JO5>bg*AJU
zWekqAHvonVjHf25|65Sz*?lsPVt@<*pSG;Pf0I%WT(VAGO3xu}n{ab(DF36HA%Y^r
zbk^<4nOcMo=R6)t(oau8j_51@aRmU!#UN|8uxjQ8@amL;%?9GW0ID^S*b|_`?k!Eo
zSPJPWZwi;HCo;Za@qZ;oco0}fi^7U4E<E)fjMjg_4K^Hba`()-75@5Jo%-b{sTRut
z2Fa#CQ<x}<cHdIU?vD6>gLGR1!9<J)G!C(paa&AE>b_{#bLT+{dmkQe0B4gq<LzJ^
z`AQHrGIxZPrKFE1Pa_?~9EvwF#jnIf9C82i5<Rs!F`heND&HBc(l+M>3H2|E3r4Lo
zqlYD2O8R>^OzJAtHy?rG*Z;(qa4+ysa=sWzt~I=j1Ti`^_2Nkg^w9JRSt2}h_O}lK
zr;hvItA^1eX%N}BR9KP$pdS$8dK@R-gsS&(<j@f!2QN{qAtT~;Qhp;^rRG&1xm6Cz
z_|2+K*XYtB+X;F?hU2^c#u5$)WX*~s4TB>^^0%fqgW)z@THDgM$mED40?C=bLK%^9
z21qGQ@P(yd90kBfQ#P{(Kb^(z59f~;^Wt+?>k?~rvX7i&hNo`A?Mm3SZ)?k#-lr-6
zu#5leu>1G-J!qhnJ>|z~t>H;pFgQ}vp0qU*LfG+Kz=5bQKEd4BIu4JI_fp+VIw=_C
zdL5{AC(F!jO67K6{tz0nlo_itO+fdlVBS++@}J4cTI#&BNigGb%0a(tsH9-tBwYcg
zWBey_LsQ%h`yLu9VFNUV-uN%btl6^y{xK^Nv7`-}j@jk?=dhG2AD@HbTIp<6GCJ1S
zx$+;2Hs^^OUz4J8#%8j5nZtcfNtHP0$0a*Sjc?{nL@8N9DDaaXcJ3mRT1(b=$ykg3
zp6CD1Q{uZIWX*!a@3A|yQD)7Kq@@y#D83d3UM<59vVNcx^6bzyyPMX~zQWEK_EkN@
z`l5~aDxoviEKZv^&CKX7LbVfp3VAtXsV8?wuA9WT;b8rfN|?p43un=VWbEK=Lndqh
zmf>$d?*C1Gj}dg#x}=`vg@I}RWSKQvlG;jaU;*$5vl(8H^!H=RU2zq1OPza&VHq(v
z;`LFya+b3P@iKn+GIQox9C;uMHD1E>kAsD7V|5d(DuYl<=A-4*A)6m9g);}v9&r2I
z_0RsJq>lo7Hzl#as7p%9R2_}R;z;S)1;L>Xz&=4#%XEhn5zDFKFBXwh6wih9m5Dg>
z#BBJdrzvTeskQUIVIt^8)(I*&^<U`gOpRO`Gq%>cc0B!+U1hEA#tFT>_21(JP!s<X
z(?<arHz6^=fF`NGHSMc(riY|APCRXE#FZu!VuG<dHfI0A()Hu3gA47^vu(#3zS626
z7fvHNaeKa9Jcz%BAHfk%kI}H>))}d&2B8J!HPvpLLor{Q9+n1JOVPL20yuT&V1e$d
z|K$t(+xu1&n25{(Zs|2+5^W5QBz071a?d*Gt#;-#j5-$Qi;m3HCnk+acF8le(ui>|
zou4>t)`NCo<MbL8Gf^~$6mAqEhxF~$!bJC6eFX#5x5m=FdeN9da|txa$vV(FmlkW~
zG;aB+wRCwN%(6h1-K2KxTd)74v$Xcy!#cln)=kgl-b5^)N}tERt@jmM@^-u7q~t1(
zL0McumEZol2tBI*7ZA(5LVEm;O}N{PaBxY^cx$nukwWoO^lJ=3!omZt@qBwAcARs*
z{hT^pE_K7Y&g9*A^8#mr`MWSt$+ZeUdLq$1b?)l$^|h(uLmBG#h76eWk*2qpw3mdP
zuh{ov5r2b1{XgwucpQ9I3XPP(aH?po?Bv_~p;R<IoMxeoA)hrVTp=3m^6P4(*HNV^
zpc15K5F&KA37IT$=evdC>+f?%6tmtTMhsd56Uq8fCk+(i{Ag=j1qyDj<}Oxlb9{N?
zw!@iynpJFt7SG4hYvrW|P8JS1?XC$htP@#wP~=VbjOb%^ZzD(-W#rd-Gr^y1h10(~
znT61^WP|ZJ7NSqO90v)p?BgY3wIq?XLUk$dI3~Om6#Hj-1G)doAF4dKFIv6tP|4u-
zoa#;X%XuoZ4YssCx%xc>YPla-b7%F^((9YY>HUoa-TxTI9y(BHe5F#!?Ql&JpIsGi
z3XkHfs4E2~L+^5l&-qnPlr3cpOL`cdacYeF`+L$K!N6hbu*yJJ3}@02x8d-y0k7uE
z2E}{Hd&P!lx9eV1xNhEGxOd>nBCb>s+4Er$H-p4CZPObWUsLcjJ0ajRuVChrAg(XJ
zT}gN-mviMoT*ulnlE-2*M_=U4?KfWPa&b#0W<F(kUI!1Xq*L`3UcUiYB1TK!q+{sx
z{k6S;>~PH#ElXA|X3o3yxDN_EhdJ4pnR=p$4!r(Kf9<}%4oJWM!LZPtB6J#YOASl=
z*OM69v!syv6qreqOo2~-pN2fbQ7JzRG<zOdzUn(%o*%Vn=nm78n#5RI?=^Wa2fZ0S
z%ET&1X=ZOZBY6rJ4^AFB!y}ZYsjY;#sw5^5c)}&O_&y;i@TUd!DsC}I<eo3kunF$a
z+B_us9F#(L840y*caSs(yZ7_Y91AH)#;!h>TP+~nH~5bYYqrUz1}qe}qm8oIkW|34
z50w*oX4YIg+&XBg3qbRws&<6KEhzkD!T%Uk0Gb2YHFOSs+sJ3{6Vu7e;9+ZlXcRWd
zAHGKjLsWL=U)ZtC3-`F5mhoiMtF_@{*>{*@g)_Keu$%Ub3Z;@;u|$;myr*PvNM}rI
zar*?dJ5|pet=Qqo7fJS-%juSLshL%ZZjo1cBb~{?ZK$}Fy7Cp{R-EjdbL!~s3Res7
z_P$wd%`N0hRfM{O6V~^CumH~btPYN?j7QAgViwvyBMtBMD|F!Tm?4DUD||cG6?*?%
z3L=GbB!QvMZ(26{LdJlfv%O{x0c&=@R?Kvdss$SUkM$yna35E5Ps_}AZFptUP8*^n
zUi3m5(t9Y?O_4hE!tyt3J$i_BF1Tb(U30UdYZs3o&60YEziK}R?iWNbKA`Gwc@MF0
zFLct<s0&fl&}F`;{C+RlrmlW}<+0unaS(5A=r_FK(Vy1+>kx^v)o#PYOk3dog@<Di
zaUVL9Ikj_C1a1hL?p8%QOV9SV@C)N3ZE;o@rQ{a!StQivop-3~Ef0E#cr<O92WAFq
zjG@ucTlLwG6s2pH>|=8$<Uk|*w{Lp1O|ogb41}S7aeN_JXgUqqJbJncl2^N`<tuLZ
z>{SmENvsknN<}jpyc)S53r6i18H;Qp?|lxr+5dUM=8z?#zlY$OS9`R?rVPDTDV9y!
zW=P{aAdA&QeN*6~t$xscJDywc=BCd}51IfO;F$8}Yol(^)fbd{W=iUJLiph-@|N6c
zVKzfLrKizZ;B5`J^jF+Y@(#tQs@I&Y<mNT`<thjK>j;=%Eor^Y`?2_?SwEhjbjOvY
z=LPge8Kw03(ZQ{Wf|MKNV?2F~;!?_UbI0-LbH+Y#LEp#<klYQ-T^8T2Z(<cb6OY;!
zal88Rj{{E<0s%5i82u^xr$K4<DVNahsD)-hpuDC35GZLFim{AdHsRA554qc06DIhp
zu07(QTb@g5Hxyo-%)vW#ig76GF}9lVSysO;!bqvzG1qt=zPjRNn~c^PjK>!Ye|Y<+
zd4ymqABbXLVT@SmG`-XfUU^l8yO+80UEZV@b(x$i6(7=dpq$nihbwV6Y}wgv=j~U+
zoMRyLd==4Jf??zS>{-p{Ks`L05KWPFPDRV+Df;S|W$_!+bwTofY{*;CEt2NP21yym
z7GsNoRT{VAr3rtZ<5idS(J;#!-S4RXBe-Gi<8R-X=4!8FIF1V2y^|n_y_vbEx9#|$
zK2EQ?h6sewHrj_@)2+SrKnPG`PKO!P^Z2P_USCuVO%-<e$FFUSx4NovX5;Gj=9zS7
zM(ueDel?<|H5FrOLWW$=la8WX8&&&B9OwHL!d!1Zly!E%&-5RouLd47Y+gh@;@XBj
z!>=MqXFL1x?v}d1r$!0D2)VmTv7^fELw9NMs9sN@+CD8_4hEip|9rO&;_h-Y`!E!g
zExHG^s!&jWA0EHiU&DM>Rh3fJ`J3L!kNB%Haw51K5?|p)A@>D!G8WN;X20&@{PDlX
z+Hr1~+XnM#opX$DGxD-WSSLr>(5vSNrPID}iosGx?J)rF8Q+w1d+<iY5o<fYFB?e=
z;{z@mbERFxcCSg-Lj9xH03Mz`sFC|#*0uI_+>Q-TDYW_`=cHh;>GlHgflhCnMH0PW
zv?TtuW1O~(*-Q+Zx_YBiB9FDrXLzB%?hcV3TvqnX!_eyCz|t)~)xEN_PrN|(mdlXb
ztSY%}@UBLjg)>qCzaH-BW0Y!Z+-peR@5ylVIa@!65u)4c>d&|{rD7jUX{%RpEs1Tp
z2l?43q_fLSf%XZ+ZP7fNN3R>eW4RS`FZHkhy|xefo^43g!pvetL+VO^4y_1Q%_!3$
zUfTbb3#P!IcOAJ$Ov<GW{|8FCPU=TBWFBiDdT%o1Mt7Ak>syNnD)vfShN;Ch#O*=(
z%Z=GLWiGGw^=JDJ?fOqT&irmuu7W9q-`3D*d#PFsuWstwH=J4W7EvQUc~#+?2J!gC
z=J5(bv<atlAT#;?mzL^>=<LQ@`Ed`QgAE0$)Bt0Hb6*y#S>mF6OlQD%$MjDh)ksxE
zGMM<dAq*67VSB8K8p#AG*aVh7OH2Gk{tA|5qj7iU=VB@C%b8Bem#ZCOJlayy4vK>V
z2BhB$Kk!m8<^s3*{t+B`2_hp{X_-8kcB|u*$YmF|MOL5YK!s0RtiQcK2rqH#aMw1s
zl6^Kk%Ian#BW<!<#TTRcFwEvPb*7jW7DX!GzT<NQdR^Hon#zL-rA#vvI%0URmERNQ
z4QoHH4=*r01j?1<3mx<6qlcv|vO_ELgHe<;YPfR7KQ@<Ju#LTAj=scpe*(ISYV}~)
zX4if~Kkd(lUX)KXEroc0s1mx^A#j!Cz(<tcSk<<XtrbW24|=o^oyQv+`hC1b1Ioa)
z4x$+{Jx81u0|7ZB&;R<ZV8I`I*p6XoVH8h`GHKl`mME9wY4ciQS~yBqEQZ{@j~6z+
z<1-lwy6=;4!Fk63peG+YgZiwKAw~U>%Y%+LfX&2C)hx~(yZn3~6<A1TvXk?vYjp<3
zR6Zv3w^211Gc;w@iuV-g+;<tu$u(s#Ln>f=`TUPR=J6I?48WAGyDtA|`n@P|*^+RU
zH^r3+1N9%D1@29m$t!%_HpkFJt<^&*gTyEiVM=rx8p6kv0b$y0BfHJt$BNGhJRuBX
z(+0+;eLwFAs<z)Oj(pn;OJce)7=;%H?xwtzfFySxA&xU~u-~r^F*~xu&I>C3V^dT>
z;)+}F2{y<kq%w&e`;9nLta2QGDdZjg1W{e<$L4Acs>*f)HLOcCcTDWfkas3g_{k&q
zCv?M*F&O-Ql}Al^__NW6yl>?py;fU&DDH$Bp+_<yyfz$&#FFBiaf|vqp)ROBVc;5>
z^tek$wP*}I0}R#+^Q2VU7n?#!hCnd-_jAp6DIy*t(z73|ye}lVXrng`&YC{v<Hr1r
z9YW&a_L2lB)XFO;RMT*B$Onwoj;v0~NtrvOAYdR+1uzKB=G{ol4|sOFG1lho)OW^K
zaw&67Mo+r&_c|L;5Er@P>DY}@vEzDPD7}r{QeztA#~oxRAqsDS&&o|sH{X-EDlOCf
zGIk=aX!POzJY@YZjlyxkQ*t{~y%Sy(^`b{k1(zZyyzEpyyH4Rg$HyhOiJV@Cn8yD+
z49|mWWHYsAF0}bvQ;${|O+WHYFUULR`4m4>LIUxl>Zk#ifv(YksxgevxnSzlLjo<1
z|2$2k9$p#@p(`))Bp^?jO8Vd_=etSyvNq*^9M<Rj75Sr78GptT;!4rVi&M~nm0@xD
z!T7cDE9a)Bp6U6_^b)MIzX3+T5y?vs8&t#o1ZpW{9Wr0Oth=f_!CP!Gdwv(O$SH^X
zm)0ackYb_wB%dgZOZ6zih;&5So7w)tiurawwXOJ!oRLQ<JC%~xqsPdL5IaLaEnY)O
z)lIGcPRN8p#g)v`pg1_=pxW@+*_ns1CBEO+dTL5>8nA-^`1ofmYD{%c-VGT$WMNVL
z$lyVd7az@9#MARoZ2v~rA<?K`CJux(lgm$0-GZwt#tmFQ=NvJeIN51jT%YHkhNQgf
zdHUA?jS9G@1+kUAcSX3UHKn{Buu4(hYbnB&%J%gn-+`leJaWacY&UUWn)9{W*v_6U
zc&s>5TyEU50PMC(B(|wV*jV3i*+H_M;R^axhXGgzcUX`qPJvsnm)4KoQY!-Fc}c6W
zu>4KKkx=ZaHZ2$+RQJaPZ4~}0!BFslGS+Smd$P`EXHaHW=XemAcI}Ub`b&T&>lN28
z9oiGF%x3YQAUevFf3+T%dco{F6Rlyl%g=$@L-m*}dudb^wF)k{$QrXmHclcCJiGGK
znuw4otdYs&SU?k`WWX<2@an@1%;e*!53LSw{y6;OFbD&k1Gs^Y=tl}ffQ?$*XIrbe
z=3rH0vT<{O^E-yN%&QFstE|y}XS%));MT=IWL;AS-IgSxs=C+Afx<=DR%VTYUcUPy
z6+#>UdiVA_QCgnw%ZY497o@mCWthknOtUCMDVfuDLs@QSF%WW8|0lqDMO(!oSdaQh
z6bR35e37oX@X&YP)p~wMUg0(Eaew^tpD6SiET|E*FK}*sTANaSY;|iVKE4IZ1&sib
z0Kc{Q806tCgwt!cnRd?hYO0Yts>(wGBDh3Ig%>6SvNK2}DL>r8fSaKh3DGs_RzzgA
zQ1mm9FZ?C?sA|lii3%FUh<Qj{!*d2L@7BODs3UOx1h?2zpMK$9W(Q(r12-=H-8USJ
zRx!3k9JrLT-O9P4>~H#oNEY>n>;RM9bHLNFM(vv?_Ti2Y0}@SQ+%#K?J#hXnprUwZ
zdQLO;mf5}{42bKUv4g}*gsLZ?f_+K|E|lC3J6C#%)n{qdW_&`rhto3<*p$By0&B;`
zlYgQ>S6&c^Cloe&4Tbvko4<?sg!+ZkUzmf{^XWT0-01K(0*}`<q*FX!L`a3~3)TBs
ztYKV=3}rYRdQ>~CYb^&pm~`rwNY9JA)G(B@G3_>~;Qd<$59Sa&hW8R{_pYoT%{A9Y
zXUPZdF+T~sj=5pv_bNye;#d}d>+G^0ot-fZKl2;%R#vW?lawp`X21Em5Ci3nujY)C
zGe2I)PZtSw0N-;)clY&_<z|Qbt6!;b;0#7WL`BwARFXeQXd)DhaLnl<v2C_rYb@Xs
zS1Mw`Ec9Rb;&}NfA}x?sERV#de8lBO3Vq}6L07@;&T#}CZY-CF(OPylNY`A0;&kjT
z%@UhdwPdFml9RlToe2MWp&Em3hp-K5Wef-A-}pHH`2*C~oyP^rD3Y9N&=u^l#`UN)
z4T`B3umd7Jsd56)W`2v0ZBAZUy{D`X`@fj4_Z7EPd8ZP5PAVrYMUi-lRvxoU-u~{3
zScRx8e#U?310jlpFGK%owpqIURv)7`7v1IQZ@q?l3KP3O6Qw4g$BT3-uP=jEc0oFv
zzw{L!6)y63eAMT7FbiiYIu1JC+^c957GgY}vdyf~Zy)hW^yOd4{xgGs1QFd-v(CK+
zXSQ#ZrP4n>AeszBYIbIu#6Xuv61Z4a=24|Kp@OANsFW{dStf{IjaV#jhQ#K(xXlAa
zkc7=g4-{7pbzeXhraa)=$)HuD@J;yES(#M6&euf0g$l9-&px)7R6+If>1Js<-_ty_
z-^(D%fS-9eQ2Cy~^U9w$Vk?;enCK?MOHW?Z{Y6mBBxe(U(0pLU+vO1v-2mrw086l}
zSfB?e63~fzLf)_!DZu;3%5lrKqPcfD8{;r<oZO;-o&uT%9A#hLpz6u0MP?tDF&;`F
zJIM<HnnTH{wpHK;DmrQwUtdYG7RIcte2k-hX{L^h+nqf+R4obB-JkIICq(s!?K*z$
z?MBPdgR}1ej(_|oeg*Y=l7w4BQ|aC1yu`78Wlm=2wswV#^c*h*3?xDL7EV^jobG3g
zBB@MkS>nHWPRQtg8oXLo!UH-AV3xr%rx;q^&ZOVvfA0WTENSbGi=}yh7W%oFx6TqG
z4%wfF@-<};vJ=ipGU9S3^o%VWrR!OnGcSAZm8t)>v!s?u@GO5P&}9s7*QI^(u$Kbs
zj;DNg+0vjo?nHcs0EQ!Zlc&TFK}F4Ss9GaYMtccEMM6oUjLLtfh<TMDDL^EFhANa8
zEhi`sfnPfiz#$GHgGACaJRHvV?+w<>*V;EYadD-=CP7cGZyM_^J~yAF92NrDdchA(
zQLHZ`Yw`F*;UGkkU{i~t3MKqb2w-~MpMVjPA$7Jl8<I)3AJ7H<d=%*JjzGIFm9DGT
z3@0+*q6v9>xLnRKms)s!5MvzJ1=Vvj-M4|tv22o(8%NsK+ZEs`C{W23=(uJDOgE-&
ze^jZc^5*|D6wwnHU`|}H(wt5qqs2MI>cFg0o<;wkxzpUUb>sT1${4jTGsO`VQ6X>B
zKuB#%Z${V!Q%5cert2KP2tl)H6=3d6uAfXydlx1o-B+Jkxk)$O%1W#qCc0WNyS#Uu
zVP?`rr@--s1)*+vLN<fS=+V)h0rNgC!9B@+Dei;OK;f8J5Er5A-wz4lwyq5*D%YSB
zC~<<L=c5NC408wL<+^W1E<<mnD2`e<@5b5k-t45UBo`7jYq*ITU)GGiJ<FpWD-K~=
zr?-C%3`E2QKD8J-Q0&-K5~X^iB+(NO0ScWr@zayzh6Ag=cm4!)Pok60Sh`E59dotY
zM_I5$63<ZZGmA+cbdp_N&fiS8Z<RMRawyua=%A!?*@$znpjf>>EEVCc^Jk@xqr$*_
z3UOb`oJ*+S*W)!Apo06&H*TR;g>uPt4!8{-<|1a6ScuUcl>sUxJqXdDH&cN^Rwb_A
z)#K~l*CwVG`D@&)f(B_$r<PHISk+g9(a_FGYsaS^jp#o_C`-TPBmEvQ(AzzxtI_pm
zK$mj_68qxs4Z%2pHiAqvpN?~x4&)jL1$w@5*J;-A^YzsaY1J??LWgSfGx6bpiAE&B
zrx<ie^95SQ_>+I7=vayfkFhwuMgdbwM~|284R9?EFb||04emL>Z&N)9H*|QQ`Xd6K
zxKotqZHbI8`R-JQQAMHeiG4T{^2a|E{mn%V(yt%ffeTo{ZO%i_Jv@mYW$LRA{Ob^C
zQkM})^N$)B;Y3d|z@+daBZl-n_n33U#zwCbB6Q3#g1VedQ#3C`x;N%*tN1-Ve&5hT
z7xcL&=*Wm2xVB*oRi`qA+1=mw51Gl(M{b6#Xac+*mqkGQdj)c*;F;U%Ex&l=45|SZ
zxh!x&Zg0(8HP+d9ZsnPWL0&UovDoaSJJK}sxWxBk4cjJ-jO~%HvhYE0|6-s=5h~og
z(ZH??b&hETC|TgQXte5qi<Yzt>l=4Itq}c?2ClYi;xMnOM+7O0_UT~u@RbtsOxi@y
z5=*e`N-{6Uu#B(oc#8q&nnx-|*`&i3R66>R3;;<fok0bR7Lz?sfSbW&$UJ|`VFt-p
zkUdv|{%b{6VU}OKyTOaX2TYVU)AL}^(=}SmJ`{V$^r$PGv$W0RhA=a;icFcGSo!-E
z)iMr5w40%PGR7&^q5q2ks6DJO%1^7%fh`!D)a>SP|JfTP9Yf9|8xWfFr?@9Ryzx~G
zZ(zVDRHLXr<v}n_dBXuUJhU&;&lKioh}eYNHBwOyW9?tD_ShzU(5HBz^*TUdKfA)J
zZYBna0g#|)FfIw5A#zyG{=c^X14l;sH7Iv+qttMKqFwa$Z#{U)1vAf3GJ8@qQ|g^@
zK<IguL7??uYrevay+0PKUFRB=JbUZz92weC!BN4Um3UlYqiu6_1jwTr(N`R|8XOe0
zybzMViup{oRYFfo+dY#}`<I~j)89fxG!HgSBeYHF=yI<4si?IC2Rw1&8dLXSc<dPR
zd`zgdDsjf)kzF-14i{za-4LsAH;p3a82#Ub+T!&nOQFJbDIVM?UCfn|`Aw)_)E@5H
zAyDRxCeH6w>hMJIo9`&8LB`#my~l~~xW5e^sS^lZi`e;y7aBKtiB3xL^*fV!xi16S
z(RHZ$<PH#2fbGHXTX#7zRJfX-&;|^o;*fsN`U47z)z&D)^V^gkMyYY*a@SdE(bG=m
zv52|Qz`u#?Pn%L#r0`NA;iHdyOIxVI++$$G6amOg8HEm1PhXpe>i4#vfKthI^!r4d
z{HbtdQJ6yhOlXeQ+T~nZ7SXE?Mjdc6X*4v$0S(&sgIrW`7_~9rdc1dxD$EjTN4Fq#
zd!>nz5iRg8i`R#SV1j=MK47^L+?Oooj0XHh;)mZk273KgG!#_1`6KF#@-H*-weCWZ
z0*^*TPSn@VHV#6G7e1XbK%M+Bzf~`D!Ybo%TmHFTN+IGFzvNe~hHE2WKvcnH+tZl%
zD}VWz5BJ_^0JfYlEs*f%AB`OV1NLPgQ*yZmI8TPN<!rzc%`-^3iq!FG6SZO7>go&>
zA%#)AGT*H6<SFiy3-4jCan6lgu(%ey3(pnuc!;c1nDL08c+jH3eK6+!l+PLH@y9;A
zd<WC?@Tdh%bUCI7P$DDT-%`2e?Ox)hf^$-!78Y`q9Q?#*!wX`>OP!7kw-yCa^jgUG
zymYZeC}lg_k!nu4w^oG`)`_<-PhvYI`1&xLHi{g6ZGj<AS+zNCag_IJ+)B3g{xjVl
zdx;G9KA~dNNrlyI5XL$1_n$mGe;+eiMDYxl=~*86fSAe(`+kwdn7Ir{mgjh1qZ)Fx
zm>jwlY|d)GnAxAeL;GO-fi{i{$_}W)HvCq9QQ3X*&%g9T?QwUPK<hJ$m1W*wa+gr}
z%{@v2P;64mjw23rs?0b>3tDS*$g;=+#hvDPxbxCCal7e*)GQPxX`=@G*f-?+-=EKF
zr$*FNZHqsiRWhx|iX8)p<gmYq18MaFg8<tNcy(>%*}cCxG@=Lk8GZmZ+#HFoT@@+-
zJ(_M9WCZCxbdS2RX1TTDcfy}l%^3W)gPYBWDAi52tEr3F(vaQ0c3+%j<~}Q?JMM|B
zt6-F5QAGMP$K%2B1YA${b?#Ut$5d&~ohpf593B3*ee4v2XiLpIzyG|4MH<i0h1g2r
zBJlPw%H!OYZBx?Z#2MN;jkLuLwi0*8P1hL9HvO}IEs#o5i}A(mZM8!wjN|j)Bjv--
zz;Ddnvas;$BBZ+S8xTKRM#F*gpoar@P4<p_I>N~9Ex{RD=6}cjzrCNeVE2LxATP#L
z{}So<Fj^F-H52iw+dQlrO}sO_=6pCOyaczphmK}V!4tDr=!?--iRaa&_tza4b!0@P
zM)i}NKl!HUt@<;tk9D1KhJH(CSz~#hg4xTbzehx+GzE24WrWb{0H9$$JmFQyzv*Em
zKvX0V&AOWf9A^}_RLl(Ek(Wb=pZ`C)-a0O-uv;6JaliqkQKTfK1?iF+x<f*`q`N^H
zL_(#zTe?#kQF`cZ5Ewv8TKe4sJm;MEd(ZdZ{3h<%d)+Ipb*;7TP2a=i2bgZj#97u1
zC9l@{e&!oFwHzxEXrN`1IhBE1X@l<TVW&%-oKFCi`yVCog@&V!NqwddkC}?Wg&6jB
z2I89EewNV<QKxq)$fDwef3@1U8Y2NmcoSNuAJzPkBq#=*tsnPW$WiNXVoD_K^(JjP
zI8&cVK1PDrz5K;-AHKRjLC2+e**GIvhZ6?DjOKUIT^;hN<aiAmhToTPQBDdp?{IH)
zEUdLX;E~DOTb37e4%E%QK1^{uttgRmQHlI5wp?E9+^+g+b8f#&s>E>s8-&%3fpj%n
zd4a{kJN_2!?mhs_P)z!&mZ<g1LSE&W<&Q8*^jnAIr;R-nB+<Cu^?(!Z$bk}*>;Zzn
z9S0K#4`j$P@Q-<h>3@!3X)@J>qB|(F!`9CJ+PIk-_-oe{sJe_S1w`ii#>B_=b(9)?
zxc8>FN*=)hip_iiJ~V@whVmlc!eQS$h<Xo$D$<isHwE-pq0YGF4c+que?>APP-Ro7
zvvp<;UQOCYu_cp6C;(57pC;BIR+4j5YhY@)1XlJd1*A6i-+m7j+$+5;Hyu-5b!G{I
zg6=kB12uo=18=Asrw`+~Wo80zuzpK|#ALcxQJ4!a!{NJuScU9$b3QrrgJ9}uVyR~l
z)+3ZOKp$^+itkRSDx50%;jQA3Es=wM$g;y_n2lF5Grtww-47$EHdhf)f3071dH8_K
z*+bq?N#wl^W6BNQePi%{jN#-p%k}L!s+-G8Z;wX?SxI~TOMd{DrZ1PlVOGXMDsH%t
z^a}NEpYtK=bS?$kG%701xoj;IK>Sksx#K@j+v`!P>)o@auvJnJEkqwliZAs%PW2Vx
zYE^ZjB%nA6TpCkHD{t;FD#Qp%_Pn#x6Xm-k+O0hZP-ZB(@g`E`s(O8J##4yjd42GE
zlZl_s;WmCf#TJK6f<dgA?nzdbvui-~+LOJcH@>X1762ZB28si3TZ1*9NwVIBF<&lJ
zBLK6b0xF-JEn9SV)j{B5c6bd2UWYp*X}ehhsABC^<iY2#Ae$)UWxQfVcGtGqTW|Vj
zxtI65k~UeT7CRP}(R}*Wx&YO`_38)*?^g^UVOD12msZzF9Dnh^w;wH#>laOR;Lj}(
zC~GD`frUXhpeA|f&aXkc^Nf#YQeGF`RX_qX^8L-`$|v3~Z08ZZnm;}nWd`Z*9EpF*
zeXmfMco9)APY9qlC~%XWZ>BiN-ruXGJ@{y$itjb;nmHu&EXFGME@k;ml~GCZD%8#E
zMMtOSzAlQ`V%1329y!SoiC->Cy)yFt#UDIf+c#xwXD;W1I%{65)aX8H$a{V43^@iX
z9PW><(3v-h^P+FYzY?yBt*5*MlSPn#YPsG`7lbO^?|y(xhMYBQRv<V4WCp|El^nT~
zZ8w3RZ)&JpO%mX)Q_w-k>q)*lSNf&1LT6ar^nRhhA&jy9#vbDdi~V%!0sAJ7ll%>y
zYlLw=9E@>&seC|${%>JMSc4K1DutNSt<Pf~-M*bhrq2#<#9Ol3MAozOc+YKa<N!*j
zlo|+7498XfPZYCB$<b^8q8RS~6UDxxW@Ikq`jOt*Lqs4n<JUrroJMfJ-sln~U@?H~
zzC`+_sxKr+ExA=c?^*<+is1sy!<{~xf!LD(3ZFPS)<z2t9@#}<Ya&SRL~qu+fMa9#
zOKAAs7G6t6jo1qfRyEG^DBRTh+ykK&-LL$hjSFAnrc?>g-uHHf;T7Cjbpixo)x&&%
zi#4C}n#2bmwh%dxx_oG<<{XTFRO}%j)>}v|Wqmk*Ah^Xx2|xrZ$dqTWnKH(mi$=h^
zp;E%bI0rX#5$3(kiroEMiyq<!S@7yIwtjQ9Xn!7hc9bCbHUofq_#16Q#h1AGZ-i=J
z(Z!A)rEWWw%v)Wbmt59;B>W#j|B~u!ffT1T-LHy8G|OVFygm8w>du`~g10%~*f5$O
z5)oX0qd4v49_}T^e(w1FXopQbY@DkiZ!>wS*+B)pLpTE=XvMh|nZ4UvCEEh4G!7=H
zRy#b5m+m7hin+^YkRW(Zk%$7^Mh(D+VjSDof1Z4F^9ki@o)^x@)pb#3{5GnhwF&0O
zs7~EMf*?VTe0@^`+FqzY-`(4=1jHzVWswgQ>J}bC-+zaptZ>Rby;TZ4X_Lp5o`Daf
z09z9<S5_;-$$z7S@(86{Wn7VUW}jDrFj|&^G>$WMYH@SCQ;Fw)M8sj7A*~^Y<N>iy
z=#Jm!sTuzx?G91sWN(JC4}fmKVwLSL0d)Jf^V2iqcxXnUZc8C=U`lR>w-(JwuS!SI
z&x69GYV)b@QgBapwRgGF65L=iEE(vHOZ$2I<2y|TI1DNz)ty&WF`U)v&!q1C64V~M
zyoM#*eEc_|Yx*(DkETJCIi~rN!sy{2XlG$9di<(u0kb)O>d^4;%`ah!>V!!qy&eT4
z*cbpp^Yg8*X#WpEqyJ14uztBowAc5-Qb1Mb7cBhzo*nMx?uRE*2L$1tv?D<nAZH~d
zW%5PlTnqN4<nv#^(E%lFr#qqO2VQc0lmi@h{_8GOD1d5{TeDcw2j6DitxEeGWHH=!
z^3%!+h7Zdhj*vxlqWcc3W*!mA;DX2&$6H+C{lnu>bF7>Y<kTQiVQbORs}abwf2pe9
zDnlu!KCywF>B*}9Nr;RMbV*{|`E~5}f0i6U?s^vASjtYz0fgXPGUSE0g%&ETcSMk9
zZw}9ydk^z%nQ-=8iGMVmb`7QTbBod!ig!o;uoLCIe&7|F<kT<`l&I$XCGDwAJWr@=
z-<Kr!dQDsx2>ePaOjjgh60)&qIMO<*Yl-z#<PKxHfA&p!%b@lRhbV}Sh)6o;HZ$=1
z{W3y$AbRMn6^w?Ayp0!;FPRpb6?}#6K<X70d=iCWb&ANoRqQr#Nrf6qy@B|5ZspE_
zHOoU|rHf^!^S57wp6QY@65hWp1hwv({S2>QStR-?lBxm3MgbWzI_g$%2;4fPqN2Qb
z#5R5xHNeQ^kim_vwIq`h@-O89A(}wzgAIXOEj5yba=?{o6Mo?bbb9h(1HcjRjBQNd
z?H0zz5Kj1&gBYHH;5a)M255mML--8+jiC?a&iPM3F_5L8g41=474+Q`qqKKw0X>0$
zKgMyw0g(2>N%}5DSHM=}36F&-acotv>=i_QtFQsR!>{Lk=ncUGA;s=?G-0dmoLM|Q
z)4^tl7O#1EW98hOqU)UV<n^c85tO@S?=qe5s2gf&0CH!?%(a?Z`g<#DUmwWSD;M&F
z(?Qj@PW)obdQKvL!Z8><)x5vW>`N3$CAV&s&2QGAZG?VK_EKRx4U6(Sc-!xksKqZA
z7C|?GDJcII5hAoeX0%gL6eM?cOD5d*&QLe@Ewk}YjyvppO{s4M)8d|2B>B;VOcRAi
zjRdGD{QFR$6BsVD)qdvCO5NzQtwNwi5EJc0EkKpUvzS;XY`Sl|<v&<w=^8P<+`}r7
zP3<hca+llQOREeEYS^Myu1t6PzaN5qWA$~71z4Uv<r@=BLPHW_9uxy|cNx<joSk2>
z=Z(@FtC&Ns-|`B5uW9+q?3`^90#n!Ca4kfAca#U9-yBYPLq)GOE-lHO;tXAYorD<b
z%*D8U0WFmOFD=Zl{FWMv$qxT&``2siCHPQ)(2CTFV-7*4dJC|)G(0JS^suLPDvbAd
zcI9|scAwFAFKVn@&sDzN)dRv2wVVXmfBQFJCQXX0_@i6n<ak15549^Ww}|+V3A<d2
z4q2H~mr!MfP^N8nN7?Gd0GZ-naNIz|I6#ip(dXa1&zEb-8a*Pd9wwSY=d#s1c8$0;
zQB~=cs2N?uq|aZRO+^s|a6+1|cj!mCRv_>o-G%aC97VYgveTmGOZOQ!z{u5%NHY%}
zno;lyH;DiZ^{$;?;#{JkqgHOl2L7I>qvcjlF?#6eg;U}cRiG#qQ|52B1oJ@Wm=?J`
zJ*ehDH3RG}+IG@eC=nY$a3{PaWDtNr+c%r(2oIm7NP=$vT1>Ld;ZQAhUmu{ngBF=|
zfD|!4GB>?4OGrSO@w`z*vQ<q>oqB84%m2MbB3Q1(=7ob%l-<XBfOF^d&_VA$x?NG0
zP!YwxMY)q>n<J3?a>7-SLYThubA4x@A_ovI`Hx{W@H38XA62N&b-SyPRld$2Cqf@t
zQ-_7h^FQ<%RT?kbOn5a!q=fFg944p`)z-9^Iz%6+7J{4a!WS5HLU;&)<1S$@Jq5Cr
zW>%$YHZDMAEk_y7zM^en4x<&0kM%RP8))RT*3PL&7GV8lL7F9cMfx&p>p#oV3zd%~
zsBJYQRPJ|C2{GOJ2eL5VnXt*zsb?6WZjU7?=~O`90%n+Jko`PyfvTzC*c+zF#iyzg
z;#LFeji_V)iBN!MEMbBG4g`rEer3-wBy(#9l9c**jaH(EQwa)262YdB43@pb%&bf|
zN-PU+s6daQmkKgc8Sc`kP+2(H&K>FGiCaFJ(ADYL(iL!i2Y#Rk@bfD1o5jQ-pC*~1
zI2$XCzH_9hE(6cK@KM25M<h6`*!OUdmJ>uTT8;xN%0W`*?BM)&1XKk8E!c)kB?%i3
zvhk+n&`SaWd+eZYhW9^}olLP9>?HW|l``kdP2789XzTs*=7<a>033S8PW<_`KH`@j
z?92#nEdgst;mMiP(Bp?<M7Ofbu!E>uz=}jcp=a#`9GZ8Ubw;UgYOs)ysW#0AI9f_z
z|C3k5Z}W%`;l693v8Qjuzux}(0f+#%oYgq{8xS~IG+A%+1SkuZqF-YP3`eZu{d2qY
zlOHD(r*tnG(C^IU7Qh29$r`~bQwRc&3LOHk`kFR!d+BYj03K{FHZm)fpA3K?kN$Sw
zWk=G!{Vw01+}~XyPWe-qVK23EWzO9OWRYbs<sI|8xaScSX0xQfz@<Zr0V;7IlIKbP
zDXHA~Y&>#5I+vLPE%&faPi$R~6Y8y)86fIO!sr1NEVe??l*rN<)zDe7DzXS21bEPT
z-6-?fiUh4^N?%bEe;{H@j5MT>re`R((OAsoRSr9FBYwU+dBLazsP}h<hw1k=x?`fH
z3H&gjk}fSWkLJ$Ou>Hzs66%H$B@6{#7E-=uM(m0e)J)z5RfU8})sK}&mDEChII1gQ
zM3vUI#ZfbRVXFuL$QddNB?a;L>{jB+{+Dlmo;~UH{Vx~<Xpd1URICvV&Y0eQl#8d#
zsX>Z_c57=$Oo&YgP}lYNNJqr<gvMG{sO=z*S<L1mxndjGVr#8&*>|px%`KifxmNbX
z!?K~7V{md7zwZccYNU+h8k#GVF$DR`S~Mj7>Ev!#f8fx*s^BulwUIDv(SH;bc#FlL
zHmC_qrPiW{+ir2Q_8CVhI2%g(iK9t$#2_9@MSeMXWvONB%})oYau7)!yC#@4ga*JQ
z8!Sjy9@X_Ff9&~zXaC-s9jy^4S@<N^s+|hRwhq)sIB(zWCP(6}Xv(iNrVT2|FoUcj
zb~WYqx4#QyiX3ubW1r73)~oXD)F%oft{JZ6#unFiIXM;?Z!9tUb_uV8aZAs_N)zez
z90qvq%R9FUM5YCnZa?{WhQki83P^Rh(>p`3N}M50m8ju@;Y%6EdGPjY2Um<sELuB|
zg~BzC1Z~;GZ$ZT$7Z{;ztIw{y5{ftb(GMy+Niy5dE>izN6}`9rA^yW0qCd)nPL_3V
z8>wLFj|2&o*s{}3Q9tk8PRng+?au-Izz?CeWCZAPoHKJq0~v<J@6*RD_KR-Kj+c86
zIgMl`R`Q8CxZ2SYM}5^n;=Q9&tgsLqnz(Aree9uC0r@>)haY>#_3J%$CNsysbq=d>
zzJM;T08l<tGzo+ts-cepO`OA_#`UsJ4nVk`52#v2Ugw*yFwbqu!xSV<c4{!U3VpHt
z%+CoK7xRDEsUIVF<{^O@?9ouddiz~?Tf`}k>dEhTXa&1C!P)oj!iIVHJlXX7>O0W+
zQ#)_(`{g^`r*MhtD5sM$Vjy{{=oO^^FrKf)_5NnYU>Q=w-SQ`3){z7WW?Rg-m|N>m
zQ~|5J2IT)_pHEZe;a=6il+LPvzp!hw43uL5pSwg&YT2yI){$6^MucNtJ^EeWnccKV
z1yRRLj1VDES9=VqO{Z{q3x0dM*aN^pcZ)KY5p@6w>DEK}i#tc>0k)FMtX$VP{TEe4
z2BdgQ!3G)F(-h_TLJOmnoCya<nWmGB?Jh;X`{-ApG?^9yt(&)-dcP)M>000;fht%n
z14r4^`{X#MyAS-{Q)KkU0c<glg^reAlrjOZo@-TX(cln!bSqL9CC5jMw0=CdOVycG
zlQhbEF9$tfm9c9OVEZIx0P52m8&TUp_>LhV=(i_pwG1;NKo3CWJ^I5VK<Z;E6)^w+
z-gNgxAuq5v$K3TsvBfi;f?P9Vq2&qyo(PSngeT-niD&%(Rki17GJKNX5n|4l`K8=n
zbvw<FZj_%s0N>k56*Ykb6tMDoa;)-dmPNXo9ywmxr+@_m@IA<muE7<;J`h2pa_O2{
zbn>$Im2o86hMsbPz8-F=iOu=sMBf$1@qr*+WUJ+Q&+w7KnZYP5SSrN~>;EpQ_(L=1
z0Xo7MOPO<8U!LIhGL}d{xbiXN^kqC+Yn)eBnk10kOjVlR0ZwzNhkn9{BoyI)i~^u5
zya#OKo;O9x2^K%&^L@TJmVW%_a79wEJS+ZlEZgFwj&mTUan9f$fIHcNQcFAv)_sM`
zPyW_Iw18xPR0@Oi);{pq{4$k|^^e)>ORGhn6*a-@&R^ARmeK3)sw&aj=Ko$3q>+!-
zu|5F$^a6x|6gx8nywm;K?`&jdifl2?g-0b|XD{!ScEG>Ey3gAMGbg6GGBSL?{z+w+
zG;EicM!ykh_#0rn{(00m{IwF+eFUPl0BKG1D_ijr(26}AihH_w=XV;xA)l9j2x(wF
z=|wJtntubH*Pzw!sxPIeTarl4C7Ieh{r#T<cMwznRez5wy}F>t6|(V3Tj%w~=DHlO
z*+ZCZ%r(kp$6}7~1=q~agWjw})-qQ@i4v^8)JV<KJhHZ)-UXUZ2rMZ#7Uy3ryPRo^
zGPunpH|LGtYXJ=M+|OULx4BYl%S2swJaor<flv8GU-3Jo``i&N-PfYwMqBIbu~!Q$
zDMTrjNpE3{dQsb@u9)5vR6R5Zu5=l`AfWI<MB*iUQ1+IQXsf`1#LgZz|4tR!#?46O
z+m<?`(&9~Xjn&&|4e%lqe%%ckbgudN%iU?Ug9+wy#1VUpspLf-n$OPeU1tCk8gRf>
z2)$0xt`?i@KW(?Jv>lzVq`+TOrUq9E0lUIUs}z`rs<J~9+dtS%t>F5xQ-ll?9Maq}
zlEIgw8rt*T`KzkOb$O@8K{`X6)V*i$)1}ep%u-IS3pW#~thFhOSpKQl=vm}e+cdpJ
zl7n<Fl^0k;W#vptz=Ix7G9bythg_wxWv@LX1?r?^2_dV=KoIi8&1<>D$&Zdoa+t2+
zr!9KMAsMZFmVj&Y!MH%XY)0l{lT;|yExPd9bVkfZk6mQJZp0pl%WojhlfR$W9k}un
zMOaf8^0dlx5MWp&F_sxMTJ_%NVn--QRe93p>T<QnIX<;pTwA$l>#f6lGP=Dk)Au|f
zR`(;nLicGku4YfAnl+gN#YIv8nv5PQVyZ&P3;|%lCN7SmfR#XDJRZF^`NLOs`~+ik
zG2jihp6!gT*T;~N(CX`NkK1bDb2~8quup5ydF~SqS8i{}zr?mr1+4YeqPj!KhIRwo
zpNwNI2KJ`8d9O_Rc`P3y-z!BWG~*9=`n5VW6WnPYPospX=2U+k*6#cEuJ*DT-$t(V
zmREaWB7Rb9z39Ey1fOE-h&QX=@mox=73#)gdSdXGuWkA6n`%}5e8s|NRW+vKw4^H^
zzd1;;W;RLXU@H0_rTc{B_qDhv%f96H^Ob;v@MxdMAsgF-1w4j_+kXEe4I3}nr|0_^
zXmTIgaUcoK%Kej<9P3-T^<Crc>Rh;iK<^_0y8uCa{O8)EGrV32yO{1!_pvpCM}F-9
zH_=kw=|5rQ2i1#YbE@U<)={C&asT^=I)zrG-ETl4VeC`?7duJstjIdcFPzchhZrR4
zbc>wc#NbQ$jQ0_j!Z)<k>;C>N%(DgV3EENN4f*$#h=|9aSdrCrH!UtPmtvC4<Ns7G
zb;%WJ*61D2>|K+KSW|+nXhttJ*TXDEuZLt0BVT~(sR4I8`H4<&53KUtRkM1e+%u!<
zL_m&hjf=WCM-*cWwSMHYEoS#yAYoMlaLAL?B_`)~j&K$~e}CUH)QzvjN&1QdJv89?
z%k_^H%EsCPTRHdq7?cyDl1__zEO6Ll6=SRwxKNdrchM$WE~oJ3Rzki|Tb%qqFN5-7
zCa-2W^HXwlCL0=Ogexc8LzOa3f@Eg2ax{N>Tj4QU_pxlgHxf%UqGSX+NCH-fv8?2D
zjT*wE3k2F>mt2!WYSo$*Oy$grLw7<}1NR@KW?|U)arn;JllZC1sT+GkJ^WDvbU#0@
zK#&A+Xc=P<YZi^qwj15--(kbb6kn!aW#5x;x}bB1GvOVbg-N+_627_*1tV;Cn@J6#
zGT`ZK5H!#z)64V{F@BTBkVJPl_SgI?9Gz=0(ggjYAMU%I;gG&w-1oSfeC1D0xU)Ns
zFyI@2en})&)l~ooeGYLMKWUPmc&xqN*$5n3j@Fk>+{)w4tu=wtK0=K8xSN*0Fa+xn
zk`E3u7sL4@X2$4+ExBQjbBnDf^C31$TNVU`)H$`I@j9jjZA<>Ly~C|dd%-qKDQ{ok
z{D*Ukgsut+CQReU?{DRnCe9Xq?qECq=Pj;-+TD|ti^SS1^8P=P$AWZw*Nzuvt*OLr
z@<q~LjSy67a`r5rH%%wd%V~cQlS<rvf!|37c8`Ucmrcm80gWwwQNhr8Iu3Xy@W|%C
zKmG$JVbwY{NomeFZzNLxY1RIU-$W_DLR8LDxx=vj;`)uC@u*+$w$%>OOMd@m|M^lf
zZF8!~K&GX}-BTd|*{8T5M(b$whq86=XzPzm)!9Cz{=+qv<fA)|2H>VS{VIEd>wgK=
z?kHwnT8HlSPP6K1>bSug>Y;k_Hx(|GbHz-B3a%aBj{Y?8<kxCrsM8*p^@@t#W)1+G
zkq8}+WK~aQUMM6maFgwy;7fUJy`rt5#-Zb_Nx@2^qlsGv4|N^+IeHuTJpmp{fHbDy
zr7c)Rq>fQjgY2DSzBY0w{d1?)gICdJqshhCp&n0{Y=vn_sXliFfyZhuy=&*+Ew>ZT
z7cCcaXL_2tT&*hF7Rsy11wMN7u<^uL$!C%Z`@WFX&5zXlV@}Xtb9dZ%|H5AQY+#$d
zSPuy8<HyG>18t>V%TFeDN@XaX-NCYmmmsfiy|qTMJFrT**(RkIiUb4e?=~NvSeMg>
zi(+k%1MNfnV9AqqiVVWNuPM(8G?JziVzkroxBLg9<=?Dx+c#_j<7#m9QnLjrd2R{F
zznHeyoL8J&P>Y666aT5dxe=F&eREdIrPt`YR?%VX_d!UQETflH{2^1xsK-#~4$<*r
zw#So|QXGF6C*@T66W_n3l)6ucn<X+tQKsL$ppSI58vS$n9!@Yi;rR!;<sb#|<HKr;
zk$XX=EOre6Ka)}Z@X@mrbkcI}Tj{*Rezwq_=pb>-UNBkyGm8<m%L~UjSY;zmK}~e!
z;epLq_#+Tdlk{O4kDI@i077p&_0EV!WsXS$-#25@sMpOcMnzKbfgkR*I1@-WJwkzl
zsNTpOd^prTqqP>6D>o`-7<WEI?H_f+Os2@rEs(|*V@4pbR$NH$8SC4%hqLs-7FPtz
ze;@Ggm0cK;<MyqLS6D<_aac6#1dw7zrEh#Msgz+HsnzU^smW7luFyUia<G+8kHXV<
ziKWu_Y&ke_16>pT=89wU%;R7y_`Nl)<?)AVGHUX04B~!y`HVAyX%(%qbUq$V9)AZd
zx#qbHOzEo>;!fFqxPH*ipTesgR%Us5<thSY4uL|0GEB8P-c26iwmdL}UU<%qhvb5E
za%U=8@#e!#<U@M>@}fl@PN0brf!Co-*h9{i!E)p7q)EdK1#3x1=E#RhfzG2Q4<rGS
z7EchViom62``brB!}r^k=i3G?w1u)W_EwUV9Z^MXajX|ns`dx!6(poO+A<6sjf~$a
zQ{x&_y<{X4pMu;)a93bw0S(T!>gX2)$u~%D(jCW4!AU<trPlqUKd=jIu<9_lfN-~r
zJ-k+qzFZreDom(7ZAi~^;kRYCSM8Efm8!o!YfR~EE!o!_BTHSdccb>@6iM^TD=dW@
z^620PSJ%mJ(XXwkK79GryfEv1yF_t36XqOcV+WX;2Nl^!c@%P{97X%lLF$2Z;B9}2
zQ8ZL>&y~7xy3G1Gu||`W`O#(yKN()!HDTayIZi39xNp*Ad7I6qZVjvM>1SUS3|it|
z>#z%u>5Wvj;_)l&Oy>|)RN3UhqmQ3oHIy+vk5D-FGw`>VFI7%dj1FwB%SS?QEB=`a
zg-l^_E1bmOB$hhvS0v5-F)om+$mx0EmmwcBPC6TVT3?#q7c}#2r|vD+V{OxTm+=Rx
z(_w|yGi&6k3y|V*j~tJ0Iwsw=M!E|YJ8NICV5bKU6uoSKLkY&YR;et^VV+rVhjZp5
z*QX6W%Kj9>ryqVab+(?LQS)qP*H@0jqT7~2jI#P8iZ~T*lt8%0fdwkIDI@jhg&qg?
zC~w@eC%zojm9s7u(&LbZNviSgyHNsiePN*d6pRDeaObIzJwc1>zNXK)O6pV?PX4z#
z<Aa)r;DrvPprovv=3a-#^}jb28~JMT$I}UY&y3`C1gI7B6s}aUg)S9T$!?HIqyNfI
z(rh@IBz8FFZVowk4P5f|&xc{3glm-;YbI2%7{4A@<4mRx!BiUps~EhSb**79%J44z
z^5^Rmc>>e#AIBb(2>j9us??*UjXoCM!-w<~0o}C^d#MUh1>s-<T@C7+;c_mOpW77*
zV!PVIWa($AIs+HsoFW6*r_~=T+#QvtlUib2u2wX2Ku6^rrh)KW^Q@KwH1Qjda(r3s
zjZxyaK+!)+!9C<idKPS}5j0{VWORO?M~w!fGAwQa*3_SNXJ5s~;P@dreCRXuih$=J
z&x)`b4$Iz{J$QDKKh%&#X6OBDtVeYwzQp?6Fios?=8bGx!a8=cDNeG3R5XDfQsKPK
zVT!pl$HB$1mzbuq=i_|V7X<lhv07iO`wjDl6DD~G;!Q#4VoeEpjlJlw4}~cM0|9GZ
z&6q7JJHv~X@jpBYz7scdnN)KF!QsV~$Q!BfF~LjV2x%W1jG_a*VKcT57BGp8JYP6<
zS7*t%0@CC!&*Uh+N#^+t)4%IIE5Ai1H_;Q4x_`L&`G!{$G%*ubS3rOr)=<uD5A?lM
z3D`HgdHN$_1R25&R*}4^6)@GF|6c!(<3Xx`y<HREf6fAM`~;mqO`(ZaQMfkIp}~~Z
zsFl`#rP7lhu35w>xWZJSh#{@<0vm89?@*s3xAt3bPtvX?rtiC+wNo-E<S$%mSo}5-
zdPk)6AOP4~U!e?C9%_AXd#H{r5vxf^OzcVgpAl9!xf@#g<6O6TG<etQcjIfi7uG0)
zq0RvdZH0^<EKOx+tVWPIVz;v4mR7P;+-H-=*gZy$WHh8*X}Hkj%=IU9NT7KtfT;^p
zO&(X<^#2@tqUX9r4kXG$06{D8uVok2&U_U1d;Gz+PWzZ{HFzMt>bU3HeMfJE1~VJm
zmc6onu#>@b*dfah>+f?v&hd=J4AuvSGRFa*TnfYlv%f=Y)_vA1cAclS!G}7($w!L7
zo$|5vu~ZI`3rD*pnsmH{or#*owXXCDm~~cB-ZJnn-v-LPrdy;xbNZJBCJ#KLL8>PB
z;;6l;Y5+{^mCpDW)NAaiDOuh;eHU$x4isdNLFcgjPc6Z`MfT$R<_}DeFvXx5(QQ1e
z>b*|>TfW5O1XG)A(qbZGWY&7BD8k+2J;<csCh<1Use}4mB>k4&#gwDtWNJv?)d+oF
zx7@+!$@BQ)W|&4#J{H^@1h6)5rX<qFzj`F^x`@*Fn;xUME$+f;(s7{4eti!>Vp45`
zGf%{LGMox0QO72VPSW#F^vLQ@^vbv*P!N;~P}oI>Mm~PVi5HKeZ<G19p$u}VPF<KZ
zzcRBfwSV<mb@unqacvX9r`<sJz29$&zllI~&~3JM)uQ(CSarXUgFnN8dl|s8d4bJ+
zKu9&XKJgYQsWDgvL|Ac;X4@S|lG&y~UuA+gMToKF$rV$;m-+pQDKDkU+`l3~7dN-!
zbq?2xRLzZhk<J)^fQ~Sbbkz1ROX8K2NNF+9+ZHk<OT;9Ww5Q)nud#T!@l&_h`m2a|
zZ=lTo;t=@g2#{-LkOXw!es7m86@P&r0mg~dJzT5eX9~h8LBJ@DhgrE<A+jHx(mOVd
zclr9>!BQn$-}knbHLql=Rjq4vbFXI@mxCV77}Y0b5UFbxriTWpwrX*VvtQ9<KAZmL
z7RH|J^!*8HMt=l3bCgI1H{_pKawfO<S6w`i-ydA#_t2V~BX269i!!Vk2_is13*;Gt
z43FCjk*3&ZF9>~`MIto6e(}Zbjqho#R){q9$g@TAG9#^!-|03jCyk4a2U>f8K6Mj?
z##n!q&Uo4m-69j~ljBM|feM)g;+LA}eh{R2cI!NS#f6ZR4bw~_E#oa?N23a!vZU9G
zBTV`)n6DMpy@$p!c<XKL3yoWo1&9U9@}9bjTso{YR))hS1#MIK0R`RGh{OQ_^*BsG
z7r3pQ3h*Igvg6IR(kd4UIDqIgc~pSLPP`X>#z2>__zHuq<%4H0-f6DVfy9?z(H{Qh
zSd$rZ>fflLh%Gb-0(gK+F@5ENZi(}xQXOOumI1SYAR~pcq?+ZT^n~HnUqHXfEANES
zM_$n<AunUN4El-I-tvon+M)ln_(RGx4Cro1Lfh)!-OaMsD@bKn<nm6TLXt=(-^CTl
z?q^o2TX{Y}6BtJ(g@UvPq&IkQ+xg4><kqX_rf`((eIqy;G1ybK4YH;>q+fl5BhYio
z@~i=9!1#sp+z|e`+Y_5;fB<|c)RrL5!MV1Q#`wyKE6~0OyZ2&+A|oCPsGjL|C-Stx
zkXZ&`PfZ4x9fKZ`e00OaAe7tv2$eiqiDP`tAVX}s%B`lU^6p4*Wl}+`_Uq@-=m|N8
zWZc}%6T3^|Q7q<}C!M=`b2NeC$p#_vNuKW$0!fFlXjwsU+l9-WWFE2s^v{UZ+l1PJ
zz_kfwZn94wya%q79IXLpSIr^Uhoc@EhbD53P*M?sIwUe=uX9qrupFC!?F}b_W0Dlu
z?ScLjThs)^b)vSrv6(u-NYV`b^%opP#Qhs7hF)M@l{5Z%|I87$P%~vODLbj?^HdU-
zcNb&gE1B_$rrpgK*mHZUpB#Zx_-CHzw2`BMuBjA@XP#V>yment2AO2587k}c5sZ#j
zb^~<xzreQVY_<t!Ke_mGv$44K2Hr6?WY3XNz%7ry%6?L_q5ns|qz5v2{k+6c_#;I^
zA}@^iH%r$XyaFk^UI!NvsPcXHyYDu&v(jz~a4B`0LkXDOpMZG#%5^U8-_yu!x7la$
zTmp>i(hsarUOxnAYGl9nV<wWrsvpTC;-GdJmr@-1xOgZdCX`5kF<6337MKr%%E*V@
zZUC$`*`puirja+=$(L0@7oOWB@(HjQeMkb&4;VTswMswndpHgz5BTr}AwyD98dRnz
zsccwIPfnUcO<6;gPS0^&N$%`yz|9<r;d%+@&XPa3T(FNU_cgH{W7D<(nX%=VhyeZ0
zSmcUUGf$qp0yl_c)anjQctkzlY2A$x0T|-8bTI7F0FLc*lBRp{1^Rie_$u^mF;N9Z
z@<B@j$_4|Nl}x{7gws(p<&~Ppp~>t05TG3lQIX{Yj}iBa%W-u{6(w^lYO(1IjOne0
zYREw01$F`yc4|9kmW5&Q^fWtd0uB`x-;P+;-5)k-i~WlXeV_Uv>@{$0-}RRQfDUX5
zMOk1MkE6MP>5cNW>z9@Fo|PZk5y_Q0&i4hkv<g`TR>+61ZO9HO0-s1XY>qMpr^;ac
z4-wq}l5N|zCh#wS?L-}}O(m3r1caFN+WbXE8>BLHyw@R%&i17F!Y9e9csFXwGl<MS
zU~lkwYak{gT|6?tnipT|j%NU;O)$PL)Yt>tIblPSe;_{uMoS{XpcR1hwrKXTB+0NQ
zJR+dQCwjt!w=J_dFZJQrZ0Sp6iXq@XDy<x3Y7LF=W=b))h~~%v1{|0|q0xt<v6=q*
zo}v8>UZAR0_m|`&K=Z%UOd$6Qs8XHeXE;t`Ea>#0rJVf!g+W>9O5l99|0(qjdHt|g
z*rFJqNBB>GsRds~zxP8X<vXu70gX_Ri(fgqrVzitWJM&X4Ki&on(@)5Y^14q@2J5b
za3RIy@x*Q#rrw}Qnav9X5kCeF(VvA8*xOjvgfF9(xPcGtUv`<>W0|GURjGXUj<6UQ
z9A0$TiS=F@Sq2)t1Xa0xgj9+aK2JG}eSei?>S8wDC1(GH^Wh|-Hu4Z8RYMRG7$Z?l
z;6CJBc^>MkJ4&^zz9ZO5p3w>*s1sE1$Ku54Jn7HK(6+0!29=F4`zua-XptERP<jFo
z!WBuRd`;B){TmIgQsM>(?-DFNF4OuH9mmj3nnOM$_cHVRLi!U_T^BQGbr_(Hf#&#4
z6HKNE+#|N1)4OvfG*&h#bE1ewA06y}#loxE<o0y!4q4hvu3Z5RXh?%N`H9pt`41RP
znvbkZ&48XbMMdzD+nT7V@cVuS;7NKc^VD`}+jQR!KJp3<#@i4gwn_^mmCiP6#B>%4
zt76RN8i_p-|2BpS^eqJA_a>jKI$rbeCy)-LL19F|jc@+|f(+IM*^(KX)$4Hb_wZ+*
zp0G%A@3Z?sVJ#eKyJ(>R!HyOJ?YeAF($N1Y><B2KXl|opT+QbrF|CDAFrcyeQf)92
z6AW`_nFd~X!pCPo9lg`R7l;LmxPaG1I{TRXGa|tjYmVhsk#eXbm|YX<J76r_5IiIV
z$XB=`WHM=H_-HeX3_t@YB;l+B#)dpXoP^}Ji<>_x7y7V*GvkpJ9{O#O8tBnRxHFs;
z7_lKd3FNYS3PGNeO+rC@7t!@6;GjgtFl$LS`$^2=*zCkgH@_A0=yK;TN`2KC(wXR>
zeE|eO249{4Lo(1na8qG_gaMb-t}=+~2e9+$?=xnB_c2hd5>3%GA2J8c=WV<vS1h5X
z7JY+G{Kwzzqhg8rxwIgF8k(?}9lMjRHC5M%TF6IOCizn1QJk`Y0&pWzD8m97GmsaR
zx~!HdXI=_lB{zxRFz0RAVve&C6ttEc)zw|gqoJ%${_q>o=GF1$yo3-eg)Xes$C|ON
z5^#?T0o|Y<RFgBmO9U(!2l#3*{j8Yr(V&YLMmUh~s0nVlZ5$8g`#UiGa=`7Ct-MWH
zsyXbd7(WnoP@pr=1cSv<D&%Xj<@?`gOTerk(i4zew*XQ$)ncCP!V{D=(9;LUa%%p$
z1Ucs3JZ2Gm$~EaKxiWi=AF2sFxmKN?1FSLDaIjK8ZM<VOfws^G@+C$PZl4j8*XClu
z)p`khR1<KqFTpTALpV`5d%TG-8IK>dSieO<=D_F^f;tCA8KUY}EfZG<T{UH=SChGq
z*V23~!t>)U^{TTfc6-|m++=)gEvCBM*(`qvt*DUQsE%im;>+Pj==iU!-E5wj4>R*+
zRiC(eq2akb{LJ|fA7~>Q!UctKiomGLNoJlPUnCkRoXhC?U_s)3p%GjTTe<^S=m^D+
z@etk8#I`MOzzU05I;*kau{4FOqr?iLNTe^;2BTteDSXH(#+JmBN7mXS#B9q^ObI*}
zc}Bn?v39aV=pYI$j>+6AA`j>MEe+N9Q-=h!KV_qfwbZ)dd4;GctsMO^tyDRuwt(q~
z+az6jkPkURjG}!LW!{4iDOeokIJdGGAglhq3nF&t>krwT0jv&B3^)tiYHI{?oX<1=
z5}3wuVG1AWT&sxzqZ0#3!K0*E90$t272qewR$9nT=ZK1YGDZEgMl@U-v=*xH(_yLI
zNZ2jfthAa4$+M4|2U@e4?UQ5SdfjG5@Zn=2qwNB-IN*nA(f9zZ#e`78s8VO1@YBW?
zV{LGN;4N=Vnzw7>6j=aw^#~M(l0kYdP5L#o?b$c(JT0MdLq=3y)7$oOr*z;ZU@15&
zzu_qf-*th2v)K0#dOS^~IBr0C{WVwRX?4&~BpwGbf6utmI4VbDb23WP`jLJ8oi-r2
zkpDo8nXvlB%skO34FVoOgo)sh-jm5+Fp(ZB0pm|g3LujfmcuYX4}~&*1u`;@U4fXI
z`oY`&#ti~LN=IquL1~zd4fwF$P^PCDO2#MT@^;6jOLX*OC&59cHQU6OrVOSDioNlp
z?_cv1iDsL`QeW@(Qvkr2f5r&|<VLl`VIA1ip2<3h4f(_?``fK_nf*Bk>n{TmoMaG#
z1Rb*v%JnJg!_GTb%3H3D07sHF?@4cYa1)gTb2`_UN(?6G+YT$YrULXD_gL%01T5+}
zY1=Sb#hUYEn8cuuvGR;u3YOeKY5U@;%~t@>aUO~YBl*vXjt(k}9l}7j_EBz<CD)b;
z9Tu>!UmhIFt2qU~vI9Mw+j(4QLW~$gg4RMP6P4e?Q>@0LLmjYSrv4Phcu)M|T-^G`
z6S_@GOAlW+8_Gv4BSj8VM=szOD<5(aHNuwCyA!y+N-gl62Z8wkU{NVg){}z6wr<oc
zjP?my3IPXLa;aI-0e!TR^1f~~Jov(o)1lDwMxsQ~V0c*PtwVSTLUoj$ONoAKz#|``
zFVN*nC(sIhHW+Daq2=8Xr|J5fS0`|~HltFdg;0(t4nNDAkHz*GE;aW*1Sz?JgxDTf
z%BX)<4;nBiJrsYT-RMRoZwv(NLySpZKv}ckru?(WgaDrZ5DY~cL=0j(kqoQwg53Sj
zv!n{T^u^S7<LH#)UYi14sTl+|VY!dHi}M%v(!K+C_Q}kfM)U@V>@Tn+6O;k<djXtT
z4q1%_1|W;B;wO6%GueNsfNj*n;Jq6W@S{Lf*@97`OP#QW(C2*$Tl(R$)*U|0CY5ts
z28FV_!E%>%g}N9MLq7Rrg6})Uccx&Ya)x{IvYVq3An&S;QS8iFELs~7jHiRYMQo0D
z{?qWZXG^e$)Fj~5g(=#alqIu;wC;)UMBF7L3P+Pw+6N%qyuKGdBDQ0z=`6@}Z+t`p
z4kVI4@OxJki?$SK?kfa}9JrIwrf=<!>MH`IX7UyL_2XR!mBZDZLi2+Xc;bOCFEJ1-
z?|YLF%^CmmrJogI<{$k_Or$GNi#lsSn_?Qwc|RU32t6d$KiFXTtwNi=q@sVrhJKlR
zjRm6_B1bUB|DQ$fx@<P+kYuNiV#xke_Ws|$Mt~@YJXEJ-BnB03TxTW~xsj_eDk*af
zt`%DK0-E-JUEP1R?_A0Ot*5PBi&f1)apNX0lnXKR{y*>IzrG2)tAH4n%nSV5d0$Tb
z-@fQOi3)T>9%JWRX;3LDGhs?W#iiBZ9Gu<t8jLBofEl5M|L={`0u>T%ln#XqdFh<D
z4VQ0>V9)7Z?J$kg#|SF!OsW-Lo$sTe{P5h@BRK+0^8fuku&NskP#fLrE?_48FZu{=
z>h#^tDak|Ld^-U)E_dzJBgAxyNnGgI|F%Sie_O=$&$Xrbu-bNPj3DE+hVUG>j*H5F
zE8^zXwiUgTqoTFe>^qj2HGS*Jg0VH}rE&1^h4?i~fo=2S)gT~S1ZF~ZhVX5>ivAcm
zm5Zj0ys*ih*~`-Wo7m{f7o;fQXtnykTsc5QO)cZD^+wz7Jt;pTK>Fu@Xwp;T_&S1v
zNT3!r-fT2)on6omS+{N4TR-UTb8JxKsV7@Pl<>Xy{&mb8>wnYEuKZ`+FyC6vH}xWJ
zt06T#B#m0Xh)(|vz>nnxC3W7`8=;t}<t8UsWYhQE6FOM5Z$p1(pQgQjwCnIG#jDT$
z;Bq$HHL~F}t5DqbC6|{^?UM~QML3_M#2&||B=RL8;2-(9&DiT7gOqb*4O`c86qPym
zif%NoW(ql;NA!*9S^j3f{0mKHu*D@%*Q9@B(RNm-p;x+`{z-E!Ma(g0I_KwEIMkH`
zdC27NVvTS(;zItVKCsMPEPHT{aBUAj^W^0QEAASN2CBjnEl;nErrIKLAium%1j`ro
z>)~U(YfI@?q%7po5iF083TD(bl?p-sghuoN{_eUE-aMt5r!L|uj`1026@0{)B?-Z!
z0ko=vr?h29_4tHUW73}-`+<S^^cejkhUAxD``yN!G|B?uq|Dw=#}uqm7%_=j8}cmw
zta<C4r%f&{=_kS>=>YyFej?25Isod9$W%>5(e7$HzT|C5J<fNQ;!SP0=y*e;20MSN
z1YZ00wDLHi=b+j4S`_2TK}Y3Z^Z1bc!OxdIuUi||+jGt;Nv2eZ<aFRg^$%UI;<P<4
z%Q~94nFk>2gKsWzfOFRfFCQZD0;1mGj_iGT$Ks6HLDTF%9Z(m$W%Fsy(ok42jUK;$
zM3c(H$=Pi=e(cZ;Z&g`oQR3BTX|-#)97siJ6-3P$!2?2h`sBmr+d(WK(^6+st|CXd
zGah}BjBnOeO&7~V2QN8vsy-NJr(}ZMyLKwBuEXjk!z~4Ms2tOql^68R!(dm_O&gCt
zkrcYbRz@8(S!>R2k(mMYT0~_Z6Dg{>4f4q-B45+<SAemU>=s;F=0n4!Ld|d2u|*da
zd-stBDVw5=m+?t<9OhL)FR)-l&jnm{%+WIXmkz)B@7`(V6Ql{)bK;bH&)_b)RClUF
z-L-eBLonxKmXq?Qq*hKj&4Rv=F6FI%mn8G^nA2xBH0z)PF8mfsQtvrhTnVva6bbOr
zOB7qGzIRO0qwgX!ABqEyBG&3V;P|?hT~qNpxjNA?rOgvtk>5Sav%%b-LHk6{9J7FY
z^@)zL+hX@5ru9xqrIBitXM?>?Ae9p(*P0cZ%OjRG2EAr=fio-Tx?WTiX``_SmUAK^
z^T9%AQs*LKR^xb}&1d@{r&^bK=tV?Ln6_>*D_skZUwKne?W(JaGABt<;Hw|NNOyIu
z?u6wf^eMmyeQAFTp!^{d$u9xW`!XR2xP34sa1zn&-ZW4S%`D(xqbVd-t5NE-_Fl6p
z1?-agR5DQOEq=LnfMdsZM|w>3ZDbl|+b3&s_9j2piwn|g;H{+F@^AIj32{iYZ%wd|
zYr1STrMOPJu6n;SlCQrIbDW4)rCe`#!lQwa<Pam9_WkSgL%uMrX76uJjT`80%c(T0
zr9N{BN?6yUxZW=>wm;ZW&hqw`^_{tn@rqFr(<n@d*>D@0uwMq<l*tRIpV+K=>MxSB
zZvD>tR-GfuS>yS-OQ$Bhg)%>OkND{2wDrh>QscPGaM=S+fU@U0LjGg`Uk!goxIXRO
zKHv})S7CT;qr_`+5qu^<)6+0G@kbpN$$Rac%AhLbr8W?9I4yA{>{2kVQ~QFKCztq;
z!stY~uJ?xjdN#OxL1$nfX<=JJf3DE^RnE2A#n*a)fq(E0hu_zxqIw6~?m(A+{v>)S
z{uKo7fi0kFnhs^Al%e|mZSIyKdtFGkH<km88g(|wm$MrDW}mhgmett(m6+XGHuTT0
zkVTMApp2Kq8}bV%evqe0UJneLbdy?IAf`kj&_Mu!kTKQFs?OHf6{?MhA^?Z}*{1f7
zi}g-L((FqVYbu}1{g;*gXbmfXW|2;NU0hML{<sS2nb5Lkdb$=HX(X<mjIM^m5Na03
zYg}@(jjM4wO}NhPPCRCtukF}Nx|T5?_9d{M|0hbAqThv3<l<x=G2Qxt`+KF5i(z`$
zqB!z+XNj7St6FJgyIGQJ4#(yb%&t(ClItBBr$2_f4aaE*vut}|p7u*Q_F;jE%m3Qe
z%6i=D<f6OQ7uQ8Qh+CTn=^W0ElCwh$DUOX4Tgh3EefRq8FH&E(n*H;Gxt*W<ql`Q(
z+c}au8{c%@#7F)a-Kp?g<E0?awfnSla`WnTa(F2AK(f8_xmB3|1$wk#>P^091zbj|
zkD~k(_1AU4sket25-^^UA=ZjjNc&dE6WXiVri-8gEuWnQDd$`C4yt8({)$CewL6|$
z{uP=ZeQoj6Bn7V8(|kQ?#xS!)rY`{$l||*v*d$l0<f{pA%Fq$1vJb9)zbvuOgzN<D
zSJ6i-AZgtLpQ~YnBnaDcKhHc(LMP?TQ{u3Qx;$&|GT#3CdAM99?QpA9{^@x3Us9h7
zdIFXYPSqhnD!hUV=p@Xn6k{*gtUNtqKB-C?a)vrL(#>wuVe0MYT2$<jR2b}q^~L&h
z2Hb=s+}QVG1_<Mz1*v4WC|g;8F9efMwA{}7gK%ZRsd}z*Fz*NQJn*TR33}si#=~UF
zx!6l(>QyRf-doFN-}i}cYW8|!Y385dn#jv~gt$@E@k;9HUtT|Q?C?a@hs{wsa(R{^
z0aJj?$aoWO0Z$dP&Cmem4B9_zrQ*o$$bRFb9GFy7UuV*wUA#a;XxjZT&KFh$DSF?8
zwxG&;om9B8wh!kSu^PeH#+AZ%3n=VscSt0irkxO722x}|jOwyxY{41*SRQhAh~pmG
zfWWmGvB6zwQfbnui=BdK(Z{Mc`V%_RI_OLLC7|yH|ClIzILYPlS}0G#E7R1MWi6-0
z#hR_cEs7jsxg>UR#PyTa37(uZTIeLChe~ZdhU|+Mrv$Vsfof9oEqN9sjc?vo>i6(E
zY>9kkdN9Cq?qClr6>(M@R2F-Yc2mV(_Carjy8A~X3FErY#h?7zvo>%4j;3mXvq=&Y
z%dFVd?iEOLy7wXW+0Ipb4`_a@Ru1`(N71tzK!`7_TUlBir_{otAHg|9wcc;9rn_{X
z4Lh!|tik@R@2&NB#vA`!-!f|4*9!@mT+sXHPN^eRE?UZW<}$rSY&ei7LgO^m_SRvz
zqV>zKWFMH!W5ZGtI4)OTRycm|U!m;PB|3>d<St#J=GQGPTXm}*L06(S*RxNDJ#7YC
zcu8>hbs8)pFY`8Qg57e|7Cl}QhUK{epl?s-dMxcRXy>5O?(-PYa^tn>cE@7z;q<KL
zc$kc7_n(=~gOKyq++`8xs=o+EH!6+D@6zVnan7^rCpL%^hz3BYu9qJ&v6HkzOlCx+
zJg}s;%yl#_H+e&eINJm(BKYbw7^*E7;dxsA^_N*#<9xL3C8N70zq=NXKE5G1<0qr;
zH05Ib?$&w7t}u<{PG2it1<OrOUeQ{PzYiXI-Tw1vwgT7yW#7%;zSHgwA3jyiTF+;=
zIz@2Dkj-aZ);9ADc?)*=O-GA)DH*{%gobL~3yliBA&=7)9a&#e*mqX<tGQkV@?E5N
zWtlr}p8Z@bi`ScXG?0BdczyAfXFYCZElnmp+~S02cHhR->PI8T*1Et2P5r9EqH5^H
ziCN_hqqoe!`4!8-*fFVS|5`$*dVgPZU9#TSoJK|D-G}EGU*NzhxT}$ByPwmN`!!AZ
zoxk#(o(Qh`=`~Tq*8=Rjc3hL@4u(|eyD`N^8~9C1nhz_8R=IrY*@Z?IQ!#w@u!65J
zvRr4NC5S2edkS0AY{b^hNxq>|)gTe=@9A*57Ht_(Xm@BS`v*kf!?l`VpxL=_+iT#%
z^lps9*$LBW#3S8=#M(3?RATGEk}laWGY;-9z%wvjc<(DFHrynhZ!UQ@*KalTbc-f0
z$F=G(KGOYOV&$mx+4H!GzTV=*?LB9keM)x!Qp)=I#)Jv?LFN4F<Ha4CXoZp(<s%f^
z#9gI5Zi(a{JX~EWGf!yrZqTRKE<}tjlwYkT$L}%>wq6aIaRQ%DeRt4iwGM2&wvQ&Z
z`@zY&xvDgMwOz7WDVR=`ZnHi2uY1_Ut~Xe)(~^zv<d5DO{85=oD1J4;Zw-4y=AQh(
z5^j6I>06xWCL$+>h*QO=p6eM^YyN^kxZZmU^-^g~*IxBkDUWbJ9gs3yl+B%Opbx)+
zp=8_OGK+8gdDbg|TWGgB<MDb3-7wx2Wvz|Nd>g~z*9#iz7^`!Ov^-+d>h5`AH<~%(
zMXgKQ`puT~M*r1S|3Toftm8cg95U6reNoSD&L15beYUK6cNm+z5)yjz(^c>XPpBOy
zQBgy{fqc$19#=~klkLU0<dJWS|Jp`#>k4ITYbz@k(CHhh7*4SM%GA|?MUR-9=y$^?
z&vnt>wf$;<KMPgxD?Y@53kwNDSq!(Og2LRM5q)S&UdK*RYd#(@vT|AFo}``8{%`AO
zlFocqsSItm%q)#yxNuNdhBiwbHDP{x_}1oH03qJnoTM)YE;^L`0q)If2x5#yUq-*D
z*M#ThWRqoPfOp)JC+X^Cjq3HO+HPoCmq*CeK99m8xhZL^_Fv-k7T)#fPA{R-H)|Nv
z@?0v-+FYE@DQ^iK=S-6YRHI+1y~&dbKjk}o#B(+Dn1WhJ?qi8gavgPl#J9Fb>-{nP
zB}B?`CY}11!G9#1rhkpw*BI7*t+=w8S$y$jK4VhKGVJtvEBqj`1#FjcCf)YkIwtx;
ztWQs6tL4?{(ATQ9FMD%@99NFr@hyzvje-k__^egwEsO#Qhad#A;)~*+YZTx1Z26om
zcMNfQiB1FBx=%^_Sv<$K;?n^iDjfW{$>Y9siDVP0F4)F^?_wPoM&y0i_v=_Cd3mUe
z_?1cgKW!d~<mEJ<EAregyJl?K_9G?3tRb8t0s?H+fCO!l+zb1ccGHJVn9~VdfNwU8
z?tQUys3wS-XHNu+CokW;Xr=4L!$eREOxXJUp7fh`JcPcx9043`*s<A2-ARevfrxnS
z0}k=p51)Ab^d<AP52h}8vZg?|AG6KZh$(PO)yDDbfFIPMESAxq8&CCIdqaJ$G)5Sn
z8ppD}A2OS+aIXtaJ=;-zzW4q7;b0X0(bfvh!Utv?6#($#KArA99u3{fTJPZ#AH6II
zV3I&S%nk~P?LBBgy;6v)qcM;pW!zx(U`78BZP4C5li)dc-Dp|GD{e;Gx(p=JL|4Dt
zcDx-s88mLrXm&HeK4Nah>{hEwEN@$9+0?o!zHt=h{RwN=BSRcB(G496nZr>ZCaVY>
zsDATwfan5iD!7}`eK8i`yLW>CzcR;`dpjn6M%I>;=+Rr8SZ^wej<8Wys=xm%Py1jr
zwo-}K{eiKOa&K1x_T>Y;V;>sX-TWWA-ZCu8=M5N@6_6IB1f)S4q$OPhq#Hz7LZze|
zq*)P^7U@R1yW6B&KpK_q?l`lH`v1M>ocDu!T`oJ%+}$(JhhFm#bQivRy%oPAP3&p)
zQ*9>C;tTa+$Ip7+Ybot~`$U@cvm<f-5iy;Q<KgcNv=sZJuLK`GrFBx<1G1D~PuvM1
zj9Ggj@Y*?PfUbnRD)ctRdYzLE$ARKXAZfQxWwi!{c%;Lx^^wGF=WzS_@&MdB@qBW-
zK{wwA5I(t&z^wO4|1H3!4B)VG14HhN<K%HYtt3-NW|do{C?GIX<hyphFQ{S*3V>3O
zu2J@pP~}wFkWw7(yT2xTtv^puZX6tPgmcr)hOI=*SlxI3Nv-@Ikp^2-9|lHMoxe^V
zW>;v7iQ%XpE7)Zxn%U4KuBrYy{*a4<MIpMfYl|T!SR-5TkZH>P`iYaxh{cYrg`72B
zPQi{J?4@&bc0sM?sBhhfoj<5*c|HrjS+t4{PgvgBggyy)eZ9QQKETOaFgm*slc^og
zB<t4khHTDU8wJJOcRroB2Pj}dqn^sRl8hm}0}Skqj$)R9?&brGQd1YP-op68czr|K
zF9=s$N?&>~q_wmB4HpqH$p%D7zE9+~j}>r{iazBlxQMCl$sf3|9jmMUEN>^R;~%0v
z#QMm?vm!yw9(C96)Y;<Lb=WsBqdF{5xjD~T@qH#!US)ga-3`;(@?q+4b9_e6zA<Tx
z9u0VK>v%iuZkLN*Uq96hd0cXNKU+^3D;y-8pC|}*zdJ&VoE5Zr!P^X<DQMW}Kw0?>
zjXkWV2wYw!%t@WTM$8=C<O3hOawNe5l02-4o4dY3efcX^)r@=A5>(2cjC31oVj#|w
z(3CIzzG?g>ut7@I(|k}|z1U@@p`6i%Z`^UYQ@+b6Xr}h--DZOOA`p*?h=Kuc!NdWV
z`EK-bWbQbwYq*+Z>f|(0)5mOt9{AgONF}8-IIhV=z3yq6)P?<e!}D$evctaPo9!mN
zy;1&M7Zj0S<EY%v&q<$u`lX^s#`qDhtk_NHeRn(;`TzLVMGrr?MP~5pJ88^@SKHj&
zA_h2R2-?gIME$1t5{Vx-bZLn}@3axrG}gbx@JI3wZO9|P=|&BK{vhbSxg;WsNOMKc
z2B+j2M6G6-g<f_J$o(!SxbH2c)V+`eL^HxUwJ4Bis<u(%-UFvryLk83_?^WzpTzR<
zb60WEajwW*7UjsvAI+|lOCJcD<QMriZojkjT#l<PT}!QR3E<6AxjeZ!cR_lQR8F`1
z{?qxVr$2Wtr3bz7nc`CGFAwLd(DG`e_zq4}Tg(GNA?@D#%fp*z>fRogCM>Ir>2@G&
z<eDt|U}BCuw(=O~J#QpKu$5Ag?xxA`(A*ircAx}GUcZ=hm^0nOXUp!VmQ1uV7*Fs)
zN-D;1*durHeM$i?AbD6Dfeoq#;OJMWX?9Le0?RA(rzfkgiNII(gmJrjlsi2ocSzUg
zzP4TJUJM;sNJWa1=ca(l+PtgT6un8-RK?H+CtJJ^NaY=-mM@v+IYW;x`I<<SPGZe2
z8Duua#N53PB4RrtOD+M~%C>FnTAn#<W4450rW71c^;+|Kb(dmBkU}=OyxNi(em!vC
z+-wgUZeV<ECX%Lxwu&syJaSp1HChq1DA{BH#?bmWIIMv)8?&!*Uv|!O|AZJ+9WSGr
zTDJDv>&6sE_r!(`P>1%=-hiPcvgs#B>I~GEFT<g2HaOFkf*b+9OD8-ux1&~n`>?*-
zY(P`d@zm?w_0`KeZeIFCZpqwD3@3%e-?9VcD(e7Elf7yIzadUUu%+U{j&2=beD3fG
znBNG$np?Z8@`)ciBG;B)@HTp{l5@9gQo5*>8(&>;=X>jE4-tzdZfh~8>PUC-5;)}n
z8nLIS1}B>uJe$c(8EE0^6AQQx+~oZ~4Ve^t_-(S}OW?3&)7Bmmobs;3s>YTtxyWp=
zmeQoJ<3{!wWm%i1&}Ll0T;M86du;U-ldcuaBXQDcrY~c$r16l;O|Pfwz75F4clwEK
z+kZBs-sb=OTp(!b6#GWUXYFR<45f>Wbiw)NMWd>|Q2a@Il;PsW?U1nqGZ>SsVA?v{
zB9&v7p2te^K&hU4h)xQ{!UbP;(5iBaLUTc%Cy1=W0>a4z)NF)K#p8L*OJ4k#P}<eX
zZMo;}JtaoE9K4A48#mk5Revik$?Z#4eJpely&~Huhtk12#COKi?fezizCAeJ|E*E5
zE%fnXOzT4R<G|!|M;LV$sSvQ4QvIe&M_>B&R$lND9aD==0gK`;<qK4j5Vw`;95Vu3
zPO(J*2dTn`?)sznrMsm@0im(0Es2zB->4#6?k>dUHT;fPHU9Yi@{2L=`lJlnrWdQQ
z6LV<!c<4+jF+qw?Z8`T2-N&)^k&Yi!7O@4J;#@zm^JEO;DG20mQrxF|@6>>47$sBU
zEwb~xMR9!;lq%RHhTFSyJm#W3=I3maD5|n-U$2l-c@*iXx`y7?5M22B`G{cngpSTa
zR7b$(LeJaN!%LBO=6nm+?di0lSKT0i&0wl)H*v(wuV^I;%gadF%gNPDmf8HVMLCaL
zj%;@2MoF3$?E=@@e)XI9FRUXUd&M3-JX0z9EMv-ms~yZ2xXtqU)6Tnv^QPvlNw;mW
z!Q=74>+CO{KLZ6Ni9J(PYjnrx^d8k8J_U#i4VSz?O{p-xSF0W5<+F%GwxIp)O47tB
zV|ZaQb-(hnvfGX(<p*4q$vcGSWj34%N{4mh-j~OzeNi)K`-88aljhl-w0F5gUV0xr
zR@9Sr%SuR(zvERlE5!*r|Bz(2-@G&Elj`y+y)Bd@Rhn;yvd4i?O;??qCC6e<fcxRG
zj><H7Pb^I3iE`6V)#EnH!>^h~De%zax_mWQ8^*j~l~q*mrBi};1ZBg|f)3B^<eX0G
z3vVw?$7z;+jDwyO$o9iyiVKIpv-Ph!$~<9I2vNClBlNB-{u3VUkzCu&msI>iCeBdf
z+yGmPq=?(psVR=2sSZ38-3wkYxe?yNzXC#^Miqq64C#G+an1eGHl7MpLn%=oml(2q
zP-TAfB8fxb+qXJ`UW(nj4OUGuUyAFwNsaVCY%*7Mm=Y;t&@3aa+aR@aQ<P2DS^=i;
z-BxtUJY#HbzlFM)<x(q>*T-#xQ>SozGcSqYA+_VN_MD82KInU#6uoT~HmI0-;ZLzE
zIy&tLw^Ci-(%jg{v5k}-ud!5V;N3B)7MWTY>Dj3suT9<mUbNE<^BL_iZJ`bnI8&n5
zsME6e-NaU7p>NhWu{p<`IF+)0YLvNAkki?5BbA;XW=-n$Z1ziH#xd6Hfc7O_OM>GE
zcEiX?_j2w~qYXctH`G+l@m7Kt!SyQ82d>-%myVZiqUB?&iT2g=L;Lg}Xdv#%z~dWG
zLlBoI9l?DwdhAxm4i(np*6Y{GLF7HdH~%p4=eQ7Q`&y2T!izWH??dsfT?d3NLEl8i
zaRz)jsK8gfMNFNmn=Sa%j9~(wxmp|*z!e4zb|6<Iq_9R`%w`eiY*++S7}}{jH>&DD
zjqC-O1SK#18mXN4Y`8w0PVnR1mfs-S=K%x6SCIsm;cQJ9E6Xl5O-G448kN8RGXc_&
zM;Ic@bIQDT$2LBjB??HruB4ntH=f*L^&&adLmNo`GzY5BLfPYttf;OHdNl*zhX<>5
zic?P`+xvdV3qCY6a$le)-fAg;T&M^ZI|}A0w2Tq$7c44$Z+<M30z1{hdyBC;W0S&F
zw4TgGS$(0r=$O#ZdNZbpE$`Rl@}0|Y+tloAvuvRpmT*MtLeLug`&`t&c(G0oISD=C
zhjW`(JX!zUFcDLZANq1*-ABs%8%{5xM^OFSHAGY+k%uHt|3tGegzSUj$*>m1+pe3S
zdvyF$k>i+g>*f@fk?-R=p_XBF7&rb>ShlZq%YbPdz8{u#KrhAo?R&`P#TEvLfdf4Q
z!q92ReW{Kkv*LjtCLp-|ApH@i_|Jgc#|K|sQ>vx$sbd%mp8IcPPcTvLWxUu7&AXQ&
zHJoS@*?j-r`1CgUOni069>0zcF9*}aa*x8>_EFT6Pal{#@8IRB`bf-;Mmn^^YEj>}
z2(wNefGY>*qM%Am<MB7!Wvlofl$1&I_L!R(u$+0;>AZ5t9-4%w28TS^OtN1igMS~#
zX%Svm8Ax{(ZSpCZz7G<-kIS;c*62+7&EaChrgr0rc>;cseVc93^;{b#VP0v%s;}or
zj;ox!%~oBZdo#SK;QFDS{O?5iTw+6ZeSA^;Lyx;SV<kHi;uY%SV~chYVB}`yrl!ha
zcbb%a&AO>>evGY|(l))^i+>>`c)8A6#~tY98rd3Gcigc(Dl;Trm~Gu#H-EGwM1?^_
zfx;zbln!oC*QP#~V^C#c9L!Ch=bVh=R)0Khn6Jg`lh$06{~h;vo23IdCUB3wGX>ZX
z%0dtpwwTHy?!;{^0r8;7qZIz35+9U33J@3hQo=_`M7cmai$n6{X0Y-7)wc@9Yo&oa
zyC6@R2`!O#)A3gv>3JAFamXiRni`qzUtL`V5=*(sH2#EZAYXl_4LWhVL5ZC^(oYeW
zW$Dn7=J|Tr4tvjVm-=BX@;YX;4a-qaJ#{fM9h1ccIS(j`a@|l8;vwfgUwyEqp7_yv
z;`}Rv$bby?r@wdF@&J1;Es*APb$^e;LmDER*qIrhy0gX$*MXhzNy~&dLv4y4@{i}~
z;Sb&}d<5(EIDsfOb)}9wf~)qFAKg%xW8rX5d|Q;gaoY;3-4SEn@!oxLj$78~sd%DO
zSN*;a5D}V&g#5WqTLZ$Ia^z(kIcoU*@<ASRNr*ZIIw3B))sI>OZ?Da-Jg3VO>C0Qd
z<~FH-)M+yug#*n0{B11jTRow&y4mGC)vNLd;|mx+rNzU@xoV)pi4bi?Us^Dn18g|W
zyVtFgW}8uM2B!sgnoltuS~+Ff<DL;3@4YL#HK@c)Qgj4O5ZA>&j(1`k;Z#xwFL6Sg
zDu&*hN!-g5IYrHujVC$b$a%_dvfF%8g8L@x|JGKvFl^TQ`~b76Qz&>rwnFZWADG4g
zu7u-#)D@AxDuYbthfLhX)de&Hm{vz;gz@L!iy{mKy0X}Ti#<e~^iARBpNoKk*02!%
zJK6|v8E$!=7Tyy98Ir`^{N-{3+@1$d&scL)f82*r33xlJjDGJr&o{Yjyg<LvWgMm$
z;bq)h=_0kug<38N>g;QFnMBBj9<w)K@Ye_5{xhfmy4<haS`1O7M|_5ZHh;X=J0-?z
z=M7VxcB=T-($)BRj<-=P`2W+<b=pY(r5r*H0oNS~NZy={AVw0~Q`(n*Nc*#r*`Izs
zkoHXsh7F9LBB)Naxu7YlS_#fS-`c0>(=%7o;J@TG7!H}~y)#wp94X~0G2rA;`}^ub
zI>5L8@5Dzt36QukIyoUUi8L`9OMTq<xgD8C(Al&UwdlP2+;W<-1)SW}g6*y<#bIr@
zI<)=#b8*9;E++DkG}x%G(kGgbXWQojuV#sMop4o^yfIKES@m4?pe~WZEUwBuYCRK9
z;077vPvAWX(IPeqXF=_1#_FEaN0mu`&Px9m#CNptQqPrM0`;Ezh-nqL6~Wc0(f?}_
z>oLD!Mq+aU`tmrk_v9$3%s;;<vY3S;G`XGl`>pVDiCdfWCrCn*TAv*q+L>v@Pf+#?
zdUwrHnE)^UL479I<-o;mo9d7P2DspQA^8;<7WsQ2IPL~J=0m>!&YgYf79t~w9hw7I
zD+k4X+EqfdZoY#vz56k5C$C1%zZ5F{9XTJR82iu2xy{*lTT+3lPhHR!Ecw16_3vr+
zyYaK0p>KKt+G6zY?&W;x5fWodp2TmbMwx<&KRV^|;nyGp-c}pZE#ggioW67@?8-GB
zp;%`>3mD)odo@nBS9(-vYIf4as*J^k0s0amGDpR?4&bcDEjrTMKK#}&Vadk@TjylI
zN4GvO&X<GBMpK4o3dr{~2%Eo3^RFgfqoy_jpkNGm;sg{UKw-L?j&nD-&IqM>fVx-o
zVARH2RRbH9rqmzIjm5rtgUMGnF|E5I{uwdIk!FVazMF;HQMpgP&jySEj?K%Nqd}kk
zv>JB4sn8_A_-C#>K_~mwiPv6DBAep4q(jE(<l@Dj>9{*Lrx55o{DV%W)y_kj64ZyE
zsuHzlH9;E-V;7GUt_=n&#axFZS>r9VdxVgpkaFvuV;~sI)0<2pBpmHx+E!YhUr-eT
z8k%OG-L3xfL?U14fs9XA)psT34sdHiDr-^;O}^Hql$DUhBykU~Naf1!^fPzzT~qFk
zM41+c4>Q0*k^GtTW7m`*z;DNfzrz@{F_6{31Z=>6I&Cj&cXqipb))f)*4WXunT^tB
zG*lRqac?^EN$In!TvV$PVkwE%fX;&4l2^IRtk2=lm&AKq%`RUVd^NKU@zpUh59jXI
zSub9SCU%>;Y;H_d9NNT>ohN$=G>CXCbjNRYCy#k8bPJUc);@}{Ox9=_D7q*LErVgR
zhFpUX5Vbq7k1;lc3lS6+VF=<#J5;FVJ;zwXEas{#f0W8}{@KLB?jk|XagH|m;I1`?
zkKPWiA=N(NPHfihT<Xt8{>$-V_5fWj)FQH#^MqKGYoKq-f?qR&)1;?wTH=60*>JaL
z-w@nvQt$?BhCf?N2oHr4yR*LQZ<wSWn2BdXLtC@DwLD7F_?rv`6@Mw-mr`NyJ*8zO
zf!BB?MiVV~VOOYxmONAG0*QGCyT0G<;R>I}yL!S>w%}MM81Eit`53WmGankcD7`OK
z1?|^J!iSvI4$msu(lZjBV!xivLCdkcT@&j<A<MvPkZAmV0iK4nT8%)H3Psc)hEiyk
z9CkNpo?ei|H8?rR(ychsG9x8pLilmJ4LR!w1zc`3VnCg1Xb<a*&zhj6#URvnWXC}H
zs9e+M9@kWQAH`zF$TWLKz(N+kB(Am9V`8`imecVd(e?<=eC0EpGNRI$`y+Hr#Kv#u
zbydy58>oVznXqf$&?4L)tF}fS*YB~tB7fo+innf6M_azG>zA+tSfWN;Y9t%`&9EVy
zU#*Boe@x1yOSSA3+5xztcWH=5+j90infx7f)MH=eO3ju<x7=nb_vXU>V$0^bIichD
zi;!MnRV#<P7rZFCyrtAMzR&@*dejB_>4XnU*NC1tLxjD1AlCTMr_C$X>};>0d#GzK
z37d4)=uxropRgWwFpOn7{^)Zo+t8@l9~RW#a8~i|^uYj+F+dRs_)*3XC9uq_dgwnb
zv%%=s^2jDq^+O7VqLAVAXpLIRDD~&f&0A4@`m^2!$!9M*Kkg(=yI&ae#9S;UdNhxp
zGW^Ce>QDG^K=Z^16`wf<dI!c!WI4r><BoPKxdV8%hF68)4SG_Ke19t$3!o7%=e1G}
zX1i9;P^C=0vhaQhDItJfLy<udabdW=`}52t1n}xL;1!1Lo&1Hn_vS_GG#sZh!++X1
zI(6_%)9>u^-A_HpN>eD-O({La%BV8^k$g~TiZP8KG6oSVe%lC+e=+^BrOH#chRK|w
zCx<Cqmf^nqkFLRaFn-v73llVXLKF;5tAr%;2sZk<tXsLgaek=q5QsPyQK``zO36X>
zZ`^m+E8aE&F^#~L;CH{9CUNX)DRNko)wAB^vYx&$t{hRL@aE1`oyNE3y%4^2tH|v^
z7N%9LN=HJ>IvuXBIr{uVPj=%Yd!vQSO}0&It`(8}AjF5Jy@l9Y_ozxig7P1uh#0!-
zEtQP)bh*>wlc9+8N;RTAH7?ARtwbx1KHYac9{MS7vqJ6NW{HXqZB<I^D*GJ9;Sv(~
zva>M;e|tq;4D|qO%`sqa$W?nYnXZU@?Krhs-(iZ)wf$TF-dtC7csrKYvzwOs4im41
zc8=X6x~fhSRhW2}e8#JKoKKrz3nfR<g*e&UjWVspd;;w<*Td8JB`-&wV)X&3@J)p3
z!FX$nDC;cr(|BneDOL^u5vTn2Wxz30>>u{oM_KB05Msik0M6s;r^`i3bR6S5(KGRI
z46yp0%F_la-nAbQ5o<qg9ZLltx7*UO#wnz^z4bJJWvx?q7W>s0RvQ=V#d9!I&tX2`
zYSDVkQ76qgGP3V+eK!Ti+A1pb_3pNNID%@#fNHWxs$~x6#Ich0Z;~Eb3KE(ZUFLg6
z>xcn)%kZT%T)VIFO}d;JRi3Ss-7RPA*Ve<4o3{pL4jBOLXi9u3*#wrj>FGIQrrKgc
zItDxxo{GCqye1dIdNInom|cFdbDHHie<SY@t?`LNfu|vC{PI3u7wlW|%<qd8$*-F8
zU6pKM5|#n^dK!<hP*COR@E1pL7*Rg-uMll9u6ybvvvugw`a-2q?>B3{PWF#coyA+X
z8;NE6q_ETvn-IjqQTfRaUU&3Pzcq~5rCU}3^Eln*I9p6l=7G6Y<ZCDnTJQVp4lm<3
zE|QUFyOx&Gd2HSsT>DN+m8S__<cV{P=YC5@CJe&!g}^ooigA=!EQ%;JF?H<Ldu#YP
zTlGs$d9O;<c9Oo`0t!%vTFC!7C_=yaK1WQJ15~g1{=BYWHvPN1X^UMfUVEO)>tcr4
zUcD56FlkJXW_E9L(#7tSer^>URL)4BCAZzGp9x{(>^yebFR@B2rD@c(nMB^)jMkTY
zBRk=HF*uL|BFFt-%hr<4>+6HHMmc=8Q+K@tt==!Jb5wo$<Zg;#HH0xePD@7URi_}*
z<gNehdwVlu49S?1<kxz_xbN(duhJT+VqtvDEtw5x$KnbHESp_tG^r`q@opOI-nj*2
z5W_DPgGMzM3SuOp`sTTkXDDKZF7C@kmljX_w1E84VKST@RbFEsWYtjQz;x<FtFO2I
zsbwJe#F&(xK0q%2!npwb=V<SJ)tDY}oyXM9aaJkdm_Z0Rt+gMzyv(KdU~y`VMXC2`
zZCUxxR`Z?Cj<$}jlOH_ZNl)&jf?;+St5PGWM;1daJ1*>jO26<)6P2W;KSP9NS1&#s
z_AOhkhi1FV!MYx#F*bI{4}1zZEUsitIkh;h(z|;}Y|~Sk)gtRCQbd;jvcR>$qS=6P
zg5Rlh?K_w3`iV(iMV+~;B|2q%;j}Jq<=Q)OShaj=Xku1#M#e<>QK>sxA-^9b+u-{u
z)7raZRTutVfA0b)c`<GbuC2s{bS-q2Fr_kGX1!^z1ctTLrckmEZL%*uaW9E1Sftb=
z>|+ud<_n|DhM4J2p$Zy4o;HP9T^)wl6|NrPV{cV^L!ZnND%SE%^a%8Z{r8$x5K5)c
za{F=3F#(&9x88273_7LW=MqCELvw*VXZ~M#?1mE_nljnqpb77hhfq?i-HwR4<&INk
zBo}fEetg@SJ)iv67XQ7L#ha=vnc{>enQdJAqAjeo&H2)VahuA6#ZZBEjf5<gc2jLu
z3jT%hH?@{f_5D6;^4Bw>_7BX-c;#;iTR2Qd$;!4kQy6dUXlKrRQ*x__{NRq74_xoQ
z6~RcR6(l8v%S+7A-J>to1SWtT6y-Y=kSb~xR_&PmS*28Lv75F_Th_3tR4Lyc#Slg?
zvHkirv<h2~e$@Plb@s;QCdT6`4UrQ4B7Lp3iii!3>yZ{7(;xIl3dQzjjjxwX7s7H}
zTq_Pr{jyB<WXblwJF1U%plwXQeB^A<@W`wURYV|@(a<|5w7FOzk;G3>;tmhGR#p&3
zCT3>9tAXIWuYp^Pnfz6#DhV1TZUb7a#nAESc2z80-XGBl>dx3sFM^Nw-%v5I?Ztew
zK3(SU<CJitAAn)IF2!bQwNcTQP`PGS;@wf5QZ3Y1PfGx<U5<cR^J&MVad2|wuE__J
zcMql^d5#NmZJpI#hxXW=6Rev;X2qfhvTj;^iAlV_o2ZFC9K@~*r4W5!4uaDB0zth*
z(KFrP(Z|+!)edoC8eeRC-r6>PDyY$F$kcJ(``Luo`6kv1x6MH8g1OA`US2)w+U=)p
z5RtpanbPH_KO(q=PHcq=rF|&WBvI2@o@&#r2N^S?6_M3;-FvNW!Ue1JX(48!WSTf+
zIV1Ue&mZ^KZYQQpSGL@5kC~fVwNDLX<kQA=d8M#oJHI@d&4SGduhVg@dy*w~Y77`)
zGW5l}6Euu2c0ZHUSnM{?dK+)V^0e)y2zY_njwU%g1;bNCz><2PWRx0{?Q;c;W`nq?
zBw2j%GwZf@lah}{aiTr+qyA`Zp>v`D1m@OFFu3dxo1g%n%d7Q0U!UMkQ&62onAlPy
z85|Hm+_vG%4}lt^zUaY^S5gZL`oVEj5Po0k*7&8N+WTts$@^aU)73BE9pJ`}3F)cD
zKxv7Ia=(q>5YHJ8aFfbfMc=d-^#G3Md9%FcgK%H{mj+&QA2wX0=UMu6`zM4PduVSs
z^mdzRNvBTOe-5M8s+2Fpg4jT2BIXBaZTq{;UE5%irP1VZ6=lJ)+ay1Pj7#x$bQ97%
zX^g!3CN@V6Zpz*!YIppKx@J3lanRsoXw-%w^7scgeRg20r=sAU;YT#LAeE+XznC)1
zFbb&L;iACn=Z;mtht|ZrwyflWHs6ajQiw4l8y-*iAnMMZMUECT#ggb{*^$x0l5c<h
zB*zH_yAy`rL}cDDy_4FQrXTc)h1UYYwqE<JEj(8%<b+0*1ira)8@!QG*R;!R^`Udo
z0aufONX@+Rdbw3#Iv0bQVd~kr8ELXYvdgl*Sz@*#`~Gw07AeSqppDP!f#8funzkj2
zEduH<_k}`4iGEjQtnkyOamWQIC(sXhG?bIuCQVL&SA=^v@VJ#3e6WgYa6Wg|Tbp8e
z(R0rsxV=^Xqh`u)=2HEJlCgVU@^S?>=htkK1f&DF-19QKK5PwQKe0roz^U&d%}L|`
z?D~5m;lrLg`-cRynCZJ+OsNHnUBY#+7RSuq*x|<Bs#==~XZC1ywE63O>qasPpTm-Q
z&b~5!WJoDcg!;@_4Zi(Nu~w^QQt)ksMm5eCZBm?`Nxtb!-z<qF1)NfhAUU5FdR`!V
z*_83szhX-`9YT?#{Jyuje!DYDKqZCdx^{8Qw`A12ol*u-Un`f|!&h%C|F{+J*SNts
z^-avP34PwkCxzjjVbqlWLsphFQk|Kcu9_Qp>W~Bf<>yW6V>CX*DhHVP1eK;QtO>}f
zmD;$m#b<>CAe22l<;u2+T+#~1im!XdKb39<gbvzDj#C!IkG-T;L$T~BRfF;V2+!o~
z05*jqfZMjG-=rzd7Yc_cEOcm)Cp}QQj^i_|qp{cp38wXsLK{C_5^@Yk;q7|I-rld>
z7ke(?(93?^wT`rG@YRk>BlF=a9V$o!QE9-_)R^Cuv_H7^Y8FI3Iam5lSu}m0n#|_-
zvL|Tv0Jq=L&t3gBns7pbao20FE?r4O*b=PZSWV@D;mCY>=_j-`&J#-VcQctSEDd{%
z)I?@Rl)5#Y-0K?RPeNzo@9WTf<b`1DDYrswFs*xN^iTV%pi@B+<LMGNOEX_$7Cv}t
zv3=6kQ?oMu+G$E+Xjw!sRRi@wO^fv@MIU)ojnOMg@DdpryDqgXd5kBe90RmWgNvSw
zdkPJTt2-QO#S#m9Np%-#=1IH?4RT!u?&T_OV&eEwTq0uFA@#m!v&Av4E3Ta?=34wX
zsVVHfW+*4b^e#8{tP1JX`OvDvsB<_DuqL1eGC6y&1_N{sL)z<xIxI>P)ufFM0{vEI
zMiJlS*<LPpzf)<wFy**y>+|`bCW)STCPozfM_HQutDS}S=K;Q+&ppGS{%8SIcXO6E
zBXk%GzhNh)yfch0JzHTvK^dcKYcCq-^R5@rlC|WC>A${y(Cogi(ZV-uIW+!F8JI{f
zrWeBzYl1J*8k0KEV~T98BgJ9+B-rYiXs<?aEUP9GIIdTQ_gT%9xYn57m-O4Qq-)~Q
z#Dnu-TY1Y@<D{_HxcBhr!w#~Nxw`a-NwgW@`hMu00oRAzb(qyV>VoB76nqZQFB<F?
z;uTa65g*uH*}OF|7h>XS*Bdfmnvp+GQfo*xSiM`r<YQ^N95m7#zVRKM9(J;B<2=#K
z^h+zJ<w1p)7KiJ;PRapsv1<&Y-t{^6Du?#LSd(remCiJ6ZH3EyimVp&r5hzLwN8p=
zXo~!9$eC53-`0DN{*Jtojl$ck{%N$hN{%<mbXKBG!MC>pE4CfD?u%9D>!#;Q=EK|b
zoXb%)OEe`uoL=jl4X7JCEG2>pZ0}oN3pp73G0BkT)fRts>ZIqIx*P6v?#t2(iS3j=
zSzom1N!<tUfBxXrw>f$KqE!5zYy{yG$0dp9*DFY(ZecE0xGC_cKIOQj`v%A1@>i9a
z1TKe&@u#MnB$ZEiVpUpod98-HR1aSCP0^-+P)o5mVzpD7H|8}|6fHX`XHj8bH!Jqs
zldP{Qze#t3W?|&eLn5zB$kFa2#|A}BP5Y6Lm}dX;jyv2a55`Uo%VTYRCXtnKNIIu;
z+QlbjEcO;uCTQsATYPjo#kC0iva%;1Cnh^jytFo?q8lbU?e@XT!1Hm!NKtS6%xKJ^
z2%fN>@Qvm6G`u`;zG?aJED}$sL){Ag`cdloKwb;ux}b6IHP2Bru92B&!|yZEHLmBm
z!rAz7C1LCBx-|Goa0Msd6!$uVmU~SCW@!7^YK{#c7NQ-XI;c<Kk`t=y+?PmiRtAx<
zbm0T>9OELg81_*T+^#GGTYjAPB^-p+p%fW@Z6qU%y|p(kGf=!KI|4QBfzj#DclFx%
zu3&XgI(j0QEV6FXV+YrpsDc$t@@`{7syOZ)dx{yJI5bi5IHq!0CNd9NruI9|mya=#
zI`!T;87wzuYpw6?c3k)&wy1bMyb||KY|D1J!e6B4P90seQj7Rh*5Y^UnC|%`vOHW#
zlV9|9F&E=W%x0GUEonXqyuUQI$%~dt%jkaJbb=k@vQ-%pz7hXPv3H|Wf@vw5<jqVG
zCArnh6N8%h$bxc6vuF|VQ2_gp?-}Lz<K`d@*9S!fFROI;L2g(8QpnCu{Sg1Eo0Oa)
zH$}UPn9sGwv|&_yHskMjeaupu%YVPi_+tB=OBpY3Iof1!ah?&$08nHhf<^7%+mXh-
zY);A`%_$k2{iJzV*REp@k5QvH-j8@wuO$iV2zT4-m|H)pGkvi-qhcVoAzM~#p*Pt7
zRly`qT$cORmWlnRST4?{DtAyGdSR(LY(Y>f)y9_}ySsnK0`9(^l|Uo}FVm2Eq+(Yv
zQgOKY0@5(K6P9?FXV4xxmcw^%CJ)73od`|9TrzrsALoHKh1)WoDg}rStgXyOZoxaT
zLD^+zBJCY{NOGZJ!rl6wGWqLEmND~vB6e}@QJ;4gEAC7P2C{p1b8ywMvZ+cIk+EX;
z3|c;d_Qggf^5@QWkXE9Jfe5Gc=cr059qeu$8hJo-tyF-y<*{d;$rn2vugVFuon{Jw
zPVq}`QNsvNDijp!uB}RR%I31nsuS3?N4|-y-}75_#`z~1gyb$qOxZrNi=|R!^?6xD
z)2pvq7tI$9dp3Wsmz=AE)C*8%(g!HJG(s;LT`sE&7!7fc8bu)udz;_u-x;L&<m{T{
zfqKpFDr*06`He%_kr-^tU@)CV^26(N;L@V(lC9E|x!PvCYc)eMy&+S1J=cD!i&Lmd
zV<(i3115EHvp2P6%>MXTflkI8)uNnV(wv!v7>)zd$CdfsxnuRV??P%GBqD}Bl}SYs
z?z)#Is?zh;9zHdWF{1+!Yt7%Xrq7*K8x}ZVk=G~YyJi+@&phY1+{{t=Znwx?$E$I@
zYrL@ov&=zzYR<<(jB*1$1#d!27@~?<nNyEX^LaD0zt7<HBRm3r;_Z8&ucWBR-5HZ`
zl3d(1Xu9k6o{P<SVltj-bUNJ2C#qS<ar3o}0ssDK(b@~0AtgL<)@o?7(~|4hx^Cfq
zLk<cG?#I)eR|ga=dWNgHH>;9ga2rlcq*lqKm4k>dx6sE`A=RZ)wnbuU{>S;)$UdC{
z)@^8;?oXJdXYAgQXRO{F3!-?^`MX;kznv3g{+OW-?_E-bVb}L6_=eO@7*j@k#;Q8S
zoxcXQ$xfuf-C`$fdxXhOe`vVvqLB$G$1^7$xZXFjm~-8kDJ&yn!GbhbfBo(*nx1GP
zk*=}8Wn0oi;;Z(9<U0xqD&1YXi8WZ|BgdW5P9NRrhS_&##|Lw9f~!v3jV;3ShlDci
zb=Y-1-I&3O^Z2tXPlcj%&><Mcq#)CGiDg!_e&Jp7Sn@QbBev0OkNj}z*kS#AvLc4H
zWbCv#QF}jBP~Jm?@|ugJ=3e-V9#toGEU7eRh<meMbHlu0{{GDCUE^1aU3<co=h{qu
z{LCV%r-f8$Lr30*L{5hfg%cB}GwOC{22>Zt=9#2KYMd3Cwaw_~dO8zfB_m7MDjyVC
z)=d16oximuww$|b+<^Y8X4&-v$M~FWp0dZYV-8Sd7!`Obgh7MPi!x)FgR*xPebD4L
zN1787b#uCb(`UgrOoMVa(5bRMW?7Gcj9@ABn&G5JMq48&U;rCF-CL=NU3DYxJ*0+z
zwf_JQehmMdI%w?zchp)`YLwlrM_Xu9KFZXqtR1ei;-T}s2C1Td*FQ_W*p+LwDJYPd
zuGK*iH^c4lg;2qUV=hVP=W`B0pQi@A9Eo<FXb$raA-ig0Ou08eX$kZqP&U7^6E-OC
zRCY)>Hl5p?sgK^|%|1J0SdCfwOr}xMvY#bAec0N$M$JPE@5FdPPjL&e4!nZ}(%eF8
zBwt*^v~WVR>ZEexxr5w6R$y9VFp(QRsLP_Va?A>)@OsUx->G%=(%ZGAWo{u2)kdx*
zAYNKxek!HCS>e!S?((ytVNPx)J2mhneM1)!xVF@*NKiNe|83Yc`0<hzHaI8;iokNM
zRs5e{)|rgJl36c;H4cZklx!V4*_tPIrm*NquRzKovJ)|Ln`Vd?Tvbvgju(X8VBPDr
z>s&nzPTq;Y1nmUqHMl$$d($E&Zg7cn{;NfPdHr+4`H}d|p)>u{mgD(uZifkWN}3Uo
zi9FG+xsI9S-S-4=9?bq|rT8=*9Iy#K7bq1FzNB`|cTCpf5~MnO=XvyDGGoF}s6yi8
zrJ%W6kFrS+NIw41h#Oxvg?Gv(gLJcvM_VRX?DAp~9!L>p@g3buaMi80!+c)Mt(}EB
z9!W3!+|1T!VY)W!i<14b1GyZFmxC&e^@)4w2a8TA{_Zw=`{~Y!;_DfkGleF5j;u`a
za*NjcKJzK5Nf=Qwz9hTz_NFWdjy9s|5?(5LZ`<cpEv~bjpH49ern*awtkop(JU%$Q
zNH<I|H9HqwmD(&WjEsK^XbaYSN7em$o;2U_GH-L2t7&4bw6I`%H}W6?#qTm3{${A$
zJH`4r-OuJTt6g5)D>^!0R@Pjq!g^L;j-fI1i9lfuK8k&zBX(;VC!R6QT;QSuy%FlU
z>)5fxrJCh*AY&}9@ryDkV@E|Sr`dt*nw~4P?A0FF78GO@;e!bQVa-0V_gjg3U4xun
zK5xD4T%H*wovoL<k22TI!IL8d(_bM)2P3YvQRn88(C$k!9BlcQ7u5WhQzxYj9m0F|
zrQ&-ro+TyX4UC4>^04QX=oBt>Jy1>r+krH)-?JSla_<$bv8s|az}O0pb|e*5uQn;C
zLA`^v)cK7d$O=J-b<Cp&-)EsHaJRmpYiDHRkY70G=~amZOtC&*$7mAA;}a8zW(AaH
z1k&u|B>{I+;W7#~Gpei&9ePjLc1b32oOIt4Xa^7#X}G?1tisGf&5L35*ev&EpNwu=
zW<wH767|w+`eQ_j-*6BchGI<CZQ<z;Eq2ydH?Q>v9BRip$Ft*H5qTPmon*DfMa?#t
z<%PGQuCexnD^|jr?khrQ>ds0Y7DY+@$}q_b*nGehh?~mNRsIA6B8E?MZ{|9msRTgV
z;^8db@^?=2N%RF4lDDx(0o^)B@?}98cdn??NoP0z32!|qyL(ZwPM*D10@2L?*x5iF
zNiKBHzG!6?RktW-?iM**L~>;5<7LtJJEA~##cGU{!Ozl8&=%N_a$J;l&vy!QeOjvd
z&mOzQd{w^^XXf(Oq+_2^$84AD+A&TgXEx%lanb$>{s`lN5hXP{>2Embpy0eXO5Q|x
zy6><d#ubyfK@<dyK*i`L#eDx9p{@DEFYSBgPqG$@LG`soQCOsx$kJZ+50J$WuHu1-
z`SWAOqUKGm=$M#_FB?|$v{%$OgCF*`Xf{;UscL^HdQtH6G(335B|WKOYdbw!P68uJ
z*0<F&@F@$JO2E%0hqI-cNA_HZ@ZI-ul^f|ej18VSb{E>5)?#EyeTZl>fsioPH<{P9
zx=EkZ)mDzgT;kYe(|PCTn~|tYPb_I9(b6UX(F{ta#_!~~CW}pWNn6^@TxMH6v2RQ|
zEn#e84;~|64))cK$tuN15FdVottVKe6R_!;@p9Tt8b&tbqk5y*gVbw|L@DYOl7#6r
zTV3&9nH{HfDZDeV#+4Vbwl1z@q~*af@^VNSP`kBdJiW$S^)NP&sqMaYH@YOLPqCAW
z0mtG@#dkMx9y)v!z%7Cw7@EN0;=he<ZH!+G`mSGK81rbqcDlJm0Vd@MBRMt9I8C5p
z<DtJY1!xOB!iIgZqi<i*d+2G2n7QvL>CE}~IhuwO#}go>Lm5)jb5?w@aOO14dg>kQ
zWOKXcT8Ud$JH8rXx2b!Y*ofUKTXAJ@W8i+`S<c@tu7MXRuHm)Mum|?q4kXYH!s0rS
zj3QEK?Tx>VZdh1!%-K(}M?V?7?;5l@#cmyF+i`=0(=jzX=}Owa=slfYW7|vL8{H}P
z-?V-2NQ%>y7><J>r3n}*C5SVO5Q^utcAwQkdF*CwfwLfUTU|XZ_%dVf+wJzka=OtN
z$wz3~IBKzItz33!y&TtzmbPcZ)t$W~UR4D()_86m2v-A?(iszEO2z9P<8wq$w?>or
zt~C0c_H0IYrKRsPooUYoUMoiCO=f8UBr8`4OX1I?Q(Seq4aYG%MdYrWO&TkjXHCGD
zltu0Nl?ru!deCDv72szJLhkYBgP3@$>GjZ#SQ9+;^}p{`hasp71@61$4p+D%HHHQ>
z`?!9Nl=mGTCzHg7K9WX?NGIp4JA9n9X4hg&+ZT;)_HHYwxFC}QlD2cVX1i25$+GE@
z8u5<vot+go7gfv9;QUL_e7}0MX7V+|qkNml@`nh#rO-sfCwA!T&2veRbcjb?(L4R*
zyauaL95&^?S`nqy>MC~gq%w|cHQ?E^uOu}046W2UC6Oxd_oEz>!Lvqu!JIo)Dct-o
z4p1!wRr7l~I<N3SLgfoJMiU(^wz_@BUq10J2nlzTL|X5<jb*s_LRTsG6DdqIjP6+c
z*z_wsykg=tc$Dwv{iA|=N0yx-r2lq^#sWJG;&xdeo-<Eqx6W1L$^ZOHS1_d1TdTe{
zw#}AAOnPgAb{w!@qL5;*?$a|8jz08fELpbzDy%x4SK9m+l|j@yr*W>hvYF96h~C%L
z*YNuQmGGgF^kM|nlF&R)x<YpsGB%Kae8so38j}e=e*RPg1gzlidT63;Ghut&)T11V
zO@|oxac0_oo`V1aJh78*_Q&%SfNnWIFyDW$QI!MA6#d<7?9cy^<Wd!ZG#^z}lozsG
z{Y;E_ORPr7tGB>LbuK6u#7l2&Zs+?0=6-qPJ8{FPA}^O234%XbWBqFwt|+$beRRf2
zd4@j$69T$QU~XkBJyidP9e^tLF_5*}aoWCYnBCf|Hm&Yg0!6U3I?1W*$fQdpD;`!4
zw#&7pT|vl_W~lG#`dh7vPlbQrUxqaQo-OI9Gu?r4=!d)h#R15`mPtvz027<vUkOAA
zLj>`b-VL8B{wHm=RqZyitO1BWs;Z;(m8r#Qx1(*oABp=!uoQ94@WB1cH^sjXLp}l2
zGco&`*b<)=+0<;4K0zzLl6C~Oq$Gi9;H$n~^<QekEl6|O(o787WW5WtPA^(dkeC^h
zZY8zpY*&!BYNGz4ZH;YuX~kp#21GEVv|A64d5ETpBzvw*GQ&G&U=j#8&K?I3R)hD3
z{E=m71lm!#wy|muQW4r|XQx+aWl$6!A?1Z;0ph>s-(Y=Pf9#8=qlOpKW>8@<0LjXU
zcybdS&%p{5KBJuRDkewb1wJ%ud<|P?OZ;4SU`6$Z=p%T4#Kl6-m&=2{`FiQe-`x=_
zR5{@gbRX;Gw6C6Z0@z&$=a2t3##ejM1#j=QjaEk0e6A84Y=ezT4{n3`j|%qFqqO*b
zG`z7lU!xoTF8(S`Ml5~<=>4lKIhPUq9Nz>*mqp5LRaFoP{1V1XG@Og^fp4}|OJLFo
zX*N}rQTnRFk0G2dV=FG$vB6+Q^P14Zh^u(<59s(y(Z1TTb}21osT0;`y=d=|4&{nS
z@(3DK^5<eBkm-Rm%lLjsr~yU>f!sU8R+ZWrlSjeFXDM??cIGO>U*ErQ*_-Ms7-spZ
z`&AF{x?7NDSO)p9s}FeG6_{gRY^&m|9_J$%ibQ-*3Q$l?&4}usMkC-$Q-wd&?G|(r
zt|noxyft_AB+wZHHp1g!@bOz)`TWr)AoLqvM?{F<)1>;g`HCFBJ-UO$4xS06_3CC4
zJ}UZV^G~`p%K#DcU;Zw)_%F%vX@Po)A6a_waxBnSF6Uw);DVB&H44`_rl|xU^VkrR
zXhDGfGeWaukp#DbG*849SXJ=+3BN7yWr^%!$v74Yo&{In{e3o68LSa9Kl%?10BFqV
zPzk>lfh}0k+dU$LaiGDcN13To(?%g}G^#w&ta3pGvMVx?!2e&<2QnpwGe~{8oL!C%
zV-0cFl_-NJ%d-PV_NA35{4X_;BxOKb!Fn+koAy=I0~d)+4_2*y(t&4-ssEGhd=QZu
z5+_DPBUs1EJj-;%qbcD{5_$y-TnYt%=duOkc$65Ek4R^c`1oT1Q=!VegH-4}#a6<a
z$2Y;~V%?Pye%lPC<ya6|>b!eG5k-z%6eZQVJLxTQ@{qplz11}=j#$7e2f2zrq3+eP
zTx)o*@S*qu#d2qMwJXU86_Rx*sQLOpeyVJrjer^bt6w5OO{bkD?vKXhSjZ^r$wfn=
zb&TdY+E9djyCLh$^5ZRnb~fl!aV`RIS=xVS4yVKTPKpne{k{t;!k8n1|0R@^77#nN
zDIRboI#91*Uqk3STFzA|u|E-}Khz9`V}U~Wxae_^H8dVc1aADTsgt<FB_nZkibz%$
zdSIGt?2a)03nV^sg0D7|dN(;tA~0Pm>?(9b!qdqDIF&RGbP-r|6O=`7h$UH|Gg7W|
zE#MC~cr4S{67#1?p9mpkY!Z@UM7`U*xyboi1^;a`px%-#y~S0A_y>hy8rAmM63qJY
zya1(M;eSS?4)~D8_s@i{823jSRTTkaf0uvfuiY<!fvc>LAq5y`!`~7cb)*3_Ep5t`
z3<u8rFfNP?NrLwfXPny4DOUpE8wu41a&dy`T_E(~{r{{|4#FzcP30mcWB!T?#uufu
zcOMO#URzpztYuL(ykg-F#(g~B4PrYc-4w<hZZPZzgb>p?24MxhXZr50zva*SERU3~
z@4nFV&*w27sUHn3pN2mr{u64X1pw$qx4xMT|2OtX3xPQAV=iVLJD)vv{6=>bHEUtM
z{N*wlr&5!zRW)U4X95(;k0M#?pV9z+z_Bo#oa%2Zh_y`|v6Ygu-}=YIv_oL}JZxn#
z|AP^*2j1`#$jK*@t<nG4Jd~NTuZ@cht_0f2>V;a}0K7KO>*@%HlJ*PYjUo{cq#c8G
zMHW>Fco<OMyd1VfEE|?9T|>|-3SlWb0(Foag{u3)cE$*h(gG&7J^();0yJa9m2`v}
zAvF3ZeMRAJAHt8vr)2VtdO$GH=3>n8Uty<Nf#6(_?{i3<|NRzT4uT^t3V!UXH0??+
z;0YuzHtnd-s=`Qi`I|~gcL1tT4(y|_MQFWN(R@=T>qv5|r<T>D$B=(y0W0aa`c)Uj
zWhudEp|_*D#9!4+6GRXUSuX=9jTabx5^MMU6Vp_&_fM-rgWb@5istqGk<xCV3yg>O
zg4ju1$?|z7*5i~`Phu;n$B3NhpV~gBQPqZO3t$4~7?qA|{?9L^6#zvjzN?6IsLcMp
zn?F`Q5OrlMUad{1>DK|voT*xd(@T56%h(Wj9i!>Nx`X?sCgx{^*~{KSJjdAR?n)yA
zjejC5gtmhHf_wAy>~R-n$Bn;?hn|5jg7nh5o&4Vq5f8kBDvV{$t)eYp|0DA|60|f_
zNb}-ITcZl~E@OXAI}Zqax#$Ig5hTx7PwV}C@G*a~w2%l1&H&oV#MBL+eX_Hvr3<2e
z`YeS=fnN)tYaucFLkKu4Nv@^c&2Ep%xRPIDa4lpwv-G%i`_9sUY$5ECct|542VyV}
z@f^)S-^G_A&!Y=D3$BbDloTH3e%R3MiSD!hs}1!peba(~fzTfKW~}u;f&>5g39@g!
z!LdMg#{Y@peLj*tQJSrUCvjXX_xxp~0eG6#sQdp|1lGb=NM5{f0N^>>NCd8s7_I+(
z9;g%m?XF6UA^vYB0++?C+++qu4z*>Nu4+3MQNr_uj-h(Ck?j6zNY(Co>_+n1w*gp`
z$)a{-bns58m9!bh#PJ#Vm3fJW_*cdqt{xS|EVp_52OXf_(iD+M($R6YavT%PKsAxB
zBkc>s8h3-VLM(OHG*IxySEPNB(rR@Sx#7-tD|m$@)4&D@?^IGd(i8u)V0+4G_BkHZ
zyT5?Xa2@YPx<<qwrF4PMh?o}D{2TotG0uPVRKf7DRn)KLagV9lRVs)@WY=WbeK@%(
z#a4=CER%KzY}56jo98cykkSr^Q%qgQ5cg{-|NKwFh7k@up@tI~YDG!<KE|3?H6=re
z<S<QXbBjmtu`tl4e-?ia+DZ!4$zOcIBdv>_0HjUGq3r+elNN+VK2mpMfe`0H_p1k_
z02#y~(7}Maxj+zfgzsP+q2BJi-g8wgqGKy98v|iH*eG<(CG$CQ_bd`SOYY6%jm2U0
z(YPIgB{&d0sx)pyfcTGYG^(|&vWFzQ%^-F71dqS|SEt{ClKR2(zX=f1*ny8Py0h{A
z8yu&i8+^h0)!7Iu1P&vRZi&{A?23DJAKr-<%Af%r9Sa6WdN+HLty>!s0ryLouG}Ux
ztp?&M3%oSYrJBj^e<6^R4iMI;8a(I!L;5Uk*|o$e1s_|CZxkYdhSEZMe@D6jgdWDI
z7@&4C0KzNwv!er`bKOu>CT(O2-I%XkaTwNWpC$|(Qh~>Vr+>vfZ3N+vPN-T>{+Hzd
zfhGe9<_1Wit3oLJugr{;LTiy)?BdHZ5#7~C*7&l(BCDuv{U4?kpSjF;Qv@A>$rsqG
zUw=IuJP46PGe5xoKLY85TU&akpR>MtDy@?ivLoo<YJf6oqv{1*Lz6{g&<DU7<kS>G
zVij8XTk(r@HU4CjtaP*Ei0qcF-0cZ68$~cfl@mm&^Y2YTkHi<+gZ<Lx9Cf6T@EVdI
zTA*=Iy|KG;-}do-SZn81>PfVf>?1PxT%3uH`ilf0_MPfm&Qkx4xmNJEC~x=x5S^`T
zNB&{jP7Ans11It?dRI#D3;RCa#R~V4<@P$uRY{8q0zA>8J?vN6$oKLCV68@{1<XSK
zyDIHDB+RJd2nckU(wA3%{{lwCf#to<6O6D@`MRyHYiu?71XlqS3aTF39a#71F^Cfw
z8L1Ie1C^zhzXW=NHiz0govn`(U=+=3!;^Q-{Qo`=0Uy{Y#gcj#v6J=xWhZ=95D5%l
ze}beJhGvEDYO*O6NCw;lpH3mgr=9>521s@f*ub1{2qH{)`CHBTul+)h?QOj8;*V%t
zukJRh&+7Vr|B`kOu*Kgkf&xjWzaL9=zMH~F1)Jl#rHjtb5S3r>gmmWF@wP@#=U}!G
zUzy{CKAoNlx~kQUp^CO$ldN`&ztVbW5oT?590)^nCwQOy3C-|xxxq&K)gN{KZH)jb
zH}e{>XzHmZNb&vxZFOz5?B3_Byj{qnRj343RMk!CAm-ZB&LAnjV+(dhLm02}1(1B!
zz*km)4kS_doBVUN^N8}4jeQKVMiJTC!=yskm%3ale|^3>-ZqxaOyK?k6UCJ|8D^O6
zm>jE+KKrQ5Ht$gq?N$-y(5Z0u3fX+=*%2M4K&Ce$MPZAZTrsJyp^9j?RhhFvGY0`H
zF>#!TV*uYv!%^WR+F!&joZIsz+k`VwGhB^o8}E99if{bUCt#IpdPOx>8cV>m)uWpv
zt|fTZuKr0Pmnl@;UF=uv{31C!GBnNX>})vfI6vU8{o^v6;g(^Hkn3gEmRtOFcqb+i
ziDI6fm<|t8q=-;$?&qta<JHR-I0Sk>ThZ@wo$=8dHwkO>`N*sG1aTN1`MUu$8}VmJ
ze0z0rCC^%_M@>#I^u~r=K6oxQTQ_kALy%0xe;d@=(}oxO4Motxd0Oo?>$&oHjn9+m
z!>s_iC~1QKBY0G01ZChmw9SV%a5?W7HuCSdS|lDHcDZ5Oa2do$T~#xosHirHZsjS0
zJ~@j$1kween_MKzo{>o&eZkUfk$+N^+^ANL3cN`7O_lm1d+EYY1@3PSU~`lH;iP4X
zK@ZayfFD!%B>w@SKGB$G4hy%<iyL607P<qY-LbEy(=WN>d1rLx-u*$K1@wn<EH7(Y
zh8ns~NPJAroCkmQ#q5%b>z|chDLXjNfjQ|ij`?f!QmZf4FQ{3{usUe;7~O4i>LyW>
z73dVd1zQHcl~Y4(sfDHYz|j|H|03(7|7ZDXZ<3_LTbu6>IU6gCyV9OsiAN{xJ=cW+
zb;BCf>$v9%wYAaXu^aY0W<S{&_0XlSOtmUG9A>IC8nbg~`SY`Ug|BfQMb^**was4d
z53jq@UZA=&s*V=a#Ul<qA^Iu-Bj>f55^jWhnaXGNi6+w>kp<LI{78eBs|%+HBQNyJ
zm{I$c*0{Z%p+9#fUz{|iS`|}x`^v~*>3KXf%!{2_>Wt=LwsraJG`lY{7t4F9$;4o(
zg$s}?c*a(as2V`?P;KJ(A9J`X=LM;-3A$k$4fPFXZzCKMaMAZMaqc)(8Ca)0iDC7a
zmgDJZ$Yt+(PJ1P#L<&z8Q@NJw93GVgtybSr!HY26?3!BmDG3sM5D^o9F&jW^kcn1E
zJk7W1c0S0L)wr+N=*MZ@$<{lFWL6N3-7d=;dCA{K9SyBPs!19I%`HkU8wt#p`>l_1
z&Wx`Th_v^hS*X&#J4aXaP=l;sAloQGDbjI~i|aR!4iQ8dQW@v^oQ@D6uIdNTXsYO<
zj?y-3*}&${?P0w#BOtH&Sz&_PnHal>8|CfA86rZtf0YCip!8ja6q^hA?VwLEG{nN_
z+Y3#TfbnlLw^Y+cFd_*8nmn&a7Q4{5&$)tA?>`)`34a$>jVb)2S4en$<5lPO-0eD(
z$IIvm9JxHkSJ_^x#M9{xN&ZnCJfY7zDN(O4Y0V?^21^}lot*AuF7~Uex>b~tcr_o=
zazu%I_*~wIT=h1k)mbBP-^tk<P7KTRO9l!&ksUlEz<zAC$vC#s?3?aX*D+6e4_k+T
z+3%VkS~N<$G$M8>BaHL-#k}35k?gZ@dLcHB^;3Twt>>h_-ll()YxTEFyx{3?-I1Gn
z&R$EqlU!nbuP9XJ{vXobGp?zwSs%VZ0TsaxO1B^?O+b2A5flLxmEN0_&_jR_irm;x
zkRrV)0wO&j1PDn$P<oLbLIOx9gisS8B>4xupL5Q0-t&BVzvLHw?7g%0S~Ig|uDNDb
zPou=2CA@t%ZwfFLiuzf1=XDFS?N^LlvZVNljMn=65aV*qsUrFMURiiUz|Gv*@WuAv
zI^f*COh?!4Gr4|0;0)i{8Zxn(GdkNdVb$k-N?C4lyjH(RhFcQa_L8#DR=}e60+(7X
zQU6vhkm_G~DHXFFk9YZ{aIiyKCw9j_7N)_PV=-QKpb=j(h*eU`*npOhq**!CO}GY#
z5f8V+^cI*b&t=c|F3*{=4prEfN-<0J9OZ$!n|#mGV5=LfYf&(}^+w~mfTp@Je?~4?
zVh%jp-H{sI`)5b}@+H!&uWm_M-mR%s{`oq%#HT5gW<8_Kx-R62nX-ZjuhyNsWp;1f
zRH#`j$M3!5@zcB&-}zbEYr~maR6u7Y^ZU+-N6!5EoT2OLcq;j+*gpu=m5-62zfGsm
zn7dX?h>{OM{j({q-!6|I-YmTo&^ve7rg3(7>eO#VdUmKbyCf_kHL%8R=J9NHS#Cc!
z7MZpFh8$ELB>C3*(CPhH=i%9_`^oVy@=<CL&}o6P1eU=cx>|uRC({sWvs<4r<H6(4
ziW>f<75(gJ?e?l8AP*u&+Bl@wYW4XXxb13%glX1)aUD7it1y0SGS1KAksZYuqV+xn
z6f5Sjq6TzrPD%Egi>KJX??WO-^*Vk#FGh{j7b<0mWbJ~Tu%d>Ps}FTBYew%@=*QH|
zBH#X_^A?l$NW0w|ob?};_|?MSScOkaXD!yS{fT8BsInm@(h_~usRhH$s+j3@Q;rSx
zs6=j7lIAzwP<8xElA+6U%2h2JPfxQ1QY&5uqOEhFSV+RL>Ts-edp3?YC7f68MK-Qz
z5gmZq=(mG7XrGISWKmU3AbOpI<&<>mKjV08kXO(XV7p##Mkt=IaqrndlxyGRjBm?D
z!2pkS=co6?6aNGPQ5U$k>D53mLteQ&1eG)JVz#$dqV<QOe&=cxFBZ5Hvlj%sk{~6=
z_a%uJ;8<%j(pWzWN1jVvqVdlNSd>@b>rW28MHw9&50z}&JJj-UQp&x5m3B9@FTHFi
zw_yH9{$`!Y@RKQYMyb>j?J7W#3dbB#@Q0^*lZgs=@J!_`I4P`RdKK0aEAbm9Vv*AL
z`zE|!8z<E7?&*PnMN4(0!M$_T8DCAG8aS`aLfEo3+iyY-%bHz^q9`R4E<3!e79SiE
zE}5@(8Yl!(e{5M}3Bz4=Q1v!}J*f?~1Qf<P$h~y=1O%?*<g%e?9g#bJzJ4R+@`*Ir
zcajAc_NksTw~JZC!Abv`r@mi0zb`#2KLo#4r&Gc?XY(k)E&)9T4R>Qy*(H7F5uSbY
zl~d(L+s}v4fLtr#e?rvA5}nLA^^u|o#`y3qWHxr}aMmqZUml|ibYXHmi%R*=#tV(i
zF0p3cH~_C|uvxB&CF~^5!uDid2NcAf3@QEjwTQ<;e5dxNAly5#b0%mpxz4|A+|DbH
zJwt{M{4<&5pt+n-F}$^w+78}aOAfjhkSk)Z^|e#jGQ|b<e*4I>hhGJ)w%9x5<+BF_
z#l{D1>-ZGof2bYzBql=%(8!jyHSeua{nh{=fTOl^rRDM;FYven+epBZTlsBicfBPY
zccd_e{x)bsi<x3^HqXJ`pUxWHzdZQtU@BG#k6iQV7tR>6@|?#HM|I8!X+~NX0R7%%
zDGe$cOw5J%f03x!t>-MRs2IVj-oNc=l~Q+7xL&pt78&WZgoEmF`dDWN__z<zJqBL+
z{Zi*Vy9>ZwidL=wTB~9IOwpH8ozBSfP~gHd#Jy*pA?j`vT$Q350}%b9Gbj~3OHID+
zMLOc{jZc7SX#GJw^7`4;fk$E8%~ZegA9+TepP7{LTXAOsSB46BEijLE>j{e_YeV@T
zPZ~!U9%}091qwgUlY~i7Q;a?^FsQb?$B`7nh#eE9lgbrlI`mtlQ;!aucm-<|SNmd)
z;%!@O_e5H~V+(Z@lDAJgdQRmr=caHTTL{V}<L^e1DE+Ov$e;~J<y9*|9i;HZ+Ayz;
zim{D8iTS`UbJZta{gYO0(an1zx#Jsk27cbAb+P${B|_9??6sBuOw}21&Q|+X#b@Qy
zn@weX#@2r<*O&K^F&d(SFK@Yd7YmH}bkaBF3`B#<t3yc8nruns#b!lpLo2blC;iev
z7RSgFRF4CBr*@A$@ZF%igF^IkWWcNnL1b;64zkuFxuh#>;BeRcsb2vHe_i%1w*HLi
zDj)W6dk3|O-TvA9qwUK_r_b1e2t;j}_Lg);V~J&dqDYFX@+r&sNIvH)H?Y1s`o!o{
zk3ahV$@Z`qSf=%><D^~xkuLV7AYB|gU(7+t=O@cZQ^}J&`vtE1@vZq}NExnPWUx0}
z(DDJQXucysjm)NLE(05^(J6^DtPC3Pu*e6gS;p=P6&oE8O?4;k5dFglB<Eiu`1RHE
z>~bf!tB)q!*@?NMFp*F;JggSJxA0ottMAa724fR;PEOjUk)1fa+q>ghzKI3zd4KIu
zt!WKV_{V~LI8m9`z%k#MzATt+(^V5YwqL8dACJk{U;L!;H0qwn$4;RKQM1rCRzwUJ
z{Pxajq_dMn?e*3pcalHbXkD3*EY0TpS+_K*ZysyOzy0=pU*XdTvls5^r@P;E%ZH5L
zI49Rqej@4kmHUnLA1$m$rBEGslX<O2qFGs?-`l$W?EEK#@1!ED-gefM`(94<3z7Pr
zPiLK!dZZzbqm%?V&(WoQZ^KwtOxxnbg0Ve)4hWqY((51d7CskrH@2D>InoJo4oNlf
zzh8;G%o3#IZc(wb$9Xzr`wZq<x`xgw`)jNE_MdNOOe<(lYqHC*4}Z0f)q>{uTOYY{
zy;nCQ_h|&jrv%~O4uL%TFxQFzWb?CO#!a(tJ*iwv(db$34;Qt6`@-TJUQ%-EW|Ysk
zfty5tO{qxfvFEul9SPd0Iv6dwOV=yEM1xDtI9|auF=?KW(Q&NWcCU7z4o4BuWI5A4
zyg^sYm7OoyCmFeQY(j>;=ux(r#K2{tOSCuvSxUy=tQG^Mv%AM3=Gu|NaHFdOm!z|3
zYWJ?*|C6*Y;HzZ#kX9;kHgl~E@XI*-QHZY`^0?yqZ$E?8#DP6w_^;Bz`Fk{JPae!J
zG5T*EIS#2FrNBPlDmfu#06vdL{-%+<#<?$M&k5449l18oH&}s5oy!$&R%3zX74#3w
zjv|iPOo2@2AIZ&d*`2A`Ql8GQj%?iWM~7ZQ{H{GI;Y6N^c&=seM{-+Og0*3^d*w;0
zl5Sp;rBLEOmODSv#(bqDeoMS`kIho)A?v_D)9OvKy3T>k=0tig=yHFCJY~pAVB)ew
zo6l^Nv&2DF_%c|Sm6G{&+5P}Zsr{BEsak6m5IGVpA$-kftU}{(lp}ZbvnUf{epwqw
z{K)#D4*qi=e*ONnYclqTMa-A@2ZCR1N7^l)SP-?5neYCI7RNc17LI6C#5*ee1w(cm
z>S%@ZzA~fZsxdomDO%|O`%ygs9o2Fqn}fTYXa&FsaAH*2_YJG`Xx4-`!2AKDvRMD#
zt>~>!cW&lwvk&k3RBHt-IJup8gGkw?#JGE%==gN#A6>c38U#+*EpzMV!@oN$LS8O7
z+5eCKirItGElPp}M@mtL&Op~)7ow3JZzAuW=waX5;*s}QIE$?Y<X6Ls6kUYMrRR$}
z>FY%6m=kHe;?02vKV925LlL9=FH79;BSQBcXx;xtJb8HZZu71&G<>&|17gC?6I7DI
zF<tgOm*d<&EAzM{65p(HM>J>!S00~JorB<>PTG`vB6<V!;NWjADT_EU8q(AAVc55`
z=YyuZrq9Nh&FFB!Uv#c3?8VFM!{ohH-HXonImN``vUd_(9;r&1H&lF3wt;s8T?S(Q
zKD=+WPHOhvXfw6Er4ABLqOXb8GZW-1C-Ur1_8v;sYkbZ<98r${in%MggVwPiatMwO
zp#uwo>>)<~L}7dfmmO=e6#!i+fRLx7;h!x$wUKAN=Z%rlx&N#loZDO$@44kLf6r4d
zR~B2>-;)%C{ygiaC9Ng<vav?kYPOwU^uyn|eCOQ<p1yn828UjO@diD7&AQ$1#Ftbe
z{HwcMH@#KV;DMG5uA*bfUH1Tz)F%?u;r{a_Fks;8G1^TR-Gl1wn?o<*Z%uH1TbloH
zdM!^@27KZP@;=7hZ{<s<e*v?ik~BQnI6P1I@Iy%rcO!LA{F!G(ar=2KByvoIk}1zR
z40v9QweL)%QIP%NPL?CyS(0a>PG4p7yy59r&!3`ws@yDTrIfE1Y!mzmRro!u@DTaL
ztFMhN{&9@&jBC~?zl+qQ_G!v7lVAUqiu`YA`muq1dx>mE3GwM?S<R1rD9;(n>g|;`
zM?F^sqP`r-Di|5osAD~6?uTpo^&tP?lfT<p{1MPUiusQZ@SL5m0#<8d`8BB`_B-_^
ztBPa4)cy8T`%hVAz)XSii5b6v&uAGES#?kDKRu)C&ol01TtiNSi`x&*nVxRY5$k8S
zW3`^q!9>YBwzaKZvi$>9{K1QUgGPUlqk{*fyxrE2Z<F~ZE?&?5*lcz1f`squtS|V{
zu0tc9tj%i*@h6J?GvMEG+Mkc8Lx%%jPgsQY{t5%LD!+A}yRj7Hf$aRtl3_$$?oq)T
z7c^dv{4q}dJ#T-$u{aX36Ba_U(lNin4$ciY2S@9)9PCMC^_=mccNX<8I5@RzGz@}m
z|Mz|Wpk37mrNZ6(8mgWBv|_357p~`CZWd(K99+L^+%LexGvYDW_f~sh_2qvWx4|Lj
z*V8;7@M~J^8wsN~AG1eUv!lCsBb=k}+)&;+{2$l+_JhV>!8V*x_*3Nk?_md(&px>+
zcImq0rsa#HXZgZA_p!_WF+IOw7S_kBN}ZHoTX}-Mz1BCucVCAZbh0V35s%Fs+8V2E
z0pCQ|1pam9zu$e~a-Vn(LY-j7y3tYa&63#rleLd8FA%H4Jz1XI`(262K-#~00i^vG
zP42%}cK_RPK$O&4gVrZMZT5|y1n<G}6b_Aa5nK9;T~2o|1Ku&AoUZ>g>MxPsH>Ao_
zQ*NxVe&6VC<wLjc**~gPf@IQSCf5JMkR8R|i<c|2Wca9((34V&sHQ1JAFpReF|+?c
ziCT2T46S{xv(gJ*DqqcE><5}XZS7M1It{mP{U>p~!~t#D;yjraKU4VW(V;Jq67CmK
z!y_Zjf5@Hx{`M?skvp|;a%7-ZG-@XeaQmy(E%w8AJui^mKj-{0YyY3?*G~TH`e48<
z4_2Yke~{mOqO{yZ<m3HB`oAyRKYxnZvXHoGIO>b^e|SWs&i~Bt{~vP0!svqcnTR8l
zPc{GdDE8lvpOv87;4#?xpE-tqd)O~=R+7XP7d!R`OaI^c&w9g_|BGJrZ}0VLpKTKi
zkp2HTAv|keW#IqNkfI(PIqEHNsb~ds&*MaVS%|eQmf^7k0m*XS;C*i~ZDQEDo;wuZ
z@ipa%`#>no^~bAd=l;pN?T(gXptikK{>>VLIsLq)gM~bJyTW6cDb^K~+sHlO;zWsu
zaJ&%YZy~ky<L7V@Z*L4Kchn0LT?he~MCmfCudbRCDvN>cUvTsQQq+fI?Yr4Trz-E(
zI91C#R8i97k(wSQRu2U^$r_a96I_q`tW(<Jm!JBVdpBrD&z3}hom_$^9H4MOW~sM@
zbV*G`ikq^AL`3K!3s-H;x@qcUlP{D{>v7)|cK$ZGCg0F|{oJ^Qc@S_pkw;y*Ekl?%
zqf1w>rF{Uq43ry%#2zERoZT)zZflF~_~3}Cpg4tVnQHBWm%pyD)~wtrF7zLGnVpTh
z&^l;Yyg1P(f}y<L+!~%0noImH#<O6jPQ=LrMj6FYXmTe)1byeJ^i^;BaLTrY|J)|%
zaw^Q9c8`7Is-LY`r5WppCy6#L-Vi(gZ%RB_PYmq|&p{I^vnBrHTCFQKSj~zROD&AY
zbL2GFibSq9V|`G~R)Yy0JvcX^N+S7xT8W4$9Fq2&*=-HK0IH}h>a%FKbBr>jXj%|J
zt69|nVU=xKJP_x{n1pt2mm-tU?5v6%?}1onrq9pp{zVWcwjQDtHt4Ya;Z%hI=dOZ+
z<<70$qX}1U6)l7V8^V^paL*PN`6OiK)`=^4j?ud4eb0B*)q+0HUY*PAnypK*DW#(=
z<9EvAX7<yt|9gfwqts+0DnP>>3^1(XF5?;R*W}ex>!g>MixIZ#BP=)Q1b?Nv2qSEc
zYzl8!it_20NX35$?d3kmqTw^n&9eYx{g2+|z}kg2?tU2=H0{_tFnuUMg%Xs0b?(%U
zg_x;|?7cH}<RRK@EHzwjS>xo;W5d?Y5u>m&YrnnumJN-fZili3?T{G>=kZ9$3^;yI
zjI2Rco%Gsib6|>Z0k=XnEIB)=A8$>_a>c7WKo`zmMXoL+TBCbwlTDX3{Km+!sFi)7
z<dB%yP5T_wzf?F>>iXvp1Nkf3A#E$=E~R;Kw~Ndlq{_I4c6G2|yZ5&mEmt_(S2{v`
zhnk_!reoXrkhrlLF3~li^K70cvf7@hlI~_7B`Q455X?XhZn6ZR16hc=wGupqu+eh5
z8Nv}K5|A9msO@C60Z>;D>Uf??PSMM>O%@)@&H}0`02dyUp3gldg}VFr;w|56W7cA_
zK*Y^r@<p?()w=4H4KLD|I&PMwNF4*j+@CU@N`{yp;qu{q;qsoC0p~PMdUW8PR%?5&
zG4r);%MMhEu=nV?s(kM<H3572@jf8>s+wh4417ec{eJaGoj?w$FY74mM8fN6iO<*E
zwZCBeC(LH;#(pKR4EBdp!GYaQy9iY|3pV0<v1R|?y3?j5>n-&XvoKJ^`K=uOpQpDc
z?X)i7a4@?YRk6q-OXaHyb8QABUU36awV4C!@h(i(0V<i%cQwp(?0a;{ci#or$1;1D
z^b<h}=B!gcEjr1)?#Cy7L>%h>u5Xt-9*3>3RwYjcAP>&wT2qs){m36I5VT{W^oP*Q
zth`tms~@9mPBR@z=u2eU1{WNc^$hRuaOJn4HlbTs%?`vKl<j9^fSpj=KQ=u1fqn4A
z)H;Nx!%DJ73?5W{*{WQ#VON{glH!C;-c5FsXOW#ELn+_z?i#C0(L*(%iU=*fU?wJ&
zk+zJUn^UG+b1ELYC$Q<cEXl>IEr#{4pL=it`fbY=C3Iu2@iAbyy7WWu#D=&#$;-%y
z8&k>m%j_BdZS4^HRxz0qBDmYZ7|S47_Pk7jyi@`2BEKa$GuC6)x44-4UX@E;?d)Vs
zSZF!#4dk8HZ#(zD0@09TAp<kY9iq0orZw0Ls%58X5V*+3#X7d)eg4sd+fjSMt$cnC
zf2gOd&1H@MEEe>)H8sQ2RJ#GdqI*yb`NN-H6HZ2GIZGVP5F2>0BCBNJ?9)HWaGIH%
z;(D#AJh;^$9X-^}`2+UXOT5c_Sqnz{t;-UrfU>*bj5kjrMrM^qlsnm)3p)qTo3?Ns
zkhx)j;H)9JzEv@x2-a3?`YhW$J7K&NTbJc{j=w%$rR>=;1&b0h99f?#DE_n}r_d1_
zh}f$UVr#J8IO;8uWv#6KVoT|Xe<q3WvXwZ|(Ig+Tda0N^6|_W}@bckl-tZZPKlFxB
zYF004iY%j6Gby?Y@5+$p%vTY`FI)E<MNZv((z(+=Ud9Bf55K$e4gHMUA1}&{ol{Cf
z@-zrsLf#TLd!W?@L!tEMG-;S7+{{K(eNOsfwAyuGt>8tXz<dV{lcI1%G>0i`$SlOq
zLN01tRqcb9S&ct3p@OYUkPC8m$#2wrN7+!eq>sD!mN?ph^(+ugar2aV_}Jv2(UuX1
z><Hry_1tx(Iw@L?>wG#P%uKRSw@I@3C`-y%MOL8<NtnTzytDr}C$Higuh35b@t){>
z?NZ9!Cu5wp$iS)jnL3`{qCyvR?dq%e&MK#PW8)e|UPb>?zq&*Yb9CUhc~jAdMLW9>
zvsS4^1UGbL<llI2A9}at1C>LU0xzk}6m%QTV0n7Q4{&&bN;|XQowNZ7w6U%FnxcSx
z&Skz9?!>Lk2(l#eUWyZa$@MaKeZ)$wVN#Ov%GjmcoQPt^vz7d<(254Y(z)WNd1l&S
z0O*qm@UbvNgF`<taVG+~V7x>BrQMc3Ku8xFTtCiJW07003k_v5zH48Kev001nknto
zEM{5*3OtI9t@K|EwDQt?`-cjp@lXw{-oxzxFrZ9CTV)#J|DN}o^26w*sU}(}Em_@e
zPn#sM%XH^Ikev>@Jb{Z}Qa0AIA(Y?IMMzG)C4#))V;27UhOyhzw?H}pw)3Cc@&~AD
z%GGq#uUwS%wk(Z$gSY#6YV7513<#p;rY!cf94Njul!W$@)q`~oG0{p`<qcdB`Uydm
z1ZZEB4xL(_W^OyL1Lq?6Mm1=Wuo;$1(Gkeg;<7@Ob)V?Qgfb}3x&1qw)62z1uG#Vv
zxR}QCA2F?y8~6x2pSx&!XCkJZ>7l7GASjVtj(5o_jl$8B_}iZMDtk^0#SZSCAZ1Kb
z_`{Rnf=5RHe0w%rE^c66pLmBc3DEoHG=V*yv1(6dK(+>&@_KT*+Ram!!P@dVf7X`?
z5UIAoUaUriZX?>6SqP+4!I@zk23vjP%uaV~rtLjRKW!d{i($~mff{<CrZG;hYfh8x
zrn)h17pMB8rdXI6P>>^X>N#L2X}W;^4n=E(CE;Z0=5_aS%xRzZ_KNK~<ecJC0(eyv
zEJ$6`-X_%69Pf=O$cv&itPWXbF+nl@a%;xn-An}Ov~keXmQfPneTK7>-rld`%tvG!
z+pdU^k6A^u#^jHtiCF!Gx`q3~srD>S&OcrAQAj<G4Cu2#>NqaWn-DI6F#Z)na!aeu
zBPP13x<NT%^Vx31kQ-FF2~NqH=`VmJn^4d+Yq{?I;1QA_tF8*EI=38!plIsZfY<`7
z6mg`~E;b31Y?F;_dA>%@^vel)7#O^+J{%V(EMMtv4>gwcvc81SP%v5fN!Dkn2W>)Q
z)~J1#qx0}QeyGY&#Cqrbp6gF?OTB!@eHl(1&eECQgPK_L4&5DYm=?;;pGPU15KyAt
z-uMf-NZOGq;O|n#|H)us>Fs@vQgIU1%`S6!K+&9o+uH^@x!!P~!eXLHcT#cUuXn>s
z(ruodho8$d$v5{>oHneAAh+TK!S{px*Wqw~L}a9<S6{6xo!F6O12!iv8^+g}+bTFb
zP4)MBPEX5LWZd9kh)Sl)?mbW0aJJOqUOxz|ar2Z5-|F(YjC3^Utet;1bhXW=?1vU`
zCT6{Sk=&M|c<%n*s)Oi#+tJ$KCKrL#g@wcl<*j2&2^I^l!Y{TkETD~cu4)ds)3Y0`
zb~%dn9wDS(-4b!zX+rY;FTyNj%bhvryBBCImyF}7d?$j+=T#N{YC>&Gdi`~T^(B^<
zohWUE7<dEEBAm72u%RYM3y4*+@kcxB&T13CzqWR#Y^N7Pu4cJC%ROJb7_=s31yxrm
zAIxJ+<@0t^{QNNp$d;sp?fC%Su=ud`+*D_jL7!D-Dfcm>akB#<HL}iyQ)<UQYf5D|
zkng%jg>VZ&o+6PdK#Zxpn;}~ClU7hwpNNE~=)4_@dCelpZ><%W>0+bvqh*zHD8jk5
zcy%IATEPm6VI#(B3ia`<W98Nl@nq1KH$^)~s>S`v#VmZ7uF<m}mQ(}q^6}?ttQEFP
zZ4dIWM^Dv{`h~vXTp~HNu8V30Mekww$w%GpqF1`*&Nq~O<Cs^swd~t8)wf9l(k!?g
z!9q$)$9W!TWsQl-$0IedqF`9Jg6vJvf>v>L5%cRcNN4^e=?6mAGq{gs3(f6uK2rdI
zQ@_;2uD?p`01=l%gNH4)$bMcIDdL}>KAU#TYP92TDy^#C?jUV^=6q5jKS_3E+Hy`q
z$!_~>Qb-pfR>72N-BQ`$>eAYpN4%2h+FpMIHapt9(zdg#X_s7LLMs%y9=5x3bT?w#
zr<d}w#CXSNrzu~%L(Lo}jEvZ<C;Eq*RNgF;`+lDu?h>sPv4du&&}<=Ma4GPVW8W0$
zbCy>Q!Wa@jXlzi-7&VhMHiyOv2Az1mA9O#ynKw@@ditqG>eN3m=CupgYnbLcO`hmX
zzGOR$6N+<5rbjSY)+L6d?^2T&HYYEAh>B<VgaZ_kz-O5E(eTjScqr#=*_OGAg?$VA
z%CKV@GVuH1+|F~!y;<a=bhh+!$q3y*g#iZv4G4^qpP7E|A+yWH8681nbr#}Cr~vI$
zWtZt~UFF-<*pVE=-wBP~^U2wT%jkw67wn@JjR89X#(a}?LBoix3r15mXHGk*7F_Rv
z$7|$E=Qg{ia1xM)MI^At(zF?(?0!v(iP6GbjLkFJj$n9(;+0&|uXy-<`U`JZmp9iv
zhXEsawiZ+-FZ?4hMfytajxvBlM1I|V=ewZKU}Fy<suU)DWkjhnML8e?xb`#CnV++{
zNrh$w<NGz`Y!hw$xyg>3;#TOm*X^2Ou}tM6X6sLFt`DD?LbR&~OC37Pd$iEy5UR>s
zNei+m0he7jylD!;Nd1ueX!sF-e|tapNEO;Bt|p~QBW=3E=Bp8Iv@68wFq)GOq7GkB
zUFc%ufeo6PmZ+e84BK0c_u%(&G97@SDzyelD;(fbT%DG*VX&6~ZBjYZ?1@P~EA(#r
zku7KniyIO16*5KBwakm6r5}{@7kq1tnuOiV#gs?rPvwQxOn<^3roIF*Fx7bt!XWwH
z-kRljQAUC@_5M`osNc4_0%m9y{Cu|R={n#X{~k#uPd0n?yEpPdr;Gi3sY|Gv-Fse9
zpg976+amgv*cG3RJ;36GIF6c{r@``*|6-vBf%M_09R&}S{()CojO{1brf0xokas}Q
z<Ho~@UnR=Mzqy>=*z(y@T0o|Br}8UF_lrKimDp5cBE*n8hmUydFUR+|cC{_O6Cx>U
z;0X+8yj5-2>W;2A_uZhe0yu0vf%7A5I8{`2^Ok>CPI+)Ca75Xd?g7=CG^YEdOIsk+
zbfHm8UX#dKE8CvX%%Jx^U|digqbj$pxrC8@)Y<&{Zu86V>sU*Twha*yXHz}ua1mjc
z`D-UtJQfzqTVtzRPr}-@W8j&`43%E!yf2j<ix*~0O_l}a{*tijps#$N=q$mRU8eoi
zej*!bo|9*oV_K~U11bk@C?GD+3zpl2m>cejS@_N($6{I!NQ#~&DmUDvebm&mdSe$j
z!!dTm7lhf%S9~A#rRUV()ieZh-ch;;@dLY*<|$go>gJ<rVa3a7bHkj<Kl}~ki5r&r
zZmx|<dU5~05t9au_-s25USlIYzw!*=9RjK*Cky7(J`}N{1^e5<W5s;>aeLbSqc0!f
zep(J=SRUH|r-f9Ekt@EU!H3KdMeaeXZB>y1sHNLx>vRf*RJ=GG0bB+7oRXe&q}wv}
zqGc-<Z1{&OsyIl}_5$Mx3YG4W*1;_jiB2w`k8}hlcxJi~!_PZCt(r~(a?jk&Zg65E
z3S|Vm`XJ1&T<G);v^jEQQ3hXefWS&hch*QH@scid)N55CA<wtq)75yrHL44!;LX(^
z6JB2{PogRz*!t}wMX9&Sz5p^&CdjqJ65K8H$)Cj8^sU}vJ$-+#6Y480)ad==8im3J
z3&vi*-E2Bf@8zN`O4@^kwf=fnn3J6f{R#CJajvtz3_7`x5c-k&DPP6_e*M@yX$1(P
zIaSr{kgId1rcoR*Bn{_d>P#khC}Pub5?0TXv*_P?x4a%#!&|gcFLY$SGYk;jWC_x4
zri?2(^#)Om4P|AYyT}wJlQ&4zDHkq0+t>}{73$`0QBu=Fm%8A$jTtatLZY-p1IIc1
zi!q>YcS(VY16L`hF~v!)ODw$MI#$vCX1qF=d&FiC;<?Qv+?oGCSquuobtn-Jmk(-8
zn*{hrF!7%zI!!HoaG+&Jx?Cu=Wj+om1?K_uxe*hukEj9N>?a(wSRh7XCrpOduB4MW
zv;q2@A{s8IKE2YW4Gb`|4A%OM%ogmEi;g_$_`}l9yLXT>&_pe@dxSL7RzOi317<K}
zX6W1u6oY771qx(UHJZI2_T<(SyuZ>8H)%(}V~`yBQWm}=?23GSFlU5Ct^x!Ufu=Ba
zcx2o3#%%PrQ(Tb%rh-~!8OQ71EQWDs%HA3?V+}SNZ^+0B%Oz=ZbB@J-%hlY8t>$LK
zu3It-MR#zm-=A;mLQ|$k_Gql0AzUC1b4fkVDlh({QfKlR!=jbqM7}FoDP9)Wn%t%q
zMThL?{^D`uT*Sb+j}ytt2E(n4>{zA=7drzn9=vN(4J58K`25szo%gV-9yUS48OMsO
z6rXuO<~iG+Z!oRVV&?+43u>Hs`%mP@U%7JK?(OX9W|c1ya{=X$7WOuNUV5-R(&hnl
zMIB1=RA?>Ydcc@Fn})FOBTAr^o(SWZGIrZLGaR4oKhb&2mBogS;4E)(w$}@8HycLW
zLrWJJRce5H&TQB44W-i-SU^Wo#B|f%@U@L~q_%8)d5A_@@=-Cu+BY8{p>+lfE9XPz
z|L9*S2gKdA6*6?``K>?B#P#7h?j_&;+Eb5m5nlu5)IMu<1v}V)_GZ>{3ymPphMGf#
z7#Y^gF=8VA!RSk+SN<wzrhSyGZL4f?-}Skdv0A_yk(bTUQI^W?y<WjG@Gq-+r!#}e
zl2mu<Ejtszx0~)fytp-7{o9aM2C~(xvLQ%U>8#U7MC;%7R&^q>6Ocyi)0oHgi;H!k
z4zqKEG@h}TAKEEQg>$d=atK3b(B>%}gWa*#w0sVAFgUB`JE0I#LmiPbDK)I>a*pt%
z9O{W>p{#s3QIZ4Xh1H~n)e%G*LM*f<HV!-2sRVe^c`ZBa_R>Z58coF7&LHgy`ie8A
z_bKyC=s4|bki~}z!;fAYFN){}g6w}E7ztXb!4%(`P`h~M3S!StSvKhylYYv5!bz%@
z(anXCo*20!s0&>a`POb(#?>x^#_5%<*3`&=MFt_WM76m-&}Lk%7*=e(j(tNn$BQ$F
z4HpM&%B!x(-L9|R;+})gk1Txe6vOU(ml@s9y+_^KZ!J_XV<Gcrhmt#98R=V-*YJd{
zc*@m{WLYp?;-bC$O?PK?U3q!z%0zfD`ItVfi(N+-s;eKZd%BEcjHwZ3WXXaO+<N(r
zbA!rOQ;L0#M2yeE;o*o7D3CibeW$Q!u8?E4Id=lSoLh_-W)fea!Lo_TP)2dg3)@jK
zZ>2QX_shTZRj!EMN6de~nYHgjS00Hrr&WV`&HvguX9EzD+r19Z9NF?LhX0}!)rduS
z;0M}Yre5nN>B*&--kY|jz2aE<hEFzEzKrd6|CsX5)p<^)o!xzE<#_noj1j9>itjnh
zkoV<p{BM`bIZT)q*9wekd1D&FQ+fY7XR9n|t$OH{TMFzpwIWv=XgW5tx^|uvt?A<r
zfO&<)s&?;^dK7gE;pVnOP&Ih%D&FY(Zl=*0LNtGbmMPgQxK|sgQJVQy5N@|eB{n7w
zKT^sH-yV%OmCgl7{XMd@bJ-vW^wOr96~gjdF36F70HNn=8{^!LiTJ%2DwPhCJ~N&6
z-qJjWKd6)!q~|gp@B2VY0|^(a(Y?WKgr&4P`fLbp{etqWGTN5#{C)vLKP~k!He}A7
zxni^S21J)pxOUs}w=M!MvQ^g-2L(0u*jt|OO^>d(ikNwL7lkLo%39SldBYYeM2Wx$
z1cCE^N3S<QmuYVxMMsK=TRw6)>RBZ6S{UfLP2=IBRll~lCYEocGLex2pF$KjhK{xL
zWm<DSW#A<#wv!00Ef~;5=~g@!1#-!Nl~j;zGW_l9yg3v|=XjjpQTgCsa87+B{6UA;
zM;GZ+3RZ3@V9nB5Pf+{PUaqDM)Lcu@S@zjOMfcT~!P3|pxg1OW;-25>@ekhb<xOz~
zEfOTsMmSH>P(f^yiKX8oYKHro8cJ@lDQEIk>mWu7zG6OPOJn1$kt)YOYfCROxXL)v
znh%`iM6_X`iYQ>l)-5JXdHns+T`T3=Q_dh4Yu}Ng#CXA+ZHw*vhKks#tVicSh<LC5
zl-S{dhwqn-qngG9u4nylj~Hyq7E_}87~+vthdEDG??|;_Z4ALUvh2X{W-f{r+y3&M
zqytFP{MrX2=&A@Kwaz<$8kn10qT)%%$PdzQ*60{t_W|Lg+DyN?5i>5sOy*Xh-&$X<
z%6&4AfK9o4SceNABgGZ^nrQ^Z9To*Gr};!&tV<-pFh}9{5MfP0(m&+RkN7JT;U<dk
zYbQU4&40y6(XH0Wa&5U})e(mI8-RD~MZvJW25pFrY%RkaDGdICs~-y)-o1rj>^1Y-
zlzj*c*7o*()`7^thkNs%|JE+k)gtGDW68ivyy7WzzO0o<s(Vev?7d;sQ<WI9^<fjl
z$Z&_2+3x0^;cON&GbzlPmP>Z)b_KD8@4Z5SoL#z;<*L-9nO1wP)#Jk+S_)WvoGx@@
z;@cSzmruw(bNt$cz6S{f(EnQZ4~?JR$zDbVREfqbyN_JZl?)~N&^waK-^VjZr`pj?
zov25{ZzSy`wMqsestYE5j-?ihbFZ2|2v|&UagWjyTv#@98&B*?B5Dg}$!5Kv3d^KR
zQ<eifqg<NKr#c^4jyZ59ePd>cw{bn@K>qjA2v_0f)Tz88Bij05yZ62m1YPuMK;KJ*
zk>E$$l+qG5Bt&DJzj|wyxic+mLb32Uz^PS$f22`Zw(Nz&>O9xH``z5Q`0WPi;_$Jp
z*VAz(<v~z&LDDJBg_}Pvzp(1WF_MTqF<#!&H_Pso(c-g()nP7%M%<i!_l-t3K0Q`S
z@4Pxg5C6y}RwhdEjqUN8H5Vgew|a>jNPGnDBK!kvt0K2dF$fJvDcf^2f^p~L3#{4N
z9qHXch-Jqx*JxeKT%vaP-V5j4*(v#E++d-VvcOKFu=cmBSMtxc{_R_bNAXfC06RIj
zJ_x@g1@w$oD%@%FsGMGvj2pM4;C^FjLZ1iX*oG0?51r!f^R{@?!(JwBMMq$(aub*#
z3rmB}M5Rk-Z#g~2{A~C4Ct-@y{TnLF1HTm`xs|5E9){rY;kg$2H1sJgF6VIDHrh(P
z_u={u*t*wp=1SbhY|A3+cFO!}-S?WIsODn^K@raUxaBM#8;cm(`q^ueX*s=<uYo3)
z$zDh64Wa6QaDn<f9}u|vC_buYayG`Y)kb%XbrcS(Lg@s{8#@ui_ow@iPS`;f{^krV
zSZ1MD?f2{o=uzQjG#B3R``Gvrlch%B#156(fqp~`Dm8%<NZwQFhzC{^qd~Ml->CCx
z%7=P5$Qzo+03sQRtmwn8TTK(!0<Y)Qyh|6@{ZPuNTT+nACwmCi_KB2VUFgKE+ZEbe
zwEl7cZjsBJa;AOYNLhBs#eUBN+wG)|Z*EFM&AED|Zfv=#7ToAT#E(;#=+H7iCgHr?
z^|}tFJU5jq0U4Z2(SaD=j7&27-S;Cae1}0Vo$>6Omp=3tN^Dhyc;QQNNn$Zb(BVQC
zaJUPNpswP@#DOMjXY604him{~U3=fdFvhLj3wN*0O?a84_-uqt<;WIsEPR^{T;RA*
zd|r&)>OATT;(vU!!?wUB$b;&vi@3w`MU=O{c(vwK(OW;KxXVIqT8ujLe7wR=k0g6W
zuv$DK?CXKbuEzv#Z!%#ZiPeY6)ah0XEc0*c@gs+>=(AsAEBmzd<tg2hG}S9ItW#PB
zPp#R7X_s;NU;QvpGL{R_w2Wt1dWu<=0pM`Llae#5lV8N9?ilNefuOWKOz#T|*CZq8
z-JnFH^>elku5LLYbLmv?AmxdWIojw1Mj>#L{Nez1O!qS&Lj+{s_b#Wg0k!bVG$(k#
zMLd*IGk)T#P?`^!i2fK&M-Pna?Y)@I1PcxK4iy$gQ(NxdoT$k7+FFjtRn*fz(=o3P
zDIba!Y%NhfaRBE@h?8`X5Zp!x|26J+&x-&itMEnuT(k0mTit|NzRKjwzoJ649~b|D
zXQI3>*l#?=MVX)?j>-(Nof4(lCyX}P;TI({O7Ik~aF>CSm9I*@_`RXmkL@p2;f70y
zjsYidY>y8JM0%1>ze?iA54(e#B(xOiT>b&TZ7icOj%fSV-2-e$MD4r)$ii_<I?RAK
zMBTRO>dWlGg`3f3y&@Yhfxoq$aCK#^cT_*+VR%q|dj0lpcrPkCf~CjUd;vYK>e$HV
zMjK9Kk+Y?$8Gznfpj{-T+$0dn1|)Bst#Avz0Nim;YFo>^=0tw%NA7PsRH*z!$`t~*
zQZwRa87+5w{F}6<o42a=9EJUf)n#%3K823LzyR2Zm5r4+>PfWkY4TY@uP9Q}7EOFX
z!zN$#?hr>xF9_|y5Srw}Jn;kLPBhi&?2|j$?OuJ;<H(5S*+Sd+_Rt=apM;f_?;e6-
zh+e0FBuI|eF0>#6JZ{?n8sNf0ymFY&?9oklQ3+wnqJcf8u6`N-BfBWAE*aC{AnM#x
z>(e0Wh9`kA0%;CX+zL~cO1%~zFXH>y+1DKG=F-qkkhUkID?y31xdAm<RBFvs`0KNy
zz0I9*blV#)AB7jjdAf2nf0aJ_Kp71R<K3@t%!6_8hTmFTPVo)<$A2(TWy{P(IXq}l
zT304(Upl2o-by&|;|?w?noy4Rpng@Nh6PA2<(|uQ8n+SkSt0ER`XG_zJ{9N{M`tuV
ztc3GT$HkC0G|>eI<Vw<(KMkiHdv#>|08VhAQ16v8so2A6=|eD35#G~FQ3l>8Pa<l%
zN=Muz2Dt~zdNVt5Hf~%o0bKJ!cu?~Fz9v1uF=fHi9o=ofSoiX|8|eYNCbN<e4V6Z!
zK{$UQ?RTd_-i-z-c{hHe?7>kpfZoSG0+}XXsU4Z3-+71m^<rW62WXU=Pb#Wy6Uw|p
zKdR_u+RPRi!MMC#^C1;bZEt%tD7s<Kh@@5u@_O@Cnx_56>PEu6)Jj}-ZGZd(Hcm@e
z(09wY+5aVc8|@@(8zNg7_ycUxtgf^?|0F=Qj-)CwclZXlSC!yzTG8sPF;DrlAzjq{
zh9QIHUN^&xhS?JU)2(VhI_&P{zNT2#5CQfCVdcicAM3_?`bKZYc?PZ3GWWtm5_E_i
z@yt{Bt;Ds7w{>mXaWz$SYM<1De#U45?k^6XE6U8wk>u`4yGY2}8-@bb8*FPWppfFi
zOsr4<=oL+M<dM}WxzUp7Ms)q6qN<xSL?%Q%co%QD@)Jq^meBivdbYQeo{4PRZ&$SN
zn8i-Y?&xhwlDYnQwQo6Va@HGlhISLw*^@Zxv$1k#?sqO4z*nis=M&;ouJPqSP<=!&
zmW|6t3;1FW!8?exw%ttOU7BO}F3w`*{IU`JTmroJaK3he%Ui~x!iO5LBBtK<1kU?j
zXwuwe^;b42lzvZlj}@i06bhg_2s1YESa5l*AxSu_Qd}W3V3Y(TcH3n7<tZ0K%0>xg
zL6%66%}gt2E-74z;~Vv|wE#~a4yeS0@|+Y`gHu()&q=HcROwz3bPm{<9s4U9uDbE6
z_l^lOhDY`e{gb4Xc_r!|;K()gS>j(Gq>U(XX+H7Hr`2h6VZ@^T9`v=y7andUeq?4o
zjxq|b(4=k+Jq9W*%p2z}=)nv7*~Qnh>b5?2XryCc*+64KYU|ucFF99&{H$Vm?y}Vn
z^^oWx62xS67&q?UoUER!wS3S5HQ#(0RHa&bj2sZ0gcJ0BwzQS@cD_N&$f$T!w}<3R
z?yG9ry?tPU2iK>L(h^TCBR(-Qay5M>{Pn8Wva{@4Y*bUGfJAd)4wA;ipU0~8l?X>S
z@_zCRNH$ShCnnJGOk3=x38>1d2NybW-_8EMO10Q7zC(m5Ev&IUH{yLlS^N{iDCmCt
z?V{T}IWly^8`pgXnzBnlE~Cieabp4CSk)&*P=@%J*6)gXz==cEE)o=7u_qk<&}^qI
zrJvXplc&aFN+*-P@)X(Z=ZN`FkA4nuWP%oDoh-e<-yzI2@{dy3v4#VYbrElsuLau2
zAe4PgT^fiIq81B~(Pvmrf{7?2eIXP_>!*By4(y`1z$*}sKDh*KN<PQ5RM_-F>`Xd0
z^Yl*0lBf7jtAgp%r1wvR@r)NuDHU@gMHcQ$&ZL+m?Qo#O;PNj&y@XFAS*uPV;p-C@
zv@wi5lphFDkuLF6`>M9xdTbiW>ExkHNcBt8D#C!}8hkbrfS<sBH&DxDZPo@&jeb9Y
zy=7pn`mBX-b9Am&owHvLG>suoWn^lp?^U-oqG~{pdP1E&SZk~p2KWWX3bv4nKpkO#
zF0)@}V$0Qm3s?66u>~hG<L3vP;PVzNLAcxJJ86{(t1qx8Ah>yL4WIx}?uc`P#3hfa
zyI>A*k!;*<1Jxnl1<WRO&J>!naZJnh3?L45WvrhDsjie6rCudh=dVwi^HIuEUZ&88
zkrv_G#huQzgu^F%ELX9r303#Kw027ZtrO1`-TzQ5VKcE1_ljQ`ecA^!41C`B@Ic&K
z)g{rVe62hkxSOp@AX)NYM&Jtqy`fX--Fqsexe%sGdll{OMc7*?<0IRy4Y%$Wh))*n
z@72I!WHZN&B1gL28?HE^Lk1A#cwV2wT>IEu=!-~{4Sk3cHHh{LOvqAkc03vh>Qm2j
zY|I1?TlI0u#0i|Gab<(R4YLYxem~PFJzO*S>vZ|6odb-zE#|AI(>685H^WOKHj${S
z`7yjwqqb&tJ=!V{iiKa@u+7MQLEG6GWtsV|c&}ckc*2ua%JBD}rqCTr30^I&-P)<=
zJa6Wn$?AhFt4g$ZbX@=i$ZP!pI7+yeheulL1n*epLh{?`ZTGCUkkQR!-m*_T{RWB$
z@)rfYWG4&zuPT~RF@crl<W1D!i4&QjVua1bX5-{j8kk-m_c0-5E?+lXiznI6F!!AW
zJ^OI#v(WeF<%r{4kQ+nYA6jizwBB|Ju86{ZzT|S}S`k|NxMc8wMflq)fxI5{H2v0)
zf3;$~-FBR=o5kI@LgD@qt~eLaV*AQJ;J(DPW|L+dNQ6x9w>?@JU4%>`@i3d6A||!o
zrsHDmUKeh>!pikTJ8RA>Q4t`h?pmRiCu(+?wlnhMhwX7s^AT8R(@(HN@7x;<bsX&6
zU_0)kf<-=W&@2GFA3{m~koG)4C)Jtumc0z|KRBMV=na_7P`ge@F4&o8y8Vi1_44QP
zinGAJ;372jlc+7SaazF+%jxi{+*5!rIX3&?(&zoA9|GcM3ZCm&EK-hb#($5-Hww*9
z7OXvfCI;ANq}G3I1gJ$8p``KI%Z&j8CTO`irMa>U%D3!gN~TG=3?W&uhB{4+--)}g
zx~PUQ{}zCY^(HLBT%eRs)lo_ysAg2eZhGb?gaU3$2|*!0)mY+teROZDx4S}LH1|s}
z=ZZEpHDObQU~5&AN+G%Rq&DU3VVLI3n}L`f%gO_(;w5y&kE3k<01q}W+xI!W6`~)C
zjIz^@zC@{OnC{~6zuWX(jxCrLHfCF<-EaGT#W`9p7BR%Ng^E5jrskEw4lW647TfcS
z);benQwtoe1KE*xgF6XOfTpqhyJ>h;0g&=3MHv{MIs9YAEuatK0;QGFooxcma87%v
z^Ly3}S8bN>fIlu5nilHG9vlVAdWB(oE||LEYDud-6Sy5T!?=OZ#zpoEHrZ-^;jd<;
zGas^-$u+3p?Nxr!S9gWir*aelO7BFjM{$rNkrbJO;MDghd)4a!k%WZzIXXOLl8J98
zu*1S~I|UItJ&>PNVJq6_e3{d@q}>OQ2!9EhwH<RYw{7TDg}<5J92G^=32Yo?nUv9c
zry!WHNfejU*g6l&bD{oJ#p}2E4igf9-gO`TFjLn>w-3q^;a$dn;P-Fm#|u-|3a`P~
z26jBcV{70J@y~F#1>eH?oye;5<!!=B-Y~#e$%qCfDF}rc4X)6VB}5|e%yK5Eh*!$)
z(gEJLbjMDuhCSvCKY84ff7)2dtTq#)<sEfElJwUY<);59?Vzqxg*AsuaY!v!eelCp
zBf)3NqrIVEME@<jZD1Ej7YT?&AG_=n`c!+~;}-ng*D;$qD*@Xq@5iss?C&I8M?M25
zt5i<23yZD#XQ#Dmk6^@nU|a**-!LCEL)SmOfpata*|_G9?_V5$dbG&hVGbQqG7cOj
z{rrm%S;{7VD|%xDts(BX-v7hwg6>#27iUoSz#axe@4p4L0H5YO;4Uu(dX}H(<#`>@
zIN32Bes-tIT}d8jZ%7u6^0tY6s!3R&%yJQEMwhN+v1-6xVQa9P*OWfIG17aVog>{0
zZY4NkLa8qkuW6Pi4uxk%49$%M<>n{72)A60&-UVFitf?%6I=uvs&(J@#_w9sRKXF8
zvCHv1jmhp`#WEE}ai#>mz3=_td`*FgA=}S2h|l2p799v`ypUgOS*K8m8IfH)Fw%0p
ziik=gK|Hu*jRNlt`z5+$Jwpnnz}Pr_Du75lXZ6X$cN9xIwSuA@DUM0%@0OGwiS+Bh
zjkc=u!;nWi&RtUKTg>+QtJFa!9|mY31*DQ8^K3i~xyOZ>-*_*0k#D4ZT9mCxfn18d
zamYKO0+l4(g+<@NBiR~oiKt~1v6=IWYi>}$=5bTobV8d-ebqbe_U&xI^v9%{%<gVR
zD!jLCCxnY^sRkUq>KIY#W-y_^+o>wGdu~P~xV;8+LA4v-+8%0Ruu1pFmd`rM{tEY=
z!Fr$C>?vWs*}HAFUAZrfafjunbCo*}?1rcqkRMehK~Q6aR!Y%La@bfQNFjOT>B9V-
ziB}lZgO%){C(DVRcJ=3X31qzMgrRq^OGcN5i^ruW@9?f%-i)cD@Z)tCe_d2JK+-jS
zlDQzE!VL>6Wz90Jf};qBbF^TBo6l=ReLIi>?(D8Wc;{Z0BsvH-L~o9nA{ISzSe?#G
zv8DodZ@FMDjy?vh6~@NpT#{JKwlv*@SD`Mfsm}-u!_6=zqiaW(vmt~<@-96FDcNvA
zigk9d8+V@*8kWlzmm3(h-X8;65G{$XJHy2u^)ld&3EKSgbxP(Zt4P&-;9dvG;T2D4
z)iOVA8c%|RS5d-Xrcb`y6S1Zk+$XEhxc1u67cZg;Sf)L9cXcr>Gy`lOJ#WQ(bY>|<
zT?%B7pVz=sk0pd)!kOn0=7HWDYm5a^vqin<(m#PgO>={A&DVmQvk3RTenykIh1nTX
zG)&|Yj9%fhV|KHsYO)MBdyHvub|Y*|m}GNgxYXeRfg(U}eGv^hJ37(~l%2Su^lUoY
z%h)&b(`4E$i5o{caAB>ccG-*4gkS#9xTO2je1gJ7kw*MaJ~qjcoxzNiXZn4=%F382
z>C7x~+E;2w$&h_m`Dm;uPxN|cQ2Bc#AJgZ)1uYK-5KuHQ8*KuRVlD|DTsKx)aGMAa
zV2zYW-h3i!J@6~?6QO<#))0(K<TZ&NB1~W@Sw2t-YI*|HUNHeS0ApS{eibU^Pk7<6
zI!rh-ot?9{YO-sqIfT5nZjoF{&AB}x>&Eo7y;M|>00rOA=hdj>|1dG?f4zIKyknHw
z8ce%^kU7^|Cwv;RRHERxQt20;o}D9}PkVP#y{`y$pqw=mguB#f{)!LMp>n0g?dW3=
zvQKKPaxO~RQ+9hyjg$xL=9mRofFF($gxv-{T`ypHLf5MoqFbE=oXCf&ijR==?0p_E
zW{oQD$k>K(<3^q|2dWTAuVt7PTu}g(f_p`8UXXstvCb>AW(#F?UYkeLa(2$!^(ZR(
zXKx<y0bTNi=PaBz7F(r_Yq+H(#O4fEEN6Z@IriDCfb!<l^)<2kDw}>gV~H+nHC6lV
z-4=S-Yg(ZsBO*_-L?{~bGmqNR)T-CtSWB~(XJkU34V`iX6X@>Uxfh$rf{Hfpl*Qjl
zdj`O9wpgVrOj+UN&ThCT&Jj10?UmP<eNWp$Qn^9HNJf|`z0<!S`-*gqnC%s>g&SBu
zkGe8x<S;4ilnOW}C{$T&=4A{JwD(rQ63o6cEiOgutrp+W4aqDlC`+P-{TgxrSK%V#
zc+|dcRMM&u^c6oq{ULDG^xI~Wc<XUrQ^^}%PHlg;6uvaC2NYX>Rc+YVeHUll=1cUO
zXAXyL4x=5&sw~s?0kFC$>4cWD`zi8yZN;~8)=LDK*}3<6$i%(3YdgdPP*+&!EL?>8
zL1IPogAz)?4tCQko1k9v!z*g!aavYLD$2zcyJuptwiYqddaB~>Q7KQ^w>Pr9t_jnS
zc<Zq&%GeDJ*MN9{06SPeE<1zes~(k!Sh=^e^0!Z?yV^F4XI(MO4h9OA!lECqK<2}*
z#%_#xu)5ffjrJ>nr|joEVKbT2=#Lonkc7xjf{(qI(u~SL@w1RPRObrCd9SA)2)_{z
z+DoC_bw;8xr$CaT?=;-BRp!76v5}OUi6AK1juOzstF$wgqTG=Asq>GW>=)TSVbtn4
z@GZ={1uNjC^(by3;P%Xxc>#YgX;hH1vG{r@B3V!i0;tZ0Pt`9#ZJsSE9yk4ebbWPL
zRA02VG>CwLh&0kjN{2&;l%yb?(v8v$BPu_oyF(hKyThQnh8#Kv7=)o=_zu|je)k_A
z<&kst*?X;bul26dqNaxlRZEP?r=2$?^KbI(+MO$iIkt?y4SermE7rXw6+yz^Ko6}@
zeDLNWfo<^`YuW|1;=6<1jub8aS#Pzda|J&G&fQ7)4OcdlL$?#QtyTxG{i&eM?GY$s
ze*5E$y*f_slvjg0mX%@(v<$lJzR!4~W1UasFoV~P+?Y9CHsNEV@B&jr`fx2r&$Ro-
zm6F&#5p{o*s<T(2AZXg)Z9bmwImpYZlg)0D`*vR%m%gOrS$j?i9H%Pt4PYUqpW7N;
z){Uyl(NyV5+^-C-q8X3|PoL2?uJ-0P&z6O_SfVejmklk9KMk7H(bPSxSMp^+sr@{2
zUIP9?f3ZV16WDW^!^6RDgk@5J!g4ATzxBPzx_`qGf37MuzLy$Qbulh`9lzc-fQLVC
zDt6>{Rl8dgW)hZ_e+wq+R^cwc`yBGa_!z(Ih%e=gZ&JBee9mcSxsb;`>MKgM7UW=x
zB@Ji|{TrsqW_l>UPsr9Sn;E;Xry@HhWjUr)xtSqRW&?U4{`T4}_E{OV@$uWlNeB)?
zFNu$pYWF9{y`cxFk%~djIr+z1lZbqLst(TT9~~bc`*OO3CJ*sM_+Kf$tJ0X=+e%R`
z^ypV!@p@#VV4FS=%4sB~J6%C`Amp)mHY>$>LoA2n6?}Bg9C#;a6|HjSfM?pErD{FE
z7VbJF0`--i4AM_Jbg<WqvV;1F#J&ZEQVQgh712f(br`6WlAz4gk17qll(T(*|8SuP
zu5l&-fA3YI-)_FTggcIVcJMjxT)#3PcnXf`8cgIRlLQFppzCIsa3jrr+RUd(#KdA@
zKS$Wu;h9X+5o~Q^3R=e#Nyu9F3geOx48Rz()nU*TJDAR<j5WL!51(TKe>vt%2Oo#=
z-B+27`B)f8$2F@Vbnth>LlokY^=U>5VNv7K$7)S6Ym}ynin#=0iYuwe;k6Z!*(MRk
zTy19z+z|B5H&wN{vxK!=Mth^xD;WxzU0Q=%=tV;F?GY&Nw%$#o?iu=&adE?4nYwU*
z3E6SC{v(NJicyU7II*<MKut`_dD0y7&ES=?^D5eMg-qv|#`dF^KbgxPrFJy;jnpzJ
z1&-7r+A#uyhY=i{ZHm3mhf9DGsl$xZiTZNr)Uhw(0q%DUTR05<@HC)9`ql3D5YLUt
zd13!E66q9j(D^E)87M{m*oumZofQexpgi;Bx0F{!?}FSWkbffe?B8<2il;3rwQgv8
zu3X)--pHm7@sf+_v&7B92@*LR9%MLb?QRXVbh}bXV3~<<!EF795ScCQ`di^}?S3~W
z3$M2Mv={}&cTxFhD2DD!7=zQhuF0tj1b6tVS*I?2IVB=sq>B}T;_lCU$e$I2>Gjti
zRwF%x#NZD}C)^${-QJ>!7f5!tTVl#Gu^K<y#A6a^S$BZ?)y!K{0X7XTs@Ta0f%9g-
zhma@dl70jNl}?)h(lKS1-4bOlzmQ%+Rq-S4ZOroB<R~=49)VEOmAh)X26a2G5%1Q8
zGTZQ(4G+f;o{6DN{;0*dtVIH1OZqY`_^IBbdz#&6JS)IG15a7NSSE4MrLDd=E$V22
zK+7&Isws5-ttomj-Lq!9sf5PMufhj1gl17XC^GiYxn=HzDByM-2Gh-sHhhohUKNIv
zJ~ykb+BgV~pxdK2(pXv1M|f)WT&PFixsZm~Bzper%=c?2d{Ft#dWkQNN`uMWE4*JK
zR?QTey-Pu>r{;)=uur0~il_YDE9bhrxo6xS9>c6#B6q#$1_Cf*?fo=ACsyTXa!I;A
z+l+Q|ZD4BF{qEJvK3g=u>RG~^8+r|u66hh>L>Db2or`U{O01tFapc8^O+BFE9Tk-s
zW&e<!rq8POn8c^3z#hg>hBOmxOuB7y)d=|K_Fz{?8!fkA+&cXNB)1~5rw`yF=lStE
zm*tq$7^tFSilf-hiQ=xvCAdw+xhP(3^#PwjJUPX#WiDSb+W%3KT}@(XH&8Ye@Zy!e
zA&rQ`kS68g!x!mH4T=ioOcb%KlJj-9glWCr9Nw@Q6Z<Za*Oy!XyCBnt3zC?IrFt6!
zf`4^z|N9SdLZDeB)2*nFs*>U&oyuZ&qXld}yNqHG+fbjXFHc5>eAm&cZ8|F49a`WF
zdZ1i4<#J&&WA=kA{{K9U`|@dOQFX%lG_1vIFYrF58Ifl+&MC@%j?=I`S{y?syHkW0
zm{Yf05sI_znA?k{x(cd#uAsw-)&0Mp25hG@4p{mnDC86XBtm7%5CyH4*V67?MFnj7
zh`QC6<w2vcCmQQC+ak92Qo_cxolM&Jbv0G_$yoNrh_1hBAkhB1ANL<s0&~y|Fc;-s
zRzT~|y~}*}4p$J|BCfnnoVxt=4yBq6?nZiP0ypBU;H&Fy;fSw8ZzA37X}H-xfCF51
zKSXg274_wU=P6E)8<;7Sk&#11ll9ZgP-3Y0fAz@&-tP0)WRjm(6_~e9FjJoknWvAx
z-jKEb&<NeI-d~FUDa^m0^#jY&ZE(K6gKaTz%~qyL>P)>7?|u8`Q$+_jb!EkU(8vq7
z{;|NSc}~ir=l}&jyskS%&~O#xYUW~L$h1@S_WxL=>|+`wJqJqg@#7`t;TZJKljGU@
zc&?64o)~b&tnWf}xPg`i$6gQ3X7||K`Z8{LMcfk}eY25ORm6A_e|bUtk0oCIQ`QcJ
zyubWqW4zp=FZznfWA_0{bOk|P8MVQ?UL1*i=BoAvgK1@NNu*UrzKS$&Hgp;~4-FX%
zH0%a!y3Uj~@Kbp58cg8py9ENlGIftIZ4FW$sscBn|Gyy6gc}3f?4f>Dw$5_!crf_@
zH@a9K(IDukTfx|V?3k|kLQ)AT6~w2KW(Tp^0SO4eGnn>Q1N@2Hr8Pr>VhI9^KN@Hf
z4(o#I3Qb5pPYy6ZC4I~M!Vd5KUoZTO8nWQA|Gf#QMZfJkWT`WS(FO4qR6F$jTquFI
zE3tJ;?7@jv@(nzwpSoYDGi0>Cw{h8qM3kbwNR7I233S3_R^Rx4O5p7~{}J^EeLcnQ
z$=!*P9-gEt$*QvLH6eMccqBgwJNt6ShI>~>c0-9>SIt{0$V{ZnpN`X$KvSdC@S}}!
z*_69LdGIf^`L`hg3$4+jJAWz(Pe8C^!>?Wdl>Z$HJz(|l7q7m}+|xlyET~4*M<OeJ
z9dR2=MEZp6<(Sm~GNr@>sjsbbCjBJU^Mh#z^F)pv3|{51^gMHUr}d|O_Dkmf5(gR#
z41PO9PFQu(ewA%lLDW4}T0ZoZMm9D#TolU9edG%*r2f-8I?N*Sbx6y6NViX-<ErCf
zXXi!?J5iW$C%!GL$QZ!f|DX1=&>ICaMqSLY=NA+Sj^C#{?B3dytbg^4A4^+ng99~G
z?=H4*bLV<e6+6>KMqrsVN$Oa(GCTdns$KKB8MM(M&W-s0I@?F6{Jtba(baZ)Uys)u
zlO8GGQIrc6xAz@vr|t8PpA6P6B*~}Z{*ZX_X?&->@WE8w=Kz>l!a*W6oS#pizM4Yd
z;PK%-r~gAQ?t$GjnkkbEp&gD}>|(8Uw4fDzoRt}AakQO_p|lr0I6{3|Oml26hPe5c
zmq^ZqF5z5?F{eFRZVPL#p|?Chdh^6I_pil^Kc>0e7d}}>ffG1<^PleRN;gYh)=LL8
zz5n|4aP7e?j`EE_gdvUBSByZ6A@1vytKJc}oXS>A91uE?xpVx89k{j47lKh+Htlu4
zPm?cSKf>9dDWSH+JGN(U9P;Y?nyDOXM6>qiKtKxVAI;M@IatFRiA}N^JoBE7Qe>D+
zQJ>l0yzxxVybXUnrB?35yf_x6mX)4eYxGOB;NSgyg_US-<99}0G_Z_TjzR;91|<x`
zh9nFnx4WcUpSYnpq1Oe8ujJuMqob`y*@hb|?zOjzaqgLGsm(mwEM$(=SB8ff=0rgZ
zIHUMd6icg#zu<%PqzT9u^}k(p!o9p7oKQ?CCMtna5z9mEvSRLHbqknaB{$ch52@%5
z#(GL+srsqvKSq?!9j*Fh$%!&2HQUybw*BpJDQFBJuVid)USNaFW>LnqERuCxzcS2q
zT(Z=X&{*3*IS!mRUkKC-brIHIwo;Hsp2vZhtNq`r7CUZXaOYhZ!SBcZ?6i=cblqE3
zRQgG^V&wb8FOxoR(H!ICpmXh&GL88Cm&U*!Dc`y?UTRTaFj+!dMMc+dV}IQLt!RYf
zE1u@gU2rOGc#?oNmKxsecXzkmZ9i7~`nZ2Kp0DjCm7~IFfLXS(^<>iRcwbr*21Tq_
z#GNm6iC&;O_QWq{ySY-k5&x3PHFH#c!?VdP!??n<<kS%!TtPl=&mAI1tqVw$4rk2o
zmdV&O1H<SCnwwFFVtV(V6Y(I-LPpm8i^ZZw@j&>D>9#d*+JS8bCxTdAM>d6)Mk|mL
z)WQqNd9BCb2f3SqXo#-S3F)Dt4L+l@or>x2@R4m@Xswk!l7YILrA(PK-)GS7)5<{H
z%&DuCXD?R3jop<xt{=U|)9bNEM)qUP$o&dxm%`*uSSGv?_1%n?$Zlk!pKq-%<&%?p
zc{l%H4%nVkCG&VGE~bgj<wM=L6JEFSl9C6btJyhSlV`iybNy<P4l-@$NTO&5Op0DO
zecy+7DJ2suj1OxIoCoFK#T=H7?C;9p_4)OBy`J8LI@%(?6B==8apL|&31=&C;-u&<
z^sP<SNB-7g)-Ay)aN}%DW*{i5^*EkNbSp1H|K~|x-hXRIRM!&7A%rca>^<hWN65o`
z7F!O>CqQRUHSPkqD{7;(GF1{4wjNuXH=V%-SudvpBFk`OdXFGFX0$Oni99(g;FEq4
zsGZTB%QZ$_gOWivb#vOZKvP~!(R?qq%BCRK&NyHXBQrE27-0Y%1x)HI0RqCbdAMfQ
zDo7^Pr=W^2I$||&a&Ff(YT-?HiofQ>fQ#6Syt<0D4t*EX8!R^x$%N##W0ezy0h>p$
zv!qEEdnvfivP5v67VoQJ0m>oKVoG$|Vzmu?PiEs|Z}BGqb~ZaLY1mN?blE2jS++E8
zH(zr6^xNdZDOoIRrybITjnhFsc@W<`#xulYnvA*HDKtCZk9`$j1e&(yqp}M4DT_k=
z^i*LAS!HMU!XlhRZ!!Nh2@YY2lBDLFjk#=NZDULs>`nh%NL_8*_P?2%r~kEh7hr|e
z1+;v4Q!7+!WjLC?FW_PXapI+!wPbrE3wM`Eg@`Cp<>?*Hr#+4x;dk2*%H*t5Yu7q|
z$DS!P1HW&mMxkwQpN2o-8gj6r9H)uUI&W+*NBbNqw6G=%^?-Z+R#+Qs+l!^)GEW#o
z%8-@_&F1&aRXL5eA|)YFtiNU>(TrlaZccDe+n*_a0UOwrAIcUc-*f9Mi|qqP(CQKz
zd&LoTtdr|yYbN6(Xu}#0vQUog$h7?gpJ|>ZeGE}9P(&;_H^&Hz+xol|d7|@C;UMme
z?A%N_s@cP<Z)z}2(@yI{_26dIt-z328jn@AWztN_A4pNbY@{|`Fm;P3S|R9^zFd6V
zRCfIU*X(RQ#V^2!yFaMzFT>2T*uR&l`8iDI65AF(+A1FlA3vf6%GY?n$8E0*))!F8
zMEen`pTW@Y7ubPc2%Z(O`_yGaze9ay%(k5Ttev%!`L-RO^w_;X>ev~oqz)f^T}rNY
zAgmXixR)6i5+iwXEM}?q#C_mrPqn(578x(#R#Jg0fr3D0i)M!3nAf8ki`1rCTmRA$
zSz@q$+Gcd6u7-T&N=z6};TVE%)mp_@GTH8><~LWSP~F!t*v{;iToGmbC~3N6t-Z_F
zhkBYMCyJwQBM;8ig^s2vI=hs@WD91WL1X8d;O||<$DKW7z53d>j4iO<f{b@$Ne5PM
zD%SQFH^KX{uzniRc&N{T3tlvt)#bx9|7OaxKIVb1W*gpxq9bee)fC5{z)~0P?|Kvi
zz*A@27Hko3N5_v*I&}oWH*05~4sp*_aOOz84y&sWS27s<@;oA!RlfRMduh3j!-w0>
z>da-=q_^0wemn7&!(oBJ1h;$3&0aCF$DU?ir}b_Y3&MV$PdXZg>z0THvV0lK?xC^P
z$#OxYs5Xo@L_Y=qz!=c7jGWYd3IFJ-tgI3lkK)j9g)-`8gX<p(4-Bl3O|Q#&0*D~v
zl$%3T*T(ytz6NQpPD4(&jthSE^xA#&m89Y4x?w~eot#5PO+2#nXVS-sZy?Uv{%Mv^
zlG4vqz53IJr-jB1fH)48Y%}znL4Z~BVkeZm+o9-s)z7N{a0NxjckL!>;a@c%<4m8P
zwNV`8nI29KTF%axEiQd2oE;GNX_lVS(Rr{^GTR;Q>rnM9c<aw9u>t&?tRrLj#1^G|
z0FO}aaut{nfr8|L>rE_{b=jh9Qh#((2z)&D{%I5L_1hapg*Irt{N8H=i0RGgr=D(I
z#=X0dR>O1AaiXq9*Cxyl6}Cbko%CBEV4QtInylpTD=TBKk=)#D8|8Xl9LxZ+sZ~4L
zTOvO(CHw|>YdK7AoMPzXNA6b+-TpmEeCqmkQKzGCusYjg#2j2^w5=|}eG{trv^mND
z(wjAFRO#T?kM7~TfdTFg{}5dhNA!!K5WY!y-@1cH!x88n<HDGM#DTILxZpX-4L5F{
z97~S<;ji&H!jL)dg(ym{ss`a`x+MAgM6;|?@^`Ffk0Z#^NfL4%9DHY)e3JNU>`Mm9
zu|aWFU#mB*s#EHAdG7K#1!cErW{l9{7n{e{&C`xE(SMoM=_0sywTp5El*equn;xHb
zF+G1G|A_J#So{gjQZO6E0{XDQ2n`}$_RA#KKtAT~#RU7S-8<>X-h~JHo(jISxz_PW
z!pc(c3DTA4mn3EV=g(8NkB0*)I;FoEUCoyyz^glZJwjY!q5Wm(Kv@-Mn4CBDlfPO*
z4S>)O)*y3IWN$CT6tyz}Q%vMmymAp!C6HmjB`8J~?I7<Jd>mzPu#tLb3u%7WaPN(<
z_$Kpla8vD>7=y5UBjZMLgwfQl=X2^GmU1M++zm?~#d(NswenG=2Ik7v5l`(&d9zFV
z2j0KLU0*r<iHVtf#RMnN=U7Ucsn{kELe{Jl(9&R7HZmoLN;J&JbfTGoC9wN^JRU<y
z+`6(D(mT1x+Ha2=_+>SS2ugM{Hw@|G8TxWbc!pEb?^rY+w{uh-76g%jt%c(5JKX17
z&!3<c!B`R|{oo)hv$4y3zWzz9asOq}O7DWtqX$3z@*RB|!8Tv~w3&~K@f$Mx<(>|o
zPtkd7-Hv$(IjC6#*QyDjhR`}6=HIh>fY9Lk>*!fZCjMrV!c(VTed7#r!!)g+M|gD<
zV`=yan?Csp*v{nO<fl<#F0a6DTR7|D_<Yalj$^XFC2cNlo^=}H$j-6U7wBHp+bVwN
zgvGf`tz{7Lx?dz>u6nKeI>Zzo?>I*=D2Ao4Y+t4IT}g~=Y)j9wlxN{|PMW;;^--m0
zk9H14_rP^lhk@?z)r@-3I|X@y&$b^v*Zg$wf$Oi0#^z<cY3a&JerwGbRf&dcV0bBR
zCcQylvy}0yU~s-0-!@FHNT;;Qz0_pMwO%n`k7;=&<aiM5*z-$$z@fLWh29-{yXh`v
zr7dzW^1Ah~;KVrLT7_Xu#8>wF{8{7WLL-5RxS~R#BayVI_a5+L1c}(Wl5DIp@SWr?
zW4TV;UCkS}qy4Zk;Il1ErvyV<y11GCb_^?|(qBluMW5U`r=#I{Y|e0y;(Jo|rP6A(
z@}o!S1U&;r)AFdTx-RoyPO-QEq3ou-w}9|-rED);bjpdv)DI@frQ5r$wc6UvwzRb?
z1VtqI(|To6)H0s0g+hhK>O+2$CoR+{cpsGwk#<5|+S%1xy|!N-cy{-EPOGjloX-Ge
zaW&s*mvbmBsP>Ooh6et!%zl_>j=($truGOO)yL`ldNu*D2)W_0WE$1@dC@AT_I&sQ
zxM1I{2|5nJo_h8&Thsa!ayqh+u$k(o+8V#{e(P3z)0sEkN6umYV>+GQ4t`CuWY%vh
zq1B|v3yPYJ6EdOqweph0s2!a4V99Ywvwa$Wd!m*>;ySvn#?<Jl>gjciB|_}OBbKR0
zH}F1NtSpIG#1uy~*KgqkewIgVH9G%N5xnOzkK&d@p%eef>RBMHsqV>PY$e&0#g8ta
zm#4<Y<+E(TU}QfGCud^FHa}hdHi)8cQIO0=*reRt)^Kms#ft%Cmq)dzH{<$-D)(jJ
z>&N)p@fL(E(xm?^D@FXwfUodVzz}v;v^YT3G>?{?Fkq2Ya#F<R-@_3zY;>KsCOxPG
z3netVT8DY~Y$eUOxNw(R`+WD*<rgTnEJEHB>E*ET_mw|RT$p$LGq_ateG9^jNtQ-X
z8Fr$ly0KSJXabE8!e~GBxx4Y#RHJmJ>p+N~Nfb77mK-v2UK~GHy%7K(V!9b_Xx((Y
zJW5Ms+8sqL50&C%ZPlI(uodT0)UXjpDsGXbWlMM{`lyKsNypZ7U&g7fOb4(lj)Knx
zvm9>UAe_q3K@&vTSWefxwkGL#Ip*NU{{gb?-d_`1@#^B43Fs@&s4#uU`0gSWbIN8h
z)m3Yy9#%Q!U5B}(459JmWu~53>Cm?){mre4C!yzXis%h@Kcs1`Sk~uY<}5R)(nJ<1
zuJ$VZb?ed$WB^S5op;Ow!~j9X;XQK8sR(~Tr$9`1pW@^6-X()C7W@DLQ$C~EZR_FC
zRXZ!wO})xvxRlp{`(PUqYFZvmD1*|DWG@_vb}q!#qWH;refslrr^<&f9-S%Sr%Z8&
z{#Hc*<f?Ddw0l>(lL@`MgMpcrL^qYjdKlYHq3-O-wdO5H)J1*QoxR~%@Sg4Q<N`^<
zves`FmXNS!z7iTa2)B-C*(VEzrwoYZYjwoGNz`p(CQg!0`m=2}*EoPCS@qpKogTl{
z0^2#XMZF&pDN4r?=g*@?{z7(@msU=Ouk4AnYZ`NPN|l%#pX${x(qEqTSD*-n8taWZ
zNR7r~L@Lec6*tK7psm3`Lr1T9nny_RSEEZyx%3xLRYLC{#X^1Df<m>O+~vQi`PN6U
zdvc^j)GqR8dFxuy`~{r)dNhSW)oCkq;R@hZoe5H``_oB1@AEI`ZeAXIU5r27aGa02
zQ^yp_a@a@(A5u~JekHPb9i=HxEJ2jYGDP+Wm)i|h!s8-5|7rrvPl?I{#vw_wX#Ex*
zATWmkwqorY1MAPmitmJxafy|^8QL1R-S`@hm7R0n&^)YO{PTz5N`ccl*JtC1BI(qq
zx(zk6zSl!JxTP3BmvgnINEY$1V^eF@za~K+-i~kDHO2ed4*^Q8K@yqsZtV{_D!CQ!
z+_vOAKpURM2{P+iSfmHZPtEBS*-Xv0w*3daXKB76Ufeuz670qNTT(B#d#)KsJG}@I
z0)l5h4@_K>IKDPRJUCNmX&H4^x%EJgAc=*$cy6Yqy>1^p$r^q=p=whU2h;pNK|@Hp
z9nJuJ7<zOlpLgP#;CI$n({6k@hxnHXjC}<3KZI%;-2bD{Ymuk|O+2cvNCj+mP6_e4
zsu_-E-VgH^%cm&B9AjK4Smt^VK_QM&OK-C!8R+(m?PfhDXJ-!9;G;{(w#~t<;wR%C
zj}GFQmNhZV6l2Z)iQpVv&bM+i#{d0#ngKKP9CmUxaLY41;|tk<UDBqisrbVRWD;*o
z&#;|vpIy6O*69q@aqUKe!I0PZU7V~{oBPSWgjHzYgqJ6IeB;nRe=_SMN=)<Bs8MWx
z&h!^V+?2f>t(_I6dhhoKi^mbgm(>(!Sr~rGAM?u)ns)NGYkrWONVS^FT|IZ`nY^^*
z+Po@1ssq_Y6Kmp6>-q&smq(s{4yewQgDl>k?bBDEOB5)h&xI3DO8O?Ie!jM4wmqA0
zcj7)_Dr@mpgQ0=wr@m&ir<dL7et&Y-<*J_fy|uiWWOk)e;=34q-YkkrA_$QMbaSg^
z$tb^T$|3yC^${Xj#&CT{NPbKzJKJ9-q`x=;FsE@=GR<A-_lU8z52&F%dQbCKMK!(J
zS5K{t6l$p!NmMn;#kWPbi44P}mj7A=%|JGApStDe2DSZpY=yQ_+k4KnCR|=EU)v;@
ztf`ENH6LAH03m*Vqz6$IQyH$=Uq~XJZUJP*UItzdg{D5NS{!b~c(|)7Gv5?dpbsCp
zpMT@0ny88!oxC6BRS`ABasl<Oj=laCZyZra%6&TSB1#>!@y`z9;sQ_ntZblc@9C=1
zSBcVIo6SW2V*BU92VMaN*(47%p-^nKT7{c5>Eix}Npdr2X?N69QkOqF3_$52FtBX4
zF>Q9+%e75#5>|McN^S9Lc%mIi%}c4Ktj=EJ<e<vjhGxUN!3_my^-3|di%?syfQett
za<0DBGZ8qg)PrEBreC`!?nYemd|hQdMo9mwUQXlE`FX01X+C#fw9sPedQo!nA0z<I
z_K0Z?PR)j_OiJ{s6BkDk@|!35-T1(O998W7`MmIFU>l7a;S{w>0pB%k8nuO$t@j_q
zkZLo8;%^9BoITQaFs}Ok>(=|R{jw@8?aexbwkY5JIu6UA78m%kY;naW-o}{_vLN_W
z?0v%7cH1$oGYaj>1p!rVmgpnj=)Y(Ep`eppX6KdS*!+2ps`jNtNU`p%EK)FAAaUF(
zD&P`_x#SSlE3zFS)Aw=rSnJvEagCQ-4tnfQwFg>yx5E4DB*8_TT&y(1xSWyxJTm=e
zS<R~^UA#0GPWcl~pMZH`zJ6g+f4jGrJSi}|xWXcN?>9G8m(dbzcELcXl@40M^|ot@
zu-<xi;s5%hMfcgF+leRJUvLG)zo~%X(M|25`^kd8^lShF-JDHCjb6~usUvOE#wKLE
z;d|JV!UUG;JGO{@t!IDTy1*A00Ni4jAI`NuDw^KXbI9}_r*DvI*KnuNrR^cZhk<7a
zemz)C)In%}3)(eQ06$aXP=3AGUwi|*#~m&kQIWO*8Ic3XmR0!26$YF@hwxgWJGuDR
z*#C($q|(goQHy}U;ZA?f#j+YOy8?rVlJobyHNSjsb%j9mFxt*^1(aiiFgW=&gYAAv
z;uUuI8v>|w9+_?M8~MPo7)AQt|Cw4S-dfbl2HazI_&_S5dG_mGMQ*n<qOJTlKEICY
zN=3m3z^F=xVw%%GG4cw7xwjBcdFkd)Qm7EXQ+9)~T7IKyvmG#*rY)DJx|Kj||1I_Q
z@8h}>A8)`Yfa9{p{K1p2#5I?wZSi$kI1hFMFP56DT46{dkrKelrUF-A1_lg1xlgh0
z{|F!OH?ZsFVwh;^-H5@TjWkl79K~N9w>|hmVPf4aPXguOegLu<8An-$QB6VB`(C^L
zc-sI2#&r^m<-Au8?*>z0p-wgZt0l_8#|h6yXYRRC=x*<o=KY#b{^M<ym4I4nM3qWv
z5_V8%^K!E@&+>$NLvC5DwN@p~nAyC?G7mmGdAi<;h^gD!FNweS#LSKiiG6_8UHU8D
zuyrTCY14)fyNBpysI{AZuck^i^<r}*cLJ*$@uqzfv+lo}+(#q}Ymjs@ML#3%=wq!@
zK-)gtu-gT%6p0H7TgfZo{^z7)kCaMd{WRtIuE0<GqU4vWaA^<gzO3@S&N<M(Ks2eY
z93+w?+*p9reNZXTJ*{kKRVs+_?-nXuf?ucdwZKCe8WF$ULrS_stB%Inc<+V)k`>HA
z^zO$^R1S2%NHiK0a6YS2ByU17XsQ26y7N@fUA%UYm6s3toD+Dqzf@^{P5npU#M`e|
z@LNul7A{(1S4dnXO;kpmQ4=6uSHH75cpcKirFt0WPjnVm)ISyz@r=Lfq##0y3F8&F
z8YFF%ih}~*ug-YubM;L7FN^<b0c~=?EU36|oU-Z8r|<82C}Fv#(C%G_+8Ii1{>1|T
z67Sq_4YVQxO{P0xOP4ra#|qdrSF9;oDJLdJ){Ii|GZp6z4zfZ>nzLD(lan+NHTcqp
ze7fR?%^DUVxKkktKR@Lr>x)GZItKPd#`A0ERrc6l?G<+E=p5Fh4)eL)ra#FQC2ah=
zr}&qdL(fMj^61dZcHiSe(mm<J3I|!(=H*!l(3f=ueQWqB5)-KuoY3}&beQ|ie`;gR
zcB4dO0>7eH$Av7Xjm6P*<0YR5D~t)cJ4}XQlK<SuKzctg0~LPF6n_wm%E<dDd9B;i
z%xpaaLIm>MuZvW-@*vq7Xg~x6M-0}bDejvR&ZIg1_!`7rFiX(s6X`K!gxapo7DL)1
z+#{)y(AB(iS}N>)&-GI;HtRq3-K7;QEKNh!x*7lF<!wM5U!a1)sdNQ9Y)n;a@jB#T
z0R5J810*Iddg3HyETZ~zBn=hKi(Yc=$l=55=XuFFX>n+@aV6)%c67RxfoBgVv^|<1
zzIf#;%JWzJ3xLxZ830-jJvfAji1R+hjFPVJ-%cDdm;I#jmIQww{EVwU3`pRRRcTW9
zynW@&0GYcMP0@_G)SmhAEo^vgGNP<LBKjr=mda-$yfl8*m`k<d+vL2&e~=2e>n#Ap
zfGhZfrZ|HW@o+WGmJBNlS+@)4_ZOuCw#sTv-Dt78dKE<4*>i<#p)PR=KYkfVTB1m(
z%~0w0D>?}8KdcOFxQq8W$xv2%%e(fpM%lAO=rU*NkK}{IflncDkMtU6nVc?{-(S6f
zN3*noxDM6j;I3r|NRD_T$y<B|O8nfG0(ByZ|M?O+j2!lh2J~c%6OR)X!~R)IG9ekN
z==;a{)1tmf#qAl6zft=VifN>Pn=rS7NP;Jl$>{S3p#^l&Px-c+yetC6%skI1>oOdj
zI%C~sI{T8&q}p+&KTKgxYza@=c<2jeq4hlYvGoIJ7&#ml!C69kd^CP_{T9??1T$|`
zNfPhjhHAt97Y@p@fCJ70)IMtSVuBBFmX=7^2fV+lP3!Plc*~;QfLn(hy>m^urM7r?
zl~n(sj@LTndTfv_ZeX)+lk5B!sLM}^W?&2WOcCi<V4)Ka4_~Zgn4ybld_MPSycy*S
zHvAtW&42A>Rx*IR(Oyq1RUFY7b5>Wvd=y|Op0Ev`!`MQWrVN);l^+uiz#ME`Cfce0
z;cwjU`{r3X35UNemQBH2TBY7A=3tW^{uf<cf%$apn)T$e7}ymuEjjrB-?vI;es|aw
zByE5z<Rb8_h~=Kj0NZWyt6!@NX{q=YD97dX_U<0q%VcN6{_c1;-W@T?mEdx>Pd_*E
zmo@OqJV2oPe-2K53g+QkQ=vg&8Q`JXyt{7mRXbP64vHhPG7FH64hVFdzMmuSYrmf(
zBkwdApe<{{-oV(>q%?wFJH$>bl5D(mzDx3N*4;G}z=BDI{I((nh|oE7li35!&$T#J
zVRzY-#Qc;et}HnZyY_(HU2PX6RnX+WJ5a<FKDM8z5Ohnntfhm8$LzdYU9KqRCyL49
zfxGYIcBgN`gG}s){LgM0lAA4=6kcddG%QkiEU}5|`h3gzM;6z*P!aL)u6`;zW$|>b
zc#!Z5Z^7G8^~w)G)mPw$RqDv77^iws(czcL5tE-BVmO*9ig*q+ZJEa&*8Id+XBV(G
zN`irVM2=%p;h}8k?xC$hf^RHR?_j%Gaa+hEt+_qJ^&jz1hh3WgC;j&<ZfY7Cdn!TW
zMR?bIOYNyF6^`Bl#UuPTIfXJg$TrcJi1Ab@CM-2g4&H_&s{u^v%S^k1AKrcXC+r@r
z14G)@;}dNGD1?zbe{AGCfoz^<Rgai&?*G!bbaI^Vt{ieuLUI=hxOH`92|=|ZBa`g3
zm=G`SUbl!&hP7<>ynUVgMbGT=z~@_K<ymY{WWkSQT^citoF>1wS=qgigOmju@{rdR
zNSVsGGez!dqk#X<n=WDMt+KVUSa$L>SZqXBf((6`lIW$-LIW}s-FJ?R)TGKrWu9Y8
zTdWJnh9~QR%;H#xE2Yi7Sr%EoRZa0T0YO#AXws`)p35%O_bpHe=SsF0E$g1xldwZQ
z8}<$5-%HCLFixA2L`y-(6%;Z})F3~TvDXS~A~81d&=Qy<k7NI!c1}HL^L3Mkw$3i+
zsi1}PpfFCys}sA3+k#;uoO@TJzpkOO+~?Y#DJ4{BmO|T&s(2%s%goCuSC~MH+t!?t
zLB{)wp84_aHSSA-sYgvplIT`P7pt&dH>Fv(wS&8wMUTg*jl71;Azz=+V9A>Zzgi%O
z+Sp)!fhM%>vtnf=mTpGt^7zmM<%d!F4B)gH=Z9GBa`@Nl$-)kgfzkzCB8Wna2L@*r
zA&TAKb~Hc@mHGGkb-0+3O+tw=C`{f0%&hG2{srVCgyZ4e=xQ6vRo=sf&q_!4+=RGi
zk02l=q!i4>qXKzjj9T}p&vgp@t2BGS#~%jHluu>I(P1Pk?_#X#G5p$Iwtn0AGd_XN
z<X7!J`Dsu7RXZv+V2iQDj%N@fcH$szQW;U_IJ&+0H)s_^=YxsLqPtwTV>L~xAYyr?
zJnRugXe}#T*K8^7X<UJ|b3+R;t7CSvQzdlRrID&3tQe2WJizxRl=hRxnZ^^w2?>LQ
ze@^t0HU`N4&h%%HTGUXYyuAvVFXe1Pq*iH=cyFI)20eY!jq7&L=_VJUIjs@*U+o%z
ze#GR3rRF|bc*>>Sii1%a@*wusRSc($OmhJj)9}FlEM|Hy+xmYp1OUeXOgx$WVt8$4
z3t<EMOwK)o7BTD?oJ`^58(Lc<DiVU%AQG~>WWG$2nz4L3;Y0Bt$>d=9Cx}t9sMIhs
zo3#6=q4u$#<U7Ca4}|7Y2a83`IOd*Ndnfd_XL$aj{MS&3^TLcCfyD)G<-M#b9(Lv<
zjsVc*3`lT{gOvfT%#R5bpF0^KcomO02bViOlXzh$yr{C6dD71v^y8LxP6iw&!zeo3
zSUH-V|N144?>DM#a^z2m>Fjk}Jo8l-S7};IH4FV^zhC_lNN-MDCyc77W!;SxJl&9i
zg^0bNu3^f~td51@f|yRUhDV|`)$!ukm3`Uh`g?lt@R3ci)s5?!pv^Dy10KXSB%sCZ
zFPEJl0Qi~3FfTar^Xwi&J%1=XIBSw1jMs6YVZCAAY1i%;7~ecT@{dJ<{gs#|Mp5sM
zhN~GkQP@dSx=t?(9HQq%1x@!}Y6woagVO~IP$10^T2Aqzg%O<Pg0|yqRFK+m;h%XH
zJBk3aq6`BC?;(g_wzHwnS@}<tdx!`>rf}?uRZc=op8n>ee_Uqb<$!J`Ek8HWyqz~u
zvLn{oAZLgzEJ3aZ-vVJ#j_fDwR(^Byf_TL7F<-cPcy#1649;QvjB|=!SI~c;^s3Lc
z@s&3?OeVj0vcqX1p4`l}Rpfs=#n=_h;`fs-$#XM|P{Cq94No|a3k~FD=u5}Xp$(Vm
zkkP6At?8!&djy@GUD`P?=%C@-=9ri*UzI8`O{iIa!rLnYDyyjl5kto->st;j-M6zV
zm|Z+Sli%3L={hqpkn_2#^WQJ4;>ssSPyo$1K&!PY3Pd-7ko`${4&hyTLf=g9-p@9K
z<8NqxhzUL8iy5x~dLFyPgYb(8-!W7ADm8L>Qf<bzp6FT(KWh`b&0kE>k6)mf%e<Cv
z>-{x*<Jm3d8}AG3nq(FRKCIVH)Mf(J??Rz;32o^3kTIfo<(S-X*UOdYYtMZYI0X^{
zAR8=akI{A`z616vWx2-ZKDLDVwWkr<&o4qHe-S{x?2N5j>FwTLh;ackjIy`-T+^LB
z@e6`|R+A<#UiI+_rX6L~t|)rAFw5}AJ!5PlVfX<<JJ@<BsyR2PowG3)bFDd#!Kv(`
zY>9S+v9)F8yS^TCuXU*L#bbVc$FDcZ-3H!7_#pp2AG)LT9sHNCtT?T2nkr;TO=2`v
zMgdW8IhCeL>*y<&;Xmx;W7WiD-?eOG)N(|*WqkAf6(YQj*&>wVdOjM%d3b5w)%eIi
z3>A$wAY@Sta-e*=n>YHxFqfx>?wcTQ6V?{8*Ow7oTGZlUcV3vTynjS#>>YX#Nu8M{
zC8{JHu(Lv<N^U@d8#=ML2+sQ-W3O7UPz*0j5g!_#y#vZGh=!f^+Uy}lvKO)vbkuJ{
zwCB*XGz>QdY|`obiwOP%t7YdX7CT%*DgW#5U~;+Vq&Ir9upe=LOz`7|c?>YmfNf6E
z$hAokC;Od0?m>=**dkT5$}&4Q{B@ySQ6S|%SP!^O>Hybu)$N5noaeq@GI_Lsv9<F^
zeK{-Sjzd{{XJ1-_GTL|LiDmH?(x+89OPsFSxp8GOBp?=)y~Lc7brOXr<A`^;L2UPA
z92yBOu0))dfy-wie*xWA99gbNEH`vgV(`#_+2sQ%z>?TSZe)@Di;`d^LTu-umqKi)
zP1u59f43Knajf#NfZYQlVw=zXWVZyy4d(2`frPSep@S5S!dCsqQI30UXC3t^KZCHw
z=;lpg5&%#|p}#726IVeN6JDoea%%GlNcZk3Z$bO#b?M!gMoXD8C0-cQO~PSFxo^3J
zHi^7-MK#diFy%qt)6%KOk48V7PP<4at4;r^UwDjR@9kHCx#Y(bc~FG8)J&ldZ-4cm
z_=zBbGy$~TYzlpScrJ+U@`ot8(q89KK+A;NQ!-EJZvrDPuB8G|<q!fB4ePWc9J0i)
zrNl$~Vj!%{AaIf4Q&$wW7;n-z^&<qfHjfG^zDwJfOnP$sG68dG*k_b$h4Q>0@t)K5
z)bIO(|I&RxaL($|w&nH2-wYJDt8op|EzT(vlE~uv;$yoSsy1t4;M7SS0a|$VrD2M;
zTe@nh_Cbck`M3{xj2Xt2_#TqfoTT^y=aXvsB!5M?eh8A@@PK+_ZE1GE|Ln1%uB1xS
zX>*;R<lkGl)(U8a*G|+drE((>J)XcnvF=w4*hvsN?$d_u-2mdo8DYcRePJ9^ZzOS@
zTxRF@Va^WPpGtkMJOwZn%ZrHx+k{f@_lQ2NTxw>ueKm$D0W3OQ#QPnB<x0v$)9s^n
zgrGO_=&j<nf7D&v8ekQaLsr2W^zueda@lut#|!%+<}x-1N%RM85KFQ;N$(RU1%j1a
zy;>rU6X=4Z>&%=^(Q~bpPYOCr+HHxo7w~Vx?mWM`x&~%20LO%bM*}H~X<<ch+=7bN
zakvMM?zPA1zCF<ZGW6=4<>X9LU!5(@`zru<<=e)fS7>q(q0Y$Dh!nrbz+9RgqwzxQ
z7nU9^FK2&C)HR@If@hGp$Y(J%O0U^anm|W9V(&mk1h5!QQaM=Jk?&8#e^iOPk;D^+
zC%lpJj4kK8D>gY>&Sy5sgj_9iyRdWY?{u{#`X9a(n2NDwt{Ak51INkLeX3JNZ-H2H
zAZ_>1qT36>TEp%3#u>v}p_`&yMOdQGVmK~wxJCSUkpM}2>1OleS9=IHI+7RXB2%&-
zE3vZ5?5n0<ZsPxc06d>#fSD>`124x1oBn=ylA&|XgT7@Q<PAkgy_8o^+S+zfl%{hE
z$Lz|MI^2HvVRLz9^_k*eJKGQGR|c=MihV+>>w~1J`G~fb0GCrEa+=<$-EQZ9Qtp5R
zV_ZgWz)bHL86}K%YK6+qYaJaF6Efc`5n!fpTBR>#o$SwNC#E4MfE%6Dy}R@(fn%T-
z-MmOpso%0Fr{Fl_!onO$@4~IPLQ;UZ(4zQZcK<MB0Ko<PC_wY?_ut<7$xH+EK#!J?
zG(5dbXo<;+6L8<q65^bVAmnEDt<6&q%Y)z1=%0Q-D5~hi(@Dxs!Cx`CHC5E%SxQE*
zb5h1;Jz4ajn>Qt0(7qrLR;^jBkG>W1FP(gIO$E5kDZ6@Gg(Yb$Oy_UnpmPv2y{KrK
zYrh-u&`w4+PCg`_k1R{ufa;^S%9z-`oJB>L$rYv?(R1w=f+J(SGMoA@s;TY`=Vnsm
zjd`c%51MxYM*KMlzw!q?^Xo#ycE$qUH8ZchM6rN-19TCdTrf?}Yu6eh++pK-_6Tc?
ztXzQ2(c&BQeZ3iE_%w;VTl!MB!6SESjHQYYZbh;Fdc}BKiw-8e(uEhfyRGkMpLAx0
z|8Q_+t-#uhFD9N77IcQs-IKu4z@m>|lr7QlOBTi%S$`<$SK%hhrBAN~j2a8*Xp5A?
zhf}hge;pG1g&si84C)@TM%9K1_pxVZE(VFs_4((8R_`B}TX|ScS(pNje&Iw|*_G0>
z(5TeVO15<o@X?6rdvy}*R!T{`zJI;i4Gn3I^lEyx1uM-1j8$WFj{4awu@|*!<mKFQ
z1jtna^B3lIJ!4Oql}7LL6>&(I@Rk%g`A`gqaBe-^9p{h%Fc6ruGK5}e(hRlZIUjqp
znp(9vJ0c1ZwU*AZ=<o)GMcI1o=jw#1Ww(DCa#0V}cg>pY+cE*Q-v<R+i$KaE+EMDE
z$k#5q;??WZqWDztkT==F>@@20CC{dj;DRXa&;zIEzjI@5%02_gwhYy1*dx?8q_rNc
zB;Q_&F4|S(6nZFM(0FJD@QLuo8#|xA&_@;^3D?f%vX-gX4Asug18lUe9s=z7XDJC%
zk?o|DCZyUq>Aa0@2<G6|X_oqBrDJu8ge&j7E}|uyAgKo`G$g`P;8u#BRV`g}`Wmfn
zbA;2zU$CqIJS%$QQ&^qqNqrt_4tHO-gG`v=-9HSqb$V>lR;E;+&|h=@XtmVzfmMr`
zSBtoI&VGoJM#?*&M6T1LTG=&KuEN`CIfsqgXLR2OuY!6|uh!Il*dJ*CT0!V?I{PN{
zc>d08xNKQ~#P=UdSr)90CLTyX>n)Y=*vq+V;pt)ZJt%}+|87qoK`IGXpWR9O*9h18
zgR%<)SKq;5Vw?AA_Ijy&KMw!Wl7Ki<L<pU1gZfro)vd&L4Dt)&ncPxKx>rq}f>8C9
zS`LiivxY?joT?U9i&)aA>-#ACP_l}xObO#&XoeciuHRC#C5aPz!KqYE$7YM;dE#2m
z2`yH2$k<1!#+MNjO-7MKt0JlOZVP+9XxS?AZtg13Dz3ZXa>DXYj0`wU_0lytgxQ!K
zri%L=3{%b*PNZ@W2XcM0n{}oNo)PodKD}qpV8TkA(2?~Zqc9G?0un1%nAdK*=k&~T
z{V`MV2oJ$5*oNt0)02rsh(2+rAm_&Ktc?O76T$#%MoGLm&#(17NztphS*^+M@DluX
zkC=1_KWfn_Ti|i(5q8`_ss-$3(k=%J$*cmSK{HG50Jyg1eU<WI)cY_5(`ORWc6U&z
zcI8%neiB19W&OmJv!t)lA~-objTy6bn7g**OFcZ7&l#oh$!B$0weTSe*aPnjzbFiO
zIy7z0Itni)GgRu!a-*Xd(q6rV-C+s}%0gc$);7gl^H@9FLn9%5Se)6h0B(=40eQx>
z8?50>UT{CgTw7BWh>iF0j4-Y)nkbZVgJERM=*+f9ESHGlukC{Un?w)mS<%X1sdAw?
zEGEA-LRcD5h;~7z=upDD9_Bf|^P+83N_*duN^pEC*VE5hrPb{@CL&V=Ch!T#*Yj`R
zv{+~@WV_-RvVvPex|O4O+cB3+Q2pf`(hMd>l_QxRZ<u!^n`kmL`rdy`(~0^fNTF^1
z9%+HZ&ONJ>%%@%V$o`|q2qPHQ+`EY<jXy|ZCI;G+CW_Q`NZM?OE?`v9W?r?{M<SK@
z2em-$C#gq@whq14l+pV!eJ6{uvoEOZ6m^qW$**_glF>kN>&rjy^;U9xw<9x5D=40=
zIy@5#N0kc`9HJWa0?RtBKo%*m*QU0FPI#7I?tMTuorSHO`HdC*`TDclYX$IB-&7)(
zLnClOg=E;U0Xzay*{7*l#6A(vEb}eZr+5_sCmG}1ay2Sme0+WXljpmGXw$3hTXP1J
zc8A_!;?k95F+6N!2Xc8{Y&}bG+f=<G%q)R3*JO{Btk{F!Jh$h59E3mUzHoDEUF5OX
z5mgQhQwDXrPN}*1#!k+=(ot!&2p#6#8ei86qUiEmHeQQa;R%mQU-eTY<Y0+X@bT$=
z>n~7Y>j5>parSKvH@&q67s+?Eav>I0BN`TzT%;34K*vm|##%#oLFSCX65Hr)F339R
z^hX!h@ma4EPu@v1kQK>Y#J-52Hsiao%;LodC(~j+Thu+TMVjZm!`FPHfA<NPq#bx}
zI5IgTcp#Bpi5iN7_yk90cnP=RLt~CA05)c*Sr+T93nEOHNj~s(Z+Ne2f;+~K=)Y`T
zOEj^JrQf*r3Do=Dm|fKEBLPwmHF{q46$ST+<^UBQ)DXaepQf<*?AYWRNcy3*<AlcB
z$Kg;yM|js~hWsd$4d%Bk>;|n_VT5E^4IEg{Bu2M19B>&>*eOH>D(qs?@#!pj_gXY@
zCGgq!dspSCcqn+;q@|OHITz?CS}e<Ig;Yv5T3R3ioI<8$sHe=fdT+h&Nja(2FB+!y
zS-hSgj8oq&p%{@JLV#hNeG)29alV~!wmv4;*KhCMa~rmIX63WGY11#2maE|7W457>
z*+}a&=yEb%1o7bPKTxoHnv?1Ph=O6Wo?+Xz4QwrY$^;oYvR{u_m2Mp0^DgUSq=?l-
zMK-|%Mn@_T&c|=<8}jo}3-$fJ&^l!u3^hMZ3w$`^R*bYA!zE3k-7B&E$WxYWTWmYl
za70{Kn6&%Tz#eeHnA`z1!BW}S;YiepKoUGWgk#k>&!`xFY)qW!9XXq*fdm4;oB$H>
zPZ}cIHrZL(tE#<z#K@fAwv1#4KG9j>#k+mZOvtrcjwc-p3v9b_85<NMketE(N))eZ
zTr>nZ>fe|52=wKIz~zdq>OzMXEA!c5h=tFfx>>(!b3;4H?9_^0v?gV=*i&AW+F8*t
z;e#oclhbCy?#*HGl9?vM%*9jG=M$PXrf_6q*((}zn~Er14K*eV8KBlM8*_ta_}d_K
zx#`CH!hEw8n9V}lQk5upGPuW3Wlcdo-84uF@krTMS{ypIC%fc;D^jv$?z81Ewwr_q
z4e#}QX;$8}Ein4pjHmVVPA$t1i%L9>aG>9d5xp+%vb=+T>$|AdML2F8K%_+iL|SqO
zsd-4Mw*=SC0q@Td=|~>35i!n)bLN0cGAH~o_!D%K?%dPx6Cd*NVsx!sLG4R*>9Kc2
zsSM@R7memc1ED2Aws%3x#aZi(z9(_}WRca4ks{7Ra5*PlE-{`2tj6abgyg+2(lR8z
z@sev1)U>+b<=DJ<+3d<POLD_9yiwyIE~mRGQZDi6H4gX=dXe8qFiuXl1%i)H_QIVq
z-C+!EOV1C}`sP$0*5j2>(@GWfM@jo`bXo1f$5pr~-*C1D9^Gp^a*Z?4D|5@EHyb*b
zXtgCcs1calGYB~3k2fTVR78hIeO6%jAtuiMiTAMoN9p(&|CN6~YN9UE(DT3I4U#!=
zC5__tF0%~G@i?H?YP?|ZjSM=)YTO`q8$G+2d4<xQD?2*zP7NYkfs}vky5f5~FJ^q(
zIwQiWyXE?5cb!Zvmd|%vaC&`3>E|t<4SqxKOEw!)qRK>5%IUOB646f*)A0)(XfaG6
zik)R(<*YXwOm7HH8Tc;Y0YdBn4csnj?4*Zs(9pV?qARZFW1|q)oExu7rc9)n=gL#_
zC!9N(rsv!%Ydu9t#IW#3`bq^H+KU^qzC+)0F=*~38mN|Vm|69UB#y4e8>2bl5>Xz@
z@>{$yP`4@cc>Bg!`+ig(52E-KiAL{i^3LN!l{82Fp0R~wS*Sedr}~6@qa2z%JmyoQ
zLrtL%e_*^jxW3*eLY7{A%*l6Pj0C#yCaRW~nwm8*E-xvcG|;uyyG%We*lKI|U}dWm
zv`OZGHFkBw(JRmO#0@PWBsoV1zV)8)JoF%L|J3Q7AxQ+ir(WsSP1zpX&I-&0z4v1O
zOOByuY%o410Xj5AcE_gzb9tAy!=>gv?}Ufco`Ip`6#c4OXL#NGp}9K^Po#w~>8KQJ
zAP9T(1jDkvXgtU8pxVmxMN(0@m@eP?aimBPFH-}48_^6H1KqR4A8(DIYed{lWeBRn
zLf!bVdvN|*q`<oWXHD1)of|`O8@dg5*-9_5qjOn5Q){N$ulzVdpnFH!H9{#>Wg6Dz
zooIg?-<<r|b==e2TP_}8xB3Sw80U1(`HS(_&%e|wT#!+ISneCC5Lj$n=I!6vEO{NL
z5zXOw-yB46B`%RHa~%j`k|!+*nK7Y?=HEg#h8~V3maS0b<8g*#v~OBfq!7<2wX8Jv
z;dai?SIDN%9Jo^#f;R?FY7J-6pb<zrkkvV|<ai9XQpP6|bt-XXfyDE{T-TkcOqLVg
z#x@STT!-PZ2=V$9Skn|Qbq_zKinEO%{S?~0iK;o{K!`_B`fc%a6Li}-KiQ&(`6L}p
z0}o^n6bx(@obgKyYuaCEFBud-(X+yVFz{_pZp$YNs1un?v$wI)eG`wU3fZiBh9_;1
ztcBA-3s?X19kzll(gO#5#VUN^=<)mN+TaJ3b#O_-qO<%Sk>@r^u;=a3#3d+4PeYSQ
zxlVM34B%wE{pC*QuS6b^&zKe;9;B+cXqCYem!4Hsr*<IA6^y#vkKa}u>um`R$gfWE
zE=$uN*~i(<HGWjBvRh{m>F7+o{qnv<`XUD6@a*KJV;xd7?W5R1QS!WJ=>U|$wMJC*
zYcb}!S67@fTXTKv>91Y@?<}I!FQTPZ$P@dKgpK0yh45-v1#;9=pk+f?Mq}$#YmAG=
zsVplW>(a$e&&6Il1gM?5RA3j14wDCsfgg$k(Zu&aG*R;%kN4;Rg}IJjsjOvAPlCz@
z;I%ajqi?q4C#>%Z;92{8q$B?T&Qm8_6aGjS)>#TX@ANuFM~IkSaTgu|Io>4fp%L2Q
zNhY;<AdGtRi_6T1LgInLkNRG&-T#?lbUS!Y>t)&<X{&7wRBb4NgqaI5VJ=NweU&qx
z_LWjcVQ6KkxIv1YrB@kK=}fpsV^MibnU32?T+5S$kVMB7m*&tcL$-@`&6$y)%cBf#
z;d3yRQ<_!d4F(x_wJfivjhrLk8wMvedercNV{4qixQ+&#?uuUi@tG>CNiQA0Nj=2}
z2g_CJ1MeGyJ*0Vp6{02<XKlV2+}?VHN*0|4!I3z2++y*RB3a7l1nz_k)G+V%{Gpt}
z<BLswEWO*11JQD}Mmj}t6cpTXn@xr`M8?yM2c7b}e(Q}|Lq7RrY6hMj>+d4+JaUeV
z35n!+4~n!<tX?7NT2x(;t86{nn`OB5C2JgB+x;)i;nQB*jk7nLESkKw-E{e*D(QDc
zzY@{D)DJf3@Rb2$X3+P0orLr=yeE);L~&syvWZ~4WnV?iqFf%e!#?-U9LD%bHaE{U
z5k;H_m7}eZzlLV<Cex$y3_jz!gT{<E6@YpC(ZOHMVTO6Y^DfYNNZS9F5&B(}+{fwJ
z_0C;YPMM^?ezYoSr1X)T<NxvWl|gYfP1mrvyK8Wl;O-tgxCeK4TihK2!3h>f(BQgw
za1HM6?)ojcpZEJk6?IX}Oxx)`Jw5I@v19{R7g#=o0Wz&R5aR45Mo5a8tQ%=TU(uq4
z{poQ3O6JOlze+PfkwCP5jMPi|;e}}^zc`y#Ty6g(1|gTr>6b)3de4Hie<7##k@JWG
z>a2<q1*Q7%=0RLD9p_K@zkj$-4nS*TZt=YX${yQu9k3*tDxkSj?XGNMH~nzKgZ3NK
zTz9?2PP*MTPf#<YHNbW{)W;!qB&gdDR$HK=1i`ZbVj(Dv$>7=89m(c`Y`gyZ1qgiS
z6rj#cZz7J*%+?H#@Q|BBX9vd_H4Yk<3(TyqA?G4atId<nYZpjL_2kML!=;tHAV*~p
zgkhz5{et9b*Mkcm*=@?0-`I@;TX6d%+O`Im<hYzCK=~#4{l_XUbs`GYuIGBpu~bei
ztvJc-2{NWQffX%OX_y&2A=Rb<dEqbUvH78;I(7H$5%Bsz@bi#>CY2jfstK9gs`B-#
zCd9naGo~!4d*L8g0Pnv&yl-U%9g=3Zbwg^0#+?}Q?7mrKE5?WpXwk}WA~2=8{cp3t
zEz0xHhgMWFoubKpz)?cV=ru9*8~^j649uL-2sCJ5!jd@C(Feb;J_nnv+oGSK;_jK+
zIMM63FQ#*PV8qrhs(Mw5;gDzO5`lOo=*iqrH5799!3VbbAKGLCaXxnyH(Ubs+vKz9
z8P<K7exBUvV93&lDYQ)+hLE1`r+u4@T*?|uj97ShW$(~_&ibc9l+Y@s0r<j9fqif+
z0gO4F<TmRY=7ZgOdsUJwQUAUG>l$w$eBH|j*Vn@?YIcA@B#0RA8P!ow`~yYz-+^IT
zT#=bOin8^fCqIqHp-7fr*jW}}-IQK`CO@B<j7UlhtXB}6lVXR<G)A4#Acl49giBhN
zboBdB9Ygdr!ZubAZ3$5%Y*d}7wTX#)Eg00TEM;^aP8AmO)r%~28`--Xt?p~SSX8i{
zQ4X`8HKQ@!FWjnbRMImc`2G`O2ZH$o+bGY=V8`;1Sn%NW&kYO-C;vpUJ_4^|ME=;L
zaeqt}t_S!si59`VRV`92iCa}TaiYVohrcp8lAZ8>TdcN(t`^w=tDXq7Af=@g0;xlc
zQ_?)R1t=db54hd7Bi5U*#^Wt<dZ;_>>MZ}y{*IA@EaTgwxO|#oY&8<b7i_4uLs}Y$
zYp^-HKmMQ(gj*#Z7~f?9WVwYF;!Lbbh4i)pgw|D~VT%nTfeAHINwWK$HFgc>8O(My
zDE}FB5K;mJGcr+O5I%9!Net9?e`lvUR^g+k`s2dtw|(qA(RlUYUHC#4KZR!4f0_y2
zDewdX#5KhS);}c3vkbnC;20Om4nQ&<TnD1=8%w0*t0v7(>zsdAg$Z;vDtN&xJ=~sL
z^vcyO?)3BtTSeOaodpFRd`v_-VlXb%D1gQQ7N1a`9^_-z2xDbA((@1}W&cvO#?P$M
z+G{bHRb+>ad7Ob?$N#7Gyo3Pen2{-pg}RFLxwj;Z@3bu2nfVjs)@$Okrlk}Z_qZtg
zl!Kk(4!?g7(1mcL9Gz1v#`Ouw<&c2-+R-*+D??Bic(2cvLNCX@c0K%mC#HZ=z0>%$
z*xZF*I$r_fJU;7*5A&$eqX}L0xdvhV@8Wgp2}wg2!N2dD65$0?d<3S-@(lklxOLbi
z;Uc`?XL7Q34~Ojcd<#Lr5Jkv{VgdY;N)fWNY7kQQogvJ4wx|VhkS<C@k8`|xpovio
zuVX!S?Sp92+kNwdqp<6gwi9Qvgit=YnAy$O3iIC^a(<;^r0rKGV$r<%1)(Rh!A)7e
z!(q%fn?tl;#Xfmf*N~!i2pj$Rn4Y`!f4c}8BM0^RSx#)Vc|?NXwep%eVD2&JemOIB
zTgTC{;9ySxd7fPF)$nA}X0152Lh=W-fa`Gi8S&HCWO$-ZJ$PN0{WQ+n1{U%qB;4^o
zd*6Md=o7r4zZnE@SlAEMry*~iMcwLL=NW~wJTIiU=i^CjII1Ci^3MZGQCuZDq_d$C
z@@6qf#3TY4r>BZC*bd|NyGqGy`~S9#g04-$a2gXPDh2bo^C~~T!8``H3ReVlSJ+xn
zAC;rScWVX5z9#nUAV|mA-BpXodwXFZ9#Y@HEA)SUn_LE1Y`1N7UeiOlPC}GNmvl)H
zdBaP6vAGzVN^Fy%^^B4x+xrIY^bJEd$Z7B)Au*lb{%d)vs}i|1F)a*|LZFABqyZdn
z;Z<1p-3NjVz=;YPIvuUL1yz11M&!#%UNByY8VQ1n%umL66}0Y-sfMC9co<oIVyRY{
z$*K#hLI@cf&cw%nT9p&4dnf<@9Xks-KmmHx7lPX0Gt^rAycAp&#PM2*@hZLUxU`vS
zaBzOWq|F6>KbaYQc6|Pj_y0mEJlJ(V2=8mc!y|_I$-i2p7EUH#&iu*b9Q8T#g7F?}
z-5jU#?y>!-cKg^nY7oz=sa&}CjGxyO>RUbyE(a<14Ez@;gaFE9t*A%53#Ug5<-waY
zR-v@(X+;JVO3tC97*<oFd^WEhOpz*41nTuvf<E0bguJ>jX3qkH;;IA4E-e2!fq$M8
zc*)thZddcbO|J;S^IS<B-4H(2!o=dW9$fbZMg=saHpNcW3Cq9tc%M7G5gz9SjJ2EO
zkMC@1LAE`->-Ad<U?~H)zzW#5rO#Md1_RF-w0{<S?4$4}4K?%b=aE>pCqNkuQ>vhI
zgAYjKJ{`eAI#fz;2yMc2nvuZ+8x{Ee_wAJDsqI=5KLVce%MK7`64#8e&t^oNYud>D
z#E2@;jj3*}gk`Dh489_F&dZy6KInfSDZP3Nec9mJ1xjz`Y(ps}-U*y07?Z?vbAwc8
z7q}wu2mWavIHU>y=F=<n>j<U42$4w!=Qg=z!5uf6PFNu?cE-y$S&^HeC}UW*v1{>~
zUv;<4=ZizyI^}Or9UiZ}JjRJT<KYeL{u8*9Jak5e=g{z~KT#agLYiC!mSjPd8@R{A
zO#&VE!wqR^f~|1*sDb}1Z2+k^;1MC1xA$J~?O%KXRbqJ2xZ}?z2y+XNN{Uul)?gwm
z<=+3gK5Q!RaES)4YHd!_>0AkwNTSYr_dq$uoaPp=A@8xpYeupWCgF$N4-8{;B|J&R
z%z*|JEPD(t@5hMKzjn6)$-PJsLVs2ZPTiCS9Z^d5+GeirpJF*JstP^xhal~lzXwMk
z#{L*Q{AMlRIUOpnGhY2isj)(YiHNM>nM8FJ%IWv7GOf)ZJS$&)yoEE&-*vpK9r@HB
zgrN)!OuE0H^$L7lA%9+`4y#f9r!v|2kbYw>#?UQjfK&fUWhad$>voKZ)+(j6)qONz
z?j>^<ZNMoeRaS0cUM8%&q~dJgm7bEdr?B&t(g*e=^5`!q4DASV^!|q4{KEeo%_%zg
zX!wNJNE=%Wzt025+Z*!>4xqI8c_p#}#~AP;&qN?oS(Nif6)GC6SwiS`^V<Wv1`CZq
zhubu+gDsA2bWHj%{uf(;$PKCr-CHs9#=UE!-P~wK{Cd2`Cb~-f{|EHg0Js#@=S1xC
z;C|2_@*LPtI~Gxd5c-THfeYlRUx7R<xO%2g>U({?-G4WkvYTa4v0H#^b9n_%{XJE$
zc`C&*+fe@*O_0(D5V)-(IDun{2yo~lRXHW`OD4yQhe}wmZ7Zy-obz6>ytG8_xAMl+
zM_bhc53c?|rks#OKH(-~JM7&)x)BrtrIWt0o-j19a6s(n=wSr2f&9_M`}F>NK9y(O
zR%RU59WYxBpy>hJ{1q*fF}=4!e96&am82KpHrKGl$K&{KTLq4NY@XDyU1jTq7p5MZ
zo4kku>A?5~So`%@R^u-ng%B>n|7YSLWI)v_)%GU+;;ft;ZUDn$Fe`FbLU%zhfJaqf
zp4KGr^h0rtS;9lqABSqHiuR(eyEOWK_b%4$r7p4(W^L-#7D1i-J4w|4p@1Aoh`dH(
z{Gih?pyzTM>qYU#*RPryHk{{@SXQqpmVTay6qdK=w@$2>Z23Oo)~1xPKZZXI7S%P~
zA1VA95Rn^@oygNDE|#2Rhx@m}W6~fg-<PhxKaoYSna}1f#3Gbi4`hcN?Hc{Zi@p$=
z*t8zRVntqmVCaCnF|X?RiPci?`FG1GYBiV^Sw^{)-3vpSvdOf%^uQij&N5(Y$QiGl
zTW=l4MF5K8|McG&nm-7XO8wo%EO7tqduRc#u`u@2bHV&tN`ya}s|EW?3>fN+X9%n%
zc@aL}Ifd~Skd86uu$sB`O6z$$F=tBLYx2#1CiDsFz2`wH2a_xgScjjAH+cVd!o%p*
z&rqu$eY2x6n%3dH`bG(YY#)xTY1Xp9x7;~pG!E#ut>I;t9edMhnY%(Au~CBQPJ7#F
zOXh4jVm6ik9?;Jjp7%S!{4>>R=%79snV_HD6G!bYezqH7y*ekfJ=n^}Xpndbe$S$|
z-(1X8D{X$1MTO1DcntS-<5r<VaaFP*Jz-I74j79hhYrlHn_@(^NK*XL=a*?xy~}!6
zv;T59X^;cD6?GV;xRIZuji}n|k=9<m8F_wZdtCQ-jm_UyPu6~CqGf)}3WkxNA5fV#
z9GT2yf)H;#!r4lt_E)e~V$XQ&FQv3+oyDMdSQT+^7k*gVh5wfwN`M1&_Gz-`8|++B
z)#~2LUU-(2*gf$YRUIoMY{e{yQ8wpOG4F}DSjPNeoCJ^u<?<ZuKk*Yl;(h2pJd9FY
z)6U*Y+mJdRsmWt|`4n@tE=e`7rQsmu6Cu}PRqw?Y5L+pIqTyIJRq=>%AW3_B&z={t
z;Asu5okQPUu9UI)>wgLg{xJ~-pOM^s5WR_8iODLalM^^-za=0`7cg(AK-8WP`XCDB
z({?uCnRasT8=)I|;z)yJx#PXa?}1~2xl5^T5BrG?0=pUu4$*Ml9ocYKYHKMpM)~8v
z1QHV*y%oE=lj7rn3|p-@O%q2ts@SL94WIfIdHR&xEp}kfnwpW=PBogf+ABxD-vfMx
z9cN#5|8pJ3B#<x+`MN}eI1v>?!MWP^Q5God3EhlBekL5LIvVjgv>i9DNp9wyVys*w
z^o}tMTLT<&FUL}jjVt>%4M<`4o_bdp_A&g`|HJU_a;<iRPE75rZ6|E-nzFULHd&Ne
zP7*U}lOE}UeCw2gT-!^mUh~IB&7_>FL4FKq;H0z8U;iHD^f%J6PtUMZmDj{tT4~@v
z9|-~K6<mW^!3{d(WNz-zSproPz(OMqEw=4q2zcUELixgAlAC6VO&r6iYF7=(KKxz^
z-XurStCjpbl8rDaPkr5kH>~X!bUjdxb+I2(gd@^Oyv^^zHBJU_BxNBy&-;9YZ91#J
zvbWHyCz;Z6cFz;xva1rOhx0nBu^zGfjX)&lRzy!?QWLsfp><VLQ~P&Jk&vJXx^Q|h
zzs@)5-fOzW`LG5LO8QRQ1yx>D1t)P{IB5_7x+$*?f=a0y-i;kl@+hz0dAPk;pI9H7
zw`UOBft6Ky<I8{R@fT^0Z}-b=bLeUY)en;2(#s(cO9coGJltKVRDX-p2kBG$huGu~
z5T7P}U!%+i&l{MFeSiImSlC|n%nS=xW&`Y@K%NTdNvzb!_}B^%_xwZ15g4+HI4g-o
zgbC^&N;i<UKKrr7iJESw4F!R1f=P5eeFV|VPoOMUn^ZV=3W-MYUORhZ!Qi2qW<}mS
z6YIOcFQxLvCUiL2Ca+?A$`)~0;Zml62=PrJEUYt3u4=uI)$=&Ov5e!rE}RvM)}#{p
zdcc$t3$#`UMm2H}zu)OukLQwNKBVr_;aL%t{`V9pN@FN!+@eTlL~3Ht9paItLW8>S
zYGWz;AZeZAwos+zS`E-+f3?$Hr#5kg9jRfk&%e~($&4`;<Sh=eeo~4NVHlqdTmSMN
zm7>sjT_lMkSid%|{|YmEwnA|GUgD}w0GUNm-B=Cl@IX1tkTo{|141(O(M>JwkPD3o
z6hxtRSHvxzqrohIH~fTLFBq~_B)Kx{nDjNzvbLWhwSe}ILvoQ=oyQi@Zlz~(7)6RT
zUowUj9ONnO5@e(@2LOD_9`o9K-tyNJXSY@eEW#2={*b<ufXw;@*CxKc{VR^&Tt@7j
zW(2}Di+u@v+I`#|It%iXRQgxbZr-~b8qp0pX;2rsQ%Ofkls8-}UvtX|I9cF1W9!I=
z-i(pAcYhq}IN7sO+Q1TFMUc4*w11_3t&~@I5K*{t;UC7(u9tU{BZeMC#K`SE;+(k5
z&Q1nPapZ%F+8jLAn}U+kS2(Tb*r(S^Vf3@JRfiJg_%sj^9MY1aWuho{V^@qE7Ru&W
zPr_3Nwy&3OmziJJx8S~;-j|DTST8+pq1Ng8rYp)xE;e}Ff|H*U+CsM^a2MVUdWGQz
z!+R2$LP~3=ZiNdVZwcVj;1w(vUN3xhAhb$9GTwE-!#sv|S~in5`=bBr&mrnX5de}1
zjz5kt8!QQ+|AUYSYSekm#6lF6=m`yZ^R1~m^YX(Yb8s4K@+?=-lhV=o=1eS5;={z~
zlM>A?$)UsckZv#p%cE{^k!&JeG}jMm$9(2B&48*VK1%Fhmn!Z!y4O%7kl~W1kFcc>
zU?4t<hdk(pqJynpFS%8J1zJbLhE9srK%)@W#>rNk1pXZrOb`ZnqT)$-x4W<1i=DDK
zxps=4yGnF2>Nu&wuNQv?@;F#B{5?ODkeaYM$;+i<k@*r(Fk+WZ%wqTfHrjy=A?l(`
z8-%?KyEPow^@O7N;-&~51h_|2P^-YuB~1WH^ugF(M5oZ<7b}x`S-H*OU-!fQetvfe
zEMXY03ILG-8g~zTT^Ph|HX@p*79N^s@zmV#s1WDG($cWO!K^0f0daDgwd{A{Fif7G
zMZBvVfE*c7Y*OVQDm>~~DZQ<8b1ULgW{=NDeh(H*>rC=-u%~`Eup4k3^!zxZ{+6Zd
zTO(i#kpe!A%{meJH8lv2vV+r|4-=|iRt1C~)FAaUg?6PbWT<wlT-#=sEaT8f@t#_u
z&q*;ar$_&)gc#AuC>$DV1tEIi&VVjz`N_ZJLV?p-UK&7ELc(&ObKP270aU1ZgB>Ib
z!*0TAIF|FVF~ed`@bAKK3KYjd&QqE6G2GQUbAx$YN@GT7rUTl^4bc&nUku8lbPTJ$
zoB9_U*TF;IF9~NW8vaTd3&a9Z(BTozU5JSBc6n+8y`0qY64zG?Iv@eCt|b>YcL}hN
zr@!5etSbfMJ%ypIXbRHtVx>OX5%V*|_O&{5eqVS0kO+EuVI)rUL9gFqv{Mzn%V`iz
zvS$O}kwRLY35<47>EA2#a2Z1{iji;HusSNA`6?DY;&r_FY{bYwMQ*0hj5S7Min-y5
zisrbQu;uhRuCY!oz0PVP@O9fjJ5A=mC2{J-vj))!MSf(MIq&&~s2vfbmHX4WZc*6s
zz0&+7L5?nT(Kzx60uK_e70U$D2fAZrQg;g6;D$!C&UsSyr$f0bp=IM<klpQ~5d^+_
zWVt}RA%>Lff+@Y;MloS15=DBUp@(X*_gcry%+s3x{j^Op9?29MAB@~51V+}jG7&CR
zQzCBT#S?r|V%)#H%^Y;ps;6y_D22VF#LMrJ_~Ms5vaoS|XPlSi3Bn2F+Y{Z@KZH7K
zILuwv76`6+St*Uz;Cc1d27BB5*T7GrbEBWf=it#afttCK-JVnFI>3F`;~vWpdxB1)
z;OB)S#?Q?iOXxXK@#eZ^%KEAg?CQ&=iQl6xYAmSYCB%5+oXsCeQv0W7&q+@>!p@`Y
zv`j)EwGUD*o8cY?8XKlMgJNleAa1G3+NDkHdHoI_FE!;vJ$&7qvIWlPuf@;K$JeX^
zQ;01MG<G>)uQdh-(29*i%MuV`|G+=OI$`Fmd7Vac<w`|4AqI_GiA{-(h|kDi%+4<|
z;j5Jn>z0q@+`lDYgMr)mjcG<#9se$8HowoB0CGSEMDY0THr|BY7jfNi*b`Q-4yEfe
zipCyTR;;^D%z9M!653b-WYjv+N=$OgAq^KiQC~;Q#XC~iTs@>gEExGx<~;gXXa$Cq
z;Wt=8RQ48BG>AHvSP8!{g$yS3Vj{h+3A3a3q&H*=R4u&YQAys^bOCeze(4hv1<Tn{
z7}e|m`<s-VzlWJ`&u--IE4Ou(&cfBsdh^6!6Vi?VX>4uwoHbc!s{s>yZTT=b{EOYG
zoouA@P2rggDNp;e3;Dk;J?h`DdSddpWaqmqp)7kgAYssg(^qD|O7of7myV^?2BnGW
zAADlMrz|1_jo76-abh}z)E<{~5=^IT!j7knbnwOBe+=5$+4yw|Up-;%PC5H6!4nHJ
zp{lh2tZ!uSOP@Er5Ze5k;14q=l!M=G+f4yl|9o__rl7#-2uND8m_9cTk?tP=7;8ar
z;z3<Ch$dCX+gL4{Nu!7Q+P|SrgJtf<z2SCHKkNW>Zz5$9@nV8Wn0BXs-#U?pWl?91
z&G=wu3#_48u|gGq$P$``31CQC$&x^maOgR>FYHWX^ZkSo4h=UxgLgnRRy3V_f`UYQ
z7NZ%Yr1=A5ZO)LMISg;nC4ar+cM2U?Ecry_69(_mptWmsP?1eCzc8kgP<O+KL=0${
zp`Tg}W3-Q4vOmjZvt9-UE5bi(DJ}TW-dz?sAYJCEOTpA9IAY4lK+|l1akf~@^c&%)
zk9Q>Y45<AUrmLf}osKqEK*g$Yp6ijb9|mIs@bj3Et}kZ(g(U|)^-pL4oja1b%)_R7
z;J5*{A$^hNz}^*(2sC$f2IN_#F5!w_Wf(LZe2!~#RRVt<!1Xhi=kTW;@p^<cw7V_Z
zt<fr4q=DEYkbfyV1(;QEa)566XN9h7<14i{pGJ%_hRbtw=|CP#D<Jib{1V91H%2@)
z1@HD2Bv<pM&(iDN9}=;*A<vYegV`u`i2Rs9j~oy`?EYSmck7I_>4ZqO0iy1Uufk&E
ziMFz1Mdv7uEAxJ-{GAhidzcmSRo>Qe^Ji{?euv#W(9*YO2XDvrSTYa3t=@!xnbCxz
z1_%^D1jQS9u|P$1(Jui6m{&;lUw(y1CuVCEhV-c`sBb80Q&{~$zRMwjPWjCaSRoEN
zo$>t0zBcNpX=#`1xxDPCira;^V>k2Hn$c2#5_Ye3lsV@7_~UG9DU4xMDr=>!;F`wf
z<vT=ELWjRqu^D{m>I(Oh2qRp_E1Dvz%QHC9!fl6>bJRP+SPPYWzI^CDxOH_#lm-c-
zv&|__0jgp|=9_4%nh4)0-svRZZwhpb<E@VCT<bzzX5^U6t0u2Ud<9%(PtD_|l?E~6
z3ma$JfZ@2BxcV_2vEWzM>=&=;(U*du6%t*4Q?N7S^W)>8oG<{->GG$=x?0(Z-}ab?
z{zpj_qB{RaNwvz@eVIXs&8O`NypVDzX)BW)TDz3NohcMxe6Ik2Ww@;B^*S6=*p-nz
zF75tvl+U6XqX2%~PFg%b-IP*(dYSHgk<220)9OhE^jSo%x7(oVwYFU|F69nPMZ^N9
zDc5%@Kl?SEM?2H}d8ps#5*a>#`~uN}9OSDNB^-cA*8@m3(2N{m>sXrPXRw@<5P`D{
zOT;$e_6S|rr>uHm<`m-|3uW5sP=_TX17~?aIp`LNch^3sFr2i46vX#qA;W~u#cmlC
z39m)Qny2k2Hy^_aPueuDRb0iHXvRL)-I?{C3XoxApMNDrORoBMWlQ5bG%U7ZDh(RM
zARmADo8DKKT)&Wm=JfqDk`jWjZ{vCcLLPnA*HPFR{2ds*oacrE+)*BIqod#G%5dPq
zQ10c*CZ;PTK4jJh(bYgQmZmS?YktN32#QEf4sEp8L?`+JZ3fTusMPk^DagoNHAkSA
z3sVv@$^#?HgKF8@wtEecV)X)__EWAwPVBWWQP9&EH)uos-R6M6!n>SLBSiX2uagGo
z=dsy1)Lu=@n9wGG$W8KPN<K$#boL)JimQpOEwh*UW9gUc&NWp(;bolIdK7Jhn6G^}
ze1?9Pw1vW-fs3M|;y}*5&RkOaYH}vbi?}C5lUZhUV-l<jOtrQ%7Wj-qTI+&2TH)nu
z9@`<$^q(Uq#?W>#5C^**E_X8*moO$ZRlgk3jVC4`yXlv{_Rr!&LZsGs6IhCfm>}R5
zK_wixI1fuZ-dSvt$a!7|jXOx9c|CiL1&HYUXz2ag%n8oTB*Nc05D+mSe%UiOy-a==
zxaB3C&j=33->_Jk=y*1VrGjULYx`$msV*Bo(ys~I$PRVV((cd?sJC8zOLZjUSL%Z2
zr3P>s%Zx|P4agiWCXA!+M5=h9%Xz0_Zh?I{EA*$E6tc>dz(l!+Q}>)^u2>*5M*bd@
z5G`pohfAng`fB5WcW@_b(x%rq{5*OPy&006Cr0}+(uDv&Q9^yMz^bqAR68WKB{t$8
zom^xXgA>^<|5B7HrmQc}+0c+Orvl$HJd?9#$}$f&FQemA&t!YRXfj*t&PJw|U!8R3
zxfRkmm&NgFZ$QD=A2(Xs^&KKfgKK)%vG}36SB<Fq1qwlA{?pDwE+3VqjsBG>L0uSZ
zf0bW51Snsgm}xJG+pP8d!IrlF1$v*4ot&R;J$cf9v*>$MRchjTdj$rFfB@-8ig(Tn
z)n(ONr71rqDeF*x$7#*_NMY<2Kgb~pSa_Q=+luKqJUkG0C=4I#bQ5)?2Ml%2Z&0Mj
zo{ij8n_=u<$U7&FKeaV-;36FTOKx?ELw*lQS5gSOx&?rD*r!ohou@+m2`&U43unxC
zQ2*47Vv&Q|fDRz<RhYf{jN<gS#qEc!_#5JXRmQp?ARG&9>uEV}<hjS+;_ig*=`tA;
zQ5S*C!WLvda7q6?)gQdHaUX4?7O|@=v$ay!nv2is(|8AYSCPQ<h@Znl)N_gm=gxP@
z(K{V#;=y+-7~l-PbxUK1n;o!+2g%`YNf=;x+c<YN(ty`1*m>`49V=Q2CII7<Q)Rs|
zdLL=fSt|!+A3mjhy{w1r9Vh}|BYtS1@xSRfyw=DnpH|Q9hDqx;_2Jq@aZ(jW1i=gG
zQJHVHqXzYgB{I?O9P~0ijj_{LNkqPv-}0HEtsoL|2`+)-sn9+Rf41&3Fq}TWYu4Mt
zfha@DWxS76^J*;UK?azMcfFjLKH^_Yj3RvM0PnQ6uu@6a7=gk22A^>tuyyhvkP`K9
z6`1D~We^F>SJ|(}fZ(1hDV+%BTvSOZ(Mjl7Mqw67(Y+nr12ah9b5~s+gL1D-{WdXA
zlk)aVC7`h>1nCp_^!1SfcRg(4$eQ{7mEmbcfw=_N$BA%TmNC!7WE_C_P~b&-wuXvM
zgM)A8hE*yhSLD$U7_j0&L;5&OTuB%<U0g{8#3v9y%1DFmS9d$6ld5Ruaxj{l;CXey
z&ht5}RjX;6MHE74`^DVC)qKFKsfD!IMoA@`4)FzL9FnsvOE`5?61`u3pp8dz{SSsS
zal9dN>OerMF4NoKe-xK?sOV2iIAOiIar_t;R|;?pdspicFxsv2pZ#jv2VTx?yy(w8
zxVyC5fWf8!5>arHh6?Q0c{dOyK>T}Tb-ev}i6A2hVIJd7N*zphZNCD0q3xReLr+#t
zUOlVzk%`n+iv<VTITCx^7koJKO;V&Oss-VSmJ51@@d)69hy|L%Py7za{cvgg9GjH4
z1$OBe=xiMkNW-5sI*(-;okCk&N#1?XD|-GOoRG{m7e~O@pYaQJ%JoQi{I%(2PyS7f
zZGH~GZ3vL^2JCs4#{GM^Y9Ik9nXnXd^^oSa(tr`?lz?eccY=D-t6=i$+vwcC>H$i=
zOu@H31bCX_YHMtcKkJn6lQJ2m0L`$36C&AVPU2KegYWK~5n5MB;+&w+e|EkcqM-*q
zTjpJ>z{wBM=(<1x&gS=b?b9QlIOOa0H*ajJT#mGWZaUi*crQ`403c-!!0zWP`sX+|
zEB-r|!NU9~k0Xk?+9P0?!B7?Z&SKo@9eC8AW}u4i-W#v}*yRP&7k^G%6DfgExLX+C
zMCp}6FpfTc%Sb<8f2V7;6Ci{n_H`&=eEKJTOFxeKN`sQn*-mMtkVWhjOuwuqu~5vV
zVN^?iJ(2i0R+-JRmb~nFhX6Uq-_o-wdKvcp9Gy}-)U5+2oa4X=8#y=*;co60=fk#W
zI!HmJYZ&_P3Qa<1ip&tK<&>8>&YzwXpii0_s=%K|%Zx0q9eq^)SSCp(l1`gAdN=cx
zCGr8{sVMAAz3MX=MLy8lg*g7}OjmQJw0Eim37l^;=$E8X%;Bdz@x5}Q4L3O<v(&#5
z{wY!mypu4J#y(`M85|R6kI*e*cKM9g*Q(;y_E=_Lc|hN4VdvBIkn&DhBU+?aJS+R^
zPeN{!CvW@w+dgz_AqY9U_C?4Sl&kvY5&x+Q`CFz@&Gi#jZtr%~knjv;60&kJG|in*
zmakmnuZ@T)kF3}@y3bc+REL0Po2;4VUkfuRnFESW+|aR)gU8+Fm&d`;{4(JMmeuJ?
zap`?wdQ-5QC|5DIe`!B5ejXT0{W)_(;sw%GLocl%0C1E_!Wjur^HY4BSz>I9NY~2G
zYxUJol#npdu~#%yRUGX~q24(wDzccH;j;O~%t_A;Itm}&r07RQL^<6!JH^;O+o)85
zj~+UNb+<OpdHk#?)wihl?ct~~k9pE+ktgt_Zay&sp3L4-wZO*e+3X}r(DrEi$H4(u
znkoBiA~_+ShJE?&(&Bwon^%3_HLXKEkcYPy<1Po)`5Q>}UpBcFu&JvX1cZ-s4B2<#
zNIJ_HRW1PDsW`sUmE)rY|F%^~Y+8%G*q394Zl>EvRbF1s`IF^ML7y<iGb)BIcBaEB
zb(w4N0e?hvUL)Vd>T@Lg%YNo;wDbvAIl{MDoCrqaF2^w0-j5P%q=tJ>&m)i>=Od}c
z__Nc68k2?&h>@3`VF;5DJZLu&rL=H8wf5BKtCeb2R(V(u%Eb_8MkJ_>s7O}kSrmTD
zEBVTaM6pLFFn4hX!877qBT9o|Sbd98f;3ku+b^bojq-p;vF}DoS`x*J!HD1L_qA!k
zs!zKcm&X<Vm$0&egVNaVti%GF@A+^aq5WA1Z-u}2u-=oC7sq02^?5n$ZPlNtvAX3X
zBA;W86Ys}KqdpE<z*%;0hd;&3bKFlLRSPE1I3zoy5DO{J<Wb(-jl#XlN?Dy&Cx5n%
z(b}ui?}T)<i;Wa4*zqR1^7I<}$CDt(^#U={Rq)z^E58wwWcgRN9LD1{oCrD9HjPTf
zIJ9zq@NiSJ$}qd?49ulxs`xBW84)>yj&ye|n1prJKTd=+>hw_>bc!yzh6}aFdMeO-
zR@a(US1i8lxp<VuZp13HFQ7Bj|9rE>ff_BU_;~0~9?e6!;IO!5097TcD6zYWv#=ZW
zXX8lL`-Bg2HFfH|gCK}nLDJ7M7{f&nTmt(O$Uj<xMBzL<0m1uVOgs{K)$rs2=R+sz
z7XWl<^^VM2nQJb@X|t{-^Aq8jqM~;kvf%Y;>Gbx_@ZfMaB$Y9|Tsn(nR~Q<emLHHS
zIIVuF#Lq}6qFpI=wLfwGU|WjVKaS}$JHatfCc56wFZd1<+G)r51liXnkwS7OyRRoP
z+8Y9V{?_SCe-Y=m+4I{$Lb-Nge%>niS$vYa0HwQ)G7hF(jri_H2+$uEd+_2orG~P~
z!#WeP20~onQ2hcY@2S-HcAU4V-}d0Nl-OkcEv3E3-!IV1^s#rT>cldwF?0&1%$gRw
z7OYdooc&GDt&)beGn90m$$P`}yra_r@M)gmfMaGrm7*RvUgXZ3t__l2*&B!n?^VP9
z_}HNbE>hq9qC@mFp`_U=$&#+*|Lqb2&JJPl?`&eU+D!zcF2WA4Q%A#-o^5wOiISPJ
zIf)4ymW0&nL44MkgYM(15L$1a9Oj={f*Ei^?tB9X8mvzr`E&z4rwUp~BZ7JLRiIhA
z#FED?r1AA>HQHgR%^6Gr4RdCpa;PlB!+k+FbS9x>*Da69o=>^I-OqQ#rfq5Tlh#of
zEo1-&uHLe&6%kxkc}31MKjuYmOHGAJ`h5-#H;zsLKOG{2c^cC}rk%K(kAuXq7;G0z
z7x|WB$<$8$yv*Qkh+`Z`^_OjM&C;P%LF1=`%?~xMx=Wy^r#f8{$i3&NFtBM8%~84d
zNZ~Gyu-4ggwdB$UH@J1;?rg-mrfdAw^<L${U5$s6%V8lsFE7*3(6G4N5&2}}AZeZ!
z<k+2fo=YV}`S)Af(wU5PmZuiUaN6ef)3(AFiF6@e3tsTj{lw%dY^HPDo<{(fgFz+L
z<emxaA>HEPRM0mdx5cNvX@fHTN6?R?LQILNGjH=HcJBaT2We36Rp^s^2Olvh7(_Oo
zxrJtBJSoXE$(J1M!@noKB~>H?9#GKb({<aA7WV4h7WhqEKd00UuOf3=hx=eEMZem8
za&_f;62qST`BCll7<RPL8!J_QpO#0r(gCp8qJF<A3L{w80WwQjPU=-eb`I%F39erq
z$COj9r5jg52ny@O%N!X<+CvMXrMZRBB3O8pX+gB87ztyb+KZDw9>Vtz4`EPOr8Go5
zGr&Pz`!1POQ=|xADV3N^j38O95M-8e_DsJ<mGm|=i;0hZ3@b8v26G`4S!jcr5PMWW
zLVmyN)VOs}MC0MbDx?fB!*3LH&B!=oE6=|0qcmPtp8Y{|6f<P2i!r~~YS_SXHh0p@
z=h<Gz^*7Z(*%PlX^7Vso!U$Ogo3j_Mw}`ErR<e}$#%hv3nV0*Mv-$(?>GKDtwd`JK
zJUpR=fc?*Ms+Zs6e22<)J7;bZP|p24H|`5UumB;&ge)!gfASLod7Wpqr)Vf<hV37E
zOr_DgSc>iKrmPHKuh&0tNCqsPzjg^5F?|!{7o1n0BQOed{<OSNmmH0zNhZR$u;I@E
zxE3tfi%xG<yL0LCr(PogPc6U8`B66PU%Il^54OD*>W_M2U{B^wif*CTMGNj_0E%{<
zRrF3AjTPBx6j%6(r**jKUfr&2eHzN@oZn|6WfaNMi7J0l!k$s2Am%L%C(_IbGnZ`}
z>fzKkOYI4h0^#`nW><aelW=7qTwio_{giz9SzQ;x1J|ZAk7;&ofRp3P4+I0Bse<&B
zOB~+co3&NH6_YP95eHP&1C9efnpnmcEKeihMF6vM*V2=(NHPADPZ=QrdhfsWkh6nP
zF7QG~PrKYkopot-X*%h#fT!JJslYXDj`i7eZD?(3dYfCC8usXqfwv%8o(S~vGPd{|
ze&7lPecz6I{cqB@9x8g}dVc4UHjmYmz|$@%WB0q-)}Jvh$NANoE!X2K>=a^3Lt9^J
zP{1;^FC|bjT-tx3jsD5n9{AFbqJv}Zf(;%9FtfITg6F<5ff&^NF|CUy?!vWH12*0m
z`j{9}6)1ek;IcO8U-}$S9btMZaI(SRR*8DM`d-^=J{oR5!G=7W_cqzb5Se83IDPXT
z7&ka13GB&Q_1_iV#7Xzd@jOP6Am6_{WvpG1nu9jVL>BHI(iPBjR~@{yylqyLQejAG
zJDBTP`7WQlcQbF8i@sCpO7oj8FEz45g;IsV{8K6%vJ8L^Ga)MRbZC8tLDVmiF}BA?
z-Maz4Ll%f8d2%zE1Un>K@oC_@mcWM8)9s(*4GdCIq*nQjsu98;)>e9)C2dO6Hi=<F
zDR2x=r>a3Mbh`JRLzX(#2eBVED#24A$aRXW^DGO~{VG_vX(mukNl1#GM&W#*<()wi
zq_KH?m#%&z@bi>_{yRGjd;i9(uZ^&GVU8z!W##rWCg>Q4C#G@%mu<PiG#}YmhN@1K
zzN47dBz2rlOG`n2A|~8jqa7Lu5iVbnT|H3mFsx*O+Jb6lX{KXH96G8K<3x|7>@LKT
z@GFfyETf!KTu_Wfxu$BfS|j}yH^uqtP>E<@8L;hUjSxMIFYFhGNYC)o_W5`q1vZ3f
z3ohbNK>CxixsgzrR%~h-?rYB5Ov#DJTblj;AUSp72^dQrvIZKz+{XUa*iqwTK|ZQq
z{~E+T<+yr;@uR$q2fvRy;B;U85`%IbAAWs3xyzI9E@#=(V|Q$)Bjrg+{Vt*XE~f>L
zLp^PeR~l4+9@)e{zclU3Cm%b~?L&D({|4J*x_t~Ss-^L~hlLICWqp}g72Bw6Q1%Jh
zIPW0r3kf2SrRrBz8?=V0tvC9^!>QjV#O8sR88+dT1@+Ydg97T2t8zj;uBQf*S2kB*
zl?S_8a(j|^QaJ|d_8jD3MO$+r_F`}f{PB}2ls`8M`Jr`h@74gTohT968FK`g(r3um
znXs9sC#wX5Yrp#2yD0^6lZ#%9fj%&zquOGE*kU8GgcKC+h|pxs!EH_J{#NTlKK1lX
zB*s{}jYly0k_kKZ#LwS9)Z-jDCe&I3-yxz|{MR55wtbxXA>+9mHd5Q+yaKHe`67bI
z8FDUZewWnnk)<5NlIfR_A&i1^Lw7*$DDU<4WNERhkP~`uvgmz^y_{nJH0JZ=xuAE`
zaQ3Zi)hqc}b~WeB_w7*yJ^A$~Z`BqiWyM3tyi-P=qtPmbeKR<kTzc4XV%m_9tfLHg
z{N>+Z5_C2v*tFrNM7?I=uGVey;UQ!V<l>|(8V`8b(yrwgp<;sA5!#sIA(yG$XWrzC
zS1MmhoJif<!|UatXp#t|Xrt$AV`+)Pw)7M=uCpjmhwUsdBTAx&GSQEFANt&1Suipg
z{2cQ5pU21aI#<HDR}zc2=%bQE7?|iX9zC1aw*n$K)FxAlPOrzbZ>8m#^~OEI58nK_
zeAN8+r+iSG;Z)b~1u#!VS1`r(ToFmvhL;<!SXxT^I4;8)7tU^D^Gaak6n+zTJIycL
z*8cHk8}CSI53Hk}2@$&}hm3;*sTzOhZnBzfLd>#m??wsG-A7aR|AZR8LJAvJ^6Oyv
z(N5TjeD*pW#fg}1AZ4<uw~{xDOc$fwJNs#XCF-!aeeu}o8k5`R|3i8zi!5WJ2c)yL
zAP|0|)k5dyNTi3BJN)#NxO2q#d5+UYrDgZ}GD0RHnZfCa>jiW5>C~%%K8l1sj^k8O
zPzyO%U@Q`$abW|4ttmorc?)$-)RqwBPkWd1b(MA5Q#Tr$g?HgGXL-HZw7Ixa&iap;
zn<9Z-8pgg0blcYM3zSHN;XrVvjyRIMB%l+|;q0lGR*=R9GgpcrD=kA&+E&-Nw>cT#
ztEDV9tSJWxNrf<=ld{Ia>j>JLVLipxw|hhqiWZ$j{==#~RfB)slDq8kTGJzwnMU2N
z(<w0l1eqa8rJn3(%lsXnSEvG(U)@rxfWk(Q(KX>i)P9-+gXDd)xTHe8jbbePvH(B&
zY6k`Kc4(U!Ev`_9byj2u=8>{i$mj4Hl1t9?F%(2sI1%Eud$diHA)1BTfh#hDX)FhP
zGeTC1u|4GL5XQ$xP}<ry2$z^R5ze$WfZt{yK{DB&mF00!^G}&w=$|<y2`8i^qq5l)
zuGF)S#D3tf2q+);Tn9Lf#gqA7g0re**bIFMy{dbUR<lP>@f|n6eK{XFh_~P6b{Bv~
zK3!P!*`wJ#INbcLC!;xi77ja^|66k0YAzu!lhbTDaU$1kmG|DKwFT{Djxx2OtdOGn
z%*$lyHAQFV(OQ<7fV9<G<xHv(l^|9GWhmu%<0+Tzmyr{lJyv*lPV-h@g-o%ls);a-
z$XM|6vXE7w+YL&lrr{3KD?9IQ%|i(65Q6uhg?3`;9JMJ$dtx=(qIXfg3PaDl(l|OR
z>w*3k{d`tb6}lt{vM=D%K}9`R3AmrR?@9^3iA^0!K8xbbV`F0aG6S+M@a(L!zk6%g
zN&Pc^#;<E7I*WF)MCmmZnfn@eGRza1zE`j{&4=So>G<d@p<P|-fu7%{W`ExO(Z^Ue
zQgFOei&!z`tzkO@_LGx+@L?o6>&Y4hDsPji9)RhhrLi}_Q_gg=`OEq80n5p@2QLl)
z_O3e0cexCd-~TTN7xM^#b@K!G$^iJAni2WA;wf)#Hv<g2Zy5W!(0-e{ufRNiBV&5p
zl*@1~%uVR9>TYn?E<=ykE47TMXz7;+$LwP8eYwvAk{@Zq4~b{;+ZqrMH69&rRUGkn
zy&TC>iUj#j>bq_99a-%ksr2<VNm-(<xaEdY`n~Hhf<8T*cGAJ0N~pDSY@{805RJ*t
zq@18$@(*5K7rx$Xq)HS-Mp4W7eGuou=X)B@B{xL0CB=W<xjdtA<j=|~Km^BCtIA`D
zD7k&s#sT|v96n4q=<yrkl=nk!<x0(WpOddKlI_?&UM&zw`)c{$0JC1h3J+EzyDJ8;
zm(8+MM25EX6&z=AdG!6`#FqWxOQ-nYGTd)3<;H+@0cmwRH3h2rG*y#T{wX4JdqNka
zpYBuKss+LhSt1=awFGJ%I3DlGbAbO{?O<WDII?hwg;ER(x77RI4E$4G3s$GfZA&Ew
zzC31(ab8xym_D&Kd7qPm->@|!f+KCK0w>*!FAlZ|RNm|AZ<e{KcULa13-=poSfh!T
zuwF^1&oau2#EPqTmmihQwPtbCf4WmHNp4s9m@oEv;>8gqViQg52J^X{+>$Vsm!Md(
z?@PD$_<A*CMzN%&WEyIIiEC_2O|W1udd>}yepGx4n1qC#(+wEYNr=m1>>nqw><e2u
zX##J!r~j^LtKpX^*Iow}@JVU-jO0{+xo7CU`OEYFG=c-wKnqsS0=fkmGOvkf_dDZ7
zeK<_y-|y1*+Mlgn0jepCoLxE^7Sd6c`r^F6l1A~*l7%9Fk(YN7$p6f<n{eAquNCqC
zz9f?HeU8CklUyGi?m@<d68fMgnyU6{YXg6sJUE-Uj4W5}=Uoj@N}rK%45S_rSAI-S
zg1)m#DnSs%yho|?J<#H7>8@11<~mP(yA<VXt8T`h8qP%64-i^jKcMe&!W!z7H4z>H
zwKcYWgYMXlVY077OJ1;bJf@}&(yC!0n#!7UPVtRIL-LI1OUa~mDC#vLVTwTWNVhfj
zlqI#W`GwaOwtDUIjex$QS!fhF5ir>QoMRB8CVIm!N2sgM1-V2Kc0J|ebso59Y^%w<
z&L7OiJ0cPDmzvo_R^b&cHT;9}-Jy>V-i2_3FFodkT7D34fcARAfmX$5|Be&q_)l41
zML!tb(C5|h(2S$yO<$m^VaD7=#9mI-gXtqMKPl=d4Ka8`_3$OXIV?P8qr++ZJYXNP
zGNq!+8Tn%A=D<4d&5wWY`~VXtxi)t&z4x}w_ZIkCIb>l?_+K6z|0&aX?a=_!V@~N<
zarKs8`2nSMY`5)sp-WvB-4?-$s;wPwjlbxuZW2RPE%ztQZM^<%U%{tG|G5}F&k52&
z^PQsvL-4aQa$SA4JR7y8Zk3-jswnSOOII9Mi=7d$S;Is;_ICUpd!j~8=+-bvk9VSL
z1-oJ#2n5mXb)TzCbs&?4l8g8PO1^V)RMkGp>XyxBy@WkUQ-#9$9`erwC+q%2$~zWm
zF|jn1L-F`(3LADW<o}ciDe(kj+de0!@VX+kC1bx5=pf<E6?M)ParQRyr|swwGHS|^
zP+zvANLkR{TdKU=Kqe;UmY9*D$IraPf>!pS=p{dt+#rXJg}Jm=jo<R*bz%@Rq>awr
z%y>!HH#-+xzs84@0r$%(oeEU6TY~FUxa>~~<GpP!23VCz#qg5)C)9}1J5%Wy@ZSj&
z(lzI}+EJQ+D#VS>l$=rar!;grKg}}w%wnw{wx~e#^{DBJK|1>0WVY7O&{8W$ZwXPZ
z$FI({Cw@{!c8-w3@`V5cwH{^KOgV>WB4F->XZ~|6_6!}4Yu_ASwQ7Slo!o3<<#QeZ
z!~NFms%R}Yb|i@AAk`>Iw1kaM+6dKqXRU?Xh=}#Y6I1Rrt8*Ock~f{oRa(j?I3X*a
z`q$f^2^UQCeG^{3L#q!qOO4qnc9XfXcHUm3c+LI}>NPCUoYz{!mA!qRj*PeLC(#{t
zzEqbwL72W~3PO2*>yTAZ;J^7ivHH7yu}?#zHcU@0-U1d?yDba~4=vvQcIxiRDX1Ch
zWh3RKrGC?Rp#ihPY%E3gnkeGc>%_{}$?odgr<tL*n>u;Mfh#2W%M6uk>z%*3lOM^y
z*exZmS;k(<*K&W|-r)rE4d5;i03i32CA!HlfRt`+(|7LXWoxj<!0?Ru>2gf2GvW^I
zw%O0G%Ibgzb&-4JYO29N<Tb50#qfjLeV8(;ncaMvR^4VFy{X)6_!L%<kgt#3pG=W4
zE4izJmk_rcJnx;Y?}c#Gt#vZ?-hY>Ac}VX!ZU|VCJp;s9JAn{nJa`np<{ZYRJlqO`
zNGq#`Kaz^58&c<_NcDtVCD-{}s4Z(9DdqV+ueB=4b;?P+6><%XpYrK`zF3*EHhuA5
zMs`~%cH6ye!ne7B8umO+A09?l+TRee^!Zh}e4RaXsc`n>?rR>G>r{Hpal3OSsr*p%
zO}+3b(Z7wRve96g=W^6B!9rn2=&Gy3jZ9f<?m?@U2$^N#Arjqj?VGx_Z3kyqu{)Qq
z8WNK8dV$m5@K|wm!Z)Zd&nSOf^|kUJb|e@kqJ?~}iMHdS&e>;Des|;2{=1?Brj)?l
zIS&lZ?<q9pbGwHI37D2)Fk5g)r(EAUc!9?KeieWzX(9%0V)bNVZlXEr>~#^|1b5kg
z5-YfG<j#W#3T{3BKx$-KMxr$5k4`?NMG?SkkHZXjdh{SkfI$169jjlvlapf(Thz9E
zx&f&7fEM+v{=ZoOCNpT2vkFJTA6aB&Mp`$4K<wuveV)>9uU)w=@M&_DlJ_m$^i(Gm
z2uZTFw6qTgwTU#3m<04y0zq&CF-IH4ozWXPjLw+RVH<YlP{?oV$bS$#hkWjSK&)(*
zZ!5k9iflK^Q{vQENqn$5@I9(qw1$vW8c}a4by8id(BWDPvt^a0CwKh->wbAgst6{l
zf*V-v>BFm>q(l4;LWMJ=NnIGO)%Y&G6ymK_LM)W>Ex&Vn=jAu-xHHuZT7wBLAVw29
zJo*76M(5YBfek7eH{G-mQ^nV4%Zd1m=|K-?{T!CtMQy3^w?8HgZ@MzKXz^Z6&yDF{
z$G*Kh$@U6X@|6?$ODFgg^Nn7!zIpO<OpGfkoTlWg3i%5SO>!93S`T(8rzQ*(ZERqu
zEw+8nwBe&??VApGi`qO?4ixl$oCHJ1!L22JmWm%$IbKgKo!g-T#hsS7Kr3r!jmwh2
z?KlItxM^7rGH?HZ3w9_8aq5a&zUimyuUJ>9r%5~>x%W>_VhE`DR(O?ZmxO1kN}!{m
zsCH8;J-?;IOy#*;!JF5+0hgnr8>A!2yX(Kc82LfV0F9qq5V0qjPyRGjE%6pg6PXaH
zC18%|A$~a<Bi`~~lK?8l`g?{BF2|gsO)Hfb`6kt;JUVgVL&jjB!(>z`Fhz^#N(>!c
zZUlkvGBi4k&Y`(EfA_+X9GmerI@o*wVz7w=+bSK!65QK63HNaYi;Ie&-Y76T?8DxU
znIn)>9g+avI|>`vnCoi!jx#5oy;gYUBx_4pX4yhRQ$LKmOLbaCb=7i*z}!m+E@5(X
zNaIAI5i4e4%q)qYcYb%#SUXG5WY^FAQHM`M>d8U1FgAAumVzjn8A$GN6n-(JPipui
zJ7D5OH-U9JHsrv_LSl32;C#Lc=6ty9ko!nJW+A}E0Qx!7MMPew%Bl^&jCSnPzSX(Z
z14&dWEzysOo_CfLJi0&>ybCfP|2;@|A>m#<@lT;uRc@d7&lQ9h19czmZ4!E2a2F?&
z_S?H}kQxZ(w&B;>1?{^Bl$G(l4(5M|;^DnW_@DH1^rf6>-!;}H>BpDVE=CijV4p^e
zyW~vb98Gg9%D+u!V)2!@osRB2*sKh?sfYUNrzSXT6W^>bT2*&vqs+|CJ+}z${c;oT
zXf!ewXMNK&eB!Kj9uzwAH1v3@%34+A``U7+?JTC}UJPTO_uN?^5$NaNPnU{2<sMny
z0-N&*HSJ*Ibdw^@{zUlCxFUVhWh!31tNUH-|Gy_29}BK>R?J1RdkQs!dAI51_6@p=
z3IY_FGQPR#L5z&8@Lwj5a;kL&hJL>|fL1f-6y>99;mf6P{^(vU&B{`qd0aU)gWj#Q
zfc-x(md-&Fj;I<SB-xg^KU7*j`lv=J!oUTS&l%c98vM$>ZkQ1U&Gn)&WonU<-xrV&
zjB6EKc+v|Zcvq7bUAM*FAbhr`rIA3VlI_>_KjxHrpI3jo>*_6rlH9Y-S_RD*G}|AQ
zY5lbYF7m+QdDydZ8dF+Bbbppj#<((Ld@))1<gY&H&MQYtiC#s#5L}@qcry6=&C8j-
zt)~66K%!U(gsHQNsSlZB?_W5p4?5mWZB=N`aCl|y6;dDfi|mX;rwDu}hOZhtm)ERJ
z*2L44Dx2DW`TY+wNQyF*sm#4}aPZt6fXA&=ma|hiI;(2u(7KH^AC_-kws4b0EAnP~
zAAbT5tW*i*HbM*ZL^ER5!mE9{SWF=xLxHF9_prA-*rcGV%mPpAAYz7yN#-^Ge_VZK
zP#s+pCQb+%G`K@>2+qabH9&B8ceh}{-QC^Y-QC^Y-EA*<zpbs>s=4!np{CC1)BUvf
zyhz8!zE|CtPsP6-3=b)ZfQy%WcMiPZbRV}rn3v~OiE9p8PMBQjSc_XqNfsPi*~l|Y
zD#mtwIDz^(I6tLWQ;;N1-Z$0lGR<)2=I`c~I$lJ-R25^yW06Sh3-wc&9P%X$9~qC$
z)7bfPuoo|@HnMbe{x4{kP6k~P({6qNs~M^9G!Q3UJrj|jHQ?x@4=gU6E2A_$Toiqu
zrk?LZuUvpQsSSaH2+Uwy0WC_CwJ=~n+`)NC&(s%##;ufKA?O>uzqcE8@7F(>cY}PI
z3VGvC<x&x(3M{)exfB<;tX9PR8hlqjgnptrNsgj?mqwk(D}hkuomKxK&)j8lYspHs
zlXsgg4%+R08?KwQ7cZ7E`KMC8^92hzGMC3MeMhiyf_LI#!bq4m)|^2_{3HVFB!Q?&
zas?Ixd^hVCoJ*dU9|W6Ayc)JH7+jvB?Ube)VMXwCt;}dls8m@H$5Rs(LH9(Zx`}so
zTXo)zEet-z_-r~9?-zw-Zown`W~CZy8;u=*b1Pi*%(yx+DhrV4n<(g=F4(80`|ua&
z6C-}v<v*t2&^`CnH~-P%6w2o;@as*->yv(d)7LbrvNE1zrTm|t+u+s|hdeGn!3%yO
zWrk|rmgm^<aBT0|uIlc5<h=k!&!~n_@H9%C+Fv^lvqTrM?Zq|m#20kl{s@@79Mru%
zCny!4w7+j0)v_w%j1f)P?)+SS!9_ba;N{2|GSjNhE0okom~7!10bz=i)0k<N=JPxk
zUxnjb4-0y@FU@IaLAa=&p3a2S5nnOW!XM8zWBv&COYetW8V4qNF}A(FR@h0I1`skt
z_|igsuTxCFYU*7C0dISrF6QV7Ut|OSU)M1o(5g`I%KBdx{_-2)XM-0sLJ$at0O=tm
zZScU=qAQuaQRWi}M#LJScP8on6pqBw_pKc`9y@C}C54b|)fq=-<Vif5X!3K>cU9!$
zAm(_;rh3jfqf0l;%ZYEG)}*fX5d;24d(n*YEJTeT9zu;QV~SL^aJvq<OcrNhC&d}L
zmfQ(d15Hh_ekDcPVwm~YLpvmQxZPysLJe=1?9Arl<|zkRK47YYjwrOl60nyDkz!xM
zgeE+Q_Ghe-@?ngoB+Q`HL(}ie5B2F5vJw{Z%69m40#XMp)pz4RtF7t5!vFH}nOKw+
z3CWe2z|s;G^Rc6ziPlpE7pO%muWA1<+on9BF5>pWr(Cqvvems1>mlZc?tO+HA~hm;
z5wzxEvfAt%>gnkz_uP%puyw(ukWzDV%4yDS_GrOvO9(WWrtL#>AOk?9f=(*MQF8=d
zz^f9os$*ebEmUV7Z`D>0JE+y%h3qC)3W7t{MxI>&Y(qX;+@BW*Wv$W<-g~pQ_yk91
z2;eBk|4t`^Hdb0yrljyknjIz6Tl_5c$^c2zM<iu)uPz<Kgdq#F{%=%`<6j_@KZkUG
z#u%Sld?Nmv8DK365y`uNasyJtV&VsN&1dU~4nekW0ak2>Nm!lGI>)7&+Ud)ghh1!e
zvu$wA8v9ctpIxS7<d~`Q^+Ns(-8-ZcnVkoeRORmvJb#XpYiqGqL{0{V@9%X@78Y(U
zcpTgchKGdsL4qGmj;+mMZKq)t;vHi{^|5*_UrVqFXA7FBh)hyjJckpi>srWzQrCWL
z38eNVV-tOQFtjvM2>8n46}4vRDb5>G?O9!cquD_%nea~3dwU`fx7-y5*GrnU_dHqZ
z|K$6&1*=Xnub$aFioFZHfnPE`hI|-w)&dT#w7Z3v3g7jg);1FK9$bHh;$pZs*ehP}
zHUp15Om}_47I!4d8P$fUuPiO!YKpku0jqhL5dh<goe>s+3d6?1V&Y&RVJlC_@QEFr
z^z0&>*Z{T=POY@a)XC|WD6k*=f->me1gl;;C|<ceMmX6riGp@fF=!J52pKqp#TC2O
zWjNhXgHu-=7d_nLnJTg~elt~9@wiEUwT&)v*@<Ex&I66=DHsWkO5D&POX0gss!=?y
z!>*~m$Vf>fN&BAk{SWTSl{(fc!Q02BwoF+AU`(~qOi6baKp|q6SKIGaJd#%PEVO;<
z?`{&$YcGTUP(m(@JxcTFv9Lt6(+VtU|1?;DTYr(BQBM0b-J~`!!_h{1TlF;P$}M2Q
z4%f~@cHM92_?RlVbRl((Wj^>wf&<RWloq#g$HPF5q9vM7f(ofDg97g&t>578h-UG~
ziPFLL;#%v5P%>VRgGS%+X${4(dB25*-+CY92XvwxGSK=T*{my}+}N_?Rx^TIOzM{I
zcYABI9-5I%=+c&DMdaud?+BUVGH7{|ylpIz;X*ki8QUnSiYk7+Ma_hPt~I8nfs*jK
z7mUP~5}ZtDyu+X4!viw_r@T0)6lzMbUOR$BaqUbH9mO8EnM@1t(!zs!*uesc*q!Sh
zjcbYwtAW&Pp+<d`brt>UclWK7?!Uh9R5YJfBE`DgmT<q)2vWTHtF~AB^;yMYDCTch
ze)xNe^`+%BLo-N8Z);XZ{<U(+6gjR?)U7U}8&N@B&2oz&P=Qc86eWM3YFEX5<>oN;
zi22_+BCQ;2(c1<*T%p{K0LI0kNd)y%D*LG=MdHC`Wcwq<$8#NLgBCYy3Ft=fw+@Vt
z<HSkHrLD)}s&MhelXU%b-d}7bm>(jH;xUbfUR<dhz$qy@@(j2+y(W2!Od2$B@i)*J
zKDJPHpf!OtSoiqKcQhS)Nm6c~p*~tKW6A7-mJnd4pSq2OgIdU{xWUzb7KstxXLFfy
z^5=1@ZJ>o?<QTEyRGh2p{ZrVd2tF~SuHDRwYA_GsEY{OziW?;_Po0(NuDY74*0HTq
zBk8BmbrbgsmJ9c+ZyGXqI}4sE;I_IRg`tO5ikV4&6@I3<iQAsgdofa^<Xqs*Ikqg1
zQUhFCMJp<J*!y9P>2t~|zXV;$_xjhr`onBa5n<GdkiiQe10HI9TUtZ6e!fz0E7vEU
z2D%Ls2(b7Pe#40LxY|Z?aa_Av_3;GS_e23A&fV=TdRtE>UDm{|OCvp0UT7(#_j^ac
zGFM=qn6NgmkK+omq^~5O`WyV0!FszZ6*pdjlT=N*^?{K&kFGIaz2)MCR*9YNXTj$q
zy!<B7Q-$aED$w*Jo^@-L{pKd+X~!G1tLLa+NqpDeJMO189*~x(ga(8kk59#H&dwqX
zVzH5Klx2d?=akZ0%JGrb=3OKv4E7a|kGX!(Ru25_MVg_5q=8CUWhQz*JYGtea-`pT
zmJp>%m&OI;Bm`s$X<)4W{E<&8(E>;{(Dqj53(|BwxI-&S+GVE04ElO=<#96=@+{G@
z_u@5viqDtJ*>@Lo3;%exHbUNhKX~Y=AbcMhUGTCSh+=ZR0n7sb>#QIKcBwcx0fBse
ztFMR-2MpMq!gkuE4?NVvfG_U#8<RHStxI}g=t^<PYv5cpS}jb!o{QGJ>N`}V>vHqO
zL^x)GT!eSaIZ<fP4#;LQ$I9tr^P&p!^juVrR$*>$Hz;Qe$gLg?628w%i37~MD-?Sh
zVkc(bPXt_BjU7Q;QYG|TY@P{ZQlGiyc?hh()a~X888{taxjw|;PN!MXP4aen=-skV
zyq&AJEqHR3Pd(pe1TY?Dq~gG7jh+^zO%XJ7@N|r8cm2jnbTJGj43dEz9$ulInD{Kt
z)n*1`yqtQt5fY1Rv95bu-l5p$Eupavfc?`MtR;Og2-~h__|YCz<rA=MP6N{oj9}BY
zTZm?JzCC!QPVLkEC@*tzFqtndxLJ@23W_a=!Otmg`|EnvY?ZNHt@_rZnO?c~J?JF9
zDCs!{S{hv$AD~eFZ?_E?p}3hcSv>q!mzQQ_ci~e5_OFL48$a!<>2vqqhdqd)w!7<_
z>j!Cex+}{W3;GX9bbd}KDT>=NKue=y8`txMy1wKB=q9X=6QRHiWg^0&GFH6QtwMIq
z*QLd{2zhuuf*<|R=%jGP8L@V+S|ZRDchTk!p|Fg#_v5Kv?&AuwZtzRl%gt*36-fgL
zu~`Z%(KcC&J7}NbXl1+e7wFuDUGpzNNcfKl^oT1VhtBZBm5;Fas((PAhxud6IjKMU
z<;(nv4raI4D)qq`<s)$vBlG76R$<+b<myLHVZY><brVi6Oft-FXn^9YqajTFy!N`m
zOq)rbj~CQ5^V;;PiFqY}fibB@JIzb@?Q)HH7V1TTNu9bVptj#@EOXfnX(1x$+{q{^
z?v;Q8L-zPpgWC+D{$RE{;%BQUvDZQx13mIcwAb)w)clV1Az;1Qv7D`x{H_C_3InLV
zo9+<2{;=0WEfqd{lKb(Xhr?gF_K>Cg7Qd2{RZwBM&uMzL(1S>RyAW}mhg0OI@mt2_
zai9`p@iJnazAYl5Je}!8``BnnHrSUkpTABOd?BY59zM4g!}uO#sooyjFZ~rbR<J;b
z*PH$|#!Iruk2pj*#0{ey`J&@OLbG=*{UY$gVuWJJCYN5Tm^gaWvZK}RXcu5~7eRuF
z9<021Y+aMz=V$)@SUhCQ{(Tlu;p{YLL&Kn@lxNw!!BOq9eR=tpE?yFA6<AQQ*@cg@
znf3bGB<3sYrdjadxv6hb^^5zg#0(oAZ#^L_BKUh8>b5|ArTdzFxiUAvn3s2=jfpmW
zxYb?#S7b#($w;ma*INQNJ%`ScZ;tRFG}x|zid(CWk>%1jvHwA?du~+66OXcVDpPg=
z&lZV4j6nCBr?W+W;wFfb24KNrjDsre<Fr7*g}jDRJa0qry5sFpDCgs4nUt6;;xH)r
zDuD2_%4w=hKo?kjz=DuxW1qN96u`VuDl;<|XzTI1vEx!uLp8jMPK$}Mbkg8d-e|lZ
zd#GKM9w?JgXno)9sA!SnIh;zZpy8pggG*<*CIC)RZ5$Jr5FU2SS5LFn4+l3zqiHrx
zAoAb*ih+OZ+PBp{!=wr9pXuM@@5lPdiBV0a&O$sX2O&r}$>k{B5pI}p9rPzZ0^~UY
zn<D)o)VuBr^=lcgM5|k!an?&t`(rSB)a8)_mk&D1*<J;NmJ=7D^nJ?Z%gvM)Eblv}
z_)p5~K8+!@*Nh(UO*Yqt7?C#o=xg8ZRR@k+eGycl-&DlS6yfN(q-W1ax10IaDt{sz
zb9Oum{kgAuBsu&n3NPMiqStJX&?pto^U9@+cRtb=WxpiorLC&!n?U8DPT<A*$Zc&x
zM6KmgShez=gW~i?8e+&g%>MYnLq&>lzlsK1D@p|!jg!y!Wf@r6PhAlxzKVjt6vAh+
z3zww41j5)pYAKY8!e|ZCKXaGj3r-@Rh;ss8`|X=deVer$i0Tg|RSaHn^0So7<yofM
z5k}*finb~#2Z*6u%ML7PvS{U_Mhp#3e0nhHK#*|4?Tq&?T6E4HQ&?9<?)jco<Y=C2
zt%An(9Mq?+T{0aV50B3cbg(vdipBtPk^>E`R;S&|gL542+|1nkd=c-!f&u_S!{8rb
z;$S*YR|3VHsR--**Z8QrS)Rb-d~OYfET`MO9k;u23R%S*bPuj&#q97l{HV#F3fs*c
z)o_0erVGf=T(zu}&qT?Odjj7t%JxkxFq`7`FxH-Dl!hao&+}3q_78^hlnW)7_3te_
z8+UWw1{T_wiGLkUkM{0#*La%6YjBFKP0l*k%jR9%Iw@|0m9Ag^VH{UdYVCM-u18fa
zv78?DGM!o9SZ{GBqL~)I0t<i<=piyDmT#>rt<TS|uVUyNSc7l7XhUN4P1u<hcUWsB
zXFaDEO4YiXyZ~@}I8IN(^mG&D{*2iM`@`evs(Xno+KZBPv6XM#rGmsQydWTsU>~N)
z9N<gR93u=}!Q(phBd3tX%Mu_P$!gXW;9)_w9rG^%0qp$&)?7H*G+vm8VE_YO3{8^^
zP;{yo%|F$-i6_57T)J)J|A=wPuEBP_ek~#1v%?ea{O&W82QTWF;UjPWx2MP%*+?2@
zt0&Lh(h5rE6%Uy*e#q56v~L7WxtT`;h2WuD%?@KB$sci?RTxG~?sKJwZmE`n=%xRC
znNW=<V|EOyAj7an%IsQusGo?Y%ZlY&`k>&%^+(#QTl~S0{nE;?(J>A@Q|Jo`%5<px
zxfoUY?L(N@6Ls&&aD`oF^LpeixAGdqLg}DS4rD;1LJ~LIUk3V7@cz5|>F9(0+*cKn
zy#mj4coXL{Nyy|b-rfh|6WGiyW5p$c+jerPr*}dijrtvpy$v_Gs;pI7L9KLCL;uZC
zqd`LIgjZQSQ915M*LDmGBL-I3E^uDI%#XgBzTJ{jf92ZO5Y1UljHRPhUU=PUqVf88
zRj!v74=}w~8lFnE@)TqI-5WQ!zrMxYE><{zhkX>Hx#ud62VL2Bz_adUeYQ{CgMe;f
z!J{tA%d!GH6!O7&`6N>ytqTk~4E`WKE?+nmqnTc!E|+aM&kVgzd};a+w7FaDOR3M2
zZttpPn+_&_^U#yW!{{t)(z)u_*qb96&PN2gVslQM9S%;8d=7cs^-qI6V?s-S(SZst
zNnWI7;_KB-wW`|eb{3bZ{xgx8Vbu=fOqhRUS)mY#U||k=o<iX~I4iOzmikP?Xg%H0
zmxIGkZk`5-{YcX*gfvQx{3H%gQ~UjcKB51ssrfoL4Nkg$`AGcBz-)FC@M`V~8afFP
zRJ)9dBvqQ5F{J*GPoWOfSKwY!h7wqx@a~vWTl+=eaZ}PU<g+nTJQls@0FOlwaddPz
zM<cfNeZ>{0?P_CP?yDg0NYEY_NzI<m<m1A=ZsTnU&Lc3ljYBoN&;~Vh6oyIZj1csq
zgP%He)S~e2N?hFxQdLKGDzKEkWqi}KW}wQBso)}EisjRK0^Od1@HCfyhR?h9)OC^O
zlhjB+I|gM;C!74CmICduA->>x(2(%H@plUqNAT&+z78}z|2pc7ysF(V3srRa(2Mo%
z4;3=pkju^qL0*HsmNpck#El(r)TJ76r#x#~bL)ZluRGwbhyNyx-ga?5W$;)@JTY_8
zRER1X6ysc1Yj$w4nqA}aSn*jofES?-o#t4baz0I7r?nuYQxi(D#5f2cUXWcUz8}D<
zIkmPN|1OVJZudG3OB<NC93CbBQ<bJpP?|r%-=)DsZ)<y*)u8)mv+F6ZVQ+$*Yi?d(
zHO4|rqosKVRw|Mgtk+qFH1p-07-M6>51HO_TNx;8;_vKqAnYnjw(G6Me^`u-lc<MI
z%v>BN2RtKo@OZkvTJTtm4_C05czssG5+8h2Lawv~8iFTQ6G!AQ(RtWjZWg92SQ1fS
zJ+Uhc(0STkj?zq6EQK#L$cE<>)#_s#ScjtoOuIz0xLQp$G61vh0pd2bbVbG<xVr}{
z0NSEL#vl>5r$^3zai)19V9^)Qo(ICui_=c&(VhZF8XCA|131y<+(Cd*%WRJZs#meJ
zOw&AQ)=@PjK7gzp8f=vct@8R8MQf$<0R)-Q%{m-d?iBZTuKJxn>Vz0=BVsb`U<Qh%
zFuBkh*aoWEud%9_DY~(;?16sf9Ih@gB2LPX(a}M?T+jA6qLH^#a+F}xc;UW_orX(m
z3-xiGe>Q>;tE33dUI`1SWX|H2MMIXcu0GDth3~@Q?ftnM<ut?&GA;{LzLHQ0%CqCb
z``~>|L^{jsBU=?Inp>MFG4;bKJus=2fIXJK<m*_YGZY4v{uc>kAyr_G6%HQtQiGRe
zS>A6j68C6pZV-5s2s-mH$TiB~cZr006M}^(g>>ZL-;xGYp}!+%Y4-Z-Sx`9Wt;$$(
zCwlBR$-Hxz>V&aj67gc4<;X#Ewl{P*oi`mfYc$Fl+qk41Mg3;{8-?fY9$R5_k=~By
z$z3jfi&HT{S1gA=@<TaFq#?;XEgYfu$ofapPE@j-67f)LWchPeY!XHwq>Cx@hO)(=
zXp7g<{Z1NfX&;EmL4@?zyO8k9d(J=$&LqVmjwB5q->>s+D4V5V5AAJlZId}`*ek$!
zG++5W<t!}bn~s+iRN|Q9Bd_+CQLzrUT(1rXGt;xu@pODh8gr1YB}`|V4t~{rc3IVC
z((b`u+Son4YAFPS<0BWxbrt=ZE1~Q7Xy}kW_+{@L@6*J=Zu{Et&Tg_9o7JZ0V6oXQ
z4-JVAobm!JlzndoM%!@%fNT?}>?CS&;ZfjYspkZey0S^~<%c$|xGa{j?{fW~R4I>%
z8gJS<mPyFPXxW@4E~M{Y=jHp8_>q%B(wQgp9o>o@H#1VBDaLlFb-@ekuY%7ROhlCx
zXBR*%M<E3jeP0j9WPGKJ?$X+DaksA2Bp5qmXerFE=CT4%Rw}3xCHhO^Wa#CDo}Ty{
zdO`|5fPG^R*b<G`2uzF|nnK*lvo2`GLO|vyhiqhO-C$IVp(To5n4YdwYAMc4-X5H{
z+Ac4P&hHn!ZYR4gZ)*Ga2ui0Um9jm(auII_K3rts3avWi7XC}~%Q_Oh*)U#`bsPnA
zZy{62m{eaYlC`ZKsf&QYtG-@4)mt(wgfC`tHhPyQvv4x86KCZ(QfTR@X!HP!*;np%
z35L>=BHr3B`rJf*t$JE~v?I1R+tI~br}3rVe0J#90Q&_C96lo^pYx40B0x}XG$I%h
zCLzDf=6W>Xk4^V~#t_Z@I`axWxFInZ^XTgn$V)lpeb$f5(qP@P2Hr<z?xrh9pl_A)
zrJA6y>jv9LTdV6JG+$aEWL^G#hLsmlz(^dxFTd0BJuhz0ZF65|56qFZdoZdTGHsd2
zjO{irLiqr#eF3O`XsDRF-o?&Nx`i}uiRQEZc@)<tH%<;OSucuoeOH!?5yr`Zgz+oQ
zh|Zad3kkRP81SRJJB?iCLb~9Hf5~g$z!sEGKB1ZXytQjsq%rTeVCmFP{EH*_5?t=U
zoSEAKW3<i`IvZ<MmlIo{yvQ7=y5Q<M@7g?zzE`!AMW~_++;xNXcsJ2!=k-SN?JXK|
zmNE?jyx!jmxv#@pK%PS8|C*r#$5|&=3+ju+TRLR{)-%K0CXNlwpPieU-`?N%V(^-5
zw5_5i2}?xh-PW1icu8oq#bMLLNi7zW5`1C1jsdDi5Ep8Mow@E*qHKTuMJfY@fuXDN
z4tL<fx%xE}!Mu#^(W=c8{yl>h(C*9n+GwW_0%uIPM*OP2#j|kd_rWV;%s;@4fgI2J
zb?yiI4IHiPh|jl5G_cy<T};%>!BW4V!?sudveV>hU#y)lXXS$8<INc-OJqu^yd&#X
zWVtGOnEfp1Ubb4D#$~I(u;lT<Gx{)z0$r8ke1%JggVBsP`{UEQ8QmOWffTU^0v@Lb
za!Y&;KbBNJGD_6OYahA75-U^p`y4Lvu<R%Df584}9iRfOgCo?0B<v+V;F#A70_)VU
z&t3SO2k?G7UXXcag7s`>_}YIzU#?JKmQ5l59$}BRdZ)mhDg^I@5b9lqw3rGWsgPI4
z@&zLmPoJtK|5WreDFMKFIY?=fOOq#oPTJ)al@6c_`D+J|)X>20ubK^m@3MDSaPeop
zQ|5eJxmO&a#hasB)~eTK_6ELxvM4$`FyVqNHA-zPB$4BN?*JVbR{AW#u?GRB@BkoK
zMmAWV6KRtr#^C?iFqs|@#x_ef8Tws9a_Ju%>n`36a=9MvyF^2_F)ce-4J7p_1su5Y
zqF-Pj2L1i4aqb4?fNTftbFtY7hEIB%gJT`L!#@G)g9PToBud)GZi7QkYjYtLO*%5q
zN^F$37N;*!Z(j0x;KI_v2)JWSaoKa)@CaPx;EoLqiHmVQR^a~ATvL?$^%1NY=2XS?
zlv*z4W8c9{#;pR4owt)4Y;Sg`M<}n=12Q!>gmO|L7r8oF>4Dtn*VCm@0HkkT?7;)Z
z&gRVbOtbyt0KA{zE<Vl8PXSLkJdq;p8&|9_>#_()w#udP7PM|dRvk+oOS^1)Qm~B3
zjL`!8Jpy~z+Q-ZJMT!fWN;CP{o(GCA(zEj&4|hqR%hhXWLzyxJAYh-Db{dF&fdj25
zB<PR*D>!eEFTm?J(xP%c;VJM7iCrX<On&#d$l#b~rB&kYsmcjC9^Gs>r1Jx>oXV^U
z!ZCVH_?Yo`Rb;4kdSGe~%1l)~VS(P|zW-k1-I<B(eTwsI)p!*Ci}sB&Ya)sLHwa#k
z&#TqPTb|oKC)aaXhNHwmAmQfNwpQkQU{3FI;s&q1J;0BS1781%j(jNhz%n-VOi$_u
z)W7Baw`kyfGY=v&@nJe>ppx(33wb-|zVt$Wi~i2}*p`hwj(*fUXg6-^GIkd|Ry$si
zrkK%or;T$TeJsKa&OSRQbZ({?)5yFaR_<n*q))uMc<W0Z{O7+_|9AJsK=G!+rb~B+
z!~Nfq)x$bZ1^I)MVJIvK$%j=3w|q|V>u48d!W3?1Rj<!WI-+XXYRZ^hc9jtgVz3J#
zd+k-NG8s?M7yNDh2C=bQ63l7%xi8L%t$TU;_nK%au{9+WBK+^&{}F|^bL<N*!-XMA
z!1@2y;!Tc{iJchzi<FChXuOnqh_V6qWP?Ow0{Qye84qBU)p?i=Ck=GJSeU=EsU&AL
z694~upCy>==t|gE%>U8oAEh{xLF^Ru2ritEuCF9UNZ|3fl;Hlqb!dyi@G|h^K2EWH
zvI9~z0aqjm)!P~W)VdCVKRkzRy{3riT$*Ft5zS058@moPtZJLj>%osZ;y?e+XPqCU
z+*I8)KTwD=w<O+(%plJ%5FrFkwpS412e5O5q)rM;N-<4UL8(m1<MM0?wk1LlFozo_
zA#jvu2U|eyXOtH(r2+V2Vm{~43glSv^1qVD<V{X4WDZ#KxSo%Bt?#`{P-qwfnE!U$
z`3A%5$iW>LnHJ6{0CRxkt-H>SBM1Ar^4p}&Hihm%MPl5IE8w?Vd^sOIn4eyMnPsdP
zLSjU~5qYJd7?kG7&A{}zcNk~WfARKKL-H=cO327>H1@x}0+5F{>bmM?&u$ECTgB%l
z5_q}#Nsg24D%%AXoCD+(?si*5uD#e*R(P@wuk~FoHt!M&$f%Q(Vn=P`6&vcV(QdMQ
zJUtONI2@^!Lz*?bAc9@Op~gR@ZgU-i0Pw=?6`AH?6d3(RtbIk?;5C=U^tov7PVH~n
zO7|ZcQM~O#R-_W#6vSx(U8b04pU=Egkbw(qNNlXsPP#~#7|V#p!k2VPt)!F0MZtYJ
znn@6%e(%}OkU?iD?#s*W*?lMfa9cxDf7aUIwBHSzkV&wyN&UY9lLn+)^UZ12#kwR&
zu!~i?M<|fhJ4s>aB_5@ZcN6j54+9bz_&iBEHv%)vTQxZ;6IWT8Q(Idx&Le3y2|z!I
zzggU0mJaI0gFn>FY-iUe{*-+^zkdczRZMBdj8!zdK+YhXmB__l`P*Edmw>gi6NKmE
z;e(sX>3mqKMRk_r;L&Y|@_)w&0-+uYgrX2>xMoN&$Inwl5FG^j6nbAV?N^?OnErd(
z5-DNm=V;QTuHCAoC=%}8(}ee+Cb`|6ov~cuy+%CU6&JLj;AqShz(!%sGA;7wMmx*C
zbSj3aNnv!<+!T=bh2egiI@1bUpLB9`;JS@?gXUTN^?Ph$puDK!Y36}?MBMrIzDm!-
zour?2VYF?mry)$r<@OHTfBW_C|3J-~90+Q+y()c)t^OdWH|sxVzLNvbMFdGZ_@M!T
zB?|t@Vt2Q#h(vwM3`aR~G*B`ekpLTZ83*rRf)wl8POPbCPxhZ2s)u(9DKk^TKkeSB
zk=)TP@YokBgE98^30^X`Js%Zunu)u_7u3{*v_2mV{Y>hJxDaUA-L>B9j|ly8P;LVS
ziUjg`$&iCA9UU<O%UON`5uD4#k%0yH*9cPCrF?Rki&EkVn!gNTHoszHDfgx1QZTyY
z@w;DVs9s6+y<A$x-0xTaW}&|pZOPj<D@i1q|9+}*<v$DocZ8U#Pb$F+(>yFLXsF-y
zL`KFx70E6F;M35kRm{f}*Gp%g<>+}B{X8tYXhZ}fpzj27f}uAkqU9Y5qrdnaJRsQ2
z^`z?tABV2#Ejj8aN<8V$-k79Zz@1Wm)XUeV3>k6vO84Kn{P}aoEv8s?&C|t7Wx^60
zaJPiA5?;|MXlOXOmp3DHrb=;hwd}7=SS5PfgMT+OdA&BSvFh$6#bWXiHL89f<I+Ch
z$Kc`pRxL8+am#A*;z6c16#@HCh<K5_PirG6^$R>wBh9Qo@vO0R3hVP3TUh6m_}0b<
zF;Q-QGtX}<5i+<K>>aNqC5d*nIr076AA@=|L_?{wmQJm4Ww<2gP5ibKyY$t;c+|DV
zfT7w3iO_}94EiR-B~Q1XR|V4NbGRD2(M}Sg9E!aa>6p@nBov}pZH8Ui^pUMtG)uP9
zLhr40@r4|4!b0v&ZeM@WDoLN56X}4ip}z-GG3^dz91lIul=a33Yl^MBpFxl|rQC;^
z4J<D9dCfM{Rv(#TyBKJJFNu}C_jTbxjh&_CwhCEMKKF)mTptagE37W}fzR{|oz-el
z&lcbA9!HFX>ea+!m;mJlTznJy+44LN+-3I#*DEIRgBZ~`rqDeT#xHQV#iK;S{0BcK
z?^`|d-SX)>3Nv#Etr*VuPkF7I>C)IrZv~;S<Q{wtKuX?|tQPC(sQ<=?tNs2kDe;U-
zYa{>MbIBYJ-u8Kw-LJ&ei}aJ~=<<|=pPXdfrvvFDIVXqH7ZW9AE-xc9LK|lkHH*7@
zK`rF@8tjY=QF|Zyc5+j8W)X3m&nq?*3DSSV@R-#x@d$1h-*A;SO6T00${Kg8SP|0B
zj;qT~5amQY@H^ae`<<V!iD<Y<ejQ)v73XBB6g=r{_+JlfaNEY8<g^`N>gn<0wYr!K
z3+w)krrZysWBt9f&!XYxX`?U`@iJVZ`NVVq*1^pZpJx|HZfElG%Gt4*cK3v)zPkKW
zK}DXc$q1kbS~IhpF-s_azv2}LLH}?n>*D{9U3fvNQL1Nr1|U^5LcNa$QbX=w*FgV?
z-=ROq8oo@Vz{CqzG(XLDO?Ha|ww|uOFzM6E0vvIB_RmtV{f6|BmBMe&h4{i{vjg&Z
z92n?^5K&IXT&b|Qv>HTFky8w|I}9{(eCS^GKIY97QIgr`4vn1@dn)ey>L5?s0T9;%
z7sW#oN-SjtbeN7CQIbU979kXnb?qIr06%rEpNZ5jrJ?3*#P&OSh`tETL$s`p^A#IX
z^7qAw9aOBLxmxZp@=M18ziuHxfs)a=iSoNf^7?hNAs8JxnU~MT?&ea5FH0Tp@WDZK
zme9IPtg11Qp<3o{doXl5TY1xt;jbqr6cRrdg@l4SI@iY&7&y3ls%`RXh!)9{9rK%y
zRvW#QaAddEWwf_eIz^vRct}tR2N|W~-3V~F;ceO^w5OwKW3(9nKtp}2<(1C<yu8$-
z@aSN@@GYwv<T+X!)j<fUPJ8abtt>3=?x?LpGdcy;Oph~b+8YgadKzO~RI*Vv5BaNL
zIU&`75F<(;*Y%2xp8k6~Iv6XHC}qY^4vu-}(4g?&Prc(i$M@%2*nu(&%pdOoQ)Km2
zv@#OsQVbop)v;TvhHXAy)4Xbm!Npyu?Ea8^f~Pf5-;nDU<V?U_w;+J-kcpMg;NC*~
zXH#f`DWHsrTPf{JrpZC;$hl*U4a6SJ$6li+xrseSQ_ehzyBJc?At)HTF@FH~Gh;8Z
zzg|ka{_RN~$ti+tcR^8e%xL?u=x&#-n8#TYU7!g8F(+D-k`hrKLf+o}fcl5C{=2=b
zo!WjtAZ$$lRVb}pV<T{WtF)#3aE+T;1WOFJ>&!Rhuz%*4HwbAZPld3yhv(6w&XwDT
z$6P5kdaelcVBrTkc9y_~0h_991&4iceHgBX17i#lF3H>D5W7Md#a>ceYx@j=?Dosk
z^CPE+);YwzOKVxBu`qx2Z;A<)I<$icaXI1D4kCb9DmM)|$8JgjT}N-ce0oL(#f(Tn
zpwRV<YqO!a6HpP^Bt0o?qcptQP1zUKzQFUmh-bD6&kgTk$CQVPN`3j+F?3+5&N<@(
zw-<X&ZE|xCYhWG$0`X5n`MjfepZcAiekk~11q6Hh8}!OLK%D(&-!95%|H_T!WKyW)
z!5gZmInTboz9mrT`<2D(m{45wQ&j{ZM13pq=aS9UypQlT8CSTnSy=GxLU|~uMA2O{
z8%~8O`GZw4*$b_4A=nCUJ{d$LVi9uMQ=?H=hUrX!0_;n7fT6+^njZh)C4G$=-hTDL
zofcNuo1xxqPIJVQiO+5usSQcMbE=V#g(o1q`JDY1q5VaV;xY>O{=<8p|62QVQh_hF
zE&t$63#2PyIhO64@z(bZfcbd?1q$tdHv6;W=7<I9oRdaE-u`P}O>pAg6OWQi+V$xN
z5R1{6W^o5gEEb)z^K}lQiVesAtSI?9y>E=So#H9hzO-Eq6g8>0%dlopt$Jo=$M<0?
za>VT2k16N(-K;gC#x=0awD$4fmYcGrYAy7m&Mb_Jhr8M;p0gE0u&U0E<h6S;+UoLq
zamz2|$Yy$+IX~sZxNMwKmvJf2Pvc>fMRGe#<jRE@k|n8kui7dKW7)a&+{L8fx9D~M
zc$V+JMOVw4a%#OE8dBhSmDfzrS}iqvKQ6lFc}6gGn9xMM99eeLSXnIhyy}T5Xu#L~
z`rvpLS~Zo$N-HU$?rw5zT^@d$8(HaAF(K}H<r~xgF82V)dng+mH+(osu!~MX5BvM^
z(t(h%bA2;0vR}}9wR7RFAv+wggY{3uGB1E8Fd^XO{Wfz~7R6iFv(O0S?9;~bPJ_rs
zZ5Q^xpUe3(h@USM3F39Lu|B%MuHgBA`n6E#Ei6Mh(w8N6fh%rrL#?ezHM7w$rSkpx
z##TPLl%8T(#dF_|`=N{|duIv#oN_L5WnMYbq9Ms1$**a73)--5+~2f$=&bcYLX2yo
z55d7f#$%*pa7^o0<XA%@JS@4KnWI{;OF6e098uxMOTmH2H_VyGnah-_tUp&a21$I}
zS_~Z}f>K|P%R1n;hBx8<xuu)mLF>OASI_aBzr8*^%_N0jc$ye4aj^p^<8gr=&^N=j
zbf@wxorS35<cWsVieV~K`J0=XlRJR;@gh5i<oO3!OXGKG4CXr9hejsHaa>#r*App^
zQnQMuod~y*<2hV)ytML>%JYG2tmXSCR{SLPIEf4<4*sPW-FB(9EREZjF~Cj8XiBZp
zY@tKL``N)xidF}a_UquFu@Z(GMQ1zQCiVM)R1jiHEZWlBed4;69IzIbt6pzoeTO+8
zUhY1v(9&Rlj@&F+)6H3!_O8lGe%tQt<Van0ZNB<6tL)`a;>!%V{tCh`rmCGSH8oZI
z$Fanz+SaR<+PDQn!`7<vTgds2hJ}nK>xXLU=byZ~tGxTe64B<A`*bNdR`R16w3fv@
zp7ok@3K`aj|3R!LSY%ox@Dm3#gGZ(iqpG;dCz#LRpVZV8&)kZN>b-Q%@9SFa!D*!O
z=VSp48xxKX+;l$7<tAB{n^MI#*hj)xq28%ccvY$kXjbY<jmKVWOojb^^0^DDh&?#B
zpp%b5Z$6^L;6Eg*c#Zt7J5O#7s6hU)_w*#5BISy#SDo5idqlCQ+Zp?AZl_L5pYgmT
zXBgr^o7U6={JzG~#Pm8~^~KOnUFCoN(kXc->gmnJ`}slL20ALee|=fBBq67xpx|ur
zNlkS_yTjh9Ohz)mbM^1vbKG$Yv|~~(7S7Jy@V&vLW{!6GbgkOLR;f!CPF~lmGg=;$
zi)XEq8`wv2mvx$I9T72hI$E(XSeCo3hJ|pZj-mXd_ot^KM)y3<3Y;g$1^;KncCM4l
z{R+g^#}S6lmmMTOM4%~Pz%Z+0xvAKm%n=7vvFX*Eh$@mgMV!G$rr;X9OI~b;Jt?4c
zKWg#1SLKOTMo}x{8T|*zz#iC7NPd~|jTR8&EriD$PS3RX_Xso)h93Xo<2BF6-Fj4?
z&8RNi$Y~BmF)%N}sU*ow)cr%0u}V?GpkxTeyDA`^`msdOu&=eTX{6BKeObc4UvI9T
z^2$PwlX*0QQ{rs~fDBA*SNQUi0&0>mp!anHVJ&V+2fc1w4afKT{^z~hfQ>$1bS2zp
z45?i8#X|$DFtmGQNQKbq3^Vq(v5KgE4y_K^z@%tu(7z;0#7HS!Y`eGhVXSqyT%^Wf
zH&pMe8{MZ?#`6G#ik!F8gOcXYmqZy`?^QI5!rXET`AI8pBV?fx*Ja5EAd*nmu*x()
z)}R0URJ*IZRpuU}(s^<n?&$zR-|Xc~mUtG@u2JSfg{P}{<|#h2y2<kG9S^oYt%+yN
z4=%o6snjW~oaqu~3l7H%mYix`egE^ptnokx$1UR{)5hKMWoJ5pVWSiuqfqou_0V|)
zu}D@ZQh0F}=vheU=4zwU!@}mFmg{_O7C3&t*(_ATT5_6FB;+oG{#q(i&rgMm4fw6i
za+x%n@veWI!X2YpWh6W#is0bU<36k4RNv2e|2l*1n-M(MKV~N)?AS8bL`WXXS)Dh3
zi~PsJp&|4@zzbJ#xZ%h=qAQ)75b>WU#Crj;Jo{XZ$bzO+<-3Q6UKBZ={=FbI83heE
zBr@^$zE`>y>`m4CaL<gLSu&HGxk~)aO-Kc{T3y;L5KYNLgW;0XQOa<lP_a^@k#J&>
zF_8J!#^^Bsj<8wHWMu(i0;}j41uvb;s6TqLQS<3Q5|P`A#+Dn5)usGqnd?qq#gnm@
z5+L?}tth*NCzWkk>@Bx8ltx*)uTb1QFf^Bn1;ex41*se<&laz2XQTFGe7PYTU?g?t
zR!%^4aN#kMPo3&c&znjBL2C>1p$cLAZ%-Rvcpdp2@6U$#in0hm`d(#aMN)v!K`;sK
zLyE7JDXw+m)p1hD|KhF(O<^^a65G%9%b>MSz0ufN{AT_7!M-Cz^>F2@J6Dqhns3>3
z_wA!L&vj?0we3x#EOORiM`3j!Xic)$R<I>&yW|xQBfIx0_0j#W&e!#UX>OaXH32Rx
z4BI8^|D15^pFYDJb>}f-{>-PDiU$Y!f)MX#PAI}-IQV+kI^!(jZyDIa1!r9CXQEok
zGE!fnE80!ekN=ol1=-L1me?>vP*PpUt!ig<p}Q0GA9^e7a8`I>hCg$hQ;;i|3dNn0
z*u$_&P=wXEUZfN%y9DIE%jf8Fb1#=(YCm<Xs;b*w1XJ&jRn|@f`_G_scdRHFt_r;k
zC&7HPk5P{?O9!IW@~ds9(uyebe?AL7kX_fG_#E%Yzpz6Ec&m)i)8FMN{U`m<F!U#9
z{f;NWF3=@E4Lc^yA27~5iq?+|$OcA+9Glro`AyeWuwGO*nbrm!y;J~AZnlX<9xD}a
zU#bGTmUG5-i(I;;wAuSOH^QVm%jy>@P$kp4A^#nj_ZmbZ^Q%P&qok#b<`Z>AF1duA
z62pq%t#XMM=j|fy4)%pwl*KQEn%mP_>l$xu7{`F6rk+@QZf+y2I)sL2C*(Su1qA~~
zwe_d|{JsP-#Diky+e_i*K&NGOn-U|_Xu8T_L?uxvTFX-O#zf;oro}hn?3zH&o0Z90
zC&vIy`(lB$BW$$W)whO@VY(JGm3$MF#S=OisZG=yiG$>|MS5jHo^vX*-QlhObo!(h
zP(kqr0DpLYo47$sc-S;LRt^dO+e{mT>96ygM8q8IE>AnXY+eej)k0!?d@Dk=BjHM;
zWBc4c&(#O9m+pP;GMuM6vIXZPTGLY6N!Zxvi6_Y~?PWxgMpaBBrxaToBHA<?C}ykR
zz{BxrM{az0KHZIz5DwoS#-}khU$1SMHFg=xTjJokd9TV|slZI?Qb|;BV)U_@`f4H+
zrfO6Y%Et9+K#T+Xo<^026{sAT70G~UlHV$BK%hK!S4kN%Z8Ho}VW2A?!MsZDzejLr
z(JY8`QX3n|ouv!KB`jW<3&&-L$tw4joImA4`+~sa#m>v>!QAw$V~|L?U!D`EINKL_
zl{ajD+$>CX2bh|h6QWI{AKmRY?2*Y^ysaZ2Y=r()+a3fUOB8-kOBB04i6=mVZvF1y
z3l{`v0)ciU64!?LNCNwsur(~0BUVpS@9%ta3Q_w=6($Sr72$ZG2To&Oqi7@hxbgwF
zJmTF{vxR!21KO^yBaEcee#7p>;d(6oS7n}<EyLScO2;hxMvX6wfZiH{dY6RIkwOl-
zT;yE&W{T0l-Urv@nC*txszSFN=ol52Dwa&g@Jp6!5eb05;>wLqB;nwrBmX#CH}|{W
z2I}Qx?DyI?S%HvwU9PW6kFcfvQfZFYkY^nxl1D*=;>DNo#t!vwGgU9d(E@Szj(V$q
zFE7`xrALFmX47#>&OaN>QN}fnE{FM(rs}4*iDqKA3(tgUwy-Jl&W3p|0JPF5P!a@I
z8NhC{P)eyH<HD~5EEkADmX<!)eNJojzbu&y^`<DOYdC&|XknE>?MDE@7nKi-CxSnI
zJR&!uIv|jj)<Lfa(adp9O>ww}Gl7iiQN@4b1@?RqU&qq#Yhelw?W>{rkFA!fB|$CJ
zUv&<)4K|KMpj2kT+G94l3WZ-Gpn|<Olj268L~H=EzL>$TPPk?0?$P#VrCULx!E5R5
z^#1nK^jpG}eS2kOCys8%iENbonUkJpH46SfXScK*ayEjaLwX1VlR8$mfn6OitK4#W
zo|l8%*jRUiyP)4&<34|`A~7-+9*oEH^Ex{Q%Z&ZY(^|CL&?`U)tqeW*DGVTSQnc4v
zRMC-~5?!euz7#g*qfp13r)XgaI#PkO;D}OLU7nb@q5<>skGI)3B+eeCbeo0aGT3{l
z>KR*k0su{tvt4kUgHYu;95c4@e1I#|B=?s_L?0zjW$>)TgPqR0m@k5qeo%kMSlrK`
z#YlJKsPrJqp4s^*y481E$5s~aIF85n<F5?4#@qrSIf(gQ{@zA-$1w|4?%!58#zOh<
z5fV5X?)~JsIpFb~Zhc|xR?q&$YAk6fuS*R6huh6?ouoO*tir3N^|f=Bx*Zm)7{by*
z?!>%ZEbl^!n!DvIVpLM;8Ri%nRs1!z1}4ef+Xya-aE%%5;}aX-7n``NakCDJAA3SW
z7x9MSgVJ(eHzc)2=_!RUtrx1PZ^)rv|I}BIPP}tF+5gRU(^IyoZ)&m`_Gd(nZnS?k
z;3r>mZio)Knb5MNV!3nJZ%l0b^uwE8GTyA$?IR?5mTbV3=Fz&Ecbvn1fPx7~^IpQK
zx%3CN`j)SQ4oZ(;{sHpY_87&#|6!apcYTWj%;E~Z0Hw8@k5`uf>;repHVbTy*)>SB
z5#ZB`mBp|&0;?w~nfaumXByi_>^nH+CNC!J$Lqzf>q2Y&+_S|ak{rZL2RdirdTrq&
z(WZVeL9bC>>MZrGf}M6j$Nme1AVlv3^;+SKWr=~Dq9(2e5VvAbK^o$|to15lx*X<^
z+I_eWG@|AsVf3gl5mUIo!6wM4yDnY+dT&GQpy3>dXfU}2BYi_-MBXl}bCxybk4&{l
z9k@=XF!}bHb>CaOdfJ;v5L0=TcL8nrI}*L-X05MgQ3BlaZMNdYdz5uWFs^BKYdQGW
zFe<jDCcWKKYpn5o9EgO`ftewxi057RYZAj2s8Za$x{KLC6){n^r}IuQW<qEPjDeoM
zPt$SJU2$j*MC1qv2#UR!Am1;Yiw}=^rl#42+vuR@AiAxWrGo_#R-d-ai`?)%p{ypU
zg1lgtneT!P-yFQXoi)By01$rpmlA9u1IbYNi0Kq0-ONW$0Pv5200QII8N*dGk)~5X
za>S9yysQ(%r^DOG0_y97D&|~oFw_Np{ZL>gz<U9e+6iPeKI{ZI<w#gW!$>{Fv(Ge4
zZr}?_Qdk8uUMePE`QR54We;bcSSGbbaP-*~h1_^cu$FgwswPj#zXU7Lvkk55{A&b*
ze?)n{{9Qn;-@nb_K!x-HE+#%^O2@~?cO3@N__9aJe@?|j$LPGVzZJ$jS02y$BX}z3
zqJ<mKk|ngDxiGtaenEZ}ga8|<fWME<Bg(zzUVgbJBdxi)lbKTJSXazZYmcI!_YRXo
zl+*Dx@W(j*z+FXRW>$^$bk(i2IVzGNUsr`<`0txpMUs~K)bjSl#SS(GTH)nQ-0xN#
zZOHfu8L5n96kLxTV!(X{g$eRkMujksmdB2Uh+VJiTZ3=6As~7y=5Q4s7oij%zby_+
zO(u=AyLUm~J=Y$d=fMbzt_ZWVIC(zgk1;eiCQB_M!oJ8(0%K3Y>gL4D<QrVB^GevG
z86W98b8!jb_=c+x@gof`R!fle&>$ECO&1WoCtvjqHdL~6&4Bp=`*BWQM^#(DPpK)R
zD5nKL^3=CFMAKUWb@MvR;oUAAPlEiu#G(%f*f@!GuDFEex&mEcv<r43Dn4&@jsaNS
zD~1aVFdy{?k$v#+J9`k^=?CDz3pckJQ_dS3`x_Fua9J7oHuFHxSQaJHcO<ZFBPGI{
z7-5PQnkwjAKE(3dC}qS{jfb5l{^qUv&S4FH0l`9QZGBtg?+PSp3d0H`r`<0ZD{jkJ
zc*RWR_3`6*XB<j%*M0NbH|nWr9v-CJCiXLPxr>?F?ed-vRms7)&{QLjE-|`)_zU}*
zhq}|fDtHzE5lXBTj~f;(rr0Y|mY%;oN_lMLf(d|LCB=M^fAd=VT?mz$+M|cw{8g!R
zm3(_+b=lMKhSj<Xu#jNq07J{`Qc5R??X0Z=7J^Q!_u*SZ1c;i<VsrNdji%G%gEc(Z
zIWO-koPguK$2^elPk}$qR_1+#Y7}6O(Sw7*63IHU^ZCy2EsOL~fR0hJQLeyOk?2JT
zY!19K$+&LVGsI>;+aLDTj5f@xzM-ORj<|GYm0QBg+7903G0;?gYPxH}u=P9}%E{=&
zK_BRE+O8Sx?S{RD<w{X8>0PuM#~yqEw-HzgnH9`qTxe<dB_+LZR~Uk%?9&JiQCdoR
zhOvMHZOW&F^j#Hfepg>wHS}^OCF?9(t<LiznXABPwOxlwF*aky!5#+E-<U)a^X+VW
zdb{M~awq&HeN9i1Vj`IHa=TsOq#+^I%6Q&{0|1{dl&-p!@>;m|a+==C%ERLkZ23(2
zIMy?aZCnT(fy?#Kb%i1U9NjY6qLo3RV^QO#o|&#rP2FRnk^kJ}{%Qw#S0=O5Z`;pu
ztcVU4*v6FT^pKyXcCW0CM0E(vImoRy^*`s8G@QOZlh;%{1jHlot&HYH2(OqRS5CaX
zEEct-FV|hH`lFAqPS>s<yM_fbq_`dQYt(vng@DeNv$?<7iM7@DjP6Q`+4XF_ay<H=
z_#O+a4!eS>EJ26=*j5Dw;?e;4KtnhE)7V}AZU?<IWGA^5rr^f_#3wd>f{R)m3=Jkj
zYlHRi5@I^slD%v;UvC8%dYNuwB7G8-BbiuReB1IY-_$}&@?wOnae*y5!kZZ|F_8iv
zoF7)?qi9lI0@9(OIBIdG#fE#zal5$Yucq5ury)F{VMJ6l#8Pw9nCoe26iFuHoseG|
zVL+==S8E?umzeR-#++i#Tg+K~Q9Zed0|P09NdhS4x52>mh|qpEGnk2(#HlLC&lR)V
z7nkQ%DXx6<Wr%n`S>UJOp~pslN6v(cf5wPsDM3grtyz?ff70zRbhOP4|C*&SP@Iwo
zz|dp{cT55X%+naSg)zTx9=I`ewBIc*1=NpA&$I+^*QFriQ>P?iVj^e7N|cz+sXqJj
zp?JU$IA2Yw^(hSWLRdMQyqnW*%v|7d-A@mYOEj^KdyrpVhRq1mB*({h&4H*4MRhK%
z0rTt#qj3B{Wbyw*mLrODVDkT?t)pOqs2^xLYZLK$fLIoI?n?zfQ80{p(4yXu@itmh
zg5oMxrRJt|Rp%6B<_AAl+@zU>IvtSY6^R+Le=Lc0CA{amHCiM1oY(cLW2l*pGN}7_
zzaSxv024PqZm`K8Fat*JYNg69{>u&c&au<1LArkwEh{<R&Kj09=fphSpHWQkuIkYm
zaIdWH&%!H)46D`M9xfoZ06h>gyB&l0n+q?y`qYq}RUWYIJBaFPFHX5-2cYYXFsl9u
zl>cu#Tf_Y`8T_G$5UFCBA?7>EtQ`E(x@gWF14e($9>^p4SQFa}T2&Y(UKbm#SC<<<
zzG#?1n8WLs1rhw6$Lit|<n4@u`J29$d#G(7FIjj9>a+)%X+<#U1g7`18=Ni!J!5dL
z(!tB1sis4J^Z34=QB7pgmFRneaoe|50SJiIAn!w!fK&T|Apxxy36ScV4hV|`CyXVS
zu;erLUR<DW`wi5TrXxj_iD}yId&`~xT{#w>_&Pi3YN^66I5{M17qA5bNEH7LM3`9d
z!8e7Tqo$WO=DRxy&Be9N>o=zZglcBLGE()%#{Sd&Z6NOhz9Ef>)vFxMG0vc9zHG~8
z0m8sNAVJ+=R_mR6>HSw1l)n+&wb|&H29Iteyu3_bUW<^AFR3A3-${Cx5u0;u+43pb
zl33qE0A0*<`jGFw#6TIu&6;~?JtqP*;Y)kqQ-}joB+l?Yr{+Q7&mig|(C*~G24scI
z#Dm|Pr|l5)>UdKBr>83qhjMSj-kBHkN{k6v!YeVM(P9fRGl*=XvJVO=In>9LFgeT^
z(n0ogh_*v>j&M3EA!@?OnrX39P4+#aLgD=8`_A>vzcbf$|K@p~`+4s7`Q3BP(S~Aq
z?D9m^CKD^;>jxF~V?sB}z=+qiLQUvABx^mG$TBoB3GpGwF3#;^PjDMx)hcbGzNt?~
zjIu<1<(k~6?WQTWcx&rb;hEy=Gp=H`U9K_)y7Ai$^3wZoaI`f2X$K@SvoP%B+iQIX
z74h={7++>ZF8N32Va2>HYK_kIhPWu09dAnVdh}PT#*3j6j$eqlx79MW_Qm|Ck4o?$
zo3*T%CbdcOm;uTBh01E0MLbI%=i2?pz+CjHZ%9yQqAAXQTHM=q8T=eXaznM8%2Pou
z-wbZ1MHU=fswN9vGFJSGQnMD?&N0%sv^G$#=6D5tn~EfbX1my2vj=}YR=Fu&{w|&O
zb-ST<QSQPhNhR=usA2Tjxaq!ym)qamnPohCUUej$)Gbw0snDZftc0zRzyyHSKaw2n
zr8pFGnZqLD_vak<IPS(hVrVdJ5Cj%h<i41>nNl;O^}$znx-Ql)`}j-BPm2c@>pE^)
z6$FCF(8Q9beDXyC$9c}_;BZwHip%2=iN$J?naIlEPI%X)SF=a0#WLCm@y*>8MtVpP
zK1>%A8RI+YzV;=d<5(`<vA6%Zbm*CnP2pf-+EaEBvrkyom*?M5eG=}hZqX3lV|Vab
z8KG))w^^E39ow3V_dK9so?E8&qZQR%F$kNr1F<m=Hrkte1Mu;yHFx9Npwor=fTtVh
z(v&E?X<UIRwfnUb7gp|D3l7+o`91$@(PvXF1)<4l4eq5caDTDntA>K7>6EocC=pks
z2Zb;gqg}%f<QQ?sdu9!pz;Gw9hkKdfO+yQPKP;&3pMwScZvhyyKQ-V0x@Q^uPuT^_
zz2s#+LWiNp#QQPTMcE~Sjdry|KDWr#WMcBogb?9c>ApRyOfK{#9>zxJl#${M0NI@o
z&+P10G;b)q?VN4RWX3D7eP&a&c-@;S&*JhEOJxO=#s@;E?w9}rbdT)6P_oVv{V*hr
zW?a==Nu|$*ev}^VZpT&ZF-iCr3Xk^-fxUH?*=3r2eFV?8#oL1ZSs~UUk$aa^XsFXM
zE1m=a4~XPWsFHU7OZ*31pyo}na`UUedc^J6^+FVbb>{h=B+4#gH$rcT;^#dvDujyU
z^~_tt((^6a4TmmN75s~}hu{~2_0|Ab>Y=2MTu|)?gp7;s$wG#;t|-Y*X`g7^54OMs
z4y-ci&_Y3vgjWlf9rAy}4x6=zR6UqU2zbB3$NmIEf2!}%b2&<p3^a`6G01A4`-_ns
zN7L$xSA2k`dQW4OA)#mdLK4tdhK*IZID!lW@lih~n*CZ#%m!mXvpPJJx{t4*X#;`0
z?ZSlm`b}fKiExCayF?f|)F-T#i?Mr6@nJ?#<h8;(&(aF7h<{;&9%Bkk#SY1p6ddQP
z1*O)1_??x#>Zk8%vDJsedQ8Z8{qk7e(Hmu(<0(B-!%Eu^S;O#w6!0|_m3D598k?)G
zhW0I7*WoLf*?_wnKQbihE8Sbe>lUYKH`_x}*0mfE*vNK$8w9haDL{Y-Tv@je-3dHH
zl!tVNnOn!!`6DBMCyy4h{7v{t@gewmOHBLGb@DaMEtOh0jIVxbND?X|gP(U4sx^k=
zp<ZukQodAMG{4|nssy}Eo!8Aao@Da6MX4tLLrf7OzBIPkgh?aJ%l0AX+--wYSAZ9+
zl(0XdHN$a7pmd#fZ)Z9E9d&N4I(5YGp*JbX8WbvDlNSR9U=Fb;{%QMln(?yE!r<!@
zfhfAe&w*xi?|gpKM%^Os`H$99{zxN8Y%N=4F{N#=$J4Xb%AMJ;bRxA5JVVTg;?Hte
z*9h}F`jEeCuURxI7~v#g_HfhY6ESPe&IClp^ZUc;C(XY-bItl>PZzu6)ro+N#l!Mi
zNeaeHx$ik#<zB-JQ!S+h+ggyVGe$KqaPshS3pyvCn11kyTb|fT9`%qsEq>SpP}xDo
z(=^0&+rWg|jEic;o8r4jp<)2&PgVz@)2gsfDvK-ZoW3)VRV0P?4!N&Ji(MbNXez}X
zJ)qq4ojcv4+Z1AVk^B5z(l6^k>-C~2cYWj&|CjBLPuY039l8Ap^`L0~XY=MawTTpG
z#^<KBaeiIZ98WRgqAmCFJa0dhr;O|zS$`VmbHj|WKGJERJDgPd5F={$-btk5?UQk}
z-^3vso{NxBQBOe*3TV9L7Ik&<;T|K6#;YE`n>N2qDiL<b1yUn;d$53a5}}SbZ#iM-
zbL(`rhf(?5&pY*!zAG8u3_Slq8)jx@JDs6_8Bk6eIWy?uIhyn0F!J9hRQ<$c&a~cZ
z3ex2SN~EMw-RUS5g9`&yZ$bd``kTyrpfDZZ%=rp?agq{j4O>b3ywqCTtBVe$hEcUN
ztM{$<GzQvk-+KH)JQx+w;IT&WOtS|XB;%-2F@JQrPwd!mlS6*hjshxg09n!^I+S=T
zk>4?<X71J{cD?VA7#4?|(fg<A%y!{ekyox|a5$wShrs=?5s-iV)*NM2kO|jPLC5@*
znXV@$iYd23ck{!@ZXIOXwGM}}FH<oOa%0>&9gXCTvvnT5r^^=sc2=Qm&qTHApQ3hF
z8)@bgU1}};nz7p4b;Mz%tFJH1qx2MIJ6K3hI?=ifO6YN>bb6(~hrd^Fg#Lx2P5M~O
zS!+~V%Qf~(`%;3}a2DZC1BO!;p;GZiNv?=Z;e+U09OFDe1s!m$lki|2&bq5on6s9G
ziQooY95%X8XMDVGim`R=-bmojW-G<?gJ0e5wM@Ra@TMp+#n-zwLkh!jqG&H_=J_-B
z8QM_qHo{r2Wf((N8!iJ9OV5^ar4TPe(A4~NrQd+;)*!ta#LWgd-4BgM3;!%L`}Me6
z<PV<+hcnr9@k_#;loe|KN5)vu-wBRNa>{vyN^*I!Dy2EE{O%=XT&-+IRbVD?JNB7r
zjEF#ys9?6@?N~Y-`Rjot;40_U;SRT58tr7R+pUh<)tH+HC9e$0lY)zau0Boq-LwYh
zBG3@_{aw)AFzKal>g-sH9X@joS)7vz+GDfG(zDa*kFw%&=)i_TB!32<{1w@+L+qm0
zmEWayb(g%J?0>|pv*Gr*m>|?(n`B+Q!XAvPyFI2THkOfh^Z0#Bo!{ga*b;d+yLMau
zUC1hx-9p_4uhM`P{WNo!0E=A*T}d+>h?qQ76sGuzAf?_x^DmXGa=$AyYq;8xnIhLM
zyFd&$cC6T?H=63sg<yV@j_W-i*W<LPo{5%)n(fl_X_8`a0*rziaXc0x%7Bdp;gBm9
zQ+|loAf#CN@~hj<s6Z2@73^{RwxD6`GTlGgNilABxOBxop4EiEB_DTXNpzq_&)m!G
zRBB*)lcXdTg0`xQm`rZp!amEQkZ~0EuUOUOc#4`(RzOP0ELMulyq1tWDdsT~Qn)A$
zXm#awj$W<)W$8QzxutUx^#+-YjEfqZQWasJ0*cv}%<#+Waqnm~%|@#m5ylZ-ShXHK
zi{ObH-?y*|&Tp7B;%bvc0*gJIjK!u)KneOroO-nzhy-59$?*+rt*Ag&_N;P~2zc2Y
Lq*<3+`o;ePZ!IDr

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/pgbouncer-pooler-image.png b/assets/documentation/1.27.0-rc1/images/pgbouncer-pooler-image.png
new file mode 100644
index 0000000000000000000000000000000000000000..ee11628dea6d3a9835a7f125fce2288c6e30fd9b
GIT binary patch
literal 32737
zcmd4(1yGl5^gjsSpb|=hf~25=(jXzNprD9?NJ&a}ccYXFh>Danh;(;{gwi05v~+jl
zo?D;a%>H+F_MLg(op+b<c~t!J{a*JK=bTTR>y6wKDg5)4=Me<KfB4{@Jc67FMi2~E
z94z>bu7{ri{C3t>{GkF4e7WK1y@tPEw!5!l_sr73&QaS&A2GDBG}mXd)wR*rx3D#`
zv|Bq<BML8KLti9eqpxjeY-w>t!Ps0MQLxv)!X<F!u9eLdZcc9QD_q=yJY0gjTvy~C
zUt#0q8FKzci6B>yhxhI(I7KgyI;$(poMNwc;t9QuXDrQq{Z@rN{<%{leu?}~8~%$`
z8oaG-EpcPg86)OTpH--u7zY^7D#eeTb>#T`;mvu*8*f|KkNB2vwY6;>=}t9pQ{l)T
zI@f4c`$XEtZi#f-bZo`g&R!uE$LaMptGm8nn77mIk~8q$ezAg<`0p1lyR$9!oqK=3
zJUwJ+-@Hb@zF%Vu{`WmSk`O6|zhB&Meq8<cGm#CyKm2{!YZ;x*2mfBj$mM+P-|Ipm
zgh~Fs?!&|Xf4<#9^&?sit!g}Sa`LJ_ryIeZ2qJpAubZh^RUUcu`rn})F6El7B9u`j
zCHw?5f@cvN0s=`ZE6&~3(F=&tXgM!(g_-$0J3D*(rGF3Ft<~=CIMZEMhjDs(y1uvP
zUr`~%%F6m>ysD~da%m}ml<CQffou&cYwNnmTZUa#u8x_{3nZC!>wR#06s7;oMmb@K
z)H9FM1H-deSUN4AZk9T4F=Aq3a+(kG9It;PM7(@_&cY177^`${r@r}j-n!$O&x8vL
z3JTWu^pN!T_gmT6yh={KZqWYO_xEo-^-?R0agQT5T918gJPOYEGKv2l?x)klM=AG8
z7~0xe@Mwjj?s&C(<>J5PQD{9ADLgzpJaxFURBAnq^)?^?1G#(m?qHQGKMy57qipQ2
zHsXJ)c2Xw%{>L;t$osG`KjN#BR|EtuBb)|p6yNo@+akEmI5;@8Q`7%9&{p@o6v1@0
zN++&M9GdELJGHfU8X6iN)TAUQYs1XEZ=Hz{a$K##`?p=@IVP*0(6$#Dv{O<G*qmLf
z+N1q7IvOQJ{dcMo#b_9V5z&+FpR)un|8B2&*_D^a9sg~*KA6aVQ~H1RM*NXqcE;#@
zV`JlOhh>V*%}qS^>B-5L-APj8-%|f=^V9Ox*5B4^V^#B`75sj9mvyWnABD3|b|pwq
z@LNQ8=R2$npL29{#G@5faajrCAFEx;sd=ZArOK<?_V09f8tmzBM#RM6dwO~%wZgI?
zBPEvn&y{3k@RnCrOe-%D6TfU}X{o^dpNaAvcjlQ2Ro1M7VdQz7xX66w!F~AfVFZsc
ziTtx?T$W?Ptg3}LH*emYAIPEeA?k7AsNQFI<?S8CW%F+`o9wkToy}O|+%|E?oTl;j
zkB-o7iFmz#PlQLwgQMlXb5UJg9YJV>92yR`=DKS<J;}()r+<~%4(4i0*!n&BJMi9A
zr<purnK)66@*by&T8uzCF<L%8zIN)1e>cF>Y3<EHoTgy9;AbgM?k3A?!<NH2f8J#E
z{l9smyci-y%F4#}R6#*uj@MV5{$zDx!pqAGF&oN17Zw(_zPnpJp#5*(@!n(%W(>T1
z3yX^1qG7%}DY=G9z<yByKAUE1t}{F=O4MCYDMvGCsKAh4IrZPPKAx?1d+`p=2KTL7
z-PsyK-mTY|n4)$ZDY5Y=yaLEM`khu9$+a2+II2~qd9}2(ZVL%T9ant#Z%yvQn(X&J
zlhqz6HqR|C<|_>>D&qYr8#iV&0@J|s^+}A0UDSWCRfN|LCP@))&v&1ZPVSlD4m#lJ
zg`r&K<-I6&ye^Rx`ta{7w+(Hy7=sm8`{G*ncSkJOemMM_iO(14A|(F3*Z*~-{DLj$
z%zE=?U4n%FYI(GX>n@Ktk6(;{E!M)q!sGIwqr18TAqfs_tgH=_-~8LzQ(V*^k1C(O
zg$c+r{>ivJT$E8Jfgx8=rNDf#*mC@xtmwhnix)2%gj+B5vq9)cNE1K)S?+NnI5j;@
zRp}wor1bRZQ|}UG4JW7DtG~*A-q1gZ<Smp{Hhx=eZXqK~PD0FEbF^ukLFcxPf$k#}
z)kTN3q+rqd5Lr=Nm{Fv5W4d{Ac{wm!qk?b#p55`j_4d*LVU}767IN+SbzaqF#A;_z
z5r@93z)%*sBPod`EG)dpN={6S;Vb@<OSg$<arg0$&d%oKN8y|{zaJ#EjxO!v^*xig
zY%=in?fKucv!6Ad?37Yg<R}c4Skirc9MzwyZ!uPRd1hv&%ZTU3jT^NRgd%5=`Jn<P
zbqx*c#on8Umw19#P!PVExj6=M%b=~cWZWYlT+;>j-Me@4&NauI7xD`VHrj4=_6~Ny
z3UWEEzt~<Kt*Fa`=O+yo*`+9VT+=i>?p5B|EqB>rj*gCA->dmkrKwLwMs_Dbj>qU|
zPx@J4=hT$W_n9WK5T1VJjNq(AbCU;>l74pTIoZ2h!_?28KcDYS3mIx%`uTo^uR+bS
z>YSmWAyVGZ+T4t-+Z6aRCMM>GJ=JhZhQiuNQ^&d4LM?Y)lVx3DV&cAW_ef!f<w0V{
z)n6}DQkZOPZMF6FeFq0sj6Z(({5jpRUOT(DS7HC)fLE#1{`c?S5j%#Ghr25mf+T<H
zSyRZXs=m$4WDRNMRdypx^zreL<k(6M*Tjr}gj0RI`H1y-{+FgB_rq-r1pckIxj98L
zpU<TC2K8+#q`<HfD?Z99R?L$&;1XMU0Zp>}8wg^fikY$^JD)zKeirg*gWY01kazN&
zw{gEPFOMry`16QzMoC)U%7W?AS5ZkSo19`(U0rWjO-!Uvm5p7!)T=#;Uw31w5j|n$
z7P`B}x^tMe!#Ou~7#I@2+QVUq5wsUKF<}-K5h13c3V?k-l@jOiN;2uCukSe<8=Hx#
zsaLOFVW#$(PzyT|85<kt=H=a$lOuxVP3ShVn(w05)6=_?)cv9>{_gtDP9rSkhmRj$
zxgYH&=r+HLxNXgVjHc{!adF+?;Ak#1{s}=F8>!8yIej}nZ)C(nX}9|8a*|ZApA6%-
zbj1wL7q!SWMn;{@-#?7H6VD+N+Y3MUcLucR!&|LqS}wN52$3UJN4w_Hg7)XnojXUt
zrE~Uhd%+u4=LXsNKngC*4<A0f4h-~xNCF#&(|YQj%Jb(B?GyV<theW%{wlRT!ySni
zEWC*$8A$Q+<42O^@fy1O_wPfZq!4mot*oqk9~T#_QQ?pP`Q>|Or_}xX=g_?W=@S{X
zhzl8f;$XQwi)1h@K5Qpg!1(-p66s_TZ!G**adBEf`)DZx|MDp;j6p<%<_tE$r;ov3
zzFeaga==r~x&#LRoe#)3d9cNA3kcBj^OK((?fFANgxtY->5WauaO)N+j8Ifm6bBEF
zM@1HS9~~Xo)g=cLRcO?W2^Eh|LBXw#7$I!f9I#fHNPT_%#OkW%9P=Qg5$n}o0)xZD
z^?iMcmNgajOP8L+iQ)%Io(Yol#wBHpheg3UGS<_(hQ2|h3>M_fKq`I$$OKp;%=GjL
zPY&2r3u|EoAz}DH45=R&K*z^FxR#DXPee@}SYI!ms=(~z;xd(%63eY?7nx!?UR`Q4
zb3R+W?A2J6>($%0DLRF>WP(I-5g~`=JM!`*n_FAm)$Xn`k=%_hs?g%;&6_v!l`vx;
zTLd8AAD^6jh>lh_Jid4T{sIk^-=Rh*JmeKYK}wh~ev4nV(E_$#GBOn3zJ0sBdosL|
zX?f(gTTnjS{N~p$^(ro9nw*azA=-w9*siXwPR`EsSFRxA?t3&)Bw)hRA+@lV-<H|V
zO$`^B@-`Xn<jpQFzJ+y(&&<TLDWjfl3X<?Apm`4)7Jjd5X*sW?q=eQKcK0d0cr3Pq
zx;;(~7gjR-nv@iy1O)^ZL@o^t59>fCw?B-n)-6of&>9J4QMTIr{qWPLPw_Ar6x@0^
z2!${m#mFk`bab6d%ge=aUe<YIPs2BQxK5x1d>s(*%?FpXjd`4?Oq~E~60(aICwtSL
zQHZz{)@_>XEufi=heu(}`bA&5qSID8KL%n_L`lVG_MSuuc^w>_W6PfEp_rR~0x>tw
zu#*-}CsO;KUcy8@sF%NkU9<AF=|J{f91Io~7N{AMng-zyKh+GLKK(G}@#x;Ypt))p
zS`lGktJ7m=q?~jc=J@^R&u^g=h69QP3m?YV1E&INM|L>o*8A()kUC%NuTSC-5=x~!
ziCKr}eJ4w48p<q5m_AP3COo&3odK9QYP6`CXOvbXErL4Y3J(uir`R9ij~_q2kBxmt
zuIYpUo7<m|uBkDAd}B~I_%6;%*ou!rLYNgF213p_-7Tqkm@@)X4E6X8NW-3|TXBM<
z0k2=<RPGL&B3CrbvsT+8Z^@-8IPLT)V<1rEdaJWH!`4Idh~3&4&3Ru;Esulinr<8S
z(MS9K;VK%wp+0(OuWM-Nf6K7rMSte=o>S~|=jx!ohiP3J$Qd|Va9!%p+V~wJE1ssH
zvoc%+q0Co0x&93)6PkT!py)#Dc8}u?DYPO&Ucg($$H!C7d`V8eo2B%~TB*iYK}+Oj
zsI=Rklf4KrPtoX@7&PZE4;4tMj(-B+a8F8V8ZyDF(9lqxytFJB5jwwm+?Tnzxvd~L
z3Ge-~b!nB6k-4X!Kz4~;9S7EoTFir*NjA0tvb}L`7G7x0i#p6q)uQtkF0mp=(n<DP
z8ODqcZRX?EG*F%d33h*m`n1?==oOp|*mm`;tr;EMwzF+%AAV6}kl)!8nVE}q&6Z?P
zkEz~BvNVILkYdFVLGwNYm&7Lj3q=Bgf}fX<4vQ^K#4;4bo=^lFz-;H{=hw63RASPf
z_1K@pCe3=Lypva~+f0B~i{>N6zTyeByDKAkP8&MWx2-V&)))=tUk8YTuQ}7hFG)i~
zv$U;f+Z>jl`$4oQxEm@5gWx~K<|9)JDRF+1Np<gNgeKrrLfD}arYkfb>7Q`e+S>XM
z9_|mLB>=qhy`zIqWpDPAr8GbQ^hgELiVVMSK0LIO2tG4fZl7Vx-o?btO#<QVew?U#
zyi&$fRaMn#cXzG>D7z<WUm{*{o~M_|+0|1wv_B+p6H?!fFBzv4)FdK)dNNw_WBT;u
zC|Q<nWqG*^O3a3)rbJkr_3iCXVdkUdMcZ$_LVRWiXnTiW+Yzwl&e8w|0x=VY)$ht3
z{zI?lNB_tO6*d7ig1`?mh>6i1?XH|b6qJ;tOY9Ui%sG{t-_c+o5L@p=@tMoP5t%-L
z#IF74^kjW~{Z5I+=wc=vDXBLE@JCGDv?4Bd(i9RaE7cFl27mm(t#a9^Ul}QxoSnsj
z)M6|@xv=mCQfE~jY&L39Hwxy^^RPSNM8Gfmu#9veDk`c%lRgwsJ&=`^did~-f+1oe
z!=7HE7|Lfpd<7Dd)H~{z6&0>QCw<DYuyN+csw(V~6Ch;V_Bg&REiJvh8eCmYCG3=|
zKyG1S;lfnv?CgBoevu5o_X|r)%k8_g$~l@@PiNOBzis?rikpD{dPkIYZjP(eWURuD
z|Ni~E7i8d;*46~M8<f1xc6N66Uc9*Sj!x{Iers4{(Yrhs3_IP5YSO#zx>vclx{YdX
zg$uZAjqg5QF$`U7#?|F&ZfcUojg(;wX}asK5X2iQjY97Qp)BMD9OlGC2D^oxb9Hrf
z>l+()!`U_P#=?xu0+kF`2f6oDzR1eUf2`ZkvTv3OO&2-`W9Bp)<W#S8A_h>NGjI?u
z2oyy@wf|t(CRI}9S5X2;XABUiAi1Nf0dFUhO-e@>oSJ%LaBvXK@K2sRVQl5;w=~U>
zy>}1a5d|0}3L52hxP)TIoJhRwT*v-KGo7}!HvQ<SN|ZXgKM|(aD(Rm*-R93HG5GHK
z$ekLG6Uq}I&O?%y0zd~{y?Q1sEp2}>BZr8LOu;Zw&b3D)?qMmM<vgvv7-46U7$HZ$
zxHvjy78YVUI!mkP?ne`Vh#!V9M$!aSRf$|;Q}uz01nT?A{f+4!ML~&?t`w6$j~h+0
zCnjFBMGKI2baZ@gZT$w@W~s<yXSZvB4;DwECLka{;_h7xgN|ri`m=Ck2aI;)H2V5N
zhL!7=rY&+P=c%afoE*i7&ThL)jO4UOpYV_s5Y-zU^_7^z;V@D6&EmG3mxI!m{^m_w
z2>jx3+PZSIY6M#^Qzm_F`XUfW6R@cEu568e+fA-QSi+iL@<2IT{Vqi5CB?C-+XRrI
zwIQ-Ukd_t)=$)9D$O#bByEQyKd>Yc9N~sk+pjG0_m!HqMh90)K%|;sH?W!>_m<aE!
z#4W<=)c!f$6I)0Rf;rB}V1b|C)@)DDa$Fm`ZS(sz&rPU!!nR}8+4+}<=iu0g1E_*M
zh%ui{9kJzg{=$U-7cp@W7&?uhomWjw&Gu;gqMN%rS{WMa5Yf>Qnwpvpj*MJoXD9Gl
zO^eLS%j-GY@M~XzIdprWTqz@KK;kx3i15PTwl*20d}QSO`SXF<&z?Sgxx8$KKH7X&
zLT+yE`|2YdBglTg-nUc%+w|K;fSQ`R>+55xFJHe(x6aPY^gXYU3Z}hnJBtS^j4>a(
zpCa4W$At9c`)w}|k&2ychZO!wdzSL0Iz1;#CNxJWBcaa(BVu4Jy(Cg#V~nL~u~EI~
zD5W~D`@Kg>@ZWPol^@rnvkF{A5DR<Xk<pH5wgU6guOhi9IEAW3Ccc2hrI)^Z`GO$w
z^70e&^EhH+V!(pbPGm(iH5u(xo2(9|=PWiG=}y-ar>~guQ2O}$KQh-@c6(t|QB-6$
zL?R#{ATOdI)=$A)^W{s!?>L5TlcL+6r^1OzNnAP&uU#5Vmv6)SswCws=ysGb3kgv{
z`Gy{kSf?r6q>?qv@>BYdA79q~EDG^0u>4f1$<kcAchAmowUs5<YqdBGYH7+~nYHdD
z?4F*Uw(=mO^@%!IQyf0CL8MImoyBN5T9Lp1p@%X+)kmvBb}Peu^GvC+v9T1wPMnbQ
zFyUno-f9~g@2`DH7KAWm25Av+hk-kXY*P0`ODGG<FTrX+{9XLT$Y<1b1!ch?`}+ff
z;j+7o3qOM<cY1ny^pz;nh;2m?MWo;!Yy?$X1gAD8=9x1aCwt>pA=yAN4{ObN+4iEE
znp)du-V5+!av6Pqj_RON2o!aeO;ea^cte_+n(75fZv1qYKS`FNu&AgJc6y%a06Wxd
zg)p<7qDQQVhDLKk!vtDRL4w$BTAi6W2jJdpxDa=DcNdH9)h&l*6|<3Id^p#<v<!)|
zXbm=>6s+^}>*Jm^C}PjND9s8C9S4k`sa8UOfq?-uI_J<DJk%S2Ms83*=9ZKUxJFsq
zaw>7mri*&SdY(F0=}It$^i_<X01vvpwUuE#_bRR0(#WhuFW+S?B`*&>>&N@k!TV4Z
zO-xM4C1qg~(gp%JLQlW>a3R;yK0nZ?D1-tw3b7-+wgK_ez<?1T354l$7cN}zZWhzk
zEp*W0H8kr}Uin)ut0^g6s@|Wv0L4dbXQynrZR6lUZI?p^Nf|SwF$z()+h_svH#lKS
z%m4sONKC{`k_<|J8YZ9CP;S43%#+l@ewdsI*9sF==jPYcZGH(P2ns!bJI1oq&2ne&
z+Dmx?e4Z6hX5VLQjEYo&IMcLzu1HNo(+!h^(q9nNa|;VIx8j*4^eGohAbL~Wwu=8j
zDEa2~cb>@9IT7akbKzg&8vCV|sx&3~)7D&|ZZ?MrhbX0;^vh+aH=VH)X1bjk7oL7p
z_Vl>m3PYj+;0Hh0hR4@QP_{JjYkedU@rS>wXlaiU^e%G0O2&bzcaht0P=vpmoUi<U
z4Tb;zxWE7;U#Zy;H&FF_juijcy1k$y?*EjH#3uW3reL)ai~Bj6RqOp~mT1L-GO{SW
zk4Jr*2vTw#FjNQvj2oIuTy_?HpTr1G4jIPXzkB!P_E^4t>%{c5xAr$b?cL>}p3uht
zqA#*2O-%aJq4^eqO_$k`^xqHeRaiaxO^g8SL{k)6heKgd57>?P(j~u{*6?X>LeV=<
zo)7>&;?i#+gZOoYl@$*NVU!?1UhFLP-FDmO6g^tLm8ns2DKaure#o>xv#u{g*?N8A
zuG>Z<`Cy(dwz#<XXH(^Wn$Kq+eOqiR4&X?WAfX`$9Ua~FV&4VWr%qFEnAT^bEKyD&
zOSP!}!&RyEpR!_gLqnH=e1OkHynrHLRWBv_=1+)?!1PT)U4VE2q)mYGg`;vE6REAQ
z#{}{Src3_T@;{y9=})ICADb8TxFfd<)UzwrnSE*jrCKi!avg8~l!buN47ERgw(`*q
zB%`Tz{&BPN`2U7F1Of?VVz*Izp9#Is9b@C0kX$#qBnUAO;6{P~@&Q}2?G+M23j70G
z7QgeRp4;w_q0{dVQe8k3qY-1R`iOmbdHJ)k?0-}>T}boz;|NX+$c*=)T<R(^RmP$J
zvNz_o^%&4GS~WmLeh&)i55QI+DEdo~Pg@6$S0YPEcX==`H8WH1zmv3gF)}swdSpTU
zt4BSZI!j4AnmP1Ky^d91t!CRU+b#9u0|ZkkG$IysSbhy-t$eNv2NAx?m7Qj~@gUU=
zmRes$3;ryn0DuP5F^*%#tGWNixq6u~*uZF{m<=WSh4B9VT%y6&o#UAQ)RA(b{~uJh
z(QwbXr@(PK;{3P!eL_NhiVSrCC5gG0jrrf~w^mhJHH|3!-y;=9CRA2Z1H*5*%K7&R
zKjViqSD>s@Gp#F-R{irfmX#Y=Q0c5bRru05Vp$Uexd1CC2PPl>!mD#{Pt(Ig^z@+9
zvmQXu!NEa04FM`noHTMeS6*0MUEN=;Si2HVmD2<u9w5<JQfew6aL?=OR>Gh)wbMu!
zq-SO}0OJn|Ld7hBFFK0TSFBM&Ub9xezY|jn+Tj!z7t1k+4putf0<7o<{DgQ?cRU~o
zC&1d>Y0sFDS`?>44gRgE2@B;j?d*7f!hPAFrFQkk4IJPEQ7&PsG2lZ~)CFXIyhaSA
z2il_e384;;;J2g&Qal&vdpJ2d5Ex(pwV!T2%hhQ-kCL=Mf081(wsTK_q0)vrK)%he
zGqw@9O1bCHafO70Sk;R0fX+fO+D3=a+7*C*Kyq9lXK#2WD{>BTTFNSk?>0gZC`Bj)
z?QRI#FZ#f<L-DQ+G!pvZWarO8UBLw@9@LYo@Z*4>BlyfIk%`TjR+Rz+{9Y4YK+{}s
zictO&2##-l_!2<Dl8}&CZOuNe+-RagX(tpGfVLxiv|R94)<o69xsDib8OAdR)P64-
z-(Ez48PFxb@^Ct?s-uF_sN;Ae1SJgQs$^iTX-*XuWbJ~zv~qYF-PyKCfd1lu+$4i2
zeWUm-8Gx?@kPUCd0tsF}KMN>|jU3OD3s5S{-5>+nqgp|#Nk`Ob0`WMQAx9%0f{qZK
zBB&kCB5rVO2P+&ofb|fxoA>hkb2M($mmXSIe$H!u->GtM%oP?20|A!&ERdmoKr8@%
z!)4mf3UfaR5w~`+F9VfV<KwRYzp+R|+8V~@9T0FKj7`lC<O-C``~y3&D?>TQh3&82
zv&Z#R*6B2H8zR7HfceEsmnhx;0BmL8<dpjqn#zdH@;_dHP+WSSQje2z(9eL<mB*pK
zCnFO`!E5qqdo2F0_dO-0Fd}hamhmR%=9pmO?`dl%I4$Qj`w)qv)Ysoij4xZOhW$j?
zYT}NuJG~Dqb}9}o?gx)QP^qDX%a`%yz{^(ww0s%294)^ND)c=QlXS9g0Q-S#^M#U)
zh@4|_kx5KUE09`1{?HxfS*QIouQ(2UuSpS<xw-qBtsK5Y;x|I2yHjN8KE%YZLEOC$
z{J}lYK45r2XrtR`qm`rPL2G)SNm_LJNt!B$kdPWYj*U$|kXjeTajbWjpK}2-ZcHZ%
z5;)~fk^*z%M4fk|tk}slA0il^I7Dv+9QuZ>PB9KB#u&`k`joXU0;0(r5LFz1a_5fM
z4R-dhMNwg4bsTyhr3^@+neP|J6x4u&4FF(D??VJ&TBkSlsXWc)0B4{%bQXG&<z+TD
zHc-yzk~j`pL<fLoFYUh3ll+K*m$%PoR7pYMHPmqd+uL?G!yv`IEiB}Ds-l7(m}^k)
zT{q{Tr@#AqZthVH@HcY5XJ+0kev(c`b7KS0rHvo2KWc#JaL;^}_20sWrTt3b63H#e
zIy^kA@8}>vh#+$Vfqgvw=Y&qv<3QhRv>f)sC6wk@QK5)+T@@%TEkzJuic|I$AA^)i
zOhWQ1So9DF2uqaa478~6{BzpV2{qt1NDCN9iRHK?2m~NNT&?m1A>=GjitX)>-%dg#
zl7bKfLe@JeI(IUpD_xNV(z9GSC>olYng{}i3{dn#eHAseZ=gs)6haUtCZ+`kNo;Iv
zG?D)~S@Xm|K*mzZ*TY2z%c@mP4PoW-<;y)Tz_~$OadJWssBwvih`d0LLPeO2zA0G8
z2vPTPvH{DQ6D(O-SyXFAUVtLR6zhZuTqlG=mE0FE$@U<$Bp;@Aiel6PO7mihb0YzI
z>b)kApj5~m#t>~-upW=kCZ<3+l~z<d65{~58y!^p+oAVsHGgO!Dfso01JA{>5}Z(8
z<#xcGpP!#=Gb3GjyxHn>v{Ewp`?n8l8JN#v^8j{@^4`=O;JhveeH$L8)N<Q62Zn{f
zo*wzOSdogmtwfM8x=)r~R+<;_MarPIhZi7O*^iNmM<}9|nYe_6^+L~e^)j1taI~9(
z#ZGZxU?EE`phP72)1vX7fKF81P~PGOmc)2bW;vU}_-0>g`iZMOWsoHE9IE7l2<Thw
zek2YuIp8u$T@rEhIYDR|tnn0c*`CJ$Obmgs>9^<)J?^Rve!Vy!qW#0A9F%aZTEa}-
z$h~SiQhr#RKE->fK!)+wzFhL5S%J$aj6nw=n0?sO8)OFI%4$#)0^SEn0W(zkoT=#&
z)_;L01$(ze*M7P=xEa9BhxhLh1PH{i>Wba}ByjX^W34SM>CYr}bQmDvasooF-0pc~
z^z$n|*dh>=b7W-N`I#cyyf^L{4B!)WB_KppRG>Y2!_fh~jpo6lM`sW?9Q0tN@$m3K
z?Jh9+XAxAXHH>rjGmLfqI%Y4YqVgIDHRR6Ir^I}gV}aJwO&DG7ah*Unda)0sr>1gd
zv>E^WN`LLzS=Zg=4<u9YVi4H=V}1-fqA}uKBU%@JrT}buiE#$&1;k;*?%^_k>}0{T
zV0g%H0|UzCA5~^xpY>Fulr?-0`$c&c?EK`6&k*m>8mlRY%8=WDgM$OY`@`|RN}z8P
zW>I(y`{+}6_?fOE=RQRZiR0sAtGNyu6s>!$KFo!^f)$>VzBLTa8690+jQPV3IQ+Q)
zsqtt8$)K>z9{RVTyk9EQVxUYRVEpEK-wX6UUV!w&*frh)#|qjjHpH!3aM}Qwj}6%W
zwxD4DO^F0Kw0Q3_DT0EsfmBwQepC>s&%ZthH1&mRd8G0C!DORVVI7p&$!e@~?NR>V
z<3QgrLn*7i(s>K&;z@8?3}|`MfPrYR*qkbiL+jn~u^XUK^nlER{iJHC7NQd1eE<QN
z(vKd2W$O6M87w>m$y6^R$*J0<1aYUk+}>10_49x^$g|z~`j6Br9PmNDI*UMVRdR7^
zMYVMljX*s0hpN_2Z3!~u24ExYhS$W1*V81)hb2D!&2w>{>>^*jmP4JV3vLSt-;#Ik
zAezoI7ZJ{(epK`W+++oZU(jBU)c~jml-eg{l<^7<4&J`PcxQkg-H(u3AYdf{tZ)MF
zP~d7fuuCWxQ+Y5OrBdS|;zRV8Bf-SnX4k6f$f$5X;+yS=2>^a{5`>R>6nz1W3EDJj
z#M)o;{1f0$=P~%3oAB_N8CuNJl5s!nbluUr!2VDyAS<}vwaPE^+4v6Gd0)Ha%$umX
z3)2=}9o4Ub)+0rx1E5cqJZ<GoUc`-oz!s#rTd`Js0oYxLpt;?xe2j1gKr=%P2x`-)
zHwx?-t-l@RGk6r$NYNUV*Y9hGd-}9_hCwL=FbJl|yah&EM~5WDH7a*1WYu|U@DuRi
zkU5m5?+Wa-z%1p0QsR>1$T9pGEmY@oUYBHjo`mXErP%B;0GfEHiy_AW1(Mj^@&|BK
zp8Ju5*;r*+cZ-<?S~x-#ng=RQp~dK7tc4I47xB>0kkj!-^HP<?vl3o(RNYz^E!F-r
zl?6<hXZ(W#+bQ+`-@E=k0<`QRW52J}l$_eyPJ@Mh4Dr(tm%<!6KYSV+*<#cP@Xe2)
z%<$qr!`k+hiU0ZF|HXlr6gf3D1<|_um$uxk?`>@j=!^gicgZ=bS!x_SeWXcx&wj67
zhis56)_ix9Y3l8IUuW54if*mu0<G(OfNLHne))11vT6B}&Huq8lLboE<u55IOYUoc
zjlZ{7i3N)VDb9TbK>-_q&H2|q)7?@vvQH%x+r*xe){>b;uj{v31xLQ)H@D+R*j{4I
zD9RTIyC3qLLbB2YacCc^uUv3&H8eJkDn?$vejR)WmY?<=R)4*Lu)r_<d=EW9S6Nvz
zJC=Y}tA~07=vFHCDDZ#OLBuq$DFb7M4)Bo?0=5QKB_BTKh^r<@uepkyD!o3_?aQlq
z<Y<KTadVqvT&|*HZu%q_5Ah<ZozBQkx|eqUNgk!|3}r!U*)zE}ZHX<CLG9{?i|O=V
zJwA9PDF?J^dYpFXMOQtSpWB)Llwa|#@%`e;j-kSMvC-QTE`Gnm;=R#S(PBPdL*0Wq
zp*_6{{5<C^gN5V$CMwGp@N6n27Buf@Mb3vx>vO)$=qy7IKe!eDigmzB7WB76y)U2E
zd!z}ZTd#?I&;a07E0A*wri@b|nmrVYa_vavkg$&h*8|AzJi`tk)glN~Z&1z$DXos~
zMmD`m$!j%D=Qhm{H83+XgB0H)8RaN?BU`iTE$AaIHOh33s}Z8b1EQxu@trE2+}<{{
z(h}vwM*Q%p{O)>VVRX@W?X8UXqovo1rKjoacdwLKm-E1%w$n7ly#<m0wiGJS3=R!p
zAgJa+LlXq00`Ct#IPSrah9cFUq$%({#M^i-U6`8%2-EkAyv))->B!;coceOq+BxL5
zM;6YR^4syg?OIE=SKaOVh)kKv>WY$`{i|Ma<7a;j*M098P%&oVu3(uXmULKr|JibI
z8CP#g)tb^y9&c+6z5=DSZ1D&YN7Xh75?@+MflA0>tj`&$!sFsBt*Q>AE0~#?O{n>!
zrYZ+YEVYbyW<8O9B3xYDp3d3WTa=H00)hHxb!hi9=A6(hOcfxU+0HnQcK`3fKqvq!
zoVMp0l(oCDW}zrXaB}%q$q!w70J2RWz2|Cw!-C9O2if4qj~_Vr_`Z@!cfkRKx>tY=
zI)eboZVg8R@dC{Q%zj!)m0&={uQ}PJ0ww1S6o3Dp{Us%Zryxg7tgR73nd!DS>Nww%
zd;vz>1vv#}L_p8GZ(+fXE*Yvn;=BYQiR{uPD3<B~{(}FA3_*>kaBg3zvrEBmMC9cD
z{Nrw<UaQX}-SZSt3mL%ouH;ALP@*RRWm{m-{wgbr4JvnEs8}SDx>1i1AYP;KY7x|y
z1bFZE?b}z_*zi%$7v#SW;1Ga4f->-gBHKie+`%O51BeT}FK8KCU0sbe@*QX_FazIq
z-DQOwa1KGeL4e5oK^%D43bY@psor2_hCwz%44Isn@r9(jJX%4Xot;f2{sO8!^e144
zfh)!vtOvSaC<IkO{<*KOFW8ZrUY)y;i+Xc}gdQDn1CRsz5%&Lyk!5@c$U6XVz)}rR
z9)&5%y-Cx$HepaqB2iIPdziMW;wpSWE4KZmue#sFqjNYKy%)C}7^mHIZl2~{#dQ~6
z&NEXGk{NQLs<znu&YJE+R6Bc_cD}cX(mC0r?SK*YVrV%_{vZCHi&yE4apOvIrb--X
zKYaWa@I&9qQvcjQm=faEo>H)}LAEEj^XFSK=5mFK*QjmP`u7TD>m~14#Otjz+hJDa
zyFpJ8OyqUdvv(U&mh>49f;4GXayOnk4nF^pAb)}N!ozQ&g*FN%XD<=j*7bU1z5kR_
zA8kppVdW}>L!WCO##CN?F+kbB;tF#zdi2a<Co#16g}n9WGcu0l@ioVyURBEDXR_+4
z@DJfvTR6OyVQ%c1;DI;SHoe|l{=;J3;b2;CBS&H(f`6SJZ+RGVjzoIn@RTRD7nA*6
z*r4#YGpkvd$@(>?0_3*XqF<H*aFh3ICU{g@UXEGp%9;LofLHzQdt-l`4gHyQ6(-lr
zsAViQ7LAj&viHHkvh$3dge3)yFxL;hD^dpLxwy`dW#k!Ip106v(Y_h3y>LTW#<?)G
zuC(OONB^H2jaK;uwL5L+g?lthL=ddj!x;zMu>&p|6Sl7G<m;kQlP~)T!uF4LuiYMc
zKJi5RdVT=QMqu2nut2N6kxLa<xANE+2zUE!N{jOAzZ#0Xu+%8|!`pv4A26vdezTvt
z)kpP0YOktU^ePP9fp@r~`h);MXOG;!@P5MziCN_2n>|9qE3;1oesfR!pk>?WWEy^W
z5`Q=-=u}2z?8{uq`&Hz$S_F3`CiA^oVw0uu%)XJ1)LE&ESDrn6BOO$`*Xih&6-rI@
zt$^6&K1PsI?U?GjwON;h<g9bdyqJ%?e_F98kaaj*a!U2Rj%8<En|O!(3%L@X5p_hO
zQU*#mgH5FlxG`Xsa*K*WJ2c=p3>Fv$+g-Q%{+=Gy{|irnLL-860h}kmwig}I0zKt`
zRT(=Ud#$R_0TKqV1{HE5VB{y!|M(tMtRbKkehq3UnA7+7_pfkr=00)u>!1PC`8}wi
zlFem+(FI8a^|=F;o@>9Pw10S*2poQo0E7h89|R$fNPHr%nf99(#u)@b3upkbK=S%U
zM^np0-zEmJ_Wf?!|K4a9H^v7ZsAiBmpUTO3K@`=2Q#?PImsDr2#Kou8)!gOb<L8Ic
zk>I1-KbVU{Lkn=&Fm?(s4LGfq%`NsBf|MKBp$z03S_;5tp+EsBkiuRIaB|#v{`@jX
zg#b_>)(K7kcz7Tq^JzD4QRlAtVSfpTd|+4E06OLjYO@4Gk@xjSVevqntnK1~-HZS=
z3IR<6DeYmal%(Vo6o?RJtQ;MiK^%NxZ2SiJ!3n^Dup0Lr9QdHp-+)?iiRKm<!$TFs
z<~rk=;cZ@+ng)QkJs~v}2WpUP;#TlEp(wzZ78L|hGz=yWu;E6CxblH;z5#^IG|(4B
z;<eyp1M96<R#sM>^ZPsx)6B>C?RAh;eP5ozW`LLrB%-YF#@UWIF+yK)3?K@G4}OO*
zj%aGp#EQC8)|?))z|*6qJ{U!Pk9_#-ysIo@NF=pv(H<1EyS%GDKTCqanUwi6jGRNW
zS8Wc~?c?GjpyGj>R4KPhQ}D31wvL&WgLsU;+w3aYOB!2q<HYp4%bt$f<m4pkF-_k(
zgvy)+(gq`x-VL95P49t912h&ejc-8~mH9_n0Z>eWnvGl>2h0#0kcRK+>3z9vJ>>&6
zdp>IN_64aKOhr>*Gbe%+0CXA3!vT+b)rUx@GggEFcq&Ubz_G-TuNgQvWYI1WP+x(j
zf&zmaKr{5`fMbXm?Coq>N%Co5;%W|NsjLBVKGoD@@6Xm?0TUzeZhHFqZvc5~;m`**
zDP2e3NV7_n`RMnLkSX{NJ{O7?U!cRpabUx-gTsl@hlqijTYh<@L{@dSYHy5`-*Su$
zo`am6$zg4b&4&mTh#3S0RaGqjKr;YOXXy^S8!Vx(d>R={DGB;Ka3X<)dhjVU^bIhz
zfc4Sm0<6Zs&i(|Z2#83P3WqEpPKm*$GlhN(aI-KP5>nFp4<5WOBm|HS!^rPAwH(U7
zZxR9^5TG#V(nLVyR2Q~`+vM$E){b-75q#{Xg(1Lcl73)eG%sT-RHg5w%%UirEq`6A
zm^m`18#%Rgi+4$HxhaZ)U1DI5#5OeXNGLC{RGhpSsxmI46?@}RjkztLML%WmFz{-n
znZ`AIq?~CV3%lX*xU0%RC`CMQ)TuzyY|TG8z@2=v@l#fbuXI*M20M$+7yTAR%I@jW
zjGoPBHKlAk<&6z3-!4z>yyt<XqVq`(5cyE<#LQfz({SiyeYHUS+AOp0$ddBCyJ@P-
zKTVwjOCyt)!ih`XHh$mPkZkQzRwfmzxn33iIfpDbE09z*EBkbnY<~EPL;}hE8Ba5i
zmuB5UZgh;XUOJa-vhlq}=e|vB_Slogi*M+cEFQEP7m5oXPVzqe+JkeyOm*9BFa1GF
z9~)KpQ}$n4H4LzJ%k4VE`y2T1f}-vU|DHxQ>@}c6_jwcUoprO*xZx2zsi*$o2D36%
z5M-yIgYB>TlOHY2$ivba(@GhVtUY0hUlm`M)(;vc;@IJJ*S`q=LK@fb=w!(#Q@rie
z{X}5=+S?qD4r1~7!xfmO#t$mKW5x4Zr@RYu`{N@;X?rOSco#!eH;&}UYm&p>r0|b_
z+?`&2JSvF4;HcTE`-RJ%K24!*Jo1|PmO+s_FHdp0&fq~t_A!gGe&UX4_<hZX$#B{{
z{k}ZhQSbAICklD?T<7EmE6jGryJM~nSp3=52P9N~Qe1NqrsJi-KDrNn0Mp8_@Ng!j
zZ1tNlXTH_ff7uf6D`SB(1|$wHy<PJjU|&J~KM)&vJ6<X-eHOH2ymk$p82C<Ok!g9g
zA{;8TH4Gs8Q(Y>>xf$4eC?WhPXYTj!-Z#yIWz*2%@No+IZHR#$`Pi>kW}_ceo+fA*
zecM_bBD=KxI<%F%-gnZ7I|T1SG6n4PM$mfTh=SDr^!f9fSx|j`7MxKE|M-ys!u!n=
z3$v)cg(wb%@$ht)TS^A%>d`nCE|7}P&oU}*+?SFXh}4SwX&Bh9%y9K;Be2LQsSU&-
z7%(1!8(n%N`?C;K!*B7a_;9k6SkM;%wZj%Oosm)P>DT|~c&qcifx%apOkgM9Lg^eb
zlEGXc?d)6z@=Z{on}b6!U}Z80KT{B*!-prKHk|@xL*7hr>l(e?Nxq4eX>ervE>I2W
zPse;OkfTiY;__ash-*V*K>2}<i%U7msopm>PJ<5tvDf(Bvno$$Pf;?FmDsu>ani36
zMH%JozCY>TL%j%qd8(jO6n4B4%*O`M5pTf|8e*=UO7QL5w?>YdWBC+|?JC0#CzE;6
zev3yE_L?XA@-S^^sPiGRKUCY9ImM%W%@SM$csap!Z?z}13Bok0Dx*RgIG#Dd8?rz<
zv#5+WJvD`rbHIJyWe>k9DoP7Ka@%Uct5608yIqiylJY}Ewb%?7h(E+DDk{p()gLTu
zkX;~e!v8yBMFOD4M|maCAt5cnFUZ<G$=1N*s61cD=Dg0xNEwv%wxFP(@E!DH02snR
z{ue)DaAKlZHGeNKWeCdeK`u>RsVFN$4b_Mja1(W42|CR7hJS*_lkQ@3HE(-ubMqik
z_rnKq+4f*5ZDOMW9UW3g57RG@+voc-$SuaJ@%j1rq1buQih2=CSk9EIy_m6?E-6!N
zGypywa%lpT6Yz50Fs^<__|ToOr8x`iNW9$lKR64cu9Da)Qgk&M-T3&fL#aox!6SAz
zw<PSU#8X^P4(!TmG5nhc%=@kaFO2v#YMe7eybCRWDtO~8z3;l9IYJ%l?JHs0@2L`q
z+5JR+aL>(9rA41JSy@U*fo->wNquA9-&#c^?<#@D(|A`QwS^=7{!82q`bxC}?X;rV
zd{)IJ?_1utdS%yWom&_$J4do*H*U?XAjv=Qd7S))qRED-&P^rSAD=V}3O>?nJbjZe
zO1)8^trzI><+|VD?L-ailak}(k8-cNMPeqpRUMP9RUD;`g?MNL8choA3-7_GzPV9r
z8(x>%$3G`2(nAt!ZrAEyX~?4S{Ai;@ob~eL`HJxzp6UZVA>nFff;F*G4Em?%R0LZt
zvYFc-iB?u*2jMlUR8>ibs_NZf<|@mvFcTPh{sKOP`kf+0AQe(xc4}?^W4smPO&Rlk
z`DJ#NiU&dWUFE;nZ%Y5!e-hcbwqrpbuKfc?*=_3)d+c&|{u2$C;=HE%(VOdgHnpiz
zr%p9#yHewWWid$&Emtq+7Qas@^1i-0e-LXeaTue%+Z?fY{GK=QSxfHJ1kLtVW?9Z*
zlahUm$C^-;;Behg2WA$HUCNl0$TG35)LzV2(t)?REZlVO_%7YZ=}q)5SS@wCQclFA
z^)tp_k9&0EtWmV}iwBU8O{3311FZVAJCsupr4r-g5n5W>`JTqMGn8#Y{Amiz&=)cV
zUK1<?dNfeof?LG^0vu|Mzbf^vc65{mH8XEir`h_4goM}$MM1x7W>yy3j1k7Rw7bU)
zD82ClM<sH{(c=Oh9tf0p&~A$Q>YPMGM3U8BhDu)t83Ye>2k-zxqeiO2tY`D+AYaB$
zel1SBoi@2hkO=OBE0USTe%#j4)>gvBMG&@n*4|=ZnrKKwgppM>CW5*nWf(y=4q5eE
z>`FKT4Hn7H=Mc1!W{a4RFqqPjwC}5Y8eaAvNCwluXQHh$D5QsuI4TXzxQ2#%Kq)-_
zETnKkM@jh>JSC5g_}%uc+%|tO^;|4k+=@>>MOAz6BVtn0XGy|v&Vbf_yq2%HRRAUN
zw~me{<%w&vvwneiqmG@^)6>KkFQN|w=7Ii*x%nvUp~1oVm6E36-a%>@<U`vV@D8ZA
zas|Sw6wnXfy1ToL)Ot$@cDM|MdF|*-Zz;`r-Y1mVQ~`4qBpXyV0odUZo+fB@S&%~D
z_HD58-zg8m>Y}M+eEhlh23Lz7Hx9kYF~R)De&~Hd9kt>(P{k37<0N6X`!y)J9|4X4
zK9DgwCI&UCLme5Vo^seJjuS{DR6I6r4_>k>&`SFZ_<mNE-1v^-#U!m74=hVu?nZ^g
z=TT*O&%eK{IAHuVyH{}?%eka>GQ5h|y5j6n(uIxD12;F3idp}QTBp$g2Q}jk&%gFe
zr9?FX%+6}!Hdj+&5YY0iBq_2p&EULMyQq7g#VeT6;ZsYh&f=t)%@EzlEd@VOz=DIP
zdr#~&wcyx2J6f>tRi}*hyBu87w0vsbHbOtoIESncEtt89K2wepKi()8_+7)n8uBBa
zgN~m}cV`#V>(K75`^FD_&uv}_{R3BliLFRl#?}Ff1+pWp`ByBCEyR&3Z@c5h8mi}n
zzBTt1Kio?xJ~w_{cR-!Psjyg5JewqCdTDG*B_-2kw*s*B>wQDVXj#_AG9Qvk^01cy
ztrZe!mt2~|===5_pB`<*=gN2!5*kjW=!@p&ebQFD$DXZ!yx}7%aWtwh9WPj>t~p(K
z7S&Es!vt`YL|~T(gSJeJVBa$L<CrKD%T6*-pZ{yh1%GipNHiPZu<nn@?DrQSG`dyN
zwm8=q!X%pras;>?CG_>LLl5RsQO>N{&n~xwYD{C6!vFCC=&P!!fj5#KjKEMFquQ_4
z$)P=z{|VrJbQwrX%<1fv+Svh5G$*w3VTJ1(od7aJEzGD710dzEU%x;ISS%9J-Ma7I
zO6hW9vDl)nI08ynGvLr%t4VPcRaL0TdnWcwGMZ#1j<N)7IVH9<YmbX9jcEG!O5=kC
zj#T0V|77f&itr}A1ob5s8ZJ<M3k;#_o167PRQz&satMM7e2_*_hjE3YWwfZfs!O2-
z7~r>m#QXbWqxcon;soe+g1H0GEM@R@HDnyBfwZ<J1^YW0@;eXX!^6o@z+`@lpTDHZ
z)sa-Kk4dJlM47J2b*~9@_$xkMM3~?)z>Ie_$x4vjKs3-!FGq0AOUKD5<`ozFK|B8T
zZ*}nW03R$k&UMyHv&w}Y3PKn8=Q=t%Nx~|1D&uh8(zbZ+=(4iu$@RJnrzKa;n*KOo
zCi}GD@dvmV=}^i-$NYL=Xi|$XbzKD}N3B<^uRen+>(S4Z97&d3v2p~qv8eB_15;Xq
z!;-XHH$8u~Vk|LMX#biW=}}B^c%oGLIh$op=}9{iUDMdjaK=%(xbOAf{q5-pWEPhK
zXRv=JTr7X+ypKN};^-b2`m`#W+U)nbk$Di!oSi3Ta;doY_iLk}0e>vlI=&^AZ&tqa
z%y`Ru{(bwobNobB_Zw2J171@m`MpTwk|yDe`C;%e(k^8@*6?Fn<<^s)kO;nora-&i
zLP>Mp#8+Rvsm^2E6M8Ed_=<s@tTgw#YCPGwM&~~-79B7Y?E~&}%^o?&3KOS-;b87`
zHEk=ybu}yGz;R+Jt?A>&n3JswojNOb?cfcoywsVb{1mL+JM!;n&;5z|_4RlEon(c0
zM?$9Gm#E?uS&}pE2cO%ieYtG1P^2uqWIZq_T;|5ucEMAc{qE?WG1tQ%bqsBEKabx`
zB}!GU4^5KH<G1gKdK6u9T#U->&)eCsu~n+?d=|8StKHgRV9;k;*>t6U<dT}c$fe#h
zQtXQ#%tiZ?cjU{E_x4o>Z}RaOUv_?!Ubl--j?&e(7>K}NcQRMCY@?VZ(1_fKEpAq&
zS*48n!cuA9v?~%h)IFG$eQQ$w4aUz`t`k~u^Vmhw7!uyO&K5;d?z*H3(zQbio=i^o
ze<E;1Xl8w7367^16A!2@*POdTfeh~M?e#%j06;_CV6#7F@uYUPv~h6oQ_2W!a!Klb
zy=gO|<*dg^AqVZY;CTXx>`t<L5k<hvm=J*Q<h}D-uGI(Wy1KeaeR|xWV#D_9F$HTm
zr^~icg?Wh^hoy<hM|WBIGzB)=t+nr>=I!KWdCIfULWjyDcyyxFz%qaT@dIs>@n;;}
zon<Ko8rsR#bs899<a5q1Fpdn5Hg&JWL`M^mk@=LC-Uf?twZze_=1s6pVep7aO+hXL
z{||bDK=N)f_^-eZLoiTL)ITGzStzSUNks+CF<)FUXd=gl-m1Aa7Z%v&zN0<rp9`$2
z5wH=pzfZNYQwAR&kk@rdZCcLJ*(gWY0}OAsoj0$+52H=r&`k2;_xD+U4=D3lH7h9~
z4N2+hUIjPXIzW;$Mw<EDU>ZYhSj?f)<-`N5oSZ};veiLY*cdj=K}{YH9z1xzOM3BQ
z-;C@m9xm=(Afv#(d{$Xm`DSFFNfFAG<(iN1L9?oMtrv#8l}XX?lRh@^ziWA(@B)Rl
z%ub$vU09eJ>|G6@J|!qHa{)9!EvR4~<)pytk+9ALZ8!IzbQhYIu3fu!1<d0x8ka8d
zr8-nqgO<W(Fh|8JFn4Dta{!50+uq)8QuZ#NT<B<Ttywo%#DF)l$Y2-8QMh22dDlRZ
ze&-LKZ-DBX`_q-gC*h_M0>91xRZcDvt*DY$g*5izTiGgUAF;H{W@VQCeC_$Bf*_Q{
zhzIxBcmv_#!xi3|xfuP&Gs)^k3Z<=-vvf#zyV$4cE}=T5C1S2#8al}X2Ik%K1l6R0
z5shco4~xa|)>1;lzDM%nUg6$7zirPLxZXDvaJ`)n=U`>peWR{~pX+owK<?&CCP|kU
zhh4iG_Qi^R^4-Nbe1BT#EZv{I9_*C|=frW`ko!hz4OPBn-{ko2FP{Ka3`3^te5`bV
zaTdQCvB$^iKa3wIoy4*;o2iIWa9FhYC*<K)$C@1P=zAh}%uH^M6|20OUr4M!B*(t$
z@{RYl(9MnSSCnsOL><{nzaV6d>b(%01vZZe;fBX9MlEMO`7?3WykB>2#Vg(9Y>^G<
zdxWK$H9c0K$o7sLF;ia+zBqCrck=~Tp~>~JxRFkas+ByYFn=ZA(gDAT_7&e$OS1XN
z%m%tRsw-@rBAx{V!Og!Dn!0@EamSpvzX;qc7QXbb23N8^Qu?^2K~3%^8O4}vz|d8Z
zT&9f8*y0p>;Y{@|x~-bZR~VX<#>VMM%Z)L~!-tG+g*iAb-ndPYFE373P0nT(x>^XN
z=lD~0`Z#OP#%*?uKf)&ul9%@L<geiHs5la2bh9CL|J66I`$45-PIz7#e9?`Ndy>^y
zRK*lJXr;!Z01W~w7z{-n^xxb~>K?q2=d9xlwowW^tOyxKnONbn_NA37M>xC<&CN+)
zzhY4aeQg}z_Vw|Z04UxJDLYxe@XnURtKGHn;D`tcr1s0h5WVKp%eM^ByJY~j`&3j^
z*tNc815}!tks$#^_a#=9iLU=bh5=k)gPNS#h?l#Q{J*VPW(`H<3>N79AVE7n4`Wxr
zB%|AP<)Dw`otc<%&$Z*uKgWb%K^aas5fBo(3VqHM4lCktXrW|S2MYMx_&6Q7i6qR-
zSdm)zGkCTM2FiG$M;Nta0Pk*PZ(nqT&<TLE7L6`&bS4%Sa6#1@%K4akv1Iq1v2t6T
zpv|(kw>K&lN5gFbmemIa0m<E2e`dcQeCadEGwNnY3xd9GOGgMX2ge6nFolF*H?L^!
zv!VVhXrJya;<R?-o>0yX^VoiK2uI_g^~zZG)saHS3axyx<4MB(63?TO)od(#42?44
zoKr>r-;Vw*HKn1=x|_KN%BK_)S$9=6@f~8*?TnnKI5dLle42IHr+*)Po6-8^%Nji3
zJ)s<B-}6jbXzH$MXH^f)oRW+Ut~!r&CQgZa@O6P~kPj;y*DP$K&W^f9=h(Hu6$Wti
z!Z5>vyWD!jDfcl$Se9rTkR@L-EI_vtJBqSO+v*t4l#u0TGM=K1a-sSo>`nSu%Iq|O
zn&a{6V3jsa-=WjVFA=kqyg82;H8FKl&3D7synYApQY^Htc_hWrbtnsF=jO_(7Dt4K
z8*X8^?@<LWaQu|0Fxv^A0%i#sw!J~9_94>PU8g-fPz_Oi>lr(F1}W7v_NnghdAi~@
zJjL;WsJ5T<;{IvLN=?tm<*?=@?e*NE=CC7siv@hf<4HL#X%ot>-m~}cY^9v6nzM08
z?U~?XS7H7^iXjA(FUnku=$E4(O&Xr{-z840?EiT|7@q%+vHZcM|GA3iW8?pLLiD(t
z-D(vS6(?(7o*C7^cR|bta}(OvOiWEbL_`egA343B?#$1EX3tX4V8X*Z;W7odLm|C!
z&BVk6%*`F_qq2sh0mXmRQN|}TGqWP&CETz9?W{VW<2Yy;vVnd3wa1fvMVe7ihk*f_
z0_U)Az@ygYN-8`*ix@l_Xhj8&mlP20=G9G_CqkwGiBUh0A7M?6R?lkcYUVg(#*yO=
zBOV8125Ye?4kjjSaU5`17n%yS7GDDKwktmSL}$09MOr~wx#ablpC1-Hk$q|<I6=V|
z@~yocpD_fNG6)OC+xVLJs-R-0Yxiz;SNHVrWf-;**b_E{LVoxF0G+oJgs2M&3;^*d
z5SP5AlWmLw&wQ>CK5eG+Y=E<=zXbdv>OzNC47<k&G$9kfyWe(Nzaqm(3cp<TR)fHy
znh2Ipht~Ob9*hhO+`5~C_)y(zx~>$l%T|`xLnkn_gBa}b?&Y7N8adpiR8jdWdozAu
zZ4Om;tQ;IxS4{@>E|1&W+s81Qf}t8Uc6-h0>47mjH9fr^bc2e-biz;AGo@d@eg#|m
z#6Zm{FMP)0;-VFFV)XX**0w?$Ef)a-*Q0oY!PkHHxt10o*wy@(2D`ev0FY>dPZ%Hp
zCZb;Da#1km37@l@++ifFRwQl9?`}PA^j09S|3MWGjxN;Ljvy?`*$waq^s<Zl0hbb_
zf<4`a@-=gsfpCl;Sb`)DJ(#!<b5P^nTIJTePpsz9G6lK~1&<LCu&qEzoP~)7Z-zFw
z%t1=HqpnVkUV=h@7Ay%vQ*-dH&}D;<8uT#`w1XX7rU(cbV8ARk@-Ny{1EZrjkPirY
zX9D=fMGIB4Mn%zD0Duj8!3S!B1^?ncw7sBaMSx-GN`QA215n#jMa6Sa1fq8;z&#Y0
zNZM%%ICnrC0p|_~Id9=pP@{3!p)Ig`rLKGIpQNvYuXzHD0?^q_4+d-IpTcEWpTiR#
zgTM$)Tq<QY*J)jsxqiU~A$@&)5w{Epp2P~jSzI)MJEbUKyZI8;8_?{yh@h5xU^~Hl
zdnac=w>$AZdjFH1APqp$uHN3WaODI#a8OqvaomGeIB+q5b1x479|%rSI|cp023X!0
zAh0$-^8`NqS#V%WR35EXpuH_%0|fTL2X34Ypw2MZ+1VM)*S~;H=j`G`cq_E`9`-ca
z=mbdtwfVp)giFF0HD=IhfkxJqrnuzcVO7-b016PagM$@Vuqp7eH*gpzdjW?B+Hz_^
z%mibE{w;Q>hpna>aN(3h3po<xRBoP!xkcN{^Ygh;js%20b6Z-hvu9PZlwGIHpjZPD
z)JHYTPc=&t?kIp0VqPTEy7e;?99`h;2HEc>c=h_+hkrtk9qL?FsdC{(?<avsa*F_n
zVz5Of3@kl;_RJfu!2+X4)#J$i!*L@XP_hVMn-O@;-qS}fya0D$uIru!%<=?yG$3MK
z0?Hk|+XOuhu%Qn&XW;qsM^fI=4uF<Cv|_n+Fa(F;@X$pjiVq+3u6*6M2hk3Wj#7^w
zKaLVj11l%c?NDzc2=oZ{^nL5s{RPv2_ByG<l_cUgusW6N^%riyy-ske3Uqe7fwQd(
zO-IlyQq#BL1oB+hf*sn+nUlkTTE)SmDgQREsYwzvK+2k<(X}svP??ZJgQolx4)XHl
zOSr$~lZUAF)LC%Zyx@-H)ca0^Hk?2NHa|o!Rd8r#h5o?oZ8^qZuz#b=DYRDU4R45c
zeFCd+7YYj>BH$BV_q|bp(^dcN8yAph5E-XAJP$6QeNn(QT|zB|5Jar^Ry9B%M6W*q
zr~`N9HQ(wK{`+pfN{Qhd!Dc}3-+{&e^nyO<y)4`xl807s7~Fq7R4A}1wVHg@OJF*)
zxA0SHxH>nNs5zLf8Jay{-K-Bb^#KI@*sTM*650|65f<H3aFLIorqkp(Gx!|Xme7!o
zfe3H4-Rilgw>8_2CYz{-`9zp-DGVMmk&#pV>Pd=sO^p~_loNoO&d~?8x90^9GV5a_
zXun1!^+%+_rtst<E<9i^^aI8cz35FPPv;zRg^%wN#IQTi|7X^34dq#cpgl9(<b&Z|
z=LM<;$sJpHN2vXd7nN&X!8JKxeD(ovAOX;U=*0$O?t2;t2>X$v4<oWXcz&7`A)mw5
zE|HUeYi+$yR#p}Pck_Tr0gV!HnTtbXx`1^wujwV|&4CA_KVgH;9B@9PKJs%#szK0d
zcNH8_Xl#JzL9MiKIMI7tV6aXHGvVlAgs6qy6@yy3>R!~Ml#Q~oKSb=wq5(~Bly(7u
z9gM>h&|6n{8SdmFMi4{8xl799(4w3RjgSjP{T&i&)IkOCqdNavd0!rm^}6o=MoTlb
zDouu@T9qX!l(`5|8aIjzB_dO%WK1iiG8G|7D%28^;eBOpSf*rU2<0^<#A~R8%;$4!
z@4c>l&OX<<&hNi-{nph#yDeVd@AKTxeSfCseX1Gd6KHGClUg27w%I^z{rVj$D!-+V
z!~BxiTV<rcP5Lk%UV)iWdwnqzN7~P1;LV?fi5{iN2WPJ+0G<K|OZRcR%@O<IT1T~C
zg)<n~vyWCBSNYhqDu@&I18s(?iFo7-_<qzDBQvGBLPMB2wcqg7?|SU0(81IL`U9sf
zIc1#G%4=>O=iFvVAq)m%UNe?B)kYp9!NIMwUea2zkcusdy%@~^Y9Xp#g!jvX<%qN0
z6r(7^#4+bwXIwbVo1_AR&e>`8ZFIL+KzMoJkrHeNYar(B)oW_yqIdyHy`a^(e;pZp
zfqm7TQqDN}8XCv0MBmM>uS-g<2hT-kJY|G>6RmOj^b;qw2TW9nx7F2}AzOgcBS~aA
zq3R$Uuab}i0x|OCLuJRuz;593@bI`687bD2ke<E>0yHdd%j@e{6Ysmxwc)f1Z~Tm?
zyOr9FHlcPA3U^RN@e&W-|5-qwd%y6_U)ICKWP9B^Jq(=&LMt$Y;0NE!%F5FIYH>u^
z(G{-;2lI9<t*hU*GWF->8u2l3z+UU#X>f1<uISf%$SJH%HV$WX!m$S718hwa3C<|*
zThR-MHW)vsJ{2d^0Y{8p<!k&6Hv@Tog?OoC8~{}KH<p*f_|p0F8Bu#@U`Z4g?*f0y
zMQ<Ct!lKz~*{060vf!)>tQNC}NKyQ_C4?;Bp`##k81(m|Yu5aPbP=3pmG)1ToHJLC
zS>Tpyloh=@p?Vc;br6310V`FUDT3L2upMGpEPn5Srzk!db>aBUc}yl11U8v$kL>YR
zk9ld&zjWzki2mlTkeQ3}$Sa}z7*!c6niP*=2UPlZ4WJ4is+w^Pw$A^qF^O;!A75XB
zRK<feqV}Fln<T0^MMO+&4%{D4)1!t@F;R-KQIH)o`|j|&C5soA493S4={(Noa5(l@
z5K9Bpq2qgLA@#ySs;=HQIy$<{vF;!`0{G?Zn(>ptWuD*r@FfcV6MP1kZ4=5k{a?S5
zOBDYw=H9*M?UGI>6l{Zzq?sSXIl4|vOx50AlC}hDJ%s>3yIr~Y<lW(}l!KPz!)JPy
zrJ+lf<J{XL)D|2(Xxj=OKh`&@$x3`~RH)6~?fZ&EMMc?ru6D06?Kze(Rx`lTb<r3_
zu-*2V#|G^1Om_mAHiA778a$W|Ba@lBcaYoRv^XwJzqYDAFYxUGi@h7}cn-do$*0{y
z`xQcFQ_|hAtRqxIR1L<LBB~25UUPd{BuRr1Fmw$h1xOD5p3^rXBUb?KwRKr`lH)dQ
zyN8DY{V+_=<O9W4u&MQ8AKGW|<x{bJXK^OS;<nn(on&psenWB>sGh`cJFY3B2}d^p
z$`mEZqE^Wu8%-8@fV<P)fcJW4F2HKv)f9ntfX=9M;~Zl$oPofRb5eVq+9zleo!h#h
zmOx<w%+Vs0<MhtSQAjY07^=9V1c2=;+K!bt%`mQO|2$91I9FR!bE@=WKc6r+ugiH;
zasA8FTr_srqGal(8u6_{<19#~X$%Y^E}t4-2L>JiGAQ_Ezn6~2u3a-hWKEN5vI~Z`
z44@plK|QA8S#|YdJoD)coU5YH-`x7BJn|`q+8kt(I7OeZuviC$+d6G)l<Laftia{c
zvvGo3SXeO1$5yLt(Rjr-Z=RaI{_?pz+}`a83)Ev$R6Q9|`^;aPEej~**V|p@?Bs(e
zJp>3*65HM34XTjqykyJ2(iN0mJ`bxmwiWHXgrb@hepj&CaAxq7=e$jT+-<w#B;2&e
zAQ7?&yLe_N{2GWNY{6oOU<<7|5nlGyjji8a%#mou(gpP|TsI~TtP>9E(2<qcyGTvo
zVsv%|nh8%EY<;r_zwOJH<OmI6ZI#H*aq0|y>k=+ueCc4k4|w?or33MQJLrFe9iH1?
zUdIs(NP`#`)-NdI=N@{nX9w8)2De){CMkHKkbEatbuQajuz;qRmGa{`@46C@v~9XK
z)LUE@c|)?&(mHZs=7S?mI9*Xi@YrbasP;&4EJpQ(^)e?|3NDeiZlO2o4(sdghS^%I
z;8KOfPCSLk+Jd4YQ8BUIS~Bx^xFJ%LFwA5LwElohn?JrClYP{dS&^mKv#hV7p}|0)
zwg&##DQSF3!uI}9ZA?cvjH$MxwW{QfgnTP*!qQN}%2e0JCdn!8=H<)3iz(jF6MDEW
zIuJmJ=-RbBj7>miB187=Mz;V^l%ne>_~rBLyRN~xkOV70<x$CjeuCtb)bv3z04I#i
zmuK7>)2B~2!69=wAmCy`Lc+KC3*Flcj6{e7T)Xd%KTcEVs5SY*KUoN4*gOsc4os#m
zpwRF`ZVa`1RAGZRYly@43Ypq-P*>BWgu@?CTs@CIInvobFt8Bi3bBe@V2~^=kqA=&
zn*uy!-sl%mszf(z(9(kAEI3w-E6R|k{o}{!C_C}DLCB)msJd;^b`J_cni(88pCNxH
z$2?@8l}!lWleDehhACf58A%({7-+M<;0w?YB@`S~cK>qH5;i<~8d_Sj0Z>qI5QaE}
zx0wPJz{!sit>M@IG7ORzcwCl2wwU225tGzkuKS|X;&wzh4@{`wp@B^wW<53s8~(jI
z+3TWqq)ZD`nJ#Ceo6b!tV$fP&@E$sN${}O0TFb}Y{)xjf(KufSGZ17tR{e{G9ma*>
z-o#+<@%i}--i)e5(GFV<l@JOTg*4?_M8qugB%OEmxc`6zC8DZodJWKkZ44BU{S6v<
zd<?7!j5V72U#(;d#Q~Qiv4tEI7|>u=Tph6RKOuZ)t!2(lcmOtpMYE{u!VQE!_>#*G
z?{Cxc02tCK^c21>-n*{xm{qm`C!$nFkYCT?1VeC^_{cCGW`>-(*@+X+Og1%N`Q^^F
zo<r#R2lrn-^Z2KOIbUMF*`;_L&CcKy%k(q^7T>~?5rJUPZ9h-Ng$<DRxjnMe=yZ~U
zFT52N+@2S=&|XwXyjRV%4xMS?Rr$cR<mPje?NC}~=lKPE>gYxf56DHuMehR6A)!@#
zZK*n|?hebh<c$x)0$l#?-DTJQ_Aioy-~7lDgTc?Y*Ac+RDu+e?4|vnx^Tz)tSnB`A
zm$4~@m?F9A#*~m=gpAnd*tfmA6?=y!@GR+ZW_?VFkDrC!1^YbIYl)ChAfTk9BeEzS
z7*cFp-czt4tjO%KJc23^$_;05Rf<-|S2#RrNnm{~-DJW53UtBW-`}03Je3}?N|w*?
zD^@2tw?Q#aW7yU|Jr9PKW^(u>8QzGKC2py7u(PKp;N0ZUIpm<bhleghW;Heh)eqF6
zg8OQIWW@UCcXh|-UBFno=jO^aL1bXYNydZt9<+Z921Hk4Yl3K)L9pNz;?LC8we<KQ
zv1-9d3LHfgL=kqlRZ0-0$0CusxU4MHC=zfHjm1z~e@~tqk)T!%v%!t9aGZZ*ocxJ|
zZ=>*1;n^+IWfL7u@@)v03nA^L4vY5g@A2`LDax5{KhRC*i|Er4uA)G{Gf)RgMSyUZ
znidFI{DB)Fqkw|5sr7=%7oEaq;Eu;W7GEc0G<xFLRC1WSe!T}GjYA`bXlIm$KQ8QU
z%w2(w)Gloj5RSsY+e6<+n<fK+CsGUv!y7X1MG$#EgPHRRgvN8BqUO!8ED2sy&KaO6
zw`B$cX$WB9r#k|YCK~h=e?)C$y;6-(2t>vJG-@;%qZmlK4_YgH`D5WWw{PnvCWi7!
z)Q%$<F}W6}PQ8G|(Vb2qN&)v*7p<(Sic6)zopN1J^BLYiqguA+56^>E_!1hJgwY{%
z@KD(i6^0YF8AKh!8!${uQbywo$d)&uT1V;$CLP!i$rn2RMOTwSZOGK(q~ok41|uc1
zdY`xroI*oQO&bpG^QilH{*)k(`D3OCrX_uAF`sKcOB<LW=nL^0#rLv)|Jx(}S;m}k
z*;8l_5dJ+w$o1oOUK_;S;lH=b_{_e}l#(zkD=B%74*{wU$-huOI3fMm1TTl-4YmXw
zY_sx2tMX~23s8^)uut`~XP=fifQX<og}iw0(k%~VcS#{Voj6H!1mxoZ3T2(gLi4FS
z@m&=E<1@Qyf*(ypAuaWnRaI$*qd!VW*K9uLuQMqoIm~Ma)?9{#QO#^A<r`~(9w9Vs
zA!r$I>>C*Up0n9(+xMuIhnc4qD}8U~_D$Z-^=z~+KM08K2UOC6KCdBp1ZBTz*ZC7?
z0|7H|5UIhs4Y~bA<di;d@x(vJf6i+zK5<?cl{61b2)Dr>e=#95jsU*A#4C6et7@!Y
zd2-9hP+t&A#u*pp)El|n?a<Xbdn~v<&vOMO|DZ4ssf`f77Uju)<?L+zsfW8W^`=6j
z2EiccV}I0bG$##0b?$$^3gUOprhnY*@V~CKHLAmkLBKN`41by`HTOqfR8{rob$4Ju
zIX_x^{>LY1X!A1K){2v2>c4-X6#j42?jO7JzhOoGm%qZ^2E+62Ek%iG-@m+m4~lDQ
z5mYEj_g>%h+W)4P@!$XeyDg#*nlgBQeCLrh&Hwh%c|6n6(Gd|9ZO!Z33d$REe7@ai
z0w8}lFnZY&y-dIxD{*vS<m%~t<P;z6H8KkkF^KH!JG~5NkyS0Hs;UYRvPrysLA}Yi
z)`8ci<I_^4hx#MZ4cT_Ns-u}mUPi!G^*tLK7}9*pQh}f$uAp&agRvfFE37%eb4uG!
zj(jx|m?7KV`c??-@KbaEioa_YITb9eUtA|2D1Tr6_-{f=fKhvTH#oUjhlbp^;R9IE
zT{rKxuZ(MAa&nPNlcz6+?xp9xzZ8b>s;YCxdca1QeN&U!NV~#VBF~gad+=Z_;4f#*
zBRx=HUnwjs<j-HI(u@OUhoPZic;6e7O}l;}RaUmtb+}<phKHK%c5v8?Oi*41$}SF=
z0wl>;K{;?Hs~cG^aQnwrwK@HP1LzAT4lQM21OX-IjclMB0^03*)>qxB=@H+sLB-S4
zGkeHUVw)U~lk;2`CIJ!P54YDw*9t~i7z9omL^Q@qC=_r*!*SoiL-=es6BtqQ8NU{}
zM(wSAV7&!Y0_qNLPpc8VAM}iJIl0V1u0VJbY~){5^p|<uPD~k4I&knH7Z~P>N6xaP
zl27G}mRWVUx_2lgy~%&<f8|dHC+nwrMa@QkX2@|6gFv}GBy#r{>3j(GP*q2#+B4}w
z?$8Hd|Mj(5hg*x^)kO?Nqi2_K{5INo&%<P|sw(%yScftlcZ7gLKn5=6OGf_qJZMoq
z!9?l%Di@Y|NDj@6hp44!Xuuk<&`ziZZ{(zTBr0zIy3dexK=0gkr?=y}hS2$v6J4oa
z(H_^BnaRE|*+fxBT4uE#GC(Z_flA;X^|Wy~e()~sQr;>pt(np=VrLj9&lW4Hki45<
z`ZU2X-%Aj1IwNZ$XYljqPr(k>@yW@^D|ZRMQ5|uZ^U8kWm}7pU*z2qh9@$NO3kA(&
zd6X?$_qe~gGQ%~|CEa$YYiWI-WAOpvXG%hTp^V^fJ#2V+(CM_`paJzW;hEqY(^tTk
zIzx7%P2om~DOLp{5$J}NP8W;}glc?q{C5P13Se<aP>7JJ&vKqa&|+brpdZ*m0=h7t
z;V^rN;Nst4ZEgnKKVOAHt5M#)braMu->uzydnPbI%85i*N8mnC+8_S!W1Azc-Mo1j
za|o#jz$u`q*@3JVSe0W#9Kib!tQsqK(%c-+o*pawTwq4R>e6w!O3uUx2ghF_fLUZT
z{f2Oj77&iVKYm<@ez1qd#+QSip(r-Li7}jZJbZk7gi%sf0Uc6U{gF0RoB<48&#)R1
znlLTbXo{$VhE)8OA_PE020`?LXQ?;h3C+%<goH0p<C?a;3cb16Y&Hg7V)=;?SifG=
zjoT1ucwm?5079?Wg5MGT?xnI0tBG&|0!?HVqOF#0F`r9+^Y8c~iqHmgCJYb|*q%DL
z0}>ZPqs3rg!s3FRwzJAcxnwIU15I^sbkT@Gy%B<qu1(mA<yjYe#Q8`!1^@^;PKlb(
za`Mbu{&rQMK@ny6#O*uB>FR2RY4@i&{CHJtfBCz^As-3C$0Ueres+L$f^7gS)t7q5
zH^+v08x9&@^6@c2)&&^?SJ>qo%c#ePU%hrMV!SE69`ujQD2C=_ZTD$}lI+sd+yQ(|
z=-iln{2M2^sOqy%P8i8R7tDi*VUlX#J)CK!uS5dKI&pC|aHr(VGZ5qk%ZDlfxB`Ek
zAi)7fM%I-U5XeLtA_}OGc(sm>84P&S{uAjl`{I4=`XO9h!l?7-1B(iL=?@CjW>D3`
zG);jJktu_q0q%lyA@d|`b3__;<|qLsNBB!K<j`cxL~W=X#KCeoFi;&xW>3vHmNSC^
zbIK}2Ng&_{f528$vK&mklg`$GK*YyJo7{|D4o+4C{tW!<O4m`;k7*2ec*xKu%%I5-
zZGWpv{%BOg;Vsby{}V|G%LbbJl!9R!KMbJQhm`fK3j=P&DrDGJwJc>-^BeTdV!e_Y
zvcgjN0n?sJn+U|k7l7JKajZQ>Eu%bDJY8<@MTZ#ILPOVxr-4&SmMTeSCLO_UqqZ2a
z9jH`<Tw&!>hlZ84$+3Np|8nU^1;aI20T{H2?*dXhP0Dz^971Wqoj-v92jEp}q+On6
zztXWzoH)Do?p3$35l3gcpi}W#<I|HR`lC#JanSU>STZw3HXVC09k&#y$u%Yw0gPgs
z&#keL;$^aR$I`vtL~b_IdRS<$(XM39Ds(fD1dU0#K=q*fP-p0gZ#!jfl~~IeAT7r?
zH$?!G08<vspKszQbm;KmcMojUW4`1C4uo}Fi)l@D?XCVNU8y~Ct=u882V4pM8Q_H8
z({s6>A*$M*n5_1#`PU2AL0YRJ<T{=1tpLgxTr*NqGx{j$?AD=3rfUU!{dGA@<Yk$A
zPU18nN*@FV**W27=PA$pGKeRW>L_Mq%Av3PIJ@R}BF0mhpo?ueb+8;rOH1npRd|Zl
z%}S0Ao8T0m88S77i-{jIk<6r5Pn~qinI8RPQp;hk!gO{8dw;fw5BM8j=n!M)tIWLc
ze5Ds++~$OoAUq67UOHn4-UxpsX(!<`A8Az|P~;CT168+>ESgBI3^fYBefw8HvG|5K
z<9Fg9K=K+8)%jQx3*+MADEXX_+z)`fY`VrDDvxW9AU^`i5l?K!52#%)PHeuSjGVU*
zc)JT!rfi|Ol4d=-7p;8!uZ}A~F0wxiVd%OtU*(+*+j!#Z68n}HKf%@p8O8_1?8G1<
z;M4&<oc{MW;$-^SfMt#Eb3GzrJxUo_`&xsP`JpU2c!cb@P%*+yi7uyroMG@rLey{^
zo9}*nyrz`2^cAGO$T;(>T!v)ns!oFL73f#+qkydPBSj)Ey$R&qRWwKVJG4w>+N>Ld
z^lXV+Zk~4joC*(xAVGN;MG=d#)B4?$=Up7@g792ZteJHz+lEt21uIGVV1n)<w@e-J
z01hf96`-Mt!e|qU0tK@vSyzF7s*&9+!#1iqFMTXB*FhQ4qr_Vdl+hHLU?XYO(1=P;
z5q9__c<Uct@+mJ`8&YDcaJcTtu?ycJnDCijCg}vC_x-jf-T9dG{SclYvXd=&_ujo7
zSHsaFUIE>!zv1QPOJzlCp`rjrXEfq6MM6%DkCFv0JwUcsoGB!%UsQ*>Rsb?8)+<dq
z3}U1m*u}fp5kXe?s&|==58txL)Os|}<H!bfy~JRb?fX7VDtOS}+;W|6zwQp0#`>T+
zQv}bT?!MixMJ<5Fu3#!;S%hTzlR5ZQ%<#K+@)-z#QuFl81&uZz-81=V@hw1OiQc+(
zD^@bqc`~9@Mhxy@&>=Sh-{brtpRv#U!6K>Mth(bpV;Oqppx>nU=|$qK)oRt%7+JYx
z%OOMrtKsivVOirx#5oom?Ld`C!RdZLPwyA3bl88PG0bM`4>lkRawn9=aOR;|^}~HH
zc)&=HS%8+_GSVxfmh#FDUk$=++IiHvp(qT|lp^SRH{zwIq#OWqe&A@%*#k3=Deo<_
zW=@hXP;tfb<$vfId#*w0k9E^uu?5sm#TmBzl3$zp<<PTl9!hyTGM2VvA)ZJWBFP?U
zkrf&F;LH@G%k7f&9<Lugdh`d<Yt}*l)>D(_+|WC8SYqdBQ5zOwMS1zkTwCZYR4xYw
zF_X|6>=+wJKF1u{s_~<+c%^NXI5lo$-HB}w)_xnWg=~vUux6r!?0U+Qx}(mq94^*K
zn)e;vwmCU3TIiKn5N--`m@g!>(U2Jl&YS|Cr|#;BHA{jd0=%R;cxwQy>>D9qq5v8_
zLwN1HdGmCQ!I7=$ISFk^@vB#mFhPw0n5^<4IqR^zFM{L4V4S#7=U=(a^s*-43Unn9
zkTXh#LWQ|7p9@8c?jXWq>|wd%dy2o3M;0ZeMIn4NVca6g2JH)8&GpAMmdrXCy%mgR
z5V_)An{n+Be)PRE&g*EIY1_feM*8l%S$iWI>PbrCf*^}Q`fXiKVpZoR$S}Z{O=AFS
zA+`A1ni?(!`k2+BB+#IYn+qi;R6rD>H_bW`af|sq*iX~Iy1=KcvK#J?RT%mpJ(Fn#
z|2Y?DS}1GFWRr*SZ2|W--W4)?^vyrDwpM*Ol^Fv-fsa984CNT#y0siVZmGG#&1C`V
zp9b7OByd>-7J*vF+NrP=I6T<Y{QLqoJh-7rnSl)w5*onlk+6ie4~G>yM;(-Mhj-?$
zcZX-YBW=<tSw~g%Li*eHn|lq?q?Hc0emZPk;-Lo4oMb<tfelDw0Hd(Vz$FbQFhFoZ
z0ikKJcI<t(g4?<vglWJFUJ>l$bhLh1S#l)V%Uo4KYAPsY@CTI!yYUx7^>GsKHuZ^t
zSuM_#AA~e+Btk=rwfm~@$<fTDH|N}2PoRmV3(gp2lIBXu*7mV{NPPoVg+H-k+rm0t
zA&3CEQzC}Wn~kTPK4EazwfY)~76e4ww>daF!!K{`_|t2n6^mzIT(kn_EMDc}V)TCu
zOi|P=Kpe0flcCGHy*5l`w5XI=$%>RT<pH@A1ok4*^pawaBFj9i&(%;ikbP^kIE8=V
z4|@Jup)do%?wC<4&*F$rPEOV^G!(qVC(O%$YKyMQv&Ri<l&0U}cBbgCUCDL(%)C4y
z;EUcB7Ia$^kUxKQ)9?Uh;FH>YtVTVX0RxQ=HPCqao$bg&LyjM+;4=Lr)}dA#j?Cdd
zX@3QNobBCX3N2P=dCrKJ+q#e<$mwW`AiDk~``xX%@3QQY9zW(q`ZFcWHY05jAn1E$
zDX>YEnT)cns)(InMeKj?9&+}-u*66Fw)4)M`3$WepU89?nSfzo`9JSHQPj8^7e~y&
z*$4bGIQQI}RGXnn<ez>9v0Im@s&Ry^8+T9y<UfwLLg>#nd5wMN4Y%{l^>U6?tT}#P
zTExe?zOB9e%%e%`P<N0=yy2F9X3_8cW~2?Km)2SJ6rA}N#`)-AXI4__a%Hca^u*sq
z>l_=MKMEZ!{mM2N!iM#^cyY(WDiJicz}KC>3#2aImt=^0JP>qu76IBKKF^>I%eEHS
zd~T@=Qf3h)xdI&rK0m^7_lMuGYu`1OeVj9vq4S{aaP#HC!Sh%ohw@|>Tr<TbGx|k$
zlN<ysV?;;ObY_%}7Z=1Q4a&=HWOfMjS$8)j*yqIbbC;Ta#O-JBExaG!_Ep}Ut^B)b
zZc?iFBupRvBC3}NVMPtY4-DyX(J0bqP#+3qzySjT_HoywH5#KOy2hmiS{m)^!`M#d
zIW|cH^{@1E*&$-@<oNksadV3+-q>dlg?fqNdF}dj5ygOA7{ma)lcExYHL|@3USyC$
zq)bdF4BL5%Xm&2A)pOEjW9fl=_wGTndUw%j+_Q1LLH%LX^EYq!Fz?<_x}Fw`n<M_V
z0U4@O*F6BNhe_i`<0m$|cm1IUCb$;|z=Y%3=2{CW%vRSMt-Cm!B&8kpsB=J}!n-~c
zFEr!k;v(q)fOt|)Eu;G?7{rZ0GZE{Ct1L9x(lRny(R*i1pWckltn$oXgmSef+NCLd
z8r?03JMM1odEoAFAuZR`beT)i`>R(lT*pfQ6PHBx7kIxv>oYJ#@sy8=TpDf)e4>ZG
z{_)!;49ck;S91sTQ<w0WLv;W^V4F*?fOmWU-yT*m<$0~E%f@CUXLb*gUJO@r#y#w8
z>*&ZBeLe?Yi4lV(^=D{!xO{rl!FZ?NgKX?$d$G2W!$Og-5B5Y<wqJ=EEM#aDX#m;z
zupzNc691pwf)zFI{G=Vbq0~{ix1VJA0L}!pgur#j<yCe%f&PQ;;q<yoJ<Ni-VY}ql
z$XR4Qbrap%dq#~YUL>q&cb#+`?F+53ar$QE^=s2F`dfxVa4I11S4u|y=ZCC1iqt`>
zrezbj0(|!L)_FDsM%jY0OS+j4MO&YW3J7wb5J1VaANgj<DC@rp?n5RyMWzOzJ+hCr
z9D@O4oj7^2wD9u<nHu>Q4hq)Tv4a(EUdM)Gj~W!^AT+zIS_eEZ?F-6LXy2hS6OjS@
zv<kY)E4)r6#q_W0zbelFC$j?qaX8N86dSo%9lESSUH42CjtrJ5PH#-Y2j{K`Q18s0
zFe=joM58BEeM-8~Yt#k<K?}9?8>4-FePbX+Bu12A0U(r&vgij$geVDH0Wk{tqE;NV
zbdwo{>N<03C{_$dytpk-_(Cvg7%Pq=b`zv3#U?i-J8z2EL+=?A4d@22Ql`$GkA~Nt
zzB{~-Ki5cNUN9iB9@`;!BCY|hgsce8&*FP5L^+rO6~L5#9{P=HuUV*aHziFeA{CA%
z%OlqmkrhKoKeV=g_fWw_3R{<HUAiS{zu{M;QVQDLa(Ewhpwi@+BTS}?0e(y+HzLeY
zN=61+Ol}H}FZ1N#;UV!ViK^fafUYJGu<owXg;`f~P2pUogAvHB$@AZSs!ZKzAW82M
zfD-!rX+SiP0-F4-e2sy92fSRUGKi;~6A%z^+R@Rf|MP5j>(GQBW(~Ue1J8=2s8W~j
z;4V^3Nj713(`}Q*2R}Toq+D}I0pNjwij};|I7$rdO={fc(h&>`<vidYXCy?I;i43L
z@)X+!IWWJ(L7~%1ot3x-QMz=23Ffa0INe^B9#K_QO@RmxnGVNL!h0TN#5hZA+*pXV
z3Nt=p_v^Zg8kd@g-O)eSC4krYmx@6=I2dWxlmdZoEfbznCzs*fzDAWax7*~=907_=
zKl>yohJ-IO&fFBf$=D|JvZfA2T5sJVnNoiQuM^k|sFsWP^T1l+$?qCtrTJsK{T{lz
zs0ow!86Mt3DE09%^cB{%8d)@`8|dxQw;ESE77raVU95{5iOmw*W*YbhiuyiC3E?Eu
zfN_UmQW>immG#IbxgqfOoWVL%JAuBr8bxjlA`>Yv$a75%AUXpD1>Pr0HQZ&6!MG9+
ziyT+$YVv8Ogg<3HHgE|V2*i@&A)*K;F10qLx#Q#G2L8-2NfXY^XuKbwCrDS?>E}uD
zSB;I0@0eCg(2(O|G5`WoVap7;>V0quEn#{|u#T!H9gIJXl|euf-ajzWJSXYonAW6-
zq|DHylxk>P%paG_6?O;w0&xnEuJHEicKZ?N4Teta-Jl^-ml?MGOJPuD{$EBNdABD-
z45QD4WU&+cLNTU^i|C<Pt}$-=5s|OuHp0H}tBA-noE3kd*UQS@uruF+$z;-Jo#>37
zh|f-_Y@={VXkCHay13}{CK#W})@;OHh8gE7iuxHB9WPz4jgASUE%%PHv>FmvEZwZP
zc5r1LJz8(pRC*>~M_2bgi#2#MWZT4TSUDu^SGzG_&=+03IyO6@!VI=%hLnVHHn?Hm
z$NZB5;|JN=UthmTX56yl9JAhkQsG9aZoGTvfSU)xPv)!KO-We*Q8A}{p-eU#DJf4-
zaW-aW-qPQEZmY-w=j1=@t%mMOE}i>*VzduuFw6*)tAC>STJPf;#i89cTV>l(g#I$y
z2xe(tDCYmmUxVM_pPbx3+&BNYhkdo*KW<+y`RASMpzi*^`?ADIK5<#~m@?h9_Zj$4
NQ*H0g$0{bj{Rfu7k!%0}

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/pgbouncer-pooler-template.png b/assets/documentation/1.27.0-rc1/images/pgbouncer-pooler-template.png
new file mode 100644
index 0000000000000000000000000000000000000000..6b1268a521492b3c3d375ef346c703688b2b75b1
GIT binary patch
literal 24875
zcmc$`byU=0A1^qfl#)uPfFj+UN=kP~cMRPPA|NOwB_Jg&4bm+wARrw>Hw@j9`;5Nt
z-gD2M{bzUY-8meUpEJLB;v1is56X(tm=8%FLLd-Knb#7k5Xk*v@b4Wo6!52GIAb;V
z>w$}yj5->4`J$PHf!~Q;CAD4E94uTtjGfIPmi7*I=FBdp&gSO!E>;e%`}bQ#z?+y6
zZxVMlH+Hpluz#v<ZD$TqcQb#=&j0k4qw`Y^HV%%b>>L7IYyup7Pn8v(GP7}+PDA-1
zkf#tCiC5~LsXKEXzG`c?s0T_?=d!w1^ttg!=B(!QeR#^R9^m03tCXd{-Dbll7smTf
z8=CQu&CoeC9>mjE+De?o6Fg+j^(o`Bi?tAG6&1rKm$9;`cqO_&*`KK3Jm}IgB+$z{
z)ccAy80RVV-<LD{Q6ARYu)nXL6tu+>e_yMyN#&1m5w93IlXlsE2U$L#GyXk>TmS5T
z<r{C6(Tlnm4(2|X_<Cg34PM2Q7T2=<yIX1~ow+H#>;5lBzF0l`bM6p5l;bQxQn)f!
zf`<0t*b$!4{0khlOH}?jp4{JW8}B@j!7s)W!J4%~Jpay6m?0&njp}wF$!VzT6dK$2
zb>a<Mo-|~YgBXvcE~<!ICnler+l}Zy!|+xfjf$l4w@AjbMfopSmw!Bdj4EJJy{*4G
zX1DQR`B+5|vArH$Mk}3FpYb?lsEFNPg<}s252~W3VbTn=MBx&54MVl)UZ-yT6(PN+
zY`hd#vb04jU53p{)jSm@5+lOrT|(9-BHMIq^r(sJ8~>QVBcuhP=$@+wCcBU9D%RE6
zKVR#G)iDV(i5Ypm2w?L4&b_`j)YBvAT-eoQ<!sZ$RbJo0_u=p4ZJwVt7W)m(riJqc
z{CrvK$O=wK?5;nycv~-1t|^mHDJ$>kWW*VaTxV=y%QAmKbw7HZIIIzNY1B1L{cApj
z)lN67@+IV=CrtUl72V;{wkwm6wlcg9ogbfWT$k;1&uA7lPY56SyqH1C$(|F$YCtxH
z0ddsQrEC&pz-ZR>nWR_zJH%O{*$IqVCf65-b<S(D)f=WJCT!+?c+XzE;JsuINDMx$
z)UV&1?t3KKGDScciP@9C(&5A+9@>mfVx8h4RsAENr>avcj^-XjZU136_|J;lTzBQ4
z=6vz$w05M+`JL&!S%<etpZSj5r6o`rS8nX4ztwAA&x;%LUF{EEELUh=SnK$J$6PY|
zNYEj8wc^kr27#Pc9d}8a>Sj5RW(ai2{GHts%PRAJ0y2K*2ScKFP4QLTot;l<X;B(I
z_N5FA46-SYKO4fo<g>pjseD;7+HrS!JZ=!)Ka#EQ5)B>FxW%e*))?&($5P@Y?qjr{
z9nhkUlL_#t?;YkHK?Q^Kb=ImtbE4Y?dcBcvn}bJ!v%QZ}J&5Gsam9Z*uuL}H)#{J`
z;_q->-cJ_x;W6-9!%yXRK>@cSMB#s7+}YU)fmr-X3cPn8h3k^t!K<BQH9I&XA1U)z
zmMLWh<%qPNRtL3y#kQez-dv{`N%P)M^S62J@3JTRhG&(~4Lw4tA}5TxR?X=*Dc6ER
zlxp5jGqAaN6`pvT6D52&99Vw#@8X;`qj{Juf7VImQ+O~#vB+a%$A?6&FarMc8`}4>
zJN$XxX8(|Q-iHoD>lpK5GLOktq^w(%*KGN<vsciQwsvREOTRB~wI*}2&wJ2+YNi}4
zgz9AVwKFo5VNIxOf6C>dqRL0oS&7t`!4c(!{J_o+Ka8g2bh`dhGraPjJD{<iZ{pW1
z)%&25Ep-pFK9mvAAFHwGafu0E2n{tEUY+<!&u!e+h7_-%y#&v!`xAwA;r$bLwWRZ7
zwj|pZ<d!e9B%|-S%BlwnEnzRSYZr6(N6Jsd=$mHk&8h}&;x8O+<u(<N<gf_8YFpZ$
z{AaV=TKW3=mV@QFy0Kxp-1(vQM7wr1qq;u9+s_ldo`loc)SJtV?q3jaeRRXZ_@B5a
zaoQD}@Gn^Ejo5j}u>FgNH~fwv|2_QpiRQmZ<18bu{cmgje9mtC{NKUE&j0iC|KGnc
zwx726&6_u2k&$-WY=!K}^4gUa3TmNFa^#}^WG)+nU3+tlDFS%Cy>TyaDJd7encp6C
zVAC-&+Kh4N50qH(B5pBjA?`c-qpORR=uCBnOl7*K!EbSp{I1TrerJlq^)=tTA^!OB
zW1(=qW>JOfmMY|Jm&q$9C-yJA4p@+b!^1YlvZf;#<5KXntrQfxtx(HJgmJNzpK&l{
z8a-a*OZDJvZ!Wy9jt}y7*h)fO9S;SYB7%TfhwIs@H)X(NslMm=oX67ox_f`LmKHKH
zveiWKo01LEnL)^><Ye@s@fo6}IgZv`|F<jdG>DsR(C31-KZK0tDFkI?P(om+d%1Fn
zSzgEMn-e842NvC2RpZN(Er>1pZla+-y|DXpi%Mc}m7;Th>1YZ`e}54JpIvUc1X(mH
z$E}g)&z?WOVF9VfBv35VvA}FR`F+jt?sBw&=-+Wku|5f|X28bAcHN!9Pfkt-mmp;^
zY>8<0ITu5_2aZP&bD|g<8$;fH{P@sz`a5!cef`17iS6$`Wdj3>8ixg}pf(7ENW_;f
zD?2-L5`Nf4X!teY?v{>@?&Ygj_qroVL*rg3iRF*J${$_oeUTB|+A3OOJB^e*jMi)r
z4bJK5?TrYks*eq1$|hHOC<B6rt-z0jqaz!I&klP|PR>&v9s+1JNjM>^RK8*wo9BU%
zUV|&T=-oAEu_mLCurRy(j`jmoR4vBJx;i4enW{ilYdAr&{QFY<M%l6jCLZb2GA5tn
z^#M9&<`6v==?oD+$06bK*XD*TzQm~56v3KBUCUkJxa8!K#vSkZcR0a)@w==e9^$o<
zQcs=J%2(BbZL*@u3T0*Gw+bmdZB|_EFc>LEa`A-cYemHx*dUlw#B%sLx&?s*p<+u#
zQwZ-wC9d>D)6me|H#avAi;C(F!WN;^Cod1U^M6K5+YYVHk_;yx;<Uh+otv{sIP7O_
zT^uV=`_yZuT%e9P+|=A`Qytl6<jBVZ=Zs1{b<&@SMC{Pb8fubZX-dCmTqKbvbxlor
zzmhqn_3E7^S65fVl9GtFPIq=}52r0N(3=fdgK<nwx5t;k8Xsu^34owTtIXY#DN>3?
z<Z_c{tD@KJ@go8z9B8!;8db1j{u7t=U%1boKL?Zbftb?*twfVC7-#wV&+&40w8&$8
ze0(u9D*r!ggcVLJQdGe>DZCB@uv&-2zR2+KC*cIlv3=L8aY{Lp5mMPF=h33Kbb}e9
ztm9XeLn3ho{k^@o{fVrEAe*33NoZ<*PU5swED=cf{P`nT+8@{Y6T|IbH6PUS6+bL5
zn{2sRR`3_KPTLYxS`0jvk&zjxA!IcucJqzveI|0T7zA|^+~!PEd@=8}K^~KlVOW%!
z(zRWz2maS$FqK|aO)WR6<@VCX2`np}o^R8G+~?!aYLmfK{*jeJk-KXb5GBCSw3}3f
zQTkuJ+L>?GMWgB*&X&$?Wu(-KiY`>l5MlnztV<giR8_^LqNk@<WS4pxiQ`5oJ=j;E
z)c7|z&asgAg}7~v<SNtQK_K;dQ9gV1sN@2!KhlML*o=NatV5WYm@sx>wbIVc90DGD
z5jK;hi1i=e2ZATq8L!f!Q(|K7MM?#w33|v5d3kwJ@$wSJ#KasN9lfiq<%PVC78Vl9
zF@65*+3Ty2_wQu`Jm3?U6%`e~q1B)I9cHupY<XzF#sI5JnIYk~6_;|+xVve1babd<
ze#hl0Ja=Q&nZHVh86<?9jq976!&#T1HZu+?QBg{Metzv%f8q9y4tD4mU4F&d#)e>V
zt4@iOvNFz0tphd$oN#j_w_gFq#lkXZoKbBDBWP)98F2{Pb;2vEbZ%~L9?p_{Bq1dw
zTcKInG%qhDB~|SQj<SQTnJOA!;9Xj%S)y~V{Iu(vN_M%`Fm(hGI}#y_-dpfo6Q%l(
zew@MPLAceq$^fMSw(!X(S9CY{M9IA=&4r?x$jXW>I9zwbX|<RP8#@}MmJ~7GF-6dm
z;L|@F8D(yNn2Z{mPBmkD&Csy0x^raWpv`%c@U(8~xZbD1j@mWNlUQVY5K2l)p_AX@
zkhfr6@iS+GG(p5;n=~q*?(E_s?&-+~p5AFA&BLTSg4lC05H+=Xz4+FxUL{^Qa?Vo2
zv>Bf)K{s(_eAeRk*H`XwvxTXr9s}RWPY1y4ZVN@FCd9?Ys^)9|O_}yDT4AC#quJ8f
zWP<MUm-!OT&d!df+Zt6ilUUC6WFR25f%1pRE+Z{Xzw8JE_^+BpxdGiBCKXTl`RiX*
zSXfxd24o0&V1Y3n*A%-4bFgo2YRc)6%2v75Wl7Z1je$>BzKEg_{@C6w2B{&Hnl4(%
zQ%G^VI518cu-K}vv>c-5;!@X{bHhuiyp)!Z`1<V|+J_GxMr;xS1XqfOw%b*T2m3(q
zc<JuWGcq!gqkVjIwDZ}pGEKJ{8ghN@Yi*dO7%Co$m8n%`pt$m6azARe(ozZXa(}+L
z=thx?lT+<d!Bzt#gzmvKL1T_&$W*tjwY7E0ZtAImU-$69<<y%-b4$y{YyFtNg#ol7
zmsh`#;n}kX+0xP7AMqJ;NU?=a$J9XDcmNT)+{~V;vVOAuEBU^m;ernDvj*Z2vB1{r
zHCDvovt1Y})q}mdl_-H1S{hrY-b`=4Kak4Cy}i9n67q5`v3rj}{0=OZrK7ce#7^lo
z69cOj0yF=jqN0+-??MX_V-N`A#-RGSxV_q^3Vth=`6CRM2Ac3^F$jD4N8tS=UIz-W
zH-d4{9zE&+(aC3YDs|j2Q+W{t&93!<lnTEqcaS_!wnjJdb{C6>prtyK`Q#2f1nK^l
z*0%Fa#30)uw!`yv?rEEi0=0Y-kXsPDve%4A!1bGJfxQA49X{t(v=eV(u%B2<-kxub
zqIx$|JR)QX)?*1RD`V}BB4^ZBH7Iay1X=x6fx1|(>e5muWvLsPrJve@)9N>}T-B|r
zIYb33bo`66wSO+}@6eKj%a5Hlbc=pq)~)%fQKY#!*XW@Zsv6GNqdB^Z_pgnu&s*4y
zH9{nJQ1)CJ{f{;`@xhb7p({pi`QiV<ju&*Y&wREbPHMGh8!JBkD-g3p=}Z6r>%9M8
zHT^QvWB2raj;-uQCiBH)NruRL^{FGw!?cc~zX|&KssD?B(7&OEQY)mF&x`V+8|*nF
zT1TBA{6?0~%L(IKo0HwBX&pi-|I<6yq4J*A$}ZQY5_FJ7QS1<^>YrgeZF|~YRcJ${
zvRz-T46nZwgo4fpboxuJraJB7^x~>5_Z*7*f3Rxx<1UwVF1&xgSZz!NdAo{qfBu^4
zzUYgD4w!zF77A}q#IUi#8;yVWmFRS`se(bowwO1>olAR%2`^Xl*S>bS_vLOy3nSeP
z+2Q(AV7s$RwcVGi`lS?0*kXuJ%HLLcKIy~vhmYP5DFzQym%BorrEii3gC6`xZBMwe
zeYr_z>a$dZ$)y#iB~Oc&Z0?35Tnfnl`U1UQAeXY+&+;{$&De~%u(Puh@!FG_n3#NF
z`@a3fH^l86K0M_o6J$DBRTr-oxF1DmI)CfC<1MT+vmSXR=IG#KC^V}U63*}K>(fNk
zA#jO672a`hM(H!6LeL<jLj{>fn$!RY85o^0wpG%2G9K|a5dY*p-Cv-jk&fz|skXtz
z!+QX70BAU$a&SD(mWqUKA3OsywAZNjK1Tog(5Myy`7!Q$Kg+Vy)UpXhxV;%_=fL$y
zy%~QrfZ}0Cu;BgN9x#)sGNbd`<^P_`UiV=L5-6B{fI_XpaY+pF(#Ys30h9JyP-yZv
zx$<&(wR_*qK6Ax7?tJ1GgtMC6c~++i`LT%ALN}}ffn@CVb>+0Y;!7#*SU-j~@eAQ~
z2>hWbOh#>)N(p`GfP6w5=&~ii<i+q9ahzj{e6&SLS~e5+k2!6s;<)iS>F}T!)!#Y2
z90kDL4^Tk<1t6Y1GXm*&bF$1(EmR{Cf$ZddO&ok35Z=`cZ(5jml$%s5O8G*qn(fU4
zf%o3a14~q%+oeWZd2$}Lr?2!rQ!qG~SEsP(GjbVSUdod-siG+H@^_!AF2y-5DSI(~
zO417C_5ax!Q&f|}(kxKLKTqD3!tytc;A$i!C53^cl-Mw>noFysomL>PjomtqdtP&H
z7tir;&^FJ0uX>=<{#%RRdvdk@(>!hth5xtv{NInt<%rs~e@RIR|8u-y3JPQea@ioF
zNU37I`p2M7kd%}R8MVVE7YN?j*^v@F^H}hkv@#!0)F}Z`TM#OIw_Cd~(OBGVpQvlz
z6Gff`V2;?hxHNkYkn>Xo+_pVF_Ek(xY2y(P@VF6Ss%Cg;sJ%)izPn&QCXk${qPXTL
zC=mZj%jVQuorjgFczdkI6MKXisk2V#bL=Q0KKadjp5cl$(Rgh*D-SE^_N#r@wKKQq
zO<{M#=yL^f6#n5=^dfL8Agvy(B^sLS&DLu-d9p7rFO%Hxfi79Q&N1`k;$W$Rh|3Cx
zRw-Q%UVW)kYoFG!GRpvpXo;6EAqD|AZlLR$@MabfG4M`}i@P6`d8o((K8!iD|1*Zh
zJ#OIg+qZA!DH!G!6QU|s#qQP--uzj^R*rv;%$sg6;Z~s8ESW5dYL1P49RK<Ad@SEK
z4J#|QMdkDoy#F(E2k1)Q!2f{SSw2IATt+4`gKXT*Kp;hnH=A4M&?fH&yN*5t#kZU}
zf5v6sq5l;$roy17F8RcSW-r4h`^Mk`KsIrG<o2R>FGc33Q`gwKWurujuT#~dt~O|m
zud~b|QsaX6l?W#32Mc>j!oQq0q{-_!V>YrtA$$&|KAIVH-Jvjei=Y1WNfAlPU;%lH
z0r!067N*=(x_-jU*Bkq86(7C6g12q9c4MacKgY6Xm7C?M-uh=4l%5JfQu}`!9~3i2
zl8Ec)5|YLgl=`t05UZJ{y4Y(hAYoGOD@>oYN)8;q@*4_o1yg2o^c^n;Z)Tpbn^jgy
zv7mrn%!X^LOA0T3ycNqWP3=_pT+Oa856ft-!HtN+3{Aj&2Mt2U#MHSpnm=4^qxEww
zGEpfsBxLEZhcc0Z6a(b}3d)RMNec)mhs-Aq%tfUP3=BCJHVkxhZ$m?Sn4>dW_L`0r
zwV6KWVPy}`^?7Tkt3Q4E^v9CkH-R(z7aYkLpj`s(=I3-+qX#S4b@si7+XAd<14Rp2
zuWj0L$^5D}6my}6o*CW36ItTOp5~4&ke43@--S<mV?>;})!oG3wz261cMv(Omo4P4
z{64`#J5p)4#jo>N$Df_-#m>C7S3EEBo^AN1QwCG`m0g0f?ch^X;y@a3BS$sSj5Gf2
z@Yy=?B7Ezjxf<Gpxwa!0yRfWTCGEG<lGFCqUF6{O+noPgM|1gdGEZxOvf@}o0sA0-
zZJ|Tp`|~o!8bAFpA<D7yrYUs}xrlOY<g71VPw5vR0ZPd2NU0geci*-J@=1<vWyiU_
z+6y&{iu_*NO%xMTcrM<9`~amGVueE98kB{~=C)rPt^mvhCA{lhiEb_Rix;Q_;mG$<
zu_T7lh3`Su*47Z^=EFyi02qXT6aXk@baQ#?xs{t(4jpI6$;-<EXaWE}>h@c%awY-N
z;J!N(!l+gHk~S_=E|CR+cz{WI588duNd7RXFaq7?!Rcw&`9c6T=<2${39~JS(l>u+
z2C0AUGHI)^gMIq^8HMV><=JjHKtCZ6k((1W3=%Fh0J;FM<OfZ(&^yp{YTA%WU+qs<
zqHYYP1&u?y0OovfGO8q3^a?-~orfzuREhmgOYO))=d&&#^{<-kz-qBU(~h_wP&Q*h
zet`El?alIQGZ9pQ#tmEK;;9+On`%B#`Io!FHGi%-2Zw~TL7NX1bfHiN6H`;;YMrHx
zjZkR{uLtw<^L$=M&lJ;z&^<gn9z1xk7$Z&b%GXy&R!)xH_rlTlax0&R%?P5Zs>){E
z{s4ry8D><7Vk%#tX-`z!=;)Ko%uK8vRa;vo@D3w3A~w)p(i1!5WoNtNiXny<G^uPP
zkzo-Lotwki>@Mr_h!O$R@ko$jo$7}{D41f##+mA@VEiIUdBw7aU$P{co@@?>ef%f}
z;5g7bhX4Mpj79}69;{>6WC!B`PkC{9xs13?O-+Kc{e@_dkC+Uah(H-2p&q|G&{SMp
zJTaw4hX>G~uG$6v@OST!5S<ygVPqrSf;q4VTm{HMKL8p*HJhdq{YHZH^mNcq0{~IH
z)_xALHmn1DP78hQI^JV~GXLQCSp3bK<PMQSF4s+EF#1Z{*#L4u3^#OKb|z26&a2X?
z7_@j^UfW~zfF9@o<MQXvA2dwNuBi&s-NB-!rY4=6EY$);2dA#CZqyluJHBmRh1OKV
zbKi2*?cg-tbncOz6SZVGvF`U6P20|c=?@p4dVK5TKYKplG2eb?!1t&+>wfn_CwnD;
z#l&R)WvBU;N-^h3bEwX8i=sc>$d|*DkLv14w#R#vG-B*o;i3YAbzz2gqmq{gddA;P
zl-{9GMpmD~zZ*V0oNXR}K;#1GJGDd!e=Mj4+A}wQ(ucNRCeD}~dvSA&OP$!Ps4;fm
zs)$rymdqM;Wg9+UxudWO%p||TAy|CRRE_>hL>BLJ%2H{3TaWlXs<)F9=1*DVu<J2A
zzZQw!dIdZxNbOs>^-(8^un4T>wOF?LPJr~I^8UM`=lL3N4P}e&BAZbs?gdD$-uo>Y
z@k8zXmu5u@7w|8xtMOmH#`hm=T{wckBngedjb^QX4=(G-E*<^(o;}fY7p1O0v!tp&
z^6h>g0TE0sBtbg7{Kcyvix$~b#nGkddu?=doGW6VDTuqIiaql%v&4niw%|5NBHxiO
zC1wUGJ^b8>VFq^5&O!J}Ox5Hsa({=ZHY3}lM~l5pMB29-=srH@2^zF2ndqjB!t9BY
zD_fdvZG5>_0)fo(3gU87T8GTX%=4w?iA#JX6}y=uo4A_dW}cr<LeGBlv{UH=vQmwd
z#8*L03g-5<PL2nj^p5<sNc!zU>^>$BOx!n?;2p?-|IrS}dw{r!M6G-py|wo_zV{7C
z#>f^ZSlhwXJDPXx3|$di%e8Yg*%}I?2svfcmB61RXM5zlvZ2lzE!cesAj6Dc$lMkY
zSRH^D0c-`EuRAsE8G3v8{S@Qr7%`^XdK?ajAI#Gf5QYb?aVyCQ1>;d^nr1(aXe1BZ
z6SFnGlCFymlg#hc9O_pKJIg9~dbtTa>>sdNDw8N(@5U#Wj_W_n$oOttgT#EDpnYLx
zV=GYB4Qgj_H&~Fcp^249H{z))3)Ds!>Yu4QtExpK5s?5UBv5lEwTL`1uy^)s=w-JN
zW2~b$^E`xc?f6v&jq+P6)yxE2FXW3md>2zQZi9D-u@yMrsD?*)dP_bO2=#h}7TBdm
zjUWp}7UEDLo3rf`WspyAOxio2PkxGb`0)v=B}teaDfu}qeI9+k8Z^y?Y<$iZ|6)jK
zdJ4ZRP!CIJOc=t7W&6H>QMKrF7c^9jD@M0ZN^DN;HVD!$U^A|G*36D-KiR;Io!G8D
zuYP5I_x_@ODa2v)lZr_&V43vo{BVxH?fSJ1^M8j5lk+ELcBF`!Wz8A|_Q?efQHH-9
z(lj_t7gu6dY6D5LuC+)MVl*G<`^}A@$uHnhQ#I8SLXJ~VbsLZpy!+sX6r*ES<zrud
z-ty^_no9n$$yGql3ZmWN(GTqux=$c9O(Lx8W&9^bEc7_vxm7FlJ>X^u-awy-c-B2{
z5z!0VQGK%a@u)3yazQY4piIWluw&Sad4}iwhxl>Xvfg{FG#yWq@d|38F`BOvKI1`i
zNMvWaYf~OvEIW~>7A@5qc{o497se?#qh>^Y$lZ&R{9Eof=7oTVF*1C<XRUQ5To&8R
ze|KB6qvHYv4`SP>{4iYO2k0sH)5F^jZK|&>!DZI)HRUO-ujH=+NGpHmNAkXRKdFSh
zfAEs)ag(RcWtj+ze#0|>qP&<W(S3nMAw&n@*pP83z>ZOD!p#4x1#miAl{vgQUyy@Q
zi1=#T!fF%%0t>LU&U%-PU>va|dD_EqEyE80oB}{I$hP>cx0gjYVt_JWjg5_!P*I7w
z*e)u|`QCDKrW=!<&Jv6>ZUAcyXazYvu3V=C!0R6`E<Cr05}W`q6%OEKIdi|G-WMYa
z8vQesmeF`+0Q#2u%!CVIG5~6e++LWfC@Vh=#-V=xToPoDI!zcK><*+T1YYD0I{|+#
zgWpD0xNRoFIzq7@Q3Zqa@MORBuBBX?3GpG@sq$BalK{Qy0xVQfLhdA7QeHlSj)jFl
z3@s)x@rB6sf%sPSbGgqTl|2N{l*npGU^7vSD~5(3OkSI-PaLoI#+iWHMD>Odw(y3(
zprF76v~}%PT;T0|ZrkzN)liKRfq?779#G3j0~Fobx*&<$<}<hv7o8eJf_>fdL@W%S
zQ8TQ#m<gAZl(D)<vj`s`=!F_(pc)Ae4t@YG48VTS6NeogIjg9vBhd8wnWJ0KuF}!1
zPQWBc%E)}c5ev)7d4_0k3z`#I^mS}9WHox`!DDq5Y7_;7sU!%O{FNbU2$&f_8)(-%
z=W>aTL8}3xA2qh00H`e*P!NDCA@FsFmOoO3;o08kRGpKC0nCWC5nO({wviFQavCCx
zm{`zlne@g!SM@E@EO`v3!vs_bBSd93x)bJPT4{;gLyUm;`Mms1pe*$?8~}mP>V_G1
z)rXi_yMj()C7fU;E?Og#msiMZ-1!m;@uOK~N^5R5y=17Vq*;Zdyk96jTc7T>R;ibn
z{WJU=h#)>BP3cu!O2m}-MH0lQ*p`pe<TmMe^+)4<9CDwIvaEPGe6=DcW?2=M-MeP8
zxuFFD0V%8~3jd>Y>-Vnj%dayp9DQm!h#0GVconTqEZChDv-mtEX@oO$tZ;_!qMpnx
zw9@Iw-)Vq=EzbZCaZt<MjV+xlQXOCMuM*a6YNk>HQy0?9u$PfScSbwQCpGRJdC4Jj
z?b+?lq6+_IvT(X9^-B>?aM|`I=8Xy7+^vraUVO5IZ00Lhe^vt``I?HupIJrA%^Bap
zJ^^`GqKEiURcNS0Ho*k#ZllcP&Rlm|aCyw6@4F3H*%XGcOrYG)ow^M8@{~M(CBie4
zb7tmZg`8h?LA04#l1#B-m_-A25$U#NvNkLRW^Edpy?J{pxm8`zuhw~JvxWuN&*Bbe
z+3yOkqK0`+C4R*Xveb{+J_e$cg5nsL$6YaSzb8*p7zxPx5)FL3B|nCJ7$`Zb<Cy>E
zu`HqYS@C084=SN#diS%(&L<`(P0y?|(hhT%L2Drs4QnQSapT8VAdhi#{c()vZte^7
zZ8LxWUd8^!LF|c#NhG^kwJ=3e3SEui{=RDSo0IFstg!wO^y)z-#OU=g*!Ile8#3gv
zDB-T*6AU{^HL>a1t}O10nuT${2q&{QtRx3Jy8f$J;W1)C6m_0a#Hc~>NSfaO<wB>Q
z;nd8+bZTV}v^r9d%Jy#mI^9k$506BmsFpSCF#xxnuXXC{HUbhQ3+B%}9o|WS*{)a)
zEAcJTK&$Lx*h}+zLsqY&$(+|$$2i14xP9BI&%f+oGXjF0V4^L*A$5XEwL@BD&=<ce
z#DvL~?oJVRp$wnLJy1Di{sz6%jKZf1CTiU*<V&<qafup?;fB9aE12ieVu%iSuEok?
z4kzUb#WEOHPwBW3k--6<Jsdu>tys_571B5U{&A`DNmqhi^QenB=tcF1!d3P=Wj4lW
zwE8>4rfbgSEfG1Sufe}wR0$*5O;Wq0=Fnr(5`7ukVn-=`EQbcG5x3CCwFuWpV%B88
z@Fo^R3*Fa<x>P{xS!o~E_UN2Xa+)~H*!vYTGYQ3CuGc6qnZFeZU4x|@Ck$!%QI?VP
z%=&qmoEhjQb6<H6XI?{(S9URzmwPz7uwb8pt&Z>~09SxuT|mYEv%kM1<Pl-H%_NJp
zdAZjy=|a_l%aAYvH~~y)B!~i3&z?!>1ZprO{2UsR1_%Wg38weS<~;~t3?#13b^!%f
zyP(<C)wL8tXz)qXvcY}#A%u>Bp}ocL>Z>x{;_fbHq?F6(cNT-DFa-AS(E+qwVd3H8
zuC82W9K>I^D@*(VTQw6oG<|!DPho#$F+Dj+*w)sDsPRE}^D#U;cj46+`8=J(^t_y$
zub?*=F^{F9qH=U`i8CnD8z{{ghu(t(1_n;mIne+#B@&Aq8UUw{>&;1Uvs~-!>M{m2
z(Fi+&PXSLe&0Hq=2=*`vFx}p#+aVyB0<=Yd38vDB=%@fR^Ru@%u(44P&;y{a8ZI*w
z^}X7yt-IQ5bUNF419*pg9SoG9dw?)V6L3R<fDe83Io|_JvlNJtIFBDwmkeqqeEITG
zF-_oAuIfDq;25F-50Kr|bem{UZ9DxKpa9@!ccxk#G)+1+wjTf#gJ@J{1_uT(Ng`41
z-5YPMFG_U)>=bCZ+CkrpgO9&fZU8R#PP0f7be{L7)^*qFT9W%TCfH58zvkpT7#<$3
zb6i4tds%I+-|eKJF~pc~Tn5PS@fxQIR)2qg_x?!edK82e2Aw__yw&z8wBI0yeCmI@
zi37{M1}%cngdolpi_LG*K2!&XUlQIGxHs9pY&k)@Q+_b@J08zz){v<qE!ci)ZBK%U
zwzQ~ceQ(8<9{M~P1%uzHzom`C^@+`mKb+|So4YZ`JmsirL#MV)`SMmm!PJGUAnal6
zOmMzdp2=bSgca-;`NoKwr-uu{rNpI?8DT)Exx=4oysP=Dv{9jW4n%Qg%co22ci-?0
zYf0P3RMjW6v(|!y$e#3U#c`B<n40mMzeZ|*FEQ{6Ip;q_ebWE?#Rw|%{n^FRs<a^=
z>C4xNjVM=iREhTqigq72@eIu75;X*SWx9Q8tQvYD=;AOVRf06PxMpFq(wOC2o`>ak
zC(-&8z+I?H3*-^i`5zC*^xGh|ya%%M9A5+CqdUC!!&tjOy_Ull>UPv|1^cd|Y@v&}
zh2y<qNd*S!ld4tc+ZoZI+Ai3{ZQnaR6jvMT6iefK_MS~jIA{73i&1F%DHA0lO09*5
z=S!KYuxofA!RER3yQ(j0r&BR)dr4=00+-Snl$_kK?DE+NmB}j@X!OpgY8WG;o+Z*4
znt~Q=B-byz%HqQFCp+5=VI!+G8)zC$Sgj9wFC2Foiz^zNg&$$z8O`9pyi8xCiZ(R~
zVA3>Rn7)=4t+Lt*q27(m2;oa{0f2Q+ZYn9S>(yabjiXlIL7Bpv-^3*c$LcRFtHgY6
zJie2Q3+LcpU|Pzt`I*sO3zwDs^k{IR*v4N%PR3CFX+|{CR+BZRy0%wtNLHP&%LfId
z00{^2)B6XGN(mj#sRcW_V8T}DXQ0PF`xV}Uinv|Fe*BUUvc5AQ?OQ`3Lg9>O!~9b<
z<u_ydA^*`{4X^)M`KqIF^}<N2U?H+RK_IUF^)S^Kk0Qg}!Y6*N`T!gQ-NeAhX~=J&
zG-B5YR`{DyC4{oW1tIw-R}LN_80hu*K-1UwY6Hb`L$V&jDxjGh2qDAcsbLN><O3P9
z&cybqlR7>tK$Dk1NIi$U6gfssqjS;7pK55Mgl`J;U8~meo+m{%KUq0nmDC!wFPqtV
z)~9uxGf3Z@IbtVtI4xNf!{7_JX*au3#0j+{#xMtg{O)=9E@RyEIyQu80Ewn(mX!*0
zhT}t$(`m<NJM}qj+i_h7$I34qzGvkY`X|Z?LdBf}<=!zCs55+1XK>w_!d>t^#^m7O
zfZEXjnUmP14}egrMfgY}yLA$)CK8)(09OzV3Oeyz)y!|-HuF4e-PEJ9cNyU0pKjnq
z+o69%{4T!&G8mJk2vDt_C&SV<!gm0Kq5&WpF)^`rgDZWy_jUnF!l<$athCfzt42;t
z3`tg2md)$P42`PXeog?53W#PF*VaOsnuJmTw++;H#T}+R?&Kt5EQxX}ef|B9;%F5L
zCvOw31j0M!>q?41?F`~Bxi-M6UALTaFDGtlBTS`_ho;ZmGC#o{H@`2G&q0y8GU-{!
za(Y%z23Vj&Af;tWA$em51GU=bRQr>*Nmg?`Pd3VM+J&k0+9>&C46D8T&MmHz_;Lyv
zmL76k168q6)wTCBe)lW>G%>&8KN?a5oL*Oj&Dw>L50+x<DEdRM-PceNn$Ad`QXLQ+
z9{MbZPZg!$oMj~T7oLC6qYY|iiPhR_EWG+@#-R=WU2r6D=GV$2Qm1M4vS9ul<zT$g
zN`Fnn5gZ^Z?ajO`7X?GRWILEj^%(B(H--t4{bp}ZdGY8x*g|<)X0ZsrpYSDTbp;vH
z8qbB>4YQ9`>iEp=l!HBAZsiQu84?X};Ph>Ifo;LamQ_h9R2uMM$?B@mRf^GHk)fj)
zy+%$gKN_Q}Q=~@jdp<w|;%?rt(KTFJ;!3;NFU3_ypAKOr6V0|^N1vky4_bAl%aJsm
z#`l_)bA~`we!?dfqPAJ$G8KCYhWM1d=*vgi_T`Jt_M<LTa|lT*F6-&gj2nC7vg^$%
zTn-3Pc{;-H7X?^1aJGysB~@-%xNP?NztVR3PSlHxA`~EOUj(^5f9+Yaus_*ErKCTE
zIXD<zz1(1sp8dyEX}~3;glx%mR(_i_m~%@&$Xog;LQSltnZHsdo+7t@&&{h0sqj1{
z`#+nZAu74hj@2k2s*cf|?;?68oat=+dJJyJrl|^Ny6}`{@%JyH0fC%JR8@PozW{oA
zf2SpJtQzw!;>!t38(`-R18%rSMjd=Rw6wLu05)fh3}86vOE#~~-&9-c^1|LHKR|Vo
z`|NCcya)mTNaw}Xl^i2CZ5%r2y4<1)0B$=~ZIkHwtFu!AQX^4!Bqc?wb}INGd0-vd
z3NIcj(dFHlYt))qUu+B7oNx9?Gqv8leHfCZc=t^Dd~eQa@yET*(;CWm`8hdb4PMGX
z5QtFJ#Xg4Zwmf?DDECrYQj&_D9TzC+fJOtB3!rB6{?D5Wt*uof8)22spuG7A<QOtN
zzj`YI61k~@s{(*N5!`Vo*dv0>Fx>26ZM)}H(13IJB(`p?eTZ!CyE2E<l<B(0#ttA%
zLq|u4yd4=)?d<8v1`<cbXhM8^1ake_3E;%9SQ0yWdJgyL8Td(jxK|!xU?8XnAiZHN
z8mup5*oW9vXgh)j0CK=_>t-P#p~bB&`eq9*5=6V009x4%t{N)w_g{;P<r}E8pugPg
z`Wqrv-aAgP0!ZDhp)V^|6)S$5nL9mB!)K7e)`J%LtxzO7Trtr|TN<{HJfImkJa_+K
zf!(++)+PnkYB66I*wJ(!+0*UYZmJgm$kOedtI%uw;zVi^9~$lq0Q`;g#Rlij!bPS<
z1hV-$)WiRJk5z>)Njs`bln?>|iFaAqg#Tk%Ss&3aB+{Y6;l^rS*;4|&-l88rtPGpD
zza!7$ai}LrR3|Y;!gJeu1Z|Hi+s!0@?db_QhZbr!`wFdE5ih<!wY0m*<kUe#7LY_9
zTrpJ8%-6h2cw^G}*>Id_q~fqO*&fst`KopvgUr0zF+~Ln`p<VGgQWM+IyZcda5hUM
zwBM2fb$sN8EL(*V4y5O_B|nYTgcbV9{pS8*OTRh5`rHFnG?-CBiZwB!v_p2!)8E?3
zmkR4g7y~G^)VU{N_94-)n)BYGKjRAy4Dy;=;#+m_6{Ub1-ZvRLzuG#4ckgK7ubuh5
zYmV9<0cg)kS~Q1%#HKp5ER>94pY*1LTidDRM@_pc;Lmqte!pfn9N>MuYpP4dX*Ad(
zMBnRJ<EMeZ6<2TDRH<F4C4Kz5_;JcG?4yE7C}rUS8w?4g#mf4v933Y3SPo5`ON#ga
zrF^Ak95W+lvk}!5r7pa|S9E3Ce4pJ^uI6OPU#UIPMSr}dd7AIr>I#)K{HaH=fQ63(
zT~Ya>S)pd3!}u+8S-C7@A0&t80a*r(gN0EQC6Ea`Wgj9i1ZeIDFMP~&@u6Ar2#ubP
zj*GIyQXaLDYtsAbOKAhs<qvgLT^IWX_ScN|eU*Esy@qjpj`P>Ot}RjrSRo*2N-pr!
zFfuJyo~nL-_+!Z@A=}@Dhh>{{A}x|wnqrUmt&;n!_H<;wvxqeLz@I{wKBF2js?Zbj
zq<L3Uipd>#&46&u`C~|(cXK3pH5K>a!y?rJ1SL`7b8e4ENGP7E{G+4eKFCn9vG)Lh
z1T>26Mr=>HxbRlGBkw~Htc{?@UMEntKTYf(&J;&QFbbgLe)2-G^F1bMxx<1;U46ar
zRJrlNxreWejt1bJI>82J_c^l#(jr%&<OB6Ik+3({XI4Y31X&GuY>)k1gE0V4>Ne7S
za^z_4867OPO||$5S`4LQLh9h9jrL!f)W?6{WM^kr0D(8?IhGQ%44mrp&CH&mV3Guv
zwOl>~^*m^5(9qEfKGS&tS#5hT`o&)3{#SJdTnY-TTvhsJ9^hC2P}MyUBq=B;fX+1H
zB;*yKYXJWtCME`SqNw!7g}o~Lpw&TeE&z^V54iR9^zor#V)|uI4D=8AN*PiX7PP-C
zI1ze&>(e=v=_thW93CEOSC}9J*{U(u`~_qbaGSO>Rp?4Whrx4xFBHB6W0LY9guD+!
z#2VV-Dp_$5!d<6jiDH9h5^y&_--Xp*OK7t;<>KMt`)6_`S~Ln!K+AxRhS-{dGGu0<
zcw=?d=y17<jR<3NyeN??oqW9L2(TEFrVA~8KsBpMHa$HJ7#36m@2%&dPHy}2<a>L2
z?yO5Cf59Z);7WgfpED-Fr?NS({uD?UF9>-t=KW~zn(p3lM%a(H?k!2b1##k9THYI{
zU02vbpRIBj0X!A(!EHta2&frQpRZZi79DIjzka%J5&nbliEf)MK2hxf!}2`*Bhbnm
zanWvZ4E#YoI-I1^@RuDPBm}9qvzfE(>6F$7ilsAF^Frbkz~FG<Yc`#KvKy?YH@jHs
zs`2z})9|eCXFn}9@;!UaN6XZL;*pCXkd2S%7uv|LZFx_oKHpaeL6)lg(I51stwVvf
zOK<!nCezc$l)yW{_R2Zys6!KQ&pOQzqv<go0N;~{%q2epI*!}Zx4V`Q#tiGf*;Z84
zyhER=0}w|vQ_>&4f9$@o3<3?-$KHNbM=qdLO!0d9yV2hv^Q^n=iQoNUc*g_Z^VD5h
zi<H5l!<UngEpcq4*7<t|51G<PK7h|C8`n@X{lHuhg01JVM{MqdI)%qpY^9Q*?i4>$
zU(5TnlwvB$7gs7CBC{CYL!E=4gRsH)89vMMsne>)4u8Ab;a+>rx-_0ibpijhju55H
z3XYx)Ma|Alpk|0_UfC~#2Yz4q+|$8^2akhTp!%RQjOBL9vouH3r`S{AF{@u<RJ6w`
zHT7?W26#nlK9Y^0RXC_BI*bSoPCu<2_vla^T_*A>&6zizG{8@>r+Hy5BYmclQ>QbL
z8OxoP@WZoiCeUXtX2zRtjs1k)jVb7F=;hY#I|OdD$aH<D2|;`07?jd}3pHBc5%Kg=
zcELzaK;sR;(AV`g8C-E|t@IvniOOzh^*2PDpG%Dt6lr*X(9WEx8v|F<PqXT)2@o46
z-Var^Rqc<m12qExBW~HL@or`=#z^*8_LYqR#n#OtFZC%pODA@Dlgz6!K(ljFJW2z6
z#AP8T6C^55!{_Tl6vK=Bc-#B$4_@-RLYL6jPR)O`Vq<p+rd0mkSb0FV`r{|dEs<|r
zKfg^ncA>MYfotdRb#fzX*^E~c3)w&!=x_l)1;lEAH~GXOSE^pjJ?UMBM0QTP=&3hm
zSu9A(8HLD{x3{J!m;SMD*Zu9$&YXnY?_If2d=t(GVj$xw!VhR#^=<w7EczpQm1UtG
zM?LQ=p%LjG_`Bjli~fFtpb0@TTdvg`)vErl`iM09HPFMzHe4~_&glU8v*g|FO>X1e
z$bQjH>x$E9w*Be+eyeWfF#oSdV4q052|@0#e6iHoD!@N`3y6k0SVDL;>r|_0K@rdz
zh;meFd>v?Ab_AaTB$nyLjzqC<9;Obmz%A1DP)-4C#mIzsB8{Pb%e-T7mc^x%ek?zL
z)H^CCuggEX`*#jP{HW5A%!H)N8ZVppu|!BSIDa3jw0f>ry~LGxVNZ_472Ty}d2|dq
z0gvA4;e75{m;VqHBY;}PUClQ8?w!V1)pN~|m^<0C%d_$29pecr?i_{QdY+twgu19`
zI(^$zIs+iMaF8y}JlW6gn$OJBNe2trcduN*5(B3w9yNDRD1bKK{<N^|?Y^vh9_Baa
zUcc3J|Bt7e)$1qHYXV;yggIm*es405JnuYpY8<G~`#p9eCsB)?*zzptufi?tw#oCq
z=A8cpX2l$!;WB4U3*5=&1WKcS8n5~!aPXg$D{RO3e~3x{_jo4%A1F5)N}fyrki}_3
z8vWoJ{w7%d4qxqaJ`j-{r1Z^FXnn+WiB;A#uHUM;5owM9QOtkzkVGso0XbVIa^H+2
ziHl_O`*;6yqJQIU&uy-T`dhiItp7*i)iGG9Pe8$hr4WK|qe!sgsLEgJ`x`&q9<#p-
z`$dAO!#flL_&_Z=-fno<%X1X+jat6jSr@kWcnIWdE<kkF*UxDoUAWbU?4JRvcEm2Z
zoI;VI2b`I`P#40ZWP=KV3*?~Nj|u_-fdp`&7d_F$e2%#ow+0V|hI!HUh4J3&MG^z7
zH&dFC6`=o_+}iAbH6;+j4ZO|J?@s0-hdezPINl`RigaVG>e40UaAJBB4p?oEnzQa@
z`jX-5T*8SA=2uti6htt&wQ~6oJp|=EubmiZSo)c!)9^zpCT5#Whu9|_Gl?-lCnE4H
zRVFmlNOOpeQ0QEN1c)$0L8v_kNEKnU<k$Lz$kK-MtNn^>2Sdn9Nqd&}=^{6R=a9dP
zXSl>em$q1t^)nJAFB&5uRs*t0v4;%#O;SuGB8ZDm%ZQ*hzmL)Wnn?>aDIvb|X2XCi
z=6y2WQj0+p_{kOZn{zXyF0@icdo8}jqPp*@S*s-L`Y>?=_v&ccNtI48-)TS`N`^Wa
zfl_H>i`=HmyzCcf?%4qWE)eW(vNiS^Y~RCmY+|$%O(Rf#LO}8P)=Np^t3o;IZ6i17
z<U@=wKVcFt5>7yp;O^))r}!sxAU{-60{v4Dsx+-qce#EeNo(fc_5U-MT-Y1$J_<(N
zmP>6BjKjD&`9`bnlb+F!iPoAPabY9~q)Ughh2J2eR;mU9i2&UO0QK0KDn)@+cG))%
zixtE6y&a)#@4=1!HBhj=EU8?SH9-DMP9NMThLSD$lz!-T-)uL5c)JV%k0P5}kTq&z
zL2w{E>1uN5@G7bS_NBp>ke8s)&cP=IMK}*&$xRTM#(X?_)MHQ2^8xBg=%P`CkS|d;
zJQ4M;*n2pm=Raax`7d1PhW>w^LlACIpvm=wm((6i=sIva1-H(Dl{ml9MF{}^u3uAn
zz!9sZW8NIAb+29?g-W8t4=QS^R$rFAQ0(8pNC=|Z;iw@jGog<>;14Z6eTY>4;WXnh
z&@ju$&_h5WWBh$8E4H`Le)2KUc{yG{`3H01<p)OhTKpLv4=uptXS!JhNN|vz$jL62
zs<sIqNY(!{u5SEp4G4%J<A03E6+qPwtSdNAo&^2;`8tAxyRe|c2Cvq<U7#+A5~02h
zL4EZ5w3U$kd$=g@E88}Im8$C_e{nmGt}-BWaJ0>JZK(3dtUy8ADF<x`1MR&k6(C8=
z@^>v19%18u^{{cEFL>~lBM5m7->r^R4gdd6iOZjxrvtllY#`d;I7xD}e2OA{wUk)2
zMmO=rhL9<)O+U9#i|OCZ_W&JPxltREe3}40(D^@r03n}A+dJe<phbQnJ;`U^AB+zn
z5E>>yz}_|<6fL*8IJfB!BldIKeXy&80SVviAhj|;$-%yoZ+lVKf7pG1<9pyJw`#rf
zEI>oPnUM$>u@7%+Y$LWZ+pk|x1F2|e#iLl<@n7Up;n~$XSH8llK!d@BkcG7Jn7558
zL^(C9|0dmi(Sr2jwx5JaKpldeiviYP)a3r7l1cWzYkG5t>giJmFmJWT)2n^@^yw`y
zrDYnn`YVuYX2+oWOb+qn{5PA!n+^TW{^^giNFP6WqN1&R5n2y~zcBaznnY~{TsPlh
zkqdCS5k)G_kKM!hmqMmH{x9ZGm&rdJ|J4Fe|L=E{{!boN_!6L|yLP54od9c;hqdP6
z0pJfabMtYV4B(er24e48I_gQlqkqZ6x(6h*oj^65B7o7LFm8##yPEnNQ0gRt?mOjI
zI^x}pl}ERmEr7{E*@r*esMSTlJTDYeFZ83|7#KtW9pY_iPYw)5xzv1f?mbkOyx>gH
zlq@PHTF>w|&j33b6>vwZ!2bXWA7Qox7EqVEec*2$&R3#*fQ&p2Pil1EZLhK(UEJ8v
z+V{L`Z5E9FxZQV-d|SfsQRQA}SXkdP=!1MdiOBoiRbMnmU)d>Sx!Zf7jDDCa@>y$c
z+B>~$nN=(uCUUUJk{Jt^S_zgqk>dJj@)V2RgxdP03K<dJgJ2}t_a@(F_OTlj3%?F7
zseh<=+>%kP{itw|--plV?rhppj5(<7Ezm_`wO(|w;w7r74MwT!=zJ_MXUm@`C@z+8
zb366x9Rg?-yTvae3<{x(^jf#WWl1zDu%B1Pyh~sz{{FYZ8*2s{8XDD&5jaQyaq9vw
zlrc}r($Z33rg*5yOqKO-_$f<nQ4Q8mDu2-SHuU-^vDKA6ErUeMbRc@oV5Xdry$v5=
zb^v$6YE>JZPn(_}N*ifgZVN(<NlAGGsdL%D@;=)^kCeI}5D?IGebjG{yRg><R3_z)
zOYJ-vT3T8wU}VpqE7adEOihIW2{o32+-^mXpxP7G5FA7|dwabh3ed8A@zGYwl~JH-
zQPI>yX*R&7dH|etV4{{z4&Q&#p8WkAA;bhrrVW4wKs}hm=R^(Uge%Z9ed@_c|6=xR
zVJPiDY1CY4giOw$l6yPD3qHOnW9bUF<8=k#jcebs(`EX6CGZCM?aYi0P*m46rhak0
zO$BbV#*VWtU=RdI`r3(iX-zh&9dKm<b)t5SEwQhk-|*O2Fv4ca$@v6W9GtCFpzs5r
zg$$gwb*GQap!RT}*-IC_JQM=%tC4*$VJtvlI<fTR9qJY^=8AfM5w*Be_1Re*92-lN
z%5IZmZFV)BS-&C4NDsL60z@P##E6UJ5EzrFftOLg!F8*g>&urf2jGCouO#-1e#2X&
zG)2_x;V@uuBLiAl&&|wG0j82Op|F;TVLqOQjEuS9>cYZ@fWz$=$&~{k10gNhJoN@Y
zKy88w@P2V)W2&>A>7Y-aaDJr;PTJo9eI}WJD;mHAzy;f8>s^d1v=4wa3%G7g0QwU4
z;X|8gv@mUnDZnX#vjtdRkpZPC{vM<4iIPy@moFqc3$2tuD56t>aF2=ss~-l+efPcD
z4<L^aVW0qM5kejs5)#7aeL}~;$cS*W3jJA)L&Lz3FfpM9&-WY5r%W8JG0<hYugSlD
zjj(w@ZEOGw9r5AG3zOBKF%X^7BmgPP#q9#UQaj+10ptoS885xO_z{NZzCPKU{CtG&
z^WMFCNrE2sDMfZb<@;Jj=9Pj1CWY53t~@9+Udlm492X(m+uL8qq3o7}Wb}Nx$paRM
zhX;OQ95Ev>#7S(%ND!m0kNCj+#sLtb5CA(F0m=W!B_L@#rYkL%c6TEI0^MQ7wanZ4
z2NM_(4mY!-sevNgSl`>nrvsQo>FLqI`GAW(5SYo^+uL`}^mTMd5Y{rQY8^8Ri)BEn
zztq=H>$tH1iB}&BHk{09`6(eG<nq#+Nv}?sp@(<DHz*<k1Go)Au3JQyxTUgVYAo4^
z%7Il5IIra_uU3|qb1Hqdwzl{H!~*Dh;6M!pCTf79Wh)T-`T4<C$2INkSrFq5{PpyH
z%?1u0QqwAwVAK)u)amBZ4WLZf#l;xF8hbHb=D${sb$omr10>Ux(-@W05x`v!u0$g!
zNIE_~?z#No1>Sk1o?nS}1=15*`Io?o4t8f~d^}!!eEiGoVI#oDCkeO}>U-Hhp$IrT
zJ~2@|f7G}yo*p5T1_ob*?BEsJJ>c~QfEyMNK7aR$Wo)dz5rncj+jTO~(1?3CJ*A^V
zQxZPK<KW~R25SPCIv_umIzkbQJq9VyuhO04jiH_fH~7vi3oC2lE<9>ENcGlzXDSeU
z=L5pdhXNr3-%tPof@(%>Lt>KS?hJRR-GlP|bMTBK0<ydM^a}O6)3LB<!1g0n(8GuC
zaFD<`6DOQb(o|t-AdDd99K=4b6z+o=7k6{x784go2&boS32|`V0t?_$bij4C>(>?_
zhL%qkA_nBfCuR@eyazftu&!{)$S}gYmdkgb{G<yywQuTqpmGYr2?+^QU|Fy>9Uws#
zfs+yl5?<-)k&TRw?sk6%ao7|DnUM=&p!kj;<sD=h06q^yHsa>y28Kgk5GcP+!gJ5u
zug>hinm`nmKojRMYEKq9yn7nJSkD!VGga$ASy)*38^l$h*#4C+OzP(5Hr4FI3v4&w
zD^T*}12v26Ty_u@U!zc8q_s1<lEU=89;aV0n67)17HKrN2-#;!$nwg{;biM=^<3S~
zH$&hprT|9i5gvdiK1-0?y)etg>sSTk4Gr*`dhE>xMn^~63iAur0OAEyx!t8g09Mrg
zZiWu|S@R;7=c}vj7M<djtH91owOmD6ZzM5v1_t&Jc~mr@Ni>A~W5a_6PxR|etu4==
z%-tV;b#PQW63qzb2bJ=?^Mx1i1p!1i2<YR0wopZ1pBZS}fIJV_&ixE@bY?8(8X5#D
zfOkOU%^P}PoCo9*!Z;t>5&(S0WO;vpTjwLdfziUdsF?`De+~`;X&@r_#KgtX1mk2C
z7RolA&--NM<w*fico@+Af9&o?`0VNF=@AM;AR7bPcmN4ER@s45fH(yNU|ihXAHW)@
zrr!XWtm}V>C(mFGk1D5`w&CzDU=_}B248jX2H|tpdBM%CA-h3&cM*DW1@g*Fyb~a-
zmO(5AVlgl^2>)yDce}X;jrfEFnKive_Y#D_QCL_XtYkf)(FEp#E|8vcoB_Biv%0<x
z#EIH1zV-1I1_tRs9Fq+O2Z%Ngfty9{)b;k-s{$-bdQo2cS>@t>fR4Ym)?p&3upFXr
z0zO?Hb2$YCd_dM!pVZF!+myHo>VQ)LT~F-xj7}6Fj$@LN=)h2cbAt61esbd4Xb0>r
zVZe~3HKPS0I6^B3?%RI0&R7e(x3?F87AqzUGtkq^%tS}god$xBQ~=dcqc`B2pNLhJ
zbmZmH7Bm4NkqNLVjqnuPiP^U@j!%LeAc^oDNCTNo!iejb{mRNpm+0LeB{2G@r>BUS
z1eY1l#Suf`S*b!^s_aU#=2{?9ROEgA`m$KJR&i`{5=aq$4h(>bM8@~#bkhCi2*By8
zw|4#Wm-}az4cQlqbO94YiD_xfj~_qI83Ob=Gx(+iePX>2=ryY|VXCcK(0ylX2D_op
zs!jf2#YyPv>!-Ns1WX#hs?UlL-;59~a`~Es6Cv4DF)%2dx&y&JS42}+mr=9KphSBQ
zgzLk3pMCV8HXvlps;W|Nx;cZ{^)3GFOJIb>PbOUC)kM}P<~MsYFf-!=xPC+cd=Y>N
zz~scx{#3}@Un?pp5oY*b7Q_d@c-*fqoWOSxPz76Amyz<=e%hXqwT~bWYq^6(Ey!9=
zbr&d!{E@)J$Nw-krjBr<SpO+3WT29OnWE~-vdglp7tlBAk*SgFr+tu)>SOK1{y%Cv
z?|&-)|BqivQdX3aS?_jMO2^2^2$_)_TO}hpDdX5HAz5jVku7_#I2>hWMaqd|W>g%<
zibLk-dFtKg5BLs0x*g|wUDx$`J?G<jx2|_eM365Arl+g4WJ>N9)-JS0n=+QN1BhV~
z;0tYSZH*V^YL0-HWhb@v7kh(tDK$M^nc{hPf^@YY&vCu2*U~COOi9c08IQn=h@|IZ
z$wYka0bIh6&O~+65W9g1td?qXsI8Fq@84q`4tI8SwLpKCm5YlWq0X$p>|PK=2Tdjt
zB_$>EJsP5y(RqL@p&E90a#IJ}{rnI{KIsFXjZlS#0{q=cvv-V4OqWztf*LRq;^L#B
zqWFuJmPcTGgKE~Ao10PXMh+`5y`l(nBKKBi&7gCnfqt0>cabroq@<KFf^#7SZLY7R
z0ZN2R@?LU7jbRt>w6nC#*6R2w98pM*{2|;)ki4&GtX=p8oH#Mx6XN8W#Wq0%0rm<t
znWU0$9zTAdlBNLNm<*YNjC9%NCv*~pdauGN?*o7W_3LSFJ9N2)%&HGuY{w{rZjHI!
zO5=7NbX+v=n*r_Pm4Eo-$4{qa!FhtG@ubYqbUTtF3<fCPHV~lnV9Mbf1!QKP2va!%
z5;|Kn3#1(l>vMIH5C~N3s~l7JM*M~_mk8dIKVqMQei;_LL;4k!SAZb~oUe<Z;PkwW
z3eW7k2;7q^5GBFvO)?~r7$OE97i{vf5oimE0TcrfM#qVozClDqMZt1G>UmL2$I*&~
znHig13z5h_&>sR%j2II&JnvA?4cLGt{On0N!}gi?@GcjC{{Rt98pzS0LB%|tSt|Ap
zrB#JW{X92G^t7~0yAx+Orsla&4Tr0w@(|JI&)ET$;27Aoo|mj_Y&#%vDJePIza;_C
zm^&kQK8T)MK%98SW68G3k&~0t5+Vm+;KV=IK_}@}ejDju{iexNt_8<N&kkqTTtavd
z5Rf4bV^hUgvT;Y;c?OV3D;Ap9{+>J&wnW2dkeSdEo-|om*=rg3&zq@3Y2YV80ho%%
zn^(7afd)a}z#tX21dKuH5Bhjo#+i0py^5`pd@Vk_b9y`~ZLt#HHg!@2paH52Z_?p|
zSXW7@RB;Z&?1SI^qFwJACf!&DCeedk45K7cuAvT}Y{kyS<!tLgd+$3_ZN+Ct-8#5r
z+=_B2ua#$4v$L|)P|P`GoO&_IXXb?CjE(G#@bK^^Kq5RzN{WPVoLX@KPy^QE0(loo
zwLQzI1#5KpVZ$7Za6tm^&w4~9IXim~h!slOjr+BO)>h^s0a{QV9}FsP{z`|D=FWHt
zAgV-yxcwyE-hstmtE;22Hi^1}c;ecX90oMO6>IWgM&g)pK0$;G#i$FLG7o#mo&>MG
zhZ9bZCo2RzdHVDL_>~JoDtz9@V<_;tsLT+kpQNUy?ttS6bg>VF7@#IV@)88&T>!Tl
zhd$rxr=+c0U$*!rad<pGB-w9s3-Np5&_L*Y!Hc4i?M0X~#fWl;t6<I019e3F?2lWQ
z?P1$O1@CQdF8V%1W7qC~>VG+Uhll3*04`2^(pkT5_vi8<0!E|rof8E8P=LAuX)T1l
z8<fhrU56}YBYd(Wh0){jM3mhzw2r#>r~cv&-8ch9de{jX3%4o-Ez5+f!~p<u#mFcG
zYAG<pBI`-HNbf&Cf3IeBER?Emg*i15(>H#*7&x*{>v-NFUDN8H9D8~0c3abts>R&S
z?b^nj8Dyd!PeZhjQIB;hW~hJ{-AsX51O9W?9rspiiEH}PCggCw56!wZ>v1kp=ReDA
zjcSg(2sQgKd%|(3Yi)#hfP*6yVtFpHo3zI@Us5+bBK+#Zt+VAuaxyZ!=mJv(E30G3
zDEPHM18r9|ZD3>=5~8fnwoXn?U#F(_SXfv9Q3$bh-+u#(t#A%hjnK|4Z8w2K=1dvB
zSuDA%=m+-%5dhd}S_D{7A}{jG!Sz$KMsQSFOER|husP_u7xNTg&JZjud}|1VvtI`s
z>UMQIHs=%-6?IlaArjIe8bn+|;)t*?6Ubh!b@*y(GQtRA2smqGdU(cKP+FQe%a}Vz
zlYn`3p>$+|sA~_Oy9D0~@eNH`LcUX(fS{mYhSlQFpC9}B=zV>+QOozn8uuuxs$LLE
za}l5s7F8^f`+f@$Mu89~QKQ?e+}xerCGu3NN=Jug%(`D1)?Rktc4wur9jX1+*%U}b
zpb`Pdu|T+O!9p;Oz|e_`jXgDa1PD5vot=<_&%*;a<y%3thm7GCM22b_8qe^hvvd5i
z9-~xy;|SNwS^TPLQJL{MNHu~tg!&HQ;YSfo>{r<KPY~5WpNwCd7MwaafD-;P{Gvyn
znD`=hq56C|2CeP6=`hn*tfsE62s;r{?^MHCxSlBlazq1n_bUC}5RI3h0}?VSItnUu
zRbhGLv3QJp6i++EaaJrhHPqG97uMlSJT2&8=0P#S0-~7J3(ar@YqJb7<4&%_F+pUk
zzrdOrh>L_c7^v-hNHdhA3vTlT<eOp!?Ak;)TTBnm(X6jM6|Cd7v+S;|j=9f#MNUMI
zdw`Fxor>0@mcziprTg3v=Pq{ouFb_5<eAe&AckI5_wM}ok|xXEL47=JaN(IAul|7R
zi<>c}>mjBq&uZ(5;CA5<4tS$rL=+cX2CJoxLsClv&eBst6Gb-~iY!~0fm`u*wj&+5
zK~&BH1gxo5RaC8j8x)}iI@<yMb8q53Yo1Xl9mpA=G@t-lt3>y22LZA5kCfCw=~vnw
zY9_Z4Qg1FN?3H5cPHw7Ld-`*BA52F>x<ehoh70z(Oh6tDLo!F8UI#B1e0n{IJJL;#
z<bluu(!Z#L1jc-WQ1e<3shSr#Wn~BAQ5ay))PogG=PZFNdEffVTno5Mq^yRvo)XAH
z=wcR-3xjbX1c8dcms!7q92`NAJ6eLPg(+bdw;;XCpu2zpsYfs{EC2%PlFA(AOP6i{
z2kCuVTm78xwrBq)A<p!IoiNBw0HM|l!V*a6z<{zW!NKi3+70yuYGDPW-_)Z8*5>ju
zb>KG7qRxEH6KGe=?Y6j1h@35fg@c)P2ZupT&S5TVH>A{%_`-6INJ|?}pZGxWC%8!3
z6MmN*!L#<{tJr1d7X}5<QS(<Qu|Y8g{G@}EU>7)@CjfnbQ2rv&+91qVH8kV`v<JK|
zIuNQuzOPiB(aEk(zElvt1oAYhdj+N&Bhb2Pg^r#+y%)lnz8d#)An#A9uFEBp@=uk2
zh04rPpjf<ra=2##U+x*Q#}RW>MrN>JWB}i&oL$?Vkqx6W1&t)a=L$0^a<~F$XC&{9
z`VHAQPEsh8W+0Rm!(MT7b2|ic1jI-xX$syASfXn&Wb^hJJ06!t(3?_&8hD2LczK2R
zoKJ^af$1@<^*B$3%;7laXoS(1Q4Yh5&srZQCm)j8T>6Cgfkbv3QVK&HRv7Aibj-Yu
zV5K-gC3VZPI59<$aKNqIvauO|rX%NHSXj7p@`{-mAC*0oZ@>T<TJ2EPa&Z7TjoYq8
z{QR#HVTg#GtZE$0EC3heWav}=xiQ((MRYvjypH4YQBD#Z!HT;>kD(SlG~2lW;{U>0
z3O9uKRJG3(Y7*9x2I&b@ncifsmGzn@=uO)@S_Z{YUW?1M@yVZRQm|PoFr9J4%14pJ
zQv(XD?4x~7Y>J?Aw!d%@mJ^JEr884g|ADdgn;@YP$@hf;JUDD&0`m9(C+r-Q$mG^%
z&P^H7|KnP8`_u7`1gX*nmL+I{O7DnFk`7K<7Jj$%3FMR~hm4=b#|y5Do|-st-~eJP
z72pHdi_9-4rt_e-qkHvgL+fb>Yh|y<_nSP(cA{?Ot<81d0)B;1WtyTd2+vovZi5Ys
z*FHrmnFT()B37v^&jN82^`oym6qw<6A2;8cJowXgelNTb{V&eQQ6u3mMaX3AZ&P8A
z?ZjWaZ?xoJAZ2Cae;d@twEyxdh426EU*8S+FV0efpGA6SLATJR_L|up-etr|@lShp
zg`x2O{#yUL<-5!LV3au-M6~9uwN*CImBm--hTdoO;o=?(i2b<rWA@AK+`vC19E@{Y
zZ2t!*x|%3AhNfPv9-G@$t~7}EjwQqMg`ym?#7zaO$UhzK?mZ5B<gl%enoJhcTkV{I
zn8Q5t_=lVv;x{&ZTxj@duw_gb-_zm1dg+b2fF|ZT`?Cy<-d?pzJ^!L;s;2b!6Y^3$
zItH%GD{L%hT};Qz?W^Nww_W*F!}KNUn!YG5pFE<UOcFQ;c8|MBynPlmuHqihFxSE1
z|MORQ35mb8pxH9FAbH!O<jnj?so3~t?&{*AS<}+zKCjojr=+HjPbh8s?1`<MAo>4Z
z^ADdX{Yu)*2`=4F*LBP9Xa(##C8fg1v~YiQlTgauS1Ha$(wn=kcq=BN<2W+vOU4B<
z1iGxw9ZTV2n_)sEW6+^>0@dNVDR}z%k5x6~uzKlL_nZsp;+08y<z4Po2^_HhsKhzx
z-iOOx3eZu<UPr@Sb<g4?Y*yaIm#!no>n*fMkK>$rdnI<-j;T3t{f0`JJR$MqCEaWL
z6?ZHnNLp){Jh>`l=H~t#Ue1raegwBB?t6=CJ=W)%!nQRm9Tqz8l+d+d%)4R3es&8*
z>timjDI~zO(!lA<b!gN3D2}_m?xepF{i-Kvez*qDMfkG&nu~SVMwf=$?H;8!#@6+d
zZ2N~ja#(y8isXGNg#}uiX2)^|xf_#2RO>ZZ-xu08#_taOc!%{&T!*1}#f4}s@-D;;
zwMEA)%;P6wF5QpWaq$CY|8So#gR7SC3EC}6`>@;C4PX7<Sh2NNyfu==CwhL`7h@IV
zm*!@(eKLPP5#7w*?BjWSlXW^V<8|Lwb|D){v9${eXxI6qI=k2ze0A==w6*n{?LPq)
zTFElf{6g=XU$n`6(F269Bni5PPf7t-(f0FG{f|)t@*W=_eQ(BA#^+T;o0&#Ru!TNZ
z{C<-57b(g;m%nb<dFPZbA0u)mPRQ+RF+cs{mm`HWG|$lA$G)|t^euXEMUzDu8)?ku
zJ6=X}YW(sf-J360`%%XIQg}zh$cJ|ux<lOq77j752T@vD95p4S2+ln0qFOTl3m0om
zi}+9l;1~941nXJu{}#d6XkkskS3dp?El$<WxT<B?@^I~@Yc&m=m=vQmK7ez5qaE+;
z_nu!-YFdp<AHYOA<R_=HW)}8dZ$07OWAkNBe00QSmr~{~?QewZEpzq0eJU>n3ZBOy
z$e!;^kP2<hFLiH_a1{e+(nS?^ANk3{w43&NQh9|e`~siZ;WA>!as;b?O{dS*dsdiE
z=3|N^6KFZn5?}L`nu_S(c4;s$`K7kKM(sDK!dMUHHIS!|Z;Wi8DlsDL<P6o~;+zdW
z<SR=@=Z-V|L+G7Opl;ld;LVRs8oAR_1QBy%nT5gum}Z~1I>=_ex25llJgy6y$y4N(
zuvk~mditl7y)BX$-qo<3IBY^Woog`eW)>Tn@~JIz8;AL2$jbRZwPCZnTj&f~pekq4
zZs@hjPGy;i!2E3vf^}?;bm?Q^-`j(=yf=H8O-8(NcSxZ!(K{NOLFX&4A66zvaah;#
zI#$xj5M#$Jq*isOEIx0?+YQy~8{WnTWy-iUA1yV+J=dGUh1Clr25c^8-F5qUU5q>4
z<aNM73BEe-m8dPe+ub{^GRq&&PYj|iC;6IO3C@(Sjv&%8e3R{A;?WsW2q~T%`FU$N
zM|JuI?hzm4a31sBx365=Zcy&AJ)0Kq(5{gnq?nAqJQSLp*ZgoTrMvsl_AmTiq`OZj
zecK)+T<|lIqwNyNj=W}BXo(mJ91m|aIazR5(RkJj*Lp1pku~Tfg-$6E&CQ0^T%=wz
z-CcK2x+v?lWSoFE2#Dki9AnuN$hE1>%s)NmPgCpjhMh8bnI+|OUzjS|T%}8d-%Y4z
zK_dnk?d*Ri`IH>WDc7m$pTa8VA)M;r{?(!M!PoB@O{2rZZmxGNWHvv#h?~%Y;pqG6
zNV`$%LN@OW<6(U?a#!$eMJc=F>NMh2R3u<NXzn+P$a-KG{DKE3O%5jVb04imA--yF
zLMAN+gOK@|m$Q%f`nD!we_Ktp2o?GiiuSchrcF}p6=WZes#I;FAW0IJD6E7z7hx{`
zPi_|f$Y55}8+v&#rtdmzeVtcG&OhD$pt~wR-L|nF+LW0eG@P{2{^OZ{yqnVR`qxQ*
x)Y<(%bi+|GL0~YE>(u`d@cUZ-FJ69IV6JM<)rmJ8ShyB)`I5GBf#UTC{{gxWOp^cr

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/prometheus-local.png b/assets/documentation/1.27.0-rc1/images/prometheus-local.png
new file mode 100644
index 0000000000000000000000000000000000000000..e689f7e3f0fd2abcc9723a80cc2a599a6e03e93e
GIT binary patch
literal 125996
zcmeFZWmH_v5;htLPH=a3hv4q+?(Pl&26szvcY=iw+}+)RyC)3p9wfPw_q?(5ovi!k
zu66%>teG{<-n+Z2tE#K3s-NDGN(zz)aJX>Ko;^d5mJ(BW_6(xt*)wn`7%0#cq11P8
zpFIOJwH6gsk`@&uR&sH)u(mUQ_KZ5-Ev{X*R|&me(XLR1jE5^C!mNr|tEdliwXmEx
zNK^-7mO<K<_Ud!ISYZ=aL}D<8WhxIB@7~+sJ1m%>U{Wqv1w;`{hVu>y`%(Z=?B!>t
z(=C@kL}}A9VsPpdd^)zwq*P4};3iuONj@~m3)`@9)DJw040rQ4E~ms!?F75pTl^#f
zP2XHl1lDj5;o1lvj~z>uI4toBiLOkcYVn04P)jorKex%RI!>wdg=fj<DsmkP7;<=F
zveA6P`y@bCX&#vyLFV<wvB9aj%Gl?)t1;E3s0eZz>|RugG#qt0F3$uC?o-6H>^C+v
z+p$6=C{akvd1F$f@ONn2%;?ne1NaoUX+j}dc`qU1I<HUhINC2*n1SGdHZwE(P`j;l
zJH9h`+~8gw0kyX8w3jE$AvNn3C^2%2tlwTvU9L+68ezQG<UeiS@w~<b3O>_JR-BtL
z#ql1kzyNVw!(2<+LSFtEEvO9h3@qIG83d>V2KwTHzR#XLPY8Pk4f;g|eZ}5_|F{cL
z^Y;0VGWd7tJrh<Hm6itms+zi(n>)B#Ilj6iZB7I=wP3BL^-4=#j>pu|p3&IM(Zrk)
zVDI$3$}>Iy52$Ew{>qpbU~lK($^+mh{pSfDQ2G01CQ{;m9(iTUPpT!aL@es)VouD#
z$jr!0DgZ}JOw8wEX2GK(Ch>1|(0}}-R<B+;@h~xYcz7^+urWHiSTeD2b8|B>vof)=
zGJu|7aP@R}Wei|&a3%XsBR|>^Gj}z0v37c8?dU-Ky<KAyN4Hn}q@>?F`uX=CI?Vyr
zzj|_T{dZWP0Wy8R!^FbK%=EKuP*uL~S9z4I0p@nvV%GK`_JH~jU}xdt`{()p<Ib-h
zf2*nWt0oI8GwbhFf4lYHRn=Y1T|^!2L4Cdw_$8WuEB}7;-->)p--rGiEB?dhf3AWU
zEda;I^iya8aESiT6+tuinY5U&8UXAl8#)WEA8U}PozUrO-TSm1p7d=1T!acFy12M_
znZJ0Mme4+}x{#RHY5VQEH@6p)BsXHrx5u5us$q&|^3-jYGjAUej#jqX+6{)(FTi%r
zb3$4)T-dm0|N8^M6?g}>F6bT$Ar<hyKQF=HwA+yXcJ~tm=(h8xm(_{nLg4@NgI)tb
z_*?INu;A!5pZcs#sHFeWJGI$4E-@JD|NKOtK~S6ZN6z#qB>ZJ`N<*L6|3VfyG8GJY
z6k5C4udcyUx_ZNrfG2CMF1sHIVBz7>eEiNfg}ZK23CMmUA)*!HQwdWhlIgUsS}Ycm
zfm}wF?!ub;8iS)pvAf3o2YuewPqhD1>=YTm`HiE$uKeNlbTk@|vo0W+&(lRZg+85J
zCTWOj13@pSSLAoLDZUKEhSyenNkEAILtp`-;9FZ;E>HJvkwk(Wg)+%9sFZ~TjiOqs
zzYlE_1N?DdA0x^x<X<u72!L}suFsNcI5{!%SLJlfOpsCj97UiONtfAabx<}h#ec2^
zHpxHxQiZGmqeyR9h#j%=YSH_5rW>NXl}xD|s?q=FVjxvYSF<e&tK$QKcDtaQf}tnz
zf`hnJ2KqULWDA5!ffTB>7EijF6oz*v##*a~qQgc911u_e96F7PRV9sM?h6=g=>&3P
zuDr(X8vftADTXkikkk+p3&|OW88&({U!?M5*{K}(O8W8Xy9#wBN)jJ+3=zRQj)c@V
z7CFs}sT2cHhf`_d3l#_zD>nS7B|nCb)~p%3oY^(iRm6*|m!+zp-b+vPY;cF%lbrLc
zBaqOUk0dSI(o$1P#YL^@y5AgW3riVK7fQF!k*|>a<PWG2Xa#$xKh%SD6!;uk#>(pb
z)yW#~GNM;$*J}*AtI7f3XzD^Iv3IF{gXlkcfA$Kw2^E)wD5it5v4?cK)}o|P>|<Ze
zSEIBeo)XlYjTj{p4WD|(cs0f}vGP_bLHSM+Yt?~N0sCMIb=K2~6I&(8p6gQ0%7eng
zJ3QMl;s}VNrCQ4ce@7CRZZ>%1fD+Z>`O37fRj!}<V29J$sQigp6(BZ#pEi#oU6pyE
zsf_vwV9%k3`rlv`NkrrNaSNGJ;jo&;B~mGl++QCSiG;!#JgF})LjPMgM-Kd~??7ND
zgIpG05z0e`itaX4dd84(qzDfwAK&R-4Yp9Xm-tJoEzds7O@`0K1Ut?w&7x(FHgXc9
zUenw5DnbDtt9_)9vd1r%w#K8#O&_zk3%)_^j%R94zmvD68HM~^z^D;)5Rd3*#6e6G
zzV}yChHnoSDw!(VZ!!#VFc@^y&iV<s`8n(s-*%oo)IVRv`DY3UWl;n;^-Q*+jI`25
zKej)nTxB_plbV<-Bno+3ZV^B^!>=eK0-4r)-lqDxogvo{tEG$6n;J%<QKek%&&cNR
zdDgv8rqg6>b~{YT67*lE?(z7OBvpt<QZoWxce(qU<I-Nj40c;eruHk9G9g;6s<-I0
zYEnHtJ!YQ=qIuBCG<bTl|6^?WaKNRGVzRVgs6wdbH%3L>HsDL}wF{CK<_b^t&4mVy
zo?<2-=e)2-^7sy-wVh=vK7^cgFo$4DSi+ErRg{%!*V@FIX&#6zP&Ow1uwHzWXTVg$
zk*(fvqRO-G1W%$JbE2cy@(DshXlKoF^^O|?`x~8|Hz77_E%h(0CW$oyH#PTBDP;C&
zdO=gYjK9yMUUZfFKTH!sORKb?5;O7G?!#q1eRo19R<`9>G{;@t@p#%YyYFUj7K5)%
zHtQuiCgM3eno5&LzwX9K9K-gmxf=Wv@gnTMEP`PMcS>sVdumbiHeV0-T*~BqI_>;s
zwmlTTZkJ#mAFu#>r#7_Q;#T?shgEDsX|dVWvc#ahWdW%x5vtaFl(I-Rb>0|zkIcd#
zKmI?%4B!VZy$#=Af{kBX8;XQvqT3#=vDEt3yo@O7Ioo>_W)&{+Yat1g+ng;?<!O9H
zd>ije29`_VZCGm&9filK5SRP8ym39DClnqU{a7xY71n||B(C0dSK&A>nM^V!;DC(x
zKNA!A0YX9F^DW;8)Zqrx+gFyPt|sDPNIVAwe6>m^tM$-c8ojKZsH0Kx9{3o$UOzM=
zkSZd8Wf*55U07IHrPe}zf3_sih!k_N#qH4S@$TGZZ<3@NyH3B=9kUq8E?81cN-Dza
zW0v-Eoi*9@!Cb8@^f3}4pO)gi$_F)?FOQcKZnR+N2CeSpU9E6iF=>xQ=A$VozQq1+
zoqkVd6FK}X{?WMX2@UouBaWR<l%uIkSYz%{S@VM59&1l>*RowHVEahHay`xDvw76L
z`L^D{yhIt@jK;}yQY8~U0U4;MIUlNjjTd~NEp4Ov!S?y~{qYdKCeCbGNJW}5;`P|I
ze#t27&$Y%mu`3uFX?sRda4xa*@vIkVxy1BjwK>I!KZ>{W=|-1EyQUB`kyiZ!dAry3
zw1HAyULHsc$+YTblW&Dp%5~Vk>=)<ahtV_Yx2S=bLYeDx5qY%HY54WaE)fF4=%Qpg
ztNE*pTo>TTu*ZfkmG|w*+zK=zKK1u?0EJ9q2;|vN%@ix9g4PFHVFdFxSWJxV-na82
zI;(u}N7so8U6zE}O3C3!M2u{fACopWjY^dAM7pZ^JWjIk`2b3EpNBHVf2_*7;MOXA
znxylh6cXZJZ(Nl_;af~3xMxLu>qLJ%f(odCHOgljqkiE?IfnnD)oCjTq%`7j4wfKs
zB`_HZv`5*eMU`n)n<P*xlOD^ndtR6wTLo%|<$9lRr!yM|y_GK<sAk`O%P~)8IUi3Z
z`3gl$(m20%!O&mdpHb;;fZa-id{u|lRKAXxY#MXkYKO1x8*}8b7s1dt7uF{4OmSf$
zXu)!QOT%o*X7yL&3M8TvFz7TO(4RNioGez0ZWJnIqu5COAXgWBX@)Y6Y`52q)WeRg
z2hx5tUGS6#r()EYpyvfrE_|xp2Li*i*5Q@YjZQ~c`!jL>MaqBu1-@|zViOA4lrd71
zKyi>UhEzZ|Ha6DTuEB_;)vTb`t}%-T31c__?0KPft;KY{IQ;&4d#gkw45@bti73>l
zO_XJ{cH|WF(Tv?9)qJnO-RAQr{bw`*8Jv!c{$IZo7gaPPrb-hl!QROY^?->&4#+2v
zio+4)@>+h(3fOeI+EXS#dV$em(*HUEq#FTySiHjj%x7c(#0M+|(oy$tX<(2v`BOnv
zPwu;oINsYM|B}A@bsOFnKxM}-In2Vm9n3!3?sI35IGr7o@)@&pwDgicEW#!fm>j)3
z$U7@_5|U$tIxQoYPT0#*Emq8JusOdw|LpR4071Lcuia?u@#%Ks(1R-kU;<i3V_EZX
z?gKiyFLuW1zOOqZp~$rsV`(HX{x8Skoh<Bjd13oFz;fZVxwxo1iF~i(5t*|1y&L4R
zxRhIE2Id3F46wIC?oeX^+aPN+sG-?p_>Y|k<PzF!o*p*)mhO~X_muO>7Q4{fN67c&
zaTg<d=;=YD#9X^lF31C5;-+$l^x>E}NwS@6_f)nWwF4zq@0vP{YJND8>RPTx;(hQ5
z`L`dkM?J#@3qb&pr|kFb$%BECglTTE+7!~W(&((Cr$suEav0=$n9rAK^NgK=7TtTt
zIucU-PCtEb8P92!C|8f;<swL0Qz96KJ}+{Ya6srwp|b-CD>6Uy;2|hcLTmCo&JH#}
zjsH9em?7Gkb_~7iAj^tKEFphg=5~$w=v8I+P@ehNvJvB9sW~5VTo>Yj$Hn%r+ebzZ
zzy2Hb&PB%mtS?4rLs^s^Z7S@|UGRse75jyv$4M8r7fOL?*Y|OwUhX2~?ve`hAq2Q#
zF6?i};}Ji|wd&B2FG_OPoE;w2+b(P$%#{vQ6twli!?U3q%h*54WP*$hwRuy}k1&LI
z2O>@fI&wOm44w_FCotb;?!$Dwt>zk+3mci4(^wkI1!(f^?-hBhdrHO)!m(kC*xiHd
zn45OUQ@5TxnNgBxM(*u~zu`bM9u;V*CaQ`<@332{Y2m+uuf;Uc5WQ-2SZh%!Rv>6c
zU?V4u^cjpHFyEWZTlSW9-1H|$7J~Rh6FBH+7lOnSsg3PKCcGxD(gM=xJ0qr>Owjah
zjgcKly}baA%6{sLJjUAA`FH84B0+XHEF7JrOL(cww?D%XUABrv`Fv+BN!A^;lPn84
zM+>>yE2{mSF77Oi7V7;ZG;U`D>1jX6Ut=(sfXN-iQneE`K!nl13+3`SSv7!VczNN7
zZJ1#ncTV<WhF?RRiK6mlGmF0E4_-)aham}}>}lHq1jdO=3K|)IqfvbqH7zIwG1S=4
zQrliT;1(#<RVjjrcn6AXbUX*-XKF1KJ6XD3AT*({K+<%q&iotPbrFE4ijoyR?Af}|
z(TfP!rpQn@E7Bh#h3z}_95#|&m4*HAc%U_xlg^XRFz8DX`duwG36uM=)B*Y=FTo50
z&Wmui5YlL1P0&O@b8P&eo~dZ4K2SR{-Ep*FreEgg`U5HuqMo(J0gVN<qyH7TN%k|o
z+OJvwRm!q<hR|Bd1fKpxsSdfwqzH`f-u-(^PBD|aV9VYjw`lYWi}oae>%JPuAhVOR
zkstu1BK>0md^Id7=6XBMv_EhJgCS+<fnuq_@KNrE_4p@VS|>#=4xw-2f)ardeS6ib
ziv{+t-|rOrzk(Xv<mYtXgBsCLbPhGxPi%!3#`MN7*V;WV-(l9o-GZySw&LM#j%;uP
ze2oRA;A9ndtrTE5f4X#_umun;l!aQ;=00l|@l&-2AU2aBgBvx8A1Bd2KR0>)J6pgM
ziEsQE5dklci2oIMTmTz5$Pe+tbtF&d^f&C+pZ+5p?;3>IiwBx^+2#BQ{mj6TtKzH#
z=;`GWs1z$MT}TS!33U`Nw0Eojb;3Zdn9vc*+c*sGqh`y06&FAXLtKn$K_RhD52JJU
zxY->{^=T1+{5xrZ;=~dnm>utXe9lWtdF@+O=k*^u>{iw~s`&mT74UGH(75s$hxGSQ
z3d|5SB0df{8dGimZ(sjsJkN|~RO7*h!1z1oeoq@f(1Q{UVBR*1EPrc)4fKEouHLU8
z_YV?KVYEQG2JoBND%0Ob^n2L?^uXB5ra#r?*8|8^pmYP|QHk;3AKd>faWMvZAl=$2
z{fC%;yY;;au@S7&5Zt0_Z_F<#{BZsMGt@ND1FSQftUu)b=iNA=E>w`ns*1z@$VdFn
zOJ=mUapv#3&HuuqzyJzlCgJI~;b1Gg?oodsGXR1RMM|qoi>2rHmj5UR22gcP_5=uu
z|5DNaBJ~*zDEH#_dxGNkGAQ?=H1ry+I5M03Pa*y6<!xNQ?SHZF=fA`X$RIXQDWLI6
z|1q<FiAsp%&BA{Z^n<5DS;RslbP8FN?g@WmfCy&gU&ta3<Pr`L(a7SGKO+Cp;D2`%
zN^kJTeEy9raOa?Bp=Dgo8H>_?k<j;K8`R(Q>;LCu8!D6+(@e1}6(rm?T3fMfszxVt
zu{2p;qX=-iXw>D)1x7RAOHCG+vx<m9b_&RIhq@=J_WynKzn2M-VWddtT;D~hlv*H^
z=-0NO)5mQ9dwD!g+UO1Ibu`NK7@&~|+?xsE|CZc?5C{ZNjH)AIW4+Vkc9jZuw=a~a
zr$uEl;0wRnbOYM)(w+!9DM`c-(&;uhcq}4v{%%fwFZU6EgOQj)LP8E79<L0+N9QEo
zoo5#xFIU?(;wzD=kM1xvi+O&2$H2Nbk>_%Mg_Al`i~JYi3mKt0Rp5Tfn@Fb9h>I76
zmYvzf6Q?uLZ}w6bc*-v>l#1^G=BSq`DTIAvQOf9Ce5u34n2KjE{5NgrM2o1$*M>nj
znyjd=bC{bp548T+28l{Y$f#MN=LW9^ay@{@jM+tM!>AXZnS8fDX16-bSsMSPxxhs#
zWI94^<m#68%al6LYm8KJ`nSt%=9!cYUdJue+dU_1Z#3S1&?!oIyn1R(cxgRNeck-i
zANx7~{!<{Xg6(@9cYQ#|P#6hE@oIt5pslbJU%*8z2A|(T-FJJ#ltMb8Pvh{&m)f8#
z;_-Bb&;i!!W_gR}FT{a;`|b{eW~oaZ5oTw1ItkA^u9~SIeSLaJnRt^zUrSHK1(4FH
z)W)-qVJHCSt6gqzF!$N!{hJ{0i8nP#==7KCE|vz@C_3O6qCO^2$x<5nJ!N-2z+s-B
z<*hb(&ZyY$Utpl3pyUZErgMm%tRvLgxtizMA8Hn<MSiM4H^=!4v4PLNH(&YyeJXRH
zR-z|x6fV=2!D1W3=znv>oxQjA-Ul=tmYQuF-;NE8>jIar4_&^DV3@krog&W&?4Jjc
z%MSQxPxYAm#mvAw1NTF#v6*|%2+|{`FL4t&yp^L4i*?$ar_1eBGHdoL9&i^HYd+g0
z^%lqX)aF^`Ls>M5b&e~`+9(b`<A|Te^gjg{WN_H0so1_qG}%;60}orx75AfA;FhPG
zaHM*v8X~<eFA6HDWGqo*Sq`iHyO$1&La5|YM%q|wJ#XZ5Qng)ohWBSI^XU%ej=5_r
z6DvFJ<Y?9DD_7R4SX8RmPPgx)@mxUJRP6?nWV@A)-nPh52h=XP^rwff`Ico-5dh*`
zpY!C^rgJW}x$zyXtp8<ui7{dB#D{FIR%;VzOeIp0khX&0u^6h8HY&u*<!OB;=ZOWf
zd9Jkrc--#m#&oNsavZO+?3KfF(J1ApkJUQL);q7<v<9&7x_XhTCp$cs-2KmRgD2<8
z9|mc$7WG%gACJJnV6^LPG#ZoSFp^%2q=Z6Y{SRA9?0|gcX=Myb^Az=uj<4oddu;e|
z`+X`b`k3bY8Q2{RoiZ`dv*fx9QHz&xoO_Pe$Jd(YnOOkjskf0Dh{D0QM~t{eZh=C&
zlLubOU?M-k)+t00u*=Pt>wPe+x1EQnJE<1@-4y;T8xU{0#+F?GM_^o(n@va6sk4{j
z_SSONnq3!U&O~sw$8;Kv3ufPI%o$*`9wNV9eBWJral7d3-uPe&v_0n0aesc!1Pc6B
zi2VgT>&;zZ;ozoMMp7BbI=?OJu6x}+m(^wzLzPNpEGJhaq`82EEFw?gk{~u8L02i0
zLZMO4Z=yG>o@Ui8Y44?0uL&ts%vAsmz$Zt?y6i2{-M*|GjT2}`r;bxpDH&#0c_&2z
zN-MaWPg6Yk^dUWKbliZI;seZow{5rfyC2tDCIV-t#72TSC1Z}jJND<`6GQbtR?wB-
zb*D@hEe2xRnZLw$_`}y2i_sK$MY!h^4wiy06f#LtGNqPps8848;#6Hue9Uqb6c^8M
zfUxYKaP{Y01SK8yhCb-FrX03=s!dCsoyhcm9#j;gX|TE0X$+x%snqB`u7y@ZN=j-r
zvF@ue7`S}{Q;E;%m;XXJN2~ue=G025S_OG1JVw$JG@?%OE;MSyD8y@YMtbwnr1@|q
zT~8@Oes?`5!^K*@W>@Kyv2>ut`_s^}m)0t!jD3kp^-Pw*M&3_R(QappW#8lohEv#W
zlh!OXpL=Nm08RAz9U^QoD%2^Og$fwtke9m)?Oa77gCrf0uZtA2WpFv(Gj&@BmA61B
zmnsE<Uno6^!Zg_n^cG4d9<2Hxoop;Dl&PB|3G~(5P6vx#>3rWWk{$lk@8%tjNPxMW
z{mSePtk9>q#>+Jb;@p(n?8_w%a1YS*!}SNLbB-Cf00M)U0qN%jH%$^y(otTa)UZLH
z{Snu}miKtf$x3(N#<jstdyc758QQ-A`1pjw*YS9-TRJ(CF;~ic40YjWKAzEUjZNB?
zx_KQcoKl=Z>1NYCnqDNGC~@Yput@=}*fBd&(6<nFh|WFQHLibYDR_J>e;K`lzgUW8
zbqI$Mh0ZitDF%xstpL16T}fdPg#w~1iFk{rsN|RgI+P@Fs$QmMXh&)xm!Czo<yp9g
zPJ##TN(bLx7m9q5nkW_$tPt8WtnvzD_peS*j&R#OA)tuTYlNvdPuh%3_bgojJYOhR
zl{FNtY+q&_2uEG07{(@I#{1LW@j|Q;HLqCrP0@xJHPMOT*MBw!zW0?pL@~g2Kg}Um
zuBB)(rFe~T{csdoafP%_Gl-u0_~qi@Q#zYun9VzRJbKaa7fBGb=;tvq;2WQ7ze(>d
ztjO{M<H1g9cRwb6yMCOndDG^3DRrp9P-L*Stnmrt1f|yBE_8mAPl{75W&l<jwZ?L;
z`zf}(^3&hM37eFR5ZdH7oyY&;x(IW8jDnvfvF_hkI$NeJKV2kWy29(pD%S8J9V`5i
zn_k9%%`}|Lkcq>Vlp(W|+S6qhGeoP$VXcF~cA-4Ab1*7#&HDzopCS}49hdzGiNc4x
z4!6z!#@S<kv7?;vcK@5#i14*+8-Fi3#Kdel18^h><qBs@Ba_21KDl&ZD9M`b71!%_
zuag@z`%Qzrjay6h*=Q=Pq*UqDinSy5a>ya!r~5q@WMUpSPbwMitLFX7=pv~tk(5;j
z%ZcpN_K{M@kt>{<?@NyxxF@98!rP?yty&2|cno@E3cJO{ok|bA6-+iJT@9#t5dxt4
zYi5zfC+J)A>kPO1WzGwDk-ZOk&H3A-iIS<p?^*eDo(~^Nd(c1oMyEvFX>_B%2&B_A
zJD)ap0m^L0QX|)rz@;#%i)=KC!(plAXlGv4A_JW#4n3IkM4gW_W}!cR`@@EJjY9a)
zngP{Ggidh9P#m#E0u%U9mG$hI6i-$wFt5G2`K?B<npe<i5)MO?XjE-jhWEy9+r4C(
zYvQ-G2Y5cW4_`)amof>c23Ly>(2jcFzuMnsr*LAoy$C|>@G7Y)NKUbDcmUb<y`Y7_
zB~~*jrfl8@&8^r_V0iAskf1+O?5C1sHcQ0r(kxs)51&i>W~Z(EW>^NDr>ovZ@KZ=#
z*?7KYxYQ4HQlHj=*$y@4hwl31=@*p2o5r?#Yz9?z-Sfsm5=)p&ozw)&^&A2R9)J>K
z3(>aC>;?Z#<kI82XU^kme))ua3m3p>bkca;!Fb_-mm}sK*-Ia=Z=Tk99ks=HE(hpk
zR{P*hBn0P9r>fIV$5)v&Q^t3hj||dK-zG{`=y8LbGjg8BL^}J$lt2#x2nCq73S7Qq
zR9fYpY#xafWHu$i1`CYwRHjO^@r3@p7<$#)vn?`7hTQ6Bm1X_1DbgP-gn0(h=1H<#
zyYu_C>TH{+PS)TX@iZctCAQaH(7|mgh4p&5Dm_k`QVZZoQE$+6x3Xa{*z8U~?yJ{f
z%DFNKJEQ4|qe`s-sUBh60|86nn6v7#xk)06qlv|5d|<Ouk@V*Ha4}h6z#T_1hau+v
zX#Z*RJ%7cIeGbqLZE<LTVkmuxZL=**=y_OwEY|+`X9eAKR>+gF&?R}}*i<INYHuwI
z6!>68^4>6#^Cyq?j+zgbXIrApUe_5nO{^S7lgqcM>(hCzSWDHejn&HsYsl4`=kB6F
zJYhfV-pwL*?`87O1vgRwn(<$FhT{1%AJ4`YE(TUkbw-TA2=y9BG4G)(=|p{kmCn3#
zbBpZ5Ik)?U6J0bB^0)Rw10mbIUWjfm8n%=P8mQ-`-;B|lboYWUz_-=B2$o#1PA;&#
znB5<seL9gAEXR%L4!^%X(23M)oHg>=`1%~2ghlgXR*U(IsFu!e75K`e0|)hoCRLo@
z)It}N6g}a3oCr6aHA^MjfaYmJ-o(p0F|PA;fYKydZ9Uiz;uOgv9?uQ2BRGo{a#MQ4
zW3@u*dqqFOOs&0dJA<P=71@ph?>tAN9Ck%GpfM($ZiRgaxkYuE*~-Xex6C<#8qrYV
zb|Y@tTJC0lr3?EKgmRcgQ`o$}PQ@6yl>%z;uGZLlqoa)OLH7|yXpbky!QXgZZclIZ
zBX8nz+P&pxpUC1bjk$bxa|f>ybQUNYZnj^8(E^KaJB->-5scbNBE_$CtgpPwusury
z9B-PFnPqKk^f>hc_G>G9B3sN777jVOvyzJ;;&W|Jin4X^<f_xE&w>MV`Z-BI<uSq|
z$&T3_D)zd<V4gFJ<eGXvtaq5EqSljMwt#lz^k35<8InJRQQ^PH(JnXi6=$k6sMX-_
z6}hURlXEWbR-Id7PiHbT7>#{VYcVmm(6QcK@C~^__p`Fr{bT5xzB^vjnL}*PA}69I
z)653D<naRx&9Q9DHwC7zziXiW9~u}B(!jDLFXnwhjWG#K)!?dl843jV1!gOFu~N;(
zm}Dha*6pNT2gI+Y@8vSNWf}QVU6>ai??)%fM{e<$wU7o-RMJ>Xp*)+lRXq>K6<S_E
zu_L!<u=~&1DA_nX%aQp!pg6ge2?@WQDhPFr25?Ka-`=af*quaKHhnHKKPd<$<G>CR
zmaIa;g<SMv>f(z8LU~((Mv3rxrSF4nHJq_ez1qboQRkD+Lg3)^=2zb$>q`wDuv>U0
z@ty2+Uf0(YZD*}Sel-yYI|56Lr;E+99S7I#>qrg!w|2h!Ux1c2RoMII^E>q#8X_sh
zPcKDU?QTy`ECGc$?ozO9j-9uGh=+YVFl+^3U-QHnd?Xgl^pI;n+XdyWCV3NF@5m%$
z_whwxQbUVVcttS9kYJ!Kf+LjFC=!_Ts@@{jvtOK2Xs(NebtzRU*t=p7FxqBL;@v`y
zkiouukweGy(&2sL$4t5c{fO6RF&T|UdC33^#@%uA7d7MD{mjZCY_0B3EgcnGQ!vJ(
zXQaW{;mC@?Z|w2T)<39$dDfGP0;>piVNEy;hBjV0c9XtYNNVQiqZ$)r+|+)fO<V1E
zaFw3I%zr5`zQ8*_7)zvhDUt7=CfHvFkHshzbF_5LGW*^@ojEU}oC-JO`;xTZvDFE3
z#w3lctK`4#;e4i5t;1SlkK9d}63BTtNPVGJtHnCwp5>j!Sz#&~=b}FL+LjcPtNGGS
z*wY(x=AqjlQ}5?KmJqli9oX$!$|`ZF;p`gw*hgp*TFS6h;k%%dihkAL8X>ljX5Z_6
zsuTy3x&dYCNx^Rlad~7C*3QofH38j+5QMy8!bZ64J4AsIkfISAM55ukupHPCrUB*?
zo8>_qo7WJ*9(_pd{?)WCPUk8FDdAOQi=ON-kK30_4CcfN7z`>y7tQ*anhc}ZS$>a8
zshG~N58X%68$KH=Dp2{+rNNZ46q%3!m-bs>q*1>r90R!L&`-uRuv_CW%6%h?d&Na;
zHr+?g;T;BTfZ-Z$^6jJ-Uu@HWwFQ@!G|0s8p-HK#h5WMys!bLmA|h9`FmEdq(3R?>
zjNe3H_zCJw95g%6SOBllXzoQKY|iZ3sYxoK!ZPzX>p8Ixx^%6UUMFji;<hCbSK)pc
zWTtyd@_x0&R~8-{nPrm(CRphWvyMMDr5$sQN29s`w`R``b7UVV9K-h#jg)!e|JWye
zyym79I%G@~&(^Y){#9xBD3}T_WYFnaE~vWzfiU&v1u16J$!fc<r}xRU^t3W!<P#nT
zK*QT(snkPp?OW^ZNisXF<a!C4CB68W9vg(^s0<M!_5zAKm@zu3NBxK7`hfT1WV{ao
zg*nkp7RWme*aDwJ^+HaV`&|WFY^N8)c~93{Vn{56-@g86qT1K9AuRgJ?aHC@8;ftl
zqV3FgRnYxI703e9Xe6ePRe4^ogc%-`mV)(MB$uvL*s1|ELXAAla$YSK5NK=m5I>A7
zRO)IBXc`b{Coc&5VVpo1PuK;2!+$3VK7JSl41H6u(<1zlyq6h(%XO#txnR!w)bM_U
zZG;W76Sw!^gVzAl@lMcX@?dDW{d&u|&0GzTu1w(ba|ou89vl)L2~<D`M20K*H6GXE
zi4gvl9szINOta-AAyoXKx`?@={X4k!YEFy?atxWpr(g%3ER-C^ehmL3s)l=OfsV^v
zCas>Ax#hP}3Q~@UhM5AO5M!fSRTG4|X=t_)Vl0+R7xA1D4+|mH<_|%{=BstteLW@}
zvh;$}ZWZ7D8(mWD3wx2hg-6IYZd`fFuz9bsqeyQxgy+@=<aMLu?+FNHW-P{P0F=hS
zug{^ceJxh~i`CLfJo5vOD7!5}y)<x)P2Pv6Ki|rO$%6+^Y~;Hr<FUUFh%@SC<c8rL
z=vs^KP8^zVwW`lx?mAiujU?Fgg<L7>5sa5wXAYSp@xg&&fk#ta#Qk`@T{46IS<2b_
za=!ecCIb?=`SYfD5~rdA0i|sPw1ev|(`*pl{OM}FF7Vvjz_q_UokdlG+x@7i`SnCf
z^(iPuv}IyFf*{oa#cbE`J%kk-Qn5V+DW(vbZD+mDAe_f=tvkY2&2iV*_lLW^FL^k=
z8gSjmlW>UBR|)5cE7DU=U`jq*Zu>dSVlMpJ3+bAX>M9n|c!j8ahK<Yd$uZmXUBt!M
zPz9g;X8&BrxGgQcO*@5He>PfhU^R)Eu~V4gG)eyE!g&gVLCwfMdePb*4}MY5tw!7B
zP39B_ht-fF>%}Px;wS+ZfNO+9l)5X7f26kCy~{?ei|OkF65%Wfx>mT^?v35)*C%BS
zvRuUFP-5uX1*9xn7?w2dDZ2(jd~7>4dc$?SzM81+3S$u1gB6qCixX*j93i0B8u-PS
z+~Z>cMeRDi?$gU#gy-VhR6)Xzy3F1!3S+TiGrCD>FnJg6bD?f_{5)Ht`W6SG9FW0Y
z1XCfmeb_7yW<}0%dg5Y@C>Tx@4+}oo@Sl|F6CnU}1z?F$cn5v-OST+?sdTMFTDjhe
z<wLFR5c>M)q5z9?Mkpo-icc!<6Xk%hUYo8c@DH5fM@zghulA>HoDs~AmySFyld<#)
zcX1nn+qIp#c_LKNs1*D2h3?q!aw_LOsLkJYE(K5NS(KnQBA~z@#`hw@?i<?O2QgaU
zWke+}Qnd|?xnC`^yrI&Q02+U0B7yhSYPN|6K?M{HWsw7-Y_alEkQvTJa=JV(v6|3T
za8=(~Fy=6NKk&GdTl6<X0BLg51a$F_7ZM-3m38$Lf9+l<g0M|++EPA8V`ruJ3>a{i
zvKxLaX&*E5`HYzN`T~4QWps`zjB&3}WR8}Kq3Xh8@s-#4J>1aF(D&}=@f0#!T~|E)
zvo&tEBtpOt@V+z>znV<P$@AG^-N`bwsP57m(2@|b+XfF@!qYPG1pv&jQBnxBLvXuV
zZ5r6_j5&lgUkvA(njn|rFR3TLT}Q5oVy&K2H2nr35^$+YqS2S>Ji{T8N5Gq1VDbrz
zV0WFzm;K6C25-jZ{fUH}u{OhPig~p$G6+>#hC+qp5f*lZ00#o0chfU@{-a%y#9lV{
z*!+9fFC*%vQ$P=xZQw}qlnE4{EeMUl00NE7i3~bp7+8@{yEk`Zql<}n_ih3$Y-1s@
zRv6-QKQEPqrRJ79!31Khi^JT~mtVv|79(g7Iz%S#nrx3ESKDVy6Op)x?$y@AV=?JK
zIITRun^&*R$K=8&=WAoMFDpys+7meX4X~jz0nCJtCdwe(LU{0+OHe7~sH4@UeE^af
zqW;I%B$RT;^}EA7hI)eyCK_)ev~1_gRSlYAPcd{2x~-?RzJA47F}b&6S!U_<_7Y56
z`F)R$@A!Mfi32;BE$p!LNRgarRejSD)XLw}WP-{X1{T6^d+x%P-M6&PVVWJ!IdXS2
zal3Jk^tz_?aO4uK*|WiZ!&*9uut@18-Pk%VHWxP=*#g3dkl9r@#T9WX&VA_8w26rV
zzRwW{9%wRoK;@sVocdB%*4vOUad-+Ny&YfKs=g6!^e7a4;J6sjJ+)C3ySx$7ng3F$
zrj>3iRd+f>4B$qqvAeV~*C4Tsq1T=^!<-N<h$3SWH*IbA*!B&UL=icNLxQiRC&l41
zz@SS?eUr*K{HbUZlC-W80i1)cI?k1*KC-0R5Jrj3qGUIJKS$yY3w64;r-$@%4F`C9
zF0|gG!~Ve<iMt@H^fZsQaM2)BE8G@W(5O&>0KJHNOvc96L+y(Y^A%o>6`&j0E6T}^
zd{i;*S*`F+jK<JwSk-n_rpMjV!$suUN%6}Xtd=8ZG^!*R8>XyPtFw2gA<;xGQEoYW
zx<~ql65fE@D?jGO-}g8H%imFmJ(cZKI3gPv?UP!RikT?-%CU{6N?;Sodq*K~)~^wI
zu{Nem2fvstVE38CL5`+!R?hftbJ}-)3QT=HGeBThx2E_cAy0m!Oh^E&er4kwtY--{
zZ5hvedTG&7yHNbr%Hm#(^c1CFU{5phQ~#^!hZ=KP+j9s)R_1L2+(HX?p9W=B?^c)y
zw@^3?r)Huif6WR%zR@Ck@fR-;cs&GIHRI2h0E6_-$UbMU9o|~cMxH!%b&I-O?XeIr
zX0k~lQoJz7H09t4Vdn77i_chd&6gyZo;qG}=k0l7r6YmQ5jmrLxmyzCF^7YJYS}=p
zPF9Ig*6PLJ6<fzzBm)W?kq<WKBAkSo#R*v@!vut}8?P^VctVVNL_~>lMJ12>=Dh%!
zIJZE1U_BloAz=~S*}zJjXDMo}&A$EFEXYymdD+tNxdeyMemoxgwDgcm34&f1@x<q*
zzm}q61L@?<RQqTC74;0`ySV~cp*c^}D6oct;JwL;=rYwDtzwX);E2~oA#i-2XRg6y
zd3?I&-?g;E)r|1m8-}o|hZZTFO_bEGS80OC0#6_Wj2M*;I-|cX*Ww()Q<FI@P&2$7
zIGnxWp4>YzbQy|e5ijPQ>%S~&V70208a{}2;YH%8@fN4&@nUz>a(~_|*=QrD(dha>
zouU<vE@W3mAXyh-xZ-$8ToneFPtNX=HxF?+z{x}a>1Nr*jbJ&r>s%>v5*hp~2&lrQ
zKmT4s+<S-EQFGu0PMu~^>9Lp2Nz(|Gc?1<qr9=*k?$(eMo^kJh8GM>E%9juMwOQP*
zTCc~Hx$DOSRfu6**m}PV2$1-tGuS&-0h^Cr-&QnN2&SU&EJ}@+!Mu@s)j5B1Ql5*V
z97?_-!(wc+f+>(W!P$n&LRP+XlwB;;8Z-Wc5Mpk~r~B#t2^nTL)c05VGVrcLEWohB
z<3q`OL9N+vg3JVyz#O+`KHcHT4U+nM^{+l3`Qs-kQB&}YNl#A5;zlcVo&b~TRYHEw
zNx^Vz;JD9?@sUu?9(v;(2l%>t3rxeQ^9=W(#e%2Ez9vN5YVK)fE*Lm3@`q@7u9z$<
z!XQ|n6g?Jb-;6!=v6u|-dWS7tHaO~(8Xjsgs7Dr+^9vBae&T)=qOQK30w*?F-bX09
zI=~-(>8~ETxzxeo;Kiq#$DNyU%<?_>J_(f!8zhlTu@~{!jy{-dsDI_x-u}|FBi`OE
zRe(%0b;-c5y5yD0tsE~qOXyZ;=<(SBpWkC)kyS#WH2r9Y-eL)ayy?7Tgj%$E4y8AD
zA+ZyOa*m0V5@N60@oStMRchPJhmyLB`PUy0W-Idg#R~8%u65Xnyq(i?!6ed!JSF{@
z$WOvCX!Ir%?ABKW@nh42+m*DoX@fWIwB*v44H9>lHO7*x8q7v6%ayu=cGSJNCo4Wv
z6GQ<qI=mYCfDa@oim)EPEzKDLiu^TI;TWa!FnkdCY!UKo#R^sT>f9|nQ}*G|P=3zt
z{lu$jp-`F!eW9$fDdm%d)@R^BzMy1m;KIlO`{C8O$uo`9be;=?1;&(K;fkvILk=y0
z2N$q0%kgw7f|bU())MW444)#g@!W?;hjeMg9<|%sje1<_lQqj@eoI984<9U)GGCf!
zXtol}_=#8rrGemii%(CtbrAt^<k&Iimx=-^Te`9BpT?jAT41(BxL?Q!s+tSl?WvYN
z6vd28nPQ7=uX*3%5IsLwqnF`EQ(+#ZKusr$=jgc!n&rJ%Tx1*5h=3(!o-zI`fiU|b
z`vI7MI^?vLN~fx`TP?!x!8eOMV6BzI*SsAf^C?FAkeQd{BOc%DxT7}VC(Al4><})1
z5r!IfyHS(H$Gfi4*}cRsPoQ108ez}+`BGiUN{I@_Z6ZGR$0lNW%zVs{gCknu=5x7_
zvwH2&-e!}t$+1co?e2qx($e<Nn_v(VJTQq<+AVeaYVXZW`ANVIgslSKL$%_$Yt}|r
zL@zGKJRpLbuk(4n`dVrsk2^{Nw2wMOYaVve?=hX^6CM~&BuP10Z+^Jrp{;aD>^4Ov
z*~npbbC)-0x?B8=u#1z=(3aob>a)a(dA>N!Qjcu4P~GepSabBoQdX~n2prf}Mf7t&
zPLUIAK`jTHS*O~i{?+mH(ui%hvg^RJ(J6Psirhw{c&5zQ`UcTCBaB)RznM$_79=CS
zvs(ckSaztU{psSw*%B4)>(lV{&c*TPrs_j)h@if)sCn|B*N`v!mT039kTzOw_$BjF
zsX4NV<W;R4kBm;ZON^@0hI~YpviT5Kx8eUJotnwx8-^+<(muVCc7s;yfg^$m^-c9F
zUNP#I)5##osr*oeErS~#coMs<Pequq`OECKLl@$%<^`yv$RcW5z^oqPC1$y_XYPR(
zAgpOEc}Zu1*fZ}Ox*Y-0y&z;rq<j(DE4RxO`<?L=VErMdl`z<sytqk%=N`Jj0j;9?
zycM`1gxf=byYS0)?|Vjx%cAiFg~QW?eZs3?0*8*qt?FVAvGP+pUz8EAFO(U`!+Y#`
zM4H4K_c!=<IfG&kxiK`p#S|8Qfwz3Sai&Pey)zR>$I#t~L4a3K@kmUy;(SqYkZ)2T
zUd7N~c|@b$ki3?7?RZ`ofO>XT!(P=@Z*{{QEUB3X9{-7w59(Z}#U~WdGrPnN+iicl
z-mcPSr94;ues{Q`@-9kg7-Uk9uh}>jzI<8=`W!iWD{7a6bdvdNpINADS7hEEILB=H
zRm6IW*lffHcU_Z^avkwBlg+fIPcxXwvO&_b;>a8P(iCSfDjk0-Z>rhU+cepTgK`BY
zof+m(&?*Agth_GiauEE2%=hYim(}KuDCG=mn}bfjMl5Nqw|DaiNie2{&_Exw?NYuV
zT2`uCoZ?5I<e6;33jfYilI57n;vIeAMH0>+q;j#&+{lhT3?JjBv-t!R!WY?zFpV~B
zs1LLytvulqw5Qm*yk1vnS5LkH#|Hs-QB{Jbl;dOvdY>{}Ey59r{K(Bp0yoHz2+49&
zxc52Q6fl|e-}UnW3JNvB?YH%b6yMae-W*Nk=P6V1J)XbF*}6U6jS$I{ogE8qN@1>D
z7rma4nvG?ykX9`&A>U=MYt$-)`KClPf<Tca@^-Z}gx()7C-)3JNYjKenTjSIb$JZx
zlo-YUkJCPqR0B`$g~X268FNOXQ#{4D)RCb=j=`C&x24IPwrf1~Zi`v`DQA2ld!}<E
z$#v8b?kFFi9f>1+0i0ud&jmI#4MH0*^FG41O~hI5b?oCWr(E7xM)Uw;G?YlX)6mJ(
zX~$~r?oQ#-x<_rE!sK0UvfNC3AMK@!{OGB*h&Ku*djL9jmmwv!wy1+I6m>(T-l)d!
z3S97oX7LmyT;?W^V9;5;gxVEqk8z`FKg)HF4#2CxvvmLV^|@~>8N}>n@WqLMuF~K-
z8{DDs$tqGj`<>u#Ad&!ve^5m+_`XXH=btP?HbGnWYTis-whgw8Cn<%)A4i&N?Wfw(
zr{J`|0~+j>TGp~HO!Y9iW4{uxsWiIEdP=I5t4|zrY!NW~-@N3f4tl22ETN{{yK031
zESakI#iJ?Z*BjFnd&5sA5k3E0?-En<w%Wbl<hc5oalZ0QsvAs7GXec)fb(iq<GQEe
zy#3<))aY->8JF{!*=l~dyGhWw^=Yox2kiW{pYI|Q8A!q<_&*bPcB~)GcFVvVOxI@$
zZ~&spbeqKtgZDnyMrTS4Uz^sk0lFMj+HEkN&S#jsMts-<ICbUjBf-v6bA9uB?PuO0
zG`xhLAOPG8aedi6-CDkcB*~e030PNwf=9kv_pdCSRqYYR#Bi|Wco7$eR_@ptsDsSr
z=)IhRA`_04P~H0g6RfO=U?6oi5NHPm2FV7Ifw1CiKqSF8YwS`%uE@D?3uL{I#t%VW
zCe|@Z=}yB9(a;M=hB`ZPF&i?)N@A5lS}h(=D|#c0ET&LRCv)XIhc~ADP~A*87~5$J
zNC{bkpW((VI7F&I3nBTW{c44BxT91q+E>g&K0k}3A(Uo9Qj_ob^DjIcF}%p@{Jsr*
z!?&WuSy(rLKc@fYKItYF3B1%wgF_J-BX2Jro(Lu%n!vXYskILL&MQH|GkcT7FT_~h
z_t?cZ1Ya)lS&@TJWU#*>JfoCL6B@sF|CqODwxaj~hDDbMBK+;!Bp%I#+U^E>Uk`!7
z!rVoqo=s-zmSQpbF>uSr*QYi_PCneO+mk`yJ*nXP_$^*9=x?`Ct2mwfU1C!tCBQ$z
zp7}X_4A=d2d=G@Z7C>Tn$-`zmt>!7=882k!WOhc_#WeqwbsHV$eNTN3N3aK)L7>eU
zA=kTvOmCAjxl4DzhXTL8!d$DF8Pk{d!K;QaZ;Jj0vb1YPq{~qRvrQrHRhwaMZe3#(
ze^=+t*N^Kqx#f5q7mmQ=OD@4T6YhOs-^tmeAw$j+VKANo3VV-KojK*IfVUClOruTo
z{sh*Z!Gd*$V&b+tKH1177nhWuPwhVh28XX+;ESv$xR|r_YF~vt${AkY3rIA(=5N5u
zeh1ri%}5hlPm?E58<P_79LmJJD^5g>y|*Umdf2k&p5asY8C>`ypJhs>I5U6y$|((p
zMgQJn?t@vG%Uw+R-VQ^RLfvsy)p8uKrUK6Sf{~^86~}hS{r<uRwTZawYsl~Wz+G(M
zQuLM6QQjKq^-`O#WT5t8dGq-2f3zQ{MS;Ar;XQa{-0r`Bs6t3)y2GXUpjB=Iw0c8I
za`Ua@tA>au!9)XwJsJJ)kk#MIn;zhPST#-|jp`yNiXD42t?sAJUR}wwDXBJ$0EfJI
zJDZeN4F&`E<@Hc_tfGg(T-l+L8HG{j9{~Q}!H3_=LYpX3aWu9!2Gvsx<o<>=cA@0*
z8EPOv3i<h`{x{PIWu<B*LHJxwN*{B0iOgH8!Aa+1H+&iPr;FG$#635ftl#*o*QSEb
zHj<2RRQw7fegS5_4<5z`+)wew0ZF<9wIBF&yPg69O)js{qtN0zk1xBiI({YPcG`>6
z1G(_uadKZScN0Nq5b1)j37G`Y`G)y+zt3Th>~@9pdTmME)kmnGWPWh;&u${{Aizb2
zz(0h*qRD*T%}M4c*Ogx0G%CIV9ik+!My)vVbjHD8k)5yGX9IRds%~3Yy|2zV{poW3
zSHU?+s0&6LN-zX>zC>LVmrqymH5S7swKCR&v<=0uER}UlS+njQ3K!sk`X%LGvEzNl
z;9yi{>DupPGc`t%7(uWJjJPY>Z|d80<q*)tQwAEKjpBIORHjkTX+_}TIa-bV10v`!
z#ovH*fD0Iiy147@tsRvAG2Q-w0|R7;JBl&1|9-0eQ93{*MbO&S@XrA|!ioz2co)F0
z>>wcs)eU6f(fAu!`iu$$8~$22?)z7A<UqX*?rFvUFo*wz<?PA@A=keoa@>ml>hur7
zHd#PD5Eht<|8JoagZYDy=|IKhRjl8Z(%*s60fV3(JfmVTewn;KY4{66e$n%PnE;Z=
z|2q=`0Z7STT*Ln=2+(;HkpM#N93@kNzsa)mySjO7uaf*tmQ>$mDH84W2kz!KaXu=5
z)NLc)HT(}9`ptsofB^jeh3Wf)m@{6Gy7@_dB={Tl8#D%y6slRR@V_ba>34-D;P#OE
zr9giWvk438;r}w>|1yF6{|ik(^->wm=0PGQ-9D>E=Jx)Yuh-!v3ff^lRB)3{d0A2j
zuRx*AY99CK=^_<$H@m(HKGdTK0k$rw*k`>h3_8|>4AaWQYSKOw^hBzw7@5_4Vz5y2
z4wEKRzfjmXULjdL;qGxI#QVwA8U%XkBJQ%3H_C#(34#ERewK?6=q~Ze!2c7!+D<9x
zJsYl?8WkI~B|$1O6-Vh5x;s&X#|Kx<@GhTbxtpEY)NC{u>4p<2uHO@AkOnqM1>7p@
z@!1}+!9p+wsxF9SL?bV~gP?cR!lAH|KP6A#kLJ`d#RJV7MK~}%+YCgkCBJ1}Nj09#
zp{S2O^MG(lU6Q~>vaVB->cOwl%e50BWf2kKHC8~c;T(zrbh@Moy0II4F4E$U266Z7
zbh02ob=x#09!a1OW!D3B+yvr-1h{jo(B1QR+NU-u6C4O)i}D8{a%FH+gzqn>$guzi
z%&Q$T)ll@cqK^QPwJ!y7+1HCk=B2v)A@2D5{L6B$_`lF&Z%$Sxq9(D1E{M@*!N8a-
zIIg4C=~EjrHcpIh^-6B9w|ggW%UVd|;UCp~1^Hv3!z!`~eBv&{*`rUs-1e){(V(}h
z)R^tF>KEwD(W0WGZ%f#J!@RaI1YwxyJd!01*V{ZFy^+Bh8im?oD-1gsL5Gc<Bh^4B
ztI0vH5@Ae^wkA=m6jVIyuj^Elee!*{8I4S&qEH=(Qh6t5or?JIJria+s6b=TmPW3S
zwOGVMzl|GceAvchVmxtnBC?`i+B%QqT0&OLG|cZ)8$FOfDNXKKQyBd&>6YVE(AhvC
zr<D?C=3UY>WD;EjJf`2bK>8IIt<*9V(nbgh#ZMv(n4T&y0GDw-nn4F|d;lRpx35QF
zawqYo?EI>EYxHn@Mj*T0NAx5tR5qt<-;N2kQNY{94g{ww7vQ$pD1Tl{^C-macf{u-
z@ftWxADNqA7zBRqJ#?+>0UQ%waG~EGN|I2ayqwr@SFGe#JR!=Io!OF<^u3t(-EkUp
z=K!4o=W*c^lK}<YmZ>bdp~(FN-iTi0X6+X`x(o`ws|BrXE7uIg1USr2RZ#@Dl}XeF
zdKME|2X$pkoCeJ<>Md<g73=*`)`>;0N)kF&^`n+=Gz^glc<2#u+ljHqVhGvwY!*J?
z6!`T6M*;yv<2h`K9d|XwvRcqr5Aqotp6f+5EDYQG*Sps3X*ajlC4yc@f~;RVBUM1S
zXB>W&{<J0|BEPHZu{3Vo@2=lWv4Tq;)SD(5qirZn*%m`Ydv8*+`X`Gly*78cWde~t
zoyCnW8z)wH&IMh9myJUq6e~p<={~HFmzsJXJg;{MJd01!_1#Be2@1`=mNCwm=1~O)
zP%VrlI&Uk-22EtVm%}grm+y%J1Ojf-Ij1ag#2=&X@{?!jvlpgFBwN=LO=}k{9dCvW
z9;OJTUP5}k$fBuTIEq(+tQpxR;t^B5A6~?dm<aQ<y&cx<-D!rnyS>dExtx35tj6&!
zl&^h<ui0PkxU^ls^HRXIo``z4c5HvaF~lniZFC8Ycmi|zUB5jz=;&~~7Xt47!U4N&
zIpWSyv#U;DkBlb2e;F<yNC4vAH;Gsn-1+Op64?$c&nO?dE;vasDcXlDm#NE%1_1$H
z?}0_SZ*^rW-XA?A5272;-q(S}7{H>jI!t+3o;r_uByo!Oo`_!C9#@#gaykt=Lga+F
zZbt70l5MVAtxUN>9eycu7F+*v@0#jpg92ZqckST3ZZg&gC6XI9p;MV#tnZ(V4-8N+
zREykBf`qH2Cb;T`b6o9=X#qwzWb@-yF$hrQyb0RKyiKot=yx9!xE$)Cx9wmxY&b3z
zsMWUxKWhlu#W(^T?bg66)hwmm@V%^GRcF)dxH3^KwO3q$HZ(Y7vFFW0t&YK8zOBnf
zC9EWZd0c()P8aZf$9E}55PQ3Gg!9?CKv77140W6Cjr9sq!v_j|!w);9C)N5`u$zw0
z{q#fEnlN@u7%(p>1F5#~`>s4Uqb%iCc4`N3^d}nC8Pat-PG*Hp*5Om%vA^+NkHfMB
z4UbU|c5Y%8aGt;8@ikADEWOz)c9te{<BcT2qJ00=S2y=pAi9Ku?rQ!Y_TDlst|e;s
zJRt-LPJ$=6L(l-hU4jO8mk#c3!6mpmAwY0<X*{?D_XdKy)6k8~&de+4z4x5?Fu(bD
zzct;k*}bc3)vBuX{2%{&(70Q-ts9C5(2Q=K3nxn;v6SPO+jK-dn!gI$^q1!<@j<*m
zz^986=|*_5l^84R)f2;bLN-1>5m7EcS$p(pMHrv-*`MVj?s^@q!$fpl&QDD-g-oRF
zEWC4gqsUPrkyyYRqOE*Q>r73@Mbu|PBw1Y%KNV_RbCn03E(@fK4H-dWIZVs$M{&Mz
zESb=&eHYRSDU94i06ipWc?@u9YJGmnrgOUIkn7RP?TjMCQnhn{#$Ok<w=rRo@=;sQ
zSEe=`&Y>nfGA1+0&6Xw?0+krBI`GXpDxgc^(?_oRove<U#-v_KzCE1MpsD9}45^4Q
zP6jTo>8*svq$44lL{AY-B3RTre5B!2>oiE_kJ^Kbk@?=U6yRy-1LAtR3Ij_DKwJ{P
z2FJoyKH_sb`j(!}?`|L!^@ir)+g1>CEfK(K4FQ!*TU`M`fZEy4vtgD=rPK^{b;~W8
z+N;*;@>e`n!aHmHl20A&H%GDw)K(@!hPh;$gt<5F%a>t@>r9#zDHXa+A766iiPe0U
z+`h&<K2o&!Yoa~9Zg=ox)q4v#rscErKutz$x658S$Z*W^f0oE~FX&Z%q%m&`DDc!O
z8+7=TROgtr^@QF+T7}M577AgVHj7S+?dD}>%D%<<PEs2!0eYX>W(7n0b`&z(zrne8
zavgD<I3!9-c7wrhfYWZJc=1TdJE!de(IA+{fb;op$vgLZMAsE>>i1VEYQ>)ntkkN0
zTq@AW-`>XC3(>7Yjv1LWDic~R@lg`)pm*1FM7$UFt1Kt)yc1d0?|57f-s|tIx<gU`
zV1@2=F9cb>vBqe_WU<;f|BaBB+Hevh4VSeVz;|KP#WSonivL|N`SSH3>pR`|O-n$D
zi=%e6QQnT{@e&t<PC<AQlcp50(0rE)ODiZ!neF|1HSS^%YEGW_&2geh={o^oCiQY`
z^8|z-&lV^1LWd184%a1g0K*YfZ~2g6qBl<09_5GB1BXUS3RTfL!E*-DdL>e%`DXfc
z=6^6RGlVJXC)K{FlPmn)Vm8_Tyw>vcBd_m%s4Pd82C*75^Q_!rF0&bQ(z(_Nj<e`}
z)V|X0s~Nd9PW|)JB0f|-a<5uS8oA-qvFXr`xYI!o7ehL0*$iW*(lEg|1?ntob0x7;
zfPz-L!p$3gx~7wrM5mBCxrPK!7Y<MNCC6*R{&x$M6s4W&a$7Z-RsB6RpWHkfO(^cH
zVSKzr30x%H=68yVetY#>>Jgc`LZ*V+y?Jq8Ywe(@+MV#`#}4HZEtZn+<C2d@L}x`y
zmEF@oMBHpu42F>yN@aJxlys8OZt(ZU_o9=}p2u#;-K;&m_4KVQeLe9GFS0a3!Y1KZ
zCq}YCyVZz0z0IwvT>bj&1<7uSZ~n^!nUJE;kTrrWtVOT0q+kf9s_!7}L=r1K&4u9O
zvcu!B0udJ|zfbiEVy&!Sxzha3R6RS0f`D3K*o@C!CtAgmM*raTO{=YYcG)gu)_L8^
z+l~KK7t>uiPK(P!N>p}}wqXAFzIEe|;ps3vU+t+vr@PUTWjT%F-IaD%_*T8FNj9%-
zoSOPXh82yI9Bso<<%XYO$91^Pin~feSp?6oInHe~8Lw%<FL4XcUTF@AUss9eM<(#D
zZa$FP&vCm>R4n<aHIjZPY?@_EG~6a;WUNb)#?6TU8m%$Y8znJ-dC5hDyA*Uk32b=_
zl^h&AmX+u5PNvrh<*}UPt4B`D&Q_5yZn$r(5Ec6NzT`XSJCR(_9V?a1_-5v{cyH(;
z?;!u7@!DH)&x&BidAq1a?#hY3A+~&974@<5i}d5sexYZ!idW|GC1@=It=4Nm`R8eU
zflP*0<jxRvvAsP<e3}C{nJzgC@=_fI?e6{w7|sD2Gw@v{Q-f;suP5<s2n$?ZSjg>S
z`;!Zi{L=P@rnmX%wHTta^{;gf<P)2st-ZzV`s);oC6s_Co5ry`s_ks{D^A$_tjo`<
z>oeqLf7ft0IAU%nvPdB}Z__&Lkyq<r-n(CKrDD6P<58+V>Mcke)It1L&-!HWnSd_5
zc9(}k10!Lq@w4NWc*CKteiDI%JJYkHiO$d=R$srmt#UEJa3i)i1LUrw3<-4ex%v;M
zx&BY8Emf4x>)*yzxS9vhev<~5>o$p*?^WZp@}gf+JpR$qhGLRgE{4>+WtuA!JumpE
zYBsnYAj^y%Pv&>8P5y?E+x)<VOC*=IH|&w3(Ika+BDTiA<Lm65TxDhI<8vg2Y!%-T
zFSBO5cx<1kVE+n4<54$gO2&~<6>i5Ux9JY^U4@}P(fe<?0;)|ho{0vbC{wMr$TV95
z<3-5NUYML3`lF{HO_buapzTB-KA$()<ymVS6|y>V`&}^9N(RuNX6AP<qe--bnZv2E
z-8ak56uiaoaZfgRT~y!ZY7YihKl~o4(s~PBay{fay^#GvBy1ODjxTa47{b<$6C2Dl
zic6S98+~6kj(q!5l{CT7=O$v(b_Cw+xOp8+*eopERJW>fHYwH@gtGr5C--uPwc19f
z2*$lN(dh!$haA~xcbd#H5*6jVYOtEC#;tWAgWle9wz$F@3z>7IJ@md9<{Em*)tU`a
zw}Q|a$#|XA4D1$VD-EJYl>%J%CLCzekdcex8D2fr;mYogXIK5a><5hx&#(E=VIvrS
z5T2Ox?>}sJ*?e}f)`USN$?QVck|A+H<vQ}SF^<dsK}fsfI6PRbo%T6h75?Zi(*-21
z&$srI+@8DJRu|n&4N<c&--W2_DffF0IZ}f1;A(`-8mp$Or*G-hn$KU<Z6N2`bt+9i
z7c&(^QXAa-vWPx#ZM8XNqe^&HfA16}lEsdWFh)N6<Rm*tG+oyqciilZKCO8&C#L3;
zJl|{Zd%NZE=HS^I#J4Egn*_GAK?eE$BTb|lLG!(`C?mEsX1<&z0r&Y59CgMbNI}v_
zJzs4qQcIs3kJ(@&8S7`LD;uD?mLsyEYZ>nIN>!F1!a|KjPy$echEdlV>tH?hdavl1
z^pXwx-zC4=tt6hU|BKhZ*Y9p~6aS*rYPua`*MC9&n)zT-@9T?Vmq)AOsI&&r`2low
z;TVJR7i{_6i&lRjC?Dlk>GHqch^qB)-(6{Q!d$VOScw%e^jpg1`XH>ER6P0EcCIlI
zA(@GJ;B8vnDs`wyzc*!hzh>xcHZ}ED!~8rdsG5Ikb4Mq*c4=?xd2q_wqi!B@nN&@S
zEIHiTi#Yw(*ZXT4UTL4F0D<v@I*ScXEopJ*Q?{2<92b8q(d;#Uj*^T^j2a%=%)?@{
z)g-+beveHXR$5*YN%HxdFN0T>nXOYT5!YD8Qbe1p%DL5Vp?(8oPpYO_1E!(svTQK-
z4UPSCowp;L-^^F1l!KWy)82eSNIHMh{m90dbKcV71rZzUc|3!@>}i%9<Ph{vpiwAz
zl%jV$JJ+;$=LgJN`u+aP8nxyg_f#hGAM*VJYyxg=*q*W-b_KEp{M8}*oU;esXba+3
zN5YPUFw%?fGYqN1!}}<GprFZ*{~5HZg)i5HUuyRgIcz*s<@H{#;|x`_wNGk4S#{b!
z`E`GJZGfP^=4;q!qi0P-|9HOp>1()pos?@y36lAIGV-(bx=$U;$gAd4{!dm)=mc)|
z>SpWTDDZL6a%4iu8-b<sVxw;u<d4kLQ^`|@5UFMiy9S_SGGZLezw(e7RfS*>&KQfN
zfB0x}_sLVBJ1!Uuo#;H+rW}5r*TI;}Y^kDMZ&q?s5O6yKZStGC9AR}K(tLs!41_s7
z-oLmzFEVsVP8l=QAT{_&qsu*S;T{;Sp6A1RJm#doJx_cMB|MhAI4{Z_dB=4&{znFH
zv#2*kkA>rL(RGLn5jK6i(}e6@wH9V}2neTSJ5am~@OwbE!XiV#y1n2~*cRghDpRs}
zy)`<X&gt%)2SwzvPsn_~OEROxoiztQ$py;s-vJ#moTt@A9lFBzPC$#XB;>T?v?8H_
zb_PLwmQg*4ZeDczXC0ub12dAjol>Y4$tU%MWcd?a&0SCG>hCtQ8aJOF2&!uKoQ90t
zhoCjMCqULip4J2A@-{Pde1^ZBJnWM2Bmr9E5g-w5AYc&a_VT$%zj^{!C2K|Ni}xYK
z>c}Rc%BHI%l)~R!KV`Cg{A$xEh9Ar-z+*I)!R5$sPIDqkn4|7N3TbtflZqzI&wb%B
z{#pgzM7Ojrdmx+?hK&y(BRojK6~XS*TlyV7g<ZN<H(4zzdgs3I3LY9Dwn-FoAM+nr
z(*s~sw8%o)l%(u7w|!>>0Ipf2kc0ix8Gpk5%<@9aR20R`^P2hM1?y(>!<~T!?@zT+
znv30x0q+N?2(2gYoAX^fX$hTZzkA-sRPr1nqqzbpM}|TRl$C<^7b$kU)VD95VoR*A
zjY=IVWlllVEMZ;Gn39<CXH*S73?+fO6ULCQSy!=b{Bo;R9_Kr9W{r)%JsU}9&>~i2
zDG+o@DXGnbhJ23SE6a1<-gP&qE;WTe>-^qvo`@Tk9G*;}@N)Y>UCjxEs?ph(JC`GV
z8wlHvTfES1`k`SGW6PgI8f42KBjm2>Im}WlIy3Pk;pEk#`0=<R<=w+(_tZLrH8Z8g
z$L*hLnvTKmmc3-$-tgr&6)GjFphfiiJ*G9zQJQpTe)9_vJ9x92`r_bTw7Tcpd&lp=
zQx%dJ`Y$@SIv#sH-kEeC{uKnpJ-9#NbJD;s6BX=xXEQ*)G}ne0<QE=a#Zy^KSTsA|
z`;x}%yM3B621Na=BM7QBcxTPw1)=o?8&$VkZiT_Tfb()_RoKM*JgR{7x@hC!Akl1?
zI83i&8WbrHFUdFWva19!w|SrB^CO=$g086IAa~_8PvzabfuCQVj(Qzr3~+g!ZAsGT
zy-6zLu}8CL&b;;IXGr4ApPuG*>F4_z{$fHcoO)jT)QbIaVUg*=_-S7Uks*byZrUv>
zTDVxKyX_^VD~qdAH`*%`mXq8j|8(X=zt8rs8{m(}#Ua4pue+Rmrzz5NDjXL=LJ8J8
z*6^x#x{fjRLWLNf^|bmzbE0zEJ_;9|39uGxExg*#ZiuiQ7}raI`el|%ma8!&SV7KE
zf<!_<=zU(GotKFm2gonOVP}!Ov1I!ybgAx{(n6a~AWXNpcJt+~k7Y@zj(nB{Ioi!E
z<Wi)XyJzJWS;vAF5$Lcz8o9+ZhsO7~BWRB2i+`D&WECkPjZIN%;9m1o1>pL~m3bqO
z{{A}aj&pD84WIv5>$iZc+&3-a!`<xF(%dtU4F7p^N*2PbIq`+D3CO(&+BB17F81lj
z_A}B{I_y@Lrm7uP-?}x~EWSLZcxJq}YY0E!uvOn1g05Xpjoen54q#3l{lrJGPh?Hj
zoOR(Ub{oJX6QcA@`hqC#F&l2|uY;6;avlI3FrnejLq~c7PF7#d+^KtNbg$pN-#Nue
zsqTvPc1d-6%eVjQyMKT5{BHt8Bovow;COcUHP<&zfvVPyRY{%piwv8UdTlg`);N+U
zF6$);tVRrqGR15iog}9Q)GPn1;tic*k+;FL;F<Ph{JQmz?B|`12~^T%X+32XI<lLz
ztOuKG?VevH2QRko9Irq8_G*F4jutB~*GL<;)?1px)U53#-f;H(q*WqhwVaZ`jDnor
zRJPCk0N-5ox}ssxZhibyj)d7Oo?X>(ujfEU)aa)F%Co_h|Ck}XdZ|Bp=JRrY$MLMH
zPUqZkZKH2n<FIZ?;myu|$qBz6UCgNNJaUgChLV^7lN1J-Rg0#u$CJKi%^ee;*}Ssw
ziuThnRM<*MI`~%M*1h~^X0dM@H{(%bff0WXp`qWt<ng|lU7J<%Ff2U|z;liq?67tg
zgp>n}2-)?;cQnZhHVd?_r{W)i!1pGcrmpp;XRRDxO|ZL5HL5Bm?o6(ITxrcHu5c*v
zZARCqXiWRjy@+-n8#7+u0YxC!<Yto4sJoLeh||s}(E~aWmq{^xzpLp%r>3rLvZjG;
zSyTQS0o$=qGLCfxG<){CyTH^IUqjZ^aoXB-+xT@eN>ufNm2c`+e^oh|_*&xD#F3Q^
zvC%L>E*0!UnX1x;M#=?IM!kFfT7x9bgZX&kG!Lai`<tw_4AA7O`~)?yTN}+TjoE|C
zKgziu?2yYS+*fA*ynG1}p~o_Qxj}Nn9827;@UZVH_hC6xp=?i-1_@79^C*G9I@N`E
z=c0G*YeSK$6_*ig_mCT3>3icuvL=Eae)l(&98}g>mOSL_8`u|Dc3vcD+l+Z}?BE3p
z0Dz*thb6#-&hG?ExXP>+^DnOuBY%X|he+Ovet&H8OD_naO7c{U@Vl!mB$&Cgy?4?_
z&e5lOf|k+**TKsg3OBKyEUSXghtYn&okdDG{*4AF!lR80SpGGkbMQ+fAB*sF<DEqo
zB*y7M*k^K~V2#4&F;76TnpLX|W?pa^`|3)F+(dL8)<dm9S%6GQ*%NstS5+bNE#vD2
z8n3{<!INJ*=CkKa@&hM>D}vC;?C0*w&NEdDIuoGiOAyBR$oyN9y~DW=(zY|s-?vlq
z8^SNg!b2`jd2FK;lpz%8&^w-sfx7vecT8(88dw+7b9s(0EFXV<4v?0q+Cck`_bti`
zh3vjbQ#Zh!@(2&lA_}_+Rj$#R{izoB;BCm_39u3F{UMLET?pCtsum#b!+%;`=v39{
znDx6!--KSY!X!KmiRKEt97|?hf8~SjMPq}R1)Lox=oFJgq#ml0lhl9$+zGSrjnk`i
zo9!3oN6Q}WA*hdb>#i!EVPb;-<}zfNx9`jcrsQc*s6jDS?VhQrN$UM%WzTW{IjGaw
zW5+Y7&e5jkniORM$)jP`*FIbv(NdKrbx7DHymoc=67d<HuwM6>I|{VeSiy}T(QWOq
zOtAl)2T8bjLFbzwi4A;rua4=@TGi(1u_b4rTX`bq`!x<0)zxH<N=xN>ypdL3;0yEf
z9#0Pc6XxW@!UO}b`7-xgz8A*ZnFfYLlGolq!N%RuG^v;8Da02+wCnA1t8W_%ChM1H
z4=^31eyxaKC6ArZ$qlYso21oJ*mLm(?4BAnLe6CXlv5!IcpGF3I&0X&3I?QMX+IPn
zCn!ybTy^R_v{@<F@Y`GOEe8t`?MZs$mjAF=VN@67M3nd%UvMs-cVoU4DqlO#1=gVE
zbV}VlKrQd@BXg|oOnaBwaIO9uq=~utuh@*^0<Dj=rS}%iMQ0pewdl19ooM7xDElaN
zgSxEoYpUNG2$0cFqKCHI@0_WEr>=6FDzUb#gD6&Pzgz@!C@rF~)=>n(GH;0Mekx=(
z9UwVGHMaEfF`U1Fh*tw!i~H`E{tI@%bujY6d7XED{ag<*Yg}X;#nkxj;rLEIqls6i
zzixLkR;Yd{s=5z2OxkxvVk$%UfwglPLiTL*W;%9l|Ilpk+q0cn%+#jRYJ~+|S*>2q
z2^)``_StO=@Gw0HVo)HnK~IU_=$)DBnfs`9lHb2!sh;!!>G&aug$=F{pYvm{T3vQc
z)UN#3fU={(>6`){B-HTsEqGno$QosgO@i4}cd=)2_KWD-sM^HcO2RVrVj0`?Yim&Y
zHvwXsUgXUAn0CzgUQ~!)<D90a?Bb3Y>|`u7#ZaC-+`&Q@D|m10lp&UC`JUiyQgvW(
zXLWWM)zjkvmfPdkA@&8!@niL6EGbgZR3B;slo07tsBw*b6YY{W>S0vv;2}cq7aWRL
zX&oyz*pwt{jO7<0+rJEu7DC(g*wBsQ*M@Bdi>@uEhrN=O$J^iXPM`xqx=Cq|Cc?QL
z-a~KF9MVvtIxgbeb4aPdBE2!`;Ph;(sHZ+Usm}PQ?k;2@tZA8Z>3W_&muozi3p<>m
zBcr1Fg538so^IkKAJpJs46!rle+XrJAG~&>7MQje7?dzFP;t1YKFABgEa6P8)9*K0
z#;%F7oly4^7<9W?Svuca3<sUC4m;0Y4gQ)4en!?|_TCcub^>FR!;;%0th){kf3<F2
zZ=&7is^#mjzd6v;+&sQ?6!>L1Sg;%aF4teS%{DBy!2zz>e~E5j3rb$c`pN*xKVI;`
z3I;uoS(|jnHU$exRpt~i54RDmiT~-9pX;1zR#HAqf)5_+8-QG6;bw9Yq<QzD)V{pw
z0S?u|V3R#tr3m1Yr49hS5;HsC`b<5hX0kJEC895d(RZ;kWUFouP?TVtVro$<oI3~u
zN?E_i0KwJPH(4zMHJVTEvu*;!ZvY<3JCv_A4M~jeQI_3`pD_(nx?qj4h1+4z+h7=I
z?!>X!0C4e4me6O^xcp=S9x`?-?G$-D;^rwAer%%xUGL}aF2KdaGD|uKGbQz5DD4wA
z?^OF`2#&%IKA>N2-?87Ezi*Ev<z3k@rd2jBy(xDoDK^9eFw&nHyx`-uV00YZ->=Xi
zfDr#Q`H-h_WQ>GoduJ>YL6j);9<>n(i^@Bcjg64@^#`{jkJsG;#hVp}&jX3jq4{95
zy%y)~1OUN(aK>l4meX$7;iJtdwu(W*GYmYQ{P#ik+SS=@l({c<5JJ!-ow%!l=rQff
zfJ1<pjgVY_SPdi!zB=f9eIYkCs-DHN+0lSE^644xIQFAA2es3;(_$QIqcCz0X-~uM
zAS};uazORiXtT&XADIv9_wq>C@Cu}GY!hVC<aWXiaH6+I*``0Fr=DGIKe`@CJ;Y{d
zE-sV#$i>|ylApJ)G-Va8CGN{)vazrpF;(Ej9u{VK$Pg6R_#C@D$U!+zMloA;yHQri
zCM{kLvD4^OvqcWG%<P=UF61E>eEB8z`|a=B{4jhg6fhMya+u79-mP$vpVCe3Q)GBC
zO8C`xEo^Kwd^Kz|@<{UVZ-C>AeO_=dcI4CDm^rt1DtPn6iNI+Kdi$n{pP!Q-z6u^Y
zK81Ma3&!~=M|4LUx2<06j#cy?9+_)NX_>sE$snJ2*@Mtd)Q-2VkJwvvQS{cYJ&+C?
z9jl~+dBOB-7DT>0+KU^^QzX%g4KHQD3dCbX#CFBW_)JR3s%)EuOAA0kNJ)c!J?kCO
z#l1yh?86H6Dz;bp5N$S=qfso9#1a@ra0BA;;3MyQ{&D@dg+w8n$tsoStKDgIX=?n0
znigfd?)uLi2AA(n^b@`xV9xyC&~-Mz{ctc+QI{@)Gs+bkwK}AcjwPDBlBe`Z<Hw3P
z_V=qH)~7U+!_}>@-s>3ZX>7j<kRnvuhs6P_&%=%M!|#T#>IVjY0elDVlA?_Pl=e{&
z#F<~fDn536I-~4NBHRs|0D+6TQ@WTI{SGzzsFs+K*nI9~kwPo8pnSXAL3Liv#lrP_
z`Eq0Qyp-xIC+-LRLFlN1eb;&HzGIapy5~&n2gRLJ&mN!@fw{|JjH(;RkE!0$=5)t;
zHgg**PH?B6L%ty&4){M_oX;jtuc_|VZIq>cHCpBkV~x)VbKS97LKgK<eyf5NB`klZ
z943hIR!D^>D9vTyxap;ULR=zJqnE+~St+pXu*YHlWUKaDi(G8ZYWpXEZb;$j<qp^U
zQRxYt?XP3?h`c@({?q}p_&%<*+43M(0h-9U!O9>)Bc*+)amXR_zwu|E5xr&T*+yvC
z3!Jpf=+Ye+S}zQ0S3J8%>ucBFRcF*}Y}Ib^0|V?swfO-)n!kFp5H&clJ!C0BdS0VG
z9h1noyO|%!vS7i4r<T0Vd`}D_gufk<)5r|m)3|UsnJ5bge`7Ay+jzEtG!5p__)+$X
z^(cQd&vV~k48pnmRt7FsF0-#5*}a(!*rE=*;irknC(y_3-YavEdPV6az<h{--LQ$-
zm;dso_e?*xn1SaZCU+h^sIiY6xkEIPWeg*<&W*47IN+t<Ee^Uz^#TZ;GCvUc{e-^v
zAR|Y&`As%*6%~-P46f*<fh_0Z2ak&m>U8$PK_17AGq!{K<_X{VkL~L&P%h28NrS3{
zo-ZP?ViKl#aM}dLnIB}h8`>WEro-qj=a5X&*=M9N$xV6HKDY8*Liq#1;PaHaRAZuD
zQlwSq&2e$B8*zOjIBU`_>1t@J@bV{4n|LVkS~1wbo>3`*eZ^itkbjJO)aA2H*RFq>
z<bZqd1B}WH&oQkA>o=~&Sunse<}UdpO?WZu$+`9Ag4T@pnB;+c-l*CF+J42&GU|6Y
zlGVS>`pWRZ%gz}_lDaIqAjb-tcrXaR20EX}XYX%o;$6dQm%*)PloB7>9{42g?wC0t
zB;!05b%NMJKcaWrrq_gbiwGuC2!?<Xiw&mlyXc=4!$71Wm%9@n+y3XHXL&&dBXZeh
zwYYVUkKP^RSBMabv=h?0@4ipRnmVImx8K;e4jgL%pNE&E;{b1cvwqQ9+Xht=rDvmg
zCJuFC7<<L&Ke}G*uHjy}Ap55npZ8-`V2xo0){4Eo&&eWQCF9bYi?k|py`FxQA)*#!
zbioU4CoP7%l4A7CVqMrBFD7Wi2ddg(!0ICW@?!DB_XIFWo%doI$0cd$Ar-A;!TEJd
z5Rdvd3n+_(F5Dyc=$C<~>W_zz$rbx`@Lm;#JoI9On2EJ2#3~_jUx$suICKycBJi2W
zQlYY0?=f9i^YPQrCFuU9jWiW!(d+7n27s6eoo>CNQ4x60ZkI*iO<&84@BGx)3hr1u
zIToxtzu;E1-@e85+(c$!FRO&%csw>ny{c)CW=Pu3RtwzRN1NMcF`ZGHpJ$vbmzOub
ze(^r`(VUDEiI?bt(UbGCtYejGu+A=iuU%tu(_POv1XC--Y9lTKp`+Q0O&s%`A^s7&
z#~}dm7}XV2jbZ39?nry1xbgpVJ^3e(SmlV{(Rm7sxR&6-^O16PZ(mjXVRvv<(k~_N
z&YMk9To4`Fc8l~=-pPdJD3Nl%cl0F~>1Z>i$YA-#+4zKuz8Bn+N#XNr;qci0JrGuR
z{8WpabnMBRA}O>O$}DDkgW6C7oDZfl!?)FVUYncCy{>KTZjLGf5<q+oFZml^<hm>(
zUS#Jt1aR;(;fob0Y}c#ydGI1t0jWX2<gj(KQ3t)}G1WX)z2Xr|qj%6WJB-m822U*v
zW*&_UTVXt-KQl+s*Dh(tGE(H+r`S62Ojdi#Dz6laxSs~>0u-z%!9>yYWul_`W>L1q
zYqviU<MQ-w_JrFi`exc*tLYO$CXsksve0=uN7+qxstO9I)7dw9^zrf{o+Gzc_{A$;
zy9E}9^$o{cZ3qa*4^!7gdmq&A1GOm)+?P$3fouY8K=2g9eB%(ZxiC`GZZXEEJT760
zZlJ}cH`3r6d>MKGD^_i5#MQGHhPjeVMZI`2h}ziQy*#=#wbW?aX4<yOkmqP&ih&o1
zTE)FpW?j(pn{7zE_^6V9xd26by1+VhoUz;?^n@?2y602$i-)dPXHr~2j0S9@!wc{V
zzoqBb(-R$^IPp6QoHzHQF`p<#r-SK#3+=x?usX>t4ub_~S#07BE+|9SQBy&4U-%{X
z6!3X-UVp{{4lczy<GKh!9hx4M)=qZJljZa^A;IPP$T40RZ*{9IUI)!yu)_(&C^slV
zS9CF08S*bh_obda5{$B&DGf=R_e2P|6Ycd9_gJnghyIecw`iPI=Opeqi{W-tV)9<D
z+kH%&W!U(%9&VVeFo+9tdbz<47ZJ4YR9S|`=a@&4@YV>}iboQViZPEQ%RHP<8L+DD
zLavAo9_2d;erH38K|rSU`FQ=v?u6@>@nq!d%UmAnXVUbnxT%Jp%PK4ovPvzEb=!P9
zlham&XoFR4HS5mI3%Z|=u9(i*EYn3>x9)EAYK;@@WXEq_gACK->x4JmN}X#UBo5`%
z1m&}o_&qB{Sl+UX9-{`lCcoeC7F%Gt)qXvOth+>Y3}-z)dO|yIW>tgjdh1WwP!z%N
zD`$b1D1561p0mU3rb{-;cP?yl#0GBcD0jtigoJ^3Hqx@VzrC&x4qQD@jF!BWf|`cJ
zV+DQ~2880xDh;s*Gi>4P>{$vwUVSwp85Jm)RU*P_=jeE_O8~thdfMNeDjn1J(r9{)
ztagIUb@=_Gn13(Ed|QOpAce8hR>3}fIKmdw@MpB$yP-YP7A+`9qDYRVBt@#P2Q-`+
z{(^K(A)^3vR#ztqp--%;^l5PloT%hMo4r=njp(Tc!*7NPhJ*_iSCPqL8c(=xqG=JG
zDu)M<Yewt_HN)-=+=3QB7ZJXk=lo4W^zvXHFX$wc<cJfy?K&m1fi0NqnGn%a`Z_5>
zRWts)A%P6fekH%hAe-;g&!ewy;!bX(YAC(DkUAc&@}8NxHPiJ~<QmeOeNgUUmhKNy
z2*q!I*d0MD%C!JpfAzep&Ny>>R{xGYQHMn1)4^|?8iy5N&xxAbZt@nF2L~<Bc>2lF
z(~6h9=SF#LOs>xICP9I30-t-P^mV318$%bt9I@<Zpf7a5Nsuaj(E<W5-rrv?(LR$>
zO1F=kYDacPPgd=TXA2R;eZGugg6(vC%i$fvKEwHY=CRr1PI+trXoCq|ss$uYgruQp
z$4{Qw3K`&@x(J`j3;ET%1CN%r-6AIu-++OtnFiJ1?ujB+#aFFKNj_2?x2`oO$kzgi
z14WCXd}wT;rgSTvMbugHDXjjwrQV^%M)2$jTl>5Z&>Ls$$j22Vj{r@Ns*m0Xv=1#k
z!-=MiIm*V9oBns2Rbua5hX*VU=04)Y;c$Ppkmg)I!;HmVu|DhBeYc_^jjGMIb;MDZ
zx&*z04NUvcRyECI%yL}NQ+86=%s?;8KhnxS4SIf{*d{d{7CX1Q&<^>|Iw8bC1)5+-
zs`X<BI`}<_ir;+?7F!M_zEBlJg1H{NaDwrH)^O*}(-8(I;HDVSj6pCAx&i4{`>y$F
z>dH9~Lx+l{_6sWm8CGM-gjpOJw@^scl!P9#L{I`Ll7>*U)4*uoXVxwWWHf19ju#JQ
z4Z^+r$Kbk+Hmi}6Ega^d0>PVVm3kkAKQ*47C5@`(v7KE7q6D+O4L%-wu+BMJ?lh$H
zo{N6CuTt(sniIE%l2+}X_i!>(P>3ptVo_j*7W5UPiC>speuE!aSB-3u{rGIp@rJ*z
zx?4PK-%BP(uhqp;)Wm{%IW$_mT;9Ys968(Y<i|iI57M3C<NaO5V>fO7tNyUdd&G#o
z8tv-&R#OmZ$o?@&1j>9##7iHrg94IuG;wpKKFWY9P)6WQB3hg#=p7^Q*rzJg_LCY-
zsd$0|kyTF@`#VnLX9;u8!yiqGVy?dAug5(SuJ`U*AImp5!{WHZ2V@FP%%nUNW#p59
zGjlmlTicmg0R3L*Bmv&L^=tu_IxgATbx%nrf?mUOw#!$1Cm6nPa6UB5J4Tg0yK-+^
z7{$**<0BO%1>Lu%b_;{nkM54B$*;+vhT-vs{+AUrX94jzsE((ldL`c>sa4)l>65s|
zJFISg+J?QK5yx-ajQq;a=yp>e>BpU;JtN%IO+N*UuX+{j*F1{FP6+H-?F}UDkoU}A
zpa#X8;c@#Nh#iXJ7!tR2K=Vg+H((?ug)LEcmH|Ej<^hU;x!?;@EPcp>@~*Vl-b(T{
zqo;N0$f?HkY_A3DDsz?J?N=MQbCEBp>Q56Er3D*buL!ex_FTlT4cP{aB&dBTe5_Z{
zlShWOMH^KFM>{_F)NVdEdn^{fFVkk2Zp&ov$}jhl{l1jLh=|aG7xSzKvz^7krutyp
zv^+~0L*2w}`bVnQ=j`u@Z1uc3aRooC^9-L#mW`xnseMD!wU_4@SYuM96>FU0jPKX&
z+S^WSH-49rgzO7@YzYdx)L#5rD4O6w>>8)?$Cl5>Y`YYw%Y5N{;+q|01Vej8oV)r1
z>bG8Yd3BSWe#(XIlk@gI8$S;l)~3G7bf(Su{k4Fs@1i-Q8Y-#unTyXsb_9p@Iqf?n
z@i@a~w=fsd$DodR5eIJL&JLK|X(N-BdbI$tFwD54o!z39^p$`af0={*ia1NKt6H6i
z7@~CenW=AQ3J@x$5*?%N90LTn9KNp$kpTs7gLp3^B_JIa3_n2r>B)7|?1j+F!<ixm
zIiSHT&TiiJC2gMSSI>RZAzFP66dU9;>3Ca-7eA`{@_2Z4H3_x-8MqM4x%u6nm#2mc
z9aH#`EaYv_w{aXa`ki84BsSl+_g?uTn+}$7o*$xK$h6(?p}#P}G*EQAR@WTf!;;<)
z?q7&;NQs#cqB^q@nc95fYLik@@Rxe%v9##wc|N1SQ~zsqgW{l0sbBVx|8z1Ug2JNP
zn$rD5&#V8vn%H=y=yTX1EZ{!OAyr9z&Gw{K(>q(>$pplnCnJU3^L!PwIk1mSd=<^T
zIg9RWJL5s#vtf)efXJDnStysBaI$JJXYL_m>p5`DalU+N)*a|yusA#BN=l02$3|Vu
zjWyp&-t~mN^dcSu>jw&jwTt#Eu(17IAHvaN`z(;akGEa^#c0+)5l<u}v6yMsvRcm9
z5&K3+O{d{Xf1oChF&H!=O%^+gaEz91Fg4G1gBnXT+8*&nQ-<%vEG^ou2Dj#<9WHdN
z{9H-SlxNK)AI2<ftMPVC+|^fPh7f)pHdT7Os`J6G#+jh$VS6Z1TDHIcAPxi%UA6;D
zq7H6e7vK(dh7p_)VB4N)4}j5I?v9WqUl^$Vsn5P?4c?_W5FJF|Aw;Biz?i{i0b$Yf
z+k_I?rqQ?^Eu04u8B)xE?=%bpK&#{W{MUkb(4?Z=BO{EFdBGnFhZ?os69z=@J&MO|
z!|y|z$uhht`1UWHKzKRCD~=XO2KXqkAvy;G=Y?$oFU9L4JEl!<U#!emttYG1t`kxD
z_`89R$?|-gc*@?bjp?vFl|xwOg?MD+<odU=yQ}i0w$6{9e@xztp&9N%^&kAksy~#d
zDx~7o*oM^#q1pMG3ev6fGyEFr<;EXwd?wq2Mq!EVB5&BlRYAkUQ(~M^;EA<EXlJRS
zI;Pk7=_`xjQ-|8wFhQ~|xlK3IGgFbzv8!q|xOv0F_v*_ofc%*cJ(d48|JJhThw*03
z(?o9rxZ2kM4{S+cwnTe0lbPlm=wU0pG*AhIPw%03Ea;<$rYuv8#%bVG7%3^2id;Es
zep{8C(T!^yd$!*7oYmm7=|R5YF1%8iLW||py*zB>Z2cL&tpQOHnGXdvq4!ow|J03u
zm<HP}WS$r0hcG83%4Zi$d*+QXj%9J6_g#SV<nUTM<M6njsdR+XHsekpI*rI-rL1y-
z#Nx`wsY~J-`mQbKZi3okKyW=96bQH5ao)uwIdAcW7IH5g;tEUo@R~;WrI!vWy_k3{
zpAjGLX8s_1agfi0(r&x~M#@{WbLXn6dNNoT3Dj?#h+3#U)XFaQm)PazyXRaG5?nUd
z7|+@4^RnpRSwB5L*6;s-vCK$vW5V>{+rx-r^vr+ryqB=AdYtM<ac8XRwYv*SQQ9oQ
z9rt;Q>wn~*^q1G3=l8%w9b3+bH!^gi4{wiV-*dW(=m=^63?zp%UkN4N#0oOH9?sMR
zGhQK||H#AD%<<k~AmZ7fl0)Qxi&ZiSBxwLR4`F%AAz=6YDndX-_~|MLvxWV7<L>Nd
z(dJd}r;-F3*99~&y|XVN)mb0cl#)U*4l)m7PH8(|a1+<O9H|-R-}pKq6z_e~A*UpW
z^$d*_MT>9*u>r&NNTb%QT$e<kej{Y-7#LVV_wTp8-+fBwehz~s4=guLWA)Mpg@=S$
z3anorP3mj*)}%Rll9cUFT!IaAA#*m-XWtgfdx(sG2s4A^(tY=Qd^5Rs(72X}>lzDD
z+<yqX-W|BYtAvi;@^T0~@LH%seRf&HY-xv&7WJA6tr&SGn`AvgK@^po9`D8a0*khQ
z=aKpnZ}^acaDoFa<OPOBj;kX-n-AB*&TtgOBH@sMg8J?4LH%EC^IC=2OgHFErLCW#
z_9U>6szpvzPn%(3ADj_|N~fOt1crx9K#}vMtdRBwIFF8#?eq(zp_P21-j#YS^$Ra>
z&=O^@yeh)b$+-JqKA!w`oI-GT@>s@!&?h7;&aI7$`BB0#&ug31ciTQ~(R78(y0U&`
z_1(S)skyX=aE25|!Sc0gQGlvHm(!Rw`HPb*ugM!77L<m%(f%=!>AmR+S~u|_cx|uH
znf!YWyR&WDCi}MH>Hfy{j3NEVk|EA8WCi}R(cY)yfgOHrlyW>D4aRz9XYrKz>vUhY
zaMd=|`W(rX!ek==Gf)N^RyjS!{(8DU>++&Ta_f?Z^cShrZNgWA_O>`?Kebf;3T!?X
zBVl|vN29CnI^X`yx+@=<91GXsYeed+ki{kg-}(@A&yK<d`x*CIk=SR3Q3IWBoq7gk
z?c>uSLKG&VHeS%eM!rer;n5lsqPezS1(S=jbxk9IJ)$6j0lHEpfxQii*9iCqd#@mr
z3%Nx_(l(QUtt<5b<Nzm&qxJmafMY*<U}~$?>xY8syBy<E&v1|8Sod<M*O8QGV+H&<
zxXQYRugIX1%lWORQx`kdkw+N$N8#~woSJpVo0aUbtyyV3VFP0BAHMYC;3^>JwjPS&
z)jREmVBHfbRr`A95ZJ>x=5ZS{&7Gq?8c~0O`-Lh=WA#|GPry=WT{~Vu;j!NH>oM<U
z1!-LoA(cEHZhjX_zOs82R5V}l)Yh&iEUSRb`DDt9qvn)KrBi2rCgx4bk!daKav3qL
zMcc7b<1)BBE@Sm<1cD`}<eD4w1+fN$GvRmI5A@Hh7WhI`4yI&~n6aZZpC4m)qAf&W
zzKhFgpOD3_2x)4CJ*Ep)SQ@KeM~@eQ2R^wyMMr;<%p^)xefkmO2{j9J+FI|a=~cyq
z%8qJ){6yFWjF<8{7%uht`9^(Cf7XKa*|H|3rF5%v4gLFxY}RfL_k7^&^P+6KsPhl0
z_Cn?0lylGEW^|mgnu~(_`)lMvAK7tc=a{h$wjZND_71SD7rn>>`-hi-$2Xn+i!<Ue
zFk(C}{vy8`nC&<MgKlZ?Or-%0HNO_vukL8cTg0xpHDVc=M=*P{n=ntg`4hHcSeURs
zI+pTsavYw1^%uY9tD-T$%jYWSL(l7t2pn0?JbxL9)2h6&^g0mWk#J$h<3DlJEU~`t
zsNtEbUaZx9v2{^SaKz_y@+O8K7kk7Ax?QIKVIsEb0k(wCkV|DafE{UjCe(Aspj}$9
zjPAR8Nb<YSEtyTw9zx$KTm*rk|GW-3w^?ca=xr=o9_Z?mmw115sn+t)sB1pc);oPf
zin_vMzgQ}9@i~Cp?kPXzM{UJl&|*L~VL8Dy%9lYZPQRr-uU7@$WV1fJe4DGF<W6Dv
zl?*3lAoo*`jwh4+qVB+M+rav1SK~4N{lUnx(9w2!d@51yFb~U<YN~cIxR$syf@9Ym
zSD8=z2anI;V$D-HzSKIZ5vj^O(T6_P;H~ulYNg7o$M=rqL9A6MtbJ8gX`<|(&~^yp
zZ2Z2y3}Y&=kY?0=ud^yQ-l@6O&?EmbO<^eb!Lw1U8GY1phjpUW;;rqO14jI>T*vjV
zk2k)K!_N7|csHM6F9-N9P*xW=U#(snk_oY5|Bf?7zbEhL4r10qyIRRTeS^4USiOl^
z|MrAyOsW`_*9~cD%KbrZ)_(EQp#2uehV3@GUl$4xgMDv&5@lB-&$N6($>$1oJCc|3
zpX8cBl)JCdDc`pP*2a!pnxwU7VgU=!9hs<X?)n9nsPJtZg`xG1!cY0V9cWBAC%HA*
zD}6K*tpVkmxpk#z|H%UAh&8QLYyB)UA!)IF)EBxYuBS$B@w*PSW>ILl_!X!3;!h|0
zYO=(p?Mq*S9$GVFkqEj(v++P0oo~gT8qIzghyJmt#wXROw40K-C<#*`Ml}Qc;@{}6
zfM7mib0I=rC?<nn!%#`Fo$jD3i%V$NVzEqhC&IWM$9#-aUN(Du%;8$X0xT+x4i<t;
zZwOEkrMf;2zAQ(cLwdGity4muZQdr{n;!tHaEpv22a<>P0-WCowi4R53n!N{&td(u
zW^osc;xe4*iS+G{=PucXScj@%0`dKvueLYXwwA;@go1@))gUGF?~6?$4hA)Y-vpvO
ziP00bYjU;$(?6v7+&i3ygBdGW<V=_jRzrZI$fGwc!EL+BK+<#s5TrDRK3<Qwlc#9X
zykXUl@TBbPAH<73Xl_wOn!-9v5GlZ2-=$ZX&@+oAF_3gGd1K0-ME54)sF#hOT&%>>
z5>*11RRFOk-}ne2-f%vGd6A}eU|TKmrmH<ENh4L1ipFTQK!r~bB0&vC)c_xb{sbhk
zIP!l%GdlUt4PJE@v8{@SHBEyVrOBO4$MouzS$u86jdmo133`?hNJFZ_)I7+X@GO$R
z9uu>CP*Smq+`X!cxYBc@l=<FaPV~Dwqq7uA6h~?;plzeyc7}OS^<Ide1kX}2#RXLV
z-*&5Jk_hRuRMw{*zEcJJv#=y`^ot?P*pWI$fAX>PzdU)J0W`M+<uflc$=}+WX`D>Y
zg2nvd0~|!}jZ@yJ8)&(S$8^!@JSdTle2Wu<cTi}7^DI;zoEI&ur!Z`!g#<=_@o8<p
zlUE|F@iio>$<pQp_0>3&X(s|+b>*HA&l%wBrU!RT<`1Zyl)PfJsS^2d;nuT-Gnk($
z>@UQi!EE~&E+5D`jULp_F;=oJB16847#C!gI~;<<q~9Kg=ah63v-k|v%oqV%hs~KG
zA)AWF;QE4QN*>*j;;f6w=JKT1%Z5f>sGS&3_A~pTSQO1`_-J{SxTDQc5aJOa<X`-M
z@l>3~b;#wToW@Li{%^RB!2{qD=GRPL2L49%`#TH(2Y?A^1ZUA>CjK)`pq3Ai$!kBn
zTtEMBAoJhZ79zoa{0J%NB76TC&=F7$@DMaKIuShX|Nd|P`!zNNaEFqE5x?2~nT|nT
z1`rvNXRH1q{X41ZZ?_<U0^A{v)AtYZ{{y4&UnrRW^9XSN&m;K%;}Ha8Z6G<EbUtmZ
z=TSMm7ZSzARg%5f=iGqM!2jEq<$nT!no&^A;7Z!fF-&(?mW$QqsV72)5c(mKWIDaJ
z*7XOwHLy}_-p5`Y0w3l#f9ukJXC&!GA@=OVzwou$oYPO>1SvA8u|549j2V#l7q~}U
z0Af!H)!~<ybiq{wlI7?EnJakz%repIL+qh5dn?3<LRau_@SHdidX!*=LB4dCgYV-J
zcrR~(sPxa|lP-S*<5#t8x)lFuX#BtbnwTWHjhIF;(xBh}{@H)L^A`{d&iVdp?EWt=
z!chR1TFT$=9pnBxe*BHB0=)UU)&t}3Pw(%qB@q7v3df8OGXESX$bpal-G7wwk9%qO
z2ZcBPpS(|T{y3*fWYJ>&o9`+)sDM&NUVwpw+b$_OlY3}qOxG;Y3n<A`98P7WOV#%(
zd2hEOV<MLnKGXX(+z|vA$34PNJHrW?kpIyL7W)pdmVttjS+*~*(7He@J%NHQcw;<^
zOSdEaHk+E7`u3<3@VRo*T%J>DaiYn+7OQcDpZK<B(qdSLd~XZi3;OrlWg$ku*^YNT
zm|^gApF#dZkLXnFs@)zjzl+4X5E}q(M~<*wmSHgcTc0vhM8HX;Ld(&DNR$KT>?JCN
zwMkLY$!~a_n&YL~u!LY*z)8S?#yH-;G*iGJB{n;$HsD|LaWg`_NzvBxEC3GJ!a3nz
z|2cBKIYj>>n?WSitKQl&Bf5jYFBCh4aPjcWXSWglc_hS%Y+;9^#4?AguKB>TNoE0V
zmu&2b{;CAC+LuqWKh)&_dm00kZz9ji#sZ!rZx<Q<&^grmU;5^M{TR-SfJ0$6c4wW_
zH!z@Ub~sy+pU~V?Gnb7&ocxYSNpKQkJ8j=NmNX3-Z%%d$`Iq5D&VeEk9Cv-%BZ;pt
zniS?B)}A}TVml*aHB)S-&Yx$&yVC5K*gzVAhLXC{VBLh7dgXpU_^J^!LCWiWQ{JiI
zA~^bz$bCyj#8&HHESY;G$ti=&fmMw5fMKf|LqJn<=Uks@V-El_zFU4jJrnfpO6pW-
z>K;Z?XpxOHb#$<!0@e_0xtrtPx<oY`ZgJi%uTjjn4|;F!n79I6rwVi!F3Ry#B-Zn4
zxj!AYc3mdmcaQJuOVseK`{MWOq-G%ZHA<L!y%m!y$@`ShR09f41Ltg?V%(kov|#@m
zMCng7SQo<`yc&W`6o2YUq*Dz^O-uXz>^zd;#6Vc+Q9|UH)n$7YuycE*Buv-le%crs
zxME1Bm=y;|@<*(}kfcUi9l1xJyDK-3PqvG->Nls$tg-dhRflPzXFD+C;aJ&QKBm(c
zLW{_2_=b3xYn$zI<B0GR%j<BE=f&0}<sz^EEqMAOTB{oI<pFl(W<BsPy>XBpAss@+
zBpvf6fl0Fzl9I&nDzEd4z~Sy_`ci7AuU@ei%8R3^W4w1J+vC}~UY(P28Z5fhWtz<K
zG+*%tNx)t@2r0XSuW(<PLvz3!uwJP7W~=(eelz>jH$OrB<J6LA^IY84EOdze!s#BC
z)X<Xp$d#Xto_}^F>}N3GPnOZ3IHo1_&vSt>UEF>M^HvX|fj~b(jV~ON*B4gb;MWnN
zkjc}g9ufU+qcJC4lhzLoF4t~T#ByBce<)bZ$C7h#sW)KNs4uSfKT=NTgu4#`y!cIH
zms42nii;^)0E*jjgXYM$fCpDW6!pWoDtDWp9)etdMZ4C0q=0a(dKnzgCoqmm@h1v>
z|En}dgJs9(|2*u16GeUiD8aK-wF(n<k+h9+;a#o64*a+k-|-bs4ZLs@F6)`<IZk-b
z+U4#cg+}=&QJseNUdQI2>U#xEeb5TsmZlPohSCeWkwW-l=h`9_8VOG6XP#g}h|hF%
z>*t@t$u|oBVu>DrPKAvlHm9zszmJ5NBMTARl$RWx;c;8>$UYoOnyu2*^u%uw$dK2z
z@LNkr*!m-dNf7ilDteitJ6LGWgJRI1f4DV74X3r{t-3g2)aIDe;XzAg)cEz)TdkS$
zU#377#DK1ucr<pgh6x=mYZ-tRTLGpky;t&uoSbqQzG{s1a8FXyvEx!f1C(&}RTePw
z#C5Ql&Cr(ttAtK(?)MPgn{>=$*T~{eVsuQOe$hmBQ?UpMK}ueZ{PTQDUXDmfd+8ZA
zK$b`<Xh;yQR!t=xBireYBnxhJEzoHwRRNTQ`i<(I?C%U(<zvW%PmnMvTzQ=&g6%-j
zZ4&aRzVcz4zsqYKSUp~qB&Y~9$1w~0Ki+SUBK=Fk6Yw69Qfe?#x#e4q|BWTl2eUMC
z8|+Z%Hj~DIW(L(Iy-46KpsJPwLTiES_Asd~=dM+uES~v8C<ZK9nJPH$1<tQv@{ETQ
zNS!om3Zpv5I-B$~@*f=1KYTxOK}5=7$r8T@uc`fz7!~rrV#yO%-o&ksy<oS#OnJ9&
zoMLPnKaJMtbxoWO*R-1Qg8vm&3}Tf#y_o2fcRoZg4xcWX_+_qMRzM4JFYEi4;f=x>
z5RO~h^}Dt|br`5PEA(xXE>J0qETyiXz*5_kBN@`Qze+F=^p@%Hxht2Ar?zPDzQSQp
zpGqbxyBt~FI=w?H-|Xu7O(R$EQ=y45;G{s;(@Qfnnvfxr+qSWFU)U(_XthbHs>%Dx
zxGW3ppR<~{c%T{Ue__%XcC=6Zh8<p^)e%%`w`tIj3+I8TCH8dpRSFA?x&t*5HCtWd
z-H|XGFRY2!nd-ubet&>pAHSP$^HIhm6`+R---Zh{0!8~nH*fh}i7+pOuUV7a_I??+
z?9cHRNJSrbk-?#4zgBrHokH}y$7b_Z@ZgmHGoSs>Nv;!BB1<}DH$It}h-sdyQv(>6
z`d^u6SzG!P`otbe)fv(HnCT|U-|04bxuuuPRdrUj$mhcHMI?rE1lx`l+cW`L>Gv13
zDEe4}9-Ui5i37yWH#U{3849zmwE!Sx-{flBESX6&;qd_`bF$K6Hd{K2fP?1BzPSm?
zjdHZ=;rQp&U=SN&Q7xwMSL<Z~x_9>!mr7m~6Ell=OkZra%~Jc%F-|lEMm2iY2YAP}
zwDp>L<EdK+gv(NE#Qmp>je@M~6oo&^rTCz+d2&6ei3YvRZMeI6nwRKc#x=a^k3LGf
zB)GgFk*=^ZgQ!*{0Kw8N2z#7OU&!+2C&EA9Px#=k9wVj9^U>NcqJFYitj0EUdjdQ>
z8X$L?t8zFM01RNJszo0hPD3C5d3F6|4KZtT<lc_d6OY0I43pI?Q7`*JK0lKmEAZMA
zxf|!7|4Ia(I<8QlcJ!`7uOy*;F27BC`(LfX5wQmo#554IQqjpM+o!Q*wJP-%(bstX
zjUD)iJ*YASd3c6vll_U-+py8gw7S=b|6jg63Ic|eCYndq)!<7)?f&<J8UkmD>FiXS
z2LCXefiW&Zy>mp$pi^IL1|+wgS!qTjN1acPb=+k9Zt`wqAFL{nYvZ;Pz{m(;uKyeo
zz94d70Xcm7uAT$+KMy4l1R)f*`d`Rz?Ea-=<DTV;sHh~^taa#P3!yOSHCF@p8BxI0
zZ_}Sn$O<rydlr`Y&v*X?@t(@zV(TMdv7HQ<BF$N06A%<hR`9tV$N&(viVGwBn`~_3
z&&F(9l;6f4H;c@sYX2{~-ZCt%ZrK)22n6?_!QC}LaCdiicXw%A0-<pT8iKpKOK=J9
zZh=M{XdJ%Y=j?ZX=icYsU;S^b+0Uvut7^<KM!h^nSQ7rfQe$sCG5@**Qv)l4{&E^g
zSag%HXgG=PaefBknph(t51{3_HlQb42$YFQrXBAvTW(Y-u-O<lC>1r7%8E_$2uC_=
z%vmyaGioefhecg<4f?=(@6(BDGUY5h9!HN|WRl-M+qEU*yuji4aC)r1f0x&jzC3%d
z|DgS3c~a-*f*1d;CRqbQih9l*g?^q6a<XSstaeIl50S?cd>@3y@~A%X;opc)h=OEq
zI5r>Z*b;ZiBZPy}ET0M5=0Q@9anAS;-R==ify!yFfQx$A%2PY9aZm+b@}8`<#SX+A
zyfGWdVfi}<NpFWAt{yPWqFd(^f~7qc>B@S1;kR|3<Ch(Qgr^9w#w(5L>hS(+PKW3H
z7v?*e{Tbv!w`WZCce~wWyPIs4AEx^y-kfLBrhBbVpTSCr5KsDiHLDmoqgnNi3d)Vy
zBT;xL{L?>Y7Zw6*i2Ko$??y<CqtWLwR4+{ATPSRN@O_MuHdzUA({_jQ-Fr~-r}vDy
zz9yo*?QL4FzPn>?YGoOW5RaAWJ@C$Y4)}umUyH^*{Q=8j1hW<NnD1cJqj&DNUk1$<
zEXADt?k?;(iX_PY<KqVRzzRq*H6mvvX#UbM<;C}o6HDu{rtS69>&>hYsMR20a)wDe
zt`}XgdANLC-KDbev{jWochZ>E`1j`Rm6X~3o^MX|ppo<`Hl_;!7$5aNF#s2KEElXg
zmuypch|w<}Oi_=WI-k^-SX>U6C~T#1e$Hl@3Uu7@!QW5&6K!ve@QW?VUs7814b6N_
zdC&eJ=v{2+%R5V<RpoQGjOJsHDlL3qcv3FfTP5~ZdtGtSS!6)3HIFHIaRN4jyh)d8
z=B&Fq$o;&0WDY*)H{V86<;vxt_BF%@5~I6Hqmee^MFjF5Tl^y8cU!)Ac`h*_3uiq4
z^S)=zM{5wuD^s3^yjF)D<-hpDnWN2PDG{aLn@hhqrDX>&(9x7A(}EJF_oRWaTuMFg
zr3|6G5Ni~JFQlZ^O{M+}$Au)6KC`pZWXm9`Kz~KYK*$6EZ>@8Sx!d@>9^PSgI=!(f
zgJuQ!OhoK*)UNx(#PQrCp^*1fkAG!XgNX1Rq&b9zl%KGqZSNW0taW;qgg6e)FK<#N
z?f8KRcANu0(n0*+wKRbu*@HzWk#M6n%!5;Mb_&^*>(jyC5JNZcpz6bgz}DHEzrx##
zw^BUmCT$7U-iLFfVZ0XSC@K;l@>7FyZy55g5GVuDFk+IDF-xruni3g5H=iaANXN@|
zcdFh@A?@z3WYJB^wJYe+Li11TEW#YrARffWJWTI;ToK`autxn<IaxB5og6rvT;vn7
zuBA(cJgl6X)~CKWdNF=CI%;tjl_OvADV0`FBaxAX-pX_3YVUWwk9)QetLB#)0S`|}
z0xrj}!J=r}hwJ^6&AX*k5UAJ>H2^$}OCV_8urM5r_T6F`2(rw<>M>c-6gXIDGArEr
za7%5ROQa>(Q0ugyMj+S-bl9lX5;jSr)0J|v@oo9UOhP$F6G&Y&mX=-}7@2iK?rYrQ
z786JC+Ke{be~PkvblcLB`n2k;0mC|FRGt$pOw$v<BZ~Wa8|AQBD|N|+GH%SK$DmPN
zy!NHFQ`hc8RM7$QTUyO<7wsCib3(WeUV7&PSbpx1M|LeLH^B|3;%lRv{>^mu*1_Bz
zJm|A=vb|G+bl%yn7UD3+Rq`EN%$fJaa`79&{<yJ--J(5}vbXOXyRc6B@I_KM_7!-9
zlNFgHsaW|{uGvYi<_#fuykWy%zJNx%<7~Kcdp%H~vBqJgbSh^T3tL}LZ{4+I<@6ry
zJ>uvoEr3@Ga=z-cG3b6U#@zJTh{l_N<d)U`WSKibj4gxBFI=Ni&oCBPk<OeXpz7;+
zZ<u=0WGS(w-Pjs&z1%d-X6x}=Q|nIt?LpqEEc|x-HK%0FOuYGYrAXrk*v|pzdCH<n
zGB+C}P+7yI>KottG-+z?Sszp(-c;+k$4Bt&XYHvpHOlOGk)C$f+~AC6^U%Aw0hTI(
zXk`WZdz~EEo~%#i2@Ws}!_c6-`+#2^)6yYaFzn)<^;EbJ2t0Os0u+3_Nz#;mU8vj)
zdP5ErfSmO)!Mo>p08WHt6~2<A3$DmkUycw&1ZWt457b5~bzgc5gI;4CTbPA*uD>b;
zI(99Ch-KvzQjELb#I%_7$d=P6t(Drq?fQl0!0yMdGon9_1eV=RK4z5)xz`B3mFhNa
zI`<r5ww<RfF1FA0SK11X6e5~iEJ2u|Mu_~%DMG`*@@bb1`K&_Qq}*wr%&BLlUhAiE
zp!67w=X5B(1Ik^>c(nryG2d+p5%27)U~iYjv;POn>vl~nz;i}7X*z?xs8h$aXxrXq
zW2Zuo5Bi}{Rw7f_1JQPCsAUY)1L409_-I%d|CZ`RLr|K`GiJKFczkwSp~pfyR%*>p
z2jlCSN0MCe%;pml!4lEh)o#ChqRkFPL^-=mfvki0F<KmZV;0K_p2pO6T<z&BhA1!R
zv`|U2q8Ze?R!3pq-Hd1cTTVl*hS5p2UjbY#XQQ$)^{!VAUDKTO!czx87KWy*4F<;7
z>|fo+d5K6(Ea`4sgl$a&W9Q$;Z+(&-cD12>ZK2+PeW6C`s_luiSO_a7@*a9tLd2B&
z(HM0TOBo$JI&osb7$@j&h>xt$nV-xsBz6Xu$uRkR;M-WvcpdQeN!bPy`E!26Jd37?
z8FH?1@M_=}S)n&;pd2Jfgv_81>aIr1AD`W5#XTSK{<THd&`=rBsIpCPV1ZFNR`IeN
zQJFkyO?BKTf4N#7f0QF@Kaa20Rg0yRlSq=snr>{=A!Vj!rK7+XIAs_1BEaL9m@WGw
z5fgNj($C|+@ZQ(!M(m-`9DDNPLGADBBbhhtT<mLkL6VVec6QSn7iQRA#=jcTf~E;K
zFOyTmH{xzio*zPLg9C%O4h>fdNN$YJ1qZoWQ{KFtx5|gjk;q&3<G;;@&SxIP9(<ny
z+KZN*g%K;@wA=wBJBz|=St~h+_Es9KZ$8{k7}Ff@IlMhHE_yj5y94qV#J2);V*}H<
z>{-wSu0r)Sq3W@-$3_R82C;N;pO~>MWm4L&-gZlRn;JXv3!pD9_EAx$2p=)h7OM<S
zno$k>dY%hA?|x6KRjX;XIL1OJ0KE$G=@}_~tqyy-vx#4>;d!z@{1T#Lh7w9L^`69w
zoG7(MgPBSUmn0N=-jo|#87~i~lLG&cs$AQnhX20XJg46)o?u_F7}L%hNdg?|f#3>|
zWq)CbKu*_-jVsb#8M{(-GzFSdG)unoy)^({R4>peR_w!s8k<df!u&jE`#(sGf7ai$
zcSN>&pNB`3RkEWKr()N<A~?Ez>%Nk@G+M|iv}h*!oey=R8h+x-0|<TVZ!zo5DJd2v
z<1)yi11r$gkVM#Pkm%bjS|83DxfmaTka26ZDM*V&{V1Rnd@75hPS*a)yGQGL`f#3>
zfb*9Z9YU0Gl`G_~$4y^1G`BlH5z*~1aTx^O<H^(0Bpcfya@OfGF!ImO5m;$UU-w!H
zTl8XreIoD%Q3c~Xe_O42YN$6Km)bxQMw7r}_%%&^PTxu@^sHe$s{Qk)e$5=<Uhl2+
z{RJKVIc4kHp8H)LpA&-UX3#vsfA8BDXuh3AWzzn4HBE+%z1$X5h8uk<E>O`;d#2H!
zRu=$=shD=+;Nmh&v(mtO>#qSJ;#~k<THgXQFtWMn`sksYZU#>UyvLUeFr@#kSKtAu
zHPxJ2=sftKHlZc>$y>oEkU8g}i;Bn{xG$@cs~H>gA}2WBnw#f-G<mVe8b3gt+t!_K
zW)79dE_|Iv9IS16oA@)1amLZ$Ye&b6JS4+%3%2A9bVT{hJz<3ZSzV(?Y{ppYulb7I
zQo8%JdDF2V%ta+Rv|{?}+p#|tS?31WQ^VTZ(QFC=gvJ@y>Idoj>nv!arf@OgF`s3o
zBr;auCPMOR8pGMA10Nb*A$JvX(K->}gIN+a>1Pz}@aPEtNI^bSOJU}9=Chib)2}Ge
zIyT8X-e@hg{ReCDW6!8jg|@f5?Zn~X>;q3wZ&}WpuGu%iGR-$NLAV!wIWqRpxILv=
zT^~MPUElJ!gf~O~0<aVx`Ni!;nV{~a3$k+RDk@6@<eg|~A$YJ&(--!O=B;^(Pe{Eu
zJY*F9!&XAXwbkemDN166bF1OEbUNFn0T==4xM<A+Cvo3ue^TmsjfH+x0S_Tx=V1Ln
zXGVZR4in{5SGjZ2WD2b;9(D81`$eZcY1G*XH-?bM#1dnzy+9E%7Dv4fxya6kBrKuk
zQU8lh8cLz8U)3RvxfmFA+vJe>@fwg*iSnx+O+3ID*;*Lz)Fv=j)zZWtcrMjhC0R-F
z+pO@Y7u_Stb)p^8j78Hz4`iVgx7jMWK%dRBTXdu%Ha?@ZWNfXbY<$u5wS&XbJ7`3o
z=6Ie7i_)0MzyhCeqT8_o|B6Kv-Cers(H%dm4?G%(;WMarCpqPEdONk1|E_X#2R+>=
z1Y@kZOaP`|H6w4&Y4}^5u&C~uIs4i!o*&7M=MH2aw0$pL3I{*#iE`-qR*5R~KKw1N
z=2v!RnP$&(CZ6cdOMV>wOv2NeyDD(sDo_Xu(;@29v^JpJLuH@(u0zY08cmJFj8gbX
z6&dO4>x}r;tY#J?@F#A|6Qr`??%0uc88oO5=t}{9UNJ_dXsrfuz2@y}?v6-NlLb}@
zw4WMB!w4Q7^TK~cTfe4xZvVqqI0bB83~krkuC0~y4JX8`@Cq9OgR{gNGui{kKlTY?
z=eY)SyPWX_#=|_s@t<y9{Mrh7p2Dgli{9-<oIwgb$2vIsdi#VJ%9`ypuuLwsGfr*g
z6woa#T&8k>wec~pDP~U?Bl@A$+SvD{3Q{b(Va=Ij=_dr=SL+cr@DE@%G6)NCHg=BD
zfkVPe&s3cE{&;ZE=nT@MmYS^ZhegI^-tqcWqLiEPtB65nRF132#=$ov7}gYlL=Pk0
z<S8XR-Ef32Ih#rrv3evURC4`E`~_PY4Qe){_^_Z8C+bljtE2hZfV!xBaVF4Fk54-u
z+K!v&zBm~{(!uZCp_4x=7?$iAco)2{!}xhd4-WukLc5m9<zai5&rTMP6DSvogp2i&
zu0qO8>g*l5+y46)txZaCC~XaqWJj6-vjhaffR=S`Ip6c=PFZeZg_MXj;HbNCP2$rq
zbGq>o(d?M(wfwiSd+C$0<*1VpO}RleK9zP95*7L8LO%|Pqe*H?eglSvCj(Z%O}A1p
z1F(FJm6@5>{l0t9$=N{a5aLL_p||Amd3tIf#t8&T4Yf1g>ReZNJ@F1(pR4Q)OjgM3
znbVUVK_oFUnf3z6$4Gy_4Wot)A-RZi`=sx2fbs0@-BAJ;iUCXPv*w|mAL~;auK4Pf
zy+*=Prl~CS2;s2}d^1=3r9r@KmLH1CvWZ_hV2&}{a(^Mbv6}C28vWXi0)r^_^U~xa
zCJKedLZ)Zog@2xG7Cec!{ZU(}3%k#~$Z^m4BKH`jsSP3YKv^W0__%o9Rz3R|0@3@@
z#|OEVI9jSL?b5-0e&{fQJfjcK-By{xm?G6Y@e8mb7>AP=&N_YdzDx=hESVz4?<2eK
zdYpQ4f(hA70F!pEVI;wIyqrgQ%1{r&c47#H*ZE&N$V10bwLr0k!W|s#a<)J6g?frh
zU+ot<G%$>GT4r$4v~j?e1fa5NVV@u}1!M|blq1w76j;UO&^B9M=)leIo<hO|Tq>8f
zaTvqU&ReU+w|yMsN90GH^CtR}gOyU@P-Qomp7SENL-Z@27(FrrJNnV?#%qnOC>DwN
zrCzAWwZf9d%xps-8K}>QHso|Kz|(c}5x^$uOD|Yh!{amaqHMTCnGzfYTGwGaT4x*b
zCp+pr#l9oC9y`advOf87cOmq-3XeP-LMX7>?&a#Z=MFEfM2|47ggaurUe?uPDUUlb
zqv^U8MrJ2agRzPX36zRgraX)%<r0b2K~N5okC|xI?*H>~muZlBnP<;nxJ-K<(6{-Y
z&Gp6MUg_UW=#QM<#Z=@Qi~_K<d>Cj|uJ2df2`_DWN|}~2(r`*$<ORKjX2*@5?Vrx7
zlu8}-Se?>nm9Ax^1?pl4oDH=6P%lo?SUSdS^0<5y65ZP8h*;e%P;HROu+%tqg<Ke8
zQ9#vD5~Fttk}?x{>Pca-M{nyjE>j%MY61wEJfb$kO|xj|fLQ}7-eT7ItyP&HKXbeB
z5k`OaYW~P;gDm;=s3tmM=Shoz<M_SRt?7XZ`T<7qkf4FIkh8Y((O78Df-)oeh@g4e
zsJd}=+Jin&u9|42(DMZg{F02?bg5Yr=bs_z_qBRCXuj&9p+zIP!me1TF_j@n`%yqe
z*~k{eqSD5t#)xicC<>N7Ncnuy;ZI1cC<Cdqt1?#a2-jfLREfb(8nU-v>w~S>9BN{`
zbqfiN*aufsw~W;V|L8a=4UpZb2RYg9EjCU4aDQQLM`_a)nDlYlPWPlDi*$iiE(z@L
zVwi?cf9FMY{!^dR2cLW%%}cq%n&`Ukr}5K3qdvTy<=9f5O%3aQYJ1Vy2k@@_MeBx+
z;>$top}puQ5CUG9H=5hz-*hZ>HYowN0Tk~pvnO<l?<MKl2l56d9oDVMh%x<b9gW9L
z%|>KasdKrWP7(Bs5#L&MOg&%odUVN)lsv^Xt?m@)6Z*+kxzYA@L&=ph*rQ2@$WVH-
zkd8jr2++6H#SgW0;ATCdR|rU6a*O+DY&lKSv3}LYKWO4<QA5A={$YoALu{sWWb~ma
z`0EAG7Od9MEa#zL@q7B*8K^+X0n5K^Qj=_QcQjwEd!5x}bKE#-l$Pu6bU~Xv-g?oS
zY2>e-S*slWN+`NAe@!G$mghR%98#Gzy|ih_e`9?Z;OGhv4`Rgcbh~2=S!f6B2o;~3
zV&s_eH#@o^W1~WZ?C~vO$8Q3lvq{UyuY~_;#NNR~c{wi1PP5M=HL<Ew071j%oHrEI
z>ckWRf;kGr(IT`OM$A5fedCBVob<{32NS8o8gmz=))Qqt_n&}F(~kU$OtX_1@jBgB
z=5rB2te@0Z!G&V{*Avm-L9Z`{!g)In<$4A7o`FvQcFPLAirimWP2{0?>wy=P_agNt
ze-det8*sXppHl+bY-*+=Qq`%20hi!eaIdB90IK+J+bBggu{<6gg~<c+EqF2cE&{9u
z@q|zu?T1=28)`aqPM!L(*n`QFG;c(jWfFZlxfU+pb~GaS$t6#hJo)_?X2V6*eR|F6
z&`O<Cwd1Zc#tgUc&Ax`QIl1(T(%4-z()rx?UaIg9))=exI=+NtH@`;(#?N@;%8PuM
zc$==ZA_YW-3XnbHhBMUzefS7KvpY@=fA72bsl5}9hOnsR{c(>iR_P>U5;ms1&!Nwx
zlBqto#W=$-i@~7vVIZf~I*a_?bpP>!6?^q)g+&l_`Ijy7kC0A^_>VxZFFrJiIbTGB
za_@hj@qann*jyOk=@b>f*7^)A!6UUTvrZBJ?87U#cE;Rti04=2+F;*ww7HLH4wr9R
zTViyM!vSQ!!8`Q~ZO-RV@Yn_x9c4ew0sKH2y4*9$KT=!_riEN{$f?$R1pS=Q_c_m3
zxD!01#YdVxvd*Tjwxo`w&uhSFnsXfw7V%B|338U~iPAJ;OCCVk+3@k@e9j2oKg!s_
z#GMG_F3>GLa>t;PcV5@|&yn~2T|bg3LQ|M^Y6*Ey3cE6Td6*pRTJs61pniVY-a{^H
zd$fMyRqMAgV->d|0qhJU1WgGi=8TOeM)uceIgtzSJcD{uZk9?!I|9EziCaTI(x;f2
zi+l9IoUeW|HG2fE3&z6wYZIZP6%n2QfosJM<Od@T>ZXjb1P`Nv1WzN0L{)MvL{Z|J
zvY!!^W(?Ykv6GDVME99pv=+wS{<`P>6&?<Pl)-|B+{(}rJ~OH?VjPT>Sg!WXO^{aL
zgQ|<u8M2qg7I12;R0S%qq7PKeNRpBV;?m=+w|oVY4t$-^y}C?1%EwE(fSq>Dy!a$3
zWE42eMq)LTs(yJa%EwV0rKbqKqS5h~l5A@P5*X2hUYzKxbYW4twI6}Mpt$JB(+4AM
z61>}{;bd!LnV%@)_y%1=Wh~XXx3xx1#qJz^r2!AKTFSgfG*MY)!DVNr8Tr$r7|n;1
zex(LB#=y@-17~cM`@-&4Crj3(XsPxZxph&w=atrpH;Y1lz^B|7<)`$dG}s>_yC=M;
zvZHo@s9=LC12E8NxQ?ubAW3sz5`#SY(r#dYts1Au;@A)JwtW>Ipm6<~Q5~D;&(!5x
zclr`#M?hkRQEwts`Q0^gcGf*7+>S_T_q+90{@0`2z(~KB@XXG4yoV-_dLGN7q6P(H
zyJ#KVF1}ib{|=^ba5osz0Y1n`<kQCOe7O`Gp$wAfJ*|ZhIY9g^xjX@4Lj1;QOI|hg
zEw^_<Su;#?*SrWRMXXNi|4<=*#Pp8(Xv1Q{l7%1m>Z!@ukoBWsj#;B1&fYnB`IhbR
z3$B{`dmTK$UNJgdco{Z{>}Z%G!bv57Z(3*9)cTR?9JZW>qTPIqeKQFt$If7M0@j0C
z%7@V}-1YAaMhmR0<33$$Py9;2p|_srR=V}E*GG21gjtjZoTap78MxMa%HgG))J>U%
z)a05Y(QA+8R1?ZfL6OC_3Xc9}QkjJD3fu;-rVE>L9`w$3GP6Df8Dc9MkNUwuY^C4F
zEDcc!EBySa`&e&eS}PIwR2ETY@z2UN=md_`v^<WaU0pwL>nGZMd4{8I&82rM4dkt!
z9yZzIOFBC9tuH}0HjFtL0kv{dg4+c(bK&m@XHcI`dAGx^J#)^_Xx4wvsgHYP+aS+z
zS{@Rc2NZ*{_|~y@B%oCb&VEAQgnh;>I!xlxL}Ia{RHr!;)D>VN!CUY-<*|tFwju1t
zLT7|^<`vX*B3g$o>x*fefvYESYQea!#FsM;F!8UE1RkSiFGO}Pi!Bm9;T+A3sfZf`
z+HS8vDaFO@8iKwR?H847cjK2RGyT_4I8Pn+b4f(ncz!S2bH~kamSHJVhH$!X0XmH7
zuNAa-8P`v&eo3%CvENUZ#G^0>S#_Se>JI|X_A@_UTteZ1=2vLdlxgWF3?EW^^O=b8
z-xJe%;b;;vC@ds-qrcvFyML8Ts7IENfpL~#qVlhqJJm}4%&57~*XmwCZLzY}XV0KI
z$%Y_K!lKOY_2=MI@DXc=b*i9u>fBfKvsE)s%Znu+fT)eV$AF-%KwG60J@SKQ=#vZw
zV6bvtf;rK{Lf4~`8tE`?ows4UaUp7d(wKX+nzGDD^++7%J?OXd(wO+3HWacmLkC-<
z+UXmrdE{Mt?lgCa#dT=UPvD%F*Xkc&)Ksp!PMloz)=}~L2ykWBh9hx(vFd+<oUN2y
zBmQu^?zSH0Zor@QMxeQD1%FANE>}r3<1^)M9<ZNKAO{}rVz!&N42ENy1v$2)o3D`2
zv;;PcdoDJ_*LVuVQLy5YKym{{Q>_tA#q$`asg*g=!$-C(z143k@yb1^EFy^;sbyO3
z0?DWy=8X>9P%aRuYA(QwDi5bezO&n4tM)NrhM0DqkckGMOJ$A9!;r~Wz$H-~)O=8Q
z%QJ@R{-S#WTk{shUZxosp!>nEds{R3PpbH3-W9`jNd^1B<MFz<j7I!kIJxr*a4T+U
zJpZ0ma47~6@wfHF92)V>OGTRX%XL-BUG~}&`aaR}T8=Y;ad_M?rkf1!N=R3SM_pSB
z-@@n!$3AgI35`N)%Zoe5$#~gGR4}lL)y+Lf-m{KXRZdYLi2|2YtD*0sS>O79#e@)i
zWJC{>Vqo{b@5n{0Xx^C~PuMPTQUnb`zT|-94thdY1PdWfuD)h{VHKNPRnY6!`HhNj
z7IQCh<X=Bl(5<9z8lhb!=vOCPY^!h74;OKVFK1_tlRlRl6o7mU_LG~kPts`Aagun9
zWxqKQ3^$D+233$(&TEcACZGsY%Z}QJ+dyKQHkn12OBJKV<uDF>;pE>Uy+5nR;(y$*
zYW3*fgQ7|Z$3QJwsX7bRY+4-#cDW3Vq`aPCOsm-pn?&*g%rD*g%pYiK5R3iu9A7m!
zX`EI7Vu8z&L({7#S}g`w^OsF0o`ioLFE@V(`$y^vhL2Slb&pgrr7!}@Y}d~sKhJG7
z7?_&iFlaY$uaL^^0ZVR)2EKqdQFyz-B~(~>H^1?n7l@p{<)&i7L`qE7jvB|~gmbP=
zQu#(|Pm-$BuJJ@zwgn(jM*G;Ov3jk+_micwx=}lMt!<mbHDr<#@S(K1K~6o|V4rNT
zniZ`VSVh=;VEw*@(qd!p18p}SXew+0@ZFGKKS|tr$a#gWLM29M1ym#Nj!Dv7v%(>{
zvJYKn4(HB22v!5(f{+03kRt*K^<~-%)Op{u8#%r=`DstJ!VHl7N363o)Vu{r63+0|
z7O2e+w0MQ!{pDplgYjk6p5a2C-eR!8*)82ju(n&6jc6ZHcWGJbNEpvpn2UDMUo3e&
z>r3w`=Q{bDuc+PDByf%TNa$XBw-RUZBX>Ha#r$q)RzEQ9KY>D#K+NfQG+GfAt|HPQ
z1B+=h4)$GiISbWL3ms=9-c-GRHEH?4&y9dJ0u|Ai<aWy0%CdKmMQD(Ftu@#dk>TM^
zbhB1c_I1<^_^;>LdspjIAkrHdVGP$>%BMO_oJL@r#uK|8L~y?>Z=DT0vI0{qjm@+e
zzRU1tG6^YBx#U$^kvr&4r|yX(>ya|2@&s*C@y8d^HGE4<4vyf)sNGb7(fZL}mMh;!
z=BQdzxcs}4k~Zle=I$-^v;XvL&0)=S%EjSDin>rzGkk+_BX4y-{soDEa`iEndUqy>
zMW(UqSLK4^Uh$G%Op!4DO);)D8PVxlm-^=UYc}Isf+l|>^2m$@mO;T0VnGz>#q1&8
zpQJB~JN%S@9f{o1>!PB^`lTGZH>*AOqHW<*ExLz~C|-?Wn}pO&;P1&fgj`bueGhOg
z_!Jp5-33k~yTfww8Q46rI=~;`-d8OH=&Cc>k@u_PheyrDk@lpfli1r&7M3!?KWu3-
zJ2i=kOQQ$MA6<%RBWQ~+C$zw;PDp&5rV9VG>b#E86Gw-joULYQ80wNRAg|qklxiS$
zm?#d<#Yt&Jp11VVD5uigb2Vms+_p;T9aLn@JLtkR?E$K)pd`h&`i0W;JIyVy8h7GB
zk#@!#Y{v1l-esPZDSO4$<@W$Z*w4I$E7M5<bx~7qk?uUTN3o%MiZyWlIVL?rb5>Jv
zc}*qwQy;1c0*t(zHc~e8+nSW8d3lK8+|U%VM7H!dx0HB7q>rCI7`KFLAuJCp2)>WI
zESk!m6L~_{e1TqQP;UW*^ddA!o7*LXczsOIw)Vh;6&h8=O{mCcxuD`DcH|us9Pl^)
z&<!?hQ0e=w{XNsbv)@>!f!vh;RVAay^N1Lb|2H2iL_w}MTB;=VXd$zwWV9~K|K>Do
z+)5Gmi7Chn$i&$|4ogJ|<tKcUDB`*XG{w)~I3k_?S~^D^ha24>=Q!JJ6`N+UIa#@j
z;P7wVj`xh!d^zA-T3pmbw%AJ&R^+@=kRo+NHa6e~MCz;g?O*jX#WEf~)5!-t4V_S`
z;dRF7@>1Rg*MnQfabuEroGTcJGt*Mp0T)TeTEr=NS|op1T~=zu&M?Ff#1VEJJ<axG
ztSsl4jgHaOU&H>aUstb!C;m#hF_EvVTA*JyAPv;IC{cSz8?kg~vSKr9FUTpjN8#_&
zE-={!b_i9GW^VnR-z<-Jykxk%8LDL{bbs&L#wR!{C)ld3jjnJam4P)CTDHZij(+E5
z?|V@IUdZsaTr0kvJ&$L+b<l-o8oB#bas=_gfu<IfR{e_rl_P*&nU!(&!#LHC3W2^c
z?dtL_dKZVwa+?>C6W6snP@BO|6LR0<@1nB}dz5;Ep&7S_wRKvhQ|hce)y;xT7$%Q*
zf9WK@4a?Y4|04R%&xEk`WjD$9?o>FzGrVA9YsWVym_#<4)cJ#IeI}$3OdXu9v7W$>
z#7d-m494*cVn@K1S`JO{A;&H-4xA(AxSB)175|ELs(f$LI#~Lr#Bhz<-kIGe<?AF;
zRFp?_PAz=iDHW8_;!NHJDNgf?l=2z>PRb=SJ!>O?RV8<<)9VQV0kLoIKXxz5BHL~w
z`@7%kl&N(!8$}K;2j@=P1KGpN`phTrVMCk(Bjv5Bz4|HLeDa_=(Gb#%NzpENXoOqy
zw6qxmjJ7ux-%^hXRd#+cJZ%H?wu5`)*j80^Yme5u0f6Zc+c{|6chls&sF-o?ofl|f
zD81|z1|E{IA*r0f(YBo-B>B<v_T2T%>0OK~hxv-aj_d`>K{rq#$2adidPu+MR{6EZ
zCdez9Pa&zfVkJ-XyR9?-V58KI;JmBq++P8?3)(}_yp@|Xs^=%=hQHfsms;k?&C(KY
z!hp7l|7-&O&;N|N7O|pMDO18`%)_x_`_h2FI*h!-(BcU5FW8C+ofbj#@>C5S^Kn?f
z$44|f6o(1R{z7V-J;FsIS|;kwDcLvK@EC34I;!lHJ{X6=NG>53*~q*^qjBgl0+3P8
zXI<x84R*k*TK%n6S`9?pG(s)`lnMUXZc5EgF}V%l!wcg*nD`~F1)HZ!X+wa{oV-sI
z6>jNcV)|L4=El#2*R))hTd(_KRiV1#vpuy=%TieFyn$nbzS0_sGp{=x*Mt?s^Qpe-
zn-S5YjyS#M-~oeOv!Saj`@{W@agA=)J0TEvyV&N#C1Y8QmCrz>Z8Z9jIFEo%0?}vO
zA^{IEQyK_92}h1!SAkW_NP#=7=wLthv)$`rv@(<F$mw;i*R<RkJpbP;949XfCo;2C
zb<UM8!4vlbUNu#1u7<52UOv<LR*fKjx6a-*xLm`_{?$gWRNUWWW;;4NKdgA>fCM#x
z`Z<y575jV2Clmq`N-wYS_MG9u`}wv(^7c8-A43;UEMsqOZdykvl#wNPqn*7tpXxdW
zGS61j4J-twKR0i!KMEZ`KZ*oylI@cNw8g|a(L%nUZx(kQ*JNaVM>!(=g$P@NT9FPS
zve^C>wdO_KF$%pYu_!MAZJe%MN?6BR(l2$EMY-M(J|`Y9BV6ERb8=bcH~L<>`u<90
ze8U;k>NG(B`PKA{k0TCyABijfg>oKb)`9kLM=)l|);1YkPCv(SDxeb9f}X?*r&dMe
zaD<rOtylHa#Sbe_;x|oE?ys|1VH-4Dy+W>v!YeDDL>O2K_ohGh>Xy(Cp)L*UpIrnq
zjQ_YWWhA^e8-4)_*Ld%E7@CFgPW$m5JfD0tdPP3WhPIFw&?<y1a@E-Hqe2trrUwM<
z!=<0UVMHpRXB@>lKOumze?<@)4R>{i=y|RnB<P=I0;M4d!RShL^M^0?i=$A?uj0rv
zVIq^ezRU+=bN2WVo+o1{lj9C_U<;E}>bGgc>U=fw$u-*8<({^J-oebsO4Xx4ZNZqv
zza;4Vqkj4k_s;5l<yPnSeR)}r_=^C#ij{pSO)UvvvrEjZQvr+io*KP+Rrf71Q9n*D
z<+s7KWIpZUAnD6bX>R4#Ktk<xGTwRM)lhxe3l!%iUm!Fz|CaJD?Zm?r31sBkky36T
zFKFDhN>N!?Xs6v~#HlX%FZela5(c83pXT?f`4mEKF$=ZGSddGpp@9-8zAR9_Zp?8q
zX7RDVNj|F@TEN#j+)9mVt>XlJ8p$Vrcrwm1+`-b;qNl)U=NMyi-{I!U+CCqkrRFnc
zp|1)rP9k4@gYR)ln&DIv52W$#kz+_3Vf}nJG~Q=k0voEA2vf#`>O345mAkJ#`WS-Z
z8QHxeIc)|XQdR-}gxIw69&r7*@JNpFpo{VGaQspv#(0=~^=EgWmALWQ=^9yPKJZj-
zo1w@`^vi?Usi#<7ocX|q{Y}F)YCwoh485+LT#AB!80znCm(6CVM}YJ$nw;lBMEFb2
zG}&KrbglLLmv*~2Lj6&WgG#EWBl|qeHAD2BH7@b!;LAczKs1Nh8{V2wXq!^+yHMKx
zF}HHz`w=*JQAz_`*(0LRze)$x(XtHx0tvfVznkE&2!%lWWfVWYSLXET!e!7?zzDL<
zv;3nCz&Q4D*r2=Im5|{&N58KdAVt3UFT%?UQDIb(@Wg+{f3r}%_mSK2N9ndVFYbjC
z1}+VhE!<d96D}xlHtr`QCb=jSv8f0%Q2yWxCkLFyeN+1CdV>*^w|EBg;slV25Y5!Z
zf^uET1*^fhbWCsd4;f1vd;UYC*wWO;gY1Gz`y1aFROq0cquJDX;xEZqyZ0EvgRDBW
zy&#{ueA#3gzo$C$VT-$vg4v(VZ>z)I*bFd=yg8~P;F$Y<2NbQ5cD4f4H=`~@-QyKb
ztRQb2|EgDN63%jR0xkjE&dJ3Cd*e2@qh_louqJSggY><?1WoDaJE)~G5>LY>+$wj$
ziS&?^LD@fE0AsfS?0I2vd`pRqc`|J*lri+fa{q{5ww2y>^Bv8jUnmKyRNuRQn<9rx
zJRWOSrr)6h`tP9_@K*>7o*5ZfEkRM7<lmg#i<>3~_S|XZs5Kl}90&eVNV@Odu`>n;
z3tGz!5@~2r28SOD2XPwdtp}BmIiR&UZ<mEp{T+!3HQr9VhWm&K8tte?$H(ln9eQQs
z-}Z8F*+GmWxN4rrgoyWk@Xfad1S-O<vwiq1@!xAk5!k?NsQA~KKhnYfXUz$b@2tT3
z>`(CYnnm%S7!6e?(R5Ufeu~X{aq^oSJWjHdMn{O&WIQEjt8bbWRV*&}HgCW8y6JUV
zX?F|3t=l%#tb<tE#<N!7kxeB0OJ|M50^SoYa6*B$Ym2PY;*&oZ)5jiW)sgU+t9gC|
zNaWs5wU9V;T;GnL?a*%Ls!qPWNcQuhd&TuNU+3lePsTnFwUW{=i9q?4jLTky|A4Yo
z3AYG?q?<M1-!!0=kK{(agl;OSHNIumu8}pv!)31JE`#P#km42Z^U?sdj+H8{QqxSR
zn3C)?KVr0GdL$-XLiXzqDk#0y(slinILORQO@+7q86*g{Q+)7l2@nR9a9xr!toSQ5
z0$6^^*u{m<LU}7QobVJguA{RD9<#PoI;=HT{S8?yEAP)d1=2B{zwhrhj!*_?xJBoL
z5KehpjpOZmpd`8o8lN8Z9(P*Y*2}cAG(7U|Uj5V6QDKYNY;I0gz+FIDTVox^l@bT6
zRKCc#X&jm$*&VE%(X-D8&;)mG(4n&nx%l%?rBp%G!+R|uYm~ZGuHu?1+#*FeTst5F
zNmTXZ<ZHwj#?c}Njnw(b$_Z6jCynQ^%7G=zqIyzvTRD*IsLrh)G8Lg()vH0*iT{O)
zo)CdxfI!aZkRNe5$QN+a`iZg9Duq#l4LL`OgyDaXhX1D~SmY~$1-f*}U+kT5xa*_T
z{uu^ry#I&L2+FCMm4#|;aox-$@kXXq`aN>Vxc^@oWfx2YeH-%j>12K$UU=D`e))xD
z`t=0=`y#^gL<|h>?{?avYJDwCrB@o@`Rm$`*xLRRC;#N5fB)x%1;lX8k+BmO-~WgD
zUj!zfQiPn*gJ}i(e}7|w2tK092oj}%m*PMB{Qr6f1|N*6B7~&fw7x_H@sux(si#V~
zI%`8kP;U&^Z1+WkpkC;Id$h<Q1@y)4IY1BKN0`NJ-KT@Oh$yOuQ$TyqI&b|bWjaoJ
z^`tqyO;J|u9a^#Cn`Zaxp?=Kw@2MddH`hj2FwPIYCtn^QYZpZ-`C=Sy_X)@XncH4(
zd&<J&cgaBs^_JsuJwnbOmk{-H(t8Jh&FS~pwCg8^LAvI?x2aA}mjASJ{}I@P#QkeQ
z1u{{-!X3bzG|>i#E(|VBoP%abEs>zF*6TVEt2r)F%5+Mrq$pzmt=UrbM*VgkAhlJE
zCV(GNbeiA$e0GmXuTTcTuY=9-bh%EQRD59|ign^05rl8AW$R!&UtFz4iMUL=C0_jd
zADpv|4(->Bmy&;}EzUcRoVdgte0~isRc(<C13LuxC;!S14rWOH1E2jT5=A2a<;Soy
zBHkg6pc7`@0b8kV{fdpC<GsX6QDa~%XO|K^%m3uRhIoAUWb~seCREGjxPb>thWfHk
znshvq%l-iB-VtRuqSxWn)wyuw*md2p+MKxFHh|41;69|m>pgX_@^Gjh2xk=a52f=z
z%>C8`s65<I=J9x$2ey)2u9vW;v$7LWr}(KD2YG~*xI8BLC)Z_sJy-(UPX}Ks02=W!
z)ELCXj#Uzp2X$#}|5xCMz~Fs@YPyjng+^Y^fx?s@UY9}X!3S-~ls4pu0U%}WV<J7l
zpcQ8Cc@`#W<U?>J$)88Sn63HK4%Ld=cHyVdJb4COpxVW&p^;68nRVx;@#O3SwYSn+
ze<7qSz(gNCH>KSYStg{E=!n=EDk{lVc?kN3#~QTRo?o7jkU>{69~6tre4?HHMvw36
z>I%itc<EIszJ^?F_lZM?S9$f^9WV6~F@zi?7DyKrjv+>3w1}YW*j?Vx8?+`EPb%f`
zQ4hxxqi4vvxz!VWbx{H1jj%>&D%FY%A1`f-snDN~V2=Kvj9QK;!0-Sq{~k@IJ-FQY
zddo{kqpHeMqd5GH>Ho0o2#Jjr`Q^tQ3j{7rhw;vPI|EQ0v9PfAZ;t1ZgaJYHI<+Rt
zvwkK5&`F=k;tYneP{mszR0Z{lGE*K_x2ub_$7ImzQXB}W`<NXM_m&draT=^BF8vNu
z2tA-q7uP{q1<!I7qyPHs*rcDp_pRmwxNa=n@^t^$y<Xne8;;R}SW$p-qkEGo8ILq2
zT-{o+<?*Fl9!dUgjd8@YNzI+TiJ(sHuv)mhC7l(Qn%J3+v5VF@G3=_uQ@5`)o1;At
z)pmhS(}9q~G3w^cwqxPWn{_@>yJv-I+^aoF<w)f!rDc(o#+<a~n9c^OOEY-90kMKK
zzAi#drHVX`)!e2Hz2y`XTpz#{F>3i@yae192@3!^+%y(_8s|IGQt`<Np$msOy<C6D
z@fV&?(R|q5&w8&JT>6WZhO|%}*Nk{@scMxS&PK8B+}i`uBGle?r1VZW1v=D2m-oBN
zhmPYR+}ZpWbG0Hl%e=G6p&x*WB&Z)PGHesn1)0{+=){8i*qdk^>Z!a)Znf6zs2#ed
z8yMy|UmDVRrKddnY~sE36s&~*>UM<J6b!x{bhhjo>k7~MG9`Jz<2Skh)v-2{HiWt_
z-JN;E=6h_bm21$qRXEx=tXvVB=anX{0H5~NSGvukgm5(^?l&yIv!<c}g=rMumImt_
z$s(W%>cru^fK|KDb#peNEoV+^y#pP5A&=Vm(x4c9g4dDGg_fS@>kF|Lc=*q*0ZWGd
z-#yM|b-{;|Ag#BY_hA;$d5Y~Qp_O&~dK>gB80y((Ux$Rcw%95jUut{-<0+(oG+)59
z_EB%DHi~c4SUO{guE!ZT>CybSTet<SRqX#b+A-x!ULJ4j&3+>>W9(qK9YC4UP*68?
zI*D371zQBo_kJg;>Zs9tIDQnWWwea)OAC&+<Oz^=o-a+Duh5=0s!Rtwo$;(RJ7)P!
z#U(CQZRF`*PTWoMZ2k3HG6r;MRG+>EM3QE`J%U(Q+T2UFr2}*@Q|DSGp;{To)h{nh
z;V+9d#>UPKZ!LBU41z{aoMO2GzJ<1P#cBmosQwGFRzIMExty^Bf2^kH2=cwUCfBxS
zJKX+je>KPN{M3|3Bni`a#JC9BwR&~FmUH=3_EzGC_}c(`FWQka@pNQ?f^3KL$O1J_
zQzIU7ki;y3tb!M!5ePyvB5&-Jvd>w~o)7eCdYPHAw>aZhEYvX7-porLJ*wm`owHj;
z;?3cpq+Fb4h`1;ziYh#)J>a-bmD1Z6=XIFM?kU`h&8f<IFQ5WBU11!M?k?#Hi6;@H
zDM>QqLDG)Bc>@++5a$MH`2%)7x@jSDFCTRj2qjd>Jri*JC2q-a*l1S-4u2AJ>HF&1
zpx<dxb^;<`rW4%k&MDi4pe3HiA{y&j+91!s^K8f_m;7BpG(KMZy?X9wdeUfIWZ$CQ
zxV&T#L(l3Fuvo<an^2M$X!I{P<8kuveeIr4+mVP<|FV1?3b^TRZ)@M0Zz<gq&tcyi
zLJp_z2pLzO_DIPKx;H9kn3-~Fc*~}o?zvCutw4(06H9V;84T)LX*}lKzvbDg=NA7H
zW)mrlhT&GOSwV<JjtnqyITt`ZLS^mvAuLtwFjqV|dwxX=yXnqW8{UE+@7%9#Jl=zh
zH;R`RxO-UF{MP$^_{DK8mjV2%#?6jKTKO~7FrDMB##hTVUu@>&QRY+QZ_t)xti{A%
z^g@l%BrRf=|7jwUAX11O9L(ixbaH1xgx*>4I=$)HE3F!^BV8j#r}lx|0|sBrnSxmK
z8v@<08zV`HZ_lE~T?iCv8nCvr{P-fr@39cNK8m3W-o(E>96E9PXLanKyOnjOZ&_KF
zT(oq!^KW(E9bWF#`o^gGA4B~)J)n}pv-xBiMF!#Ry|A`y_2@^DNE~`KiSe-B@1J@0
z1yHWh3q;1{=$S++<XQg|>UDTkL0qB!jZm%!qgG{tBjuD1>y-I;8dRpDZpl{DyAFR1
z1iU^-M~bdef051pqeMrZ2aN9^x3Ru8_KraM&MOthV^jn}S0Ge;yoSG8@SA}H=emSi
zopn*mR?77oFV-(U*Z?jlG-fxr34YcLYu#4}Plr?1nJ8uOI_~dhmSa<;%`l+40?rXt
zb^Fgm&GO@Bvj4FDeecK{q&*IV_nFVA1CtLS1tK3JQ&5|bI=&5S^X+|%!7+pZ9}JIT
z|4ry2JzHx?wp*wq&(doN`apb%UTedhsLN?3^5$%tbwR@y;37<X3Drj-iXk4c+k%0g
zC_YLRm=p;}nx)e1DB8o4hjXhAgNtIz99B4nD71ju)q3KAlT?dQo_2G}>a<brWI{o^
z7P4lhe?GEDdZB$oJ@YxdO4y&=zKF8>P*q2spwnc(P-wW;GILJ6Rtoj(oXti%x;yG;
zqd+^r;PIRAku~dsbvjOp0A~mA)IdqEY%7g4y@CCOqa33p5{Rp{UN~^4Ta-_acg3D+
zpT{*T&JQL*veF-3nyOrO#OgP^9QEy888)7}c5ydyp7*}Un(autp8ier*#GmdS=mv3
zcPHf6IfC9w7=RxAlpkzPaatFRq_noSUxgRYAe=$D#YJWBMrQmxL4P{8j{fw0@V9;2
zG^|HCS52rQTeO<WEU3TE#WaD%e=imM&rkFnLN@lr{I|ie6nbnf$JG=*kG~?C<r;Nt
z=wI4%L&QW_OxxZ~mMvE4t3!*5GN>JfMuiqLDz=U9G29^L1TOiX5stAceVPh73`M^d
z&WyXivXw|U3@RO7XQfapmj2b>8)i<Hr$^m^PhYT*Ei|F}_R_#7h+3@t59-H<2V2<8
zI_0Z}jF?IvpWDnQi^AW`*H{5Y5ki5A$<13oDa?VYB}I70IwR_<BsU3!uU_#CN`jK(
zXj|BYOMv;_@$b!^j1mBEdKu5yUTu|mr2xZi;?+RzI0TrGrcQ0w_D6He_Af<PIfVMT
zdKx2gqZC)(w~`SK9)Wh2gj)hVl2O}FV`;5LN>V}Ma&zBpFVv6hc$w>8n)fojP&j#Q
zL_{M|iN%WKMfDjIZ;o%~=IPZUG{#SNMbeds5yCO%HS%9LEN6XSetdigJQs*v++;M0
z6RB@>+(?4z!t+tfF9o@rCS+tGy@k$CUdg&Y7~)!0Lr+6|{0<W(450%DEqpPket+|m
z-Tfur!A%k6sM~nYO8C{LmWb*zU_F6G5nrCJCLP<1t6Q^TX^bx8bF<@|+;vU3SNG>-
z<Ki44_q5;+uD%C_+^<TR9%dNl^wE`s{Q;PvkGG+GDaA9jq>(li@A^NXEls7>Fxmk6
z_R(j-<G8bhSiW_>`%{WrLDyU>vkr4D&d&I-iK~|du(Fv{Ww<4?H@6{QR_i^p;!c+H
zi38V5L!N(qnCq@K<QskZ7=sMkR-$b=)Kz#gXH1Gy0=aCm{DhIrmdC7JT?wIvfB7xA
z`s<;DqvIsGj){~LChi?&F9O>?KUbLV0j8esLOyChQ#o~CI1mg?uc<78^SlHxC32|@
zqt9^2xGCM`3FxE%=tLjZL&Mzqj2V~@gxYd(;n=&Hd@@X(ON_jL*UsV?&F%nS26CaH
z0_J&DsC9p;;uPL2a$b+z&lk94F@(pPK6p}@C8`YCPjo85(8=30b0W17NIgS{iWwu{
zqO?B=<!}Go&`wa}_xn_AwMh_8O2&SL+A4lfoL%VG0QbY?@IAG1QnX(BsKk3?|CwDa
z-!g;qONRKV+}GEiY*@&iC{Fvbo?GLEn(%Mh?%~trvdm0~49sD?e+sme<kA`Fx#*LB
zQyfnfToPI_3`qBrYF!!F!tsjEw-`C$FyC1_hhv&ZPtv&fY*%Pj*d?;sLrIOsNs@)g
z=t55Oe|~YJ(0N8kq3kc$?cv&fRT)IV_x(x>U*~>$kJ#?<fYfH`lKil+U4mrX?V+3b
zYp2!zC_d>@&DIX+SA|;05P07Ca5GSgISbT?J<OZ=n>fJyQ7hHCW=m*tDFvvEc<g*y
zczIOR44pM6*N^s)dYsQt0U=YofkoNv>Qp#s<#AfqSlKr+4Y$ARgV$u5bvtk?QKJrI
z+MO4r$x#p7V%FzMR!b$pgU~AH%(l<mBoFE7z-49x1`GOvH7Kt&G8_CQ>+=N~SEllM
z$Szpd&C4dNGF{$H_y7Nq@LzF31q*9Jf-ol#4Fm$EWXjybnv=2guc;G6GQ!~C;gRu3
z@%D??bAugbW5MFFUn$umzZNB0Iv{tqlCgb;jVVfZ=s%0f6wc4i<fNE}oUI)^qa3F)
zM&0pLBJk{MW||?;eyY>xkfF1_#m$kXHzoOc=dMhsdI6`17r(xP%=m+>)=y(fY=hA<
z|Md8j=h_{%xq*jCu|tS4eZlT(&?L(NLE%Ge3=TZ`$}DYq_+nT|&Hfc<11qbq$-Oq8
zbB3bp6bikC?m-D?wTlg4s2%Y}jnJ4~X<O#wvrp3#_=MUd{er<Hy!u6s1Rb5gQywL<
z7N`}5MS)JrE7voTt;p|nUSIb3pq4T-4#)nJf!@h#eW6a!zcK~>T9CR(F6+zUd|eQ_
zA}w_u_nR18)j9hgeQf)TLV4@<H08Vq%mlj6D^26cwCE4;L?}xrME3)OSXObLc^qlJ
z_C;M^WA!`ZWiR>r9U^Me6jRQ(?FhMgx6IQ?7=tr=z+@<A^}kqZZQ<#gZLY8~c>p1r
z*qV)SSpb^{U4N~FssH;!4dTI?Xd#3wz<jBQgLzYviyOq2sR#~!_dP)E;l{tq>(efd
zDqOM<<tQ8@^8I4y-xwwvIeJSto0#JmhW&`7FmOc?YgGFu*T|d6EFQ{^h@X{MFVc=U
zcw2W@nIlNuKC&IP5F><p@Jt0*QiDathS{KlMC=dvl0l8`SEU}IQ(@N=+Q?p#nOF{u
z;{3CUEsivn3!cQEKj`jq6pR&@s$9RE?h)&|zlCY%{W(y<KBn|xjXL<|LRLf7#zq=$
zn_rNmRH=e+#z8H6I*-njvVk>cK%j2d-7c2b`6>D8ZO}p>5#rKutih(Kzg)syiBzH-
zD~DekzDT90mn=o}F%{YfsirZ}tQ`~cd#R?M3l`aueq_ynx0*~#RijcSuUMfZN)eAe
z{7y!210#Jb_tW&S(gH)iVG}#-@0~CT?Zxiz2*FnW*79mY&L5y1c~PjitG@_D$%X*^
zq7}P{1;RgY2qXMdKeX4MEtZg<9^w{j*(+qRO#Cf=6G%>DF&5Qvg{5&{rcwMMN4iiU
zALw`Yse(F^mhk(n#8Ta3VuL3d!33d?4e6?{Do&hiPRH%fmnX$Ntkuap);t3^IM1l?
z@IR{g)Cd$H;pgpRjhup2?sV(_qYyBGHT&>>;se>`_XzY6Db?Z-HvV~RWtW7YF$dB2
zo9_<l{(kEBsTnE{#Sp9uH|GMdCz;8pU%VlJ<}^t$(a#tQN`)wlwl)>(5K@fdh9AF#
zJ5H9xJ?zfa?VXAf@pZ5W_P8#4*zBz9_LFcwE1I1(YE|hfgScN655`h{u~T-pq){8J
zzdWJajMUC>1P#q2&a!*9DyYWwhR^A~58<*K_gwXvy)jA0WF+-Fs-=oNE#r^+6OM$y
z&D#*>?u8+9X^4aEcKC>0uJ<);aX!_5x{+<-lc<^K`~Zm^$zY?xVK8&l&QL%+iLl?z
zvR$IJvf>M@ZV@f}kYWavEYm$86DonM`&3aP`5>oRE=w^^p+-bUf%5;c_Lfn3t;^bG
zaQ6Vg-CcvbySqCfxP@TB-QC?CUR(nNCpZKT9^Bn}=A5<m&e~`6>92eA-*+&W_RMEi
z)qT}n=fne%6<Y5u@nWW8NCLVO=<Yb|F3R+@YZcdhKvrM*5NufzRUuB=MT%S>Kr{p8
zdOn#f1^W*IY`(3`oVkWN^QplAlO8KPE1s$=LS~bqRb?M>)_Q%k$o9L=MgB38P7?Pp
z^t)+gIJn2%S=^ijVQQ8bDVpqwg!)f=xi~GYuzJ<O8!SO!o&tT6n1<T&#>GEBsF6Z?
z!a{LE^HP}$BEmhmB(8uTO;o>sgFBb|LW16zrFj)TETj2A>8|`|{90CS$V(<vQ<<x-
zipuNDd^=Ys@6K>`h}QWQM^p8z@lLwkx14k_MUcF%MkZzMaqJoF*68~`aLb)O%wQ`!
zVtIPb`CMUsi*rCWrc7nkHhG{sBXrevi~GI~HxnLS89`i|{(>fUs>lmu1cf3P@GlKm
zUTG;VGRkr41x0%k@iGWxwY0=zty$tC?D%(v%xG4n4?4e`+wA7)`y7$qCtzXpo>*LV
zjrL9?8o0i-jx}l^`!o}G_!7YEx0tP5od(0qbr%p$2T7Z!m4`h2SdqOUMUTqaY`-42
zKj2Gfp(@^=!|gerioegoUiT9lfimXx(eBF_%B#kt9xFUM4#{2m7eB!^3eTIPdbpsp
zI{r@1bQXC6QCXz#hg9%;*X>RAfa?_9P@(N6U4+W9x`%$N@1<cXZcXE7=WXV!j1I+<
z;9J?E%(;S(3eE;L*QH#YOSR!MryJ{toBL@YZSIFA!X_kZ$u!i{SNU?rr#kx$0z@G=
ze+1h==<WAI>`g!Vldf<jjbD$8QqdtCX;ByyQgxf_p-!w;DS}uEx;M9#Mw#0c9eR1k
zfj1rz=z7Wcfjf-0X2huG0ist%QNoxI42&h%N36*YMcN9zX2NPU{2R!1i#Fo8psjI-
zgI1*_SG;2+g(KpUQmfAUT-Xe$%9J%M{nR(ai!wX+yGc=RE-WmA4WvfJblNWmL#Bt;
zFqj>=(@ZRN8b#U5R+7<)ndq53Trqc|?tFvGiOKf}^5jv;KmB_i`kME*8wX8liPJlV
z3zy2u$5S{WjV`f#;)osWZktavlEhDpX)VVG<Hd`q@jw2k9nNQmE*|%N9BJ`~y0EdX
zF${?#%)9M7Q^mo8@0MsHk2yO}V$9m-8Oy$Gull%@`++S$%8E2Ix(|nUyLtUJSHJys
zsP;iqud))>4{N!6&PL4zbc_&+DNIa!4vw6TPh37=1Pv!oCkaX0hlDqqBL0)<AfH**
zt+7;{CMx<c>Ueu1Lo-6B!L1WZ!_W2b{SdKFty6@}M|m|}sdi%}2F_j0eljU#ObrjC
zni`D)HOHnK?(yAJhcgsJ?LV`m-w&=O^o>9dtvs!j(!MlltkC04n!r{5=}0(?@y=U<
zCFM`p3$jW|u`V~!Eo!~uQERvoic)@h)1zS+R3LSTYg>|-u4vg5`aLSZ5^xICAr!qo
zOw9oUX$<q8q)E(ot?8nF;qH^X**DF}f@ym$N5QKoY;Wz6!uY!qtuoX=4Ju))tae)y
z3*~MO@QNbhT5u>oj)F3no#A)It=n?GxGA4gWOm@3+kA8@S?@OPghm$JV^*B5*TkKh
z3=1ro^lLhu6=TiJea}iV4UdcWb*r^px?OiZE;*{#E$Iu_T~V9;I*W_XWGRa?$UEum
zO8$Nc8e>G3%VC)jkv$kJ6NKYXQ#I7}SroBB+V%TD{BT%fF0w@<*KlmV&Tuu#)X>;5
z@CJG>d$oP!m#Ci~yTharf;<`GwCSK?p>#r@jTX*f@A+AtD0O@7_`sJ1`yS%)!FSWN
zn&s5;sA$17<QkB(2+*fRqZ*S`@)<UCGzT*TNDCNrd=}q7whe~F;4^rC%0sS1zgW#B
z;q>0}Guxkg#FKW}hp~$_M8IZ9UhP3qJXx8CBb9tCo2bEWwqI?M=Sgoie}VPK#4{Th
z)5fy!?$T|Vy1=Y3)9HgIip#EzkK6SvXTVp;W|gldEmK?w!K4ZGL|BlD(^hJJdC2g=
zZF*px@BJ2@=9Tl6<f#^oY=0!F;=*8R>thxEAj{wR%wL-^OOy~+12_VE4bU-83P)rm
z0oZ3oCoYma6fRWC*cy!ES@=&b0q+l3;WX!Ybd8uHwBzUL!@KjXz?g5uX{ZAS{xXp}
zYD95_)Vt0=nw`+q^z{5}eS5N6o+?g+R>lOAWAK?suU4$r!)^%_rctd|HWxPuE{(AS
zC+;RNk<*=PyX-!>*x;{>)J6VLjSaq@j3|joH{D6s(W$D&e($6cG-xlVkJ2g}6eN1$
zlrMLlZ_t|)OQBoARDfdI+x#l@=DFRu`BSW2I36oT(gh6(r@ifT^@KfL=6hB6^u@7&
z2h9ly)8?SbO;LAiKVnd=aP^8Wi99S?Fx<u-1=~nRwlaB*QVu%mxT-EzK6C;&+>)lu
zm4y#2BhO9E`V-Z&)BfSj_pIatkB~+D03;$lt1k|PYqC6m({WuyGJ*A(xa&)Y^_OXM
zy|-UJTW=`}6!{0iPp|U2HzsY$Bwghl%$4harrUO~*=-*Xd0Zb5I}ID5F&Xtj2@wQ!
zQ~DPmYESL^y$dYwuY+_!R*cVr#~2k%)mp9ToF7-{@jdpEAgHkDdW7bi<mtT8GK^6_
zYz;)`&)f1!0VRp~Ol>yM92+zWu2j`hQ;L}`iZG-}kPwP6>?&HZ1@S(!mS|)J-O@*9
zf5=pWo1?X;E+U>xAqDjc<q-Jo2}x`w{p5vd4P~oH;Y%bu4RpVGTu{jOFed772kU!r
zgt{lY)ZOf=HvFhpy;SR$Mwix)HSRg~I|shug-@<GOxru^Vigw|Yn`Q{dv=?LW5D>H
zSg!Yx@?R}@KV5a&q$ue4n7%P|KA5ehn82uDGYOd2W<9?y6A5x+x9;Vtk^<6bNMlaj
zJLPt|bI3CI%Yn<yL7X2(9MYZK1sap6pSqnWX!XkrXU+6lKOh;a)|+2KS42RTx~%<Y
zX3i2Ov_D<M;j5wbRjJCP^b{hLPTYWGO|_D+nmtnpQn&%Z8P*Fn7~L=Z^c@_{*rE|@
zXe%~*1u)s1YES9IOWqRu2Q%~WboCC=z4&Ly`$p$Ig(UT+s-*@E#_n39uiRfJ<^k=q
zQ1r8vEkD{N3B^!?(oWU%P%nJos;95)7NtT_Qg58+&$t56b<Q!n>Ad}Ht0a+aqwv-@
zA2O+gJhDL<s*{YDH5p(tD4-bCP|5KL_*KybQTbrVI`6jyr|Odr77&7VAhg`2`&z_;
zQ9M~<*o1*g{#b<>#;ky*BO{7Xn1mjf*BAsc41`Xmlct{wj*--Xe`k=4dv7+6Us=I^
zBuqbtZT(rg_!0>9t+jmPB-dZfEJBVS>S;S#Je5bXXo`3e9}f(0tV|8<H%>?EzXKOE
z*?aH2Bjah^FBBAl7ubs;`Xb3uu9;x28m3OIM<TO|vHd+&xo^kFeY0O$+Jpp2N1}T?
ztqe`He4Nq0)@r>vic`tI1uQJdFc$A}??uLA?4?ZYxg7sSI%wo@#n5u92W(wtoYBgd
zfY(PP-sGK>WA&umOhh?V+^+=Xkz^YAEFMt86f=`vi&a=MRR4N#V?`-2{m>~lI2dJ&
zjY$tSIe_O$r_t`ZNN-1#jvO4Vv7|`bfK$8U-g4Y(B{eSa5SkR_r9Jlq0b|HcpLdim
z3`08`f_<g7oYcokh>{R%0>>+MLlSaH{`ui1Pr&eY+I_-&qt_p#*Wu8mg>x<{o!>cd
zkhp1s%xT54U!>Ps4-(skD!v<Wei+k^>Zhd{I#wS|k&0I`9C$~_@AM7{_eajf&M2LC
zH5eY~S}7Iv0BSEv95T_3^x`Ms*YLRGrKV(8V!<K(0$NZPVW8zirm!LG#ajdnvE&7<
z<e2{qrcy=TRJ`%InvzVnr?HYJsn%)yV6wq5vne}}1m4-%S*BHIvgFAaN<Kyg)Z?T9
zd&Q|XJMwzw+fu;fbQcB(XUYJ~m_V&eg`z4mE>=Y3c&V`rQ0;ZJQ#tbW7VFI$oko0X
zu}HwJCI$y3XQ2D|l;X6A=PuygDNj2s>%pf|WT`jAHhW<eMXOUr7wlE4k62D);LWB!
z*G&_9nLR&kK}KL4E|zqs_GBf#mrfeN9IlWeVHrlsU-i6&yY3Bf>g{wI_7a9omD{BZ
zZ>#-~7msh!*hhP+S?D5i`PDv0kN{0~Ui4tLTmj<YCV7Kb<gwT~f|Iq<u+d@4aMXIf
z#&_s$y2z`v@&_TG7kOiYQGNgge~AJ<0|y&;Oioenz0+_<^i#m)?Rd$_D5)!a2^Fe7
z3x!tencNTteAja(YoRo4Sg{`C^c%c7o>Yk{q<IAj2Qh8hR0a-$&Zp37gyV*I!c(PP
zchcKyC`tkyCK<dE`))rcOkPyE1ghwT19$Z|+fbqOh}7Q#cL|}3LLuo4M4Vv@<?Hgr
z88kQ}OEU!+wg-^Dj=>CrA(=sdZ1Y7O?689xo+36QAVAS)AGetwm7H8XTkL?D?ghHd
z_6fJ1-#ApqLYKY@5z;>yl@(cStka}Swx}uGkkR7JSUcRIkRk|j1qBwDOm8~53VtE;
z3fM^B7(~@E`pjXa**tjtpI>H2Ffgy5gD@@~k0JrqQ~Bccx*Q*7bN!(Zf)7b|?Q1Q1
zLUdEl_X$8Dqm>a~a0+zZ!R_FCFGzUAnxGmQ8kRXi$wpx@^y<z0N>31uwY~d-;w*iI
z;nU2V;{dWX?Tp6X%FIhD7KnVjzZci)@VdWXC3x=o%$6wgmZKFSyf&8Pyo!aPgMNrK
zRx8#nYgx76!Igs=8HzAZ;Q5t`gA6&`VUE_gvTS7gBs;-EA)~a6(C5V(1D8YL4jx@c
zJ;S>hj<o{%{u8$5BEwBe;NslT`tC3nXc-tp&(LYT6+C-f(FJK+M<e(wGE>5(So)>q
zK!;{`STs}aqA;v1)l;X{nhJZ|Z?kn;#S!KX7-|yU?=L-9txwr*S{f^oi(?uSmUIph
ziZ%-3D-hB>=-m7kImH<>Q=%xz%pVzUhH+5#BVX6SZW6K=Yt{b{+Ih5BZRn&}2vJlN
zURMl!Mqp=_CEsg+{qEGihCvfH`Dc|D$r$-OrmIc`1eXW|A|Aq@wO=4sid91UQjILI
z*~^ZaPnCajvP!pgW>;wlWgwCMiX)GFZH*QrETTP=U9S%P;(JZBgc%kTbMC;1qU@}$
z>-rO)C8y_xb68i@%p7f0<>et_c;D4vf)8t<C6G9`9*&fBdqBPn%`|H0!SL0d9bFdl
zWw+u4q<Gii&x!qnw@6wajiAcHCpUR@FxS~Y%Xmx7#M5XmFBtibZmBDm+oWlzA4Y-f
zO~}6UYbuk*&SUBbYy<ZS%;YQ%6Mk|Z7}wZ**WDAFwxCpHy6XY=3Kn#QZ?m0S3qE$J
zH>5-qj%39`rE3dWL7=u_!T=GkUNpkLs@{L6>_S(hZv-{*I6tBi^&yOkXB*)_5UDvV
z`Ai)pH0g0C@W%f-mhNw~U+d6rqq(@ah!=ayo?flrF5z&4{PJc=okBJ_vL(Km{kn>z
zUZqe<A-t!};}R>28=KsFn9t`)Y;Bgfj`+;RG;vns5*&FW3VZ<cWl{=`%S9`dI{Q7P
z&0xtyW`Z%Qfvjfb{HFTPgT_NvScw~d<^>Z+0&u24T<e~%qE2k{@D?xae$VVTOWHYt
zCLP9MC9qtc$3G3jgZ|cx{-q#o5`s@!^{(LdV{#Vsz+gTZe`_*o6i&rhLp?E$1V4-c
zwqxt!;DM{==R4q(9rE%xI4pW&dL_rqL#o?DLTm>IwDwWO<~=sfmXb4P;`F-5URE_Y
zaeU9GF-H<9JOe$}n)+ALR8?>$T$Zf66Q*C5=Oq!92!bvzL_@%fX09cB(cBo_-S?$B
zz1ul^6_tFd3{qpDp^s*wkCA%T(kXmMnVs&G_V3oG*611yB}W~7{w;j{brGQkkU!g-
zOV79w{b651j4eVjyEe87&ZARb#WfZ49HDG0=rpUPUNz3n5pJo^?4hWx9A>NE^F~(t
z^e=oqwuIa~#7TejJ{Z$JShW12r;pSxdTwISo9Bl1S+W#I#2h7h)mFOHq1RUS1fk?Z
zY$T2x9g)^3%%w1e#Eb~0@9hcy1~Ef`!%b$6U5J3jR0lRJs60{L?)w)o%RTSMRQ&U0
z)irgWm?P_m%YFgyS{lu!%er;E6R`hyuX<p`Fu^Kmt@N~+%U#>r_$vKm5~)evYc4!<
z&fd<WYA?H=B$I1Q7fM^59OckhBFk2lv|eIO6KvS7rw0bE#L`WC-Oo_|ZpfSlzKc!w
zWf47A)${2l!IBW=!^#<%?jq=JInT0@8RkE7;(wGj<X}5EIF+%-0#yl7VjRe^G}u7m
zCSa7M&*Qqa<SYCDX=cc#8dyWGt5W)9*b9j=>cfthw}DlJH?KqJ%E?NdLh=5kbL#(C
zV}BpguNlp+Ie6%TRz=ES-C20g`cRN}``}HDL1%IWGV+6uSmA=taD5W!t_Jfh?q@?T
zGfxtZN{Of}a_MS7<xoje5#T(eHs~ll8%<1DgO$8kN5WC?1g6|7tO~^vaDUDWj=@!Y
zfq~ecKj!T{|0I!d?EwBiZt}lgXnQtr`zY%Tm{ZMs3R%r*jEy7P{!}=N)7MvN6<Yl^
zcj|yMN7qw>(m78s<W*s#@h4Zt@rPrSG#K)?kjOtIyk4^$@KX#3bst02Q3j)*{Mv3`
zG@8Iz5h$Ypa+-|GHK0%?DgMFtGO2MBfABvvlYgBAu&WTGN;%+ae}HQ34@=O}Gm2Sh
zwHgVWN?e!;_^E|7swdI_udq%PgD1^hpW$UeF;yj0axfIfk0+1&-aj0RhMuEV$fQUr
zE)y6)A>S8_SlAl`|G}0*CX<>zlNxdDXt93!PFb|fE$YLS-R@Yg;ew5{NgfmCXi8BI
zWlRZaP~X86?Z!Xky}viQzkd88MjS_ME>|wj2)%uAosmfAiG{szkbXcY=p(WqDng!D
zXsA4yy>uFZiD<vxN+u6gP>;Xsx*_!PEdm?Te^g8H=Xrw~mm#BPTc5|@>);=2?!SHv
z#e_Tw7r$h+7^B7v&Mn>A+ru^%1g4`f&77`xD{9&YtAyo4k&f9j{Qeft=6I#Em(ln_
zeqX%yh%!bsjE*-P;Bi0%kNBV4+rJOl;{)0Ias7y?kNZC&(0`td-#f{lRkK6kj)|su
zU+HcQV^8;C>UVU4rsF&xw(BMl?Bf4#mp9k~Nsn0aVQnM^hhI<n*#y$VR*&uH^QDe@
zlX$V&ayg5KCLIk*Q2sfs?FuLji%DAsP}hqbO(i5uWtA&FuLehfT=t!eNi(vG71G`{
zj+m5Pr8gd0-G{4hpPVR=g}kE5c7{G%JVPK)uL$lc*P9JnUG$$%t>qb$NlXEnOqp_D
zuv&%1wUvDgo&%v@a@F!wpJWU@EwyejyZ8It9C3W2KNsF_N%tHHjIw@n8M9$(z2eqz
z`p#E`9ULKoij#I%B2Uq9<|a3Ueee`(9Ag^`Lx=N?i|`fT+&*l-?ju~i?ILVDrTJ}V
zRMSk5&0+}EJ4(!XJcUs|c`w$GzT=E@w9#f^$bGcQ0YTzN@Akv>A?SGhcpA<0QZXY=
zXJ<~s$Mgx9!?8cTGkUe=`7KKN{D!MMmFx2+%iLPojODMd5D6O92d2sH>*~V)BhNj@
z`hC{NMQpD4kn@4Q@{seFny+ZEm4F0nB@}g}#w9D0X03QehTFQs^XwT7SM|xKwe>Ml
zC=rzl0DF<}1Z3ua>z!^GM#>-9qp_o{<xI*ut9<Qq-`mUSv<f2P2~WN=H~tT41sxn*
z&g|Pv1uVEtK5^|XJOiCBWHL`<xX1ML12WVQZXQRqAFnI@gyBA>MhEaw!2q8t_Ynf7
zffV&in^>$yYqR+l?@eSYYZ$n4d|#&o67`vfR916%hOvJxKrjj7F0vjm4Ze2&_k>;f
zb<5Su;zl@%@@P5^;IHSWdxa=feup(G0r_@`$600rN5}-PR02<i9hZ^c*S%zLrpXKV
z(p1Acy_>N|2wR_&nl#BJab>b+yQDor&tTj(=2dA=vXiHa<<PBtbHd>6$Trw0op;CL
zc3stj0T1G#FyDbloa6EfL9l_<cK7}3!}p045zdfXKsAgejF|JtcBVR7dl-`MG$>ew
za|453nKTdn*O#7cxFu3MyZvL@>!*9?Hs4pjzSNFS=OTA5ZQ|C`#U$@HFvg~QmgZWi
zEj~Y7(X6&QYp$fEQJc#oU=?+$cU^wxRcmn|@obRf&H+AHB?mp;1nB6b)rMG(_7X3Z
z`Ehvf?ZQ2|0<K<n)CySCew}oBCaPs7WOIc_7wfZdib;02DEt`~Y$AXw_OBdm^o2MH
zSe^3Hi~ylkszH~RwDoi$Nrx}*L3SUS7hv5k3J4Fyvt_EPOCW0k8kt{oyYatDGBR{C
zGatEJM9|EdVyr`R!4<-}A&n@eHz$ZM+V8Yh5;x>w$qt9B25Wxp>A$ybI!h_q-XDGM
zB5vi*Eo&Ae;358ul~a%e*8J=Ia-m$O)weqr@4Dtxc&@Y8i-qImocfrLfOf{&QbwBp
zL+i|B(%$}jUkd9<R-&}EMtkpUsoA?lcE>FW+|HYPjoW&IZ@=0pgx`Kz+#cczt1YSA
z%L?<cHSDL&!+iHCH8=)ez9di^7?x8*BN=^kWj#ZAb<&<@y^-HN)JK*wN?=X|k65T&
zFgOL2up2ou*k4isi38nE2&}BZXv1XbW}@3=bDQS#^+6J!rd%Y#_5{_aTDg`mudj_C
zzvr{n!$kLFTEiZDH`lu!pnN4wu+&%tBuF}RSd4auO}<vWg*1WE&f~aqW%fC1SRP;2
zBMmL2*@}MtjPQ5xWPterV4ah<uXtv2f?5p|I#MMw>t4@E<R7tK8xs`}Uise@Ix+<N
z2&R^I7%t`$xPGyDZ!-JNpBu|zIGdlB<9XXO>7#2**DFQl;_J;Lk<0lsg$LtMDxZfF
zt!mp_SF818S`BLZ#>&pP?y+>y3XPh)eDUzfemGMyhMWC8!;!=30#D6y!y3lprOptI
z8g0q;+at`>)F-bE7#8<xy?Xogn`1Jc4i)XH+lBSr=?A0?`sv>>c?8y2L#Qf@=|FUe
zulrGA2(eQVyVYzU`d6$)`W}nB$x~o_##Ts|>vA-fBbU|O1;Rs%a)85ms8**1!+0vU
zZoCG@U{qdSpXBrl1PnP^8mTyZxqbyD(xY+c++`mJA)6hz?T;4iP5-A;OeP63NyH-i
zhntjb%WnHerF$pyswP`|Gc{&myidaKI8E4(mwknT(Ly{M+9qQkn@$%JX_IyuotyYI
zBawdnGdTkyni9pFVqg%Als_z&Q64!H6O;5EKHn!LA1h!`QW2+OyYH(20gp>4V^}Ms
z6n*DU{u;C4_+HB+&j%}<o9k=f!5Ohkc%=xu{BZj2f7=EmD??ttbL|cfhCR!>mQI@m
z#y0w=sZBBg@_;jIy#@>Ur54A6OoTjrdwct|;#c>hA1sT8&+P(h1puH(E$|t8-cp{~
z7}%_*iuk;a!^rC<&E*7T_hiU4NFwzT4tiJj*j@MJf6H2c2HH_yobTM6V@-!QA_eoB
z)$)*fpvWUP8Cg%sI}xbz0#QaES}8eUFqME!*?Ty9JveK*q5b)MWR`07T&b`*+tpto
znnrPPHGcF%PS>Y`Bw?|FVaZ=b9^w-C-B^h0OQOwX8{2&#S0QQX3lhS5(?Q0A^SOm3
zqc>40HVf4=iDiP)wz-p&k5^AY*160{p%1=X-lvmg8M80FZ!UCDIjx+Ru5et0V+An=
zW9qE7dxMM?i7?@Mp`QDVupQ1~ODihK6PKE83hK3vgr}cdjpDFE>WLwle*raYooWTH
zTth>KRgE{>Uz?wyr8bc$Z8|@@Gz`J_7RfeeyKMhr!9m%ih`Lkx0*1l$-tGZs9Ie=L
zZ7n(A!NbvKh)oienYj20T#v{7SlC9Bq2$RQG&9=0?5;FX^MDE}C+1?}8i9_sT1fu5
za`hhR-Z(WGQ3RzB#|K{sACo#(a6}ACN=dI7*hQsSnev%<eqC<#Nt*dO!EYk7-p1U6
zoEPkH2D*W6fUv{sKz}BK#AP2}-*h$`X!D6=`OyM!%^HJ(Eh>dl(bhqJQ(3!Eb?7P0
zf?S5qZFD*z+?}G9m`GcaiE-WcQQD2BR{MFK86pMcq9u%wC0jCQ1s!gypB?!PW(wi9
z)Ici%<hFob;IbJ5yJAR8fpQ0<)Q+45H-Sm6HcO-)22Z*79ZEUlh5#--2K5Rf-KXU{
zU^9wUm?ikked>;2D{8qMaqt6GJ+p=H&&d9q01Q>D-94n!eakCX-}TPnM@N5Yr^`k!
z6pzP6q1yovktdx#eR`kd46jTyR7<*9&}6{;zUME%7Ty}w%5@(qT@6?Ua{{sDAWxA?
z-*4fV^|t*uhu=ItF4hP6LwOWKo))J*{_K3r@qLLij&*~RN2dZ|$PDcjY}vssX+JOM
z=ZTm`PyLM2+<$;bkVtrW6835|aPjM)%FNaFw3kM&h(AkdtaKGvT5pF<a%q-_{&iS~
z`EoG921wwk7#0e6+^xk2kYVN^8PSy-PZ70b2hUh7YEyQqD}>KNy3y-%7h7P292S*c
zp>-nb{`dY;a6crMU(b_t2#M?RWrez)xIDlKE^Z3|4|$cUbPhAs!+HBy3}^55uzn*5
z`Ao3q?jqZ+j9+J8pIv(FQ;w)$DKZBOhXqwa-@S{vXg<XPO1;Xx8S}6ru(tWpJF?iS
zK=m|Iyppg+uQB)`UAhwGaJD$7SOIwt*6XQ%IKIC(7s&+i82>HalHV{+X!F-~lsRY}
zQ&Hl&+^7bdN6w{AQ#@f_I7)4<Zb9r|G)L-?mMPN#S#$(ScR)i;+}m#V;KyWCi#4jZ
zmjCh?D4k#)uNa07GCrn-|IsaZbA2j*Sjd@7r(s8@J}udFzCEnULl+tqN<JxP;x|hV
zj4&I6-z+m&<zYX)<#sviF<9z$$0k6!O1VY6@S{(o0d-ZvvB$>}EysRc*B&)NdoOGy
zo@e)Q#wW9|2n-uD<~cH_#M+wn%brAI5I_5`BTT&ln+4JSPImDow#Ss59p{jX49-WH
z8DVdIpx84jRjHW4fp&b7xL~_|Mg%Es=E*m?U~JDtn=1F>m`+}ICc@@+CB@_P>&^Y?
zvS_F0bu3`v@2(Kr)UE6CZSf|bl~c>*3(CK<kuPYU5YV`&)<)lkCDEu-epmw0xc-{-
zD_1KsF($Nf;fDzNqG#d*{XeN)@&BfFD{+Ybq;|2H|36W?Q?8NDAPTgiMOssaH8+HL
zCuhA(q1;wQ37r*IrmuVIzf|)UYoDPpaXce=7&@f}MY5-XlwkI(*;&o;fJVpdE}OXX
zr2yK%4pgN}^3X0TT&@e*<)80HdkB6ydD37kh6-D`(-}T9M?^PMM3eMu_Q%C+zKDhl
zR#<lh6Rlanp(@?X-R?aD59GRLQ$K?%>jj=lx}BV74v*%jb=+|?!2-xMbyyezp7rA|
zR9b!bC7rNBMJl;!vg!OOT1VE&B2^f0fC$gEW&2I=(!BXEf>+0w2P(eE_Aoh-%@WyG
zDd@BeNU>z<VU}o@n={7x)QtP1(9KZ#XV_xM58yHBiAPQ2^(#wL$YppyHe^melEoul
z^Zf##M}_Op2a$q`$FxK|I(x*N<_;QJ;dg^=mqF7{+<952&^Ia8KrxQur=7fm08mL!
zpv-y~=m}3+5zK5DnCsJ-i(JG4$;NI33APbpV>!Bj3F^+RgS5UkN3d22>-fRvv{!83
zeV_i(x@lO%?PYXpBk%bQ0k@MH9aOi1<@fBQu0FNG=>b}U%F^9aII)fGu&uI8<~UVD
z4d&9VZ0o5fRc)8idE0XM2!8e%2SsB~D%)+h%N7{nOye0tO@Qeo#;gkafbdu-O@E4D
zbARm!@Mh@bcCL$VNwi7UvqQ$LIFw~26M@zrNSwacP+q{?GRxtg7r{T<E^T9cn7_jC
zZd69*jevudaMkB=v!WWO6F%xi1OaO1#Y3Jm0wha?rl@-pzvW;sHAFw=pLu2M8`Lvw
z4P?{~&ELH?=yIRj>1YKQ`xpYz$<BZ4G-=(yK(lGU33$WQ`Q_>UTgRv>R-dF-r_h#6
zSR616QwAn1$X%3TZz5-b9q1!tQl#h~`~(W(kx5~!svq_c`@C_f2?y#nQh^oD5xDya
zvA+g>Ispa$HrM2v+$9z2$Ld-urQ@ZBh1;1_!F+bpwb1Cap>WtNu5{=eC5OoqI;k=O
zet1>3Q^a0KNx5wB6Qx!fs<O3@!jzdFLc<B<`Sa$i$~_APpcZul+7#Z7@PdYt7D4LB
zei4EIJP(!CTUP72udj3X8x0>+5M=#jMvaiKN|O?%i)3WvN6hM^+AgU(g40IM;?6?U
z`80Ke6;Q9MQgp>fpBM3rA%7@0z~K`ne*m=bZJ=Q?;wr@qZNE1l29E<&iUc8}pXUd`
z?RL~6j*I-31ww-G`>^m4KCh2Iqkfl&9nOlG564|uZwjDR@5*tVEVUMpcc`T=6&Tn+
zl*#1q+6z20e+*>b_%QXvhRg5N@~x-*;`n;G<Ual4oQC8%D(me_$80i<s)TeUaW^Z!
zn)w_dc~rKPa7RjtGyyhbtifA}7B?a<CGi~cuIQG8>Ck#9RG2gug=_ETk8^S|QTKX|
zl@Gb>)k>DP*@kFdicvX6)9|7z#%xnX7i0>r6yWKydlQDS3wR5BNsAxRk$-NrvzHo9
zY`(qN8!d_Rcpo%efNnMYwHvRn?u^1R5&Bw?RpQ&o`LJpU$SuQXT8qGxM)7Yi0E7x5
zjD}ZEs{<NRjUw)LcZ-h>O$>~GmeGVngx~D?F^>n_-Q8IQCh`bc@zT_B7=ptEa%<HB
zgX_J2Brapb%70e&u}8BcA3!Z(uaC6-ij56P)GTbWPm$rkmcOe=U9yG{X9<|`Ir#)%
zjU>?>Mhw@It~lhff9o|5FAiN1@e@*<FS9@mVb=^b%~{Z&B3;-}fs}!}>}k#MoDTiW
zWYy-djclkj4Cyyl;DmKxK!aeeXxW{XLq@>s**6V3Y;e-9!cs(R8V>GZuT9l*M2%<g
zc9OQ@|MVb3D9HAB5f2mWTXY$`_;wFy@lRIwX{%mkyH^#7tLS}2htyG+2g&pCIoTA;
zu@*$U`0Yq$Ncdr)Y$q=Y=pf02LM)y~IK+0E?lESR=bUL4rXZLIsjIAvwN#jT-e}n(
z?Rv_{Byn0-mYF^irYpz@*uDh8>#UmQHdD?sOQ(EyVaO3cAR|`hthY&_QY5@U;d)n%
zb64#jMlts8z1@<WgFgz@E=AxvBUjDs)fh%~WCL1JU@*}TYf&7O>fDyac)h;GtL9{S
z0E92>1s&K_-QN&$g7S6%lE8>=ySqBSqesj)_(Yk811cY{b8*D)(>Vg(#rZ*So32sR
z*F#yd5t?9DGvA<;Zz-}J-Q8tvm9Cg-?hy!jClTonz<~l^B$5?CN&ic%c<0xQ1D1*@
zV&wg1oVK8+I}zAYAbV+viG|2=)C8W_O0^3^X**tVr2z-5zGf^jMKfVl85%kvSvf^D
z5~f7_L_-E|?%ASHwn9Ll!C7R0G*9{^m|xNIYo(7wfW7x8JyG-}$(blLI>J0fH7aGj
zo}USRX`eo-u&Ce|O;}}RujE{4+Xj{PgB@YVLm*>Fx)jk@Pi}h6KnM?t;h=lK(wrd4
z#Ux0?DuqVcq{PQ4?<l#e)5%<}?EV1W`$9$T<rO30Rcxv6xLEb8nyqopQf+;z00XUY
zs*!dAyR|&7<2$vJwN5GxSGGlk(;syaZ7!!Y@{i1)zJh3Nnko}XTf=tNe^bgfdr`z3
ze^AN+@c1siuYC>|j0Soi_;3!}+{VqSLztj2M^e}*b@5G6n<(csHZUZ7S?So}uk)c@
z$k6gHT3Un3=E}Jma~Q{N{z8;VU=&jQjWgKIX}#5I7_awNRqsB-E3%hg+?*r@tH&zA
z48&kav0Vp%?X594cro~BW%GMd`X+ioeue%TBfn?IZ}s{Daq(^sT%Mv*1{@9!F0Vku
z21RV%_YQ2jjBph3d^@LVPxe`8>nZV9<HQ-6<y-MjxLc+VTAjH++Fn^x8>yz4tTZIl
zGYRnWml*#+Hv>hnT-djF1HF<`1=KS_US@OuO*U5sp&*ea!rc2auWi+p6N@R*Z)lAh
zMi#!Cp5-O)eQ=qR>=%6;p)QXJU1%<8{wS1w{?74p9Y@LZo}=qKGmSivAkc@ZaWIe=
z6?k+5iUNDDxL(8;AMjsR<HWTRwyg?yis`9StR_36r})YJvHY&PsOd^zUnwo!9KIui
z!*x}dh<w-c6;VgXpnSGE9qD8qM^2^j@Aoea;h!A?AC+1a)J5)d)y{+$_>C;LT3R5z
z<?DY4J8OYUAP<9jRb;b#B2PBC22mT9$#7JBAIC%s9wQz|tf7eLMZ?b}a=<dE6Y==4
zvaQ-$Z<N#ZY&GTYkq%!$TMfP99wc*kWv%*~rew2V*I&2XWx^f^zLFiqopD(0CSnb3
zgLRgTm7R=UBK5NKQ|b-(_~i3nsB-PzJBzq?x#!}L{Rz{(2d~HP+1;MRHnf~jisZ~6
zHkE{a%!rD@fxjAt_xFy(X7MyN-#O|7Eu)na*#hK=d}(YUX%uvr4$rNt-S+zdLOECo
z#^Uw-UUx$u8c+z+2gJx}O{PCc@RDT_;2l+FH~gvQ#~Pt2k;ihN!@THJp{ZB~qG*bn
zd|l+tY(JD{ylbe}K!!~D9HM?n$zQ9ritB%m9m+!Sd0l<}!9%%uq@~M1Jl#*vW~HUB
z{QK@2=4sI%obyU06gYQan$d_^*nUlq=dAgnIFB!t9Nh?MK@tS2mi#Mh{%uKCJh_HS
z9vsxGHbU2!EKd<N9YvMo&P4nOsj<3HsxxmypcU6yH!48ZU_E43XK;*8s{KC_%|-%H
zegT4|Eh4$-;p*RsJG&2XqWi&(ogZ%q((Io0j5*cC`0yinX(#*r4e3+)UQXM=>bU@P
z*m;;*D+$%V2JYQmfo|fZ`2PvZoVD1uecE{&KAL})&?t+l$?RwIvRHEQ&?~2wMvzRq
zQ@{b{Yl^Bk!8hBfi;aMeaNZ=x7Pl*-ykuHkIRlu=z*=S;(2WNneBCGyqf0GS$J=3J
z93zX$$HEozQsCA26!{BR%={zsjcgiAUtz*Ow%x$!H=z`F&Hh@d;C}nLG7A`D0EGap
zx!UH+AVoh5l`k9Ch0k80#+!PGBi=c>Sx{=gD<?>$ymM`??kl7PV6q(%B4;m=0Pp+_
zWS#edpHDX?rr|<@hji^fgsU@XhR(76ihM7}C!F<7CP)|!Rc9WyQlp4%YNN~G${7P?
zByEkGp<E?9dDmGqIj4l6M6|J?>+ufrI^8$8OWTUn8U%?AIZxCjPgTQ@6#zB0El)Y8
zpl;h$X$+asd=>%e=iJ`y-CR!ZgrdrABalqbD!yUV7c7re#KLU*vaC6PNgrz{>-o$x
z=Ei;H^UjC1Ph>-KIC&dQper$X;)uI@d88ProRcjykh0g2BePD_=kXaudSnRVvU_t^
z9U|{r(}!zZZxv8r-d9MlFl>j(?KjFCkZe*`I^3j6ICejByXe7R)v%cioC;gUJ4QMj
z?k|!coqJIPJ{eXUX*S7Od-xu&+K^VM38)o@3dJVUR^omM%hw@L`PS-Gqw!rV>zBPA
z+EcD4CJkwOgUQ^1!|hQy$6<a|MYK`8puIsAk<EPdLN9Ht-7_>!|EPrBxt9)x=W@iz
z52KIoOBNHcBG`VuSpKPJ5R;I7iTNax0FSHoIUbgLvdg>J-Nh)k@)PPn2O9V>b;ra$
z1vRx4kEbMlCF|8Z^Jftm?@V=b#Z0ceD%?_gg#8DepNcX}|A|32lmCrDe*#K=i%9_(
zx1#Hxrc#RJXv2KNli-D|T+svPTbC&<uu9CLdOpy=Rtf>is?~w82Wzl3BR7QbmddG0
z8K1Gjf_;QKv>-l_)cwOroNo16yVds_o2#Ru!$$WLxcJH=l$XTIidA;+QOt;w=4zk~
ztNKA0la@M}FbI)AKqa1yl4F`~wsT=2U68Em3j)N9<rru({=xA;Q3Ppjb|KlYX;R1E
zBNsRH<-sOx@)P{b$H!%Ngy)OVj|?>|U%s|l-d3|dC>aqW;j{k`nSl*pms_EfN3Jn8
zuS6K^3qj61>gB|PFz5ygU?(z_s?aOTXBQTGx2xdbRE>?eCYw@~tC-HYprJBb!i!r?
zrSVB^*8&(0nJmzu1fv0WZ#RiLzMofTAUErI{UU*`|KNwWz0fNjVea;H*7BhdQCvx%
zb$P^BX~%mJ`eqUw5p8r+L`@(NQ#!;3Y3ywp)b(CX_kKwh-9?+u%4(n2p8Rk8Sz!Nw
zGqb8jb<nNeN@>!=<5jo<&2R*ZUQdorquQxyNothaA8yF;V=NAvrFQC<2fIayQO(qc
z#oDiug;bSSS+&ibrIAPvH>ivnW82Nh5ip2&Eb-NPt+YAL&uk|2eS?3>!u^(z^=2&h
zr~{AN$qc&W8xZ5Au7~q+ti1jA`y3T28JZ{|X~du=;>lc?GLY>ur$?mk11r~jg27-6
zQOb+6Fe^#q98}V~(J}#2ex<QJU>Yu^x9$DoBf@)%cJ(@k<NeXEB`Iq#*t^7B6Y?3H
zQ$S?i$b+s!Z0(Xgd5O(L<56FjJ}l+Zbj>-J_5TiT&if|y|1;gp02}qclFh`DJzd>s
z{qfm53)ps3`K?#4AV5C_s^s!`oOW2zeU~!%R8pCE(DhBWI{Ohn5CfF(-n+eRv|ARA
z*CKA%9ZS#S?+$=LD%7xDmaVS}AqKA#A(q=efpw;cb$M4wGBAf}%lS?iT#m`p?NnkN
zg+PJ0q<pTF3^vyb&`Zp1cMxp8<*`7IzyGKu4XI-@Da1|Hm0K$9Im)CXRYha7Ll6}J
z;r`^{7YQy5El&^2-XIZ8NY}SmZ_(($XxQz;FYG^-On1BSB;?d<cHD7SCuUgJR<I@}
zuVL~6vxxv1j=n>O2x)k&LsV|%F|JXgg=;q_<ONl(+Me7GQ^8{r(4@n9K3D!X>WmC|
z@ct<<n-57h@9M#I20JIM!H44RLS<Ub>dN(SNt=MDu|~h5SWg>0`hEd0UwN;Nrt!+l
z*kvIe!WBOJzSC1V<ojxWO5<Z7CZD6BfbWaH|F{66!@BG7^st2{fi)AYX+Rgmsb;lU
zk!(_;jz67d70E}LrjKhzu6{5{-#!1K5t4xy$)?OdX&Xa{HiqZD=n3i3T)>}an?QXi
z+JGd5P1jEq{i#nR1NouLl)RAHG9U<S*I=?T{k?s*7m?;A%3QHB8C^vxRSz~cXuv3~
z?*9OmrdVRHS1Fbw(a@JImiNb?{Zi*)5I(7bt3zCsNQ_v;Q20#BUaKc<QpV}UH?7ih
zRzEvL)v#-%Uu2A8Qr0CkBg?uv9XK2xe2wjK^{i;&_M@7qqBo))yJ#g%rChYN<|N6F
z^X3}srHlTMUbhL6AyZJZ8k8b|sP?I4qwq0=<h1~Iu41^pOb-NEs&Wh2%4RX^!2KhO
z%TXm>ODZ6F%HG)`*psp?R2t}Xw*~p3_ajMFKAHIQ`JU7y4j$#m%+&}w-dU$V9@67-
z{nRa6gkq=!nnR>i5Fu#3W2RewR=y@j_hy9;O;sR}OJ_N|2RTfkGa!U^BiU#w7X%}1
z3n4|3rdsxvph0WjHGWt<kR2h1cIp(H%}%!PSTsA|&EY5jN_FVfc%gg%j@ZT|M~rD5
z&lR`BEffJ&LAx0OZML~VCRv2S`V=Z8T5Py3FuQkX@NgndgXsEG#J@5ySAXXb@%GCF
zUGZ&9kk>Dm%m+GKVJpIobYrMNz?fks*Y7z_evL|E&J0zPxOKMJ-M@OXHe?`*;Z?Rk
z5;?(kdo)G!20Jw$1x0*S!Vj*x%Rt?-#Rt}wmEs^>tGzpxs?H;mH5>0F$XZY#o;<b}
z*=I$_K|YIBS)B<^^teYHOp=*Kvzneko68V=qX(iwl@`6CP!Ue2(JPGn6WKv}=dm~t
zUo{DO?jk;jpss7F^@et`F#V&!9(5h9hxQAR_f_1kE<8~Vnr4*_N8MR+1|R>HjNjVY
znn*%t>P>YZH}WnTxASfxkL!U|?7J}fG5&Ims`7EDShQnI)Oq0~TJ`A>95@>C*=l{=
z>XVXPG-eyIRsePXu#@;|#2^AWnGJMn7b69G<dW72mG59OvaESdm`Ud{VPp4MGU`!E
zHvh#$W4jdQS~4zZK4Hzi`}9PQ`F)Se&Eci%e%3ooDXVuMPE1n{PJ@vT<08=CUa$nw
zI$kE9CMANsN1_tBSlK3^Q56nfIT_wUR$h`xF#k~Gv9fTGH}O7e$lKdbI%HSuV7AOm
zALz19toY$)l+Neaq0wCd&b$Q{7X((MrCj5%#4_L}BqQ{19+`c&(G^j($$8Iz`%5q!
z9mw-f9GSh<$!x+R&vko*({c5CHos)E-8!ZHh91GOIOV&cfFL6J#<vV!kUJwgcIR8@
z+5}Ts(U<-;j7FhER8}{?=Hd(5pIZzByJR*HaHOz})E-3>Vj7|jHDu9g7_W$s7lq9>
z%=47Kg1fC|e7{=8G!0-ocEb5{O92p(yB^@aep(2Io&o$cx2@+&l>^|h*u4|ybEtOh
zwa8&k^O(2#+Ozq=*(4fUkVm*5>|!p6zY%wJb*XH@FTF761hy8l+(4M&3H<ESLx1iM
zaT`m)w_Vn%Asghfv?>B)(j}5p@5uHM>8@ErEJ7ETKly@h&88!dK(G(H7sUfkT-~NI
zf_@#ISxVwD-LE#rU$v4+eWDik4}2JI;a~W$KG-paB-9bN#t>V$-dy!37E{pp79a#_
z->KB6u>kEdb;c2PUt5I>V02v&s`17c5L8LpGh}E$NAL*pG#}C6#`+Rf2SYD#W`1@f
z6bCA!WnzO?YU=_eg-)NQ7do^cvN>WKs(m#2n(Yh`lNGB0xHxmMOC@^G>D!N=pDOhH
z|19p@g}oU<_hJvW2GV%3-yU`Y8~S?P@EwutuWae~2Q#Gb0fF_!{N@#iD*@E<^xMkh
zSONomt$bqR>N|c(zFd+W2_~Kyfnk-+`yaZ4_Tc}40k_hdc&Jz%L}DY4ZoI*_urc&{
zNfU!6*BIxy#+QH#nCsSk{~P!P5Y2*t$bvbWd7hOx<zBuT>8%(7#z81jiJzkywnb&T
zlGg_^NE}}L%WcPo58CwEZ|*N5CU#Kxyz0*za9NTwNB&^_dX~fAJn7l~s1^1?WTMCR
z@NXpqJ#T=X^A~HZTb(G~$?L+VfbN?jLk6Y|6fCi~pyZ!R5Z~8?2R8cbhT|zr8zLN=
zY=KbvsAwa)72FTogcKi8npYyP{nB3Tj0B@PH4dT&yy6HV&VwnkNq-(S1_;t&Es#0r
zrp6GSq2vl;r_Od>GxYE^1J)9(;W_I3toRoHz?vq>-b7Ja@%pv&TD-l>^%t!CfmO)~
z>)eaCoAmwq+3#AiN~e*Xfx#O$BuLQs>s4J$C6^l&*C82QbXM?a8=Jj5?DK<t>hSvJ
z$v5hDU8nYgkmR|13g4+bQNQVZo=mkpC-;=-+2v*%GLXQ9?kvQsS~UDoRT6G#fjPJD
z5$T%@C#z>J+LpDJ6Z&fLH%pGMcIzZhV3{S$y{~G3%~{d?hi~whrE@6^^dFz^wOtu*
z^zi=Fec_<MP{pVevlAiF)^GsuH>qu7yR-C6{3!I^(8U-W7jRqZGl?svo9@Q+dg|qe
zf71O5$B*B5IF4LUK~!D(p3}>WC2l92Zf}z(b;yY&SC8P&|Ndvl+k)@+gScL+sAnf7
zj?U~K_we7<$=@JXC^97AO@ge}`VS!KPvP(P-=_eCSMn&y4*dVdBIZK?m|H%CdUe7d
zFUfzxVm&*s%yBzTQmrC??nM7_JilK;U&1PX2_+r=Z>R3S4G?av_$t-0|I6`+c~Ff=
z>3EcOc>cFj*NYZXNm&@e9Dsuax(tQ8N{EKKW@!_nS7xYUFrGIR{?v>9u$BSt_)mIp
z$Mhk9NW#qG@=iu35RmYbjG1|cLCNBu&|+FB6ZLF=jAiv;ZNJ22^Z$dgd=N~_<dY`-
zpiar=t;;}%p(D|=dG9znfBb8sKoZMR8OX99?1Tg(xSqcPppVrJkV6%ieVV?jOMG8r
z+43nm^c6tl$Fo|yH|ca<z+kLTh%TwM>&@6bHt+5}<GNk9+de8>?T+IeEEeD;F{)2j
zv%;~=)S?yq0^Z-*Qe)9_^@h(PeBuHnu&6)xh`}AW!v4OAp<A&1+N6iwuP+7G4L&6W
zgNolAVUGdtZ6c;e)^I()!HK0TP4kY=uM|<QRAOYc=v1U1)W)Jja=MC-g;A`d*BR2O
zh8QS8Z%yD#eGjg1KA-gzdX#*p9&JA@&z*bD;&uPEJ$yDXw?(B`xf^plbhuD6)8yN%
znlBbsdS5b5?P$^z>UNd>-&co!oKbNhc`eZDc8q%uB!Pf)q}TBrz<QA%<-C8LRX-b)
z;aBe51q?@vWmA}DJWnxWl3tt(>LP?hJdjPW#qF~Gby)<EoAhyw%cnyABz5_h)4v}^
zO<2$8mjgj?zqv792&B@uEO<+4nv6A!r%(yIR)yDWQxQ6z8u5?7rgVxV($HJzaSIsS
zfE;IbrP}?5ZTg_E%?0Gv@ZLYuPqWsgZETm#0P`}b7lVp(*nQ|ip*6RTk2u_SUz}Xm
zkE>!%F+AgBxbE-LsWNSbE&nt-`9k*lhL7H^XGLcY>ZSmdAu*uJfT^R=1WOMk^Nr8i
z+B*c?ENT*Wp(l$cIYui$a<1>OB}AyrWgnzaB$p<FAo=#oeqx61=d_*ktwA*N9T24d
zmxhIvv`4xw5sj(?7|`c$Dl(aY950)P94?^s28$QDi5&id%Efvfoy5z3wq^E{f;-+s
zJs&j2Y6Vi90G-bpbO#L&te8Z;krpSN;!HqPVr4{dw-mAKb5dq)tj!A{ZdLUm!;rEs
zWWMKGlV*EE)@G3)93wgRt=A)tEw5t?vc8wtEn#<kJKqRl*OihTlR;-)yB<JyHr=jx
zf4(|u)Hlx#gBv|wZayA49Fc3bTP+5>PnPs|MpKyfKTE-O`q-{}Eb7-quz@RHVOaD;
zj{r7J`v-G2SDW7uBqMkd*VVOp*(a=e_mw1%hK>*^-A`8|ZhRJ}uB94QIy@pWIrLqx
z?!!QAoU9#xk(;zyxnH92=L-s)kQ@|)g4dc2>JUu*1W#&ypx(6w?(S7c4Kx63+BAR<
z!)?jPg#nPK$2eO{>*A`J+Q8e$B<7IFusVWU3J3SAw!!Td!Wk`|M|`e`qSg19mVa$o
zp)8Quu$r`ht&zj8=6B|Ht8Em%ngAWn^c*Q+8L~0>R)CKP=ZScEhVtR_&Io23)fz-*
zTEXIsgx)ZQB}csjm^MAy7bxur!GNLDP16k~>JGR(^OG~lX2{m7%jyhv-Mdkhi>n>H
zHd0V~edktY!2KjuP3iikGl*44PAx|lo#_<YrQqe7zqCygdJg|@kTd2_kTW?=&XdYq
zC4H`%nS(Y>n~v=-j?=B9Qj_JuP8t=;fRmeBk@Se>(8Ds{a2Y!fM3Z23uSU###*9S7
zovr|f!68@dv^}Jd!)YsW+Le)p#rO~bNPw*?t!!TQa<BK;JkB?n66`=je()baX8DQr
zBM`An*L05;<z8aLCUhs#sHy<wWWO?My7K{>%@6k`Y;T?{o>*nmnW13}69vHm&&#5}
z@Jz9j6K-2KlqJIi-%N>ix35g&nA%t`)$mwDiaFl%W4*6)sdZcX>jacla?iwTxyl$a
zkdN98i8T7*!6?rL1Rp#t>oPg^G<E8nI54j-^5gn^bISyu<<1J6cPoeO^-uI#t%P2?
z)CxXxR8^Hi;(rxugivw$5jq93e+7#o9tT)Yb!=Sm^_%B(z(KXBe&B%6=f{9zrrcn3
zL=ex3V64FR->?Le4tt3PLw9Jc{f&U2a;M^1$5*s2gTHvq8Ob07UT36q?|Bi%u`he~
z09p=okrcV;+_m)C6ATpQt)mnJJ(<W0$qi`lL<gdCsB_d~{m!0u7`%kFJq^_GY!<3Y
z7M*=COt;#v4v!4gKuz{D)dd}UK!PQ7eK<F_iPqD(qLxW!kUkKJ&lolu6p=h>(Cy92
z01(Aj##u}3CO>YM_}gr533WOx2#(hpG>x1j=R;V)CbYl7?|ge+2~jC&>c}Z@8YdF)
zlB!yE1O0lB>>%i~QYzf?$vd#X6#il&l{*7q`bGYLN4Fbd{|%2ywOr0L?_1q%7Rj=^
zE=_=3mjxkBl;BQkfcn$4P#vt)H2H=vndt{T&F3&_`YaFRNkz*#wY{OgsvdqVK|T93
zCHq5hWa%mpm6#p<j{>`vFerqD<eRs3=A+3M-kAI_#sGyx(njv18-+#xX@OC@zVNK>
z-k>Gn>c8pGd&cYYK_cD4Er?xU@tEmF;d1no>Ly<bKe?SQHAXNZyk;GUss$tBlv<3Z
zgB-UcxCO=9fwUFtdh_RxI@9{@2M>(3_q4y+&?QXd6hRU(V5g=d`Eq#R%=KS<s1j50
zMUit6S_P_vf{=d8V`lM5hxFz1DeC{l*;@wHwQcL#!QGwUu0a#r-QC?i1b26L3lQ81
zF2MuAT_^4q+}-ZTUTdGd&bi<HZq@zAteVU!CS&x`duva7-f;SG4Unp{yrp7U3X)l2
z(3`xjkL(RKA(f@LR#LWwFzs7_Dz+%7z@qy15CX=g%i*KRVf{J7L1PV3<Ta>XesYLq
zm$of)=-_e&$G(BpvSez9Tp2^I@j;u}+XiK|I5Y`m1_VY)IaD(3db}XU*ZHXZ9#Ifk
zugx{PSoTHg>%7qWtp|j8YdU}SC#P<*IVdT~O*8x;63Im1v^3-I>(l7`uL(lG(I=It
zUxg?J{eKi;cD?W>e+)Jh?-~$mQGbfo{|$RCa#LklDVL-gAo#O++X1X6_uASfj7vQJ
zs;4hyt%e>9SZFska$gwods=m58<HcDN2Cj^EdV)9QCo&FKqO~J%NSYJlTisMHH?50
zSnB&2I8mEY0V=iLC5p{^TkZTsDVkc4o(loclo3yP1^0BO(+s^I{V}{PJs30_G-Z=t
z4kkRhY>Er8v*Wsh`eah4!<9^6@o`XBs1^ENqK`NnuQj<baV?X0U3VTLhJ6Bkh3L=k
zBQRjC(KG7ZEULRb91J#nbI1qT;*UJL(`Q?3P_)~uxppUV6moV{aeGCVk+ZG3NO(xy
zxgffoe+u{uiZ3Se1XA$%>{U|eRPKVY#5rtKk!(eSGZtJ028R)FdyAsd2}~tX8=1oQ
z{{%EIif{H^Q{j~@exoJXfeY%1{65?)^85*RaHlCRudnPDAjIKsjG4peMYWqnzk@D3
z3$`+wKU?4EAaJr3uOJ|$m<)}*=O_apRL3k8m+f85!p%&MYOCpB2Rd$PuZ{H%343m@
z)2vFEZE*InNt6|Xd%45a3K*d)MJ5)ms)E(@-s#2tpIQtzKOFy_XCpZ!c?WKDcUp6Y
zbd7jc8io?q5!Vv2F8l0C*YagEP?O-Okegz3?EK09juutE6vb3CflRD{7glf?;f$AL
zFdBS>q);fjYv6B>Yl3!4i1{4gG-O9&HR<4t1H9Fem$E6{&+mw(FFG$K1l|UjCEJ3j
zA^<@M<<1pas{dC(o{G0tdR5C&7X0=LIz2zbugunXfQm@t2uK3(>Vf-8If^P|tcLzt
zm)bZk@#KY*mv~xsvq*^Sce9`Ig+e`)U5eIeX>jP{9Ihn8YC35F+TA|Ua&ZxJi6~yd
zZHmDp#F8VgZD7dX9@lZ2g=46zK1kMoiCohFFD8Swtmo_PYJP$yrL_ADJ_`%q&Y46Q
z%4x~pwCHS^jTb6@WG`T=pm=FJvFG;PA^EP?k!AQ8c$Lm+6`2)p8DdQO?gT$x6SqOA
zce5Svv+jrZZqfhxOV4^p2K@pCkat6vlHl=<Fwd?^KVSJ8-0ocQ*=xGQ4a-<Df}wv+
z3Hr6jJvk&srkbhp{$)%h-JoL-V)ySY*DWI(%Xy+dS?ZK~RIpwyPWc4aY`M@4VZkhf
zF=+`A5kfpuTOctF#L5l&trKwxiE&faI{7{kc55af2&<r&V)|<4fdyN<yBh+;t7SG8
z7!h?w+vXJr7@UvKoL)IJUmksy!*0)3DVqV2n93B|X@Muw7ki=iFn6<m>tvN>peG)3
z5Prd)!}6d>ZFvge(xM|QiMy})3jmc6zbVGauhJB+e?%qkK~;$+OV?#8g?I+W+2WM_
zL4QkM2VXa}H(FjDE+Km~dVxZh<z6Kh_G--V$AL5d*0lu@6<XGa!*uYZC4g7`P3`c?
z*}T~G%;4uYd0ITyxfL@1ao%L{G6g^4qxBB6#~4eeaTd@<`XZA^@!UL;PB3qRFJqAd
zVNn}>tiR>_*O@UOU1B54okN{My;wG*6xbQe=83?RD;GufN&g1g{aO%tX^Mh_l<d8E
zTyw21Hirwf<c)UAe<-%1Y{-W8Yw#`DrFB%x=J!y05vZtgctBk_@dCM&x|UA0R1gp{
z6aWtcI2#<dsFsx49Duf(kz|Nhvs-G&1ALD%j2~!_1fQRu*}>&(*unlBp2Kiz|B0Yp
zh`Bu>(Xrm*x@dbQ#D?$|0jHv}P5b@Qtyz_Z<8wYw^7QThhM-dTa9$27;ew#n@>VT=
zdAIrh)LyIL)O)FA)%&U(As@r2z({9WWGY48+1FVbA5*39U3NQjzxj7hh>nrLB_n!o
zfX<=m4o4yTYWgj|OI7L&*~4EXs)nI565c0g*Z>OfnQx3X>Re_1se$xR27VGTcuW=7
z*Q4YSZ0XR(HQ*PD08pA$<6=24zNhqNKK`l(Z6wU*)UWXM7R>v`@Difi)bce4!Ho0M
zD^Pt;RR69|pLx1m!VxeT;QAhN|0X+~L?m|%Y~`lTyN}Ka6!9aWN4I)6jZu;dZJ-w&
z!)|@-h_-Q@0(l-fN!RwLd_<&*S3yQJeQl*$edsJS*aIw^>b(MZz+E=;L_|4f5FFKw
zPSfWkIk)3U`LDtOs=YoljWX0$O(DHdfru>Sf)b5gvB^0kunOLGfi2{tGv|ncxuL6o
zoGo#s=VF4*+^8giZ6dDzF2Wk~j=90Vro-g5R>KN(TlE7P*N;kpfclKKJ^C6`R6PcN
z&dkYuT$hwNBiP*oiv_K3tAgYko|o)z({7sAU+FMoKbgAjb-yZ!6qK8f9VQ}zy8K_*
zUFv2>gAN)Vd&29Og=|UHH9|_g^j&Dn=XLe$kCU`XT~&Fk&mvih6wdTjWwHdSfbw<<
zoG1ol@a+Mcg{q3u68+exKh#6v#lTXUKCj!)*E<7?5H^$O0|&n1TIXA?FVG`2db}S-
z|EkQP+QHr<oP365&pn*4W`d(?7r<fER_&}P4~^+nDUwbx1;UFFBG(m?E@AlVfG1iG
zFCU*7OTn9N2b1~BQ>?W}QBd#ngvdmWK(&=|3X{RNKXcjwzw=@NWqrk#a>hG#@_+hk
z2k-1gv*E)%Olyt%Oz~lx6!Y@3Cn=0mN%OMpz`2O;gRK>3W4xhg8w(_i4vzJ{s5Ovm
zAg5$HCLWGqoAzYDB>$;u=uu%n!AhJ*>FgFcw*0E#<VG0!e>d1t;?4h4U>o<9$d>nf
zu3W8gFzuracAy`n#_+C8T2TbfVeno=f~gR1IQ#a`Vyf!NX~j{lOJPHE$P<?EVQLiP
zd*bI6!4&MRZ53g3mHXDJf4OK`-yIBJqZ)<h+$+Be@GE>Io=Y;?7VsvWs<^_RIpI^s
zZ2=#thC0}a<kvcCV@uECb&;+pKcJ3jtbu2L=rs*Par#gIS3Hcd>a{}d1#o9$$#e(g
za(A<Q`M1*a7rKh^AqN@t6AI2bNu9nLx)AZ~o{rczL0<xY2=l-o(ENl%ovsn`X_<d}
z`k^H9V$=|PG+R}ats;u#-=GX$M^qd!5StUPLw6-Z{v6R){KHt*N^#wB1<3fx@y6@(
z=+3C1r!eV9totgn<pztpM9#ujH9(Q7<bj;kJx$ckh4NQ@P;iv&-IZYao{+b<H@mR(
z4fvA0bo3P)7798nr0SP1HDB<)2z|D$r9;*6RC?wAAN=W!;2-|<9=CMuy^_2D$6}{X
zTUHKf2XIPzG-d^?w*)kDwO=x}97NO0MR@rmnp=*Ff;~vo=?VV-thWR89N#oe-zs(0
zqfA`l7c4nS(R+!C1Nv5GhSO~il4OLBx@R;l?=u$D(mu3dGh}m&4oCpzTUfJ{oGP2U
zo@W<5EMFlKpruqJP3PghgH18w`+cnx`a?LFyp#hQL{+Ta3CqR6upjD+VZlTWM|BBB
z*v15P(@y*OS;5ZCo<V8u93Ql22hH~%K;J{N^!)JZ2idVSgOKmuNZLHsYMpi%TYBje
zo<YLOD&t4ADM|gSdD38q>YqkFvIwJ~WCMzOksfoITyZ3ruanL}oLA2a<vguhdJag;
zM0k{X+%xI7*IKw}_M;|ewZ4=}z>s_o)(H8ie}RrPeBClpcSqe{^eI?Kcy%NQa^hpd
zO{EWRP3n4zLlv${u8;MzU_hFpH(q}}m_iP}lT@0}8q<SK#_Xl_bY;u=qLQXHX&NTe
zDd2{m)DOIg>HAj+LVOokIb`^%{#`Q<e-Hb!5*0kg(o!7{>N9gPZUl9_Iv5xj{zKvA
z!JX#`O)q^ueAknBA_53qA;g|B{M%q)aq{$RU~2leQepjeCi*VzN5@hbGz-b~b`Q2X
z9oS*IDL-CShYOzxQFZUGz`fTt1XhdRVO*36DQfqn_(~klq8fhXFxC8dBY9NQ66gBJ
zBUqb)`cjTY{ID~^5|r7Rd8kWf(uu)7SsF^}cOi8pP2m$MEJfmf#!zXg_}(I<6v$3C
zU1!P+4-pRK7OyYHLpK#Q;MhBl(JJ?fHGOnsezq04C8>$+#V>rj%^C|bTOqwyR?PEm
zfvxB!sl-wHRH4~H&)t`zxwOqgO}D>=NOd?cHO44gq`4l3h$njow^cLhZ5#fIN26a!
zV}@n!j3#x+ZZuKXS=lk6AnGC^@s++RzyXW@8soK)B(OfBZl%*lqT-iiE=f1Yy%ft4
z@SSQ|RAMvf0lwQwZ;#E+&|-A;{eWQDz_;JE+m|xie(q>awX{EK1wgTSEX50t*-A|1
zB<{MT=ld{zftrn|otMeb6tdF}e86BU8K9rBD|4Ws>c2_vXQi76VADKw*k%6vo?Q`q
zM~@<G_z-~7{l|@a|D%xl+Xl%?@*+Aol|K!N8z$`b3seQX@O3YGEEcI5MPGdJ8Yvp6
zq=KJ}Xh}m{$w#!kldnL$`C>scuF*}{<lDXLG3OKN`ZzP#Ee9P_=YR2{M8|*eqDDzl
zUYo<D?0MjUa^uGvS%i@2-Wq+uSuL-@<=CI(TqoC3yo?MQjEZ5=5%P&{6|YFB$X(tH
zhqt7G-p^>+`fA%9dkzy?<Hb0S)ow1V0d12iKXGKrIEi&2j*`z*O7VX|paj-bBW+rR
zCNFJw!i04DmgXA9Wp6A_4aB!QZqOK&#ekT0(pdm^*~8HFL&W_;tHu{U8mpPsA~_Z1
z6p1dky@#o^xQH*_KcLTfN_H}^?1*3LM(J`oyk62q!iN{Go`0sT`CgSr0uze`@`TGk
zeu(j|460TwZ54rv@fL5cl&Z?T&acBFpqP+<^PWR0>|t{98Ni$ZTkMJAm}A=iwd))y
z<%fwi#>1FTTmHLa@&yr03|x!cf%&dZTrwN2lO8Jq%Hr(HX_a4ffB?PCuHYA1Hu0OM
z@-s$t+^`K1?0?Xp#%=$N2IX(sgZ{*`6Zpq^t2?PoP(>DWkG|3_MNX$O&4YZGNE614
zA)CR#@`B|a*UHc)xqlXHB_;-P_&<@MrGw>D(^nQ!MImUKSYMX6IJr@tnbKj|8ypy~
zx%4<}Qa3rnbl{H*e`LzJe=z7I(@<2ouqL*3g{+P(XuX@1LmkiJv(a$D^{z|*m|~lO
ztl#0O21;R*a8IJ}As_a|-=n*YqzigROZinEjOs1-^XFOk&tQ!F)DXAAN|tJUF;M!R
zG((I_+v5VBY;x*Cy~RYOKK;u}5?kQh!g0r5zmxhdS*yaN#7!SPMQ>|adab_8@#s~-
zF#a9dDs_K*EJ52LKIe3Cfk(X=!c1VBxv$mqeBLPejRRd4YlszCn1t}lDh<i&96}z;
zScb{HMc|(_gC*g^P9cI`%Y56&#uowZDi3db6--uULK>#5eYc~f3{bU}RK0ITRR(RP
zL6?$Q5}>vL4ih7#yfE+-5;dx3?h}9SuQ*WO)k40hquNN5FcYdCcm_%)Xu30%=`>eC
zMTE2pI@3<21(~N<OLURt4Ogt$oGYomjTej}B`Bn5nAK>!bf1-ei|+A$2X2h`5^gIK
zUL0c2myn{AzKwX_$}?A`AF|~0kkL-Mbtr(UC32KL82#|-HfXU0cgUblhZyNUStoAT
zNS7Uf{Fc*E;UBkk--E(<S_Rh~$s@Lu-$$qo-&gb;)z(n-Lx)zmvIvOh!w1Ktk@w#~
zHU8n10A2({x3Fe*jOjVLwNRw(@cA0KSq$7}F1BRYuY0lOqK;XmX4aLs%0>ZGqI7KO
zq16bvFKHs|pNTr$B|1_cmEW+amQCvi(b^Y0AHnq6Z-m>AMQ7a7Re97>i84fBo3{F*
zh72vaPp+4~=MR$0(zPpOu_HwN4#_03o&D^Mfc<Lyk!PDEg<}C{26-Yo50-<|kN?z1
zcn``z%P4}Z)lfPA88ZZn_^#%C4!&$h$M<a|_JvJe?0TSSf~MbOeiwy>;GphzK510%
zb=VUg0Y9MhW=6=L-h*yogr|--{$n4O%Ht~d{`k@43Zyuv_*!}{l187-i-;u!xv;d?
z-_Uf;l&q(DYz!CBMI=jRizTs6oYKYjB3e{?_q*~_O|!1omPs1-t_YGzq*4<cBcV-T
zCs+Uo^zyVvOnrOuG@{KK)`LYFTQ}P>4C_lV`=N|(bectaX+>(gzUWaxY@sB_n?Vji
zDb=?gTvy`e2T{tlljs_Rp@~#a&$O~PvdLea)o^~ub1-!)WuYMHF3>wTXLffsx>-f7
ziw#|^K|vn)EA5W^sF+AWf1z`p0$1Js#&7Y;rx2*ff9fzzHUMqAGP4i1Uh4^LXQGRD
zp&Vru#LGTX?=5{9FqFHVuw#^$MT(mNMxrabeLC|1pVOg_1(UApgKIFxoyrTsltz)9
zi$0Yr9c12|8mhK0im>c41Dd8CWWX*tY-P)sQ<6?A>KLU2QLEHJwCWOLFEH<0J7Rb;
z#J|I`5&t~0xc`oE#Vty|t5LygAhnejn?kDvZ7sRuPUvgLQK(j;Yf8Q4yc+*Y@MY9@
z2~u*2xFQG`lp&}Ym%O~W4h@3?UWKURU<|}mzP2}oJ?G(puu$Kpj>X(iA*ZdKGC-ax
zTR*+j_#&+@fZk^P%xv7yR0?6m?*6;^5+8!LsSZUZ5;jK^l~WuT6=qod;h=)NWQ1gh
zi#iu;mHE0LtJ7qcwgWN!d#2k$vJakk=$TqBLtMXYG(re*&Bo6_K`yg-*7b98LZ6>O
zqqUe;pbsSyJ}X0VkdL8SwGl?ePNsG;dDj7(Zz2y>d3%h6g^|_h{NjA9A-J)6LcP=e
z7zbP1<x*o9==(YlQ(Pm&$96fP>87*1l0FW4{b(sDka7Jro&B1aGnnXo(^H4@0V@(Q
zOC(T_w^R=<IEx$Z{pOoLz2N1n{(eEHs^en0ktK$9VbpkR$wk}IQYgT%f$H@0=OxC5
zxTSD15|a30+03d{r+z8^TAz=Q!Fc`1V&+0e74~mJd5<wgtOfaFCd28hp2zOmHRm{N
zc5;?wMzRC;V1J_R%$dc3t8Y$|`;mw<un4clyZf)jYXcpYrUJ)OAE;W$pz}{gFV&ev
zWu&&~*VAd8R}C>^s1{=RDhSb?EY?eSeel7DJd~;inr9gN!vUr}T&_5(#<C@c;ZOX=
za?YnKTn9EI%gdR_M7*VmQZe)=!dbxA{s(NG*V*hPnrJZ@Kwhdb3gXwQ<c_Q7uZyMt
zWjNtjy>9KY<U3pyzWMJp4$1{pnB_%yolcgk#96kGG@Qe<TwKSnllF4S!gevF$oIR%
zk$8kWCmXW$WZ1zg23he#p3qZzvI$^e;|=(&zx}cHUVZpR4>iX~WbB0a>G{b%OtJa2
z1NQJ+cB}JD{x%VNR*j%jaf9_-qAT1wlSCi5<4dSqgI!z67sD(GWYgDt21EwJrRI<H
zm)pZBun6#|c1NFV3s;SqhqLL^uI=)l-5Vb-5%A1YC%*)E4<~=1{5bZ>_BrUh#58UH
z(=bpyYGvoSJzdl@hOjGng@9J^!)G|-uwL*7f^jPPUS5~;W}8H)Th5P3!v!tvbHAa4
z(2@@d75Q9&azh~YLFB&ov5(j9X`uJQW~)RjhUv2KfLc<Bpes#Ddm#7B@N~|`h}icD
z>%@I|rlrnbDzDwNCS(^yMZzJM>~_NxjIH%Gv#imD7!oW8>m@iYuaEB!oDkb2_C}6K
zXY<z;6>DC2T@@Y-nyWTJOQ28l7N$0DfyCc#?UpCEC}rUAg}h!@=v`Hv3n;cm=G2VF
zE5g5rA{`#pr|rkK3(#SBJ;F`<^Ma9<iax~l>><oqgVei~&AetF8<)nN#(}&ke@RZO
zwMtq>ozBFnNG7lKH)dsY0uuO_-n8CADY?C%)X2Vc%_>{G0~5HjCHZPSNGEB|t@$T`
z`ee{r4d6_If5wsA+6_x6I2g#NH`M~$lA&go-ptjt|6oJw=e6AK`>Xi+QZ3xRcez>4
zfO&t+K=gd5sL*4EYMLEop2bY|;_52Rj{jvKho)pfo>#B6A$Xl&R}_26hVd(hT3jh%
zfunAmH3Oj!3PGPTM2f=S)QB#40IS)s<!fb4P~K9Xq5&7GMr6A%r)z=+zC1}_?qW#X
z)BQ$hOS1MKi?F3^_b`+VpQSpZR-NcL=}jcq;Cg97NKC>;6oR%1N!RNmy(k2cS;Zwo
z(Fi?1{8q+>#nIimUmEhkMfYRTI12k#uX;ohzE-Mar4|CV4IyPQdlOkhawxVWJtb!t
z2>bMffxRXRU}9ON_vD4B#nTGJDcLNML34Zre_X$J*NKwNAC2;ZNpHjmd|oi1cx>lO
z)b=Y{af)>h#&AsL;ERe*AR-a`4E8)y=`~W-8T1(3mSjFa(-p<A8sEFAc4(_*m?_sH
zgw#Xo^fKwQ=Y%5T(TpMHg}9tPL$x|DY9QNA`UV!KEA5SCixKiPBn9mzQ7ar=XVgQY
zBLojLi@?md{R+iR(rnjfw*SzGZL0l&g#>?2n~@4NAcamn*FY>=CWXPMc+EOGPVBU4
z>^&SL4z#tU@=sniW@gDw9zX#`>FuDv1npR$`u&pDZmA}9lE@Om(ld*9mt2a0cRP(y
zV1Cvw#>#=u_n0OkD2xQEHsr&sZ(esX!RFD7D5T6RlJT*`<8!vlDJ<1)$XVtbeX2A%
zwn5m3C;cf&hKBWimx^DMyh?t+Dtuqrbjx)8##Qf|Yzi4pdhJJ?GXsbm;#k9%JzZ?x
z*W+x5n*giu;5T3JEqKw0$6r;}(yF+zljc)T296C#s_T(BD+8)poYr@vVN5=lZQ~d6
z-?bXE6g6OBP3}u&vbnKdc%P`h^Qu+xUtO3;sC0uDGnTVhK}coOYshQ=Fs!1eMw_2r
z$VaJ9uI@z43exOuD{nBr;5Vu4MUKTqU^x|vujaSMD}9>y_9;xNrPEHWE%XpUm|m7C
zHk$TgJEI?6<|L+l8|F<v?8f$yJJ?NMDSCTSQ6w{9q5r-d&}j5BKG-D`<5f)1mk->O
z_D)aT{Zs;aIG0?1p8>DQ{q^1*%~g~<qy~a8djM!w+8Tmb_o&GIVoSA963y-uj110H
z706gDQ~$25txBE%l~@5}S~+ItljXI0_i&d2EowR%%!H8lIX<@;vtRr1VZiIf3+Xk+
z+2cfTL0aNM9)LAxwxPS`RFwi7WbF~GlL*YESGh)8nf!9$onlU%BO$wY?hKfx?edZj
zb2?b)==x>#OBz>?0>o5b5~{{n@5R4gttf=@R2y{VHX&2I3TuNUD@W3rFJ0r5cb1)o
zdA&g_oynU=@zs%A3c_}@m;}F>OVSH7hh>+>FV)of_Ho@=$1*2nI6INGP_}Tj*)<T3
zzd?h!B?J+dJ^7RUqO{A=Z2o}?wT=vS-Z_ukne-SPqA5vQ&vGhJP*IMbKl{Y5Q{^x4
zpGWeUg;ShKSVnR3^dMqT7A!3=medw|9K@?5yGh=YutN!&3$cxijmg<yU=836qz6)d
zn?sW&;`gSBV0c!<8q86+n%F};&dPuZ*NUgP9}XS@XNM4?TPC~h6lmHx80BQiL&^nn
zJ6-W8ON{k3MsOe-LcQ=c=yC|+XV8piwHV)#T^PL-)&k@+NhWYqR+Fr=75kZDv3pVJ
z%*BSfA;oyIWamm?JE<4+RUdKxUdlXB$O4N#MssETg(;DEqWTwOf>hH@1cR)0hg0gv
z<|;Hwo*(3h&#ym1kOm{gGTR5@5$`QG!H(k2^-D@xoMk~D2t^9Dx3?DpV__e(;WQXQ
zkX>c>?ofA#rPR-#jeN}Q7eSZJlmruq-`O|J?5fIoZmuy7eXiCp=#)5f82i%uB2<9k
zwggQ<Ub=9G`qUUP98h>=I4_y31~8dH`BAjhZziVZg{O0T+oq!f{Fav$$MY5xwk^RA
zPGXVFCg~+T5>MLUjBKTVAN&3eb>kJQc`3`!YfIhhYKHZ%&;n85tup7eh^g<yf$|{_
z6cm(HehJX3#&<A{#=)Ae(N+Aa`FME>m&OFZU};N+l+wwlr>b<n?b}v7oKdy%bU?d?
z4)P)SNxhEa7+*fblDs2kit^Ku9{c*KxUT0;hN_m&D*paaK#P-M07u(0v;q6IgoLEl
zdbZrgjb)N-p>28Q)H#b}kBs?q4@IDpx0e~9rmzJS)^-eW`VxrvKWVI3e|bHL&^Z}X
z82S5D_yGHJVy?+<xioi@VS>{8u}2pL1O|w6KQ1)eK3wh=r1XNrfBW{W`_uwn>Csqe
z`1;>2fa`;zPZ+wSKNoohIW08+w4Lq}EGmGq7mkcxZ5Y$M4Wp;lOZGYf3*t$mLE|At
zk(|%rGWnTJ9lAX2S158~5cDani-bx0c~uBBr3`_{&#6ygZ^YQ*B)pJ6{6fMMk6S0Y
z_-ZTo9<2U;{N)paS+WZ)!}VglMuQWpo`+$r2ChOI$-8U(C}5FRu2oVV`}(mU+m;P9
zqE@vHnV?3J6Sm+m)R4Ivg~MdERy|^zW#XoBz&xcCr;C@UsCB2RJw=<eux2L{305w%
zAL}g5*%{JB$a&KjEAJ6PoC;J_5d0WC8of7VdiQ&kPL@Cz8rMc<Hmh9UOkkr4`4Vf4
z{5$e(*G}XHF1E43SGxXO3HAyr*7m;IfA{YOCEj&<A>e#qfXfH&7AZE7V^3u2GuY-G
zUcO5kGktLOs$4r4k$Z{|Kl=MoIkHcrLBJ0wAqB27=3#p+y{q)gcmcT4Q@ix9&Tri!
zQs$Hj-=aHD&#`Pw`*Lq>b!ZVbC(r_%Zopn17qT!%IS|NEiNI@`n@ydF^|?DIU>5@4
z-7)DXM(R1-H&eSdQVSscd$}d^*Mo}TK@hi(5l%ynvAyr=A&z>1O}`Cm63~m5zBqnZ
zXLsl)kTTEP>WlQ2<ZEr%53!847OP_T>jVCGF=?+0<Q8N?h`8_dJzSEOLr3$~|G@43
zLzW6gi<69_YFScJ)f+n-><<5TEbkxhBak4GN7J&jp{n0<kJ}&kpP5?!W@!U(qXe_a
z>n4?D&HEN!hq3;T@8gUX%%Z59TuU9StUA#d*sS^)H~!a6@ZV9_f4%azAxE`{U|^3*
z7^TxL^|xupo{#-EV)@_6V&GK(@X<Y-&&QWjLgsSm{F&Bj)xxg<LJow;zW=)x`M-W!
z7dwDc!8Ff|NWeq70%Yg7DDGHj%<-+0w0dO1bowilvQq491mRHV%zwU<|M|slu>PTp
zS>-mfBK?1Uz1-J(Jh_MPygKt^o#}<!Qd+LVvoxF=m9^x8F;5#Rl52~-em?6OJ5&Mo
zw)jBWwpRM9@lg|DgW(j@BZ&vU-KFSo(g2?-Crqz5B!Qii#G{6+*vM0_l=ky7I?zo+
zlgr`eD&~it=Rt(rQuafJfbQ)3#}_CVEdkKXxa+~iFh3ry8RcHDV#N*n;v{BECGkBk
z4-J;~-?FfYS`=g;Tl#|48LZAX27Wj%rhVgMvsx>o9!X{?;BIvHzCS0`Yj>xe?Z9C&
z2!(eF@n3GXpZV7D1PF%RXD_d?F$H|HTu=5DlQ@_5Vy~IP=za%_qMc9!G$mQJo)<vX
zg7n3lj<1)*?udDF0r8+BAk5F26b99YTP|x&EI!N29!~6i+^7E!mK|;d+m2~d!DcZ&
zXpKXs8V+nFux5z5i;hM_Q)M_5?o%KFKAHgt?c@HcA0&8%*hK?-p{F`sI&H-0hT`Np
zyX(B&($PS$`h9qRC2pJB=YqR4xvy^I;xTzAJiNbr{F!uo<^LooUDUYSPd`U}nGv-J
zj!OG5Q#!S6iuIMlu17QoB4*PvlV`e%p!Azc;uir2_-Jh^r+vm;VC_(zAI~Ps9*it+
zijsQKvVrCQ&%kg1Zp1tO*=%kXX%HVE&S1I3(`}gsP;tkjU?mPzO%<qsMomjCE%F-G
z%gE2PmNxs|rV*20XGvgO9%yWlh*D69^-#e0>T@WDU_Pm#7OMcvT&jaXyStGJek^7^
z+Lwkg!UF>qtg>=7{vx@fdF5xw$_pHoW#)FzfudIeB5d!R|J)H|H~~+0XCvU~6q14f
zsSvZ$vt@Y7YZ7M^<9qkObJ%>qjg{>kyGPimVE-3cd!`eP?RQWGkhPu+VwQHthQ`60
zA~wH4na=wUIx<ry@J|XfP*8mCa$X;Ji&Zq<iU*k17PE+~6b!sRysfo+**mrJ^bju?
zb(LJ-9r@WwUp?N~c#_DP<!hg=`w7Mo@zu2~02<Nh6M(~B_p|f*kjduiD7q2h`5Fe@
zpz`{#PyEO5-r;f8Kc0Lm=7ychJjV9*%aTUYxd~6;P{BYPd58YyJnu6u5EVo%A*XTT
z<JVIivx`fsQd|f$q7`4g9~dNR(D4&K3Fdf`eR^N3cHX%H)OBnXFMIRu#zBr`_)KK!
z3p%$I8r2k3xN(~QUatU=>>jEAM--5y+u0hWjzFCWFwimA;dKY=^t%)_8G^9_Aaa-3
zQB;oP<AG7rW3+V2wI2>aL{TlB<Ti}SH>aySt>hr<pF?x=DYu3NTXo{8!er0{MnWL#
z3<1KHN8x(}cspU-HS!glo#`xyJIjDSCe*p*J7*C~H#4aWNvK5^@5@U<B<)>^_wwN(
zhXQ-OBLfdJlN*mMW!ibD(5*vp76;WM3Z{51)6{uHADt!#k-(e<(q&~bC`iZ7G~@A8
zhI8jk4sUJPeXrC`9`E$UEElZ(E?Yi3I(`#ePysQ1`-biE7_UqL$0vDzpH)0%GB87F
zlz%Iam<+h<iY78S3Zn7YCL>d9XxvV-<lRoaf1jg$<=eNo?AR(nLju_M678J1+;Kvl
z_%I2g6OY-UVu4RH`3BfYeuB9K?uisq!cdp{1+P9{D!>j!wZW1PysJfEB8@6qNJwKh
zHyvOz>D0<0U(Q#XlgTAqD{g+F%v=-u<wL+APd6TMm}=j*4d*a1`CN!0u)S$uP{|i}
zJiR4)ynJ^uU(Z!yi-dVvG^7RO%rQg{L9Mf~vBq3}n`GKuMi^MwuE!=4ak&}wdy@u!
zgqSDpVtd*27V`M4?(fv9)z#?f$*6A)^M||Rrb=114}eY?zR=f?HtOY6?2*vOzhwa5
zp_)>`4Xl7|Qi*(t)BZ#h@w3JBfEIw_mbz4=&Nj&%F&~*9Jz-4w2HqjXp5I({!$er^
zUQ#~hD(=TN2t_ez55?e}^9y+2hXWapGHD@kZFgtuBP>=sDC;xS#2UzI*i=B=ZB>DR
z?@LUTep|7e`NjysOP5m#vTALQMBen``*+4ID)XPU>yEYvLvp|Ax4GGDa%QmD0milX
zb%s%WS+Z$Y7-XV+IX~OHpfF?v2I65)Lx%1rI0oPkkQhpA>Gv{(MmPA+BgsGXC$M)v
zxObTGR##})*f!qm2`K~grP{hKf$J{?5^>Uj;tGblm`?r*{0|h##B{yD{Bnn^J`i<1
zOu3iux!C5$q=$C(%x*QU7=_K)pp(XAQ2g?AH*yq;^nMyp1)F6=st(7KLXZk{G;xHN
z0QkI(hreW?|D<+}VE}e)5;PLNVk(2yXwMf1ptfffTWav;eclbDT5BwJ(cNfRdQWEv
zTy?>5USh%aGk`QQ0T{8QfX1rQ3<Fi^WdaqI!o=Qtattk&QaFWmPg*GkRXmvoR<5Kd
zJ=kB=x!}YvB5ZH15;7gc=;8E|d81N83IOYxjbxUa{igThA@ERvM-FhIQusaa=d}+c
zeMQsq>++RgT2F_qmT5Ln?84HJtPZ)+U9snQ1J}zsM>CT%acq4)9P?sC8n$A8iJlcz
zF?*%Q?Hns1Qv7vLVs#g<oVcTMcY7uv$me-Cm+l!a@@G;2@B>I)aa)Q!U-h>z@JrU4
zjcAn9p$_*7LQjKJNCESjR)e`<OFmiAnamNsI(4!LGU?2uLccbEg2-&AipJyT1yreb
zmT38#kOGjaod;5Y$}XwMWHX&ti?v4(A#2mdX0x43wcWi|u@R!|LT+LW-OB|75_h@>
z>}pWS1W=emvkI(q(RWrsLPM98F0n`gS*Mg1u>_AY9z<vic`reZQ{v}bO-9?q<_`vK
zzS*~@%V(HmBl@z6XaWL$Q^c*Phj2pgf5P#1A~PDaM8*={6`RTU&dExc6<Xfg0}?-W
z^A*TIaRSJfos{1bmR+^m)YCv|!P?G3&}%Ix{2F5xVQ1_C0q0A(l>7J^p<U3ssp`pf
z9QaGbomPEjDxa4wq6Uv`?%~XN5kHyuejcm)a3yVADl(ETW-YLUBqjs>5>%~pL~YOg
z+>hq7;<E|_N-Pr05t7S{uXeOAl&}tzWhy1;+eb2sU6TW`9$qs*_!MnL2wcAOFNuF_
z6^I}Os|dIpMV*3UwGH{BJQz>;{9d!hqfqk1$q?{$beccUfm|M!3~-#T0dh1vZrdQ;
zN+3W~IT#(5wSYunW#Czwi5Wrl061__&6_<w4c`3>fKYAztjCDEq(T>ijq7cU$N_?K
z+5=9FN<ijeDyF;Pc$mjLAUCC**koU$nOp-mNA=d^^}4mCL1L&BiMir1;b%Gd3T(V)
zjeF1)F)S^R)*OTS&pPD@N6d2V>CEyg%SNRbQ2}fGY7vq}4(cG0B;_Vk#aT&4nQQl~
z>h}H!K1;Eg?SRyoS!bSPWy27LGB^t=-~DofKN1s9ye3)eBr9x0M2%V4>EzGWz37%m
zFem9ksaGLzw)!6O*9pt{2MN`BNp3tWrq>^E7`rl=@}<tN>`vUkIF@oE1)tZ=94uZ+
zHCyb$fy^I56|+Q%JXD3hmRU?sa6vYU_oFHc2|H$lTCp?jS5}WeU4J2jQjIfTOd58;
zYMMz3J-n2x?#&qfA;1+$lHpz_P#umSJgAVz?G+pems1mT^+YT_9qM8;>MM92#J;n9
zMi~K>Xc#}4YB^ie`5Xv_Q3(7arV#VWiqdG4s3v<aOw3Tj3%-HF3`UrQjb?QWaFiZ!
zBgmj4-2=i9GN08VjFz@GnX$MSVH;#SJS7K6jAXc&Pr#Fydmxrb>P9rj{pmLQw}1>K
zmsj6}0xD(KGys{CX^Vx;6m$hf_n^357>ik5m!c`xqxO!pKOn%#_cq(z6;4=#a=9CA
zGEz*=p0+IoltPg47venc4oR7s!=)mZR0UU?oue(^=NfD-hWT;G#+uMW9o*GVItDjw
z*J06H^`4(K7#m4*nk_kd=+%kBl~JZs$F;RXm%+<1M%#^}?s$O)bVka>MnK9@jV58P
zv(0V_j0Du;brWcRR&<)K&)M3_QT37uJ&u<Vcjzw`lkxVHwV|EG1JlP~_y3so%|`;W
zR4rS52B10W#u%X5!!VCaVl3!rR8@f!FPh0=pGquMi(LkUe9cyQlC3Zj@VG`-!F|60
z_AH6j)l5G3n_=3@W@{FgI5wTJJ-S#A!nsC8IJ@icMv^*!mpTv%QWh`I1xgu~IPnJD
zjz)|<AbzREsib|iPzu8c&h#{C$<i8D7BeD*7qE*^k02o;CcAH#(0m!n5%8n2y>@{@
zPN(((Qpu9}yj(M2MiCM~nlL`ACR-lf8sFJ*C9y|f8yGTT)f<OI&OL5+=DHFqAHQsI
z9k$-mWw%{L-aZJFgm&F4^<|{}zMF|V=rD}H$CMWF>ZBFqY1=K~CN54zpc!dd#%}G~
zCnapZRE<Iex6!N4cfJ}JcD56zY-PV7w^kEEl!W{Bc>sh}H+hngV&yo}uC31r*Zwwq
ztnHUTrA5Zg+K#yTa$xe<YVG>M_-OXVc;b2YO@Oi`&|ir>3`3Hv=0&SlkjrKdk*!Wl
z1~UMIL3BVaox$mgn_B^ZY>z<kKC(h@lZ7BmB^uzs&-C1~#y;Aw1&Uo_7BgS%jZZhg
zZdAbB1pn-soHnE1@o;{2+w2ir`e9YifKMS6c56o&5%P|Az9uhdw_~JJ1NO&}+3I7A
zqfm4W09h+$R%=^X|IiHnH99)tL{B-B(QEW&fFxSr1tkMsWgr-uY$QVyRH>wA?UGEd
zq5d_m#}A$TAQTC&(2qB4oUprhVj{=&WQ}~}Xu5^`<L6nySI)fk=V~2|a=jxq5BnAp
zk@GpqR?|olUKW<0aWDB$0wZqkTmptnh=s!aR{}>fcnpZ<{D3x1>@9{GRk)_*)drJU
zBqrU$;S`>o|AocltW=$X(e!Nn(_5+Mjdh)DyM<=}HlXq#akuB?y&Pmg+{PVchq*nI
z$wu6c;P2?zKkVpHdV!{vjaT%-ne*}Kj5S72Xv(DImliBQp_)HLpgW9m%S|C!AU)KZ
znopVd&v-0}C)zs)$QV-C@Ra_T_ZXw#ECWBEseB%<Rjc*+{$SS81+P4Sr<$Uc+0P$4
zIV>zJ3x+%n*f5k@eqBbw%9SMAiF&>PpO(#lKa?U0rk#f(sWsG27tsvJwH>uzU0E^x
zB+f{`6UTWkvW7aUz`U-qc}Qaq{RZ=$IUQ5@{Ni~=K_KPIyfWZ2;)Vp46?Tvf)lFQ<
zl(2_oJv8DEmP(Pz>;w4#6z2w)#?twV^~1(kMYmM|_ctZJjN3{6CPul?Ci@PhWZ4TJ
zytKvHq@}j+7HLY3L&D()RMWsSHt8%9qDK16Z}I@5TCud3ciA$kMn!&^Jn$?c$*^<f
zL+)0t!qAaQ`E0<5$zM_2$Vy$>0NYK?XKh}hDutn3U$=MLit=mncRBU55!P6SFrv69
z1fsT%#%U<3p+%6~h9Q-Dqcv82K5%lTco|8D5<lO1Y&^ned+Vxhiw6MJTilK4=q~Mc
zVHt=$SI>Y9rP}=BZkfKB^|<mYK)hrP;R66w6f96D)Hi9s9ElWkF8}bg;@nC2eb2k@
zo;KeO)EgZaVhI_6506hx-{_;W0w^04qXpcXK;-T2v4)O7@BriTo?NEo{$ZikOg}Is
zIHED#D;*-Size_KhD@9)Cj5j(5q(I02y2YGwST5iT7mutoZzR69k+ytXZ%B`eo!5}
z-aS8E^)io3(DyD<-D<RHmMIVBfxx(lZX&`O3cV+JfB*+CGN)+}NrGonhkcH({m16l
zhV%<Cm^Id#2jp=<zA2=N5+mDD2pGA%0}Fs6R`d*5r$&`WH8U<br5Bb~P%ZPCtWwT5
z$O&LjK4lRkJ9sf9?Ii1(9biuhdo3NL<n-hif4aW-(rLfWpFzE)R;9b>u9K)kH+k<3
zt6@qwo>yjG$<$*~kbZRBGKm4IykvQ)vu#9}8wBJ|+!CxUI-BXO_LfcmQlCcrOMOap
z__=#!QcJ;M_f)37vXdrf@mO207iQU1Y$Lrx5*foGiPFUw@Sb|z$oKma9*>MDPqTUm
zA7|E=y!gkfKOD5)aP}I^%Wb+rC-QlHiYin-U1|9}IAxL=`GtmonMP7ZgFT&V9=tNk
zkfe9q50&{m6_QGTBrMrHw1_i-5PA%iG6x~4phmQ;ubh+lV-V(t=e*+Gyi=~L-?9LM
z>gm4YV16@t=?IB2mvbRvH&o_Jr1vId5b*1<6#Je}d1n^L%7OI*K^7Y-`h^z1?@hQH
z&|XWxI*tDH)7>;#wM^DzsbZeAmuSmS1U{YS7lFeQvVssgQ39kl+-6u+=;W58n;S-L
zzD8C+M2CVuf0N^!wRW8|*D9I;3nN@Vgyn<QW3C}Bf7pLqh=Mz0{w?c3Xpb4`=g*%Z
z>xFe7DN-Fzlp0E<>etheKl6}0%EcL4m%2*MW2n)6Cu<S>df=l@iw=Jwn1v@+gi!Gs
zsavO7#owjTa}zp@g0Byh&L5XAb@_MzRmqjAsG7knHPBk2;{*}wr4E)~D`|229<pci
z5$A`X9_f&Sqoj+(bCKIvq=~BUVMbWW5;`UEn1HD5I}48#WDDaqI*wD{_XM;9%|UO}
z;*eWux>^y^hLL278YO`mLG>9Nx0DYStrYkPH#@sJweAlJ4EkGELBjY#(wgWUw3$Uu
zx1rre_2`z~i)0I9a!56xXM-XsySn{OH-Vjs07efUw(;*eR995q9;N3>56t!bAILqG
ztk@(jKj4k`qVwp87jp(iJPOGs^*j2>XM$!G6wkcwP9@B5zVChagNcM+7dv-DO{I__
zy8Li7v-J2HoZ@D>;w1iFb4iYgD5GDfyCXPpu_yZTZI(v^5I=D61V-g_pZUq8_&h;9
z?D6IR?{LJlRF;h8Ctmu33ZLv{=WB7;d6<JP)vu>`4O!NUJ`8XHREvr1G=ooXK>|E^
zYZLz%FrSKhHwurnX^OI$|E#%bQdOjPCkRbj2h)Z^rv!;s#fT<tjchUtQr@JQNJqXx
zRU_W!Q~QurP0v9L+A96w`JFi!uUd`Qg<bpX=Zd10)$S062l1xbLzQzwj!$_0(yzi2
zi+N<{%}XpGC7IwM3rpvRfESTi5l>e-dC7-`EUU!cJ^AGrxD@UJmX%Z+RLyPI)#4Kz
zx#9q`zVWcW`Va;xyCDdNIykvf458v%e<xQ|$#Xp{tSzr6N;O(b?S|a;_i+X`eLb>h
z6xgCj1PYMv?WGJ8w`7NsX?r8qfs^#dbw;C<1R$HpiY-P+4@tQHej<dMQIv5u`mSJ0
z8|fS`B<Aio$9zG}v^Y8=nD0)-^ZGtQ@8CG*SeD`DaP$`REA>9sFyA*lM}Xr7#)NAk
z(2ZWm-T4OV8in#?xv|z-x_s+*9Pn&@yjF4`BDC{&I1bxfSLQIPLX4?|FmCSD>p>xO
z{kYn0RzYD~9En7hFO!dtalfHLp<Ye2uBcIq7sN{a4tjwFLlpZT@svNX!H4ZJt&8?h
znr0OrLRb?y>ApV-M%!qr(I^FDJ}cujmI%J1&6oL(7jwYS!VeZvB+1suuY548WF@(|
zq)lL=JBud2`3qy4z<`f@y4z1f7d?%#ZW6WzgOO@9;e0+;yEnu2g3GUOtKJ-=4V_8~
zGY53foBCBYsN6h{_duWqcOKW0q6Qsat`t->Gu8aDE<v7lIDPccWldIU?9`6;!hgw+
z;3HF<+lJGj_MGbTcWUE-aKkayU{e{4K#5pGjBiKt_Le-lzv&4vZ7+*aq6S-DN5EYP
zMl;wXek>YI_M|}_dm4>7E0%4Tb1VeCXVbWye<X%8A=qw|4mz)yZfVPyRb|l(bQbBb
z!%F`Gj&fXzqogE2kb3Drm703#W}Z%-PQ%E8ifc)~jZ)Y7W{M(GFbev_!Cx(nqb?vs
zC`9+O`e!yzs$6IEL%EH_8gUB99kC(@cYDd{1c3iaWU+9xt%2aVWIqz1j7TU5gF;vg
z980C{(aSW7G_0~5yx$BK+MK!HC!H@Lzdn+jo_?Nv$^6Xu5d$z^EXu8hFurKvWGnn*
zXA}raLyu`%@CJ*e-;};DSovKbxxm>wykFi&I(ZLskhnmKXho-#D=fiQ88VH9;NdWW
zoE)rpSWPsQa($34mfKh#MMzg>x6B<BTVD0!Ow!Zlp+ES``<NEvo`T+2Za^-oHL_!1
zR(2;s$8`hl!{|zP?T2f;XCVp(seZNoe6XGKL5h(9Rnu;yuw(`Tek#knh1Sb@prKT{
zt%Q}{`o8tuk{_4o_TE&K+pJ9)(~SX|!(~q;i9_wpHAJiXQOKky$=A;9)<wIxQBp`9
zhfN9SK(TfC>Q(cLpDSKDoL1P_QwSVF3pD$lf1#ZP;(BX_2C_W7Zq~6-YQ}%To%%f*
z>YDlCA2@+jw8);wIIr{W0$<7Yf5V*(3!gqelDFHAo#N1AZ&eZ@*vlCAiW0-{yr&C5
zDX!_&(hOA#Wjo~xl+w>`Jtxj=4lNJ8ln5by(9LJk#`weDt);$()FDLaF_2cwKYwsz
zV&5}4S(>_&*tJj)P_jDa<E}tDW}L?*_9ejoRLT@|QDxBKIfhHwGY_v&0O4uUKmJoR
zC8YhA*FcICI6+srlNxpDMa8O`T6$vv<IAG9Hu67OVNYn2HZn#f{4(Hjv;{OJha`5<
zcfh`;VXSFGK<2wmd>Gl!=uD1o-t&8hq$u#-84SVmilX5fQB~T+;olkv4>U^nrVE5R
z2E;A~eyTPSvv8+ql@X1NiL7G1E6jC_(v@?Jtv!Iy|HBR;1CIQP!VQzCLCU8S)E~0P
zs<6Tp6(kMMM8W9`T4Xg#u;3#SsG3fh`&7-&q+exXRg3;Fz~)D;HK#&E8!IA&#L5*|
z`{A`GlCd?HUkuu9!&(hTbUD7l4}Gac@d*V3(*Z$YJ3afYlaq&Q71jMcHgII_f!zfb
zcW*<w@(=fullEQn(29_O4mq42baI*eGnIv|c3p|{alz$>DCFWcQEc(zL1DfXR)Rir
zk23Yn{ZV8+)M${%vA`su44}ARe~75vai`{F>69-eocZ)po6%&u{9y<NG4&Cw-mxh1
zPmz^%u8?*HmZ$UpN&xfU=%%mi>`S$FV?IN7XCgEb9`<lIe@*#(O@!K|+}VQnV|30=
zYy_SC_LP<;{*}vZBYC=iy4ue1ipSO1Xi2;4NggnGJ#78SRx$3n*T43(si}n}`}>Q{
zq`xogLF3VU+1pRj>xCM*b3mN<r|$K~8(mLE;Nz!Cb$gAG(!W+vzw{I2C?tJ%IAib?
z^Kf0lu+?~%E(3|Z)-i%mD4P*}V%6(bQsRmvmLY<TS;>s_?R@RR+v953dZp`4FqSKF
z)bsWj@8(2+M%Axg)gpLtDd&69{+IvM#cEK%(hq6B)1gY$NGgGMDFbQ&ATv>UtSh-S
z%o%kwBp%s8==uKfF)=MItv&3|%pDaaG#<&TikVOp9W%3HG0aed*$DQ58|DQ%wY;r)
zY-u>%O1-El?Utm1FKLzjY!=c{0ia2-xe?2b$-jHJDVeOBxAE@4!bTPn5^DIH*kmbd
zR|kl-Lu(cx2KZ=d|E3N7Pg@GV-@9jDw(Uo|i#ssGq+?@W!xFc>%ZvEvFhQv8a){R9
zW#59A7jR=%=FI*>8`}{8H_dD#|1_MSXS`vTG(d$x%p6&(RsODRd%Y^o=aEAeSflS=
zid831&CY!M1(k)Yv85z3AJd@=STX}GSN2Hoh(LaQPDQyv>uK1<iB!Z|;a;+wkf)#y
zjZ!eQ(e}2s%#|iSdwrCp$FSXQFpmXtk_2wo*RQeAXQ8lEMB2i*Kb|4Li~7}oll-5e
zuKA+t;j|pO9c=K`){3#w;r>2TbE<?UaE_k>2)7M(S*z9J4l%iUy>H8vU%7>4;CJ7L
z1&SlRpDctkX}km%eOY$>O#!_C!;1KouXJC;Xb;*^5ouiin+~mp{MGBz{+iEh$-1D_
z9;pL}K`WTh4I6y%VxwCmV_oWu9MFoJ`PpfXdY!VrD3Y>va#Nre4`9(HmsqJ#4P760
zg&V>-Lh<AomHYtcwsHpY-QTcOzcsSEUd2D7z7wX)`Q7&Rd=(m4rJv%`n^x6Wkv8HA
zS26wP`bE)sng>t;s|$1t-*l242e$%>z%MOyqaIkbP%-&K7y}tto4=n5SZhmi{N15Q
zOCd#(J|X)5cEj$~thIX4R`$gsunU^rr9&Ua<?)34Xb)1wqK^Z-qIqZq{gN@`+Y-o@
zcex+oM@cPpEWZmuj7+Q>cp0?0o{GLa-K08XJ**dvbj}to?&EL9t-b*rU&<)Wh7F6D
zcM|>u>A#O`Y?cGgtLJkg%;AxyvG-!Yj053qCtZg}Z&wa5jC|o58wHMzhW7tsBHQ2u
zC#et=r|s5;vq3F_f)Xw_8Hhb>;x&G4aNL!)`ySAOx7U4Wg3aCp47U;wpY+$74E*ke
zOEN=X73NM3X&A0V^)15Z_*|LdwljzZ*iDity1Cs>ZOs$I*@3P|;th>bez0a(aHUBj
zV(-wy)xOo+>&qj_NxR*0Q{FR8Q1q|yXlZ}AL)ad9Dg6u5YJkQ)R3;K~&f|A41|}Gl
zfLP11Q;FRWM=$W`3kxY#&cg~w{4X45e0k_0a>LYgE2-o*ri+1zQT+jal^%?aHvf{J
zZV+heOs+j@SsHR>_6l=RI+f&N6pSbpB;v8d9F=?jf0CXdwJBTWry;Z&j}(u#KtHje
z!AH=64IKdusOQPhr+!G~ISHWX&V7eei1w?i0C1!X^Cm`i_h<$7t!;^2S^bU=aGZi+
ztaRFELd6cjwN?DY-WSbkf68#Uke7Xp05k9#2=_^$z;@+)a{X<X3DhxK4A*q6SIdhi
z5@!vK7)IRn%8a2N)n;2%htTt&)qQl+KYd<qPZ0bfB!?Z0jlC2QAmk`GfC9#zKdrMM
z-E5trU^NrkSjRUB-5hdwJfy-8oUPb=7cZ}v=Zps82q_)T&j-o7vVQ7fB53cz8W>E3
z8%DGWU7MEj+gp6&36uglkQCjaO+Vuf%+~4gBSLPMe|&cNL4p0P`(Hb_?=J{1e&dzI
zlx6SyV1K{y^Opei>2=Y`^9qgTCKfN2SkBwm(&*y@>U7M2b49<%USWMYL<!4J<wMA)
zTuad9_I(JaCWA5&t`pvpn6Fo?!?g%W+|QFHy8hK%vhM^p1fRYetn1UgFCjtzyg(I@
z8Bwm_5x3R9?cMj!VS1F9VvX}Beu0{PIc*baEH#y)^lP%%C7RIm%SdWs(5h8^f6?mO
zC;t!CBZ?RR+zd*<xb==V5tq^TLP-WxWwYUAIJI~DRG{xV8ovLFw6~0kD_h%kgS$f^
z!CiwB+}+)sU?GIy!9BRUyF;)7f@^S>;2s=;2ZwLbySsPq_x<)c<BansBgIHYQMKlp
zYtCn0&vg&<DU1XNn{JrVfu}YoSN8ZoXR=9*);sJ-`==^j6*GC$>{RkCaCY?2e-`gp
zvI#%H;ldvDw6SJ}1yHzrf*TCtPf$_}%x@o($DES|a<#}0%QyynL&<BZce+0YO4_m)
z1aUQ!2WeBt<?aUpgOUd|uaZEg4>Kos+imdje3m|C(L(C9&y%pJZ!D<Y)lhXJz=ziM
zJTT5`XrB^=C0{aWJjEeFNRExy<I%49@e<`v;u8B~J?pxN2TU)*yUv_khq<a|=l7GB
zrSUxqC(?m@-A}L6H1JY#3Jc~gs}o3IrG$LqD;xEGEkhTt_leA?HkY9Gh=LY5wSw}+
zA4uQ*MO+?)bn%dqD#z(ej5s(tPA`gox9?*uG7hzLhQ=zv3>fG})AxJ0<*>!KG~ONI
z7asBV?27gQO|H&EcctxQ*64ezk(k{Lv`3Y32|vSQdRHg#@;&fDNXdujE94<!MeLrU
zd|`#B<OO5RLQl-HY~1~$^27sqLj;ErAXMROZ0m<+Y2p>qA1r~ca0At3ZmlJ9p(?NS
z=`JdI9r(jRU!&Tks}2Hd<V3{XBohZ~=j~)}?DwLeH}mmCRJHo2DjBL&HsYG%Y{3Y!
z^#t_=U*KKZySaYh5$5`tR2j2|5`EX+L<Jzo(*UcgcLOno_mJ=Gbfd=M1A|{(51*oM
z-v4_Zd|{`?BuRNgDgwv6;m4veK2brtxF6?z?_eslP<Z{4T}P|d7ol2bQu|38)kt6h
z+4^xCw|3}Hi18{HrP{Tzcx9hkWJJPvIZy_A_vZHyw+Z<|g-i%hd)q#bAO$+W+A;Tt
z2A}-9YV(3c^@3g;6--Qn<0cq>Z@ZaiL*t8oX0t-7a|NRiQO>H`Gc#&vn(02)<M_DT
z(RvaOqXT@)Mt^V+MhGMHHzP?<Z3gqd?*rhA_GKXJEDHKML(t`HGA()`spD{p%Cz{}
z^t`dm17j$yk86!(qE@%bJ#yZwJ9ym=4mHbhXFz1Wv|6qIcXw5oHG``Ld4o*7mhl{l
z<p`ra9K?Kek6TBZzc<igKYrwe8g-He|Ea@i)MZ2WpPvLh9dK1nivl4x)lz^2(?7CX
z!}Py-E!m;-0tVQQIqfu2+W*GN{>_>A{u|HHM+2Od`c(?wB>(eT{pTwX;E)`Kq$TYA
z2i5hzkTdre<jmc+oAbZ^TEM!n+E-W<$>a_0<(f~)l+QcfX8o&gqW}43|M|*={Pd}f
z((_1m`&>N9z2x&*$Z7vSYCHe=kAYX{7Z{%cckQjoktmZW&~Pr&<FfzpasStM&>7-8
zd^cdqE^4NB#`zzY`9D6N{cDKi*?~JH7M+U7?a#ZdXO}2$2Hw={B|4-y+tQiyXCvHH
z|NVcz@%0_X)Oq8p5K#dMUqR=yTDTS^l=JpEEu)A^5j}b_X;c`h+`>YXL9(IjO19B@
zE;j4=u~8?`!F+h4nk-<X`w~~L@i+%2+<Ovk@WMKtMm3B7S8g{C={d&d>yr+!%P}vn
z*ADVZn@99&hYvGSCf_{`F!z?uB7V;1mH|Lv(NIjPKM?ZB{<nA#TH-l2jlV7dWs!1Y
zRf}>^^bnuEgx(sIRG*w&A_1obArK@TO~Cm<n$t$T4m+slgSc-E7=t#d@84J70=U-Z
zuu>y!{{Z@Mqt0IA$cQN!KFZxcWKVZfTw8~dHl|F3HQ9bB-AR6PKUHT*J<8`S1l;Eb
zGn;1s!r^qbS*Uz%*y@Q-KY|1KajjheFi2n#q@9&)?=sPPdnVV1xWK=$%68eC4+6*l
z)Wj!%@*p4KjRoQhm|ptUFlk&AB8M{#TlSs;;MBp=81$N8>5|<o-*1tfz_yPvcDBGi
zA0EQw&|`hzvvsMd&!cn9SAz~kAT6}siBBD`11^_z67uM~s+`p>LZe@%ul=8j9SF(J
z?-;<K|Nfe`^#DkRubmS&e!TegqRPzstV^IOz<@K7AWkiWefc(W#X0@=9cwNQaTe?G
z)33~>z~50a7aw~|SixSwmfxaJ&4<TJO#<%Nh(W#zX+9Vq)Ak}h0j_@nPWOxo(TgGl
z{UoqGc7EIaZyQR@fV-=bAC{c73TYg1-{ex+g7O!d#haThKodboxTQ9`iU7tZ9^QK_
z%gtuU3&rY<mf>gGd%n&Ug6Ex)_SbFwi4&Oe9O^+eHG-toMTn3#H50W!mu+bUeRE+>
zW#&aJm8gws0O8Dbel_Q3bwN)j0chaiUZ_DY6Nd)As8%%ol0>cW9)J6LIIfArwug%E
zE3i1}3w?#K)vw$Qjqu@3{U6JtyLxOPk)tWqI{a5r1Mu+BAArUrd}byHexFssyWK0B
zp$w|J!X-irILL@XB4c~?fA0$?fC)t|fZQTu+3P8a`d5=JmY=yNxr9|0g6EdeBM_OM
zt7oSg&}~gCHzeM-=VD-%JXnrqq}JJ{mB8gj?l2r9PH1~*DDAOx=cuz9yb!0h8Q8!y
zbOP^V?00RXGD%2BD-m~!`&{+Cd&_P^iC*jrvWtM8IK^7Wvo9um9+^S26PG!RV=Y|w
z0~)nI!VxLwhoR-rSl?a1$x17?GotD-kX5mPyW15IoWN@KMS8Z{0pI}pp&?3);Fm61
zO}@AJJh!(#ngDL`SZ(P9HgllIWJ*GOwatU(@$ntzF&-%NH{hPdI1!{$ip`iRP_%VT
zmnw*gDyqL)i1AUs-j#|bk!z*MSJLU0t2a1*H^{isKsS<fy$%plm!}&PtYbyRlrr+V
zU0mkGg!^MFEeT{^?y@Np4QptWjsR$-M6|Nvu!JSh_r1+)HwrJE{R<B<9?8(;(-CbF
z%V0ajK`M|@n*5XrG;7WMIYUl{cgk(ZZUZ|62LY=?UL@<&Gm=9@&(D3W6l?~Wom#)3
zHqt0kQ|bz(O|qR~5AOCRDRh*~H!#{lqzv~P#<3}?P&4Wx;XC~+X4!mr9j=13#lLWo
zAv34nGp|nmPnwWN_ML#+Z4_+fc|Howujz1~Cyj-nt$(wGVBOF0B;!*?$=L&k`up+9
z(P=zZKfk<cekN@9?ezyRzO=O(QcijtQ7(lQ@5ny8cKVa8jx`UQT$A$0!QJM;K{rSf
zC7s64?z%JkV&Q>F(c{(x0xtXpnAGn-m1Q#NY2E?84w<|P?WQjdyJP!KQVYPTUoPN_
zq+Vn2PD5ir_GEc|xLgATm{TURq%uF;nXv=M@vOIS(3qfgZD`OycJ$r#u>v4qRh!Ja
zf`8a~;x__BoG=E3KHoWE=YgAL0&UGpj>q9$qpr}yEBWU$8s1N@p3FZEfNwAc{x1lj
zpQrlN|1&}OMm?l2idcl*a+K`m(^;Ft{{RSwW8*<a;HiwufW5#B9*?N^b2cUBaM{Kk
zRfc3fAz)#9e?iFLNB7(HfL^e}EvA=piR1d3enL3RdSFdHg5acPg}y>?G-0C97%A%e
zxx0wIh&#VHYR=nj(PhqVghyszXRcLc5N{pJ>gfP+KbFa>40Ib?o38-+SYGGjA_F7b
zV`QCr3nsVY)ykl)cYR<w^=e`7Iu<ErLN~4i9F0dE0bFVjU}6V+$x*{Hu-$bQqq4Js
z7Au_)UYyGq?dFGEX;ghNfe4sW2Z?fGS5Uo8o4Zm19@jmkAEq&>!iF8MNIW+bvUoGc
zGKG`?=S%!gvwzc%HaJW(ldIS3on2z!{b(j9pkH3ZR3PDYW2Nuj|B3aJa0km<rkm@>
z4u^=<jV3kBWfIR*KMn~ZPSbC*D71uLXrclYC=e;94Tlp{>hi|(K>oY(MpQc-5w9~<
zjI@T}t#$-El-PE-uMsYD?yQXujWO8!xC}m?+xay|Qo0;6@qG60P}aHW>2P6L6J%Ny
zz>s0&xHDo>^XB)ZWujl3HaStBV+yQ4IE~jDGLle0GsTP~*^7YNQ?m{>w`%Wg-zT6M
zPvCaoUk_097W8kPw``dh>GXc2{_9ZAWUOobcSk=5<Ik_bKz`0*@FGCXOaa{4URuht
zX;vxjgJcrDhV0D{V-Z@?uA!kJHa0e;5IpC{<@qDQ2ZAcYHr+28RfYy5_9JrvH+Y}d
zJ0Y6iJbc>B7or5LZR+`wD2sr!NS`EcdGq_|u15%P(8!}>^w^Bh5sSm1iA~amL@rx_
zMO|yE9G}&G1%!)~uqB<FJ5b}cpns{7!MWKZNxPjB&^>sJ0aD))%@t+6(F|?)UJnWL
zJ-2+ifSJv9Nz1`Emw7t(5_OBF;iRa2@_vjmY-hzVO#axB<IV7OBHgu!mn?dB)4Sys
zcW*N=n%0IO9_mobZq>#by?FAH{gUgml%)Ri|HK`|xZeQ*g){lCMz$=kc$^M@*ru^M
zCUI1God2YIyy)XlPEi$q@QJY)PO6$=6HO&8Vu1%{4<@kA7i5B*mHt5>wQsMHY8cEC
zgE)cC<F&(Bj~kwT@&zR}T!~4PBg5El@i;vz?vu!wc8O>U6cqKRFIAO6-9L-IX+Pk>
zARXAb|4y1O_aN<z0Tnq@NJZlC`EthGZaf*(P-q()$Apy;1$_O2o(4aXN^uFvK(6ht
zF4|;8aYMLNeTG)~A)~X4-BVX0VE_@Ek`(0R?$;N8mMVfx0D}a+z<rYfv$T0c<OTyD
zhwT7J!qaZ28Qp=Hu_UxR+5s#^E1cMRuYN@WLDK{foY3zZ*+3HA7!XiW0KVMQd>c<#
z%09G4do{=_s7iBUKP;&%Ci;7J;?ePOqt;;qX^iC0KEj%&>;c;hS~5b`!$}WisgFtM
z@z_DzUspVS-kStk4JX;Mp|&G?-{js>n*T{z-d>^apMGt}G(%j?{R6WkAt{G$Z#(JQ
zTuYiV^3TzX<8`KIU2RJ+&uujW3b~)2^oP=@!oy5m2;X|g5h9_7oMD=+*`HutN|bY5
z4tKkm*7<f@oY`;ed7#r%yoOv2bM3hqBU@;@zh*3QxfBq7y-6`(kem3U&eGMEUp>fI
z+pyU)$n!UV!%3v{inc#JL9pEeg?no=OzQT}{UQ!NtF@eu4WDyw)?<`3#E6fN$LVWc
z?mZ5lvp36Fe9bN(@g}zZJ^|x4w_#1zH;;1DMe?FC*iuWvg@4sDgpWjCLI3CqAiKck
z#|M`yW(!sd6sUO60k!52QO+tY(e?N{={HPC7sjzb@I0E(gK~HP*25Pw#Ymny72&)M
zVra*=ZNl;IFLp*3gB6`mYHq%Py&v6mxVj^5H+fu+7pVr>6JZ_YN9NA-Zg#VMh8$yD
zY7{p68{oo5$N!Z)AJDj*1Bo>@dA(#eb!=%TCcqm~<-!0}dXs>}@qFqf^M?`C+iq8+
z|ISmo(1H7-seiXS^9728X;%h|SlH<xr-n|9_QacMr0yi5=6p0ZKDf{z4oSzqm`h##
z*3K<z`2=Qr-YyGfqvjM(MZ!WaANRqkN79-Mrg?msSnY|Z8?!B5-fgcy#cY1b!``_I
zpcwdt9+NVfyatd0NO)Wy6<k;<PVFch!du{ejw+qD7#Q>{=~cmdHHvD5Vln}X5xmPw
z_jIaXLK6~p;)7R;0xo-xcNy$?-$q#@{LMFk&->@AOm3GDRFY+>HB=(P_g!2Pp3Xvt
zTTIX1clK#RvPCKz++&#+@h)gIW8Ij#o}@MOT4mC5xXgJ__rIl$)B%aXtTb_*|8Xlf
zd6u3)KW_Hh<kHFC^vL~=#Y);7=7b#8Bt(3k!cQpA-YJ<>>3L#XOj*D)pi#_vX(zIF
zd^C$kERC)Y?Z;=R8ZH2jOwD;0ipfU2h<x1c*bgd=1k73NO2n>pmdX~<K%Y1}QvU@`
zqkaEd50Z%_OR+4Kg=`gKFop=a2|0)TgEp_@0k<28fVh|YRi|yKLH%j6(KgRhfD6T^
z;13H82E>uiwkz#ouwI(^%`+1!*CGl2%KblKxy=Z>TinlYOzzg^4Bi3JY63kggxx=`
zU!6Fw@YY)mRw0?=?`2zUkrXS%UP11&+C7PCv?)uWFMggweY`3@GP>}|V(N#EptGWp
z+l;vGRBcb{KE2Of<sr<SeVxR8M+`<!>qbW(nNVaOvahM5gXfpNuuzC-q;NtpeN@Xu
z_`-_c5$|a6NZZeAW%<bM=u*=9a??P0)Tr-&3Iy#}F1cDI;gwHxfFAgzmc&hii<7na
z1JT2y8vNS%1^+xH47r8BK{$4nFfGLWiUh=IDFO)wMF6wkJHkJ)=MIYq&l6<9!%@6g
zZzBb)t8-C_c$I;MOHSpS?Lu61sRJ=i`OC<><xpR%sg{f`T_q(`jS^))UY8?jCS5T4
zMHdk5!eAx<^yQSrYLk{PHrgoxjY~k60A1kJtDk`Un!wMZLQTHif}8=i!EiWk-%2B$
zA39r0$uP7k=Kj}IFxI%rT)o!*a;6q|{F#UI;d?awSgUwPwl|}6)pLnRE(drw9THrp
z=UsL|_OK*=)YW*yUl5=r8bXS$edvx;m@cGQWW!EBSr|&9QjVBPr^5a8Raa|3w9!(t
zXpre5O#{BYszN61UFhDxDVx)EarFLS*}`bvW9=Hppwv2md1Hc{VqWmg5J)TG&SEU;
z?uJE)VdM`tXcn@-ZJ5Nmva&*H4?8W4tf}1!qSKdtbII%afqARsd51}xQpp6w3KX#w
zY#@v}Rg~bVPk}VTnBB><HDJ4Ey;U??y9YFJqQeteDGHzJ_dw&rG#z<JY`$Ukf7WaC
z&gVGnr5d?f^qiHYu&OTcbBjve)szK&82j?s>NR838Qf7q35zqwos$D~5+@ALD<;gC
z=+kW&Raod%psb+oOenaSDw@@G>3QZn9^pZX%!KeMxDV+`74}(JCk$5;?~W4e)BgUk
zki#*kNFH#7QtA|YlR^c;2I_L;kG?>c*KjB3Bh#>dK$l+l=4HFx7~8_e#Kma+Ztp^w
z#zC`>_~NMGGExIx*MuD_E2Gwn=ffWwX-=D~=Qs?bGjp#wO2UnKolaTsLtSHr=Bn0W
zu7MxXL?3j}`9E~w3Z*c;(LJr>Q0Wt}T6{@2roh-8$*hXg7Fawd9!cXdc<<T;t?NZ6
z&ey44pEys2lb5xoDk6O`9X*YJC0_uQJ0)jDDH262K<(PjQS`EL8ey-nxf<IDc_Pf(
zyKkvHfe?i6e1}_W7?CcyP(4^chDfepH)RvCJHY8#Kbpas$U>dpKEZqZ)KO)wdBYTB
zU4togUngtFoJ3C)^>}xgmu6Z4*`DpGn%WmhL}j-XFlcUM<fUH6+W&)#W!RVb&vKI~
zKjf+?10f_z3E&8kix(Q{LIiq$cV!MB{xq0AJltN$8EJ&TMQ*pcUBtDtw8&e4xs)x!
zzm@Jxvzeay90*D?KJsz^!P(QjcYFEKC4o0Fp|vqmschz8MrAwgNLs(&xblc(CDX;(
z-t@cf+Lk}D4hP63!UjA@=d<9Ccjl?(-+k`{1u4;TTU}!o%sdgplmZQlqN6H|{)+qs
z=j?A(S77|*PrW2Vv3m1e%%`VA+k>n$miW~LwXATYq)47qeBc52y4~)lqH|c`Ty4N}
zc~H0IELhX6o<;5-XlUxlN1+Ek@R!suWu==Q`ZV?+$}QNL(L(?2v!NAq$fFAFJ(1IH
zASO*BtNa<j$P1Y8)V0N<=c){nEkp<4bkQW^U^Yl0BA{M_X3=kMl}DP8(Vw?R4|Bcj
zHP2?+O8C2bq07KAfX!ao6me1MfZ6NLDNeh~i?RC3LEMwh*Y^R)um`iut@ZPOsynIk
z@>m>Tlf1tBui-m~?XgQp-T@tC*xnE$8o80%1-L@BvcNI=j}b?WlyYKQw}z5m<G9QQ
zQ|s?nIl$Bkbw!ceURIlXqn3w1N}2jGVtz`ZWL9?R>H=ST!8xyjQfu)GO?vxBLqqI=
zfQD2d{=x2vorPhUhN`RSut$zGBqh{7F*-W!gM&egk4%sZ1vKh<<)9^JdHU^J(N;;`
zHMQM<ercP1GqsytCV5?*RT{;#SgF0&S)zyVQx!61k(4e!>Uw<g@3?c%)uHL`W^ONv
z*65ZU!9wMp6b>Jh*B;(dRs{!3-mPI#?=${Y4fPd$wd2P!8j!%Kqe@XQ<7LH1$NF_#
zom-j|T^TqR?;a6Qe(HJ;0a+`<JfuY19np)|ogkT1!+5jlzurSE&Di!1gCu=c%Bx_y
zN&#>_)67|ZGiq`$_hNJV3jbCg@SQ5hntl?#$;L4|?fD*5mJHhQ3-53$W_4bh_^<)y
zZmj*w1u#I=UX6(WSuV9LKhvg4J(M<7t0^U3)8uenr~@)e82{i>`DQa%M6r{jI%M7+
zJ?>BH)V%if3w0{DoiCI$h-IplA#e=GR(U?{d{|>`Eb@@v_;L8%LY-xuH2wBiW_VOc
z)#F&4Fl#3r9l?lixs8n!Bl`L>ZXU^p%QF*l2nT8F{=E~4Sst)sLZ_vyw!fbtvn<2c
zPa9~N?Ke}&TYnO#la?gqV{!;=Z2W#8f)O(l!v?S5;>#5%TMTaBuPSY6dsQDd%rTg*
z|20b9Gj=C)q#zSeDV-(@1a1lRTR_Ett*1glWvKR(Q7i(Pz8Arxm*m(XaWPcT47?GD
zg?@G*6(Buz`yyoH@44Qqp6W}mwQxtA)0$YWIUQFxjL?Fri`kk@`jZjk0U%6s<JK2)
zsRFAq-`WLPEq)2Z8-^6_jwa?45xj=oP{SZ_LQkm-pcL0**qly{{`C<sbF@Xs@KT?h
zZWr}VK2=Qdxr_U-cpr5I5*saSe14iOpNp~>-T!MoB7<aM2ow&-P1BI{LxQD}+(amt
z4aK72IG6c8O>(uU0<R^G<6Ry>i7Ss|gzy}XE)WZ&Kv!4_!^A3}67(&loDLA9It>6~
z)Nd#I`=NUl{$SZlM+qFzbTlx_T!N6l`k;zHM^<DSVCtj>MVGNUi!vu&M!TQy$TdIp
zir>Mn4u5PSBOG9mVH|-o(Y2~7z~sXgZIPFOe0>Fl^iH8DZoq8JNruD7K*_KjC%o{v
z*OV^nw?pwHphd-c(V}idW%Y!%{tH)?k*~Sa{-zVhQL3=<gAhqicI&8GuM0`WlkQ)r
zYCoVwP2{SZx2I?Oo~r$27m9{0n}Yrvw#g=Z1Vn9Cw>y$wfA}Mus5?vcf+ZzHA)Ph;
zV78KC#M2$oN2FofT+VGQ#B8{(R1hC1awvS5DnL+yn-j8G1e2XS0aV>pBfKu_ym6-<
zw@|-;m2sC=T-Y2SG_Je3vxirlVn<>lXOu}=_T-=KuiqBv{JDQ<=RUz&gGB*74$p*t
zR14Ka5pq|zJ2uSx<=I4(O5Q5c)HXu$-giJ1i{Gqy{xeEt$(Ov*4I7M|WtN)WpN@}x
z3g`AFs_^kDmf`j7p<J(Golm@_J0hfgqNLj@A1%sdga%YWe-&DV$$Xm_pp!^$QmnAe
z2}01w-8T_Xr<h@ErhA~#_s{Ml97jB=%SpwR7&mlBwIT}eewD5%W*nZB^O6(3C{&%r
zzqRw{gKEzfQ=-qrV$QtfTN?o8HB<?I_<%5WkO02IzUAZe@9-krmWuh?>d#z<Ncc7r
z=2&UUH2zt`OP|J2Arack^F%%EItu7v6v8PJT(|58w6s&`{CoXNk{@MGNvWZnpEnL0
z*kO?5senb`56|x<EOPxo9L|6U#*;ursiz=rR1DdB6Dzvx0aP`pkCM4ly!XZUE;z|_
zX4Ly@yOUcqE`@b(YuRgNo>La|qEpb<e(d(}UG|*Xm8P>Ke*gF$u6N9-C9s3=h(0*8
zn+2qh$=_8-ypUuWe()5L`H6HqJAKuh!g$<?Pn%%v;-H(6fDhHQ)gPn@WU5N@xCJ*9
zO^Rcm0D9(ni?Q;}KxZ(F+>MgzzsT0PH<=^U;qw9*;s6l1Mz2e9;(VGccVinSH<hQO
zCi6~25BJ1?*!3;S7HBkG5)u2y-Hy<vL2v<RQCXIJDqDlt^Y45&^4BkNRdW04-?ie>
zw}?LBKwx{FE4S<1I3R8wQsqV0ABs>JWxpCP=14y~gXvAdY&)TsyJ{_4sxio}A|Dn0
z%4t0%Zf<#Hm0_eCi5Kv3z61&@Ad42H#hDJsRO4s`E6?2ISG+r9A<)FYdEFi#(6vW>
zE{dalnki)}0!6V9pX!o)5`&#&RW{7?SH{!nN?oGjBWZ|J45W5~TysK&#qb-m;Nyb<
z{#D;n?g9c;)dAWjvy-gW&{=&24H0muex-09$>eKH3OY$-Saj2-!SiH;v7y&tCj!<q
zMI+=M+-b~!OO+bb5GEUNV^SD^WeVR;ZM@znW!#O>gjum_qoix5-xgMJmc?Gfu|qUh
zm1{CzU@w-&Yo0gXW&c*AOj|^>R?4$R_5GBI$>mcA`s_~iro?O;@X(g6Lx9dHyq16d
zW%>3f1P<<aHi(V}+Pj8DMfItc;71iMB3nXXJMU_f*}@33dLBG<=New`%1R`l_EBJX
zZGxU(T0=MU;L`?5ZH97`xWXW3<A|A=w=5M<C(7^wUkUh@(t!6#58r-BNYf#W%&pf0
zG-Q@qayzbamb@j1oshy_r;|2@k_AHLt@(#mHm}9C9>3}Tc^B@I`rcx4gpnmB2pjX3
z{5nJ+moPPXqfx9#1kf*TetW8UN^qm}8d2U-qBvTk!KbX!qtl<1grYU~H3$ebysF10
z<5g1BM1>=Ai8mg<OTHWdzrzi|fA)KUW#9GH&D@hEX1M#cgZOanf<>%eNXjG`rD8bj
zJf2Ypwcj&Q)+&iEXt%sbm;ZPBsU>;qpL8r9V{g)LKKZgtdY?b}*kL$Gg<{}%O#|C4
z&>ACSpI2=e+60P(I0gpEr#`LTK4$3kQ8+@l8pXz!<KAebcyf3!b2p}hQ&(=?c`TNu
z=W+lEC1;AehhBfamCE#2T<w_;$g4aIt*x_<fMv^?89sOvfRZ)4ETkx?@6z3Ek#C+6
z<T8THwat64Jd`^$cRuV{0*0JA#L)MAmu6aVz@>J(_&G`Z96hR6@8}Hh{3da63@JAn
z*Pql;ziu$tZI^L&k6fg-+R7{;x?zL(LPa&JZVfKVNukI$gd{$QmCI(9o35jY9=nuv
zGZMKTUB*4tU0$za$wngGe*aZ91_BO2r4H8zJSOs*2KQU$z6x9}O_|qPad&EM)#p3c
zB#o(Y$G!EYoyR!RC${Ey5`>}vn8#T%wjLtufPo6M-O)d5yiM@y0f|!u{;-K@YB}mL
z!cqZm^SkS7H@li@WBgpOchud_aMOSKz6w|uqZm0!+(V!<KmYp6;M*sWB~E1{(67S_
z-!;{?3?4_x>2pY)BAWb}G^{|PWo~V(M@PMIEVUkhsWoAOqxn^QhnrU=o34(T9GZzJ
zV&#kzn6wsvj>RVjt@&ES_!b`0=Htck&!jivj)NHRX$fP}g)5>NUxm<Hkbh(yi4jAg
z4t8XCp-yyrHSS&M-Gf~}ln$GT#3jDoP+0IFDOhOvm_lW(#S`vgusy9r+cEEs&GwQt
z1jL%^TN&UI=&pENp>SHyVe$ezZS4zBJ5%iGX|>n5mR@s&$3df*B|BX-&cTptuvGQ)
zilU~x?+=_-<PV&dp^7!e`!Alh%jk4N*=;7J#%ZfhfyXMC)7L~;y-4N{393J*V2ot;
zR{*44bUBGHlBYN_Eyn#@fXd;B7{UFbKmA02jL-2-n-=cAv&^uET63_Gkau@}+VX+Y
zRX!nA=Vn|-TX%qW48{-rc(%BM!*=RAsK1+TJ1nuBlK2K=oXRC1OkH;Da<V`{)ThTz
zR+l7L+nwJm6rirvd$$ZQxAMor>J@q&DuVQ$6s0hYPYVo)DBM@hb|c*JbTou#yCbP$
zBno^a968zi9n{nxAK_5Rz^R6B44UP8q$2WwlIlSK5ielj&;9ZTJ_`{x;?JeD_7otR
zXj_WT%|JwRkavfFAYit`h>x>{<znR2@N&wl3n#S-919-|WD;(Ooejnp*X|XWHg*qS
za_{$_#AAM#I-5S?Ij{X(lb7}d50ZQ_TLWLk&8Yw-uhv^1^e-sE_X0y%lX;>QsL>=-
zdgkEQzc94{YKbLt6|$h#CAJZ09P1!70n)_ZA-5HnUIc;re`->9{$DhyskgJDIf6u<
z?)zS!+He$)&NBF1j&e|5b6L6dHemgZ#eve}P`X32G7MjSfoRjd?V?ulUWFtfi6Z&L
zyjEJ1#uClw2|OKE-G8Tl4Iig9pcFb`TJZl#jara@plHx+J!y|dpa=m$t!dDL(G?HK
z0A)!;rM`a*Is6`_w$$K(*x&E=Q+S7YsJnA2*GsQXRS?t?XJUeqXPe1FvA_hIzwA$V
zdT}u~!mI0b8-&a*XZ1~3&|Ee-F3sXK*OSPNTJ5l7`mBVV-G)5gyzo-#vv1c-Htg`b
zNCK`L8LYlCM(8B5Qrlofhpt62biaumQ2`P}HOZI&yb3bAfM|M?+IKS6y=ZGH+1^m!
zJ0D^eo%iH*g4la1bn4JS74QM@2l7;`e4GDrqZUsrcK&j^3D8vjry8~WMUCoIgB24*
zDw;rR3Ln1mp3|n>xYVN6`f*X2&(j*?12;r0;>cOBfliJ+JPM=G8K*1;s;zEgT)3^x
zg4e=1l5U+#rhM@4{wU`Iq$!{S*M_pJ{xTMyc=oZ$C);r5_Rx-!&M#BwV*3i6{@9L|
zcK#ZI<q43jf=KYc%~q<(-6^PIFs9;^d60T9Hrk4XCo?8mguEzM9~r4Idbc!0lxa=n
ztbdd`MG*oXJBGWTkk)LsJp+@M`J_3<?jX{3?Yxf8+xAtbDP8<wtqM%%tGI%<@^!45
zn@#t>5Af+j*;k=F`i6nL*QsGGGC>@>wRVa_4!b9Ee>4`V(R8j{yQk~=7x79f+>NN7
zRtm?%8!la6W13;e*qqcN4b=?BC)?8HZ8pcE5htA#MPvDXT-$obJi)K|k34zW2ZzSv
zO%%4qN>7Bz{~{$iuh41LiXwK#5&7`S43MulVeAVB7y`|3-3m9L$>BQ!Qm!|}h!Q|E
z?)}oz8vzvHB32(ii&>!d@Y7R&G*u&2GLrGb5R{Sr1Oe3T)tr$}X-Vw|jjTc^x9|Pp
z{8$ek9-r<{rpN>munog_S}}V=E4vAFSihO$<Q8&(g>~t=c)$&xPAqf%w&gM95>?n-
z5qVjg34tU^5y$GUzc%1aOWVH{CyO^%B4AM=mojhe9cI(co3sd4@*2&yv24p`iyI7?
z)r(qN-}`QMuO+)>0mj5a9H3D=^Y=Q7jx}i{-c#m|4Q1(k5P;DJ&HaVZcA@@((M|xQ
zvx9Mf3&cM_TEgnnt4BZ$64wifaCtn@b-7Ya)<+4d!W~JMtAt5Sl0y!Wtk(=j5GQ>g
zdZa(lFMEf;ex+&ViSDz+Wk-pwk5`iG2XQgd*-6S%(i4pWu(aWR%d{Hhp0ep&6;xoj
z#aD_EN?GTz00w(DoRn>I(9s9}Ml9r#(Ay;z<3BHo`@UnsSPc-|Sd;rx9l)~wrto?i
z6O6`vSY1@54q=FaJWxta$yIzIVYl!{11}#%1T3}3{YR0i#i+c&CfCt|2tt-OB42)>
zgT3#rj&U?WFUQon^`@os8`TYzJx@4B;E9hn0XsQ$y{ndDO)4wdK=*)DIShyv*Vb|2
zI!w}ZW90?ZO?g+J^{ty*O$uGl1fehI#lR|#8KM{=@&~9JB!fTT2o9%GdF)9N3~l#y
zRkZHNvt`}+j`hq^Wb)vj6M1<YSPk9P0oT((B56LHki<8dg?n(F0!_Yld$BV?ldUeP
z&K^48kuyH<;|#NC@9tWzO)vL=3_QUYntuW@AV)QtCYi+r8WMgjJdH>Knt)B=HdB2H
zC(Wo)%Tpmd9*;7{7s|5MkHX~_e0_*1^ck7+H?tQ|!xzqm%l=cG*UJc9jbz;Be#Nn-
zI*}%-4I~DAe=}_Tvj@)=k<qY~8;4F+JiTuH8r^a2XrWH6QkSe_7?71*Yy*y@0p~DL
zgzastA0mLiQB}mkB7*+3Zd@=Q5(d%A+T=%w6EM=$R2YA0N1VTaX4U~FE2Ywm6|?8?
zb0C1Nnm!M)r8yJt(bfzIS&zSiH7tJk#X~f<-8S)!^%ExQF3vP&R{OdXjKEPp>e!k9
zbE-W0`~RQPR7h$f0(4SEQYcuIM7}DM8WyjEcQ%9M*r<*uR+=WHP)*P;SL9D&sw39e
z)&{Ks6Mc^??(DU&sBqm@+0EuFl=KgxEwU%b+!c4mF(~lx3GYB0b<4}kU@ioP%(iP&
z#H8PXTI&5$9xw<(+VAy@Zb1Grui?MXlLN!ZL>7)5DIVEsftIO$pd0Hax3sk9eor9E
zF`VgIs{a|z(-aG}@64CJRKwBLq*`Aj>FNv~hY;qxkBgL3N#GjRv5E!9Ah$Jr8EUim
zpn*La7{pZSZxbJ2YC_SlNo#X#52?9s;ll}4Q>2`IG`G)V|6;wWaUeV?d(sdcv8-4s
z^_x_wD-GLtffOtubuQAtYBFSRIFr6$o^&QicFFo!<f#QdTv7KJQ*>r#=2Cl@%16y^
zjd0GcG&qvXjUNzKftqi3kbfuHGWqCrpN-tSf^DrBB~t&E<t^G~x9TDK9ciJ8r%ybI
zi3#hwJt0+X-nTRr%?wU*267zVLAe(~*agyMvAf~yW+<xa*Kb77<@{_U6_CSdD$ElA
z-YsQ+C(WEGwir*{&~MIY=7Dr^!Q=l*x_|s&CYeALrT15Y8g(REVkEnFU4*!1i75Bq
z;AV&)yf0&y6qi-*YjYrv?gf7c%>oWvt$Slx4b}C<Y*wfGO+1AS0fE#EECbLH@u}E!
zk(HnR;HNbHq{zFVk2+HCf8|+M3sB<?fvu-yeE3Z?F1iBXRJUFc(eZwe+0ee-=z&WR
z6p%kNb*>AXMON$x&a7I$hO)p1f>v|oO+8etlI20D!y7cPx(Jm)&vfw86$JGMiw1C3
zBu6X9)~>vY=#Ch8Z%r_}c-q_86jP+R!o`C}fB)#m*<?@pI)SJUrzQNVcgC%z<*?pn
z&iXbiG3~kY_wk~31@W_mPGAt!-%XbLyYH78Y}KocMVeSKMy^g{;T4yvVDD*|j8=b&
zQt)n^UtS`+2&qY*zIySjj+|~B5xpY>zeta9GBunQYRx#!YQ?#mVPb<a>+df2nY_T-
zHVE9iUmQ7mA2)(Ge&k8$-T>$&Lhoz!*K$6W_63Ppb8OxeGtx>K{8Y~o<EXR4CSq`d
zB2d=}&H1c`pXWpa;;5p?)~(We?9jt`0F;l1*b~PU!*{%LCp-N_aY^hbP_N(<S$NK=
zU6O=0_upakF^KdNE|B&?LiwF=I1eTgjmC{4DOjsGzpNr44fB9Tl*uwyi;8##gZ}pb
ztPA=Huy0_CQQd>(rud$BK@6O_`sH$8k!4CMJm`;W)TnFPmXffc)RV`E_7graqWWlP
z({?_~8g6tHzHrsia)wN6ggmwJ<DvPB^_4VV_j-nYG&}P5qXTU~lqNl|JR}xcm(t&G
z^;<HUIUb(ZEd&U62Zojat7f*)mX_CE=V$$zMCTN7z~BRnmWs~^3e}hUVs=x0Y<~;-
z{8B<*d0vCw=xbw&uR|JJgcyu({3P0_E(!hU*M|eH{J8v$>`||a*%q?~0sld-tC)_k
zUXP70;+K1i>}>-(<X2TQz5|GKZ3&CpaHcIZVt(mFhTv6*!6-(a_Z*}X4XU8-YzoNT
z1E{;J8Xme7yFZ+_EDhSVO=!$SYiN<L%<u`YP(#z<jVa<d%afL_PB9)wyA{*^F8d3A
z5PQ{vNZ<-`s<#ZZ;CwLJi2m*kE$>0Fl>J7sXuhUrI&aZ1!V~W+$A4#)?UDVoD`N{6
zr&d-Jj^saSytf1<l(c5olaD5RL(l4$%2HO&22BnUAAI(eARwMLz4?dYX`(rl0?a<^
zHE#8CW#KX#7RV*PLBi=i?6%Y*7)l0&dgp^QxkEo+{Z*Fy`@a4Mo9_7HiQV4WQEYPD
zEduJQla+dngTuq&@8`bSMg=A^%uhf4Uc!`lx1SFrQt749`-i+=Yj1-wl_z=a-E24w
zY?Qyh5k~{RjwTU`)$_T#$w>NLy@>J;DJI1KdUyCB;S5%$z<!_Y8QZn?M{GPiY(!+U
zSA^A-2KOzJrof$_Sf*7){ZxiUI3V&>{|w9i$Ivlr<o+yY!;E1Qrk-`Wbj8b)6F3<y
z1gcsKy&qxbs*JQI|Khy<@WuWIMh=|M7(@7Ri@l?gj`7uPco5~af)%N^7$s<$ErgK=
z=lJ>xpP!w@&i(rJYl;#hP#ZW$FOiD=^>ZT@*aAx8Z0g1jCwmRf&1tRvK0QUh^`r=?
zAOIv`L<b9XaOMLsUAn6OZ0-HuANUW!?&npYKOHH)TlajDM95p-=b?rN4|W*trpDh`
z$`5GeNliuTizdki#3fWGWKm(^j`_>Y&T6n^qsc}Ml!S@K;iJs$H~I$uegysFD*pAB
zorsWR5n+k&HB8?CSW+~8NKEhtaKNw!oO5cDsHEO^JupjzVdriF;^K@?XnC7o!YCm>
zuC`JIRBp#pNTJGRaMu(T5dH%=|LbJy@2?XbkoHp4<``Vv0;D(~D8=-@I($0;WP32V
zgz&lk8aj=@uS|b3A4yT^Q?X|<cRE=W!2d8Bi0-U<t1UZj@@#j)yPi+metN-7nyHN3
z7Kn)s={F$~8>K2Cj1i~|1A&7bYnpqVmq)6g(ky#I=_HCmnHvZq72a#px)NH`x3IH2
ziCZ>!v)%3S&^<PyxMb(D>(cIZ@~27p?_cvj#=s<!)H{=jIv_Lrq;*<8>Nx-oZSSN5
zcc~Q@$Ps6pK3Qq8yWq#fK`1(397^GFq)x2>{(`l{qj$R{8{T}8;JxHw@I*H9-`gL2
zTPR|NR+u{%p6>7NR6pOSAR-~<Z}mqbSsoWxmJMYK2?1<H+E@K1(RnxJlO@E|*e{Og
zKO<$Td&n}n#MqIdc5?j+lL24rG|&QYC8HQDq8qv98RWg@nwj-<kzGMEI?SwcAI7sc
ztjj}Z1mZGrB3OQ>U7hJe(@gV=q)oj{+Yf*Nij`{Nftp>E#mL<(IZABkR-f`lx1r{K
z#=1N7XJq~8(tJ){KG?A&N3hQz)$_y##kQSRU6Dem;mYD*q24muUxVn6X~GW|&kr|g
zpgTp3fq{)J4)Dx~jb{neHKUwwv&X7&H`;GW*65iCg!89!*-j0Wwu12UC`fBb0fLk&
z0U#(9FY%{MX3J(l_Lk(hzxea*)0u6ce>_8L{TS&F_$YK2+>q5Q#qMg9FZ3cGPGaAq
zUSsR;jY^TkoMB&F<}5N?0~D(OL15v0*VPlOX+21`0T|H0*29`IuNpxXU6P_aJeQM`
zg5Q?#KET5l*vwU_S(A{^t1b3V4l5+xW)eYJ4pZU4pAoejF9qx^-(IK}$?q35Lx22p
z3;Op|SS`FBL|wa1Q?602$zk(@v6K$x-HVJCg_Jue*r@!_6r$03+M+22s3w8=iFuv0
zWAxJB8FJfeq5iDzZuV_#d<%5r$)u6N!hTFZIs<Mx8B-+GT`@5+=O!W~|4xFA@8ZS+
zZcikBo$t5P6Yu5*6{z^9hlX4vSBo+HlC9*Rv2>$y(;pn|ma8SLVAD8GV9|&aZRRSY
z>!wM--qC4X){GZ`e>pa-(Nk!QO(t~%keG5f%}Xx?C7p07VZ5dQz5)46F0uF3-ZO=c
zVPv%#e|+>=_5{rSH>K4-UH)F+{Be2X;2@bfVuQ$Nb;0lex*F+n1RqBMSxH9)G^7>+
z&4N=ir5#q3*derS#&3JZGWig8&#0%QeH4RYi@ok$IBXZ4+@BtJDvdfso=PuDRSV<7
zFM?66dI8xrDSX9(=rBDsq};4grLv^%N+I3?Ik=B&P|Bb@h44rDgQpV-G@B*Yt-V<E
zbdlHhuTjN{nQ8p|wF9lE82xcK@TYi`f;)YnKQ0~ql56tKrM24L;8uSEyOyHsKHGKt
zUrX;l<~`CNikQ62wvLDMVTYR;)}k8E!^%clOT}q9_b<r!jJ3d1L;+L7+uOT<1_k~1
z1q02PGxg6<xplE}gBG+>AjTpvC<aqWNl7HhIS<eW4-|a6bKhQdyz{(uqZjzaqOjx~
znFZ`NCOQ}AiYZ5*I_0LjRj&@C!zOfp)Rf47L92u)XP(&h_+gQF=kPl)=#V+A^(lob
zXe}?M?t1@6!0vDCcsFIPqh*2H>&x2?m*f`42fyR6Z(`RZ>GgZ23=i6jeK`in^A5+0
z&Vcv0Xl1lJ;c9Ao80d#}!By;y=)`&qTzf0E4Rn7v0W!JL#62q=sq+>@xs-T(1#Y5!
zDbb%^mwOlz5(cCZ0r?IWKbZWvi2KNz!t=+`zA`mMCNf2AT|97yg;xGPR=A*7k9k>K
z=?L&2F^QhxLq)6{FS#ClWDvv$7-q>c&Qcebk3eRbXSMqLIut?H^)7FuqjOaBUz2}l
zc;G8+sr4;gyC9sotNamQCH>QmP9L*N$wd_LAlT0KX3|A{Vy>iwwwY=*I8!H|XVFk~
zM`@Bk2WS9kK+>}kzuKSX>uYUt*v`8Sv?C7LFCrB&G>>HUk*5JVSJ9XgKZh!03$}6a
zh<mriA6K8kr)vNW52MR!;QJ#elT|BQQLDO`H)m<2$wf!sWZ45d7^$MO9_3U-TNt#c
z*_(>S793k2PkFBN@I>UU!(qCx<V5#T?9lGY>_y59rXn;hNKhw#Z#A0F!qgTQ8eW}G
z#uOIs>vE(f(b>|ct(HP_UJU1Q3Yi@95Y(SnfS&KwNC>{|VFzWs6<B6Q@)-KkzF@7n
zJ4b7#i{(~o4)U9rU?Jc##U{d{e*ZakJf7xl+gvS7+ueKAw2pNp5%Qg4pfb51-pkkO
zIQQ|+ZHU=v^Ic#=39QUwj<>-9Irt$Ao9@GGAAn+6|EQ|lpV?<WCzeU)V#2w8BWZMb
z8$qx2^<AP69j5Qvj8TysR^Pxt-MQ2&f?#iN^Zk}8IF)u!H?t!UxP$tUMd!Ux79R=K
zaQ9lGYfawe(|x7%$@BZm6nn7wl8a8VH>TZG1xy?C{eo4gb}m24>+{U8_fnQM8G?==
zCY|OC*+fPeiZ3WdBtB`POO0@$_WX2*Z%E<ypNy^w0UFramde6dYC=)B-4qArc$sP!
z9gKoJS@m9{d?MLP2=_vkH{F2O;}_v0w;Q4@w#5`_SHikmi9tCv3i@m4f-vf55jK~n
zl9nOS-S3}8Ku@>0Fz`Np?zi5XpXpVW^|G-~s)5lOvYFc>H3<miIi|Q>KiV5`u3@KK
zVi43du!g!y5mk^1jz_np^tv8Z2YmJE|Ej6=quoHyy;ujU+$nK=1P|=q5xHCe>9`#E
z`tA0kv;NIv4-(<8VX`$ZG0xS`2Amsl6c12QfP)v6gopgWY&G#KBqE4b*mem_t#2m3
zd9=JP&tq9F-oe`6fSt1W-T5-aB(5O6!x-auu}vzgr)5kJ<zV_Wca19DlAOAgC-bj4
z=o1y>{POX7S3sI76t<jf*tJ*1I4U8xurjsv+}BJ`X5kjn3Q<wfy^PO3T)NfkZJ4re
zfagTbfvK>t?`79x*{ROM7~hF@Mt^^^L^x=W<7VWI{=9=g$n^ygpG(N~uZzY09iT|9
zy3*`y4P>l2c!jvsSZAuBk_a;1mm9rpJ0D_Duhiu{6R8bk^#}_owjyUBlZ1b(<_W_b
zFAFsi+uZ#|Fo6;@WK3s7<^x-UWU>rBlbWuy*MF>Kt$2z8X%9n}%1$H!k3wHxmn-jd
z+Hs16R&v(M;%||_wBWtTg|m`8=0DK<e8VH)`JTKr%D`PXdt6AyovFfOv-SD%6EANw
z;`VQr<LaBe{SIAx@brf%k<!qj#Rn-CPX@8CYSS_%;F^wX%G;SH+a(v}s_{Fkc!+^q
zAo*kRTIh*#^zd~1c~EWceW5Q$I-i~2fj`Tw90Lupyg#W7uqG1)q!6=X6fD4r*WF`u
zlP<w8466@;MEv4JyguSaXh+Pry1HK|;e9=iSGTZuX&-t-gmd1Zzhk79Uq?35V-Lay
z)TdVkQQys?l?3DG%fAM^64T+XAYpTY=CoN9{}Ftl)vFc4Zb`18d5q`wL*9y<)u-Ka
zkq0LPEos6@qy-P?CD3dB5LBi~ym9G1{KHm8^4;i@7piSESAb;j%bL+!p9J$$*V^j3
zaT<>o{Wj=li{a^Psb$rw6I-`<oY}6r)%<d^mtGXYuesIi-%}yZR__<ONrXBjZE3V@
zoO$jZ#Kki($ECH-3P%cTL+>%?f)yYEELGa$8fJP~$a{Lk`sy2{1vfDEDPG2YRwx>i
zRCiBhPLum_nMRuICl_SJa7z@&PI-~_t$+YS7A4pFZ@88E4cg7GCbAv5T0c!1ad`f;
zvW*9g7)AH;hg(_#ZIRgI4;p=!Dm@ELU6T%DrU>$<8QCBbQBpD!I2ij!ECEj|>dG?=
z+t~xo%h_ZjmRKs4&F4SKB|~UvVPhaZM@OH&f~&iG<b;@bvkmVgT6Qdhhk~o0w=6HP
z9^c#YtOh<1>i`P>_o7XewHvx`1FpASq^2P^+%RcIK&MZGVUA2apx-zSsNjX8N&^C*
z1{z{5Dsbm8@bG8{*)?EKx^HMhT)P3?-!O}GO9D0BBABHRC8-*E26|D)s4^^XGaqgG
ztqt=;Vaqt!k^a@@uum8MIT4BCbPztdbj3lp(T}w!2`jskxdCP)_r%%KElWow?O1Ic
z_JTY@{4MG^^#IZuC&w@Hl8eik$r_+?iV-@Mz7ntc`xyg7ep9ZE9w>f?OT1fjODyQ0
ztvseRU>`Kw6+%)XO`5=4L>G8KthP|w4i;tX7WH>koA+x2-&6&um#RvXA3_Y~OIILn
zKUxhJp*a0qhtO^EWbLYen`1TEypD6Krq2jLm@s`68YJ^tobc<R?@f<$ZZ;`*`|ZaN
zuF0~mCQ~Oud#`0u3S{CX;~ef?PI4YST&KR~RB~8#Y7zJq4n>ggrJ)AF4tER+$*T|6
zM#%QtA0!Me@<8hcQGsSjYYcIpE_Oz;B={OW=55P8<wX%K((FT`-*9@iKs=r;$@5m*
z;U2Hli<w^b6r2TCz0rnN0&Gi=SmIBHt?Cptl2LfFoh0*S$UaYJ9;KsK=fgWE1QY19
zTgcOF(#26vp#6cZ!|s)%3^(tbZMfQ3%y?#!kvRcm_q3nK6=g<p$4O5tfY3mH8Tv6n
zAwc-LR@0*&dN2DZ!cPAt^aO9+t=y>UtLK=1gKeInfKbw+U&{T?*jpd$kaCimOd$#m
zX%YC%Ahc`79g7j8&ryQEET)9@>Rh}sUR!YUy`9&4)2>aAoHKhDcXK_O0|B<!X1i_i
zw<H=re|FNXq!%LjYmMud5F#A-84XAj<Fc|@sHJk=p9*?EQ$i**RBqD;Yv=9<38@by
z;yARnmfh@fEDKDv1@2b|)(iha<|jS`3sVf!vM2?<F!R*i_fc8BWq?@ONgz;R|2#DM
zx3(M|>u*P38$=KaQ(Gn$j5>9N0sh8@SO_ujYo&z~Qeie8GioPMPWD?G?oR^U<YCE^
zo6pir4BVfxzg;0JfT#mb5=SMo+c#w11|n=g$2Oex8ic}2XH!!Nlqij6s5ki*qOn+#
z>EXBs_$#hXh6Qw{(aGPhzKJ&|%4|7H`SONOtW@p$SYktES~xYBPS(-?&2)0NxXNIv
z%}&(-y#kTIRB_Rj(OsNUdxUDf&EgKy0rq3_G5PET>n&pd0uG2dCRePTDn>j;znf%H
zX)~x@a|ITJ6~K=l{cOy|;Q$^KpByfap&Uyn1yM6*t5Q)xK#U@{$)~f*Nt$4C*&Zk@
z7Hk<*q#Rl17mXH%4rDZ4>`xmCTuNXu5fXbRBrzG$Egjyw*&VE}DcZcA<5Z4OF=)BU
z*`iUDo#tc&78{1O@@dZGf}$yhr9@a5{dxF1{E-Ch68p|OM#?AONuZ&FFwuE#!e#VB
z&D)xt;VIMZc%js0o+bko<&SBc?v#WSYi}kcJiav=zX=RFw-YsEP(CW+y;-VaYR&_H
zYi&hT3E#2cv@DUFtJKqb(!oZ@5CFuoak4Q6cTTB$dC$P`6<*$OCo^bqnv!1=Ztz}y
zq$oXZRQ&LjRVjvylp(^XMt|mtyWIZwtvxK3lcbR3SOgKrV}kLB8J1QA#LiD(VfTLg
zj>dn0mu{qX&JI4N#k}uFd)saw5;?Jvh=~KQO&{}OvNAtZo6voraWewSJe^wc^pYKC
zNWHG*?w4;vO~CfZK7x+}LoSKKhwe)eb(ZVj)Zn^=2&uL<gK!SS>^FO}{YAK!?c^k|
znGPH`oaUX9<_9)xL<@}2B$0rDh+dFT3Vt|<T~ia$-DpIz8v&>Eg0yCa7j7TuVf?{S
z1DISyfjy8!?Sr&It|-j@1)_cHTK9W#1aOD3D*V~`dEVPKPqoZEQ&S>@N>@OqKK~Jk
z0a?#$3h|o>sY_B93iF=C9-F5qC*8IP#7djBUKQrlLd%3hf!n>E^7cuzY7f4@JUXRj
zTCx%ObJ&7)$0z8HYA=)ISnbZwCv@zgK{szlTRAY1>~A_CYdBS6)N5p_+}-FLo7HFX
z@`@!IUSC&oj;Mc;>?YCNf50!))Li=lqh8CO)oM!JiHdMc22XsW+YJ|E=&*B1d86e}
zm?7k9n8u!~$e4x`T4)DV5MqznMUD%3F2%ZAhU_xSsJ192sUhh6hBf-MCXWyn$gtGJ
zRGaWt^#OS0c#DsF@oWO>k4sGL*uv|<MfUk$=odCam?^_pYPmOz#Z7)9GTw)LuLO?H
z*Qt8b3}P_{plN1VD0n?7^`8o{EL72N2-w2T_gxj2^9QmCzo+i*?$wwr7J@w+n?Ra=
zpp!Idz7#F|QB{qsUT)s|2krnFQ~l_66kyDRXbYG`-r+zvZVzdAIVuLRx*jjr%Ox=}
zb6NY5uyVSV=1(O>qBGaKJM!zH@bbOw)fmIkE_>oCF;ePLE<F4Dyy<f+`l|)#X?|&7
z6UBikXY$IHhN|x>RTd5b8j_xkO*Kxd<YHefUXKV}&wY}C0WXyGry8K?X#nCy{n5UL
z^~NFmpUTcUDvmXa_6flW?gWB61P>bA-5Mvj2Mg{J2=4Cg?(P~Kg1fuB^NKrj@4I)_
z%v<a6C###Ls;j>G&N;um_d3t*zS4;(MV?mDx1~l<>8RB+FgsTkswVEIB^6hY>`~}s
zxRxoQT!U4(Wr@bz_L?oRa_q{xtQs5erYoNGZr{IZB)=*?7HeS2lSTrU{_12bck&Qp
zqt*@D^bl_1v*X9r!GSKJ5-p`MA<3}28Mndqz&#q25PtsxqWD%zIg)gRuKMa>>^OK>
zcHn(l0ro42HB3q#hEwQxxoSqX>0+Eo*IPk;zE6<5z)@0!ro8+DUyx^R_o7P?dJ_pl
zON{i?AZxQ_+8i{tjf~pzHCjodK)y`X1a<GChxJe#FfhiTlxJ(z{O;sLQ;tcaA?Pub
zAQIQ3jHM2SoBk_{T%PZc_Wr`Mz-u-WWTrE!#cxV+AAo-aAU?)C;kEk`#mq*j_*cOj
za4{tzkgx~t?Prhe0Uq-HRij}{@g&z*4Z82?MLv+)82;vZ*{!(S@L>pRvA$hY*hF&`
zT%#lNa^}HpqOwub<2KrXbot{>*Wx+r@bdk$W^jx^_S{ATPuvIG_>^SZmpoC3&%irP
z0pl>7yX^D5uv_z)Afm$bcx{pf?ZR8p+iCCJ02*U)N-0|7fV}{!%^sJ4^P(I&zeY6c
zpBDh=Az}~5r%HMswnjC)1OVU-575FlJZS{pKbvEeQB>Ih0DR4IC**1XLBmmW$1+J2
zzr%%{M()+EnE4O4;!ttJf4LPmf6H^%K3gOkMg@KHsI5*cD_uZL3lMtr&_#ZUytZ<|
zBEtqrTMpz-tlRk5=#q}zR*ICH#p+(^%`Yz#2l*9KeKs1ru0~Jenr+1Mrh@<#DTdZi
zNp?ER8Q3__`vtTX6YD7JnuKW)h}>@nHs40<PiJ8sp>tmF0o@<jaUvm6b6#szq)b55
z5us)H+=ZxIZ9;b5IfFSwQej5uDoja>7GLBoxI35C<ok<ofTWh~;xQi+Qd>u&(val~
zC!537K8w043aQkWccI)oBifM^nAv9C=z7{_c~Z9y-q2q^FK6~uRLc~wv8s!ub)2&b
zue|;1D^gb9Oy}tPD^g@th<9}aFA4&ghUawrH-+gt;&{CM0CF}_9*mMJL{#4BzHLqD
z4L95-SpLgyl=Z-H#z<YZJogRc=`>|GL5}LO;LLk}TQ?Ww9ubZftc`mc=np0C!8=O~
z$7~O)p~?xJ_wPgCj3B_L``aa|uk-ghN-6BQFNaYtBwQqqHjxu$ABd$!4p)=$z)@V4
zNq;8SUxu3kzSJz}fCK~MX9AHZjlc7(rHG8KTJG)}$tn%X)KtSfcUH^g%0YaYTuJP$
zY-n<Kh62}R)azj+A(i^d(d+3PvPETI@q^K*wz|6bp`E+Jyz;?T0anW;`~2jr1kHe)
z=f0tFcM?VSTi1mTQo0?=^CFs@>W>t9BA<~|8DOd__W>1-!x^U)fsay|CV5JifP%?t
zx+M&mvM($~aDk(D9_PiQwjXwXi%YIi_w28xaRk<g<IvZ;28%&-x1JMta?+BXo?u1=
zQ~_=EaiIQ4{a)HVk$SD$B+cFTr@Ku(Cs-hOrO>+ekwH*6hxNLTux`g3XL8elhr-(E
zfD-#3Bz8&C<*g2@IW%)AZ!o2oa4d@Y6IT&{Vr%^i#kRCK`YJG05Gr=}vG{&<KP!cU
zzSJW2zy{Kbt5cHReE(%UEu${~VZ~_g623}FQR50|%icXuI_sS?i0S5_B+8zqv7B^u
zW-9~+7U3MZ%8lBpVR;!ml&N>4GNQQl3Z`d-1l6UD<roh$c3(I)d;f@b9p9$f85J>E
zC@HdG6Bg$5p2_PW*N_zfOJ;MLC@rMFa}+kC>e1)OPe$4v)-!j{vJ{+?S!p&oA{I-N
z!B;W}$53ZK6o>AZ0hfFXg_dL^90Lz5+Xd-|*fpR?=q<ru*EzgjHG)~+0*RW+Vz<#?
zOL0WZP{>l3$~T}~-PV67`C1X3`*L2D+u7`VrKV?Jbldil0E#Y=?q%vo*by;l;BtSQ
z-F_<a$UX0^d`NB4({2`Y8DxKbMg>%aQKic2?G!S|K1uo$-{+^s4aS)#ZITH#g--7w
zsBkz-CI6KuCkhMBOViPY-W`hqEeSQ{^o1{*x#D#B^m@TkJzOOpPB0F|jonzO!2XgG
zrLcMb3m$&SBqz)WrHz0O$jK)r|5-aFi#+S}815~@PxtPtI20+kgnoI4fDgEQ`tT;&
zL`>V@E9u`+I|~-HjP?|1d}3+Airjn;(WdK2q)g<(&ke1mg9@ADoRq0~Z;sY~S0B|U
z$hA`1OF!C<z})M)KmLN-7%N6-k`|%k4ksgznodyU1f>$O4}&L_Sz;%=m&${G`vHXE
z<WnGX`uq;V<SYaY#Ybv;h)lz9=#jQ}KR8Np+*nI;R#VEdC<JzO*HP=#T@};Spoc7Q
z*LyDh912z4J-JKT)szt)Arw1oVjN*7qo?-UU0{7-4VzYO@SLjK*oY>^j$*fefOsGB
ztLJc8(rh<KrFZ&g(dZl}WFT)h0tr>|Jy?@VO;NUZ)y}P92y3<p;rTwE)Q7=B1}onU
zbG;?1<Dm<M>hig;IRK6Yf#&7z_&dWqyo~uloCR>RoREz~jK-GiMrrs)^bFSw8GR!l
zJ?+Cf>J6+Hd0ht(v}@1W)@SxWPVEF->kaO|T+D>QPb=h1<oSMxw@tr+sU~-3qKZ~f
z;)14z!!{OKd*Y*;-9iG#0&n_w;LtUVDlg2VytcOXeTFyscb#v2E5hyW<RAcTu+Y+l
z>p3%um$08nzq=t~2zYMP8`vn_1D-r{{T%@={g|YCUFT#m-3_{V{77o}F#Oc(jdR^2
z7+zD-NGciL?TPc11n2{X(;D9)y|=fta?X8+q-V;4G$B`TFvW%LkE1>ATu#yx)afQR
zj6zLLW`D=2dy^C~v&EmgV+is<39F)=c`SWX*SHwQ*`%%g==&b~v$s9?Q8akFQ%1(r
z#c%Ejr&OUeM`3zZ-33QcQDX{ttjiFH!B8=qp?Vl*>xnQ7+Pk_J*<Q;)O_tUVT$03;
zyf|(w+Tp=^L{H^MP#9am$oOjy5MUxJ0)Amg>NQ`(qwK$-Vvz~faL&FqYo`)xzDM{m
z-hV%>P%JS;SACg1L!~4bi^S^Qe41I2*j<V(sY&@@V0gCTXFe}mn#^uct@YxigmCQz
z0_r6_l9fy8W^y+k)#Ld5{m&mYeRC?7eS#M_A$z**+rrIeN+pWX6Ci5#xV0{`)H$Z~
z^*sDSu!NWlpG`Arz>hu$vmT?0o~`$U^i<d5{0K?<JU(xCuw~ymFNO*6TGuF1cRKG^
z?_uP|y!A>lK8rM{bdXA7t|Sl)(X4fNpG>=Rc(L)Gte2bYa<;+reejdLU9;B8s6ot5
z_uwI>)^(lp*HAo8=@o>J;y_ZSwcT&~nVnB6^KN{}e{DfU`N5;7;F!z6-n}DTdpDd9
zOw1w}IR$Sn6G3}f4sZPu(uqn=N8ZbuL^&cVWzzj%{<3EWn5TA%7=}wi>pAd|_I@u6
zW5cJK7W6~Jk8Q2>{_%s7f<hF%YL^)0YHRhk#K{l1K;-%nz+`M381~h0$g8cAR;WDD
z5q{e5PPo`Sidoq!e0jRz$)MV?wXXYwh4GP(G_X4aPZF;0TcaeLfW?H3R~)Su%o>#Y
z+-}i)LqB!uW=zF1Fp(+v)h+9N4U(KV3t7CZYIE|^u#|*`NMXL)@y6EfzAaQ6Z%#WR
z2v-bu=AJWlvWya*I^Bw3{%(*h8Fs|80)|bwn{?i(IN`d{o+o>gnl|uDPzyt{Ax@c)
z!|nb(I<1;uqUzo#=Lg7u$pQ)1j`NckP&)%bwGVwn3W~Xo?%r(1m#dSRnaqF@%_fOV
z_y8*n&2rwidu^h3XQnqgAMTyCJ%Si(iOd)5$_q>|>fPZ1kZe>5**g|(o>dwGNSn?8
zl7fs4JV6hkDWnnJg2q|tX{<h!#Ql6ZTS(>ZEa*s|x18si4XCf4A0^~X%Nqd1d9lF;
z86)OZ+pUTSev<osoaf_xCA7!<1DskLA+N+wh2F_^35lt~7?bte3N;R}vksIXl|yKi
z+G0A|M4rA(;M$yJf+XPhz+zGwAvad-MLA(|W&n-jXmwmHxrg9)G{bx}X897TN#f;?
zKli9xv<77P4Lr!P#|vso#61=uhxVF%v3~@tfX`BepLIpLhsNjqstg}9BQkowhxVp8
zxt|u>?M(|<B);J<jCV{;<8l&@80Us4&l=JS+WzIjQu_>ie(k`5`pDc)AGYM>ldbI`
z4y#+-M{dRk#Ae&QN?ZrmgrUfuZ0o>#_0|QA#C)Q|L#*gBMXAWl*P%u%?XnOkkw)c~
z9R4GR#<CI6RU4bwK*eHl#vOj{y428v%If^;OHp#0>8uo=KuuI{64lFWF(g`Kn4Izf
zmv)CHc9;I^0JV~n<~80ZDYW9>>U5zuiQ?AC>;$EcPfslVyktO!ULr`K3eJqgmA4m4
z*dSB|n9%?gcw{W%9^hA0QC`~N{JXx@biTU4(Wq`Q8ooR6yeS7n0cNaTQuf-Qsve|e
zorHykMmp$$E`gp-al~}bzj&vq=nCzZR_23IpYJt|Rf_FVE0}Y@(4n^3Ikm8<K5^Nx
ztke)cp+ZberoTwgVs))-tXAZm_!C2vniN{V3~pY%4ZzWrqg0IZG&+K-Jyb|dl|K1x
zYirho5&P%#t|xz$Kd2>>Oc_|z+621tb~NggpAJ<6VfAH-%3@99hQ!St?$yFo`elIz
zXCjYL?V<@HNx(!i*5lEPVxB#%stCu~Sd(~pd)gN>4*1=d91TyedUjWm<nnm%03bui
zI1t-leljgzLBxYyr-Q+HwnG3M1+K{n9_KVhlLTWwnZcZ@#{9P$ikN97eXT*Ta+y+$
zJE~i+{gE?(Hgm^+E>&#^=C$g;MNZ_SALX(klb5apASE(mK?BUFcsbK4*Qi*!Cy7v~
z-qpxk9d;xXDlr<34XBcp-;*982FUm<y7}E1{sa&eZ+z$J{PAABg2}j5GA)t5U>BBg
zW^`T$zwIZ}NSa{mzS>wu;lVs#?r;OExOyiq70keFb4vW)8)}vs1#a8d<B^+M7zNHQ
zmf~0n4x(Zve@)$csGtAEpH9IT--AF+gLH(8C&qV_E<CiJ=d9=OHXsV{9d>b^TNkp9
zRM~C&qNjbparEy6_}-m^!=AnglCbbOT8ksTx{w+71bRX+ph_=2wJt6*jT3|)I?q0s
z2IGd|*A*X^_jvh(#H~V|W_t^mI*RE6Qs{2PV{7%y`;FbjRbzIe3c<81n^x1A=^87X
zKk2elA_7m%Hy>C`v+rU%p)|7r0$G9rA^!7w#$&YIg98a}Zti(YDt{6rI)XGDX5;h@
z!^vW>Umze3u0dKZVeBh|4xVC*vt5k7fto++)xk_$EV9Z5@97!R)}<i!w5l+l3xFa2
zuI?y520E?NroO&#p^OHSfrP!4l!PNVs=utzj;8t<?eTEb4#E<uQ*fgD`3V|PB+6~p
z0tOK&&+kzO5(#5SfLlQH-B5l6I!7~#(~h`|-^fayghOhiR)=IXvBEwZ9eR+Xv1xwE
z^27B9UcgB__opT6tLCFebvfaET$x5hA}GE;JqK+jb~m1eSUM$k+i8{$A#@^Y!y9}P
zq8e)iR^7sQdlPvc<g{)jTz1+;;-Y5k;5FoJsFcC)Tg@Qnq+xA~NrTs-wAg1fni@5`
zAp(yhTHkhvtc?KwAz$K$6?lU|^;BJ6YWKj#?uE@pFT9xkT3=JW1A~+qO~t*LCFhxw
zJ8n<+GIs-2T2t^_ZY=G0u=&p$q!>6w3?@E}updMYtY1Ii)5z$bMGnblFj<QBMA(y|
zSxT!8Z-`1byZuQ*OH0e5V^1XSSY&RLj$oNPwAuk<QBT9zd0x1!LpKrSsdO$;2LFlr
zPLa*eogfKGZx%#uSplXGPd>U}(?+4ScnVL~+2p>$7^te(!IDHf*2-g=vv1yzABYL^
zDaQ7TZ(5M4*)Slhp6$JntT3H1Cur-wIUG;nKAI9Rwc-8UF89_Yl_@VTtB0-a1F@%2
z`FF^@egnV+Mw7$OHaoa!(?D|3AbYVYZS4KV-Q1VHP?vwJ?b@M%;~C5B?9(#V_+S96
zf@s*-lmQ>((W%z^<LMaI$B>j0Rqn4#1K~@7L|CGlj)7QO>cxWirL)}&(l{%5B-Lr+
zB#p6EcY3f-yxIc11g}%J8pj*FLX`?Ir@$jIV&Bh$Y-{DX+;XQ7tw&HNgR$kJg$wB!
zT_ya~hJ(FV2yq)=$3g8t0v6238D308r(mVfg##|_HpU$`Y8@6?-4V&?s0F9(qV=C}
z6TvvLr$;f1*|aR+&6@9dx(8?T#aO4y1Q?O?6vj|1OUt9cr59_panC<ViVdWGX_|cV
zBMFMl1qvJLh>C}&O|Wki4@aM95KlPZVV4<9#usPr`5oc;s0xfC9TdVYIXQgt?*~kV
z?GW0JKX{sE15epmMcU^W{CJ9@se;AC@#Z$IHMw}m!>m`o(u4gQusHU7!<?9Y1ilXI
zA?$@nb=xIw+F|j7p1hf8aU6>@Wi}i#bUsR6Z)i4e6V2#%=O#1GxEo-BJji!PyvsN|
zulxB<efGECcbE9&HP!9v&^793Zy}&>Wn}@s!f2%uthrFGptB>5=i@;*h==m=i?hC_
z7%pXb-8KvvLb&{_$!uoV^s-!sTO_VqD!VgY?Ku-!t?U}JGEw_Q74`UL<G*KsSYFXV
zZ=f^(NDziTL8NEuF5R&@4_$is#x5iCjXB*K9RovHPEKy34gC>XZ-?);&ih50&9u(I
zK7RJ8I<F<0o)$Q7sS#qET$1{vjH`>df38>mfc1c1vIX-3mqu>OHr_E6=6|6a|AM!)
z!BH>)A7vCwON)>{yKMjE_3dKdk+cyIeWjh>qW|i~{g>ByB8Nkh=n(~p`2Rotm?ttl
zarn0Y8rw6E7bX*f3d2~ZcDDa*(A*vr$XmGSz7{w{bRQ-KAN8PZ{pV2i&-3~>Lbe?B
ztr1#W<d+CvGtA@4Q;$nzoxipne>>{G-svFxW<VlTyz(=x?WHao&;L51z?H^3Ak<FF
zTq*zQ5yrtl&LLI4{j90d%ejY1p_Rr2rIevG;eQ^pmmsfaK(XK(c7~)kUM%hx==W|b
zcFy;s9+i8{bZvr1)Z6KFW?TCF)C^F>$n&N<D*?w#ZI<IeU?aM*_KQ1)$$kGm%Ykuk
zvDTFsBbW6e7L~^AAXN&gM%bG$uLFiHoIl5Rf1QZcp4U%AV;uPl9mE)tOuBO%I}&*r
zn^w3n-aa<F^m{cq7AJi7(G9yVG%dZ!K`PN<e}GHN4FqBS(Q>h#PbBPP701o$nm|$Y
zX1LYf1nGRWLD6Z%4N8rBS<LM4<P&Y?lKK0{F1L2K|8g<Bd9~HvzIh8>e5Ni5J{`65
zf(%`()T&zGk+P`R$yCzZm=bYgBDhLAkJ8~2n}k>gx?#0Y5qNnvn`r*PWy@BgS+`6T
z#<2Ed`b6$GS%|?o;Obl8G<XxD8VP#*6XMGQAig|ilf@Ou>7`x*)g`1w>^~Q(zrJqA
zj8{WsDL;JhX>dO6VGK1T24t1}i9+-N(V`|aVs)SCS+cu)vzS@HQ}~Okq&u|!NV4jI
z;(T?P@!BjHFg_wf45MKj1fW;l!GRqV=(it#fP=*r8T_Y-xffcP=flEo_AOy$b364-
z>hGPwQH4EgKa=@VvrEa_4sXcmR&G+0YpAb@7_kPF3X;fbgB%z!FsB(T+E);bt|tj4
zhX^@O<k8+lWjwi3YjqTxhi;8ms|`zAa{m>Cd(l%)=nKRD4eT(E1`Y-!XG%5mfI!=M
z&8;e<(Om$B1FW*IHRG1ho7jj?1$kb&-f&RJq;h4zVSbwUohO4wv!`OOtOKLKn+21n
z_eCsz5ol?OPr7^EHrqYaE@A#~c{i&G1T-BpQf&YWJIuyTKAVdcn1nIK`m(;xKaO71
z37QM7R1pAl*T*>E3`#Yd$W~BK78{6*bq=-4IDQc9w>e)?EwSG6)#iP=WTB!8v<SFS
zGnzKOu8z<+FBew&jt#?k{}!(DvyII7aTTIZ8-W>WXMJHkS$_^CXX(WIH9Co3Sw=7N
z(PPI0F_bmp-*+7!)@=6c=)Gf)+k_EQRZ!?G9bLwhL*V3(B2{ZRl3uL*Yw=lWec<$E
zBwF^jvIr$)e%BZ?(kjd=GPfwem~O`jP&54(V2z#KLv>c+^X0H~6-S#e_V3o>Erq}H
zYNHVB(d04~&SeI0&R0{o%pM(SfaJwJky$5s;5c#vs89EHDBH#YqL6XM!wCf-O=a6Y
z+3ih6{DG{E{0&*Ve7v&(#D)KFXpKOxH+XYLIkxq|83{1;W$m@_0#CT?(x0y&_8&<J
zi!@j}8E8_GbAEYJ!gwwd4#O5vuQiXe+ao_C8&(^WC{GKC4MZRKT~4@CkZ*5`F}TNM
zG!A(76e#|RWY(S4zCX*Otaft=$Lfo!JO;bFP<Sc3mrt3msjfxgd?RnWdn#9Lbiy4%
zFr324I#qf{<~CP{2t+cCkZLBjSs_0$7=1*ik@ak}-xJId4kL|s^49KQ^EiEW0YF-j
zqFUbD;iR_k&*sbgYn_-Mjt!uzp@Pt9`M<c><^d@wYB2&}=b;}tQ>TkH>0rv0zdHF2
zL|<nhclnKBy0t|bRzI~qCKqC*LK&S50zNb2VNrQwy;4bg<5?nVY4jqKrJyKCe<@V?
zmTzD3jIr7O`3MX@L}qh;WW(cflvObGv=bCNYYn@a^LhuhYjD;I+$NlRQJ9$TI;luV
zd`1Esgt8#umTR6KAM+&>7?o!5kdSyIA|iBC?x<QWMmRBc&O)1w$B7b@0OyN}U$I-x
zNGF-EYH@(sH^WzY^$P|XE;#_xIdG$2eQ<DKCPzo~+Ms!wDoZ;3s0mPJRDiMz^c)@D
zE*SeEM0d8wFS46It|GcDoae`^FTDlW{?IV_<;HapGx;r~SG{-iP(mn?4`j^zoGcl~
zt=6qC)TE;>79Z0<>^C0kq`+edBR>5lkH_SX+$_jn`#yb1AKghKX~CHOV!iC)%!Y@j
z38do0yApnJzAsaPJYr6=l{L*Q`22$Weq|v1VA56|%lz<!T#Vb!Vxbmq@}P=)UjNPa
z-Sr-c%cn3Nv5Urqx|6Y}ywa)mHzuDQmcgbV#6)$xLdB3s#DG0$zDHZ@yc4)EY~<<<
z&$g)vfG`so$Nmj1lL64c=@D|E!e?1>apebGGGd2+_zZ+|w>+x7NnSHE+peb6{a%wg
zxu((DN1i5j2wLIu)T#9Cx+fG6kp*yieK$4_Ay;2Epk6hY3XL!tHPrz>-x)MQ79rtQ
z;dene(hXj<`L<Vyj&YTS%0r`GYazi1DEZc->+u@{%lOHL`GemkuXYhWH$%XgoV02u
zKJ-~8?&S;Z-~}%>TPx^VUmvp1V>W9ox83q}D`)2C!!cWQk_0wdc|m$S)Cdi?BaX(Q
z+%k9B_~D;CLGkAgir_1(jJhZQ8$d-2Cvfbk1~Z5G7NfG@jrmhj7;^_8%c?d2wGJLf
zXJk2!VAJ_}Uy7WVNZ+NMp~%l~lC2BZ%c%Y)uLTfnOP+JR{57rlWAnP|4(-_v3kzGh
z%U1o|)!A9ijCh9N4|MvBMv{?}^zcA(o%8QcLLFHl)_m@Hf3^TznA%71^dnz8d}zk3
zc1BURRhCvQ{wPzRo}3pk1z{wDBw}eI%!!9p=t_y{>BEU2oN~cW#vHZ$Vmh{mlMJx3
zHN{bZ%}y3FdaP$6FXurKNKVo9Qs>_A2%^z;W*!`>JMP7sX_J#XITwyeFkEHIx2?GC
zDQIkYxhz7f^-|4k1e`m`r8BS_C_&M;`mtCWa_8R#<RmfaGfr$DHy2l`;OR&QFbW?P
zE#)1{uOe5$;D1~N5)JzO*pjrXc7_wAG9GTmrib6k556M-9-;!g>B71(v<E<v5^Zky
z>Jpm0HXZG=86l`palBA0oGY-qP<A=2_S-zK2*Stom_f`a<qYrd=Lz&@E`E}Y#W>b{
zVE%C7D)H5P-D`~q{yZ9(_b{33fLF3HYKbXIl=}<ciYN+PHl%2STa&}sa|@@5@|Y41
z^D1>nySzbf7@m|L|BtPeO?<LKeO2L{4K}+0{Ucnk(tjDdegy#k|A4}pBsYF#ZrBT_
zk3*us@#OxU;;K)F4QFKXcp4s=KOFqI1Fd&^5w<eO&==3A4pXVUmZrq1-AdxlC6#EV
zHIeIScfQ=`xY1BVTHPzV(k;d_W^g7@76;T-rX<rYC2C{KnhORlW5G?fl-qaha}Vby
zJrXP^W}E&Q=c(N_YpuOCN=0fyt|=RqU+x*!>HofQJ@x?@E><NHrR&4F0svu|%#pw>
zl*{_rBfZQ1eY3othJs)dGZt$s`TXW44|r6|_l4pWd~I=7<2H8MgXkUyL~Qyf%$31l
z7lP3Kxj<9WB=5|kn7pD;sYD!*;ba0H6)@EPt{8y*DbLN}T-K}oDTnPYFJP}4tEM4~
z<9WE;qE0+kEvx`+LTOlWyQjA*$2;wPVYtg)g)3whE&OF6?2`CTcCiRr?t<zvOIf*X
z!m>5^VdE=0b-P*}xU7_Wd`Zq|dGJdudq*>sDiI=~o#j-QkU+y3m5-nt!$U3c)8i>e
z%0nv$-UkKWdBtHdfa`J(ssXsJPfxcTA!eGBnQ%s>3B#^5(*FJ;_mkBR3$V5Z=N~3Z
zVsj`L$`(GE&gp!z6^?J?`-yND%ZuV=G8)4~{zQUNC`)LU!<(hQX&e=h3G}DMk~^4@
zqR{=J0GewrY{d{ruSdWbmIjEfUSJC)@;mogu)$_4()vWVN1q4Ti9qF^-DYR-GW(W}
z>yd(1y;c4*yg3dM$5^G;Y9k~pBkcFbZZVTwQsVI!+JC`Zu=1Hpe&*Q;*y{vX3w34^
zZx56eoKwVbdm*zipFLAhVsb-;tLT(<Rm&{!09Lk;1YhT;TBe}2*eX2QwxJjyGIAb;
z)dtxdv*gpV$+Tc(V7(>x@iTJERC+5HtK~BoHTv%Db)8X|#X3|)t*c>r&E-?KwY(Yp
z)icKfV$i-0fGaIg?eDIHo^KClwUDefeBgBUVV>%$s<b<>5BknzlmN}f#YB(U6Gs*7
zHi&T|Ule<ywh4;3U5s1s4WRBGEJCU=eh$rbg0QpJIIyhBMJ+e@=jPB#1{|1F81$We
zodd8elXJhYb0Ch3sD4{kmn0PsDt@|fad8Q{;fp$lqCpJ=$gE|&7JUZS?wO!v%&G`0
zer~&uB(d&z&i9ulQmC(bVa3{Ss{HEtS^U1RYN)%c#lq3N4{&6@NSAxVtSiy@i)YUo
zlEuVsuCANxNZ*8mAe}mgUxHE$tS*8i3YPq2^2u_zD0su=7o20lN0uR!g)XjF(g#-X
zbAB>`Cs?h2%5l0QJuiz-xrP%tg<HVP9e^kX;imK$|3PJOw3=)SS;qY;1wp+iGx?4d
z2AI>pP|*t5rYpBJN3&~EnaYj-UY`tkn8q=r5+GhfEV6wLjto9nDEAbP?Tb<#0-q(!
z_yXSXPK#RYhaj2%%Rl%m$BdD%CcBzFbtu6^YuzqgT=}-In({*pl1MM;=-j@%?|Buu
zvBfrD?2neS*x%DAmll)craxsrR~n6yS&h)R<VYfdFdc&EAdqg=Oc(Pr#B15s;R3#<
z%&cd>L-viJE<e1OBmcA)^=>JQ<zQT|ulj;^#k|xPl-|=s#`y?rS|Y~56}GIeXN$#9
zgEDWeA;zKDT{r!E*aat5*5OcbTl6##@L}Rw$GIw<`ycoFaFN-b{CL<!ZTP6LbHp};
zdr7dvM%@yCAPdz#_Or!I%fBSP{}L8bLcNWL>SRWgFV$cV371!f{tLqLahMj>Y4p24
z&HG%``B46K^_V{(0!yHAqMxxALQ4ZF9^SiqLgG`#YC89RR<d)Sa4Mj)9k{|CX?wmu
zxYuPYhGrFv&W#6=u}aeyanzp)HTP@M(G9(;P+vR!DYIv^_Uh;<4+mB>bC5b&)kwZI
z@~tf)jhHR9`FxD%;Xf&?-Kf#*^LT0r95Lf1w@Zy}$5#$3P7_Xv;@h=q6zc)CPvwBj
zOpm&uhbE>^+6U-r{@_GTQ96}!Ps0HpN7t?3_|@p>P{Vc*S1$2kamBweEX+@bq*C|g
zgIe;xOxA8hf4P(_6s8XolR39glmK$mufMBpE_XE1?MY(^c!JO<4+~2hvOn7KY?uYp
z=H2^dwIO6MEK*ykoWOehMDf?kLPHrv?2etocWruNG>0@_XeAZ~Z5wrZct!?w_F?uS
z$^#A}F~xX%-t&>b%}T(D`E*yOIAbwhSaWJE%WrCaAAp(i%5KrY*UoP-|D$a7+6)1r
z#|g_fJq=^zR<*<fA{@bVYCK-tLtN$WE=5}G(I(L4AbP-we?chph;-Ir2+HX5DTuo*
z`o_km=JS7bMN@LGx!jVCBO0-Cf4aZww;-e_0>|K|l#1^cCnQdk31=5r9-s~=PVN+$
zI<2FXIu4F=TJ03z@L2f6Wm6{r1z|HL8+rQ&J*}-GV-Ox}hGy=j0cTp-dIPPS%hqVD
z5^<#kk1Lry*`o}SGMx!xou4#>LXB_Ma<o+1@i#1l%$QlV+ajC$4dAK7qJ&STUfWF^
zMESH|Q&cNWE<WEAM1}&d1zV_8fNPc%?{k$ouzgugCUAMT{sB1svo)U@0`9FZPw9)$
z4j$rJ)PBR5jCp^LX}`;%{S`i*y%vBk@46)?O<iZcz_;Y$P6R{rh}ES?Z&aFmDW0gT
z&jJW}BXcWXU@!PdS$*`JNNeW@ljkJA7P+z&x(p^fpgfPRdcZefbk@aBeDZ;z>$f~C
zg^m*Vk51K%z#C3Pe(gIi#13J(TrWqzDO4G&aCe${6fiPR3dA@n=pW3TrQS$iDtzjR
zvH=s!k%AjXpQ{}Zegwi1byhw%k><)WsDdH(Yq0ebyHAJ`Pw&MsmP4|e)hd-tG6Q_&
zJ0Z3rJZOqx2+m41gSTERjHf6iUre3LsRL6G-7Zv61eAQgk^C>Fiar4%qa|NGtj16$
z7a9dF^W*ixcvO5WCC8gKg;F#bnJR@gpckQfM5R+y0+dw)V#p)adh&P8<o4G;v>&Fj
zQCQYmsT9>bQXg9cmQG!#6lM)pG5~{IPQ{V&q0(;o7rkv`9u%rJBFEz;rX|E)`(t5F
zz*30%1pVoA>;306uFny3vPRP<>5M=)u$XSg8mDV3UzRN0l-XpYU@SMS2tt)=rTp8O
zG$=6>iFF&TOm1TXzza(K_}Y>8Fu&gUh{KzX(YP8O_mVc|hFSz5v8tz-^Zr6U{^%@|
z=z*ib=m&Lo%nxD^+O2oPg#6pvvJ4LJwtOY3_VJWj()Ket5H^rpHz62u1y7m=lz2w>
z?Z3^;6p1p0n*mY`<*6P=+pT$mUg34?PV8lh4u2X;I<t##M~wwI5c6ffSkg?ANIXog
z)DzD=(`D?W{=PCbCi;lQ#P@Pl-Z*2Da(Ni3{MxOm@$|+{>?&1Cab==wZ8;eU^8UeV
ztvm!vl28nZ(*&1GIa-C6Ps{H7ahWWG;gNk^!6MulpttNE+=1yFruyr|S$G|TlAmtN
z(k(h%);Gl}eham-ne}XLP%_8RHvoi{<60+#s?0K1?m<9-JQ8ep66^3hEyEUQuTWBB
ztDKq;Tnm-{ENkT&R+7yNs`~3XwKKY^o+iMdsW|ZW9^t*qA-%pm(_`<wUy>f<d3uVP
z@x?J9P&p$CXRrDNmDmZk?HR7YzaU;fEzqMHVq>|cHzca-h1TT0bjZUy6(hp7(2d9`
zde6kcq-3{jTv|A>VWU;ZF?K^0L;b7mBfdjc$wI9{U6{+S*5a=%N~VSd&HvYg^pAe7
z=rgpZinj-~KP@RzJVN1xv$v>;uFlf!D`8dQ#A{1A9{0mA#<cG?H1u&_69Yf@%1qwC
z!k?><t5aOj;}5$^6-3_C=i(DTsvQdvqk3Y_kcLJ0!00(GBvk>N`2Jw_4%YldAFF*b
zdnzuwuFLTGMpGmeS`Qu}OG$3BnsQ$4nzHbe&imMGN?KU?WttJd!1AV2W756pmf4)s
zV!FQJZk64QV+Y)gf#-SC_pDLLPcttI6W`x2#dv~4qNMFl+)5P<?hL@KXbZi><o``u
zwHt-29gfD|sRvJClNV%;x5iJGtPsGkx^+-1mrk^<J~93hh26a%EcX8tFWRwI_r-hZ
zc2XY)7nkW{P8QyXK#=*|Ir_C?$rhzT?_n{w@y;h&O?-OYOdh`!_!td_{P99tJ6rVF
z!q#rKc}_?nxFk3G5|xJeLbD>JvIvvg3~HpKwgIZBC>XOD^KuFpe(SEEya`HzGi4sn
z3=8Wkt$L}5ifea3)LVKF@{RVdnXgeM0Hj@aPpDO^8zbb79x&=wuuuPSrTFY8Gp%6b
zaz`rze&0X)){*33x3a~|1?hY_T4tW$^QbM@=+0%ujz~%vjANmU?)5xCim>f<sOu?V
zQJv@*sysp5CCbN-rAIjVmT*p&cFCL$(ptd?AGz{PoV;)q@IxcSO4#{kHAAoKzR9t1
zWVTtT?<}#0042$XFKpI`cbOz^D$CiCY|5{J?gzwt#zGpbNwaf+4Jiy5wIY&=f;vVv
z|J+cb#0c+L^J9@>YxtbyuwBLAs`>_hf#^!gIi1G|9<$AXkn`ivAyi+2{kNC~Qqf9r
zfXX>B;=8objuygrnXxfBOSGIOu&lVE(C;rtt|m6ln<V3)W3F~~pBLd6{ms}!;Q8x3
zDiwb)k)L0{q&?k|InQ0RJDc5b5j>G?Pb6sialwOPgSDp=X9fNv*@HiLxUd#HRyL66
zK70Kx=zFh!SlBPtDVq!i7Ta6sz`#ZV@}pTYdP#p$i9~3hEo!BSLKd@}Bi4c4!HzW9
znnI9%6g?gsbTtVigVW2^4T^J}ftmS^@KhV(LUo1)yHwKK%LAUV*F1OA$!e$I&7|du
zyX+J4K|EB@Qg2pKIrDT<xV1~)o9<#Fqde&(X+MM{2e|jpi-LfwUewaJ`E2C9Up&f}
zZs(&4yORaK)j&X&MCPFGpqBr0tB+I3z0Q*Yn|z!7QKOO}Ft2<%AAC=1@!oZ^CQ6c@
z^XVQDB{#orGp^F<0&^lV2gtXG1uh)+Z`~A$3>V69@WM#8j*zE^yn&c>7T+Q_{?u3h
zYjbJg`KI_Q!B{iw`}fg4h|F0)ol05)KS{dFk~opa+OX)AKu}#v;K&1B09YxJfx5-v
z#ATfEkU5>Z8aPGCd@7pKQQXu;72E{b6pI15D>sdsIRq4xf~+i3WKOpd0(Z+LcfEFi
z&w&PDTtchas0fN!52Xv}DI7D?5tD{)uPzsisFz}rfs-m`Nc!}<Gd$_?QEQ<K8on6u
zv2t9w#wJ3U>lZb#Frm?jLR3Ho_)$@Ob{0MB<J?L!RxvA?51?3znA3s8VrVT?Vm>kA
zgeF1HPL=trw!Dxn$KvWl5~6`k`CIQ{w2oI8_CB|nK8Cq!)#c_GH8hVWCMuwnCjL8J
z8NcoQB{mgcO;GZ6Ezu8`L_Y7+68K=7@@J?%&oPuvL3{CP-+&xFzw601An(B;-)81G
z(pZ2f*-0<%^X<Nzd-J^8?9bMZvn!dwC87)Vc;8GDAxgDSvkHi-v&UMksf?$qVM6e}
z@S8!Z)SS$!5|gKk`M575<pvW#S%-vsUKPPSM_g6{Ax8U8cX5$J0?rm|L-Y>E8n)7|
zgmSrtP=M&~=Po{?o2n1b(Gx_;3Q{_07p0!*Sx%1W)WB<84K1G6tv0*vB-Xv&2v@~b
z$^S*EI3erH8f^~<S)t#&Rgzq60tOj5{l*VYhpFc?nNHs|))!XN+*8G)02P$^+Ne64
zg`ZUGcQUP4^oGeLR!HIgyW_~Kh9B{mCtNS2OpM^m*-VL<(S7r%k(z2ViR<~?4qE;A
zV`RFtE>th^x*5i%pV-D;3FOrj<=uNu8?AeXLn1Lyv*RY_0-e!dEQmX6V2`Z7JxAhs
zQdFgc58<z2^uKlvF5u|}XqXZ2)&Z@YRue|JSd;zH#QNA_Ck{+0D7`v;2pRD2lL1WX
zCe8`n01+t0G>aqR=hCvo&*oIjFSM)%?<#U1Elkh@-^?o=6ydO#hFc4iczV96_!>MG
zsJ#?$bLGduGX_YXW87P-C1KD!%|0~mY$To;NhmgcL~VA^s&`Hrh-IWqo29~3z%kSB
z@d^Hr-NiFqtpvdWPaCczj`VXHqq@!=8Aqj*tYS>M!5iD;rCfZnSOa0WqtO&!1W6*K
zhrK0x+FUB0Bc`FPKkLL}U!_)FW3~zny+2h+i+1W$Ld^8_RSiK!_*=N6I~zm5y^%L^
zb?qnQ#HwXmE+BvZ#W4}!w+xCDrwKF~O_Y9j??K6;knU@DE6Rq)>CP|x&G<v2uCSNF
zp)}spmJdYVt_~EU7z#BIjPa`41QIIqZF;K<CTpe4#7GK$b<V~z0D*C!d#TI0G7VL@
ze=tsH@8>_$kNU_EOI9}crV;;tAx@$Zo!{X!^Pl+jMA$oL;sOw3cRvWq{M<i~&M$A#
zlU2R_4%YFr;?0>2(7Flf?!2W{Z|)~0iGAj1X@(si>sWzZR8RmcYs7Tl=8=Vb7#}iG
zxKuT$cex46x5+~||JsX)E~&|<;!O{^2cno?N$gYud9v9fKdMA4x0aPhk>ggr+&+QF
zNELoJLq@i`ZY?G|b}@cf>j4)eI2Hl2vzkxCR*V<|a-b5s{=VMTBZJLCl*?raCt6av
zHVdkisMYwad-^q_Y)E^xwzh6=Y-B|+sBEmdVQeb=fP}9uVl@@@+ALJ9%GJormozSm
zFGnc++R`XqNw23E@X9DDy#d^aBE;y;1lhmH{j`gf8~geyl|mIQ=0p$htx?lid(M)?
zj?(q7_$KaOC9K4VE9Amb8La8|bNXJ7%sda0v~u<cdRZlm$@);kas6BXF!b=LG!!Kb
z$bI}Y@rKD%-xr}waJgaPcgDrd-b6~?rZPS1R(~|dh=pDU>=8N=d3fs+<k$eHs9<dY
z-gv^t+B(*O?A=gVx~gx$do^*VEWEKkMNG0mXdN|(os(Hw_|S<Exaar*GD8mL(Gggq
zJ0o9OR>@!I&_{(_)@)hIPyYj0N@-DIQ-X@{#V=gvR}fFQWLHnCNS-J@Kc^BrP$~=8
z-$Lfo|AH~E2sEjJZ9ZrnGGh_C!tg!}<S9}Xm>7Q}u4PlKJd1hnLvvhpZ^;rnH&d!+
zu_gF*YGcSP;Nf&4XK(`Qtten~Bm4qU=+4dfC#3SnmsgJuRvy@q2y4c8h*q!N0p^4Z
z;7iCDP|He~;QY{P!j6c(clgV7N65y81tE2^2uJKh6lJb1lp)kA8r8_9YPu-JPNxhQ
zNlY1Or%k?gURmaSifv!^#4;jcw3{&IZ90<sYM^-q4mS2vOG_q4<|nf6@$WVVDP9g~
zP)@$(To`3f#A1A_m=5q$jZm@r*{UZJK6J9RMH)6{HGcAlVP?=6r9Eo1T^+*dDnR)n
z+epL!nZd7?Szq@U#Gt^)_I9|6NC<Y2N2KXpjk0kr<%&jVY#plyzb;G(`_}u3<!1t|
zP~5o^=0IG^veBRtmm(00<w_BcUwP4q(dwRhZgoWh)`n`Oe(t&ZmM$0m3{1<#py%!|
z&S`OvFeI?ZiZdzm<yZc5Db0Qlo-PDI3fbJoe<>Kvh}S(Y+jh|WJaEQ<?hy(rN})cl
zz%X@jxu*a}`$<Sw6a9lmM+28&2}rN--HgB8+vl$&Iz$ITI7gVLYHQlg*C#glJxwRF
zfZ1pN#gwuy_BcBZId1F<$~Ued_yzaVRzXM-K-3G5Ckzuc6&rGZ_o)wJ5z`BpV4x&#
za8eQb2IvQEpRlP76+9k0@_5X)X33UZ=L*BG#6Gv3UVYohrDZnQXAXFaJ6MG8n8&;J
z9~t44AK%{gsZ|+<oKC5E!$POE($D;;<w>qh3%RCM2W~eKk1~xmcem<?gvdyLZ^&7I
zd4L&N=IdSSDosn%3dE-~`V<~OV<fx5Xz`<6p#o{ygFx^Zn-kv9ebv()$Hlx%hEnf~
zZmW({2a=Wjkncm6puhm$i4j}m3TAWK_6Spf%R$FEB`A{ncp8+}t@Dqj4-g#<`_`D5
zZvmzo{W%y6U-8s0X3~2JQb*d6)S1=F%>!V{$?<9~L^QroZPTNw8q%;uOCnQ*6Vrk&
z2a2ygDX2YIE_~PZ-k;Aw^@SE0IaRiMd3I|Mz{Zv7BD7<ui28wY+Y7VQCL(miO(ue`
zWbcs5#NpfSuOqPe^KB@G^bmgL?egd>2qo7ipS%J*bh+-^64~QGO71}?luDzmNzR=q
zuzf9PnQdTVFn>ZlNNm9S=l?%L^k$`Hb_)?4`LU*R2&pNx>lfz)9>a@``RGs$-v;cw
w(w}ry7X%#Oa|rVVw}u+(bXy)*9{LfVNdU9<(S-Bn4e%o-BrRCVukHPR01;d6PXGV_

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/public-cloud-architecture-storage-replication.png b/assets/documentation/1.27.0-rc1/images/public-cloud-architecture-storage-replication.png
new file mode 100644
index 0000000000000000000000000000000000000000..f71025ef9a67c963a68124efeffbe2e4bd81088d
GIT binary patch
literal 106922
zcmeFZby$?$+BXaXNQsn!lypf+Hw;Kh3M$elE!`yypc0bOs4yr9BB^wPqS7th4MTU%
zd~3kH_w($%-~Zn4zxO^4hik4`*IMT~`~02jy2G_Km5B(b2{14)h*VV+bTBZmQ5YCl
zJ9t;X9jqK*LhuLEO-ETCqp*v11$>FMe5`7vp@DH5T;pL}!MuWjg&u+d0Uu<4uQ9<j
zH3rVbeGH68m^A;qHo@fh*Z5Fd4D7#StiWINe@WmUc>3>OtPIS5&6olC$7pO+2G&2W
zv3AgpO=hs%1b^_IRrK93Feu5;|1hoLePBBfLfZ$A-5+bHOPD)3@IJ9{dTPn*?cj`l
z3PZ|U0$e&+x<6s?cCdGJlkk>ix)>n=uF<#om>4dGxZ6oHJ=V}>xa;I<$so)t#CwNH
zhJb;ALCV#_N<v3L>F?v<n>3S+ySuXlAD@?(7q6Efuam1aAHTS`INu!sJ^=w9FoMU;
z$I<<XH;<zm^W`M}m`B0V&D_=2+1=L3kpVsLlc!D|?$S(5=!O3I-zA;ywpRaI$<gia
zw!jAY(7*8U^WNe6=iJ~?DfC?lEmvDhurhjn8GfmYk^k%7zt*`NuWjSx?gY5tYHP0Q
z=x*ui><Tz?@wC9-r~l6*{(UYTOE)Kb5A?$i9c|rZ{xQM7-TwEd?m9VuMcv%c6bt`d
z^MBs^J6?(p&948!zDwC$+y%msA&}zxr=VpBx}#se#=wALs4B=k@Wx!5z#peoOg-9O
zlHRFzlAj#Mjg5WrvRQ?U_debs<I6xMrY7?1ijPWQ?hha1==Ufl{KQe13uY<|qrHFM
zS&o6^8Y4jq>Gwn|S5j9~mU-{pTd05#_new3ao@%D)RiyD8}KL9e!gGw>V<OyYQ9ug
zE8V7l79(@AJX2OyW}Y^rvb0qvDIxJT?J&J7uYRX>CJc`u5UP~%=NOgr_U+rwuG8#;
zg9F7byGe2_sjtoYPTgxwC=w_JCicZg9Cu@xRh(LADPycj&=*s?!Gy5@)cK*)%{yj|
zq+K}s+g%8;CGSwNO^pQ^-fiYU42TP!SQ`0Qns>U}B)x}8$zY-J=>S(zZ6BHPcyka2
z1gwt!(5}W9di!Z?TLYWqb3K%`NVt9Q$m?wTx0b7bYxEECKelTKL;puQ=&|m`jk!Z2
zVqZI)SIZ2oJKqY|Ao$6!AU-%Zn_`ngiAkXu_aG1Ho3uYYcN>0*=Uk8)8_Yn3$3T(?
z6)zH=b3Ds)yFHt$8O-Ox8~OY97pMh#|KG9SS8rJ66xOuaV!xkZDd2h1$}E0`;7)K;
zqdapf9>X-g*pi}ByB{@of?S|or$7c7D+G^4mtn)MbC?<xExA#ddu@dHJ>g96{pGjs
z-dQg9eCW&3qF<S;^ILqVr$@PvxAp>%-pt!GILJ0u?$BN<;yBLXRJWgGKbhZ;QY0XJ
z-*#LB#PnGNLPo-25J-AeF@75do8%6(QCw8OU^38EfHB<2?ydH{EK*EtSA3QkgOc_r
znDQ;3`4q>AY7H;ybIp##`%8jUlAigr-qS&@J#x6M0jKNib$*9kWs+m0P>di2Jp0j7
zRSNFM41Bd)!L>)T5duz=QZBp}uGyW(Ycpw*UYdS8t?Wxn<Ke_4!#s_6ArlnbjDdj*
zkS_7K-kqdm7x8bu%dEs7gp*@p$1!NH*md#>BgLifP)ZQ_4T(7ujcgr^SksFi&&Myk
zB-f0UdvV2b?3Dvxa3DV<Pp>EmkgIU(`Iel1xxId&dxaRK7^Qe7hEq!!))=W7HdX^r
zvOD?=_{=xe517|`u`3577n@D+7|cSURYk&T&(0(dhRsh01_vi+N#Jjyj{P_N;LjHY
z;ctEr%Nn^4&|`w<i&de@sPpqpSn|~QhS$ysqG+jY6h1mO*6p|U^|#34Xwdo!xf%A|
zleYJ?%&`<f_hQUcBJ8MlTg$Ad)zYMx0|U9V3+*~T8ZN%~2@jDB_igcsav@);M=aOd
z_GgE?xy(7v(xKNeXsr6Fm#qco9o3CzU0!cs7bnKnk6REF`J@h{$I0dVEdttx(<U9v
zxKKN21-H|%i%5!O420rCTukgJ{v3Jj^(t$9E-HdGs_stCxWi`2;jw(rX9)WS2CgH+
zJb<}1J_}kOt7tERo!cG%phw2?z?~|}%QXXL!`T<DPGcPo2!Vbg1=vFI7-9`GjF@k_
z(!bGCzcFplKM=<}0c=V$sIpL)Srln&xh55L=&~d-S&xhq77}Vvq%>yH<cop{wxgAQ
z75hDDfNQ7lkcyg`8pCGStL`h-0a@lY7*~t4p1vZzn#*A&5RL&M#hImTBH4~zvkC*Y
z8gl)5s{%&Q7ku}913{g+sltfl5lvn!X5^KtHyNf-$U{M`or1R*xJtltkg;TFVIyNu
zN5uLyo(^IUog``4TnL?0eolHQ-5EA4pTCNUeUCEC4*Tv3=kz;O@@WG>TUL2r5-3A1
z#JFlOpDTg0&bXCo{qSYU6dtPnL_3Bab@cnA)*kDH^QdLdNMn*9^W7M)nz_<wWgWx$
zBb2zoVSD!H*!DNWM$ur#t<QdRJg9Xim|?bN+U+hOYER}^Nx)%-h`>Sr&|AJXi`26#
zIdBSp*J3^)$ssy8t%&{bxmpr;t3+y{lPLuc31DilJPRRUDt}O+k=-E0y@kS@lPkA2
zJ`ll%jJ?wKHm4eThK^~0W~ihE4n_@`_!Za~QxTYZ{>lB&nLo;s!F<y_V0=r6%J*A6
z@&u8}_9Oc{8y}eOTcBrxZQ5s#Oj(<WT#x0#UNdCO<8tjlI}Jj@L|}bTeVluBgB_AP
zPDAnds7|=6v>YO=VbO}NS^mN+x3Fa}(_E8WyW;~C$`UbHfHeLUb(8<;3&E33Ta;4L
zI*A$f3%UgrUJ_`A0K}N8NjvqrYl16*bAi65@hlL}JDht}gB>GBUh{91qg|NJ;;|Oj
zGb^}^{rCTjuiEVvh1CKg>><*=d$Hl<>}?&Xf>;&8;+fQ%Hw7$OB0s4m7e=g`DJ0+p
z`5#Ukda^SrpODW*C*|~a6nz%}o_#AlFr7<FYFoi)qiX4UzvZ4+SF$-JkAXYoqXT^B
z0$bD6IA-AV^Pyjd-ikY&t`8QBxwEejA?Fdg{=cK?5L3<QSpuQAFbf3BHm<%3G4`;x
z5zJ#FT*kY?er|oVn~`a-*YtSQN9mFsygkFiDY;xfDljDd;9v6`JCTaz)Le~a*<Tfv
zzmq~4<RCwd?0hp%&Q`n}4JF1>VKYxr<t1GbYI}+o6L4sn&9}TsHH4Y^??2p(=&}j%
zPaA`ox;di!e~z^Te}zPv-6>yI5d;2TA!C^ID!!^nD+f9#ko6o907_%;GOU(amA`>`
zbSbVRBE4~ms9E5sv!(NQkI}Y3!XZCRXnGWEV@ypT>pWQE`TgaAx$q2_RmB_gjTCTz
z@);?lSCuTn6s*vO@Qz>%1l}NCJcX*kHTT{XDSbq|=G@dVa?a%W_RrZ4^ZBXfZ%q(M
zuZ`>0rElzqiy3!EznUxGCw8{AwZ(sK>i5j!du!H9(Mj(g?S_4Qi=xjQ91;%>JYA4=
zmL|yV$K_g3RMcA4Qu@xYd5ll0TU$N6Uw5}!5Z>E9sYDS8T;&TFMWtZCxF*Pb<vT25
zge*KU!2W%lxsSu_I#(&P{G#;F6Jmq!;iD-Wc-r6F>k=-aR4K=P+so0~RnMmaYBo{r
zv9rJj8);Y7)r}u_ZRZj2-ZFDCtbdirrFW$s_Jc^Y1$nv&-{iV+-T|-3`qcR<MHW{7
ze1XffH9y^Nqsp~Qe5sOt+wp7Q;3tC|wEdXymUVeN+Sn2)HhYT!;sqCfUjzmuoU(`X
zD$uo;`6hLvYI$z{AHCSldwt4$X!P%B0*jh^oxhCjR-iAWpWIMvKO#`IS${g;DLU10
z5soE7S55rZS?7L5#cMsECGRUTZQ!L3#f#(7UN#VP9xLi67i<;(8hvQJA_zZ@ge6)M
z;*>j0@uE%rmAIN?(nbR+fX~IS+<rSrzu1()DCb#Po=4HSc!gl7=7@$zn{%nGSAVt!
z`T7IKVMeq+P^daJ`1(}wK2?A3&W6{%ad(v}fvV;^L>BW+ycMz@i3f;2?O`p%c#p^<
zA~N8CGQPj&&o#396_(2S1#m@~w{jYC3_=~;=UMgS#FEgr_P4@z^PiGU;%YXk)%H&2
z1`VA$cN|1U*kU&g1n=y0AHR7&XVmO{JY@~{pWpgHd^o6ItTzp`Ge_!Z`h_cq{bTQ1
zU(Tx+(EBcbc$pPq@xTCzcu-(i7TQH*a46AUGT|}V2_p3iam$C#?g3Zw#b{;9upyvM
zYO4|JoAb=~4!h%>g}w?WQz{Yr$5zzTbWIuk93*QL974fO8{=cCl7+(S+(R5yvj&2%
zb+%8>HoO|z$D1gT*`66kk~C$^JE9H88dgHn37op$Yf2p7K<n)^oaW(fV^%NXm!M8>
zMX--)uy_O*x%9D-OE9GJ9<igm5B45p2c%%Jo6nadKkjmq^>Jo+JWEnK$gNqOcK>+u
zt)0@Hn+DFt>LScHtMMLBBeZ1COW(tg$2)nZ=l5>G&Rlv!WQio=o^-tz-^r0Z=iDW!
zrg5sh@BV<T$ua0T^UbxcD*viEgZ_E}9uZ|DI|{BO7^=)}sBOJsYGb|h_btDciiUHC
zs?&`c!3qpSjV8~6R6^I7a!&J(R?f74W3VvfxKOz6m+Vsd7V~?$)9R{0zBK3W_#3x3
zIZ1|VeM-*ua%45+G`W%$=|cQRER!u44<%36N){I1Idw_RXS#AutEgV@seXufENU~6
z=TThKRYL`-QL^_9w=AtyesUfx8QgRd`AF=A?+4db*5t6Rhx5clM5D5Gk~W#}$w~Kq
z4bk<<mbgU72Hq9e;&+cClweXk@Q7Bf?b$k<a|VJYD`So|oir0UORezpHS3)jV%THf
z!;LiY*m}hHjw$M7s16Hpyql<JvJDhQmtm+Zd+2D%==rV9?vvrK=9WDfa!3ts!`nUM
z<7*4*?0U$tDdb{7vU$^SCQp*hTsjuV#*t9G?^xg3NQol-7O7snc@uNo7Xq7!FCO`_
zFA-)aYi@QekTtb(#ox;bBfYx)+U^Bh=6MGZs993QBLhyyrrH1*dgwHW;e;gY*Docn
z<PMHTcKGu?L+d6P%yka)(ptI&YNTYSorYwa@IBtj!RK0>8+IBn=1FCloi`l=H%Hpc
zcjjADa|Oq{K?*$0yW^M(Ed=V-C7UBJ(*-}oB9`iDX#4gPLTTdtVVT5iJ*qdO-2jPv
zT|Ka7$9f3dqh-3|mm5)CQ~jf(w=<QZ;(9Zc+f(?>1(?;(VI4~nNhUX?PL?x4PF>q!
zx6=11RdwIv8pAr3%v_}4>w6_4zigjNkbe1<tEJo*L3I9GAmGef{CuxpaHT!*RylLe
z4a{@VMcArS<+Y7_<IgM3KuF+daOsPgjy9`2+i8zaf56<AL;l8TtehwQk;7Ki>}#(1
zFlJBUut9N@%;`vX+e>`%`FB%i*+U<)iF^90X7COOK#Z&-8edoN2%z7vIaXfpEb|v9
zM5X;G%l5Z?&jpnE7px$6sNa`oEhIBWX4JUjq;RN0!awASmqb*)<hNexAp4=Wj&ty6
z45?;#|BGu9Ef*X*!QIzuIC)rgvYIDYHQ<ACSNQRh(scZj5rRA<;OGav)#5U~^4_Rj
zQFy)3*>()9W1L#@X>(YIZ#inE-j^}Mjppb@S6x=->fWbajFoly`@xIb%CaZ-7sFL%
z&Zm44JiW=$qo=<_>lt&>eV=(Jw;)jGQz#w>2Zyu+6qt`Y^3ig0+!rE)-;+K|X-FwM
zx_l4*n6kY*7Wa{=uqUO@<=eBzTl=E<D@r=(cwhtfl@r&CN2fnTJuxO4rOKf*a(Pub
z*B>n}O6xiNBq&7ItEQgbxe?Q~jWZ`q<ixgTSGLI!(+m6V=O5|_Gip=^r*FaY%0Z!=
z+NT<vLvQ7}#0rHyv?F0GGn0OsbW&kX8byl9-1@T)RASB<6&=BKkdZ=R!6=xf+P3o&
zaXTAq@NmpY7InKliSWI9pQ?b}Ah!=Flmx~9u%jg6N7`{^wu0hZ3o}>Tg_<QdYsru5
zO}v*CBOB!GK@OWLzU>~|XC5uiR@_i1wbQ~3407KzmGlLYSeUnt!__Z%|M4jFF~{=q
z4;bnY)-90}D}&!kUs!iA+VL!xC=ldrTgpp3Lqj#|8<T7lI&36`=4ICgtA}mXA14S9
zFqa?_C^HwLxT^};-vY~vG3#;L%+`2U`~7%XS$37j+Au}T<>Sy%4l~tWkiq%sVRt##
z7&mE)NN`hJ{wF3HBfIR6DZ5s2b{eE<$$Y?`mabh-6?d~TaXY-5Ci4R|KXvySe(8^z
znr+8aXt`adI^oOyFtU{A_x#Ex!kKsk86<tMk?T`PjryaXe7+SEMqU#hskjf^Hz%dL
zD<oi9M1B&pol{$)j^kp-JIM|2tD?#a3whll3LYuIP^VLZq&AA5e@lYsg;lZPIP#6v
zjpo}m2hSHG%`5l{PE>=cYGv$?mCtRBkgq!@rci}MuY75}1Y9&CCY7>wTd&@d5_8+$
z?hx#@P?D*pWE#cz3{M;-S(TM($E$=G{60}8SvfHF;E#gw>bOo(HN}p9<MeC0*+jw;
zZH|4{`vI!u4f6}!Cp`O*5v4m~90rtvpi(!*9eR7^x(-fUOPQ5rk?{V3NnLvj9cPhZ
zzOLm;gjoZ0&`zVXT$d3S+1AHSLDt8fL1eT9ht(%<qq8BlsRJ2~V&~1eLo3I39$xPR
zEMK3^v&)jM=Q=%m)+Xg>#C}}2)5f*13rE$~7%qz3b|BfqO`A5P!I;Q6MHEy@u)`11
zmzg`u4rfoNQ1#Ex=IFh=+K&t4Lux9b#2Wm1$DH;_m*093ox~`><Fee^mmSy~dwwZG
zATESg=_G_mEGv1hJ#V@96dS-PDIY%@$d_WR_S_}jk1onw*vD`DbcK$mh|a=ou>)V>
z!xHCu)();$>DgS2?8ej@55mUB|C?#0oW@+=n?pwqtI}Ge!`8T4ca>>pZ794kkEX0-
zt^Ra_aE;PZarbi?>_h?-^n}r~{o=k88EG7mCvL)P{@o(Ma)_sXZuWXz-(gdrLeM)_
z>LeO^yU;K=aJ=SW7I7`9*Ukv`V`?B*cfoJ!)MQ}xsVpJ3gt6U5TfblT3r{^y>06`0
zXK}BXaP}V2q^XY)jV>?1;$my0hianpcSWaH=;uKmhH&4W4KU?mN71_<j=RNpA!4Fe
z`;P$|na^botGcW5g1qWJ_xce2klkw3>}qog*rjobmtjz#VJX3(8~H%~x<*bJYn3(x
z8+-Qpa(|ANST)p`78$#5fhV?4l(`Up|N29XSJ7r$F_A;}7dEiCUaLMX?A@WBGDYqr
ztDBE@!;rgBtvX4A$uz$nX%q0%C}vKSt8erlTcL3il#Wt69G&@|u2)#6H~Jk;ctvQA
z%rqD(&|pM3;Qb-|ZdX{vwp+dSt$n9U<8$Ut+1Ecrk!0?yYXM%$caGes3M0<pU*C%b
zHBN~lC74|}S>-GNGO#N>>1u4ZI^n?eD1X^q^t~r?g@N|4tNa^<z#DcYhUW#jKNdW?
zO08f7AflaAl-M@}KDs(}GFTyyxhqsLnvzqo6|%(M!uo;80(no722uL4^~RpJ=}BL5
zZ46L!x<46m%C`U>C0vq^>Q_!#BBUPDw@yoRqfDc0ktLI-_e<wncBtQY`B~z_m#%OX
zD1&B@voTF!#GDj`%TIOyI300oM2C}JU7&9wLHaLO9Rd7?_$<xkWF;rm%X~s7$QjqE
zlDAxF?2!f6*`dbKCOwycDjO51Bdgx!(hj}#T^a@TLMjzWe}SRsrkSq>3{g;Fb!DOU
z{9tU-lVXhmZ>VfT7uWZsBn`ocgY<t~t_MX`_Kn%Wj@wPG1ah@-tJllN=4*GmxKdUu
z+mmn(MqsFOEX2s8@257jCqfO*Kd)PM)jdBwg1cs|^hk-r#H`ffDmrDIJ{)``AqmrE
zP&20ae7T+5U^|b+JEPQ<?=16(xGi;cTF5K6BOLN(b`1(?SLx?|Mkm2mb8{@3f^kwg
zJXofzWp-0LT55pg5uZKNO8E3RJWFe3)YV=99a)FA-+=Ltl?iI+5c&Xa)D^AVWf*uD
zdo5@Sl)*zm)nar6zZM0y4mFY*V3D0S@%c<ZNjhQWVrqBGrJ3|2AJOQO0}zl~`2w~H
zeU2BB1;-v0nWXt}<oKn*M_N$%Hvnfqpg&D-_5N^$)Xt+Ng*}6L*<I$t@$Qm!`HIDd
z6PC&QnMyvV7KV7H3RkHFSjHTK97dT6DsU0~Cqk7j%PgN9drUrZxScG&3PA>($H;ii
zIV)eUMpP}TxylkZAX?;rk0G$gwZrmodH<WK@Ce%-`^BKDBi`YcsxhAm(?(D%Fb|h)
zYtZbvm!3t5PNt+Lm&ZbLGZ!Y5M7&CCJyQ}T3{0H(x+v}e7v$rr+z$6Y7#aD<>-)~6
zc6q%`Etz+}UJ_Km9X!7$uTbPuf*l!98p3V;1a2Okvb9gi9?U1aR{(`niJ<QI(A$$u
zbxG!ZDOj%}WoraqeTw+!u6H2q?!L0fyYZg7e3*fx&<^XyS0XAF;%&U;`7z(qO}+Y^
z8@<P2d!LAZAB}VeBpqTPl`2k7PE;smsXw5IB@Q2%q6&Wb%H2rclQNWdr>C2(HUAy0
zNpC$iXqzKNb0#h5<2eV=j$%`g>>eb$%+m@4KM_qtNm2c_@sV}{iFQL*2MU2Ym8YjZ
z0J-j+J44eO4~i}Fpx)Ro;=7^7_ICBHln@aB-i%Z|IA7}Nf+y80(geB(Olk$}#GA03
zWbmV2wAT_pE;b1KC7TyfVVBx}KLCC*kRwp>`<c1~!Pa2|s!si_5T|uBve!p~NlqE#
z2>$lndc+Ct`Im=zwK3zp!G4={6%`tk?z~O%<k)tfQuE&Momud&<KS0>;9k3F5Waix
zNqZolDKJnU669vhzaOSQ!cul0!0$c!U-Fo5?tNFFhs?qu3d#nnHu7n2n`M*lFJ+ee
zR0`tuaLC{-=kK1!2cT2s;MF8Yejo-CJ}>I44$WLbqV>P(KrwB3>&i#vsLU6<DZYd1
zB-2^8@|+L(qfUe-8_w6AX1kJec2Ua(B31I<0#<d3IofmZM>4)O2{hwk<4RDk(~pV~
z3QLErl<qg(3Q068er-DCckD}-qdO4*n?V;DX&(20rqKmU$iDFuIeB5i5^#<%O$K~9
zM|N^wjJt_$a@fAg8Tu)KTYRO?t`ID;F*H2<*(nu@`<ClXp%*o(@8P84(j%@bb?1lQ
z3HdrYEVC+RSD!0Y1&fT^cGpg3=gq{x&NAoy@Ip7-fb&MYqZ}vo9Ti)OQDfKP8#u~|
zhc6L~j(s?Gp`rHZY5-&Bsyw^x8}|Cte)@-nYkmnp1Mw4Z(9Qs$Q6DGpC1zEWg27Ga
z*_!-2ne^u>R-JDb9OJUH*?Prq?9bf3pN-n8Z-HDuWwU^}-0KGYvY!>{A>|HZ<&8oH
zGr>dM=evv1RDx`^ga}TO7S!kd>lm>=ze7gbH=J0;DqYOG_|Vw!_HX)4|3a-Zw@?;8
z8h^qQl4zh0Lt`I*yK)Jhzd$vUYwgLPy99OYH+;bFMfE3NmSw7fO@xm6v$akqYJJ=a
zCl>aHOq0Qu=syzQ>K$6{&2-yn#|0oBkijxu$jpyWKN1OpN&m3Kir$LpXm>BsW7Hk5
zidRz+R6O)ZNAJ4f-krJMG0C5cnqJ_B66-miujUn96FSpKxg+OTe{3ZV3M!i;uFt=(
zp<4^75KxoD3RX<`?82Q!zWscc%{9a~y(EkBnGQ<X1POxcdYfkij?Gy~rSn|JC@2_`
zQ`s5ry&t_>6cy-*F0HVLo^N>8r9F0<+18pp|5Ft3=Ui+z0ANno$mt>W8!Lz3<!Gq(
z1z|=r{_Yd9TCrV>M|`LqzEtIm&_n;ZC{ckJIj@QsTJdkw@zE3hKFVmAPbDW%GFVQz
zz%C5z^iN;!&MWy30OdLKD1H8c1k~*`q0vcv*WF8N(<}D(r(Y0Lj7o1E?{>@b#YpXh
zRjj9&N4JjKW@H}VU$D)S5WuzLW!aw5D|EPypymuYJE&;rl*;O#$ljFbSpcv_?l_24
zlUD2A7TOWN-+aMwJk@yUlANwj_v*0IDL~MT(D}n-_h?!Fw><?FlW#{JI+dKaY6UPE
za7NLH^130`YkhVVl+TY}MDO%>pUcsoY=4dM=XN_Sb{rzi<tnU{cUK5HAX~v11id>l
zZ?iDe>5QeuSgLh8r`M#9^<pN-U9B8#2Per3u>B6!Qd6h4UQwEC)qi2WvY-1K`?7gR
zfM3acb3CM$1MSlJK-w58v-crCG+e+SV6h`Lb+bBi!6VD0oW!HFb}TF>b3yiOhFHzb
z&8>X77O*b#r_tl(^?HzLc{SX|rGH**bC;>&*q4PHtyho!GANy%ul{JZL-@<JfZib#
zaud}C%6bOigcAeKPb_b(@_TI<`2c&Yn~Iiz0p*zcpr5W%O<{AUrsw0uS%FLE9;==z
zz}n*$%k|x@TUu0iWtqg>p}0Sz;`Ry`?cR!m1blJ{q=#F|sUCDh!vN_z2Kutl$@*Cf
z_du3$`23?uN+qStM)_7vwE93qvY}%YYro{j#7`#LD_n+0=#n;+)>WlEW;g`xkOHCX
zm~>5d0LSu|YPY(4HTy`{H>z|%n&6|gRJn^gp}aJ{ALHCDVqmh=-v3L8NP-C&r^fpx
zGg_jJKGB9b6S=(^!&UsF@CFEp+qUfKk_O0{sdLAi=<34gq#;cyl=$NqwI8PCWKU?o
za%M#Ux&4_~;Q4K3nznAzljg|XETaC~E0a23%L97;rwZjUBS{cUYLt$4%MAC4Q|q7Z
z?}(Z6a|ET4v)tmxC+nkSlUAts7qwAc!7?5yp)3g9Q+K3Po%2?x^uaK*pwTfJ+E#xr
z){DBIv!La_s+;=8$7|drv;!_HE0~)LWA_&e>%!0CtAmc#`}-}<+1vK_21^KR2Vz}|
zMd!r;LzFN2zV{p5%dmDd?lTOy)PFpM8=z<B0)mSZHtYy_*sy8ZS(BgUBf-ajZu&tP
zs30?T?OVR}4_pgUwQ_c?<Jq;6hy%7>r0!;DcF&k#ogNNIj_pw&=a+Pm)gjrk^a6i1
zTu-XIhUMwRe_Q0#z-QcJ$oNe|wltxhvByIzl(5}kSoAd;2Zv6flXZZOr;d4MDtRt{
z2z_1eo)xV5x-dqJ{*D=xt?-t#uXpdb*OdRHYducg&m)jyb*_D6Ci9qei!yW)9@IPB
znAr8NQ-d3Oj#z%=yKvBfX#m>^Gbx<;B@4qf|M1vzZTP+orObuj_?!VmwE0AD)j+py
zpTdl8y=bW$B%<M(;vf5sSA+`!G@(%7%jUd5BPs|B_jP?W^`6KRhX(_CMsn=et#!65
zg~D+GONx~lq@FU?rt{@QnziJVoC?-ya|&C~%$PnidQOaHS))-<sVTY?aG^>$<ziSk
z#<n?Y&-r0}>82TCpJ6K9snt7Mpl!;~btd`O34k_s=$z@XeK-|*l8c6hDnsF<pHh2r
zb9eGThvi{ED`+E1l|v7>81=tCv_Nta6Aaqh|LgAM*EO<??e4-I7SX?iTm<faet1KK
zkUrNhO#VN9H%rEdf_WygSN+#j8_B`EnPwO2@*h;yfX$cWNwpH8ZSuk}|K~?KnD-VA
zX#V}@Pk6(u&^fsAf~w<x+Y8ASn0J@s@qgJS5CAVQw6)t>uIQ5i|1otSU^85~=|W%r
z<9AQ|o+E2LpE#QT%0VeGuM`2re<i3`4Y0nZEq?qz7DO*H4dz|CU;JOT3F53VVExF$
z^!Y3QPo)1(r2qd}>F2|w|FoB&I2>?<!?N`ktAJCdlzwTz8~f3ERgukMZbO4|6+1(_
z*6kfdY?3fGZBsoyX&T>qZssL>j;lP(r%?%Cv3|F0$^7_KE>br)WpfsBaQcMr-|Yqh
z;VIzR8HmfV82qlkvrH4y=GG36UoRNLIxP;yfc&Af`Qj9JH-whyca(%?G`)W<E&myw
z?PsUY0pD*Y1V0c(_HyZdFr^BWV+h5l6A(8Wj)X#R#H`thwN-S!V2fF2f2nNE$Apwn
zb|)Fa8y;HK3f&d4A2Wl#R%L>$Q1mGIID8%&N-QZ%sGm4(8wl53c>kjNjVd#neoXwA
zU$VZI`6%glIW_FQNiK6${y3r^U~X!YKo(hH$a_Iu-2n?BOo+p}L+Y>kJS$^Xz9L_7
zOim^cIkmq8ii}R}?P;VA9W~7@#Le-w3SAleGnhzi`LQASHF{>Ua~c*GJa;k`zan*Z
z5)lS%In1uq8_kQ_c+Cur;(}KcK0+CS8zaR9=lgK^5?>)Gl!grzlo6gzYm5`CHLAuA
zbpwC?s7CFg58t$L^)S-)ffG&+>jmFRJaX*EzLrfte>a+fT9K6DNtSi5GV<9;6xa{U
zUC^+&@wB3RJH{mS_Ssu87KkO8ieZs@>dkP9p!Z-;Zhc#rkYD)DT|$K|D$d_=7K>8(
z`jJu^w@i+lCle0Vdb$0558`Dy{XbbBrfX)J`Yw{S6aEOrV}Y9G2#PKxIT%{ZEfRfm
zY4;uZ=HWK@fah@qw5$Hy{&+#KAz_979k2P7=+<g@I8A~5S*G5vW;m0rW+srFEw{(c
zdm+F9RW8!L7f?@dHDWyc8Y+(C=)H5LY8e@k^{Idr@x<L?YC6ELEu-G=p7~wfLI2?}
zw377vI;!tH7vOty|68VIP5xxD&Z7d;R4S^Qnjb_Cv??8gjRY5{tF~GQf6&uZIX;}D
zuM<#0UQrc-U}E}OLTK|Dv_-&zmYJ+iv2U|AikCbcpyjZH&{Q}i>;}Nn&sGv;Ejz2C
zcW6YsU+y7<q0gRGCW>;A(U7VX2Z{`C&YjWRlCY`FhglbJ8<$n~+dv)mP@|^xY%z7m
zDdVn#JbgKSaO|be&VBi|VAI*oPfBnhY<N9f=JK3xl=^{6y)_BWq7OO*`nsbAWe5mj
zrAca06@|0x4s~r__c5<f8u4nmN!4R*meV~9V#Ff8&741K5=*eCjAp3iUHejdbebfD
zs#h~m?@=8SvHuDq)ufmAv|#+BNGCLxv*0wgiW%NPLI-Wvi<(7&wE_iuOYX;L_61`}
zT~{sIon6sv<8_t5v0nVbdZ&}uy}sC>)0VBe1CLviPnP1Ll9nk%cv<RDn*Gy*Rd%&U
zwVdrk+=TNcl2~jSa2Dd{+nA}vLoXYxv-59G94Qw?a>@$!g+qsM`UbfAJ$Rl%GfFU)
zI=a~G<r*IWK9?tPAK%Ui6gi`F>*xPS+_@b(`qp5?X;{qKq@n2o3J81!8Le#Cj6Kh?
zjxqUWwqn;e*}JizBZ*TQ?R^&fJIWp-f8X`#aPXt9(Ve#rV&w;Iv;rG<Ld<C%WwTHQ
zeTIy3WukuVPx*>f)(IFWgB)sF8mxOpMxs&#2-!=L7LVc0ptF#e<s07`>M4+8+wi(W
z1ncD-A;;vxF8ykXTDPN{CN@yEG5+8YV%ya6OSVFfO^Vjg&+^x`DcOFVc4zzkfY(`+
zL9^K7CRFF5MW}=GruD=Rm_0?`T@8Rhv&-gNMIkldYNOl?Kd3lRGyH?w*{dR+{SUWr
zqr@M)O(TVZ+Dru=h#VV|fFdBUo@#l-)dER%f+j92EFI0FNX%CXWTc-n0;B2#Zp_bV
zClNY#mDUEf-hwC+ICpWAMNa54W@zmbO=)CPp5jIh-j|Kay~7X>pcZ2&A~0Ojn8Xod
zK;kaqT72;RDA-<G%3eQH0p0`6#&VO?wpJIGcYwB0qw0C0pgwSw<oH{3oxF0Ul|}(R
zze4Q$ZVJiFevgOvV5_7!68a3seXn*9f5tGdY@<h_Il=4!+Jdsr@>SR&iIl~;df7X^
zw7p7z#Ue?!edHN#fvasXvWOAL?odZ^#6|;0EPmR(#q-pN=SpWdW{>3<79hTp1J#UD
z6A6Qi2FWQTk!ZvC^%72QtB_F*Dc@^*p!X(o4EVwR5FHj`yac^KH!C0iaOq<R+8G&)
z8bI*><eUinHVu4v1Dj-+HN)e@ASp7#BW#eB4V#%7wVcR5lcPXQsuB`NR433H%W@+d
za80OeUPTm8JpEqZ$1OVLYEaGMI4d#VbFtVIMy$h`+<HvXN1&wP&Tw0LW;{b|klc|X
z_@jaIO}mm1h%@mmQ`f@f8NNcY58GHMl3r3V0`kJ1GQGiLQ3B*WeI5Mrfl5X}oksoX
zv=^4Lox9@-P5n@PkV8H?<r~2+E$or_LC@>IrPEu@+RC_%mI}-9(%n%KmBPSQK;=VL
zOI1Ky>K+-BKRDwG<`igu^&nB%?3bFL#Z2|9pq4{A0j0f1-ss#^TLp?BC=fi8LtHN~
zjH4w(+nstGOd^XYXr3@-lq>$ZzD|k)5QHlCjlP$G;*gQ9R0)aOE6h|Kq->v5Nh_ZX
zJ`Bp*0}dVQ<my#>a~zOdwy<Y-gbdOlNeT_m;H*!?doM_wVV9>Sxue%OU_#~gQ`JWp
zsLLZ=xH+>~J+$0yG1!BUOg66RxsR*1YS2i8b$ffB$u(Nn;c3z!55P=}AP&e(^<4x-
zfq5J?Ad=Ei{F5GAt}JukE2t}u`dXrDAseUKH(-@4$=7V}HeLl3TP2X^avM(%E;$iB
zukte|UKz53n$d89R2_O9vp}-++IFZj-5e@^v_0Gb?N3K#iK1fyr6Jk-ZNto3nzvbj
z2iNJN#l<{D>$vGJ+s-Fyc4|3q@?V^;a|#O!+p;oF;W6~!T+W4CN3M)`%M#Kof_!DD
zzLKaq+Z`&zXciJ^TPI-kIj)Tb1VeQl+gJ+h4vOjbww}jtPR1cxJU;h89zinvM0;xb
zmEZK;i>*Q+GZG4jn+0}pH_1lO@*soV&cerZ!%;^h^6R}#(7Ov{Dm)<01~~xQSXyD<
zpI)L*XpMvCelPb|NOq&h#Vk*;ORwR}9x)pYT_-mcKh&^58`}c6>#Pz(8iZ}XEvw{Z
zi$^Yq)oO`ze!$+<z@)rX<?pz+K>BngZYsyRp;6+3TbzLPEJi~KWY*&K@h!g^oYgqN
zOdP(m3Jk^<Gv!&dIOqW;c|MHYWDbNr1~WZ=>Cul)`4*}cx^ces=2SVEr2!LzW?Tmi
zqmLd@gW{@$;r3^Q6$v4RI`JVY;IL@pRqzv8p<PD{PObt22MLlc6t>h<r+*hzdmr&%
zBI2Bl$$2Oa<N;QoCc^s$o!o`5jMQ2Gmx=9wJlSkzK?;DD=N^!!re+%tkmvaK<`}3i
zAT_&U&7tGCR(KaO@}(#**>RufuYrBSvjOzI2B%tRQPzJ9G>y<~`*XtSY=pf=dFPYf
zFJv4;s0$Egq*|Oe+R8x;<o;gW3W*rxBVcLpGmrVpH9hR_9``D{R_=|v_=~zk!Dc9Q
zd@W~hKbr;Bt*);n2PgJNAic=jKLdaj<^#=r`g2&e74oj!iGZcZ(7)pUI8C23;WHyD
z_FHI-5?ZN=KP0~LfN?0B;3ceKW~w6hm<b#mjs?6-BP(=^dvi}G2>K+bQ&I%i^GhDl
z<VVV**b6zRTn>00S;$?(UbxLSE>G<!#}fg0!xRX8c1gM_5jItsJj2;35vsnRg(VeO
z;TIr>1m`r}vX?Gq*sre-_kCmCimI-z{=Z7>VEJI9rmznAV{5cGS$=)FN#k(I!cDe+
zP#VQG*9_|JmFsvzoHG*aX}9M`9|Ub}ik_W{2%BcnfaC3qB!#-)Jv0S$RB!*Sq%&fn
zv(%{XJXtdo1M*a}Za^Iw;Fpsh*SA~av1nZGH9pCt56o?KxmWW?jw(Et1^&tn6{9&*
z--zJ%m+gputFuXp0M4-OONK`3{_Q95HJmhKn~z^nPX52v^<ij0%Ue2}=)V=`LCttQ
zN69H485sZD#CXkI0MV&UZ@xq%{|#(_J_Qhln)>}%l7Fw6F6fxO0jM(3dWtr({~(Nk
zAF>~=ijV(a@R-*mVphxd`|`dfA4cg7*57t=G?*_a0o!B}LT+>YCtfm#ed4vrr$_6O
zI`C)E#}?-Mv&6O6eCl9OAB?3&9T7cv9B7hC@WM^(f(&zDqSS`&Ea>yt&<uG<PNWoP
z&sI*Tw0rkm3+))WZ@!3Cf=|Ie7-FAeDj``LBJ))l>jVa`vr=8q%7IQ41+d7a(UJ(f
z0m<2r{G==M%<kF3fIoYCk!gKdzqLJ-p#UPa#azH@`s(=-A~9Fq71S{o3=Y2m!sqZu
z#wQow@JYp-doTsEd^YoQQ)h*cf5cFv7pWj1oArS@gK3faPqL<<OYYr)2D)Wm<XmVT
ze7WsB`gtM~Szh6oJZ4(guhu;+eWm?_pMRsFHD*vLA&}~UDfHEjR+0Lv4DqWM)NTWp
z9K|OuaG^okRzc|#zHR)cwCi*Wtrb@7(uAmP!yz2loZ0k?Fs@Fb&K)Fj?)@<quF{zj
za$+``57m2gJtzai4T&TDm@7W8VfK$nYRwW#U*;UCWfi@6&?Yq}l^A}hp3qUWCp@Qw
zA}_jB1o+RroALV|4^6KhOwXo%o1M5J;MK_`@MId9x~_aJm8FixuRWXYUG4c9q4cU>
zOBDP0z?ggg`*)UqYVsD|Z^IM6`u}b*kv`m$F|2T?t1aK~I36?9YBQyjUUoR-Yo>$C
zIwp}We*sovd}IC;2gh~4tuhKm9b~fX{%Kpw@BV@9t=o1L1s>_ErP*e03D!xxp1+Fz
zy>zMcpFxcg@V5zdonp%?p}>oJG2QsMyCd0(H(=QAEU&15GVShR*ANUYEbo7(C2W$p
zw%ffe>h6J*O7)P}VR;qddCg%wbEsxpt@}$POx7>0v~<&5wyX9xohgIsBa-EhXv(nX
z5wCET6FKdhZ~f=O^OQIHy<|s<Hf@}8LX$h<4x$e_PBPW#;|YmV*+#c=W*%6_suuog
z=(tvovYj(YaBiz-Z{M2yVKLfKq-v;a*j3a_XWE6ejR_$IW*HIK%xg@Zp_gqJ@Eo`-
z;Etq$@cVTK=dWMry$~j<O2^#0g=&2%M1yD3VuRzI(EL_M_Do$!>r2cz%Z<_G31fo#
zqUT<T<43c6^PhzI+JDi}2ogmBd(oFEpHi;dTr~>J+3<TkeyZf0F6V?hB|pA>{LzXu
zs0FS20yiX+n6y9ZWtY|ciFo8^`SHrSVyg(P<eC3^V%1DDBC9Z)_w2rz^u`h7O$oqJ
z07IbIAhjZm9Y(umD8nB}lt+~7?ADz0i=Xc(+RumxYdws;ZMK<%_MOe2O#kR<dq+dr
zs%M3iO<jm&7~uT0=lgK!q~-uF`v!sZdExHv?mg90g<12*b9b<W2k@rcyqE~&dO}FW
z`%mF<INxtLl$%hAx>o4@GLG3PtmDv=+K2CK%ffknPkDSZ+UgNH-VOG{GWGBSb+%hR
zm>~K`@g=eyqzQN_`KI_1Fb)cA1V+RPpe5h2TSh|thMtt^M#u#FiK;)wiE|-z%qMrE
zIcAi#Oqmho1?|-cIK?<K40cLCX?=2i+B~gt7aTZj_u`hh%K!&Ta_oMTuLjv`a}ST<
zy9fnYDj?^1P4EtM)d80hxPjU00^W1frm6*Jp6&feDyQ)I?sL0{=I!b`0k>6fsA6(o
zwW+8Go{X65I2bdjW8OMenZmjYp%>$F`Ar!O_rQJ);ziL-o&%nHz%hQT9KP5U!%wg&
zU85rl^eaqIhPcL_#SgC28R3)lAR%=f=wV*y;J0@7-G8>cu$}|nX4?-U_9~DnnN78S
zhc#wma{7ABW@5&HW>l)#@ER~kQ?Y<SQVyj++<@zuKkF6oulI8aj`(2LT&d7oOn(Jy
z^~?WU$FZSMM6FL-CvbnR{hhar!bPB9U;$|l_V?SD{*p0B_b`oilxe5zF0!n@+@9vw
z0S$BJX=L0hnyHop7pt)^1$k}(izu`9F0W5t>-kG;ZMw&!U@pIxw6NOouA{@(*Qaar
zstkHX>g9aah(ykTBRzG#*LwWF2e`;t>+O#%{>Ic1fNfamUi88Mqib+hpFOkuw%a^W
zh)s9yb?zqHNu}tg?AO(OMsII7u~;B7Ane^f14KvoyITVC6GTzHNQzS>iVQtAp!yfG
z$}$3yYlC4}&|jEbM&pbhJumPRy9Z;%{x9rDzqT57m)-d;%03mU{GLM=Hlt)~JC*8j
zC?|cza^lwHaLw0>3frGaHzr-Z88?o;Z<j<v`GNZ00Q`J|y_^`{+^l)&M(}|9!oIw`
zP9f$nz!{Xr3tN?4`1!{TGWM-t+`Z48Y6#_@8uK<S2b+FQD$Q$gHne2@_8jgS+@l6I
zw`KA}an9w(4v$k!MB3zBbWuO%a3GWvy;jiA!d~=R7cbkP70|hBUi7bv4+z4Xz-<XV
zILWB!f6c?iEPS>?dCN$u-|nn`KSrzqxd`6Md%j8BTD<6Qv9f4cZ8zwAvfK|Dn;NZ^
zD&8;+mz05xb2EbkH466g^;ei2K)MLXzG7Vpo(lMav%kHi7QPJP(EPlDT~A-<?Yon%
zA6_XZN!>>I_UL^I7&;`Tbq`#=D=|6RSJkTtzjd}xd?s5pAC8J$cNmjYEMUgVS*!8G
zo{a`}Vn0HjcHkxo!UYZACSC%QwqaZH(KSdFcJ(ONT#TNdr7KPaCF{^qbzOo<YUOM@
zB{7`wVzU{*Hje2oQ!nku4CD6?8b2;a!6f*m1-a6RXy*rdc$$&Kvc*e`J0;{r$^8C@
z@ditb%+%Bf>V=dK%B>#1&ma4`BR19px`X{J*UQT$eaq2i?|HSHkwg*XXB_v|$n`Vw
z>I4eb9VWj5$j0e~Q`5Sl?H9Wphl#q!&x+KIw%0ZB)h?xMfiA))UKLz^tAyYZ%V-~L
zR8`d6<||0$a$53f38~0*nqgcTG==r#TtU3AsrsH0aN61#@04)bU90CPxer??f*(bk
zE#23{rbdcX*e9Vqh2Hg`b>Jhy-rvAxBA7@1RE`XsAlV}9;hGyV`|J9~0VmwXw(u{d
zblZ8gzNx0^mbc)^XIZ_i)`gOViL}k?ywr<DXSRNYh(g}ECrlNaoO)MWt)b_2KafN<
z6}5m+GNGYAH5bi?kQ)wzDqt?2Md1B(e1$W+nwTmye`nKdl*?^bt->2I10-UJ=yFJ9
z92(`C?^>GPFuaFmMwRXKg`>j2Yyi=_;Y#~IIFoY6x%RLrdXP@QZpD1kci<I8+B>He
z^4W$7y*VOTo}=g?>z0spnt3(yZbB)RX6de-PN(*%DP-ul*i!OG7YYKG-+Ig5&!eF-
zAbH$b+0wrcaXDyP>vf3f_<HKK$v(<OUYJrwY58F4zR8I|oxsGw_TU80dgAd$e6sRt
zVz{8p;Zg11GesJ}0f^ivztka;>nXmQIWK7L8P%Mm(nr*veXy=bNB-&9DdB>X`|oc~
znkwy&==qB7#d(YkwV&<pT1GhSndR^;4ufPx{MrvIYytw{Wn#nVJ`(hBkw1KWevudU
z@dAIj-hi<agASsx7C|0kgW>hFU>lTr)nV+?z=}WR<hQ4T!mv%V1M}h;Zc=~~sLI6=
z0Z)J7bQ{r`@>LF&xD-={4U+_*nQ&hj#fzUZTp=#-x!LF<S29|Bv?D{`Rf)mSI@Qq9
zkJtUj3>RZBKY|iKuQ2%=guUicCjX;i=^+)A8{hu<Uh1P-8Aio<cJ)!K)TJi<Yv>Aj
zPtKtUsvF+cv&fj*!RK$SpG*SQR|}tM$9oBK8^WOCw-16U{qBRDG}keU@FHIMUsB2E
z&nh2%k#fdyIv)nh{(f6rITs=9qLB0q>`=$}Y|%pIVuOOpaS0b*dYG5wP@H$;$o`NW
z_75VUedx-@AUrnxJ;dekBRa8qxr=#8=naanQ(8)|=QkFoo&P!h3y$}+@|OsB$A7Ed
zhPgq%w)2zP<X>k04_0Af>+paOb@61?-iYi!{$Bu>9`+(D!hm=Z4h-Q~*Q}D<vas+9
zkC(*0&2?FTTI$B1+Xx{oy`FIWZzcxfKtMWj#kF^EkmCPdsmsCLGd@f^oLf*QT-=3z
zpRwo0Wu;$D=4CXc0qWPvS3={#)Ox?r#|-*7FNu_R*ix1YnVE7rI&^qe5713Kmb>5u
zxR;3c7Flr*7_=W}c<F97YDyY<T^ZCzmsr(Imk;XAMk8v%?EsJy8)B$E*Cw_NQbY-y
z3+O{NhoDO2;bl#&(Mh?Ygb`$ccYz<oM?Q!nz$PG!ToV;2?k}e^#6n!4o5rLU<$Mmv
zf%Yewg#nVL@`LBIi{*PX(vk*XF;=6cEZtW|?{1SI&qH8S*^3eG0B{oci&rS!R>gt5
z!ufTLmS#A&tl*(%c{z6ZS9IQ*z?9(;KFA3mNw+ijLp$*cJO&M<lx2wVLhyz!!GdVI
zDi%sxQan_^kA}@su~;qewr9*GK(HWw`zsSkLnFEonOo0EvJF~PkV~RJfjyBG*p+sv
z8ld5U%2yyPWu0575JMITQu?^e3-53im4bToUWA(zb{{iv1k#piA@2tV2iq9IyA>85
zpwsmi<kSHh2_F<TSYqK};Z+2<?m9bojk;L5F~Nk&uenvV3e;;!hABs+e;W{W1>&-f
z11>@N4&&csF2$`4;1XW^A>mKW`q7&#h3F2Q>vcgFaM}}1%w1bXl83<GJ>WdJixKn`
zOh>`>3#m#e7O=M+#Ns$ot?yZCPkagEawtI&Bn4_`j7CF8vU!WH06V$PJg!6Ss9L~w
z^EY@G)(wbRwX%?3)H+M56DW_%kypAE%}z81<P+fqT&L^X@tizp6%XBPT^Xx$nx4)R
z&A*y|QAu29CMmpI8r@sX7S8wvpkqk@9g92aXVkz;VKvh!iq!v>RXz&BSe`M2mLBsI
z<b9)h+4Cw{AL`|@HQ!TbJT43P1j>iM@>L-10q8IZtVco#4Z<pjpn>*gIDxHvqdjK4
zuVqIP+kPUzUG;5UqC*4E!My8ybES)0piPT!VGOsaL#CDe1px13m!i89^xr)qQ6<m#
z*uSA!_zcA@CIj)rPZ{JgPnN0TtN`+KB_x-HtdM~qU$~=b=*S+G!ZL>&Lu}!<^5y4$
z0j)=lavsl600$p;Le6B2$70%8YLYr15%)a{jSK@fb_=@$;10HqBX4$WAjz~aRWs$Z
zr_a`Z3I8SR7`wC!Pj;EvsAB#!Kv+i2{sNgi5_eX|Ub}v$K<`(V4ujspb+AeFd*J|@
z1*PP}N!yNsu2$h{)G~B%%1Fj^baV_d_84u!-|#QmQnEH_Wa+vCC?B#U^0A{Fv6&<^
ziCgiEL})=g1%mjVCBg~jiq|2_!U8e}ZAL@SEGh7^ghLv-9UR2BHe7W#Dc@VLI4aSd
zpj2#Ra=Lbp|603O-6QeMO|ha!ON!9TCc_LaI|^FrsOqZXj;37|xe_aa9mi(|5~m$Y
z)hA?NZnm!vRLCKVAcGak$yc!*!s(KkwikEV3l9oQD$-}m6SWZ}W^{mTN>B}EPg$o8
z^>-mGm&zJ_Rz&<)ZWf7mAvU`Zic9-RyM0RX@+a7((LL4Q=}UQ2eW6>bv&ioFZ||4U
zUGumdK~*b>(k081-M%Ha6<Y)A)gF_#>s=9OGa2Q&yTYjb8i-hDpl_e9PJ3j&c6>Lx
z9w9+_=NdRN&DIb!fUk}kcDMa(hd1xn)Hh_Y`-pB%QRPJ-c=_z^)NYrW^08u7^Z=q;
zu}h7HV9MD<GL4dv4q_l`LkIdnp*F@(<pB%e5a1oYcYk)Z9l*8a^E5G#tC8kA>DKZy
zH}Ntt@Uc@oi!nwZ-XC6DQUo17(Arty;&G)-26R=jtcNSp98yT|c?tbc>-y$5IpAeH
zbpP5()ke-Kc^^CQG5(gC(TcyW(lQUJSFu5RCwqB|czsn3<SX`YJfHsb#;lVuTC3fA
ztAiVpKsK7jSGQh^T&XP;j54bT9K`=$gg&2xGocC9%B{5>pH(O#^6M7oqqE4X6FLq)
zXv}vpDU#r;%jgxSvB7pH(IHdcOjK3nf72-d)S8<-|4DD5SKn#yZr`uE8(n!lHdoG#
z4*Spd{Z9PlCC~>eGT*madIk~3)M|GPqaqtac_a<zZ`8FcVKQJ+8a~?F;Fli4aT@2A
z_M(P+X0O;l3q{qu)OSQZ46YWCmpX3Yq8mB<tT%fv`^7m&{kiL_65YWjVF{pntLw7*
zo=8IWMKmqTFpt^YqR0tWg^j<BfYxYJ$%fK7#Eqp-bk?7+&(i};=Vm;!b+9{+uPv#&
zwY^SA(wa^J?=bUY1v7i?$;G=-$aLd1?tIl_wUW;1bTQdXm|2z}&WO%n2aUs}*5voq
zPy{ycKo`wY(kK|gy`o4}**x#QFYBuY;)pXs7wo!}UL}PP%ikYTJH+fkk0_frS3ng2
zhN_=#m>TR$<y72RNuYGWj#8fEDkJ5O79vqT20TjYPD<${Tkfxmk=pwdYO%RkhlM{B
zaZb4?+fEyZdBaW5T|3;<KGE$?*rY@Gun*}PNza>Y1KgK1NOZ68f*k%R*y{^&3JO0x
zR7TkTFde6)HCRCu+o#VhFg&KPUrqd)Z_}cg2$p+<Uw<$3&;6^uG`d?M35D!RbN$}!
z{P#X0a+yPP&;jW7??d|=Hz&O+rM7<JW;q?!2XU`D1n}{Ar{`ecKIky&9dmtQUeOj$
zT$h%TE7)dk*!tLm*XX>0zW$FM0<VCpwCfJf%|B>?*~%96_2uod)vnbNbZR{?Sljfs
ztKU`nG=8JW!hZ;~m@QV~sCCgU$H4Vxj-fLDvQ0?&Yy<TQ4YgC1vYNs@JjtI-K-npj
zn7(S8eK#SW-zL1ZDFo4GKY~}x-|%rehV+t_VDDm=VyV%0-OtU?)!bIgP4KM!-3yyL
zaWY1AhSG0*U`AfJiDuA`hC}+f%xAmvD~0SV^}A+<9iJ_V6E4`BxyStQ^TDxSOXMuN
z`85YEvhz>t(KbWTC9YSz<lUriH5q|YcrgjQCKwrLGSHnaQqxZx=)1RIm(=Q3bbfcx
zao{%rnL3$w$@lO-_je_58Jf5;&npTpj~6V{!VE-H0DO4NU%0JBu2B?udzfnPfkCeL
z@t(XA4K=<M!SFbjxm9@VY8L1jsXuFNjxS`@6iQsa(?784vgZwU2zaDtl~w5r8Fe|>
zYmk{(;cR^Sk*;eVRm7A2E)~~)B3rnxw`tcnPfw>ey0&+ufUM#)L^qR}i0Yj3k?LeM
zl4cOrE>QtTjt#=*X26kvKN3yNhW_V1{NJ{<1ffNd4L8>x5B6e9P~K&Ik$$!EydrLP
zo3{PHB-J}13@2y;L<ld#;nJ+kp*dfUM-M2aZ)GlKK4UeP?MiLsz}0z@6sVczawzWA
zt|hZW4jkul!vDwIR|QnLbb-QlqacEmBHb+^-E6u`K%`N+OF*O%N$Kv8PNh3kK)Sm`
zx{+?~w}EqxivNANFZT`I^Q~FE)~s1G^V%7vA=iJQ&8Co#w*47xBp&U+`-EV$qLh)!
zsnvv6L6({XmYSlRg(UIA?p-Fbi%L>G?&MZHZn@F3MHbA!Ve8xryS?d;=W57&1A;oe
zt|zK@3^laJzVH-LEm@3@eBW=2KRDT$lPx@@3cg>ioM8~8kM(cojWOutW9Va8yuIPd
zgxXW10sh*vHrGdiJ;Jc-5h@p5swyjreWTO{0l;yVU7|azid`CWKURS@tMBonzF!ZK
z#!!@(pHRHv=GmZ}-COGd7Pr;yQ4>ls-#?Skhqvlbw3qP7hIwQ1PAoT!1E$$TGu2VE
zTU9LE?b4T7S-874rBF3!Z_d1i0gKZ{oxGU$68rlb&Xdi}np3h&TKLXt&A0If$_Y`d
zYr+U`MB`k%<(%CU@@b3o#vhJWIJ`9lvc1K<w75QW(Im=#K2{CD&(E4Oo=*a?ZP4CP
z@4sFr+QWD*fOKH@8*9Qs7Hhy>*2vV5vF^KRM}r?R(_rVQtHokEl6^pzq_@(lZUJ^s
zohVY(=Cj2?k`>I6!c?FGrufYl2^ApMS|WHp>apJj?SSg#>wyOrv1&jbX^zv++uOU{
z6sW(n;bh>mv$9^Z`&s1T<=9+J$rFpX9Y5^d3X+7VPvt>EomuWDR$a^=d&I1N!0rBU
zT{vRWYmUdVUVa<Z_SqJ(I76k7Yj1C8g)F9fb#+C!kiUA+KCEi&O?GZ>81^Ecz&uzr
ze)YVp@e2vw$1>Z@wNJ*rk7>8$qBLb<3JBO0<3ohuW;LdV$PuSB#j-KO{p`JwGfhf5
zKUtVqL?p;muCVBusFje9_nwKi-<LUem*UYjuJM(Cm^QPWS9<NXRiNqD0r&E}TzJ`o
z7-a>7ZQvkj`&eFXEzKJug^sTUV>C=14yZZwkV2`wb~lU>dZ26LlyU02Zc22e=dK+Y
zUjCxR$9_Ig>8#1eoi|?`@?UAnd*CYvP4l&NttmkJmGtJxtid4A*dxmYPk?kurnwvy
z<yL5)gA=}HZ}V;ED%KP~(AmD9)0SOki22~L&lh>@_!J7~-5e&@B};54<+|C4=`tpE
z2-QXTVF@+}$Tp)S1M7u=e0YU<Xjq8^L60wkCBT(hxKL`;m0pjlfz=?oW_Q@i>7Af+
zJF=1Wn}JA-XzlXK$|TbbrjM4MUHCL*77>w;W%qn{_3WrsfI@TV@*y!u1IUy|^*-l_
zY{^(Go(|<|r7<&ekjNVk)h3iHNVU*2b1crRzu^r;iL5EsWMxO!MW+T*j$-Q}Tm*M@
z&=}=b_AR~$hfYmyHFM|lAt{~jUS?xt0%Gxy4}lIrD4g*>cX5<ON34eFx-`V)u`d`M
z+1QPMZOAG!xPvudnUL{m^SXUfY3th{N4OGjd>h!^EAZss4CpnuZ>({glQ)Jo171~M
z`c`qD;{c3Vmr~w@6<Gf=ArO<4RD%%c)e)z^)n@>tN>YODOfMHB*~{t8Tx|mLEElS%
z9+f=VJoD!Iatra`b^U6|!@72dVnU-*dmwRMNBe%rifE|gUT1!|g!GqwQf?ShRK3j!
zb37{cx01U~SRAIVY}*BBEJ(dNy4`4SKy`mEn8^E^)rY{aSy2Ld(R+LX*iV_+48FP|
zk*z%YX##X4q1J~Bngof3C(HKv^=(D@w#WRi{X)IiD@B6Xvc`Pw%S7)j6pxr}>A8lQ
z2^j-g21-ciz^On&{601OqjPE^TY_&snZ%bQeOVxna=cF&KbqA-kBjd3721iQFPAEq
z?B>RbZ>Zx@$6Qig-X0ntsXG<xP-J*UJX+!$W;!*~ac886Y`aDW4!N}j6)th4@~Niz
z_;brmP3hXXVsGct?=Bn2IOA$_`;mrWQqm67*^H?&1Y`nP;ci{!qs1wi%xtWZn;BD#
zMblzfT$XwFHks6oP0rAh6{&?=*#k=hTwOHZ=$&FCXbgFkQ@%Kfq;y=LGEhThLNG48
z7vNgGo>LJHL=Eab8$&SThewZEwHxjetvD1%?<DK19R&3qV(uN@mWxdk>WayTB3v$)
zhTve9eB#&gT)C^xxv0Foom-A6^_A5qiXg!*fZ3kLsU=!uf3Z9<eEh=Bq4Bk?_a^QR
zEr<1YPqC9CbkID8&&ZFbU8IV1=5O?<4K&t5HjGrL+sBLfS_cV+eRxT9+g^wsv(0O0
z4wR{!S22yP*Cg>Q75C*nOL7&<3I|$BBSIJ0;V}SnFMeGt;WE3hzLSu-$7zG{0Nxv!
zM-ds%O2WO?&h^xERkc?+rAKa>Qj7X!xKPUBVa-P%Q~xZo2E8Ql5Kd%&phe>WG8fmF
zZgXGDod1UmjH%JlS$ls1-;$&aX6qnBBOhEME@HV<NDk1XAhO%$DV$SYck0`&d$c_Y
zhu%{mN)Y2Rw(D_H$)&zCrm;PY={i%e;9S2^LeTEkJmqjOBM99R%7-r1l(t<f7sHB7
zO=j+xzsG0f&yYPfpZf|NR;HOBO%HlF;c6Ll&Um)Fv^eX5T6A5@e}X8rR%|i%s4)5j
zhr@XZ6|V4(LB13JdBvKq*w1~7B{E0*AchE$w2=`6_X32p1Fyw`%Af1ea9*2F*q^@N
zVXY^#VXZ+m(wY=^v`qEnS&6;-Y*+rr3xccKBQ+62jcCcvg4VQ)2<zr!?jp_pyc3>}
zKVrmMgWjBqg?vK4Dvs%)uvct8GAamSEk9KoA8N}E(jd+)%kPc}r5NsrC{8?1WM^s@
zz1wmxmXd{~3%v*)Xc-17^I!~+I7&<p#c}+jX{Q<2G!23lO~Q#X!;Dj#vr~{`?ZMC2
zi*_%s4`XD&3-MT(PaG8h*(4=DU_~E1vs!}CFi)<x4v^j7EH3YH#?l+V)<0WiJU^#z
z8!Vh6vM_bwvgsV{D^o~RIfy-NXBuv`3UU%0Di=ypIPY){418m_FPOXrlyV~yqHhVI
zvcLKMm9koI-$8c}(b`?%sBFOj_e7B9oC=fMQDcrh2<sJO&UqBL4HBq0x*H?nuD>Vu
z!7fNRxKsIJYSO`exZAcq%YEmnR09mk%4onm2;kk!&#*CT=h|N9U~6BxIEf#aJbGai
z|3rm%7r6XJ+Tt{+MC6g%kA+e#!D6R8A1~1Z#~Knj=t-3}GRYcYg!jv(L2J{Fuje)=
zP8ZH($hc{D($dZHxoS2$ClB>Al=a(Yr$h41s>>a@=AN_b818!e%=vh9Ue!<)rL^0o
z2tqT)%tL|>N*6QRje@j@UDeJ)OV(Go`wuAMZ6^zoM3LT1DD0nW4@{0;o>PK04dHSf
zLOAj+D*Om8K0h%K3p&p5BZ#_194tvVc>na<yU+V8@J=u0bdQGo*@SrycW@ql!|Ea#
zGKs$c_V*GhF*(!neWo5AKxW?{g?+hQGp#XywX5L%6>)c^%-hK+>BHPUSut_uUR^nG
z3E&{-VyEh2O}2tziD+V_;lYdDiZ@QzvL}aEx8G9M>+85s{)|;vGJ#}^zx^}cN<s33
zaatf*3iSSz2K{mGL;9`x-c0dna~}WmRMz8C&L9K&^cmUvc0VhM{dvi?uIlm0V<60+
zleGT#%1%AE`FJcM`?fM$`e)IuD##4NkUMXj%+_Kah!-SMxE?iHwBe%?Fh30uvO)pl
z0s=Y2A{9xlRJ&jK@^j?_>27{!(RL0J*_@>(9FMMS!3rL?$38rsYkQ78)eqMjUp7ec
zYT^b`_uTvJT7i!~x{ii9EuSZav`PiY+ZiCs)j+rD;(i7&-jy2Pd=;aZqGpL>ygIL+
zsVrjQOnjx^+NljJcQgncS@v?p`u5o0aQ|Z#2+RYvVU9s{Psw-jRm#$m_>BEd7r*Yb
zJ>)}$-fpDIQ<d6cuY;LogWuxPlD66QJ)`bZ3tphyq6>S)bo7?~&}B&<g+W9cqGM4x
z>$B-+XBfd`c=`sH2mkum7CPK9%YG<@OpRtBK0DF=+(k7LS+lga3(5X#UljKWXio&t
zR`(M9QCW+2<wbOEnmrZ;`bF0XADNb|2-ZKG)%YIGf9G4iw=>tyR<8A&FhNfG&s8fR
zCxuqzqaXKVretzkpSre_ZC;cNv{>F5ar4r&J_u3%7KF^LWo#@F<2$S?-De&OFpE6m
znO|QH$#x?94CiRI<Hd8E{K20}==GG!cw6buXUQ0^+*b~j<^I;}Tu@h&=s}g&^RSek
zMm5-c*F@ofR}!i_T`U_g=ijx~2U9sZe@uJ4eDu>qhnH@L&pJ2$Q@1=>Q)3iLRvIv4
z#K6LHVFamH<QT3mwxt;z3I+X-H475%u<TojV4Ta<6<=i9tbew<n)m$!cEA;HcZl;v
z{j3%J8hQsP4fMahK2teD&QRAaR=GJs&^Do99*KUN0GGpY827dNW1cga%JX2OzVZ}~
z?Sm0icVp<Dl(ci8hMaaV)4{Y>&{@a?%Q7R@piQC2iNSbEc3GU$q(jL`O~1>Ru&5%~
zPnT_I4cM@?!46Z)>?faWUZj>2N1*KjWg7qkl50gOc1v9CqD=j;sy3U!c&DI~4_<QT
z+0<wXtuTpN1ZFhn>2r>LEE(tS?NRGd$@)m;X_co8sHIO=?=AAmc8%K?8IllRcV{re
zzp}ya`YFBmd5-49S<zhW^rMqOS7%Y3o=s!kfsF|LX-~|<*<uozaQr=KxC4VbSL}gW
z8WZ@@k%0(Dh=eF434Cgm2`fi0k?Of%J~=<$^_Iu*&_A___fj*;5DafkMTsVnd+!lo
zQkhgGZODGnBBiqvfNu4C6iXK5B%T*p45lE|hV}uGM`9ZVlJ@kX=7WMTu(+;v2Y=h~
zxeYMYKszNw_di^&|MC$fT&W1bezB&-{p0IXBf!?FX}f;@ZDR=~D;SvTfyV;FKf6@d
z+eyIsirf90&G{h1HoZf-s9!43yMQU|>x@PwC-^QdYn$-N%@5Rpi9*#_)AIa5@{Sf&
zuOHO`rTAZmX@7(an20u?VX1$klI09=rMiF(cD{i<z*9%)Y5Q{1R;=GXhf<G$vgC7E
zp_RC=1``^D4(;4{>F?$F7w!NXPb>gFRSPZUxr7beh)R&f;9qfZb4v%|q3$$&p&$|X
zr1k^4m8TvOoLm7;l^Mex{^<if1AFD|{@sZaiv@Ufd9deqvH-jup!;xIdU9M)KO@DZ
z)CcB$d7F&$1^_6$P+|b*rxG5ou5|bpi9(v-Qu)@)e~8bz!GDF0di-AKsW_~cs`Aq~
zof{OowE}@YM*U6N^#=DZlU0#6^t)7lZHYoc0gkM?2@w0HBfJvIZ<O>;w73BWdg&#w
z_W3C+1iEsczYv|Q4&q)fS1<Y+hXEDsWdZ(|dH&&#do&;}f2{DOfBxfN)-~X|FUg+d
zKcP@a!+?c0F7e)b*ol&ro${IGLz)<H1@<3IP*ekQDdQ-Z7Wz2IfCEljBn<K8ou~id
zBvx~&LMfzml;YaR09Muw*Zo%iPI@h`egG+^TCh0ZjakAU_n`iaWBH7sh?+e@`vTx2
zSsp|T`NlXXa#p}DHD(m)Pem!WsYpM08^Yh{Z+HWnxNqW&n#ubX*g!w0(58nBh^wtX
zApGYP^nc<FwgZsuJ4YnE_><_g=Y%T_A=vl_aX++tM^!R^cCT%d?EN|Fl2daSfT$>t
z2>xIjp_|(}C`9yp6q)}#4``_E9!o7{)8SU1oGK!_iOK(N6Mh8sH?*HvKFft0K3$7o
zh6?=|aT*1ydsdK1(7KzD=MBY&CzS$3=J^1=^|JBxKS2RGWgCJ};!aTJ*|P#U_NRFO
zo15Cip|_>~1&AmBWG)<z>L!r8h(h>BE%B}o=&+D6p$D|B#L;A%z{Zb^HJ+Ft-$Y0s
zXlgZpo^Id<p%RRQQ{3jg^soOR_ECdy<qNUHP~mz#*l|a6HmO!mvg?NC0!s9h4zR(0
zJG1`v0svvmh(fg{@2Rr-PHCQSZ31Sf;gW{`r~W||1vrbyd_JEx^EU17z?Nrv+C!w}
z-?4d*?!&uCP<)Q1TtUiC0+}V?1Dn95@)k_0!Z6-!r_P32>K-2~%%A9r6+#BwNji?A
zrlx(CIRFjXMI$}?E2rlGmq35#Ufc~^Z*Xz{Msl&1N$4F3jVnftWAU^Z&r2&`wccze
z|4IdLCO-D-yBm@eL3s5_NYXrj0fQ_S!;wrH5Nlcl{Iah!;mYio4i_QnU;GaOaIl{K
z1)PBOpHxABu9A?&)7%$xTJsX`NSglVtN^7D52y#1dl8KBn}I^523!q27vkD+q&(^|
zWB3Vb&p2eLN)pLlDMJydz}osxh19M9w9E^Wu(g{OrSyQ@{+`oS=jp%1YF9%ByoDKO
zlm1^c=#@|hw}PCo=gac1&_<XFVj}(<m_RM%E1(rx+<{-8^1EXvepKW)L;juXBeW>C
zb*~GA*U#}r;<>OdOz9@W7im{|*29@XZpPM+&w=Cn{)ka|H{<|u0bE(!w6|<0pk&>r
zjHK7C&VO)67uv5+gNSoOe+ZE-WtA;{>yAT-954$a;^6+{C#^Z_WK!ohBufZg5&j4z
z1rCw?XPK9OF~~s86U*nNdT;1==#>FK6+S*ATuI9x0tG+0F<Pt^kX7~t0?eOI1vq4r
zii`_r&Kp;fjK%n7zJAHz-M{tS0QYSJN{Y*1`bVGvkU4?I<6##>Yr{-n7Q4vY!O9=Y
zE6*_LV{V*QaDN01fv90wp=3~<QOPD}`9qo!7~hTRp}F@UV1b3$E4aWD2!GNJIE=f{
z9#L3b<o{l__=mDqD1g?-m`@)-1L;o{wCjq+AM^ME*I&@fH}Strg&z=;4xb$PGm&xk
z0Ld@<7tSn)!O@Nq#XzH9vAUSjJ&-(wS-^~((9N0QNuL5N5_*W}`@8c3(07-B2i&u=
z?^nxv;5I@)Q?cZH(f&#pDf9@5=TkzYKkx+(A3bmn^sy0na^a-p=l!-B3gw=Ukh}^k
zxk`Q>o9GQ*13dshWG`P6bAW|SL{NwE3Hn1BNw?!&x!0q#{8Iqpuv9Hct3N`%hK#=>
zd3paP%NyhXO}t0T9vbkkegDI84a_AU_GJQ_bKA+-M>$YCw4LC%ZaMyg3O&GR3fI2k
z{t_jwxe!W?;@nlAw&3=PC|C<%<0-FGECfjED1f8=Xg5-he>v?ZNw_kBWQ7+5bRPW%
zv;)oO_@mhE)M%xGG`n&@6RK&S-w+FQ?gnarusmuR#+%oJG{Fni>bwteZOSUL2!;C1
z%X5K$Omz9rm(YYmL@G7sJw#d$`HTD?W1bSCoEg=t2V{I-)Yf}wbXr{WyfvH#r4-Hn
zVDV;N3cRfW_=Px$u$n)d3gEuwLGpJ37&ZzipV`Skmm~<(_d@@0yH{d?KtpO%wz&Eq
z5&$kI3Wtb_mdtIJOdHCqML;hx2~{Rf%W{KABfZT>MEUvT2Db@=fgblDg6sOjF96e?
z5du1NPe^>-;_L4F{zHQ|2%+aSAUydNi^YI<S9hxY&I%@|P8LsyvD}#CD<O)*ToMDE
z(!B{Gc{l*89Jel_KQ#6VR+c9~c!b=-qhBz&;#9Dhdse^jlMVWiCec)4=u!;US0j|H
zVRkS~2|w-Tg({)Yg^_i;S9lX)52_&UpEj)xqzkLf*g)#K8Pu>H-+O4_02{`0(>7q-
zcY$0WYO080@lTY}G~F`KGJuSi2f%p<^9j~fU;b~ZiXxT^{Afh$@OG#37T-NO?$F=Y
zgQQY~$Ner2Qx>270_TLFnnsLK9Ycj;dsr4zNiz87lz^7F0PNd7*`m6^<mZo3Y<uAE
zpOhYoYC8-8i^t0&=6`|k29T4a#b_Ax@ZE37KBezLm3KQ@{B1QT0J>L7NBZ>!^@MH>
zj?mC_T@U*Oko&;ht&-`1ht9@~GP7F7ew+zd0jj>43f}5Bf)9|h0~g|GexAE3Q~v5T
zt)W2TnVqzK0R~25kdFS2>ow|xK+C8WaM1NnQc%PKpc&88Fl=;2U@--~)5w6@`pfK~
zf_#VWP4D~?ni2x{bchu|2JqwO7Tm)BNDjgkl0T5BuH6%YHu$$fvo!}j0lz=^clA#n
zXq)=;N50@+sk!_~3d843%X4WYoAa3Gb!jS|&3rC!H{}EP;OEppBWyaHiA`CwLE}On
znZ<9TAbN1bL8rN<MeNw1e{wl8dBPtx`QlQXMt^aHRZu2HA^83xqifuNmu`&eGa_-9
z1A!T}E;|x$U=6rY20-WT(J+Jp&qMr%2@L4x_4?-Ab-(MDW?;^nQ-f*8<=S8r0dYbU
z!rduxkVkFu(+6P1aPqAWK7B%vi>Jb<4}{ZveO}&5BTIQVg%Au5g`o90x|&@qN-@S&
z@95hb*c%+IZ=6gyu`&TSzS2%}ZFWsCEheH9yt1aIf%SCNYm$Cph0;*_1{b6C76`=+
z222P83lD+0{?k1W0yCo}x}-M-|I7bg{|TXV*A@EUiXiT(DN72bPJsDbFR@9q0`&7|
zy?rhJ&hp9cu&%z!k^{kCP?zXrJ^ahB=@clF3tG#o0thISZ~%7c$r6b-aJq&Au<wF8
z89fX17dY#Jgjk=Ro1P1Ug^T=1+_nmTRC(T=CwB84RQF`Rf0Ggz@DMuWuq8pRADlX7
zo@E5jjQl4r7}0!IDA79W-@|jr&wx?Rm0sVG=lPFOzrn<i0GO6CS8)RfA+UKsfnwYA
zoY);TCuegFc?`zW6|ZF0i1jZ-ptwQS0j!iyoYie;zjg_9+EO8T{4Sp!b1<>Vd8rx_
z)gw?7Dlit8ub{vZ2z@{ATHGFd`}^Q4xxzt*p|H~Z0SWqJ@<VviuwK<h>Jr0vF(n5m
zk(x<zB>#iRuL1y(j~}&y|Kt=vq%kSVpgP8sOYSH8>|$WT7H2tI@FUCIg7z$izfig^
z1c2gl&wT!usm78Zx}ALDC9Zneu;9CdfGlAQ)t~Z!Q?bqS6CcVe{N)ou6sRgL<%uEu
zCY4L2h6JFBi40)#Zx%Ll*4<*cGoy89#WeQr&4B>#dOpDuo~}MWlQtpx)h4dSTEdei
zoS9a$Cv}K;+eAnK1dtsd+ai($H+(au#3cU97jBSX04+k)KodWRVxct4pdt3HKj#fW
z5K3T6^+Cg;LZEr?Mt^Ezw>sF@_XEG^N@>XmQ5c6Z0-DGuLm&S;1Edlmt#;b8<|4eB
zH~bC&F?j(2+@h*=Sl(xL1U$epA-I1zHW>^SXdWy1Q~?$aCHq$jlx*%L2XVm%N!G*O
z+k`z{kXIJ<hbLyYf_(f)QE*LoW|FY;)n|rSqrdUA@LqoPRgjQ<=yuDG*Ahfgzz)XS
z6tG+?8lVIaRuDhZZRt4HhX&P=HtUjvhc4(&7e>=#@|?hT?qg7J&Ykso<~C7u8Y=)v
z?ta7#<&l0X$kYm8_ux;gW{>HJP3UN8VVNIE0NqDWq)UiU;=dYt07!Sj2`QpoqbiX@
zW4oLTCLTZ4VI1S%3|=v@v&`G`bj{Dt2ksy3h-GQ#(Io&W0Vyw`W+_tI4<+d<jC0J@
zk(BX~ys$UaV{gO4D?WBl-lAuJsBGGl9Sxqg@Yv)dyfh2<!z%`|jnW!7`8_ByRT;a3
zeZYKj>5Ak?VR3ZK@@(JM;bsOjZE)<<_(8^QF&--Ary5J>LA~by{1r6?A^JnQOdgwT
z9V{kAak+K!tv<93;}$}4q$bLs7dFzehX=d;vaV^j>4vLH<2Y?|9KT(2Sd5UpdF+v?
zj@5hNU?pGp<VHE-kGhC}XbBPBlWz-JKJK!n${dS<vFWtifbsK&0dwNIf2_=~*eO&p
zs#!sEINKYZyp}ql2#820FQAe2Av$$D4EDVTQ~ZkeK`2=qpcmNp8b4JmU~8x$y(~~s
zJ5veEZydLfwlncIQyfw6$2|9)TAS5iw5a*%1x1Y7%Wdp+c65~-Dm;b+fZy$w?*cpX
zRek7y2JF74f(10dO_EUREv%VCl-&I0ooO47P5y{!kTEoJB)@?Nw>-yrt1&apUQPwQ
z3=_D<yIOut5E^J8_rRv6rB8;CI0-WY8lfBwgd#djrU(xpss}}MOcTc+K}mq{F!76e
zu>@zqEhVO$4`LYdoITR=>C&Cd!%_$r59!no<B{7WPxqJWxPd4C&WY6E70F<$gAh=%
zm_e*%RR<XXwXC<5Re7>y^+96>hV2H;U$CJ5;}aTuzqU^)3?mH(>_RM=s1z(z(%hh!
zg;=VY=``^$Y?k>mx<XL`XJ#{xl|&taOP9Azp)J6NqjqcN97)HLF!qZCS@KzQMz-&5
z!SsEMJwTCi5+LMAUd9&6qPcuFoq<EMgTqtbVqFJ^nT;ph;dSFoGCW<I1(lv}zN+kq
z=TJy=J$GR9bG~$FlpbyY*#OE!?E6)VBZX2RLk30tdN~?^ll$<xecD;IkwY&29-CZ%
zYSnie5rGNiG(n>au|}Wkt!A606~$+`%=duz&F~L`{{aZGlq!8P+&o2GG}mWG=yqF>
z3z8`Y!25#wEu*n#MtcDAHpXNKLNR2Co~r6E0pCSoa>$x>oS_HciExpZek{CzUEZ`=
ze^JK`+)8eaae`u~47yjb?w9o0pKuF!vce}I+Z;Zy5-PtqKz<REd;>rL%yI#ZGC#_x
zx5X=lYdpYTh{fCCO&$b<ehLPj_#216*!Ax?JC0btRZd+#VeOx%Q9Ts!5-?tV7<&Sx
zUTM74P*$(=1-5!|liYw()`bjVYdIEhk9JmUL24=hB?1k=UM^jFWouBsV06a9-470B
zbU_Q$S?{<06<PfgrA;U6XTJHtRP;Vcb#r~g16kMOFr20<JDcNgXqLl~yfxGEW&+J;
z_M;!v(u5O)m56{i4eaK>P07I))YAZUuxMaks;ZAWB)n2TdP|mEDtb%#0SxcV(2V;X
ze3Y}Nvm&3aTr?{D$cT|n7LMtAJU$n0Rad%j>Iu=eDR;R7r~zevAWP_XTd;}E<E}nw
zgE|ulwoC~LtTS7XA}4tk@e5*kEWrPpc-_6oOO%$DHdxB&&EF{<)}#Rp#_q!iVCR4z
zeGE43DEY*Mg3b2+le-~uZZN=Wr4b`VEP&UhAbI9T)YWhUbeMo5SHfH2L(R(^bkxDZ
zboXMQwFM)>MeF-R;OcP7C=I)q$EqdY0`v($dSng5kwrf;J`%%^JU7zG2uLvh_-U~D
zIa}b_3K^g&d;54Sz~t0H5Je=fwp<RDHgCZ7I2neN;eu1gPiaKWC~tu(5$3ptJ19?!
zQ(uXXbyhj_(Av#>ewPxa!iIE$l7#_HN+h!B_p<Onz?*<O%@R0Fw`LlVbW8xtF(wBl
zVL8CJg--Gg!V4(RQ-c+Gc7TR=#j_HClIoyS>K4Q(9U8E!sj12KO2>NnRqFBq&t&w%
ztc@Jt<O3fvqI@i5SWK`_9C?lfufX~~8_JvnfH{LxZwCO2HM9U788ejFJ5%xD0}`E`
z5u<BD_tF0;>#1beR7~#u10I8OxP$7ne_l$m)L3+B6TRGzHJb-`5a|=_lE4c9!qOI4
z%A~Qm8Kp5PAVt*lkpdTYrYaafopztv46ye${$vy+FY5t+MhRKBO8sRl1t2$-;{yA|
zm@HtNW09BE{*<?|*~uJ~8AQX3qcz}KjJMeWtzE(X2=0&x3Gi)9uVb|vdt|I*<o&Ln
zA3N~2;GJc|SRj%4Dv~UR<TXMK5m}c3fLGhYK9B<)*Wvr#iggWP2+0D2{Sr(>(9TtA
zlU$CM%hgm>kq0N4kswUEu6u*Z?Z6$|)F#6PwEXBmtX>AA`R?ij6821iP1lN_^fZ4?
zwz;1_P63^HY-%s<^cSZN$g9baVE`FU^(8pk#F_w_MZr^`468F0ZFT2-da?b+Z6jk8
zro`qx_m*3{({^jBUC>(aWjZN{^6^P`GcV39L63llJA{XbL<(Qz0a%uceat{8V+A!C
zGkkr9%9!&AkOxf$4X3VfDyN?iYP#SQ{`$}o`(msE;CPx?vwQWVPgcxhF}1naT+f{<
zfg952-!pYVUw;&NmQZQ}T`ag~t&FEr#&MfOxlJmwHjh3x&`At%CYs^Lp)u>Y$04d1
z0F6`4T+s{sFd#T|AHcT1-?e-pjILdv(mN?Q4;U6B3gw`BaY}HN#q*(81Hhf;T{5I-
z!^ZdtlTIByXTU3V)M}=m-r+jTg;<Zg@NP}!e>*{X=@qg#LF9ALE9mEYMF}Eem<;rD
zTt6U>V47N<2U8*a#B*~)fB{~PG#T3tTDIUSZ_S{}S>%D;=D&kCmk78zz(PCG7?8X!
zujUqI>W}0TXc6I!9bCgh$$!zo^1+H&sRo+nXV+_iz!Ln)12&zho9YQAro-6^nQDsg
zuV0hHypa(J#HFfUFN=e|XHx{c86uIy>&!?-fe%tam^kQV=P>^<sM3E(fr+=5yt~;q
z&Zmp$UIYJFtxPHdc!9LA{=BN@XERQs{f_Ba+M5mEjEoGXSJpb{k3c{e{2&^%p{A^C
zUybiXcCU4R+=8AW-qK^O{^I;)w<HMsgM6zJ0ki#!jb>ZSx`Fo^$^C$Hm9AH$ZV+DZ
zTIJE{PIo)c!30SLVK7m2*(nu{Cofhg$|NcR!|<9<?G&#W@7B*^-5;OrZ63OuKGT^`
zyyX(lgoi*F><_72jQ!NfsED{_Xf`p(X@wP%8)8?dT&S6-pNs%oZM#Z7S#6J*fGb=X
z&Wsn|V4|Vlp5Uw*AT+ZAmlTQL%G@*{HXM>Qi`paZ4ZOdoI+UkE0=&r)p;D~h>i2+#
z*uBTM^G@tmOU}BzYZ{{101<+2U*y4yWZKOzZ5%dW^=XApR!<3*$ZteRM^4Me1C-Px
zlb)uOjBU?RME{j)Xz?4z0zB$z^*RG6wQiEhXbZ8Q5H47m^E9K_@$%7U2(nQuDat>s
z2@=wQcFG>cFte(f-<c-sGtww2N%MfzfnVi0indgl4DbdZoT+ZtChp<|0S*hVu$v~O
z30U2xU>esW&kt#5Ij5E|cmggLg;J<V@OuQk&trmkuENISR@VW~iDfZZ_m>D?d4}Js
z9Yz@^jdJw0C1#<DuFh3xt$?{uC_{l&2QjR*gFN_^da<m>!D@wF=G`;$hY?tq_RoRD
z;?+ojMU>Y?K{w*IW|UlukkQ`gi%CKbvr!i#D_jWSdkC2!gXf@sMW7(ycUqQLtxI<!
z=ySH{J>onX6_gGS6f2E|Iq(7?REx1>=;ucX%*F#*UAOKabIVb*>FlwI%pMGwDPM4_
z!OuwotE9TGVp{iL@!W=2_6k?*YR;Q!)ho6t#ly&19)?j23uxa0vj2()Z35prNrWDn
z#Z+g(68NtfZy3R&P{P7Gd!^E9feP?=B!N8Q4B4mf4F2MWj<`%O!cy@kQ=3kYnllj#
zKe}#pK5_iQ;gN2EN#J(-qKL5rob39UHxr^b6O!dTd&=9#hFG4|6dyA(vou;gW%R7Q
z7rf>OaE9(8y4rjoekWEe@I0G<qN8V;anLxrpuQES2DuCb4<aM%Ngey(+Us=Taa#~!
z3A%{t*#Ph2@ukxi+FA8RS{&eK*WP6q&a34$D}2ae8&SA|%e44;x|An0Y%r)dY+XsV
zEngM1&O7|LazSg*4(UOmI><hVSETmK1ZK8}G|inhae7+doR$zY{RGl`?0f4Iuq>+F
zv92s*pB{|lSsODbYVTyD0a2wByn(mlara`sbJSCJn~vi}O$-|eBsm8@*+^MwQdo}%
z)GCCA28ClB0>CL9$z7k$Xx`Z7Na!(*$R!V$3?s;9{UTV|2c!rR$&)OPmf)^3VKH(v
zG-(#UO2fSGt$FG|4IsjwdA{VnyUgSVq?vUEE{S(Q76RC2E*(!&f$y5A8{`GJjz>RQ
zGg{%W{H2=|@XVkA#xr<jz|CGRmw-s1NbO!Fk^cyq68~0Qx?KF~5u!*NkrEl6N2D-O
z61xCJogW4gf&YAZxn}?Gvn+UM(I*uLh;}z2tqTx_yw5oDK0C5o#=lFO2&nxJtWd#9
zgn^l@4-?<0fK|_p^41C|P*C7J2~fRUi2OGZbRfzdpuDA3ANqAc3%92A!y1$qcpPw%
z5e;LJhAZQG`55nhA@W~L-M3MI3JZQ$IOvkT-{yn}qlpPAU<1o6;eGswHfg{f%tg}v
z#OnGxh!PqAC}L71{okeje+c@#gAk{7)~9Lj&_DdH`_vrZOPh53wjV{Xsa^wZA~DCm
z`22@O4=l8v0h2J15;x-ZB?x))f*G10{tI+tf-vfzy8wWoL<efsWsY+Vg`kpQN_Hue
z0v_?fD6Qh%UqAWf>n3Qeid)e7KY0KCn5>E*RC*L8mU^U|?>y1C8n9LPb{dBHY8myX
zAd~G72v2h->+&Zf2VWSZ*l|Tg{=sITWFZ6~_WFd@zC}(`3Xn?^IMkFnynz$fMbWTZ
zj`lA#p*Cn86N^ycZ;JCkf{@DaT*+`)F8?*aA%Aa@%D-^$GNt(e{GMAumm=^lZU3ox
zcmRYLOL~Xi{p_e{4*{+TS_I5vZ_RrQW++m9*n#mkeb|FC?aWyW@lP%QU@7Av%s}Of
z9Fg9GhN#B{AhVRfQG)J{yO%lYouAf<UW|YF$PMBEu#bk`LgFvgzvNJOQuN+%5j2kl
zEwVivTVH6|N>`E8^IsMCjVy>Qv{tBbCT#XM1q_1-q#B*iI5Ens%qfXL^$$KS^(Aqz
zsqi2tdARP4(iWgmX6RXk>kGYAu_Tt8OK*i%=z@h_u8NuEM&WNq%n*Eg%k)rKLYDYS
zdXRjS!^y<S`HFSfhvM;R$M+^}*l2pS>NriaaXG&89BsyDOe~ATUTJrhHRvD^pHd6Y
z#Y=UYOJXq^301Y&*U5HOHqGT&*8%gy74>yUngG0zf?0lW+tUDKsqY)TC*m4E-Xt{O
z2J^w$wj_qTib=M^S^wzo->FZex#p~r(06-ByHNbvt|9S``+IB*o3RvOh-5LRm3gXG
z#qs;p0u42=*07h(NRivU`e2>b*E}lcW$SV;Z!nx{xYSAwqeFH)!%SiW7BZ1s2p~fx
z-Ez5X4EH$ES0V0d>bWfjIo}H_PFP~pbC1+XDc;v}MDTH4Nx@x}*m7|xA&uxKrnCNr
zqEm6`rkKq(JBQV0uBJs{<m*9qi7XGIzbJmUkCLJH#?bhnyDe^HcAnw16T>0AD0~}*
zlF0psCly)VBNai2Ip1sa<-TPiyy%0#D3NV?M!oa$IY04$p9_-a*Wm0(ExV)Xmzny(
zu9H7<g{=dOy9qK0y3QYHCC-7bm~BV_Fq=a*)YoLs0W0(3twYX}3l8UJbz?I5sn6l(
z0FO#fL5x;{2rIiay!GBC081rwJ8au0Pko;(k}1NIE=B-qGeFgHg6H^Ac5ZRHX!^&+
z3F7>Gif?S>r==5}sod8pU<w2|n-~|u6LHg{N-VN4nlxcvGKxUgUg)AVLV!@l$UeQq
z_l+VKtlG+|(P@O(mVp!6HrDd!;=y2`-|@9ipPPE(o%4NDhD`o$V-jq^!FIVd{57@4
z0JTdBlH`X>_`X8)*|OZE_U|V%uz$)ej!^)CVgID!Se0G7ef5Xd3XTU6(R8R|OCqkd
z7v(j6wkQnr@5I$sXc8pVXSy^wp5a5QV1O~nNrN|dbqylA&Z_2=WWK>H$JfYq{Co%t
zdLRN=+&kc<n!+v(o%_K;+wU2zE95u0wdJtdKl}sM2^?x`TuyoW?Yz9P?)-BH@bz?i
zC~~VVd*#c;MJ5h8@gtIN_INY7_2ln@Qvol6nec$Boj;k*p>|m+>O&Ti-foB&T~yR3
zZoliW`&ICJ!ISEhJH=r?S|7ipdzKg>dF`qdZ@D`TkQb2d)0!xSS!Yk!$ki7`ioZbl
z#t$Hi42h>Bad&LSPqnT;+opdKgCWkEe=+Y`N~gowwDVZKAzl62u^F;~Y^`6o6LhGu
zax>Y+S@hh0rCE8TDf;FbeMb~Abw%y$PMpMud<QLy{R=dt%tdEBOh~dPG_<17sVqtp
z@|`%g&ONrxc8Sf?<dO>{m>xZ0VKYy+idwc1p6io_tFg({A<3iw3SO7~xE5ie*1{tH
zv;2_~$x*P&7N;UU?r@W%{@75U@aztvXzTIzPPN~_wYaU(DhzhbbJUB}=7_^mJ?iGx
zLro_&0ttp&9iJ7LtP}NZ3p;Dp;c^g2MoT%-6z-CGL3|OyZ5;G`;{^7Vq`%)CBpI>m
z5WtK7kR!@Rk~{3AQg?RxqsMNVML+GB{4~i}=pG^u!F#E;*Bmb<Mzon*uIKfGs+kU%
zyg?vu>O0--JJz2M<Cw_n3_3=S@15&4?=+(4=eM*0%Fpts^Lo=P`6c`W(}IL^nFjVJ
z-qp0yJ(FY86AQ!R!qv6yb{&`OBjIvc;7T)pr`hFl!5tDbkRG|)f>w;Xg8FUH`1?_g
zs_*n1Ou65?{SFrnTl;df427_n!XNp_Y|tyer!LL>3W>qJG(#BhU9w<y((Q=WIV2T0
z*T@ir+q4=3!D3m>g#YMrFL?X)v$Dhx`7HzK)3}nQ;_b(SFixb_{^+*cG$db$Ut~ig
z4$F(}AQ8e4#e-FO!R@y9*skUe_agvL`2i=wYC7^faEXt2)<Nbvu2TC$N*47QD;0-W
zHBqxyBD?xT5qsN$A~CbC9q&(cG163?+|cbZz<KV&KM<2h-K&9LW+nA~?y`GN9KqcK
zI_D!i%w~yXnKHldq|q18DeenNnE0xO9f-=%*!HfV@CZJ=CQ(9=5cOwej2zNCg(QFd
zJHwJua$#7g0t4G5y25DJ+PMZc$C^~wStEF&1;~aZoyX<#N$f_xm=W2JV$PTPq;DZW
zx7hgu!5|YI(qM)!^QZ#WiSgV-InO*6h8Z~oGH^nL@&$Ks#jp3AD3RQKy7P1ygBFtq
zO9shVPzAnjlgtVIH(M2}aJ<$Vvc;o3sqMV?wO_t{8~|fWXh6iyZLRAh8qgV^b|VdI
z5u9bym@a2?YOKpA1yiFb*@65Q*D21}I)RrLCADf@&07;J1^rqJ_k!^b0wSHdO2Sw+
zm+XjA=Ow7G={g0gs#S?;IBz&bb)3}jj^Cb_sUT_!bvO~bAgT;gJ38VHvRM?ndp+6-
zoKZg|Z8t%$>SB}W47^qO;RD%_Vs7Ln6_3>W5EAAB?B-&|J0AkAt7Kx8%3r0k4nNa*
z+&}$_C-L!ct7z49PJO6%AL4i&U4qhA`(#$ryfXdwcaQc5%!Yd+Q@kJfr3(rbXgtV|
z*+ZI4vsvs<=SU?8Dwru(HGE<63^$wC8{yhw+9-O`x*O>xt%r;2`ZbSD$7$?8BT=nz
z2}_O*j418!@Tk6gdYu)vNhKSZ?SfWUf_e<bP($bqeGc=~tM%c#+rBB9@Vy}J5#p+o
z8_LOBQ<}snEGn|1Mst!$Xcxk;18=umJ?EU6cCdEi{K6}bV_7nkl4Op6@=Yq)N_xSj
zktrjDVH!M#DuA&L#~0VkjgNB9VtSnkt@Ae|#>soS)*kyZXEB{n5_CRJNDo5Wb}$!h
z4Pw3~f*pZWDJI7#K`fK5(q^6Qx$XvY=`m*GT9VPJ?Q$ZQtYl*`BX(wBLQZa58?qvJ
zzgp<QV&peC>-yu!ItBA!U#nDK<?iKG>WykhVE^=ZmD>S_*;gagQ6GyCD^~xSoWO<^
z!?JI+c1UAS(`>+I-kQeKrQPJcawW`6?4l&XR~nE72AP=7i+O5GzGa)H6A+Moxt#i#
ztZX7Rk|1CAA0GaoK-p6nR8jUv!jG&z_4JeV5^>5<HJ5Mi)?lRKM21y}=jsg0j8X5L
zGa)zdC;FNhWM5}|IM_O<nu#jEGAK7qIH~w@N?b{Qbrn0Uu1<6Ok(O=hfID-9u=Z4N
zemYC)UE5k?hFvWNHEc#h#=L$<lh%e#QY<U9e&IU{=ZFT%4^fP-6UJ{4ZL?wgBHge~
zrg$@)N$2^e%eA_iOL39Q9FLXry$5+t%4!(|rRw2|(@Ye@@UXTCv9DvU1c*inOILW>
zr;RXYZ`foMv|Ra8+%Q5_X{%hfLBDS#Uv%l{<2PyE7;+?9=@*$ktJ>hus<QI*bYWH1
zxb*Bw@u565+Rh9&3^G!^98DMBu{+F#1909y(#;lI?WnzLgr~{xcR%w_oOBeQPCQF5
zq@!3K%?BzeoCcCzmB?b>1<iIS97@K`HJQYD<y<pfn}uQazm3kUe|OwY0o16K_Q|ik
zUyg^HikAz&E3L!8(5nUSm2Ro<akXfy@F)KL`^z-<XK|($4VY5!H@8tcFAJ$ay5tk$
z#xt(j%2clz>%w#vldG*zUSu%;@@%x2k>E+9FZ@9d0W2s6o;jPiUqVShH3zhqPJ`Lr
zrk+a_w(VJWn2^%$o~hf$q~>JxxqfHf)On}+86tedT#Wv-_TG2Stm%xtCPgDa^#vN#
zU1}odow8+OX4;*1G5zVxvZ=-Et`!=_-H9(2j*kAYhg^6Z!-)m++P}7memA2vHahZ?
zjL>Z-l9qo5<DLZ`%D(S$B)QO5(`3Wb*>G=|CCB1BB2dd)xVOk8f=PbLC3-ADQK?aS
zR)-c@Y;<InZL)B3fKTZw^g`HkUQ&G>JvvRggq~*po-w~%8MT3XINVkG>ErHJnavpB
z1;5a$LuuyxaQ~S>!P}!W9Gs_&mzj<`8X7}m5&}#+7N^mR40R7LCywl485MC2kGj`K
z0!Oc>-gk_-i95(C$;*bsrM8#tM0K1cwTZ9HKM^*eA?p{w+)FDi#csfTWUJvkHi!#>
z=#~mFtk+vh>q_Yjl0Pv#qXJ*GoG9YCFRRX~=;f8FVBu;uZ&O~cjO8A?Thl~GCxgSD
zHtk~%<G8<*#Qat=s-T<TP+*RevBdbDWbVyT)_Qi?lcQGdu80IB2}Vtpb1%4J?5fs>
zMPIfOcpP0CZEyt%sbNnfUTTT8rN`F3jeO864`gY<*F7b2tRVe*i;(l}PlAeu^J@;3
zwddOx*6N17>d+1V=;|@ijfbX_u4c5I)^@27ZYv~jAe>9)d~&dHJmZ$Pgo#OR-t$`S
zkuBKcr*<W4G(ovUOGk}ijk8Oi`Or^oLo=Co_|3^}SN8O)^X<Yr@0d}Q$+|&4fjhqC
zj9#?29KI&f8+$q}jaV6MavicC2sD7L7CzX!pG$CLKRK!3TBaZPR@{t!{d0swL*fgb
zJ%jGHr?+kLSR`C~-#t#xLvk3t3maCvx5@+Q$ZQUs_kR_URxHCvRJ-fN^=vqXFJ2Pn
z(R!VF{lGBuc^}v{fy*{Bp=?yz>;x(6K|#p};HEpF=8dce$4rhQ>G1k_@$`)8gpyY+
zLvrSz3>FJjB*eYN8sz3@NRBGZjY-n+|E2!g9vsEWKv6y&UW2(mVb4JAvbru>o=6Q|
z+Z?@RYGh{Rzm(BVQBQi(K0WWCvXE$bAl((p6KxaJwVg^XQT)?DhDQWxT9`98fe-p^
z1M{N}Z`%niL#f&Bcqf!=!b^p;(^;F>uvwZ%DEoJrXm5jEp9qivJGp?6fRuSbecSmg
z-B-phPx^lCRAPjfh#$ChJ_MdQ=d515fBLS?ZAM`&&_U-Mn6!Lhy3xAO_!Mt$=rh>0
zI&ee~8+%QS2^N%2q#e5Keq8M9?OW(SsQ=N)u7^O<`2pxEgEJ0v<5}!zsEFzG`SQxk
zXeO>X$w=~F>>v$^MyxF*O8Qn#kBcAZv9<^?rlP>>5y@#y6TUq*qn3R3II=mTr24g+
zF-%~%@AmLVKV8i81mITVro}2uKnFBXPAkPm=%2tA!y1NRop9=u!R#RE&o<Ve$A(zP
zJI+Z4?OwVMU`@2vWR4EFtbVYYQK9D>T(aoM>9S)c+M_jkKY42sr0bl%2tGQwYay!a
z-pE2!=W#n*bgc&Zam-8cjrs7S1(`SSx)j=WFn4zGDG?*P!b->*5Nc@;qR6OWoSsAr
zE}ZOgYb=ZtTCBqD6OAH1YoHt7AgZl8*#9shkemlLMbj}i?RfUqIlnax$uR6ewWJwH
zSIaKChVt5`U$KKSI4l;JBA4jn@HFCJ_WF}}*g9SQ$%T7>-Cd`?#E|piA}Yxb(ji}K
zj$%o`YAcd%5Jz-|`wbS-&eE!3M&{GlN~yKQ6W>+jC6#)^Q$GvVPNY&i_282%S&!rb
zHo`K6O=I9kkc?EF_KU~IOR!BDXU9!H;*60qOzuXh6y;O=lLsL~8o&;94BfoRqc;8I
ztosus_jNMPw7WY>FnM|Yi6@*O*f^$GNVm(wq2+GZXJbzNi4ptnnH#nAXM7V$A<1~~
z(JvEQm&sk3TWM>Hrz*(1Pr`Aq=m;tyf%2`b&gP#};!KIu?w1M^UavH7mV=UO5v1aH
zl=SJNV>APvMXYL29GryMp34}Y*hZj|&*cn!+IS@&RHueCItJanzls-Ej_8+qprI&;
zypX9<Lp3Wbw`tB1M?h_6nt?;LJ75ca#BMcZT-;e>1^WQ#EcoS{U;l(~p)fckw623*
zc;-cII`o>ob0y}pre7MZjk>pHvXFGmwHx!gLC8=UDic~aK}2NJl7RM7+*t~pPM82L
z4aZ;jr?=`alPaRPvu<;RZN|jQ3RZ0uYRbG?oy?cCU!HbM{-=fDI;3CQ`jw*dgQZ*y
ztZPa>@^_WXA0F85X(w#0ou&67ZPaIzqRk+?EBKDM-{dj0Dgu=K1Ke6Sr2?ZKN_Ay!
z*9Cm8pRrCRUs@!`9-y}jaSXlc=J=H<*MO3V;XS|oJoarnVZD11$~cstjdgdeuQK=l
zhNwGODsZ^@r}yPILd_L>8{@_G|1=@}jj~3tz?_4Q(~MTa*vWW*zT>o}5sllV!sRaL
zUvL8Y9Ym4?xMk;^SKqlVwm(xHE@7$Tsou-`xT1h}wc@zR210aq6bH@Wz0dWY?_bdy
zXITWxASFyvUiGkD@#t4>14mrQwYRy$Rx2B|_PHhk)`rrn|8FF~fjz8wv<`<`@*Ok1
zWHyNYx3WDzfp6ObXr(XT*t1<;aR(Y({!$0MB-_1>6eWE1i1nhc#&KYHSXqBP`@xkr
zyNPgc2t=-+T=Q_4+9<~bL0q@P4gD{wcgcN-9vXncsa}1Aikk6t`g4=b7|<$i<5C66
z|1i4<=r)7i!Tr*|RD_}EK^mb8+xLNp|ARWYQE1uH?m~|1e~9e=0|b&&zSC4f82||Z
zAHUk5^)|J#q>dV1tR*Ub)+K{yFupvRo%w!ryQhS-u)|q;Aul%Uq4HXz%q{!y8D}rY
z(L7^S+F4$FEz?N#`|hzMA2sUD^mH%QYwTD`Sz9kM_?{`4P3UZG6t$CcwFl$JNh}`A
z6lw1XR4&$@=#EzDvGjL!-{X6Vy)sn)koTh1zsR!lbB^ISZ`=miTgQ8Wio?y3A~E^h
z(J?go!-~_w#!e5&$85Inr)*q`69soIEPU=Q4QWNP6$Dr2F0{o**vwA~Z?*~&@IDUU
zT$sb*9JCFs-J9Z2oaQfEDNet)G^Ta@YMI0&Zn!O##b0-71#a8p9FLo26-%YaPP}Vv
z^5i4#=3R4#N@``lle(dnQ*|j0Xme6BHgspDS@S~|N){@J^+mOI($3TT%8Ro*bHjzx
zv7B8c{c7*L*xnz#GaYsvR}9r<q`KHlU)Aj@dHv2+ryQ3=3&$Z`xr>5^kN+@=xC<G~
zipFlabZ))fMd5%-^U7M22FM*z)NQsRiZ=C6OikCkYAJZJm6<?kw2o#(n49)5asn0u
ztCNjAT}90f^f(}!^-f<Vly>GKhh1r8JDoVECB?N~g6>$j1jjS4;23qkuK!kmq@gEw
zAkF>aG~^2(8HI6`qY}zR5Y<I^q^^I`<5jzI{_3{*JL*3W(BC4^Uesxvw6UI*^`02>
z9W^EzwBc<|khvzlQf4q3v)bZiZk$<J7&J2a!3`gY$+B6oaiWU1^TC=F4=`1rWf>^=
zVmk(K3MPvn43Jr?5i^)I#x-j$)<&N^QVq-B_Kzxv^3FW#4tl9J1D3McnJGM@QEJak
zyoljuo%J1f!i54XwWr6H<5E28C9>28IOA(uu#5;80?)eH#?@ne81~C5v)V{l2ZLn!
zc$Tak%=d+kelkV*^N3Qjyh{7It?&goN^<`sg%r(KZ1TmJo58wO)xGt~n2Ft$LTgQ%
ziG9&_d;7Dpf#JbLDHDXpliAfyk|IbG{4P1&R3{avWI_%}zM--cMmfuMLDlPXmyN(5
zfWq)_?<UOHeRpc&o^nYo*{yQh>AiN#{FTmp+Ls<Ak+aX_MV~6cD<Z)5L$==<Vb(J&
zlEoCg&dGErNwrFM^)rJ*W$4Tpa=ZOpU?t6U*rhK$MKUfHpM4kRXvIz|q+a^mG0sLP
zJgPx6Zi5PQ(~&>+yM^=)HrB;Y1xCGAMV0&vHdBWU9~Y8Wl^aA=QqCV>x|wIDw75Aw
z3|S2y7g)ER^GPwWyv#Q-HVR$jbKsv+VHb}&po`c@sA`X_Ef0R8hD&{>^l{1ijCEZ3
z+;YxBNzN(8>Eo^-U)9U9iGv6I4-}yd=#VDpUg;+d!6qO!M7c>%m}5KE-dinJq8`&6
zqj%kqaCpYT2BiLw6V%scQ>(}2938oCv_XXtAC)#~6{H<(8r7_O75F6ZiWOqOG7fXq
zMMYHV3?>A@$e+m4xts-Ad(%I-u-h(%&Hu!bZR@j@JfkdIhkVE3!jCHAGHR-4JW!IQ
z0rJ{LZERCMMgEl0+1)RdjtT2~IwRZD7J-~80pB<C;Vjz8y46v~HtSv1*``8YPRF}P
zJV{&3ux@gXY7@Volq&h2MpB_<;=nmS@aVku>q97Ev{1tQYbD|c<#fQeU*QneD>f!M
z2ONB<TCknMJd9eX`yu)X*pnagZHVLaEz`<}vtORsDb~s=U9hd#kG9;LCO98fTRB<m
zK9_%Ezr6lrX(~HzjX~Q{_Ez2({_Nn}!xSreEwEf^#!ME2PL+qtl6o5LRf_S|I<e+a
zOV;bt_*RlDlgVm=Y@^RgLDIK+koJ+ScE1%?$un+zK(O9J<ioU)!+0oFagb@hp}0uA
zGr;=uBE96^I?r6Onybk9&WzxTC?#EWs!MC5DY})70X4U1_&L^(4;1(>_X(3xfcF}3
zDA@??1Xt##wm+uxEy`Aijj3%JusWBm)J8-PbJ^UJlVYGx{cwA2$pL+j$NXVv(qQZR
zlyTCw5;7Y&$$H!A{MsUEnv5P4<+Bfw)9H2orqixz@0Y3rqHjezy`_aMu4A(3QrjI<
zfAeZ3#NuH{UyF*2`um+)QDT;o2BC~vorAOQ8*jg^C>i?rOP6i$>`@vg3g(-!dOg4y
zEAAee{-U-r-9|a8%9AvVIU?J1-ubY-r`Dx+tjYSI`k+dl6W{c-BHZpX$Hy|9Tj&h7
zbe0`KHd2;3kygVMaXj2OtGAmi=~emVH(Q*JCvacK6eICPXPA*UCMD_X^;1_aPSziK
zPuYc+F+GxzHxSwgwNMjrYWkX_k8xT#%*S{p&q8Y*fHTj*R#c{>M!8#8ZWpU<TVZU!
z+2eYW8aF9BEe*KanAytl+LUTGmsr8nuDygEy5Vz?PKA;Py-lP2c&Y^rTAAApY+i`a
z?CC26rnCMLVJIB1SA`9FyDPlD@TFils=V_lT=b{)9g0)ADYab}YPt%Wg^lSbXRoz+
z;W+1l+}%}|4DGNA$%A@!+v7fi!tkI-*KkhcjghpLNb;C70(9=9u!w~r{Ugg|W(WIT
z$0=Ri^A)&8$#Gl)jx`1A!;fDSeM%FelN;{qw`|3zbiX-@PWYhB&^UGffM?oYv&POh
zo@v9$`N?L^9;ap<^AAKSvq%%Is>Xg9b{B7*`Tms$y`QHCNq*Gx9tJs?Re#_Xz0I}i
zIc17_)VOk1n0@h+yjfiQxHo0||1kE|VNtDZzltDIf}p4%VE}@ZbdO>nje;T)1JXH!
z<iL!yihzK0DkYK<Lo)(O4c!9_gQRo}J#`kk_q*Nicg}a6f4sOZS&Qend)@K7m6zbT
zcH>V!=?XDQ`$9(6y^MsM4of5J<|fv>$E8=pbv@)%J@lHFoAsO**c>XebI2)&kc#o0
z$hVwatKW&@hFtvMC-+Irk1O8>+q1S`U6Pmwa}o6Ci__NAI_yE+uC!(jvEe?E8pd1x
zS|P(o+Vanuwc_bAd^6FisF64f*n7$naU;p7$nW4}&y(SJ72k&uV{7Ur1c7tiaPnqZ
z9dQcIt03!xFGi&W?!AkWLo-h9aeWpl#7`ozWt*|6<99wd1h~_3j<<$1bYnB&Fd`O+
zW|~!U6b0aYJ|~;4L%8zP=@=jV=tZP4O@femj;}Qz4i_(pwcz<cOf?pwcIgLzxt=sL
ztOOnAhf9D)6PCyf&n6g(Cj=p#@BvUNLQ=B|vijoVO19rn9&DyH++8SqYpuz%-o7k6
zHqPJ+yv+98n*-CO=oht)hM!(u794FoyNr*L(;5$r7G@7(lF~B7uU<6wvzvkE==@BW
z+IxI?CYu<}QQO>SLe7qib(`%vfV6XANii$+izcp}yI|aBj!T|&^;~qTxZ}puSwF-V
zOddAn<4kZ4<ilNZLHdL#m#30EVIc2%8O9qw?wJ*lx$+k872vD8ejInq!7M{5tRcta
z%KAf*<{{Qn%-+1s_n;D1(*7{V)?k6P#op~&Z`3StZfG|}VJTf@*-ZkM06A^vaH&Gc
zAU|KC+jp8;tb9aA)+yB7V!>a2k#y)Ow;Z;JvhqUJk~fCaEgVtLZu(<Y<^6Qy-2hN(
z^TgI!lT@g;ds3a(8vtI4)B71VQjCh_I?O4#$7ctJav3OcG`TVV`oN!`@r@AvbjWr3
zCsIX^AV1l$n`>SRYbhSNk$nr33kVZ9m#}fA25f(jhiB&`hr{__g~7MSnm}tOfUxWe
zO~U<Nk=Ds6^yuad8<wBA7I4DAC<5)e6)a!<c58eD3M!19(Ow~lVG8SeNyt0JQGTH-
ztM{S!oI>lE)A+;>8|vxxS7yW>42a3Y*WKny3R}wCTd%AHdw0f#etzk~RqfmqDUn{;
z-;ciAUtH#>iCZ1(1L5Kdvw0?*P2IN!#z)q<R$Ov?-DmZiqJ1dB)>nMq@F^&I5~$?z
z?3`kX5)Sb@r>x{k@VCCe0aMRJkB1=Ajq0$$ACxbu+fz&rc#_jr>e{tj6KS0TrPAN_
ziJUO`7-%^f)V-qY=kje~Zo9Q74hVj!VrCU0@>8B)FyzUcyo!3k{QUkd(KI06!KAF!
zNmkBX<X~hJ0Ul|{+t-*B)nwVBJ$GqM%I5rD|6l`V&!gA`_LXNVoFgKpEKNZ~kI6tV
zS<nBXhm^jVKZdT+)a2f(^^c4$MhzAcdUpGYF`HK#D>bzUE&?yWh37Uy1`f_o#Ih7e
z17rSfgGzKl+)RtRq0o*N{yj)<2R+@cv?*fK=tER`cS{?_{W&T0D&+Bc?ubRotMhp2
z<#_$ijwOzbH=8>oPo7^4Wd-j~4S!!7an!qD17b(Pafj=(T)N~%-p$>xi!2ijuHxO2
zCP}9A)X=nxWAGdrOQbRNYJu{*_(ywpoF{~4VS+h5fm}7agD&kYCs_6^=yn@Bf*z7W
zgN8mc{5;8yooJ9^Z{!jpk7_d8k|*~_0`Z(1nR;V>J10yfX~{;c!x#1%xIXR$!+R3V
zCGnzOA0q4<?N{VH-_k@J@E+s*a$CpFHas>QK*fZHm6=+dE4YMDwA#F<O@3OWxNTiZ
zd>OUO@{_!VO~Wwia}Zb#hU}3v?!D&bdk`gex0XFh)S%L6#PHq?w{17H8z^eQ3Y0E@
z^7trfqa~FqgO&te+N@4#0^vn#t7&fuB^(=~O#PKQn&Z{kXG?Y+dA|j?_|tbxA4Fc>
z%5QekU?B(@)$0TwUzk5jh-HqhuL_|d1z3*VCAWMTL48QBJV!YiU5w>ANY(*j8!FF0
z%?6E6*5Ju9Dx9g!Gr5ON=eKzzukVYu@;8>`)7mKIdV~jjIJ?6bcSeCUEtRhSVR^{W
z<Y%))bEo`rEVXfwI?I409o(Z$TlX0|jKn)C@k2k%ZlkJ^H|pr)hBg2P9zLfcn{Ar1
z$eEbMX5@4sv#H+UM{gISYHC{jG>i7K$hj!X)}RA8VSD`!72J%%YM`Y0K3=fuZvI(^
zQa$;8enVk+Eka0R<2)f5LGL+f@qU7oIR0X*s?Yo3)7y!Mf`X2s-EntVSypBO<$qKn
zB?n%(1qx*<7*c8Q>d=SCkgNi|Tl^H%BtKy`Hn$SjKIFc32so*~|1R#UYzfcng%$U>
zu@L#5*TzWp)`VW(0l_m^%+9#$<Rs|9GO}cLxAB|8?0tsnwbtkOiSojQ!ld}m5j6U6
zd>$CJ=P9q*Wk#?1J#;leQ+}YS92+1>HxONg2w44g;xmWIg9`w5s6m~T%TmA4<6gb+
z%Oig4mA3C`X7n~zBTkU2eJk~su~9en>DbR}W|BcF#H*Sc)-zfg2M(5Sc;&i}IvV3M
zD&tH1NgkP3Z0t`!fX$~eKiZ0eYsishNy%;BzNQ(7zX%TC@?bBwALiNF?Hf8zKubny
z!8H`4_2Zf^AccS;s{a^o?{0V@VqAS0kQ7?J67QZ5t}((p71>XmN<^B1eG5HtuiVJ%
zH5Rk4FV0wOMe`q)qDPW@(;LS3ESw{6o7|Lgk#&n)N4cddq~|Dle)LH!w|oE-J>DS#
zCdTIS*o3rdhRxR2rU*bGPZ18_ykgl|HSIF9@P@A;RE7a7)Z$uBE#07JyDmSYSwWbN
zmRMKRGBP%PzHUV`PGf2()mUq@e3Bs1x)^=a@XAWa^JVy26<ytmMv3j}R&)LOB%jD~
z^aDDpfj&kn_MgyNzgEy-c8=<L7&%av%u}Whn?_42+zl>>YXLX-me^UM`&U5PHRH8T
zFNL8J;kQ7elxz2m*Y*i~BCpUc%LN|(r=NsZmhH*hskk^iu6n7U>9g@R8&Zo@fkwE*
z>I%-3$XV5>r0v_JT*_i&BDqQ#3fLs6q1fXq+gnzI8P??m&yh#pw(8=mJ+y}B#u|oG
zvW+q2_hEbUj$4NW={o2TWnuad&qF|p2K7KmAyc`bTv1j}k!OJz136tCuH4GrYLYDH
zxHmB%p1u=d3@NqJ?j+Y%#z^If%UeYLq=dxT0ek%TS?H5=T1EudhN^Q@s_~0ytNnV%
z{ZlpkSP^<c&UwP?aGm%Mu<JB=F~tt}@9#}rqbBkCisUlAEyfr8t_abGsVSq(?H5s2
z58O(>8}iycL&2bqDN>HTtyT(A9lQ}pw4N2u*cT|e^K#V>a~1Z^!<B2sTPr7%SIA2h
zh8F!zd++a+S>NewNi~*2%f_zIjr(eGk~ZLCwtclGMqkX88)mW-zm$CGVIU9Sdo`|%
zGQ(NEu6*E%>7K;BeV>z(EHw^8;BOWw!F84wBldW`N*CS{R}RQqDf-)i&9!6HF=IB}
zR-bEkD%eYfdOQZG_PUP05(-~K-o}q0a)RqVKe!DoNqNM%P_vFH^&8-4wGJSAvNp`n
z)CI65tw~nzuKG1~zIn=(Fh3;=O%=+l9NoX&jwIbNj)o89BX>JLl`mD5Wsa?g7pmi5
zSu`riB;;h&pV)6Khjg)*ajn4M&K<~E$HGdC{O)aM$Pk4jV;_twDU(Ya8=a?#zA!4^
zX#h=GJ7+y_dU|AQ9ZH74Hf_hh_&?@k)Wn0wyiXrR_V2@hzGv5{oJ+uj4WGZz;8YFz
z^%ow^MrXq5);4Wk6OOmS_%Af+PQx@AnnlDC9Z81Hm-~h|Y#jJgPMYRd!GvS&yn(zD
zC8p|+A}&@>HbiqEkv63%h3f2>IWEMvMe<<cYnqP@Qd`&6=QTx7kGmESJja?RT}I)&
z&L!u2Ky~iWq>`J0h3MpiwM^_@-G##i%@b=i@sRDM6?^F<M6j*N!6ehnCnVas)KvWw
zM${4gVzZ}uGdJ&RRxYg?VS~k3*mgIbU@FB(K4?S^9iULI<59@RLa95zb`2@`n%?*=
ztIFQ;3mE50TC2{uC@zg-`?D%D^{>0q^{%2AYZ)gMMSg%U&3$VeErvTMFLK_zJd{Xm
zSm%-cP$A?_UpsOilBlE#mH4>P!<(W)FR$>Jqn0e3;_Q;7qJ?KK;fcx7w0gz?E6Fx!
z(C>Owx``@t<o%Ik8$z|-SLg#-B!=Thl0DjkwT%UfyP(aHTR~^x$pp{(UH59+&Wh(r
zjjY2WCnm>PzUDGhdx-5Aa2q7wsqHRq_P?{IoeIuP33PmrO20BH){1S|#FvkrU#QEP
z+0dSgYliH`t)NxiQf7|a1BNg?R>^pYSD^&DWWy0^OwDBV=z0Igy+`+|1D=KXS`E9^
z=;4<nsL!r{I@ZwwF*L!)I*yFjmY47LwN`o?tQ>{ogPU8UtC0wStR^50me({6%8fX`
z=-S*0^66*sn8+GiEV`u>dmW{fgYTmh_#QFvWToEjPI0KPq$CcArr`Fwxb!f$C*9|2
zxmK;ECNyNuvl?}QSO$arMo-lW3p#awmSwAlF1-(TTo;0Y+>Kt#A583-?WE_;OvcvK
zfkw8LOYAXK*q^QU^<}JjobbtGb7At?K`wEy!~Tm~sjXVt(8!y|Cwolxg9(p7^!UaV
zNKIq;I>D4{U&DEAw?YU4yS;u6x8YlFw~KGQ6l%##I<RfJFsdTPzU-@VO@$t>_Y6<4
zcZ4RuxHkh8!7G_eNA=EIP$p9}1gev(0Vu%xmo%wBsWfgMh=@ak?=W<I3X0m@`bkTg
z_}CdUDPl6V?`pT;5WPt4Ch>#4yHaEk1YfKH%Eam22&qMn_z!-tZ`POr$6d{^o+27U
z<%=4=t>d0KG^7cfcBhw^yUnhb(fYgW0{CYg>sETt<P%h&gqK6-2nU-8qQ%^$gB^RM
z>b=A%_jCrt#pM$yW>2m<`%kTp2JU-3lKe4gvJtVTp5+>bU;$zg3m_J`Y4)-<Yaq@y
zB=`;o1B1CmXC`HGL9KeL6MQ)WI8-vQB3L!ew)n8IT!iJYN0}eJKQ~uP{LDu59Je~{
z?)$+|wAj`MPTX9T@BfI|yuA7?BoHvoaZ=qfWtnm9`~kKmT?UfUk5lrqIYzJ!0yqi}
zPEwMc4d<Rka=H+Io#yIUn0hKrLQ5n&jCfec&mdf;>0PA+A(%e<ylZx?6IVdf?Bu;V
zTn-(s>q_!`NaymF2Bzrh=vd$pzdDX<J_n>Kl6l|DYPCrRVIp1j4jd1Uqf&h8<vfX@
zA2r-1go;J-pDg#Bu2x$+Af!&>Z}(0FawNyFgF3+#eX4<6@jX&M+fXabkJYa4HZa<^
zQgBdf5wUx3SPAG*E&Yv!c+2%0yION0hTD*vD~c`U-;9OSS(s}ZIYJ%iJ*ePLHQxF2
zwW0h!jGtw>y?gCHM;`19=Q`8XVwS*9jVpCrzY6pE*{nh^MjVw}I<$bI2s%oa8<_J5
ze(7h+0JD{12+N35eP1`NVa}$24j4L!WkBf*rCxlphoom*7Z-G2JgaHl^ird-ypPip
zXm#-J^Q(3*7N6-O_s>0g7+@<LV(We|((TT>!@6MKkA~$fLA*n$pixrCv$!~u;)vPk
zpr=KBK5*H-g1JR7x=VP9ONl72U1Fn-z?hC@TPtjySl_FaCQqexRC56$@jPXf)8Hf9
z1q5N7F=z9_cDbzHYTyA|Vcc5ZVqZMr@Z{{O97~qPz=d)=iDHPh?q?ns6jX*=gr*9g
zW6#(BaCsCVFD)q9^FH17W|FlXC`gl)=!QP*)Yko6C^W+`*5-<GZKd&i`)V07ER_Eq
zFU6T;g{XBvr`=quGB<A^hFj2j^pM*7ippNVkS#ZPEd-=5K;Y>))yttqJ)c!_Kubi$
z!$mhoaZF_PPdE0+&L4x)Tyh4WrHRkHY$l!0^r78JesX2SHk{vyreh{+eiPXr%HW?f
z3TfmprcGEodb2&hr}7&35#vOrI9|0BjD2E2;uYt>eE;Q^@djHuE82y(^5BSrJ?T0u
zLoq>2BC*hFpR~p<iMqo=b*1d){vI`1Q{8b4-e{UHMKJ9_(uk*TF`|!plCI19hm^)Y
z@IT_TD^miH&#v4aGSOM@wM=M`%0MG)r@yMtmaAy*IaJKG@$L@nO3KAc1)Mv4V<))J
zsprUS8xRBJ1+r**I;(d4z*RTwIl8!O**gPGbZ}q0$Kx%MU*4y&(!-?EQx&(Dzv$?%
zZi<&#<|+t;uh2dbTq`BQ&n^*%v>}GroTODer=g=koKS^}qg$fmJshXQUc$xKaKreG
z`l2z4VNWZChIdTAxV_AIv(}WF9@ArwsNB|f96Ufd3iS^imf`tgPFh{4{1D;sRw&kJ
zppIA2K%iTCBK^&1iLQWDqwAKe$Es(Nv4Xxhk02KdYhCSzUypo6D)w$gMdzeh!V`lc
zB{~$SNCv+jEo8y$^KC~uxo}0MJMqM^G8&I%b|lWBt=hZB&u$YjE2>|z*~|dr1T@>J
z0ljMswT@e>zlV;`9K(LVlu5;@&?K(4KH9Cey*{>1YG?F{xadGHY6yWk)r2niqE?Ek
z8&{Z3GE6Mtr0I%08^h;|;}RT$ekJkRIe2OJhant>9xEXZ%4X8W*(=ty>w)g&dmMWg
znH17{To9H;4F+dWJq~BA+3y&ZYb6F?de+LmA9h^&PzV-oh_%*6#}R7-h#KApo7ETU
zs;7h?!6C@<35gK+y03&pp*v1+C3KTZyH~Dg=WiJR29_*Uv;ZLhkVzojaMZxQ0j6$D
z-6M9)y87X&#es+eZ@H{`cr2K_rHL-(Z?C3Wav2>_?s#&`x%xF)pe&oWfoT9Kb$tRi
zBkqWIUp(()x7&gKuxS>Bt6&HYT4TVdKOt-ETx2cbv1(Z|j`U9~!p-=N+j;o<3tyGj
z4R=dsxGz2GXBnf9N6WIDR1#k{sGdo!rQH%V);O~G%bZ6=AcMZDD|6_<6qza(<ekSC
zeulnYy8hkW>ql#-qvrCEv7D3oCt8|p3*85PD{S`3LT7dYYtIfx(v5dNtA5Bbv<AXa
zT$~T$)=v+f<Ip$iHMbk|ogpNLKeH0WM5Z+eYMz=(gA7MrLl`L<;scb+9Rlb;>#|9?
z-aI?;FCl$UH?khOCGE1JlxD20ycyS<e&(P4==^XtF-+v#k{in?8vB~q=@LXFa(wPi
z3+Ptwba^LayPJC3cjXj$r8&g5w>F3BBLds+XwcY%e7=t7riNnMcRz?GD2==1E9r{|
zhu0997l{J8O01BcB=bsg%_UiauD5(S4N98!!~jWLJ{?FX*>GL-tNmgX+FOx-pu<|*
zWj4ohRKMar8f%;8Rf7R6Y^3arNRX{{2FrkTuO7g?$*`SHFAV{#NZzW#K(CM8{6Jon
zvZpWf`NJY@wQ?S%<)o2pOKUChr5Dj)2hm7Zv&Qm+kD;9+KhRs(Es5f>%XGftsXgb`
z$Ka*Kt0N6B0<8ynR#etN7Fek!4OCBuL{9<rr<kCyw8Mucr$H-+&pY^eW{mb;*#fya
zma-3)jl4pLYh&fyUAR13o&6sVhnU~8Y1l06nkR%9zOPej=T$pM>`!PZEOs2LZqUuK
zu-()YS{%DEUo9p$yHr+UKmA7hve)It)n(-(PqGzV^<<H^IVm|Rc)-lEs)tLS%L*>&
zl`16S4x%68liIbtX|7z7;?TOA;&SIbGO_4*m+ao*6fEcHV+ISZ*d;JN=bb8pb+Q(u
zcMdk&+tGC^F&(NGuCkTYCNPtz%Af9Wlxnk!?4mn1d(cnkp~)3h=RRjk-H2p_z?8Db
zSfN<z<=8xA;G)2sS14&5diu6Q@PntKg(?GAB*UMQWvv${kmFPC4=;@3dg})9^TwUk
zu_6R<#&58a(k>H$-+>qN=)OmPT1AG#QJ;X?*OfUcK9iI4j1Y`4^fO0k6tPm>rA8-y
zSHnc1dP-y;cAqHaHMt#G=4i~2<FMFSo5tRGXG(2H%tk%v(6RSyQp1Z7Bm5SFQ)vM{
z=W%p<{uJ|$p23n%$D#G-+U1RJ{YIM;+E;DM_7AENLj)Od$~Ae5(V8A-v;l|OXuMCd
zSIwk=Cb!#ABPdFQIAc$RRuITac_bF$8adhzhCi}k)5ux1W|LZr2IB_tO?-<d$NUgx
zhAf;(q7!=sOCsM-t0xN;y>}>$O<qk2f4qwehSv|`&EJcb>mRz3&^M&Uj=d<3?6-D0
zR2vofj&-OWw^ZhkreBqnSg10maMgb`&S|c#gBwiKM>}L0u!qV-oSKjdUA3;^n)&I5
zFL9r{t)E4TTgk-A&Xm%T335r)Gi2Dlvl_l*T62G4+(km1!bvo;EoUgjadG`s!?;&d
zis$+I_?qo+sSQ!PmuK7y%@GQZ&Oce~j;81Wm#esSvG4XU)~gvcrh5m%l!Ke+Z{p1>
z@XL19hdtFs?%_?QiE<<_pZPMN3bTVCcA5=q7L(NU&y@T0=pf%76}GXKM+ie17+}QF
zUV8g1{qa+Gc}$be>uc3LBYo0hBgD&#i@^_$$G0VF6K<8F^H7gNAj$mta`F(chvu=1
zFYYqe4O6N)?OQa@PBst@n?T9$6NzOGjr8%Jx{iTHm&c=%j7H|&8uWI0^r&z2FjzS&
zofj`VK4;HZjR=y1^uGB5{a*e;P{U9PgHL>kDk__Mp1VdUe9zQ7-N_lJc{elUIg0<>
z%=NujnlBu$tdEP7s=oblv3~Ay-h8sOMLJkOtTn>6b=1|5?&=`_?IP2pdcHiBC!kSm
zmC%sjId)`<GQx_zr!vthNyTG*ZrVJ63MBZr(JzN*@Zn)+Pwpdx3#kjCpR8mO<+R>g
z=arP(=g`<+)p+jJIeFfy1FLaHVeLulHWQ$%J@__0L8x5F2NJdEyKxs#!U!cWGHdV7
z&DJNZ8Uv%00S|-i8|Ai_25&qj<_^6LOk^Lu8;^e``lD7hu*0Hqu=B-)#ID@VDNJ)2
zjctT(CrxMHRb*1ffQONGu`Qq7Y=+J%cGrf~o%~j<-q7Gc<a2WZD!u-ZFYcyOYG;ex
zAX9835=4Ng?T_TUiJ-MB)HQERkeMb5xFEQ`gve*0{-e=|w)k87Y^A<#mlcodt;{S5
zc^*(F*lJw)qm^Y+rKc>9Q1@x0%pMXQJozsB6{Er&4cm!*^ZPK2qC**^sXkB|Bzg|=
z?Aos7XwzFuc1b26pQo<X^SyQ5IYog`0ry72VRMi?OP;(=RGseHAvNC%Fy|MTs$Gs%
zvhyw%m}LJ3O(V~_%%kX8TsHUGoU}l6lHVHcMXjbC;NMfv#TS$0R_m63NUh#&yM1Zy
zeX>i*MY3C+*jPVy_0aJKQ0Pri+a2BJdxU@JX;nCC6VqSkniOY=aDL@uF2!&g@BWBE
zV_>SJchaG0X@&O9;pdiheFX8*(^9>O<H@Tc<2zU>_Z5@$HwDwFRV1r%mfOAP*Jvgb
zkEo38;C-`-A<X)SOiR!wL93H>NpP$EC<776%g{@gf!q+hZ&uHJrCGgbQz`bTr$dTs
zGeMHwF)YbrZS^>$6Fa_ITUu@RA|yDS%Qe>8aCqfJTDHe?5j6REwHKCd%*G=E@8vr>
z_pRcD|0+IG<HpXU=Q`avg26}Q9Sn-$AOYr5?6&9FULo%^+K+8UOjOP8QSCfQRi_*2
ziu~2xmwg53MA5ToKM%D1r@j<g_4b(;w>{uQHh(GI%Yo*6uMX*Ul#R2eYtyue$y}w*
zLQ2#uH1Bq~8S?%JwiQUJz%Say1OXYfw2l@`rDd%3^0%fDT2-F05_51QQs#N4+Z)C>
z*oB&Fa$d&#k?IEIjCuk4P@x!@clV7vpop8INWC5f)N~W3vP13c_s#m7cGMBW5`~+Y
z3Jekh(`{!1JkE7JR3AJFS}iVRb0GA(M-Vqz<2g2F1|LZeSap<dD;Q4p<OecIr_|uu
zpQFl~nw0MBYI%1ca3V|0=2%``Xc<j@vG*<a=63n?PwM;w93uM*(B;x8aSu=zXdBVE
zJfIafm0=cm(t)OQxAg5Y1fjPR7F{fqF4=>Hl`uZQ(j2tS0_%KgMRFBYG)7m)32)3b
zHc&2=W;59|m%7a2xHR(Dp|!A9kj8k@OU0%B)^fT#r>B>28J^Es>MVVRYlccT2{*>G
z=`exbiXXWoCnBk>YS)La!m`r>rD3BRIEhs&{TURcY=cK}dP~sj?*%d&I5T#}<KX7*
z9-)}lDJMI|4WPEO$cIBT#H5wCQJglSHrP$uPb`$C#d4*^ky5U6Lxqo;JelZ#F!YP*
zH5S0M8d1VNXt5hbez0;NwBm`Pj_sk|Cfk9jNMABnSZ&=%xlBVns@=7(VFBNM1)|A5
zl@tgUX#FJhN^_oQ%BBgD-6$RGXAF}zw4QhGWwcs307~cwp{13=s6)(|N-y=-nBtxs
zM~~H?>FuVioC7oBX&S~OCh{)B$S*t?{x?F+VwVfic}p|S#MR`=Y~JU?@gw1+>J*u!
zAc@QAJGr(CzTgU3f+<VC{(R{5XJvn50Ti9TR1-2I#Aw)WiE<4HXuwdf&STEQI1%o}
z?laB1nDXE_7Cs<FJ^x0$vAVVs4W@7yN!0wR9AGT%xVR1E#Sc7CKagiV5Astb%m|iv
z@^v1E@+v-1nkl<TximYHb8WYa3gSKafhfZ=mh2tSJe2oVXuQ%CKECTet(|`0HztP4
zQ&+m4kOww-U$|`Xy_{cj9If=`s1Z)`hWx$uE5#Bngs%C=rZmjhtwV_JOoSzTdl$?y
zaBBQ+D<9}77+lih?b@AYeeiH{w-Q27n!9!_;%1{*xSR=z)CI~Jn)4chDFKyJ#o8Px
zt)!3%)y#&=`ajD$Djp_yJUmYAvRy6I?A|4ppfhjXK~O8S*C|7NwxQs{PvP>LA=~9a
zM7!kIFRk74irH5JTMEZSigbF4kS;4bOBySq62%y}&w|#$&T?f<eC}%UsuVWO6zJCR
zx78YN{rm}3c3b`W+ppV};{C!Bjb9+oziW+_O_moy$lH##>j54`$cR9fAeC*|k-`2!
z-u&<Otm+#lo+jVDd(<I%oy9*yEcVXLqwn13mrIP|drgQ<WLzEKKff!JorrVH=Z+=i
zn$pdHU>z)!JD90XbM}hX?S-C6;W9n(k0$YFPOnxQus23}ntdZXJaTPW!{T6wYhUc|
z#FwAf1SJE#1ie;yt?O7qAfMM#d87EJp{}@(W2L%=h@pC2Pjnp+3uW<#<*H@-%0}dq
ztQcEYQV;yff$qOoM8O2j@9PSOeh@6>HK{&1*Ztf&b90D#{i=0LU2ILkn1f6;8$51f
zq!^Rb-|2Oy!c1eidE^*J#vV#Uugb3bMklAaTdBeN>krR2okWG$+@7A1{Pq}V*~uK1
zPw3{o38gBxb?m=n*~H$7iXgtOq$wwg)~$<H8wZ;q1YxAl-eR9xxo?`iVRwk;NRg<J
zX0L>iNQK2@lVB(`dnGDq=E6Wi-Gg}AZi9o@^p9>Q6OC&dFYS*iF4;@gEKE;&R_Hr2
z69xi>wa>W#jbTpBGVY~cQ-RDZouC{7)%j!+o~tMb9<|Ect?)ipnZD`JchelGcG?Em
z-5?BA7l)w}aCeN%m4O`WYVi6izw3vCCCvnZPbUu+>cIjZDdho?Lfh2OCZgu{4izqC
zjm5F9z$AqP@P$tp)~Y|pR)4mwP?A3MBCMLHu(KAKTqjGDng&PL)5^ZgD(_6e7D?x!
zD4*37+2w;tC+wz#Jm_Yt(XK+@Uf`s$6l~NDS3(rE7H*XA@a?*+A9Bz7ZP{KNDjl_+
z^fuAGgr&%w)xJh(m57gDi(!oO{V9a5^rXbHLzuc;<Sz-~Kers*^MQ04au^SQ5_-h^
z(o2wjBhAIx-g;PYFEc~`^aWsYMTEkJRB_(B186-18nBa8fiE&r`Lbr%8YM9RVg|HQ
z9LxY69DZ|^s!b(I&2_~MMJ*$sT#~#{x&t+D2A$9RrGB>osQ^&&XmVVm<5ITFg-)gZ
zJuZ+sRaDu4R$}<ofmgJ&r1{UL-%Qj-B#JfFu_n|m!{lmokBVJO54i5hn%{b{Ez$OT
z5+eI19W6-%Kj*TuwLo3V)t$a^=gaF4?49?Mg%-ph$lHzS==2((u?;gTyEh}ir_~~R
zgCqKD+;H(Q4T4=G&=z)vB@@WQUyE0A3l;=dPINt?f+>EdoVwkJ9jD`M4=<ibi5osW
zmaLgfYa1jhanr0qQvzceK*jDB5P<YPl=d5rS(txu<;VQvPSOoGuuyIL%jaaPFk6Vx
zh{;}mxa)XwWj-rd{aIY#W1ad$+E;`~ZBjdRE=j$0DU5gr!akB<ns|>x1b#@6ObeIS
zM+p@^Vn4moJoF9C9zR<<snguQ@Fpy?r%QP3yEZsFhkqr0yk1utT~q9B!!@Va8W;dF
zJmb7uMUFuWIQN`&xFoj&&wXtV?(H8_;W6YejksS*LlP|X^AZz+8!D@PqNm{XZ2+2n
z`vuIC3ay5}D@jxb9Oce-DQBIY*A@q;hhlIK_sE$MpnwmLlqOCte+OpLdv5~0!^;Uo
zt^CV6XDBsr9hD++kYG|qKt;v~hQ;&nzTL%SZ+=B>$zu*5Iq0p95mu?z+qC&iuC9sk
z=Z6ioGZaP5GsbJ-cn@}?ZP_RqO_OMH7G2i%>1IU)3Odee<bUJk=Jk?Tttc@CN5S`6
z99{dHbK5>vgbhTGMh`0oj;EC<Xt4LBON4Be*uN=6f{TO-p{84)I?IXqJ~U&aT+*JN
zp_->Z?S_Lv0*zU7le!((1~f92-xCRiBoFXbi5>3(${=%SW``KlJ3;7*GAQa$H0J!U
z#>g{Yqq(!Fss!k_xYuKp?F^A}h#MF$ICfRs6AOZj=UORV#rn+3n@lz$#X+e;@(uST
zp*>#H4leQehYOB|g6z`8MtFn;iV>ZVq_b7t+WihXNetu5pl2UhfnZjYQw!)P=E5It
z?G2nQmHaWA-DC12+*|7Y0UR5rpCe`YW)J0wAI0qTv~Ef-FT~ojKY<n5e@u}s?5v%v
zZ^d1Qu=(X=v(Zbj8h}X;KxY$5#w4}_E*IUryyRs&hy9?gugOA+vb9=vy1yh_`vi2w
z!0@Oe>X81>Y0Pz+*P0%o;EFjB*TUekQ%&RAu+vr<yJ+c{w&~<eYN)49nA+SYr)6;s
zSsnCUtjxi<x3GZTfsk&McFYJrkh4fRG9C`!0I$o=ku;O}w%J>ZmU$gB=h8jIni{9S
zx+#tDWLK@@+6Oe3*FuNnm+If&;F4Z99mCdb%CBeIZ(L0`HutmEnsM?vh<8Pofi@@W
z3m}-OJ%}h+8mK;w3_kgUhdnnBRAm1(mM0MW^-$7n0VVW^FBc!nCT9BS?dbC?c-yZ=
z*vBlQCkW%)nER5>HQq_kn0O6Uw1q&qnN^Q{Eo|Hyb<Pn>8OSRmU~w_swkZ5(ZN<Fg
zQ;ktm)EkF@Y2;hhXRWTr`fG>D3>6=0Bz)M*qO#PHT`ifmPz$jwj#-`bPv^z=ok9qj
zGd&W}x3#tn317%n$|*<RB}Vk6bLLVD8q39%!h02SzT%JBhl3^$LewnGcZU#tNLxc?
z8wyRgQI;K2XC-myUBf66t!A4U&Tf_8->IT8a1$$0g}aEGxx}(%_B?6MYP~N_h{Sw%
zIR@$bLs&a-Z0isO-OJyY^*pdhmUJ}oQ@XY6*yB8~jmRF($+mt514g<0ea`xW5pR+>
z?v^>)%_VSPCA;$LvoXBo6^slG!^8$VzTr4rGNLrNmKT#hMud09NiK}}zqBPJvgQ&C
zlg#;{(xS;_Il;>(*)zLX^ZmShA)B)SX^KuT1hOLHz|(ggp|>q!Qa35i_3n)+^-&ou
zk;Yflt+dmi+@<1T6H?6c*!MqCn1IZj)#396O^>ZozsFtX1jj9`IIByE525~WDm|<F
zD5LtE4Hwi&sgVHRY1H>=QYqs~h@6skD@w^bN3pQxj#vn488c^l35IPf+a|rN=+_zp
zuzd6w0YqlTP_Cf?&%v|6DgHAZ^nr5sVJj6-+wGE<wwsFB0t&v$@tH|?!q?Y)>;xDG
z#H4$Mf>tOs!aCzt4R3A4r#@DZudSA2z;AC{ebfbe-XcQ@=Vx01Vy4(5*z)Xc%AJ2+
z4&2tCGA&i{CJ#ZJ`XpRts}fi<W<5x^SlR+~BcoGKMr<hz?RnNEleHCn0pK2GAT3FB
z6<@l}e;PB*wD=hnTKgFnUmUKWmiqMtF3HK`@j9JM_VRTN8$O`D_WwFPGka}g^ex})
zQ3FH024pUqW7IFhsA`?;4Z<lycDDi=FL4om6oRNSWkZfC82co^$t%FAV-$<vq4TCe
zzpzjGPfe{>_WJ}K{+bo~i&Wg&6!W4B1$^B!JG>mc`%ufZ{7JDVZXS1m>%QR=)#X59
zGSZO02IT~zjwQikM{f+${7GqV=90PkTo4SgB4bK@&^fHqf$&p#WqWM*p*A9HSU5Tn
zW$kV925Yo|&`3DYORJ8#M8UK{Qzx~~U^~RqV7w#`HNk+>$vHm$4f1oB$Fy62DR1@>
zCK|uuZN)!Fx0p`&11T-O-K)R_vM+A{0~R8hEwe{h>=}0{pY9s|g?W86qx2s^`2C~*
zE-&znTn~M@_5Ye#x&ma5)hOfs#%uWRHvq_|0GyU5qt0(2;6Ew&`_HM}HLc$$)=I(<
zVxnI#qJKf}0tfpaXZif{_cT}h`&cIo0J{1&*!utYMIZ+wz<o3%hJxu=xkGF<btzwH
z|AiU+-=_oEt9RW$!>H#xNyu$^d~jm+e;ZOf{`)sIJ(nA-Fm`_fKL0n#j;Km|igM1U
zp$pmWgh@6`0w53i{+D6RPo@;SJ>u1A?89{AqL@et*Fxy?xg-fL?lu1Z_Z%GURi-OF
zhRY&&$Jng8rD4y-H$4B_h#eJ+&D9=V?{pDDnO!7s{ugu4|F`o8&;+&NS|DdhJQgX2
zd$IZYZ8a_Bv0vA0|Ca+@Hg#2qS;(e}-E%xk(u`l&witVc1#k&+vKRg@Jo?SzPYM*5
zUF&#0{+ho;s%DN6Yq5og0FVJsqDIYMpymH1k-r{1clYb8CvU4d9q)p!H}?LI^i;<v
zdCXn=;ljA@sPq3{PqNSYE;b?AEk4?j>t}cgUX%3yD?v_`M`06vduDyv`h(%iH~hj4
zJ;l#fIWJQD4I~bTft<|oGTPFjyy60*vS2~O`tX9MWw8Y&(hr`+>~N&ecl{~b0D4@)
zL{WGqW7K=!;t!hcRzH2Fez<10L~itGCM(`M+*uRZaj)yeYmEK{{UFEY|JYtShU$h#
zyk$NjCf2@E=QenOiL$W25J#~%;P-iZT~_sQu~@i|Ejr>afUCbqm+_QB2pB?gt-ZB>
zOQWIk@-;$g`6`v`+iSB*(oR2l4cmtARJ#9#dVM6lEi~6+Xbehx851jhIvZ3th1D63
z>mVP6Z2M`2>~is?vOSseQ#}7~6;1rl*m7FN<2j#^Ic5@?=X~3Yz%hl1dY{=RnHD<8
z#v?5Aztm;$y1!+9WgO!IXQndp!@bH9;V)W<vDwS#D74;DCcV6ey9P9D|06e@U@>iA
zteT(W?xVDK_H(*U7W3|P`1UZnGaC|`DQaaF2Uj2mka#WQ35DP2-ADHb0k&+oi<vi`
zw^&M<$<E8x78Fuf3luc22oyA^4%}WnNRt>W4(9=j{W&9iOXXV0^Bq@j$l>@>rGB^z
zgg(6gN_zZ)Wnas6m6C<~KKM9ixIxhvJbkmrAY@){w4A)OJf1`cpjRIOcK&i0ax~@T
z9&w)5e){tw<J#;@P8?YYagtJdLv?#m4Vc^q@mi=i?QiV=G^xFpX(XfyV=6(u#z}@r
z1LIhMh4!5-XCDixAL-dCpT^+SZAFJ`$Uyjqi_As{yFB`}$~@t58aLLJ++X_&j!1P&
z@{En`>NN=5H_m4rQ<OC%rE(b;znV?)HBaD}(X;;2Ho%4aW3DOyC30QYfZhS%SYjp%
zvJ^gfkh;|)jo|MMeMYY3+Vo3QUY=Ll?_xAziIHIb+n)e1^Qy)|8<Q)#mfw>KQT++S
z7UvTsmL&`Zs#Fa+GMWD58h{rU(_EjuB@=_9YC3Bmf~31!4AMa3=oIavMB1LAwMm&{
zaFyla`1GPLc@J3yQ~CUSc87|0M~`h+m;6Ody{rC-VG-}E)ft8Dhcr((qnFNzRrS!x
z9Ou8`P5Z~7?I!@IW2PtWFvN!7ccoD5nbUjk#Ig5=`_}qOA}9;+4#`lYb?KorNL*Jk
z1?g4vVzpn>=f(1(O4)z7_U2T<v)aTu5Z<EDWsT~%i*$ZocBNI~y9UL6){Eba=@0&l
z%QEa}67<1tYke&(>21umam{lf+vjQ<L+%4T@sCB?e9<c5Cx_ePjTmmZQIy)CDQq8J
z4Xl4mS8`hZ<?WVBe*xwRBz=XJX~nvCoft2SxG_v0qj^|&C3Q)^(vagi@ag{#t77ke
zeZOYqyY)eXJR6vy5AJ)Vt<Z=K-|{H(Q8`aC(BeHd0VWkueC=84J0|U>3z87}Dx6xY
zx>uw)@z2b-&Iii4qOm7d!lkV~&=5IW+tn*4eCB*1wmoW({<RjT<G$&SeyXjta%s!<
zH{Z=HwKn4p=X>{YBAwa*Inm5h^>a?=jz#D(e0>ifg<CSW2dgijrswFg-R@W~0#o5*
z8>*xH|JfFF?!i>EH&{QHJ#f6<Du09_N)xYmW5+#w)#SXuk+%G;<o>(d@AO1`d3BQs
zo3&f*0f}iTg_??;`H&dj%gN!$Dar4u^WE`fk573OT8+sjeBnsmfH;#iEp?EZkFS>4
zKV_c&TSNie#PBY~x$k-U_KOE_x<PH2SjmWCe{m~xX<uD4{L}p88_8x%QmJ279?u+?
zU~!zI_&y9>KpyZmzVrN_0|BvtyuW+6y(KBST1;Diu*e|3@2pm)9p0FGq`m6^Q7Q8y
zJ=P=5A=fR$5P;j+a0uR8nN&aAT@mqv?!=@mUCN5FJNX~Iu>n!w;?{2H&ijh5)4o_2
zGemG5@-6mRIwjj1K9g@R_f|PKD_aHGYcIt;LE6Reo%w_POrLltG`qq}UAxo_YM#Fq
zG_HR7q{t+y-dojM8Cjnmh5DkBqw(fE=|C3D-TLX+hJfOwA1apPQiIZ7N&cy9a*NFA
zC-aJnM^H2QT8L8Fzkq9AzHIBSSU@GsU&SduOi$oHQA@tX;cE%MZP2g=E&aTh?>#3}
zswK6$X(@TJKV`xF+Q0mlC9|kXwUCfdO;DvlQc|))R|8XVeWC!_-wscFT0vavdC#rp
zTi1^$&Obc`Ku^$-qB=G`-aI<q|2M;XwJ7C?##zE$zL2#y5}d_p-zVErwd7vEILw^~
zDJVbVQ=K_4NoGtr<?$~&*?8*O9Eankq}ZKc7+g0MdF4)B6R1*bq5Zf3t-{0Lm%Q{V
z3%|kMkF2pjEqCw1xv0B)KhN3vsb?*Y{#;zv(-~ci{<$b*Ibd+5P<!5!A@9#WphKjL
z`xHGz6j-X&jo;IHTPDlkVigxRa`;B;eR00-I{+m@%CsPjE3@gVqI=k0q{P!pf8D4<
z^OhuT>kPqQ=NY)WIJ#Y709w7*UQGY!Psrm8IhumU2I%}}JDUPG*!c$LWQVrw1@Gyq
z@ey$LwGGoV^(_UF`7t=l8;+w76w51a?Z#o%BcV%j^Zg^%ejNLML4Ndpp}BULv``3H
zpt{`W_E9N6v*5ru-SK1lAT2Uh|DyZ2l28{py&nHE@^c5L46L7yLwP+QfRgE~JnKq+
zei4;tVSdr_vnTo^S`YP@+>N0I%g;Ou?GK6_AM1QGVG_N<U7vf5hGsF5EPDd7WhJJ{
zYZ=|yxef#Ji{9%1?mb@1E2+7D&ns6};-`eb9}Dt&d8wv%$WDrnKKYg1E5q$nD1$_X
z-3d<?Jz^W0Oq!%urB{p>{$9t{Yvcdgpj}L%sN8HpAH!c6Q71g>mLq(DC;F3HF#96~
z_&Y=Kbi1~TgZKW}0p~wPHEj?2cIL0$d9R-N>x-eb!I#3=Jm8xw?0VQ3XPdw!Lrd+6
z`IG6*G=FY>)5$;9h<s)%^Agx-#{Kfvd)m=YNPdGPgF6mOkUJfwi7D<@5BQAs3xx!{
zY#+E|Vy6|<F<j_B*US3n&@d6~lenyZUzzDP#lW=XRwQ!dv1j}PqX}ZoWYNi=Y)_}B
zIp5tVs~LtqiQJa=C|Wm!3@y>7t(N9_sqR=K{@lNpkw;N*Frs(6TjkdkxtS?*2;1zh
zah<(=URRSQj3WgH5n3Y^2c>r9?mGmJ=s2%<lZB6LtxMxSHhr%Th({I_v$dYN^$&fx
zUmP!84sp7t`I|mhv`x3PsqHh?Aab-2E`~NqZSu@r7H^wjY@PvR>5AXFYIZ?i&bYeo
z1gwU9sa`AczH!^tF;1#K_vt0+W+cMsY`TT}SpVXjgn{W+lMC~CkZ$fCXWuO1*~jCN
zxkhio@NL-EImEZQs*``S7$EhRD_`4?PY-gcwU3VEKgv{P*66INkx-PmuJ!s8`)->X
zCF#l%duG``tU7b$)`p03!}Xfizd4mkF=EN^E~|?F*@CYh&!9nN7svMd#latmjzxwq
zPW^LM|LaWL`{${^S1Nz8n5mgU+81lgtjqUWMR?eK@6i>#Y2j)`T>Pn3dCVVd&CsL+
zxH<r4O#QvGHiOk4)v$6sb&Py(WV`l>eL1Aah_k{-$hTH8?VwZ&KfGc5GVTwezj8bt
z0RKWHy6yeCLKLs_+KS%d2u_=ArHsGfV$`r7ndBp-9-Jbet$lqH+r#(g-bWi@;NdPF
zRr%l757ITAM$w2V;2i3M!lReZcdJ)ujHf9x5I9gTuyK9!0{>9y%ME}^9!Tigr6US(
zi&4IKi*1UL2yJy7!<d<^ma4pQXWN{qflWPljl0B(u=l>EBB0RPzIqi&GcIX!;UBUc
zr>vvcl;QqME!fW`ymznCATF}MR`=4(JqWqEv5@ypz+1UPEu^EcmVA#@L_zJuOV6Ju
zmXnDh<wNx}gy7q8ynoQ+)D@=l7F@M|$$5q(6)(9w{UqLMX}Pz=qd5TTlBS<+#7mV5
zlb5xxi=gzqi@#agPTXjdI@8l7CXH7*@KU}PGoJb90hvyzzMKL-(9rw6C^CbJlDCVC
ze^XW3zGQWF1KfpcI5|@kW2n+yjC+O{o^raXHNZV3dB|pHjme;v%nMcFjOyseTg<1)
z-p()i*8=AzUVw@Y<q~gyi`pv+-FZe<?dfo4F3*UxGm|{B3Tf4BZ)<N`S#&de@f;cg
z>{GTqW7=nV-k<g&QB~VZfenQMj&J}+_bO-4c<J5ASim0ns{Cv5r$6gC?){OE6GrsE
z?-c(vD_D_7iFA@<(eum6{%B*BB>2G0moqTwj_uCMq`Xa;Y7ZD#^*twBl|!y$oT~Eo
zC+*<MN1QT<^2DOs;{S-iDem68fcR)q&c669Q*46Hn99^^{6v9N54?V=n!SJ7#<@uA
zM6YS5xQkcQM#6%w`m5|8YN7u14vV9A@Mir*aOJaATQ~{ZkwxZ0MT0<?v9dz`m!aXX
z+$E{RWZZQcDK_;s?>`>D+W=VAHuCA}6TkEuA?*Bf<?cl+QQ>u1dXDib%kY|yg5e85
z4@(uvoYf02r%O!2TK<rhTNzz+*ANGs{kMN#;fg-DR*seCpy`C8TtDQ&Q%Lg+f4}<)
zuJ>EhiLR|xg#Uh=`#I$)(!Eaodn&(PdPU7tZTRLGc3hIXGL(1wl=<dUUQBM*XS<{c
zDLdT@B6kP=I6F6!KZP05{ThYhPqE)7OOqubMbaeDPux8VyPqSew~l^1y;*nt(an1~
z>t8-jj_LhjYXNYDvw*#c0n1DO+CkmBLZJ(vxTA7_`CL4cT)&#c&>$2$H-d765}x9i
zpnuwZ00sr1`4Fqa<zHIY>+HW=7NYi1V;}>2QEpnKlWe@>EAZH5q~q-wuvA@UivKU^
z{Og}D*O}(QkDf=phyF5RuW0=3k?U9a^J4BPoVS}2nXvx}<4fyM74sV;KW~al{&T^v
zzZDB0i4N~2f{xzB#6qEO<sQ518tyes`Zz=AZ}REkG!S%2YMU935?ORtFso+`|HHe#
zyroAQ1kF;``{<(ki;6d|J0E$aXs<-xttylC2HmH8`#uWx<;2BOnPpY)x$=$+gY$oy
z%3B$U0JkJru66w~H+S>Cek-s*ce(kWBsvZ1_lROGiz3!*b+_~}B8-;|+2-y06#j4}
zr@p;BHUKl9QlDr2#cQ^!qCzIT+6u<gGdauXK(+zpwgoSXWUcjjZMDite$NOj>z23P
zpZ7mbxpanmU!RdF^w$fX>zHmuwk}^sCLVUsFJqv0Rrb6&V><c`EdfjMKQ6C9%R~rk
zFHTMVMfOtyq6fKw?uGU8+ZEv6nXZa~tB43J?$KKH!?iXej8Rwr=|7Lo&2$|wG&(^&
zzX<n*Pt?89WLmXOGZ3Z{Oq^Ftlg=vLI+-YYxKIKPqx;Ji|29dTfOiTz;5vTn$bDX5
zO%Q`8Jecmf;*x7SB~nM$-1f41ox3ELcynp|0_(!?zceeDstF&aMTe!2|Lxhhulcvr
z;nj_r^a`O3Ap~Y+x!k^31+eW&tg4uz+mp=Xsk^_G@Ne54ML|hsqiMDMb?7tKorfwf
zMyGkCdQA%tWPsJY*1zIn^cDf6)cXyrlgqtw|GKbFEnpbN9AyH2iJB0_NcSptdulP$
zYvlbv7)O(@;SI^a^+MO>8`@zS`LwtS8_s`O{7<@o#ZOhZ^oxD3Z2VD^s!<Uq$k#Sq
zq`pgEt=pS!AC7{FTdGbpZ>d=scopAU{!_7E-m(FXuI%>lSIlzj8jXgp?ClWiv_kt;
z%oP_GV)K}L<m~bTBs41vhzaZ?KmNB_Ip%*7V7EQ@g`r;*9jp2}8_cKbOK?nT^z?cP
zU5a}C8mDk2SnSSP`^2ST`#za}-M#k#px)s@GZMdSq7<(v|FU!HB(%0@QChf85vTX_
zRg?8MU06)#g)-r~k&pl01f5|E96f2i75(c%g+k7Eh8v=<A6cZJ5|8hhmyt3(`APg<
zr5apcBnn18y8N4E|5C8>lCOgW8Vuh69=W=X7OzB+ZN(y&XAzxTO)w$h-yZ)jt8z*r
z^VV~5#5p_NO=>RRjj#Lr`(}r11$^#XUJ4xB_4N(UGC?19lYIcQfuT6(0}Xa@aT(uM
zM1KBk7u>+w18n1pg%!P7GmI>$t%Xf;t3GH@RXI$}^hfS*>`vkm_1YN3#Bl=~CZYcl
z(PRD_r-J-u!B$pQuJ`Y^_#e{km>ni%RDOwX$PHQWusH|FgpJ8@V(V*W$4z;^^ul6;
z>gwurOH0dG$@RxJLf8CN>7aI3BH1OT09Q(iz9X0WC03#ImiWF_>|!EB5<%1bTlD`9
zk;ejVjRwF&IXp&>ABJto`o!egmK3WSRv8=~QA6VKt#o_C^6>bb>fMzBgEA$E9W;e2
z;Hx{<BRXq4U*f`^{_8ON^Gz4Si>EgQ2lBp2qu!qBvA>$uBK<A#-|{!kWV1E}4me5F
z8URP|EsC^U9d8lprvsS9tw3>DfPa|oUTMp;VOg(i=~cwsTxfFOom9U3;&sG!a@JL1
zO~~V>tL!g4_UPM%y)`)5^*R5ij0I41u@dCBd+)&Wk(AmaBfUC@*bjH87e|WIU#v|S
z^!NAI6$b?c>1bsiSt7tY#m2@yGBR56bHvm<9xgJzF^)iQ!FSFxP>?=W@b;uBjt9Ja
zpF?{|PX1wwCrEpGI@ea$FKNsubz%I0R^$Ya?DsvpUI;YRUG~-AGV|MtXWWVjgwM1_
zVukqm7cVm$ay%R-F5kQ;<&g09qWJxm2#y=IYc=^VmIm_>ODjiTI%7e%V6X;3;~KsB
zu4FzCVIxq`r0%Iiuf9EYdo*-zZZ5t%Ro+vzFjht<{#J@cSJJ0*RzDvg-;plo6}2oW
z&7+G3pj_{o`p4%czZfnTp&tHA1-M<QlFky6Ma`P#*hcZmld#_45&Yh|2(VVP{1R;c
zM?bJ<t?lv0qvh}~X)Ua+QNVv(JKDDiFg!;pMvQ^NBs25adT}8IKJb)AyWIV~?m<an
z3#IIsZ>>U_YwCSM*88@ut;){ut`Sk8-yZyLRdUqLc-RO^ogSA}QX=u!XU7C!hBtmR
z&jD*Y-xK$+V0fhcAWwiKN(ne|hUTf!pGc90ePt7`A5;ei3+eXD1Iv#eKVE<nHe25c
z<ZHI=VmD^|qc2G7svL6Y=~r0EJjrgB0-w!GxH7Q!w2ywZkMdt;hv^IjLqw;oa-_eH
zHF;pf$=}l^6E9r9{irYRtAFVJQH*;x`=!=qY$&Hso4kN%8^hQ(HdEqq+h^|9=g^U?
z;7p#&u$q&^2*~kQmD!~PpK8ZQF2kv3z~+fRDQu%l!9Yvm@ZD(4WM*N(4#<D{atxoB
zn<j9y6*4O)2a(5~brhxEs-jX;Q=3gE6LRYgm+~8hD;hq2oKBE+n-`?_5S`!EG?2Ob
zjoJHKYTf{ZeH)u`|Eb@VbLXVnI{Uy9(?(ji|JK=G-sqz;_bj+ha3dG(1?sb{GoJ8F
zOGyzNF>(w4`Rdl569O>P{s}C-XJA{ENTOy(M+afeIF|;}=g<`T?Zq+Y{>plu%YJXP
z>WP^})KRn4gA-f|TlG@1k8>iua;uYb6#u;7E$)6wWm?i|$`ZbMG6nkz`SvY+^<11`
zU83*R)s{sOfapx8kE2fc&V);=IXV3ww!S<b>aP7ivXvweA*CeA)`pO!yAVQIvySYH
zCCd<FtQ95uR<=?0EMwos7?SM!Zj4cpWtg$fU>LuT`+lD9?@rHu<K;D<`J8jEb6xN2
zdcV)PTrAe{kXD)-()3$9^k$cDeCGjx{j11z4dw?9zj|f6>lUxnLS{53T$UX^q-=k>
z9s1k$sjvz14GEBogZgDlf3N-q7u+mq1Xa6WC)W1*r4P)cg??>qt)8Zlzg;QO{&Y0V
z>e8{c;dP9f`VX7a5~B{&2#*(Nx?W?JP0gg*aqW&)_G@3DV#fbe6#hGfmo)er8VH20
zMH7J)?_PQGsjULmsGq<v;%G@xm%MSX>M_Mwx_GRYg6>f-)&5pyv}UZZqM4|}8}!3^
z>2TLA+JN)z06MKKy8<=*kiLC22z_-&=7+(*L2br3-Qu}z>1SVFc0wZ1lu5(#{03IV
z-RnV$(#J6e=5UIJm*z#gVA9Zg+CuOVstsvroXjXA80@VXp485+J-WH;GQ5BaX@&{_
z8Sf5OXd6R_XC#R*5i9Naelx%@ry%2hJdS3Z&r`1s>p4!b+Ex^Ks*@++Bop!Ax8!N7
z7^cq{nzFs8d*BfqACWBQU0nQxi{7T=3n=_@*H8wotz;@fRUIOXZp|v&F!)ewr}Y$}
z3{1&?xAMVL;+ckIm!%K98cG#3-AfoP+d0WAC93X{hB-(CzDQW~K7x8N#LuMljs;@b
zNNycp?%OPC!vTo3|4MRYE=HYifm|35^%`72C9!XXm%!QU!vDScMb}Pw&cLs1Zxt15
zY<@!8u?uO%hl|&>p~9UH3^M2x{du1mHXop~=$<2f1BYAOz$NW@seB1lTPMeFedU&I
zA-^y29{uTaABcFd3z?j+_KZ#cyXgNcPS{^TU-`-L8TegIZz8cjGc*-Ss3n*={SEAI
zD^1t0_rw8P@}ZYk6{V1S=es0Kzs|dAe3{oDxD+SWrGE*PyYLX5vHxPo4@T|+K-cI&
z4Z)#7%Hi1Wiy|MygRTbx>$6;uX7nV7G|sPlo+l9aCDjroAD>#FHROah<HEwi0MgqP
zH@73@S#%R<5gCCn#x=kMB_)T+wUyF|VkW=vf0^J@5LU$zZ{Hp#3bE8_{PkBbo++jO
zN(OkhT~iv%@xsIo=sk|d1<7HC=D>60xS1^8O6@stn?${0*7@F19l<yN;zUiv)1>|G
zLoVrMd}~uodo9%-d`gR3!S7CxBBOx%l-SXQS6t@vNM7bi`OP8SfpR--Ttl6dl*{D2
zHx=;O5+6Q%fTRt4YMmsHjO=hStu`@UXj`tv5wNhfi=k~1(#C$TP8R_i=_={b9^l4d
z)%Lxndwo(N0fw-Yiwi(1{Sd7PzR=A3o&19HP3tXv+jkW)(Hy^doFhTDr&lz#K4wx+
z_BFymRo`y)-Yx$iu6)Z`KO-ya0RgDGR!yMtmPd0mQ)Ylx$YB$dpWlL+=@fLAKY)9u
zrYlVxh=NATHXTvAg7Rje{ol-rP)vZy{xr(w_S@$VFIQpP0%sFbIxqd(zV(>5B6bJa
zuFln{?rjorAQCQMKaXMhmlu;CWx0BdN+EUvtyWpon3?qS^?g)#&zw0^**IMDz~pp^
z-Di0dtnS?McmZs;ewgAjE+;(THVwZW)5-yZu(}4^9oL!tAguA@d?HW~`O_g;8a7I=
zY3Dj$5ovaCInGR18xlmYa#Do{+6Z9leLOa>PkHMz4b6R&IYpoLF+f$4zKB`$4)Nb3
z4SFerG{d&1m$d;zpJSUQlEx?=vsFX!G($gUpdR=1CEjk2yC^$AG^Y({LZ2r6d%Q<z
zy9KA2sW#Tu=kn0;UT!>9pvQoRdOjyWyun}MjFHOuSk*}0?UX>j7=7v#q~Z2P>Y7Eb
z0a>wdtb8=Rsb~P(&a55#{e$A-##F!}Sm`X~@uxv3G4ZW4vTdU)W%hg5m+R)?IseYV
zfW7E-d@DF$r*rO^OTx3}*J@Gc<tLG2kvc&q`DC{UPCcnIYYVyX9feS<`?+_dG|HtQ
zRWceL)m(+HiNf1e7#H@=72XRMBw8;7)FYDR&dy-kRrHRJl@F(v5>9WO@Vda<Ny;j0
zhE(82Ps3L(u<Wp~c1qSq_+InO!o}(6OX<0E*Q?tSQn(tx{r@R){MW}RWdyo*EAF*;
z1XHGgHoTJ;#v?6*fWe!JiWEoemRn*-d&rRB2o#Jt4+bETsihpCt?L=yP1_*E#rv<@
z`aa&bsm6M(M_$)dQ_ClxHmP<=7%#W${LvDQLJSuehTB{_f88R`+qol7OE&)=tcpLY
z(r(bTsC%|E33}9>^F6nWdsga;A8)3p!<bSAJ>Zj&_3*WB*NoZ1@}ARt%fo@?`8=Am
zB=4@YP3aZxb5+o^)XFF=d|Li});(%d?l@wOE$XX}`5Em=>kkT+4&~L_A^#oQf1K>a
zV|SVqd1-2rDDO(GTI&?c_*!Vq>O5mK#A_cAYJQ$1noZONR8et2^KVQRvZuX021sN&
zcDL8T73KE*mr9coM$Ms`2d#TU7+BW)Pm)51)1;h}XMX+K;j4PoqLC=N+F%~A2l;T@
zAr`kfp)e*t<xg2&!+PU}^UA!IjY~(NM3hj#9v(DX^E0yGN$w4~C1Wpyffp8H=(^Hd
zeD94W4fI>X){k&PO0`{ye0YlY!vcW)C{ua(*JKgTmfZOGnJVw7UG1X*qd>aq^9;$r
z^6!caFwB>iEztHIfJ?gjST!xHuD4{GPSA@kQg-p`IPlvrX{QeXVn?4_g-7HdSH3WV
z>8MVh!GK2vm5Ue_$A?QaJXP49VMp)vghnasJS?vH@s=k@5v&p5lIE!M`0+H$sU5GO
zvS*pB`&+GwBTT!3LMA=D`|f0{cPGXby^JnrgBQAbPx<7MyRxz_*HU-z;5)ZJ8EL(-
z2x_z|ln+@pnp~>By`39$QxGq#_Ri!isS&Pvi_@_EV2j$*26R(32l#&jv3*x*h;522
zpSHvlYzF1!Ad5qJ3^Ky*^u_gS>f6m1sQfK0EmJ8qbLr5pIr%x+*^=`)*F;2Si2?ga
z>9cdGH53988WJScJsKP!)k3PBOOFE}_7{_ukuT-=W#CVLU2kS)X4GJ`^XC#>r_1T|
zB1J`OYwpA$HQr4-=kbS)b#FB{EAe9-mLeluDgNMbLnvuUczb($ZF3X^RaKa%I>UTq
zqSWo@Hy=gmUs1puk8;)DCDyMmo|_$ePm&Q@qg&zz_Zr*Pp|DLocB^k~Yf}p5$k9Vz
z)nsXjmS%$pTWh3|cv(3c!0tfyays61NvD(>P5e{Z{=e95Ul-^-1E+qG8N=%BQ}+NS
zDw2(c`T2O*om{8Mn$jmm4me-D7_q`AH_a+a-hhB4DsapDR(MA!@NV0-pUlyQivv?s
ztlP~?R~ndsJOJR9G)lQoVJUCH;I;9GD6i#-c5~>mVD+SXc&eZKUO6`oMmEFAf~DM7
zijjm^j~<y;-pO+CQ>9;R0#WfoaK8bG?-BG|ye0};(?@Z6-@3XUeYoRhX_fM${wn)C
zkagnt=oP~EPQKpxUM3+2B;_fBVs0N!M(k<4I2w>X3#|9K57f1@v;iOe?+yK)l^Yv0
z^6n05?69m`4S_oSk2x<m9<;uG$0OM>D#+{$r2E?nqt(v@@RKz4F4($uph>tfp2LtA
zGM7%>`jz79tBM<kIO)O5RnlQqG5&UNSe5h0RnE3@2=mbp;h-~cpI_WKag9@!H0>5G
zBlqeTKNt9gI^E7FdN$Tq<}i4L*rqJk8yjcpjfG5QU1D(#-RT$ZtM!;`<XwkyGM+D7
zU#~6Kh4>Qn2l9Wqvut7W5G2Tm>%hHUmHai+D=BY7fieJ3DV#GMay(^7RqJ2m(!qLO
zr*U1;J}SjGd5$IR*MdUQavNuf<VJDBj$>)RkAdiWJKYz~#x7S|XsvrZjS5_wWSM=3
z4VHYlOrHl4OEig<l1GZh+M1U!)zIqYsGm`aQ`LM<%@d!&dRPE1`RTeY?^;F5TzPt{
z0VdU54J8w%dJ`*O0A08ntUfx8$t13Pt!3oZAFp=B0i^(~cT98&;G^)Ci#HAu{T%9x
zpbh+Xc;p6BV{{YGIp7oVd1n0cJ#;(I2Ja_<z4P&{-x8!hb88*8&KopB7zB<fW@BT6
z6Muxu5lSoN+mkb@K;8N|)l+0#sh%D{^^w`%UB@pkB};;L7sqao?x<VvfdOMBMQ`Fq
zDQP?%$xz5}DdjmAQi%7)Q^V2+d|Klr&qB(%2Phg6sLRY;;u|BCl_#|Cu6~W~$<$e5
zqVpNqkq^hmgaL4xy+vRU5|1n9*<iL>wda^x&u|if3zH+Ur53hl5h}lx`2on&Ei_HH
zpX%+}xk>*ZnYdOlWI*pkmu3Ud64r030WY}q>70Ap#hcb`(Xz;Tz;UC0ethRy-mfhs
ze@8;17g{{{tqy|sa~{uAD9{C!#`u!f!I=cw@LQky#z7`t&*olCBO}h8sC=sOJs0jj
zVS=T-dytxfY=1n)d^GoD{^!lXD2kfmd9hWuTaxqAQib;v0ooK3pmQzUH3sudQgp`*
zJSX!ncy<uO`eJE6?tL1MmH%Pv{8wYyG?1_#_-s)q0wpT*EreC!sonnMz3Q)DAGqp7
z%4(1K^vUn_f4G8AcXS$zD$?FOQ(&c=sG*?&)?=wcsAS7})u_^pJn4qEm0gzOe#^+h
za~TdSRG)6cJ{5}dXZC6Uy3+&p)Asdr)Z<et?C<MWjsQeXe#}hB9!YvX^cvrjtyn!h
ztr(1|ge&!z1KV#YfKo;_P~NYM_oOp#RoPDS-&vRvMvuUF>9;yW5N$M!=N{v+HL7z)
zE1e@pmijYQi#C@7=}(B=c&(e-9}L^saP#uPIg2&z#P&Z8EUw}QS#aWkTqSqP0Zll0
z2ftrS9<DOe(fJ{_F{rKh2DK=107sxk3s|Id6MCo7a$)N~6^zJ@0_gY7UpIVAvVJgp
zQ1ER{-TdVc_gk_G>`UVVPEn*uwZle?mk6xdwH{xeL^1EiK$=P~#p@Wt;&1_;g*tBR
zn>aoyti`K!s&5=^*>arwmhHRs8}pR4*-BQO<4e_*#FGXL&e3U16*-NY%w92HU#0-1
zTJDL6I<7n?M@9K`nIHLe_ki|%3XdxDmpv4I3wD7@1x!Gh`3$M8Hc#_o<pMeh<X<bj
zj?iqWTtZi#VV)e{@srXV?EoWCS0IAlOJw)Adjpob4O7{CIa58VH+S%eQQlqXdbc!e
zna*X*UKV*lsLviuP4io84;tQ8&`!T=lzRD!UAj-sIoL+Oe=C?`@!<^+y>SyKDI{Qf
z_TKa+m=foJ0>^f@tN%~z$rFA%S{4FQbXQ;)lhXsa^PnunMNlwbeswcs?tJfEz9)B-
zbL<+}i#7Vh4~+zWAdZlygw?Kvu?f`QyU9FbG+tLpvWB;}x4Vx$3vCDLY%@g^Ac}Sx
zf?)b!{;t^P^_wFmQ+1?Jvrg`hNy*9ARL{A+1nNqRQ$IN`Q&w9q*vz!WH0%&qQjGC*
z1Cx|AXA{=G9TJe2K)sEsKqiKW`=KYb&Y-=SyI|Y1NewXI&rRpiYPYTLp`(T^&|M%)
zBW;coI&+M4Ee$g+=j*<G)Ly3<=d`PQW<YX<OW{P6UH(@em-qz%&_MW7*hnbRvEm;p
z_&)#=*n#S_-_uk^)TLW&Qb5zdjFF4)bE$V8cxTY3s1%pFc8SKhif4mw5H&xJqr2*p
zOx@pjj8Xi1WahR6cS;Itz0562`7`-Egw7o+w1NZ07gOTABBn}`PNHu9l2L_y3~WQB
zGf|8kU#-i)dfwDE$0}Ex$aGsT<EDa|0ZCq`fk%2-6bL#Q0;>bO6Dn<+@?~189Ojoj
z%2nHn1VBUUOuMh%sVe`LPV%qOo!#d0!5I~7jH!G#gAD6W2{&#+8c+M}61>rIK!6-E
z8O|A>0xCaiYn>9E0DK?-bR|%QbsB;r$F3^M5yTTWnsdI$W}bAOSgmjv%(ClEpL!B3
zC3Z(dq*LNq7-hH78IKXpO}!-1V1I)(CW2SmH}^Ki{yy*cXafvN+<CqJYvEB_T8qjF
z;}NUlwB2Hl7v98GqP}%@P+QfF+*QE}*|mu8;9ddXPNdL6>_*^S`H!*!5eQn|Lm0mQ
zfH~tq4`0U)j+I)?j#)(|cu(aAIF#V_spNr5u%QpI+AXwR2BM{*C|V6azxpv>Utok@
z(-(<$yewnc8eBeW?Lsi{F=H<a@7ES{4^qD2AF+Fp=o>I?4^kE>L%P~(Ha6Mb6&duG
zj)uha_#EJM8w85vuCNxV6i5I0^W8P#D|&a#$WcMphg%HW%kz1;k6TIqSD~_ZpL6&>
z;Pwwg%>U_tmIj(g+)b;5Y)=ZVlvAEgli<`1p;F;0fWm0FFD%@|C}K1a{v=bS9SDk7
zs{GS6%OObsEc3}7NCzPGP2UZB@<$#_6=!-x7ln-87X#9bm>)kZ(XxsBKeOVr)*76Q
zpR2V;25C0!*k;l@TmLu@UAh>hNUhlg)>KDNZ)P+dc4uokq$P(B6OT*0+O#uqdUTdY
zOk@Sug0UW8lqtK8)RQ>Z(+JOf6yhJHuGZoSaA8Y{D2?LR|7ZVy2c$j&y8424?f2Ke
zUt|e0{o%Rzl3gnrz1uR9lFQ%cM=K*EV+mf+*VB6u;*av(T(ezwo<HMch6b|0&bMbo
zzTTWU$$j&|z+ejJgHpCPok<epNZN}0ZzOdfFxijhMJW~0!V9m)s$KZiHV584I$D|D
zw{=vXX9H>uk_I^N0v_B6yWbOerUxNM1ol6DH+dHgou5J>#|rXWa*na`+-{>dI-2xs
zqoCxIG9TY~oFp>6yma05{+mbC>n2lX#vYyySLdYjB3svA>vdRv_^_=T(vx{OFCIEz
zdM6Nxy!Vd;jc`1THMu6;(-D&tFqspw^2O|KdA53S688sCC`G*@>i2m%Wdv|{m++KN
z)qvypMn7^UzEkYNT!${sHR0{&=iVdh0M&k_eWQ!D874UKdx`c`*l^Ys?SJnAcmxoL
zG25tqFu;FV(fVLSW=PuWGfjvp`^bpvQJd>8I2V?2dH2wUn6pQ*zgM{qzCgD>F~;?m
zH$XO((H++)n3<B0>clB@#?fL=x~>+EkX#d6jC$Kda`j)6jVmG#je!ODIxw>{=l?D~
zcX)c@6dT4b-TF17?)BvT&*$gc+47Txw+k*LGDeCyucpifAKI{N2g)SCN@alu7hQa8
zG#fKFH`l3|+-0TjuUvzC%zwTYTV_NRXN?j)L2j|X@H>X!-#OShIPVU=i-Ah->CE@@
zm97N57YKLn{NhOuDi=(?w8fS`DRm#HY0P0d|1CB9`!!eqO~$Cw_0Ix<N=wJOjLk1g
z`$da^5F*Ej-O#&L_S1^lg_g;awXG8?=I?%|B5CL>?*WKF)UR_=0H6ZZr&B6h+?zwk
z*ZS9%BV-k4;_jYbNGFGEfTSrn9D4IB{YCg8uM7Bq|F19LC(&`v#&>X}O;O;=m@oe8
zX4Rsx7Yn9hPbz~weH69*$0XY5|6M-^zHO-vyuc$Ec2bm<X-Kfd7hL-&B~7508ZD8K
zUgs#aH%8qXv_|a8tPR@r-bURp{<j+CU={)C+Lke?oEP{U#vPRU>3Hprw1_ectaApw
z{)KmocU(Yu>JAF-M{T`#^R|OV*IAFuLu*$g0Lb-5+~z(5_RBzbT>aWC5$>9ZRP2rW
zQnqq(lXp@^%|)RQnJQD4`L(sRG6<Q=eCP?K{J`pSHrNmVY`9CO-cc~~5mDXNCF2uo
zXu9BCSgW|<2<MMu?TJ=g#wy32X4;XgmRSCsMPnKgQ(8f|T!_3BsKjwhZ~iZT?fnvc
zm-I9dF!Qx9zIJK4KWCGVBHPbUyc0I84W2TINd2Z$0ql9`8t?=Io|8Zkzk<o0)67Q@
zobqVzs%qj)!mG`yfzv-{%J%BoHW_UmCRM!rgZu~PFHaj-3fN!gRF4FOalQy}`1ok&
zx@rUN@#zuD!+|DPz*s@~<O}=P8-!?%Kd4#2Wqt%)2($j%1G@YPEvRrxT-v^m7?*%)
zo^Um3A$n)Zb`*trCtWm)YxWi6IpheGGCl%3kms5T4A}hfjXS~a+fR?W;ff?;1Z!<#
zktm&8O9pD6wc;u_S4E#oeYSgh?&ejqo6xL>rlvn*twbmFF6rK$Cy)I2qOw_jQHZbF
z1X{ZsMz~pL=y+c%^AKt~LMsL+;1Df&Kv%C)Aqyi2JPj_P-3z$r5suMgE8o`^*?f=6
z33eDkJ=bj8mT|%r!WEs;N$r~D?lT}}=By6gx$I=Wm5d;Vo9kic-KQHju2d@@J!BG0
zFAu~VcOVYDL1)k84b5YkL9Q_i@B@Eh6LQ92*0AlJjF0==<XstWC%X?HGx2rR%+#8R
znxZezwAKdfB_8kzF!!K{GG*X?<S<*np~^W8-KBf{TdspKeI7diGwrOyFM`zT@v}+m
z!s$)SP>rq=SBX^}1xEDlxKh;2(v37fXBV;J4F*Oc#l74~f|d9f{n0FLCb78=I!XdB
zd0K;7f0OV1y|L)&fy9PiD(Nr&33_wW_Y!mHhI?;ClBLg9XJ@JRZ1?(pC{Vjg_0nVY
znMo0IZ_V|wq%<4tcs|^)CGIt+rwQKp=mtLZx;&ubZ>iY7k~}3Cu-1$0KL7#A%gfLA
zxl(4|dP}RVzuw!G*c+=hndLT9EUCDeYRI;b%qcM%(Hq@K!e4SwTcxH=v;PjjkI=GR
z2DV;sgJ|7bC6hB-b7YfQ37#$Ro6|jwAY|5^TFd=n_wFs10b$9Hf-a%pe=}VN5#W>o
z5Obc*X1mdS0!?>HVrI2nox|pNHAn8?;NKuI?V;8Wdr5aW1$H{K)(<VPKkaTJzO{)F
zu-7o9Cq@aogjvY5-ZD(If@GFUz4%Y>k$Elm^=I5S^EBM=Yi0jogKQUp7r)eSMfQyn
zhU2}IoGM@w72Q3<g9YrN)k)l{8_`|og*S(0t{)z8%t5GeN6Yy}Dis_r6uFv2K~GM8
zhS_(u2%XSM`oOb+sSYr<(waN>8#)F&?WF@x`v7L<$r)57utM&Y(lD~YENH{zxkrWc
zUF1F?&&gE4VEQtLVq>7v5Rk8hCnI8c?`6!=b%@BXP44chfUe&#xAyGSTfp3Sa$LQ@
zdg}FQA~ch?@aNa>-0kl8@7UR)u1Ltxk5h-=zh4-5e_6C4;doHValeZChwjzVeq*5E
zD`Q)oRI>vor-nE=90ebEd(G$By&zLEdP${{cgdClws4zxhMgr_$*Kk0kTU*Q%MjXO
zG^};H+XIk#_T8ajrb<>^77D8;A^q3z&-ffulRw?3>BW_opOddhTiR?pKCU;k()el6
zUd1=~k!($hX_+=xsh9AfWoG(Xb_C7cx>ntb66kvv)N9Bkz177XN@n8O@{k^?wu;@I
z+wdotU39J1cpK-ye$#q8;r>j=(K@y*W~0crhaT213Pc)vs#mQv-IvQHcd85TiIH94
z^JxU$4mHLT50j4GW+%>pc{nZn7AhLtO{1T@`e+&_d*~rd4+;)o;AYBf!zrdXB{iRf
znKRN(#)M<d7>!u5EiTIs?hjSMBnt}8BtSna0*A^DFMv5<^Sk^&ln9|a-uanF4|mPv
z8}@blGnPVEXV<~PrayemsTHoUZ3pyuK2be$ah;s<v&$%*pN#r)pf5_7_Tiig7c*#6
zG<bSSWI)zGzsdFt-V0jY(Pks5_Zj*>Yu;ZQ_xYbsteu9_Q>t9Kga?vPN%s8Bq$dD$
zyB+lQnkEL*cr(B%-)Wp@M-5&m&VpL&N#=`vLzO%m!F~umd@|>^4G!R(@02(t+?N!w
zlnD&$Ctd81pO*zBpSWvW`^#lIQxcP9Z<<h{aa>G^93bMEXK}Q%u}6*NZph*vGmBQT
zN54_c3yGL755%p_UMesMcN&gS1?2i0omm)Xb&I4(7L#T~-Y0cJ3Y>31-mjtbp>2`K
ziTq++wVyEq?;*5l>pq7=8^1CAC$AZJ#7bw+cxfc)DrjnCK;5XaNN@C30SB|5)2N}%
znf0LirI}hw$Fgqodmu8`cVorM+@Q5fxPr9uPI7uiKXT*ii}sP9QM>QwFc%h8Y*pTR
zK6KdfoOz7NJ%4z8W3HWoG@*4gC!f8ccS?43&Q=elqrNx11aiI>D<SQiq->)8HTWQ+
zFd-U4!OSh@-DaeA`#C-=rXcB|dNYHdl((Th>p=+kSArKLC3s4|3EiEdEH!+i{JD>R
ze*H)An>}xvhDfF3FjSe;W<)<X03j|upUlvj3PfwJ636dnfk%1tfqt~VzoF8j;}4Wq
z5IT&@&SU&#MTs=Z%<kc{{e`9<u#J$fmTN-6DJuM5=u{vY3E$0hV5q8qBPB6t6g2$u
zb@s8jFNff-lGE`Aek+K2Q|rnr>sJTKjb#marndgoPZW*=U0WK#tK2}@OV#2>bdRLC
z)BdT)bvo9KM`A9=9vNME#(3z(mY5!Rt{}1=Sa%!8yyd_30&X5JM3!iaiB*sF`q~q9
z%bO>hwi;HgcD%D-W)h3s#y0GQG<N7;+M~S5GGINiQP2#8gMZH&4c#X*egz%ZKH7i+
z&#xehX~cu_4fD-$*;)^CsUY;jJ@*A^T9#8KN6>q)YBZTd#+fZ`Tl5}-nm<1DoKs=S
zL18DT<9Z<8Rm0hRXoJ&)xwu_Gjrx?C{;6=BAo-orBjzz2ltOXsrSUGEdnqrmRD17G
zmZZc#LU&1g%dTDCDFWTd7LYh(^#dv*2)=dS&vH5RJw>^ZtpvSKI#)6mgdAJ{lFm!o
z{nO2A(6VvumKQbzwaYJY?Rj{9)pk*fZrKMeWS%i+Q);A~+uBntaHKo3T>Gq-_4w~I
z44jR*eCo;HW+WP(iyY%XEA|?R*yvv-Jx7*AD2X!1FUkgzOqo(?oqAcJk$+CYnV_&^
z)P%%0P93CuV<)!&3O$@HfGX|>)aq9ixR$n0y{G${E<n2b@sH@hOv}c;i>WF7HF{&a
zfTeKNFz%H+6Mu<r<H(VUxd#@<NOzAFHrxHNeE0Y-1qaY4*LzdE0tf-(9RdXi#ba>5
zQ-uZE(D)m}xd@iM?9k#r-_$Ee>cZ~&ypI343>DP8^U2-E;$EZH{<VWwrSqdD;}7N+
z`0^QO!=GQaJ@~T7*cBbZz8tb^*CjK4KA3voMfo{spyp#9&1Orrmc3km%x=GE->;AW
zpIYkf!IsLbq!A9-D_A)Yt>j&_=w*TW*Jw<yx4_>0t+e^~4*zs7Lz8je$*j1sFg41S
z{=w1A?<Ug+$*?jVE&Kw>@0h7}g|h4y<-=BKe=$gkZ?}{6X><VK61vP=^U$0-<I^{p
z9;5}zD=x|W5D)6*Cf_)as{Q-tPK9{}N%8KMzuG!l?$%IxNpS$Rph(M9QKmHQ@iqO{
zWvczG#H-H3tgmK9H^aWuHFJIaO_<?=>)gJX+6uz>r5FIg-UZ65F8Tc6fc9M99POX}
zT|1@3KS6gIv&eGBVWrp1ze^-00wXesyyPM$Ab(HmeE-EPe-kH5t7or7yG7z=O**m)
zZ)OeV4ZWpRU5XWFSM`cFtGnDeEv`0zgne=nFOE+z>9lD{bl-M#F1@?GXCR!Pck=G5
z39MNKYOrFt+1o(~CVN@k6(-oys^<0N6?yIe8Xe?feszvWhN?x^&H0bZ))sS@U0Z@<
zulcOD2Fj2&rP)d)mt-t^<NCQB8lWX}nn<sPD5pP+Sd!LRYK!a6>A3<;Wwt1nrbJck
zdF(VLZ^*ufnR#tCnOrV8cAul9De#%X_bjYj+tB@6)=tDB9z%8Q$Rz)?SnFM-nDSQ7
zSm99XHa?GaAWfChs0CYtBiOwO4>jJ!g+>tt=OUNSRj5<qt;e&$W#_K*n~7tq3#@ID
zI`Soo6W|__amswNy%et)5NpB72k7#O$H&$0&p+mKRvEYmO|J<F2<lCFSjV;V_ORDC
zqjh$lKt%Y82(J=JNh!3iX?HF}E@~f>{en-uk!G_xdw(YHqI19tour``tCM9&B7}6F
zFOx)(0eh<YEPKO37^uNmPYJ$K?_PwjFQ_RJNglUH_wL`x8)<|ii_6o1OuvCT$p7KJ
z5#N|c<nU(tDZ|nJc{$FlyQOmx;49BJu-Co+J_PdrQ;}2Uz)Q`5e0;h=U%8x*g)yi!
z85%s+5w696BWJ+5nJvB*8qqa(_QM{{RnYmYNuzAYjEQQ`jF>#+G8^;6a9?70!eEP8
z3jR1<AO+Aui$xPhlU}F}jBiZdK<UhKq!H5Q-<FJDMY)b7wB1sq1GTP=nPJ+Qb4h0?
zJy@IZUpIa9G1U%Vvt?mp6N-OPZajNlhq%C}b9!bLM~Z_g^u`rTb#nUaOa{wU9fb>V
zZk5kzxx07QE&buxW9cWXR}i8W-+ln#qSUY=A$M-J6Eub8*r?LE{rL7LXqjoi^Vi-S
zN$gA&!dcSiC(MfXKwf?8W8?0$(&vUWV@+vLtVw6u+xN{yFt?AKeaf&9Pt3jjT<+fJ
zl1ImVG(m8GU|}+7FaU|4h?YnnF%%7(i@(XTVYW5$I-}{!2l%gc0(bk`$cH@}`|8E{
z;RHs{b%u*@&?!0mwv72EO0GA)$HfXpIJH}#9r?TD@Ca?pmA)&vdlO9Oyp4<=FH+C4
zW3m&@f2c0i^QWxI*4_`1Be=i6l9*9ZtQ1S_9<K&LzJy6`&$|CWkI=E~8fl9yw6@oA
z;(kmn!fklJ%Uo%b4XP5)kXuPY2t0`Lae)Bpvdof)qg$B$)r7TKp8bW@>hn`(u?1FP
zT97Gyi{Yw8;uj@axE%kXk_`VT7Fy?<TZY`%pF3)BMDBpwSbH_gJ*>;YzAGgz!WYwA
z1lmYM_?10bDVM-pP1&lhG73o}L0<CVuwk{>{F$EEbPl2W$SdtM6Rt>ekNA^3*1Y-P
z@5_VLwtt=Uri4H|(|yLFFq(3CO4eJ!_2)o)Zj24o2g~kM?P!2)R4O*>HCvkCTE@0i
zcgCX5?F?P}fcm1CH&-w{Q6fAOy5~_DNfIF~^JRSql^D-0Al~8~rcIH|TLgSA-~aNt
zdO^S56yILQ8q(A4zr9B5b$fkt!q>xwC-Z5%?ls1flQ(`KVCwbKSF8O^lp~7a(p7O!
zNk*M_!MZQgVs-T{u1m#-X=<Y8!n<|2^6A^Dh2Vj-&uRh#w4Y%5JnwdtFfW!cMQh)B
zF%J}X)JNdnt1d!%tzYZmu8L)$rU8#%dt=J_({nPpk9M-jCa*3YMf!{)%ISo(j7qZ~
ziIzxhW}cIAw3pj1(6XsKJ=WuqyRph}b$KiTsJc|bt9(YAQa)$Sr{-7jRwZb_(R-Hq
zezU3avhCc-6;`QJ9@QI*=#yt;*VZ<bF*9C#kZn{Qed5$|0e+&?g~y&H`#rjHxp2Qa
ziGd9}%gLLc%k7_LiD#r{2q@hbYmt?I@lD8QZDL{1FZYo`P0HPE?1-_d;Lf#gV=B`g
zf-AM`R_7)UW$?gZ>Mhml6K$Fd)YIl1HCK&!7wj~=1p3dMD#shtWV-Csf{p9%x>>r)
zI6PSCs>5Og9ajob<V{|dlj*A+vPKD@TQ6RGujyHf`U%~RRi&G<swe%NH^V?dtp2q|
z;?P{*?k{Yzb>dGK25+eCEG-$hMd$q#q<F?qqLzgT8Sud#3%*)gM9A%xZNk7`ZpCb4
zkrD4bA|n<*T;h{d+NtrS0}oCRvRW_5f2`j1(t9q!+@pDJ{7EFx=kpwSmuLII(P+Zy
zv#0L<HM+)|8&vNq*{^D5qj~Su1`3>Sy>x<;Gk%A$DysiTE|M;i!}CIcGbXr93iaaY
zw@9MEeKeHW<@HV9k}9c8w}5|UD1zK2e`x=FO;>6>TO>t0&7)~6|G7*r^@gcvwB#pM
z$feMtmV{U{J$ak{n@9Jbw~OBc)H3{DKnhGA=^c7`iC{Sn4xy(yb=Q6g<WEQ=&+XN9
zWb@R3)j#+=@GkwzRY|{)TIIcvESh*xI^I&(LF|;VNy@UP<Ek_l%SoOs=8ZDQ_LNKk
z+MDAeWugGM)X#Wy)#EKaGrInH^zL%r`7({9MYg0KH!>3DtvDO+0|HB)osV}(9v`KJ
zXqB=>v2btBrP{fDXGBl@@Y`r$9el~p5fH@Fn=t0zwe|CFJoPU;!|zD<S%Bq<hep4*
z0D1RwE{HY^Zl)%%<l>s%XSRdP*_s$KO)1{#V%;vgjd;Z1sU9B(c`)tFW3Pdg0Xp+B
zBojuwqWrxgSeN42_;yux<!`wbOzyZ9i(<+I+9V&{YS)sveZOZQzf4O;H@8b+V>41|
zFh(1(MsPvUl#lk#6ZK-`DkUz6ifs6MMS1dKL|Rh1#|)oHr|&&0xVyG#K;*DVQI`WE
z%VcgQEmqeZyBXq)VN%T<<G}P9xQ;pu+B7U66CYa{8X8R6q;$@#RZDl|7QD^Y<MQXl
z-Wmo&W_rAwoYB&rJVg;>BBBM6r{oLCFeC#d)w1bZL96$Aga3%b#6BhaVZ&41Ld5bt
zRU_Fs8DbDk9X&7pyz+c1*AmRXv6h4d68zs$pb|hB05!%Y;$3Ccn9b2ZY#2e<9eWS^
zRb{cZ(?pTTlr`Rfg*+I&0Qp?3s}3<<F6}LfF)F5GlR}M-Y*XxgV*FkZj+6>F8i+o$
z9ejiv<WESr&!7)#RpCmf>@X1h=b~D89^R!?ZdwY=r7pBU$(nJbcDJdFvCvNMM-j`h
zi;5W=txjg(=W{o5#h}$nACQxu-e|fcr{OU+V4jAO3?=rb@ok0c4C)AmD@Tkz-5a<C
zG9yZ#@s?%@mccVjylOBrT++;YGNV57OxHVVAY&fJa}MRV&zH#}mvg0!sNxkX)PP&W
z;{dQ#KNv3LaQ#NfiBV#Yc@h!*vrXL$xq`}8p33he&Tq`}m%|~+#Q}jX+dUaz3(QA9
zbGGNjx9IQ0d*p{4!cs?Q`vrgs_8GJWv#3l{_G9F;H;PoMPdZ{}R(5kl9<>=HQN2Y^
z^*aNxYRb`Zz4=ZxlDLe4&C-~`n$VY7WM#AC7*-rjnh7zkRqCvx8$$|wvDR-G7<hF=
z<A@F)hVjeeJdi=tAVqHzfP=FBmTKxVU1LtbLR=6)y;1&x(M3W=dfM~;sWjLzNhiJO
z3sYl{Gb0CAAQ!Ch6R(&3z;i~?!+g8tzHyRl?YRY2(71$i#e+Fukwggj6KrW%S@cc&
zJ8gGJyj4R@Qu(AZzNRyIchRARu=ml)WO_&?aDpeoz^ng6$Df6xFnOB&i^iqi`)rU_
zDc_}Yd_H#L0ck%j*Ov5FiQ_z3t_|y-9~DJ)LXrz~ojgD4CfY}L3j^o&*0wJ&`mnp5
zyTh+(>UPhy3b(3Ve0pvefCgsGWo#H(AFWz#)hh<tc@UBTTJe^I;(T4mu;gwvVd#lZ
zP>^E5je&&t89Bc1b~ODH>Thg&_L3s+dUh!64P*thCa=2l%J_V}RbcaVuXE-zS*l%5
z<2Zh)K=8WH4{6wpW*Sf0{0{Hg_kou*Ri8>#dG_UZXifJ{^o@7@kMZ3LN{)GV_JMt8
zwbQYyBMv%Y2Sj2K&lrY~obI?+<xr^A-XWf_%l}3u^(Uz~1Upku*&=(|snrK2`97ie
z-WBj@4#R~^0j%hXU5g5>d5!?{vW=Qz!_X%F*W!*3;3WnY$^@sX>d)}5woV6Todp#Y
zL19Q|8+}W1HR8&89wHvEX&im)X}c%=eqoV~;fZ4g-POHr?p_;DBs#}<3&)sRlxtIF
z3BA(LkZex-Nzl>U#A91$yQ7`j?@!JeCaaCzJPoh*@ZGdDTp3=ZkEHX2o8U+*f!5;V
z%1sngkQ_iS{gw&>M?Ts(0Rr<a4u@Af6DAmuS2Sa9FqSQ=E^&Q&Zb%zQOVXFwQ=`fT
z5?~|Mx7uC{(zv~)-|-q&n)c(PvAc)L^rXWmYA*`xnI3yk=ptmcPOxXO7{`w^E05qS
zjCsw-c?{!DFHP@vX7o@8ACEdhHxo87g<5+}iYaR*=d!dDC4r^i$1^aH7x5v`IuA35
zSes)GX(v=Gu8O#5t(kZFef`X2X&Op5FkswNTxxUNjP__2!D`c)wKwm4zXL@2Ox^47
z5$~J7T}$%!Ac4>T__rU1wJPjxbQ&-Fqs0>(qeUQd8+{xs*I(&$h~AvNMyR9~DrR0V
z7Ux<THi{gKabR>TV<T^v&fRAIgoQduxTb;7CEr}HmFeadlN%cdrpd*{x{mKs3yR8W
z8ALvs3XJ&>U_Fm)%DKxt_)zq`8nZtW<YLom07gmdtV6qoE%*|rMqL>aT(?P;rR@(6
zK-*_j>x?dVj6A<<s(QlM-IiPzNRYx$oF5)k+#*+Ak@}-}a=<GC6u>lbl2%=6Q5-U7
zQB~|PoOuLaSM;$s|BHd^2QZ5gr5>P#sHAaQVnO*8YRQr57ikTSO?fB?R?b^S=N1F*
z`Qz7<yKY!8OI>g2a-&lPV6Zi%>HQ8tne<07o(iK<Es%mKL$7DAHtf+qTc>i^_7}wV
z-+j~KZJKhHT^*Ihj?)Grs8xtM;`?uMCgoRw7RrkjxkF=iZ|<aTxfJZ~y-#njqU0}l
ztTWfs=yk3j@jb*=6;QfNUEJNGH}@PxMv?|qA@QUB6Tf(u$4rRCD4u#q5-UVc=(o#X
z{ti->2UO_GfVnEI)bf*4OlEUp@iCUr4fRbdB(j*^u1P_}tN7MpmkP(kmJ;)ORM9cf
zCBaw$%7$h_$`#KfE67ZWZe*WmH46*1Hut=VoT>wFVqj)f8C0cgiSv3wWmTQ*i{cT>
z@z}I!+!Yo&|Ef9yn_FUZbFAH+mTv|VjcOVkmdBI|$B^{jX&Ll<qv$EkJJaH3ruQ%a
zBq`JlDJbUw-D*g=n+Y5@cUhPMZN@9&liwK@OC-ioQ3eM1yjEo7!bLtva+PkE??+P7
z-v`qFf7%OtDiwOnHynn7M!l6YPc`HlYPV0inzS^S-9wS}e+qTYG0TmOv;Lwo?EK;O
zqqnZ-2(Yv}^|Cc{LzUjV+g?E86(;vW`rDaDo})!zx$E~=YOUmk_07a5kOa!-b?eb4
zWtm|--+6$e6}2!ntknu}O&M-6=PkzS>v(GwQNKw>jGXo{HH|`2c%Y6sR^CQ<b^f&|
z*QzZ$tC6gWgRDeCF#$uxwna`g!k5R&wUhn4`z>l`OHRn#S7om2?2@UiWMIW^jvZ1R
z1FmEqxb1=KJ8nT2N6|i3`NSvWXspAX>M>2#_gIK0>s%&zFQ4db-O`OQUto3`4;nm5
z`;ZWK%`?NItb8l&{L?g$ciBmAv)nW|<m->zV#u149*$3ShuobHT_f=EaF}}ZFq5dM
zwwhjVBit)uJhYU0$BFd^r}>y$^%?o*@Du)8mtqh{%h*lis!m$KT7n~z2qxH^;eF$B
z3AyY?>+X-XueNT_!{D9|U*Co4xDwkQk%NfR@mqq&N~eiK_xFyzN__AY)=OCb?HZ=P
zJ!a56*WZI%72;8XTJ=le%*Hqde3DKi-ty$TlTzl`a@uUHVq!b#Bq>Ff62cJWq@JGu
zIQBIZcw*T>_VZFdyRRDVB=uIaoWr+CRe!7oLmlnA3y2kvcF(bBAKno~t?s3(0D)Lm
zb#tH~H&bipIwt=I3{A>#nF61`eO+@v@=d!rOvmOkLxZ_&5uzq8b}MbDkrj>*PLwt?
zud@Aa$aON-%~#C(ujo>g&J4DkvF*qx3_ww`&$kAm=+{~n7cXDneCUUN=fC#0n7*c3
zE8?UmcC$fZxIYM<s`%K~JFn+Xy`{#7`c;ojvfUi2rbMY>z`w4OC@HeSh`zuN6yyl_
z+=%qll_AIR!XS)Ac1eZ07I4y+v#<y;cJ(1xZfNu>U(Cb9)sZ7XRT9$|#vLeo*`fF7
zieUk9(ltp99?o@IbyFB-c1lMadO<8v=~F=NgN0}vKF{(iq6JGJ9Og1%bJeLMU+!aQ
zgfG&fx2No(>cV(iV<gX3xoBBWUEoM$>(7``v!>e^JGF;SVoe0u)7>36kX7UcCyJa|
zip!*;!9-5i@Ft0xO(RLZt&hxsR-{#1-r9F-W*lD=S=L?a5w6dKOsq-E+EhI}n!)+F
zT#`x~_o-`8DgT!GK%MSq=H0a2AI96iv_o1>dpvzJdL)BhcG)JV8mK{LDdD=CRIC_m
zHO)bf#Z~3Y>r|fijF9DY$QZKplaLZE8SCeArAhRZ!evjhtp3=L8Z>KeG0Je!yBt+t
zHB5_@R5n-4MDIuXDxf|!^$wbw8)}Q4JXCW9=rl0%^)*B#I>@$$I?z4K^VsC#y7Z1v
zSBX=FfagmCi)q)*5qFuHeEpkH<;^xp{5Re8HJfijR3oTZMnb;xxk7>FZ}Y|wf|726
z%E?|REX1#763qw3?{k_2NAGkRA&Qe6%H8YleXVmu46(VpN)(^JSUpv#Wo|Y{FK64-
zbu|5{Fc7hN&777SN`0e(g3$VlkVy}4R!Ns)wC(sC?HA7?c5B*k*a;^@&_Im5?(C87
zcqf{=#zveh%P!FG%yC;8jkIV{u{3_Z+~F<##)jJ~saW=H-^dp46jt#RzSs)GNk=98
zXmaoB^ZL(`@!t!tH-O8z5cFt!UKTr=^5-1P_RExc_1d3<rrSp4?F`6B%^R>ENU^fk
z=1y?8I~d>1w-4mkIEh!43^RZh=&Oo9-^a|sREOpuvS(%Fwfg<=Zp(Y(-YbrA3|*5g
zw?%bV`g@CG?0z{Xz{?6K4Q59z$`iTTHF?gRqqH5z`9i(?jg*v};wGfBp4xtwuj~%+
zLn(I&K5fUCUzAdRJ`>Vu9b(IH(%{#EY#;z5E($rE=HMNE3M!QicmYE#dEssnuQu;2
z;tF1eI%bei*{}Q~n|jKtgd768`-G)fc9+X{I!lo|j7N^58FT&fh>5}<{tOq+pg;$-
z*cM+=4<h=dgJS6NTd6afJFM>Y5+=7?D<bdm4oIqrrW6(tlMuR(?+fpn>0Bk1ZEiEn
z$B+2)v7>bTJs@=pDl9vqgZ++DH;anP4zR+f%#o!t>f07ZF=L%?HId7i_@lrjE2-t?
zX+^De;3Kj&ue9vEl61{0g!5QZUOSSXuLel_rj%BmAooG2Oa5uliU(I{Zm5t2VHnOv
zzn^n|5j%I}Ycyh)J|UXSJio$Uk9Ol!OeQ#%8bw<hR2IidAjbo;1z3?;-#WK~7R*!3
zm)TKx{$iZLMQ{Z?5jGy1_ta;)pgWmAD=PI9aFk$-T=iTRqSQw+TlvL6?5z4j8^C`G
zb)XyEKvq^xH4KTCksO^$Gh$E;xV|yYMFpa-=8D^N;BD7zBU#ASdA?cOmSFerqd7C_
zcj`l=-~TGg2oOcsRHS><e<X6AO)Kvx<RRLOR#>E>6b3g>q#&OvNdi~CNy%>yC5^PR
zFebEV0`h_%8ekhu_8c{7GOX_p=9j4=6}W&VvHX`h4XrBP*fZ3TmRW>C){YC1=o)?E
zO&ttgej32%^8&+$bsjWvQeQvU?fxj=#Nt=3kNc>d&!_T=|1rc&;J!YtOpu>R&9XG)
zbD?fswor$6vfF4GGse?OB=I7-tDg_`;e}Z3D_y6wroz-|{DutV1@5BKbQGNKFrQ{=
z5*TxEaa{Ex7JXe2Bz|tx$P33kh6id~=l3;TeN25dvLgu|cAQ?a#(9GtxsE!g{~);l
z)?R6k_T6p)E{x~d>9+n&I#z%81i#X{UmQ~wL1<RVi(xj`%yYquf7TlSP`=1zF$3CD
z8Dh!|6y%VZexqLoLf-~NSVDl>N`GgOCjjfYNCXZ(8hM#^T2mH2FR!VOR9z>%Jbc6z
zfQkQr4H(Yh!PFDoTkNVcnu8992MkblU9^uVEVr(A|KVB>vid$_z=Di5((#A1zW;cj
zQ?>{CB!(QHKOYMW#aIIXso-`Gv;X<uFQS0XrmOMxA-V29C{PJ}EPA=Ra>it}PL<VJ
z=%}2~tD%rs_o&^n+DD1M64ZJ~9nn4chyftnx0oBKi`-oU%2%6dUw*%N=buC_Naf%>
z2c2;id~FVfY(s=X>{px%Cyd1n(ba0^dk!Wcy%6~G-4c@f;7h`knaNv`W7Jx=Kd~DP
zUGfva%XEivFKdq5HyQemYEQ{#!Y_YSreNIz4r?_4BbWgqlf)Xj`3f#5V!ohoZL5+U
z(S!n$MM1HATfeQX?|cV}#|{+8i6j@w`sV`x;oQLtVs;dav!$&rn2VdJe-1WBsv_xR
z9LOhcZuXs6z?Ax?HJY&E#rKV)CB~ImK#b2v)-G}P%eO#L096=lo|N{#o~sD}wNcOJ
zJeQ_mXp}!ve`=@pvH$M6_<*E*6BNCy`@;s_;IM`he8tkRFH`W=rsp$+MIq|2xaIFm
zgy+g*4=uaqo?NeYOiot|qXDL62fMsNX!nPMDSa1Z%vDGa`z^jlo<LU)Gus4c^S!AF
z*uTAyYD|uDQDxC0;oo0vz7;DdR{EWpBWF?Oe%)msM5P^3k9$n`iB57!-!l)Mmp>lx
z{b@ptz;TM!-g|AdicVKo3y>z&i_<uuD9^?mYgFrI5LutY9dsZ#%Lk~$mu3?_WY;kR
zaTt{pexReO)dLwER~NC_Z#DD*4)BTd45h%RN@@ejjMYho?f0~cV*&Z$Z1SqvY$MIW
z%?H&*FYcZ{C~F)rQ1MajS$UHJoGTbNl;^>w#1zMhJIJYA^G7#4we^b?LP$(pp%(D^
zrmRz+(X=QojT?!NG{}tRD_ko>6{=4e8DAv_)EX%a_lE}wa)j*0sv8+T{w}vU66G=5
za)H?o9^z~YQ8JVPQEUWr^ZwG>8Z{=O=nMY7pXMKf{=f1>BcRFcEo$;gqkWS||5g8*
zX(!#ukw=XJo}Tc8C-S=WK{c(~OJc`p=EmGiRQvLg*<%6SjZ=K5ZCF_*Wo8YLRY^h>
ze0FuE<%;6sS}LSRn+*V6B;JZHQJIoKqTdbXw`sZ229SJu6&w!8hZzLXB^DZd`C6&c
zFFURi@$bAU_Y)qDvc1c-^@?YI4T*juQIt^4NzwK>*^*((UT}x(vRC)qbPl*n1t5u(
zUlUGLxQua1DD%9``W?XhZK5BUhUC3(#&hPe-=d`~c$#<{rJ5{K=P^|dwVWl)oLlSq
z$K8G^@|1WmQk?*)%D5pS3AX3rAB4WfQbuoky=t9s=W}S}<w7k}ON!{(ZK}*3z{omP
zfb!)!@;Bok>MH=NnNVj-Giv+Td?5x%09`^)s3$e>tP~b44GRr(ZI#O&sJbWU{>-+4
zyDl?GdG{aY>IxgsIW5<Nfub@J3-<`ITa<UShk{VYBlKWZzDS1pju}dzLvw@rMW?$v
z-JIK@4V+HbHW~2e?-nPee#%^-?F^0(bl;Xsndy{l;kmrt=D#;E<HIt<G8FU1AojMU
zcVHyPu8l_naR?W&cr~O>Py1QbLN_a{vIXOcY<<8Ib3rC6?Jh*;!os+JD~Ma;#Z8r5
znSko4fNK?l_GS#r5W4SJ^x{Gh4?;jd`vUd}VaKW5<1>!ps=9;wsf#ltV-S}v{88mT
z62uQU`QVHaaHx`Z_Y(MCIs5DCBoQ+4ii6tlQDx_48Rn8<{lxjUMxeSZfg3r^Uw}6y
zmx8BoGhF8|PoE0g)z@hmus$Nw|14}MqNyQgiez<3#=RgcTFMYNH*ezWgBq?l8<!!+
z=H+so2EJZVy^AtlGaZb9EZj50BOdnnIHT(KDKuL8+_{-+j?7e<gkWyZK?sxG`EfHH
z(a(9ah4Ql7z<d{LmU%Jm|0<pk*H{Z?G)?n(@kgzWhHerV%OuZ@I+V{q2?K6hpXeOx
z2b91~fL$gIRVe$C5|&vd`*CUC%dB))zAf(#^9rh<UAl)4DZuu+(gx<vNKGZ#A;!e%
zlkGFD79(da@EyHLPbNN<XL$j*R&*nL@HGn2BjFvu(aB_LnBUz<8=iP-_FaEkeJ+M4
z^h2_YjE1UeUAQLS`4W$>pOym_DMf_lf39}<-Rd_1J$gY>*l`yc6AxkxAjtPv$M-yj
z&P~=|VWckA0g7*gq#W_J^RSUek&BrCoAeod#{I%#<hf$tGBSK!fB`Lg^qozwh1kp9
zi@rfD!VvDeq-6upO7BEPe}J^#`=6urnyOyv9~q26?VmA|`JHly#ZFB8(?DqSxcma4
z+jtt(HCVX<knUA}=DnUE4ae0QhU(-@(ITs4u!Az>SGXVFxZ&u-2Y6j)o0O>(RN>fD
zfct<o!#s-`v5?zS1gx%gg%*3&LT}=;J3~6~CLxjPaKT61iKSM@*A`@tKaXYDPc=7=
zoq1C%$pRW_1U>uUaeK)8@nIn!aN@!Y2zrJ4bn|=g4TL1m)8h)Ssvm{ec2>uC)&(C2
zS$tNwnL;pLI^H#Gh%WxAf3J)pyNNBmqe;MIS#o<LWJ?NCZ{@^!YPjxz!XKY-0<P$Z
z8jsm(4i5jxm;+S%y$Un!@ux`cfIMmq`RiDY)Uh{lhvh#?{6FZD&(DU{nB+7E(Mlb6
z)=*oS23cSqD<Im*@JQYcnIa=Qctie86ZYUNFy|DIzR8OZJn;n~#A3q93qJ~U4C`-j
zgxCeNC1E00w0FM)CaLQm&?8*rU6GB@{X;kdfS!X(hs94wrKs|o+@eucU-;CnNF{br
z0sod@(gEoDkIx8bQcLetKN`VL1Z!pV^6eJj&)>h%hBX)7@Bey1YIgLk<~nL=Il?mY
ztTuOl)99|^+>OQF(56FrL;%#?ewg9Ruuq$4pix5Kca=?`Z%DXC%qR0e;d_3$V4tTR
z!TnMj>XXJn*KVDf&au<`ERR8IbMzP$qNWiITAna>61#7===MqrS;ZC{|BEYc)%4gN
z-kI9d2ecmg-Nv7t&WrSYxj-A?Af;eIvhlTSjQn=HLxzctZOkNhx2}^fIs4Aj>E6Y2
zcduj3hEvXcbyXEm7>maX%4WZ)PJ5#$ig%3x@3nZ}K3iK_QpP6cp$?-B>P={z(}K-;
z{C&&vzd~Zr!&CNgPbwQhUodRD;V<FYVM|tkcp8LW2OCjJVD71t0j3h@x;Nd|FAe9g
zD-zUyx&1%x-uf@9u6qNPacGnjq`M@gOF}_FN&)Fo>6Wem1`rgayHQG7U;xPhQRx<j
z29cDM8gk}6fIj#0-0$}vc;DaPGw1Am&N_Rqwf0)qx>m9J`T6;Hf6Kbm!96X1$nCx+
z;v*wmzb&D?CF`62v9o{tNF8G9_%?V*pozQM0pTDloQxv!5wvte6Mou&)V-H))%YvB
z4xEYS1GtjA?W~QR<uh^TzYbm0C=MkDTL}kxdy=adCSpZz>2yx1;8BlLjXt=A<5v!r
z_Pp;922`b7dA@&BX#fYAh&VuW)s<~;7Dk4q^}7!cwYC^(Z6Jo_f`={oMjN}&B3a{-
z$oK#Rhw>vHW{nEEIkl*Xn#{A4W8tb|T*@d{q2C?r5w%@TithXCJ+2L7rV4wk&kpU<
z37IZsc=O@ECzTHdGUAQ3FIBow*GuzU9|a*tMSK+b-Yc8Ue$%W+?n%K79}WNT|9MiN
zY#B`kZ=JK#$4tW<mpT5{nN<`wRK9k1A1Dr4KwzJ?Cd^T>^wlzt3j*+j5qpYU#(#To
z22XO-0Jt1j-AH!1Z>I5x-O^g2`ZavNfS)C1Tw9yCDniZ5J=}L{V#S}ZrsAOH=bYui
zfdhJU+p5PMJ;kz)-#s(hH1#yC*3-r$)#zj{(&d-R`XZo5m7dA6&39)OL8zY-dA*z9
zsy$^rIeLEJp`Tz#t`|Ab$3k?0xVpiNPQy*M{FgDDOpqN3<9_wSV}s(icI3gWMoaT8
zgrITDxE@(($ybwjil%zGjZvUC9tFb2^{^N&wcDptsrzwPOFi|=%qNcVcT}eZef_t5
zUug=^8=2VEJnCzBxia17vQ3e0QRm1h@X<BSO+7LhNMl?4C?MgyQwO7w?4BO|I=t7<
z>arN)p;^xEUtKP5KUtm_dV9mV>|_A&<MNDM+__QcsYXIE@$Qq~Kj+rZUFsW+e&vU;
zgpm7yu<mn^gXLt&Zhg#Y)sXdnzx&{cod0`{aalRC0FE=_kI;P*oOdB4B=?n>n~hyq
zJ?oQ7&?}P36PcM)%~O4wvzxvCSqM9)!p+{jCMzdPWTVFM$nYRlXd6#zcvzr`Muu{Q
z=oURq#(L_%!`ZDRAZ5xktzN&qnQ6*1NlSC6enU@5|KikjkONyNvYhgoJUt}el9b>K
z*?n~L%kLWIVCFNC8uzZbS%+0F{8H*1*?|L=Po&MWG5`7wL_4{%AB&&FC6>1ySe)fl
z8Br!?!z#O3Mwlf{NK!1ZZq++`@E;YP<89r=kkxz+-j{ffAhmKab;?*z`F}lS4@j9>
zZ6r->jZJ8xh7T*wadI(J`en-Wx&P`sfyp=a?IJGceyBp6(?e3;PW5=MD4rWa$D3PQ
zNv2Ik=?(nBk6oIhRu8_Y`((ab&Ms>c{9h#(I0udsIVzm%i-=J0kZcG&{mv2;;O~3A
zz}DN}$M%&fulo%<2mUSJLOGpOjE72ZNC($n3$D3;BgS_te@^u;9fL7|&*D&Rnn-Ke
zk{~&<_)J_N!2X>p@d(b*Lo@dS6Fco^b7UO2`0o*f%~4|UrxHJnI)wiBajt<(D3m7C
z0`N-Ie!HkHeQ1sfe{7omlo!A5o99Q&ifsAa?R(Hy>*@JD1WXypiEQcXQ%jhF0VD5i
zZS3)*xHp<LSp%XDPJXERK;Cs#XodVcVgScwao^FX?CJG903bITVF@c;K`&qJPLqQI
z<!%);vF#)VI3W#^?q$zm{tTC|pzqH^P>}rl5&g-Pep$ltOpRFL5^wq7mEU`wuxJUE
z+#odWp#iQXx|4&5u#3J;S@pPr%Ll^vFWe5pycIN$5M=|9pE2LpXiEv=u3sQRd>&Lw
zxuCECfqa?=*Fymjzk*6<Fsc44ta0>&VJ-dqPD9i;eXED(4vsgof+8%Fy22-Qyq~{#
z;LNB6=)^#k`4^<&3KbOndFN-qI3a=9;Ng|NbWz58_aF`4sshKfV>2^l?mF)KTpH8u
z_smquiDel)pf~s8zQJIyd&~7LB_(#v-lYaG>!F8&bGJ^nyfFXBfJGDVqG=vRlIYj*
zCM*=Zc-T{L&tW$U7Zi7~1?pN$hmD5TLnPM@LPBH(@BmUhuEwUOGqJr_CoFp@PP<+q
z-u>>&qrH+=m%B04sP#;Y@gzkipv9jfpyy1fa!@L(qP*Py7@%HsC72Oi)Mx!u`j?j%
zXcZJ7ac89yFSa<dZ7(4`l^32Vs@@NA3D&OrMHs^ZXy_cp94XO}2I*Dz&#9MtiUicf
z;ykR(-Y0CD0Jq+C%fj8dp;6EjO95QWU;u^4=&Tan?np)WRlI-yzF&$?Xb&k3a9C8x
zH`3SsAryih;f45fMQykIY^fX8jAe3IT~uP;t1jg`nppcD;{1{SjqD@*#S{$b{V<GX
zX|Z?{nSF`-_ZgJI0;+@C)ddB;c=6fEeaSy7Qn8_M7IAU&>lk1x-W-Hbb8YIq=2C=2
z^K$CiTj+M`y+0;YmK&5+bZkXo3$tmf^9)upY;2ZajM<f{M=s*-nnu(<zRutInGD3q
zX@)o&Sq~DlNEgd7kx{~72@X6a@yqJ!P+Pt`>UVcbR7F8SLBMfZjFXcywy8;KJvO!t
zx#It099U%}OoI~>oItmou@}g#nJSAO@`-B2Ms!3*Z_O4%^`SrMwX@iwwX^0|_!QE&
zz3s;SKAIG!6vf%dw#3hl2>Wr4;UCs(C8qoIC#&*Y*Ocf3fBQvz<O4S`=RnS0mHbY&
zDR=XkVbEE~bX`Ma&;b;**ya`%Gmb6bY?`9CR0J8)kOmrn+)=>y&^{HQKqCNnFo&19
zFU~}9_j6iWOaQ_mW+(W0Ew^E<s!o{!D_bW8uhU4c`<BzPVoXJCU7cx**YAbVA0p2w
z|E$h08m+EvGCV#>MQvK*>gGS$1T*w>i5{dMoqzp)t;w;=;~~b)D*jipk8oB$v`Bmk
zYmAl|L4R@wHXIf%^c@+$saplVsh87TZ=9)h;92uCJSJ_b%-TSAA?7zMbi_q2Hg|O(
zO6lcdtfB!S<TpSnymY|_R+#1UNW^J&+AiRP8KAv9#B+6M`t}`k=3a3_@2_9<l61#>
zM?)ps?wfRmneDFqEQ!JO$M7Tc!lz1?k3|^!>z*FUc2?u2G(WLAqlje9tTA2G(EhqK
z0{3~-^vAfE4Ss3_a15?v0uM?e_WKK|N-sxBfIx=~ml2(1ZwliDdq{7ppdxIH{-PjZ
zCpZxG`uD_uzfQjl+V6tyQ}me?-d`?&C4l@fK9NheAtK44+!rpO2G!X3_3LC9pReiT
zR5QlkVoZK#i~%e(Z1v=o{{lExtpF>hno!ob5E`h}LD8czJIOfUVDnu8*mygst$-GF
z*(A<2SC!kgg-mv2iyY*C%N|f~=m>w&GMLtwAmu=Z{i(X#^erF!%;l~cbfzTb;!FE6
z=g8RhW=bM_QrKEt0E$S%8jvxj6rc(OdW-}$gmXdZ{Sc);jvkQ)hDPKeb@}|sSO0}C
zvj9S(mWt>IU?cRN|NcfGpwup9-dXYmuo%4V%c8Rn&<1FDJ0{9a+q9XN=xFcD+P(uD
zpawlZa!zwC4{_~y0)#4^_mI;M<_GGmvV#C}05Od7$_Et?pBn`6`v%9|Ep}EZquhUp
zs-Wk$cHH`88V4uez$w8`Z0!_^JtkFx2PAHHZnA54H=H!@RvaAcX5Tod%B^SqgaK&c
zn0-+0uHe%CoAyPm_|PuE9un_K4!b4l7*M?w<|4XHhH<`Y`|u}Zh{pcYUSL50SN(FD
z-Iwo<FL^C5EUOYF)M&(QWmtu;21}#?U<=MGE9=ugyz8?mgcu|x=P`hNt`GWa;Kl<m
zOu^`lg>?!PNb9Fn$IaMfOJAEE{p(n|^g4{Xv=aAc%WM)^pQ`N|JgxS7jJVT?^uQ7|
z$HM@J8s)ICKd`(xkoZDzx#uo3{vzP8C~xP=z|Q<)pXAEBRE0^cn=^dHJQO~F4D*M8
zQQbW~OQF<`A6s?`#E8FMe8y6GxeHcqglRytwyrL=ysF@jAE~LS8fkWGMrqfu^-`{&
ziDt5(7Ccl@i2rW{RF;aWm*YjF{N$AHsr5BEyX(JxmQ?$U+3h$zXg4Vm98jY*9{xVd
zYCJ<gK5Q7xiu1)(7R`=dHJsl{Fs_xB&PW>WA|D(u#Nse%c=vwZC$Y4$2`uOryw!QS
zWt_>5x!WtTZjT9XoFyh6(4~B<ryT*-kn9~?)of|w3z|l*YpYZQ@)hqi((QiTB>=@e
z+Q#X=tf`3Mz?j2C+jHCilif;Xn5T=S+Iz7u8$*tHsMBV3Lx@J?vo<XgV_+aVSZL5x
z$1%u%8Qm0(2hHNZPu-7hZFvHznJbnZZk=<en_-(=OulN1aVJM6eA;Kd%mvtojf&T$
z&E|v;HU@S1|ME6h;(7VEMz`RVVnCm<;fQ&=XgIWzXwfszAXv9lg57bvfOii#K<n8d
zf1zto0i;KJDDMLm+~tAnfLEM7`u)4(Y7pEr@u!#0<9$pQ7njn>A)h|C{OUtvL*t0l
zKmD$tdSFd9vVwDHq{umxmS4@>FTd!nxq->j60z9prM}O#I0UtUScm&)ZM5kDTIX^~
zbha|k^)isMZTH%U#wbs}luc`NL5n)^MZyN!2?BIjMd}v4%Kl_AV!X4${Kg+myw5&A
zWeJbPD{l)43d#y|%$+&0fd@(qrbv5wym8y~#W6-HJU15y{l3MIPBtjfpr>4ZcYb7p
zuM8=$H1#W*FnkWKs;Y7n^}T6>D9Jss4bZu;??6rnyq{Kt=)WLIIu6=^AjY*a@c%mY
z&{a%L-lLU*q1GTQ%GK~Lp7zULAF@Iq_AIXjE7iV)_{^y+fd6YuDXHJ$%Cp+%GkbWP
z__Rc)tDR7WW?ZkLvfy~z8z74F<Np|g`{&U2+JM0#?ffCn=g=!fB+nP~tR(?8Uhl1-
z@XE+-NTFZhYP2s5&cDA>M3|^#+RW96wAa7=yE|X213@7-b^EJwVOc&5tp`g|d#~Jz
zUB50RoALtmJ^u`mgLvGW)G#d6yxfp<_b<2elZzs8&>OX@g9Z-!;LOaqO#hOgWiQdl
z-R27y`@%$@GUgyOn+qi3Pt(@_ajoS6{2#?csPLbMC*v1>yqsnbfGsZiX+8))qx$OE
z31nL#YNK}LCcfAoRZOnxi)0@GK|YnP5%qVMAttOlX0|zgL-o<!-H!lP)2P4GUMCu~
zD>gCA?1F5%m%sRXDEJJt8NuKFta&9wrVD4V=PfB8BSa$;FssjP^X2_+a9zI7bJENE
zjn|qW2s6ZU%RlifhBzSIsw8mf5diL55Wx9-{Bl`k&DpocU(WcW8T4My<zYrP1H3=^
z>+G3AMYGS1sFAISKZ}s_f&+k6UGUXa$B)9m<6ZAK*MN~ijbwlbdWGpK=eWR-gV1UI
z2FQ$R;~$yrUtlJuLRhb4w$EwS;??iz=nRmKiC?*{M6YuLPpQ^husVJ}-T<`d#fz8%
z(%M_H$$xx#7cSYL?+S7M`9&WD@t(_bjw}u4XQLMfRK3U)F{)~=%bNo5fsXOW<9xTv
zn_iNqh&s)Jwboe>^;0$@1^+W!3Bs(IyyG{~f93-uymzpc?|gadZ*nCK4Z=0Q;twB`
zLT^x$Z?}JxxtIY80r^CZ+LZ~`SA6YvzxvpKF8lxp_c7t})q+~pYW4e(u{fPmRW<zg
zSwY}$k<=7by2u(ab5_ACK`;<qbW#fm25ONnH2TRcoT6pLGPr;9g;Pm%`=hL~@*7`z
zM#OXEqvgL}@q%p2x{d5gF`VPMd3uJy?)CKatRsc(FP$TPehg&I7=(vzeAZj|>M|4{
z{*~=Lm9@)h7Wf{oPFnyC9$b?yHxv|%6H-4GY7{~0tmJXk(k;*lfPx+`Yikl+zOo!i
zryE_zzT{Gd#pQBjzyLifuVF+ifNA24uX4fj)EF(5M}P0Q`hZt&bvfsKfS%)(&wn)Z
zpVz-~=KgoG|3BO+@W3jy#1L_3J$q(`{mYN!x4&GQeU}dFs1)d9HD`BJQ@tI%^G2T~
z+tCSE#18Lt)eEdG#wnGw^P=b9+1eDX<20&ML`lCN^pT%t=nc>J+{CFC`lPh?!8=l<
zChe@*X?H?bVo-0HYQ&m!MXG+l8@3X=3HZ3H;7?I(NcRL^t6vZks)iB_#Xr#xs5#kd
z>HBeS>osJv(mY^Y4eaYD)2^ie9#fbHvQ=$u<k8y(FSdxRT1vb}yeIDH_yqW0jc>Fk
zi^qW&nW~jR?7CAS(-R)N`vMPDBkXZ#Q<R#0Qu*U9CR%Kz3)0Wr!l(}v&Ihv%4o$K;
z_)4$_$m@*1aG_P(TIT?obDTDj9nvSh`t#9as(_qKZ;{j76ss`xRGx=cx^{*2FJ#}&
zG;QO_%(r^Eo-oLEH9%7Ee8%eMWOM(6{j_p{^%paR%efUWR3zKPlPLswWrg8y?ch>_
zF(5JMyJ`Q{sPXgcRt;L0i}KYFyk@HSM8>}~DZ};D9w;-(+S`9C)WxZkoN?yX#igD+
z{Ch%Egwe3d<-RYA-fj=T8qO-P1S6rmTatrR*9YK4xWpffr<m;ME8@#4M3lZVV!BM%
zBtm~WZ*RPtpQZFt*-x9Foro}pQ>-?-_J!Ae*h)Q=Gq9avtz*#|9v<0Hkops4kPXL^
zr)T`l@K{%|&fd$hPMgOmPJE7zf<vyo-$TDHPk*d=mW6uOKB=K>b9iQ^x*_ke`NC>z
z!83MpRQa}L;TA>Yom-SomrbZLoXR&7^6zfBzPIr<(j=P>^R-2UIqZJxsa$gX<`p|l
zgUkxr14fFa)u;ng$lrAzhqZ|MY_Hv`YP<`e4z_ex%p-a;=1r(1;EPU;7EX(gZoi{W
z7w`Axi)#&fC$?g<EZMzNsW0%m(=XM}4f-}SmB-M;F~*TJeYWb8+@r#!?tP8qo|IfX
zRy9#Jz_T~PY>;fUSYP)w@5`;xtQPR<n|sz!;kEuwV&X_0AE_QDhE&H6wTl~2;f;~D
zL?ZX%PP4?1Q~Wr~SBu`A{u-!FqiUoT__^Vd${%oBu2uR>|H_mH&SCmdpG~#Eo+P1P
zh6y=3)%E`<NM6tP(XDGbS86T|$Q57kp0N|D*lO&7zpjXcz3*}p9zjS?omTXY*&%Ke
z;Lt*}zuRrW1q>@7W2v`|bas4ADh>>y^t4Qu#vnzW+(jb^^>D~9kxG_+Z}T$X)u~=r
z%nUoy9aQa`9%w#mD5nu*O6iysF5CUpXPEa%z|b;7i#M@@f)q@!%m1nsXtX)#^fTgM
z7Zp4@Z12zF%3cO(T-BA#E0}FASTUHLtEoqpoS1xW7OWyf_IHYG3Hzg)7F(=rkJ)Jx
z`2?f-6DLRS(f^ulf;5(jw4FWREsl8-mTFqB{C9J>fLZ`9n5Q*eRWeVz4n^-{k9+-I
zcBry_fL^Kl3ht}@GFDtSm$`KpDgpT-I4Y8IO<Bs*`ta$fr*7D(JIu?_wpDQUbTMNa
zQ51Rf-YYx%$JZZ(qaW+lOyCabrQUfu%O;ZQyN}wD3goC!ZorYPYgHfF{F)A**)pL?
zK`=b<2ni4@&&4SCr26GlqPtm;w~+N?yg9llPsXLt!6E6nA|K_A^uz82YLTAK2~3w&
z1?E0NYlzSRPC~+8|86HD&?zWj#(1Xcm#OeBYOXlH1Y$~U(xKliXsU;|E1!1qVPbha
zLm4=dkw9w<RRzsPzCc2XFh2CP%oL5B!B=kX_2u^(ODz-M7J|kWJREc$DQ)ThUhZB{
z3lUzhQ`_8WvCWV)Z3lb+g3LgV-^r=OsH3M&qFsVqV_m8vkZ--NJvMkWS#R>MgnFdj
zDms@k*V1@rf#W09&XfsoLiOA>!Al?kWfl}YtFf{CK)9LxGH>mH;J}k-@Ah|?lm)Mc
z0YPXpGf;`iG&6mvb@G$?d#6LbE4(8&zHJSL?_Zb1sd#t|8iJoP*KToO8T;NZcBo)r
z?F@n*IfOQ<c?t>_DDz*3jx+sH1@i$Ib6|8qrnHfWG~7^PDyRkp<7;-X?8V>gi2@Ea
zvlN32A<{6;krWr=ve^9!!(xlmW%c86;ahR3v=Wa#B2`pziIkdT6%CW6UiPT#@5*Y-
z5w0x<a1qZuWocod!N34#fDX}>V_66Wvz&>R`loa!OR@cGe|>q3Y<z%*+eOhc?RyOp
z_HxkwjYrxxKfOJ}&dMH=@2koaXee83BDI2u&cQY7!G(T&k(AiR7q^$i6*f6UK<XIh
z*+Xbr$(_RWeZ^`oq}I9=8{i@He*&E_A7L+N>03xdj16=edb~bc>MolW#6}7^3tbui
zQ0-QVHaKmG;ZpyAQ-XVmWN87^PL=-I$&y0)JwU{*a8Q42W?jX!oiX;lkL>+xP!#5d
zZy{>?;<q^v)&2;t^M07%=EGp$0{DPv{#6vQm1q8Ve(sw^p9@lfI=^xf_FLGdM?KcE
z<+O1?a1SRB$jSku<sdMDShGC2^PD8JQx_EwSBY;m88Hsc{A4vr^3R9Sz(#wN+9tw{
zYV{3}Da05T;gLY%!F8w!#RrVeDGcZiXj-zp@go^jn`}NSHQXvw;8MTmy$`es4w%#!
z%7&}Y^WB<*B~U_9;QgN7Y<O)d>g`GJb4WL?^R{ZemO7MpRX5Pr5-xw`p#=u6U`kP*
zjl|+^!);Y^iYitHK$w7M`3c|Jm91HQ^&luj_71+i-#e2uk6J@C{<Nglai;79@oVnZ
zdxBLr?5><lAST5g9H22>HS+7jI3atW0N{l#fME|@n@wP%?%lh-#d#hMDhoHiWf3dg
zhn_^1?Jhgjb&cryaYUn#Y+ISiUQwMuK$ppEPB5NTW)X;^UU`S?^Y!y{#T3ZSIP6~w
z?5$bAhd_Yr=qlpTMpZgvQU+W-Tjg<%w7W4Ovf(&-+umBoHPvN?5_Pqm7>S&k&f$Ou
zdCHoTU3pL~^0xua8S8w}ys58U^4SXeQ<TK@1S}wC%J$fRTfjdL*AKQYbY5mW!(^De
zlh5{SenYGX?7{7jV7&b*%5P>cL0g{%aF=63KqvaX2<*PyU9@A8`@l}HFG&_t)fGj8
zY%eJFF8q0n>EOgHYee}R%g>ctJq=Gc3$CLN<@zzgfK^k0_g(n4HUULf-_4}?VC)i$
zjk^kQNlD~Jon#<s(m|?nE>weHp0;n_W_9@XZ$`G>3!gr4mQST&a_Q^3hyfRDJ@Cz*
z3d_BCU&{|<u2-7HONC+04oE#L36~fwZpvsY_kA{?eEN&W%mp}TK48ze;a7(Up@aLk
zn@k+~yjZ=zd=c7PPNtHdTknUppYaX;n&JEmsIgC&0)q0Px3H2$wtvO&RHT^>|Bcbj
z+gv0!%6tX%)Z}Dh$QFGj(|ef%TN&`br;C}YSQE(4qNmE``Z2>EnC*aJV{@kkp(TQA
zK%;n`*-RGTa3Xsf`cRNJNjhV#ojoY~Yi7@XG{QCxkh*a~p6E<8OYa*31P`-qtc8G_
zX+TeF-W?B8J$c%*cE+v!N*s=};Z^d4s;=f0nU$|KH@`XU#pxwb%Pg5|Ot-q~s~??{
zyW_=MTt>CMR2hnb1E|Tz!kmF!5PlePXiQg?b#cI9$Y^!cI;{{EB4=99{+S%&ti!$6
z(%RXMxAej3ZPG?umLsHQ%=9`^eLGw45%7w*-_z&5?F-fkmgOI2#|PV7El(--7+4#;
zJj!tb#vyd1tCGx|<r^IP3>>FmhG@|<wem^pZ81-v@m^as@1i=EWhe(t-bI5)<j}lb
zNi~KFwZq-_%3C%FpxQ(qaL;jg4ar57tPFMUkYx(|Imf6#^KPJ?Hjl74+{nam+sw<D
zHw_HN1^7Cj$SR_Ys};<@7CTbD^m=E$%(}V6_bskc9Mp_S<x$&nBAS*z^!>;cIXCKS
zmvkYFcOc>AtTh^j54kle9!+YVl<yw(US+T5X`y-NhmGfvgIQhas=CY$w6oAl=^KHJ
zm$5?%Aeku@hWDvE7bPSY*=9ja9Y1-xQAA2SKvL<n5#>DiOxl-1V<4H-k%sR@lncT2
z3<H`3@~aJeku%)c4ixNOoafVdy=bKemlD}|k-IWyPj(GzPOOKNphz$mr&wgZ3k*y8
zv)hDNi4__tDL-rM6cm`MFYsIknwRP*_@4!+b|H^jQT<74*>~dAgx7YrB#1rdm}eK+
z5Ws3708!88Et?8tVDH9=Va)z~Q*AMTlNTO1h8p>Dkk<i)|5+9K3^u_5;gc<OD!*!L
zRSMTk_2@4mPz-b+ALF5Qd|V6}ym6$uOj4u(V_@q%zViT$pKH`r8$;P9%s7c7-Rer7
zyy_ob6j|qh|7nY7&Axn*3!GQP*vj;mDoFt1_@wh$;%<jD0EHHy$e>=hES@_~q^A8p
z-QQ0T0_2T&-<=`2n9uq}K}~fK*E^gzAZ6xOcUBv9Ov<Yg95Xl=m<TZ}TitXnQPKo7
zE<d?7e=^KROzou|h^$rApqY5c@CNf!Im_=ZM!TyQlV^<i-UhD)Xx*M<JP?t)20bU5
zKdGX(Zu&wBOmh!t)yo3PBAIVkC>l}t6Np)5y||@W4UG25yh{$K86)tgmM^bjGg;nU
z+umf6;xxy_h{ks|{(XeYa(X!nC*Q>#<?16`G8Y<EDexL18JttqlSee)oJm#)Rb`mx
z!YJozk;o(i6e}QAOiTf-kG*79lE9e5_1k$|V{c-_7g>`j0BP#ny2td?y@iVn^S_%$
zKyL#_^shMImH`}?1C*GRiS-rJjf(B06;a`?@fQ*1CxzWj#vCrufyCBD>oK8y4oM0o
zQA%3)+*g9Q-28xAz-g12#RL|HCP-YL3DcV?^9HS^9UW`Dt5)$D*`FnPwUdG8tO247
z`D4cgu>TrEo>kW2_(RJ0Ro{4M9)(i(JpDO2>-lLY!9TF`Bcs5{U1^y%vP;Amg9SKF
z;7Ad!z`2LY&H1mv{yY_Mq$2}{F$MMXlwSl|iJ+or6LyWcIR=GW`kHse4ZjWaCtsJ=
z<Y@0m>Bj&fv_-Au2fh}43lAq?O$x<`x~{CWn-f!moWm9pdwoPhlM<KV)2j^!yp1d%
zy5G{kzzO85wiGs{YcRSg8SBKQXkk4%(whVEKl!-hDfjSMfec}OB!{01j+=*DPdGdE
zVj}!|cP-M8*|NC(%QZt^tn<iEe}Z^dHeQy&{X#_j^#yrAt}M9qTRuRww?<Cssg#xR
zyZMQLC0j12qqU>pCAl8@VZ4;j$jymk#wX2UBUO@rg?y0};scPu$ifs5(}mjBsJ5Y;
zpfwu)PLgp`v}P%jynfGheF;{=Wxhqx{n_EO0AQL2EoMsx&MlL<PhLd2NzT^cN-{|P
z50YXID6!p};iR1esbv~6us%6V9ILD|v=yyUuJIN^q<Ywv3)yQIs7ki*e}q*wJkV(w
zyqywl`96pHfn`4*p8d%WJ2lO^udqFWc!A!4_5^WEm-()*0=5QGWJy+!{FOstTWbkv
zYMVMHbrp_@b?B#jzUitR1}qwQ-$mc7GADhXVB9?#@G#g89zk2N^aZ|XdoguRzG}Ul
z6b1(X>=2&;|LtIk6AjsI73?gUriugo`=tD{FSas;m!%Es>ecoQmQ{lx+3s}df6U5-
z#%KeoF-5(`IA7+ykP$Vq%ph7yCJ9rTsrB&QU3t1YE7-<Y@BNi>w}}4jP5aTYX;vBW
zXEm_8ho<LCJAx{UFee@G;qPw`+;_LBJ;2MGZz{2ux{u+vDLi7rHk#ZxMS|s2B?RUs
z{o3-Gf$u(M5ZxRJ#&BrY_A=R(&CE+}BU49jebDCMwV=6=QTAJL-U&xTmW19Qz|3`)
zI=9bO*Q#!91ZI+T_Ep`cc=Nc;fq%PtXgPi}PNlV+$JE=p{H=_TX}9Gvt1ed8-?V`|
zYYg3}PH@xEYCFF9viDM)B&UYQ_t!#S^i-^3s(XF_!CK}L|HCnWaA59jJPfkkO<RKO
zE_e66?mN)0L0E))TW_f2i(FwS7So(Nm|`>8rggUjsZKzBR9*K{dgVq>3}$k4Ob=ZK
z3uZnWiToo@C}OK59zkEKQY4@?-bUetin6smyCL0J5uK71%T_(W5nDo+$)u&m<Ea+x
zo_!!(I)Gm&yj1rzVv+taN0^C}<~LfyjXe@AsjJm{#u<~*24{{iA3J7dae4&Z_#oUS
zGonb*l@2n<tr!y$c990mN$RBU54+wzu}Y<=b0eFak3IC;l-{Ez&Vx2X0jo69yei-N
z@lf~6)UwBTa398vs5K+@0;F}+;T{R*mY9mJn<BJ!HiIwM;2u2zj<e53mHhU$-F5a%
zCFxI$bW(Xtn{qX)_JS(h%dIBiplCGgkw+OJR>8TU<|7d@5cQm662-Q_T&*&WJmcWx
zIHgN;&34`7)6m(0X=S_9O!xNH)@H6)q&~7T^&fchZ7Phk^P7>r-82V>t_Wqj2S>8m
zV`-Aka<RQ=gL<;)Uc8iyvq<9I{+|ar)hrO{WB5bxm|C_jN9u&l@X**PzM5GsgcLiI
zii*SNw|ujkWR=TeVOWG@%BPq5)n{-g$6ElBTwUYLuaG9-Sy6`dZhF!f>CVXfLTZ7{
z?t{6R<=G5xdi>SX?aFNJE(Om><V#M@$;UX>BfW|NO~GyVLP2x69pC+}=>=t!LR2W1
z!^*-rCj_>8mX`f>$v%1BpiX4nQ==f)m}wYkm}C1TP0g#p{RiIx=)~K8(7e)P(IWzy
zmmFZ&z&n7yi^nqqE|<0*eBFOBWx4t1&0j^8x{dY5wWT;WJBrr}Xy-<Zir`X>>1VvY
z+<Fm@?bb8*4|ZdWoA%6ur}viBo?Q=Ucz3vsoZcLLU(=FdlY}d<OtxFGD5U&qt)@cc
z&DbClBaqGBL~5r$k0W{=CR<1;WO>@%yjy2iYry<a5-EPXn&od#>JIGqi2vI0?`|<X
zzY9ar%-~q_G%5t(I4p=f*Ys$8D9Pc;1~lqgk?@_IS=3FpcJ!?nHR0(n*0YRUw&T-l
z{`7=S$TaGG(UYU%wY|;YS8Y&bSl14e{na6l^>*^g;w=ukRGZO7BQx71I(L&d1oYIU
z5Gsdq)8mM><iHRhZQ;iMPA}esuV!1bO!(f)UcRRFLveP-d2%n*p)sQjEK#Ey*FNs`
zslC~X>VHfa4nh63KL4;YvKWk8<1Ke?r;Hp|y=j}D3oktE>?o(?oYb!`SYsy(7qJ+o
zx)D1pR~UlzGfC3+e2KiU=QjoB>8<aOrk&Hl`4@TTlRa~1r;e%OGG1>f*~z=7qC>Da
zHyymy)uGJ&ys?<cnCS`YtHnKZWy$Di*n>#}CU{*&zBhW}p349$H7m0#`UFxs$8Tu4
zK}S7q;h{UkzD&12^#+Qm%91auHM6Ymu+~O@?N@ejjIXW(m9t3=-}k<rVByTusb?tX
z5zi??#U52eG-18MTGftcrSZs#B>8$X-=K|8^&rZgy?3kVccJiF#6$D$EMr=d?bA|Z
z4F|@b;|0S!9{`O;Nn~g7MAD8|;}71l$Fv_MFhcscnz?<R{!EZ6Q75a@JZ|kYyFOto
zxkIbC*)}xd%38>vCurGj*jL3F$~W!vag<NEyB*<pgGO`=fo;+$Ka7)CSlIQ$Dyg%x
zNc<wG(3c~0j(x3$@0`$-R%v98SimR<Ln-*~vpHrPqfR9!Xi(Jeg$=(Phw6GZd&ghR
z&p^qG$>yDit#s=fQVFf?AMLVn_gfH$Mk_EZf2r+i=@+?Tf87$`@Na#%eyp_`4br9~
zp-I$L(cYv|eu|B9W<$!-_PbB|xo)&bUw1!VUh30q%)j?hxjt99lGktVM?-6aHM`q<
zj0M^TM+!E;5+?(8BTCjPFWpgm#_`Gtv;PRi0Saij*Z780PhGA-_$aIynG~vSXU5|z
zorTo*&Hfvh24KZ3VL-xaQH+o?6aU6H$fAk`BUa;B-K$=>Rhq5`3^VLk<~y|j=I@4^
zb~%JIHpd}m@y|0WW^em&8$W#H0L@jS50u~_zy%Tu9F&=yTa$fVDH^*8Mj(3hVP}lN
z_7?rbf_JuBd0ag8KYmD1KofSTyzFT)l^~ZcxseHPvNXSPl}oVG*MiBL6KCqya9xSv
ztzv~X%ND@S3Rpx{|1kb|yPxlCChbhs=eG;%s$28f)jBz@k_B4241$uzkG_48zNYjm
z{K;+`nKQzqHoAGgoOX9-f?jE+demiHD7KQ3r+c%^OZ^tcCUqT5Kn12TS%I<$vX&|A
z-*3Zj^DX9$UV)5x(_E!4FI}!s6NdXUMehb~i|>TBB2BXBT;;Mp<#(TuEcm~>IeB+|
zaiR73jomVTPFOaNXZ#$YsYBedgd%p(@@RfyTUr1WjavmFO(3o*-dj%5>)iyTMTUCJ
zXaggzcy-R$2YhrBC8g)cBg8r@x2)M?a6@nFjUkp_<qvZg&mG)CtRP?FJkp>tCMZ|6
zisUcr(o=RF+*eSK%Y2|F)Xcqvu@4JdQ8sVtZPv#{s6h#Rvol?ZS|5Dun;C;sD5Znw
z%&nHJQM-h>!4{A^y#Gm%d%{?$Q43Sp-r>4{V0oDNYGOsTp+xU$aX&J+y0?idgG!Y>
zKJc_5S=F1FuZ!<-U5y$YD%;_GF1kUhX{&ncT;QLYOnw-Ux(OZ2&ZUOdCh<-jc~qbM
zz^7gsN-t(gbA!3}oEB`$NG=if#B?c!iJZIN1P=pl(zXo!^sK+}=JKF4>e0iIrjgno
z^@_5m$<xh|az<V<EQPW)B^uusds*urv0<FQEb~`vZ1VD~IXlr>H=pt?dsa<RacV!F
zSv?pJGB8BVbDr7)b~=$8&c3@Mq(L6@Cj%S91S<E@>Uv_kS!X>He~<a2EnK0|Bf@?r
zk;a>uq7rx7bIEdu!RS+-a5)U#99qmjO8B|CmD_jaH<tLBR-1o>(0JWpVpaisQgKSG
zg9A>_J<Yty(@gC&_UYmBD54(w_8aG;n6H2hxWk$o1Z`*cH(@ny3xC5nCGe96ilCo%
z2pVpllbpSSS$|N{y0uBWyESry;N%B_l;%bKY(TAC(izY0hXb{mOwH;dwMoO=#)7Xu
zrKw*Kk4wG5yl>l+PPG?n+r$2nxRdISs=E!%BS6&;5cF+NGtH)&qAjaoA|ZsRO$|<I
zqhXfFQCdyC*}bt$ark4pdb!e^bl-%zrRW34-I9*)d~*FlKX&}|_gt*!p#29w3Pw~j
zCoq#EV>ZsRx~n6FX?Mppj)kQ%5)nxbkP3yY<5Beri}bUClvZZZt(YM}*Zkh0u%h%F
zLH}eEWO=Fv6ZC|ZcK3%}-^-pSQd`w8dk7@|IXb?M2xJcm06YlE->+orjs+SQim*~$
z<uq27G1~<#hMyddQP5k(o6_DLFDG8*^(x~!^4zxyHB@`|d6dKrK9)r<F3e7JG-9zn
z_j-<k@AS45VY#fXZXLHT4A=)FQ6KC&^HNRO*yz*wCOsEXc{iv<l%782A558f3aiY?
z-EBUfps1jff)@1lRZk8hRX;|HxtPCF%@7;Pn%Q3Q7{OjT5xuV{5e=(ep2>7s!K7X+
zrH@KVWxsVWX&+tBvia7CvJ`R1E!#@|x&tycOEK_QPhSIdT_7IB`>)r(mNTojIkCe=
z?^{%>bBfd)Pd-RHvkm0eB%N04F*F}2_u!-&8Zp;By(zU&O5(kVT7`4cA9g(h3SQ9<
z?S-))nDq9>;MofbpNq_WG9F8t%yu_?vA(k18XvJ(T^BXAeTM#}i%y`R_h#Ag8R0{`
z01z`xQXd1~<dFejUeu<IjZN}Is^mOOa4|x+zuF3W-*06_wA0cxGMsHqX$fguukcW{
zJBia3FYlRg#D;*exlmdw5FW%_vG(W?!2yG@e6nwByvF^HE{5h2nYBjeiQO<~B8LJ^
zN?*GUMqQ^M>tdwmx;gQ6w}a~ba;6}yZ{yOdM%#=C^V#I?Jea_EfNAF=MDHr4xBwFW
zo-pC&)AbL>KyS<~@1AfS@Am!Q6n66(_`m$=y~=mY#n!;f{?hxCBx+bS1DfZ*7tRp|
zWzsIVX9~IBL?E~X`_fa07X817Eg+e21gI9QxeVrSa`Tz&L2b>St5n4gio;t?g!#u!
z`%*>e%LUuA%tlidV)b_qPT9Ld+V?=GxS~&_?;7?4;OaapaJqN7-?M1`6HBqOMI#+M
ztiW0G1}hl71YE|ZxX4EMnFk8hlz;&Gy_k)0DhT`v%y_-74{bHOcos>$<Hi3N=xd;J
z00{ytN1nLH^O+s(gv;;rN0%R+=c^00?(D%!ZccE+S+sate1rVHd<SuJ_u%O3nk}!S
zP>CnY2r1tw0K-%4=7P{?ZHF-qsmhMfWt~`qJ@QI=33|KkUiEklBT0d=<jQ-XbG%hT
z{Oq$?jv*9_G7dq0tL%35gH+F`e>#v5-I2`>ct_XkEpN6G=1>KBTJkn4Yl^EQ_TjO+
z)6pS(ofXc~UMy@)I3AOl$W{oczOP>YJY*F1>FZl<BLOy*@WV*njoC0PRGO{iOhhWO
zzO@4`IJ{p?P5?S>`b6dwg9&@MhMSzwgYOxNlD*qGG4IUDOB8)-A5MDm{>VVG#k->O
zEh)am@);B7){BsrrerDiul&(@txF%@rj1{G8Q$@ztxch-O}n^w4bGGdpk}`QQUL_#
zgFsE$VmZCe$KC1yGV=jVUb#ZruWs(=)HrpsFDorEdINs_B<yImN3^G#g6g!JY2A;*
zc>}Y3X>~93^rJZ$XDV2|q15Q6L=BRor7J;kcOd}kHEnfXvA9h#Sp#Igm%H=gRr2g5
zW{i(c-)c!*E^jy<i^Y!9QG!&FRJmT2;&P`WsiDnXxL8~h<Dj0PSIs<3hDlJu7Dv_e
zIwZt?HDv-;s^IUt<)eSHJu}=;xP7+m@GD_uYn&C1`Yxg0{JJ$e_%173w0OWLzt7)K
zm>FZNq5Jzn;vM^ZkFN0#4bM)&Jw%5_Z~1JiXmc*OXRB$W#`*p_tAVm^AfeO9{x@as
z$&Qk3uu7ualnx{%7Ei-U-}byqTbEd(pPS-E_fI=wop&b3Rq7Ya!BxAuG?Gt>Zx+pd
zL`Y4l-jEy7XW(1{3-l)L0x_E2)fNj*T@O4dH_+sbHt)K(iB-QF&4=jidZTF{BvV9X
zNP&E|8&QKt)2Am~PXW*KoHpX%AC2|~2yrBf86IxPVbJ23&#d>+^@{7OC$x%<?4J?{
zUTaTDZ9Yv_{eE|X4^$gCc1>!j8}GuQrfaqdvzD>{-=G%*IpB#`T37ObaPr=^0^4!%
z2p^zdJi9Nrd*?w#LGK%l;UIO1Vp-k*uc}i18QP{@gu%oi%AY_hGtYwA@SleQqJ?_E
zP;U+_wt+wMK;EotI*%(}IMtc2<SRc>NYYmAPx@_{H+mVM>*E+;0mmuJDzeIK#J87r
z{E5>INvqVT1l<#+9iAQL(XYP;wSCB_Q6Q*j@+XdV=|33&vpiTI7$TN6dku~{w=d%U
zWdDVTHnW|HpC3vb?;=m{3Lo^9k>D8mJogl7(nj(heR&aeRfgu#Y>KiDfM5MjB<$}s
z4E><*XAy!NjaLU@GY+u9x<p=CrIrM>Bn!J?UbR+UyVT#P`X%rwW)e_&nx|)4K449C
zhW78C>Y~x*W9l~Lj>)}EZe6^cO5)gf8!}KNeQ}bz#+W{4y0~1PPhDq{F^Y?w^&bNa
zgs#TH)`!&T6o$-!fgP9+li&2Fv1r0SsnfyD%bI-Yhlr!IHLLz{<1S|(yf^?zJL~;d
z%N5yTJZpzz?h*CQa-O*{c~el)iAm1%<%gOjzlfje`qshH2`P*njN>c}ey(8?{!c9r
zLDsdJCG3GT=Bpe>j1n|&W6x>Lc*>&P^+2cIN{xKNrh$J_CsPUQ@E;v_g#o)PbPPm;
z<Eqq+eJl-LyBVz7cS>9o<Uyf0&JfDibQNlB7_&WHZX%udAZcP}2$qJGA9r?!Uif9l
zju_jE;<KJ^!gF)E>N#y+LroJf3H$ub7<2Q+mI;=v!3|1i2wt8=NK5j}_CW|;MkXLC
zKFsOtwwdf9h`u%6AN&a+CJ;zY7UUK>Dx|#;e=)rm&L?=MxjFli1wWmF1wAKQ%vOUg
z$(c%}=(Vp301$4=*HQ-q*$d{cR=HXVB)sz{#W6cS72E@-;|A?5Lcf7>C$Xt7gz^JC
zY&>UJwQG$3x%ssPj+d-ix1x&0bjEXiv`)1YsycIcVhO4m53~wZvV{^LtaeI4h@iaw
zd#QheD~1e0-Ijc`3oA6hO7_DNlLDb`jcc>Mm*L3p+_UDq)06Q2?gWa5n^lDq8Whew
zq-f}ww&9>r^j=F37&AsT37{1;UNnfw`B`Q7XW_oCkk!OO?}mn1s-&M6q?f;KX!vR9
zbqMsAEMgxV;?#-!pu88($`xi1P=vg>6Y!>o%{)TncoRr$q2twXiIqMEHm+v|5$oeh
zGd2E+a6#p9LLN?#ybL)Xw`$|qYr7AR-?ppDGc~K~dp}ltK2FJZk#I2rwRcz&AGxOT
zuhV1PuwD0U^1vTOpSkLA;({J9fAlL;Qm`n<2-v%AGdarpDz}J7M#w5C_bLSd>{q}!
zwlL4{d1gw*>7AdtJ1O(aVuCdCIu|Pd%)kKCfJmczJ$vuI0oK(1J(I@#*#OL3dBDwB
z1^tZThzWmyhjspmhUiZOe*s7;I?NXMH)(&PGvwBi)}(<CSFr;EYQ<5NPUE}VM1026
z>N`ERl03}Fp8_({z|u;8@n@9-ZaUC}_-m#gfv}rBeil&rB@HstUHI8)5~mx8^xDm$
zb_oqcfInq<ZN7~)y%M?)J_}^0V*IU<*ct~Yuvvpv1pu1_fcJggBW{s^{K@BM*H)@k
zCWvlJVQi%aTlK|WX)&cd*<oxnY^QqQc9PQdi#^22(t5!1O5G!zA`$5m4#(h-2E8Pj
zmmtBG_qb|gBTItg#dIXPp1{<_xi7C1Kc5hX3FI<aauCGLSusRPm_Yih$T^9V8T1B7
zpQQq(;i|iCs~Nr*)B7Z?7{-n)8NZJXVgP;9k*aJ3v(G(7#uz*R5ux>iTk9dP#{fve
z%i4`UNw+rg9r+!NC(Hho+Ep$iSW{s?0c^hpc>m-bf|vwU#FDdpY&7Dqbrj3=%DYJ0
z<)TL5Ix&#8Bf4jD1<jV-#r0x4(&d-Zifa7GeGKj*20|5OfhZ$q*?gr}MPj9LM9opa
zbF)H?Rj4hNLxeba$SHLh<Gwjr7rC8qa)C~Ha<c2|t+qtz`7UwFvJ7irDbh2odeRn6
zw)PHzM^?kl5uHRJ<vaY{XC^V(Tml6~ED+cDjfq-OW!FcwM6cnkNxD>veN%NRo{Duf
zd(#_P=vPPdZ|(uf6M8US@405Y|Jc~T^j~AR6CGF>6rf+f=5kU~uo<WP6_d$Z93@Vi
z0LB0>aOEIy%6?lFHq>08FKVZ%rI_b^p_Luv%4-<!93YAb`_nQIQ!hLq(|H%ydfw@m
z*xqd}m&sd81tqi^5QW!8rS@0fL-r1y*H*vuc?gsE!WXGjAp`T_+p(%ATN+=HJQfdg
zG@$lca(bs?t|Bj01$q1l(I+3IO*<Ze&sbuTve*<MFJR`2A+-mi=typZ*3&g@Epjjx
zON>J~Hfi6AZL<}5n)H3qGf1*_z@StPWcT?W)u6<Sp@E5Rm~31+Fm;OWFXI`*COiKq
z@b&C|>W?B#76f(RG{d|o2I=-ke;Q{rzcT;^vltJ7IHaBFSa%1@f}!s##RX1F-pM(g
z&kfQKX0-jr;j_96EF>dYnFkso+4-3=IIuByrO_(3?BtAvKO4#bG>ey>%6Gssy2)sz
zl#a5!_87i%p^7oen&-Dj%+8vgr=Glgc(ODTn+77)xD(s`v+p&1R37A+EvXq`kn+j{
zQP=n<VDE=evY9rE8zAu=!Gda|zozQwVXIafe7{#H)wNHIlZN($Qvv>EwIT_84YJpg
z$AGhu95{yMfsG1P>x^aQ6(*J=0daEYsLkR(#Ki6`7Ebi>7|Z9!QBVXbc!YKeg#+>L
zH)19}BXwOIcZ$5VDH8a%X$OjUM|($OqB=srd^Y-<3hMRX%?P}{uw>4H+~;Z6PFMPr
zm5E+I%_)0eu4SCIm~d!BzwdK*Me?U=wpCW+_pb(SwTi%JEj=R;-wL=>=DWI45g9k)
zFCpg=aRgr_jZDNj(lbk-?A68o=2CD*tnYG$yu->BeX}N$_fJG*9vef$e|LayKmbE_
z@2iEE^)>zhZJb_Q9s8a3<97rX`9#@g-UUWpNO|#tF=c^;c|Y;3hDV$<w+ytzLT4&D
zK`kU4bji&0r!!=!E|bow&U!6=OIf(@(SpF*SGor+rW#3%I&SM#pLj*N8@mo@-UPzo
zTHHSe=p*IU_%@k)7(lh#EMbR=$IF3=c$)&2gVfaFCWJ;|SQU`@hJkXe7CR9r3Au-A
z1Bn?6s^V>DvX4CiOYUjGBwt8^{qE!lU)#(>bDhZKq9re8<$=bIxGv@{hgA*R)W<zd
z;iW&8%U``F_n+NZcmc}tkqGB<HAktDma?@f`oDN<<cB5`Uq1VRlF~{5iVK+VR?+7`
ztQJW3YWDCkk#G^=Fz28JPvGs%f&@1sh<1tsAp<mbg%RHmsrlGv#pFUYesl<AXE}!d
z@e)|)j}N6!xRz|-StP3?>+y)lxa(1TG3c|rN55)AqX>G%0ZSNwOF*B_T4*Y%S&;pB
zu_EXR6&UNuMcDF_=S?QDu={`y`gumM8c)DH#rto?I{<mhB1EmNz4TnJfChGTkab1`
zd`L>(E=xQda}3B<coY^GjVaLQNwS&Xhop-whoHOl>up@7Us<?(*6n8DLX6x>f%q+R
zq#?jeGm`Al#5Vl7*S8(X)>iioiaLRFiSxkXy}uq;3joQNjHDtGJEp!R03;!H!*Q>*
z9Li>HIBekAr&%=!a|-a#z@l5nL|O*HW+{NvjOq5pk+!+9Rcc=!tvfQTIzMoBTC3DR
zW0!W+fBw9P>=V`*<$}Gd7ub(+zQwcrNU;pJ#nTYu=;f{DfWc`&q!3an&A=DM2YKR*
z2Mtujtm<X=rrqJ?t6RycFX;!b_n|)&(2OM0BYWxaQCF5e<`<|1u&?Yo*TIEG`iy(3
zH{Kz$CYYUMH2K!&tVPsl<R2zZ7`|~!YrUUt!`g(9f>}P$icrcdvLREU(&CMC3?hrw
zESoT`KCU8j7-s0SR-|ihb}T%OK`h@c<Czxew~(OPeND0wH#=fjqR{Z-19uTdTHNQ^
z)5>JG+f%fb+Vy(F&LiQ~t$s0)2|{Lu#`HE0M@t4<Ef0fdU-Wx77fq0;EM$ZsCILdC
zq!a1xDE`6uQt^71;mDt?Vav)thV;XMe9wlj)f1~md;Mvm@oKD}2Tz_gAVyC^u&yB-
zaZ96YgVrs*3eM{tT`CBiid4=|jz7T0&%837wi1^~{mOAqEIt`*)TUj7OqBYiLcZ~*
zx<4XD_I5fE|EVJeuof+Zs0k~r>sVm{#b11cHtdtX%FJ^283sMLZkN-C(#)+GVlV;V
z{sMc@-gCxY=@w}_o_4*UfHgLarE~Bvp`6<)I~v!y&Np4tald~hIn%0ZIV?Jk5I!oz
z_*(T$y?M~aA&A@#xJ1Puom+F5Ex!^A0RI0FMy_P6qs{VKv*|3Ho~E0pwsZjp9DXrS
z=B9Dg&$3SVYwJj(^B>$}U)%+o#!*J1^}3;T-}C*?{Sut~Z;$3U<p~|n+mBEjhA5Tj
z|83;Sc_&7oO=jhor@S*RDzv4fCsJHYqaeef82ekyFY>ex`c{i~Tm{v+6EZ3x+E%W#
zB_%alzbMj+A&@-gek!(9R^sAEue^<Y)zXDpXiL8mTau<Cmo$}o-b!~4H&iMZjHOr`
zg(PUj@b2;PM1B-GTPQ#xm8NRVoX47<+E^s1id9Fi=A2?$w)}{k8P=yiZqlVo;~F7c
z&Bc3>0&(eY&q+}jx~wR$o7y;YvoV?DmNdO-nkhIU^pjq=QFby-0;mIE<um;84*2pQ
z%;CNYvks$sIwEjwKFK5zWy2TSH_<mGa^<5kO&EA?7+*xlebXEAN}^A5ER)wQkK)NU
z-A9gXw-VJO2W@2hrH6ejrwS}5_T&}^jC^Zr^^x87wq0Q@jF<EV0EXr(rsl4po0Vbm
z+jK1!cRR!UXL}}V_Up7C(*^1tTV~l!GJcCe9k`Ua!S-j9n<G-$jzrhUMs)6Ue>a-p
zjYg85N$!rYYKqLj(60qH^~N|NPH|D0JBcn`-JUhfYcJ3x^hL3rC%7n{PxkWkzN^i@
z`lhBV9?-YJtGexvmENBEp&HdRrxbUb&fXontbVOrig%qoon9k3C!t;!uQ15Eg@dw4
z!MN9LwWx9oJr?*ZWO^qvjeSiY0xKfSzLCTf*m?~-teW#|pZL{S?v!?9`RT`}#Yv*d
ziS^OnOC4h!_Y5B`-F+pn+$mkm_)1(F(Z|nWIrQIa35Kel*-hd)O13yTq!y9Z4b|vM
zba5T%o%g3aj%)*9zZV%4O>G9&-~h^kwfP^W)DD@ujw3BKHRTVe>grTRqC{*2)Pia}
z9;{(NV1$u7mZ@%!l*eV?H+w(Hx1pzg(A}$&+(o}Bsdw9s=fl}<sXsC`i_$PA-~72_
z_GzyOG)GVCs~jfVIO(zb*Pp72qIU}}9K5c@PGP<tOXvPvR<$qU^wPq*QK;qHdzfsB
z;T=n_vFL!E0$?p|3dqgYU{dRM_cC18Y`2qUs15V2?Kcq5w-SF0*i=n(9dtao`16T?
zpY-sxx&7*HmI@&)ygqdHtl-|GTqg{Y7V`@j|K(f4@%84)SAZ&3Uju_l3y)_5Vm}G$
zce}YZ^?_pva19B=PKoLHBRcQJ*w(DRXkt%pqfa}#tsu5IO#q#&nME!D*f(j4`K+})
zQq|v=awEAzRB!wAK4DM)<p@{jkc+YY{KYT?#4t#BdQt!9&$pQ_A}-*8XaDD~N-!V-
zA&*}j@OQ9(h6Vl#RSKM+BWiO64zB+--``6}0J1~Aq0bxt>P>(3GnA18K=R1%(EJN;
z_UBi5AiApp<3IfekMUm<09F|Xb%R(c?5|M&XZrv9b+uQ<O|D&|(^i(3)BY=&|8Ks!
zK-lW1|41!PJEyu@OT>PhKWBPrX{jsa?h7m!p@|efG&B@zqQ)+{CVpeXzNoa6X8h*g
zN<$!66vz&s;k<WYu{KwtBVm7RYRZ>v<kA&*)A<XrV&{PWVKv5PFa@FNe15V?oS{?m
z=w#QIH>69^0cSs3JvvMNSuIjP`{jZ7!pOf#zBG`ov3nw{uFmikd?B36{A7Qv2=~YT
z)6{v#v)#RY+$h?r^6OGsqj#s8t-W=)OKWTGStTN<Hbx23)UVZv(ux()QhO7lM(9F~
zm_ckstXLsNBzX?*`*|LJ<@E}Y@A+Qme6Q<sea`z7nZbuO{J%B+d+5~$I6E3!V07{M
zp087!$pO$EW>!`wyCQJu)_--*_T;!O4%ZO#6B84UKH5)<XJc=(<uK_#|F3Q<@C8KX
zrB8i_cJC(Y?(vOzh_)nlvjt*?+xT$m-+K(g#+X-*RFGjT_W#U1|1X%ti^1nKD&_u*
zc*h>__4E6QyQy~daj8VC*IA0ZDE(#WqC2`_K#ugsKOo>%74+_au8UBsQpahjWVhu(
zONBtlzb*8oTHybvK^~U)#|)t_>C+$*py%S^B94S$L&^*=YKn4;N$r${YN}BYr;JNO
z#7AD43Z2mPs*$E-O+>CCrC!T-3dJKD1xXJ4Ws^_u4ylUaetSa3?$Tm4H6qsrcbk}J
zdvRuF#>~|843CI!R8rtn{Np-yo(e~|R_&F>v&D}mZ^LZLyXtj?g@tdT@k`%$i(MKH
zgBU1X$p~al$|9kYn##(SzH&z>i9Q{lb&K!+JUCYb?Yhv^+#CZo;J%7@k!zS$Qe6B^
zbikp)tyOq)9nX^9va`3Bt_oO;ZD}#+2t9exAWmFtv+>qMT8vTj`1pPL`A0}^7%Ya2
zMLHyh(5(Bv`sIA&S3Ip1T=4;oZeDH>lg+^RCnzpzZ0NKla#wU)F>v#+-u#ad5r^Zi
zy1rgxcEHO3cciJQ>5=GFIg#c{-s(n!AI-LeuA{~p&KP6}cAD<iooV{G@l1H*r*P5B
z8A*>{-z#enMYN~|r>z&{pKe6-kyMfYE_#z7!oO_Wva$Ue;VGQR?Quc;{?j^Ps(2P-
z@w~dadSOd)1*L2t_i3aivQ@FyDn@u;XB}F-W^*bLr7LXrh==6?gH28)K8!6N4w5Xy
zXchr(Oh-eEv6h6TV+byI{3y22k}DZ4>nPet$h9sxr>*T+%b+}L2ACAifxe@_OuDl1
zCvu=<Wvu{dUkm>0x>}ic21+ladSm>}N~#z`@7G(QqfaoJpV-S!c~@L>2wA&_FdelH
zbMo`^Bf9h#yRHzBO!H7C72EvsKW8}xe!%X3f5G>ed`%jo9|o`Trxc5d1uvln;RH<!
z>j+I+U!5BrG3<-i-fS|y$r#d){K9XDWYI^Y|M-M8|9HIM>$tq?0Cq3iAt<=mcMAhX
z!uz@#x{S5GYGflcR`ddAvodmf#)k1<@24y})B803-6rY5+di+1BWQowTam>-0UOCi
zgDZ1;6XoJLSYgUs&CuqWq8#9R=3dxnWFtQdt}RpZ6t#qSj6Q3LCrNIckePlmmskGU
zo>Q_DRci5>`v4%7e5;uX*WPw+ERw%^HK=E$%jRYINGPHJ4RbOKiyh-Ya&d9hcvL|J
z%)?$T8wvlHPAsqOkzC5a9aaRKDt3K73zFh_%-sEWV#@S+v|T57OOdaqJzhaBaOMlz
z=GtBI<8@yoStfaShpJ;2IQg-L1G!KQGyFZmq?Iq^zG!KnYo0EK|4Wq<|FSQ06K$4}
z`0XDJbAw}KdrCPkrJY6@$P3fnUiyADV8JfuK$=WnnO7os3xD8&=k~_31=~-DrJBVM
zLU#NYYOj3&rq2+msP{nmjEsatk#c#0zK8U6ub?b_PFXB#o1B-Pb@o=ohpnxkK*m~c
z-qcsMJblimUyWcc&+h~b`B^#@aSPxsq$pMOq<<glj6Q!S_owg=jrBozo|mH7V$FK;
zy`yG{Y_K2-u6F`J97+>PY<OF+U+$n^>?=L2wc(WG_F2>%cEF=>b|_%vqpf%4&*H9L
zXnS5(R+gnn+c24_fnV*sV?nu2$B~oZ5!2uEovrTOJ0B#&T8>0oCA!O#Z;6H61&kf%
z)`p<r(wS1?kscc#{{&Td`td{EZnd)+>|OZnNm*1~Cb6#z9<nhO4!i=CUR5kzJz#mo
z+uJ)<Y<rZ47+4s|nlVP&7-?-jnA`RcFbhj09dih4{2G#$W*G8^AsXQ;75h(wJ!Nst
zk2;2zWcoX*|BI^lVJY5%Q<|_jJ(5~fu5$3dNf~nFD-q$hBkZ9|6T^tbcWUyaLtWOX
zhOk#qaXosyxh$XOHVDLzRg1L)9!xr(MaO?`bykErQMTp^%C~-%@MqS`szdqY)S)`=
zwE2FT=cqN^rUaHULnEED0I#|VoxkU5^(wRn^t+<DJg87=zh1pI9Y=D+a*N{%@XTo9
z?JlQyd1&F%uTu{{6a-I7qQuju?$L`&Vz^(<r=d*pxH1|0N&3xclO2rU&1T246FFH6
zx9CUST6U(yVM_5gq$9y!udX!9mbYcm?qupGo*9rJQqvi$Q0c$bp?MuS`Cl)m{lZTD
zY0zdC9cSC7Vp*PE*^Fx*Iwk~HM~TkLH|TODI*~0Gqc9z^HIp$=@_A96l4=^3YLnV&
zO|1Kye&NWbsJ~dVBy|@6aKGR~SnxmLe2jy3aoWjv@PZ(XXX#U;K*NsyYNoq4%1M_G
zi%LNn0}sMQHLcQ^C4(f=<sywiMEBEh?&|rp5bVrT0pYu)be}H2k&R!<4?5HIX>Rnj
zZ6s?QiR#7p5v|Xl@O1~}KXF=YuOnFjPVb4_-Rb%7qq(O`v)mL=+C#)4o=-I+kN*6!
z4h!$2F1V0TckBy7rd2tSG}x*&b?nd!HBRF;3N63}mff#UKog63(F%GQxFc((78XRv
zyE31GURUAjZnk8MuePvNHz{;1nmEzzl#Ef>aPJ*2MS}oT3s_zv)_tH|bH6Ck{at9I
z1U*+mO!8&Qs`U1Ey$a$Vps$a^<6vG(e6v3}-v4txH@9hB_9i+umMH(<;abk{%F4s{
zV^xlUR3l25V*!>&w@DH{I4t>v4mR?quHQb!I(_S)1(a$@IcgZ@nJ~zhhf?+U&hed_
z(K*>xe{E|{*#x!)mHV61hm>SNzu#s0<okI(l^MONj<m>-d6zRN)peNfgr(QloF?yN
z&xfg;&-+qO!Muum^r_jcUTdnR`eAR>%!)4X<wE6Qlv~T0sSyW-3Uw15SX;e#Q4^)^
z5us}OH^EwgE7Ms#S6Sf}Y!vm8%?Lj`3fzRw)}3No(cN45CVYLWHIY+MZ*5~i7`vbW
zEeQ~Lq-G};{VJHhiaPcsa2G&9GqY}#+)Js#q@9q@C^JiLBOOCx*Ll><Pw(v8(BneM
z^^&4sk1n5lQu_7`S)wIy)xGF12>ltaOq4u9Lw<!jUs3I{cSRceDL$gRKvsJCg$GCT
z_%aMNcoKYd{sY;Xb7YYq0!HP2v@4MHJJW;VMqr?A43&nO&$g~xs<&Ia5Nh~EOm2v^
zmHN$DbQD7!QECafG?9}M1#P{24{TtDv+j-lPfa=PNat+Bsz~!zu&o&?$dFF@nJAcr
z`i``v(HCSZ%R55;%gbB~SQsD6Q#^~&r(d3zgueURt4vg81D(0<<G8u}?d$HP6bb&;
z5#7sQPhMu1+<<6x=LLlBr{wTQfBJo?VW+6rzA#!#oW=D$bX|1`G+R#23ZX&eTb`T~
ziMv6+-lfHcnfd%i=HLvOP$?4&&0|a&$kuLrhL?>%^Zbs>yc5+VWqY0Qwy$snDf!rm
zhEf9_&JNOhn;Y#yDQ}?{Is2ZhOf*@@LntvFfi;~|BQ}Vx{Q9i=I#u}8OYT?e<xOR9
zR>EYFO9L&Dx<j!Gf$~HT(F+3vD3zyPmdkITKYnyolqioBo3Vy5pWgvN9j+dWj;$of
zt{cc=G*@;>Hgeq@{!0%(%5P*C8kWxJrlnuFfq_QsG?<^*>l76EmuOW<O}%Nkj7R`p
z=yvK4O}G=8{L#{31{X$O#5+c)FH}TLrPV0CzK@DfQI9$%(Rf0_<mil5+qzzw*I&}T
zwe+1thlgAG(ZdWyNk4Icyv?b3NLvlq6YlqvPh?4#r=)$fZ)LKXlk;OAz1L~<+jHK$
zhF(0=59aHFurDP{u`U;8DdiDSj-T~~*-FjRI^a7`kEIA-PxXgm$!FI-#ev&aq4C63
zXx*S7Nn&LedlHq)VX^cOWUZ$_5k2CO@MqtPXxkDuL;Ts{^RQ2if;)3|9?)O>E_C&W
z<T$*+G{+ekfesy~x~y!?YV>iv$BV8*U;T*Fc*eWFS#adb@X#QwY`}Z2yuSc0Mq)Vv
z_u&bivom#q+S_CNH#m?-FBk|=Ra-qevjIjyC<jyOmRb^d0}-f!g+G3LGm&lX2Hn2v
zLc>-&^Atsko$`mlT*sGl#5A0Szpc5H4S}?pQSioews~3i4EFEY+1Yi>vppx~=LUZ^
z+tPhX%@K&IwLcM6Gi5cyp@(}XEPKz-YI=(Gz99_C*E}IM?$Lg(9<Zv{jyc1qT$84%
zw6!ILrgRw<?%@cQ1>0e{k~4}bR%<_T(fw&hMw2VC88<l9@Ebp6ISPn2t~PKONF#|?
z^M0mdH6ygPrt6f7jNIR;KsujB$rn!82{y0lc&z+<oa8l7*3|js4yUX&01XAt*^a!n
zI%>q}8Wz7AJfqs#@LbU066xj|;OLcb-!7sSJz2j03aF3Q3?ZGhd~{wW6dNw=UJ`>4
zqpj4o*;iK&HH5Ml>vV;78)TblKBamV{(1O&o68fg1Vnmo+sVz{;$2S(<*R;U3Qc%U
zE7ckh`vGp(u5;sM<Ugn(@}>FnrW^~@NiFOvwS4q?j$*EN?dFsYJb)rdsTyJA_f+?&
z>g?33@~^rV9TX;enM1xK{;$&s___QlqgpTuHjw~U_&anaN~6H8^6Er|u+y9FeHO6o
z=R*6=Osvt>yZZVrp&f#<6u&N7)~+1yV88Y4%d4XoUvJISiTS@i)?M5ijv$W4AKveh
z;hrEr=ibmZk$;73CkRz@7+$amXVgTN#+O#j@u){SAo&L-Uy@7qC`nYSdEUJ;RQsSx
z7?PmQTj9}@U3fN1wcL3R(c{nVHT$L43Ubx)!S(!lKq|V3eM%30M3`rt*4!8kJEJWX
zI&;Ud*hA&rY1PhySNjp*bWv`$RQ<Nl@p+2hv7Q(swWj3bA{1q_C|%{w(MXzWM!j^%
zPK~)l`V{A*%tgr|j*Bsu!lR@-o+>)%^8|KWlPXm$i;&r#%_*Q&!bDcT8@0JL(XNu=
z71VTgBXVF@{mob@>+xXg#!{k6Fn~UCH2eN=4tQ5t_gm}2_+*{~NnyYU01b<Kq)5pD
zT60%GI_g0F90e`Fhu=7OG+byQ{*lfD!Cga&gsi}RX1rshqmq~~=Z(P`o<?#qLS_=h
zwo`tOO9KcM8SPs`n^ja9Zg57vI;w|5q$`<rv-8~#bRY5Yx2XxjZG-f&7^2Im2=Y`T
zC*~h9))PH*N51Wytmsf~fRQ^3?%$dIaV$FGv}Z4~3&r6p@Y)C0p|!nqW3!$=RG{y9
z#9ejQ-yiC>O$^*wp>3<>ct)!#%y59c6O`jh59}SUwMFrz#&y^{;Sme=acTycqpd>9
zaT%ynd%qO5{RTe;XRSasgq>7_sm@kD;@+6Yc;MgfC>$zbFX;o84>W4lLLkalh*Nzw
zXU(V{{PP|C{m`|KnSlWjhdt5FoAZ<Fg(at#<ED~@_;qP}MwnR+e=Ks#IjwayZzY9&
zGvVE5!xI2nxgF(plBTw&1Kt;GPjQT!a^eT0L#tVS{pko8oheW}Kss(o=_iIUL8g98
z<Nz%_(fdf%Lp8pIV6ytifqnY(A)tipSpikPweQ3|!+_zy48^*i6HPG`!(0f3r%m*|
zC3O{CmNkRhL(I3=4sPg_XpG$ITB+mYx1tKWR|3f<H^JGaq@b|SM9F*b<dMQok_D;7
zFEfS~mWfiP^Kj&yNx!DdmkAZnr+@2m%KrK_hWNPK&*m`sQpE!0Gluo!qShI;t0hyq
zbYc~AYc8+;lENh`J3CK4<|lS5veO|ov&EtY(SbREj$~!VAhh>&mkSe=h)41i)!<VG
zk|{YjPaF{|j|pCBA_kF*-825o<Qbv~n(KB&oMmbr1&4<}qulexY|PDF;&o$`*H&f`
zDhVsPReb9$?qB-$An>SKE{=Nbp_bsjZl(RG(Gide<++K%$!!#bZ0_#L^YXS1tZ^FG
z6Hl{8VBW;hp0cgCOdEBI1Pq?BE%Q9!nTx9$3_Cl0Tf}u8&z!?gWN0(8aCzLJq1%7N
z-b9Gb<?^MYzTjZJ+_a4P>mlxZ+K|pa)9yJoe@tL@Q0Xgt!j+u2XfTD1CqPc?E4e|-
zZ4H*KoH!!60fk(LU7G!lG16xE3MqNUDUQC#?_$3vikQFBVdJvApE;8vBCOEEmV{Z|
znyh`%Kc~>R28!uRo|GncLL%)^X6uW!5SQM#E|li#n2}BM!cHb88$8ClaL<&`Fknl-
zaBnHF{OfE-n%h|Htx3eI7yzytM6wtb4j6_5DSmwx(btC5NUntZy74|_&nqf^#GRIN
zk^o{*a!Rl)03)aN?9?t90yt$B0O=0CMmmM9DM8mCTcT>3hk4o1J;n7C0~3U!E#!U=
zM-oq})8|Vl{SE}M)Mg(SD6({?XymO;8VJvC4wAJXTvnyA@tCC6+kWv=j<EO8(c7?A
zDAseVvpSG^GqE&uHC2p)Bh?TbPOTQD;Ct12)x#3MHdEWw2_D33PVI^q?&{L4Ss+7&
zY=V+oVn_NpKH=*P!K#z5Bz3iU(G#`)yp^9I+CKdFCsMoC(#w#J6L#;0uQxj~ua568
z2az^JzNo#azd5uR3ZdKyOI%1JoAI3Nc%Q1+o`q8yl86PMrh&Ha@sMPwwL9G3>u+ym
zE@JSU9#L4_mz!tJ&nBi5Grlb9zt{z%f=9FeuboaUXpa{kT-|!`P|cQ^+vG_gMA0AT
z;m2pgwRW8hbxdCO5o6N6mXBJHXL>9G?yYqs=<cpIz9OLw^EA^rt=y&SuDJZNihR-?
zb?3t~qE)xB%e{N|KBq2vylZ-uu8LE)%2aHQm9h8Ws^6)`6=6m<lNI<A1oNCTang!%
z8Msy7v;nJUUPV)ekr|3&xC<EWuD{<2D~^u(R%o32ZJWrNZEO*4!EvI3f+<H$coI9(
zLQZ(dk1(TqhrcsEW)!Rq%F{cYMfNIyq64c3nek{yT*q&V1jkbuq^i!)TMLzB(MJ&z
zZUujK{X;28b_#ZG{Eh5kA>E<wE!!%ev2Q|CJs8F!N;>*3Xi-EbpDcb3tVvQfrH!*O
zrja=~Lkwqn1@$w-!~^b%XpcViu-bIm?PBH+P5J+2<Sh&AhtjGZhGV99XV#O{M=IeN
z$G71!dtgQJAa(}3Zo!v)UrhYPCGz#<KB;wsNQ_+Z8=cSlPRKfVhBy%C81?}}$4{32
z4AJ1*m~m3^A2o&<db~3<GXY<z{h7p`2snPGy(;EdiDj1%4Uul$w46?Jbb6^N(wYYt
zfU_woqC9S5JNGnuf1F#*8O%DYvNckQ0JxDOhQ~Rz(J_d0EJ4Qg2KYXFQ#C-pBl4DJ
z6(2T8O+BDar*=)MZQ-~NQqn@q&E^Qi!Yy%fve1On9w!l1v40=pw?CzARSaG^WA66c
zI?1bGhi{u3YQGwGXm_TiAW;Cy`N~1vKFhG6DBrau$m%H~J=|E-`j)s6hnm_7D0wbz
zg;l0oIt2a<a(8@3QXU6V@E1^UO}Kxx3qz)ff;_kSpEJMo-s<!vAcHau6P0@6NJzeP
z+DOCv4cM*5JF!y#>8h`sAd?5)1n%Zqz*yn9QoEM-a7Tc?P6XF$nOOTtl;67XZ3b5b
zBxq~(ec-<Fzfw|-6GKb#>h%@cAsL{%089A**er<mYr)?RTzpAeBj*a8EWY--)rVkE
zbkyk4Zh^&pPkivH*cl-?R4p=&3!*CMfj?J1<ZoNhF_knRw_`9(D}EZW@B~0&n}2_l
z96H2OXnjiXmwhlS#xW?*cqA&p#ld;Jz2g-&XjWo#G>kv@eW)Uvm4k!#yT07ivtpo2
z_IS197XPYTZJ_45!AR2WgS$sf0*5k#n`NZ2{3CjGb@luO7LQ7E3VYp-!utF7@1!@o
zgcUOf9hj^glCcJK#vDVeNkcV|%B##pn=;r2<wJt*OPm0{HUkhp-`x9wBWh=%WJkSh
z4W&pM+?vXZxnLO7-GYUP>e5zbXFaZ9dYaFKpT5tChRTw6W{RFGJEcG`aVx<s#ruVq
zTm7r4uhx?e_0`CI6_72mof$AL>s5ni&W}^@eS6V)H)UiL>s=bk*b0*GT$E2|;i;`>
zjnPmKAg6(5z~4YA{(h-W^W3&B8|v7JcEH{J<rt^MoHf8^T}%{4=9tG_bbZ~XDer2e
z$OV3d9V|7c*+gacnq=aCqcWc%zY^Y^QeHT%4IX0Y2bSX9luS5Hc-VKe(p;U<dLA(;
zQva1*e8qVbk!Z2`U5qKdlR-=?c6=;@juH+neM-%UF}n%I<aLt!4n^n+z<|7se=E56
z6p?d6h0?d-V)edmTJ=&0lE(Edwr<Mh%a<pB+=T`!vjb$OYI(ZI1*WYOP<pH82P@_6
zta0fhS?T`YfB8sSPa#1NGqoE&0N>|l(B>4XIc~crUI`eZ;(%>vDMTcJ)nxGEEr%xr
z)YX-M=lY;6N%elhfq&vT_zWP$N*B~_We*07gp6^o6*g}e%U3j@PY!;c(i?&-#AhKE
zBvd)}zXV1b`#qygT|4igOIMYV%xy^npT!gAZ|8k<uQ2xghGt+c@Scz=^x%3i@WOTH
zt6T0X^&bIZ`$c2TwGW=d)v9J?11*9WSWBHKKBAPp+1wlqjz@C9?RUVb4W>emym963
zRERcp(gC3MDCjss2Z&je3;UluPUG;P;Agrrnw`T%E|fqBv7r0X1Qf`>yxJavm=KrP
zH#;}y+M1xaLK}G444CydZ=LTJKJ-4?dfgL&piib-ALT^cyncIma!}rUn@?x?KTAby
z>jq+2yVt-Q3?LzaD0Uu}C%bv-n1*~v%z;%y9C~fd?(W@lHu5H6PXhx3qp?_7H@Ww<
z4&QcmW{5j;q=VC*d`$1$c{4v;1M;B$PFVM_9*^=hJkD(hz}-f|-j_M60@~O@yb&MR
zl351>^Ys6ohS|J7q&Ld>uYULS4o%+tYg-#!rAhW5vrqu`Dt}r@tbyhGv0&V*Ah#`W
z4rSN}-4^5lAGKF8jPik(!z#uTM|P^FIxNTXVJ6oH0|B4>$|huolnNnORaDffe&5c8
zIkUs<bL9Jx?RLEjir4U#8g|EulW&6W5;OfE>Ns%ECW5I|VOo54Z)yP}W#K3mlVe@t
z=88t6#UQnpun$D3tt)3+;Q2MlJ1U@fJXeb#+9C#D-a@@jeNy}N>(=D@Frq*@o@y{$
zEm^18RYi_S0*-XWVj!~&@84Yy_MiJy$Knxg?-9<udp3g&{OIc%-ORu4^z45C3Wgv^

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/public-cloud-architecture.png b/assets/documentation/1.27.0-rc1/images/public-cloud-architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..06d20eb072177251e4286c615d3f25c3d3da1a84
GIT binary patch
literal 162809
zcmeFZWmr^gyD&@)I*3RqNC`+PrKB`UOR1<Rt+d1-L)U<)NFynYq$u4Tg0z6d(A^B(
zIrCiu-p_va-p~8%dw;$h2g6!x);h1V^IG^mQd1zlL~{uT2ZvZmQT7QA4g`aPLx2mt
z0IqDmW%&sH;KH9MJiy86q+0?fA;vG1OjK2IZi8be&IQ~HIQZCGaPYtf`QKw)a7=?k
zaCRLB=Q%FzzmD~AIsWT@A9EbY-+N5JU+hmL_yte@{fnQ3`(F@~@cy|Qf=R;v=a>L{
zH_k<?)lc9Lp^f58I1UaKIrbOVG_ePegGXfk^o89ERTWV~m=(_}BiL(W9w#ds>{B@6
zPNLw@%GmA|qmz}THC)t5;^x^MqTm>NnfE5+*)4V!5;tF{K4O%C*%~tn@(A$UxhZ*x
zk&#i{*2qNkiLCtJ$HAGzO*1<?8&O_fM@L5<M}8idttsza5fKsIJAAx+eB9s;Zn(3x
z-76<<YdG^ckbmIF8p923&28+=Vb+XTxUXKr?Cm6O-o!5Sub*=~?aWR7Yb9&=U$Ov!
zyx4De@ABN?{TFQTs5thjsJgAWF<2Q3U-GW_*`5FG+JCKce*Ysgm>mpo!PeYR$=c4?
z*2Wfa<m_p_zfb?4@A#jvo*2VnmiE|(pIMvRN&W-ie_Z~bPszZnz@l(C7GuG`YySJS
zzxRvtV%ha?>^qmu*;ODM$xGtA{}Qz1rLG`9KO7us93|QNPn~dA#t290<f0EY7bLc7
zlv-ksamZ~$Lar<RWW6+X1<I84>EQ-M?sNYNgYLEGWLK{}rlcYbB=Re}X`9JW#z+eF
zAtji-ta+tHu0`nzxowqmFhWYEqIYbaPJ&;8U$?(@nqS3HUERLFl&v48`Al;_X;<d-
zu>!qda!rj#+&0Y|U5&b_sj2_=c)PRUb14xzGF%903$#cCGohoYS=#D6G5F_Cev9*O
z*PTBKQTI^v(Gmv?cu+=99PEd5C_x!g#daw~2-3s(Xxrj<#lw;H(g_b${EJt_N6V8E
zrmKSNgB<g=$E$mqSv?@6(u`MdGvKddDY|+)k7YV7_J)fs7!XToQCc&fV(*bk<ABw%
z9}lS}wF>RTYJ73<imATM7n}T|!KAB1^9{AOL|<93%gE2wUwx^B3vhT;<EfFG?fANU
zEOWp*PQrCBZp)D60%Ysbop(&UBn&q_r2`>vB;S3NKb+4aB%9RYXCk=I2k?0A^-#~E
zY3yKN@@ZplJVbv{=eqi*XI?E}d9U|`_w2{~)pQ-Bd!bI1VMTlIS%YV<bJRgE;1dP1
zFnfBkPsUMEbFZ7{J;KG!5#;oI7!G9&QSmCv6*ROs5u5*F*lEM_j@Mq#FuA+9sHi3H
zRYNLlqNXQBA-Lnm*RM=%nnM=>p`Ub<s;hNNtjA)Utp@Y%k2}o}4;3k8U^waG{G7iQ
z4wN#uEHYU^SQsA_;V@tKW1As@G8%Y#!aa<Ns&MCw9*~zK1-^zWGUGvK$rXPVn+yda
z6zJYI4qA^@{I;Vx4eE+`yueQ_Y#m2uQ-^Ci>2<M9@_2>W{b;APSZst0&?yVG94&iH
z$@PM<OY%5Ne18<q2OAfE%VT7l{`+vni(bs3!)YbId46HkmxOeXwGR4Gmy(Og({m25
zQzZ1yR%Fy$)`I3@6V|7`6u6L3#z(6bzYAzEK@xj|+i@SOIqAyMEuCCfi=*P4rhRQk
z-!`{S)_WJO{uBZ-uDkBl|3kCgn?#ahf6OtFOS^<ivqC$bC~iCcvFE_-u-7W|&O5IO
zpk-gULf(^IW;_18XNIR^ArF7e3n9&uN$MGhVHHG+P;tAXP$-zqC-wHGlZ5>$1<Bn^
z_10HD^lYNb!B{07WJyZFpf`gNE$ax3tMhKZCfs<ni=Lj|RO)1-f!21lZf}PW=!(0s
zS`e9{zjU#}oz!1~frqnN{DEm|31rfB*S_@?oBZL1cUH+V$H|VZS2b1m!YAzQCIYDW
z8_Uby3U3C1bzX2!j!tv(n|5AZ&1@y#*_)t<yZDZ)b&ERo2^(Ns__cdOa*T6$5jW~X
zZ1pS(yNc6`<&>L9rIR3D_i_dO-<*goe@kH#5)v9mr8;-nR7maR2e&Rr?u#sqSGyiC
zBZ0hde-M;djj+`o{)Wv4BTfuU+-io9NTJ<73JmeFt1=}+yg);b+rQ8OrMLEa7--Pq
zE-QKWnWu%ShH{V{v!^sG!E^;OVDum(B7a+8Tp@16>G+Tz+1JOikcg<cS1o}4&BY9O
zmPuhFf6#hOQ->)#JKL*Dj7ky}fA~2l9rsRMsNXgDJE_TET3PU*vR6OBAu^3J1+h#(
zFf>mdu>dW2!}e&c*d(>7HlB(X9;b6b{)CwB-lH1K>AGpctTsRHl>opi7Deeq=t=y#
zn*uUNmsYJmw)11_C?1_jzGFPu<-JI55g8n>9)f9_`bRF84orF=z{hC$hTMRVDt?z1
z8HgeNz?W9aDUxz}!+wu;X+o1>c{42WM0Urw27>h-UXBDs8nOxxy5hxzM{x$HSMFLh
zej*d*)~j-&)pH;^kiP@DVV|2ahvj42&QkBMX!!<fh^-Gm%!sVJVm(CWN~?~H_+}$T
zvig<150ncPGcyf7B(<ikp{y_2dv{mclL-L9T8};%;o?HRvpwo8HgW&@bj|HMY;x+x
z@P=dmGtE{{T>MM!@m*Le>mxK9bDE3L^g~8`z2jgSPcz){T@_FC-Tj4TV)d}E?5H2P
zH8JLVmbWdp-r?Y}5}7GPBYm}mkGzrbT0U!Z#PgU>#zer+7Uex^CC7t4eVWu~@w<u{
z;~*KmA$4+VfTAeqz{32`eXeurE%8JPrn+TFB7APRD3(|bO-~q~w0veB5KF-%Y`~0$
zuHeew8GIZxiwAILe$)y5xSSf2^7M(P#qWp9<ifyUxE{3?n{+nSG6&szokcN~NPh>$
zP_4VP)y}){Tt5~eH%p8Qc}=l6RG6U>BcNpRJLXzhb}Mzi&1m;m8JK>B-I8`beZVJj
zro8=e*NGLDSt#Q5=$|dSn8Rl;<bi7+zt#<(+iYgwRhK%obE*iy?L4#{O_uYwZfKJP
z&UBSi!}dK6UjH?YJuUtPtJ<*&``9Ix>efUz_wVavZ)Z+o&!CXDFellkBjdkz7ZnB(
zTbcA5;nLSnreXvTH|(DJOI}wN>w=y|sUd=x*jRph;{!?q)Ae2lWcE;P%X34(PJxm|
z#d}y?O!{J>3VWI;b=qmAY<h2-S7&m<;b<wtzvdjkFTwyC!P{`udOL6Jiu)hx-+86*
z<8{u?)mmO>+Lw2pdy-vlqNFEO0AT}qRqP!TQ!5)aE7T_YB_56beL$}*RJIz~A+(iS
zU(Qk8$FL53;9OziX%>Q_{R}}lsM{Jmks@1JX3D421*!I>+arrj2S6p{Wef#MDG$BM
z|E~Vi<<BjaK<i92UeRKs-bd+hi{Cs{@ttACl4}C!_!+4+0xBKGPH}m(Di<wRo?-Kq
zxAL^DN4qHg+|`j%s$HBYBobM-U!3urJx=AJ(`xZRRTV3@l}AcRiO|yGBI&|}_WT?s
z!1x%lGtshExz0l(b&?k)lCg3uCLx$Bx=mfZXk}D?4=B%dO(T};xDawKQhSKZyF%%n
zEkJGb#pcl9GGvzf{fdDv#p;B&zD1s4$So8fA5Znh@I9?vvh9Kcn`49{5oFv2#eFzU
zRl7Ks>bk#X+dwSb62c@?WpzmTJV%H604+G6!+gA2s$Y})beA779vUe`^%{M0xRu81
zeyh+0`O>sC+B9Lwqp|WAo>tVG_@m_?xh~~>q606>e~r|=Gsg=sxRc$e$P0w4C#`Tt
z{Ae+yz-9LhZ+7Rd?|AeM`$GTP87Vn}ft&@&6dl038yO>B4HX#Mf>_j!%B@W}3&?g?
z`avj@X$ofGWjG#ePDNnQ#tc5tQ0_;ITKqO6xxEzpLn8TV8>UMdiAUjx2w<gH|E#I!
zoc2LP**bEqeBlP~+gM@PUgXO>eMX&(H}OC0b5BJ|`F+%eR2|!F0;C-IO*%+dpE3<H
zB{5&OlPy2i%6~2Qn7a4R)|%t4ZdbX|B_*|3R4Vgz=n{Fi=u=eBqd^7KXt&UFV)99?
z-lU&?cQbV?nm$FdeivJ>(&&`f*EwupK!-TLsTdzy5GZJm5ww{7K&2NlVqK}ab2QUL
z3+vdj5*lI)S=Zvfv(<I@Ic`a((dlr)BDZ=rui?rz@@1apq(0^-YSeMU-FDiSeK@xD
z{j5s%dMyV1KJ}x~Q*CL~(`@ZxpH5<}ebILKsQvhFG6RUWi1D*G52@=Peb-r<&@Q!(
zA9Y=?F0h&U*<o?GHP@4?FGVfs=43)cLtmfN%R#zA$szErer<FlS_~LG*8oTPv=+bL
zlg;B3^nPvEXgw7=-682fjJBA0tF-pi%0ytY$h`MwWuf(F=^9|Gvx)E#ld!M_X;_R9
z<d7Dhn~#a}B?P^IKr8H!SU)g^?BH!hYFmGXxudj`x4FoBZY9~jiIm@45<^YeC0~!R
z06MH?W6TyycG(z@^5BR<U7Tql4jy!JG*BC<aKl-)XiD8X$jAwOxG>j+K*Q&m><08)
zvlqXqyc@$i1l}_qer(%ZobGO{Wf@e4<a*A9L0b&uM8v{shDOXw#~i|79^0|D&Ge2&
z*0@N=c&#>Pj`-4GHQ%{JwfbXE0t?8Nu7yh=qElkZM@(!F4$syXT`QXzeKxMam}lP0
zb~x1K5&16eIj_Iy<>P68-p-D7$0lmimfZpUMCTTT-6wUQLphS{e<1U%yDKzN29EKL
z{1Atr!5#8;Gw0x+M+A-#?_KI_+Y7r7=6(|KUXB0J!VnWvgmBU9mY1roUaCOlj1+%n
z<s=v-yNvGmfYQU5a<OZI05BV=TKuG`*rcjQc+4(LxI(=vObT<@HHXh|;0XdHJDkyd
zpnR_Os6W@`B652{nYVg2yU-v*I>$maceAVfAa1(r2)JmYjmdi8g|u&X_w-E9sjzFJ
zk0&r|*_yBG4^y}!&1MqtIo1vY!dymr;zZ!G3>##cHHP)fp)r@t#=hHUNxerIU=dOW
zF0hp|>`lfevdf!(7T$@HZXLwCySvdM0UrC66Ri{IJ>kO{1`Nj$>8JU56UV3yj=JU>
zt{vK@^^&-&9EL?z^m8<5F&_(6u{ObnJY`5X&0A|0stD%si&6*m9evk_+6<TbGNUv3
zN4r1@Jjt_Vor$Fc)+v?oKoXg_kALM}U2R*zFT90#$Am>vgVn%4N$px_v|mNviUsTb
zMgxgyg7x=nft?e*NF*D`?IZ6RHnj}q8}c)&oFY0FL?iXCi|=&HfSkIj!(yo?Em~>U
z{tDwNwd871uiwK$p(b-TQL^t%nd%BX{=}!ve6M~&M0Wc$_?OxvZj>-T3i3qLZcFV7
z>s*YY5T3}c0yV&GSlkYC8T0j;<FR!%iA?!ab@rPR74{Zv*~63YR@SJNDW7#3(rh@|
z{iruF(wBn0ZJ-uypDUxvkdy{*AX~ZCO?KIZwrs?A`9u=LWRjs+i(^~LGbSCk-O~ih
z9Dvc%$j#W*8YEVrw-2xUva6d5vp>2_yk<x9($OeI5N{|)aI8s+9@i;PD&yh}rzGI^
z{0VkQmU$6}?Y4(=QKq(;+vufFABlL%lCpGA6dyfyQW%Wq7YP-1+BkDR)d-v{sUzA(
zX~b-2TRL1yFiSNqOi6Is1Mkl2)Rg6&v~8TF)d!E?&2KhKq2JE?Do&kFfV${URM7D8
z@IVb4d!n1IQ&bBIb2@?HUR_<)-NUr1d)y3ozW6irJF!+X2rb!YaSQq^`@6x#J3m<L
zhRQ#^Dsp?!p5D{i6Lhz<u!Ei(G5cBJ`AXjK<k!Gga~D<vdavY^Js90ISNKYMMPjF0
zx*@SrcVd46fe=|r4U?rk6<9n>G${21vAyqAy8WF%#QfFj=aM=WF&cXL=^zX<n$iu#
zh;lSZh1zsU>|egoSeibNtQ^U;S#p_1pherHUeC*NASSv=DkIJ5{kD&>BLcZUWXgcK
z-5yC4XY-Sg&vnnzc{wwKPo$q6BN{f;?mBTi9%`GDvScUFI0CDsKd8}jT9gZ@y>GcW
z{VQ5z)9zhQO0cA8UTu!}!KC+=K4w=xn#>zbBFIzCVe9&C_r<XE3y#Ib2Fytprb9F%
zM3S(TA*X7qt>aB5u_q{zcN7-5g@r0s*T&f>pRkeU7#3eaRt%b}ya?yJ#9W99r%IU%
z<SO5y_znGdpm1lg+;OHUP;bg@QHEhFvXC2OeXSNJy`L{1NoV8YUoaYpu!@8l(bgL%
zA)kCE&Jomj+~LgMTAco=vz=<7I30e`uOmi~Gq?Qst6Jg|Vr#wr;>F>qu`#Do6~>Wb
zlXQZg=CXt;l4;e$YqFmssYBw$@i3bV7^Xzb$wKvrbxy_d_YVBqE<1~#7qoSydOk|f
zZ_dLGXr(-=+&2C7J4WS4y1PTle?8|+Mx4wrL_>>i_RY}Sb>H{Wb`*w<$CVSm^bxAO
zPdmK>NiMyNN=+N4$Vx#A@F0H8udO2nK0c5L5{oWNmxD3)92$MROdVQ&;I!4s&d<y+
zMnq<X)7SOT3cAaXXbjQ8%{Dw`{$zLDS@ESwit1MRdVqnV_0Uss;{XFFdGp<OOyb`W
zecv9}d*?;Ecv&)Er@NZ%Pt6Uh%k{QU#lMt!NoiKAuwo#_#Wi=_cs3|};3hJ&U`Gxl
z2B_k6lab62e1!251rgyAMfZgqc&A8n`$1a-Cw>^rmEr1(GE`0_U+M3PO4V2)RS#g?
zetUh6>*EsJWpCqW_j{CiBf32H3fHWoN4^!^?`E)j2eZPl^Ipp>onDS}8+J_&78n@!
z2L<r)*5_ci#xd@NN;R6baiQsxH91&qze1A5xZt7`x%<P=PVSV_=(78?RD{q*?mL!)
zdD7ui756rnIDJ8wmwD}%Y(n_w$~T!SB8_4-L6HOOI8iiqMO6+V5}1>1FOD7YwD_m!
z$)HHAiJin&8`E>=s_zjAe>2w+-5MwU6%aX4OPt_wWWN6+dVhn$$v(v)a?E{y%<D8c
z%j`z+wz_^Z9bBdUv74wuE^QIThsTJVkJal#@^{R1Enz{cZ7&bjX+g$td*WO9lvd#u
zu)4(RE0%xi`CI}~u!C4h_X@Xl*9m_uofT6r=_rfe@y;&$&fRNmoy{`ZA^HW6Qa#7t
zq=cCRb*Mg3C$}wKa2fb)kG>#&>h0DPK&{K8H@a>yH;eIJ>l9nxu|ECt*j<z%iPkQ4
z!c=mb+EH*Lhe}Ws_Uho`jltHJhpR9I%Btt$doypNk|bs^y9aND7tN&O8$vv#<M7;%
z_lOm!zWFyW6eL{6&8PuBh|e!MJrg)!^yf{{@1yPpa(4;a1-0~Mj#2uU7;}~5U%Vb<
zi<yoJ?Uitnie~IrVv|LW)w=RU13!+S^xMo13p+)Xt!obFJ1Csi%Vw_pxg~bu=x>H^
zkWc*8<-XIeYnn!SRQhgj$IA)rpVkPKRCqmpm-BvXeGPg6!P8)$kKvD`U?)8|Zqhep
z;YnlpmJI5Nns)6>3)SjMt6zTCbk{!ic1qE|pBW!|{^tSPRwML%uAqHcRcADETKy{~
z_$9_6a+RvvZ;E!}K;FbIVg5Po_73Iv#tEdHrO2y8Khw-G{<%Q;yBq67`Umg!^T)@3
zq|gW~wlr{Sml#FvB95TjZue(IPj`CZYsuSqhYAlC4ZF4ps(%l}lRjgA+Al%|l<pR3
zjzxq0+qmYNIR}vI^`wbut#|Lf`?|$^{bwzS1eLz~ZogM8zna8u--dOT_HEL&N#cQD
zktQR4mLD)RgqTx9Ikr|=7Enk!-hDQ$rLnFv0`!X?|8<2uYMx#tcL`Rt+0>B~Cp_WS
zJJJdAxv2`I`?54Iq699HT31WbzISPnLDR)`HP>VJhYH*7k~B6IigVu^BH*vK94e@j
z#1<w75+e_t7y@My=c#hOBzKfY!5A<aK?3wK><c8#mP%VChYQ?&dROuA-d-}ww7@?n
z=LG>Ehcl!6^Ahwz^)HjP(eh}OMKkAWD?vBC_6V6%!>YkQTftK3GOibSj1*}>v&VfI
zk`dI-nr&vz^!+*Ty}3)jfXVroo7(^#p*Jg^<~6BwxUg);q%OYseqYcX`rd`2hl%t?
z{p76ZBdQFU`azuw=$h88{os6R=BZyqHreIvTx%A;8%U&dcGB*Pb?7<IT|1oPMcm@8
zIe2X{vfTfJpJdK1cblK~FtHfR8LJcc1V1%zALHxnE7aQ%J4k#dy8r@x(jgSj^)#_j
z%w@+6mS{;d<^SocjE~6(cb=+t>h7L_yH?@_;Vbc}eZ<4cSB=#es=K=<axs4vtm)Q1
zJ#ds5a8p`am~x~SQIuv>^Ww6%O5zFHe$jX>(KE=PTeOvUN>9*HY<-UiBszAGN}(Ea
z!-Sy7+Pz^5{_P%0at`~Vs*#p?z=<n`PZZiwtG|XGWTwmss;`+H@^{{2*6x#o_4-p)
z>pFv!YuwR?gdw4PZV=RkyMUtSsMjcdEA<QbhzX;^<K~38&@e?{1rEl3$66YgcyrU#
zgoQ3CjGHs4-S{r{JHr!QmNV-{f9Yy8P|`wv0#t97FnP~1-N21^(}rPAd!lMsL>WHU
z>`Yz9X3E<)>LwPEgM-(XrWKfXF!vY6mr=F-FL=NG3`;Oo{<M}N6ITkG7@wQ59I03d
zH}$SHW$Utb1MQAIqC4;E(R@L1GV*s;lD87sXRdSSF04+R%nL^!B2E$di!u$^M2cXZ
zW;Ehbq~$eeuz}4M^*4X3-@=Cv>g0jGS4Muv&<*eQ_LQ38hjexwgO=y0zbu2mJi;b=
zAD8GkQTKtV{bpp82>sl?ue#e!xNBBZY6=c!!$+!Rwlxeczrqlo!Ax!k@x)}757m4_
zbmwXnw;i|8bC)e7xVntk-CrQ*61boDJf@uH@TWRuuU?3ah0~<x*NA&C{Y!GcZ-Z7X
zE9pH)N{!$z5vosUpMm^cH?0j+d{k^lq@<XujG{eH6eyPaSkUDG6*uC!h0bjwKhT*?
z9dw=QicRwD{L7JjK2GJm24>89U&}WI*FXWzynTmM;td_WU437n$vYf&Rf>n1AI<wR
zHqoc+2r9=K@py~^thn{s&#=2FZqW}kn4+yeBWa_PO;bX66(dyKS}dZq>NQCXU*I2X
zDg-?chQ>MT`SfRl1}`_zD_H!lu?)SiO4@hmTU7XmVdv)N5B<~cE0yatfBT`(>saK>
zKV%I261|vrq1qzn(M;mn!02ceEL!?v4Cm(@M;c7evvIkF=bRU+Pxq^~JKH;qQ$g%?
zlP`ZKG-}>eHJ<)sN*!?&HtP!YS%ZVha50u@l+0!L-a@c4`xD;2gN(4mg-gRDUk~5X
z(%5&_2D{BNmpgP>V)jaFxz}V=?4Im`D)sI<+U*l)Q!<9Afj$hRz4{B;<uze@zt0Sq
zgJx_N=@@3WKCWx0Cg)!EFnmd>inriwP7~q;^h3E4xkK{ikB_I-ScTx7z~^O?yKqcZ
zxnXk<@%m4fOOP$8WdQ;lqx?M2y@F%fRw2v5kZomERaHLYwyW!K_vu72mZ6bF?QS2N
zQTqYiaY~6u?dT<jlV%1))&7uSu*AGXW()Y<3Df{``>oe@lIs(N+=tiGRby>ed2(xx
zzMpI-Vy?Pxe5wJVHVm#Wc|Pm`4Vr-KcYk_!gO-O(R#jjPfn#cAWh=&~ypsDwufyzc
z!?6Jc{9fXnSMOxqiK+Qm+{)geqVzqSlcr$PjlQ<0y94d!8S(NB`u8OqurNEWg4xl5
zh3dY`OJ%q1`QPILy5%0YwFkd=@kkoox?IP@EHq2Bxuj<je|?}eMRtOrNQXG?<LSN|
zE>;k`2FKdtF=>2I0>Idj+D<27PN1;ScaZ9=N_3u&_L4f-RgycZw&|9aKkZ=9bYjrm
z@1jVBL(wC(r`q#mi&O6UVB*nX*gdwIA|H7BAl1-Oe;nJphxFW<1n%uIiY7TI(y`dC
z$nEPRv!beFcY1Dp4p}fvYWkWoM??S;rUfhaG0=Va;6UPr?%?lg0W*?CD>2Z-;&-H3
z{N|2_9lUvt0k1{rn4KAK=+f*(Yh8Qla5%Q^5#_9yQK>p%pVSW0LH=@Jw^hG~H(Qb@
zgPETZjqb&MpXQM$6uq<#G7gt{%E<@$i*$%1fv>c%s=I|h#!ZfU6VXqLp3q2nxXmL+
zoVVwFgO0W@($8fi9(zmf%z)04&HUc0u^g%=Q98E1i=XgTS$l}GqV!yDZPbxs_8Zz`
zN`irxvPET=nn-Gu+ZxYDnygCvd6=h}s~3Gpoanyya{Y(s>qm($D(Ava3ISDBy;X}p
zpVqk5j;%s_Ef^GZxqRVBnKS(z6LFX$rlqH_Y)teR1iU~eQ7tsK6H!!DWaQsT%f0UL
zqT|Dd@ij5{yvqI$+wS`peT7(TV{;XLVp(KRj584POV?ugaPu7zPm4~<@+6h}={g3T
zi|tMES&!aZny5w0f4u=;=!|e2cWypj{kFYdvoCQYX3jU&!mFv)F2eC;xx_{tzVUF8
zxmSX>4q1Xd@@4cx1)u8{-tiZzpDF22C8@)D4|gQDqr2WqwPm5q>O4-5T5}Pn7BHUs
z?xJ}Z!umC;-Jgxs8*fWLOxPPG>s5`~G!RFRlVx-5zI&)Y^mCwQPf!FDafR-U*s&PU
zlM3h}^rHxT-biBMgCi0i8f50!6(Opn*X1hO951yfDY}q@c<);BXG>H+K`7n4n{1Ox
z&*>|j^XzBzH(6Th-CzVl$BW(}2c#B(>SCLq%%{?|dmI&10oZH7o`9jtYEGNt)%MK;
zZG6%^Y};qL?YY>HolTG)tdiJGG*3={=)wAUHUDuioe1AZv!${ZP9WkI$E*$IY3b~;
z>D2B98odkek`RXf$#YoMf)!#~?~luy-cJ-wl?mO=bQeV==-oSLu&!K<q|P}h?{ZgT
zQ;nI$d~4rgm)!L2XsOb+E|;6{N=%II>#Gfuq?28M^hD_~T8)%&Z@(=mS~9y&A6<q)
zAGd=PjPqrg%~#D=M>FDJI>uMZv&3C{Hs!#DB!dC(*D|upN5b!<+%U%z`?>SF$WHNi
zs*rP+ciC&B*w{%z|8_aDBcpe>FjFI=?Rb2@ro;JB#)3_**Qx7ryp>C!8@AK0hoI=;
zl%CPQ)UM})TUmPjTC97vIKaQ8MZY)ULpx6;S0M&;Qe_n`78Ms8)0{d?xbJsZRX%1G
zn+=hX)fatopIvT1A&!LZ-W>|ft^|o{v$dLIYnaHyyYbg<VDe+)@Q2J-bhErEyOaj?
zLm~LaVT~Tr6r}3;i~eWW8f1XxPI8n**=E;7{R@srY{!2119o}@hBO>?#q*Ve{T0Zk
zuxf%A3dg8JIA~QTYXmLYX}YNXNTeWrgiC`tpns}r(4BNYIoH;EoGmNR@5qmH@%^;Q
z?Hf^So7i#v9`wBe*ZYC(xp1<}hjtF`=~TDVK3X!LC<pqlGhwm#!WpuMEd{uF@Zku8
zRPjV0_Cvda%YR4mPq@Jt)6u^+6l7(WuAF%xY$)=So`aa3{D|Yeiya-FO*B{u8~a_m
z%nm~j4#B+Ye5-&#gmm?@awh)2r~lmg_jHo5`(WX5-v79Ie(I@<Cx9M$mN0waFCu4F
z@~;nd&nBthcLe9Q^RKJtrz_-1n_W3uEW-bBRVM(~`6}1ntqgy0{|DVDK)gc)dpUN3
z^FN@1;WY(-n_>W_fB)+%9NbF4j=~?}t;GM3{@<ud0B~;*fI<F$yLx^)$O>YT?wpeK
ze}D=h-2ia6IbNJQ&i{c`9S_iemD}pJ-v6D9zZ_%-a24wROJx6klLKJAsit!%?SG;L
zA`ak+U!wev2<0gQ)>pQLjs7QE82_J0vCRK}B0aZ}|36k5I8Oe*?d4H{w1R>U*HE79
ze0DUuKax8%a73sreKpnyjxsT~fN_fG)qqs_4}^x6CQVa=*WBFtv*g%u%Qtk2(P+|J
zzT|aiX0H1BfiMjw`P5^O=zo~9m#4Ia_7Cxz*|*WvHYMUa!!lbtTN%dMBPDf`S-|J5
z5>yB~M0xw%;A#$%e4ZW<ebXoSo=yx+?3={A+i8sbfry>9r%RemuSi>%q;plSTo+;v
zk;d(eCgi#r8h#rbWZt&sv+%5o`vsqEGPMpL(J#|Q!gOKMeo8m-mMFXBovpqN45StE
zMtDdZweBeO&UJWqhPN`aYX^sYZ<2B`&caB9-B*V6jB^?)-3=vfAh>5rqvy#YC5RWt
zuc6UrB!G*zO1~Q2RMT#v&&HeMau@g3O+qj?{_ZI>tiRuAA3gA%iDLHWEh-ZleA;E&
zhk<;5CY0r77^?Yv(Zr$mKo*i(t(i^)r6v8AjI+>j`!$>c@|tuqjvD{wV@A^ZlO+qV
zF#okmMar7uJ3q&7ifWZAz}1(KgQ_&kv}s?z-d~QxfbsdGmtJa1;d^@y=Idr*^j2a<
zs6B3ig^|9d6ZP>erNhqCiO&oP2Qtw$n4LDZf(!ZDBL@n(D#RYDbmU%_2vf5)(;o!L
z`b(<;hKZOT;NZ?c0GVL?d~XVGd!QqV8WGJz!sW&Yd+54r`MIY0NO>aCqvwYLZ^j>9
z3Apdvhbb8dIb&W!bS!)u`Mcm%ugg%LbG+qv!7YpLMQ<?yv0Wkh5{I18hf~pf4&8%U
z$I)ef+OXVJIk^=&FL0@wGpy+edzTW$WL$I+Ig<p`hzcByeaMDBeKHx-ob!2mT|{4N
zM7!{Yyuu#wQf=kswbDufVf(HM5?V6pq&>Xh>l3+Yh<R2%t&&pfuzr+g+jo0TerEiJ
zTYXJvUrp6;&U9U-1^Tyo2Zqc8*>6r#G@Du`7=7g#8G+JxdS8RwW~&n^d|f0PAl(m0
ze;ycvpQd8afF!ovW9W>Os@+-05*c{x(clvhj;_A=P?x@R%S7%qGaeyjchgaI9HOD&
zLU4#ZEH@(U2c;u5@wY&<{vk?pc4~kjl2)zu{?XoI>?GYawHQIHzFy_A+>@?@-~#eF
zSbNMWa28a0l|y!zH*&y{2WZXl<{6!mi%cC+7@>y`b#KDfkX)`L^qly|SC+S^X+c;N
z$F-_r=r(;cU+mC8<LrLuHdJHi%E&xSxY6@HY8K5q%FBEd2z4{*@!P~M_+<yqoDIFo
z8`7i~Jsojy0a)uj)3Xg;D%U3C%-^(rUQ2~`=-$;#N4tElDqs4|qeLTW#!H>wJl@$L
zw&F%^7InE0*DIXREXAXC{M5MBZ@~C4#@K7r!nAHSI&5ydYl4$v|I77*j__+Kw3x++
zyK|=UqGTNUjH=aqa~5Ryc)GxB90Xqx;gwvn=`1QXYSm;VD4JSdL<Ld0n*~Yr4fMB5
zHZ+TE9}#cDOsH`oTvxlBPOE*^n5$j(A_<iBKL>SQ;f)#w^W{e71<BV&_y*Nc6b+O`
zw#di<%ZB`7&H2eqA3nN~JU-TPsO+_FJ?c~891OCdel_Bc=sOS~*1@{7QJ&H+0Fm_4
zl~!jv+*QV2GQ`x!+H`AGKJ!Fxvjcy%)&%Garli2rBbYu42hlD10Cg#wUxi3s2wh&y
zH#Idl%*k)v=n);M_0cePPlKfzdX;^0uWhl``LuMM#5(sfv8Tti$llv^BK+B`>NR9w
zC!YvBia;6qp1|(m<@gz1H>*sN-Fr4GOg+;9I5&ZNI|7?PYLK{ER0rP3Yg(peW3Qe-
z_3qM!*t!^B=3oi^Bz=v*awQ`3CWB9bjwd{QjzDFPl;epf+~l*tO2Q>v_wTR+Yrg8i
z2}D59k-6Fj+-O-GuN6G4iz>Fu?`-gskknd^U#<q6>3eD-rMX;^3tq`?+f(%*<{_>+
zk>2?pRv0v#2dF;S0&1RECm5{De8i%T=pH%QqZL$IcFyxj{9p`u!kLt^P^<=>z{|4t
zK{BO7QfSVFEGJ6#t;Q1wxqo2hlMq(4`A=IZ@HU|~odM0CUvyA@sWqvILv$T_sVqL_
zJ2v6jqTZzPd_~|DPPFK(f%>>%r=jIzru+KAo%GFMJ!%RMwNx^%;Y))(oEqA4LDt^D
z9%vta76<MPIHrhQ*1cJxj)V5g=2kFbmZyo!?Q{rS^5>+|1{t16Vl4&0Lnf`LFQfrx
zSo?mTNNz66NR217)5anb`t%EsN^f5%^BDB0KH%T(Z;{u05NlVokh8%QzE|UA`XVaz
zUE)u9U}xAX+;}lf)FniB#q8b!Y#;V;wtx(4Ml4&UGRdThS)NP4d4FJiB@f6HNdBV8
zg6B&H+|`$4My6-vX6t5Az+ZFN6qzhU){wcb&<{3U0vT$Esx(%aPNqio-L;FXm24H=
zut7ixeF*mShH@I%=Bn5}Q+nA0^pmany&?l%>s0`=!<Ok;1X<bXhY{l`Z6f^7>k@WZ
zi`g64(hQXJSd{@p-_j~&5n-tS9E@hc*eTNDwNl+F)?_;@NWJ3=qEy(6+o^=Oa7aNs
zzrEel9tFNH%qkDVZrTj3wBso)^%u%r*rUJt7fE$#)a7ik6DFO~11aU7w#isyR{E*_
zUVzac$1}5<Z{9C#OAE+3D^0RlzRu0da-o9&#;tgwcwu|4^}Zm%JXZoUHVE3ZOv%V!
zK)%Fg^~uops4LmpML|k$6zyj8%jUxMqEpcUid1;5*Y4zNvX#fAa<yXd)DcZ3#^ndD
zDdw?SYJr^>ZDRS|jkz1YCDIV<US3up9l*hR3@KXc7HwqsX&-<o)Z%3?!BVY-5x6G_
z>aH(HPQzevk<3UCNZ%;I=^!g0jF=;+GX#CIt+I9H3$B3B(bwOf7V+K<?9!yh({ePU
zpC)l(4?+qmUG}v)Au9dS!x`3?NMin=?lNw#i*d&z)(9nXAc)i+MsDaAZlFUeTg<!V
z1UK}z%CaUZB=Z_3J?e?}>wM0zBLJQ2PsqDk11xu03eMz#eyT`;H-8C>S&qQ1+z$XV
zt#5D@$O_i+!iLf%Obe+xuaGW=Kl!aXhClKG%P>E(Zc&z#$zU5@4HdVDQQ^;LNlrnF
zFRho|r7wM)VV&eR2hxBPxSj=pic*>f7)QC$pmjl=Os>RLMUM%+Q+(7JK52mUp#aRo
zxQGL_o3xmp+-V?PN?!D(@UkPsLdpqcDxJeZ(hOM#9C-mO<HdXXUII~3(b=Ur^@|06
zO4IZW;;&)#?W&iJZnAwKQbdW!*AlQQ{G;}hu#bu^ARb)?Uy<inbhHp;$})10qUn7Q
z3-#46Ww6pGJVSwkn{w{~utsGeuFqChBY3_`{VAIN0k8!yT{d$mvL0_w3B2^3wn1h!
zwcCL0g*`tTga7f~Rvm{`g4=jQZ!FEitpip6szw^r4B+Pnwzbe<OpCSDbg=eSe00l3
z2k60_G|eV-D5K9?Lg1Q|L!H3Jbl?E_xqeo(;(?_05=*TDysJ)>6BLNjB6w4xtU3$f
z6plI*syaYpKLCv_^NRrw)rIR(KfL7i4XA6%!+fwm|0*ZI?Zw?a^@6%4D_Z<k6mpO|
zuM=zVkAkGj)CdPe<{Ie-94Q74sH~ZYOOu)+-cH}g0djng3b%<5Q@dts^<Da4pBC*N
z8^hZZh=bQk3LUsLCCW~n$#M;Pm2$AiUBe*b<IyCyix<h6Ir&{ZyCI`x@pgghG!2kx
z>J(+49|!3zJZP#s*!=b$71t*n@|Y9yvvy)*eZ)^Cln_GtE&3cALFMZg<&zY>erLzx
zPnemRL9+^h$AgA5ljdmrv{w^(+q^s0D2V=`t=Pc*?X7VfmQnHN{7BXKpc8wW6n**;
zF_Av+kKO0Y2lV}6S*McxZ6yM{4+O)*BY0x{O1gjLO6O%0Po4vB^A*ckXUo~-9eqG!
zeLs+MrV$j+OXpOu$KReEe(JTcE_`w<B&eTC3%0j2ouk6{MCtb5ayThO`d@@Tpq_>U
zZDdS5r{}Py-4x2A%6M{2jHwBW)awDTO@PV)<{Cb?R^&eK4J=(#1afroe;4<!-pRi=
z21s*3vtZMO9J}H3ypsR-!rhlFX_NP^-2Dgtu{i&v>Dg54B;ku~^8K%tfmb86`ydJ%
z82%GrXd|{4R+Z5B@!yyG=T7O@pbw#}@;HR_KLEysOkV?7>8ZcQ+SvbEnDH)Npsx}k
z;eTkV_>tao8T{N+Szfvy7=^6i%7y8Gy=8#vn*!)f&i_RLs01$TTxX1;^T-$I6LvC3
zy#A$Oi*A_MLB0g{f^Hb`)0dul(YL+f_s-BT#MVdJb}V#Qtdbt$u?LDWb#G+&NEq#V
z8{2f%7r3-9-%fkiz!>6&E01Qa4aibrs^&vpWu-pD^;;frkeBc&B(Re3yoSfVE|IM)
zxr|z#o2|}hgXvY}x0_l@GiKw7Z!l-G>U+B_pdvEw+uj4a<gt?T1zt6JFq!Gq*%=|(
zJ%bH2Uy*TFR%Z0P0J>iULq;k+sf$IM^{FbOey&PCdA-*;_wGo8{0jGjEcsb4@Xc+T
zwng0(bV;#QSgd|czj9Z|*vA$o*Qx<+Q(UhiFyf2a)0d9eQqNV1ND{exhV3SB3W2;2
z_|7!w(JL>#F_+dquJm*CbNRyaE%8K{F6{vV#EikD_a{znRqldy&&|#gFYlWk%oyvp
z%~2RLH$Uk|o+6lcH?p27*6DA)$?c%u#@tLC-Jgk00r{u8sJb!88L_$&;s9K}Ifftv
zfn~ba13ZT7&T#_50?w6VrB0DqPNp9^bhkrQ=!*1Bj>%-$l@sSB3*H{f!=x||x|$Mf
zR|%!Ig>?5%b_<r{`)%jntGAbV7#aubRk|it7u&~IZ6SYb?F-)stL3if8d=l-BqoU%
z<zjx61FU53($?uaymA-g(I%-tX<oZF^OIh^@M^7(t;5+C@fo7ox4xu55No8@|2nfN
zaxN5*c!f=1-yj00e;_!aH%7&MEYEn3=G;zu>Cdo1gP}pu$}MzP@AgX>1wLZ9%vaE*
zxXvGMJ2N>(5`H64qRMLRr{|5+xlgac_<8BSVkXpeS+nWIMuYj+-!@Zyin|7ByPC9_
zt0G;a_X4QmPx%$EGkfv`ac$P|j9;G89$xvUd!OBp0yiC83|cLh7FSxbq>6T4iL6gj
zCle!R)Eq8E&%QZnUzt2k6k3xbWM6ep4p`*ZG3hw+D{?GZIC(g_IVVoa07`OT?@+~+
zCkZ&9wmICiI+MT-NCj2YUxsO%o%KLY79Ivpd6*U@(h8N-#FwX7Zgn^C#mev8;Gwvv
z7E*4ZZ|8XHpk^!nne8gPHk=As#X(yFYY`Ag5LlKy+>m70s`&xOO{m&evK_FfcfL?f
z??&{tdBHzM4sw%dqb|7R>B<W~>92axB|$>GTB{MhG(}XbBQ`4=`=AnvnaK_PSn+W~
z!E3i{hDi1-7y&MjVQW6=*HmX1J|zO$(!R-@?sUOlm?!cOMdgI5u)$1U#79jv{jBr(
z8ZjWu70Ubj2*Ec(egB)r!=>Htox6^6wH~)MPf;{WD=RxSU*Y%;Ki227O|?IX)mSzg
z(1PU5?8HC0QIeJDJ?F3`nElLJ=LS^XnA3HA%;S7=aqDw!9FvB%*yGM>#K#lkdR?#F
zifTTuK#}LuLA=ec2C;9ffbdHNbX!+(@UP&cCl{-O!u3?EtE~39W9GOkiGsNiIwdQE
z(>ZPV4Z)P|*A>DyX4rE=N=s@Y><6TH%QVoN^HSAaJGbhZ@4a0Be2ZFt;r3Bl5}5tg
z(#Fe|csp(3znY`Y?EDD}NCM<Os6IbCdq{cDc&ByT(f;aq7Hj=ukE2%>u0O<=#UloY
z$7m}}=lkpj;MJ(Gclx@*yaUbAtHRZ8%9GoVYc76-NZMeDpp!yDuQCItephQnI~*v8
z+}nKqGot*kb!XW|tLWJoi`OgehFQ=0uqt=d^73rUD}@$?<^<$ie`RKAX(G>ig@KEb
zqvcz(e(Z%-S1euMt|}K)TUC}?y=Z>~6R9F~belSOsgQIX_r}5F0Lo)Z)<-J29Zwg?
zR%k}`qQ$7tg6sLod&y-K)o+a6?zG7U^1`MMNzcNBR|xR0q|hH{#t3~6Q5$!CW9HwY
zc?G@CGg4r6eE^Xauq38MY3;;4(j0B|qa>^IFdF0iTWtLEeA9eK`m1VNVe~KhL@8q6
z53+zi_~n<6VDZwa<{PSs16`y?fb?n(y<c=1xhmlY1#@9m=PMauJ3Fc${+_Lnn|=Ec
zmDx$**iI;Vw7#5yh~)PR>I{lYJd_$7F6q~{dSkW~*#JaG6_jWX@?l`!*SYrsxj?hV
z=(d9_HsmRm14_a%I4zQA9KG+=uqUo^VP|oDwbWz8WvI+Or8L3fRVqxah9p2-&tr3?
zxMw(@8MWr^dZn{MqAFh<&H(H6`^{N3w*j`KewZ<(_reBTPI-TKX2Nbx3SZy&^T0sb
z8GQmhKjh#7Q6UUZ%zb~8p#}aUk;JmS#CD93-}uCH-$?S!+XQmAqHViz;MH16eyCh8
z(?_nN1DRcdNdudS+l6bFcpRLA#cFsi8sOu}fy6))LRl$Kk)+8ML*aTh7-GbF%D=h5
zA;E>c>m2J7Gw$PRoI<$)eH$72Ww1@I+)ecXsm0Nw*dLqgc@h)64cdF5X|a(@IWHSB
z4b=!O5r(~6brlHKwS$wlg#ps}VD@s2vk6T=uo!VmvGK}ZaR6ViC37C^8EZWy=?cEq
z)Q>FH{MvVI|3G;|XDj67*h@dMDSko<M9^fCB_~7pfV`Ny%ZBE}F=qCsLM`*iaH+ko
zmIA5Ti0c5fadkC&YokD+a%I69L<?cPaWW3Mq?&NvO?rqeVfYB=Ot7Y_u`NL<73;u4
zMKv~^o^GciNj#@I2?WkV`t!*4=mq2GV~6$R#Xy88?_?Nf!X>)d*>3JeG|5EeasAfz
zOl~CBk-ID~G1J7*#>_3gQfPbDjFxqAKuxWBEWE2UT16I*yOew=n`w8rT*5>u2i!Hs
z!xf5`Nx(Krf*jUg0H0J^Upl#$YzJFh8>z6!@57=q5<wn$F69=`58<yQ(mrzuq&5Us
zXly-KhAh+_pXt5e*BtNI4k3mqO#D3U%&tWzsS_hb9N{1GPxn8gGW0n2-FA4&mu4{$
zweBmqTi(pPgaRj4Z^l@#o+5_>Z)7HjmsErkywTTk>K}X^w~}d+DoL{`x1JBH#5j26
zz)Q@ROi^HcG%n=n<ZQLKqxaac%MRF|IceCw&>|)_{#KL!Y|)0P;@w;Vp(T#msp|bL
zYib86oy8T$PIvuK;t}Dp*n*m7dVQpK9+}rCypBUEGQY7)M2-EN{LYJC$LotU=Z~nY
zH;@fP*1T<z^xFI~ImMbS@m=*}rDw8%_tuG>W8?vxu?KPFIWJmx?!4`Wtb4CojTrCs
z_*CzHBgz&Pp6F5dg{aJJqV>?);LaWAL6v4l@v4Z5ZG@2S-)k4HzJ+nxPPAR!t|bpF
zd;~(pgXS4HWD88gqSSr5{K!8QYMPW<R~iRNBq<>N=tbN7%Bto_IS$<GiCT(SDv2sx
z<1x$akPCJfev+#aw^`o2@OMj*B~Y8f%(Lk_$bpjTb}A*QM;}cO&#9wjcjic{D|WYX
zO(GMu4vQ8oq=Rw!D%Qt)GBQi6iml>1^o8|>j^#-l4qpcmg8(se$5K8i3Ai%?-$ADD
zz;8cJ8zjLxOvY8PNH3a*5pyOVB}yj?@TyBLb{G4v2%c%BVDQY+EtKB^V4EKW9Oq1M
z%D}p`o`e|TpSfJ{0dmVGDf~;mEb~;KDye{JZe=8>pR@E^g7oM@S=r2w1PJ)Y3x6Nz
zVXo`-=+!{ZUi}BczvbnO#=xZ0vg%rS&Lwni(P!3U*Q5es!(H~^MKD9Qs?Fr_;0yli
zPX4(I+i_f~*2JJp`Lc}7*tV4?^qx}!Y9b=8*91r_0%HNuLFw8#nxV_`6=#~*!%n&{
z!n1bJqj_@{ypaa@5{>7`b)cL@=r30Df<nP4lM+-T{l8#p^D}F5zG9Ma79~)Qf)sug
z?``7DbWoQAVhj7;=NXzTs$iMa2<TGlEmB8bY+|KykKwQR8+(;?y?xuPX?*3%zwS@f
z^1SGgT5-@S{=X;&EBprR7}BZ0zASlezyHpwek`xfo(zA48vN&f0sO-ZEJ6mQ(uOiN
zB|p@r?#nww-7A+#syHuqp9%{O1<TLqJ5ZI}JkLe`!T$wg_m50XMk?@DgqJ;NKjL`V
zp4Y***w@NxV#}IpZHUav2n2HiC`dp}u5n(I+kFqQ&>%Rk$@|<sTZ0hx@w|p@Rb<VS
zPRf&3hASIn>;;wlAKMTDqwi=mn|#45?LA=kF1B75eb!Q(i8nO?JJ`2+Q=<spDrJ#5
zU(P5s^eN+`7fI^-l3wu+MXUc;3w`-rhHHc7V8--+lm5E0`!jfA#l@wqK_$pKp)<xl
zffVul5&Z?)eL<kz$Ibpv7a{xF)n+*yT(NV$=QBsm-sC=KLp<fhE%46_BFN6WBzy|2
z&mq%P*Z(-aw}Y+R_~ZoUQ-6_u0v`573TiE|aI>7jeVD7#<H47D5f@INvJ`Pw^Gmp<
zHfV?y{}Q=@w}kERCKRa2sDZcO=O({iyjW22s`u!xsBVEBud*nbY<MUodDKl8<Ip_{
zFvJ>UHh7pDATd3g+5@}@C%4K8G*uG-bZH+)#xaN;4N4=0EcK{fm=XZh<&b04iF%KU
zc`}{V=tw?*9nZ1)Mc*Tnmc}CUwTSc+cC7II>M>~e<pXg3*9<YKL@Lz$tRaoRwS`*u
zkXC>DV85Vd^vU+Vpbtg^`d~Vs50?1)z4pTf?#yDy%plPC9O*J1!U4hg`GD|@my9Q3
zS1_HumNH=TT$0^+AMassH0<UhTCWBLI-XOP9U?ln-J^)VTzd_;_FpYd-q9z3Yvc$~
z&|xlws4Pd^RgUaKY5^j%l|5&e4H7{I|F|uj&R0NC2s>THzxo529p2g5`B%Oie_OCx
z&1Sk`jUg@AnPBLF29ql2wHiFh4H)W4tr-T?{^0K1B+Ubj`}9-eI3!(yb9b~?7K$Q!
zpt@QpFA&?FWc2ey(rft~$dm<bBA%n>WQEXwI5kj-1kDOy(*|heuJo`AM^H}2y)=I{
zt-z>@_3O{Z&D&RJKZhCr3?cNg<kc;{ciy@q1+s878%wrVc_IV4rdK&fUjr(iAReR=
zdCd}mUT&D%<0oGPKxkCr#C9sn0kGfPVoz?UPJ%)21&6*{=}7Ar6#vyz57_XQ{AsUT
zvpz6g*m#DRe<FUfY@ON}Vq65E^ACVU^s!n)dce$xUw1CPX>>VG$M8Y`q0#B?+;&=Z
zio{<!WB=9mpAwNfO=N#1k{^ihqp%i9(_|x*qVDnZe2K@l*Y<@~<xSX40P7a(eNoao
zK=0DajTPEbh(H^sC5>H==HTZZ{RnoH2fEHm8PY$(R(Cs<8D{d_7AzvR(Iwk&;Cc{9
zQBJpL1A~XtG>IH4lEp_>7%(+#Ht~wN4C5hQ`d%B0e&kiQ$3WcV${z%n41$2T;cb55
zk-RodXw#NW!yppbBDddsFRS%pouTFwPR*@(LZ^~*RS7nFyrQ`Toyw(4%FRv^>s9Ef
zssy+m>>jTb3ri}PLO`=QPwt~amyRzcvaDgmZ?*ecV>`pQq{58SWnA@yM0njLqY~2X
z)32<i4b4|Uq2I9MiSQeEX`mA4lH=B$_(K#C*x4=tTdvH3<IXUWf{d3|F}|*Yq$@oA
zW4d$=6_>l5kky~NdhZ3GW+{n6I}$ThcH#QrD8*{D&TLiD*A2mi;s$539;PIFZzLHy
z38+0Q+k3!*Ta49wY$pNVqvYK~_FgZfT`L;dPR5)R3C}-UNQ)?a-iR43M@MdtFI7R8
zDDISNvbm?p1<imd0(DfX#HQKI_=APHAQPwhmkwRAM>#0bw);{8r*?=3M<8!V&+TZ<
zZyCIAIOk`s3E>bG6`P%t<5jd+jI60s%eu~+G~nYOAEl?UJo)*_1E1|Q;rM~txG0Bo
zvK7j1(fg<i+01}#q}j?UP+!=IhAbE{AKZE-6c`)7So~_;d?C%-vN(!Ozx&1)!A_L%
zLK>BTs40G+=amN!-+`glty^pbFPVTQUVA6VHEgful4!3tTvqzi`5Mjdq(qcQMXiT=
zt-7KQsJ!gL`O7<aY{tnJTFsB+DG&1O6@FCB>dbEAgy8rKa=Pq)NkF|5wvJ4Y0DB{Q
z?F1MHV$;Of4r8^b%;Et*rOd{@+JCxL|LJTKz@f;mL^UhT0cXmc2dRB})bV~A3zpr7
z)ONFs_13twz;=0<Y&FfXCPJy^a58+DMz7B+!n=BplXY=_=a`11lt1F8S*IhI9BDjH
zEwaTEj`Q#ipubL6o<b7i_G*eh04IyiRrNIzKD^zDTD?T4yMWtAwgahz?1*RDdm#yd
za6cmH*$9|vFjql`Kg{F#X6mz%{$g9?A=Nb0<!(ygr_1d@GW^kR!Duo}MfZtuDA4q<
zhnzJ<%g$=BS3S3Qr=c{#O`30*U(=a02DO1HLl)Sn7t7jRs-RzvA=+<G;C8)0o<nuq
z)rs&E!NI>hpR<@mzB>4Q)_}Bn#4>;TCiczrnc^!@;S+P+ujl9(0(2s<=xEKQJySrL
zH|UR2(P=HA@+=c(<``d4S}sTAXPLFA1p>uELTluG`X7V0PBk_@hHp`%Y?@a^TxWgk
zvHa=lQ^2{jwoM6b0{I<UrhN~z-qJvdKBK=&>;w@}!qlxg+-v-rJ0+u&gV}AfGB9?N
z<$$)q=lsv(i8L{*KCs>Xe+|L~f&Ci}cl{{ZS*{`k7W`nFB7*X`aw2BE>hY~8<}X?6
z!@xUo={_<14j81NoO57@;<!NnyIb!>li6KnCVR)sSCQ~l#tVRP(@#Yf%1bJvhRNc#
zYs|XxILi>sc4QSxF0X!_xaY^nN(Y0b29fXA?AkIP#)tig@F}{XpzsS-Ykw-t;8Eri
zbkK`Mi^BVHAmWlrZh)^;;dD<{gfXj+VP$6Y0@u?5uRju3)+4Uv<!h!FylzZj16<gP
zDiKT873;iBJxcg{*9ig#1y_u=Lu!>Mp37q?)228cIL`8)sN9!q>a|<yFDvgea4OzW
zn%uq3{#@ZVip~>K2nO~gXxae;YAOkSVm@Z@rXg{@xvWV_RiK*hyMbx9hI#S)Y%dYD
zl^M&ITL$plfN0hS-@~x6JCl_{y(047pQkAeDjGkU|ICnefUbzSUi9bbVM4R!Aqosy
zHYx+h!mmUu3{zX+WNmUIuT&`KbEjIux>jYVpTjJ1r*(hXm~b2oy?M)GZQjEz<nBZs
zS{qq@dWICqMfdNyNJ2L7E=-p{7#hZa9VREg%$f^=*t*NFf2ZCts#~q?zZ$&oqGZ3V
zF-4XOx&oY1dHc_FR{H8212Xx^6^onK1sR@kQXjwVRFM}6`Tv;vs<^6_H&EDaB@{$L
zq(d4B>1IoJ2#7RFx02GKBGR1_(jg#HBB>J6of0D5-F0UJo^urc_vOCapDzpdS~FkI
zS2KfJ2(_K}=WVMHcH94)D5WH<6ji%$2|-(%O*O%73q`HOw7}dd&2Z5xJQ%I6ZEJKk
z)j4&;DSw0KizCr;1^N^1a^C#MUg&JE7Z5e;2%}t6P-d&uj!JV*ytl@zci$4@`yGGp
z=YcIix`~%VWbe6uufI~NI=v|PhQZx!uHDn+V<k(aQ^~hgvfJ<y@O@QP+<{jS`Y5xR
z)p<*c5%MYM^GiB=U!S~Sxm=`bIP%@hAWKQoDCZ5k6KMN*ML3|q9o1OZe`6LbgN0XL
zuMrfH<qhe{Z9a1v?yO%Jj0f^yAH`IblThO*{)SqqK{n#N&nc<dv($2o+)uS4!Ew&c
z2-H*4tfU1&#WKp)Y;nkVfD*!?tPE>ct7EI#vfdtRcifYf)4))-ue!p!!o<sDG2n-}
z8OU*j{&pL}JEU&#Z%dR`+kzx#T0;=GwxQdzbblhYz7hSy^3DMF?3L{%&5Z$e>tp^I
zX*1_lZU@VJnV{(emeiAFmXBl0UBf*iyIzHNFVXw9D03Q}@W)4S472kx5k1HaD>LQW
zCuX0m(s-lVo~ff-osA0O<@qgogWgXO$?m!aSBL0r>Wb(^PGGk|cGVJKU1lM3AR^w3
z%NzUl)kgf=ww$1iuB!w`ekLg!UG){YZS<xc6M@#+^`ioq>?v248@Rh`gl;#!#_jMs
zQJZNA{hm-Q%lK)9Ty3}S%R7_41v%Hs0w>Aoje2jfPO}cnfRWU<Rf_od_^EAsK??ky
z4`x19yMFVLKze8Oovb`pom@H|NnrA7Wju=(r*SmbZNK%U$USo{=khzxY{=5I73fBZ
zc;fRq?Hj5pQ)KPArn38kEtWcC%^R-Wx-G~D+I(D3=GLg_5DW0ec4zRr=qIG2_wsHZ
z`^Na)W74b#<Odsa8O;jww)19R%G|{&2X&MuGoqQ5AgnKDx^!Q+8d#={=4X{*FAt-r
zKl9BmN%5$+kLhN(Lroj{F=n=6H`M1UlA-*0#O|>0_`!^1;N8(TNlzj}p=|>v*Y*Z#
zgBq8Zh8d$;t7Nn_w;uo4SoP)LnC&h`VaJ}W7N30Xz!hMd(<e$8*fn{Le=bKgeor`~
z`$ze@#msRD(Pu=dz3RG*VvJ~JeJ@R}DWMnvlTY0b#}xc1ln<l(*p9QXD_L+(DwP)z
zG~yqvv%nhGaL@yCzo(UVr<A1DK+72zjtrE>?!CNiyZx}h!mr5CF<U;BsZgmAp4XOX
zz`a2O4_XFaum}8D5@_4YbvThQnO*i5$#Pz3t%!fj<My`PhIll6W&-(9<M##qO4fTE
zZ=K*Swoz*c#y85O07xR&53HE}^Nz_DwkvsK*;?c;YEjr0qIZzrcH_xcKeBs4<gom6
zI08Fujj7NfEbI#C?)?7XX*+15G{8S-<C~R<;j^~J3DS%cR_ooJ!Gv?^*5)Xo>vmE}
z8dGz2>kYa0Z7&1;-K%ZnpNtbYX~d83(vNnndA&%zn)+6iYR&+*4>wLG#*Si(!<aMM
zX%_i{O!RNcEK#pmw0z%THhQKzPQ2pqrtgabm(@**+%5DstY%se!ZAZci#r|t>?EJW
z;4K<0+FTlj)f^fLYRCTOW)p~{uW6iT>=z_H<7p<(G=F>aoj1fGBGbf&__lK-O-E%x
zIU(C7X$*^#F9@te(Mg_uWJ@!)Z1Xw6m+HwK@1KpxB6FjC)khpcb1yL!2kh>^iejx>
z*jH&wi4nsI95gw^GSWtW&4mjaM;^Q_=UKGXRBIxxi7WzwM?6v5M+YMORy<f5(&65M
ztqIE+2RnEVxe677bhxOtebfNcT9QOw!4MHG__*vh3u5}OPa<`7c9OwcCLGPC8<Xw)
z^e0LJKA4oVlISi>f7=Me;i4cB$9`tpAmv!#D*U<9*<pntQDC$A@{WzeKu0GXXQ^16
zzUh#&Tx1B^KFtlGVyJCZD=4L;rj?2A+pgSB*$)bR`n<l;r|NcU)u<q%RPp_A|A~j+
zcV}imyF`9Shk?a2Kg<$~zz_X-t|d3`h9zw`b?lZl=Xpz;tN>c@zY-&5_4N$7cI6Nw
zIf2uU`?_g~-3d*AyJC<PLfV|<<Qo$wlu)<t(4wdJ2naSsGjnT76HkgOcGp`kV-=|I
zOg3a_k}-^+j@?ZUIhqP+n4GS5FV(I1^tCkb*qiXK@#9q2K@?9ZR1x#1S^AjSxSXKT
ztdMbA!l8sQVv1-madJM$On)qdWvS!#Vca?+lj#_R`}Z45_M`G7yC!p5`R#%f%F>`D
zc-jl(3wnXnD%9AkpB|O$wRJnibNiyc5cVb_f921YRij-l;FfKXJDa0mY-%3Kgnd^k
zS;55x6clX?AKl)Dr<4vMDNb_}d8n_5;+L!sx?W9fq-5ZX4h~N2_>uS*B`&j>mKvM*
z5R&ndD<s3RL0^X0X44B%)6%NLPCtXab?(bp9TgfnF^)|wUI%5onrlrK>!mYpb9vLQ
z)$`$r-)g1>9Ctt)Er?`ufi{Mzth-lkOnfkx9!IkD$Kz2nl&hk#{wcV&o3`H5^$K-a
zFm(nY#?f?h<LPJQ!Ltn#p3#@7wnliZ{i9lra^LVQu6p%9FH{wvcURvwPJM>NwiU_m
zED|ks`@Z?&3z#Ehu5!GLkF$!Xu*PS^Tg3P2XgcTQ-d4Wokg7u$@f(^)rQXYz>Gx^Y
z-h(6-JUiEmajTPc$Z^BUN`N-b9-CM#-=yzoS!+!{byA$)E%n;~%4r796BU`T$Ld`X
zn^>I2aX>EE=KqQ*Tt%aQN~TfIY`SSK$X)(T%+&3dDM<36pLk|a)S#es7?jK)sGbx)
zGK&PRa{l>(2ZCL1gY=j%EY;bhkBcqcJS#_!o_X2u-aX$6q67u<#<}=R+?Gu^Jn3NW
zSW&2FLj1L#>sbmg^93wrW7CPK6_=f_Y*{7dN&C#ydX!a2KSyOu*|fRE7@2(4mha*B
zFxAF_>u$1r#bSv{$0^Q4I9nZyuV8hT!9E+VyGTCdPkNFh744fBH-2OrO=)JVTQqNQ
zZ6Bx}O1HVrXMcN2%>V4<+rbBLE+m{j#W%T{@MJOAHMv)UtXnI1*O&7^%%pf}rZw~a
z;%PEdLE5u@g~)YOLw07UuXHM|U582Uc!jm=$pTX9-gegd@xh5!p7YX4D#I59Y|i|n
zIQ7Y|qHKJh#wLh7r9i@5l~(O1gOslMN~M0az-@B(nf?Bir*z|ZG1Ls8r)t^NYT3J=
zwUVWqcrVi2WUP4PJ6XdQlds8wA{64-=I|roKud-xq<h<?+BSdX=H4?MN5k|t>)&3k
z@ANWB9JIBuy1MtM^)Kx^_9Qj%o3!tUj>I3G6Evpgt}uGAFp_`%{#rYMbL^)1qW0E=
zH4Kz@QujSc$`l5)2|U{aV(G@7Er0rk<ZgHb;cj)Tb&B865!R|?-4V(t!tErOAU1Yc
z8MmITaUD@P+pLKpQ2|@AEN>Lw=DBaF&BAM~zT&ol(y3Z$Gy2Y<Esp1<nD}IjpFNRS
zP)-B&S&mrOt40OMRgJ2B-<|T!npE=$^9&iu*e$`zBBl)nC>=%3w`$bSm=<dg9YP!5
z&4s?4StipIow$u>+xPL0H+6CS1yg4A*3UOGnKC^2yc@*Z`m7GgVzqn2kQU9|iI1Q0
zA2G8{YEZ3rEuw4e-I&ZD-LV^F`1xEcJCp|9%LCMTNd%wQA{W^%&_>Dd<z&xszaP8B
zZPSCI!cT>C)|W$y?s;?&5LqY|e@k3BWTInY?kU(D08b}JQ#{!_p7}O@X(#7dXm#aS
zhCZE=p7L<aC2S_33~PoiDP9oPZEh7R)w!F)>HA`3qjM3R8i{8|<snDYJgM`XX(Apu
zP^Fx6BIGAN2e=y=i~p%nOI(W%>%c$zVOKjIzpNYc+@f!td@X45g5`*FJGpS$dtRA&
zx>zbxCE;zmg6ljyj%>I5>iK>Unw8;MZ3R&edWB;rL<7BAqDVL=^xj1O#O&HXQ+HIC
zmGU_q_FDHOy)K|W5sat3o5wq8R?r~*0=X7!t<up9t;LF~Sp^+4{Ng%Pu5?^6yQSMl
zFI)!k3?$C7^EI}fDM%|!oW%RBEnoBLLU3I(BkS`U$j&+Z0XCMdz5XNoB=YLcQ7T*g
z6QqHf^ik`E8&Thau5*dc&r8L;?$?*?vJ3_F7pjN{zFpb3*NOR;=>`iMJRaKQ_O2O(
z2{1)1oxFTFLCFHd9>~5a?UQ;Ry(#&&I`JUy^oL<@L4b@ecuqG0D1Ll-tJ}wunW@37
z>Tnb1iu}|&b9-y_dV=H|g3nUkl=O#C)_sn`$V>+__V!Fa6h)D-rowi&pSNSN3ljF-
z*UpPa;@q(l!#<X%DjuV@S^8psHm^Spm)*el`XowqFp8^KeJE0Z_(b=!b14|0Vt%_q
zQ+5zd(l{KJ7d7Ech|TS+O86x24*%AJvi%=;UHMs*>pKHCJk?Qw{!6<CYANWxXWbba
z3*0Lh=Gc3TH)0m#bzt=Ut+OlVUiOCZj$_7QBsG)4rN^huY#!_oC$bIy?x)*WGhalk
zMCr~FCPDS$=X@|k<nNDvAR^w+Subydt{LZ!5jmavp-@=ESF9wPiP^RG?z*B8*H%2J
zJ=QTDifOw!OMVvVk*;KYb70Qxypok1;B&rDw2QQ()sd^AKmKYM)6xc6naSFv_1u~K
zD7)M^RKv<@R;O|CwxU~!#Eunk+wsKxbPM^Jbzv6v2yr(I$I7yWZc5gWJjF-YN~Vx9
zp6e5?n&TUI?p;lzzIeLfPB+ej<A>|h7Fz3BkF}5w>A>)_9g6;ZOnpjfKPXQc>wQaG
zbVmq;3Xsd_aaPE*1SCGblWtWaqyXz;^+*?9^Sg2rU-Ha2{;IzLs63xRlLHB|u<DQN
zZp+>21?8>$p`V1OHNpS9b++Kq!A&!zG5W<lfsI%`d^0*kw@*S<ol<Fh!DNcz1JsHT
zJLQkB>8@k`<pX$EUzve$Qxmq&kh9YCqutYnkzbW3Q11E+QOqa8+cA1Vmccg%id%<B
zu<f%_;u%MOLAMA-Y9IYTX>?|8&J^pkj->!gV*NSc<~U@9C?OyRZ{m2(fRFk29z;h_
zKZ}@YC^aLk;k(KXn+g7HG><e${Edyeuhh4N3N(Jg+Z8oKf|EW%ljVl+``3KnM=$>l
z6oy1BnC>)b{x3@BPbyeGJWpP5pJYFvAfzz_%{q^-Q1V<D06tzQIj}MJrMztagVZTz
z9<bia$%0Fz^O6%D$hGjd?)Zz`mqqkeS5=DBBRhNN--$gM0d_H(PO0Zc??00@Vg4|w
zHdtFTxCF3bO$wHHYyyc_G+XUTp3(S?1gE3Hegcm{+T}(F>_0=Cp`ICzAb*e>erJse
z-iVMI4xRghB4>Y+{!fIN#Yy+O-4<FJv1vtX;QLFjKNn?%&d+B)X{DjP4=P=MfKv<?
z)jrCaHF_!xyHRgnN)Mku!~>HFV{0hnDa~spDa>eL02Lvqe*Y4i|1zw`7H~m^>0Z~L
zMP&Hlxwc}5hVjgoRYd6QrK15;QRp#3FUm6j4yFmHTt_L%r-GGKnr7NVi2R#ayw~=~
zI8xWC&1xqNaL+nH8MumJ*Y&{p@;AIcF+)z(0>BoXK)wn7`4jC;AUmmn4M*v_s*mma
zOb%Jg4<$}}NH5Tb8?dTb@+;CGWCLZfa@b^udx>zcpc#0ju*7(&_11OO(o*xri;(>9
z#@#C@w)SGu=JCwfl(E>(l)oz7uVqQ+Cx-NRNpD<`LIem3*yYUh=(3RYe~Ev}5U^b*
zWae<fq`H?LI}keukh#Db^CCEKJ!ph?DRUd#le#!a6C_0Z`0k8OgtYh9y7To}iQSV2
zs6}h+r3(Og48qky%PmzP2v&>4G4<Lr=#MeYaeemROC)TW9WZ?!J?z{yvKkC!y&(F)
zh=#)(W!Fg%2F3r7FVa?s;tIYVYBt-6R7)FgfV*K7N!Fh)oqj`_0k8&p5=pZlc6^U$
zvqXi@S`z*NX#$$uzSr>1y&i`Vr44jdHC+F!?wJ{6R(jLJ{{n8XdAOz?$%DHu{u$ux
zsf!-N?gz5XaoP^&W2ZJCL6uO+3vzZUG~B=>G$VdB{Bs0QpCn!XCU`*m?QI&Mpql!7
z4kJI>2NsN4>lcmdQ?NeaW>7u70HKE>e8CFUpuQ&hnyOA)5-uAiltNCAv3&MFZV#YK
zh+L3d57-yD?S1GOOn3n%&|fmieKLP*Pqp&?xWxaQ6|N@1q(I#<m2XkN%hA7Escd=-
z$4L^KW0g`}E_HLbK8s0;^kQb}W!e>Ia-;vLj>xwdfuS0|EU|8LRb;8Mk?2z5AEtVM
z5o7C7NXxF#|BD30-(YRWR=)9efZ-_si84<@0^<TC@OjsORNw~PE>KoX3Z%ZHq8KOq
zJJs#4io`P|m?@UKBXP_G)(gf-b51$>@!0ZC$>@_@pv4_vVB3Fwp)|X|hhQCG%BFY5
zl{SEou~uJeJa2mb<3%;N1#0>t_9u}sB%Yu0YQC%H9x(%GX>R`_RLn0e^TE^^B~0+b
z+dkk_fa;GF@NSSlxaAK-<-Np}<Xfsm6wl!5bBO&8$A`xxrx-#1*C7-CesUikZ_K+x
z5dL5hX|T3u<|Xl4dr_lfK6Bg|Ywequ6i0vHa`xvW1`txDYjJ-pG+?`oo9C?jLGhRu
z;Sep5i1;Z}yS!(gKK0f~PyY+R`4g!ae9f<=$ks;zG9&pQTk?;C9boL2pAA{D7jr*g
z0OFqWlBeOc5%hOS1raVP5C#>*7~wzh0ozsJ1F$r|RIURHsg6rzEjSSDB0{iaxHc(2
z4UVRP*xko9;N1Rm8%0tQtY`1%!n1w-d(!q2@Q9%C4(@%N=dd104LvSw#S1fooe6-S
zOd)kb$rtcW!iSq@mD_g-FM-qv@FWqHlmChsDGFT5-(pK#x&U;K2yp4%D7Fadg#8>(
zx(k<guzg%v)kE?@&O&SFg*j_90j*m=$AUJ@!w7<l@Kf&(8G6k(Ln41L)&DpXAm@FP
zu#xc&#?wjrai4*In%e%QJF_xqZxg;6sDEK|4QvlMh}1`VZPn|!uitV2_<QT)Q~qeD
zI-{1tQved3Tnpj_V1ecDoH>*>MF%?u_u#s-@-+hmTQ}1Va`h#}@0tvl2_uJFc>RLl
zOyGyMjbL2#Lu>AMW?uKxC-qgEk}`DwzI$o27v&%LpZ)m`eymCMPl}6&sVMlvdU)%B
zRrRMkpppcNND*<x<WDg<TfcsZ^*nNq$_z8%AI6pRGNdzcySdjG)eZfDVMx6oy<db(
z8AOr(se}7@hU8yDgQqwkn}u0yjaM(o05&CtT?g{SvF~Gp87ROiD(MR;?M3MZ5?>2+
zQRhu;?aK?&FLvs^Fv=eUOxJ2R!j~RL10i2j<euKU1D_CXkX&Fe0t64RZTCEG|Br(W
zGrdd>mStFY&#{<HJ6C{vdKBqgJADV9-J$*H!`-uP^xrHOvl5UZ*5&}^3zNXE!8HU$
zNujPr7MmT|n*1xXgqXj5d`=@zQ@8@583dl~0QoO|ud#i2w6G_RG1Xis=)8bb-v}O{
zRD<wo^Q%qWGrcHuWpHIHHJ4Dk28q90dk^~$N^YZyR9e0Rp4s*>@|||P0QX2-=E1-1
z#gc&UEt_L-wuawb@?XOMToGW6fZ^@C1VUBU8)5hUB7>eqz)y(k3+3b*<6Hgu<IC;2
z-^cg@1@TVQ%n{YQSqV82zzTAqg18un;w!7T7~cC}JK=AygFh#60aL55CtlD&k2;7V
zQo!na9Y1$yq)|Y<VDr`J#S7X6MgT2r_0^k^{M>)KYouF1*)K=C3y@=%Q_6vtYH?6d
zKsrugK}g8uPwc@!6=3%p$*)tU{=)!?To5wJT6AVmO@R0|J+nKeGc)2DkKH%+3)l?6
z{fs3_ndAR_ekKaQZInM~1%7@ckO(8md!cB5p)Mly3*hog(T9Jc0`3w)79rlFw#&Lp
zmU4b@PdYg#5Eh&|8LA7*9O)H6`NuE{-$_)FrO%R<=n{YU=-@&a9^RC?Hdwf^++qa$
zte;R-s?^^Dp<g2W5NNpH%MghRDAkB~W;*!y_THUId_5%{D{6c=q52<<`<K@sEdS+x
zI^HzD;C?Er0ynjKp2{zU3?mK*XMrN7BIafCw(qgEsbN$X$&_Rc;BBI!fL!>ASp_&e
zvFg^TyxCx!Up>=*xcUf)Ujas}?`kA|Z&+SE8RWhGj5~XNEzxx)ZAVB5nbH&H(cw&u
z(yFbHg$kjQ!rE07F-cBx&r0_3CGQduDM0KB?GRdlN<bt@QRXVEOHOR4Vp>NW3(LX3
z1N$9UD}lI}GMkymm3RlE<rtfGPXs6_28ri4j+51G0uozmI(ozx?gn+TkDg-GR5}r2
zH(r8Zcz|~h5RqXB=Z~I&Foba(@mYf*<p2Ed`6G<RQ(q*-9Yykmwmb!tE*{}awbTmP
zyehV5=JRKYFQ44~eXO&uG8G`mCv-)6nK%FPYZ^7i$h6Mff)EM@&1C>xT9Q=41(?pq
z0USP|OTx;8{AHXaVN$$;hvvtkP|***w>?(#e|~y_Iz{gBx>xfB*Y%5-AVB-DV7m?R
z3f<7;A<Ik?WH$6aX~BZ&Gf#urTJ4X_tvC+FI97Rvq{#m-p?(_^TM7{E?c~P`gODP4
zW>aI>)jcHlypf%~vWPx}@WP#_Xu^c!FGyg3^L_wSst2x`HVn0GLalbRXkNebr^6CT
zZgyO(fkt}^Qg;KqODLF^_XL=(HB_rBz0ZGt`HZiZ;jdwEF#a(T{Kur5$P{6n>YwR~
zjNeG8IKq+CPE@%4Kai{y0!ZGu)d>BQQUFO)3XEP&>`}Lz0*9<ZFkyqMf*thMlbpQf
zOy<8}x+DUI;`PjU_?M}M5@GtSf|5n<23d$uR8qi81Y^zn{Lo~4%iM&Uib{X^gcJiV
zinH$|P=4desZhfLZb*pr;NM%xuji?{#EvwsgEVg*i+b@zK)a3tWYWWhhextzWdGHP
zvv;2$Q^X&cmvbeyh`q9jkO2r#?x5RUr3|k5W=exg{+BO2V8H+^(i?$hzA)u{S@vFI
z{7Zk%8-gMd&zbCliARe<@9)8MXlB3A3vRO@{%|I=l%yCeedz&plr*7t{+R(*hLT!2
z_M+k>yj&n035=LDjRI{@*V!%Yve*OX2M!BwpT3&}g$mUV6%~AhiiT4D!vz{n&!U~U
z;GIP4{#Way9o{fotLohYi%UU1z7!aQX8hxc__><neH_u>_!|UHzp51`<?6fA@bj4z
zSrjG)?D<<L{DLSTtsIbhXji~V@i&diBW;$XNq60_Tuw~Jh7@_gcb-G=;app*4J>V<
z7`5gBN}j&tHKmch^XPO+P|x534vRaC<YtTv42W#Eq?)6K;XoIWVZ5m|_5wh+UKUZt
zJO@=Oo8E3N2}=I`P>*Hk-b(Pinf;S@TQA(fy<y!W>EPJ^W`2DVh>A4nJgIguTIx>~
z*)xc<Ej7_piP60Amo;OrAR;T@@l0A};<~A7UY8XO9kcRU5hOiT3(ws%0&)&An1Tb!
zKbWfxA>r?^9h{mX1qwt0J&SjC&#MSC0_v8zx9NRhLzh@~RdSO}r3~QKvj_PMo4gRi
zK7CfN70woRvk!4ORf>&13^m`aL=-5@R3VRSWaW2vHoN8BQ?D@ge=3gSvCDS;c1~dl
zQm*=;TjqLC{Y8USULz-cRv>?`e-*Hn^r~ml72zj$+N^0ahGGzGTJ4t+d|x3zc?dn<
zm!(^6<g1ue%wsx&!)Zs(xlSquA=7&o@R{Q#7Tp^J{A)O)_mr<gFfzFzkMOU3F8DZ&
zucd+ZI8ROENG&Y)^LHy*d$U&-$^)9+xW}(Y7bmn>z{%y_aKPxiJ%*lTMSoJbfs8E$
z;JecBLug~_Qx_JHfK7i|L?8hk(xfua5iJ~}6sA^?#%#P+?nR72OyMg>k`pqt;UU3u
zt?@CgQra+T`N+MEnR3NNVfaD=y9PBkFTUG{#zUGB@EK0gKsccNl*-5ePy;xiL)rv>
zC@Mmvy9r-43#EASE~&6)r$}Hc@^r{5rpdOl^~<1~++@_;eS_X4eYibW#kV&Zc1)&$
ztW1em9)yCC$p!)E((j}PRB~KVRp-x=H-ros88;i%f5n5_j{;2OZe5>Z1QvR3#OYW{
zaT!E7r}-c;)3LPUW2us1`0P_hjQQduu51=w^9gz+rzUTmT31MrK;zQ*F`C{J(%7$3
zlu1X?=~=I@2&ZjhZvjEdj)zg9d7E0PisuO0v<CJ~^!AT_i*@hqXEPo4MAnZpOMl^B
zFRb!##kQ>F4YyK)`>`XZuj{Enqw(?x$O0gfaczH^8OWD`7&9vyRx8j0N^T?Tcj;zU
zM)tY+d9CmQ(W-7YA%l`CXhR04V@<wPKb@$TRhAs*wcLVV1ho_VYe3i&nc}<s^`qn;
zCcErOJ+27z!ZIYlcwcXPOaI(4uG<599%I%Aqwafxm8|Y3h1^DMw#$*ZpKbu)L^*kv
zwl6x3Us?xlWUAsjSS+-}KEN<mg<Si%<eT`#k8~BB80-^}Wr-YE2IpTK;9tauU=LUT
zGu<GAY`3zj?T895f8HUUjwRX<Na_VlKZIJhvVTWD+4O5U+K*VeR7zJmZ0+|>tGqAZ
zF;L!n2o5AFow7v9p&Z`F)11|kW;p@H9MkEd)(Y&<4&BVyyyRpsN(3f=ULj3(ezn&y
zZ*bho)AusQ;Is~;wc2;77G1M|#-^3yi{MmmGFF$gmZhQb4*WQ5g1R$3o4i+3uRtJu
zX<XcC7}ICsy)RtTMB_zO$iO;H9xVO*Z8pBJffl5NT?_wIRDC>Q;bn%=tMXJb(W|OB
z2m<4M<DN*w7)SRf#0t(#^bO>J0TaDU0&{;NK{q~icgAqKVe#j0QF#OCfUx7plloo}
zuH*DVHKeG~WW9|qS9BZEl`}}0hboi&5xF8Bu>WS>s3-3dz!BI+^XZ+r8^!(F^gv<k
zQwD&Z13P*LYTi;*z>0y->0jV!jGhw=Xst3}qKpS<Z4OanyG2)ixrY%K2yz+nQ)0M!
zSwi+&*jZ6edKw$BBiwXmZ}txi(14??%kHQbeG4!off!KM^hbX9nf{&}dElXmUV1>h
z<@<u(`iGo>NAr|GQnt2<*ums<K`>=B@1`7X_NG_B^tc#@ln_FbzaP?zThLsBl%Y)W
z_P5X+7AD(D4z+%A>|n4T|MK!}m>MVA0Y)Y^+$oXDV%o|if-LmqZq!Q=uwEMfjHYJ>
zG{=+*Ov1iHYzLp@B}@Pa&wZnLMJ|BD%fbmMAf$R&H2QflD!WEp8X6k%y|S_1zGeD?
zD-|0Z2#W(d1i9ct7L51#%<vl}2Oi=fD{=T|!HE+Oh|@dzya#Bku@z*`l)1>kl~#}#
zaCBl^g0T+E$8b&lg^F=qA=Rs&$k;snEwqQ-Q!>)UrsDG}Sf#!kS^N|JtnU$Lg&u(s
zW>=vyW}oZpF+L{-ycM^+rNqmZp$-M0Gi=jY0DW(|mxO`lZQbL?A|>xpW;lnZ1bkBk
zUZ`)3*);Ys9#wJWnxc)(Mn;cZFD7mrgAp&d`E(7kcsBNXXp3A(!0XRxRUGz1w@md+
zUcKzThaY%F7-`Np7C17sVo3^U-UD<nu_ZY$c)0^2jsj%Aium=VSoaX-kW47lH{MJP
z^H{Ai(QSXOR6|`Iy?2BS4aTbP4lW;U&Mh6K1DAy{+`|HE^&AxQ^`>4RX~!tke6jFu
zNBx&1o9nsXso^sZjc%nL{>P{Te$^Q>_n==^e+-Q_vnGLiQOML7{hF*FR@<`+9<4ih
zET<156xm$oTlIKj-9(#gAG8>J>P`w{yuaICFF<ff*ef6ciFEfWnbKE9FxHcqE;g`~
zaX{)!nQI^1V9CA(_(7je&!aDz%;PI^BTaaec&TreYbMqa7@j(gtWE>jgL%tXTwPvH
z_hXl`pT6{yz}|#|i>AaL#21^vg9Xpb`R{2oaeQV`9wVw8^@9(M^b!JG$;R&y&|9=z
z;}%yAfUi^aywTJ55FnSae1LBMKz;H^6iYWxt#d?p3Mdu}22HPK;oIO(RuB7ZH>2<B
zwMkN7_L~yNkGQmS92rDuQE8YLyd<>iQM4X-^r|uG-t%FKQ>&241EHF92DkT2fh$oX
zVpxp~v)xnB2XHN)90${)tr2;6pdd5^5}6IH2hCaWmNur-X3y{=uHQo<noIzu4rpjA
zCNr8hIG>ubTb#8!Qt*C*m_TgrA`wRJqZam*r{pRXa5q1zS_cA^x|h^r)0(`Z8DC`H
z4-S{sP)2_Cj0(X?PArg+791TNw^((s{9&o&yHuipD+?txF+>ezc&C$#+wEtsTK6tB
zF40la=1SLhLH(<q70BTJTbXpZc)I-R<4@p%5`qMW4fCN?r{&k_>FKO?)_PdCAYd5;
zcZ@A-sH!@Y6T5I<Yux^B#YCO(EO`;!&G)!n8Up=EwK|9r_3f*Tc2mrfk@w>5>jB4V
zZMGC1FahXd+1}wsdo%ye@a=TcV6y0v!z_Xq0(hYqBR5c(`xkvGM+GbdR@Vv*etvPV
zx#{-hf!<WYCAV-^A{5eKKUmpJY(XoF^3~N_7Q?+fPw_%>LhP%+q3#KWNhpZrb_-M^
z<qo*<gra5PY(#Hr%(M)f<6X4_M8@YYCx#L?veorS^oL|l+~|;e^-jA|z3-jcZRse+
z2(?1PMqeCya?g&}tw^z};@L|M?x|NLddN`pyCQcUB{8go=@M{)=<_KSWi<^{D)%!+
z8hUCL5fD<d3?}+wO3p23a1V`oXrYsH9ueKx!zv><wjR<+nA5QZC?_0j@3f=1h*Ge|
zNwP7XP?r`g3X?KIHcD>BuyLqcB8^dYnP?RirFy}tptkRv#T!1E^#}x@9I3BYCTtP~
z0fR-9-%kIw4n((aaZRhyr}}g=U6YHLUjUPfK_gNp{3D{>?+(cu-u%z|jqW`!hUX*@
zJs+dg^7s2|>_(X;4sv%jC8XYHn4SEnGY{p(pa}(02RWj(qaxH+vryh^XW^rL2I>*j
z%?LbPhljwiupP*=it;|mYrnd#9i`A9VzM>(XoQs8b<oY^DItv1A4X}+{G!+IW1ujw
zI}LLS*2S9<Oqr`pUU6QZl~i_jl*>#-xrqW`v@@}kSjT(uY^FV#ZSb486{wr^wm8Km
zc6uySPxv&DC#6A@R8=dXa}ANmqkn!Yf8M_0xSm1t<7$~?7!~`?FzS9G-Almx|A^Bh
z^rQ8*=uL~5@=Qb$zeUq!6J!h;L_}BbWCk5b9udDZ@FR}Uee#cxPk!o2%5|d578aP>
zw0cz>iCOtFwrdJX66g01v<r=py(0V&F|<RFRXy%BEKV>iUCO_uy1s9W_kxc4eR@Ww
zR^tmf1M64Q-jgH*eW+L6ZBoczN)!q`%p##~=@?__HI2@zZX~EcFM%LKC`mh#hf>@-
zT~55N2&2rxgQ$*W=q8b18biMQ)6Ph%9pbD?RObG7l>!#|H`(nX@@ENIXTFRT^M{7@
z26culsmM3wsza6p`tOuY>-5^A;pA&V9D)QMRDK=C&GM3^M`~(hVgUOEMd0oyaPRT2
zEe#{GtMkRWvkw*E47{^8WmeYR$if7xN-K1kXu}KjWV?0nh5kAt_tT0P&fBo0Y~&;p
zRh1D@1Aa)O2qq?c9McdmPVqp_(pY-^^151lhj~N}RlrCXNfyUf;j%8^B1k2Tu-}@!
zeC7#DP+?-qvip`9zx&bnP7~w+BK+8<imrRgjijKBFDda#y#!te(9Il1{=~f3i{c)z
zN6;#E!)WbjrQOoU9x~v*L8F@wkX3=1Jq?$@N}x>V`AI7G7ThKNExB|W{2GvA$eK`)
z86QWyWu+l^14*5qMpA*lK0S@u|NSfz8J_e>CIGA5#gUeTNJIS7_g)?C+0PN9G9&=8
z|A`kWT!zv!zM3-pjTS^b7t&kv6d<9%a}c0@8i@Qm5&T6AB#_?HsSd53)*-BDOj(4}
zf{6QaWJJwSr1AWBgIw&F|3UH}NIlmvK!%05EgW)+-*0omL@^~ql<+~ACAv)<(IgA>
z!BQ;sPpHnngQ;MGfg(o4(*6nc{{_(JC5$||wK`RIgX!iE{ri@HE={s;)_tji%?)Z8
z63Ds#f#+W+IuPOc421aMw{Zg=UxUy`PT1i7VMPNX{;#tD{+$3EqzGx$XNz+Wh25aU
zm2Oj|02UEvkU<&sA{kGosDtOK_=K(hf=!Y-ib(NZltl8LYOd?>=Y@dP{O4l`Y-eHA
zpNvehM<G4T8L7%0iR^u3^wyp?D)J99gOr5`0PNWTgF}OYwhZ7)9W>OOF1&_^&`sI6
zU4h{*IiV(a9utpL>2HFABSlJUe5_*JuaNr;P{{Aq?Xtg6@6@IF34YJ{$oN+1H@2Qp
zEj$25jwidp<axCBVGHGQ9Xtv6j;rzA9Vqh$^_wl&f0KtTIMI$=C9eKS1)x1NZ(wX7
z^F?))$%~$>!wsNWOyVrXh~(*Qc>`(9TG^ZBFCTfp90B?0nXIJ#lKo2xMW(>&3>U-n
zn%1G*BCvZ6Ph06LQ@r>O+yC<jvxDafwT?tB{w9E7Frj3V<8c=jx%o*IF}VC8$0a`|
z4>lL=<)I1($9-Jj0?Yy{Gk<Bi^Hc2YCo8khMdlg9MIJ9mSmZ<zuTPDWe0$D%Q&dWx
z{OmheF2?Ri!pPL_lKc(HH}CeZjo5I~cj{EJm}e2P|KQ(Sd6PaoCy97AOQtnsCy<y%
z2hS~CeVtc*CK~OAdf{sqg9Z6iw|#v_+ynO;&q7j#kVTX%a)X=h2cXORSnfQK)cWZZ
zUqcuyc-gKYA>3U;y7{GbS9kYDbpri4WmQCeI5^vf5?8i$O150z<YZonr4GAF8FN_n
zPW@@&n`1hmnhHc~#8YFW%;#CYv&8V)GAiqFBVMOK@MZOInfVG9$Cx)<;|Vo*=wu2Z
zfQKsjr3zWto^j%~A)XqVISocxKk`2wu*YcT>}lSi4y@*m5ac}*E>CsxCo{A0sbp)o
zu7=CXE`^~h5;p74xJ|zB*3F2bpTC4k_GBmetMU(rC^@EA*jg$2>yjoG$KEazG2Egv
zqE|3z$UJ|(prw3wOHCMNDfkR)u4|5rD0(L_N^G5p#o(B8s!1|nZCcv$d^mfGC+*Qp
z^Q_%a_mQ7DqSgVX?IigmZO1q|36sz>VjEKfVsq<+zBb!(#LGB&?wEb|M9uX<)sS3n
z@<ZfFU{RT<$uWzrBFeA!ull<M;HibKhpqd()7%z~WQ};i7$bC=^eICb=HGvql~b4|
zp7wrbm^?QZTpLS$SUlXC%y%vV=3tStDRUz|cxt{^hDRAjpDG#{99CaFD^_^jQ;G~D
zqp1A;kO+Tvya&V97Td8D#V)G=%3jgt;>LlgxaiTj)LO4Z3#+U;WQ5YZ{Lzlk@4TnM
z4LzTL9rL5nrU@n1AzqM3a#RmBaVT%SrBcANOq*YscUK0&_fvLjOj~H5gM+P_D)r=1
zxP`ILR-Ysu<mjj`sSH~YZIpRWjPeQTgWyI2V3$b+aUl6nC^h4zwN6K^?_n!9N<IC|
z55W@^UX1v{lloP4Ca(ZVg51#%k9(NLftWede@gLuSW*E<BTumg_Vdr{H0&R&-|?MS
zI6w|9)2@2|`=;7pF`tUuB4wphqDI088c;I_D(~0k8$Ly<5LGd1o8GM0<IS=!Asj{D
z^pIHe+<N{bd(t1Rwe@_kaZUf`U0nM1CdzXwm+e`@Z;GXgc@SBgEm<bB%$=#D)||?W
zJPESxOh}}1Q6V+_de;@p#@zOzqGfz3;`&b3tJS0K#?L$6Wc+cT5nfmVh!+uf@|0!P
zTsLGONQn8=$~lX~lRxZ|f1CfDTKvcqjEwJlrqSA)`YQ4{58PjSv#wVKUL{o!0@gzc
zIqKa8RdC`_rM`9KCuKpc2l+%a)cz}rN3jH@T_2mbO3AI~(jlW|-A_Zh!!XVkArQbW
zkCv7`7@s}N4snqXd`3ifJ#gVCKdXgVL-N|*%M=6Gy*({a({pxnqYSe;ajGy5GFXR5
zD&Essx0ftgW~BCCnB=GLFW$y5+4B-$(g}PML@7g66{G5eDV$UbZ7QqyP%BGzkWKX@
zZT^Niui;ztHpSkQ#E@RIDvB{Dx2MMCEBLJUU9pbk*~z_MCR`VzGN^dNWogbFt9L%H
zC|t~*hGw#glXMEP?74D3J#59p8e^R%biH!IGO_pLbzk4a<O0?)zW?;CGt3n3LYMJu
zA_TrO`aMjv>l)fuaV<IGWIO7&wcks-TitV*{5`|UVpO#1coW>-b_2ze1q-&3-%>-%
zc*)bEevwdXHR?@_%Bqp5i{7EWNiP!{c>tc&H4*BaD0=aTA*IJjGU(^(@e)&l5Oc3d
zf8G0?mtgZZ=<`TMQwa)Xz0(*TF3ZLcM?QLu_7<AmLaJj~^-VR$5>o^L%(A-IJP8pY
zk3!z}z&)c_<~{M-!4laATbX2zDq;bGoL3K;LS>FS1DZZsNxO@0l7y`BQJ>q@2vO1@
z8`c<2Ix~WNe`Pyqqq&rq##7?We#+-&XcvV7vok?O(osY1%@gMrs1%f)PHr!32|`8g
z2s(MEzJPrObK>|1Ue%*ipw<v=YF}i27luThRxFa+cyK!-;*+tRPXZb3If`jy!9Kgg
zGMV0AOxi^YpD(0IXEypHlbP<__&|<wCY_}AkW&BUEXVDj==@f^u#m0<=5bfq9dLdE
z=9(JOUDnWhNw<KM`o3)_zKbalJ-&`i#w{-wgP}ryZ^JBxkgOX`GP#e;DKPbXEe-dE
z)fzouiD|IuFdZ@ti$x}Tym!O;KeK7Yk+(5bhHkh#pmKarKl(`jp(z9{jgge%gr^Kf
z`2z(nYsPyaKj^pzr({z(K5siyUIOPe9j|BI#&+0o+%#iJaa#VUVCkgXN3y!fey4AN
z2V&9!Mnkl*4z}eOoz|2%=Xkk6av8Kz^8_5Kq^Diw5-pxvQx69}Zme)kJqaFe%sq5T
zXehIxxP1P$0Hj-Ig^G6>m!Z0>yDF`{sIwE(EL){{C!Cn7{@V?FRkR7UnCFV(+*;JF
z*&3hj$C>5ajhwUkL@Xb<FnN2#s#m8`c<!ZzPFNe=PhJHAjt3g7VlQ2s=S$3tn>&QB
z)pe1P_viWcwd{Lac9m`5brE(3iTAH+FciIKrw_cJ`1O}zp29Njn$eB2EL%_;GhuQq
zS&HBt_r~6ePo}gmUCiD~xWRBY>s*!$s5*)`oILHe#OGO;zJ0@G6LEQvr^Wih$Ur~4
zIFb2=aWat(g_+8O?d;_MRkcAb929|!HUn~0UdY}Q*PZy)6&G$;{G-HFG%m4)4*60j
zvOZPEN2-moA9&po(N++^Xy0wGL|HxJ>&PegCFk<FO{&}8O7o>!`$z=8C&o2A$S|_4
zOB`j7uQX*+9RFPH-#|mNWqOO`Qk9~H%eD#busFo3ANlESx3e98vTcvgNc*9N7ogN2
z*Q;V+fJ6s5(8~6;k)9MP({Ys^qviZo%hg$%GqcH#v!g}Ru&`pGRdeu$<EL$|d2Q)8
zt~gO`6>(iVHjPQ`@+%g!UEE$J!c4_0Lq=i7H0rT<Z&E_Y&m=$@;>liOO(FC??Q@(J
zF4<eE0$asMObtuL=AZ{Gzi7AydL-Y?zssq+a=ls0O{k7q__lx&LuuyJ3}Xy7(JK$y
zw)o}7Zkas8b@s5rI*gy)4dpQQ!}&?m+-@J5Ez?Y^U`x8YE2(saTXtyob#(GA{PTGf
z=V7r;<jhvz`nvEHUw+bNzqQX4&47l-hSxV&S*-uVFw~#x^<45Lo0FG?^jDFK&sPzB
z()T51*VR5WPUE$e1T0rsXKiY;Fm1{<ZxTl4^nIOAaQ&_wO_o09rPjrs-57Yy5d-aP
z&84CAjL5$BA=ygA0Hb$*q1fDWQ?r1gNGg|ZSA#{D)nu{n_NL3jNvcGdFz?9p_e!;P
z%n(Vf@87$+$Qg25yLyHx%=&U84V7TNn4v5xOx4Oumts}ty@c1gN;V95BZNnjt-@Xz
z<%qT~SEgFEA9txng>5eODZO-yFQlB&M50)ITe26%H)O$?A45TsDX3IY(&#sLucdoT
z=x7RS@gRWC8S9r<d9UV<aCK63B%i4n&xY`p5mnO?L(8?M=sJ^w&4^cPXe%3qF$zHr
zdp?E|=h0NHL`{N4{$z{}lWcX&af{0PERDfJ>w@D&wV0q=?IJInXM+$tWuURjAtq^b
zWDF{v8(k581_pV(!IF+bI)`mNQ#DE~Q!xxxT;pSxtpls}v~n)LkXn~1w0iIKgs8_#
zY3^}$5fFVcT}DCeX6q{DjF#0Yfqg&Gs1oG}3Y~L-_JCE9v_hhAU5vw$El{gsub$i2
zsoSe1H;ap0>e8e>Oa-TB3VFbkAqzc7pARW*3`T#JB^c^@FW~obuD;B^{LIFC125$&
z)^R+&Yg*WF-jJIPdh=k>VM!1B#*y>&aFOKq<X_e)^R`iBx~PVtBCM|zlhSBJ6vCR$
z(+9P%nqlP_F=6P&<lXQRfve6rto@%|x&qK>!J*k;@r0qEME_`qdQ4r5FJe|=yeC}s
zrpGMfT`J=}oeGz?E__yEh88uce3{vq8BMaC2H*Fjr;p{QD7Mz4lZzulP2T!Bbq%Vc
z>7x68$`e>JMJFZwpiUOOty4zDlK#Oo>{ih+2;@%J=<L86+uXHxEPX@ouAwvOIbvTv
z7sN<d8IFvMf|q30W9NW{fSNC9SM`S$X+N~_sg|NC+2XB+SXa9AY%70{KGY|kX>6mT
z#LLHb|LUcNHllxZ@X>Bt0)O=n?m#k(2oG1v0w#*7`>mt*ntf+8ftMx$FYp62X$TMt
z$4VvK_Xf!5imbOQhPB=I+_@QxMDot#K5Y4#ga||2(Z#7qp3Q#9uEYb=CL-#S<@p~L
z-JZf}#l<QQ-f0t??;^O;@``OoH1uL@9{y<j@zi!a5#^YtQ7LwhlrxNH%c*eW0dLdv
z^Ahau)Uc$75JUam#gi#Lmx^E(i>#IOmzv+${|Q8Ny|^|y%VF+mZ+fC#hvPSKO()eR
zP|kmrqSS4FpRiwOWI+3zyAMCDdR8d%exG-R*-MYc!Tl{_(rG2V#&yw8QeA4)F~QnS
zUx_jnT1eU`5&Z3S@^t3S@ZC+ks@vjun&rMPrk5OD=|NQ;QbdHBlj}M3pdQ8Wr`(6K
zK4`;@xgSg^e?}or#O_$mT<@3rHrhyfIo_3bVt=$#$^BYk*fE(uzZuM7x7fS?f-!ck
zZNHEK5t2sQk)k1w1KHkLL@X&P`6z1JJr$-Cel)eRUUA1p{^J3aQ6q6nnYfXoB39bq
zE^7vHiuVe6d~X{G{99f8YtvtOmYLYn*No%@kk1iUCx3sRK+iq^U(Y<;WIyKSC9mpR
zZ$r<Fa}fce4dY(bahC|SXkYp(ZL4-Eirb=Ilj{;t{NCfS)H$n{+?QgKnLG~+ts$Wr
z8!NhHs_e(;)@F~qs<p%y$<WZYb7K%ZyD*p=H(^JEwO?!d>r7c63h>SbrB$JNo<$?<
z;x!32hPuNohP97)z80;@PP7+M{sSFY$k^iahUf~p1R@80S>p7_@f49?e89-ew+g;@
z#1TPBe^XjdX-JC?#*QG~B(i7rQ1rvq6UJbh&7T{?SAh&LA|Go~EJj6pfFe+%zia$m
z4UfGmg=@N_D6JCQZT#zL;!dah05Q?_<I>m1i-RVRnj%#p{y<EbW-E=Om`Imx+&Y@F
zkSph&uNqWF!DvHT<BIu4v*FPcLCa_!%8^U~#g288iw!kD^aB<%ug4{)>*1HBXC#L(
zf4mrtJZQ$mL8!XbLbl=RRK>Vq5nQ?jIS5|7Os^Ydu@kI4;(VZJPNwhx!twepCx>Cq
z=c+#at}8{2z9VTIh##1EWx$>3XFAP8h}ivxa|2I$GpaQ(Pu639u00{nQ1F*8Jc|r9
z7cgm;I8hr6PwPyVcs%OTdc%uhixQSpi4u+UqcpvWDz}lX)GC0kb5zZ8^<8FKwy~7r
z_*-quPAuBbiIhY3%|sZ7FT2T0z@;bNYzzVigG(0bXdE$X790a;7Ff}i`^|R-`@()n
zDH5r!7oSeF5lP2lnF$twv*pmMyWMW@jSPpbCKCTzPl!A{TJdC)j0CSPY|aSMTU42}
zOF4_h{$MIx6_Ljz?Lddh+-;w<4HJx=j2u<7(hQp+8W;0!7H16CQ?a&AjC(RmrSYv#
z*y0BA84=ExsWbUKGdG}k+HEKwF?iK5T{T5z%BjEc$W1@KI&8>I*5C!op2_?}hfkT}
zW4YeuOTP-?|NZ=Y6$7>Iu>P1~Muwio-pA{eXm4{@t)dB2X2f<;%*(ermQt%2?E;+7
zTOj_HM<hayu4tRI_hc68Yu>4tE%_oCLh=cBb8%Gq$~OB(`#IJAlfpWG1c|TcVQ~Dt
zXK?6B+SQY`s7tnuD{_`U8IZ2qTpv8GtDoWd`=oR}FoM1K#vPfq3^J`<RVM1Pt>wP7
z^34_g4tS5kUobok{z)NJ)vVmw>I0-R-)RmHVx8X0J=;FMKX+wkOd0d_lUFraB8%st
z_eD}KiPcOxP&G(jrJ7N491|NKd%~@NwP}NeHjn%98-L?j<HBFQR=5EbntXO7GUZC}
z(p?g7p|9uKW&63|-v1k*FbGwH*~G5!={Mwh!%jO(gJba4ssDwUE`)5o;%?PyzTDE$
z(p+DqReljp%`)v-e;Iu7{e$!%-_aqKkg;C1^`-i%K7Fp)5dK)gh|`0ITUqF55y!=k
zf?vaY`0^K=#&v|mKH;+Wa7tu&x53*@{v7<AW3bCu%#I0-Tf;w?4v3b;>=(L5{%<Hi
zAot1=m<|^v`YM%#seiS{{AKJURAlIs6Tme}V`u-9?G|i@@PET#fQj6+<r3#^GRi-{
zus~n9-SfZF<QU&1NNM^tKx<zFn@aTy3Kqi}lr#705846rl2}jx2*)4Bn%*%K|FwDo
zCkiSR$SLXCYW}4|7e1tC6a4oN2d{?yNTdJ4IY}1;wy0taFaHOHL01VVx|F+T68#UB
z{eJ*Jhr(*aDFKosAg(++k-{ZhToKI+8>7K$^hOzhg-e@@JxcZFj>hVts?$|eHV;}Q
z{ph!KGdy{lRt3IRnm=IAjeJTH#Ka+;_X^f}V<2y=gyqADy>@x5dfcRYH%U$w$MW50
z4ub|^@dgq>vS~K1)N1dY-VSe!x_&Sp`4DR|lktj#63uQw=W61~q^R0Q!$&Gb7KySu
zp`ZD$h-aJWNvE{*8MU<F6q;qPkh52zVl8n$yS~C*t=3MqU&<+R#dd+InLzd1u!@aA
zTT|Kka`MjP+v_BeVnjCUXz}wrjiXL0gxM>k8e4<+uh=dzxqjLVDQ-10=!_L*vD$(-
z-aA20h~4tPqgGB~w7u;5Fwo(0X@zD4eVwb$f}R^=`Wv{7QwV_PpY`$;jX;YcV%&SJ
zkL`O|eZwcmm(~~htz?OehURjGz7o_Q3Y9EWThK|e#Dt&hblI^OsaJfdF3<=J$q(ck
zqMr$iNF+U!zF~v}AwVJIvUTS+m<g-&!QtV~#{s@0avt|C-JnCED+h=D*HJ8zfE+x;
zuE@%gVCn60n%?@2daZ}-U#e3|4?+o(c66#9EoVDgH!oC2WEcv>ucW0i-SvFVDJUUF
zytP$iRH38a@14hzc|euGe4IHh{!KD=SsSPJM6XFOjdJiOb@QhYi;g_&I>acaFSWWt
z&DB=@RUc%lEjFu$<g2P@)T|qL9U2p<M{s0f?FlQc%Rc$|$<a<dmg~CLlxQn&-a*xa
zhQmxk$<v-$e0bHVUOS}?BNLoR@On5BSw>?uy`bNbX<ER$Pe14IXWGKlxXH;z%D@9I
z#O`62-JBDt-t~<36B**THIeyfB4iM1TP<$}D16qT>|rn^Y8#wrDY|~E;b?}yf>BoF
zmh*Q_<*6HS^9>n^gtjmFIGvLZXJhDV6K+S~^K?CPtbPA=s_V#&^tA~2eTQg{AA`<s
z$b_9OsW>b5bKdk5Rv+D6kJqZE+_Kx^?pB9LI}9<7g)3fi2u_@}X%es$K~WqvN}j}W
zh&BDRGGWQP2UqslS-^0+O<s>};Ur(=&84n>tV4?tha(ov948wyzvv%6Qy*1&LX>eJ
zDnd1E!H2p-bxbXelIeF6=1qumjWy>IA8Xu$$`od?Cm}`#^URGEC)%3KcBQ8yq4UG4
zK8!?7S%sa9P7~gkqI}<<?%YIqpdC%MtI=H{R_}foE~Cbx@*rmpO(TIfc?=mG<>SMs
zG)7ayD*JH<SH3ONZn(HANAuIk^)8u!hYPXlv6Fl9+QAMt<+`RSrPG`<mOmJ*FzC13
zd?n?Mb7%iib?bJ7AmNq<4z>;>$(^H)puA{?9oIVB%Q*1FfkFXXw9We!?jpl#D0Q()
z<Lb4UzV4ex_?AR%(<hWmC8)Hbfjl}WqiM(Od^)y3-=NcNo-m^{?{#igRvOh@jnq8s
zxvtc(s7&RlM6wt7&KwoDWe6!%*j#c>PA5v%b}o}d?)x6Lqf33*2iuYRg1#2K7`yv{
z4H=7a>TCHeuD#t&Y>2wd(O14-S5`3I<~n*Zsy*}U=vK+$4nc~X`R!e2v(MkH=U7#}
zw-54l4gyM32RMy%4X(|VWobJ8FtA?#nlX<#(bR<vu+quVt8!;5fLGcT`~YITkMp~z
zkb7=<B92`7#sspuIul3l^Bm)ME+40r<?jOD7Qxe=d^KGzc}dmmvzF8D;UcbSt|L(%
zKh^NT&a0EH$o=CzR`>8xEhpz|pB(0?c&`nNb|Wl2QJ_oxy!F~?@M#Tt)=-NEyAGq{
zK8sra2S%Kk<>>V9X`eI?O2tP*oj7OvI%G>!a$()zG{H(?Le_P9%W(e#V=v94FYR@N
z*e@?*Eg#Lr^Y)f~<13aubf;wycD}yX(w7){;<BqSV1R?C>U*kfzKbwAc$iE|1t~)_
zuT#btJPl@F)KHCFX=;5n66^#H(=nfGzl_Bgxqb66Mm90m$%=A%tBvpyHdc$@Y$hVF
z)2N7RP~6K&BRdwoS&r8%7LA&pyR1eW%<|2<eQDWhRZcRe9I{r(zweOH-rl#oJ&iy$
zrYl|ZZlxt|<7OpC6mh)MWSnT~=F><l+zFSJ5D7E}<`9#W0aw9~2c!i~IQTywhk>*x
zzi;e}f>~U^qdM>H#lo$f)yVx)7O9d4?K4}Kx0MRq3+q^H^L2{s3x<!DD=otVkq87C
z)8e0?zgw!Wfy%^RCES=G#Cnr$FwDMec)h*;ljq%GzXu9E2X_+%IFYoc&A(nxH;I#6
zoykxeERtGw++jL?TS}C+bj@3-7cZoI@_XbB9qu)1yvy#(TR}4J%Cdf%6Jm~S0q-n&
zZ=zPN<i=AyB+45a;RP3_&KmA?J75tII8Q%Ywg;DZ1SC!eXWF>VR5TY?D{f$07z{ec
z@*DX&s``c98x0tTz`c#T7_bedD?a+5ej4swL+YwnzW07%Ys#Wf8PU-Ezzan%c;{wi
zqVLt^H^m1#`iW%Dj-7^y3mN-%f=cfthYb#NLU~*V3soD%n+2takQ~gr^rXXDj)PDV
z4jZLx%nDsT+QwFt&+=Qbu()q|{YbM248pg6K`5}ujPuxnnu=!i`QTj_!@fdo0mB)Z
zTQcu=p1U%wCgbL7k<SE{!*p88O)KSsnF4oRq~fOj4`c5c*3{Ou3nK!GfS@P{NE7K*
zI#PnzB>|;M4M^`uZz0k|Q9wmnLJ{d8MS72jf^?*Z00HSGbP`BN_=4qm-TQmbbIx_;
zM+j@pHRhP3%rfqKjU~EnR4{9ePAl%e4Y*mc;k)~6uY{4r2cB57?|t3eb2USO<92Xq
zz@gJJwBh+<oj1W=i&d}i==?ExmSw%p76$ahE{e<W1-xmM&rPX1a1sj&oEc2jO5hyY
zz)PJUucbk`<SzkoNhTN{B41|P?ZC%}JHxlz6W_i@+!zwKnugundUiE>f8@kr{C?p=
zeeTv+Y<Y^t1rwXhNj}}gpm%W@yCsxGjst5S1bez`toyerZE%L1ezlk=fkY>8Q*(Lz
zZuS}QD{{(v&x*Jgv5gKqaCQUirPFH1AW2ST3sb7rSz6dI95K>SbEOHlj&ly0^Z0aM
z2yT%Y+J^m@QL>F&Oa~w0c9qsQUOU8gfGg6PH<qSvFZF*8(^IS{5)8-nO6r?D(tW#I
zSod<1)Xo?#!S-^@jzkXEzN5pKSdt@OH=}$G9va5t+ajva$+3;z(av=NF|WauQ!fWP
zfV~UQdylQmG&39OH_X<@oUO8L3|7(3#u1OylIku`xT07@EKbs4uYAP^XT=O)GqO5q
zc*COyhJyoJAEuA(r3;_CDzFF9|3-cxo>d#h{pARB$!hMRzbDCLtF8L*a-dsX;>CKR
zVWZ=Twh4{(HVs0M`p7Ydy{=lrw;Rh1BPu9F6A`c?s4&`=+Dm_^C(_~UJ4wQF=FbQz
z&#0yGp!)(psZf|)$m@MyQjq#BaIn+8GQt_xsAPPF_d^7r$vaX-ZiNjA>2sZw_J{gc
zstU%E7OvngcB{<8!`L})7ikYKi$s^F?KRP3<n&_D(+`pUQ(AQhQfd$W5x$IVa%&CH
zuq$YUDl-61`EF^U`{u^${nsDPU#T@*FgH&XkW9Pe3#z-FHjK*zHd95VPt41h6AwJb
zE1cjXQT~sDEjq#;bvA|Zo(hYPE*#{*xB50HPu42uPApmN*5Z&wBj`xY5%D-~6>o>T
zjn__~zWzkUk&l973FIuDcZV|P%ueS=1wVP8gHvNv_=8Q>IoT?gs+6E<Es4wn?Czwt
z)7&1jG6Lx9Bw2B|-bbc+<PEI<KH223g3M|OwiP-kvn%PUq3^Hgk{BhZC^;8iaoPHK
zGSHH%d@e)8V*IuQY~y<OLQ#d6{Og?+XOn@TdY_%%1{)^_T7`=bQxA5qy97dD3O|@_
zf37qu?b8obecCdub}t7sL#qIW$`Z{X1*?W8pI%kFznV@C%~UNUI7TpW)%QW({nmci
zlf9P{2vKFXvN+RX%JFyIf>t}7PZAd`*yJ;0>hFUuY$_?uY<gPHM;SF=R*Ibw$-U5O
z(4L3;CY>6d^cn(4ni7GJtdi%KS`(Tixhl*^rJIOaoC0v*MxzdOWIe;!*GAb&H(cXH
zA(;v+KL`>zGq)<(%Xt0<OQ(Ro#naSo{f8Df4XGr<2LvNU`|aZc;ZS*{#)pYCTxDOI
zn>!n3nmXFl?u@SUR4VxneM#?Vc=ANaF+GBX>6sUyMb&2JEkVKF<|#FSLki_r-1kk}
z&T4k;>XpNm2h|0*0Vip#FE5Dj-A>UV`O&JWB+EJWuot`6Uq}YIuROx7$cxZdq({$@
zUwQ4j6`OzP73W9z`jXZaT+6n=E(wy_CaU(H!T<)s%h1JPJ_fwsH1i3(ifb$$0G5G;
zW=6BX<r?dm5Za(JYJ!E$XQ9LEpB;y2yuza0T*2_@sn`VQs=)IK=z1VDzVq~+r3j`8
zf2@=}0xCi0^fD05_?_?>vC#Dq2D#91r>$~I&L>s5m8va>nId+SN2s!*wWIYmG`aDs
zkyQC9gBT*PeD6mt^zsN7UIrQb>Dw;t4ix9syB3+wbzrqW<b<I0?z6JOxy95d%>;(p
zIC4ARULnLQ;cE|SxjQ|})3xJmlpkD>6@=@itimK;?m25sr$dq^OsU_o0G~L9Y8@3R
zgm^Fu1x15uo$mRQ_u(UXrLx+X_J=GLa%f2`#pZdRpKN=aBHg2HH#cpef;LOLyob(=
zuFUmyqfSvew~wsH;z4;+y-lI@%>rP7!E(uUWT?NCtaz%>^fvwt`?-VUnYR|B`qZ-N
z`t`S(??>TJbe`mbTEctt`*xS*C3h@gmh-8*1!2W~+0U0?5dh^`LE$0>0F>Dowo!Of
z&Trfz?%UDghPruQawRG=MMtW~D;B83AffQ`!L)gm`{I0LmR7I%=JVX$#Hep&R-X?5
z!OOUeP=wU6a)(jVObCnVd;L@LMg^QpZ^aW4W+)bcJvtJ|<f*co^gY+Z9ha;A<BJVK
zAKn2WED7=#>^ga0&|){6Q#Vj(m_uD{bHanPOiBS}A)4zKq2<jgGiqGf?1Qd*e)~XN
z-@py|Yhj{6cQmIij=uTgiMwjz(vrIVr5GJ;1+<TINO-osiWgUcuCM3rf**PiEFN)r
zWIi>;S$%}Kjty@cbZhFjg%=`Je~fH3PG}i=UbwEaX{l^G&{H9WskZ3;TyeR$$U=GZ
ziDM+|*;a^(IZKIAN}ZSHd0Bm{Z{BEv3%ku{#q&Y+Gf$urXv`4aclH$NbL-84#lzn3
zhj*9{kTuLfY9>fD3Zp!!<5SHge;N$HA6EKnm&)c~MlS5-*^hOR=>;=C%nL|gDYYA>
zH_MocoS?zLyze$bymqOfKHZrE+`6%|@pDqGZgeK(osBBm3W!x92HSs?{Kscn=Sk1J
z@hnY<OMX1Z>I-*X@XCbBkMYBL2{!*nt%}JF)=^E)*j<4gyH%_i+ql&$!<Qh_p0Sz0
zt#QHLT!-G&EOP-Dwm00sCtIC{&^ZTM*!1IpOZz<%x$To23F0WjWvA1%9Rtn}GbKwc
zn-h2l%`fBNAGc!@AQ$VhzG_#OJ<cBA!n@67D@g{%@iY5D0uyyrixdFen|0P*2`B3_
zM)BziYZ{Wu%+AL32kz_jxc1Jv%l)B9ubnU?4SvlPjb-%CcjzblIGh@Uwy(yg`}r_1
zKHx3P-b|F_{$OlWB}?dyTf-J}yzArw@%1svhtxkvR8~7|r+efxeznl-U6}q1CPlSJ
z&*kZ^&)E}&rH-tPttD|#mns+2xpSS0A7YZ%UJI(R3!ccQ2}h)KC!B)i^l!D!xs+Y0
z*K8r2*8B>PpV=G?E>6|;s;w%KvvV+1D0+=<^oKX79Wtz&%UxTs^SV3e>!T_@6r01l
zmp^?whizDr8g4OB66BiMx7qq}Bu5LSireY3YqT1He?T&CAFg4tK+9dHk$hL1;n`!E
zwssv<VFGVA<z57OuL;{>f}h&e%j&CJ2<oOsi0jjt7IYH02W|4W?`bU0cA|oL`IAhu
za3t;YLnD#>6Lsg5Op@}nw49&MzO<3aQbPU^XO=6nK{U#1!Q~gNWYX@~Ft?$dMas!<
zfoOD|XByx5n8{!Z@hOw=_Xz`Gp}S+^(hk#s9q*ClytXqv67bcOd)R#!HBm<B9w515
z(M+;<^a?L}v%l-%=;*@J!zGBlz!~S~2wDqlU+mq5Re#%ix;-Gc3jjsDV3-cb+x2P-
zWL80XehbDPK>d3}@y*j_n6SGpvUV~<6ZkO(WP)A&QYc}b;!DCU9Qqy6$z(voTtDlb
z>O(EzSkDQZE3#?n+zXlJLuESjCYAX$1`rNrO2DdF+TQ%Y2=v?-Z|r&f-NgCe-7NSp
zL!uqAGz1Q`)id@UM?P@DCJ$#rZj@PYUj*v*O&%jJyQ}A;k&HeFfZ`l@t7;gv#!29*
zsdfy3McN}6yT6m)Kh!>$<4nKGIlrpfvk@iZDHZ9ok83<sK<rguMn8$fM&=MDF)AmH
zHt;%bl509^@92{ES6{__VsUhzSp72kCdWe2GSX_Ujk)CXtwiEzxVFLyRiD5}@WVV9
zjjj4Y(Y{-!q@HfCfCV|2TgP2vW`9`9FWeSm>IQC)L4#$DdcJ2zuWd1!{MdmmcYUFH
z0Os_s;NKRw5b2_1KvKq7t}Ctrm=#A~EO1ZOse(o?Bn+>12Q7SG_cx~}Zs#2Ho#<2u
z@WxhhfKZ=hOM={<Jsw1_${3aM54t8*IoItijPDKTTlDKv^9S#Jlt`2%Xa-BcBM%Rz
z(8~vNHno^MbU{K7z9L;04)85-;VCz<H-70_V?r%s+xd-AfFfusb93^`ymrCsxyXqV
z>uHG_k})1XELKMVHQipZNw1ba1f#d#!28A$u0EY`%B%*aXQ{G3*t28q;fv%<D~OqZ
zvVv+Zck|^E8AjjS9T1QyIt>`@7eg1?3M2RCkn(Zv-LfsAxJ84;>K#%maRpRA`#x9V
z^~ikV^lg8QC<KU9Z%(Kimz_7h(rrPvl6Y(#Lp!DW{J3&5UhLI}?hLbqk?BtvgxsDI
z-JWLoEG-%z=j0hT^d7``^@XQ-|KmMDkIrd@KuzpwmQv5-qx9e!{1}5eahjQHRMq=s
zOiS_clQP0r9KHwUzc;;BbW=@cMairH;te|<<*P?wGgB>ILfooa!I&8v6BcJs4PrjP
z4T8wBpZ_?v?csTy=@{QNy=hFkZrcm5+UXf?)g@YGR~?L(Ay4|fw>E+UM0?8kM{N$G
zSo6w^k?V;t*nWgXDMF60-}_ZbbRlXY7AwQyDv&})S3I9iyZl+rIoynuMZs?9V)Ue{
zcSma#js=l^wfIYF&>Eo>-#hqtUBqlM-D%%@w9<9lZO1B8^kTVPH4%i_ib&P@tf&cq
zEYa^{t?aTI+ma~O?IaI0g7dkb5-qR_6Bc8>!KI8r0*bzbu>=LgJ6x2%Uz52UfoKua
zB29aEAZtm#%9kAN-Ng5XJaVsx)eenOTsho#4lH_E2|_oHcC`Drs2*ZbT!X^QWSknm
zg+{Iv`Pfa(x$t8~=l$z4B9>W=Ds`cNYN72c+>1o{rj#)yxHZ1{B53dFHbxWQ3$Bv@
zkr(CVMWDI~8~b#QO*Wht95V2u-05?|eHv!;CN|X}6o5NmmPrG0!c@6Nl&ytV(nSW5
zS6U|K)teawEWD|q!3{0|Bc<EH#4$IW2LgT*c4029_)leD$hOJ8{Bf}2Oqw33rkb^3
zhIlrA{5|H&11(`TySm%J3sVwH75wRz)Aw&*Z@Iv>Ez~Tqvey3*g|6cx3pKy#Yxc%&
ztT0##(-}@Gzkg3Y*ni&@@&4A~L{;*2PBN~u%Lz6Kh6WL0D(roO?kInp<{^jX>}Z*u
z)jS)IC<~Y&dEXm!e!<b9ZC3$Ko(HE!A_~}HZ2;uFo#rVwUF8V0o*iY*=FC$tBG~C(
zSf{ftS8*=~ASs~$a)EYR#p!dYiFv&oCQZ(*eBNwO<Dyk4IM&pJqj188fIV<O+N#K*
zwTWTgVz9(njYERr!Jnja%}aXB4l{&wIYFH(ngv7n^6SAOxS%zybs~@bT60Wydo=fa
z$=G66b8M#_hu5qPc3Oo0Tp&8K(kdk8crJ0h{w5u1^?I)8-gajh?tEabM~gVV`T~~A
z%J@fdLN@L5iK&?D@-+3K0ELML{q2dCw;K}T{Yu}yeA<FK&bP)svz?LZdK>1CtiqiE
zsO(JhktE2|4+=^fLGq!<>NjC>A?Y)XPfZmx2wC{koA)~}-!p%lbA=(zxq11Z<LO*s
zLJxf*0sJ%)$Cgm%6_q1nsh(poW*@6eE_G;FY#Of{N#0z9E_vh&HOsQLRMZ_fEnJNY
zc(E<F<c!eUt!`)uZM*}g=x1aEb&~p>HN-~j8xbk?!&^HgtG28gjOqAP!G{(6C|4;=
zzfAgG6OJ$ehq`OejmMIwr&oG>V#OXX(3_AjCkFiJ1I8{EV4H)Y4K#6!JBymZkmFlE
zskAy}4)kLXXoe%T`N3dpLppMQr%@|0Dtf4}kI5O8%8>xG>*%ex&@EHR{aN4zsn!`X
zpDR2xoUlpbVqI%fI}@&a>&vdfN`ig|go6<zgEFgf?!DkU{_zT$bW57L-tKVLe#Gc1
z0z7kpSvsEMWi>*3V0`y_vE2~g0QWA5i?~x;mAuxbvr`*=d)|GSgE93zx3{Z4GlQgU
zQK70`w^}OFP&W2Qu#}4=PHnBf4++rk8>UKim6~>wds<3R`@oq)Tqy>g)MV!GS*rv#
z1JBen4}J2UaY0v5%S3p#nenud2rHB8PYr|FU|j|>L2kHc*j&bQ%GbyX2ZXT0oNRdv
z!lG24Be-+{9iFVcA4%Q|CGTmas$WNHW~m>Iw9-kSk;;$>-cd5ocTpM$=IC2RoB2;=
zd*Cze{Hn%0teFW81ol)-j^<O4n{q5cj0N(~Wt-b~Y-IYw?QF;KO}*&&${5>M6Abg$
zB=h_&7Raxk2B~LK$rP+<Jq;bPHoj`JWIC;xvdcK!4Dg{AW%1o70qA#0%emD>Zo1uA
zNNiD+SZBgmO;v4I)q8)&s=%(7Ul2u_d*+5N$5xbOxWIRw{TyxY*d(*k<4@NX<WMH~
zLV0rLt72JlBqE7%caO`wMBTrw+?sH&*uk7RLG1hj$C~y{=TYJFa0{jVi}hILZi%$Q
z<g*E}v~-hZdrb?eV?A!~$Bb>)rGSNEhUpP=+=eNTpmr8%TGbzTc(;Mi#f7e8Pmomg
zyU}QW`Pp%m3AIW;6OSa((Y<LJK&)abl>*wCP~0e^iJN@C+W7#p-nVAN(U}<z#90Xw
z#%0f8d=F<&sI<|`(<BvDt13*icsAMijEr0O&`Ro+lmVcdV|o?hA9q|}r<c`6JIOf)
zUMJKNBd+XoT|T1}UaW&HpTIR=9V5gL=uf8gE-0d;4bdN-&Dm8wE04|)H_in%ui4>{
zk03TNeZ!Kh=#KJS=T4GYb8t?>!JaAo(SCikMhn>3mAwVwtHur+uJdQXw(P|U+H;QJ
z|JVQ-09MAAOEv-?ju3?f#GJ#y2Ul|pKOuk2uJ!@OdSB96phC$cIv#wu1wxhyx7SiH
zKOP;?=rB-suYHabDbE&YVj4im3yp8j$hZ)^mskTFu^q^aP0QEYl?)N#YYY>b28Y01
zHkML;+ty{X*pTGn?HLHl(I+TFf=^j9+7r%jOJNjZ6K6<3DlyZLv$j#~Oltk9Eip5o
zQnq!<3YWht_J+~-noD!Y!4$<BX2f;<3yYD@mxaE1`%Sk+x`0-O%&xj>=AEL=w${A^
zS!H*Ei=WvIt3Nj!ONZ()u6@8fv<BFwWSbA?IT~Y5L(@Jh$HAbP19-Htt<(f#dXoz1
z<W!p5aO~wOQ&kf}s78fzC>>y336|^6znl2P?R%i-p&qg|jaOA36z`yH$sN^yb}<B5
z7|kv{5j(f+$vlcgKPPrQ4kr>h3wqK*do;TqzY=%Ard|tLJ$bm=^3<WPK8N~!6}sQW
zsQEME(K><WL?F5yn<15?hI(A6W+)R8T}M2-L=@3gV{z++%~T!2F3KG|Yv3FUpW}!K
zaX3s))ut0Lt%!ZuH1V+f`r_D7kkE^X`O>ZDM`dhGzfrgV@*2^C()M;&idl_hN=g3f
z14IK95n!t#AHU8z<df!LuPV2_q-UC;+@$(ZXhe{I>}<Ms_ey`6OfH-E)pkkwq}#Qn
z7Gpu*ug@oLIQzdXBPDn2Qa2^{EJXQY0LT%n6S%Iqe8~>WhvP1D<FL$`v$KKO4Idx8
z`}wOjQA#qB+Xr%G?(Lh$#erWcB)gWLBm2rM;#f@1x){Hj-yf6}I@ri_q`k!;P~l0q
z0&Ee#XP#}%oP7Xv0L~1L$YV^=!n$P@dpQYSnDg7FY%CtTMx%0%za}#^yqdy#^N!R*
z%OgzPMjEahc7OZ4R4P5b5Sz+a4q$2MNl2{Ye!9%eL8wT&!uwFG$||s@hPML^9C<RI
z5(sez3>+<H)=P{7Nhhu_Zx{h=>4vp!m#5__sqMH=60?VWqLF4~W)w=}4}{am+-O#U
z^W5Hov)FcHxAFL?Asu*pTciRYUB~4`<9gU`#~`}dE8e5w`XNR&lBY`JvRKk^ro(I4
ztq+GO<z8!OmyJ3h`c;2>^JU1k#Qb;%D=GQJBfvwXtz`UBq1iiCTIV2ThhF3RKgq24
zEwEdm%#z2qBdc8#RfkR^zmZVcie_1wf#mH}(+$=jKxQz9iW|NSSyfD<Tje!x*2^%@
z>z*CJR>7}9l(#<x0$;se4B4kqFdBvoh_uh@yFU*o5c3wYA(B^U-hPi9ii6e!Uso6%
z9GIdUgHzZjah%f56LvMLA5QbHYBqvY%-rGyUhOY60}>=jGlkSh6_KnI9qAa4*wKD4
zRL7bfn1iunmtT7W-X0`;7F?nkgH&0XFmu7A#&I8(CBL55go_uybuNpCV^X5^vD*>Q
z#zBJBTd4{|yax#>DnCZyRTA58=Ze2KD)|-dT#K^N;8dW;D9J9=SW$WyK0|R?Y2V)-
zOfy6}XBlxsD#n}~myg8Q)p5@(dJ;;#hprjskP=oi(X}(=db)$FuoE+f!F%ra2pvB_
zdkd(?vNDveQnBB1hEiOX)}J+@{644nvNk5x?PR4krD1tzyo;==RCHJkmU`Y$c7rQ!
zdv<eRdl`xOHKBlQ8e;gV$Zjian<H*y$YVF%vv!$1qFLJeV3WMOpWCopaUmqPe1Mx1
z<BKoZ@1|u0voUHD(h;33<O&}3dNSy5#C4I(D8}^c-X~efVwhj$!Gl!UJxO0%Yf{v4
ziTI<Pbn9~6#6o(syl%0V&t%goj6!<x*=4^X+PC8y?N8eqA^W=#P<de)f*mrHO=3M~
zjHXtjieIj_xO*Wee>pw>v_Tq2*Hn;%t?luS5iSoGTJOns=dEy24oeS@7KAvNV~J*V
zonOf(u5e-AcVClL#o*6wF?>zX6={92b_TvUc4M*{Y#n#ON+zK5x=y!(+c!0Yo^=f8
zK+MNEJj<;--B8nJ*+6ZB*bl*_h{q-cMk4aTN)gW8@@Z}|-LkQ(lbv7NsOW+p7K9Rj
znt7Q!$?4kJ&g8i1QX&s&xHK`D;lC-Xorw(1ejFysB<cfn-|nvBHce~jebs2)@g|>5
z@`{PQ$<E}ZBkT@2C0>Ly1>aqdd=yh8mX!06mMZhqNT~PXP`+USUb~R(gp5Mza|v9f
z1)1Z3CcfP@KY6LfVby#2OkJcMbN|KMB<3WmTfzMCxtN+X^8u~FZ`U%$5SZ@=sS0fI
z0o7$&V7<sIhAM&ad-GP~SCgZM@_0qUpwK<^+l><P`9xW|V<OC;=8(6>2rxOHd4;<&
zIO`~QzLE^tkh9*O*Z5g}$uA(Ki@}Z`jEOsBkB$)CFdmM^DV#O8(uu4j`RDRCYK%e2
z{WY6yF$b`~QCoC);0d>23z5l+JFA_g5p13Ejy$XK_K7KJFSJLe{rt(b4_m>92U}>J
z&U-q^iT=6cyNp_kO|p-OZw7(g^3$t;rk#;<<;=b+J(>aJbMSA>ZKPhpgwJ46Mj}de
z8z;=zAqggWkNJ<ZxQso26{grBtT1CCLt5~&smMm4c2Nem7)GzeuYO$8&cbG{bs2yB
zE|Bd%CoA6RJk7M*>dYRBUCClk%4xRDXhen&A<v)N)sIF?x)HvXTIbgsmq&q*Dp;0B
z8`aJmeN}!;?5+|FeOJz0&YPfV;l7m@{n@dw9$oVICG7*FE_y$?!<~)HGIK`_tfGb~
zghYDZp1(XAnP@r#5&5__syO#_-${OqMGiBLIzE|%s7Lu)dk!tq(*XdpxoIv&<&5N6
z<nu<aL(SPY5J~4uq|(~Vrez}Y$Z4vob%1oyU?93tQg6fVxzCWVq{6Hf{%d2;L^c1&
zT8*V9lo91I^9Id2XyPp)ZmIzISxEObiac@AdCgC*x+kNOswx(il6$k}0zaQ_YoCO#
zC9^EBU#*^dSS-$?kO7LR;(kTyUrb{}DfGG|hqLD7yJOevvOs6aH7R}~9KPrT{j^MG
zI<V;Fc>9(Zh$`vxv*;dSwTF1i#W#yn-q|V=HpDP&!3WMNAbw7%BnxJZ^~7FmxV@}c
zV-=dnRZuh?d6#ZP5@|e8(HgrY+XsBXr+actU-q{6gX<TMGU8jGQ5_{Ps`a61@TXWE
z%?Th}c%XmV*&k4HT4UUOtS9%G_`oST0zFcBP8ijL$kTiYfdet!0w0>@j}0;8t_Ho4
z$Oig0Or@_Eb%yqi6TJ@mP&6gl%0{7KPZ`)t`M-^IN*5!LIzy88nyP|^RiK1sH6Doa
zEMFXyw1{bXi@kWovf6E1H0DaPWZT5k=tKc`*+`>csiLO!HN4BAl#3H3Hcyj#K!RTB
zSz&M3<a5wQ!jjR7K}+klq+6nd7vucyv*1B@09O*G$t3n5KH&7^o@Gn#Kn2_^T9SEo
zZ>%wxomqgT{Ku!>NEa2VAO>YXHIOT;K410I`nrEYdKU_>70`c)PSKsy8X5Q_w|Y`2
z2<m5y_k90kwf2Y_QC*B&!0|QoHSp+o<jh{gRTp>Fr?8Kk+!$O~1wZ$^|93_oQWOz-
zd2P#l;K$yuMDDk*1oJ7u7Y%YQPn=GZo?k2+<B?Csg*nI)_da#%Y68S2ol}!Xt^txh
zF4)<sE^v2D)`_k7-k$s+&hLXzgI6IdGob=uoPogDUO#DXvp~!jqr=t&uUw%j`p)nQ
z+uVZKmfdQ%$pqLlBe1ywe!-(Zk9i<GXgED5b({K%h20-60M()SjWEz1aB{u5`yzV`
zxh~^wqIf6mDZCGN1>6_B=RZ2!I2_H0@*Q9?)=GKVvYaH^L$$CbZ3m?-HM5gHMn~&2
zQIS2Mn+TgniANsljL(($^oMUIt{=9%E&cu@?Z7Y8rJ--q`5>SMrNG)S=O2lk0ouFG
z)1EfWm9BC|hZ0>-C!zolJkFt0ELURxokdQt|AVUHxbp)!vMzQ6A?bHc(4h~j=lEYV
z^nck@fE$MJ-w7hul7XU?6Npz(P<<euGc#xUfdvFIt+vov8<>W<?T<n?Z4%zby&^Ah
zI%Svr_6Z7yNd}3`dW8MZ#@_8!*qEXNyN6&bzRoniS7hXt<=9Q?i(kGkRMC&ftypLz
zrweZvRuo_BmMDBr8?+kMTXGulec&v%&_#eUZ793RwUm*)+7VHsp;}KOZ>bl`e4OcT
z@Hr%x#>|bBpqI_ls@$qjL4lzTf|Mt6lw7zA-;=s%#51HQ2NJvQ)b~-fH9bGCY}p$y
zP}fA%t<G+w8>=N<J>7bS>-&PKuBI;h1Nr1eteMfm<?NXw==(b$6?=!?>90pcG|wVF
zd6;Pg?$RChZm-!<vd|IhcM~=BDeTii#a|xo32QSA`i9BGx(sp+qys$byL7sr1(@AZ
ztXQyhp#n@soH;DN+n!tx9U&m!d?{uy>o=DrI<KW4sKc|l5YTPLw5j|7n%;K?3MNsG
zomwtP1Dw``&9?bc=WBAgm`MEAoMJH^u6nWDcOLh>369~zmRrc5M-Ufr4G`v6qc>K_
z<$Hc@t&<4>s9phoQE#J4q`QY4No=|VTrZcMy!q6zC22Ua<k(g9^+a%<`%sEul4|R`
zb@?Ro^{+oBER1F6OD{P-D@>`maJ$G?Di!nyd&+)bEK8{)Tp=lulfdl8Y)`QCLtA>(
zpK5U?&k6Ont?$QPd-VC7!sumXMF&SWc~{~A(FA<hcnXKThvbuMyOMLo|D(kDl=3ZR
zwyaQjLcLFz(#FTY!4XHV-mi`8jwNH4_XJOvy%zcLBR6>P>EmVV5M?rMm*t_Cb7FE)
z!=YB-Lp4PAEsWDPg)3kN`QEDa71#BCsv(2DLQgPj`IUvpn%3~VnK=|4`V8T|7rDIe
zKqQZ5f1v>^@}5fh@lGw$zHuj6bQXtKxtKMUz_J=FCoV!LGGJJ%Er_ozaHv#M!22Cw
ztWr40XQx7k3Z(agqw8tqA7?M^P6Z=LiGG~{m=vXz{iDMtS!KYLHdCz1cU;({nSAi5
z=XNPk%1)wL)+eZ&*D&Iy-OF-Zf@oUjI_zb#cPVqR6^m1yIEF}IU5{f-2wD_JR{K(+
zIoz1KH<d5)5ei!OzXrH<nQ)p70Frv8A?c+E$Vf{`w!a=4+;^6t{|9+$XfH`=PpV|~
z?;sbcof5Es-G%xek}6g}FV=1lL)|Q0I*s>dP`+7^x$3*0OVwH$N}7sWN61As%HrwH
zCj{Qn1<YUU_Z*N91;9t)3C%9c*@_ps)cSE;02Auh<pWyD(R>5XPMspn7g&5Tzc(UV
z0@6gApLjfcSc~kv?bzB2ZZKGbtd}?t9av#i*;nXJk${A`$Gck#C+fK+k~WTie4fG4
zbqg-OAnk^@)|`$^ubW-!9G_Lf&4>tUwJM2nzWJ0eTrx~s#Q_X+2tLD{$-2;RIZ@R!
zTMS%1-fch~tooH|>RK}zMJLc6T{51MFnoFp4uYR@2v?H5Vp$22ov;X{=I{&+Mfl?t
zAlSHtIj>98^ZH#RQBSaVefyI~hqf;q+)PKzasAOAD0p=t3s}=QAx!^%WAdqI2eI0u
z_7k}z&9-IDgX?Y_BS{v?H#sGtTL*G!(aMIM;zc?fr&n8sz92agXX_{LxAZSWy~ynC
zmKfvL2E%fMR})c<x(dj;5`TN{In}nXP=Lu9_nw-=IHZVs?>Xm-S257s7f#^5{;}Kq
zCY%;Ax5{WqVnq-?X>q8D#=SgxN`auJL*j{k5i3}c?eJGM+1gM9txP(WYS#5peMzWh
z<iz#^++k)6AT&cqZJcK1s9dG*3b{UZC5fn2$V)~V0Jl4;B@^5tNbf=`-;GSf`QQT_
z+2H=ds$e+^=l7iSwiE{#>h*8h0_J>c(!zx=hT0j5U(YipYHbVbW8XNiQ#M<`Xmgex
zPwvspNs4^vI0r2JBETcyCyS{pwE(|{;#ysf3L-n+SH2i{Gx}y&BMg;RssiNbO_zPT
zS?Uy3ga8+d7X?~u0UB(^=f5Kvo3FxfdM5XLGfr(d8zs?NwtUuf<ld-{P38AR1iHZo
z1Zt#@b#tzd&mqq`$5~ttM^=^xcH*VtScicl#z99%tTjo2UlN{=QMEI~Uab<H@Pnc;
zGQMbl8!FdUl@A>>i!z^VM#unC#g&_G$p!WX{kZrzu@JxDVj{+&P-04`vhHL=Cc*A+
z?X>m04V)yt5PV0^F|z75v8s{!o_>5T`oR`%;9Qy9^sG&<`BJpM{H=W`I>9hU-X;py
z=}Q=$!1cCmDy%HTJ8>8U7dyRAQ7G!FpKNT~7II^U<Ycqc%d;4PN%sNgl1j&9cS3oK
zukbGWIn1FmGz~$_q}L9%E3UVemFf)umyAqEd&8V~dc4+{#}5HJ`YIKViQ@^a43Bqf
zX+4_uzg53onsZ6pboD1SHJ(VC+6+HT`@lV9yZ@c7I%mRro*A78KzLR=o~?oa+$Adz
ziBRYUcwK3Z1cD3haI~7P2)Ja<rTa*KZvOGfQ*DGlyJmg6eE_tw7CEH6-1t_MTVdT|
z4BfD)yq@W_!Iy4k1+mkbarN6z^w=*4U?&?txJ^vq+@!z?pkm_4pg|rX_>onZD#uSe
znn=VayqqWNH*p<7yS;dJX^Xs<qmQzn-+r!3^_iuPAE0(7ZppdV`NIO^5`lM-)*=;_
zw!KdE!6^UE^Db!e@wB3dHCwtvar9z+<-FWO;HX7slym40#7h?AHV-qyH9VZ5GNVp5
zfTR3%mL{URHPa!`T6&9f_I`REtIVG3(*rU%PB!pmy+c#d$HN+pl)1O?$ENgUb5`;T
zz?G6}@*-|7NJgJyIDB&d={;*J>`>KrgoBBOJtfF<lzErbRZSdv)ijDg-gC%|=CCd7
z@45{fxPq3g*=9Q`2i>xK1e>#6|DGmJI(uU!4iQ9>&<-2h!gmJZ3O8nb_pRY_E~XGQ
z^%a+1_ko?N?BSejJL6#NOWBZsb0OfWC>ZCBau>(BBu=zkcVT1pgg`|lBSX_LvB^<z
zIAI%JRTfb%Fi|*0gmxv!EsTXcaX3h3$t4!Stb_v<q~PT_5i2wtncXaf5WgU|&Dqd2
zRoCDuL}kprZxFspZ%5L+VN!<sRg}evqiJh0ZIF~_S(j18<4U&A2x(u6uYbcwcw8xM
z@sAcjK3ioF{cfuRmo2mm%j433gGT%mcW%$oj_M=!?eH!tU=nn<+0g&<?Q-s<*eM0i
z;*|XJlnWT|n1%4xF)Q{b;D8M$2iTL!eyuU`ghr2%%*f0b$vrgSJ9zGII8g=__CXtU
zJ>z7zvV!AO%+~Df8I8nD*!Af3)c|7=#sO)C-l6bSD&UK*1dNILMq;Y|ZRPsfs|<v}
z4L;rOU~&x!6;zo02z3>IL|dM{L$&({{z9HQJy8##N=sF}!haxhf(EL%T%EQZYd1)@
zRMt8-xrI!niP=&a!udA954BZ;$izJwWVS7$hs?5&@ac&kOiKlwk@W@JiDYnuaq1_p
zZJ4W%{yLpv_KFbDUXWbCjXbJM_c^?;d~_J`2VygOd1LgY;OsUk$e<BOt~=ozg}gJZ
zSU>a!Y-_lYH_n<bavw|=0jM*To>EYGFzro}le`M_M4W0dG;-b|{O5jK|H&y#b$>uO
z{;zh`d9*3#r508Ndl+^FI0g0sZPp4Wr42lNj?PA-1f_I25fksy5I;e=BCjc6(D+f&
zLE8U_MQ+LeZ0TI1ol0=bs-ne-{i8zID#-0;4iwl2+Ep)xCEg@=+WDJDp-nfcfJys$
zX|-_|DVa8C8|2p+9ESLt%$Ah{%_qR=hdBWuP0Dk;W7=&$oj3c46HQq4n(E(xH>Tqu
z<Si{hEFbx?*}NMs5{o54t+Pj5?C)-n4{=R?b6)?C*8bDc5bP1AsWI@$)^7y*AHDv$
z;{K&0N*StzpQk~8e*6W8{dp;wIEGB8<;!^g|AeQzcf+EQ40D4`9K^lx`Y#Z{f+y<t
zi>uA|65qzVPLN4g|B$W!Z$gXkFuh&b?+iAq@pf|n=~8)V|K<$-xAbH|^@Kv+nf9`h
z#64F~gX6P*2;l#>E06uU66CwmWIN&be@C=+Bidaj;3lx_{MzsT4IOAfDbOoZo5nFr
zcUT-3E9+4d_-GC$%gyuO@qSE~dQDa&2`=$j4a>v6OHur5y#Hs|95u5&U$3rzy5vE*
zV=P&IuenG6P5w~Y@Ne6#Zs$n+)+r{q_(H>Pb*&ZgpVl1y3jmSV!b2r)A)7iL=W>n&
zN?h2n9y3OhG5<N)3;)X)k!_FsYn}=vuSWy_`>m$v&j`fb%rRm;x(MI!)ssINSofQ>
zoV>&Kmp%RZdj7^gv770sF0Yj*ZXEGSeC=fYf4Y-nHfZTHg2Vc~<6+~Bz=7W+{eM-+
z$%@zL<e=W!Aol(U=!z&L+Qe7pT#fq@<sTw(vfE!(JXU_HtT?~qgK2q$m`P*whll0y
zAIuf*7{~2$rqFl)4SyxG$0dyyM`tp=ej8Mh0rIw8449hsh;NPE=mo)5Z{l~?BzL_V
z`Ut?$pCn%7#@R#kofP7zMST)&3ajGcovQC&11~U974;WwQ!Wia3U=0&?&6n9B)+r1
zi4poc1Rk*oh!=@J@~BteQwKIx^Ikqkt-wThe7HQTrr`Pul3eZmoAvrACbZICj-xdy
z4Ps2LTy!_8bbZlag1V2;dAbA9dWz*1Ol3EigQ&9p)7g`0fpArQTgjy4w0B3a<+-yY
zBtL7%j0lCwcw@k<L8kS6MDt(Z(m|mRo5Jb@#s#iI4MfJx>Qaf1T2*7Syyq#kUQxlG
z+}yr={O>+=fu*$tpt8c8H+0foInA9^klwyJNu0e|dD5>=Kr7p*Ea-LhLA7SCge%ui
zrr@KTbN@QkoA#^8AE&mZy?bc;2m1vR68N*PB@~ZcOZYH;4UY}dW?vp@eIuFtcURu=
zoqhN*pteDQ=(39{Y^_mvdduN;Z~Jzcz13U3QBS@`h-M8!%n*anCM<|u_vCaQgYNFS
zbW`J({)`mQ{ZuMrW982J@+Q9RL`*Kj$?DTOz)p5J!Euss2fe17rI~B<)%t7Y-!W$K
z6%{*txE;maB+)J2y@YX#-<}KbS5%dTZ}jSD>0uDZtqmbKbTgulo>s!7QjZ3Q(o4jI
zE74(f%Z}hnM}F}RcCw<v=S?+0&7=|MYS`}x&wRDtiPbqarFWh}LfpZ~`t&ci`<ao+
ztalb3wZ1uxykxhz>t>+CrKb#C$h}<*=n!vodZR1n07Ef(av#i}D0zOD{WrS=IbH%n
zvWi*!+^`O1kGh9#9Dq(`FMu%bx(^QHSz>b!PX6t!WWKoe=}8^`l=eAF%cu{DXzKSP
z+&QcJ5owj*Sgngz1rHx!5LP=Qo!TR#gF<u(J#lKPgk{4(X9~ROA8i)A{?v8zcKdkt
ziNwm~oMSc4yC>Pk7pPO7yp31+n-)}$%+s-HrwO?(OHzAnz$UKH(ExPm5I-mvO;5Bb
zD+xF(N}SorgQq9wv-f~i4C{QB1XSyGcQTQ`{fp=RO)7(;3E*TpBx+a@7y6_IJ~Y^G
zQVzU>=5lyJ|3l*G!QXM{ekD~`VTlsX-fBkM`nhc9w8wRP)P%+LOxnZM0#@s$)y!MR
zS7u)n)4WqUW>n!EQjzz%d9r}|VI=1#9;=w&$@DyEs?jL7y>31PW6*Zq>1n$F#Qe3^
zZXv4Z^f~&!hw2`m#XVmcwf*}!(5-8Ig(dc11k<M0Z}}@5HfGWtiU~4PtVu!*k4@R_
z*gt{S=5xbXEE0PrvI0lA{>mZb7XoP-x`@iKBCQ%#ucwkt<@K>fkEZGhJAPq~zh@>k
ze5K^T=I=WOFSGvoqf|QAPZQ#4f3VLwFL+R1=uEpY=}~=(;&uUzMF(AJs`T^O&)M5H
zn_Ch6wHf7JEB$6JdzV+w{b4u=Idyqsx}hY0Ai5c2UOu$)^ji)wEgoOj>Qh2@{-+`S
z?x=bo)13lVwYYo`Y0qrmx*4e5Gn~UUKU95JExo%HyaD@hnY?0A5}|4^kilH+8jS(%
zDbyV1Navw*3eJqmiP1j(<4+aLA+7UiTR#R1D|ZeM)XRbZw$T;wrI8s`?}O}|TY8>u
zUt!bIP^4P_;F~SR1jEiMwjhM_@ZnNJG4DTKrBsmmsjjtB8rp7}oGa=$@}blIRPKXH
zqQu*k+4&%pNy<j=J!Np!fKrP%nQq6g>T{saIzJ>3o7mKdzpL$iy8o`+@&EWu1$T(Q
zCN5ssv+1=jb)9drIEs-Nx3ef+-CZeOlxjWJkV&_7alD#fjr1=BSGLEU{5$*&o(;*F
zzhzWwn=NMc@kT<ishFr?$+yXdER_uOWN+8pD4(vtSMuRzisUORJ-WWZ6SwvrAgdU5
z8OVe{xlgs~zT{pbqviF3FMz$v;=7gpG)-=)QGHmJJDxQP{{_f4N+c{#i4y2Kw!G2t
z`XF$-sM~ArGKW~n{PtJ#DkXeMfBUvb+!Lh^7YB#${0&E(PO}c!2tQ1>-aexqYW*kE
zcMjEqA2ab)5Rf-TWIogV*+`K#l<+<3JAe2})s@dI?)bj0lihBt747#64PXi6^S!!s
zxqm4gcDQlUA@y=JxbFbqerfbid^?&(sGs0__13rI>&Q3y^LQf2n-oRAdFpVyBSrE=
zp3uhS^OP{D()7QWEkvHEFBsl9JCSLawJZKQXXbrwiS9MaT+Phf>bD@f7ZqyBXt^x%
z)c-%et-j0r@cq3|Tw&h2mf588m7aOoFUdy6<}0FCA2j7?U3=OYGWO(SK=8{`$8m$=
zlYoAU$G@j1LJG%*x;k%f*bO;Blo0m>wt?$&lY$88JHL6eens8o%cTZ3HYJWjZG|74
zQ-FyJdYvU7&w+$fH+oAj_^4PMd%0S%mc*-~3QNA-zF|tFNwB2qTK-CsCOCc9dkXq%
z?9|%?UM)JMRX4@6hTrIYj{gu-Ht!3mdM=<VdSGjAa{$Hm99Jt4!5sEx2{Q3SkY8_>
zK}&h*g^pOEWL;fovCwd3v5WrIsD7#kdScK(sQ0yztzwt+5A>LB<Y!d((F$MYZ5%(`
zHm!+MR*;EH?i#nYU0V;T=@MU1TS!??PO)3_Oy5o^brsFmNS&V=a`{G2$wTo!pJR7<
zUP32CyrNbFu9a{5q1xJ%6=T3O>xP@Q0n%<`B}@9ZkNxL*ZviO@)u@26dyVx7N8WBN
z`0A#rjKVH&)Ku-~$;)#ruvGk01z#S?lTRrA`aE%>v@DjKKK17(^>1e%CK$K6U8HMt
z0*@+|Y>7@U1jd7<MXN5BtT!|K=V`ybNYH-TTR6)g@w-X&XJ?s85Nt~gWi;)BU^g8>
zSejaMCWotu;5F)XtWb$s90-{W_@egbVZQ`<;znh0upQ04Mstjbg8T{Lxg;g}GRLhp
zBy(-;G9056Q{72(RWh!-DxB+%_J`f#w>8vuKM2FH%Bx{IH`-qK8gN@NQmIq?_4#B-
z`D}kd^x8P%Z)G;CTeJ=%UV)N3C;b{B#l;$MqhYk7JUD>Ch|$IQ#>X=+YEqOPO$#yM
z?}Ki8>PY5^bC7wd{voHI7DeGoK+h?qYrmevvv(4Rz8cEltzE`CX(9h@KbIu`BSOV*
z2%Wr?{`gf>N&cJDWs9xnY&kj>1U;05y+!WuCPY&G&*&bha7vppIN;QVT|5unAMrog
zQ4T0DUNRXCN}E(}wKLk~Re#WtUsEHeDkoH^7ImHNA7fx~o^s=${GN7Z>aU-Nd8E8`
zwWCg^w@ms%8474bcO>Yc*M_X}#Qy4x`YWa<o04~~o*JV1rSfCdR06rxxpz?XJ)Sad
z)2`bz<2SQk=AQ0ltZ~fH_{Rg8D9NKm7ov58`IpAUfELT#-NKh_*@e9X+a_L|);arP
z@%iAyHDg~rjz4|+sWD0z#Y^b13DvxdzeTCxaqlew<vGj{6m!s*d%ll?o&0Nrx*G<f
z%3hzg>5(s?xbxd2eoN`Z{A9Ctj2JuoYiOuALO2Y++()rgmw(jG*%LTnvdg(rID4Pk
z?510^*khGgzMuB=`)2ZY=o#|;;LE%xe#_N$S<2NxaTnN__JT>Ww#t@8A5a#r>%3P_
zH2_(Ol)rcEe{N+el{j|c@B<2Guk=%Tb$2EUZbY}?20PbwO`R&Rs7&LlO7xz740qBk
zd7HNmHo{(^B5yU9o>!oOqQ^sj+sq#u)uXhW`j4M8y`##>j?GCnf%2K`wW)NE+-OPH
zxu(Cv9v|<Ojci=Y<b+FFAD^O}JjeX)gKfTD%Z44L(X&4z_p6J7RL)vG)93z-vHJD1
zNlo5D9EAC8pQijFrkOO*{<97T*uYZtz(8cV;FP9mtZe#9#{FZjw=NJ<_Qi-&WuNW*
znf@cwuP;+)$bDA%98Nw8{%N-N8L4tyfSIM=+D1oxviGxv(WO^hrMtCIi&bLJ<whHE
ze)5!RT_}ob|5WqYo2usmo{MOvXYbpky2Gdi|D^&TAH__%gFWws-(#V2S<1>vQ0Ed?
zh7{^XQ_J|Pi&0xL95Xrn<Adp{AI!X~lHqvw)#k#zFLx$s&LV#lNRHtO9+D)~jPFKm
zQDd@7?2R0gi6TD#hyxT<%kgBR+l?ZZ?)?rnF`p{B#f8M2MFQ~??N2L&Ce9zOi$wYD
zscLxY0B~{c9H6n$r<a5x7!so&+OkC$rerm=5FFb1vx7yBKl)eWL6^yWh^2U}{9EsS
zAd9WKoO5hA9_@Ofpmz58mSq3C53sKu1-_ie2FKD}u{y@My?na;9}Y!9sdi-6cH#fg
zKG#`43w<#;#{kxaw4PfCD#rB!rz*ZIz3$9(?S_}s^2<?7xZmCR)hYE2ato4s1SavL
z_<4-!q!;Bv$+LIU-EQPCB3A6^q+3`hRJ)3<eipUGGVsIlYfb|7^uL5Srp<F{%IVpu
z&_7L{E&blL^Vs<%ye%!*4CwOo{W*{EPYd}Cern<u-r6}DF`fQrC}Wa63JkDf4Kjc8
z(U^uteR{d`qP9u9^ja~u<f7#x9c%sxg}eesmhKhL@h_n~?7v6;w^Dgd(k9^*&xWhq
zxB2b18_}P3cBY+I;k{|WEf8kCl?nYUA?~yKUGJ2L*dZ7P+rNfG>@GzsK+{K=o#Cfs
zQ@)fk)jL*_2xLR_Zv85Z67jBMOIWr9od8R8r}^i@$?rZRr!vEC%D~@hnNkfAUNRF7
zwf*>g-59$kV^ksnco6S$wi`n%#GU`j`7iAmT(;P{9(Dfp`|e-=NZ^rLiXA@3DU*7q
zHktuy+tx=+ecRz6o7)Q&Z)S=9r}HvxaFG4%;OW`WUmX&=HWjjS!x6|B_ozOWc<>11
zQm&!=t(DHdON+pon3-hE68^8;6n^<wx$1e1v+V5DKf7*mjq)h1eLsWS(BRUo*#&`8
zrwWBm7?CcHy(V21=Kwog8?%@G6D@vwM*2x|G8cTsbo^%%Oz){$vu{7}oimWft9~}2
zi!(|7N`lY{OU@`6d)&=$x4EYBuluP_T8x!YUu6UR>RldPh>@i%WE?HjB_FxI_K=m9
z3!QoYnD#m(;hwfcRzwS(N)sd7zoG*9m7bJRq#??aiNF3KcE<vr@NsocA-!5p*QA6g
z5GP!6-)6}f1|6o=?F@DQZ7ILZp5mD1S+Xa+nTWadOFxSIQjnFCF_qO%sx!1o2rF3{
zXWQ0QMGUzzsPj)8@UwXQ%Yf8B-62~L-<gZQZhsj2sS9-c?(?L!TL?OkTf_UHd-3tQ
z4#8+lPGSV*zwQ;&Cg0i#rKb34{N$|I+RAm~OzatCYx#7qX=<JjI!;F}c^+$IXZgea
z>OWPduF5QhyOx{A5%%MEtDpGDlYnY+J^=Ov%D@jktJdZAB)^qw2wj(j#o-~TH>Ym>
ztLsd8d}Je9K6$$OS7@N(4LLEwuWPz$t>cU<{Vq8+&LU)zA7zE_1`$TbJ$N|(?Et1n
zQAm!%^jFe5d7d&ZI3_pG7RMZ++I0)z7YDCQH{3`Cl_xgdlr8L-E#u+(cMIc3+85_C
z{Wbn49Vu}^Y#`9paV<;v<R5TnSCh9u><(O8*+sIyY*5;>Gt}$feb{(Oj@D_9H6(ui
zBgEp;pZsivQPq++QPwRizRwki7teVUb+aN5oRM#HP4S<qq&Vq!6a^$hcz*?D^(V|p
zP5Y-#(ZSn9_pq{+Ij7FYf&8CqeK$2ufm!|kqZkFHH#w+-Ih&{Df5||>CnXM%C0lK%
z6`n!5+V&oG;JGHyz5Ptt>O;%_wGYwcJ~VB%O#F%j3?K_fJX6%W{naIf{=otv=dE&K
z?#+A60}fj2X8%hZ=9v;Cd%!;J<uAV`)q^r2$xHdp&t{T>y|S11MR&mFT~^ZFniCcQ
zMnZq)6aTTrgF8H*W6M;|pO=61<=JUVOG{P1l`jf%`seu5036%HOuL&EliyBI@-U52
ziPZS#I?J0JgU;*g>tkkI+B)JzW%g=BD&Sn!MewpFzKGkZ9cjVL$PHFoS4=!OFEpqB
zU@*N)ysgM<5mfExeuhf@UC2pwH+d$%b1QEtys~x06lp1W`aV%n-ZF%(?UQkN?C~in
zK@x!bu|HfchjD*PzrrwnOz5ZGs9gFaDR@tDX8oWxw0ga~tStDhwzlN<qOJ9oWQYUY
z<S1?-r+fuDNbe6s$9X^*AhPWP$+llR9kmqM2hZWVb&RZFfwNC0WzR_5K+&p`*;Osb
z6FYJmkqs}F?cP%$ztzcd{N3|$#u?;jB2zdqMC8b=)fp&Nis!c4vsH>4w~07(Nx|!5
zf(P1v5;w;T>8`v9-y!R}xICdiKaou<*=k&1kimDeD-hOz0k1DdI)6vrYH^dN*kO`5
zTPGc^%nCYwjE*^v(QL_W2CT^VZKn3ez+SUr_h(3C4*8J}pHReloA`Zzx83@bJwASq
zPPR4}zW1r%q2u6=1lb{4(}JJpuoU+_NSjbil-4xQFr<lx8z*GCFM@7!DN>Ttxg}*E
zoOir-UY?<@-?Zr!Iq@>7Q+4&n2g{J6FDiMcY{NPkKbxsevv6~3yP&GFZM$I)oSi?^
zMMOphdWdcv8PXFpt)78_&f~`)>rz$x-<;;WdV`w!EU7oM;>C$2Hc^8QOnf|VN~n6k
zXRfut(Ko6}jl>EnOMZ+`N~Wcp5`WM9wYT(p$u}2s062VdN9O*s<Hwlt49Q~cMxn|g
zt{ECvt$cT9I!Q|zk|hd}CoyoVH3V8)&(b;XaLg3=?y>JKeh<Ur*0qn*(7$t?sCzJw
z12VH|BTqQVy*o+i@9$sXG$LV)2v&6&Ee-Km9lho}>uIFWgf;W`-=6>+9&BqRCc8It
z9^>c+a<{R~m*uA4mV7f#>j?!3|5$3&T+~})-syT0x3-PPiR|P+{WaLhBR$3RWRgCm
z=_D4WZb%cz_?|>InBtSNZ;N-@_uAYZt=Y6p#*GW*hK!&poo=(5d7X*oQibX0=$KY=
zE*zyF9-))gwzmCSbDc|Yx2BA+6O45Qo@^Y)xNRjrEtuMT@)xAC%>sAXEqDSEB&}ln
z`rG$!w`G5f<cD)*3hKu0YnR%+d8eQ{6K+a=aK<%?02x{Q$0n0wW=7~Q54gwzUO$^B
zX=WrigWg|AM~jJxtuoMfMabMy4a8>AG7I!6Eu^&cKK2&*ocu6_tZ#~tCp<ip&_ctK
z92^>&Ugd^fE6_^U)7PIkXki2l78)iOc2KSE=bQ9opF{;=cL;Iq-X9)ScQZa0vF%F<
zCIBT0pZYC!v)^&2q*DK+LG?~Sd=RN7d%mv!gkQ~ha(5SLlZr$etGYHrxj2)Sq5dnb
zS)!8=Uo=GFBfM(!Y|KxcT&CSP2M(ByV7)Urs(4qLh|@4<y4=z(=adess+Ek0?6%BA
zj|Na|QtKyZXZRDV2Co~*MLn7P5JDwLj#6U4|BtM%fU2tN+Jz%ZiKKK(NK1EjBOL<L
zEg+o-q`N`7yGxn_(jeU+E!}YFx*Om3yZ8J5JH{C>fWh8tuQk`4&wS=H_kwYs{F#1S
zusfFUWpxz;Fw9Ma@7Z*1ERPYm%sGl;V%@WH?GiATr4`MgUz&HRLPJ8TKlNpG0y8*6
zrKGGZV%vU0<pmv=91$WcE-Gqt-5g9vP1mja-GrCgf;J#R`~#8iVTO)K6<%FXS-eLz
zWyQsb=;&gIVJy|V6M+o444DM55ZydeeOp2rw+LtrzzzlA6L?=Hilo(8X=~aQ{Kujd
z(Y@y5$B)pHE>uiN`FLjUU&=x=62{|tJWf$S+Qh`<jg1-3(I>s#T|QX?n8I=^@ilu^
z*S*6PZep>#7o=d4_fYt-G-(HS@UHFna=+g)G!Xj?z}A{EFwlax9!u53V+oObc7N#r
z3DDz20x{mxNTWgJx(t`=JtZ~u<VF;5GWs8@GSa`(-Vq9CEWRp9?B-unQxiTc_>($N
z>kHCJygVWn`r`*6l^ON+u9kT3EwE)VqZT!BPzSF5G&{s{*Q8{&p2eB|v6K6Gs})JZ
zxYtr)mZteu)cs2tv}2qERg_I%yHK6%;a8N2h6`#<iM|F)OG~%^cyaaDVM?L*kBq3J
z_$Xk%m>&r9d0pL2PWmspRKk@v?b2s;;ML^rE@<b5I&AGjyZVtFhDvmKpr(i6(J!7c
z0u(T{3%0UqR9%Y*ZwWfUjP4~nG<5OQb<{@6_H?>V8eC5eaUU)Hg7$&+Nu(fU63_6y
zwTMlk2%LKO_1%(-NF=DCJS-1S=QwXJcnPbZV%;iZO)=Y=<5oV$FL}vaVQ<Ly^L1Q?
z|MKhXW7ZT9h*XIQj=r38KfrGFEl3y7)$1ERfQsNaVD+6$8e6sir+KCqd3xm|5G8k^
zTW5~m)7Q7JXhiZC&<IKT;7I0Viv~>qXD${M6-l`SxH}!pF}plHKCFKv60uOnl?ShB
zTM}N_W-NOUdEBvcRN4>H04Q17?d68WxX;_VwZm6emy-)fZN)Ji)X(_DRkFj~eUeuo
zJD#AKCEgv=1^`(_ilFu#nWRbYAXJj&be!|(X`0-+-u`vsQNHunhW8diCqOWT0o9{L
zU%v+SJH#FxO%F4#43%kZgn3Vdba?JwP;BjdekaM)(h7@qQ_1_kfN_bR-OezNP!|Jm
z0n*Q;pAp+E%xe?gWYd*TEt=B-n@$UEFNaQ7;VvRP+|!rNlJj0V-$ZSNnBV=o8o2-E
zv#*JMM`~0Mo*szhWE#$%_NJx_FLksqSw|y=;r>aE{hmg3AjA7usc9m;@M@VLI8bnx
zduN#R?lGqsxFx__=3STyVN|Zj2y4tR*~Y&DB38=tEz=e5Het#%90&uY-Q_lVBi_wN
z|ASpx-;EWkP&@4%&y?#Na(<Nx7~y+xAy9mhZ^(R|m~KHZnsa{S=4Wl-&^UM~SN<c%
zbCB*@PuyWbFCV}|to8IH{-U<GFsKdB>8p>gQ2(yH=v|pRg097MhGYw1alc4c%PSnW
zZg56W^Us9L6lrK^95*637ow{FNq1I>d{e(PhZxhd=QVjAKq<q?^gk0SERCg`=7FUQ
zV)pw@TjqYt(9jjNS_0cmSJ>g!nzeyGGatBXI2!2r89HKoSlisT@F-oO1x9gY-f+4W
z7q&1900Rjmq9cx!IO|Zn+Q2hHcFQUDGR>!o%4y)7?jncnkz18HR723_=4SV@M0{#$
z>6iTcd_9KMpVfneM^Ry6?-2R$-dl`j@L&FTslAlOTvAk&RZ>E$j3us)=#=<!Tg1ob
zKBCTgKGyqs4c^1bwM_mGC&%K|;bKFNHw&5zm5sIRyJKB3gSE=)@k&(1Qzty8ne9Eg
zLG6+p0`o6>^tU%X?*xWQ;bDPb4%6ft=Cf?Q`bOw9kz!TOmL)hZYb-VKfcYvSu)=Ya
z8mmG?<CO%{paZ3#5uAjH67nP>*JMIP2D6o>^&AYd{FBM<d@Z&8XZ1<C2+&@Xkh3$#
zlJla?CCJFoa3_LuISZRXdv3I8k=yy;d)LD#{}o|=K|ym%zFy_-BDT2`>$hv*u-4rW
z>I@~tOqXRhX#cw?+}c$xe}sNbTBE(o!^Ok$Smq>DfvQY|y!3z58}dcLMs4N-b@`7!
zs$Y6iJ*PKQU**u=v{`_rU@#Hev>-%ho$w@Moqq8AjL->LCX}KTGGYxvJS$2xNB7zp
zY%R_gjwU--{EjAF(9^Z9pxxS0f!vGzSrt=Ls&pQw(Ae16A^=rQRq6}k11Dtn^!9Sd
zZ7Nx|p`EB|@HFC`5+oZ~Upr`)+yC@Oyihj4ny`bDk&)TiEzJDVh@@HfXQMA_GL}-7
ze!+d8W09+1@H?H6tq^(>T^sZ89828#`eoJHF<C{bTcDu$!0KC1+iap;uW#cg@NIZX
zE5F@KUqcI;iUe=|VBT(}+VU+&5+Wi|8#rVKR6&8IA^WvLBJWoLh3{F7gVnY0&J1}s
zfWrA(hy;Ake7Mx2!F~^%=@7isX#cM5e1v!JLh$jr>wYlH{}ttGNQL8vM_}+FxA+ZK
zvymg*+k_7^2SM+Bo%Uyn1#3j>++b(v?fbB!AU}Wp^eH8vHD-jxQ!%lgrrww<g{W8F
zJ!f~5lgIgDi+Xy$HtZQ&Lfkg#lKEC1U>Ag!ES&cU>a0EU-At0H=jU9;Qn#w#unhp;
zpi+8z8MkAGk&aR*5+K-ePCs<>7gKo6HLzLmQZZu*TTb0fkb4ni97a`9NsD|b1R6w-
zd__ZqG=2{bAnfic8VPnIxaQCuPI|j7m|``6TQfSvadiD}*4;_T+Mj^+9iKPLln)6B
zAzPjZv|X+-88QdZCW=1#RMs-0l;%r39es~OcCYyjx7Y2Q{QPZl;F{&jJ_eM+jN(}b
zx2WnueUG@I;ca~yMU^-F;!FkUEKT$(J)*WLp`7oZoeU(E>s1MGz>RY*?{Vv-_kpG4
z8Cd|Mug_F!cG%)E1F#sp6IqxDy1P$|aWw6QW0*l0(kwk!k-SGrnVXca(r|B=J<sKD
zZ}%&w_it`)pg)nB#&V+sN{BZgWAA`fsq=UQ;(z84CxtogpRMs+NvojiIvC$?-#~Jr
z<w4%dZ5|EyM%BcjBIvL(LcQvEM)ed%mEoNW_HEt@E1oY29$h=p7gMPS9%WqJk0(_>
zjwNfHc!lf9p;&fhLeZh7ZQd#`YCi19Ke>d-=}ce{pqQ_A_||`MwJ1hMUK;h803KsL
zK2caB<r{mEzlg>yq@_EH7P(9+G%8AiAExJA_BA;6`Z$u<``Q4X)im6l{wV~<)Wk$d
zp{}|CmiGv8s(|jWSJ3;KFdt_+R}xi5T6#S5r*|+$G_0sBokm3-aN4&tFWY9E?$ZOg
zhR5U@jsbo5%30d9th!7Fr!DaS5@bD*-}yk(gQJbP-y4IMO#1IrUJP)(+OJHm5d^aF
zVLAOFy6eZ(2ycFQ8qv2Us#S$6`>JX)358bzQs+U&sT%4JG8~t9P}7Gq+y03xPQ^)1
zQQN%;ux_)XMgJFxc~~)0Qm84+DMCRBkQ%7i-ZWH<B^0{d>S&l68;@o1dmN;*JMF0^
zA-m|gEID0zii?ZCxteGCOl^$t{CI%reI_opbpjB<MbI3o0qAPkgK40o@l0JJ_CWS&
zAO4`3L;qC^iTAaz?vmqdg)W7jt>JYn2~@YmIsa&>rIff}e0;nf+y3m2w05=O%fq>9
z(WN(pTtYR<_IH<u({u3}pX>uPoUq^J^~dctkgE`Lb(2zq*(@w99B($0N-s+54fTwp
zi!)e0%f@zUE)SAw#Q{NJSL1;_va{f0a)!WnYqm^XR3g3W>o&dstQs1U7{gQr2lwN%
zmU|d9^8?nMVVIqG_Yx4az|9@A7vg@40dK&JQo!jKtwySb*US>_p6k62(zS@JxPQDm
zJ|vniR3yP?F%Ev1YkXH-WcKU3K@{t8)V7Ba9@iUs(2--l={+WDhwrT=D((j%aPR{f
zRdjT;5HNQ*44PF!HYN%RZ$ju!fq>^}c>$b)ZvJ?GvnL}eA-wp*=G{ESz@8YZ*+^a_
z5pPM~$YWe<t?6(HdXcJn%tDhxVe`PA53qq9oIN5OCM2}%HUKbGX@5ADElQEvEp@#u
z_#~aA=WY?f=fq8BBCSISxG#D3M+<x0J#y45I8InRBf<L<QLlH#uM?}U9Z%joyagX9
z${)+G{g?+TJrgABzXz3eAlBEZKQp}dm$s0P!p2fNm%swk#O{;mnGk3}>xbVEFoZS@
z<<(S^gIV7<J7WvbMFl5={Gx3{Pz97=a1|3ycX!SV0P*e{nY>+@>bLzdZv^xfEIb3>
z!@4vpzcR*WHWY(@jCq@D3&Ew1E)!h^HofW#e@li(z^6|&!YoubWUkA*EZQ_of4C1Z
z({*)i^y9k8W`b=4-=9hboiB7gC!xSfR2p1kYMt3-Q6d`CzWTWk>q_$Ya0~{18x|VN
zZc8{hsVFF~?|B-qF~CD8y=2TzB^?tJ!)7uVk59NqiroOm47-6#XH*s5<83<uEhjRU
zxFx_cShQ{i(6pL$GhY<{10#}s7YVdr1ya;WjpiQLzv6y=veu=ltzF`cr`_;HzUJ&0
z2xe0&FzZX;!}{40rW-xC&9^N$UMF4-N*m1>MVxI~vq<ah_;4rTS}#I26@V;DLn8x-
zqmhK%hEK#6y@DZ|)GEGD=b2Aq=c9s(HH~@nNaQy$W#S#_6{`GCbHVFqo-)6MQ#oub
z8Dz{E_)j`sI1Vv1C;{AsjM3?O&t7O=b#=AgcuePZabX5IGvK*^Bi2ipl?rY`PZbL;
zTJMfp>fA3Z*~7Yj#+{Au?9&Gox3GL3U^7mpEu%c`#uO*7p%^QcOUJ4djG@f%If|9L
zNcd`uR83JFCI?BF*3hXl&lWH*(``||@Qe?7BW(y1Z{_z2MLB985RH%W8FA_@J5I_^
zjYlLI>HgWsSOt)BS$O?|qlZOja<yxwzV`W8FIH&C_g-SxR@H*?0+U6ifHd@+G1JI>
z&bX}t?=8h@UwUMB)@YBy$Gul=yZUX#nP+r?9RSHN|K)YOUc$=Tz9^DHcB`4945)^_
zSA9uWIv&~nv5rsdUYO6Wdu=<uVfNQ7Iv{=jl7ghWE2x{CnrcPOpzy(Fp)MQvhXjEK
zs7m2z=RIdpJ69@~JvpJ`!5<NizQ6N(Ejun9CA1azPAkd>x3T-3f^1(TQR!q!T_*Uk
ziN{7g&S8KuX$-(XvR-$WYDUnI?NqqlOjffuORgIc+8ome<gbLiZg+B{2$wabypu!e
zm~Z~{dFM(*OsT;Du*1IjY;eJh)%#*v<C4pY1(#8~F4*`({14e!!9--nMjt)!gHzB;
z+wMlqS?FQI%0e5y$>vY{joxWBtRrM*5CF8C%wz27of~&{JNY3TYXN-3xpTq%2lyVD
zO@V?YOdhxLdEByhIs+%vx&{YyJMxN<tn36-_eqGmitT-zZRpm^odcbBOfOf!PhL@c
zkLgQM4xQ2+SZ#P|@4w~Dj3o$<%NJ;1G*5t=l^s6EC}2{9k}s$X{6BGbNO45~jy#Iu
zF=uPe&^;*E=N0v;j7CYXU`4uLY9_8wbeZ&O%@E@|M8XnEX7~KULaU&9?@+V!WuK(@
zcrkz{X&B-}S$8UQk$*U-9X)sv=Xznme3tk56x#B5yPrNI{MrqpVeDF*)71O!u;H-K
z7%2vqBAqhi<LRm&>H<>;XIA$IC`U-pH&;fP*dA#r#f&mW+Vyh6KdADc;S_dOj<O@a
z;|MxKAg=pO)eY!zTmyv}qg=ZuBD%gJnWmsfoU6R1ws}Lrp){_5$I>diSi)N*_sQ4Y
zon)Bq=Z=CmqP9ni+dJ3v$bKP=i7Rhe5~K@YqKJ5B*22j2d@zXN2JqqTOE}AY%d&M4
zb?3+U(MUH%H8PG6^qumT&lOwOHu2Py#l+wu@Y!Y3EnN1?8%mHZL%SjpjSGGQwp&cJ
z&f1OGIFV3t8im4fdVA@?JFEg`y7Wu+X+#x-j)_`+;;{(9JvT<GlpDIB2=SGBQWp+)
zGK79j$m7Gys-v(ytN*;R?)F|b)@tC|PoKBaE0o?v&xu77fEO0?yX#?0KaP19V=UT-
zQ#m!526QmJ?9|L|BDVh!Yn_N$`MIivT5(_?n8Sq|mD|(LoHaf0fyLp5e}AQ`x2aC$
zf55i?1fgiS@oFwgGtOOc<hXS*P=svnCJ1i|gdne{MtGSV43U1pFFB%w-5Iw0+`cE@
zc4~WlvbI+So6Jvo`t--P%;k95@?J0`n~v$Bj^Z@plN-Oe+X){2KX-f+p&qC}7ye*$
z02#BO(N-pa-5InL0doAd?M$kVd~`kY#<$R2inR}qmkp5OQ~S+;WR4d3vq4$55aeL2
z+vkgLV3#sKHQu}-Cbze@&sKzEaFiBm-8ObF??#P|kBP}{MwUHDUzh+=8KRngw%LVP
z=BWOi*~(1O4=OQh(!cm!-13NSDHz9YgWw<7ZS+YRPIks~7c8O#o-QiE<6Fb2)2$do
zCuc)US33g6HE&?4jmo<;KOrL$C>|3@A`KfbLB3c+S($0912i%Uzn$Fxoa!Vjt2{k}
zlo&5GA+G&(tZ7yXK%=&4$&cf--2fL-F)+x+_s}eu80yNYWwToqx`5sGLlsbBl1(<`
ziogCTl`Y>fpt=76JIHz8ug2-k!$#iIx0;Vdj!Ota8tM+Er4?+9X*3vx@~H)ZQzePs
z?uw?f1LScS4j(ZHe56D^KWvaZaizmP1<^kbmIvFaSMX5frBbReg)vRGfiq}bn7Z`%
z=y#I}KXo<S2=6i9-b8*Fe^f1z*3VCwe5a0>Lv?bfBLIJ8J8djgWy>(|!skyhLr7tU
zC%9*S<U3oG$YE>gbU^)nuVPzj{b|anraG24VA)fXXMI-y{nz3d%)A_Cw2x-TGQ$(z
z!zeAc_!T{1eyeue)~8rPP@Kl>rc%Y^bc4+{+GWNzDFHPZ`Hk0R9+PN6wt27_Kzvz!
zJ(I8<T*_fezyDlL^L;ef%+K^b?)BL>)Ly~DB9Xnkxat`L`ZvYBff7c9w|&x20TOiM
zNKrsNV@7N<qQZJ2FT~FWSn$&76C#DZHx%6o)<9%b9>q^LaMY?M5P?ezuiw-B#BWCK
zj~`ZWtst~a+Yi-0Jp5L+N*89-U)Ykz*(`kktEjO$*-~IRX?&p)u_+&*j^nZ^OYG(O
z!b{J^x9j5O)8YQgSmR)B`g2S_pu=)Gn2S*_*Uqo_NkPZF%Ne4UN6GALIcpq)MuAo&
z{P}jvfN=I$5()J#rF`Ip<)^Ea5ZcT4_dc|=9uo&syaw0jB$`r4x<Gw^{ceV!P3!#2
zm6>s8Wg>&l0xO>W34o;kk>HSi2CQJ_0Lj)dfBbs3)@(EdgknbVr9JWU{iKxU`Q(~S
zI6HdQbOl0iQf8}G(r$HZH?rM)jR~9e+y{*YF4t}8dw~$x@3FD#ERauV_6T^J|9KaH
zUp9SsHs!F6lHvVMTsKA;Ls9$djEZp2-f1ozCcRJlb^2a6+V_GF+!}YcbD}y8Unu7-
zWm}vN$>%BREvIF4of?05*e#I*dY7Z2R}k)l-EG|6<+LrZuqt!H7L=dgY$=U}^evo7
zEI{WPHMr+;5*<Si-t+J*WQ-GxBHqc*{ZmFQasdH6Z-3i(g2aZtp<zz$2WrXN9+FmO
zHXif<6=4OKUI^*2P;Dtw>FFbMQgP1_pGH=F$Y!OzZOAa9^pKd#E=zqQvwI>g!K*%R
zU@Y8c!7XHa5&{Mvj_qy(sbG3WQe3Zln5SX^MhjLjGU;ayUz$`N6|rlhgH0C(9FvN|
zA30?d`IfZ9hqZ$TrosXU{w#oZYrd#(?H@vxkUpz9%6z&n)DdRET<ec{cgeS43x9`r
z@K5Oxjvnw}%}x<JlBb?Y*Nw5pzP}b?mj@({ne`XF8j0PX^&V{k7gk}$Nab=*Z9wdt
zCe3DftD*knl<=pop?f>dqB&OJ@p?lWXYcw7@^nb5a6X2)k)}68o$0AudU_0i42S4^
zK{Q()izrj``0rp1J-2)T*$6K!c4?h%V}MU_92du#?%z1@FO%al?ng6AA{-g0*#`<j
zweF1E+{uq;NsyvDiLSyfc`gJm(Bw>g&PgNQeGt^;@m(-meP?J*20xP7SlSemJOlhs
z;SO?OL+%%FigQ{qhfGXP?g9=&RpZ*}qCSQ%MIebUo!7-V;qBkr4-6bA9LCXP$uZx5
z8lT7UJ%fJxr^9g+0*=N*tz?73Q9m4$FZKcV;tu@MBE*^O_;W2Tw(#$gYbkr#F)%i4
zr;0u<kd^DUBtq>E4{$~fq{1^s1)qL<YY$HFK@ANJ&3}DozO*u=SgbJ#d(Np;tk^|U
zPE!bF!x6ofjCmY{g?($w_PCjUJpeobMfJ7u{z84}P-`!8u4I&Yq1;fNg-a@&#k8`v
zb_)M-F#5Z?$?G~a-`M_wal%Pk;()%REz=c~k~PJTu90rjD|0)X(Ob~KwNa53R<>zR
zU|TNl%Rd+rtxr=|JLpn2wHps$+?luqLn)489$x*s`fOaVJ2J;k`Hl-s+Zk5Jyl#3A
zYe6IjeZA>G38wd`pL}*i;Lh3zn@}ehD0pM<S?i~`pAU1E+VAki*aIGvhaP$gphO<r
zYc@QV^lKn_anVe^s%SZyU@XnVq*id$+!0kDPPhw~4iEn-4_OUnjv`zEAm-&uVT!<2
zBA4IK$zf@X6To~@T+ApJDx_QL?rIK&DWaVu3Yln99NId-mgBMQ^Ke|tn<%z&*_ybf
z>1THxd~}6>NSjYJE%fTYN_U>T(1c+DNMTnIpzy@oMsw<G;!Dpk0Maysnd%!$u+q}f
zdS)4;1%3s!8jIqhMi2`8Epxd7j>)}{F5j%jO^l@Pcz`;Sg82+@a#kNK573rr4|O~9
zvW!jL-r+?1=pA+X`xkEM+Vpy^r~=nnJTDtLU|Fg@ISjKy0Rt=2GSMD+hSRc1jFfJ*
zOtw3Ka~1AQxal5JeA?3gk|-`{Oj{;Ll1MQbX*Qf9&Y)dK>ZU_6`ORc6N+8iUWxNNh
z+yHsJsD!Qs8J=?yQ41Hag*9ZmUb27rtr=n4=*>Us&llHiq*Opc=IaANRHfzMnfl6g
zXzPNQAkL0{Iz7Jsp!;29p8hK=5l_4SGQQTj?P)Zi0a%p+ro^L-+hI$t8AzE9UqOJ;
z`}|oG=iBIMq-K8Puw9nx>FIHv!=Mrk2TMJd5@0}`k}%B^9=do01hVJbqlNIqu0qpE
zXR+36KLhs8%gYW3u(1mmrz|{YutiJxg5GH*0k$!7=uxR7@VNu#!lpAxe?~y`B#__>
zsg~DH501VninH=}`UA35<^dSWQ)mU`(S3vRLbDYX69Z%CVphMQ4+G06lhtqKCC(?I
z74N%p748M;Q@QY{s6x(VS3l#uXjkOHRdYhp`g;sVPk_l<AQKP<B(!R3NM2RknOo_6
zNi{9sxBs{_=M2(Z9(p96Az@F%X5R>C5I?i_d{i)PyUeugxvr1$8GKq^!Q-zzYeFko
zqrgqVhWmqI(umyO{*mmWrNL#<wH<RZpYdPL8L`<cuwA&RQ}m0Z*5JkAB2&w!h#}CK
zP#Cot0V>hiZFX-8kMrCcfX&v}xE`n@U=Ww&by1HMX95tQXl3gek~AME*|b!#MmdK5
z!h2Gl^W#dp*F}=$!H|yE=`TzsAHWsyv|c3rI@@{*rK?clbdwq@K;$k>bwv&}GlY0Q
z>`ZIu=P$LmENaM2;LyLwljBXKfn3C-P1g$yisN0#t_t!ZnJ+X@n>(1&;8+)|Dbg6_
zt_-OvGY4T`43({@=dht6Fn}cZE%=;gwRhxQ94+-Qm*^mf%U)Nyu}Kl@r<IE9^#I2L
z@1))VL<qA7%7f=(APfQ<DQxZ+HsY32e8+rVo{>rve70b0dQBmWK0QcLP-2VQ`PLLb
z`!#PS>Krg%)LUKGQNgCNdHm^*VX6}T!-&#plB6qfwd9iN91QGaWM9A&M0Zb=78NN)
zc-Krd;;y&KuNPC>vIAtlWQ|A#F51SrCu>fyWKK6K#yrckCWo6Wup*D-CmZb|DVIx#
z+D=vO%_$ILf<LN&RF8j|IJ>Eh_4TaX4mIHByg`V}Ul28QZ9^5XnZV;WXUdA<-iHhI
z4#6)Eut^yM31Jc6<?6pz_!y6)QKo6{($CH&h7YHUM^1#dI$YIU5r2f<muA!#3FPOW
z=req88+~Ax1Bx;-pR=5k`*T+FU<Y}jWr6-Jt5}PlEbLMo;CuizxwU46KnDE@t<W^V
zb^Zn5Bx(IaS~f^$=oyXLgkwr(^Yr~sB@j@jnujZ^;1pjG6-<3#@bmmDhWG+fpG}zX
zSVwzDfPv8XtdZsAX#~n=&$^^4*3x+5n@2c?CFKqUS5s<}mull!DXGmf2eG98)Gq&9
z4@BAs==pFyJp?QO?hlU3x9esTdX1_D?Iocu&KW!yq=f*SpoD`mgtdjDAO63T&i{z%
z5EK9z(n~W)_RMoZPlB|i=v&4$O=^aI+>n*^_k;by_lu1;QB~u|xiDQmd;b82|NaVx
z3&_zxWui(%KrwNZ+^(c9G(#(0RPixZ{-)LTi}IVQ`#y8Y+r{T1L6eE_|5C&OrY7|M
zS)`8Tj&Ac@xpo1W94uWuc@O0`(bc}M9W&-l6QK?+*-}~d#d%ieUMy>3A^a6C{&iFT
zI4e@Lx@U~CP$3Gu3jhxPn~+I@$g$0@TuC?PsPI;#+R|vn&@;BpF%_uc0!=OQKTGh>
z<Ny2BcMMnp{hbRMZNLkB#_(1Au{8-jRv7zH#u6t}6~?ee`At7(@LLlbSn9_E{r?sp
z|1As30`usG_<9}~L7C+0U0VR##iE?HM`QQzUb;{?6wkOpTGR2L-a)?@UQaxSp8xqN
z69Uw1bWoNB;Ng_0K@cL^g5njEiL*9wr{<N7RIGp$GutfZAPvuxzU|7Ty;HCL|9=*q
zi^x8wmDoa!Kzqq&e$b*q{KV^w<-22>mj#>x%q|2@1J`Nm$f#dk1t~|NppSp|`G2pa
zk54{eOJ>DK5=OuXf1`8R)ufr0a|s_?_vgy==qjvKrcW{^zS=6!D~GfmwtSHKA9MJx
zY2m>A{FK&b@oeQ)uYEBC-a0-d^%dRKdh85eY~epnDCg`>LhAF?z{gU$?;IGqa8aJ?
z(Esyejtg`<Sm7SMf0nDjApA*Eolq(Ly0fb`?^yEdlLka#n0&YT<FJLu3KbT%DYDN@
zF4Di2@LyJ;P73U*x9)g0fKJhlR7qJ+oT+R$|AwxXrloOWEd_$A&GDvi_g(DnWi94=
z7D5R@@Oc2={~iep>=j^I4x{iIz>J6l3%!It^RViYcDEMCCK{~#P;WA9_;Y8?A#Uf<
z0fUAS2_0K50A=m}9}DCEYoPH*g4GjGO3cR@`?X1JZswd^JRBNPHO?=JX+D@4OGC!-
zd#Z+%@PFF}U@n%=CTinv2Pis8ix53)_p#*fj^G~b>$<0$#cCW@7+$1~zuTr(DZQ2g
zB(o=hWOj=~GRB6i&EY@Ir;eTk9tF8Qysf{7W~u(~hdlWPL~p$g5%uRSOjdO(gf4HA
zyApL5CRbi3cG^;)h?&CQ%<Uu{&Qed0V9Nz6Sz`)m|AQYMqb=6WVbeI6W&F<-6NF?I
z=5&B}E<T|3Nbp)C9hUqVJ)vFDQWN6ESvI7Dq598_eJ6oQ?c#(5BzAfTgab^4By(t2
zcQF_X$!Zc>;t8!kzr5`^VbcnUq7JMTV942RjkJ$X!I0<BS;Fp{^KA7u1^m%DQK6je
zZ2l6#WGnM<vF#A<<d6s~iYzI!FO?mNYL|Z33|#&{q0Ai4`bX9KnsK4Wo)6K2(kMSV
zGp-Hpy-f!t2R|yC7mC!yF&!$+z3-R!nNICsaZJ~+ILMB7{U7Z%9k8cHk=nvJz6rfR
zk5+S9ng1?nTRxgQ4Ij2Nv)<AM)DMVKB*vT`QcCFl{IJ@a$69FPHi7P3QSX2`w^iOg
zO>nY46pPXilf;Q^I|sAY;`YBG1>JYdResspfw6=u0c0$I=!twR6y;mF>w$n`ijC1w
zR`^DUv?}w>JCjV@S2s%R2n!|VL*L5lLQPMJ0WsCzo$F5ucwUhzm2nC*bKsx^YcCIb
z8^+-q<}emyy0!`h3B8xYy2<j$;E@6Xc(&Z81KruynDezgP2m9T5xV`aAvO^O1&<85
zO^h^-h#vQ3FJJlIt*EAmbLOy7hEM#&+Us&&d2_&)(q+XBsoJ4k#0O8uZXSID8f)18
zX{^DIhZ*J0`eKcE&|BZAO0+nyWA~NzFgGf`8o8n-pVRzM=|7s???N3nlXZvy;0J;s
zJ3^jW;)K6Rkj2KSawY+NZ>t7aP?{uvd$KmEE^q%%qfd)h>r*j4eC7jtQ0U;W)5U%Y
zu5?tCWkv60>As_Jrh(?Cju)~CbLKhAYSw=?8Wk+=s}g&qZcn;&2!wM5T2H}y)FeT4
zj>GZ!gFTAj4PH#MUJ5tRiV6Rt&s~NjnI^*jI6k2c^wrZg%%_xVoS2^*d{+1r|C%QP
z8Q{tTl+1EyNXN$D1b(MUa)Q6chtl2OrE)jqg;G7<Aw2vFbLDe0Kx%{PFfst)@=t4W
zv6H8Nv->fF8GCN9-Ef()X-Kr!BR!>|o#Gxg_Q<j)2ggY@Cy5TUdv!KIuxpMxcj4#u
zD;&XY@v{e3t}y*@Fb0?RnewJ$sEEtL&mtF#&Qn-=o!8O-;&Cz&A9k-jzhjlVLMkPR
zU^c|z|G3QO#+Peyz$C5%Ivh$Jb{;DuYs-6Ep@YqFP>w!S`f|2ftVnn)0*SaF>Pf)M
zyysA6=S-e`k1Xqb;*~EdMnQ1d-QTC@SyCNUL@nr99j9N<nHgI2<;U#hUYqx=ZKtaa
zahSVE_p_Ml<s~TKbX3ur>~CAep2+Id>EX~#ez?Eu&WH}`a&wJBNO>6j1#v*hAbBwl
zf_?f+?&bGnw4sAV;W+rGE!KUp|0v-AgCBYJh-t_p&pDg$>ad`~gqQVoX_RrnTII*Q
zh$BJj7-HfKF?pjY_80rP(uwblCiZ3cdL~`H-xK_F=3`FDuc6k*^xD`rU73`%`)y|1
zSs!Wk@5Rw%;E-5d4m3ZEaI`hchuWMeTlQ^$UEW}hr|YkT2v_m$ryf~T#DA}<r?~<%
z;MwwiWEgGW*RywpfxPt!8#*TF3KSPu9=@3CsQkcLHL|FrEkcmdwCp_9plrwa@8+9&
zrgRqY$lw8sCICT*>2nqZQIA&2Ki<E$yUT)0@z!IhHxD-$mv@=no#;BITeAKLeIe*r
zUlHfS^Sc{W<BoRF+>+=^&tK&h3`khEqktY)5x()Z#;ee_w=rKv)gz$!tK8fXVY~1-
zR{ZEl>nYDi=;^5nn>;v*>8_!zth;*cn1JJ+U1QU32kG%(q`8Wh;IVh83HS2jpM)UR
zdCg*cxKe9ttg<YWyPxLUHK!cM8geSgKf(V-C#5);jIUNKop^xNqatD@s*SVDqNcVF
zRs>C-^620`-L_ZQs<>OLvN*{FpWS-@Ud8jRdhb5r*p(^L^eL5r&&d@TTv0+_pqP<j
zP6sUu?Ej}F1#J&*?z?)g&2M*8*0v_Z5J%solkEbwN1E85H;jKqk<}W+ym|J^lurMc
z44TfQ6U5Ulbf|ZrsEVXw3s*Lgg~<LhyrbtPmB=?0fSj+9@`F_m;$VMV(q?B8<MI6W
ztw`zYsra4MQqPm=YimLEreJ=WAJs9otR6DfYe6{-Ce|l9e9O*rQ6@tF>6Bx`h2^-F
z{{6GFraFnd7}dJ^JIC+OMBo1Q>yg4e187isFcqNGMdM1-R~UUrnM4!6Q{C!UuxHDR
z@D^Q|<|l4cd|S0Td@vl{Ieh6nX#0}j#`)`~JcgP8;2_L+^Yiucx+K&2U%FfK-@N>(
z{s}zSNkU)Vc%?>*C6}0G3X09L*nAJu)XyJ-;6ygOG-+MTr4BK4!;q-u0(X3S{g3l`
zZte&dvjYI!D!Ol>_ds?HX{ZEik<;s8g2^<-orSsFOD*zAdP?iB_!sNfu6{RbV%Y2E
zU4cKsOJua~|FHkye>Ch^c8jvl%Y8CZ43x^1V~l$G7`WF%t>Rp2?qGszGf<RsXjWj3
zXWPmAuPwvz!D`LBoCOUA$Z)j{+}iqRy;YA0<Fom`so%dQM|JMF<`x;2^<Aw7y!n_R
zT=zwA+~gr-WN%e}KKgIQLTc9=Mo9V>1QUQZ6Oh_km`77}2+t%=uoBxD42$IB5C)mb
zb1o!hrxb(aym@w#3B_wAISWgbiLetd;-IS-=N-!VD2iW+e^mzrp44e2E3gHV;IH3g
zcV`%L@}>1Ey6NNHcEc^|-Mu7n#{Oh;XF3ryh@iu@)S1|B`bpwd*y1mVUItaEU1Zzp
zx7Vb^f7OA{sf7@Rrd@>1JB@>~phVjAxeuH^;76$0!(!$IX=-CpI$nZlx<G`}kq2^R
zwGFFiyB5op33|d;ie!`h;E5<SU3=`0Mq;MS$ee!wFQpj`!}ml#w+r-BUCVsFSr!?j
zJzG9xN&_D*yC{(Jdw#*F53eNlmZ2-zd62(hyMZJ-#qO8!AI?>AS*bcSXM<Ick`nmo
z6RFxNx>bzuv9Kll=2xloybPgMxdwK!{u)%OIlFoz9+1S9Sw(Mzn*@{oz<($SKr2gL
zW!`E-!m0TKY=yFo^EJeJac`8TS+MV7e^l@KVcu>wtWx7iXoAJ#4o|_FCpU}vF(Dpv
zpiZB`#$-cZf@3`4cj)r+E0l46K*R8Np?rOg2YZAG-vB?92?>RRmkZwO{XE*RT9|l(
z23Oi!v9*AfJ=Iy8i>%(^Urz||=<T!_e8fy4#8H@(pcvQn!<71?O_nYw8-kl6;bnZw
z*x-UdaP#V%Z9(t87-VO)<M2`{`?7*@?f*890o~uO*|dmh_YcYPZ=FXSWE@{tienSo
z_u{%Ph*pv8J5&}hRW0L)8jVq$-Wt6t5~ckk1Uaq{;D70AEtvBi-&d5dX5*in>A!o&
zEHN~lvKqGrv`2msrLRw&6hg}7<D_n{Ru(3jDou72J?d88Pe`DmD&~OS$mU&}|6mKW
zi`^By@A9s4y*S-Q<G39lc+`A=>Ut}k(3~Dxd1Cma{@?7ZmAvYY9zkmBP8926vd7!S
z_^V<SHLQy(^Mxvrr?v0k(pK8W#9yfGm5vBedCd2VS&b!W-X34S*=R5{xH`EVBhJo0
z^^-2dNwa-H`<R3^dt>+VpV{XJcKPq~PBmc9Q^PqMCvbD`->R1OqVGBC&vKVkzP2Kf
z>~f`CR)cS2{qShzNzgnMqG3?~XLYH?tayTNM1s>ES>goMHo1NA(+WO(Zsw!N(iOP)
zeZls=H}BDZfGgSwDs1XmH=N#X#?-KY&Gk`3Lf*CJUZDcPkB|E8#C@d?74!lUmA8ez
zCzYwZ@_u*JBI<3g;P0hQ+hvsg3JWzpwT+o>m6|P~&6##<f~L~jDbIerYGQs2`Nj7r
zeZ8P4*42!mn<jyUw{YybABz6BSJg)cz)np)eqn$cmjF?2s>SObEY<xUa_870v9$hi
z_F<TdDVfpjI4h`0(Tt9sQvvsM@6u=Zek@1^Kld&M>`0xWCVffx$DFq=#>1RJkjt~n
zA)sB8V|+`OI#rGPuV(pgu2>|z8bDx8_;%EO!7f5hAS1fb|G?&&oZy!5m(6`DMY4F*
z<|?_-ridYiT9vTfi{mpfUF{wRR}BVSTi%Ylda95s7crdU(Iu2pXUsz$1-3`)oF9ls
zU)O<#62No#!~m#Df}9KJOSh9<RmFpBT(As;wk+on>uur8zihR%drzh3=90aF0!BLA
zntnA~)8vSvHny-XrwukO`S_k(EcJPt{r&6-31L&LEw1x5vVQ}Yo^*e5YLOI)lG7?6
zWaP@wORK$;<Z+@;53QN|x=nHDf^j@5&2d+Z`BIFjoD_fl9Ex2b!TCeK_su`!LIx#r
zK34Z3C!7-$vSjqU&rGluEaIu14(8hjkt_K5Bq02WcU@UX<I6GX`~AC55QE!0y?G$2
zu~p?hXx9X38c=Q+X?wfQa-ZTR^{~v)s?`Ms{iuK2nvTe#XO`SJ?hde@<+I!7_CDwz
zb_S&M?ny&eN(ZQ;PNhgcBl(^o@nGyO-7W69&lSmg4yne<E31j)nP`}fC#8n)oO}wr
zlomT>=1WSB054Nz<O>bCF>D-4Dtf>cxYiSfHsnw93p$!D&95l{j3Dfe0(^KP>*E0F
zr*3o_B)7Ox3=ZRd?q?7_ilC~>{p<c@ry!zFhGw>lhKT&6?*+#3LJJnj+nh@8dD*Cy
ztcJ7TKoLs5H0i99`quL5gz<%!nARTr%{a+ILI8QK4F95q6s-fU`vj-!RXo?_uw{3u
z=TBVR4kB!0HIF^*#Y-9znx}P3{X?tiF7lirz8v<4y11P})}I&zr?ubVh>MMQenA+L
z=&757H()Xr>(?N6W9d!@Qomn;F625&nkQL$1(~6no0yyDR2g2+Fx}}L8eXrjo+0`B
zQh%?0KDi-OY^Aj<T1%|mWZ$Ew%j(jsq+(H4XD~u%H?apRSHZ|^S)L(LN}=6%8}Hq6
z`4u(S+audWi%Ha4>kOB0KOsV&j@=}~v4m>?n4F-Y8HqA81(ND;Ncvzh-BKOAoQ~&Y
zh9md&sf4>!9q(o|s0)Nx&YqSPdEa|<-!*hF(#ELltbfA+PAHol!$}SPLCoDoZU-X3
z+UH&4u5Ay=<wHA(@KJLzlOlM^Q#t2m6ys=#OLA}EDz;sr`i%l2Q^<0NdtVt24!9pW
zn2$(ivr!t-9w_5cms%kaP_q*7di6t6S$7?7&t%F(FixN9VDs&s@z9@Ysuam7hZgh;
z8yy^rkz*~pdK*fnTV^i4Z(lY^mQMM~4&SJl%NyX8>wHa*u=0TewWIq~K%d_V;wwZ>
z%G9V>!x?Wq&Zo;7l4N3zv2sHE(YG7H=`^yV=9DkW$GqAawJnz|G&q~=o}D)cWw=Wd
z{My9mbB+tf@IYHs=2gZ`qz2h;pD#Rbib|j!tz%)vt4m?hMnp|<m%y@9MZSBM8{bds
z*KV;2iR#J{!Ze%ls<F7hdjU%0eK4NakR3tHqxx&5^SKAF!>;B>?)1r;ExLKTAIm-B
z{vWCI!4_fkdfU1(@{tAC=8(2vXDwH3f@?OT6=Gt21@7c@&(A0xIOk*IkaSsQJ$+5b
z2pi-TN60Ma`YW`e0H22Dn#Q`cuSlUq!P^!Ii5kjo;*{W(Y&xsX@FCJwR^Jals>CGx
zRUD1EdV0i^4Lu2aBwDUqlW<lf=Lq)T%w#RR7v7C+hYI=RBhsgsW9qjZk6Pbn&rx|v
z@pqB$5YE7LUHe<}-=xz&l|HHVI*<rFroT^zTxn!D@f2j?)%zT=`OzAG^LauPa^Yb?
z;oiu+ABzci+5NDf77L%iFi%;x<x2M8-WvR4Gcg+X>A7R$7v;%PwhBcmWODV7M7+IE
z5hX8nXrUiO`HhBJxMxZy(@Iy50!2oIU<CNl67`Rdk3<KiZgEuwUy82KUDUR6Z*`m_
z{S{WoDJmksT75tWKCLtnG1?oe!E>^X5h{;e=U&#APYr8D5d77P7SgtF%a4akp%fPQ
z?z0NEo@gsHu(^%w;`>>9Y?j!#(lU{HTJ2Tu4psR=pd^n3V~nRMl@`LEWZRI6&o4e}
z6FeorE$s>>M#F(n#5)F?S@Xid+}vV)th(Tc%dLcoLPFUC!MpRh7l;PcpW=SLMMGc&
zB{^G{;NM>zQCh}`#B25;zHho0&{0oc9NGxReK_L^RMu5ShxiMDe1#~LQY(H9(&Y_%
zL`^0>^c83Ihj>_JalF0&!G@uu8Qr%VHSI~%MXhh-(3Be??@cznq~t8$HDO}v^_q^u
z77gE;@$JCGv~KcT)TjYcX_j$pY;TQEhSZk7X@RpHTBFyM-D3m|AEwpWZx}8gD+~2|
z^=2~P&-5jAjiuM4_c@^<yaB1tq>~xkml_wg<=zJtb_9ry7nB*gbMuF(yW&aGbG5e@
zQ6gxj3T5Wu?j?7~5@krAfrN<dv`=pv*Xn=4jl{u|aa<m*d33ihB}F~NG#6ZpA{qPm
zfS;w@QO28-Ogb#)vj)e7%XbY0&&Xa02V_{L-*(~C>|_-uwq4+qH8aq97DVQjOO4X7
zjt19C-9eZ1*5vqOLw0(|QR-Y6k}FkDrHAX|iSu!fn@3-uUm<uuf<S7jKA^z`Q`p6Q
z^tFqR&<FIY*rV5gf>zFit7GzE@OtulBv#_&{YupMSIh!D{Gp#fULw?mhC7?D74dCT
zTxi!j=khRw+=(paY(7r$`~cHP|A$z`se@&bkfSt-AaVc~+DVKLuWqu2rpQXgqC78Z
zH6`J*xltelqwD`TvWeUMCaha*k-L{<JONaDSt#(MB;fdbT_1U7%*>r`9<FXjTV<qi
za>6EqbND<#fk&^eD=}yhK;D#Sd(D$w*`t+m4^(CTEBHiwVybJ#ua0#VYj&IDsf+S3
zeET0>5q<+WYQ$f64_xWAl{o|+l-yGadI$%jq?XIE<_zF3Th-)40WMWt5qiY^GF>)v
zk8{aw56!1DFZIBB7-G(~h>ep8RzHaHNH~vjLkDSVOJQ#SM}z{P@>`FntueO;p7ChC
zNV<;}?lrnPIk=LGpI=O2iEBsrl#S@DSg?B#90Bm<$l6=@lWZ{V&dBW%Q9L}zSCmxM
z$!rY&$yg{6=Bb9hRv_Vowrz5jFu#)J?4qz5XjcN>{LtM2vGby`8KKE;64n0rx)Q&P
z(v6ukqjUcXooO#O{o+tXq_{!A=wLrhZYrcf8~YQqTnGpa0%&&mbS4SQOx{bvI;_9p
z1~0Nd{YC<=$OYHk2)U2q-vbFGy*bRTz%QFtfacw29Cc)zeSoo4J+a_`)k?S`?X$EE
zreON^w1Sj#?tu|;)I(-i0_IpKeX(RA=}UxGMenOLl`d>?kBMV_dd-Ue7>ScGDX31I
z<H!Lb1sDO%Fdy7|RIK>%^LGo%VU2rD?J@VcU*zB;d4^vJMZ&E*VHoKT6%_K{sv7A#
zcng(aAJ_B!h5=oOcO+EA&ruC|{}$={inLcs`~JC+90nn{TCgzddvAJD0ppt-HED0f
zq2s;CGP;Xwmb!g_2L@wubp%3g(=M&bAU~<qt*K+xeEVu~vhGJFF&qmeK$*aDiIB!S
z7RI>{`7RA$II8ivg{yd(e2lW!KMq=Bs%k;4e*vq47`&$63yX&emA3XZguxQcqAsTF
zlO&l**lErdW9`FO;tkxHXcueK?mF2<6#Qf13aW6-r{6p6)qr%J%%14_<NFBtp`qnM
z!eLpkcjC5an2g{t5WdR`tuw-l@TBxr!+^;b><=7mvUp!)Ybe2^A@G5+b9mo@P|NS|
z2TIy|d-(qdgV$Z~RA-_qqkn4<JeM@~LWI<%UoKVg`7IMK`QB3XEy&v7%R7D{$RTl^
z<}{KCae*FKb-Tp~k$!(}0XwUDI%*&&n%LnW`Gq3B1YDq%N=Z{$;@GRfw}N1D#en_u
zjTeKFq)sGkFdWDfV@^X6(18#A_6H+Tb)&QM*0OIJ*+B4)_eC3oTvF!uqftPe@}yXf
zW=eQZU+2U>sZ&o<+mtZ92D{VF!NXc%zTf2X!2o@p?;#>8fN3y`YR@2C<xVBB<2i@w
zI&FOSia_7_y`cXc&8m%6w^;rnV2!DphhP}imj@$SQ-bB;X-g2*@jHkfQfu;By3B;x
zp9ec^QOIX-zGX`P^l?3h5XDWN{oM-Qi_H6W%okbIh|QCjGW{=r7G$)8W>)iXaK4FH
zABz2ei9M=Y2aY1iUxs)LGumFbH^{}Uz0w;!y0d(4XEu2SdWI@Nfrh{ibO7elACaNn
zob_S=J_rVm4a7p#KWF#w@_`5&HfCip0$)_oGVNqn9|T_$a!q7YE<IyA$p;Nzc29|6
zVrf-pCN}Xof+AqD0CxVt_w!7;u+crQGZnVqBLQ{kt)V?CKl*cpeh0DtnslREg=Iw}
z$(S!D0R>p0DFk4JYD$=}uMp}pBs_#V1mTRWqnX#4x;%Ih{4*Rod|wD+%q59ajJU2R
z6yjewPTE~awBNq&1TF3My$O7eRt4kxc{*L#;C^WPd$+iF<Vp@_gGpT3QOI8&;s~Li
zYn+-n@XJAh@hH_sNI0FmEB*%z1fZa0)_gWw4nM6nD3Tvx{!EEJA@<7z0^!|4s?ync
zZ7j|iYwncQ*P#U?;y@bfXpP+3o3TBRYiH!&CiNGf&LZ9y#&b^c8U_s~a-vFe?*caK
zjN{hwtk4^Q`p9Q{(CDcv*+!tiKqL7EGH_22a8H)XDu4Aa3phx_q6EN9%Tb+d^m<Vk
z1qui&?pb_Z(T6kSK9I@6eazy0m@bV5R+R$Hx|ww~0(|pQY%_B7fbHqZNOfJh3c<=7
ze%unsJ6^!zF&Y0JqsG%P_7n#BDv_?rX?VAM;gtSt_;=-tB7DN%vY75*Lh}GvDH;Rg
zX!ib+b^#7_AxS#tXx2gSRKv~aFJLoBTd*1QTJ~{|_4D6)eHvP{y=X707fU45t<@Yn
z@V=AJ_lzV1gN5lquaVfk<NG%Q{L&OJEFP=z!5GkXmjem(LPKx{^&WFNnpIuB-$Mmm
zD3X46G!r6tqF4?tYtK_;D%>!T7=3XExSkBm50NA+?YJ8u?u;nh!T`zw%m89NfDk^I
zjSc)=SiFPFSxE7f+EsRq9vWa=AnY38evOo9^v$eU5n#7SCK3x<J(_Z^*Oh_|D}2xI
zb+H4Qu~6|Op#xkaJCz0`aNm4=PI=Q3G^ASIn8Axqf0P6&g)l%rL{K={tuZ0+O4=$^
zP^V1CbsG>oXEMavgtOKV;lhqyYi?x1eNLE8f&y<`cDogQwp<^dS-9|x;BZ#W>n^MC
zMlzx2;ig^@qed@e;{(I(l<MFL1cqzGlrwUKAmq}V>t_Z0+KCM9bu;Vd2=IESZhn}G
zUQaF*3>>Vgk;FuP1ZXges7QfpQftTBzfu9S<6pn#07>W;pSXAodE-8PD<}D=kA^@2
zVhQZm%%R+oj(`&o4FFcJ2uiU4`y4BA9nHj6SHG4?lMy^YEo7Y$iRenkGLf1e{xsS(
z*SNGwUL>x3>Qhh~t2kg;NY#-rNg!SdltYpFEVs>tpETpoLoN2P&|k`On(N!wP&$jJ
zfv*cmIto^A-cIg=)AC|N_eiEP)Eiib2u5opUA~BwZ@epdYa3(0F-Tvg1fkxKN*t?!
zf^KPYgHd$qW!nJKZEuWTdHB1&vN*{X=EnIMMsjn9elGG2>6Jg49t6g%7E}G+!9-{X
z_`p-Tv9<Uhg%TG2fR{IF%!$|_-#u6!AXd|Y8ZQ^K@FeQWB{%h`4wSmTd&%KDHG;^-
zRnDDH(W`XsuW32M6^ax#wA(#^!4sn+;_+r{G73zXdxo^MsE?XD#YYwxn3u0)nPeJ|
zMj}7Fp8G!S!r0q@JN?hGbnm!IowF>}VSoR5|6+^cES$_2?A%1XPukLuFC)+@s?JRL
zUNk&eZEDVH&R6aeksw|&A(&>&X4dcRy<_Q}<2s!{l$yCVgLZ2<{APZXvh#dNXhqYT
zn8akY={n(;EAwNk6+#n5{74lS!CwV(_bJn>{WMOOVVaRC_d+|}TWSo480W2oO{&Di
z$s4iRD_a@X5!r&5f@YJ*R$q&L`<bQAArQ22{h(ap%1YKN^McqrVmT><=NKGr>>QDW
z#Aj&9Xn45>|1iT-AFN)nci$!v#n=J6s}kfuemjMp$?_LP3oBF+54z@XKH~MIezw8c
zv*8Ce<k90slQ0TdlNQ^OryFYJqEe6hSyDvbZkO$4Q7>`j%hgvZh_4S4<iOmJ7f#l?
z<t}xg+}xiu)fTTWKJ#<8f@Pc2&L6f5{h&)JT@(<orECnkf#b&97q)f!ZAhhI&bzre
zT-l{X&V1y+x@=LtN5Lxt9-?8ERuc{^3O9IY8HbqdT(Uf+HC&xcY_*u}J!>Sp`kIe(
zAQkM!72fmwqCs}Y(tYRXj`p#3npsH;9|jliV=*MFAjB?D?}nLO%!vk4_d_01$0I#j
z#sYLfEBrKMRN?V`9`g<RcWMysH{}^*%@wwox7YaILUxAN4l^@}2h|PNqYP8S^G*-k
zr<XbxSCNb;;M>*(Z%Y}r^0u~j5whhsKKYyWmv~<soH-mv@%k|FY#mwCL>ku2wWQGP
z3g}oP(_a^JxG#MFFcSyHAB)9a=KMa<OyTOT<F^?W7Lw&+mT9{(ayXmQxo7Cy+0|%s
z^}sM)yf&&eKRjo3+$`HX0k>=^yMB1JWAow@{$twG$`A2(?gx>z=6042W=Xmk$hBIs
zAMyJzcBGT^Q9dECfX33NiC!&f4U>;u0+v=T$ychFwLjtmy{BWUydiCmDD?B!9%L%c
zE6Yi-jUlLR(3HuwtHJX&=Lkb7oPC-Ib!V6tEgZB26A)Xrg39@Es>m)Q=(KsEDh66_
z6(Pfgf|2n>8ICOc4d5Z%TRO$7$T6+CZrS68E=uU-t8IIFrrnv~Wk?B%bmsnKMjFd)
z@a7QPx^jj9{aK$Kzl3vW?d&@Np0q^0r9|w?!2)>52!*E#6i)G&pbztg?EQv<s_Jkn
z*9(xZOh<ABU!n)CQmIa%``aYd6E@Sw4K|8XY^#a)69PvTNd!F-6DyTF!f_dQ5i<XW
zsjmQPvuoO}KwF^2U0WPNplEU0;u_pFXmAT|72JwD6b<g~MT-|FXmJnj_J=<2H}lVA
z?qMJ#XOHaewR`Oz95&I;F~baSP~82WhjgZ8pQ!D+o5<9xl`-`6bTWAgZEkg#XJDX4
zTMXeyQ%m6S_U4;mW6ks3bSYQ;$<UmUvu!s8_5qP!<3XVXUtwPdPM1_mB@Yya_RfM#
z?b<y{rE|-C_@o|g&M5EpXGBEXdE-BVR*G<#QGN<!3Ov7Sdc8ohCA8M)^QBba`Pij~
zSz?7-G)(I^q2+eTnY;6n#<1^%L{(<K>j`5r2esDO%9s!D0REWdu$@B8y;a%_=a<<7
zm4{fdDE@DYuAb=I{aBbvPsyHy7tnyNe7?P@qv12lh}XZ&h(B!;Oq=7qtK;hpxV85p
z!=*`&@1ObOI=3mAMvAfd5G&sjoxOE}wx4gMTywVb#Ynmk=eR|FDtHriRJgA~rjoo(
za#H^sNvBz}7y9vv7;5SO;UiPAB<+7zFuXWrx_)hZx|q<Ewn)#WI-A3lRpDz{))O^;
znj`nF<tr@0=W?k<;h?kcn&!QWn5WN?n$4fNN`}DnyCrAb=Ret{y@c5D&o}D*v>T1A
zUA0@7s(MbB+#=q%UtBKIN(chg>{HvPMdp?#G%tMtSc<zF4yWzkxh#|LVGEyqh3hEx
zH#Pl=-1>Q=X`b2$28WmOl=de+7ux=fCi%$9MV|3LZ8gX<z9?F{OSIKkbxoAC%QJC9
z;7*ebx;gpw!L6Z{VsS6wcy8ycS7v)BHxTla%=Hw4&&Kj)q8x?#ip^YVZU>bHb0cni
z{lW83!7|8_In+nDuj10hM9nv$yR)h-X1fEINYU<cz!+;ZbV=whGOwaE)5Cs0><$&V
z^Z4W7al1D<6ii|ABNh8MV?F|-!J6DPb^fc$TWm#?uqF7OS8v;cUtuv?98MXlR@d@X
zt`48X{L?_((-*XX7`*u(p5a#J$j<GQQ^DQosxR+=3U7Rs3t03|SK(N^giFCY2M(_R
z<>z|@7IOcF0RUr-`X5+3T3(JLggP9lJWYl6g}1gGd?&Xe@Jl_TVC%gMN(!H#2CuMI
z6Q4`G#STM`!gy<VNB=vb*lbkM^H16v@kQVD7nO+DQmY2JzZ{r9ptRgKUwH^MuAr=M
z<-NR+3OV0$IeIGq(_^WzQNA;q&n6o&iQeL=tlaxi%kE4_Rxo?mO58Fi=McrSgXE)h
z)-Nijizo|{!N+(B7yt5b6RrIjIOtk*?~oO?;!I4N<PR`m#{!nj8;FUoBN%4V*VLfl
z0lG|}jGR4z;nH)DABLNoZBd^9=Y021rkAq!2k?)T>?jTG+Q9qxP-FuCfHc)Yq(_1K
z3pr2WPK?9+s6nUjD-`OdtFAl~&G*el_eU2u+p)GD_J9S;MZ{XrORZ@adB)6ObC1a+
zmL&DrT$^ToDEIOpde!jp)vhi+V1=;RPy9o{hlI^YT8Y})J#lzL_>Eh|5L^J{)@N?>
zqAH?<EJki*YV7>ZUDeDPI?bAXg-??{`U9{(!NBBs3NJxcGFBusl-d2Xxj|lv!n73S
zZfCv5)Qft4V>-Fa{%vk1vO-1vXMWd_O|!#b!Emq;_A5%H$z*pnKU?B+hPfh_L}5$8
zd@1qcRN8$-DX&!x)@I@Bp0>~F{YLAwRmQbxjJZw%sppqg<P>?N>k;^>6YY-UetEP-
zBmK|tIm9((8PEY1ccZw`1qGoRn?D3{z_d3ndvlsXh{A)oHE-4=&+AxL<Dd-N<NK&N
z20?6hRB4kd&YWHos|>7CnM}U?E#UNG34!z$l5ogtPflTH+i21@g+(_Dh=DChu#wHi
zF`l#0w8SYWy`Q;{adV-qR{c$^<9^fu=ufW>#sse$Cp=Uk#nQ9-XR5ZyHm|oexGm2a
z$TrI!G?$96aku%Fk}ks<@RMO?_ZVx#Os<4f19@$lw6(<<Et+psN%sTUZwWDP4_(1C
zH-7`5^lkf_y{9`6=8f%NPQHVAkq=W-J_DyX(x=x440;}Pvz*%2y}YHwy%eF#ADzDa
zKsw+$+6aq3m>u+!4gGO~r6J}T7nt&DB$XXS#On%##4ACElQ_-qf4498O+*Rxn}n3d
zA7c!tf;xbnj@!Fxfl{YwMYIx?7y-3P$oUF!CVyBLj;a7J;9Ps_#CL)}gXW!TnaAqg
zx+aNS=#w^RwiV6Z2|bjR?6lsusitFk_8q$He5J?D(UVOgpR;{QHYI#*OLexL{8Pa+
z&PsyM^|l7)JsKXFaFD%JYo^2&@r|MA&~lNI0ZwzB?q9?`y0dwB58O&^1?J<`X@%u#
z7p^gELFa{&lmV29J+u|Krv()Xy*ndh7yfC#r&b<FG+y2BBG30Pz^x_ZO)r+9eX-fq
zEOgbJ@8QYyUhixD@3ccc+s7xf<B@Gt(Cs*j5sM0n)kHA46HCDJp*J|lomX+>Nl86)
znosg4?N1t|w-PU&GYpm!6lNUaFnFXJ{our}{r;A%O#wID58cXLMHlw@>t5cg1uX9Z
z5C7#%T6Uf={ibFDz0tX&Hw{yR8{yP5Zc~~I_Z>aItP&{l!kUwNI_F++XFq(X%@ty-
zb!j_i!XhVvS{2)lJS2-=cxh2Ez&?0R^U0Q^h$-)KPBOcIq0LtI&xBm1F~-R5xcJg$
zoaAdoDwa=*^k7nePDV+=jcO}zZ7~%*o*%9Kf~kG@aQUn2frOf@q8r{#x}F9Hi2PPG
zB7A%70&^_V+HZm(`;-0a-ea<^fM(?7H-Syg@7uo4vdoJ2nTPpb<wgYThr-(nKoX!&
zcib8`;MlnBZlP$<g(SyC3-Je`BT8pFPW%zFUV_znybv3Sl+U4$draL(Z#Cnzc=0WL
zuf(ce_ROosGd3X$MZ3+SW*!KBcTbfVlxzl&q`$V^1$XB*XbmHuKz48|ZqgBg*XdCA
zoi7<+jW!vmwmC-=`wvIEQCcnr4mYn#VA;y!vF)p8hf@Rmg{Dn*e+7($H#tu5201Pw
z<({uTo~yMeR!C{_cPDP>Yl#N)(eDf;T>Q-RR#wPBE>cg!I|$Q6nJ2E$8G;^nMA&=G
zbGq+}i$~wZk^*$&tnYe#JL`iP=+SV|H#u<`mRT|L{zkNZXWZ9^KVRh3!XT`Yqotmp
z_h~Hth&Nl0JgE7l5c69x4w7E{)kHk%Au&!CiS|n&9-k3lKz0D8AHvy-=NqE<KGY9s
zK$dMsc=L#R$z3m!y-Thq3*dC_G)sq-Ei&=MRra`|>Ibnq1wss=0H&()>vtga7mM~9
z=CA;fZnP#O+L*X4X#N=_+_zIR{Mr}S2@(5Citggh*n)atC_unq?3R5<ny}U0G-uqz
zRUwR8>)mt=tqP<Ydq>8MCSCh>jv_6U^ggVamUSs%x<;kt)tM=kVdwVKh*cOJJK?>D
zj-<yilB$`ixKEO)H|;C4WFw@MXB#*}oS#dp57&4N)y9pKv}?YvzUgAUy-n8LSG?Q%
zh4J+*A8tN-sitS5!}o95f8QEj4wLql{k8b+Ye~`>P{_kHd1Q|fI>6Lc?hzIr_hoZY
z=r__AC#gg1rxaeDapdMzKFi?j%#hOnF2`AgZ+B$cxXVD!@YPnKpom_BKf$(Z{%pD=
z+gv0}f&`lCzt3o)R!iUKN$#`YyAMYKFZj7{N!<IYVS%LwMIJai1B9IgT}R{5#2Dra
zK7@KsO6Hd7iu(=)|Ktf~fLS**){lh4{Qv>{K$|7sF+iEfzVH>~bf2_W>s3i~QJaXi
zaFH+RP4a8wh{>y;cb{b14~0sPgs{fUCUa;1q}@Jy(>T6bhUpA5&$kR?3SjT$WZGCO
ztmR6ip;Es4Xn2&N!^`rdLa)x^dyucSiIXKPWd&eoZPK_iM|NzX;X+blNBT*lQu41L
zPjz={QqNr28+lOGeCT3<kMaHV;t^*0Yr8TL=_=pfSwamks-GT*GL@XepuAnT!s2-P
z!&o@cR5}lr-l2McM<YAgpm0NNTD(7@qh9NRlZQ;i;<(Mn0ShR%v8TkMyE&3s4%wH6
zhE&SsQoxxa(oM@g-o@&A`<UOXEa%fDfo}%BP^a_gnPs#BFf5(NOG26$U}1>672>;C
zCAnO|$$Yy|;<!mv^ED~!Hjq0hl24q*Ty($d9W{4{LUvP4+tU*mz)&#flAd?BwBTQT
zZOCpXuF%3#b5jk<{$e{`u@guSjD%&7y}6KCdWVca`hCpDtw)ULQ4sp^Ca-Umc(3P2
z#O5I9$3q!BaMx9YMm4~?VKwUPV(CQsArB8S?)C^rP~w{o_vKxzqa}6JG!^>qGD>Ga
zNe!^x-FR}VL$*!mPp6x@>Lt!%1B`3ieVnt);13@PGmhJ#4>gnH3c0L0E*Vp~-TXA*
zm+8rZE@Cg6Sm03{302Ku*{FrCx_0S}$ZmY7JFqqW`M+x)1<7k@Rjgepf18WyyzA`{
zC@C`i6duoSJad!^J~y1tRbXS?yxoU8*^`sear5EM9Xz!i5!$QJDAeh5y_)TGKJ(YB
z&Qg88k=r>JW39YsW_yD8c2&LmF<pgC_9ooiCF}*iUEU3;sVQ+Dx+m#wKjX_@WHjn6
zcJV*R({hLS?CK%QQhwZdNu+s~IYpn`@_V-8SE=iXMe;3-78fMseeLB5wNBCB8$EMP
zFD%McPFMHrYkIlux$q2!qeWxo7PzD%wX`skZh~G;%O2gwHC_gnqC-;NC)a~qm%}s2
z)kdry_6<c>&Zwx~9i@)v5oIjU$CFCJRkLSYJwYPYbX~msv9^6{n%~SzA(d+?uT8H{
zdD*Oww?bHMn1Ugf_jz9W?OESj+k&aYnsuL;Fpx<zcsX|&G26QGe1$kX&;1Dv44p*f
zMu&z%e@`r6z!|Su$RrQ$9`@2u6KN+W14bg6<|4`fyTjC>EUm~pC0J-J-b&y~{ia&^
z7>51j$uH5j7Jl8&2hhtArN#mX#BqiS=cJz6IR7}O&60b1GHU~LckyCsVxQmJ1oD8P
zET{QakCQV#eG!7mcz?rYiGQ(@QOPmNsN%k7a)lVXr$HreI?Of(hU^}{+-tS|b(6H<
ze1_iG{4}?y!d9~O<jrOwYkNd$D97VE{M|<Bn$?bV-?rX&J%Ye#<2|(D?)5#@NyDXS
z0K&wQ16tdm3|`K?Px4=1RVc^s`o82{oCmeCr*xreipA<wxxqb~)#2&MR;>}5ME56c
zfpK>`8OJ+39xFqgGFcdtEt)IOLmcH|!7q=m3A}KOuFDL%34nRVmU_qT%LN-$V<tC1
zb*}q_n3Q~K_BS68B{|O`8eFOB=7`NfK=XZ-*qq2VAF0idlz3tVA{I`A4`n$~lxyEf
zDUz{SRvG~^qq}UWQk%db)k3UI;o#8nu3;5%T}L{=0ke7#DV-2sv<aV`VS4e(jK3$`
zMoTy0g1m%ctroaR7U!$>Tt>rqA;Ow$gnMdVih}X^V;#Yw*b^u72MZ&_-or0P#tYVs
z;Y`JoRHxG=VIi2F&nT`EOF=)KqyS5>2<4)MPr(&y)1u{q&O>X10_<{ps;MqZR65}3
zlFnGZ=|Df;Q28G9WFVHgqPV?^uoH1)a~7NB0FsZy%*!q&c9x)xIhf=eJUXY9SYYE0
z5wXz=EEL%O@@De%0(sjh{_JY}lq_kJ#p3E!j@piNg8*Sq60T*C+TS6&gg4CDQx~fs
zX1-dZ9441^My;BD5hNEoHE8XmL!C~m55C7^BTu`Fpa?YyW{?ISw_jV<I$FOSYQk^A
z*p2gLARA=0n%b$UHNc-lx6AmyUH~vKJgYG{eDifb_9L10kmp&JrgEHYL~YA=JTtGu
zTzH{39m9rVhQD%P*YY^?ef3$o3Eg~(6*~U3KJ?)VW|kc5Yl(}_M~^OO#lF|Y0aAM_
zqt(|BAPg7|O09Cs;}g#8%76SnXt3wr&Y8ILYIjU^lTE3tb<52|g&u4o25)#puF>-I
zn+kNV>k^u8{rLoK*KLC0e1$#3F>XQH>lv}0X?RgmpK+ztIle9Al>~RG@uyTF`l+Sm
z)XM-lY%Ur<Oj<PP_&y!5S~JmSYfml0Xg`b&$KZaz`Bx><`tgYq!-m3OTI*rP-nH<@
zt4)tQ8ue_=$c5kWuB4HqD$y7X`CaQbKtP;zpGs=(1?6xdfc;dgt5Gp7yVxY<eYwGW
zGS6bNEXcYjTjS!xn3;=#sa_Iw^u9*?a*zp4yg`QQ6+nkRxoxq?b0~vt&+=#Bu=Kk=
z=e?lYFD1ueAtHQsdGt(un6-y^{`uUH&A|q?s`cfv;hl_+gr)&1>T=l9W0)mD>p3i7
zfA^;hulQ18d{c+fWQuFla1#Z+wfOaZmCh9D3qvZOanb*LWsWhBDZ|yoY-Qkbb@%3<
zh{B+c#l7h!0|I@9`60<`pKIw@mjsGcE9s(hFR0a3rODq$g?-7vuGAlncPw~*W14<@
zW#hD6Ws_U&ZjiguS{MM23#+MoE$PV17oZNmJjw&7Oa=>-cfE|2>y7w*vu9acv!OE5
zC&&HpBW}dDJqx>r9xUGAV27&baL$|i`}-iV%-=P-EX|1!q~)SkPmC@X<sb?r$gQaj
zp+>|Hz?e&Ce0?Boedy)cDk4e#7M1swWt+bnyO<}2W4^7l^DCqE|057$VYkl*H;j+Y
z5j(-Ma|EkWjhC>6s`h<GnbC-~I{Nc`4<J96%E4u7tLe;7y291sp2ty47`|f<^w1Sv
z_qLFANRhru_|;$hN}WTxWrfsBSf{bzD69+jP{3M?F_iWW8}%;{xd;f~cTRRzzW<}m
zT|{XlCvEqPvi00;eQ?{M>;s__2bSkpcN#t&j4mlt>0Vloq17%z+@zqnkX9`+S4Z)_
zpttMuks=g$=WYxP)>pv~m#ylQ=6IShLK02q9;7a&#7Gj{#{O5|`}@dr$SAI&=iuVC
zswhW7KVeJ9*y0s0vOzgg<9z<OAuWx5w4RRckwW0v!&0}>Qz+wL3LvTKE$p2DDg8}j
zwB=%YpvACz)jJU9(ao(HtFa?U(k0D8TM)<+eJZ*#O#!qv>^1<d$8kj!zE<6J+2G_;
zuv>RYoimZ0y-N7Bz0}20rPfk&yl@-(XLjH0Lf582PF@0Bu)EwuWQB#Ltr3^A^W`$}
z$ESXgvqVkCerj?pR~fBhi_}DdB25%@4fldSAtt!3S7Uvr_&QV}#KwGi#4Jy1HfME+
z#B<b1bxxhi&xxlVdB5$`uM81;R7!(s!wc|4fwa|iNN(n>(`ryNv^<Iy@}0Y2rMSG8
zm&9Lb85WO)MJigLw87Son!HzKNg|sOjUq<i{w1kv%Exo&nL?}wz<@DplNAJ$lYfT8
zL^i;FFl>w(&(g-1k{`QZ+1-ecR<8{9Ppyh3gSm<VH?H@jAu+M+ZCzRbHr6&9!dY6a
zm~muojhp$Rc(MR7-6&9W!{Qwht(Mq-jM5}Mpy}<8S4bR_FwgZt!QrW}{+#&AbumHq
zSJlULnxL%`hsBmy@R$eIy0S+6OT59bXMD;-gcp=8Yxv|#(n17EkW!>$55^l+C~Z*n
zRm06EIpT$DSQ|M&A<ruEo5d?OZthMzw`<GfGEtBs6o}6IiGQIRh)d-a!;e1jRuZ$S
zi;L3y%?IcStDh~do7%zEP?r?jshpsf7NhQ0C?SsXoHdT0szD6LM-<(Nu`|n=;_OP3
z6#0+y6(qiM@7q4<VP+kQcJ9i*#nV{M3}Npv5Usj9cqiIIIQ*{@`Y5em!?+yTqtZKB
z@Z)BDn0LcUT@xdZ$2H;|&%so8^nX(y7*P4O4`+L#UR2uMrdR|rQrvsI6@TU6jH8p6
z*54;ljcBmE%M!a8@Q27Gg&Ob|IEkwd%v^KT#^J5c5@fHZ*5G|FqH|ayjUOIIs0hXR
z4}Jf_>)|;dV4?R#xGLwIT#Lvwhn7uiAXt-jyPqq(=}fuyBmVl5gZinA*9-1|?0PI&
zM>8AUkH#%iwIJ!qwq~34F8cp7LAc}c^3m)QwV~0nLw~Ix!d0qenmrJ@_wCjV!2O1U
z(S2w7-nx{|ct}i@u`{A!$307|X}LpMCMoct1+*Db9A9x((6gX2kUtf$Q=1EtW?2cE
z;Lwo8eY@e-i9Z?Va=wNV6I#u9iAkhc`&)x;`rxx}L6`AupL~_{ZYhv3DC;&xoD5k~
zbjfQvJki6WyjyjV)J+mvLp_!L-w;usB?=5>2Q}b1!LDrENn?HWy|98lOBW+LUWCDM
zJ1B0(M3h#USr$Zo$uN{m)Le{FwH2$y^D5lFLvLT-Yh~`w_b0zl0Bkz;{Jl|-%`zyd
zqOel*j3_3n8Z|5DsF;s{CXZ_W(S$YH40YF}->AXo<(ZW3>RRe?mRe^k=VG)I&Q<1v
z>nfY77@sU%TE1{P@Fme5(2AWFGROg1LiKPR1Y5GxDTPHQRn5>iy&XW=Ss&wGx5d2Z
zkt}8_OCgXQaROsoQQKV2GO?d-{GyMkS=B@qVih+}_QN{EM)ONBcK<nwKoqge9JPCK
z@vV}!k~7ipT^J=%Zj5?Y_r*6h1?EuATX`_*-&k@NgLO@pRX#+TI<4_x;dm9Fie08l
z-2ycDR}O&#%*JABWO{bBGTp?UfQM3}j!c_Hr$M@HjkK^P$K;)l3$$&Z#G|wX6kNlI
z7|s&CMR0S<$xMGMe($}-H`gyxqu<w2AHn&;!1b3HG-0Km#dbm2mo8FVTe)qZRMUVp
zB~1qR;7_uYPW-S;uFcCrxv7XT5ov`ig1*z&$Rsz?sWI$)KA1*mhkPUo02hh%tMU3p
z*hpDq<>PoAEXkX<$v1~^WGmp14c^ac<QNLE-qenzmQZ>^|CK=ideucF4*)}n0NDR3
z+n`t~4+DNIALqn7P*T+|QnFhyQ5C)W1BHA_EE*!mQ(vhKD3X57n;&E%s~+b|Q2gq)
zQtH9cRPYlxSoZj}+9k#3U?^koXWFMhL0%!a!-k3l<W;AVvp?h9!pF`>fi-)i*29)w
zBgbMMU*deH$cr8vKQVi!7;`M@%}OLZz!F1dc8)-sFvZtRkRs~h3kT14|CT8drN3}a
z(|w}sG-i#0V+3A>KcK)l;(&{k1^g%roSsdR+R=JsRNHhpqt?Ppf=jQJI$=XjS~X&T
zs?Tw^_!zY7!2%7!t?<LM*Tf6%G<G(vQC9~GY2gL;!I&RN>koQEtaZB3u#Ag^3-odQ
zrJiBqC<P%U=rM&3Me$hBam?RB&tiad&d-}(6jAqSSu;J9w%KRl#vFY$O*&0TxQNm0
z()GMYK{wAWVUGUYtq#Vk`LCNyy8+U8kPD6_3b4CkwgQ^1BDIQ^_4XyKUcMqPU<W{>
zslROviy!g8bvfulXva&LEu+yY3X5*G@hxwzR81S43$MB*fq)F~l?#)3{v`9khDB`f
zY-R0Kq~!{xOhd{>&n&ZoD@*kPTMB~}CS@Uqj(lnq*)Mp+P{mKKZn+{6vvnPyQ&jHW
zqBK6wU+ot8RS5v%_flo&g6g}n!STa{yYA$@U(tGeAmd=Zw3vX~b8DwY4;!KB!7wF!
z-%2}u58nNHWAeM}V%o;|64aXGKLM6S{h~H}#Ypp^$zVTX<-NId<FS+`;$ASqjYYGY
z(1AmQ_opW~G~#t;6%lN%xkFcdcHJ>gPi^9)yATolprbHyzv66~Bm$HMX5HWq)Jbag
z(W29-Idb)jK{HxL9M!cg*Q*;gr~;~QCeNw}XAue7!;9vSIKHNX>Umx|(XtXJR$*Xh
zx(REg;PtAh%$_h48@VdZ`d_|KjtTjujE3#&gSXlr*15^46pJ5JaW4KA@%CiVX*tS-
zWL?G>bL6#MO?fr06zg_tE9%@Yyb+(3e-s9JPYRymrts4*4deIwNE0JW6KgN>6lq>W
zUUXXisuDP3%>>7N82%wA+VYWFC-H8(86T>0<>g}DMy4Qd6)9ao_p;SY@ht>|YaEEp
zeMv#ZXj#4|oRgjnEJ6qj5{712t*iyBEgg(Z*2x2J;vl06Ow$u5EZ(iZwPMt8Ffc1p
zRR}zGe9k!E3HsUU82XGXbynO>h*9gjfd}VO20ym|iNW2b!A@z)J^*tAb^jRdv5_g&
zf|UME(1=vlCL2|erkN$y9*fm99U9L1!JYXIfq%4^*qr(Pl_s*shkfc39bovTWRJ0T
zrs{dj^o_o3l7lo)_%Hk&-cJ{C^W`d3i^~9jV_%}QhK(M+4w6V$(otP$B-thlak3)v
z58}J@V=?WH=8md&o=x-y+nC9+bW_I?mC+>gx`QV#CgWCt>Q#Ptrl~Ezx%=DLTs0C)
z->G|p`55|mS%Nj!N;C~yZI#@s`f7Mauth;TQM`WVVl2cXdc_*}>3<k;yU#ApKqt`2
zVt$&ym~uI8ceebO7&0mOa>n9}Y~=|hztyk+8IHFYE=&QB&h(R4iD-rht}1(zH%>5`
zSjC<N6c*nUC)Xl-??AL-bJW?nz`?fCP>k(Tf!@&?@|OyCrNc`L1a-4QuHoYi!w9qW
zsQTCtF6jA~LipVNq_x`lS|L||5KmLLRD<Sl;>~3@BsN>=ed)jl9W*HtwNLcB)EdJ<
znIy%h(T&m6gNS^QyXwle_Vy)DkgRH{yS4(axIJ#n)wYqd2%uHJg<muQ*%mZ9hKvkU
zJ1Rh`k6UFwVAD|TS4Nkrnv_B)L$&xr9-i#eT0LFN>jm|tv0>)Wfd)}KoYf?q^7lT|
z{ardLA-&<V)IIfOw=GH3ID3d4cD&2Kz2CWU6my~vpO(_8Pt(5QH%Gl++l4z1U%pZi
z==N~zt`b)r2+@%pn;(_cC<h$+nJ4E`=XrxsnV<rVsU3vD*w}}X&u$Z6<+3|Z)^i@T
zx($byDNc>eF|r8vQYpE~XJ8R={V)+$rQ;Ax^zod27V$g*?6^#jFp;#EeA8Y>w4;l}
zXUSV93wQl(F85H0Sm{C*v-PD9>hj3qhZa<KUh~10?P%%7OV7aLvm=CRf>BMWKW7Zz
zFY)in2|TRJRvBAyx<ncACAv-=y+p5<H7UUFT(^_>PWOvoPL8b8UbzA;l~FF_h3YAJ
z^<)pn=k8n)z|HS5%zVb#Tj^xx+t&?B*<y3eWzl*8LnnERxW4uaOs8pO3NVK~Qkz(d
zh+a2Lz<Xbp6Y`Kyo)Pvq@*BlDN<Pqz@bEqoy-D0B;`vL>i`S&B@ZYspHA&;w#pkqS
zr`%un`_Kgk<*v?pkN0#lL1phESdt2&X2&c3!5Mw=Cr&V@PXC5+4z|Ix_=b9`GX1L6
zQuV)$oz(URy#yhSY~Z&%dMv%3p4)}5JvJ&UXwhgZ!QU8@4J4|mk0N{yl~5t8tHA>W
zJeh%-EejlM5ttQm>6$Nk%2z;@zeBQQ34*;3<0X>lZ|Km1yKv>qWVxbF7{r-Eix2+J
zIAf$U{!qLAy1L&oh|XP-QmCt9Wdp-^KFYWeF37>Cmw)%1wYh4>#+|Hbu(te}D!wJ|
z>PRBKDG@+M4Im9sc&S6_wH^nab-Ce<?jol?2GfKnXo(%ED=tZg-!hSRk&auym1bwe
zk-&sBCv|tVad`cX!$+e6S3QoiM?9J(YcHme=CT_U{mr6R6lsZs1bIsIlvBLjcV}5{
z{JH4#&DS?4%i=7~4GB<gBR@)+P=}}8sF@ZZSYYxDK^uo{%Juq0Yrckp<-KLMY#=3Y
z0o<NWx;ITj9;U;(n_1ZCA`|o`_fYXpgSukTbGs9-kr%q+SSY{suC&&Cm`WBmyR@Ms
zboUi)A2s0Q3o{4ER>VR*ug?dGURiz-*NWjK2{9>YnFwW+%=_GTVQS@O7YpL~C)3s_
zikEIP6B*PftZrImtT}k%%1wphK0lh?;{c#5I+$aw`sC4_Gb|{M5Oi-{r`?4p!>5N%
z)(jq;{CvE71vlm%vJ>sKxH!chCrfQf!G_}Y?kj<B-;vR`O8RMTmp@eLOIAvJ7dM+1
ze}D;~%x>Kb=Huvhp^P_$4Yo=@WCUtfGvnhxSC|uhPHi;DcUI>7%7dzA1NSl>r<33E
zY>NNI1nO|w=eOsBj1c657*3mp^oaS@<c#12_;cNqh)I`<&%liH*j+p`DIV=$5_8pC
zf=Sm=k`cnOS+A<~WJ50(jpst;`VU{J4HC`mDPUEmGvpC!Fg32e(9sWz%-Num(=#c(
z1Ih}@Slx&s$2+pz(}9t~%k}=+=t4i>+M)=!ww`gat50Ru@l+)?X&{~T=W0OxH{2%B
z$~#g5U;n|~EFzGy6Rb5nI?ZiTmI31HpWakW6GD*7sltcx&Rm8NHBISAqa&n^V1!`Q
zfl@%0IzBN=x9O%6J({IcTiOutIr!)Uw^muuWPB7<>Dj^M6feIobum_$b@`iTrSyL&
zq9ux4@q`YAM+Z`ZF{@w&=e-0P23Ti&l0Ux!+r=`~HS;o3K7V}<Utx9pu>!)EZ1XlF
zA_1QBlsoRGLH!#;2Lzea^;P(U^@nFH(z2vC`h4#%-c$Uwu9JX6>wD@4R?b)L$g>`N
z;_Y11WB1ydA`^Futt$5|t&hOZ1;mrCieN6v?%_T@2{Ycf0wejCc>2B`4pdO7J@jy?
zjlUvo)fq96tp?es_v*DFS<a3w#nCMv{unlB4urJ5gj<dzLbOWs@uRYIZ!TW;YK`V=
z{0%<Kspb^oQ~p4?)35_${Nn4h>6P5wr~3BMlYR2c1BtB81ov!=5Y>{edKctBK5*7G
z>8!3!6It=P<CLFcoZ2_Cp_g=n2>+DvE_ddtWJ5RrsbSMNMC07<K<AO(I2l3%+36TJ
zrxf`5setUtw(fAdfW%qaD8B8%j#{i|WL54@r7!t}H#j;3%(gJjEGB>8($|+@6!r2B
zIY8D_wA`<i2+xILVwWV-Ttf5nxZ1kPXV#p(op{q5Z8oL3FjfjH{+jWh*hPl5!$Bs5
z=@)LocSfe@X&;!Pd%CfBCJP|zgAE2#(I$VnneQj8_E&iQswfA{H<V7RIAdni8bqF#
zd(2-l#YaBOC`*==ucy+eyZgdbi@H#nGj@eNy>f!HEA-*<jZ1=m#HL3g)M8sJLG$fP
zZNj0fMs({hdj}El9)};5$nTbUH1x0O-|`1}TjK*{xyS^D`skB0L}M*^Rw%r1&l6v9
z)i{UG2r?P;`(CYKUiWLQTHIHQg%TRAfISYyDDE~_1yuqJR90W8FKWhsdil~9`sqkQ
zipq1{E31kET`H(;ho;6pp^MeDCW!E7YK{R@qXr56z!ZxQp2duVVbn=q>2^yspUChS
z1wSyH<S@?V00ZGAm%b^oTN|<rDGCGw0wtP-8lLm@tV#X{551U;8_h?~=sHjHy0Frh
zl4m*)NErFQiMkeBz8;sX<8-?B>8QA3X}B#kT~}eD5?RpBsy}x*zIfw#jEqZ0Uw%y}
z{jD_bpcWB79Mf1=fpJ+ds1(~uz4GF|lS~0QL9JiHhVIOH4qJH19pW$SOZ}aYA*$Py
zCmRaXvLm{KX;Tku?_IUcR|h12-ja2X0xh@l+6^cvD*z#Y9guK=GGTDihfv@MJuM0V
zZbH{;@Vx0KKlK5H4ZRkvumMj~wOJ1e6KmV#o~`z<Oa`8H34J`IHm9^Dp|w}ts*;yF
zBh})amRQ$5PulA9bVJiz(z1vphgf1iOTDYT;o>-eJ`R!U=DcDq){;lrlDIUOWO#$u
zcg&zBGWvJdAtI+G2coB6wkSMb%rb^>IQqqvPNc*rGcVq^0ho$k`D!!hXkFOV6T&FL
zW;oD!S^h*j9WS$7I&?=PKb{9VE^P}lF^H#SruH>AT|Y^HjT7wouu!komVLH+>Np@^
zN{fMl^3ibZ6<3AQ;ilwGg52;4XJnk8Jx1-24z97+9nr205owQ-Qc$o?1j`C8bG&&0
znh~wKSym1%k*cH^%bp1iMwOTgiTXl7ik6Y;NWVaz1mIErniic3ZM*?)NfQwOohc3u
zMss~4cB?{DADy~S(ZFQa7@q9MlH2{b=d<#GQ@L0pZJu&W0M?<E`;^~Wkz~o&H<}B7
zN}WP$)e5@yW9TA`X+uKG81ayrF8!~+ue|rm;A6FwQ$7H$)i&s1RubIz!GHB#Keq|m
z>sN0p{9>(tDVHU;DC6fwzcs-D=!=U5yI0QNK2O^7+}Nk-r{4W9W@CcXEG3bc8w$JD
z|29Aoas!-<MiCToR3yik=2OeiXuS@`4b)!vdE(Q7Caf@osH43M(+i|B0(`(x>Zf3@
zUkl;Rp5kYVB=}Z}uM}p>h_5cXNw<$<n#y9}C@88C%BV`=03!r+0}OzfHwsoTWVj%!
zNFSIN(`g^$0u@oDdUZ+j1v~}+eSEK<wQb$S64KrWAqT_~@L*qHV;5E8S+mm*D2jsz
z`oPW%l$PE-C$ztM*Y@tI95E}QOOj-vanyGe7pEtK%>~l@yUon%uN#%c*gbN7;JN+g
zcwJ!Loyh|3+p@&*FVxhX#j8-h6#$5`@d>4{8blQphd#somn(Q{_;?oPyuu{eT}gut
z=h9Gq-a0XOi?p4)lZPVY6b#>0asg8BtIEEVAYSOmm{hDUf7?8L;Ab=KhI%}2dM0X(
z=eBi1>Y`Kn?qzeHwZ`{sq}FDoc~WPXka-#!VkRH5i9%@2)6WrQylOM60~xJBa;0NS
zg<VsFg9l>*G0sQ=<X={RsSgnW)ZI2((LX=^SMl%l?a9V)6ouqq8qI(!t(9a)WK>RQ
zqYbWGpq{Ckbl9sbic|-UN{rB^iXfBUalC%f!5Yyz`NtiI7yOFr+5;jrwgxxfS4O5K
z@b8Z3o)zjG8VJAh*yB{LM6FvM-H;U(+-u$AHK_%Mnh~uo+4n4P@-~&%lZDb&VIV5C
zm}KbnrEN3&H=70ua&SeW3k0pbKOdQgVn#gX^ZhQ6J_z5jaX^F98cAdqf#KB$Tva8Q
zD2o2<_{Tb6P&VXwNXu!Wp~p^T#VLL`o%>G<PK+V~8QiEFJ|;926kTyYrzbz$GS1X-
z{WF}^N(gt1E{1u}9W&y%Ir^v&-nn*ti60wN*<vi0cUb2pKLlL&oQ_IIupIVxYDDsF
zRffD|K8{0@eo<|I4db3f9+O?D{s}=fmhWR)fp;9l59Be1)}Vm*DHcvQU|07~U$y*S
zH;d;_2h(1>ok98X^qJ!QvbsIl7v=~Cw`)!$iD6bwJDDQWDv+*w36_ezc0OsU+QEMI
z_U&KvXT7{H=JJ#^Cf3|2b|bMD%EK(sdp(`v=5Mr@hR6jF8C(Gp^T|4BO1-`_h^^j>
z<|)^0sxrzGoa<%gXI&y*Z*|IdEj)bXqk~rJM)vZkbU(z<SIm{E)6SJCooD3dnlJJ7
zOS2k&wlw)>^BA3b^7P>?GMXULL(<}${v_6Sn6s0FmG&)~c)XCFlq^T*c3wjT7XvVi
zgSW?ky6HZ?A{tb=Dnmavf}yj0_FSH|nWOO7^_e&M3Pi`Za#KnC9Z3$|_P3%~U-SD)
zHVe5YLLF(u4&51;6U69f<k`B@bp0X*+kp|I??0&48TJu}S^w(%zTFLz{TyW=QWHvV
z((`BgWGptU2`zP7L)VwiK|)I&pk_}$M}zvN`s@kIYKvR`=>INfCVKQusek16z+NHK
ziYlGkEomgSX5fQ;K5c~Xv!@e7>gtFe%u~jp{s{n+Wz~M8n+yw$iFIp=;@(thnI>o(
zIj6OgE^;(guPK0Kji|oO8CxM&VlWea5BmNq^e@Y1^ydVaTgc+De}JA>1_`sWa}<ZE
zUWJwB28m#cQ#}?Fe*egZ+OUn5I9S;Dkx0*T&WPEBE>&j`thMddMGzv=VC0ocMFTwv
zU0*8X+q3e1itkI)O?-x|X8P|_|9RPExb~yFu(Fj;ZOGH;71vHYr3-X6nirDft0-d8
z;~E$pJ0A!>E-6bu<Ow@Q0W<HcnCY(bV@ik)T*|8#z^!9gO%%|qkIuxSkeJ|BU)E7Q
za~xn=yENo;YW|b|U3&lDIe&cmp|$T5)jfTTDB&h{O{qF$K8O2U!G72e_XvPHWZI(o
z&u;>YdIdYR9I@OyYYhyxd+ibLDqf`t$6M%Qj+&?|==|P(pSt6~`v1xBcu=Wu{f<Yl
zUQ*~Gdyu@xliCm)uk7l@$!++B`)59Sx#Vs+nLVZ9g;ujRa!Q6VpW%A&%D!HIOkw?h
zFLJsk>lw&d#{A!Jb)`Pedu*EE4VeSlCWwjD!wUcZcR&98QS?c_$eY)`T0(YU+Vw6}
zfr*9lQe^v|Iq6<Y{({1q-b|-Gg5(TJiOL{n=ZjH{CbGS>udDwew|FRjr*`3;!~{5U
z0K%}`)C#3oa;hF#UWON>qLXj-RrRJ7;%fG*jWqZO;y!q~NJ>;dW1PTDqJuCk?b$}i
z?ic3q$>)5(x3`^!=qF#E>=tC@4LOqo{_~|5LCF1bVjR>k?rz3we2G-_WWu6lMay%c
ztJ^C~skRf+OvMLTRNkte?8wRW!K1QyVxw&8v;d7VtKBchBYh4Z9gwH<0IA#cM<}Z-
z)UWk?)JwDS(chqvPs|jTGxp1bE1zf7vBV(55qTe`)>ItC2Yy!G*RD>$3!JAqoO9>s
z;(+|?1{U^jy-&uN=xIUC4zKz}@ZS7~>|F7XTJ`j(bDq!Hh1Y58ad`X!Z2~IAs0MBH
zF^fX;VviwjkLz2^r~Js?UQeE3;`!;6b>`1&zYmM^zVPuTT+b7@&z`x3NON(2i1#__
zQYg%)u<j$oAru4MFFC5TiEW=DGpyr0>i=7@_7r4D>~v#PbnY$=scG){kCS~u#SK7Z
z`Y{Y7^eWk383hwnK%{HY1*4~FbZDmu@-+c8Gyk;d13hvU4oDxKr0=!5?uUH}Y3rz@
zpY<tEwj>i^Onk{5tmj802g<7M^0`poHZ^f8cSMw>&r4J2wJc6LR1^MhF9k?FaoWWG
zwakTW&-oZR6?~Fzf7S5tJG;?kfQ^+Y>WlMLwMFB@AZ>pTdoSAUkXGO6@#2d@YX@P>
zzvk{hE+IbEZ4Z4t7{l9-kJXzW4K-1|@(*lxh(ov-LKy{3G}V^ZlxW{G0Rqevq~7aQ
zG&LpM-|sw~ePs85^xXGj1hs`3!fjifIZ#956U24DXt0`wUcM2xWcT`?KJWt}S7m#=
zGj#asJ#vIzZuWYk+)4<chL&`7DqAE2juM21b64>r>+^F9B?;aZ*NLm2n`G#77NSPM
zfaE~_$5FN0pz!Nh=5K7lRH2u~+U~Q~+WgC&wpJLdf?Us3W}q4XHectCtQAoIX~mb@
z&D1>_UPiyx3d_pv>OS~2zue36|2&l^&xDcl1;fH*Zd@Zmd2!=>EnYV&ZH^Yp?K&=+
zp|PuwlDwDbF6%7yWJnIp)YQl~z(9{q!8WIoZe^_4J_Mu6d$*_Dk%N;yD39J>(GC0N
zy#SMu*YNjC!*%VGo&Y5UYixhVsgBGL0Lkl`H@sNL`MgBYd>H@aed=-FD7iRyS7x=f
zmglSNskeLxka%PJ?k)Vhy7FerFjQpULF>U<he>U^F2x08vinIRgpo*PW=L}<uDCO}
zA`_o0?8^K#NKdOEO2(T#$_&HDe3k`jk|#Fyeb6FTXgJlX$lAmWdzwTPjs0%%Np1fM
z@jq4OXO5&mY|ro-BAmnUWWp(*YTk!aT9vhpAvjJ3BAm?}v$U=*RtUCfWjLZTeAUJ6
z93}n|tWs~?b4FWqUrL$!YN-(AJ{<8bG%%(kR>X5EvIFCVO?@09%ySoK?KTwO_ZnHQ
z6U)GaRHX3mK5wP3qd8l;pveD)MhWx$;#Guy%1F1!%qS_yiZ2z$^*4Apqqb1cCZ1l9
zJzBnt4-t@^+xl|GeL9s%?_*cTlBL+}u21eAI+v#}sZ&`~l_1PJCFeV*E1OYumZd~)
z^ykl_C|&qMo{Dc(X|g_i$zry)`nb~+?Nr`2K}t>bLy1R&=5|VM<qWdn{(BCT%cz*%
zUpNT#t(=EjL?b&CdGWfNb(mMtH#hDt^^7fJ(y>Zv(DSD13(XRyP8)o4bcG0vY-aUW
z_Xq)uxR~d!FM2dIB4Dx#BkB<ZP7?Ey215BwLA0;<jD1McS{T16<8?rLO|rAA0?*6A
z$E!nh&ei2ce~v;y1IoJ5>+KA>W^VwD8mvP<;W4-nWtZ3ffyr%%NuFvzZ?~FOF-eIu
zWACjVR01>DUlK86F=qBDUNeY{?@Qm#*~ZnJwouO<9HQimjMQ?m3WY?k4tbZ@?fh(B
zp{I*Eeo<RK5pud-jCx1nZ~8E|iw-$ym9dHXv`dtlENwnWR<vhly`6=Or9{qN3A{u?
zw8xX}hJr*Xn}H4E{AA<~B2Q21K3&wI0uSw<eTqgEqai2lqh002J9Mr^;PKIMt15K~
zLAN#0xl(C*=^}n=*OtmZh<jN(V-J~ir!f=Bg=E1RC?^**7ueVqI8{1hO(E(iddFkZ
z*M9?8wA)L67v_hEz|#{b73_R~F+PVzs6ya(O2LdAZOwFn(bOdmvSQ_^t8tuQi^*7v
z#+^y9wzt^9@!qR%tO~_h=X$fyxv#uU{cT9L+IZJfaVssACpG1`k8tCCBg(zoSz@Hb
zMM(Xu1vcZ~E=sT-tY3VfYCHG?mQrMz^Eq3yYnbr7TeK>j0R^B`jAMp>IJ&FKG=+sa
zEnw{}BzXDsL}ydkIp^vnw=qSQn+_MJ|AxGLR-1!dhh9M9_vix678gvwq;0(gb%|~?
zq*wy35cDRyXqW_4MNj`nbmX97MguZ_(aICU0SEty4$58ZhM87%u*dZm>HrBU>g`6u
zOd5mr^5|r9lvc7tA&XpEyfMf1ydJh^N;{;NSxSnt);k%gb>Lr`ND-?D^HOlD#f~q7
zo)P?~q~3cWaV0W!`M~=54dSigoa-0`u!CDDz8%-4Zn8gW=RSdAUs#K%PFHD0OZk>$
zV0P}F4X{@oB2sb5*$-~jUkB0e;`_D~n{b-Fk3aEg<M0Qfo!Nr2!fr2nSVEC+JKz0d
z$=48p?SkgB-T%6B-QP6)6H%KYGLz{fK=a`%hvqUwegjsuo6ys7Y|upZdsv{Lrm+0K
zp7-q^|5|)m46*HFVmfV4!>|~R6-z0t<>-yos8fQd6;(Q89sOdltw-9@c=7HG#v;}A
zgxS5fE@-VM{ScG)EUL(i5@6=@aQ<bC7`;SNG?}D1CX$E|X$lh`D?3QEQ#*nI0q9MT
z)ob8Y%}q&3D0n1#WkmD7x&d<P`(cFLI}+Qf7q>Q1)s(qTNO-ofk}HAW=j`BM#zA2@
zWIcZhd0)vt0C0oc>*qSivL7SF#8`VH47a=#dN@Itt%uaO6(<P2^!%ptWy^si4-Ew_
z9i`tGqY2_A#fLjNX)o%G^h{lN(&yDBL5Gz{B4!1-*J&14<JXeIu*$mTwAPzXs5Zjz
z9+^sE?PwB(2QzU!Oda|Vl&T(E5*>8PGVZoRJtvvh>pdw3)LkuC6+oy=Q*PvKsraTs
zP>wkp2sV*_?@J=>#u2!X>KePFmpOSp1IF$q{O;TOR*i|YJwD1Hg+SEzx>8+8?c!=O
z=~`I0X?)&R@00caJa+ky;9Ke2R$7-iHF1_LAGbTEiQ)dbZ|+d%?*!j_6?lGVW{|`=
z?C|Yu9;DA@7YF#i7`rG-D?sF32(x9~_1@eC&+!jtQi;Lyq253f*)C9R>{vzC3-JO*
zk*uLqVo;sFa2z=Mdb8lY%QAtLI3yAXu{p>~5D`@HylRB*<&g~``ZUrxhu2D3HudWT
zWgVVQP0^@-S>6jMmXXyVdW-<_cd>NUXn`Mwl4Cz=qzgrek?`T;Y?OI<eReRiwcZEU
ztuSg2qqjND>}wGOqq<!;b7?oV$iZuDB}w#<lnhh7jp5uX<?U~5pu%owhU|=tGJwqG
zd^&R>5c+R*zhoj&QgDNlg)8Q;;|HW76L76VnZDqC)|U#`h&3z9lNeo)#bZiceaNS-
z*cAI^CL2*{`WI>!JLUpF=g`@-j9fTz@K@kdUz``6ZdLj$&WA&9ni`ux?1zyt$WUTF
zLL_c;8eS)}U1hhHScqR|QWA8Q#!QepvzEFUnlG^$!9uA`MQ)Wzw#1Sf*_K{Hn2Ty1
zXD)vQBdqLt8?}m!tZ3u#$86@(6A@6K7CF;(sGMScXl1m{&E}3LDBa=vUsH4YRKKpT
zo`>*-Q_flrJXg(<Aphigct16DNE?m+8ST-1EmiTxjNdokTfTO54xHd+Slmhop>ibT
zA`~@+`OQ!oZGYzmPnDx0%M6l_oXfDtD<;wksnw2MT^FBIz2~lR9vjJ+DUg*L>yqJd
z$R!YmF&>CT^Hl`V;wb@%==y>*g$k){t~)V2^YiDep{~(4)C0jQ65_u|NJ{JSG)8L9
z-7B+_cIRc!<TtMNP<pRpa=-7k9IZ%O!)K_>);J>GFp|XQdK(;WPHskMR03re2F!Fc
z?tx~xh0Gjg>)f?%W%;H@XpesOTf+=wh-fhF`~WxhQ0$qRO$0+NrVS~<vl@}K&)#k6
zJQg?_vo@|_**7C{^cBwI{a7M}KVK;18_CQ3$6fAJzqMh5WCsE@yMw<Th$^&Z5<p_q
zk6@HKDN8cpsTQJf#G-kBi-}J{2asMZe|LsQgcl*VGvtFb$Fn(HtJh)`jA%-#QN)3q
zEG7zs)608LL&ceH_J%#q@c-wh)(8199wB_aUbeK<`iViz<Y_Su2GP)*_pk7_K}!a5
zuDa}TW6`I}?~Bu{Y}!nY)x?Wm*Mx{b+q|Z@5<A6zyOeMA^1^xgb*wO;AtL)n@}2;>
zlq?e!W1RlsDx%z!h`#<5tK-K%{pz&FVUiY2je{-nXQ|vmMjo84nD&Li!}ToaT1Ykz
zwRJ5;J_iBOZf_X=Nu=w}7wO{m32jH)nM@F6R(vPJKew*^&toorWGPV~(1&VyaFp)n
z1H{9*EWF75-P7QPi_0l~4~NM8*EPPESrUEi0`siGZAHH<T^1|ptDxU?d*kWA;<8xX
z-``-qXWdL2iudUwzW{Y5`ia5&e0zFdj#KgK|KtRR{t~I19<Qka%TETMEqP}o8(6OS
z)zcJ>4TeljW6hYA#&`cW8b2qLu8`%S5p)Y~KvfsBZO?bNWOm_*u^1pjGj`p$%4W_e
zSY7V!$iQ>k@cxfas(TRdE{hM5Ar;!Q0-E!v7;Zv_@n`jTrcKiciL|W1)tVD#yp$;>
z>UqJQ$2~2zoI5@}TK;rSWjrb6HM{-y*?YsO2H^Xn0cE(W2wPUe^Qm}8L6z*kI!!IA
z6_+X_0&yh|`Zu%&3#!5igB&B1`}2W7Qvb}-w>*!Y&=ZsZWO~_LM0hZ*voYNMm=THb
z?eL8}PjYFGx>+OqT@N0ZA=wnJ2GW*C_<%aycfHp24KB_|5;a%3X$DYM3=+c)S!wN~
zrmpoG=WSi4jv(L-FFDGi3mju{!6UpdpL`?DWU(13^kNr7TN*b{PI~8Ia?1+I-C_bf
zOsF4w(&^<QD?&&C_sIg2*)FURo&TY0QR=s)EdrQofKXNJZinM80vAV@u$B8Fvk5go
zLZU0OY6cnps<eCui?2ClazHgzLRKbx?J*Yv$RO)5M^@Izz}*{zw>0WsYr%Nu+ES^x
z`Xb!Ftoz)G^G9t1=4&G;yYDnus3~w9l4=<o7lunI(a{hOO03+Y#Xs<^Iyn?7IpX0#
zQu87u$Dn3^y6kdhopTNN{x@yH$JScNmne-NlApNw2SJ|7J^Ki*ZB{7VS_TY+`$Fgj
zSew&|xdw`Mv!Z)!W5E6TL|qFt^4W=18jDj7I&4g{)`8@N5KU?lS6?^FXA8Ux@whYr
z4|dD1o>$y^Uf$k!QDy1srsFAO5S{nZMe}}#B(t=S?AeENKsA5Zb3AVOOOh{U5itz5
z`ISM@Oh9&B>Ew5WzJ*ebVHgSK0Eepy?_n>QsaXt#A!S^BDdmV|86d+2afnpvXC;?H
zYU$79Q9B;J{nC2esau^mQ6_Zs>lqU7m^OWSrhF||u$00ShJ)2`1AnszXEKrmscG4D
zK2rvM`=2*4joUsC$w0DSZ^9Hi&QJo%*6qDh6jvGXumROboZa7+$+d3sZIQy25gN9E
zq(pUC02xq%|FSg4ixpF1Rm3e$t+-rIWx1)~=v+%k65m?6J{NL}5Izblyd7`6r7Ybk
zx3Ym);{PwGKu-NOq|}s@NU4w6Y5=Uj9M^>t+3N8lBEy=C>8D9sR}xuBP}~xzjW6&s
zUqcYxwqa4ba;>v~(pdh$cdL_WUY(ej+)zz81EM`bstm8K75<)oLQlr(4N1pToc0yi
z)t~h!u>PJBXss9`b#9_2Q>4u+%h_R?FL?M*SC>A<PI<%!(`x@8dtVt;SJN~YE*DFJ
zyI)*`yAucyoIr3VI0Ojp5Zpaj@ZcWYNpN@9;O=gB4|$$<Yj?k|_WxFG)u~g(Wlqmb
z&vZ}w+^!b5BLOvAhg+;Wr&_{As7yguI3e2`q{q66xyldNlaAv9?u6#ZG*F%oOYd`u
zv=luP$LXO~mt*MgQ>B6zdO&n4Qycl()_vOb!29K#vLq7gqNfI(iaYjS?Ju9#v_809
z<5kc2$L%DeUF>h1_FOAoRIx2G4>tBlI&Kn?eIJ+tN+&uk6xjCo=nc)U{q_~c=$?x9
z=FKpB=J;*1Bm0YPgLvg67VUA2c{DGh`$KAU02!ok&YkL42t_QKQEhdVnviJRYNx73
zDcmRH79r(w^>`~`_1yXgY2q+b>WQ{xVTo*Y?E<^or3%atAuHBy)@Km|?<HX8cC&bP
z99L}4fd!OrO{KC4XkkVnx?=4}fcfg$T*C>RE1nER7TS9KTdhs?Z3GS*z9g96i<GZl
zMBDr0rk;ljM2Cegl=55Fp4;Nk=NUsXL_0xW(Gl#Ppqa}E(Fh0&7AVl2ON8*10qy1O
z94}n%UHEC-Pa|U0r;r-0ch*4W0nN_FjF)M=cN|ZozLiRFNMmQm{e3Y)LE8EbK2@i@
zlb+FS*5@$eb^k%HnU%#0vzM=l#00qvxB5@*tXg&oWKFuS#MelQUP{qvY4Fc}ys5G_
z2DW{C+R%H=M%N>igg`;T7D}A2(SOkKE@W8+>;u*Khv8wk(ODLI{EqCoIR~_u!W!&P
zq@F`1Iy0_cyXE1f^B#R#pB-t;S^WJ%teBkW;nFoeHDuuSg>S&YS#iRO{Wn9IP+>ZI
zw@BWddaI^2sJeDp)K8g8`q)dg{j+-*28w}Hgf_&Y%~M_nQ1^D|X#@L3iXAm#I10?V
zAR*DGIY$Qv&2>+;KK4&(f=0RoA)M(H<kIDXSf14Sl13Yamr*05O)uN7U1I?CB0eJp
zGe3PAx*LilrI+)QYC5ne*zgN))8u???tw}1NBwzvh8`0Id5E>DxXk8=W>VRLj;_(?
zIJZ?>(H2Ae!p~v*<y-^D={Yr%ql<+k-P>qLco}rvro(8(UFMKgRZ#c+tV>2yjh(Ko
z-C&v@0@8E1$WwFAjV!B>{bFBtris0&^56^?DAfOK<TZjN6IC=;mbb>|3XFRe`cJPP
z53@OzYW%eIW9W}M70hE@wfoB2^fD~H`rMspw7nchb?OZ~%J4GynVPYRK)&c?`pu?d
z2tRWod%HX;KG>0#e&W{pI37zLKiDE#GFwG6Q$kd3Kl7%{EGv>}ztaBA6h5)Jd>Ppc
z<_wt(`RNOrdb8}KQOJPt(pZ*_)S_6ab}e~g?D{3(eCnZ^>)tfoEJ{W3l%8HAWKNgL
zQf0)a`6LlXYw$6qq-}x6sGLe8-+Z53zWvL*_POi6^WMF|uE#-@Li^vz9?bY)KvrGB
z;n$U?Lf6eW?y6xd&L||P09KN3&PmqUyKV;UXb7WJp5O>H6VUS1M(Z*0$_}-_C@LwX
zM?Xxx8z2cED2A?6n_+c<s9UEM-gIiJl%=X4Rw>;&>a{`i&q+@5ujXPHQkr%jbKL5x
zvvgs%k*W3n;>T~KodoTK5!CI@MJ`(|dsZ^-W@4#(x60EKs+`k^AxDTS>D}ngnpVf5
zoWH27B^<y$;I*BC@9^}K(J}GtcC0(D(b{M&I)EsViGu1YWmS2KQk_3`pk~9L-yv8z
zN{FGj*Nb!^7wtN)q_E;N?YigX-P2nf-+w1N>M08TdYo7{lB02;$}k;Ce#YzRLG<`A
z-4KsKT886zW54AOzMFevPiJa{RhYiFHr;INhVi(OH;08|QQP`prB%pulyya(aZGQj
zw({$xTIJ2c&^PbsKbR~+%Hbp5|LDPR`n2z0vMl#>-+NqWZFs76E*6rq1I&lysnysc
z4=;oFXv63!aC2A{uZ-Br#k()WNg$~@i{9$1j~pmfA*EF4$EtY)y2F`doSA|vf57=b
zZ>PWh%Nj%1yPVAsho>J>jW;Vag|>M3k;OcxJz7C2JH`1sI_<g}>fSiZmR45?2*fo1
zU^#NeKNhkI)CzIuBGW8~d{HQF-Y?=uof!pk^LF~}yORmh@dzbms>qM#&uJ7rl@X@6
zoD|W#?PWGTVUNY!k@{{>+Rf<LNHLN1w{?G$SKYcy%n+oDSs$mOpXoJqUe6G&^ozvZ
zXCIUAi^yqPu8I%sPo?wMsaMAA=+hjJ2>WKr@UkIDZ&8vH`Hr+wmKcAn9|$5Fn_N_X
ziC;mPAhc+|&Pav%#ZiZ!syiSh68RK^@)Ydtz72A+Kgw(DmY05yXq21%l&JS!=nQZL
z7biyFgf5_djN|Gk$9gj4rWyXiaZ)xlZzqEIm&j3QeSNqw{$hTS@SbDdx_gl~iDzs0
zm+XUM)M>Jz$5wq@*i-5^ey!{Vr{F(Lj@o9BJ`fCy8s_ZBWl`@r^_*g^q*4N$PyQ3(
z@rr3{$3w6Y-{I6VJd8{%@TlIQ=mkBE96B~~^}=g=A&}Y4p~#G2t=sn)<BGk5u)GB*
z$;!oyr4M8m+0MWJYWI;j6l?R_)!+-1!|3+V_7IKA(4YOWYsa3d4=q6Q;-PuorA~=@
zHC3$6tQjk<v_uG8QZhlI@`JUY;yc3Y9ZdC4xe}FZ<Cp7i4(~3Nn+h6rGt9)WVvKn4
zgNm@?TSLy|v3^8`(sI?1t9pINS30G!zPVlJSNFBxcR$mtea-Rm=L12=YwLya^Uj+=
ze9a-ASKvjNb{A5u#+jvsx5xE-Tk?-QfHCF#Waf>`2<AF_PnuO=c@3WLbeNNhwkStB
z4@ZR2uoeAGQ*U^C?qha;D7q9xY0QvUHHIp4ZMZ1ZNoOhl(V@EZYHw`DytVZJI@Xh*
z(rtaW91E6?8f%jZxoi(<WV##3)4c1M=F?0kmM_i|S5_&|uvuo;H&}fQYwiBY)7p!n
z#^LJ2Cn@ii)KJY`Mb57YguD$FTIn>JG20O|kMud#gwvw!1TZr8#+n{jn~A7TtiLpg
zXIB(f6Qa)5(bZ&e(^KBX+P+;o(7;r3@$3t&=hTwf{qf6D&3$-)G%fRLm_(C@Lc?ww
zyDL4I3q2sd&}L6%F?`+VLKlS%s`5qRPZSq6!%VDf!+9R{-lCy9f_ux}-b}5e4lba)
z^T|92Hb}(5!KF5LE{^nbS9)Qonb|?7q!F$e+Nwj+y{~EC{Bd!|AXF4z;GV;I)yoxW
zj3*Q=wJE#^1XRq9fAPp$p4YjOf!|z`w7?1|8gtZ)B;3^ZYWdA$rQaNh&8cWUwF)Nd
zKCiIO@DY%y{_6Tc26lg07I10oOQ724r&Ddo3!-{2o?SF3Bdz{4><aC<ky%aKdr_)c
z6WV&+a$K1D`IeEE(qh8plaOO(3dx)i?@pB#L2%d|5sa&I(sw**Ub|mdxHuv-7ENY)
z@AzvRlGjDw=Tm&`8EwEMFD%ZFs!gblt3O0hGsz7cPjBi@Eo!(tWOF0v6Ot9sZuxS3
z@Tt*JBDQee7DX!|)o7lmCgJ%m-D<Z>i;2sdfCo~`nX;CFYFGvmnRewZxpnP^QxUS#
zg|y?!#pWyn!#~vTnLc3r=FQW=>$3aax>ftR$Uuh2t}<bRBzw|6SBj{mG6X$T#+s6$
zpWb5OmT$-}HdxB4IT>^9y_Z8j!)J0kPh#X4b^mp?Z0y{E3q3YM3-3%~X+nQXE-hw>
zcVH#Ko?Ql7>)MoyPR&ORE3(_wI@}Z#;m0d<%{EwI3L=4(U$(y6Ra*tR8am7fm>+<)
z<S5WbmapO)#-)(#^J98X>Hx#6NpOQb3#Q)6I-PxfO~W|F8|X$}@apJ0&CM0Vr>~OW
z&5UwrM}3v|8B<*brcbY-jHU+u&9Fhser)MkBvF&6FK<V=`is^^J<?bGF?@>McA&=*
zOnX<?Wf75fLL|KH{>4d`Blvjl4t$wP9?bp9v1-WvAJVu`2Ceum)dhauoQh6O0&8^3
zUxG~X*<?6TmvS94gJh~HMZs^K23n;ZF*7<SN1=?YYF}N)2SJv9owoZuXn^pNm&A|2
zetIdGF65lzi7RMDNsi3C&W_nZ8{thH=;Kq4p49pNU8~Sc$wOTISGkfG{^74-TqAqW
z#TmM{Bc5|J+vAY%j+ZJ!#;}O9oJlV?u5zp)EGnQ_G~?Svj)~pWE7kf%@(GoOjM83q
z@pLLpRw2vko(dGuvP8R!u+h;)ExNdS5D;{*t=KmwJVLl7A2pTN$IJ#(lA^Lc2ez$<
z3FEzAoIsF-;@aGcMF1iPkuO8OWYxXxi=G=ov6W4AKZ_FKkdBL!#EvR|+cK&rHO+L2
zGXbS{>FgC|isq{m3y65z(jn_y?A!@l#EfUPWtlAy{Y0Nmh1Z)6?D6dA<=QEt0ElFM
z;hVD`OXo`Mte~^kF{UB(Ni-iZZZ5C^)4QiJ<ru0YkVE9)KYlXc(y_Q(*)M!MjNVb1
zxxYUIYd6P33mxRB*ct*q+t#~j@WwUmgLLN?q$Dk(cZ?`|RMRN{ZWO*nEa{H84_Q40
zGY%!>hX<XFtRtWx6JhvTsz$0AvJxnKlkMG{N)Z|B2F*H!`Ur^qOU}>P<@wCv<aevI
zfD#fJOQ6eZlf*ALeW*6tb0*WE+T9a49{SqziuKU0#LtHtlSgw&)VW3NXh`Sergq?5
z4CtLz$n+nqi?q9-(g3AEeuRtLnDGI(ns!h_`Xtl6k7q0PMd2R78*^kMXr*`=tn)@d
z!io)*esejiv)jH@_L3NxPlG+}WJ$*Q8~gko%_k&H);<*D^#YU#vdP2mS@zZ;mT_;?
zNhOG2d}GKexY`nUG$;b>w^rkj6-ArF{!<G;r#iBZbXHMrD6JWj%@DkCn}zM#+P<kK
z1KwYjY9H5j-5Vt0Q~k<<zs!?vR^<o+;tgDn4sy_(?n|xB^2M4ThwsRr(s$+$2Bx)E
z?<F_pvako^GzrwNsh-!#oMQ}E3o!K0XRoIiEweehRi7yYlE<t}$;b@(u`$qnA07_R
z=Il~@ky5BXw1BvHCZAl#Ik&&y?qtHzcP_?o=Hct(!;Ho<oUr?zm4lZ(BoasM{_XWB
z0-7SC!1)z=G@dBvY%tn1NR>sw!d!ppIVt&~2K}8kBVd0v4+-7Ba-CS*9sAtIM#=i!
zijhZMnCE&(A*Vvb9%A^YWc4@DE8Rzc`6#tK%7AhNm^wh<xQOa03?n)$F<(J~UMbgb
z4?D1kE`l(ws=e%D3`sOK92G}lz?|;Z3bGX-EN<Xt>!XXCIuKHCN^A*f`$ez*-4SDl
zyeIlU;6niL8w~(f%OGPx-w>x;l6`U;*tpojhm!<{Q=0;6fh?<VjQ=}ym(7gVX`k@f
zyEhxnHOY0NbDZVyS`4}q06ST8fR6yphARL+z1JQN1Zour7OlZW6Gv|3{b}y!Y-YeJ
z#6%4lL3C9$gFFB64Sw1)88Gzfk?33?gC!z;xQEkpvmWBeWMl{hY*86WWY{q-fLkk=
z0tA5%pQJ_7QO~}!gywFCRKBhi1$du&V;!?5TfjKR>iSW{dI*<ayA)=$sh<EvxZ$pb
zAtMmpb%G80cH|6{USMkkqL}K_ed>TNavtKWj0)k`11d6KxLsVxO20h6X{IV`TUVq2
zLU`mrXWG%*egZVr<Rj>=>CbC`1gwFdA85CT-Q>e3yw4tbMD`a*;6PwNNM}~jrvCpf
zIO+3(2PsLAineotn_Z74+pwDgdxEE8qeZZYbIXM|$<<wdp(2TZ&;;?Ve0`u8h?`(i
zAmMG>Pj%y#Yy=$<@rLbL6mbwQIEy94Tm3lE%8ZJ62M_v81rhCkcS<t?U#g$}?4S~U
zj{8!`iD>=WK8omazqspY17kGj$1DyNQmBgky{osq(GIdTyJi^%!DNs_aJ-qnr{xIX
zRuji<2MP!SL3XImTn5<24jm2l`Y=1F+%N7BL0pKzQ@<~_2gzKi|6QKP7+`t4i5xHR
z!9*0Ruk7<@=%AoEb~64{+TPV&hL`O#BO~u#i}W1n!~-2sLRg<Rcp)ROrM>5G(+STW
ze0+R_(JHvq`Ujr4nUkXMe4cDEGov8-zCN9Fv8Fysr$MgcAjX3;et<k5KlhFqpxFld
zln<uq=0C)ZA(^~NFOenBxsI*BY3arB=>;8(3WmRhtSW;ypt?`ch_cqR@6p=<0^GoS
z6u>1z32R$4f14>d!`{6F{dgD|fVPfJ;hs|-p#Z^H01cY>asuX>l@$J#54SYj26!~L
zLzVh4w7(ung*g3=(o)|V5M93lysE1UKo{CiE1S^eq(w1C{0&~RkypU#P{3H)=YntA
ztZp6n+?T<zH&oA&y(?4@==xb36ZE`$gCvQ@(|K{MD(gA42#6}e1bYPdFb}7}Z)+SA
z(7Up1Z=qphqdPk7E_h8;i)$tmi=iIU=5uxp-TBRefa)hmAX8I`G0*b}TEQ<B8X28T
z7;1Xz54W9)IhY*~eakX!fj41!CP2OYg{X<KwLJrExO^aP#)aIsFZsR0(bo_xLf#uS
zmch7m9z(OZ{O3>(ItpK>XPxn6s$rry!TSqgZ<yz2CM6Agr8v<ZnwP$98R_rbix+nK
zV5h2UI~DaWjw!U!fe;!vu<9rAu|xJ)_^vDE;%`;~7}fZ!Pb%a$7tWyCEor5f+I<?r
zGR1_u1CId?B|o}X?6RPc)k`q7G39t6yZ!T5{DH0?sC*UBD&&D9%8`o)U<gv}Gu!gz
zYEOM~G|V^2L=(le-wLw7oLJNTf|Bx6gq;!a?HoS9yOn49_G>jE;C7M#_>H29#z7ay
z-R>SYUN<!Nuqv2x%F9EeqEr_QhlQ-xfe(ffVqdHlu`6Wl1>(#ns)^peqAw_{>9BFl
zT8FG!gDJnQ3@)nh8GF!EbxCMi3vInGHnV*Jh6iYf7ZJ(H$43GEB)?&TCf<8*iH7+h
z#_CjASAKH7=!nxh^!F-){fC|VsyK6RIezOxv#cTPQip=Fv^{>eLAXkIV5>NR?6Q10
z-Ux+%`yny9HYt^oj3)tORMK-A9t@F|p?HaG=RPs^0`0^MbOm6Ipd^VuefT?jWWPm9
zL1uR3%YpsE=Cb5@zSpc=0*(1*M2I(Bz9*yl(qU2A->Z50<s$L{>4^jW{D%!HpW8MU
zKqyOrB)IS}i5Mr_4HNnC-e1&u!`i?%Hdd5HCFFZQPtwU>f-B+UH>dF*uVZPUFA4Yy
zB89aY-3xPz6W#9bwB2&D*Z`ysfH%C^*m!)%c?}faszWx#gMh|F=yrWl@2NvW?0#@O
z7eqmXkp#v}9?Y4^IACJyql2ULG{sR%pFyl6I61c@=9$ER&2<9{qIfUzL@LIkqyWU(
zz4M1te(M14dlgOrh?D5jK!Kwx!1Yu;f=DIO9tSYU$*8~)I_Tt42swl=CBa8doRg@d
zIY(L0@KzZM**<p80r8mtvB4X!)D1Bh9&e!ES3;gsbHpI42ikP~frA^fWZFpi!05uc
zU<TuI<cMa@ai95z@sBYDZ_3pH`}`4l=!OJ#fCwW4j4?X*Dts+GR#^M8u6J|9m?_$c
z7oe0s;&`12zxmt>kgx9_%yw;FkH7*Lut30zt@jG}NYx!P&tZC(=n~L}5TCZeG@;Um
ziRFrHT1CUJxmOGzEp>d_m%px@3=^rW-#;fNyS#+CHN?i5hPDy%o(MDEKaZC}?1lYi
zukE{12+IdBi$Wxp#^ftd<a2Br4?{c{Mgg)~ZlAwG3!O}rh3AXK%mmy+p~4}rX8S(>
zI-BcI^)<vVP)B%6H;anoEvo+m=>(elutqKeVaCXy^<Q$^#O!a435>cE)n|bjOz=zA
zM@6hp07hT8*3%{0jt=01ILn_6!V(I|27CJVX=e&E?#t0Z)wKAZd;!$`^Sq|^Y52l|
zdGJq>f)_CV2uFTK!02=2e5|eh&4>d2{I5@|6cBQ%NAwXm2mkSr{nvLA5aC#l{9k|n
z_m_4_Bp_xv2R7{Uv*h#NKL7xP{}15*<KX}OeISB{wu3aeS)=@ve|eV{Sn67ri+?q{
z%(yTn`%^vc<OY)B^f9)k1Ls<XFt>D?(#r!cf}du1-XQEAwMAFX+Hnads&BaRJSV=(
z0_GKh(^J*rZ{2ey^PK7_CG+ho;ti+y*xf<4@MJ!EJo^z6d&wU3O@MGD5?`dJr9U2Y
zdhB|y#7JBt`4j`hrcN<BwkTV3OH<HV5WP}rQCL~+PcR@e)OCLs+#Swpb3R`rES$Gc
zTW7bij=Iy^bFB3SCyno$>cfqxYLpgV#bbbJfy0QrOi;Y%Zq@eK*YXvs%lcecOK+%_
zMG<Y4gVY@NW^<TXzbme$;OE`;J<>&E^E&etpxs-beM;?NDMv!$*u3z=v`HnlaBD`k
zGVu&d{L$RI1wEH}lQca0R2K&X9l@=}{ztP8JLHfI5p%lZAI(vFR#(#+n|g<pT&a!{
zrhz=A55==fvR#C!CAIAK8r2j1ZP_D)1%>q!7HL_mzVZyvgG$+C{6Fz$<y8$m)H3D|
zov+r?K0Fx=3c3%LE=ThKd<}5gxH!38RbigzLOmtF?8Cy~0+kq8&}UCh#HybZP*ZA&
zHSAQ;Rho?$tUdQgRg2}*`IgK#S57%eC!Xqb>om6q2g<)_-qu}5KozI{_^IxP%St<G
z-kKJ#e91b^Pum4LFD)CUmMOIFD|P10eJCE{|6C^@-Vp65t1Y<oWopWK<von(FOJLK
zGG-5ewF$y9TG{PlM@I{FIcel`E6l5ivk2oWbkhr4`lEdwMc-sx4L2`8TUM1@7WBQe
z>eeOb3d3)j;ikUIQJUZC{ZlOteR<8t-?v8hLZ5$7G+AH2)3Q{ka+G;hv$zGF{GcDd
zUgu;Q@VL)EfMHY?*}bZ8n1le1%o^=|@iGE2^CanobT3L)=XbQ1C{vP@vuBAId;3%=
zwz@=ABf&)4bXU*E?n~e0NTxmdf~?_e0*fV@e&&U53sc_E$wH@^ElK-ZyyESP$=c{D
zM<*hg)w|!N({pwuvHJplw}@a3T{HjeIGM5D{<J_**}TzZ{U$8_H)qrX>jzuXkH=<J
z8WQdmx$m}qsT`Jx?mIGDXAeu=pBK3q8s*wzrB8Rwo&HMFGA$%NXZ3}_Lc^bL>kL$u
zaw3P@rv4yO@FdjfVV*`4>C<k89z24-{g5kkpKHIpQC_9fnj70Y$H#y=Tc#Yzua#fj
z@l8tjd+CI#=NBuerFf;&U3O_sudnm{n<(@ID$9|dEv+lQ`}_+w;SG*k)7=6-ZLb1O
zoCg$jf3M#%42oxWzMljx{&H%$06EswjBn9ANhr~obL<zDkA1f+%fH|~FVX86h~g<D
zJN+Gb<#es|E5)s7cH*tf@es#lX64VYv)bwp%hNdYv&+(sR63N?Gvszk;tfXkGo_C@
z_x09w%ImJ?4}!dJ#_DI9moyi|_|r<*6H6o4H;DT}Rnm5TSnKi43>VHl5a3$mzFpR-
zXo={DZr_9jO>&sVUfyl=`a(ICJgYACwj)e~0@36KSdXS`Y+P&7`S>pHt*i|OODF7l
zlEQGsJtSB*nSwJ<!^r83G!e1A=cGJKQkkBzV=$-##^M=bX*~_F++}xks7tQFk^n!k
zLa*S`b5i5@FtCL=*)OwD3)-VM8MyI9sv-*{?bgU&DEekW@;JC<xBjbkLqnXdDxyhl
zA^X9;c6eC!vr)-qNY1$n)l|uXeq$g7gCHi;AEXI4vxwT#Tb1)CUCAQ0#AG`^*QMW@
z=aTny6_umE(FdC5#f;{#yb?D3VBPoimfs!{BXbRyp>i1w*6=v&f5x{@hxKD$r}Hpi
zddHY7B06Eus<$TrNBAuH5X_ZwM{Nt}uGM*OJOs=<^*7j`9b(!1xfU_qug=K_ZmU@Z
z28P3bIH)(`c(x`z2ZdLnVUCoJfQ763nXrk3&|mm2vWS68D9t#8wGL$>nUxe%<aVks
zbWNeOqT%OvE}^U7pFd>NL}flhxrQ39BwmIDD~8>4KFgo|PFxe|ru~HtB{KL0+02AD
zYBxgjHI2S!bv2sA0$diE77Jw1l61>M5t*h#z9u5**pfqt#L?S2WU-cM6lJ9#wLNtN
zTr06UnnzpJgG#LBVJXz>Io-4m-S_|j<Zni@;<miCw!>vcu0B76m;Q6T?=XaFUDGpf
zK5-mMN6p}$r<*LUF<_Jlt`_nK6fY;hPCO9HyhmHa7DceU{LWhItR$Uuys!Ueo<cPW
zbyLJet7eGLugOaGgDMl=l(w|5;51Fe3D>sV{5pX;`n<(bisId$l363V=Cqjhbd*%a
zTqe5paQ#6+t3lV_2YedEj1kbK_a8$h3Yo22&81lNQWW*!z!HHX2yFtyE^%hpZNX<V
zr<^x3j53ROD7!rwtV-fa2Ngg8Cu~D~G8v!chIe$r@xsaG;$b(}Y?c^;V9DeVUUBqk
zQv3LH!$XVd>yebVlb^(3XaR&+U25$~S3E6z?~)0q!t`t5%ME8Ix2{mjXTN-}0g$Yr
zd<1V(9PyH#NzKpx4un~%8!fEVgu`l?#wlsR4Ie=N(4^-xzplbosg=vnH+npl-j(w8
z+_QcVte=G$(7WeMmf@((md8<(e$xia18p>Hg2S#ABc2zU>sL~%!V1VQ-tSD(!fz%!
za=N_f>{0(LwcaN`e<wvptfeC}a5V7a1l+P8w^>zz3*=@|>07rhK8}i}xIB2)Bu$N+
zT=DhOE?8XND57*${O#oJqa8Uev>@?A%SeKp%H9{wfz>0Y#3<D6#hQ+zJ=XFlLYqq8
zB<44UzvR*I_+ToF7H$w@>c47Mq|57f?CW_1(VBt9g5~ffDZ?0yf61y%PwUNuc9oUe
zPid5uDr4oAmHmBT8XYy-CAtg7VlM^Bqa~=kF5|X)0H-vcef@>d>=89W3%zr@-|1c8
zbU2x^*gFJ*(BAQL{VBnXhWTu_Y$l?G{9J2MBDww4&<Qq@T6#-wwDWL*R`3Bzg0s&a
z#b$I3RE%Jv(YI-}dL@_nEf_1*s%9H7jO1m#1+**!G`tL`aFG$5z8p~c{5A2z0RGm1
zL3>xB*Za)6y2NSdsc6c;k++={T&LGp@qN-yT`L)`OO3`s;<@<myE61p;Q0XPl+h`@
zN-?gy_UKB;P?6?)w6XLKD{W3RB;(zBa)R?Y=3x1@C>;uokPV78cALSb^s<T+I8`h!
z<AVXzu8gR~nw>yB^qpN}H5)Iq0rFFPW!}KNdWC{m7Uq<0+ch*q!2D+fwi-%AFFBDZ
zoki}-Frrm@2^I(y(YK+Ynj*;)cj~bT?#nCMNS-9=j@$B)O<C~0{SfeM;}FYisf^KW
zIJJm<T_3dU9rW4#07|>#Evzqd=D}~e#sYxmMwj{o8&{Qh#Y__#Tw7`1(_BcDYPDpe
z&TwOs9R?jXsl|0wPAsXNdZ&a?GA(R@K&?Zh;7jHP=hHdPz(~W_{Y`AB;)bxMvOPdV
z{|Dk^6*m;!i*~zGO`o5}(R>4s+y+{ivh11py^&u-1`*KeDrDNnJ@7kmUMF|yjru=C
z(G^X7h59XNDm~{&DI<pesW-CwPGmA3a!r?S`zGM0R(5CWfyc?aqMJ)#0}#EfFjv?m
z0`6MN5y>oU4o??4b^wf!i403MY0E8_Uud5sd<B_cKu44;zQ`Ws27-FQ1ai{xkI>en
zoh2Ll-*Azr+na0b{cT6BtSU28r0Sv=@G4&(8pYtmV>?05TD}%oeAl@?I^iCcFZ50M
z<XGGcw(ZtunsI@99N^X&FcCG{^n&#6;lT>zw`f#c5$gEH`mv%1Yzh8d)+#gN4T^8l
zmSKv+gHFHUW~<brOlslIUe7(d^SwOx7$%x6zVDuq<ZfS8qSEb?U?ZRNX|+aQ`ln}$
zoiJrZ!n*rY+z{;k%jU*&p{xf6;dyxlT|FsR$tLU>k;)5(QtCAppXauu)R{vE+D`Ri
zt|-0dFMv_&CyVsNe4%gNLJAeEj##sd8gr?=Ak?b#1GyU@eM-i=`s#Cyi6+wyku%wj
z6f^F(7fDBW2E^_=zQn(qv7Ih``3`O?tr-Vf)ZsiqoQ{a%^)oK=!TnB^AX|JT-g`Lr
zLYJ1aa$9ExK~H5ePPOZ{dMta7Gu7sM_ua!_6TkKo#NKD9XWBl1Jhp>WeaQGDd;jUZ
z;72)1Q8u;#F6B>z&=2sy1~}mdoe@QE`wHMb>+%mmZQjg+b$i+trDG#u?@z_+^u*%h
zP^5u>c`0NzgzqFzgoJXrQN1izeM%rT&&NF$cz-Ate7Tw6OiF+Zq7eC~Pq<aY_IC-o
zGMSII_}D8~pi8blGpyyr;v7U^ZP|aDWQP69<}0T}!@?PUFF4n!KmjoJIvqJIVIJ4o
zJS^4ciWs3H{P_r8F|e>GKmiZclUldsZMZd{q;$yP<pZ(egX=HBK<cmU1(-n1-1E8&
z@z?E2G*PeI$bHM!_~=_VU1^^L>}*G=pYs@%UZgkQ@^-#(IOkbCJEDo^u)|n7+mpe<
zT_6?H1wp;fUuFl}Ue_VN0YddoSU}k?JpKq+@YIK-H{B4q-OiUs)4~YqGy^7K4MDvp
zugbounF+ESPXH@93L@G*o4me^?KvYPY8OPH*r}?G1*odFr(pg^GbDhdY0%Md^<Cv5
zuPSIFUe2@afqCLge|H~GyivOtUECF)DIfpzKy=x?`W1i%aBFB8+ueO~zS7gSWrFc~
zPLzvVTpvS%H|bMlEM>j$-^42`^yqDW0p><cH?t9YY!&zBAyqpfSeOh7#mgpCsjv59
z&-RdZ92i&m-gD4-?i*>ItqHKu0~tEPMU)Zl3WF*J9Kx-G%^2@rrn|G|fJtf%v9Q@^
zo%*@utEc$bM?O(YQ|6L(cHDbMJ%1*hM)OlV6@V!a-Cl{hx6`r^IZ^3sX?{I{JvkG^
zu}Z=tYc`IEW~S?$w5K;O0OHJ%2KKTZ1%%yb`Tpa@A8Scgy}S9<Y~d>;BG(MFeWR;^
zEby~AhXv-=ZngjX{rk*((5{7b*0t9KvEu}VaEtWq%+#{Xv7pMI7|0kc0BnRJy1i}L
zBp>6l`m#sAKyY4yN-IU6Jj)Cnu|7$}#vS+L)0PhIOz0jkN{<8)okcKxpSnaEEc{s#
zv!~;av2syx<4vCTNR{3!LJdAY&}va0!tG}^X64C_;$4w~($c2cHsMz*pnE$rF(qSp
z%#evmIz8S<Q^e!rorv&9O!;~G$s#%wsYcFwS}r>^7V6O582tfBM6>OI{+?+HpSGxQ
zhDLx7ibBfBGT!pJj87tN$soTjxnuIZM8%lezW)pzWd{(BPGNh*mQCv!YwHGGKDHZl
z?Rd2lT+`kVDyVy_R$u085m`M}mQP<`V*MtUif2YN9!L{E(F3h@tElE2dy9!8Bz(4>
zKJLUpym<k0=+R&<hVhYdgq)}0zP&yB6@=v_7<A`GSNbLKNIHqxk*DHM7+A9?gzISz
z*F8`OQ0&7&z7>kuuSQ1o0L|W~R`C9ZSALL{Yx5cNF@?QH8)Ued1b>TcWArtE^>WB)
zyIU)lm{+D>xvJ~Cg)u2K+dv<u)&r#1xzoX)bQm#A_ugs%4WSfh6YAnwhg-)>Z(jgv
z@)CmA)Oth|nq$q~$HcMc7Bd)0oB>kWJ|B~t&)yQ$EoP#tpf=u4<Ro}s-X2;7lzLm1
zmpHStYLfsPcOOw@axax}`Zcz@<^_Kx97tCdIHQtPJV(Ra{qvsPk6ga29=|4wJR1iL
zTPOdt2Qs7Ytm2JoMQ?N@24Z=_z&NAxT&rY%cgWT%3;RK+=M^w+GW<nN*-Cc?=n&45
z&>`Y@!`55w#!jLKObC$O71CtYWd`e&-V?z?tbPWOw96})br1Z-Ia#GQ#>?X#)tJDr
z#1K0<a6Xs?J>7F}$)MsBadgyxQJUX>s-Mwuhnak~^D~3RPo4LttYDG`yQ$8sP8Cnp
zH}!0sNwKX*y>APqddRL6f0*GsvjmI+g3-%MaClZjUGCUdn~2L!lWaN2DhG_rxv_^Q
ziMCf7bqFS~<vQ<}E4L~@<N}#+=Tx7OR;ViO^;#FWFJ1%V@dOLp%wcQ@(btx1SJnma
z5xUC;-0@iO#(Pr}sRNANHr6NQwl23ciYW>Ao#-Eu`-Px5K`}dT8vXCgylI?WGZ`n&
zj61@JKJ92ootzs=>XL%*YE?fBFJ|bs5|K-O-*N?`lzD{--OUNcSJ?_}PM75_%Bni`
zxa#tckpoN0OdZ`8Sx^~I8#n|bC@XMvSZ77pV=yWu!>?poXM*s|z(v}TKrIijZ)LQg
zNUmCF!tF>7w0nQR;pfKUTG#;&WH~iKsDvp9AQBl!MV*$?!+TgQuJs^r6frHwpg9PR
zP&j}70ke9)W@ZPdyu183xJz#fdS)E6WbMppuIab70D@OGK885-N6?9*`x<tNL<A4n
zY*Tj_0OONH+OY0|?NU;u-M$4+-m+1DKi+TE4K-)HdXUHo09IXBG!wgDxEzm$W1JO4
z#b3Aka?6a(VGl(g_HROmSi4w)H_84LAt#rAp7uAXV_^+R<Xn^Ml|SJy!*I_vLC6#<
zh`)K)V|oPn@ae$|-vO~nToZUtzn%~47oal8Xl-db_EaVc+6f{kAqaJEKIWIxKlP(+
zd40bkGnJ2HW4o1XW;m1;=Ope)Hx}e4#&=;8OArHJLm>Zp_tg+DoK6IFv?WCa)39b2
zb{Ur53P1BN;28ZU+@KEAjGj5Cwoy}u`vZn!>MU@A0rZAeFk)(q(^GoRa%#4zCufkq
zcD8RYI7;-qa5RuCAaDZkap;kaepKvWYGb)QPdF797HKy^Jh6Z0+Ug?fH;RUaN8lSO
zhTuRG2*&K{+Ho@YixzD$pN<p7A=a76&EJ{=TDNNciT1dWoJD|VauluL*ZDg!*y3gR
z%&Lm{g(jb?XU7LEjDVhigZ?OEKB5Y#U<m_iu`n^pbM9e%%5x<ZbZbk0t#tcNMFL>E
zD1lsBd8A)%Hv5VwbcoPf+L$o{AtsR3kKhxJ)1p6bjY`qX7~hN$hXhS!L?S$=-e}8a
zwhVV+qqOlw)jsT71)SO3h=mgX{{SK?&bu(M56)FVo~0G>*VC0^O``1+NUOJNyA=Lc
zyl)|<yI(ZF^f;S$pUuS!exv2=i>XqC|GV^3nK`b(G?9zuB&mmLjf-QT&6QqcK?`^o
zD7DXan0HiL`DJTeZpTcc{}V6|7sTfoeu9jK8=xnBd3s0rs`UQNSc+gr(JLAN0X{yQ
zpp0V(ALP%I&;zE@AOpwxIKxi$@nf&%snXK%Sby6x37DC5stE=c7DkvH=ztWtmeir9
z96|Wo?Jt&`FvuznfR=hVekQ&TV7Dg8A``$(1Z)wN84(rjVMu@2tpaQANb)wTiopEg
zj1g_t--65koks?;8UPlUKO1@Fn%xHgAd!dgM$$5c7T8$|da6#o#h1x8?>7!1S+?K+
z>J0o%Ym!J5`MBm_0Vp)Ti7T-#;y{CmIboz~&o$hipTy@{Cb>LH_`odlF%gleLtoSE
znIGh7>aKMMxw^%T3H{R!4bKsjMy5206C-OK;j!Dz1%MF()kFSu>eNTRSoG5A!QlL#
zZk`8W_iY#&NxMzxivJKVZTW9{2oe%nFeRBk<xguX7I;7FY$WRRQ{q<rjKhvUC-{D-
zgu^@!*7o}Lc!XB3@vPv)(KKMd7>G#b2{rRmTT@5FgHYfl?|eLHb$#TI(st)zl3&~i
z<cVKjs>-!_eS8O^6#3ttT5^4vk+y3uy{Jaq)X{mg--GYlvvBnFa!Tu!@Gu}S&rdI(
z?~V&_1rf*FiD5C<2}wL1sMGXj_KW`m)D@Y&%(|YW5o*eQqZ=Le28=cF6^z7tDIf6j
z)6N7oT+bae9buMqZW=T<{Ri~_@<xWyB7kz7okss{{?AAM``b!Re_kAdhlWm*&X@t0
z)T|$4y^(u5!c~+B`9Fs8KmU}cWHE)$6jFENsyNW9wE%HHR3z}xzDA0E@!vl`B3}qX
zKlH>>#k@e`@ez^XM~e)`y<)vha*!n}GO>@~Kq!bHkNx}crz8=(eUh8sWLSf#{$Gt~
z?3xEzyj3Ot#cm;`$hscA`A<e!J$3)H)1N2JA*1#@UjvDC3KA9Ejm$=|jg9=0Dhpg7
zEj6tOsj4+7okK)eAK_Ts&HF^AQT5El)`yRL>#raXDDngj)}LN>X;vo*lF(v5T1M2&
zDk^_J{ziA>rE@QuX`wOy4r_zMTmdIE-#ji6PZJWQaHBGUO-LUdJyNuf79ti?itqQ+
z&Ab#$-bKGMVuZ2BF;Rbl+;cYn)p|CpG`CI>3kA<t^Qu+^!Ku86D%d$U7jv*03wq06
zkJ2Jw?UqF4U%Y#jmvvLZ+ndUZ^J@<SO#c%7^U*<^{k^Ee=Xt*^;no1#1%svBaGo#`
z4H@Fed<zNuqH=<D#y@m#knj*o9-f>}u8g93<zw$RVTm}EO*Yd$^>!8rB4Me*N_x$I
zw?cRASZT!Nxq%t2$40!gCNFAoxq=gk*}~U9R~8vy()mV4A?ZOxn>LzQD%L#^(Wc<>
z-nDcPwgoN8D^FV)7Ap!4bk^))*3{dOt1vC+4e!*PRR21i%ohtS^OPA5O+!4qy)UD<
zy=20$yLL8tLo%YN>2#*)%3ys(6P^tx9^Uqey9c?mX};rTWMWy;Ip1NAy2CDmzGtp3
zf~5EH?wIg2pZ}8xi$9Y6xm_Qsr6PKdZL-#?<n9j9B#GXv`_wLX`0oK!&I>P;x^YA^
zkv`hLyQ>`yOy64ZqD#gUImYs2_edvV7W!y9dUwDNO9Pt=hj(x78oi79=ZeWn<3vZC
zZ@q0NbZf#Z(esWc{4U=fJ{IM1#d7vKf(CwV%<mz`g5{}=`Q5O8sM&aXT^j`V7i(@i
zQVng~<et{B$hwX0-lM;kIhg207c2(Ew*<{>t`6az+nT7L>D_Ce*C=F)Lijh6u+st9
zBgQ4(crI60LOC|o{;r8(tfvoVuhmcA=x=&=u89%Deen(ZvFO1$e;EYD5YrzxGAlV=
zV1{q4@_xbifZ*xI!DYgfDMbIBp6#;^*_TBaj|&ey0%)vADAMegp*Fi7Y=f(=sowH8
z?aO{5?EKqU#Y<jYbU6#T&NHj8gv)%(p=FErPX<J@1n&C1Z!Y!)V1}v<k2KuGHuwqF
z4KLh`E1Iu<(b*w;j|t2lfBpGFzReu#vqv?~y95gcQux2z2nFCqyspyh632Q`7{xYa
zRTNy7#MCgx4ym@s+bn;)nP4AUmp`D`EQfWFhSJD*pWtp~o7oLwvZSORG;Ms(amd$t
zB4B5dP>2uv^<~_qJk0VYY-`L5q5q|#=RSVY!_5$)3XZwLY0|%pXk4M4dBnUYH0zj@
zYv7`+%J8z~QR+aQc<44<NJz!1F+P{`;n2mk;!n91hV9U+5M=Muy`;w1H*53_TMVbe
zY!P4y+4gVg-s_RfzIO-KFRp}USl1+e`W&Dul6b~MFDonHUxyZd?d>DAa!;@M0jBXT
z!?5hEk`K64;9d_;l|<&yKbp&Rxjtq+ZuiBsL!r0$!eStAC0K`(%+-83l|(hi><sO4
zmiM7oCL~{D(rqh!<w(d^;jT>cRg|>I(w_CY<ikc{XSnA_OnbZAN6gcK;@X^Iu@wnx
zR{?5(!TUO(2S+AeB22HZDie->L>`c1huIv%RSJu-_&TyJmf48+<Z(*G;=g8GrDQh;
zIxUJrKtX!rtr6Ai&0`NqWZS9{s<VTnA3*Z+K)3ey`AqM-(_!D3d2e>iQi%$8uUu-x
ze=p`nE2{iyxewz|RxY;P)buBAx4oez$L$<W`V66LBuynCB||TSIPsAP{Z#tXzo&vP
zI{J<k{QN!wZVUr+O6aHV#PEzpMaY1a_KD1@uEuh9G4|{OrLB7F`CVe-hh^ufwFo_%
zFMZ*>xVxdpmrRp+lcDIx7|HP3>V<M}@rzBmuzR}b$9YR4$+9r%UkF%ku{>Mtk79j2
zQBSUpFLuLY+7Xdv$8WfQbDe%6M6W;2E*&2USeO3MycH?X0+uN+m)K33?HIzZ3;!LM
zpE^2?w)Z$q05xG^l3<w$N@sc$`_TL{zEYlW*(>ioNtq#CkDfX!5cuw?!|&z1z*KMv
z7x5>#>B?vfJ3*cNtSE>LJKpY8nT_-I8cI&g1N-lR^xCgoavNIjJk;!xNMGKt#=f1o
zmzUd%kC|$y@}|3Wi)Mymax~C{^{LQ>1B*EsN$)dSOxZ6Z4Gx8i1+z&@Rf$g#WIrF)
zFyZl^_?G7*b?TmQ$XKxmI((0XBSMQ6-c3cwAaqL`YZJNm+|HgWL=jZ6%l~_3O(T{(
za-KMREv)tx(7%Xbi@4JBX)yc|MgU64vhL&d*=~L509dAv`^It3ThWTuT%m%{G<AWo
zn3OaAd*#Y1G7ZCZ;-Oib_(VP2Crz6hW!I+%Dv`cYPrQh4Y_}?_nAb2y_j*6+fa?@o
zulrn@R~EyX&6FOfeLsQWn{=rLhU_V$--7z<ukVgg|2)YEy>(YM%iIu1Ue;o-8!;-+
zDkJ1yiFEZYvS-IhP8Is}{jBMT&UIm&^vf#`^{d=Hv+8U24!zXVV&<b@%Nu3<$vdxs
z<Kmu)m6iOa&yjfe=b^XdKm2|p{zbHiG$QS~Zd}Q)y2s!5=zNr@jE}$c;)5P?HVq`+
zUPr<^SQYFGQ?P&C{61IM)=k$oq)<jk+e4!qT>KdW6<$uU`&T1_7yisi{?Ee8N0jAz
z=L6`na!RpJY}NK}Jw{aH*Z+zj(M%vR4K|Ar&DF6H5VMD#URa7MAu^#Cq2S&<7yso9
z&!+Q$y&H39+-IDq){x4d{3tMOyo4_M&@S$W!tV>lZYSj<FHm|fHp~!1V@{I>vRS?2
zfU%Dn#$bdqexd}&Cob(}%<PBaQB7Fo7(6P=jdd*B<Va>5ee&+)*}QJA?U-$;w1@1|
zsi|BZZ4t`3K)X~0-0qo_NdhcMK6kn^7%ijxA|j2{&ePLk(PV0S|BuK8!G4DP3qf@^
zv_Fl{0#ereq9$vDD7l+MoJIcj<Ae)pTb1Q%QGYScU#Mm}k3v@-o9F=4AQBJ!(t(vQ
z-TD0xb&o(7BbI+<EfH$OlAAodt-Eird!=P=CMDCTQ0i14qTsF`V%WKP0UQN~c&mP!
zR#|4D!<7p)As40!>s+BXy0V9FAMa%@O(PrCNlnAS5>h_hZRntl%|fyYQ~N=deCd)D
z4ECp%N2^!AQygJU(^VOpatNotumrPS%eJt7Zt31<ZkvpHr>44Brhcj1a;oIaCchCO
z+^a<-msImZ9dn)RU&{ND-u~zMYUkxpX@qM<oxpi*NhP7yLbj9>rt1C))vLbdr-$6z
zg81F0dE1jG?D?JOo**x1BU6-SakTHhM+Mtk2<84DNpOq*p3ZvtCl9?T0}Y&YVvR%v
z!oag9b^vqx@SpFLOZ=6e&}j>TyXt~{?ea^GO}S{Jx|VFZzNk(1V{K*WZFDiMq9ak#
zv~xmZ&;QK5Mn6Hg=oYA9cjurTX)i6WF}nNOy4!l&1@kOi4vokJr9$vpV7bkj5qgFO
zC3Te!e0OrV7b=ZBtt{-mk~{Vtw~dDOJaKLj8(g~S7=-`3AU;SSp*asRLUKV?ql~lH
zR^E;bp*Zr#Lm0Hfl7F)C&9stTVC-|8GpF5IY_43EIF_!sYqRVRQLHb;Na_UJ@ZDPp
zv|bf<tX+z!w*TGk`mybURYHN;7N_5qYo&!oa!gA4UL_CBfhSR-<}<^+#xnDs(jAOA
zrt9{P_n_fj5t0+1taT2V+KvU6>%8<iR^q$Ha$1k4ocGpE3>CB);M;gTd7BnK4YfHB
zYIg}x>WBLLY5O(FIVcXIqhUGS0qG=PvdO6tPQpW!)-$Bl_%Ep0o<7P(>v-MIyjF4D
zpRUU>$Y-pcC!HK_nLp_^ikL4bG^$bEZ*1$FM&ocqX9tA*XI!)+B5shfzjt<=;cA&_
z)GTMVcu>YqFx4Yp*E^11$+?>bfbmZsia6_7xy4TxE2i1FsT_CZj|aZ~X(x4_VQ7hn
zlAMA6tmHuCz$WSEb_J-a9<S7IJyI+TDr?E3X;OuYhJ>?4OWX4EW+XZy6Me-Ne9!tk
z>DHrQ>GMDlS~<KIEB43}wll&d!sThIix6Wgtt??1>RL$w=w#5ZN^rUca`RJdFw_Sx
z7S?&)pP{^~0eUN@RV@j9Ifp~8gjkNQ*j=w&UN+8o-_B(>G3_7WZ4+~O^Bb0~YI1S~
zoVWjp(6azkM6(~^eYtSyh^+D(5EB3Db`?l4HLZG^HDQk91)O))S(gnFh?Y(_Z*;j{
zNwHiykH)VE??*T^C>tt=ek7I<%c<2RiTej@K8J|k-BF|SHC`4i?;w%Fa6QN~J7pKP
zS@a*5D0H9I9>EGdxHFc$j_5KnJoP*7iFDnd11+s-&r^9x>JaPfSXhf*8$6zw%=wG1
z>v8S6*B|{3ebGJA*R#w0aXnDdA|{Ts344LSO|ec?7+LMGy2;hiD#b?B{KdpwJ`5qN
zMgBve8@Y>?)9Dm^&Z)vacEM1O(SH<HYG09e=x1B<B2%TN`e#PmzcVt}A@T}h418T$
z3WSsLP1ePRsNBBeAgnh@c|&ZrC241byGU7^=9ejaIN|BuOODem8%DXO!T%8fWg*cB
zD*fZQ{Zh_{GVKq=m)M{0s)Wi6O`IP;Dto=^H=1dC^#18yZjx41L}9o+8FThv1c6CK
zms;gFW~ZZzG(z%t%uW7g?7f9>pBe7ioym2WWFOf4aTm3}_xkD8Pn@sRc=-=r^?AsL
z5h;-xXR7kyu1|F9nWxQpJS2_L?JjmEh4h$FPYDR8ongoYf>lI4+PSXE+rPQ0-UBDi
z6*bHHrHwkyNqd@t82){@Xz7C57ga0YlURG>z4C+cVr1Y5vu3syEl?6p-;ymMsu#yc
zh}cGuKWnc6Uxg<}1%~3El%llPnXvcB%vhu#Q@{kFtJ^YU3aS2ny7oz2lWkd~VQ#(Z
zYjiWZ>lsSH^kGYeU!<JytuZ)yH;<?P{Y=Z;Wo-JVRz?OZMg@#-Qd0u5e-`30HCl-H
z$sPqV(#*KKo&c0j%P6o}Lq<klyTfrfQ^zY6UKH6eEX>&(5$w6<Sg>M6=@z+iM7fIV
zh@dh;!!LF15SZ0Mx;ST88wwZ@<iL~ab2ldp05D6f8vLy3S**BaVkcz60IUpRb`*Lp
zi&7DzV27S=Ej`6>VS;ioBi-($_mBfr2vM&n?Z&ptt~_?tN6J-XPy{KAcfGdPJ&pQa
z-_9fVHM<*Ai?Ww6whVtg-0Y<$V_9Ul@pec)3@p-Y_=^Z{F6Cg{uH8LEqx*TMhlihs
zE@w?Yz21HuoxuLp^z%xO1M3?c%VlRaAb)6CgE5eG4h@={$iE4vEGy<8-wgD0<te>8
zKS}*}D;<bK7%h9M+iuaFwC`SAt)QFkeQ2vd*Em-weZ)ofJ$s9lUUDrpT6T^5`S|Vr
z%1VR@>CN=#rz{NnZp%D=<c&3$e~+u#XrE?Uu?cyR!}|Mm-u5GIj8_eR&>wl%8@(rn
zM-^^4-5v{z356yT(U-)<Gy3t6J|+0P$$xCUtZJFPn`x~v-Wqy=LWHs2=q0yb^44f`
z3rXMs)lpHR-bK_^yYTWV<+`sZiMj)jbnO;zD-qC)4;Ie8tf=Iko$?lp9h}`SOKa#?
zQEYAEmaggRSZ(Vi<dw01X2BRrJ-Cl&pjQ&&GU4&qD)U6_Ap&x*`|Y3Qp=b<H<>?m?
z%Ql+|$)Z1!yPm@PIYvr*u+!27+HY&W{1bYlc!YGe&dY;|a=ld9#;vvz$+`S()K5zL
z_cd)dqBa6NSwwJ>Gq1l}>O3)#6W`e>r5!AL*+QcDdSmv(3Bz~TD1%kBYotth7MUj!
z&_kh35K(m5XC>!Z&%yI`CPmO~5ys&rsR{eDni=l8blA;)x*k*u!$18Z4hOiKhZl(!
zxbE}R(bI07sg00?L|fj^1=ga&Ho`mSlk*y8SyaLgF6_C7PmIG97<e$x7OU{XKR;wC
z(6>A5TE-%Ww<aHZp(jA8%IWLO`o`nww3cc-?^f6r32p%1eg=WSrdkYtz1Z<B_ig=K
zkCP7>Fk_4w88?IJUhA|QI9I$QwIm0>lvflEYRqc2w<w-RjgEd|*GYul#;CLSG_UHP
zYNYHaNiT7qf;y(W@>Sn)g(;{jpESgC<w3c8Om6=&f6tuj;Eb@eX+ZyhAxRj{n)w1B
zEyp$R;hQ5)k#QA<x50{LlOTdtCA7&K|BTJ#Kf0DbIHi-e?qj%N;cJUMo5`DeFPWhR
zH1%@|4F;+1a*Y(aHvUbxVm3wsKQ@lq0~qP<%QPiR#I3Ln>3kPf4Wz2!iE>l*wz>YP
zK^f3{B-?qL4*~+_+#vKyiq=P~!TYQN^5A*Qm+oDYfDptFFDVF$ur_1CgUUZx!F_pI
zBFGYzoX)L(qr7S3zO<1_mBSML?=d4%gyc_Q=DKz0`@t{a9j!oREq58`Qz5b6lnLqS
z+iR4TZN1xEnqO*Y=T1@15v*@)x|3i!GWcem_Ee2<y8k22-h-E2t4C5P>EAo-mD}~(
z2$Z+&a9X@+H~SxKeFaohU-T}FqcVh~bT>$MGl-OQ3P=h=r*sdfAd*TqigY(h4I&MK
zbl1=w()BLl@2&rfweFg=VCLSl&)(nO=bUfvb8aU)9(EI_jM+-Ft;*=?OpOMWW$!U~
zr4RHgA!%`S&X@AnO&2HEZl!TqL@(d<gzRI2pKO6gJV!6cR#NpQMcrPAF25i_!&h#Z
zDQ~*R{_vG%>hNUXA?JH#hSB)6HP2bEa~Xr$Mu$EZF7<CpO#gtWg`-w~ZSyAi+&1-K
z>Y$1k4PU8cTetq6_=Op=SYNbk>j$!0=8>0y_jUPqF^bZzVb;IQ2Vkl)vcQ@vc=9VU
ztQf)%M01||C=JZXgO=ocCD_EG7!4P4_C@_~RJ|T0V-+-6=XSiV?JlagSE0!LCJRjo
zkDrn=GNU8Ii#)P<F)Yzl<Hq$hSyfQGBpGuctu9@ei}b^)6nAnjZ%CwsV9oCkR{JZ>
z@`r?G>*67Fx<|Z?a;=Mng=)gTQ{`Ig^t^OE^|DLGi~n2>?VG&)8{4Ss!6IWl$@LXF
zCVT`L!Vj~lBpFG!uOe%E9QmY|oUk8VyK3`IUKo1KyjoHkj0*UUnJhoM<(yZyNT7@^
ze&fnTO!HSiWkjgkCCxS)yT21amHkm&b#B4~@#aanV*!)3UGjg>`R{v9Q2ZVrn4`Mk
zjvlKukaJwIFAQ!97M4eVP)Tpt5U+GDaK`tPdh1>oJpQR?Oes#C%7Zx?>S0`QI|;O!
z9^sG9c2#=R^k<4C(bu2_s^9QtgXLS@+Aql7!&gIZ1&eK@u4;7k_Djr?{m}TTI+L4t
z9Eg5#v|j>=zXNOU)^b1kZ2H@H#>E3-uh^I40~dba-k|D_l=Z=SleT$I#7iYVLPhTV
z$IW%uj$FQ%L^HT6Y8I{f+PETG^JRpyhasjh^)YXyTboboBp1D&xLAS_XgQ?j)sGVX
zMB&PhNSL>Jr7IA#L~+!}LS1dsY5Kp}t{M7Qzdq@lY<z;%-qd!3X>e*XHyJqDFlknu
zc)1vW&)KTlp&>1f=sEehC`Jn~pYN|&6{Sqsg1|g7CaputkU}06jK~D_queLgxkerZ
zWn%9O{kchUKM<KXYePLs<QFlT)IwAIjl+Hq9X$AzUwxnICWmdOd!87y&BG!1ep|@#
zsf0~Gv)o8;6F(ir5DNP9TiSpTl4lrz|1O?sj6vkFVnSN*W&myaqhy>s=AS=}jU&2k
ziRjb}i-hU=1zwpH)xDz05p%{k$cZ8m${i(~zTj_l%?qp)D|-_7CDL1qax%ynIVEf~
zsjU#(!xtzSu*~S&_%oz5U_)~6hzeD;gv*bG*ZUnb!4u6+rHmzx2c0zcs2y2x{Gx)U
zlkh6ZD*^RIm#&C*&L383W4=?^=)_xmIHv@5>e-By&D_Z$-rQM%L<Bb;fHS$RW6>W1
z2d|0n#&1lCj_r1S)+L?2(NC~SFg9zi4zPJ@>XkWW%Z0ObxP-BC>U3<M<-Agy<(*6D
z(W%n5jC4^OY_2aW$Aq2Q+M<!fko@P^Mfhuz6;x>{$J7DwO5!|VWHLN>=-%&@j=3QH
zUB_X`G%Vw?-L^zdLFRoIHNPpnwb|crHJ694+Y{)7p7R=7XM+EbUO&Y$AbauVZ3v)U
zJw}|a*H=ZeIbdKK|1H_=`pYYabKZdw(g=p@M`0mdrTridKTP5P1Gc#(nO7*6^+f?R
zJ<jCkdHwih8)($Tmdc2<Qq=wcCU^EId1@IjU(PB)Tw>5G8&%HMt{Xm78M(N5I_Clr
zW+M?ydK3Dxh5VM;fO-LU-Q=K)K}XWPTc*&<*zO*Vc2x4{OK}El{3woFZbdVUsv-YT
zicS(SI6UZ%KVqT9q2P>49fB*k6{=5Ic}}H%@zxD@fm9I-T&uCK`&uSsv(!a2d*iw#
zT!CgT{vb<|M^m0?`eH;T5d$>JDEYM4jN?Gfs~8tljn{Yc_+1>&8<I@q!2EGZfR&T}
zmsshFZzKJLpwcc<c)ObJge3tvuSeMeC;0=T02I$Xg9(FY;qNi&qhEn)_<(ib6KLNL
zjit!0R+{o+S8^5SLOp{?v?|KpRH9V<6HdI}&9#a(zvaHj?&^*OW*AgqIbN;fh`jvN
z6Hv$gcKL(~(YWf^c2Q`3s`xW@9k4|b4bVZks2!-@p*w+VyMSkBIJgKV1oqy5*{BCU
zJ=ENM7!lVca4t`;)A4eu{7O?&D#jBOtZ#nxmY!zXoA^lbT2$hEJZj+ha)n;l3z*UV
zrCNfi2i&3Irmu*5o}q;<EX+u*+1eyTybi~Ehk^n{QFtb$MJws4lOdp`6nD6Ug~&<(
z)sHdu7pGf#6roZIK~4`7exA0>z3vL!-*N(m-Cd`y{qJ?)^l0m{jhN7Zs@jJ){;oC+
zkV!J>Q{>pmylRVh#kw3#H`7w*_W-G-$LGJRN*^9kb-n48GhC$UtmR4?VBh>ZClJIR
zKRN37ERlpJ?vuQCT~wO=wLr~`?D#rN3DynCbh<VNGigEX=@&VFN%zk(y4n}+9x-oC
zbg+=Ip#FM#*E#ctGZYBHqs{W%$36ICC>t>!_KxY`=dr4&HY(r`?I>*(>M(hMu%ZBC
zi32vDy?YZ@U&S9+mt*3|KL=Qzub!TRw%}n|>X*i5tDF3dm5sMS7YZUo>y)M5F14$6
zLan^Z#YMwIAbD=r!y$p-3VB5Qkbh<88|{A+h`ZJ5|NMm8q79s`l4@7b+&%CA^O?zn
zux|FI4FAUv{Exfq-Xr!C0&q1|4M7cudA^j=uy0|c9XSAxFdhsI*$N#UVP72XIq#@<
zr>)H+zQ26D=45qQ*=PS$>P{v9^HW3F<gx*oDZxC&th!R+jQf`Z{u+pwGkRb&MScI~
zfbz@*TczPx*7soNVo)vSh*o%eOoZ1+>K|eI{|X*S4Mk?q4L_p+CO#T6)YOeek*8uI
zqOjWTa|hSzcN*G!J$HjFHBdW&cIGlb!S>8DHv^e%Th$$W#|wGJq2yk9YaiMPLOf#;
zb*!2C@rG93<+!RnmK(y4g?7G|Q)ahV{5L!E1^IN4hXr>hAxMRrEigKIP7@RV4h(>7
zfH3`%a(SUo{~76jXz@P^$_-TW=Muw14rc?Mjx8e<uGAlf^11A&eINbbQr?O8HupTT
zoUrb7e=kHD?QQ+^w0TX$Kj-<UOa$%iOnmlyg3`CDA-|TzB?ojt7C3W6__BTLpN{5V
z-!47Kxej^r3Id3bCyna|I+b4kmjZRr#$QjCO0Er6x8z1`{NjFkt7keI#5IimkEeYN
zgt(*UeSdtbcMW&BKQJ>l#T~doS@jfVd*9IM0KTmG<5y0`&@Bz3pMMIf*}8g-4l5~T
z%$pIuqlO-X!?8I74X#?1SvO2b=%ZOc?fX3Boqbv(MIpfIb{QPbi7#aI-C)7U+Q=dF
zg?_g?pf>YB#FsNfd1dzEed7m_=WHKjqq>3!_6w`B_c=?I94~vyvt#!IdE$Tv%-%i#
z^v$>4#4$qsyE!-<35zPa==kd~`P4Yat7{(?Jo8&y-fKdZexI&tji@`|Ie`MZd7yq=
zyUZrnT{U<U@v4ny%igxeYK|CHkD=(dU10<HOP3~STFE=<xG)!Y-0EP*q^Tpc><rLN
zJ}nOVT0{Ujr>0E&vUwcT-%F>^avAu7l15F<v_5#F*iHbKGpb!O#VY7kH2eZ>Yy4pz
z5jxSF@FNCoso3yUK7|wO2~l>Q$OLh|YcIJoI~K^-B*f1&&d*GVA-_HRDDya0J(DbE
z*(7+uv~feu^VCk6sENFEylxeQ079_wqMO<sTH@QAgU}mwZ6-^N<CoFpwt}M$0DuWa
zKvmJu-UUv!Wp{REjb#k|k@EtI(U36toU34S?n7vuT*gQ4Tbz~2Qxk7I<MJgoQz5$-
zkUons@JhW`1*FF`(BMNv*}P6V+*tD<tq-n$?|jY?{MyUb(om294mOa3+9O`Tnrks?
zd=J=3pEQ;MuazOb8t1OxF%H6_4J^XVON^FoH6C57T-3tjicEO__IH|QYB#GcA&{33
zfh-Mc4eYI&Ue)KX-;dKibsBlieaU|$peSxUy6vWkF>%|&DIDg~`>(fZ38H4(elb>o
zg#CN#y)n^Q-*_%ZDeImn6)Mwb5d#W$pypaWeJaTJ#-1A0s-x$Z+>6f_`7ajk%`AD@
z0=oDb3~hmEYG~pp(gd>McXsu6oO*Sbu9B5Ll0RsXLsW&{Q>VQ3NvI8)l3r@^YYl@B
z?adr*3{hou>r{n5-^M6%Zx0XR#{cZOT~R?*O*TSh&cW^Sh!*e{B<#o<-}=<0jFLqJ
zGX4>|&^5HhObDX|{6lE5*Trqjel{nJ=dUm2({Q=z*>o#7v()fk%S;I$(R;5w)4SzH
zsQJO;rC)>T6w8SMX(hf+DbmCSgAJhYs}C5los5_`iC(`t9!8D?PX5U%cO)$1NW;A~
z9I*tdo?2{s^TNUtinKSA_*N+7l;TD}k&6j^<~jaIDOWUn3Ju&5`(^%XzJo2{6aeUG
z;EiOG>R0IZAa(B$r)H~JR>Q=GF0&VEM6kch7+Kj&cZiyZzd7vdy3Lf&b-p{*MOOtM
ze?}YNj-C-H7x<;t(=WH#MQ?N+`4fv7Q1Rr+P>-3crF()ZpCOoDUXnK6j5Z}OnCh|v
zMizzi)=$@Lzka*#_$!H_^NIW0yc%u3`@q5;>L~f;9RC5H)04nYl`B7tQ&&e<$_)Wa
zlF(+J<Bnwf6`lMlN%29lmf?Cw>N+&>!W@fh0ib{2ZlH?|*vX#wYr}M*;=XSK-l!zs
zf8Y{UH+(@+Y5GblEw77pTlfLV^M7{4gh>x<?c4}#ygbC1o)oJI19UA7){^`|1R)9P
zv*CGevhiuic_X3u!{&>IAkLdb<FX}s1gD}a_bna}PLNC3<2}R;YV%9+M-M%A$Q-z>
zn}6Z9OUjroEXQ?rS@x$Miv~T8hATqyuBDIYfY#hWk6)yNj3vgZUF*{)B=F?<1K)2E
zl>}`_0<8i_rJp~!a6YbWjtXUZKjOGx4}CNi?~#>0!HCyM5a>~hGUa|eQsdmmczLof
zx7e!P!>iqx?M-fW`J@1CG4@FT8-HXH0Kx`ksCYX$H!d-IWNY_c?l~@?O3^?Q7%pq6
z(bBO+g&&|w7J8iHv;Bo(m-1%sN313K;E^amt(y=6?R&YGS(_<c4*;8f4S}wj&UeL~
zS17hewl3X2zNFY8MrJ(qp5)ig1FEhcTy3`z1D-((GF$eOGL_&m@}D}}oE)fl>237@
zZx1D~dozJLH@FAp2_3Pcg?xRBxK{7T%*sT+XeSS;^-x86CgByZ{lo<m-aJt=+C)=l
zp$Cl9h$ePHJ204&u%5bmjnX3KQ_{T6j5JnhqRKcOYucVrTz+RBD4w)Y-GAG*4qBeX
zQ?E-IX=J=g!@gNH-V*@68F1sA?TG7>LvON41A{k_zA9cG&7%`f@rWr=N94$HqMEI&
z#$P8QVFVAFXH=<kQBHqG&CIFP00mam+2CQVxv{xXBH_bS)%iSC<0926^<MRM$u|2H
zYlg(;uPD_>_~bq`+V*5>&HW2Ay$Lqx+ak4?!YuwNU(eff^Y&e5V^UjeRF?Y?b2xPW
zlb)3@(!egG3QVP}|6wOnZ2oWB4<3wINPRUt(s}Nmj2eT?et?7BC}pzJ5s2@2Ap3IS
z`7OPLZ?%i!fAhkR`&%1>&~Ez0QK&$eaQ7+EPUL*Gj|W{<Vb+P@^AfRM)f5yk`3QQ-
z3@Skg*gzJ#J)UFqh}amD++~?KRykf6$U)7cf`0EGWQp^v8d7ffm`fen$EeDwQjgs$
zw!{Y@(~E-^7Uvk!K#oRsem^q7VvRd$6D{>Z+GM)C#Fmik84w)2LG0Ua?A0v&Hhq{&
zKenydlc&N2VnWU%&mAaK_>W$YpnQ|5e}q9tKd%SU{JCdofM+tesG)R2oGb2qoU`|;
z6&aooa`<HLBQc7!zn4opF#670gKRA4w(*IwG|%tb&wJ))x0tEoqIF9zX9s{kEQiql
zo%PYvaLJCwHLri?PQ2KUI$BAt`J<HTns(I~LIJxxeCVg^<P-6y%e()6b>@v0DN4+A
zx|j@TmO8T`Fe13QqRT5W;9fwd7xIzGlPoY^L;}VA5uW>=B(WXXz|-L#5Z6_L&;`{S
zjc{bP$L_<Lh74#M!903WPlEAmO4$wdz>u^E;4kzh)YN{@u8#s*8KT7AVeDKmaGbZ@
zbU!2O^VSUBat{^hKF!Tsjt7^WN-}<SioI^h){W;$*5Mt$8sx}ic?baY9OBxAT}2Tg
zv7~)`gk8|AyVuW;wj^9qs3^%cI`0h%ZSOh$!aXjsjH!a^eno+J@Co_~^lhd%u{_}Z
z2i6Np9U&t|i#A?LI<8}@`HEbpyh4KJ%X@oa9S?R_*12izIDp>7!@Y&6{lM*%BPk*`
z2Zicl-yJpe?FB?BMGr#j%0%Qa;V~bLKMSG|zLz#hXZzECYXfCa+lZ9Gei)0;=8k^2
zNC8f+uRZODjt%j5jS9iV$E<<RklD!_V{tDxwApSazUfdCElAGQ%Av0NiECs+dNUas
zLO#=Hxcqec5PyJi(|daw<MNcoWJt%1<CbI;lY_Ej?6s}JEW6%C+I^>s2>4LtooReo
ztkB86J+(8&#BPoL;J5$yNAJu5K+$ycTn;*vz^ay~{TGn1wZ_Tq!U!s$tE*o}D+fpk
zocDr8Dy^c-TX`N*o8w?$q$>m;SVXlh$u+&b)I$mx>A&l^OsC#U2>5=#Ua(1UK&QHL
zRXX6obrt#AAg82cbjU-X5e}wI0r2-7*#0U0u1Uy)4$>Qf-N8^V-Se5QMooBBGfb@H
ze48)THPnCMRmjG>SHP5Bmpb!$w=}>Lot1H*rynF>afE}4^z{0ZMfCadkjdvgN(wNy
z&qT|+xlo9jg{P8U8?8`CfkM&P8qNf?MpejM&yQ*YFDM_>*ipHDfB-T$Fgks)TXCKt
zg%)FM%+FgPGZu|_Xs|8kM6qI2pGb3!MIAN?5GGuGl?_Kpz1f_<`1B<P&H~!FF}P|j
zyzx1@xwT$&BHX><PtT5!S<}9PlIQ$uQdB%TBnh4q7AkB@^9INz8(rP-0>c$OBbUW7
z`Sjl9W};7v%o`pGG4SPX27F~yDmU>K1x}!soA41wD^hhM4BrJ#gqI}haOC_W>=NRu
zh_JJMv0|{MD(jC!$<hu*Y=O*r-bE*Vbzi(aj=;>`ElzgOqiU3e>wx7{Un-SvU(j<6
zHQ%NBl3q3Vc$6*c+|G*^87kF05BSJ0*ID_lH)NiP2xoM$YOXM$)&nPAEM<NB`T*8P
zMT4_5^<_9A<4t!V(dUD6hP@u{TNf1u-GBVJZmC6Xe^k1;-Pob|v0?Fnbd@BV2>1KJ
zR}S~cms=e1oOlAyWldUFnxaH>QjRIz%q3VQ+(pYyjRVO~*yxtgk;V-v$|T@lbud0c
z-_LlQVW@j?a-`06{9@77P|R9}FLKqgCYA|yNJ>(nzh#1Kcxdn0Rkvpi>8Xy2uU}|0
zk;ezjJvw!+P}(>2^kVpcNp@|nZmy#Yie${h1Z6e(GO}_Qzi&5gek+Y#Dpki{19y<~
zXV4F8|B{KMKKPy-Jv6kwcC6uv=Y$cM4&|6c@94DT8|IkZ2++n#ymk^~ZS{eD*ac}B
zc%cWy9XyBt>L!5q=0#roh)aCk{YuPzW_f(STQM)uAdI2ehf?=KbAIFk-m2Wnnm`1s
z#Lc7Nlbx$?wh=y5p!$=|<@fI^yKIHW=C_7+2Qr+bdaK);^BiIW=X(Q)Bia^es`ee(
zbuU&K?R*+3U<aaBcG`SIIC!l=`iP@4-&mS5WkPrR@W%O2n9^&$CeppIkF@Gm(Fc?4
zV!SMLok9`e``t5~qw5?Poaw_3ok03$!`w8X2({F~yHbk8syhsSbqBY`2b)oXYF9}n
zlsMo3nYON|`C!UB%&gePqhcoW<+D{~Lc`Pi!&4E`$X|~Y-Kdrsos<$Qsi}IJ#35cX
zekqqfOOt>?VNfeWCMGzm=`~?Ni6|C(f8(1RrqM6Rk>bYmXBTo*ylO>~!x7UvgiG$#
zw9LVXAIDdDR+9owv%M|p+=sZwOxMO7l2uqT6c2j|MpBrT`denXI~e;U3$6`6PWdv;
zvDDL06(z@2^*Z~^!6os0$`ko2Q?+D=a|RV4mG_?-64wV9{y5xM;fo*n(&(hspxJ2c
zbzq`DLtR?M{`Q`BB}~wY<URh|#hS)N!y3AliPNrOFJF$<-``$MXo--_eA|!kp2_9-
zStS|?ZyrC>j9t_;V}+Q<Lt)!m1{c#9o`-_X&nA8<bmpg{rJfn?qn{I*AgSPP*q|w$
zP_=!kOrvP)w>IC)jMKLl-&t!+r;_adqF3>;;2%g^BH1G*X=030^=;f&3K7e?RzBvD
zCnW59$lCL1c_3qovp=A;Xe^h+Y?XtsgB61?6dR_$(vBUT{d4jD!KG(TTZHbIJ;;44
zGR{<tlzmrQCEZd<nKEEsIg_TVlGQCeHRIS$#Pxc-@|7Zv=<_do?T!Iqu(?Z4=W~4N
zkg%Y40sNM=`Xrc<qRkB_Lk-Pjoc_6wwnfd-vAPFx#KMQ=?!$go+FTa0-Uo$dz`PqV
zi-~WBQPkNV6q-ws5CDI~n!@sUJQU^Z+fH*68J=i%S&p3MVt&w8c#yCnu-PsN)76+Y
z4-HDzuo*d(OY6uLCQmE8X?Yebsok^SXV|&$-G4ujHx8^J4<*6umJn|~8LBJ=%5Ey}
zjXy5DO=??a;-z)>$Uhw?Dzm$^%}b0d^JHg0zfXY`A0A-Jea)}+OG(SX(fjOkG4PKW
zVHxRoVfQ(G60Sb78<E2&pW;cj9BP3Z@uN!HKm1gUXe+K~C%Z{*D~s*TT*C-qBfH5v
zJgr@Ia;5xqCzaxr#MxZ8;^oa_W4s(->P$~Jk6${8ENzg@U?>F(?Q}P(R_aF8l&oF&
zR_TuxeoT0Eg>20!Mz{;7G3PNj6agHKr<^}o81J($T>e%3$c)!PUiQ*o2G0jqL#2Ly
z*jE*Qfu+5om#fQry&ZQF)YZ-Q(SueeB4Fxg=IKiNPx}msuJ8MfNWx49)kU8C!=HBH
zmKr548B{}2%(7R7eeDI_$Pu~TA6>vZ9R!cq93HJQdbgkEYO4cv+JE?%ytHYPI;gba
z))|pEvf3}>kL#SXb^D&~&z<J^R>l+1IR-UEa*_N<qv2~z{7KKg+}jKl5Mdz-OYa)+
zE5j(ZMb54LrX>t0$7{;eeWeuqYnx*26k6mAd1~~LO3`u6M_ws9TktGGlKg4U^^$j}
zk+CrM!x+i9pCZJ4%yTb|9Asv^@i`J+?HQgkI9F@AC@DYK5R+i86ghe5yV$iV=kS?o
zdup=$Ci}FsGl(Z5V5?ka%?5*}c{*lB$9F)9A&?IrEs{mXC5(smy`pcBnr|<$mY=s?
zQ00D%U*YnNkn=}oeE|$@<nmZe*T4je*=X`oQjdg-Sa<g)F%}Yz6aLPWVj3~vP@I?H
zCS3b<j?8%5ZU^;GDbeum2dGmPIH>%pxPS^Kzpy#)_NTM^!sEiI^JSx9307cBCyvV}
zM$>He1FwtaFQCdS$O||~zbo0(41bH4-5L-7rR|W>K%?p9_wL);q|y8K1T&abl#r2)
z^<E;FM?O<)dTYh+^KMqbcD!ZOo5e4T8GA0ZJ=0IiQ5ezjRpUdVEAi7JGOiH;&%Hl!
z+pl<OtT^wNMkMHS_J=e#FwG|EPF@x+2kJ}{^aWQ_fuba1#cB`I*<$xc?W~OGM0vy#
zglc&@Ij)}1onc?2Z~5{&8&z7e<~~nKXzRb4yy=XUYHj#^Dtweb{4HIsBJpt=S<imY
zt}=fNjcNmY={{S*5-i`>g3UPc1;_bM=+38dB=^Y>5i&7MG9>wo3G-|HHX=s#_vaEW
z8^YL3XGNyu%|~>@{HGxoRqxso{XX_eSK*|4=A(*Jyy^Ks$o(=rpxUxq*^;Mf%mcYj
z6CMDR0Y?@jbp?F2Eu5+^dCd99^ip&?+2(8}<L5i|mzm_vH>+>Px!&&Y{vneiDIq1F
zIW?#xzIl+_p_reX7^bNln_t3ChEIT;oAqp48+zszR#G6FPW+|!7CtPn0p2W^?U9So
zRZJlGv?`7ifwZXf-mANys|z=xT$3Nl>e+w0E%OGb5?&;1f~7jIM#$*g=%aNWMRzxW
zWGq`sgiRQdVU)hSK!Jamh{DmjVe8{Q-ewyGwL;!^|IqCH3aNHQI|Z=;meL+ztAV^m
zmJ)@3*8RTSo$zIa@Nz-bov*AchvT}}^m6P}4pJvZ&NqN?^W)_jIbxW4Xuw#ZYvJn9
zaIkkSVCU~8=g8BcNJr7GfM5i_{<&bbrQVp~be%@4#e<v!nM~9cK`6C?ztguj>t)39
zlyV!daPXI4!Y*SDRPglrg5UEDiUY=<RQs%z)1QR3%L?S)ZoU>V_pBJQ@LVfL#aYL?
z+{h+{Tqbh6t(`vG@U@b^5-wVsHve3m%h59ats~QYU!(W>l!+Vm+j@^FIl-|)iOC#8
zM5<G(hd4U_O^2amN$vRiUdL^_Eve0PhpO#uyjH*3trdc&%eV?FA&fYA$Gr!2!9T5z
zKZO#`+H}gafFyI$W2SYjMlcG>L@YabuB2>b;}2NQ6nc6eOGhWo53wbVvu^G(Bzqee
zri3{&y+4{YUz^)|6auV@kWPzXlS}v0MsB<STdG!yj2Rhni&HVp3Q)pg4%GDNX0a9@
zcizr`4MF6bF;OjgB%J(a+22J!d@cOL;JK^oZNt)SnS3LTzkbrr7RPglADh3yR$O&`
z_z{^+D=6gDK;HY7g??TDB<Ht+rzGZ#O8Ysw2wkYoCC#^@*RPs5viU&YnIraL4%l?K
zhz>tBG$Zw;RyclXBlmUJ_3$FMSxmZMI$H{tb0^QeZ#M3MXI#g5W}o8q)JiC7`@|K8
zKk%CE4jM{%>15orN&N^<7xqz`gg*Tv<wE^=cV51nC^BsI;uEK>H^rf_+Uf%ng)gJ7
z>0hb)@~6MhPB&PjF}9I~j0QA*3lGz8{+!8^dy*v<E{hlW?RBp_2bHURiGJ>$h;7<d
z=2J{aciyKB9yuyQ@DYi1CubxHWW+lxbkqP-yGQIQ3QIgfh_!$Aq^*Ey0rA=D`Q<MB
zQZUc(OEGw38ohYQYvf8|eYj#N$ul0HK5W54Mv>%xtnEGU7SYD1>Gs1+M#LVkAkS5~
zSJiPp5oL%!Y}-`*!K`f*#4~c%ZM~AfrGBP8?>W&y^Eg1*C?|-vhdQtqSJzeXhHsca
z$7|<g=eenM#g3nsu!Pr%9}Bz7pP~sCPM1mRo=l0Hr%m7XRf}PH5)~h4oi4_fu*N(!
z+fFPdFWjdaa(_joU@Aph=NgkzT5gD;YBHuUn)D5te%H02N8JRo+VnP_O&l6AeR<IM
z*=F4a8%Z&-JfXz(vN@?D5l9*QO&<<QQCo(8E7usAX|Q=;Yeb5g@<I?xct$W;d@Km_
zx9zF&zf=(kgPK5>x7#L_K!9>u5z{#HCaFGTIi`5Y!U#{E1t^=)_z?3h;w_?1ZzWeo
z@@%FN%?;Z<MR4?Hy7A)o?6_o9m**f3mEe%?Rj?unKziP$2m`}$&~(7K%!0KXj#HBY
zRrKS1Do^Zci@1IFPL3wOe(mt8n11+|-2m2R<H?9T`XM)b$n}pj=+LicmS*cT`>_El
zHM-MV>TacBpC_h!<v=V9z_z*P&J|@JaT2}1oaMJp&21p)YIlPUw!(;p^&@+BMd2?f
z9l||C9Q2Fdog)bm&;E)6Y*IuC{2{#3(IbAcvok|a|54YlVs`(R<1RF>Z90snneF#S
z!FQZJc>Cref9vPq%4ox>Uu&M%GAha4+iRvG8uJ25(bU&IuD1l#k>|aPVU}C`(=|Hg
zp=3bZ9}VnnO*cO5C*@dCVG4AvJWvOQb}TnP+ecX1V?I4E_p(&|-@i-He$~#>#$57f
z-bs;|s&OQeADiE#KZm~FhZy}Nl;pB=2u9}gzYBSU13%qou=2{Eh>iW&io5mQh3NzA
zs<~pQC))Ulkx#{Ejguyhsv_%_&z5Ak>!g!068d^w3fTh=1CNzg1^+7n`~cTKbX@F0
zL?#r4Ry*EvniHGn)4SPC?C<%de<kYS+VkK^N(M;BA49GFQXfld0&aVduT%QUA5Wg-
z*5tvT?q>%f_A~MkE+<=phFXVBl$S>(SB+FdL~UI{KGu*Ag{QkX53yqIux2NlY2{z8
zbcIFhn%7Zf4iut8{bWhIe=$>8<2I!K10;|1{F-7h*-fnZb_GFj@@Sz%;B~co>tZHt
zWlu1Lg+Hj1fA^c@mbWJjgq|8mvO*AC!lGc6hC1@I?4)LPB4f?Cv<H<s|EyXjkH|pE
zEqkqaG}h|+{@8ja_xOuRuqVfVn+o9gXyokaKHun4XC7~WhAruXCEGT>lBGezdA=t?
zSBlv<g1d4eQlb9ND3-H>yZYh>i%M}^yZG68Nj)JXnq`Thf5k=+g1aSk0#nO{lVW82
zxg)>7Qd-$CQwEl1w-=WN=>B4{{~{J0J8Wretn&|Yl7WshgyFVueBe|N<k`R{4pynF
z18J(VDXA_5YbeS-+%FGUX$?ok$hv!m08?heP5Z1EW#<6rw*rj9kNt-J_Wm!_#O@qP
z3aoM=s8{RwCv&Nn;S?S<6Z36D7avei^yiFlh>ax=<R=ZlnmheIVal|#^9Hukt(-Zn
zV>4x{jVizTo2>_)lZ(ros{LL)A@?RQXKkET%P(ir+LM{{A68J#V2F<0KFUyh*!R*&
z&$mFPTnWgrvps>2bTFxDQ2dOOOrcM4(w$Bh_ji7yaZgyn;Pn_-DLH`zyHyIr_1_K$
z4QS>8zII*%wcq9_VJ|D<G@vL@)gA4>GD1{2JfV$B#HB4S=lQr9+-0ZRx3TCWc=2{0
z<|6{ei8qM6Nil<y0RpYD<K41Y+VbIG+839uv=;0n3yY;JpF-Mhvkte32YIyc^UE~}
zYy`ng!4rvcF#nAN<oc3;NbFPlf&M>q5I+h$+_{&N#-I8m#6x-g8Ne9AQ!f_``wQi%
z+rX!`9BoiN0~?6e=+a`loDKI4$azdfDo?x#M^I8gdz4^FV3P&WMf(rjPcsi<v=dK@
zyU-#@&lstj45(xcg-P+7^zQ{w2Cz;(Ya@8`7b_<8U=WXl|4!5^6fqb2?8N#SUv#G<
z^i0>FZ<oC?AQEbXu`3C@msM7lx^^H6V~04(_Qr!JcHcqBG}aT_=+YRu-)5{Vdsg>R
zk{C<wff10C`U|sldNogT8k+#V$0G@mPczMldn`H`vK714e0KTr)_?xDp=h2JAmUNJ
zH0(!SygE<jcSd!Z>4A>?`7_e;Nx_5|TsPFhmAU_E3n!6n^N<BOldhcRd70u<b}{pd
z=6)CZp9PnbVUx)q+EZVHQY(3r-aCZPTY<VYRkwRz?uR}nKcAu@KRuGr+*X&Bgz@#}
zFJka$BK~ufByjA*`TNZ{*odLP=4p^CxstNzrN&Oa@%?yz477pXPo#Nl3~}JKvxMi#
zY)|OG?S0)H!}z^kC<ST0xtwe{3!HSxrVMvIcBjb<hchrG8Bf)iOF^&#+|?<U@4zfC
z8JNX+-{As9*E6N4M=*%tv+pYn;e#PW9~qpt2}r4)^LLO2D**U44MM{77@<r}w?Mut
zN~rsQ(ug$7RuKrk^KEco5c>RdePF;OYU+_OBL|mxQU!6{k@)<eBubVAi3-ni&@nAg
zHqrP;%34F28c)G3lr8FCG)t9&n`QF;dBy^8yZ}xr6f?{4gqEL-!qieiw5Uw4M1Wch
zJ)q{om@u=l`y)QrW+q}a{bQxYE%ymrzvvO%14-Ul!*_p9P;-Un!#+9*fMIF$Tx=k|
zYb*>h&TbLZq0#0d#pkGZNR&rhgM;^b&2D7XpZ)_nmjXf(a|ms&BI#|9ojdRp(dkF8
zG#`}WbJ<=TiZIn={1dkqXTHuR81L}TiRx0|ZGxtME?rKx=PO2moIlUI3Sn=M!M<w$
zo4<K)Ac2lMPrXJ1tGs2QfQydN<V>0P;Uq4vB`OIW(5-g0$}h2aTxS}=>EkTfzkb|F
znEDLfPp>ja2)mmIbPAwm$Q+`H-&7QHk2(gz+v=yDcJ)37S<{;g9zWb`VT#Z<`F+<w
z35|)jiJNlR1kQgw!zmLY9vu3Kh*B5D&)o0-HTl^t6r#J8fKT+3_wF9xvrKFxwD&*l
zzyNgp?TS92Kx^y0aX0WOPrDl{?9JUTdhzC|t>Os||Et|8YDPoy@y-hTq5+KT;wq!S
z4^|Ro-fNMQj<~I{1Fm#hge9J8eoDk$e}MWx@9PL0YR+0-V3gb{qUerKgez=PW%%IH
zEs@*_?tx#%_u#cKmd6~X9mQS58UR~ek|pE12*pE(Psg(CrI-l@WxbR@HFSU)EJeSu
z;6SV(Ki6&D{K^G5qwM9NxrIXCtI`kz@4=sN=j)QgAN5bXgQhm=j1f)AsC08fp}84C
z=VYCo_wdRdqJ}yC5bEirw8<h60Xd&f&Nd0zT-uJT?5wQ~+&1!y!K7=u<y+s^rC;<o
zxuqjVZNGq5YkwVGXN}|#zZZm6&5arvD4_F5hU`(GkY8~LC#6bK17k7R^*l7Ixk~5P
z4+R7d&}%)}c8o1KY8B(DDWVh78(#_IFr6i#r0QIti3ui?gKSLWc5`FxSZZ!mGh^GW
zFnr@K-U&vN;W+h#iTJ3a7$_&8F;BX>aCmts|8X0KZ3!~PY&c3iAkvYVY+eEsKQk{p
z@O_uj$v-UI&%TN?()*g<I>mEsfW|(ygWg0G#AqLYa$z>L9tmng`>QKwHl`>$`8!>G
z?j-1P0T+b_<~-EtS2urS{|u0{a5K!Fo>gX@E^|ng{OTh<WIPP6-QVmqZgikYiidNj
zth%vNqDLXM)-2o8-!#dVxgq0GC{!9-x%kh`lkP-~$5^^gLie{PB=~P1e}opG=^new
zYqzn5fPuZ^$JOmk<Gu>LNf40i74cC5ghcltM3>Iwh-Rq!rGV`xE<p%p0`R1W<2H5V
zoP~W0J3G6T&0u5R@AMUJh)^(4Qzas+osO?{R9;Xz@?bp?K*2G2)V2&F?@46J@gR0~
zDBirZLM*sBO%;yJIdttTAM_GAZ1|}oenb1`^6*mJj2ES=z1s*mw=q&!D@XfLrFfdk
zcP~(&+YGPlG3wAG^s4KL=Z*x7vWW4H0twxtwsLZ@3SQL66!+0bFfwZB)Eo*rrBDV+
zhw|!rv|09{>xx&XvZVQO%$NQC!`ko}6ne5JS+>_KF-Ix-En_8yg%Jmd;4K-1c}MRm
zrB8mu;7`CHX4+J}V<Ftn+$9(5tUa*Qfs-|EU~W11XP=<K5U1&0uDxNcj&dG;a=qs{
zfc`F#Ll!w&t=_%3@&Y=t5djDHxGOYXPJegXtWu|pffu7CR$Wazw*U%_^g-<sqvH>4
z4-dxE!Qmpj8^h@unyh&8P$0&GO%m;h?!LcujL%Fa!!hbn=hNXIq45x1f$RN7zj*%k
z4J>fDUr`M<uq9i^s&uNsi}!eUu2gvu(0&w(al4SJC1tekQE@@ko%YLawXcB4;{~)o
zjGs-5isvK&DC^e<O~>=qjbACBUi#s;hbTMFG9B9;shKUq_e-0at{K)-$+G&Q&De~a
z#7LI~Z?V?pKQS1~<Wn6zSeFRjc&SZAhE=eu?dQbz%h3`D$LpBlUi#g-g1qz(Vp=z%
zm$~jizP>@}=yO%;Q%WL#!rPiu{q_Crp(Ef=ZRT$fe_L`ywnrG!&S&Y<WcVHH&D<*h
zWL2O}0V_#<)%D!#vhdNZ^+03J%Gh{`web5|Vm!JxFAdOsRi!)gOHR}$W|`}OadryS
zm0%$Ui+GO$TcmE1%@;P#VsKFjd$w0nhR!!#Aqb`vqE}bg<WduM=G*kJ8a6sIV%nF?
zKS>W5MjUOArj61&lOP_FC!u{*JZZA!Q@!eG=LnLWah|TKZDKaW1ChUoK`i9k;my}2
zDWB)(r<lQPgeqb&aWYqpA5d3*aK+)`)!7ISc%oC}smB()YxU0SbRner*6vwod$91V
z;bn+vgkQmii}u`RXnTFxM{+^KJgpb}T^}|x3Q2#p*S){R>XR4%t8Qy)gt~w|oJU1Z
zf*W7jSQHJD+-SKh_4S@q^-We;;~V+z%h=-qO4<Y~`Irx#C%74^!-)flj66{bR7W0|
zWfY2cm|5a*ZA2q;c>k<GSlGp5bp3!=j7bUb^xUdR50#}T-3*3qT9Nk$7wEzHc*Rl`
zE|;jzBcAK7lq9(}d{~%H#l=oNc3N86t&X7Xki@EMJ@1_^hcMmx9zaijt}k}Ssx^+P
z3;IVGcou~~<bo8rJiBOiFr2U3{h}xDr1iU<hiE?VurPK!kI77AuLobg>80yh4t*Pw
zv8snB&kL9i)=)1>kNwqntUIp;^LnJzKl>KJz}78=DPtX&`7(VbL*}{KNCN4PF?vd#
zuiP7AKr?B%ywB}`17|Wmq9OGd5zf3l=<<F?<WDsFV;OQ%;cYF^mAx7zsDxG#@VIiG
z^nL6?o#JyzZj@`om)mB*+t$6zvTj=$&wxKJeRxqDj3*Kc-w@TND!?j;GW_<Mq4By(
zjoi1_d8nn^rF@MXWLRX7AQ*wn5q;cSKA7h1rd=qsJ*K_k>SI<E8Rr}kfUe=;aiV-M
zl70X94b>$|ilE~tBXFEXg*0MGk)$cSE7DunHXOdet379pW_aaSM3bb>gb%oi`Sv$0
zcZ^ZVnAQSCsd7DcT7>hE%A|ZF+rO?v!<W}#gbyYOK6HJNHxV*}Jw;~N9qc!G=1iBg
zO^%GbbM!@$33={i3M6&VM>~UZs5Hi@EDZ#UxMZP6aRvQaez^j9P1;B0lYEq-e<R`M
zfE#-m&x2%2T|>E0tO{Hp0tjfxCO=!yO=2u#6X3s{$dX2~F%*M?MRgeYu34;M&nFuX
zj_Py{&d<;5uq!9U#25ps@aLtUPvTYveZ&>=J#}(4&OcX@_H1Z&<frG|cmNn^CQ~M=
zCJ<R5_t-JR!ezQDier!+($VdTZ*kVjWa7-V#8<hHwG!7#%k`<8Cx2g60sm1*X*_3I
zNOz8Miqn*R?eBX|x*Ll!N%V+op_nSY7qM_}vctGi-}?ond~Z)KF0`b1vK(&Jr9A2C
z{j#X;TDY+|cCHIRwuqijYfPHi@?PD30Uthq>}1r+(~mgB>$<{U_f-ik#OXol3>h=}
zQX|sa5rVUw{3z9Go~hiRoCLGXBTh3BQyD+-@Hs|-W4PI=rr(<0l^?6~w?x1*iJpvE
zD_5FdRIY8$^AX05)c}o6>hN1X4mX480|y>0;Bj3=PZ&$li%lncQb2TRqd%0tmPclM
zl6S|Qm>n8&i7e6_$%|7{w!An<Xzn$H-?objvbcaL_KTBzOpU8cf=@at9EG;$Hx=w^
z`Q>dW&P@B)u*<@c7UB1!fI9DPYWXQ+!pF-q1;P&AFHQ=U$)7Y92fVDAEm);0!mO&X
z<9_!VB~U9O4z<#LrpfQ(S|Nr}eEZ}=l3^_NSt-W5r=AP%hz4e7BeNn!&|6Hnyg$s*
zM+<=596c7_Buoag86V9lHuKqZ`U0yYI+}rriO`Ij%T>?$z=xUV&!orMtu2d;8qe*e
zMY1@U0M##}yF(AXH|l>^ed&t*x@`G^TKCtSQ;rGu(0d>_lXE{EBS4f7@)x+uNza}N
z4^(vczAUgnkqh|c>%T&eiUHOT*GWFO4C@}d+54`x_?;hR<gA0z2lIuY+hg;GxmNDL
z!4JofJ($w5+x%;YRz~i*#K^;TNI|KAe5)}z52eCl-8!z!R8<l=$i9F$Dy+?U2q_3n
zU2!Q2zxPf-kJjWjR=T1ROhI+0RDi-P+q%D*dDecahF>{d?2IO(Ur=+<LT+fp<K;^-
z^Q#99$CI{sd3jJ}Wi0v(0Sq9pGJxG3*0`3>9)7!upMmx_$3iV>?t#roIY*21-iYot
zRF19Xo;L|CIP3MEi%tA?Fiv$*I=}(^iBhAcFL}~0ldSKFviEhGOuuAGe!upj)3j@x
z$j~5hWSn(N_tRoL&%=bpv)Z0Z?YN;pGYLltNtaJhJkUDj6FKvwm)~92i(gG&1a@YS
zm15yDsr;O<%!n9Lm88g$i;7HmXMMYv0*<plXnH)d*Ho`rb#xq<$P3Y?;-p2DF}b<E
z(rxk;P6vk4;gJ!Bpg{(TlkHc3>IKyw<oF~2NZ#F$AY*q7sHJe58+Rz!V3916nO*YL
z^hyc^18a#oYhW#54RI<O9-McUg@`%vlpSgxYO6>-tXm{GJWGlJ*p1F%U13@P+CIO(
z$jB`%Elo4YB6t_8vIG^pZu(M%@efz}TFW~q!$^27GK-4X)ZKGp5Yb?xGy8kj2N}RB
z5b}XU_E~0rJ_MN2p^laqhPiEy9_=`k%y!bFzuwuMnVAs`O*ziY#>F#ib=?IP3+v)(
zmW6FVR@WnJ-w`h&U}6v`U0SYNCsej*rXYV(S$a?P`5v#{LXktnS&phGM%{tlUs2ye
zYudYU$!@+(zN|3svTW--p*VZLyE*Xr>sN3$uNny|20FT$t}fbylKC1&(i`wwXh(af
zm7!UC7H5$9*kweoyoo%BN2b;T`6V*)5xIyfnyAOlGeyOo=&^jvSAV8xjg9dgo8^=Z
z5lZybKtMPUkQWU6kb|CDwE)%}Y4Duxv0}I3k4s3BhXTFmx}e4f3+Y${@oc`wt6Lk0
z;%Wlwaa}uiw}s{ALo3KadOI*@8BB7^d0_3${%#NA*<ZSsi=o}55TmYozi6}b`VI-V
zHV)4(CQ2!==vzxsUN&RID|-$-|L*a%^djA^xg^~GP0d-gKINg$C&19E1>(FB>A0zp
zQ_q|13Mw20{T}-K@KIidG2#((08njZSUuYm((%3~?8Jmq_4(n;#U;Od@<QRy=x6ll
z>z(o>+{kLrVCeVuZj%p?;3b+<4~>=GpJ;VzZ<`DvIpaf+9|*=;7sXVm_lFhxvuNN|
zc+vjF>a3nx=hY9}hIW^$blQJ3LV@W$QB`WSKypAwk2=5Y^VfcDz|5y~QHd|w493V@
z`6#K+%zs*|&Q~Hby}@2Xni}5>RuB<zkDZ7v)0^4f>sP99t<H-V8MN5lJxi5ZgDX9P
zL~$h4ZEqHEP2@zy92&Y=QP<y#E+-2v`(*p-43CX9S2-iwISQA#Bq5kGaO8^GTTh8b
zuuw@(LaE2|)w*>GL(8me05wuGqHg*Wkm4lt#@3JQ6v<G5_U<Z@n=gIa0rEyH&PVDk
z&7S*<T@_7pN@v5*8<a?mXy@7v6zat^9=^dqTM8*ymFHFA9U}PFydxMB<t3(?DTh|o
z-2<r}FpeqeFH@FCc~NTAXt-$FKSTo$2LO=7JzP?n_v3|x6zLfYFBbd3;~NgVi9)dy
z5_tq0U=RxhZsTsi^^}A)2${j%F7*;D#{3qhS}X2ACb^HPcg0dd6|byMSHY~BX;*Sp
z@Z46;;S%q%>4tmg({9tD70M}LgrJ29H}>BZI<W7@uE7LZ0iUa#R(kV&fcIielDx4?
z$!O)jJu!lK?|rd)7Fu~Q?0s5JDA;PEGxQXIj8R>q!{|We;zt}D#dPb^tuQD0h-tdO
zKHEE1C{=-)Hj0Z;+QH-JpE{cgd5hb9+qYLPZrKLcQ=bn*d|ReoUX|XuXDSZg=PYMW
zSC`y1-2X8ko#4RRBW;wNEGX{Sh#E$dZJES(33fFO{O=CIz=B%rvxTGJ0g7zWvG1M$
zOU)hC4xESJi%QiYDaaCQe<#1ZAh3eZPT}h5Ck1Y*2u^<-^%klt@Ji6<3YU4IHA+tx
z$gteD0lcezA$onEbFrUayyW{soR@!#^MP+fKsp^yCpBG9iOYFWXNzuEj*9ZobPFYq
z-Ut_TCCN+rqG+c7co<W#FJTUyOx;RGYn7t&ohmd`5D#tB10)V@H**Yh2<1V9kbzT6
zT;j^9H_)G}g7%k{AwOe-{;^eCiooFvE(X=5-pnL_4Ft7714=(ot8&d{Ig1$XgFP#A
zP-w%-1Ov-MYKIQ{XIa0v-l=Gv8aNtfP$~`v6rliIS6v+R=jB#~5tvYHYvx1v_UlJL
z|5LM`JTIV`$4D_gEX@uX^5<Xkl)vjeE@+|b3`??Zs#MMaT_EPKG}I)3?ijLKT_PEQ
zd34sus^J36;nVuM!eenSVEMgM{3HIBT?9&Lb@$}oyCwzXuNY?93E$zW5OUfpX?Fa2
zJ~^PIiDG(Gi1cPUM?I=a&X+`q>_#l;Z6E!=jF~BZCzexRvuP{x-Ca){Xn;LZwN{_D
ziJt)=kdjXXlC|~=z|QY)%K3J8umwg6UxPzOdD(wtEfjPQT(@$&ny-rjPN&!z%4gE2
zzp4NR^g*>p5drCSPsZi%utgCl-}&d1Xn!?{@`all*MC;txoz`g?GrmUK+E@|yj8cv
ziOwY%!e-eXks895{ADGc{hz#_A*V$}XJhu)*^>kOyg-HTUwsRG0@{t#B6}ww4R4p^
zjZN%u2h&P4TO%{J-{wN^I!1583o?})yR1xl&iv@kx;YSC!x!mf{^t79MULQGwhUFw
zXaf_}CLRHhl)(ke40pd{g`C2C*#66uQKMD@vv5mb5EhQSZB~=yz7E*e^l&If<Z0@0
zPyIiZ*9Yv2d)VI0<#BN|i}i!>jtX9bIJIJnW49Z~0CK*_9}<oD_<|=V_lhvs`ttBs
zT1)&Lex5<z-u4o9ovmNx>wkA^G`t6G;IJQt4s&@0h#FQt|M3mlX>m!%d}fWh)_=as
z7wB7ZmSDY9bVnE?9Kc1AX0N@l>er(WfGy%k<EMOL3xuGMR#f+H2X)4&yPbO`$?z!K
z>m-Y|@PE3ZcIjC=>zD!#W3jq)DYluJDdXx@Rqf8*@1GI8_wvqZaWbIv=I6^VggR&Z
zk<#YC(Vn+>3_(jY(l5w>Y_m{)7fzkknk`Zp%amJAARBY-@U45B9zfZsJZ^U@?j9d%
zMjZc*2!>KrVR~?P`#-Wg3C`ayNu|_m?!wDg(?@bEKyW&9b|7?obyfO9Amm>Hi=N8>
z^yiX{L)hqF2%!ayh6kW*vv6oMO{M%u8QCVaxQM2*StcWyy)8Zlu30+3NgHxqYVHnF
z1o9?D!il<jWmKVR4e?+NDFE+UYUU&)Ow=iO$vcVlbt}g0N3H1pn08eJ(SDNu+2com
zyKLEp<J}?8JPDvmDvD5aG9&=<H#>@5QH2iGE1BE=vIpxzS@QC$x;f#0Deoi(lNLIf
zVG<tk5{nw#qW|^`@;sw{bxl(Ff)+3wO<P&A)@^R;F#*7QLf-ljimrq!cK(w=9w7`k
z+F#1}PN+dyczVF!oj%Hd@OHNFquey8$J_d=915N%cbSVa3e^4OtkwGMs;59$zYQ&R
ziim<YkPf}6f=@wMKyaBeVN`Mk-n`LUde&jx{78*i=FZvVg;6u!VM%@nN<B__eZLHP
z2eDj$jK~<`ll4-*WykqgEvoPX%laGkOY5U;uO}2dV&C0`FKIAsg?w-qjsxdPasZ<q
zH`yILY=Q8*sy|X;%6Gj_=|qnj@ZR=XSi_kh`R`qbc<|FdmzCK@%mjCy_W+`scHDy{
z$&*K}!><8oI3kw1v{pPY)hWcf|KXHiFzC)<qTvc4i4qy}PXv|!SayK;^}gPhbz%o1
zuR)={hag)x9EhIcrYaY1Co_oAyPy4JFfr|GR(mvd8P*dW`VS^FIORh1;hYl<E{=7X
z*?iaEprJ-~L32Nn1B7u&ZyG$K%KC19IqwG25xaR>4D1uU@;AM>vj`B#X2B&u(Ljc+
z_U2A-7v4&a_|3F(Q1QPZIPfF>TG#qQoyhBOw!0K2q6=IkVfMODlF4?;rDEuGRXEP4
zv}MMWYV7hbeRAT}Usn+WjEFp4J*$VK+!>J#V6`&t>-KKkCT)Zjjbm#v;8eInl<4AT
zKnx<gtHwY8F^F*V@=5M$#)$*YKiET65gW<3j^Z5@K9Pvxs6+N7<O>5M4q&Fxg}why
zB4!5R>e08Fqw&8;^v}2WKc^5YXL8s+x$9#?2ZN`p)<>eX`%O4wmo6p8%>Ra;8MHr3
zK!@tr-`;L}1TOPbI6sm~{D!B5T1UtikQgh2qSO^Fkh0`#6-QZJ=`XYbweWCiC5O@j
z@{1B+|Evh7yA7Cf1rbkEfb36(uu3nC7laE|0%B1p`ATb4-yb>WJB9E-5tja~g*y!n
zLr9wk^p=nBj7cBu1;W)my3`!{eOi>{rCi=_3b>ae@qnkoG31mD2(tJK!Bi7t#0+=t
z(g_5mch&E|Z`4~|_EZJwQr*F}5lwe)Pr6GLNXk{oTjSk&C@L}IR0^EU^j8RhPvQH)
zJAsAXBNiH3$zM=><@|8B>o}Sa6fb^L_Ez*dM+TpbZyAVZiooR2N)XiY{>)m{Jtpm+
zj{YX^$xOj}o-B85cA#N)v@D@{UwdtFINP~cU%C`+G_cqGwen{J0Em9IWk-L3s0^x@
zi?arfx|RxAcOFUMo3Od_RcxHHowEeFeo5?Uq7p0Gh=3BctP@h)nz9vRxb3yq?gP`X
zJJh~~vwbq<QJUpWYL|>DO1z6qK=3ajy9omDf9&9-*9yepq^FI8<N@!Owls17I|~4K
zjLeuF)19{hn{Aec4mq!4_3nyn;KdM3%ho6Xm5b_X6_#lfz!e{;?IDW6PkDB`itWwn
z?@T98jf?uE{)&<H&H6v1&C>v}{V=+saa0TFXO441mEd3RZILI62;lfFn(}Yh3WU#H
z_LRndA{;^%+=nCryN>@xxKwEqAu@jgV1_1)eq8f)g6qR65vP&Z#O_IdtZMN*XV^1Z
zh66*kjLh1RmeCXjuJ0}_Z`aw4Ph*oVcVn;iYWu#u#7^q!5&KUXLJ$#wk<*ginI#+d
zP<jfP!&L^()BnZRTZcs%ZE>S844u-5lqew$Qc{B;NJ*DScS(1SAfVD9B_-Y6jkI)w
zbayi}%zZ)6x##=t{e$P3hnfBEwb%ZwUhm#75fY%l8GsL#rRbTh%-*%6F1z>SQ>Kvm
zL)hnLv)$i2W%k%7?q4Bc6;-NddX^CfS+;x)|BX2&gybZBS@$}t_#M_)AHt^)ZMu}q
zr#qgP1Czg*?e6PO?9ZTW&;XhfaV|&HKf+xe%+h`fe`nO8QJ{LISC{)pcNK*yiA46q
zK;rM7pFf)Nsu{9RuWN%^UKE&<{V-+2L*>gE9LbasK>qb(8Le7Lm}z@wNB2*So#FeC
zZgZ|X7Og6)pD&l~&4)UU2Njky_sW)dfD&>Ub~NPCKj8v8Ga9gvOr8Et9!iHt833<O
z2}=l_aI5ksA&<8YQhsNj-F-eO8AdtBkRti~Zt*J-lg_)q54k*d$nBdhrKGoaa{ft7
zpR&bFVx&N?TRaE*>ce^esvBQ=bPZC3!1C6g^zmi?3bU+qdismI+3bnNAZ@I0IdVG0
z(j>;f+MRL92GByp#d$m0MNYd|8?*h8@x;Nt=$q5$LB1rt!!B>Sx6sQrBW0we6_l0z
zj*smL2?<ZVK~P^-T-s;hL6FIPjF&=QuhT~BPQPO6zAj0Vi|zb-0xRIQC$+TC5pZm@
zO=l%sPAaExeGiNO2T=gDq5H0nWM(MK#~M;py-_K=E4_g8*s$pEFg_0r4-a4SJ8t4R
z@6UdTA+Eeh$vuSfO?Y{&{r>(Njc=LVU}Yig&9~6*o}OCyU~kiBkrD&?>wWQYyf&1f
zLT4I%aU4j-#>QXDxRSsD&r0@SJU7SN6k_YjWFNf@UP#FIa@{8=9-#fUg$4W={>S&W
zdCD}8pNopi^w~>Q(*GPB=}Um#aHhQ2LtY?tH|Sx!Gr}=Zr2kQ#z|6wp7b=yfZ>8m=
z!Calw6i|z5?~V=sl6dWLpBQIrx>&wO=Zfd!NHcF<-gC((J@cl9t#;;HF1LT-yWTCg
zyV}YYTW9O){q++6tpM~HT++Pw2hm^M9uAp6dv-?=&mEz`@t_8P*1DJ$+ZYz0)82aA
zT)j1#cJ`=?YT;UubAO?ksyCLct9(%STU}k9r~#8CaC*XQb;q4^y({9p0E1tTzdji}
zhFMdIRUrCCBzNVLE37Yp8}mNRS*q6xVkj0t!3X>jrgI{J)#w#d=syX45W@S<Kr@PP
zGi+V_*F^CW(X&*V)F*4Kji*W<?0cSTl$&5vdSB>U{i%?ON<U{;x3Yw@cvvx`2ezpf
zzpva5=V()~>+KZDwJIabBM#vIrBQ=_mG$G}Cs|~kWP?PolC*DCbM&&2{@*!2KGT~x
z2|F;K%kirE*R#b5UBU`7LDlO0bqET3q!8+WNy55&+fArD>$2e0r~^g8A_=0Me^T0;
z^ql;Y6>p-<<4U7HIt{Kzib@H8oL$404!BY-vAkjVy2FRDguL=u!7a8|YtgC$pZ>G=
zZ@_$6b#LRXFdi7)Qi48oVl%brs&9eL5ctYiSJ}CWPjq@kXTN%|gP%gAr{YMSh`Ihq
zn5`ptlK8np*imJ%7dG##Ez<GHNoBUHEa;57C6?oC2r2WQ@dHvEKJjb)fBw#wDA)4)
zw9HJVwp|4%11rlyrYED5<fdn$=lbzFnXVIwkWv{}QWCbwu~6VIJ_Zr}!N||gKT4;%
zMYGrW(Ps!C1(E5NGsSD92uJO|JM^Cq19X6^WV$n$Il|=eqpY6s`Uelgbz<2lqel{t
z(C|@sr$}XO;D>^Vi&3|mTsfirX1I4>B0rbnv@AXJ^ic`tn=cd1r(4kHf1`$}7)W~o
z@2Bq^<5h*3djC)X#Fv1>2((SelOP(qD4+2f2XcXpvptFyKAQ4nhT)js>@19{S9hl5
z9VUD1i>j)AZ+h8z|1$bTVkFH_!M`}}7R;AZr`u)q_f%fsjM_Fbye)GB5OaBkuWwoN
zoY(o>5tgsy>C9f_MC8~-wd2-^*4j2^#d8MrHi7*b+WAC7YaXD+XpI)<<XIBZLiqP^
zGT=BAQQtw@+|+K)zuazsq-JAI-DbgJK6;}lOmc=pP|#M_)?j~Df|Y$Uw=u8wT+lP$
zn%zXry$KEHZx<QT$t5OJ2@r9=G0#2ZBL@QkBkFs2+0UmFQh&1wcpzb{uF+PSko35J
z3<(d04C*gt)<f$pq1+<UF<f`G**07CXC3wJXbi?2;gAG$29FPdfr7@(%FYeq<Mc1@
z*6wr1BwJO4wYO(8wVk?8BV`9k5i0|R=g<3H3V_N4^^>e?u};GFuYXrj_Kw<<FL<CZ
zDQh*Tn{>J|PzMtzI1v2xXgtuY+;D1Ka1JMZ!0(-Lo3*$9nA*gag@RS$fm4!9Ko-~#
z;}kCcS#N=4np(EUL9s8sA$zN>WBI6h?5BNW{dC114yi(8K$@?k|8cmf?y^!S!W~b%
zayxFVaUM$tcJL$>V50IC5qcuqX86w>N<KoX^tT1tf2U61)AhKARe9yOi$1t+2V??m
zc3I^FXf*m@{4)$>4CLRGnGh`o3dd1V)IIghPn<HS9t09`z-=M2_+>7M?amG7F~-*d
z#ZN+*WXg<W${b-LgXtPBNge|SFX~3}x$cw#29T1G;i=wKmKthdXLEb(M&x~A;dw7H
zWe_nGd_jbV5~<nb7l-sMBQwy@S2m%J%{G!kC2N|g`9!2HD2u8t+~=AOOvq1=F)%TQ
zCnf@t1YF+p=1%ymbcRyY0~v8KfdZy5Av<E^FG^mYUGn|tG@J)|dRl?1Lr6^xU+;^%
zOb7(|#hLSBrEc`fCJt_McMXH~zy;}t;~mf7WU>PT+@dT5WCjQ#hJO}h<tvKHZ8nAw
z%eG8Ep3*TRV|Sw)I4v^iPD0Q>(T(BZX9{|8$QhRVz3NB;x+gZGS)Rx>H*PI0q+fl0
zwh5dA>GoOIm5`jgyt3Ch$&uIU1sXJ?AWLDqvul-VAS=tHx_F?r6S3Wc>jPX3M9w?l
zO_ZWctq1xsZ`M-2!1%`Svw8Q1RpCMBIxjii55f+F#c=L;#D|H&eh_(e+!vI>U;n6E
z3|l_AVkhaOO)|Txc!aKukC&v67Vx4Bi!k+mG0>lwZ@)Efupv7)^Pe`L{Qhaet5Av@
z=Zvf}Sq?p0cgDbyrhfJ6F|9;!%kS?@g<bisIsq0$HT5+$uJult?jvj$*$HUE#m)nz
zyDBOw{xde}{rd3?>{y`uJJoO1KI-UhDQBvYmm+6g6JLu$DP=XnSM#mnasTp%dJ)7~
zrMqP#GgMdFk-f2Re!zi>utL{KOQ+5Su8<#W>$~SRu=j`rt~**S6B{7sS7ZCg?^V7P
zq+uetyh~=>1$PFM`N4K3)3dTV-@A-o*_3TxUCZxaz{Ck|lnd|PDM6d5W)5s8wO#a2
zH;2#iFA_nBz!m8BLi1j!BQ_haj*SJLj`R5%hRGk!@W*ldrK?33)Hv73ch#j-VQqaf
z$f)9Xz3wFUHt~BmvG3g@lcERK;W0q1*>dgf_OZvNtv2|tki)sjx|8&^x=aZVOCj#=
zuT<1^EsI7{<ty*56)NwTN(;s+L{x`ccbLgni@~?V%o=*lUk4fS@Su@}d#*dxMBXBk
zl0HBoAHi$p{jY=1>*)U$FP*yn*`ng3n%~!J4w&<4+OB-&Cgn2UCvWDbKsxn-;u;b&
zbppEvr@(8kn_AeO4U)BRqDFg)vGF_&Bek7CmxM>?k&xw~4bWLJk}c-+wmQ>cfL~Hh
zVa4hl-i)xP1fnixT(FSqrKGX&-u6yWaPi$K!>fzTPKrm>ih$&$Lc-B24y?uIb}A7W
zzvp)P=lNX1QEPow0_cA}fas7w<4z`3i2YnPyT*Qh?VNwE{X5~|XW#a{XWkp(MSR2?
zT*Xx=@UpV9cWS5^TFx<kgM2Gky-(pv0H9NDt8sv<!Vv{@WvqGCge`Wcs7eS<#Q)(_
z6hlRLty!NVkto+(mEh0$MXpC_Ie|UJznvlh6^^%bc6mjN4jo@COL5=n>K)99F|mi?
za3g+MnC6|2x=3!nWQLWXz{dhQV!j`{9Iy6t_mmD?>o<QHWL)G$jQ3wDhl87>PU~W~
zhbP!ir~PkH+JYJX0<R1Fo~JtX1R~iYWT8vZsYZZU%p(8x0h4ujQx{-8j2ofyl%#0=
zbPNPe#TI!GesdIGvR7Hy$r~-6obTV52iFdEr_1+9E+24r<{gFc%Z<0v=B|RTuZf+g
zXWHvzvSQrDaHov!$^6*9U3~o?k5V^t+ILN?qbr6rw0~Er#|M5quWU%-7Bwc{*n_DQ
z?)u^B)3h;L)`&;!lw0B}$0%{zg7Bq$;EbWVykPcK+cRC8i(0ma!C2{l+@QJ~Z@TKu
z@3jOoL3bIw+*A%gRn2Gx>QOn)*lFB16Q<BnpI0@<hYT35)YNtjbM-D-=M`ZmnxA||
zK!>h7l-oUt{0_VSS%gkh*Txs6;`wjh$$_=8Sulb1b|x-rx5l$?>ESKO^irSztUI@-
z9bOOk)vE#5Y1I#3Wo{6tl1Y$;!*3OX$jP%=j-?=-nejPy@<fm4&jsVA8nVd9NKOJd
zS?FRP#!)jMKMqAuooQryzy547p?aLTk)X0G^c7-w*X)e1X>3k>wUsFGUMOqKGuJ6w
z(zi^urAX?^dS)Q}E)Sp!V3#X`FQxt3eU*y&Lrn?f4VXIxgZ`bP>(Aa$S;E6~NOdkr
zVAJ6ZNp!Eb$cXvkpi(>8M%LnXbMR~bOVy8>J68w8NfeuAXGP;bcV=ro12O;rebEDY
zroAn^wN&`x1q(*HkLr-fp-X{A1V==7qZ3$Za34;akRMt75q7Zqt7xDX_7}p4#mG3t
zXIFU7j1YM}ff1%DQDEd^AF8+ARk}OVCt~@6GhrTzdU&8vJHam}QVsHDoPlqi($aEM
z_(erUMI<D=3Q|78!@$x>z0%9>Dm?v4{9Hc^V;?)3E;-ttpTy(r{r(<e=)RgE2m6Dt
zA|QWKNp1U9dRJE5|Cwf#T~E%wXz-0nLMB(x^_&2Xt8hlZbz;r;e@ilj=26V2=tU%a
zpNxueGdJ|@Xg(E&=OxWkwb3#x{`74>dX{XO!h9qwb67m&y|Ou+{twKDCIJg>>KgP}
zlqFX4yIL;oe0tuq(7#Uwa?70<gZs)6=n-%EjTfnUGAJWTBi;(ll~et8fA3DM9Txvj
zxrwqV=<aGiq8-OIaVR>!iJP7TDe8p!?O4YPvSFWR_-g8n<tRQzC%WP4x@M+$%AImC
zwJmSh@fiWVg4g}d*x(e48zDcC(Z}M+)9ZB**<sKb-S|z|m%n7-Wq^cOlINHVF;}kW
z&JRl{?FhKjn`?yfX4*Jw`u)lO3HcrI=BcNkn}cGRN?^B!bv|SDn`p1{ue19jHinX7
z&8i<n5p^*#GGXKc9ZwFp&W|?t_T<#OpoJUX!p;Rt420gA%5UR3r(V#W!#TpPJJE_Q
zwC~<vt}eak$d)wxy=D=N$QBu`_<Q?BX4p5erTAOcru@179hb%rerN8J<?uC%6tJ6X
z6pxV3lCuk=p^JL)jMpyjnd6z>=*sw6{*_Ql9`j1Hc}BuG`zwiltIgJSs^=-Z`pW9+
z%?-><uKg_dNO0I{Lhnu#uxvCrXu1}U;fhbPqt?Z9T;W~k`jt+hgXV9*-%8D&y2QjE
zfp5<5`s#LjqC((q7?Rai_O+IG1uN|5S3k5rx>V_RAf2bzmd#Gnoz(SgeDLkrNIbBw
zFUOWSs2!cQ*r}_XT=;aO=`fVv*#&zB6L-{46(pIvc6hdN<`ok$;gg&db^s@;!x|8w
zJxcJ%3qmXoTTAdrrajL9V5yjDzu~-leSuUlK9QQ9J8b>vl5#snvfM7!Bk@vbY*o|J
zO{NpJrmC^G?rr6>Q1QesPJBmMK3U~pI+WXaW0Ct@ywHX!tf=;?fN;NuBbok4n4=Wy
zFzw6gvuDpX=ku%UNxsj#S8OUpE@f1VbN}pIGN3kIxW4EC`$*A%4IbaKbopU=oI_gd
z=kwj7vw39jhjxs^m{gArDm=8{qqsxv4zKjlG0z2WxbeU#xIKqeIyuXNdwm$<_KuHj
z?#Yd%CA%BpMU(^YzWU`v9ZuG9f`|KO_C;8P<-j6v`}J%T2ui%UwciQ-PGvY)Rvi)d
zJ>-qZRc#iU6Y9C)EkT&s1V5|mHMHvV8|>prA8W$4)1eK#>%j1OhfRREzfSNrvbPcE
z&f04YP|(goCSk5_<TvEq_OrR!Km2?m>;NR!=LKuPMb0Np?+RVs`}t^(7x`S28BlnX
zZC%n2&ugyL{AuX3+>h?ql9n&79rde?1Q0<6jl|wLoR@FfP;>+M{V2+fK5SmhkXt_#
zkt=LJ$NrkX{jSNpU)JOR_H>+*we2di>YA&#cEgoY+kwr`N2b{W^=Udb!z=jHV6B?B
zFw)bK-qei_oQvdl%Wms%w3x+|wc=X6JbBv|Owt?zX{K7*l$Xohc@mD4J0_1)h^%q$
zoN_0ODg#5p?G`Ll^lVd4k7)O`lKCkYyj#4I3t@AIJcBW}Nuk-p%<6f2^XrUjwy|G%
zE7H;i<|yZFX3o3`fb-3L=DcpquwQzOCnehNoj3(af0d{uiE<@HAtjm9lF@OXCt05Y
zuIIY0B75|M^os`3MTq<t@y<9>BjWa!#WZAT4{eg=vDDK?dEE2_fFh?tG#@@+JAt>w
z#3qYbI%Qry%T4c$^YfYOq^yW0?+<%{yB{T>bGR?8**JIWRaQO>wmGp9T)q=#oN4S=
z{=LL1CDhPAs_k7?xLQsp?x;pvHZaDkHG_b9s`7@K(VOu79~tfaS|3e{yy{c!^lo`_
zq2B5)e;mWYUctsf-r`yr=@afS&T;Bj!Xr09is!u<4WuWu(*0w*%-rhHv>f#6Fn8Og
zxoM6Ml86`=imCZXM~(Yh*X9FFH?avFh$LUt>lQLqZxvRolab^iY5p&otgmJAWIpyl
zJj|=;=|PwL7Wi+~JG9T)6_Tw5vNT~JGhqv@vqjDF6-f%4oqo&x_nJj+dG21XvfdKy
ze^m@w$oS#hkRU*92ny$al$DHT<$We%F*3|k;B{*A_BR<cK34bhw7QPp&2$(4IzDIb
zJ7J`_6|Z%l*IC4V%x2XX+Y~y}LASlz!>g+@5RVXa9}yp_JZZU2p@|=Kavc&~>$M_F
zUwtNO7FzXpg0S?&v)ZKVJF4nFS{-u^mgZHzOQ?O6tu5g!pN~sgy2N$xTQh@>_3O9F
z-u9)fpCNlW7cKSEcP9DMLvxuFR4>z8ox(P~1Bq?6TTborw(@?o+|-ef51H?}<jfG+
zAq7wVw%m`AFCQ+qoNpe_3x<RXkNB245U_vLdD@v2=Np~al(U;464N?m^?Eo{lR+c;
zH+8B+A|@ee14P|JfJfw9x4>(cD(6pSqpn0qrsUzaYVVNc6U-;|@;oYaHWX~}yY4;p
z*YYrEmG?%K?(p>3o>OvvX40AFsR!#!BTII4n|9v(aDX<&{P^5GT&zN_B6jt#$0X5%
zPuYvOJeKD!9CyyOO;}hqS0XLKQ_n~b^poYR1IJ9CPr}Y8A}43p*7%+KlfXmcUYv?^
zB;{GpsZAx)+@DbkrymGk?vBT%H5L(LHlG{zU0%VkKy~YD#26QnsZz+Fa99sKp1enX
zNl3e2LSp!}_~N_E+6zj(b2TTnV;*^RC|hr?QPq2!6Gtpp&Ev8gmOJsaT*@Zd8C^s=
zx0I#j%N8yf?I+bbl~V$X20sGxEh!}X5AO-8toY!N?(Q1-^r_;9C`+6hO=p|jyp|1I
z5hL$aLb<k^nI-@py4mgwzv(lF<n<rjM71nrb<KwHPv(O#Vp>u@OuQSv&g?uAS;s4O
z$={aSW*uZb$3{;~Zj|zp=d8WM3gtOpa7$d*EMDe7;Vl))4Xp0bZhX#mbjGu%EV62p
zx9(H)7#feV#Ms<kQ3K!KQsr>#*LJ9_TR(=E6jjIwjlpMlue=#q1Zfc8oGdF;S08+?
zJzBEg^~%TLvgvLOnwBb(|HVR>>MIGtztD0&=bhWvD%~(#4Q-sRlb5|AH43d8soVWV
z|AmojcHKOv|Lp2zPdq*C?^N$KrwDwdth%XXcc-hMli|$wOSRHUxHhAZm}M68)C2jm
z4VFFus-y@GK8=&wTZ^3&2C)~byu}<Z;#SQqIC<(CC6d<-r^6;^pAN%|*AmWW()ObY
zziV#~2etKH??+8rFkp+V^F)8tu$;ez34Hvu0e3~)xZ8)b9|f0R8@CbxG~*(_8jsDU
zC<f`?k+4_)R)S0IDSf@ld8O0%xhubuXr%Y;W40;mYMbipb9u=Sg!O($ufz(Y6CODR
z1pHZ9L~53m201SJd=&eSAN2szqw3vdbjaqhJ#2)$hWQq^F`>7T1^ET?%U<js+#>7f
zkiO5kzowUW?N3U5qO~^8eX!R$zn8a`^-ZPH12x9`+&LqZas{Tq%3Aj1Y<xY;;~O!H
zy9RJWd0^&CnHc6)ZI?M?O{~jiy7A+Ky&vbTV-s-oST!OUGZh>0ki7Bud_D1Qq!JL}
z5VWPnle(h^HEx#wOPrG!tCB>$c~PF<RXGOXVYY8+A+}HAOMHruTOXM8+oaE91)~uO
z9yrVRU03C#eKTUvp6$^e30=Qe#&Vhh)p7#83|;v@yiTJXi(+6qew86C4YMiVvs0`|
zr$WZ@w8Ko;xk7cPPj+J+xSmUi;Oe-BR8xKHEnvj62NBIwFW;steCthdCq^gBqo}IL
zyS|};)O~V3LtYjuQetLD{-u#xrUp||WZ_>^oZuY^k)U;$b)CIk6DBG+U-pZn3tZB?
z*wKZ5&6Kh3S0DGM3M<ekU4A!LeY3N@*-9@zmfDbpI?d>HF+!yBzIr@2&<>AfAYcRk
zxPTB%7twrfEAN}j+Pa!&%^o#yeYbHkd*BLUz`>3`H&vo9R!Hf22yuq7cIekm`o8$~
z_Am+e`8VAPVN>97urFf{IHS#}h~&An>cP+BO%+7Q<rG0K<%nymYOkBRrc3S$*@Z(U
zSHn(y{fr(bKj0i*ZwfuRG2(xBeJ5{Qmr&EyqXB8ta!pPG(NLGH4>#va2{eW6v(nCA
z?OR{`seJR|@I2LB8Kxim6VF!f5o0PnbXFGTCN1<X1@*1VE}ILYmUBMeaOup}r(d)|
z8s1bThh2HoML*U{Xg;OwEG{I=Cmfv}Fe&OzAp7Oz28VnoWVMjd9c;y`6=$YHW*ACu
zvfWpmYltH76@;NAEe@?VsXHANscL^ByI8UO44Oxewz2A5r)L^g8~+@9lRq?3gF9_l
zBx=7dHE-PBi1b1sf1aRxoU9Rhz9SD|QQ^<qUbpy9%G57jAV$f1lF3!3{PbM#GqX`!
z(A$j!GfS()>Y?22DqKW^DABs(YHU2O$)}E&xh5K`8_zJZoDsO_G}VvLks0uoLGgJ%
zF32#iC{a~n53px^SH6zPXEFJtr+wOn!$13=(&^%jRE`-R4rZ9pemKj1QQ#r!O@1K5
znXFT~!#Wo;cM%J?VFpkW*h-$@$oMl}d~om<`NHgMu<=Cye1#wSvUHglA(}75MIE>5
zt{ww*Ok5*|kboDovMy+#xw=429RAZgf1Eb_z<p#}-pSSw!yZb=-Dzy!DV4*f`}O$N
zN6}FE3}*QCt5nNp+&ivrnZad6>KgF&SKMWO?l12;&RA|Ss`Q!sd~OwLK7n363g>vW
zrY~o)OevU-@+r}U-gZ7kHMZjCO|(Tn_o95pMqrVWSNx+euiJ3C!|Z&FGEPA6)Xv-$
zwLy%N5?ochXjlpn?p)O4E!HeW(ujTnp`0nGP*tMfVwgs5ad6uE1Ia9Ce7jM;?g-_@
z_gn|$Lq}*{4C^4RA%XF#ZZIP~o7lT0-myNAA}Pl{rPZAz?kZda@XFXrAX}X<SI6Nm
z?~r^jH$aoxoVJv+et>p}Z*k{t+E~eR)4K)EJBcg$<U`~ka5%*ssMu7`^^6S#Qw|Zs
zm6ckw*`E9D&PO6}f#M2hH{9bA&USz#3lQ%B?QEmaI9h2lV_5eZsa4o4_zszU1PjCZ
zws@eDJ}|s{5XJ73f+;T1LF4mljv)b#QYN8oeCNXkhp&100%4Uc%h2ekpSn%+BkRgP
zX9IS5rGwluzUA_ELd2CjA8LX8z|d#Nr3n#&O52J`j(00fj3dE~z>P6^a>Ek)dkYn~
z4jqO9wH0{RbSnl9KNhAwK)t6+E!D(@T<z|Z{nfTx%GhuJ{YZb?X9x@;0T)a?vaM_0
zeG9s4CQUrhnvA1~c#Ji8a|3SoHR8Pk`vKC~*>E*IiI?JTRrR*=hb)HewJKzoZ==hW
z1%Rvsh{Zy%Hk&vPS3f0CB~y&&f}Tp})sL&D7M0zt7Wh7csHB7Z+okdnfQSR+RWHaq
z?i6U~ysD3*0-V6aH1vLS(&Fcm0;+I*v$&je_qCCkb_Z03iRBn4e=$+yJpxaTrwr)@
z`NdQJDawb{SRs-ckc4(%=RlmL>5H^R43l5l8z9=weD{?_YY_($W-ZJ^KTRTUQxXtX
zH83IO9JBMO6UcTLJ&U@<SN`?;Y{nOd^&NaA4T$hNIwT*_o5zO340yJP=m>Y$RrsNZ
zq_%F!>>A)zr0!l`FAAR&5dr}nAKa9?0BEybEzcc8AQ<61pISRG4CJ(~Po$El0rC<4
zJwi2Zk}QT7j<C3`8*7WzLPL72K!MrqssraIN$1kC-66`$Kj?6d>f5UMQ}7tzYNjt3
z0q%hF*rlj-lqA_anfk4;AF3rl<U&*RjzVK$|E!bwsL1b#*<M!J)+>-<Ed!A07(u?M
zt(T!G_u*2co&`?`9;-k3Q2B)A`<m-r-HEO39Mb0A76xxXNnUaAG6Q0ZG>lZ5sfF0-
zMi@2}>PVy(t*@-P^`?9ss?@!^0Dz)}12M{-*XvFRQU}Y8PC*j?yvn<72wS28cvuXY
z;f-B6$WHmXJkHb?HV8io*B#`I?i1TDEGW#v6i6<vn&5veBqP86qm0O39uUlYUs+Ju
zuDt4mvG7j_AKJ_4n8oykn-9w4SHE3`=jMtuyO3|ubK)rS#zgAJ(_eQu2qt0IXzj6S
zd*bF8ejV3+hnn6z8Ib?DXH`TC-hZ9JL{)?<1~pz#MoP*<ynV>xU{Mcc{z+}DmWDN$
z9aQaK9@!j-iS<0%v1b=TuU%YNr++bIeQvH+m-VCwq3$x>n7y$`gBSxG(o#pVUAjTA
zMc5?{J;Zap_E=CdysrGC$^$|krGiwn^4QkSNeGYs^z{UPPmwy$8+_|Awvny`%TXJA
z-ZGg%$@xVx$vrwBhB|H->&~j}$&c)hql-nUvei=N9&NMgHG=eFKg|Uybbzo!HQ~Xc
zDFQH15)@#zn7;uUq3(}d<+_+zfL9rF<lF_Q92Q$y6a40_Fhj6>3{{KY54}$z`C>w=
zeRRKUYg=FJx;*E*&~N<KSd#$y$yVa9wKH|QuO#;d&=X%WPJx?TKA=${rsw4~?5IA$
zJnUJe<`lDycYiyngHDj2EvwI3a@ivtU9b=Y*DeK<Cwo8b<JPz>A>33dTv@;wU<10z
zg*41D{DWGiB3c?W|NQ!GdZc||CK6_OPMVw<j(!Jogc<aXet-Pj+(c6+U$X=GzAEw<
zT0=@L7vgl*BafROgUvE^D~;_gdy|(hy8MY1EGt1fe>?2L?erzI=k>h!-m89`4?q(0
zmriP<F;!Kw4-=)p3V2uZj9B<`)CMSlJfVHLt4q3sa@cdAa<aK>o6o%i6y7c%iv>}>
z8DMLPgPTKE?z4s)Fu5S35s(;upAFn>RVo?3J&NBRl?xtJHIZV#>jVueLM$S&A@h>b
zlP{;$4#|)mpOzeLb&ZqK269)Dsh$#uznQs39kN;j-KVE>*yt<G@-)pe!_Oo3Y#I!-
z*9kB-by8I;{qAl==hUN!fV9yKEglJGqE7<PK>%%F$&zlExjN2?Qa2cmL7Zvudrh;Y
z6u&wLYW}!F$Tu)PGCTVr(ewtk93JQuc@z@Ikje|?SJw>#GBL<$hS%QivMSnMqxR#F
zXMnIFAkU&bGwqW!_;ZvXG$Ax#H~5nJ!%#I4&4^;h<R82$a|TeLi)``^B?GhMx!kL3
zPr~G7yhjyQPqLb62yVFACG~$rV(qeoL7b3mqvyN=x1P6+Dp8+;^C%3wD(h!d2XSzS
zAG@nZK6j?a`;i#@`TPbnO6(O>Fsx4N^C_V;`~haDAi$3q-E}hBGi6w)dQ%>XNjMY*
zDeimBn5!)3TprrGFN}2uYzEdFU^AefJQrh%>6hy^bXtP8xB?@S2E(x97gNSOy8`>o
zlt;&;To!n|ZO$*hLCKUL#h?%iagX%2!#CH{SMtTN0tGv&Ras<@=C(*xPr1e;yYx?&
zN@DcafK;dpD3|}6eo+7TZrNF>k6BDD1W^dR!Ld!%b-Urs#Z7GW&m!r5>YjULt``JE
zPW3R1aS*$f*X8WdHlD-D?Gg>q%}hhIO<$7_I=du>e;}l=ZANk{TW*u*%wKX%v$y0C
zU&F}KXG$J!(>IJj<q=I>T%5*XZ1Sb1l?UvNqtoG}Gd2c^BaPnnZhP|ig6L5;)6u?2
za+jYx(#-i*nneK^ux!jg;KQpSZNMT4ARr;HPN4y6$e~gEBn1!%9rUq0eqm-I!BvQ|
zB<>5Id|hK;`w5_Db*w5j8(vEEu~FlxkQQW4Nu8_#^J@z|EA!4K+yzWme%IF+7h0)C
zx9>@{to^zqa|nq4gp98poN)O7W*ZCqRUITJ>6e#QCE%$*l<%XDQ?x>oaQEVa7~poi
z(A(bsanY7Rhb<qU=sW7og>p%6OROS)Tcdl3sban2#d%STFY^|<NW|W5Ld$4KnTE9$
zXFnfOb2;~&p-xZgkT~vndJ8pBBe+y?FlyR9N}l3Xk1-J<xzCVe=|Do5+-)xxanIW#
zhP}H-*)%CX3=+Tch8kxPqR~Rzi1Ip8FhG>Ny}rBVU-VTR)VQC3^Qw-7$#5p)oicny
zkTJ4Ee9ee%$m`h&K4<5(eghaH1{F&wo*4V>9q_Inh4sF)PWsgs3^&o`ihknhZUyia
z$J*!{N{Wt~i3F6LFuWz@SyRd>|DmoI`q=KGmy)h}bmdRTB60@o{tNJYvME+DL|z_O
zdZKtZQ5I#(H0{1t;s6!P_e@?>;Kcg!u~|DwD2L4<F3*9Xa=jF&Cu(4JUw>&RW><u;
zfjHgd@*k7OK1c!^c=gsl%HZ;Kq#O7L1eUD5X{ClFI`bR_zRM0c>V$_$5HXIiKFy|H
zn;`zr;)lg&C5l`MaJ-$qHULrVB;j8~R=qxd0l7aiV^l9Th1Hon&_aL+^EU9-J(4o%
z^9QxkDpXnqX0hj5T$qNQXVWYJnrM*;sxv;7!Q+~Rj~lYM@W@;0e0(SD65x#&sM1q+
zNk&u>)Q^8-`0z9_#HQj4yeLiN5Xk-*8Q%#>b4Opfd<WWiuQuJa-osCLq0|_6pWEYn
z_T+YxH>yc!xw0T}7>8cZW!W0u<<E`(y3TmV#*+UAs!y<Z{kvrNq}`jan=t|8wungt
z^AHm_3Z#+;0#XRnmS{5vHz6TVyjR4Kym<`V&lG_C)At?tqA4v3v&SM1S(c(f{x}nW
z%7vQm0aFvq=%Xmz&@{dgvVk1{AZ-lru!o#N_00^-9$Q-2THI2bmo5zPaRT)BB6{NX
zab=IRBJ~IGD=ji+^jOQn4fi6~MQ<yQHDpJg_@U{kkcvke`t3C{un)!)AwUch?wgx*
z-h-fc^0JLaPeqsc!Tw)J>A^@^aLD#;rs0T;Y<hn>VwcA1n+~$e-D0d2P~m@e<jh`d
zk#{i&6PsC|7bwks159fR1SB+<NTE+n`w`b0y8hc<Wv>cbXMS9h;^wmnI<W9?yhSh0
zXRHL6{2EZoQN6HLyL)YoLYQL%mS!6JNR+vqqO>|F{ISLGrcvyz<28&IbONaUd!e~U
z^nJPRKOcQ5kx6exS5%FY{`;^0`4;$?3MRc->HWV({r4xYh|sn<;Eomp7C?EejUhY<
zCF41w+zxrk&08jk0r}3=Vj~>GFRm7U=Y<@isZd;zJkApq?}3^Xc+cVy`bDFL;mExH
zOBk9QA`1NVNnPm}zyxY!18j(a;83B7WTA3cg`J&W-<QCDMZ8n`p=q73Rh=x`KewIn
zL^<Bp-bHKD{+mP(d1{ZhWL}W`|6S#O>Ahb&hz@Uz1%4bVBW@*42qe>&hdP}roWOmb
z>F?nQFb3S%vRXbUX`sfFS6!XvE=i8BWCHez*M$5p_ck^4Zp^4(Nsrr}dcrh(KOtvh
zc{uqAT=4Rexos;dqN;cf3GZq!|C^aQ4osKgfw)?_^4Vf{I|n^0t(5tH_W?}?YEFRY
zrZ>#rvaE~pSrmZAr`JKB|97YEp9Bpj(Ku?kojUuC39<a{4us+P2kZ0!o|PI83`D|U
zzu={Q<nsR+ra)p=#4I_!PcdQfG9Q5&2$BHl!P7frds1YNH_1W6f}uPpdsg7z2yqBO
zuapeVVdF@f$q-_85`RgT9BHIIopv_YSk`f07;EoikkvF|8iZCB=CJJ@uPW>VivAu|
zhqVw{dqRnU>bcn2WXK%7z++i6M&7i{kszJGYa>s!mlA!YbM(dw$Jq08^oGjm;Ua@-
z$$5o^W`%$|y63bc@$eK<N+^0>ukm}R=>|_OI*P@4ewT1+VI7=9nH3Sg+<ND{A-yRv
zW;#a5jb{r)ZEUoVyaxkL1Qg=`dackx55l^;^pA+gQln;B@GYK=-GD6#%{5LPzoVVM
zb|8AcQ`g_smEWVkd%{@-TRhL+d!rtB#j~paYJd4<;>p~Toq2MdqOKp!MJ22!Qk$4B
zs}Y5^pL4jYJ?ZR|hO9?l3>6bv0{GZeqox589X988!qfTtQIcxh20K3afJ$&l36}ag
zvT6+Evb1=2-&7BuT(3@bn8(=_?g_gc`ndx)s-H^<H6lcD5mR$=qL4)`NAUC0FrY9_
zMzQSxG5}UsY_~ytL*nl9E1<2#V?n*OR^6&=pb01LifHEeSQo_PZLCGPsi}fxdsz<o
zkY_z8k_XW{QJmpSQEUkVMR@o9&{S@*0YxZ2iYtGH?b6ImNkIH8VNkiWnqVANpl~Bt
zDrl?%T=CKN#OP|eY67cl<_!18+-|?zPllnKI+rJfi1>8R^(R7VNx4Oy6Xv&aDgzs9
z%Y^rHKMMKV818#GY1pi$*LhE;Sd!U`$~pS<m8TrbHP5Oq`93~ziaZn6tP41ol1x|7
zeb+05NlOn$>+;&;<%8qm8UTtf!2P?1_x&c%qrbImWm3&=C}u-`YV=#}dsS}f)4kD(
z;y-NIH=e(y|FkSb43b@tYlL`QDEPLDP#JLM|HO2xa7=&awB_XamSlc@{*HwpqjKSS
z^MIJFr~l=u*1Yuyp}`e@GOF{4BpJJXLLpI{BZqKJC=%2R0yt~;)3&`B8lMP>!5A-`
zT%yr-O#)DeuWH#WaDqoP>5{^%S=cBa`l{#T+Q^^?acjl;95}gy;ND%}FJMDUPJB?C
zf+XR@UQVc$VOL@h_4*URudJYTpL&~_<Z9n{^*=f7vyn9441_sUIsaMvQ>mrG1fc`=
z)OXGsDX3o=o4MpNM55sYk~vC|j`gUUjLPpbuc`hOe@{@*=JnI4SHFDURGY5cqUM*t
z<|Gm?3$1pJqDbgyUeST*aO+;miD+FTo6VF-oStcvFB3cnOKM9A=9BmHK`d~4@08%+
zP{{91QrV`Lm?N(T?NemCIrX-Qrl+#%5U4cgg3Q&Y_oLjp=xLPZbUo^>;4SMKnq3h6
zp6n2dC&*omHM0Lyuo5(IBd67FT*G5PDedvd>rR-~sl!Z-XW0T-Gh&tSB(K<M5wGv`
z<Wy+Pgip$>jg~V^w(jO#?Nn8zR>=4I+voRSq(%T)U6LReCI8|D&24{^y4-))aN);U
z;GU-zwN>MWzP?r$$r}B!{MMepa{p>(a!$&@Hww9nwOO|*-I`))6|d+&syGA^mP>-&
zk)(0H!MW?E?UB+KKkSlXRk-<jPI$(P^OcU%ZPLoL*GOsaL4<09JW79uspx|x1G-%b
zRe|m&U!UYux|^KxHKP20E>iAd8_iF?XFa1u&7s=f=RT<eKRam*(jW+c6~v_GkzW&l
zuHmYu?@b}BM_Q`s7jQeoqqPh3S8bLrn7HjvtyRDGa(h)L)_>7{@9G1>fhG#2U{h(E
zn&ll1BoyIaa88N-0@;l+{3d*D9kT(<@uT;ZqL1&n)HhtXk}v2d4g2NpN$F<Sx&H9?
zZ2jRcEvvtV7<gsKAkY|lz43!e`U=Mbp~IgRh#J;2F}#@FiDm$UgSEZ2du+Y_hsciv
zFQYu(Vm7btHtFon%-aO?p;$>p$;*6lBy*0<O8H(e-SD~a?j_}YR14_(A^c6%bE*DS
z%Dm6IAKVwb%1%#Ax~*DbqIuPwZdJ7d<}xENE6$~=t{k#EtN|Ca1VdK%9F%wzrMn!Q
z|E`M+6X4Fo&dc4k7jPvl{{ktmUZL&vI&C?yK?;h+?Z(uadMEbmZI%~~=R2q`8v6wa
zo=I{$6^L`C*sBbDV`Lxhw=+}lV>vR7ed*b`cES@a)Q?VPLT3HJ_i31WKGHm;=DPcn
zJ)hj<o8p!hx>t3bK|_O4TRyiyPoahSs*18g1UKbg83F5g{hoS6-vW$&r5RbR?bDT#
znY89IxnuF^(TvbkBnw=rWdS5gaWix3imX%XNU|-G*J?GM;GALYY2j1P4yPswk_&z*
zf2YrA;-Sp@e#dI=htV?b_3Fooh0_R&n1!vXX-t`_il0R)*uQ??Z!&c^a?HE~y?4wL
z=!Q*yYb@2fH(RXS4BQ0B(Z0cJ^ie(<k)@U7NzQG?-R)FoJsdTr%`7xszQO2K*G7BE
zJQZrk!sa&Z8xPh#l@>aDQu#f1+E7dQn4h{FMN8?<4sylUs|0TzEgmXbVQzkpo5aeZ
zg?w|R534yozi`sQh`GJ+Xww-@#ku3(HuGtAp8dUMi_ZrStOXWQrdBHvGHjaS>^W9o
za#1NKs_{(Qhr+w1ba(KJFf;xQ5E%Q{LD;Oc`NbMpnc+iVleuV2v4%b2=?{60@-c<h
z5-zcO!tpMz@t=N}rRN{+8Y)5#duW`5;^BuM-M+j1S=BOLzZWxZT39$Z!;+s}RCgyG
zyO8$0%1i476p3m&=2EsAq@7oqqj>wy!ix9T)JSmAz!DWbf5s=DIxpiA10;;@I4`pM
zCJ7<*>bqiuF5QGIev?UQZs$+h+g4kx$*NUOM~sT3%`I-Rbl0rSa~4_c)(3WHuLY!q
zGat~4hZoLqjW0<`E!r^Zqwf2QtKz&To!shNJU2AA5Oqy=YN8{DYRumBRkQq`YK&+a
z9%*49vIOhkGe3Rs=UiWer`D0K4<Zx8A78Aa<me7sN&W^?J-4*(J?;ZE!N?l#{JwX?
z-kTgzmr6IgFCgG}v?FpG-+_Tqg%(l0R&KKJK;GPKJ$m757wcv*qmfW^(=3finQ)tf
zZMB^;LA%{!4?Q`iKiii91)|FjxtseGUOOfiHLgvh>`keQIsDqFCyy>T!KPkbI=t8*
z>P&bGP$u>=Ou-g8*g*RG9@&s?^qY!->!)nWbKC-zV#cZV<O;PE-AVJY3poV7W1!UG
zB7qXCc<<UX&)wsE*rE~ydFq%gbyhIG7<s!l*maFwlBOK~DyuPXO;_^U9;Wngni2Pp
zpU%bRw<ecPu7;EQ1JD1>^cKBBjjVL3_+bE@`Q_xeNxl4fN_a4umc0JSe)?7aaqo3T
zI&JJj7Z@ZE)R^aSP$%ij0(a2i@0#!#ZO)q;oLxINn5p}73z>F*(D^NZ_k~QFm`z>>
zDR!s*Sg`qvUVdWHMwdS*T_Ev1g_q2uR5|3<R0=&;k(5_{CbP%;DPH<EsM4X<+Nam<
zCZ7#@!>rfon(F<AWxmE8w@R?EbN(S>Or=Gvm9H9i)IYc6zE~7MRrG1O^eW5FC*eFx
zdEW6%lEyUPOxS#3ZE|ebFMY@AS}Sw~2*;!M+z_;42RnKfUSK7N{)Rp8`vb69ltoX4
z>xl9W%XOJ>aZf;-#Ayffk9FwEU5JSC%vx;WU4_mEj2d4tfgInI6#5Kb3B3(T;Oa?(
zMw6u5PkozO9_>LzID;sa3s)ZrLa)DCCnBSt?ZF$0Wt87HA*Sz|T+UU##%`b9*K9g7
zUOpMZ4^rVmebX~YX)*gE%H1)at@$Cb_WDgKkW$5I*tim&&aGRmdcvKib&Ier^+I#b
zzx12+xfJ@Ds`s=DV8hkQZ{AgecsM#XCOpd+E%y}S=RHS%2Te|Xcj{Q38~7q6fu4>O
zg%S51W6W2;8u3FnSQQT}Sq8q%S*sKx;eh0fE$UIv>jDfGyC3WIeQLUqNJ7g9R_lsA
zWf2%Su7_!EY^=S<0N!nEZAK71d6|s<QZ3F_ukfm}LvpL7POV}rE<AetTq&iD0bORC
zujm*$VHdN&a!|q)6*d)*{UBZ!QmJxtqj^<VKu1t*ArS>OU3(^Mj{aohx&CPSwq;lX
zS`D1Jxk3JFtBh0YuhH~}9MMApcc_LMSU)-5R)XPARWSX`V-YRy(%wJrW^Q)Y_LkvA
zsJw0%NJdp?iM`k7OoFsT)1&w$w|;cH7pY`P7I{W=7_PL`x;j;j3;xKu2jowLID{U5
zrhgWP6nv)bt+gXNK@6Q=9rU`#FjjWU?9NAtCC2P{Q(YFVQU59bPfN@=gA`vu+rpZ8
zCI?Bjq6=P}JkK9bj}r7DN&tE&DTL1QTZ=*gUGG2F=&-isEY|l#wS?_>%C~j|rvAwX
zu<z5`gBz!<$xFLWxuK4sFN}xZtV3+y4Ug%w*#kk`NLQB_rAM`6+Rx91eOTA|&&4rI
z-Z<T_I0IvJKw42du>PgC_j8EZ{yct~lTj%U+#eElr+7VCePmuBp=BrM`m|(1jF>O2
z?(Y33pUCMPWJWW_gAvC|7DdF@m!cu}iJ=D_X?XALK*M~$Y@8O7I^c&V7B|`c=|5)D
z<)r9BeU`e9+?f*#6)f50(>v-HRa^j!3G!z=%tyzdOsyG3bp!EEv+<kvnYpIV(wB0o
z$hKl!5?(hY7u-J@FoAmPASaKRVI_U>k)Wn)qq{FXW`!g3^kD_dUiR!&f&l>VSfQEc
zvtMBHf(9&OU$~&(h_y&A{Xz4XZzpwS4(03a1{yHpj)}B{QAJSR^S7pA`ws>HHNsn*
zSiwPZ1!!TfmG1jU&UCx8xe=6VHYvRlBbj>R2%mpVsQUB@$GLmLj4SZ|nhC(eYDop7
zJ)~DQ<y!pADNfalC%Ps<0=nv4w9|96gSR3B$2*pW>l*|>I>GZ-x9lfvy`B0ZRL0nk
ztq<aNAN>+DXzpDJGjf5r{^b-H7R6g~0_bN>s-mzhzJrlnn$|tZCzYsMK)Yw;dbY_Q
zUBP)cq>4@1NN!OpS46($H)piNu&=M2d_L}|tP~|D`!jxvjIb{ds3~IV|9$^ZQb?*)
z<tH14eaL%#`1NXpY7vqjl2LCz4MTWDH5i>yIRZ!)T%JTe!t#p_q^A7_;LJbD*YP&#
zBkw>;=6-!FsFS!CAFiaQ0eGk6YTn6$;UKLA^Ieh~rkUZ;1Or3rZ><j4<q)kvjJsUP
z-EKa@<anOG%%!b+wt>T19*tiOa$KnUq*C-71FrF)>amX${-}u<<%)d&uL`E}Tc6j-
z_f5%=9L!y9lnP$6`fKT=DnWv6Zo^BbXDuI_U)9C^)c8K}ioo3+#Pug2_<C|CUx<YM
z3avvO`#~zGJ;ASj$Xdi`?=|-7R>s=FpBzLbZno+E=>w|z05ES@@p8WK)TvgdB^6ub
zkE&trdg#`N$`F!DAXeRwOL!(fHY;FXA}M!9^?yA8JBbI15s(+{Q4i+OcOUtWrK~F~
zA6n}YKj@^XH;{Ra*@Xc((Li$O5VOG!lR6BN0ZC@UgDvqp(znF;)YWGc;QdAHUr+I$
zb9qn66?p16tQh>){{4eB@S~x||L6t88C?|ThEK9M@Pcd0f%|E^0DE@y{T~1S$J6Ra
z9^?~Rkp!7!sw-w=x_{-N<tg4+Yjdc3R03H&`5X&fdndx&oUfEn+<!<wxUU@Rs0VhY
zJ8hcfN=DNV1!xQm^h~1sFTDXWsf|eN&bj52FA<G1gQR3%d;U4(;l|lsTo{P8v^{Ke
zKY=AErOuA+PG^p{IbFKy{Iln_=moBeyc+O!+KJc3p>_D_**CxH`sn}ahJOoy=phT=
zJke-YO*+X9923FSpD%RL>+!=yt-`}GUGb;Fq5c3Al>S5SgI4)B(pLw_0gm>5Hxl~)
z`xY3pNZqoSf`mr$Ph9_xX@Rd(Nua5eC-Q9F1*kxgLJ*{=2vGqKjSh!|q7bC5Jnau#
zWTg2|3J|!tC#n=@E=#RqoUFv(7m9$u=OZO9sxquJZb+FSNXKD!fzi(OFA`v2H@e3W
zCk+=s?rSM(UW&N)XfM6rhgIAB31ow-l1X=%YW^e2n<$6b8>?Pe0M%w*fZT^v1avU#
zQLQ`J)%PE&51SGEeC~MH$pH00jUS{?c(<#ZVS(QLFVaheq(E%Kq{JQ>vp>{-w9&-N
zkP=yoXqiNTN(VE*fi9KV2mn%kkm$DhWE$wOh|mZ1iN9U{p0q>O786E<KN8b4*FngR
zG<Z=3-z-Y-?^z`X<WN%tvpl&8RtDv|2Eq~!kJ`A|ojl&N>;oOH3N5w1txMW$Jl|VI
zHk3Y)V}QPSUvMS5?ocpj&G=Ics?+`nC&uV7Ap=YYHSs3rgoSi$bX5MoS$Y>!9w>xT
z6Y;IN>J1R8)_fL0{L1>;0B=@?q6q~x_Jd~t;t?6-cbtYJsb9VoGhoy45<tT^rA;*z
zsovyRaz-()^gund$JAj(opeuRUtmtTxjn^DfHZ^X3`4T)vF^<IYJfTtr5I<PYGQpM
z1;dlfDCyG2fLa+sGs*xRx6IaBv|L__Di(!bO#I-dqhl!1Km)?6Q{*RpKBZW9pYPrn
zV}~bpT|d)B0SbyXVA&+A%MEg=b^KtE<V0cXjK~E}p0m|wDQ;FN^~OKVF3RjN(Z)c2
zz>y}LgT^dxiTz4-C|X82yzdh!AI?beG!*lJt9U^wQC@t`*CFz_Ult&OITSAFz&qXO
zcl@#@1Ot=>0zgj<AM~R#ldQH=f?t%w$;;jksSpNCQha<{#}f&ni=7=cwFR)FV}N~#
zhBH8~8S+z=8WsnGAwsripL_zQ-e!cY${LEE<mrnt;H7~$wyiU=yNV9CDcJ463tGG4
z7ca$;(+r-DYdrO23EW&WEM>%d3F-_@4+^TNd=?rM{JOK|NK{#v*dHWD1e7<vZq~TU
z@dW;U`RyTQUnGZCydFP(Ho)t4NgW$*e$46o5wtB$?xkRC0^rR*-#3_|4(9vV6Lw>i
zcv|_=am<<KHy(a7)PLu>VPhj+cS4Nsg!DXpBlQaKN}jJD#B)Tv??VInv_nFKNHe9J
zWG@~C`A!K52_s$|ND&1IV?8ApiAkhPZ5i_AahOk{Q^Z4Pej%Z^`+8w@CH=!|x(i;Q
zF_@>Zm5p1tZoe-8q|d^B7j3jk5lc9MQqXV*wl{gUd}u#U4|6dFa`9j_>eo)nF9fYI
zFy2K){ElZx6@l7ivrK^DUsVquUPAF5MDAocbBht{VK+)>2o~VbXMn8&1uz8U0+6Rj
zsnX$>P~e$|!nx_aJ$VX%5xnr`EVvP@O#y~|$lw?IoUmAzsapQ^VY>quQc+e+4sC1$
z7%iC7e-T`CnAo}t0xoe0TK9EOLkdt$vjH8Ep%}>nwN9JK@35bcRG_y<d|n<X`l&;2
zR@R^LXv&>f#yam-Yb`3@>s2u#20@CqJyaH~!a~AE@9(4vH<<O$ky3QL9!h_U*KbL6
zPTBM9TelkI1BTa3R2dgZ5Szj-K7Wr#iGZj$z63J<KP$yA`5~X2aqxC{gzw)6WM_a*
zPhxMg`%n@pwKkiZKBwhj%=o%HXxY^O=pi=b)myQ7$p?}mFe4u&wOnWD6tnHTLG%HN
zf`JWTz%mX%^s^V(i6=iqmOXw{ErpURa~MX>TlQT6E(an(kg7<hd_A*X_Q|O@4Gf!x
zhXdoJSXQzj!I7D5bo7Ni(CBe**^cjM4rpZwhw^=CgfR#PWF)mlah}Y<NgCCnV1Q`d
zJfl9KIu`yVj@XDvnC$-eUE?+C+Y~+uzN2@I>annNpol_!c=R|`DTKztTmB1n6V=G;
z7Z;P$Mz8H{Na#XP?74i6aI6V^W7*|J5xvkzm!H~>IBkdceF429HY>~pVt$d<c_;PM
zybHUR;{_vj)|%XaqKgG7ay*K2eRL4j^wL;|1{mXlh}5hR&^>Oz!H5?P^7sZN+VKrc
zL7w-ne!Pc`Evi0n-~MrSX0RrYo9?Je@N}%5F;XJ;i0o;Y(1BLlgZs!w!gqNk`z%XR
zV4=Gb=%w|YrB4xbp#i$rqx0m7Yb7%4y+b|{WV4U8t{D?CEV@9YNKBvdd_I?I7CQmA
z(uc<(C*CwJGLgstX29PclKn`dF0D96Xq)!p4}FS4N{>8dU0I;)A=~RWH(y!D&tM^{
z1QBbds7Z{NzyNSO<mxTbyZSfRcaMzT7}?z$tXg^2h7HLC&tM8kJI4bgpgZQ?)-E!H
zhZ}C5^Uv5(u_{9*L6|;R8ARK4Ukjc9-%&x0^U~$SqIeFJn+QBb82n`q|DX20GAzoq
zZ5I$!Kt)<4MM}CG22i>|x~01%hoKZf8l+27T4{!s&H)sL?(S}e?_n)n>wDk5*0F!?
zKbv203_Q<u-&}ECtw`7TMe9Mixka*xdHy%N@oSAsu|*s-I;6v~jQn6Q4k3b<@O@3B
zXWb%oHUO8+3|yH2sVU;Cs@lSTdo%LE0kBJtk%@>aJ|Dc~=t$9V!p83fG%%47qoLA|
zYyGoR*1LuyfJte&FXc8HHd!gzWA1n^M`rUPd*@)dU_Q`(`8mJ7&K6s(2xlkFqbfK-
z?@J(G8+jV=-P_QH%;Cz?F~M7V?_mwU4X@z060{{@kM%6Y=iGeas<7t*KJQBgtor$H
z)9dpLK)GML!A$T=on3#njoGf`-b<6S#;2Ojh0RNtz8)!8ts5->knz>=Gvg{7um(4M
z);f)W%^hgz3dh{j8I~CGFLqJriHWprE=qn~0b?fmxkqIzIaYit!xT1XnLq0$&Z0y@
zJq;pHr*^VPHBSwRpkYEr*55;d;zcIb*lx2Emh`slqjQ5*bDKUHFQ|ax0w9Q)0DbCU
z_=9QVo*(_;`P;@*$$FQ?k+qGr`(5WAI2fpv%^r}u2P>$q*jl`RgLH=WQ)$wDo-`vz
zUMKF5{0wuc+?_Qy5)*;`W}e7$gRqCH(7gIW!2sVoCSS9+6F88FA*u-q1^QKcrxgr7
zWGMFP_1^VGCKGi$-JF2mVrd<E46Lpz$td<25g!_lRy^QL;oVn6PDEO3&b80TGEKjm
zQCo%*HI%aTGT{5WJ-iR<<dmhJ52aM5CBvzSn$!QN7-;b2WY=QV;o@Z*Yc%dL-(4(i
z81kvk@Fa_F0bvWyPo77r`{tv4OE_&+W|eqvqvpSX*79A6;x!u89*+VV0%xIuOR6WL
z#h*M>j4A-4{e*d4f38gOCai+ZI7+~l#?ITBsSJZ)vvHt^0^m~ZjJmpq_jn+<+wv1F
z!DTcG9cr+8f4aLjx{Hpo?&#SOXeAJ=53;QrEWWEVD4}}u;>{BP%)Wyum!A0Eo*7K)
zME(gjbuccFpxT9KBa9(=r@BiVaMow>st`G(6l}tYaFaymPa3aeNic9=Bu2Y>Mxh6$
z-iu#*d?wo!-tpZa+^^n%^|sCshn?M_HJO}(8bb932PZOi`aNuiMO1@$H)j4s+YtN$
z_&Y4Si`=9o<HEboZC#M<yf>eBU7`VLQA1kRH#AkN-sHQbh(wQNT$cR1euOAQR%OzE
z1nCYIkxIb#_>2|4Z>KX#sGbjHG{wJnajrEP$&^HaL}QrI&c)?nM#kco?aLvs07ZKD
z#baY7&_IU;R=BK&Uy}ho#WPu3lT4uA!9+g6;?b4#ad`-i!^AaO<P9<4nu@riKbe%d
zbUl{u>2D3QhlKu&%KDBOP?_U<?++}*0BW3tn%5?AY(}m6>fI|UJiBEJ4P+vMxfMku
z{IeJUV1{l<#{}p<&klfuL!Z-h&R3aZL~1Ot&c!c=>jIHo7wW+obWU;NpEW+<kr3%%
z_Ubd)r}K}of2tL05n;HqL~?UK`siceTOkI32lyg3-hDm4z@O_0K06?6%e6~U#%Bz~
zJoyBW#Kn#vyBtlY+ZL?qynA;?tY(B=zrd1V1<cL8>c})P*95{q&B1pG5gOEsj#XbP
zQW7g^jTTUgA~{jOWE$y5+)_ELO6!&bfCU2ZB5!tign1qv?vPoMVY&?2V@9$kwS<W}
z9k8ZiQmwQZ4v}}fx$>x2+_+LH_r&{((RFj$n^sE@4>}L^(9P7DH3&<2p;|n7D<y*%
zc#OP6)!_QO<Kovh>E2c7?wXY-MFk^dtw8uwWEJIb=e1uG7yTM1Hx)xcZzE`kEvjZM
z?>Xyw?5q0gOPQbX;}RBO>P!K0)6YDLH7x+cBuW9!M!wakK!%0eo(SxOaiAzA7VC+1
z8=lm~d__dbwmORagpC$EIlbtW&L<$eKBA2FQa5}v;I{l3=rRl>xwA4A{jt6lNS+eK
z>-%LM#(%k4d=#+sUM@^i2?JGu!g_&fsu38yP`{acTWOz!TU}ZBEw}RF9j?jS{AFN?
zh+bCfS(@d$=0A(-p`TQ!;XqlvlQ<Ox>rUG%?}Jwlg)i+%<wzUo=#ikWIkurR8Q(r}
z@MskQCH9}G3_pBq?uMH$ROqme5I(WZi12Gtf<`lLI$%nP09{j*ZyU4&z_OczITxJU
z`d(}gzSVYh)ja{K-msH1>{4!dQwsf6`zyoY_Cz`;C$4g5M`zV*Uq8@CR3JcM=$Fv;
zYUIrc<cZgTSp8wZZu8G^BjL470T%H$fl1gkg|>5YHMh>+5lZF5W(BU?)p!BFB+t2^
z>H;K4NXTCLm5||l1oBJoLAX%{$_D=#?Wg$W=ET{77JqB@z3%khp{jDU;R}0{x3jH+
z>IoPq-1(>5+{gMelLC*4ssV2h0dP<{yN9H|RqSAakDBfFWvHpJsf`NNN+EM2tzNv}
zD+TR2SZ{NEs}wL%_DAVJ3lN>(+h@56+le3^njZO(b%`+XX`@yU3Bf?gHAx8#{7Lj7
z^v%c5tezfU3q<J#N3_DiM+2-@W^AS81RhCm7)cMIM<rxH&lKwE?tFUzy-Bdo=LT|5
zx9H5Bp(CXRsdU;0S4A?S<>*phnOw!%7e<aUD)hjmAXn`6GP~|e1$-UGFucL$ih}u!
zgf%JX9I*(%lpLD~U!$_h);$Z1|GuK?hl&wx>^XlnDOdlLK#r`I2+V}yhUewRbvR=E
zjQ#sDn`=K<R2=SQQT-}kLe3*`!Zlo0jULDL=uPCfCRdenRZ{ST9=+-*vpq_>H2q#`
z+!DW}DwfjxGVhc10!f+7<lR_O3H*1b2aWW{aTj$m{q!|I#}=##50C3t2K4Sa_b+qB
zX8R~b`KIgACRS=7ur#CVN2$*=+{I8<7^T}Q%A>K9zr4MzBlBja@bfPSC_U<}&T<9u
zhn!{s*zQ%Q$(swy!prSNJMr-uP-fmFbI9&jXNehcdSA9qqvB0*RSn#p)0_6=M^>@}
zW66(+K|R~TC&U8Uk20W3T9<0qX%Q(dr5N6x!f_VP)7qS`eFj;`dqXT<(jU-FnQ9%a
z+3TI_SlEtjInCCz?RSwKy2ekY+J50b;^d!{O|fM!l^sZksF*6hZQk~SPbG#x;SU#*
z;2MlCWvBTQpc{kZ>L|vO*hfcSuvj`(P7*fzTbj1k(dl@F@ShV>6?UN4D{6ZK;?s!N
zmC8?A&17)LxX_A^QraKI{93&d;{yBZqS}bbT9e4WOyy^Yb@ZoAUzy`+sg<cHSVOqw
zm4)HNtIo=uc+&-Jbi*2%@(^EtZw;NxQhSZ+4XhEtyF0@#It5&UT&l|_Xcj3;rWbtj
z4hiT9Su%0%{baK46oz|r6z;~DAIpE=@T3i5GT6BrPU5O*S)Gve2JO&%vUqQ9J<s6F
z%zL}WI-uR!*WHE?qI)Q*rdz7gE~1;mGO9jjLW+jSPSd~Qac;+Xx>*+{1eE>_J?F`n
z@1I+;?U7S%!JxIDi}R*Zv{YWR40-JrQG|@*ilcNyb4H8&$?rh0U?!mf9U<NPQ!h<L
z*ggP)qtqwo$~2O_Q$BO|hN>oZE%%*W1eC{%_-c{M%_r=ZV<t>$YgdeEI_HuIJHMz)
zZix2*K=@28qcH0Z(CS?$Bq`S8QVsl<ikQG!XgA?tWv8;2Vh68F{UJirwqKak(#NK<
zL+h#a(QZOh@$al8g7(Q=C13%N?S8L6Iu7^w&)_Q6WUi71u3Cpnp)vK3fZgw4-zo|C
zY#-%wW8laAB!Q+^0ktc|4-GP^wy0N$3M!+dy&PI%a380)TxQEs+1<7ZQjQQd)!-eY
z4GOo@-07SiJhf24&JO6kBnx`&QX*Q(xV|mw_<{oYfrd1SKX6!XJB^2rro9{bVf)Ny
z=C50CN@h0-0>PW+g}!gzC&PBaC3{bcfE&9s*#$aqMs^P66pn<?G>S_42?a=G?RC;v
zJ1*yDA00;(WKRLZ^EvdLC9&bXh?<qG!>M~WQ2vP_6}8~(6kRwP<~JrI+^ZPJ<^iyY
zU_o`|=c7X!lIcPJaL;W;YD~NC?`Y-G%0M3KB$w=X(+Z1U$LnW&9HMDPv&8ut1E0&e
zykYH#sxACA2;`pN$qyYmvuv1bh-jk1AF@n?bZr)JWtuw2ObQatr1*WX!1p*}btSQr
zycC8Tth~W}{%!5;F>WwnzN<M$sHC2xA%_I9lEXJbH)7YF+=ma>?0)K-Us8sp;Rkic
zybc`v*k-*$V$BM#&#HO2eUD^vapGXtYE8_^Y^+{>oPNL@@5x<cqI+9)Iw$jU1^8o#
zi{7#80ToUS3&>s2{(v*v<$)MyA^8uew&zbx=*G|vLbw*}8VHSmmMEnqWt(5+7aRu$
z<rfcpNG+V+6+8)jZ4!1W2s<Es!TZI`-X)&KAhY91n1;cgpd2<i&BB^KTtKo@@=XtZ
zTD-E8)rDda2BLO=!|_!p+#`;J^~+rPrXUARyH_f0X{|G?Mc4U<&iNNdT-GlPGa+NI
zVW1{H79uzRM}%>uy6>48{5Xx2t9#85IRRd~+GDSr%dMSQJ8#Z(u4m{lZqm4{3r5H{
zN-cY&ta^-o+5M;}wB&QMXpa)|nnPUihZ)z0iA`9|td6z<jXPrTY0@ZCp|C@09;z|n
z^rB~7In!i(!Af9qs_nW?Je$I@NAc$NKoz4G2AzhofkrTV>XY2f@ymvlsEtdLP*1(K
zg57J!^@8@HSD~q8*u?g#rRH_9f|TT{%=J%xu+);g%S#LYaGys{a623ms46)w)@Ifp
z=zDc&JYd`KWp>stYcpB-+>~MCqd;Fknz?*P>;2<B&W8QOB&qCaR|kg>3<Q2!j=mvT
zZdDR<y@1G`{f?<+SIXA;kqW*+)!Ywce@I?_bKW!2>!l^5iMk2`oqP8Ysg9CWLBKqv
zs{MIp5+~fNUJ}v()rLOj^9XG<XKQ#%6I(eB>!!qRPq+2XRhi5lY|^@McbnhF5$7t#
zuSZp)lM?)<{;6hdXCXZIaM%%O%$f@ZeDluqs<A80gTd!?mv8R8Z8)Sk0be2aRNHin
zsS;3DQVd+}QGv!+E4?VyA_tFW&S|NPCqAV$Ve!P}lLzm(rl#Ax5aiGc>tFInV<Ru5
zIo<KX$yzHbLKF*4;bnc605`i#8)6O>Sm*K_$Ej}X6(`9;HZHQI>CaYe)6#{FM7BlY
z9zClM?GKl@+;;d9tY=<>o*tzBWFuO@jnw1B&srJaa1-5v<8<#MF$1up^|_(aEQ4g9
zh{i6`EQ=%y62Z-I9lL~V#(?}@sYP(lApz`=kwNY95#E*RdHy#nA%zB<Y_E>%9ri?j
zV`~{V$*ov+C?+C5E^$V?k>1sf@G5x@oR+U5(G3@0;BrG=G^r#nIUiG1#l|LjSD#qU
zHXmBfcKp56aA}`*jd{+zl*qQ}u>x!vQ{g=ZW0&y-+{mt$0{Nc3>b#ca8aMP2g1Qjt
zJ&&{xKABs|rJ<2-l3P5}vtCxiw5Xw(5g}Wflu1G3*A!iou^d9!QFq~;IiVr@+_Ir5
z>7f;lCH7T`;&vCPb-cuYxFodb9v<z3OS8t7=%~JwG#s>Zy?{0E$PNV8#-SkNM_y*5
z5-d56f}6z6Wj|V-uUvbrOcC3uJtVg=j^$GqLwPcjozO<rS9koVI*4jH+@WsT(Rib4
z=*|ie{^GQdMO&zr-C?MrGo;jwF^iFqSvT9v&h@&M()<9=Jg8QW$F)1BE19cvSs3k5
z4Z_HR3sCeGpr~G}GtodYI8jTASkE`q5jT=gU;cYc{O%Q%E>QV`n$sM-(KzB>@fy5p
z6Vz?-x|QkJqNn>*`(e-|+Kj<@V$VJrd%~r4Qc}&Tx#`0KwhXrhBvKfuOz+AE7%)?n
zOr89oI6XU_QOmz>2g(q;(NYFzhuZ+<f9FAfKm+0e-t=Z&MW@;is7{nrFVb|(+cZ-*
zl5G$9oviq;Op*vWkY8F~<S!%mrzZmMS)*;9GXUX~{KNZhsqhuP&B}DTnlSx0HNR*a
zR0NXxK2*Sjp8v{V{dyl5DAdY}*zD2<!Z80tLPk1}54n~Cx?=z7Q(u$|pnzDB93EBq
zF9eE!fb{D{lmpuTab17D@8}tjGZ8L%Zv8I=`uPACbo_iCSkm*41g^aVYD2-glB54d
z;5BeTo08x0|CxNe!64v#7d7EU|3=^iI_nucB9P%<?l%JqINy;YsTStH5O{=ZxK~P!
zuJO<0EB${4_<zm-A{D{~Er0Pp(CD(UVa3VC_3%Yq)N@HnW@bAnkG;9i=(nq%fVEUB
za!$_9QL(X{6%RZ(|7L0tDWL40FgiZ$-5-T>0N7QW16Fpm>)1DNW#e9L+e2C_EPuR@
zy@y4X)ZB17^D!yusWZ*#v>Q1Avo7!d<ynF0%|YZoA9!ZmTXpyM7dsb$X|m{`z{f>w
zr8@WZISCSf3#T5yta*jK-95j!&6_1MK7Lg#H!3PhN>TB2<B8(ilET8)o$0#%x~C8B
zDn6PQ7Nuz3BtRwf6aOv16h*gXu$#TGo?kj^3bU=FV<FKz&9Mo$`agA_C`0qOPr%9W
zSHpi1uO~@>c)dJa9QyrvU?k886#<iB;8;I7Iq{55-&+0Xd`XEFfw5(lH%}K(3R_>V
zJRI==e~Qp0Fj!e$VRyc5RQN-C@#7d)8<6VBssEZb_t*v{Lh#_ewzhUrJM?H+md)rp
z>SozB?)WaSc`N|cj4F(T4~N67ui0z2!Car2nVI|M6GTQ<cE1yZ7=n6VAH$#X@W7!q
z9!^JV%D{e860egjHjtIIb^jvv%IfN39|x>W%RKen*_nIq&S+EFtg51rss2Du&v$vA
zX%nADk3+NDt#M;@ZY(D0m%B~mhpVto^K`J8PnUvuisRjI5W;;6m`H66FKMr`o&4&&
zs!&l`nYhVmIZUPdcHA_9-86(xQRAkfy80ze@7Yp}qLP~0JAnIKTwR~Bv0+<UTCO-V
zYFFInFduOF^iFY<I835^UXmOfSXRb<_~3h-BWe3etg1o_-)c%0(W>L-Xz@#^of8;z
zeWY4G53K*|TkRhh=x7VZ?T_#{TrmO$J1T6hZdaC@EXeKxBe_v}<Ct1Y^y>ObV?KPi
ze|Q`RFV`*qX56_DOq(VG1~;4^mFPE>IeslQl5M!1(C~{xSkF4)e_1~t+(?Q}V0yN>
zHG<u!Gb=(kBq8C+CVy{C5SizF291&m#)W&JGh`VVnLS`xs195!O=_^s=bAcR7nqDn
z>sQ`%wal`%w)U0848hRZW84`|>VCOhy`KlVM$gaBPXcS}=oFvp_(O1tJb<BvoR?Yz
zRW{>qrXg(~uvru3&e~agj1bo2k_eeSIWnBV7~cgo4L#GQ@e6NY3i%lzb(k-LjH6u-
zBE937^+G1?>K<z7I=)-96V?)TS&Ka9@5&}Uk=9O^W>q1>nezmOkna~7T=$UN|8)J{
zX?n(El~nL*uXSx}s{)k6heR)`gkFI-ZMtdag6kUlyb>3;JUKj>=x%8|h$BeDY4$l^
zj^{FsM)L^kdg<SZQxgXl@$jhi0GXE>jI+kVzw#L)eznN}HyMjmcYR>`8xHu+q7Hy=
zyq#rfd(j_}3x`6kHx1&%Hx1C2#_u7r#b;_)(=aWKxD$@%0<ac<dA9*Hd$b<nlGcz@
zL5De{#+&QitZ(0jwgKM`;Sui#>b%2aI}r%%ZdJrR`}pzWk1d*(a@ut7;VFNma#1EJ
z)@^tb!nLV6Jr+bwjW!(8CoKKdvi1GLlS1zUT@<f3i%-sE6%@Fug)2b8r~)~CapMX1
zoTsTAXqa9sPw?GEkeIs>fY6a-&Pf95PL`ur@8}5_c*tUQ&t9$Y0Fx<BN(C&DJ$D;U
zweLW}mn#`BFSu;F<A2w2;oS!zZ`0206@sjP)zoG9rlU1pPVXiKh{dTZl-3_$DDbaS
zS-YvNkDdXyJ*^$WX52AXQn$m-!lGaQgpZGJWfh0S8&ID8upIGuQnx81AqnVxooJWJ
zPou_hoIY3XQy#0SD|VSUucDE%`wSVGN~uT%-5-N)&SCr2P1pTSA6D$;<-_;}O|<x|
ze$qL^RbQ;uI4&|47DIB9OS6xTT)a1RX4&B!&!4xF^u>t83No$(+MKI8p`5YTV4dC;
z-9p-<wDH2qnM_<<Jdz@_LOXWU7$$U@a?HAJ=J_3+Rx=*FZ*sgbGHRC}J*&}lp?3HZ
zIxAC9R1~Ny`{E-N`dGv9s7|EQqZO!h^#VSFdct8egvyYn_&ET3Kh)O?I-hD;ex_xT
zWMZPs@!J2$(s+NJdy~<_Y1@05Y58k?ZZ_jE%2D#{6-};Uy4|CRo=rLbsnR9{wDM}8
zhjG*U`srI&vXbBJeiVYJj4hxTuq%`C_E_nn^KYo~T@hG-MyTuHr-6Udt?1()qbNM?
z85*j5TAqIWVD@~#t#9#M8ng5snS1lpfjsmEvE$Yh5L!(m9hXyAWJ=OFHl}$v_O?vE
zW3Zgc5=^tW!AD~WK8}D~wL-N!-p7n;o&XnbNV^(Iky6nZL#5|yN&+H^fN4d0=Xk9H
zt5-jig14>jR7u4eW~1Vo+6c?y1nJn-wv#B8hZ@rr4{XJtUYmG}$wC1}?q{N4>OIi#
z58;{hF87#fRV!3a<mpcEZ&VoeABr~dZkV)hnl7_IFc>q+D5(kaG@h>{uecicoadaE
zR>S4>&EwbzsPEJ^4s(qnJWb5Z#I&Oa5;;1j@W*lFeAaW~9RTejRwW?2Q<7R*zf59Z
zzyJRD2*)8VE)VCZlB(DJ9gZOQYQK}I@DeZ^)-|)ie<R{)bl%|A#6@siBWG1qjoJtk
zd9!O?Gsa&Pg_Xcwg?bO(^FbrKhctdHvISqhGy|Nd==_oY5@`%zM_W7s0`0el7p0+5
zX6P8wNc(_!A3{ZJanv95F!UFfF>Y?@U}}$!-(0UNLafNLU@^?a)ia)jG{B_P2)X-j
zq=$1xXJnzzbmEo;hd27w=;`Rb+LcuVmY3|c;9dr6FL_EU^=L)=P5}s{4-36nx?0^n
zreZDDt|QK6yAp1N0*O05(9lMnsJ@7W=T<<S<8^NZx_7hW^XC?ARP>OEdx#?9pSb8`
z0@iF+<DKcHM!kH08w4=MpXXnRgIH}Pm|a>4jF0<p{BG0$Y<E1$@J6o|^y;AZS^08_
zLDNkAINKOa`K}CwC7ra{`${THB8&A*D=qUIjgEmBN3?4DSv&n}V5LK{4lTa|#WP}R
z%|+(N=IN!Oy>1)%c@w3>g7G^Uaa6?=$w^5?9Lq9~<)Ku)o-ZWD#QaS)`VH2dtSyi8
z#^+k!4P{9to72ZJn##4^E=rEf$aP_<O8+WuX8(4?bmGUtSoKD%_1pb+!aAYX&@jbR
z{t>~CWm^`I`bED#7$Ik}k~+AvNUNOjqr#2PGJ^qIgzcJ5R+E0~z(Bj}Z-cld+su|`
z9(<|=y|$95t-4uOF?dk)XIV6W!)ESFMN0ZB&roShvrv!G;F3x`&abLckI4zmqSez4
zN-_}y$wnutnWCV(No!XCvY{DG5nm3J&g!`+HwAMucJd)UL2G2gneI^!nx|)*CWE8n
zT-w{)SBP9pPxLH{X<W-I9#_o5<6)+Ewb#=aW2~j3iM(^_DnbQ#omb?XWkKf*qP&-O
zBLOc0mTaYm+s9(As2t4KcWfZ_)a1RhekG|a^-RU`%PFe4a^F%WmJQr4&o;TX%2=oV
zvQBoWDQ$;+`@+t9ir_B{RW}p><|;@IDX08>1wb1<%G(lukAQBqj^-G25t9cZmoBXj
zc{DrE%MEt7ozcU!RGgj5%}~&LJ>4KTO%2Ww#hE>eXIiNEa%f^Bflr3;1MiDJpwYCE
z)4>-1*`N7r3rBe<FyZN&f<hB5<=`T$*L_I^zAbHmdMZGLgL1WRDT*cK(0wYVMinKT
zBotFF6@5pTTO5bij?0R$=dPa3C7-mH*?_f~u=5S?`M~byhpH)OtF(C1JO<$PqK6#)
zuGdcY)F1Fs`$X=oqVmFTZoZhZ<(&nGbg%6`TsC9als9jA!S=PjeyT4`sBV&Z5^<5(
zrh2+nCg&nvPZiyvC1ZBDbFjSqv5Q$WtggC-e>&mK_4~!00Pg!DNGOkekx)Geks*pX
zv@tVz6TuLs#<RTsvPN$#GC@say4#N_kdW_-WEi4W*-cNFGMSdBML(WRt?12Qd>YG3
znNCSKRTHgH6dWFJn53vIF=pBum$=v&;ie^F-D|7)J!Rpl7L{1<F2NU3b$1zs&k5c*
zl%|eP8d!q;dWH)@rq!Rk+)COBc^0Qi7Dt_>jdar)c^2E6<aSFQ*I)Anjo05~p9Ooy
z0Th$cTKz>ZE%Lhi@Zr^)Q%zBtT9K=AHe>C=f&%_+vt=6|seOqO=mx!;%tL_eKM#07
zv$vj?epgJz<+FX$HFsD2Cau$l@a`4eQA1{g4qz7*#A071Q@P23tnIl^ho;#=g3qR$
zVejI6E_ikH^lW1*HNPz_Wp1FVw97G8o#m}6J&>$L+EheIW`Dk^cnSr;V5}tgctoRL
zoKVk%Mm{NaIBosaXpUX^Q&)7wq&oZA#;>xYL5>8;Pa}7x@k6RnwN7({k}oy-I<i%Y
zW*vr)ErNdEv)kjn#k-rqHWrBr>tOyzZ6F<ngpZW?2F5r3nf;F!(z8T=pG%|>HMalw
zd^H^_K1waIs5-?LFx2*FURdaQ(@Z#NDQC1;?}6R2u5S6U9^;zMIdW?&-GF~Vhyhtm
zaSrzY^ppRXr(-X^z>2{X*KuP7=;v&z+l=K>Ce-uTsvLmf4(`Ur#sdrKy5P#Vo-`pZ
zfBqjJNQ$mk%#5;1-6#v5{d5!V&DGY3G>ihX=N}Fd8BX|O_}qW4|5`Ul4He|lSuiaz
zWxx3352m~2DwiPNXl=pkqaUAL;l9Xs`ux!_`&zL;DGLSXTjj8%mqCwQS8-ZWu%Al=
zIs*!n9jfGWGHz}LEZJ>I*Hu?^v$V5&WIw-ASgL@B;H0~7<w?=>4M_L7=)T=DBl>n0
zI4vAN#aQ18^}YAo&E~(q6GeH<LqWXX8|GR`-lQlk$X@*HnU;EX$=RWv4!7%P_e(fD
zNuevW?p`f#sX>!)34_JvdeeN{y{tRGi1y3G`LN;MII#K=0yIfk+vnxvv;(dZ{&9yU
z$?soj6wPRC6kcv!n5uQYb2^C0Tto3VkpvALf`i0?50Xd$jlO4NV>Z+E@~ZPV?B}`O
zVeTyBj{TYgn(kd^M$8meRB-OUjYTzC><BYzY8w$F&?2P|emC{awHVk5o};I4S6xC?
zJ6ix+Z;%J<z}bEt03Mbr#zW&-4D7CIJbvWLJIBNFnepuPW~*6$UZ?UpQl9AJ%?`sJ
zk&yoU0cjmto&Ss01>C_j3H~&LEd=Y&bFqDxU1arG_?~JVcT_UB?ZK+!gI_`<LjFAC
z+BceL>0-4mduOI$vPip<p2`jIBa#6;BP7_go}28S@U}!$%LHDcx2e!N(GFD&&}GE`
z$*aADxIJc2|1Ii^io}ywc{VS#zpmS%Ef4sWGQ7Jkq+QVi_}i`Cjy;vV3-anQjc3aX
z%e8Fhqc~+ffDdb`@3qZU4k(trDNrQqT3w>9V>`Z&+mkG%FzH?Sl9K8vCs|&_QAlNF
zrCyo=?0n2PBFDrrF4^7f<p^F#b<uH26XIeIaa^Ze@9s#E0hK_X1pGbD3;A3Ip=+L$
zo$<AR-_pm6T4DdQaT<T!YxsPs_Tzb8bAP7|cZKI98_bpdavZR)Dvc&k;lDKz2pL_j
zkuGK%S2m*-@UX+!TbQ-Vs4D!UeNVfdM`UYySjwXdolZF`Mz*N0mZe00$S$fXIg9ha
zK~Pc9m!vaZr+KUpEe59CuE+TrqROp{uXW1B$(f*>C4n~j-pO*h5nRXTzL%jhA(z5C
zB$p=0CkWEJXWS8rKJ8&z>kfDp$-rW-=L{lR3*8v7_PE1cWmuWT5T&Y?77^9`{Y$8q
zAo#*1tFLcDN=9(x!pZ&<o%>Gh>fLS-)$sXF=k?_&kCVoUY}Kwj8|o*vF;m@{TIaml
z&62v%1Syi(%9JU;X|EBkC1GKE{TkO}mgEt~XC9jf>I+vF7gTthW&x-{K#S`_tYjdj
zh=Qw@_U3&#3XI~n-o=m*@#0!{i&9}pg;l--K-X6Tk68!Og43Pp<e~mnav0m6#s$#Q
zd+1#o1B8WmAcb!1%;oyS0glsI2xN@$+j=)`y4*KAVu80sFJ8Pr@01dZ;`;Q8eYVVg
zZSb>SWqO;i1{Iz3UX1wXKoNtpm}a_f!?l=oe0f=MW2+xcaTKXPbc3}BAmKTv)U}cf
z$UzJ^NsU(rvTjLk#i0#A7(`J^(yR3$F?Rx&^=Lx%tdD^BS<GWv>uOn+22N82;9kT^
zUd;lLtf0dPG9jy25@Wz!m)Iu)&nu3;1sp&bx{LQQPP}wf_NG^#xbjiOo7PT=@DWy4
zR-w9udPJNSkpd4k(yoXVJRU3jVMu|q((xmE7+FND#D8gwr$mg)+3FO(sriwf@xTu6
z_sv~ALY{4?s#64yYMFNzHrE4w#XL^glVmny33oCfr70e*+S=iX2`fB?LHyvCIPoSq
zwDWBd-*Pw4#ZeXk((&9`*T%><JETQoYSc6|;wjs{fS_r~G4iRFB`}TC<@8OWcxJt)
zn!D$0dsD8aj(G_V4C+PqdCy96pDu#(n(T7DoHivlftcV({oZ%X+|10(kCnN^49F_G
zJMDx9q5TKRy<X+|bfOX#T7LS#N-@2X{M8?q_1jgGDD#TOnbh&-OjP#ML9c8aBfFT~
zOp13y+GJ|83vW7z?d7o9kM*;tXJ;K;ga)47f(zhI)>2V3p{XuH>t2W-hz`(@qpRyN
zxy`X#(=`y{xz7#uA@2Mei{w4#by|{&tQRXO2VwyntwC5=(`=Ap7zNynnlfr60hL>e
zPDVF`pthC1wJ4CawzDJn{Se<YUwqvW;`%a-eY*!m@q1jf7oCJ2v%d~AJZ`d<eYIyn
znIP)ToQ}XsnR@QG_J!ipyg<6f<~-hnp4=kJXP1C&>~`_;ORmKEdXzou&=K_Jm(oB&
z@xYEW?^=uik?Ac)s9#+M&5ns*m8Y7IvGnwx^lnJ;C>a>xr;NdtRxZB$KJP8A8jMG$
z8<@Q~-n@hAL=MB_&>2nL1$KL}`Yd%t`PDfataO&Y{1d=XL<%6k3sSz13#$K6d2tE!
zHYq=djzNSNea9-@&nCShWIz-<+G<NJq+g1yPvrl{OW^2TIK!}oLiZSHq7O~yE5uo$
z-X(GgtSzJ}zn_leSA=e{JC6y;qhYRa4cW^(;ZShReLdRnCcZyG!w9W;7W&B4S@nH&
z%^1Di1FpY>7C6MkQ{>tsAHd&~C~2kdiDo3U-A>h`B%;na2ZDrsK$Pt%O<7cLX>|Xb
z-VeABn;^@de@p>F87;2<xa!NbG-*+cAZRNlSv?^RE%!@hDfi2C8;jwXeuWmU9=QPc
zMRhcPsoPr#I`TllxrzO(t@TAunZV#uRH#ehdfII^5tmk>rX(Yc$388Q&)H0dnD#Gz
zp&<2(iz7H}zJnD=j;k0}`8hh`6Bjr4PIxl0^?9Bj5KHAV<YBm}0vd&<+G1!GlX7!&
zDek0lbNnTae@JdKDrNe@sbwi60|<XaCemqdt_4rop)2y)O3OX+2W2<kAN>VvOl0Sp
z{qC%M4kBX*A<m3@@T`wDtc4zMXLEYe2FF3{Li-Vyie6U$^z{T59-57pnM%a@{^#4~
znowi4w09bM8uR4(wzs!M@2+67)DNyH5+&v-rl&<;6TbcXfVh5Hk`YN06WTwfrbtMk
zqflhn2kwhiqV^`hem=XtIJPc}VLqglLDH>v|3<`ZlQ7%&x9a^3@qe+J5(P@xnNEd;
za>`!y<a?6DqajIh*X+92nUkf-CNU6~2`ci<ty+}m*qXQC_6k4L{<Hl>c}vTD>)iK$
z3B+HN{rOA`5fL`T(uQ^Gp}5ARIWc`PcQt4NTL?ynu=IbZ<UMA_VEuLf#%#RF&n_w*
zf*9un4B&igPz>6b=;wcVs7M-W?1%;dgpCdHXuO_8wW!^|#y?`sv>fM#Gamo~{T+1U
zhI+mbbH$gKBGkyra=7Szz+TB*$PHr1+Tqb(uEB4e{Ob}-L^I0Ee-!D~4g*p4DJi#)
zv0xm8P3Syn)JfZqP_~;)4qKE+?5b^p6Bg>b86Bw*#5uq$9l*Y<wOEvYeW-K>5c2#v
zGLl$TRaHY&c9d+zgrc*^A2Z=Za8oguPeoC<Wh6sj=!Q*wCsD|&>IDl6&#3$um+D{g
z`QJ|_^8+AXyUk=(f02FzKXZN%aqTG0X+rXg+92XBxW@};H8r)v;+pE8%<j2OUj(Wg
zQTl;phlW646532ZSov=c&S1ffbe+wWPwoRYWE!3TRyuGY0sr2O39i=_lch-RNqrlL
z$xhFkg_zY)Bo!Yyk4jH&6augwH!h7FtA@Tu4iT4CERmqQ!?44||5if3l>8q`ukb#J
zu=kiZ;4Q5j!azI*-uv&AX$-WkseyUj`v5O-jpFkbwvkD1E-@i$-xcG}$$8bcVSu0O
z=|G{`*==3yN|d+4)t@065Gqd-ZHEE=FK+w&FFhN<{mKj#b((rE8J+;FXgj<<optM;
zNIrV3esno;!c;Npb1ZG_WXY0n=C+Y(J{Cy9u`Q1n5Aj`es>SXQ`y~$li}c%XGfHv3
zdQK=5=3S4_97V3dsr&8SYVowMFn3!+d}FrdVc#BdY=>bz6yW_YvHJTtODA4kZ@yGd
zj1#LLO=>@&634xn>JKLsIO!W69=6_k`FgU6eo}a7)V$8;KNR0DXZ8;rh=!uRwOIkH
qogO8hXzB;lgU;LS3D=?o7=pad2V$xBO&}Ku_>vY^cvT{1=>I>Qxw0?-

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/shared-nothing-architecture.png b/assets/documentation/1.27.0-rc1/images/shared-nothing-architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..1cde641349258d6b401d56a03dca8325a7e665c4
GIT binary patch
literal 156302
zcmeEuby!qg*Eb9xB~l6k(j_7x-GhP*NGYiFfYK5}Hw=h^NVk+ADJmh|VIU<fozh)H
z!|?3^@B4Y)`+2^<zW2}1>tg1dGv}<m_F8MN_^o{mx~~Q!A)+P1!ong^Qk2)g!oocT
ze@_W6fGZ<r8cpB}+ff5{2P?nh+9EiKFx6HvQ&q*f0gef<E?{54!ol2v1pyxve~z)i
zF)bF}*>x<e$Jlg#AH%V)|LguhODx<!_n3ii%)dDB2cG`(jgyA`FN$f9zwX98O~d*7
z_$lTwiVVR*@I`2+sN;x*MNNVE!!}Rt0n>pHTRzlw(pFWGFh<z$J~2T&HRW})vBNxt
zCFLdo4sA@Go-n!DSlc>ExJk2|-5~*vF_-yRn9go-vXW-eR=v+8hj1`u66O`+<!6y0
zVq#*FaxgKI(2!U7^Efz@X0dQ`vXkKBb9Hs)brs}AIGFR@5*HWe;}_r)5a0oK@Ho2L
zIz4gYv2|oUC-N5^c~eJY2TMCAON1>GhVGN62xlj078cAvfB!q@)5+58UnAK%{+Sk-
zARp!zzFWNfe1Fphk4j;#N~k+nnu3ur^kr^Io!$9AuKjDA^ZV~xAe<0D3J#XWO14g>
z4t5SeB4<wv{CWESe#bv)X_z`9ter6rKeDxSlKG3kKQ90CDLI4<7}U`b!?Ez6G5`JA
zpZlfwFyi_*@ty1D>?%->43QMy--?zY>I{4R8VgGnOG*CrLpSV|F~ZSncN6wE=cTvm
zl$w){uqYfNBCaZZVJDiBc|mp`m)-4odh@g0@O+|=1h0A1ZxX#~!n>_ce*69dyW31;
zmzar~$-l(nIFLI;`M<b^7@wZ#j97EplZ17ubgF3W6zpH@9qZLJ*vV7c8F}>Um$Syn
zedJ6eEbM(j0pom)f_UJ1@6gcD@0vXac<3+nOE7sXY+M0|O~<L|z^`964&$OOPEI!+
z;M)wIE1%grJYZ&|=s+w80h2H0Bf<nbUpQJ{B9p`qMbvk!Tb$psd$d-K=xy-BA$8<^
zAMOnQA@)PE*?k?pI86ZsPml%r_KJW088lBbfAVBr*lKmSRJ{h(qnu~|P4(Izs(^GB
zv0a`{75#)fmftY(!)@K-r=iFnfCUpyR&(*>-sGk_pHg#nJn(?*0Yt5~Y&>Z8QVzV@
zz5kO=aa(xgRkCL827-VZDX&*p5Mhe<2Lu7Mvq@h$<bADvzPOCrB8%mxjd#O6kH&S{
z&|i~W-I2m8((#ED^J6>~IWT_;j>$e}J_+ZsSvA&4dbOTm$~dVg<1{SRs~2wyMTKBN
z-ugPiO-gEV8t>rYR`h?uy77R;S5^S;cU^x--sbv3Mz~CGB|%-gduY&|fu0_guK^^{
zb>2t!!WpCm3IYNGt{a*%;*!ZSx%lnwx(ro0Tg{a|`Fg>9I#kr8mm>vTU}tw@?qvsj
z!e@Ufu#`N)SGF4xVst$*gpbMB7aP)X5ZS$TAtstoX-2pAg$7F~(1S7);XtCPD4HHT
zVqERKEb`S7B`Kq&kkV-~T47&wiau(?#=pjNv{D?7TI}T<ShI#<=E+=WKdqosXyhlg
zH|n@`yxrMW<G%f^GNL6xWWE^Rb!G6@$>tBn)Ko`K8Cj!vFn<@F!WUSOIAXDRMTIs!
zcvEaM!$4x}eRefmGR5bzr3J!m&yFSM-WYed((dLvO(qsit(FeJ9exLKw%Y%o=k&)X
z?I<H2A(O?zHpYEi0Oui<Mn#MwPfv=hhl=zUZJl}Tc<mIh;Yn8bWvmSZ7kqFCn2d^K
zDHQnMtiXmd2<`G{eg@T&$u?Z_yJu(>*S9~fUxLajD5!5?mf@k>_8i}4IOxlfVGm^R
zc)#!-3IPUZ6zv;^KKcPgGuI!Dt<U_@GW;1^3UzgIO5Sc}4YzJC#Tn`41h#^T6&F`v
z;(`2PXpEp55Soj&`Y9AA;jVy%t(B%Rka)MeU3{A&)Q)1ucbj&Zqr-ck+q*YMoqGOv
z)7Upj%s8dKj==@(Z*Iwz<Zvi=jUd(S7zm2k+RUx*B>=%`Jf1Y6_KP8Y=z%NO>Yn#g
zW+1VjiibuH%Z~#0cTNAz51Z?No#es6LATWCIq9#9=)oT{9H~d6^O>G|Yg6Ic7=3-B
z8Z5I(IzAkzkAtE&!-uvG%=Gj|V!*<%wk;zaGOGszt?(H;0Hd$OyCM9Xd5`?y+e5HK
zRe8jFLa`vRmtQUG3OY=uK5pvhbz^k4onD>q)YjCD*0*cK`;F?^7cB<HO^~V9Kr_Xu
z1$WOXDJ#3MwWh!S$#o7U@%lmomhz3qR~sW<Kjnx9OZfp)2l+*E(iYnQ0=qm*#oLi8
zxMc4WWGe>}BWX`v;5F?o4m4LcMeQbK572w{sqRsTpSWWD7`MTM?ai{`TDMKFQ|)3S
z_6Q+C$Kgn9_vZV!vjYF1UfIk=Y}|X)udHz87P%&qlqe^41ufa{cz_j?3z^lo61m(O
zGoC*avg_GCgvdl1dcXe>jyyK*<~*dpSQhU1l`b`MdO~T}wNX19qu}BnedMePqeX6;
zzir%xcqZu@$=v#C!{ScoMC-YFvsEe0X-TTdo9Qu(-IZOg^Cy)Nb0pcEiB^9tBR)v2
zo4gzrPRb~AJkG8hXOf~aP|g=jg_-be<|sTc;Y3;SfyAAc8kO6*b$)@K7GEcTjq%`I
zxOg4qEQ8US24|Y{^dl_;c3rK2FM}!0&nyH#iV!XkTu5OQl~N6O`>CLEjyAicFt@OU
z7(x(pGmYL<m-E@!0;#U+Gx{n=p*N?jaXgnNb$h?uVOJ(#y8pmWqd<5&?0DqB<jd(s
zj=p-A#P5QvyZE2U&SqakxX>IRcS&5H!Ds);P?2dcGJca47N)-*g7)mGk2ICUz1nC5
z6OSSWyobq(vtIoWeJ4yq30MhtuJR}_<YHN_fkbh-(@W6fjn8T?kS+~1-YAzW?)-}9
zdfqnZE0LnOWUo}y%sbx-SoW|bh&!51mT{Or{Aw>3c&XNSu_p`h-G!g!-iwBD&voyQ
z(Gg!yg6v^!y_R!YPiU}l$=tMLJ7a$^B5S0!+Xbf<1ulrqx7i0%@l?@s9|31tQlQd8
z4k37`l{RSgGr9c4Wx3xbAR5Ji+}g>ln{Eo-Mm)t(k!1?^?N88k4Y<?WAt6$d@F*J3
z3D-Xw-Fxib^?>Kl=;o>v>sgF4p|-HK?dXf0((_HJRUgqQH#=p~3%vrwIhf8mg|S7y
zr}@IQ54_PR$#R~Q#rAr;cgPVM^JL~jmNNpEIr*RUy>HK}=c_+1+PiBm^mV*rwZ1^C
z{IqVy#-vdjTY>+oo)g<O;7(cYuMh;hU`sNIVQMHfBed|s1DrN9lkMmVjx^U_m`_Iu
zAZvgRjO+B-Ek>)}WW@y0%gh^<o!)9Cyd*Cf#g=s>pWHe6oM;EAveo!1GC&BfGT(0}
zxWFnP&r%HhUxMmO8%)%rfjr0;uGV*wQ13si=-qeCKdqpKyS)?JzIq_~*}AYHj9&5^
zjSbuKKtX3s8Daw7hoi5nr-w5!@K!g)PJn9)c;)S_xRR2C(Ba|X%!~}VWF#UX{!}n-
zm9h)TTD@LZEw$Cm3ZF|ZT3<)?)hxA}qteSG@uo4xqaPV*1pIxWY#;eW!VZX18!MPC
z!!>1@-@3)Sc#Cl3ei`=6G~F`}O9q`>T;Q3Z<hETwttlf3qmRaU$lR9m%4dQNkJIC$
z*T$;bR7J<w<N_{kmd)yES2~zZ9u2@f^Hu;42Xz|1I*;9zb%*s|9c<6H#n+*-+LwmR
zQ+do&oa2tj*Qtmt3_dt7eJrS3n$=j=H=h+j;1FjM@;`4Zp<t~A%5}r0Z`>F(4sTid
z^|7`@Vt~`byeBnTtNLsz75zf_&9Bw?fp?FNJ$Y%`7S|%ZH_BR2kM=kV$lc-(_Xdqg
zX`nteUMt3o(dd(-c<*a0ie<9ztbR7w)T^nto6LWcXiUvg_g>OOKLV>1<Dd1Ne?6j_
zyIHAIwKwir`^{#&W=PMh(Z|m&<%4s6f9>x4XvZ}PQ_-JXUvHsDRa0dQN;F>@1^R{=
zb&=1mS$%(f<*um;tgU+Dm#g$V2N#>TO@4Hk5mTnJ?DG9QWw|Ged5&@;+QN#yR;vC)
z+)bGdc{HqMaqrivmU+e3Yqn=dk^6FUxr-jIslCm-R{ftMfnD6Ttv_+;UJg$})QPv1
z51Ay%)`1x`L+4=*agOBEv&e$l-6%Oy={`O4Mz|mHWZBT+^klCsi1V!lf`c+ju+(SL
z51%56HtK;5cAjRb?JouiQH!zVo1HEL?xHYX@{4mZk8-(8apiIyvXF?eDrbiY@4c2U
zFNp;UX4~SG>wQj4_BW;yEG@tqRm+eq)Jy9kxKQngFkb@;zF0qF=C#$&>-WB|Z&y#8
z@H*lf?k5fV{a&~33u~S@o)b;z_SMW$BU$gLx(hh~Yc&$tVUwh)_7<nsa+queaj~TN
z#U~T;{nXO~#%^c@VJvwUar206wQAi?9wMltSWz*@w?9{hb|`1{lYei}Q;U3>Mk9;H
z*aT|@{un~-$z^q!gUn>lwaTrJh9~zJyipIj1E3@lQBOLO#kc06r{ddWRm=I+YEBP1
z8g2c&K#1+A^sb!N?X45w5rOGjQE|s1PfM)^TJy@smsU%_$StDv2db6Z9g>3OSj*LF
zJhM_U9V4)uZ(Hg)lim%_h0kWu1f74o@im$LsIs!3kKT3Ee(lCO7ujHmW%TiiIaK+!
z+Q<02^a0*2?C~aZdy>Fc&Nk5@+NEYPJh&zml`eNxJzCZVO8DqpSlv-g1CfMTdjy%5
z)WDvcJePdlco_0n+~4D!L-$?kppHi~q^hdJ&{}SbjMVXQr<0w5_2K5ISjZZ|1?1cp
z=K`?oqq)Hvc4*7i<(k$NgfHsZR(_`&%b9OUJw2Y^Y9#f!e~4O)7LTY~9^EoLS<<S-
zSw7g#iidCY>lA7-4U}dNfK<$jVY&0L!hYIhW3mx=H@zEOJw3l?RXDZKM-!)Od0I~!
z4>EY-ET-S$TwmK4iuM@kSs5z6%eX<VRcGAD8kI<7G4{dv6ZFNh(W&`OPIX{bE!@%1
za$b>N+<a~2pDN?kPO`JJlOP`Ab2Kv1I)UC5J(y-Zy?#jcYHrTVHNO3N0|+alz=UP6
zSFanF)X>k;q9p^ZR3%%5@9|djdueg4S*apf#{*?h@7nvW4z(J$#&9L%3XXPC-PE4s
z-LlP<&9_oTbU<_N$TX$yo$O6a)VCIWhs>uU>lVn2Rzthf+H}$A*HwKhR_uEqT{C%W
z`{7Dx$3$;`KSu^EJnoipQ}f_wV?kDx6J-0mL>&C8)bYkw0mOJsyA_Cw2}(Q8mzY**
zWL8UhU*9VhX|nW^Apg*ms}Ac4COP>b@Z<}w_)edu;9^@WLmBJ+Fkdv?Hgrc+A3vT_
zbRw??BzHFu$tcze)~j_OmF1AmRmfE5WSIc<14rKQq~l^%eCw0IRa&w<N3{20Z)#i+
zC1>kEJ=(cIPL(k&%keAu%9Sqiiym|pBSA~YGNavFq$5dIM-EhHLON;{(+aET4>{G<
zEXdi>9VCG<xMx<s*)b?UI3HdlS#zS*aW%;hh79Ekk2OK*vE3q|Ir!J?e37xH!FVXr
zB|hXqo5S}jS|$#;+vvqt0mOVYg`f17DFb}=zcQN5EfB&`t=t8#>V%FL)sd~Ew2}@p
z&Fvm#r;BwS%xR8v`~DrZnHfu{tZl5t)jJQK&uzk>hY#k06sJxm+@?vo<HLrJh6n06
zI8(hG+~S*;p$9GMnYFdGZD>p;{IZ+KKwG2q_VVDwDS8hrWkvtV`Br!->LZ)eQ01#9
zC0=*hvU^&3!furpx6|_=zmdZpt`rVWz6*Uadto)C_fmevozYE8*gLvQ;xiGlUsJ0M
zCiX@UQ1QjgXnDF5p@oA~qjF!#=gfUivYq)uk#m=8AIs=lC2GPyXUACmWHP@tkSKAz
z2^wYBDZO`*;ahq3K)Q0=&CRllv_j3m_rv|H2NDySpgCD?FSY|sU6K8JL*|U9H`?Ne
zlkL6`3Rv~ubU$3o5fuN$c`6Y-)OIw!R~O}wpRwp9^lb!DPrqLWcU!m{Qh(ce^Y`}z
z@lB`aJsDvVHwx?XrBGdRTN9@z6A9%0Xi{O`+UpLU&v&$kWwoy_EPOpZ?mTUm$cd04
zY+=l=TKdrbESJPr+H)5Lo97V~sajnd=b+NyAj>x{z0_YdXsMzdBS6Gjyc|QFF&lcb
za*OgOLBKwYf1%P9<X!M7FQCZXxMCiaM4=X|<KD=Nhq8ItI2TMtVr}9GOz0Yol=?Ly
zN%Dm?AGEs*wv=YS>S&_|p1~3Sb$hb7U_s^4JGIm)<ktFae7xbQu`#!D6{e9=vuwOC
zmhyxuGFi35Yx0qCG!ZFMkkd`ZQ)Z0ksU5M+uRC07$GPEwT8Nz2Gl2F4NYii5A@=Do
zL3uOSuzgfvq^m2U^7~`%bmZ|gV*)`5OW!oT+oYeLo~tNgJh_rYCs3sNHr;O&ZhHB}
z<;<*M%1;?+AztM7xwUoVK)@a8Fv*09?7Iloo&%GBi!@P{`)*6QIRdPVW5nb(Sbd%M
zYzTH3Q%!O8vGa^iSYJ6EbyU4+f>Lu;u7?;Y+73OGG7T{zp!jj?IkVIUWZ(M-jsAsk
z9)8xWSFc^p3#Q>gG!*z-sp1gj5`l8PxN0EL!?R%AbS5ljfTcgT2z9s6kZHLz+iWB^
z0tacjNJ&h%NZEBE-?3AApl!c3mK!G;;mLSey8@spg5^J}s#Q}Y9{GU9{d%|0b$wiV
zyTU$YX0ND?HyV>tuGuDxyf3-k#pv`LVT0x5zgAHGdnws#*fTv`Xka{e9eH}>0PL)~
zde&<|>Fd~tLh?lI!fN>;fz!|G3n#F2b)}w4Q<Mm$sKqo3wqFHa00|w{D*=6Kd>Iq=
zTL6MkRC&;MlX)21d7}~E^T$B<)*<eshJRSxz@;K_$2r{euI(5XjRSv4U352$aR;#*
z=Uh@FGsHKVmTkY->?wL#P#1nG;x?CHK3ZTl{#AYQSLm>g3s^F^yTL{2?tL9lZ+dT3
zHy&(r@mj5Im)d28lS<m%I&-?lH0RH?;$__CQ}qatFnsjNm<zD_*=lID<h3hNco)BI
zK{&sD3Nc(_xmCOF&G*dyb1ELhAYa&ZZgFh>b~U#oBdN`8pO!n35RZ?cYT2t7Y*1TJ
zrRK4>%LcIi1G)_q>DFRzj%%fxeSJY}^eJgo^;%V1^$rZSv*_h(+ZE}PdeCk@`m3QD
z-nUTma*EN-h|_!)#Q4y1B}TGzlBl8QVJlsP-^bE2u$?c-K_K=-sMQhCYX)h&mypdK
z0=UVC0o_|I*Iy@Q-+}S(!<v@gJM8&g`ObE8z`{Lry#RS)m3?cKx_<v|TFy8<&w7XS
z0s|lTY1Ow^L0tOBk`S$J0g@|Ywo~TFx^kyqPf&fb79<yUb5=Gcc+yFHzl*$B!kdcK
zf+x5eIJB_4&vW!WI2ayWx}ZQ<Md4Ck&3g5?^5VdEbf>mjvh3tK9Wo`dA|@*BHIZH3
z0WTseUwCJ&><af|r%F0C$x|n?Fi&&6yTl32l&oZR{e4qg66U(W(3fba*~y4bnV~Fq
z0K#jUE}`2!QO~BmSI_P1HswrI*98G&R(hzjZubn4M-89X6!G{EVCZ4by3$xl%dLl^
zbox&hS=+bqLYG4XJDMwlJBVi(3EzcFcT%H73|;R$Ou7GPUY?DKEJwB?pJd>>JwtHC
zZ%QLvIj=a5AKwT9TEmS9PGwN~UO$BgaM2xNAWVL({tN<kg}<miwO*nPchME}5y$af
z_>}}U%1BU0j(&d_WTjf`XtOuw+IjKSVt-zeD}QZv{lQ$4pufYo*S0D`lGug##j@^R
zE>7+7P{&RL<W%P72zMG%e{r=`bkt6cBl^%O4P-)hJH+RcpC`b}taXf1z4yjM3*XwX
z*Mv8{Q{N`mQh6{p+EyNZ$^}cj^fP)p(724vedKtX>KPvqwx1YYQD3QFl~{){xz;DJ
zfL_J+jy8iFc>Jj#04G#9oJwlO%V=c^W?SE(Z^2hA4mjVs-2ur+M34q-3)B>;tsyns
zAgK#`HXwfF@bW3FZTV}7P({Y<*rgKvP3mF;NgU^@2oMu{juK^X@6-}5k`aU(**Va^
z5AJ<uWX+3%oG>{!`Y{+1x$zqh$i$RtuXOH7AU(%nPa3^hLCx0d<E{Am7-~bWTg5gz
zOTQ8V9jXQn5<-tVb^YuNmPOE&>j@#$&&WPM4h(UJNIX}Yr%Z$*eaw>7s6MFwrkD08
zDOWFhxpDVf*E_l5RjR>ko*oa+LYX{uf4V?5jin2#?5_oK!r>MR>jS3?j-r=b<=<7m
zwW?#=+uo=SyLP7TxGItR)IZ#B{(h}43*)y)nF+8fNUTnAJ;EC$zbNtCfNrAXmO8A>
z&~?l?!QGOWFh)Xm+{VNa)@Bu`lbbQSv-{inU0?TBBByJ~af12V1fHez^2P7L<M}mC
ziyG_IUjs=yM;%sdj2b<_j6OPl-bpCq^!KYr6dj)!tE;sru>s(tTHw2PUhZi}iJ(U3
zHnqN;pVaB`c7p#>O{F^Y#K~ywcYf}ZU=qj_V3m9%;`SC<xUX7WUiqodqOu`HO1Pro
zp<M_jT)C4@BAl$OtwWqPGsq85(;N{yI}^`7Q9qng>MUlL-|J@X7%4}rZ`qgG7`U_+
zH%<sfn~Tca!NNYm17$Um2G+q0Al3&5ozeCoaRb}Cz%wkjAJ?Pn`B3kkK#!+LaU4n3
z?%^qy5xs!%iyd6-`(8Ge<i%{1fi;k5p!^GYY4y-@QLhABaen?}{|9vKZaOLLHngJs
z$QSP;p2cx-m0Md|a@f|<H%^(zO6kYOJr8`5AgG&c&9sQK?uK{tk`qcm8czF0tquF2
z3tD-)v)(gdRHGmm)!J00ITBJOGHG-F)DQKV;taOrQ>+k{vTNwNmt4;GGTrP7Hf}ow
zL9%3UF08$kBRBL0z*O@!W<ga;OzBPV3Q0spZ<(7x==_Z0RA0d$yn~AFd~FOiNkwzw
zT2ldxPrK^7zSWXk&8Q`R33)-+=sxWpfczufufAds4!cxkw4@_=+c!F!Fzex0p`~6o
zkm=P2OB%lIIL#;@o*|lQd9y>6awin2d$6#oVQV*SM~6MO3V<bwlnGA5t|#r4cf`hM
z>+3%Y4D1btowYDzWdO|L^oz?G*WZO;=~#YvXo1uta{pI>&!cgWgB_m3p-e`FK)zX5
z-omMuuQkx3@+-k0Rfdj^#dW3-dW(Gds&UI>Wi5B=6urEwsNIR}PAF6`K63o^$8DNf
zqG7un>1~gs`~c|5qI%Ri^R=qZ6xZ=w1l$g`U^$%(<xNqny+56*=JS@@0uea(!^Wad
z{8SBkg3_-xFGGSthiZ?RLn8MO)Z%YkkusR}44GmMs0E(S!T~O{mn8AMIot=unjmZy
zSFKd#y3Q++lP;sr-il%zr`Ey1p=63R82$~c4)IGD<QmFs$7tUuaO-azRwBnoKO6rD
zaD5_;2RUGLPK00;X=}@R4xNOW(1}<#A7o``bBON_8rOF21R>WVOb{7}+l*iAfk*Y!
zLuuQZW+OKkk;j|k=HXCu#a<>0_<d?N-jHgHQ>!cZ0&*B-S)U|g(^^_xbGY<zs}qUV
zL^ZM=(h8cXba)?NI0Nj_H}XIIMnHN8AReTjw?q!9MkCkOI8GVo*2*?KZ)MDWoggWo
zmelq6@`8|JN7$q}Vq=OZ-_ZX16~BObOo0<BI(|JT#f6pxiMKO|4QTRff+o-J0^zY`
zQ=ZMANur*;PP2!2$G@rT38cujrPtln^9_b<KVyX=si<v}btLDL9R;>=<%2Xm7fQ*y
zNG49!TyaRe)?8{+v=LLA>c3BB`H({=V%t9bI_7xj$pOwQi+f*g)6wh*BK4=doyMT*
z5gp9?h|^s}0xT_X&l@y61j28-mWR^{f0&F88}oL@fWSa!pn$jy%d>g~9N4d(?yZ-1
z-gR%S?Kzity(0rIo-Qyfj_)!E2ye@GoB{YkJuJO(P~0iQjcJjTufER+YaO*r%h)A6
zYm&KO`eUP|*)Cy=^!T<F(_xY`<@F~vbId7gBHjajywIbe&KZEe?uc0ZVD;CP3VX<7
zH-h-^x*FBKbiD@SR}%DmiNB{i9xwL3u&q0oYtQ#cT2)6LYIfhVJl@|-&_m4sOyZPS
z>ST0^N%dJHJ?sh(_nKi%7zuQ)hASF)EM}#%5|zX&@)g3taRZLr@dPQK)v(NAcX%r%
z&uoWrYvs3(_I#@4)Fs?q`o%3+KLz~Ay!Rv6#U;(~^H~sFrm%zYSCF_rP-v?Tg|As0
zka|tx=#WyHmK?Vy2ntR(gMg=4Yt6i5;a*M-q5yKkpD`vbF3!5!9mGJ=;L5_T5pVPM
zH&Z^3E=g_3b_dAYZto~+W32uY@F>L<R;toaxZBjr1gnSi$LR&2P&$nTskC}iC>`g?
z(O#!ipYhsg<yME}x?4THGaA%gKjey~BAs};_T%%nc)80lC9X<}gm9N*1os!94oS_$
z1u|os!rrv<8;ji6P>VJaspIA{+X)-61ZR4Z!2(0*0q`HQKiS`_<L^S52T#)BZz`x|
zfHhZ#sq_WMC)rkU^-8A4X2I_-a_jA5YFd1Hr~75$g8}D0i5jycJa<<<&DU&nc&PP|
zudY>U06Dm;&sS{YkHO|gcf##DMReiwZM{uGBoZv>^kCj7)-bUzjIkE18R*URaPGpd
z9ardi3N|e{--2ZPcQD^t&jYPBkWqfyPW9iZ5IQ#HCNE<K=<_bf0d@3;o^d8!>gZm!
zDfd&yFI(W&TNtZ$H9L)Dg_#|_vEd?1+vLN0d95S;G*18IW(~vmM7__r`@AVHZGXPO
zvdu13ym@5d=7MIRlVXufsrr0pFEKuH(58G$;A<>&ud=fxQz`nG(OCzLi90k2t|K<(
zEyoAjg3*bGu04VN3(2yFJ;a$dBW0#C9dRP`Jnva4G1YhFQ~;gH)R&j=my6+;US0cW
zRc86|d5eea6(+v?R^VTlAV6=NtRpAt6J2#Ax1Hd!n5G|S#^Qb%h@0B+%AL^_OjR4`
z%vMQY!PuqX{Oy#tUu!SyuIIXzEeda8fPRk?RmB3}54di6(qC8^fBMjRw{)xGWOsxW
zsp?6^TYtROjs`#~IX!(>e}9}MY6Rqfg5|3Up(~UAq*UIEig+oP4H)fZ>?Rvj^fBdi
zdgc6E&ze~;VvpcW(D;cRx(j1l`ZiBnKK|@e0fV&1%#nvqDkfD==R4!pHwBX$!t<w^
zph$e<ciI@h-h%q9c|`U;9XRjxr&`OpnzcJrM)a!%^PK>x4pI|O?=@Hy&ht@|l?AbV
z+V#G$-);X3L3OPp9!Z5FH<q~b(<omH=DO)8e)9*GHONZF@R<zW8Lz3pKhrz3lK_7o
zLt7NO!6(dHch=B1%9kB3z?1?N7u!#+L~MCMgwV6SQ-Wt+8u+hL5Oc<P(Dy(@=Mp10
z^Fn7Iv6N|>1rBB3FrCA*hDi(?nbx{=#;o%1dC;yp+b7`b`v|i0cs8K@&*@*c{`D)T
z>~t!u@k|!~_z4T*LfEx$uH_y@_lJ?QkoNb76gKUt6cN=~=j)#zh04B7(CXIc(f>N?
zB%nM0pzxf(e~jvD046{5=<Upf^C0z)q16H1@aLfU_ct5=I$EJf+w9EWViWyq>i>hZ
z8=&ic`R0FR2sGG3kuI^EmAC(d#{WUT0f@OX!w3`M{&Uo7T#(&;lxiXQqk{iQ|1F@)
zfJgja85(2<qBodTvi&bqamh9S-R<jV{`5b7Z{P)@U%8>~fU&OsIUqRo{r@TjQu+TX
zJ-62XmsKj{q5PlgMYaV(PfuTD@|7Z?-0ba5-Eu_{+mY)@Wr(Psc}ZD$wRtmc2P_Z*
zc}fdwix{|SZDv;G-9x8!){MjOD0}~=mREJGnRPO?(-RiQ!MjIK`2M-5Adozpysd9h
zoF@HWbhb9ENZSP4QX_3_Mj%Ip&#@q-)C=Q-2A60(BCZJ@UKMv~|LidM>T721=iFVw
zj~YZ8WBafIl~^CsYZv^kK~SwTzE1=pgqJ6i6B_O?E9FvvgAczsiZ2kf!=?0WeRj<%
zr(a5%ob>Np$b7@b5@CyN6EhIt;cXzYEU-9`k*bm;q}m~|aWg^6p=d`e_t|lVR@32x
zAWexp(`v0i+-24wetloZ>?u6OElt)2aY5m`stS}$UE|$vEmx|&`e(O(f1sv}V2J{*
zE{n(_<77u2p6af8Rp2(S#BREZv5}m&T<!yoL(g0bK$)Yv{x(IREVW<BUaJ%K6CB7R
zz_-p_>q{?XFG7+9jb+)0a9IdOW#(Nf_tC+oQ+mX#D?I5L&YnVhF}9&&neXZz(9+Uo
zb{vF*;bN~W#Hd*!5b?WVB17F}a%Hv?8g_N6HtnY~HmNb|QXBLKjX}@|%Oll~)+|<J
z)uo|GRBPYlz&B>{_Ytzg9;P?GDV7k-U?dkEKuX512Bv9$SK&D&FF*39R{}bIaclAm
z{&seWRwvcs$j5q=%_3*52g-r=q(?Ab8-7(ro(UTwnOrF@iWs{|Cz2OWk~GjV$CFf)
zeUEOhvt~!7aw?b3qzPu$Jb2r<c+LE`0yo|1LhP;09L2=m>#_wZw8|+`oT|Q#W<B>_
zpqL^Iz>y1e8OwboKP$%i$GjDL5K9}xPmingL!z0dYXTJ$YdxcV(#tZ|XB*cnjJ@jP
z&<XL)7DMAzs*ei{xjy#iwTE21m~)@*h!ZaTAV1k7D;c?eFcluEU;be;98SZE^k<{>
z^Tnzaz`pdD?EM?8`S#b{6t^IcD1jD)pIwR(@FUR^Z5Bt0!O+J&sl{{pumciC0gb~w
zhU?DGqpe9-f<g({v}Ng*_Z-k9q;yhu`fF<+$K~senhK?f93p263?pH1q`a-fG{@pd
z2I9HnLov&KA#^vlW<}u;4mKq&nEtyM#f(LuY*oJ7J>d=2;OKyziLAaMYDanI1)X}t
zfz`ZgP)(&?@rtz5r;96+@4+r75R|rYOE!IEQ*S2>43k*R?96VP9)+#?g;;PlD1U@U
z;n!{WhAfD(Y$PagH;IA)je9ynOIYsL$kKY6zSjCp2UhE3^4b0_{zpL1x$Lm2Xcm6g
z@A?T_AGx;XvPG-eEEm#hO};UBN|LS@ZY!l32((|o)!;}AJv{N)i)ZJC$In{D;W-qf
zU`Ly)#2v{XQ&mQdpH2#DJ`S<PESi{9nnn3EFF&E3)|i637YUrMOePQgdci|5c%wnQ
zw?B&AF!pj+Kz&9&^d9P+IQqV!7T?iD#`X4P(Qow$rnqE<_hsq!_86+dQA<O5R5!iv
zN=Qi7=syGPW%BU1d+#Gje0Sh#7xlVYb@brHBtQD$3I0utU+k>Ew#Lk`kUf(1G(}BR
zp!G=c%e54i2|&72!`&brZ3uxZ0!9+Xi#X@I@k;zvV8<`%(1}&TEt%ezGN<??*gaW{
zUiymcF4ueK;T+#yCdlJ1>EP$NI<!B(+xjBV*s7qtg8ax#_Zdx?&9HhTisgQ??+ACs
z>D<ml9kilWKnUybk+#}LU`i!%QU?kkD9yJUP~BuEqw3<i<rG%GQJN*wH|_fwUpZJ1
z@(L_l(1Ji7>Ec@$Op@wqS){yk4pd@x`))1Ux)^&aEkcn6_=LjGTG_9?uC+Q~cO=A7
z^AE|TDT1TB&p&(Kz(wWOO;xv`o+9gSNi5}vU%6mHfsI>4Y(dZ8l1u!B#8=ncV(f_q
z|Czl<`{-s~@mnGs?B~{$77sHi#+p}2QjV`-zF!5n>{;E<_J$0|_~b1_OP$<CY>&A1
zvE|M;GWbx%kt^o;hP@q-VD=&|?5Ecad_xg(<{4vBuK*<<LPU029~y?U4qpeVZPH*@
zC-{c(jSR4-xActAi3bjiwbZx*?=)L#L>(hLU)5t><R-|}m+ef_6@8JD)FUCkOhNhl
z7RDdF*>D7VEc+fe#K9AWZ#X#7;fk3L-+w)W?bk|V*YW8S-)BxkqeH`NWh+lBrgw)A
z4d?cWBQQ}y60gLzOX3S-$))b9Z!e7Grx|MnIF4f!Ss^WCh3~XDXreN|JOon9j=Q#~
z060z-{D|lvk7l+zN*<YQd`WtNLeQxTF7->4=?f8r;02!3ntmQP(0`QV-00LqOtUE~
zEpS#!Gl)QW<_K-<UQbgBV&yL(WRuC3^0y)taVanpzIFHZoeyjv81Pb0AnhkDes=J9
zv+fQ`7KUB{L60fPxBrT+`Tp1P_0uwov8b7d{U)e~Y1HvHvkd{8R>KTDVdg_rQ6{ln
zhl&SbqzrBp7oeFid*{OqR=Xd>uFYS{sV=ZgcrIvn>rG*bdRb;{jCF3{=V_MMDmf@R
zVJ5AFUW^dIjp8$UR-m$Fs`P{cPt2U-^Fu{S$Q*%*r1{dq`^<0?e%PBBj=PgvI`Q~X
zJs-`3fnT})hsjjmei~iZeYpzTO=R4QS$T~2h<=euU@6<6kFDux+J1#|wiFYll)b}3
zeGec*9SOwax)J-47w6id{htwG!Yo{W=jmj`*T9gApNfHQ2;|8L2IzImE$E~BA{LtJ
z?b^5ipC>etytq-^Mo$Y=9E6p0qA+|`Iw{gY%n0l{gffy9O&1}eP*2CnHt9sqd#B?#
zI3wDaY(1U8V(gvsE3kFp>Zy4tT+JFY>r%9(ofqy3Ie(s36N9^h1`km6uc$dOf<ZoD
zl4t=nt4n$#y44{j^gT$|+>alXxd{&xu>1sYOV+w1zA>WIuH{)pU8NY=r?$P7rNt2h
zW$bz3O9RQ?X?^qV-i>HBpa`X`+qz`@dca!_&BB%(iKRZz5bD%Bdm9Bdo;;^s^CQ*4
za7RS&Vwo(@xFlccsiMi5K8|xEIB?sqU^vsa)PNHM&Pwmkzaba|{-}4nNY%5$j3@aD
zQx{iOVp0`;*=LNvF0-aNEABTkPE}>U*}qYVV8KMnT$4yjQOM$D{#-4N6n6Q1W#Gtk
zK3tms`&#vZJv+7(j+yuc8hVOF9M{zz;`g8Na}S7~9gv9;<K9e>7eT+&ySEsdE8k7Y
z30b7TP%>bbvu(pr%4eE@VfhsTPf$p(oK5WH<kSrEFhY|IgmQg@1UJUsxBx6Kzf7Cw
z7)3=f1VqI}Ql7~{5{UvO2o3m&O@H7`B(X-2?0u$V$xEjl{+`7coJF4Uj0Fzen=3B?
zRuE^c%`!4vhDXu+5mxYD2oGTLxgH;uOnhulT$RPx&#>g=hq@pc$a)#X2)4e1)qxlq
zd9&?qHHTO9Yq0D37;O^d+%)cycLDw`BMAn?(VfpqlPfUm>)DRxWCgGTqk9D*C+xQ`
zO@ow>CZ25*%tsqg)qdd|jYpNIcUjRVeD1BE^J7qa`8nWzalTj4!Ns{&QI}K!ES4Bp
zto;>X@Q^P!in$DV0L)b(_9+yX?D}Is<@3{(R1?3@5s?c~19_kIj8ZTQKJ6OVhena_
z*cv36zs`}r$v1k3*7kNN_cR71SiDRyz%?bonQ~)h_@Up%y6Ewdh_GQM9X4(hGg-do
z7iTpA4W%1o*KZbD9%VPEk?b_;p&*P!XV$@WenVvUBa^*v!a%2rUwPhNdBCIrpo37^
z3N^w3@mxQqjK>5oko8j&<(M`d*vl$-&dswp{!1aUk&q-kQT)2@t}ZfdbIjJs>o6w$
zoEOW<4!^^etAnhLiOVAb^zKi$ieUsLfp;bkr5vJ4kw;9&M<l0psz0e0!3r_~_8w!G
z5*_j|iU^m8xTLfk&*ejO)gQfzL#8Cy_2*+KUG*na^`{LhUJ8vqr`2i-!pFw#`7;ZN
zN6n?Vkf{m8{+`XVIz>?k0h`=8D<+vy5C0Uqvdn&ePxPh0w|R^;%AC(<%R9c4OfgY*
ze~%9B&B;>>>;}^v!3g)qr_l)A^KzqyI|AqtMTIARh7kX=tY?CQ0{iz4o5(+lle1Es
zf>n0f@agO4FaD$S#+2h^7(8p!gMtnm|0lu`L=F%=Okntrq8@`hywdV*s&|tPBKdDn
zgWop-0FAy$XJY<ugbBWJ1FmY`emlo9F`WF{=(107X(^*AC@}W&@7KZUWoEm+Le@-I
zN5ncEU!J!Pe4?UR&m4dq@&MY>`ZpSX9&IALxNu9BS9*oQ@;zds2R-vTXZAU)ZZWSI
z+$)6Mq<dckQs_q)=Izc#Y62@%sBA$|3^TB7EUp@@^PRLQbyClbHT;&zxBjL(alanj
z!wbC4bN~rCR`#LMiN51u`ibkFz!|Uip8yAW<pPJtnI^b#)y6%a#e4M){Az3QRF5>Q
zcXN#I9Q2jd#dDj4=_=P<IOrJQ*7TpTQ#{uk1@NkZpYO_jIaeG@;pyawiACF69ZkVs
zmd76*(O{=C$g%<3%3wEn9X#O!`*R!&Itu^<Uyu*s5CyTZU{3oUPR4XsE1cL^jc}CL
z9eeUg%em08;ID7WAX4yfdw7BDhmqKiTA^U-&*%8hrw&55P#r<bnc!q!;(0hPv%^-M
zGhJhTOuXT7<vE5T45*Jo{ryN;@=JtDn?3PET<1uyUEZWSa1EBMJBCeb;y#D8A5f!=
z^6o&;ueCf)*OE`E4`w`}Z^aWwxVK}rA9DOb?kuT68oO(Vb#P|S*V#52BY!A4%0-ut
zoCKS<zIJ`wJSxoB^6mDKSs9~@QxVE?jg_t(f!f{XLs_qI4Ww)cB6@cmZDSs-e~K&S
z@X~GCq2u;M4UZkI<mD~T#FoQj>+3fwj%~V6#$8Uqj;(`fGa5e!fPQjoMXXa_ZvMqR
zErPbh^?0YLHl4bgzVb^zrQg<IS?ZUiYNODVVdk}cBKq)7^0S3@AE@;B()j|oesgmD
zy577{yL9cAVFKSz{o}NO{Q>QX>k@%$>xL(C{RBIWOsq#CD4AX^(M!W8Sc~0*Uq|M6
zFD`T&USbpx-|itlgt{L-vs@jV@=10Nm#mYW`NVWT8>~T7$kxsm00CSUc}jY24G(=C
zIqGrFkGF_JR?EXzdJ!Szz5dE(N-%Sn*~wH^c=G|iDz(jiuU(N~Gn>}5p&9<fX^B1G
zJu%C5N>lmNDFN>}t<2hD>3OZ+VSMv``&fPiz<ln?K8@c3^&3}bIO1$;c_s{m0gu+i
z<TLAu;h2PKJ-bLMmT@v#_<3iwo!&G$kRfqMD1FZ^LCo%XyTMU<wQ}QL?E0su<+rC<
zHHC9`hYG#rvfpiHKHzMH?H&~F8Ke+z%+#t!RT~m_2rjHn>b;VbG3>j^LZ;)3?<1f6
z^oIs6(N1fLbBTL5$o2ZtYOfCk7zfrD)CvqRAWMb%gkM03KK-CKWOBg7G>o%h0&4?8
zQGMnQGIi4`-|2)g+J7=Hben#fQ19bco=;4A)8~32gYC_WURQP9y}z;?^t7LH7AKRx
zkjRRG7cA)`wN93E9CqsSV>>$3*6Acfjmi&g$34nkR!q0KTr6WIy9@l;^?NItMY0v?
zKl{0-71nlJE0!OOmr~F6aH5sfPTLY3R#rJ%-APsA>u**_Zaga2;wZfJ<KF1ztk}h*
zb9-4}X%H_aCZs!On}Fb2=>U1p$K3exRrFoKT2t4l%~|#4IC{O&N8)Dt57J4eUs3p=
zW@5Mc`^$^g4(IV)TcG2|IeQ5*c>5NdYhJ(>x9EdA$(jL9YA8c5!>#NKPbk{o7dZ1!
zuR)2C{l2i}#@Sg5Bqu~>=qNwzOHw79SgShJ+6EE(BROZQ>Yb<YUVC!Ynn%8?x5mcD
z<+<5IvEq}scm%PROzU1lL<4>Yn8eFzb9%q00LtZ72=)%9NYl!`&g%kRYyy$_Gf1s2
zQ_JX_E!bCV{GUwUtU%qO$`J+zDc5eT*c~hk_Eyz+i0<s}_P*R$IBW=%)OxGC`LOJ#
zpABEWw^CWT&0ZOa70nV)AT=<>YtUtoCpO?fUw1#9NXLD>7@P20>bZgc2)E<Fm-;#B
z$9?e2uIXB#H^blw?>A>vr5MjFlZgzI|3IFAJp@3!ei048trFUhAGF>+9XHi0Bbh!7
zkG<s$Yx_b{V0t80Z1XGbmpF7AS?K;lvS)NKc}VD!)>>12#q@TLpDFI^E1(~teQP(I
zE#jjV$4GqfPV41o$K2V}-#@-FUWyH(Ff8*bI*)CB)*weM&Mo|NW&j~^-Vylj{@Ygk
zHtf`3yS>vvp}Tu1a$E2eUvH$$<D)8x>bQd&P~Df!;xO4;V98y{_+A%@w-6ho@;&U#
z-Ev`E;1(m+(76k|Zny9@u+^90r1qpAp~r{ucKwb#A*i1%d%!og@x859)0K2F8S}R5
zY}6?a6y3F4o3_#Y?EbR+8vK=Ho!#*#*83sAjeNKGj9|m|FlD**nG$0YSdcH`(Tv#V
zhcEHeXuLIya@J)w4Y!V$#QkiB9_K@!1cWedylsc^bZ9;gcX-<&>A2}X<PuAWv-h)V
ztlnOJojiTB;>p3B=-7AOb^9L!vsl)$X#^nUc-`=Hzyi1|dB>-Ja8WVyExPmUgsHxv
zfdOY0$FpW)#Pa)GY$PojMZCxNc2O9;co>+hhjbK1(^t*oo4B>Xi=27|#)PfJoZGql
zRuR^^4BC4I-{@1JwsGVjKW(ai`hBoI4Mb_YptHU`P<#joc0PYvOEc76fpQ{!qHdC7
z_50X}%C0YR$_#Nx=ww?@#rDw=>9{(InI2)iHf)ijPKsVSLZ|AZ23<|`j>>o+EE9am
z^<1a*tEjDg#GtdQ9e*-PV*g{lsZA1+MbH<&#a`zx%j@UhX?nZ~yj1?=Zu-ojetCQk
zH>H->!SBCXUjOc>iHKiFwyx=2uH96h$Mbsjz1Pn_`C8S>!PBWD7pS6-&#|yT*@TS7
zx|E5$oTFUvHQ^P4%ELE|%AK~-HDl|#cIBVOs`~Xh%g9{4hQb;}K*89xPklGYn}s-L
zguA!DdyT$rHFi^EpK25yvqm!Jt>?-UH;iGYTH_1Fxt51Oc5mkTg!}v~zrjy#H(uIv
zbuqt{*lMmd$(;ebYq_B3)=;@Kz=+Cil$f{8=Px^zahQ%-o*54x=P6G<uHPyTKY4^+
zex-~<f&@TE3lHB!9QW&n-HK^q`3@ooIiADmZ&rl{TY`OH)0<X>=RG}HTM#QNZT4}`
zmM8WVG57V!F{8a&2JgO9?*09(p{<TE*U?|?n*PomV|H#fCsux{60Hcg_1YS}fH6{P
ziK7(H(|D7wyCiGbpMa^w?=V@*Go@oWqVK+VTK)xMztgJ1;PJ|pe>Jvp^JP-a&c^eR
z;3Cr>{p}G}t5+Q69qsmbKmnY;KPt3wzH!Ib5R|-z{s5B0m}L>M$~B?JBO}idmxNLj
zIYN5r&c}|Q<)~Ym6Kfwg15&BHMn1YWAKEO>5=VCsO0j*D?$}aAv|{|RzUcggZZTpI
zD!84bWME9GV67cE?SH!NC+2DDvRtM&H;ChbqF#+9)M_6N7O0xA;PXy^C)j$rFRwk{
zZPh>CcV*pa{YI1O={0^HCz?4xKuaPzd&d=*jDSd``Y5`QggxJ2voHLvA-e0M9^dIR
zvxCLh&R2C8P*<5Uj@Ed*6Fu7WM*3ThowrSk5h$a0zPUkQDdLyDn&A==b?s|KyrNGh
z>f)w+^!ns%#yz}Xkkxvut#C|Q7h&R8URK9`_?r70y`lah%UcvCM}J$C@1_RoYO!1R
zXKS}m9>|OxPf6sA0_Fn;gako==RNiDtMGgP+&6OR;PSZ(ULySF9R||BB_%tyb0Gt)
zNE#xwDk^QNs&+opbB}-tBbXx%4iLy%iIP{&J^ESpdj276-i~YkgW7TH74I*|=x)-|
zZ_e#A7xr%-nd-8s<DNh3eK@}A2AB!dqgG8#nZayyf~MLCUI0Fc{R$Hw{$VrMHj@}L
zDw8+FK6M)K?ah8C?2M-<F1z{X_1_W;E2e{m?d9X10e7Zha6D%svj&f;m==UZ#hkG>
z$V;{-&bzj6y~m0CiwoHvFpRQpP{iA0i2YtV7`)@f_8$-Xi0akRHELI{M{|?s1qFCW
z_5&u}{}7zoewJ(fqo5hQ3Hqu(vy{jGmiAv_#K?*V$m;CLiPu5$fBjzo|0Xif^(Gb)
z!8Na5y3Al=;u;h!iTi>3yufzWj6SgtLYw~W3I5{W7Y|aK=z-_ZJwDFxzgj*EmE*cR
zTel!S$IW6`&-oCy|FJXncl~Q`n(PJ?l5$>KXKKFGPr5;dJ_$fhWX}aVv7YV6z@QgO
z3OAJSATRMiFOG815;hX{zgLvs*EV{1`oJ#*^q46AH|HNhC&XK*sppxrVqryMZG47H
zfY*d6@-&Z`_2>7YAAdRgrak?_lQ~7zr+eF8AG8V1v4U%o4obW|Eazgdv}Z~Mcn8fn
zK5)bF;nTZJK7QohFvY#5HNRJ&KXvU7(|4Kl<1Gv_oYi{noYO_MvaNE;d64mIHN?Pa
z9A7HAmx566STA{+If4Or=0&b$p_!7pIymS@-e>v<+FYc6RK-G;uUwMfEx~EYY|oXh
z#bF60@A3DQhGe5!2U*qBZt#GVw&%;Ya9IyPFuQ!k=I6n!jBr8|o3C@ue^4h4fI2Bv
z<a4oi-1FkJ$H3ta)87P9V&gu<FmsRC?>$JNGVXn51T{P;bBjUZrC!zW**J`Z&3-#h
zwW!uv&xq~}sJjKx4YV-$O*&Q8bgIJ>PdTukb9E}N$4>bfPotO!gy0P@aOE$~p_SsS
zvzAl@r(s{~w}nO`TmcMZ07UX)IkCrhE{UK|VX}}sP^q5b1cGl^>tp%{*1GCvN1yH-
z(l4xZF~}MKMKL|x(ce-pS>9>5i5=}>+8)JTT1o{F#bt`geS$$w0CUy}u)|nXLsbQA
zdP=aqe{kl`DlQiM1316-#dH+*{rhj}4zS%~D*~Ol1U57Vur?!p)5mRGCX`!H22$r|
z!H!b6D<I{wMAGC42b$BnJ!V=ylwWp66#OxjS1f7Hf&I*A@RH4O>MsxR$g>XTp?Tvb
zd7*Mc37n=H)uNh((Wma4eR4%iYsM+ob=X1Dea0k#-{cO{h_V*XrT>Jio138DiOS!A
zS@xxpE#3jR1;B;b3}Y^H{N1fI$_MF`V_R4ZjIv^3Fc>1abXn6%^b_H^4L5_g(iQe^
z12~s`V$W(*=jj=o`@Pf8n8hf^*Roc?B@R;gArtU(Z;1jxyqKnS{+61tt+QJGEu1FY
zBJ|<bLC<(M!(bC=PB2BN$}SV-34-oK%tmrLx-+^kc@VHjSe^`6e35z)K=n7VDFIYZ
z!BMJ24rs+hG0_8^14WD$vCekm(Js-=6jAaKdp!Y7!y=RK%YHVWGBwkFwd{J#XNB8q
z*KL=!x+6#2OU1#SDNI*tiWDlgiJ$JQ93_{I;azD<J+Op1!VA+7h~iTwiUy4z!Jw==
ziDdks49*rey?d{XTFkLtaCZOJ4}2EgI<tgN@PeOGFG>h&rcJbyd{SND>JkOiDFcxC
ztPxa}am}1q0aC1BK4pNeLz#{c^J0#~on<0qSCz@IPa|j05mdd^;e6=UPPT-_uD9{3
z9m=VlSvi&|xpJPCWf)FxfS$+2tUv%$CkrY+P#$na-7(GBcIZqx%wN`T5F@|^D8vN~
zPX1|D!OYxuToLPd%7&4udQKtK%p{QEg&Y#^P6<BxS?XB{jRGjOIG@dRub=L#cJLQY
zpyiO}`~qqL%sz;axjPg|q*xF_2+df^dcc@jJLqnSx4K)i0EMoGy8m*woXxwk33bh{
zpRI9~;Jb5(tFjiWWM~;VT>&c1CU#48so{$9F89g|8n|8D*mic^a#ff^SEn;{EHy#~
z<72oT9c~J^bb<G?mtwJBhjm<Xckd?dp{>f|E2QLZB3{^;dODvq5F_E18Phf8wWvD3
z!#AImVu@RgSEANc1$vgquCtcfo!@k)mm}dcls@-jRj183J!}R&o7@+f^j5Q4s7vt8
zLbpAJ+!ygeJBDOg)BGc%j64cd?!6AOeyj+fjF(0v!7eG$<MYY!B5Qee@RtgL3-eW}
zYXuX%>y$mrK;QJUD!j$Sn3lT3a9s|bjP+Re4Zg*@GNf396@x|TuHlQ7yl&HGi<Q0m
zC4#Cj9EVz+D&wg7+}@`aDQV9B(6crUSK})TNUw4r{ykOAMr**G3Uw#54^ETvT65mI
z>wv~-hN;mOo6f^@g_qeu%MyqumP*a#c=#ZT-jGk6Z&i$&ePIuEL`zyO7|UYO;VNdH
zsQEav!~r6jVjmqsfAv~r25Dk)@rI59*5j~Rj$6y(HeuTy)ezW#JC-x9bR#dew0hlS
zAD%8J@IavP_2zPj#j)mnz|o=3_vpufqgI`H!&j^e-$O)L1a3-R`f1YiM7cmkz*#9)
z3D}wHjlBJy5A))+FO_m?Ua?w8(HiE4zOv8s6T1N%UoqILXB{Uy!QegX$0x<)S++u>
zSOH&wik@1|VO@OxraImKUWxI?DF53i+v4vX!I)RmLk1+6MmKVtU;bgo@>ugBh8@e;
z_{a2lIV4DXLpzJCg0DsHVe$S(I)%AfO-1R<lET1g=&<h7(m#gXTCh=Rq|<0s4{6HT
zeEc*<{vek%Km+)_xEnwAtgl?{M!Xo^J2=WT4EOQ7xn$$RchfB{2MhmUyMFhGgTHb4
zjcC%^lsCD8H;nauYCH4lpOiD!{nGlo75)n}XhJNZ1wB0<w>fGSYKVTSKh#}W_pz$m
zR>;y1Gb*aH(koCYa#9M-#R!O}@^^1u##JXFInPbQP!vgMc~1sA3;T<dr@%GQ5VJ;V
zU+1?E587IA4|k!#eouMaskaqXQ|INk@Ji>oJ7m}|i*)||<1Vh8{j7(|lH=10_4X&_
z`KNPVN%y+Qk-9JogC|cxe_P!TG|V^6AL}QU7JZtrvlbQJPJVe$gum*?RBaJNWViL<
z<B-8#(8%jW_qf1HtbXXQ`%Av7WC;J;b!)+7`IgMpQ^!m%$x0t?3AfE8XrZ~RL>G+l
z2ssFA;IrSB-n*yZL>R^SqDT6X(}xJ@YffR%JUSJC9v)u>F*Yb$OX14OMUNYK{mEV)
z%o!x1xPo}rYq7VA<rSSV3g9R;`K>fS!I}8X>5b*H9Wf6nFvDcQpWK2P`jXhIVxC(Q
zsViHTja0i`%(qUps5*bP<Lve~3HJ=OY#Uf<X>^CxG!Es_mLCOZX0VdboKQbj8m~gr
z^&{IP%2Usnno3jO`6bc#P0#zp{Z`SYx}a=9Nd47S?f!0D32HfE|F;(_PRbL1Z(eKL
zg(tYhyu$M{01UY543=bO3`~1mfBcYInjvE@;~Bd#v?HPAI=;q}IA66C`*|H#0EVG7
zEuUE|MY(xnHM9lKwF(x<{2%7NI;zU$3lxq=1VvInK%`qhNdXDzZs`&b1O$|n=16yU
zr$|amW6>Rwf+F4B@#YBLdli50pZCvOcdfe)e&08<d-m+TXAf<gGDFmIet&>g2v%|G
zP~|vbqIIyf_NtY(H+SL3gu#<eQ@hzmQr$4B7d&pcF+YkeSP_poa!+lyC*GcDpz-w!
z>i3-0Kj@Bp<SC||vlt!vw$qxh>1{RD#dORWf?lDL1uBm4c?~kQR(a$W78XERSlAsz
zqV2)5#M%wx{)e^4^sYC9<g(m$TJszo^Y7Tu%|DAQ5dm?~gOE#vbhFHrdt4ALV0&#z
z@42|Me|qHD?t5D{n0w?UPc;jWhm{RVy8-O`r)!%}THnz!A2apA3j%C8*S;)k7_9pZ
zvM|-IEd5*X6lNZ%MR>hhsKLwc>Ktco4AML8&XYqfCf63@YXWVZgSxZFPi8Z(JIcQr
z@5!1V?bp^7)yRD|UZuwVOr434y|B%mXFh8Stcz^{!R;YM?u}LP0j?ZX>$2NlwPXLS
zbVBEy?OcwW?-^6{+M3Wp+8xyb>0v^h=j?{M!lAJXGfVZaH+#LR4QDey=GZW+1d2|i
zBYm~=-(0}ozP6<D2yr=5t=1(oPrX863q9}IL&qoZ`lmVKr%=!(1^A*Y6@kXdb5Hm6
zL|L|;*Rk~5Z@<uXc%1Hf&&*nTB&K4(UiiAhn0#m3(5PsdVSmH%eIo+Zrxcv)5QlZX
z&9PX^rUdS((Op*!+`6*6rg7U<iaHi~+F|=OMXB;z1f?4K93WQ|;pK(&24q~6WK#wz
zS1gE`$$AkNM{S$UbEBGjA?P;q%MtTc4?ljwS5vw>ZnL~x{H?<?!r|eYmv(d3RU)HA
zhww_a?-9A$g5_nRro}`ox&cSuJ`p#U9%p@y&xU?7bo!BO3KnAe$1~MId-R5kNVU)L
zS8GZUyRTQ}bySU1r{OVwmRicGW&W6mm%0POZ2fhpVz6Vl#xecamcjLll@zm3>Fsei
zLE=6pm*cMUx?eb$FeovLLpk?id+$=(QadjWJU1?{O(sf0k`jnWoVX_sFCd%(r4w!b
zx!R~sx3zm3k({g8Q@tR^yFN~9Xs<)f2daEN%Eu+7Qaf+wu(-}y6F8~VEssr<li%m3
zJ+0U)#f4ydNrm_a)rw_F$IY;Q;pitr!Qsnd3v{IuE|mK0%7nw+pllRVgWCPV$x~2&
z(RO}iE1QA#?t61dN!Q_iJGt-3i9E{BM#=Kkk`}P%+m@8z892(mbzx{L-0^0AEKUBh
zI@ro(@hhJKK@~T-{KB{ci^c1hAf36D1n-LZ{rdu{8#`QTt5PA-*-60fTu`&3fLfwF
zO>dyyITe~=b6kH`xj!7w5(rzYFo{MceF5p<n&A<cvu^COP$hcYlvsV=j#Ak8sBP)%
zR0gcEey;q{SP589VjJs9&>l!q1t(~JCLf%UQ)WA<^w?^BhlNzjA)3sSZ8qOlY+~hs
zooAIw{)6w^7`En~*SNCL{S&_m>lzZ$d5AG^E*<bgc&mZF5~wF(a#wt+bT%Gcv@-By
z8I*pX5@^55(~o~!^<C2;(d)7`qR#ls;-<BiX4}=H5t=I0_zACV*(`e(Mp8#TAT7b|
z3<LELs!3`m0nbc-Ad>jfIL_KGioM6zOq*?Memu$@Y8RPp>~ovkF^Z<Uwy63R>lO*8
z;nqFNr5OEb_|8YsZ)PT7uP{~UD}hU(b}YeUwB^%fOkb=madmlu6XqA3iZul~(+}c|
zmA=O$HuAlgnGW%>Lc9?a!ZUe83@m~Pwx2xtZvdx7J_4&;wtq8=rKn8Ec&~41-lfVl
z8Rp4CxV`78uNNEx)`mt@32WpV7~PGR%%r-by@G<!)QTVbwu2MMpgMtqu)-`tdNgq#
zL4!jy$u6&fbpL)@gFd%%tN$|LRnXYS(PDp#REP0ha`i{AAmz$3wh;<N#R;q8fM?yJ
zz8E=_DVt_HCJU4d9Sps%9f|P=TqD3<TSjDyh;)1V1Vt_<GR@#t(?}y9A5$%}OP~j%
z=|_!-w`NumwYJM8Wj?XcG8M1JdM#TvO$o<Bsq6EctdLlF)BuCK-@GxlYt-89<x27o
zMU9XA9h@%FNXwGVO7%&GY>k3)!D}N!DNF)pm+L?RZDX>n0$1vj@_Yz!qGe{OHN8_)
zjL1$j$L(m1)03~S))&wwxE2U4_fmXAcb-r~>1Z*EK4*rBXKRmvt#DV>5c$`EDy1kp
z1J|%zzJgF^(bj%Jv|WqV>Y8ll@FO$P(ouUp=Z4prcD1~xA#w~Lgr7s%@dATJ8@RLU
zh66{9ful3rvWqq|G;|nfw{73vda#iJaa=ywn=da*D-=k5Q>0cW_ld?=V13;lo`v=d
z9J&NzUu)L_7BYjY>2BFtm$wl~5{GsLC#k<QG76qxaG~jSsp`xAnwCjw>9OR)?+XDH
z!`BFV=&^C%d_CA`Vho*bGs2VN-!ylA(n!m4b!B$t`80h++XP7YRmbffFDSa)xfFjm
z_0=04#MEG=@ZuKbmecKm;I?80PvUp?4CjPm@9j@E`<{Nnj&A9bBxZbf8j^I$pz%#l
zSJP#3gDYo|E<M~B(4wIEo;KGmhvmZCk5{$PJJt6Sj*N%(Lnn#4`!#l!Fdx$eiWPy3
z#xzRCuGj3w*q&`Wgxr=8i?-1|emsP8QOCcua3zE1zWfLC>tC-aZ^=(ShBr<GA+#LQ
zyJ<$Hn==#RP7>_PG!Kfk`|=LIR!qJTYYBEZ5)1v6Cc(kD|8_#v*f@Z_;)qaVu(c&v
zlOnggpe;76X|O$#C223|K1-YERnhB76gD=U*u}`m6#O7J0lfhc$A}%`I7qmu<GSLS
zAxPY$O)^&eH0#Lp>k-7U_HZ3KYpZvj_Rc~U;;}FvS`V6g>P7Q#x9>RJ19YUr!aF>R
z3Cf|sL}ur=x#E~iUYdN(W&S?i)rP|~K~-qxz+%-gJW?l^<gkddU-7yiO8@pjT%Ktl
z@9QJcT`uN@)M0d(-!%~beW8bjA^ffRVR+h7)bMQTqplWvnd#A}*%wRbd3(_byITXH
zKOUH@xrFXM5j~@i3B&UYmN*iVcP8V+(<AnFGhem%29MK_I^*RthtT2C)08Mk@&xxm
zO+{R1S-wRZ$Ltu5{>ds!@7f`{#3qsA)Ft$zYR%J;Q*jLsL>hDLLyod$QNO1zt?Qe(
zA(7yaOQAyXCyj`Pp>fBSI%g4~lg_}xiAALkeJrx-BO~Qs568!@7aBP{$>Kd=81Ahz
zt*#IZ^6c{xcJ&bpq8U0*EDS)iR`wC+wI>)h*6TKwP&uc2{HIoPbwYL$6O9f|VoC}|
zw>PsN20Qj9tp-<dAD$IOfU2Q%?<FR0)SEinKa%-&Sm%d_Y8RTO-H@lS#I`T-S*E_N
zWrrjavI*C%A8m)CpDZ0*wv5~K+2)$9_o{L*TJe-IW=i8|<muiU|2Q22TeVTKKdZnY
zS%=hCFH^l<wec9MGEkl>9p9V@Pb+kotx;P|;IO$G7}U&yx6BoATP0ZbEd1R7h2^3j
z6-y=UpGw^S5gAqexKog~?w*UfvCfPJvXYovs4LDZ%8|*-b@yj(%n#<P^yu`9)U(g7
zFJ*#GIPV#6xf=E~O`V_3=~w^uVV&46Zru-k<lF1n4h4{1d+DJ0kC@Hz2Nwn$K7ACH
zJKI7yerhw!FzGIm6Gnsf$_-Ql5%al!LN2vlq>Yw&P@OZ+nKE&c)3hJu5f9ZBcvDjl
zo<)Nl9|T5~h$h|?RSNyl{bT;c`8muOiszqQW?LU$+Rc9%R$sgN+Tg09zS3Cir5j8j
zQoU~Il>Q3Rx6Ap6N@X5*EbBm|vS&WBM<e+>RTo3^d>V1K<@VP@70P*sTRgYV4=MFQ
z;|Qu+zKUv7VIKzMsP=Xd@jN;)?d8PrPxis25p`1zw%pn?UxHlk{4rz^?^J|3KhCuC
z?jz>H82XhRV#4uuuCrWMBQol<74ixq+oGr5%9QSng-ty_Fwf%ZcjZ%Dtt{-9_DrXm
zA7bmvp15);>S?;J4eA9)BV+o217P*<D152eVc)B-hdKsVX&xv&XI{6c-NoK`ViZC8
z3((6!1U1QHPR$%F==C{5+FPmW1ogMQ&jRvpEfD8;hZe!66Cp;2RqD)pUfc~x?AuY?
z==Dl2rKgn&Dk`l~HB_cyw&C!6%9~P!2xX$s-JusMZAm;xpW;mOgP4-H>?@t>nLZIP
zg`SJBB#cG$7P+e>Bd-H1>*qMsK-nJyd*|F3BI%wRGuv@L=4I-V-p`c!`s0}LiFjAA
z4!&bm`)PNF<%qUu#EmOD0x5AI1^q}dULS|@ZcD7(Q6=qQTLcdp<AP(Q?d`F#L45f=
z!Tm3F$?av=M$d9Kca^{OKlW}>q&^a$+QP?|yv=$W%uIP^sC45SJnGV?lG0sitYoX?
zg9t5kr<SxTPwk7h`X}1hu1H6_NHc`iHw7X0D*(c(FIX+Tg19GEo}Sol1yAj?L^scA
zJKh-M8%6uNSlyzMC|cdcJ<ajJo|X{fEFG2yI<v(ZB?grcbK_At&@0eBtbaW*_>z_P
zT*BF}%~h_Hl5tf51tPHeHge?tmenFMk!VDLwfK=U%$PhVDwylzn^kpQ4MzL#gBu&8
zl2@tHv=<V;kIgo7I?7_2ffgb^xfX&1Gw=M!S+}AY<7AwS-p1fh9AVK>DgUL+oGxbj
zq;t-bn5$3E$zf`}x1`AN{qgX*BmgaGKt&WeiItbh=*8@&MoeB|MOY9PkLd2r_jc;D
ze|zP+t9<DYDCYw&vLl)`98Sh4PK6-;Ab%na48QT7|EJF~KQl78DAp228Dn#|HlR?c
z8{q8TCk673P$(C7`lD~5Wct)#fS*eF@BbS3LAL6=!SJu7&d;hX1jstF5D|w0b-=N|
zXo6}EJbP63nG^JeJVW-k#L*+TX_n}|b@Ak47&V4{XFZq531#7ynEVYeSsG1|Y#MYS
z`#JWb+Z2EK0A9>z+2$1yNsCdoo7Mht&E^lN-7lwUb2G1WeG`ze?*&Z|_R-yz{+bN~
zBPG{9k?g#Hbc!3l(Wj>4jnWB7h*N?p018Wkl>+pCz3?UiYy;>QJ*aIO<ae{jHF4`C
zJ(KBQbd<czMLy&2Eh_?&%AdgD&gge!qz_-92ql)X75u<NzeueRRxn+dGQ6ty&*^fg
zFl@ddTb(@07rQUl4z%nu+!Ou_xsfU0)kPT*(D`3r{4*3R=bDh~h{Zs7BO;~`{4Ld+
zz8P^4)Utvs_9oEu<DVDLeuaZNHkQgQF?ciK-#CgKLD|sf(l+^{4GH9Rjrd7JKlMVn
z(!YGm6z;0{3z<Fvk0E-Gj12bYI3#kkh)Fvdv}%*mejv{+PK(kDI~TCuUgiIv2<ry%
zZ@oVL5*tpd;O7QE1xt+NZ;0GKApbp1ULgaV^7sQB6S%16OS=6~ks?{BxsD@=fcb}b
zP-v4Zl#&0C!_tYMxa$p|;?zBN4*r15Z60tTR{K>3@r79=aOVQ{I=CKR&GAuMin<Gz
zA!QPZi%bQ;!QKHG@|O&InM1{IAvuuEiSZk?b!!o156kL&6q6r<#PKQiTRf75jQpLe
zA-_&R|I1{tY5=V9>E#gDKap0r17t^xDELr%z3|ggUf-UP?SAN4>FA%YT7u+$H2h@S
zzvG_$YOsYhlb=5GCUN}&UNJK38HvAlyTIIHIP4-M|GQon6>DxOAZm!~F^vQ(?T$no
zoaywKz1Z>m{Y_;}w)|ulr4aN!2Q2$=)nn=pAp{BUZ75mSep8=It_sa9T4g|Hy=e;O
zKT-OLN*KI2*|POj#Kl1(FOvly>37!CMWcHApRdoaO&~TvE#la&Tm+~Dt`^ltV$Qc=
zKIqR{u`dyyt)Ty?2*~AcKMsAcIJl$ps&+qpy=%Of(&#sNK9?j~JW%yK&4*C@vuNU<
z?*U?Qm(#}C8gD2WpG3wa+7X<#Gx90?`O?op_+<drmc45a6)rEl{Gg!V?`8cvG>s@i
z$(zAyrvdbuSP7uYI+*xX8AP6V(3}AQ^!oloa$)^&O+82k_gMTvrwkR6g$B%-Bgs{Z
zPg@B<f*er7T>eUFOL(crC9jS@M<CIy=bs97-BAn?lmrwkDb+RW#8u22(X5)fSl2xX
z)+Z(z>B)=KPlqp9loc{J{jj9{YQx~N0Y3@(i3(%;#c~l*h|dMdMSyw0ZSPwMDdz>4
z<al7sRwo1ZHVPdwKZO48SplXb4}rQ<X5STqCl~+2E5HUN6_Sl+zL}$3^Y_n7hv51g
z80M2hDc2;oXd-WQ>jIg;;n+sLkJmz`W^sK+9K*Shc>g$H|5l4+;Uih>de{Gp1aXlY
zCedb-2^48e0+1v%LqkX|Kmyn8NqFr&IED5mjh{$XH7AYT`**4@;rejtJQz%~Jw<!g
zNfhYH9&O&biEA@w+Zx-<dw~|J@G_Ino|0cK@PVWrn6i%5kFRHdkQuq)hn<%k|M6lm
z+yX^<f;$9$Co&1}py0e3$b`8+P^SU2czT*RM#UHm>|jy-Q#13AjmCiYE_fl1b#axw
zNex#|RH1tXPsP{Z>a$0yN{?aFt89wceDeZ68QNf->_3Hq>oI;;7Lr<s{FR`)8%(wJ
zn0;2DynCKf?BMtH|D4>-q(Df~ZnFQe(124i$B>@n9n<>DoTZ9DBDmWI7BttbZF2pi
z+kaPLKnwl=_?qt{uGE4Bmzg}JaDv~t2{XC6Rytu~VwI;3G*IQ5O_1+D#P|;-`Eh_S
z<U*Le|HKEJQh^U(5OwX1A6Q81_wM+j{EqP%0boLKZOWb`xhD@@$Y5+WU;4A%0{=r;
z_U7lo^{tjyQA;6GfWl#Fj2U!Du<Y>i#^*F?7iI>H%4q?K$oxHpF5=Aw1?D+dMDIQl
z1PAneDTHJT{T(qZxReXfh9Lb;7l1>yFL3EN(_>ugs6Kyus1NTRgCvxeU4Rgtr#u*+
zeqm0xO8CmIVVhCohR_9NMEKP7hcIH<ck(6ev=x4q1IVE=+z-=IC7Enq{(xC@<$?f_
z=w<^+^uoQ>^0UDCzsSQjfP*M=(3Idht${6Q24_qlx2W(Rg7)*zlt}>6qlB1Ce`<vr
zzry9TuKno#TOo|l4Y>K9@Rr4<X^>ll;$9X1U6X;P!Gz%I)vQM<5BEc>NiX`LZfan8
zz-{5bQPLXOzXE)Bi|EUef8c-irz*Tt$D_~UhJR=<h~(UaW!nV+t9tX%j&vA&k*B-f
z`<FvD{}Jl}%<SCG$M^p*uKZV_X?)Akxji?IZsoO;1-dHZ(#Kj}PE(#-IjOmzPY4ip
zAe%;t#$k9DWPnD3WFZB!@fhcGYbOf8is_-}Lxl@~!)fgUbg}+EoA1wxzTbEe@Y8$I
zOxhs?cYcJy>*P0DJ#OG&WasL?wLv7~y})4j#Wmm%jo^Qo{!^!5{a1yOHiKa_Z;k_F
zl3oy;N`Zsz$to!<3wz5oMQfygks|on4Z|qHHy0*>-Gplhc2<fXES|=M1VDAYo0H<=
z2*3yoz!iv~^%gu}`#Vfnv=}y3G>ylU#d~5(P$1Q0Bt??N(3dq1#jWoB7ljUf#zoS6
zIHdR{luO^oo#v0>mT-I=zN!MxZ21^dHHn4b^bV75@xQn9{A-Uw;77`OHFl=JZ3VxL
z0bCJajez0Jy8^bV2V_+4f0IFDP+HHFPigVI&i<SCdr#5c-wZHV_`!aMsq0W$wI?*e
z2e1N^_j0gYPD7huXR*s5_+v`&XEQvy<U-7QQ3w6OR|MZ5*W;cd-{~R<bp3h6{5R=1
z1OI2=rg;WO%d@)Re@!s|0#Np=cTb&!Xlx}D05g5*v9LfmF7=D2$KIdV15jRqLvMU8
z=K+}iFd#%7Y?<Om(qyF@!TwfS{xwUwJpH=$LWt?_1O!98)dE9|O2!;ruyDX_1cLxS
z{|;FEyTV>k5dMw2;Dk4*bM=4wCn^Y#H<&&THe?qR^aVtgfii*iLQ=x!Kv?MfVx=yY
z+oA%>e|8hQ(SqYM;vPPBE94I!9VT(r+E&Cr5k}LKFhp+;-li;+5(9T`{0Hq{B2xqw
zH#|@eap94hFGPOzW^S&2Cm(iOG^>C2UQ^*;_yffLU-xtK&d>$-GrIuprVdEsiVBjj
z1L4$5r%0o?DwI&c<||GueGw%7VE}KWv>5clBi$U}@UWFliP<TEangR4Bwhd;0pbO>
zS*oy5P^bC3PGb1Tl58Znf)Zz5YrTWhrNk>Ww;pZpb=B?mI+Bulgz=N`&((%|7&2um
zT}H&oL^+~KW0mi&SCSVJ#xy2N8$vJ^f0}9sp@30@cx;X9jGl6ax6iE941WdxIaeRn
zaU^%Nk5yW=?RHkP?6z0VMnocfs4t$(dV3%Fn>G&`=qG@P%#Q%Ua6^ESAe{f?7bS69
zD<t1yHuLz;zn=djiQs2W>#6sk5GbU^f<($7eAmg`#n`6z<L`f1lP&P>=I>*jeWgT$
z=;4Ypa!={n#iy`dY#;N@!Y!LrD00Lr0G)yyXq)gSOy}buz{lxEQ9}I7I6I^v0jhV{
zPsv`9seQ)e2l)#v0Z&WJhEFDp0twz1F+qSVqL3W@kjXZN$eVHWvqA~3{7DOZ6d{`%
zzB4)^9tqjcA;_n6HSXEB|0UFKV_u~MM3b}Byf6rc8~*^dPnF)C&<5m319rAo%m9*T
zBkQb$7m)w}r0f8wa*ufnDslCUQfI0nkRJZdpQjv<P`1;Ne6Jg*ut{W+Bl;j>6_xw2
zZ1<O*9PSH$y!?}|uvhTckO}er@=)#?G_2)mzAlbBt4v1D12~d}ve}sb14%tnw>2i*
z00YRMlmbYyVfmOaUbUzn7^?0c1{40^&E|rjzI!zIMCmU=0kb6o^h#_{yz`f-mSstb
zXObyK>WljkAeS)!FA-Q7-`s}CU$0P>_0OjL%O@B<a8a~Y&iISWrZgf`kedXi?5gM!
zO~B&Z*9tG$uuFUX#=c+DKc@=CII+n)$twFzC(hoz4-M;dDc4GnHBA3lDM1Ag2y^tV
z^28F;HDHUl7W$Vj_({Y7SRu$wY{DctgIRGVtbwpU=7lvw(>e*|g?s}dJa9xB@J`sO
zw@r+VU!V{F6j~S-1~R^BU*ja!4e_XdW=I)>_KsT!jJvjK5x2U75#=_auk`bojx^@W
zojT&!R!9$jzAFcTkm{R_sA|3<Yr*<Q-Xh}pM-HW%4`nMC1?@4O3X)V+=o}rF!$gII
zv5<qxlGbDcl?$Gm5=u=a=@b9_YLXP=mZ`h`iwBt@k|@Y2@8uxb1}H!XNC;smNbXtE
zg#IO3ZIwHe7*6#lb*H5k%QQsbJAO0xaCI{i%oUZA(Tp|#C4OPdZyJ)qHdi8PU-37q
z#<Sz%g|bCQMIjKNW=>14z=0mYK$g*CeK?{zHUlA}^F0TZav-wGS`HFwc5)AYImJ$F
zn~nSa7l#k^U%q^qH&-<5h?~A$j1J48#IV6A96?f82f@^z5I^E5@S+b!61;B5C=Ccj
z7sW5Phj+`LzI;+i>eVX8`(0v;pK8H>bVk7VCEPN-&sWvT?<`*mbc}QUX^LpV+yaZ(
zzf?Wc3F>Rq+r4#&BTTZ4h<}u$EYFt73<ui8;|!ZYF&5Ke{P(+rGjVLg9gilm4L;$1
zTjn662`i(Ay{*imK5_)j@c9%jMVo#d0e$rccnr=ctVe-yOWzE&yy$)-S#ypMv|E=3
zQ?(c_q#>UCa_*$}ag8b?6qlvkDh;{q5IzecK!}3)hcx>t_6KuVwQYQBP7W4-aUFvk
z7IN=Pqb{L83XTlIb+4<dBsst?_1}Wsz3%l*Rnsc4ARp=8U|#-7Udxwn%N11BWgpq;
zo)yerI~B6nS!ayp7=QT@4j7IgzgdlvlvXw}^eQEQ&t3m{>b|AcJPMEihsFr_iqSxc
zk@eoKyhbv6W7mC^^Zjm0s|6w(TnpuR07dfx-xsV|B#cJ1gj2VH{+nNEc1Yo$ksv|X
z%SUc5A`yl3HR{4CDhdGgTg0M+0zjDoph#wgfuB9-NHLtc9v7%l5)Hy~@CW26{Ah^g
zva)-#4C73*JY28gF*?aynWl6(wAM*-+7LetVSwg@xqWSdA}bLf5^8*P>}%8}bf?cx
z>ZfKwTxKbqX8G|Q71$4$DvF2k-B0QWv5^S~RvlsFSqN}W--bz9bwsRL^k#?$#%;Jn
z4}x12<JceCbQPihG<o~jcT<xC^I^|Vz3$z|=y;ro)$JnH*DvIrs^IA700e13h9n$G
zu&g3CeIU8gP;_y9!PLT_qkh4ZfNg~zTHL{=_<`?7DqWskm8M~50&N%HX$|3L-k%2T
z#>0k2B>*zUEyu4`ODa@|tT*XObh2>(B^{y6#&`R*B~9yv-|rI5#Fb6VmSR9KXqaHn
ztU6e~Pk{SxsB$vah$<Ywm5RZR&A$dDxt}!>W2$d~sb*=+jlu7pN|d5V0VV1Fj%?7U
zJNNvqNy__nHq#Vr(|0KH`NEXY*>E-|LM7)u0B4_v>lcM%GONJR$=wN8oh0WSH4Z;#
z<WhP>q%qsivfqU<;CCu~YE<HYHfaL>MM?wywXP7G06|mYgFPca9hj&J8h-W75#6dI
z$ey^{1TftNQaKZ6=HYrEJmYfQx&zaQgm=1!H*^&#0?JF`Rvnx(mxU%TPAKTQ89$Lx
zHqfX}Xw^r?nN0wBdRIwWMP44PkP;{W`s`jRn>`bj!KJkd{?8DfXPZp08J*9zdRGcm
zBPtCEzb9{)^q|aVGIFq#9=_%~ZVA*o)3Xf{UH$C9OxPMZk2%Vx7plTQ)3Vb#({g~h
zdW6}W`Cjf(U}`ZV;!GUl^`D~piJzoZlSOKe8k<ULFZU`!^7F;DhD+!^E^l6>51pB4
zWazV{(tG{a*&Bn1`EKX);Yr}Eq`#N*OcaSEMS%HHV+gyaP7*%6%z~v`5Q}-8dL-1X
zE?$(52wN%iZfJG@u>Wj=p03JWSy@>uHhptn_D4($BZ0zH%P#>v2Y}&1*bPU9@R0)v
z8;AH=y&s7ITGK7D=AZ&vv%_czP$R!WOrrgPAZvQuhf6962h3?E4&T#tVM^amqMpgx
zA9RS1Xk)6^#AQ&Q5-CB46=Qufl~jA7sEP@FmREYOuTh3$XvjoAkFd#Q8w*H^!(mVy
zm^@OHBnL@wdLV&dS`e5X-cm6QG)RxxNn|>E1R`t<x{+vVc;iG(zKUYm@auy)-0J7w
zKXkX`#d|p;D_w;<C7J!v4*h5_o5e5o`k8^Tu(fYqMQlKG*s#GQaUeSmpG1I!__~+G
z8<uSvxH5hienAO@v<T$}^I$vO5lcdTe*WtPDrv#bn#IX><MvMxY?lrLzkm<%k%v@b
zHoN$Ap5>u>&=NNG1L6$8EuP8h!v#QxQa}c_n<LeA5ya?#qwCKpq9;*=O7^Hf(3MWA
zg$urbUQINexp6XYnU$$tM!vo4t05fUpY);;e+a=k^(`2|`XwZ*Ojlpu=UZ1}H#tYZ
z8=@pd1_%Hh*D;bE==(H@oDY&9=YlYPCUt{m$yNX@@J+LcAfMaWtgfD-hL4QzWmi`2
zE1JAE@%8VBDoF%ae!WDrJsVpUV)(kb@zXa29YSt1)Uu+|k00hqu8X>-x?8h$028W5
zE|-lY_zZ_6-4;Ih*J`(`G>FbR!JiO2>cwKjlpv7LoowVNr+MSx%7Cp=1_lQ21@kzh
z6#U|P(EEJ)i-tucxFRen#n%7@W)1NbI=Cl_@zes;fDhk%s{gpV()-IYHhgBYRR;x^
z{}^?^FFn?qCf*Q+dysavN_4n$<bmyDT7a*%XEZQ$*Pe&puJ0MbNadB=FZpFSr*Ftt
zi`t68ea&uC<e?ZN{p3Ix>HEgkOBhF<A#c9ZfU(|L852NBFbH9KY&Z3Ck?|j)0)F81
z;Sd#*$rA~u`Sg-n1lyWgCs=jV0K=mf-#=HJ<!r;zaqVqlJfCZwCg{Cx3G7YlCtqyx
z+|H3Q_-27$X?s~ALOQ8TvSEdu@W->fl6zf^bs=jhfsyQnUJ2wmjqr8q2a(h!u=lS}
zJ^|f+e)-+oG?cr8d2=hNmO!!akt0kBhULV*a@;ZHasU^p&Qf6cnz99Vn)4dYoxrcS
zVJIIG2;y3x;aqzA(V#o!p*hx1tDr=Lh`qtHKNY?KF5Yd0_YEJYm%p-fjpM#+bA;C(
z8h-=SO}{CK&1}DEt0HmKpzp@OW)i}FiaVO6?9a6%#SkS1=_5nMSlE1etZ^Ih8+~%(
z4wD@;pD%Z3;(G3f(rLrp{Qe0hL`Wuy+(M;ck6nR`dii4in?43Q=z|B?2t3r_hRukt
zwxiOv6V7(Swxed5vdO%$Vc6)fJm|{d(}Y`m>kE0tN8$cK;3hS@`DNl_PkwD^6oUp8
zxY;gpP{&nk9Nco%Rc+61rogi+q^Q^z%T-x~f{F;1!Jc%{-Td6#YAy7-TV4i-%N5bs
zvJd2UCR|;MW+@RNFR=HPJS3;Sb23f0@308&gnEmd-ZA3B;wK@7?2I{`?9WaoIj&$T
zVl-n&X`J+57f41G_gV3Q#+cfE(zZxuC*Io|W`6O#n)4dp<J=<4E=0c8*dP#_5l$Ji
z>KHP_2gh6k*jG#v-vu-eh;dKksxZm2bbGjgOa9=OH~Py2rD;mUp~-wJV=S5O<Si6Q
zd%pcjRy^1sPR}G`QLKL*c`ic`e$_AhD#A?3=vHt;vjMo|FqD7p)66C5J@SE_YQEmf
z6bm6>VQo9S+a0wl{x&ckY|P&IhUwgZWPZ{0QMl6Ej|POatS>rpBrN`bhn$6rp+&8h
zXAmvY;?4vM9NPv;ITQe|hbtk0a-n2GP>=5#`Xl6b;iIZMq!@TGdkudn0z!rg_f@R<
zQbu)kg@+_M5Uww^>H1&UOp+TtTp0GXWe<Yjo=?!=Y-G2dhihc_wK5%VOVhjkyz=Td
z1%Sy#zL7Rby4E@?9EIMQIH-F(#b+Y0Vx8f}Uj&^@GHqlyk}T_5x@G)Cw%14B+H#D^
z<`oh04RNsR2t}x@p@DD}3{$^9w9%|q^mM`YZw>J0z5^T!u4jW4k{?|MXD{0qN@nY)
zl^!g;H4jOsdsbh1AB_Y<Bn6B0=7$Ag%_dS{cYbWyRH`4e;wkOny_bIf?G4?LV~%E7
zT0)RWN(6A7P)?6z2-r-NW?`4E+|I_HE;=AgUw2$6&vi{=fNp?oF_Vs729uW?T7&8K
zfr<^cw(AdEM$Nr3(4d{bza`w1^eqf{|6^C5kgm;ylKGdnYxTPY3)`~ovH~S{bK@24
ziDE(=3`(K|euT@FPlGNVuIoh<ujim!!>Z+#h7ZSG(m8~qjS7+}f(K2Pj8a!Z1kr{i
zmJb8_C!X`Hq+egj98Ef)w|6c@6^O)E?NjV8Fc5gnTnSnxYy@97_4KT-ln)iiP$SLj
z55_i}vxqfelNy|ux~_di0}%>#Ur*(id+MLoxjuAHg<8WmQBUn42SLfbQ7YB%p0-su
z2KQ@UjxqhBom{TsA6M0?VjUD~^?h~Zc1z1b(_G6=4)wG$1I#wrG)i-`(4^YSPlXXy
zElQj_{&>Y->3vq@rRk|?Tww`GGPwJ>ECoctcEyc=;dVzo!Sc}6XUd#xH|gH)E1`f@
z#SpR^WdG39^>F5y0JD8`!u|2~cuW$xN6_xl+?<uP;@dC-G87c}IAw4LL49dp$3jux
zZa+`vX?g3T@Wz#vV5Ru)shab^MWF0nAwb=NoO!|&*eJeP1fMlomDdcE89@x7RXEOa
z#GC*1N{`pt&Ksgk0pNuI-Fy_CBs(ayL(ZRa7cxP>BE{5Bd!%uXpK89ho#h(6NA9mp
zG*}7fBKfs4l>^`|@z0Iuuiz3`BS5!744*94Fbvky)^7Y8n0z3pv(7>(3J3hcyTHML
z!h=3N*THIc;VI0PG(=3K@95)+Q?)g^C$20I`*qZo)G_G7^F4X<sffQtV{EWMKq2v1
zB>(3|<o7v!+(CG&P)A&ElL>8nO5PSui=YHZn}n{JB<uEav9jNX{~-C#PkwuNgazG5
z;?K=JaK%!{P$<%91Hm?n%rRJE8bl44ILH<Ljw^o(9X$HeYM$PE0arxiPXZ*EJu^BA
zZ};)8f$MZR09~f3Wb8j<i<L8f!<7xa^$$F7D*xQCV9X)F;~8!;E8Wu18orBquecJN
z?PSi!FQLmV`_&5oxQ%!)1Ln96KJgTvFn`Kf`Y>P-{g!a)E}snsU*Uga<RpNWK8cj`
zFWAWCL(@i%Bq@51a=-AdeA^b;8+>np5ck{U|8QKc8bCQ<KJmr8ZQ*T+Ty>&k+iw#g
zB7=|x833&2II3EohKUOBMGqp*jw7K<gvLi#YLt!pJ7hoMeFBeTqK44^O>nMKhTLF1
zr7JbfR(=5H{`@gi^N$&S;UxD0Jb$DaEl2tfxc}0iRfHroAZtIm;lye9z~hx3+}bH8
z7%1aHZmKa{GramYc{qTx_=Gp(@?ThdLxv;{M83j3@!m&bJmmvujs){iM!WM1R`|HT
z<fIeC|I0`GDK!AZ$Y_qtzi6ABI5f=nsRTL7!_C65gTN{wxBxQKVZl}UPksWbrBne)
z&Mi1eEC0*WPvRt`J*=nCdGV=jHt5KK{5|oImcNH7R-R@;ge_70H*CvM`Uh<{pK5hr
zzO&nUNM?g4K~`jwQ9dAvzQ3`CKJ^~opDdI5Jl>e1jC^F?wPJa+^V)|(M%meGr7}Kp
zj!6f<Tq%fPE$PTkMsZ~;;~Z)wPMD)8dPE^ApCZFPQNC5X7jpivP+jphwE~}WagG0R
zJ#vkh0x2}@O}VnzlQ$w)sGjf69cM7UsFl%0YfgSur7zpcmytOwz&SrZzpvAUbA~XC
zj%=-(hg&>Ydv=au=E?zKj9o`~i)WbBiKcS?J2e?s98%qJgvvAO(Iqu}J=}>Bs%TRx
znhJPI+zermpt8}9t&x&RcrN=5)f*#Q4DgVySR-4>uc3pys=0xoVBklI(wfTHahz1a
zfD>aBcGE;cYckQ9aPc!>zO&kr=?&TQ=Vh^@t5a*S%iy%HNnrh+IJrr7<@_a2jCYRh
zkLlK`C0|Di`W47C?`M><y9(B=w<n}+l3hZM2;qP6Ap%P|Adi%!g1E-ldVVVet=+Ln
zl6)U8miaW^ayp~&<t8P^`EcA=?~K~<wquQ7)tj#mkX4G5%?1ym8=d+w$y&ZTQ~6SC
zm}64{XrotlP!rI1`u@Q{%xNAky^h&yW%)Z$OJGr>u`y9bJl&}GOkaxBHwN4h-xs$R
zQf53PYm1c-h?e?kYeCd<<+gKP|G;o>y26l^dFYof*wc&HC+aJP^5=1N5_Yi2Rci8u
z9N#ZL8Vd+(!RaLvZ5IEbW1S9yhnXOAJEBEvmUeqUrXlLUfxwj#>j*#D!%5v?XWzLj
zJ?-RNYAfy9Q|b1q6~!Y2){NX1Ymf48!Ph#tfD@pMu^g0!p_~MWlJ!U~V57GX=~uiF
zdC*_^EAn24i#D`T1&XA+bj6xErpJq3dnAxvJyRDsB51qh<KCzPiCHX_cO@!8k)prk
z5gS&GKCG5$RnKT2iOtN<MZJn`RU_=i?+H&vJSOV>o@+HYbcrJLK}o<Z^9XMAn@Wuv
zH0Q%&5W@@-M;QFx>)J;UsBtRaKF@G~7+Qao&av4+-jaF}9raF_c5N4ftXc#FHV0H*
z*hsk55+hqu+k&fan#M#B-#H_-4d=<7;IwmFwvO@6w7uZq{nFG+X8#!fNTX@2^CtuR
z-)@)r()&8MsSjjmQtjUAFU)(Qa1&|?qV3U_FkZKbeM>6x&K|R<Ka!N95)PAIblum<
zZ;O%HesB%%Ic@a0bsP!gPt;WUcBLfhdY9DK8N#hgi7MuGgQ2(2sMUQNiiL-#YO?8N
z^u%<0F#fn+=p(+pPSa%!8d6|AC_N;<*kd<$ooF+2N^0dKGv*GWMPN7D?YMLVY8a1A
zA824!S}P*1j?KSoo)<^{Y1H8xSi99xjojzfE(2n`8N@Yckyn~*){|n(%k+Epjz07h
z*Bu=dkg=V!I{~_aUmH&sy@XrYoROWvWM568VHb_vXtR+Nxv1{wQ|k0EIhskdvk8j|
zd!n75$Cp%24>GN(tu~nz;`|8vox(P9IZ=t+mD%itp04HvHk~jFp8ETxU+n_%-_)U;
zz9zu@DA09<Je*lu<`xJ0&5nEL^OC{E?7nz^Y<loh(%7TAg!?Bm0lusFRzbY(uCeP*
zYeJ@rFE+MOT(65*fiMo7p4m4cy8)FF$!5{Qd0kw_X2&_aqbG!MC#GE0N4+sRCN4e8
zeHHAhWIC<~%iTvl9{jN=Df=ph-)=<18rb!1gBbTDJKO2@O2|MZdvWOk9zkd$DkV}{
z_+eXQy2LW=Jvl1xa~mgsLV@P%^n}@7Q2BlG6N6U|CGprOuyXGG+`|JcQDTKXNQ%ri
zGQ4r5hJ8xKaFF*vgAIY$cWhFKsH?U4t(d9_Fl!RhF-Pf`ViW_%4*elDbm@)B@t)34
z#Hmi_M4pUQWY&`(1UJ7-!akp~l?-FKGFFN)vMf+VB&RB~WUEJ@bR&IQnC{#R9YL{t
zpLXSB)G$!XyyFqL92WMJhfkpDx;R-BF^`~vK#DGy^QuUbXAxF*cs|**k?qYdEtf)j
z)ziLA9f$TwXq9pab%jKnPuGhfCgfyJr6l;hbT)1H{dO;9zk!GcM%fXvS}62PIx)Cm
z8X~*>4-Q4!2WJ9W#EfNQ*6Okx=@ry{_ws^b@LNdaP=S<w?*1`y6NRGvxxGh70`+St
zpPa~){W7Vbka;f(`9%yKQHArhR6>wsl7&9D{Rih$HnTEuX%CE|BV^A1%vK<cIUB9r
zV$Vw-{(xS8^)B-rHkg+J9!8jJqGk%#nnyst)yM5YQP+j58V)%!Dvtfs8Gb^Mi4BwX
zhvKKwR(PW$y(+888kW>!A$l98JO)k9>6FPV%Qrf>tF(NcR)+mDCVa3jQH%;I$=nl^
zo4l{P${$u@n~N10jPv%oimgm3yYP1X7~>2(cZ-1OnJ=^pC))Loniw;l=rtOdd+N(J
zkTdNlfsU;|g&dgcwVv1hK07_3Alz_(LF-LN*}%=VEe@?<>NcB=(3OgX!l~4)59Nj8
zMmXz4+1Ckk^YPOK>UeBM*-D?xk$UOPV}zQj2%8!@3v$el?V}n8%{8T)?&agE55?h#
zzUg}W%P?=Cu+Ce(m8=-s&RZ>w<{jN>O?)oscOcUf#?EFt;MC<46{B>{TxRU2>V&lo
zRR`qTv9<<N*9gdX=?4q&Ka?;t4~)phAhY%aF@=@U(K|lcZOqMkmf#0XR-9$V^dy2E
zS>B40*|V#=mD2fEwioGEy3O2c4G0trs2RSmxfWnd(awQr?|~ug_`WOaUhowU*XtVR
z^67~2cGmF5cb!5Pvg-@&yse@vl1B6C9!^Q4@*CvW&(xko1|t3_%S4^J_l@L==HYeR
zSZ?Y36XCmuMg*=}RkNLa3Tt@*jc@c{FXR*#U&4VMGd}uUNokonR#=z08bN5Fm+*9Q
z!0I5*?~pO#$M$YH<2Pp+!WUJ_?2{S>2_0mGIplA-;utIowcN{Z%-?!Ani@S~w_GC5
zdV`?@wX;Vo^h^TiU=0KsoLHnoz27=2{6plzRjX(ueHkjUr$y;wf6;IcMaWs%=F5Pd
zyZ1CBU+QFdDrWMVD2@INt7s{|Ai;(kvogC=##AaS`*AJ9ddTbZKeSQ^Tx=}Mz8DKd
zII#6|h;c;5*eOH~A5<Z|DJ&dhZ&XR7u_2Luf*HeMU}_wgEud9MfO?GA9_57^hq|~m
zuFm|NMO-A|lXVZQ^7O-S<YkYM^HqcyLv^&w`_8bzCaTe>h@DQQk^@sL-a*zA2eh_F
zi;r!(>dcthG5Rdt-<c;EFc9^6;Nx}XmPCX#NIXJP>)}Xa_Axo$RxjswC{V>x&s4@a
zV!(eJ%WAub>A-u(GF&!GTu@SRh<1|eCM=_1+058DH0q0?v59#Y+oG~$2`z~*ig;{J
zv`)?rVh6p=`_z}lqx;2)t)vz`6)hi22GWdnwR<a!T<3G!#2suG-w4!q4u@G4T*BIu
z8$A-gy<8qYC>4g@pG>PgI`w&rWM<wX^<)EO=U61N7Uf)Gb4YZfQgym@ByX3oCGMvl
zuwYN`;2I)5X`d{0K4|^8=e4^(ES23<?IgrPaZVLI3f-=9m5uho=&T7T*BQE@{`@7i
zN>$gLymrw5BeD-XTcU3KR1oQ$=2C^okf@vn`}x+-#ms{y%^43;nOuw(EWgplZnWd-
zB&@AMI7KIp3I-qol=fM}9I8C;&=xA*Sl@f34uKY9+>ItKe8Q=dqiDEiNqqb{O;RIA
zB8=%=p!rEAf(>D9*LX|Cd)P1Qba<X4w1N3j!(Uy!Zc>4A*iuYUiIks&4ra69u6q(z
z$!xK%Da&&AqfOuf;hw+%q=xh3en5{W%4uh0U9Y&gidj9A_w+M$7mbCu{gc`&5@hnK
zn2-0dR1Tq3#@Nek5}fYp7!mocY9vq2H#B-Ay5>1j>7=jhH*QL3Bzx8l#4hUc&Nq5R
z1e`f_9#E+@BS?d#myCK0ZFCB$j?6-tqOwAC3X^u79B&c_c?r9&!fmBT{fg6BbH&R?
zlvby&EyEn_rFuprT1vZxdFG$xBi+3sqNS2-%XS3=LoFXe>ab7~8(&eaOdM6+6>Q{w
zuF;P~b*sL-RK_<oQ%3TRE_&d1?jPTfOc}dMMMd*IL#e2?aa%<9d+%jtvz;4iMoGD&
zUbI!Hdt#N^ye5u0W>PN9!J7s~kzoNUf%T8y=XseIdoJB|GU`gwS-aJQ;Um#d7dC_!
zX8Fc&HRXx0b^q-$lni)+AIu*S=r+8nkx}oogn^^Z>8Nd9SbtQ13s0SF@SIG3)Vf^~
zCD$x=EG3B!Oc9+Z=-H-&!d>lb*2?D_QhP^6=;)Q1(Ak~b>LQ594_kkjAUn9M8LZu}
zTI+(kCQi|IIEBQECpy#)o97Ze*?g$sw~S39cL$NB*ktE);~uZJSZsN}U7rBs6v4Sk
z^u)OPFkydAE2UmR#-yEhMdsid+eY3x^!#xq)>|W0+2i4o;)wUROaps$tVtzlO$Eox
z1RAEE9Xp_7Y`!Tn*eBDXoX-oF5@V|U9@J+ugFcIeAX3dV$h6HCSkL-iXI3Wh$!jxP
z#Zi|_CZ6=m*`NY6w20fp^Q1jVp7s?!{j9$fZF3m)8HM8Aj633$KMEXk7P=Qb`lyX7
zy=DY%csP?~;QGhtb}kLXl{?W2;B{CV9S=t#z!Wg%dh%aiMLcxeLC{dw7$d8i-)LcK
zJ=w6c*N&>B9&-*aF+iUgOE0O(_U(Ok6ss64|IseA(_}Un{w>H;Z$2j4#Utq3W1%Mg
zg*XGI>YKoO)gpoS*jrhTrTh`!>jcQPoEhhlKsU~4CmmPgv~V)hKEc8YBg(K)vWJ%T
z6p%oZQ;XiMiVq1esh;QtXBJMxmi&FYw_~{ku2(9{?!KQWAm0h`LOT2+<;HJ}9An^+
za`J5Q@#Laj8UCGQqOB$c9Z&wByAfC%xo#IH%UyFrmdU$`kJb0G){RE6{(%nTtx;UZ
zJ+nx)Tf}Y8gkwAIg$B?-1=NuH2RWKkT;f~9aQriiXqOpprx3W2KS?`c%Oe~1bj54t
zbXd1v@dPq}2X$q{+L4rM07)Q&#=6cJh6X41;g@$;Jq$B$&EDScCFl7`awTj;$D&ao
z*PSI+MBNek)Z3ycS<@ByCsLBUhyHpIV`7)iJ>NSJs_c^eOomJ4`%g+vHm)0540^a^
zsfIanKB=n=zYQ5ii6Lr0ti96uDsz*<4CT3iMceTc->V2Zs52q^ygWM5`|Qo54lrl2
zomV(-+sYlq3Rh~6Y05EZ=n>;T#Sjvf4Cv~ZG8<nSG5EZq5RWh%O+>}?OQ(r~+>ATp
z_X8*o+6+YpsrZk#jJl*th=2LQ)=&t0a;Z_qY2LHe-lvKb_blpWkl#lgV1didpzW8|
zG!%8hzZk@gR)|DCUA@EcQn_E@5o>1lnjBNboNvUpE-bU^X*A@M55|}pR1jOiINapp
zr5*Nsr1<tdcETmEaug|!<0nzi7R7%_=_R04Nlfh}=udaXN__))IF>)g81oIWuq=DZ
z2LD=5g7_O|0;sx6l09t>Hj^XSCrXVndB~;LqSaoeQKMiyy#mRKF|w>`A(pn3T+QPs
zXxR*UPX2M49Iv&Aj<d2$`o48IgTZ2IIkLx@VLP+xXWTg7(1PTtamnk}rOPaRxji|S
zwTn|Oe8rs;;%4<(%pW|CSZ(sSwffUnl?BUf&lBOleSW@*fn0aXqLg_w?!uJGz5Q{o
zZsk1=sh}P!@*`;ZSBE)U1)b=sMxOH$i1TmG_ozQ%>PCY~X&YHq^WP+0oOaZ<*7%;>
zjQ;hSgY7EirNg*=qjRcVjAntrmz25DMm4`!%Wkiy>ueih)s!7I$9j~zccu4PUj2`7
z=1=f(gi->JI;R||X8S@Ik8-2K#~kbyd$qt-XLF!N;cpnip;f{_44;U-#l-L|WYg@%
ziL*41D)j?L*EiPghZc0cLhl5>DUsR!7p?zN9cD|eyTKj)BlB|j=9?Oe^filjx3W<V
zDt(c*uW3#tofioG<?C!@2&rX_OWH<V;D`E*02@;iFG#iZ%EJE*P!h!OA7w9&QsLk5
zh2Ar-J=|GZ1*KE}6SKQ84Eyn$I(sUwcTRS!7so49My~4a-Z-l-`!5>jBY=3vQ}QlF
z`w55d6PJr4zp$AFT7Zt!^mzwLSN<Au1gvWoA`wa&w5eTVA|?Oo54tjDC<+?E%T4|w
z5b!BeUZKQ1=$djcUyD9Qvm>vznP2(8p@0ZW(d@!I*?zG&{w6j2S9#1|#+JJbePzj`
zvp3k5@93;m<&feS^uJ+XMuAQ{)OFOeuHN3>-i}mrH2EK4aztbU3XF)we7ut~iMSjc
z0W5r$Z_u+P=`Ug%3kSh<*y72TDD}U@bI&M#85_iu?s75yrP>ibB>xlm^WkH`<-bS`
zT)pM)f{pFv^dAEMgThMe;CbX%zJ9d-!Lt7k0C-BXC-IX2auhJ$M8`H#javz=)7$nI
z&3Ta}icQ0|4z>%l`sEK;8CvMAbiz4vXEHwHIKJ&`AbRpL`MWlIZk%%4yWl3gc*;S+
zlo{k_gBBY2!>-(gTGIK_8};+S14@LuH*2bwid#CFGn%q`E9=7VsMgA@*st=cm7A+|
zly3HY3=Z?E+Aj3$a@|O~qgnEnZlt^`%dzF#ZFlm4vZ73R!$lUu8NXq+0lQEF9Z%n#
zTQ%Oh2@`p<7{{Z8WS6S8qo)Ju4OVh0nT@73?d^ITH@dyiCDVgA_q}9n5)CYB?a&77
zLh=uu(O#<BiRRThXdam<D}LHR7F*!}t4VRaBHQ605|yVF#^Sikd#9=Tm4<dfYvg2I
z;r2Z~JjG5>AcK)D0)i$vMT6NaphVG4dWdms_DIQe#q|_%e|xbaD~M%zOF8xXb$u7o
z(d`NLNQzjg)>FrMu2>cZ?e7yq3{A}{qPLeLH(Od|F-|glN-n_yp=h_N>Jy4LTeLr2
zO-vZ{1HL14@Rn2LQuQz|Az}67Ro~#ofdB;KHf@b&%0sOPlOOg!81o3ePxOpBi=%ZP
zGELmI8+cGTy*<&Y$dcT-tI!)A)9^l?n1VX^z+r@CoT=DUPzAr=8C&+IYyTSg6os^1
z;nm60d(+9iVb9jXpL|_mf2vYB=_bho+8w4&PgI!d3};QSJLoJ^PfTpysr->xJ=GPy
za+OM&8*SX1>b~aJ8ZHLuge&hi(q@PTopo~cU6g`;y3}%k@XU^Wp}Y}tKMkx($XpVd
z#qhFkXt4&*idfLJ_>s$c@Ak%8>FK`wGx`KKV{_i40oP2E{k~aOs^E^7WH#++P_WhJ
zusaaR{#J;!fLn$(yY#|v<VwJglg&W(XezRRS~JF+4Ik<4AAPcDRRT%zJn}AE?KpZ}
zp%T}LjB6g~4Slzqci{^WBEx*cEk(Gt#M2p)%EJ*JuYLTe(==$}<mP^7!9>_W)j@(W
z11yu<EZU+q8^+x%yT$p0m?O=DW|c*L!<So{?d$G~io_$hvRhjNhI1Vd@gI`P2}2KT
z=NC~<%2%pg@CzQ*R+b4%J^y4mMz<iAa}`EMs!Jf|a(8(WZ>EMq5m$DbHCUOoU`w_r
zp9GRM+)vPrASsr(wK^hO#cFM=*mueMHi^#gO4~+7i>rlIkk1CzkZB*!beJ=f6!uZR
zu{LO9<|2`GCzdXEV9Sf4iwHE=WE|uXihg5p<6A7%*r7kQQ9sv;`otr~ucudxvqbW2
zq#2|)j;NWMxvx>rZ;WU5)+*W!7w_US8~O`o)?dXvemh}!*h(C9kbl*WDH=V>WlmJ3
zJ?gMduj-W_+;(TH0!-=3O|x%8Nxosd^&OSgFN}WdTrMFzDtU<0rA675GlK-;=pc<&
z*x{&k%I<BC^LBc@46A&h_DK${1>;LeMwbQeH~O}8;SFzsokW${J+B!qU+N_-&#-=7
z*hW=l-H-ly*~#w#?+<acD)TqQpUa7mot&F~DB4oz@2SkxEf_zEL%4fW%6<6?9Sy5v
zg3Eo2LaQ1VRE?9vKzZtN%%j?}Z)TNSvGjt6$Ag8(jT#C|@hoqdy|%`b3LdO6bMAjv
zwDEoM#MlpDRXA{OqCR>E9!ks>28fvysTgBJO#&L+%r8wvgQ#xdx{K;yP3Ixxw0BJ9
z2>7;c{M?u?6{&l6a?8Fk@;JHdTr2xhgEn{@d*%4><EewB^XXA6pTsI-Ef3OHZkuo-
zq-U$fZZ`L6aC*NT2-Pm#*Y#F1o5_!3ihkf6n`f#P?Pp~t)wismRd75?ZXsSvXl*)2
zHJYQGVvJDrew;K2e;<cKqS2Z4VS&r{Sv@qr53f*mPqsP}7c>o$MyO8eBcf7ky`2mf
zW!qeNooJSd{Q~Ge|I{{NTarllHW>pOHilHLN9XelE~hsHbi>UrP0xHZ7poo9xLv+A
z`w9h5((&3!dsdfnZ3Wh*gHaHoAIc2a0=p6MSftf8bqH*faK+xUju(n8Hz?4ZuUM%r
zQz<w8e1l*z$F+Z>y5BBz`7k&F)42lE3L)I$Ev4=kyO|Dqf9-h5U>Tl`4l;#<`)$7d
zFY0#1GQ4nOnoI4L>WIgjLsV<8UVl;4qU=(4Te!n2yR4(}t)8Ic&hUZbOUYvmd`gYn
z+06sU;hUlQVLkk+K_>NT)fJarZ4QYh_dw$4UYYw>zS!#PLb5t92kpNILXjC@ULmk6
z@ix-`+HiA4n4V_gI7T)({t}Z_`S&Y*r5zM|n|*oD)G2ps4)IRAM}vB8kv_gz2x!*Y
zFl+NEOxOz#c*VDSAezOOlO<g6BK^Uv$d_`HYo6n~Uu3ZJ&{URJhz=}ttV<5(t9=6l
zd8{7TRdZPHHp*Iw^;gzejZcqEWZV0d7ccR2B(Z$1$^G0yvfB6@5qKN0o5(5qc$b8V
z!TK*Ds2ft3{ncq``(UG7EeC<6-1)r+akHcUxa{Z4cAX=~j>TOewKY#my0#UMtCDGl
zC{~J(nZy(8mWFeu(x-_tgWS2<=ZiAM4Nse(vL^<am1SzYnq1Q3T3bmR__6g457&Cx
zn?$d33!o9(##}8b$Hu;~_kQUnFUz7D6LE>v4OFV3!}oP~FMIq48AGj_v{IO6w92%p
zoAE@Qcr!aJmnAt~j-XI4Jx_3ws3lY1t9B4N8oY8ET4-)pI@_#kl-L~~NY1BPd&;)W
zH~#59tvDZ-wT9U7s*)MuHJhC2?_R4b2WJ0=v9}J3a_i!T1ql%m1d)Rvh#tCIIut=V
z1f)Sqx|?AL0Tls}&Jls3yK5)`iJ`kjT4ES-h+&3zFwS$%`JV52-|M>nfSI}XUVGJ!
zwSH?y7j~+cAY*FNW+j|Z;AWRiRp!1ZTW>(p^&P_yc+J=$Nb925vk?<Byqwis2lU;_
zT2bo#YVvtAq1+kzz~@PN*ZEe+Meq6e!Mv6ayjxF|;eBz11|lY3Nph%X=u9_Ar`pDA
zf@0mukk96HrUF%XvuVy#F1D|l8}@Cw_iW@1_gCzcHymM-(|(GO2&k#0KOcO}+--j$
zIPJDe$EV4RYC~ZjSLb-ZP{)2k5LXdXmN=C%)i!g~)X?Oq-{D~C1?nu#>*Q;d{3^Hp
zpy|osZkD^vq6{1D%mhU{YCW-lvz)c}Oxvi-`(lMqHu1(&IR6D=W>Cz23n>q*j#(q5
z(L%S#L^LkOr>;hxI-TW?)_{qQq3Nn0o2yDi$DPjW%1d%I7K~0xyc}xENBG#0PC~`9
zy!6UOA02BQh$(qq<D-&Z0;Dv%ZBXhXmLX*AT{d<t66Qr}4(Efnuiv9Mhp<^RRkf5a
zdp_#gYB?--jcO9P;5=QP1%7N6o>z*R#}pb@hb%j09-C(ZBtLBh3iz+hu`7CeEZAkh
zO<)+%Q7p~&@_=<1kd4x^M$8F_iW+l?OLw7H`{49l!jvwM^TwF<u<p3(io~X6-HdDv
zYJs*miEN^s9@g+UBjxD*w&W{er{t!VrkRXb`HO=;08v(S2T+;F$gBxwJCFD-JvD!m
zFyvjfZiI8uwzxC%yvc>CHGmf|eZ$G;n110bw#Y$`ooQFhC)eq_>&|?W7so-;T%j9x
zscI~hT1+F;{6n=Zlm^%ow{y_(fVwmwK*VvT8fw=m&MU>UDpPI=Ya<J7>+RCsBmpdo
zE!;!QrH}3$mY>a`wkNg_9XVSGJ){{8RoM%lLf}i6AgDlWD7YJd^?uL)#2LMIwmL;4
zP9qk8?|=)yoJ6?ZofR@rg*Y=OY6PHs5xLc_=Wo+Zz>U>ZGZ$Xp1uGCAn&)3R!K#kz
zN6e)7ZwE|Q>RK5R*yvkPZ38lBYsQm=PG7uk=82x(SEuCJc}S&llDT%Eqc57OaOP1{
zYy&Y8JF{M>sIGcVbF)Y_z!!CfMoSEQEPa3O`a)C9bPsN%cJw-TJ+eieSsUswLa7C8
zp=(nn^rUA&4q{z%u-OF^8LNbBWO>eFZlfaY-?amaPZyqk#-)qnIJ6eaduG|H<X(0o
zbtu^=kNf>eTH4-;2%lSLk?F^@ZkKqi8|H-;V}2INs<QoGA@s`5@lZSD6sLUd4&%k$
zS>)D?FeRvm25j@$I6t^!o&dgNoHA33TG$z9zghPj0_oUuMaHg&Uw;r`8Oz4gF|fwQ
zQRc_+M}J`+nuE6LG{~l1DmBfxNa-r+^wPI)mJ2Q>tLF57ZhL*0No%xSQnNIcZl$dr
zlqJ6QqyfE{QQ^{yrm5oV2u716If(1NTFI^Cb@fV5x>(FJ7)NagQZp}gVxVWM@wPPf
z2G0Fuu90n>XPKQ;l64;CC=VJ+f|<dteOMDl?6i9f*zl|g{jv+Mwsh{jTVx_r(kUjx
zIur@Ak)3v$lo2Z=Tge$ilhJw+*V9LA9DEBek?=6A*lWd;oDK$*@tMV4Fql=_UTtXW
z60R+UKHZh?lk$vxGShP0+|p}Fc+L~=X@b7;0=rdD3>EBZMudL{EW+H@UO**p7-ui*
z@7`@3xMv=04j~GZw<n9!*EhFZ&T8pjSmH?1!)Naf0PFehjY@sABSk0MOPQ{m;hnXh
zYORkuu$NbrpKn&fUW<M&FGmT>&!z22wDDDw)?^)_duh>zn7QcH`su;k-imaV8!53+
zR#i_Z)l+|=+}%ORe#a7Abz&xIK^f-DBn9buqT7%z@SI?dICfv&LH5Up`J402GMZ65
zAh9m@bF)?-5qx0IYYXlYv)~rfWTD{}m+d3h?`sbDI5jI<$MR^V=eyP>ZS$tF+!UMB
ziO2SB;(w$hsK)L30G^Rt$Mm}>@@yC2rVJJsWtp<bp|RI5MYohe*Pnm)^+=^U<AL%V
z4ET=A=zbsh;tp*G-P@0in+OB75DBTAjDNl>?pXG01-rS)4E}bW=+UX6%KC?OgFI6{
zK_X38o-?<>Blm;Hnz`1cCtpU-l;kX?dCf5NQb#EDHj|{lX#x9^VM$`HVK)3!j`1k>
z-h@6_i32gkIsOHhvm;%Ynz0smCX_Dj=x%&lM;$CltVHv^a`i(e9_r+q>IvKlDlk81
z+Q%}effGw~JA@&sW!f~ug+5x7#8%k9$sg?Z-R42+r#4E-Y)0ps_Rp5;{nCqT76-gu
zP9nN^nW}mOl)iX*q7%|uj*myrxH;+pJiMg!8jnj*<x`Tv4qHBjYdHnx?c*@IJ-gEd
z$J|1Z_YC<bW%nv=to4(S24z-e`s9;3W$E71)g8n{%aU~55tAIMMh!XFQwn%j8W3oq
zNItW)>yUYuR;fe;(iSb|iVrkf{%mu2vHl&HO@y(ZBa#FaZzJHydrqv42Bb9MrS#~F
znI`5JcSn(SH~gOqIIQ&{FEn)AD3bq};<pPcQQz%w4Dp0EWG_fIoCQlYt_^QQ=gaT+
zy8f|T8_J12bC|`Ofs~JX`q|vW{<DZDgb;b|IFbXY8S5oM%GG@+J#wUT*|{)Ed@s&x
zo~CTfCubsr@})TA_e7Q4*x~)k-o?aa4d0XS*@;~rty)*r<c_Vm(L>54eY#rMvR{P<
z-L12U@wZMKwLp;cCBWH_1j7wiZG?)3siw+Il|G<NyLzBgr}BN0H;qP?at)^IG#!1=
zwfiG!iOoG9iJBnIefb#^sh~A)BR(so*YoQ3=s_B<%*1pep<<(ey5o7&ilq^`O`E;w
zS)2V;fLE;(D!gG#U<0rRblz;SK=!JMH-?4heHb4(=}RQlDdsRpL9aja@|z?XvWy1b
z`c9bII-l2f4|K7D&nxDbKF&4NR<P$eKxbVb)Zr`kHbnbHb%gQqWKWCGtWb&TJ4;%f
zZsp^z6!ej?A<wV2n+#Yf;j3ub_$==WO()IgECRxFmgrOWyltf>2Ur^nXD3rCs|r&m
zz9JTyRE$9vVP2&vpN{w&{@fI6%t+XjA0<1-Zl*_XY$XP(l<nwB)@pqBUY@ek%7th6
z`L0zily9j_Y`;AP9(!VORaW8Kx6;2sHQ^eS{FcEo6ul=Yoz0@hah0A@9hF8YZ1>Az
z^9S1#3h=qcSJ9-Kd}E}H3?BQd4lN(ZmAOXzE^-GiIO5N*8of*7RDRCPT=T@WtActY
z&3-T8ZOTLi%$O!uh32rFS}nWc?Xr_lyxv>SZDS#~YmO&V!vvL*VtR?<jcrV*7GL<C
z<f>f>%i-;5vPu{0L={g}M%1|wC_Y^39Hgv&SVE<{o%8|WZDYk@zwOp>aVRMed#&aR
z43Ed}dv~@QQk*}BbsY??0l@>_7Y@>o`8F&!6J>0RSV;L{TEy2W(cgAUkZsvQDV52a
zjsSR=eP89gdmF&*%1fmzl+zHVy4Z%HludJpjw3g&yMD*7)*j~mt~2@DMS3X08@KdR
z7}!sx1mFkaseCX&2o~|)F<$@rol_`4eZTZVJ#htgxLGQ}&sHqDvz;e|Qr;Soe4tlG
zdK1k03ULLy?KU{*+9qs-(WmWm`xtCF97h4j<_xN(p^vLz;cMT!`)e(1wS)+eH{FnQ
z*4~}TB1s+9=ct8?R1^OhPkYn&?#H8;M9++?mj`&Omso1UY*y^~>epwc#DaB>o-gg6
zY4N0$b(HTfzttto>I<-M&rS8feHCjb#qnI_D*t`V#Ch#1RYATr1rOGlSM+=$BH@_&
z7-ueDQd?@#jo?n<SpPoq)ax{y)8$Oc!|G*lUTKv0%ts%J_Z>B~>=)_CGA~*rh=_K(
z^MKT8K7+~rhLRo93UcuMSe!cy<1-rAxU)*rEQ*?m1Us0e=t6|QJlb?ZCUZ=Y+X^ci
z2pOHbIi7E@@oeM=lS`eyNK{HeGfE{vJAeVZP9B*3iaF0QCv7Ebz|3Gi6eKn-^kJG)
zfb*&FTyZdUrR54C#TCiZVQ;6G2h8JN_d9k%yats{sN_Xlc#vE4b5;%V$_gGjEeM|;
zl~)c*_d0f}hYi4LBXp50=aoe3F&#J6w7Yj&BA5(6uEmUE2<&^ZZDNyk!s+d85)j&z
zarWo?_NmY6tWwO{{M-u{419shm?N-}>#$bhSG$9S-7Im2P8idLQ7OR4@vd8Ol2uvg
zQD5LO5^p#EOHjHp;Euw?+EB^Cmh-nEwAT70>$)k8Ci7LXn*P07r*lb8WTy!C#-nqJ
z`qkakW=22H5!&@S?DU`~+){^xUkxWB-Odnw+HE$8^Ex>$sp@<4bB&Tu6AwViM`>K+
z5K$;jrx;sc#olbfWPs1?5t56u7;w1fV0=f6=>$OO(IoDOGB3KG@7yisRj`X3%wLvk
znA_cp&NzI1PdMMRf&GITV{b+5Mu0$&V)=3vrC;gH&{n3B3iMo-X9|{rK3`u-i+AhX
zkw+zy2vZD%;_Ds^;(3_S3$>RJN2FHTMm<Gjh+3M@`bEIh?&&V6N*)7VpshFSyyCeK
zgVpDv+xo&g!e`~flu^@_vly`FX}c<`Sy~PV;vVLYD(4?rFjo#duA~ZJXc;5z2;f1b
zI`Y89q^1ZZDbgAN4t=R6Lw=p&;wGgj=m4H>v*g#nfD|4AWK4gTDC|~GOh=T09SB(L
zKsrkLXF%C{1mO0A%afp2q_`X?2hz<rEF}FkIZvim5;p8cUo$>6WSN&q9nUjjOlQ;v
zGKljTL3Jw8n5e?jRQS-QQB3|Fr$|QhI=4|G6LwQRJ;5};!&fyJdGg+`0Sd9%n-(-v
zVhMSR@J0;?w1NCEZ>iP5H=%UVTlXsBj?^eOx04nf-9CLIq$q0$mXcbi0Trb^Yzcr1
z=d(~W?Nqi2nFCDqmaw`>a`eJ>=9*do)7&ia!d}4J=Z?dkODwr@@A>B+GTm@abf5V+
zSmvCUm1*|=y-%EJtcTae6x?Y(hUvuZ;G~hOhaavjm4vjEz0hM}q-kmLuQk!gx^SHB
z&y3=BCted&L6k~C0P^}(Vv^bEQ_df-u6d-3+S+rBPehIfT8KUO2ETKwu3A1zRk1W~
z9q2I8CV?)4><=m#Lu>QX+noydaYj#EI!aAi1asOfYgkDq*CXkbmBuCCzxK%xG@Ifq
zolo%`OsUm7;Id_i;%zIHFDZ^3->Crj1=L}WDtt#@^K}!QhLxdscO+X>q)d~wN_E#u
zF4W`lqrj_2jN`WGX$GlyKS{6L;{Y;&W7F=nl`hf)T?hA(Z{4evB%=F#DCc<ccg={7
znR4mwpi#{6{AYY1GINyj{M2$9^{!c~e(?_4;D%o`FDJIX@yP2hj?Uc-G$B}#raCSZ
zobH$@dMDo5ptX2udMYL8wk-do(&Z1U-nJ(DS=1YPy0hI|z(nlw<4RD)Wl+R(<u*2v
z^a+EhiGGMlib}_WJWF!M(nq671Zp*=9s!me`&hRVHjd`*=s?|2G7^;=P3F0;#p6)b
zeNQIM$JpJ(aek}c`>@5m{&}2fN`#rd5vJNL{aJJ8X^MM|Nx_-Hf?1n!w#t=_@Nlpt
z&_;+M!LDk-L{-4f=S<hLlK3QC4Lv}?G4s(uILUJ(S<N4YLhnGO>T+Fox;0eu|FCY9
zPsk$(<GetI*oYHIINa1mnL?fx=J>h$9x}E-aC{mE@K~n>2;h(w^=e%1fKB;@!EOID
z<6NcAu1)P%*J|JcBuY^JRcrnCYsoXDX0dV?hBcB0qj9!&ecmBL6>}AHF75XoE}f-%
z^s%i%BE!MSa4v%y>-S<iQ%O$1hsnY7l|a|3Esk_psmpt!<X)1lSy-;k&KbjG<z~!A
zv@b9^;LLDV`PiKGY_98}+oPk%aMj^x(b|HyVN{h9;~AA!pn+}n6nPh^q?$xOdM}&r
z+aR`AcEPH`NxQXoA5Q`3CvJ{nJam~}=e#AiKGp}Dg0Ibev;EevSK~AjoZMc&%=N+i
z0_}nD>R@lVp<-1?4XH&vh3*eM3HoY(1A}e@j%ubNO?ajXNTj9?oZ9<y&maH5D)g#;
z%G_quyniWaT0AgE#wI7AnrckUof=$9@(PK-p15j?pojUz4ID%&-lD4jkpnrArlF9}
zcZnf{+Nn=czFC}AP}{Wg^E(1y>xf=`dH%0E1P7m}#>C4Gkc`tzpEQE0wY``hx7qP=
zrdPO^>@p6V5pI2>Zw#i4X!O6J5Ay{cjm}Qg=3Aj4-8u#dmP!tWvxZg%!%c*<5>`)_
zU=xh~rG+(tN9okj+<$(#l=gaqd_UI|&g0{Q6gVeZo5lm<Y7pUGjoHTZWCu}qIpk&C
zGgo4q6euN9N_clba-91>XgltmN?DqJlo2Z3ifV9NnW(S(H9msNA9kSXur93Oz**__
z2Ut6yaIk$pntebLVnLkzn$86cwPF{Ga$CF7Y9Bm*)`bwKadpga1nD<%iu6<3pF4+u
z<Y~==Q=Mu6lMBf?eoh+5)jXuvtK*``RSj7%syq(hc=sK$5x9Rf!<>NTYX8J+M(WO@
z2#l}M&XK3_HC2J`G^oYffo&$?#hH)_p$Gl;YU~C^#VF3KJK<g<L#q0eiY_Z^dIx2C
z4-V)C5a122yQMiK7dq*D+2=R-GTk+Fr&tSYdR&RJFNg5SzuHQSa9W+#s<FH%F_qFX
z4)Et9z@FFl8DuVUa|%Z;!o=uFRP5%(iBV?f-4s<(cIe+afCYd}$7o@d;6r3<>H%zD
zAV5dB6!{VT99}t>=UH)1B}6fkR@~KF3OohdPsgpy;T}EOwqvklzh5`^#Xf#olfvZ9
zh6&B>ozuPK8g#=Uv4o)C>h{n{+1JyVFj?8-upP!iAo%PC@f10~`B6!CtMcUO9>hUV
z45FSGlb+L64<*Q=*@jf~6r#7&h^}I1?V`E80V8~$1TJuzCf|TZw79U}=b~4JG5hwm
zs<d-&VVP_<4m+NB#4U+7?JjrJfR8r0?$t6r4}Gm!!I~}U8CeZYcyrcfbbYHk)WN!V
zF7K`FF~}$AhMVk%OBqM8bA9I(w1v1}piepZlXk+@Ofs18oCk%s<jD<6GKv8*4EjQC
zp`c@0=xEc&Go{wr@6GkV0(<kp4|J*E-m3I6QaKx<!`AKbrzFWc-L6OVMBCelF9B<h
z+A)}$+SY0^>x^rUz9tBu2JTCGz6K)AIt0EOjpAy|I&IVxnJ$`?9|JywG$Slf>VGJM
z;C0%d!sPa+^8s%U1L9ffBWkUoF0(+DsJj7A7H&GU??<+`R$cTD<l<9s&B#B6ITlSb
zxWjEF<2oJPUYvfp40pfzg~Fx(5u~nsXf?n!M>Q}xrhqY7XfcuCr%UZUj<6LQ6sXEb
zIdx|%8M+6{coDZ1OYZP?uwl)^W;%KFy=eLh6-|GZ;R_xI$ajVVCGQ$>MZF8<)iYd}
z^154RBNDW2hpOhD|2BQdkBUK&PS-~AjP6(RLHW0EHve2)$_+?L>>zD~B)KZ~Jerhv
zIYYH}_{IK}UfHt<&bLCG3J3nScW(!HKd;8iBA}S5NB;p{yu*mSn&Pcy09XL*vSpX*
zS%QdT)zkOaQfffH^C`JOTz|%~ol>`?e9c(F8P)J%YrbV#wxrf>A?d=(V$uBt_0B=}
zK=?F0v9WcZ(md(oqqmU&{r)5}4(8c%3F|qsRVT2WwA(<lWF2VZax-(RTP$%Al0<Y;
zL|=)&#ms-Sn=%tzN%|V2Y1i1b&4sOug2Ooh2;Uy<iU8EOp1TPpoGw^#I)>WjLwlDy
zQbB6@HJuB`ZN8S92-5~dk%i0)WX5AM0|xRt%3H%#3MvmLfCGA>#|R;BquT^XaRKfl
zh!2&U<0|n*|J8E(BKyij#mh8;p$t4BNP3kuC(C6qt3YxdKcBX@i9x3w2DN<|w&C^`
z7jVrqu8|xG>~SjB2{8nu(L$0Tj9#`k&<$ZV5IrbaCpaLh(`>#mL!KExBM=JaPG^{e
z_=lu&Y(Z?|E%w>!o=9jXh{jc5k~eom#mfbBC68kjW;g-@N*n~G25tnQZc^9m@EdyS
zgp(t47ML<hY85HIo*#ar@1wfd8xOXpqtsMorIxRkx8Eq0V&x-Y8b$Jx(0KKf`fLIg
zW8JU9C1=ZuiAYuc*zwajN_-if1HGfGC^X#*^&IG8L!Gv_7;mC^75|uF2Z&s3Q_?tG
zX_%DX;1>okZYM4|)y%>9GNWk1khCdobG$h9>|Y$B%bD|hYzGVNg+_`ZAJfX?Ii_|X
z`RAiu4(kC^4V$0XwSY><VZ@vZHlHrw9yDYRDCPes2Vl9!bbbJTltPUooFs2CYCBMK
z==B8VAZ|9$7_p#a<U68jqK5jg*D%3rK$lNk=x+TiXpMU&tA33HwH}UnZrBF$2?>x5
z?O5YQnOCE>Z0pYk>kU03+f9>2G2Yniz3WNYQ4PA^Y(k|Jqo{kU%6Cw`<$ZWAdJtww
ze3?!&j|KhN2_N3Z0#TkYnx;_csx;|i@>K7hCyMd&0XuOLdoNGYE2i`Nw8NZIS#?Fl
zoJ>4bu28!_A#a+%Q*=DB=vY~RoS$J&VdIj~mG*5n61}t>LJS#ZKc*N?uDL;;9}PYy
zWFI84a+ajxuf$okBdxD_E$TG%uH3J)%AEtdA)H4g2lkazuD;BLpF`uwhL-y25>%dK
zg}v-!rCeq?exu^<@BlH(UGeOFId$_YL;hN-um#A3jjub(rhCd2K>TowRi?x=rJ1=<
zUPo#QR>wKcK}pk+CR<}gGgzB!l_KwnSY0v?#+TyIZUcZB$289R2Xi%Ruzs^fH&xO&
z#t|{p<eic`Y~MCg*GBn<QjDqY)M}QLOKrjWt1+Kt&)ECKB+e>MU#FN$><$>k8zpJd
zl70M`w_E3q^5_&^utum|o9N-@7`rw)cl>=wGR@SJM3g=cw#Gq7uSM-xzx$j3QuOHB
zd`BgbO_WwYQ9tj)mXE!oo`!0rHq5pwpVZ+n<SWcT>U+gz1HDu3f{rBijAlju1764U
z{w~`wviP<ZsdFdAlSyoRVp^?QNripxf^4pc-sxaCDOz7@<kES5O_V;lTjB4<aG8D?
zL{5>E@9F0l08gmW+}^^}dWr~g4%{@%8pIF-Q=ia0Ff0Zu+svJq%LhOu>?@txn?r=9
zcqpCp|3q3&wZFHd5hU}ZsZvrM?8FA*n#8fW4?ZoxfK#V@OUC^Ez9y}mGeTx}le^^s
z&uqa~sm@4xlQX+_({IJ-))^(RaqyM5<`?T|N3qR`p+0!VDJqU|HL(;U3UAt46oNnb
zDnq*(m+DeRec{%`H!}i*pE<B+5o{+ZBBu_SHBlN~R>f1VVn>=>QxYs|oZtAG3z5j6
zJTys^N57Q~E!ekjZeM?QR?vk=tVO?kQSp2ZCl$_pnZe?*Z47!>w3J?lv6`ij8Jd1O
zP1eWA^T=oHsaf^-JYw=u*XukED}tsJpzn!>9=9NaA1y<PBoH{f^4w#)L#bp>GX8~^
zeVS{>xgd>0M2hDQ9LK32HV+r8sJC?w3kA{dYYo;EO%sY6z`qzbTrj%!K&Wblw`q^}
zPRjb;+7aT;9@8i5Y&IhnsIW2nCykqpi8TAX=q2Ozo!O6eUUOwRE#VIJE<Fh1&0^8S
zJ0+>~KN9H_<**Bv{I8c;_he!?1~UhT{njJ<5@zAc76_GN<p?*D^jTMq$vYoXhnVDN
zNfm%L?t|g*)b$$WcH+_JkNl4LN0^APIVs}tk&RA$Y=gsZLrW<?Dpr|wL+F5JU!Jbt
zrsqKOxIc5>ZP27ktiZ_lX;0iVU_$Sw>1wL*p+x*{E<E(0o#Sm&A|0RD?Z^(@O0+Mw
z(O;JLx%&#-8N-SPXG_US$YY4QoDmhp?DNw~9n3knq`t}L=Qx6)aW)%1HBBI0LI%f2
z4(nQ95^O?40b$$e`*9BICS#0U5EU@eibBWaAaFBG%Tw}Mq9$0(cz5u4!m`bJ2YUnD
zcZZP4+;omMnGOPyDRK+ACG{lCK7W&n(ZoQ~E~5o)O8)_JZ$G9-3V7&gqUaZuR5n|C
zO4*(CEpgegqf3e6QA!7gRFV$N%L`otOsWyY@f*vDwxJ56{W88TgZRSa-FH~zQE0Y&
znpmqu)j)XQ`$WpNj-IsN6ILvbQIsHbIxkyXx0!*KbR`nG`ooQ-B8ey>^jyBJcL>qp
zLc-EP229ay^J8@1j*rFr)YcpT%n~*+__TF5v2pgjQ3I#j5Gip^w1|c@((tl0;{7|=
z1df+&3QU*bk!$C&=|XjMkD*g1(MXic%tz9LrtgGez)p-5xtC9=jf=lsqSne1fO|Jq
zZXrdeRgm!FNtCt&S!zG3O&}$}|J!PQ4*eacnt}eUPxSp$2mF;82c(uxMhQoa51sZB
z$Qw;SDzn=&!&0$rQ4-*8Yw_fUl4j4PBA~fagVt?>FiTneO0Dtk#j{yqCnc3HMckz{
zXg3j?v9~s|l3Qw{1E(3bZYOO_*`@uB7W*u}YXKN>KXNDO#^z;Y_a&_2;R6~;XP}MT
z=i>HT##>$C@J1VAEK0A-%%h*uI@rxCxv~Xss)Ro^Fch!Rab{#AUrFTvp3nhg-PzX_
zvuQu+JH9YeoO<P=79idxWc<oWC_rKko=Uv1-}D&e!c--EfEQk<MQu>y)P|{nU+n}*
zqES_r30jH%>O5L4O)LhJJ@0I^Qfevzx2cD!TWoba-+h!bwplt!g%-Aw{|Uk7l7YMK
z^<k3WEo|UhHE*NT0?Hr|XVAgwoWvk9s|oG|I|1}QQ^0O<Ebn?WougBM%7uMI1!(`a
zg>@fK6^AqdlKNPAfKkbqb-Y~`5BxLk&86>d24Pz%9z2=-gK?+Y`jelm619i%B#~|F
zy5X?zHbkg#Aqt$qO-&QwDZ)sDY7@iE3?tz3)Yf?Nl#7jV;{`S~W`Aqa$%9*MR(RF{
zBGHD$P+uKQtBKau09u74sQ(eP(Px!y^eWgK_T^oAnRT;`5e$<*JF<WeHw4}zT)r0l
z-K``)CtpPe8@WmNMp!2F_RWvfO(t9tOSbTrmq|2VWKHY2GMmprFV=mI`EepbG4p4A
zIc!%1)Y|TJ0ng)@uWdHAC3g$iMsEy)>W!@Ot)4V<J*1s+s}u^RN3_4Wn9g45pKsYh
z+dq3b8OCM9of05)tQPPIsu>MyIVDuv9kU6sRxeEDl&iMPt+6lk%iXE)DLq_Oz^04E
zE1tU2>Y|}^QPW}vs8=v3@)k;uC-ogH;LvXYLZo2-*#jGKXfii<Qfh`<$2P?`6wTN_
zs=o_N*qy|lD2?=cKdv@Y-s+gVa_`e|ANTV*+X41|I&-%QJ;dA0mwS#poOj(`+!Fkv
zt!nr_YeFn(fQi=+zskm8gx0d1roS%={kE2<3eD4m;HftXHLKwWz!doK<#pfZHG4;6
z|M6a$K(#PUZ2$&STzX*~>gSiU9h0*B$7oX1i^S^#dZ%x1Xv(CbjT+l%Po^X`?F1Xv
zmlnLLbsfmhV?#<5C|&lnq-;ALc~rEfKf+iMbBNaT_3JDEb0s)HFsm$Nwa=AW(4PG;
zuem}rgH5n4`}uf%X~cBW!DB;n*|EKScqrlxfJOA>lvx1f^N@451#U`>;PgjlbM{rn
zXZ@7>egL|gnhr|Do-HYN;?X*V1jmNsy@ume`XCyBI0nf(K!S~(#$C_=HEg%N2B%-R
z#`rq7*k33$SvGqPq#gNVgHL`b>7XQYF29WLC>aD7jnsC%&s0DXf1>GKG0577!uHSn
zUDJMjl!L2YDqa1eQ$&-z5rXpxNDMmSxQ9?l@-Sh0RxB71Dg0*b<X%(^KzsT8WwY>F
zaa73$eZO@wL~RNN*;<?&5idY+zj{kx<APlpR#D*yT+Bp>uVRzb@F{qp*)2^#;LH(N
z&g*kPTWwj5W%2nQTx<lgKl`WI3y|4@u8HpQ7B<NyJwdJJD#Z}Kgxk%HdK;QHkjl17
z-#4KnP1+k)^c#NBpyJ@K(>A&NT`@LK@bQ6e+B`40bL>(k!8uN)A&<5$=C;=#3NEj6
z8?zrnjwh=yRm3W@BT3j_g3<eRzNZHv^Q2VDCqYwRhDfZkpb2itwXjd$2DjCW_75!`
z_tQ`=@f6I<Y4JConJR7RZsE<6fZGIG-n<=-a5Mhcmr<{oP-?JaRfyY?@e+6U(>DYh
zKX#={*HKl;jt~w7tAq-))21Yq%`l}n^0Wm<ipaFV#L=mesGb8?(HQ3gHmi&H`qG4X
z3+ZxTWoMOeiCwAR#?yK@bXGf}l##QqjV*6M8UG2UoB3iTMC&5Q{D={gSsQ7mT-N_N
zDpAS@b9b;Sy>K-_C!d56xoEqz9jUZ$<dkQ&;nvwXylzDW|Cr0IGI|@?2VclfwV$69
zuZrH!Se9u66<>Q~J$KP#Pg!SuUFc>yvSqZhn){UvJnLieO&<A&(|Evy2}$wfgceQ)
z#^(e$6q2wD%vGCsUZ@WL)=T;n!#3FKWHmorSK;z`-L{;Lozpzjg+@1hn>s7KW605E
zy2|$?Y<{dqe?aay85U^(_F0{!>Z_Fns<-J6ZS6c014vZAhc?A!l-|7}G<=hQ{|W{f
z?6ty7QF_ZOIc~gjbA@11;UHWo*C*EBuSb9+$dm_)H+uNU={$6wic-h&I#~N91sR2S
z3R3??S?Sjnzh$Azgh<QbnNFK$_Rs7x+Z@zh(19b@)$Vq9PYHHTz_=$9CM0-H=@<AM
z558}Qo8E)^6>#P>s^fdtaP+?}Gh1Y=COw(&9{AV@Yp#XbP#7i$u0?t6?AsI7JS$^p
z-=3Lnwge>g5Zi(6I3+JbtcLv(FZ-T21h0h2-<yqhY-&LulN%ABTDVqaMvRl>z5_Sn
z8!Q<#kZ{i=E2Y_5(j}^{PaAzu!<i77s#^jus8|iRS5{&1IWxEJl|W!RDb&Lv?U1#O
zo|&o|1Uvg(ET<@&>(eRD`xVxuhh5?{S?4WIee7DPe4VJ(M!@zCYJK@6_2{6tnuJ|y
zQcz<cRcFlzv9RnDCmbm`s!2jX6H&ws%%i`q{KDa`ZyVWU5}8L+)jnb<rw~kZ@l~MG
zL-^rQno%KrOc5v0f9ocI0Kn`Z;u6bGU_e*DgQK(@R(CdsCj#?dG3Y(q7aH`g6$io=
zt}5?(w*%ECqHQbBzrQya-4Q)_i|7Nv>J0>mW+C)-R5P%?7O9ic<22U`FqGnq#Jt2K
zwq|%=O^kZc)a9E9XzQcq-0|tk2H4}cWAomTac_KdsuvI3Y2hUOcv$cxX0W6j!k_CR
z+;px~e?Cp`hcKR~b=*Y>CzYl$O=9e9*~b7<<>hS|BtP(I@v^4qlzQToJNdEv=ZYlM
zJkOun^NvVa{MeTk5GCPY9L^lG?mn6qhc@>pfwS%TC}(&o*Q<?M;7zOVYMij)X<EvP
z_k#kHPY>ty5AJd>*_T<$3CZl4JS8qRuP<TuLPNu5)Q#>oM@}n@<iM<!hpQy`s84UY
z=BbTEQ2Pr%#$ds5DH2`t0w(=aKtqNB*Iwu&E`sTO-c&d6(WF5lYQ`0kTtH$ci|~KU
zSiy_3o&650;$#pA0*h?F^#!iYVr&&mwqf=;Rl{8*mD)CI55XHrPIu={-(RMKp7QWQ
zT`P}Y4c-9~eLm_jkpw2@$~gF-SDR7V-usRI70?u+5=r_`M>W=UHomi(cB3QwoKk*I
zQ=}!{wQ?KCL2rJZ7OHmbk3yuZjW3KiQq0VR6PRoTm{e2P^_{91Ot%}w?r6g?QdWH_
zZgA;V0gQ6QC`Jcb9@k8h1l1dD_Xvp`wu%^+6o=G$yUGmG2}{kw^t;c+Bmo9&XH?wA
zh-6X)xw1<j-lu*%$s`fIHIA9OnH!5H$zp*^e}|8d3FGhs$`6>te5N4<YrGhtQv`Ly
zqZbkwW58~-);jh?m5DdfN7f3LslVmyTcP-3)--9q{BEj<?!egfpaZ06x0|dvoR_4P
zTjHczK&4gRh8d1s&=iDYD>8?7L~m}0*<Qy|f!)SlE_1E~spF#ZmV@UB5o_r*g3j_j
z`&llTeHzfrE-z0B&iHVf<kWRrSx;QBoK+u^^ZrTSKtWdeykUA6!1g32-%5(toHn@S
zHVGDW6{LtQTVAT^8|?d6<CmkA#vL5UNFv81Uk#C>Ju<-FGRD6d>aMr!>U6rTdR5*h
zV-qE|0KLeigFqjOGGME11=Le}#N7^eba~@GzS?0le%glxM-;1?Hu$IrHx?Y@r;T{r
zW~!pVCUDzdW~Mg+^RS67*j3uEUR}w(?Yk)UPaPx+jltNwlbhR;>RdC&7fm3aOkwQ7
znQ0U$W_JP<JWPuPZirm-cfwBc87(0_bdxQQ-FRewto>~8c98})60(55wR`^qGmcx5
z8<Ju@%s2KX#d$N|v9=R+p@`UJY_t=51`q{vR3C)>v^Iq+&=$pQ%1vyQ<-eE_Bu+H7
zzrar?CGSaF7UGXhgteH3Jp3YX1(nA<D`!X5)4y6N&fSSUfHz?3_h%cNdv+7&+6kU<
z>Ty`rCOM4jC|#m-r*sgg)hrE5-zS6Tn*T6f&C5zsaT%ZJ{*Ent6V!@5(xO1!!ir^t
z?4(m^GLgyL^|H*h`U7kb7Ym&IQS<sgT>ERF(tg<R-Q<FV^y%N*`=Kg7$HH<8i&<jC
zRr+t0t1iciEgXX_r`1Tv^0N@|UkzU>+m99)ACwuN=rThcG0&bg{11qrw)B0LNdxY4
zrC!C_9c<Cn-(|P|8_|?x*Lsi6EnC><8fvS+thf!iKWhg6js1W9$rdNAUb0Snkx+l+
zVC(4ms{s68U;mBZg211@1UGt^R617wUlDDvHJC;14wMr*GB)==VT?RDvFpi(gCtv_
zz{wu@yY&+i<*q6zq-6ga?{_U`z4#~*U8AUJ?6KA8-bsG^;r|~t7fe(Yv!36C#pCH!
zcVp>qa4r8|^ta*3uJ|kqU%w#d8z@Hgj<Z`Bna?Pi9t->r03sQWNJh`WNN_Jo==ue?
z&&`+5p%{V1{Ev>f{TCVil>c+OATp5!at$BY(?u98TLX@nN9X_+mg+w$GyN`F{@XSE
zO(a3rAN&)$IXF=BHQn(uwys3q(kk))%bTGjt`PS{7zv+7^~Hh<MS!?d*#BaP4BpIF
zgfhh1Rgz?*z2zt#(pB6@eciCmJ?M8Kajdf6OAFM)*P9&E)hU^lO(<S?s#7$rs8dSw
zXK~NjP1UfqOK8|{)4^7cQ+Ax}8V*-bgiH>BMfu$&cAe`Lm*r2e$x|5*(7wlsXQIa6
z0ZjJ43MSr*Y%Qox?FpuA?5oh8?dh#H$oo|4b}d+EW5Orsa6?l2>^SXD^r3FzE0SmO
zw|`sLkN(s-f)Xa~@YWmM_rK2sn<XR1sLmi|MRdqrK{UcYA<4518h@d4)t9liQ@rMQ
z0SWKdcdskbua#RUcE~efeS9X#{1_D-t4dP156K|@n`L0#N<SW!Y_>|Oer2_xOW3k2
z(Z%*h;#C*QD|9=?60U_Be0ea_zky3_<60}m4f?{}qO~(&L!S*^B)(uaaM=HF9fw%~
zSEco{&&Nyn#9uOB<4$Idl}d@b`G8gJYqjfZnq;4Qh=Bdi`gr0-6uBcDdXTRMnAsdH
zDq&LOFNTrjG2r%Cr1!tr^+^_8$Fs5Bpit`jIC5V}7k*z!XXie^55i1xWM|%!sQkB%
z?hoA}DtgguxR8peIfHAP&(S>2s`|RV;-go^+k0!fK4t;JIA@Yjh=k>$-4ZhEZwkR%
z&dzGqaMA9+B}JB}ipyD?zB;c5i#hE>juN~!AY=twMnVCC2tc;eG3!XqXvNElCH?<Q
z23Q1{0&b+r)(V`|BylZa?GRbpd+OROo<^6fa$?QOT!4h(R1`u`h;JsZ!tfG{_1QvD
z4h4Ol?P>TZ*6ClBknXFi;OXm&^~}<PiWmH9*=?$!8eh*X{qnCk7hJ!Rm{7&R_xBrF
zuvPDP>gU8p7d{AXO=JtRvyv91w;YT<oTOh(SP<;VPZ5ARys0M*I0%{i@@M3aiR@CF
z3P94Dy2MSwC;`24tE~zFu;8>D6I9e_LcmcoVV~t!m8YMQ!`6#iadyfVA6Rh>;*p!^
zL*Nc?k!m5&We4?Fh%0oEu@`wr81LEEYObBVZ5+PR`ZG`l;HXeS=n8=AH#f%>OxHeV
zS?r92^yzzyUNNlkeSKr+09RGIS23ggZ-Ohp*6BE@%z-f61%ea`-zU&m8iR#a?_j3m
z2mAP@b(=3H`doa+po9I-N!GbD*o_+9W9jC7&xU{ZLzeddw{XId2{9-sXP4$DBRvPT
zwcRMzW6E}lu972gp?Vzfm+@llI8PsUZG1A#uc~~Hx#CI6s&hR9pwqD|bNDsTbDWsZ
z1gVh~<gqWOdvz!+kONyHM}O?Asna-aQO8Zw54_z!TMBx|w7XC=YGHKH>RGt_PO!rw
zR<cwf_iP-lLwNmHv7I051?ikyJUNZjAb*xosnh%4$8`mkDAabnvYOHh7luQD39&?1
zjuTr7uk7;s3baD!#z<9&%aqm~N1E+O|2Bs_X9>zFtcg#K*e+kl$W+zWZ~Pi)ECMr_
zsr(p6@|UGyZMovs3#?;n5`(MgRlIb0k*w8}0}&CxoD&~VV5YTe@VuSs4e$dWYG379
z#h+45e&V_~a$4biD!VZ^q}SlFQ6l6|?)mPw?Mma5pExf}j%{>(^DLd-^muGB8Zf8`
zFfwnP488u>Y6#o?Cy8r+juV4=#+ZQTCH@trU}kGOEz*O{**`&pR?FPpDlQ+fI~H0>
zT;sxI&zn~E-Av~+b3iTXF(<9@Yuk4dUO)P6Pcv_&&E3>|TsFt`eK9cHqgc?5?W2Ul
zt-TCUjHcGZg8JH*Q0L?pdwLt&XQzaHg_g57ASOav7w*QBAO3M`&bX?n(XxJWi$zKQ
zC}p+Xgrz{}Xx>Z!Rj-Gu8wAd&dSacE&ON)4ws>b8S6tj+QKIqqBSZqF1T#iw=ZX?;
zWTyoEWj8a?txY+o-Z&B1*GAm=#{L9&IOdtJd-CksOu~dJpToj1zR%5_SwO{h(|GC3
z%Cmo9)otHOYq@0=8CGg0l)QMLq|22MU#M&0WUQGn<b<$ZbKQ<%ja|Y9HwUP`@)qE~
z+PwPkJkNeM?2JH-zf9{fv(eJ%eJom@P3nEA=ydNI?QhTeKxxwWzFkUmFR>ipCHTfR
z2H>$9kH)t=Z9w!EfJ;~6Yrl$4S9K?jStz(=OvcduXZpfkAMmV|cD1Ie>O1+uWlg7j
z0hDYL(yHK`umFDiqtdrlFw5Sa;w%I#8rbpt8q5CU_+|L*9Ng^R^-4dbUvoceR4__8
zU6`Y^5tosOXpRv}cPHOCRD%M&UstJq?Baffp?`F1`?r6)RH;uPw-kECW|r(M!mgt+
zU{Ro4n0F}9(Q+X1>hs&)AFt!6{4q87x5^fj(w`34AH3ZeW*<3AP#AR?9-YkpR5qG3
zJZjJju9VXU^&{?T{$pZ3BjV6tY(r^}dF65;(*Lk_ySvoS!C87lna*OOm3zNqRobET
zg@n}8&>+9fI|zE4vPZw>^tjYO+qKn)CzYGkkTes<SRe4QD<al}I{P1{>_Psbu%be@
zdUIJ@M@SXBPAXWPeDMw(r+TtJ=?UoU_KVb`*JY;qsxwm-<NL}kXq&Sok?wfRqd%u~
z@Jw`9>Zj~JnNuhn3Jw~;dWmH}uVZV9$?F|7O3prs&8H0DFXh{;0qCbRTi*0Bdb)Hm
zxZra|N5c|u-gGD%h`rhDVdnMg*Mjetl$12wQJ-AUy*>GqP%ek%rJT!nwJ;v4wx-%t
zhD^>^TH05Q@%4v{(}83Q<29AF>J^p!wdRX)vzc^*fCE=Vn%kfR6`u5!|2)ATrSX9C
zZ0>1&OsbV`KC_+c2Gh|nI!Uf|=)UQEl}TSj)Q!J>Z>wx-uYcpn{r2gx|Ea%k-LVA-
zlw6-ls&RXe63NUWJkpV0dUAlb6ny1c;NPA)X0k=hot?ivdd(4(liw-6l!P!rKj=E6
zG<hrDQF=nI=VF0E-=MpKL-zN_S?NlzRP8J0tG{TLjSGB%hAJ$_3o3vyXB48thgIwV
z-){-yOV4*bK}(wtMdILRTC^d5>mS?kSk#p`VD)l%uFTJ|w?4(Qk{dcynXH(ccUW;2
z@4$HK$*fyDKe{tAZ==#AIWE39tat%2&eD-nR~?E8cF<mbg!@mz@;Gr$&I>tZ#7S}Q
zU%7ld@AH@+z<M(K&Fq?ttGP;KX+(<Ir-V)PtE+YlKni;r#E(EgoyK)|@Mr(Wm0E-Q
zcSw$Zk@H(1{>*{n9sujmq@OL`H<iL26^=HQn>V))^<raR!PN>N+>@ni+C=nMsZBkD
zB|d+OdbB}sd-0F<$<jstlu4F{p^qf+{=vX2LDJ;cKHMhz`hbD+_ZLC>6iE;lGLZ*s
zdxs0W)vASD<mz$cY%H%-qDgy;BDOye{zHJTiE&<FLi<vmO8lg^J*0JvM1qygRmcEl
z^s?|e`ytb9V2!Ui3&-DH3sku#eQF&`75eg*It0q&#*WTtRhbiX*9X-qM7xCSfHnKI
z!q@SQ%GK}xChZ54ui@aTV?tY%o>2bOz4oNmF+nH`o8w(pcN)}uL^bPM{6mFJkPxTX
zJCa}Q|H(2Ll`Fk1p8_OUXn&DX$H23g7&eyI)-sg~`!j0zzPg=HT@SRO?_EU(GFQsp
zh(Lk*Kjwh#u00j2DvM~0hTl(;8gJD(>d{s^xUjRMEZ#Z2n}3JUH)c##+|cxOc%HfC
zkrwn%Rl|FSeLv{ITlZgP)2fJTp7=y_aI8>-xcsA?ouv-;l+ZPe61e`d!D)WzDc3Jq
z|IndDthTr80*>=Uevlt1ajh&8))nDR5?yaNN0)F%FB3Q8={Y%ybX(=7WtF85Yn)6@
zug{?Z0>;sImFQnepNIFL73cTZ?kf-}D~ZKgIbtGdW9WAUOo%CgimdUYz`VLLb_xHH
zmRDO{EoHd78Vk3HzZR`LR|{Gi#H~;u|NZ_C6;;0WNV#N@{I`^)0pv*#pKI)>wLQ<U
zoKCXUjK@A8#aAgChqD_t9n<8yK3wt${lv$a;ty73^fNF50I7nii4BH-8qyUU5LQ#x
zDVU!8valf0`#cT+r+04xKEyjv8GusvDcP5qMmw4({rZ*sNjwpPQSpHkJ~ZEWOEy%D
z#~x>{=NEmqN%3+Gv$<`E_s_=5-eaYakST{<cK*<lZx4g0x5Q$|J*4Cwl`JwBdGutm
z^yyIx$FF5`9hbXn4_i5Y?|=|;uM%f@(<rPc<TY%Fv#lT29!y7Pvw(($&Vm!bcf=4&
zzb*EckUyysNuTQG*2Pf&;?4JK%Cl3!4<3Lka$pWc3K7HeMCX~G--N=@0%Av_R~UCb
zJ=>a9zb$CpY55>mPdO$>p7prZQQzB9BXD1u@9!#s{k!_lE2}1)I7=?SjAS>pb!9w~
zMRd_P!_$vcEr+r**+WLd^TU$&hqXiB2>$YyIHX&>QE~tBF1DApq5ts7Z-c?|qEYvY
z*2}CtT0c>C^hbby0eJZ4M@`AZ1nZ_id?DL+WP|@u?m#qll-3tsZ|?r|<#=L2{0VZy
zyH=C24`1G)s;<uI)Q+RAK^RCgyMnTr)!54fxc|KQyStwPAUnkS91MBQa{m{jrV;}~
ztiX|$mUD(Rhg&ag1aC8f&;*i7jQ9uNhh^#$)<Ut_j{i_X`^VTBVYZ3w_U#`Zx9Z?o
zWv6$n0$x+PqP=BEi9;T+Z$M;MS1VsRf*#(ndY%36_Z3<-UA}~gt6ThHXWqRath(w=
z3rBOJ!zQ^HO4Sl$KXWj#rOQ;J;QM!Ju=nWxgMjvrSe-IEozbxQ(LhijMN)k}y}_wO
z|LiG_TBC0;NJFpZcFL@i){#LS?mvfr1y>vI(|O^`pohO@32Ke2D!DCJ`C{XkwC1F;
z&O|%lvupRCDWh9d7sT(F|J`>?V5h9&qX%;7zg%%}Yqnr9tB|8;j4LrarU;pd5@WR-
zedP(d2*o#e{!jCjzHf@{ocIsLKk<H0MRo^oN7YW2<kbV#C}4TINmGu8&MS5iZ-(e_
zzn1P(mjA+h*^hza3D+5jNaBAQ>$S(Y$Hi*dQ+Y&9AG&Xs03IqapRn~xsse=^RQ!??
zqS%Qa&*bs_b{IcBrF0<H-l^_?P$2lh*85M0-m64p?)0h@9X5h$@7$T>i-n`sw01JA
zUoF<l-B}M^`IiLS1FwM5VQorJDSv)pD{HEQr$X<CFZammVDz5d$Kb(1mbmUwKM?qH
z)`1OXR~!U-{NxwI|5{w^%3}41JJ6ZtClxn{lwt0Y2B*+v&he2M_Ae8F-iYTqhdfX*
zk&cn350Cyeh8N_4``jERVr)O>A5%rsv$b2>b_k7yu%rdjF}ct$(J+JOpXbz~!8;_+
zD-;O-p+Z=xzQ>A!pS<m-qnAFpl~iwbpH;(6Z{wJ%kG+(IUQ2KKdCKH5Y2Se?!N2^0
znHtuR%Pxqn{NU$nUaU*=Ba@R*Sox#-os=EwiQH*a+<uQh?%*a5Q&hpfW`!|c96S7U
z(UKb#SAV%m&^2Y)R1|FtzsL?r(SF3?M)F;GO`W~#5Ud()dI_rHlKyK!7bs0~>Fypo
zd*Apms@5>P9iwzvqP^H>F3P4kCPmeP>Oxu~sKeAz)K$9!nazLEfB#zs)`E7Xzuo-7
zROvjjq$=^ZFYm(SZu7>(2Ryr@YbRX#4aFnTbSU^)Z}q=ufOP9a9F`05r8bqHQZ=AR
z+V$ZO+;(P{dvrNTS9@rTOpiFxIk<6r#;!Fd)<Vbrr9;xK!q_#&X%|uXPYc_AV!HiN
zVKdoR5H;iXhBnGG;f_%z)+PCUysktw6dZ8+UyMPzRqe73q8r0M8xKxvJ&dH%c=E;2
zxUDufhfzB(khb^0J#B3$Hh=oRz5glf(it#35-0d+j}~~~ob;YiKYBAzKu8g1vS#m{
z(9&4V{VUK7VCziN2ho2j;s0k{yP4WLR@HV}?qF)fDK1A&<HhQ_`oemAaPH`~@hm5l
z`0c-RA@E<O_$i90Us=ggjuv&86~Q^EmwB=Gk}lT9aZ~iaXyJV_X<Q8)<-W=62T$Ms
zG0gDb!Dm9J^pnh|?>_&z2f=YV(x5Zxi}c3IK2zmWT%p(8qVvk0WNlNEKb4aK@O-aZ
z!rz!~M!QxI4laT##PE`q<-i1sP9n-`4tocmD{9#oZ>mkKEem-ZCOZy)Be)hQEkP~~
z(u>}Wsb<AFOa#AhzJ(|KDT4@41!z;hYGP|^tE{Nl%X24B{y^wm8|ezbP@?6E#gEmw
z<gIUQZ)KxS#1M&lNFyt&wLu#jn@&lI_X<IbJPzi>#$V0Z*v}o!J57{LDTK4ZLj=Zc
zUQAF`^q6z^h}L0p!jjw)b{uyoz6DggseFMAI=>uJ$QUwNlE+SJrq;M~Y7_PEZIbt$
z4!;lQx`dW2Qt?H_1A06Icv-|QMfM7>&Zuv3nQ^Y9d2ikeRy<T<?!*w(Q%IxX-rijF
zzA>CO>It#i5=Y!U@%R%Ntn23-kS`bDHd^}5@4@4I4fj47A70(yZM(D1IcrFmB)^5R
zU9%1z+Ol~`e(jR3TY1FP{6oDh3XUJTUD|S8m|?RIxD@VO8fS3um0FL~y5iJ6Tqrr0
zx}N%Nwz%sq$M3uq?FBM8(ctnN6AGn5@DM}ByhQj2u}L-+Vf>2}U2SaFg)hEc!;`-M
zg~%CHAB*az{?7mST+TpC;xKW-S*`%vuZ%(~8#TXaZ;M9O(@1kiw>mAvCUHx4_Mf)1
zHJpNub4g3f%j2AUd?ShSw|@9PT-8rSMena)zdi>4KAcqrya?#+qX@wVwR<{dTXPuH
zD8~g}t7dfWs$jXhu<h&mq<<+}e^N*!dN6`9SC*J1>l>@iS^DlD!hynQIRDio!H<`d
zP>?TUD|(e-VF!ajAz+1*!S~$^$aZU6Uca}An0zN2EImbbjfuK)qPJzSBit)GDk>l<
zKEQmgSq366;d}TAgGP-8;#|!$sC696(|G7L>~ilX-=rNKxg21SbnLC0N?Q}fS;Ypm
z`$g)<{4%Et!i<cJwcI8Ue*^XBtpTCVL;Y3dhT9_c8|$Oen$W_$v~L^D#2enj4-dxz
zvjo+;TbKbG{PQ{2g1YWeV=ulY%Ol0DzWpluE6uxzi0;pWMbWiX=RRj6CbC^OFvoAm
zvF`Rcv$_eNRdF0poZO9BxFOobL-}55t=(kQfF#OZ^q`+V-{)X$+%A$GD~9`~4{@<q
zvmC-}VI#UG067#A?xwr{QU_Png1yyxPOjC10+)YeV6pIED%S)U+ZfcC&B7=id1A?y
zO}J4$))AyM<)^rCrVO}F_Ucf;`3AN@DqPHU0mD+)n{LzBoxw(%Z(Q}&S`C0i)T3u!
zfwWk)+KiGm>PZsR#H3^IfQ)?j;DNCjEmbnZ#&jjKk<V(pfctm#gk{^fP`!$}AHGdS
zM!M)ir^N7?Qwv%Mz1K~@(|dS}SU|W;TFY9;a_2hv*krEb-KQE+KK2`44V|kT)|JrC
zCprADJX?(Jtgn7-s+H8Dr^b!UAc(^H+HKWV`Jkr-^%<ys{vqobbmU~o`NEmf*QDy@
zh|4X0aBAQ<9~hP*Vmy>}^&yJhX+HA%mj(oK)`?kYRA{07$E5rEPn?XBCxa5lv~L5=
z{|{SV0Tt)cYzt%v9tavBz~BzS-QC@TI|K{v5Fof)aCdi?2=4Cg?r!hn<ox&Dckf$k
z7Aq?=4E=RiSMA!hs~gqm{zP}S=?*{Eea+K+zPlYAn;|9MYi9;BXr!>z2!80Oq3GTD
z*S=p$8AXw>zM^t(dVrbF0<NL<{l2kzro67t_k6q2EnmX7zmeus@Qlis@9Y%>3G7@=
zP-zsylj3vu2Zn4pW#!4lu)4bUM|p`llEB4+JY8K~*fwh)UoB2BnO|R@unoA7@)9uQ
zl&K3nbMrk86cehk!P(gWam;hu&wUd%Py2p@t8Pu#Z{ibV^ISdE+=5N}tmHiN69_>#
z;h<|^P-}vnvHZW`I~7$S(tAAfKj47<;UMLnNR0+R-M!CD20k$b3)1Yq)Hsb1O;X!<
z@+~+cJCMRaLlZ(HmnFe38`JG(cy(I-c#!p{IX(F9VY9wXQcD^?`t<cpjMS+i3d*cS
zqT!fa_K$`Rk%{J^<um2bHGfMC=gzh9B0G$?=kJt{O!6WBXOh;0J45-EhW$(on?@c#
zrT*}@)LyzujAHnGh2`r81f&meAj$4ai90p(?`_`@)(p-PV`2o6c`l=xV=AhA*n#Z=
z;cH6*riNPaetC*ZN-{5f7HGHCoRxu0uO>{&CL#w?EbT8lST_Ess~1*>T+fgIGv%II
z{$QN+Cbfux!`U+*6B#O86beY_eQn8CWi$2ZwpyR!Pkuvv^7ke=ezhCI$8iM~;BB1u
zu>N6tDtBsoE{+(9qg_22x8$f@x)b>_mdY;N|Dfh9Nia3FlnO*L&D-j5ykz8e2!Y%G
zLSS@(SdFup*?H%(LsONNFF?l22xPpI^R3(k$H0`Nf8)=I?!<pxYbw}AG&8CKh>VZZ
zsuzTh#C9{Udw(r4q8LcHCPVnGj0a(Dn$*howPen2He=-k&vuaTkAcbZCxygDcU=!A
z7w6SO%5pbOv1t4#SkO=!k&m5XlXF|hM=7Y?HN)AJA*fM$nIil!-ZFMLiM6kFMs71!
zIx@Lj{)i7;Yzwk<MS^{`6>ulW?Q%D(KD?VZRvSsAY9K2^L;@tACDvKm5w`+iG&t%$
zQ}`YTy?U^ds@-9i%3*-3U+Tj<S-NL8sH@cb2_-2hIsUJ~`1nLX&_@UheMihP9!MAq
zMk9A{-p!4`<Jvx4ZquSE7NQso$=n-x^27P#(L3Q@VPM(uc3MT2V_34Ihl0)KBkhOE
zu<16PifJ!Ro}qi`qja*-%#+C=y?;Wu3J4Vy)eN|J^zz}Pqor|3kAoz^@G1Ub&|9sm
zJ9-K3$E!&lJ*z5s0n6A7mdC}OII3NF_4uY8!njRP44R~W<i?cbc%Vz5|9$q=03T`7
z=7aK<uuz}VWN??KOPA2K0v42hcX!8okzvC;T^lLO9QpSx=kC${A^7>O<fiJ$i5bBu
zS4o<vM594n1dB#y!j-QE3TY3;m}mZYdqxM(AKXXBWKuH_mb5LmR-6X=cVL%q6;y$N
z>4D|Z{u$Wr?(R;bqHI@&vb^dQ#)QYeoZSkncnYOe0pTCz`l{~(tXyeTXNbv7uFxDr
zFC&V;q8fkMyLlT=vE=G@lJ+zIHnzcJ+O*&Cz1b>(nmG71Dfe-PViYH`%CAkk?^F^l
z2p$*rM(VjH(VGVBt9GYFxCro$`;q)IM$!}J9fw*QjK@agdnJrchw3p%f4QPgKBzQK
zN5z6?>*dzDJFuMb{@{dn!>MvU^NvW%M`<l@#_-frcn%^H`{)G?%`YN%KdgA^^5)uf
zvoo-^G?Uek(AW-`>T>g?lLQM=zlJ!4@caW>eXyVmXn|`<ErDCzGcFnM4qt3G%e7lR
zJ*mlcne><d?nyeOO&A?ur@>~hx73Eo8qXrt@>Ec1Ow2aRspT!loI4!vfSm)p9*J$A
zu4ZCu^S*xy9Fc+1M?Cws;jrI)%uH;>AR=5r7P#@z5+RQ!C+1vfZv2EOdC4@i&UK3F
z$^!6`$*{~hVv*CbRsXCS%4xJuZCav^TM>hkt^z(b{rVy+sQA^AtS*k_<$(nQldeXF
zX~^tu4qty&eO@Z9SO9M0EVSPlzL#RJXYh@QK{c=>?(geUXvoec>cF(s*EOaa35_+e
z<Hn}Z?}@-0Zid#H8~hNTkPt$TtB5Y53eOVy&61Fx|5;SC{)@z6O|J&7wPng_&=A3w
zzREsVh7ZVOWj0bd$DjG%N5AOj=@O)`A580hDGRNj=uqU)ma<ng9Xl6+u}n+v0&G4h
zCJ&am#$*V-xPHt4UHl*40wtLVTyJ|h#I_>u<<-u+r2mNYfUYZliDmck5j6Pf?S8&2
zKT;AJNqd`VV5x0NCNPu^Kv2S9KzbVuTHxTS@=H&=s2c?cURS+W#t_!G5aUm!T=_ac
zJ1o4uzP=l;rjrG@5cUdJPIeEVm*--H`vNg9Ki|zQSN3G@0P~A6)3@9EgNnUqF?<F3
z$d4Q`#~m+ThUlq*D3In-c`{EMk$kCjF|3Jl%Z@s*`F`$d1@eNAMmkM5@90!h^F);5
zXiFh8B<$V1^~`x8Wfx~nE&5ix9*#(?s0GbXP<%~JmfME=dpi|NRLfF#mfsnTepzYv
z95%C>uZ1gK2}DdbC!Foik4JboB?em+*5)B|pZe6C)8y0|kd8N=v_H_XKggI$*y)kz
z9nupT;=s+ld}K6vYW@8N=G`cHhKHc#OnKhrr30teV`Fpg=Y@K!BHa!zX6r@vkjTi2
zj9-K^oP?_-VSCw+8^f2(bZG+?;c7ar#%bsuk|qg!fBh141Dx~jm>5A>hoHayuvo;$
ztN;Y8@A^Z(Tl&ZIhf_7`^av3c+wzW#1%L`f6n4h6Pcnsbja<h=qcjpNZDRJJKG&~6
zGt2pdT8Ga`d9Kjxb~U_8)js@adZPkSA3@2@o^ZfZl!sPNY8~&SIqS$H3A$0!A3w-;
zN@uPWm|ncy$~gIOz>}{5ptYK1-Ow#)pD=R{15_c@=rxU|<Cr9mhTeLwC%5~<nh|ji
z`3#TqJ~}&FR85daG=p}W_hU|zsLj<(xi%LLr-PZ9f`FAYT&Yf5a{K*0HRr=&jm*i0
zfgW5CN4@$Zc78R86)hJt4wNesU$0^VO=3llRsS6Cjm8_9_Z`oAs|kw9#nOb9pERvM
z-nDk9DhS|CwNesUif|vKX|Z6Lae_yegfgqHm%J{=#EM7PE$QC8Mf5ozQB!9PGetLR
zgirIc9v%Gt`JlSD8$eVh+T#@~tzbjVo|l~r@BF)qofeAcKLK&-G8yc4zmlpbAPKx~
z_1*UJ62&o<1z}~N+IxS<!WeQ}F@0wUo5(>CiPFI?><HW#B|d$;7*TR^a@tj)fwio4
z*i)RZ)E7cYKoqG?_Ngr*lf1Tzx2l|)ODW)Uk{}t9Zi&Ego)vu`Q80%(BH6XV@GO}m
zqA?jzaLa3~)|H`=L1{}k`s3w~;8`)*sK3F|evNEXQ<E3v^L|ZfZ;Lgo8B{ngn<|-h
z0bh^ZDe9*K!0g_hJXB{JMKQdQQ^~&#5tKueB<V$8nX56Kz|!>)c)9U@5j$zS!B4Z7
zotpOm+(^z&x;xz|v_Ob}P$w4lg!x^M=BoZ9f3>Qc>+K-Z$fRr)@*5~uSJ!=J<u;r6
zPlZltYG)&SFUp=Y)2`jUpUhyz7w*po=()u9bC2R#e;_oL4kK`QZiuvw4}QKrn3-5_
zMVRAzAfn>oP25Hru4bnnh-JG@()^BM#*DgFh2^^)rzD$2CX?(h7I2W6&<YX5gr$QL
zY~6Ciy3^G1CO8nK8N}?n&G&K_*&dTvqqrAQTg$Aa8F4_3y5IB9(iL``?O*wYX{1S5
zRrKBj-V!H7#l_`nLhL`?T&&>9q_RgF=}Ty^OMFArOo)$HFfyuR(Vcp@?Rf^Z_Wh6@
z;Ij@AJ1AMm5kq#Y6MSO%7)S<b{;Bp9a3$lwjqbT=n$<gF^FFyH;SL}Y23eBPy`*@l
z)b^1yE;Xy5E}92mxt&F0BMJRa!C>m2lDH+v-K^@~BQYE1=BCwkD;2HZP6DT?p5qj!
zzqU(nb!qRdO}YySoROdWKJ@Hc`Sf;(=C1CoRdzBzS}k;~{!gdl#XTApYG<?6PG221
z3f;6`!E63`)hB0E0&<mi$pK%|gz^mjK6b0d$(2u-#!re-#_e<-ckvGSnaLuhCAvk|
zDHSyi-8gCJX}+CSU%x2ARhe!F&1bvc+>*KnKu&rfXZP_J=(zPlHb%uxBq$o(bN+mV
z<Rnu<AHH<6;$2a0-R$|`gj&Le?Yldkhv0ZLAK&bJQVu^*RaK=^!|rxTL910CR&Tvj
zY+ZexeamdN(%!b8a-JPZcV04>?H_k(bYGTB2^C1Oxfz-7e6sAY7JyZ}b)or*kEpk>
zj(HX}mmxs`+y9gV>}`0j;vH^PX{?-Ikk&upwo`?^#kh)g`iQRBo7E~8V#qmkT*tGz
zH)H?J<OBgqhNmNrb5Q4AtZZcR?T{?rlf!@{_zB}>+aj&~vTu9@nhM0pLz$>^N4^3N
z3kCyr(>-b<$)|dQdEr9p_5RZ}5PhG1nI7~;F_c9!xJL8uoMZ#>jM?Q>Z>Q;ue{l@J
zfWP-lc~Q>W7?4w8ups3a^Yb5L>3{m(8-!jM0ZSZ}nkv1~6X{%jP3`saC(dO&SE3Fo
zDmq%=VtYtQ4V#gy)_4FjM&=g`fk$S!*L;<s*wx}8K`@u)G)@2DphFX_>`a5zLcaAn
z*kiudobF~RO&rhoXE>04v}wjYJ>0~8(e=6`T>@(9BqgwKiNtjj)!+bRqZIEQ10(2y
z8pY~#w%&E$FNI5EWfySq?kSD`qnylvNOVM?#+kDnIOgKVcfl9Kt`+q9ORWQjbWa=A
z1ExGG6tlwz!6#Y{5RN4X#}ygi6(1}SGj7vC$){O*Ey=2{Ze#u!Z@RHFia~n}TC#hR
z`h}bFxpq-3{A<<OIGrIuHi*0L$2fQ*=shv#X`ys#`*U_GKP&;1_uYW5a)*d!xbc?m
z8G`%-c-o<1@v9U|SBCn>4^N1%;QVUu;x{ti50jf$4nf;_Nk!(2+<cFg@K1CR1#BC1
z6>sa^c1j85vw?xp5bn(BA2hkbft(hds~72hvJwV~poj?7L@l<jr+g~h`le9btg7>R
z=AmzN3ieXCM#E~=DEh0$z5?)-THTQ&hW2Uroqkt_c?RVP5+ED&ZWBn!BpWq@2CSv_
zBKg>O^sxQmIETZ2yU<T$Jh7h{&kmc=PjCIt1Hc-n!5rqET%waamo+R)j_^Lvcmha}
zWcnPnR-gt*r_;)twsG!(XW%B?XeD<{<#w&sWTgy5Yz-#uh?Bwng!bZ*;dz~Of$fd_
zCq}*`@$w{%%lVoO?hmp)Fz5ttV!y`bVj8qxQ}vEhV8i+QE9l(QD28AtN<(};uhe(=
z+`ArZ$>(w&cYSfoFV8m}79I4VQvKOrR06_QSeF<El>t80>_+wsRQplUaGU@v(#eG5
z_6O_cvu@m?%uN2gGa!|VkyZ+ijJyerVCE%C4f-X8K%V9hQ;ZmA-kyCK6aB=t;t>n*
zBt@d{*96YF?lxn!^N%I{NGGC1I!C{$uS<v#nFr@6B|#CXddDQdvZQ~LPK)s{g0BKm
zhDvu}kUy=HsHkE;Ud`yL42W?gfZ_R@*vz6l45w+huO^jbx3++H<kCw&S|+?nuf~Nm
zH@s4U$$N~qvWstcm{;C!zZ#;Xv%t|>t!nTPa~yKA8fWD#85O-gV2j<(^)hJ12-)f8
zRVvA;s+lS`BuED362y!-%ea#HnE<G|+)kG;gjd5>YQ-6z!zxqiUX|9&&qOI-IxCu3
z%px((9h*58lH7BJl8uyh55_olbtE&1;<>h6$@9m{dtcFe8_y_SB|(|eZRC&a{30SE
z`xgM^rutxX_YQdXvq|qw&}BxoM8{H=&}xs=<lvc{JnAQNLqn0KKT0QWCT!jsmmO(S
z7`~EJ%O^GYd4XZr?AT1?<UMydMp30QDXf>{QuJdz1m0h$V5B-;BE27l@DBafg3+|a
z34pbm8e@D`a2Q96YFdL`6XQq!Z1BDy;CCSMjG4+j5Mz|<phm|zZWitLfcz!D-SeTC
z_x{hhjE7<0*UcGi=QK>2s|*r&0Z*5gryFfi8j^PDE{qHhA_o#Ovf_wN0=Hel=39f4
z8f@b``yt&h=I;oYH1fDYR*ochh8zc_HIwn`T^(VV!cFQEU`(uJl^k|@0xqX7GO@qx
z2}Lul7V7C(80)*}*gScXPNjr&dN%|@BIkeRSG`oLo)sJ#Np)D7UB^7HW#7im=v}9S
zM{n=nAeFfgjqbwq8re$V@?R9>AHN+U;i;-dvuqX##VmTZs&l9lU>dr~bXr=<OuGCX
zGYp{LY^t|`@9>Iw6=MZzEGya)mR)!7VtB6r-=JJJcjece4N=;62>BGJs{mTI{f$)2
zUt_l+s-ob!+529z&H|(DX4!q;XPvsDRZ-@y(5{pB@)i8Fn=InDeE76`vex(v_u&CZ
zK(1b7_j5o|3=%A*@cv;%1pcu$a!FTY*8YoETLua*(^@vsjnrd^TKgMpKHLWhK3v#J
zO!3YP7Zcu{Q&tSoTApZ)tKSgBKL%O|#OVN3{(R9)n>yMqh6}LDc?&ijZS%^yw1id7
z6Oo%C^4ToX22%xhy|K3jd(Kx=YL=1Bhj$x-X>W}mvs#4L(UP`vp*6t5=rJY&`3_6&
zCvC%821pbWRgXwSg+W`{AdOUE8uHxI*I0$aX8i@UHjasF<Hp?qs6ymU+7fYCHuD(q
zZZ4)f4Ied^l;0^eG5SWJU*>YOsT=YQ;P3_1QRU<ztGUaen9*$E)dmY?!lm*P(`!^b
z#@Y|T%SVI@l;QySja9~?=ZB20CQrBz9T#E!qz}_HMpDQBP{MOJhjj)~4Adx7s@;=X
z&%syiy@jaR+1ZnGFzZeS`6<?lSd-{}xU@lM10@yh#c2iv>!8KHAH|s8Fjyt-?+?VP
zu4e2$-h=*ls6Qf^hX+tx7{OQAX-0CPW`if<oKeN%9J4RKVv+EfXV!uVE|NP4s<_d0
z#WdMp9xv*ICfahh`if<7q@KPJ?xfmBm~+mHByBI0YA{_Xi^^OMtJJZlU!RB3xMWWW
zlu~su<3fU%p}Om*XE80$xQ|EFF-4fzmV~Xe9{Uo!5N0cMl_Jk99hErxB|G*?FAsht
zc#VvQ`bk>Er^*npzE0AYd&W2NUtpOrP%NoO#i?4HnueDT=j%#1QONy5)_cs>egzmk
zVxma#CvAtJ;DZ+7nAa5CAEw4<b#Xe}57mg{8uLM5L)GY#@UWtW#|gzaUvUQ3BwkNW
zZKpY7hb|1Y!caZQjG`gy*v9e55L_hxQF6U6mUZ>&S9d*A&Q&N9;^MHLM1@&eP>jV?
z6P8`xKA^K2;_Y9Iz_k>!4K^84=t<lAv>!Iaah~q4?Cp4TkwyP=7Jvzr`R%&>h|<TR
zKwj~*R*khiPkKB~2l1E28N;Lm5~X;OAo|}3^sS=@OhG6*AnAF{#QIqTBpA69JSlkK
z;IR(t(#x7p6r}-b>3OX&u0ZhsJ}?P$+r%%oq>bE=+|rLTGYFC>6ONfNiWKwU(Kqj1
z^3%i03#;R~)nI+TpNWA4od7O#tXB>2Z^pJ+nn{OI>HS=!<Y4f+<tX*bcVq%tr2<(;
zZ2rTk60ANafQczl3MWN|t1j%T)c^f?{XUs|eJ<3es%#2`<32@HDtR!jo9uDpj}c~D
zL1Q#ntjjNBEX~y63DBWR+7>E#I(8&A2Y=Wq8!4i}E9C3t8xdT`g+V^vLJ2++S|#;e
zK&V_OfoP=^7EC~;+9m;GI;<DSs$Rr`+d+SdToUQDQ|$)d8Fle_o_3AP@NOEp*{Z50
z+!rQ%zkL|{2CIhJqlF^HbN6Hc<;&Y{qEM(k@px*!vwZEwWNBk(EV4GE<1Q0U=IsH{
z)(#p;vkMoE1o;0>Ds6yy%5Xkx54Y+)Ql;`<0R?I5^MJDIDasJuX2$h`)tb<{Xx)v`
zc;9zn5e2vvK%-i;uB_xMs^|j1U<y7y-K!J|rM<ipHUxkcP%gt=_Po))s^6px5z_dK
zNLUN^qqdH&KX0_Wjn;DKpE;VXR-|wkg5&Ql9UdmYuF?PfoenP5ZNI3P-Xk%z8O_d)
zG=+wW?57!GPH4z)6e7Lx>0+xYDZh_`S0XAF68xeVK>fk0VM%m7=rgOvM<LM}9_Y4l
z84u(iv{u&FtzIN*DP$!X7Bs{dCd7E%wImVJ8mt#+MovSwtp)aN{2P?%i?LI1bt;%#
zPKV;us->SijfRq0h7Yn2<KmM^dIibW(J>)GpMgTZ3l5<As}kn^wdJ-d*FTqi%0oq)
zA`p4GgnhdyL@yF6%X&!_jN?iI;hWEi?+qYPO>{1@{<M9#3yh@cT*?=cZ?Mer&q>+v
zMWJL?v_?r$Zodnq3(<fa=LzY7*bpb)o5%gSG(B@I<aQ|Vd<242T5e4L`(Efx-n_vU
zIl&AgkLovdNILE2I9aYE=7z|FvJ2rmQYG)plI>(33V0!n4?+mZb$UR-txjrR#{<so
zqJ%WOfQvL^jIcx6p7Acop-;&>`|f2z*WS5Q*UlWk^du<_l|U{OBO?e<LYa>jZ)sAG
z<rZcWiHJ>V@-j?&5`Fd0vE@ioC2Jm32Q`qTlf|Jyg6R;T<o$|S0^j`miS&wIu*N_F
z?Nre)>V(<S$({Kk^gr5&LV73wZ1??rE}3LzJDI^v=@aUyey=$a%g^wPK=mJb4gs!y
zz1O0Z@98pjLRejO0H_(ZEg0aa=`XZ6SEy}e+>WF1NobCakH-1TJ0^`!ba;CoO*+_o
zrj#e>Q@57Tttg%B>0*EdLHknTaw;ir`T-m-GF@cdfG~A`WNw^X9*5`Pkg^{XEIcIC
zPZ<cP@Pmglu}nM9@rIh&S#?uk?=r+R<bMTenZvIpi2aqpB>E@4T{NM9$CDd^8!;|6
zvk<KAtETd#<)&zxF+er{1qkhF#j)~9A=D)=%?R0zXaqcrGHS0$(W+xs1Tx>_C@IH~
zpj@2&eJ$_(E^$SFhaB(SA5z+<VD$+JPiB#v+sBsM_0TJYV!VN3iFqP2fCeK?^Sqv$
zTK}OPH3bWUjQ_=HU@MuXrQPH1>y@UYB>dCUiMLv0c!*qLpe^b>DF1IA=@xm<<e50A
zzV=s0bpkEC>FD9)2<;F|upj>q;8+-?8Z6pl1|uh5(A~R6fCb?uBRLj-MdD#ONFO=r
zSN}@0z-F({ofJlCUH2Ukd;Rm47m$$QuT%|IPV@-q?!8y*U8$XpA=x|&5Q8>0=4p!=
z{1R*z?tgoW%i~t-B-!zNPhF;2*Y9f09c9j$;dNhhQN5X`u?tk^#(n^2tltPr)SFL`
zz2=|!(-tAj8$29|lp6QdeGc2Lt=u(*`z#8BPXNC{(tc}n0K}?=#%^5Gbk}@NW6gXS
z_xV2(C75nE$46mY2L4lYOSPY?kjbC|#=;HEMdv?<guTQLuq*@Ye)j3di*suAJ+>&5
zn{Vs%KfGWmLd)O)09CIZP~m5ynP)sYsCCL}md``)XR`ba_@Rl@P7_D!XEO8IKD^lz
zz&7(aIya1;$a#Z}9)RIYiSTjr#3dwbe;kZ;dChdt@oxT7=-<L1jHF+TrCkH6o7*sj
zb)JBVW8H*>`(7Z65N4BWKV^Y(s2{=_ptS2ab)Bgz-a}$r%)HOKAdOD3ZtgSAiiE*;
z=@j`{kViNXeA0YCml*Hb6G>39q<TZdA2cqDP;F7pZHky}6z6^qEf!|C`3RI*l*(Q<
z)jeRJFEU<o0dAtVNNTpq5JsY@ZnQ{=yn-6f(heZyz2V|SgeQ(!O~;A_YRU})R+Q`i
zNS(4FWo%G8_|U??NDNH4kNs}Ly0FJEY33#O2?B~(%Ygen)6E>CpC(lGthP;P0pDQJ
zeco-Qg;&!}P3I!$g#4!h!7q>E6Smh8M%hj5#^)8ubNwL+slJbYo@s=8!((JU@MY0{
z#4&vX{0OTzZ*$vrfitCEdV1V;qvHr)*#OGbZ+bi**b8S{me1)od!CTvlaWfGQBYft
zjl6tKQ|yOnRlV*by<OEYpQ4H?lS%#6<p+~lLN#m61c*Kd8wZ3vA9!NBP-Vm&#YoX*
zb%l!TD6EkS<THoXWvO4Yn2qvZ*)%%Qj`)`%W_!e`M84+-kAnKqVUBD#Qk@#O5<?7e
zB+pgel|rQ@32LNn=G4CQ3IYOT{mfV~H((CRLBg5QMWyRA(^^piOxUyIs!fSM$*~bz
z0G#|8Kc0QvO^9#QnAPkWke@_T^pf;;&eobw>|RdDIZH^r9m4lG6-cc8Or)INo0*hL
z?%Bj@#%kCdX7S``1v8ZEeLP#0bFr`r&~5p*w=OZ}ljlg;0fU3mG0-iSyk1?u@OeF0
z1ZQ8xMLs}3YxkvYcU-&Oa;vMu&60C04I|~k<K2bIovP|}JT$FwmTZ!K0rI&v(N}iC
z+gBBx$4c7@3&AHnA5P8FyPaiISRMDHI+7A(TFu&C%E2HABQlW08`9^?^7ea+3C3W(
zSb*Q5?|7`9NX(>o7)19nO>@M2<pJ{d%&<gyfr4Z<;EF^rB7}oty2obuEzY`5Mmv4q
z)F~YbWKM(n2Qb{6HyD!L9X=R4Rt@)7WM}r<)gQShf4$hA_(j-bq3uEf6h>FkAYqxG
z5tx}whjW39LL0*fbl!5(ULp&L+3+EI5sknbm(AKC36+NTtH@m-@C&ax3^^cNJbBw>
zZ^lA$V=qp;eK5+BnF|w$3y39?A!>|gjDhR0r+E2wlGY;K7r!5x!K?clATo;Y&tjvU
zX?N8YCd&JCFxz$~3Xt0X*GlpX`^SKvz$lMM1N#i9s1yKM=e~^!R|2wo)gYPxzbGT1
zr1`ww+w&rVrJZYSfK5mYMjh-YoBn2y1ORQmS0;QHV1XUVf8@$3<A^6Y(I|Nx5dDa+
zqdOPDca&P~(7G_2pTVwWXbWPhS3D~~uNgmqrlLucLAcMGv7(K}1=bUA!5b?l{4_6Q
z0BxZ8$?U1Mblr0MSV%D;pw3A38y~=i$HP_uRYkzDc#!IS2@T&#ANLL03y!#J6YzUG
zmJ`V<x!$AGQ5cBXqETZq2~fDNbVwTSRh|26AUUAo`*qqDDze<L;-!_7JWx9eq>v*!
zrdvW@$BRuCk6~emG3Ek!d3nX-atSyyAG04~GTABOWoWL9lnsF@1qt<L2owWhmSphx
zoN2~gOe&}GUNCvO{6>gKwlrZ(t#NVH7e+|~NA{D}3vpHe>!1EE_ej2$d0RHSQ`}ge
zxxH0-=^l#S^Tb>*gO4yS76V3c0);_^oh_oFz%r-rDtC~-v0((?Zl~D93^I@A3tBQ5
z_bUQ9vT`EW`{_WpZr~rY2a5Jgki9=J==m4br{cpX{lcn)^@oA#^Hf`JmjQO+4TAaz
zACeIP$*cZ02J8L1uBb7XISX8)<Vp$*V+3Whsp9w%gk%tvTrL_uXd0g?cW)(k0&C%-
ztfDg8L)w@*Z9C7po|kD8kaqx`PcmIC<<!2SpaeKHvO*=FuC74D+hCCnil_NH%bjWz
z_1i~y1*N~rNG8A}C0K&q=X?O6oC*VqS2+h;<k!Wr5ZBW(dB60c{g!qvP7P*Yk7}SW
zHGed9QrA-b^Q#~c#UJ!bJ2UzxFXAxt8Zw&5fAzmq;sLAn<)&X=@3o>$X1l5m$8+gP
z)>geu5uc!?t+>UOzRVSFQs8CiC@W6z`nUd{S7$mf2{k+JLa(*xZ(;n?!HRC11vG9>
zD(@<)vedOWMdp5CFOEod+>{N$7QH%^|MxYU28c(Uy!|Nn09`^GD!Y!dtX$b(evj91
zwxP!tEBWiM_sHYZwKL{>jf|ETg8xf=3dnZ&fw(5`5?c5M_=Yqz3X_9&@0SE2d#}OV
zOOMbiTX<uX_>r8&w$NAov7?TL5um{PyTkwMr=Avorsl4vvQ~k2t^_hmKW8;e?~K1`
z{n3-Ys8|we8-~6G*Pq{Gu5hxUYWn^1?*{qr^B@=rJVw@ytir1jJQUWW_U?ns3z=WN
z5vEq0AJd$m4$-YE)j*2S#amO3ivQVf@V5>Qv;|~jbfN%yH6UntG%#i4d!@;C;8WDr
zpNA01zR}HFAJ<^+Sn;xC68itl!rJRB*t!f95(Bdk4*OW&;gjzbE4y;ct&p?h=_RgE
zs4>lH;jA~;V#)h7BE!oU_!?~g=W8_pcnlqgHCEtDZr{(wC<rsTxSa%Qozql!#HP|t
z8jlpj#dSn3Jy13!m<IjdUb6q1ieIn&GWu7|3L3yX$bqi$X|ps27<a=Ro0RiiLNp%S
zg%-LdIu{AdFGeb6co}m4_YfeUtYL*4n<55Y$A-cRVmz1HD<45tx+!oTEwL<9c?9mu
zks{C?OHf^0jBXa)@kcUL{@Xk7-z_uK3%2vT!mE*3?X~O=wk@p;!`F?Lkt^-Z-sqZ6
zzIU|vD1#hfEvj~HCI0?>1h|kV<bMwZ<=yKB4{QkI1T=h&C=@i51v_3tS+0C03aSE0
z18w{nwO>#qCd6__%L+)897y84e7Cg{_hj5OB(h03%?BP{4ihq(+UROTb^hl>%Nqg~
zH}wGzALwwY#PwBl+Ps->&beHzmY(-6og80hiwMmO{+&FoEtDcJh{#Q&4!^Mehnzd-
z4_R%tNNICh$Vc?p*>jR_=OYHYe}w`b;L+TJUVHNJ7i-9yYVT9|<!QlyXLa`B=(XQD
zLH}u7&=&#Bq|$AvkOtPD98yOlF(H3zY|w_uOiQ&Y4`n^)BeT9ZqYMX6K+Fd5tHgK)
z2~zcuXWMoZ$uSo9E95_U)M-4wgU3e1p~QwxFg=eoQRKL^M)4-ayZQbCZ+Q-@Eh(*m
zfxSrW_qB$5?16Ozkcue(>0yHv1fCjtO-djdFc>JY)smwg^LaMx+HHCLRa6!U%H*MU
z)*oko9P<$eXp)Mg{OKgcMQa@IHWvFwk_~Q!Wv58O@Dgeq7b+Y-<^6V(hC!9`*j_!6
zRmm8I@y$b`4s&oQe?_--%8sZNoK^pK($_>^cZT~$Aw8@=oNv6l+^DkZ{Zr+_{D~{(
zr`>blJc%`?6oo`G27N)c+hUG2+B|(_L{dO&&52+~`cq9X4v@_Prj^MHR|(zl0mjMj
z25CwC?1qgp^s~6Nq-$&<1rq_@j*DhF;lHkppW+n<p|4Qwg8)(O>S`70eL99+2LVm4
zRZ>@+Yj&90ENuaMIvMrznXuh-fe20b;Sc_zA;Z3(x_c~exRL1Nh^qIV%~vim_%{bh
z7tL&$O@_$|D+zX9Jb}G+;7?M)KW4+5*|UoX<gWGyESYb%Chx01%|v@MM9k(pn2jrL
zMcf(U5lj<dC5mw@HQfG6qr<ZMYXB&ypvG`H1B9OiWV8ybBLq9QoFr5Mz@gTERXx7I
z=6wrh2hwHOkB}NFH{n-Jm-F+VHJd6r4S%g1mR64*j8cS@@6U*96E<iQujG#&57Ons
zv=3xDv*PD`orcxGmOVj{yXa;v(8oh99V9!PXg^TNv-<)?eXHKr)2yd(ezoCgv&{7~
zr7%eAtgh>ZM%9hauE|gf3_g}OGcXO@m)zHsrI)0n#~Kh^@%rIQ0Wto!#iKG6;)Xua
zmQ4OxLly`7?|>&^fY7z?$9WF&MIo2(o^KH8*d9G3V5H>9m|3}CI_#s(<KQzHd)(4+
zSn}y+4lFxJCQW8j3%rn=^3eI5CRA!!%Y12rJz#7uyHnjoAh-$}rkyQZPrqfZu7EM^
zQQC?o)$Wxl#MRd&{BwuF9&<I@kZ6x6;<B(Oh<CZv0mU1w;@;ieKuJ<u?xADuOA_aD
zPtSX#f2^gG2&$`x=@}gG)n%{(rr}A(A_)oeO%W+S_umdGlvdDS-rg!Lz2s|b-UN-0
zhwk?0!I(WoXKN-Z$GOr!dBrWuaf!-hEX0%_uk<Euk9}iQ;kdn|pL59mqp8$UE|a~N
zH8!NY;>D5{aY*CxgJAKwd7PP{d^{!+!=pGmk|N%KBGbO$4r{GrdTyXa!=*sTYf=P|
zcAul7HT(@=```G7%Q04X7^m%8Hd*w8$HRtxiNMV&#rbl7o%Ex>+4RasJ8A3V&ii8g
z{5=<~@RMEeSB+f1<822KN=k(A(zU1gYDUeA*{#~x!1~fB7dT~+sDGP4#8FPC-+vb-
zRe%HhZ!=+~iy__8=@=mu1=8Wo7g>D{?Ta-5&EZfN?(4+u%SRiI%UwAQl9@8Zve@j&
zDR&$0CI*o+EN(#=Sc-_glZklg6L^uVXPUUWatW$u?%#LladG4B&)j~Ef4BHGS*2|%
zv7aS);j5>NwW~m|^<q$S2xFAm)6viV#`IFB1BD{6^md~+l`*sVvvI`K{f>n_w`<W?
zjvMC_Nt}3H<m%Dhxv%(r<1=x24q@UN1IFqDp3}+aUo~6Eztvafxpu;olgRzYjrp7-
zcf9IYeNbFXj9Hhiy56UI8fv@PT`9PwJ;7kcYa}5k#NNUtb8`ofAxh-mn(3gSWOak`
zTjfShe>;mq(ZEiL%>JnvK5<!x?`d!DMRfgZ&mcD6evH)yTT0`S65EEJu#b~bCy|@h
zcDa|~rE$5#+_qhkzr#J6zw_l!Cy0$EfAg!Y8sA?u{MrcjZy*P9=ewP7lvin~3+d^8
za?T~a>f@A1rQ%uQhoj7v@2pwDzf%-*8he`yWyN<GT!Y8cp?{nu&k2F42NF<?X+Bx)
zJiVQp4KaMPQ}aA#7t!WB2xI<l)1XfWNZog*;YHwhVx1#HX-WqDn@7}avSa~`3hTw%
z{8yN=wP)+HjSpoh-Z{jP75{ODJ|jR3y}-sG0z&AI_qWC?aLrc}LM9Dg?8C7FGqqqy
zCoZEYC$k}wyCB*duS=s4{P&D75x8+hntIMh-=-h75k9e7xgEKQ=|c>J<o=5@!1AEy
z9ymuNeglQYn?8#h&nBj}gh&Z<;r`8=c)q*JUxHBuNLV`)Hgei0>^MG;QJ}w^K@h4>
z9Bwu}a99K&Dvi?pESpHrp?62sqB=$Tts}K!e<29}W11jdtYK+C*_R2&IQe8$A?WyN
z#CBU0n`kW+YToQCkJhXowD;*Bci2}4eh0nzcjABY`@odupOK3as7|Nh@1EN>Kk_*$
zvB7AQtuWdl6-E^x^1bY;H_r?s1b<?qGN}lxijsfxR3q@3?1NVwx2VDY;PD2K3GF~8
zPg9=t3Cu+}f;(#_hhegk#l@^1UB0n#i+eCC!B(a~G(3_5k=ZA?5v$&nMZS2fQ8a{d
zyG<CP4Y6{E&C|&hcMWL`Bk9NsNmEy2KZ@JQveaoT{CwI|D<hHs`@eZa%X>X6^rp|-
z?{C^F5F-@L*y$O+GG-u01&B7vA^MB7Qlr9j*=4xhY?9W#jM-iKAILnU;;k9WFMpO`
zK1R=eCv&7^9rq9FI^>7gpmK7Nq9BF^5&FLAk=#wvt@f)lN)Kf&R)QKb%v)J?TGu4^
z_~j`TC(GU9N`Zh^U{?lH!=mH8Jm5fdr~4FmW6FVQhA2nHNi3i6h6aMid&OX@pjVtT
zFy6ypt|18{92XyVhn;4Q=s)qb5LMl_$Pi;jhLz>C|2G^`Y>}>!Z~$Y}!|&Lp6Pc|D
zcJKspqYXh1_MGZn192KfN+5ymZMvDVT=p3G*?zCDTD)p2;v>TA+UdW7gHP^jg><l>
zkj@Q0(-I{nsQC1$JwyvUG5a3ooSJ6VO3o5DIbHuy(LM)wZ~D+`8(145jYhL$sh{l2
zK@w8tmycDKW%OsB!8NO2d&nZlaiRWAa{Or_bzE;jYUx%BlQLVMoPtp&x_-j**CTG4
zR}=?;32qEUbh2@NMtZyWgp&`=vmN#pQgF@qwLkcoEkwgpcbZ6Cm!V1i6EJ=P?TsCJ
zu4oi6u(Lt@5=nwK<%!s|EC>pv@%sxz5%bJp*@hxpwb$}l%@rCJ=^6V;s6xmYb76Ec
zR=XV8;U}`6OC5rP3`7Xz*2<JGueSCl8$C^-^>A@F`2THp<L_hzB}CYx+w0G$T2~Z8
zXXFVlE~GV!iBvI;3cR^ZR)>AJx?yzH-s1i7GPy<Tr&n7lix(Glytk&t%?=9fW>)XT
zZHbAk=@HdGQgjF?7D9Q$wMw$2HEh6Dj)G5*hCTYZ*Irh?l6W^gTbiLIvzJoVNf%pq
zg-8zU9U=9YoxhA*#+74FIhCrXvNU6BFLb<@!(Iy$B3Zoo9`gZ1uHZDJL1>OjkKzFt
zH9(iC&JD7V%-fxMt4jqFj_@1O)PH(GA5ea5QFx~YS*=VS;gzi_Evs-Ul4!wN@PeqX
z%VrHerNBTC7^>mYo7=sq%BU7@inwSF>|n#OchlmC%qU7tAg~{$5AEiNfFVMr4S!R*
zOU-CUto<t^g`md5VSq4O3I>%WXd?Zu^q;?z07_-NflrQ*4oI2Q(NMNBItahx4SU+U
zYTau^?%T5&%%PutkHwvs(?&C2y=d7LZ+{69DdVPui)OYGR>JYNV64D2^%i5;NTfiD
zA=*9p+%a*R<4$p6eAP*X#SSTdYknwv*7Gvtawys3bcFNo<N~JqQ(!fk`eREINww#n
z6rAB7dBUD@r7?y9`dfKEhXA}Q-_DcJnesHL-8hM4DD}uC3Fs&5s3=v7_kE|S^I4XU
zk7L*_lNCF(gHKMM+8y3&-!eN?19G;cuHZ)_%s+lj57-=hOjNHuKdaH5A#Kq3Cn-y*
z_9pg9z**(iDc{E~*D$QiXT7g?=^q?Yfd~UcmvNo~maJU$XGSF7Pj*FLIdN&d`hlZs
z*L9j0#eAsq<=;i_zw{gYhR;h)817iCBJJb=bNuy5e-mfE0eu5{wTHpk`4d^^qEnu`
z(HP3U^&DG4n#j6pMq4)OH;ET)T_an0wH`mW;<}}r8l|%59fwwQ>u{S9?zjasRp0RD
z5s$6hzwhFYnHu{^__`Ne$b85qm<V3$K%WRJS(FwhZt*o)f)ooL?$7_2AEE6s>jXP@
z@xGvkorGHo?IfvV+{c)H>eh!@HCSqxExJVzCd5!Z<1k}-n7Rvy522O{G4I-VSvBYW
z6C3#7`pGk6AgFI2za|W>P~+X<<`AD$81VfmMa<11XVe)ST0Y~!<EsshC>WqIx#(Qh
zHIqxY<Ebg>I4VCyW<OTWzLps@SjG7Z#G?TqE=u&;EpsZKS(%$!4gZ*u;4U!o7M=Fp
ziw7c;X#QxE&CvyelSu7j%;>mo9r^xGg5|p8+3b4=BF!!%RnfSK{zue%$2FA*LoZ(u
zqyJ2?ZzXZ(3QER>v-nN2YHG(l4ms-qRZ6n3s|K8Lyvg_uuDaBZUy?2PhaL3wL|2}r
zw`eO~&;B&m{1?A&gmc_fzo<ORKT1H`y#h$E$7|;|?+FeIGysLzha<Efk*e3r`LY5t
z&Pb2Aby(QrptPQXFRZI3H-rej{UM$IbLPF46Yo*|^_hMCZ3!>IEFt{AuF}T`!8i3w
z@^UWR)#gcv{b%dRQxYP^WJw~eF}Xt(byhe^q#({p)Kh<NG)XG_ZExd%Rhv1DKGtg(
z3RRyN{J$R8hr_p0?fI+_Gd>Ol!@hv{fidC705uzC>+2dJf~paausqm@hDkXG2~4ct
zAR~)ahDfnuHx2O|zYypahTrnC4%@k$D{eW8+PC3aYb<&_{aTO|t*_>e^m+v~BQl>q
zzxDM&<zK;;PZdW5J(BC~vgPE=y<kVy^re^8q3{EQv<{GbenY!E*zA(z6C(*<qp#5~
zh5gvgSFv3u+sf!GtwXO~KmXmcRq>Q*MfnzzyH3eU31RVKm-<Z)Dy1*L++<cb{KRzX
z=QH=0vsFtNNjXH&h$fst0iM8vSYGq^#Q^638B1YUVP!l~o$rwLoad|YVD1N1-zhta
zO-Mg&Y+;VY1QK!-M;nc-Rzzh6)x0s<g6nKNn%<{0zDB7zrWH=>a@7Q^3CYr4T#A12
z9xSL`F3&7~cCh>lNcap3ODwL_Q<2D~I*_sQc_lPW>U4K2;_9>49Dbskw1?K-c2L&Z
zV+&6Achu?=!kGiE-rBXuX%s6CVFx&Rp>dy=cl(@~6{VKzy~rR7QSj%7{z`@C;B5Lt
z9&Nl08JdUJ=K%gcSuI37I5c}ua0M&z!ATc?3z@3mkJ$>k!%IV`4D=Hs9!^b@UsqNf
zAI*&k+EbEF)zOaO)2#1pWs{fss%l0o#$!8q^6#nFE|>jOi2Gqqu?R$gOjVHZoqXqk
zabH50*W{n<c0&4v(I7Sj5RnhR6`b-rUh5qPo%q^gPcez$5EBt_6_I@Do8Y(SK6&2H
zIwV;T0etFrH|ScBI*d`fxvG$olTwVk)NK&ItWaPXq1NWrzSo}1>FhJ4gA(H<l$C{a
zQ3bBKMC^c5QDGgdKWrqP(`O{wxx0CC%HaOVx6}C*^84;`3G!vzr;<0uVx4?cN<mqd
zF>uyEA<mP_WueO|xKw<H?r{5|#0fP`$M9zMSh3p?rH~6)j)Mr6uTYRBaJ@b^3dcQ0
zp~jBVO8B`JKR}lJB~5`!_mMBZf9mpGN^FVFv=#rU6VFtNhs9Biy4xwMlAz@j?mCMs
ze<#E%2X-}tj+Tbxt*}{rYkZ}`uUk~$Ylu?G=4-o0Eu?x!j_I|>jVJebdxsi<89$cZ
zO4LtBL#&{jx>_dP+WQK&l!;LedivYuf7@6MWc?<WG&36zK8mp?=$mixFNBrcc^I)V
zP=e+YvXG=9?Yif~o1;mQ#{YC1yYNoo_Gq)Lvxik!%923q4UvzJHr(xkGbVbxywfrq
z=TH09P?up9xRjoRP+@-n0qarv!lu`t<6%ftjYY?yV9ChDpi=No*Fd)-`V(-A$Nd~j
zW-F<Lt*wm`=ca*cb!ro86?&mqC{)Oq=lmFPb|%BAs93@~X+JuLK66OI+0RtHPxROv
z3S)DZa$KzxG|vL}IpW_P<`WMZRcjtc;@HaYnC<-qW#Dy07o=BBSrVm+*H@q$k(x=%
z5kS(<_nPZj!g<uZu=io^+FD2w9nDEi#vmbdRsYP0>d7bsL})TwLt90Pb#URR78lIv
z(7yMCt5PdPwkxg_)R9gEeOWw#k>hKr8-KsdcNGlo??~uFDij*%o~#mKtg}e|^ZY!^
zyo_R`_Xt4^*@a~zb1x(G6<}W~K=9Shv0sFm*>`nkQiXeNwJg~pua4OTFAuCMB4?-s
zF}<ChAKbIYc!EXK{wS@Lyhz-p^4?2kC=e3Cf@pnhkEw+u?-GYF*~HX?oUxp?F~@oi
zr4Bn<?B}5RoV|^Y$A3Elm~0hntJ5P|{L7nMuE}aFwJ<nvOxr5@-BfcVALqo}IK4a}
zL&9z?ov$R)o)7;LkkC7uY;R9=r-_+O923Vm|9a_i+0V!9g$D8S$DOsj+bP85D$dOH
zSKnW%g1*{Y{HBPb($Jjf`&IW|CJNe@AI<E8+++jod%63{&v)d;iG80}z7Wp$uXq|j
z&(`|Bun6kz@iB1&st9p#>O+5&{BwNO*fOEhaq>=grkRilWLs2%#K7YvF=iN_Y8)Jh
zzcZdcBj0Y4smVfu4I2W*Hy?w`HDWWVb3MnVB8*N=^X6!z=oZ#NCeO(fiQ^$w6D|C3
zxa3(ivBDyeJ^d{}(z_gRA)DamWUw7&9l<<igxDxVM+0YG`4E7FH9Edt0EhZc=Tjmb
zEct2{oc0rZ*E?iGYOsTcN_Zbd+2n}*hh>1N^+PWJG}3-OLwLgNQvc&c^>m@uCe`Kv
zLA(;y^|?cbL2Qy3%!QQM@=4&H7D7Ju{LM~yj32+*`wt6wc6IQ5{QP6qPPW6u{kmU>
z`jJn+@g3>}bJld^mVYsx4Y(O98Bm<+_eTJuNQ1bq(wgo9F0c0a%on`Q)*@c%ad?n$
zFum4IJ*C5RX89yVl?5OXE4WHIT0j$Vcf$Js&n_PbCIr8!al{LmGu!;lBCIuQySeTw
zjN~%?y~U?}{I!AIca#KW-!rc)-aFv1#B#-}{*WQ*=fivgjhl(kTa1LCXD(*X=Gm%X
zc>%rS6R}+v2@Y*%MI|hfeIE#9c;T5}4WS8{(o%b!ea`yE85EE6Bs0UNVF`5CV0nVq
zF_+XI<`7JuWREklCW!zL9hL(sdlJ|qDS!@H*iX)4N0D!j&G}?4;Jpi{NotApC@H=y
zKNtlRQG*ps+{$n039azV^TaYnS_*O4S0fSz>6sS|J1hWz4}S|?bFHlm=HB&H-2~(5
zK*974HqR--djmP1YqEQ&wGV)eC_-hgW^}Nov6^6wr~WLXkY#p^C-g1D8s0X?(>=4W
z5qq*#A-fk;I4w%>EImZ)BA_n}f`F<gUj=S5RB_{bFs8OzRzf!UP+t%N@8i=38}#*M
zfrV=l+G7}ZTu7Tmy~G!>aNx!frXIo{N<QaX8wSW}`YcYjhBFB2{0c+Zj|(krA&??p
zkx^9FTohr3AK<Y44Rp<=wlaR`g?42qoH=g_!!4a{cu5+PLI5a+-{n0@z{_&0ft!=C
zmIa|^M?cDdWD5hH%RN0c#2lK>Le#I}43RnV6zRS28~Z7}2Dpv4upl@{XU~FLPL2ED
zWSpsKSR|w(3_zUS|K>ySP;&uqcG$bTzYf++Klh|vnZs*3`Gc+(4u9=SCQqQ`Rma&2
zws});ZS@BsvUi=h8tT+Z2a%)>>HWQAIO=P%AqbAUmt3HH`LkDid&?wy6)(age3qzT
z#t8GFLksXCm0)nlOO@`iDu$1z(ye7VV-TG@x=+T*W@NLZ<r>NJ?gY()5j}wqEEuI2
zw0M<PT^LC5e2(zu@B@>wK(-DT#Q-F{_tKBmQ3B8ZWB@)-qg`3R<5Hzb$1s=@b^PYz
zqY~=b3qp}8GF=SKmMiaL%cOYxj}btC{P_zn<Li~4`-<DUyMTc?53#uys!!XAy;_<j
z6eEP~QG@&L6%$vK4&-bQ9%sfxz!-@##Z#rYnEH$Kukv#f&jO0)<wrNXc<iCw-x2Sq
z5TVv&_~Tw|JZmD#aVA!bS@iCf6Y6tlA0UKZ58vzM5s2#wt+~TRby5AE-)UJ`vp7*6
zY*4|<#5SsS{~(G&0QwckPXP={@!9y|{ID7)iPucYGwXIj=_doMKbtSn^&5(WPN|W-
zT}Ej3Bt9H1W<rZ^Q?9=sU{Fo!*bcbrirVEL1Lh(jr=TI(Kz|yd)gf0-XME|De70J&
z=A+0KodGzL3Hzb!`47BY=^3*Wk4#d*F?9ubmBEPQ%K#AOuAHLZ!TQrdw%o+mD?DSI
zh2;{z<=d=ogvr1EeoTO6@fNC%5RB<F&fD5|;dvG6BhD4m`}}0EHc`Rqa#kt>^f;&e
z^WphT=<FY0`9RR0VuAVZB_sPM)v&PlL!2IP`Y|e!sAE$?C8f8hu1??Qm=~LW`L<V=
zixU%|RPsS`-NYYa{KQ{7UEAM^Q}L{76mz6|JvvKXfPWswoILDjDGx(8a8{B(6lBdx
zbLoC)7mwiDQT979iVM^@t2nMcqKQ>7!@FUDPBo~bxtLlt%XG!`!{wLs3Ug?p^tlsU
zPh)T|5fTc}6zFtBZI$)N<rKCHdiXvXsMcT<U3wf0xJC%5bXak&Gn@vjd+<?kEj3_%
z{XoC$urBL~k{T_-mRpWB@R>SdFg0%ZeDw(F`^ywMc3V_I03CcE9S~OG&wK|rTUCMR
zww3YA(k0ilvAxUhj<nX+Z!Oyr{hw0;ePTPA7Inm1vXIBi#UH)_g=q24(v!g<`dk9G
zL-?-!Y+2wBK$4yQzSkzP`p%oVGC9#{M}fkxiw$q{-Vwt0o>;G;opCqbyXQPe^0Tp1
z^38)jl~Ld`EbwdKRRl<L`rM^a7<08;PXXXo2%zcP*{khd4ppq{?+3ztYB9!5cHi8~
z@F0B*go3<`&pO3afI%tbgK|2c_S3mbjNiLwWHZ7XZFoSEdTti|`Oj%~%EaKK@3jQ?
zdS7%eZ-CQ5oXGSZtq2CWMHjAdIhDE8P>g}3voh7E7JJ-j*RRTIY~?ot>}<Ht*-cpc
zxU~(+7Jzfe^$OY<3*)`lb%j-R#{;p(!L7TltFP|X8LInQXdWwvPhmw#NE!uJ7RtnP
zXC&nsWU8+~1vraLGQBTcqc(4^4g}X8!9V~)Ru6)IWfy$3@B1@VpSPOdv5pTf5@|X?
zsCwgjyS_5ps|h}}1mh9FVAB2$CfetWEiEZUZUMQG&dspLEo%^%F-JN6`FG|*mp^B_
zf!2f%phLmVTQ0!qCb9*7{l<U#zEVmTySAUtuG8Xk_{D~H)6biH1tI|BX}$kcPdq-X
zw}!0MCWt=$2C}Bzeq)#zKfUvx^EFSUJ7>RVu3QcxIQwNl-1o0~i%}51&IcYaUX|xy
zN<h#~@5<3I{<4I$m9g{;E3bnB%L+9fA?}_HZEpJMN-f8?Z3*a;kPYxYNO2OnGrhS9
zIrjt3T8v^9o=2qxtU_GRMh$A0`sjXJ-Wml~2g+%eI_DdPE-&@VrM{9XAs(+nafeaM
zMx4KRbE8^}+*X23>F*vXb9YsSqe062b;b;Qp<FkTPx<yx;YUkRoa8<71)F9TQ{a$l
zgnqM|G1U2ZCBc$wtkD6>2t|GKDVW-duA{-d@QvD$!&Gsg-cpERGxq+S<OscrH@PJ;
z#`t(G_r3WDoaz@>xvRtS;K?kzTAVX=eGb}XqaTJRJa7x$QBK11vF(&+!<^#ou|IaX
zyC7j_6MU*pxZ~o*T**HdG%wVDr2vjt<8MQGeae_=N~E;AoE3-cPG2NAe@)#vFk!On
zUi|w1A?huI;%uI;;UIw!oZuQ<1Hs)Lg1fuBJA~jK++7xT_aKYAdvM>yUEa<8tLOh#
zZCzFSVQa6M>FMe2bNb9&CK?{=y(cr#BwgN37Bn6GwXov_t(jPTq>%NYDNmCJtMw*D
zYzF0!$}Svpl7XTKo+KhIIpDYZ8Lxz3CHD`?VxBQt62v(M?pU~cd-*awd=+P926p+#
ze5n-Xxc$^=rMK)eZr3dTjU;)U`@JVNm2!n8QyD8lz=6J^szi_NkNY}`yEyZ(ZWhbr
z014SFHA&sqnB~hu($N$gM$3JVnK8}G>$_0hj0ZIydY`<HHw1ZusJgDo7!!QtA#jc5
zmPa=$lmlXlYZ5bToiH;CuLLvE@w7KbR}9|vY8=TA(*i@1+?F$s-;Ud%Vs1xx;s^$S
ziicFpuG-JA?S775WMr8NWO2X%K^A2CeXiV6u2vIAme(rDWU{C0^PywSc+`(9MJ7us
zRth(xf+jvDOWyhGUkzWrfdvvwY-k|e6|Ya7*u>B=8e+m<gjX@TuBMh3VdaFC(9kXd
zAv@OQzMG}kiDARh2$jSdgkPLxHlDjgl0Rs0u9(bU?ct=p1q+vxBoZK42;*j}N7-Oy
z78w&!L>04B3O|<C|J+i9$h`@<>P&L0l1He3_X4}1knE`ax??6hal-A3Q=L+!Z8QLM
zPB5btv^MRZlAWWKB@xDgjIA9SO#%9uqZWDOwpL&IJNf4}#xDrWAhVwvErp5Q{wC(n
zz4I7$fX~}FDfa9y_YQQ0qPJnxasK(%Lf(p%KjMU*#9vho(|!;Hb93-C-N?{U?jY*D
zo3Oa&$mRPq(_|XeMg6||tDPgFgje924@;r)RiL%=+byROUHceAlNZCQw~b``<*sNs
zWnPCT@HD;~YwID+ZmO8Sjk~G*VRlohV|Ul4(i=_kE1KB9GXavQ!6_lUGJS@{e@|c8
zM)<@A0W_-3lA8A#Ra02#Aubl8#p6zn7U^duw<QcamIgqzl%~G7m6_^pN#{8K1cK@h
zZl&=ydUCXIdw+eyR`WXUL=%Ar+}a4gcNPJrSj<hDS36GDtLF=>__{8)&WWYNo3?tY
zrHWCi%IUE-_?Mf-$@m|p5|0H*?1~NMSk}cW-1*7IgDVWd^g+sx8p_I$LIO626>`%*
zA`6Rx>QXRueUs+(z_4||S<Ei^@qSNBK_WINZ+CE${V5+vzkK4No+{?OPo^<w;P1pu
zzY#l=5foBRnf+txe2XQPar<~vi3d4T^Z3<0@3+2z1!(AM-9F;xuGmg$vrXV^n6c!Z
z+b>;0cVI4z@|9UPRw)}Jt0%Q+SxVbkOUK(;9DC#0jAuKwfLhbZ)>dIpRB<&sE$zg~
z>El1YTM6dNa#?2_M7885orcA<5c(1%^hGhtEhVk)n{bbo#ZkP{PlRAm11&|(QAWXs
z{zbF_?Mfr#MiujEdupKM+yu^Tp7hj<g!lz}u~AuzADD6E<awGP6%(S|a@^8^N(}f_
zpq!IKFgDr&cj5{j9xgW{9JsPSd^2hE&2EdA?g7aiHOnfHc^y7EQgr;BoBC@t@KJSC
z<&W8u16^vN1^_s@CCjG+Bj3uG-2LE1(sjL$^191aO@VgiXQoK^9*N9~9ampgYMYO(
zuahbJ{?zw^%9?^D-jy*porF%y#=$=FC`qj%1r{vClY26F7|%srycf8=DZ#8#Ir8hr
zPRHr#$i32pvP2^C8oj5lY$X~Lcy7E{-_oAt<;z~<dTqgb4%OwWMvlNxKpd<*>e!zX
zEg9|e5;U8Ure(f4PChTSnWH;j*Z{DrCI5D?`y^K(8zU!or=2;gIhD3XMDuPf@?{DZ
z5z1ssOHs9tBz!^eEvUGYofaN8BSR4}#{$ANp6a-0q0sihAkm@xE|VGLKWC5-Zm<R0
zmtXVZbZ+E*dMzlY6vZr(c@W|Hc6_cT=$!FOy5zV1fQlr}y940ZrB%}dc9LW!Cq|+i
z(>v4MbZ!n@6i@RZM)>74Vy7AB`Qv<F)1e0-nP9d;?p@A!>o=tLL%d*MPK5Ru!S^w-
z3NoJeXD6m6`xGG$gOyBe4!LRK{2mk=$&MAAzn^nhV*ko~U49-d=LBnmy!jK+@%)zk
z7+$iHaq576=i6j%8Q@9g302BGpeY*@L!e?0Y(X18@jAz*R=8gqrRz5D^O0CYTXr_X
zlN0mv&hvgs>^wQ8x}Q7)pP5XJ=7*D@hmZ60Z_X<sH)QH`jBES;C(qb-mz+1n8#e(O
z&BdhW<^Cl9;IWk2;yh`C{3#ZOxcfaUrQKyZb)Y*nLw??DGbAoTwjgrZGGA^gfOK;|
z9ng&;2Ld<2OuS&&rU<*e%HX;Qr%ebO9hMnt7tDeAETix+ST2k0<mo<Qj-NUg0hzu(
zczQKL&iVtw*%)XZ270UN->Q?6b)*!!yCNcE7Ri!}NB6`9bNo4D%r~4_nvBJ>gSnb7
zY^T%%J5cu2faS{(20~psU|5}Sf!j%{)%vlnsI(wF>Z3n6OS4@Xw<Xo*<*V<qQ)f~Y
z%NXd0z}Bzo3cuQFDwSz9m^`}lXjyUP_k;5mas?epG*g6E+K>P6XQ<P}brzFin?h)K
zDr=$abC;0>Tv}T0j%!>z>B*{g51L8(>Y>4wVJE0yHpZ4cobcZRGR>Q3h~RmS1)RNU
zz*a=nb#Urg+r$m7ygiX*eOef{|GHma)s8}xOOnQdUsBc0jqueR{K#`IKs9DPynm5Z
ze`Qzc62Q--GA!BCo?7+#xlwjLUW1r8!1@bB1gQLzX@jyFN%VQ_8*!{~FA8jQ&$eR2
z)Ab$74fF)$@HxdGf{sCq_2zb>o=($Zk%D3mJU~Mv)}DsNKi6H$L}0t#S~j#E$>T3X
zU<&}bxb=`i%N0$Q8$`wN&qRnU&3Kt)!bp5Igog%h*|pv#KY85z@#r{iwfA<cz|?3H
zBhd(8z&6!eV=vkZ?H(z5vS>0%S6?l*OW<*1Z*vaOI?us+#>F<)xq!yrC|b`l`1<Qc
z+HNJX-i2VQ`#Ph}E$1SktL3fO<P?r#uA%8-2&CH*Dflgx<}!MVUs=KLcjpveanp4I
z!yU`vz8f)CfVSyl%($N!zXEr)GSz5#zlpqEq4*zt$**b8qrH|IuF1#)Ms326sRlu2
z6);M%hSH*y&CRBmGqosKt1obM=;g{FLw&0zGJU~3^pTT>`m4$x=!+r}{<Ky6s!}ZM
zw<F0bdkAGTBOt?E*VHT5UC*Fq1^mbw?id^mlH$1cVe(gF5i1W@^@ceu+KR)ttc9$S
zEd9EZxJn7$Se$Rnq0F`uo?Epg<?lS`XpOb>fHbi>j_Wm~C)p*j_Ao%b%=eOODyDYQ
z&oT)20ja_ywv#Hae<w`odF;y1^E)xDU(+fOUf5spX9PWGVuf`NOAyooP{_pm8!6+6
zjm$Ri56qFO@KpzsedM%ePGr&E5}FU*9lp||-)@sO&qr-z`8R!igITKkSXz_+697N;
zNE#*3T2OTze@vb+JJv(;kLnbS843?{A6y0nlVYf@9Q?DF0t}6hEfW=o8kgdEc<iO@
zBi4T~UeGNEwA|J0(f8*a7Xv@B$q@{e+r8H94xW6D?5^xQ)cEKYFP<lDz9qObB#mj#
z?FF|*+uqtu94SPu5<zjE4L1hmhfnr{ZRhF0IcLRI?tBC~j{|yQ0_Wb<oE|!6GviOT
zP{Vz#M?h+Zkjwi7OjZT0HS~lA{XOsXfbd5slT2e<mtF+eGojvx4)(X|bHy;BWTjPG
zyidoQ`F#bl>Ym90XQk4DEWdEz@RsRAc<RN|AuHKe_hP(|pooq5=sf6;p*5q2M!BLT
zx;kA}#sC)U7?r=uDyp-+6@K!QEon!~O_?PBBCmuR6D6s8mpW<NwyfXPBFJx`*C^&A
zu{KtIb%^31x#KSK0%b#*?YCxUHn{q{bygstm$*<?={%Jd%g~-*)%^UYrQ@h&BHb0^
z`A?#nXH(!{;rhE=T92}<_690=>sRQVop5&RWC6p12%b%@hRds|OqHe~e$d0!To@eB
zqiVp0C&L+q-NbvYy7{+FO1@gGLHZYK;mSMTW9p^{%1XY6y)gbxMJb1K3_Y%T{@06V
z(z)Z|Nhu>wLtB+-J9$4crv<}#3u#v`0;v5CW|swijH@uEcAyNMj<uy`=78jM0Hduq
z&aLypm5pHrr9|CTWnlYjc5=|WruWagJ#`J@O_oyT*XNfMd6J;j>s5XHiG~h##TJWz
zkrISljfq?E;G&y(zFWVgwVqZb^p~pL2bIL*bQhi9`p1CcxrlE|ro7o$xdyg^^4i2e
z*8yYsjwQfHMB&P>ei2@2#k5wOJI_qI(~*p)CX=#BE+#&lMJ^qjdDok(l7h9+$|TXB
z|1h78IiS&Bsb7nb<n(o$6wjOgahEAm#U`eAUU1Fr|19tKUHkJ1xQ!RP_-t{U?C@p>
z)BnC;{f5nMSx-CPcVoF4cP(47n)d`d<DWV2%wDLy3Fie0?VcJy1Vjv^(ec(WO)__V
zWWo`kZzca{P^UGfw}}n<q*RpO>A)Dfg-0bl_j$ry8R^)yM#f0=QyHb1m3!UcfG=Yo
zGMJ<B=Oe3o@;W5(8XQ`vDAwNnR}>ul)y-;21wK#w(j>NC3^SiIp5kj_*K^V5#3{~A
zk#}j<O{{{a7g%zbQh)tA%5TEM^0jDxt63bzZS^c>ynk3umNVxyVhfU6;Lifu+(*oq
zM%(^$WvW1;uj5Nj&fl7M$3dIz^40g|`(}Ve=|))#H$Yqsk;V1T{p`3ZR}^n-Tyy!)
z8h#I8h36Z908x~(dgW!)@u2hzNWAUXYPD7YAxx9vzkPJl&@No|!pf+i%_tig;)Euy
zUUQ&!Fd~UKO2gkHQ<|6@sPW$LrD;y<$*L989Kh|oP@TOf5V#lv{?Y&5kU7gz&H!tA
ztIax?`;Zm2XVyNrqeue6oeh37G;o=E)xI{{KE!*$JDFP|@vz4btrw|g5-ypI9L(*I
z;Eo4izXLnlkFkfQXW6eXdVF&Y7GmG-?gVi5SM=4hKxTse=UT@!kfxxWDewr^%0Dh+
zW1_~c8_wRw@m4N&4Q<UCeI(Df@WDbs^?+5E0vvxxXT&$Ynqv0|tUzYQeUHsgyFu3H
zGM=2QMlZ6T^2-VQ`)6}PT)y8yp;_v}XMUYleRYF0G#hUpmuhEXY|2GbtG42d!y@&p
zS@)b8GWz@+!ybw(=a{H?F*w9YDqTF$=J<Ev%+Dbuy@2P|(tF0WdW!qV4rY!8%sCwz
z(#GFHUlF9cDc*x!zkd8gQ6vl<jNy%d=FL=s=Lqf^PFV1%Vcg;--`L<SO#e1pes<!K
zW6{{a>H%7Rp0swKN>>>ueDT;ypV~aLR}gHPDrX(J8(BecU5i0Hx<{=76gao+277L-
z;Js1ks=eq8>?)?34VmIel-z4zoo2pj_uR0#2#5lL=D0C6>Gqz;66<%7;{;E^h;Fv9
zK4b5owQE||g$dR3hARxz=UiR(D3HH%!-ywUsLJII4%i2s8GF;apAQnh!rVYzmzFxY
zvz0lp7znz7G&%l8=F5-7zBc)Ly_W6nS?v4JM;)EGP?gCMYN6ZV_t*@f=^wi*)UCU~
zVZ=NN+I^M$<-&{caGH)+0*%JITp^pf#VE&$_a^oy-f>}wV}7PnIR5MZ(*gjMyN}A_
zN*fr(^{%Z<V~=oB#*1;Vy@ovVzdE%nycZmU%KK&y>Ta8Ep5y4O98yVbJ`;@j`zh1u
zjpWzMRR8_0W%j~*KI3cR!ay*t-|ky!E#h&hxw*D>yjbbeJ~0vf9g8I%hImU+_P(l|
zT_lMz$^E$1@`=~y;|Xb7bu5wkK)+H%@NzYc<w5PSyT(H`=KM5rfKSERF}y?4Ea36m
zJP<V7z(R(s4sg3AZ+q20_^y4qY-8*3e*YE~lM|qO;9pLzA1cVrIH>9Fn0D9UlW`OU
z^R1I@&0DLSxm<&J`nbMq{_&u?r9o%Ql3Tr+2=*V1IrK9W4V##vrSE&AX#Qn3mNtaM
z8H^H0Kb2)k_d!Ydm}7Z_p~u;|dgOwdr(`eXIjI66RlNz9mJ!?e6POYZ>k@Ja6bqTb
zS_kXJ**OO$aI~{V624zuy{c}S4Ug{W2H|9-i4ILV@iH=`XA6%$+z-9mvOOh$?@07P
zD7?vawkvbT!Lzdmv6f@o)23a&BM2D|F?Y56rGvJKII~4PYD{Z{_$ijy4a2Z59aYIl
zn>#+AaND*=xNN(fv?T<nbG{_2wba7z+LL#-2CZ2%9R8)WO;UZ8vhN|e^zEJ^_Oa7;
z1EQ*9&1j^`DFRpswI>A_Gfm^K?GCuX+=>bvh$psP40`bHRpEj1I01crx4WkNTM5ej
zOO14k{ulm+pL!oSzpwM>u>a~B2G;+v_tu7eJ$t~!P~g|o-`Ji+{T_oXv9+V9M`=f>
z?z8v>{z$Znr84+lCZ`AWj(z5N$uu$eLsWSDkG>yU=H$u45pAIBaF1<vrexf;h1_gg
zsm_x@V~i<oEd5T$ADDxosI1Y(VDRZnpHw89&nJ7@L){>~XH|nMx=<E9|Dg~$doBIr
zRSIt8+*Q@7j||$!{SFrs^Hb1YJC>!q2N4HL6xT;=VO6|f_Qh->wWELG%V{U;BW&ma
zC1!dWoNnNwcpa`T<H?We(-Cf_c|6#Qcm*q1`l13xfMOLt_HC%gP_aEgD^qQVTbmoE
z!Hhj4+hZIvQ=uL?n{m`&;jZir@0`JFMK#=Jn<%?~HEc9%*t}_>{L6b*<Pe~Nu_Z+L
z70niwLRq@=L875$i+jj|AjkWOaPiy`hl+3_*@V)g8bdn%!h*4=QLX}sUf(+5(1HFi
z^ZAj}+y%5EZvn$>Ke1yrmt(zqQPyTZgnr5Ra{umLY9F&SJBr=@K1d{ykBFtu@CY@?
zMI}*J^~{6pI}>j{CvK#bXp_6Stu@r1t!VlzYis#JatN(X#*Hkvr7Hi-eYnZwxxUEf
zQ=UCnfh!I6@$aC;<V?K&nA<ksx9KN->&lBWZ#g%cDt%OqD_+BALzdm$$|~rCIVCL;
zOzDw>fiRL>-g#IjJWp3RXDpR6*Wo(;c~Y-6qCbVw)oZu<#NKGlxpU#+aKvZYTj12^
zv~IDx>ip8*5&io+JaTni$cyDbZBevrx4io2fc4k5XW$DAO4q{m>c+KM%*X}czN4&i
zf+o~ytF2HsGoX=T#q0%fmkE{<!M4|B)W~D&L|bO5PepPlWQLIg>4{u<<bD<p<m;1A
z2vVPb{JJSyG|J(*XciM#4sOw5DhKCz-S5ZS&nLQX>8Bmhm6GZQE_Lh9R>hovEx^ex
z_WigTAU@{$6QH2gJw2n?m6d;kQso{dN~SwTS^M*Op_w!pt+DgkQ1aQnrsV29RLmhq
zJ7K8{3en=)N>$XhYR)8W%gyBoNUXvAyzakVh+pX+Ff%4A;6qB9hDc0k*!U&FU?B7{
zI6Nq32HM?(8d3V4Uw97Hj*`LOcKZlr;(iNIpyt{?%sun>O0?n#E;|I@m7iM>X701R
zm62iAD<FBwbDs^cD&V0NSE=q}p^65G#cHw5W#=k7&mV^hb}`YqU!4qnEcveP*R#>S
zxA;8KvzQj`Jqt3eE~@x!9j@_Ll<E9zQR4P~z2g~aw{$d{`Vq}-H@DFz2Qgks7=u=w
zC8)n7TTIzAt540tES`+2#y`nHwS5UOrkFCbzxmvmh3D2`gK<#Kl}P1^O5|7Ahv<Mm
zE>%*UL)GR}yc6`xYI`CjGsA=AZ@m(f3Rhn>j$dgt7Lp0Q$#(QgO>qcTs9f!Emd>Vn
zl4b8*-r5hF=jT!hyGNT@M2l8y7`o8QBp60B5_%de3V8F>?c90<n!95`T<l#so5CK5
z*Q<JG$rkJ{(oyN!N(oJ8+thGM)K>eWZ3+#C+YSn#7iexC`bZ!!j)HbIKgv^nluSR(
z!a4A_O6$WAf^ObG2DuUu`Nto`?S^c61NqB`{C>UrA1%KLp$`(L@F#Pjs4e!?KJtG0
zuU$x3;lpQSOne$P;dh5<1PCDri3NIx|L%j&<}ucqT0A12HGSB8cOPVsWNO}1=Ay|(
zS!j6uIYBZqD=LhIHXTQ4oCboa0=jxX4D1;>`!v)djmtFYWgRHOqD+o}5)R30l!TgB
zFxuBBJTcqIDC~<}kE$J&NG)Hah{K?wgy*FPqOPvx%v@(^ccZDk)bG%yN2P`vDdAjZ
zC5d-_FE$KQWyEHZ0n|m3g4z)Q3Bg+L`(@u4nR=Vu8_000)m|5-4#(Q}=pa}3*>lhP
z9mCqeMMIVfCUmpqi)`O883zY{TV1UGRA`s^H$FA*-`~|Kb;j08Czbit&sA!Sdv&yy
zcUazHj7-$o2-1rT5Re6e_%~GL;Vxlc1bnbZ$;1T*K0M$ZPJQX$$|z7zWmddBpE_-&
zXrNvl6`4{vC3q;Iyw({Q<m;4%S5S`5a%T}`eUmou2{@Vr7%u7KNiTHIZ~z6H6!<V(
zG}Pw|T93k(*$1avxp*UsFfQ<PNwp%wj>tkq%A{UmsxMBmeLES|6@>h9TW-s&KvN-&
z-yB#77`lk!UjOs8pa17;Z(Wc=fEvn{5CZQ%a>!7nk;z<SjM)tf!Cj@AJ!Q0-G${_a
zRy|JbdA<Vo;tqSUBRW7igfq)!LbeA3p8-f;Y!bUihOIm=icR}O`grQTzf`wflW~W|
z{+k7^y!+Kl?vySmKX#?x<cgx|OpW|HlWUPE{$T#?tB(qU!7j?w!kU>CRzz`4M?j<0
z)`p!PWSFr<4;S|T8>kt2tSxVGovmdS7ssEAPngwLuf<WS7~OX-BR5}tNFp^|xJz{S
zpl(gNs-j4hQ=h0B-paxKPk+fj>~4L~PfTrINW_eBO!!>=xg#@5NfX(>+;4u^C<*=a
z&0=e6!NL!n7P>&pzAtfk&4JvfH$ur_#pL5nE~2DLO0lye^kFA&HnL{@%Nu5aF-ip%
zxE+3Zn2Ol>O~zg$S=UXM^!`vTlAtK&Icm79EBK{(Ia<1$DlV3jfT#+{4-i;z=U>;d
zYw*D$ulSz4?~jt0VsnedSZe%D-+5wPj2zZe!3|#esDV)(rmTBv?P*@MMH0~X&Bj$D
z?9QFx?qBD#(DyGtMdrM2^QIr}X+uSJNthbppwMtTVHa&H^6oXTc~NTf+crJ{n($xd
zp^VP(QqWG_DSn?cbcYic(DRhwq9Mv;A~|&Pl5B`A1(<!N)PYFf;nw2Tnzp4OhJ_1X
z-A;YBd_2LxK;;gg{5C?kL-*?S1;OlAyojlTS(+4s+5N<r9d!JBws`Ak(eY}Xi7OFO
z#<0UryJWrX$~bIAtMA;`sU#r<A>!5Hzf-8T0*ogvHI|O_!obIEj=FyldLM8+O9bvc
ze<C_9WA$CM!PqYYC8~$3FQz|ne19Z6r}J;AsLMH30J5IuJ|DF|M!0hLln{*#O59xN
zF7)8eyt%8F%p7C^P|`%=)d&=77VBivJsga0vs|p1bk7G;U6zRe4l41ZedZz>#9ea5
zb~iKrE^Z93xLP<SMVL%llOdW#N26@t*1eg1zD8a;pb~gfW=ZcmCS4fOPF5a%Y`i<Y
zc`HS_#+jyLw1xiHtQu%Y{UHSC_c0$5hd2e`*Zy~Vg*|k_oE+AOqr<I(T(s`CQMNpl
zdwZUq!ww!`EPNYON{u(g1kw|wcJlAwK1=7|=H0~1sfhhTzN%&+$FjQqx@WFJQ*XU{
zthT?QVwcpC@9l6;7b5N(Z+&1*-9JcFlUg8RWuYMN9wHSL=rH8}Y{}u)K8d#DOir>p
zRg*5~-P-I4d3yzHeub^*%ZSkKGQf=DtCtVa7*>=Ux`Tq$1=`O`CeLcMmiS0v=}r(?
zN7hP0p>Kzi+`LFg@m!a!>uhn!?e|wJ@uoTo=WSHx55z;;6~@up!(L!l?ihNw_nimT
zr*p|17vz(n;r1r{b6gIp6z@y<25&^|XH{^vh^~#7{(cNREr0X136s$PXQwr|y$W(+
z31yZiRv2#-)I~^5tPv>Nz;diD@=7ue`$&#xsTgfY)W+r*#LA*;7i(0aU|Y$FRI0q~
zp}cg94j!X7r<^X-#T}3~{db90j{f@M-z#^*!Ru#;xSpF=PbxS5ZFlW|jVv(YA3n!q
z^8GtiKngI6kR(Ist0U|{UJ=2&ap6R~ioAug*Xz7LGtV&@X}5#Fd#~oet^)?a2f&`=
z1KnXg!4zbW@sWQHvwu${dtcv9=r2)jgfU{s>nvF=y4}9k=U5|PHG?$3rx|Bm>!$k7
zDEr@N)xt@<+yFe|rxknJNsbnEq;G%g@fZtFIXKcbFG;3=f(vb!FHhn0a0X5XVof8T
z%u;IYk0JeF;^x*C!_}S!jF99c0Xz*ET$F{`^hp&Kql096E++MiI32&}|2zI|CF#6&
zREax}vkoV46zW#e?LCe@Pky8Z3ZQeVdu2yR=EGh`{yB@$ivfzL3QNXC6zQat%xIlG
zmh7okJD=8EDxmVG_@_9LDF5u2E=mKM%F<M*=(y*&V3ws+MhBSLe$rJkeEU^PO!KH%
z>=}yDjf&rfQmhz``2js%gSk(OkS@m0J-`&Hox)0D%|}Ds#nQ3F=3XIAHh*aO;gGGk
zCp%quYd0%ekj_3IF_*Ro`pz5Dmv@XgWwa_2d}~h3^uLUc2a@sK<$j=HQ?xu2#9M}t
zGrp@LB&jynUY5=sQ4jKpN!}dLreq&4qEg~y;SP%JY3{F3ZS|AYJM30ln;5mA;R{m5
zGU{f?x|9^*KJUk=w%sm00K$l6NsPtTr#^CJi75+cifU!A%4nlg$7lJDK4=WNZ0Y@7
zA(!{mbh(wjSEdpB{4+dUST)*_Sl$LdHd;6}ji#mSuq#>I6)OymK7NNGCpthQhka&v
z#PcA5;c0D7M~b*x-yaAYX<S%^LA$q8RvTd*w)97|*KPrq&!kW4<!f!jsNKAD44(8B
z|7sg%tE&$vNi#vFLq;_o;j+BqaUavV&8xgFOK`#OTHS76jc;r6@N-l9rG2dVkNGuk
z?XBW{q9pgFak-26tnRMq>rOu6%JX&oZT~A5V|z9YUiZU>>5Mk@03fi%`hZM!L@tr0
zp1#q$30s1GdwA=zZ)1V9W_<2p>`tW0yH-_W6X0bme^@{oz%{71p#(mxPrnS^R%o6e
zAQHFf;g9wAaHi9n-2BzPekomCc&X?R24U+$Z6OTA<cKpLtN00i_y&&*rDT~z6C%;&
z;eA^)E!9n=1^IT+1KywchFV#u12T{$a91ze09Mejy+vk=?3Tp|(XpNI$>gIK1Fcqc
zmW9N#`1G*Z&5Nf?{gXrrH+_6=OQw&8qC|G3#qu8~2j`9s943mBf+sQY6fODC`voAr
zG+#<+>I)9e7kK~!{yBQTF30M=bFm)fiRWc`$GgVR40%hIA;UGGxSXm)<I?w;o**5v
zttli~smkp(^<|sDo>o3Dx-BXp8+Fu7H+)PTCTGo98m$%2@?&yrbT_L_Dr=M6{tW!R
zx~6US7P7iM<iSB0%qThDH@LTpr#2wVhPUc4+JIh2e)p^p5e#q8$BliymsU87+@E`v
zX!G<89tT9pPqKG@yuGXOQ_kxd^hQH-eAh<)^~X4T1A(u8k`RMV-)om)kZoRx_RQ$+
zaBglvXZJSVExUR^Z6ZuJ^xMiMdlZzkpcL_PaK)ZSXJOvt=0|O!!WOkP_u8QyfOZbw
z<w?gi+x4>QTFsBB>#^37*ajcJUlmmJ@c_jgZUB<Eb%(cHEWZ2_lOw$)0e4F-9Yy`9
za<=AEJm1evvFI31M(2Cla}B3kGfG{@NdH&i5O15#x2pkF@0&iQP>Ygo6FupQGO2Lf
zfB=_-6-63xu^aBwArpuuNZujr&d_*19?pAWZ2KAdXqF2t5x#x3|KfFylc~WM#m^C0
z@SkHmRuwHfSw#^4wflTxht92J1xP%N&g#~y&#Jk^nxQt-)M=zK=2o5~(c0O9@*K~h
zR*X3qxFhz8=Unb0TGFZO#>8p1E_s{yyml7u7tD6;I<$I2Sme2Rz5{!(2u5`e(P{*|
zri%n|UC;NhE{Ap6d;K<l%}Quko(ssL@E=QFeenL`_19yStRdgA##}0Cdh2j&iq*|!
zGlE+;*sPrXO5uFnU|onZ11JAQz1`5NdeyFT^lgf(2p2;a*6;<f`gFmrk)#3YeE%Fo
z4T~Yt{?@U3<U9!j05$l&Gxu3@ZgNdx@^l2oNMb0{%})ELEm|41q}FS!z#N**rg62{
z)HKTejcmKmPL$@(2)r!hyH7;1Dnv4^XLP=d_RRPr!E{W|zDgAPG<HA6OW^w2b^L(2
zn>BPOro@KBoG!?d;NKrwbI3>}>aBz^C+y$-_#%YZRdAV*6+&M#Rs7MHal6RW-W;~e
zO^w6M=Gxafan12zJ;nQ}pcjIRAVt*Z=ZH_aF!qKJ;@c&&<=n@d5j|XTx>%}a@j6K8
z%kg$~_WQl=wOVj4&B+i07!3}~d%=GEnes#==lB3m1xCN3pXDo#Hq<e8VaH@BA3;~u
zEjBx=RQkVXTWZFX&f-5of||ciyCd95U3+llxNhJ0+kaWgl0M!D!n?yrLQd9zv;66Y
zA;hZx`m-=Uoh=(kDx1nm|4_w!-3ETlf@j>o>Z2zuV_ivnZ3cg13z<AfWt#>N@Wcct
zd+A3@%V5`Cf(Z`gN{YB#ZqzU}#=8#IrAuCX)~?4NL8`;GCpO#TY>bZRb~nX`l$cXK
zdXwA&Yg~t>lT5giUeyDlpqE7FBcD|H!@iV2=CCsXMFpD{jdpqZZD7mh_c&nPVV0wE
z0xMmLzxOS}9G~D)v?U}nw3za4nWPOJATe;l^n0(Evmy+W(4maIX3iOf8#gfE4a3-7
zf70SU6qp|(AClhk@yu!ux7eF%RSe(LQ{Ba^d0iu35i)LVN?dFXy1BP#!4(%fyE|Pg
ziIHV{N_q3ss%J62>8~R;gf<_O|H&)q@hbYa#A6g`SKn2`z8!Y*{%)Sq<Y*gFA|CTM
zZszxdorlo!s6E?<%Qds2!=c3ADqVSDo?UvJO!3VPsX3l-z=myw^5MvQ*@!&>PifYY
z5qDY<vNqVc<u7u3(b9E5vQryw&W&Hs_hWQ^z{k5B^Pmjk61v0ruJh<nsJH8=`_bbc
z#44T|pTG<#I{Fi&4RW?0u!1u79vZO4wWdOq_bF-nt#$#_242m-)wjOK7JUy3U(Xtx
zrj5egyjyBk;qUnje+g_9$fm0X=b6P}xw2w9w!`zpw2a+$1jp3M$P?m-)`!<AJjEU`
zG0~zF7@#hw>!V&aS%H3Uc8<xW`k*A%-(Bz#2r|7o#JjO>2KAzm{e?smiNqXP?pI)4
zt%rN&i4m%dTv0aQ*%5E>1JY(0U5NRg8+iq*;%UC8RYvW$;=TuFdcmLjk|!+>5uPj>
z#Hz-C=~9aQf@wA<l)}_hFaTe^vq}sT|B`3=OXPFG^w~Dxec~IubfjDv$=`zMm(YH-
z<Zuyk={d^$78;GKy#NjkrOw~U8R$^zma3&G%9h05R@CPf9~Jh=FhV3SdHizJLnQht
zsLVV{N)$iG(4^M5KtJ$JhzcK2f1V&yKkM$xm)LR38<5WD_H#;!U)OE=5+VV-8kKz1
z{a6RY1t?p-J-mh#(MO)(24H0@ay*AQlncJ9iIh+x@ckF~{0ix90E1Ya56Y}tul%kz
zWJ~7Ua0m+`Gt^}c<`I<8&0T(Zg86S3^_M(?#??gR7d(nPQ^CIy58}wAkEfSs|M*3J
zEhD4fLX;63(ruWq`;mBV{F12q>r!tEp@F*iHv`!fkuxh`1#M*z$olveUw|#MmlgQ=
zQq51>;Qe`1fLNh^%tuK%^d(l*eDDL^_INzs)HtR~QMj*1Kxg%wBHb&|9{8n4up!z1
z{@iPvbCxT_k=xt6y>9qkRosrg>Ed32FF>J$Qr!KyyQa*cu!DHR)F!LrdM3toBShul
zdEq>e7LG@2uSJ6L{u`V!9>AafrY-U{FZ<TqU@t6n>ZUloVq)~$zAM;eO&45;p$UEP
zzSw&gv-uR!3pzpJDBYi7JtGC+T>rLiOkka)``AR}`iLmL5vj*l-yI924x6i4UXzb_
znVYIT7QGvrc+F%=oqm2^Cw4q(U2^A`<y>(*lB@R3Pjjzxx=bl9dujaR*WW_ilFPqW
z!~<SY;mP&HwDG#CwCn1^F*!&GyPIpU{kjn2o6w;!6;}E*Vxey#==2kRZ6cJdOx|}>
z1^(zVN@8w2dNQ+thbjfRc+t)}w-dW=8@%_9IZfQ{?oO7IW~}>6>hoc<iD6^!F>PEw
zcx2|Fe9YZ19NqKWV;S-0k<8l%6%&P5Vi^wFPxxoR&@7G*Zz@vr7Sphq$=9_dlZlpy
zZZ7txoA?iy_$0z^>_H-P**KUPpdYo6o~N&kpOWg}({Sep{!*iQCIyGZ7{+ygh_#Km
zo|dlH+Oawwf@5@!rIkWkvQI=^e^4_q%`lVrTEW}xTeqld^%O?RoA&2(wt+*=vpkwt
zXvlV?hmuZu6AIO_@XM?&2(8bKJB`O*&Vx>mB<^VD|8FAD^aK2jS(~IcspX2CFAQ>4
zML2cY7QRPXcP#(ps$b*q3t%UB0~yxv+Z3BENFc=<>n3(~rDh9k?mg0=4xSN5mzgY7
z;06Y~Z#>@AyxRlhe99NhJK>-Ldmq~1{)oZ%qYV<s+nf858c%EA^!m47&&jO*Suj1H
zBquFFt*Xjjd0$<E)Rlo0j|Y=}S0B1M0P(rY%W+LjyWb-Ym&(qvOZq|=Ah*L%pQ$~>
zF_j~er+R*)p*0CgXRMc``<VOo0Of7#_sz}(CKum_m7rH(eMzjvS5w#pJjNRGrNzci
zCctcbkpxl$xNe<#)>!!MSeICS5JaK>ixs>fOR0;uEWhYN+^h9IUWnNCDbkbO`-_#!
zx$Gd@BiIL-Nz~!|9f+jhO_95~Innl&!KIm)-tRqOh#o0f3ip9PBeuAKD!nJKYDu{1
z{#K2SQdG!L>dVDNt;nG=a0bi4maKhOu3$(IQouuL2=n#PEcXby{Q!xr<oqMrp!1Y1
zD|3*pU|vyCYp5%Ra%k9gv`V6sElZsHz*$O8CDeykuXo^gZhAIvLHSdNj|2Df4S_A)
zvS`@6^W%kR*b1bM3o!BZM&e&LF*9Jy%t6l4%9d0O7KY|@8YzvQjFBQP9jKot5*<KB
zQwZ0B=`^ebo-y)K%zCKYHH<R(>4V$aX#WLv*wDywM2xSr(<azKi&dzVl(e9)+=j_H
zCApG(^@7?eKYE@HGweeJ7eFDXS4SXf&N*`qZ0_T<bE2?in4YY+;Z3VtEAAUrlB=hi
zHJ{^brq9ydUv7N5aK|gjl7E4{Z4;FinoHOD-I<#sj4s8A=W5=YQuaD!2Cn6CI{a^6
z7v0JjUI;+fL2BX@x@Sd!{AW2PHKVy(4H;Qasaw=NogOhtR!b*%4oiSW^q^yf_vTqO
z+p+5GRVpNh08bdZbv?74(!0}|*%m%n%upE$>z(&%o^l<5KAty*JBcjMn-T@WQ>qVB
zf}BwT2K1%8Qsnj<GZu&Oiu1WW8b%BWtPa>dg>q6TtmPvz{yjV>!nfl3TMJV4QvThx
zC{`1ZBv!#M>dviJv;=;4^(`5mC0+>`i~Tq6n{=$$3g`3P_jere3}hJYycyRpAhW`(
zQ4MPSzX>pk(!^n`r_M7C7{5*oaLdQHd23SfH>4Q*SF#Qj4k`|4LVhsZ2fQX#yFEsF
zdPx@64Yv+ahRk^C11UoYyl{#$YCLshJ~cOu)>V8#rB47{{J7)$5lJXNv@b?r%VHvl
zzxi_z8UFY~oJu*9EIL-akGi@`;O`k%^e~dBVYfBi1CCFl&8Pab%-C9CkYf8y@XrQ7
zy`IC>x`mJQA=wNa9fN0*2fS4WD0G~oc$zCD=LRlV*|OXDiYr6#+aSk)xPPm|nvUpH
zXG2_3WKA~YcqMHgi^Vh96R5xbjy7n_ukrF~sOH28Q*fe!iSI?$<0ye2#wJ}JK6%*S
zE*LDH9}l?0m}Sdx`5-OgVnp#dCfW@CP}=)`jI13}pDp(xPa3`r)i`@vxYt=q79r1p
zmUPlg^mNh`$IRg54!(yZ=o@@^syfBfQn;6oS+?tpVe!`VH3hDnQ!+_=bk>Jqahs5c
zKswF;ZI+PSRmZ83SN=(V!f0rSMRI?z05hY9uPL1a<m|&HlwU_4{trS73jB!)e0cgs
za=)TD@RbTkqD4WWD&oqTK#mNPwLV7)yMPl9uUtP2gICsE-4{x*VyHR><Smn+-wMhR
z>yFwdjbrE@#(qOd6&EAcqy&atdui)Q{P0T2tk|DTgtusa*<Go6(#c&kLy7BdUbCbp
zoxpg@?6aad;i3#5udA<Kz{EZ;QyE#KmL)rsN<uSu1hI?wJ@OhL<*7B<g~lt*YCrs2
z=czacj@hsu+rHt>C|VLoB$LOot5W43WqZmMGhV8HLz7BggE7$`Cj}Kx{w;Bs!KM{M
zJqn&LB;g_OU849(o}lYs;EbiE<xOYImN2M%RtDH`;{_e+{@q<Zli%MKMIm~l_i2j=
zSF)!jXmI5Yu+B32p|W<z?Ri@E`qmw3bd%_7wBVxeEYA!assDA22d6!dN4Gt{Db|<B
z<X;``@8ny7F7G$u65^VNV>G)t8TJn|ctii|%HH@Zpkb6HaxQmb>Kq9%_Bf~bPfx69
zEjuRuVbtdkU^)c;vEW$#Pv)qL^ed{--4zTr<TVp?<gqL6{S=-Xh^ZePsVzKsgl%`j
zj2r^=E!ofub*+lEBr`eL7jC{+{6Y>2#AJ>JjUPf2*WZX(uQ<{~@jW0mh6}3^D?)O`
zUQbj4(J6k?wNHQ)H)f&#L(@d;ivSAI`H8JRLxy+ily1fkc<$Oy-x@6#e26#wtq;Gz
zS<!<IavhUR!Y!aZe6_^`^p(T~xMVy*pL`(6&r`Gz!aKIFANh<<W_U^L2^*~Z<X8Wb
zRSSUF5Jc5+n(L?2G6X4sLgM(JBq<V2pjKi+>re3n=Fo^NnVl%P{pL-O^7QHK9Iy>Y
z$8!+t>k?wLBwyM3N$OLp=c6o?l9VGlq)yvftsxb2hlP@?2JA^Xif>Gz2W?&%QHD)%
z;1Y)^lX@Wdz-{_Tz?nIwRbY&;wl?*h;g#NPFZ}orD#(i32^087Mo1aS_8Umocm+nW
z?-$M<hV&n_PoHR@6)iC%y1ha~<~Vg{=>Mr?+)xKLtySm(1<MHEeX3iZcfy`yF0?MW
ze(a*HOP}F+KBj-6B~5Xua~%N?$i(cBobc;sBlKPzj+=i6JL#yxUDGf(|E9Q@2lBN0
zL#1LXoJPA55Rpir>VJ<UE>Z#}2BRk&O_9YA<~$QH%0NQ}3Zeh)>`a;>z6s+d(J{?g
zv{@Qbc*i_BEiYEtfY;Dj`mAKkHgi^&ou6~^Ak?*a(-;4-KX&?&FUR#b@$?oqZujA)
zddOKav~8)asxJGz_3pZ^+D&2Tx(@#6YuCe24e}aE>1Bn#|IHTpmq&}`mHyDgZBPY}
z^!fat;DGd*n;^~R#k#|4a@GGh_0Z?<R{%}N^OaGu^NV4;L~Pzew94QxOQ;L<<bQ_i
z{4PMmAUeqP^bc(AhDQl00psl={X@p4Q(*<RG$mwlqMi4h<&05#P8rjT8Fn@-QYBlP
zVgi=CbC**4MYg_v|NCz{UdVoTg;)IZ2&>@9m8;*y7lm!npeFW(w}0zd7i}+8L$);B
z<wW>jfAYhhuT`MRM~rZg@5%0*o|wir5Ypw%@dpxoNDz8zd*+=MqeZUjq7SAjk<)Yd
zvDQe=N6Z8tQ=}7cw;taBemSXCXzcfH@}6^%WHiitXSLmTQM<1r2+JB^w_o}kPpjN)
z)6u-f#<Ad_iL3T<vqEn1a$Ik8`U4qmB$F&wfOd6Si`mm#L-T?H1+m$SgGEXr+USN7
zQoZ$)#_{`~QA7GGX~iz#t4*JG>CNlINT@Xy2PQ9C%pBPHuSOXeodbtikg?Q7e?ve~
zQctBID;Z@)(-F}}*B|PbdaRs*2c{CUxRaNueaWG+%fr+QPQ?l5fX9iOm&H)S416HZ
zFhcDiP8I#>yReLRG-vx&$H$#B>J4wxy$kXi)aKAOq=3MqB^#1{nv||<(6)O+SMzQ0
zpDM{vmjKk0P(cHfQ@2c`Bo1HLjiFbDD*#hRWc3>%*kMidY_T;RF=Gs4sAR^A5Sx!F
zjE2bQ&szb~$(^F*ucs@ci+{`d0s2);sLv<h{;zk&Z!87s@i8_!5S2@@K^YrE2&+ta
zMp-od3TWLxvZ9%+yfT*&QJ%H;-va+d{5j`=ab#y^><A0>j(|ix(!hbHJdzJI9!Cgf
z$dci<{Z2shW%>uRfWPZ$t$xSun=i)x6`wN9pMfobWnM?&yn}6Uo6l@_AmWVQIB`*Z
zv>X+WAKVNq`Emz!*LIpA`G*iH2%!`BpS;-D?~1VAI_aKyz?kb_LIx0Er-rGtKmk%r
zg=o^I^>NEL@(W3D1yE%X<Fr~=ySb_UPWmB72wc_TS<4N)ssDC3H-;Fztq?k+DlR@#
zSQdlqlr1gf!_CoyLLwplHq}p?w_L+|-|7S#;3NAcb@?_XeeA@^^*tOxC?8=bDlGqh
zb^vi6KZOLpd@q(dIds`|{WpEz4Phw`*9vB|L9PDyBU0U`IRt4!S|$VU-A0=5H7_K*
z%y$(e<Y96oJNqR<MjeOn{j06ULsfw%Q#Jl5a})keBzZt%`>gTDH%8u!BaK5eJucMH
z9;kLqu5bT*)&G59v7kKPJ}&I{8A6;gw6r1N;RktB!3Gg|YOgfb1M$q$NnAj}`cHLc
zyV*_4ifYlD-7l^0T3TXOXOB2iZPy7#s4q8<<ZH{-4_F*%W*1z#_Exrgu2t8X(Qa?M
zn<Z7(i<9Si=k35F>xy&1UO#@XrQ&||kFLb2D9_|Lugibh-WhkCEM&H<$4lx;o$!&@
zU6ihk<HVNI+R!3x^qiD_w1Q!>f-dU>^?1(CtKZ=FqkQ!b4$&s|`2sGLf}F!~G5`Ou
z{2Ns7S1Je;{k5A57oyZ8wDm=5X9oe8AeCg5mihFS<>wSCsK;`q0@6syOX=w5IWx=o
z$q=M7;MRyrNjFZkNbmLf^?%0u|39ZypufM}CK1NM{3ovaA@BnR?&RHoG~pt>zW<yA
zdd%6@(*#r&Li_(Ic0+2rkPq&Uf9Cu{qc9if{4{_&Ds9?=K~mJT`{}&Q9<ZTyt~%p8
z97f*B`LC#Hif+X_%<MsM(n%7G{qL{Q3Se1U)f;eM4jeTdbPubT#VjKKpU@+O;)fr&
zeDqzr-4Js>I<lAz1t2XOSrGps)=*!aOlPBA*4dscpk*NQu{b85<Cb{J!dV_VM*4J|
zbAI0Wx4K=G<1M@Kz;_;_YF<Js9sO^~YE7+oCLdwFWj+9VauN`CcDq|>A|}&!0%q%8
zR#Bct*354DIOKmXB654kFl^MbO&sNy?4v~obQwm7LagRjqL3>W!E<~0ZLIX?Np7SN
zB?uSsoeuKI#f$wn7lDQpXhRY`hzgVJNNVWY8~s>73E=E<w5EwQfN7+lX^s9Ek_VO6
zR?^}E2&S1yczJ{5^@o$;wIW9|e*k;JYte5et^uu+9`A^2MlUWiy)q6EV&4*hx9FMX
zCARNdJ%hKMB#hp}57N{pLgNqL_5Mx&(MKqR)9gM}=fN=ty0F{Wzn{PT{v-Y2v)oh-
zB4$QTLqCK(3YljHShAI6kGUlaC6MJ7k<5XDY;jo|g6r7pX=!D92eppto|N}rjiENQ
z@EMyyAj^_ZCB({ZVj&*6YZnJYGD>obl+mj!ilz*&j+~aRvcugQG|%<)#yoP<!c=}M
z`aeunH1wys;__*hq?4Kz^TWhJ?WSfmBQoAPB+fwsod(VPPr(z3A#l5r=B;PU!j<)9
zA5!+suuE3e+mbMP31&?e{fYBKp?ExL@<JWY4M~G7(Inuxm&f{)i?8;}pA})la7e7<
z5U%IgaXk6DBv5YE)bm&}6rG0%7@TpCmnmkx1n~v-2y(~dY^qA`%e@^!y*L_tkyALG
z|9QXAxQ2|d_8-t&iVz;J;QTOQQkaYT{`HSAWV#%6siQIeaZQB`|9<*`PoTg`P0<18
zc=6Y${jja7(OxpyCQ}=d+&>?+a;LkVKPFm<X$%JiLo?}&&zR<7mYRD)MBR?y|Lq}|
zJwt&I+<Rh871<h)Wzn}S0)>&8>_<Xl^3b^%lY*mLy*Fz6SBjnxff1(9<_x&J|F*U(
zdGBMo6&=6<ovCL;w+Y9nYXc4W30ct+?v=9d!@n{*gsPU-i;1$auz%cgzl#4>G=Yx7
z_?#5w7aT(<zs2QHe_A`Tav-3~TMHpgO<TaW54qm0lubK*|3YKMCj|*jtup%N*(No?
zK?5PEfb?T@TZS_~yfLIZF<m~6NDOlR0N33Wu5>KHgp!g_m3gVf;nyT70do=MG^c8>
zLNZ!vBMR|w^DR*XiXdVXs4&Q4!Y1^7zkkiEvxOgAU;r58h`R1Gi_QI>V)|Y5+*AW8
zOvLrn4Y5hkuu&0u{!gJ4BC=6bo5)Du?soq$cR%(NRuNTJ-@MS|MdpJFr##S_HfaQ$
ztx+YCmk!U1@0#A&v)EjY#x3l5!1cJv6f{W@sGl{l6j9G&CJu<bo#&vkrntvb7`Ys#
z+>Q8h=SKZuss~aO8w~6X#kfb-$@n4fMDU)|YRMK6|6}g}mHtS)`ctQ?F5BzDfT}i+
z0B~7<c3Qaby)mrY#}#8^I7-TIja2)^u)B^iAYr+*<t39F6WB(P!Hqg_iF!CUu;=)6
z>@?zP>&_<k*Dap>1=q^Pi=eBgB?5w<ePnkdBxQbZ%VElZge%TlVYIa6b1F`HPKX<K
zPFP)yU4ai!Nmb#(m#bb8H$=plJaL<~ZLi<E+B)LjF3s5eMmM9>FGGa&PD$y?1&?@c
z?n%^U8+1<ez~}034$>@si9?jiGp@fUecGqfGWB$9Ax`>;1e$1KLA4&FRlfYl*tB@z
zchY%H!{cl9o<(SJ%nHq~W;w}EnyLJSw+H4~Bwsob5%93=c=C6;9C(0IZet4w;;(Ek
zPC_pm*PKLHI?d#HIiU56mX6B*<lm~XHZ8B_X6Juz<nfb+ErFms^jchclIGKYhfwcd
z^52%yh79+hNPO__dSl0`+BQcD{YSv%z4=E1*mp>Q8~CSxe@r~FhLJ$w>XlA;7|RLl
zXP?=eD)l)yi%T$3p4%JAj6yQ~ZX~n$PP8!|IT7ruCDw6u+I}v0_)sSyRe$Cgx8~am
zH)<9&G<_yb%SOwaQ$V&}l5o<lZqgG>7sXkaDCXGxaxFhj>XnwpOBdTiy`lDd-{;(g
z(GbGAwBJ}NBRRc08`tD{FCxU}<Vl%LSa+$ivn=!rL6)H0S6J>>#z`L=LFA$TJa(5V
zI0|6mOg)urugdkZ#m?r6%QbEo1_%8s1ZZm+gayMv-Ba_h9Rz9JkOsype-!(&D6Gp8
zOAn=B0TzfaWFbQmT@N~p+o|QeX0A85`c&S`{_P-hq_j1jEfd*8W-<#?7S&0RZe7!k
z1ZaT5%1RbvcDZcHb6*DOD_1kIf(j#}R|*yM5_E9I?0RToc)HXvyV1xLp)?-Wb<#sA
z26Da2iZvv-K!8IY2N^=WD_zpA_Bq0<GsGYi#>#>N#@%**;R21_tri@rnE^&o8|i*W
zYh!W>2%cbQh>&FOYh(!jv*8{A5|dAA=1+4q{2~7D;Ff{Cb1_1_tX6Tpb6RnIk6Jta
zof@Vb*VUc5`SkLEmfQfDpjr%A>yedBQD>3KKz5$8^EI7T$@RMBKv_3>4R3HY40kg&
zCtd!!q-0i*i+bBzR$in`wQ@4MU!tjEGDm7GcBJ0jq*FmYyhv7_NTGp>YK|z*zA+ne
z(fzxh9hF(#P+oR8U=u>XZur9-Btw^Zp0RAt>n(w=*H1d9{Ck`(!U>(tA%j6z+Dn)0
z^>9HC7$joV($hM_F6h<c`iG_l*prA8>yBj^v3*Jorz&-X=Gg2SJW0r$_yL_OwBOEc
zMa$}4Rlm=95Jmw5aIgM01jnm4u&aO+(9W=Po&4@w-yMO{5HCkOsu>gK!6*xW00h%H
z)-8Y_T=K0p@5-ueh0a$B2MySc1bT$S-+uv&#G(-`U<v@3iyDr|xA!iRBV$qRV(<TB
z?=86MYJ#*;I1ntj1a}L8Ai<pg!GjZAg1fsDg1b8e53a#2xVyW%9b6B0^S(3l&6@e{
zAGqtTwbx!pdskOiS65d(Ro%U8O3(#2mIGJM`HLs2Wt4Q}^e8oGXN&NVXsn3zAJhcE
z@E5=s_7mQEDTEXM$ATNDsI>6O7~+*N_8wL^5DPvA;y$?_J&K9>r@jc%mmQPv?=bNr
zcC{WH)mWnV=$B#=D|h-Pgl}J;>F`CAx1X?zSG4A*2Bq`JBBk_KHOUNo&5N67m2H7_
z8W;`F2I7@TIrD@QX~BPG-|2oq_Gs$|JFuELYOp;+{$4u<tB2JaV0g%UfZ0<fX%@wt
zuIy{e*sg|Ft{8p-%C(5=IQJPWt<$bQPjTPv`C{C_Ko4ZNOxe*Du%7&`ZMS1c+xNz#
z`YuV2l)A7!BYVW~y{llfrNvFp31ww$sGypo%i(;rhV_8rrn6?SVDj6;-!!AE9lv)R
zvBcR1)j9i;9Me0MCOHy#d){iDnLj*=SIXCth;if^B~J^*Fjt?(64-kij3VvF1g(UT
z`RzAM2ZK+Zl45?)I&clUSygdkYee*6`K#TKJq@L3q4<7jOK;<#&xEw(Xb_vbKOf3m
z5|OI!k<=HFufDPxuw+t!(8+tYRtS1F%&Y7p*nwiV<SuTD9C1HsvoJreC5S7~6Ry>r
zlw@aEk}Z4v8a)??i^s{_j(S-zJ&p{=`z+YvSx|Ctl=ZHXrHVDPA%EoLJ$bJf{}p={
zKgOD-x(tw`@w*{s!4{It%@We)w4p4u9*<8EL)1yX8oG(HCz+~=HaTT;lKs_FNAfd9
z-^KuL7SAY7IYVEj)ABrkN(CcLqxgLNNPIQS`)JBr6FqJ`@XTqU_(|Jyu)!Mci`>@4
zE#jrg+JXh%^&$5g3C6KKE{?m5!S7>IRJiMim!Hh;Q!x#u#4V)vLs@AFj&fWWGZQ}B
zlym(`P1A|`&LpWVpgy+{)P`~d9QN1SzTW2T#q+>ceoQY`b6L<k8TGDE9(#{jo}zKD
zyJJ_<xyoc6hY5R%03If#(BRrj(5rCRkci%jPc*4rUi1z31fxNEZ4#01The~Y72f-r
zAMYM|rF*V6IPJBxrPQh!H@yn;!r!K)KbS(Rm~HfL8bNkXX__8-^xgN47K-UU>Q(U3
zZe^Jp_K^i#qOaO%qz<K>4=x}U+!q=2v@38zyb{-Bnv0K7$`A2cfK;E?0ZjjA0Qq08
z)+PQ?UIegIxXUL|mU?pa+*BKtO%kTXKNkimC<5Cv?*CBTLjWl2_OkB^F>PJ7pNy#e
z-GQRotf+Zbn>OEkyacKi3kgSELxlh4b)B6m`^rnF^TPsrjf&D}67Jr_-Q4)JEazJL
zsB&_iUxX#56n&s9%W6oT-FFN+njHHxsq!^$rDfSqp9-2umL%Tfe=T<)U2p8KuCH8W
zw(S+YR~6kBQm4Fa9O$np;aM4Kgc#CodRGXT#M1Mef<{r^<0Kk+W`U3L3nN_Igc(y#
zEP?zqF%@e25vdZsqle;;I{rbv_ks+ry%8~R(L&cug?B4UFRj{QPFnI^lA(vZrmJ3V
zV&tfW9Br1mO4GtFORha3erF#U+w4ZPZbx)`^9UizFGH89MVW7{y2YJ$C4=jgkw^&7
z+U~s@Dh3Sil)U;aK4<VMtF20Z(UaTk7D5hFMBlkkN9^5*-Li#Km0cZNjcJnDw{=eH
z%dzw^)GliyJo<N|2u%YO0EhI|S5R>u_0=L3j`hU@dpoRY@K{aYF*dL)a=@z6FmBWX
z#xvoN(GblzZrb3!5u@uw+PQAgc8O>UvQt;qB4fp@zVi1}%CJ@0vi4fOHGrh09hKg)
zaG%&8QuY`hL<)v=lW+z5fh@QyFWz}d#n3=4=LcA?nz?Iu-9@ucPY3WV?ZxwWOUsP@
zC3uF^bJ^Iq7#t<_-=guJMY|vEWZc<;VA32=W%XeSP6zG>G#tR_&z@>%Iv{J+^7RZD
zvDGNR>#*AX?b{R<A;0SH)}xwY9YTnqMpSu)Ln&}j^FZ9*09IA$0Jr)9-SGkEMukWC
zPVd}_jpJ5a=RV^o?tYZ3{`ncZu}G%ti~5(&m;|=!?Cblo%#@P4*KNS-wu~D(f4rr|
zQ!oVAHx59=U9i$jX8AM(w|Pw{56ZCb^*Zs)nmr29v6%x{IE6EhoblfVUS0t9&2nCS
z=TM4{t@<<Y9RL@Y_P9n05R2*f$Mp)E=*!3K0q%OfdVxGqKc5_YBy!j6{$6iw!+Eqo
zb$m4sY)$$i-kR~?7VZ}<|IPFkgbXG1UhG>mTQy^xwG7FU+BA<@=k7OPQXEkYju+lY
z2N+Q2Dy}FPVrD+w(~RLb32uA(x#QIw_8mCk2C?qpuydVo)V24LPc|7=`N<7ju<t(o
z>~qEk&3L=<8z*XxS?zF_8v2t{T_H3G{>kR#9DeT$n|I#hJ{sUM)x2}nm}IL<XAb_=
z(=aoYeSCwyyXZWwZPFUa|H$V?F_@g5=eI`_7JPT{b?Yfm+@ZX~>^OopfZNzEx$>u=
z=GzE7c&;aK@A}sB2-O><f;?w|#s>lqXvoDgQc`wYJK+K5$HEPth4Z=jQ$F~h?|Q8N
zn5RN$2mr%Xym^@99!z8;a`3mXxMS+P-U#N8Gi=hH__%vwSq-rYu7jNra>l#uC>&yF
zKK_&xY!k#z4IM>bI1CYX5C|gtVrNaQ+pQWP=Ef?K1z<khSo;MOOd*dtnWaszND*(}
ze0$w1{*ptGFg;s5N$91Z4c_5%!$jf*VA=>TDsO0~2l9ghw{IT1x{iqXx0N-URR`$b
zhhfs$vv|v-gNgYA=lblyC}90daThG6&vK23Xf<}@lAmH%&>+sZ(;j8fOOww12roEM
z61t+o1+5|J^{rdz0YOe;O-6YQ5k8w%YMqVf;w*$11CND1s!|`n7QHVu+(|^LaFDkG
z6KKJDK03YAa_BUDrn23bf}gK6B<)-p6|3=LCstPW88=G4m~H*pTxS}{ZF9nZa_g8o
z69%z257G%yUVd&jh&wpsMvTW?dGvX!ix+&mwqoMgs8?eLZb*Osz}C)M|6`kcc$<aJ
z&DClQThfV7=imM56996DLyCCGA|Qf(^^A(72~h$QslrOVyFWe!(+GPc8s1PUkE>U`
z&xp|NewxEaC*S-er7w~lNk>8<a#e~Q_jW%-B2$>f`9ll<yOuC2vpLDD_`rCz5hhWE
znFN+&l^Codt-j6r@I)RsF~E%|wt>Dt%Z+_~*hT7b?i+s-y-vMe#|V2y#C)NHiOy7;
z`psiYSFTAweowYxF>dSeF*&zSbkd#?0dqvf^+dFVq`oF;wYc-!!{~%$IZftqL>sfK
zrwH+icX8u+&?m?Nc{}fi#TIwXCb$5c*J%yqCjj_WdwDh9v#sK1zj>86SbAs{$Bz@j
zqWQ(8v{BqCh1ih|w~bb{dqS;4P}ED*A4TLuTb{h{N4T;7_Ix?ci)aPqAD*q|xGPa>
zMP)K%V)Hh~aam4v`4Ok$rJ+4;G;aPq7<WWkA^eoyO7C=UDUwoj9^^WBHdw)$DsgQ{
zjak>4R)Iyu_L>EeI_D&0qB5G`>;EMd$g8qY4QI!P+|1QZO{E<kz%W9pYN|6rx$A#D
z2#iPgWbW?2^&i|7xe{c2A}4RBz}$U&=9H3bd&`(gvUdm(JleS4`{DObH}@%lun(Vq
zfbdod+Rf_%+#ye9d(o-jI8bz|<$g~cp*2!J6})W)IrCN*-OEbex`>xHIb#Da#)USu
zg}N?2-wo!<1h$8!zGLiH07{<C%1cu7{$XplynaQ|>NcM$@Pg|s%n!&^T2(KgA1Ma3
zn7dUaXOYrfdBkpg87kOS4-<ltEb3J7$lE9Ta#GB$?g*PDk;C5piC&YNUD#{Cb<{b2
zO9Jwrx-+56;St9C_4!AjFDcq5I8RyW>RdYh*=L(`R8{o0tM)I-HcA6rJj1tR*%ioC
zSE~3gu{mPnDRKIe_V~r)26PjQBtN1%u=bsG!Os_P-pu<Lz^<tSFx6RfLGRg&NnBqu
zm?&Tw+HV7o+<pohhI(;FJoiKtoYET6-dR3j+0<7bz5^taCl+2Bg7-pWNAmaQyzLww
z73nJfm{tC_(Oi=RTc#PWvJ;O79X>)@L#IH<Ze(OG24&y`IokcM(F@m&&Xo!ctAP!L
z8(IRi;$otz3mOi@)+uD@j@HV=L3Yc()a66&Mz%<hBp)n!E9Lk}rhenzRr&2I@kyFl
zlgr-u<NijX!k0(W&$o}FTzdUjYW?KxP0Ir+p(n^ble<5OTsD>6NP}Mt5F1x}$a|#n
z4l7759%%?Er3ssTQi^U|Pq?9vyn5W%4&27LFk#_>eRm3`Px|_xQ0UcUEegl)c%1Xc
z_fNd8<CXg6>Dbzz_6Xb|&wRPQ!KVY`Sx6BCS+C1f^PHcu>9lLSFsp+nCN{wvYN3ji
zQ@TVCSzlRyYd}#Vs`;D+MAV`YpG<v*wcC4SP%)89Pm<h>*bD1-5&hQGXq#BUeWCoa
z)t4+1p!-tWF?&vXQn;)30qJ&vU%CY)A^7_RSDJZ~d3y`vF0<x}Z_!zeW)?s9g0k;W
z`N+Uq@idO4Z;gF<&H&cb!d0yJ7W1J5w`Z}TB=wMBMJKM9Sm&8iueDI^j2m+OZhrP1
ztEL|BnVHQuAr`=8hYi3yg~`|#p8|CEq92(#Jn^2lj%Ac=C}GxPK5TTOnfLH9?vAfj
zj5+xz@K>Xfx6|xHdm6M>sGadb^Wijs{JhEao{=?uJg<hxe%w*Xn>Ok4y=PlVLEiZ|
z>k)dL$r`_)cM2o|JTyk^7e^BCvEt3gNZpxo2Q7RUkcr^<a2sjZmC4y?x!|hQVEtVk
z>yH!HUPk>9D`T&=mdGfr&Y?5KJyZpcN5$txuK%nBkYlD=|C@AbHM2dYC8$ZOk}YX6
zb{Lh$yd8U~;e1=`dbUutNW=4*8;h><Z=9X*H=+=XZz0Oh+9Nm~C)<=(rQ#0IiCcS3
zQID<}ZY02VFU<w?53O6RL2VW+?<0ID8FHl}*$7P^P~qK4%wg*in_Eu}Pkne<{Xgk1
zXK~(>@B)5vtGiRz)c8$jmZZ8AjfTpWvm!nqO?1(!m@<i-B#+ZMMf=FZ9hGP<!}q#P
zzxB*f5Tq%jXNy${X{dzU;VtKq-c5YYKJZ5QHSTEgDZXCqjBeIrRNmOX5grZt=&W^L
zqK1Xe)%cSwrPtvIe>%Oaktl5{2V)H6Dff%x!zM$Vom_-1l4{~J#E5l2oZ4W9W(&xE
zL`z=Pd>h2D-Qs94nJf9>u{gBpizV~)PH_#5Vv8|){QJ{JCB^+ZLfmLP8YghylC0q9
zQWN%Q^tl1G{(AFupc`9QmwC^Uf~Zbmlw4j~JA2Y(T#m9*mad7cM1ig@XOg{GPi&}i
z(tF>4DW!wGx#5C-g!<bZz?=Ei4edJ4v#Bj!#H*Q5t7ppw#sl)%U9Q7ju4>i6-6t^f
zb{!Ib)e_}Pif`Nqzt?@AiO#z2|2c^K>-rGPDXr?Ki7kiRgAO^GiQdU?p__z<-P_Ee
zw&#4$19o(dy?J;%djl}>Yhg%zI9hjG`6nn>Gr7ao$8xsif@vNO61q{4^z?uDe6^=$
z%ZQEu3w;#z_9!Y!D4lZp5j|iR09bC5&SnVCCJ0~7h6+EJS|Lil`K&FPt=>C0I-yZ*
zxo{RHTvJ$?nW~AZ2*39Rvnw}4_%h0*UeQa*gu)SjGJSx~@eMr>ema$QQrkCEQ9ld?
zq!AdV(_dwe=HcmLIpYXHHo9yPu}>0u<-HZysX;ocl0bY$?7~jLlnQs^S~uk|N!Vea
zXv;KjhnEm3f@0-S^@zX6eeB>Fe;fwkivM-cx4CNkexHe>Kbff2=Z5M$=?Q8N-)d0<
zN7Xn|`v__S88*d$C-3lqgJ6I&1e@_22Ce~6KG1+l>()Tp4v_^i!}+I%rK08;a2!5q
zN9(6kM0G{jwE27-a4BR|vd20&6V$f!^!e$4;36i4&5g6d_1Iw9Mdosgl~z<ddJL6w
zyAXH%(pDc;uuCKFnnYVPyiuq+_UQw;>TIo|l>Sc(UAc!O1FGj<(za&bu5>iTuU@?Q
zwBpqY6UXe-J>oi#c^zQvSY5l38>vb9C#kJ54%-Py-MCran@D2ee<cAfcJdb+BtY{N
zEd+y7B2gnvG!q69Z4cEObR@mBZ<D1uftKXxUDY4nsTQNo+*_(PaD!Vvt3*g|mgJ(c
zmtY0>5b4;B4J*QZCdb<6rX5)!<lCzKR}sHGLRXuw+j7skco1M={$ud<lDmYWFp$39
z(nAFl@Wy2~_534^fgf;(c^eP_wfyDF&lrY}R&A>3DCPLKBc{6dTv<6>JT?m~>NEyR
zwz6UI!+}D;@!%*NPyDy10!u4L3ze>$PYQL9hPlePiSU+9xY>C4WsOkzC&gtrfk{i4
zAK}-4xEF_5;G5+;+O3Bb|Dy=_;EP`}A$Szxb}Xpc-L7+kXjoWYj<&Jz1`8=w<&51!
zHp&_<tdZdxq+^zL{A`ZIdg|(<nSS54NQ<8|$ga=JnzHtTG|#vn+8{cdX`zpg$EbU8
zq*#L)D(oq{=$sWdTQe>oBQJTOoYDb-wI3_LsnS(K+REz=D%v7vGzE7BR`!xk1l<bL
zy>G1XapqiJCX;B%noAZBdgr7MHupmJ+f>-6O^aYXe;?6>2qIsB`yVb^jLpqmn)Q4X
z#$}f1fpRQ^bn<6qw^)s9LLrFQ+E=Xdu%&{G$KJlk)AK(LT5`r)!0LYBS{>4Q08bhD
zl{vF*$?cP?lIazs^hhduqMkm0hMuxFPb)<D@?Om0ivX~y_QC6G)3GJ|*&Xx)_JKO6
z_KXUq-CJF%7y)8QvH>(rX|(>~8@rFQ4|(JJ&jUQz1oSbPt@X`Wz%s^vgfH$V^nzJA
z#mXAD9GCzh{%V_bvfy$v5%qFG-TG%!h;z*KXn6Z^1HeaK4SA?e)t~~ES9XEu(Il@f
zHbJI8eB(nYW-EF?t=mmT>+$pK^P`w!y&_`=7}zlGliXy!=&4kJSMnZW=DJR;wbQO4
z+Jt{_z@4huqxO-3j1`_`A>WgqP<&J+P0Ox%l@=whe6d#=uGfwv##&AI>s^KFOdFB2
zHttvN_r(@X!0yU>iAaN;$MwrL+#dMuaaL}B0>KJ@mbB%?dvI3X{`~#ydJU`+I-lkp
zhfiq?*7jyiKE6?;A{^GN4IVc5lyeZK=n(Fcg+kWN+jg3O8A}}vKqS8`XE3bpw9WjX
z3d^u8F)jSgX;Z&6W3^N^L@)VH*RZ$sMlNYvt*G03&Sd5_RB2`}1-nBPsGz@XyQsPH
zIc-RzsHiJrY7=l_4K`TdW^j=ABFt!LPfKCe(Ql%`Y(brjDd1yZW1ZIZ2v(QNE``kq
zVMRZNFxt0Q3D}O`0vS<1{CpKnYuWgy1cfi8EPi~y^EVF%B;nbOJj3Z&Ef&c=mTMWv
zWmEqf$fdxHs%DRI&=*`yA@_i5A6&Uji`kVK49V49oaU${bc-t`ug$THzeIbgzlU#2
zx3G5xjijaOBZZwr2vcT{u3{4)?#0TRu9SS<B}4kEW9Of3N!*3lO})?<EWqgoXxrcA
zgV8zT!4eIpcMJ}PZx<MmMglWb0)v9tapRBcLlsRan#*wk8OqLVCp`v2#3q51K?Kme
z{H(OB7;6dqPh|ZriJmT!M(%X>F{5U5llSZ~msjle=3yVaZK=rX6qiNXU|K`4&s}4c
zZ2LE<E_nAM#!&Irf^rpeBBB@ZAUbp<);pJMsiDEg`dzaTF5a?$BPfQ;@|fO|4ABdx
z5!e^?ZaR{9d8n(r)%LpVd!SizlH3BHy__)L47fZuu-Nt5Af&WoPbjue=sej94(QWf
zc)2`VWjQVVF|vvH%bo^+@^i%%KkgkY=`Qc9UFB)QYZLZfz<jypr%Nl{n3L`M-s}Rh
zXPPjoJV^GRyrb>NQRkeC@CmyUkuuc%BL*MtguYJ)eJ`-s`9{bPOf_PO>}eFVp!rwH
zL-%H-vcoGE9j#-pF8NaZZW4a+PWIQO_og+|Eg=E|EH4l~@oW7dZ#vAEJ)Z1_{Kv&#
zI~(784(9TN7`h}gB`v0#c=x(|irl*vue95vRFJ<PwF+MRyIWk9Yv<Z1P5^b8xKEht
zTWe%n43v8-#ijA)PNEBWr4T$rRcl678}OnuDB~8>h1UOTA5m>@JKne665!Co6uOxB
zfp@2q#t!`jgdb;x$hZ(?HghO+vyM0*{H;Zi1hwev>*+J=#DA8>x4m=1mTkyhD=z#R
zhlP9)&OR8$M*8YPlig-iNzax&N_zR00ic!p19jwP4&^-Ma1D%*p19wt(61LniO=y{
zyT(njPdx>nviLq}!|V0L_%4fV>*NgSO|ih2f#tB1H;6EDh1CLUq`SDaKJR5)rGAm8
z4Rb<Apa9{@Mdg~78{=UKgnQe{RMT&(+Dk6C=D5f?{6OgPMOHbbv=>yMxJ~(cqbwGI
zQbD%P1h5l=De@>!4lGJ%<%Y}vV2sn_iYOGe)V&~&KRG4sv#upQLeGJ|tVp_V9$|=H
zE9(z>3?@y!UYrYh_r0|A3Jgp<kUd(AM@a17-v+1}TUoYYdsj?<G|U^`_Wr#q6p(R6
zu?D?{b-)9O)w6v0g&Z?evW(221746l>BN^))<rLkwE%#89$>fo<23erM=KdX4DR_8
z7aJZnfnb4u0Z`=nwB|5HJR%5;MjA0rWxG%f7Go4UI?l6IGt2*G_;(TN?3se>7F`=I
zH<H^l!Ux3oSO1AH3;nZnU-#riPRFk16cgs`XT4tt$HkVc#Ykw=_d%U*I}q|)4DD?J
z7-&Cva=qJiWTdaZwX}!3q=3x11c|j4G`N5Q8{<eFkrZE*F`2Ky*^&l|rY;!3IaT*f
z2G$v{d3XJ}6=!gfP#Do3LCYeJ_~AUezc?Tv@FK9h;(yE{<vE8X0>E-F%HR3lBQlIx
z&@gg+QTX1qFQg6c)qMt(;fW<!T1g1-x7YXg9JhZN|8mNNa6c2G$B&Hw0JZ{3g1N8a
z0sLZSY>gnJ8aBb>gaJJQ7Z$M4L}jGFY-O>2I!06kEnS$apYaKA5Z!2M&q*!aKhu-q
zRz~!AT<?%&*ter;o)R}9e<OB~Cwzg`LpnO_>9LNlQOw<sFI9W^g}&-z{Xy+52WYNU
z5z|rx^#Pn2izEIoCFrjiqw=Q0C!zWRvab-?7{uipJq1$`r@<9lJc8Qw@I(=qjhjBf
z8Rr`+HFB~=FqZ4xP6oL^mtRKaGVAtg_K@BT3w$e>Df4ZC@=pvW#|AryzBf(T`vvJT
ztyRK*O3JJvh(_XxwI|z*cA@v);xx7k36WvHqSbmzLb=s}7gd;u$B%l7rXXI2D-LCZ
z`Gb_gkI52`QpE@B*<B)UV0M8M0mel@l;X&=jVAk_lAUDA9k?65T;S#xru1>~(1d$4
z4^>Yr!=Amm2|K<Bo#NWB0eq%^f0d2(*Zn<kx{8>$=RSp??6x@4KZ##07zi8zy-S{z
zq_D@Yk3(dMaojw%a~}D(dXWt5whs9%vNl{zBtEu=ud-Ct?oN}j22w_ffpf)l_G@Y`
z6zosmW!i1;?676I?KS{8D^Cqz0F^5kcHe-WMabr{Qz6+uYJO4x3g2O(wu+6PmLIz?
zjQbVH5$wB6xvc{*ZjQyj^Nv=CmDQ;<<EZ{4!57xpk;K{4ve!%_z2BJ8kN(TFrTQ*{
zRds(o&=H(pC(bjH{u3E9GwctAY<xULE{osjm5<u4H!Mo;S@G|`3-1sZkdUEEfb4Ce
zJ$|YjpHk0qz}yR%0_9#<sJkwpXzaIbn{IzHNJS7`6}^SOAlO<aW2Qpv_xgN_W}gLc
z3{V_?ul^^!TS{1@5&4FTWJ-jqaG}Z%Z2V~-BSC($AZK^u`F;$?fe=<Y8caa~FgK8#
zYKs-^@ne~An<QJBc|X~>OpWxJOiNCdCNzv4je(M9SpK{#$iZIdA3y`M9|Ge!d7xmU
z;6BAIT4R(D&{K3@VOHgGHei%nY0-y~zMh#xkp%L*E|rWto$?pr$Y>uD+<xmy4U+;8
zZ{O`MoUW{8LPx}R#H{<LhPhlnn3hY&rb?&ZyFX16xk4Rg36%orjnrf$K2aI52FtjP
zu=Z=wkMOXtfdqga6gdesXd_z}^wU!{ead2qgz`IuJ-&JsbH^Dohjr+AV%$34j%W%p
zwEl8FC)5G{&q;cdEdHZ+oIhIWYidHoG$_1!pzfaV8~dSu`(Rd~f<yqC?&2POm(d(!
z9s`y+w;|BbK;AqQz`&NnWLAVbF*0myf;HpNZ)EE!zHym!gAmTK^e7_VOz?N$czOnC
z$q@2esFDpPz!v+(3K^jN5YF$~YmA}JUrF74hIj)dinAX5+}_nK)Dh$Rv^Mn8&OWVr
zie=v({Rjti>ceZNt_KZPf!2k7zh}!d327x;=Y^)_SL%G~hCx^H^)d-bd|juueRLqV
zW!Y_j28YWB%L$0aXl--$^}@)<KCXEk<29LC^L(*iWdg=Y$P_F3#o^v3>BYms4$X~#
z@)ogC_jRa%S~jfHg3!r=2+4>)V}%Ve@mKwX&Jef`QexL%ery#?(OuF+{~Qzn=7(^S
z?^D#!OViVsW|#+TNu(KKCQ5l2E$8ksQO*xg&JF72d__v4@KE*ELFAwOtIywa-Dp>V
z`SBChPpMk}0QV9Ipv$<_3k<ZAWw)K*y$z9$kObzAqA4miCNbassWKf~uHxqYR)m}5
z`S|x++0xhlVgn@-WYhU0-+d)qveE&}vwA*~R3{OC6kw15hCo~jj0-0`EN;fjI|s?d
z;HKXAjngs%>P=RYIR;a|$s-yTnDW!Tg7@<w`dMkx%8J6%dR5?%&+D03y^{rl@7(n)
zs6R4Qvmrc>eKbY@kxS|wB&#)j7c;M4_BO9pw3D<?C-2Lm_@N3+3SZ$ZV?TCuJabrK
zl~>~h<MM<QlzAn?f}}O9A{a)0WY&}Dxu~r?Bk13$4lwK?yd#f=&hdCS-MaC48qr_7
z57~VyOAA5ayylM1$cbG+y|IbyR8<o4GKSSR+1AA2&Rr3yv!*MaKax7+-%R&fR|SsF
zZ+Jh(QPvuy&CKZ6OPf4YawIY;K^uEm@R~+u0_c$R1wAx`pA>%bs;0u=)bFzX{=S_2
zN=Q&z_LB<A>T{xLw+R!8&qmYZ%N$&AQ3`<9-IbcG@yU4CcwAwN^*uXzZ<W{k{bcg*
zPfDs1*buy%JGzh5=GNadS1R<G@4)Gf4;#m9i;6Q+^h2rpL)FHMI#W`Atb&$Ns^9<!
z@;WRgrPz3Fo&*mKW$HVl?(yMx2?Bv(?kE#SHU(oE1<^ZSG-4Rw&=|lvpn1=T1&0XY
zr(urAP9+iP^dnoRgtl=nz(YwKC6=Qd!561iL8)yo4ZM)HD5@=p(O6`-FY@H0O?}m}
znL^5<ct$imin7KOJH}Koc`f)HqK?DSpCAL`BG^8X=eoLb$~vE?zdKam!2EE98N4XN
z&meuz0y(L$$tCc%;&Dw*<w2d=pcDtan2AII5tbE%{ue`;dE3y9AN&I`l<#R7e{|pN
zg$2Vaxf3XOwlI}VzyYhzKV}8Os=tseCf*<bb<|-A=b1;i%P|SX_}l_*r2ff2ZmK32
zTv6P%;A(ZmC3*snHi5C9^4IyEWtEJI>?LYL>o+ZhCF~dRKm~g(wgH!XCd^PC<9_^?
z=>TjIAuS?8Xu{xPE;I|x=0$^-4}pQ)X2(3RfEGqT0$so`P$xuqKlzN_I=#+fCcwft
zc*9481cDI))De_WAKm9)VZQAE3kj<yF+0$Jj8+7MpVg80)qu!rg?uLSi}0<Mz_TUx
zfC&{}|BlUq{KJPA83VQn3s0bBs!I-1NIi@Ttm)`#fFOZ}uv+~(^eE5=kw)}3!>f={
zK;x`Iy-vLhL2!QAIR=5XfK~K6G`pi8F>%5S!BXGg7apvpX2?qUb)p(@;1C`I>~>Is
zGEKtEN^<$jch`HA#1enIpRf8X+uewzB3nWaP-i0GMg39#AgHV1zYZUnG11QhI^<_q
zg2KUaUI^R5eYP05>Z0A}v~JK#+ze_uXjQ7eT;T{-{g{!Qg*$c8_botAK6FT-43w@h
zL~l0$e02r$%{9B{6&h&t)!cc7XW@mz1{Mpm;#IuqWxGNU8Y6O_BVr}lhW%xb$~Yd)
z3P~{@v)QKkC<doa_HSVRRTcoN<zN&RaIXphukhucxVRDSgrVFEnBvC)Dfrcnfb6!V
z>*Lq!229G=i%j{|+Do7haRVmQe_hCLKty`*z~H@xyZ&z%!WRJK8nCI-ll~v={M*`p
zzxx8gsh}w6|I_Gywf^smpYNgZUWBhY^)>#B`v3J}i&OySe|`8GReZew+&ECAW8!Vt
z{{f5tk4N|d(B(Vi|MlU2k|Y$22_#L4GBFgq`Oh~0ZTY|5nIRjj|LyJnAcp)EMvmTE
znf&fQ+x%}#{P(#46UP46hyO*=|IY+~760F0f}UaUXi48x@xq*x+u58upZDr@3dyae
zOJb=Nm3lhW2Q#X#%~UgH^(W5wx#2UCvAyDx4N6!U&P&#75Krnq(?qo^w1na#QS9&f
z;5c|^pPQ$ROFZJj6?zX#YA^2Uz+C(Tj>h-{GF~`Zmw&xRyjmk)3oDMd!`hw^E#Jy|
z>Y}!;Nj!VNcPs!?G996ookP)SRj2r4zsX8*>S0*e@3z|cm8X7;obO%BXKp7g?N3uz
zt4nDaXDyPvYi?at>RP?;H6Choc~9$?s&=b_id?sNnzeiDCTjL3epKilHLO|pUGTmL
zp%_s+H-}p($qJ?wq<bfBc{dYRK<>nvN6M|<ws{jrWb)5luP#Z6m?3^_KSCo(`}n+I
z^PaKGg-{6GdtD1O%y$!Faf%UTX7a0|vFMWgs@LW10J`6#@}lhHYB`uo(<j1brdgBk
z20sbsv>sexDME?ky}HgdT1su_P56Q&P?j6m>D(tkxhZ~U^>o?$2{=_=x3~SKSA;};
zaGf?YWjhIsHs@)p>(GZr<qU`y@_XoIUijNqthFSOGtNohRdic>K&#>U$(^?O3qUSU
z%5U3B?<^2LXf=m^<G*9-E1xQmy<NJi-}84d9g-g7z2Uy>lz!rXSh;WD7tdFXRE;H1
zv$ekl(?8M@_&iB^<G*N_oAXu23q;+|MgZ@MZ%@FBwB?P_*Iz+iBRi!Pko{&hPeZ(~
z{6|^@KAnmL0{TB~{1G?5F+;#TN2a_oD)%SK+T*ebX=yDwqi7J7jXx2qzl<vO1k%h=
zW7@qqPR*v|CahY+Zy%Qm!@J_P%dB%I&E-Bmt<~RWxGy&Tz0|tWL1X9f(D?1FE1>k1
zQs3*vv_8pAu)UqZZe(U=A5yG)xj`AIAUbRt8cZUq0PdpW=1o_$@1$esOpnpqSqt6o
z|DJ<bNUOLQo_w02{}x!J+tIm}XFn4^mi%u06`IN!1|F)}bKc=Udt@))ZQ-&eJ#!t-
zKBT#*AFEp#Sk{d<$g*l4Y8)eud^~X`Dwf?F`Ti;;BPBNqMm=JE&o{ii^ERi88ZWcP
z#ac_7RS|79MUrjstXE%GW-T%wek>Za_*4|b91R8Jo;$wtsX!}lWR-qSMI&TM59||l
zWJFZJ&dd=0-blyB*ZIWVeVflJcMR<Zp@@!W9eq*qaxL-c+xFUS^itvm_?2jLy<B*F
zTQ7$nL>uFFw^UdNF<eW0!K8Lg30oESLu+~-^ubKXI}mr%S=;Qof6m|pp5{<!A&~C#
zHsI1`2tg+&_KtQ~G$&rt@%)@w<7L`ldSX&Wcl8A=^y^rjdXi_vu9h=(L?-LlJ>TcH
zK9{$W=(1Pme<^EU{53u-&5MTF4BC(UYHRVoDYGo_DoHhcNi{B}J0t_Qy^{>59weS=
zJiT(c_sZ;&E$cJ7INKh^KKge1xO*s4J31!duyDks;7A2u1k^AoQN80FEm|n;{lewg
zpLSbemObg>rOKCA$Q_sd7{{-<X7y`PY_ITgHkYz9q+my_K6S0avpjKeab$_FwTs=Q
zfE9gCD~Bw$_ou??4^sjkN92f<cd`NWhX)8t1#bmQ3b!R=*miQ130j#GDQSkuu|`?{
z0fx)LrnfPnCC(^KC3zI3Bqh!~7Uf3sZ#B0uA8p<n^WDJ8ttig4lDaS3tSrQGguVBw
zbE-LN#d~==so@XnOJ0BKnP@9aFBW*{c0$$thWeE&shv4P$)dJ&Ft?bK<9;%sc_h4K
z`G~_J!p0^W<NBV%<Cyc07*!?xliLk%bKR^!Ypll7Az$5u3&&>a5tqynjQz+xFEayu
zNY1-m#VZyp)9ouQPu<jVq*WlB5cBt5<*L_HMxXR#YW=ey_+stBMJ6+8_iHKq!%`tG
zFL6Q*d=@Z`-0)3S`<7{${Ng_{q5rwuEK$B6x5e>LKfTV*Ft3&_b9KE=q6S1k#;5$g
zawA?f<vSikIVfT$|LR`w#hl?l$z+^`(=%#U%bPtwT)c#a986H%+aBu_Q48Ks1ioix
zRQ?;v<BjC=bGBVW+^r;yn2Cg!T|R#=-Y2q;=fu?fdf6oC3~fcb@b?}a(bf9zx#eB+
z!%HcYrS(p}`5QwLNGNAw=MpJ*x5LeBVJ%qPb|k|LrJEhMS=i}2Jd;!H=?;&S$+LUy
z&95?d7kV#npKvHCp{x><Y<^W=PZz?zCt?*mYzt<kx9&TyZz5GYkH1fMuBWT*v$nt+
zCzjzAs|OA3w7fYQANX(ZXE!#a2RD9JMf9+3MqlEpDTlo<o`g7AB3L=!(8Rml(XXl@
z+4vZCXLCd`<TIIVMXjfzRa=beCKJOKN903%j($@Z@emKBpEc#(wK-;YAR%0#_;Gy8
ztZS2~-LT7PiMk_tqD-W=!z;Ynn!8iWQA1S=(ceR|tBf{k;BM$KU5gV`PZ1Try!=EP
za`gGva5qto>E04igsck>aL%E+QZNA@9+VNll0r9W-GR}uT}wHfp3lgu5Aht3;PAhi
zS&%DQE4z`5kb9>Q?sUt!M9jX?K^M!N==C%C&Uwprkx61+Vk%zY(Yrb2Sy@67y4={A
zT@WGZOI5P->8)&QfDb(G!}|SEE3Hcy9LMwkrbLl3afgpn&n3bjUm?$xXJyx_Pz|=f
z$*;$5c9#ZM{$-;5qd06E!RQB=liI_Ip4!J5bB&8IhEOSvAb|zafHJ^14E3G5-3jEa
zo9O1Z`E49op-{%oR$!R01<5=PHWA5S@QdGG<QIkZ{+*=L$Q>=h_JG7TROw#^-7e6u
z>(_eh*S7m7WXlRZ_)J=pVIBd*PfMobl=YGzA^h2@r7&&*{E&DC939?;t*_LJ0Z^>Y
z%o^S5bo0kiVf~TsY`f!zE^tx^DCY~@LM%ucju^A9@i-i9)})n{XIt0e!C0mj)vV2D
z2p1p84W4-I?+{Kr8$;{(RV9OXd9s@J=V(GtK=yuVPc8)G&3}1-ML-a1Ua9|khn=X|
z6YST{wle$R7a&7kc=wxe1_`j2>_BvVY_klJC@9!>3^luX_kwkvoh<?&<aE&SvThk?
zDxoVsxFP)!cl5CjJR8#K=*bp|?bzrFI@l6ik#*pHVv1??<&urw-&$HYzs1#YxjBw5
zW%Dw-BaFp`iGu^OPx~b{O8Z;Vfju~mAlYhVhUpfnbNS)m&uUjKXp~3b6i6)Zzu7UC
zqDUBs_z`Z;B1VxadOho^z|lp_PXYaf@22n+VNr>9<!#z9hA8gwS-FA=e#*U<%)}M%
zYOqBBe6Agwpv*R=+=cZdg*xa!!8Q3D90cSKAWGDFCG%@ksSVqwraQ}Gi8RTwn5X;&
z>bTvyjYq}5020@gd|X3UZcN9EPV&w2iA{^}+{>jZ+r<iL4Xs;d5@i)3u(wJ^$gA`p
zpbO(oYJDSG!rfr7syzDjX5wt&!yVNG_ibg`$--YY>b@$t_eZ`4FVA%bliZSQ6w8)S
z(Ez|MU$l9_;Wq|}&$IJKTMG1jde9%Dk@h&7!AGtSl?h=@(+;RHNiWKh6)WGQ;FlJp
zUd!>FOLd$++EaNj8{&A2VO^|d&l{)R!B@2A0Nbz*J#yyo%SdW_yJSg^wO{E^JJ^4}
zhr~WsKi|;)K6a^?+_)j3N+V&2>*5mnMT)={pExd3n5BmY*>>zXnj5!RYeElf_tuM2
z^6e19OzuE!ORCCX(lUy}G<b>ILvOv|XKd)W-}s>=+<WJ8-p^courE_e_6BB<+h^tG
zSyZtb^twOSfbHI|r_73Y)aD3H7@Hl3Q9a%pT=9-~L;XmVjDm0{Lv~@y8ezS22Ztf+
zp03dtL38F75PP^jGLHDh=QEijLO18T$vpmw2{n$>uxWv7Y8)+hU6Y;D@e~?k5D1!5
zzR?4h-*yo5!%FqU^qxCpkzr5b6X0^_K&Pq<z4U;jt-x5^z+Z2Rbl#~pl_Zcfe9F2x
z;W7OQ7h0%mM~zVk{quD{!VKM7?Jy9@u_Zuu3j_Sym*1~0BR}3};W@t2i=A5KtN;uk
z!iz0GMsOj^k$LC?m1+OV3GqRTn<r!})g|HGLN}5M0ao}jY$#`Gu1}UT!_2#57n|)r
z^QJi#Of*t^MBf3gmmj&*FGGGps3i0Rdo9~&sd2)W3r@Bvk-2Rp1Ea!C#s2$&wCqRt
zgFcKdIKNel=vPnfb{iBh%*<G(>Pd2MRG-pNRoJ4b2KqnT$Led`N#eg|d-ebKU+Q^z
z579h~xfLonB;0$ju!rmi4h7qb`C|esiKZP_6TUh}6n&EgPaO(`juK8S^J&{Wd^HH8
zkLceEdf~AlTtNd}>Gy&r@%4hj)rR}%H%m;d?D}lr*Z?ip_v3~_f1M0n4`eSG{RrZN
zf<b<_@`l<kCPqPPI!^nEZD5e938I*jciL0)=bIXUi3cX5MkC)jRytng5R82BkNWA0
zI<n|r><~%o3h{Q7E?sobUS?7BeHV~El;>3-Oh5Ge*|uHhUx{D2m4QeV9@v5He_idE
zY0&ZXfM4+0p7=z=*!ot$$O@jrD$>g49A$chVq)<)^h<BP*yxC26JNh9@S@#uh1R^h
zlo#FV4<s_ERz{#O;#EelaLmV}OPTup)WITaZL^V}Bv0TR5RCr`y9&khQ3wPbZdUHg
zd&+TIZM0Brc<nryae9@-eec*@*gRG4=(5=SII>sMlu<p#cbPFYdQvksjNEEH?F%c>
zp$D4>eZCMjQEPz$0pAC>f~8eO2%sZK^npOM%e5ysEumG(D*`p;AqEOjG|M*~#BheS
z{D$k{SUuMcp<kOnO5nW3q`1PaHiw2v2qZ>9RtPop2<rmPp;#fG^cxGE*KM~9LUY>G
z8*oqv&8eL|4`w|atQ5v1gU-d8uWCe!8Wlv_A^mtuR6_cgJE0;bL-3OL)COm7=K}})
z1{2|n&?@crbLYZt=d6!%u6H}XvfXZs&@u)WIL(C&_tpgX4Vj-j?6#NiDifDZU`}^S
z15M>Nudmv;ptuaUb(f;UIO1rw+72MjpKKj_>1#_f(tc&Ldp?8LU7;zT;shb*rsOdG
z%T1}}-=-wO@cvjHpr?4z9c?ZI=QsS1RcB@HmTtuaD=W)zKyHp`0)@~orygszwn`3A
zEL|+D1lcM=e++ni6HCp0OeZo4Jlkj~_X2yv05>bR>cgG*N+0xRp*Et18%$S@@k@|h
zUH!(%nfC}G`?iS;{!2Qsb<6XSxyX+^MS#R!%4piv)kGX<MvpN9<ZF);uBP%H*HA@D
zOaxYFmmn<mc31jgMY>4fu{wxs+u>akvD~)lj?sIr_!ayk&e!DY*t!q(5zif~;wCiF
zP>9IfeiPIk3raKQ$KHEiJ?rkiI_3E32XaCh)2$g^Dnz&{^GN6+?!pY~XKd&K#lj#e
zJwp)6NGI`9_Uw6$s`<flp;)I{I=Xyh5_?p|HV9%jSz!r>DC#dHtHd44)AOqcfrtr*
z*_EIj_8SDrlp$*ErpgHD2L@%ODQa}~Diu*!`wL3dZp#{sX*b(A?fiLfdl!AGe0^W!
zh);#s%7r`j-hl;~bQ}~S6(clvL{YKq3Zy_JgR8DhC8Hk?u^SqC$F<Q|1-kg{7!++|
z-{-z+L@M+*pj~UuPz#O{^G(+xV7l>PnwGrz_Cijg*~{@NrhY<FpUxXEXK>iR5p@Q>
zcqwL>MkjAX_`t7Smz|m5@KzKS;{7C=0fq)R6z*&1sLAaTsp*`cT=&mY<yhFO*WNNp
ze_EVEQn85HkLjrfIus&KR?-L>AZ}Y*iG}JL>V71lQVvsn!LY5PRgPOw17z?Vlgj`E
zNWVu{5v~`i!R~`PY-@_hlbPw3u7O+7dFMC5KXYuTEG*yTKvd`su*F9+AEa#p56i3$
zMSCU40uf;enBJPZ^w@^|=0S`Wszpo|4fsM^S5mz5Zx=E4u`PruwrEJf)A^Qf5s`8H
zzU+Z=#h_fgxQXjq?mmSUrn4v)|16yw?`;<uN>d)>?Y8&%=*gX{--!UU_X0~0aGUkA
z=(8hzPm}Fq&wxP>`_w0$mWzXLrBan6a7_h`$&BDvy4xjjs{8`kbv26~%_i8OuDsOs
zU31}Y!I38bTFF6=4s36(z$Nhw=xh{S)kG#hws>-Iamv+Cc<2*vbtl&Mr^wd;*d<0~
zyO~!uX2kLRfxjpDer7{VIgTgB*Ba#4JG9*EpMFu2M#Tj1KYG>Y-l>_NOmW1Di0M8d
zSQn(38MapUj|_>3cXZsoI~rF&)ONV8<KRlwZVhPaDc)g&TyL%;B1Zelf>twpmX22%
z9L3;DivqoFvulhPGWTEmRh7YRPl!gv^R6xnRzlAg);<-LBEJUX;DjBI{W*w;3BErj
z2|uc%oKv^28O<9lca#S!_bAE0v547u4^K|cTof3iF4#d;sF6Njh7DBHO1=5QwPF-~
zVz@7+M^HrCp|F{;Pyh+2AZsuvdt}w&?_Vb^K_PgackEoyFW^rj-XKZYQ&X#R>s)s#
zJvGofm!!UPS{zHwAzZ}3llLDA(mJwdNVD6Xpg7tukaS+qT`f|qF<JnH><jxqPDa9m
zMsT^SueP;Tq`JLzr5Olq_U@qD*SLISZ7eB#0bsBOB9Yb@Vd%GS3?`nSRq!Wz70-(1
zm45SbwzkRXXh1#CAk<FX;bJ|DQvbo=YBKXLUVq<%no*1_20TGRj~N!({E79rb}f8E
zGTBx|;GN)tZ-GJELA(C}jE*!2ctC7NcEr`w7ALtkf@`1jlEI7bvl_k3W&l16BA{1(
z`uloyW!na4BV#hd`lYTkE4#-d2x9%KvU&YPN;(-o5rI&S?r914jvaG1eq%9m@`-a1
z$lwD_Q<0s~UqCvAKw#mH6}q;m1eD4qqRIwh@FYW>KR{eCV*g`kOFMJ4P$`xvx6T_6
zk=A1Tt_v05cnyGdGCo*>p#T=?QcaUeJz#RJd=D}itoWO(KnzSmJX*3O%;;NOILu&N
z(5Q%${veY!WHVoI0Tq)O8QM-4ysV3yi;hF?=ZEndVp(|DNktePmk;1$Um4#iBE-<;
z-{iFsgCj=Q%K=e2-{1@P`l<ksj0AFOX@75e&Nhq4g*w;kj`dp*82!(P=Meqz$ZU-!
zgz3|jvJY|<f;gzJM0S4l?G^MAJsC+)ER4c?)o!NL9gkt(6d7>e!fJh`t*?%JV^l;5
z%qSU*^=ImWrm#Uc@^R1O-ydj`bbLOLguk*lMMzvE`3<U0dN%(H(Fq#_r7euk59mKS
z^r|jM;k!mD=Du}dp=aq0@ih&wn65wf?DLC0*P`RGdoUV%?HncZxqKK5g!%GDqg)^V
zbuGms^BbLo*1>BWLT+BFu(UTJjPQv$a+jj<>!#^=l-9rXY5B9dGK+8XRo?^X1hTO2
zEv~;K><k{ZA7YXgoSR+`lV83jJarf@(4lA{W)P_t(sBII^G7$>es}!1iWay%udU|4
zq2lZ-<Gq6QVPQ$)*GnCP5@db|=a5*Tj0~u+C(d9ab&w-#ngmD$Xg-Pj@2C{zmyQ)2
zx`FtA#Lm<d^dagkdLMmHmQ;8$M;Eg)GXKdObNp{Wi2)D&zg^vA&>|j?9x}ON8DROc
z1qE;m$-<4d06VA;i}Ii7v9QVqIU8n`qh5y?xN@Y|MImOUgCDv!<Z8Y@Z;(eOP4tW{
z{`;i_St+dP(_4C3BuYRZ^7t7NMrR^5q&CYlMW$ELiK+f$2E9@tG>ym=`$<oZ{%5PY
z@`@#}{$7*l1-uG3aG?u;(r*X_65|0i^6w}A>mEp<Co$GOrc>4v6O}fuan||s(=XuY
zUTbD-&JQC0@h=hC4qhGS85Dnu<(+;ro}b_UECp#XefS@3=@Eef*&qvqP2-;38`<%x
z$h8X*FyX2H!75(`gu7m8mMng1_)%w;!VExw{^7!Z-LYYj&7PF@`;=ZK<o|jxv-#Ok
zLYI8`&1Ij+Wo$5g+!#2K)GOHK_y&jk|K%^iUqEqk(A$1*aA9zthULGm2a*OJqW)LM
z{x?%LD22w_&#UsNUgt2`_#|pWa{%tmG<N*guObkt@|brpD`Gg3|BjywS?(Vsn)<gz
zQ-jewt>Ifn@%J@6|3NweEi}PPr(|3;v$rgdy;yL-9{bPoQR`_{E_wRM8#vW0`s%PU
zE+cC(8+QvUT;~eYlL!lL$+3F9$sfb3Iq<V}+1Zl|gsPcp-9B9n3kO_Q-`|DGNs5X2
z;h1s1bF6KUSKYYU*Z5NpleT6mY?7wwMmJ^<ETlw87KK=7tao@4z>>$ULJimzxF9nJ
zIX^4W$bwx*7w5kU3h;Z`JPichBSTDTK_-;XElM6r&E}fpb(StRT0<e!f-v~FvWFiR
z+uQ}y6Hr?1W<o}OTrF%x+f5i!$-NK!Lxz>O%+`>`>wd+j6%@ImVhXvXX;|V>N&1AT
z30tihDMWH#XqdZxlQXZFxftt9>bKMWOkLN0Q#~(PEk@LFfYn{v;_!sTVlD$Rd(&a2
zYB5!&*|K57k2-w<Lx2h@&-^N?f-Cm`iY|ABo3Ft$<u3j(X|p{&<Xak>sqf69bLz={
zN6l@}%{Ol03l8gM&leJ7(Zd)UiU<nGeDrW!d8UyE+u7m|llw8F{{k~1qtkVY>&+(F
zvw%Ibsz#Eq9!fWovCae(BQi*9uinXwRIe9jp`JzXF0R~N-+OEvqjNe%eD6)*Zn)Fz
za+kJo{R92tCV`CLooy(EWPO*VxDCgwMU$Tz!#*6y!aBvLs(m*jT<YDn>fl&6iLf6O
ztMHEi_<192ud)&1zoofRDz>S+G=(wuZiX#8JJ}zpHO$Ys!`=M6YiL`~Tj_JtwSS86
zlry9$d!OQUjSQSA9J`v=>r*a%Ew{QK;UT9e%hVJ6;zDUj-ME^!D(7I1S^7o2L){?y
zqvG4PI&_pV?@jLIGB(i7k4?Z7>4-)*Eh-ltIn8Kwsz-n!6A4G}$A6=BpXY59u=lC1
z4XWj~l_a-9wX;_9Ckyz44YJw|tKR*X7Z@_iAlcz0Y#mB;A{)4dD55vSVpF;|#enRI
z`$Cd@iQ?46`Hk&ObP)0$A~6~xmOCFTk;Xz?Z#xybF(^>$(&jGQQKqR4iq1gMt_9U}
zcZ7R*#hTA<a^HE2RLX8DH=jA<=^M$~QV15j7aFppnQ;Q`uf%UMjS^PD%h}9~?iERJ
zL(N%)#N+3CA9J5%M(Wl(AK%)o(Hlf(($-&me^m#5+2rfQOyUvNy_KnD{nL-T?xxem
zWiV7^5!Tc`5KJkEJ*ysvTb|=7cjPEcXWWh<b0IakSLPVjcpAwe>t*be%EHI9hw!k~
zaH8*(3?AT2-#|ed{GCE-UYs|&y1@z+f>6>rO`pQ{{!@3lfsDcF9NKsfZB^njXHEU8
zYd1+=dl!}$e-2%Js=&gDljo{cO%)qV&BzT$x$A-LLQdhWPz??N4ZBNz_9<c@f0|d-
zy1~jy9<_Dd0lq!)x2Af7ObmT6F?XWqaVWW^Bi4pf7vEO57jntUawP4hM#*<%IR7Ba
z`c6Q8e#w^(*W~+Lkic2TYB;dv$mfWcxhdP5r6@ol)!M6}O6#eAd02}V8dMIn-eA<x
zJne|Fawb|@fi9W(`GZ9=*<RtD;wP`(wx<}$hMkZY*N2-f+xZzQ<-slP*X2tz)Yqk@
zl)nncDXjiWF~ML2^DA8+aVb?`;|5@*Kf?{vbvkq~8EP>jHgb-=({bAL6Zx4~Ur%vQ
z80Ic5X`plT$m_9{Eo+(ID3M}se;E6I-YMtJi3QpnV^u24W(*U>rQ#ny`N)Jwf7<b?
zYXlx=Vt+{)cv%9aeL9l?nS)k=A_mfYpLP@+&KKg9PWqVtToB;C{K~~QtvI2lkZduP
z!ewpizAHj1(oczC;zM~-XRz5YeRI?D#xZnkJ8no?@~j!O5usaRHxNEBSJds%@-~6a
z;3viz919B9N4XRviPorc_{dV6)vtZNmMm{vukJg3JIw4bx``qmt90BXO&^5EbdVw9
zP2O?#bAat(FkGLS{5J*mP=Ci<rShJ1$}lw4L#cmh3rY*nrSGnDNge-ocH#LU!Ut>D
zs3X--I7#F=8v8fMtW+uRL^`#*D}l*qm%Y&o*(a#Jb}Qe8I6zBxT#&&n56;16q{}nA
z!t;IHX9C;`Y^6Be=j;YQ*8f->JN_TG-U2GhE^HSjh6X9=Zjo+~R1}d^x=Tta>1G%t
zr9-+?q(P8o=<e?B?q>c6_5Hs8oORY3*J3#{&+NGSy6(N<P|0g|J`5(hLfF6S*^>k_
z(!m~(N(ruWi3w0Y>Yr+BFaNZWtl)g;t`;!vOM_F6BA5?r{Fv}N<Z^WJ$0TcL7rLbJ
zz`5Bu*WI)LMaOVS6KWji)0+VNCQp<a=j4F9Tf(!j?<3V3cSEW_ZVp%;+DVxHc}!0b
zzc^w&zVY)S1`=YY#CWM&NrP{kBd%DGks*E<6ZCcwCE4h*X|QdCaMb!_oTUM#_Ao+(
z?ZlXOr%*c*w~Hrhx%WQAO6~Y$H_>d&UtDvezXVRnX1(=?de4tj??Le=Pt!cQ866w7
zVu}b?Z9}VwT=hQO(F2u|n_4};=lvphsC4k3=4OvR)1_7~<IE)KG(<(WpDm0qi&DCu
zzfJxzcX0X;<C@nu&hOa;?m3KYU$N@#j)?i(f~3!UBqf?QyI|EJeo%;Neie<hcH<>W
zRnjipRHUXWph-*;&2v?f?emy-K1NC!sM4!?(HdV5kN6a!<IgBH6p-!RxRnNQuz6?&
zS#}H;oz{%Q;&E9|ekt6ar=85+O~mR6F>?6{!n~H7(@{qRUDhV@5J?}5xoR5q=hMVr
z_m>c|6eDnRq$1e+yFB~&FKB^C<9-QZ$ok2TSmJ?uwe@>PYweeo&D2HaW#Ojs?wCG|
zx#@OM-JK@&)ca_QY&+V@29(-BJayIt!2*}B8FGnUCHO(nxJ0MP3R}7a&rNMY(&%vr
z5q@d-BGLI_`g@<1YoA|g0T*v@^-qvhv0I;{x{2M3-l!xn(LE@8DaJUjObvuBWNt1b
z9!~d9CY4^Us@0z~WF?BAPu354560fsQxx*!E7VCeRHdu4i~kK~q^Ze4*>Sq_(JU&N
zQ5}RA9XUkl+{Svexm@S?cX@X`pXyVD!!Go`JKyRIS~o8EPN=$nINy)sbA8G$_M5aw
zR{T_N=lFG>#<O}Z;{PI8Qc&!@3h{<pY}AR0I%l)`E(E)ck($Zlcv+dIivP0xYl>gu
zNfK=?Q5tM<hb67<=`;Oe1&pWBb?=+pvR-VS?T*`aNE<`|aWEOZgdQa&f~vcRzYsGQ
z_}Ado@B0SAYJy#41wnDiy|9Ddv0u|jl?n4hZM6yXz|5MaeGP1ij_u!?eujqs?1PI8
zh2h!QJ~dpq!+aBx_n(3HLP$wd&G%&tJ$5bq%{t9KF?C*K70K>|AG>?xhn`XY(5K1V
zg+J>2J>wwAq{qBzGql9|{r5-<0`7lmE1`l~-S(n_$%7+9#Ny5*Y%70;Ew+7%W@260
z|DhiCxNeS!&ah6V<+($+{F=rqFGGXEr@ObGutq)}PciCm&v6-{+rv0cJcy1$K(FwZ
z62TeQoB}eSKEg^a#e=>BtP!50r5mS^w0WL+0ftteWBZXZvz+Q>WVD9`$n4XFudPhk
z)I#%@5)NCVPAZn?@@!9NmA=<sW~tR*=!+eqHcS@yasjopKan~qYJA%US<le?I?u(s
zLFk1eN~D-seO@2~9TE^CzMMT-!ic|hM|s|W63rC)UVhYSQ6ns@pP*;wR@6qj21Rx8
zvdGVP($%wxp!84nV@}VxoH<C-AmJh#SAx?i6GLcGAJJ}<<UP0ifh2o)kZf&i(f;7H
z!_Dbl_uN8%4rZCGp{-uiduUd2SxB|TCg7F|XoUT^&6q7)nZN-da#Ob`LyDDAe-p)@
zL~-af^swpWC?D%<1VbjylMt2feOg@d>LhE()OxFFa&f|E$UG10v4Of?ip3<)dMT%8
z!fs^BhIYECoexy~LreIcWhD-*YZYlPTolp#*rp|<{cG|dFL9(3v~p`_J``VQ#qFNE
zhJwq}&-O4(?@r~eMH|feB{U}*a}WmT8n-{ll)Oq<Jo`2iteAUF*49DO4?8ZRnX+*u
z{1cI&;>LgJHi<xqy~osO<bGB8zAyuoKDeK1eS>O&dU7#()S@B7h;PV+xQk>wn%f9D
zLYUB8aEmSDA$dgr%Xt@L$7B81iW^OqN5Ttz*+LnYhwiU5rf961NS0IVV_+rXC^j%u
z^Y?tHEcjmB-#q+=pqxe}6E8?gf^>DDj!u7k4}ZNyUK`iRYl?Pa)&4S9E=C#rHNIHV
z>Wl{IX^0XT>@#-3?oN>}(?5wfz(KI{Y^tx@%>NZ>amFkOxbS7Qy`v=C=GW9+V~b+S
zUW+PZ+fh=txlemv++l_GxVb9)6CQuMFWXcQ<94O@l@F;$^U$ievCk+;H!Oe`sBclP
zsw5RW%HUwf3MF~d=rXUjC^U%o&0AS8?uGASWb1)<RwdGa!ug4*B-+=Gri|<~sAJx`
z7N?ONI(vN+oW7?krX_P@iIKJ^QJAH&V(WL|{R7SQq>ZFRljiE^QSW=M=XrOvwY6os
zdn*N)4;|t;>gna=gZ~Vd!80@syU|FI9MJWjFm4{j{#%iHO7V@F1FDUvNrdozRnd{?
zoJP4)q?mhhx%6R;U5|~k{_2~j|D6R8hrxE(H96L}ba=fflDR0mz!YlspN%j?h&85G
zWc8#8b#MkFB)bOGw#?i7T;<MnoYWUu7vSr3zP|u}n|CMJRasBl>5VoUISq$^Fr}yi
z4`Z5tWxwE(U20Zj+?w$0J}jUK^?Z0~J;UXi;Zk77Elsz$5Z<PR`fW*k{SunU|4ZPR
zbzi3Cf^^zu8t;>vO_sJ}-X~}wI0LNL(=AzGSBizJYRZp<>p*h%O~BE1%9K9{KuxAV
z3e!jU^XREp{lXC)Vle8-{oeYn-x4kxIYv7rQ#tA+fEB9pET<|)K6m*{mN4la^!V^g
z(-V4YG!=rBpqn{m11%HCr+&(?INRA#OQ6(E44KwPS<7G=^Fa2%GuSbybU9XKn;2(#
zA!Hq!iew!82`X>&qLf>%Mu7woc>2b5gSmxJF8d%c8nL(c;Cv5U&wIZ%#-aK7P)CkQ
z6kS=HlB2s_^K+6DM)odW7-@0z?cT}k7|PFHW}SLP<lu4o`X}Q_p)RLaBx#_&%sRG{
z0Vb!2gPkvu*PelcgcYj5UL3!c2>Xu3QHWI=t2g^i^h@PUZoG@r)cNc)`c<Pe+xO*>
z7DzV%)_FGde42j8Z<ign^ka{&=$H7lm#U_g>=K0ZI?RZGCq)p0NT0yNYTw*lV3&_Y
zH(f5qSd8n4D0`Kh<&5v6gcV=5uO~F^883f=N+2N9Nvx(dzo5q*x1E|7tgoQ}H(hfs
zxM>uo;m|t>)t1Q?-fv=knkEbp6`m(M_vi_gsBa!V=qNU6JXtuqq1zz?4}4kVeQrbI
z^;n_>Ufz+Y)$KD}`)QP~+CvpHH!|Rq;}o9HvQ6AYTfkhuGB9C%su-h0>p6dz+kf)Q
ztGZXa{!+Q-IzaAM=zBTm9kzD-f7Jy}YWU+!O!@ELbGDbm-O#eo=I?VC<u3-o^G&uG
z<H}z54G(MM=O|;`^+|z0lu76yGz<n^pPG^$oXAlY_cgUmXPBWuQieL}C7(pIhcs%O
z5I8(mQL}N`-$ziY+ch+7d@g&Q+flloV%k^Ta|uTq>UpbvDW}>)Vknt!6t_4S8;r!i
zFUBEmL*V$<Lm1Y>>zV>Xrdue_5F2dZ!xm~6Yh8|d`*Zn1NXEA|#`RH`fB>fPxEvJk
z!E>_Xl(lx{U)q%$v4tz>20Q)o`#hzEg)f5AWdvtZwMegtKgOxw#^%k%xY-3^<nC=H
zxPB1-ckCMVdC15@{X|aPkd=CPF!!iyb@A^Ik+PuOI|1Sk1gLo34W7k4Uo_})Sy~CM
zoL}PL$}#?naj77>C5XGJNA356Gk(kI3L&loPOxO?afe;H5!QSDI;N&Ga%zk0FTvs?
z_?L_8&a)Vv>th%;5+=kyj!WL}DR@jYh`qB@juf@IUJ;=K{0C?D@nDl^a?G|Oz0=A%
z+3fHzc_Y;|%0y*GWfcYqlBoXtI}Gll4ap<o`8((9`P%Bk82xv}#jp0S1wKoWUU-gt
zlo*qlp!YE4s4u~J_epf1qR3HK<8F3IFIa26ocvK(Fu!>R(QTw(VGXzM?_#&i?<M^d
z*5I3&B$rUP!YD)%ts^(paUuN)zM%>qmft>S+WmAfyFRJ?yLIp?&TYf|m*?0=iL==4
zOXb3f_tg9>TzTh(m9wgo-x32B4=%a?_^-#LIvtb<Fx=8PzxnZW<u?I-^^T42n$(~_
ztxfBt(Ou$?_!Dhry;7OhOmKvMN9=QIdl$tp9ZAkNf`tyK9E_rdE9*Pwm=>2?HHjwg
zsOjMqZn1&_5~S#c*!BWv7f)Tqvp2Q4HVS#e6MLAO>^cof-ll`ecJ4#KW?(L&Diu%c
zzBjAU?pR<YuWRH`o7lVWhROfxf-UmU`OsK~S@#^R(~(H03t~l`Pj}J6$i4ky2uNmr
zGp8Jz9rgw?=dN`qwH@MY*D;xTt!aH0`p!d5sH^|1H|H71seWWter3E(_<R!FV?$jc
ze#mFXCSfBjLqzGJ4_v?pjvY{nW797V<1uwX7-d9I4@y{37yTks?6$`&ce^6*Kb-Kl
z!Z<8rP!NApfEi6>;+lH^I3yWF!&2sI0_}Zsq2;6%`pG9Erx=a-Z8Fo%19`f|dTo^+
zU&RKS4eS#BbD_)B)Xw*+$U=Wc(kt8|L2Qg(>}iiw``Kf)NJp6SHZega@;=o}mrqx<
zqft+;$mqW+Xcn${0sPuiZJTFFboEzKsMyfmdS=m%m#}kq&l+eknB}7=rN@Z<dy9zk
z(7GY@TGhVi!Zc3Irh&`|CYfYr=$(TJ!KMZqMb4Rf$<d?TSVQQfFw7w|m6ueI9xJD3
z0{enMrkiXFTsVi#Y_)5&h#1^-1{5m`uaai63>PS_yU6nUvkb4=jQeVY6d5k4MPVu;
z#D7b!#99ax+U<#TMnw`fT^hV3nsM^yKvD*Ax;`h|I@o(PudnWsl{#4OzR|3fO9@j!
zdK$U*t~Jtqx8~bZw}*TK&cD&A0V_g}E_i)xk;fXusJlLTyrh)Q*2b+!_Apb?9e9Z@
zgmmQ-P+#^S&f)%4`arX|Rk_;Z4Q#R$gtkQu80jY(te?pdW@E2H+)1w0bk6z>8+zWg
zE&<2L6Fs-|D1yg&OVRMA{F~)fPjD93XQ|INTIta~!|$pO1Q<BAJw|<<OUz$d)hMc^
z@5Y;wBb>7t$?J0gx2p9(6E3kjf1Hl{e_S<}k$=o<48DN0+B&Ef4EhHpmYvxzq(uFj
z!`PUJcn;-N(|8-p;RkyB7hY?B;FoH!qguNGXZTpj0rV(4Q8~iJ!M+KTG%WMhi1+85
z9OWQ8QtZsNEmFDoA?Pu8`48q4z@4Ll)}&|^+IiL(!q1v|OOy`T%bX7F#6K?9Q^8G&
zOjbChmlvMsurrDuHu=RZk2k8Q6P4bCHwq3)Q)7ZWntEEOLujR`wLn!3qfdW5hka^>
zp!eKvmp6_5EFZBetiI3xAgJg9Z@Q+f;<`;McAG0Q2iqaWB#WC%VwxoMxX&}PRriml
z8Dj5PcQX`LV1L&f?<driHdJA1+{f$v?GMr@g<v<iXppg9#MWHyv2B#MJk#l$_mvii
z!8lJ6gd?0UMKsX4p9-x^OA!;>+oXIQw(-E~UJZ6TU7PXg1g{BD{1k{|l46LkE_tK3
z>V-))Ja9bnBjt4iFTTs^?B!~+96n|J$)?MZB2>GVSHH(6=oOSk1atwKj*%fny3adD
zUMat(GLnqA-%0)?fcQJO%%L!TgaylU!GN%0KxP2pKnIQ0Z7ONzv_`3oWio%17%<p)
zfkE?LDAQ7UlmVd6PXymr<{<)^)7dB8QeCfm4C@C){1H1=%95ACm7URppLv#7Y_M80
zONiWZ31{0C+J)#WyF_a0N}Di0U0D=3Uo-Lir_um0Qr3h_QCASb{XtIj1mnR1;l|`r
zDoKA4RI{MJ?9AccJ#%W*7h_CtEc^bbD0r#xM?k^!li5IW4Ge<O?`{mxk5~5N_EtJb
zc#kkHCKu#@rZ{b!EXF(eM)*zHK$?30ybVH_nhon!p0-Q8h&}F?RSRe!NuyoX20G$W
zfYCih8Ts4Q3`#}loie<IHy=F9Bq9rVyDrv@9)}SDebhdl-v4D^JVu4>fU``5mmA{~
zw7j1$mUCJq5FS8PYzMpd&JKCHlTYUqQ;RxBe^W`>SK1)rXoe?GXmh?Gp&OLO0?I1N
z!D)3cRHu?5PSh)w0l`P_<QoK34@Io(M5QP-{pyjMe)k*x3@|c^lL%hypekpe5Dwc(
z^qD;h54T<0$XhB@3$L@&vWbdcNqXUEEYX^#V_$lbYBmgD4togM8-J~JkfgyO9&};q
zcY}7?VG<#0&Ie2D^WQ>Hw=(2(uypS(7doN*w#Aiw9Ry1eVNmxuKM}6fYve~diX<t_
zt~1AItwvM&xr|g+Y0;E$>)hvW!Nib>+AY`SZbw*c-T2}DE2}fy!eIjKJ(s;&JIfnI
zx))lnb{7FY&j^#k(x5s;+kz_Z9n!}h2f!_E;T(m<wfav-j(QO1Q#4{xW@f=#kf1_}
zwYVyu$z-@5Pl$aq`4KASlW(%<KparwfhpgDKQvA|p@@n*SCsO@^GuTbW-e{0%1$vb
zs_(zV(+l-i3Qh;7A#t$O7qr&aVsO62XCksU2kwd~6Z&#JuDb<L76F7#{s4BiG&7b7
zIK@=N`fCEiyCs{NA!xktdjQN6es5RLP7M)g<JE9|O~*@d*b+X78ZPkC{VN8{s}vnp
zrWPbGJ`$m9gunZs8JTP<rR+%b89N9iLGsBmP1kSE;VtcnmybE!v0VC1^CV5Uxo`1L
z#=VrQtWuTr&*rViRNwOD_%TKX$dN4Gu>;0vBgEK&!p0}7eq!~*lxjaSnIXIa&EFj}
zLYYTj%G)`gqWiWUS_kLqOJ@ltiFi9;o_=OY-GJJKL#A5WW*S-P-cFNhvU?E}DmByk
zfy^XALK*=$zNxLX?=>B@0D@3;s=(swUFWK}Kb~I#1-=Yd`gZ2)3wDFQSPDFzv;l%$
zinuFh1QZ94bM4n6&06!%f7##vi6K5(XliTJp(`Q*-ERNKko*7n@=k=yyZ`CRDfKV8
z{TD7ghN*8srVDmV9etuyQ^(IsPx;n1+diyLJq6<KR-Dpc(P46h422>M*p)d$)Cf;R
z;>QrOC!t{f>%{lC|3dTsd^R9NU+{^!tdQ3r$+|}NNM*LTe+Ub&y`d-tkn>sJr99ZP
zhdW%eMNg{YtJYQAAMcu^6>i4|L)8D@g9c_IA@>MrG1dmj0LH>M*!#`gxn;}d^gNAI
zL7`*I@CJIEdCxy26jDvI#67$8D>oynweOhQ+U+~m-*=={04YlPAv)+3E#ZSloQnN4
z(1a*a%o-}ZLhSyI-E>YlIh}XP^51Mw<(6EA9mY20;U)s__-=*tkUQE`{=ElKmd@^i
zgRC>7{&)TUFGx5&&6`FPHaB2hO>SM?Zdehx?K<z>ThwG*@AEIrTS)*6iGyIDk(=K0
zK5HUY>$f5T3045+{lDu7k2mxV8qv`t4=!lQ$dOOYm7~NM<Av+|>{u1j{$KTS0PU)y
zcNywy5vgB?LHAQU^i-|lPvY_a8<86-vE59`^k=2Y=IpSaCx0RsNHfmTy$R=;%l>=(
zBPxzMd4KYW08;#2pgc~D1AmVFB`glnrz<!_3Ti36NR;&<Qw*4_tu!>kSzJ3YezySC
z&RO9v*#re17C<B$b+gP!?)V;HrUiS$T(+y|-xPeF0C04iP0*b_<Cpr7(<h2C8w@6l
zGP2VOfQ-;kb6(0B+|YkG-m^i-1LJPDe)E?IhN_Z|T*W09@jpys=9?I#%K=C(CqFza
z4lS0xQJ2#x{6pP)fL+wfUUoqB9}Q;KQaNb(4@IjGPdfLQL#-~%En0#Vr>hqb!B2UJ
zW&_+YJ^mg$^4%Y_Zwo(br)R(^0c;G&6s^HU-R|_r9iCBv&=`L++EsX*f`yC^zTqjb
zxGis>CLhRP0HHCMbsdu#5|d0*l=}UVC5H+b(`n^Xu`=NabnE7QAjxL>fsEEh1^M<_
zqVaw8gFtI!g3X%^RE6k}COw5@!t3xjUET)<h0Tf_dK^OpIu`MlaeO4Ll-JzvBU+ES
zTk4s`UVv&(J62y)e95GY_mFYeF=hkS8ckYa&LV^m;0DO{s}?Zi-6yt}>l|2TEoVLM
zM4422FH-d!G~QLSlwow2W8x<K=I7%K*tzy683=iPSJ#apk^B*-6i{LD6OH+lXD^yi
zH;gNZ(iJ|iDj-NIq+d^csP}^D3YL3ey-0+wK|TvVM2xx`r#xxQ0QSupw1(_)-Qiwm
z(8aWPW@JmGW<J3d;#JSpIo|{#dyOC|Mg6-?s&z49*sOh-eo0&}a~3O)jV@XBJt3g5
z2>7MnH%5-)p!ZaY@{0Yvoe%<9zvYtdQPyh@*EJWB$_Oh!EjckE$z0z3F0#izboVe{
z^&0VfoS}Fl-Ctp}-;`8p@~+?|Zx$&q+hYlXv%X(0=E$=W2mm#ZqNLE<{`f__gn+9T
zA7J`gB&p8}hnI0*Gt+anfh?JsAI;Bmf#Th9<3$>Sxvqt0ihm5G2uNxWBRrW?_QTbr
zpXLd5dninYQpVK8aL!fpYfM}3qfSZ48|+PQ?|}X=0$n<LeNNww91*qNOOL;U27*RR
zLwPc_#)3e|ub0N&#QiLuRWAO<{U?-Prs2HsIqE{Ic-l$|tKTPge<JEo&wBL^SV~HS
z`V!v&x*XzQi5FBOq2n}T{-70axI-4(p&-jw9FN?d33qnIwOlGJ(F$+X?ML!a1Qd!E
zi1g;u9T{<Bp&@^WP%ttSGQ9d&6M6ux-M?N?Cw?TpY6O=@xD8CXSP;$v%EtNnf8NqV
z4T<++9Ki@y>A&9de%|v33c?J7#$QWJ1U7dE4vqU?-bL@HdcAS-O;juc9vdX(eHs0F
z_qgq|&4ubHenGP(8?cdWs7GFST)&=*yave`1?z(koBGqRBDo7=0f!@oCRf*9y8jJr
zb#d)Yg7iQjnkv@puu2F>8ZPxVus#jokJaOK)tjUDk#rx=h*Sjw-;n``!mk$;{|r9a
zb|0%j{&^SA#}gN5zh}8y!Vy3NlMsjOXqCCUe6MEL6fBZ&lxp&Rri+VDSh?naVLBf{
z#z0@_4?IW@;Hdrg8xh!hLi(u`CH)`kfQ`<4EwS+Sik3#ER8w9BEhGg@GjO|cX?s{+
zd9|S|-gajXSD}#^{0DYLmRZ^-fJVbWdRlzsj^D=-3Gk11jexUknEPrNu&bUfB+xyC
z8X(c*<N*sSx$yRJ*l24DPV92bI+NTBw+Z`nfVbNsy!Gp)KBPJkd!*D!LoNANSM=`)
z=?3xCnuHb+EOoTSC~p(2Xd&jfQ<YTDO7`-tHWTNsz&whrfLdg!HWa%VbzH@zTC~^v
z-q`(2j`3(__~EaK?RTUN;=ho`0@u7y8B#-Bm<;-5-!4$tuQnuDQURMoj8-jgN>1#~
z{285*?((80;u06&-MJ%dBSC8xgKkaBA;7*y(hLow)mQ4U30JrXO7-(^93I7UJ-o}_
zT>KtBhv&xgqe(9W;Ov6v-m@+cW#_=rwb=-tM)Ln6$9FbI#*>CaaJ?J|D2nL?SjFlU
zL5~G3K0jqc#s0UB!<d%h{9&sm8b6ez<#6IJ^(6-4<KKUObkfAZP<JXsHmlDm?5<ar
zrHo|u_xthO57SD0S9joZ%fVCzJ?UK1==|EtM<Ydyhj2nkBl=LEVF*Uy7kjR5WI_$O
zVlp5cz3{)kvQv~y;*l{_T#mWCI&`dx03l0BEYK;ShKt+$SX}Hr9>MsUcB}}EMfZ3Z
zzOrG`mIhQ#4Z-f`q5uBpNPPBd5rw83w@21Bm&sl99Ak1?5YJ|wQQsGXK2&H=<t^5k
zW9D;u15AW>EibF(>X|s1W6}76NSb&Wl`Jul@{u0d%pG?@=9(_dPvZJJGs=;^Xtg6g
z`Qv_`p*qZPf5}!UJj^5J6w-SRcg)L$Dp!puc>B<1&Y}${Kc_juzSGjU^SDtIH@EFI
zRoZ(dQdUA`fSp%CwhQyXEY5Now27fV<`gdmmA0v{U|wLQzo5r41FeNwoveGqf+6|8
z325A7;t~4*pCAG7(I|i7*)Oz9dd6uC)q9NjZI#nANbF9(1_B2*&|FK8I*s0w>iYu>
za*oQOj|tTPd;x=N&Fj>yn4$)p-Vwg}r$dXcwOeLQuN3k%EEk|OReh!_84G&5D$4+h
zk^>*1{i~o9s7|2C8vNqCyXHW9&(DFeD&F}i9PKtoy3HSjm_u0E&Q_WjPS^B!Bjk|}
znSs`o;)xxe9Pq?e|2=Y8oD8Xm;xh!b<M*zsO%Tju$*4cN_6p}2-fqt#SP?f@=R!y^
z-xh;#IoUnrP?Q{4jf!#K=|vWTOXJE-ADtmEE0#A+V`?8Qq>Y-o0dkK8p3aK0-B7=l
zWanyxx6Fx?C_NrY)uPUY(}&wW268(3h-y%Bm4o4xa?{gQmxSs?lqvvfpBsi28L{ij
zgfV60KH1u#1^B7(ct>>92e{0aUfyJSdLbMl54^?hJFvFbWbJOsUhScHq0FmkzOgZ%
zn(NczXo}w7FGbPBa+9jhOx}+?OV39Elx_`8unqgyH)Q;%Q?~=`6ECh?l$=uf&bcD?
zlTr=IIeb)py{bH-<)tmZWCZfdML7NlkPp7JUDZlVqKWk2uB*nf3rRA8Jzj{!F$uIk
zczCO;WfX>x>Q;1Uor)&q+Yf|1@9`oyP})Qh+Vk9%2J6?K7-Q~E$Ea!c1#WU(zfM*&
zz(<CDknUC`gH!gCG$_~DN_*S|E;Qq(8n(O2S+>Je9qC7Byves&kzLQ!+|ijBNvd9a
zKm(C+tgDE>RZ`0|GOT+?y^N-T&ck&u&9Uku9<u3@aI}bwaKyC4njA)?9-A&-xU1?)
z?sDd8aQPCZ6!K`1$l+^Pp(!lw15x%y<=b39RWf@W@xDIoI}LMzS)G2g`Mc=xZx;jc
zdnnK40l}9>Xk}ttUD$k^;qnSSs-jR(zn;2F{Ci!}6Fe4<aKuL<y6qH%*WHTzSC~Ao
zF+;M{t|MPU+^$)q69ki2bM#zT({Mlw4+oQ9EH}*>tiB7oi@_L=(sH~d8}2-8NKyeW
z*(L;ELo*~=;MbXU^dxK;r=ml=TiC*wn@~ighX=`JV^V7Af~a#jnQRP$sMEaZy%it<
z6reTOeFH~`lr>tzorA&0VGu14y`&!ZICfp16oP1>xq$tWMmT{r?tL$5QR`Xky_0(6
z+S*fI5uS8}>_#^j3InG&K_6N@%i|wYr$NvFVUp`y1#-l$Psf+QPpfHbshUwC!7!00
zSp$RqeBB|vV3m+0Di#7MxB*z`@*#sN6TCbyikds%T&l|x*q`ka1o|vK5!S6fy<bC*
z5pl%`g=>!F3IMJ6d-Gm&!<?_d955IO;N5)ipC$5==<C+ND>r`8O?%}S3WeRHm|O2h
zw}Su$CuaI`gj)JJD-&1fqj%B*GCLSELfEI%B`|n+5zGZc+cY!U6WZ3ezSQzK(Gg9i
znCDuMS4jim#d)jt?G4JHkZQwSc7si{zo7v<ity9Jo&YvKsiwAjr_yz|$M}-ul!?}A
zLU8Qf5sCESn5$M;Fzp?Oax4>k7S2|AcDhi-)9L;I1KUf>51(bqXb!__y6T+8`c{$w
z36&s&jLqrH9nG;!o!#-c+`8)rWU1cah>~oiTD?(2{tbU|vc!be#toT4HkeIKl}zoG
zcUKf=L#j!;rQ|$pg44cZr6VBfXp+$9|AeD)RcRRSsZ6Pcfw(jiM>aIQbHJAP9P@WV
zCe=DAgyKnAXkCFo@FM^$DGjBybhW!YaIo!Cyl#4K(_(#mXc0hC(e`vv==U1UyiIEw
zjY@)Qw1gaf1Tv(>hW*t6oBhyHACtL<A=X?`Ba*{Dv#Ys0ht$u8C*5I;Q?)OQY8zBi
zK`VX|aSUiypWdtxBi97~zSIAXm^;1yI`y_Xenpt9=64E)MXJl!4nRaWsS$XrYq7Eh
zQvxOrYLEyl#9to#;EIQh$QYdJLma~qQ{)k&dV_)8^$+u&>oQw3T&h5XmXTIc&bLe(
zH|(?Pcq~iqga`(<7ab4I3XDjUZjrTeD!QQV-=!lZEn2?1_IEN4UVPbpy`bbROH8<i
zP@J+7;Sc36E4BD~h!kF85LkhW<gH1}?BnM~Q=;3+6V2;`slG)lZ5>*wAnZ`@5>-b-
z^ld(0(l5&h%jG&}k~AB_$VBI|&E9<BqI=}gAQUBA^`oRw^YD9fZ?ARl)5V~TswESI
z_0mDa54bQ%#4Y=7C9m)(A3;XB)D#~KuMhrfXQ}dD2$Ow4)(nB*MIigM*y#J-xevVU
zy%ioh>oA>~q&RcI8^=tVVVT&oqwSvdp?}L#*n$&3q4#wz_hi9?jY;*5S&P+^ho<CF
zjWCB>G`36;6CG2sFd}(u&BjuvxS={eV-ge7fGMmRc5o(l{^0e|Dw*K{p@2x}OVSTX
z<vl*JRn_Fril^~-^=<rHW5YH=@SgJSjk|vuI#IAdpYbbWuB)LnPmmzlJC#uJhMd(H
zPsi|~4`f57L^oaSIS(?F4F>}6nPnjPT;BoKI<-xo#@zkG+pDwbyhzb<%qpKqXl8()
z`VclG1%^;1f)Z1LBZK7SePd2XorjUs&Lfx3sSudtA(NiG^hs6?egJ3CTe<y+@AK=U
z-Fy4J6_RtrvbdK&fIOI*Ls$jPQ7_cxLAy>hWrM2DA@xh)h+(84b*{<5+$Kjmk)k}V
zE>B>nhPn-M_GKJ5CjOzSsl0OTmT(*<J%))v8p|hNvGCVvO&5BLUTUAqj@yZBn-#%K
z$q&96bYVVW;L0iMN?zi=>gS#Iypw{*#~k754I`V=)L1ejt<sbLCZDRes_zwhg-dj&
z*|BQ!qw|UhCD6wU({UvI@oy}a`)(0NYXvvpvL(%D2}(_0NMSPQ?J@4nLdhNCLMnNI
z4YX&Zu&K>daGV$zd1Uhh%o)F|s5Ydz?;W~(b8grV!b25+|HRqVcq2DBtU4d^Q(q14
zt!HI58^43b$q-FL$m=gjthJ%w^P1IVLOt2$S3eu{;*JN|Lcr&)_&!0W*_*tSV<va@
z=&hPy?%;xUWuGUj`fp{dr4!W5+%-bMZ)FAuI^L-Re~m27#zvLQUUiCL-<^|7r`5H=
z3^-fU3UjKo?ra!PU@-JTG-V*wdxgu1Rx*?Ddp?IfDjBV>x@gl}44GVK!k%1<VWI$+
zqg^2kyAB&6;Ehu$b(#e*JN^TlrqK4iN&~|-PR|bUZBT`mHs>eN?NQ&CAHt7I-qqXe
zDsH^l+~IkkAUZ^n?2Z{AN923x_Hr{b(MMkGMK-&O-j%%B?Grof71EHIx}7ubxKieM
zU&mg`^r1N)pKEsk#Vt1#N%^_dD1OIP-d-Az_c`zdxTw;ihYN}ltQJ4HlTu}tbzLac
z(dgHKEM9fl;cuEz*SxL|8zP>gVCVJRyWD9$oZ)Gr=6}(RODG!Jthp(%y8+dAC<%0R
z-e@)^h$RlqSS_Wv@NCxIh#KwJI2un4XfvSgo&3E#l-Dw^BpIOx?ndGdspYO)965hW
zK6T@?b>Zf>7FuO^f_2|}78{qgXU~AOSQ9H2m(x!eeYD0y$J`%sapE-QF|vlADOmCC
z(_Q=M=(4#z4FeO6jW#-|2m@pbx0KK%qvj1MuCJ^|L<CnQ>b1H)4!yva@=xEd#GkO^
zZ4=48en368(Ehl!h4XPDamcTtBqeBX4@XhPD=ulLJ*mh`gz)4b0i}TNs``)#Z~txE
z;kWyT{Kje_QIczHU(@NEW_Ex8eNgwTD`7No=Xj{MfA{sndWMM%E>M!sv}#YK9`WcN
zQ5N%j1%Fa<sGocI{Fp4!v$$>8y*Ovk#4y@LlCd{&Bx*@8+24P>fmVfyoI_QRm<AYn
z7oN4#sP&GJagoBZj5?FfSlhA}%-zU3qm&g1gU$>dgZ)V?nc#i5e()L2#~I&VzdjO3
z30902OKM!|!^d=T{h0*kKoqUz+#h_FVsP~j9$O<L?%eVrzqKS!Nz3S3Z<}RhzwY_i
z+@5H+Cl6qOkJ}}atrp4Xd29+JTq|BElRAk%G{hg!-_)c<(5dX;Pi=ZefaHf}H)UR$
z9=r3rbC4+Kqz)u1?IL2YS`jqaRw`^bIBj6y34UwPGd}ro=Uo5Qc7oY?Zs+W~S7LAK
z$gN`r241&5JmIC<_U#?M47jZpB8hj<g%m${twy^!OyBmLpeN9WfIkujainw%>Fu@&
z-xI@3^`gJtp?xA{K*z3UE4r$tT3x($CV<8gw)hQ~R5jR47;1}mG+`X#AGp!9teD0z
zuBJI)#8Dbu(?x&L6X!N@#Oh3*0WJrL9!^VrkT*!X#orE+{hF#5JFacj&><c?HI!vw
zM2fB;E4jSJyB4bGH_b>T^ce1BzLV&6N$@-%e!4}@A#dRq+0E`Hh=P_tB=-t3aExd1
zN@M)BsL*8p7@wX~&@rBNIB2+(NeH%ZUE9&?#-(S}w7A0kjWm1Gq<NC?xzbIllb2df
z_thjbcn@9idv>`8jlG-xOD|@CYVa92P_b93g9trA`HtQ<tb7phba-U*LEXvPsx@_-
zAk{c5?!keW3H~ciDOy1I%BX07@VdaO{P!JA(@-Sw(Y$I^(w$epT|Rm=#tS*R8^bam
zs>D~*BAmm9R4uk*rD``N<6_C48wYLMYqhfHe|!eKmt(9+vk+s>`*5vzxv$D>Q?HdP
z@Nu!u$g~aFhIPwK;_Y7K-f24Yj_2&62Ee>mJ`N;>uP`ffnJys6)$XB(q`HgsHE*n=
zREw!a7nc3JGB~RW%>T-BKyiRO%(n5{iPs^cvL~o&^~tXw=H@Upq7#L2@h11a%w%u>
z*CoXXE!Ejf8p{1Z`P=+sh91Wc-es=IG`R}Zv`7Xs2N~&vcP%($`Vo`{T0RWZ^gBH-
z)jmbVu6zkNYC9u}$p4Ug^5UW<%KuPDHtkmCGI>2rv3Yut6tY)tJlxb$_j1*_MgPeo
zAz_&gfO*e|MV_waTsi*C|Eg@ynp&p0>oUzoWHC-$-nn%vO4n{zkBJ$#YGS}H#{hAm
z{c=+&V6Zk_F}!aVqzZrg;#)`}!$#u{CXY>>wjdF58lS4*F|RIO^a#(Fi}_2xdd93D
zg2s(tQ>X4OFB7e(U!tR~CPZmseA#_t<W08Pa>rw&xjK$~GIO4@f|f1WP}(_~T+V03
zT~y$2L#~muZ{)g7(+XUCzil0yzHd?3V93c^h43wFf7F!x?*A+*qC=d)wZ=>Gb85f6
zG<H_AFOZRAZJdZrGIl$nA8xxN?kK;1>%;rgS9_zBXM`ra*>?@oN?>E)!dkAn3U1qV
zrm=S1{RMA<>I>y+#9hoi`xNM_r*Vsy<)`J6F$O@j6#5=-$wkQJW|^3yKVb&brYaU$
zuGT)@to8?Cf2AD5MGpy=`eGldD@CU)M?*8%uAW>(Qid90ju(H+*Ume}sp_#^LWvfg
zP05unBvieE9Uh>%Q5qE8!frozO(a2?C@CY3vBd&Pac<xoO1UR^BNI4UtWXBsNyS0(
z(9E%Cf3>|HevOCh(ji7gEvPpkE0NTm^IK3+nwlGA$LBWR9V*S=G@h*)ByZ$wRz#yN
z$6)#&NI~~l=KZ8JI6ndb_({CqzgJKvwjT^6`t&1MaOsbk8@0azB;YX!m!&p~`Jq3H
z$z$oIR#z;nkH7n(>JtmcB&IPnJR*SZ48o;I5VRq)M7PxvleYFWjk`^p?3P>|d}o_#
z&?%hGrpY$dj?m5SPkR4VknlgOClDaCioB|r!*6mYD&ANcZK?Mm)z=6fm{(me?;2cF
z{>JN$@Bg$-?jNWU$P1sO(Npjxvr6mvBtqJQ4a{WrGX(pg4raH2*RI@P2Gk5_7$jB~
zBUa4T^$=P+7--nkXBp`(Oa)SF@(?NmC>DBeJq|R-zo|EZ3l-f;eYwnXf*gnW8VS%D
zeYgM4^s&gF&*Mw<b?#b5@(X4D+jZT+^nxk|^X=S8{>%;a;IA9EX4xr{*vMeU$Fv&A
zVu|CSTh}w+-DL~itIyk))|0{koEL#t6~vL%R~DG_qG#iovI|hMm+~%Fkn~R_U_p~^
zodqhcQ%5pc+(KKfDV%qrPW>;FJw4fTbz*|%BKai>RlW8q6fE7caD~NDAJXxqw_<`F
z_qYk9;YI<Y`uL(o2eE4AOQ-QXv7*`^RnZQZDyzPW5~sb473!+~f>+pDF+4x*7iRU{
z+~X4kK))KI@6>*Fs#NCA@Tc<in0%u{m?u9k922pZ#V%Ut6Cy)5Aqmci3}!(@)<*tX
zqcjGSyU-V9PWomQ7qN=fm=OyBnDhp400v5uj{oBoHl(7sf86peTHV3X>Ek(U+&!$B
zGlnuCns94z?<1$<iPpbuBYp<i<47%<zGB*q*oBRYHul+L{!(z&9m#(qo$|ttlhy?&
zRR3AX*KyuwcfH~SKV}OW7CdF)Trv5j5or<8h<&}MsomaV;T;v;3V01HIbl(vcG%kt
zd}T|3p(7f0TKrv;OhpN|BZg2i!t-yZhbdI&FEnZXJs2RRX^L#7Tz-8SL_E~qY6h1V
z$lL-<1_$An3vo8x4=HSjY?C^uqACa0;=}rT%wOoY`K%BZD}mB~U9*@`-tR=ZFmG+R
zzCZg$W8y}_%^^(pjj#Oqze%FvL$-gzx8?=Bi<ja`yN&MfVU<D{rjc0HcMz-~3<Z7b
zU|RLLMdyp9)ZvQ0x&SX{ET7$wkxS_TrIyDG69gLBO!e8@HI>RSRsM<9j;-GxT9)}L
z>HFW6@lEkQd#Jn7gg&1*43-kyw194%W`4lmrH1bZ+6+cRz9D73F<8*Oju#X^u{dJ8
z>EH|zWw{v*$!d>0|NDeC0f?dajR??|7vw@0Ox1|oEy>w0xPtW&>95=eNv3O9YB;v*
z1N7c<dx$J$kcVg?1mu91eyqsENf<5yUoq{w3s(0T<{70`o1W7?<va|#3+&D__+RY=
zn*3xQoLGR9F0JpI48<GCHIom>wu`ep{(J;tjuY?2@@4ptR$cj+cPaO`Ux1;~+D^JL
z&{qvKog$-##l4A@Q2I&o`@xZ(k)sFG;tgYT^&;4UnEl%NgT}fN@qfFC1aF~-+@n{G
zlF#!tpwcb6-)Ch}H()NwG(eTz52%Gd&KMejCwS-%{SHQ9HRK-()kU4F!ISPM8QCba
z!$Xzw?r1VFju%@4tv#t1c*uAfcVCKHrD9k~X50mYVHbHlTgL*@VfBAWeNYV$tI#Ln
z>%Ek&+Z}{uE6%Glr+0ZzGxjQPBRoxFh~5eis(t?3bBt30;P6Ou=UneOZI9Suq}njR
z@N+km5m9_Dt}(!=9<&Cb5jx)(Af>qR_v<3bPKJ!JVzvm{3!i=JWYf0BSb0nrV*+Y^
zuS>c;{hwxydR$ITwr6)6w8pw(1eM?$xFV`OgxWeszEQ0hzj`1eAHXt`?D?NAo@$2o
zZiGireuMoiXlE0OR`{;P&vzlw(IxPNVwh{;lg@0i(NG+~WZR&oSIFFh%7d+{Z!&N-
zt|VymVDAV3lIKJTPQ{gz{&~gnV>4c;*ZqjmzYYW!YHERvXRc?xUsT4Hrv&s~Zx;Xb
zN-`OcJKoy>*!c8a+l`q2%xDA-h?Re7&IWOF4!aPBQM#r*lPG%6Z_um=)OBZiDxLzQ
zYq<IJKXg7}$Rk9SocMFw=Mf~*Nsw$!W7GorCmx@LqX>%XIf)dpt<Ghf?m3BYJ$_31
zz&mV2^H-><=?vtNJM;@1G)Jv7mKBBBVtG*kX~G=ARgn~iFRF;|bI==l@}1!?;Jy;>
ztv&loKRQ7iWwqpVn)a{k>Vj(LXM&Ritv?5}M@i8@ZHhj)`M8-g4(*Rzaq?V=zT(|&
z^Z7R~13?7RP%x)Glvii*!@n_X;cYp6DhbzPoY5@HHUwxKX7R=8v|4E9p3EQ1j|`<)
zlw<!g0|Lbn=7DcBVt}7?=pR<R`TNXTRCCX+m{;4^c^GUMWMARH`y^RZKm35BF+wS)
z9gK(IzrXpP(NDmSw#AtoPhMN%{t<I;b_8pRRIpv1K7br?0k*kaBjAIsL>&_%mFbn|
zKk9@50;woWLh%~(5LNom%~1jzh*ct*0W^SfvPnT6-aqQ5pDW-bav?VRciGdwdvEaB
zZ9gv|VD9~^Qf(~o#n(h7qP<Qj^b)I7P3T;2C3aaEt@ViQb!Gkjj<Drjy7nxx=8`vw
z!cNSazxx*q`sEhiRW;m8Pv|bV><B>o%S{MnC=#c?^xe4I^fr|~{@uw^+$|^D$hp$y
zYyjy11P*e=2<3yV)Pbj83|)0{yzIjrx>54yFg7Z-$mjesc?m%@bDh&cU_q9%6*T`Y
zW|_3au4Jwy85QrxvH*NNGg27d0}GBj+?+>zP=i8N$KOv4Go`zxU|L5I+z%Lr{{1h1
zTHx0($0<}8?;cMu5LcE7;e;>ZFsb(a;4AF2@^^li@)D=qB!my-ybf=bg#He*3xDV)
zf|)O4Q-AIDE1z!)uz!9O%t%s+-WT&2bVX?Ef1`v5ZwQ+CSxi7sDj50T&CkCa9vmzL
zw~0F*?aU0^U1~@vU~D-G1({h%LBFi^%mLA1B)xBbAx#aB=D=W(G`&VlpFVzy4X{_5
z7jk<34%?6cX#6i-$>v<e1)?w)&sU*0H0kF#m=q*8@ZA6%1}NT{Q*8Owhk-I>Bv!4P
z=8ouoHnjBo^_U@l7He$&^`JPN6OAKq$9G55kVm`)Cj!9h7W}Y~|Bl7I0wc`ncW(J#
zZPY@Gm&+wAGSLhJ`G4~U+QXAoLlb{GPw-~Vz6?;4FVzVA8=O3#ItY2wSycWmxc+fb
z&iW1knZ|%GkW%F<=oL^)Y$5;`v|l(UEl*r|DCsY^*=!uP_gUE6K2mmBmnKE&jZJ|X
zzB$8Cb|rOhByg0^)Nj?y1CCyx+5h*(Phm09ko(Ph(i(yOmj_mxEl~-X*II<Y@jHKn
zCZ1u*98nF1rg8ghNUf-W1e}JLY{$$Adzmhm%o8DjiIdJpkNko;QgzSHX|+{+(%}5`
zJTcTuM(>HcfEr9+RP5fFj?k+Jr=l^2WrA;0%UecD1R&K6y@l>O#U<6GREwFjQrIFC
zPdphDx#LfSHGGnAtRdU~;cm%Hs;?DbC|-*RaEU1*$o2l}kpu$Q%f~=!78{PO6FK*w
zk-=LecLC&a0E7SJiWuEm@QA4k?hDAIYleCugm$J}?S`&jT_r$B9%A^Ms%pxv1jbz+
zATkbBH8GlxBcX=Z1^FJ^gcoCI#Di$%((MOr$s13G;mICic4~ICfbK@{%GFnx)bHrk
zoG7e+-9{_k-a4~~Y=&p<+dB~8lf+eG*dkmMg0&wKdhGEy$saA|B!h}Ho}g_hzM|JP
zPT1jaRb!gkXLq&AmHb(jp^0?cgHp9-*0%sw#|cs^(sHb>t4k7y^xd}oDDca3l}5#5
z`<);QS<6rJ(E>8tvx33q`DM%koyTK9{_G149rfge`!NRern9x+l`_&%6NdNK-WHa)
z5ozj>M}?!4`-YAUVO&1G>=Pw0&kyRWa2z+IxN5o$hZ=60QZH|F$<RQ2>8Ncened9o
zElZbC9rlV_hTYTr>iFt8dg`&PZq2EFHl8Xv)CuVURD|fik|>4d;EV{XC7C)^GbUX!
zM@nsa<pSqLN^%_|gYXrwV~f=ACnraEUxN4^^lk<|@T$J;INBVqvU5jSxNEnyiAj4@
zv-CK)->##wA?vL&(D4z-$4hZ4uGTd5=?QG-ph~#y?xpo+#lO=eW;hx?^rk3zt>&6H
zC9&3C;C*q^H6gi8&-oZQW5JPf1d&5j6(=+8l0@wYp3&R57N7}>TdHLr#XOFe7as_>
zc%Bo60A~W}b3D0KSu}8)xHl16V+X=jU?7kFFdFpJ8BUfeBy6YOsNUoDVQZ{iOB$db
zlENIIM#Eir5o8{P9zWU3zhAx6Ke;7!5E4x3#>U73zI%^@WAUJRuIxKakHdukbgkT#
zJX2t?a}G}NrQ?-<ZWQw@{?DR$gB0*I?i`^M(+MWeCua4LpLk|J9`WO!2p0;LoJTBd
zii36zj%5@m7q;WH54rTAZNqo{8J!zyyc}aA-w<MmNvlly0mpEf|7_Vh>WtbUwuSIB
zfLZb<d7)KUI_i|TJ_%GG&GR8>+KO%i;StLqOk@-$J4SoQc~`WC_S<anv@ql)aqWMz
z3=t6}cw*b|F1{Sw%CZx%8;%WAnzu%XKv8Q~)$h*+0Y45L5;gEs>KEH$maMp}7jk(M
zC*r$2!e%SrG~jP<24}?=uxnD&QirbYNV5k?N;dIg0igDeWM(jwK5)F)6@bTQM^v~M
zF{pxL#4W++XaW#{U*x0gyHFH~eZBN0mHo+5dbHOOz!Cs;(BT=hz55>oDONKSpA=H!
zAQn`VVZX@F)vs6$+v=7I{9LxRzY8|1&mIJn>+EMJJPlEpDCU#}tlFR06bHv#vwZ$z
z{iv4X1fN;vR%cvma$<HZ{bh&d)|6gQmOdC)x06)WwVBqc;G$)G23}T5rj%Chzuxy%
zoG(srX$={=X?=K0{_2qOY0nbPBmAZLLxkP5tt2AWH`bio;xZOk$fJ;L`Y%xcYxJbR
z02SeO@>@zIufJ`@sO@N)>@D#_ecWao!*a2i6irj#hWyUusdw1TEkVa0IeQc}8iaj|
zC+4xNSm0K$qdXNL@)AAUInUgeDFNDi{W}`*x)k;)aZ&PeOrF2~Q5wn#3M+(9-k%wJ
zhs)D^po2Sg#KbVA1nH$h8JH+b=!E3V?3gm+1tI|AnhBSndZxHErEsh!C0WXtaO4-@
zkAZEu>_tJFZLIZWT`?fwS;oN6xr`#ObJa(V%j4QfIG{OLPF4;7O5V{vqvJBkPctBk
z{MvG;JEO>~?}Xxff8M-A@;5XpLnEL6q1)uw1UlhkwXy|>6q-3RYn1cpMdY%P5>FrL
zwn$xtnP3D*0wXM1EW?&-k}l?njbVX{J%^_u9~AA;)!sC8+<es?1gO=2gaxQTsLP`0
zV9kiER}?2B+t*gDvz8YR=}l;UAlf!n68rPJ0L3*xVqVP3uCS%R=EjP&_gk4`2gOX!
zi}v_=I~{G!SXu}wpynJc-pq|)1Z!u37h1oHE(K07Z9h)n_T+wMSzOo}q4_W7lcv4_
z>4cKzv7?PE<$eF8He_5u?fOk)Q(AH;>npM?>wjI+k#q(nlZ<s&nAGoP@rWrQbY`ET
zS!63ua}u01SV`U??9AiQYAR!PSqn}<POv38+(cJXjda=aZ+;P+pb{$C7Xd}&m!*5&
z+e&ZqElMMV`H?;nZh(59#6L_IRF(=jAoWEDwGQ?jk-x+Mbxoc99<mY24pUNhR(JL;
zKx9(2`P|MJ!1E<nT2#JN4p**$hFLzzv#y~LqxsAv&Hd8_j3gxEQpP6Def19T)PeE{
z<QxH}^}ZVRiWY*^<ygh7&7Fp@<B{ate&xpNh?LbFeWuqZ0#W*^A%M=bp+a_ag-dO=
zZ(9zOgTpp*Bee97QOd%S!%8<BoPmGsFH5>uNyCuDhkkdrb(p1flociU^pJBoBAYI_
znGM}Zko1CYWq+xtBlVnQ%U54<%T-_5zdS`WslVPI+THK3KW7h#e=+ZzFFU(ejvv5M
z#u&JVB!0!k9eigA_l~6T#f^~m@oiexwC<1R?PBW7s3gPln>0BLPPv0JQB&k1MK;0*
z&}L_{S5ZS2s6Q9Yu$g%(c;5kc8Mw)^JXik>8n19r$hBV8Z+|Oqo{#BeFE>!W#s6^L
zX*U(a8-6^PXzc%PYO9t{5I9j}B<!GPDHVH_qhFN-MjDPJ@bo!+?fyafeVdqi6uM_|
z<)EajAv@5MIgIwDo;>k*BzstbsY$%DpkTOEm}N`78(cqDyJ}N#m7s#V_8YIWH@*7S
z_)GoXS6|@VM|Dt`rAB}=>{d8&CVLV`<$Bw#5axbFVTQq!nhRWj0N!?=I<B2s=a-H@
z@!NGEgH<(L;3@1a5WJ?1(0l)5_KN7|e0gTsX1_WaENbNIL`fefA65H}86r=L<K?|)
zC^&RRplRmpq~OP81+0AV`<Z0g?!oEMib##No);zav=A}4nN}mZk}WdxW#MvgTf=cl
zT^-qY(k!(Y0%=KdiuD+UlSJ{gTAglR_aPIj=gMnwhOy}j#0--vzUp*!)7=LJM+UF5
z&ygkSxnp!H&lZRLS4kUkCA&XtSb<AO+^f!hy>Z)eth%tdw;&XJ>-!}}=T=FSl|)qE
zBCdk$Rt&9wu^^nS4eX;AyJyca-k7!^7DrY^pO+NLdLzo$3v^{l+CTiDpNhJ5`>a;@
z`Bl^uG{;=)g<S3sS;JXTBs1Vcwb0H4^lF7uzEJ-BDp`0v(Wpz>r1a`rvFBN9#PvhM
z{(1r}b9Gsd>LPLjxA5gUT0(Oicxz6b&iLR$oxylcRa|ZjMc=*3^Zw;n>J+Jx)MDR|
zvUO6N<=g!{r{gHOkmwV!XW+3j{Bo`5!x7FhLrOsRFodq5^Xu@q<=f5FB|RS*8r`a;
z(af_8>|338YMuxC_R;NonspzF7tIG0-Y98`S!SIYDjeKWthwZy0!M&ilE9mxDAnB;
zie|)UUR1oV@jUHOKLgO`U*m9YCKG!qGF$HKr{_H}ZocT{6mBN|QB0>!^$5l+Gb0+q
ziv+26J~|SVm5@8{3DGAi1V7jJP_3V-62`PT$|iBIuhlF#RSY6Zh$O5nZgNkvQXWLN
z9rhUie{_8XRFqNIE~PL^qjX41hvX0g(%qq?AT1!$IUwB)(%miHAT8b9-O@eW7ybTw
z*MIMS*Lv41b)5IqK4<Uq>}T(7lN}T`NW{Wri`5$Vg>H>jm3ztk&z<RO-GVVVo{M1a
z)ndLQ;ggMV?`bSrUUFH|ipBS{1rpO$`rG}q{G^r%)KYI#Bg5iwba?7YNsyo1o81l^
z#P*jkzagxp#w>q-tE<!22|wnQcrC_MzM!)Q?AN20E_htKF}xq0NVa=Tvfr$B!XtCJ
zWhx8@8knWWV2U4$5FPTsS_C9Ry`uA;LAU;Bm!Cc0a@0J((nqDL?tteAlKEZ@U4#&g
z(*52+>mxVjs~D~xCzeg?-=1B-CK4Z(^<F48I^Z>v9In>ihZK&^ZoHrBrAof+dLJ_|
zl#Qk68V}e9=Q3|*oOTP%gy-iFP4WEQJIHw$x>(kt#q)BDmD+lp$&IE3Y8XGaKy#b_
zpz6=4K5i`4alm$Cci+AS8^6@?M(TkPPLycAe)6sYS?dhiP+O|}+}(NiaIIgu*_2Q8
zaU=JiWY@MdBE}iZFE+dXS1y1<-RGy715?u3HEEs#gU4Q*pXEYXN<}2{!u-dhr|qep
zagXdBl3m_N<--fUzpTe+wFL4X30QCdjA)St9$9AsViv@&pRqxrzCvegE9v-W8#a<5
zbfKG)ya!Xd7pG|!EDSPnS1L_%{K$K;v*9V|oWHyk$_9kQS#tI^8GL1JeBK>6p?wW7
zg!{Bgyt3H^&#cYDkAQ(BIUPZjrj_EQ{$jL0%AGVBsPqu8f@a&D{)@NW@H!fSFOjg~
z$U59PY%F1W<$$mC`@7Od>|!bM5X5#)HaB@~!pB0c8vUMN+7Y|_%38#aVc<UtOq(-~
zW8=l#A~qDsgo;EieGoA-%REa1vlc~m#3j^Qti=U%JKwJp7FV2&WKt~$&ut8U`j#K|
zIqaZi%rO~BEg^#Zi@F*L-lt`^ur#l}Xs1@y8B557xQpnN4HyDkjQnAdi~1_M2@P=9
zsE?fWIe$bdm=k1nD3CJe*6CFpPAqo0^H~<AOfEiv`Uze`qaQ#fg)kA?yZaCIV0clG
z#aA2jHjnlklw}?YBlljPv*#>Cepm5|pehT~510x(4`#TAiz~Dz|LS|6O!EoF65~kj
z?R*CJd5`kx6p`%O_fh}&3@#|P_Ed}Y6=Ny<y(T7miOyxjL$-v%rSsR1<agSrKZYnT
zQnPNB1s?NC-VF(xY!{Gv5wm#P8li)HLWT02oaSy=^!sgp;n%(ocn$gdnw$X<UxOw&
ztn+Z1CiO#c9BGfGSR{N}94?|s@Rd>f``ns@(!&0paD=h%7?${KvTE8Y8zCU!rX_h@
zCZKCR=Cv`gc=wCit!i>uVGMfM$5)qR>UeT!0;9q@Gb~f|sq=T^v&T`MN|(+;jH#l7
z?#$Ep7CfFhMF?8o7`RKl`30SJgcr_FiQXo#y>rT8OT^LWZtXrr{{p+SnK(qh_gpCi
zJ%~&*|75rr+&iqD*Xo2c@&6*&>v|{T&hzZWhe<E(WaJMLbst<NBgHclS&7W{&mkJl
zle=eqg2&#US3noPLdUJ!V#OaOTMI>DovN~}jhanuCk(8A=A5WORH$CC?ta7SdVHMk
z;^q>F(uGriZ3$tJ!Qb1!8j6^%({s}IQOW!&U%W`F>-GL4(9Y|s29mc^0?%e$?N^2~
z=SaNXJ&*V;NCsE+CSH{@h*RmFbO8t}^6L7GJtDkv9cJlt+yiN|S7`ODYT_4inJj?;
zETZpze^QxWiCF{1LBzm8@|cKKz?h8XL3vfAA6^cDS_c@IQCeklI>);M(WttxN?Dch
zc{bT*+62iMg_ke74BmH|R?Pig&4SU~rLu?BsBeTHJ11;4(hCl)bze`DI~3~NdVjM+
z{#Nwbof^$GwB%&e?8`F{)eA51D%{&V#Qxe`m@wgu2EP-2yZ|R@jp_+F_KC=c^E4Ts
zKh5-8fs3VZUjmjjssQ}1b<A=(a&>Otjx3f1(ap24cn=|bYWPs3srw713bP)^)o<WG
zQ?*B3c-E<JQK3-GGoFrv*$gEz+$RP&zt?UwoO3VTY+BG&LXrc5+zY<Z;$V3RX>(6H
zKkqV^Uh2-!6Bg>}ARD}GgGYnvmq{GABxN`xb6gw61%O!(<RTuUR3V);xc#opH@=L*
zb3$10hZhYBF8Jw``NYYU&eBsFRR3H{EM+J91p?}P1%DET>Wp?LAfd7)sTy4U?jh8Z
znB@`bx(!bzVSo6T=2F|hh}X9m_fo&j)3Qz9dza)r3jBKzm5?O0Gu4KIZZG8p^#(OL
zh@6UCC_lq@3HAAxukFo5^HJK9uG4$ap;BW<<0=L-H4}~2vzub$qZqzz4-@;Np#<Aw
zP=S`Tk$-}ag(0PG-8$|Ur#-eZnxs@$+{#4HtY7cm^v=tdMzl$ir}H8WX~Hq4VjRpN
zyVa?SdyziJHTFQcx8nNReoWnYd0+kui)*O01{W^~y_fhc_Dx=b7UymUxy>!x97}Oa
z*_Qzn>hvMkhwQ$4I>Sy-KIkLIP5%&6$qyGV85*NlkoJ>7(oC^pZYJU|N_b#F5?q7d
zM>?nNJ<86(QSCxD5hw&8z$iKhdrf52X?sdIi}G!8bxNlY-O!29#+8N@e$j5fL50VW
zW~qsVQ6&1yqxRO)7F2(3>z&N)y-+)tz1J@^D$F$`ip`!fw&IUj@X>ZJ(4^+Pdzd3Y
zMApbd57n}ByC(P_QEK=YJ>XTP*~6jkwh(knYX?5$2{uIvcuz1lu`l4PbVJF1r<dZ%
z%brk1qh8?J@S=-|$mYVjM<!SQrY8@$*V)Mky}Km6o-;IEazHVpGPJJbdH%D%=8ZC~
za4zt*&og-YwLBnk5UqYBm0N<ZsMLFvv(8T(Wh|X_5bgD$SH!qzMwCFJYS4jR<%`Fr
zH8+l!{w5Eu4;&bp6iV-30XXO%>hw`h+z%IUicJXDzifqWMf*z?8GYR923Aw#oc<)f
zuU%KL_5>q`NphirVee1&B~zr*O%QHdOF-s(;IrHOaXm}VIfNI$QLm3M$cLWwrx4Oe
z0(DXSD3>96Z<)Ey!peR`?iE3kF8@F*H4>%Gvi?JKV)wWP-r(h1V4c(vnB!kQwp{oz
zhqXF^uIslbR*F^l30zA|DgdMq^AZWY1QGUAaVu*6)u|ks*|y&5?eqJK+xHW(&w5X>
zPHX+qfIH|88hkap`O66!MF2@@z&5?F!W7fHe>o>(#E%HfvwkPGB2jvckR<}}mo|wv
z?CjVY5EwDGvV=2tSX_az)dPYe>uh5n1JEDJNTEgYl~pmJNKtsda-ZU}<3C|E{4QE-
ziRQejbUv+6)fA-XA;5^MK_PI&tl7nHWl=aRAwCba{0JIMS%w`OaX$&DMpzJ@x?{@0
z`maS-)pw<hy_=~Jk2$0j1`R11%LH@3zjsvALIl!Sq&MWm@c2<fkd*afGQFJj@W&^=
ziaNp`+<lKmPzKj`;J?D{5JT@;?=irzYa?LD<(P`d`X_Qw$9a@~bX-aOZ0!66Wd3jH
zr|kP*&tlmpt_<FA8E5~}Zv+sCdu&DI6-pCCa~4tQ8cQ)(t(}nfXuR8L#ut+tq{Mss
zu$B`H;H(MtoO@o4WzO)HiZu#ks;(z@)Sl5od85@<6Ai4bInji8eo1;nTL8_-6e_<>
zg6vx+kvq}uEjT6es~G;w<2OVK2qF?f2cma|@oS5BN9|;|LtV(NH(et-jcFP$cq=dG
z%A}k61a4;?Qh|tj%v>Z6P{7=a7od>O2ssewWYU5mm973f&|d_c5vn(T`;iH1x+D>z
zy?ELS5keS9VUp~BAd9V}$FO_auhrECv%|+?yF(-b$(tdIVU95SI&k?d2C`B^H9X%^
zSr@H>bfN+vnQ)+UAtB4I%PVumswP4P4|UXP>Q~q(CJ0-wpGVDy`7ZbCU#*zu0pA0w
z5YmMD1oM11?3<_4&qPeh^7YsHlZfQG9FqVphR=*(dFTm-Lo>6sY`1_!;GvMe8I_-|
zFm*<Iv0UN+C7h$gBzwtW17^uv=Gv1$=#YQI3x9oHi;Ovc6C`5U=QFP2uk(~>*;}k_
zK`+c);QOeJS%7t1z0}iApc+B*YRJ}Re6-{w%;HC`Xgzq2>*$N;H6^~X$@i;B?h6{=
zzD>u*=O*OYbXxJ|Z0SF6TYr7vvMndex6ZgMj$FzMK2^xVuMtq$>x#pl^m6l(d-8O7
zrJ{uN#|0+J;abgC8tv@ppX(_s)Im5vGk5)oKStk@I({?d^7{z5V}L8s;cJYoA)KDH
z<4yd#e)5jtmuTExSI`%#ha^@^PVT_VfGN4AdPCh;cwXe_-ha{ukqz%w-%L>i*EPs*
z=~!0hf6HG`{tT$oC$Zx(ebF<8xQAY|vQh|c?fFIt@&Us`A2xTehxA_UUB%u;x9Q^q
zM7-P}y_xt%a2bzF%;>}5<#Llzx5m9X2Yw2z)5ipv()_9Xay%nbYu(k*17i!&ID}4y
zIlvCx+V^%XOaZ~XT{fM1!sTGV;^hyr1~2CRxUxw>dY|C=(3mo!8Kz{9EK)Bu0c7OR
z4?xK;QB3-T+bG9&ybcBqP_Nflh$U|2sKKs%;t_4Em_PV%M#$TYogb$mwsz-fhAGfZ
zK0?KotkD5%>ex7nmwy+E3BGYqF-f^51#;ft+nqu#(WVDYP^+Qdm=k{T`1yqksn4qS
zcg^a3{92AlgVZ$M$^kHQSo<V?EU0sNBl-CX`S=X6aEd(|$))&pIWBsmEUqfreEAi=
zSoT4{eUSaOHi+_)_?9#CBh`v5g891%hfXQe8uGMe-N54SqFKGvARm5sS17@_vj0S4
zW`s2!5iopKJ0xX`7dCa9npNF2t}MS{W5M4UKD}Sr-EZ}5h@$+#>xlYduP8E-kOs~0
z9k4upzHJk3D>EP3sz7bY$BVwb&U%En0xqsf65z*=L~}MPhR&3RQS3B~9HT4r!0xjK
z<sXi0kogh6njf1wcyE_%h?s_^R!`+c3cB8Bsid!=L;#0Efb-51$wflQQe6Fpi<r>%
z`xVk<yzVP)5F&!*;NT270k78He)*NiikjKD+IBzUT@|Y-ane)wzaTMlW8Yi3q5g1O
zFW((addYXX%MB*S&V#kOh3G_lcfg|(p;c5GPulu}{{%diV=K;+2X>57V0lIl%k_*c
z%jd2S2L<F{(&(SZ-@L@enq}5IMaLT}y!823{G#nEmSoXVFp37B!N+~JhlN*{@g4S*
zPK(0iKp}X;+V$alZR9OELX()fC$E{82lmVzsp9&<O%2KJ{kYB8Y$Z;lX2f@<Q`ECr
z__`F&hb9vKCy_$J9>GK53-&Cz^Xy$fqT22b6MFIGTOBs*Z9l;{1FLOM<qy?s^vwCB
zj_Ud^c)%Wh19Y6tXxQRM#Tl<`FP#yTH=y{##R$$@ZMszt8UhBK3tAgod>pJ&0OLCk
z_Y_S!aIS@_p`Ol$*}(`bmnsXFNGeoJ2Jb!{Yyov*fY}yHFX*!UG56{P$cNI)FB~HB
zS%N5PAH(19Y=#CH2suT>h&J8$b2xLAw^W$&NS7toZDYxSA-9!(^ns144~H^xGwm2~
zH^s_evb=lp#4F>2pL@lJ71!Y_w7%!QI`-<RenJ~OlBo*uSDgG`o>*V&wcqMik0~$v
zRQ%VTfFj(*UA2Y@7q?eLLQB}mp_}jttpR^^9HOX@WzZZh&^;XZ`0OgHMLhy}IRmXH
z8BFk;dsWQ@9LC59Ieax4^;2Lk{uJoySCiT2*kAFz3Y&#2qB~+v3)VHa^_)Ki^Nso|
zsFglp-a?Nkrl)WI{*)G><nFgXLdCBFC7^;yMB5+i2=sAFEkBKyx`3|s5$da9igQtp
z=3P#EhVrz35k-Wsk2Bn++a@?ss(GewG&+&bh3l4!qmab;y}r%GVLg(daKkbA8m&%I
z)%gD#xYoacW8w?!zfE=?cIUY*R*6hPGyRG2SHGaXfJf$g%tX#<M^rR3MDyQ5gA-Q=
z5_9NN3e6iJ{xayrF)cGzFOC3UA2<+C1e|3sqV)^4Jshv(?+GIqQ$f?m&n(u$1=V_^
zfk^>MF?i8z%Xh8M^tQ%52R|aXr_}+1mVS(6s&zXQW&(~Dl0c-~OmQ~Je+}~Cf}e{U
zX@O2GVR&tUAw=~+8bME_=MkRXhate>HF#kMLtD{^Py^-+AT3$0YLG9W)a@m8lt_Jf
z()oxeBQ-oLG>X1n)FaA#<rfuPf43IS*YXsbgK|BM#(@Eaze)t2MrfYBP3Xg7InIvh
zcK^>$tsqq(MjaT64F1wY<Pw#}yd-Vg<&ze{_QIG#(BhcxDS|#%)@wfqX6Y$duCt9O
zovJk_*}vb{vULLJp}-pcPY)`Z*Kc$E$4~WBtB9xDaNR=!R;J9vood8<2iyT%e-!`Y
za`@+X`0t+(Bx1aq+QS6)S5VE+h9HN5UgW~h=6;kzazECP>9~Oz;E5D+AdHAZohUB+
z)hKp>&kcF@j=9e+vk-`VcM)sbVVVDJJ0iIGK3nZrM1D3`H>KbEKkG3z@FAZxHvCt0
zK|qTI*<HU-`qPs9b=$oU@LW%ZhQ?av(_MaMmJLAMBN7RqdCJ!RmC>sX{|z0yX_=Xb
zuiF?+51+aQy*NTM`N}@aW<N=q-_-M)?<!AkNl!!iXb?U6<40&WVL^Uw<bx5!`Sics
zD_;@d(eLbk>7=7SDWCuGVMRgOxhF!(2W0qPr~cp1WFgNX2<^hNz5nqAfB(^2sLjR}
zhW4K51NHyBIKYab@_5lX3)#h}CUNTtzGVH>PKW3b3R9Qd)`Nmh|1sMBIS~KzDS@qd
z8T{CuYmyct8%2EzAC?HuDA*TSs7&`{Oi;7B5~h<e3KD6aE{A=2mI4iHVp0wIf5wpB
ziew&6{J!s!Y02EY3tsZCL`I6Y*$lO^^-z;rslK`_E$wOH3^g?+G^?e$zLeMb;Zs$?
zc7&6(uRU|_BKIfO=Z3)0q)P-sf5=3ld8KSW!Xz&n{Hyq#ii@KzvZB_M-)SbUDsF9h
z^PtN|b1RPAl&FJ6P1+tSXxWg~(V(=l@hfBI%iXito{Rj2<+&ski4C@DG*6i$nI*Q9
zUI-0V!aE#sDr7FO8w&n|QAeSGsdhCUD0FjmyiV9$YK?9j^BvcqPGeCiL3NoGaW;dm
zRkclJ4~54ik0T=Z<DBBzuZDCYoY>TWjhsqX$JCk4nx7x5aO1La>JUsVYm@N=XkJU@
z$zNHG8}2VJ9x+`RQ`5gA=rb8OC!H%d;Qn}};nJ^Nfh}3e=L4uW?5!=z)fu<Tcy)fp
z$hKbch#$`e8V079n)^LZbz0b``H{93*C>^$5Z=xnFkCrU7K#Sv$n7kSTCTmJTRyDE
zL(9<_PH?7+h&h~ZS%2-!DzL(EWo&tS)An}Q8lFQMTECgFl-y-VEZ^ol)ap!!Pnp(n
zdUyOMDHOeD8}(vKFD2~zxSM=>3fV+P{n94tCUK@%yIG&+x1=5vF7?{0zMDMsDH#tA
znjPHwIll7MSo0>>KK6u$6RA0NXS-!-QBJ#WT1pL0iQMU{2^rp_HIC$m65`|0qO^j}
z;49M0xOxL>MJ8+Ki+6@D>|sFFXPt7=c5ILjF8m?Gg^GFu{ASrm;AB!`yvHB{6$|qp
z(uVy9lCP88uKn6xe-Z+V`G&q`nU+}{M4z#IBrdLpMEZxn$;n#uO?)ht*k#cbarMRj
z5}B_AifhnD19;jif_5AiFe8mUqaO0RA={=oRe|ak5=YMMT3bP}Lgtoi=h3`OuRm~y
z)Es>V4qyEZOhuE4E{xl`yU~ZX{pHKp`Ym#O<MZF#w_EpoyB0$2&)RWH=wn>J<?(E%
zUZn6{fo<k=*BF2-;%z_407X_J)`gJfN*thYL2@HwgEU2Y9$Swah4kZ)o61`2N?Kw^
zH2PH!W<W?#TLoUuYSLrE_kx#E3oax}vms*wEyzPNosu$C`T#}4Hg0&esK?r)sD?Z5
z<gdx}2Hx9q#w5rVMO0Lb;v#CDbvM+S@?@jHsw>fvSp3X{T|pyHl%|`)Y}77mrpV|w
zuf&J2BKKwtC4x9Y&8NfG3rq4%6h=Z=<NjWHvvlTZ%Qdz>4?LHEnVRk8>#1)FIRz#k
zNT7s+l0A9~6YmWmK$Z%dr2K3g5XWS7)_cG6ISAONHY>{lDNX!N$K@Emlg5dZi@WKg
zq1jY&rNoEdi?7Fedh{2*ESIa17&L9;D8z_5ZrcD!A^xfgR8FtU2AZn~U6Lsa*bb&H
z^dX0D?l>==@;$LTeKm`9dHxs2tq%@!FWA<{u^@T2J5dJ~3?*V6J!!LH29f_cRft7}
zC~xU6H6gKgpUp$yC@EhuBW*1M8Dhg8;Rfwnx<gVCKi`N8Tst6XCOz=(hoNCVlLWm)
z2qU^A!d0COz!KJ9d^zc~i6?Pi!%0trz^h_Vv6IU<z{~dx3yaiW&)f<XcR4YX+e77h
zXqo!@K-rC7+K^^U$j%H(RbR4?KwolYao8`pGPNvk%4XMJ-4Fi`^bVo)t$GEeZ_E82
zWyDxGzB2^?UwxA!JJ~g+wl$<LmOQVPMR>PNS0a?>@n=iLgsaEt?mJ8@BD9p~a@tYw
zpmLVThCPDjUt<KAES}gl#2y4W_UTlJRFqkooo;K_<1jZ%8mVKqf@kRC>F4St8WpX9
z=5EIt@yF&zNXxf$PLfl;GlS(NhXez|vvJ^*c%KMI`S||!Qpq_F+tm87E#q*|X|EBv
z{C@RYaALHAtX(`qkX8jW`uI>T*>$JPM6-Mo3G(bNV)>#>GYjP*`Ip>(bkzzE0!h?L
zmh(J0@$FP}{&oKy?gRF=f=#?uF#Skf#Y`g$J6-9t2=q|tJ2>yn-wOnwzTU?PHOu-|
zh;JF(kAsA~siaw{m<jNqnR(grLY3zZJ7w;@$4A_oghpG5b)>%l_4jf$iCeXB{~SFl
zuj`Yna55izN$d1vCxLSh)f-D$4vO19XcIeis05dV_8|!b$E6aKhspHEf{H=UrPvK5
zr?PnrCsR;5wIW`-il#ZIRalXoYBkgnAlI@o)wKJ|JlP%iTnOwYItS;Y0ZF{wBneY`
z0+~HI<Q`U}9A3{UypOjzz|1r(9Xb*V#T7>`9AiTT%9nSJBf8WDvwYMJ%5fF+fkFo&
zP$PU53<I*$`JZ{O29vx8oMt*W>yiK~^9IQ{*`5>^`Y564Hfg5m7DWY3+Hgye2=NPK
ze?f2UC0ZVO42?FVYBM<Ce{+TZW+<kZ;zwfEx|f~vNj5l?7hN)z_af76*s5KXbEikz
z*n#me;ex&U&(iQx6iS=&atqrpD%->|V$)C&55!1N@F6iE(X}=!M3G=HVcuf0Z$;($
zVp!`Bp78k6=8}$-{I!)Dn&NAdXB;+S3YkM4(PjN@8#hw;+zh0FW-VnYQ;wfaa0Krq
zo^drR;e6dOcax?HYh^^E^$;XUa8Bj*9GJE=vlFf)E^})_@J+kT+#TpaopxyqksjM1
z#R<C*y*KmGlXl=RmzmEVtme6D%*v1wRyCGXH?aR~zM=mnp^~HPrv+jbjFJD}(UU=i
z$<(3puGIy+W*jcEfLgI_!*<l~SXG_1S*grnDG>0x6^bIKJ(?A8#=7pO5>coBVlAg7
z-%g=5W82LAqeNE+S^8zQ9K3(2cy1@<MUb;(<1JO^mWe}sc2UK%i>S@I(=>+BItRV@
zhmHo}EI8_ViM11)MRQXhJyrP^b28?OmP7UX{0YMgXRcIIKe>u1RVa}WL0K?_$W;ey
z{13qL*$SQ`I!=vWNvN-<%*+{DM|`Pb|6(74YAMIb`!Mmr-jw9e?0j3$T~1oGe|{>J
zBXju*Q5%oVt<i7{o>4BIc4(|8P3!eaywGGz8)sMl%bIm-1o@`dy_h{|Iv+Q3CWbV;
z!lB5oJoK0Onl?phOfQRfN!?=>w@f^vt<HAyMxhQS8P;Vyyp|#!_DgMtEQ#SOE&(`y
zoIky9B3Fg3pbUU1pT)zRP_dQex+^Ph^LJ1-<ij1IVS<jYbnlk2-A;Y*r{JQJ34Dhi
zkDX)_w_QEi$O<n)Q(`?CsNJtKlh{wDiC&JX8m2Tc+rDSCa<)T=8bgHY7~)VYD%m~@
zR{670du4d%YEVo}<!3vr*f)7(b7b}{LZFDS>4WEbbQY`qCv1l%GEJzf-AcDcVW@fi
zKYl9ydxSn26UwWWe$3cCnYPc`f)rrsWUu-oh2J+4S?AkjnR_SUp^G|kN+0_0@8((F
zoFF}t(|t?>1AgHxdXBz(r><#1B#ltcJw9Utn$xsv`pkDx4HMR10%QYx!Cg`D1D#&h
z_b)Gwt+*X{4GIpcB$Kweg&S%1u0LZ$;mX?|he^l92j<C&Jp63C%}X{6MX!>;_*mM3
z@K^D)tzb*`!ZF_z^_*-UOG{xt%kPlCcz1@qvRmY}_Z}+YQbXcM`L!KUC`5GsCfdg?
zT;%vV$t%8fi-6t&!mN^P#0^EFGMc@*{#|iO%(wj_eT8DBU^r0ZfO@%QRX4awfGmk5
z7kti*zr7rjGsW0CpBj%u*<yOXYDHhR3`KCqx0`(o{`q_xTl0KVR{LT8#DfItP?BXx
zX|sy)&882!J?B{84{o};G@-q-zrP9o(w~AA&H~d*<vShBXQiWjF%9{#J$;fl>S4*G
zF7c@fa6=y9t>1Da&(v)Rv8+c?EcQV{T!<{@l=N1ERYy9>jCYy$t#5hyPWgJSB0e-_
zz`wpTqEP>*TYvzP5v14aus>q0VUR|ONcMY&a{;_h=L*c#$KT@ZosK*4j{fXlpW)5o
z>ajjwhdGt}?S(Y4hcm|V&fi`zYkfl{!REh&LYDJZJG(iNT?!&SY*fBAP1a0vWHx6m
zY1Ir*n}i>nk-lX(B5#!ly|Oab*7H&C<C1+c{DE`$IYMIgnnR%ScmSl)?wa5vrgg;D
zZRpG0XzHml!I8^u2aE)onEi`UY3)s;VzSRWW>)Lh{%JesIo$VrFpjyhL9Sm+VBESj
z8%dOg>eN-n&B0pT<}dzb+Ewo<NacpcD|-4Ow)$EgE~|MpKGw4Km&Hop$9ySWV>QJ}
z8ZkitBQLL&eOz{l>HRvX0rf!YA_9U{QAbG_Y!6Z{N{D6ohw%Eik5BE2-CGE|h>ANb
z;}_z5V;Gk;itF2bxsO@emnJXRQEQ%!o?!7DMR6owgnsFyb`HrGM<I2!p`YT{+O+CX
z!q)jAD35BHM?AOW6HYx=ZmNSQeN`i*=OC*S;nROa61*{Fv0FaJ_UweGuDXxMQZs(r
zU11Bl_a%*9na1`!!Ki<}x^CyO{<EN1I7^F=KTNvOuC83?$4-a5kI~;*bO8pUw>2H7
z$z0r_#+hX~ers@rsS`TZe>*fQnan-vsyzqP^}1cQSm<%${w+O4VnP9)=g#piY9YvJ
z_2?kk%@y&dT+51dnLX)+UCsu`UJeLkV|~wJ7C@g=D09%r8TH-!!=7z6FYK88X?^bf
zj<#b!n4QGnChXvwsEKpwrbA8Nz0aT)I$<8#KKnNEw(EReP~8QWnd;RRZk>l4Xd<C7
zswrED^nT;YJ1wKtp$AA5R+FKW>ryZM_a4mJixhXS>36+#!@L#+7lz@1UhInWcA5I_
z)N3{#-UK$WJt8BCIP`$_r+2pH%#O*haDdJ}&wf5k<Fn?`vDZVIWSlmrxL1IX=T74^
z{q5)%dNA>ICbE~_u1to!$-0t8;JYuGM;8I;84se#K4RD)%?6#JQDiyZ$FWu^|95k?
zAvBZt@9=o)rg$u_<G`)U1<RGXdKZ^LRkrImZJCWtTInKC$bC-Pm*U+Bz0fZl*+&5;
z*VRf}KP3>#n2^=`iy561iN}>%+d<RIA-2%VebQl~--!H6ei=;^Wt*A^GOdw_hE@=@
zZ}W}S*W=q)23NmbIHqM{bZn7>rnuKuiC&!aMNidkZ@X(OCI6tZP-fiHjo4dM)|>Tf
z?Tc7aNG%raGhrIR<1Yy%IU?^k7SP-hkk>FyWfrei8R+n}4>(wE(e|kxRs)J5xCDrE
z9p9&u4#V1RSJ>sZ=!uy}dGFXy4HVxT)_w3}*w^+oo;4<lTF~D96}D-=B!Vq2_9=*m
z;~~(ww+w8^-K@KQ%xd+I*N!iWFuN?+&sUqKn|pa!^0w&!p2Mw*Xs>SH)JkMM&-W;!
zKDH*Kg?AaUocZBk<4Z_`Bq<d*M~-4KsP$Z<cD>ZdF_1sYE<LMaQiu6*oPC}3iv1=e
zVd>jiV06>IrBU_U7T70MNM-l7Q1oi$MZe?P$W`hIX&%Fgt=p(g9EphH2=AT2>AMIj
z`KEi?mbKKP5x3a}$C`xTualfvFo9)nxruxvs=oUGSSSC6#<oncyBaj|FA@V_lF6P!
zUEIgU%SN1;M`UZNu6I^8_lGfur~3IFuJ);|$O=Dc3cq3?3iddbmNMN~+mt%#BGfw;
zzusP0$3tvf#_Z9H{StMHZVi`ON1Pw+F%h9;NKM{*A`bfDlxVG!q63BCXx?eq+?y>^
z+SgHiSKPjJy#z1YG~`N&`N?ny2LZ_{n%guqg0nc<^8$wwH18|QiY=N4Z;M1cCTGoi
zbMuhAtg{m<68hVaK6bH;Qs^b%5?GEZYXnbi<+dSXjFXN-2U*S9`oZ5lhXx(bowJ%6
zOk<W_UXi}Hh{hL8va9o)_E7u28>}3`EaIwm8YX3Dvdo$Ji0j7Ik<|JAs`X5W03E4U
zvhnmpI@w9hueKC~t%i?9eksnJlDJ=>w}1UbO@L7DgROlMxtjkbWRNNm%c<O`os(ch
zfi*KShU_7$sh=*f%J4El5Vp6Wl9&78K*R%rllMi0I`n4()->QDk<>2-?JT&_;SsMl
zhk)<G7S0gBiNy~QcX07keNpwWD1|hyA2zA^O+NKEM+c3B<oQt!hX~f#FPY*WVU`@0
z;PfJ$Y`|Pw2;^_FCxIyWkvW40cC?qnFa5%=+SDdzHr*CS93&|yWU;ZhuOZLI%d}7)
zkSGbIK9C10A7q|g<|K3WH1cjPWG%?c9Y6n2fpJrUm-odrr&@uNY}o!U$mk_Z#rn8E
zB}z<~QG2EHh{yj^iIn&_@@+HZ<`Sr@U~|xXL`NGAA9nlQTJMm2C8zA#QMGzPIx3#*
z!+v6&Waj0R(-5}=#SxY}VWVJHJw`F}sgA-l!XTTeKp`}zvBZn3x$vO+7;bP%kW_*T
zUV;lTi|=mmgtiy)(x=pxZs;cY0-N~MViSudr~R=Dk1Ai`@f*IYZkb&gr(+_|QkOGS
zD0wEPojO8*S3Z@@4ZZSpxO#dEf4N~nNe*H^Of{(AgTh)7Ol|V5*m1{tD2B)I-9%&^
z48kR{vB-cyp*#(-W_sW41meamz?Dd4yXaW9qW?a0mzQa~c@uqp!p5^bKh-M&?LoV$
z`HjeQgdzs*aCVg5&{NUj<5=|%qG1jU5&SImjk8fEZn;g?zp+HV2{yyn_ciT>Dl<dR
zOEPu+u`v!}+YVFOLg^IAbPXi8hfN*=dRr#;-?fGdpPXOH5~w0nu+yg0w-&o?P*%lH
zKWj4fAE?&2^mk<4GSP4f4@?5j@tt#9B@Uw(P*&V_*)OdhFnpYbC6Nis>NdE>&qq$r
ze!|sz)DX?1t*_nJc7}<j7|bqLiz#07ef?2eeN=WX`u3J!Nb7M4y=t0M7{?>ubPbzi
zEM%zj&5@<aU9$JbnqeTU`mGm;n9!Y{ek_mN!1)!0`jI}A0RQzBaF0Is6B=S%R!S7U
zY<@h6eJCk$M&a3PWN&i(X<}Wodw+mnLlrd0EgH^AThCfUBon$(Gz+9XOxz$@zFi&$
zh_62dj0RB;6zsy9Dxtg9;kGrq$DV3yjEjHrp(z}<*1HPscO1@r61l7SfT4qTcNu?-
zi#$NDmtgTp1OPW7d>_*Iez*8<dQnAij;=es+neCMaEbb5Kjj}h5Gd%cmy7DknQiKh
z_^}gyCS`}%^R^;5)kKh6%MT|ULJvQ?W~%CMbac*RYJhd-{i8W-mC-SPt(14n?}9}`
z#Gm^vI9v5$0=_|Q3pUP+sfJBGe!77ZUG6H@+*k}92o#FxQzwX%+ZFJVWTR2K)e>fB
zs_pC18%tQ4?xvJ#^Foqk`AVFxGn4;{kF9?Umt<)^dM13dxXEv)TtkF#`gKNDi-n%)
z!L(7ZXy<MZvx{!gt~QB0G4$Lizfw8c)O72U9OK#s?B}5*ntA8V2Uw30jFK*AbPsN_
z{?QIyG&a9VlxisLyB`K%-QM=_FQ*k{JhNwKOd4}VU``<Fe@)%Gex72{82n&#JbEGt
zY*{E0M^-60wN`_89>HBm4m$T_{T=G|@>}OVg6N$-{v@_8p5K)VlLT0%i+c<OhF^R7
zTYfsrQ6gTf<2oyjtoE(TpEKI)Y@^9Wzvaz?wTxv``EU5H5-mrswlEAZRhC-2jqTl!
zJ3kH#wbGe<^uK4{8~)7_A`S2ke6cJfxW)Wq5_6i$@BA?Y)G24R*F*zDPU}o7X`F}y
zMs2Vp`%c`e&C!EL5B*Jb^4#bUdvs%hIyv;3AM(Em$uHhIpb0wDw`oz-e>Xm7Vu|u+
zgNWok(3PJ|5|*7QToqLge}xrz+cwelAJ-VMhkFhr`~|@QTlgcwRyLu_W}G{`A1GmB
zOtJ>uCR4O-SqRP#QOSQneET}r&6IDUHNdKb;h|e4!lln9Ksp|o+F$ZeOKZUv_qnpf
zyW5&qamaSpv%^Ks&fe2Ed3SamkPZN(9YV5kAymE^Qol+L6i@gIfdJk_D$JA>nYfJj
zlDX-|U<+(ak%^l)IuQhWQb^-jnM<pU>T(?2nkN4ZUt7hr)VY}P@*aLjCCt8nM{56m
zdVzU(H`bLZ^ThMuxa&-RQdi30Cw8yiN`dvgR9ikjZ|jUojmgd8b=~9sH;Z1JuVJ**
z8%ll-h#U$2A6#%==ddW-!62f}LmXQ=p)x^LqPSIDj${`mEv4@63&~Ck=e3{!IaXiC
zBy@8#JE>0ncbC>yzogQxP`$?%r>1_$<F`$k+n9S?Ry5fVytz4ub}?1Pp|m&|=<0LY
z)eZa{AFp@G*h-|kyNtL7S1@4y<VDf%#2WcbYP|dB9mizTa&xJOvJniD)jA=HN1tdp
zO&qv=%59x~*PHs-NybU)9PU9737V4hSeK2L7h+2ACgR4WeAv6`Hr{1LZta;^?L%XL
zoat1iS$vGA;bi-XOPj{_Qo`drlTUh(_#!X<Q{1x0udUrD;A}(>A#tVS2QABQZsp>6
z^T~FjxZWY5*lX1@bpk;nl0f6dSrMtMdn;`k>kWh^#_?XT94tdbU!iGIV;1u~Y38nl
ziUmacc}*oZ-U56+4T#S>`^(L?-^;&`v2O+yzgCn*J+Qln%%1GccT}^!5!%+nU+DBQ
z{q8Q<9CELz+W&R(hzfwsI4VoXUw4%psf9XOSbhr(z2Z3#H@Z5sz=hCbPs7NE*RID+
zJJ7JnYq!^3Vva0?Edv!KD$j;T=wjmbBp1)c(KtQ?Nh`Z>(4<7{IIt%A-%n{&Ia4Bt
z6u3{sJ|VKdygY#xe}EEp=nPm~icxD1?XKy(rznO+mk3XC(OY|+hDGGgP4!;svldfG
zbQvyqPk$hW5?X4Wox0SHml!D!%t@O!seMd_E|rj1QG`v*O>>by%=ud7WW9?@pADO&
zGj)Jft4#<;yFZb`fX6S;6TCe~wO_D$FLN$uKUyMApi<Jv0M>h>_WDC@UdS`T-^KGT
zDnaq-krpsR`+K#cv(G(~&hY&XaMj2;xkGrLjkooz_Z;WglG2_J;h3b!?yumI+!hT%
z?jrQWA9xRk(DDU=U;@<q7sUf0q~D#9#&HV-Co_!=cllfb-Hdx7??n9@x8$!5hMCGq
zO^6M3Q=N<maiN_3jk_89FCwXJZ>ddgTQVC33p=8hc|EsoOCy2m&VsbrwNaSbN<F!&
z_bL}AEF{z-{#s0cNhq8@>IpFUp3wOW+L4CoL|?|1H+Z3G2fON#JiOhEOu68XMs-C)
zJ$cv~tle%umM^MUl6?l|ab2%o>pbA?+<S~B^etIlkR5ckTl2%qy)lRnkeA4Ecg>IG
z+%E$fTeRP?mQkuV>a{*BN?I88%$VZZlX<#;eG(HQF>_|0P!)@IG<}uUkHfJxyR&V5
z#MTmeF?LL-^mUWZecs-3pdxC}A<I6g{uTL9X_<8_I#*Yv{rt-|s8#gaI$w5T-X6z|
zQf|+@(wK~z7CfV+6!5ZszKnYy6`wQF4~LpO>NyYl<RMscnbECh!5O0Rt*E{gJga)E
z@-w`KEIQj48;wV-Cy=<YPtwXM?X>!iuoM?}zozuvrHq<u20@b)bIqFJtB8ythzLjU
z@i|ca7u&GWnRh?rRrcqeItZbhrn3;SZe@vl$0kNR0HBx&;Dpx_ZXR)R>&<@HzvJf0
z%$(_wuP1gd<;4En!QcT{RGi*(PaX-O8En&8i%?d{)?L-}4aNQj%RpcM`mnh7dhQj@
z1d?D&zfDb7a_3#fD}FC<tDY#Zn|>+y-zVnWXKVr(j*ILX2xrhA>_}l-6sIFCM-()w
zd=QvEkpf_0h7&ir{$jJ;jIBE5Hi)1QNdy-6JBNE#Y6M8rb<cGM65qr2B39t1Yr+y>
zTu~c0C)x8MQIDIbHmM=6^HRyT&JIPCx1obPzaN#iYx@(K!%Epw6?PqlZPw+>Ngvx;
z03hT%9~4~N1LlMeQ0p(HCb_i;s9D`%fqTcoRs-iswN?QOC>y9wN7)Ewv0oy-VH7|=
zYq7&QRrrWGaU){GngSIO=0z&a7^)E{a!)Xl2n}mbaQuus;Rc)B#W#@_${1?-RgJc^
z?#NhnR=WQ?K`*-4n>_@`#Kp%8Qo*Hib_B9~E(ttSGH@}`{I;E%+fa%HZD8OcN7#lg
z6RKemkQ5$4oL5g1hwJkq!%f`BuhgYUyt{~~+*1F=_OUV|P0UW|2b~8Kqy!aPGo$6p
z%yGVC9O9MxGFon&c6HrwC5s{UQ*D3jQxlA8cfw3kdxz+STCMg_Y`y<MpMZ9?986w9
z)PV7u$6E|F8n&p2A6&iz<|R}xR#8f_%GPm$(KkesY%^6YGc$vK{ozg^RG4hul8lWQ
z$nBP!!M_U<#n=#CJRhR`oobP18yXsAQa@$a0zRg{yuJ)iLLPXCD*K{4p5IytHCv)c
zfa;yZOoGhfa?Ne~YDtq&lOOr?K1@@%Q;rw&5$n#~HVyC@xP++=fy@MR5;muMC}gLJ
zuLe`>#OZ&U&>Ea2an76?GbOqPprDW6jg=Y8CB_HDJ%0>ihrXVUtzGXeHEy~r!d|$X
z5Ix>lr`3xOl<ix&8&g2f%C&{HBH65@JRA}aH1aPhPZG7#2{&5b3KY9m5Yp-;d5w<q
zW3U>Ubgyqo(5xjiqObf3Gd`~G(TNJOJt97A&OMqrZ|J#E`#JBJYz2926<-fLK9FeM
zDZ(ai>D<kuS?8ZkO`wgAP3)9R{51E9y@*J!q<gn^2AnN_Xs^kdV~s>_ZX}I)BmFu#
zH6$Teg{m+1f^WR`qcbiDl?*<swb<Pq$6RkYqz?BcO65C6gwxuFC)PI@y*WdfNdFM!
z+nbxBAAc4Oms%JARDXfME&P7xSry62%x>=l(&uGo^s&+^al9DVp8d_qVNzqp){R1>
z%|l;6(vfrEYlsEo>Ep#~;)XLb4r|DUn&AZC#NBQkI@48goM>qnZEgjShASSOzWO^i
z;`>`1Q#|)YY=YIWw*xorHvxn3$PCe<CXVR7?3OQM)dp{qoc9e{_oiSb&C7=iGw-}O
z`cM-_G`%*cpN)K`KVWe+?gq%#qL`9{h%{*g+A6^s2zN`!H7#%hdm-#H5!=1<)6Ra&
zd)ju1V#;I(RY(1uqukQ$e+a)xe!01o2#GSO`=bSc6MW3Jo;QNV=L_zNXh7a}co*@{
ztI#?nJK)G)k~r#@eC~S~P!asuRjV^?C)h*_*$#G7=~+EL`+WDH^A45P_141T8M)%v
zav+~>oNUyXd}F@K*L~Z|5=MUl_#Obd0tzNW__#T;3d1ni-EUglPaZp2k;#*c(CcZB
z`8`GE6U#5_>4Oc+R;pg@<n4Vek{ulJ0<ME`$QaEb#s!PFVHdh)r$N(Q<kvZnO;=6=
z0Zw#1R|j^EddZ6n_3W+gH{_Fqi&wiZ)mSs12OFUjf3Pz>zFJD88S0=Bm0^z@xW^am
zxece`zqpl^jSu)GVa*~wNgk~+rkx=&EhA{rPHwi2Kc5^_$Xt1U`H;)W5qPE`XtTb?
zwmVSOqS5(Is*M~e1orb_TwHYW6<D-rMA>iwaT+NHh?M5J9;6*<x_DEV_QBBRfSLtY
zqHnEn#3la)Nz@{@v71Xg?58fa@<g+d>q^AN>pe{3$B_$NoweN1?oPa8PZ~Tk0Zrc@
zY-R!2CYc`!)3kzbhw|IIFT}QV05lY&vh>JOd#30QplngSnvakh_Rljv#a|sg{)UXw
zOuwL3$}@@Pkz9Wmh|RY}P`(v^Q&92hwvRX|obfW=-MhCED9H^PXiz0~It7V)aBHz|
zSv_02CuO~0)ccM$ICody10<Ki^<N+rA_?wpaua_5BQIJk$DuenmvaPzQSm(bxx>@Z
zKMCw_w~eJavriUMvbjgG)cd9uCAdDimz2dlkljt$TdozfIZ}VTFFz+49a}b*k2OlZ
zz|XS#ox<+8#M_pI2RBK6c_-r!yS0T`LZ$HSTUa^f`iy3<{v7jy8jXJnH&g#v3&&V5
zSvGs6=f4@lVKZSQnXT$$8RiXOiEUZ6ff?tNje^BJtu57LXp;tYa#5`GFA^C$kFFWC
zmpvaB9A{iN06($jiD`XpF$0(^9i3ZUB6IencC!RfL2RL5*_e>}jJHI31xJ~eUQD5H
z=l7E^%KPCL{*jVcKO;RsLDI)i6=L@(L3t8;uwz;?01w<764z~Fwcbv$EC(Vw@`qj0
zJM*wf0T^DbVgJ#!1;F>0@L+^Y@Z|tbX4U(3%B&q-bB9kUFBJhhxkvAiD5-J4H&4m`
zGNU8zH?em9#rlTDoEsdI>*w!I|J)j$?@)HM-Jz+-#Ms-3A2?oq9V#vjgADH7{V{7>
zGTO@Go8IKTPzwA#ZxF0HzO9<FtU%%@uC65@k~OD${ga2h_GS-E73t4FH8;$t6cr%q
zj}?yVpYt^EWo$2U`FE87tzgC<J?V<i-hJCbC@T%moru)7uzSJ+4m5JZ?aAt2L{CyP
zPgcNiCDz?HA?);+@s0mH=e?t7n)vRlnExxhz^tQ+GQ8l*Bb2$18`*F_FAhK61NegC
zwzhlDF?g$^h`R94vLjii$TV(db>GKni$|^R+#a?_oYXo!&_=3{nZ@PLSRRHy@t+(b
zYF?;PCt7x-=p3fr4p?%OC0*>8HMeA<xeR7trd*YYSo=u<egY)#qQ4grWCTm2skayU
zMI)bDb+L$aPPVVoXB{{*6|&9`*33<X*BdB^>kgG-7VfaYAMdZcU33?dw91cvEeogE
zTE4!xEL_-}>X_s?*BegXd5Mvk)i=iy2U}BfM9N@0n9&yY@Ar*!H(FzLQ}RQ6e5t13
zHfCREYXaRRp=W%39;?x~Q#MWfqQKcmBpwzODCqZ{zYHK&0)ZhM{Z`N~^+O<P6%;42
z6l;uBB*yp+LO@_z8yKz-EMPDAzoIIBb}!g0k<h4GqGdr&#mifY9E_S>RCp|m^iE1e
zfRzcwDQL<&;_0^HIIXu*@lCXs-l^8I+i1eJ9qNZ(w-rL9-eZni!wHD&YZUOUeVChe
z*K*Y*DikF;WJexTw=qu45&mw;G0#SQ021|ge<>k^sCPX|zGL!6ta1qU(0|%3MrHXW
zM0Br<Tsq2hXTfuG?Q7*tPD8VurBu>9Zyxflwwqx#bLeeR6cwdW)Z6TgpGDrI`HERh
zkZV_8Q8@KCwg$;s@jfw<F?h8>%yOp`J=<>>w5J2o(rU(2_&cd1gYUSxo%eMw>|URb
zlNAUq__>BfhMA*?mR&rCktSN83EMh>p6&);k-R7&Zlt#alB30ycV*BS9i#I)j$zD+
zowppv{2^2Br{3TI^vaU#?!)Bq-<hA8Tdu!ri{{c~UI^thmR?Ff$_oRvls8qo^y0JD
zBEuKXFuFtJY-!QWm<qq{kB#ow;&PQTbsqUb#K!tmM#;}GxGceNSyuL_dwGyChkQal
z6IeM!?fh2zs`|yz(ZvaW#9um2dOT9$=7&ELQ*?<g&c-Vp6F28mI;je>nWD2KhY2cW
z#;u~yO7W1jrbiXL7@`Hzq#ujY-V$Uc38)CJ?N~&%C{v=@^Vqm@XXS!72+lk75E!Tt
zSXC&VkJG@Nm_;dWyt8?06%`<?lBRV|{wH{}EhZ<`8TqO#?#8E+x9~Jrd-x{=%E_(-
z5g`|GF3B*(C>ymv7;P4eLJreJP(#+rNb`zl_{nt;rBI&9V#@&^AOH$zCJiNCXc@Rv
z@Akm#{}00jpkL0Rt7gaxB9b5GROiPlj8F_U#Q{W+w4<TP-gdzAVDE@>^+a0+p0*V%
z)7Szav9rM4y{mhDCipc*@R=f{JqU~<!{sWtm{N3W1+8eLtP4jXmIFAO63e9YKz^bB
zi?%tUfpAvZ2#S{HMVq+~8Nj(>WT&nR{%aajhQg&lDG$RcoB!`0vA#zMNpU4U_pT~o
zk2#yg8Z+nmn-8cM>Bpar-`>=JZ;}5YZvMAFqYxp4+`mlH`u|tqL#6iWrs?C%GQ<9D
z?umGZl@t@=!(lSWCbYe*=t1ek^xt0hbXooPc$Jg?nR=l=DQ-5@an+x8XR|g~yPCPo
zzmk7xGgFpjg&h0O<@<kr@qd2mMY&Sf+nW2Et7@V;tGN`-rb5V-Z-j>I?}>iyFBH?X
z7Z4L(R6v4eR1zQ`5cBmQAEw%8E2Xaq0yvuP?i`70%2<<2AwReXY@Z?m0m?t7X?Td2
zjG&xc<N?cFdt}~!GShfQqwoyf)Lta8A2>IU4VrEt5wPn#J7BTLX5Ry*95V>1`!m7^
z_QUrV{;^JKg3-fLJvOx)eg-P}??82+>)Za(wu#^fr3%D#^pbz|T6XZfI<msW#JW-S
zb5tw8ao_cOjBfP(XT4TX5r{AML+*r_{vj6s!>4}RliFC3{NK4epCs$QKRn(~yksng
zP>N*uppU?pK0NSAOo1DAP;w8E0*`nYb`1+J)?Y4t8j7YR=&oN-ctc8_3UjxPpe$K3
z5Da|fLkHhjWI2;WKw_dsH+FkxICGKpB#IeQZB{awUutMLw8Tmz*nwD--8GRxNf@~N
zkcw3w>7d5vVbe3iNUTHd4VO_J=gP%jpU(^m&(Vdy@d`(<@pkr8Z-t<s8A~ZU{!kfc
z!s-1gwf-^7A;v*R5lPuofLP(*_Za0bN$pwEj^HME27OCkd=}DIb8M9Gbb8#%uf(i-
z8JhgQ3HE?{r5%t>EY-WsYLk4%LNj_RL^_z^j2=69DFFvZ_DV`rSoQ9=A_+E%9D;+E
zK`m#-EWNov6lkWk!&1qHk^p%gXb=egI;iQivUtA34%FiE3u)_yLVRnFAIRyi4u$=B
zU^LtC+`59F<F|c*#>L^hLR5tyKe#b|a4ttOIRLE+4i-i|cr8Z0DtHAj>(_yy1ujnU
zw7{!IAbmkPSYEB!L7K;6d=e?4KmS_#UKVNc6t55v6eQl2x~NMn&Cpb&{Z|yds3X|y
z_4kR|=898m;EU_Z)QpBC+wS>#$iZ~j7>k-AQ#CD9oo7#?(I%m9!iLF!d)yE07tv~d
zX>I|8dHe>9WOgnPkJ}*`*5Vxg@4<{CVBOHkS?!05OoOF_j<RYqa!3zYNWSUii!XyV
z29hm#>(yJPZ>1t((f^`0#DywPjO2;R_ntRU02c>rc0*Q=Pa%ydQoL;WGt1x+OJjH7
zm6Q>lGJeifL2`WpG|oshsdDHNPjPk3w1g#H2P_>Yf|YVqtP@C?+9d(QQo=)QS$?-;
zO{5^y7hc5xgE1{GEVoeF`aulYYj((8{A#c7^%F0gB7zGP5a?L^YYKEpoV(TO9Ed(1
zu=gax?C^6jiY=}a&3p(TTG<0D?!U*XkRlM9^8HtrH;Mck3JL`0Gx?vUAKZHX6Nq-J
zpud(0n`R5(<e9tSz7g#<z*uWGnWSP}Lm9~psnZfPAWY_g{thr>AOeU5tk=N1o~N;u
zu~s3S%4_S_>yxKIaY-40)=}ZS`edG`N3|FInjLD5#=qfqs!ipLZtJCFP2e)xSUkrX
zTcZL$iua}%zmw881>TN|W}<5Z(5!~_OzUT09YP|}MmYas$S@GFqNJ0DS_Kh_sn2ZX
zz+UKWf`}V|z>Ml5n9EG$Dn4BpM8ipaeWGdn4afgQ^3bH$h+4kzMfw%k=JPD?4Nd!*
zHeHryWc<qssj>e=qM&$5<soKuqf4rJs|BuOd(05I9EcSF=wo|J!e8D8N|5IqHV}*R
z&TB#@Ol+Oj^;do17a~9}VPYz3y(jnjN{NX>7EbN>h)<Vg%jRzP8hg2!av`zz@@WES
zz3QjYwkKWfEhRASCUO5)RbL&@^!L3lg21G~H&W7}f^@fnAYB6DKtMveCLkh=P(tY%
z0t1xp?ih%alyo<Y*yv_#{9gF^{`1>^`(wNJb?<pS=bm%!^PK)SDM9tt-9^*9Q?h`@
zp~VN{d@{X%f5IK(F~OwF-TehZGYxP`0-thciYq&Vz7P<GDW*20pPqU_+<PW<uwC$E
z-*K@QrsrI&Q378=uL$>pI4MgB#?t#+=Y&d*tQ_ZSr}hh_{s^WPbaFkn#2IcOwM=gm
zzXCJ=jkO{QvQCEQ@|+xKw7Fw*<*W1jhNXWrm=84kyYPFPQkQXM4MvQXz@L-ca48ij
znwXlh<0oJInAS`wzjeCYBwwZpU=1z7f(eM}QG9N`oL<uk<-xyk-EdN)g5JNtAIu2f
zuGn}G{&Oq@YKqRGGn72)tQ}}&vjT(rx1-P!qh$*8R0nCZm3{LoK>tvH5|_UN3~X(Q
z*jj5EHLME@3wwQJq;LjwPPd!9?@to8Ja?!>0ypLe+-EC?2$Z8~mIAv2VdhVsTNx%=
zF}$m*33=ira~%=%qXcVVg>iclKa%Bs2os)%MGMa*cI1$j0SQ=2Y64R5k6I<?Fq%#m
z$DP`#aA^Y`3Or0p<znCR$~}1O=Lkj}ck|XKk7*w)eXCk-yx+_Z`g|MjhU5Ek%qySF
zy>iOAWS&;W<cz8iT+=XbNd8e$MW5E~(7S&d;7<bB0#M5u?tHNSzM*SOw0~gE^2>Zk
zs>FDMyz{BQQ^_nXW2xu{15#T$&rgb`!AI|5@~t&#k+63UcR6m(=zmFWJ8+B{MNp;w
zsO>1A?h%wRG~c#iTblA0S>?^kvj6oGo#Mf!UKw5aaNyrfyJS#)q%L^)p}3NB=;#-0
z?&w~Op#rS0X0qAl8iz%$?3W2#%EyS?pPytB0`Cdi^QD?~MZ-wLb%WO3G#JPW>^Swd
z?r7*C-S#YncrC@`$oN9wgKK^zmrpWpIRoBR%TDp|kix`)Rfq|Q2jx5KGA`Ht_g17<
z!GN%aP5WL`NzLqAo^4IIECKrLkH0|Zw|M`_I$RTVQ{4Sbtq_r|U_UecUAKY`6oBE9
z$^XZe_WCw3b*PzRh0(yznxB|)u5f394YIPHy$dyopP706(ipq||L#qJ{TOj&*SvJ5
z1T}jDSSG7AXwz*`EVX1?=S?*M1mRZVxhj}A)>T*{_RaDe*+xbd8AMA@#7owEcU<9_
zijWo){%?=h90D|@z+3piDd>i&9fJN;!Q`Nn#ywAOo42Lz*GMfWt!EW&z-))ca<Q}P
ziTYEeSiwa=73~o~?JjVcBUAjxL)X~%$z80hZ3Wnzr{UP#r|j>O`d|VA=*>+#VaI02
zNq&g?`Q*DainN|JmJTRKJ|0LiL(y4oe-3OUx2mtQT&Zwvmad>hkvX9hQf*yV;SfAd
zTSUFfytox2<*YAjYYuk~q<s=D!xMcc!l#8##soOI(YX_h(dKLE&RWpcJox`6?B;;j
zDnmF$M|HGbb=pO*F;<m&$AJM31(hy%sTQQ?p425%gAh%yM%c#?7vyMEn>kK=m~Zq%
z{uG%Q!q)Wv2PqbL|AQ7VhA7UzZ1}zDpYG&4mKS<22>5@iZvKSovgEs{_%}!2G${Oz
zDkG8}X8ZQ)*S+y+-UDHU3b{YsP4T=pUMwVlimX_?o$rQhE2-Bg(yu)RllBCRm52d~
zwb3wreD_E@xbNQjXwLJSWCaj^juGZR(M`3W<vD|eq@yLssDIQX<j33CMoyNQyYfq0
znZ1cyCK>8&*0;)}xj@w1wsZ6jaTo(SCAZNN9Q#1pO&{1JzwM{G?|zZQ%`m3@u*jqJ
zVsxx+Uw8#QQjr_-A91UD(eZF&UWnE{zJyBlQQQwd_B;`W-PsOQd>cT11r!b1_#Ak(
zDN~mdD4nWY8eQrtycnGn(rq@V$`?g2au4_;@lRkUhq_rx0dOgNq}%X{ry4*{`Frhm
zqn6OWa*P}KJMLn&BR(Y=rSXm`26J3$lJ!8wD>FO$cXKa2YKvyrYh2?4dfl!WarXoI
zdHsXHLEWgEqoibDTUyrW{x~dMb)uU7MPEi(-}My*PyYJ&Q|F?YS5?W*<<l1%A3B&G
z+z*dOC@>#v#hr9;dPe5nHU>_DDol7yWV(z$YT4DDLTGY$03d}I7#QD14!%5--U{T_
zg?=A%BWOKKG@Jc>(=>QlL-G179z_9W*aW7mn{;Eg$4NFeHY{pT6MH*;)Q1hYcf?Pt
zq|#F_S<gwoDexF_!rq%|e}gAbxC|Mkm-zL@cM%1ii!RL=$3Xsc)}LU<&qt2RIE0ic
zHKkvS)fPsIDLa?VSY)C7gvtNwNQ<Elj^7(pdjC`P<k9_iKZRztNktjDfigf_4{N5l
zMIrfKA`fE?*$uu)8h#Y+*B(#(XabUKS*$*TshXt$?ar_hD&>HJh2T%(h$!iREdE&1
zJhl;Y28q!B%^qCq6dPFmVW#+k(Y4vqM^S8#vGio*!R-FDuTh@0{g-aMddEdK`_6w@
z6BMA*zj!PkgZNvbZK{5^GH=N3vqK2=_OZdNLwuf$bGdJox5L%Q$jGT0yRfNUx_gjQ
zN9TQWbiE}6L_Hoa#!EE~iPL2rL`-WKl)Gx-Z~u{$3U=SC=M0Q}W}*3%$>m%_o*OQ#
zp6d|anE)A$mC|B%VtVY548@|%vvPC0ikB6POI~x~Yd-v;%zE!q3j&o|Uop*26C)xk
zI{VpD%%7lZU<^PE9xJ5;g!B;S#o?j-fQA~IGi-gDN*MmvOgmlHWX`U>*Der8m?G}X
zaCmqaq1Dl<IXKup#-&lQvwnYghV_x0%<~Q0Z2bc}*mr-PsCdwk*ykkRC@SbdY$u$F
zS|q51ucNCL0}^?SSH9eTQ|?5&xFB)5I}dhpI#$7L5l&y|ScUR``}XZeqNHBsU236a
z(IM;3t<|>&iQPOa*+nDp{KuZ`0331NzEmi?#yH@=JiMRt%sDvzxpU!+QPq@lnGee(
zT&vB0FKx;-1=E*&u+;;-G|KjKZ>?(Am$`XBuFUJBOGKHtBG<i34g6aetzhL%{zbpD
z`Ttga&pWxauSP4l@Jqk-n{z*MLlHR&B9mA7E;m`F;Y4l&+<msRfKUAeZws%(uM1Pq
zL=t#5P60!k*0k8RJQ+mj3iTri=}^NJvGx1Arly$CgB4=8T{i_KbAI5hxztv??mmH<
zU2mK~6%w)~LZlLAL`FQxI{ih2#Tl~p8i-e!n+H+EbX#Y!J3N7IfJTly)_n5X2fIk|
z+!8_m)w`r<@URk{hb)<`bL|dg@wZ!83p=Sk@Tp%fp>RL`&%At7MEi~Ckj$UT@H@c6
z3bN_yIXk|X;ap0A1(IB|Lex8_y`;;|+lg2doeNFS;>Kq_p;!hY^;cer#pW&vHrgDT
z--Yj7TwHW<s|r+ccP)SB9pU^+C0U*W;vY&Yc?0L@)UimxA8vx*K<*%W=5>)*czAT%
z&(zBO3-c(Y!IzFmS4@RAUy-H%>GZoNh2fUC+|O3vg%B{gMf(B4vzo;Sc=DIAp^SXX
zYdau;YZou11s`Ff32I=sqMTlywMDN21lTqcf|+%wA=j^jJ{fj-!tZryAwr0TyY2?6
zG8)UQ)xc5^@P)EGMtIh0rAZz*T+FY+*`TP2lKQ0}63U(Oi`lHVZv`=NeN?GwL2`XC
zHfec0iRK0dHF{yhal2SR(fD$80W%Q9=@9(sMAaCjx4nrgkcat^rhO2lOnu1FLpy)R
z^nxHpq$uw(Qw5@+0HkoWOrdAKms+a$6XzuWu0<Q^{e@wb?&55pguQP5aNs4>ZxA`L
zwzjsk2fdbASye(=Hnmog@#0JZqce(?A#f5kVX~>0--~{<s>#Q()jv%l8&E77cxqRj
zdgIuCa8PpKfx-{pa_RL);L5mrJr>zAU!z}{dT=89C>Os>+OYN}?f7nrq8Ag#1Q*>p
z$o@ur33<<ey!{CBOCMj|j$f&D(Wxk3bzMRJ+4w5&a-pM&-&^uiP1CQxLxk-@mOgiR
zaQ@-REnySgqpaZ$6lDL)01pcxQ2W4>art}L?nVDI{{xTg30e+eDQ)0xnd0RM4~I0z
zqipbizeu)ghWWaV0`_=FRYgVKe!-{nKjWnd@Cp6+cMmsgUjAI&<PPb3$5-Zr#q})b
zYj~N{%=~Np;<~&*hA4XI-L<8nh>z<mS;D4fHn-H-rHI?%P^T=H&G%Yq=!p*W(g3zZ
z?bCJDEP0(?>$o>`5vnWNe;V?=Z{TES>d@#(t-Rsab7X0{yeCdfgSqgvJ27*GAE^K2
z9L&PI7`e;sUy^?!Nsoo2T)_#-GLf+`^?9}M>@?S{nTUYA-@PQu=<0x`c^UE-3bdNa
z)|Ha)M&j@%3-CBY`|$V9>UiWjSN9L<bn3)<<sOq%Mvr?rV(`Nkj<y>WeX*_^a%V$1
z0%xXsI)$>Szk3t>wy&x*zLDxZu75lWALHRK(8#RBx~al~h5Dmhh!c-ASWPdrJg>%E
z8|cC5kGtC^N@*%o>%`bg8wk}-LWLUNXPMImiZe6#H7nB);uN%tX1-;2jVR`MPnQmB
zhpMv7+BEqnc}*Mru037ok?4$i=97E5ir<&q;TZHatXSjE^OO9xES{e;;23bF{Qey*
zx<C`oNuJ@P;47QDvKA;>^j5VEi}Omb9ek$Yv=k+0vg_jzdG(h3*@q!)$9A8bz(88~
zOoFUvcjPm0^%ZfIn%A*qe~UwcOhL5tt&XQtKr>1+^b8?L*heEsb5L}z0khjwVcko8
z#Jy1_(WkVK1jR>PgV26D$29~~OHaPr7j3e}PznqyAM*V~Ks>Ee*bK72!Q}=Xp154h
z9PS1iMaAwq{+e1C&ruaqXN}mNhNpSR#w>rgMKpCZW7O9!_EyOjel8|L?q6Kb@10pp
zpMTd(Y_T!UY+>%wxKFsS=Q?z`la5(+&2Z_9Js-P(;P0FuupKpuu;r{=C7&TJ!H=&V
zMEK$`-M=R}<f9ei3<Md?&0D1Yx~RIqwnE(iR5y7~)4e#mat?Nwo-)}#swZncTkzEZ
zP^ofS5T#o~FJk*S-7+bpaCE6&V?_5tkL$4lYFo^}s+eUoj0akL<<iH*WtE4o&{xkv
zBKE7ij+!219j=ruqZj&Ca8O~#?PK9lCf&A08bF<Is%(-rL|DL~+q(VeTu4DIarw=c
z%&~`+iYsyc(yumH_8OomehnK3E5{m1o7;+U+>1omMKVvl4kwn~S^MOs=2*~4ZPZI_
zN6zBQyr%$NIm><h%|*?8&5?dyu>a2)E+_dHKx?GC#tB!WL@}SczGkLDrTGBpR0)`o
zO&u*fC0M_5j8xmM7@XrkWp|*lZkxI1$1bP{7iZ#`3*!t?hQzJF42F0VIpNM#5fzb*
zH+d(qvG3nOg$2m9`B3ZJ5wiZ}rXL08$=2#RRAS$o{jZPq{Gk76fp_lp$C}#O1!hLZ
zCN+mcFJhpQS0?B(CwW$7dtD}|EcQF6CwdGemyr_OmhLT=;kWW59%d4%ZaUSZP|iPm
zctuxy<QjR-C2GMH6EOf9yqILqf*GIeGrN{b-V1ieZ9xomJkvcr+y)UHhi}T8qzyP@
zSYK^qAQjA-xG2@=pFG?{2YKS0r=NffY{v9im*pswb5W=5^&37`jo!E#aj~DJYs7Jo
z+h;XqVh>uM$atXxX0%hQ^CN4Vk7%*d*Y91Y=#YcCwc@o|jrEw&#4DOOK}TER6qK1;
z4R~?kL-@4OV_5iPajF%GwvNi2q|f@OhPzmJI*XB)@9_aFmt9&*_G3%J#3AiiNzvBn
z=5q-fR`%Dj(JcwNzf?qbsa;KPg=>8My#iiORHM{K)X+X5!e7jaXr|MwuV>uL%y1kp
zE`8?fX&hSSZU+bsBn!#8We2;b`Skj_<Sv6Lkm;%_&%+GlsUv+EbsMysr}4523UAWh
zFZ#E!XL5>$9kmStAwE+H>t8U>0hk$BIELBtAlWx&j+P5uRaAZVm@KLK)_GKcEJ=LQ
zJyuBZ)y!^=sF+$tO(iDSpe#9bY|JG+!6{GmWlw4eGdr!YiwWnE!O5;fkkO(ppAOfd
zBIOJA_?4K88m>Su%>0{1vo~Mg9|cgw!vgzBf{Uu$N}31I$h>F2<~~_#lax{*<<5LD
zl>KtiF>GufKdrWMzVtepCk@4oWOn+GvQnjMs2x@q1ZlSNKIOiCS6!ZybLVUhLV-K)
zR$vzq8J%L1?$e_NQhy9Xsx>ao&#*E)J?avA%05Sdo$rVyyNICN-QJ^l1NFMwvZZI9
zN#VoLbKGvU0!}3}6ZIk>fTsjQ`T<vQgY56M#o(yCI{hl@S2)|HtZ}NQ^Vz^N%xu*K
z7l_An!!`OHxXZfWXr>K=-SOG6+)8aaI6q9sWFeto=$=pZ6*3}m?|GW+MxVy33%uZP
zkx7dI<28&^T*6#MvQK+wGGuE*aBFOoOM3ENx})@<ebM^*x=U(7?I<6$>7iLo1=1Pm
z`D4ZW*MML*r}FYo)!Zy64g5c~-#RS4<1wT9le>2W*T?Q@N~yLoJ?$Z3G0ZFx+E;4R
zbjNAEp20|u4<9&C01^zaJT{1m#In9PmZGezBUDcES{vg*`<A*1WLZ7laFpZWgl@m^
z?sA^4t!fk~^~wAX)98+~L3XZ;v7$bmm3{;v$k9NDF>b2vIm)#3<_+9lmh@3j%Lc|+
zdDRM#Nf4L1yA{{NVf8xbQ#VbFoD7wodn`_X?lu_XkgSwx|8kfj&}~b?chuaL|Bvd&
z7_80jZW-$cJquOKKXKoC?p7jx|8Z${@Q5Cfmk`LuRcc*oIK{XHxNsiv<`IpX8@+&r
z&vW59j@k7A+6<)ii;Gd`M4W%tbZZc1yUrCC-}N^t@PIv`@|%=*$Mu@h;c)`$7S{8W
zbF*#$@(5x)hET?17H1*&3wJw85TXoSH#W4OK_7Q2Lyz=rtUlDgsDB=>S%|-n!|a7B
z6EdVKLFj3sLsFQLJp<rdd>4C5GxtlPq){EMIYB|+vIhmg;+|m1a&xb<wX66`ZE7=L
z-Ur*+zQvfV`+h8RTmoqydBKLNB@zKW?}?vQUDegL$ZRZ*Eul0GAJi<|`sK@fD<Wec
z*lma>J>@I$cYoXdVTjO4M3o>aNJDV<oaR~A@;hAz7Z<Nt^_uVEK5v|hoKth?oF7f!
zUA9fm>I{$ZHLb*0iPqp=kQAQwt|3Fgb5Vp=zOJzNq}(4ZT;)dsTmoTr3?9RqpI>P1
zE(boAFPWX4c<vdQvRyFPv$@nfXHT=*R3c);^t4@lFpX2Wi$LCW?0gAI9Fdw4RNWiM
zAs|B1NKeC*i3jX;`|)~uQT$#$$|EL?G5F<$HrECrG#cwDas|d%C5M{(IsmoC<q_9P
z1nCtSz>G+a^rOIN$WZBg$L2u!(Gpk)XtIPKhEh?(34v!M=IvHbcV-VtT>VG@XX$FE
za*Kg1c76H`2Xq>w_*qd&T@p!lX#ZIwS4YtL*C%=mLw0`?&KC5T^eT?K$-+oitc#m#
z^>?Z(>NIU_xM6;`Zcp<8Y|;v@_f*;&5-puOD@`-<k;TqxQ^tPyEl7~~DlJ{aD%ahv
z3|7V8NNN=Yx>|`mYo2^4M0Y0pM1Vy>R+p<ipgr;u)iMzb%{~aybk5Q8D%7fRM(Lx6
zS2^O7^8kOYJb27tTauHR$;w9xxzGN;>nK>xzrmLBYRJ%{?G3IEjlrPu#rOLIKOBJA
zC5p4ne>Aqv=5J!$CIaLU``;nGW9us;qa=)!!A9yowZdDVThd%1Dyo?9bD4*qX#bct
ze35hCc2C=A^~0oaYo#2s6l|(r^t9PWZ$9Vxg{R8mCpxD1e-t#?kc&Z?J!L(;*ax8u
z$k9$0=88QFsb=ExMba`%@5D_qgCEZ?(-I+79|3=jS!nSsIyyWQ#q1d#9*}q2+u5~&
zU0c3XSam;3SArMHp8!EGaB-h4Q>}dLz!>ZZ=QT&37dg4QDj3|>@H$nAWrjmvgUBGR
zx`%*FNMNkCMJDOdiw!#Rop%U&a_?B@n;f3gZL|bYYWWdLfRB%_cW4M|sFGsFH}er+
zYb}tL<<mai7}bX{Jyo@zIZL^69{zm=Y&QkT_d1zC07M~oOv(Id|7pHfb?;Npt0(5I
zpW>Z;+uoL?K|hL<K@>ygfON6oFA!<9CG)amNA3k$q62AE$p)-6zGeUxc?+NHV7nTT
zK#YKDhz!O@bItEflz<OTXI(iYB<`<pk{%@K1LA~$5a<IuHO{c6y;jB|<FZrlAeBq_
z!fcpARuJ>Xl?b_L5*#98_n5JdDWFk-hli+c(O*VeYW?1-+f97^g0&cwZ|T1jNTjR3
zB9WTMfUNo`LZtLciD5a?3L*6iamxwlWD)QM2>MCLX*CI?H~O)uPKUO5;yYeLQrDdV
z{!}Eie8df;aHN;pzwG%HRg7ixs|F7)X6Tjsx!Sg6+F>*I8Nd(x3+W-+xf<mi5oDaZ
zp}^CH6A;b{Ml0toFW8=@F8ha0%LDtc3+y*Kiu`OE#P_E893@P&RA%j4?3a;bldhQN
zcRDS(8X+>*&V!3u{wLZ+{NHT`<wL-3mLeq<6y4q3S!=-A0@%`img^=(qT}iook4{x
zeFocL0vNEa9D!}R^vKvYkL=o5Eb>Lmk&^@{LKE0yRiqzFm{H%0$}J%wAqqe}pkMK%
zSKdx#sR6RFGG!IrS#3WWlaj))>E`mU@ro*Cerah}saaFG%e-{4Ibs3cYiu5OhkE+V
z%h3_FLoKyf^qV<wdkc1?!<%DC{yFJJ;qw{1&5a(ZyP<+@;%W1*@|B;vsb@42071lV
z3#1TvID%Fm-jR1d*4l}Tdi3bgZjYkpZEj9ZRv{s(IL&N{yc<IW*3Ip<u<|6lKEI-Z
z%Fxho3IT<}idzEtA8RA#EB9Q&Pkp8T3bi}!0Y!m&I<l&#K{w&DF6R<w2h-Q9e8@g9
z9^p{LyPJe&D6p*?bKj^k)e`zMd~;-puNBh*AS#N!)5^eas5BLw=4~rH6%u_`$G0ZA
z23*aDNt2Jt4Dc9`tqY)Z;C=?B2LWN9U?>yu<2e>!88J%H8$g-h^F6%NR5s5hrh;Ng
zy!(I7Hl_7;)qNzjy|d%~r*jp=$?8?2ukG_1J)_XMRma{l>g#!~D0AI>KgaU)=MqqI
zQlz7zyW7E}Qa_czdV>JBX(<40F=BdP5GAD1mxP~H?}nlV{``?PVNQVcysLN!ZRT55
zDx`XubVFXDj%lq>V?Y=s^{pMbn3znf0*Oa^dQH}A7Gn<24!Zrwq+7s8?YXvc=`)L<
F{|ETZg&F_=

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/images/write_bw.1-2Draw.png b/assets/documentation/1.27.0-rc1/images/write_bw.1-2Draw.png
new file mode 100644
index 0000000000000000000000000000000000000000..6aa68852832a80e1ecf6d45ae31b1d94cb803174
GIT binary patch
literal 15555
zcmd^mbzGENxA2}}=vG2N(m)zTNeMv=4sn$30i|nb>A?V%1E`2}sep8MjYz08NY^03
z&>=m<e9z!H@B7~S-Y@RG-yiq8-%otziM{q-Yp=Ce?X{o%u6dJ|ik%7oKzsYv^}7I&
zLbnJ&K?40e(?GZa08{&2T}PEbAV>i%7m$1oTs8rZf<dJkusZ?R8yXr?Qc@HZ6}h>&
z&CSgxCnxLc>r)9l{sg5COyNhu$JFwUHNsj)MKXbaArR0642F=3BBUY-sY(R25*iKA
zNCFy(A>Jx6p_!mRpz9#^;&-L-)bZD#Z{^_%AswWmdA7F3DnqF2Dje2k|CoQ{i$}W=
zRKXe=O$hp(z!U{Kdk6sfM+og)1fT-|G#eWVfG_|EqG9@cVSIoP1nxsmfG`LOR#ph*
zA6Ld7VhMyb-L<@-*%vD>)-GLwXq=guX>V`GU@#>mC2?_aK|w***47#t8WIu`?Ck8&
zoG4+t2?UTXC>TWe22rDgCXOMFL}SndfL0=4c&^z^ef|tEN&u{^V4(4!_rxENnwkoM
zLqnKsHy%QFFps;M+CXV`$QpW}MBOrU2Y{}L_#YN6M8^RD54e5(n$Cm7<#EIKca`NK
zQzzq?*<!6vx8I`=c73`x$#tEd@^Lr?_5Fbz1>KjY`h@!qSi+YH4ltz;gqmsqDyd);
zO2Tjkv;l$#6j3MvOGY$k;sda!ssPRq1`s?f|IP-rhVK$@Hh&*(o=y*4V6rMp?2Mvx
zq^V37q>k4ARJ*BYct_{jNlZ8c`a#Jg8M5C>$E=AO!&gvElbhjVb&p;7ES%vECly9C
zy7&-w$~rdKzNJ%?5GW<@e;Ll;GC;2XCMV6RpGi0WdCOHf`2n^;)!zqo=kvc@0ys+A
z(EMQr^rr{at@mOr(tWF(<pt%3GKymfUK@Ob$7jI0wQS@iUA=Kv$8?f{_UusK_O8xI
z&yZ-@ATBR$7gq|$^Y3d$a+gR7=QCq))i<r;pUbic$t%ArKUw%WlW%M7M+yqTGofx1
zMkk)6ihtSpwphGNGjc=Jk4he87y5e;<MpkcEQzn`7r6O*NU^al+S!^ggZaxGWNn$Z
zt?e&u34FCk%uX2;i_Bb~r%<Ym>wI^_Wb7bnMMGZRSMq5(Uq~CjHYlr<Y=p-1sVcsY
zd%+&M5dWgNyI$z|O{??6dWZdE7KQx$R7s#+w?u~LEDuDHDVMIwbZ#PvxVGUWO9|Ja
zc96!zY`8lW>iO6F4ynYEg!4KbFlnh-d`Up03~-lEvbSGzdV@O+*FQ&jfdlqbYIGF7
zWEAMrCs_pnu@{GBb+8~azS_;@CKkMTt)eFicM70bGDFziRvLzIHVmTsy|p9E9qp7g
z>KOMmX^}yj8bzZd!Mk`mH5x6umO;&aIDOEs8{X_Bu8mSY5AjUWgw#2Eg`$i-A737p
zgPESb8I+nmc7Esq9m;+vj&fK(cps7bGk1ZktL5Ize5C=s-W9EQ&oGX(+e$sqh{K)x
zAhY}HxUpVHWaB)?p56|OPHJ~+Pzpb~Q#>|CzAL^1d!s6KXkSw=YMK<;=*j#74GA$M
zU4c3z()6&WJK1K*Pe@)}1K;y@onihb{=>p9Bn?8%<K`PS?gs6w>{`_&iw0?dTP?vL
zH$!t{nyUWSqZqvVp!Q8c+vG{myB-EED;6#+{@g*JJx)_#l$oviw;N2y=@h@r{CfGA
z9I0Jqn5H$yd|03@Wg6B!II~I#=B2$j)YG-*ptYzl`f(p@-C6#qf+Pi*Pub87^%Spq
zZ-0Dke>*#tcsXT1{NnD#B6#6Q_1?KT$=EKVyZmZd|L}<sUg)pRdMz;E%%+V<*2#1o
zb+xjyx-?~ux3Xd>U>_6*B*)15JhS&ooEJrdx(XLMqwb2_W<I{Ch;ZB$JU=3Xso2du
z=lS;a^V?Z(-ak)!Lo2|n0#>5`WxEhCCX{aUO7J}K5@ICzUWW!&sZSj1?*pEKqYC~N
z<_N5rK>sV9i^rF5#k}d3f7e2*^B8X->-6G=h)@@s#{hxl|L~}FZd&NVr{aSi2DG&9
zZpfiC^j5ku>9O@tC<43XN6QkC|7ubH9Bh{|*@Zvu>n7{MWxU*j;&Op(lW5s`wL?!E
z)j=tJ!LH<p%Le4gH(Dt@flT9<e;$}#A+&7yX~27pC=kfgA7Kv;;Q<Z4YxgNQ@1=kB
zO!fSz`#R2@!X&FWo4rh3$>#k>K_DS-pWl$qudOkt3aa1g{q+AnFN|3J{Yrt<(n$t%
z3bwhew@PQzsosP<CPMb`0~cIeEW<*!`IB64Dz%aX|DleeJ!|UpTr@ra9C^`lPB=t#
z>^3r~@qwN8S=MV_hev84@FA;MPFuG6{F&jmYzYBn%;--$?UJ7cof3e@jd))XIO>#c
zE4EvAl@_xc@SWD-!j0FQ9E;iDz;o1Y=Yt$MjX?UuTzv~a88V>#OIbr-*htMOho6!z
z_!6IhUPG9HjA9@X-pytwPL3Q`oFkhL6%EUB@CMF<{wZM7MbBlV-ORb9Y-<PeBS;20
zl#?&TZQ7t6XbBWt58>h8``ZNLYwZ$h6%(Y$QimT^w<NGlB2p!Kr4#HDFM`MlAY~ue
zW!&>}dQwGVB2Kx$_sMK?ey|>_vZVb5w$zMZ`B;jK2M1Da34j8VI|Z|*v!)WF+K11o
zGh)j}=T9S@$&pc7`j3}ilC`m5J!V~`$xof)+i`&f+JlhX&%WygSEBP|t|k#IC(3Y7
z62pN1;`=ilg#P>7hp_yG1iJy=wReiu%kW(19Bb)5eWqcLqQO62(~?)-0}-QhC}som
z{r*QgrsqO2E8028(Wh^uVRM}#%GBNL-EmEL-H=3qwQ@kIRPcI*L|q1iww3Im4hIp)
zoS-DD5qM7E=cDJXsMC%&*x`kWcRrjE)rM4|4>!{EsCw3zJk|TL6@1AF{iGD6B;v|b
zTsvKt?(PdIjKNK=Qi;utQ(#OdN_x1s<R27=ZAd~2b#GzkCaa3`K#~0Sme<?cbnE38
zMlYsyoGU83X5vdxdoRvUYu>5LYLVdq+d@}nv8l$|#l0FvwBPcrh9q*OggU8;;2Bs`
zn^8GQH#B7X7m34S`y7AA8!K+Bz;UMn$jd7#g2{gP4~E^WE-Fl3u)V{yKR&;T8J#0>
zq0HNTGUB!n=#as5sMUF1-Ta99+*!g8#1vu!?tX8HSfzWTM~&J?6`RqO)}*?VtUYHs
z3wB2OCwAm@ja{vr`~&pmZ6eA@<=nGFujQqM+*$N3>sg{wa%Ubgu4hIY`+2LucKI?F
z!dH&gw+%}MPjV&uvZ0N&DK&0uWy{;a6euxU)too{ytcb5dV@I70}pvYO64^$P{!$a
zzQSH=)qb&KxOO=n<g(t==o_WO_?kC|{Tv4-E10tV)}+n1rbQEM%ZzzT-Z^=r;cj&W
z*709%^!A4l^lO%_P5SGnSlt6W=?cp;Dm%fdBQ9|3r|0g(xSqpg)^G#9qdG6IC-=4c
zjgm=U)+;py7KgRkIl9H#w#)NZSz(nib#=nNqFkflmA)^H`tCeWx|hKwO^Ri5-hSaU
zI#8dbA>qbt=(5<B5iv~1>NjIqZOvaK*{dqluU5nlv(;*@r8oHP9{cdHe9Lf+g(I^S
zzUFpm>^dJ<rW8JrYbK1aX$d=LC88(gvb0mMM=BikwI+4xT1!Q(ue{oFZK)?PGH&~s
z<pYatHmDegAEHyTc~q|VT6fKovP>^djs#T{m;4xvwcS2xlW9)&{k3^sozoL4womQ;
zjOg<Q#``kbDf9Bn^leFvvi1cXO6S?~KyH#oO>(BaRU{|6v%Zu<$zdrElr|2Hd%kI#
z7{_JQ=8iuf|8Tj_J%Vmo-$=_vKc^9AB@t~?C!3>SQywP0bv0Jdh#XnBVj;4+WmNoi
z)6rw#?Y8wh!#iGj!_!p-4rVy(YlbI1t!J$lZc||D+Py{#DsqLtX&tTBBsa)-7*r6R
z4>;cHlibu2ku2`_k}6-THFC+6P|9ihFgO}3v*z4zM8}zqU+_En(yt{^|E3{(SIT+Z
zeBn3x?Md^kjUBDQ^~?tOwVPT~<_Z<;W0r}%tyUINuX14{&A$!#_w-5U$?sVKqXN$r
z8#2e3lch1wx4Jn|Rht=hS_znJb#owF&}gW+T<Rk|B^lbpSBV=ei|B7wvgTWXb7b1p
ziBxW^Ics}a>A7wtdbr0JM{S_A9SWo-2i(uYQDQrXYiVCs@%s%a4YK3y=Lh8Ru96+W
zoM^4`uzOu`pwy;zOuN26rGBF!MHFl`EHvQvCxd*S-W)VM+%MpE^2av>1ud+KZQUft
z?p%#aA+(4F^;wLR<}n%3{QO}h?N{nuX(e8kW9B|obEbnf+e&^y_OL&0%vWJ7EK_fO
zRkR~~r$Q!Vnadp!mpN<ItI3PA-addQ#|#^t^pM2&qx$kM(hh2BC=hPt%@4<ie`A~7
z9FK?O!_MX44k4s7$h|t8<6}c(iRUsE#wOXR=pKH-r_|cPC}Mr9f`F^pEzqiTx$<Oq
zNM`qlEtxC1FUboW?He-Bgn#1SYS7#ZmyR#CjEmf;uQ+4r%~XA5W&4BJ`D!Dj#Z%)n
z19_weZg#$Ral_bxs*|o9FF3+Kj|`vQ=_LF@!SH2JQ2V=l(xI6q^Yo*I54$@X<DBwG
zeOd>Zk(>?qWNpw{cf{eAp3+&tRpH=Rc35d{eR-T~e;?<<YPx*2T{_NgsrhP1Y~Q_h
zZO(9kLE3KqMCLDEvRYb^(+3G8g*!J7ed?IyTGOs=(+2vB9fg~^o0h4WhaZd%7TX+n
zixk+1ea~C`F-DvZo1$0W%=_|4enjH&M@Rb`c_eF#T{}VU?-ptzr87yTH+!dguhbvS
zD~?wZJj&->mo2Kjtfh20ZLDKmk2Z!@uBrpkmR$*t`5^q`{r#QE$OU@4<<7nNz+!X!
z*1;V`?bDGZhaQ7xZ3RoT#)su3AvIDGpKE<L<*LeWnme4AaEms++cjE}IEKpAe)@GS
zse+J!ACnDzmDaIo=Q2Neaajw0`eV8C6CyQk!Q?&;ms3!eSEJJ>lSk6Aau9EBG#Gd=
zFZS?YKc8@LK;w>gm<d$(Q{gKTm&r?PGTV_$sxuBkf}_<Bll_(j>8rfwHn)0K6^uhN
zUeYD;+J)TvmT%R+*F}e^(wF2P6JKdanYx@T-@f)oeYa%@+xZO}uF<4WN{r7RAN3XI
z>oo=kkNRw!QeI{BT^(=uTp$yfS)LK_gT86K=I}BDk+O&k6>N|Sh!|w_sBxqyQdBv!
z+V$X>1)Wk~&a#nlK<mzC^cMbfszkeVzi4N>codP3v%n;xha4;Zaf-n}V<tg!ao+X3
z`=eF<RYH|6n5bmi`WRRd6><i68|G&SP#(!Uz_w$QkECI?zVova-F^y1l4PlD*2D1J
z4l}v%y4Y6K-0~k6=@rNO2KOY&DfU64Twdn5zRb-j!%)nF%t$r7`O^DPe<Uz#GSmoa
z@sER}t{UT#NtQzQ+~D1ty&Xj<^+i`Qzn(%{pISVPz1qIJdU@NDi}20<k1V7+Y{nt*
zs+oP994?dGof;*JsBczfaQ#k><-nn~oi)J9OnxTe+o1R1A#U{)`qP%t6*JQO&>W08
z{(Ix#Plg9e>1S*x(pLlT5{@8rro|6+8ZsQJKZ$F@ria3OHU|U8FW#87Zs46dI#Rb9
zN$Tq}Cj>0++aA%F_Nl&biF)fApp(!%<Wta|*7IK4ui`w|G0Od*Xs)=B+2CX)UA+l~
zL5JxsJg!7a*zgitOXs&%{i^R<&`LmGtmq}!TFp9DBG=_hPmf=$pJkaEYTA!q32>Ed
z&D?*vpJ1*&xNu|c!OCe$969!;NJojc1LUW-Nj^)dIPG2kZp-@arQ*mDE0QF_h=P+{
za<%bEw47<Nfd3Zx+sOj*F^N2LbIh*y$hj9<qgFS`>4Pm~{2I;!@9O&wyIqIU38%d2
zp2;<oOG*EF>-!0u{Wou~OZz}zJC(lgz+-8@L1GV3+h1>?+nPVYpawbr&;WCI;QX!{
zciv|^5aNT!R!H!piQ?Jsxq*_|WhFZhA(@8`;@<}t`#T#|%*?42-8Tn-zf0B^e_`n~
zr|qRfNEyt}tBv}vmEyv(lInDCP+<l?rL2$Iy2Lj}Ok!x_7hKd_<TtKL%fr_w;e}Fp
z+^cHF@&;tHa&YmNd6(ZaTEN!~*LfAs?pYq7Z<BUfPFs~~aV;k=MA<0}M{Fao`A)WS
zp<+WnIwuM!G4f`PCvKBrIlOMTq^Q7lOG%f9qbQXKOy*=*x83H9`2=$gen6irDC0M%
zDGLahbc7>vw3dfk3j-STy8i9wEGPO)B8g*=ALEawh3@E_G~?CVd=-)I+m81tXTlto
zgO(?j@ihH-!NQ%h-|$&p<5sj~0U4{!G8pqj>oEoLxkSv*$l9Kgtvbz|9sD1QIqr$e
z-<iuhzmIs+q4r-dZ1efmiKoz6=>D43QoorHGlWlHbomRg8OiO&_`?UpJ8*Bg`7F_3
za4J45EA;^zgKhY6Smnj;eBkfHc%K=~5vHgKAh4nd>dxz6rPQyiK96))&eaI5*R?~M
zTHqU$cT}`Pj!iz|AaN-LtdBTdV9qorPoZ;qQp6JMDl3HF;igxdt|iu)L-Mw4Hkc-Y
z@j;uWRmrq_QHvw_>Zi7sPP<TI>O}f&_VqAai?rLw<(^?h0o-^fW|5Lm-x8}i4o!Jd
zr{T^t%UZ~_WYW|iL5@d$9PEpx8&+53a(0u@Dn&80AI_A}JHhao#RcWzpN6-lH|T=p
zX}=9li;^7+r1wbK30&|)l9IeuAIHcM&6<{K)3OT5uCqbwo0bM8lPfYSz6!=&ylY;j
z19#k%02yt?o^vrS31i1V-tI9u+TO>4O|Dv=)cZ8C5%I^U8^zKsF)+$6_i6i0p>LGa
zxU)o<>zUXR=g-jt65%7GZOM!Iz1wsf8Io%eSLIHr%Gr2*+t^<3sUip#PulFuOVu*s
z+mw%mDIiyutNM%VRR4hXgv_JZxIawYf0j)vPT$HoD_=}2dShg=x@;1DwWGG;etKrP
zxkmn$cY_w@yTrR8j&GJma++q2V~QnvR2?m>CO8+PfPzpIoyEw;bR-!2l6!Ww+IY*`
zyQVzp%%{zqR*wYz8oA2;Nk`Td#B8QYSxyJOS*L|$b710(I*1VKEGans8?M|`cStmO
zD?(pxmA>u9ww}>wq?F2`p~`47?)#zZnGE~Mi)aDMElHd6#r|g|@^g|Ve3FWGehmLq
z9nz+lcha@Zu%%0X(>DKn(*a`ZfY7K})*=*z@=d>(K8sV_HZfzlL_h0v6xTBRvy;}L
zy?N2q>s5c7V`f%o0cPSguCpp}V5z$vf7LI{ZgoU{X-^|fN>qYgj@Q9&W=JA#WGKhR
zUpqJRi@HR4O90Cm>w=UC$=oN)&gVDqL6-z7+5%u<mEL?-Fa1{%9!U)Sjwx*#v9l1<
zTfOl{YZaSQ?JdcfDKqM_k;w<Vvpcq{M`*@rEhkK8S1jPxYTNh6<7y|U##-*lIpt*p
zOLqAGF|sGX-;^OcD=qoXNTrLTI4(zyQivugbjxj5l^WS;?dP>zx*;>Hppltm9^QXC
z$v%$dX@OIXt)04D<$gU<tZt9FWA#$T^8L4s6+v>pA-CR}Hq~;f|2Aos<dqtmzADPJ
zxZGEZlU{Y*_-ZZ!+rMJew^m1x&cXN$Ya4Z1X+;jYyj?a)-B6e*y(RWs5ss3wDKXBg
zRDEZ)B;}O2@yS(fRAQJ7-Nv<X-yw5!{LY(=<jMWfW{h6EbV>1vLBS!;#`q5cjth2g
zUe%o)XCH@;&sUZW6-`GN89$0;LS<Ooe6sP%UShPl`a>QeH(;bRZb={6a6=;5hu?5@
z#~E~*>Uqe7ePr($Z?Tu#%(HkiJdMEC$|g3u)Cn1tWOH`nQBr6-0THuU&iH|NyMk+A
z<wtFrM%~hQ2EitpH5vF<=X*PmPXK?(?4XITId(agtYWS}A;7wy$RTj_svNI%(nQgT
zwtPq?0A@=t7i)EKu<<t6+qc&cCMooUqjX;!`qoLTkzw(!HS#g*Q*TLawaSyTH}fZ(
zo5m>H>)M4`7F!c$yGT%6_C@oFPa&}{>B%QqQwk)#$|~8te#e|<deSv>MK@w4aXwgC
zGSr|TY^#1ufqp1pmThlRUvE|8$U8stBt4fCm-Cf@<mq-CtTJ|U`$uw}(Eg->*zJZl
zV61~1eU#><A$U+#7#ty|u&3g;;BsKkHF#O3ed!F1U8IM{#+bzNj^@gE9~CqMOx=y6
zQdw)b7T&kqqW-^wqp!^{3J%y@lnJP}knP$KdcuNDcyDfnXXcZHOq<k-a27W_?4uh3
zR(TTkKvDQ616nSf3H^YcMUn!Oq&Z?Z#IM!Vc;h_~)*U|Vc&#_brEB=1)~)71{!_Lb
zEfK=8i4t@3A{p|^mcY+!>Z-5vKX+(yRxTs3hlPcV=RnT)A_~mS$#nLbwn>S?>OKba
z&Zov3uYvG}7bDv0;^7t3qvYWJq!3Wc%_3=uKxPyR0BYUWx;gZ&TPMSdp@B$p{u+n^
z^Om}S7bIkNPzBg)?etRW8~!6S9|9S4@f|(JEM04v5pCB&#!k(#N{>;KH<APU)1#>>
z$eEJ{&7+J&3|jU{#1r_0IQ-^3rul9el?1mm-pJK@C`=bzMQc5HHGkjI<fTFHQ+D*s
zy=sb|>r%=oWd(&=$xokze}Gb+*gsRA+Ad%HnL7I<a;x<x4mc}&ijG^<1hK(kPc?)c
z8PGUQa!QNz?*p*imN2R%A*m*{<~)+Zbke8%23b6yD~awzqgrz&88*ymXP91syRqI)
zC0B=n4wKrE5-<}&Y_nrwUd5{?sBj6GA68awU4}Z&)$zX%${So@q7s|^^_XLrTeO%N
zZA7Y4t_}mbCZo09?Pjjd7!L?YfKtf0%bE6z4<78-evcAdPcz8cT>>5t9S=)a)|`Jp
z31)f<rP~Hsl|I1PL@0kbGnpKlbH52^nf|?x1T`HIYXdXrYJW7avaRv#7^U6Uz{EMH
zEXwp6Y^YNNqbt$N8Z+IUmVPDx!pjoS1z&FMwFX8a)gw+{MA(CuWkJ%E(RQ>k)Zr&M
z$~kYD5;IT=9HgekSg_LPa1=wD%J8)e2&<>S<Z@FBNPO7kz2JNXEUJR-$QTi&ov&)k
z30Iwiqn}4oU<S^{dT!d&xeVG+<U#)bCDKek=BBSVcfL}IVD_OAqTt<CmJSu*5N6Ab
z8(6vMY?=Tr?@5!Vditw_iBm$%DNN`*&)zP(iaZ6@@3a^zm2N~To6~T$Ne7KoBfIJX
zY|gA~D~Tl6oHW&L)Q~>&-My3O?e!whLUsH&s}M8y3G{NTMF#0mwc(Y>?+){2UO<$?
zcgvsm{nqt~(<Qii)b&;lj*$dJYCw;-^HfzRMiZI}j0JXt65}eHXJ?b&b?G~qLDnr<
z;4ovCD+9AFn+myDivxq?rOtAw{!L>VWiWA4i1{{o>Nxze;eAiB2m=QfAiCl+><IIv
zPqu>*sesVX)OK`+$<kKOIEh-LFOH1JY>v4)_<h)7Q`TgGRctZBY%k@O_jTEQ9=4E{
zpCU^=X}kQrDEhtT$cQ#6N&@Pjt1L`qN);Fd&r)LgQIH(8_5kPElW^3_+Y_^6{%H?n
zngl@#e+rHv_8t<O-%GFL5?ht|lLc1E=B|}dHXg&mgECHmvVW1KhA>;&5{lB8(C(U$
zYScyW^voVGY1Ub!tV?3iS1(V9SuFajhz&VGuO#)@E4|;teA4<gr^l2fU}z0Rq$VM?
zG=GNE2QqtbXg8n)z|*sPz+=T|xH@u1>I;kbRkYu28Q{=m6FkXm{c+l)oC#cyas&DF
z!9j5k8a$>R0)|hmWLP=4h%FLSY(R;3Uyij#QW#H27bS)|!pDhKloY)5*97@z?ABc#
zWIUmDpK=2X%{T;hb;Xj7w!XjcR|^!-G(Wj}wktV^R{0k7TH_PI^Tv-Hd-X?w7LQpa
z18Djw0GlIRYOwht85omggT~nn;pt+;Ovu37y<FhGo;I0jx63y_n^tR{={t1^Fm&J$
zsbb%}$^fe(W%0!bi9{T$il_+{;M+?CrAFwsN&JvngXfUQTh#REM!;kkJvQ(a9VSmq
zW$iS*-#b)mmq3-Gbn)&Uqs^;95i;-+a@xhj9zM9&6;N!-h3IN1DXkp2cvy;(BWxD#
z3!_K(UW3F@huN6OT;SLW5)xdspO@9&K+2J)9v*ByT6721p>1FV_YRJ-ACc*h;|DPv
zm0r#;P4jmPr7L(`=Eaa;W2wWDsvZigm%=$P>Q$d_VT5+)aGn#tS+T*p{FxGC@!AJH
zFYa@?J6?JD{u%V>ZE4`J&yhB|zE)~_I=MWL5@VOUb#aj?E{_@A`Er#{mUU1CjA=K*
zqyx?!{Zw9JLg%>qTi1G8_v@LvUv?_np0zXHuw8E9g}Raftt!}oQF!UAFLto<0uofR
zo>Q{X=__62{Rke^JpuC6{dc!uu(>a}szN=qn5sUm9@z`C7fw}Xz9#v-0u1g*8i!`S
zQw8`-4#NdzXOqM(Wd_|+#OB|nSL!<`$@h`AK?G<(LW)VoN#PmLn1BE^P@e3Lj_O!*
z!$0Qwd;*PGPUk}B$?R3wZag7J4%L2<$8Ia|f}4xRIxJdOwaNL}VH9H%<fK?AI`M-7
zD!o_qn6eRfrh^kO3gpZgk~K_+4}u3BtwpW0(Q}0^7<SN`Ns5%4tW*c^-SjS6jQH_a
zTFmdnUwRsh3ba)vguq5!1Y;bq-TO3P=LS$<Bf-=?qrj+4+N%M01wS7!HbR4|e5A-M
zwL>jk7Quq@>I3<t1qgKg*z_WhFZE4JbvYnYsObrH{NODDse2U<{6DC5y<PX-^Q-Q!
z69bR5NQeZgQerN->;vI2uY*Ns2hk(P&xWc8?o%450ssdYu@(S<ea?uE`x*j--3|-y
z96_6sZJVFwT$BME)%>Rc-ai?v;qCtm{v9a=Pcj8;$h`fQI3Qt!hNx2nLR+?@=A3Y$
zcgZ#IoLzZ1LuK6#IZ{$pZ#yK6CwL=}pZLZg1&Ror#6xEfxgh@f-62`qky7T4-+^Wp
zv)oLJ$=2Dh86SYCvgmJCfo39RH-^_l+64lYhoh(=PH@30p8$k26mCGsRon#5ydZe=
z45%Q&Gop<tl(5?r7!hLM2rSFL0k$c-sl5Ocpk2l%n<W3#&40Xt;Xhvk@n5G0NERYZ
zn0*F3@2d%UG-M0wm{lEf1ctF-gs=77H%-k_Cx?7L;lKNSbbv0*iy~J|4sZv=*e^kQ
z!k7hsEqnkQ8iE<H^qKd~tg;z!g3~MlAar_IojLnLO~eX={*Ke@@xQ*D1Mcb1kN9p8
zx3=FEUhpJjI55Wl)sd};QUK%qxo_m3AYtFUE=MkXx?j`uS}5i#&VU&diWq^}4QART
zXA=bMMe?o)=4)NolTjpi&!-IDL}ur?1<?KOP0M<%l964>mk*J8WH5@_2%GQKSDn?W
z6WF*Ttp)921FU#G4ebA3QOkcFhW=+tbN-!F2tmrsP4`FKO7>UfnSQ;P1{(uUfHHUt
z{4X1_+N$yYU2j?RL-N!^7pyz1nwIUMKfMaY5V=G-Vnv(AM?YEV4GK7R^r2QS;V9{3
z5x4R23qeqaNMeVtL3^|yUK^br_|2oW0xF~UC2+@b0&V)gD7MA@SphNQo=XLWSVX`^
z_;1`q`FQ?8M9KLP>_ssJ%s?T#{A(2?6br{fVSGnVB{N=ev3!LX&p^0Lw=sbKeNhuL
z3)(P>RdwS2`hqJ|eZfZs1xIN*6L+#7H06Hb0kG>#3}~Mo9Toin8gncwCyavUEgE>#
z=h|;|=-z=$3g34=ieGh9q-LZmLA4)5x~gd)^YQe8FxcSTD|QzRhFZO)qE;%~m6C)r
zC|$RJNgvtYgsQD7gA0Lht2_EMoP>CrtJ8B?qlfTxh7Gb5jHDA}Q8Q{;iCxggM{D~a
z=Yr=h5x?&@Y=I>yH=K3+R9_6=^_#?z)}nX>T|7YYhAsuP!al$iDSJ2X>8RE|JPkcQ
zg&yzH-b0<ajOLJLLYD&A*flIKYB=&@AkSF^B0^Ish&vjc{MP{V!AV?~aQlUz-j&~o
zpu1-w+LVpac}E)33e+@Mx<>fg9WR16`A7eA3TO@rg4#i?Bey>{4|IQ|cAzFjfEFo+
z77=vr=n+R6Z0tH#|2r;{52rr`##FH3-BrB}VICv;$|oU0WH+CD=-*#lJM(LfGsh2Y
zh|@_$p``oT#)jwDMCWo<-JN;&+^`c)e8#w=BkyJ%)Y6<K!UQs&6{3z#*?h-CM3v5z
zv@<?x<?(swQ`0J(ghA*6D9Lroxum$PU<*;H&Z{3xo&J19>*JsWWIxbQJS*H5R=oP$
z@D*f}815*61udBV;VSRClQ>x6`4Poq{h*$n0YeKR)dUGeb{`=N;)@i+3G|x}SJ;jx
z7QSZj%qZ#_kp({#l=>n80!0#B@sWn>n4>R1qH|E-1?R_PC=y=tXNt3C@4i0Rsw6V^
zi9cK83pD>MH$+uNq06KB6Km}U&_pybZ3m#^1UuUmk1?+J=)oSn!%h0^7mkc62pA8`
z@uh(h{`Vq2IK2DlV&zgI{ikCA-n(-)T2XNP<(0kL-jE9cO{okb|LeSHZ1Ho0U$kOn
zFu4M4v!#=&{Lq+9sto_EC-feJ+<0Z?!|+RnL0#%SJHk*gpYz`pLVH+l2NkDZTy{pX
zs+lLRzRX`XCJn01@>w0G&`?bE9fIx7)#%)V92zn`auE826syAQlT~**r`OIJUMQT=
zkU`8a$O36$VGyRv;na4|7N%)K5<1D`{CCU3g03OSV()}WMk{a_cv22luqEWH+CmN$
zNe&76QzN`^Z2uzGq(f!<mvwneiY$|W{bqG&|5Tx#Ru-YBP%}#nU~qV0_v;0MkAm7g
zoO#MGOM?cE!dk7iiTj3vI|{5srShCYN?CE1M~J&ml>uVgi)73wl7-;QJY8{vo*TvC
z{Aj*GL)P45&o4w5qKC7Fb~YCYspsn+kf^b;UYiIZ3eqhQ?{~LzPeU4Fp$;!>=(2q!
z*};QLyT-@NIXHW(R=Jia1MA`4zv?cT8PHYd>@~=U65b7TRLw5H88DoWIpH>knOCy?
zS1T+Jp^{9Vw}l{4q45SaB$9~06Ym!YS-TfbLrZ!yfrpm+2?>fMt$`{=D)PL(O#l<5
zL>cbPt-^6?S$+9L{bNbhz*znKZYWXU_!J=F$wdR5Z25hukz-wRc;Rl%>dluEp%5Hn
zC<YSvg9|2q;z=5K;`&TS9Ph1PIxXj>VIteZ;}r+(G<~k3g0#Xz5^;y>gK5ZSk0}{|
z?J4i?hDt=mlE!*1UeHJY@)jX2)IggdYzu=|Qg_1O3_=Hjs1&s8b3<O@O5VNAz!|8z
z_u*~-G;unajvx(WB;r5>+Z7fEMZ1!xAf1OmI{&rWE(6_{tk0q4Mjng<8`=BDN!uk*
zr6&3*BoAGRNq_730f%}&LEDw6`Y5O|mb+KpXFS#EfSiAxw-_;%-+eZ0-L{_Uzj#EP
zE^GkWF#omeGCKwIIfKOf8FxAzaT#9sKY{q=S15PE-uN@oVN4&Jk&6Dj8}<vZCv6{S
zLGJFc8eXS@>O3F{SkN<HCZ9s#0MQKOM4fzbJc0~HIZOFZusa4oGU@@T3~~M;1b>;3
zCuGR&xn@C|;N#}HSY_Jp%s-Be&;xFyS(czso1l@rC=n@0&FCCb&=Zw1*+WID!AML1
z8aVSvgRopD2}piu5m24sWsQ%#;t=Tv3YZl_@$ZoRM3IkC(EidK*I=<$c#a~sK-N=`
z&kea%r*8Ee&L7DL!6=F52Z4;UF`O_5qI<g1kk(^BtM-?{b$2oys9S_SAFDhb5Y3h>
zrUFnT#7bgic;UikkRWmB$B5Lw<QWb84c-piCo1;uQ9S=#XPgU}@heXRLsr%EAeSTI
zFD=3d70wk)3gIKES$+Cdjmvr<KU0tBf${>5Lw@bZ@_<eAq*V65ITX3>=xEK7Vi&T7
zhQE0e2C&_35zJe{1m?!xaZ(ae7f?*rpF(mvP@!Z#!sQ=46!F!DD=9?BLmFm~eYALj
zjtef7LZS;W+IQfEY(FEzc)%-`Gaz9;kmXP3V^{oI3$%bwKp2Hhy-%vozY}eLlsj4t
zX|!BOqx}KR%fGvj`k%G%zqb_ozf%uTAY+)N)9-yDuRH1QDQqGW5y&@+@d6+x%La<0
zKkI7#WtI|Eu)072FWNu!m+#3>iZoOY()i2o`~ie@?ksfjar=(`)xwpeFl!{YJ9GQF
z+k(?yR^=@jvY<C}8(Nz4&$!Wt>rUOgg+FC}Ck0nM?*cbQgp#kOEMgW?O7qWt<(nHJ
zQRqE+282d=?XAHorX*wYwL4OLwP)X<lA&lA@`C-@;Qx23?f*Nm7*du0dk6g=k0s=u
zg2hIw=?3Wkl~wta{WpQQ2*PR?-sX+W{ptRPxl>#v!@eWjyaJ^}egzmGj>B2=zr^7i
z5dJw8-0+tZ;tbyOk^J@X6m$q8mx(?&x+_=^U<E{>q-7Xn-<~pG0mP8wt0e-9>eWmc
z$WglzG~h&xgNgd7C59Jj_a8Vz@&7ef|HWw(D37FW_hcpaR|GoFrbATwa?oNg`J5yA
zBRgEQM&bjcV3(i-?xtz>y7zF>@%pkkUg-g*UcW-tCE`lg%Ts9TkK~wHEtdNwCx4dS
zFEghHj(LbEo5zeFbIq&KNjzGi3<{-gb+YZi7N$pEKs!$xi-G_-l?#6GQJ{Y$dQ!AQ
zalxyTQlPEXgYhvG+??fi1`G6+w2+gYWPb$4s@qm*vj306&VQ8Ze?dRwCH|*Q<NQA@
zN&hEj1u%7Yv(IH&9$!9Ksi-x-KY=FN2czx7e|=;jN)531^jjgz=JpMLTevRpk7pcS
zLh07*{hWB!)qgra@eF}9jBR-HZ@quH*w9fN|4(1C5XdZo<Y92(Ov#&X&!7_&|BDk5
zu{!W>1%w_zJ&zgon1N!i%5TvX9|0ykzm}05h<Xm(oO+FWhXSZ9p#~Zl5dEJ@iYY7l
zsNjpD)<BS6A?mlPw;ytKrU$R@E=X6rt$KraquI}teSuY?{=+Hl-{91<FLU_1$_1r;
zP9}%lMt<~A({<Lx7R*$GT6`aG+@2e|_E%C>tG#>p<kRMynR@r_ZzJb_s18`G7U?!-
zHOCs|n~O)D?@JN>EGa1MeJ;)tdah2iq`(|f&lZE)gN={YPvY*13fj|fLg4zPRG2n<
zyAW9}0pa7(Gcvt57h}S7)v2g61i1nLnQ&|yeC?;p(~Cmwuift4xi<%)UH4WOnALa)
z)-|6mLbe#)H58{5iAjrPVo{IVF+5$26s5+56Y0&!=#$NO9rm1ErB%Omp1A`S+tTYZ
zr>B2{+B)}KIH|<xwsXZMA(kf$#0|YKOpqfn535AM;pB;c<lL-HyQHt8GjHE!fX#2N
zzN*?FqsSxssMh!x_6cc}knUzC&^8d&zDOy2O1_2{?1-JJf(<Q3+EZXWMd}t~H1l5#
z_p}=M#)!pERjaVKSyl7(d7D)s@gZ~2{#1V`CWD49c(9Bn-%K`LVNU)2$3KYo;-kza
z#gz0C0eS<J*@2`1?YwI<tk=kVi%^XBP1~^F)BFC2i)wsmw{%eB`>_<?l6d(|n@Kyi
zku*x9f#g*{lj@5$C`q78Ii~XBhm&|+Sd6AbhhQ*ipR~IgvZUvB6vpjh^CrX+Zg-CM
z87bwM$oconWm3u&=RNWp3i?ZL6qw7>mlT=RBh^I)#ZH-Ci{^JbQz|fvC+*vh<wz4F
z#2+|Y#A+F3?M+|8v0f=1-3XWM%(Klu7o4t5)BKv_T%yq*Su=Rjjkgco^<N#sB`8o;
zcz;~8qWI5iE9s8SceL3<TXHh#N3Vv2#dIcgg5AHmFJ6msp(BTm%_Z6s=%47~!v?ss
zsT*3?qC#Maz%i_K0QDjQG-W*>?<lH=Nz<4;IUmb`?&xoje|n!0EgfwKlT?k);d3al
z#P@`lWceShua^@z)#SuFHt;+A9{O)06*syya&%NwR?||xZrEKI7n4x5qmzcl`$~to
zw0KESC?{L7DNkpxzuoZ4dp*12wyP<grcQd>1ih-GG%@)+FaP{`{1z-0=lfx0xGgAv
z`3oO#6%+!VX1Z$J$qJhSAEyS(aE}J3E~h!4UEntHNKOe1tszwOHjqgE$mr}zTOK5Q
zPTmvPNNnSQvS6-)P|-tc^?J-a_ZhBuyN$hSw_43tSJD@zJFY5TnF|T>q@nBUm66(9
z#NB05af@$4un=)oK&)`n!(u)2%6p`dcA`xBPwew>ITt}r+B1EYzS6J$3sR*dTWpO}
zyf6wVoXs4e!OT39-Peo@-LHkpo=Kry>u)EyI(gkF{-8zhXqIuJ!(OwCKBT!bIHz)d
z<G`N|B|WJ>0<%pbS=tKztjgfX16;G0!8d)M(d>)MwUDd3g56DPdC!p|r60V-Y|a^R
z9(3qp1-r7-mJM7vXe6OiTm4>OduN$>R@>z;yjxd$POEcEzI~&QGk72Xy>V(*0du77
z5m`QS!`6`xy!^0JHVS1n${EnNboVlTV}(3t$^WHMJmPMk*!5Zde8UGiG7E02YF^J*
HMn3!>Hs+h{

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/imagevolume_extensions/index.html b/assets/documentation/1.27.0-rc1/imagevolume_extensions/index.html
new file mode 100644
index 000000000..d21fbe1fe
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/imagevolume_extensions/index.html
@@ -0,0 +1,699 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Image Volume Extensions - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Image Volume Extensions";
+        var mkdocs_page_input_path = "imagevolume_extensions.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Image Volume Extensions</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#benefits">Benefits</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#requirements">Requirements</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#how-it-works">How it works</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#how-to-add-a-new-extension">How to add a new extension</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#adding-a-new-extension-to-a-cluster-resource">Adding a new extension to a Cluster resource</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#adding-a-new-extension-to-a-database-resource">Adding a new extension to a Database resource</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#advanced-topics">Advanced Topics</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#setting-custom-paths">Setting Custom Paths</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#multi-extension-images">Multi-extension Images</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#including-system-libraries">Including System Libraries</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#image-specifications">Image Specifications</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#caveats">Caveats</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Image Volume Extensions</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="image-volume-extensions">Image Volume Extensions</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG supports the <strong>dynamic loading of PostgreSQL extensions</strong> into a
+<code>Cluster</code> at Pod startup using the <a href="https://kubernetes.io/docs/tasks/configure-pod-container/image-volumes/">Kubernetes <code>ImageVolume</code> feature</a>
+and the <code>extension_control_path</code> GUC introduced in PostgreSQL 18, to which this
+project contributed.</p>
+<p>This feature allows you to mount a <a href="https://www.postgresql.org/docs/current/extend-extensions.html">PostgreSQL extension</a>,
+packaged as an OCI-compliant container image, as a read-only and immutable
+volume inside a running pod at a known filesystem path.</p>
+<p>You can make the extension available either globally, using the
+<a href="../postgresql_conf/#shared-preload-libraries"><code>shared_preload_libraries</code> option</a>,
+or at the database level through the <code>CREATE EXTENSION</code> command. For the
+latter, you can use the <a href="../declarative_database_management/#managing-extensions-in-a-database"><code>Database</code> resource’s declarative extension management</a>
+to ensure consistent, automated extension setup within your PostgreSQL
+databases.</p>
+<h2 id="benefits">Benefits</h2>
+<p>Image volume extensions decouple the distribution of PostgreSQL operand
+container images from the distribution of extensions. This eliminates the
+need to define and embed extensions at build time within your PostgreSQL
+images—a major adoption blocker for PostgreSQL as a containerized workload,
+including from a security and supply chain perspective.</p>
+<p>As a result, you can:</p>
+<ul>
+<li>Use the <a href="https://github.com/cloudnative-pg/postgres-containers?tab=readme-ov-file#minimal-images">official PostgreSQL <code>minimal</code> operand images</a>
+  provided by CloudNativePG.</li>
+<li>Dynamically add the extensions you need to your <code>Cluster</code> definitions,
+  without rebuilding or maintaining custom PostgreSQL images.</li>
+<li>Reduce your operational surface by using immutable, minimal, and secure base
+  images while adding only the extensions required for each workload.</li>
+</ul>
+<p>Extension images must be built according to the
+<a href="#image-specifications">documented specifications</a>.</p>
+<h2 id="requirements">Requirements</h2>
+<p>To use image volume extensions with CloudNativePG, you need:</p>
+<ul>
+<li><strong>PostgreSQL 18 or later</strong>, with support for <code>extension_control_path</code>.</li>
+<li><strong>Kubernetes 1.33</strong>, with the <code>ImageVolume</code> feature gate enabled.</li>
+<li><strong>CloudNativePG-compatible extension container images</strong>, ensuring:<ul>
+<li>Matching PostgreSQL major version of the <code>Cluster</code> resource.</li>
+<li>Compatible operating system distribution of the <code>Cluster</code> resource.</li>
+<li>Matching CPU architecture of the <code>Cluster</code> resource.</li>
+</ul>
+</li>
+</ul>
+<h2 id="how-it-works">How it works</h2>
+<p>Extension images are defined in the <code>.spec.postgresql.extensions</code> stanza of a
+<code>Cluster</code> resource, which accepts an ordered list of extensions to be added to
+the PostgreSQL cluster.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For field-level details, see the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ExtensionConfiguration">API reference for <code>ExtensionConfiguration</code></a>.</p>
+</div>
+<p>Each image volume is mounted at <code>/extensions/&lt;EXTENSION_NAME&gt;</code>.</p>
+<p>By default, CloudNativePG automatically manages the relevant GUCs, setting:</p>
+<ul>
+<li><code>extension_control_path</code> to <code>/extensions/&lt;EXTENSION_NAME&gt;/share</code>, allowing
+  PostgreSQL to locate any extension control file within <code>/extensions/&lt;EXTENSION_NAME&gt;/share/extension</code></li>
+<li><code>dynamic_library_path</code> to <code>/extensions/&lt;EXTENSION_NAME&gt;/lib</code></li>
+</ul>
+<p>These values are appended in the order in which the extensions are defined in
+the <code>extensions</code> list, ensuring deterministic path resolution within
+PostgreSQL. This allows PostgreSQL to discover and load the extension without
+requiring manual configuration inside the pod.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Depending on how your extension container images are built and their layout,
+you may need to adjust the default <code>extension_control_path</code> and
+<code>dynamic_library_path</code> values to match the image structure.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>If the extension image includes shared libraries, they must be compiled
+with the same PostgreSQL major version, operating system distribution, and CPU
+architecture as the PostgreSQL container image used by your cluster, to ensure
+compatibility and prevent runtime issues.</p>
+</div>
+<h2 id="how-to-add-a-new-extension">How to add a new extension</h2>
+<p>Adding an extension to a database in CloudNativePG involves a few steps:</p>
+<ol>
+<li>Define the extension image in the <code>Cluster</code> resource so that PostgreSQL can
+   discover and load it.</li>
+<li>Add the library to <a href="../postgresql_conf/#shared-preload-libraries"><code>shared_preload_libraries</code></a>
+   if the extension requires it.</li>
+<li>Declare the extension in the <code>Database</code> resource where you want it
+   installed, if the extension supports <code>CREATE EXTENSION</code>.</li>
+</ol>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Avoid making changes to extension images and PostgreSQL configuration
+settings (such as <code>shared_preload_libraries</code>) simultaneously.
+First, allow the pod to roll out with the new extension image, then update
+the PostgreSQL configuration.
+This limitation will be addressed in a future release of CloudNativePG.</p>
+</div>
+<p>For illustration purposes, this guide uses a simple, fictitious extension named
+<code>foo</code> that supports <code>CREATE EXTENSION</code>.</p>
+<h3 id="adding-a-new-extension-to-a-cluster-resource">Adding a new extension to a <code>Cluster</code> resource</h3>
+<p>You can add an <code>ImageVolume</code>-based extension to a <code>Cluster</code> using the
+<code>.spec.postgresql.extensions</code> stanza. For example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: foo-18
+spec:
+  # ...
+  postgresql:
+    extensions:
+      - name: foo
+        image:
+          reference: # registry path for your extension image
+  # ...
+</code></pre>
+<p>The <code>name</code> field is <strong>mandatory</strong> and <strong>must be unique within the cluster</strong>, as
+it determines the mount path (<code>/extensions/foo</code> in this example). It must
+consist of <em>lowercase alphanumeric characters or hyphens (<code>-</code>)</em> and must start
+and end with an alphanumeric character.</p>
+<p>The <code>image</code> stanza follows the <a href="https://kubernetes.io/docs/tasks/configure-pod-container/image-volumes/">Kubernetes <code>ImageVolume</code> API</a>.
+The <code>reference</code> must point to a valid container registry path for the extension
+image.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>When a new extension is added to a running <code>Cluster</code>, CloudNativePG will
+automatically trigger a <a href="../rolling_update/">rolling update</a> to attach the new
+image volume to each pod. Before adding a new extension in production,
+ensure you have thoroughly tested it in a staging environment to prevent
+configuration issues that could leave your PostgreSQL cluster in an unhealthy
+state.</p>
+</div>
+<p>Once mounted, CloudNativePG will automatically configure PostgreSQL by appending:</p>
+<ul>
+<li><code>/extensions/foo/share</code> to <code>extension_control_path</code></li>
+<li><code>/extensions/foo/lib</code> to <code>dynamic_library_path</code></li>
+</ul>
+<p>This ensures that the PostgreSQL container is ready to serve the <code>foo</code>
+extension when requested by a database, as described in the next section. The
+<code>CREATE EXTENSION foo</code> command, triggered automatically during the
+<a href="../declarative_database_management/#managing-extensions-in-a-database">reconciliation of the <code>Database</code> resource</a>,
+will work without additional configuration, as PostgreSQL will locate:</p>
+<ul>
+<li>the extension control file at <code>/extensions/foo/share/extension/foo.control</code></li>
+<li>the shared library at <code>/extensions/foo/lib/foo.so</code></li>
+</ul>
+<h3 id="adding-a-new-extension-to-a-database-resource">Adding a new extension to a <code>Database</code> resource</h3>
+<p>Once the extension is available in the PostgreSQL instance, you can leverage
+declarative databases to <a href="../declarative_database_management/#managing-extensions-in-a-database">manage the lifecycle of your extensions</a>
+within the target database.</p>
+<p>Continuing with the <code>foo</code> example, you can request the installation of the
+<code>foo</code> extension in the <code>app</code> database of the <code>foo-18</code> cluster using the
+following resource definition:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: foo-app
+spec:
+  name: app
+  owner: app
+  cluster:
+    name: foo-18
+  extensions:
+    - name: foo
+      version: 1.0
+</code></pre>
+<p>CloudNativePG will automatically reconcile this resource, executing the
+<code>CREATE EXTENSION foo</code> command inside the <code>app</code> database if it is not
+already installed, ensuring your desired state is maintained without manual
+intervention.</p>
+<h2 id="advanced-topics">Advanced Topics</h2>
+<p>In some cases, the default expected structure may be insufficient for your
+extension image, particularly when:</p>
+<ul>
+<li>The extension requires additional system libraries.</li>
+<li>Multiple extensions are bundled in the same image.</li>
+<li>The image uses a custom directory structure.</li>
+</ul>
+<p>Following the <em>"convention over configuration"</em> paradigm, CloudNativePG allows
+you to finely control the configuration of each extension image through the
+following fields:</p>
+<ul>
+<li><code>extension_control_path</code>: A list of relative paths within the container image
+  to be appended to PostgreSQL’s <code>extension_control_path</code>, allowing it to
+  locate extension control files.</li>
+<li><code>dynamic_library_path</code>: A list of relative paths within the container image
+  to be appended to PostgreSQL’s <code>dynamic_library_path</code>, enabling it to locate
+  shared library files for extensions.</li>
+<li><code>ld_library_path</code>: A list of relative paths within the container image to be
+  appended to the <code>LD_LIBRARY_PATH</code> environment variable of the instance
+  manager process, allowing PostgreSQL to locate required system libraries at
+  runtime.</li>
+</ul>
+<p>This flexibility enables you to support complex or non-standard extension
+images while maintaining clarity and predictability.</p>
+<h3 id="setting-custom-paths">Setting Custom Paths</h3>
+<p>If your extension image does not use the default <code>lib</code> and <code>share</code> directories
+for its libraries and control files, you can override the defaults by
+explicitly setting <code>extension_control_path</code> and <code>dynamic_library_path</code>.</p>
+<p>For example:</p>
+<pre><code class="language-yaml">spec:
+  postgresql:
+    extensions:
+      - name: my-extension
+        extension_control_path:
+          - my/share/path
+        dynamic_library_path:
+          - my/lib/path
+        image:
+          reference: # registry path for your extension image
+</code></pre>
+<p>CloudNativePG will configure PostgreSQL with:</p>
+<ul>
+<li><code>/extensions/my-extension/my/share/path</code> appended to <code>extension_control_path</code></li>
+<li><code>/extensions/my-extension/my/lib/path</code> appended to <code>dynamic_library_path</code></li>
+</ul>
+<p>This allows PostgreSQL to discover your extension’s control files and shared
+libraries correctly, even with a non-standard layout.</p>
+<h3 id="multi-extension-images">Multi-extension Images</h3>
+<p>You may need to include multiple extensions within the same container image,
+adopting a structure where each extension’s files reside in their own
+subdirectory.</p>
+<p>For example, to package PostGIS and pgRouting together in a single image, each
+in its own subdirectory:</p>
+<pre><code class="language-yaml"># ...
+spec:
+  # ...
+  postgresql:
+    extensions:
+      - name: geospatial
+        extension_control_path:
+          - postgis/share
+          - pgrouting/share
+        dynamic_library_path:
+          - postgis/lib
+          - pgrouting/lib
+        # ...
+        image:
+          reference: # registry path for your geospatial image
+      # ...
+    # ...
+  # ...
+</code></pre>
+<h3 id="including-system-libraries">Including System Libraries</h3>
+<p>Some extensions, such as PostGIS, require system libraries that may not be
+present in the base PostgreSQL image. To support these requirements, you can
+package the necessary libraries within your extension container image and make
+them available to PostgreSQL using the <code>ld_library_path</code> field.</p>
+<p>For example, if your extension image includes a <code>system</code> directory with the
+required libraries:</p>
+<pre><code class="language-yaml"># ...
+spec:
+  # ...
+  postgresql:
+    extensions:
+      - name: postgis
+        # ...
+        ld_library_path:
+          - syslib
+        image:
+          reference: # registry path for your PostGIS image
+      # ...
+    # ...
+  # ...
+</code></pre>
+<p>CloudNativePG will set the <code>LD_LIBRARY_PATH</code> environment variable to include
+<code>/extensions/postgis/system</code>, allowing PostgreSQL to locate and load these
+system libraries at runtime.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Since <code>ld_library_path</code> must be set when the PostgreSQL process starts,
+changing this value requires a <strong>cluster restart</strong> for the new value to take effect.
+CloudNativePG does not currently trigger this restart automatically; you will need to
+manually restart the cluster (e.g., using <code>cnpg restart</code>) after modifying <code>ld_library_path</code>.</p>
+</div>
+<h2 id="image-specifications">Image Specifications</h2>
+<p>A standard extension container image for CloudNativePG includes two
+required directories at its root:</p>
+<ul>
+<li><code>share</code>: contains the extension control file (e.g., <code>&lt;EXTENSION&gt;.control</code>)
+  and any SQL files.</li>
+<li><code>lib</code>: contains the extension's shared library (e.g., <code>&lt;EXTENSION&gt;.so</code>) and
+  any additional required libraries.</li>
+</ul>
+<p>Following this structure ensures that the extension will be automatically
+discoverable and usable by PostgreSQL within CloudNativePG without requiring
+manual configuration.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>We encourage PostgreSQL extension developers to publish OCI-compliant extension
+images following this layout as part of their artifact distribution, making
+their extensions easily consumable within Kubernetes environments.
+Ideally, extension images should target a specific operating system
+distribution and architecture, be tied to a particular PostgreSQL version, and
+be built using the distribution’s native packaging system (for example, using
+Debian or RPM packages). This approach ensures consistency, security, and
+compatibility with the PostgreSQL images used in your clusters.</p>
+</div>
+<h2 id="caveats">Caveats</h2>
+<p>Currently, adding, removing, or updating an extension image triggers a
+restart of the PostgreSQL pods. This behavior is inherited from how
+<a href="https://kubernetes.io/docs/tasks/configure-pod-container/image-volumes/">image volumes</a>
+work in Kubernetes.</p>
+<p>Before performing an extension update, ensure you have:</p>
+<ul>
+<li>Thoroughly tested the update process in a staging environment.</li>
+<li>Verified that the extension image contains the required upgrade path between
+  the currently installed version and the target version.</li>
+<li>Updated the <code>version</code> field for the extension in the relevant <code>Database</code>
+  resource definition to align with the new version in the image.</li>
+</ul>
+<p>These steps help prevent downtime or data inconsistencies in your PostgreSQL
+clusters during extension updates.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../container_images/" class="btn btn-neutral float-left" title="Container Image Requirements"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../operator_capability_levels/" class="btn btn-neutral float-right" title="Operator capability levels">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../container_images/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../operator_capability_levels/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/img/favicon.ico b/assets/documentation/1.27.0-rc1/img/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..e85006a3ce1c6fd81faa6d5a13095519c4a6fc96
GIT binary patch
literal 1150
zcmd6lF-yZh9L1kl>(HSEK`2y^4yB6->f+$wD)=oNY!UheIt03Q=;qj=;8*Bap_4*&
za8yAl;wmmx5Yyi^7dXN-WYdJ-{qNqpcez|5t#Fr0qTSYcPTG`I2PBk8r$~4kg^0zN
zCJe(rhix3do!L$bZ+IuZ{i08x=JR3=e+M4pv0KsKA??{u_*EFfo|`p&t`Vf=jn{)F
z1fKk9hWsmYwqWAP^JO*5u*R;*L&dX3H$%S7oB$f0{ISh{QVXuncnzN67WQH2`lip7
zhX+VI$6x$1+$8gMjh4+1l0N#8_0Fh=N#EwpKk{SeE!)SHFB@xQFX3y+8sF#_@!bDW
eIdI-IC`$c%>bk?KbPeN9RHtL<1^)v~#xMt8oB^@`

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/index.html b/assets/documentation/1.27.0-rc1/index.html
new file mode 100644
index 000000000..be517bbf3
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/index.html
@@ -0,0 +1,560 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="description" content="None" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="img/favicon.ico" />
+    <title>CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="css/theme.css" />
+    <link rel="stylesheet" href="css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "CloudNativePG";
+        var mkdocs_page_input_path = "index.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="./search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">CloudNativePG</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#supported-kubernetes-distributions">Supported Kubernetes distributions</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#container-images">Container images</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#operator">Operator</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#operands">Operands</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#main-features">Main features</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#about-this-guide">About this guide</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href=".">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">CloudNativePG</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="cloudnativepg">CloudNativePG</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG (CNPG) is an open-source
+<a href="https://kubernetes.io/docs/concepts/extend-kubernetes/operator/">operator</a>
+designed to manage <a href="https://www.postgresql.org/">PostgreSQL</a> workloads on any
+supported <a href="https://kubernetes.io">Kubernetes</a> cluster.
+It fosters cloud-neutrality through seamless deployment in private, public,
+hybrid, and multi-cloud environments via its
+<a href="replica_cluster/#distributed-topology">distributed topology</a> feature.</p>
+<p>Built around DevOps principles, CloudNativePG embraces declarative
+configuration and immutable infrastructure, ensuring reliability and automation
+in database management.</p>
+<p>At its core, CloudNativePG introduces a custom Kubernetes resource called
+<code>Cluster</code>, representing a PostgreSQL cluster with:</p>
+<ul>
+<li>A single primary instance for write operations.</li>
+<li>Optional replicas for High Availability and read scaling.</li>
+</ul>
+<p>These instances reside within a Kubernetes namespace, allowing applications to
+connect seamlessly using operator-managed services. Failovers and switchovers
+occur transparently, eliminating the need for manual intervention.</p>
+<p>For applications inside the Kubernetes cluster, CNPG provides a microservice
+database approach, enabling co-location of PostgreSQL clusters and applications
+in the same namespace for optimized access.
+For applications outside the cluster, CNPG offers flexible connectivity through
+service templates and <code>LoadBalancer</code> services for direct TCP exposure.
+Additionally, web applications can take advantage of the native connection
+pooler based on PgBouncer.</p>
+<p>CloudNativePG was originally built by <a href="https://www.enterprisedb.com">EDB</a>, then
+released open source under Apache License 2.0.
+The <a href="https://github.com/cloudnative-pg/cloudnative-pg">source code repository is in GitHub</a>.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Based on the <a href="operator_capability_levels/">Operator Capability Levels model</a>,
+users can expect a "Level V - Auto Pilot" subset of capabilities from the
+CloudNativePG Operator.</p>
+</div>
+<h2 id="supported-kubernetes-distributions">Supported Kubernetes distributions</h2>
+<p>Each minor release of CloudNativePG is designed to work with a range of
+Kubernetes versions, usually the ones supported by the CNCF at the time the
+minor version was first released.</p>
+<p>Please refer to the <a href="supported_releases/">"Supported releases"</a> page for details.</p>
+<h2 id="container-images">Container images</h2>
+<p>The <a href="https://github.com/cloudnative-pg">CloudNativePG community</a> maintains
+container images for both the operator and PostgreSQL (the operand).</p>
+<h3 id="operator">Operator</h3>
+<p>The CloudNativePG operator container images are available on the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/pkgs/container/cloudnative-pg"><code>cloudnative-pg</code> project's GitHub Container Registry</a>
+in three different flavors:</p>
+<ul>
+<li>Debian 12 distroless</li>
+<li>Red Hat UBI 9 micro (suffix <code>-ubi9</code>)</li>
+</ul>
+<p>Red Hat UBI images are primarily intended for OLM consumption.</p>
+<p>All container images are signed and include SBOM and provenance attestations,
+provided separately for each architecture.</p>
+<h3 id="operands">Operands</h3>
+<p>The PostgreSQL operand container images are available for all
+<a href="https://www.postgresql.org/">PGDG supported versions of PostgreSQL</a>,
+across multiple architectures, directly from the
+<a href="https://github.com/cloudnative-pg/postgres-containers/pkgs/container/postgresql"><code>postgres-containers</code> project's GitHub Container Registry</a>.</p>
+<p>The <a href="https://github.com/cloudnative-pg/postgres-containers#minimal-images"><code>minimal</code></a>
+and <a href="https://github.com/cloudnative-pg/postgres-containers#standard-images"><code>standard</code></a>
+container images are signed and include SBOM and provenance attestations,
+provided separately for each architecture.</p>
+<p>Weekly jobs ensure that critical vulnerabilities (CVEs) in the entire stack are
+promptly addressed.</p>
+<p>Additionally, the community provides images for the <a href="postgis/">PostGIS extension</a>.</p>
+<h2 id="main-features">Main features</h2>
+<ul>
+<li>Direct integration with the Kubernetes API server for High Availability,
+  eliminating the need for external tools.</li>
+<li>Self-healing capabilities, including:<ul>
+<li>Automated failover by promoting the most aligned replica.</li>
+<li>Automatic recreation of failed replicas.</li>
+</ul>
+</li>
+<li>Planned switchover of the primary instance by promoting a selected replica.</li>
+<li>Declarative management of key PostgreSQL configurations, including:<ul>
+<li>PostgreSQL settings.</li>
+<li>Roles, users, and groups.</li>
+<li>Databases, extensions, and schemas.</li>
+<li>Tablespaces (including temporary tablespaces).</li>
+</ul>
+</li>
+<li>Flexible instance definition, supporting any number of instances (minimum 1
+  primary server).</li>
+<li>Scale-up/down capabilities to dynamically adjust cluster size.</li>
+<li>Read-Write and Read-Only Services, ensuring applications connect correctly:<ul>
+<li><em>Read-Write Service</em>: Routes connections to the primary server.</li>
+<li><em>Read-Only Service</em>: Distributes connections among replicas for read workloads.</li>
+</ul>
+</li>
+<li>Support for quorum-based and priority-based PostgreSQL Synchronous
+  Replication.</li>
+<li>Replica clusters enabling PostgreSQL distributed topologies across multiple
+  Kubernetes clusters (private, public, hybrid, and multi-cloud).</li>
+<li>Delayed Replica clusters for point-in-time access to historical data.</li>
+<li>Persistent volume management, including:<ul>
+<li>Support for Local Persistent Volumes with PVC templates.</li>
+<li>Reuse of Persistent Volumes storage in Pods.</li>
+<li>Separate volumes for WAL files and tablespaces.</li>
+</ul>
+</li>
+<li>Backup and Recovery via CNPG-I Plugins:<ul>
+<li>Pluggable architecture for continuous physical backup and recovery.</li>
+<li>Hot and cold base backups.</li>
+<li>WAL archiving.</li>
+<li>Full and Point-In-Time Recovery (PITR).</li>
+<li>Scheduled and on-demand backups.</li>
+<li>Backup from standbys to reduce primary load.</li>
+</ul>
+</li>
+<li>Community-Supported Barman Cloud Plugin:<ul>
+<li>WAL archiving to object stores with support for full/PITR recovery.</li>
+<li>Retention policies based on configurable recovery windows.</li>
+<li>Supported as a CNPG-I plugin (recommended approach).</li>
+</ul>
+</li>
+<li>Native Backup Methods:<ul>
+<li>Continuous backup and full/PITR recovery via volume snapshots (if
+  supported by the storage class).</li>
+<li>Native integration with Barman Cloud for object store backups via
+  <code>.spec.backup.barmanObjectStore</code> (<em>deprecated since v1.26</em>).</li>
+</ul>
+</li>
+<li>Offline in-place major upgrades of PostgreSQL</li>
+<li>Offline and online import of PostgreSQL databases, including major upgrades:<ul>
+<li><em>Offline Import</em>: Direct restore from existing databases.</li>
+<li><em>Online Import</em>: PostgreSQL native logical replication via the <code>Subscription</code> resource.</li>
+</ul>
+</li>
+<li>High Availability physical replication slots, including synchronization of
+  user-defined replication slots and logical decoding failover.</li>
+<li>Parallel WAL archiving and restore, ensuring high-performance data
+  synchronization in high-write environments.</li>
+<li>TLS support, including:<ul>
+<li>Secure connections and client certificate authentication.</li>
+<li>Custom TLS certificates (integrated with <code>cert-manager</code>).</li>
+</ul>
+</li>
+<li>Startup and readiness probes, including replica probes based on desired lag
+  from the primary.</li>
+<li>Declarative rolling updates for:<ul>
+<li>PostgreSQL minor versions.</li>
+<li>Operator upgrades (in-place or rolling updates).</li>
+</ul>
+</li>
+<li>Standard output logging of PostgreSQL error messages in JSON format for
+  easier integration with log aggregation tools.</li>
+<li>Prometheus-compatible metrics exporter (<code>metrics</code> port 9187) for custom
+  monitoring.</li>
+<li><code>cnpg</code> plugin for <code>kubectl</code> to simplify cluster operations.</li>
+<li>Cluster hibernation for resource efficiency in inactive states.</li>
+<li>Fencing of PostgreSQL clusters (full cluster or subset) to isolate instances
+  when needed.</li>
+<li>Connection pooling with PgBouncer for improved database efficiency.</li>
+<li>OLM (Operator Lifecycle Manager) installation support for streamlined
+  deployments.</li>
+<li>Multi-arch container images, including Software Bill of Materials (SBOM) and
+  provenance attestations for security compliance.</li>
+</ul>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>CloudNativePG does not use <code>StatefulSet</code>s for managing data persistence.
+Instead, it directly manages Persistent Volume Claims (PVCs).
+See <a href="controller/">"Custom Pod Controller"</a> for more details.</p>
+</div>
+<h2 id="about-this-guide">About this guide</h2>
+<p>Follow the instructions in the <a href="quickstart/">"Quickstart"</a> to test
+CloudNativePG on a local Kubernetes cluster using Kind, or Minikube.</p>
+<p>In case you are not familiar with some basic terminology on Kubernetes and PostgreSQL,
+please consult the <a href="before_you_start/">"Before you start" section</a>.</p>
+<p>The CloudNativePG documentation is licensed under a Creative Commons
+Attribution 4.0 International License.</p>
+<hr />
+<p><em><a href="https://www.postgresql.org/about/policies/trademarks/">Postgres, PostgreSQL, and the Slonik Logo</a>
+are trademarks or registered trademarks of the PostgreSQL Community Association
+of Canada, and used with their permission.</em></p>
+<hr />
+<p>CloudNativePG is a
+<a href="https://www.cncf.io/sandbox-projects/">Cloud Native Computing Foundation Sandbox project</a>.</p>
+<p><img alt="" src="https://github.com/cncf/artwork/blob/main/other/cncf/horizontal/color/cncf-color.png?raw=true" /></p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="before_you_start/" class="btn btn-neutral float-right" title="Before You Start">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+      <span><a href="before_you_start/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = ".";</script>
+    <script src="js/theme_extra.js"></script>
+    <script src="js/theme.js"></script>
+      <script src="search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
+
+<!--
+MkDocs version : 1.6.1
+Build Date UTC : 2025-07-29 15:03:02.937770+00:00
+-->
diff --git a/assets/documentation/1.27.0-rc1/installation_upgrade/index.html b/assets/documentation/1.27.0-rc1/installation_upgrade/index.html
new file mode 100644
index 000000000..4e7db3f34
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/installation_upgrade/index.html
@@ -0,0 +1,744 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Installation and upgrades - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Installation and upgrades";
+        var mkdocs_page_input_path = "installation_upgrade.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Installation and upgrades</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#installation-on-kubernetes">Installation on Kubernetes</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#directly-using-the-operator-manifest">Directly using the operator manifest</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#using-the-cnpg-plugin-for-kubectl">Using the cnpg plugin for kubectl</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#testing-the-latest-development-snapshot">Testing the latest development snapshot</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#using-the-helm-chart">Using the Helm Chart</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#using-olm">Using OLM</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#details-about-the-deployment">Details about the deployment</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#upgrades">Upgrades</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#spread-upgrades">Spread Upgrades</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#in-place-updates-of-the-instance-manager">In-place updates of the instance manager</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#compatibility-among-versions">Compatibility among versions</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#upgrading-to-126-from-a-previous-minor-version">Upgrading to 1.26 from a previous minor version</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#deprecation-of-backup-metrics-and-fields-in-the-cluster-status">Deprecation of backup metrics and fields in the Cluster .status</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#declarative-hibernation-in-the-cnpg-plugin">Declarative Hibernation in the cnpg plugin</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#upgrading-to-125-from-a-previous-minor-version">Upgrading to 1.25 from a previous minor version</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#upgrading-to-124-from-a-previous-minor-version">Upgrading to 1.24 from a previous minor version</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#from-replica-clusters-to-distributed-topology">From Replica Clusters to Distributed Topology</a>
+    </li>
+        </ul>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Installation and upgrades</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="installation-and-upgrades">Installation and upgrades</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<h2 id="installation-on-kubernetes">Installation on Kubernetes</h2>
+<h3 id="directly-using-the-operator-manifest">Directly using the operator manifest</h3>
+<p>The operator can be installed like any other resource in Kubernetes,
+through a YAML manifest applied via <code>kubectl</code>.</p>
+<p>You can install the <a href="https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/releases/cnpg-1.27.0-rc1.yaml">latest operator manifest</a>
+for this minor release as follows:</p>
+<pre><code class="language-sh">kubectl apply --server-side -f \
+  https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/releases/cnpg-1.27.0-rc1.yaml
+</code></pre>
+<p>You can verify that with:</p>
+<pre><code class="language-sh">kubectl rollout status deployment \
+  -n cnpg-system cnpg-controller-manager
+</code></pre>
+<h3 id="using-the-cnpg-plugin-for-kubectl">Using the <code>cnpg</code> plugin for <code>kubectl</code></h3>
+<p>You can use the <code>cnpg</code> plugin to override the default configuration options
+that are in the static manifests. </p>
+<p>For example, to generate the default latest manifest but change the watch
+namespaces to only be a specific namespace, you could run:</p>
+<pre><code class="language-shell">kubectl cnpg install generate \
+  --watch-namespace &quot;specific-namespace&quot; \
+  &gt; cnpg_for_specific_namespace.yaml
+</code></pre>
+<p>Please refer to <a href="../kubectl-plugin/#generation-of-installation-manifests">"<code>cnpg</code> plugin"</a> documentation
+for a more comprehensive example. </p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>If you are deploying CloudNativePG on GKE and get an error (<code>... failed to
+call webhook...</code>), be aware that by default traffic between worker nodes
+and control plane is blocked by the firewall except for a few specific
+ports, as explained in the official
+<a href="https://cloud.google.com/kubernetes-engine/docs/how-to/private-clusters#add_firewall_rules">docs</a>
+and by this
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/issues/1360">issue</a>.
+You'll need to either change the <code>targetPort</code> in the webhook service, to be
+one of the allowed ones, or open the webhooks' port (<code>9443</code>) on the
+firewall.</p>
+</div>
+<h3 id="testing-the-latest-development-snapshot">Testing the latest development snapshot</h3>
+<p>If you want to test or evaluate the latest development snapshot of
+CloudNativePG before the next official patch release, you can download the
+manifests from the
+<a href="https://github.com/cloudnative-pg/artifacts"><code>cloudnative-pg/artifacts</code></a>
+which provides easy access to the current trunk (main) as well as to each
+supported release.</p>
+<p>For example, you can install the latest snapshot of the operator with:</p>
+<pre><code class="language-sh">curl -sSfL \
+  https://raw.githubusercontent.com/cloudnative-pg/artifacts/main/manifests/operator-manifest.yaml | \
+  kubectl apply --server-side -f -
+</code></pre>
+<p>If you are instead looking for the latest snapshot of the operator for this
+specific minor release, you can just run:</p>
+<pre><code class="language-sh">curl -sSfL \
+  https://raw.githubusercontent.com/cloudnative-pg/artifacts/release-1.27/manifests/operator-manifest.yaml | \
+  kubectl apply --server-side -f -
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Snapshots are not supported by the CloudNativePG Community, and are not
+intended for use in production.</p>
+</div>
+<h3 id="using-the-helm-chart">Using the Helm Chart</h3>
+<p>The operator can be installed using the provided <a href="https://github.com/cloudnative-pg/charts">Helm chart</a>.</p>
+<h3 id="using-olm">Using OLM</h3>
+<p>CloudNativePG can also be installed via the <a href="https://olm.operatorframework.io/docs/">Operator Lifecycle Manager (OLM)</a>
+directly from <a href="https://operatorhub.io/operator/cloudnative-pg">OperatorHub.io</a>.</p>
+<p>For deployments on Red Hat OpenShift, EDB offers and fully supports a certified
+version of CloudNativePG, available through the
+<a href="https://catalog.redhat.com/software/container-stacks/detail/653fd4035eece8598f66d97b">Red Hat OpenShift Container Platform</a>.</p>
+<h2 id="details-about-the-deployment">Details about the deployment</h2>
+<p>In Kubernetes, the operator is by default installed in the <code>cnpg-system</code>
+namespace as a Kubernetes <code>Deployment</code>. The name of this deployment
+depends on the installation method.
+When installed through the manifest or the <code>cnpg</code> plugin, it is called
+<code>cnpg-controller-manager</code> by default. When installed via Helm, the default name
+is <code>cnpg-cloudnative-pg</code>.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>With Helm you can customize the name of the deployment via the
+<code>fullnameOverride</code> field in the <a href="https://helm.sh/docs/chart_template_guide/values_files/"><em>"values.yaml"</em> file</a>.</p>
+</div>
+<p>You can get more information using the <code>describe</code> command in <code>kubectl</code>:</p>
+<pre><code class="language-sh">$ kubectl get deployments -n cnpg-system
+NAME                READY   UP-TO-DATE   AVAILABLE   AGE
+&lt;deployment-name&gt;   1/1     1            1           18m
+</code></pre>
+<pre><code class="language-sh">kubectl describe deploy \
+  -n cnpg-system \
+  &lt;deployment-name&gt;
+</code></pre>
+<p>As with any Deployment, it sits on top of a ReplicaSet and supports rolling
+upgrades. The default configuration of the CloudNativePG operator
+comes with a Deployment of a single replica, which is suitable for most
+installations. In case the node where the pod is running is not reachable
+anymore, the pod will be rescheduled on another node.</p>
+<p>If you require high availability at the operator level, it is possible to
+specify multiple replicas in the Deployment configuration - given that the
+operator supports leader election. Also, you can take advantage of taints and
+tolerations to make sure that the operator does not run on the same nodes where
+the actual PostgreSQL clusters are running (this might even include the control
+plane for self-managed Kubernetes installations).</p>
+<div class="admonition seealso">
+<p class="admonition-title">Operator configuration</p>
+<p>You can change the default behavior of the operator by overriding
+some default options. For more information, please refer to the
+<a href="../operator_conf/">"Operator configuration"</a> section.</p>
+</div>
+<h2 id="upgrades">Upgrades</h2>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Please carefully read the <a href="../release_notes/">release notes</a>
+before performing an upgrade as some versions might require
+extra steps.</p>
+</div>
+<p>Upgrading CloudNativePG operator is a two-step process:</p>
+<ol>
+<li>upgrade the controller and the related Kubernetes resources</li>
+<li>upgrade the instance manager running in every PostgreSQL pod</li>
+</ol>
+<p>Unless differently stated in the release notes, the first step is normally done
+by applying the manifest of the newer version for plain Kubernetes
+installations, or using the native package manager of the used distribution
+(please follow the instructions in the above sections).</p>
+<p>The second step is automatically triggered after updating the controller. By
+default, this initiates a rolling update of every deployed PostgreSQL cluster,
+upgrading one instance at a time to use the new instance manager. The rolling
+update concludes with a switchover, which is governed by the
+<code>primaryUpdateStrategy</code> option. The default value, <code>unsupervised</code>, completes
+the switchover automatically. If set to <code>supervised</code>, the user must manually
+promote the new primary instance using the <code>cnpg</code> plugin for <code>kubectl</code>.</p>
+<div class="admonition seealso">
+<p class="admonition-title">Rolling updates</p>
+<p>This process is discussed in-depth on the <a href="../rolling_update/">Rolling Updates</a> page.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>In case <code>primaryUpdateStrategy</code> is set to the default value of <code>unsupervised</code>,
+an upgrade of the operator will trigger a switchover on your PostgreSQL cluster,
+causing a (normally negligible) downtime. If your PostgreSQL Cluster has only one
+instance, the instance will be automatically restarted as <code>supervised</code> value is
+not supported for <code>primaryUpdateStrategy</code>. In either case, your applications will
+have to reconnect to PostgreSQL.</p>
+</div>
+<p>The default rolling update behavior can be replaced with in-place updates of
+the instance manager. This approach does not require a restart of the
+PostgreSQL instance, thereby avoiding a switchover within the cluster. This
+feature, which is disabled by default, is described in detail below.</p>
+<h3 id="spread-upgrades">Spread Upgrades</h3>
+<p>By default, all PostgreSQL clusters are rolled out simultaneously, which may
+lead to a spike in resource usage, especially when managing multiple clusters.
+CloudNativePG provides two configuration options at the <a href="../operator_conf/">operator level</a>
+that allow you to introduce delays between cluster roll-outs or even between
+instances within the same cluster, helping to distribute resource usage over
+time:</p>
+<ul>
+<li><code>CLUSTERS_ROLLOUT_DELAY</code>: Defines the number of seconds to wait between
+  roll-outs of different PostgreSQL clusters (default: <code>0</code>).</li>
+<li><code>INSTANCES_ROLLOUT_DELAY</code>: Defines the number of seconds to wait between
+  roll-outs of individual instances within the same PostgreSQL cluster (default:
+  <code>0</code>).</li>
+</ul>
+<h3 id="in-place-updates-of-the-instance-manager">In-place updates of the instance manager</h3>
+<p>By default, CloudNativePG issues a rolling update of the cluster
+every time the operator is updated. The new instance manager shipped with the
+operator is added to each PostgreSQL pod via an init container.</p>
+<p>However, this behavior can be changed via configuration to enable in-place
+updates of the instance manager, which is the PID 1 process that keeps the
+container alive.</p>
+<p>Internally, each instance manager in CloudNativePG supports the injection of a
+new executable that replaces the existing one after successfully completing an
+integrity verification phase and gracefully terminating all internal processes.
+Upon restarting with the new binary, the instance manager seamlessly adopts the
+already running <em>postmaster</em>.</p>
+<p>As a result, the PostgreSQL process is unaffected by the update, refraining
+from the need to perform a switchover. The other side of the coin, is that
+the Pod is changed after the start, breaking the pure concept of immutability.</p>
+<p>You can enable this feature by setting the <code>ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES</code>
+environment variable to <code>'true'</code> in the
+<a href="../operator_conf/#available-options">operator configuration</a>.</p>
+<p>The in-place upgrade process will not change the init container image inside the
+Pods. Therefore, the Pod definition will not reflect the current version of the
+operator.</p>
+<h3 id="compatibility-among-versions">Compatibility among versions</h3>
+<p>CloudNativePG follows semantic versioning. Every release of the
+operator within the same API version is compatible with the previous one.
+The current API version is v1, corresponding to versions 1.x.y of the operator.</p>
+<p>In addition to new features, new versions of the operator contain bug fixes and
+stability enhancements. Because of this, <strong>we strongly encourage users to upgrade
+to the latest version of the operator</strong>, as each version is released in order to
+maintain the most secure and stable Postgres environment.</p>
+<p>CloudNativePG currently releases new versions of the operator at
+least monthly. If you are unable to apply updates as each version becomes
+available, we recommend upgrading through each version in sequential order to
+come current periodically and not skipping versions.</p>
+<p>The <a href="../release_notes/">release notes</a> page contains a detailed list of the
+changes introduced in every released version of CloudNativePG,
+and it must be read before upgrading to a newer version of the software.</p>
+<p>Most versions are directly upgradable and in that case, applying the newer
+manifest for plain Kubernetes installations or using the native package
+manager of the chosen distribution is enough.</p>
+<p>When versions are not directly upgradable, the old version needs to be
+removed before installing the new one. This won't affect user data but
+only the operator itself.</p>
+<!--
+### Upgrading to 1.28.0 or 1.27.x
+
+!!! Important
+    We strongly recommend that all CloudNativePG users upgrade to version
+    1.28.0, or at least to the latest stable version of your current minor release
+    (e.g., 1.27.x).
+
+### Upgrading to 1.27.0 or 1.26.2
+
+!!! Important
+    We strongly recommend that all CloudNativePG users upgrade to version
+    1.27.0, or at least to the latest stable version of your current minor release
+    (e.g., 1.26.2).
+
+Version 1.27 introduces a change in the default behavior of the
+[liveness probe](instance_manager.md#liveness-probe): it now enforces the
+[shutdown of an isolated primary](instance_manager.md#primary-isolation)
+within the `livenessProbeTimeout` (30 seconds).
+
+If this behavior is not suitable for your environment, you can disable the
+*isolation check* in the liveness probe with the following configuration:
+
+
+<pre><code class="language-yaml">spec:
+  probes:
+    liveness:
+      isolationCheck:
+        enabled: false
+</code></pre>
+
+-->
+
+<h3 id="upgrading-to-126-from-a-previous-minor-version">Upgrading to 1.26 from a previous minor version</h3>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>We strongly recommend that all CloudNativePG users upgrade to version
+1.26.1, or at a minimum, to the latest stable version of your current minor
+release (for example, 1.25.x).</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Due to changes in the startup probe for the manager component
+(<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/6623">#6623</a>),
+upgrading the operator will trigger a restart of your PostgreSQL clusters,
+even if in-place updates are enabled (<code>ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES=true</code>).
+Your applications will need to reconnect to PostgreSQL after the upgrade.</p>
+</div>
+<h4 id="deprecation-of-backup-metrics-and-fields-in-the-cluster-status">Deprecation of backup metrics and fields in the <code>Cluster</code> <code>.status</code></h4>
+<p>With the transition to a backup and recovery agnostic approach based on CNPG-I
+plugins in CloudNativePG, which began with version 1.26.0 for Barman Cloud, we
+are starting the deprecation period for the following fields in the <code>.status</code>
+section of the <code>Cluster</code> resource:</p>
+<ul>
+<li><code>firstRecoverabilityPoint</code></li>
+<li><code>firstRecoverabilityPointByMethod</code></li>
+<li><code>lastSuccessfulBackup</code></li>
+<li><code>lastSuccessfulBackupByMethod</code></li>
+<li><code>lastFailedBackup</code></li>
+</ul>
+<p>The following Prometheus metrics are also deprecated:</p>
+<ul>
+<li><code>cnpg_collector_first_recoverability_point</code></li>
+<li><code>cnpg_collector_last_failed_backup_timestamp</code></li>
+<li><code>cnpg_collector_last_available_backup_timestamp</code></li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>If you have migrated to a plugin-based backup and recovery solution such as
+Barman Cloud, these fields and metrics are no longer synchronized and will
+not be updated. Users still relying on the in-core support for Barman Cloud
+and volume snapshots can continue to use these fields for the time being.</p>
+</div>
+<p>Under the new plugin-based approach, multiple backup methods can operate
+simultaneously, each with its own timeline for backup and recovery. For
+example, some plugins may provide snapshots without WAL archiving, while others
+support continuous archiving.</p>
+<p>Because of this flexibility, maintaining centralized status fields in the
+<code>Cluster</code> resource could be misleading or confusing, as they would not
+accurately represent the state across all configured backup methods.
+For this reason, these fields are being deprecated.</p>
+<p>Instead, each plugin is responsible for exposing its own backup status
+information and providing metrics back to the instance manager for monitoring
+and operational awareness.</p>
+<h4 id="declarative-hibernation-in-the-cnpg-plugin">Declarative Hibernation in the <code>cnpg</code> plugin</h4>
+<p>In this release, the <code>cnpg</code> plugin for <code>kubectl</code> transitions from an imperative
+to a <a href="../declarative_hibernation/">declarative approach for cluster hibernation</a>.
+The <code>hibernate on</code> and <code>hibernate off</code> commands are now convenient shortcuts
+that apply declarative changes to enable or disable hibernation.
+The <code>hibernate status</code> command has been removed, as its purpose is now
+fulfilled by the standard <code>status</code> command.</p>
+<h3 id="upgrading-to-125-from-a-previous-minor-version">Upgrading to 1.25 from a previous minor version</h3>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Every time you are upgrading to a higher minor release, make sure you
+go through the release notes and upgrade instructions of all the
+intermediate minor releases. For example, if you want to move
+from 1.23.x to 1.25, make sure you go through the release notes
+and upgrade instructions for 1.24 and 1.25.</p>
+</div>
+<p>No changes to existing 1.24 cluster configurations are required when upgrading
+to 1.25.</p>
+<h3 id="upgrading-to-124-from-a-previous-minor-version">Upgrading to 1.24 from a previous minor version</h3>
+<h4 id="from-replica-clusters-to-distributed-topology">From Replica Clusters to Distributed Topology</h4>
+<p>One of the key enhancements in CloudNativePG 1.24.0 is the upgrade of the
+replica cluster feature.</p>
+<p>The former replica cluster feature, now referred to as the "Standalone Replica
+Cluster," is no longer recommended for Disaster Recovery (DR) and High
+Availability (HA) scenarios that span multiple Kubernetes clusters. Standalone
+replica clusters are best suited for read-only workloads, such as reporting,
+OLAP, or creating development environments with test data.</p>
+<p>For DR and HA purposes, CloudNativePG now introduces the Distributed Topology
+strategy for replica clusters. This new strategy allows you to build PostgreSQL
+clusters across private, public, hybrid, and multi-cloud environments, spanning
+multiple regions and potentially different cloud providers. It also provides an
+API to control the switchover operation, ensuring that only one cluster acts as
+the primary at any given time.</p>
+<p>This Distributed Topology strategy enhances resilience and scalability, making
+it a robust solution for modern, distributed applications that require high
+availability and disaster recovery capabilities across diverse infrastructure
+setups.</p>
+<p>You can seamlessly transition from a previous replica cluster configuration to a
+distributed topology by modifying all the <code>Cluster</code> resources involved in the
+distributed PostgreSQL setup. Ensure the following steps are taken:</p>
+<ul>
+<li>Configure the <code>externalClusters</code> section to include all the clusters involved
+  in the distributed topology. We strongly suggest using the same configuration
+  across all <code>Cluster</code> resources for maintainability and consistency.</li>
+<li>Configure the <code>primary</code> and <code>source</code> fields in the <code>.spec.replica</code> stanza to
+  reflect the distributed topology. The <code>primary</code> field should contain the name
+  of the current primary cluster in the distributed topology, while the <code>source</code>
+  field should contain the name of the cluster each <code>Cluster</code> resource is
+  replicating from. It is important to note that the <code>enabled</code> field, which was
+  previously set to <code>true</code> or <code>false</code>, should now be unset (default).</li>
+</ul>
+<p>For more information, please refer to
+the <a href="../replica_cluster/#distributed-topology">"Distributed Topology" section for replica clusters</a>.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../architecture/" class="btn btn-neutral float-left" title="Architecture"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../quickstart/" class="btn btn-neutral float-right" title="Quickstart">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../architecture/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../quickstart/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/instance_manager/index.html b/assets/documentation/1.27.0-rc1/instance_manager/index.html
new file mode 100644
index 000000000..3041fabb4
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/instance_manager/index.html
@@ -0,0 +1,759 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Postgres instance manager - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Postgres instance manager";
+        var mkdocs_page_input_path = "instance_manager.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Postgres instance manager</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#startup-probe">Startup Probe</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#startup-probe-strategy">Startup Probe Strategy</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#liveness-probe">Liveness Probe</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#primary-isolation">Primary Isolation</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#readiness-probe">Readiness Probe</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#readiness-probe-strategy">Readiness Probe Strategy</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#shutdown-control">Shutdown control</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#shutdown-of-the-primary-during-a-switchover">Shutdown of the primary during a switchover</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#failover">Failover</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#disk-full-failure">Disk Full Failure</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Postgres instance manager</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="postgres-instance-manager">Postgres instance manager</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG does not rely on an external tool for failover management.
+It simply relies on the Kubernetes API server and a native key component called:
+the <strong>Postgres instance manager</strong>.</p>
+<p>The instance manager takes care of the entire lifecycle of the PostgreSQL
+server process (also known as <code>postmaster</code>).</p>
+<p>When you create a new cluster, the operator makes a Pod per instance.
+The field <code>.spec.instances</code> specifies how many instances to create.</p>
+<p>Each Pod will start the instance manager as the parent process (PID 1) for the
+main container, which in turn runs the PostgreSQL instance. During the lifetime
+of the Pod, the instance manager acts as a backend to handle the
+<a href="https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes">startup, liveness and readiness probes</a>.</p>
+<h2 id="startup-probe">Startup Probe</h2>
+<p>The startup probe ensures that a PostgreSQL instance, whether a primary or
+standby, has fully started.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>By default, the startup probe uses
+<a href="https://www.postgresql.org/docs/current/app-pg-isready.html"><code>pg_isready</code></a>.
+However, the behavior can be customized by specifying a different startup
+strategy.</p>
+</div>
+<p>While the startup probe is running, the liveness and readiness probes remain
+disabled. Following Kubernetes standards, if the startup probe fails, the
+kubelet will terminate the container, which will then be restarted.</p>
+<p>The <code>.spec.startDelay</code> parameter specifies the maximum time, in seconds,
+allowed for the startup probe to succeed.</p>
+<p>By default, the <code>startDelay</code> is set to <code>3600</code> seconds. It is recommended to
+adjust this setting based on the time PostgreSQL needs to fully initialize in
+your specific environment.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Setting <code>.spec.startDelay</code> too low can cause the liveness probe to activate
+prematurely, potentially resulting in unnecessary Pod restarts if PostgreSQL
+hasn’t fully initialized.</p>
+</div>
+<p>CloudNativePG configures the startup probe with the following default parameters:</p>
+<pre><code class="language-yaml">failureThreshold: FAILURE_THRESHOLD
+periodSeconds: 10
+successThreshold: 1
+timeoutSeconds: 5
+</code></pre>
+<p>The <code>failureThreshold</code> value is automatically calculated by dividing
+<code>startDelay</code> by <code>periodSeconds</code>.</p>
+<p>You can customize any of the probe settings in the <code>.spec.probes.startup</code>
+section of your configuration.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Be sure that any custom probe settings are tailored to your cluster's
+operational requirements to avoid unintended disruptions.</p>
+</div>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For more details on probe configuration, refer to the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ProbeWithStrategy">probe API documentation</a>.</p>
+</div>
+<p>If you manually specify <code>.spec.probes.startup.failureThreshold</code>, it will
+override the default behavior and disable the automatic use of <code>startDelay</code>.</p>
+<p>For example, the following configuration explicitly sets custom probe
+parameters, bypassing <code>startDelay</code>:</p>
+<pre><code class="language-yaml"># ... snip
+spec:
+  probes:
+    startup:
+      periodSeconds: 3
+      timeoutSeconds: 3
+      failureThreshold: 10
+</code></pre>
+<h3 id="startup-probe-strategy">Startup Probe Strategy</h3>
+<p>In certain scenarios, you may need to customize the startup strategy for your
+PostgreSQL cluster. For example, you might delay marking a replica as started
+until it begins streaming from the primary or define a replication lag
+threshold that must be met before considering the replica ready.</p>
+<p>To accommodate these requirements, CloudNativePG extends the
+<code>.spec.probes.startup</code> stanza with two optional parameters:</p>
+<ul>
+<li>
+<p><code>type</code>: specifies the criteria for considering the probe successful. Accepted
+  values, in increasing order of complexity/depth, include:</p>
+<ul>
+<li><code>pg_isready</code>: marks the probe as successful when the <code>pg_isready</code> command
+  exits with <code>0</code>. This is the default for primary instances and replicas.</li>
+<li><code>query</code>: marks the probe as successful when a basic query is executed on
+  the <code>postgres</code> database locally.</li>
+<li><code>streaming</code>: marks the probe as successful when the replica begins
+  streaming from its source and meets the specified lag requirements (details
+  below).</li>
+</ul>
+</li>
+<li>
+<p><code>maximumLag</code>: defines the maximum acceptable replication lag, measured in bytes
+  (expressed as Kubernetes quantities). This parameter is only applicable when
+  <code>type</code> is set to <code>streaming</code>. If <code>maximumLag</code> is not specified, the replica is
+  considered successfully started as soon as it begins streaming.</p>
+</li>
+</ul>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The <code>.spec.probes.startup.maximumLag</code> option is validated and enforced only
+during the startup phase of the pod, meaning it applies exclusively when the
+replica is starting.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Incorrect configuration of the <code>maximumLag</code> option can cause continuous
+failures of the startup probe, leading to repeated replica restarts. Ensure
+you understand how this option works and configure appropriate values for
+<code>failureThreshold</code> and <code>periodSeconds</code> to give the replica enough time to
+catch up with its source.</p>
+</div>
+<p>The following example requires a replica to have a maximum lag of 16Mi from the
+source to be considered started:</p>
+<pre><code class="language-yaml"># &lt;snip&gt;
+probes:
+  startup:
+    type: streaming
+    maximumLag: 16Mi
+</code></pre>
+<h2 id="liveness-probe">Liveness Probe</h2>
+<p>The liveness probe begins after the startup probe successfully completes. Its
+primary role is to ensure the PostgreSQL instance manager is operating
+correctly.</p>
+<p>Following Kubernetes standards, if the liveness probe fails, the kubelet will
+terminate the container, which will then be restarted.</p>
+<p>The amount of time before a Pod is classified as not alive is configurable via
+the <code>.spec.livenessProbeTimeout</code> parameter.</p>
+<p>CloudNativePG configures the liveness probe with the following default
+parameters:</p>
+<pre><code class="language-yaml">failureThreshold: FAILURE_THRESHOLD
+periodSeconds: 10
+successThreshold: 1
+timeoutSeconds: 5
+</code></pre>
+<p>The <code>failureThreshold</code> value is automatically calculated by dividing
+<code>livenessProbeTimeout</code> by <code>periodSeconds</code>.</p>
+<p>By default, <code>.spec.livenessProbeTimeout</code> is set to <code>30</code> seconds. This means the
+liveness probe will report a failure if it detects three consecutive probe
+failures, with a 10-second interval between each check.</p>
+<p>You can customize any of the probe settings in the <code>.spec.probes.liveness</code>
+section of your configuration.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Be sure that any custom probe settings are tailored to your cluster's
+operational requirements to avoid unintended disruptions.</p>
+</div>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For more details on probe configuration, refer to the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-Probe">probe API documentation</a>.</p>
+</div>
+<p>If you manually specify <code>.spec.probes.liveness.failureThreshold</code>, it will
+override the default behavior and disable the automatic use of
+<code>livenessProbeTimeout</code>.</p>
+<p>For example, the following configuration explicitly sets custom probe
+parameters, bypassing <code>livenessProbeTimeout</code>:</p>
+<pre><code class="language-yaml"># ... snip
+spec:
+  probes:
+    liveness:
+      periodSeconds: 3
+      timeoutSeconds: 3
+      failureThreshold: 10
+</code></pre>
+<h3 id="primary-isolation">Primary Isolation</h3>
+<p>CloudNativePG 1.27 introduces an additional behavior for the liveness
+probe of a PostgreSQL primary, which will report a failure if <strong>both</strong> of the
+following conditions are met:</p>
+<ol>
+<li>The instance manager cannot reach the Kubernetes API server</li>
+<li>The instance manager cannot reach <strong>any</strong> other instance via the instance manager’s REST API</li>
+</ol>
+<p>The effect of this behavior is to consider an isolated primary to be not alive and subsequently <strong>shut it down</strong> when the liveness probe fails.</p>
+<p>It is <strong>enabled by default</strong> and can be disabled by adding the following:</p>
+<pre><code class="language-yaml">spec:
+  probes:
+    liveness:
+      isolationCheck:
+        enabled: false
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Be aware that the default liveness probe settings—automatically derived from <code>livenessProbeTimeout</code>—might
+be aggressive (30 seconds). As such, we recommend explicitly setting the
+liveness probe configuration to suit your environment.</p>
+</div>
+<p>The spec also accepts two optional network settings: <code>requestTimeout</code>
+and <code>connectionTimeout</code>, both defaulting to <code>1000</code> (in milliseconds).
+In cloud environments, you may need to increase these values.
+For example:</p>
+<pre><code class="language-yaml">spec:
+  probes:
+    liveness:
+      isolationCheck:
+        enabled: true
+        requestTimeout: &quot;2000&quot;
+        connectionTimeout: &quot;2000&quot;
+</code></pre>
+<h2 id="readiness-probe">Readiness Probe</h2>
+<p>The readiness probe starts once the startup probe has successfully completed.
+Its primary purpose is to check whether the PostgreSQL instance is ready to
+accept traffic and serve requests at any point during the pod's lifecycle.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>By default, the readiness probe uses
+<a href="https://www.postgresql.org/docs/current/app-pg-isready.html"><code>pg_isready</code></a>.
+However, the behavior can be customized by specifying a different readiness
+strategy.</p>
+</div>
+<p>Following Kubernetes standards, if the readiness probe fails, the pod will be
+marked unready and will not receive traffic from any services. An unready pod
+is also ineligible for promotion during automated failover scenarios.</p>
+<p>CloudNativePG uses the following default configuration for the readiness probe:</p>
+<pre><code class="language-yaml">failureThreshold: 3
+periodSeconds: 10
+successThreshold: 1
+timeoutSeconds: 5
+</code></pre>
+<p>If the default settings do not suit your requirements, you can fully customize
+the readiness probe by specifying parameters in the <code>.spec.probes.readiness</code>
+stanza. For example:</p>
+<pre><code class="language-yaml"># ... snip
+spec:
+  probes:
+    readiness:
+      periodSeconds: 3
+      timeoutSeconds: 3
+      failureThreshold: 10
+</code></pre>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Ensure that any custom probe settings are aligned with your cluster’s
+operational requirements to prevent unintended disruptions.</p>
+</div>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For more information on configuring probes, see the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ProbeWithStrategy">probe API</a>.</p>
+</div>
+<h3 id="readiness-probe-strategy">Readiness Probe Strategy</h3>
+<p>In certain scenarios, you may need to customize the readiness strategy for your
+cluster. For example, you might delay marking a replica as ready until it
+begins streaming from the primary or define a maximum replication lag threshold
+before considering the replica ready.</p>
+<p>To accommodate these requirements, CloudNativePG extends the
+<code>.spec.probes.readiness</code> stanza with two optional parameters: <code>type</code> and
+<code>maximumLag</code>. Please refer to the <a href="#startup-probe-strategy">Startup Probe Strategy</a>
+section for detailed information on these options.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Unlike the startup probe, the <code>.spec.probes.readiness.maximumLag</code> option is
+continuously monitored. A lagging replica may become unready if this setting is
+not appropriately tuned.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Incorrect configuration of the <code>maximumLag</code> option can lead to repeated
+readiness probe failures, causing serious consequences, such as:</p>
+<ul>
+<li>Exclusion of the replica from key operator features, such as promotion
+  during failover or participation in synchronous replication quorum.</li>
+<li>Disruptions in read/read-only services.</li>
+<li>In longer failover times scenarios, replicas might be declared unready,
+  leading to a cluster stall requiring manual intervention.</li>
+</ul>
+</div>
+<div class="admonition recommendation">
+<p class="admonition-title">Recommendation</p>
+<p>Use the <code>streaming</code> and <code>maximumLag</code> options with extreme caution. If
+you're unfamiliar with PostgreSQL replication, rely on the default
+strategy. Seek professional advice if unsure.</p>
+</div>
+<p>The following example requires a replica to have a maximum lag of 64Mi from the
+source to be considered ready. It also provides approximately 300 seconds (30
+failures × 10 seconds) for the startup probe to succeed:</p>
+<pre><code class="language-yaml"># &lt;snip&gt;
+probes:
+  readiness:
+    type: streaming
+    maximumLag: 64Mi
+    failureThreshold: 30
+    periodSeconds: 10
+</code></pre>
+<h2 id="shutdown-control">Shutdown control</h2>
+<p>When a Pod running Postgres is deleted, either manually or by Kubernetes
+following a node drain operation, the kubelet will send a termination signal to the
+instance manager, and the instance manager will take care of shutting down
+PostgreSQL in an appropriate way.
+The <code>.spec.smartShutdownTimeout</code> and <code>.spec.stopDelay</code> options, expressed in seconds,
+control the amount of time given to PostgreSQL to shut down. The values default
+to 180 and 1800 seconds, respectively.</p>
+<p>The shutdown procedure is composed of two steps:</p>
+<ol>
+<li>
+<p>The instance manager requests a <strong>smart</strong> shut down, disallowing any
+new connection to PostgreSQL. This step will last for up to
+<code>.spec.smartShutdownTimeout</code> seconds.</p>
+</li>
+<li>
+<p>If PostgreSQL is still up, the instance manager requests a <strong>fast</strong>
+shut down, terminating any existing connection and exiting promptly.
+If the instance is archiving and/or streaming WAL files, the process
+will wait for up to the remaining time set in <code>.spec.stopDelay</code> to complete the
+operation and then forcibly shut down. Such a timeout needs to be at least 15
+seconds.</p>
+</li>
+</ol>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>In order to avoid any data loss in the Postgres cluster, which impacts
+the database <a href="../before_you_start/#rpo">RPO</a>, don't delete the Pod where
+the primary instance is running. In this case, perform a switchover to
+another instance first.</p>
+</div>
+<h3 id="shutdown-of-the-primary-during-a-switchover">Shutdown of the primary during a switchover</h3>
+<p>During a switchover, the shutdown procedure is slightly different from the
+general case. Indeed, the operator requires the former primary to issue a
+<strong>fast</strong> shut down before the selected new primary can be promoted,
+in order to ensure that all the data are available on the new primary.</p>
+<p>For this reason, the <code>.spec.switchoverDelay</code>, expressed in seconds, controls
+the  time given to the former primary to shut down gracefully and archive all
+the WAL files. By default it is set to <code>3600</code> (1 hour).</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>The <code>.spec.switchoverDelay</code> option affects the <a href="../before_you_start/#rpo">RPO</a>
+and <a href="../before_you_start/#rto">RTO</a> of your PostgreSQL database. Setting it to
+a low value, might favor RTO over RPO but lead to data loss at cluster level
+and/or backup level. On the contrary, setting it to a high value, might remove
+the risk of data loss while leaving the cluster without an active primary for a
+longer time during the switchover.</p>
+</div>
+<h2 id="failover">Failover</h2>
+<p>In case of primary pod failure, the cluster will go into failover mode.
+Please refer to the <a href="../failover/">"Failover" section</a> for details.</p>
+<h2 id="disk-full-failure">Disk Full Failure</h2>
+<p>Storage exhaustion is a well known issue for PostgreSQL clusters.
+The <a href="https://www.postgresql.org/docs/current/diskusage.html#DISK-FULL">PostgreSQL documentation</a>
+highlights the possible failure scenarios and the importance of monitoring disk
+usage to prevent it from becoming full.</p>
+<p>The same applies to CloudNativePG and Kubernetes as well: the
+<a href="../monitoring/#predefined-set-of-metrics">"Monitoring" section</a>
+provides details on checking the disk space used by WAL segments and standard
+metrics on disk usage exported to Prometheus.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>In a production system, it is critical to monitor the database
+continuously. Exhausted disk storage can lead to a database server shutdown.</p>
+</div>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The detection of exhausted storage relies on a storage class that
+accurately reports disk size and usage. This may not be the case in simulated
+Kubernetes environments like Kind or with test storage class implementations
+such as <code>csi-driver-host-path</code>.</p>
+</div>
+<p>If the disk containing the WALs becomes full and no more WAL segments can be
+stored, PostgreSQL will stop working. CloudNativePG correctly detects this issue
+by verifying that there is enough space to store the next WAL segment,
+and avoids triggering a failover, which could complicate recovery.</p>
+<p>That allows a human administrator to address the root cause.</p>
+<p>In such a case, if supported by the storage class, the quickest course of action
+is currently to:</p>
+<ol>
+<li>Expand the storage size of the full PVC</li>
+<li>Increase the size in the <code>Cluster</code> resource to the same value</li>
+</ol>
+<p>Once the issue is resolved and there is sufficient free space for WAL segments,
+the Pod will restart and the cluster will become healthy.</p>
+<p>See also the <a href="../storage/#volume-expansion">"Volume expansion" section</a> of the
+documentation.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../security/" class="btn btn-neutral float-left" title="Security"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../scheduling/" class="btn btn-neutral float-right" title="Scheduling">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../security/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../scheduling/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/js/html5shiv.min.js b/assets/documentation/1.27.0-rc1/js/html5shiv.min.js
new file mode 100644
index 000000000..1a01c94ba
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/js/html5shiv.min.js
@@ -0,0 +1,4 @@
+/**
+* @preserve HTML5 Shiv 3.7.3 | @afarkas @jdalton @jon_neal @rem | MIT/GPL2 Licensed
+*/
+!function(a,b){function c(a,b){var c=a.createElement("p"),d=a.getElementsByTagName("head")[0]||a.documentElement;return c.innerHTML="x<style>"+b+"</style>",d.insertBefore(c.lastChild,d.firstChild)}function d(){var a=t.elements;return"string"==typeof a?a.split(" "):a}function e(a,b){var c=t.elements;"string"!=typeof c&&(c=c.join(" ")),"string"!=typeof a&&(a=a.join(" ")),t.elements=c+" "+a,j(b)}function f(a){var b=s[a[q]];return b||(b={},r++,a[q]=r,s[r]=b),b}function g(a,c,d){if(c||(c=b),l)return c.createElement(a);d||(d=f(c));var e;return e=d.cache[a]?d.cache[a].cloneNode():p.test(a)?(d.cache[a]=d.createElem(a)).cloneNode():d.createElem(a),!e.canHaveChildren||o.test(a)||e.tagUrn?e:d.frag.appendChild(e)}function h(a,c){if(a||(a=b),l)return a.createDocumentFragment();c=c||f(a);for(var e=c.frag.cloneNode(),g=0,h=d(),i=h.length;i>g;g++)e.createElement(h[g]);return e}function i(a,b){b.cache||(b.cache={},b.createElem=a.createElement,b.createFrag=a.createDocumentFragment,b.frag=b.createFrag()),a.createElement=function(c){return t.shivMethods?g(c,a,b):b.createElem(c)},a.createDocumentFragment=Function("h,f","return function(){var n=f.cloneNode(),c=n.createElement;h.shivMethods&&("+d().join().replace(/[\w\-:]+/g,function(a){return b.createElem(a),b.frag.createElement(a),'c("'+a+'")'})+");return n}")(t,b.frag)}function j(a){a||(a=b);var d=f(a);return!t.shivCSS||k||d.hasCSS||(d.hasCSS=!!c(a,"article,aside,dialog,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}mark{background:#FF0;color:#000}template{display:none}")),l||i(a,d),a}var k,l,m="3.7.3",n=a.html5||{},o=/^<|^(?:button|map|select|textarea|object|iframe|option|optgroup)$/i,p=/^(?:a|b|code|div|fieldset|h1|h2|h3|h4|h5|h6|i|label|li|ol|p|q|span|strong|style|table|tbody|td|th|tr|ul)$/i,q="_html5shiv",r=0,s={};!function(){try{var a=b.createElement("a");a.innerHTML="<xyz></xyz>",k="hidden"in a,l=1==a.childNodes.length||function(){b.createElement("a");var a=b.createDocumentFragment();return"undefined"==typeof a.cloneNode||"undefined"==typeof a.createDocumentFragment||"undefined"==typeof a.createElement}()}catch(c){k=!0,l=!0}}();var t={elements:n.elements||"abbr article aside audio bdi canvas data datalist details dialog figcaption figure footer header hgroup main mark meter nav output picture progress section summary template time video",version:m,shivCSS:n.shivCSS!==!1,supportsUnknownElements:l,shivMethods:n.shivMethods!==!1,type:"default",shivDocument:j,createElement:g,createDocumentFragment:h,addElements:e};a.html5=t,j(b),"object"==typeof module&&module.exports&&(module.exports=t)}("undefined"!=typeof window?window:this,document);
diff --git a/assets/documentation/1.27.0-rc1/js/jquery-3.6.0.min.js b/assets/documentation/1.27.0-rc1/js/jquery-3.6.0.min.js
new file mode 100644
index 000000000..c4c6022f2
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/js/jquery-3.6.0.min.js
@@ -0,0 +1,2 @@
+/*! jQuery v3.6.0 | (c) OpenJS Foundation and other contributors | jquery.org/license */
+!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e||"function"==typeof e?n[o.call(e)]||"object":typeof e}var f="3.6.0",S=function(e,t){return new S.fn.init(e,t)};function p(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n||0===t||"number"==typeof t&&0<t&&t-1 in e)}S.fn=S.prototype={jquery:f,constructor:S,length:0,toArray:function(){return s.call(this)},get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this.pushStack(s.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject||this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]||{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]||{},s++),"object"==typeof a||m(a)||(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(S.isPlainObject(r)||(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i||S.isPlainObject(n)?n:{},i=!1,a[t]=S.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},S.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e||"[object Object]"!==o.call(e))&&(!(t=r(e))||"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.nonce},n)},each:function(e,t){var n,r=0;if(p(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t||[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:y}),"function"==typeof Symbol&&(S.fn[Symbol.iterator]=t[Symbol.iterator]),S.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var d=function(n){var e,d,b,o,i,h,f,g,w,u,l,T,C,a,E,v,s,c,y,S="sizzle"+1*new Date,p=n.document,k=0,r=0,m=ue(),x=ue(),A=ue(),N=ue(),j=function(e,t){return e===t&&(l=!0),0},D={}.hasOwnProperty,t=[],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked|selected|async|autofocus|autoplay|controls|defer|disabled|hidden|ismap|loop|multiple|open|readonly|required|scoped",M="[\\x20\\t\\r\\n\\f]",I="(?:\\\\[\\da-fA-F]{1,6}"+M+"?|\\\\[^\\r\\n\\f]|[\\w-]|[^\0-\\x7f])+",W="\\["+M+"*("+I+")(?:"+M+"*([*^$|!~]?=)"+M+"*(?:'((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\"|("+I+"))|)"+M+"*\\]",F=":("+I+")(?:\\((('((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\")|((?:\\\\.|[^\\\\()[\\]]|"+W+")*)|.*)\\)|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+|((?:^|[^\\\\])(?:\\\\.)*)"+M+"+$","g"),_=new RegExp("^"+M+"*,"+M+"*"),z=new RegExp("^"+M+"*([>+~]|"+M+")"+M+"*"),U=new RegExp(M+"|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"|[*])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+F),CHILD:new RegExp("^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\("+M+"*(even|odd|(([+-]|)(\\d*)n|)"+M+"*(?:([+-]|)"+M+"*(\\d+)|))"+M+"*\\)|)","i"),bool:new RegExp("^(?:"+R+")$","i"),needsContext:new RegExp("^"+M+"*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\("+M+"*((?:-\\d)?\\d*)"+M+"*\\)|)(?=[^-]|$)","i")},Y=/HTML$/i,Q=/^(?:input|select|textarea|button)$/i,J=/^h\d$/i,K=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)|(\w+)|\.([\w-]+))$/,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t||(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10|55296,1023&n|56320))},re=/([\0-\x1f\x7f]|^-?\d)|^-$|[^\0-\x1f\x7f-\uFFFF\w-]/g,ie=function(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n||[],"string"!=typeof t||!t||1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e||C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.getElementById(i)))return n;if(a.id===i)return n.push(a),n}else if(f&&(a=f.getElementById(i))&&y(e,a)&&a.id===i)return n.push(a),n}else{if(u[2])return H.apply(n,e.getElementsByTagName(t)),n;if((i=u[3])&&d.getElementsByClassName&&e.getElementsByClassName)return H.apply(n,e.getElementsByClassName(i)),n}if(d.qsa&&!N[t+" "]&&(!v||!v.test(t))&&(1!==p||"object"!==e.nodeName.toLowerCase())){if(c=t,f=e,1===p&&(U.test(t)||z.test(t))){(f=ee.test(t)&&ye(e.parentNode)||e)===e&&d.scope||((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(e){N(t,!0)}finally{s===S&&e.removeAttribute("id")}}}return g(t.replace($,"$1"),e,n,r)}function ue(){var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===t}}function he(n){return function(e){var t=e.nodeName.toLowerCase();return("input"===t||"button"===t)&&e.type===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t||e.isDisabled!==!t&&ae(e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function ve(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument||e).documentElement;return!Y.test(t||n&&n.nodeName||"HTML")},T=se.setDocument=function(e){var t,n,r=e?e.ownerDocument||e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e).appendChild(C.createElement("div")),"undefined"!=typeof e.querySelectorAll&&!e.querySelectorAll(":scope fieldset div").length}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=ce(function(e){return a.appendChild(e).id=S,!C.getElementsByName||!C.getElementsByName(S).length}),d.getById?(b.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n=t.getElementById(e);return n?[n]:[]}}):(b.filter.ID=function(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value===e)return[o];i=t.getElementsByName(e),r=0;while(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=o[i++])1===n.nodeType&&r.push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){var t;a.appendChild(e).innerHTML="<a id='"+S+"'></a><select id='"+S+"-\r\\' msallowcapture=''><option selected=''></option></select>",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[*^$]="+M+"*(?:''|\"\")"),e.querySelectorAll("[selected]").length||v.push("\\["+M+"*(?:value|"+R+")"),e.querySelectorAll("[id~="+S+"-]").length||v.push("~="),(t=C.createElement("input")).setAttribute("name",""),e.appendChild(t),e.querySelectorAll("[name='']").length||v.push("\\["+M+"*name"+M+"*="+M+"*(?:''|\"\")"),e.querySelectorAll(":checked").length||v.push(":checked"),e.querySelectorAll("a#"+S+"+*").length||v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='disabled'></a><select disabled='disabled'><option/></select>";var t=C.createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"*[*^$|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&v.push(":enabled",":disabled"),e.querySelectorAll("*,:x"),v.push(",.*:")})),(d.matchesSelector=K.test(c=a.matches||a.webkitMatchesSelector||a.mozMatchesSelector||a.oMatchesSelector||a.msMatchesSelector))&&ce(function(e){d.disconnectedMatch=c.call(e,"*"),c.call(e,"[s!='']:x"),s.push("!=",F)}),v=v.length&&new RegExp(v.join("|")),s=s.length&&new RegExp(s.join("|")),t=K.test(a.compareDocumentPosition),y=t||K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r||!(!r||1!==r.nodeType||!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0;return!1},j=t?function(e,t){if(e===t)return l=!0,0;var n=!e.compareDocumentPosition-!t.compareDocumentPosition;return n||(1&(n=(e.ownerDocument||e)==(t.ownerDocument||t)?e.compareDocumentPosition(t):1)||!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C||e.ownerDocument==p&&y(p,e)?-1:t==C||t.ownerDocument==p&&y(p,t)?1:u?P(u,e)-P(u,t):0:4&n?-1:1)}:function(e,t){if(e===t)return l=!0,0;var n,r=0,i=e.parentNode,o=t.parentNode,a=[e],s=[t];if(!i||!o)return e==C?-1:t==C?1:i?-1:o?1:u?P(u,e)-P(u,t):0;if(i===o)return pe(e,t);n=e;while(n=n.parentNode)a.unshift(n);n=t;while(n=n.parentNode)s.unshift(n);while(a[r]===s[r])r++;return r?pe(a[r],s[r]):a[r]==p?-1:s[r]==p?1:0}),C},se.matches=function(e,t){return se(e,null,null,t)},se.matchesSelector=function(e,t){if(T(e),d.matchesSelector&&E&&!N[t+" "]&&(!s||!s.test(t))&&(!v||!v.test(t)))try{var n=c.call(e,t);if(n||d.disconnectedMatch||e.document&&11!==e.document.nodeType)return n}catch(e){N(t,!0)}return 0<se(t,C,null,[e]).length},se.contains=function(e,t){return(e.ownerDocument||e)!=C&&T(e),y(e,t)},se.attr=function(e,t){(e.ownerDocument||e)!=C&&T(e);var n=b.attrHandle[t.toLowerCase()],r=n&&D.call(b.attrHandle,t.toLowerCase())?n(e,t,!E):void 0;return void 0!==r?r:d.attributes||!E?e.getAttribute(t):(r=e.getAttributeNode(t))&&r.specified?r.value:null},se.escape=function(e){return(e+"").replace(re,ie)},se.error=function(e){throw new Error("Syntax error, unrecognized expression: "+e)},se.uniqueSort=function(e){var t,n=[],r=0,i=0;if(l=!d.detectDuplicates,u=!d.sortStable&&e.slice(0),e.sort(j),l){while(t=e[i++])t===e[i]&&(r=n.push(i));while(r--)e.splice(n[r],1)}return u=null,e},o=se.getText=function(e){var t,n="",r=0,i=e.nodeType;if(i){if(1===i||9===i||11===i){if("string"==typeof e.textContent)return e.textContent;for(e=e.firstChild;e;e=e.nextSibling)n+=o(e)}else if(3===i||4===i)return e.nodeValue}else while(t=e[r++])n+=o(t);return n},(b=se.selectors={cacheLength:50,createPseudo:le,match:G,attrHandle:{},find:{},relative:{">":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(e){return e[1]=e[1].replace(te,ne),e[3]=(e[3]||e[4]||e[5]||"").replace(te,ne),"~="===e[2]&&(e[3]=" "+e[3]+" "),e.slice(0,4)},CHILD:function(e){return e[1]=e[1].toLowerCase(),"nth"===e[1].slice(0,3)?(e[3]||se.error(e[0]),e[4]=+(e[4]?e[5]+(e[6]||1):2*("even"===e[3]||"odd"===e[3])),e[5]=+(e[7]+e[8]||"odd"===e[3])):e[3]&&se.error(e[0]),e},PSEUDO:function(e){var t,n=!e[6]&&e[2];return G.CHILD.test(e[0])?null:(e[3]?e[2]=e[4]||e[5]||"":n&&X.test(n)&&(t=h(n,!0))&&(t=n.indexOf(")",n.length-t)-n.length)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e.replace(te,ne).toLowerCase();return"*"===e?function(){return!0}:function(e){return e.nodeName&&e.nodeName.toLowerCase()===t}},CLASS:function(e){var t=m[e+" "];return t||(t=new RegExp("(^|"+M+")"+e+"("+M+"|$)"))&&m(e,function(e){return t.test("string"==typeof e.className&&e.className||"undefined"!=typeof e.getAttribute&&e.getAttribute("class")||"")})},ATTR:function(n,r,i){return function(e){var t=se.attr(e,n);return null==t?"!="===r:!r||(t+="","="===r?t===i:"!="===r?t!==i:"^="===r?i&&0===t.indexOf(i):"*="===r?i&&-1<t.indexOf(i):"$="===r?i&&t.slice(-i.length)===i:"~="===r?-1<(" "+t.replace(B," ")+" ").indexOf(i):"|="===r&&(t===i||t.slice(0,i.length+1)===i+"-"))}},CHILD:function(h,e,t,g,v){var y="nth"!==h.slice(0,3),m="last"!==h.slice(-4),x="of-type"===e;return 1===g&&0===v?function(e){return!!e.parentNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]||(a[S]={}))[a.uniqueID]||(o[a.uniqueID]={}))[h]||[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]||(d=s=0)||u.pop())if(1===a.nodeType&&++d&&a===e){i[h]=[k,s,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]||(a[S]={}))[a.uniqueID]||(o[a.uniqueID]={}))[h]||[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]||(d=s=0)||u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]||(a[S]={}))[a.uniqueID]||(o[a.uniqueID]={}))[h]=[k,d]),a===e))break;return(d-=v)===g||d%g==0&&0<=d/g}}},PSEUDO:function(e,o){var t,a=b.pseudos[e]||b.setFilters[e.toLowerCase()]||se.error("unsupported pseudo: "+e);return a[S]?a(o):1<a.length?(t=[e,e,"",o],b.setFilters.hasOwnProperty(e.toLowerCase())?le(function(e,t){var n,r=a(e,o),i=r.length;while(i--)e[n=P(e,r[i])]=!(t[n]=r[i])}):function(e){return a(e,0,t)}):a}},pseudos:{not:le(function(e){var r=[],i=[],s=f(e.replace($,"$1"));return s[S]?le(function(e,t,n,r){var i,o=s(e,null,r,[]),a=e.length;while(a--)(i=o[a])&&(e[a]=!(t[a]=i))}):function(e,t,n){return r[0]=e,s(r,null,n,i),r[0]=null,!i.pop()}}),has:le(function(t){return function(e){return 0<se(t,e).length}}),contains:le(function(t){return t=t.replace(te,ne),function(e){return-1<(e.textContent||o(e)).indexOf(t)}}),lang:le(function(n){return V.test(n||"")||se.error("unsupported lang: "+n),n=n.replace(te,ne).toLowerCase(),function(e){var t;do{if(t=E?e.lang:e.getAttribute("xml:lang")||e.getAttribute("lang"))return(t=t.toLowerCase())===n||0===t.indexOf(n+"-")}while((e=e.parentNode)&&1===e.nodeType);return!1}}),target:function(e){var t=n.location&&n.location.hash;return t&&t.slice(1)===e.id},root:function(e){return e===a},focus:function(e){return e===C.activeElement&&(!C.hasFocus||C.hasFocus())&&!!(e.type||e.href||~e.tabIndex)},enabled:ge(!1),disabled:ge(!0),checked:function(e){var t=e.nodeName.toLowerCase();return"input"===t&&!!e.checked||"option"===t&&!!e.selected},selected:function(e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return J.test(e.nodeName)},input:function(e){return Q.test(e.nodeName)},button:function(e){var t=e.nodeName.toLowerCase();return"input"===t&&"button"===e.type||"button"===t},text:function(e){var t;return"input"===e.nodeName.toLowerCase()&&"text"===e.type&&(null==(t=e.getAttribute("type"))||"text"===t.toLowerCase())},first:ve(function(){return[0]}),last:ve(function(e,t){return[t-1]}),eq:ve(function(e,t,n){return[n<0?n+t:n]}),even:ve(function(e,t){for(var n=0;n<t;n+=2)e.push(n);return e}),odd:ve(function(e,t){for(var n=1;n<t;n+=2)e.push(n);return e}),lt:ve(function(e,t,n){for(var r=n<0?n+t:t<n?t:n;0<=--r;)e.push(r);return e}),gt:ve(function(e,t,n){for(var r=n<0?n+t:n;++r<t;)e.push(r);return e})}}).pseudos.nth=b.pseudos.eq,{radio:!0,checkbox:!0,file:!0,password:!0,image:!0})b.pseudos[e]=de(e);for(e in{submit:!0,reset:!0})b.pseudos[e]=he(e);function me(){}function xe(e){for(var t=0,n=e.length,r="";t<n;t++)r+=e[t].value;return r}function be(s,e,t){var u=e.dir,l=e.next,c=l||u,f=t&&"parentNode"===c,p=r++;return e.first?function(e,t,n){while(e=e[u])if(1===e.nodeType||f)return s(e,t,n);return!1}:function(e,t,n){var r,i,o,a=[k,p];if(n){while(e=e[u])if((1===e.nodeType||f)&&s(e,t,n))return!0}else while(e=e[u])if(1===e.nodeType||f)if(i=(o=e[S]||(e[S]={}))[e.uniqueID]||(o[e.uniqueID]={}),l&&l===e.nodeName.toLowerCase())e=e[u]||e;else{if((r=i[c])&&r[0]===k&&r[1]===p)return a[2]=r[2];if((i[c]=a)[2]=s(e,t,n))return!0}return!1}}function we(i){return 1<i.length?function(e,t,n){var r=i.length;while(r--)if(!i[r](e,t,n))return!1;return!0}:i[0]}function Te(e,t,n,r,i){for(var o,a=[],s=0,u=e.length,l=null!=t;s<u;s++)(o=e[s])&&(n&&!n(o,r,i)||(a.push(o),l&&t.push(s)));return a}function Ce(d,h,g,v,y,e){return v&&!v[S]&&(v=Ce(v)),y&&!y[S]&&(y=Ce(y,e)),le(function(e,t,n,r){var i,o,a,s=[],u=[],l=t.length,c=e||function(e,t,n){for(var r=0,i=t.length;r<i;r++)se(e,t[r],n);return n}(h||"*",n.nodeType?[n]:n,[]),f=!d||!e&&h?c:Te(c,s,d,n,r),p=g?y||(e?d:l||v)?[]:t:f;if(g&&g(f,p,n,r),v){i=Te(p,u),v(i,[],n,r),o=i.length;while(o--)(a=i[o])&&(p[u[o]]=!(f[u[o]]=a))}if(e){if(y||d){if(y){i=[],o=p.length;while(o--)(a=p[o])&&i.push(f[o]=a);y(null,p=[],i,r)}o=p.length;while(o--)(a=p[o])&&-1<(i=y?P(e,a):s[o])&&(e[i]=!(t[i]=a))}}else p=Te(p===t?p.splice(l,p.length):p),y?y(null,t,p,r):H.apply(t,p)})}function Ee(e){for(var i,t,n,r=e.length,o=b.relative[e[0].type],a=o||b.relative[" "],s=o?1:0,u=be(function(e){return e===i},a,!0),l=be(function(e){return-1<P(i,e)},a,!0),c=[function(e,t,n){var r=!o&&(n||t!==w)||((i=t).nodeType?u(e,t,n):l(e,t,n));return i=null,r}];s<r;s++)if(t=b.relative[e[s].type])c=[be(we(c),t)];else{if((t=b.filter[e[s].type].apply(null,e[s].matches))[S]){for(n=++s;n<r;n++)if(b.relative[e[n].type])break;return Ce(1<s&&we(c),1<s&&xe(e.slice(0,s-1).concat({value:" "===e[s-2].type?"*":""})).replace($,"$1"),t,s<n&&Ee(e.slice(s,n)),n<r&&Ee(e=e.slice(n)),n<r&&xe(e))}c.push(t)}return we(c)}return me.prototype=b.filters=b.pseudos,b.setFilters=new me,h=se.tokenize=function(e,t){var n,r,i,o,a,s,u,l=x[e+" "];if(l)return t?0:l.slice(0);a=e,s=[],u=b.preFilter;while(a){for(o in n&&!(r=_.exec(a))||(r&&(a=a.slice(r[0].length)||a),s.push(i=[])),n=!1,(r=z.exec(a))&&(n=r.shift(),i.push({value:n,type:r[0].replace($," ")}),a=a.slice(n.length)),b.filter)!(r=G[o].exec(a))||u[o]&&!(r=u[o](r))||(n=r.shift(),i.push({value:n,type:o,matches:r}),a=a.slice(n.length));if(!n)break}return t?a.length:a?se.error(e):x(e,s).slice(0)},f=se.compile=function(e,t){var n,v,y,m,x,r,i=[],o=[],a=A[e+" "];if(!a){t||(t=h(e)),n=t.length;while(n--)(a=Ee(t[n]))[S]?i.push(a):o.push(a);(a=A(e,(v=o,m=0<(y=i).length,x=0<v.length,r=function(e,t,n,r,i){var o,a,s,u=0,l="0",c=e&&[],f=[],p=w,d=e||x&&b.find.TAG("*",i),h=k+=null==p?1:Math.random()||.1,g=d.length;for(i&&(w=t==C||t||i);l!==g&&null!=(o=d[l]);l++){if(x&&o){a=0,t||o.ownerDocument==C||(T(o),n=!E);while(s=v[a++])if(s(o,t||C,n)){r.push(o);break}i&&(k=h)}m&&((o=!s&&o)&&u--,e&&c.push(o))}if(u+=l,m&&l!==u){a=0;while(s=y[a++])s(c,f,t,n);if(e){if(0<u)while(l--)c[l]||f[l]||(f[l]=q.call(r));f=Te(f)}H.apply(r,f),i&&!e&&0<f.length&&1<u+y.length&&se.uniqueSort(r)}return i&&(k=h,w=p),c},m?le(r):r))).selector=e}return a},g=se.select=function(e,t,n,r){var i,o,a,s,u,l="function"==typeof e&&e,c=!r&&h(e=l.selector||e);if(n=n||[],1===c.length){if(2<(o=c[0]=c[0].slice(0)).length&&"ID"===(a=o[0]).type&&9===t.nodeType&&E&&b.relative[o[1].type]){if(!(t=(b.find.ID(a.matches[0].replace(te,ne),t)||[])[0]))return n;l&&(t=t.parentNode),e=e.slice(o.shift().value.length)}i=G.needsContext.test(e)?0:o.length;while(i--){if(a=o[i],b.relative[s=a.type])break;if((u=b.find[s])&&(r=u(a.matches[0].replace(te,ne),ee.test(o[0].type)&&ye(t.parentNode)||t))){if(o.splice(i,1),!(e=r.length&&xe(o)))return H.apply(n,r),n;break}}}return(l||f(e,c))(r,t,!E,n,!t||ee.test(e)&&ye(t.parentNode)||t),n},d.sortStable=S.split("").sort(j).join("")===S,d.detectDuplicates=!!l,T(),d.sortDetached=ce(function(e){return 1&e.compareDocumentPosition(C.createElement("fieldset"))}),ce(function(e){return e.innerHTML="<a href='#'></a>","#"===e.firstChild.getAttribute("href")})||fe("type|href|height|width",function(e,t,n){if(!n)return e.getAttribute(t,"type"===t.toLowerCase()?1:2)}),d.attributes&&ce(function(e){return e.innerHTML="<input/>",e.firstChild.setAttribute("value",""),""===e.firstChild.getAttribute("value")})||fe("value",function(e,t,n){if(!n&&"input"===e.nodeName.toLowerCase())return e.defaultValue}),ce(function(e){return null==e.getAttribute("disabled")})||fe(R,function(e,t,n){var r;if(!n)return!0===e[t]?t.toLowerCase():(r=e.getAttributeNode(t))&&r.specified?r.value:null}),se}(C);S.find=d,S.expr=d.selectors,S.expr[":"]=S.expr.pseudos,S.uniqueSort=S.unique=d.uniqueSort,S.text=d.getText,S.isXMLDoc=d.isXML,S.contains=d.contains,S.escapeSelector=d.escape;var h=function(e,t,n){var r=[],i=void 0!==n;while((e=e[t])&&9!==e.nodeType)if(1===e.nodeType){if(i&&S(e).is(n))break;r.push(e)}return r},T=function(e,t){for(var n=[];e;e=e.nextSibling)1===e.nodeType&&e!==t&&n.push(e);return n},k=S.expr.match.needsContext;function A(e,t){return e.nodeName&&e.nodeName.toLowerCase()===t.toLowerCase()}var N=/^<([a-z][^\/\0>:\x20\t\r\n\f]*)[\x20\t\r\n\f]*\/?>(?:<\/\1>|)$/i;function j(e,n,r){return m(n)?S.grep(e,function(e,t){return!!n.call(e,t,e)!==r}):n.nodeType?S.grep(e,function(e){return e===n!==r}):"string"!=typeof n?S.grep(e,function(e){return-1<i.call(n,e)!==r}):S.filter(n,e,r)}S.filter=function(e,t,n){var r=t[0];return n&&(e=":not("+e+")"),1===t.length&&1===r.nodeType?S.find.matchesSelector(r,e)?[r]:[]:S.find.matches(e,S.grep(t,function(e){return 1===e.nodeType}))},S.fn.extend({find:function(e){var t,n,r=this.length,i=this;if("string"!=typeof e)return this.pushStack(S(e).filter(function(){for(t=0;t<r;t++)if(S.contains(i[t],this))return!0}));for(n=this.pushStack([]),t=0;t<r;t++)S.find(e,i[t],n);return 1<r?S.uniqueSort(n):n},filter:function(e){return this.pushStack(j(this,e||[],!1))},not:function(e){return this.pushStack(j(this,e||[],!0))},is:function(e){return!!j(this,"string"==typeof e&&k.test(e)?S(e):e||[],!1).length}});var D,q=/^(?:\s*(<[\w\W]+>)[^>]*|#([\w-]+))$/;(S.fn.init=function(e,t,n){var r,i;if(!e)return this;if(n=n||D,"string"==typeof e){if(!(r="<"===e[0]&&">"===e[e.length-1]&&3<=e.length?[null,e,null]:q.exec(e))||!r[1]&&t)return!t||t.jquery?(t||n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof S?t[0]:t,S.merge(this,S.parseHTML(r[1],t&&t.nodeType?t.ownerDocument||t:E,!0)),N.test(r[1])&&S.isPlainObject(t))for(r in t)m(this[r])?this[r](t[r]):this.attr(r,t[r]);return this}return(i=E.getElementById(r[2]))&&(this[0]=i,this.length=1),this}return e.nodeType?(this[0]=e,this.length=1,this):m(e)?void 0!==n.ready?n.ready(e):e(S):S.makeArray(e,this)}).prototype=S.fn,D=S(E);var L=/^(?:parents|prev(?:Until|All))/,H={children:!0,contents:!0,next:!0,prev:!0};function O(e,t){while((e=e[t])&&1!==e.nodeType);return e}S.fn.extend({has:function(e){var t=S(e,this),n=t.length;return this.filter(function(){for(var e=0;e<n;e++)if(S.contains(this,t[e]))return!0})},closest:function(e,t){var n,r=0,i=this.length,o=[],a="string"!=typeof e&&S(e);if(!k.test(e))for(;r<i;r++)for(n=this[r];n&&n!==t;n=n.parentNode)if(n.nodeType<11&&(a?-1<a.index(n):1===n.nodeType&&S.find.matchesSelector(n,e))){o.push(n);break}return this.pushStack(1<o.length?S.uniqueSort(o):o)},index:function(e){return e?"string"==typeof e?i.call(S(e),this[0]):i.call(this,e.jquery?e[0]:e):this[0]&&this[0].parentNode?this.first().prevAll().length:-1},add:function(e,t){return this.pushStack(S.uniqueSort(S.merge(this.get(),S(e,t))))},addBack:function(e){return this.add(null==e?this.prevObject:this.prevObject.filter(e))}}),S.each({parent:function(e){var t=e.parentNode;return t&&11!==t.nodeType?t:null},parents:function(e){return h(e,"parentNode")},parentsUntil:function(e,t,n){return h(e,"parentNode",n)},next:function(e){return O(e,"nextSibling")},prev:function(e){return O(e,"previousSibling")},nextAll:function(e){return h(e,"nextSibling")},prevAll:function(e){return h(e,"previousSibling")},nextUntil:function(e,t,n){return h(e,"nextSibling",n)},prevUntil:function(e,t,n){return h(e,"previousSibling",n)},siblings:function(e){return T((e.parentNode||{}).firstChild,e)},children:function(e){return T(e.firstChild)},contents:function(e){return null!=e.contentDocument&&r(e.contentDocument)?e.contentDocument:(A(e,"template")&&(e=e.content||e),S.merge([],e.childNodes))}},function(r,i){S.fn[r]=function(e,t){var n=S.map(this,i,e);return"Until"!==r.slice(-5)&&(t=e),t&&"string"==typeof t&&(n=S.filter(t,n)),1<this.length&&(H[r]||S.uniqueSort(n),L.test(r)&&n.reverse()),this.pushStack(n)}});var P=/[^\x20\t\r\n\f]+/g;function R(e){return e}function M(e){throw e}function I(e,t,n,r){var i;try{e&&m(i=e.promise)?i.call(e).done(t).fail(n):e&&m(i=e.then)?i.call(e,t,n):t.apply(void 0,[e].slice(r))}catch(e){n.apply(void 0,[e])}}S.Callbacks=function(r){var e,n;r="string"==typeof r?(e=r,n={},S.each(e.match(P)||[],function(e,t){n[t]=!0}),n):S.extend({},r);var i,t,o,a,s=[],u=[],l=-1,c=function(){for(a=a||r.once,o=i=!0;u.length;l=-1){t=u.shift();while(++l<s.length)!1===s[l].apply(t[0],t[1])&&r.stopOnFalse&&(l=s.length,t=!1)}r.memory||(t=!1),i=!1,a&&(s=t?[]:"")},f={add:function(){return s&&(t&&!i&&(l=s.length-1,u.push(t)),function n(e){S.each(e,function(e,t){m(t)?r.unique&&f.has(t)||s.push(t):t&&t.length&&"string"!==w(t)&&n(t)})}(arguments),t&&!i&&c()),this},remove:function(){return S.each(arguments,function(e,t){var n;while(-1<(n=S.inArray(t,s,n)))s.splice(n,1),n<=l&&l--}),this},has:function(e){return e?-1<S.inArray(e,s):0<s.length},empty:function(){return s&&(s=[]),this},disable:function(){return a=u=[],s=t="",this},disabled:function(){return!s},lock:function(){return a=u=[],t||i||(s=t=""),this},locked:function(){return!!a},fireWith:function(e,t){return a||(t=[e,(t=t||[]).slice?t.slice():t],u.push(t),i||c()),this},fire:function(){return f.fireWith(this,arguments),this},fired:function(){return!!o}};return f},S.extend({Deferred:function(e){var o=[["notify","progress",S.Callbacks("memory"),S.Callbacks("memory"),2],["resolve","done",S.Callbacks("once memory"),S.Callbacks("once memory"),0,"resolved"],["reject","fail",S.Callbacks("once memory"),S.Callbacks("once memory"),1,"rejected"]],i="pending",a={state:function(){return i},always:function(){return s.done(arguments).fail(arguments),this},"catch":function(e){return a.then(null,e)},pipe:function(){var i=arguments;return S.Deferred(function(r){S.each(o,function(e,t){var n=m(i[t[4]])&&i[t[4]];s[t[1]](function(){var e=n&&n.apply(this,arguments);e&&m(e.promise)?e.promise().progress(r.notify).done(r.resolve).fail(r.reject):r[t[0]+"With"](this,n?[e]:arguments)})}),i=null}).promise()},then:function(t,n,r){var u=0;function l(i,o,a,s){return function(){var n=this,r=arguments,e=function(){var e,t;if(!(i<u)){if((e=a.apply(n,r))===o.promise())throw new TypeError("Thenable self-resolution");t=e&&("object"==typeof e||"function"==typeof e)&&e.then,m(t)?s?t.call(e,l(u,o,R,s),l(u,o,M,s)):(u++,t.call(e,l(u,o,R,s),l(u,o,M,s),l(u,o,R,o.notifyWith))):(a!==R&&(n=void 0,r=[e]),(s||o.resolveWith)(n,r))}},t=s?e:function(){try{e()}catch(e){S.Deferred.exceptionHook&&S.Deferred.exceptionHook(e,t.stackTrace),u<=i+1&&(a!==M&&(n=void 0,r=[e]),o.rejectWith(n,r))}};i?t():(S.Deferred.getStackHook&&(t.stackTrace=S.Deferred.getStackHook()),C.setTimeout(t))}}return S.Deferred(function(e){o[0][3].add(l(0,e,m(r)?r:R,e.notifyWith)),o[1][3].add(l(0,e,m(t)?t:R)),o[2][3].add(l(0,e,m(n)?n:M))}).promise()},promise:function(e){return null!=e?S.extend(e,a):a}},s={};return S.each(o,function(e,t){var n=t[2],r=t[5];a[t[1]]=n.add,r&&n.add(function(){i=r},o[3-e][2].disable,o[3-e][3].disable,o[0][2].lock,o[0][3].lock),n.add(t[3].fire),s[t[0]]=function(){return s[t[0]+"With"](this===s?void 0:this,arguments),this},s[t[0]+"With"]=n.fireWith}),a.promise(s),e&&e.call(s,s),s},when:function(e){var n=arguments.length,t=n,r=Array(t),i=s.call(arguments),o=S.Deferred(),a=function(t){return function(e){r[t]=this,i[t]=1<arguments.length?s.call(arguments):e,--n||o.resolveWith(r,i)}};if(n<=1&&(I(e,o.done(a(t)).resolve,o.reject,!n),"pending"===o.state()||m(i[t]&&i[t].then)))return o.then();while(t--)I(i[t],a(t),o.reject);return o.promise()}});var W=/^(Eval|Internal|Range|Reference|Syntax|Type|URI)Error$/;S.Deferred.exceptionHook=function(e,t){C.console&&C.console.warn&&e&&W.test(e.name)&&C.console.warn("jQuery.Deferred exception: "+e.message,e.stack,t)},S.readyException=function(e){C.setTimeout(function(){throw e})};var F=S.Deferred();function B(){E.removeEventListener("DOMContentLoaded",B),C.removeEventListener("load",B),S.ready()}S.fn.ready=function(e){return F.then(e)["catch"](function(e){S.readyException(e)}),this},S.extend({isReady:!1,readyWait:1,ready:function(e){(!0===e?--S.readyWait:S.isReady)||(S.isReady=!0)!==e&&0<--S.readyWait||F.resolveWith(E,[S])}}),S.ready.then=F.then,"complete"===E.readyState||"loading"!==E.readyState&&!E.documentElement.doScroll?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)||(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){return t.toUpperCase()}function X(e){return e.replace(_,"ms-").replace(z,U)}var V=function(e){return 1===e.nodeType||9===e.nodeType||!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t||(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{value:t,configurable:!0}))),t},set:function(e,t,n){var r,i=this.cache(e);if("string"==typeof t)i[X(t)]=n;else for(r in t)i[X(r)]=t[r];return i},get:function(e,t){return void 0===t?this.cache(e):e[this.expando]&&e[this.expando][X(t)]},access:function(e,t,n){return void 0===t||t&&"string"==typeof t&&void 0===n?this.get(e,t):(this.set(e,t,n),void 0!==n?n:t)},remove:function(e,t){var n,r=e[this.expando];if(void 0!==r){if(void 0!==t){n=(t=Array.isArray(t)?t.map(X):(t=X(t))in r?[t]:t.match(P)||[]).length;while(n--)delete r[t[n]]}(void 0===t||S.isEmptyObject(r))&&(e.nodeType?e[this.expando]=void 0:delete e[this.expando])}},hasData:function(e){var t=e[this.expando];return void 0!==t&&!S.isEmptyObject(t)}};var Y=new G,Q=new G,J=/^(?:\{[\w\W]*\}|\[[\w\W]*\])$/,K=/[A-Z]/g;function Z(e,t,n){var r,i;if(void 0===n&&1===e.nodeType)if(r="data-"+t.replace(K,"-$&").toLowerCase(),"string"==typeof(n=e.getAttribute(r))){try{n="true"===(i=n)||"false"!==i&&("null"===i?null:i===+i+""?+i:J.test(i)?JSON.parse(i):i)}catch(e){}Q.set(e,t,n)}else n=void 0;return n}S.extend({hasData:function(e){return Q.hasData(e)||Y.hasData(e)},data:function(e,t,n){return Q.access(e,t,n)},removeData:function(e,t){Q.remove(e,t)},_data:function(e,t,n){return Y.access(e,t,n)},_removeData:function(e,t){Y.remove(e,t)}}),S.fn.extend({data:function(n,e){var t,r,i,o=this[0],a=o&&o.attributes;if(void 0===n){if(this.length&&(i=Q.get(o),1===o.nodeType&&!Y.get(o,"hasDataAttrs"))){t=a.length;while(t--)a[t]&&0===(r=a[t].name).indexOf("data-")&&(r=X(r.slice(5)),Z(o,r,i[r]));Y.set(o,"hasDataAttrs",!0)}return i}return"object"==typeof n?this.each(function(){Q.set(this,n)}):$(this,function(e){var t;if(o&&void 0===e)return void 0!==(t=Q.get(o,n))?t:void 0!==(t=Z(o,n))?t:void 0;this.each(function(){Q.set(this,n,e)})},null,e,1<arguments.length,null,!0)},removeData:function(e){return this.each(function(){Q.remove(this,e)})}}),S.extend({queue:function(e,t,n){var r;if(e)return t=(t||"fx")+"queue",r=Y.get(e,t),n&&(!r||Array.isArray(n)?r=Y.access(e,t,S.makeArray(n)):r.push(n)),r||[]},dequeue:function(e,t){t=t||"fx";var n=S.queue(e,t),r=n.length,i=n.shift(),o=S._queueHooks(e,t);"inprogress"===i&&(i=n.shift(),r--),i&&("fx"===t&&n.unshift("inprogress"),delete o.stop,i.call(e,function(){S.dequeue(e,t)},o)),!r&&o&&o.empty.fire()},_queueHooks:function(e,t){var n=t+"queueHooks";return Y.get(e,n)||Y.access(e,n,{empty:S.Callbacks("once memory").add(function(){Y.remove(e,[t+"queue",n])})})}}),S.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),arguments.length<e?S.queue(this[0],t):void 0===n?this:this.each(function(){var e=S.queue(this,t,n);S._queueHooks(this,t),"fx"===t&&"inprogress"!==e[0]&&S.dequeue(this,t)})},dequeue:function(e){return this.each(function(){S.dequeue(this,e)})},clearQueue:function(e){return this.queue(e||"fx",[])},promise:function(e,t){var n,r=1,i=S.Deferred(),o=this,a=this.length,s=function(){--r||i.resolveWith(o,[o])};"string"!=typeof e&&(t=e,e=void 0),e=e||"fx";while(a--)(n=Y.get(o[a],e+"queueHooks"))&&n.empty&&(r++,n.empty.add(s));return s(),i.promise(t)}});var ee=/[+-]?(?:\d*\.|)\d+(?:[eE][+-]?\d+|)/.source,te=new RegExp("^(?:([+-])=|)("+ee+")([a-z%]*)$","i"),ne=["Top","Right","Bottom","Left"],re=E.documentElement,ie=function(e){return S.contains(e.ownerDocument,e)},oe={composed:!0};re.getRootNode&&(ie=function(e){return S.contains(e.ownerDocument,e)||e.getRootNode(oe)===e.ownerDocument});var ae=function(e,t){return"none"===(e=t||e).style.display||""===e.style.display&&ie(e)&&"none"===S.css(e,"display")};function se(e,t,n,r){var i,o,a=20,s=r?function(){return r.cur()}:function(){return S.css(e,t,"")},u=s(),l=n&&n[3]||(S.cssNumber[t]?"":"px"),c=e.nodeType&&(S.cssNumber[t]||"px"!==l&&+u)&&te.exec(S.css(e,t));if(c&&c[3]!==l){u/=2,l=l||c[3],c=+u||1;while(a--)S.style(e,t,c+l),(1-o)*(1-(o=s()/u||.5))<=0&&(a=0),c/=o;c*=2,S.style(e,t,c+l),n=n||[]}return n&&(c=+c||+u||0,i=n[1]?c+(n[1]+1)*n[2]:+n[2],r&&(r.unit=l,r.start=c,r.end=i)),i}var ue={};function le(e,t){for(var n,r,i,o,a,s,u,l=[],c=0,f=e.length;c<f;c++)(r=e[c]).style&&(n=r.style.display,t?("none"===n&&(l[c]=Y.get(r,"display")||null,l[c]||(r.style.display="")),""===r.style.display&&ae(r)&&(l[c]=(u=a=o=void 0,a=(i=r).ownerDocument,s=i.nodeName,(u=ue[s])||(o=a.body.appendChild(a.createElement(s)),u=S.css(o,"display"),o.parentNode.removeChild(o),"none"===u&&(u="block"),ue[s]=u)))):"none"!==n&&(l[c]="none",Y.set(r,"display",n)));for(c=0;c<f;c++)null!=l[c]&&(e[c].style.display=l[c]);return e}S.fn.extend({show:function(){return le(this,!0)},hide:function(){return le(this)},toggle:function(e){return"boolean"==typeof e?e?this.show():this.hide():this.each(function(){ae(this)?S(this).show():S(this).hide()})}});var ce,fe,pe=/^(?:checkbox|radio)$/i,de=/<([a-z][^\/\0>\x20\t\r\n\f]*)/i,he=/^$|^module$|\/(?:java|ecma)script/i;ce=E.createDocumentFragment().appendChild(E.createElement("div")),(fe=E.createElement("input")).setAttribute("type","radio"),fe.setAttribute("checked","checked"),fe.setAttribute("name","t"),ce.appendChild(fe),y.checkClone=ce.cloneNode(!0).cloneNode(!0).lastChild.checked,ce.innerHTML="<textarea>x</textarea>",y.noCloneChecked=!!ce.cloneNode(!0).lastChild.defaultValue,ce.innerHTML="<option></option>",y.option=!!ce.lastChild;var ge={thead:[1,"<table>","</table>"],col:[2,"<table><colgroup>","</colgroup></table>"],tr:[2,"<table><tbody>","</tbody></table>"],td:[3,"<table><tbody><tr>","</tr></tbody></table>"],_default:[0,"",""]};function ve(e,t){var n;return n="undefined"!=typeof e.getElementsByTagName?e.getElementsByTagName(t||"*"):"undefined"!=typeof e.querySelectorAll?e.querySelectorAll(t||"*"):[],void 0===t||t&&A(e,t)?S.merge([e],n):n}function ye(e,t){for(var n=0,r=e.length;n<r;n++)Y.set(e[n],"globalEval",!t||Y.get(t[n],"globalEval"))}ge.tbody=ge.tfoot=ge.colgroup=ge.caption=ge.thead,ge.th=ge.td,y.option||(ge.optgroup=ge.option=[1,"<select multiple='multiple'>","</select>"]);var me=/<|&#?\w+;/;function xe(e,t,n,r,i){for(var o,a,s,u,l,c,f=t.createDocumentFragment(),p=[],d=0,h=e.length;d<h;d++)if((o=e[d])||0===o)if("object"===w(o))S.merge(p,o.nodeType?[o]:o);else if(me.test(o)){a=a||f.appendChild(t.createElement("div")),s=(de.exec(o)||["",""])[1].toLowerCase(),u=ge[s]||ge._default,a.innerHTML=u[1]+S.htmlPrefilter(o)+u[2],c=u[0];while(c--)a=a.lastChild;S.merge(p,a.childNodes),(a=f.firstChild).textContent=""}else p.push(t.createTextNode(o));f.textContent="",d=0;while(o=p[d++])if(r&&-1<S.inArray(o,r))i&&i.push(o);else if(l=ie(o),a=ve(f.appendChild(o),"script"),l&&ye(a),n){c=0;while(o=a[c++])he.test(o.type||"")&&n.push(o)}return f}var be=/^([^.]*)(?:\.(.+)|)/;function we(){return!0}function Te(){return!1}function Ce(e,t){return e===function(){try{return E.activeElement}catch(e){}}()==("focus"===t)}function Ee(e,t,n,r,i,o){var a,s;if("object"==typeof t){for(s in"string"!=typeof n&&(r=r||n,n=void 0),t)Ee(e,s,n,r,t[s],o);return e}if(null==r&&null==i?(i=n,r=n=void 0):null==i&&("string"==typeof n?(i=r,r=void 0):(i=r,r=n,n=void 0)),!1===i)i=Te;else if(!i)return e;return 1===o&&(a=i,(i=function(e){return S().off(e),a.apply(this,arguments)}).guid=a.guid||(a.guid=S.guid++)),e.each(function(){S.event.add(this,t,i,r,n)})}function Se(e,i,o){o?(Y.set(e,i,!1),S.event.add(e,i,{namespace:!1,handler:function(e){var t,n,r=Y.get(this,i);if(1&e.isTrigger&&this[i]){if(r.length)(S.event.special[i]||{}).delegateType&&e.stopPropagation();else if(r=s.call(arguments),Y.set(this,i,r),t=o(this,i),this[i](),r!==(n=Y.get(this,i))||t?Y.set(this,i,!1):n={},r!==n)return e.stopImmediatePropagation(),e.preventDefault(),n&&n.value}else r.length&&(Y.set(this,i,{value:S.event.trigger(S.extend(r[0],S.Event.prototype),r.slice(1),this)}),e.stopImmediatePropagation())}})):void 0===Y.get(e,i)&&S.event.add(e,i,we)}S.event={global:{},add:function(t,e,n,r,i){var o,a,s,u,l,c,f,p,d,h,g,v=Y.get(t);if(V(t)){n.handler&&(n=(o=n).handler,i=o.selector),i&&S.find.matchesSelector(re,i),n.guid||(n.guid=S.guid++),(u=v.events)||(u=v.events=Object.create(null)),(a=v.handle)||(a=v.handle=function(e){return"undefined"!=typeof S&&S.event.triggered!==e.type?S.event.dispatch.apply(t,arguments):void 0}),l=(e=(e||"").match(P)||[""]).length;while(l--)d=g=(s=be.exec(e[l])||[])[1],h=(s[2]||"").split(".").sort(),d&&(f=S.event.special[d]||{},d=(i?f.delegateType:f.bindType)||d,f=S.event.special[d]||{},c=S.extend({type:d,origType:g,data:r,handler:n,guid:n.guid,selector:i,needsContext:i&&S.expr.match.needsContext.test(i),namespace:h.join(".")},o),(p=u[d])||((p=u[d]=[]).delegateCount=0,f.setup&&!1!==f.setup.call(t,r,h,a)||t.addEventListener&&t.addEventListener(d,a)),f.add&&(f.add.call(t,c),c.handler.guid||(c.handler.guid=n.guid)),i?p.splice(p.delegateCount++,0,c):p.push(c),S.event.global[d]=!0)}},remove:function(e,t,n,r,i){var o,a,s,u,l,c,f,p,d,h,g,v=Y.hasData(e)&&Y.get(e);if(v&&(u=v.events)){l=(t=(t||"").match(P)||[""]).length;while(l--)if(d=g=(s=be.exec(t[l])||[])[1],h=(s[2]||"").split(".").sort(),d){f=S.event.special[d]||{},p=u[d=(r?f.delegateType:f.bindType)||d]||[],s=s[2]&&new RegExp("(^|\\.)"+h.join("\\.(?:.*\\.|)")+"(\\.|$)"),a=o=p.length;while(o--)c=p[o],!i&&g!==c.origType||n&&n.guid!==c.guid||s&&!s.test(c.namespace)||r&&r!==c.selector&&("**"!==r||!c.selector)||(p.splice(o,1),c.selector&&p.delegateCount--,f.remove&&f.remove.call(e,c));a&&!p.length&&(f.teardown&&!1!==f.teardown.call(e,h,v.handle)||S.removeEvent(e,d,v.handle),delete u[d])}else for(d in u)S.event.remove(e,d+t[l],n,r,!0);S.isEmptyObject(u)&&Y.remove(e,"handle events")}},dispatch:function(e){var t,n,r,i,o,a,s=new Array(arguments.length),u=S.event.fix(e),l=(Y.get(this,"events")||Object.create(null))[u.type]||[],c=S.event.special[u.type]||{};for(s[0]=u,t=1;t<arguments.length;t++)s[t]=arguments[t];if(u.delegateTarget=this,!c.preDispatch||!1!==c.preDispatch.call(this,u)){a=S.event.handlers.call(this,u,l),t=0;while((i=a[t++])&&!u.isPropagationStopped()){u.currentTarget=i.elem,n=0;while((o=i.handlers[n++])&&!u.isImmediatePropagationStopped())u.rnamespace&&!1!==o.namespace&&!u.rnamespace.test(o.namespace)||(u.handleObj=o,u.data=o.data,void 0!==(r=((S.event.special[o.origType]||{}).handle||o.handler).apply(i.elem,s))&&!1===(u.result=r)&&(u.preventDefault(),u.stopPropagation()))}return c.postDispatch&&c.postDispatch.call(this,u),u.result}},handlers:function(e,t){var n,r,i,o,a,s=[],u=t.delegateCount,l=e.target;if(u&&l.nodeType&&!("click"===e.type&&1<=e.button))for(;l!==this;l=l.parentNode||this)if(1===l.nodeType&&("click"!==e.type||!0!==l.disabled)){for(o=[],a={},n=0;n<u;n++)void 0===a[i=(r=t[n]).selector+" "]&&(a[i]=r.needsContext?-1<S(i,this).index(l):S.find(i,this,null,[l]).length),a[i]&&o.push(r);o.length&&s.push({elem:l,handlers:o})}return l=this,u<t.length&&s.push({elem:l,handlers:t.slice(u)}),s},addProp:function(t,e){Object.defineProperty(S.Event.prototype,t,{enumerable:!0,configurable:!0,get:m(e)?function(){if(this.originalEvent)return e(this.originalEvent)}:function(){if(this.originalEvent)return this.originalEvent[t]},set:function(e){Object.defineProperty(this,t,{enumerable:!0,configurable:!0,writable:!0,value:e})}})},fix:function(e){return e[S.expando]?e:new S.Event(e)},special:{load:{noBubble:!0},click:{setup:function(e){var t=this||e;return pe.test(t.type)&&t.click&&A(t,"input")&&Se(t,"click",we),!1},trigger:function(e){var t=this||e;return pe.test(t.type)&&t.click&&A(t,"input")&&Se(t,"click"),!0},_default:function(e){var t=e.target;return pe.test(t.type)&&t.click&&A(t,"input")&&Y.get(t,"click")||A(t,"a")}},beforeunload:{postDispatch:function(e){void 0!==e.result&&e.originalEvent&&(e.originalEvent.returnValue=e.result)}}}},S.removeEvent=function(e,t,n){e.removeEventListener&&e.removeEventListener(t,n)},S.Event=function(e,t){if(!(this instanceof S.Event))return new S.Event(e,t);e&&e.type?(this.originalEvent=e,this.type=e.type,this.isDefaultPrevented=e.defaultPrevented||void 0===e.defaultPrevented&&!1===e.returnValue?we:Te,this.target=e.target&&3===e.target.nodeType?e.target.parentNode:e.target,this.currentTarget=e.currentTarget,this.relatedTarget=e.relatedTarget):this.type=e,t&&S.extend(this,t),this.timeStamp=e&&e.timeStamp||Date.now(),this[S.expando]=!0},S.Event.prototype={constructor:S.Event,isDefaultPrevented:Te,isPropagationStopped:Te,isImmediatePropagationStopped:Te,isSimulated:!1,preventDefault:function(){var e=this.originalEvent;this.isDefaultPrevented=we,e&&!this.isSimulated&&e.preventDefault()},stopPropagation:function(){var e=this.originalEvent;this.isPropagationStopped=we,e&&!this.isSimulated&&e.stopPropagation()},stopImmediatePropagation:function(){var e=this.originalEvent;this.isImmediatePropagationStopped=we,e&&!this.isSimulated&&e.stopImmediatePropagation(),this.stopPropagation()}},S.each({altKey:!0,bubbles:!0,cancelable:!0,changedTouches:!0,ctrlKey:!0,detail:!0,eventPhase:!0,metaKey:!0,pageX:!0,pageY:!0,shiftKey:!0,view:!0,"char":!0,code:!0,charCode:!0,key:!0,keyCode:!0,button:!0,buttons:!0,clientX:!0,clientY:!0,offsetX:!0,offsetY:!0,pointerId:!0,pointerType:!0,screenX:!0,screenY:!0,targetTouches:!0,toElement:!0,touches:!0,which:!0},S.event.addProp),S.each({focus:"focusin",blur:"focusout"},function(e,t){S.event.special[e]={setup:function(){return Se(this,e,Ce),!1},trigger:function(){return Se(this,e),!0},_default:function(){return!0},delegateType:t}}),S.each({mouseenter:"mouseover",mouseleave:"mouseout",pointerenter:"pointerover",pointerleave:"pointerout"},function(e,i){S.event.special[e]={delegateType:i,bindType:i,handle:function(e){var t,n=e.relatedTarget,r=e.handleObj;return n&&(n===this||S.contains(this,n))||(e.type=r.origType,t=r.handler.apply(this,arguments),e.type=i),t}}}),S.fn.extend({on:function(e,t,n,r){return Ee(this,e,t,n,r)},one:function(e,t,n,r){return Ee(this,e,t,n,r,1)},off:function(e,t,n){var r,i;if(e&&e.preventDefault&&e.handleObj)return r=e.handleObj,S(e.delegateTarget).off(r.namespace?r.origType+"."+r.namespace:r.origType,r.selector,r.handler),this;if("object"==typeof e){for(i in e)this.off(i,t,e[i]);return this}return!1!==t&&"function"!=typeof t||(n=t,t=void 0),!1===n&&(n=Te),this.each(function(){S.event.remove(this,e,n,t)})}});var ke=/<script|<style|<link/i,Ae=/checked\s*(?:[^=]|=\s*.checked.)/i,Ne=/^\s*<!(?:\[CDATA\[|--)|(?:\]\]|--)>\s*$/g;function je(e,t){return A(e,"table")&&A(11!==t.nodeType?t:t.firstChild,"tr")&&S(e).children("tbody")[0]||e}function De(e){return e.type=(null!==e.getAttribute("type"))+"/"+e.type,e}function qe(e){return"true/"===(e.type||"").slice(0,5)?e.type=e.type.slice(5):e.removeAttribute("type"),e}function Le(e,t){var n,r,i,o,a,s;if(1===t.nodeType){if(Y.hasData(e)&&(s=Y.get(e).events))for(i in Y.remove(t,"handle events"),s)for(n=0,r=s[i].length;n<r;n++)S.event.add(t,i,s[i][n]);Q.hasData(e)&&(o=Q.access(e),a=S.extend({},o),Q.set(t,a))}}function He(n,r,i,o){r=g(r);var e,t,a,s,u,l,c=0,f=n.length,p=f-1,d=r[0],h=m(d);if(h||1<f&&"string"==typeof d&&!y.checkClone&&Ae.test(d))return n.each(function(e){var t=n.eq(e);h&&(r[0]=d.call(this,e,t.html())),He(t,r,i,o)});if(f&&(t=(e=xe(r,n[0].ownerDocument,!1,n,o)).firstChild,1===e.childNodes.length&&(e=t),t||o)){for(s=(a=S.map(ve(e,"script"),De)).length;c<f;c++)u=e,c!==p&&(u=S.clone(u,!0,!0),s&&S.merge(a,ve(u,"script"))),i.call(n[c],u,c);if(s)for(l=a[a.length-1].ownerDocument,S.map(a,qe),c=0;c<s;c++)u=a[c],he.test(u.type||"")&&!Y.access(u,"globalEval")&&S.contains(l,u)&&(u.src&&"module"!==(u.type||"").toLowerCase()?S._evalUrl&&!u.noModule&&S._evalUrl(u.src,{nonce:u.nonce||u.getAttribute("nonce")},l):b(u.textContent.replace(Ne,""),u,l))}return n}function Oe(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n||1!==r.nodeType||S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return e}S.extend({htmlPrefilter:function(e){return e},clone:function(e,t,n){var r,i,o,a,s,u,l,c=e.cloneNode(!0),f=ie(e);if(!(y.noCloneChecked||1!==e.nodeType&&11!==e.nodeType||S.isXMLDoc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l||(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o||ve(e),a=a||ve(c),r=0,i=o.length;r<i;r++)Le(o[r],a[r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEvent(n,r,t.handle);n[Y.expando]=void 0}n[Q.expando]&&(n[Q.expando]=void 0)}}}),S.fn.extend({detach:function(e){return Oe(this,e,!0)},remove:function(e){return Oe(this,e)},text:function(e){return $(this,function(e){return void 0===e?S.text(this):this.empty().each(function(){1!==this.nodeType&&11!==this.nodeType&&9!==this.nodeType||(this.textContent=e)})},null,e,arguments.length)},append:function(){return He(this,arguments,function(e){1!==this.nodeType&&11!==this.nodeType&&9!==this.nodeType||je(this,e).appendChild(e)})},prepend:function(){return He(this,arguments,function(e){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var t=je(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return He(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this)})},after:function(){return He(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this.nextSibling)})},empty:function(){for(var e,t=0;null!=(e=this[t]);t++)1===e.nodeType&&(S.cleanData(ve(e,!1)),e.textContent="");return this},clone:function(e,t){return e=null!=e&&e,t=null==t?e:t,this.map(function(){return S.clone(this,e,t)})},html:function(e){return $(this,function(e){var t=this[0]||{},n=0,r=this.length;if(void 0===e&&1===t.nodeType)return t.innerHTML;if("string"==typeof e&&!ke.test(e)&&!ge[(de.exec(e)||["",""])[1].toLowerCase()]){e=S.htmlPrefilter(e);try{for(;n<r;n++)1===(t=this[n]||{}).nodeType&&(S.cleanData(ve(t,!1)),t.innerHTML=e);t=0}catch(e){}}t&&this.empty().append(e)},null,e,arguments.length)},replaceWith:function(){var n=[];return He(this,arguments,function(e){var t=this.parentNode;S.inArray(this,n)<0&&(S.cleanData(ve(this)),t&&t.replaceChild(e,this))},n)}}),S.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(e,a){S.fn[e]=function(e){for(var t,n=[],r=S(e),i=r.length-1,o=0;o<=i;o++)t=o===i?this:this.clone(!0),S(r[o])[a](t),u.apply(n,t.get());return this.pushStack(n)}});var Pe=new RegExp("^("+ee+")(?!px)[a-z%]+$","i"),Re=function(e){var t=e.ownerDocument.defaultView;return t&&t.opener||(t=C),t.getComputedStyle(e)},Me=function(e,t,n){var r,i,o={};for(i in t)o[i]=e.style[i],e.style[i]=t[i];for(i in r=n.call(e),t)e.style[i]=o[i];return r},Ie=new RegExp(ne.join("|"),"i");function We(e,t,n){var r,i,o,a,s=e.style;return(n=n||Re(e))&&(""!==(a=n.getPropertyValue(t)||n[t])||ie(e)||(a=S.style(e,t)),!y.pixelBoxStyles()&&Pe.test(a)&&Ie.test(t)&&(r=s.width,i=s.minWidth,o=s.maxWidth,s.minWidth=s.maxWidth=s.width=a,a=n.width,s.width=r,s.minWidth=i,s.maxWidth=o)),void 0!==a?a+"":a}function Fe(e,t){return{get:function(){if(!e())return(this.get=t).apply(this,arguments);delete this.get}}}!function(){function e(){if(l){u.style.cssText="position:absolute;left:-11111px;width:60px;margin-top:1px;padding:0;border:0",l.style.cssText="position:relative;display:block;box-sizing:border-box;overflow:scroll;margin:auto;border:1px;padding:1px;width:60%;top:1%",re.appendChild(u).appendChild(l);var e=C.getComputedStyle(l);n="1%"!==e.top,s=12===t(e.marginLeft),l.style.right="60%",o=36===t(e.right),r=36===t(e.width),l.style.position="absolute",i=12===t(l.offsetWidth/3),re.removeChild(u),l=null}}function t(e){return Math.round(parseFloat(e))}var n,r,i,o,a,s,u=E.createElement("div"),l=E.createElement("div");l.style&&(l.style.backgroundClip="content-box",l.cloneNode(!0).style.backgroundClip="",y.clearCloneStyle="content-box"===l.style.backgroundClip,S.extend(y,{boxSizingReliable:function(){return e(),r},pixelBoxStyles:function(){return e(),o},pixelPosition:function(){return e(),n},reliableMarginLeft:function(){return e(),s},scrollboxSize:function(){return e(),i},reliableTrDimensions:function(){var e,t,n,r;return null==a&&(e=E.createElement("table"),t=E.createElement("tr"),n=E.createElement("div"),e.style.cssText="position:absolute;left:-11111px;border-collapse:separate",t.style.cssText="border:1px solid",t.style.height="1px",n.style.height="9px",n.style.display="block",re.appendChild(e).appendChild(t).appendChild(n),r=C.getComputedStyle(t),a=parseInt(r.height,10)+parseInt(r.borderTopWidth,10)+parseInt(r.borderBottomWidth,10)===t.offsetHeight,re.removeChild(e)),a}}))}();var Be=["Webkit","Moz","ms"],$e=E.createElement("div").style,_e={};function ze(e){var t=S.cssProps[e]||_e[e];return t||(e in $e?e:_e[e]=function(e){var t=e[0].toUpperCase()+e.slice(1),n=Be.length;while(n--)if((e=Be[n]+t)in $e)return e}(e)||e)}var Ue=/^(none|table(?!-c[ea]).+)/,Xe=/^--/,Ve={position:"absolute",visibility:"hidden",display:"block"},Ge={letterSpacing:"0",fontWeight:"400"};function Ye(e,t,n){var r=te.exec(t);return r?Math.max(0,r[2]-(n||0))+(r[3]||"px"):t}function Qe(e,t,n,r,i,o){var a="width"===t?1:0,s=0,u=0;if(n===(r?"border":"content"))return 0;for(;a<4;a+=2)"margin"===n&&(u+=S.css(e,n+ne[a],!0,i)),r?("content"===n&&(u-=S.css(e,"padding"+ne[a],!0,i)),"margin"!==n&&(u-=S.css(e,"border"+ne[a]+"Width",!0,i))):(u+=S.css(e,"padding"+ne[a],!0,i),"padding"!==n?u+=S.css(e,"border"+ne[a]+"Width",!0,i):s+=S.css(e,"border"+ne[a]+"Width",!0,i));return!r&&0<=o&&(u+=Math.max(0,Math.ceil(e["offset"+t[0].toUpperCase()+t.slice(1)]-o-u-s-.5))||0),u}function Je(e,t,n){var r=Re(e),i=(!y.boxSizingReliable()||n)&&"border-box"===S.css(e,"boxSizing",!1,r),o=i,a=We(e,t,r),s="offset"+t[0].toUpperCase()+t.slice(1);if(Pe.test(a)){if(!n)return a;a="auto"}return(!y.boxSizingReliable()&&i||!y.reliableTrDimensions()&&A(e,"tr")||"auto"===a||!parseFloat(a)&&"inline"===S.css(e,"display",!1,r))&&e.getClientRects().length&&(i="border-box"===S.css(e,"boxSizing",!1,r),(o=s in e)&&(a=e[s])),(a=parseFloat(a)||0)+Qe(e,t,n||(i?"border":"content"),o,r,a)+"px"}function Ke(e,t,n,r,i){return new Ke.prototype.init(e,t,n,r,i)}S.extend({cssHooks:{opacity:{get:function(e,t){if(t){var n=We(e,"opacity");return""===n?"1":n}}}},cssNumber:{animationIterationCount:!0,columnCount:!0,fillOpacity:!0,flexGrow:!0,flexShrink:!0,fontWeight:!0,gridArea:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnStart:!0,gridRow:!0,gridRowEnd:!0,gridRowStart:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,widows:!0,zIndex:!0,zoom:!0},cssProps:{},style:function(e,t,n,r){if(e&&3!==e.nodeType&&8!==e.nodeType&&e.style){var i,o,a,s=X(t),u=Xe.test(t),l=e.style;if(u||(t=ze(s)),a=S.cssHooks[t]||S.cssHooks[s],void 0===n)return a&&"get"in a&&void 0!==(i=a.get(e,!1,r))?i:l[t];"string"===(o=typeof n)&&(i=te.exec(n))&&i[1]&&(n=se(e,t,i),o="number"),null!=n&&n==n&&("number"!==o||u||(n+=i&&i[3]||(S.cssNumber[s]?"":"px")),y.clearCloneStyle||""!==n||0!==t.indexOf("background")||(l[t]="inherit"),a&&"set"in a&&void 0===(n=a.set(e,n,r))||(u?l.setProperty(t,n):l[t]=n))}},css:function(e,t,n,r){var i,o,a,s=X(t);return Xe.test(t)||(t=ze(s)),(a=S.cssHooks[t]||S.cssHooks[s])&&"get"in a&&(i=a.get(e,!0,n)),void 0===i&&(i=We(e,t,r)),"normal"===i&&t in Ge&&(i=Ge[t]),""===n||n?(o=parseFloat(i),!0===n||isFinite(o)?o||0:i):i}}),S.each(["height","width"],function(e,u){S.cssHooks[u]={get:function(e,t,n){if(t)return!Ue.test(S.css(e,"display"))||e.getClientRects().length&&e.getBoundingClientRect().width?Je(e,u,n):Me(e,Ve,function(){return Je(e,u,n)})},set:function(e,t,n){var r,i=Re(e),o=!y.scrollboxSize()&&"absolute"===i.position,a=(o||n)&&"border-box"===S.css(e,"boxSizing",!1,i),s=n?Qe(e,u,n,a,i):0;return a&&o&&(s-=Math.ceil(e["offset"+u[0].toUpperCase()+u.slice(1)]-parseFloat(i[u])-Qe(e,u,"border",!1,i)-.5)),s&&(r=te.exec(t))&&"px"!==(r[3]||"px")&&(e.style[u]=t,t=S.css(e,u)),Ye(0,t,s)}}}),S.cssHooks.marginLeft=Fe(y.reliableMarginLeft,function(e,t){if(t)return(parseFloat(We(e,"marginLeft"))||e.getBoundingClientRect().left-Me(e,{marginLeft:0},function(){return e.getBoundingClientRect().left}))+"px"}),S.each({margin:"",padding:"",border:"Width"},function(i,o){S.cssHooks[i+o]={expand:function(e){for(var t=0,n={},r="string"==typeof e?e.split(" "):[e];t<4;t++)n[i+ne[t]+o]=r[t]||r[t-2]||r[0];return n}},"margin"!==i&&(S.cssHooks[i+o].set=Ye)}),S.fn.extend({css:function(e,t){return $(this,function(e,t,n){var r,i,o={},a=0;if(Array.isArray(t)){for(r=Re(e),i=t.length;a<i;a++)o[t[a]]=S.css(e,t[a],!1,r);return o}return void 0!==n?S.style(e,t,n):S.css(e,t)},e,t,1<arguments.length)}}),((S.Tween=Ke).prototype={constructor:Ke,init:function(e,t,n,r,i,o){this.elem=e,this.prop=n,this.easing=i||S.easing._default,this.options=t,this.start=this.now=this.cur(),this.end=r,this.unit=o||(S.cssNumber[n]?"":"px")},cur:function(){var e=Ke.propHooks[this.prop];return e&&e.get?e.get(this):Ke.propHooks._default.get(this)},run:function(e){var t,n=Ke.propHooks[this.prop];return this.options.duration?this.pos=t=S.easing[this.easing](e,this.options.duration*e,0,1,this.options.duration):this.pos=t=e,this.now=(this.end-this.start)*t+this.start,this.options.step&&this.options.step.call(this.elem,this.now,this),n&&n.set?n.set(this):Ke.propHooks._default.set(this),this}}).init.prototype=Ke.prototype,(Ke.propHooks={_default:{get:function(e){var t;return 1!==e.elem.nodeType||null!=e.elem[e.prop]&&null==e.elem.style[e.prop]?e.elem[e.prop]:(t=S.css(e.elem,e.prop,""))&&"auto"!==t?t:0},set:function(e){S.fx.step[e.prop]?S.fx.step[e.prop](e):1!==e.elem.nodeType||!S.cssHooks[e.prop]&&null==e.elem.style[ze(e.prop)]?e.elem[e.prop]=e.now:S.style(e.elem,e.prop,e.now+e.unit)}}}).scrollTop=Ke.propHooks.scrollLeft={set:function(e){e.elem.nodeType&&e.elem.parentNode&&(e.elem[e.prop]=e.now)}},S.easing={linear:function(e){return e},swing:function(e){return.5-Math.cos(e*Math.PI)/2},_default:"swing"},S.fx=Ke.prototype.init,S.fx.step={};var Ze,et,tt,nt,rt=/^(?:toggle|show|hide)$/,it=/queueHooks$/;function ot(){et&&(!1===E.hidden&&C.requestAnimationFrame?C.requestAnimationFrame(ot):C.setTimeout(ot,S.fx.interval),S.fx.tick())}function at(){return C.setTimeout(function(){Ze=void 0}),Ze=Date.now()}function st(e,t){var n,r=0,i={height:e};for(t=t?1:0;r<4;r+=2-t)i["margin"+(n=ne[r])]=i["padding"+n]=e;return t&&(i.opacity=i.width=e),i}function ut(e,t,n){for(var r,i=(lt.tweeners[t]||[]).concat(lt.tweeners["*"]),o=0,a=i.length;o<a;o++)if(r=i[o].call(n,t,e))return r}function lt(o,e,t){var n,a,r=0,i=lt.prefilters.length,s=S.Deferred().always(function(){delete u.elem}),u=function(){if(a)return!1;for(var e=Ze||at(),t=Math.max(0,l.startTime+l.duration-e),n=1-(t/l.duration||0),r=0,i=l.tweens.length;r<i;r++)l.tweens[r].run(n);return s.notifyWith(o,[l,n,t]),n<1&&i?t:(i||s.notifyWith(o,[l,1,0]),s.resolveWith(o,[l]),!1)},l=s.promise({elem:o,props:S.extend({},e),opts:S.extend(!0,{specialEasing:{},easing:S.easing._default},t),originalProperties:e,originalOptions:t,startTime:Ze||at(),duration:t.duration,tweens:[],createTween:function(e,t){var n=S.Tween(o,l.opts,e,t,l.opts.specialEasing[e]||l.opts.easing);return l.tweens.push(n),n},stop:function(e){var t=0,n=e?l.tweens.length:0;if(a)return this;for(a=!0;t<n;t++)l.tweens[t].run(1);return e?(s.notifyWith(o,[l,1,0]),s.resolveWith(o,[l,e])):s.rejectWith(o,[l,e]),this}}),c=l.props;for(!function(e,t){var n,r,i,o,a;for(n in e)if(i=t[r=X(n)],o=e[n],Array.isArray(o)&&(i=o[1],o=e[n]=o[0]),n!==r&&(e[r]=o,delete e[n]),(a=S.cssHooks[r])&&"expand"in a)for(n in o=a.expand(o),delete e[r],o)n in e||(e[n]=o[n],t[n]=i);else t[r]=i}(c,l.opts.specialEasing);r<i;r++)if(n=lt.prefilters[r].call(l,o,c,l.opts))return m(n.stop)&&(S._queueHooks(l.elem,l.opts.queue).stop=n.stop.bind(n)),n;return S.map(c,ut,l),m(l.opts.start)&&l.opts.start.call(o,l),l.progress(l.opts.progress).done(l.opts.done,l.opts.complete).fail(l.opts.fail).always(l.opts.always),S.fx.timer(S.extend(u,{elem:o,anim:l,queue:l.opts.queue})),l}S.Animation=S.extend(lt,{tweeners:{"*":[function(e,t){var n=this.createTween(e,t);return se(n.elem,e,te.exec(t),n),n}]},tweener:function(e,t){m(e)?(t=e,e=["*"]):e=e.match(P);for(var n,r=0,i=e.length;r<i;r++)n=e[r],lt.tweeners[n]=lt.tweeners[n]||[],lt.tweeners[n].unshift(t)},prefilters:[function(e,t,n){var r,i,o,a,s,u,l,c,f="width"in t||"height"in t,p=this,d={},h=e.style,g=e.nodeType&&ae(e),v=Y.get(e,"fxshow");for(r in n.queue||(null==(a=S._queueHooks(e,"fx")).unqueued&&(a.unqueued=0,s=a.empty.fire,a.empty.fire=function(){a.unqueued||s()}),a.unqueued++,p.always(function(){p.always(function(){a.unqueued--,S.queue(e,"fx").length||a.empty.fire()})})),t)if(i=t[r],rt.test(i)){if(delete t[r],o=o||"toggle"===i,i===(g?"hide":"show")){if("show"!==i||!v||void 0===v[r])continue;g=!0}d[r]=v&&v[r]||S.style(e,r)}if((u=!S.isEmptyObject(t))||!S.isEmptyObject(d))for(r in f&&1===e.nodeType&&(n.overflow=[h.overflow,h.overflowX,h.overflowY],null==(l=v&&v.display)&&(l=Y.get(e,"display")),"none"===(c=S.css(e,"display"))&&(l?c=l:(le([e],!0),l=e.style.display||l,c=S.css(e,"display"),le([e]))),("inline"===c||"inline-block"===c&&null!=l)&&"none"===S.css(e,"float")&&(u||(p.done(function(){h.display=l}),null==l&&(c=h.display,l="none"===c?"":c)),h.display="inline-block")),n.overflow&&(h.overflow="hidden",p.always(function(){h.overflow=n.overflow[0],h.overflowX=n.overflow[1],h.overflowY=n.overflow[2]})),u=!1,d)u||(v?"hidden"in v&&(g=v.hidden):v=Y.access(e,"fxshow",{display:l}),o&&(v.hidden=!g),g&&le([e],!0),p.done(function(){for(r in g||le([e]),Y.remove(e,"fxshow"),d)S.style(e,r,d[r])})),u=ut(g?v[r]:0,r,p),r in v||(v[r]=u.start,g&&(u.end=u.start,u.start=0))}],prefilter:function(e,t){t?lt.prefilters.unshift(e):lt.prefilters.push(e)}}),S.speed=function(e,t,n){var r=e&&"object"==typeof e?S.extend({},e):{complete:n||!n&&t||m(e)&&e,duration:e,easing:n&&t||t&&!m(t)&&t};return S.fx.off?r.duration=0:"number"!=typeof r.duration&&(r.duration in S.fx.speeds?r.duration=S.fx.speeds[r.duration]:r.duration=S.fx.speeds._default),null!=r.queue&&!0!==r.queue||(r.queue="fx"),r.old=r.complete,r.complete=function(){m(r.old)&&r.old.call(this),r.queue&&S.dequeue(this,r.queue)},r},S.fn.extend({fadeTo:function(e,t,n,r){return this.filter(ae).css("opacity",0).show().end().animate({opacity:t},e,n,r)},animate:function(t,e,n,r){var i=S.isEmptyObject(t),o=S.speed(e,n,r),a=function(){var e=lt(this,S.extend({},t),o);(i||Y.get(this,"finish"))&&e.stop(!0)};return a.finish=a,i||!1===o.queue?this.each(a):this.queue(o.queue,a)},stop:function(i,e,o){var a=function(e){var t=e.stop;delete e.stop,t(o)};return"string"!=typeof i&&(o=e,e=i,i=void 0),e&&this.queue(i||"fx",[]),this.each(function(){var e=!0,t=null!=i&&i+"queueHooks",n=S.timers,r=Y.get(this);if(t)r[t]&&r[t].stop&&a(r[t]);else for(t in r)r[t]&&r[t].stop&&it.test(t)&&a(r[t]);for(t=n.length;t--;)n[t].elem!==this||null!=i&&n[t].queue!==i||(n[t].anim.stop(o),e=!1,n.splice(t,1));!e&&o||S.dequeue(this,i)})},finish:function(a){return!1!==a&&(a=a||"fx"),this.each(function(){var e,t=Y.get(this),n=t[a+"queue"],r=t[a+"queueHooks"],i=S.timers,o=n?n.length:0;for(t.finish=!0,S.queue(this,a,[]),r&&r.stop&&r.stop.call(this,!0),e=i.length;e--;)i[e].elem===this&&i[e].queue===a&&(i[e].anim.stop(!0),i.splice(e,1));for(e=0;e<o;e++)n[e]&&n[e].finish&&n[e].finish.call(this);delete t.finish})}}),S.each(["toggle","show","hide"],function(e,r){var i=S.fn[r];S.fn[r]=function(e,t,n){return null==e||"boolean"==typeof e?i.apply(this,arguments):this.animate(st(r,!0),e,t,n)}}),S.each({slideDown:st("show"),slideUp:st("hide"),slideToggle:st("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{opacity:"toggle"}},function(e,r){S.fn[e]=function(e,t,n){return this.animate(r,e,t,n)}}),S.timers=[],S.fx.tick=function(){var e,t=0,n=S.timers;for(Ze=Date.now();t<n.length;t++)(e=n[t])()||n[t]!==e||n.splice(t--,1);n.length||S.fx.stop(),Ze=void 0},S.fx.timer=function(e){S.timers.push(e),S.fx.start()},S.fx.interval=13,S.fx.start=function(){et||(et=!0,ot())},S.fx.stop=function(){et=null},S.fx.speeds={slow:600,fast:200,_default:400},S.fn.delay=function(r,e){return r=S.fx&&S.fx.speeds[r]||r,e=e||"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},tt=E.createElement("input"),nt=E.createElement("select").appendChild(E.createElement("option")),tt.type="checkbox",y.checkOn=""!==tt.value,y.optSelected=nt.selected,(tt=E.createElement("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;var ct,ft=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $(this,S.attr,e,t,1<arguments.length)},removeAttr:function(e){return this.each(function(){S.removeAttr(this,e)})}}),S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)||(i=S.attrHooks[t.toLowerCase()]||(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.setAttribute(t,n+""),n):i&&"get"in i&&null!==(r=i.get(e,t))?r:null==(r=S.find.attr(e,t))?void 0:r)},attrHooks:{type:{set:function(e,t){if(!y.radioValue&&"radio"===t&&A(e,"input")){var n=e.value;return e.setAttribute("type",t),n&&(e.value=n),t}}}},removeAttr:function(e,t){var n,r=0,i=t&&t.match(P);if(i&&1===e.nodeType)while(n=i[r++])e.removeAttribute(n)}}),ct={set:function(e,t,n){return!1===t?S.removeAttr(e,n):e.setAttribute(n,n),n}},S.each(S.expr.match.bool.source.match(/\w+/g),function(e,t){var a=ft[t]||S.find.attr;ft[t]=function(e,t,n){var r,i,o=t.toLowerCase();return n||(i=ft[o],ft[o]=r,r=null!=a(e,t,n)?o:null,ft[o]=i),r}});var pt=/^(?:input|select|textarea|button)$/i,dt=/^(?:a|area)$/i;function ht(e){return(e.match(P)||[]).join(" ")}function gt(e){return e.getAttribute&&e.getAttribute("class")||""}function vt(e){return Array.isArray(e)?e:"string"==typeof e&&e.match(P)||[]}S.fn.extend({prop:function(e,t){return $(this,S.prop,e,t,1<arguments.length)},removeProp:function(e){return this.each(function(){delete this[S.propFix[e]||e]})}}),S.extend({prop:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return 1===o&&S.isXMLDoc(e)||(t=S.propFix[t]||t,i=S.propHooks[t]),void 0!==n?i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=S.find.attr(e,"tabindex");return t?parseInt(t,10):pt.test(e.nodeName)||dt.test(e.nodeName)&&e.href?0:-1}}},propFix:{"for":"htmlFor","class":"className"}}),y.optSelected||(S.propHooks.selected={get:function(e){var t=e.parentNode;return t&&t.parentNode&&t.parentNode.selectedIndex,null},set:function(e){var t=e.parentNode;t&&(t.selectedIndex,t.parentNode&&t.parentNode.selectedIndex)}}),S.each(["tabIndex","readOnly","maxLength","cellSpacing","cellPadding","rowSpan","colSpan","useMap","frameBorder","contentEditable"],function(){S.propFix[this.toLowerCase()]=this}),S.fn.extend({addClass:function(t){var e,n,r,i,o,a,s,u=0;if(m(t))return this.each(function(e){S(this).addClass(t.call(this,e,gt(this)))});if((e=vt(t)).length)while(n=this[u++])if(i=gt(n),r=1===n.nodeType&&" "+ht(i)+" "){a=0;while(o=e[a++])r.indexOf(" "+o+" ")<0&&(r+=o+" ");i!==(s=ht(r))&&n.setAttribute("class",s)}return this},removeClass:function(t){var e,n,r,i,o,a,s,u=0;if(m(t))return this.each(function(e){S(this).removeClass(t.call(this,e,gt(this)))});if(!arguments.length)return this.attr("class","");if((e=vt(t)).length)while(n=this[u++])if(i=gt(n),r=1===n.nodeType&&" "+ht(i)+" "){a=0;while(o=e[a++])while(-1<r.indexOf(" "+o+" "))r=r.replace(" "+o+" "," ");i!==(s=ht(r))&&n.setAttribute("class",s)}return this},toggleClass:function(i,t){var o=typeof i,a="string"===o||Array.isArray(i);return"boolean"==typeof t&&a?t?this.addClass(i):this.removeClass(i):m(i)?this.each(function(e){S(this).toggleClass(i.call(this,e,gt(this),t),t)}):this.each(function(){var e,t,n,r;if(a){t=0,n=S(this),r=vt(i);while(e=r[t++])n.hasClass(e)?n.removeClass(e):n.addClass(e)}else void 0!==i&&"boolean"!==o||((e=gt(this))&&Y.set(this,"__className__",e),this.setAttribute&&this.setAttribute("class",e||!1===i?"":Y.get(this,"__className__")||""))})},hasClass:function(e){var t,n,r=0;t=" "+e+" ";while(n=this[r++])if(1===n.nodeType&&-1<(" "+ht(gt(n))+" ").indexOf(t))return!0;return!1}});var yt=/\r/g;S.fn.extend({val:function(n){var r,e,i,t=this[0];return arguments.length?(i=m(n),this.each(function(e){var t;1===this.nodeType&&(null==(t=i?n.call(this,e,S(this).val()):n)?t="":"number"==typeof t?t+="":Array.isArray(t)&&(t=S.map(t,function(e){return null==e?"":e+""})),(r=S.valHooks[this.type]||S.valHooks[this.nodeName.toLowerCase()])&&"set"in r&&void 0!==r.set(this,t,"value")||(this.value=t))})):t?(r=S.valHooks[t.type]||S.valHooks[t.nodeName.toLowerCase()])&&"get"in r&&void 0!==(e=r.get(t,"value"))?e:"string"==typeof(e=t.value)?e.replace(yt,""):null==e?"":e:void 0}}),S.extend({valHooks:{option:{get:function(e){var t=S.find.attr(e,"value");return null!=t?t:ht(S.text(e))}},select:{get:function(e){var t,n,r,i=e.options,o=e.selectedIndex,a="select-one"===e.type,s=a?null:[],u=a?o+1:i.length;for(r=o<0?u:a?o:0;r<u;r++)if(((n=i[r]).selected||r===o)&&!n.disabled&&(!n.parentNode.disabled||!A(n.parentNode,"optgroup"))){if(t=S(n).val(),a)return t;s.push(t)}return s},set:function(e,t){var n,r,i=e.options,o=S.makeArray(t),a=i.length;while(a--)((r=i[a]).selected=-1<S.inArray(S.valHooks.option.get(r),o))&&(n=!0);return n||(e.selectedIndex=-1),o}}}}),S.each(["radio","checkbox"],function(){S.valHooks[this]={set:function(e,t){if(Array.isArray(t))return e.checked=-1<S.inArray(S(e).val(),t)}},y.checkOn||(S.valHooks[this].get=function(e){return null===e.getAttribute("value")?"on":e.value})}),y.focusin="onfocusin"in C;var mt=/^(?:focusinfocus|focusoutblur)$/,xt=function(e){e.stopPropagation()};S.extend(S.event,{trigger:function(e,t,n,r){var i,o,a,s,u,l,c,f,p=[n||E],d=v.call(e,"type")?e.type:e,h=v.call(e,"namespace")?e.namespace.split("."):[];if(o=f=a=n=n||E,3!==n.nodeType&&8!==n.nodeType&&!mt.test(d+S.event.triggered)&&(-1<d.indexOf(".")&&(d=(h=d.split(".")).shift(),h.sort()),u=d.indexOf(":")<0&&"on"+d,(e=e[S.expando]?e:new S.Event(d,"object"==typeof e&&e)).isTrigger=r?2:3,e.namespace=h.join("."),e.rnamespace=e.namespace?new RegExp("(^|\\.)"+h.join("\\.(?:.*\\.|)")+"(\\.|$)"):null,e.result=void 0,e.target||(e.target=n),t=null==t?[e]:S.makeArray(t,[e]),c=S.event.special[d]||{},r||!c.trigger||!1!==c.trigger.apply(n,t))){if(!r&&!c.noBubble&&!x(n)){for(s=c.delegateType||d,mt.test(s+d)||(o=o.parentNode);o;o=o.parentNode)p.push(o),a=o;a===(n.ownerDocument||E)&&p.push(a.defaultView||a.parentWindow||C)}i=0;while((o=p[i++])&&!e.isPropagationStopped())f=o,e.type=1<i?s:c.bindType||d,(l=(Y.get(o,"events")||Object.create(null))[e.type]&&Y.get(o,"handle"))&&l.apply(o,t),(l=u&&o[u])&&l.apply&&V(o)&&(e.result=l.apply(o,t),!1===e.result&&e.preventDefault());return e.type=d,r||e.isDefaultPrevented()||c._default&&!1!==c._default.apply(p.pop(),t)||!V(n)||u&&m(n[d])&&!x(n)&&((a=n[u])&&(n[u]=null),S.event.triggered=d,e.isPropagationStopped()&&f.addEventListener(d,xt),n[d](),e.isPropagationStopped()&&f.removeEventListener(d,xt),S.event.triggered=void 0,a&&(n[u]=a)),e.result}},simulate:function(e,t,n){var r=S.extend(new S.Event,n,{type:e,isSimulated:!0});S.event.trigger(r,null,t)}}),S.fn.extend({trigger:function(e,t){return this.each(function(){S.event.trigger(e,t,this)})},triggerHandler:function(e,t){var n=this[0];if(n)return S.event.trigger(e,t,n,!0)}}),y.focusin||S.each({focus:"focusin",blur:"focusout"},function(n,r){var i=function(e){S.event.simulate(r,e.target,S.event.fix(e))};S.event.special[r]={setup:function(){var e=this.ownerDocument||this.document||this,t=Y.access(e,r);t||e.addEventListener(n,i,!0),Y.access(e,r,(t||0)+1)},teardown:function(){var e=this.ownerDocument||this.document||this,t=Y.access(e,r)-1;t?Y.access(e,r,t):(e.removeEventListener(n,i,!0),Y.remove(e,r))}}});var bt=C.location,wt={guid:Date.now()},Tt=/\?/;S.parseXML=function(e){var t,n;if(!e||"string"!=typeof e)return null;try{t=(new C.DOMParser).parseFromString(e,"text/xml")}catch(e){}return n=t&&t.getElementsByTagName("parsererror")[0],t&&!n||S.error("Invalid XML: "+(n?S.map(n.childNodes,function(e){return e.textContent}).join("\n"):e)),t};var Ct=/\[\]$/,Et=/\r?\n/g,St=/^(?:submit|button|image|reset|file)$/i,kt=/^(?:input|select|textarea|keygen)/i;function At(n,e,r,i){var t;if(Array.isArray(e))S.each(e,function(e,t){r||Ct.test(n)?i(n,t):At(n+"["+("object"==typeof t&&null!=t?e:"")+"]",t,r,i)});else if(r||"object"!==w(e))i(n,e);else for(t in e)At(n+"["+t+"]",e[t],r,i)}S.param=function(e,t){var n,r=[],i=function(e,t){var n=m(t)?t():t;r[r.length]=encodeURIComponent(e)+"="+encodeURIComponent(null==n?"":n)};if(null==e)return"";if(Array.isArray(e)||e.jquery&&!S.isPlainObject(e))S.each(e,function(){i(this.name,this.value)});else for(n in e)At(n,e[n],t,i);return r.join("&")},S.fn.extend({serialize:function(){return S.param(this.serializeArray())},serializeArray:function(){return this.map(function(){var e=S.prop(this,"elements");return e?S.makeArray(e):this}).filter(function(){var e=this.type;return this.name&&!S(this).is(":disabled")&&kt.test(this.nodeName)&&!St.test(e)&&(this.checked||!pe.test(e))}).map(function(e,t){var n=S(this).val();return null==n?null:Array.isArray(n)?S.map(n,function(e){return{name:t.name,value:e.replace(Et,"\r\n")}}):{name:t.name,value:n.replace(Et,"\r\n")}}).get()}});var Nt=/%20/g,jt=/#.*$/,Dt=/([?&])_=[^&]*/,qt=/^(.*?):[ \t]*([^\r\n]*)$/gm,Lt=/^(?:GET|HEAD)$/,Ht=/^\/\//,Ot={},Pt={},Rt="*/".concat("*"),Mt=E.createElement("a");function It(o){return function(e,t){"string"!=typeof e&&(t=e,e="*");var n,r=0,i=e.toLowerCase().match(P)||[];if(m(t))while(n=i[r++])"+"===n[0]?(n=n.slice(1)||"*",(o[n]=o[n]||[]).unshift(t)):(o[n]=o[n]||[]).push(t)}}function Wt(t,i,o,a){var s={},u=t===Pt;function l(e){var r;return s[e]=!0,S.each(t[e]||[],function(e,t){var n=t(i,o,a);return"string"!=typeof n||u||s[n]?u?!(r=n):void 0:(i.dataTypes.unshift(n),l(n),!1)}),r}return l(i.dataTypes[0])||!s["*"]&&l("*")}function Ft(e,t){var n,r,i=S.ajaxSettings.flatOptions||{};for(n in t)void 0!==t[n]&&((i[n]?e:r||(r={}))[n]=t[n]);return r&&S.extend(!0,e,r),e}Mt.href=bt.href,S.extend({active:0,lastModified:{},etag:{},ajaxSettings:{url:bt.href,type:"GET",isLocal:/^(?:about|app|app-storage|.+-extension|file|res|widget):$/.test(bt.protocol),global:!0,processData:!0,async:!0,contentType:"application/x-www-form-urlencoded; charset=UTF-8",accepts:{"*":Rt,text:"text/plain",html:"text/html",xml:"application/xml, text/xml",json:"application/json, text/javascript"},contents:{xml:/\bxml\b/,html:/\bhtml/,json:/\bjson\b/},responseFields:{xml:"responseXML",text:"responseText",json:"responseJSON"},converters:{"* text":String,"text html":!0,"text json":JSON.parse,"text xml":S.parseXML},flatOptions:{url:!0,context:!0}},ajaxSetup:function(e,t){return t?Ft(Ft(e,S.ajaxSettings),t):Ft(S.ajaxSettings,e)},ajaxPrefilter:It(Ot),ajaxTransport:It(Pt),ajax:function(e,t){"object"==typeof e&&(t=e,e=void 0),t=t||{};var c,f,p,n,d,r,h,g,i,o,v=S.ajaxSetup({},t),y=v.context||v,m=v.context&&(y.nodeType||y.jquery)?S(y):S.event,x=S.Deferred(),b=S.Callbacks("once memory"),w=v.statusCode||{},a={},s={},u="canceled",T={readyState:0,getResponseHeader:function(e){var t;if(h){if(!n){n={};while(t=qt.exec(p))n[t[1].toLowerCase()+" "]=(n[t[1].toLowerCase()+" "]||[]).concat(t[2])}t=n[e.toLowerCase()+" "]}return null==t?null:t.join(", ")},getAllResponseHeaders:function(){return h?p:null},setRequestHeader:function(e,t){return null==h&&(e=s[e.toLowerCase()]=s[e.toLowerCase()]||e,a[e]=t),this},overrideMimeType:function(e){return null==h&&(v.mimeType=e),this},statusCode:function(e){var t;if(e)if(h)T.always(e[T.status]);else for(t in e)w[t]=[w[t],e[t]];return this},abort:function(e){var t=e||u;return c&&c.abort(t),l(0,t),this}};if(x.promise(T),v.url=((e||v.url||bt.href)+"").replace(Ht,bt.protocol+"//"),v.type=t.method||t.type||v.method||v.type,v.dataTypes=(v.dataType||"*").toLowerCase().match(P)||[""],null==v.crossDomain){r=E.createElement("a");try{r.href=v.url,r.href=r.href,v.crossDomain=Mt.protocol+"//"+Mt.host!=r.protocol+"//"+r.host}catch(e){v.crossDomain=!0}}if(v.data&&v.processData&&"string"!=typeof v.data&&(v.data=S.param(v.data,v.traditional)),Wt(Ot,v,t,T),h)return T;for(i in(g=S.event&&v.global)&&0==S.active++&&S.event.trigger("ajaxStart"),v.type=v.type.toUpperCase(),v.hasContent=!Lt.test(v.type),f=v.url.replace(jt,""),v.hasContent?v.data&&v.processData&&0===(v.contentType||"").indexOf("application/x-www-form-urlencoded")&&(v.data=v.data.replace(Nt,"+")):(o=v.url.slice(f.length),v.data&&(v.processData||"string"==typeof v.data)&&(f+=(Tt.test(f)?"&":"?")+v.data,delete v.data),!1===v.cache&&(f=f.replace(Dt,"$1"),o=(Tt.test(f)?"&":"?")+"_="+wt.guid+++o),v.url=f+o),v.ifModified&&(S.lastModified[f]&&T.setRequestHeader("If-Modified-Since",S.lastModified[f]),S.etag[f]&&T.setRequestHeader("If-None-Match",S.etag[f])),(v.data&&v.hasContent&&!1!==v.contentType||t.contentType)&&T.setRequestHeader("Content-Type",v.contentType),T.setRequestHeader("Accept",v.dataTypes[0]&&v.accepts[v.dataTypes[0]]?v.accepts[v.dataTypes[0]]+("*"!==v.dataTypes[0]?", "+Rt+"; q=0.01":""):v.accepts["*"]),v.headers)T.setRequestHeader(i,v.headers[i]);if(v.beforeSend&&(!1===v.beforeSend.call(y,T,v)||h))return T.abort();if(u="abort",b.add(v.complete),T.done(v.success),T.fail(v.error),c=Wt(Pt,v,t,T)){if(T.readyState=1,g&&m.trigger("ajaxSend",[T,v]),h)return T;v.async&&0<v.timeout&&(d=C.setTimeout(function(){T.abort("timeout")},v.timeout));try{h=!1,c.send(a,l)}catch(e){if(h)throw e;l(-1,e)}}else l(-1,"No Transport");function l(e,t,n,r){var i,o,a,s,u,l=t;h||(h=!0,d&&C.clearTimeout(d),c=void 0,p=r||"",T.readyState=0<e?4:0,i=200<=e&&e<300||304===e,n&&(s=function(e,t,n){var r,i,o,a,s=e.contents,u=e.dataTypes;while("*"===u[0])u.shift(),void 0===r&&(r=e.mimeType||t.getResponseHeader("Content-Type"));if(r)for(i in s)if(s[i]&&s[i].test(r)){u.unshift(i);break}if(u[0]in n)o=u[0];else{for(i in n){if(!u[0]||e.converters[i+" "+u[0]]){o=i;break}a||(a=i)}o=o||a}if(o)return o!==u[0]&&u.unshift(o),n[o]}(v,T,n)),!i&&-1<S.inArray("script",v.dataTypes)&&S.inArray("json",v.dataTypes)<0&&(v.converters["text script"]=function(){}),s=function(e,t,n,r){var i,o,a,s,u,l={},c=e.dataTypes.slice();if(c[1])for(a in e.converters)l[a.toLowerCase()]=e.converters[a];o=c.shift();while(o)if(e.responseFields[o]&&(n[e.responseFields[o]]=t),!u&&r&&e.dataFilter&&(t=e.dataFilter(t,e.dataType)),u=o,o=c.shift())if("*"===o)o=u;else if("*"!==u&&u!==o){if(!(a=l[u+" "+o]||l["* "+o]))for(i in l)if((s=i.split(" "))[1]===o&&(a=l[u+" "+s[0]]||l["* "+s[0]])){!0===a?a=l[i]:!0!==l[i]&&(o=s[0],c.unshift(s[1]));break}if(!0!==a)if(a&&e["throws"])t=a(t);else try{t=a(t)}catch(e){return{state:"parsererror",error:a?e:"No conversion from "+u+" to "+o}}}return{state:"success",data:t}}(v,s,T,i),i?(v.ifModified&&((u=T.getResponseHeader("Last-Modified"))&&(S.lastModified[f]=u),(u=T.getResponseHeader("etag"))&&(S.etag[f]=u)),204===e||"HEAD"===v.type?l="nocontent":304===e?l="notmodified":(l=s.state,o=s.data,i=!(a=s.error))):(a=l,!e&&l||(l="error",e<0&&(e=0))),T.status=e,T.statusText=(t||l)+"",i?x.resolveWith(y,[o,l,T]):x.rejectWith(y,[T,l,a]),T.statusCode(w),w=void 0,g&&m.trigger(i?"ajaxSuccess":"ajaxError",[T,v,i?o:a]),b.fireWith(y,[T,l]),g&&(m.trigger("ajaxComplete",[T,v]),--S.active||S.event.trigger("ajaxStop")))}return T},getJSON:function(e,t,n){return S.get(e,t,n,"json")},getScript:function(e,t){return S.get(e,void 0,t,"script")}}),S.each(["get","post"],function(e,i){S[i]=function(e,t,n,r){return m(t)&&(r=r||n,n=t,t=void 0),S.ajax(S.extend({url:e,type:i,dataType:r,data:t,success:n},S.isPlainObject(e)&&e))}}),S.ajaxPrefilter(function(e){var t;for(t in e.headers)"content-type"===t.toLowerCase()&&(e.contentType=e.headers[t]||"")}),S._evalUrl=function(e,t,n){return S.ajax({url:e,type:"GET",dataType:"script",cache:!0,async:!1,global:!1,converters:{"text script":function(){}},dataFilter:function(e){S.globalEval(e,t,n)}})},S.fn.extend({wrapAll:function(e){var t;return this[0]&&(m(e)&&(e=e.call(this[0])),t=S(e,this[0].ownerDocument).eq(0).clone(!0),this[0].parentNode&&t.insertBefore(this[0]),t.map(function(){var e=this;while(e.firstElementChild)e=e.firstElementChild;return e}).append(this)),this},wrapInner:function(n){return m(n)?this.each(function(e){S(this).wrapInner(n.call(this,e))}):this.each(function(){var e=S(this),t=e.contents();t.length?t.wrapAll(n):e.append(n)})},wrap:function(t){var n=m(t);return this.each(function(e){S(this).wrapAll(n?t.call(this,e):t)})},unwrap:function(e){return this.parent(e).not("body").each(function(){S(this).replaceWith(this.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth||e.offsetHeight||e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var Bt={0:200,1223:204},$t=S.ajaxSettings.xhr();y.cors=!!$t&&"withCredentials"in $t,y.ajax=$t=!!$t,S.ajaxTransport(function(i){var o,a;if(y.cors||$t&&!i.crossDomain)return{send:function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain||e["X-Requested-With"]||(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(o=a=r.onload=r.onerror=r.onabort=r.ontimeout=r.onreadystatechange=null,"abort"===e?r.abort():"error"===e?"number"!=typeof r.status?t(0,"error"):t(r.status,r.statusText):t(Bt[r.status]||r.status,r.statusText,"text"!==(r.responseType||"text")||"string"!=typeof r.responseText?{binary:r.response}:{text:r.responseText},r.getAllResponseHeaders()))}},r.onload=o(),a=r.onerror=r.ontimeout=o("error"),void 0!==r.onabort?r.onabort=a:r.onreadystatechange=function(){4===r.readyState&&C.setTimeout(function(){o&&a()})},o=o("abort");try{r.send(i.hasContent&&i.data||null)}catch(e){if(o)throw e}},abort:function(){o&&o()}}}),S.ajaxPrefilter(function(e){e.crossDomain&&(e.contents.script=!1)}),S.ajaxSetup({accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/\b(?:java|ecma)script\b/},converters:{"text script":function(e){return S.globalEval(e),e}}}),S.ajaxPrefilter("script",function(e){void 0===e.cache&&(e.cache=!1),e.crossDomain&&(e.type="GET")}),S.ajaxTransport("script",function(n){var r,i;if(n.crossDomain||n.scriptAttrs)return{send:function(e,t){r=S("<script>").attr(n.scriptAttrs||{}).prop({charset:n.scriptCharset,src:n.url}).on("load error",i=function(e){r.remove(),i=null,e&&t("error"===e.type?404:200,e.type)}),E.head.appendChild(r[0])},abort:function(){i&&i()}}});var _t,zt=[],Ut=/(=)\?(?=&|$)|\?\?/;S.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var e=zt.pop()||S.expando+"_"+wt.guid++;return this[e]=!0,e}}),S.ajaxPrefilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Ut.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType||"").indexOf("application/x-www-form-urlencoded")&&Ut.test(e.data)&&"data");if(a||"jsonp"===e.dataTypes[0])return r=e.jsonpCallback=m(e.jsonpCallback)?e.jsonpCallback():e.jsonpCallback,a?e[a]=e[a].replace(Ut,"$1"+r):!1!==e.jsonp&&(e.url+=(Tt.test(e.url)?"&":"?")+e.jsonp+"="+r),e.converters["script json"]=function(){return o||S.error(r+" was not called"),o[0]},e.dataTypes[0]="json",i=C[r],C[r]=function(){o=arguments},n.always(function(){void 0===i?S(C).removeProp(r):C[r]=i,e[r]&&(e.jsonpCallback=t.jsonpCallback,zt.push(r)),o&&m(i)&&i(o[0]),o=i=void 0}),"script"}),y.createHTMLDocument=((_t=E.implementation.createHTMLDocument("").body).innerHTML="<form></form><form></form>",2===_t.childNodes.length),S.parseHTML=function(e,t,n){return"string"!=typeof e?[]:("boolean"==typeof t&&(n=t,t=!1),t||(y.createHTMLDocument?((r=(t=E.implementation.createHTMLDocument("")).createElement("base")).href=E.location.href,t.head.appendChild(r)):t=E),o=!n&&[],(i=N.exec(e))?[t.createElement(i[1])]:(i=xe([e],t,o),o&&o.length&&S(o).remove(),S.merge([],i.childNodes)));var r,i,o},S.fn.load=function(e,t,n){var r,i,o,a=this,s=e.indexOf(" ");return-1<s&&(r=ht(e.slice(s)),e=e.slice(0,s)),m(t)?(n=t,t=void 0):t&&"object"==typeof t&&(i="POST"),0<a.length&&S.ajax({url:e,type:i||"GET",dataType:"html",data:t}).done(function(e){o=arguments,a.html(r?S("<div>").append(S.parseHTML(e)).find(r):e)}).always(n&&function(e,t){a.each(function(){n.apply(this,o||[e.responseText,t,e])})}),this},S.expr.pseudos.animated=function(t){return S.grep(S.timers,function(e){return t===e.elem}).length},S.offset={setOffset:function(e,t,n){var r,i,o,a,s,u,l=S.css(e,"position"),c=S(e),f={};"static"===l&&(e.style.position="relative"),s=c.offset(),o=S.css(e,"top"),u=S.css(e,"left"),("absolute"===l||"fixed"===l)&&-1<(o+u).indexOf("auto")?(a=(r=c.position()).top,i=r.left):(a=parseFloat(o)||0,i=parseFloat(u)||0),m(t)&&(t=t.call(e,n,S.extend({},s))),null!=t.top&&(f.top=t.top-s.top+a),null!=t.left&&(f.left=t.left-s.left+i),"using"in t?t.using.call(e,f):c.css(f)}},S.fn.extend({offset:function(t){if(arguments.length)return void 0===t?this:this.each(function(e){S.offset.setOffset(this,t,e)});var e,n,r=this[0];return r?r.getClientRects().length?(e=r.getBoundingClientRect(),n=r.ownerDocument.defaultView,{top:e.top+n.pageYOffset,left:e.left+n.pageXOffset}):{top:0,left:0}:void 0},position:function(){if(this[0]){var e,t,n,r=this[0],i={top:0,left:0};if("fixed"===S.css(r,"position"))t=r.getBoundingClientRect();else{t=this.offset(),n=r.ownerDocument,e=r.offsetParent||n.documentElement;while(e&&(e===n.body||e===n.documentElement)&&"static"===S.css(e,"position"))e=e.parentNode;e&&e!==r&&1===e.nodeType&&((i=S(e).offset()).top+=S.css(e,"borderTopWidth",!0),i.left+=S.css(e,"borderLeftWidth",!0))}return{top:t.top-i.top-S.css(r,"marginTop",!0),left:t.left-i.left-S.css(r,"marginLeft",!0)}}},offsetParent:function(){return this.map(function(){var e=this.offsetParent;while(e&&"static"===S.css(e,"position"))e=e.offsetParent;return e||re})}}),S.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(t,i){var o="pageYOffset"===i;S.fn[t]=function(e){return $(this,function(e,t,n){var r;if(x(e)?r=e:9===e.nodeType&&(r=e.defaultView),void 0===n)return r?r[i]:e[t];r?r.scrollTo(o?r.pageXOffset:n,o?n:r.pageYOffset):e[t]=n},t,e,arguments.length)}}),S.each(["top","left"],function(e,n){S.cssHooks[n]=Fe(y.pixelPosition,function(e,t){if(t)return t=We(e,n),Pe.test(t)?S(e).position()[n]+"px":t})}),S.each({Height:"height",Width:"width"},function(a,s){S.each({padding:"inner"+a,content:s,"":"outer"+a},function(r,o){S.fn[o]=function(e,t){var n=arguments.length&&(r||"boolean"!=typeof e),i=r||(!0===e||!0===t?"margin":"border");return $(this,function(e,t,n){var r;return x(e)?0===o.indexOf("outer")?e["inner"+a]:e.document.documentElement["client"+a]:9===e.nodeType?(r=e.documentElement,Math.max(e.body["scroll"+a],r["scroll"+a],e.body["offset"+a],r["offset"+a],r["client"+a])):void 0===n?S.css(e,t,i):S.style(e,t,n,i)},s,n?e:void 0,n)}})}),S.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(e,t){S.fn[t]=function(e){return this.on(t,e)}}),S.fn.extend({bind:function(e,t,n){return this.on(e,null,t,n)},unbind:function(e,t){return this.off(e,null,t)},delegate:function(e,t,n,r){return this.on(t,e,n,r)},undelegate:function(e,t,n){return 1===arguments.length?this.off(e,"**"):this.off(t,e||"**",n)},hover:function(e,t){return this.mouseenter(e).mouseleave(t||e)}}),S.each("blur focus focusin focusout resize scroll click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup contextmenu".split(" "),function(e,n){S.fn[n]=function(e,t){return 0<arguments.length?this.on(n,null,e,t):this.trigger(n)}});var Xt=/^[\s\uFEFF\xA0]+|[\s\uFEFF\xA0]+$/g;S.proxy=function(e,t){var n,r,i;if("string"==typeof t&&(n=e[t],t=e,e=n),m(e))return r=s.call(arguments,2),(i=function(){return e.apply(t||this,r.concat(s.call(arguments)))}).guid=e.guid=e.guid||S.guid++,i},S.holdReady=function(e){e?S.readyWait++:S.ready(!0)},S.isArray=Array.isArray,S.parseJSON=JSON.parse,S.nodeName=A,S.isFunction=m,S.isWindow=x,S.camelCase=X,S.type=w,S.now=Date.now,S.isNumeric=function(e){var t=S.type(e);return("number"===t||"string"===t)&&!isNaN(e-parseFloat(e))},S.trim=function(e){return null==e?"":(e+"").replace(Xt,"")},"function"==typeof define&&define.amd&&define("jquery",[],function(){return S});var Vt=C.jQuery,Gt=C.$;return S.noConflict=function(e){return C.$===S&&(C.$=Gt),e&&C.jQuery===S&&(C.jQuery=Vt),S},"undefined"==typeof e&&(C.jQuery=C.$=S),S});
diff --git a/assets/documentation/1.27.0-rc1/js/theme.js b/assets/documentation/1.27.0-rc1/js/theme.js
new file mode 100644
index 000000000..533e634bc
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/js/theme.js
@@ -0,0 +1,2 @@
+/* sphinx_rtd_theme version 1.0.0 | MIT license */
+!function(n){var e={};function t(i){if(e[i])return e[i].exports;var o=e[i]={i:i,l:!1,exports:{}};return n[i].call(o.exports,o,o.exports,t),o.l=!0,o.exports}t.m=n,t.c=e,t.d=function(n,e,i){t.o(n,e)||Object.defineProperty(n,e,{enumerable:!0,get:i})},t.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"__esModule",{value:!0})},t.t=function(n,e){if(1&e&&(n=t(n)),8&e)return n;if(4&e&&"object"==typeof n&&n&&n.__esModule)return n;var i=Object.create(null);if(t.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:n}),2&e&&"string"!=typeof n)for(var o in n)t.d(i,o,function(e){return n[e]}.bind(null,o));return i},t.n=function(n){var e=n&&n.__esModule?function(){return n.default}:function(){return n};return t.d(e,"a",e),e},t.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},t.p="",t(t.s=0)}([function(n,e,t){t(1),n.exports=t(3)},function(n,e,t){(function(){var e="undefined"!=typeof window?window.jQuery:t(2);n.exports.ThemeNav={navBar:null,win:null,winScroll:!1,winResize:!1,linkScroll:!1,winPosition:0,winHeight:null,docHeight:null,isRunning:!1,enable:function(n){var t=this;void 0===n&&(n=!0),t.isRunning||(t.isRunning=!0,e((function(e){t.init(e),t.reset(),t.win.on("hashchange",t.reset),n&&t.win.on("scroll",(function(){t.linkScroll||t.winScroll||(t.winScroll=!0,requestAnimationFrame((function(){t.onScroll()})))})),t.win.on("resize",(function(){t.winResize||(t.winResize=!0,requestAnimationFrame((function(){t.onResize()})))})),t.onResize()})))},enableSticky:function(){this.enable(!0)},init:function(n){n(document);var e=this;this.navBar=n("div.wy-side-scroll:first"),this.win=n(window),n(document).on("click","[data-toggle='wy-nav-top']",(function(){n("[data-toggle='wy-nav-shift']").toggleClass("shift"),n("[data-toggle='rst-versions']").toggleClass("shift")})).on("click",".wy-menu-vertical ul li a",(function(){var t=n(this);n("[data-toggle='wy-nav-shift']").removeClass("shift"),n("[data-toggle='rst-versions']").toggleClass("shift"),e.toggleCurrent(t),e.hashChange()})).on("click","[data-toggle='rst-current-version']",(function(){n("[data-toggle='rst-versions']").toggleClass("shift-up")})),n("table.docutils:not(.field-list,.footnote,.citation)").wrap("<div class='wy-table-responsive'></div>"),n("table.docutils.footnote").wrap("<div class='wy-table-responsive footnote'></div>"),n("table.docutils.citation").wrap("<div class='wy-table-responsive citation'></div>"),n(".wy-menu-vertical ul").not(".simple").siblings("a").each((function(){var t=n(this);expand=n('<button class="toctree-expand" title="Open/close menu"></button>'),expand.on("click",(function(n){return e.toggleCurrent(t),n.stopPropagation(),!1})),t.prepend(expand)}))},reset:function(){var n=encodeURI(window.location.hash)||"#";try{var e=$(".wy-menu-vertical"),t=e.find('[href="'+n+'"]');if(0===t.length){var i=$('.document [id="'+n.substring(1)+'"]').closest("div.section");0===(t=e.find('[href="#'+i.attr("id")+'"]')).length&&(t=e.find('[href="#"]'))}if(t.length>0){$(".wy-menu-vertical .current").removeClass("current").attr("aria-expanded","false"),t.addClass("current").attr("aria-expanded","true"),t.closest("li.toctree-l1").parent().addClass("current").attr("aria-expanded","true");for(let n=1;n<=10;n++)t.closest("li.toctree-l"+n).addClass("current").attr("aria-expanded","true");t[0].scrollIntoView()}}catch(n){console.log("Error expanding nav for anchor",n)}},onScroll:function(){this.winScroll=!1;var n=this.win.scrollTop(),e=n+this.winHeight,t=this.navBar.scrollTop()+(n-this.winPosition);n<0||e>this.docHeight||(this.navBar.scrollTop(t),this.winPosition=n)},onResize:function(){this.winResize=!1,this.winHeight=this.win.height(),this.docHeight=$(document).height()},hashChange:function(){this.linkScroll=!0,this.win.one("hashchange",(function(){this.linkScroll=!1}))},toggleCurrent:function(n){var e=n.closest("li");e.siblings("li.current").removeClass("current").attr("aria-expanded","false"),e.siblings().find("li.current").removeClass("current").attr("aria-expanded","false");var t=e.find("> ul li");t.length&&(t.removeClass("current").attr("aria-expanded","false"),e.toggleClass("current").attr("aria-expanded",(function(n,e){return"true"==e?"false":"true"})))}},"undefined"!=typeof window&&(window.SphinxRtdTheme={Navigation:n.exports.ThemeNav,StickyNav:n.exports.ThemeNav}),function(){for(var n=0,e=["ms","moz","webkit","o"],t=0;t<e.length&&!window.requestAnimationFrame;++t)window.requestAnimationFrame=window[e[t]+"RequestAnimationFrame"],window.cancelAnimationFrame=window[e[t]+"CancelAnimationFrame"]||window[e[t]+"CancelRequestAnimationFrame"];window.requestAnimationFrame||(window.requestAnimationFrame=function(e,t){var i=(new Date).getTime(),o=Math.max(0,16-(i-n)),r=window.setTimeout((function(){e(i+o)}),o);return n=i+o,r}),window.cancelAnimationFrame||(window.cancelAnimationFrame=function(n){clearTimeout(n)})}()}).call(window)},function(n,e){n.exports=jQuery},function(n,e,t){}]);
diff --git a/assets/documentation/1.27.0-rc1/js/theme_extra.js b/assets/documentation/1.27.0-rc1/js/theme_extra.js
new file mode 100644
index 000000000..d103ed6f7
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/js/theme_extra.js
@@ -0,0 +1,8 @@
+/*
+ * Assign 'docutils' class to tables so styling and
+ * JavaScript behavior is applied.
+ *
+ * https://github.com/mkdocs/mkdocs/issues/2028
+ */
+
+$('div.rst-content table').addClass('docutils');
diff --git a/assets/documentation/1.27.0-rc1/kubectl-plugin/index.html b/assets/documentation/1.27.0-rc1/kubectl-plugin/index.html
new file mode 100644
index 000000000..dd4f538b4
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/kubectl-plugin/index.html
@@ -0,0 +1,1688 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Kubectl Plugin - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Kubectl Plugin";
+        var mkdocs_page_input_path = "kubectl-plugin.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Kubectl Plugin</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#install">Install</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#via-the-installation-script">Via the installation script</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#using-the-debian-or-redhat-packages">Using the Debian or RedHat packages</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#debian-packages">Debian packages</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#rpm-packages">RPM packages</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#using-the-arch-linux-user-repository-aur-package">Using the Arch Linux User Repository (AUR) Package</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#using-krew">Using Krew</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#using-homebrew">Using Homebrew</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#supported-architectures">Supported Architectures</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#configuring-auto-completion">Configuring auto-completion</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#use">Use</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#generation-of-installation-manifests">Generation of installation manifests</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#status">Status</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#promote">Promote</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#certificates">Certificates</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#restart">Restart</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#reload">Reload</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#maintenance">Maintenance</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#report">Report</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#report-operator">report Operator</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#report-cluster">report Cluster</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#logs">Logs</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#cluster-logs">Cluster logs</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#pretty">Pretty</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#destroy">Destroy</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#cluster-hibernation">Cluster Hibernation</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#benchmarking-the-database-with-pgbench">Benchmarking the database with pgbench</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#benchmarking-the-storage-with-fio">Benchmarking the storage with fio</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#requesting-a-new-physical-backup">Requesting a new physical backup</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#launching-psql">Launching psql</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#snapshotting-a-postgres-cluster">Snapshotting a Postgres cluster</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#using-pgadmin4-for-evaluationdemonstration-purposes-only">Using pgAdmin4 for evaluation/demonstration purposes only</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#logical-replication-publications">Logical Replication Publications</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#creating-a-new-publication">Creating a new publication</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#dropping-a-publication">Dropping a publication</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#logical-replication-subscriptions">Logical Replication Subscriptions</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#creating-a-new-subscription">Creating a new subscription</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#dropping-a-subscription">Dropping a subscription</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#synchronizing-sequences">Synchronizing sequences</a>
+    </li>
+        </ul>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#integration-with-k9s">Integration with K9s</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#permissions-required-by-the-plugin">Permissions required by the plugin</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#role-examples">Role examples</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Kubectl Plugin</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="kubectl-plugin">Kubectl Plugin</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG provides a plugin for <code>kubectl</code> to manage a cluster in Kubernetes.</p>
+<h2 id="install">Install</h2>
+<p>You can install the <code>cnpg</code> plugin using a variety of methods.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>For air-gapped systems, installation via package managers, using previously
+downloaded files, may be a good option.</p>
+</div>
+<h3 id="via-the-installation-script">Via the installation script</h3>
+<pre><code class="language-sh">curl -sSfL \
+  https://github.com/cloudnative-pg/cloudnative-pg/raw/main/hack/install-cnpg-plugin.sh | \
+  sudo sh -s -- -b /usr/local/bin
+</code></pre>
+<h3 id="using-the-debian-or-redhat-packages">Using the Debian or RedHat packages</h3>
+<p>In the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/releases">releases section of the GitHub repository</a>,
+you can navigate to any release of interest (pick the same or newer release
+than your CloudNativePG operator), and in it you will find an <strong>Assets</strong>
+section. In that section are pre-built packages for a variety of systems.
+As a result, you can follow standard practices and instructions to install
+them in your systems.</p>
+<h4 id="debian-packages">Debian packages</h4>
+<p>For example, let's install the 1.27.0-rc1 release of the plugin, for an Intel based
+64 bit server. First, we download the right <code>.deb</code> file.</p>
+<pre><code class="language-sh">wget https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.27.0-rc1/kubectl-cnpg_1.27.0-rc1_linux_x86_64.deb \
+  --output-document kube-plugin.deb
+</code></pre>
+<p>Then, with superuser privileges, install from the local file using <code>dpkg</code>:</p>
+<pre><code class="language-console">$ sudo dpkg -i kube-plugin.deb
+Selecting previously unselected package cnpg.
+(Reading database ... 6688 files and directories currently installed.)
+Preparing to unpack kube-plugin.deb ...
+Unpacking cnpg (1.27.0-rc1) ...
+Setting up cnpg (1.27.0-rc1) ...
+</code></pre>
+<h4 id="rpm-packages">RPM packages</h4>
+<p>As in the example for <code>.rpm</code> packages, let's install the 1.27.0-rc1 release for an
+Intel 64 bit machine. Note the <code>--output</code> flag to provide a file name.</p>
+<pre><code class="language-sh">curl -L https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.27.0-rc1/kubectl-cnpg_1.27.0-rc1_linux_x86_64.rpm \
+  --output kube-plugin.rpm
+</code></pre>
+<p>Then, with superuser privileges, install with <code>yum</code>, and you're ready to use:</p>
+<pre><code class="language-console">$ sudo yum --disablerepo=* localinstall kube-plugin.rpm
+Failed to set locale, defaulting to C.UTF-8
+Dependencies resolved.
+====================================================================================================
+ Package            Architecture         Version                   Repository                  Size
+====================================================================================================
+Installing:
+ cnpg               x86_64               1.27.0-rc1                  @commandline                20 M
+
+Transaction Summary
+====================================================================================================
+Install  1 Package
+
+Total size: 20 M
+Installed size: 78 M
+Is this ok [y/N]: y
+</code></pre>
+<h3 id="using-the-arch-linux-user-repository-aur-package">Using the Arch Linux User Repository (AUR) Package</h3>
+<p>To install the plugin from the <a href="https://aur.archlinux.org/packages/kubectl-cnpg">AUR</a>, follow these steps:</p>
+<pre><code class="language-sh">git clone https://aur.archlinux.org/kubectl-cnpg.git
+cd kubectl-cnpg
+makepkg -si
+</code></pre>
+<p>Or use your favorite AUR-helper, for example <a href="https://github.com/Morganamilo/paru">paru</a>:</p>
+<pre><code class="language-sh">paru -S kubectl-cnpg
+</code></pre>
+<h3 id="using-krew">Using Krew</h3>
+<p>If you already have <a href="https://krew.sigs.k8s.io/">Krew</a> installed, you can simply
+run:</p>
+<pre><code class="language-sh">kubectl krew install cnpg
+</code></pre>
+<p>When a new version of the plugin is released, you can update the existing
+installation with:</p>
+<pre><code class="language-sh">kubectl krew update
+kubectl krew upgrade cnpg
+</code></pre>
+<h3 id="using-homebrew">Using Homebrew</h3>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Please note that the Homebrew community manages the availability of the <a href="https://formulae.brew.sh/formula/kubectl-cnpg">kubectl-cnpg plugin on Homebrew</a>.</p>
+</div>
+<p>If you already have <a href="https://brew.sh/">Homebrew</a> installed, you can simply
+run:</p>
+<pre><code class="language-sh">brew install kubectl-cnpg
+</code></pre>
+<p>When a new version of the plugin is released, you can update the existing
+installation with:</p>
+<pre><code class="language-sh">brew update
+brew upgrade kubectl-cnpg
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Auto-completion for the kubectl plugin is already managed by Homebrew.
+There's no need to create the <code>kubectl_complete-cnpg</code> script mentioned below.</p>
+</div>
+<h3 id="supported-architectures">Supported Architectures</h3>
+<p>CloudNativePG Plugin is currently built for the following
+operating system and architectures:</p>
+<ul>
+<li>Linux<ul>
+<li>amd64</li>
+<li>arm 5/6/7</li>
+<li>arm64</li>
+<li>s390x</li>
+<li>ppc64le</li>
+</ul>
+</li>
+<li>macOS<ul>
+<li>amd64</li>
+<li>arm64</li>
+</ul>
+</li>
+<li>Windows<ul>
+<li>386</li>
+<li>amd64</li>
+<li>arm 5/6/7</li>
+<li>arm64</li>
+</ul>
+</li>
+</ul>
+<h3 id="configuring-auto-completion">Configuring auto-completion</h3>
+<p>To configure auto-completion for the plugin, a helper shell script needs to be
+installed into your current PATH. Assuming the latter contains <code>/usr/local/bin</code>,
+this can be done with the following commands:</p>
+<pre><code class="language-sh">cat &gt; kubectl_complete-cnpg &lt;&lt;EOF
+#!/usr/bin/env sh
+
+# Call the __complete command passing it all arguments
+kubectl cnpg __complete &quot;\$@&quot;
+EOF
+
+chmod +x kubectl_complete-cnpg
+
+# Important: the following command may require superuser permission
+sudo mv kubectl_complete-cnpg /usr/local/bin
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The name of the script needs to be exactly the one provided since it's used by the kubectl auto-complete process</p>
+</div>
+<h2 id="use">Use</h2>
+<p>Once the plugin is installed and deployed, you can start using it like this:</p>
+<pre><code class="language-sh">kubectl cnpg COMMAND [ARGS...]
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The plugin automatically detects if the standard output channel is connected to a terminal.
+In such cases, it may add ANSI colors to the command output. To disable colors, use the
+<code>--color=never</code> option with the command.</p>
+</div>
+<h3 id="generation-of-installation-manifests">Generation of installation manifests</h3>
+<p>The <code>cnpg</code> plugin can be used to generate the YAML manifest for the
+installation of the operator. This option would typically be used if you want
+to override some default configurations such as number of replicas,
+installation namespace, namespaces to watch, and so on.</p>
+<p>For details and available options, run:</p>
+<pre><code class="language-sh">kubectl cnpg install generate --help
+</code></pre>
+<p>The main options are:</p>
+<ul>
+<li><code>-n</code>: specifies the namespace in which to install the operator (default:
+  <code>cnpg-system</code>).</li>
+<li><code>--control-plane</code>: if set to true, the operator deployment will include a
+  toleration and affinity for <code>node-role.kubernetes.io/control-plane</code>.</li>
+<li><code>--replicas</code>: sets the number of replicas in the deployment.</li>
+<li><code>--watch-namespace</code>: specifies a comma-separated list of namespaces to watch
+  (default: all namespaces).</li>
+<li><code>--version</code>: defines the minor version of the operator to be installed, such
+  as <code>1.23</code>. If a minor version is specified, the plugin installs the latest
+  patch version of that minor version. If no version is supplied, the plugin
+  installs the latest <code>MAJOR.MINOR.PATCH</code> version of the operator.</li>
+</ul>
+<p>An example of the <code>generate</code> command, which will generate a YAML manifest that
+will install the operator, is as follows:</p>
+<pre><code class="language-sh">kubectl cnpg install generate \
+  -n king \
+  --version 1.23 \
+  --replicas 3 \
+  --watch-namespace &quot;albert, bb, freddie&quot; \
+  &gt; operator.yaml
+</code></pre>
+<p>The flags in the above command have the following meaning:
+- <code>-n king</code> install the CNPG operator into the <code>king</code> namespace
+- <code>--version 1.23</code> install the latest patch version for minor version 1.23
+- <code>--replicas 3</code> install the operator with 3 replicas
+- <code>--watch-namespace "albert, bb, freddie"</code> have the operator watch for
+  changes in the <code>albert</code>, <code>bb</code> and <code>freddie</code> namespaces only</p>
+<h3 id="status">Status</h3>
+<p>The <code>status</code> command provides an overview of the current status of your
+cluster, including:</p>
+<ul>
+<li><strong>general information</strong>: name of the cluster, PostgreSQL's system ID, number of
+  instances, current timeline and position in the WAL</li>
+<li><strong>backup</strong>: point of recoverability, and WAL archiving status as returned by
+  the <code>pg_stat_archiver</code> view from the primary - or designated primary in the
+  case of a replica cluster</li>
+<li><strong>streaming replication</strong>: information taken directly from the <code>pg_stat_replication</code>
+  view on the primary instance</li>
+<li><strong>instances</strong>: information about each Postgres instance, taken directly by each
+  instance manager; in the case of a standby, the <code>Current LSN</code> field corresponds
+  to the latest write-ahead log location that has been replayed during recovery
+  (replay LSN).</li>
+</ul>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The status information above is taken at different times and at different
+locations, resulting in slightly inconsistent returned values. For example,
+the <code>Current Write LSN</code> location in the main header, might be different
+from the <code>Current LSN</code> field in the instances status as it is taken at
+two different time intervals.</p>
+</div>
+<pre><code class="language-sh">kubectl cnpg status sandbox
+</code></pre>
+<pre><code class="language-output">Cluster Summary
+Name:                default/sandbox
+System ID:           7423474350493388827
+PostgreSQL Image:    ghcr.io/cloudnative-pg/postgresql:16.4
+Primary instance:    sandbox-1
+Primary start time:  2024-10-08 18:31:57 +0000 UTC (uptime 1m14s)
+Status:              Cluster in healthy state
+Instances:           3
+Ready instances:     3
+Size:                126M
+Current Write LSN:   0/604DE38 (Timeline: 1 - WAL File: 000000010000000000000006)
+
+Continuous Backup status
+Not configured
+
+Streaming Replication status
+Replication Slots Enabled
+Name       Sent LSN   Write LSN  Flush LSN  Replay LSN  Write Lag  Flush Lag  Replay Lag  State      Sync State  Sync Priority  Replication Slot
+----       --------   ---------  ---------  ----------  ---------  ---------  ----------  -----      ----------  -------------  ----------------
+sandbox-2  0/604DE38  0/604DE38  0/604DE38  0/604DE38   00:00:00   00:00:00   00:00:00    streaming  async       0              active
+sandbox-3  0/604DE38  0/604DE38  0/604DE38  0/604DE38   00:00:00   00:00:00   00:00:00    streaming  async       0              active
+
+Instances status
+Name       Current LSN  Replication role  Status  QoS         Manager Version  Node
+----       -----------  ----------------  ------  ---         ---------------  ----
+sandbox-1  0/604DE38    Primary           OK      BestEffort  1.27.0-rc1           k8s-eu-worker
+sandbox-2  0/604DE38    Standby (async)   OK      BestEffort  1.27.0-rc1           k8s-eu-worker2
+sandbox-3  0/604DE38    Standby (async)   OK      BestEffort  1.27.0-rc1           k8s-eu-worker
+</code></pre>
+<p>If you require more detailed status information, use the <code>--verbose</code> option (or
+<code>-v</code> for short). The level of detail increases each time the flag is repeated:</p>
+<pre><code class="language-sh">kubectl cnpg status sandbox --verbose
+</code></pre>
+<pre><code class="language-output">Cluster Summary
+Name:                default/sandbox
+System ID:           7423474350493388827
+PostgreSQL Image:    ghcr.io/cloudnative-pg/postgresql:16.4
+Primary instance:    sandbox-1
+Primary start time:  2024-10-08 18:31:57 +0000 UTC (uptime 2m4s)
+Status:              Cluster in healthy state
+Instances:           3
+Ready instances:     3
+Size:                126M
+Current Write LSN:   0/6053720 (Timeline: 1 - WAL File: 000000010000000000000006)
+
+Continuous Backup status
+Not configured
+
+Physical backups
+No running physical backups found
+
+Streaming Replication status
+Replication Slots Enabled
+Name       Sent LSN   Write LSN  Flush LSN  Replay LSN  Write Lag  Flush Lag  Replay Lag  State      Sync State  Sync Priority  Replication Slot  Slot Restart LSN  Slot WAL Status  Slot Safe WAL Size
+----       --------   ---------  ---------  ----------  ---------  ---------  ----------  -----      ----------  -------------  ----------------  ----------------  ---------------  ------------------
+sandbox-2  0/6053720  0/6053720  0/6053720  0/6053720   00:00:00   00:00:00   00:00:00    streaming  async       0              active            0/6053720         reserved         NULL
+sandbox-3  0/6053720  0/6053720  0/6053720  0/6053720   00:00:00   00:00:00   00:00:00    streaming  async       0              active            0/6053720         reserved         NULL
+
+Unmanaged Replication Slot Status
+No unmanaged replication slots found
+
+Managed roles status
+No roles managed
+
+Tablespaces status
+No managed tablespaces
+
+Pod Disruption Budgets status
+Name             Role     Expected Pods  Current Healthy  Minimum Desired Healthy  Disruptions Allowed
+----             ----     -------------  ---------------  -----------------------  -------------------
+sandbox          replica  2              2                1                        1
+sandbox-primary  primary  1              1                1                        0
+
+Instances status
+Name       Current LSN  Replication role  Status  QoS         Manager Version  Node
+----       -----------  ----------------  ------  ---         ---------------  ----
+sandbox-1  0/6053720    Primary           OK      BestEffort  1.27.0-rc1           k8s-eu-worker
+sandbox-2  0/6053720    Standby (async)   OK      BestEffort  1.27.0-rc1           k8s-eu-worker2
+sandbox-3  0/6053720    Standby (async)   OK      BestEffort  1.27.0-rc1           k8s-eu-worker
+</code></pre>
+<p>With an additional <code>-v</code> (e.g. <code>kubectl cnpg status sandbox -v -v</code>), you can
+also view PostgreSQL configuration, HBA settings, and certificates.</p>
+<p>The command also supports output in <code>yaml</code> and <code>json</code> format.</p>
+<h3 id="promote">Promote</h3>
+<p>The meaning of this command is to <code>promote</code> a pod in the cluster to primary, so you
+can start with maintenance work or test a switch-over situation in your cluster:</p>
+<pre><code class="language-sh">kubectl cnpg promote CLUSTER CLUSTER-INSTANCE
+</code></pre>
+<p>Or you can use the instance node number to promote:</p>
+<pre><code class="language-sh">kubectl cnpg promote CLUSTER INSTANCE
+</code></pre>
+<h3 id="certificates">Certificates</h3>
+<p>Clusters created using the CloudNativePG operator work with a CA to sign
+a TLS authentication certificate.</p>
+<p>To get a certificate, you need to provide a name for the secret to store
+the credentials, the cluster name, and a user for this certificate:</p>
+<pre><code class="language-sh">kubectl cnpg certificate cluster-cert --cnpg-cluster CLUSTER --cnpg-user USER
+</code></pre>
+<p>After the secret it's created, you can get it using <code>kubectl</code>:</p>
+<pre><code class="language-sh">kubectl get secret cluster-cert
+</code></pre>
+<p>And the content of the same in plain text using the following commands:</p>
+<pre><code class="language-sh">kubectl get secret cluster-cert -o json | jq -r '.data | map(@base64d) | .[]'
+</code></pre>
+<h3 id="restart">Restart</h3>
+<p>The <code>kubectl cnpg restart</code> command can be used in two cases:</p>
+<ul>
+<li>
+<p>requesting the operator to orchestrate a rollout restart
+  for a certain cluster. This is useful to apply
+  configuration changes to cluster dependent objects, such as <code>ConfigMaps</code>
+  containing custom monitoring queries.</p>
+</li>
+<li>
+<p>request a single instance restart, either in-place if the instance is
+  the cluster's primary or deleting and recreating the pod if
+  it is a replica.</p>
+</li>
+</ul>
+<pre><code class="language-sh"># this command will restart a whole cluster in a rollout fashion
+kubectl cnpg restart CLUSTER
+
+# this command will restart a single instance, according to the policy above
+kubectl cnpg restart CLUSTER INSTANCE
+</code></pre>
+<p>If the in-place restart is requested but the change cannot be applied without
+a switchover, the switchover will take precedence over the in-place restart. A
+common case for this will be a minor upgrade of PostgreSQL image.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>If you want ConfigMaps and Secrets to be <strong>automatically</strong> reloaded
+by instances, you can add a label with key <code>cnpg.io/reload</code> to it.</p>
+</div>
+<h3 id="reload">Reload</h3>
+<p>The <code>kubectl cnpg reload</code> command requests the operator to trigger a reconciliation
+loop for a certain cluster. This is useful to apply configuration changes
+to cluster dependent objects, such as ConfigMaps containing custom monitoring queries.</p>
+<p>The following command will reload all configurations for a given cluster:</p>
+<pre><code class="language-sh">kubectl cnpg reload CLUSTER
+</code></pre>
+<h3 id="maintenance">Maintenance</h3>
+<p>The <code>kubectl cnpg maintenance</code> command helps to modify one or more clusters
+across namespaces and set the maintenance window values, it will change
+the following fields:</p>
+<ul>
+<li>.spec.nodeMaintenanceWindow.inProgress</li>
+<li>.spec.nodeMaintenanceWindow.reusePVC</li>
+</ul>
+<p>Accepts as argument <code>set</code> and <code>unset</code> using this to set the
+<code>inProgress</code> to <code>true</code> in case <code>set</code>and to <code>false</code> in case of <code>unset</code>.</p>
+<p>By default, <code>reusePVC</code> is always set to <code>false</code> unless the <code>--reusePVC</code> flag is passed.</p>
+<p>The plugin will ask for a confirmation with a list of the cluster to modify
+and their new values, if this is accepted this action will be applied to
+all the cluster in the list.</p>
+<p>If you want to set in maintenance all the PostgreSQL in your Kubernetes cluster,
+just need to write the following command:</p>
+<pre><code class="language-sh">kubectl cnpg maintenance set --all-namespaces
+</code></pre>
+<p>And you'll have the list of all the cluster to update</p>
+<pre><code class="language-output">The following are the new values for the clusters
+Namespace  Cluster Name     Maintenance  reusePVC
+---------  ------------     -----------  --------
+default    cluster-example  true         false
+default    pg-backup        true         false
+test       cluster-example  true         false
+Do you want to proceed? [y/n]: y
+</code></pre>
+<h3 id="report">Report</h3>
+<p>The <code>kubectl cnpg report</code> command bundles various pieces
+of information into a ZIP file.
+It aims to provide the needed context to debug problems
+with clusters in production.</p>
+<p>It has two sub-commands: <code>operator</code> and <code>cluster</code>.</p>
+<h4 id="report-operator">report Operator</h4>
+<p>The <code>operator</code> sub-command requests the operator to provide information
+regarding the operator deployment, configuration and events.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>All confidential information in Secrets and ConfigMaps is REDACTED.
+The Data map will show the <strong>keys</strong> but the values will be empty.
+The flag <code>-S</code> / <code>--stopRedaction</code> will defeat the redaction and show the
+values. Use only at your own risk, this will share private data.</p>
+</div>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>By default, operator logs are not collected, but you can enable operator
+log collection with the <code>--logs</code> flag</p>
+</div>
+<ul>
+<li><strong>deployment information</strong>: the operator Deployment and operator Pod</li>
+<li><strong>configuration</strong>: the Secrets and ConfigMaps in the operator namespace</li>
+<li><strong>events</strong>: the Events in the operator namespace</li>
+<li><strong>webhook configuration</strong>: the mutating and validating webhook configurations</li>
+<li><strong>webhook service</strong>: the webhook service</li>
+<li><strong>logs</strong>: logs for the operator Pod (optional, off by default) in JSON-lines format</li>
+</ul>
+<p>The command will generate a ZIP file containing various manifest in YAML format
+(by default, but settable to JSON with the <code>-o</code> flag).
+Use the <code>-f</code> flag to name a result file explicitly. If the <code>-f</code> flag is not used, a
+default time-stamped filename is created for the zip file.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The report plugin obeys <code>kubectl</code> conventions, and will look for objects constrained
+by namespace. The CNPG Operator will generally not be installed in the same
+namespace as the clusters.
+E.g. the default installation namespace is cnpg-system</p>
+</div>
+<pre><code class="language-sh">kubectl cnpg report operator -n cnpg-system
+</code></pre>
+<p>results in</p>
+<pre><code class="language-output">Successfully written report to &quot;report_operator_&lt;TIMESTAMP&gt;.zip&quot; (format: &quot;yaml&quot;)
+</code></pre>
+<p>With the <code>-f</code> flag set:</p>
+<pre><code class="language-sh">kubectl cnpg report operator -n cnpg-system -f reportRedacted.zip
+</code></pre>
+<p>Unzipping the file will produce a time-stamped top-level folder to keep the
+directory tidy:</p>
+<pre><code class="language-sh">unzip reportRedacted.zip
+</code></pre>
+<p>will result in:</p>
+<pre><code class="language-output">Archive:  reportRedacted.zip
+   creating: report_operator_&lt;TIMESTAMP&gt;/
+   creating: report_operator_&lt;TIMESTAMP&gt;/manifests/
+  inflating: report_operator_&lt;TIMESTAMP&gt;/manifests/deployment.yaml
+  inflating: report_operator_&lt;TIMESTAMP&gt;/manifests/operator-pod.yaml
+  inflating: report_operator_&lt;TIMESTAMP&gt;/manifests/events.yaml
+  inflating: report_operator_&lt;TIMESTAMP&gt;/manifests/validating-webhook-configuration.yaml
+  inflating: report_operator_&lt;TIMESTAMP&gt;/manifests/mutating-webhook-configuration.yaml
+  inflating: report_operator_&lt;TIMESTAMP&gt;/manifests/webhook-service.yaml
+  inflating: report_operator_&lt;TIMESTAMP&gt;/manifests/cnpg-ca-secret(secret).yaml
+  inflating: report_operator_&lt;TIMESTAMP&gt;/manifests/cnpg-webhook-cert(secret).yaml
+</code></pre>
+<p>If you activated the <code>--logs</code> option, you'd see an extra subdirectory:</p>
+<pre><code class="language-output">Archive:  report_operator_&lt;TIMESTAMP&gt;.zip
+  &lt;snipped …&gt;
+  creating: report_operator_&lt;TIMESTAMP&gt;/operator-logs/
+  inflating: report_operator_&lt;TIMESTAMP&gt;/operator-logs/cnpg-controller-manager-66fb98dbc5-pxkmh-logs.jsonl
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The plugin will try to get the PREVIOUS operator's logs, which is helpful
+when investigating restarted operators.
+In all cases, it will also try to get the CURRENT operator logs. If current
+and previous logs are available, it will show them both.</p>
+</div>
+<pre><code class="language-output">====== Beginning of Previous Log =====
+2023-03-28T12:56:41.251711811Z {&quot;level&quot;:&quot;info&quot;,&quot;ts&quot;:&quot;2023-03-28T12:56:41Z&quot;,&quot;logger&quot;:&quot;setup&quot;,&quot;msg&quot;:&quot;Starting CloudNativePG Operator&quot;,&quot;version&quot;:&quot;1.27.0-rc1&quot;,&quot;build&quot;:{&quot;Version&quot;:&quot;1.27.0-rc1+dev107&quot;,&quot;Commit&quot;:&quot;cc9bab17&quot;,&quot;Date&quot;:&quot;2023-03-28&quot;}}
+2023-03-28T12:56:41.251851909Z {&quot;level&quot;:&quot;info&quot;,&quot;ts&quot;:&quot;2023-03-28T12:56:41Z&quot;,&quot;logger&quot;:&quot;setup&quot;,&quot;msg&quot;:&quot;Starting pprof HTTP server&quot;,&quot;addr&quot;:&quot;0.0.0.0:6060&quot;}
+  &lt;snipped …&gt;
+
+====== End of Previous Log =====
+2023-03-28T12:57:09.854306024Z {&quot;level&quot;:&quot;info&quot;,&quot;ts&quot;:&quot;2023-03-28T12:57:09Z&quot;,&quot;logger&quot;:&quot;setup&quot;,&quot;msg&quot;:&quot;Starting CloudNativePG Operator&quot;,&quot;version&quot;:&quot;1.27.0-rc1&quot;,&quot;build&quot;:{&quot;Version&quot;:&quot;1.27.0-rc1+dev107&quot;,&quot;Commit&quot;:&quot;cc9bab17&quot;,&quot;Date&quot;:&quot;2023-03-28&quot;}}
+2023-03-28T12:57:09.854363943Z {&quot;level&quot;:&quot;info&quot;,&quot;ts&quot;:&quot;2023-03-28T12:57:09Z&quot;,&quot;logger&quot;:&quot;setup&quot;,&quot;msg&quot;:&quot;Starting pprof HTTP server&quot;,&quot;addr&quot;:&quot;0.0.0.0:6060&quot;}
+</code></pre>
+<p>If the operator hasn't been restarted, you'll still see the <code>====== Begin …</code>
+and  <code>====== End …</code> guards, with no content inside.</p>
+<p>You can verify that the confidential information is REDACTED by default:</p>
+<pre><code class="language-sh">cd report_operator_&lt;TIMESTAMP&gt;/manifests/
+head cnpg-ca-secret\(secret\).yaml
+</code></pre>
+<pre><code class="language-yaml">data:
+  ca.crt: &quot;&quot;
+  ca.key: &quot;&quot;
+metadata:
+  creationTimestamp: &quot;2022-03-22T10:42:28Z&quot;
+  managedFields:
+  - apiVersion: v1
+    fieldsType: FieldsV1
+    fieldsV1:
+</code></pre>
+<p>With the <code>-S</code> (<code>--stopRedaction</code>) option activated, secrets are shown:</p>
+<pre><code class="language-sh">kubectl cnpg report operator -n cnpg-system -f reportNonRedacted.zip -S
+</code></pre>
+<p>You'll get a reminder that you're about to view confidential information:</p>
+<pre><code class="language-output">WARNING: secret Redaction is OFF. Use it with caution
+Successfully written report to &quot;reportNonRedacted.zip&quot; (format: &quot;yaml&quot;)
+</code></pre>
+<pre><code class="language-sh">unzip reportNonRedacted.zip
+head cnpg-ca-secret\(secret\).yaml
+</code></pre>
+<pre><code class="language-yaml">data:
+  ca.crt: LS0tLS1CRUdJTiBD…
+  ca.key: LS0tLS1CRUdJTiBF…
+metadata:
+  creationTimestamp: &quot;2022-03-22T10:42:28Z&quot;
+  managedFields:
+  - apiVersion: v1
+    fieldsType: FieldsV1
+</code></pre>
+<h4 id="report-cluster">report Cluster</h4>
+<p>The <code>cluster</code> sub-command gathers the following:</p>
+<ul>
+<li><strong>cluster resources</strong>: the cluster information, same as <code>kubectl get cluster -o yaml</code></li>
+<li><strong>cluster pods</strong>: pods in the cluster namespace matching the cluster name</li>
+<li><strong>cluster jobs</strong>: jobs, if any, in the cluster namespace matching the cluster name</li>
+<li><strong>events</strong>: events in the cluster namespace</li>
+<li><strong>pod logs</strong>: logs for the cluster Pods (optional, off by default) in JSON-lines format</li>
+<li><strong>job logs</strong>: logs for the Pods created by jobs (optional, off by default) in JSON-lines format</li>
+</ul>
+<p>The <code>cluster</code> sub-command accepts the <code>-f</code> and <code>-o</code> flags, as the <code>operator</code> does.
+If the <code>-f</code> flag is not used, a default timestamped report name will be used.
+Note that the cluster information does not contain configuration Secrets / ConfigMaps,
+so the <code>-S</code> is disabled.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>By default, cluster logs are not collected, but you can enable cluster
+log collection with the <code>--logs</code> flag</p>
+</div>
+<p>Usage:</p>
+<pre><code class="language-sh">kubectl cnpg report cluster CLUSTER [flags]
+</code></pre>
+<p>Note that, unlike the <code>operator</code> sub-command, for the <code>cluster</code> sub-command you
+need to provide the cluster name, and very likely the namespace, unless the cluster
+is in the default one.</p>
+<pre><code class="language-sh">kubectl cnpg report cluster CLUSTER -f report.zip [-n NAMESPACE]
+</code></pre>
+<p>and then:</p>
+<pre><code class="language-sh">unzip report.zip
+</code></pre>
+<pre><code class="language-output">Archive:  report.zip
+   creating: report_cluster_example_&lt;TIMESTAMP&gt;/
+   creating: report_cluster_example_&lt;TIMESTAMP&gt;/manifests/
+  inflating: report_cluster_example_&lt;TIMESTAMP&gt;/manifests/cluster.yaml
+  inflating: report_cluster_example_&lt;TIMESTAMP&gt;/manifests/cluster-pods.yaml
+  inflating: report_cluster_example_&lt;TIMESTAMP&gt;/manifests/cluster-jobs.yaml
+  inflating: report_cluster_example_&lt;TIMESTAMP&gt;/manifests/events.yaml
+</code></pre>
+<p>Remember that you can use the <code>--logs</code> flag to add the pod and job logs to the ZIP.</p>
+<pre><code class="language-sh">kubectl cnpg report cluster CLUSTER [-n NAMESPACE] --logs
+</code></pre>
+<p>will result in:</p>
+<pre><code class="language-output">Successfully written report to &quot;report_cluster_example_&lt;TIMESTAMP&gt;.zip&quot; (format: &quot;yaml&quot;)
+</code></pre>
+<pre><code class="language-sh">unzip report_cluster_&lt;TIMESTAMP&gt;.zip
+</code></pre>
+<pre><code class="language-output">Archive:  report_cluster_example_&lt;TIMESTAMP&gt;.zip
+   creating: report_cluster_example_&lt;TIMESTAMP&gt;/
+   creating: report_cluster_example_&lt;TIMESTAMP&gt;/manifests/
+  inflating: report_cluster_example_&lt;TIMESTAMP&gt;/manifests/cluster.yaml
+  inflating: report_cluster_example_&lt;TIMESTAMP&gt;/manifests/cluster-pods.yaml
+  inflating: report_cluster_example_&lt;TIMESTAMP&gt;/manifests/cluster-jobs.yaml
+  inflating: report_cluster_example_&lt;TIMESTAMP&gt;/manifests/events.yaml
+   creating: report_cluster_example_&lt;TIMESTAMP&gt;/logs/
+  inflating: report_cluster_example_&lt;TIMESTAMP&gt;/logs/cluster-example-full-1.jsonl
+   creating: report_cluster_example_&lt;TIMESTAMP&gt;/job-logs/
+  inflating: report_cluster_example_&lt;TIMESTAMP&gt;/job-logs/cluster-example-full-1-initdb-qnnvw.jsonl
+  inflating: report_cluster_example_&lt;TIMESTAMP&gt;/job-logs/cluster-example-full-2-join-tvj8r.jsonl
+</code></pre>
+<h3 id="logs">Logs</h3>
+<p>The <code>kubectl cnpg logs</code> command allows to follow the logs of a collection
+of pods related to CloudNativePG in a single go.</p>
+<p>It has at the moment one available sub-command: <code>cluster</code>.</p>
+<h4 id="cluster-logs">Cluster logs</h4>
+<p>The <code>cluster</code> sub-command gathers all the pod logs for a cluster in a single
+stream or file.
+This means that you can get all the pod logs in a single terminal window, with a
+single invocation of the command.</p>
+<p>As in all the cnpg plugin sub-commands, you can get instructions and help with
+the <code>-h</code> flag:</p>
+<p><code>kubectl cnpg logs cluster -h</code></p>
+<p>The <code>logs</code> command will display logs in  JSON-lines format, unless the
+<code>--timestamps</code> flag is used, in which case, a human-readable timestamp will be
+prepended to each line. In this case, lines will no longer be valid JSON,
+and tools such as <code>jq</code> may not work as desired.</p>
+<p>If the <code>logs cluster</code> sub-command is given the <code>-f</code> flag (aka <code>--follow</code>), it
+will follow the cluster pod logs, and will also watch for any new pods created
+in the cluster after the command has been invoked.
+Any new pods found, including pods that have been restarted or re-created,
+will also have their pods followed.
+The logs will be displayed in the terminal's standard-out.
+This command will only exit when the cluster has no more pods left, or when it
+is interrupted by the user.</p>
+<p>If <code>logs</code> is called without the <code>-f</code> option, it will read the logs from all
+cluster pods until the time of invocation and display them in the terminal's
+standard-out, then exit.
+The <code>-o</code> or <code>--output</code> flag can be provided, to specify the name
+of the file where the logs should be saved, instead of displaying over
+standard-out.
+The <code>--tail</code> flag can be used to specify how many log lines will be retrieved
+from each pod in the cluster. By default, the <code>logs cluster</code> sub-command will
+display all the logs from each pod in the cluster. If combined with the "follow"
+flag <code>-f</code>, the number of logs specified by <code>--tail</code> will be retrieved until the
+current time, and from then the new logs will be followed.</p>
+<p>NOTE: unlike other <code>cnpg</code> plugin commands, the <code>-f</code> is used to denote "follow"
+rather than specify a file. This keeps with the convention of <code>kubectl logs</code>,
+which takes <code>-f</code> to mean the logs should be followed.</p>
+<p>Usage:</p>
+<pre><code class="language-sh">kubectl cnpg logs cluster CLUSTER [flags]
+</code></pre>
+<p>Using the <code>-f</code> option to follow:</p>
+<pre><code class="language-sh">kubectl cnpg report cluster CLUSTER -f
+</code></pre>
+<p>Using <code>--tail</code> option to display 3 lines from each pod and the <code>-f</code> option
+to follow:</p>
+<pre><code class="language-sh">kubectl cnpg report cluster CLUSTER -f --tail 3
+</code></pre>
+<pre><code class="language-output">{&quot;level&quot;:&quot;info&quot;,&quot;ts&quot;:&quot;2023-06-30T13:37:33Z&quot;,&quot;logger&quot;:&quot;postgres&quot;,&quot;msg&quot;:&quot;2023-06-30 13:37:33.142 UTC [26] LOG:  ending log output to stderr&quot;,&quot;source&quot;:&quot;/controller/log/postgres&quot;,&quot;logging_pod&quot;:&quot;cluster-example-3&quot;}
+{&quot;level&quot;:&quot;info&quot;,&quot;ts&quot;:&quot;2023-06-30T13:37:33Z&quot;,&quot;logger&quot;:&quot;postgres&quot;,&quot;msg&quot;:&quot;2023-06-30 13:37:33.142 UTC [26] HINT:  Future log output will go to log destination \&quot;csvlog\&quot;.&quot;,&quot;source&quot;:&quot;/controller/log/postgres&quot;,&quot;logging_pod&quot;:&quot;cluster-example-3&quot;}
+…
+…
+</code></pre>
+<p>With the <code>-o</code> option omitted, and with <code>--output</code> specified:</p>
+<pre><code class="language-console">$ kubectl cnpg logs cluster CLUSTER --output my-cluster.log
+
+Successfully written logs to &quot;my-cluster.log&quot;
+</code></pre>
+<h4 id="pretty">Pretty</h4>
+<p>The <code>pretty</code> sub-command reads a log stream from standard input, formats it
+into a human-readable output, and attempts to sort the entries by timestamp.</p>
+<p>It can be used in combination with <code>kubectl cnpg logs cluster</code>, as
+shown in the following example:</p>
+<pre><code class="language-console">$ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty
+2024-10-15T17:35:00.336 INFO     cluster-example-1 instance-manager Starting CloudNativePG Instance Manager
+2024-10-15T17:35:00.336 INFO     cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL
+2024-10-15T17:35:00.347 INFO     cluster-example-1 instance-manager starting tablespace manager
+2024-10-15T17:35:00.347 INFO     cluster-example-1 instance-manager starting external server manager
+[...]
+</code></pre>
+<p>Alternatively, it can be used in combination with other commands that produce
+CNPG logs in JSON format, such as <code>stern</code>, or <code>kubectl logs</code>, as in the
+following example:</p>
+<pre><code class="language-console">$ kubectl logs cluster-example-1 | kubectl cnpg logs pretty
+2024-10-15T17:35:00.336 INFO     cluster-example-1 instance-manager Starting CloudNativePG Instance Manager
+2024-10-15T17:35:00.336 INFO     cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL
+2024-10-15T17:35:00.347 INFO     cluster-example-1 instance-manager starting tablespace manager
+2024-10-15T17:35:00.347 INFO     cluster-example-1 instance-manager starting external server manager
+[...]
+</code></pre>
+<p>The <code>pretty</code> sub-command also supports advanced log filtering, allowing users
+to display logs for specific pods or loggers, or to filter logs by severity
+level.
+Here's an example:</p>
+<pre><code class="language-console">$ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --pods cluster-example-1 --loggers postgres --log-level info
+2024-10-15T17:35:00.509 INFO     cluster-example-1 postgres         2024-10-15 17:35:00.509 UTC [29] LOG:  redirecting log output to logging collector process
+2024-10-15T17:35:00.509 INFO     cluster-example-1 postgres         2024-10-15 17:35:00.509 UTC [29] HINT:  Future log output will appear in directory &quot;/controller/log&quot;...
+2024-10-15T17:35:00.510 INFO     cluster-example-1 postgres         2024-10-15 17:35:00.509 UTC [29] LOG:  ending log output to stderr
+2024-10-15T17:35:00.510 INFO     cluster-example-1 postgres         ending log output to stderr
+[...]
+</code></pre>
+<p>The <code>pretty</code> sub-command will try to sort the log stream,
+to make logs easier to reason about. In order to achieve this, it gathers the
+logs into groups, and within groups it sorts by timestamp. This is the only
+way to sort interactively, as <code>pretty</code> may be piped from a command in "follow"
+mode. The sub-command will add a group separator line, <code>---</code>, at the end of
+each sorted group. The size of the grouping can be configured via the
+<code>--sorting-group-size</code> flag (default: 1000), as illustrated in the following example:</p>
+<pre><code class="language-console">$ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --sorting-group-size=3
+2024-10-15T17:35:20.426 INFO     cluster-example-2 instance-manager Starting CloudNativePG Instance Manager
+2024-10-15T17:35:20.426 INFO     cluster-example-2 instance-manager Checking for free disk space for WALs before starting PostgreSQL
+2024-10-15T17:35:20.438 INFO     cluster-example-2 instance-manager starting tablespace manager
+---
+2024-10-15T17:35:20.438 INFO     cluster-example-2 instance-manager starting external server manager
+2024-10-15T17:35:20.438 INFO     cluster-example-2 instance-manager starting controller-runtime manager
+2024-10-15T17:35:20.439 INFO     cluster-example-2 instance-manager Starting EventSource
+---
+[...]
+</code></pre>
+<p>To explore all available options, use the <code>-h</code> flag for detailed explanations
+of the supported flags and their usage.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>You can also increase the verbosity of the log by adding more <code>-v</code> options.</p>
+</div>
+<h3 id="destroy">Destroy</h3>
+<p>The <code>kubectl cnpg destroy</code> command helps remove an instance and all the
+associated PVCs from a Kubernetes cluster.</p>
+<p>The optional <code>--keep-pvc</code> flag, if specified, allows you to keep the PVCs,
+while removing all <code>metadata.ownerReferences</code> that were set by the instance.
+Additionally, the <code>cnpg.io/pvcStatus</code> label on the PVCs will change from
+<code>ready</code> to <code>detached</code> to signify that they are no longer in use.</p>
+<p>Running again the command without the <code>--keep-pvc</code> flag will remove the
+detached PVCs.</p>
+<p>Usage:</p>
+<pre><code class="language-sh">kubectl cnpg destroy CLUSTER INSTANCE
+</code></pre>
+<p>The following example removes the <code>cluster-example-2</code> pod and the associated
+PVCs:</p>
+<pre><code class="language-sh">kubectl cnpg destroy cluster-example 2
+</code></pre>
+<h3 id="cluster-hibernation">Cluster Hibernation</h3>
+<p>There are times when you may need to temporarily suspend a CloudNativePG
+<code>Cluster</code> while preserving its data, allowing you to resume operations later.
+This feature is known as <strong>cluster hibernation</strong>.</p>
+<p>Hibernation is managed declaratively using the <code>cnpg.io/hibernation</code>
+annotation.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For more details, see the <a href="../declarative_hibernation/">"Declarative Hibernation"</a>
+documentation page.</p>
+</div>
+<p>To simplify the process, the <code>cnpg</code> plugin for <code>kubectl</code> provides a <code>hibernate</code>
+command, which acts as a convenient shortcut for applying the annotation.</p>
+<p>To hibernate a cluster, run:</p>
+<pre><code class="language-sh">kubectl cnpg hibernate on CLUSTER
+</code></pre>
+<p>This command applies the <code>cnpg.io/hibernation=on</code> annotation to the cluster,
+suspending its execution.</p>
+<p>To resume a hibernated cluster, use:</p>
+<pre><code class="language-sh">kubectl cnpg hibernate off CLUSTER
+</code></pre>
+<p>This will remove the hibernation state by setting <code>cnpg.io/hibernation=off</code>.</p>
+<p>You can check the cluster’s status at any time with:</p>
+<pre><code class="language-sh">kubectl cnpg status CLUSTER
+</code></pre>
+<p>This will display the current state of the cluster, including whether it is
+hibernated.</p>
+<h3 id="benchmarking-the-database-with-pgbench">Benchmarking the database with pgbench</h3>
+<p>Pgbench can be run against an existing PostgreSQL cluster with following
+command:</p>
+<pre><code class="language-sh">kubectl cnpg pgbench CLUSTER -- --time 30 --client 1 --jobs 1
+</code></pre>
+<p>Refer to the <a href="../benchmarking/#pgbench">Benchmarking pgbench section</a> for more
+details.</p>
+<h3 id="benchmarking-the-storage-with-fio">Benchmarking the storage with fio</h3>
+<p><code>fio</code> can be run on an existing storage class with following command:</p>
+<pre><code class="language-sh">kubectl cnpg fio FIO_JOB_NAME [-n NAMESPACE]
+</code></pre>
+<p>Refer to the <a href="../benchmarking/#fio">Benchmarking fio section</a> for more details.</p>
+<h3 id="requesting-a-new-physical-backup">Requesting a new physical backup</h3>
+<p>The <code>kubectl cnpg backup</code> command requests a new physical backup for
+an existing Postgres cluster by creating a new <code>Backup</code> resource.</p>
+<p>The following example requests an on-demand backup for a given cluster:</p>
+<pre><code class="language-sh">kubectl cnpg backup CLUSTER
+</code></pre>
+<p>or, if using volume snapshots:</p>
+<pre><code class="language-sh">kubectl cnpg backup CLUSTER -m volumeSnapshot
+</code></pre>
+<p>The created backup will be named after the request time:</p>
+<pre><code class="language-console">$ kubectl cnpg backup cluster-example
+backup/cluster-example-20230121002300 created
+</code></pre>
+<p>By default, a newly created backup will use the backup target policy defined
+in the cluster to choose which instance to run on.
+However, you can override this policy with the <code>--backup-target</code> option.</p>
+<p>In the case of volume snapshot backups, you can also use the <code>--online</code> option
+to request an online/hot backup or an offline/cold one: additionally, you can
+also tune online backups by explicitly setting the <code>--immediate-checkpoint</code> and
+<code>--wait-for-archive</code> options.</p>
+<p>The <a href="../backup/#backup">"Backup" section</a> contains more information about
+the configuration settings.</p>
+<h3 id="launching-psql">Launching psql</h3>
+<p>The <code>kubectl cnpg psql CLUSTER</code> command starts a new PostgreSQL interactive front-end
+process (psql) connected to an existing Postgres cluster, as if you were running
+it from the actual pod. This means that you will be using the <code>postgres</code> user.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>As you will be connecting as <code>postgres</code> user, in production environments this
+method should be used with extreme care, by authorized personnel only.</p>
+</div>
+<pre><code class="language-console">$ kubectl cnpg psql cluster-example
+
+psql (17.5 (Debian 17.5-1.pgdg110+1))
+Type &quot;help&quot; for help.
+
+postgres=#
+</code></pre>
+<p>By default, the command will connect to the primary instance. The user can
+select to work against a replica by using the <code>--replica</code> option:</p>
+<pre><code class="language-console">$ kubectl cnpg psql --replica cluster-example
+
+psql (17.5 (Debian 17.5-1.pgdg110+1))
+
+Type &quot;help&quot; for help.
+
+postgres=# select pg_is_in_recovery();
+ pg_is_in_recovery
+-------------------
+ t
+(1 row)
+
+postgres=# \q
+</code></pre>
+<p>This command will start <code>kubectl exec</code>, and the <code>kubectl</code> executable must be
+reachable in your <code>PATH</code> variable to correctly work.</p>
+<h3 id="snapshotting-a-postgres-cluster">Snapshotting a Postgres cluster</h3>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>The <code>kubectl cnpg snapshot</code> command has been removed.
+Please use the <a href="#requesting-a-new-physical-backup"><code>backup</code> command</a> to request
+backups using volume snapshots.</p>
+</div>
+<h3 id="using-pgadmin4-for-evaluationdemonstration-purposes-only">Using pgAdmin4 for evaluation/demonstration purposes only</h3>
+<p><a href="https://www.pgadmin.org/">pgAdmin</a> stands as the most popular and feature-rich
+open-source administration and development platform for PostgreSQL.
+For more information on the project, please refer to the official
+<a href="https://www.pgadmin.org/docs/">documentation</a>.</p>
+<p>Given that the pgAdmin Development Team maintains official Docker container
+images, you can install pgAdmin in your environment as a standard
+Kubernetes deployment.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Deployment of pgAdmin in Kubernetes production environments is beyond the
+scope of this document and, more broadly, of the CloudNativePG project.</p>
+</div>
+<p>However, <strong>for the purposes of demonstration and evaluation</strong>, CloudNativePG
+offers a suitable solution. The <code>cnpg</code> plugin implements the <code>pgadmin4</code>
+command, providing a straightforward method to connect to a given database
+<code>Cluster</code> and navigate its content in a local environment such as <code>kind</code>.</p>
+<p>For example, you can install a demo deployment of pgAdmin4 for the
+<code>cluster-example</code> cluster as follows:</p>
+<pre><code class="language-sh">kubectl cnpg pgadmin4 cluster-example
+</code></pre>
+<p>This command will produce:</p>
+<pre><code class="language-output">ConfigMap/cluster-example-pgadmin4 created
+Deployment/cluster-example-pgadmin4 created
+Service/cluster-example-pgadmin4 created
+Secret/cluster-example-pgadmin4 created
+
+[...]
+</code></pre>
+<p>After deploying pgAdmin, forward the port using kubectl and connect
+through your browser by following the on-screen instructions.</p>
+<p><img alt="Screenshot of desktop installation of pgAdmin" src="../images/pgadmin4.png" /></p>
+<p>As usual, you can use the <code>--dry-run</code> option to generate the YAML file:</p>
+<pre><code class="language-sh">kubectl cnpg pgadmin4 --dry-run cluster-example
+</code></pre>
+<p>pgAdmin4 can be installed in either desktop or server mode, with the default
+being server.</p>
+<p>In <code>server</code> mode, authentication is required using a randomly generated password,
+and users must manually specify the database to connect to.</p>
+<p>On the other hand, <code>desktop</code> mode initiates a pgAdmin web interface without
+requiring authentication. It automatically connects to the <code>app</code> database as the
+<code>app</code> user, making it ideal for quick demos, such as on a local deployment using
+<code>kind</code>:</p>
+<pre><code class="language-sh">kubectl cnpg pgadmin4 --mode desktop cluster-example
+</code></pre>
+<p>After concluding your demo, ensure the termination of the pgAdmin deployment by
+executing:</p>
+<pre><code class="language-sh">kubectl cnpg pgadmin4 --dry-run cluster-example | kubectl delete -f -
+</code></pre>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Never deploy pgAdmin in production using the plugin.</p>
+</div>
+<h3 id="logical-replication-publications">Logical Replication Publications</h3>
+<p>The <code>cnpg publication</code> command group is designed to streamline the creation and
+removal of <a href="https://www.postgresql.org/docs/current/logical-replication-publication.html">PostgreSQL logical replication publications</a>.
+Be aware that these commands are primarily intended for assisting in the
+creation of logical replication publications, particularly on remote PostgreSQL
+databases.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>It is crucial to have a solid understanding of both the capabilities and
+limitations of PostgreSQL's native logical replication system before using
+these commands.
+In particular, be mindful of the <a href="https://www.postgresql.org/docs/current/logical-replication-restrictions.html">logical replication restrictions</a>.</p>
+</div>
+<h4 id="creating-a-new-publication">Creating a new publication</h4>
+<p>To create a logical replication publication, use the <code>cnpg publication create</code>
+command. The basic structure of this command is as follows:</p>
+<pre><code class="language-sh">kubectl cnpg publication create \
+  --publication PUBLICATION_NAME \
+  [--external-cluster EXTERNAL_CLUSTER]
+  LOCAL_CLUSTER [options]
+</code></pre>
+<p>There are two primary use cases:</p>
+<ul>
+<li>
+<p>With <code>--external-cluster</code>: Use this option to create a publication on an
+  external cluster (i.e. defined in the <code>externalClusters</code> stanza). The commands
+  will be issued from the <code>LOCAL_CLUSTER</code>, but the publication will be for the
+  data in <code>EXTERNAL_CLUSTER</code>.</p>
+</li>
+<li>
+<p>Without <code>--external-cluster</code>: Use this option to create a publication in the
+  <code>LOCAL_CLUSTER</code> PostgreSQL <code>Cluster</code> (by default, the <code>app</code> database).</p>
+</li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>When connecting to an external cluster, ensure that the specified user has
+sufficient permissions to execute the <code>CREATE PUBLICATION</code> command.</p>
+</div>
+<p>You have several options, similar to the <a href="https://www.postgresql.org/docs/current/sql-createpublication.html"><code>CREATE PUBLICATION</code></a>
+command, to define the group of tables to replicate. Notable options include:</p>
+<ul>
+<li>If you specify the <code>--all-tables</code> option, you create a publication <code>FOR ALL TABLES</code>.</li>
+<li>Alternatively, you can specify multiple occurrences of:</li>
+<li><code>--table</code>: Add a specific table (with an expression) to the publication.</li>
+<li><code>--schema</code>: Include all tables in the specified database schema (available
+    from PostgreSQL 15).</li>
+</ul>
+<p>The <code>--dry-run</code> option enables you to preview the SQL commands that the plugin
+will execute.</p>
+<p>For additional information and detailed instructions, type the following
+command:</p>
+<pre><code class="language-sh">kubectl cnpg publication create --help
+</code></pre>
+<h5 id="example">Example</h5>
+<p>Given a <code>source-cluster</code> and a <code>destination-cluster</code>, we would like to create a
+publication for the data on <code>source-cluster</code>.
+The <code>destination-cluster</code> has an entry in the <code>externalClusters</code> stanza pointing
+to <code>source-cluster</code>.</p>
+<p>We can run:</p>
+<pre><code class="language-sh">kubectl cnpg publication create destination-cluster  \
+  --external-cluster=source-cluster --all-tables
+</code></pre>
+<p>which will create a publication for all tables on <code>source-cluster</code>, running
+the SQL commands on the <code>destination-cluster</code>.</p>
+<p>Or instead, we can run:</p>
+<pre><code class="language-sh">kubectl cnpg publication create source-cluster \
+  --publication=app --all-tables
+</code></pre>
+<p>which will create a publication named <code>app</code> for all the tables in the
+<code>source-cluster</code>, running the SQL commands on the source cluster.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>There are two sample files that have been provided for illustration and inspiration:
+<a href="../samples/cluster-example-logical-source.yaml">logical-source</a> and
+<a href="../samples/cluster-example-logical-destination.yaml">logical-destination</a>.</p>
+</div>
+<h4 id="dropping-a-publication">Dropping a publication</h4>
+<p>The <code>cnpg publication drop</code> command seamlessly complements the <code>create</code> command
+by offering similar key options, including the publication name, cluster name,
+and an optional external cluster. You can drop a <code>PUBLICATION</code> with the
+following command structure:</p>
+<pre><code class="language-sh">kubectl cnpg publication drop \
+  --publication PUBLICATION_NAME \
+  [--external-cluster EXTERNAL_CLUSTER]
+  LOCAL_CLUSTER [options]
+</code></pre>
+<p>To access further details and precise instructions, use the following command:</p>
+<pre><code class="language-sh">kubectl cnpg publication drop --help
+</code></pre>
+<h3 id="logical-replication-subscriptions">Logical Replication Subscriptions</h3>
+<p>The <code>cnpg subscription</code> command group is a dedicated set of commands designed
+to simplify the creation and removal of
+<a href="https://www.postgresql.org/docs/current/logical-replication-subscription.html">PostgreSQL logical replication subscriptions</a>.
+These commands are specifically crafted to aid in the establishment of logical
+replication subscriptions, especially when dealing with remote PostgreSQL
+databases.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Before using these commands, it is essential to have a comprehensive
+understanding of both the capabilities and limitations of PostgreSQL's
+native logical replication system.
+In particular, be mindful of the <a href="https://www.postgresql.org/docs/current/logical-replication-restrictions.html">logical replication restrictions</a>.</p>
+</div>
+<p>In addition to subscription management, we provide a helpful command for
+synchronizing all sequences from the source cluster. While its applicability
+may vary, this command can be particularly useful in scenarios involving major
+upgrades or data import from remote servers.</p>
+<h4 id="creating-a-new-subscription">Creating a new subscription</h4>
+<p>To create a logical replication subscription, use the <code>cnpg subscription create</code>
+command. The basic structure of this command is as follows:</p>
+<pre><code class="language-sh">kubectl cnpg subscription create \
+  --subscription SUBSCRIPTION_NAME \
+  --publication PUBLICATION_NAME \
+  --external-cluster EXTERNAL_CLUSTER \
+  LOCAL_CLUSTER [options]
+</code></pre>
+<p>This command configures a subscription directed towards the specified
+publication in the designated external cluster, as defined in the
+<code>externalClusters</code> stanza of the <code>LOCAL_CLUSTER</code>.</p>
+<p>For additional information and detailed instructions, type the following
+command:</p>
+<pre><code class="language-sh">kubectl cnpg subscription create --help
+</code></pre>
+<h5 id="example_1">Example</h5>
+<p>As in the section on publications, we have a <code>source-cluster</code> and a
+<code>destination-cluster</code>, and we have already created a publication called
+<code>app</code>.</p>
+<p>The following command:</p>
+<pre><code class="language-sh">kubectl cnpg subscription create destination-cluster \
+  --external-cluster=source-cluster \
+  --publication=app --subscription=app
+</code></pre>
+<p>will create a subscription for <code>app</code> on the destination cluster.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Prioritize testing subscriptions in a non-production environment to ensure
+their effectiveness and identify any potential issues before implementing them
+in a production setting.</p>
+</div>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>There are two sample files that have been provided for illustration and inspiration:
+<a href="../samples/cluster-example-logical-source.yaml">logical-source</a> and
+<a href="../samples/cluster-example-logical-destination.yaml">logical-destination</a>.</p>
+</div>
+<h4 id="dropping-a-subscription">Dropping a subscription</h4>
+<p>The <code>cnpg subscription drop</code> command seamlessly complements the <code>create</code> command.
+You can drop a <code>SUBSCRIPTION</code> with the following command structure:</p>
+<pre><code class="language-sh">kubectl cnpg subcription drop \
+  --subscription SUBSCRIPTION_NAME \
+  LOCAL_CLUSTER [options]
+</code></pre>
+<p>To access further details and precise instructions, use the following command:</p>
+<pre><code class="language-sh">kubectl cnpg subscription drop --help
+</code></pre>
+<h4 id="synchronizing-sequences">Synchronizing sequences</h4>
+<p>One notable constraint of PostgreSQL logical replication, implemented through
+publications and subscriptions, is the lack of sequence synchronization. This
+becomes particularly relevant when utilizing logical replication for live
+database migration, especially to a higher version of PostgreSQL. A crucial
+step in this process involves updating sequences before transitioning
+applications to the new database (<em>cutover</em>).</p>
+<p>To address this limitation, the <code>cnpg subscription sync-sequences</code> command
+offers a solution. This command establishes a connection with the source
+database, retrieves all relevant sequences, and subsequently updates local
+sequences with matching identities (based on database schema and sequence
+name).</p>
+<p>You can use the command as shown below:</p>
+<pre><code class="language-sh">kubectl cnpg subscription sync-sequences \
+  --subscription SUBSCRIPTION_NAME \
+  LOCAL_CLUSTER
+</code></pre>
+<p>For comprehensive details and specific instructions, utilize the following
+command:</p>
+<pre><code class="language-sh">kubectl cnpg subscription sync-sequences --help
+</code></pre>
+<h5 id="example_2">Example</h5>
+<p>As in the previous sections for publication and subscription, we have
+a <code>source-cluster</code> and a <code>destination-cluster</code>. The publication and the
+subscription, both called <code>app</code>, are already present.</p>
+<p>The following command will synchronize the sequences involved in the
+<code>app</code> subscription, from the source cluster into the destination cluster.</p>
+<pre><code class="language-sh">kubectl cnpg subscription sync-sequences destination-cluster \
+  --subscription=app
+</code></pre>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Prioritize testing subscriptions in a non-production environment to
+guarantee their effectiveness and detect any potential issues before deploying
+them in a production setting.</p>
+</div>
+<h2 id="integration-with-k9s">Integration with K9s</h2>
+<p>The <code>cnpg</code> plugin can be easily integrated in <a href="https://k9scli.io/">K9s</a>, a
+popular terminal-based UI to interact with Kubernetes clusters.</p>
+<p>See <a href="../samples/k9s/plugins.yml"><code>k9s/plugins.yml</code></a> for details.</p>
+<h2 id="permissions-required-by-the-plugin">Permissions required by the plugin</h2>
+<p>The plugin requires a set of Kubernetes permissions that depends on the command
+to execute. These permissions may affect resources and sub-resources like Pods,
+PDBs, PVCs, and enable actions like <code>get</code>, <code>delete</code>, <code>patch</code>. The following
+table contains the full details:</p>
+<table>
+<thead>
+<tr>
+<th style="text-align: left;">Command</th>
+<th style="text-align: left;">Resource Permissions</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: left;">backup</td>
+<td style="text-align: left;">clusters: get<br/>backups: create</td>
+</tr>
+<tr>
+<td style="text-align: left;">certificate</td>
+<td style="text-align: left;">clusters: get<br/>secrets: get,create</td>
+</tr>
+<tr>
+<td style="text-align: left;">destroy</td>
+<td style="text-align: left;">pods: get,delete<br/>jobs: delete,list<br/>PVCs: list,delete,update</td>
+</tr>
+<tr>
+<td style="text-align: left;">fencing</td>
+<td style="text-align: left;">clusters: get,patch<br/>pods: get</td>
+</tr>
+<tr>
+<td style="text-align: left;">fio</td>
+<td style="text-align: left;">PVCs: create<br/>configmaps: create<br/>deployment: create</td>
+</tr>
+<tr>
+<td style="text-align: left;">hibernate</td>
+<td style="text-align: left;">clusters: get,patch,delete<br/>pods: list,get,delete<br/>pods/exec: create<br/>jobs: list<br/>PVCs: get,list,update,patch,delete</td>
+</tr>
+<tr>
+<td style="text-align: left;">install</td>
+<td style="text-align: left;">none</td>
+</tr>
+<tr>
+<td style="text-align: left;">logs</td>
+<td style="text-align: left;">clusters: get<br/>pods: list<br/>pods/log: get</td>
+</tr>
+<tr>
+<td style="text-align: left;">maintenance</td>
+<td style="text-align: left;">clusters: get,patch,list<br/></td>
+</tr>
+<tr>
+<td style="text-align: left;">pgadmin4</td>
+<td style="text-align: left;">clusters: get<br/>configmaps: create<br/>deployments: create<br/>services: create<br/>secrets: create</td>
+</tr>
+<tr>
+<td style="text-align: left;">pgbench</td>
+<td style="text-align: left;">clusters: get<br/>jobs: create<br/></td>
+</tr>
+<tr>
+<td style="text-align: left;">promote</td>
+<td style="text-align: left;">clusters: get<br/>clusters/status: patch<br/>pods: get</td>
+</tr>
+<tr>
+<td style="text-align: left;">psql</td>
+<td style="text-align: left;">pods: get,list<br/>pods/exec: create</td>
+</tr>
+<tr>
+<td style="text-align: left;">publication</td>
+<td style="text-align: left;">clusters: get<br/>pods: get,list<br/>pods/exec: create</td>
+</tr>
+<tr>
+<td style="text-align: left;">reload</td>
+<td style="text-align: left;">clusters: get,patch</td>
+</tr>
+<tr>
+<td style="text-align: left;">report cluster</td>
+<td style="text-align: left;">clusters: get<br/>pods: list<br/>pods/log: get<br/>jobs: list<br/>events: list<br/>PVCs: list</td>
+</tr>
+<tr>
+<td style="text-align: left;">report operator</td>
+<td style="text-align: left;">configmaps: get<br/>deployments: get<br/>events: list<br/>pods: list<br/>pods/log: get<br/>secrets: get<br/>services: get<br/>mutatingwebhookconfigurations: list<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup><br/> validatingwebhookconfigurations: list<sup id="fnref2:1"><a class="footnote-ref" href="#fn:1">1</a></sup><br/> If OLM is present on the K8s cluster, also:<br/>clusterserviceversions: list<br/>installplans: list<br/>subscriptions: list</td>
+</tr>
+<tr>
+<td style="text-align: left;">restart</td>
+<td style="text-align: left;">clusters: get,patch<br/>pods: get,delete</td>
+</tr>
+<tr>
+<td style="text-align: left;">status</td>
+<td style="text-align: left;">clusters: get<br/>pods: list<br/>pods/exec: create<br/>pods/proxy: create<br/>PDBs: list</td>
+</tr>
+<tr>
+<td style="text-align: left;">subscription</td>
+<td style="text-align: left;">clusters: get<br/>pods: get,list<br/>pods/exec: create</td>
+</tr>
+<tr>
+<td style="text-align: left;">version</td>
+<td style="text-align: left;">none</td>
+</tr>
+</tbody>
+</table>
+<div class="footnote">
+<hr />
+<ol>
+<li id="fn:1">
+<p>The permissions are cluster scope ClusterRole resources.&#160;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&#8617;</a><a class="footnote-backref" href="#fnref2:1" title="Jump back to footnote 1 in the text">&#8617;</a></p>
+</li>
+</ol>
+</div>
+<p>Additionally, assigning the <code>list</code> permission on the <code>clusters</code> will enable
+autocompletion for multiple commands.</p>
+<h3 id="role-examples">Role examples</h3>
+<p>It is possible to create roles with restricted permissions.
+The following example creates a role that only has access to the cluster logs:</p>
+<pre><code class="language-yaml">---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: cnpg-log
+rules:
+  - verbs:
+      - get
+    apiGroups:
+      - postgresql.cnpg.io
+    resources:
+      - clusters
+  - verbs:
+      - list
+    apiGroups:
+      - ''
+    resources:
+      - pods
+  - verbs:
+      - get
+    apiGroups:
+      - ''
+    resources:
+      - pods/log
+</code></pre>
+<p>The next example shows a role with the minimal permissions required to get
+the cluster status using the plugin's <code>status</code> command:</p>
+<pre><code class="language-yaml">apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: cnpg-status
+rules:
+  - verbs:
+      - get
+    apiGroups:
+      - postgresql.cnpg.io
+    resources:
+      - clusters
+  - verbs:
+      - list
+    apiGroups:
+      - ''
+    resources:
+      - pods
+  - verbs:
+      - create
+    apiGroups:
+      - ''
+    resources:
+      - pods/exec
+  - verbs:
+      - create
+    apiGroups:
+      - ''
+    resources:
+      - pods/proxy
+  - verbs:
+      - list
+    apiGroups:
+      - policy
+    resources:
+      - poddisruptionbudgets
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Keeping the verbs restricted per <code>resources</code> and per <code>apiGroups</code> helps to
+prevent inadvertently granting more than intended permissions.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../postgres_upgrades/" class="btn btn-neutral float-left" title="PostgreSQL Upgrades"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../failover/" class="btn btn-neutral float-right" title="Automated failover">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../postgres_upgrades/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../failover/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/kubernetes_upgrade/index.html b/assets/documentation/1.27.0-rc1/kubernetes_upgrade/index.html
new file mode 100644
index 000000000..c39c39f50
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/kubernetes_upgrade/index.html
@@ -0,0 +1,544 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Kubernetes Upgrade and Maintenance - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Kubernetes Upgrade and Maintenance";
+        var mkdocs_page_input_path = "kubernetes_upgrade.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Kubernetes Upgrade and Maintenance</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#importance-of-regular-updates">Importance of Regular Updates</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#maintenance-operations-in-a-cluster">Maintenance Operations in a Cluster</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#temporary-postgresql-cluster-degradation">Temporary PostgreSQL Cluster Degradation</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#pod-disruption-budgets">Pod Disruption Budgets</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-clusters-used-for-development-or-testing">PostgreSQL Clusters used for Development or Testing</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#node-maintenance-window">Node Maintenance Window</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#single-instance-clusters-with-reusepvc-set-to-false">Single instance clusters with reusePVC set to false</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Kubernetes Upgrade and Maintenance</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="kubernetes-upgrade-and-maintenance">Kubernetes Upgrade and Maintenance</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>Maintaining an up-to-date Kubernetes cluster is crucial for ensuring optimal
+performance and security, particularly for self-managed clusters, especially
+those running on bare metal infrastructure. Regular updates help address
+technical debt and mitigate business risks, despite the controlled downtimes
+associated with temporarily removing a node from the cluster for maintenance
+purposes. For further insights on embracing risk in operations, refer to the
+<a href="https://landing.google.com/sre/sre-book/chapters/embracing-risk/">"Embracing Risk"</a>
+chapter from the Site Reliability Engineering book.</p>
+<h2 id="importance-of-regular-updates">Importance of Regular Updates</h2>
+<p>Updating Kubernetes involves planning and executing maintenance tasks, such as
+applying security updates to underlying Linux servers, replacing malfunctioning
+hardware components, or upgrading the cluster to the latest Kubernetes version.
+These activities are essential for maintaining a robust and secure
+infrastructure.</p>
+<h2 id="maintenance-operations-in-a-cluster">Maintenance Operations in a Cluster</h2>
+<p>Typically, maintenance operations are carried out on one node at a time, following a <a href="https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/">structured process</a>:</p>
+<ol>
+<li>eviction of workloads (<code>drain</code>): workloads are gracefully moved away from
+   the node to be updated, ensuring a smooth transition.</li>
+<li>performing the operation: the actual maintenance operation, such as a
+   system update or hardware replacement, is executed.</li>
+<li>rejoining the node to the cluster (<code>uncordon</code>): the updated node is
+   reintegrated into the cluster, ready to resume its responsibilities.</li>
+</ol>
+<p>This process requires either stopping workloads for the entire upgrade duration
+or migrating them to other nodes in the cluster.</p>
+<h2 id="temporary-postgresql-cluster-degradation">Temporary PostgreSQL Cluster Degradation</h2>
+<p>While the standard approach ensures service reliability and leverages
+Kubernetes' self-healing capabilities, there are scenarios where operating with
+a temporarily degraded cluster may be acceptable. This is particularly relevant
+for PostgreSQL clusters relying on <strong>node-local storage</strong>, where the storage is
+local to the Kubernetes worker node running the PostgreSQL database. Node-local
+storage, or simply <em>local storage</em>, is employed to enhance performance.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>If your database files reside on shared storage accessible over the
+network, the default self-healing behavior of the operator can efficiently
+handle scenarios where volumes are reused by pods on different nodes after a
+drain operation. In such cases, you can skip the remaining sections of this
+document.</p>
+</div>
+<h2 id="pod-disruption-budgets">Pod Disruption Budgets</h2>
+<p>By default, CloudNativePG safeguards Postgres cluster operations. If a node is
+to be drained and contains a cluster's primary instance, a switchover happens
+ahead of the drain. Once the instance in the node is downgraded to replica, the
+draining can resume.
+For single-instance clusters, a switchover is not possible, so CloudNativePG
+will prevent draining the node where the instance is housed.
+Additionally, in clusters with 3 or more instances, CloudNativePG guarantees that
+only one replica at a time is gracefully shut down during a drain operation.</p>
+<p>Each PostgreSQL <code>Cluster</code> is equipped with two associated <code>PodDisruptionBudget</code>
+resources - you can easily confirm it with the <code>kubectl get pdb</code> command.</p>
+<p>Our recommendation is to leave pod disruption budgets enabled for every
+production Postgres cluster. This can be effortlessly managed by toggling the
+<code>.spec.enablePDB</code> option, as detailed in the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterSpec">API reference</a>.</p>
+<h2 id="postgresql-clusters-used-for-development-or-testing">PostgreSQL Clusters used for Development or Testing</h2>
+<p>For PostgreSQL clusters used for development purposes, often consisting of
+a single instance, it is essential to disable pod disruption budgets. Failure
+to do so will prevent the node hosting that cluster from being drained.</p>
+<p>The following example illustrates how to disable pod disruption budgets for a
+1-instance development cluster:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: dev
+spec:
+  instances: 1
+  enablePDB: false
+
+  storage:
+    size: 1Gi
+</code></pre>
+<p>This configuration ensures smoother maintenance procedures without restrictions
+on draining the node during development activities.</p>
+<h2 id="node-maintenance-window">Node Maintenance Window</h2>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>While CloudNativePG will continue supporting the node maintenance window,
+it is currently recommended to transition to direct control of pod disruption
+budgets, as explained in the previous section. This section is retained
+mainly for backward compatibility.</p>
+</div>
+<p>Prior to release 1.23, CloudNativePG had just one declarative mechanism to manage
+Kubernetes upgrades when dealing with local storage: you had to temporarily put
+the cluster in <strong>maintenance mode</strong> through the <code>nodeMaintenanceWindow</code> option
+to avoid standard self-healing procedures to kick in, while, for example,
+enlarging the partition on the physical node or updating the node itself.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Limit the duration of the maintenance window to the shortest
+amount of time possible. In this phase, some of the expected
+behaviors of Kubernetes are either disabled or running with
+some limitations, including self-healing, rolling updates,
+and Pod disruption budget.</p>
+</div>
+<p>The <code>nodeMaintenanceWindow</code> option of the cluster has two further
+settings:</p>
+<p><code>inProgress</code>:
+Boolean value that states if the maintenance window for the nodes
+is currently in progress or not. By default, it is set to <code>off</code>.
+During the maintenance window, the <code>reusePVC</code> option below is
+evaluated by the operator.</p>
+<p><code>reusePVC</code>:
+Boolean value that defines if an existing PVC is reused or
+not during the maintenance operation. By default, it is set to <code>on</code>.
+When <strong>enabled</strong>, Kubernetes waits for the node to come up
+again and then reuses the existing PVC; the <code>PodDisruptionBudget</code>
+policy is temporarily removed.
+When <strong>disabled</strong>, Kubernetes forces the recreation of the
+Pod on a different node with a new PVC by relying on
+PostgreSQL's physical streaming replication, then destroys
+the old PVC together with the Pod. This scenario is generally
+not recommended unless the database's size is small, and re-cloning
+the new PostgreSQL instance takes shorter than waiting. This behavior
+does <strong>not</strong> apply to clusters with only one instance and
+reusePVC disabled: see section below.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>When performing the <code>kubectl drain</code> command, you will need
+to add the <code>--delete-emptydir-data</code> option.
+Don't be afraid: it refers to another volume internally used
+by the operator - not the PostgreSQL data directory.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p><code>PodDisruptionBudget</code> management can be disabled by setting the
+<code>.spec.enablePDB</code> field to <code>false</code>. In that case, the operator won't
+create <code>PodDisruptionBudgets</code> and will delete them if they were
+previously created.</p>
+</div>
+<h3 id="single-instance-clusters-with-reusepvc-set-to-false">Single instance clusters with <code>reusePVC</code> set to <code>false</code></h3>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>We recommend to always create clusters with more
+than one instance in order to guarantee high availability.</p>
+</div>
+<p>Deleting the only PostgreSQL instance in a single instance cluster with
+<code>reusePVC</code> set to <code>false</code> would imply all data being lost,
+therefore we prevent users from draining nodes such instances might be running
+on, even in maintenance mode.</p>
+<p>However, in case maintenance is required for such a node you have two options:</p>
+<ol>
+<li>Enable <code>reusePVC</code>, accepting the downtime</li>
+<li>Replicate the instance on a different node and switch over the primary</li>
+</ol>
+<p>As long as a database service downtime is acceptable for your environment,
+draining the node is as simple as setting the <code>nodeMaintenanceWindow</code> to
+<code>inProgress: true</code> and <code>reusePVC: true</code>. This will allow the instance to
+be deleted and recreated as soon as the original PVC is available
+(e.g. with node local storage, as soon as the node is back up).</p>
+<p>Otherwise you will have to scale up the cluster, creating a new instance
+on a different node and promoting the new instance to primary in order to
+shut down the original one on the node undergoing maintenance. The only
+downtime in this case will be the duration of the switchover.</p>
+<p>A possible approach could be:</p>
+<ol>
+<li>Cordon the node on which the current instance is running.</li>
+<li>Scale up the cluster to 2 instances, could take some time depending on the database size.</li>
+<li>As soon as the new instance is running, the operator will automatically
+   perform a switchover given that the current primary is running on a cordoned node.</li>
+<li>Scale back down the cluster to a single instance, this will delete the old instance</li>
+<li>The old primary's node can now be drained successfully, while leaving the new primary
+   running on a new node.</li>
+</ol>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../replica_cluster/" class="btn btn-neutral float-left" title="Replica clusters"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../postgres_upgrades/" class="btn btn-neutral float-right" title="PostgreSQL Upgrades">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../replica_cluster/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../postgres_upgrades/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/labels_annotations/index.html b/assets/documentation/1.27.0-rc1/labels_annotations/index.html
new file mode 100644
index 000000000..00bc5c36c
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/labels_annotations/index.html
@@ -0,0 +1,609 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Labels and annotations - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Labels and annotations";
+        var mkdocs_page_input_path = "labels_annotations.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Labels and annotations</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#predefined-labels">Predefined labels</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#predefined-annotations">Predefined annotations</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#prerequisites">Prerequisites</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#defining-clusters-metadata">Defining cluster's metadata</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#current-limitations">Current limitations</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Labels and annotations</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="labels-and-annotations">Labels and annotations</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>Resources in Kubernetes are organized in a flat structure, with no hierarchical
+information or relationship between them. However, such resources and objects
+can be linked together and put in relationship through <em>labels</em> and
+<em>annotations</em>.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For more information, see the Kubernetes documentation on
+<a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/">annotations</a> and
+<a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/">labels</a>.</p>
+</div>
+<p>In brief:</p>
+<ul>
+<li>An annotation is used to assign additional non-identifying information to
+  resources with the goal of facilitating integration with external tools.</li>
+<li>A label is used to group objects and query them through the Kubernetes native
+  selector capability.</li>
+</ul>
+<p>You can select one or more labels or annotations to use
+in your CloudNativePG deployments. Then you need to configure the operator
+so that when you define these labels or annotations in a cluster's metadata,
+they're inherited by all resources created by it (including pods).</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Label and annotation inheritance is the technique adopted by CloudNativePG
+instead of alternative approaches such as pod templates.</p>
+</div>
+<h2 id="predefined-labels">Predefined labels</h2>
+<p>CloudNativePG manages the following predefined labels:</p>
+<dl>
+<dt><code>cnpg.io/backupDate</code></dt>
+<dd>The date of the backup in ISO 8601 format (<code>YYYYMMDD</code>).
+  This label is available only on <code>VolumeSnapshot</code> resources.</dd>
+<dt><code>cnpg.io/backupName</code></dt>
+<dd>Backup identifier.
+  This label is available only on <code>VolumeSnapshot</code> resources.</dd>
+<dt><code>cnpg.io/backupMonth</code></dt>
+<dd>The year/month when a backup was taken.
+  This label is available only on <code>VolumeSnapshot</code> resources.</dd>
+<dt><code>cnpg.io/backupTimeline</code></dt>
+<dd>The timeline of the instance when a backup was taken.
+  This label is available only on <code>VolumeSnapshot</code> resources.</dd>
+<dt><code>cnpg.io/backupYear</code></dt>
+<dd>The year a backup was taken.
+  This label is available only on <code>VolumeSnapshot</code> resources.</dd>
+<dt><code>cnpg.io/cluster</code></dt>
+<dd>Name of the cluster.</dd>
+<dt><code>cnpg.io/immediateBackup</code></dt>
+<dd>Applied to a <code>Backup</code> resource if the backup is the first one created from
+  a <code>ScheduledBackup</code> object having <code>immediate</code> set to <code>true</code>.</dd>
+<dt><code>cnpg.io/instanceName</code></dt>
+<dd>Name of the PostgreSQL instance (replaces the old and
+  deprecated <code>postgresql</code> label).</dd>
+<dt><code>cnpg.io/jobRole</code></dt>
+<dd>Role of the job (that is, <code>import</code>, <code>initdb</code>, <code>join</code>, ...)</dd>
+<dt><code>cnpg.io/onlineBackup</code></dt>
+<dd>Whether the backup is online (hot) or taken when Postgres is down (cold).
+  This label is available only on <code>VolumeSnapshot</code> resources.</dd>
+<dt><code>cnpg.io/podRole</code></dt>
+<dd>Distinguishes pods dedicated to pooler deployment from those used for
+  database instances.</dd>
+<dt><code>cnpg.io/poolerName</code></dt>
+<dd>Name of the PgBouncer pooler.</dd>
+<dt><code>cnpg.io/pvcRole</code></dt>
+<dd>Purpose of the PVC, such as <code>PG_DATA</code> or <code>PG_WAL</code>.</dd>
+<dt><code>cnpg.io/reload</code></dt>
+<dd>Available on <code>ConfigMap</code> and <code>Secret</code> resources. When set to <code>true</code>,
+  a change in the resource is automatically reloaded by the operator.</dd>
+<dt><code>cnpg.io/userType</code></dt>
+<dd>Specifies the type of PostgreSQL user associated with the
+  <code>Secret</code>, either <code>superuser</code> (Postgres superuser access) or <code>app</code>
+  (application-level user in CloudNativePG terminology), and is limited to the
+  default users created by CloudNativePG (typically <code>postgres</code> and <code>app</code>).</dd>
+<dt><code>role</code> - <strong>deprecated</strong></dt>
+<dd>Whether the instance running in a pod is a <code>primary</code> or a <code>replica</code>.
+   This label is deprecated, you should use <code>cnpg.io/instanceRole</code> instead.</dd>
+<dt><code>cnpg.io/scheduled-backup</code></dt>
+<dd>When available, name of the <code>ScheduledBackup</code> resource that created a given
+   <code>Backup</code> object.</dd>
+<dt><code>cnpg.io/instanceRole</code></dt>
+<dd>Whether the instance running in a pod is a <code>primary</code> or a <code>replica</code>.</dd>
+</dl>
+<h2 id="predefined-annotations">Predefined annotations</h2>
+<p>CloudNativePG manages the following predefined annotations:</p>
+<dl>
+<dt><code>container.apparmor.security.beta.kubernetes.io/*</code></dt>
+<dd>Name of the AppArmor profile to apply to the named container.
+See <a href="../security/#restricting-pod-access-using-apparmor">AppArmor</a>
+for details.</dd>
+<dt><code>cnpg.io/backupEndTime</code></dt>
+<dd>The time a backup ended.
+  This annotation is available only on <code>VolumeSnapshot</code> resources.</dd>
+<dt><code>cnpg.io/backupEndWAL</code></dt>
+<dd>The WAL at the conclusion of a backup.
+  This annotation is available only on <code>VolumeSnapshot</code> resources.</dd>
+<dt><code>cnpg.io/backupStartTime</code></dt>
+<dd>The time a backup started.</dd>
+<dt><code>cnpg.io/backupStartWAL</code></dt>
+<dd>The WAL at the start of a backup.
+  This annotation is available only on <code>VolumeSnapshot</code> resources.</dd>
+<dt><code>cnpg.io/coredumpFilter</code></dt>
+<dd>Filter to control the coredump of Postgres processes, expressed with a
+bitmask. By default it's set to <code>0x31</code> to exclude shared memory
+segments from the dump. See <a href="../troubleshooting/#postgresql-core-dumps">PostgreSQL core dumps</a>
+for more information.</dd>
+<dt><code>cnpg.io/clusterManifest</code></dt>
+<dd>Manifest of the <code>Cluster</code> owning this resource (such as a PVC). This label
+replaces the old, deprecated <code>cnpg.io/hibernateClusterManifest</code> label.</dd>
+<dt><code>cnpg.io/fencedInstances</code></dt>
+<dd>List of the instances that need to be fenced, expressed in JSON format.
+The whole cluster is fenced if the list contains the <code>*</code> element.</dd>
+<dt><code>cnpg.io/forceLegacyBackup</code></dt>
+<dd>Applied to a <code>Cluster</code> resource for testing purposes only, to
+simulate the behavior of <code>barman-cloud-backup</code> prior to version 3.4 (Jan 2023)
+when the <code>--name</code> option wasn't available.</dd>
+<dt><code>cnpg.io/hash</code></dt>
+<dd>The hash value of the resource.</dd>
+<dt><code>cnpg.io/hibernation</code></dt>
+<dd>Applied to a <code>Cluster</code> resource to control the <a href="../declarative_hibernation/">declarative hibernation feature</a>.
+Allowed values are <code>on</code> and <code>off</code>.</dd>
+<dt><code>cnpg.io/managedSecrets</code></dt>
+<dd>Pull secrets managed by the operator and automatically set in the
+<code>ServiceAccount</code> resources for each Postgres cluster.</dd>
+<dt><code>cnpg.io/nodeSerial</code></dt>
+<dd>On a pod resource, identifies the serial number of the instance within the
+Postgres cluster.</dd>
+<dt><code>cnpg.io/operatorVersion</code></dt>
+<dd>Version of the operator.</dd>
+<dt><code>cnpg.io/pgControldata</code></dt>
+<dd>Output of the <code>pg_controldata</code> command. This annotation replaces the old,
+deprecated <code>cnpg.io/hibernatePgControlData</code> annotation.</dd>
+<dt><code>cnpg.io/podEnvHash</code></dt>
+<dd>Deprecated, as the <code>cnpg.io/podSpec</code> annotation now also contains the pod environment.</dd>
+<dt><code>cnpg.io/podPatch</code></dt>
+<dd>
+<p>Annotation can be applied on a <code>Cluster</code> resource.</p>
+<p>When set to JSON-patch formatted patch, the patch will be applied on the instance Pods.</p>
+<p><strong>⚠️ WARNING:</strong> This feature may introduce discrepancies between the
+operator’s expectations and Kubernetes behavior. Use with caution and only as a
+last resort.</p>
+<p><strong>IMPORTANT</strong>: adding or changing this annotation won't trigger a rolling deployment
+of the generated Pods. The latter can be triggered manually by the user with
+<code>kubectl cnpg restart</code>.</p>
+</dd>
+<dt><code>cnpg.io/podSpec</code></dt>
+<dd>Snapshot of the <code>spec</code> of the pod generated by the operator. This annotation replaces
+the old, deprecated <code>cnpg.io/podEnvHash</code> annotation.</dd>
+<dt><code>cnpg.io/poolerSpecHash</code></dt>
+<dd>Hash of the pooler resource.</dd>
+<dt><code>cnpg.io/pvcStatus</code></dt>
+<dd>Current status of the PVC: <code>initializing</code>, <code>ready</code>, or <code>detached</code>.</dd>
+<dt><code>cnpg.io/reconcilePodSpec</code></dt>
+<dd>
+<p>Annotation can be applied to a <code>Cluster</code> or <code>Pooler</code> to prevent restarts.</p>
+<p>When set to <code>disabled</code> on a <code>Cluster</code>, the operator prevents instances
+from restarting due to changes in the PodSpec. This includes changes to:</p>
+<ul>
+<li>Topology or affinity</li>
+<li>Scheduler</li>
+<li>Volumes or containers</li>
+</ul>
+<p>When set to <code>disabled</code> on a <code>Pooler</code>, the operator restricts any modifications
+to the deployment specification, except for changes to <code>spec.instances</code>.</p>
+</dd>
+<dt><code>cnpg.io/reconciliationLoop</code></dt>
+<dd>When set to <code>disabled</code> on a <code>Cluster</code>, the operator prevents the
+reconciliation loop from running.</dd>
+<dt><code>cnpg.io/reloadedAt</code></dt>
+<dd>Contains the latest cluster <code>reload</code> time. <code>reload</code> is triggered by the user through a plugin.</dd>
+<dt><code>cnpg.io/skipEmptyWalArchiveCheck</code></dt>
+<dd>When set to <code>enabled</code> on a <code>Cluster</code> resource, the operator disables the check
+that ensures that the WAL archive is empty before writing data. Use at your own
+risk.</dd>
+<dt><code>cnpg.io/skipWalArchiving</code></dt>
+<dd>When set to <code>enabled</code> on a <code>Cluster</code> resource, the operator disables WAL archiving.
+This will set <code>archive_mode</code> to <code>off</code> and require a restart of all PostgreSQL
+instances. Use at your own risk.</dd>
+<dt><code>cnpg.io/snapshotStartTime</code></dt>
+<dd>The time a snapshot started.</dd>
+<dt><code>cnpg.io/snapshotEndTime</code></dt>
+<dd>The time a snapshot was marked as ready to use.</dd>
+<dt><code>cnpg.io/validation</code></dt>
+<dd>
+<p>When set to <code>disabled</code> on a CloudNativePG-managed custom resource, the
+validation webhook allows all changes without restriction.</p>
+<p><strong>⚠️ WARNING:</strong> Disabling validation may permit unsafe or destructive
+operations. Use this setting with caution and at your own risk.</p>
+</dd>
+<dt><code>cnpg.io/volumeSnapshotDeadline</code></dt>
+<dd>Applied to <code>Backup</code> and <code>ScheduledBackup</code> resources, allows you to control
+how long the operator should retry recoverable errors before considering the
+volume snapshot backup failed. In minutes, defaulting to 10.</dd>
+<dt><code>kubectl.kubernetes.io/restartedAt</code></dt>
+<dd>When available, the time of last requested restart of a Postgres cluster.</dd>
+</dl>
+<h2 id="prerequisites">Prerequisites</h2>
+<p>By default, no label or annotation defined in the cluster's metadata is
+inherited by the associated resources.
+To enable label/annotation inheritance, follow the
+instructions provided in <a href="../operator_conf/">Operator configuration</a>.</p>
+<p>The following continues from that example and limits it to the following:</p>
+<ul>
+<li>Annotations: <code>categories</code></li>
+<li>Labels: <code>app</code>, <code>environment</code>, and <code>workload</code></li>
+</ul>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Feel free to select the names that most suit your context for both
+annotations and labels. You can also use wildcards
+in naming and adopt strategies like using <code>mycompany/*</code> for all labels
+or setting annotations starting with <code>mycompany/</code> to be inherited.</p>
+</div>
+<h2 id="defining-clusters-metadata">Defining cluster's metadata</h2>
+<p>When defining the cluster, before any resource is deployed, you can
+set the metadata as follows:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+  annotations:
+    categories: database
+  labels:
+    environment: production
+    workload: database
+    app: sso
+spec:
+     # ... &lt;snip&gt;
+</code></pre>
+<p>Once the cluster is deployed, you can verify, for example, that the labels
+were correctly set in the pods:</p>
+<pre><code class="language-shell">kubectl get pods --show-labels
+</code></pre>
+<h2 id="current-limitations">Current limitations</h2>
+<p>Currently, CloudNativePG doesn't automatically propagate labels or
+annotations deletions. Therefore, when an annotation or label is removed from
+a cluster that was previously propagated to the underlying pods, the operator
+doesn't remove it on the associated resources.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../storage/" class="btn btn-neutral float-left" title="Storage"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../monitoring/" class="btn btn-neutral float-right" title="Monitoring">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../storage/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../monitoring/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/logging/index.html b/assets/documentation/1.27.0-rc1/logging/index.html
new file mode 100644
index 000000000..482a258bb
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/logging/index.html
@@ -0,0 +1,570 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Logging - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Logging";
+        var mkdocs_page_input_path = "logging.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Logging</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#cluster-logs">Cluster Logs</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#operator-logs">Operator Logs</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-logs">PostgreSQL Logs</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#pgaudit-logs">PGAudit Logs</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#other-logs">Other Logs</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Logging</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="logging">Logging</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG outputs logs in JSON format directly to standard output, including
+PostgreSQL logs, without persisting them to storage for security reasons. This
+design facilitates seamless integration with most Kubernetes-compatible log
+management tools, including command line ones like
+<a href="https://github.com/stern/stern">stern</a>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Long-term storage and management of logs are outside the scope of the
+operator and should be handled at the Kubernetes infrastructure level.
+For more information, see the
+<a href="https://kubernetes.io/docs/concepts/cluster-administration/logging/">Kubernetes Logging Architecture</a>
+documentation.</p>
+</div>
+<p>Each log entry includes the following fields:</p>
+<ul>
+<li><code>level</code> – The log level (e.g., <code>info</code>, <code>notice</code>).</li>
+<li><code>ts</code> – The timestamp.</li>
+<li><code>logger</code> – The type of log (e.g., <code>postgres</code>, <code>pg_controldata</code>).</li>
+<li><code>msg</code> – The log message, or the keyword <code>record</code> if the message is in JSON
+  format.</li>
+<li><code>record</code> – The actual record, with a structure that varies depending on the
+  <code>logger</code> type.</li>
+<li><code>logging_pod</code> – The name of the pod where the log was generated.</li>
+</ul>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>If your log ingestion system requires custom field names, you can rename
+the <code>level</code> and <code>ts</code> fields using the <code>log-field-level</code> and
+<code>log-field-timestamp</code> flags in the operator controller. This can be configured
+by editing the <code>Deployment</code> definition of the <code>cloudnative-pg</code> operator.</p>
+</div>
+<h2 id="cluster-logs">Cluster Logs</h2>
+<p>You can configure the log level for the instance pods in the cluster
+specification using the <code>logLevel</code> option. Available log levels are: <code>error</code>,
+<code>warning</code>, <code>info</code> (default), <code>debug</code>, and <code>trace</code>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Currently, the log level can only be set at the time the instance starts.
+Changes to the log level in the cluster specification after the cluster has
+started will only apply to new pods, not existing ones.</p>
+</div>
+<h2 id="operator-logs">Operator Logs</h2>
+<p>The logs produced by the operator pod can be configured with log
+levels, same as instance pods: <code>error</code>, <code>warning</code>, <code>info</code> (default), <code>debug</code>,
+and <code>trace</code>.</p>
+<p>The log level for the operator can be configured by editing the <code>Deployment</code>
+definition of the operator and setting the <code>--log-level</code> command line argument
+to the desired value.</p>
+<h2 id="postgresql-logs">PostgreSQL Logs</h2>
+<p>Each PostgreSQL log entry is a JSON object with the <code>logger</code> key set to
+<code>postgres</code>. The structure of the log entries is as follows:</p>
+<pre><code class="language-json">{
+  &quot;level&quot;: &quot;info&quot;,
+  &quot;ts&quot;: 1619781249.7188137,
+  &quot;logger&quot;: &quot;postgres&quot;,
+  &quot;msg&quot;: &quot;record&quot;,
+  &quot;record&quot;: {
+    &quot;log_time&quot;: &quot;2021-04-30 11:14:09.718 UTC&quot;,
+    &quot;user_name&quot;: &quot;&quot;,
+    &quot;database_name&quot;: &quot;&quot;,
+    &quot;process_id&quot;: &quot;25&quot;,
+    &quot;connection_from&quot;: &quot;&quot;,
+    &quot;session_id&quot;: &quot;608be681.19&quot;,
+    &quot;session_line_num&quot;: &quot;1&quot;,
+    &quot;command_tag&quot;: &quot;&quot;,
+    &quot;session_start_time&quot;: &quot;2021-04-30 11:14:09 UTC&quot;,
+    &quot;virtual_transaction_id&quot;: &quot;&quot;,
+    &quot;transaction_id&quot;: &quot;0&quot;,
+    &quot;error_severity&quot;: &quot;LOG&quot;,
+    &quot;sql_state_code&quot;: &quot;00000&quot;,
+    &quot;message&quot;: &quot;database system was interrupted; last known up at 2021-04-30 11:14:07 UTC&quot;,
+    &quot;detail&quot;: &quot;&quot;,
+    &quot;hint&quot;: &quot;&quot;,
+    &quot;internal_query&quot;: &quot;&quot;,
+    &quot;internal_query_pos&quot;: &quot;&quot;,
+    &quot;context&quot;: &quot;&quot;,
+    &quot;query&quot;: &quot;&quot;,
+    &quot;query_pos&quot;: &quot;&quot;,
+    &quot;location&quot;: &quot;&quot;,
+    &quot;application_name&quot;: &quot;&quot;,
+    &quot;backend_type&quot;: &quot;startup&quot;
+  },
+  &quot;logging_pod&quot;: &quot;cluster-example-1&quot;,
+}
+</code></pre>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Internally, the operator uses PostgreSQL's CSV log format. For more details,
+refer to the <a href="https://www.postgresql.org/docs/current/runtime-config-logging.html">PostgreSQL documentation on CSV log format</a>.</p>
+</div>
+<h2 id="pgaudit-logs">PGAudit Logs</h2>
+<p>CloudNativePG offers seamless and native support for
+<a href="https://www.pgaudit.org/">PGAudit</a> on PostgreSQL clusters.</p>
+<p>To enable PGAudit, add the necessary <code>pgaudit</code> parameters in the <code>postgresql</code>
+section of the cluster configuration.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The PGAudit library must be added to <code>shared_preload_libraries</code>.
+CloudNativePG automatically manages this based on the presence of <code>pgaudit.*</code>
+parameters in the PostgreSQL configuration. The operator handles both the
+addition and removal of the library from <code>shared_preload_libraries</code>.</p>
+</div>
+<p>Additionally, the operator manages the creation and removal of the PGAudit
+extension across all databases within the cluster.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>CloudNativePG executes the <code>CREATE EXTENSION</code> and <code>DROP EXTENSION</code> commands
+in all databases within the cluster that accept connections.</p>
+</div>
+<p>The following example demonstrates a PostgreSQL <code>Cluster</code> deployment with
+PGAudit enabled and configured:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+
+  postgresql:
+    parameters:
+      &quot;pgaudit.log&quot;: &quot;all, -misc&quot;
+      &quot;pgaudit.log_catalog&quot;: &quot;off&quot;
+      &quot;pgaudit.log_parameter&quot;: &quot;on&quot;
+      &quot;pgaudit.log_relation&quot;: &quot;on&quot;
+
+  storage:
+    size: 1Gi
+</code></pre>
+<p>The audit CSV log entries generated by PGAudit are parsed and routed to
+standard output in JSON format, similar to all other logs:</p>
+<ul>
+<li><code>.logger</code> is set to <code>pgaudit</code>.</li>
+<li><code>.msg</code> is set to <code>record</code>.</li>
+<li><code>.record</code> contains the entire parsed record as a JSON object. This structure
+  resembles that of <code>logging_collector</code> logs, with the exception of
+  <code>.record.audit</code>, which contains the PGAudit CSV message formatted as a JSON
+  object.</li>
+</ul>
+<p>This example shows sample log entries:</p>
+<pre><code class="language-json">{
+  &quot;level&quot;: &quot;info&quot;,
+  &quot;ts&quot;: 1627394507.8814096,
+  &quot;logger&quot;: &quot;pgaudit&quot;,
+  &quot;msg&quot;: &quot;record&quot;,
+  &quot;record&quot;: {
+    &quot;log_time&quot;: &quot;2021-07-27 14:01:47.881 UTC&quot;,
+    &quot;user_name&quot;: &quot;postgres&quot;,
+    &quot;database_name&quot;: &quot;postgres&quot;,
+    &quot;process_id&quot;: &quot;203&quot;,
+    &quot;connection_from&quot;: &quot;[local]&quot;,
+    &quot;session_id&quot;: &quot;610011cb.cb&quot;,
+    &quot;session_line_num&quot;: &quot;1&quot;,
+    &quot;command_tag&quot;: &quot;SELECT&quot;,
+    &quot;session_start_time&quot;: &quot;2021-07-27 14:01:47 UTC&quot;,
+    &quot;virtual_transaction_id&quot;: &quot;3/336&quot;,
+    &quot;transaction_id&quot;: &quot;0&quot;,
+    &quot;error_severity&quot;: &quot;LOG&quot;,
+    &quot;sql_state_code&quot;: &quot;00000&quot;,
+    &quot;backend_type&quot;: &quot;client backend&quot;,
+    &quot;audit&quot;: {
+      &quot;audit_type&quot;: &quot;SESSION&quot;,
+      &quot;statement_id&quot;: &quot;1&quot;,
+      &quot;substatement_id&quot;: &quot;1&quot;,
+      &quot;class&quot;: &quot;READ&quot;,
+      &quot;command&quot;: &quot;SELECT FOR KEY SHARE&quot;,
+      &quot;statement&quot;: &quot;SELECT pg_current_wal_lsn()&quot;,
+      &quot;parameter&quot;: &quot;&lt;none&gt;&quot;
+    }
+  },
+  &quot;logging_pod&quot;: &quot;cluster-example-1&quot;,
+}
+</code></pre>
+<p>See the
+<a href="https://github.com/pgaudit/pgaudit/blob/master/README.md#format">PGAudit documentation</a> <!-- wokeignore:rule=master -->
+for more details about each field in a record.</p>
+<h2 id="other-logs">Other Logs</h2>
+<p>All logs generated by the operator and its instances are in JSON format, with
+the <code>logger</code> field indicating the process that produced them. The possible
+<code>logger</code> values are as follows:</p>
+<ul>
+<li><code>barman-cloud-wal-archive</code>: logs from <code>barman-cloud-wal-archive</code></li>
+<li><code>barman-cloud-wal-restore</code>: logs from <code>barman-cloud-wal-restore</code></li>
+<li><code>initdb</code>: logs from running <code>initdb</code></li>
+<li><code>pg_basebackup</code>: logs from running <code>pg_basebackup</code></li>
+<li><code>pg_controldata</code>: logs from running <code>pg_controldata</code></li>
+<li><code>pg_ctl</code>: logs from running any <code>pg_ctl</code> subcommand</li>
+<li><code>pg_rewind</code>: logs from running <code>pg_rewind</code></li>
+<li><code>pgaudit</code>: logs from the PGAudit extension</li>
+<li><code>postgres</code>: logs from the <code>postgres</code> instance (with <code>msg</code> distinct from
+  <code>record</code>)</li>
+<li><code>wal-archive</code>: logs from the <code>wal-archive</code> subcommand of the instance manager</li>
+<li><code>wal-restore</code>: logs from the <code>wal-restore</code> subcommand of the instance manager</li>
+<li><code>instance-manager</code>: from the <a href="../instance_manager/">PostgreSQL instance manager</a></li>
+</ul>
+<p>With the exception of <code>postgres</code>, which follows a specific structure, all other
+<code>logger</code> values contain the <code>msg</code> field with the escaped message that is
+logged.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../monitoring/" class="btn btn-neutral float-left" title="Monitoring"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../certificates/" class="btn btn-neutral float-right" title="Certificates">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../monitoring/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../certificates/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/logical_replication/index.html b/assets/documentation/1.27.0-rc1/logical_replication/index.html
new file mode 100644
index 000000000..88f820ef5
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/logical_replication/index.html
@@ -0,0 +1,801 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Logical Replication - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Logical Replication";
+        var mkdocs_page_input_path = "logical_replication.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Logical Replication</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#publications">Publications</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#required-fields-in-the-publication-manifest">Required Fields in the Publication Manifest</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#reconciliation-and-status">Reconciliation and Status</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#removing-a-publication">Removing a publication</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#subscriptions">Subscriptions</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#required-fields-in-the-subscription-manifest">Required Fields in the Subscription Manifest</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#reconciliation-and-status_1">Reconciliation and Status</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#removing-a-subscription">Removing a Subscription</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#resilience-to-failovers">Resilience to Failovers</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#limitations">Limitations</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#addressing-schema-replication">Addressing Schema Replication</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#handling-sequences">Handling Sequences</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#example-of-live-migration-and-major-postgres-upgrade-with-logical-replication">Example of live migration and major Postgres upgrade with logical replication</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#step-1-setting-up-the-publisher-freddie">Step 1: Setting Up the Publisher (freddie)</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#step-2-setting-up-the-subscriber-king">Step 2: Setting Up the Subscriber (king)</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Logical Replication</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="logical-replication">Logical Replication</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>PostgreSQL extends its replication capabilities beyond physical replication,
+which operates at the level of exact block addresses and byte-by-byte copying,
+by offering <a href="https://www.postgresql.org/docs/current/logical-replication.html">logical replication</a>.
+Logical replication replicates data objects and their changes based on a
+defined replication identity, typically the primary key.</p>
+<p>Logical replication uses a publish-and-subscribe model, where subscribers
+connect to publications on a publisher node. Subscribers pull data changes from
+these publications and can re-publish them, enabling cascading replication and
+complex topologies.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>To protect your logical replication subscribers after a failover of the
+publisher cluster in CloudNativePG, ensure that replication slot
+synchronization for logical decoding is enabled. Without this, your logical
+replication clients may lose data and fail to continue seamlessly after a
+failover. For configuration details, see
+<a href="../replication/#logical-decoding-slot-synchronization">"Replication: Logical Decoding Slot Synchronization"</a>.</p>
+</div>
+<p>This flexible model is particularly useful for:</p>
+<ul>
+<li>Online data migrations</li>
+<li>Live PostgreSQL version upgrades</li>
+<li>Data distribution across systems</li>
+<li>Real-time analytics</li>
+<li>Integration with external applications</li>
+</ul>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For more details, examples, and limitations, please refer to the
+<a href="https://www.postgresql.org/docs/current/logical-replication.html">official PostgreSQL documentation on Logical Replication</a>.</p>
+</div>
+<p><strong>CloudNativePG</strong> enhances this capability by providing declarative support for
+key PostgreSQL logical replication objects:</p>
+<ul>
+<li><strong>Publications</strong> via the <code>Publication</code> resource</li>
+<li><strong>Subscriptions</strong> via the <code>Subscription</code> resource</li>
+</ul>
+<h2 id="publications">Publications</h2>
+<p>In PostgreSQL's publish-and-subscribe replication model, a
+<a href="https://www.postgresql.org/docs/current/logical-replication-publication.html"><strong>publication</strong></a>
+is the source of data changes. It acts as a logical container for the change
+sets (also known as <em>replication sets</em>) generated from one or more tables within
+a database. Publications can be defined on any PostgreSQL 10+ instance acting
+as the <em>publisher</em>, including instances managed by popular DBaaS solutions in the
+public cloud. Each publication is tied to a single database and provides
+fine-grained control over which tables and changes are replicated.</p>
+<p>For publishers outside Kubernetes, you can <a href="https://www.postgresql.org/docs/current/sql-createpublication.html">create publications using SQL</a>
+or leverage the <a href="../kubectl-plugin/#logical-replication-publications"><code>cnpg publication create</code> plugin command</a>.</p>
+<p>When managing <code>Cluster</code> objects with <strong>CloudNativePG</strong>, PostgreSQL publications
+can be defined declaratively through the <code>Publication</code> resource.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Please refer to the <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-Publication">API reference</a>
+for the full list of attributes you can define for each <code>Publication</code> object.</p>
+</div>
+<p>Suppose you have a cluster named <code>freddie</code> and want to replicate all tables in
+the <code>app</code> database. Here's a <code>Publication</code> manifest:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Publication
+metadata:
+  name: freddie-publisher
+spec:
+  cluster:
+    name: freddie
+  dbname: app
+  name: publisher
+  target:
+    allTables: true
+</code></pre>
+<p>In the above example:</p>
+<ul>
+<li>The publication object is named <code>freddie-publisher</code> (<code>metadata.name</code>).</li>
+<li>The publication is created via the primary of the <code>freddie</code> cluster
+  (<code>spec.cluster.name</code>) with name <code>publisher</code> (<code>spec.name</code>).</li>
+<li>It includes all tables (<code>spec.target.allTables: true</code>) from the <code>app</code>
+  database (<code>spec.dbname</code>).</li>
+</ul>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>While <code>allTables</code> simplifies configuration, PostgreSQL offers fine-grained
+control for replicating specific tables or targeted data changes. For advanced
+configurations, consult the <a href="https://www.postgresql.org/docs/current/logical-replication.html">PostgreSQL documentation</a>.
+Additionally, refer to the <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationTarget">CloudNativePG API reference</a>
+for details on declaratively customizing replication targets.</p>
+</div>
+<h3 id="required-fields-in-the-publication-manifest">Required Fields in the <code>Publication</code> Manifest</h3>
+<p>The following fields are required for a <code>Publication</code> object:</p>
+<ul>
+<li><code>metadata.name</code>: Unique name for the Kubernetes <code>Publication</code> object.</li>
+<li><code>spec.cluster.name</code>: Name of the PostgreSQL cluster.</li>
+<li><code>spec.dbname</code>: Database name where the publication is created.</li>
+<li><code>spec.name</code>: Publication name in PostgreSQL.</li>
+<li><code>spec.target</code>: Specifies the tables or changes to include in the publication.</li>
+</ul>
+<p>The <code>Publication</code> object must reference a specific <code>Cluster</code>, determining where
+the publication will be created. It is managed by the cluster's primary instance,
+ensuring the publication is created or updated as needed.</p>
+<h3 id="reconciliation-and-status">Reconciliation and Status</h3>
+<p>After creating a <code>Publication</code>, CloudNativePG manages it on the primary
+instance of the specified cluster. Following a successful reconciliation cycle,
+the <code>Publication</code> status will reflect the following:</p>
+<ul>
+<li><code>applied: true</code>, indicates the configuration has been successfully applied.</li>
+<li><code>observedGeneration</code> matches <code>metadata.generation</code>, confirming the applied
+  configuration corresponds to the most recent changes.</li>
+</ul>
+<p>If an error occurs during reconciliation, <code>status.applied</code> will be <code>false</code>, and
+an error message will be included in the <code>status.message</code> field.</p>
+<h3 id="removing-a-publication">Removing a publication</h3>
+<p>The <code>publicationReclaimPolicy</code> field controls the behavior when deleting a
+<code>Publication</code> object:</p>
+<ul>
+<li><code>retain</code> (default): Leaves the publication in PostgreSQL for manual
+  management.</li>
+<li><code>delete</code>: Automatically removes the publication from PostgreSQL.</li>
+</ul>
+<p>Consider the following example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Publication
+metadata:
+  name: freddie-publisher
+spec:
+  cluster:
+    name: freddie
+  dbname: app
+  name: publisher
+  target:
+    allTables: true
+  publicationReclaimPolicy: delete
+</code></pre>
+<p>In this case, deleting the <code>Publication</code> object also removes the <code>publisher</code>
+publication from the <code>app</code> database of the <code>freddie</code> cluster.</p>
+<h2 id="subscriptions">Subscriptions</h2>
+<p>In PostgreSQL's publish-and-subscribe replication model, a
+<a href="https://www.postgresql.org/docs/current/logical-replication-subscription.html"><strong>subscription</strong></a>
+represents the downstream component that consumes data changes.
+A subscription establishes the connection to a publisher's database and
+specifies the set of publications (one or more) it subscribes to. Subscriptions
+can be created on any supported PostgreSQL instance acting as the <em>subscriber</em>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Since schema definitions are not replicated, the subscriber must have the
+corresponding tables already defined before data replication begins.</p>
+</div>
+<p>CloudNativePG simplifies subscription management by enabling you to define them
+declaratively using the <code>Subscription</code> resource.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Please refer to the <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-Subscription">API reference</a>
+for the full list of attributes you can define for each <code>Subscription</code> object.</p>
+</div>
+<p>Suppose you want to replicate changes from the <code>publisher</code> publication on the
+<code>app</code> database of the <code>freddie</code> cluster (<em>publisher</em>) to the <code>app</code> database of
+the <code>king</code> cluster (<em>subscriber</em>). Here's an example of a <code>Subscription</code>
+manifest:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Subscription
+metadata:
+  name: freddie-to-king-subscription
+spec:
+  cluster:
+    name: king
+  dbname: app
+  name: subscriber
+  externalClusterName: freddie
+  publicationName: publisher
+</code></pre>
+<p>In the above example:</p>
+<ul>
+<li>The subscription object is named <code>freddie-to-king-subscriber</code> (<code>metadata.name</code>).</li>
+<li>The subscription is created in the <code>app</code> database (<code>spec.dbname</code>) of the
+  <code>king</code> cluster (<code>spec.cluster.name</code>), with name <code>subscriber</code> (<code>spec.name</code>).</li>
+<li>It connects to the <code>publisher</code> publication in the external <code>freddie</code> cluster,
+  referenced by <code>spec.externalClusterName</code>.</li>
+</ul>
+<p>To facilitate this setup, the <code>freddie</code> external cluster must be defined in the
+<code>king</code> cluster's configuration. Below is an example excerpt showing how to
+define the external cluster in the <code>king</code> manifest:</p>
+<pre><code class="language-yaml">externalClusters:
+  - name: freddie
+    connectionParameters:
+      host: freddie-rw.default.svc
+      user: postgres
+      dbname: app
+</code></pre>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For more details on configuring the <code>externalClusters</code> section, see the
+<a href="../bootstrap/#the-externalclusters-section">"Bootstrap" section</a> of the
+documentation.</p>
+</div>
+<p>As you can see, a subscription can connect to any PostgreSQL database
+accessible over the network. This flexibility allows you to seamlessly migrate
+your data into Kubernetes with nearly zero downtime. It’s an excellent option
+for transitioning from various environments, including popular cloud-based
+Database-as-a-Service (DBaaS) platforms.</p>
+<h3 id="required-fields-in-the-subscription-manifest">Required Fields in the <code>Subscription</code> Manifest</h3>
+<p>The following fields are mandatory for defining a <code>Subscription</code> object:</p>
+<ul>
+<li><code>metadata.name</code>: A unique name for the Kubernetes <code>Subscription</code> object
+  within its namespace.</li>
+<li><code>spec.cluster.name</code>: The name of the PostgreSQL cluster where the
+  subscription will be created.</li>
+<li><code>spec.dbname</code>: The name of the database in which the subscription will be
+  created.</li>
+<li><code>spec.name</code>: The name of the subscription as it will appear in PostgreSQL.</li>
+<li><code>spec.externalClusterName</code>: The name of the external cluster, as defined in
+  the <code>spec.cluster.name</code> cluster's configuration. This references the
+  publisher database.</li>
+<li><code>spec.publicationName</code>: The name of the publication in the publisher database
+  to which the subscription will connect.</li>
+</ul>
+<p>The <code>Subscription</code> object must reference a specific <code>Cluster</code>, determining
+where the subscription will be managed. CloudNativePG ensures that the
+subscription is created or updated on the primary instance of the specified
+cluster.</p>
+<h3 id="reconciliation-and-status_1">Reconciliation and Status</h3>
+<p>After creating a <code>Subscription</code>, CloudNativePG manages it on the primary
+instance of the specified cluster. Following a successful reconciliation cycle,
+the <code>Subscription</code> status will reflect the following:</p>
+<ul>
+<li><code>applied: true</code>, indicates the configuration has been successfully applied.</li>
+<li><code>observedGeneration</code> matches <code>metadata.generation</code>, confirming the applied
+  configuration corresponds to the most recent changes.</li>
+</ul>
+<p>If an error occurs during reconciliation, <code>status.applied</code> will be <code>false</code>, and
+an error message will be included in the <code>status.message</code> field.</p>
+<h3 id="removing-a-subscription">Removing a Subscription</h3>
+<p>The <code>subscriptionReclaimPolicy</code> field controls the behavior when deleting a
+<code>Subscription</code> object:</p>
+<ul>
+<li><code>retain</code> (default): Leaves the subscription in PostgreSQL for manual
+  management.</li>
+<li><code>delete</code>: Automatically removes the subscription from PostgreSQL.</li>
+</ul>
+<p>Consider the following example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Subscription
+metadata:
+  name: freddie-to-king-subscription
+spec:
+  cluster:
+    name: king
+  dbname: app
+  name: subscriber
+  externalClusterName: freddie
+  publicationName: publisher
+  subscriptionReclaimPolicy: delete
+</code></pre>
+<p>In this case, deleting the <code>Subscription</code> object also removes the <code>subscriber</code>
+subscription from the <code>app</code> database of the <code>king</code> cluster.</p>
+<h3 id="resilience-to-failovers">Resilience to Failovers</h3>
+<p>To ensure that your logical replication subscriptions remain operational after
+a failover of the publisher, configure CloudNativePG to synchronize logical
+decoding slots across the cluster. For detailed instructions, see
+<a href="../replication/#logical-decoding-slot-synchronization">Logical Decoding Slot Synchronization</a>.</p>
+<h2 id="limitations">Limitations</h2>
+<p>Logical replication in PostgreSQL has some inherent limitations, as outlined in
+the <a href="https://www.postgresql.org/docs/current/logical-replication-restrictions.html">official documentation</a>.
+Notably, the following objects are not replicated:</p>
+<ul>
+<li><strong>Database schema and DDL commands</strong></li>
+<li><strong>Sequence data</strong></li>
+<li><strong>Large objects</strong></li>
+</ul>
+<h3 id="addressing-schema-replication">Addressing Schema Replication</h3>
+<p>The first limitation, related to schema replication, can be easily addressed
+using CloudNativePG's capabilities. For instance, you can leverage the <code>import</code>
+bootstrap feature to copy the schema of the tables you need to replicate.
+Alternatively, you can manually create the schema as you would for any
+PostgreSQL database.</p>
+<h3 id="handling-sequences">Handling Sequences</h3>
+<p>While sequences are not automatically kept in sync through logical replication,
+CloudNativePG provides a solution to be used in live migrations.
+You can use the <a href="../kubectl-plugin/#synchronizing-sequences"><code>cnpg</code> plugin</a>
+to synchronize sequence values, ensuring consistency between the publisher and
+subscriber databases.</p>
+<h2 id="example-of-live-migration-and-major-postgres-upgrade-with-logical-replication">Example of live migration and major Postgres upgrade with logical replication</h2>
+<p>To highlight the powerful capabilities of logical replication, this example
+demonstrates how to replicate data from a publisher database (<code>freddie</code>)
+running PostgreSQL 16 to a subscriber database (<code>king</code>) running the latest
+PostgreSQL version. This setup can be deployed in your Kubernetes cluster for
+evaluation and hands-on learning.</p>
+<p>This example illustrates how logical replication facilitates live migrations
+and upgrades between PostgreSQL versions while ensuring data consistency. By
+combining logical replication with CloudNativePG, you can easily set up,
+manage, and evaluate such scenarios in a Kubernetes environment.</p>
+<h3 id="step-1-setting-up-the-publisher-freddie">Step 1: Setting Up the Publisher (<code>freddie</code>)</h3>
+<p>The first step involves creating a <code>freddie</code> PostgreSQL cluster with version 16.
+The cluster contains a single instance and includes an <code>app</code> database
+initialized with a table, <code>n</code>, storing 10,000 numbers. A logical replication
+publication named <code>publisher</code> is also configured to include all tables in the
+database.</p>
+<p>Here’s the manifest for setting up the <code>freddie</code> cluster and its publication
+resource:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: freddie
+spec:
+  instances: 1
+
+  imageName: ghcr.io/cloudnative-pg/postgresql:16
+
+  storage:
+    size: 1Gi
+
+  bootstrap:
+    initdb:
+      postInitApplicationSQL:
+        - CREATE TABLE n (i SERIAL PRIMARY KEY, m INTEGER)
+        - INSERT INTO n (m) (SELECT generate_series(1, 10000))
+        - ALTER TABLE n OWNER TO app
+
+  managed:
+    roles:
+      - name: app
+        login: true
+        replication: true
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Publication
+metadata:
+  name: freddie-publisher
+spec:
+  cluster:
+    name: freddie
+  dbname: app
+  name: publisher
+  target:
+    allTables: true
+</code></pre>
+<h3 id="step-2-setting-up-the-subscriber-king">Step 2: Setting Up the Subscriber (<code>king</code>)</h3>
+<p>Next, create the <code>king</code> PostgreSQL cluster, running the latest version of
+PostgreSQL. This cluster initializes by importing the schema from the <code>app</code>
+database on the <code>freddie</code> cluster using the external cluster configuration. A
+<code>Subscription</code> resource, <code>freddie-to-king-subscription</code>, is then configured to
+consume changes published by the <code>publisher</code> on <code>freddie</code>.</p>
+<p>Below is the manifest for setting up the <code>king</code> cluster and its subscription:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: king
+spec:
+  instances: 1
+
+  storage:
+    size: 1Gi
+
+  bootstrap:
+    initdb:
+      import:
+        type: microservice
+        schemaOnly: true
+        databases:
+          - app
+        source:
+          externalCluster: freddie
+
+  externalClusters:
+  - name: freddie
+    connectionParameters:
+      host: freddie-rw.default.svc
+      user: app
+      dbname: app
+    password:
+      name: freddie-app
+      key: password
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Subscription
+metadata:
+  name: freddie-to-king-subscription
+spec:
+  cluster:
+    name: king
+  dbname: app
+  name: subscriber
+  externalClusterName: freddie
+  publicationName: publisher
+</code></pre>
+<p>Once the <code>king</code> cluster is running, you can verify that the replication is
+working by connecting to the <code>app</code> database and counting the records in the <code>n</code>
+table. The following example uses the <code>psql</code> command provided by the <code>cnpg</code>
+plugin for simplicity:</p>
+<pre><code class="language-console">kubectl cnpg psql king -- app -qAt -c 'SELECT count(*) FROM n'
+10000
+</code></pre>
+<p>This command should return <code>10000</code>, confirming that the data from the <code>freddie</code>
+cluster has been successfully replicated to the <code>king</code> cluster.</p>
+<p>Using the <code>cnpg</code> plugin, you can also synchronize existing sequences to ensure
+consistency between the publisher and subscriber. The example below
+demonstrates how to synchronize a sequence for the <code>king</code> cluster:</p>
+<pre><code class="language-console">kubectl cnpg subscription sync-sequences king --subscription=subscriber
+SELECT setval('&quot;public&quot;.&quot;n_i_seq&quot;', 10000);
+
+10000
+</code></pre>
+<p>This command updates the sequence <code>n_i_seq</code> in the <code>king</code> cluster to match the
+current value, ensuring it is in sync with the source database.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../replication/" class="btn btn-neutral float-left" title="Replication"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../backup/" class="btn btn-neutral float-right" title="Backup">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../replication/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../backup/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/monitoring/index.html b/assets/documentation/1.27.0-rc1/monitoring/index.html
new file mode 100644
index 000000000..15913eb5d
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/monitoring/index.html
@@ -0,0 +1,1226 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Monitoring - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Monitoring";
+        var mkdocs_page_input_path = "monitoring.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Monitoring</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#monitoring-instances">Monitoring Instances</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#monitoring-with-the-prometheus-operator">Monitoring with the Prometheus operator</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#enabling-tls-on-the-metrics-port">Enabling TLS on the Metrics Port</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#predefined-set-of-metrics">Predefined set of metrics</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#user-defined-metrics">User defined metrics</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#example-of-a-user-defined-metric">Example of a user defined metric</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#example-of-a-user-defined-metric-with-predicate-query">Example of a user defined metric with predicate query</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#example-of-a-user-defined-metric-running-on-multiple-databases">Example of a user defined metric running on multiple databases</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#structure-of-a-user-defined-metric">Structure of a user defined metric</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#output-of-a-user-defined-metric">Output of a user defined metric</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#default-set-of-metrics">Default set of metrics</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#differences-with-the-prometheus-postgres-exporter">Differences with the Prometheus Postgres exporter</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#monitoring-the-cloudnativepg-operator">Monitoring the CloudNativePG operator</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#monitoring-the-operator-with-prometheus">Monitoring the operator with Prometheus</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#how-to-inspect-the-exported-metrics">How to inspect the exported metrics</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#using-port-forwarding">Using port forwarding</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#using-curl">Using curl</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#auxiliary-resources">Auxiliary resources</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Monitoring</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="monitoring">Monitoring</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Installing Prometheus and Grafana is beyond the scope of this project.
+We assume they are correctly installed in your system. However, for
+experimentation we provide instructions in
+<a href="../quickstart/#part-4-monitor-clusters-with-prometheus-and-grafana">Part 4 of the Quickstart</a>.</p>
+</div>
+<h2 id="monitoring-instances">Monitoring Instances</h2>
+<p>For each PostgreSQL instance, the operator provides an exporter of metrics for
+<a href="https://prometheus.io/">Prometheus</a> via HTTP or HTTPS, on port 9187, named <code>metrics</code>.
+The operator comes with a <a href="#predefined-set-of-metrics">predefined set of metrics</a>, as well as a highly
+configurable and customizable system to define additional queries via one or
+more <code>ConfigMap</code> or <code>Secret</code> resources (see the
+<a href="#user-defined-metrics">"User defined metrics" section</a> below for details).</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>CloudNativePG, by default, installs a set of <a href="#default-set-of-metrics">predefined metrics</a>
+in a <code>ConfigMap</code> named <code>default-monitoring</code>.</p>
+</div>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>You can inspect the exported metrics by following the instructions in
+the <a href="#how-to-inspect-the-exported-metrics">"How to inspect the exported metrics"</a>
+section below.</p>
+</div>
+<p>All monitoring queries that are performed on PostgreSQL are:</p>
+<ul>
+<li>atomic (one transaction per query)</li>
+<li>executed with the <code>pg_monitor</code> role</li>
+<li>executed with <code>application_name</code> set to <code>cnpg_metrics_exporter</code></li>
+<li>executed as user <code>postgres</code></li>
+</ul>
+<p>Please refer to the "Predefined Roles" section in PostgreSQL
+<a href="https://www.postgresql.org/docs/current/predefined-roles.html">documentation</a>
+for details on the <code>pg_monitor</code> role.</p>
+<p>Queries, by default, are run against the <em>main database</em>, as defined by
+the specified <code>bootstrap</code> method of the <code>Cluster</code> resource, according
+to the following logic:</p>
+<ul>
+<li>using <code>initdb</code>: queries will be run by default against the specified database
+  in <code>initdb.database</code>, or <code>app</code> if not specified</li>
+<li>using <code>recovery</code>: queries will be run by default against the specified database
+  in <code>recovery.database</code>, or <code>postgres</code> if not specified</li>
+<li>using <code>pg_basebackup</code>: queries will be run by default against the specified database
+  in <code>pg_basebackup.database</code>, or <code>postgres</code> if not specified</li>
+</ul>
+<p>The default database can always be overridden for a given user-defined metric,
+by specifying a list of one or more databases in the <code>target_databases</code> option.</p>
+<div class="admonition seealso">
+<p class="admonition-title">Prometheus/Grafana</p>
+<p>If you are interested in evaluating the integration of CloudNativePG
+with Prometheus and Grafana, you can find a quick setup guide
+in <a href="../quickstart/#part-4-monitor-clusters-with-prometheus-and-grafana">Part 4 of the quickstart</a></p>
+</div>
+<h3 id="monitoring-with-the-prometheus-operator">Monitoring with the Prometheus operator</h3>
+<p>A specific PostgreSQL cluster can be monitored using the
+<a href="https://github.com/prometheus-operator/prometheus-operator">Prometheus Operator's</a> resource
+<a href="https://github.com/prometheus-operator/prometheus-operator/blob/v0.75.1/Documentation/api.md#podmonitor">PodMonitor</a>.</p>
+<p>A <code>PodMonitor</code> that correctly points to the Cluster can be automatically created by the operator by setting
+<code>.spec.monitoring.enablePodMonitor</code> to <code>true</code> in the Cluster resource itself (default: <code>false</code>).</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Any change to the <code>PodMonitor</code> created automatically will be overridden by the Operator at the next reconciliation
+cycle, in case you need to customize it, you can do so as described below.</p>
+</div>
+<p>To deploy a <code>PodMonitor</code> for a specific Cluster manually, define it as follows and adjust as needed:</p>
+<pre><code class="language-yaml">apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: cluster-example
+spec:
+  selector:
+    matchLabels:
+      &quot;cnpg.io/cluster&quot;: cluster-example
+  podMetricsEndpoints:
+  - port: metrics
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Ensure you modify the example above with a unique name, as well as the
+correct cluster's namespace and labels (e.g., <code>cluster-example</code>).</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The <code>postgresql</code> label, used in previous versions of this document, is deprecated
+and will be removed in the future. Please use the <code>cnpg.io/cluster</code> label
+instead to select the instances.</p>
+</div>
+<h3 id="enabling-tls-on-the-metrics-port">Enabling TLS on the Metrics Port</h3>
+<p>To enable TLS communication on the metrics port, configure the <code>.spec.monitoring.tls.enabled</code>
+setting to <code>true</code>. This setup ensures that the metrics exporter uses the same
+server certificate used by PostgreSQL to secure communication on port 5432.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Changing the <code>.spec.monitoring.tls.enabled</code> setting will trigger a rolling restart of the Cluster.</p>
+</div>
+<p>If the <code>PodMonitor</code> is managed by the operator (<code>.spec.monitoring.enablePodMonitor</code> set to <code>true</code>),
+it will automatically contain the necessary configurations to access the metrics via TLS.</p>
+<p>To manually deploy a <code>PodMonitor</code> suitable for reading metrics via TLS, define it as follows and
+adjust as needed:</p>
+<pre><code class="language-yaml">apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: cluster-example
+spec:
+  selector:
+    matchLabels:
+      &quot;cnpg.io/cluster&quot;: cluster-example
+  podMetricsEndpoints:
+  - port: metrics
+    scheme: https
+    tlsConfig:
+      ca:
+        secret:
+          name: cluster-example-ca
+          key: ca.crt
+      serverName: cluster-example-rw
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Ensure you modify the example above with a unique name, as well as the
+correct Cluster's namespace and labels (e.g., <code>cluster-example</code>).</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The <code>serverName</code> field in the metrics endpoint must match one of the names
+defined in the server certificate. If the default certificate is in use,
+the <code>serverName</code> value should be in the format <code>&lt;cluster-name&gt;-rw</code>.</p>
+</div>
+<h3 id="predefined-set-of-metrics">Predefined set of metrics</h3>
+<p>Every PostgreSQL instance exporter automatically exposes a set of predefined
+metrics, which can be classified in two major categories:</p>
+<ul>
+<li>
+<p>PostgreSQL related metrics, starting with <code>cnpg_collector_*</code>, including:</p>
+<ul>
+<li>number of WAL files and total size on disk</li>
+<li>number of <code>.ready</code> and <code>.done</code> files in the archive status folder</li>
+<li>requested minimum and maximum number of synchronous replicas, as well as
+  the expected and actually observed values</li>
+<li>number of distinct nodes accommodating the instances</li>
+<li>timestamps indicating last failed and last available backup, as well
+  as the first point of recoverability for the cluster</li>
+<li>flag indicating if replica cluster mode is enabled or disabled</li>
+<li>flag indicating if a manual switchover is required</li>
+<li>flag indicating if fencing is enabled or disabled</li>
+</ul>
+</li>
+<li>
+<p>Go runtime related metrics, starting with <code>go_*</code></p>
+</li>
+</ul>
+<p>Below is a sample of the metrics returned by the <code>localhost:9187/metrics</code>
+endpoint of an instance. As you can see, the Prometheus format is
+self-documenting:</p>
+<pre><code class="language-text"># HELP cnpg_collector_collection_duration_seconds Collection time duration in seconds
+# TYPE cnpg_collector_collection_duration_seconds gauge
+cnpg_collector_collection_duration_seconds{collector=&quot;Collect.up&quot;} 0.0031393
+
+# HELP cnpg_collector_collections_total Total number of times PostgreSQL was accessed for metrics.
+# TYPE cnpg_collector_collections_total counter
+cnpg_collector_collections_total 2
+
+# HELP cnpg_collector_fencing_on 1 if the instance is fenced, 0 otherwise
+# TYPE cnpg_collector_fencing_on gauge
+cnpg_collector_fencing_on 0
+
+# HELP cnpg_collector_nodes_used NodesUsed represents the count of distinct nodes accommodating the instances. A value of '-1' suggests that the metric is not available. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally this value should match the number of instances in the cluster.
+# TYPE cnpg_collector_nodes_used gauge
+cnpg_collector_nodes_used 3
+
+# HELP cnpg_collector_last_collection_error 1 if the last collection ended with error, 0 otherwise.
+# TYPE cnpg_collector_last_collection_error gauge
+cnpg_collector_last_collection_error 0
+
+# HELP cnpg_collector_manual_switchover_required 1 if a manual switchover is required, 0 otherwise
+# TYPE cnpg_collector_manual_switchover_required gauge
+cnpg_collector_manual_switchover_required 0
+
+# HELP cnpg_collector_pg_wal Total size in bytes of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal' directory  computed as (wal_segment_size * count)
+# TYPE cnpg_collector_pg_wal gauge
+cnpg_collector_pg_wal{value=&quot;count&quot;} 9
+cnpg_collector_pg_wal{value=&quot;slots_max&quot;} NaN
+cnpg_collector_pg_wal{value=&quot;keep&quot;} 32
+cnpg_collector_pg_wal{value=&quot;max&quot;} 64
+cnpg_collector_pg_wal{value=&quot;min&quot;} 5
+cnpg_collector_pg_wal{value=&quot;size&quot;} 1.50994944e+08
+cnpg_collector_pg_wal{value=&quot;volume_max&quot;} 128
+cnpg_collector_pg_wal{value=&quot;volume_size&quot;} 2.147483648e+09
+
+# HELP cnpg_collector_pg_wal_archive_status Number of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal/archive_status' directory (ready, done)
+# TYPE cnpg_collector_pg_wal_archive_status gauge
+cnpg_collector_pg_wal_archive_status{value=&quot;done&quot;} 6
+cnpg_collector_pg_wal_archive_status{value=&quot;ready&quot;} 0
+
+# HELP cnpg_collector_replica_mode 1 if the cluster is in replica mode, 0 otherwise
+# TYPE cnpg_collector_replica_mode gauge
+cnpg_collector_replica_mode 0
+
+# HELP cnpg_collector_sync_replicas Number of requested synchronous replicas (synchronous_standby_names)
+# TYPE cnpg_collector_sync_replicas gauge
+cnpg_collector_sync_replicas{value=&quot;expected&quot;} 0
+cnpg_collector_sync_replicas{value=&quot;max&quot;} 0
+cnpg_collector_sync_replicas{value=&quot;min&quot;} 0
+cnpg_collector_sync_replicas{value=&quot;observed&quot;} 0
+
+# HELP cnpg_collector_up 1 if PostgreSQL is up, 0 otherwise.
+# TYPE cnpg_collector_up gauge
+cnpg_collector_up{cluster=&quot;cluster-example&quot;} 1
+
+# HELP cnpg_collector_postgres_version Postgres version
+# TYPE cnpg_collector_postgres_version gauge
+cnpg_collector_postgres_version{cluster=&quot;cluster-example&quot;,full=&quot;17.5&quot;} 17.5
+
+# HELP cnpg_collector_last_failed_backup_timestamp The last failed backup as a unix timestamp (Deprecated)
+# TYPE cnpg_collector_last_failed_backup_timestamp gauge
+cnpg_collector_last_failed_backup_timestamp 0
+
+# HELP cnpg_collector_last_available_backup_timestamp The last available backup as a unix timestamp (Deprecated)
+# TYPE cnpg_collector_last_available_backup_timestamp gauge
+cnpg_collector_last_available_backup_timestamp 1.63238406e+09
+
+# HELP cnpg_collector_first_recoverability_point The first point of recoverability for the cluster as a unix timestamp (Deprecated)
+# TYPE cnpg_collector_first_recoverability_point gauge
+cnpg_collector_first_recoverability_point 1.63238406e+09
+
+# HELP cnpg_collector_lo_pages Estimated number of pages in the pg_largeobject table
+# TYPE cnpg_collector_lo_pages gauge
+cnpg_collector_lo_pages{datname=&quot;app&quot;} 0
+cnpg_collector_lo_pages{datname=&quot;postgres&quot;} 78
+
+# HELP cnpg_collector_wal_buffers_full Number of times WAL data was written to disk because WAL buffers became full. Only available on PG 14+
+# TYPE cnpg_collector_wal_buffers_full gauge
+cnpg_collector_wal_buffers_full{stats_reset=&quot;2023-06-19T10:51:27.473259Z&quot;} 6472
+
+# HELP cnpg_collector_wal_bytes Total amount of WAL generated in bytes. Only available on PG 14+
+# TYPE cnpg_collector_wal_bytes gauge
+cnpg_collector_wal_bytes{stats_reset=&quot;2023-06-19T10:51:27.473259Z&quot;} 1.0035147e+07
+
+# HELP cnpg_collector_wal_fpi Total number of WAL full page images generated. Only available on PG 14+
+# TYPE cnpg_collector_wal_fpi gauge
+cnpg_collector_wal_fpi{stats_reset=&quot;2023-06-19T10:51:27.473259Z&quot;} 1474
+
+# HELP cnpg_collector_wal_records Total number of WAL records generated. Only available on PG 14+
+# TYPE cnpg_collector_wal_records gauge
+cnpg_collector_wal_records{stats_reset=&quot;2023-06-19T10:51:27.473259Z&quot;} 26178
+
+# HELP cnpg_collector_wal_sync Number of times WAL files were synced to disk via issue_xlog_fsync request (if fsync is on and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+
+# TYPE cnpg_collector_wal_sync gauge
+cnpg_collector_wal_sync{stats_reset=&quot;2023-06-19T10:51:27.473259Z&quot;} 37
+
+# HELP cnpg_collector_wal_sync_time Total amount of time spent syncing WAL files to disk via issue_xlog_fsync request, in milliseconds (if track_wal_io_timing is enabled, fsync is on, and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+
+# TYPE cnpg_collector_wal_sync_time gauge
+cnpg_collector_wal_sync_time{stats_reset=&quot;2023-06-19T10:51:27.473259Z&quot;} 0
+
+# HELP cnpg_collector_wal_write Number of times WAL buffers were written out to disk via XLogWrite request. Only available on PG 14+
+# TYPE cnpg_collector_wal_write gauge
+cnpg_collector_wal_write{stats_reset=&quot;2023-06-19T10:51:27.473259Z&quot;} 7243
+
+# HELP cnpg_collector_wal_write_time Total amount of time spent writing WAL buffers to disk via XLogWrite request, in milliseconds (if track_wal_io_timing is enabled, otherwise zero). This includes the sync time when wal_sync_method is either open_datasync or open_sync. Only available on PG 14+
+# TYPE cnpg_collector_wal_write_time gauge
+cnpg_collector_wal_write_time{stats_reset=&quot;2023-06-19T10:51:27.473259Z&quot;} 0
+
+# HELP cnpg_last_error 1 if the last collection ended with error, 0 otherwise.
+# TYPE cnpg_last_error gauge
+cnpg_last_error 0
+
+# HELP go_gc_duration_seconds A summary of the pause duration of garbage collection cycles.
+# TYPE go_gc_duration_seconds summary
+go_gc_duration_seconds{quantile=&quot;0&quot;} 5.01e-05
+go_gc_duration_seconds{quantile=&quot;0.25&quot;} 7.27e-05
+go_gc_duration_seconds{quantile=&quot;0.5&quot;} 0.0001748
+go_gc_duration_seconds{quantile=&quot;0.75&quot;} 0.0002959
+go_gc_duration_seconds{quantile=&quot;1&quot;} 0.0012776
+go_gc_duration_seconds_sum 0.0035741
+go_gc_duration_seconds_count 13
+
+# HELP go_goroutines Number of goroutines that currently exist.
+# TYPE go_goroutines gauge
+go_goroutines 25
+
+# HELP go_info Information about the Go environment.
+# TYPE go_info gauge
+go_info{version=&quot;go1.20.5&quot;} 1
+
+# HELP go_memstats_alloc_bytes Number of bytes allocated and still in use.
+# TYPE go_memstats_alloc_bytes gauge
+go_memstats_alloc_bytes 4.493744e+06
+
+# HELP go_memstats_alloc_bytes_total Total number of bytes allocated, even if freed.
+# TYPE go_memstats_alloc_bytes_total counter
+go_memstats_alloc_bytes_total 2.1698216e+07
+
+# HELP go_memstats_buck_hash_sys_bytes Number of bytes used by the profiling bucket hash table.
+# TYPE go_memstats_buck_hash_sys_bytes gauge
+go_memstats_buck_hash_sys_bytes 1.456234e+06
+
+# HELP go_memstats_frees_total Total number of frees.
+# TYPE go_memstats_frees_total counter
+go_memstats_frees_total 172118
+
+# HELP go_memstats_gc_cpu_fraction The fraction of this program's available CPU time used by the GC since the program started.
+# TYPE go_memstats_gc_cpu_fraction gauge
+go_memstats_gc_cpu_fraction 1.0749468700447189e-05
+
+# HELP go_memstats_gc_sys_bytes Number of bytes used for garbage collection system metadata.
+# TYPE go_memstats_gc_sys_bytes gauge
+go_memstats_gc_sys_bytes 5.530048e+06
+
+# HELP go_memstats_heap_alloc_bytes Number of heap bytes allocated and still in use.
+# TYPE go_memstats_heap_alloc_bytes gauge
+go_memstats_heap_alloc_bytes 4.493744e+06
+
+# HELP go_memstats_heap_idle_bytes Number of heap bytes waiting to be used.
+# TYPE go_memstats_heap_idle_bytes gauge
+go_memstats_heap_idle_bytes 5.8236928e+07
+
+# HELP go_memstats_heap_inuse_bytes Number of heap bytes that are in use.
+# TYPE go_memstats_heap_inuse_bytes gauge
+go_memstats_heap_inuse_bytes 7.528448e+06
+
+# HELP go_memstats_heap_objects Number of allocated objects.
+# TYPE go_memstats_heap_objects gauge
+go_memstats_heap_objects 26306
+
+# HELP go_memstats_heap_released_bytes Number of heap bytes released to OS.
+# TYPE go_memstats_heap_released_bytes gauge
+go_memstats_heap_released_bytes 5.7401344e+07
+
+# HELP go_memstats_heap_sys_bytes Number of heap bytes obtained from system.
+# TYPE go_memstats_heap_sys_bytes gauge
+go_memstats_heap_sys_bytes 6.5765376e+07
+
+# HELP go_memstats_last_gc_time_seconds Number of seconds since 1970 of last garbage collection.
+# TYPE go_memstats_last_gc_time_seconds gauge
+go_memstats_last_gc_time_seconds 1.6311727586032727e+09
+
+# HELP go_memstats_lookups_total Total number of pointer lookups.
+# TYPE go_memstats_lookups_total counter
+go_memstats_lookups_total 0
+
+# HELP go_memstats_mallocs_total Total number of mallocs.
+# TYPE go_memstats_mallocs_total counter
+go_memstats_mallocs_total 198424
+
+# HELP go_memstats_mcache_inuse_bytes Number of bytes in use by mcache structures.
+# TYPE go_memstats_mcache_inuse_bytes gauge
+go_memstats_mcache_inuse_bytes 14400
+
+# HELP go_memstats_mcache_sys_bytes Number of bytes used for mcache structures obtained from system.
+# TYPE go_memstats_mcache_sys_bytes gauge
+go_memstats_mcache_sys_bytes 16384
+
+# HELP go_memstats_mspan_inuse_bytes Number of bytes in use by mspan structures.
+# TYPE go_memstats_mspan_inuse_bytes gauge
+go_memstats_mspan_inuse_bytes 191896
+
+# HELP go_memstats_mspan_sys_bytes Number of bytes used for mspan structures obtained from system.
+# TYPE go_memstats_mspan_sys_bytes gauge
+go_memstats_mspan_sys_bytes 212992
+
+# HELP go_memstats_next_gc_bytes Number of heap bytes when next garbage collection will take place.
+# TYPE go_memstats_next_gc_bytes gauge
+go_memstats_next_gc_bytes 8.689632e+06
+
+# HELP go_memstats_other_sys_bytes Number of bytes used for other system allocations.
+# TYPE go_memstats_other_sys_bytes gauge
+go_memstats_other_sys_bytes 2.566622e+06
+
+# HELP go_memstats_stack_inuse_bytes Number of bytes in use by the stack allocator.
+# TYPE go_memstats_stack_inuse_bytes gauge
+go_memstats_stack_inuse_bytes 1.343488e+06
+
+# HELP go_memstats_stack_sys_bytes Number of bytes obtained from system for stack allocator.
+# TYPE go_memstats_stack_sys_bytes gauge
+go_memstats_stack_sys_bytes 1.343488e+06
+
+# HELP go_memstats_sys_bytes Number of bytes obtained from system.
+# TYPE go_memstats_sys_bytes gauge
+go_memstats_sys_bytes 7.6891144e+07
+
+# HELP go_threads Number of OS threads created.
+# TYPE go_threads gauge
+go_threads 18
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p><code>cnpg_collector_postgres_version</code> is a GaugeVec metric containing
+the <code>Major.Minor</code> version of PostgreSQL. The full semantic version
+<code>Major.Minor.Patch</code> can be found inside one of its label field
+named <code>full</code>.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>The metrics <code>cnpg_collector_last_failed_backup_timestamp</code>,
+<code>cnpg_collector_last_available_backup_timestamp</code>, and
+<code>cnpg_collector_first_recoverability_point</code> have been deprecated starting
+from version 1.26. These metrics will continue to function with native backup
+solutions such as in-core Barman Cloud (deprecated) and volume snapshots. Note
+that for these cases, <code>cnpg_collector_first_recoverability_point</code> and
+<code>cnpg_collector_last_available_backup_timestamp</code> will remain zero until the
+first backup is completed to the object store. This is separate from WAL
+archiving.</p>
+</div>
+<h3 id="user-defined-metrics">User defined metrics</h3>
+<p>This feature is currently in <em>beta</em> state and the format is inspired by the
+<a href="https://github.com/prometheus-community/postgres_exporter/blob/v0.12.1/queries.yaml">queries.yaml file (release 0.12)</a>
+of the PostgreSQL Prometheus Exporter.</p>
+<p>Custom metrics can be defined by users by referring to the created <code>Configmap</code>/<code>Secret</code> in a <code>Cluster</code> definition
+under the <code>.spec.monitoring.customQueriesConfigMap</code> or <code>customQueriesSecret</code> section as in the following example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+  namespace: test
+spec:
+  instances: 3
+
+  storage:
+    size: 1Gi
+
+  monitoring:
+    customQueriesConfigMap:
+      - name: example-monitoring
+        key: custom-queries
+</code></pre>
+<p>The <code>customQueriesConfigMap</code>/<code>customQueriesSecret</code> sections contain a list of
+<code>ConfigMap</code>/<code>Secret</code> references specifying the key in which the custom queries are defined.
+Take care that the referred resources have to be created <strong>in the same namespace as the Cluster</strong> resource.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>If you want ConfigMaps and Secrets to be <strong>automatically</strong> reloaded by instances, you can
+add a label with key <code>cnpg.io/reload</code> to it, otherwise you will have to reload
+the instances using the <code>kubectl cnpg reload</code> subcommand.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>When a user defined metric overwrites an already existing metric the instance manager prints a json warning log,
+containing the message:<code>Query with the same name already found. Overwriting the existing one.</code>
+and a key <code>queryName</code> containing the overwritten query name.</p>
+</div>
+<h4 id="example-of-a-user-defined-metric">Example of a user defined metric</h4>
+<p>Here you can see an example of a <code>ConfigMap</code> containing a single custom query,
+referenced by the <code>Cluster</code> example above:</p>
+<pre><code class="language-yaml">apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: example-monitoring
+  namespace: test
+  labels:
+    cnpg.io/reload: &quot;&quot;
+data:
+  custom-queries: |
+    pg_replication:
+      query: &quot;SELECT CASE WHEN NOT pg_is_in_recovery()
+              THEN 0
+              ELSE GREATEST (0,
+                EXTRACT(EPOCH FROM (now() - pg_last_xact_replay_timestamp())))
+              END AS lag,
+              pg_is_in_recovery() AS in_recovery,
+              EXISTS (TABLE pg_stat_wal_receiver) AS is_wal_receiver_up,
+              (SELECT count(*) FROM pg_stat_replication) AS streaming_replicas&quot;
+
+      metrics:
+        - lag:
+            usage: &quot;GAUGE&quot;
+            description: &quot;Replication lag behind primary in seconds&quot;
+        - in_recovery:
+            usage: &quot;GAUGE&quot;
+            description: &quot;Whether the instance is in recovery&quot;
+        - is_wal_receiver_up:
+            usage: &quot;GAUGE&quot;
+            description: &quot;Whether the instance wal_receiver is up&quot;
+        - streaming_replicas:
+            usage: &quot;GAUGE&quot;
+            description: &quot;Number of streaming replicas connected to the instance&quot;
+</code></pre>
+<p>A list of basic monitoring queries can be found in the
+<a href="https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/config/manager/default-monitoring.yaml"><code>default-monitoring.yaml</code> file</a>
+that is already installed in your CloudNativePG deployment (see <a href="#default-set-of-metrics">"Default set of metrics"</a>).</p>
+<h4 id="example-of-a-user-defined-metric-with-predicate-query">Example of a user defined metric with predicate query</h4>
+<p>The <code>predicate_query</code> option allows the user to execute the <code>query</code> to collect the metrics only under the specified conditions.
+To do so the user needs to provide a predicate query that returns at most one row with a single <code>boolean</code> column.</p>
+<p>The predicate query is executed in the same transaction as the main query and against the same databases.</p>
+<pre><code class="language-yaml">some_query: |
+  predicate_query: |
+    SELECT 
+      some_bool as predicate 
+    FROM some_table
+  query: |
+    SELECT
+     count(*) as rows
+    FROM some_table
+  metrics:
+    - rows:
+        usage: &quot;GAUGE&quot;
+        description: &quot;number of rows&quot;
+</code></pre>
+<h4 id="example-of-a-user-defined-metric-running-on-multiple-databases">Example of a user defined metric running on multiple databases</h4>
+<p>If the <code>target_databases</code> option lists more than one database
+the metric is collected from each of them.</p>
+<p>Database auto-discovery can be enabled for a specific query by specifying a
+<em>shell-like pattern</em> (i.e., containing <code>*</code>, <code>?</code> or <code>[]</code>) in the list of
+<code>target_databases</code>. If provided, the operator will expand the list of target
+databases by adding all the databases returned by the execution of <code>SELECT
+datname FROM pg_database WHERE datallowconn AND NOT datistemplate</code> and matching
+the pattern according to <a href="https://pkg.go.dev/path#Match">path.Match()</a> rules.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The <code>*</code> character has a <a href="https://yaml.org/spec/1.2/spec.html#id2786448">special meaning</a> in yaml,
+so you need to quote (<code>"*"</code>) the <code>target_databases</code> value when it includes such a pattern.</p>
+</div>
+<p>It is recommended that you always include the name of the database
+in the returned labels, for example using the <code>current_database()</code> function
+as in the following example:</p>
+<pre><code class="language-yaml">some_query: |
+  query: |
+    SELECT
+     current_database() as datname,
+     count(*) as rows
+    FROM some_table
+  metrics:
+    - datname:
+        usage: &quot;LABEL&quot;
+        description: &quot;Name of current database&quot;
+    - rows:
+        usage: &quot;GAUGE&quot;
+        description: &quot;number of rows&quot;
+  target_databases:
+    - albert
+    - bb
+    - freddie
+</code></pre>
+<p>This will produce in the following metric being exposed:</p>
+<pre><code class="language-text">cnpg_some_query_rows{datname=&quot;albert&quot;} 2
+cnpg_some_query_rows{datname=&quot;bb&quot;} 5
+cnpg_some_query_rows{datname=&quot;freddie&quot;} 10
+</code></pre>
+<p>Here is an example of a query with auto-discovery enabled which also
+runs on the <code>template1</code> database (otherwise not returned by the
+aforementioned query):</p>
+<pre><code class="language-yaml">some_query: |
+  query: |
+    SELECT
+     current_database() as datname,
+     count(*) as rows
+    FROM some_table
+  metrics:
+    - datname:
+        usage: &quot;LABEL&quot;
+        description: &quot;Name of current database&quot;
+    - rows:
+        usage: &quot;GAUGE&quot;
+        description: &quot;number of rows&quot;
+  target_databases:
+    - &quot;*&quot;
+    - &quot;template1&quot;
+</code></pre>
+<p>The above example will produce the following metrics (provided the databases exist):</p>
+<pre><code class="language-text">cnpg_some_query_rows{datname=&quot;albert&quot;} 2
+cnpg_some_query_rows{datname=&quot;bb&quot;} 5
+cnpg_some_query_rows{datname=&quot;freddie&quot;} 10
+cnpg_some_query_rows{datname=&quot;template1&quot;} 7
+cnpg_some_query_rows{datname=&quot;postgres&quot;} 42
+</code></pre>
+<h3 id="structure-of-a-user-defined-metric">Structure of a user defined metric</h3>
+<p>Every custom query has the following basic structure:</p>
+<pre><code class="language-yaml">&lt;MetricName&gt;:
+      query: &quot;&lt;SQLQuery&gt;&quot;
+      metrics:
+        - &lt;ColumnName&gt;:
+            usage: &quot;&lt;MetricType&gt;&quot;
+            description: &quot;&lt;MetricDescription&gt;&quot;
+</code></pre>
+<p>Here is a short description of all the available fields:</p>
+<ul>
+<li><code>&lt;MetricName&gt;</code>: the name of the Prometheus metric<ul>
+<li><code>name</code>: override <code>&lt;MetricName&gt;</code>, if defined</li>
+<li><code>query</code>: the SQL query to run on the target database to generate the metrics</li>
+<li><code>primary</code>: whether to run the query only on the primary instance</li>
+<li><code>master</code>: same as <code>primary</code> (for compatibility with the Prometheus PostgreSQL exporter's syntax - deprecated) <!-- wokeignore:rule=master --></li>
+<li><code>runonserver</code>: a semantic version range to limit the versions of PostgreSQL the query should run on
+   (e.g. <code>"&gt;=11.0.0"</code> or <code>"&gt;=12.0.0 &lt;=15.0.0"</code>)</li>
+<li><code>target_databases</code>: a list of databases to run the <code>query</code> against,
+  or a <a href="#example-of-a-user-defined-metric-running-on-multiple-databases">shell-like pattern</a>
+  to enable auto discovery. Overwrites the default database if provided.</li>
+<li><code>predicate_query</code>: a SQL query that returns at most one row and one <code>boolean</code> column to run on the target database.
+   The system evaluates the predicate and if <code>true</code> executes the <code>query</code>. </li>
+<li><code>metrics</code>: section containing a list of all exported columns, defined as follows:</li>
+<li><code>&lt;ColumnName&gt;</code>: the name of the column returned by the query<ul>
+<li><code>name</code>: override the <code>ColumnName</code> of the column in the metric, if defined</li>
+<li><code>usage</code>: one of the values described below</li>
+<li><code>description</code>: the metric's description</li>
+<li><code>metrics_mapping</code>: the optional column mapping when <code>usage</code> is set to <code>MAPPEDMETRIC</code></li>
+</ul>
+</li>
+</ul>
+</li>
+</ul>
+<p>The possible values for <code>usage</code> are:</p>
+<table>
+<thead>
+<tr>
+<th style="text-align: left;">Column Usage Label</th>
+<th style="text-align: left;">Description</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: left;"><code>DISCARD</code></td>
+<td style="text-align: left;">this column should be ignored</td>
+</tr>
+<tr>
+<td style="text-align: left;"><code>LABEL</code></td>
+<td style="text-align: left;">use this column as a label</td>
+</tr>
+<tr>
+<td style="text-align: left;"><code>COUNTER</code></td>
+<td style="text-align: left;">use this column as a counter</td>
+</tr>
+<tr>
+<td style="text-align: left;"><code>GAUGE</code></td>
+<td style="text-align: left;">use this column as a gauge</td>
+</tr>
+<tr>
+<td style="text-align: left;"><code>MAPPEDMETRIC</code></td>
+<td style="text-align: left;">use this column with the supplied mapping of text values</td>
+</tr>
+<tr>
+<td style="text-align: left;"><code>DURATION</code></td>
+<td style="text-align: left;">use this column as a text duration (in milliseconds)</td>
+</tr>
+<tr>
+<td style="text-align: left;"><code>HISTOGRAM</code></td>
+<td style="text-align: left;">use this column as a histogram</td>
+</tr>
+</tbody>
+</table>
+<p>Please visit the <a href="https://prometheus.io/docs/concepts/metric_types/">"Metric Types" page</a>
+from the Prometheus documentation for more information.</p>
+<h3 id="output-of-a-user-defined-metric">Output of a user defined metric</h3>
+<p>Custom defined metrics are returned by the Prometheus exporter endpoint (<code>:9187/metrics</code>)
+with the following format:</p>
+<pre><code class="language-text">cnpg_&lt;MetricName&gt;_&lt;ColumnName&gt;{&lt;LabelColumnName&gt;=&lt;LabelColumnValue&gt; ... } &lt;ColumnValue&gt;
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p><code>LabelColumnName</code> are metrics with <code>usage</code> set to <code>LABEL</code> and their <code>Value</code></p>
+</div>
+<p>Considering the <code>pg_replication</code> example above, the exporter's endpoint would
+return the following output when invoked:</p>
+<pre><code class="language-text"># HELP cnpg_pg_replication_in_recovery Whether the instance is in recovery
+# TYPE cnpg_pg_replication_in_recovery gauge
+cnpg_pg_replication_in_recovery 0
+# HELP cnpg_pg_replication_lag Replication lag behind primary in seconds
+# TYPE cnpg_pg_replication_lag gauge
+cnpg_pg_replication_lag 0
+# HELP cnpg_pg_replication_streaming_replicas Number of streaming replicas connected to the instance
+# TYPE cnpg_pg_replication_streaming_replicas gauge
+cnpg_pg_replication_streaming_replicas 2
+# HELP cnpg_pg_replication_is_wal_receiver_up Whether the instance wal_receiver is up
+# TYPE cnpg_pg_replication_is_wal_receiver_up gauge
+cnpg_pg_replication_is_wal_receiver_up 0
+</code></pre>
+<h3 id="default-set-of-metrics">Default set of metrics</h3>
+<p>The operator can be configured to automatically inject in a Cluster a set of
+monitoring queries defined in a ConfigMap or a Secret, inside the operator's namespace.
+You have to set the <code>MONITORING_QUERIES_CONFIGMAP</code> or
+<code>MONITORING_QUERIES_SECRET</code> key in the <a href="../operator_conf/">"operator configuration"</a>,
+respectively to the name of the ConfigMap or the Secret;
+the operator will then use the content of the <code>queries</code> key.</p>
+<p>Any change to the <code>queries</code> content will be immediately reflected on all the
+deployed Clusters using it.</p>
+<p>The operator installation manifests come with a predefined ConfigMap,
+called <code>cnpg-default-monitoring</code>, to be used by all Clusters.
+<code>MONITORING_QUERIES_CONFIGMAP</code> is by default set to <code>cnpg-default-monitoring</code> in the operator configuration.</p>
+<p>If you want to disable the default set of metrics, you can:</p>
+<ul>
+<li>disable it at operator level: set the <code>MONITORING_QUERIES_CONFIGMAP</code>/<code>MONITORING_QUERIES_SECRET</code> key to <code>""</code>
+  (empty string), in the operator ConfigMap. Changes to operator ConfigMap require an operator restart.</li>
+<li>disable it for a specific Cluster: set <code>.spec.monitoring.disableDefaultQueries</code> to <code>true</code> in the Cluster.</li>
+</ul>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The ConfigMap or Secret specified via <code>MONITORING_QUERIES_CONFIGMAP</code>/<code>MONITORING_QUERIES_SECRET</code>
+will always be copied to the Cluster's namespace with a fixed name: <code>cnpg-default-monitoring</code>.
+So that, if you intend to have default metrics, you should not create a ConfigMap with this name in the cluster's namespace.</p>
+</div>
+<h3 id="differences-with-the-prometheus-postgres-exporter">Differences with the Prometheus Postgres exporter</h3>
+<p>CloudNativePG is inspired by the PostgreSQL Prometheus Exporter, but
+presents some differences. In particular, the <code>cache_seconds</code> field is not implemented
+in CloudNativePG's exporter.</p>
+<h2 id="monitoring-the-cloudnativepg-operator">Monitoring the CloudNativePG operator</h2>
+<p>The operator internally exposes <a href="https://prometheus.io/">Prometheus</a> metrics
+via HTTP on port 8080, named <code>metrics</code>.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>You can inspect the exported metrics by following the instructions in
+the <a href="#how-to-inspect-the-exported-metrics">"How to inspect the exported metrics"</a>
+section below.</p>
+</div>
+<p>Currently, the operator exposes default <code>kubebuilder</code> metrics. See
+<a href="https://book.kubebuilder.io/reference/metrics.html">kubebuilder documentation</a>
+for more details.</p>
+<h3 id="monitoring-the-operator-with-prometheus">Monitoring the operator with Prometheus</h3>
+<p>The operator can be monitored using the
+<a href="https://github.com/prometheus-operator/prometheus-operator">Prometheus Operator</a> by defining a
+<a href="https://github.com/prometheus-operator/prometheus-operator/blob/v0.47.1/Documentation/api.md#podmonitor">PodMonitor</a>
+pointing to the operator pod(s), as follows (note it's applied in the same
+namespace as the operator):</p>
+<pre><code class="language-yaml">kubectl -n cnpg-system apply -f - &lt;&lt;EOF
+---
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: cnpg-controller-manager
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: cloudnative-pg
+  podMetricsEndpoints:
+    - port: metrics
+EOF
+</code></pre>
+<h2 id="how-to-inspect-the-exported-metrics">How to inspect the exported metrics</h2>
+<p>In this section we provide basic instructions on how to inspect
+the metrics exported by a specific PostgreSQL instance manager (primary
+or replica) or the operator.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>In the examples below we assume we are working in the default namespace, and
+with the operator installed in the <code>cnpg-system</code> namespace.
+Please adapt to your use case.</p>
+</div>
+<h3 id="using-port-forwarding">Using port forwarding</h3>
+<p>The simplest way to inspect the metrics is to port-forward the metrics ports
+of the pods involved.</p>
+<p>For example, to inspect the metrics on the <code>-1</code> instance of <code>cluster-example</code>,
+we port-forward the 9187 port:</p>
+<pre><code class="language-sh">kubectl port-forward cluster-example-1 9187:9187
+</code></pre>
+<p>With port-forwarding active, the metrics can be inspected easily, for
+example on a web browser, using HTTP or HTTPS depending on the configuration,
+with address: <code>localhost:9187/metrics</code>.</p>
+<p>The operator pod also exports metrics, on port 8080. Similarly to instances, we
+port-forward the operator pod, which is located in the operator namespace:</p>
+<pre><code class="language-sh">kubectl -n cnpg-system port-forward pod/&lt;CONTROLLER-MANAGER-POD&gt; 8080:8080
+</code></pre>
+<p>With port forwarding active, the metrics are easily viewable on a browser at
+<a href="http://localhost:8080/metrics"><code>localhost:8080/metrics</code></a>.</p>
+<h3 id="using-curl">Using curl</h3>
+<p>Create the <code>curl</code> pod with the following command:</p>
+<pre><code class="language-yaml">kubectl apply -f - &lt;&lt;EOF
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  name: curl
+spec:
+  containers:
+  - name: curl
+    image: curlimages/curl:8.2.1
+    command: ['sleep', '3600']
+EOF
+</code></pre>
+<p>To inspect the metrics exported by an instance, you need
+to connect to port 9187 of the target pod. You will need to know the pod's
+IP address, which you can find easily by running <code>kubectl get pod -o wide</code>.
+The following generic command will run <code>curl</code> on the desired pod:</p>
+<pre><code class="language-shell">kubectl exec -ti curl -- curl -s &lt;pod_ip&gt;:9187/metrics
+</code></pre>
+<p>For example, if your PostgreSQL cluster is called <code>cluster-example</code> and
+you want to retrieve the exported metrics of the first pod in the cluster,
+you can run the following command to programmatically get the IP of
+that pod:</p>
+<pre><code class="language-shell">POD_IP=$(kubectl get pod cluster-example-1 --template '{{.status.podIP}}')
+</code></pre>
+<p>And then run:</p>
+<pre><code class="language-shell">kubectl exec -ti curl -- curl -s ${POD_IP}:9187/metrics
+</code></pre>
+<p>If you enabled TLS metrics, run instead:</p>
+<pre><code class="language-shell">kubectl exec -ti curl -- curl -sk https://${POD_IP}:9187/metrics
+</code></pre>
+<p>To access the metrics of the operator, you need to point
+to the pod where the operator is running, and use TCP port 8080 as target.</p>
+<p>When you're done inspecting metrics, please remember to delete the <code>curl</code> pod:</p>
+<pre><code class="language-shell">kubectl delete -f curl.yaml
+</code></pre>
+<h2 id="auxiliary-resources">Auxiliary resources</h2>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>These resources are provided for illustration and experimentation, and do
+not represent any kind of recommendation for your production system</p>
+</div>
+<p>In the <a href="https://github.com/cloudnative-pg/cloudnative-pg/tree/main/docs/src/samples/monitoring"><code>doc/src/samples/monitoring/</code></a>
+directory you will find a series of sample files for observability.
+Please refer to <a href="../quickstart/#part-4-monitor-clusters-with-prometheus-and-grafana">Part 4 of the quickstart</a>
+section for context:</p>
+<ul>
+<li><code>kube-stack-config.yaml</code>: a configuration file for the kube-stack helm chart
+  installation. It ensures that Prometheus listens for all PodMonitor resources.</li>
+<li><code>prometheusrule.yaml</code>: a <code>PrometheusRule</code> with alerts for CloudNativePG.
+  NOTE: this does not include inter-operation with notification services. Please refer
+  to the <a href="https://prometheus.io/docs/alerting/latest/alertmanager/">Prometheus documentation</a>.</li>
+<li><code>podmonitor.yaml</code>: a <code>PodMonitor</code> for the CloudNativePG Operator deployment.</li>
+</ul>
+<p>In addition, we provide the "raw" sources for the Prometheus alert rules in the
+<code>alerts.yaml</code> file.</p>
+<p>A Grafana dashboard for CloudNativePG clusters and operator, is kept in the
+dedicated repository <a href="https://github.com/cloudnative-pg/grafana-dashboards/tree/main"><code>cloudnative-pg/grafana-dashboards</code></a>
+as a dashboard JSON configuration:
+<a href="https://github.com/cloudnative-pg/grafana-dashboards/blob/main/charts/cluster/grafana-dashboard.json"><code>grafana-dashboard.json</code></a>.
+The file can be downloaded, and imported into Grafana
+(menus: Dashboard &gt; New &gt; Import).</p>
+<p>For a general reference on the settings available on <code>kube-prometheus-stack</code>,
+you can execute <code>helm show values prometheus-community/kube-prometheus-stack</code>.
+Please refer to the
+<a href="https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack">kube-prometheus-stack</a>
+page for more detail.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../labels_annotations/" class="btn btn-neutral float-left" title="Labels and annotations"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../logging/" class="btn btn-neutral float-right" title="Logging">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../labels_annotations/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../logging/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/networking/index.html b/assets/documentation/1.27.0-rc1/networking/index.html
new file mode 100644
index 000000000..b5709a932
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/networking/index.html
@@ -0,0 +1,403 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Networking - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Networking";
+        var mkdocs_page_input_path = "networking.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Networking</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#cross-namespace-network-policy-for-the-operator">Cross-namespace network policy for the operator</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#cross-cluster-networking">Cross-cluster networking</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Networking</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="networking">Networking</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG assumes the underlying Kubernetes cluster has the required
+connectivity already set up.
+Networking on Kubernetes is an important and extended topic; please refer to
+the <a href="https://kubernetes.io/docs/concepts/services-networking/">Kubernetes documentation</a> for further information.</p>
+<p>If you're following the quickstart guide to install CloudNativePG on a local KinD or K3d cluster, you should not encounter any networking issues as neither
+platform will add any networking restrictions by default.</p>
+<p>However, when deploying CloudNativePG on existing infrastructure, networking
+restrictions might be in place that could impair the communication of the
+operator with PostgreSQL clusters.
+Specifically, existing <a href="https://kubernetes.io/docs/concepts/services-networking/network-policies/">Network Policies</a>
+might restrict certain types of traffic.</p>
+<p>Or, you might be interested in adding network policies in your environment for
+increased security.
+As mentioned in the <a href="../security/">security document</a>, please ensure the operator can reach every cluster pod on ports 8000 and 5432, and that pods can connect to each other.</p>
+<h2 id="cross-namespace-network-policy-for-the-operator">Cross-namespace network policy for the operator</h2>
+<p>Following the quickstart guide or using helm chart for deployment will install the operator in
+a dedicated namespace (<code>cnpg-system</code> by default).
+We recommend that you create clusters in a different namespace.</p>
+<p>The operator <em>must</em> be able to connect to cluster pods.
+This might be precluded if there is a <code>NetworkPolicy</code> restricting
+cross-namespace traffic.</p>
+<p>For example, the
+<a href="https://kubernetes.io/docs/concepts/services-networking/network-policies/">kubernetes guide on network policies</a>
+contains an example policy denying all ingress traffic by default.</p>
+<p>If your local kubernetes setup has this kind of restrictive network policy, you
+will need to create a <code>NetworkPolicy</code> to explicitly allow connection from the
+operator namespace and pod to the cluster namespace and pods. You can find an example in the
+<a href="../samples/networkpolicy-example.yaml"><code>networkpolicy-example.yaml</code></a> file in this repository.
+Please note, you'll need to adjust the cluster name and cluster namespace to
+match your specific setup, and also the operator namespace if it is not
+the default namespace.</p>
+<h2 id="cross-cluster-networking">Cross-cluster networking</h2>
+<p>While <a href="../bootstrap/">bootstrapping</a> from another cluster or when using the <code>externalClusters</code> section,
+ensure connectivity among all clusters, object stores, and namespaces involved.</p>
+<p>Again, we refer you to the <a href="https://kubernetes.io/docs/concepts/services-networking/">Kubernetes documentation</a>
+for setup information.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../samples/" class="btn btn-neutral float-left" title="Examples"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../benchmarking/" class="btn btn-neutral float-right" title="Benchmarking">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../samples/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../benchmarking/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/operator_capability_levels/index.html b/assets/documentation/1.27.0-rc1/operator_capability_levels/index.html
new file mode 100644
index 000000000..c35bc3756
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/operator_capability_levels/index.html
@@ -0,0 +1,1046 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Operator capability levels - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Operator capability levels";
+        var mkdocs_page_input_path = "operator_capability_levels.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Operator capability levels</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#level-1-basic-install">Level 1: Basic install</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#operator-deployment-via-declarative-configuration">Operator deployment via declarative configuration</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#postgresql-cluster-deployment-via-declarative-configuration">PostgreSQL cluster deployment via declarative configuration</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#override-of-operand-images-through-the-crd">Override of operand images through the CRD</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#labels-and-annotations">Labels and annotations</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#self-contained-instance-manager">Self-contained instance manager</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#storage-configuration">Storage configuration</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#replica-configuration">Replica configuration</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#service-configuration">Service Configuration</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#database-configuration">Database configuration</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#configuration-of-postgres-roles-users-and-groups">Configuration of Postgres roles, users, and groups</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#pod-security-standards">Pod security standards</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#affinity">Affinity</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#topology-spread-constraints">Topology spread constraints</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#command-line-interface">Command-line interface</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#current-status-of-the-cluster">Current status of the cluster</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#operators-certification-authority">Operator's certification authority</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#clusters-certification-authority">Cluster's certification authority</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#tls-connections">TLS connections</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#certificate-authentication-for-streaming-replication">Certificate authentication for streaming replication</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#continuous-configuration-management">Continuous configuration management</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#import-of-existing-postgresql-databases">Import of existing PostgreSQL databases</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#postgis-clusters">PostGIS clusters</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#basic-ldap-authentication-for-postgresql">Basic LDAP authentication for PostgreSQL</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#multiple-installation-methods">Multiple installation methods</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#convention-over-configuration">Convention over configuration</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#level-2-seamless-upgrades">Level 2: Seamless upgrades</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#operator-upgrade">Operator Upgrade</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#upgrade-of-the-managed-workload">Upgrade of the managed workload</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#offline-in-place-major-upgrades-of-postgresql">Offline In-Place Major Upgrades of PostgreSQL</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#display-cluster-availability-status-during-upgrade">Display cluster availability status during upgrade</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#level-3-full-lifecycle">Level 3: Full lifecycle</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#postgresql-wal-archive">PostgreSQL WAL archive</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#postgresql-backups">PostgreSQL Backups</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#backups-from-a-standby">Backups from a standby</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#full-restore-from-a-backup">Full restore from a backup</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#point-in-time-recovery-pitr-from-a-backup">Point-in-time recovery (PITR) from a backup</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#zero-data-loss-clusters-through-synchronous-replication">Zero-Data-Loss Clusters Through Synchronous Replication</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#replica-clusters">Replica clusters</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#distributed-database-topologies">Distributed Database Topologies</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#tablespace-support">Tablespace support</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#customizable-startup-liveness-and-readiness-probes">Customizable Startup, Liveness, and Readiness Probes</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#rolling-deployments">Rolling deployments</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#scale-up-and-down-of-replicas">Scale up and down of replicas</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#maintenance-window-and-poddisruptionbudget-for-kubernetes-nodes">Maintenance window and PodDisruptionBudget for Kubernetes nodes</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#fencing">Fencing</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#hibernation">Hibernation</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#reuse-of-persistent-volumes-storage-in-pods">Reuse of persistent volumes storage in pods</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#cpu-and-memory-requests-and-limits">CPU and memory requests and limits</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#connection-pooling-with-pgbouncer">Connection pooling with PgBouncer</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#logical-replication">Logical Replication</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#level-4-deep-insights">Level 4: Deep insights</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#prometheus-exporter-with-configurable-queries">Prometheus exporter with configurable queries</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#grafana-dashboard">Grafana dashboard</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#standard-output-logging-of-postgresql-error-messages-in-json-format">Standard output logging of PostgreSQL error messages in JSON format</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#real-time-query-monitoring">Real-time query monitoring</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#audit">Audit</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#kubernetes-events">Kubernetes events</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#level-5-auto-pilot">Level 5: Auto pilot</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#automated-failover-for-self-healing">Automated failover for self-healing</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#automated-recreation-of-a-standby">Automated recreation of a standby</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Operator capability levels</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="operator-capability-levels">Operator capability levels</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>These capabilities were implemented by CloudNativePG,
+classified using the
+<a href="https://operatorframework.io/operator-capabilities/">Operator SDK definition of Capability Levels</a>
+framework.</p>
+<p><img alt="Operator Capability Levels" src="../images/operator-capability-level.png" /></p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Based on the <a href="./">Operator Capability Levels model</a>,
+you can expect a "Level V - Auto Pilot" set of capabilities from the
+CloudNativePG operator.</p>
+</div>
+<p>Each capability level is associated with a certain set of management features the operator offers:</p>
+<ol>
+<li>Basic install</li>
+<li>Seamless upgrades</li>
+<li>Full lifecycle</li>
+<li>Deep insights</li>
+<li>Auto pilot</li>
+</ol>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>We consider this framework as a guide for future work and implementations in the operator.</p>
+</div>
+<h2 id="level-1-basic-install">Level 1: Basic install</h2>
+<p>Capability level 1 involves installing and configuring the
+operator. This category includes usability and user experience
+enhancements, such as improvements in how you interact with the
+operator and a PostgreSQL cluster configuration.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>We consider information security part of this level.</p>
+</div>
+<h3 id="operator-deployment-via-declarative-configuration">Operator deployment via declarative configuration</h3>
+<p>The operator is installed in a declarative way using a Kubernetes manifest
+that defines four major <code>CustomResourceDefinition</code> objects: <code>Cluster</code>, <code>Pooler</code>,
+<code>Backup</code>, and <code>ScheduledBackup</code>.</p>
+<h3 id="postgresql-cluster-deployment-via-declarative-configuration">PostgreSQL cluster deployment via declarative configuration</h3>
+<p>You define a PostgreSQL cluster (operand) using the <code>Cluster</code> custom resource
+in a fully declarative way. The PostgreSQL version is determined by the
+operand container image defined in the CR, which is automatically fetched
+from the requested registry. When deploying an operand, the operator also
+creates the following resources: <code>Pod</code>, <code>Service</code>, <code>Secret</code>,
+<code>ConfigMap</code>,<code>PersistentVolumeClaim</code>, <code>PodDisruptionBudget</code>, <code>ServiceAccount</code>,
+<code>RoleBinding</code>, and <code>Role</code>.</p>
+<h3 id="override-of-operand-images-through-the-crd">Override of operand images through the CRD</h3>
+<p>The operator is designed to support any operand container image with
+PostgreSQL inside.
+By default, the operator uses the latest available minor
+version of the latest stable major version supported by the PostgreSQL
+community and published on ghcr.io.
+You can use any compatible image of PostgreSQL supporting the
+primary/standby architecture directly by setting the <code>imageName</code>
+attribute in the CR. The operator also supports <code>imagePullSecrets</code>
+to access private container registries, and it supports digests and
+tags for finer control of container image immutability.
+If you prefer not to specify an image name, you can leverage
+<a href="../image_catalog/">image catalogs</a> by simply referencing the PostgreSQL
+major version. Moreover, image catalogs enable you to effortlessly create
+custom catalogs, directing to images based on your specific requirements.</p>
+<h3 id="labels-and-annotations">Labels and annotations</h3>
+<p>You can configure the operator to support inheriting labels and annotations
+that are defined in a cluster's metadata. The goal is to improve the organization
+of the CloudNativePG deployment in your Kubernetes infrastructure.</p>
+<h3 id="self-contained-instance-manager">Self-contained instance manager</h3>
+<p>Instead of relying on an external tool to
+coordinate PostgreSQL instances in the Kubernetes cluster pods,
+such as Patroni or Stolon, the operator
+injects the operator executable inside each pod, in a file named
+<code>/controller/manager</code>. The application is used to control the underlying
+PostgreSQL instance and to reconcile the pod status with the instance
+based on the PostgreSQL cluster topology. The instance manager also starts a
+web server that's invoked by the <code>kubelet</code> for probes. Unix signals invoked
+by the <code>kubelet</code> are filtered by the instance manager. Where appropriate, they're
+forwarded to the <code>postgres</code> process for fast and controlled reactions to
+external events. The instance manager is written in Go and has no external
+dependencies.</p>
+<h3 id="storage-configuration">Storage configuration</h3>
+<p>Storage is a critical component in a database workload. Taking advantage of the
+Kubernetes native capabilities and resources in terms of storage, the
+operator gives you enough flexibility to choose the right storage for your
+workload requirements, based on what the underlying Kubernetes environment
+can offer. This implies choosing a particular storage class in
+a public cloud environment or fine-tuning the generated PVC through a
+PVC template in the CR's <code>storage</code> parameter.</p>
+<p>For better performance and finer control, you can also choose to host your
+cluster's write-ahead log (WAL, also known as <code>pg_wal</code>) on a separate volume,
+preferably on different storage.
+The <a href="../benchmarking/">"Benchmarking"</a> section of the documentation provides
+detailed instructions on benchmarking both storage and the database before
+production. It relies on the <code>cnpg</code> plugin to ensure optimal performance and
+reliability.</p>
+<h3 id="replica-configuration">Replica configuration</h3>
+<p>The operator detects replicas in a cluster
+through a single parameter, called <code>instances</code>. If set to <code>1</code>, the cluster
+comprises a single primary PostgreSQL instance with no replica. If higher
+than <code>1</code>, the operator manages <code>instances -1</code> replicas, including high
+availability (HA) through automated failover and rolling updates through
+switchover operations.</p>
+<p>CloudNativePG manages replication slots for all replicas in the
+high-availability cluster. It also supports user-defined physical replication
+slots on the primary and enables logical decoding failover—natively for
+PostgreSQL 17 and later using <code>sync_replication_slots</code>, and through the
+<code>pg_failover_slots</code> extension for earlier versions.</p>
+<h3 id="service-configuration">Service Configuration</h3>
+<p>By default, CloudNativePG creates three Kubernetes <a href="../service_management/">services</a>
+for applications to access the cluster via the network:</p>
+<ul>
+<li>One pointing to the primary for read/write operations.</li>
+<li>One pointing to replicas for read-only queries.</li>
+<li>A generic one pointing to any instance for read operations.</li>
+</ul>
+<p>You can disable the read-only and read services via configuration.
+Additionally, you can leverage the service template capability
+to create custom service resources, including load balancers, to access
+PostgreSQL outside Kubernetes. This is particularly useful for DBaaS purposes.</p>
+<h3 id="database-configuration">Database configuration</h3>
+<p>The operator is designed to bootstrap a PostgreSQL cluster with a single
+database. The operator transparently manages network access to the cluster
+through three Kubernetes services provisioned and managed for read-write,
+read, and read-only workloads.
+Using the convention-over-configuration approach, the operator creates a
+database called <code>app</code>, by default owned by a regular Postgres user with the
+same name. You can specify both the database name and the user name, if
+required, as part of the bootstrap.</p>
+<p>Additional databases can be created or managed via
+<a href="../declarative_database_management/">declarative database management</a> using
+the <code>Database</code> CRD, also supporting extensions and schemas.</p>
+<p>Although no configuration is required to run the cluster, you can customize
+both PostgreSQL runtime configuration and PostgreSQL host-based
+authentication rules in the <code>postgresql</code> section of the CR.</p>
+<h3 id="configuration-of-postgres-roles-users-and-groups">Configuration of Postgres roles, users, and groups</h3>
+<p>CloudNativePG supports
+<a href="../declarative_role_management/">management of PostgreSQL roles, users, and groups through declarative configuration</a>
+using the <code>.spec.managed.roles</code> stanza.</p>
+<h3 id="pod-security-standards">Pod security standards</h3>
+<p>For InfoSec requirements, the operator doesn't require privileged mode for
+any container. It enforces a read-only root filesystem to guarantee containers
+immutability for both the operator and the operand pods. It also explicitly
+sets the required security contexts.</p>
+<h3 id="affinity">Affinity</h3>
+<p>The cluster's <code>affinity</code> section enables fine-tuning of how pods and related
+resources, such as persistent volumes, are scheduled across the nodes of a
+Kubernetes cluster. In particular, the operator supports:</p>
+<ul>
+<li>Pod affinity and anti-affinity</li>
+<li>Node selector</li>
+<li>Taints and tolerations</li>
+</ul>
+<h3 id="topology-spread-constraints">Topology spread constraints</h3>
+<p>The cluster's <code>topologySpreadConstraints</code> section enables additional control of
+scheduling pods across topologies, enhancing what affinity and
+anti-affinity can offer.</p>
+<h3 id="command-line-interface">Command-line interface</h3>
+<p>CloudNativePG doesn't have its own command-line interface.
+It relies on the best command-line interface for Kubernetes, kubectl,
+by providing a plugin called <code>cnpg</code>. This plugin enhances and simplifies your PostgreSQL
+cluster management experience.</p>
+<h3 id="current-status-of-the-cluster">Current status of the cluster</h3>
+<p>The operator continuously updates the status section of the CR with the
+observed status of the cluster. The entire PostgreSQL cluster status is
+continuously monitored by the instance manager running in each pod. The
+instance manager is responsible for applying the required changes to the
+controlled PostgreSQL instance to converge to the required status of
+the cluster. (For example, if the cluster status reports that pod <code>-1</code> is the
+primary, pod <code>-1</code> needs to promote itself while the other pods need to follow
+pod <code>-1</code>.) The same status is used by the <code>cnpg</code> plugin for kubectl to provide
+details.</p>
+<h3 id="operators-certification-authority">Operator's certification authority</h3>
+<p>The operator creates a certification authority for itself.
+It creates and signs with the operator certification authority a leaf certificate
+for the webhook server to use. This certificate ensures safe communication between the
+Kubernetes API server and the operator.</p>
+<h3 id="clusters-certification-authority">Cluster's certification authority</h3>
+<p>The operator creates a certification authority for every PostgreSQL
+cluster. This certification authority is used to issue and renew TLS certificates for clients' authentication,
+including streaming replication standby servers (instead of passwords).
+Support for a custom certification authority for client certificates is
+available through secrets, which also includes integration with cert-manager.
+Certificates can be issued with the <code>cnpg</code> plugin for kubectl.</p>
+<h3 id="tls-connections">TLS connections</h3>
+<p>The operator transparently and natively supports TLS/SSL connections
+to encrypt client/server communications for increased security using the
+cluster's certification authority.
+Support for custom server certificates is available through secrets, which also
+includes integration with cert-manager.</p>
+<h3 id="certificate-authentication-for-streaming-replication">Certificate authentication for streaming replication</h3>
+<p>To authorize streaming replication connections from the standby servers,
+the operator relies on TLS client certificate authentication. This method is used
+instead of relying on a password (and therefore a secret).</p>
+<h3 id="continuous-configuration-management">Continuous configuration management</h3>
+<p>The operator enables you to apply changes to the <code>Cluster</code> resource YAML
+section of the PostgreSQL configuration. Depending on the configuration option,
+it also makes sure that all instances are properly reloaded or restarted.</p>
+<div class="admonition note current limitation">
+<p class="admonition-title">Note</p>
+<p>Changes with <code>ALTER SYSTEM</code> aren't detected, meaning
+that the cluster state isn't enforced.</p>
+</div>
+<h3 id="import-of-existing-postgresql-databases">Import of existing PostgreSQL databases</h3>
+<p>The operator provides a declarative way to import existing
+Postgres databases in a new CloudNativePG cluster in Kubernetes, using
+offline migrations.
+The same feature also covers offline major upgrades of PostgreSQL databases.
+Offline means that applications must stop their write operations at the source
+until the database is imported.
+The feature extends the <code>initdb</code> bootstrap method to create a new PostgreSQL
+cluster using a logical snapshot of the data available in another PostgreSQL
+database. This data can be accessed by way of the network through a superuser
+connection. Import is from any supported version of Postgres. It relies on
+<code>pg_dump</code> and <code>pg_restore</code> being executed from the new cluster primary
+for all databases that are part of the operation and, if requested, for roles.</p>
+<h3 id="postgis-clusters">PostGIS clusters</h3>
+<p>CloudNativePG supports the installation of clusters with the <a href="../postgis/">PostGIS</a>
+open source extension for geographical databases. This extension is one of the most popular
+extensions for PostgreSQL.</p>
+<h3 id="basic-ldap-authentication-for-postgresql">Basic LDAP authentication for PostgreSQL</h3>
+<p>The operator allows you to configure LDAP authentication for your PostgreSQL
+clients, using either the <em>simple bind</em> or <em>search+bind</em> mode, as described in
+the <a href="https://www.postgresql.org/docs/current/auth-ldap.html">LDAP authentication section of the PostgreSQL documentation</a>.</p>
+<h3 id="multiple-installation-methods">Multiple installation methods</h3>
+<p>The operator can be installed through a Kubernetes manifest by way of <code>kubectl
+apply</code>, to be used in a traditional Kubernetes installation in public
+and private cloud environments. CloudNativePG also supports
+installation by way of a Helm chart or OLM bundle from OperatorHub.io.</p>
+<h3 id="convention-over-configuration">Convention over configuration</h3>
+<p>The operator supports the convention-over-configuration paradigm, deciding
+standard default values while allowing you to override them and customize
+them. You can specify a deployment of a PostgreSQL cluster using
+the <code>Cluster</code> CRD in a couple of lines of YAML code.</p>
+<h2 id="level-2-seamless-upgrades">Level 2: Seamless upgrades</h2>
+<p>Capability level 2 is about enabling updates of the operator and the actual
+workload, in this case PostgreSQL servers. This includes PostgreSQL minor
+release updates (security and bug fixes normally) as well as major online
+upgrades.</p>
+<h3 id="operator-upgrade">Operator Upgrade</h3>
+<p>Upgrading the operator is seamless and can be done as a new deployment. After
+upgrading the controller, a rolling update of all deployed PostgreSQL clusters
+is initiated. You can choose to update all clusters simultaneously or
+distribute their upgrades over time.</p>
+<p>Thanks to the instance manager's injection, upgrading the operator does not
+require changes to the operand, allowing the operator to manage older versions
+of it.</p>
+<p>Additionally, CloudNativePG supports <a href="../installation_upgrade/#in-place-updates-of-the-instance-manager">in-place updates of the instance manager</a>
+following an operator upgrade. In-place updates do not require a rolling update
+or a subsequent switchover of the cluster.</p>
+<h3 id="upgrade-of-the-managed-workload">Upgrade of the managed workload</h3>
+<p>The operand can be upgraded using a declarative configuration approach as
+part of changing the CR and, in particular, the <code>imageName</code> parameter.
+This is normally initiated by security updates or Postgres minor version updates.
+In the presence of standby servers, the operator performs rolling updates
+starting from the replicas. It does this by dropping the existing pod and creating a new
+one with the new requested operand image that reuses the underlying storage.
+Depending on the value of the <code>primaryUpdateStrategy</code>, the operator proceeds
+with a switchover before updating the former primary (<code>unsupervised</code>). Or, it waits
+for the user to manually issue the switchover procedure (<code>supervised</code>) by way of the
+<code>cnpg</code> plugin for kubectl.
+The setting to use depends on the business requirements, as the operation
+might generate some downtime for the applications. This downtime can range from a few seconds to
+minutes, based on the actual database workload.</p>
+<h3 id="offline-in-place-major-upgrades-of-postgresql">Offline In-Place Major Upgrades of PostgreSQL</h3>
+<p>CloudNativePG supports declarative offline in-place major upgrades when a new
+operand container image with a higher PostgreSQL major version is applied to a
+cluster. The upgrade can be triggered by updating the image tag via the
+<code>.spec.imageName</code> option or by using an image catalog to manage version
+changes. During the upgrade, all cluster pods are shut down to ensure data
+consistency. A new job is then created to validate the upgrade conditions,
+execute <code>pg_upgrade</code>, and create new directories for <code>PGDATA</code>, WAL files, and
+tablespaces if needed. Once the upgrade is complete, replicas are re-created.
+Failed upgrades can be rolled back.</p>
+<h3 id="display-cluster-availability-status-during-upgrade">Display cluster availability status during upgrade</h3>
+<p>At any time, convey the cluster's high availability status, for example,
+<code>Setting up primary</code>, <code>Creating a new replica</code>, <code>Cluster in healthy state</code>,
+<code>Switchover in progress</code>, <code>Failing over</code>, <code>Upgrading cluster</code>, and <code>Upgrading
+Postgres major version</code>.</p>
+<h2 id="level-3-full-lifecycle">Level 3: Full lifecycle</h2>
+<p>Capability level 3 requires the operator to manage aspects of business
+continuity and scalability.</p>
+<p><em>Disaster recovery</em> is a business continuity component that requires
+that both backup and recovery of a database work correctly. While as a
+starting point, the goal is to achieve <a href="../before_you_start/#rpo">RPO</a> &lt; 5
+minutes, the long-term goal is to implement RPO=0 backup solutions. <em>High
+availability</em> is the other important component of business continuity. Through
+PostgreSQL native physical replication and hot standby replicas, it allows the
+operator to perform failover and switchover operations. This area includes
+enhancements in:</p>
+<ul>
+<li>Control of PostgreSQL physical replication, such as synchronous replication,
+  (cascading) replication clusters, and so on</li>
+<li>Connection pooling, to improve performance and control through a
+  connection pooling layer with pgBouncer</li>
+</ul>
+<h3 id="postgresql-wal-archive">PostgreSQL WAL archive</h3>
+<p>The operator supports PostgreSQL continuous archiving of WAL files
+to an object store (AWS S3 and S3-compatible, Azure Blob Storage, Google Cloud
+Storage, and gateways like MinIO).</p>
+<p>WAL archiving is defined at the cluster level, declaratively, through the
+<code>backup</code> parameter in the cluster definition. This is done by specifying an S3 protocol
+destination URL (for example, to point to a specific folder in an AWS S3
+bucket) and, optionally, a generic endpoint URL.</p>
+<p>WAL archiving, a prerequisite for continuous backup, doesn't require any further
+user action. The operator transparently sets
+the <code>archive_command</code> to rely on <code>barman-cloud-wal-archive</code> to ship WAL
+files to the defined endpoint. You can decide the compression algorithm,
+as well as the number of parallel jobs to concurrently upload WAL files
+in the archive. In addition, <code>Instance Manager</code> checks
+the correctness of the archive destination by performing the <code>barman-cloud-check-wal-archive</code>
+command before beginning to ship the first set of WAL files.</p>
+<h3 id="postgresql-backups">PostgreSQL Backups</h3>
+<p>CloudNativePG provides a pluggable interface (CNPG-I) for managing
+application-level backups using PostgreSQL’s native physical backup
+mechanisms—namely base backups and continuous WAL archiving. This
+design enables flexibility and extensibility while ensuring consistency and
+performance.</p>
+<p>The CloudNativePG Community officially supports the <a href="https://cloudnative-pg.io/plugin-barman-cloud/">Barman Cloud Plugin</a>,
+which enables continuous physical backups to object stores, along with full and
+Point-In-Time Recovery (PITR) capabilities.</p>
+<p>In addition to CNPG-I plugins, CloudNativePG also natively supports backups
+using Kubernetes volume snapshots, when supported by the underlying storage
+class and CSI driver.</p>
+<p>You can initiate base backups in two ways:</p>
+<ul>
+<li>On-demand, using the <code>Backup</code> custom resource</li>
+<li>Scheduled, using the <code>ScheduledBackup</code> custom resource, with a cron-like
+  schedule format</li>
+</ul>
+<p>Volume snapshots leverage the Kubernetes API and are particularly effective for
+very large databases (VLDBs) due to their speed and storage efficiency.</p>
+<p>Both volume snapshots and CNPG-I-based backups support:</p>
+<ul>
+<li>Hot backups: Taken while PostgreSQL is running, ensuring minimal
+  disruption.</li>
+<li>Cold backups: Performed by temporarily stopping PostgreSQL to ensure a
+  fully consistent snapshot, when required.</li>
+</ul>
+<h3 id="backups-from-a-standby">Backups from a standby</h3>
+<p>The operator supports offloading base backups onto a standby without impacting
+the <a href="../before_you_start/#rpo">RPO</a> of the database. This allows resources to
+be preserved on the primary, in particular I/O, for standard database
+operations.</p>
+<h3 id="full-restore-from-a-backup">Full restore from a backup</h3>
+<p>The operator enables you to bootstrap a new cluster (with its settings)
+starting from an existing and accessible backup, either on a volume snapshot,
+or in an object store, or via a plugin.</p>
+<p>Once the bootstrap process is completed, the operator initiates the instance in
+recovery mode. It replays all available WAL files from the specified archive,
+exiting recovery and starting as a primary.
+Subsequently, the operator clones the requested number of standby instances
+from the primary.
+CloudNativePG supports parallel WAL fetching from the archive.</p>
+<h3 id="point-in-time-recovery-pitr-from-a-backup">Point-in-time recovery (PITR) from a backup</h3>
+<p>The operator enables you to create a new PostgreSQL cluster by recovering
+an existing backup to a specific point in time, defined with a timestamp, a
+label, or a transaction ID. This capability is built on top of the full restore
+one and supports all the options available in
+<a href="https://www.postgresql.org/docs/current/runtime-config-wal.html#RUNTIME-CONFIG-WAL-RECOVERY-TARGET">PostgreSQL for PITR</a>.</p>
+<h3 id="zero-data-loss-clusters-through-synchronous-replication">Zero-Data-Loss Clusters Through Synchronous Replication</h3>
+<p>Achieve <em>zero data loss</em> (RPO=0) in your local high-availability CloudNativePG
+cluster with support for both quorum-based and priority-based synchronous
+replication. The operator offers a flexible way to define the number of
+expected synchronous standby replicas available at any time, and allows
+customization of the <code>synchronous_standby_names</code> option as needed.</p>
+<h3 id="replica-clusters">Replica clusters</h3>
+<p>Establish a robust cross-Kubernetes cluster topology for PostgreSQL clusters,
+harnessing the power of native streaming and cascading replication. With the
+<code>replica</code> option, you can configure an autonomous cluster to consistently
+replicate data from another PostgreSQL source of the same major version. This
+source can be located anywhere, provided you have access to a WAL archive for
+fetching WAL files or a direct streaming connection via TLS between the two
+endpoints.</p>
+<p>Notably, the source PostgreSQL instance can exist outside the Kubernetes
+environment, whether in a physical or virtual setting.</p>
+<p>Replica clusters can be instantiated through various methods, including volume
+snapshots, a recovery object store (using the Barman Cloud backup format),
+or streaming using <code>pg_basebackup</code>. Both WAL file shipping and WAL streaming
+are supported. The deployment of replica clusters significantly elevates the
+business continuity posture of PostgreSQL databases within Kubernetes,
+extending across multiple data centers and facilitating hybrid and multi-cloud
+setups. (While anticipating Kubernetes federation native capabilities, manual
+switchover across data centers remains necessary.)</p>
+<p>Additionally, the flexibility extends to creating delayed replica clusters
+intentionally lagging behind the primary cluster. This intentional lag aims to
+minimize the Recovery Time Objective (<a href="../before_you_start/#rto">RTO</a>) in the
+event of unintended errors, such as incorrect <code>DELETE</code> or <code>UPDATE</code> SQL operations.</p>
+<h3 id="distributed-database-topologies">Distributed Database Topologies</h3>
+<p>Leverage replica clusters to
+define <a href="../replica_cluster/#distributed-topology">distributed database topologies</a>
+for PostgreSQL that span across various Kubernetes clusters, facilitating hybrid
+and multi-cloud deployments. With CloudNativePG, you gain powerful capabilities,
+including:</p>
+<ul>
+<li><strong>Declarative Primary Control</strong>: Easily specify which PostgreSQL cluster acts
+  as the primary.</li>
+<li><strong>Seamless Primary Switchover</strong>: Effortlessly demote the current primary and
+  promote another PostgreSQL cluster, typically located in a different region,
+  without needing to re-clone the former primary.</li>
+</ul>
+<p>This setup can efficiently operate across two or more regions, can rely entirely
+on object stores for replication, and guarantees a maximum RPO (Recovery Point
+Objective) of 5 minutes. This advanced feature is uniquely provided by
+CloudNativePG, ensuring robust data integrity and continuity across diverse
+environments.</p>
+<h3 id="tablespace-support">Tablespace support</h3>
+<p>CloudNativePG seamlessly integrates robust support for PostgreSQL tablespaces
+by facilitating the declarative definition of individual persistent volumes.
+This innovative feature empowers you to efficiently distribute I/O operations
+across a diverse array of storage devices. Through the transparent
+orchestration of tablespaces, CloudNativePG enhances the performance and
+scalability of PostgreSQL databases, ensuring a streamlined and optimized
+experience for managing large scale data storage in cloud-native environments.
+Support for temporary tablespaces is also included.</p>
+<h3 id="customizable-startup-liveness-and-readiness-probes">Customizable Startup, Liveness, and Readiness Probes</h3>
+<p>CloudNativePG configures startup, liveness, and readiness probes for PostgreSQL
+containers, which are managed by the Kubernetes kubelet. These probes interact
+with the <code>/startupz</code>, <code>/healthz</code>, and <code>/readyz</code> endpoints exposed by
+the instance manager's web server to monitor the Pod's health and readiness.</p>
+<p>All probes are configured with default settings but can be fully customized to
+meet specific needs, allowing for fine-tuning to align with your environment
+and workloads.</p>
+<p>For detailed configuration options and advanced usage,
+refer to the <a href="../instance_manager/">Postgres instance manager</a> documentation.</p>
+<h3 id="rolling-deployments">Rolling deployments</h3>
+<p>The operator supports rolling deployments to minimize the downtime. If a
+PostgreSQL cluster is exposed publicly, the service load-balances the
+read-only traffic only to available pods during the initialization or the
+update.</p>
+<h3 id="scale-up-and-down-of-replicas">Scale up and down of replicas</h3>
+<p>The operator allows you to scale up and down the number of instances in a
+PostgreSQL cluster. New replicas are started up from the
+primary server and participate in the cluster's HA infrastructure.
+The CRD declares a "scale" subresource that allows you to use the
+<code>kubectl scale</code> command.</p>
+<h3 id="maintenance-window-and-poddisruptionbudget-for-kubernetes-nodes">Maintenance window and PodDisruptionBudget for Kubernetes nodes</h3>
+<p>The operator creates a <code>PodDisruptionBudget</code> resource to limit the number of
+concurrent disruptions to one primary instance. This configuration prevents the
+maintenance operation from deleting all the pods in a cluster, allowing the
+specified number of instances to be created. The PodDisruptionBudget is
+applied during the node-draining operation, preventing any disruption of the
+cluster service.</p>
+<p>While this strategy is correct for Kubernetes clusters where
+storage is shared among all the worker nodes, it might not be the best solution
+for clusters using local storage or for clusters installed in a private
+cloud. The operator allows you to specify a maintenance window and
+configure the reaction to any underlying node eviction. The <code>ReusePVC</code> option
+in the maintenance window section enables to specify the strategy to use.
+Allocate new storage in a different PVC for the evicted instance, or wait
+for the underlying node to be available again.</p>
+<h3 id="fencing">Fencing</h3>
+<p>Fencing is the process of protecting the data in one, more, or even all
+instances of a PostgreSQL cluster when they appear to be malfunctioning.
+When an instance is fenced, the PostgreSQL server process is
+guaranteed to be shut down, while the pod is kept running. This ensures
+that, until the fence is lifted, data on the pod isn't modified by PostgreSQL
+and that you can investigate file system for debugging and troubleshooting
+purposes.</p>
+<h3 id="hibernation">Hibernation</h3>
+<p>CloudNativePG supports <a href="../declarative_hibernation/">hibernation of a running PostgreSQL cluster</a>
+in a declarative manner, through the <code>cnpg.io/hibernation</code> annotation.
+Hibernation enables saving CPU power by removing the database pods while
+keeping the database PVCs. This feature simulates scaling to 0 instances.</p>
+<h3 id="reuse-of-persistent-volumes-storage-in-pods">Reuse of persistent volumes storage in pods</h3>
+<p>When the operator needs to create a pod that was deleted by the user or
+was evicted by a Kubernetes maintenance operation, it reuses the
+<code>PersistentVolumeClaim</code>, if available. This ability avoids the need
+to clone the data from the primary again.</p>
+<h3 id="cpu-and-memory-requests-and-limits">CPU and memory requests and limits</h3>
+<p>The operator allows administrators to control and manage resource usage by
+the cluster's pods in the <code>resources</code> section of the manifest. In
+particular, you can set <code>requests</code> and <code>limits</code> values for both CPU and RAM.</p>
+<h3 id="connection-pooling-with-pgbouncer">Connection pooling with PgBouncer</h3>
+<p>CloudNativePG provides native support for connection pooling with
+<a href="../connection_pooling/">PgBouncer</a>, one of the most popular open source
+connection poolers for PostgreSQL. From an architectural point of view, the
+native implementation of a PgBouncer connection pooler introduces a new layer
+to access the database. This optimizes the query flow toward the instances
+and makes the use of the underlying PostgreSQL resources more efficient.
+Instead of connecting directly to a PostgreSQL service, applications can now
+connect to the PgBouncer service and start reusing any existing connection.</p>
+<h3 id="logical-replication">Logical Replication</h3>
+<p>CloudNativePG supports PostgreSQL's logical replication in a declarative manner
+using <code>Publication</code> and <code>Subscription</code> custom resource definitions.</p>
+<p>Logical replication is particularly useful together with the import facility
+for online data migrations (even from public DBaaS solutions) and major
+PostgreSQL upgrades.</p>
+<h2 id="level-4-deep-insights">Level 4: Deep insights</h2>
+<p>Capability level 4 is about <em>observability</em>: monitoring,
+alerting, trending, and log processing. This might involve the use of external tools,
+such as Prometheus, Grafana, and Fluent Bit, as well as extensions in the
+PostgreSQL engine for the output of error logs directly in JSON format.</p>
+<p>CloudNativePG was designed to provide everything needed
+to easily integrate with industry-standard and community-accepted tools for
+flexible monitoring and logging.</p>
+<h3 id="prometheus-exporter-with-configurable-queries">Prometheus exporter with configurable queries</h3>
+<p>The instance manager provides a pluggable framework. By way of its own web server
+listening on the <code>metrics</code> port (9187), it exposes an endpoint to export metrics
+for the <a href="https://prometheus.io/">Prometheus</a> monitoring and alerting tool.
+The operator supports custom monitoring queries defined as <code>ConfigMap</code>
+or <code>Secret</code> objects using a syntax that's compatible with
+<a href="https://github.com/prometheus-community/postgres_exporter"><code>postgres_exporter</code> for Prometheus</a>.
+CloudNativePG provides a set of basic monitoring queries for
+PostgreSQL that can be integrated and adapted to your context.</p>
+<h3 id="grafana-dashboard">Grafana dashboard</h3>
+<p>CloudNativePG comes with a Grafana dashboard that you can use as a base to
+monitor all critical aspects of a PostgreSQL cluster, and customize.</p>
+<h3 id="standard-output-logging-of-postgresql-error-messages-in-json-format">Standard output logging of PostgreSQL error messages in JSON format</h3>
+<p>Every log message is delivered to standard output in JSON format. The first level is the
+definition of the timestamp, the log level, and the type of log entry, such as
+<code>postgres</code> for the canonical PostgreSQL error message channel.
+As a result, every pod managed by CloudNativePG can be easily and directly
+integrated with any downstream log processing stack that supports JSON as source
+data type.</p>
+<h3 id="real-time-query-monitoring">Real-time query monitoring</h3>
+<p>CloudNativePG transparently and natively supports:</p>
+<ul>
+<li>The essential <a href="https://www.postgresql.org/docs/current/pgstatstatements.html"><code>pg_stat_statements</code> extension</a>,
+  which enables tracking of planning and execution statistics of all SQL
+  statements executed by a PostgreSQL server</li>
+<li>The <a href="https://www.postgresql.org/docs/current/auto-explain.html"><code>auto_explain</code> extension</a>,
+  which provides a means for logging execution plans of slow statements
+  automatically, without having to manually run <code>EXPLAIN</code> (helpful for tracking
+  down un-optimized queries)</li>
+<li>The <a href="https://github.com/EnterpriseDB/pg_failover_slots"><code>pg_failover_slots</code> extension</a>,
+  which makes logical replication slots usable across a physical failover,
+  ensuring resilience in change data capture (CDC) contexts based on PostgreSQL's
+  native logical replication</li>
+</ul>
+<h3 id="audit">Audit</h3>
+<p>CloudNativePG allows database and security administrators, auditors,
+and operators to track and analyze database activities using PGAudit for
+PostgreSQL.
+Such activities flow directly in the JSON log and can be properly routed to the
+correct downstream target using common log brokers like Fluentd.</p>
+<h3 id="kubernetes-events">Kubernetes events</h3>
+<p>Record major events as expected by the Kubernetes API, such as creating resources,
+removing nodes, and upgrading. Events can be displayed by using
+the <code>kubectl describe</code> and <code>kubectl get events</code> commands.</p>
+<h2 id="level-5-auto-pilot">Level 5: Auto pilot</h2>
+<p>Capability level 5 is focused on automated scaling, healing, and
+tuning through the discovery of anomalies and insights that emerged
+from the observability layer.</p>
+<h3 id="automated-failover-for-self-healing">Automated failover for self-healing</h3>
+<p>In case of detected failure on the primary, the operator changes the
+status of the cluster by setting the most aligned replica as the new target
+primary. As a consequence, the instance manager in each alive pod
+initiates the required procedures to align itself with the requested status of
+the cluster. It does this by either becoming the new primary or by following it.
+In case the former primary comes back up, the same mechanism avoids a
+split-brain by preventing applications from reaching it, running <code>pg_rewind</code> on
+the server and restarting it as a standby.</p>
+<h3 id="automated-recreation-of-a-standby">Automated recreation of a standby</h3>
+<p>If the pod hosting a standby is removed, the operator initiates
+the procedure to re-create a standby server.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../imagevolume_extensions/" class="btn btn-neutral float-left" title="Image Volume Extensions"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../controller/" class="btn btn-neutral float-right" title="Custom Pod Controller">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../imagevolume_extensions/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../controller/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/operator_conf/index.html b/assets/documentation/1.27.0-rc1/operator_conf/index.html
new file mode 100644
index 000000000..646fef33b
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/operator_conf/index.html
@@ -0,0 +1,585 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Operator configuration - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Operator configuration";
+        var mkdocs_page_input_path = "operator_conf.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Operator configuration</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#available-options">Available options</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#defining-an-operator-config-map">Defining an operator config map</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#defining-an-operator-secret">Defining an operator secret</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#restarting-the-operator-to-reload-configs">Restarting the operator to reload configs</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#pprof-http-server">pprof HTTP Server</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Operator configuration</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="operator-configuration">Operator configuration</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>The operator for CloudNativePG is installed from a standard
+deployment manifest and follows the convention over configuration paradigm.
+While this is fine in most cases, there are some scenarios where you want
+to change the default behavior, such as:</p>
+<ul>
+<li>defining annotations and labels to be inherited by all resources created
+  by the operator and that are set in the cluster resource</li>
+<li>defining a different default image for PostgreSQL or an additional pull secret</li>
+</ul>
+<p>By default, the operator is installed in the <code>cnpg-system</code>
+namespace as a Kubernetes <code>Deployment</code> called <code>cnpg-controller-manager</code>.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>In the examples below we assume the default name and namespace for the operator deployment.</p>
+</div>
+<p>The behavior of the operator can be customized through a <code>ConfigMap</code>/<code>Secret</code> that
+is located in the same namespace of the operator deployment and with
+<code>cnpg-controller-manager-config</code> as the name.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Any change to the config's <code>ConfigMap</code>/<code>Secret</code> will not be automatically
+detected by the operator, - and as such, it needs to be reloaded (see below).
+Moreover, changes only apply to the resources created after the configuration
+is reloaded.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The operator first processes the ConfigMap values and then the Secret’s, in this order.
+As a result, if a parameter is defined in both places, the one in the Secret will be used.</p>
+</div>
+<h2 id="available-options">Available options</h2>
+<p>The operator looks for the following environment variables to be defined in the <code>ConfigMap</code>/<code>Secret</code>:</p>
+<table>
+<thead>
+<tr>
+<th>Name</th>
+<th>Description</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td><code>CERTIFICATE_DURATION</code></td>
+<td>Determines the lifetime of the generated certificates in days. Default is 90.</td>
+</tr>
+<tr>
+<td><code>CLUSTERS_ROLLOUT_DELAY</code></td>
+<td>The duration (in seconds) to wait between the roll-outs of different clusters during an operator upgrade. This setting controls the timing of upgrades across clusters, spreading them out to reduce system impact. The default value is <code>0</code> which means no delay between PostgreSQL cluster upgrades.</td>
+</tr>
+<tr>
+<td><code>CREATE_ANY_SERVICE</code></td>
+<td>When set to <code>true</code>, will create <code>-any</code> service for the cluster. Default is <code>false</code></td>
+</tr>
+<tr>
+<td><code>ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES</code></td>
+<td>When set to <code>true</code>, enables in-place updates of the instance manager after an update of the operator, avoiding rolling updates of the cluster (default <code>false</code>)</td>
+</tr>
+<tr>
+<td><code>EXPIRING_CHECK_THRESHOLD</code></td>
+<td>Determines the threshold, in days, for identifying a certificate as expiring. Default is 7.</td>
+</tr>
+<tr>
+<td><code>INCLUDE_PLUGINS</code></td>
+<td>A comma-separated list of plugins to be always included in the Cluster's reconciliation.</td>
+</tr>
+<tr>
+<td><code>INHERITED_ANNOTATIONS</code></td>
+<td>List of annotation names that, when defined in a <code>Cluster</code> metadata, will be inherited by all the generated resources, including pods</td>
+</tr>
+<tr>
+<td><code>INHERITED_LABELS</code></td>
+<td>List of label names that, when defined in a <code>Cluster</code> metadata, will be inherited by all the generated resources, including pods</td>
+</tr>
+<tr>
+<td><code>INSTANCES_ROLLOUT_DELAY</code></td>
+<td>The duration (in seconds) to wait between roll-outs of individual PostgreSQL instances within the same cluster during an operator upgrade. The default value is <code>0</code>, meaning no delay between upgrades of instances in the same PostgreSQL cluster.</td>
+</tr>
+<tr>
+<td><code>KUBERNETES_CLUSTER_DOMAIN</code></td>
+<td>Defines the domain suffix for service FQDNs within the Kubernetes cluster. If left unset, it defaults to "cluster.local".</td>
+</tr>
+<tr>
+<td><code>MONITORING_QUERIES_CONFIGMAP</code></td>
+<td>The name of a ConfigMap in the operator's namespace with a set of default queries (to be specified under the key <code>queries</code>) to be applied to all created Clusters</td>
+</tr>
+<tr>
+<td><code>MONITORING_QUERIES_SECRET</code></td>
+<td>The name of a Secret in the operator's namespace with a set of default queries (to be specified under the key <code>queries</code>) to be applied to all created Clusters</td>
+</tr>
+<tr>
+<td><code>OPERATOR_IMAGE_NAME</code></td>
+<td>The name of the operator image used to bootstrap Pods. Defaults to the image specified during installation.</td>
+</tr>
+<tr>
+<td><code>POSTGRES_IMAGE_NAME</code></td>
+<td>The name of the PostgreSQL image used by default for new clusters. Defaults to the version specified in the operator.</td>
+</tr>
+<tr>
+<td><code>PULL_SECRET_NAME</code></td>
+<td>Name of an additional pull secret to be defined in the operator's namespace and to be used to download images</td>
+</tr>
+<tr>
+<td><code>STANDBY_TCP_USER_TIMEOUT</code></td>
+<td>Defines the <a href="https://www.postgresql.org/docs/current/runtime-config-connection.html#GUC-TCP-USER-TIMEOUT"><code>TCP_USER_TIMEOUT</code> socket option</a> for replication connections from standby instances to the primary. Default is 0 (system's default).</td>
+</tr>
+<tr>
+<td><code>DRAIN_TAINTS</code></td>
+<td>Specifies the taint keys that should be interpreted as indicators of node drain. By default, it includes the taints commonly applied by <a href="https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/">kubectl</a>, <a href="https://github.com/kubernetes/autoscaler">Cluster Autoscaler</a>, and <a href="https://github.com/aws/karpenter-provider-aws">Karpenter</a>: <code>node.kubernetes.io/unschedulable</code>, <code>ToBeDeletedByClusterAutoscaler</code>, <code>karpenter.sh/disrupted</code>, <code>karpenter.sh/disruption</code>.</td>
+</tr>
+</tbody>
+</table>
+<p>Values in <code>INHERITED_ANNOTATIONS</code> and <code>INHERITED_LABELS</code> support path-like wildcards. For example, the value <code>example.com/*</code> will match
+both the value <code>example.com/one</code> and <code>example.com/two</code>.</p>
+<p>When you specify an additional pull secret name using the <code>PULL_SECRET_NAME</code> parameter,
+the operator will use that secret to create a pull secret for every created PostgreSQL
+cluster. That secret will be named <code>&lt;cluster-name&gt;-pull</code>.</p>
+<p>The namespace where the operator looks for the <code>PULL_SECRET_NAME</code> secret is where
+you installed the operator. If the operator is not able to find that secret, it
+will ignore the configuration parameter.</p>
+<h2 id="defining-an-operator-config-map">Defining an operator config map</h2>
+<p>The example below customizes the behavior of the operator, by defining
+the label/annotation names to be inherited by the resources created by
+any <code>Cluster</code> object that is deployed at a later time, by enabling
+<a href="../installation_upgrade/#in-place-updates-of-the-instance-manager">in-place updates for the instance
+manager</a>,
+and by spreading upgrades.</p>
+<pre><code class="language-yaml">apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: cnpg-controller-manager-config
+  namespace: cnpg-system
+data:
+  CLUSTERS_ROLLOUT_DELAY: '60'
+  ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true'
+  INHERITED_ANNOTATIONS: categories
+  INHERITED_LABELS: environment, workload, app
+  INSTANCES_ROLLOUT_DELAY: '10'
+</code></pre>
+<h2 id="defining-an-operator-secret">Defining an operator secret</h2>
+<p>The example below customizes the behavior of the operator, by defining
+the label/annotation names to be inherited by the resources created by
+any <code>Cluster</code> object that is deployed at a later time, and by enabling
+<a href="../installation_upgrade/#in-place-updates-of-the-instance-manager">in-place updates for the instance
+manager</a>,
+and by spreading upgrades.</p>
+<pre><code class="language-yaml">apiVersion: v1
+kind: Secret
+metadata:
+  name: cnpg-controller-manager-config
+  namespace: cnpg-system
+type: Opaque
+stringData:
+  CLUSTERS_ROLLOUT_DELAY: '60'
+  ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true'
+  INHERITED_ANNOTATIONS: categories
+  INHERITED_LABELS: environment, workload, app
+  INSTANCES_ROLLOUT_DELAY: '10'
+</code></pre>
+<h2 id="restarting-the-operator-to-reload-configs">Restarting the operator to reload configs</h2>
+<p>For the change to be effective, you need to recreate the operator pods to
+reload the config map. If you have installed the operator on Kubernetes
+using the manifest you can do that by issuing:</p>
+<pre><code class="language-shell">kubectl rollout restart deployment \
+    -n cnpg-system \
+    cnpg-controller-manager
+</code></pre>
+<p>In general, given a specific namespace, you can delete the operator pods with
+the following command:</p>
+<pre><code class="language-shell">kubectl delete pods -n [NAMESPACE_NAME_HERE] \
+  -l app.kubernetes.io/name=cloudnative-pg
+</code></pre>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Customizations will be applied only to <code>Cluster</code> resources created
+after the reload of the operator deployment.</p>
+</div>
+<p>Following the above example, if the <code>Cluster</code> definition contains a <code>categories</code>
+annotation and any of the <code>environment</code>, <code>workload</code>, or <code>app</code> labels, these will
+be inherited by all the resources generated by the deployment.</p>
+<h2 id="pprof-http-server">pprof HTTP Server</h2>
+<p>The operator can expose a PPROF HTTP server with the following endpoints on <code>localhost:6060</code>:</p>
+<ul>
+<li><code>/debug/pprof/</code>. Responds to a request for "/debug/pprof/" with an HTML page listing the available profiles</li>
+<li><code>/debug/pprof/cmdline</code>. Responds with the running program's command line, with arguments separated by NULL bytes.</li>
+<li><code>/debug/pprof/profile</code>. Responds with the pprof-formatted cpu profile. Profiling lasts for duration specified in seconds GET parameter, or for 30 seconds if not specified.</li>
+<li><code>/debug/pprof/symbol</code>. Looks up the program counters listed in the request, responding with a table mapping program counters to function names.</li>
+<li><code>/debug/pprof/trace</code>. Responds with the execution trace in binary form.  Tracing lasts for duration specified in seconds GET parameter, or for 1 second if not specified.</li>
+</ul>
+<p>To enable the operator you need to edit the operator deployment add the flag <code>--pprof-server=true</code>.</p>
+<p>You can do this by executing these commands:</p>
+<pre><code class="language-shell">kubectl edit deployment -n cnpg-system cnpg-controller-manager
+</code></pre>
+<p>Then on the edit page scroll down the container args and add
+<code>--pprof-server=true</code>, as in this example:</p>
+<pre><code class="language-yaml">      containers:
+      - args:
+        - controller
+        - --enable-leader-election
+        - --config-map-name=cnpg-controller-manager-config
+        - --secret-name=cnpg-controller-manager-config
+        - --log-level=info
+        - --pprof-server=true # relevant line
+        command:
+        - /manager
+</code></pre>
+<p>Save the changes; the deployment now will execute a roll-out, and the new pod
+will have the PPROF server enabled.</p>
+<p>Once the pod is running you can exec inside the container by doing:</p>
+<pre><code class="language-shell">kubectl exec -ti -n cnpg-system &lt;pod name&gt; -- bash
+</code></pre>
+<p>Once inside execute:</p>
+<pre><code class="language-shell">curl localhost:6060/debug/pprof/
+</code></pre>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../tablespaces/" class="btn btn-neutral float-left" title="Tablespaces"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../cluster_conf/" class="btn btn-neutral float-right" title="Instance pod configuration">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../tablespaces/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../cluster_conf/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/postgis/index.html b/assets/documentation/1.27.0-rc1/postgis/index.html
new file mode 100644
index 000000000..0823053e7
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/postgis/index.html
@@ -0,0 +1,502 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>PostGIS - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "PostGIS";
+        var mkdocs_page_input_path = "postgis.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">PostGIS</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#basic-concepts-about-a-postgis-cluster">Basic concepts about a PostGIS cluster</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#create-a-new-postgresql-cluster-with-postgis">Create a new PostgreSQL cluster with PostGIS</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">PostGIS</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="postgis">PostGIS</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p><a href="https://postgis.net/">PostGIS</a> is a very popular open source extension
+for PostgreSQL that introduces support for storing GIS (Geographic Information
+Systems) objects in the database and be queried via SQL.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>This section assumes you are familiar with PostGIS and provides some basic
+information about how to create a new PostgreSQL cluster with a PostGIS database
+in Kubernetes via CloudNativePG.</p>
+</div>
+<p>The CloudNativePG Community maintains container images that are built on top
+of the official <a href="https://hub.docker.com/r/postgis/postgis">PostGIS images hosted on DockerHub</a>.
+For more information please visit:</p>
+<ul>
+<li>The <a href="https://github.com/cloudnative-pg/postgis-containers"><code>postgis-containers</code> project in GitHub</a></li>
+<li>The <a href="https://github.com/cloudnative-pg/postgis-containers/pkgs/container/postgis"><code>postgis-containers</code> Container Registry in GitHub</a></li>
+</ul>
+<h2 id="basic-concepts-about-a-postgis-cluster">Basic concepts about a PostGIS cluster</h2>
+<p>Conceptually, a PostGIS-based PostgreSQL cluster (or simply a PostGIS cluster)
+is like any other PostgreSQL cluster. The only differences are:</p>
+<ul>
+<li>the presence in the system of PostGIS and related libraries</li>
+<li>the presence in the database(s) of the PostGIS extension</li>
+</ul>
+<p>Since CloudNativePG is based on Immutable Application Containers, the only way
+to provision PostGIS is to add it to the container image that you use for the
+operand. The <a href="../container_images/">"Container Image Requirements" section</a> provides
+detailed instructions on how this is achieved. More simply, you can just use
+the PostGIS container images from the Community, as in the examples below.</p>
+<p>The second step is to install the extension in the PostgreSQL database. You can
+do this in two ways:</p>
+<ul>
+<li>install it in the application database, which is the main and supposedly only
+  database you host in the cluster according to the microservice architecture, or</li>
+<li>install it in the <code>template1</code> database so as to make it available for all the
+  databases you end up creating in the cluster, in case you adopt the monolith
+  architecture where the instance is shared by multiple databases</li>
+</ul>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For more information on the microservice vs monolith architecture in the database
+please refer to the <a href="../faq/">"How many databases should be hosted in a single PostgreSQL instance?" FAQ</a>
+or the <a href="../database_import/">"Database import" section</a>.</p>
+</div>
+<h2 id="create-a-new-postgresql-cluster-with-postgis">Create a new PostgreSQL cluster with PostGIS</h2>
+<p>Let's suppose you want to create a new PostgreSQL 17 cluster with PostGIS 3.2.</p>
+<p>The first step is to ensure you use the right PostGIS container image for the
+operand, and properly set the <code>.spec.imageName</code> option in the <code>Cluster</code>
+resource.</p>
+<p>The <a href="../samples/postgis-example.yaml"><code>postgis-example.yaml</code> manifest</a> below
+provides some guidance on how the creation of a PostGIS cluster can be done.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Please consider that, although convention over configuration applies in
+CloudNativePG, you should spend time configuring and tuning your system for
+production. Also the <code>imageName</code> in the example below deliberately points
+to the latest available image for PostgreSQL 17 - you should use a specific
+image name or, preferably, the SHA256 digest for true immutability.</p>
+</div>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: postgis-example
+spec:
+  instances: 1
+  imageName: ghcr.io/cloudnative-pg/postgis:17
+  storage:
+    size: 1Gi
+  postgresql:
+    parameters:
+      log_statement: ddl
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: postgis-example-app
+spec:
+  name: app
+  owner: app
+  cluster:
+    name: postgis-example
+  extensions:
+  - name: postgis
+  - name: postgis_topology
+  - name: fuzzystrmatch
+  - name: postgis_tiger_geocoder
+</code></pre>
+<p>The example leverages the <code>Database</code> resource's declarative extension
+management to add the specified extensions to the <code>app</code> database.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For more details, see the
+<a href="../declarative_database_management/#managing-extensions-in-a-database">"Managing Extensions in a Database" section</a>.</p>
+</div>
+<p>You can easily verify the available version of PostGIS that is in the
+container, by connecting to the <code>app</code> database (you might obtain different
+values from the ones in this document):</p>
+<pre><code class="language-console">$ kubectl cnpg psql postgis-example -- app
+psql (17.5 (Debian 17.5-1.pgdg110+2))
+Type &quot;help&quot; for help.
+
+app=# SELECT * FROM pg_available_extensions WHERE name ~ '^postgis' ORDER BY 1;
+           name           | default_version | installed_version |                          comment
+--------------------------+-----------------+-------------------+------------------------------------------------------------
+ postgis                  | 3.5.2           | 3.5.2             | PostGIS geometry and geography spatial types and functions
+ postgis-3                | 3.5.2           |                   | PostGIS geometry and geography spatial types and functions
+ postgis_raster           | 3.5.2           |                   | PostGIS raster types and functions
+ postgis_raster-3         | 3.5.2           |                   | PostGIS raster types and functions
+ postgis_sfcgal           | 3.5.2           |                   | PostGIS SFCGAL functions
+ postgis_sfcgal-3         | 3.5.2           |                   | PostGIS SFCGAL functions
+ postgis_tiger_geocoder   | 3.5.2           | 3.5.2             | PostGIS tiger geocoder and reverse geocoder
+ postgis_tiger_geocoder-3 | 3.5.2           |                   | PostGIS tiger geocoder and reverse geocoder
+ postgis_topology         | 3.5.2           | 3.5.2             | PostGIS topology spatial types and functions
+ postgis_topology-3       | 3.5.2           |                   | PostGIS topology spatial types and functions
+(10 rows)
+</code></pre>
+<p>The next step is to verify that the extensions listed in the <code>Database</code>
+resource have been correctly installed in the <code>app</code> database.</p>
+<pre><code class="language-console">app=# \dx
+                                        List of installed extensions
+          Name          | Version |   Schema   |                        Description
+------------------------+---------+------------+------------------------------------------------------------
+ fuzzystrmatch          | 1.2     | public     | determine similarities and distance between strings
+ plpgsql                | 1.0     | pg_catalog | PL/pgSQL procedural language
+ postgis                | 3.5.2   | public     | PostGIS geometry and geography spatial types and functions
+ postgis_tiger_geocoder | 3.5.2   | tiger      | PostGIS tiger geocoder and reverse geocoder
+ postgis_topology       | 3.5.2   | topology   | PostGIS topology spatial types and functions
+(5 rows)
+</code></pre>
+<p>Finally:</p>
+<pre><code class="language-console">app=# SELECT postgis_full_version();
+                                                                            postgis_full_version
+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------
+ POSTGIS=&quot;3.5.2 dea6d0a&quot; [EXTENSION] PGSQL=&quot;170&quot; GEOS=&quot;3.9.0-CAPI-1.16.2&quot; PROJ=&quot;7.2.1 NETWORK_ENABLED=OFF URL_ENDPOINT=https://cdn.proj.org USER_WRITABLE_DIRECTORY=/tmp/proj DATABASE_PATH=/usr/share/proj/proj.db&quot; (compiled against PROJ 7.2.1) LIBXML=&quot;2.9.10&quot; LIBJSON=&quot;0.15&quot; LIBPROTOBUF=&quot;1.3.3&quot; WAGYU=&quot;0.5.0 (Internal)&quot; TOPOLOGY
+(1 row)
+</code></pre>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../declarative_hibernation/" class="btn btn-neutral float-left" title="Declarative hibernation"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../e2e/" class="btn btn-neutral float-right" title="End-to-End Tests">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../declarative_hibernation/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../e2e/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/postgres_upgrades/index.html b/assets/documentation/1.27.0-rc1/postgres_upgrades/index.html
new file mode 100644
index 000000000..6a0a2f9fc
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/postgres_upgrades/index.html
@@ -0,0 +1,575 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>PostgreSQL Upgrades - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "PostgreSQL Upgrades";
+        var mkdocs_page_input_path = "postgres_upgrades.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">PostgreSQL Upgrades</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#minor-version-upgrades">Minor Version Upgrades</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#upgrading-a-minor-version-in-cloudnativepg">Upgrading a Minor Version in CloudNativePG</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#major-version-upgrades">Major Version Upgrades</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#offline-in-place-major-upgrades">Offline In-Place Major Upgrades</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#upgrade-process">Upgrade Process</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#post-upgrade-actions">Post-Upgrade Actions</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#example-performing-a-major-upgrade">Example: Performing a Major Upgrade</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#upgrade-process_1">Upgrade Process</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">PostgreSQL Upgrades</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="postgresql-upgrades">PostgreSQL Upgrades</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>PostgreSQL upgrades fall into two categories:</p>
+<ul>
+<li><a href="#minor-version-upgrades">Minor version upgrades</a> (e.g., from 17.0 to 17.1)</li>
+<li><a href="#major-version-upgrades">Major version upgrades</a> (e.g., from 16.x to 17.0)</li>
+</ul>
+<h2 id="minor-version-upgrades">Minor Version Upgrades</h2>
+<p>PostgreSQL version numbers follow a <code>major.minor</code> format. For instance, in
+version 17.1:</p>
+<ul>
+<li><code>17</code> is the major version</li>
+<li><code>1</code> is the minor version</li>
+</ul>
+<p>Minor releases are fully compatible with earlier and later minor releases of
+the same major version. They include bug fixes and security updates but do not
+introduce changes to the internal storage format.
+For example, PostgreSQL 17.1 is compatible with 17.0 and 17.5.</p>
+<h3 id="upgrading-a-minor-version-in-cloudnativepg">Upgrading a Minor Version in CloudNativePG</h3>
+<p>To upgrade to a newer minor version, simply update the PostgreSQL container
+image reference in your cluster definition, either directly or via image catalogs.
+CloudNativePG will trigger a <a href="../rolling_update/">rolling update of the cluster</a>,
+replacing each instance one by one, starting with the replicas. Once all
+replicas have been updated, it will perform either a switchover or a restart of
+the primary to complete the process.</p>
+<h2 id="major-version-upgrades">Major Version Upgrades</h2>
+<p>Major PostgreSQL releases introduce changes to the internal data storage
+format, requiring a more structured upgrade process.</p>
+<p>CloudNativePG supports three methods for performing major upgrades:</p>
+<ol>
+<li><a href="../database_import/">Logical dump/restore</a> – Blue/green deployment, offline.</li>
+<li><a href="../logical_replication/#example-of-live-migration-and-major-postgres-upgrade-with-logical-replication">Native logical replication</a> – Blue/green deployment, online.</li>
+<li>Physical with <code>pg_upgrade</code> – In-place upgrade, offline (covered in the
+   <a href="#offline-in-place-major-upgrades">"Offline In-Place Major Upgrades" section</a> below).</li>
+</ol>
+<p>Each method has trade-offs in terms of downtime, complexity, and data volume
+handling. The best approach depends on your upgrade strategy and operational
+constraints.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>We strongly recommend testing all methods in a controlled environment
+before proceeding with a production upgrade.</p>
+</div>
+<h2 id="offline-in-place-major-upgrades">Offline In-Place Major Upgrades</h2>
+<p>CloudNativePG performs an <strong>offline in-place major upgrade</strong> when a new operand
+container image with a higher PostgreSQL major version is declaratively
+requested for a cluster.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Major upgrades are only supported between images based on the same
+operating system distribution. For example, if your previous version uses a
+<code>bullseye</code> image, you cannot upgrade to a <code>bookworm</code> image.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>There is a bug in PostgreSQL 17.0 through 17.5 that prevents successful upgrades
+if the <code>max_slot_wal_keep_size</code> parameter is set to any value other than <code>-1</code>.
+The upgrade process will fail with an error related to replication slot configuration.
+This issue has been <a href="https://github.com/postgres/postgres/commit/f36e5774">fixed in PostgreSQL 17.6 and 18beta2 or later versions</a>.
+If you are using PostgreSQL 17.0 through 17.5, ensure that you upgrade to at least
+PostgreSQL 17.6 before attempting a major upgrade, or make sure to temporarily set
+the <code>max_slot_wal_keep_size</code> parameter to <code>-1</code> in your cluster configuration.</p>
+</div>
+<p>You can trigger the upgrade in one of two ways:</p>
+<ul>
+<li>By updating the major version in the image tag via the <code>.spec.imageName</code>
+  option.</li>
+<li>Using an <a href="../image_catalog/">image catalog</a> to manage version changes.</li>
+</ul>
+<p>For details on supported image tags, see
+<a href="../container_images/#image-tag-requirements">"Image Tag Requirements"</a>.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>CloudNativePG is not responsible for PostgreSQL extensions. You must ensure
+that extensions in the source PostgreSQL image are compatible with those in the
+target image and that upgrade paths are supported. Thoroughly test the upgrade
+process in advance to avoid unexpected issues.
+The <a href="../declarative_database_management/#managing-extensions-in-a-database">extensions management feature</a>
+can help manage extension upgrades declaratively.</p>
+</div>
+<h3 id="upgrade-process">Upgrade Process</h3>
+<ol>
+<li>Shuts down all cluster pods to ensure data consistency.</li>
+<li>Records the previous PostgreSQL version and image in the cluster’s status under
+   <code>.status.pgDataImageInfo</code>.</li>
+<li>Initiates a new upgrade job, which:</li>
+<li>Verifies that the binaries in the image and the data files align with a
+     major upgrade request.</li>
+<li>Creates new directories for <code>PGDATA</code>, and where applicable, WAL files and
+     tablespaces.</li>
+<li>Performs the upgrade using <code>pg_upgrade</code> with the <code>--link</code> option.</li>
+<li>Upon successful completion, replaces the original directories with their
+     upgraded counterparts.</li>
+</ol>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>During the upgrade process, the entire PostgreSQL cluster, including
+replicas, is unavailable to applications. Ensure that your system can
+tolerate this downtime before proceeding.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Performing an in-place upgrade is an exceptional operation that carries inherent
+risks. It is strongly recommended to take a full backup of the cluster before
+initiating the upgrade process.</p>
+</div>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For detailed guidance on <code>pg_upgrade</code>, refer to the official
+<a href="https://www.postgresql.org/docs/current/pgupgrade.html">PostgreSQL documentation</a>.</p>
+</div>
+<h3 id="post-upgrade-actions">Post-Upgrade Actions</h3>
+<p>If the upgrade is successful, CloudNativePG:</p>
+<ul>
+<li>Destroys the PVCs of replicas (if available).</li>
+<li>Scales up replicas as required.</li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Re-cloning replicas can be time-consuming, especially for very large
+databases. Plan accordingly to accommodate potential delays. After completing
+the upgrade, it is strongly recommended to take a full backup. Existing backup
+data (namely base backups and WAL files) is only available for the previous
+minor PostgreSQL release.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p><code>pg_upgrade</code> doesn't transfer optimizer statistics. After the upgrade, you
+may want to run <code>ANALYZE</code> on your databases to update them.</p>
+</div>
+<p>If the upgrade fails, you must manually revert the major version change in the
+cluster's configuration and delete the upgrade job, as CloudNativePG cannot
+automatically decide the rollback.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>This process <strong>protects your existing database from data loss</strong>, as no data
+is modified during the upgrade. If the upgrade fails, a rollback is
+usually possible, without having to perform a full recovery from a backup.
+Ensure you monitor the process closely and take corrective action if needed.</p>
+</div>
+<h3 id="example-performing-a-major-upgrade">Example: Performing a Major Upgrade</h3>
+<p>Consider the following PostgreSQL cluster running version 16:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  imageName: ghcr.io/cloudnative-pg/postgresql:16-minimal-bookworm
+  instances: 3
+  storage:
+    size: 1Gi
+</code></pre>
+<p>You can check the current PostgreSQL version using the following command:</p>
+<pre><code class="language-sh">kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()'
+</code></pre>
+<p>This will return output similar to:</p>
+<pre><code class="language-console">PostgreSQL 16.x ...
+</code></pre>
+<p>To upgrade the cluster to version 17, update the <code>imageName</code> field by changing
+the major version tag from <code>16</code> to <code>17</code>:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  imageName: ghcr.io/cloudnative-pg/postgresql:17-minimal-bookworm
+  instances: 3
+  storage:
+    size: 1Gi
+</code></pre>
+<h3 id="upgrade-process_1">Upgrade Process</h3>
+<ol>
+<li>Cluster shutdown – All cluster pods are terminated to ensure a consistent
+   upgrade.</li>
+<li>Upgrade job execution – A new job is created with the name of the primary
+   pod, appended with the suffix <code>-major-upgrade</code>. This job runs <code>pg_upgrade</code>
+   on the primary’s persistent volume group.</li>
+<li>Post-upgrade steps:</li>
+<li>The PVC groups of the replicas (<code>cluster-example-2</code> and
+     <code>cluster-example-3</code>) are removed.</li>
+<li>The primary pod is restarted.</li>
+<li>Two new replicas (<code>cluster-example-4</code> and <code>cluster-example-5</code>) are
+     re-cloned from the upgraded primary.</li>
+</ol>
+<p>Once the upgrade is complete, you can verify the new major version by running
+the same command:</p>
+<pre><code class="language-sh">kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()'
+</code></pre>
+<p>This should now return output similar to:</p>
+<pre><code class="language-console">PostgreSQL 17.x ...
+</code></pre>
+<p>You can now update the statistics by running <code>ANALYZE</code> on the <code>app</code> database:</p>
+<pre><code class="language-sh">kubectl cnpg psql cluster-example -- app -c 'ANALYZE'
+</code></pre>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../kubernetes_upgrade/" class="btn btn-neutral float-left" title="Kubernetes Upgrade and Maintenance"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../kubectl-plugin/" class="btn btn-neutral float-right" title="Kubectl Plugin">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../kubernetes_upgrade/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../kubectl-plugin/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/postgresql_conf/index.html b/assets/documentation/1.27.0-rc1/postgresql_conf/index.html
new file mode 100644
index 000000000..12ac9101f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/postgresql_conf/index.html
@@ -0,0 +1,962 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>PostgreSQL Configuration - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "PostgreSQL Configuration";
+        var mkdocs_page_input_path = "postgresql_conf.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">PostgreSQL Configuration</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#the-postgresql-section">The postgresql section</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#write-ahead-log-level">Write-Ahead Log Level</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#replication-settings">Replication Settings</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#log-control-settings">Log control settings</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#shared-preload-libraries">Shared Preload Libraries</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#managed-extensions">Managed extensions</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#enabling-auto_explain">Enabling auto_explain</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#enabling-pg_stat_statements">Enabling pg_stat_statements</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#enabling-pgaudit">Enabling pgaudit</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#enabling-pg_failover_slots">Enabling pg_failover_slots</a>
+    </li>
+        </ul>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#the-pg_hba-section">The pg_hba section</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#ldap-configuration">LDAP Configuration</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#the-pg_ident-section">The pg_ident section</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#changing-configuration">Changing configuration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#enabling-alter-system">Enabling ALTER SYSTEM</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#dynamic-shared-memory-settings">Dynamic Shared Memory settings</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#posix-shared-memory">POSIX shared memory</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#system-v-shared-memory">System V shared memory</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#fixed-parameters">Fixed parameters</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">PostgreSQL Configuration</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="postgresql-configuration">PostgreSQL Configuration</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>Users that are familiar with PostgreSQL are aware of the existence of the
+following three files to configure an instance:</p>
+<ul>
+<li><code>postgresql.conf</code>: main run-time configuration file of PostgreSQL</li>
+<li><code>pg_hba.conf</code>: clients authentication file</li>
+<li><code>pg_ident.conf</code>: map external users to internal users</li>
+</ul>
+<p>Due to the concepts of declarative configuration and immutability of the PostgreSQL
+containers, users are not allowed to directly touch those files. Configuration
+is possible through the <code>postgresql</code> section of the <code>Cluster</code> resource definition
+by defining custom <code>postgresql.conf</code>, <code>pg_hba.conf</code>, and <code>pg_ident.conf</code> settings
+via the <code>parameters</code>, the <code>pg_hba</code>, and the <code>pg_ident</code> keys.</p>
+<p>These settings are the same across all instances.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Please don't use the <code>ALTER SYSTEM</code> query to change the configuration of
+the PostgreSQL instances in an imperative way. Changing some of the options
+that are normally controlled by the operator might indeed lead to an
+unpredictable/unrecoverable state of the cluster.
+Moreover, <code>ALTER SYSTEM</code> changes are not replicated across the cluster.
+See <a href="#enabling-alter-system">"Enabling ALTER SYSTEM"</a> below for details.</p>
+</div>
+<p>A reference for custom settings usage is included in the samples, see
+<a href="../samples/cluster-example-custom.yaml"><code>cluster-example-custom.yaml</code></a>.</p>
+<h2 id="the-postgresql-section">The <code>postgresql</code> section</h2>
+<p>The PostgreSQL instance in the pod starts with a default <code>postgresql.conf</code> file,
+to which these settings are automatically added:</p>
+<pre><code class="language-text">listen_addresses = '*'
+include custom.conf
+</code></pre>
+<p>The <code>custom.conf</code> file will contain the user-defined settings in the
+<code>postgresql</code> section, as in the following example:</p>
+<pre><code class="language-yaml">  # ...
+  postgresql:
+    parameters:
+      shared_buffers: &quot;1GB&quot;
+  # ...
+</code></pre>
+<div class="admonition seealso">
+<p class="admonition-title">PostgreSQL GUCs: Grand Unified Configuration</p>
+<p>Refer to the PostgreSQL documentation for
+<a href="https://www.postgresql.org/docs/current/runtime-config.html">more information on the available parameters</a>,
+also known as GUC (Grand Unified Configuration).
+Please note that CloudNativePG accepts only strings for the PostgreSQL parameters.</p>
+</div>
+<p>The content of <code>custom.conf</code> is automatically generated and maintained by the
+operator by applying the following sections in this order:</p>
+<ul>
+<li>Global default parameters</li>
+<li>Default parameters that depend on the PostgreSQL major version</li>
+<li>User-provided parameters</li>
+<li>Fixed parameters</li>
+</ul>
+<p>The <strong>global default parameters</strong> are:</p>
+<pre><code class="language-text">archive_timeout = '5min'
+dynamic_shared_memory_type = 'posix'
+full_page_writes = 'on'
+logging_collector = 'on'
+log_destination = 'csvlog'
+log_directory = '/controller/log'
+log_filename = 'postgres'
+log_rotation_age = '0'
+log_rotation_size = '0'
+log_truncate_on_rotation = 'false'
+max_parallel_workers = '32'
+max_replication_slots = '32'
+max_worker_processes = '32'
+shared_memory_type = 'mmap'
+shared_preload_libraries = ''
+ssl_max_protocol_version = 'TLSv1.3'
+ssl_min_protocol_version = 'TLSv1.3'
+wal_keep_size = '512MB'
+wal_level = 'logical'
+wal_log_hints = 'on'
+wal_sender_timeout = '5s'
+wal_receiver_timeout = '5s'
+</code></pre>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>It is your duty to plan for WAL segments retention in your PostgreSQL
+cluster and properly configure either <code>wal_keep_size</code> or <code>wal_keep_segments</code>,
+depending on the server version, based on the expected and observed workloads.</p>
+<p>Alternatively, if the only streaming replication clients are the replica instances
+running in the High Availability cluster, you can take advantage of the
+replication slots feature, which adds support for replication slots at the
+cluster level. You can enable the feature with the
+<code>replicationSlots.highAvailability</code> option (for more information, please refer to the
+<a href="../replication/#replication-slots-for-high-availability">"Replication" section</a>.)</p>
+<p>Without replication slots nor continuous backups in place, configuring
+<code>wal_keep_size</code> or <code>wal_keep_segments</code> is the only way to
+protect standbys from falling out of sync.
+If a standby did fall out of sync it would produce error
+messages like:
+<code>"could not receive data from WAL stream: ERROR: requested WAL segment ************************ has already been removed"</code>.
+This will require you to dedicate a part of your <code>PGDATA</code>, or the volume
+dedicated to storing WAL files, to keep older WAL segments for streaming
+replication purposes.</p>
+</div>
+<p>The following parameters are <strong>fixed</strong> and exclusively controlled by the operator:</p>
+<pre><code class="language-text">archive_command = '/controller/manager wal-archive %p'
+hot_standby = 'true'
+listen_addresses = '*'
+port = '5432'
+restart_after_crash = 'false'
+ssl = 'on'
+ssl_ca_file = '/controller/certificates/client-ca.crt'
+ssl_cert_file = '/controller/certificates/server.crt'
+ssl_key_file = '/controller/certificates/server.key'
+unix_socket_directories = '/controller/run'
+</code></pre>
+<p>Since the fixed parameters are added at the end, they can't be overridden by the
+user via the YAML configuration. Those parameters are required for correct WAL
+archiving and replication.</p>
+<h3 id="write-ahead-log-level">Write-Ahead Log Level</h3>
+<p>The <a href="https://www.postgresql.org/docs/current/runtime-config-wal.html"><code>wal_level</code></a>
+parameter in PostgreSQL determines the amount of information written to the
+Write-Ahead Log (WAL). It accepts the following values:</p>
+<ul>
+<li><code>minimal</code>: Writes only the information required for crash recovery.</li>
+<li><code>replica</code>: Adds sufficient information to support WAL archiving and streaming
+  replication, including the ability to run read-only queries on standby
+  instances.</li>
+<li><code>logical</code>: Includes all information from <code>replica</code>, plus additional information
+  required for logical decoding and replication.</li>
+</ul>
+<p>By default, upstream PostgreSQL sets <code>wal_level</code> to <code>replica</code>. CloudNativePG,
+instead, sets <code>wal_level</code> to <code>logical</code> by default to enable logical replication
+out of the box. This makes it easier to support use cases such as migrations
+from external PostgreSQL servers.</p>
+<p>If your cluster does not require logical replication, it is recommended to set
+<code>wal_level</code> to <code>replica</code> to reduce WAL volume and overhead.</p>
+<p>Finally, CloudNativePG allows <code>wal_level</code> to be set to <code>minimal</code> only for
+single-instance clusters with WAL archiving disabled.</p>
+<h3 id="replication-settings">Replication Settings</h3>
+<p>The <code>primary_conninfo</code>, <code>restore_command</code>, and <code>recovery_target_timeline</code>
+parameters are automatically managed by the operator based on the instance's
+role within the cluster. These parameters are effectively applied only when the
+instance is operating as a replica.</p>
+<pre><code class="language-text">primary_conninfo = 'host=&lt;PRIMARY&gt; user=postgres dbname=postgres'
+recovery_target_timeline = 'latest'
+</code></pre>
+<p>The <a href="../operator_conf/#available-options"><code>STANDBY_TCP_USER_TIMEOUT</code> operator configuration setting</a>,
+if specified, sets the <code>tcp_user_timeout</code> parameter on all standby instances
+managed by the operator.</p>
+<p>The <code>tcp_user_timeout</code> parameter determines how long transmitted data can
+remain unacknowledged before the TCP connection is forcibly closed. Adjusting
+this value allows you to fine-tune the responsiveness of standby instances to
+network disruptions. For more details, refer to the
+<a href="https://www.postgresql.org/docs/current/runtime-config-connection.html#GUC-TCP-USER-TIMEOUT">PostgreSQL documentation</a>.</p>
+<h3 id="log-control-settings">Log control settings</h3>
+<p>The operator requires PostgreSQL to output its log in CSV format, and the
+instance manager automatically parses it and outputs it in JSON format.
+For this reason, all log settings in PostgreSQL are fixed and cannot be
+changed.</p>
+<p>For further information, please refer to the <a href="../logging/">"Logging" section</a>.</p>
+<h3 id="shared-preload-libraries">Shared Preload Libraries</h3>
+<p>The <code>shared_preload_libraries</code> option in PostgreSQL exists to specify one or
+more shared libraries to be pre-loaded at server start, in the form of a
+comma-separated list. Typically, it is used in PostgreSQL to load those
+extensions that need to be available to most database sessions in the whole system
+(e.g. <code>pg_stat_statements</code>).</p>
+<p>In CloudNativePG the <code>shared_preload_libraries</code> option is empty by
+default. Although you can override the content of <code>shared_preload_libraries</code>,
+we recommend that only expert Postgres users take advantage of this option.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>In case a specified library is not found, the server fails to start,
+preventing CloudNativePG from any self-healing attempt and requiring
+manual intervention. Please make sure you always test both the extensions and
+the settings of <code>shared_preload_libraries</code> if you plan to directly manage its
+content.</p>
+</div>
+<p>CloudNativePG is able to automatically manage the content of the
+<code>shared_preload_libraries</code> option for some of the most used PostgreSQL
+extensions (see the <a href="#managed-extensions">"Managed extensions"</a> section below
+for details).</p>
+<p>Specifically, as soon as the operator notices that a configuration parameter
+requires one of the managed libraries, it will automatically add the needed
+library. The operator will also remove the library as soon as no actual parameter
+requires it.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Please always keep in mind that removing libraries from
+<code>shared_preload_libraries</code> requires a restart of all instances in the cluster
+in order to be effective.</p>
+</div>
+<p>You can provide additional <code>shared_preload_libraries</code> via
+<code>.spec.postgresql.shared_preload_libraries</code> as a list of strings: the operator
+will merge them with the ones that it automatically manages.</p>
+<h3 id="managed-extensions">Managed extensions</h3>
+<p>As anticipated in the previous section, CloudNativePG automatically
+manages the content in <code>shared_preload_libraries</code> for some well-known and
+supported extensions. The current list includes:</p>
+<ul>
+<li><code>auto_explain</code></li>
+<li><code>pg_stat_statements</code></li>
+<li><code>pgaudit</code></li>
+<li><code>pg_failover_slots</code></li>
+</ul>
+<p>Some of these libraries also require additional objects in a database before
+using them, normally views and/or functions managed via the <code>CREATE EXTENSION</code>
+command to be run in a database (the <code>DROP EXTENSION</code> command typically removes
+those objects).</p>
+<p>For such libraries, CloudNativePG automatically handles the creation
+and removal of the extension in all databases that accept a connection in the
+cluster, identified by the following query:</p>
+<pre><code class="language-sql">SELECT datname FROM pg_database WHERE datallowconn
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The above query also includes template databases like <code>template1</code>.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>With the introduction of <a href="../declarative_database_management/#managing-extensions-in-a-database">declarative extensions</a>
+in the <code>Database</code> CRD, you can now manage extensions directly. As a result,
+the managed extensions feature may undergo significant changes in future
+versions of CloudNativePG, and some functionalities might be deprecated.</p>
+</div>
+<h4 id="enabling-auto_explain">Enabling <code>auto_explain</code></h4>
+<p>The <a href="https://www.postgresql.org/docs/current/auto-explain.html"><code>auto_explain</code></a>
+extension provides a means for logging execution plans of slow statements
+automatically, without having to manually run <code>EXPLAIN</code> (helpful for tracking
+down un-optimized queries).</p>
+<p>You can enable <code>auto_explain</code> by adding to the configuration a parameter
+that starts with <code>auto_explain.</code> as in the following example excerpt (which
+automatically logs execution plans of queries that take longer than 10 seconds
+to complete):</p>
+<pre><code class="language-yaml">  # ...
+  postgresql:
+    parameters:
+      auto_explain.log_min_duration: &quot;10s&quot;
+  # ...
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Enabling auto_explain can lead to performance issues. Please refer to <a href="https://www.postgresql.org/docs/current/auto-explain.html"><code>the auto explain documentation</code></a></p>
+</div>
+<h4 id="enabling-pg_stat_statements">Enabling <code>pg_stat_statements</code></h4>
+<p>The <a href="https://www.postgresql.org/docs/current/pgstatstatements.html"><code>pg_stat_statements</code></a>
+extension is one of the most important capabilities available in PostgreSQL for
+real-time monitoring of queries.</p>
+<p>You can enable <code>pg_stat_statements</code> by adding to the configuration a parameter
+that starts with <code>pg_stat_statements.</code> as in the following example excerpt:</p>
+<pre><code class="language-yaml">  # ...
+  postgresql:
+    parameters:
+      pg_stat_statements.max: &quot;10000&quot;
+      pg_stat_statements.track: all
+  # ...
+</code></pre>
+<p>As explained previously, the operator will automatically add
+<code>pg_stat_statements</code> to <code>shared_preload_libraries</code> and run <code>CREATE EXTENSION IF
+NOT EXISTS pg_stat_statements</code> on each database, enabling you to run queries
+against the <code>pg_stat_statements</code> view.</p>
+<h4 id="enabling-pgaudit">Enabling <code>pgaudit</code></h4>
+<p>The <code>pgaudit</code> extension provides detailed session and/or object audit logging via the standard PostgreSQL logging facility.</p>
+<p>CloudNativePG has transparent and native support for
+<a href="https://www.pgaudit.org/">PGAudit</a> on PostgreSQL clusters. For further information, please refer to the <a href="../logging/#pgaudit-logs">"PGAudit" logs section.</a></p>
+<p>You can enable <code>pgaudit</code> by adding to the configuration a parameter
+that starts with <code>pgaudit.</code> as in the following example excerpt:</p>
+<pre><code class="language-yaml">#
+postgresql:
+  parameters:
+    pgaudit.log: &quot;all, -misc&quot;
+    pgaudit.log_catalog: &quot;off&quot;
+    pgaudit.log_parameter: &quot;on&quot;
+    pgaudit.log_relation: &quot;on&quot;
+#
+</code></pre>
+<h4 id="enabling-pg_failover_slots">Enabling <code>pg_failover_slots</code></h4>
+<p>The <a href="https://github.com/EnterpriseDB/pg_failover_slots"><code>pg_failover_slots</code></a>
+extension by EDB ensures that logical replication slots can survive a
+failover scenario. Failovers are normally implemented using physical
+streaming replication, like in the case of CloudNativePG.</p>
+<p>You can enable <code>pg_failover_slots</code> by adding to the configuration a parameter
+that starts with <code>pg_failover_slots.</code>: as explained above, the operator will
+transparently manage the <code>pg_failover_slots</code> entry in the
+<code>shared_preload_libraries</code> option depending on this.</p>
+<p>Please refer to <a href="https://www.enterprisedb.com/docs/pg_extensions/pg_failover_slots"><code>the</code>pg_failover_slots<code>documentation</code></a>
+for details on this extension.</p>
+<p>Additionally, for each database that you intend to you use with <code>pg_failover_slots</code>
+you need to add an entry in the <code>pg_hba</code> section that enables each replica to
+connect to the primary.
+For example, suppose that you want to use the <code>app</code> database with <code>pg_failover_slots</code>,
+you need to add this entry in the <code>pg_hba</code> section:</p>
+<pre><code class="language-yaml">  postgresql:
+    pg_hba:
+      - hostssl app streaming_replica all cert
+</code></pre>
+<h2 id="the-pg_hba-section">The <code>pg_hba</code> section</h2>
+<p><code>pg_hba</code> is a list of PostgreSQL Host Based Authentication rules
+used to create the <code>pg_hba.conf</code> used by the pods.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>See the PostgreSQL documentation for
+<a href="https://www.postgresql.org/docs/current/auth-pg-hba-conf.html">more information on <code>pg_hba.conf</code></a>.</p>
+</div>
+<p>Since the first matching rule is used for authentication, the <code>pg_hba.conf</code> file
+generated by the operator can be seen as composed of four sections:</p>
+<ol>
+<li>Fixed rules</li>
+<li>User-defined rules</li>
+<li>Optional LDAP section</li>
+<li>Default rules</li>
+</ol>
+<p>Fixed rules:</p>
+<pre><code class="language-text">local all all peer
+
+hostssl postgres streaming_replica all cert map=cnpg_streaming_replica
+hostssl replication streaming_replica all cert map=cnpg_streaming_replica
+hostssl all cnpg_pooler_pgbouncer all cert map=cnpg_pooler_pgbouncer
+</code></pre>
+<p>Default rules:</p>
+<pre><code class="language-text">host all all all &lt;default-authentication-method&gt;
+</code></pre>
+<p>From PostgreSQL 14 the default value of the <code>password_encryption</code>
+database parameter is set to <code>scram-sha-256</code>. Because of that,
+the default authentication method is <code>scram-sha-256</code> from this
+PostgreSQL version.</p>
+<p>PostgreSQL 13 and older will use <code>md5</code> as the default authentication
+method.</p>
+<p>The resulting <code>pg_hba.conf</code> will look like this:</p>
+<pre><code class="language-text">local all all peer
+
+hostssl postgres streaming_replica all cert map=cnpg_streaming_replica
+hostssl replication streaming_replica all cert map=cnpg_streaming_replica
+hostssl all cnpg_pooler_pgbouncer all cert map=cnpg_pooler_pgbouncer
+
+&lt;user defined rules&gt;
+&lt;user defined LDAP&gt;
+
+host all all all scram-sha-256 # (or md5 for PostgreSQL version &lt;= 13)
+</code></pre>
+<p>Inside the cluster manifest, <code>pg_hba</code> lines are added as list items
+in <code>.spec.postgresql.pg_hba</code>, as in the following excerpt:</p>
+<pre><code class="language-yaml">  postgresql:
+    pg_hba:
+      - hostssl app app 10.244.0.0/16 md5
+</code></pre>
+<p>In the above example we are enabling access for the <code>app</code> user to the <code>app</code>
+database using MD5 password authentication (you can use <code>scram-sha-256</code>
+if you prefer) via a secure channel (<code>hostssl</code>).</p>
+<h3 id="ldap-configuration">LDAP Configuration</h3>
+<p>Under the <code>postgres</code> section of the cluster spec there is an optional <code>ldap</code> section available to define an LDAP
+configuration to be converted into a rule added into the <code>pg_hba.conf</code> file.</p>
+<p>This will support two modes: <code>simple bind</code> mode which requires specifying a <code>server</code>, <code>prefix</code> and <code>suffix</code> in the LDAP 
+section and the <code>search+bind</code> mode which requires specifying <code>server</code>, <code>baseDN</code>, <code>binDN</code>, and a <code>bindPassword</code> which is
+a secret containing the ldap password. Additionally, in <code>search+bind</code> mode you have the option to specify a
+<code>searchFilter</code> or <code>searchAttribute</code>. If no <code>searchAttribute</code> is specified the default one of <code>uid</code> will be used.</p>
+<p>Additionally, both modes allow the specification of a <code>scheme</code> for ldapscheme and a <code>port</code>. Neither scheme nor port are
+required, however. </p>
+<p>This section filled out for search+bind could look as follows:</p>
+<pre><code class="language-yaml">postgresql:
+  ldap:
+    server: 'openldap.default.svc.cluster.local'
+    bindSearchAuth:
+      baseDN: 'ou=org,dc=example,dc=com'
+      bindDN: 'cn=admin,dc=example,dc=com'
+      bindPassword:
+        name: 'ldapBindPassword'
+        key: 'data'
+      searchAttribute: 'uid'
+</code></pre>
+<h2 id="the-pg_ident-section">The <code>pg_ident</code> section</h2>
+<p><code>pg_ident</code> is a list of PostgreSQL User Name Maps that CloudNativePG uses to
+generate and maintain the ident map file (known as <code>pg_ident.conf</code>) inside the
+data directory.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>See the PostgreSQL documentation for
+<a href="https://www.postgresql.org/docs/current/auth-username-maps.html">more information on <code>pg_ident.conf</code></a>.</p>
+</div>
+<p>The <code>pg_ident.conf</code> file written by the operator is made up of the following
+two sections:</p>
+<ol>
+<li>Fixed rules</li>
+<li>User-defined rules</li>
+</ol>
+<p>Currently the only fixed rule, automatically generated by the operator, is:</p>
+<pre><code class="language-text">local &lt;postgres system user&gt; postgres
+</code></pre>
+<p>The instance manager detects the user running the PostgreSQL instance and
+automatically adds a rule to map it to the <code>postgres</code> user in the database.</p>
+<p>If the <code>postgres</code> user is not properly configured inside the container, the
+instance manager will allow any local user to connect and then log a warning
+message like the following:</p>
+<pre><code class="language-text">Unable to identify the current user. Falling back to insecure mapping.
+</code></pre>
+<p>The resulting <code>pg_ident.conf</code> will look like this:</p>
+<pre><code class="language-text">local &lt;postgres system user&gt; postgres
+
+&lt;user defined lines&gt;
+</code></pre>
+<p>Inside the cluster manifest, <code>pg_ident</code> lines are added as list items
+in <code>.spec.postgresql.pg_ident</code>.
+For example:</p>
+<pre><code class="language-yaml">  postgresql:
+    pg_ident:
+      - &quot;mymap /^(.*)@mydomain\\.com$ \\1&quot;
+</code></pre>
+<h2 id="changing-configuration">Changing configuration</h2>
+<p>You can apply configuration changes by editing the <code>postgresql</code> section of
+the <code>Cluster</code> resource.</p>
+<p>After the change, the cluster instances will immediately reload the
+configuration to apply the changes.
+If the change involves a parameter requiring a restart, the operator will
+perform a rolling upgrade.</p>
+<h2 id="enabling-alter-system">Enabling <code>ALTER SYSTEM</code></h2>
+<p>CloudNativePG strongly advocates employing the Cluster manifest as the
+exclusive method for altering the configuration of a PostgreSQL cluster. This
+approach guarantees coherence across the entire high-availability cluster and
+aligns with best practices for Infrastructure-as-Code.</p>
+<p>In CloudNativePG the default configuration disables the use of <code>ALTER SYSTEM</code>
+on new Postgres clusters. This decision is rooted in the recognition of
+potential risks associated with this command. To enable the use of <code>ALTER SYSTEM</code>,
+you can explicitly set <code>.spec.postgresql.enableAlterSystem</code> to <code>true</code>.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Proceed with caution when utilizing <code>ALTER SYSTEM</code>. This command operates
+directly on the connected instance and does not undergo replication.
+CloudNativePG assumes responsibility for certain fixed parameters and complete
+control over others, emphasizing the need for careful consideration.</p>
+</div>
+<p>Starting from PostgreSQL 17, the <code>.spec.postgresql.enableAlterSystem</code> setting
+directly controls the <a href="https://www.postgresql.org/docs/17/runtime-config-compatible.html#GUC-ALLOW-ALTER-SYSTEM"><code>allow_alter_system</code> GUC in PostgreSQL</a>
+— a feature directly contributed by CloudNativePG to PostgreSQL.</p>
+<p>Prior to PostgreSQL 17, when <code>.spec.postgresql.enableAlterSystem</code> is set to
+<code>false</code>, the <code>postgresql.auto.conf</code> file is made read-only. Consequently, any
+attempt to execute the <code>ALTER SYSTEM</code> command will result in an error. The
+error message might look like this:</p>
+<pre><code class="language-output">ERROR:  could not open file &quot;postgresql.auto.conf&quot;: Permission denied
+</code></pre>
+<h2 id="dynamic-shared-memory-settings">Dynamic Shared Memory settings</h2>
+<p>PostgreSQL supports a few implementations for dynamic shared memory
+management through the
+<a href="https://www.postgresql.org/docs/current/runtime-config-resource.html#GUC-DYNAMIC-SHARED-MEMORY-TYPE"><code>dynamic_shared_memory_type</code></a>
+configuration option. In CloudNativePG we recommend to limit ourselves to
+any of the following two values:</p>
+<ul>
+<li><code>posix</code>: which relies on POSIX shared memory allocated using <code>shm_open</code> (default setting)</li>
+<li><code>sysv</code>: which is based on System V shared memory allocated via <code>shmget</code></li>
+</ul>
+<p>In PostgreSQL, this setting is particularly important for memory allocation in parallel queries.
+For details, please refer to this
+<a href="https://www.postgresql.org/message-id/CA%2BhUKGJOj7qzDLxeFPVvto8YEWop6FSQoTYPO9Z6Ee%3Di-nPS_Q%40mail.gmail.com">thread from the <code>pgsql-general</code> mailing list</a>.</p>
+<h3 id="posix-shared-memory">POSIX shared memory</h3>
+<p>The default setting of <code>posix</code> should be enough in most cases, considering that
+the operator automatically mounts a <em>memory-bound <code>EmptyDir</code> volume</em> called <code>shm</code>
+under <code>/dev/shm</code>. You can verify the size of such volume inside the running
+Postgres container with:</p>
+<pre><code class="language-sh">mount | grep shm
+</code></pre>
+<p>You should get something similar to the following output:</p>
+<pre><code class="language-console">shm on /dev/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=******)
+</code></pre>
+<p>If you would like to set a maximum size for the <code>shm</code> volume, you can do so by
+setting the <code>.spec.ephemeralVolumesSizeLimit.shm</code> field in the <code>Cluster</code> resource.
+For example:</p>
+<pre><code class="language-yaml">spec:
+  ephemeralVolumesSizeLimit:
+    shm: 1Gi
+</code></pre>
+<h3 id="system-v-shared-memory">System V shared memory</h3>
+<p>In case your Kubernetes cluster has a high enough value for the <code>SHMMAX</code>
+and <code>SHMALL</code> parameters, you can also set:</p>
+<pre><code class="language-yaml">dynamic_shared_memory_type: &quot;sysv&quot;
+</code></pre>
+<p>You can check the <code>SHMMAX</code>/<code>SHMALL</code> from inside a PostgreSQL container, by running:</p>
+<pre><code class="language-sh">ipcs -lm
+</code></pre>
+<p>For example:</p>
+<pre><code class="language-console">------ Shared Memory Limits --------
+max number of segments = 4096
+max seg size (kbytes) = 18014398509465599
+max total shared memory (kbytes) = 18014398509481980
+min seg size (bytes) = 1
+</code></pre>
+<p>As you can see, the very high number of <code>max total shared memory</code> recommends
+setting <code>dynamic_shared_memory_type</code> to <code>sysv</code>.</p>
+<p>An alternate method is to run:</p>
+<pre><code class="language-sh">cat /proc/sys/kernel/shmall
+cat /proc/sys/kernel/shmmax
+</code></pre>
+<h2 id="fixed-parameters">Fixed parameters</h2>
+<p>Some PostgreSQL configuration parameters should be managed exclusively by the
+operator. The operator prevents the user from setting them using a webhook.</p>
+<p>Users are not allowed to set the following configuration parameters in the
+<code>postgresql</code> section:</p>
+<ul>
+<li><code>allow_alter_system</code></li>
+<li><code>allow_system_table_mods</code></li>
+<li><code>archive_cleanup_command</code></li>
+<li><code>archive_command</code></li>
+<li><code>archive_mode</code></li>
+<li><code>bonjour</code></li>
+<li><code>bonjour_name</code></li>
+<li><code>cluster_name</code></li>
+<li><code>config_file</code></li>
+<li><code>data_directory</code></li>
+<li><code>data_sync_retry</code></li>
+<li><code>event_source</code></li>
+<li><code>external_pid_file</code></li>
+<li><code>hba_file</code></li>
+<li><code>hot_standby</code></li>
+<li><code>ident_file</code></li>
+<li><code>jit_provider</code></li>
+<li><code>listen_addresses</code></li>
+<li><code>log_destination</code></li>
+<li><code>log_directory</code></li>
+<li><code>log_file_mode</code></li>
+<li><code>log_filename</code></li>
+<li><code>log_rotation_age</code></li>
+<li><code>log_rotation_size</code></li>
+<li><code>log_truncate_on_rotation</code></li>
+<li><code>logging_collector</code></li>
+<li><code>port</code></li>
+<li><code>primary_conninfo</code></li>
+<li><code>primary_slot_name</code></li>
+<li><code>promote_trigger_file</code></li>
+<li><code>recovery_end_command</code></li>
+<li><code>recovery_min_apply_delay</code></li>
+<li><code>recovery_target</code></li>
+<li><code>recovery_target_action</code></li>
+<li><code>recovery_target_inclusive</code></li>
+<li><code>recovery_target_lsn</code></li>
+<li><code>recovery_target_name</code></li>
+<li><code>recovery_target_time</code></li>
+<li><code>recovery_target_timeline</code></li>
+<li><code>recovery_target_xid</code></li>
+<li><code>restart_after_crash</code></li>
+<li><code>restore_command</code></li>
+<li><code>shared_preload_libraries</code></li>
+<li><code>ssl</code></li>
+<li><code>ssl_ca_file</code></li>
+<li><code>ssl_cert_file</code></li>
+<li><code>ssl_crl_file</code></li>
+<li><code>ssl_dh_params_file</code></li>
+<li><code>ssl_ecdh_curve</code></li>
+<li><code>ssl_key_file</code></li>
+<li><code>ssl_passphrase_command</code></li>
+<li><code>ssl_passphrase_command_supports_reload</code></li>
+<li><code>ssl_prefer_server_ciphers</code></li>
+<li><code>stats_temp_directory</code></li>
+<li><code>synchronous_standby_names</code></li>
+<li><code>syslog_facility</code></li>
+<li><code>syslog_ident</code></li>
+<li><code>syslog_sequence_numbers</code></li>
+<li><code>syslog_split_messages</code></li>
+<li><code>unix_socket_directories</code></li>
+<li><code>unix_socket_group</code></li>
+<li><code>unix_socket_permissions</code></li>
+</ul>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../service_management/" class="btn btn-neutral float-left" title="Service Management"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../declarative_role_management/" class="btn btn-neutral float-right" title="PostgreSQL Role Management">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../service_management/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../declarative_role_management/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/preview_version/index.html b/assets/documentation/1.27.0-rc1/preview_version/index.html
new file mode 100644
index 000000000..a771b50f8
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/preview_version/index.html
@@ -0,0 +1,407 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Preview Versions - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Preview Versions";
+        var mkdocs_page_input_path = "preview_version.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Preview Versions</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#purpose-of-release-candidates">Purpose of Release Candidates</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#community-involvement">Community Involvement</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#usage-advisory">Usage Advisory</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#current-preview-version">Current Preview Version</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Preview Versions</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="preview-versions">Preview Versions</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG candidate releases are pre-release versions made available for
+testing before the community issues a new generally available (GA) release.
+These versions are feature-frozen, meaning no new features are added, and are
+intended for public testing prior to the final release.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>CloudNativePG release candidates are not intended for use in production
+systems.</p>
+</div>
+<h2 id="purpose-of-release-candidates">Purpose of Release Candidates</h2>
+<p>Release candidates are provided to the community for extensive testing before
+the official release. While a release candidate aims to be identical to the
+initial release of a new minor version of CloudNativePG, additional changes may
+be implemented before the GA release.</p>
+<h2 id="community-involvement">Community Involvement</h2>
+<p>The stability of each CloudNativePG minor release significantly depends on the
+community's efforts to test the upcoming version with their workloads and
+tools. Identifying bugs and regressions through user testing is crucial in
+determining when we can finalize the release.</p>
+<h2 id="usage-advisory">Usage Advisory</h2>
+<p>The CloudNativePG Community strongly advises against using preview versions of
+CloudNativePG in production environments or active development projects. Although
+CloudNativePG undergoes extensive automated and manual testing, beta releases
+may contain serious bugs. Features in preview versions may change in ways that
+are not backwards compatible and could be removed entirely.</p>
+<h2 id="current-preview-version">Current Preview Version</h2>
+<!--
+There are currently no preview versions available.
+-->
+
+<p>The current preview version is <strong>1.27.0-rc1</strong>.</p>
+<p>For more information on the current preview version and how to test, please view the links below:</p>
+<ul>
+<li><a href="https://cloudnative-pg.io/releases/cloudnative-pg-1-27.0-rc1-released/">Announcement</a></li>
+<li><a href="https://cloudnative-pg.io/documentation/preview/">Documentation</a></li>
+</ul>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../supported_releases/" class="btn btn-neutral float-left" title="Supported releases"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../release_notes/" class="btn btn-neutral float-right" title="Release notes">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../supported_releases/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../release_notes/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/quickstart/index.html b/assets/documentation/1.27.0-rc1/quickstart/index.html
new file mode 100644
index 000000000..f2ead3355
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/quickstart/index.html
@@ -0,0 +1,635 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Quickstart - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Quickstart";
+        var mkdocs_page_input_path = "quickstart.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Quickstart</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#part-1-setup-the-local-kubernetes-playground">Part 1: Setup the local Kubernetes playground</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#minikube">Minikube</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#kind">Kind</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#part-2-install-cloudnativepg">Part 2: Install CloudNativePG</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#part-3-deploy-a-postgresql-cluster">Part 3: Deploy a PostgreSQL cluster</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#part-4-monitor-clusters-with-prometheus-and-grafana">Part 4: Monitor clusters with Prometheus and Grafana</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#installation">Installation</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#viewing-with-prometheus">Viewing with Prometheus</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#grafana-dashboard">Grafana Dashboard</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Quickstart</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="quickstart">Quickstart</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>This section guides you through testing a PostgreSQL cluster on your local machine by
+deploying CloudNativePG on a local Kubernetes cluster
+using either <a href="https://kind.sigs.k8s.io/">Kind</a> or
+<a href="https://kubernetes.io/docs/setup/learning-environment/minikube/">Minikube</a>.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>The instructions contained in this section are for demonstration,
+testing, and practice purposes only and must not be used in production.</p>
+</div>
+<p>Like any other Kubernetes application, CloudNativePG is deployed using
+regular manifests written in YAML.</p>
+<p>By following the instructions on this page you should be able to start a PostgreSQL
+cluster on your local Kubernetes installation and experiment with it.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Make sure that you have <code>kubectl</code> installed on your machine in order
+to connect to the Kubernetes cluster. Please follow the Kubernetes documentation
+on <a href="https://kubernetes.io/docs/tasks/tools/install-kubectl/">how to install <code>kubectl</code></a>.</p>
+</div>
+<h2 id="part-1-setup-the-local-kubernetes-playground">Part 1: Setup the local Kubernetes playground</h2>
+<p>The first part is about installing Minikube or Kind. Please spend some time
+reading about the systems and decide which one to proceed with.
+After setting up one of them, please proceed with part 2.</p>
+<p>We also provide instructions for setting up monitoring with Prometheus and
+Grafana for local testing/evaluation, in <a href="#part-4-monitor-clusters-with-prometheus-and-grafana">part 4</a></p>
+<h3 id="minikube">Minikube</h3>
+<p>Minikube is a tool that makes it easy to run Kubernetes locally. Minikube runs a
+single-node Kubernetes cluster inside a Virtual Machine (VM) on your laptop for
+users looking to try out Kubernetes or develop with it day-to-day. Normally, it
+is used in conjunction with VirtualBox.</p>
+<p>You can find more information in the official <a href="https://kubernetes.io/docs/tasks/tools/install-minikube">Kubernetes documentation on how to
+install Minikube</a> in your local personal environment.
+When you installed it, run the following command to create a minikube cluster:</p>
+<pre><code class="language-sh">minikube start
+</code></pre>
+<p>This will create the Kubernetes cluster, and you will be ready to use it.
+Verify that it works with the following command:</p>
+<pre><code class="language-sh">kubectl get nodes
+</code></pre>
+<p>You will see one node called <code>minikube</code>.</p>
+<h3 id="kind">Kind</h3>
+<p>If you do not want to use a virtual machine hypervisor, then Kind is a tool for running
+local Kubernetes clusters using Docker container "nodes" (Kind stands for "Kubernetes IN Docker" indeed).</p>
+<p>Install <code>kind</code> on your environment following the instructions in the <a href="https://kind.sigs.k8s.io/docs/user/quick-start">Quickstart</a>,
+then create a Kubernetes cluster with:</p>
+<pre><code class="language-sh">kind create cluster --name pg
+</code></pre>
+<h2 id="part-2-install-cloudnativepg">Part 2: Install CloudNativePG</h2>
+<p>Now that you have a Kubernetes installation up and running
+on your laptop, you can proceed with CloudNativePG installation.</p>
+<p>Please refer to the <a href="../installation_upgrade/">"Installation"</a> section and then proceed
+with the deployment of a PostgreSQL cluster.</p>
+<h2 id="part-3-deploy-a-postgresql-cluster">Part 3: Deploy a PostgreSQL cluster</h2>
+<p>As with any other deployment in Kubernetes, to deploy a PostgreSQL cluster
+you need to apply a configuration file that defines your desired <code>Cluster</code>.</p>
+<p>The <a href="../samples/cluster-example.yaml"><code>cluster-example.yaml</code></a> sample file
+defines a simple <code>Cluster</code> using the default storage class to allocate
+disk space:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+
+  storage:
+    size: 1Gi
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">There's more</p>
+<p>For more detailed information about the available options, please refer
+to the <a href="../cloudnative-pg.v1/">"API Reference" section</a>.</p>
+</div>
+<p>In order to create the 3-node PostgreSQL cluster, you need to run the following command:</p>
+<pre><code class="language-sh">kubectl apply -f cluster-example.yaml
+</code></pre>
+<p>You can check that the pods are being created with the <code>get pods</code> command:</p>
+<pre><code class="language-sh">kubectl get pods
+</code></pre>
+<p>That will look for pods in the default namespace. To separate your cluster
+from other workloads on your Kubernetes installation, you could always create
+a new namespace to deploy clusters on.
+Alternatively, you can use labels. The operator will apply the <code>cnpg.io/cluster</code>
+label on all objects relevant to a particular cluster. For example:</p>
+<pre><code class="language-sh">kubectl get pods -l cnpg.io/cluster=&lt;CLUSTER&gt;
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Note that we are using <code>cnpg.io/cluster</code> as the label. In the past you may
+have seen or used <code>postgresql</code>. This label is being deprecated, and
+will be dropped in the future. Please use <code>cnpg.io/cluster</code>.</p>
+</div>
+<p>By default, the operator will install the latest available minor version
+of the latest major version of PostgreSQL when the operator was released.
+You can override this by setting the <code>imageName</code> key in the <code>spec</code> section of
+the <code>Cluster</code> definition. For example, to install PostgreSQL 13.6:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+   # [...]
+spec:
+   # [...]
+   imageName: ghcr.io/cloudnative-pg/postgresql:13.6
+   #[...]
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The immutable infrastructure paradigm requires that you always
+point to a specific version of the container image.
+Never use tags like <code>latest</code> or <code>13</code> in a production environment
+as it might lead to unpredictable scenarios in terms of update
+policies and version consistency in the cluster.
+For strict deterministic and repeatable deployments, you can add the digests
+to the image name, through the <code>&lt;image&gt;:&lt;tag&gt;@sha256:&lt;digestValue&gt;</code> format.</p>
+</div>
+<div class="admonition note">
+<p class="admonition-title">There's more</p>
+<p>There are some examples cluster configurations bundled with the operator.
+Please refer to the <a href="../samples/">"Examples" section</a>.</p>
+</div>
+<h2 id="part-4-monitor-clusters-with-prometheus-and-grafana">Part 4: Monitor clusters with Prometheus and Grafana</h2>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Installing Prometheus and Grafana is beyond the scope of this project.
+The instructions in this section are provided for experimentation and
+illustration only.</p>
+</div>
+<p>In this section we show how to deploy Prometheus and Grafana for observability,
+and how to create a Grafana Dashboard to monitor CloudNativePG clusters, and a
+set of Prometheus Rules defining alert conditions.</p>
+<p>We leverage the <a href="https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack">Kube-Prometheus stack</a>
+Helm chart, which is maintained by the <a href="https://github.com/prometheus-community">Prometheus Community</a>.
+Please refer to the project website for additional documentation and background.</p>
+<p>The Kube-Prometheus-stack Helm chart installs the <a href="https://prometheus-operator.dev">Prometheus Operator</a>,
+including the <a href="https://prometheus.io/docs/alerting/latest/alertmanager/">Alert Manager</a>,
+and a <a href="https://grafana.com">Grafana</a> deployment.</p>
+<p>We include a configuration file for the deployment of this Helm chart that will
+provide useful initial settings for observability of CloudNativePG clusters.</p>
+<h3 id="installation">Installation</h3>
+<p>If you don't have <a href="https://helm.sh">Helm</a> installed yet, please follow the
+<a href="https://helm.sh/docs/intro/quickstart/">instructions</a> to install it in your
+system.</p>
+<p>We need to add the <code>prometheus-community</code> helm chart repository, and then
+install the <em>Kube Prometheus stack</em> with our sample configuration
+<a href="../samples/monitoring/kube-stack-config.yaml"><code>kube-stack-config.yaml</code></a>.</p>
+<p>We can accomplish this with the following commands:</p>
+<pre><code class="language-sh">helm repo add prometheus-community \
+  https://prometheus-community.github.io/helm-charts
+
+helm upgrade --install \
+  -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/kube-stack-config.yaml \
+  prometheus-community \
+  prometheus-community/kube-prometheus-stack
+</code></pre>
+<p>After completion, you will have Prometheus, Grafana, and Alert Manager,
+configured with the <code>kube-stack-config.yaml</code> file:</p>
+<ul>
+<li>From the Prometheus installation, you will have the Prometheus Operator
+  watching for <strong>any</strong> <code>PodMonitor</code> (see <a href="../monitoring/"><em>monitoring</em></a>).</li>
+<li>Alert Manager and Grafana are both enabled.</li>
+</ul>
+<div class="admonition seealso">
+<p class="admonition-title">Seealso</p>
+<p>For further information about the above helm commands, refer to the <a href="https://helm.sh/docs/helm/helm_install/">helm
+install</a>
+documentation.</p>
+</div>
+<p>You can see several Custom Resources have been created:</p>
+<pre><code class="language-sh">% kubectl get crds
+NAME                                        CREATED AT
+…
+alertmanagers.monitoring.coreos.com         &lt;timestamp&gt;
+…
+prometheuses.monitoring.coreos.com          &lt;timestamp&gt;
+prometheusrules.monitoring.coreos.com       &lt;timestamp&gt;
+…
+</code></pre>
+<p>as well as a series of Services:</p>
+<pre><code class="language-sh">% kubectl get svc     
+NAME                                      TYPE        PORT(S)
+…                                         …           …
+prometheus-community-grafana              ClusterIP   80/TCP
+prometheus-community-kube-alertmanager    ClusterIP   9093/TCP
+prometheus-community-kube-operator        ClusterIP   443/TCP
+prometheus-community-kube-prometheus      ClusterIP   9090/TCP
+</code></pre>
+<h3 id="viewing-with-prometheus">Viewing with Prometheus</h3>
+<p>At this point, a CloudNativePG cluster deployed with monitoring activated
+would be observable via Prometheus.</p>
+<p>For example, you could deploy a simple cluster with <code>PodMonitor</code> enabled:</p>
+<pre><code class="language-sh">kubectl apply -f - &lt;&lt;EOF
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-with-metrics
+spec:
+  instances: 3
+
+  storage:
+    size: 1Gi
+
+  monitoring:
+    enablePodMonitor: true
+EOF
+</code></pre>
+<p>To access Prometheus, port-forward the Prometheus service:</p>
+<pre><code class="language-sh">kubectl port-forward svc/prometheus-community-kube-prometheus 9090
+</code></pre>
+<p>Then access the Prometheus console locally at: <a href="http://localhost:9090/"><code>http://localhost:9090/</code></a></p>
+<p>You should find a series of metrics relating to CloudNativePG clusters.
+Please refer to the <a href="../monitoring/">monitoring section</a> for more information.</p>
+<p><img alt="local prometheus" src="../images/prometheus-local.png" /></p>
+<p>You can also monitor the CloudNativePG operator by creating a PodMonitor to
+target it. See the relevant section in the <a href="../monitoring/#monitoring-the-operator-with-prometheus">monitoring page</a>.</p>
+<p>You can define some alerts by creating a <code>prometheusRule</code>:</p>
+<pre><code class="language-sh">kubectl apply -f \
+  https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/prometheusrule.yaml
+</code></pre>
+<p>You should see the default alerts now:</p>
+<pre><code class="language-sh">% kubectl get prometheusrules                      
+NAME                                                       AGE
+cnpg-default-alerts                                        3m27s
+</code></pre>
+<p>In the Prometheus console, you can click on the <em>Alerts</em> menu to see the alerts
+we just installed.</p>
+<h3 id="grafana-dashboard">Grafana Dashboard</h3>
+<p>In our installation so far, Grafana is deployed with no predefined dashboards.</p>
+<p>To open Grafana, you can port-forward the grafana service:</p>
+<pre><code class="language-sh">kubectl port-forward svc/prometheus-community-grafana 3000:80
+</code></pre>
+<p>and access Grafana locally at <a href="http://localhost:3000/"><code>http://localhost:3000/</code></a>
+providing the credentials <code>admin</code> as username, <code>prom-operator</code> as password
+(defined in <code>kube-stack-config.yaml</code>).</p>
+<p>CloudNativePG provides a default dashboard for Grafana in the dedicated
+<a href="https://github.com/cloudnative-pg/grafana-dashboards"><code>grafana-dashboards</code> repository</a>.
+You can download the file
+<a href="https://github.com/cloudnative-pg/grafana-dashboards/blob/main/charts/cluster/grafana-dashboard.json">grafana-dashboard.json</a>
+and manually import it via the GUI (menu: Dashboards &gt; New &gt; Import).
+You can now click on the <code>CloudNativePG</code> dashboard just created:</p>
+<p><img alt="local grafana" src="../images/grafana-local.png" /></p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Some graphs in the previous dashboard make use of metrics that are in alpha stage by the time
+this was created, like <code>kubelet_volume_stats_available_bytes</code> and <code>kubelet_volume_stats_capacity_bytes</code>
+producing some graphs to show <code>No data</code>.</p>
+</div>
+<p>Note that in our local setup, Prometheus and Grafana are configured to
+automatically discover and monitor any CloudNativePG clusters deployed with the
+Monitoring feature enabled.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../installation_upgrade/" class="btn btn-neutral float-left" title="Installation and upgrades"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../image_catalog/" class="btn btn-neutral float-right" title="Image Catalog">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../installation_upgrade/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../image_catalog/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/recovery/index.html b/assets/documentation/1.27.0-rc1/recovery/index.html
new file mode 100644
index 000000000..c414a2526
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/recovery/index.html
@@ -0,0 +1,933 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Recovery - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Recovery";
+        var mkdocs_page_input_path = "recovery.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Recovery</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#recovery-from-an-object-store-with-the-barman-cloud-plugin">Recovery from an Object Store with the Barman Cloud Plugin</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#recovery-from-volumesnapshot-objects">Recovery from VolumeSnapshot Objects</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#recovery-from-a-backup-object">Recovery from a Backup object</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#additional-considerations">Additional Considerations</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#point-in-time-recovery-pitr">Point in time recovery (PITR)</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#pitr-from-an-object-store">PITR from an object store</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#point-in-time-recovery-pitr-from-volumesnapshot-objects">Point-in-Time Recovery (PITR) from VolumeSnapshot Objects</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#recovery-targets">Recovery targets</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#configure-the-application-database">Configure the application database</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#how-recovery-works-under-the-hood">How recovery works under the hood</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#restoring-into-a-cluster-with-a-backup-section">Restoring into a Cluster with a Backup Section</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Recovery</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="recovery">Recovery</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>In PostgreSQL, <strong>recovery</strong> refers to the process of starting an instance from
+an existing physical backup. PostgreSQL's recovery system is robust and
+feature-rich, supporting <strong>Point-In-Time Recovery (PITR)</strong>—the ability to
+restore a cluster to any specific moment, from the earliest available backup to
+the latest archived WAL file.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>A valid WAL archive is required to perform PITR.</p>
+</div>
+<p>In CloudNativePG, recovery is <strong>not performed in-place</strong> on an existing
+cluster. Instead, it is used to <strong>bootstrap a new cluster</strong> from a physical
+backup.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>For more details on configuring the <code>bootstrap</code> stanza, refer to
+<a href="../bootstrap/">Bootstrap</a>.</p>
+</div>
+<p>The <code>recovery</code> bootstrap mode allows you to initialize a cluster from a
+physical base backup and replay the associated WAL files to bring the system to
+a consistent and optionally point-in-time state.</p>
+<p>CloudNativePG supports recovery via:</p>
+<ul>
+<li>A <strong>pluggable backup and recovery interface (CNPG-I)</strong>, enabling integration
+  with external tools such as the <a href="https://cloudnative-pg.io/plugin-barman-cloud/">Barman Cloud Plugin</a>.</li>
+<li><strong>Native recovery from volume snapshots</strong>, where supported by the underlying
+  Kubernetes storage infrastructure.</li>
+<li><strong>Native recovery from object stores via Barman Cloud</strong>, which is
+  <strong>deprecated</strong> as of version 1.26 in favor of the plugin-based approach.</li>
+</ul>
+<p>With the deprecation of native Barman Cloud support in version 1.26, this
+section now focuses on two supported recovery methods: using the <strong>Barman Cloud
+Plugin</strong> for recovery from object stores, and the <strong>native interface</strong> for
+recovery from volume snapshots.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>For legacy documentation, see
+<a href="../appendixes/backup_barmanobjectstore/#recovery-from-an-object-store">Appendix B – Recovery from an Object Store</a>.</p>
+</div>
+<h2 id="recovery-from-an-object-store-with-the-barman-cloud-plugin">Recovery from an Object Store with the Barman Cloud Plugin</h2>
+<p>This section outlines how to recover a PostgreSQL cluster from an object store
+using the recommended Barman Cloud Plugin.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The object store must contain backup data produced by a CloudNativePG
+<code>Cluster</code>—either using the <strong>deprecated native Barman Cloud integration</strong> or
+the <strong>Barman Cloud Plugin</strong>.</p>
+</div>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For full details, refer to the
+<a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/concepts/#recovery-of-a-postgres-cluster">“Recovery of a Postgres Cluster” section in the Barman Cloud Plugin documentation</a>.</p>
+</div>
+<p>Begin by defining the object store that holds both your base backups and WAL
+files. The Barman Cloud Plugin uses a custom <code>ObjectStore</code> resource for this
+purpose. The following example shows how to configure one for Azure Blob
+Storage:</p>
+<pre><code class="language-yaml">apiVersion: barmancloud.cnpg.io/v1
+kind: ObjectStore
+metadata:
+  name: cluster-example-backup
+spec:
+  configuration:
+    destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/
+    azureCredentials:
+      storageAccount:
+        name: recovery-object-store-secret
+        key: storage_account_name
+      storageKey:
+        name: recovery-object-store-secret
+        key: storage_account_key
+    wal:
+      maxParallel: 8
+</code></pre>
+<p>Next, configure the <code>Cluster</code> resource to use the <code>ObjectStore</code> you defined. In
+the <code>bootstrap</code> section, specify the recovery source, and define an
+<code>externalCluster</code> entry that references the plugin:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore
+spec:
+  [...]
+
+  superuserSecret:
+    name: superuser-secret
+
+  bootstrap:
+    recovery:
+      source: origin
+
+  externalClusters:
+    - name: origin
+      plugin:
+        name: barman-cloud.cloudnative-pg.io
+        parameters:
+          barmanObjectName: cluster-example-backup
+          serverName: cluster-example
+</code></pre>
+<h2 id="recovery-from-volumesnapshot-objects">Recovery from <code>VolumeSnapshot</code> Objects</h2>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>When creating replicas after recovering a primary instance from a
+<code>VolumeSnapshot</code>, the operator may fall back to using <code>pg_basebackup</code> to
+synchronize them. This process can be significantly slower—especially for large
+databases—because it involves a full base backup. This limitation will be
+addressed in the future with support for online backups and PVC cloning in
+the scale-up process.</p>
+</div>
+<p>CloudNativePG allows you to create a new cluster from a <code>VolumeSnapshot</code> of a
+<code>PersistentVolumeClaim</code> (PVC) that belongs to an existing <code>Cluster</code>.
+These snapshots are created using the declarative API for
+<a href="../appendixes/backup_volumesnapshot/">volume snapshot backups</a>.</p>
+<p>To complete the recovery process, the new cluster must also reference an
+external cluster that provides access to the WAL archive needed to reapply
+changes and finalize the recovery.</p>
+<p>The following example shows a cluster being recovered using both a
+<code>VolumeSnapshot</code> for the base backup and a WAL archive accessed through the
+Barman Cloud Plugin:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore
+spec:
+  [...]
+
+  bootstrap:
+    recovery:
+      source: origin
+      volumeSnapshots:
+        storage:
+          name: &lt;snapshot name&gt;
+          kind: VolumeSnapshot
+          apiGroup: snapshot.storage.k8s.io
+
+  externalClusters:
+    - name: origin
+      plugin:
+        name: barman-cloud.cloudnative-pg.io
+        parameters:
+          barmanObjectName: cluster-example-backup
+          serverName: cluster-example
+</code></pre>
+<p>In case the backed-up cluster was using a separate PVC to store the WAL files,
+the recovery must include that too:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore
+spec:
+  [...]
+
+  bootstrap:
+    recovery:
+      volumeSnapshots:
+        storage:
+          name: &lt;snapshot name&gt;
+          kind: VolumeSnapshot
+          apiGroup: snapshot.storage.k8s.io
+
+        walStorage:
+          name: &lt;snapshot name&gt;
+          kind: VolumeSnapshot
+          apiGroup: snapshot.storage.k8s.io
+</code></pre>
+<p>The previous example assumes that the application database and its owning user
+are named <code>app</code> by default. If the PostgreSQL cluster being restored uses
+different names, you must specify these names before exiting the recovery phase,
+as documented in <a href="#configure-the-application-database">"Configure the application database"</a>.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>If bootstrapping a replica-mode cluster from snapshots, to leverage
+snapshots for the standby instances and not just the primary,
+we recommend that you:</p>
+<ol>
+<li>Start with a single instance replica cluster. The primary instance will
+  be recovered using the snapshot, and available WALs from the source cluster.</li>
+<li>Take a snapshot of the primary in the replica cluster.</li>
+<li>Increase the number of instances in the replica cluster as desired.</li>
+</ol>
+</div>
+<h2 id="recovery-from-a-backup-object">Recovery from a <code>Backup</code> object</h2>
+<p>If a <code>Backup</code> resource is already available in the namespace in which you need
+to create the cluster, you can specify the name using
+<code>.spec.bootstrap.recovery.backup.name</code>, as in the following example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-initdb
+spec:
+  instances: 3
+
+  bootstrap:
+    recovery:
+      backup:
+        name: backup-example
+
+  storage:
+    size: 1Gi
+</code></pre>
+<p>This bootstrap method allows you to specify just a reference to the
+backup that needs to be restored.</p>
+<p>The previous example assumes that the application database and its owning user
+are named <code>app</code> by default. If the PostgreSQL cluster being restored uses
+different names, you must specify these names before exiting the recovery phase,
+as documented in <a href="#configure-the-application-database">"Configure the application database"</a>.</p>
+<h2 id="additional-considerations">Additional Considerations</h2>
+<p>Whether you recover from an object store, a volume snapshot, or an existing
+<code>Backup</code> resource, no changes to the database, including the catalog, are
+permitted until the <code>Cluster</code> is fully promoted to primary and accepts write
+operations. This restriction includes any role overrides, which are deferred
+until the <code>Cluster</code> transitions to primary.
+As a result, the following considerations apply:</p>
+<ul>
+<li>The application database name and user are copied from the backup being
+  restored. The operator does not currently back up the underlying secrets, as
+  this is part of the usual maintenance activity of the Kubernetes cluster.</li>
+<li>To preserve the original postgres user password, configure
+  <code>enableSuperuserAccess</code> and supply a <code>superuserSecret</code>.</li>
+</ul>
+<p>By default, recovery continues up to the latest available WAL on the default
+target timeline (<code>latest</code>). You can optionally specify a <code>recoveryTarget</code> to
+perform a point-in-time recovery (see <a href="#point-in-time-recovery-pitr">Point in Time Recovery (PITR)</a>).</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Consider using the <code>barmanObjectStore.wal.maxParallel</code> option to speed
+up WAL fetching from the archive by concurrently downloading the transaction
+logs from the recovery object store.</p>
+</div>
+<h2 id="point-in-time-recovery-pitr">Point in time recovery (PITR)</h2>
+<p>Instead of replaying all the WALs up to the latest one, after extracting a base
+backup, you can ask PostgreSQL to stop replaying WALs at any given point in
+time. PostgreSQL uses this technique to achieve PITR. The presence of a WAL
+archive is mandatory.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>PITR requires you to specify a recovery target by using the options
+described in <a href="#recovery-targets">Recovery targets</a>.</p>
+</div>
+<p>The operator generates the configuration parameters required for this
+feature to work if you specify a recovery target.</p>
+<h3 id="pitr-from-an-object-store">PITR from an object store</h3>
+<p>This example uses the same recovery object store in Azure defined earlier for
+the Barman Cloud plugin, containing both the base backups and the WAL archive.
+The recovery target is based on a requested timestamp.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore-pitr
+spec:
+  instances: 3
+
+  storage:
+    size: 5Gi
+
+  bootstrap:
+    recovery:
+      # Recovery object store containing WAL archive and base backups
+      source: origin
+      recoveryTarget:
+        # Time base target for the recovery
+        targetTime: &quot;2023-08-11 11:14:21.00000+02&quot;
+
+  externalClusters:
+    - name: origin
+      plugin:
+        name: barman-cloud.cloudnative-pg.io
+        parameters:
+          barmanObjectName: cluster-example-backup
+          serverName: cluster-example
+</code></pre>
+<p>In this example, you had to specify only the <code>targetTime</code> in the form of a
+timestamp. You didn't have to specify the base backup from which to start the
+recovery.</p>
+<p>The <code>backupID</code> option is the one that allows you to specify the base backup
+from which to initiate the recovery process. By default, this value is
+empty.</p>
+<p>If you assign a value to it (in the form of a Barman backup ID), the operator
+uses that backup as the base for the recovery.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>You need to make sure that such a backup exists and is accessible.</p>
+</div>
+<p>If you don't specify the backup ID, the operator detects the base backup for
+the recovery as follows:</p>
+<ul>
+<li>When you use <code>targetTime</code> or <code>targetLSN</code>, the operator selects the closest
+  backup that was completed before that target.</li>
+<li>Otherwise, the operator selects the last available backup, in chronological
+  order.</li>
+</ul>
+<h3 id="point-in-time-recovery-pitr-from-volumesnapshot-objects">Point-in-Time Recovery (PITR) from <code>VolumeSnapshot</code> Objects</h3>
+<p>The following example demonstrates how to perform a <strong>Point-in-Time Recovery (PITR)</strong> using:</p>
+<ul>
+<li>A Kubernetes <code>VolumeSnapshot</code> of the <code>PGDATA</code> directory, which provides the
+  base backup. This snapshot is specified in the <code>recovery.volumeSnapshots</code>
+  section and is named <code>test-snapshot-1</code>.</li>
+<li>A recovery object store (in this case, MinIO) containing the archived WAL
+  files. The object store is defined via a Barman Cloud Plugin <code>ObjectStore</code>
+  resource (not shown here), and referenced using the <code>recovery.source</code> field,
+  which points to an external cluster configuration.</li>
+</ul>
+<p>The cluster will be restored to a specific point in time using the
+<code>recoveryTarget.targetTime</code> option.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-snapshot
+spec:
+  # ...
+  bootstrap:
+    recovery:
+      source: origin
+      volumeSnapshots:
+        storage:
+          name: test-snapshot-1
+          kind: VolumeSnapshot
+          apiGroup: snapshot.storage.k8s.io
+      recoveryTarget:
+        targetTime: &quot;2023-07-06T08:00:39&quot;
+  externalClusters:
+    - name: origin
+      plugin:
+        name: barman-cloud.cloudnative-pg.io
+        parameters:
+          barmanObjectName: minio-backup
+          serverName: cluster-example
+</code></pre>
+<p>This setup enables CloudNativePG to restore the base data from a volume
+snapshot and apply WAL segments from the object store to reach the desired
+recovery target.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>If the backed-up cluster had <code>walStorage</code> enabled, you also must specify
+the volume snapshot containing the <code>PGWAL</code> directory, as mentioned in
+<a href="#recovery-from-volumesnapshot-objects">Recovery from VolumeSnapshot objects</a>.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>It's your responsibility to ensure that the end time of the base backup in
+the volume snapshot is before the recovery target timestamp.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>If you added or removed a <a href="../tablespaces/">tablespace</a> in your cluster
+since the last base backup, replaying the WAL will fail. You need a base
+backup between the time of the tablespace change and the recovery target
+timestamp.</p>
+</div>
+<h3 id="recovery-targets">Recovery targets</h3>
+<p>Here are the recovery target criteria you can use:</p>
+<dl>
+<dt>targetTime</dt>
+<dd>Time stamp up to which recovery proceeds, expressed in
+   <a href="https://datatracker.ietf.org/doc/html/rfc3339">RFC 3339</a> format.
+   (The precise stopping point is also influenced by the <code>exclusive</code> option.)</dd>
+</dl>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>PostgreSQL recovery will stop when it encounters the first transaction that
+occurs after the specified time. If no such transaction exists after the
+target time, the recovery process will fail.</p>
+</div>
+<dl>
+<dt>targetXID</dt>
+<dd>Transaction ID up to which recovery proceeds.
+   (The precise stopping point is also influenced by the <code>exclusive</code> option.)
+   Keep in mind that while transaction IDs are assigned sequentially at
+   transaction start, transactions can complete in a different numeric order.
+   The transactions that are recovered are those that committed before
+   (and optionally including) the specified one.</dd>
+<dt>targetName</dt>
+<dd>Named restore point (created with <code>pg_create_restore_point()</code>) to which
+   recovery proceeds.</dd>
+<dt>targetLSN</dt>
+<dd>LSN of the write-ahead log location up to which recovery proceeds.
+   (The precise stopping point is also influenced by the <code>exclusive</code> option.)</dd>
+<dt>targetImmediate</dt>
+<dd>Recovery ends as soon as a consistent state is reached, that is, as early
+   as possible. When restoring from an online backup, this means the point where
+   taking the backup ended.</dd>
+</dl>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The operator can retrieve the closest backup when you specify either
+<code>targetTime</code> or <code>targetLSN</code>. However, this isn't possible for the remaining
+targets: <code>targetName</code>, <code>targetXID</code>, and <code>targetImmediate</code>. In such cases, it's
+mandatory to specify <code>backupID</code>.</p>
+</div>
+<p>This example uses a <code>targetName</code>-based recovery target:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+  bootstrap:
+    recovery:
+      source: origin
+      recoveryTarget:
+        backupID: 20220616T142236
+        targetName: 'restore_point_1'
+[...]
+</code></pre>
+<p>You can choose only a single one among the targets in each <code>recoveryTarget</code>
+configuration.</p>
+<p>Additionally, you can specify <code>targetTLI</code> to force recovery to a specific
+timeline.</p>
+<p>By default, the previous parameters are considered to be inclusive, stopping
+just after the recovery target, matching
+<a href="https://www.postgresql.org/docs/current/runtime-config-wal.html#GUC-RECOVERY-TARGET-INCLUSIVE">the behavior in PostgreSQL</a>.</p>
+<p>You can request exclusive behavior, stopping right before the recovery target,
+by setting the <code>exclusive</code> parameter to <code>true</code>. The following example shows
+this behavior, relying on a blob container in Azure for both base backups and
+the WAL archive:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore-pitr
+spec:
+  instances: 3
+
+  storage:
+    size: 5Gi
+
+  bootstrap:
+    recovery:
+      source: origin
+      recoveryTarget:
+        backupID: 20220616T142236
+        targetName: &quot;maintenance-activity&quot;
+        exclusive: true
+
+  externalClusters:
+    - name: origin
+      plugin:
+        name: barman-cloud.cloudnative-pg.io
+        parameters:
+          barmanObjectName: cluster-example-backup
+          serverName: cluster-example
+</code></pre>
+<h2 id="configure-the-application-database">Configure the application database</h2>
+<p>For the recovered cluster, you can configure the application database name and
+credentials with additional configuration. To update application database
+credentials, you can generate your own passwords, store them as secrets, and
+update the database to use the secrets. Or you can also let the operator
+generate a secret with a randomly secure password for use.
+See <a href="../bootstrap/#bootstrap-an-empty-cluster-initdb">Bootstrap an empty cluster</a>
+for more information about secrets.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>While the <code>Cluster</code> is in recovery mode, no changes to the database,
+including the catalog, are permitted. This restriction includes any role
+overrides, which are deferred until the <code>Cluster</code> transitions to primary.
+During this phase, users remain as defined in the source cluster.</p>
+</div>
+<p>The following example configures the <code>app</code> database with the owner <code>app</code> and
+the password stored in the provided secret <code>app-secret</code>, following the
+bootstrap from a live cluster.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  bootstrap:
+    recovery:
+      database: app
+      owner: app
+      secret:
+        name: app-secret
+      [...]
+</code></pre>
+<p>With the above configuration, the following will happen only <strong>after recovery is
+completed</strong>:</p>
+<ol>
+<li>If the <code>app</code> database does not exist, it will be created.</li>
+<li>If the <code>app</code> user does not exist, it will be created.</li>
+<li>If the <code>app</code> user is not the owner of the <code>app</code> database, ownership will be
+   granted to the <code>app</code> user.</li>
+<li>If the <code>username</code> value matches the <code>owner</code> value in the secret, the
+   password for the application user (the <code>app</code> user in this case) will be
+   updated to the <code>password</code> value in the secret.</li>
+</ol>
+<h2 id="how-recovery-works-under-the-hood">How recovery works under the hood</h2>
+<!-- TODO: do we need this section? -->
+<!-- Also, "under the hood" is an idiom and should be replaced with something more precise -->
+
+<p>You can use the data uploaded to the object storage to <em>bootstrap</em> a new
+cluster from an existing backup. The operator orchestrates the recovery process
+using the <code>barman-cloud-restore</code> tool (for the base backup) and the
+<code>barman-cloud-wal-restore</code> tool (for WAL files, including parallel support, if
+requested).</p>
+<p>For details and instructions on the <code>recovery</code> bootstrap method, see
+<a href="../bootstrap/#bootstrap-from-a-backup-recovery">Bootstrap from a backup</a>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>If you're not familiar with how
+<a href="https://www.postgresql.org/docs/current/continuous-archiving.html#BACKUP-PITR-RECOVERY">PostgreSQL PITR</a>
+works, we suggest that you configure the recovery cluster as the original
+one when it comes to <code>.spec.postgresql.parameters</code>. Once the new cluster is
+restored, you can then change the settings as desired.</p>
+</div>
+<p>The way it works is that the operator injects an init container in the first
+instance of the new cluster, and the init container starts recovering the
+backup from the object storage.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The duration of the base backup copy in the new PVC depends on
+the size of the backup, as well as the speed of both the network and the
+storage.</p>
+</div>
+<p>When the base backup recovery process is complete, the operator starts the
+Postgres instance in recovery mode. In this phase, PostgreSQL is up, though not
+able to accept connections, and the pod is healthy according to the
+liveness probe. By way of the <code>restore_command</code>, PostgreSQL starts fetching WAL
+files from the archive. You can speed up this phase by setting the
+<code>maxParallel</code> option and enabling the parallel WAL restore capability.</p>
+<p>This phase terminates when PostgreSQL reaches the target, either the end of the
+WAL or the required target in case of PITR. You can optionally specify a
+<code>recoveryTarget</code> to perform a PITR. If left unspecified, the recovery continues
+up to the latest available WAL on the default target timeline (<code>latest</code>).</p>
+<p>Once the recovery is complete, the operator sets the required superuser
+password into the instance. The new primary instance starts as usual, and the
+remaining instances join the cluster as replicas.</p>
+<p>The process is transparent for the user and is managed by the instance manager
+running in the pods.</p>
+<h2 id="restoring-into-a-cluster-with-a-backup-section">Restoring into a Cluster with a Backup Section</h2>
+<p>When restoring a cluster, the manifest may include a <code>plugins</code> section with
+Barman Cloud plugin pointing to a <em>backup</em> object store resource. This enables
+the newly created cluster to begin archiving WAL files and taking backups
+immediately after recovery—provided backup policies are configured.</p>
+<p>Avoid reusing the same <code>ObjectStore</code> configuration for both <em>backup</em> and
+<em>recovery</em> in the same cluster. If you must, ensure that each cluster uses a
+unique <code>serverName</code> to prevent accidental overwrites of backup or WAL archive
+data.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>CloudNativePG includes a safety check to prevent a cluster from overwriting
+existing data in a shared storage bucket. If a conflict is detected, the
+cluster remains in the <code>Setting up primary</code> state, and the associated pods will
+fail with an error. The pod logs will display:
+<code>ERROR: WAL archive check failed for server recoveredCluster: Expected empty archive</code>.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>You can bypass this safety check by setting the
+<code>cnpg.io/skipEmptyWalArchiveCheck</code> annotation to <code>enabled</code> on the recovered
+cluster. However, this is strongly discouraged unless you are highly
+familiar with PostgreSQL's recovery process. Skipping the check incorrectly can
+lead to severe data loss. Use with caution and only in expert scenarios.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../wal_archiving/" class="btn btn-neutral float-left" title="WAL archiving"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../service_management/" class="btn btn-neutral float-right" title="Service Management">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../wal_archiving/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../service_management/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/release_notes/edb-cloud-native-postgresql/index.html b/assets/documentation/1.27.0-rc1/release_notes/edb-cloud-native-postgresql/index.html
new file mode 100644
index 000000000..9f230189f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/edb-cloud-native-postgresql/index.html
@@ -0,0 +1,1034 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../img/favicon.ico" />
+    <title>Release notes for 1.14.0 and earlier - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../css/theme.css" />
+    <link rel="stylesheet" href="../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for 1.14.0 and earlier";
+        var mkdocs_page_input_path = "release_notes/edb-cloud-native-postgresql.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for 1.14.0 and earlier</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-1140-and-earlier">Release notes for 1.14.0 and earlier</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>The first public release of CloudNativePG is version 1.15.0. Before that,
+the product was entirely owned by EDB and distributed under the name of
+<a href="https://www.enterprisedb.com/products/cloud-native-postgresql-kubernetes-ha-clusters-k8s-containers-scalable">"Cloud Native PostgreSQL"</a>.</p>
+<p>The list of changes in this page is only for informative purposes, to
+demonstrate the history of the product on top of commits.
+<strong>None of the versions listed here exists for CloudNativePG.</strong></p>
+<h2 id="version-1140">Version 1.14.0</h2>
+<p><strong>Release date:</strong> 25 March 2022</p>
+<p>Features:</p>
+<ul>
+<li>Natively support Google Cloud Storage for backup and recovery, by taking
+  advantage of the features introduced in Barman Cloud 2.19</li>
+<li>Improved observability of backups through the introduction of the
+  <code>LastBackupSucceeded</code> condition for the <code>Cluster</code> object</li>
+<li>Support update of Hot Standby sensitive parameters: <code>max_connections</code>,
+  <code>max_prepared_transactions</code>, <code>max_locks_per_transaction</code>, <code>max_wal_senders</code>,
+  <code>max_worker_processes</code></li>
+<li>Add the <code>Online upgrade in progress</code> phase in the <code>Cluster</code> object to show
+  when an online upgrade of the operator is in progress</li>
+<li>Ability to inherit an AWS IAM Role as an alternative way to provide
+  credentials for the S3 object storage</li>
+<li>Support for Opaque secrets for Pooler’s authQuerySecret and certificates</li>
+<li>Updated default PostgreSQL version to 14.2</li>
+<li>Add a new command to <code>kubectl cnp</code> plugin named <code>maintenance</code> to set
+  maintenance window to cluster(s) in one or all namespaces across the Kubernetes
+  cluster</li>
+</ul>
+<p>Container Images:</p>
+<ul>
+<li>Latest PostgreSQL containers include Barman Cloud 2.19</li>
+</ul>
+<p>Security Enhancements:</p>
+<ul>
+<li>Stronger RBAC enforcement for namespaced operator installations with Operator
+  Lifecycle Manager, including OpenShift. OpenShift users are recommended to
+  update to this version.</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Allow the instance manager to retry an interrupted <code>pg_rewind</code> by preserving a
+  copy of the original <code>pg_control</code> file</li>
+<li>Clean up stale PID files before running <code>pg_rewind</code></li>
+<li>Force sorting by key in <code>primary_conninfo</code> to avoid random restarts with
+  PostgreSQL versions prior to 13</li>
+<li>Preserve <code>ServiceAccount</code> changes (e.g., labels, annotations) upon
+  reconciliation</li>
+<li>Disable enforcement of the imagePullPolicy default value</li>
+<li>Improve initDB validation for WAL segment size</li>
+<li>Properly handle the <code>targetLSN</code> option when recovering a cluster with the LSN
+  specified</li>
+<li>Fix custom TLS certificates validation by allowing a certificates chain both
+  in the server and CA certificates</li>
+</ul>
+<h2 id="version-1130">Version 1.13.0</h2>
+<p><strong>Release date:</strong> 17 February 2022</p>
+<p>Features:</p>
+<ul>
+<li>Support for Snappy compression. Snappy is a fast compression option for backups that increase
+  the speed of uploads to the object store using a lower compression ratio</li>
+<li>Support for tagging files uploaded to the Barman object store. This feature requires
+  Barman 2.18 in the operand image.
+  of backups after Cluster deletion</li>
+<li>Extension of the status of a Cluster with <code>status.conditions</code>. The condition <code>ContinuousArchiving</code>
+  indicates that the Cluster has started to archive WAL files</li>
+<li>Improve the status command of the <code>cnp</code> plugin for <code>kubectl</code> with additional information:
+  add a <code>Cluster Summary</code> section showing the status of the Cluster and a <code>Certificates Status</code>
+  section including the status of the certificates used in the Cluster along
+  with the time left to expire</li>
+<li>Support the new <code>barman-cloud-check-wal-archive</code> command to detect a non-empty backup destination
+  when creating a new cluster</li>
+<li>Add support for using a <code>Secret</code> to add default monitoring queries through
+  <code>MONITORING_QUERIES_SECRET</code> configuration variable.</li>
+<li>Allow the user to restrict container’s permissions using AppArmor (on Kubernetes clusters deployed
+  with AppArmor support)</li>
+<li>Add Windows platform support to <code>cnp</code> plugin for <code>kubectl</code>, now the plugin is available
+  on Windows x86 and ARM</li>
+<li>Drop support for Kubernetes 1.18 and deprecated API versions</li>
+</ul>
+<p>Container Images:</p>
+<ul>
+<li>PostgreSQL containers include Barman 2.18</li>
+</ul>
+<p>Security Fix:</p>
+<ul>
+<li>Add coherence check of username field inside owner and superuser secrets;
+  previously, a malicious user could have used the secrets to change the password
+  of any PostgreSQL user</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Fix a memory leak in code fetching status from Postgres pods</li>
+<li>Disable PostgreSQL self-restart after a crash. The instance controller handles
+  the lifecycle of the PostgreSQL instance</li>
+<li>Prevent modification of <code>.spec.postgresUID</code> and <code>.spec.postgresGID</code> fields
+  in validation webhook. Changing these fields after Cluster creation makes PostgreSQL unable to start</li>
+<li>Reduce the log verbosity from the backup and WAL archiving handling code</li>
+<li>Correct a bug resulting in a Cluster being marked as <code>Healthy</code> when not initialized yet</li>
+<li>Allows standby servers in clusters with a very high WAL production rate to switch to streaming
+  once they are aligned</li>
+<li>Fix a race condition during the startup of a PostgreSQL pod that could seldom lead to a crash</li>
+<li>Fix a race condition that could lead to a failure initializing the first PVC in a Cluster</li>
+<li>Remove an extra restart of a just demoted primary Pod before joining the Cluster as a replica</li>
+<li>Correctly handle replication-sensitive PostgreSQL configuration parameters when recovering
+  from a backup</li>
+<li>Fix missing validation of PostgreSQL configurations during Cluster creation</li>
+</ul>
+<h2 id="version-1120">Version 1.12.0</h2>
+<p><strong>Release date:</strong> 11 January 2022</p>
+<p>Features:</p>
+<ul>
+<li>Add Kubernetes 1.23 to the list of supported Kubernetes distributions and remove end-to-end tests for 1.17,<br />
+  which ended support by the Kubernetes project in Dec 2020</li>
+<li>Improve the responsiveness of pod status checks in case of network issues
+  by adding a connection timeout of 2 seconds and a communication timeout
+  of 30 seconds. This change sets a limit on the time the operator waits for
+  a pod to report its status before declaring it as failed, enhancing
+  the robustness and predictability of a failover operation</li>
+<li>Introduce the <code>.spec.inheritedMetadata</code> field to the Cluster allowing the user
+  to specify labels and annotations that will apply to all objects generated
+  by the Cluster</li>
+<li>Reduce the number of queries executed when calculating the status
+  of an instance</li>
+<li>Add a readiness probe for PgBouncer</li>
+<li>Add support for custom Certification Authority of the endpoint of Barman’s
+  backup object store when using Azure protocol</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>During a failover, wait to select a new primary until all the WAL streaming
+  connections are closed. The operator now sets by default <code>wal_sender_timeout</code>
+  and <code>wal_receiver_timeout</code> to 5 seconds to make sure standby nodes will
+  quickly notice if the primary has network issues</li>
+<li>Change WAL archiving strategy in replica clusters to fix rolling updates
+  by setting "archive_mode" to "always" for any PostgreSQL instance in
+  a replica cluster. We then restrict the upload of the WAL only from
+  the current and target designated primary. A WAL may be uploaded twice
+  during switchovers, which is not an issue</li>
+<li>Fix support for custom Certification Authority of the endpoint of Barman’s
+  backup object store in replica clusters source</li>
+<li>Use a fixed name for default monitoring config map in the cluster namespace</li>
+<li>If the defaulting webhook is not working for any reason, the operator now
+  updates the Cluster with the defaults also during the reconciliation cycle</li>
+<li>Fix the comparison of resource requests and limits to fix a rare issue
+  leading to an update of all the pods on every reconciliation cycle</li>
+<li>Improve log messages from webhooks to also include the object namespace</li>
+<li>Stop logging a “default” message at the start of every reconciliation loop</li>
+<li>Stop logging a PodMonitor deletion on every reconciliation cycle
+  if <code>enablePodMonitor</code> is false</li>
+<li>Do not complain about possible architecture mismatch if a pod is not
+  reachable</li>
+</ul>
+<h2 id="version-1110">Version 1.11.0</h2>
+<p><strong>Release date:</strong> 15 December 2021</p>
+<p>Features:</p>
+<ul>
+<li><strong>Parallel WAL archiving and restore:</strong> allow the database to keep up with WAL
+  generation on high write systems by introducing the
+  <code>backupObjectStore.maxParallel</code> option to set the maximum number of parallel
+  jobs to be executed during both WAL archiving (by PostgreSQL’s
+  <code>archive_command</code>) and WAL restore (by <code>restore_command</code>). Using parallel
+  restore option can allow newly promoted Standbys to get to a ready state faster
+  by fetching needed WAL files to replay in parallel rather than sequentially</li>
+<li><strong>Default set of metrics for monitoring:</strong> a new <code>ConfigMap</code> called
+  <code>default-monitoring</code> is automatically deployed in the same namespace of the
+  operator and, by default, added to any existing Postgres cluster. Such behavior
+  can be changed globally by setting the <code>MONITORING_QUERIES_CONFIGMAP</code> parameter
+  in the operator’s configuration, or at cluster level through the
+  <code>.spec.monitoring.disableDefaultQueries</code> option (by default set to <code>false</code>)</li>
+<li>Introduce the <code>enablePodMonitor</code> option in the monitoring section of a
+  cluster to automatically manage a <code>PodMonitor</code> resource and seamlessly
+  integrate with Prometheus</li>
+<li>Improve the PostgreSQL shutdown procedure by trying to execute a smart
+  shutdown for the first half of the desired <code>stopDelay</code> time, and a fast
+  shutdown for the remaining half, before the pod is killed by Kubernetes</li>
+<li>Add the <code>switchoverDelay</code> option to control the time given to the former
+  primary to shut down gracefully and archive all the WAL files before
+  promoting the new primary (by default, CloudNativePG waits
+  indefinitely to privilege data durability)</li>
+<li>Handle changes to resource requests and limits for a PostgreSQL <code>Cluster</code> by
+  issuing a rolling update</li>
+<li>Improve the <code>status</code> command of the <code>cnp</code> plugin for <code>kubectl</code> with
+  additional information: streaming replication status, total size of the
+  database, role of an instance in the cluster</li>
+<li>Enhance support of workloads with many parallel workers by enabling
+  configuration of the <code>dynamic_shared_memory_type</code> and <code>shared_memory_type</code>
+  parameters for PostgreSQL’s management of shared memory</li>
+<li>Propagate labels and annotations defined at cluster level to the
+  associated resources, including pods (deletions are not supported)</li>
+<li>Automatically remove pods that have been evicted by the Kubelet</li>
+<li>Manage automated resizing of persistent volumes in Azure through the
+  <code>ENABLE_AZURE_PVC_UPDATES</code> operator configuration option, by issuing a
+  rolling update of the cluster if needed (disabled by default)</li>
+<li>Introduce the<code>cnpg.io/reconciliationLoop</code> annotation that, when
+  set to <code>disabled</code> on a given Postgres cluster, prevents the reconciliation
+  loop from running</li>
+<li>Introduce the <code>postInitApplicationSQL</code> option as part of the <code>initdb</code>
+  bootstrap method to specify a list of SQL queries to be executed on the main
+  application database as a superuser immediately after the cluster has been
+  created</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Liveness probe now correctly handles the startup process of a PostgreSQL
+  server. This fixes an issue reported by a few customers and affects a
+  restarted standby server that needs to recover WAL files to reach a consistent
+  state, but it was not able to do it before the timeout of liveness probe would
+  kick in, leaving the pods in <code>CrashLoopBackOff</code> status.</li>
+<li>Liveness probe now correctly handles the case of a former primary that needs
+  to use <code>pg_rewind</code> to re-align with the current primary after a timeline
+  diversion. This fixes the pod of the new standby from repeatedly being killed
+  by Kubernetes.</li>
+<li>Reduce client-side throttling from Postgres pods (e.g. <code>Waited for
+  1.182388649s due to client-side throttling, not priority and fairness,
+  request: GET</code>)</li>
+<li>Disable Public Key Infrastructure (PKI) initialization on OpenShift and OLM
+  installations, by using the provided one</li>
+<li>When changing configuration parameters that require a restart, always leave
+  the primary as last</li>
+<li>Mark a PVC to be ready only after a job has been completed successfully,
+  preventing a race condition in PVC initialization</li>
+<li>Use the correct public key when renewing the expired webhook TLS secret.</li>
+<li>Fix an overflow when parsing an LSN</li>
+<li>Remove stale PID files at startup</li>
+<li>Let the <code>Pooler</code> resource inherit the <code>imagePullSecret</code> defined in the
+  operator, if exists</li>
+</ul>
+<h2 id="version-1100">Version 1.10.0</h2>
+<p><strong>Release date:</strong> 11 November 2021</p>
+<p>Features:</p>
+<ul>
+<li><strong>Connection Pooling with PgBouncer</strong>: introduce the <code>Pooler</code> resource and
+  controller to automatically manage a PgBouncer deployment to be used as a
+  connection pooler for a local PostgreSQL <code>Cluster</code>. The feature includes TLS
+  client/server connections, password authentication, High Availability, pod
+  templates support, configuration of key PgBouncer parameters, <code>PAUSE</code>/<code>RESUME</code>,
+  logging in JSON format, Prometheus exporter for stats, pools, and lists</li>
+<li><strong>Backup Retention Policies</strong>: support definition of recovery window retention
+  policies for backups (e.g. ‘30d’ to ensure a recovery window of 30 days)</li>
+<li><strong>In-Place updates of the operator</strong>: introduce an in-place online update of the
+  instance manager, which removes the need to perform a rolling update of the
+  entire cluster following an update of the operator. By default this option is
+  disabled (please refer to the
+  <a href="../../installation_upgrade/#in-place-updates-of-the-instance-manager">documentation for more detailed information</a>)</li>
+<li>Limit the list of options that can be customized in the <code>initdb</code> bootstrap
+  method to <code>dataChecksums</code>, <code>encoding</code>,  <code>localeCollate</code>, <code>localeCType</code>,
+  <code>walSegmentSize</code>. This makes the <code>options</code> array obsolete and planned to be
+  removed in the v2 API</li>
+<li>Introduce the <code>postInitTemplateSQL</code> option as part of the <code>initdb</code> bootstrap
+  method to specify a list of SQL queries to be executed on the <code>template1</code>
+  database as a superuser immediately after the cluster has been created. This
+  feature allows you to include default objects in all application databases
+  created in the cluster</li>
+<li>New default metrics added to the instance Prometheus exporter: Postgres
+  version, cluster name, and first point of recoverability according to the
+  backup catalog</li>
+<li>Retry taking a backup after a failure</li>
+<li>Build awareness about Barman Cloud capabilities in order to prevent the
+  operator from invoking recently introduced features (such as retention
+  policies, or Azure Blob Container storage) that are not present in operand
+  images that are not frequently updated</li>
+<li>Integrate the output of the <code>status</code> command of the <code>cnp</code> plugin with information
+  about the backup</li>
+<li>Introduce a new annotation that reports the status of a PVC (being
+  initialized or ready)</li>
+<li>Set the cluster name in the <code>k8s.enterprisedb.io/cluster</code> label for every
+  object generated in a <code>Cluster</code>, including <code>Backup</code> objects</li>
+<li>Drop support for deprecated API version
+  <code>postgresql.cnpg.io/v1alpha1</code> on the <code>Cluster</code>, <code>Backup</code>, and
+  <code>ScheduledBackup</code> kinds</li>
+<li>Set default operand image to PostgreSQL 14.2</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Set allowPrivilegeEscalation to <code>false</code> for the operator containers
+  securityContext</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Disable primary PodDisruptionBudget during maintenance in single-instance
+  clusters</li>
+<li>Use the correct certificate certification authority (CA) during recovery
+  operations</li>
+<li>Prevent Postgres connection leaking when checking WAL archiving status before
+  taking a backup</li>
+<li>Let WAL archive/restore sleep for 100ms following transient errors that would
+  flood logs otherwise</li>
+</ul>
+<h2 id="version-192">Version 1.9.2</h2>
+<p><strong>Release date:</strong> 15 October 2021</p>
+<p>Features:</p>
+<ul>
+<li>Enhance JSON log with two new loggers: <code>wal-archive</code> for PostgreSQL's
+  <code>archive_command</code>, and <code>wal-restore</code> for <code>restore_command</code> in a standby</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Enable WAL archiving during the standby promotion (prevented <code>.history</code> files
+  from being archived)</li>
+<li>Pass the <code>--cloud-provider</code> option to Barman Cloud tools only when using
+  Barman 2.13 or higher to avoid errors with older operands</li>
+<li>Wait for the pod of the primary to be ready before triggering a backup</li>
+</ul>
+<h2 id="version-191">Version 1.9.1</h2>
+<p><strong>Release date:</strong> 30 September 2021</p>
+<p><em>This release is to celebrate the launch of
+<a href="https://www.postgresql.org/about/news/postgresql-14-released-2318/">PostgreSQL 14</a>
+by making it the default major version when a new <code>Cluster</code> is created without
+defining a specific image name.</em></p>
+<p>Fixes:</p>
+<ul>
+<li>Fix issue causing <code>Error while getting barman endpoint CA secret</code> message to
+  appear in the logs of the primary pod, which prevented the backup to work
+  correctly</li>
+<li>Properly retry requesting a new backup in case of temporary communication
+  issues with the instance manager</li>
+</ul>
+<h2 id="version-190">Version 1.9.0</h2>
+<p><strong>Release date:</strong> 28 September 2021</p>
+<p><em>Version 1.9.0 is not available on OpenShift due to delays with the
+release process and the subsequent release of version 1.9.1.</em></p>
+<p>Features:</p>
+<ul>
+<li>Add Kubernetes 1.22 to the list of supported Kubernetes distributions, and
+  remove 1.16</li>
+<li>Introduce support for the <code>--restore-target-wal</code> option in <code>pg_rewind</code>, in
+  order to fetch WAL files from the backup archive, if necessary (available
+  only with PostgreSQL 13+)</li>
+<li>Expose a default metric for the Prometheus exporter that estimates the number
+  of pages in the <code>pg_catalog.pg_largeobject</code> table in each database</li>
+<li>Enhance the performance of WAL archiving and fetching, through local in-memory
+  cache</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Explicitly set the <code>postgres</code> user when invoking <code>pg_isready</code> - required by
+  restricted SCC in OpenShift</li>
+<li>Properly update the <code>FirstRecoverabilityPoint</code> in the status</li>
+<li>Set <code>archive_mode = always</code> on the designated primary if backup is requested</li>
+<li>Minor bug fixes</li>
+</ul>
+<h2 id="version-180">Version 1.8.0</h2>
+<p><strong>Release date:</strong> 13 September 2021</p>
+<p>Features:</p>
+<ul>
+<li>Bootstrap a new cluster via full or Point-In-Time Recovery directly from an
+  object store defined in the external cluster section, eliminating the
+  previous requirement to have a Backup CR defined</li>
+<li>Introduce the <code>immediate</code> option in scheduled backups to request a backup
+  immediately after the first Postgres instance running, adding the capability
+  to rewind to the very beginning of a cluster when Point-In-Time Recovery is
+  configured</li>
+<li>Add the <code>firstRecoverabilityPoint</code> in the cluster status to report the oldest
+  consistent point in time to request a recovery based on the backup object
+  store’s content</li>
+<li>
+<p>Enhance the default Prometheus exporter for a PostgreSQL instance by exposing
+  the following new metrics:</p>
+<ol>
+<li>number of WAL files and computed total size on disk</li>
+<li>number of <code>.ready</code> and <code>.done</code> files in the archive status folder</li>
+<li>flag for replica mode</li>
+<li>number of requested minimum/maximum synchronous replicas, as well as
+   the expected and actually observed ones</li>
+</ol>
+</li>
+<li>
+<p>Add support for the <code>runonserver</code> option when defining custom metrics in the
+  Prometheus exporter to limit the collection of a metric to a range of
+  PostgreSQL versions</p>
+</li>
+<li>Natively support Azure Blob Storage for backup and recovery, by taking
+  advantage of the feature introduced in Barman 2.13 for Barman Cloud</li>
+<li>Rely on <code>pg_isready</code> for the liveness probe</li>
+<li>Support RFC3339 format for timestamp specification in recovery target times</li>
+<li>Introduce <code>.spec.imagePullPolicy</code> to control the pull policy of image
+  containers for all pods and jobs created for a cluster</li>
+<li>Add support for OpenShift 4.8, which replaces OpenShift 4.5</li>
+<li>Support PostgreSQL 14 (beta)</li>
+<li>Enhance the replica cluster feature with cross-cluster replication from an
+  object store defined in an external cluster section, without requiring a
+  streaming connection (experimental)</li>
+<li>Introduce <code>logLevel</code> option to the cluster's spec to specify one of the
+  following levels: error, info, debug or trace</li>
+</ul>
+<p>Security Enhancements:</p>
+<ul>
+<li>Introduce <code>.spec.enableSuperuserAccess</code> to enable/disable network access with the
+  <code>postgres</code> user through password authentication</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Properly inform users when a cluster enters an unrecoverable state and
+  requires human intervention</li>
+</ul>
+<h2 id="version-171">Version 1.7.1</h2>
+<p><strong>Release date:</strong> 11 August 2021</p>
+<p>Features:</p>
+<ul>
+<li>Prefer self-healing over configuration with regards to synchronous
+  replication, empowering the operator to temporarily override
+  <code>minSyncReplicas</code> and <code>maxSyncReplicas</code> settings in case the cluster is not
+  able to meet the requirements during self-healing operations</li>
+<li>Introduce the <code>postInitSQL</code> option as part of the <code>initdb</code> bootstrap method
+  to specify a list of SQL queries to be executed as a superuser immediately
+  after the cluster has been created</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Allow the operator to failover when the primary is not ready (bug introduced in 1.7.0)</li>
+<li>Execute administrative queries using the <code>LOCAL</code> synchronous commit level</li>
+<li>Correctly parse multi-line log entries in PGAudit</li>
+</ul>
+<h2 id="version-170">Version 1.7.0</h2>
+<p><strong>Release date:</strong> 28 July 2021</p>
+<p>Features:</p>
+<ul>
+<li>Add native support to PGAudit with a new type of <code>logger</code> called <code>pgaudit</code>
+  directly available in the JSON output</li>
+<li>
+<p>Enhance monitoring and observability capabilities through:</p>
+<ul>
+<li>Native support for the <code>pg_stat_statements</code> and <code>auto_explain</code> extensions</li>
+<li>The <code>target_databases</code> option in the Prometheus exporter to run a
+  user-defined metric query on one or more databases (including
+  auto-discovery of databases through shell-like pattern matching)</li>
+<li>Exposure of the <code>manual_switchover_required</code> metric to promptly report
+  whether a cluster with <code>primaryUpdateStrategy</code> set to <code>supervised</code>
+  requires a manual switchover</li>
+</ul>
+</li>
+<li>
+<p>Transparently handle <code>shared_preload_libraries</code> for <code>pg_audit</code>,
+  <code>auto_explain</code> and <code>pg_stat_statements</code></p>
+<ul>
+<li>Automatic configuration of <code>shared_preload_libraries</code> for PostgreSQL when
+  <code>pg_stat_statements</code>, <code>pgaudit</code> or <code>auto_explain</code> options are added to
+  the <code>postgresql</code> parameters section</li>
+</ul>
+</li>
+<li>
+<p>Support the <code>cnpg.io/reload</code> label to finely control the
+  automated reload of config maps and secrets, including those used for custom
+  monitoring/alerting metrics in the Prometheus exporter or to store certificates</p>
+</li>
+<li>Add the <code>reload</code> command to the <code>cnp</code> plugin for <code>kubectl</code> to trigger a
+  reconciliation loop on the instances</li>
+<li>Improve control of pod affinity and anti-affinity configurations through
+  <code>additionalPodAffinity</code> and <code>additionalPodAntiAffinity</code></li>
+<li>Introduce a separate <code>PodDisruptionBudget</code> for primary instances, by
+  requiring at least a primary instance to run at any time</li>
+</ul>
+<p>Security Enhancements:</p>
+<ul>
+<li>Add the <code>.spec.certificates.clientCASecret</code> and
+  <code>.spec.certificates.replicationTLSSecret</code> options to define custom client
+  Certification Authority and certificate for the PostgreSQL server, to be used
+  to authenticate client certificates and secure communication between PostgreSQL
+  nodes</li>
+<li>Add the <code>.spec.backup.barmanObjectStore.endpointCA</code> option to define the
+  custom Certification Authority bundle of the endpoint of Barman’s backup
+  object store</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Correctly parse histograms in the Prometheus exporter</li>
+<li>Reconcile services created by the operator for a cluster</li>
+</ul>
+<h2 id="version-160">Version 1.6.0</h2>
+<p><strong>Release date:</strong> 12 July 2021</p>
+<p>Features:</p>
+<ul>
+<li>Replica mode (<strong>EXPERIMENTAL</strong>): allow a cluster to be created as a replica
+  of a source cluster. A replica cluster has a <em>designated primary</em> and any
+  number of standbys.</li>
+<li>Add the <code>.spec.postgresql.promotionTimeout</code> parameter to specify the maximum amount of
+  seconds to wait when promoting an instance to primary, defaulting to 40000000 seconds.</li>
+<li>Add the <code>.spec.affinity.podAntiAffinityType</code> parameter. It can be set to
+  <code>preferred</code> (default), resulting in
+  <code>preferredDuringSchedulingIgnoredDuringExecution</code> being used, or to
+  <code>required</code>,   resulting in <code>requiredDuringSchedulingIgnoredDuringExecution</code>.</li>
+</ul>
+<p>Changes:</p>
+<ul>
+<li>Fixed a race condition when deleting a PVC and a pod which prevented the
+  operator from creating a new pod.</li>
+<li>Fixed a race condition preventing the manager from detecting the need for
+  a PostgreSQL restart on a configuration change.</li>
+<li>Fixed a panic in <code>kubectl-cnp</code> on clusters without annotations.</li>
+<li>Lowered the level of some log messages to <code>debug</code>.</li>
+<li>E2E tests for server CA and TLS injection.</li>
+</ul>
+<h2 id="version-151">Version 1.5.1</h2>
+<p><strong>Release date:</strong> 17 June 2021</p>
+<p>Change: </p>
+<ul>
+<li>Fix a bug with CRD validation preventing auto-update with Operator Deployments on Red Hat OpenShift</li>
+<li>Allow passing operator's configuration using a Secret.</li>
+</ul>
+<h2 id="version-150">Version 1.5.0</h2>
+<p><strong>Release date:</strong> 11 June 2021</p>
+<p>Features:</p>
+<ul>
+<li>Introduce the <code>pg_basebackup</code> bootstrap method to create a new PostgreSQL
+  cluster as a copy of an existing PostgreSQL instance of the same major
+  version, even outside Kubernetes</li>
+<li>Add support for Kubernetes’ tolerations in the <code>Affinity</code> section of the
+  <code>Cluster</code> resource, allowing users to distribute PostgreSQL instances on
+  Kubernetes nodes with the required taint</li>
+<li>Enable specification of a digest to an image name, through the
+  <code>&lt;image&gt;:&lt;tag&gt;@sha256:&lt;digestValue&gt;</code> format, for more deterministic and
+  repeatable deployments</li>
+</ul>
+<p>Security Enhancements:</p>
+<ul>
+<li>Customize TLS certificates to authenticate the PostgreSQL server by defining
+  secrets for the server certificate and the related Certification Authority
+  that signed it</li>
+<li>Raise the <code>sslmode</code> for the WAL receiver process of internal and
+  automatically managed streaming replicas from <code>require</code> to <code>verify-ca</code></li>
+</ul>
+<p>Changes:</p>
+<ul>
+<li>Enhance the <code>promote</code> subcommand of the <code>cnp</code> plugin for <code>kubectl</code> to accept
+  just the node number rather than the whole name of the pod</li>
+<li>Adopt DNS-1035 validation scheme for cluster names (from which service names
+  are inherited)</li>
+<li>Enforce streaming replication connection when cloning a standby instance or
+  when bootstrapping using the <code>pg_basebackup</code> method</li>
+<li>Integrate the <code>Backup</code> resource with <code>beginWal</code>, <code>endWal</code>, <code>beginLSN</code>,
+  <code>endLSN</code>, <code>startedAt</code> and <code>stoppedAt</code> regarding the physical base backup</li>
+<li>Documentation improvements:<ul>
+<li>Provide a list of ports exposed by the operator and the operand container</li>
+<li>Introduce the <code>cnp-bench</code> helm charts and guidelines for benchmarking the
+  storage and PostgreSQL for database workloads</li>
+</ul>
+</li>
+<li>E2E tests enhancements:<ul>
+<li>Test Kubernetes 1.21</li>
+<li>Add test for High Availability of the operator</li>
+<li>Add test for node draining</li>
+</ul>
+</li>
+<li>Minor bug fixes, including:<ul>
+<li>Timeout to pg_ctl start during recovery operations too short</li>
+<li>Operator not watching over direct events on PVCs</li>
+<li>Fix handling of <code>immediateCheckpoint</code> and <code>jobs</code> parameter in
+  <code>barmanObjectStore</code> backups</li>
+<li>Empty logs when recovering from a backup</li>
+</ul>
+</li>
+</ul>
+<h2 id="version-140">Version 1.4.0</h2>
+<p><strong>Release date:</strong> 18 May 2021</p>
+<p>Features:</p>
+<ul>
+<li>Standard output logging of PostgreSQL error messages in JSON format</li>
+<li>Provide a basic set of PostgreSQL metrics for the Prometheus exporter</li>
+<li>Add the <code>restart</code> command to the <code>cnp</code> plugin for <code>kubectl</code> to restart
+  the pods of a given PostgreSQL cluster in a rollout fashion</li>
+</ul>
+<p>Security Enhancements:</p>
+<ul>
+<li>Set <code>readOnlyRootFilesystem</code> security context for pods</li>
+</ul>
+<p>Changes:</p>
+<ul>
+<li><strong>IMPORTANT:</strong> If you have previously deployed the CloudNativePG
+  operator using the YAML manifest, you must delete the existing operator
+  deployment before installing the new version. This is required to avoid
+  conflicts with other Kubernetes API's due to a change in labels
+  and label selectors being directly managed by the operator. Please refer to
+  the CloudNativePG documentation for additional detail on upgrading
+  to 1.4.0</li>
+<li>Fix the labels that are automatically defined by the operator, renaming them
+  from <code>control-plane: controller-manager</code> to
+  <code>app.kubernetes.io/name: cloudnative-pg</code></li>
+<li>Assign the <code>metrics</code> name to the TCP port for the Prometheus exporter</li>
+<li>Set <code>cnp_metrics_exporter</code> as the <code>application_name</code> to the metrics exporter
+  connection in PostgreSQL</li>
+<li>When available, use the application database for monitoring queries of the
+  Prometheus exporter instead of the <code>postgres</code> database</li>
+<li>Documentation improvements:<ul>
+<li>Customization of monitoring queries</li>
+<li>Operator upgrade instructions</li>
+</ul>
+</li>
+<li>E2E tests enhancements</li>
+<li>Minor bug fixes, including:<ul>
+<li>Avoid using <code>-R</code> when calling <code>pg_basebackup</code></li>
+<li>Remove stack trace from error log when getting the status</li>
+</ul>
+</li>
+</ul>
+<h2 id="version-130">Version 1.3.0</h2>
+<p><strong>Release date:</strong> 23 Apr 2021</p>
+<p>Features:</p>
+<ul>
+<li>Inheritance of labels and annotations</li>
+<li>Set resource limits for every container</li>
+</ul>
+<p>Security Enhancements:</p>
+<ul>
+<li>Support for restricted security context constraint on Red Hat OpenShift to
+  limit pod execution to a namespace allocated UID and SELinux context</li>
+<li>Pod security contexts explicitly defined by the operator to run as
+  non-root, non-privileged and without privilege escalation</li>
+</ul>
+<p>Changes:</p>
+<ul>
+<li>Prometheus exporter endpoint listening on port 9187 (port 8000 is now
+  reserved to instance coordination with API server)</li>
+<li>Documentation improvements</li>
+<li>E2E tests enhancements, including GKE environment</li>
+<li>Minor bug fixes</li>
+</ul>
+<h2 id="version-121">Version 1.2.1</h2>
+<p><strong>Release date:</strong> 6 Apr 2021</p>
+<ul>
+<li>ScheduledBackup are no longer owners of the Backups, meaning that backups
+  are not removed when ScheduledBackup objects are deleted</li>
+<li>Update on ubi8-minimal image to solve RHSA-2021:1024 (Security Advisory: Important)</li>
+</ul>
+<h2 id="version-120">Version 1.2.0</h2>
+<p><strong>Release date:</strong> 31 Mar 2021</p>
+<ul>
+<li>Introduce experimental support for custom monitoring queries as ConfigMap and
+  Secret objects using a compatible syntax with <code>postgres_exporter</code> for Prometheus</li>
+<li>Support Operator Lifecycle Manager (OLM) deployments, with the subsequent
+  presence on OperatorHub.io</li>
+<li>Enhance container security by applying guidelines from the US Department of
+  Defense (DoD)'s Defense Information Systems Agency (DISA) and the Center for
+  Internet Security (CIS) and verifying them directly in the pipeline with
+  Dockle</li>
+<li>Improve E2E tests on AKS</li>
+<li>Minor bug fixes</li>
+</ul>
+<h2 id="version-110">Version 1.1.0</h2>
+<p><strong>Release date:</strong> 3 Mar 2021</p>
+<ul>
+<li>Add <code>kubectl cnp status</code> to pretty-print the status of a cluster, including
+  JSON and YAML output</li>
+<li>Add <code>kubectl cnp certificate</code> to enable TLS authentication for client applications</li>
+<li>Add the <code>-ro</code> service to route connections to the available hot
+  standby replicas only, enabling offload of read-only queries from
+  the cluster's primary instance</li>
+<li>Rollback scaling down a cluster to a value lower than <code>maxSyncReplicas</code></li>
+<li>Request a checkpoint before demoting a former primary</li>
+<li>Send <code>SIGINT</code> signal (fast shutdown) to PostgreSQL process on <code>SIGTERM</code></li>
+<li>Minor bug fixes</li>
+</ul>
+<h2 id="version-100">Version 1.0.0</h2>
+<p><strong>Release date:</strong> 4 Feb 2021</p>
+<p>The first major stable release of CloudNativePG implements <code>Cluster</code>,
+<code>Backup</code> and <code>ScheduledBackup</code> in the API group <code>postgresql.cnpg.io/v1</code>.
+It uses these resources to create and manage PostgreSQL clusters inside
+Kubernetes with the following main capabilities:</p>
+<ul>
+<li>Direct integration with Kubernetes API server for High Availability, without
+  requiring an external tool</li>
+<li>Self-Healing capability, through:<ul>
+<li>failover of the primary instance by promoting the most aligned replica</li>
+<li>automated recreation of a replica</li>
+</ul>
+</li>
+<li>Planned switchover of the primary instance by promoting a selected replica</li>
+<li>Scale up/down capabilities</li>
+<li>Definition of an arbitrary number of instances (minimum 1 - one primary server)</li>
+<li>Definition of the <em>read-write</em> service to connect your applications to the
+  only primary server of the cluster</li>
+<li>Definition of the <em>read</em> service to connect your applications to any of the
+  instances for reading workloads</li>
+<li>Support for Local Persistent Volumes with PVC templates</li>
+<li>Reuse of Persistent Volumes storage in Pods</li>
+<li>Rolling updates for PostgreSQL minor versions and operator upgrades</li>
+<li>TLS connections and client certificate authentication</li>
+<li>Continuous backup to an S3 compatible object store</li>
+<li>Full recovery and point-in-time recovery from an S3 compatible object store backup</li>
+<li>Support for synchronous replicas</li>
+<li>Support for node affinity via <code>nodeSelector</code> property</li>
+<li>Standard output logging of PostgreSQL error messages</li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../..";</script>
+    <script src="../../js/theme_extra.js"></script>
+    <script src="../../js/theme.js"></script>
+      <script src="../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/release_notes/index.html b/assets/documentation/1.27.0-rc1/release_notes/index.html
new file mode 100644
index 000000000..c4e6c56d6
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/index.html
@@ -0,0 +1,388 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Release notes - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes";
+        var mkdocs_page_input_path = "release_notes.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Release notes</a>
+    <ul class="current">
+    </ul>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes">Release notes</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>History of user-visible changes for CloudNativePG, classified for each minor release.</p>
+<!-- - [CloudNativePG 1.28 - Release Candidate](release_notes/v1.28.md) -->
+<ul>
+<li><a href="v1.27/">CloudNativePG 1.27 - Release Candidate</a></li>
+<li><a href="v1.26/">CloudNativePG 1.26</a></li>
+<li><a href="v1.25/">CloudNativePG 1.25</a></li>
+</ul>
+<p>For information on the community support policy for CloudNativePG, please
+refer to <a href="../supported_releases/">"Supported releases"</a>.</p>
+<p>Older releases:</p>
+<ul>
+<li><a href="old/v1.24/">CloudNativePG 1.24</a></li>
+<li><a href="old/v1.23/">CloudNativePG 1.23</a></li>
+<li><a href="old/v1.22/">CloudNativePG 1.22</a></li>
+<li><a href="old/v1.21/">CloudNativePG 1.21</a></li>
+<li><a href="old/v1.20/">CloudNativePG 1.20</a></li>
+<li><a href="old/v1.19/">CloudNativePG 1.19</a></li>
+<li><a href="old/v1.18/">CloudNativePG 1.18</a></li>
+<li><a href="old/v1.17/">CloudNativePG 1.17</a></li>
+<li><a href="old/v1.16/">CloudNativePG 1.16</a></li>
+<li><a href="old/v1.15/">CloudNativePG 1.15</a></li>
+</ul>
+<p>We also keep record of all the
+<a href="edb-cloud-native-postgresql/">release notes from 1.0.0 to 1.14.0 of Cloud Native PostgreSQL by EDB</a>,
+the predecessor of CloudNativePG.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../preview_version/" class="btn btn-neutral float-left" title="Preview Versions"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../cncf-projects/external-secrets/" class="btn btn-neutral float-right" title="External Secrets">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../preview_version/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../cncf-projects/external-secrets/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/release_notes/old/v1.15/index.html b/assets/documentation/1.27.0-rc1/release_notes/old/v1.15/index.html
new file mode 100644
index 000000000..ec5bbab38
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/old/v1.15/index.html
@@ -0,0 +1,576 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.15 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../../css/theme.css" />
+    <link rel="stylesheet" href="../../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.15";
+        var mkdocs_page_input_path = "release_notes/old/v1.15.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.15</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-115">Release notes for CloudNativePG 1.15</h1>
+<p>History of user-visible changes in the 1.15 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.15">commits</a>
+on the release branch in GitHub.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This is expected to be the last release in the 1.15.X series. 
+Users are encouraged to update to a newer minor version soon.</p>
+</div>
+<h2 id="version-1155">Version 1.15.5</h2>
+<p><strong>Release date:</strong> Oct 6, 2022</p>
+<p>Enhancements:</p>
+<ul>
+<li>Introduce <code>leaseDuration</code> and <code>renewDeadline</code> parameters in the controller
+   manager to enhance configuration of the leader election in operator
+   deployments (#759)</li>
+<li>Improve the mechanism that checks that the backup object store is empty
+   before archiving a WAL file for the first time: a new file called
+   <code>.check-empty-wal-archive</code> is placed in the <code>PGDATA</code> immediately after
+   the cluster is bootstrapped and it is then removed after the first WAL
+   file is successfully archived</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Explicitly set permissions of the instance manager binary that is copied in
+  the <code>distroless/static:nonroot</code> container image, by using the
+  <code>nonroot:nonroot</code> user (#754)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Make the cluster's conditions compatible with <code>metav1.Conditions</code> struct (#720)</li>
+<li>Drop any active connection on a standby after it is promoted to primary (#737)</li>
+<li>Honor <code>MAPPEDMETRIC</code> and <code>DURATION</code> metric types conversion in the native
+  Prometheus exporter  (#765)</li>
+</ul>
+<h2 id="version-1154">Version 1.15.4</h2>
+<p><strong>Release date:</strong> Sep 6, 2022</p>
+<p>Enhancements:</p>
+<ul>
+<li>Enable configuration of low-level network TCP settings in the PgBouncer
+  connection pooler implementation (#584)</li>
+<li>Make sure that the <code>cnpg.io/instanceName</code> and the <code>cnpg.io/podRole</code> labels
+  are always present on pods and PVCs (#632 and #680)</li>
+<li>Propagate the <code>role</code> label of an instance to the underlying PVC (#634)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Prevent multiple in-place upgrade processes of the operator from running
+  simultaneously by atomically checking whether another one is in progress (#655)</li>
+<li>Avoid using a hardcoded file name to store the newly uploaded instance
+  manager, preventing a possible race condition during online upgrades of the
+  operator (#660)</li>
+<li>Prevent a panic from happening when invoking <code>GetAllAccessibleDatabases</code>
+  (#641)</li>
+</ul>
+<h2 id="version-1153">Version 1.15.3</h2>
+<p><strong>Release date:</strong> Aug 12, 2022</p>
+<p>Enhancements:</p>
+<ul>
+<li>Enable the configuration of the <code>huge_pages</code> option for PostgreSQL (#456)</li>
+<li>Enhance log during promotion and demotion, after a failover or a switchover,
+  by printing the time elapsed between the request of promotion and the actual
+  availability for writes (#371)</li>
+<li>Add the <code>instanceName</code> and <code>clusterName</code> labels on jobs, pods, and PVCs to
+  improve interaction with these resources (#534)</li>
+<li>Add instructions on how to create PostGIS clusters (#570)</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Explicitly assign <code>securityContext</code> to the <code>Pooler</code> deployment (#485)</li>
+<li>Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Use the correct delays for restarts (<code>stopDelay</code>) and for switchover
+  (<code>switchoverDelay</code>), as they were erroneously swapped before. This is an
+  important fix, as it might block indefinitely restarts if <code>switchoverDelay</code> is
+  not set and uses the default value of 40000000 seconds (#531)</li>
+<li>Prevent the metrics collector from causing panic when the query returns an
+  error (#396)</li>
+<li>Removing an unsafe debug message that was referencing an unchecked pointer,
+  leading in some cases to segmentation faults regardless of the log level (#491)</li>
+<li>Prevent panic when fencing in case the cluster had no annotation (#512)</li>
+<li>Avoid updating the CRD if a TLS certificate is not changed (#501)</li>
+<li>Handle conflicts while injecting a certificate in the CRD (#547)</li>
+<li>Backup and recovery:<ul>
+<li>Correctly pass object store credentials in Google Cloud (#454)</li>
+</ul>
+</li>
+</ul>
+<p>Minor changes:</p>
+<ul>
+<li>Set the default operand image to PostgreSQL 15.0</li>
+</ul>
+<h2 id="version-1152">Version 1.15.2</h2>
+<p><strong>Release date:</strong> Jul 7, 2022 (patch release)</p>
+<p>Enhancements:</p>
+<ul>
+<li>Improve logging of the instance manager during switchover and failover</li>
+<li>Require Barman &gt;= 3.0.0 for future support of PostgreSQL 15 in backup
+  and recovery</li>
+</ul>
+<p>Changes:</p>
+<ul>
+<li>Set the default operand image to PostgreSQL 15.0</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Fix the initialization order inside the <code>WithActiveInstance</code> function that
+  starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in
+  the cluster initialization phase - this is especially useful in bootstrap
+  operations like recovery from a backup are failing (before this patch, such
+  logs were not sent to the standard output channel and were permanently lost)</li>
+<li>Avoid an unnecessary switchover when a hot standby sensitive parameter is
+  decreased, and the primary has already restarted</li>
+<li>Properly quote role names in <code>ALTER ROLE</code> statements</li>
+<li>Backup and recovery:<ul>
+<li>Fix the algorithm detecting the closest Barman backup for PITR, which was
+  comparing the requested recovery timestamp with the backup start instead
+  of the end</li>
+<li>Fix Point in Time Recovery based on a transaction ID, a named restore
+  point, or the “immediate” target by providing a new field called
+  <code>backupID</code> in the <code>recoveryTarget</code> section</li>
+<li>Fix encryption parameters invoking <code>barman-cloud-wal-archive</code> and
+  <code>barman-cloud-backup</code> commands</li>
+<li>Stop ignoring <code>barmanObjectStore.serverName</code> option when recovering from
+  a backup object store using a server name that doesn’t match the current
+  cluster name</li>
+</ul>
+</li>
+<li><code>cnpg</code> plug-in:<ul>
+<li>Make sure that the plug-in complies with the <code>-n</code> parameter when
+  specified by the user</li>
+<li>Fix the <code>status</code> command to sort results and remove variability in the
+  output</li>
+</ul>
+</li>
+</ul>
+<h2 id="version-1151">Version 1.15.1</h2>
+<p><strong>Release date:</strong> May 27, 2022 (patch release)</p>
+<p>Minor changes:</p>
+<ul>
+<li>Enable configuration of the <code>archive_timeout</code> setting for PostgreSQL, which
+  was previously a fixed parameter (by default set to 5 minutes)</li>
+<li>Introduce a new field called <code>backupOwnerReference</code> in the <code>scheduledBackup</code>
+  resource to set the ownership reference on the created backup resources, with
+  possible values being <code>none</code> (default), <code>self</code> (objects owned by the scheduled
+  backup object), and <code>cluster</code> (owned by the Postgres cluster object)</li>
+<li>Introduce automated collection of <code>pg_stat_wal</code> metrics for PostgreSQL 14 or
+  higher in the native Prometheus exporter</li>
+<li>Set the default operand image to PostgreSQL 15.0</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Fix fencing by killing orphaned processes related to <code>postgres</code></li>
+<li>Enable the CSV log pipe inside the <code>WithActiveInstance</code> function to collect
+  logs from recovery bootstrap jobs and help in the troubleshooting phase</li>
+<li>Prevent bootstrapping a new cluster with a non-empty backup object store,
+  removing the risk of overwriting existing backups</li>
+<li>With the <code>recovery</code> bootstrap method, make sure that the recovery object
+  store and the backup object store are different to avoid overwriting existing
+  backups</li>
+<li>Re-queue the reconciliation loop if the RBAC for backups is not yet created</li>
+<li>Fix an issue with backups and the wrong specification of the cluster name
+  property</li>
+<li>Ensures that operator pods always have the latest certificates in the case of
+  a deployment of the operator in high availability, with more than one replica</li>
+<li>Fix the <code>cnpg report operator</code> command to correctly handle the case of a
+  deployment of the operator in high availability, with more than one replica</li>
+<li>Properly propagate changes in the cluster’s <code>inheritedMetadata</code> set of labels
+  and annotations to the related resources of the cluster without requiring a
+  restart</li>
+<li>Fix the <code>cnpg</code> plugin to correctly parse any custom configmap and secret name
+  defined in the operator deployment, instead of relying just on the default
+  values</li>
+<li>Fix the local building of the documentation by using the <code>minidocks/mkdocs</code> image
+  for <code>mkdocs</code></li>
+</ul>
+<h2 id="version-1150">Version 1.15.0</h2>
+<p><strong>Release date:</strong> 21 April 2022</p>
+<p>Features:</p>
+<ul>
+<li><strong>Fencing:</strong> Introduction of the fencing capability for a cluster or a given
+  set of PostgreSQL instances through the <code>cnpg.io/fencedInstances</code>
+  annotation, which, if not empty, disables switchover/failovers in the cluster;
+  fenced instances are shut down and the pod is kept running (while considered
+  not ready) for inspection and emergencies</li>
+<li><strong>LDAP authentication:</strong> Allow LDAP Simple Bind and Search+Bind configuration
+  options in the <code>pg_hba.conf</code> to be defined in the Postgres cluster spec
+  declaratively, enabling the optional use of Kubernetes secrets for sensitive
+  options such as <code>ldapbindpasswd</code></li>
+<li>Introduction of the <code>primaryUpdateMethod</code> option, accepting the values of
+  <code>switchover</code> (default) and <code>restart</code>, to be used in case of unsupervised
+  <code>primaryUpdateStrategy</code>; this method controls what happens to the primary
+  instance during the rolling update procedure</li>
+<li>New <code>report</code> command in the <code>kubectl cnp</code> plugin for better diagnosis and
+  more effective troubleshooting of both the operator and a specific Postgres
+  cluster</li>
+<li>Prune those <code>Backup</code> objects that are no longer in the backup object store</li>
+<li>Specification of target timeline and <code>LSN</code> in Point-In-Time Recovery
+  bootstrap method</li>
+<li>Support for the <code>AWS_SESSION_TOKEN</code> authentication token in AWS S3 through
+  the <code>sessionToken</code> option</li>
+<li>Default image name for PgBouncer in <code>Pooler</code> pods set to
+  <code>quay.io/enterprisedb/pgbouncer:1.17.0</code></li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Base backup detection for Point-In-Time Recovery via <code>targetTime</code> correctly
+  works now, as previously a target prior to the latest available backup was
+  not possible (the detection algorithm was always wrong by selecting the last
+  backup as a starting point)</li>
+<li>Improved resilience of hot standby sensitive parameters by relying on the
+  values the operator collects from <code>pg_controldata</code></li>
+<li>Intermediate certificates handling has been improved by properly discarding invalid entries,
+  instead of throwing an invalid certificate error</li>
+<li>Prometheus exporter metric collection queries in the databases are now
+  committed instead of rolled back (this might result in a change in the number
+  of rolled back transactions that are visible from downstream dashboards,
+  where applicable)</li>
+</ul>
+<p>Version 1.15.0 is the first release of CloudNativePG. Previously, this software
+was called EDB Cloud Native PostgreSQL (now EDB Postgres for Kubernetes). If you
+are looking for information about a previous release, please refer to the
+<a href="https://www.enterprisedb.com/docs/postgres_for_kubernetes/latest/">EDB documentation</a>.</p>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../../..";</script>
+    <script src="../../../js/theme_extra.js"></script>
+    <script src="../../../js/theme.js"></script>
+      <script src="../../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/release_notes/old/v1.16/index.html b/assets/documentation/1.27.0-rc1/release_notes/old/v1.16/index.html
new file mode 100644
index 000000000..f675b00d8
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/old/v1.16/index.html
@@ -0,0 +1,605 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.16 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../../css/theme.css" />
+    <link rel="stylesheet" href="../../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.16";
+        var mkdocs_page_input_path = "release_notes/old/v1.16.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.16</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-116">Release notes for CloudNativePG 1.16</h1>
+<p>History of user-visible changes in the 1.16 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.16">commits</a>
+on the release branch in GitHub.</p>
+<h2 id="version-1165">Version 1.16.5</h2>
+<p><strong>Release date:</strong> Dec 21, 2022</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This is expected to be the last release in the 1.16.X series. 
+Users are encouraged to update to a newer minor version soon.</p>
+</div>
+<p>Important announcements:</p>
+<ul>
+<li>Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his
+  consistent and impactful contributions (#1167)</li>
+<li>Remove ARMv7 support (#1092)</li>
+<li>FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life.</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li>Add rpm/deb package for kubectl-cnpg plugin (#1008)</li>
+<li>Update default PostgreSQL version for new cluster definitions to 15.1 (#908)</li>
+<li>Documentation</li>
+<li>Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been
+    deprecated, in favor of instructions on monitoring in the Quickstart
+    documentation</li>
+<li>Link to the "Release updates" discussion (#1148) - the release updates
+    discussion will become the default channel for release announcements and
+    discussions</li>
+<li>Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains
+    how maintainers should proceed if they are not ready to continue
+    contributing</li>
+<li>Improve instructions on creating pull requests (#1132)</li>
+<li>Troubleshooting emergency backup instructions (#1184)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164)</li>
+<li>Ensure that we create secrets and services only when not found (#1145)</li>
+<li>Respect configured pg-wal when restoring (#1216)</li>
+<li>Filter out replicas from nodeToClusters map (#1194)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Use <code>ciclops</code> for test summary (#1064): rely on the ciclops GitHub action to
+  provide summaries of the E2E suite, inheriting improvements from that project</li>
+<li>Add backport pull request workflow (#965) - automatically backport patches to
+  release branches if they are so annotated</li>
+<li>Make the operator log level configurable in e2e test suite (#1094)</li>
+<li>Enable test execution based on labels (#951)</li>
+<li>Update Go version from 1.18 to 1.19 (#1166)</li>
+</ul>
+<h2 id="version-1164">Version 1.16.4</h2>
+<p><strong>Release date:</strong> Nov 10, 2022</p>
+<p>Security:</p>
+<ul>
+<li>Add <code>SeccomProfile</code> to Pods and Containers (#888)</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li><code>status</code> command for the <code>cnpg</code> plugin:</li>
+<li>Clarify display for fenced clusters (#886)</li>
+<li>Improve display for replica clusters (#871)</li>
+<li>Documentation:</li>
+<li>Improve monitoring page, providing instructions on how to evaluate the
+    observability capabilities of CloudNativePG on a local system using
+    Prometheus and Grafana (#968)</li>
+<li>Add page on design reasons for custom controller (#918)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Import a database with <code>plpgsql</code> functions (#974)</li>
+<li>Properly find the closest backup when doing Point-in-time recovery (#949)</li>
+<li>Clarify that the <code>ScheduledBackup</code> format does not follow Kubernetes <code>CronJob</code>
+  format (#883)</li>
+<li>Bases the failover logic on the Postgres information from the instance
+  manager, rather than Kubernetes pod readiness, which could be stale (#890)</li>
+<li>Ensure we have a WAL to archive for every newly created cluster. The lack
+  could prevent backups from working (#897)</li>
+<li>Correct YAML key names for <code>barmanObjectStore</code> in documentation (#877)</li>
+<li>Fix <code>krew</code> release (#866)</li>
+</ul>
+<h2 id="version-1163">Version 1.16.3</h2>
+<p><strong>Release date:</strong> Oct 6, 2022</p>
+<p>Enhancements:</p>
+<ul>
+<li>Introduce <code>leaseDuration</code> and <code>renewDeadline</code> parameters in the controller
+   manager to enhance configuration of the leader election in operator
+   deployments (#759)</li>
+<li>Improve the mechanism that checks that the backup object store is empty
+   before archiving a WAL file for the first time: a new file called
+   <code>.check-empty-wal-archive</code> is placed in the <code>PGDATA</code> immediately after
+   the cluster is bootstrapped and it is then removed after the first WAL
+   file is successfully archived</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Explicitly set permissions of the instance manager binary that is copied in
+  the <code>distroless/static:nonroot</code> container image, by using the
+  <code>nonroot:nonroot</code> user (#754)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Drop any active connection on a standby after it is promoted to primary (#737)</li>
+<li>Honor MAPPEDMETRIC and DURATION metric types conversion in the native
+  Prometheus exporter (#765)</li>
+</ul>
+<h2 id="version-1162">Version 1.16.2</h2>
+<p><strong>Release date:</strong> Sep 6, 2022</p>
+<p>Enhancements:</p>
+<ul>
+<li>Enable configuration of low-level network TCP settings in the PgBouncer
+  connection pooler implementation (#584)</li>
+<li>Make sure that the <code>cnpg.io/instanceName</code> and the <code>cnpg.io/podRole</code> labels
+  are always present on pods and PVCs (#632 and #680)</li>
+<li>Propagate the <code>role</code> label of an instance to the underlying PVC (#634)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Use <code>shared_preload_libraries</code> when bootstrapping the new cluster's primary
+  (#642)</li>
+<li>Prevent multiple in-place upgrade processes of the operator from running
+  simultaneously by atomically checking whether another one is in progress (#655)</li>
+<li>Avoid using a hardcoded file name to store the newly uploaded instance
+  manager, preventing a possible race condition during online upgrades of the
+  operator (#660)</li>
+<li>Prevent a panic from happening when invoking <code>GetAllAccessibleDatabases</code>
+  (#641)</li>
+</ul>
+<h2 id="version-1161">Version 1.16.1</h2>
+<p><strong>Release date:</strong> Aug 12, 2022</p>
+<p>Enhancements:</p>
+<ul>
+<li>Enable the configuration of the <code>huge_pages</code> option for PostgreSQL (#456)</li>
+<li>Enhance log during promotion and demotion, after a failover or a switchover,
+  by printing the time elapsed between the request of promotion and the actual
+  availability for writes (#371)</li>
+<li>Introduce the PostgreSQL cluster’s timeline in the cluster status (#462)</li>
+<li>Add the <code>instanceName</code> and <code>clusterName</code> labels on jobs, pods, and PVCs to
+  improve interaction with these resources (#534)</li>
+<li>Add instructions on how to create PostGIS clusters (#570)</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Explicitly assign <code>securityContext</code> to the <code>Pooler</code> deployment (#485)</li>
+<li>Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Use the correct delays for restarts (<code>stopDelay</code>) and for switchover
+  (<code>switchoverDelay</code>), as they were erroneously swapped before. This is an
+  important fix, as it might block indefinitely restarts if <code>switchoverDelay</code> is
+  not set and uses the default value of 40000000 seconds (#531)</li>
+<li>Prevent the metrics collector from causing panic when the query returns an
+  error (#396)</li>
+<li>Removing an unsafe debug message that was referencing an unchecked pointer,
+  leading in some cases to segmentation faults regardless of the log level (#491)</li>
+<li>Prevent panic when fencing in case the cluster had no annotation (#512)</li>
+<li>Avoid updating the CRD if a TLS certificate is not changed (#501)</li>
+<li>Handle conflicts while injecting a certificate in the CRD (#547)</li>
+<li>Database import:<ul>
+<li>Use the <code>postgres</code> user while running <code>pg_restore</code> in database import (#411)</li>
+<li>Document the requirement to explicitly set  <code>sslmode</code> in the monolith import
+  case to control SSL connections with the origin external server (#572)</li>
+<li>Fix bug that prevented import from working when <code>dbname</code> was specified in
+  <code>connectionParameters</code> (#569)</li>
+</ul>
+</li>
+<li>Backup and recovery:<ul>
+<li>Correctly pass object store credentials in Google Cloud (#454)</li>
+</ul>
+</li>
+</ul>
+<p>Minor changes:</p>
+<ul>
+<li>Set the default operand image to PostgreSQL 15.0</li>
+</ul>
+<h2 id="version-1160">Version 1.16.0</h2>
+<p><strong>Release date:</strong> Jul 7, 2022 (minor release)</p>
+<p>Features:</p>
+<ul>
+<li><strong>Offline data import and major upgrades for PostgreSQL:</strong> introduce the
+  <code>bootstrap.initdb.import</code> section to provide a way to import objects via the
+  network from an existing PostgreSQL instance (even outside Kubernetes) inside a
+  brand new CloudNativePG cluster using the PostgreSQL logical backup concept
+  (<code>pg_dump</code>/<code>pg_restore</code>). The same method can be used to perform major
+  PostgreSQL upgrades on a new cluster. The feature introduces two types of
+  import: <code>microservice</code> (import one database only in the new cluster) and
+  <code>monolith</code> (import the selected databases and roles from the existing
+  instance).</li>
+<li>Anti-affinity rules for synchronous replication based on labels: make sure
+  that synchronous replicas are running on nodes with different characteristics
+  than the node where the primary is running, for example, availability zone</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li>Improve fencing by removing the existing limitation that disables failover
+  when one or more instances are fenced</li>
+<li>Enhance the automated extension management framework by checking whether an
+  extension exists in the catalog instead of  running <code>DROP EXTENSION IF EXISTS</code>
+  unnecessarily</li>
+<li>Improve logging of the instance manager during switchover and failover</li>
+<li>Enable redefining the name of the database of the application, its owner, and
+  the related secret when recovering from an object store or cloning an
+  instance via <code>pg_basebackup</code> (this was only possible in the <code>initdb</code> bootstrap
+  so far)</li>
+<li>Backup and recovery:<ul>
+<li>Require Barman &gt;= 3.0.0 for future support of PostgreSQL 15</li>
+<li>Enable Azure AD Workload Identity for Barman Cloud backups through the
+  <code>inheritFromAzureAD</code> option</li>
+<li>Introduce <code>barmanObjectStore.s3Credentials.region</code> to define the region
+  in AWS (<code>AWS_DEFAULT_REGION</code>) for both backup and recovery object stores</li>
+</ul>
+</li>
+<li>Support for Kubernetes 1.24</li>
+</ul>
+<p>Changes:</p>
+<ul>
+<li>Set the default operand image to PostgreSQL 15.0</li>
+<li>Use conditions from the Kubernetes API instead of relying on our own
+  implementation for backup and WAL archiving</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Fix the initialization order inside the <code>WithActiveInstance</code> function that
+  starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in
+  the cluster initialization phase - this is especially useful in bootstrap
+  operations like recovery from a backup are failing (before this patch, such
+  logs were not sent to the standard output channel and were permanently lost)</li>
+<li>Avoid an unnecessary switchover when a hot standby sensitive parameter is
+  decreased, and the primary has already restarted</li>
+<li>Properly quote role names in <code>ALTER ROLE</code> statements</li>
+<li>Backup and recovery:<ul>
+<li>Fix the algorithm detecting the closest Barman backup for PITR, which was
+  comparing the requested recovery timestamp with the backup start instead
+  of the end</li>
+<li>Fix Point in Time Recovery based on a transaction ID, a named restore
+  point, or the “immediate” target by providing a new field called
+  <code>backupID</code> in the <code>recoveryTarget</code> section</li>
+<li>Fix encryption parameters invoking <code>barman-cloud-wal-archive</code> and
+  <code>barman-cloud-backup</code> commands</li>
+<li>Stop ignoring <code>barmanObjectStore.serverName</code> option when recovering from
+  a backup object store using a server name that doesn’t match the current
+  cluster name</li>
+</ul>
+</li>
+<li><code>cnpg</code> plug-in:<ul>
+<li>Make sure that the plug-in complies with the <code>-n</code> parameter when
+  specified by the user</li>
+<li>Fix the <code>status</code> command to sort results and remove variability in the
+  output</li>
+</ul>
+</li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../../..";</script>
+    <script src="../../../js/theme_extra.js"></script>
+    <script src="../../../js/theme.js"></script>
+      <script src="../../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/release_notes/old/v1.17/index.html b/assets/documentation/1.27.0-rc1/release_notes/old/v1.17/index.html
new file mode 100644
index 000000000..0a30376c6
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/old/v1.17/index.html
@@ -0,0 +1,553 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.17 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../../css/theme.css" />
+    <link rel="stylesheet" href="../../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.17";
+        var mkdocs_page_input_path = "release_notes/old/v1.17.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.17</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-117">Release notes for CloudNativePG 1.17</h1>
+<p>History of user-visible changes in the 1.17 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.17">commits</a>
+on the release branch in GitHub.</p>
+<h2 id="version-1175">Version 1.17.5</h2>
+<p><strong>Release date:</strong> March 20, 2023</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This is expected to be the last release in the 1.17.X series. 
+Users are encouraged to update to a newer minor version soon.</p>
+</div>
+<p>Enhancements:</p>
+<ul>
+<li>Extend the <code>debug</code> cluster's log level to the <code>initdb</code> job (#1503)</li>
+<li>Support IPv6 and custom <code>pg_hba</code> for the PgBouncer pooler (#1395)</li>
+<li>Document API calls from the instance manager (#1641)</li>
+<li>Clarify deployment name via Helm (#1505)</li>
+<li>Add the <code>psql</code> command to the <code>cnpg</code> plugin for <code>kubectl</code> (#1668) allowing
+  the user to start a <code>psql</code> session with a pod (the primary by default)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Adopt Renovate for dependency tracking/updating (#1367, #1473)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Prevent panic with error handling in the probes (#1716)</li>
+<li>Properly show WAL archiving information with <code>status</code> command of the <code>cnpg</code> plugin (#1666)</li>
+</ul>
+<h2 id="version-1174">Version 1.17.4</h2>
+<p><strong>Release date:</strong> Feb 14, 2023</p>
+<p>Features:</p>
+<ul>
+<li>Support for Kubernetes' projected volumes (#1269)</li>
+<li>Support custom environment variables for finer control of the PostgreSQL
+  server process (#1275)</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li>Introduce the <code>backup</code> command in the <code>cnpg</code> plugin for <code>kubectl</code> to
+  issue a new base backup of the cluster (#1348)</li>
+<li>Add a database comment on the <code>streaming_replica</code> user (#1349)</li>
+<li>Document the firewall issues with webhooks on GKE (#1364)</li>
+<li>Add note about postgresql.conf in <code>recovery</code> (#1211)</li>
+<li>Add instructions on installing plugin using packages (#1357)</li>
+<li>Specify Postgres versions supported by each minor release (#1355)</li>
+<li>Clarify the meaning of PVC group in CloudNativePG (#1344)</li>
+<li>Add an example of the DigitalOcean S3-compatible Spaces (#1289)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Added daily end-to-end smoke test for release branches (#1235)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Ensure that the PVC roles are always consistent (#1380)</li>
+<li>Permit <code>walStorage</code> resize when using <code>pvcTemplate</code> (#1315)</li>
+<li>Avoid <code>PodMonitor</code> reconcile if Prometheus is not installed (#1238)</li>
+<li>Avoid looking for <code>PodMonitor</code> when not needed (#1213)</li>
+</ul>
+<h2 id="version-1173">Version 1.17.3</h2>
+<p><strong>Release date:</strong> Dec 21, 2022</p>
+<p>Important announcements:</p>
+<ul>
+<li>Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his
+  consistent and impactful contributions (#1167)</li>
+<li>Remove ARMv7 support (#1092)</li>
+<li>FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life.</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li>Improve compatibility with Istio: add support for Istio's quit endpoint so
+  that jobs with Istio sidecars do not run indefinitely (#967)</li>
+<li>Add rpm/deb package for kubectl-cnpg plugin (#1008)</li>
+<li>Update default PostgreSQL version for new cluster definitions to 15.1 (#908)</li>
+<li>Documentation</li>
+<li>Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been
+    deprecated, in favor of instructions on monitoring in the Quickstart
+    documentation</li>
+<li>Link to the "Release updates" discussion (#1148) - the release updates
+    discussion will become the default channel for release announcements and
+    discussions</li>
+<li>Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains
+    how maintainers should proceed if they are not ready to continue
+    contributing</li>
+<li>Improve instructions on creating pull requests (#1132)</li>
+<li>Troubleshooting emergency backup instructions (#1184)</li>
+<li>Cover the Kubernetes layer in greater detail in the Architecture
+  documentation (#1432)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164)</li>
+<li>Ensure the PVC containing WALs is deleted when scaling down the cluster
+(#1135)</li>
+<li>Ensure that we create secrets and services only when not found (#1145)</li>
+<li>Respect configured pg-wal when restoring (#1216)</li>
+<li>Filter out replicas from nodeToClusters map (#1194)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Use <code>ciclops</code> for test summary (#1064): rely on the ciclops GitHub action to
+  provide summaries of the E2E suite, inheriting improvements from that project</li>
+<li>Add backport pull request workflow (#965) - automatically backport patches to
+  release branches if they are so annotated</li>
+<li>Make the operator log level configurable in e2e test suite (#1094)</li>
+<li>Enable test execution based on labels (#951)</li>
+<li>Update Go version from 1.18 to 1.19 (#1166)</li>
+</ul>
+<h2 id="version-1172">Version 1.17.2</h2>
+<p><strong>Release date:</strong> Nov 10, 2022</p>
+<p>Security:</p>
+<ul>
+<li>Add <code>SeccomProfile</code> to Pods and Containers (#888)</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li><code>status</code> command for the <code>cnpg</code> plugin:</li>
+<li>Clarify display for fenced clusters (#886)</li>
+<li>Improve display for replica clusters (#871)</li>
+<li>Documentation:</li>
+<li>Improve monitoring page, providing instructions on how to evaluate the
+    observability capabilities of CloudNativePG on a local system using
+    Prometheus and Grafana (#968)</li>
+<li>Add page on design reasons for custom controller (#918)</li>
+<li>Set PostgreSQL 15.0 as the new default version (#821)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Import a database with <code>plpgsql</code> functions (#974)</li>
+<li>Properly find the closest backup when doing Point-in-time recovery (#949)</li>
+<li>Clarify that the <code>ScheduledBackup</code> format does not follow Kubernetes <code>CronJob</code>
+  format (#883)</li>
+<li>Bases the failover logic on the Postgres information from the instance
+  manager, rather than Kubernetes pod readiness, which could be stale (#890)</li>
+<li>Ensure we have a WAL to archive for every newly created cluster. The lack
+  could prevent backups from working (#897)</li>
+<li>Correct YAML key names for <code>barmanObjectStore</code> in documentation (#877)</li>
+<li>Fix <code>krew</code> release (#866)</li>
+</ul>
+<h2 id="version-1171">Version 1.17.1</h2>
+<p><strong>Release date:</strong> Oct 6, 2022</p>
+<p>Enhancements:</p>
+<ul>
+<li>Introduce <code>leaseDuration</code> and <code>renewDeadline</code> parameters in the controller
+   manager to enhance configuration of the leader election in operator
+   deployments (#759)</li>
+<li>Improve the mechanism that checks that the backup object store is empty
+   before archiving a WAL file for the first time: a new file called
+   <code>.check-empty-wal-archive</code> is placed in the <code>PGDATA</code> immediately after
+   the cluster is bootstrapped and it is then removed after the first WAL
+   file is successfully archived</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Explicitly set permissions of the instance manager binary that is copied in
+  the <code>distroless/static:nonroot</code> container image, by using the
+  <code>nonroot:nonroot</code> user (#754)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Drop any active connection on a standby after it is promoted to primary (#737)</li>
+<li>Honor <code>MAPPEDMETRIC</code> and <code>DURATION</code> metric types conversion in the native
+  Prometheus exporter  (#765)</li>
+<li>Ensure that timestamps that are specified with microsecond precision using the
+  PostgreSQL format are correctly parsed (#741)</li>
+</ul>
+<h2 id="version-1170">Version 1.17.0</h2>
+<p><strong>Release date:</strong> Sep 6, 2022 (minor release)</p>
+<p>Features:</p>
+<ul>
+<li><strong>Separate volume for WAL files:</strong> Support for separating Write Ahead Log
+  (WAL) and database data files onto different disks, potentially leading to
+  better performance on high write systems by easing I/O load on the data
+  directory. This option is controlled with the introduction of the optional
+  <code>walStorage</code>  section to separate WAL files (<code>pg_wal</code>) in a dedicated volume,
+  separate from the <code>PGDATA</code> defined in the main and mandatory <code>storage</code> section
+  (#513). Current limitations: <code>walStorage</code> can only be set at cluster creation
+  and cannot be added or removed when the cluster is up and running.</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li>Enable configuration of low-level network TCP settings in the PgBouncer
+  connection pooler implementation (#584)</li>
+<li>Make sure that the <code>cnpg.io/instanceName</code> and the <code>cnpg.io/podRole</code> labels
+  are always present on pods and PVCs (#632 and #680)</li>
+<li>Propagate the <code>role</code> label of an instance to the underlying PVC (#634)</li>
+<li>Introduce the <code>kubectl cnpg destroy</code> command to help remove an instance and
+  all the associated PVCs (#643)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Use <code>shared_preload_libraries</code> when bootstrapping the new cluster's primary
+  (#642)</li>
+<li>Prevent multiple in-place upgrade processes of the operator from running
+  simultaneously by atomically checking whether another one is in progress (#655)</li>
+<li>Avoid using a hardcoded file name to store the newly uploaded instance
+  manager, preventing a possible race condition during online upgrades of the
+  operator (#660)</li>
+<li>Prevent a panic from happening when invoking <code>GetAllAccessibleDatabases</code>
+  (#641)</li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../../..";</script>
+    <script src="../../../js/theme_extra.js"></script>
+    <script src="../../../js/theme.js"></script>
+      <script src="../../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/release_notes/old/v1.18/index.html b/assets/documentation/1.27.0-rc1/release_notes/old/v1.18/index.html
new file mode 100644
index 000000000..f63bf825d
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/old/v1.18/index.html
@@ -0,0 +1,607 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.18 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../../css/theme.css" />
+    <link rel="stylesheet" href="../../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.18";
+        var mkdocs_page_input_path = "release_notes/old/v1.18.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.18</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-118">Release notes for CloudNativePG 1.18</h1>
+<p>History of user-visible changes in the 1.18 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.18">commits</a>
+on the release branch in GitHub.</p>
+<h2 id="version-1185">Version 1.18.5</h2>
+<p><strong>Release date:</strong> June 12, 2023</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This is expected to be the last release in the 1.18.X series. 
+Users are encouraged to update to a newer minor version soon.</p>
+</div>
+<p>Enhancements:</p>
+<ul>
+<li>Add the <code>snapshot</code> command to the <code>cnpg</code> plugin to create a consistent cold
+  backup of the cluster from a standby using the Kubernetes <code>VolumeSnapshot</code>
+  standard resource (#1960)</li>
+<li>First implementation of recovery from a set of CSI VolumeSnapshot resources
+  via the <code>.spec.bootstrap.recovery.volumeSnapshot</code> stanza (#1960)</li>
+<li>Add <code>pg_failover_slots</code> to managed extensions (#2057)</li>
+<li>Improved Grafana dashboard with updated instructions in the documentation and
+  the quickstart guide (#1916)</li>
+<li>Introduce the <code>schemaOnly</code> option in the <code>import</code> stanza, to avoid exporting
+  and importing data when you bootstrap a new Postgres Cluster from one or more
+  existing databases (#2234)</li>
+<li>Add support for TopologySpreadConstraints to manage scheduling of instance
+  pods (#2202)</li>
+<li>Add <code>PodMonitor</code> support to the <code>Pooler</code>for PgBouncer (#2034)</li>
+<li>Add option to override the default Kubernetes scheduler (#2013)</li>
+<li>Allow configuration of deployment strategy of a <code>Pooler</code> resource (#1983)</li>
+<li>Update default PostgreSQL version to 15.3 (#2022)</li>
+<li>Use PgBouncer 1.19 by default (#2018)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Updated k8s kind tested versions (#2054)</li>
+<li>Use separate transactions to reconcile role credentials. Before this patch,
+  the operator would revert the synchronization of all roles if one failed
+  (#2004)</li>
+<li>Ensure fencing is removed during cluster restore (#1987)</li>
+<li>Improve logging when deleting Pods (#2136)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Fix unbound variable with k3s engine which could prevent setup on K3’s (#2157)</li>
+<li>Report the correct PG version in the metrics (#2126)</li>
+<li>Use the correct walStorage key in the documentation (#2140)</li>
+<li>Halt reconciliation when the operator cannot connect with the instances, and
+  provide a clear diagnostic on such occasions. This will help clarify cases
+  where network issues obstruct normal operation of CloudNativePG (#2145),
+  (#2233), and (#2242)</li>
+</ul>
+<h2 id="version-1184">Version 1.18.4</h2>
+<p><strong>Release date:</strong> April 27, 2023</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>CloudNativePG is dropping support for PostgreSQL 10, as PostgreSQL 10
+reached End-of-Life (EOL) in November 2022. Versions 11 and newer are
+supported. Please plan your migration to PostgreSQL 15 as soon as possible.
+Refer to <a href="https://cloudnative-pg.io/documentation/current/database_import/">"Importing Postgres databases"</a>
+for more information on PostgreSQL major offline upgrades.</p>
+</div>
+<p>Enhancements:</p>
+<ul>
+<li>Improve the <code>--logs</code> option of the <code>report</code> command of the <code>cnpg</code> plugin for
+  <code>kubectl</code> to also include the previous logs where available (#1811)</li>
+<li>The <code>-any</code> service is now disabled by default (#1755)</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Enable customization of <code>SeccompProfile</code> through override via a local file (#1827)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Apply the PostgreSQL configuration provided by the user during the <code>initdb</code>
+  bootstrap phase, before the server is started the first time (#1858)</li>
+</ul>
+<h2 id="version-1183">Version 1.18.3</h2>
+<p><strong>Release date:</strong> March 20, 2023</p>
+<p>Enhancements:</p>
+<ul>
+<li>Extend the <code>debug</code> cluster's log level to the <code>initdb</code> job (#1503)</li>
+<li>Support IPv6 and custom <code>pg_hba</code> for the PgBouncer pooler (#1395)</li>
+<li>Enhance observability of backups with two new metrics and additional
+  information in the status (#1428)</li>
+<li>Document API calls from the instance manager (#1641)</li>
+<li>Clarify deployment name via Helm (#1505)</li>
+<li>Add the <code>psql</code> command to the <code>cnpg</code> plugin for <code>kubectl</code> (#1668) allowing
+  the user to start a <code>psql</code> session with a pod (the primary by default)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Adopt Renovate for dependency tracking/updating (#1367, #1473)</li>
+<li>Inject binaries for all supported architectures in the operator image (#1513)</li>
+<li>Use the backup name to match resources in the backup object store (#1650)
+  Leverages the <code>--name</code> option introduced with Barman 3.3 to make the
+  association between backups and the object store more robust.</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Prevent panic with error handling in the probes (#1716)</li>
+<li>Ensure that the HTTP package and controller runtime logs are in JSON format (#1442)</li>
+<li>Adds WAL storage to a cluster in a single instance Cluster (#1570)</li>
+<li>Various improvements to make backup code more robust (#1536, #1564, #1588, #1466,  #1647)</li>
+<li>Properly show WAL archiving information with <code>status</code> command of the <code>cnpg</code> plugin (#1666)</li>
+<li>Ensure <code>nodeAffinity</code> is applied even if <code>AdditionalPodAffinity</code> and
+  <code>AdditionalPodAntiAffinity</code> are not set (#1663)</li>
+</ul>
+<h2 id="version-1182">Version 1.18.2</h2>
+<p><strong>Release date:</strong> Feb 14, 2023</p>
+<p>Enhancements:</p>
+<ul>
+<li>Introduce support for Kubernetes' projected volumes (#1269)</li>
+<li>Introduce support custom environment variables for finer control of the PostgreSQL
+  server process (#1275)</li>
+<li>Introduce the <code>backup</code> command in the <code>cnpg</code> plugin for <code>kubectl</code> to
+  issue a new base backup of the cluster (#1348)</li>
+<li>Improve support for the separate WAL volume feature by enabling users to move
+  WAL files to a dedicated volume on an existing Postgres cluster (#1066)</li>
+<li>Enhance WAL observability with additional metrics for the Prometheus
+  exporter, including values equivalent to the <code>min_wal_size</code>, <code>max_wal_size</code>,
+  <code>keep_wal_size</code>, <code>wal_keep_segments</code>, as well as the maximum number of WALs
+  that can be stored in the dedicated volume (#1382)</li>
+<li>Add a database comment on the <code>streaming_replica</code> user (#1349)</li>
+<li>Document the firewall issues with webhooks on GKE (#1364)</li>
+<li>Add note about postgresql.conf in <code>recovery</code> (#1211)</li>
+<li>Add instructions on installing plugin using packages (#1357)</li>
+<li>Specify Postgres versions supported by each minor release (#1355)</li>
+<li>Clarify the meaning of PVC group in CloudNativePG (#1344)</li>
+<li>Add an example of the DigitalOcean S3-compatible Spaces (#1289)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Added daily end-to-end smoke test for release branches (#1235)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Skip executing a <code>CHECKPOINT</code> as the <code>streaming_replica</code> user (#1408)</li>
+<li>Make <code>waitForWalArchiveWorking</code> resilient to connection errors (#1399)</li>
+<li>Ensure that the PVC roles are always consistent (#1380)</li>
+<li>Permit <code>walStorage</code> resize when using <code>pvcTemplate</code> (#1315)</li>
+<li>Ensure <code>ExecCommand</code> obeys timeout (#1242)</li>
+<li>Avoid <code>PodMonitor</code> reconcile if Prometheus is not installed (#1238)</li>
+<li>Avoid looking for <code>PodMonitor</code> when not needed (#1213)</li>
+</ul>
+<h2 id="version-1181">Version 1.18.1</h2>
+<p><strong>Release date:</strong> Dec 21, 2022</p>
+<p>Important announcements:</p>
+<ul>
+<li>Alert on the impending deprecation of <code>postgresql</code> as a label to identify the
+  CNPG cluster. In the remote case you have used this label, please start using
+  the <code>cnpg.io/cluster</code> label instead (#1130)</li>
+<li>Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his
+  consistent and impactful contributions (#1167)</li>
+<li>Remove ARMv7 support (#1092)</li>
+<li>FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life.</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li>Customize labels and annotations for the service account: add a service
+  account template that can be used, for example, to make authentication easier
+  via identity management on GKE or EKS via IRSA (#1105)</li>
+<li>Add <code>nodeAffinity</code> support (#1182) - allows for richer scheduling options</li>
+<li>Improve compatibility with Istio: add support for Istio's quit endpoint so
+  that jobs with Istio sidecars do not run indefinitely (#967)</li>
+<li>Allow fields remapping in JSON logs: helpful for use cases where the <code>level</code>
+  and <code>ts</code> fields might interfere with the  existing logging (#843)</li>
+<li>Add <code>fio</code> command to the kubectl-cnpg plugin (#1097)</li>
+<li>Add rpm/deb package for kubectl-cnpg plugin (#1008)</li>
+<li>Update default PostgreSQL version for new cluster definitions to 15.1 (#908)</li>
+<li>Documentation</li>
+<li>Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been
+    deprecated, in favor of instructions on monitoring in the Quickstart
+    documentation</li>
+<li>Link to the "Release updates" discussion (#1148) - the release updates
+    discussion will become the default channel for release announcements and
+    discussions</li>
+<li>Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains
+    how maintainers should proceed if they are not ready to continue
+    contributing</li>
+<li>Improve instructions on creating pull requests (#1132)</li>
+<li>Troubleshooting emergency backup instructions (#1184)</li>
+<li>Cover the Kubernetes layer in greater detail in the Architecture
+  documentation (#1432)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164)</li>
+<li>Ensure the PVC containing WALs is deleted when scaling down the cluster
+(#1135)</li>
+<li>Fix missing ApiVersion and Kind in the pgbench manifest when using <code>--dry-run</code>
+(#1088)</li>
+<li>Ensure that we create secrets and services only when not found (#1145)</li>
+<li>Respect configured pg-wal when restoring (#1216)</li>
+<li>Filter out replicas from nodeToClusters map (#1194)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Use <code>ciclops</code> for test summary (#1064): rely on the ciclops GitHub action to
+  provide summaries of the E2E suite, inheriting improvements from that project</li>
+<li>Add backport pull request workflow (#965) - automatically backport patches to
+  release branches if they are so annotated</li>
+<li>Make the operator log level configurable in e2e test suite (#1094)</li>
+<li>Enable test execution based on labels (#951)</li>
+<li>Update Go version from 1.18 to 1.19 (#1166)</li>
+</ul>
+<h2 id="version-1180">Version 1.18.0</h2>
+<p><strong>Release date:</strong> Nov 10, 2022</p>
+<p>Features:</p>
+<ul>
+<li><strong>Cluster-managed physical replication slots for High Availability</strong>:
+  automatically manages physical replication slots for each hot standby replica
+  in the High Availability cluster, both in the primary and the standby (#740)</li>
+<li><strong>Postgres cluster hibernation</strong>: introduces cluster hibernation via the plugin,
+  with a new subcommand <code>kubectl cnpg hibernate on/off/status &lt;cluster-name&gt;</code>.
+  Hibernation destroys all the resources generated by the cluster, except the
+  PVCs that belong to the PostgreSQL primary instance (#782)</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Add <code>SeccomProfile</code> to Pods and Containers (#888)</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li>Allow omitting the storage size in the cluster spec if there is a size request
+  in the <code>pvcTemplate</code> (#914)</li>
+<li><code>status</code> command for the <code>cnpg</code> plugin:</li>
+<li>Add replication slots information (#873)</li>
+<li>Clarify display for fenced clusters (#886)</li>
+<li>Improve display for replica clusters (#871)</li>
+<li>Documentation:</li>
+<li>Improve monitoring page, providing instructions on how to evaluate the
+    observability capabilities of CloudNativePG on a local system using
+    Prometheus and Grafana (#968)</li>
+<li>Add page on design reasons for custom controller (#918)</li>
+<li>Updates to the End-to-End Test Suite page (#945)</li>
+<li>New subcommands in the <code>cnpg</code> plugin:<ul>
+<li><code>pgbench</code> generates a job definition executing <code>pgbench</code> against a cluster
+(#958)</li>
+<li><code>install</code> generates an installation manifest for the operator (#944)</li>
+</ul>
+</li>
+<li>Set PostgreSQL 15.0 as the new default version (#821)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Import a database with <code>plpgsql</code> functions (#974)</li>
+<li>Properly find the closest backup when doing Point-in-time recovery (#949)</li>
+<li>Clarify that the <code>ScheduledBackup</code> format does not follow Kubernetes <code>CronJob</code>
+  format (#883)</li>
+<li>Bases the failover logic on the Postgres information from the instance
+  manager, rather than Kubernetes pod readiness, which could be stale (#890)</li>
+<li>Ensure we have a WAL to archive for every newly created cluster. The lack
+  could prevent backups from working (#897)</li>
+<li>Correct YAML key names for <code>barmanObjectStore</code> in documentation (#877)</li>
+<li>Fix <code>krew</code> release (#866)</li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../../..";</script>
+    <script src="../../../js/theme_extra.js"></script>
+    <script src="../../../js/theme.js"></script>
+      <script src="../../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/release_notes/old/v1.19/index.html b/assets/documentation/1.27.0-rc1/release_notes/old/v1.19/index.html
new file mode 100644
index 000000000..252593b16
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/old/v1.19/index.html
@@ -0,0 +1,676 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.19 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../../css/theme.css" />
+    <link rel="stylesheet" href="../../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.19";
+        var mkdocs_page_input_path = "release_notes/old/v1.19.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.19</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-119">Release notes for CloudNativePG 1.19</h1>
+<p>History of user-visible changes in the 1.19 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.19">commits</a>
+on the release branch in GitHub.</p>
+<h2 id="version-1196">Version 1.19.6</h2>
+<p><strong>Release date:</strong> Nov 3, 2023</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This is expected to be the last release in the 1.19.X series.
+Users are encouraged to update to a newer minor version soon.</p>
+</div>
+<p>Enhancements:</p>
+<ul>
+<li>Enhance the <code>status</code> command of the <code>cnpg</code> plugin for <code>kubectl</code> with progress
+  information on active streaming base backups (#3101)</li>
+<li>Allow the configuration of <code>max_prepared_statements</code> with the pgBouncer
+  <code>Pooler</code> resource (#3174)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Suspend WAL archiving during a switchover and resume it when it is completed
+  (#3227)</li>
+<li>Ensure that the instance manager always uses <code>synchronous_commit = local</code>
+  when managing the PostgreSQL cluster (#3143)</li>
+<li>Custom certificates for streaming replication user through
+  <code>.spec.certificates.replicationTLSSecret</code> are now working (#3209)</li>
+<li>Set the <code>cnpg.io/cluster</code> label to the <code>Pooler</code> pods (#3153)</li>
+</ul>
+<p>Changes:</p>
+<ul>
+<li>Stop using the <code>postgresql.auto.conf</code> file inside PGDATA to control Postgres
+  replication settings, and replace it with a file named <code>override.conf</code>(#2812)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Use extended query protocol for PostgreSQL in the instance manager (#3152)</li>
+</ul>
+<h2 id="version-1195">Version 1.19.5</h2>
+<p><strong>Release date:</strong> Oct 11, 2023</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Version 1.19 will reach its End-of-Life (EOL) on November 9, 2023.
+If you haven't done it yet, please start planning an upgrade
+as soon as possible.</p>
+</div>
+<p>Important Changes:</p>
+<ul>
+<li>Change the default value of <code>stopDelay</code> to 1800 seconds instead of 30 seconds
+  (#2848)</li>
+<li>Introduce a new parameter, called <code>smartShutdownTimeout</code>, to control the
+  window of time reserved for the smart shutdown of Postgres to complete; the
+  general formula to compute the overall timeout to stop Postgres is
+  <code>max(stopDelay -  smartShutdownTimeout, 30)</code> (#2848)</li>
+<li>Change the default value of <code>startDelay</code> to 3600, instead of 30 seconds
+  (#2847)</li>
+<li>Replace the livenessProbe initial delay with a more proper Kubernetes
+  startup probe to deal with the start of a Postgres server (#2847)</li>
+<li>Change the default value of <code>switchoverDelay</code> to 3600 seconds instead of
+  40000000 seconds (#2846)</li>
+<li>Stop supporting the <code>postgresql</code> label - replaced by <code>cnpg.io/cluster</code> in
+  1.18 (#2744)</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Add a default <code>seccompProfile</code> to the operator deployment (#2926)</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li>Introduce the <code>cnpg.io/coredumpFilter</code> annotation to control the content of a
+  core dump generated in the unlikely event of a PostgreSQL crash, by default
+  set to exclude shared memory segments from the dump (#2733)</li>
+<li>Allow to configure ephemeral-storage limits for the shared memory and
+  temporary data ephemeral volumes (#2830)</li>
+<li>Validate resource limits and requests through the webhook (#2663)</li>
+<li>Ensure that PostgreSQL's <code>shared_buffers</code> are coherent with the pods'
+  allocated memory resources (#2840)</li>
+<li>Add <code>uri</code> and <code>jdbc-uri</code> fields in the credential secrets to facilitate
+  developers when connecting their applications to the database (#2186)</li>
+<li>Add a new phase <code>Waiting for the instances to become active</code> for finer
+  control of a cluster's state waiting for the replicas to be ready (#2612)</li>
+<li>Improve detection of Pod rollout conditions through the <code>podSpec</code> annotation
+  (#2243)</li>
+<li>Add primary timestamp and uptime to the kubectl plugin's <code>status</code> command
+  (#2953)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Ensure that the primary instance is always recreated first by prioritizing
+  ready PVCs with a primary role (#2544)</li>
+<li>Honor the <code>cnpg.io/skipEmptyWalArchiveCheck</code> annotation during recovery to
+  bypass the check for an empty WAL archive (#2731)</li>
+<li>Prevent a cluster from being stuck when the PostgreSQL server is down but the
+  pod is up on the primary (#2966)</li>
+<li>Avoid treating the designated primary in a replica cluster as a regular HA
+  replica when replication slots are enabled (#2960)</li>
+<li>Reconcile services every time the selectors change or when labels/annotations
+  need to be changed (#2918)</li>
+<li>Defaults to <code>app</code> both the owner and database during recovery bootstrap
+  (#2957)</li>
+<li>Avoid write-read concurrency on cached cluster (#2884)</li>
+<li>Remove empty items, make them unique and sort in the <code>ResourceName</code> sections
+  of the generated roles (#2875)</li>
+<li>Ensure that the <code>ContinuousArchiving</code> condition is properly set to 'failed'
+  in case of errors (#2625)</li>
+<li>Make the <code>Backup</code> resource reconciliation cycle more resilient on
+  interruptions by stopping only if the backup is completed or failed (#2591)</li>
+<li>Reconcile PodMonitor <code>labels</code> and <code>annotations</code> (#2583)</li>
+<li>Fix backup failure due to missing RBAC <code>resourceNames</code> on the <code>Role</code> object
+  (#2956)</li>
+<li>
+<p>Observability:</p>
+<ul>
+<li>Add TCP port label to default <code>pg_stat_replication</code> metric (#2961)</li>
+<li>Fix the <code>pg_wal_stat</code> default metric for Prometheus (#2569)</li>
+<li>Improve the <code>pg_replication</code> default metric for Prometheus (#2744 and
+  #2750)</li>
+<li>Use <code>alertInstanceLabelFilter</code> instead of <code>alertName</code> in the provided
+  Grafana dashboard</li>
+<li>Enforce <code>standard_conforming_strings</code> in metric collection (#2888)</li>
+</ul>
+</li>
+</ul>
+<p>Changes:</p>
+<ul>
+<li>Set the default operand image to PostgreSQL 16.0</li>
+<li>Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt
+  an instance (#3051)</li>
+<li>Rename webhooks from kb.io to cnpg.io group (#2851)</li>
+<li>Let the <code>cnpg hibernate</code> plugin command use the
+  <code>ClusterManifestAnnotationName</code> and <code>PgControldataAnnotationName</code> annotations
+  on PVCs (#2657)</li>
+<li>Add the <code>cnpg.io/instanceRole</code> label while deprecating the existing <code>role</code>
+  label (#2915)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Replace <code>k8s-api-docgen</code> with <code>gen-crd-api-reference-docs</code> to automatically
+  build the API reference documentation (#2606)</li>
+</ul>
+<h2 id="version-1194">Version 1.19.4</h2>
+<p><strong>Release date:</strong> July 27, 2023</p>
+<p>Enhancements:</p>
+<ul>
+<li>New <code>logs</code> command in the kubectl plugin, to retrieve or follow the logs
+  of all pods in a cluster (#2375)</li>
+<li>Add support for specifying priorityClassName in pods, helping Kubernetes
+  make scheduling decisions (#2043)</li>
+<li>Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257)</li>
+<li>Various enhancements to the documentation:<ul>
+<li>Add troubleshooting instructions relating to hugepages (#1390)</li>
+<li>Extend the FAQs page (#2344)</li>
+</ul>
+</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Add a check at the start of the restore process to ensure it can proceed; give
+  improved error diagnostics if it cannot (#2419)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Ensure the logic of setting the recovery target matches that of Postgres (#2460)</li>
+<li>Prevent taking over service accounts not owned by the cluster, by setting
+  ownerMetadata only during service account creation (#2462)</li>
+<li>Ensure correct permissions of the PGDATA directory for initdb and restore (#2384)</li>
+<li>Prevent a possible crash of the instance manager during the configuration reload (#2393)</li>
+<li>Prevent the LastFailedArchiveTime alert from triggering if a new backup has been
+  successful after the failed ones (#1751)</li>
+<li>Prevent services from targeting non-instance pods (#2336)</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Updated all project dependencies to the latest versions</li>
+</ul>
+<h2 id="version-1193">Version 1.19.3</h2>
+<p><strong>Release date:</strong> June 12, 2023</p>
+<p>Enhancements:</p>
+<ul>
+<li>Add the <code>snapshot</code> command to the <code>cnpg</code> plugin to create a consistent cold
+  backup of the cluster from a standby using the Kubernetes <code>VolumeSnapshot</code>
+  standard resource (#1960)</li>
+<li>First implementation of recovery from a set of CSI VolumeSnapshot resources
+  via the <code>.spec.bootstrap.recovery.volumeSnapshot</code> stanza (#1960)</li>
+<li>Add <code>pg_failover_slots</code> to managed extensions (#2057)</li>
+<li>Improved Grafana dashboard with updated instructions in the documentation and
+  the quickstart guide (#1916)</li>
+<li>Introduce the <code>schemaOnly</code> option in the <code>import</code> stanza, to avoid exporting
+  and importing data when you bootstrap a new Postgres Cluster from one or more
+  existing databases (#2234)</li>
+<li>Add support for TopologySpreadConstraints to manage scheduling of instance
+  pods (#2202)</li>
+<li>Add <code>PodMonitor</code> support to the <code>Pooler</code>for PgBouncer (#2034)</li>
+<li>Add option to override the default Kubernetes scheduler (#2013)</li>
+<li>Allow configuration of deployment strategy of a <code>Pooler</code> resource (#1983)</li>
+<li>Update default PostgreSQL version to 15.3 (#2022)</li>
+<li>Use PgBouncer 1.19 by default (#2018)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Updated k8s kind tested versions (#2054)</li>
+<li>Use separate transactions to reconcile role credentials. Before this patch,
+  the operator would revert the synchronization of all roles if one failed
+  (#2004)</li>
+<li>Ensure fencing is removed during cluster restore (#1987)</li>
+<li>Improve logging when deleting Pods (#2136)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Fix unbound variable with k3d engine which could prevent setup on k3d (#2157)</li>
+<li>Report the correct PG version in the metrics (#2126)</li>
+<li>Use the correct walStorage key in the documentation (#2140)</li>
+<li>Halt reconciliation when the operator cannot connect with the instances, and
+  provide a clear diagnostic on such occasions. This will help clarify cases
+  where network issues obstruct normal operation of CloudNativePG (#2145),
+  (#2233), and (#2242)</li>
+</ul>
+<h2 id="version-1192">Version 1.19.2</h2>
+<p><strong>Release date:</strong> April 27, 2023</p>
+<p>Enhancements:</p>
+<ul>
+<li>Improve the <code>--logs</code> option of the <code>report</code> command of the <code>cnpg</code> plugin for
+  <code>kubectl</code> to also include the previous logs where available (#1811)</li>
+<li>The <code>-any</code> service is now disabled by default (#1755)</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Enable customization of <code>SeccompProfile</code> through override via a local file (#1827)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Apply the PostgreSQL configuration provided by the user during the <code>initdb</code>
+  bootstrap phase, before the server is started the first time (#1858)</li>
+</ul>
+<h2 id="version-1191">Version 1.19.1</h2>
+<p><strong>Release date:</strong> March 20, 2023</p>
+<p>Enhancements:</p>
+<ul>
+<li>Allow overriding the default backup target policy (#1602): previously, all
+  backups and scheduled backups would use the cluster-level target policy</li>
+<li>Extend the <code>debug</code> cluster's log level to the <code>initdb</code> job (#1503)</li>
+<li>Support IPv6 and custom <code>pg_hba</code> for the PgBouncer pooler (#1395)</li>
+<li>Enhance observability of backups with two new metrics and additional
+  information in the status (#1428)</li>
+<li>Document API calls from the instance manager (#1641)</li>
+<li>Clarify deployment name via Helm (#1505)</li>
+<li>Add the <code>psql</code> command to the <code>cnpg</code> plugin for <code>kubectl</code> (#1668) allowing
+  the user to start a <code>psql</code> session with a pod (the primary by default)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Adopt Renovate for dependency tracking/updating (#1367, #1473)</li>
+<li>Inject binaries for all supported architectures in the operator image (#1513)</li>
+<li>Use the backup name to match resources in the backup object store (#1650)
+  Leverages the <code>--name</code> option introduced with Barman 3.3 to make the
+  association between backups and the object store more robust.</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Prevent panic with error handling in the probes (#1716)</li>
+<li>Ensure that the HTTP package and controller runtime logs are in JSON format (#1442)</li>
+<li>Adds WAL storage to a cluster in a single instance Cluster (#1570)</li>
+<li>Various improvements to make backup code more robust (#1536, #1564, #1588, #1466,  #1647)</li>
+<li>Properly show WAL archiving information with <code>status</code> command of the <code>cnpg</code> plugin (#1666)</li>
+<li>Ensure <code>nodeAffinity</code> is applied even if <code>AdditionalPodAffinity</code> and
+  <code>AdditionalPodAntiAffinity</code> are not set (#1663)</li>
+<li>Introduce failover delay during OnlineUpgrading phase (#1728)
+  Previously, the online upgrade process could trigger failover logic
+  unnecessarily.</li>
+</ul>
+<h2 id="version-1190">Version 1.19.0</h2>
+<p><strong>Release date:</strong> Feb 14, 2023</p>
+<p>Important announcements:</p>
+<ul>
+<li>PostgreSQL version 10 is no longer supported as it has reached its EOL.
+  Versions 11 and newer are supported. Please plan your migration to
+  PostgreSQL 15 as soon as possible. Refer to
+  <a href="https://cloudnative-pg.io/documentation/current/database_import/">"Importing Postgres databases"</a>
+  for more information on PostgreSQL major offline upgrades.</li>
+</ul>
+<p>Features:</p>
+<ul>
+<li>Backup from a standby: introduce the <code>.spec.backup.target</code> option accepting
+  that when set to <code>prefer-standby</code> will run take the physical base backup from
+  the most aligned replica (#1162)</li>
+<li>Delayed failover: introduce the <code>failoverDelay</code> parameter to delay the
+  failover process once the primary has been detected unhealthy (#1366)</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li>Introduce support for Kubernetes' projected volumes (#1269)</li>
+<li>Introduce support custom environment variables for finer control of the
+  PostgreSQL server process (#1275)</li>
+<li>Introduce the <code>backup</code> command in the <code>cnpg</code> plugin for <code>kubectl</code> to
+  issue a new base backup of the cluster (#1348)</li>
+<li>Improve support for the separate WAL volume feature by enabling users to move
+  WAL files to a dedicated volume on an existing Postgres cluster (#1066)</li>
+<li>Enhance WAL observability with additional metrics for the Prometheus
+  exporter, including values equivalent to the <code>min_wal_size</code>, <code>max_wal_size</code>,
+  <code>keep_wal_size</code>, <code>wal_keep_segments</code>, as well as the maximum number of WALs
+  that can be stored in the dedicated volume (#1382)</li>
+<li>Add a database comment on the <code>streaming_replica</code> user (#1349)</li>
+<li>Document the firewall issues with webhooks on GKE (#1364)</li>
+<li>Add note about postgresql.conf in <code>recovery</code> (#1211)</li>
+<li>Add instructions on installing plugin using packages (#1357)</li>
+<li>Specify Postgres versions supported by each minor release (#1355)</li>
+<li>Clarify the meaning of PVC group in CloudNativePG (#1344)</li>
+<li>Add an example of the DigitalOcean S3-compatible Spaces (#1289)</li>
+<li>Update default PostgreSQL version for new cluster definitions to 15.2 (#1430)</li>
+<li>Cover the Kubernetes layer in greater detail in the Architecture
+  documentation (#1432)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Added daily end-to-end smoke test for release branches (#1235)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Skip executing a <code>CHECKPOINT</code> as the <code>streaming_replica</code> user (#1408)</li>
+<li>Make <code>waitForWalArchiveWorking</code> resilient to connection errors (#1399)</li>
+<li>Ensure that the PVC roles are always consistent (#1380)</li>
+<li>Permit <code>walStorage</code> resize when using <code>pvcTemplate</code> (#1315)</li>
+<li>Ensure <code>ExecCommand</code> obeys timeout (#1242)</li>
+<li>Avoid <code>PodMonitor</code> reconcile if Prometheus is not installed (#1238)</li>
+<li>Avoid looking for <code>PodMonitor</code> when not needed (#1213)</li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../../..";</script>
+    <script src="../../../js/theme_extra.js"></script>
+    <script src="../../../js/theme.js"></script>
+      <script src="../../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/release_notes/old/v1.20/index.html b/assets/documentation/1.27.0-rc1/release_notes/old/v1.20/index.html
new file mode 100644
index 000000000..19e7ab50f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/old/v1.20/index.html
@@ -0,0 +1,691 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.20 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../../css/theme.css" />
+    <link rel="stylesheet" href="../../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.20";
+        var mkdocs_page_input_path = "release_notes/old/v1.20.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.20</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-120">Release notes for CloudNativePG 1.20</h1>
+<p>History of user-visible changes in the 1.20 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.20">commits</a>
+on the release branch in GitHub.</p>
+<h2 id="version-1206">Version 1.20.6</h2>
+<p><strong>Release date:</strong> Feb 2, 2024</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This is expected to be the last release in the 1.20.X series.
+Users are encouraged to update to a newer minor version soon.</p>
+</div>
+<p>Enhancements:</p>
+<ul>
+<li>Tailor ephemeral volume storage in a Postgres cluster using a claim template
+  through the <code>ephemeralVolumeSource</code> option (#3678)</li>
+<li>Introduce the <code>pgadmin4</code> command in the <code>cnpg</code> plugin for <code>kubectl</code>,
+  providing a straightforward method to demonstrate connecting to a given
+  database cluster and navigate its content in a local environment such as kind -
+  for evaluation purposes only (#3701)</li>
+<li>Allow customization of PostgreSQL's ident map file via the
+  <code>.spec.postgresql.pg_ident</code> stanza, through a list of user name maps (#3534)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Prevent an unrecoverable issue with <code>pg_rewind</code> failing due to
+  <code>postgresql.auto.conf</code> being read-only on clusters where the <code>ALTER SYSTEM</code>
+  SQL command is disabled - the default (#3728)</li>
+<li>Reduce the risk of disk space shortage when using the import facility of the
+  <code>initdb</code> bootstrap method, by disabling the durability settings in the PostgreSQL
+  instance for the duration of the import process (#3743)</li>
+<li>Avoid pod restart due to erroneous resource quantity comparisons, e.g. "1 !=
+  1000m"  (#3706)</li>
+<li>Properly escape reserved characters in <code>pgpass</code> connection fields (#3713)</li>
+<li>Prevent systematic rollout of pods due to considering zero and nil different
+  values in <code>.spec.projectedVolumeTemplate.sources</code> (#3647)</li>
+</ul>
+<h2 id="version-1205">Version 1.20.5</h2>
+<p><strong>Release date:</strong> Dec 21, 2023</p>
+<p>Security:</p>
+<ul>
+<li>By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher
+  installations. Additionally, users can configure the <code>ssl_ciphers</code>,
+  <code>ssl_min_protocol_version</code>, and <code>ssl_max_protocol_version</code> GUCs (#3408).</li>
+<li>Integration of Docker image scanning with Dockle and Snyk to enhance security
+  measures (#3300).</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li>Improved reconciliation of external clusters (#3533).</li>
+<li>Introduction of the ability to enable/disable the <code>ALTER SYSTEM</code> command (#3535).</li>
+<li>Support for Prometheus' dynamic relabeling through the
+  <code>podMonitorMetricRelabelings</code> and <code>podMonitorRelabelings</code> options in the
+  <code>.spec.monitoring</code> stanza of the <code>Cluster</code> and <code>Pooler</code> resources (#3075).</li>
+<li>Elimination of the use of the <code>PGPASSFILE</code> environment variable when
+  establishing a network connection to PostgreSQL (#3522).</li>
+<li>Improved <code>cnpg report</code> plugin command by collecting a cluster's PVCs (#3357).</li>
+<li>Enhancement of the <code>cnpg status</code> plugin command, providing information about
+  managed roles, including alerts (#3310).</li>
+<li>Connection pooler:<ul>
+<li>Scaling down instances of a <code>Pooler</code> resource to 0 is now possible (#3517).</li>
+<li>Addition of the <code>cnpg.io/podRole</code> label with a value of 'pooler' to every
+  pooler deployment, differentiating them from instance pods (#3396).</li>
+</ul>
+</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Reconciliation of metadata, annotations, and labels of <code>PodDisruptionBudget</code>
+  resources (#3312 and #3434).</li>
+<li>Reconciliation of the metadata of the managed credential secrets (#3316).</li>
+<li>Resolution of a bug in the backup snapshot code where an error reading the
+  body would be handled as an overall error, leaving the backup process
+  indefinitely stuck (#3321).</li>
+<li>Implicit setting of online backup with the <code>cnpg backup</code> plugin command when
+  either <code>immediate-checkpoint</code> or <code>wait-for-archive</code> options are requested (#3449).</li>
+<li>Disabling of wal_sender_timeout when joining through pg_basebackup (#3586)</li>
+<li>Reloading of secrets used by external clusters (#3565)</li>
+<li>Connection pooler:<ul>
+<li>Ensuring the controller watches all secrets owned by a <code>Pooler</code> resource (#3428).</li>
+<li>Reconciliation of <code>RoleBinding</code> for <code>Pooler</code> resources (#3391).</li>
+<li>Reconciliation of <code>imagePullSecret</code> for <code>Pooler</code> resources (#3389).</li>
+<li>Reconciliation of the service of a <code>Pooler</code> and addition of the required labels (#3349).</li>
+<li>Extension of <code>Pooler</code> labels to the deployment as well, not just the pods (#3350).</li>
+</ul>
+</li>
+</ul>
+<p>Changes:</p>
+<ul>
+<li>Default operand image set to PostgreSQL 16.1 (#3270).</li>
+</ul>
+<h2 id="version-1204">Version 1.20.4</h2>
+<p><strong>Release date:</strong> Nov 3, 2023</p>
+<p>Enhancements:</p>
+<ul>
+<li>Enhance the <code>status</code> command of the <code>cnpg</code> plugin for <code>kubectl</code> with progress
+  information on active streaming base backups (#3101)</li>
+<li>Allow the configuration of <code>max_prepared_statements</code> with the pgBouncer
+  <code>Pooler</code> resource (#3174)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Suspend WAL archiving during a switchover and resume it when it is completed
+  (#3227)</li>
+<li>Ensure that the instance manager always uses <code>synchronous_commit = local</code>
+  when managing the PostgreSQL cluster (#3143)</li>
+<li>Custom certificates for streaming replication user through
+  <code>.spec.certificates.replicationTLSSecret</code> are now working (#3209)</li>
+<li>Set the <code>cnpg.io/cluster</code> label to the <code>Pooler</code> pods (#3153)</li>
+</ul>
+<p>Changes:</p>
+<ul>
+<li>Stop using the <code>postgresql.auto.conf</code> file inside PGDATA to control Postgres
+  replication settings, and replace it with a file named <code>override.conf</code> (#2812)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Use extended query protocol for PostgreSQL in the instance manager (#3152)</li>
+</ul>
+<h2 id="version-1203">Version 1.20.3</h2>
+<p><strong>Release date:</strong> Oct 11, 2023</p>
+<p>Important Changes:</p>
+<ul>
+<li>Change the default value of <code>stopDelay</code> to 1800 seconds instead of 30 seconds
+  (#2848)</li>
+<li>Introduce a new parameter, called <code>smartShutdownTimeout</code>, to control the
+  window of time reserved for the smart shutdown of Postgres to complete; the
+  general formula to compute the overall timeout to stop Postgres is
+  <code>max(stopDelay -  smartShutdownTimeout, 30)</code> (#2848)</li>
+<li>Change the default value of <code>startDelay</code> to 3600, instead of 30 seconds
+  (#2847)</li>
+<li>Replace the livenessProbe initial delay with a more proper Kubernetes
+  startup probe to deal with the start of a Postgres server (#2847)</li>
+<li>Change the default value of <code>switchoverDelay</code> to 3600 seconds instead of
+  40000000 seconds (#2846)</li>
+<li>Stop supporting the <code>postgresql</code> label - replaced by <code>cnpg.io/cluster</code> in
+  1.18 (#2744)</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Add a default <code>seccompProfile</code> to the operator deployment (#2926)</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li>Introduce the <code>cnpg.io/coredumpFilter</code> annotation to control the content of a
+  core dump generated in the unlikely event of a PostgreSQL crash, by default
+  set to exclude shared memory segments from the dump (#2733)</li>
+<li>Allow to configure ephemeral-storage limits for the shared memory and
+  temporary data ephemeral volumes (#2830)</li>
+<li>Validate resource limits and requests through the webhook (#2663)</li>
+<li>Ensure that PostgreSQL's <code>shared_buffers</code> are coherent with the pods'
+  allocated memory resources (#2840)</li>
+<li>Add <code>uri</code> and <code>jdbc-uri</code> fields in the credential secrets to facilitate
+  developers when connecting their applications to the database (#2186)</li>
+<li>Add a new phase <code>Waiting for the instances to become active</code> for finer
+  control of a cluster's state waiting for the replicas to be ready (#2612)</li>
+<li>Improve detection of Pod rollout conditions through the <code>podSpec</code> annotation
+  (#2243)</li>
+<li>Add primary timestamp and uptime to the kubectl plugin’s <code>status</code> command
+  (#2953)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Ensure that the primary instance is always recreated first by prioritizing
+  ready PVCs with a primary role (#2544)</li>
+<li>Honor the <code>cnpg.io/skipEmptyWalArchiveCheck</code> annotation during recovery to
+  bypass the check for an empty WAL archive (#2731)</li>
+<li>Prevent a cluster from being stuck when the PostgreSQL server is down but the
+  pod is up on the primary (#2966)</li>
+<li>Avoid treating the designated primary in a replica cluster as a regular HA
+  replica when replication slots are enabled (#2960)</li>
+<li>Reconcile services every time the selectors change or when labels/annotations
+  need to be changed (#2918)</li>
+<li>Defaults to <code>app</code> both the owner and database during recovery bootstrap
+  (#2957)</li>
+<li>Avoid write-read concurrency on cached cluster (#2884)</li>
+<li>Remove empty items, make them unique and sort in the <code>ResourceName</code> sections
+  of the generated roles (#2875)</li>
+<li>Ensure that the <code>ContinuousArchiving</code> condition is properly set to 'failed'
+  in case of errors (#2625)</li>
+<li>Make the <code>Backup</code> resource reconciliation cycle more resilient on
+  interruptions by stopping only if the backup is completed or failed (#2591)</li>
+<li>Reconcile PodMonitor <code>labels</code> and <code>annotations</code> (#2583)</li>
+<li>Fix backup failure due to missing RBAC <code>resourceNames</code> on the <code>Role</code> object
+  (#2956)</li>
+<li>
+<p>Observability:</p>
+<ul>
+<li>Add TCP port label to default <code>pg_stat_replication</code> metric (#2961)</li>
+<li>Fix the <code>pg_wal_stat</code> default metric for Prometheus (#2569)</li>
+<li>Improve the <code>pg_replication</code> default metric for Prometheus (#2744 and
+  #2750)</li>
+<li>Use <code>alertInstanceLabelFilter</code> instead of <code>alertName</code> in the provided
+  Grafana dashboard</li>
+<li>Enforce <code>standard_conforming_strings</code> in metric collection (#2888)</li>
+</ul>
+</li>
+</ul>
+<p>Changes:</p>
+<ul>
+<li>Set the default operand image to PostgreSQL 16.0</li>
+<li>Fencing now uses PostgreSQL’s fast shutdown instead of smart shutdown to halt
+  an instance (#3051)</li>
+<li>Rename webhooks from kb.io to cnpg.io group (#2851)</li>
+<li>Replace the <code>cnpg snapshot</code> command with <code>cnpg backup -m volumeSnapshot</code> for
+  the <code>kubectl</code> plugin</li>
+<li>Let the <code>cnpg hibernate</code> plugin command use the
+  <code>ClusterManifestAnnotationName</code> and <code>PgControldataAnnotationName</code> annotations
+  on PVCs (#2657)</li>
+<li>Add the <code>cnpg.io/instanceRole</code> label while deprecating the existing <code>role</code>
+  label (#2915)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Replace <code>k8s-api-docgen</code> with <code>gen-crd-api-reference-docs</code> to automatically
+  build the API reference documentation (#2606)</li>
+</ul>
+<h2 id="version-1202">Version 1.20.2</h2>
+<p><strong>Release date:</strong> July 27, 2023</p>
+<p>Enhancements:</p>
+<ul>
+<li>New <code>logs</code> command in the kubectl plugin, to retrieve or follow the logs
+  of all pods in a cluster (#2375)</li>
+<li>Add support for specifying priorityClassName in pods, helping Kubernetes
+  make scheduling decisions (#2043)</li>
+<li>Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257)</li>
+<li>Various enhancements to the documentation:<ul>
+<li>Add troubleshooting instructions relating to hugepages (#1390)</li>
+<li>Extend the FAQs page (#2344)</li>
+</ul>
+</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Add a check at the start of the restore process to ensure it can proceed; give
+  improved error diagnostics if it cannot (#2419)</li>
+<li>Improve handling of non-expiring passwords in managed roles (#2334)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Ensure the logic of setting the recovery target matches that of Postgres (#2460)</li>
+<li>Prevent taking over service accounts not owned by the cluster, by setting
+  ownerMetadata only during service account creation (#2462)</li>
+<li>Ensure correct permissions of the PGDATA directory for initdb and restore (#2384)</li>
+<li>Prevent a possible crash of the instance manager during the configuration reload (#2393)</li>
+<li>Prevent the LastFailedArchiveTime alert from triggering if a new backup has been
+  successful after the failed ones (#1751)</li>
+<li>Prevent services from targeting non-instance pods (#2336)</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Updated all project dependencies to the latest versions</li>
+</ul>
+<h2 id="version-1201">Version 1.20.1</h2>
+<p><strong>Release date:</strong> June 12, 2023</p>
+<p>Enhancements:</p>
+<ul>
+<li>Add the <code>snapshot</code> command to the <code>cnpg</code> plugin to create a consistent cold
+  backup of the cluster from a standby using the Kubernetes <code>VolumeSnapshot</code>
+  standard resource (#1960)</li>
+<li>First implementation of recovery from a set of CSI VolumeSnapshot resources
+  via the <code>.spec.bootstrap.recovery.volumeSnapshot</code> stanza (#1960)</li>
+<li>Add <code>pg_failover_slots</code> to managed extensions (#2057)</li>
+<li>Improved Grafana dashboard with updated instructions in the documentation and
+  the quickstart guide (#1916)</li>
+<li>Introduce the <code>schemaOnly</code> option in the <code>import</code> stanza, to avoid exporting
+  and importing data when you bootstrap a new Postgres Cluster from one or more
+  existing databases (#2234)</li>
+<li>Add support for TopologySpreadConstraints to manage scheduling of instance
+  pods (#2202)</li>
+<li>Add <code>PodMonitor</code> support to the <code>Pooler</code>for PgBouncer (#2034)</li>
+<li>Add option to override the default Kubernetes scheduler (#2013)</li>
+<li>Allow configuration of deployment strategy of a <code>Pooler</code> resource (#1983)</li>
+<li>Update default PostgreSQL version to 15.3 (#2022)</li>
+<li>Use PgBouncer 1.19 by default (#2018)</li>
+</ul>
+<p>Technical enhancements:</p>
+<ul>
+<li>Updated k8s kind tested versions (#2054)</li>
+<li>Declarative roles should ignore passwords if not set, easing management of
+  previously existing roles  (#2029)</li>
+<li>Use separate transactions to reconcile role credentials. Before this patch,
+  the operator would revert the synchronization of all roles if one failed
+  (#2004)</li>
+<li>Ensure fencing is removed during cluster restore (#1987)</li>
+<li>Improve logging when deleting Pods (#2136)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Fix unbound variable with k3s engine which could prevent setup on K3’s (#2157)</li>
+<li>Report the correct PG version in the metrics (#2126)</li>
+<li>Use the correct walStorage key in the documentation (#2140)</li>
+<li>Halt reconciliation when the operator cannot connect with the instances, and
+  provide a clear diagnostic on such occasions. This will help clarify cases
+  where network issues obstruct normal operation of CloudNativePG (#2145),
+  (#2233), and (#2242)</li>
+</ul>
+<h2 id="version-1200">Version 1.20.0</h2>
+<p><strong>Release date:</strong> April 27, 2023</p>
+<div class="admonition important">
+<p class="admonition-title">Important changes from previous versions</p>
+<p>CloudNativePG 1.20 introduces some changes to the default behavior of a
+few features for newly created <code>Cluster</code> resources, compared to previous
+versions of the operator. The goal of these changes is to improve the
+resilience of a Postgres cluster out of the box through convention over
+configuration. For clusters with one or more replicas:</p>
+<ul>
+<li>Backup from standby is now enabled by default, unless <code>target</code> is
+    explicitly set to <code>primary</code></li>
+<li>Restart of the primary is now the default method to complete the
+    unsupervised rolling update procedure (<code>primaryUpdateMethod</code>
+    defaults to <code>restart</code>, unless explicitly set to <code>switchover</code>)</li>
+</ul>
+<p>For further information, please refer to the "Installation and upgrades" section.</p>
+</div>
+<p>Features:</p>
+<ul>
+<li><strong>Declarative role management:</strong> introduce the <code>managed.roles</code> stanza in the
+  <code>Cluster</code> spec to provide full lifecycle management of database roles, by
+  providing an abstraction to the related DDL commands in PostgreSQL, such as
+  <code>CREATE ROLE</code> and <code>ALTER ROLE</code> (#1524, #1793 and #1815)</li>
+<li><strong>Declarative hibernation of a PostgreSQL cluster:</strong> introduce a new
+  annotation called <code>cnpg.io/hibernation</code> to declaratively hibernate a
+  PostgreSQL cluster by deleting all pods and keeping the PVCs only; the feature
+  also implements the inverse procedure (#1657)</li>
+</ul>
+<p>Enhancements:</p>
+<ul>
+<li>Improve the <code>--logs</code> option of the <code>report</code> command of the <code>cnpg</code> plugin for
+  <code>kubectl</code> to also include the previous logs where available (#1811)</li>
+<li>The <code>-any</code> service is now disabled by default (#1755)</li>
+</ul>
+<p>Security:</p>
+<ul>
+<li>Enable customization of <code>SeccompProfile</code> through override via a local file (#1827)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Apply the PostgreSQL configuration provided by the user during the <code>initdb</code>
+  bootstrap phase, before the server is started the first time (#1858)</li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../../..";</script>
+    <script src="../../../js/theme_extra.js"></script>
+    <script src="../../../js/theme.js"></script>
+      <script src="../../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/release_notes/old/v1.21/index.html b/assets/documentation/1.27.0-rc1/release_notes/old/v1.21/index.html
new file mode 100644
index 000000000..04b4d1e7a
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/old/v1.21/index.html
@@ -0,0 +1,794 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.21 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../../css/theme.css" />
+    <link rel="stylesheet" href="../../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.21";
+        var mkdocs_page_input_path = "release_notes/old/v1.21.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.21</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-121">Release notes for CloudNativePG 1.21</h1>
+<p>History of user-visible changes in the 1.21 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.21">commits</a>
+on the release branch in GitHub.</p>
+<h2 id="version-1216">Version 1.21.6</h2>
+<p><strong>Release date:</strong> Jun 12, 2024</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This is expected to be the last release in the 1.21.X series.
+Users are encouraged to update to a newer minor version soon.</p>
+</div>
+<h3 id="enhancements">Enhancements:</h3>
+<ul>
+<li>
+<p>Enabled configuration of standby-sensitive parameters during recovery using a
+  physical backup (#4564)</p>
+</li>
+<li>
+<p>Enabled the configuration of the liveness probe timeout via the
+  <code>.spec.livenessProbeTimeout</code> option (#4719)</p>
+</li>
+<li>
+<p><code>cnpg</code> plugin for <code>kubectl</code>:</p>
+<ul>
+<li>Enhanced support for ANSI colors in the plugin by adding the <code>--color</code>
+  option, which accepts <code>always</code>, <code>never</code>, and <code>auto</code> (default) as values
+  (#4775)</li>
+<li>The plugin is now available on Homebrew for macOS users (#4602)</li>
+</ul>
+</li>
+</ul>
+<h3 id="fixes">Fixes:</h3>
+<ul>
+<li>
+<p>Prevented fenced instances from entering an unnecessary loop and consuming
+  all available CPU (#4625)</p>
+</li>
+<li>
+<p>Resolved an issue where the instance manager on the primary would
+  indefinitely wait for the instance to start after encountering a failure
+  following a stop operation (#4434)</p>
+</li>
+<li>
+<p>Fixed an issue where the interaction between <code>hot_standby_feedback</code> and
+  managed cluster-level replication slots was preventing the autovacuum from
+  operating correctly; this issue was causing disk space to remain occupied by
+  dead tuples (#4811)</p>
+</li>
+<li>
+<p>Fixed a panic in the backup controller that occurred when pod container
+  statuses were missing (#4765)</p>
+</li>
+<li>
+<p>Prevented unnecessary shutdown of the instance manager (#4670)</p>
+</li>
+<li>
+<p>Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531)</p>
+</li>
+<li>
+<p>Prevented unnecessary reloads of the ident map by ensuring a consistent and
+  unique method of writing its content (#4648)</p>
+</li>
+<li>
+<p>Avoided conflicts during phase registration by patching the status of the
+  resource instead of updating it (#4637)</p>
+</li>
+<li>
+<p>Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504)</p>
+</li>
+<li>
+<p>Ensured that a replica cluster is restarted after promotion to properly set
+  the archive mode (#4399)</p>
+</li>
+<li>
+<p>Removed an unneeded concurrent keep-alive routine that was causing random
+  failures in volume snapshot backups (#4768)</p>
+</li>
+<li>
+<p>Ensured correct parsing of the additional rows field returned when the
+  <code>pgaudit.log_rows</code> option was enabled, preventing audit logs from being
+  incorrectly routed to the normal log stream (#4394)</p>
+</li>
+<li>
+<p><code>cnpg</code> plugin for <code>kubectl</code>:</p>
+<ul>
+<li>Resolved an issue with listing PDBs using the <code>cnpg status</code> command (#4530)</li>
+</ul>
+</li>
+</ul>
+<h3 id="changes">Changes</h3>
+<ul>
+<li>Default operand image set to PostgreSQL 16.3 (#4584)</li>
+<li>Removed all RBAC requirements on namespace objects (#4753)</li>
+</ul>
+<h2 id="version-1215">Version 1.21.5</h2>
+<p><strong>Release date:</strong> Apr 24, 2024</p>
+<h3 id="enhancements_1">Enhancements:</h3>
+<ul>
+<li>Users can now configure the <code>wal_log_hints</code> PostgreSQL parameter (#4218)
+  (#4218)</li>
+<li>Fully Qualified Domain Names (FQDN) in URIs for automatically generated
+  secrets (#4095)</li>
+<li>Cleanup of instance Pods not owned by the Cluster during Cluster restore
+  (#4141)</li>
+<li>Error detection when invoking <code>barman-cloud-wal-restore</code> in <code>recovery</code>
+  bootstrap (#4101)</li>
+</ul>
+<h3 id="fixes_1">Fixes:</h3>
+<ul>
+<li>Ensured that before a switchover, the elected replica is in streaming
+  replication (#4288)</li>
+<li>Correctly handle parsing errors of instances' LSN when sorting them (#4283)</li>
+<li>Recreate the primary Pod if there are no healthy standbys available to
+  promote (#4132)</li>
+<li>Cleanup <code>PGDATA</code> in case of failure of the restore job (#4151)</li>
+<li>Reload certificates on configuration update (#3705)</li>
+<li><code>cnpg</code> plugin for <code>kubectl</code>:<ul>
+<li>Improve the arguments handling of <code>destroy</code>, <code>fencing</code>, and <code>promote</code>
+  plugin commands (#4280)</li>
+<li>Correctly handle the percentage of the backup progress in <code>cnpg status</code>
+  (#4131)</li>
+<li>Gracefully handle databases with no sequences in <code>sync-sequences</code> command
+  (#4346)</li>
+</ul>
+</li>
+</ul>
+<h3 id="changes_1">Changes:</h3>
+<ul>
+<li>The Grafana dashboard now resides at
+  https://github.com/cloudnative-pg/grafana-dashboards (#4154)</li>
+</ul>
+<h2 id="version-1214">Version 1.21.4</h2>
+<p><strong>Release date:</strong> Mar 14, 2024</p>
+<h3 id="enhancements_2">Enhancements</h3>
+<ul>
+<li>Allow customization of the <code>wal_level</code> GUC in PostgreSQL (#4020)</li>
+<li>Add the <code>cnpg.io/skipWalArchiving</code> annotation to disable WAL archiving when
+  set to <code>enabled</code> (#4055)</li>
+<li>Enrich the <code>cnpg</code> plugin for <code>kubectl</code> with the <code>publication</code> and
+  <code>subscription</code> command groups to imperatively set up PostgreSQL native
+  logical replication (#4052)</li>
+<li>Allow customization of <code>CERTIFICATE_DURATION</code> and <code>EXPIRING_CHECK_THRESHOLD</code>
+  for automated management of TLS certificates handled by the operator (#3686)</li>
+<li>Introduce initial support for tab-completion with the <code>cnpg</code> plugin for
+  <code>kubectl</code> (#3875)</li>
+<li>Retrieve the correct architecture's binary from the corresponding catalog in
+  the running operator image during in-place updates, enabling the operator to
+  inject the correct binary into any Pod with a supported architecture (#3840)</li>
+</ul>
+<h3 id="fixes_2">Fixes</h3>
+<ul>
+<li>Properly synchronize PVC group labels with those on the pods, a critical
+  aspect when all pods are deleted and the operator needs to decide which Pod
+  to recreate first (#3930)</li>
+<li>Disable <code>wal_sender_timeout</code> when cloning a replica to prevent timeout errors
+  due to slow connections (#4080)</li>
+<li>Ensure that volume snapshots are ready before initiating recovery bootstrap
+  procedures, preventing an error condition where recovery with incomplete
+  backups could enter an error loop (#3663)</li>
+<li>Prevent an error loop when unsetting connection limits in managed roles (#3832)</li>
+<li>Resolve a corner case in hibernation where the instance pod has been deleted,
+  but the cluster status still has the hibernation condition set to false (#3970)</li>
+<li>Correctly detect Google Cloud capabilities for Barman Cloud (#3931)</li>
+</ul>
+<h3 id="security">Security</h3>
+<ul>
+<li>Use <code>Role</code> instead of <code>ClusterRole</code> for operator permissions in OLM,
+  requiring fewer privileges when installed on a per-namespace basis (#3855,
+  #3990)</li>
+<li>Enforce fully-qualified object names in SQL queries for the PgBouncer pooler
+  (#4080)</li>
+</ul>
+<h3 id="changes_2">Changes</h3>
+<ul>
+<li>Follow Kubernetes recommendations to switch from client-side to server-side
+  application of manifests, requiring the <code>--server-side</code> option by default
+  when installing the operator (#3729).</li>
+<li>Set the default operand image to PostgreSQL 16.2 (#3823).</li>
+</ul>
+<h2 id="version-1213">Version 1.21.3</h2>
+<p><strong>Release date:</strong> Feb 2, 2024</p>
+<h3 id="enhancements_3">Enhancements:</h3>
+<ul>
+<li>Tailor ephemeral volume storage in a Postgres cluster using a claim template
+  through the <code>ephemeralVolumeSource</code> option (#3678)</li>
+<li>Introduce the <code>pgadmin4</code> command in the <code>cnpg</code> plugin for <code>kubectl</code>,
+  providing a straightforward method to demonstrate connecting to a given
+  database cluster and navigate its content in a local environment such as kind -
+  for evaluation purposes only (#3701)</li>
+<li>Allow customization of PostgreSQL's ident map file via the
+  <code>.spec.postgresql.pg_ident</code> stanza, through a list of user name maps (#3534)</li>
+</ul>
+<h3 id="fixes_3">Fixes:</h3>
+<ul>
+<li>Prevent an unrecoverable issue with <code>pg_rewind</code> failing due to
+  <code>postgresql.auto.conf</code> being read-only on clusters where the <code>ALTER SYSTEM</code>
+  SQL command is disabled - the default (#3728)</li>
+<li>Reduce the risk of disk space shortage when using the import facility of the
+  <code>initdb</code> bootstrap method, by disabling the durability settings in the PostgreSQL
+  instance for the duration of the import process (#3743)</li>
+<li>Avoid pod restart due to erroneous resource quantity comparisons, e.g. "1 !=
+  1000m"  (#3706)</li>
+<li>Properly escape reserved characters in <code>pgpass</code> connection fields (#3713)</li>
+<li>Prevent systematic rollout of pods due to considering zero and nil different
+  values in <code>.spec.projectedVolumeTemplate.sources</code> (#3647)</li>
+<li>Ensure configuration coherence by pruning from <code>postgresql.auto.conf</code> any
+  options now incorporated into <code>override.conf</code> (#3773)</li>
+</ul>
+<h2 id="version-1212">Version 1.21.2</h2>
+<p><strong>Release date:</strong> Dec 21, 2023</p>
+<h3 id="security_1">Security:</h3>
+<ul>
+<li>By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher
+  installations. Additionally, users can configure the <code>ssl_ciphers</code>,
+  <code>ssl_min_protocol_version</code>, and <code>ssl_max_protocol_version</code> GUCs (#3408).</li>
+<li>Integration of Docker image scanning with Dockle and Snyk to enhance security
+  measures (#3300).</li>
+</ul>
+<h3 id="enhancements_4">Enhancements:</h3>
+<ul>
+<li>Improved reconciliation of external clusters (#3533).</li>
+<li>Introduction of the ability to enable/disable the <code>ALTER SYSTEM</code> command (#3535).</li>
+<li>Support for Prometheus' dynamic relabeling through the
+  <code>podMonitorMetricRelabelings</code> and <code>podMonitorRelabelings</code> options in the
+  <code>.spec.monitoring</code> stanza of the <code>Cluster</code> and <code>Pooler</code> resources (#3075).</li>
+<li>Enhanced computation of the first recoverability point and last successful
+  backup by considering volume snapshots alongside object-store backups (#2940). <!-- NO 1.20 --></li>
+<li>Elimination of the use of the <code>PGPASSFILE</code> environment variable when
+  establishing a network connection to PostgreSQL (#3522).</li>
+<li>Improved <code>cnpg report</code> plugin command by collecting a cluster's PVCs (#3357).</li>
+<li>Enhancement of the <code>cnpg status</code> plugin command, providing information about
+  managed roles, including alerts (#3310).</li>
+<li>Introduction of Red Hat UBI 8 container images for the operator, suitable for
+  OLM deployments. <!-- NO 1.20 --></li>
+<li>Connection pooler:<ul>
+<li>Scaling down instances of a <code>Pooler</code> resource to 0 is now possible (#3517).</li>
+<li>Addition of the <code>cnpg.io/podRole</code> label with a value of 'pooler' to every
+  pooler deployment, differentiating them from instance pods (#3396).</li>
+</ul>
+</li>
+</ul>
+<h3 id="fixes_4">Fixes:</h3>
+<ul>
+<li>Reconciliation of metadata, annotations, and labels of <code>PodDisruptionBudget</code>
+  resources (#3312 and #3434).</li>
+<li>Reconciliation of the metadata of the managed credential secrets (#3316).</li>
+<li>Resolution of a bug in the backup snapshot code where an error reading the
+  body would be handled as an overall error, leaving the backup process
+  indefinitely stuck (#3321).</li>
+<li>Implicit setting of online backup with the <code>cnpg backup</code> plugin command when
+  either <code>immediate-checkpoint</code> or <code>wait-for-archive</code> options are requested (#3449).</li>
+<li>Disabling of wal_sender_timeout when joining through pg_basebackup (#3586)</li>
+<li>Reloading of secrets used by external clusters (#3565)</li>
+<li>Connection pooler:<ul>
+<li>Ensuring the controller watches all secrets owned by a <code>Pooler</code> resource (#3428).</li>
+<li>Reconciliation of <code>RoleBinding</code> for <code>Pooler</code> resources (#3391).</li>
+<li>Reconciliation of <code>imagePullSecret</code> for <code>Pooler</code> resources (#3389).</li>
+<li>Reconciliation of the service of a <code>Pooler</code> and addition of the required labels (#3349).</li>
+<li>Extension of <code>Pooler</code> labels to the deployment as well, not just the pods (#3350).</li>
+</ul>
+</li>
+</ul>
+<h3 id="changes_3">Changes:</h3>
+<ul>
+<li>Default operand image set to PostgreSQL 16.1 (#3270).</li>
+</ul>
+<h2 id="version-1211">Version 1.21.1</h2>
+<p><strong>Release date:</strong> Nov 3, 2023</p>
+<h3 id="enhancements_5">Enhancements:</h3>
+<ul>
+<li>Introduce support for online/hot backups with volume snapshots by using the
+  PostgreSQL API for physical online base backups. Default configuration for
+  hot/cold backups on a given Postgres cluster can be controlled through the
+  <code>online</code> option and the <code>onlineConfiguration</code> stanza in
+  <code>.spec.backup.volumeSnapshot</code>. Unless explicitly set, backups on volume
+  snapshots are now taken online by default (#3102)</li>
+<li>Introduce the possibility to override the above default settings on volume
+  snapshot backup using the <code>ScheduledBackup</code> and <code>Backup</code> resources (#3208, #3226)</li>
+<li>Enhance cold backup on volume snapshots by reducing the time window in which
+  the target instance (standby or primary) is fenced, by lifting it as soon as
+  the volume snapshot have been cut and provisioned (#3210)</li>
+<li>During a recovery from volume snapshots, ensure that the provided volume
+  snapshots are coherent by validating the existing labels and annotations</li>
+<li>The <code>backup</code> command of the <code>cnpg</code> plugin for <code>kubectl</code> improves the volume
+  snapshot backup experience through the <code>--online</code>, <code>--immediate-checkpoint</code>,
+  and <code>--wait-for-archive</code> runtime options</li>
+<li>Enhance the <code>status</code> command of the <code>cnpg</code> plugin for <code>kubectl</code> with progress
+  information on active streaming base backups (#3101)</li>
+<li>Allow the configuration of <code>max_prepared_statements</code> with the pgBouncer
+  <code>Pooler</code> resource (#3174)</li>
+</ul>
+<h3 id="fixes_5">Fixes:</h3>
+<ul>
+<li>Suspend WAL archiving during a switchover and resume it when it is completed
+  (#3227)</li>
+<li>Ensure that the instance manager always uses <code>synchronous_commit = local</code>
+  when managing the PostgreSQL cluster (#3143)</li>
+<li>Custom certificates for streaming replication user through
+  <code>.spec.certificates.replicationTLSSecret</code> are now working (#3209)</li>
+<li>Set the <code>cnpg.io/cluster</code> label to the <code>Pooler</code> pods (#3153)</li>
+<li>Reduce the number of labels in <code>VolumeSnapshots</code> resources and render them
+  into more appropriate annotations (#3151)</li>
+</ul>
+<h3 id="changes_4">Changes:</h3>
+<ul>
+<li>Volume snapshot backups, introduced in 1.21.0, are now online/hot by default;
+  in order to restore offline/cold backups set <code>.spec.backup.volumeSnapshot</code> to
+  <code>false</code></li>
+<li>Stop using the <code>postgresql.auto.conf</code> file inside PGDATA to control Postgres
+  replication settings, and replace it with a file named <code>override.conf</code> (#2812)</li>
+</ul>
+<h3 id="technical-enhancements">Technical enhancements:</h3>
+<ul>
+<li>Use extended query protocol for PostgreSQL in the instance manager (#3152)</li>
+</ul>
+<h2 id="version-1210">Version 1.21.0</h2>
+<p><strong>Release date:</strong> Oct 12, 2023</p>
+<div class="admonition important">
+<p class="admonition-title">Important changes from previous versions</p>
+<p>This release contains a few changes to the default settings of
+CloudNativePG with the goal to improve general stability and security through
+predefined values. If you are upgrading from a previous version, please
+carefully read the "Important Changes" section below, as well as the
+upgrade documentation.</p>
+</div>
+<h3 id="features">Features:</h3>
+<ul>
+<li>
+<p><strong>Volume Snapshot support for backup and recovery:</strong> leverage the standard
+  Kubernetes API on Volume Snapshots to take advantage of capabilities like
+  incremental and differential copy for both backup and recovery operations. This
+  first step, covering cold backups from a standby, will continue in 1.22 with
+  support for hot backups using the PostgreSQL API and tablespaces.</p>
+</li>
+<li>
+<p><strong>OLM installation method</strong>: introduce support for Operator Lifecycle Manager
+  via OperatorHub.io for the latest patch version of the latest minor release
+  through the <em>stable</em> channel. Many thanks to EDB for donating the bundle of
+  their "EDB Postgres for Kubernetes" operator and adapting it for CloudNativePG.</p>
+</li>
+</ul>
+<h3 id="important-changes">Important Changes:</h3>
+<ul>
+<li>Change the default value of <code>stopDelay</code> to 1800 seconds instead of 30 seconds
+  (#2848)</li>
+<li>Introduce a new parameter, called <code>smartShutdownTimeout</code>, to control the
+  window of time reserved for the smart shutdown of Postgres to complete; the
+  general formula to compute the overall timeout to stop Postgres is
+  <code>max(stopDelay -  smartShutdownTimeout, 30)</code> (#2848)</li>
+<li>Change the default value of <code>startDelay</code> to 3600, instead of 30 seconds
+  (#2847)</li>
+<li>Replace the livenessProbe initial delay with a more proper Kubernetes
+  startup probe to deal with the start of a Postgres server (#2847)</li>
+<li>Change the default value of <code>switchoverDelay</code> to 3600 seconds instead of
+  40000000 seconds (#2846)</li>
+<li>Disable superuser access by default for security (#2905)</li>
+<li>Enable replication slots for HA by default (#2903)</li>
+<li>Stop supporting the <code>postgresql</code> label - replaced by <code>cnpg.io/cluster</code> in
+  1.18 (#2744)</li>
+</ul>
+<h3 id="security_2">Security:</h3>
+<ul>
+<li>Add a default <code>seccompProfile</code> to the operator deployment (#2926)</li>
+</ul>
+<h3 id="enhancements_6">Enhancements:</h3>
+<ul>
+<li>Enable bootstrap of a replica cluster from a consistent set of volume
+  snapshots (#2647)</li>
+<li>Enable full and Point In Time recovery from a consistent set of volume
+  snapshots (#2390)</li>
+<li>Introduce the <code>cnpg.io/coredumpFilter</code> annotation to control the content of a
+  core dump generated in the unlikely event of a PostgreSQL crash, by default
+  set to exclude shared memory segments from the dump (#2733)</li>
+<li>Allow to configure ephemeral-storage limits for the shared memory and
+  temporary data ephemeral volumes (#2830)</li>
+<li>Validate resource limits and requests through the webhook (#2663)</li>
+<li>Ensure that PostgreSQL's <code>shared_buffers</code> are coherent with the pods'
+  allocated memory resources (#2840)</li>
+<li>Add <code>uri</code> and <code>jdbc-uri</code> fields in the credential secrets to facilitate
+  developers when connecting their applications to the database (#2186)</li>
+<li>Add a new phase <code>Waiting for the instances to become active</code> for finer
+  control of a cluster's state waiting for the replicas to be ready (#2612)</li>
+<li>Improve detection of Pod rollout conditions through the <code>podSpec</code> annotation
+  (#2243)</li>
+<li>Add primary timestamp and uptime to the kubectl plugin's <code>status</code> command
+  (#2953)</li>
+</ul>
+<h3 id="fixes_6">Fixes:</h3>
+<ul>
+<li>Ensure that the primary instance is always recreated first by prioritizing
+  ready PVCs with a primary role (#2544)</li>
+<li>Honor the <code>cnpg.io/skipEmptyWalArchiveCheck</code> annotation during recovery to
+  bypass the check for an empty WAL archive (#2731)</li>
+<li>Prevent a cluster from being stuck when the PostgreSQL server is down but the
+  pod is up on the primary (#2966)</li>
+<li>Avoid treating the designated primary in a replica cluster as a regular HA
+  replica when replication slots are enabled (#2960)</li>
+<li>Reconcile services every time the selectors change or when labels/annotations
+  need to be changed (#2918)</li>
+<li>Defaults to <code>app</code> both the owner and database during recovery bootstrap
+  (#2957)</li>
+<li>Avoid write-read concurrency on cached cluster (#2884)</li>
+<li>Remove empty items, make them unique and sort in the <code>ResourceName</code> sections
+  of the generated roles (#2875)</li>
+<li>Ensure that the <code>ContinuousArchiving</code> condition is properly set to 'failed'
+  in case of errors (#2625)</li>
+<li>Make the <code>Backup</code> resource reconciliation cycle more resilient on
+  interruptions by stopping only if the backup is completed or failed (#2591)</li>
+<li>Reconcile PodMonitor <code>labels</code> and <code>annotations</code> (#2583)</li>
+<li>Fix backup failure due to missing RBAC <code>resourceNames</code> on the <code>Role</code> object
+  (#2956)</li>
+<li>
+<p>Observability:</p>
+<ul>
+<li>Add TCP port label to default <code>pg_stat_replication</code> metric (#2961)</li>
+<li>Fix the <code>pg_wal_stat</code> default metric for Prometheus (#2569)</li>
+<li>Improve the <code>pg_replication</code> default metric for Prometheus (#2744 and
+  #2750)</li>
+<li>Use <code>alertInstanceLabelFilter</code> instead of <code>alertName</code> in the provided
+  Grafana dashboard</li>
+<li>Enforce <code>standard_conforming_strings</code> in metric collection (#2888)</li>
+</ul>
+</li>
+</ul>
+<h3 id="changes_5">Changes:</h3>
+<ul>
+<li>Set the default operand image to PostgreSQL 16.0</li>
+<li>Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt
+  an instance (#3051)</li>
+<li>Rename webhooks from kb.io to cnpg.io group (#2851)</li>
+<li>Replace the <code>cnpg snapshot</code> command with <code>cnpg backup -m volumeSnapshot</code> for
+  the <code>kubectl</code> plugin</li>
+<li>Let the <code>cnpg hibernate</code> plugin command use the
+  <code>ClusterManifestAnnotationName</code> and <code>PgControldataAnnotationName</code> annotations
+  on PVCs (#2657)</li>
+<li>Add the <code>cnpg.io/instanceRole</code> label while deprecating the existing <code>role</code>
+  label (#2915)</li>
+</ul>
+<h3 id="technical-enhancements_1">Technical enhancements:</h3>
+<ul>
+<li>Replace <code>k8s-api-docgen</code> with <code>gen-crd-api-reference-docs</code> to automatically
+  build the API reference documentation (#2606)</li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../../..";</script>
+    <script src="../../../js/theme_extra.js"></script>
+    <script src="../../../js/theme.js"></script>
+      <script src="../../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/release_notes/old/v1.22/index.html b/assets/documentation/1.27.0-rc1/release_notes/old/v1.22/index.html
new file mode 100644
index 000000000..9122981fb
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/old/v1.22/index.html
@@ -0,0 +1,694 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.22 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../../css/theme.css" />
+    <link rel="stylesheet" href="../../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.22";
+        var mkdocs_page_input_path = "release_notes/old/v1.22.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.22</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-122">Release notes for CloudNativePG 1.22</h1>
+<p>History of user-visible changes in the 1.22 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.22">commits</a>
+on the release branch in GitHub.</p>
+<h2 id="version-1225">Version 1.22.5</h2>
+<p><strong>Release date:</strong> Jul 29, 2024</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This is expected to be the last release in the 1.22.X series.
+Users are encouraged to update to a newer minor version soon.</p>
+</div>
+<h3 id="enhancements">Enhancements:</h3>
+<ul>
+<li>Add transparent support for PostgreSQL 17's <code>allow_alter_system</code> parameter,
+  enabling or disabling the <code>ALTER SYSTEM</code> command through the
+  <code>.spec.postgresql.enableAlterSystem</code> option (#4921).</li>
+<li>Introduce the <code>reconcilePodSpec</code> annotation on the <code>Cluster</code> and <code>Pooler</code>
+  resources to control the restart of pods following a change in the Pod
+  specification (#5069).</li>
+<li>Support the new metrics introduced in PgBouncer 1.23 in the <code>Pooler</code> metrics
+  collector (#5044).</li>
+</ul>
+<h3 id="fixes">Fixes:</h3>
+<ul>
+<li>Enhance the mechanism for detecting Pods that have been terminated but not
+  deleted during an eviction process, and extend the cleanup process during
+  maintenance windows to include unschedulable Pods when the <code>reusePVC</code> flag is
+  set to false (#2056).</li>
+<li>Disable <code>pg_rewind</code> execution for newly created replicas that employ
+  VolumeSnapshot during bootstrapping to avoid introducing a new shutdown
+  checkpoint entry in the WAL files. This ensures that replicas can reconnect to
+  the primary without issues, which would otherwise be hindered by the additional
+  checkpoint entry (#5081).</li>
+<li>Gracefully handle failures during the initialization of a new instance.
+  Any remaining data from the failed initialization is now either removed or,
+  if it's a valid PostgreSQL data directory, moved to a backup location to avoid
+  possible data loss (#5112).</li>
+<li>Enhance the robustness of the immediate backups reconciler by implementing
+  retry logic upon initial backup failure (#4982).</li>
+<li>Wait for the <code>postmaster</code> to shut down before starting it again (#4938).</li>
+<li>Exclude immutable databases from <code>pg_database</code> metric monitoring and alerting
+  processes (#4980).</li>
+<li>Removed unnecessary permissions from the operator service account (#4911).</li>
+<li>Ensure the operator initiates a rollout of the <code>Pooler</code> instance when
+  the operator image is upgraded (#5006)</li>
+<li>Address race condition causing the readiness probe to incorrectly
+  show "not ready" after a PostgreSQL restart, even when the
+  <code>postmaster</code> was accessible (#4920).</li>
+<li>Prevent reconciliation of resources that aren't owned by a <code>Pooler</code> (#4967).</li>
+<li>Renew the certificates managed by the operator when the DNS Subject
+  Alternative Names (SANs) are updated (#3269, #3319).</li>
+<li>Set PVC default <code>AccessModes</code> in the template only when unspecified (#4845).</li>
+<li>Gracefully handle unsatisfiable backup schedule (#5109).</li>
+<li><code>cnpg</code> plugin:</li>
+<li>Properly handle errors during the <code>status</code> command execution.</li>
+<li>Support TLS in the <code>status</code> command (#4915).</li>
+</ul>
+<h2 id="version-1224">Version 1.22.4</h2>
+<p><strong>Release date:</strong> Jun 12, 2024</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Version 1.22 is approaching its End-of-Life (EOL) on Jul 24, 2024.
+If you haven't already, please begin planning for an upgrade promptly to
+ensure continued support and security.</p>
+</div>
+<h3 id="enhancements_1">Enhancements:</h3>
+<ul>
+<li>
+<p>Enabled configuration of standby-sensitive parameters during recovery using a
+  physical backup (#4564)</p>
+</li>
+<li>
+<p>Enabled the configuration of the liveness probe timeout via the
+  <code>.spec.livenessProbeTimeout</code> option (#4719)</p>
+</li>
+<li>
+<p><code>cnpg</code> plugin for <code>kubectl</code>:</p>
+<ul>
+<li>Enhanced support for ANSI colors in the plugin by adding the <code>--color</code>
+  option, which accepts <code>always</code>, <code>never</code>, and <code>auto</code> (default) as values
+  (#4775)</li>
+<li>The plugin is now available on Homebrew for macOS users (#4602)</li>
+</ul>
+</li>
+</ul>
+<h3 id="fixes_1">Fixes:</h3>
+<ul>
+<li>
+<p>Prevented fenced instances from entering an unnecessary loop and consuming
+  all available CPU (#4625)</p>
+</li>
+<li>
+<p>Resolved an issue where the instance manager on the primary would
+  indefinitely wait for the instance to start after encountering a failure
+  following a stop operation (#4434)</p>
+</li>
+<li>
+<p>Fixed an issue where the interaction between <code>hot_standby_feedback</code> and
+  managed cluster-level replication slots was preventing the autovacuum from
+  operating correctly; this issue was causing disk space to remain occupied by
+  dead tuples (#4811)</p>
+</li>
+<li>
+<p>Fixed a panic in the backup controller that occurred when pod container
+  statuses were missing (#4765)</p>
+</li>
+<li>
+<p>Prevented unnecessary shutdown of the instance manager (#4670)</p>
+</li>
+<li>
+<p>Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531)</p>
+</li>
+<li>
+<p>Prevented unnecessary reloads of the ident map by ensuring a consistent and
+  unique method of writing its content (#4648)</p>
+</li>
+<li>
+<p>Avoided conflicts during phase registration by patching the status of the
+  resource instead of updating it (#4637)</p>
+</li>
+<li>
+<p>Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504)</p>
+</li>
+<li>
+<p>Ensured that a replica cluster is restarted after promotion to properly set
+  the archive mode (#4399)</p>
+</li>
+<li>
+<p>Removed an unneeded concurrent keep-alive routine that was causing random
+  failures in volume snapshot backups (#4768)</p>
+</li>
+<li>
+<p>Ensured correct parsing of the additional rows field returned when the
+  <code>pgaudit.log_rows</code> option was enabled, preventing audit logs from being
+  incorrectly routed to the normal log stream (#4394)</p>
+</li>
+<li>
+<p><code>cnpg</code> plugin for <code>kubectl</code>:</p>
+<ul>
+<li>Resolved an issue with listing PDBs using the <code>cnpg status</code> command (#4530)</li>
+</ul>
+</li>
+</ul>
+<h3 id="changes">Changes</h3>
+<ul>
+<li>Default operand image set to PostgreSQL 16.3 (#4584)</li>
+<li>Removed all RBAC requirements on namespace objects (#4753)</li>
+</ul>
+<h2 id="version-1223">Version 1.22.3</h2>
+<p><strong>Release date:</strong> Apr 24, 2024</p>
+<h3 id="enhancements_2">Enhancements:</h3>
+<ul>
+<li>Users can now configure the <code>wal_log_hints</code> PostgreSQL parameter (#4218)
+  (#4218)</li>
+<li>Fully Qualified Domain Names (FQDN) in URIs for automatically generated
+  secrets (#4095)</li>
+<li>Cleanup of instance Pods not owned by the Cluster during Cluster restore
+  (#4141)</li>
+<li>Error detection when invoking <code>barman-cloud-wal-restore</code> in <code>recovery</code>
+  bootstrap (#4101)</li>
+</ul>
+<h3 id="fixes_2">Fixes:</h3>
+<ul>
+<li>Ensured that before a switchover, the elected replica is in streaming
+  replication (#4288)</li>
+<li>Correctly handle parsing errors of instances' LSN when sorting them (#4283)</li>
+<li>Recreate the primary Pod if there are no healthy standbys available to
+  promote (#4132)</li>
+<li>Cleanup <code>PGDATA</code> in case of failure of the restore job (#4151)</li>
+<li>Reload certificates on configuration update (#3705)</li>
+<li><code>cnpg</code> plugin for <code>kubectl</code>:<ul>
+<li>Improve the arguments handling of <code>destroy</code>, <code>fencing</code>, and <code>promote</code>
+  plugin commands (#4280)</li>
+<li>Correctly handle the percentage of the backup progress in <code>cnpg status</code>
+  (#4131)</li>
+<li>Gracefully handle databases with no sequences in <code>sync-sequences</code> command
+  (#4346)</li>
+</ul>
+</li>
+</ul>
+<h3 id="changes_1">Changes:</h3>
+<ul>
+<li>The Grafana dashboard now resides at
+  https://github.com/cloudnative-pg/grafana-dashboards (#4154)</li>
+</ul>
+<h2 id="version-1222">Version 1.22.2</h2>
+<p><strong>Release date:</strong> Mar 14, 2024</p>
+<h3 id="enhancements_3">Enhancements</h3>
+<ul>
+<li>Allow customization of the <code>wal_level</code> GUC in PostgreSQL (#4020)</li>
+<li>Add the <code>cnpg.io/skipWalArchiving</code> annotation to disable WAL archiving when
+  set to <code>enabled</code> (#4055)</li>
+<li>Enrich the <code>cnpg</code> plugin for <code>kubectl</code> with the <code>publication</code> and
+  <code>subscription</code> command groups to imperatively set up PostgreSQL native
+  logical replication (#4052)</li>
+<li>Allow customization of <code>CERTIFICATE_DURATION</code> and <code>EXPIRING_CHECK_THRESHOLD</code>
+  for automated management of TLS certificates handled by the operator (#3686)</li>
+<li>Retrieve the correct architecture's binary from the corresponding catalog in
+  the running operator image during in-place updates, enabling the operator to
+  inject the correct binary into any Pod with a supported architecture (#3840)</li>
+<li>Introduce initial support for tab-completion with the <code>cnpg</code> plugin for
+  <code>kubectl</code> (#3875)</li>
+</ul>
+<h3 id="fixes_3">Fixes</h3>
+<ul>
+<li>Properly synchronize PVC group labels with those on the pods, a critical
+  aspect when all pods are deleted and the operator needs to decide which Pod
+  to recreate first (#3930)</li>
+<li>Disable <code>wal_sender_timeout</code> when cloning a replica to prevent timeout errors
+  due to slow connections (#4080)</li>
+<li>Ensure that volume snapshots are ready before initiating recovery bootstrap
+  procedures, preventing an error condition where recovery with incomplete
+  backups could enter an error loop (#3663)</li>
+<li>Prevent an error loop when unsetting connection limits in managed roles (#3832)</li>
+<li>Resolve a corner case in hibernation where the instance pod has been deleted,
+  but the cluster status still has the hibernation condition set to false (#3970)</li>
+<li>Correctly detect Google Cloud capabilities for Barman Cloud (#3931)</li>
+</ul>
+<h3 id="security">Security</h3>
+<ul>
+<li>Use <code>Role</code> instead of <code>ClusterRole</code> for operator permissions in OLM,
+  requiring fewer privileges when installed on a per-namespace basis (#3855,
+  #3990)</li>
+<li>Enforce fully-qualified object names in SQL queries for the PgBouncer pooler
+  (#4080)</li>
+</ul>
+<h3 id="changes_2">Changes</h3>
+<ul>
+<li>Follow Kubernetes recommendations to switch from client-side to server-side
+  application of manifests, requiring the <code>--server-side</code> option by default
+  when installing the operator (#3729).</li>
+<li>Set the default operand image to PostgreSQL 16.2 (#3823).</li>
+</ul>
+<h2 id="version-1221">Version 1.22.1</h2>
+<p><strong>Release date:</strong> Feb 2, 2024</p>
+<p>Enhancements:</p>
+<ul>
+<li>Tailor ephemeral volume storage in a Postgres cluster using a claim template
+  through the <code>ephemeralVolumeSource</code> option (#3678)</li>
+<li>Introduce the <code>pgadmin4</code> command in the <code>cnpg</code> plugin for <code>kubectl</code>,
+  providing a straightforward method to demonstrate connecting to a given
+  database cluster and navigate its content in a local environment such as kind -
+  for evaluation purposes only (#3701)</li>
+<li>Allow customization of PostgreSQL's ident map file via the
+  <code>.spec.postgresql.pg_ident</code> stanza, through a list of user name maps (#3534)</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Prevent an unrecoverable issue with <code>pg_rewind</code> failing due to
+  <code>postgresql.auto.conf</code> being read-only on clusters where the <code>ALTER SYSTEM</code>
+  SQL command is disabled - the default (#3728)</li>
+<li>Proper recovery of tablespaces from volume snapshots (#3682)</li>
+<li>Reduce the risk of disk space shortage when using the import facility of the
+  <code>initdb</code> bootstrap method, by disabling the durability settings in the PostgreSQL
+  instance for the duration of the import process (#3743)</li>
+<li>Avoid pod restart due to erroneous resource quantity comparisons, e.g. "1 !=
+  1000m"  (#3706)</li>
+<li>Properly escape reserved characters in <code>pgpass</code> connection fields (#3713)</li>
+<li>Prevent systematic rollout of pods due to considering zero and nil different
+  values in <code>.spec.projectedVolumeTemplate.sources</code> (#3647)</li>
+<li>Ensure configuration coherence by pruning from <code>postgresql.auto.conf</code> any
+  options now incorporated into <code>override.conf</code> (#3773)</li>
+</ul>
+<h2 id="version-1220">Version 1.22.0</h2>
+<p><strong>Release date:</strong> Dec 21, 2023</p>
+<div class="admonition important">
+<p class="admonition-title">Important changes from previous versions</p>
+<p>This release introduces a significant change, disabling the default usage
+of the <code>ALTER SYSTEM</code> command in PostgreSQL. For users upgrading from a
+previous version who wish to retain the old behavior: please refer to the
+<a href="../../../installation_upgrade/">upgrade documentation</a> for detailed instructions.</p>
+</div>
+<h3 id="features">Features:</h3>
+<ul>
+<li>
+<p><strong>Declarative Tablespaces</strong>: Introducing the <code>tablespaces</code> stanza in the
+  <code>Cluster</code> spec, enabling comprehensive lifecycle management of PostgreSQL
+  tablespaces for enhanced vertical scalability (#3410).</p>
+</li>
+<li>
+<p><strong>Temporary Tablespaces</strong>: Adding the <code>.spec.tablespaces[*].temporary</code>
+  option to facilitate the utilization of a tablespace for temporary database
+  operations, by incorporating the name into the <code>temp_tablespaces</code> PostgreSQL
+  parameter (#3464).</p>
+</li>
+</ul>
+<h3 id="security_1">Security:</h3>
+<ul>
+<li>By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher
+  installations. Additionally, users can configure the <code>ssl_ciphers</code>,
+  <code>ssl_min_protocol_version</code>, and <code>ssl_max_protocol_version</code> GUCs (#3408).</li>
+<li>Integration of Docker image scanning with Dockle and Snyk to enhance security
+  measures (#3300).</li>
+</ul>
+<h3 id="enhancements_4">Enhancements:</h3>
+<ul>
+<li>Improved reconciliation of external clusters (#3533).</li>
+<li>Introduction of the ability to enable/disable the <code>ALTER SYSTEM</code> command (#3535).</li>
+<li>Support for Prometheus' dynamic relabeling through the
+  <code>podMonitorMetricRelabelings</code> and <code>podMonitorRelabelings</code> options in the
+  <code>.spec.monitoring</code> stanza of the <code>Cluster</code> and <code>Pooler</code> resources (#3075).</li>
+<li>Enhanced computation of the first recoverability point and last successful
+  backup by considering volume snapshots alongside object-store backups (#2940). <!-- NO 1.20 --></li>
+<li>Elimination of the use of the <code>PGPASSFILE</code> environment variable when
+  establishing a network connection to PostgreSQL (#3522).</li>
+<li>Improved <code>cnpg report</code> plugin command by collecting a cluster's PVCs (#3357).</li>
+<li>Enhancement of the <code>cnpg status</code> plugin command, providing information about
+  managed roles, including alerts (#3310).</li>
+<li>Introduction of Red Hat UBI 8 container images for the operator, suitable for
+  OLM deployments. <!-- NO 1.20 --></li>
+<li>Connection pooler:<ul>
+<li>Scaling down instances of a <code>Pooler</code> resource to 0 is now possible (#3517).</li>
+<li>Addition of the <code>cnpg.io/podRole</code> label with a value of 'pooler' to every
+  pooler deployment, differentiating them from instance pods (#3396).</li>
+</ul>
+</li>
+</ul>
+<p>Fixes:</p>
+<ul>
+<li>Reconciliation of metadata, annotations, and labels of <code>PodDisruptionBudget</code>
+  resources (#3312 and #3434).</li>
+<li>Reconciliation of the metadata of the managed credential secrets (#3316).</li>
+<li>Resolution of a bug in the backup snapshot code where an error reading the
+  body would be handled as an overall error, leaving the backup process
+  indefinitely stuck (#3321).</li>
+<li>Implicit setting of online backup with the <code>cnpg backup</code> plugin command when
+  either <code>immediate-checkpoint</code> or <code>wait-for-archive</code> options are requested (#3449).</li>
+<li>Disabling of wal_sender_timeout when joining through pg_basebackup (#3586)</li>
+<li>Reloading of secrets used by external clusters (#3565)</li>
+<li>Connection pooler:<ul>
+<li>Ensuring the controller watches all secrets owned by a <code>Pooler</code> resource (#3428).</li>
+<li>Reconciliation of <code>RoleBinding</code> for <code>Pooler</code> resources (#3391).</li>
+<li>Reconciliation of <code>imagePullSecret</code> for <code>Pooler</code> resources (#3389).</li>
+<li>Reconciliation of the service of a <code>Pooler</code> and addition of the required labels (#3349).</li>
+<li>Extension of <code>Pooler</code> labels to the deployment as well, not just the pods (#3350).</li>
+</ul>
+</li>
+</ul>
+<p>Changes:</p>
+<ul>
+<li>Default operand image set to PostgreSQL 16.1 (#3270).</li>
+<li>The <code>ALTER SYSTEM</code> command is now disabled by default (#3545). <!-- NO 1.21, 1.20 --></li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../../..";</script>
+    <script src="../../../js/theme_extra.js"></script>
+    <script src="../../../js/theme.js"></script>
+      <script src="../../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/release_notes/old/v1.23/index.html b/assets/documentation/1.27.0-rc1/release_notes/old/v1.23/index.html
new file mode 100644
index 000000000..57d239dfc
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/old/v1.23/index.html
@@ -0,0 +1,690 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.23 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../../css/theme.css" />
+    <link rel="stylesheet" href="../../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.23";
+        var mkdocs_page_input_path = "release_notes/old/v1.23.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.23</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-123">Release notes for CloudNativePG 1.23</h1>
+<p>History of user-visible changes in the 1.23 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.23">commits</a>
+on the release branch in GitHub.</p>
+<h2 id="version-1236">Version 1.23.6</h2>
+<p><strong>Release Date:</strong> December 23, 2024</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This is the final release in the 1.23.x series.
+Users are strongly encouraged to upgrade to a newer minor version, as 1.23
+is no longer supported.</p>
+</div>
+<h3 id="enhancements">Enhancements</h3>
+<ul>
+<li>Enable customization of startup, liveness, and readiness probes through the
+  <code>.spec.probes</code> stanza. (#6266)</li>
+<li>Add the <code>cnpg.io/userType</code> label to secrets generated for predefined users,
+  specifically <code>superuser</code> and <code>app</code>. (#4392)</li>
+<li>Improved validation for the <code>spec.schedule</code> field in ScheduledBackups,
+  raising warnings for potential misconfigurations. (#5396)</li>
+<li><code>cnpg</code> plugin:<ul>
+<li>Honor the <code>User-Agent</code> header in HTTP requests with the API server. (#6153)</li>
+</ul>
+</li>
+</ul>
+<h3 id="bug-fixes">Bug Fixes</h3>
+<ul>
+<li>Ensure the former primary flushes its WAL file queue to the archive before
+  re-synchronizing as a replica, reducing recovery times and enhancing data
+  consistency during failovers. (#6141)</li>
+<li>Clean the WAL volume along with the <code>PGDATA</code> volume during bootstrap. (#6265)</li>
+<li>Update the operator to set the cluster phase to <code>Unrecoverable</code> when
+  all previously generated <code>PersistentVolumeClaims</code> are missing. (#6170)</li>
+<li>Fix the parsing of the <code>synchronous_standby_names</code> GUC when
+  <code>.spec.postgresql.synchronous.method</code> is set to <code>first</code>. (#5955)</li>
+<li>Resolved a potential race condition when patching certain conditions
+  in CRD statuses, improving reliability in concurrent updates. (#6328)</li>
+<li>Correct role changes to apply at the transaction level instead of the
+  database context. (#6064)</li>
+<li>Remove the <code>primary_slot_name</code> definition from the <code>override.conf</code> file on
+  the primary to ensure it is always empty. (#6219)</li>
+<li>Configure libpq environment variables, including <code>PGHOST</code>, in PgBouncer pods
+  to enable seamless access to the <code>pgbouncer</code> virtual database using <code>psql</code>
+  from within the container. (#6247)</li>
+<li>Remove unnecessary updates to the Cluster status when verifying changes in
+  the image catalog. (#6277)</li>
+<li>Prevent panic during recovery from an external server without proper backup
+  configuration. (#6300)</li>
+<li>Resolved a key collision issue in structured logs, where the name field was
+  inconsistently used to log two distinct values. (#6324)</li>
+<li>Ensure proper quoting of the inRoles field in SQL statements to prevent
+  syntax errors in generated SQL during role management. (#6346)</li>
+<li><code>cnpg</code> plugin:<ul>
+<li>Ensure the <code>kubectl</code> context is properly passed in the <code>psql</code> command. (#6257)</li>
+<li>Avoid displaying physical backups block when empty with <code>status</code> command. (#5998)</li>
+</ul>
+</li>
+</ul>
+<h2 id="version-1235">Version 1.23.5</h2>
+<p><strong>Release date:</strong> Oct 16, 2024</p>
+<h3 id="enhancements_1">Enhancements:</h3>
+<ul>
+<li>Remove the use of <code>pg_database_size</code> from the status probe, as it caused
+  high resource utilization by scanning the entire <code>PGDATA</code> directory to
+  compute database sizes. The <code>kubectl status</code> plugin will now rely on <code>du</code>
+  to provide detailed size information retrieval (#5689).</li>
+<li>Add the ability to configure the <code>full_page_writes</code> parameter in
+  PostgreSQL. This setting defaults to <code>on</code>, in line with PostgreSQL's
+  recommendations (#5516).</li>
+<li>Plugin:<ul>
+<li>Add the <code>logs pretty</code> command in the <code>cnpg</code> plugin to read a log stream
+  from standard input and output a human-readable format, with options to
+  filter log entries (#5770)</li>
+<li>Enhance the <code>status</code> command by allowing multiple <code>-v</code> options to
+  increase verbosity for more detailed output (#5765).</li>
+<li>Add support for specifying a custom Docker image using the <code>--image</code>
+  flag in the <code>pgadmin4</code> plugin command, giving users control over the
+  Docker image used for pgAdmin4 deployments (#5515).</li>
+</ul>
+</li>
+</ul>
+<h3 id="fixes">Fixes:</h3>
+<ul>
+<li>Resolve an issue with concurrent status updates when demoting a primary to a
+  designated primary, ensuring smoother transitions during cluster role changes
+  (#5755).</li>
+<li>Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down
+  to two instances, enabling easier maintenance on the node hosting the replica
+  (#5487).</li>
+<li>Prioritize full rollout over inplace restarts (#5407).</li>
+<li>Fix an issue that could lead to double failover in cases of lost
+  connectivity (#5788).</li>
+<li>Correctly set the <code>TMPDIR</code> and <code>PSQL_HISTORY</code> environment variables for pods
+  and jobs, improving temporary file and history management (#5503).</li>
+<li>Plugin:<ul>
+<li>Resolve a race condition in the <code>logs cluster</code> command (#5775).</li>
+<li>Display the <code>potential</code> sync status in the <code>status</code> plugin (#5533).</li>
+<li>Fix the issue where pods deployed by the <code>pgadmin4</code> command didn’t have
+  a writable home directory (#5800).</li>
+</ul>
+</li>
+</ul>
+<h3 id="supported-versions">Supported versions</h3>
+<ul>
+<li>PostgreSQL 17 (PostgreSQL 17.0 is the default image)</li>
+</ul>
+<h2 id="version-1234">Version 1.23.4</h2>
+<p><strong>Release date:</strong> Aug 22, 2024</p>
+<h3 id="enhancements_2">Enhancements:</h3>
+<ul>
+<li><code>cnpg</code> plugin updates:<ul>
+<li>Enhance the <code>install generate</code> command by adding a <code>--control-plane</code> option,
+  allowing deployment of the operator on control-plane nodes by setting
+  node affinity and tolerations (#5271).</li>
+<li>Enhance the <code>destroy</code> command to delete also any job related to the target
+  instance (#5298).</li>
+</ul>
+</li>
+</ul>
+<h3 id="fixes_1">Fixes:</h3>
+<ul>
+<li>Synchronous replication self-healing checks now exclude terminated pods,
+  focusing only on active and functional pods (#5210).</li>
+<li>The instance manager will now terminate all existing operator-related replication
+  connections following a role change in a replica cluster (#5209).</li>
+<li>Allow setting <code>smartShutdownTimeout</code> to zero, enabling immediate fast
+  shutdown and bypassing the smart shutdown process when required (#5347).</li>
+</ul>
+<h2 id="version-1233">Version 1.23.3</h2>
+<p><strong>Release date:</strong> Jul 29, 2024</p>
+<h3 id="enhancements_3">Enhancements:</h3>
+<ul>
+<li>Add transparent support for PostgreSQL 17's <code>allow_alter_system</code> parameter,
+  enabling or disabling the <code>ALTER SYSTEM</code> command through the
+  <code>.spec.postgresql.enableAlterSystem</code> option (#4921).</li>
+<li>Introduce the <code>reconcilePodSpec</code> annotation on the <code>Cluster</code> and <code>Pooler</code>
+  resources to control the restart of pods following a change in the Pod
+  specification (#5069).</li>
+<li>Support the new metrics introduced in PgBouncer 1.23 in the <code>Pooler</code> metrics
+  collector (#5044).</li>
+</ul>
+<h3 id="fixes_2">Fixes:</h3>
+<ul>
+<li>Enhance the mechanism for detecting Pods that have been terminated but not
+  deleted during an eviction process, and extend the cleanup process during
+  maintenance windows to include unschedulable Pods when the <code>reusePVC</code> flag is
+  set to false (#2056).</li>
+<li>Disable <code>pg_rewind</code> execution for newly created replicas that employ
+  VolumeSnapshot during bootstrapping to avoid introducing a new shutdown
+  checkpoint entry in the WAL files. This ensures that replicas can reconnect to
+  the primary without issues, which would otherwise be hindered by the additional
+  checkpoint entry (#5081).</li>
+<li>Gracefully handle failures during the initialization of a new instance.
+  Any remaining data from the failed initialization is now either removed or,
+  if it's a valid PostgreSQL data directory, moved to a backup location to avoid
+  possible data loss (#5112).</li>
+<li>Enhance the robustness of the immediate backups reconciler by implementing
+  retry logic upon initial backup failure (#4982).</li>
+<li>Wait for the <code>postmaster</code> to shut down before starting it again (#4938).</li>
+<li>Ensure that the <code>Pooler</code> service template can override the default service
+  (#4846).</li>
+<li>Exclude immutable databases from <code>pg_database</code> metric monitoring and alerting
+  processes (#4980).</li>
+<li>Removed unnecessary permissions from the operator service account (#4911).</li>
+<li>Fix cluster role permissions for <code>ClusterImageCatalogs</code> (#5034).</li>
+<li>Ensure the operator initiates a rollout of the <code>Pooler</code> instance when
+  the operator image is upgraded (#5006)</li>
+<li>Address race condition causing the readiness probe to incorrectly
+  show "not ready" after a PostgreSQL restart, even when the
+  <code>postmaster</code> was accessible (#4920).</li>
+<li>Prevent reconciliation of resources that aren't owned by a <code>Pooler</code> (#4967).</li>
+<li>Renew the certificates managed by the operator when the DNS Subject
+  Alternative Names (SANs) are updated (#3269, #3319).</li>
+<li>Set PVC default <code>AccessModes</code> in the template only when unspecified (#4845).</li>
+<li>Gracefully handle unsatisfiable backup schedule (#5109).</li>
+<li><code>cnpg</code> plugin:</li>
+<li>Properly handle errors during the <code>status</code> command execution.</li>
+<li>Support TLS in the <code>status</code> command (#4915).</li>
+</ul>
+<h2 id="version-1232">Version 1.23.2</h2>
+<p><strong>Release date:</strong> Jun 12, 2024</p>
+<h3 id="enhancements_4">Enhancements:</h3>
+<ul>
+<li>
+<p>Enabled configuration of standby-sensitive parameters during recovery using a
+  physical backup (#4564)</p>
+</li>
+<li>
+<p>Enabled the configuration of the liveness probe timeout via the
+  <code>.spec.livenessProbeTimeout</code> option (#4719)</p>
+</li>
+<li>
+<p><code>cnpg</code> plugin for <code>kubectl</code>:</p>
+<ul>
+<li>Enhanced support for ANSI colors in the plugin by adding the <code>--color</code>
+  option, which accepts <code>always</code>, <code>never</code>, and <code>auto</code> (default) as values
+  (#4775)</li>
+<li>The plugin is now available on Homebrew for macOS users (#4602)</li>
+</ul>
+</li>
+</ul>
+<h3 id="fixes_3">Fixes:</h3>
+<ul>
+<li>
+<p>Prevented fenced instances from entering an unnecessary loop and consuming
+  all available CPU (#4625)</p>
+</li>
+<li>
+<p>Resolved an issue where the instance manager on the primary would
+  indefinitely wait for the instance to start after encountering a failure
+  following a stop operation (#4434)</p>
+</li>
+<li>
+<p>Fixed an issue where the interaction between <code>hot_standby_feedback</code> and
+  managed cluster-level replication slots was preventing the autovacuum from
+  operating correctly; this issue was causing disk space to remain occupied by
+  dead tuples (#4811)</p>
+</li>
+<li>
+<p>Fixed a panic in the backup controller that occurred when pod container
+  statuses were missing (#4765)</p>
+</li>
+<li>
+<p>Prevented unnecessary shutdown of the instance manager (#4670)</p>
+</li>
+<li>
+<p>Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531)</p>
+</li>
+<li>
+<p>Prevented unnecessary reloads of the ident map by ensuring a consistent and
+  unique method of writing its content (#4648)</p>
+</li>
+<li>
+<p>Avoided conflicts during phase registration by patching the status of the
+  resource instead of updating it (#4637)</p>
+</li>
+<li>
+<p>Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504)</p>
+</li>
+<li>
+<p>Ensured that a replica cluster is restarted after promotion to properly set
+  the archive mode (#4399)</p>
+</li>
+<li>
+<p>Removed an unneeded concurrent keep-alive routine that was causing random
+  failures in volume snapshot backups (#4768)</p>
+</li>
+<li>
+<p>Ensured correct parsing of the additional rows field returned when the
+  <code>pgaudit.log_rows</code> option was enabled, preventing audit logs from being
+  incorrectly routed to the normal log stream (#4394)</p>
+</li>
+<li>
+<p><code>cnpg</code> plugin for <code>kubectl</code>:</p>
+<ul>
+<li>Resolved an issue with listing PDBs using the <code>cnpg status</code> command (#4530)</li>
+</ul>
+</li>
+</ul>
+<h3 id="changes">Changes</h3>
+<ul>
+<li>Default operand image set to PostgreSQL 16.3 (#4584)</li>
+<li>Removed all RBAC requirements on namespace objects (#4753)</li>
+</ul>
+<h2 id="version-1231">Version 1.23.1</h2>
+<p><strong>Release date:</strong> Apr 29, 2024</p>
+<h3 id="fixes_4">Fixes:</h3>
+<ul>
+<li>Corrects the reconciliation of <code>PodMonitor</code> resources, which was
+  failing due to a regression (#4286)</li>
+</ul>
+<h2 id="version-1230">Version 1.23.0</h2>
+<p><strong>Release date:</strong> Apr 24, 2024</p>
+<div class="admonition important">
+<p class="admonition-title">Important changes to Community Supported Versions</p>
+<p>We've updated our support policy to streamline our focus on one supported
+minor release at a time, rather than two. Additionally, we've extended the
+supplementary support period for the previous minor release to 3 months.</p>
+</div>
+<h3 id="features">Features:</h3>
+<ul>
+<li><strong>PostgreSQL Image Catalogs:</strong> Introduced <code>ClusterImageCatalog</code> and
+  <code>ImageCatalog</code> CRDs to manage operand container images based on PostgreSQL
+  major version. This is facilitated through the <code>Cluster</code>'s
+  <code>.spec.imageCatalogRef stanza</code>. This feature provides an alternative to the
+  imageName option and will eventually replace it as the default method to define
+  operand container images.</li>
+<li><strong>User-Defined Replication Slots:</strong> Enhanced the synchronization of physical
+  replication slots to cover user-defined replication slots on the primary,
+  via the newly introduced stanza <code>replicationSlots.synchronizeReplicas</code>.</li>
+<li><strong>Configuration of Pod Disruption Budgets (PDB)</strong>: Introduced the
+  <code>.spec.enablePDB</code> field to disable PDBs on the primary instance, allowing
+  proper eviction of the pod during maintenance operations. This is particularly
+  useful for single-instance deployments. This feature is intended to replace the
+  node maintenance window feature.</li>
+</ul>
+<h3 id="enhancements_5">Enhancements:</h3>
+<ul>
+<li>Users now have the capability to transition an existing cluster into replica
+  mode, simplifying cross-datacenter switchover operations (#4261)</li>
+<li>Users can now customize the connection pooler service, including its type,
+  labels, and annotations (#3384)</li>
+<li>Users can now configure the <code>wal_log_hints</code> PostgreSQL parameter (#4218)
+  (#4218)</li>
+<li>Fully Qualified Domain Names (FQDN) in URIs for automatically generated
+  secrets (#4095)</li>
+<li>Cleanup of instance Pods not owned by the Cluster during Cluster restore
+  (#4141)</li>
+<li>Command output of the plugin’s <code>status</code> command to show the status of PDBs
+  (#4319)</li>
+<li>Error detection when invoking <code>barman-cloud-wal-restore</code> in <code>recovery</code>
+  bootstrap (#4101)</li>
+</ul>
+<h3 id="fixes_5">Fixes:</h3>
+<ul>
+<li>Ensured that before a switchover, the elected replica is in streaming
+  replication (#4288)</li>
+<li>Correctly handle parsing errors of instances' LSN when sorting them (#4283)</li>
+<li>Recreate the primary Pod if there are no healthy standbys available to
+  promote (#4132)</li>
+<li>Cleanup <code>PGDATA</code> in case of failure of the restore job (#4151)</li>
+<li>Reload certificates on configuration update (#3705)</li>
+<li><code>cnpg</code> plugin for <code>kubectl</code>:<ul>
+<li>Improve the arguments handling of <code>destroy</code>, <code>fencing</code>, and <code>promote</code>
+  plugin commands (#4280)</li>
+<li>Correctly handle the percentage of the backup progress in <code>cnpg status</code>
+  (#4131)</li>
+<li>Gracefully handle databases with no sequences in <code>sync-sequences</code> command
+  (#4346)</li>
+</ul>
+</li>
+</ul>
+<h3 id="changes_1">Changes:</h3>
+<ul>
+<li>Operator images are now based on <code>gcr.io/distroless/static-debian12:nonroot</code>
+  (#4201)</li>
+<li>The Grafana dashboard now resides at
+  https://github.com/cloudnative-pg/grafana-dashboards (#4154)</li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../../..";</script>
+    <script src="../../../js/theme_extra.js"></script>
+    <script src="../../../js/theme.js"></script>
+      <script src="../../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/preview/release_notes/v1.24/index.html b/assets/documentation/1.27.0-rc1/release_notes/old/v1.24/index.html
similarity index 75%
rename from assets/documentation/preview/release_notes/v1.24/index.html
rename to assets/documentation/1.27.0-rc1/release_notes/old/v1.24/index.html
index 38125d892..dd09bf024 100644
--- a/assets/documentation/preview/release_notes/v1.24/index.html
+++ b/assets/documentation/1.27.0-rc1/release_notes/old/v1.24/index.html
@@ -4,22 +4,22 @@
     <meta charset="utf-8" />
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
-      <link rel="shortcut icon" href="../../img/favicon.ico" />
-    <title>Release notes for CloudNativePG 1.24 - CloudNativePG v1.26.0-rc3</title>
-    <link rel="stylesheet" href="../../css/theme.css" />
-    <link rel="stylesheet" href="../../css/theme_extra.css" />
+      <link rel="shortcut icon" href="../../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.24 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../../css/theme.css" />
+    <link rel="stylesheet" href="../../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
-        <link href="../../css/override.css" rel="stylesheet" />
+        <link href="../../../css/override.css" rel="stylesheet" />
     
       <script>
         // Current page data
         var mkdocs_page_name = "Release notes for CloudNativePG 1.24";
-        var mkdocs_page_input_path = "release_notes/v1.24.md";
+        var mkdocs_page_input_path = "release_notes/old/v1.24.md";
         var mkdocs_page_url = null;
       </script>
     
     <!--[if lt IE 9]>
-      <script src="../../js/html5shiv.min.js"></script>
+      <script src="../../../js/html5shiv.min.js"></script>
     <![endif]-->
       <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
       <script>hljs.highlightAll();</script> 
@@ -31,9 +31,9 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
-  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
+  <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
   </form>
 </div>
@@ -41,245 +41,247 @@
 
       <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../..">CloudNativePG</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../before_you_start/">Before You Start</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../use_cases/">Use cases</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../architecture/">Architecture</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../installation_upgrade/">Installation and upgrades</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../quickstart/">Quickstart</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../image_catalog/">Image Catalog</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../bootstrap/">Bootstrap</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../database_import/">Importing Postgres databases</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../security/">Security</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../instance_manager/">Postgres instance manager</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../scheduling/">Scheduling</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../resource_management/">Resource management</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failure_modes/">Failure Modes</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../rolling_update/">Rolling Updates</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replication/">Replication</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logical_replication/">Logical Replication</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../backup_barmanobjectstore/">Backup on object stores</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../backup_volumesnapshot/">Backup on volume snapshots</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../service_management/">Service Management</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgresql_conf/">PostgreSQL Configuration</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_role_management/">PostgreSQL Role Management</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_database_management/">PostgreSQL Database Management</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../tablespaces/">Tablespaces</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_conf/">Operator configuration</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cluster_conf/">Instance pod configuration</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../storage/">Storage</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../labels_annotations/">Labels and annotations</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../monitoring/">Monitoring</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logging/">Logging</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../certificates/">Certificates</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../ssl_connections/">Client TLS/SSL connections</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../applications/">Connecting from an application</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../connection_pooling/">Connection pooling</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replica_cluster/">Replica clusters</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgres_upgrades/">PostgreSQL Upgrades</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubectl-plugin/">Kubectl Plugin</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failover/">Automated failover</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../troubleshooting/">Troubleshooting</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../fencing/">Fencing</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_hibernation/">Declarative hibernation</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgis/">PostGIS</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../e2e/">End-to-End Tests</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../controller/">Custom Pod Controller</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../samples/">Examples</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../networking/">Networking</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../benchmarking/">Benchmarking</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../faq/">Frequently Asked Questions (FAQ)</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cloudnative-pg.v1/">API Reference</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../supported_releases/">Supported releases</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../../preview_version/">Preview Versions</a>
                 </li>
               </ul>
               <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
-                </li>
-              </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../">Release notes</a>
+                <li class="toctree-l1"><a class="reference internal" href="../../">Release notes</a>
                 </li>
               </ul>
               <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
                   </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,13 +291,13 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
         <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
   <ul class="wy-breadcrumbs">
-    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+    <li><a href="../../.." class="icon icon-home" aria-label="Docs"></a></li>
       <li class="breadcrumb-item active">Release notes for CloudNativePG 1.24</li>
     <li class="wy-breadcrumbs-aside">
     </li>
@@ -312,9 +314,120 @@ <h1 id="release-notes-for-cloudnativepg-124">Release notes for CloudNativePG 1.2
 <p>For a complete list of changes, please refer to the
 <a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.24">commits</a>
 on the release branch in GitHub.</p>
+<h2 id="version-1244">Version 1.24.4</h2>
+<p><strong>Release date:</strong> May 23, 2025</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This is the final release in the 1.24.x series.
+Users are strongly encouraged to upgrade to a newer minor version, as 1.24
+is no longer supported.</p>
+</div>
+<h3 id="important-changes">Important Changes</h3>
+<ul>
+<li><strong>CloudNativePG is now officially a CNCF project</strong>: CloudNativePG has been
+  accepted into the Cloud Native Computing Foundation (CNCF), marking a
+  significant milestone in its evolution. As part of this transition, the project
+  is now governed under <strong>CloudNativePG, a Series of LF Projects, LLC</strong>, ensuring
+  long-term sustainability and community-driven innovation. (#7203)</li>
+</ul>
+<h3 id="enhancements">Enhancements</h3>
+<ul>
+<li>
+<p>Added the <code>KUBERNETES_CLUSTER_DOMAIN</code> configuration option to the operator,
+  allowing users to specify the domain suffix for fully qualified domain names
+  (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to
+  <code>cluster.local</code>. (#6989) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Implemented the <code>cnpg.io/validation</code> annotation, enabling users to disable
+  the validation webhook on CloudNativePG-managed resources. Use with caution,
+  as this allows unrestricted changes. (#7196)</p>
+</li>
+<li>
+<p>Added support for collecting <code>pg_stat_wal</code> metrics in PostgreSQL 18. (#7005)</p>
+</li>
+<li>
+<p>Added support for LZ4, XZ, and Zstandard compression methods when archiving
+  WAL files via Barman Cloud (<em>deprecated</em>). (#7151)</p>
+</li>
+</ul>
+<h3 id="security">Security</h3>
+<ul>
+<li>Set <code>imagePullPolicy</code> to <code>Always</code> for the operator deployment to ensure that
+  images are always pulled from the registry, reducing the risk of using
+  outdated or potentially unsafe local images. (#7250)</li>
+</ul>
+<h3 id="fixes">Fixes</h3>
+<ul>
+<li>
+<p>Fixed native replication slot synchronization and logical replication
+  failover for PostgreSQL 17 by appending the <code>dbname</code> parameter to
+  <code>primary_conninfo</code> in replica configurations (#7298).</p>
+</li>
+<li>
+<p>Improved backup efficiency by introducing a fail-fast mechanism in WAL
+  archiving, allowing quicker detection of unexpected primary demotion and
+  avoiding unnecessary retries (#7483).</p>
+</li>
+<li>
+<p>Fixed an off-by-one error in parallel WAL archiving that could cause one
+  extra worker process to be spawned beyond the requested number (#7389).</p>
+</li>
+<li>
+<p>Resolved a race condition that caused the operator to perform two switchovers
+  when updating the PostgreSQL configuration. (#6991)</p>
+</li>
+<li>
+<p>Corrected the <code>PodMonitor</code> configuration by adjusting the <code>matchLabels</code> scope
+  for the targeted pooler and cluster pods. Previously, the <code>matchLabels</code> were
+  too broad, inadvertently inheriting labels from the cluster and leading to data
+  collection from unintended targets. (#7063)</p>
+</li>
+<li>
+<p>Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in
+  the <code>shared_buffers</code> configuration. This will become an error in future
+  releases. Users should update their configurations to include explicit units
+  (e.g., <code>512MB</code> instead of <code>512</code>). (#7160)</p>
+</li>
+<li>
+<p>CloudNativePG Interface (CNPG-I):</p>
+</li>
+<li>
+<p>Implemented automatic reloading of TLS certificates for plugins when they
+    change. (#7029) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Ensured the operator properly closes the plugin connection when
+    performing a backup using the plugin. (#7095, #7096) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Improved performance and resilience of CNPG-I by removing timeouts for local
+    plugin operations, avoiding failures during longer backup or WAL archiving
+    executions (#7496). <!-- no 1.22 --></p>
+</li>
+<li>
+<p><code>cnpg</code> plugin:</p>
+</li>
+<li>
+<p>Ensured that the primary Pod is recreated during an imperative restart when
+    <code>primaryUpdateMethod</code> is set to <code>restart</code>, aligning its definition with the
+    replicas. (#7122)</p>
+</li>
+</ul>
+<h3 id="changes">Changes</h3>
+<ul>
+<li>
+<p>Updated the default PostgreSQL version to 17.5 for new cluster
+  definitions. (#7556)</p>
+</li>
+<li>
+<p>Updated the default PgBouncer version to <strong>1.24.1</strong> for new <code>Pooler</code>
+  deployments (#7399).</p>
+</li>
+</ul>
 <h2 id="version-1243">Version 1.24.3</h2>
 <p><strong>Release Date:</strong> February 28, 2025</p>
-<h3 id="enhancements">Enhancements</h3>
+<h3 id="enhancements_1">Enhancements</h3>
 <ul>
 <li>Introduced a startup probe for the operator to enhance reliability and
   prevent premature liveness probe failures during initialization. (#7008)</li>
@@ -326,7 +439,7 @@ <h3 id="enhancements">Enhancements</h3>
 <li>Updated the default PostgreSQL version to 17.4 for new cluster
   definitions. (#6960)</li>
 </ul>
-<h3 id="security">Security</h3>
+<h3 id="security_1">Security</h3>
 <ul>
 <li>The operator image build process has been enhanced to strengthen
   security and transparency. Images are now signed with <code>cosign</code>, and
@@ -391,7 +504,7 @@ <h3 id="technical-enhancements">Technical Enhancements</h3>
 </ul>
 <h2 id="version-1242">Version 1.24.2</h2>
 <p><strong>Release Date:</strong> December 23, 2024</p>
-<h3 id="enhancements_1">Enhancements</h3>
+<h3 id="enhancements_2">Enhancements</h3>
 <ul>
 <li>Enable customization of startup, liveness, and readiness probes through the
   <code>.spec.probes</code> stanza. (#6266)</li>
@@ -439,7 +552,7 @@ <h3 id="bug-fixes_1">Bug Fixes</h3>
 </ul>
 <h2 id="version-1241">Version 1.24.1</h2>
 <p><strong>Release date:</strong> Oct 16, 2024</p>
-<h3 id="enhancements_2">Enhancements:</h3>
+<h3 id="enhancements_3">Enhancements:</h3>
 <ul>
 <li>Remove the use of <code>pg_database_size</code> from the status probe, as it caused
   high resource utilization by scanning the entire <code>PGDATA</code> directory to
@@ -460,7 +573,7 @@ <h3 id="enhancements_2">Enhancements:</h3>
 </ul>
 </li>
 </ul>
-<h3 id="fixes">Fixes:</h3>
+<h3 id="fixes_1">Fixes:</h3>
 <ul>
 <li>Resolve an issue with concurrent status updates when demoting a primary to a
   designated primary, ensuring smoother transitions during cluster role changes
@@ -490,7 +603,7 @@ <h3 id="supported-versions">Supported versions</h3>
 </ul>
 <h2 id="version-1240">Version 1.24.0</h2>
 <p><strong>Release date:</strong> Aug 22, 2024</p>
-<h3 id="important-changes">Important changes:</h3>
+<h3 id="important-changes_1">Important changes:</h3>
 <ul>
 <li>Deprecate the <code>role</code> label in the selectors of <code>Service</code> and
   <code>PodDisruptionBudget</code> resources in favor of <code>cnpg.io/instanceRole</code> (#4897).</li>
@@ -534,7 +647,7 @@ <h3 id="features">Features:</h3>
   out of disk space to store WAL files, making recovery easier by increasing
   the size of the related volume (#4404).</li>
 </ul>
-<h3 id="enhancements_3">Enhancements:</h3>
+<h3 id="enhancements_4">Enhancements:</h3>
 <ul>
 <li>Add support for delayed replicas by introducing the
   <code>.spec.replica.minApplyDelay</code> option, leveraging PostgreSQL's
@@ -576,12 +689,12 @@ <h3 id="enhancements_3">Enhancements:</h3>
 </ul>
 </li>
 </ul>
-<h3 id="security_1">Security:</h3>
+<h3 id="security_2">Security:</h3>
 <ul>
 <li>Add TLS communication between the operator and instance manager (#4442).</li>
 <li>Add optional TLS communication for the instance metrics exporter (#4927).</li>
 </ul>
-<h3 id="fixes_1">Fixes:</h3>
+<h3 id="fixes_2">Fixes:</h3>
 <ul>
 <li>Enhance the mechanism for detecting Pods that have been terminated but not
   deleted during an eviction process, and extend the cleanup process during
@@ -664,11 +777,11 @@ <h3 id="supported-versions_1">Supported versions</h3>
     
   </span>
 </div>
-    <script src="../../js/jquery-3.6.0.min.js"></script>
-    <script>var base_url = "../..";</script>
-    <script src="../../js/theme_extra.js"></script>
-    <script src="../../js/theme.js"></script>
-      <script src="../../search/main.js"></script>
+    <script src="../../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../../..";</script>
+    <script src="../../../js/theme_extra.js"></script>
+    <script src="../../../js/theme.js"></script>
+      <script src="../../../search/main.js"></script>
     <script>
         jQuery(function () {
             SphinxRtdTheme.Navigation.enable(true);
diff --git a/assets/documentation/1.27.0-rc1/release_notes/v1.25/index.html b/assets/documentation/1.27.0-rc1/release_notes/v1.25/index.html
new file mode 100644
index 000000000..eeb9289d1
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/v1.25/index.html
@@ -0,0 +1,747 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.25 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../css/theme.css" />
+    <link rel="stylesheet" href="../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.25";
+        var mkdocs_page_input_path = "release_notes/v1.25.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.25</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-125">Release notes for CloudNativePG 1.25</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>History of user-visible changes in the 1.25 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.25">commits</a>
+on the release branch in GitHub.</p>
+<h2 id="version-1253">Version 1.25.3</h2>
+<p><strong>Release date:</strong> Jul 25, 2025</p>
+<p><em>In memory of <a href="https://www.linkedin.com/in/codepope/">DJ Walker-Morgan</a>.</em></p>
+<h3 id="changes">Changes</h3>
+<ul>
+<li>Removed <code>386</code> and ARM (v5/v6/v7) architectures from the <code>cnpg</code> plugin build
+  matrix, reducing the number of published binaries
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7648">#7648</a>).</li>
+</ul>
+<h3 id="enhancements">Enhancements</h3>
+<ul>
+<li>
+<p>Improved validation of <code>shared_buffers</code> by correctly considering <code>HugePages</code>
+  settings, ensuring accurate memory configuration checks
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7864">#7864</a>).</p>
+</li>
+<li>
+<p>Set <code>oom_score_adj</code> for PostgreSQL worker processes to improve prioritization
+  during out-of-memory situations
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7891">#7891</a>).</p>
+</li>
+<li>
+<p>Added <code>fqdn-uri</code> and <code>fqdn-jdbc-uri</code> fields in user secrets to simplify
+  application connection string management and align with DNS-based connection
+  best practices (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7852">#7852</a>).</p>
+</li>
+<li>
+<p>Added the <code>systemID</code> field and related condition in the <code>Cluster</code> status to track
+  the PostgreSQL system identifier.
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7717">#7717</a>).</p>
+</li>
+</ul>
+<h3 id="fixes">Fixes</h3>
+<ul>
+<li>
+<p>Added a mutex in the connection pooler to protect concurrent access to the
+  connections map, improving stability in high-concurrency environments
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7804">#7804</a>).</p>
+</li>
+<li>
+<p>Fixed replica cluster instance ordering by correctly detecting the designated
+  primary, improving replica cluster stability and switchover operations
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8108">#8108</a>).</p>
+</li>
+<li>
+<p>Added support for reconciling <code>VolumeAttributesClass</code> for PVCs, enhancing
+  storage compatibility and lifecycle management
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7885">#7885</a>).</p>
+</li>
+<li>
+<p>Made the internal webserver routines non-blocking to improve responsiveness
+  under load (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8071">#8071</a>).</p>
+</li>
+<li>
+<p>Fixed an issue where the <code>ensureReplicationClientLeafCertificate</code> error did
+  not display the correct <code>secretName</code> in the not found message
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8086">#8086</a>).</p>
+</li>
+<li>
+<p>Prevented invalid <code>ALTER SUBSCRIPTION</code> statements by updating only
+  PostgreSQL‑supported parameters; unsupported options like <code>copy_data</code> are
+  ignored to avoid reconciliation failures
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7844">7844</a>).</p>
+</li>
+<li>
+<p>Fixed an issue where the <code>bootstrap-controller</code> in the connection pooler did
+  not apply <code>resources</code> settings correctly
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7922">#7922</a>).</p>
+</li>
+<li>
+<p>Ensured online backups fail cleanly if the <code>targetPod</code> becomes unhealthy
+  during backup, preventing partial or misleading backups
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7944">#7944</a>).</p>
+</li>
+<li>
+<p>Ensured the Backup resource status is set properly after a failure, improving
+  observability and scripting reliability
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7898">#7898</a>).</p>
+</li>
+</ul>
+<h2 id="version-1252">Version 1.25.2</h2>
+<p><strong>Release date:</strong> May 23, 2025</p>
+<h3 id="important-changes">Important Changes</h3>
+<ul>
+<li><strong>CloudNativePG is now officially a CNCF project</strong>: CloudNativePG has been
+  accepted into the Cloud Native Computing Foundation (CNCF), marking a
+  significant milestone in its evolution. As part of this transition, the project
+  is now governed under <strong>CloudNativePG, a Series of LF Projects, LLC</strong>, ensuring
+  long-term sustainability and community-driven innovation. (#7203)</li>
+</ul>
+<h3 id="enhancements_1">Enhancements</h3>
+<ul>
+<li>
+<p>Added the <code>KUBERNETES_CLUSTER_DOMAIN</code> configuration option to the operator,
+  allowing users to specify the domain suffix for fully qualified domain names
+  (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to
+  <code>cluster.local</code>. (#6989) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Implemented the <code>cnpg.io/validation</code> annotation, enabling users to disable
+  the validation webhook on CloudNativePG-managed resources. Use with caution,
+  as this allows unrestricted changes. (#7196)</p>
+</li>
+<li>
+<p>Added support for collecting <code>pg_stat_wal</code> metrics in PostgreSQL 18. (#7005)</p>
+</li>
+<li>
+<p>Added support for LZ4, XZ, and Zstandard compression methods when archiving
+  WAL files via Barman Cloud (<em>deprecated</em>). (#7151)</p>
+</li>
+<li>
+<p>CloudNativePG Interface (CNPG-I):</p>
+</li>
+<li>
+<p>A plugin can now trigger instance rollouts by implementing the <code>EVALUATE</code>
+    verb, ensuring that plugin-induced changes are properly reconciled. (#7126) <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Introduced support for WAL recovery via CNPG-I plugins during snapshot
+    restore. (#7284) <!-- no 1.24 and 1.22 --></p>
+</li>
+</ul>
+<h3 id="security">Security</h3>
+<ul>
+<li>Set <code>imagePullPolicy</code> to <code>Always</code> for the operator deployment to ensure that
+  images are always pulled from the registry, reducing the risk of using
+  outdated or potentially unsafe local images. (#7250)</li>
+</ul>
+<h3 id="fixes_1">Fixes</h3>
+<ul>
+<li>
+<p>Fixed native replication slot synchronization and logical replication
+  failover for PostgreSQL 17 by appending the <code>dbname</code> parameter to
+  <code>primary_conninfo</code> in replica configurations (#7298).</p>
+</li>
+<li>
+<p>Fixed a regression in WAL restore operations that prevented fallback to the
+  in-tree <code>barmanObjectStore</code> configuration defined in the <code>externalCluster</code>
+  source when a plugin failed to locate a WAL file (#7507). <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Improved backup efficiency by introducing a fail-fast mechanism in WAL
+  archiving, allowing quicker detection of unexpected primary demotion and
+  avoiding unnecessary retries (#7483).</p>
+</li>
+<li>
+<p>Fixed an off-by-one error in parallel WAL archiving that could cause one
+  extra worker process to be spawned beyond the requested number (#7389).</p>
+</li>
+<li>
+<p>Resolved a race condition that caused the operator to perform two switchovers
+  when updating the PostgreSQL configuration. (#6991)</p>
+</li>
+<li>
+<p>Corrected the <code>PodMonitor</code> configuration by adjusting the <code>matchLabels</code> scope
+  for the targeted pooler and cluster pods. Previously, the <code>matchLabels</code> were
+  too broad, inadvertently inheriting labels from the cluster and leading to data
+  collection from unintended targets. (#7063)</p>
+</li>
+<li>
+<p>Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in
+  the <code>shared_buffers</code> configuration. This will become an error in future
+  releases. Users should update their configurations to include explicit units
+  (e.g., <code>512MB</code> instead of <code>512</code>). (#7160)</p>
+</li>
+<li>
+<p>Treated timeout errors during volume snapshot creation as retryable to
+  prevent unnecessary backup failures. (#7010) <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Moved the defaulting logic for <code>.spec.postgresql.synchronous.dataDurability</code>
+  from the CRD to the webhook to avoid UI issues with OLM. (#7600) <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>CloudNativePG Interface (CNPG-I):</p>
+</li>
+<li>
+<p>Implemented automatic reloading of TLS certificates for plugins when they
+    change. (#7029) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Ensured the operator properly closes the plugin connection when
+    performing a backup using the plugin. (#7095, #7096) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Improved performance and resilience of CNPG-I by removing timeouts for local
+    plugin operations, avoiding failures during longer backup or WAL archiving
+    executions (#7496). <!-- no 1.22 --></p>
+</li>
+<li>
+<p><code>cnpg</code> plugin:</p>
+</li>
+<li>
+<p>Increased the buffer size in the <code>logs pretty</code> command to better handle
+    larger log output (#7281). <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Ensured the <code>plugin-name</code> parameter is required for plugin-based backups
+    and disallowed for non-plugin backup methods (#7506). <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Ensured that the primary Pod is recreated during an imperative restart when
+    <code>primaryUpdateMethod</code> is set to <code>restart</code>, aligning its definition with the
+    replicas. (#7122)</p>
+</li>
+</ul>
+<h3 id="changes_1">Changes</h3>
+<ul>
+<li>
+<p>Updated the default PostgreSQL version to 17.5 for new cluster
+  definitions. (#7556)</p>
+</li>
+<li>
+<p>Updated the default PgBouncer version to <strong>1.24.1</strong> for new <code>Pooler</code>
+  deployments (#7399).</p>
+</li>
+</ul>
+<h2 id="version-1251">Version 1.25.1</h2>
+<p><strong>Release Date:</strong> February 28, 2025</p>
+<h3 id="enhancements_2">Enhancements</h3>
+<ul>
+<li>Introduced a startup probe for the operator to enhance reliability and
+  prevent premature liveness probe failures during initialization. (#7008)</li>
+<li>Added support for using the <code>-r</code> service with the Pooler. (#6868)</li>
+<li>Introduced an optional <code>--ttl</code> flag for the <code>pgbench</code> plugin, enabling
+  automatic deletion of completed jobs after a user-defined duration. (#6701)</li>
+<li>Marked known error messages from the Azure CSI Driver for volume snapshots as
+  retryable, improving resilience. (#6906)</li>
+<li>Updated the default PostgreSQL version to 17.4 for new cluster
+  definitions. (#6960)</li>
+</ul>
+<h3 id="security_1">Security</h3>
+<ul>
+<li>The operator image build process has been enhanced to strengthen
+  security and transparency. Images are now signed with <code>cosign</code>, and
+  OCI attestations are generated, incorporating the Software Bill of
+  Materials (SBOM) and provenance data. Additionally, OCI annotations
+  have been added to improve traceability and ensure the integrity of
+  the images.</li>
+</ul>
+<h3 id="bug-fixes">Bug Fixes</h3>
+<ul>
+<li>Fixed inconsistent behavior in default probe knob values when <code>.spec.probes</code>
+  is defined, ensuring users can override all settings, including
+  <code>failureThreshold</code>. If unspecified in the startup probe, <code>failureThreshold</code> is
+  now correctly derived from <code>.spec.startupDelay / periodSeconds</code> (default: <code>10</code>,
+  now overridable). The same logic applies to liveness probes via
+  <code>.spec.livenessProbeTimeout</code>. (#6656)</li>
+<li>Managed service ports now take precedence over default operator-defined
+  ports. (#6474)</li>
+<li>Fixed an issue where WAL metrics were unavailable after an instance restart
+  until a configuration change was applied. (#6816)</li>
+<li>Fixed an issue in monolithic database import where role import was skipped if
+  no roles were specified. (#6646)</li>
+<li>Added support for new metrics introduced in PgBouncer 1.24. (#6630)</li>
+<li>Resolved an issue where <code>Database</code>, <code>Publication</code>, and <code>Subscription</code> CRDs
+  became stuck in <code>cluster resource has been deleted, skipping reconciliation</code>
+  after cluster rehydration. This patch forces <code>status.observedGeneration</code> to
+  zero, ensuring proper reconciliation. (#6607) <!-- 1.25 only --></li>
+<li>Improved handling of replication-sensitive parameter reductions by ensuring
+  timely reconciliation after primary server restarts. (#6440)</li>
+<li>Introduced a new <code>isWALArchiver</code> flag in the CNPG-I plugin configuration,
+  allowing users to designate a plugin as a WAL archiver. This enables seamless
+  migration from in-tree Barman Cloud support to the plugin while maintaining WAL
+  archive consistency. (#6593)</li>
+<li>Ensured <code>override.conf</code> is consistently included in <code>postgresql.conf</code> during
+  replica cluster bootstrapping, preventing replication failures due to missing
+  configuration settings. (#6808)</li>
+<li>Ensured <code>override.conf</code> is correctly initialized before invoking <code>pg_rewind</code>
+  to prevent failures during primary role changes. (#6670)</li>
+<li>Enhanced webhook responses to return both warnings and errors when
+  applicable, improving diagnostic accuracy. (#6579)</li>
+<li>Ensured the operator version is correctly reconciled. (#6496)</li>
+<li>Improved PostgreSQL version detection by using a more precise check of the
+  data directory. (#6659)</li>
+<li>Volume Snapshot Backups:<ul>
+<li>Fixed an issue where unused backup connections were not properly cleaned
+  up. (#6882)</li>
+<li>Ensured the instance manager closes stale PostgreSQL connections left by
+  failed volume snapshot backups. (#6879)</li>
+<li>Prevented the operator from starting a new volume snapshot backup while
+  another is already in progress. (#6890)</li>
+</ul>
+</li>
+<li><code>cnpg</code> plugin:<ul>
+<li>Restored functionality of the <code>promote</code> plugin command. (#6476)</li>
+<li>Enhanced <code>kubectl cnpg report --logs &lt;cluster&gt;</code> to collect logs from all
+  containers, including sidecars. (#6636)</li>
+<li>Ensured <code>pgbench</code> jobs can run when a <code>Cluster</code> uses an <code>ImageCatalog</code>.
+  (#6868)</li>
+</ul>
+</li>
+</ul>
+<h3 id="technical-enhancements">Technical Enhancements</h3>
+<ul>
+<li>Added support for Kubernetes <code>client-gen</code>, enabling automated generation of
+  Go clients for all CloudNativePG CRDs. (#6695)</li>
+</ul>
+<h2 id="version-1250">Version 1.25.0</h2>
+<p><strong>Release Date:</strong> December 23, 2024</p>
+<h3 id="features">Features</h3>
+<ul>
+<li>
+<p><strong>Declarative Database Management</strong>: Introduce the <code>Database</code> Custom Resource
+  Definition (CRD), enabling users to create and manage PostgreSQL databases
+  declaratively within a cluster. (#5325)</p>
+</li>
+<li>
+<p><strong>Logical Replication Management</strong>: Add <code>Publication</code> and <code>Subscription</code> CRDs
+  for declarative management of PostgreSQL logical replication. These simplify
+  replication setup and facilitate online migrations to CloudNativePG. (#5329)</p>
+</li>
+<li>
+<p><strong>Experimental Support for CNPG-I</strong>: Introducing CNPG-I (CloudNativePG
+  Interface), a standardized framework designed to extend CloudNativePG
+  functionality through third-party plugins and foster the growth of the CNPG
+  ecosystem.
+  The <a href="https://github.com/cloudnative-pg/plugin-barman-cloud">Barman Cloud Plugin</a> serves as a live
+  example, illustrating how plugins can be developed to enhance backup and
+  recovery workflows. Although CNPG-I support is currently experimental, it
+  offers a powerful approach to extending CloudNativePG without modifying the
+  operator’s core code—akin to PostgreSQL extensions. We welcome community
+  feedback and contributions to shape this exciting new capability.</p>
+</li>
+</ul>
+<h3 id="enhancements_3">Enhancements</h3>
+<ul>
+<li>Add the <code>dataDurability</code> option to the <code>.spec.postgresql.synchronous</code> stanza,
+  allowing users to choose between <code>required</code> (default) or <code>preferred</code>
+  durability in synchronous replication. (#5878)</li>
+<li>Enable customization of startup, liveness, and readiness probes through the
+  <code>.spec.probes</code> stanza. (#6266)</li>
+<li>Support additional <code>pg_dump</code> and <code>pg_restore</code> options to enhance database
+  import flexibility. (#6214)</li>
+<li>Add support for <code>maxConcurrentReconciles</code> in the CloudNativePG controller and
+  set the default to 10, improving the operator's ability to efficiently manage
+  larger deployments out of the box. (#5678)</li>
+<li>Add the <code>cnpg.io/userType</code> label to secrets generated for predefined users,
+  specifically <code>superuser</code> and <code>app</code>. (#4392)</li>
+<li>Improved validation for the <code>spec.schedule</code> field in ScheduledBackups,
+  raising warnings for potential misconfigurations. (#5396)</li>
+<li><code>cnpg</code> plugin:<ul>
+<li>Enhance the <code>backup</code> command to support plugins. (#6045)</li>
+<li>Honor the <code>User-Agent</code> header in HTTP requests with the API server. (#6153)</li>
+</ul>
+</li>
+</ul>
+<h3 id="bug-fixes_1">Bug Fixes</h3>
+<ul>
+<li>Ensure the former primary flushes its WAL file queue to the archive before
+  re-synchronizing as a replica, reducing recovery times and enhancing data
+  consistency during failovers. (#6141)</li>
+<li>Clean the WAL volume along with the <code>PGDATA</code> volume during bootstrap. (#6265)</li>
+<li>Update the operator to set the cluster phase to <code>Unrecoverable</code> when
+  all previously generated <code>PersistentVolumeClaims</code> are missing. (#6170)</li>
+<li>Fix the parsing of the <code>synchronous_standby_names</code> GUC when
+  <code>.spec.postgresql.synchronous.method</code> is set to <code>first</code>. (#5955)</li>
+<li>Resolved a potential race condition when patching certain conditions
+  in CRD statuses, improving reliability in concurrent updates. (#6328)</li>
+<li>Correct role changes to apply at the transaction level instead of the
+  database context. (#6064)</li>
+<li>Remove the <code>primary_slot_name</code> definition from the <code>override.conf</code> file on
+  the primary to ensure it is always empty. (#6219)</li>
+<li>Configure libpq environment variables, including <code>PGHOST</code>, in PgBouncer pods
+  to enable seamless access to the <code>pgbouncer</code> virtual database using <code>psql</code>
+  from within the container. (#6247)</li>
+<li>Remove unnecessary updates to the Cluster status when verifying changes in
+  the image catalog. (#6277)</li>
+<li>Prevent panic during recovery from an external server without proper backup
+  configuration. (#6300)</li>
+<li>Resolved a key collision issue in structured logs, where the name field was
+  inconsistently used to log two distinct values. (#6324)</li>
+<li>Ensure proper quoting of the inRoles field in SQL statements to prevent
+  syntax errors in generated SQL during role management. (#6346)</li>
+<li><code>cnpg</code> plugin:<ul>
+<li>Ensure the <code>kubectl</code> context is properly passed in the <code>psql</code> command. (#6257)</li>
+<li>Avoid displaying physical backups block when empty with <code>status</code> command. (#5998)</li>
+</ul>
+</li>
+</ul>
+<h3 id="supported-versions">Supported Versions</h3>
+<ul>
+<li><strong>Kubernetes</strong>: 1.32, 1.31, 1.30, and 1.29</li>
+<li><strong>PostgreSQL</strong>: 17, 16, 15, 14, and 13<ul>
+<li>Default image: PostgreSQL 17.2</li>
+<li>Officially dropped support for PostgreSQL 12</li>
+<li>PostgreSQL 13 support ends on November 12, 2025</li>
+</ul>
+</li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../..";</script>
+    <script src="../../js/theme_extra.js"></script>
+    <script src="../../js/theme.js"></script>
+      <script src="../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/release_notes/v1.26/index.html b/assets/documentation/1.27.0-rc1/release_notes/v1.26/index.html
new file mode 100644
index 000000000..0e1e60837
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/v1.26/index.html
@@ -0,0 +1,721 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.26 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../css/theme.css" />
+    <link rel="stylesheet" href="../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.26";
+        var mkdocs_page_input_path = "release_notes/v1.26.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.26</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-126">Release notes for CloudNativePG 1.26</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>History of user-visible changes in the 1.26 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.26">commits</a>
+on the release branch in GitHub.</p>
+<h2 id="version-1261">Version 1.26.1</h2>
+<p><strong>Release date:</strong> Jul 25, 2025</p>
+<p><em>In memory of <a href="https://www.linkedin.com/in/codepope/">DJ Walker-Morgan</a>.</em></p>
+<h3 id="important-changes">Important Changes</h3>
+<p>CloudNativePG is moving toward a plugin-based, backup and recovery agnostic
+architecture (initiated in 1.26.0 with Barman Cloud). As part of this
+transition, the following fields in the <code>.status</code> section of the <code>Cluster</code>
+resource are now deprecated:</p>
+<ul>
+<li><code>firstRecoverabilityPoint</code></li>
+<li><code>firstRecoverabilityPointByMethod</code></li>
+<li><code>lastSuccessfulBackup</code></li>
+<li><code>lastSuccessfulBackupByMethod</code></li>
+<li><code>lastFailedBackup</code></li>
+</ul>
+<p>Additionally, the following Prometheus metrics are deprecated:</p>
+<ul>
+<li><code>cnpg_collector_first_recoverability_point</code></li>
+<li><code>cnpg_collector_last_available_backup_timestamp</code></li>
+<li><code>cnpg_collector_last_failed_backup_timestamp</code></li>
+</ul>
+<p>These fields and metrics will no longer update when using plugin-based backups
+(e.g., Barman Cloud via CNPG-I). They remain functional for users still using
+in-core Barman Cloud and volume snapshot backups.</p>
+<blockquote>
+<p><strong>Note:</strong> We, as maintainers, are sorry for any inconvenience caused by not
+highlighting this change during the 1.26.0 release. As we transition to a
+plugin-based backup and recovery architecture, we encourage you to <strong>test
+your chosen plugin thoroughly in a staging environment before moving to
+production</strong> to ensure your workflows and observability integration continue
+to meet your needs. Thank you for your understanding and for working with us
+as CloudNativePG evolves to provide a more modular and robust experience.</p>
+</blockquote>
+<h3 id="changes">Changes</h3>
+<ul>
+<li>Removed <code>386</code> and ARM (v5/v6/v7) architectures from the <code>cnpg</code> plugin build
+  matrix, reducing the number of published binaries
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7648">#7648</a>).</li>
+</ul>
+<h3 id="enhancements">Enhancements</h3>
+<ul>
+<li>
+<p>Improved validation of <code>shared_buffers</code> by correctly considering <code>HugePages</code>
+  settings, ensuring accurate memory configuration checks
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7864">#7864</a>).</p>
+</li>
+<li>
+<p>Set <code>oom_score_adj</code> for PostgreSQL worker processes to improve prioritization
+  during out-of-memory situations
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7891">#7891</a>).</p>
+</li>
+<li>
+<p>Added <code>fqdn-uri</code> and <code>fqdn-jdbc-uri</code> fields in user secrets to simplify
+  application connection string management and align with DNS-based connection
+  best practices (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7852">#7852</a>).</p>
+</li>
+<li>
+<p>Added the <code>systemID</code> field and related condition in the <code>Cluster</code> status to track
+  the PostgreSQL system identifier.
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7717">#7717</a>).</p>
+</li>
+</ul>
+<h3 id="fixes">Fixes</h3>
+<ul>
+<li>
+<p>Added a mutex in the connection pooler to protect concurrent access to the
+  connections map, improving stability in high-concurrency environments
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7804">#7804</a>).</p>
+</li>
+<li>
+<p>Fixed replica cluster instance ordering by correctly detecting the designated
+  primary, improving replica cluster stability and switchover operations
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8108">#8108</a>).</p>
+</li>
+<li>
+<p>Added support for reconciling <code>VolumeAttributesClass</code> for PVCs, enhancing
+  storage compatibility and lifecycle management
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7885">#7885</a>).</p>
+</li>
+<li>
+<p>Made the internal webserver routines non-blocking to improve responsiveness
+  under load (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8071">#8071</a>).</p>
+</li>
+<li>
+<p>Fixed an issue where the <code>ensureReplicationClientLeafCertificate</code> error did
+  not display the correct <code>secretName</code> in the not found message
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8086">#8086</a>).</p>
+</li>
+<li>
+<p>Prevented invalid <code>ALTER SUBSCRIPTION</code> statements by updating only
+  PostgreSQL‑supported parameters; unsupported options like <code>copy_data</code> are
+  ignored to avoid reconciliation failures
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7844">7844</a>).</p>
+</li>
+<li>
+<p>Fixed an issue where the <code>bootstrap-controller</code> in the connection pooler did
+  not apply <code>resources</code> settings correctly
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7922">#7922</a>).</p>
+</li>
+<li>
+<p>Ensured online backups fail cleanly if the <code>targetPod</code> becomes unhealthy
+  during backup, preventing partial or misleading backups
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7944">#7944</a>).</p>
+</li>
+<li>
+<p>Ensured the Backup resource status is set properly after a failure, improving
+  observability and scripting reliability
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7898">#7898</a>).</p>
+</li>
+<li>
+<p>Improved liveness probe handling to avoid unnecessary timeouts when they are
+  not required (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7902">#7902</a>).</p>
+</li>
+</ul>
+<h2 id="version-1260">Version 1.26.0</h2>
+<p><strong>Release date:</strong> May 23, 2025</p>
+<h3 id="important-changes_1">Important Changes</h3>
+<ul>
+<li>
+<p><strong>CloudNativePG is now officially a CNCF project</strong>: CloudNativePG has been
+  accepted into the Cloud Native Computing Foundation (CNCF), marking a
+  significant milestone in its evolution. As part of this transition, the project
+  is now governed under <strong>CloudNativePG, a Series of LF Projects, LLC</strong>, ensuring
+  long-term sustainability and community-driven innovation. (#7203)</p>
+</li>
+<li>
+<p><strong>Deprecation of Native Barman Cloud Support</strong>: Native support for Barman
+  Cloud backups and recovery is now deprecated and will be fully removed in
+  CloudNativePG version 1.28.0. Although still available in the current release,
+  users are strongly encouraged to begin migrating their existing clusters to the
+  new <a href="https://cloudnative-pg.io/plugin-barman-cloud/">Barman Cloud Plugin</a> to
+  ensure a smooth and seamless transition. The plugin should also be used for all
+  new deployments. This change marks the first step toward making CloudNativePG a
+  backup-agnostic solution, a goal that will be fully realized when volume
+  snapshot support is also moved to a plugin-based architecture. (#6876)</p>
+</li>
+<li>
+<p><strong>End of Support for Barman 3.4 and Earlier</strong>: CloudNativePG no longer
+  supports Barman versions 3.4 and earlier, including the capability detection
+  framework. Users running older operand versions (from before April 2023) must
+  update their operand before upgrading the operator to avoid compatibility
+  issues. (#7220)</p>
+</li>
+<li>
+<p><strong>Hibernation Command Changes</strong>: The <code>hibernate on</code> and <code>hibernate off</code>
+  commands in the <code>cnpg</code> plugin for <code>kubectl</code> now serve as shortcuts for
+  declarative hibernation. The previous imperative approach has been removed in
+  favor of this method. Additionally, the <code>hibernate status</code> command has been
+  removed, as its functionality is now covered by the standard <code>status</code>
+  command. <strong>Warning:</strong> Do not upgrade to version 1.26 of both the plugin and
+  the operator unless you are prepared to migrate to the declarative
+  hibernation method. (#7155)</p>
+</li>
+</ul>
+<h3 id="features">Features</h3>
+<ul>
+<li>
+<p><strong>Declarative Offline In-Place Major Upgrades of PostgreSQL</strong>: Introduced
+  support for offline in-place major upgrades when a new operand container
+  image with a higher PostgreSQL major version is applied to a cluster. During
+  the upgrade, all cluster pods are shut down to ensure data consistency. A new
+  job is created to validate upgrade conditions, run <code>pg_upgrade</code>, and set up new
+  directories for <code>PGDATA</code>, WAL files, and tablespaces as needed. Once the
+  upgrade is complete, replicas are re-created. Failed upgrades can be rolled
+  back declaratively. (#6664)</p>
+</li>
+<li>
+<p><strong>Improved Startup and Readiness Probes for Replicas</strong>: Enhanced support for
+  Kubernetes startup and readiness probes in PostgreSQL instances, providing
+  greater control over replicas based on the streaming lag. (#6623)</p>
+</li>
+<li>
+<p><strong>Declarative management of extensions and schemas</strong>: Introduced the
+  <code>extensions</code> and <code>schemas</code> stanzas in the Database resource to declaratively
+  create, modify, and drop PostgreSQL extensions and schemas within a database. (#7062)</p>
+</li>
+</ul>
+<h3 id="enhancements_1">Enhancements</h3>
+<ul>
+<li>
+<p>Introduced an opt-in experimental feature to enhance the liveness probe with
+  network isolation detection for primary instances. This feature can be
+  activated via the <code>alpha.cnpg.io/livenessPinger</code> annotation (#7466). <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>Introduced the <code>STANDBY_TCP_USER_TIMEOUT</code> operator configuration setting,
+  allowing users to specify the <code>tcp_user_timeout</code> parameter on all standby
+  instances managed by the operator. (#7036) <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>Introduced the <code>DRAIN_TAINTS</code> operator configuration option, enabling users
+  to customize which node taints indicate a node is being drained. This
+  replaces the previous fixed behavior of only recognizing
+  <code>node.kubernetes.io/unschedulable</code> as a drain signal. (#6928) <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>Added a new field in the <code>status</code> of the <code>Cluster</code> resource to track the
+  latest known Pod IP (#7546).  <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>Added the <code>pg_extensions</code> metric, providing information about installed
+  PostgreSQL extensions and their latest available versions. (#7195) <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>Added the <code>KUBERNETES_CLUSTER_DOMAIN</code> configuration option to the operator,
+  allowing users to specify the domain suffix for fully qualified domain names
+  (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to
+  <code>cluster.local</code>. (#6989) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Implemented the <code>cnpg.io/validation</code> annotation, enabling users to disable
+  the validation webhook on CloudNativePG-managed resources. Use with caution,
+  as this allows unrestricted changes. (#7196)</p>
+</li>
+<li>
+<p>Added support for patching PostgreSQL instance pods using the
+  <code>cnpg.io/podPatch</code> annotation with a JSON Patch. This may introduce
+  discrepancies between the operator’s expectations and Kubernetes behavior, so
+  it should be used with caution. (#6323) <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>Added support for collecting <code>pg_stat_wal</code> metrics in PostgreSQL 18. (#7005)</p>
+</li>
+<li>
+<p>Removed the <code>ENABLE_AZURE_PVC_UPDATES</code> configuration, as it is no longer
+  required to resize Azure volumes correctly. The Azure CSI driver includes the
+  necessary fix as of version <a href="https://github.com/kubernetes-sigs/azuredisk-csi-driver/releases/tag/v1.11.0">1.11.0</a>. (#7297) <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>The <code>.spec.backup.barmanObjectStore</code> and <code>.spec.backup.retentionPolicy</code>
+  fields are now deprecated in favor of the external Barman Cloud Plugin, and a
+  warning is now emitted by the admission webhook when these fields are used in
+  the <code>Cluster</code> specification (#7500).  <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>Added support for LZ4, XZ, and Zstandard compression methods when archiving
+  WAL files via Barman Cloud (<em>deprecated</em>). (#7151)</p>
+</li>
+<li>
+<p>CloudNativePG Interface (CNPG-I):</p>
+<ul>
+<li>
+<p>A plugin can now trigger instance rollouts by implementing the <code>EVALUATE</code>
+  verb, ensuring that plugin-induced changes are properly reconciled. (#7126) <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Introduced support for WAL recovery via CNPG-I plugins during snapshot
+  restore. (#7284) <!-- no 1.24 and 1.22 --></p>
+</li>
+</ul>
+</li>
+</ul>
+<h3 id="security">Security</h3>
+<ul>
+<li>Set <code>imagePullPolicy</code> to <code>Always</code> for the operator deployment to ensure that
+  images are always pulled from the registry, reducing the risk of using
+  outdated or potentially unsafe local images. (#7250)</li>
+</ul>
+<h3 id="fixes_1">Fixes</h3>
+<ul>
+<li>
+<p>Fixed native replication slot synchronization and logical replication
+  failover for PostgreSQL 17 by appending the <code>dbname</code> parameter to
+  <code>primary_conninfo</code> in replica configurations (#7298).</p>
+</li>
+<li>
+<p>Fixed a regression in WAL restore operations that prevented fallback to the
+  in-tree <code>barmanObjectStore</code> configuration defined in the <code>externalCluster</code>
+  source when a plugin failed to locate a WAL file (#7507). <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Improved backup efficiency by introducing a fail-fast mechanism in WAL
+  archiving, allowing quicker detection of unexpected primary demotion and
+  avoiding unnecessary retries (#7483).</p>
+</li>
+<li>
+<p>Fixed an off-by-one error in parallel WAL archiving that could cause one
+  extra worker process to be spawned beyond the requested number (#7389).</p>
+</li>
+<li>
+<p>Resolved a race condition that caused the operator to perform two switchovers
+  when updating the PostgreSQL configuration. (#6991)</p>
+</li>
+<li>
+<p>Corrected the <code>PodMonitor</code> configuration by adjusting the <code>matchLabels</code> scope
+  for the targeted pooler and cluster pods. Previously, the <code>matchLabels</code> were
+  too broad, inadvertently inheriting labels from the cluster and leading to data
+  collection from unintended targets. (#7063)</p>
+</li>
+<li>
+<p>Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in
+  the <code>shared_buffers</code> configuration. This will become an error in future
+  releases. Users should update their configurations to include explicit units
+  (e.g., <code>512MB</code> instead of <code>512</code>). (#7160)</p>
+</li>
+<li>
+<p>Treated timeout errors during volume snapshot creation as retryable to
+  prevent unnecessary backup failures. (#7010) <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Moved the defaulting logic for <code>.spec.postgresql.synchronous.dataDurability</code>
+  from the CRD to the webhook to avoid UI issues with OLM. (#7600) <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>CloudNativePG Interface (CNPG-I):</p>
+<ul>
+<li>
+<p>Implemented automatic reloading of TLS certificates for plugins when they
+  change. (#7029) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Ensured the operator properly closes the plugin connection when
+  performing a backup using the plugin. (#7095, #7096) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Fixed an issue that prevented WALs from being archived on a former
+  primary node when using a plugin. (#6964) <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>Improved performance and resilience of CNPG-I by removing timeouts for local
+  plugin operations, avoiding failures during longer backup or WAL archiving
+  executions (#7496). <!-- no 1.22 --></p>
+</li>
+</ul>
+</li>
+<li>
+<p><code>cnpg</code> plugin:</p>
+<ul>
+<li>
+<p>Increased the buffer size in the <code>logs pretty</code> command to better handle
+  larger log output (#7281). <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Ensured the <code>plugin-name</code> parameter is required for plugin-based backups
+  and disallowed for non-plugin backup methods (#7506). <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Ensured that the primary Pod is recreated during an imperative restart when
+  <code>primaryUpdateMethod</code> is set to <code>restart</code>, aligning its definition with the
+  replicas. (#7122)</p>
+</li>
+</ul>
+</li>
+</ul>
+<h3 id="changes_1">Changes</h3>
+<ul>
+<li>
+<p>Updated the default PostgreSQL version to 17.5 for new cluster
+  definitions. (#7556)</p>
+</li>
+<li>
+<p>Updated the default PgBouncer version to <strong>1.24.1</strong> for new <code>Pooler</code>
+  deployments (#7399).</p>
+</li>
+</ul>
+<h3 id="supported-versions">Supported versions</h3>
+<ul>
+<li>Kubernetes 1.33, 1.32, 1.31, and 1.30</li>
+<li>PostgreSQL 17, 16, 15, 14, and 13<ul>
+<li>PostgreSQL 17.5 is the default image</li>
+<li>PostgreSQL 13 support ends on November 12, 2025</li>
+</ul>
+</li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../..";</script>
+    <script src="../../js/theme_extra.js"></script>
+    <script src="../../js/theme.js"></script>
+      <script src="../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/release_notes/v1.27/index.html b/assets/documentation/1.27.0-rc1/release_notes/v1.27/index.html
new file mode 100644
index 000000000..4c23784a8
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/release_notes/v1.27/index.html
@@ -0,0 +1,454 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.27 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../css/theme.css" />
+    <link rel="stylesheet" href="../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.27";
+        var mkdocs_page_input_path = "release_notes/v1.27.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.27</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-127">Release notes for CloudNativePG 1.27</h1>
+<p>History of user-visible changes in the 1.27 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.27">commits</a>
+on the release branch in GitHub.</p>
+<h2 id="version-1270-rc1">Version 1.27.0-rc1</h2>
+<p><strong>Release date:</strong> Jul 29, 2025</p>
+<h3 id="important-changes">Important changes:</h3>
+<ul>
+<li>A change in the default behavior of the <a href="instance_manager.md#liveness-probe">liveness probe</a>,
+  now enforcing the <a href="instance_manager.md#primary-isolation">shutdown of an isolated primary</a>
+  within the <code>livenessProbeTimeout</code> (30 seconds), will require a restart of your pods.</li>
+</ul>
+<h3 id="features">Features:</h3>
+<ul>
+<li>
+<p><strong>Dynamic loading of PostgreSQL extensions</strong>: Introduced the
+  <code>.spec.postgresql.extensions</code> stanza for mounting PostgreSQL extensions,
+  packaged as OCI-compliant container images, as read-only and immutable volumes
+  inside instance pods. This allows dynamic extension management without
+  rebuilding base images.
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7991">#7991</a>).</p>
+</li>
+<li>
+<p><strong>Logical decoding slot synchronization in HA clusters</strong>: Added the
+  <code>synchronizeLogicalDecoding</code> field under
+  <code>spec.replicationSlots.highAvailability</code> to enable automatic synchronization of
+  logical decoding slots across high-availability clusters, ensuring logical
+  replication subscribers continue seamlessly after a publisher failover
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7931">#7931</a>).</p>
+</li>
+<li>
+<p><strong>Primary Isolation Check</strong>: Promoted to stable the liveness pinger
+  experimental feature introduced in 1.26, adding the
+  <code>.spec.probes.liveness.isolationCheck</code> section to enable primary isolation
+  checks in the liveness probe by default. This improves the detection and
+  handling of primary connectivity issues in Kubernetes environments
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7845">#7845</a>).</p>
+</li>
+</ul>
+<h3 id="enhancements">Enhancements:</h3>
+<!-- TODO: add to 1.27.0 when the fix is available
+- Enabled simultaneous image and configuration changes, allowing you to update
+  the container image (including PostgreSQL version or extensions) and
+  PostgreSQL configuration settings in the same operation. The operator first
+  applies the image change, followed by the configuration changes in a subsequent
+  rollout, ensuring safe and consistent cluster updates
+  ([#8115](https://github.com/cloudnative-pg/cloudnative-pg/pull/8115)).
+-->
+<ul>
+<li>
+<p>Introduced an opt-in experimental feature that enables quorum-based failover
+  to improve safety and data durability during failover events. This feature,
+  also called failover quorum, can be activated via the
+  <code>alpha.cnpg.io/failoverQuorum</code> annotation.
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7572">#7572</a>).</p>
+</li>
+<li>
+<p>Added support for user maps for predefined users such as <code>streaming_replica</code>,
+  allowing the use of self-managed client certificates with different Common
+  Names in environments with strict policies or shared CAs, while still enabling
+  replicas to join clusters using the <code>streaming_replica</code> role
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7725">#7725</a>).</p>
+</li>
+<li>
+<p>Added a new <code>PhaseFailurePlugin</code> phase in the <code>Cluster</code> status to improve
+  observability of plugin-related failures
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7988">#7988</a>).</p>
+</li>
+<li>
+<p>Made the <code>Backup.spec</code> field immutable after creation, ensuring consistency
+  and predictability in backup operations
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7904">#7904</a>).</p>
+</li>
+<li>
+<p>Added <code>fqdn-uri</code> and <code>fqdn-jdbc-uri</code> fields in the user secret to simplify
+  the retrieval of fully qualified domain name-based connection strings
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7852">#7852</a>).</p>
+</li>
+<li>
+<p>CNPG-I:</p>
+<ul>
+<li>
+<p>Added <code>Postgres</code> interface support to the CNPG-I operator, continuing the
+  transition toward a plugin-based architecture
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7179">#7179</a>).</p>
+</li>
+<li>
+<p>Added <code>metrics</code> capabilities to the CNPG-I instance webserver, enabling
+  metrics exposure directly from the instance for better observability
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8033">#8033</a>).</p>
+</li>
+</ul>
+</li>
+</ul>
+<h3 id="supported-versions">Supported versions</h3>
+<ul>
+<li>Kubernetes 1.33, 1.32, and 1.31</li>
+<li>PostgreSQL 17, 16, 15, 14, and 13<ul>
+<li>PostgreSQL 17.5 is the default image</li>
+<li>PostgreSQL 13 support ends on November 12, 2025</li>
+</ul>
+</li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../..";</script>
+    <script src="../../js/theme_extra.js"></script>
+    <script src="../../js/theme.js"></script>
+      <script src="../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/replica_cluster/index.html b/assets/documentation/1.27.0-rc1/replica_cluster/index.html
new file mode 100644
index 000000000..f99440bec
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/replica_cluster/index.html
@@ -0,0 +1,962 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Replica clusters - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Replica clusters";
+        var mkdocs_page_input_path = "replica_cluster.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Replica clusters</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#basic-concepts">Basic Concepts</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#about-postgresql-roles">About PostgreSQL Roles</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#bootstrapping-a-replica-cluster">Bootstrapping a Replica Cluster</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#configuring-replication">Configuring Replication</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#defining-an-external-cluster">Defining an External Cluster</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#backup-and-symmetric-architectures">Backup and Symmetric Architectures</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#distributed-architecture-flexibility">Distributed Architecture Flexibility</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#setting-up-a-replica-cluster">Setting Up a Replica Cluster</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#distributed-topology">Distributed Topology</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#planning-for-a-distributed-postgresql-database">Planning for a Distributed PostgreSQL Database</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#demoting-a-primary-to-a-replica-cluster">Demoting a Primary to a Replica Cluster</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#promoting-a-replica-to-a-primary-cluster">Promoting a Replica to a Primary Cluster</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#standalone-replica-clusters">Standalone Replica Clusters</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#main-differences-with-distributed-topology">Main Differences with Distributed Topology</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#example-of-standalone-replica-cluster-using-pg_basebackup">Example of Standalone Replica Cluster using pg_basebackup</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#example-of-standalone-replica-cluster-from-an-object-store">Example of Standalone Replica Cluster from an object store</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#example-using-a-volume-snapshot">Example using a Volume Snapshot</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#delayed-replicas">Delayed replicas</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Replica clusters</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="replica-clusters">Replica clusters</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>A replica cluster is a CloudNativePG <code>Cluster</code> resource designed to
+replicate data from another PostgreSQL instance, ideally also managed by
+CloudNativePG.</p>
+<p>Typically, a replica cluster is deployed in a different Kubernetes cluster in
+another region. These clusters can be configured to perform cascading
+replication and can rely on object stores for data replication from the source,
+as detailed further down.</p>
+<p>There are primarily two use cases for replica clusters:</p>
+<ol>
+<li>
+<p><strong>Disaster Recovery and High Availability</strong>: Enhance disaster recovery and,
+   to some extent, high availability of a CloudNativePG cluster across different
+   Kubernetes clusters, typically located in different regions. In CloudNativePG
+   terms, this is known as a <a href="./#distributed-topology">"Distributed Topology"</a>.</p>
+</li>
+<li>
+<p><strong>Read-Only Workloads</strong>: Create standalone replicas of a PostgreSQL cluster
+   for purposes such as reporting or Online Analytical Processing (OLAP). These
+   replicas are primarily for read-only workloads. In CloudNativePG terms, this
+   is referred to as a <a href="./#standalone-replica-clusters">"Standalone Replica Cluster"</a>.</p>
+</li>
+</ol>
+<p>For example, the diagram below — taken from the <a href="../architecture/#deployments-across-kubernetes-clusters">"Architecture" section</a>
+— illustrates a distributed PostgreSQL topology spanning two Kubernetes
+clusters, with a symmetric replica cluster primarily serving disaster recovery
+purposes.</p>
+<p><img alt="An example of multi-cluster deployment with a primary and a replica cluster" src="../images/multi-cluster.png" /></p>
+<h2 id="basic-concepts">Basic Concepts</h2>
+<p>CloudNativePG builds on the PostgreSQL replication framework, allowing you to
+create and synchronize a PostgreSQL cluster from an existing source cluster
+using the replica cluster feature — described in this section. The source can
+be a primary cluster or another replica cluster (cascading replication).</p>
+<h3 id="about-postgresql-roles">About PostgreSQL Roles</h3>
+<p>A replica cluster operates in continuous recovery mode, meaning no changes to
+the database, including the catalog and global objects like roles or databases,
+are permitted. These changes are deferred until the <code>Cluster</code> transitions to
+primary. During this phase, global objects such as roles remain as defined in
+the source cluster. CloudNativePG applies any local redefinitions once the
+cluster is promoted.</p>
+<p>If you are not planning to promote the cluster (e.g., for read-only workloads)
+or if you intend to detach completely from the source cluster
+once the replica cluster is promoted, you don't need to take any action.
+This is normally the case of the <a href="./#standalone-replica-clusters">"Standalone Replica Cluster"</a>.</p>
+<p>If you are planning to promote the cluster at some point, CloudNativePG will
+manage the following roles and passwords when transitioning from replica
+cluster to primary:</p>
+<ul>
+<li>the application user</li>
+<li>the superuser (if you are using it)</li>
+<li>any role defined using the <a href="../declarative_role_management/">declarative interface</a></li>
+</ul>
+<p>If your intention is to seamlessly ensure that the above roles and passwords
+don't change, you need to define the necessary secrets for the above in each
+<code>Cluster</code>.
+This is normally the case of the <a href="./#distributed-topology">"Distributed Topology"</a>.</p>
+<h3 id="bootstrapping-a-replica-cluster">Bootstrapping a Replica Cluster</h3>
+<p>The first step is to bootstrap the replica cluster using one of the following
+methods:</p>
+<ul>
+<li><strong>Streaming replication</strong> via <code>pg_basebackup</code></li>
+<li><strong>Recovery from a volume snapshot</strong></li>
+<li><strong>Recovery from a Barman Cloud backup</strong> in an object store</li>
+</ul>
+<p>For detailed instructions on cloning a PostgreSQL server using <code>pg_basebackup</code>
+(streaming) or recovery (volume snapshot or object store), refer to the
+<a href="../bootstrap/#bootstrap-from-another-cluster">"Bootstrap" section</a>.</p>
+<h3 id="configuring-replication">Configuring Replication</h3>
+<p>Once the base backup for the replica cluster is available, you need to define
+how changes will be replicated from the origin using PostgreSQL continuous
+recovery. There are three main options:</p>
+<ol>
+<li><strong>Streaming Replication</strong>: Set up streaming replication between the replica
+   cluster and the source. This method requires configuring network connections
+   and implementing appropriate administrative and security measures to ensure
+   seamless data transfer.</li>
+<li><strong>WAL Archive</strong>: Use the WAL (Write-Ahead Logging) archive stored in an
+   object store. WAL files are regularly transferred from the source cluster to
+   the object store, from where a CNPG-I plugin like <a href="https://cloudnative-pg.io/plugin-barman-cloud/">Barman Cloud</a>
+   retrieves them for the replica cluster via the <code>restore_command</code>.</li>
+<li><strong>Hybrid Approach</strong>: Combine both streaming replication and WAL archive
+   methods. PostgreSQL can manage and switch between these two approaches as
+   needed to ensure data consistency and availability.</li>
+</ol>
+<h3 id="defining-an-external-cluster">Defining an External Cluster</h3>
+<p>When configuring the external cluster, you have the following options:</p>
+<ul>
+<li>
+<p><strong><code>plugin</code> section</strong>:</p>
+<ul>
+<li>Enables bootstrapping the replica cluster using a <a href="https://github.com/cloudnative-pg/cnpg-i">CNPG-I</a>
+  plugin that support the
+  <a href="https://github.com/cloudnative-pg/cnpg-i/blob/main/docs/protocol.md#restore_job-proto"><code>restore_job</code></a>
+  and the <a href="https://github.com/cloudnative-pg/cnpg-i/blob/main/docs/protocol.md#wal-proto"><code>wal</code></a> protocols.</li>
+<li>CloudNativePG supports the <a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/usage/#restoring-a-cluster">Barman Cloud Plugin</a>
+  to allow bootstrapping the replica cluster from an object store.</li>
+</ul>
+</li>
+<li>
+<p><strong><code>connectionParameters</code> section</strong>:</p>
+<ul>
+<li>Enables bootstrapping the replica cluster via streaming replication using
+  the <code>pg_basebackup</code> section.</li>
+<li>CloudNativePG automatically sets the <code>primary_conninfo</code> option in the
+  designated primary instance, initiating a WAL receiver process to connect
+  to the source cluster and receive data.</li>
+</ul>
+</li>
+</ul>
+<p>You still have access to the <strong><code>barmanObjectStore</code> section</strong>, although deprecated:</p>
+<ul>
+<li>Enables use of the WAL archive, with CloudNativePG automatically setting
+  the <code>restore_command</code> in the designated primary instance.</li>
+<li>Allows bootstrapping the replica cluster from an object store using the
+ <code>recovery</code> section if volume snapshots are not feasible.</li>
+</ul>
+<h3 id="backup-and-symmetric-architectures">Backup and Symmetric Architectures</h3>
+<p>The replica cluster can perform backups to a reserved object store from the
+designated primary, supporting symmetric architectures in a distributed
+environment. This architectural choice is crucial as it ensures the cluster is
+prepared for promotion during a controlled data center switchover or a failover
+following an unexpected event.</p>
+<h3 id="distributed-architecture-flexibility">Distributed Architecture Flexibility</h3>
+<p>You have the flexibility to design your preferred distributed architecture for
+a PostgreSQL database, choosing from:</p>
+<ul>
+<li><strong>Private Cloud</strong>: Spanning multiple Kubernetes clusters in different data
+  centers.</li>
+<li><strong>Public Cloud</strong>: Spanning multiple Kubernetes clusters in different regions.</li>
+<li><strong>Hybrid Cloud</strong>: Combining private and public clouds.</li>
+<li><strong>Multi-Cloud</strong>: Spanning multiple Kubernetes clusters across different
+  regions and Cloud Service Providers.</li>
+</ul>
+<h2 id="setting-up-a-replica-cluster">Setting Up a Replica Cluster</h2>
+<p>To set up a replica cluster from a source cluster, follow these steps to create
+a cluster YAML file and configure it accordingly:</p>
+<ol>
+<li>
+<p><strong>Define External Clusters</strong>:</p>
+<ul>
+<li>In the <code>externalClusters</code> section, specify the replica cluster.</li>
+<li>For a distributed PostgreSQL topology aimed at disaster recovery (DR) and
+  high availability (HA), this section should be defined for every
+  PostgreSQL cluster in the distributed database.</li>
+</ul>
+</li>
+<li>
+<p><strong>Bootstrap the Replica Cluster</strong>:</p>
+<ul>
+<li><strong>Streaming Bootstrap</strong>: Use the <code>pg_basebackup</code> section for bootstrapping
+  via streaming replication.</li>
+<li><strong>Snapshot/Object Store Bootstrap</strong>: Use the <code>recovery</code> section to
+  bootstrap from a volume snapshot or an object store.</li>
+</ul>
+</li>
+<li><strong>Continuous Recovery Strategy</strong>: Define this in the <code>.spec.replica</code> stanza:<ul>
+<li><strong>Distributed Topology</strong>: Configure using the <code>primary</code>, <code>source</code>, and
+  <code>self</code> fields along with the distributed topology defined in
+  <code>externalClusters</code>. This allows CloudNativePG to declaratively control the
+  demotion of a primary cluster and the subsequent promotion of a replica cluster
+  using a promotion token.</li>
+<li><strong>Standalone Replica Cluster</strong>: Enable continuous recovery using the
+  <code>enabled</code> option and set the <code>source</code> field to point to an
+  <code>externalClusters</code> name. This configuration is suitable for creating replicas
+  primarily intended for read-only workloads.</li>
+</ul>
+</li>
+</ol>
+<p>Both the Distributed Topology and the Standalone Replica Cluster strategies for
+continuous recovery are thoroughly explained below.</p>
+<h2 id="distributed-topology">Distributed Topology</h2>
+<h3 id="planning-for-a-distributed-postgresql-database">Planning for a Distributed PostgreSQL Database</h3>
+<p>As Dwight Eisenhower famously said, "Planning is everything", and this holds
+true for designing PostgreSQL architectures in Kubernetes.</p>
+<p>First, conceptualize your distributed topology on paper, and then translate it
+into a CloudNativePG API configuration. This configuration primarily involves:</p>
+<ul>
+<li>The <code>externalClusters</code> section, which must be included in every <code>Cluster</code>
+  definition within your distributed PostgreSQL setup.</li>
+<li>The <code>.spec.replica</code> stanza, specifically the <code>primary</code>, <code>source</code>, and
+  (optionally) <code>self</code> fields.</li>
+</ul>
+<p>For example, suppose you want to deploy a PostgreSQL cluster distributed across
+two Kubernetes clusters located in Southern Europe and Central Europe.</p>
+<p>In this scenario, assume you have CloudNativePG installed in the Southern
+Europe Kubernetes cluster, with a PostgreSQL <code>Cluster</code> named <code>cluster-eu-south</code>
+acting as the primary. This cluster has continuous backup configured with a
+local object store. This object store is also accessible by the PostgreSQL
+<code>Cluster</code> named <code>cluster-eu-central</code>, installed in the Central European
+Kubernetes cluster. Initially, <code>cluster-eu-central</code> functions as a replica
+cluster. Following a symmetric approach, it also has a local object store for
+continuous backup, which needs to be read by <code>cluster-eu-south</code>.</p>
+<p>In this example, recovery is performed solely through WAL shipping, without any
+streaming replication between the two clusters. However, you can configure the
+setup to use streaming replication alone or adopt a hybrid approach—streaming
+replication with WAL shipping as a fallback—as described in the
+<a href="./#defining-an-external-cluster">“Configuring replication”</a>
+section.</p>
+<p>Here’s how you would configure the <code>externalClusters</code> section for both
+<code>Cluster</code> resources, relying on Barman Cloud Plugin for the object store:</p>
+<pre><code class="language-yaml"># Distributed topology configuration
+externalClusters:
+  - name: cluster-eu-south
+    plugin:
+      name: barman-cloud.cloudnative-pg.io
+      parameters:
+        barmanObjectName: cluster-eu-south
+        serverName: cluster-eu-south
+  - name: cluster-eu-central
+    plugin:
+      name: barman-cloud.cloudnative-pg.io
+      parameters:
+        barmanObjectName: cluster-eu-central
+        serverName: cluster-eu-central
+</code></pre>
+<p>The <code>.spec.replica</code> stanza for the <code>cluster-eu-south</code> PostgreSQL primary
+<code>Cluster</code> should be configured as follows:</p>
+<pre><code class="language-yaml">replica:
+  primary: cluster-eu-south
+  source: cluster-eu-central
+</code></pre>
+<p>Meanwhile, the <code>.spec.replica</code> stanza for the <code>cluster-eu-central</code> PostgreSQL
+replica <code>Cluster</code> should be configured as:</p>
+<pre><code class="language-yaml">replica:
+  primary: cluster-eu-south
+  source: cluster-eu-south
+</code></pre>
+<p>In this configuration, when the <code>primary</code> field matches the name of the
+<code>Cluster</code> resource (or <code>.spec.replica.self</code> if a different one is used), the
+current cluster is considered the primary in the distributed topology.
+Otherwise, it is set as a replica from the <code>source</code> (in this case, using the
+Barman object store).</p>
+<p>This setup allows you to efficiently manage a distributed PostgreSQL
+architecture across multiple Kubernetes clusters, ensuring both high
+availability and disaster recovery through controlled switchover of a primary
+PostgreSQL cluster using declarative configuration.</p>
+<p>Controlled switchover in a distributed topology is a two-step process
+involving:</p>
+<ul>
+<li>Demotion of a primary cluster to a replica cluster</li>
+<li>Promotion of a replica cluster to a primary cluster</li>
+</ul>
+<p>These processes are described in the next sections.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Before you proceed, ensure you review the <a href="#about-postgresql-roles">"About PostgreSQL Roles" section</a>
+above and use identical role definitions, including secrets, in all
+<code>Cluster</code> objects participating in the distributed topology.</p>
+</div>
+<h3 id="demoting-a-primary-to-a-replica-cluster">Demoting a Primary to a Replica Cluster</h3>
+<p>CloudNativePG provides the functionality to demote a primary cluster to a
+replica cluster. This action is typically planned when transitioning the
+primary role from one data center to another. The process involves demoting the
+current primary cluster (e.g., <code>cluster-eu-south</code>) to a replica cluster and
+subsequently promoting the designated replica cluster (e.g.,
+<code>cluster-eu-central</code>) to primary when fully synchronized.</p>
+<p>Provided you have defined an external cluster in the current primary <code>Cluster</code>
+resource that points to the replica cluster that's been selected to become the
+new primary, all you need to do is change the <code>primary</code> field as follows:</p>
+<pre><code class="language-yaml">replica:
+  primary: cluster-eu-central
+  source: cluster-eu-central
+</code></pre>
+<p>When the primary PostgreSQL cluster is demoted, write operations are no
+longer possible. CloudNativePG then:</p>
+<ol>
+<li>
+<p>Archives the WAL file containing the shutdown checkpoint as a <code>.partial</code>
+   file in the WAL archive.</p>
+</li>
+<li>
+<p>Generates a <code>demotionToken</code> in the status, a base64-encoded JSON structure
+   containing relevant information from <code>pg_controldata</code> such as the system
+   identifier, the timestamp, timeline ID, REDO location, and REDO WAL file of the
+   latest checkpoint.</p>
+</li>
+</ol>
+<p>The first step is necessary to demote/promote using solely the WAL archive to
+feed the continuous recovery process (without streaming replication).</p>
+<p>The second step, generation of the <code>.status.demotionToken</code>, will ensure a
+smooth demotion/promotion process, without any data loss and without rebuilding
+the former primary.</p>
+<p>At this stage, the former primary has transitioned to a replica cluster,
+awaiting WAL data from the new global primary: <code>cluster-eu-central</code>.</p>
+<p>To proceed with promoting the other cluster, you need to retrieve the
+<code>demotionToken</code> from <code>cluster-eu-south</code> using the following command:</p>
+<pre><code class="language-sh">kubectl get cluster cluster-eu-south \
+  -o jsonpath='{.status.demotionToken}'
+</code></pre>
+<p>You can obtain the <code>demotionToken</code> using the <code>cnpg</code> plugin by checking the
+cluster's status. The token is listed under the <code>Demotion token</code> section.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The <code>demotionToken</code> obtained from <code>cluster-eu-south</code> will serve as the
+<code>promotionToken</code> for <code>cluster-eu-central</code>.</p>
+</div>
+<p>You can verify the role change using the <code>cnpg</code> plugin, checking the status of
+the cluster:</p>
+<pre><code class="language-shell">kubectl cnpg status cluster-eu-south
+</code></pre>
+<h3 id="promoting-a-replica-to-a-primary-cluster">Promoting a Replica to a Primary Cluster</h3>
+<p>To promote a PostgreSQL replica cluster (e.g., <code>cluster-eu-central</code>) to a
+primary cluster and make the designated primary an actual primary instance,
+you need to perform the following steps simultaneously:</p>
+<ol>
+<li>Set the <code>.spec.replica.primary</code> to the name of the current replica cluster
+   to be promoted (e.g., <code>cluster-eu-central</code>).</li>
+<li>Set the <code>.spec.replica.promotionToken</code> with the value obtained from the
+   former primary cluster (refer to <a href="./#demoting-a-primary-to-a-replica-cluster">"Demoting a Primary to a Replica Cluster"</a>).</li>
+</ol>
+<p>The updated <code>replica</code> section in <code>cluster-eu-central</code>'s spec should look like
+this:</p>
+<pre><code class="language-yaml">replica:
+  primary: cluster-eu-central
+  promotionToken: &lt;PROMOTION_TOKEN&gt;
+  source: cluster-eu-south
+</code></pre>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>It is crucial to apply the changes to the <code>primary</code> and <code>promotionToken</code>
+fields simultaneously. If the promotion token is omitted, a failover will be
+triggered, necessitating a rebuild of the former primary.</p>
+</div>
+<p>After making these adjustments, CloudNativePG will initiate the promotion of
+the replica cluster to a primary cluster. Initially, CloudNativePG will wait
+for the designated primary cluster to replicate all Write-Ahead Logging (WAL)
+information up to the specified Log Sequence Number (LSN) contained in the
+token. Once this target is achieved, the promotion process will commence. The
+new primary cluster will switch timelines, archive the history file and new
+WAL, thereby unblocking the replication process in the <code>cluster-eu-south</code>
+cluster, which will then operate as a replica.</p>
+<p>To verify the role change, use the <code>cnpg</code> plugin to check the status of the
+cluster:</p>
+<pre><code class="language-shell">kubectl cnpg status cluster-eu-central
+</code></pre>
+<p>This command will provide you with the current status of <code>cluster-eu-central</code>,
+confirming its promotion to primary.</p>
+<p>By following these steps, you ensure a smooth and controlled promotion process,
+minimizing disruption and maintaining data integrity across your PostgreSQL
+clusters.</p>
+<h2 id="standalone-replica-clusters">Standalone Replica Clusters</h2>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Standalone Replica Clusters were previously known as Replica Clusters
+before the introduction of the Distributed Topology strategy in CloudNativePG
+1.24.</p>
+</div>
+<p>In CloudNativePG, a Standalone Replica Cluster is a PostgreSQL cluster in
+continuous recovery with the following configurations:</p>
+<ul>
+<li><code>.spec.replica.enabled</code> set to <code>true</code></li>
+<li>A physical replication source defined via the <code>.spec.replica.source</code> field,
+  pointing to an <code>externalClusters</code> name</li>
+</ul>
+<p>When <code>.spec.replica.enabled</code> is set to <code>false</code>, the replica cluster exits
+continuous recovery mode and becomes a primary cluster, completely detached
+from the original source.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Disabling replication is an <strong>irreversible</strong> operation. Once replication is
+disabled and the designated primary is promoted to primary, the replica cluster
+and the source cluster become two independent clusters definitively.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Standalone replica clusters are suitable for several use cases, primarily
+involving read-only workloads. If you are planning to setup a disaster
+recovery solution, look into "Distributed Topology" above.</p>
+</div>
+<h3 id="main-differences-with-distributed-topology">Main Differences with Distributed Topology</h3>
+<p>Although Standalone Replica Clusters can be used for disaster recovery
+purposes, they differ from the "Distributed Topology" strategy in several key
+ways:</p>
+<ul>
+<li><strong>Lack of Distributed Database Concept</strong>: Standalone Replica Clusters do not
+  support the concept of a distributed database, whether in simple forms (two
+  clusters) or more complex configurations (e.g., three clusters in a circular
+  topology).</li>
+<li><strong>No Global Primary Cluster</strong>: There is no notion of a global primary cluster
+  in Standalone Replica Clusters.</li>
+<li><strong>No Controlled Switchover</strong>: A Standalone Replica Cluster can only be
+  promoted to primary. The former primary cluster must be re-cloned, as
+  controlled switchover is not possible.</li>
+</ul>
+<p>Failover is identical in both strategies, requiring the former primary to be
+re-cloned if it ever comes back up.</p>
+<h3 id="example-of-standalone-replica-cluster-using-pg_basebackup">Example of Standalone Replica Cluster using <code>pg_basebackup</code></h3>
+<p>This <strong>first example</strong> defines a standalone replica cluster using streaming
+replication in both bootstrap and continuous recovery. The replica cluster
+connects to the source cluster using TLS authentication.</p>
+<p>You can check the <a href="../samples/cluster-example-replica-streaming.yaml">sample YAML</a>
+in the <code>samples/</code> subdirectory.</p>
+<p>Note the <code>bootstrap</code> and <code>replica</code> sections pointing to the source cluster.</p>
+<pre><code class="language-yaml">  bootstrap:
+    pg_basebackup:
+      source: cluster-example
+
+  replica:
+    enabled: true
+    source: cluster-example
+</code></pre>
+<p>The previous configuration assumes that the application database and its owning
+user are set to the default, <code>app</code>. If the PostgreSQL cluster being restored
+uses different names, you must specify them as documented in <a href="../bootstrap/#configure-the-application-database">Configure the application database</a>.
+You should also consider copying over the application user secret from
+the original cluster and keep it synchronized with the source.
+See <a href="#about-postgresql-roles">"About PostgreSQL Roles"</a> for more details.</p>
+<p>In the <code>externalClusters</code> section, remember to use the right namespace for the
+host in the <code>connectionParameters</code> sub-section.
+The <code>-replication</code> and <code>-ca</code> secrets should have been copied over if necessary,
+in case the replica cluster is in a separate namespace.</p>
+<pre><code class="language-yaml">  externalClusters:
+  - name: &lt;MAIN-CLUSTER&gt;
+    connectionParameters:
+      host: &lt;MAIN-CLUSTER&gt;-rw.&lt;NAMESPACE&gt;.svc
+      user: streaming_replica
+      sslmode: verify-full
+      dbname: postgres
+    sslKey:
+      name: &lt;MAIN-CLUSTER&gt;-replication
+      key: tls.key
+    sslCert:
+      name: &lt;MAIN-CLUSTER&gt;-replication
+      key: tls.crt
+    sslRootCert:
+      name: &lt;MAIN-CLUSTER&gt;-ca
+      key: ca.crt
+</code></pre>
+<h3 id="example-of-standalone-replica-cluster-from-an-object-store">Example of Standalone Replica Cluster from an object store</h3>
+<p>The <strong>second example</strong> defines a replica cluster that bootstraps from an object
+store using the <code>recovery</code> section and continuous recovery using both streaming
+replication and the given object store. For streaming replication, the replica
+cluster connects to the source cluster using basic authentication.</p>
+<p>You can check the <a href="../samples/cluster-example-replica-from-backup-simple.yaml">sample YAML</a>
+for it in the <code>samples/</code> subdirectory.</p>
+<p>Note the <code>bootstrap</code> and <code>replica</code> sections pointing to the source cluster.</p>
+<pre><code class="language-yaml">  bootstrap:
+    recovery:
+      source: cluster-example
+
+  replica:
+    enabled: true
+    source: cluster-example
+</code></pre>
+<p>The previous configuration assumes that the application database and its owning
+user are set to the default, <code>app</code>. If the PostgreSQL cluster being restored
+uses different names, you must specify them as documented in <a href="../recovery/#configure-the-application-database">Configure the application database</a>.
+You should also consider copying over the application user secret from
+the original cluster and keep it synchronized with the source.
+See <a href="#about-postgresql-roles">"About PostgreSQL Roles"</a> for more details.</p>
+<p>In the <code>externalClusters</code> section, take care to use the right namespace in the
+<code>endpointURL</code> and the <code>connectionParameters.host</code>.
+And do ensure that the necessary secrets have been copied if necessary, and that
+a backup of the source cluster has been created already.</p>
+<pre><code class="language-yaml">  externalClusters:
+  - name: &lt;MAIN-CLUSTER&gt;
+    # Example with Barman Cloud Plugin
+    plugin:
+      name: barman-cloud.cloudnative-pg.io
+      parameters:
+        barmanObjectName: &lt;MAIN-CLUSTER&gt;
+        serverName: &lt;MAIN-CLUSTER&gt;
+        …
+    connectionParameters:
+      host: &lt;MAIN-CLUSTER&gt;-rw.default.svc
+      user: postgres
+      dbname: postgres
+    password:
+      name: &lt;MAIN-CLUSTER&gt;-superuser
+      key: password
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>To use streaming replication between the source cluster and the replica
+cluster, we need to make sure there is network connectivity between the two
+clusters, and that all the necessary secrets which hold passwords or
+certificates are properly created in advance.</p>
+</div>
+<h3 id="example-using-a-volume-snapshot">Example using a Volume Snapshot</h3>
+<p>If you use volume snapshots and your storage class provides
+snapshots cross-cluster availability, you can leverage that to
+bootstrap a replica cluster through a volume snapshot of the
+source cluster.</p>
+<p>The <strong>third example</strong> defines a replica cluster that bootstraps
+from a volume snapshot using the <code>recovery</code> section. It uses
+streaming replication (via basic authentication) and the object
+store to fetch the WAL files.</p>
+<p>You can check the <a href="../samples/cluster-example-replica-from-volume-snapshot.yaml">sample YAML</a>
+for it in the <code>samples/</code> subdirectory.</p>
+<p>The example assumes that the application database and its owning
+user are set to the default, <code>app</code>. If the PostgreSQL cluster being restored
+uses different names, you must specify them as documented in <a href="../recovery/#configure-the-application-database">Configure the
+application database</a>.
+You should also consider copying over the application user secret from
+the original cluster and keep it synchronized with the source.
+See <a href="#about-postgresql-roles">"About PostgreSQL Roles"</a> for more details.</p>
+<h2 id="delayed-replicas">Delayed replicas</h2>
+<p>CloudNativePG supports the creation of <strong>delayed replicas</strong> through the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ReplicaClusterConfiguration"><code>.spec.replica.minApplyDelay</code> option</a>,
+leveraging PostgreSQL's
+<a href="https://www.postgresql.org/docs/current/runtime-config-replication.html#GUC-RECOVERY-MIN-APPLY-DELAY"><code>recovery_min_apply_delay</code></a>.</p>
+<p>Delayed replicas are designed to intentionally lag behind the primary database
+by a specified amount of time. This delay is configurable using the
+<code>.spec.replica.minApplyDelay</code> option, which maps to the underlying
+<code>recovery_min_apply_delay</code> parameter in PostgreSQL.</p>
+<p>The primary objective of delayed replicas is to mitigate the impact of
+unintended SQL statement executions on the primary database. This is especially
+useful in scenarios where operations such as <code>UPDATE</code> or <code>DELETE</code> are performed
+without a proper <code>WHERE</code> clause.</p>
+<p>To configure a delay in a replica cluster, adjust the
+<code>.spec.replica.minApplyDelay</code> option. This parameter determines how much time
+the replicas will lag behind the primary. For example:</p>
+<pre><code class="language-yaml">  # ...
+  replica:
+    enabled: true
+    source: cluster-example
+    # Enforce a delay of 8 hours
+    minApplyDelay: '8h'
+  # ...
+</code></pre>
+<p>The above example helps safeguard against accidental data modifications by
+providing a buffer period of 8 hours to detect and correct issues before they
+propagate to the replicas.</p>
+<p>Monitor and adjust the delay as needed based on your recovery time objectives
+and the potential impact of unintended primary database operations.</p>
+<p>The main use cases of delayed replicas can be summarized into:</p>
+<ol>
+<li>
+<p>mitigating human errors: reduce the risk of data corruption or loss
+   resulting from unintentional SQL operations on the primary database</p>
+</li>
+<li>
+<p>recovery time optimization: facilitate quicker recovery from unintended
+   changes by having a delayed replica that allows you to identify and rectify
+   issues before changes are applied to other replicas.</p>
+</li>
+<li>
+<p>enhanced data protection: safeguard critical data by introducing a time
+   buffer that provides an opportunity to intervene and prevent the propagation of
+   undesirable changes.</p>
+</li>
+</ol>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>The <code>minApplyDelay</code> option of delayed replicas cannot be used in
+conjunction with <code>promotionToken</code>.</p>
+</div>
+<p>By integrating delayed replicas into your replication strategy, you can enhance
+the resilience and data protection capabilities of your PostgreSQL environment.
+Adjust the delay duration based on your specific needs and the criticality of
+your data.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Always measure your goals. Depending on your environment, it might be more
+efficient to rely on volume snapshot-based recovery for faster outcomes.
+Evaluate and choose the approach that best aligns with your unique requirements
+and infrastructure.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../connection_pooling/" class="btn btn-neutral float-left" title="Connection pooling"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../kubernetes_upgrade/" class="btn btn-neutral float-right" title="Kubernetes Upgrade and Maintenance">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../connection_pooling/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../kubernetes_upgrade/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/replication/index.html b/assets/documentation/1.27.0-rc1/replication/index.html
new file mode 100644
index 000000000..7d9965318
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/replication/index.html
@@ -0,0 +1,1174 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Replication - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Replication";
+        var mkdocs_page_input_path = "replication.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Replication</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#application-level-replication">Application-level replication</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#a-very-mature-technology">A very mature technology</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#streaming-replication-support">Streaming replication support</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#continuous-backup-integration">Continuous backup integration</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#synchronous-replication">Synchronous Replication</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#quorum-based-synchronous-replication">Quorum-based Synchronous Replication</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#example">Example</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#migrating-from-deprecated-synchronous-replication-implementation">Migrating from Deprecated Synchronous Replication Implementation</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#priority-based-synchronous-replication">Priority-based Synchronous Replication</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#controlling-synchronous_standby_names-content">Controlling synchronous_standby_names Content</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#examples">Examples</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#data-durability-and-synchronous-replication">Data Durability and Synchronous Replication</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#required-data-durability">Required Data Durability</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#preferred-data-durability">Preferred Data Durability</a>
+    </li>
+        </ul>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#synchronous-replication-deprecated">Synchronous Replication (Deprecated)</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#select-nodes-for-synchronous-replication">Select nodes for synchronous replication</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#replication-slots">Replication slots</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#replication-slots-for-high-availability">Replication slots for High Availability</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#user-defined-replication-slots">User-Defined Replication slots</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#synchronization-frequency">Synchronization frequency</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#logical-decoding-slot-synchronization">Logical Decoding Slot Synchronization</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#behavior-on-postgresql-17-and-later">Behavior on PostgreSQL 17 and later</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#behavior-on-postgresql-16-and-earlier">Behavior on PostgreSQL 16 and earlier</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#capping-the-wal-size-retained-for-replication-slots">Capping the WAL size retained for replication slots</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#monitoring-replication-slots">Monitoring replication slots</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Replication</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="replication">Replication</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>Physical replication is one of the strengths of PostgreSQL and one of the
+reasons why some of the largest organizations in the world have chosen it for
+the management of their data in business continuity contexts. Primarily used to
+achieve high availability, physical replication also allows scale-out of
+read-only workloads and offloading of some work from the primary.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>This section is about replication within the same <code>Cluster</code> resource
+managed in the same Kubernetes cluster. For information about how to
+replicate with another Postgres <code>Cluster</code> resource, even across different
+Kubernetes clusters, please refer to the
+<a href="../replica_cluster/">"Replica clusters"</a> section.</p>
+</div>
+<h2 id="application-level-replication">Application-level replication</h2>
+<p>Having contributed throughout the years to the replication feature in
+PostgreSQL, we have decided to build high availability in CloudNativePG on top
+of the native physical replication technology, and integrate it directly in the
+Kubernetes API.</p>
+<p>In Kubernetes terms, this is referred to as <strong>application-level replication</strong>,
+in contrast with <em>storage-level replication</em>.</p>
+<h2 id="a-very-mature-technology">A very mature technology</h2>
+<p>PostgreSQL has a very robust and mature native framework for replicating data
+from the primary instance to one or more replicas, built around the concept of
+transactional changes continuously stored in the WAL (Write Ahead Log).</p>
+<p>Started as the evolution of crash recovery and point in time recovery
+technologies, physical replication was first introduced in PostgreSQL 8.2
+(2006) through WAL shipping from the primary to a warm standby in continuous
+recovery.</p>
+<p>PostgreSQL 9.0 (2010) introduced WAL streaming and read-only replicas through
+<em>hot standby</em>. In 2011, PostgreSQL 9.1 brought synchronous replication at the
+transaction level, supporting <a href="../before_you_start/#rpo">RPO</a>=0 clusters. Cascading
+replication was added in PostgreSQL 9.2 (2012). The foundations for
+<a href="../logical_replication/">logical replication</a> were established in PostgreSQL
+9.4 (2014), and version 10 (2017) introduced native support for the
+publisher/subscriber pattern to replicate data from an origin to a destination. The
+table below summarizes these milestones.</p>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">Version</th>
+<th style="text-align: center;">Year</th>
+<th>Feature</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">8.2</td>
+<td style="text-align: center;">2006</td>
+<td>Warm Standby with WAL shipping</td>
+</tr>
+<tr>
+<td style="text-align: center;">9.0</td>
+<td style="text-align: center;">2010</td>
+<td>Hot Standby and physical streaming replication</td>
+</tr>
+<tr>
+<td style="text-align: center;">9.1</td>
+<td style="text-align: center;">2011</td>
+<td>Synchronous replication (priority-based)</td>
+</tr>
+<tr>
+<td style="text-align: center;">9.2</td>
+<td style="text-align: center;">2012</td>
+<td>Cascading replication</td>
+</tr>
+<tr>
+<td style="text-align: center;">9.4</td>
+<td style="text-align: center;">2014</td>
+<td>Foundations of logical replication</td>
+</tr>
+<tr>
+<td style="text-align: center;">10</td>
+<td style="text-align: center;">2017</td>
+<td>Logical publisher/subscriber and quorum-based synchronous replication</td>
+</tr>
+</tbody>
+</table>
+<p>This table highlights key PostgreSQL replication features and their respective
+versions.</p>
+<h2 id="streaming-replication-support">Streaming replication support</h2>
+<p>At the moment, CloudNativePG natively and transparently manages physical
+streaming replicas within a cluster in a declarative way, based on the number of
+provided <code>instances</code> in the <code>spec</code>:</p>
+<pre><code>replicas = instances - 1 (where  instances &gt; 0)
+</code></pre>
+<p>Immediately after the initialization of a cluster, the operator creates a user
+called <code>streaming_replica</code> as follows:</p>
+<pre><code class="language-sql">CREATE USER streaming_replica WITH REPLICATION;
+-- NOSUPERUSER INHERIT NOCREATEROLE NOCREATEDB NOBYPASSRLS
+</code></pre>
+<p>Out of the box, the operator automatically sets up streaming replication within
+the cluster over an encrypted channel and enforces TLS client certificate
+authentication for the <code>streaming_replica</code> user - as highlighted by the
+following excerpt taken from <code>pg_hba.conf</code>:</p>
+<pre><code># Require client certificate authentication for the streaming_replica user
+hostssl postgres streaming_replica all cert map=cnpg_streaming_replica
+hostssl replication streaming_replica all cert map=cnpg_streaming_replica
+</code></pre>
+<div class="admonition seealso">
+<p class="admonition-title">Certificates</p>
+<p>For details on how CloudNativePG manages certificates, please refer
+to the <a href="../certificates/#client-streaming_replica-certificate">"Certificates" section</a>
+in the documentation.</p>
+</div>
+<p>If configured, the operator manages replication slots for all the replicas in the
+HA cluster, ensuring that WAL files required by each standby are retained on
+the primary's storage, even after a failover or switchover.</p>
+<div class="admonition seealso">
+<p class="admonition-title">Replication slots for High Availability</p>
+<p>For details on how CloudNativePG automatically manages replication slots for the
+High Availability replicas, please refer to the
+<a href="#replication-slots-for-high-availability">"Replication slots for High Availability" section</a>
+below.</p>
+</div>
+<h3 id="continuous-backup-integration">Continuous backup integration</h3>
+<p>In case continuous backup is configured in the cluster, CloudNativePG
+transparently configures replicas to take advantage of <code>restore_command</code> when in
+continuous recovery. As a result, PostgreSQL can use the WAL archive as a
+fallback option whenever pulling WALs via streaming replication fails.</p>
+<h2 id="synchronous-replication">Synchronous Replication</h2>
+<p>CloudNativePG supports both
+<a href="https://www.postgresql.org/docs/current/warm-standby.html#SYNCHRONOUS-REPLICATION">quorum-based and priority-based synchronous replication for PostgreSQL</a>.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>By default, synchronous replication pauses write operations if the required
+number of standby nodes for WAL replication during transaction commits is
+unavailable. This behavior prioritizes data durability and aligns with
+PostgreSQL DBA best practices. However, if self-healing is a higher priority
+than strict data durability in your setup, this setting can be adjusted. For
+details on managing this behavior, refer to the <a href="#data-durability-and-synchronous-replication">Data Durability and Synchronous Replication</a>
+section.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The <a href="../failover/#failover-quorum-quorum-based-failover"><em>failover quorum</em> feature</a> (experimental)
+can be used alongside synchronous replication to improve data durability
+and safety during failover events.</p>
+</div>
+<p>Direct configuration of the <code>synchronous_standby_names</code> option is not
+permitted. However, CloudNativePG automatically populates this option with the
+names of local pods, while also allowing customization to extend synchronous
+replication beyond the <code>Cluster</code> resource.
+This can be achieved through the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-SynchronousReplicaConfiguration"><code>.spec.postgresql.synchronous</code> stanza</a>.</p>
+<p>Synchronous replication is disabled by default (the <code>synchronous</code> stanza is not
+defined). When defined, two options are mandatory:</p>
+<ul>
+<li><code>method</code>: either <code>any</code> (quorum) or <code>first</code> (priority)</li>
+<li><code>number</code>: the number of synchronous standby servers that transactions must
+  wait for responses from</li>
+</ul>
+<h3 id="quorum-based-synchronous-replication">Quorum-based Synchronous Replication</h3>
+<p>In PostgreSQL, quorum-based synchronous replication ensures that transaction
+commits wait until their WAL records are replicated to a specified number of
+standbys. To enable this, set the <code>method</code> to <code>any</code>.</p>
+<p>This replication method is the most common setup for a CloudNativePG cluster.</p>
+<h4 id="example">Example</h4>
+<p>The example below, based on a typical <code>cluster-example</code> configuration with
+three instances, sets up quorum-based synchronous replication with at least one
+instance:</p>
+<pre><code class="language-yaml">postgresql:
+  synchronous:
+    method: any
+    number: 1
+</code></pre>
+<p>With this configuration, CloudNativePG automatically sets the content of
+<code>synchronous_standby_names</code> as follows:</p>
+<pre><code class="language-console">ANY 1 (cluster-example-2, cluster-example-3, cluster-example-1)
+</code></pre>
+<h4 id="migrating-from-deprecated-synchronous-replication-implementation">Migrating from Deprecated Synchronous Replication Implementation</h4>
+<p>This section outlines how to migrate from the deprecated quorum-based
+synchronous replication format to the newer, more robust implementation in
+CloudNativePG.</p>
+<p>Given the following manifest:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: angus
+spec:
+  instances: 3
+  minSyncReplicas: 1
+  maxSyncReplicas: 1
+
+  storage:
+    size: 1G
+</code></pre>
+<p>You can update it to the new format as follows:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: angus
+spec:
+  instances: 3
+
+  storage:
+    size: 1G
+
+  postgresql:
+    synchronous:
+      method: any
+      number: 1
+      dataDurability: required
+</code></pre>
+<p>To prioritize self-healing over strict data durability, set <code>dataDurability</code>
+to <code>preferred</code> instead.</p>
+<h3 id="priority-based-synchronous-replication">Priority-based Synchronous Replication</h3>
+<p>PostgreSQL's priority-based synchronous replication makes transaction commits
+wait until their WAL records are replicated to the requested number of
+synchronous standbys chosen based on their priorities. Standbys listed earlier
+in the <code>synchronous_standby_names</code> option are given higher priority and
+considered synchronous. If a current synchronous standby disconnects, it is
+immediately replaced by the next-highest-priority standby. To use this method,
+set <code>method</code> to <code>first</code>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Currently, this method is most useful when extending
+synchronous replication beyond the current cluster using the
+<code>maxStandbyNamesFromCluster</code>, <code>standbyNamesPre</code>, and <code>standbyNamesPost</code>
+options explained below.</p>
+</div>
+<h3 id="controlling-synchronous_standby_names-content">Controlling <code>synchronous_standby_names</code> Content</h3>
+<p>By default, CloudNativePG populates <code>synchronous_standby_names</code> with the names
+of local pods in a <code>Cluster</code> resource, ensuring synchronous replication within
+the PostgreSQL cluster. You can customize the content of
+<code>synchronous_standby_names</code> based on your requirements and replication method
+(quorum or priority) using the following optional parameters in the
+<code>.spec.postgresql.synchronous</code> stanza:</p>
+<ul>
+<li><code>maxStandbyNamesFromCluster</code>: the maximum number of pod names from the local
+  <code>Cluster</code> object that can be automatically included in the
+  <code>synchronous_standby_names</code> option in PostgreSQL.</li>
+<li><code>standbyNamesPre</code>: a list of standby names (specifically <code>application_name</code>)
+  to be prepended to the list of local pod names automatically listed by the
+  operator.</li>
+<li><code>standbyNamesPost</code>: a list of standby names (specifically <code>application_name</code>)
+  to be appended to the list of local pod names automatically listed by the
+  operator.</li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>You are responsible for ensuring the correct names in <code>standbyNamesPre</code> and
+<code>standbyNamesPost</code>. CloudNativePG expects that you manage any standby with
+an <code>application_name</code> listed here, ensuring their high availability.
+Incorrect entries can jeopardize your PostgreSQL database uptime.</p>
+</div>
+<h4 id="examples">Examples</h4>
+<p>Here are some examples, all based on a <code>cluster-example</code> with three instances:</p>
+<p>If you set:</p>
+<pre><code class="language-yaml">postgresql:
+  synchronous:
+    method: any
+    number: 1
+    maxStandbyNamesFromCluster: 1
+    standbyNamesPre:
+      - angus
+</code></pre>
+<p>The content of <code>synchronous_standby_names</code> will be:</p>
+<pre><code class="language-console">ANY 1 (angus, cluster-example-2)
+</code></pre>
+<p>If you set:</p>
+<pre><code class="language-yaml">postgresql:
+  synchronous:
+    method: any
+    number: 1
+    maxStandbyNamesFromCluster: 0
+    standbyNamesPre:
+      - angus
+      - malcolm
+</code></pre>
+<p>The content of <code>synchronous_standby_names</code> will be:</p>
+<pre><code class="language-console">ANY 1 (angus, malcolm)
+</code></pre>
+<p>If you set:</p>
+<pre><code class="language-yaml">postgresql:
+  synchronous:
+    method: first
+    number: 2
+    maxStandbyNamesFromCluster: 1
+    standbyNamesPre:
+      - angus
+    standbyNamesPost:
+      - malcolm
+</code></pre>
+<p>The <code>synchronous_standby_names</code> option will look like:</p>
+<pre><code class="language-console">FIRST 2 (angus, cluster-example-2, malcolm)
+</code></pre>
+<h3 id="data-durability-and-synchronous-replication">Data Durability and Synchronous Replication</h3>
+<p>The <code>dataDurability</code> option in the <code>.spec.postgresql.synchronous</code> stanza
+controls the trade-off between data safety and availability for synchronous
+replication. It can be set to <code>required</code> or <code>preferred</code>, with the default being
+<code>required</code> if not specified.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p><code>preferred</code> can only be used when <code>standbyNamesPre</code> and <code>standbyNamesPost</code>
+are unset.</p>
+</div>
+<h4 id="required-data-durability">Required Data Durability</h4>
+<p>When <code>dataDurability</code> is set to <code>required</code>, PostgreSQL only considers
+transactions committed once WAL (Write-Ahead Log) records have been replicated
+to the specified number of synchronous standbys. This setting prioritizes data
+safety over availability, meaning write operations will pause if the required
+number of synchronous standbys is unavailable. This ensures zero data loss
+(RPO=0) but may reduce database availability during network disruptions or
+standby failures.</p>
+<p>Synchronous standbys are selected in this priority order:</p>
+<ol>
+<li>Healthy instances</li>
+<li>Unhealthy instances</li>
+<li>Primary</li>
+</ol>
+<p>The list is then truncated based on <code>maxStandbyNamesFromCluster</code> if this value
+is set, prioritizing healthy instances and ensuring <code>synchronous_standby_names</code>
+is populated.</p>
+<h5 id="example_1">Example</h5>
+<p>Consider the following example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: foo
+spec:
+  instances: 3
+  postgresql:
+    synchronous:
+      method: any
+      number: 1
+      dataDurability: required
+</code></pre>
+<ol>
+<li>
+<p>Initial state. The content of <code>synchronous_standby_names</code> is:</p>
+<p><code>ANY 1 ("foo-2","foo-3","foo-1")</code></p>
+</li>
+<li>
+<p><code>foo-2</code> becomes unavailable. It gets pushed back in priority:</p>
+<p><code>ANY 1 ("foo-3","foo-2","foo-1")</code></p>
+</li>
+<li>
+<p><code>foo-3</code> also becomes unavailable. The list contains no healthy standbys:</p>
+<p><code>ANY 1 ("foo-2","foo-3","foo-1")</code></p>
+<p>At this point no write operations will be allowed until at least one of the
+standbys is available again.</p>
+</li>
+<li>
+<p>When the standbys are available again, <code>synchronous_standby_names</code> will
+   be back to the initial state.</p>
+</li>
+</ol>
+<h4 id="preferred-data-durability">Preferred Data Durability</h4>
+<p>When <code>dataDurability</code> is set to <code>preferred</code>, the required number of synchronous
+instances adjusts based on the number of available standbys. PostgreSQL will
+attempt to replicate WAL records to the designated number of synchronous
+standbys, but write operations will continue even if fewer than the requested
+number of standbys are available.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Make sure you have a clear understanding of what <em>ready/available</em> means
+for a replica and set your expectations accordingly. By default, a replica is
+considered ready when it has successfully connected to the source at least
+once. However, CloudNativePG allows you to configure startup and readiness
+probes for replicas based on maximum lag. For more details, please refer to
+the <a href="../instance_manager/">"Postgres instance manager" section</a>.</p>
+</div>
+<p>This setting balances data safety with availability, enabling applications to
+continue writing during temporary standby unavailability—hence, it’s also known
+as <em>self-healing mode</em>.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This mode may result in data loss if all standbys become unavailable.</p>
+</div>
+<p>With <code>preferred</code> data durability, <strong>only healthy replicas</strong> are included in
+<code>synchronous_standby_names</code>.</p>
+<h5 id="example_2">Example</h5>
+<p>Consider the following example. For demonstration, we’ll use a cluster named
+<code>bar</code> with 5 instances and 2 synchronous standbys:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: bar
+spec:
+  instances: 5
+  postgresql:
+    synchronous:
+      method: any
+      number: 2
+      dataDurability: preferred
+</code></pre>
+<ol>
+<li>
+<p>Initial state. The content of <code>synchronous_standby_names</code> is:</p>
+<p><code>ANY 2 ("bar-2","bar-3", "bar-4", "bar-5")</code></p>
+</li>
+<li>
+<p><code>bar-2</code> and <code>bar-3</code> become unavailable. They are removed from the list:</p>
+<p><code>ANY 2 ("bar-4", "bar-5")</code></p>
+</li>
+<li>
+<p><code>bar-4</code> also becomes unavailable. It gets removed from the list. Since the
+   number of available standbys is less than the requested number, the requested
+   amount gets reduced:</p>
+<p><code>ANY 1 ("bar-5")</code></p>
+</li>
+<li>
+<p><code>bar-5</code> also becomes unavailable. <code>synchronous_standby_names</code> becomes empty,
+   disabling synchronous replication completely. Write operations will continue,
+   but with the risk of potential data loss in case of a primary failure.</p>
+</li>
+<li>When the replicas are back, <code>synchronous_standby_names</code> will be back to
+   the initial state.</li>
+</ol>
+<h2 id="synchronous-replication-deprecated">Synchronous Replication (Deprecated)</h2>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Prior to CloudNativePG 1.24, only the quorum-based synchronous replication
+implementation was supported. Although this method is now deprecated, it
+will not be removed anytime soon.
+The new method prioritizes data durability over self-healing and offers more
+robust features, including priority-based synchronous replication and full
+control over the <code>synchronous_standby_names</code> option.
+It is recommended to gradually migrate to the new configuration method for
+synchronous replication, as explained in the previous paragraph.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The deprecated method and the new method are mutually exclusive.</p>
+</div>
+<p>CloudNativePG supports the configuration of <strong>quorum-based synchronous
+streaming replication</strong> via two configuration options called <code>minSyncReplicas</code>
+and <code>maxSyncReplicas</code>, which are the minimum and the maximum number of expected
+synchronous standby replicas available at any time.
+For self-healing purposes, the operator always compares these two values with
+the number of available replicas to determine the quorum.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>By default, synchronous replication selects among all the available
+replicas indistinctively. You can limit on which nodes your synchronous
+replicas can be scheduled, by working on node labels through the
+<code>syncReplicaElectionConstraint</code> option as described in the next section.</p>
+</div>
+<p>Synchronous replication is disabled by default (<code>minSyncReplicas</code> and
+<code>maxSyncReplicas</code> are not defined).
+In case both <code>minSyncReplicas</code> and <code>maxSyncReplicas</code> are set, CloudNativePG
+automatically updates the <code>synchronous_standby_names</code> option in
+PostgreSQL to the following value:</p>
+<pre><code>ANY q (pod1, pod2, ...)
+</code></pre>
+<p>Where:</p>
+<ul>
+<li><code>q</code> is an integer automatically calculated by the operator to be:
+  <code>1 &lt;= minSyncReplicas &lt;= q &lt;= maxSyncReplicas &lt;= readyReplicas</code></li>
+<li><code>pod1, pod2, ...</code> is the list of all PostgreSQL pods in the cluster</li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>To provide self-healing capabilities, the operator can ignore
+<code>minSyncReplicas</code> if such value is higher than the currently available
+number of replicas. Synchronous replication is automatically disabled
+when <code>readyReplicas</code> is <code>0</code>.</p>
+</div>
+<p>As stated in the
+<a href="https://www.postgresql.org/docs/current/warm-standby.html#SYNCHRONOUS-REPLICATION">PostgreSQL documentation</a>,
+the <em>method <code>ANY</code> specifies a quorum-based synchronous replication and makes
+transaction commits wait until their WAL records are replicated to at least the
+requested number of synchronous standbys in the list</em>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Even though the operator chooses self-healing over enforcement of
+synchronous replication settings, our recommendation is to plan for
+synchronous replication only in clusters with 3+ instances or,
+more generally, when <code>maxSyncReplicas &lt; (instances - 1)</code>.</p>
+</div>
+<h3 id="select-nodes-for-synchronous-replication">Select nodes for synchronous replication</h3>
+<p>CloudNativePG enables you to select which PostgreSQL instances are eligible to
+participate in a quorum-based synchronous replication set through anti-affinity
+rules based on the node labels where the PVC holding the PGDATA and the
+Postgres pod are.</p>
+<div class="admonition seealso">
+<p class="admonition-title">Scheduling</p>
+<p>For more information on the general pod affinity and anti-affinity rules,
+please check the <a href="../scheduling/">"Scheduling" section</a>.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>The <code>.spec.postgresql.syncReplicaElectionConstraint</code> option only applies to the
+legacy implementation of synchronous replication
+(see <a href="./#synchronous-replication-deprecated">"Synchronous Replication (Deprecated)"</a>).</p>
+</div>
+<p>As an example use-case for this feature: in a cluster with a single sync
+replica, we would be able to ensure the sync replica will be in a different
+availability zone from the primary instance, usually identified by
+the <code>topology.kubernetes.io/zone</code>
+<a href="https://kubernetes.io/docs/reference/labels-annotations-taints/#topologykubernetesiozone">label on a node</a>.
+This would increase the robustness of the cluster in case of an outage in a
+single availability zone, especially in terms of recovery point objective
+(<a href="../before_you_start/#rpo">RPO</a>).</p>
+<p>The idea of anti-affinity is to ensure that sync replicas that participate in
+the quorum are chosen from pods running on nodes that have different values for
+the selected labels (in this case, the availability zone label) then the node
+where the primary is currently in execution. If no node matches such criteria,
+the replicas are eligible for synchronous replication.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The self-healing enforcement still applies while defining additional
+constraints for synchronous replica election
+(see <a href="./#synchronous-replication">"Synchronous replication"</a>).</p>
+</div>
+<p>The example below shows how this can be done through the
+<code>syncReplicaElectionConstraint</code> section within <code>.spec.postgresql</code>.
+<code>nodeLabelsAntiAffinity</code> allows you to specify those node labels that need to be
+evaluated to make sure that synchronous replication will be dynamically
+configured by the operator between the current primary and the replicas which
+are located on nodes having a value of the availability zone label different
+from that of the node where the primary is:</p>
+<pre><code class="language-yaml">spec:
+  instances: 3
+  postgresql:
+    syncReplicaElectionConstraint:
+      enabled: true
+      nodeLabelsAntiAffinity:
+      - topology.kubernetes.io/zone
+</code></pre>
+<p>As you can imagine, the availability zone is just an example, but you could
+customize this behavior based on other labels that describe the node, such
+as storage, CPU, or memory.</p>
+<h2 id="replication-slots">Replication slots</h2>
+<p><a href="https://www.postgresql.org/docs/current/warm-standby.html#STREAMING-REPLICATION-SLOTS">Replication slots</a>
+are a native PostgreSQL feature introduced in 9.4 that provides an automated way
+to ensure that the primary does not remove WAL segments until all the attached
+streaming replication clients have received them, and that the primary does not
+remove rows which could cause a recovery conflict even when the standby is (
+temporarily) disconnected.</p>
+<p>A replication slot exists solely on the instance that created it, and PostgreSQL
+does not replicate it on the standby servers. As a result, after a failover or a
+switchover, the new primary does not contain the replication slot from the old
+primary. This can create problems for the streaming replication clients that
+were connected to the old primary and have lost their slot.</p>
+<p>CloudNativePG provides a turn-key solution to synchronize the content of
+physical replication slots from the primary to each standby, addressing two use
+cases:</p>
+<ul>
+<li>the replication slots automatically created for the High Availability of the
+  Postgres cluster (
+  see <a href="#replication-slots-for-high-availability">"Replication slots for High Availability" below</a>
+  for details)</li>
+<li><a href="#user-defined-replication-slots">user-defined replication slots</a> created on
+  the primary</li>
+</ul>
+<h3 id="replication-slots-for-high-availability">Replication slots for High Availability</h3>
+<p>CloudNativePG fills this gap by introducing the concept of cluster-managed
+replication slots, starting with high availability clusters. This feature
+automatically manages physical replication slots for each hot standby replica in
+the High Availability cluster, both in the primary and the standby.</p>
+<p>In CloudNativePG, we use the terms:</p>
+<ul>
+<li><strong>Primary HA slot</strong>: a physical replication slot whose lifecycle is entirely
+  managed by the current primary of the cluster and whose purpose is to map to a
+  specific standby in streaming replication. Such a slot lives on the primary
+  only.</li>
+<li><strong>Standby HA slot</strong>: a physical replication slot for a standby whose lifecycle
+  is entirely managed by another standby in the cluster, based on the content of
+  the <code>pg_replication_slots</code> view in the primary, and updated at regular
+  intervals using <code>pg_replication_slot_advance()</code>.</li>
+</ul>
+<p>This feature is enabled by default and can be disabled via configuration. For
+details, please refer to the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ReplicationSlotsConfiguration">"replicationSlots" section in the API reference</a>.
+Here follows a brief description of the main options:</p>
+<dl>
+<dt><code>.spec.replicationSlots.highAvailability.enabled</code></dt>
+<dd>if <code>true</code>, the feature is enabled (<code>true</code> is the default)</dd>
+<dt><code>.spec.replicationSlots.highAvailability.slotPrefix</code></dt>
+<dd>the prefix that identifies replication slots managed by the operator for this
+feature (default: <code>_cnpg_</code>)</dd>
+<dt><code>.spec.replicationSlots.updateInterval</code></dt>
+<dd>how often the standby synchronizes the position of the local copy of the
+replication slots with the position on the current primary, expressed in
+seconds (default: 30)</dd>
+</dl>
+<p>Although it is not recommended, if you desire a different behavior, you can
+customize the above options.</p>
+<p>For example, the following manifest will create a cluster with replication
+slots disabled.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  # Disable replication slots for HA in the cluster
+  replicationSlots:
+    highAvailability:
+      enabled: false
+
+  storage:
+    size: 1Gi
+</code></pre>
+<h3 id="user-defined-replication-slots">User-Defined Replication slots</h3>
+<p>Although CloudNativePG doesn't support a way to declaratively define physical
+replication slots, you can still <a href="https://www.postgresql.org/docs/current/functions-admin.html#FUNCTIONS-REPLICATION">create your own slots via SQL</a>.</p>
+<div class="admonition information">
+<p class="admonition-title">Information</p>
+<p>At the moment, we don't have any plans to manage replication slots
+in a declarative way, but it might change depending on the feedback
+we receive from users. The reason is that replication slots exist
+for a specific purpose and each should be managed by a specific application
+the oversees the entire lifecycle of the slot on the primary.</p>
+</div>
+<p>CloudNativePG can manage the synchronization of any user managed physical
+replication slots between the primary and standbys, similarly to what it does
+for the HA replication slots explained above (the only difference is that you
+need to create the replication slot).</p>
+<p>This feature is enabled by default (meaning that any replication slot is
+synchronized), but you can disable it or further customize its behavior (for
+example by excluding some slots using regular expressions) through the
+<code>synchronizeReplicas</code> stanza. For example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  replicationSlots:
+    synchronizeReplicas:
+      enabled: true
+      excludePatterns:
+      - &quot;^foo&quot;
+</code></pre>
+<p>For details, please refer to the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ReplicationSlotsConfiguration">"replicationSlots" section in the API reference</a>.
+Here follows a brief description of the main options:</p>
+<dl>
+<dt><code>.spec.replicationSlots.synchronizeReplicas.enabled</code></dt>
+<dd>When true or not specified, every user-defined replication slot on the
+  primary is synchronized on each standby. If changed to false, the operator will
+  remove any replication slot previously created by itself on each standby.</dd>
+<dt><code>.spec.replicationSlots.synchronizeReplicas.excludePatterns</code></dt>
+<dd>A list of regular expression patterns to match the names of user-defined
+  replication slots to be excluded from synchronization. This can be useful to
+  exclude specific slots based on naming conventions.</dd>
+</dl>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Users utilizing this feature should carefully monitor user-defined replication
+slots to ensure they align with their operational requirements and do not
+interfere with the failover process.</p>
+</div>
+<h3 id="synchronization-frequency">Synchronization frequency</h3>
+<p>You can also control the frequency with which a standby queries the
+<code>pg_replication_slots</code> view on the primary, and updates its local copy of
+the replication slots, like in this example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  # Reduce the frequency of standby HA slots updates to once every 5 minutes
+  replicationSlots:
+    updateInterval: 300
+
+  storage:
+    size: 1Gi
+</code></pre>
+<h3 id="logical-decoding-slot-synchronization">Logical Decoding Slot Synchronization</h3>
+<p>CloudNativePG can synchronize logical decoding (replication) slots across all
+nodes in a high-availability cluster, ensuring seamless continuation of logical
+replication after a failover or switchover. This feature is disabled by
+default, and enabling it requires two steps.</p>
+<p>The first step is to enable logical decoding slot synchronization:</p>
+<pre><code class="language-yaml">  # ...
+  replicationSlots:
+    highAvailability:
+      synchronizeLogicalDecoding: true
+</code></pre>
+<p>The second step involves configuring PostgreSQL parameters: the required
+configuration depends on your PostgreSQL version, as explained below.</p>
+<p>When enabled, the operator automatically manages logical decoding slot states
+during failover and switchover, preventing slot invalidation and avoiding data
+loss for logical replication clients.</p>
+<h4 id="behavior-on-postgresql-17-and-later">Behavior on PostgreSQL 17 and later</h4>
+<p>For PostgreSQL 17 and newer, CloudNativePG transparently manages the
+<a href="https://www.postgresql.org/docs/current/runtime-config-replication.html#GUC-SYNCHRONIZED-STANDBY-SLOTS"><code>synchronized_standby_slots</code> parameter</a>.</p>
+<p>You must enable both <code>sync_replication_slots</code> and <code>hot_standby_feedback</code> in
+your PostgreSQL configuration:</p>
+<pre><code class="language-yaml"># ...
+postgresql:
+  parameters:
+    # ...
+    hot_standby_feedback: 'on'
+    sync_replication_slots: 'on'
+</code></pre>
+<p>Additionally, you must create the logical replication <code>Subscription</code> with the
+<code>failover</code> option enabled, for example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Subscription
+# ...
+spec:
+# ...
+  parameters:
+    failover: 'true'
+# ...
+</code></pre>
+<p>When configured, logical WAL sender processes send decoded changes to plugins
+only after the specified replication slots confirm receiving and flushing the
+relevant WAL, ensuring that:</p>
+<ul>
+<li>logical replication slots do not consume changes until they are safely
+  received by the replicas of the publisher, and</li>
+<li>logical replication clients can seamlessly reconnect to a promoted standby
+  without missing data after failover.</li>
+</ul>
+<p>For more details on logical replication slot synchronization, see the
+PostgreSQL documentation on <a href="https://www.postgresql.org/docs/current/logical-replication-failover.html">Logical Replication Failover</a>.</p>
+<h4 id="behavior-on-postgresql-16-and-earlier">Behavior on PostgreSQL 16 and earlier</h4>
+<p>For PostgreSQL 16 and older versions, CloudNativePG uses the
+<a href="https://github.com/EnterpriseDB/pg_failover_slots"><code>pg_failover_slots</code> extension</a>
+to maintain synchronization of logical replication slots across failovers.</p>
+<h3 id="capping-the-wal-size-retained-for-replication-slots">Capping the WAL size retained for replication slots</h3>
+<p>When replication slots is enabled, you might end up running out of disk space
+due to PostgreSQL trying to retain WAL files requested by a replication slot.
+This might happen due to a standby that is (temporarily?) down, or lagging, or
+simply an orphan replication slot.</p>
+<p>Starting with PostgreSQL 13, you can take advantage of the
+<a href="https://www.postgresql.org/docs/current/runtime-config-replication.html#GUC-MAX-SLOT-WAL-KEEP-SIZE"><code>max_slot_wal_keep_size</code></a>
+configuration option controlling the maximum size of WAL files that replication
+slots are allowed to retain in the <code>pg_wal</code> directory at checkpoint time. By
+default, in PostgreSQL <code>max_slot_wal_keep_size</code> is set to <code>-1</code>, meaning that
+replication slots may retain an unlimited amount of WAL files. As a result, our
+recommendation is to explicitly set <code>max_slot_wal_keep_size</code>
+when replication slots support is enabled. For example:</p>
+<pre><code class="language-ini">  # ...
+  postgresql:
+    parameters:
+      max_slot_wal_keep_size: &quot;10GB&quot;
+  # ...
+</code></pre>
+<h3 id="monitoring-replication-slots">Monitoring replication slots</h3>
+<p>Replication slots must be carefully monitored in your infrastructure. By default,
+we provide the <code>pg_replication_slots</code> metric in our Prometheus exporter with
+key information such as the name of the slot, the type, whether it is active,
+the lag from the primary.</p>
+<div class="admonition seealso">
+<p class="admonition-title">Monitoring</p>
+<p>Please refer to the <a href="../monitoring/">"Monitoring" section</a> for details on
+how to monitor a CloudNativePG deployment.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../rolling_update/" class="btn btn-neutral float-left" title="Rolling Updates"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../logical_replication/" class="btn btn-neutral float-right" title="Logical Replication">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../rolling_update/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../logical_replication/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/resource_management/index.html b/assets/documentation/1.27.0-rc1/resource_management/index.html
new file mode 100644
index 000000000..3a40f65ad
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/resource_management/index.html
@@ -0,0 +1,460 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Resource management - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Resource management";
+        var mkdocs_page_input_path = "resource_management.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Resource management</a>
+    <ul class="current">
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Resource management</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="resource-management">Resource management</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>In a typical Kubernetes cluster, pods run with unlimited resources. By default,
+they might be allowed to use as much CPU and RAM as needed.</p>
+<p>CloudNativePG allows administrators to control and manage resource usage by the pods of the cluster,
+through the <code>resources</code> section of the manifest, with two knobs:</p>
+<ul>
+<li><code>requests</code>: initial requirement</li>
+<li><code>limits</code>: maximum usage, in case of dynamic increase of resource needs</li>
+</ul>
+<p>For example, you can request an initial amount of RAM of 32MiB (scalable to 128MiB) and 50m of CPU (scalable to 100m)
+as follows:</p>
+<pre><code class="language-yaml">  resources:
+    requests:
+      memory: &quot;32Mi&quot;
+      cpu: &quot;50m&quot;
+    limits:
+      memory: &quot;128Mi&quot;
+      cpu: &quot;100m&quot;
+</code></pre>
+<p>Memory requests and limits are associated with containers, but it is useful to think of a pod as having a memory request
+and limit. The pod's memory request is the sum of the memory requests for all the containers in the pod.</p>
+<p>Pod scheduling is based on requests and not on limits. A pod is scheduled to run on a Node only if the Node has enough
+available memory to satisfy the pod's memory request.</p>
+<p>For each resource, we divide containers into 3 Quality of Service (QoS) classes, in decreasing order of priority:</p>
+<ul>
+<li><em>Guaranteed</em></li>
+<li><em>Burstable</em></li>
+<li><em>Best-Effort</em></li>
+</ul>
+<p>For more details, please refer to the <a href="https://kubernetes.io/docs/tasks/configure-pod-container/quality-service-pod/#qos-classes">"Configure Quality of Service for Pods"</a>
+section in the Kubernetes documentation.</p>
+<p>For a PostgreSQL workload it is recommended to set a "Guaranteed" QoS.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>When the quality of service is set to "Guaranteed", CloudNativePG sets the
+<code>PG_OOM_ADJUST_VALUE</code> for the <code>postmaster</code> process to <code>0</code>, in line with the
+<a href="https://www.postgresql.org/docs/current/kernel-resources.html#LINUX-MEMORY-OVERCOMMIT">PostgreSQL documentation</a>.
+This allows the <code>postmaster</code> to retain its low Out-Of-Memory (OOM) score of
+<code>-997</code>, while its child processes run with an OOM score adjustment of <code>0</code>. As a
+result, if the OOM killer is triggered, it will terminate the child processes
+before the <code>postmaster</code>. This behavior helps keep the PostgreSQL instance
+alive for as long as possible and enables a clean shutdown procedure in the
+event of an eviction.</p>
+</div>
+<p>To avoid resources related issues in Kubernetes, we can refer to the best practices for "out of resource" handling
+while creating a cluster:</p>
+<ul>
+<li>Specify your required values for memory and CPU in the resources section of the manifest file.
+   This way, you can avoid the <code>OOM Killed</code> and <code>CPU throttle</code> or any other
+   resource-related issues on running instances.</li>
+<li>For your cluster's pods to get assigned to the "Guaranteed" QoS class, you
+   must set limits and requests
+   for both memory and CPU to the same value.</li>
+<li>Specify your required PostgreSQL memory parameters consistently with the pod resources (as you would do
+   in a VM or physical machine scenario - see below).</li>
+<li>Set up database server pods on a dedicated node using nodeSelector.
+   See the "nodeSelector" and "tolerations" fields of the
+   <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-AffinityConfiguration">“affinityconfiguration"</a> resource on the API reference page.</li>
+</ul>
+<p>You can refer to the following example manifest:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: postgresql-resources
+spec:
+
+  instances: 3
+
+  postgresql:
+    parameters:
+      shared_buffers: &quot;256MB&quot;
+
+  resources:
+    requests:
+      memory: &quot;1024Mi&quot;
+      cpu: 1
+    limits:
+      memory: &quot;1024Mi&quot;
+      cpu: 1
+
+  storage:
+    size: 1Gi
+</code></pre>
+<p>In the above example, we have specified <code>shared_buffers</code> parameter with a value of <code>256MB</code> - i.e., how much memory is
+dedicated to the PostgreSQL server for caching data (the default value for this parameter is <code>128MB</code> in case
+it's not defined).</p>
+<p>A reasonable starting value for <code>shared_buffers</code> is 25% of the memory in your system.
+For example: if your <code>shared_buffers</code> is 256 MB, then the recommended value for your container memory size is 1 GB,
+which means that within a pod all the containers will have a total of 1 GB memory that Kubernetes will always preserve,
+enabling our containers to work as expected.
+For more details, please refer to the <a href="https://www.postgresql.org/docs/current/runtime-config-resource.html">"Resource Consumption"</a>
+section in the PostgreSQL documentation.</p>
+<div class="admonition seealso">
+<p class="admonition-title">Managing Compute Resources for Containers</p>
+<p>For more details on resource management, please refer to the
+<a href="https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/">"Managing Compute Resources for Containers"</a>
+page from the Kubernetes documentation.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../scheduling/" class="btn btn-neutral float-left" title="Scheduling"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../failure_modes/" class="btn btn-neutral float-right" title="Failure Modes">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../scheduling/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../failure_modes/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/rolling_update/index.html b/assets/documentation/1.27.0-rc1/rolling_update/index.html
new file mode 100644
index 000000000..9112fb7ca
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/rolling_update/index.html
@@ -0,0 +1,453 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Rolling Updates - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Rolling Updates";
+        var mkdocs_page_input_path = "rolling_update.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Rolling Updates</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#automated-updates-unsupervised">Automated updates (unsupervised)</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#manual-updates-supervised">Manual updates (supervised)</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Rolling Updates</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="rolling-updates">Rolling Updates</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>The operator allows changing the PostgreSQL version used in a cluster while
+applications are running against it.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Only upgrades for PostgreSQL minor releases are supported.</p>
+</div>
+<p>Rolling upgrades are started when:</p>
+<ul>
+<li>
+<p>the user changes the <code>imageName</code> attribute of the cluster specification;</p>
+</li>
+<li>
+<p>the <a href="../image_catalog/">image catalog</a> is updated with a new image for the major used by the cluster;</p>
+</li>
+<li>
+<p>a change in the PostgreSQL configuration requires a restart to be
+  applied;</p>
+</li>
+<li>
+<p>a change on the <code>Cluster</code> <code>.spec.resources</code> values</p>
+</li>
+<li>
+<p>a change in size of the persistent volume claim on AKS</p>
+</li>
+<li>
+<p>after the operator is updated, to ensure the Pods run the latest instance
+  manager (unless <a href="../installation_upgrade/#in-place-updates-of-the-instance-manager">in-place updates are enabled</a>).</p>
+</li>
+</ul>
+<p>The operator starts upgrading all the replicas, one Pod at a time, and begins
+from the one with the highest serial.</p>
+<p>The primary is the last node to be upgraded.</p>
+<p>Rolling updates are configurable and can be either entirely automated
+(<code>unsupervised</code>) or requiring human intervention (<code>supervised</code>).</p>
+<p>The upgrade keeps the CloudNativePG identity, without re-cloning the
+data. Pods will be deleted and created again with the same PVCs and a new
+image, if required.</p>
+<p>During the rolling update procedure, each service endpoints move to reflect the
+cluster's status, so that applications can ignore the node that is being
+updated.</p>
+<h2 id="automated-updates-unsupervised">Automated updates (<code>unsupervised</code>)</h2>
+<p>When <code>primaryUpdateStrategy</code> is set to <code>unsupervised</code>, the rolling update
+process is managed by Kubernetes and is entirely automated. Once the replicas
+have been upgraded, the selected <code>primaryUpdateMethod</code> operation will initiate
+on the primary. This is the default behavior.</p>
+<p>The <code>primaryUpdateMethod</code> option accepts one of the following values:</p>
+<ul>
+<li>
+<p><code>restart</code>: if possible, perform an automated restart of the pod where the
+  primary instance is running. Otherwise, the restart request is ignored and a
+  switchover issued. This is the default behavior.</p>
+</li>
+<li>
+<p><code>switchover</code>: a switchover operation is automatically performed, setting the
+  most aligned replica as the new target primary, and shutting down the former
+  primary pod.</p>
+</li>
+</ul>
+<p>There's no one-size-fits-all configuration for the update method, as that
+depends on several factors like the actual workload of your database, the
+requirements in terms of <a href="../before_you_start/#rpo">RPO</a> and
+<a href="../before_you_start/#rto">RTO</a>, whether your PostgreSQL architecture is shared
+or shared nothing, and so on.</p>
+<p>Indeed, being PostgreSQL a primary/standby architecture database management
+system, the update process inevitably generates a downtime for your
+applications. One important aspect to consider for your context is the time it
+takes for your pod to download the new PostgreSQL container image, as that
+depends on your Kubernetes cluster settings and specifications. The
+<code>switchover</code> method makes sure that the promoted instance already runs the
+target image version of the container. The <code>restart</code> method instead might require
+to download the image from the origin registry after the primary pod has been
+shut down. It is up to you to determine whether, for your database, it is best
+to use <code>restart</code> or <code>switchover</code> as part of the rolling update procedure.</p>
+<h2 id="manual-updates-supervised">Manual updates (<code>supervised</code>)</h2>
+<p>When <code>primaryUpdateStrategy</code> is set to <code>supervised</code>, the rolling update process
+is suspended immediately after all replicas have been upgraded.</p>
+<p>This phase can only be completed with either a manual switchover or an in-place
+restart. Keep in mind that image upgrades can not be applied with an in-place restart, 
+so a switchover is required in such cases.</p>
+<p>You can trigger a switchover with:</p>
+<pre><code class="language-bash">kubectl cnpg promote [cluster] [new_primary]
+</code></pre>
+<p>You can trigger a restart with:</p>
+<pre><code class="language-bash">kubectl cnpg restart [cluster] [current_primary]
+</code></pre>
+<p>You can find more information in the <a href="../kubectl-plugin/"><code>cnpg</code> plugin page</a>.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../failure_modes/" class="btn btn-neutral float-left" title="Failure Modes"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../replication/" class="btn btn-neutral float-right" title="Replication">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../failure_modes/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../replication/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/samples/backup-example.yaml b/assets/documentation/1.27.0-rc1/samples/backup-example.yaml
new file mode 100644
index 000000000..69130c83e
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/backup-example.yaml
@@ -0,0 +1,7 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Backup
+metadata:
+  name: pg-backup-example
+spec:
+  cluster:
+    name: pg-backup
diff --git a/assets/documentation/1.27.0-rc1/samples/backup-with-volume-snapshot.yaml b/assets/documentation/1.27.0-rc1/samples/backup-with-volume-snapshot.yaml
new file mode 100644
index 000000000..b1311a7e1
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/backup-with-volume-snapshot.yaml
@@ -0,0 +1,8 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Backup
+metadata:
+  name: backup-with-volume-snapshot
+spec:
+  method: volumeSnapshot
+  cluster:
+    name: cluster-example-with-volume-snapshot
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-advanced-initdb.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-advanced-initdb.yaml
new file mode 100644
index 000000000..1c89634ba
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-advanced-initdb.yaml
@@ -0,0 +1,25 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-advanced-initdb
+spec:
+  instances: 3
+
+  bootstrap:
+    initdb:
+      database: appdb
+      owner: appuser
+      postInitSQL:
+        - create table numbers (i integer)
+        - insert into numbers (select generate_series(1,10000))
+      postInitTemplateSQL:
+        - create extension intarray
+      postInitApplicationSQL:
+        - create table application_numbers (i integer)
+        - insert into application_numbers (select generate_series(1,10000))
+      dataChecksums: true
+      encoding: 'UTF8'
+      localeCollate: 'en_AU.UTF-8'
+      localeCType: 'en_AU.UTF-8'
+  storage:
+    size: 1Gi
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-backup-aws-inherit.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-backup-aws-inherit.yaml
new file mode 100644
index 000000000..8d44ba98b
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-backup-aws-inherit.yaml
@@ -0,0 +1,15 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: pg-backup-aws-inherit
+spec:
+  instances: 3
+  storage:
+    storageClass: standard
+    size: 1Gi
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://BUCKET_NAME/path/to/folder
+      s3Credentials:
+        inheritFromIAMRole: true
+    retentionPolicy: "30d"
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-backup-azure-inherit.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-backup-azure-inherit.yaml
new file mode 100644
index 000000000..7b3942774
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-backup-azure-inherit.yaml
@@ -0,0 +1,15 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: pg-backup-azure-inherit
+spec:
+  instances: 3
+  storage:
+    storageClass: standard
+    size: 1Gi
+  backup:
+    barmanObjectStore:
+      destinationPath: https://AZURE_STORAGE_ACCOUNT.blob.core.windows.net/pg-backup-azure-inherit/
+      azureCredentials:
+        inheritFromAzureAD: true
+    retentionPolicy: "30d"
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-backup-retention-30d.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-backup-retention-30d.yaml
new file mode 100644
index 000000000..7fb756ebd
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-backup-retention-30d.yaml
@@ -0,0 +1,32 @@
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: pg-backup-retention-30d
+spec:
+  instances: 3
+
+  # Example of rolling update strategy:
+  # - unsupervised: automated update of the primary once all
+  #                 replicas have been upgraded (default)
+  # - supervised: requires manual supervision to perform
+  #               the switchover of the primary
+  primaryUpdateStrategy: unsupervised
+
+  # Persistent storage configuration
+  storage:
+    storageClass: standard
+    size: 1Gi
+
+  # Backup properties
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://BUCKET_NAME/path/to/folder
+      s3Credentials:
+        accessKeyId:
+          name: aws-creds
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: aws-creds
+          key: ACCESS_SECRET_KEY
+    retentionPolicy: "30d"
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-clone-basicauth.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-clone-basicauth.yaml
new file mode 100644
index 000000000..54793d794
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-clone-basicauth.yaml
@@ -0,0 +1,29 @@
+# IMPORTANT: this configuration requires an appropriate line
+# in the host-based access rules allowing replication connections
+# to the postgres user.
+#
+# The following line met the requisites
+# - "host replication postgres all md5"
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-clone-basicauth
+spec:
+  instances: 3
+
+  bootstrap:
+    pg_basebackup:
+      source: cluster-example
+
+  storage:
+    size: 1Gi
+
+  externalClusters:
+  - name: cluster-example
+    connectionParameters:
+      host: cluster-example-rw.default.svc
+      user: postgres
+      dbname: postgres
+    password:
+      name: cluster-example-superuser
+      key: password
\ No newline at end of file
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-clone-tls.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-clone-tls.yaml
new file mode 100644
index 000000000..a8c35a36f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-clone-tls.yaml
@@ -0,0 +1,30 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-clone-tls
+spec:
+  instances: 3
+
+  bootstrap:
+    pg_basebackup:
+      source: cluster-example
+
+  storage:
+    size: 1Gi
+
+  externalClusters:
+  - name: cluster-example
+    connectionParameters:
+      host: cluster-example-rw.default.svc
+      user: streaming_replica
+      sslmode: verify-full
+      dbname: postgres
+    sslKey:
+      name: cluster-example-replication
+      key: tls.key
+    sslCert:
+      name: cluster-example-replication
+      key: tls.crt
+    sslRootCert:
+      name: cluster-example-ca
+      key: ca.crt
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-bis-restore-cr.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-bis-restore-cr.yaml
new file mode 100644
index 000000000..4958cadc0
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-bis-restore-cr.yaml
@@ -0,0 +1,26 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore
+spec:
+  instances: 3
+
+  storage:
+    size: 1Gi
+    storageClass: csi-hostpath-sc
+  walStorage:
+    size: 1Gi
+    storageClass: csi-hostpath-sc
+
+  bootstrap:
+    recovery:
+      volumeSnapshots:
+        storage:
+          name: cluster-example-20231031161103
+          kind: VolumeSnapshot
+          apiGroup: snapshot.storage.k8s.io
+        walStorage:
+          name: cluster-example-20231031161103-wal
+          kind: VolumeSnapshot
+          apiGroup: snapshot.storage.k8s.io
+
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-bis-restore.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-bis-restore.yaml
new file mode 100644
index 000000000..7f814a89f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-bis-restore.yaml
@@ -0,0 +1,43 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore
+spec:
+  instances: 3
+  imageName: registry.dev:5000/postgresql:16
+
+  storage:
+    size: 1Gi
+    storageClass: csi-hostpath-sc
+  walStorage:
+    size: 1Gi
+    storageClass: csi-hostpath-sc
+
+  # Backup properties
+  # This assumes a local minio setup
+#  backup:
+#    barmanObjectStore:
+#      destinationPath: s3://backups/
+#      endpointURL: http://minio:9000
+#      s3Credentials:
+#        accessKeyId:
+#          name: minio
+#          key: ACCESS_KEY_ID
+#        secretAccessKey:
+#          name: minio
+#          key: ACCESS_SECRET_KEY
+#      wal:
+#        compression: gzip
+
+  bootstrap:
+    recovery:
+      volumeSnapshots:
+        storage:
+          name: snapshot-0bc6095db42768c7a1fe897494a966f541ef5fb29b2eb8e9399d80bd0a32408a-2023-11-13-7.41.53
+          kind: VolumeSnapshot
+          apiGroup: snapshot.storage.k8s.io
+        walStorage:
+          name: snapshot-a67084ba08097fd8c3e34c6afef8110091da67e5895f0379fd2df5b9f73ff524-2023-11-13-7.41.53
+          kind: VolumeSnapshot
+          apiGroup: snapshot.storage.k8s.io
+
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-bis.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-bis.yaml
new file mode 100644
index 000000000..a99b205f1
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-bis.yaml
@@ -0,0 +1,29 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  imageName: registry.dev:5000/postgresql:16
+
+  backup:
+    volumeSnapshot:
+      className: csi-hostpath-groupsnapclass
+        #className: csi-hostpath-snapclass
+      groupSnapshot: true
+
+  storage:
+    storageClass: csi-hostpath-sc
+    size: 1Gi
+  walStorage:
+    storageClass: csi-hostpath-sc
+    size: 1Gi
+      #  tablespaces:
+      #    first:
+      #      storage:
+      #        storageClass: csi-hostpath-sc
+      #        size: 1Gi
+      #    second:
+      #      storage:
+      #        storageClass: csi-hostpath-sc
+      #        size: 1Gi
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-catalog.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-catalog.yaml
new file mode 100644
index 000000000..5d2ff537c
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-catalog.yaml
@@ -0,0 +1,24 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: ImageCatalog
+metadata:
+  name: image-catalog-example
+spec:
+  images:
+    - image: ghcr.io/cloudnative-pg/postgresql:16
+      major: 16
+    - image: ghcr.io/cloudnative-pg/postgresql:15
+      major: 15
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  imageCatalogRef:
+    apiGroup: postgresql.cnpg.io
+    kind: ImageCatalog
+    name: image-catalog-example
+    major: 15
+  storage:
+    size: 1Gi
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-cert-manager.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-cert-manager.yaml
new file mode 100644
index 000000000..7ea41edee
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-cert-manager.yaml
@@ -0,0 +1,120 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: selfsigned-issuer
+spec:
+  selfSigned: {}
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: server-ca
+spec:
+  isCA: true
+  commonName: my-selfsigned-server-ca
+  secretName: server-ca-key-pair
+  privateKey:
+    algorithm: ECDSA
+    size: 256
+  issuerRef:
+    name: selfsigned-issuer
+    kind: Issuer
+    group: cert-manager.io
+---
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: server-ca-issuer
+spec:
+  ca:
+    secretName: server-ca-key-pair
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: my-postgres-server-cert
+  labels:
+    cnpg.io/reload: ""
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: my-postgres-server-cert
+spec:
+  secretName: my-postgres-server-cert
+  usages:
+    - server auth
+  dnsNames:
+    - cluster-example-lb.internal.mydomain.net
+    - cluster-example-rw
+    - cluster-example-rw.default
+    - cluster-example-rw.default.svc
+    - cluster-example-r
+    - cluster-example-r.default
+    - cluster-example-r.default.svc
+    - cluster-example-ro
+    - cluster-example-ro.default
+    - cluster-example-ro.default.svc
+  issuerRef:
+    name: server-ca-issuer
+    kind: Issuer
+    group: cert-manager.io
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: client-ca
+spec:
+  isCA: true
+  commonName: my-selfsigned-client-ca
+  secretName: client-ca-key-pair
+  privateKey:
+    algorithm: ECDSA
+    size: 256
+  issuerRef:
+    name: selfsigned-issuer
+    kind: Issuer
+    group: cert-manager.io
+---
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: client-ca-issuer
+spec:
+  ca:
+    secretName: client-ca-key-pair
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: my-postgres-client-cert
+  labels:
+    cnpg.io/reload: ""
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: my-postgres-client-cert
+spec:
+  secretName: my-postgres-client-cert
+  usages:
+    - client auth
+  commonName: streaming_replica
+  issuerRef:
+    name: client-ca-issuer
+    kind: Issuer
+    group: cert-manager.io
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  certificates:
+    serverTLSSecret: my-postgres-server-cert
+    serverCASecret: my-postgres-server-cert
+    clientCASecret: my-postgres-client-cert
+    replicationTLSSecret: my-postgres-client-cert
+  storage:
+    size: 1Gi
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-custom.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-custom.yaml
new file mode 100644
index 000000000..6bc6a4bf2
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-custom.yaml
@@ -0,0 +1,28 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-custom
+spec:
+  instances: 3
+
+  # Parameters and pg_hba configuration will be append
+  # to the default ones to make the cluster work
+  postgresql:
+    parameters:
+      max_worker_processes: "60"
+    pg_hba:
+      # To access through TCP/IP you will need to get username
+      # and password from the secret cluster-example-custom-app
+      - host all all all md5
+
+
+  # Example of rolling update strategy:
+  # - unsupervised: automated update of the primary once all
+  #                 replicas have been upgraded (default)
+  # - supervised: requires manual supervision to perform
+  #               the switchover of the primary
+  primaryUpdateStrategy: unsupervised
+
+  # Require 1Gi of space per instance using default storage class
+  storage:
+    size: 1Gi
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-full.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-full.yaml
new file mode 100644
index 000000000..f0237d6f7
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-full.yaml
@@ -0,0 +1,110 @@
+# Example of definition of a test cluster using all the elements available
+# in the CRD. Please change values appropriately for your environment.
+# Remember that you can take advantage of convention over configuration
+# and normally you don't need to use all these definitions.
+
+apiVersion: v1
+data:
+  password: VHhWZVE0bk44MlNTaVlIb3N3cU9VUlp2UURhTDRLcE5FbHNDRUVlOWJ3RHhNZDczS2NrSWVYelM1Y1U2TGlDMg==
+  username: YXBw
+kind: Secret
+metadata:
+  name: cluster-example-app-user
+type: kubernetes.io/basic-auth
+---
+apiVersion: v1
+data:
+  password: dU4zaTFIaDBiWWJDYzRUeVZBYWNCaG1TemdxdHpxeG1PVmpBbjBRSUNoc0pyU211OVBZMmZ3MnE4RUtLTHBaOQ==
+  username: cG9zdGdyZXM=
+kind: Secret
+metadata:
+  name: cluster-example-superuser
+type: kubernetes.io/basic-auth
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: backup-creds
+data:
+  ACCESS_KEY_ID: a2V5X2lk
+  ACCESS_SECRET_KEY: c2VjcmV0X2tleQ==
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-full
+spec:
+  description: "Example of cluster"
+  imageName: ghcr.io/cloudnative-pg/postgresql:17.5
+  # imagePullSecret is only required if the images are located in a private registry
+  # imagePullSecrets:
+  #   - name: private_registry_access
+  instances: 3
+  startDelay: 300
+  stopDelay: 300
+  primaryUpdateStrategy: unsupervised
+
+  postgresql:
+    parameters:
+      shared_buffers: 256MB
+      pg_stat_statements.max: '10000'
+      pg_stat_statements.track: all
+      auto_explain.log_min_duration: '10s'
+    pg_hba:
+      - host all all 10.244.0.0/16 md5
+
+  bootstrap:
+    initdb:
+      database: app
+      owner: app
+      secret:
+        name: cluster-example-app-user
+    # Alternative bootstrap method: start from a backup
+    #recovery:
+    #  backup:
+    #    name: backup-example
+
+  enableSuperuserAccess: true
+  superuserSecret:
+    name: cluster-example-superuser
+
+  storage:
+    storageClass: standard
+    size: 1Gi
+
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://cluster-example-full-backup/
+      endpointURL: http://custom-endpoint:1234
+      s3Credentials:
+        accessKeyId:
+          name: backup-creds
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: backup-creds
+          key: ACCESS_SECRET_KEY
+      wal:
+        compression: gzip
+        encryption: AES256
+      data:
+        compression: gzip
+        encryption: AES256
+        immediateCheckpoint: false
+        jobs: 2
+    retentionPolicy: "30d"
+
+  resources:
+    requests:
+      memory: "512Mi"
+      cpu: "1"
+    limits:
+      memory: "1Gi"
+      cpu: "2"
+
+  affinity:
+    enablePodAntiAffinity: true
+    topologyKey: failure-domain.beta.kubernetes.io/zone
+
+  nodeMaintenanceWindow:
+    inProgress: false
+    reusePVC: false
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-initdb-icu.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-initdb-icu.yaml
new file mode 100644
index 000000000..3e9747eff
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-initdb-icu.yaml
@@ -0,0 +1,19 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-initdb-icu
+spec:
+  instances: 3
+
+  bootstrap:
+    initdb:
+      encoding: UTF8
+      localeCollate: en_US.UTF8
+      localeCType: en_US.UTF8
+      localeProvider: icu
+      icuLocale: en-US
+      # we want to order g and G after A (and before b)
+      icuRules: '&A < g <<< G'
+      
+  storage:
+    size: 1Gi
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-initdb-sql-refs.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-initdb-sql-refs.yaml
new file mode 100644
index 000000000..09cb0c82e
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-initdb-sql-refs.yaml
@@ -0,0 +1,47 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: post-init-sql-configmap
+data:
+  configmap.sql: |
+    create table configmaps (i integer);
+    insert into configmaps (select generate_series(1,10000));
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: post-init-sql-secret
+stringData:
+  secret.sql: |
+    create table secrets (i integer);
+    insert into secrets (select generate_series(1,10000));
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-initdb
+spec:
+  instances: 3
+
+  bootstrap:
+    initdb:
+      database: appdb
+      owner: appuser
+      postInitSQL:
+        - create table numbers (i integer)
+        - insert into numbers (select generate_series(1,10000))
+      postInitTemplateSQL:
+        - create extension intarray
+      postInitApplicationSQL:
+        - create table application_numbers (i integer)
+        - insert into application_numbers (select generate_series(1,10000))
+      postInitApplicationSQLRefs:
+        configMapRefs:
+        - name: post-init-sql-configmap
+          key: configmap.sql
+        secretRefs:
+        - name: post-init-sql-secret
+          key: secret.sql
+
+  storage:
+    size: 1Gi
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-initdb.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-initdb.yaml
new file mode 100644
index 000000000..d4b49619c
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-initdb.yaml
@@ -0,0 +1,23 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-initdb
+spec:
+  instances: 3
+
+  bootstrap:
+    initdb:
+      database: appdb
+      owner: appuser
+      postInitSQL:
+        - create table numbers (i integer)
+        - insert into numbers (select generate_series(1,10000))
+      postInitTemplateSQL:
+        - create extension intarray
+      postInitApplicationSQL:
+        - create table application_numbers (i integer)
+        - insert into application_numbers (select generate_series(1,10000))
+      dataChecksums: true
+      encoding: 'UTF8'
+  storage:
+    size: 1Gi
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-logical-destination.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-logical-destination.yaml
new file mode 100644
index 000000000..abaf006ec
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-logical-destination.yaml
@@ -0,0 +1,43 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-dest
+spec:
+  instances: 1
+
+  storage:
+    size: 1Gi
+
+  bootstrap:
+    initdb:
+      import:
+        type: microservice
+        schemaOnly: true
+        databases:
+          - app
+        source:
+          externalCluster: cluster-example
+
+  externalClusters:
+  - name: cluster-example
+    connectionParameters:
+      host: cluster-example-rw.default.svc
+      user: app
+      dbname: app
+    password:
+      name: cluster-example-app
+      key: password
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Subscription
+metadata:
+  name: cluster-example-dest-sub
+spec:
+  cluster:
+    name: cluster-example-dest
+  name: sub
+  dbname: app
+  publicationName: pub
+  externalClusterName: cluster-example
+  parameters:
+    failover: 'true'
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-logical-source.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-logical-source.yaml
new file mode 100644
index 000000000..39eb64bdb
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-logical-source.yaml
@@ -0,0 +1,54 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+
+  imageName: ghcr.io/cloudnative-pg/postgresql:17
+
+  storage:
+    size: 1Gi
+
+  bootstrap:
+    initdb:
+      postInitApplicationSQL:
+        - CREATE TABLE numbers (i SERIAL PRIMARY KEY, m INTEGER)
+        - INSERT INTO numbers (m) (SELECT generate_series(1,10000))
+        - ALTER TABLE numbers OWNER TO app
+        - CREATE TABLE numbers_two (i SERIAL PRIMARY KEY, m INTEGER)
+        - INSERT INTO numbers_two (m) (SELECT generate_series(1,10000))
+        - ALTER TABLE numbers_two OWNER TO app
+        - CREATE SCHEMA another_schema
+        - ALTER SCHEMA another_schema OWNER TO app
+        - CREATE TABLE another_schema.numbers_three (i SERIAL PRIMARY KEY, m INTEGER)
+        - INSERT INTO another_schema.numbers_three (m) (SELECT generate_series(1,10000))
+        - ALTER TABLE another_schema.numbers_three OWNER TO app
+
+  replicationSlots:
+    highAvailability:
+      synchronizeLogicalDecoding: true
+
+  managed:
+    roles:
+      - name: app
+        login: true
+        replication: true
+
+  postgresql:
+    parameters:
+      hot_standby_feedback: 'on'
+      sync_replication_slots: 'on'
+
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Publication
+metadata:
+  name: cluster-example-pub
+spec:
+  name: pub
+  dbname: app
+  cluster:
+    name: cluster-example
+  target:
+    allTables: true
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-managed-services.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-managed-services.yaml
new file mode 100644
index 000000000..a841a4e75
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-managed-services.yaml
@@ -0,0 +1,24 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-managed-services
+spec:
+  instances: 1
+  storage:
+    size: 1Gi
+
+  managed:
+    services:
+      ## disable the default services
+      disabledDefaultServices: ["ro", "r"]
+      additional:
+        - selectorType: rw
+          serviceTemplate:
+            metadata:
+              name: "test-rw"
+              labels:
+                test-label: "true"
+              annotations:
+                test-annotation: "true"
+            spec:
+              type: LoadBalancer
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-monitoring.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-monitoring.yaml
new file mode 100644
index 000000000..3577045e1
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-monitoring.yaml
@@ -0,0 +1,224 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+
+  storage:
+    size: 1Gi
+
+  monitoring:
+    enablePodMonitor: true
+    customQueriesConfigMap:
+      - name: example-monitoring
+        key: custom-queries
+    customQueriesSecret:
+      - name: example-monitoring-secret
+        key: pg-database
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: example-monitoring
+  labels:
+    cnpg.io/reload: ""
+data:
+  custom-queries: |
+    pg_stat_user_tables:
+      target_databases:
+      - "*"
+      query: |
+       SELECT
+         current_database() datname,
+         schemaname,
+         relname,
+         seq_scan,
+         seq_tup_read,
+         idx_scan,
+         idx_tup_fetch,
+         n_tup_ins,
+         n_tup_upd,
+         n_tup_del,
+         n_tup_hot_upd,
+         n_live_tup,
+         n_dead_tup,
+         n_mod_since_analyze,
+         COALESCE(last_vacuum, '1970-01-01Z') as last_vacuum,
+         COALESCE(last_autovacuum, '1970-01-01Z') as last_autovacuum,
+         COALESCE(last_analyze, '1970-01-01Z') as last_analyze,
+         COALESCE(last_autoanalyze, '1970-01-01Z') as last_autoanalyze,
+         vacuum_count,
+         autovacuum_count,
+         analyze_count,
+         autoanalyze_count
+       FROM
+         pg_stat_user_tables
+      metrics:
+        - datname:
+            usage: "LABEL"
+            description: "Name of current database"
+        - schemaname:
+            usage: "LABEL"
+            description: "Name of the schema that this table is in"
+        - relname:
+            usage: "LABEL"
+            description: "Name of this table"
+        - seq_scan:
+            usage: "COUNTER"
+            description: "Number of sequential scans initiated on this table"
+        - seq_tup_read:
+            usage: "COUNTER"
+            description: "Number of live rows fetched by sequential scans"
+        - idx_scan:
+            usage: "COUNTER"
+            description: "Number of index scans initiated on this table"
+        - idx_tup_fetch:
+            usage: "COUNTER"
+            description: "Number of live rows fetched by index scans"
+        - n_tup_ins:
+            usage: "COUNTER"
+            description: "Number of rows inserted"
+        - n_tup_upd:
+            usage: "COUNTER"
+            description: "Number of rows updated"
+        - n_tup_del:
+            usage: "COUNTER"
+            description: "Number of rows deleted"
+        - n_tup_hot_upd:
+            usage: "COUNTER"
+            description: "Number of rows HOT updated (i.e., with no separate index update required)"
+        - n_live_tup:
+            usage: "GAUGE"
+            description: "Estimated number of live rows"
+        - n_dead_tup:
+            usage: "GAUGE"
+            description: "Estimated number of dead rows"
+        - n_mod_since_analyze:
+            usage: "GAUGE"
+            description: "Estimated number of rows changed since last analyze"
+        - last_vacuum:
+            usage: "GAUGE"
+            description: "Last time at which this table was manually vacuumed (not counting VACUUM FULL)"
+        - last_autovacuum:
+            usage: "GAUGE"
+            description: "Last time at which this table was vacuumed by the autovacuum daemon"
+        - last_analyze:
+            usage: "GAUGE"
+            description: "Last time at which this table was manually analyzed"
+        - last_autoanalyze:
+            usage: "GAUGE"
+            description: "Last time at which this table was analyzed by the autovacuum daemon"
+        - vacuum_count:
+            usage: "COUNTER"
+            description: "Number of times this table has been manually vacuumed (not counting VACUUM FULL)"
+        - autovacuum_count:
+            usage: "COUNTER"
+            description: "Number of times this table has been vacuumed by the autovacuum daemon"
+        - analyze_count:
+            usage: "COUNTER"
+            description: "Number of times this table has been manually analyzed"
+        - autoanalyze_count:
+            usage: "COUNTER"
+            description: "Number of times this table has been analyzed by the autovacuum daemon"
+
+    pg_statio_user_tables:
+      query: "SELECT current_database() datname, schemaname, relname, heap_blks_read, heap_blks_hit, idx_blks_read, idx_blks_hit, toast_blks_read, toast_blks_hit, tidx_blks_read, tidx_blks_hit FROM pg_statio_user_tables"
+      metrics:
+        - datname:
+            usage: "LABEL"
+            description: "Name of current database"
+        - schemaname:
+            usage: "LABEL"
+            description: "Name of the schema that this table is in"
+        - relname:
+            usage: "LABEL"
+            description: "Name of this table"
+        - heap_blks_read:
+            usage: "COUNTER"
+            description: "Number of disk blocks read from this table"
+        - heap_blks_hit:
+            usage: "COUNTER"
+            description: "Number of buffer hits in this table"
+        - idx_blks_read:
+            usage: "COUNTER"
+            description: "Number of disk blocks read from all indexes on this table"
+        - idx_blks_hit:
+            usage: "COUNTER"
+            description: "Number of buffer hits in all indexes on this table"
+        - toast_blks_read:
+            usage: "COUNTER"
+            description: "Number of disk blocks read from this table's TOAST table (if any)"
+        - toast_blks_hit:
+            usage: "COUNTER"
+            description: "Number of buffer hits in this table's TOAST table (if any)"
+        - tidx_blks_read:
+            usage: "COUNTER"
+            description: "Number of disk blocks read from this table's TOAST table indexes (if any)"
+        - tidx_blks_hit:
+            usage: "COUNTER"
+            description: "Number of buffer hits in this table's TOAST table indexes (if any)"
+
+    pg_stat_activity:
+      query: |
+        WITH
+          metrics AS (
+            SELECT
+              application_name,
+              SUM(EXTRACT(EPOCH FROM (CURRENT_TIMESTAMP - state_change))::bigint)::float AS process_idle_seconds_sum,
+              COUNT(*) AS process_idle_seconds_count
+            FROM pg_stat_activity
+            WHERE state = 'idle'
+            GROUP BY application_name
+          ),
+          buckets AS (
+            SELECT
+              application_name,
+              le,
+              SUM(
+                CASE WHEN EXTRACT(EPOCH FROM (CURRENT_TIMESTAMP - state_change)) <= le
+                  THEN 1
+                  ELSE 0
+                END
+              )::bigint AS bucket
+            FROM
+              pg_stat_activity,
+              UNNEST(ARRAY[1, 2, 5, 15, 30, 60, 90, 120, 300]) AS le
+            GROUP BY application_name, le
+            ORDER BY application_name, le
+          )
+        SELECT
+          application_name,
+          process_idle_seconds_sum,
+          process_idle_seconds_count,
+          ARRAY_AGG(le) AS process_idle_seconds,
+          ARRAY_AGG(bucket) AS process_idle_seconds_bucket
+        FROM metrics JOIN buckets USING (application_name)
+        GROUP BY 1, 2, 3
+      metrics:
+        - application_name:
+            usage: "LABEL"
+            description: "Application Name"
+        - process_idle_seconds:
+            usage: "HISTOGRAM"
+            description: "Idle time of server processes"
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: example-monitoring-secret
+  labels:
+    cnpg.io/reload: ""
+stringData:
+  pg-database: |
+    pg_database:
+      query: "SELECT pg_database.datname, pg_database_size(pg_database.datname) as size_bytes FROM pg_database"
+      primary: true
+      cache_seconds: 30
+      metrics:
+        - datname:
+            usage: "LABEL"
+            description: "Name of the database"
+        - size_bytes:
+            usage: "GAUGE"
+            description: "Disk space used by the database"
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-pg-hba.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-pg-hba.yaml
new file mode 100644
index 000000000..a48144953
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-pg-hba.yaml
@@ -0,0 +1,12 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  postgresql:
+    pg_hba:
+      - hostssl app all all cert
+
+  storage:
+    size: 1Gi
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-projected-volume.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-projected-volume.yaml
new file mode 100644
index 000000000..085d3e67f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-projected-volume.yaml
@@ -0,0 +1,43 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-projected-volume
+spec:
+  instances: 3
+  projectedVolumeTemplate:
+    sources:
+      - secret:
+          name: sample-secret
+          items:
+            - key: tls.crt
+              path: certificate/tls.crt
+            - key: tls.key
+              path: certificate/tls.key
+      - configMap:
+          name: sample-configmap
+          items:
+            - key: key1
+              path: config/key1
+            - key: key2
+              path: config/key2
+  storage:
+    size: 1Gi
+
+---
+apiVersion: v1
+data:
+  tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUNQekNDQWVXZ0F3SUJBZ0lRSHVDY2lKcDVkZis0dHZBcDBrTk9rekFLQmdncWhrak9QUVFEQWpCTk1TTXcKSVFZRFZRUUxFeHB3YjNOMFozSmxjM0ZzTFc5d1pYSmhkRzl5TFhONWMzUmxiVEVtTUNRR0ExVUVBeE1kY0c5egpkR2R5WlhOeGJDMXZjR1Z5WVhSdmNpMWpZUzF6WldOeVpYUXdIaGNOTWpJd09USTVNRGMxTVRBNVdoY05Nakl4Ck1qSTRNRGMxTVRBNVdqQk5NVXN3U1FZRFZRUURFMEp3YjNOMFozSmxjM0ZzTFc5d1pYSmhkRzl5TFhkbFltaHYKYjJzdGMyVnlkbWxqWlM1d2IzTjBaM0psYzNGc0xXOXdaWEpoZEc5eUxYTjVjM1JsYlM1emRtTXdXVEFUQmdjcQpoa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVJRd2lhUm0wSmN4TzlBVlE0MVlqVlRqNUhDSVVFblFQOXNZRXFKCmYvNE1mVm53NkdDOThjNDNmQTVuS2UwSnQ5ZEV3QXREYktkdkRoeDlUTmIzdVY0K280R21NSUdqTUE0R0ExVWQKRHdFQi93UUVBd0lEcURBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREFUQU1CZ05WSFJNQkFmOEVBakFBTUI4RwpBMVVkSXdRWU1CYUFGQjN6cUVKbWFORENoRDdkWGptSWRlNEhUY0pFTUUwR0ExVWRFUVJHTUVTQ1FuQnZjM1JuCmNtVnpjV3d0YjNCbGNtRjBiM0l0ZDJWaWFHOXZheTF6WlhKMmFXTmxMbkJ2YzNSbmNtVnpjV3d0YjNCbGNtRjAKYjNJdGMzbHpkR1Z0TG5OMll6QUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpQkMwS2M5WWxYelBpL0lhTkRnWHkwawpYTDJpNlZzSHRORTFxN3MzWXh6Mm53SWhBS2IxUW5EVTlqRnNVK0l5a292TitVU1ZpVm5vU2MvZ2RXWkxmMnhoCjZ2WUsKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
+  tls.key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUtucWxVQjFqU2sxWW5VZzAyb0tGbXlRdDJLUEZwaFc0K1lmQUFmUFdRenVvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFVU1JbWtadENYTVR2UUZVT05XSTFVNCtSd2lGQkowRC9iR0JLaVgvK0RIMVo4T2hndmZITwpOM3dPWnludENiZlhSTUFMUTJ5bmJ3NGNmVXpXOTdsZVBnPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
+kind: Secret
+metadata:
+  name: sample-secret
+type: kubernetes.io/tls
+---
+apiVersion: v1
+data:
+  key1: value1
+  key2: value2
+  key3: value3
+kind: ConfigMap
+metadata:
+  name: sample-configmap
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-replica-from-backup-simple.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-replica-from-backup-simple.yaml
new file mode 100644
index 000000000..b98c1b689
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-replica-from-backup-simple.yaml
@@ -0,0 +1,30 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-replica-from-backup-simple
+spec:
+  instances: 1
+
+  bootstrap:
+    recovery:
+      source: cluster-example-backup
+
+  replica:
+    enabled: true
+    source: cluster-example-backup
+
+  storage:
+    size: 1Gi
+
+  externalClusters:
+  - name: cluster-example-backup
+    barmanObjectStore:
+      destinationPath: s3://backups/
+      endpointURL: http://minio:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-replica-from-volume-snapshot.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-replica-from-volume-snapshot.yaml
new file mode 100644
index 000000000..de74bb707
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-replica-from-volume-snapshot.yaml
@@ -0,0 +1,54 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-replica-from-snapshot
+spec:
+  instances: 1
+
+  storage:
+    storageClass: csi-hostpath-sc
+    size: 1Gi
+  walStorage:
+    storageClass: csi-hostpath-sc
+    size: 1Gi
+
+  bootstrap:
+    recovery:
+      source: cluster-example-with-volume-snapshot
+      volumeSnapshots:
+        storage:
+          name: cluster-example-with-volume-snapshot-2-1692618163
+          kind: VolumeSnapshot
+          apiGroup: snapshot.storage.k8s.io
+        walStorage:
+          name: cluster-example-with-volume-snapshot-2-wal-1692618163
+          kind: VolumeSnapshot
+          apiGroup: snapshot.storage.k8s.io
+
+  replica:
+    enabled: true
+    source: cluster-example-with-volume-snapshot
+
+  externalClusters:
+    - name: cluster-example-with-volume-snapshot
+
+      connectionParameters:
+        host: cluster-example-with-volume-snapshot-rw.default.svc
+        user: postgres
+        dbname: postgres
+      password:
+        name: cluster-example-with-volume-snapshot-superuser
+        key: password
+
+      barmanObjectStore:
+        destinationPath: s3://backups/
+        endpointURL: http://minio:9000
+        s3Credentials:
+          accessKeyId:
+            name: minio
+            key: ACCESS_KEY_ID
+          secretAccessKey:
+            name: minio
+            key: ACCESS_SECRET_KEY
+        wal:
+          maxParallel: 8
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-replica-streaming.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-replica-streaming.yaml
new file mode 100644
index 000000000..7ba4b970f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-replica-streaming.yaml
@@ -0,0 +1,38 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-replica-example
+spec:
+  instances: 1
+
+  bootstrap:
+    pg_basebackup:
+      source: cluster-example
+
+  replica:
+    enabled: true
+    source: cluster-example
+
+  storage:
+    size: 1Gi
+  # note the namespace 'default' in the host name `cluster-example-rw.default.svc`
+  # remember to change accordingly with the namespace of the main cluster
+  externalClusters:
+  - name: cluster-example
+    connectionParameters:
+      host: cluster-example-rw.default.svc
+      user: streaming_replica
+      sslmode: verify-full
+      dbname: postgres
+    # NOTE: if this cluster is created in a different namespace than the main cluster
+    # remember to create the `-replication` and `-ca` secrets in the follower namespace
+    # before creating the follower cluster
+    sslKey:
+      name: cluster-example-replication
+      key: tls.key
+    sslCert:
+      name: cluster-example-replication
+      key: tls.crt
+    sslRootCert:
+      name: cluster-example-ca
+      key: ca.crt
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-secret.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-secret.yaml
new file mode 100644
index 000000000..29ce4f1c6
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-secret.yaml
@@ -0,0 +1,38 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-secret
+spec:
+  instances: 3
+
+  bootstrap:
+    initdb:
+      database: app
+      owner: app
+      secret:
+        name: cluster-example-app-user
+
+  enableSuperuserAccess: true
+  superuserSecret:
+    name: cluster-example-superuser
+
+  storage:
+    size: 1Gi
+---
+apiVersion: v1
+data:
+  username: YXBw
+  password: cGFzc3dvcmQ=
+kind: Secret
+metadata:
+  name: cluster-example-app-user
+type: kubernetes.io/basic-auth
+---
+apiVersion: v1
+data:
+  username: cG9zdGdyZXM=
+  password: cGFzc3dvcmQ=
+kind: Secret
+metadata:
+  name: cluster-example-superuser
+type: kubernetes.io/basic-auth
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-sync-az.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-sync-az.yaml
new file mode 100644
index 000000000..80de217af
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-sync-az.yaml
@@ -0,0 +1,14 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-az
+spec:
+  instances: 3
+  minSyncReplicas: 1
+  maxSyncReplicas: 1
+  postgresql:
+    syncReplicaElectionConstraint:
+      enabled: true
+      nodeLabelsAntiAffinity: [ "az" ]
+  storage:
+    size: 1Gi
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-syncreplicas-explicit.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-syncreplicas-explicit.yaml
new file mode 100644
index 000000000..14ec8f219
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-syncreplicas-explicit.yaml
@@ -0,0 +1,14 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-syncreplicas
+spec:
+  instances: 5
+
+  postgresql:
+    synchronous:
+      method: first
+      number: 2
+
+  storage:
+    size: 1G
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-syncreplicas-legacy.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-syncreplicas-legacy.yaml
new file mode 100644
index 000000000..450fc8abe
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-syncreplicas-legacy.yaml
@@ -0,0 +1,12 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-syncreplicas
+spec:
+  instances: 5
+
+  minSyncReplicas: 1
+  maxSyncReplicas: 3
+
+  storage:
+    size: 1G
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-syncreplicas-quorum.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-syncreplicas-quorum.yaml
new file mode 100644
index 000000000..ba3b6e922
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-syncreplicas-quorum.yaml
@@ -0,0 +1,16 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+  annotations:
+    alpha.cnpg.io/failoverQuorum: "true"
+spec:
+  instances: 3
+
+  postgresql:
+    synchronous:
+      method: any
+      number: 1
+
+  storage:
+    size: 1G
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-trigger-backup.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-trigger-backup.yaml
new file mode 100644
index 000000000..4bee6fb2d
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-trigger-backup.yaml
@@ -0,0 +1,7 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Backup
+metadata:
+  name: cluster-example-trigger-backup
+spec:
+  cluster:
+    name: cluster-example-with-backup
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-wal-storage.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-wal-storage.yaml
new file mode 100644
index 000000000..8c81065cc
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-wal-storage.yaml
@@ -0,0 +1,10 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  storage:
+    size: 1Gi
+  walStorage:
+    size: 1Gi
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-with-backup-scaleway.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-backup-scaleway.yaml
new file mode 100644
index 000000000..b9f7905ed
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-backup-scaleway.yaml
@@ -0,0 +1,23 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: pg-backup-scaleway
+spec:
+  instances: 3
+  storage:
+    storageClass: standard
+    size: 1Gi
+  backup:
+    barmanObjectStore:
+      destinationPath: "s3://<bucket>/backups/"     # change <bucket> with your bucket's name.
+      endpointURL: "https://s3.<region>.scw.cloud"  # change <region> with your bucket's location/region.
+      s3Credentials:
+        accessKeyId:
+          name: scaleway
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: scaleway
+          key: ACCESS_SECRET_KEY
+        region:
+          name: scaleway
+          key: ACCESS_REGION
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-with-backup.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-backup.yaml
new file mode 100644
index 000000000..4866fe055
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-backup.yaml
@@ -0,0 +1,33 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-with-backup
+spec:
+  instances: 3
+  primaryUpdateStrategy: unsupervised
+
+  # Persistent storage configuration
+  storage:
+    storageClass: csi-hostpath-sc
+    size: 1Gi
+
+  # Backup properties
+  # This assumes a local minio setup
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://backups/
+      endpointURL: http://minio:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
+      wal:
+        compression: gzip
+      data:
+        additionalCommandArgs:
+          - "--min-chunk-size=5MB"
+          - "--read-timeout=60"
+          - "-vv"
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-with-probes.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-probes.yaml
new file mode 100644
index 000000000..dc2c1bb94
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-probes.yaml
@@ -0,0 +1,16 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+
+  probes:
+    startup:
+      type: streaming
+      maximumLag: 16Mi
+      failureThreshold: 30
+      periodSeconds: 10
+
+  storage:
+    size: 1Gi
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-with-roles.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-roles.yaml
new file mode 100644
index 000000000..8d9033c62
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-roles.yaml
@@ -0,0 +1,40 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-with-roles
+spec:
+  instances: 3
+  storage:
+    size: 1Gi
+
+  managed:
+    roles:
+    - name: app
+      createdb: true
+      login: true
+    - name: dante
+      ensure: present
+      comment: my database-side comment
+      login: true
+      superuser: false
+      createdb: true
+      createrole: false
+      inherit: false
+      replication: false
+      bypassrls: false
+      connectionLimit: 4
+      validUntil: "2053-04-12T15:04:05Z"
+      inRoles:
+        - pg_monitor
+        - pg_signal_backend
+      passwordSecret:
+        name: cluster-example-dante
+---
+apiVersion: v1
+data:
+  username: ZGFudGU=
+  password: ZGFudGU=
+kind: Secret
+metadata:
+  name: cluster-example-dante
+type: kubernetes.io/basic-auth
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-with-tablespaces-backup.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-tablespaces-backup.yaml
new file mode 100644
index 000000000..5cc693c8f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-tablespaces-backup.yaml
@@ -0,0 +1,37 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-with-tablespaces
+spec:
+  instances: 3
+
+  storage:
+    size: 1Gi
+
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://backups/
+      endpointURL: http://minio:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
+      wal:
+        compression: gzip
+
+  tablespaces:
+    - name: atablespace
+      storage:
+        size: 1Gi
+        storageClass: standard
+    - name: another_tablespace
+      storage:
+        size: 2Gi
+        storageClass: standard
+    - name: tablespacea1
+      storage:
+        size: 2Gi
+        storageClass: standard
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-with-tablespaces.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-tablespaces.yaml
new file mode 100644
index 000000000..39b380db2
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-tablespaces.yaml
@@ -0,0 +1,25 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-with-tablespaces
+spec:
+  instances: 3
+
+  storage:
+    size: 1Gi
+
+  tablespaces:
+    - name: atablespace
+      storage:
+        size: 1Gi
+        storageClass: standard
+      temporary: true
+    - name: another_tablespace
+      storage:
+        size: 2Gi
+        storageClass: standard
+      temporary: true
+    - name: tablespacea1
+      storage:
+        size: 2Gi
+        storageClass: standard
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example-with-volume-snapshot.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-volume-snapshot.yaml
new file mode 100644
index 000000000..65370339c
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example-with-volume-snapshot.yaml
@@ -0,0 +1,32 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-with-volume-snapshot
+spec:
+  instances: 3
+  primaryUpdateStrategy: unsupervised
+
+  # Persistent storage configuration
+  storage:
+    storageClass: csi-hostpath-sc
+    size: 1Gi
+  walStorage:
+    storageClass: csi-hostpath-sc
+    size: 1Gi
+
+  # Backup properties
+  backup:
+    volumeSnapshot:
+       className: csi-hostpath-snapclass
+    barmanObjectStore:
+      destinationPath: s3://backups/
+      endpointURL: http://minio:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
+      wal:
+        compression: gzip
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-example.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-example.yaml
new file mode 100644
index 000000000..2ca0d8d71
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-example.yaml
@@ -0,0 +1,10 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  
+  storage:
+    size: 1Gi
+
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-expose-service.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-expose-service.yaml
new file mode 100644
index 000000000..201b25e16
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-expose-service.yaml
@@ -0,0 +1,36 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: tcp-services
+  namespace: ingress-nginx
+data:
+  5432: default/cluster-example-rw:5432
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: ingress-nginx
+  namespace: ingress-nginx
+  labels:
+    app.kubernetes.io/name: ingress-nginx
+    app.kubernetes.io/part-of: ingress-nginx
+spec:
+  type: LoadBalancer
+  ports:
+    - name: http
+      port: 80
+      targetPort: 80
+      protocol: TCP
+    - name: https
+      port: 443
+      targetPort: 443
+      protocol: TCP
+    - name: postgres
+      port: 5432
+      targetPort: 5432
+      protocol: TCP
+  selector:
+    app.kubernetes.io/name: ingress-nginx
+    app.kubernetes.io/part-of: ingress-nginx
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-import-schema-only-basicauth.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-import-schema-only-basicauth.yaml
new file mode 100644
index 000000000..50e7e1ccc
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-import-schema-only-basicauth.yaml
@@ -0,0 +1,27 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-pgdump
+spec:
+  instances: 3
+
+  bootstrap:
+    initdb:
+      import:
+        type: microservice
+        schemaOnly: true
+        databases:
+          - app
+        source:
+          externalCluster: cluster-example
+  storage:
+    size: 1Gi
+  externalClusters:
+    - name: cluster-example
+      connectionParameters:
+        host: cluster-example-rw.default.svc
+        user: app
+        dbname: app
+      password:
+        name: cluster-example-app
+        key: password
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-import-snapshot-basicauth.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-import-snapshot-basicauth.yaml
new file mode 100644
index 000000000..5f6cf6e76
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-import-snapshot-basicauth.yaml
@@ -0,0 +1,30 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-pgdump
+spec:
+  instances: 3
+
+  bootstrap:
+    initdb:
+      import:
+        type: microservice
+        databases:
+          - app
+        source:
+          externalCluster: cluster-example
+        pgDumpExtraOptions:
+        - '--jobs=2'
+        pgRestoreExtraOptions:
+        - '--jobs=2'
+  storage:
+    size: 1Gi
+  externalClusters:
+    - name: cluster-example
+      connectionParameters:
+        host: cluster-example-rw.default.svc
+        user: app
+        dbname: app
+      password:
+        name: cluster-example-app
+        key: password
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-import-snapshot-tls.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-import-snapshot-tls.yaml
new file mode 100644
index 000000000..9479744a5
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-import-snapshot-tls.yaml
@@ -0,0 +1,44 @@
+# IMPORTANT: this configuration requires an appropriate line
+# in the host-based access rules allowing replication connections
+# to the app user.
+#
+# The following line meet the requisites:
+#
+# pg_hba:
+#  - hostssl all app all cert
+
+# You can generate the required TLS certificate with
+#
+# ./bin/kubectl-cnpg  certificate cluster-example-app-tls --cnpg-cluster cluster-example --cnpg-user app
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-pgdump
+spec:
+  instances: 3
+
+  bootstrap:
+    initdb:
+      import:
+        type: microservice
+        databases:
+          - app
+        source:
+          externalCluster: cluster-example
+  storage:
+    size: 1Gi
+  externalClusters:
+    - name: cluster-example
+      connectionParameters:
+        host: cluster-example-rw.default.svc
+        user: app
+        dbname: app
+      sslKey:
+        name: cluster-example-app-tls
+        key: tls.key
+      sslCert:
+        name: cluster-example-app-tls
+        key: tls.crt
+      sslRootCert:
+        name: cluster-example-ca
+        key: ca.crt
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-pvc-template.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-pvc-template.yaml
new file mode 100644
index 000000000..5e5a7fe4e
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-pvc-template.yaml
@@ -0,0 +1,25 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: postgresql-pvc-template
+spec:
+  instances: 3
+
+  # Example of rolling update strategy:
+  # - unsupervised: automated update of the primary once all
+  #                 replicas have been upgraded (default)
+  # - supervised: requires manual supervision to perform
+  #               the switchover of the primary
+  primaryUpdateStrategy: unsupervised
+
+  # Persistent storage configuration
+  storage:
+    size: 1Gi
+    pvcTemplate:
+      accessModes:
+        - ReadWriteOnce
+      resources:
+        requests:
+          storage: 1Gi
+      storageClassName: standard
+      volumeMode: Filesystem
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-replica-async.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-replica-async.yaml
new file mode 100644
index 000000000..ac004adbe
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-replica-async.yaml
@@ -0,0 +1,30 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-replica-async
+spec:
+  instances: 3
+
+  bootstrap:
+    recovery:
+      source: postgresql-bkp
+
+  replica:
+    enabled: true
+    source: postgresql-bkp
+
+  storage:
+    size: 1Gi
+
+  externalClusters:
+  - name: postgresql-bkp
+    barmanObjectStore:
+      destinationPath: s3://backups/
+      endpointURL: http://minio:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-replica-basicauth.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-replica-basicauth.yaml
new file mode 100644
index 000000000..04480c1ec
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-replica-basicauth.yaml
@@ -0,0 +1,33 @@
+# IMPORTANT: this configuration requires an appropriate line
+# in the host-based access rules allowing replication connections
+# to the postgres user.
+#
+# The following line met the requisites
+# - "host replication postgres all md5"
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-replica-basicauth
+spec:
+  instances: 3
+
+  bootstrap:
+    pg_basebackup:
+      source: cluster-example
+
+  replica:
+    enabled: true
+    source: cluster-example
+
+  storage:
+    size: 1Gi
+
+  externalClusters:
+  - name: cluster-example
+    connectionParameters:
+      host: cluster-example-rw.default.svc
+      user: postgres
+      dbname: postgres
+    password:
+      name: cluster-example-superuser
+      key: password
\ No newline at end of file
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-replica-from-backup-other-namespace.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-replica-from-backup-other-namespace.yaml
new file mode 100644
index 000000000..b57924639
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-replica-from-backup-other-namespace.yaml
@@ -0,0 +1,37 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-replica-example-backup
+spec:
+  instances: 1
+
+  bootstrap:
+    recovery:
+      source: cluster-example-backup
+
+  replica:
+    enabled: true
+    source: cluster-example-backup
+
+  storage:
+    size: 1Gi
+
+  externalClusters:
+  - name: cluster-example-backup
+    barmanObjectStore:
+      destinationPath: s3://backups/
+      endpointURL: http://minio-service.main:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
+    connectionParameters:
+      host: cluster-example-backup-rw.main.svc
+      user: postgres
+      dbname: postgres
+    password:
+      name: cluster-example-backup-superuser
+      key: password
\ No newline at end of file
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-replica-restore.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-replica-restore.yaml
new file mode 100644
index 000000000..db35fcacc
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-replica-restore.yaml
@@ -0,0 +1,44 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-replica-from-restore
+spec:
+  instances: 3
+
+  bootstrap:
+    recovery:
+      source: postgresql-bkp
+
+  replica:
+    enabled: true
+    source: postgresql-bkp
+
+  storage:
+    size: 1Gi
+
+  externalClusters:
+  - name: postgresql-bkp
+    barmanObjectStore:
+      destinationPath: s3://backups/
+      endpointURL: http://minio:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
+    connectionParameters:
+      host: postgresql-bkp-rw.default.svc
+      user: streaming_replica
+      sslmode: verify-full
+      dbname: postgres
+    sslKey:
+      name: postgresql-bkp-replication
+      key: tls.key
+    sslCert:
+      name: postgresql-bkp-replication
+      key: tls.crt
+    sslRootCert:
+      name: postgresql-bkp-ca
+      key: ca.crt
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-replica-tls.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-replica-tls.yaml
new file mode 100644
index 000000000..67954f62f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-replica-tls.yaml
@@ -0,0 +1,34 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-replica-tls
+spec:
+  instances: 3
+
+  bootstrap:
+    pg_basebackup:
+      source: cluster-example
+
+  replica:
+    primary: cluster-example
+    source: cluster-example
+
+  storage:
+    size: 1Gi
+
+  externalClusters:
+  - name: cluster-example
+    connectionParameters:
+      host: cluster-example-rw.default.svc
+      user: streaming_replica
+      sslmode: verify-full
+      dbname: postgres
+    sslKey:
+      name: cluster-example-replication
+      key: tls.key
+    sslCert:
+      name: cluster-example-replication
+      key: tls.crt
+    sslRootCert:
+      name: cluster-example-ca
+      key: ca.crt
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-restore-external-cluster.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-restore-external-cluster.yaml
new file mode 100644
index 000000000..f799fc6ed
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-restore-external-cluster.yaml
@@ -0,0 +1,28 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore
+spec:
+  instances: 3
+
+  storage:
+    size: 5Gi
+
+  bootstrap:
+    recovery:
+      source: postgresql-bkp
+
+  externalClusters:
+    - name: postgresql-bkp
+      barmanObjectStore:
+        destinationPath: s3://backups/
+        endpointURL: http://minio:9000
+        s3Credentials:
+          accessKeyId:
+            name: minio
+            key: ACCESS_KEY_ID
+          secretAccessKey:
+            name: minio
+            key: ACCESS_SECRET_KEY
+        wal:
+          maxParallel: 8
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-restore-pitr.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-restore-pitr.yaml
new file mode 100644
index 000000000..986807f41
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-restore-pitr.yaml
@@ -0,0 +1,17 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore-pitr
+spec:
+  instances: 3
+
+  storage:
+    size: 5Gi
+
+  bootstrap:
+    recovery:
+      backup:
+        name: backup-example
+
+      recoveryTarget:
+        targetTime: "2020-11-26 15:22:00.00000+00"
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-restore-snapshot-full.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-restore-snapshot-full.yaml
new file mode 100644
index 000000000..d0a581d6b
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-restore-snapshot-full.yaml
@@ -0,0 +1,18 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore-full
+spec:
+  instances: 3
+
+  storage:
+    size: 1Gi
+    storageClass: csi-hostpath-sc
+
+  bootstrap:
+    recovery:
+      volumeSnapshots:
+        storage:
+          name: cluster-example-2-1695821489
+          kind: VolumeSnapshot
+          apiGroup: snapshot.storage.k8s.io
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-restore-snapshot-pitr.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-restore-snapshot-pitr.yaml
new file mode 100644
index 000000000..6339a0857
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-restore-snapshot-pitr.yaml
@@ -0,0 +1,40 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore-pitr
+spec:
+  instances: 3
+
+  storage:
+    size: 1Gi
+    storageClass: csi-hostpath-sc
+
+  externalClusters:
+    - name: origin
+
+      barmanObjectStore:
+        serverName: cluster-example-with-backup
+        destinationPath: s3://backups/
+        endpointURL: http://minio:9000
+        s3Credentials:
+          accessKeyId:
+            name: minio
+            key: ACCESS_KEY_ID
+          secretAccessKey:
+            name: minio
+            key: ACCESS_SECRET_KEY
+        wal:
+          maxParallel: 8
+
+  bootstrap:
+    recovery:
+      source: origin
+
+      recoveryTarget:
+        targetTime: "2023-08-21 12:00:00.00000+00"
+
+      volumeSnapshots:
+        storage:
+          name: cluster-example-with-backup-3-1692618163
+          kind: VolumeSnapshot
+          apiGroup: snapshot.storage.k8s.io
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-restore-snapshot.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-restore-snapshot.yaml
new file mode 100644
index 000000000..d1f36c909
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-restore-snapshot.yaml
@@ -0,0 +1,19 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore
+spec:
+  instances: 3
+
+  storage:
+    size: 1Gi
+    storageClass: csi-hostpath-sc
+
+  bootstrap:
+    recovery:
+      volumeSnapshots:
+        storage:
+          name: cluster-example-20230930084154
+          kind: VolumeSnapshot
+          apiGroup: snapshot.storage.k8s.io
+
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-restore-with-tablespaces.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-restore-with-tablespaces.yaml
new file mode 100644
index 000000000..45e1a932d
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-restore-with-tablespaces.yaml
@@ -0,0 +1,28 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore-with-tablespaces
+spec:
+  instances: 3
+
+  storage:
+    size: 1Gi
+
+  bootstrap:
+    recovery:
+      backup:
+        name: cluster-example-with-tablespaces-20231128093940
+
+  tablespaces:
+    atablespace:
+      storage:
+        size: 1Gi
+        storageClass: standard
+    another_tablespace:
+      storage:
+        size: 2Gi
+        storageClass: standard
+    tablespacea1:
+      storage:
+        size: 2Gi
+        storageClass: standard
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-restore.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-restore.yaml
new file mode 100644
index 000000000..42ad0eaf6
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-restore.yaml
@@ -0,0 +1,14 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore
+spec:
+  instances: 3
+
+  storage:
+    size: 5Gi
+
+  bootstrap:
+    recovery:
+      backup:
+        name: backup-example
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-storage-class-with-backup.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-storage-class-with-backup.yaml
new file mode 100644
index 000000000..3aee8d50f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-storage-class-with-backup.yaml
@@ -0,0 +1,32 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: pg-backup
+spec:
+  instances: 3
+
+  # Example of rolling update strategy:
+  # - unsupervised: automated update of the primary once all
+  #                 replicas have been upgraded (default)
+  # - supervised: requires manual supervision to perform
+  #               the switchover of the primary
+  primaryUpdateStrategy: unsupervised
+
+  # Persistent storage configuration
+  storage:
+    storageClass: standard
+    size: 1Gi
+
+  # Backup properties
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://BUCKET_NAME/path/to/folder
+      s3Credentials:
+        accessKeyId:
+          name: aws-creds
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: aws-creds
+          key: ACCESS_SECRET_KEY
+      wal:
+        compression: gzip
diff --git a/assets/documentation/1.27.0-rc1/samples/cluster-storage-class.yaml b/assets/documentation/1.27.0-rc1/samples/cluster-storage-class.yaml
new file mode 100644
index 000000000..2e6431d7e
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/cluster-storage-class.yaml
@@ -0,0 +1,18 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: postgresql-storage-class
+spec:
+  instances: 3
+
+  # Example of rolling update strategy:
+  # - unsupervised: automated update of the primary once all
+  #                 replicas have been upgraded (default)
+  # - supervised: requires manual supervision to perform
+  #               the switchover of the primary
+  primaryUpdateStrategy: unsupervised
+
+  # Persistent storage configuration
+  storage:
+    storageClass: standard
+    size: 1Gi
diff --git a/assets/documentation/1.27.0-rc1/samples/database-example-fail.yaml b/assets/documentation/1.27.0-rc1/samples/database-example-fail.yaml
new file mode 100644
index 000000000..1534a2667
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/database-example-fail.yaml
@@ -0,0 +1,9 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: db-two
+spec:
+  name: two
+  owner: app-two
+  cluster:
+    name: cluster-example
diff --git a/assets/documentation/1.27.0-rc1/samples/database-example-icu.yaml b/assets/documentation/1.27.0-rc1/samples/database-example-icu.yaml
new file mode 100644
index 000000000..fdfd36792
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/database-example-icu.yaml
@@ -0,0 +1,16 @@
+# NOTE: this manifest will only work properly if the Postgres version supports
+# ICU locales and rules (version 16 and newer)
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: db-icu
+spec:
+  name: declarative-icu
+  owner: app
+  encoding: UTF8
+  localeProvider: icu
+  icuLocale: en
+  icuRules: fr
+  template: template0
+  cluster:
+    name: cluster-example
diff --git a/assets/documentation/1.27.0-rc1/samples/database-example.yaml b/assets/documentation/1.27.0-rc1/samples/database-example.yaml
new file mode 100644
index 000000000..d4f62e12e
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/database-example.yaml
@@ -0,0 +1,9 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: db-one
+spec:
+  name: one
+  owner: app
+  cluster:
+    name: cluster-example
diff --git a/assets/documentation/1.27.0-rc1/samples/dc/cluster-dc-a.yaml b/assets/documentation/1.27.0-rc1/samples/dc/cluster-dc-a.yaml
new file mode 100644
index 000000000..0da90de68
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/dc/cluster-dc-a.yaml
@@ -0,0 +1,71 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-dc-a
+spec:
+  instances: 3
+  primaryUpdateStrategy: unsupervised
+
+  storage:
+    storageClass: csi-hostpath-sc
+    size: 1Gi
+
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://backups/
+      endpointURL: http://minio:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
+      wal:
+        compression: gzip
+
+  replica:
+    self: cluster-dc-a
+    primary: cluster-dc-a
+    source: cluster-dc-b
+
+  externalClusters:
+  - name: cluster-dc-a
+    barmanObjectStore: 
+      serverName: cluster-dc-a
+      destinationPath: s3://backups/
+      endpointURL: http://minio:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
+      wal:
+        compression: gzip
+  - name: cluster-dc-b
+    barmanObjectStore: 
+      serverName: cluster-dc-b
+      destinationPath: s3://backups/
+      endpointURL: http://minio:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
+      wal:
+        compression: gzip
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: ScheduledBackup
+metadata:
+  name: cluster-dc-a-backup
+spec:
+  schedule: '0 0 0 * * *'
+  backupOwnerReference: self
+  cluster:
+    name: cluster-dc-a
+  immediate: true
\ No newline at end of file
diff --git a/assets/documentation/1.27.0-rc1/samples/dc/cluster-dc-b.yaml b/assets/documentation/1.27.0-rc1/samples/dc/cluster-dc-b.yaml
new file mode 100644
index 000000000..355560b81
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/dc/cluster-dc-b.yaml
@@ -0,0 +1,75 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-dc-b
+spec:
+  instances: 3
+  primaryUpdateStrategy: unsupervised
+
+  storage:
+    storageClass: csi-hostpath-sc
+    size: 1Gi
+
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://backups/
+      endpointURL: http://minio:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
+      wal:
+        compression: gzip
+
+  bootstrap:
+    recovery:
+      source: cluster-dc-a
+
+  replica:
+    self: cluster-dc-b
+    primary: cluster-dc-a
+    source: cluster-dc-a
+
+  externalClusters:
+  - name: cluster-dc-a
+    barmanObjectStore: 
+      serverName: cluster-dc-a
+      destinationPath: s3://backups/
+      endpointURL: http://minio:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
+      wal:
+        compression: gzip
+  - name: cluster-dc-b
+    barmanObjectStore: 
+      serverName: cluster-dc-b
+      destinationPath: s3://backups/
+      endpointURL: http://minio:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
+      wal:
+        compression: gzip
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: ScheduledBackup
+metadata:
+  name: cluster-dc-b-backup
+spec:
+  schedule: '0 0 0 * * *'
+  backupOwnerReference: self
+  cluster:
+    name: cluster-dc-b
+  immediate: true
\ No newline at end of file
diff --git a/assets/documentation/1.27.0-rc1/samples/dc/cluster-test.yaml b/assets/documentation/1.27.0-rc1/samples/dc/cluster-test.yaml
new file mode 100644
index 000000000..23d57af95
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/dc/cluster-test.yaml
@@ -0,0 +1,25 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-test
+spec:
+  instances: 3
+  primaryUpdateStrategy: unsupervised
+
+  storage:
+    storageClass: csi-hostpath-sc
+    size: 1Gi
+
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://backups/
+      endpointURL: http://minio:9000
+      s3Credentials:
+        accessKeyId:
+          name: minio
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio
+          key: ACCESS_SECRET_KEY
+      wal:
+        compression: gzip
diff --git a/assets/documentation/1.27.0-rc1/samples/index.html b/assets/documentation/1.27.0-rc1/samples/index.html
new file mode 100644
index 000000000..ef2b2a180
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/index.html
@@ -0,0 +1,575 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Examples - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Examples";
+        var mkdocs_page_input_path = "samples.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Examples</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#basics">Basics</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#backups">Backups</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#replica-clusters">Replica clusters</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgis">PostGIS</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#managed-roles">Managed roles</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#managed-services">Managed services</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#declarative-tablespaces">Declarative tablespaces</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#pooler-configuration">Pooler configuration</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#logical-replication-via-declarative-publication-and-subscription-objects">Logical replication via declarative Publication and Subscription objects</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#declarative-management-of-postgres-databases">Declarative management of Postgres databases</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Examples</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="examples">Examples</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>The examples show configuration files for setting up
+your PostgreSQL cluster.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>These examples are for demonstration and experimentation
+purposes. You can execute them on a personal Kubernetes cluster with Minikube
+or Kind, as described in <a href="../quickstart/">Quick start</a>.</p>
+</div>
+<div class="admonition seealso">
+<p class="admonition-title">Reference</p>
+<p>For a list of available options, see <a href="../cloudnative-pg.v1/">API reference</a>.</p>
+</div>
+<h2 id="basics">Basics</h2>
+<dl>
+<dt><strong>Basic cluster</strong></dt>
+<dd><a href="cluster-example.yaml"><code>cluster-example.yaml</code></a>
+   A basic example of a cluster.</dd>
+<dt><strong>Custom cluster</strong></dt>
+<dd><a href="cluster-example-custom.yaml"><code>cluster-example-custom.yaml</code></a>
+   A basic cluster that uses the default storage class and custom parameters for
+   the <code>postgresql.conf</code> and <code>pg_hba.conf</code> files.</dd>
+<dt><strong>Cluster with customized storage class</strong></dt>
+<dd><a href="cluster-storage-class.yaml"><code>cluster-storage-class.yaml</code></a>:
+   A basic cluster that uses a specified storage class of <code>standard</code>.</dd>
+<dt><strong>Cluster with persistent volume claim (PVC) template configured</strong></dt>
+<dd><a href="cluster-pvc-template.yaml"><code>cluster-pvc-template.yaml</code></a>:
+   A basic cluster with an explicit persistent volume claim template.</dd>
+<dt><strong>Extended configuration example</strong></dt>
+<dd><a href="cluster-example-full.yaml"><code>cluster-example-full.yaml</code></a>:
+   A cluster that sets most of the available options.</dd>
+<dt><strong>Bootstrap cluster with SQL files</strong></dt>
+<dd><a href="cluster-example-initdb-sql-refs.yaml"><code>cluster-example-initdb-sql-refs.yaml</code></a>:
+   A cluster example that executes a set of queries defined in a secret and a
+   <code>ConfigMap</code> right after the database is created.</dd>
+<dt><strong>Sample cluster with customized <code>pg_hba</code> configuration</strong></dt>
+<dd><a href="cluster-example-pg-hba.yaml"><code>cluster-example-pg-hba.yaml</code></a>:
+  A basic cluster that enables the user app to authenticate using certificates.</dd>
+<dt><strong>Sample cluster with Secret and ConfigMap mounted using projected volume template</strong></dt>
+<dd><a href="cluster-example-projected-volume.yaml"><code>cluster-example-projected-volume.yaml</code></a>
+  A basic cluster with the existing <code>Secret</code> and <code>ConfigMap</code> mounted into Postgres
+  pod using projected volume mount.</dd>
+</dl>
+<h2 id="backups">Backups</h2>
+<dl>
+<dt><strong>Customized storage class and backups</strong></dt>
+<dd><em>Prerequisites</em>: Bucket storage must be available. The sample config is for AWS.
+Change it to suit your setup.</dd>
+<dd><a href="cluster-storage-class-with-backup.yaml"><code>cluster-storage-class-with-backup.yaml</code></a> 
+   A cluster with backups configured.</dd>
+<dt><strong>Backup</strong></dt>
+<dd><em>Prerequisites</em>: <a href="cluster-storage-class-with-backup.yaml"><code>cluster-storage-class-with-backup.yaml</code></a>
+applied and healthy.</dd>
+<dd><a href="backup-example.yaml"><code>backup-example.yaml</code></a>:
+  An example of a backup that runs against the previous sample.</dd>
+<dt><strong>Simple cluster with backup configured for minio</strong></dt>
+<dd><em>Prerequisites</em>: The configuration assumes minio is running and working.
+Update <code>backup.barmanObjectStore</code> with your minio parameters or your cloud solution.</dd>
+<dd><a href="cluster-example-with-backup.yaml"><code>cluster-example-with-backup.yaml</code></a>
+   A basic cluster with backups configured.</dd>
+<dt><strong>Simple cluster with backup configured for Scaleway Object Storage</strong></dt>
+<dd><em>Prerequisites</em>: The configuration assumes a Scaleway Object Storage bucket exists.
+Update <code>backup.barmanObjectStore</code> with your Scaleway parameters.</dd>
+<dd><a href="cluster-example-with-backup-scaleway.yaml"><code>cluster-example-with-backup-scaleway.yaml</code></a>
+   A basic cluster with backups configured to work with Scaleway Object Storage..</dd>
+</dl>
+<h2 id="replica-clusters">Replica clusters</h2>
+<dl>
+<dt><strong>Replica cluster by way of backup from an object store</strong></dt>
+<dd><em>Prerequisites</em>:
+<a href="cluster-storage-class-with-backup.yaml"><code>cluster-storage-class-with-backup.yaml</code></a>
+applied and healthy, and a backup
+<a href="cluster-example-trigger-backup.yaml"><code>cluster-example-trigger-backup.yaml</code></a>
+applied and completed.</dd>
+<dd><a href="cluster-example-replica-from-backup-simple.yaml"><code>cluster-example-replica-from-backup-simple.yaml</code></a>:
+   A replica cluster following a cluster with backup configured.</dd>
+<dt><strong>Replica cluster by way of volume snapshot</strong></dt>
+<dd><em>Prerequisites</em>:
+<a href="cluster-example-with-volume-snapshot.yaml"><code>cluster-example-with-volume-snapshot.yaml</code></a>
+applied and healthy, and a volume snapshot
+<a href="backup-with-volume-snapshot.yaml"><code>backup-with-volume-snapshot.yaml</code></a>
+applied and completed.</dd>
+<dd><a href="cluster-example-replica-from-volume-snapshot.yaml"><code>cluster-example-replica-from-volume-snapshot.yaml</code></a>:
+   A replica cluster following a cluster with volume snapshot configured.</dd>
+<dt><strong>Replica cluster by way of streaming (pg_basebackup)</strong></dt>
+<dd><em>Prerequisites</em>: <a href="cluster-example.yaml"><code>cluster-example.yaml</code></a>
+applied and healthy.</dd>
+<dd><a href="cluster-example-replica-streaming.yaml"><code>cluster-example-replica-streaming.yaml</code></a>: 
+   A replica cluster following <code>cluster-example</code> with streaming replication.</dd>
+</dl>
+<h2 id="postgis">PostGIS</h2>
+<dl>
+<dt><strong>PostGIS example</strong></dt>
+<dd><a href="postgis-example.yaml"><code>postgis-example.yaml</code></a>:
+   An example of a PostGIS cluster. See <a href="../postgis/">PostGIS</a> for details.</dd>
+</dl>
+<h2 id="managed-roles">Managed roles</h2>
+<dl>
+<dt><strong>Cluster with declarative role management</strong></dt>
+<dd><a href="cluster-example-with-roles.yaml"><code>cluster-example-with-roles.yaml</code></a>:
+  Declares a role with the <code>managed</code> stanza. Includes password management with
+  Kubernetes secrets.</dd>
+</dl>
+<h2 id="managed-services">Managed services</h2>
+<dl>
+<dt><strong>Cluster with managed services</strong></dt>
+<dd><a href="cluster-example-managed-services.yaml"><code>cluster-example-managed-services.yaml</code></a>:
+  Declares a service with the <code>managed</code> stanza. Includes default service disabled and new
+  <code>rw</code> service template of <code>LoadBalancer</code> type defined.</dd>
+</dl>
+<h2 id="declarative-tablespaces">Declarative tablespaces</h2>
+<dl>
+<dt><strong>Cluster with declarative tablespaces</strong></dt>
+<dd><a href="cluster-example-with-tablespaces.yaml"><code>cluster-example-with-tablespaces.yaml</code></a></dd>
+<dt><strong>Cluster with declarative tablespaces and backup</strong></dt>
+<dd><em>Prerequisites</em>: The configuration assumes minio is running and working.
+Update <code>backup.barmanObjectStore</code> with your minio parameters or your cloud solution.</dd>
+<dd><a href="cluster-example-with-tablespaces-backup.yaml"><code>cluster-example-with-tablespaces-backup.yaml</code></a></dd>
+<dt><strong>Restored cluster with tablespaces from object store</strong></dt>
+<dd><em>Prerequisites</em>: The previous cluster applied and a base backup completed.
+Remember to update <code>bootstrap.recovery.backup.name</code> with the backup name.</dd>
+<dd><a href="cluster-restore-with-tablespaces.yaml"><code>cluster-restore-with-tablespaces.yaml</code></a></dd>
+</dl>
+<p>For a list of available options, see <a href="../cloudnative-pg.v1/">API reference</a>.</p>
+<h2 id="pooler-configuration">Pooler configuration</h2>
+<dl>
+<dt><strong>Pooler with custom service config</strong></dt>
+<dd><a href="pooler-external.yaml"><code>pooler-external.yaml</code></a></dd>
+</dl>
+<h2 id="logical-replication-via-declarative-publication-and-subscription-objects">Logical replication via declarative Publication and Subscription objects</h2>
+<p>Two test manifests contain everything needed to set up logical replication:</p>
+<dl>
+<dt><strong>Source cluster with a publication</strong></dt>
+<dd><a href="cluster-example-logical-source.yaml"><code>cluster-example-logical-source.yaml</code></a></dd>
+</dl>
+<p>Sets up a cluster, <code>cluster-example</code> with some tables created in the <code>app</code>
+database, and, importantly, <em>adds replication to the app user</em>.
+A publication is created for the cluster on the <code>app</code> database: note that the
+publication will be reconciled only after the cluster's primary is up and
+running.</p>
+<dl>
+<dt><strong>Destination cluster with a subscription</strong></dt>
+<dd><em>Prerequisites</em>: The source cluster with publication, defined as above.</dd>
+<dd><a href="cluster-example-logical-destination.yaml"><code>cluster-example-logical-destination.yaml</code></a></dd>
+</dl>
+<p>Sets up a cluster <code>cluster-example-dest</code> with:</p>
+<ul>
+<li>the source cluster defined in the <code>externalClusters</code> stanza. Note that it uses
+  the <code>app</code> role to connect, which assumes the source cluster grants it
+  <code>replication</code> privilege.</li>
+<li>a bootstrap import of microservice type, with <code>schemaOnly</code> enabled</li>
+</ul>
+<p>A subscription is created on the destination cluster: note that the subscription
+will be reconciled only after the destination cluster's primary is up and
+running.</p>
+<p>After both clusters have been reconciled, together with the publication and
+subscription objects, you can verify that that tables in the source cluster,
+and the data in them, have been replicated in the destination cluster</p>
+<p>In addition, there are some standalone example manifests:</p>
+<dl>
+<dt><strong>A plain Publication targeting All Tables</strong></dt>
+<dd><em>Prerequisites</em>: an existing cluster <code>cluster-example</code>.</dd>
+<dd><a href="publication-example.yaml"><code>publication-example.yaml</code></a></dd>
+<dt><strong>A Publication with a constrained publication target</strong></dt>
+<dd><em>Prerequisites</em>: an existing cluster <code>cluster-example</code>.</dd>
+<dd><a href="publication-example-objects.yaml"><code>publication-example-objects.yaml</code></a></dd>
+<dt><strong>A plain Subscription</strong></dt>
+<dd>Prerequisites: an existing cluster <code>cluster-example</code> set up as source, with
+a publication <code>pub-all</code>. A cluster <code>cluster-example-dest</code> set up as a
+destination cluster, including the <code>externalClusters</code> stanza with
+connection parameters to the source cluster, including a role with
+replication privilege.</dd>
+<dd><a href="subscription-example.yaml"><code>subscription-example.yaml</code></a></dd>
+</dl>
+<p>All the above manifests create publications or subscriptions on the <code>app</code>
+database. The Database CRD offers a convenient way to create databases
+declaratively. With it, logical replication could be set up for arbitrary
+databases.
+Which brings us to the next section.</p>
+<h2 id="declarative-management-of-postgres-databases">Declarative management of Postgres databases</h2>
+<dl>
+<dt><strong>A plain Database</strong></dt>
+<dd><em>Prerequisites</em>: an existing cluster <code>cluster-example</code>.</dd>
+<dd><a href="database-example.yaml"><code>database-example.yaml</code></a></dd>
+<dt><strong>A Database with ICU local specifications</strong></dt>
+<dd>
+<dl>
+<dt><em>Prerequisites</em>: an existing cluster <code>cluster-example</code> running Postgres 16</dt>
+<dt>or more advanced.</dt>
+<dd><a href="database-example-icu.yaml"><code>database-example-icu.yaml</code></a></dd>
+</dl>
+</dd>
+</dl>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../controller/" class="btn btn-neutral float-left" title="Custom Pod Controller"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../networking/" class="btn btn-neutral float-right" title="Networking">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../controller/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../networking/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/samples/k9s/plugins.yml b/assets/documentation/1.27.0-rc1/samples/k9s/plugins.yml
new file mode 100644
index 000000000..04b6850e0
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/k9s/plugins.yml
@@ -0,0 +1,123 @@
+# Move/add to $XDG_CONFIG_HOME/k9s/plugins.yaml
+# Requires the cnpg kubectl plugin. See https://cloudnative-pg.io/documentation/current/kubectl-plugin/
+#
+# Cluster actions:
+#   b         Request a new physical backup
+#   h         View hibernate status
+#   Shift-H   Hibernate cluster (this retains the data, but deletes everything else - including the cluster)
+#   l         View cluster logs
+#   p         Connect to the cluster via psql
+#   r         Reload the cluster
+#   Shift-R   Restart the cluster
+#   s         View cluster status
+#   Shift-S   View cluster status in verbose mode
+#
+# Namespace actions:
+#   Shift-H   Wake up Hibernated cluster in this namespace (assumes cluster name equals namespace name)
+
+plugins:
+  cnpg-backup:
+    shortCut: b
+    description: Backup
+    scopes:
+      - cluster
+    command: bash
+    confirm: true
+    background: false
+    args:
+      - -c
+      - "kubectl cnpg backup $NAME -n $NAMESPACE --context \"$CONTEXT\" 2>&1 | less -R"
+  cnpg-hibernate-status:
+    shortCut: h
+    description: Hibernate status
+    scopes:
+      - cluster
+    command: bash
+    background: false
+    args:
+      - -c
+      - "kubectl cnpg hibernate status $NAME -n $NAMESPACE --context \"$CONTEXT\" 2>&1 | less -R"
+  cnpg-hibernate:
+    shortCut: Shift-H
+    description: Hibernate
+    confirm: true
+    scopes:
+      - cluster
+    command: bash
+    background: false
+    args:
+      - -c
+      - "kubectl cnpg hibernate on $NAME -n $NAMESPACE --context \"$CONTEXT\" 2>&1 | less -R"
+  cnpg-hibernate-off:
+    shortCut: Shift-H
+    description: Wake up hibernated cluster in this namespace
+    confirm: true
+    scopes:
+      - namespace
+    command: bash
+    background: false
+    args:
+      - -c
+      - "kubectl cnpg hibernate off $NAME -n $NAME --context \"$CONTEXT\" 2>&1 | less -R"
+  cnpg-logs:
+    shortCut: l
+    description: Logs
+    scopes:
+      - cluster
+    command: bash
+    background: false
+    args:
+      - -c
+      - "kubectl cnpg logs cluster $NAME -f -n $NAMESPACE --context $CONTEXT"
+  cnpg-psql:
+    shortCut: p
+    description: PSQL shell
+    scopes:
+      - cluster
+    command: bash
+    background: false
+    args:
+      - -c
+      - "kubectl cnpg psql $NAME -n $NAMESPACE --context $CONTEXT"
+  cnpg-reload:
+    shortCut: r
+    description: Reload
+    confirm: true
+    scopes:
+      - cluster
+    command: bash
+    background: false
+    args:
+      - -c
+      - "kubectl cnpg reload $NAME -n $NAMESPACE --context \"$CONTEXT\" 2>&1 | less -R"
+  cnpg-restart:
+    shortCut: Shift-R
+    description: Restart
+    confirm: true
+    scopes:
+      - cluster
+    command: bash
+    background: false
+    args:
+      - -c
+      - "kubectl cnpg restart $NAME -n $NAMESPACE --context \"$CONTEXT\" 2>&1 | less -R"
+  cnpg-status:
+    shortCut: s
+    description: Status
+    scopes:
+      - cluster
+    command: bash
+    background: false
+    args:
+      - -c
+      - "kubectl cnpg status $NAME -n $NAMESPACE --context \"$CONTEXT\" 2>&1 | less -R"
+  cnpg-status-verbose:
+    shortCut: Shift-S
+    description: Status (verbose)
+    scopes:
+      - cluster
+    command: bash
+    background: false
+    args:
+      - -c
+      - "kubectl cnpg status $NAME -n $NAMESPACE --context \"$CONTEXT\" --verbose 2>&1 | less -R"
diff --git a/assets/documentation/1.27.0-rc1/samples/monitoring/alerts.yaml b/assets/documentation/1.27.0-rc1/samples/monitoring/alerts.yaml
new file mode 100644
index 000000000..1fe405170
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/monitoring/alerts.yaml
@@ -0,0 +1,66 @@
+groups:
+- name: cnp-default.rules
+  rules:
+  - alert: LongRunningTransaction
+    annotations:
+      description: Pod {{ $labels.pod }} is taking more than 5 minutes (300 seconds) for a query.
+      summary: A query is taking longer than 5 minutes.
+    expr: |-
+      cnpg_backends_max_tx_duration_seconds > 300
+    for: 1m
+    labels:
+      severity: warning
+  - alert: BackendsWaiting
+    annotations:
+      description: Pod {{ $labels.pod  }} has been waiting for longer than 5 minutes
+      summary: If a backend is waiting for longer than 5 minutes
+    expr: |-
+      cnpg_backends_waiting_total > 300
+    for: 1m
+    labels:
+      severity: warning
+  - alert: PGDatabase
+    annotations:
+      description: Over 300,000,000 transactions from frozen xid on pod {{ $labels.pod  }}
+      summary: Number of transactions from the frozen XID to the current one
+    expr: |-
+      cnpg_pg_database_xid_age > 300000000
+    for: 1m
+    labels:
+      severity: warning
+  - alert: PGReplication
+    annotations:
+      description: Standby is lagging behind by over 300 seconds (5 minutes)
+      summary: The standby is lagging behind the primary
+    expr: |-
+      cnpg_pg_replication_lag > 300
+    for: 1m
+    labels:
+      severity: warning
+  - alert: LastFailedArchiveTime 
+    annotations:
+      description: Archiving failed for {{ $labels.pod }}
+      summary: Checks the last time archiving failed. Will be < 0 when it has not failed.
+    expr: |-
+      (cnpg_pg_stat_archiver_last_failed_time - cnpg_pg_stat_archiver_last_archived_time) > 1
+    for: 1m
+    labels:
+      severity: warning
+  - alert: DatabaseDeadlockConflicts 
+    annotations:
+      description: There are over 10 deadlock conflicts in {{ $labels.pod }}
+      summary: Checks the number of database conflicts
+    expr: |-
+      cnpg_pg_stat_database_deadlocks > 10
+    for: 1m
+    labels:
+      severity: warning
+  - alert: ReplicaFailingReplication
+    annotations:
+      description: Replica {{ $labels.pod }} is failing to replicate
+      summary: Checks if the replica is failing to replicate
+    expr: |-
+      cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
+    for: 1m
+    labels:
+      severity: warning
diff --git a/assets/documentation/1.27.0-rc1/samples/monitoring/kube-stack-config.yaml b/assets/documentation/1.27.0-rc1/samples/monitoring/kube-stack-config.yaml
new file mode 100644
index 000000000..af9120266
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/monitoring/kube-stack-config.yaml
@@ -0,0 +1,78 @@
+#
+# Copyright © contributors to CloudNativePG, established as
+# CloudNativePG a Series of LF Projects, LLC.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# SPDX-License-Identifier: Apache-2.0
+#
+
+# -- here you can pass the whole values directly to the kube-prometheus-stack chart
+enabled: true
+kubeControllerManager:
+  enabled: false
+nodeExporter:
+  enabled: false
+defaultRules:
+  create: true
+  rules:
+    alertmanager: false
+    etcd: false
+    configReloaders: false
+    general: false
+    k8s: true
+    kubeApiserver: false
+    kubeApiserverAvailability: false
+    kubeApiserverSlos: false
+    kubelet: true
+    kubeProxy: false
+    kubePrometheusGeneral: false
+    kubePrometheusNodeRecording: false
+    kubernetesApps: false
+    kubernetesResources: false
+    kubernetesStorage: false
+    kubernetesSystem: false
+    kubeScheduler: false
+    kubeStateMetrics: false
+    network: false
+    node: true
+    nodeExporterAlerting: false
+    nodeExporterRecording: true
+    prometheus: false
+    prometheusOperator: false
+
+#nodeSelector:
+  #workload: monitor
+prometheus:
+  prometheusSpec:
+    podMonitorSelectorNilUsesHelmValues: false
+    ruleSelectorNilUsesHelmValues: false
+    serviceMonitorSelectorNilUsesHelmValues: false
+    probeSelectorNilUsesHelmValues: false
+  #nodeSelector:
+    #workload: monitor
+grafana:
+  enabled: true
+  # -- the grafana admin password
+  adminPassword: prom-operator
+  defaultDashboardsEnabled: false
+  sidecar:
+      dashboards:
+        enabled: true
+  #nodeSelector:
+    #workload: monitor
+alertmanager:
+  enabled: true
+  #alertManagerSpec:
+    #nodeSelector:
+      #workload: monitor
diff --git a/assets/documentation/1.27.0-rc1/samples/monitoring/podmonitor.yaml b/assets/documentation/1.27.0-rc1/samples/monitoring/podmonitor.yaml
new file mode 100644
index 000000000..65ac3bd21
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/monitoring/podmonitor.yaml
@@ -0,0 +1,10 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: cnpg-controller-manager
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: cloudnative-pg
+  podMetricsEndpoints:
+    - port: metrics
diff --git a/assets/documentation/1.27.0-rc1/samples/monitoring/prometheusrule.yaml b/assets/documentation/1.27.0-rc1/samples/monitoring/prometheusrule.yaml
new file mode 100644
index 000000000..eb344769a
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/monitoring/prometheusrule.yaml
@@ -0,0 +1,71 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  name: cnpg-default-alerts
+spec:
+  groups:
+  - name: cnp-default.rules
+    rules:
+    - alert: LongRunningTransaction
+      annotations:
+        description: Pod {{ $labels.pod }} is taking more than 5 minutes (300 seconds) for a query.
+        summary: A query is taking longer than 5 minutes.
+      expr: |-
+        cnpg_backends_max_tx_duration_seconds > 300
+      for: 1m
+      labels:
+        severity: warning
+    - alert: BackendsWaiting
+      annotations:
+        description: Pod {{ $labels.pod  }} has been waiting for longer than 5 minutes
+        summary: If a backend is waiting for longer than 5 minutes
+      expr: |-
+        cnpg_backends_waiting_total > 300
+      for: 1m
+      labels:
+        severity: warning
+    - alert: PGDatabaseXidAge
+      annotations:
+        description: Over 300,000,000 transactions from frozen xid on pod {{ $labels.pod  }}
+        summary: Number of transactions from the frozen XID to the current one
+      expr: |-
+        cnpg_pg_database_xid_age > 300000000
+      for: 1m
+      labels:
+        severity: warning
+    - alert: PGReplication
+      annotations:
+        description: Standby is lagging behind by over 300 seconds (5 minutes)
+        summary: The standby is lagging behind the primary
+      expr: |-
+        cnpg_pg_replication_lag > 300
+      for: 1m
+      labels:
+        severity: warning
+    - alert: LastFailedArchiveTime
+      annotations:
+        description: Archiving failed for {{ $labels.pod }}
+        summary: Checks the last time archiving failed. Will be < 0 when it has not failed.
+      expr: |-
+        (cnpg_pg_stat_archiver_last_failed_time - cnpg_pg_stat_archiver_last_archived_time) > 1
+      for: 1m
+      labels:
+        severity: warning
+    - alert: DatabaseDeadlockConflicts
+      annotations:
+        description: There are over 10 deadlock conflicts in {{ $labels.pod }}
+        summary: Checks the number of database conflicts
+      expr: |-
+        cnpg_pg_stat_database_deadlocks > 10
+      for: 1m
+      labels:
+        severity: warning
+    - alert: ReplicaFailingReplication
+      annotations:
+        description: Replica {{ $labels.pod }} is failing to replicate
+        summary: Checks if the replica is failing to replicate
+      expr: |-
+        cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
+      for: 1m
+      labels:
+        severity: warning
diff --git a/assets/documentation/1.27.0-rc1/samples/networkpolicy-example.yaml b/assets/documentation/1.27.0-rc1/samples/networkpolicy-example.yaml
new file mode 100644
index 000000000..b8ed4135e
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/networkpolicy-example.yaml
@@ -0,0 +1,22 @@
+# This network policy allows ingress from the CNPG operator
+# installed in namespace cnpg-system into the pods corresponding
+# to a cluster named cluster-example
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-operator
+spec:
+  podSelector:
+    matchLabels:
+      cnpg.io/cluster: cluster-example # The label value must be the cluster name
+  ingress:
+    - from:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: cnpg-system # Namespace where the operator is deployed
+          podSelector:
+            matchLabels:
+              app.kubernetes.io/name: cloudnative-pg # Matches the Operator pod
+      ports:
+        - port: 8000
+        - port: 5432
diff --git a/assets/documentation/1.27.0-rc1/samples/pooler-basic-auth.yaml b/assets/documentation/1.27.0-rc1/samples/pooler-basic-auth.yaml
new file mode 100644
index 000000000..a28ae3344
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/pooler-basic-auth.yaml
@@ -0,0 +1,15 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Pooler
+metadata:
+  name: pooler-example-rw
+spec:
+  cluster:
+    name: cluster-example
+
+  instances: 1
+  type: rw
+  pgbouncer:
+    poolMode: session
+    authQuerySecret:
+      name: cluster-example-superuser
+    authQuery: SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1
diff --git a/assets/documentation/1.27.0-rc1/samples/pooler-deployment-strategy.yaml b/assets/documentation/1.27.0-rc1/samples/pooler-deployment-strategy.yaml
new file mode 100644
index 000000000..212fcca33
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/pooler-deployment-strategy.yaml
@@ -0,0 +1,19 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Pooler
+metadata:
+  name: pooler-deployment-strategy
+spec:
+  cluster:
+    name: cluster-example
+
+  instances: 1
+  type: rw
+
+  deploymentStrategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxSurge: 0
+      maxUnavailable: 10%
+
+  pgbouncer:
+    poolMode: session
diff --git a/assets/documentation/1.27.0-rc1/samples/pooler-external.yaml b/assets/documentation/1.27.0-rc1/samples/pooler-external.yaml
new file mode 100644
index 000000000..5a3171585
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/pooler-external.yaml
@@ -0,0 +1,21 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Pooler
+metadata:
+  name: pooler-example-rw
+spec:
+  cluster:
+    name: cluster-example
+  instances: 3
+  type: rw
+  serviceTemplate:
+    metadata:
+      labels:
+        app: pooler
+    spec:
+      type: LoadBalancer
+  pgbouncer:
+    poolMode: session
+    parameters:
+      max_client_conn: "1000"
+      default_pool_size: "10"
+  
\ No newline at end of file
diff --git a/assets/documentation/1.27.0-rc1/samples/pooler-tls.yaml b/assets/documentation/1.27.0-rc1/samples/pooler-tls.yaml
new file mode 100644
index 000000000..20bffa111
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/pooler-tls.yaml
@@ -0,0 +1,14 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Pooler
+metadata:
+  name: pooler-example-rw
+spec:
+  cluster:
+    name: cluster-example
+
+  instances: 1
+  type: rw
+  pgbouncer:
+    poolMode: session
+    parameters:
+      server_tls_protocols: tlsv1.3
diff --git a/assets/documentation/1.27.0-rc1/samples/postgis-example.yaml b/assets/documentation/1.27.0-rc1/samples/postgis-example.yaml
new file mode 100644
index 000000000..34a3ff44b
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/postgis-example.yaml
@@ -0,0 +1,27 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: postgis-example
+spec:
+  instances: 1
+  imageName: ghcr.io/cloudnative-pg/postgis:17
+  storage:
+    size: 1Gi
+  postgresql:
+    parameters:
+      log_statement: ddl
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: postgis-example-app
+spec:
+  name: app
+  owner: app
+  cluster:
+    name: postgis-example
+  extensions:
+  - name: postgis
+  - name: postgis_topology
+  - name: fuzzystrmatch
+  - name: postgis_tiger_geocoder
diff --git a/assets/documentation/1.27.0-rc1/samples/publication-example-objects.yaml b/assets/documentation/1.27.0-rc1/samples/publication-example-objects.yaml
new file mode 100644
index 000000000..2cc68a529
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/publication-example-objects.yaml
@@ -0,0 +1,16 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Publication
+metadata:
+  name: publication-example-objects
+spec:
+  cluster:
+    name: cluster-example
+  name: pub-objects
+  dbname: app
+  target:
+    objects:
+      - tablesInSchema: public
+      - table:
+          schema: another_schema
+          name: numbers_three
+          only: true
diff --git a/assets/documentation/1.27.0-rc1/samples/publication-example.yaml b/assets/documentation/1.27.0-rc1/samples/publication-example.yaml
new file mode 100644
index 000000000..d2df4bc3f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/publication-example.yaml
@@ -0,0 +1,11 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Publication
+metadata:
+  name: publication-example
+spec:
+  cluster:
+    name: cluster-example
+  name: pub-all
+  dbname: app
+  target:
+    allTables: true
diff --git a/assets/documentation/1.27.0-rc1/samples/scheduled-backup-example.yaml b/assets/documentation/1.27.0-rc1/samples/scheduled-backup-example.yaml
new file mode 100644
index 000000000..da7b61af5
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/scheduled-backup-example.yaml
@@ -0,0 +1,9 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: ScheduledBackup
+metadata:
+  name: backup-example
+spec:
+  schedule: "0 0 0 * * *"
+  backupOwnerReference: self
+  cluster:
+    name: pg-backup
diff --git a/assets/documentation/1.27.0-rc1/samples/subscription-example.yaml b/assets/documentation/1.27.0-rc1/samples/subscription-example.yaml
new file mode 100644
index 000000000..6392d7183
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/samples/subscription-example.yaml
@@ -0,0 +1,11 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Subscription
+metadata:
+  name: subscription-sample
+spec:
+  name: sub
+  dbname: app
+  publicationName: pub-all
+  cluster:
+    name: cluster-example-dest
+  externalClusterName: cluster-example
diff --git a/assets/documentation/1.27.0-rc1/scheduling/index.html b/assets/documentation/1.27.0-rc1/scheduling/index.html
new file mode 100644
index 000000000..5d0818ccf
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/scheduling/index.html
@@ -0,0 +1,553 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Scheduling - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Scheduling";
+        var mkdocs_page_input_path = "scheduling.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Scheduling</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#pod-affinity-and-anti-affinity">Pod Affinity and Anti-Affinity</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#requiring-pod-anti-affinity">Requiring Pod Anti-Affinity</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#topology-considerations">Topology Considerations</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#disabling-anti-affinity-policies">Disabling Anti-Affinity Policies</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#fine-grained-control-with-custom-rules">Fine-Grained Control with Custom Rules</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#node-selection-through-nodeselector">Node selection through nodeSelector</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#tolerations">Tolerations</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#isolating-postgresql-workloads">Isolating PostgreSQL workloads</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Scheduling</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="scheduling">Scheduling</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>Scheduling, in Kubernetes, is the process responsible for placing a new pod on
+the best node possible, based on several criteria.</p>
+<div class="admonition seealso">
+<p class="admonition-title">Kubernetes documentation</p>
+<p>Please refer to the
+<a href="https://kubernetes.io/docs/concepts/scheduling-eviction/">Kubernetes documentation</a>
+for more information on scheduling, including all the available policies. On
+this page we assume you are familiar with concepts like affinity,
+anti-affinity, node selectors, and so on.</p>
+</div>
+<p>You can control how the CloudNativePG cluster's instances should be
+scheduled through the <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-AffinityConfiguration"><code>affinity</code></a>
+section in the definition of the cluster, which supports:</p>
+<ul>
+<li>pod affinity/anti-affinity</li>
+<li>node selectors</li>
+<li>tolerations</li>
+</ul>
+<h2 id="pod-affinity-and-anti-affinity">Pod Affinity and Anti-Affinity</h2>
+<p>Kubernetes provides mechanisms to control where pods are scheduled using
+<em>affinity</em> and <em>anti-affinity</em> rules. These rules allow you to specify whether
+a pod should be scheduled on particular nodes (<em>affinity</em>) or avoided on
+specific nodes (<em>anti-affinity</em>) based on the workloads already running there.
+This capability is technically referred to as <strong>inter-pod
+affinity/anti-affinity</strong>.</p>
+<p>By default, CloudNativePG configures cluster instances to preferably be
+scheduled on different nodes, while <code>pgBouncer</code> instances might still run on
+the same nodes.</p>
+<p>For example, given the following <code>Cluster</code> specification:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 3
+  imageName: ghcr.io/cloudnative-pg/postgresql:17.5
+
+  affinity:
+    enablePodAntiAffinity: true # Default value
+    topologyKey: kubernetes.io/hostname # Default value
+    podAntiAffinityType: preferred # Default value
+
+  storage:
+    size: 1Gi
+</code></pre>
+<p>The <code>affinity</code> configuration applied in the instance pods will be:</p>
+<pre><code class="language-yaml">affinity:
+  podAntiAffinity:
+    preferredDuringSchedulingIgnoredDuringExecution:
+      - podAffinityTerm:
+          labelSelector:
+            matchExpressions:
+              - key: cnpg.io/cluster
+                operator: In
+                values:
+                  - cluster-example
+              - key: cnpg.io/podRole
+                operator: In
+                values:
+                  - instance
+          topologyKey: kubernetes.io/hostname
+        weight: 100
+</code></pre>
+<p>With this setup, Kubernetes will <em>prefer</em> to schedule a 3-node PostgreSQL
+cluster across three different nodes, assuming sufficient resources are
+available.</p>
+<h3 id="requiring-pod-anti-affinity">Requiring Pod Anti-Affinity</h3>
+<p>You can modify the default behavior by adjusting the settings mentioned above.</p>
+<p>For example, setting <code>podAntiAffinityType</code> to <code>required</code> will enforce
+<code>requiredDuringSchedulingIgnoredDuringExecution</code> instead of
+<code>preferredDuringSchedulingIgnoredDuringExecution</code>.</p>
+<p>However, be aware that this strict requirement may cause pods to remain pending
+if resources are insufficient—this is particularly relevant when using <a href="https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler">Cluster Autoscaler</a> <!-- wokeignore:rule=master -->
+for automated horizontal scaling in a Kubernetes cluster.</p>
+<div class="admonition seealso">
+<p class="admonition-title">Inter-pod Affinity and Anti-Affinity</p>
+<p>For more details, refer to the <a href="https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity">Kubernetes documentation</a>.</p>
+</div>
+<h3 id="topology-considerations">Topology Considerations</h3>
+<p>In cloud environments, you might consider using <code>topology.kubernetes.io/zone</code>
+as the <code>topologyKey</code> to ensure pods are distributed across different
+availability zones rather than just nodes. For more options, see
+<a href="https://kubernetes.io/docs/reference/labels-annotations-taints/">Well-Known Labels, Annotations, and Taints</a>.</p>
+<h3 id="disabling-anti-affinity-policies">Disabling Anti-Affinity Policies</h3>
+<p>If needed, you can disable the operator-generated anti-affinity policies by
+setting <code>enablePodAntiAffinity</code> to <code>false</code>.</p>
+<h3 id="fine-grained-control-with-custom-rules">Fine-Grained Control with Custom Rules</h3>
+<p>For scenarios requiring more precise control, you can specify custom pod
+affinity or anti-affinity rules using the <code>additionalPodAffinity</code> and
+<code>additionalPodAntiAffinity</code> configuration attributes. These custom rules will
+be added to those generated by the operator, if enabled, or used directly if
+the operator-generated rules are disabled.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>When using <code>additionalPodAntiAffinity</code> or <code>additionalPodAffinity</code>, you must
+provide the full <code>podAntiAffinity</code> or <code>podAffinity</code> structure expected by the
+Pod specification. The following YAML example demonstrates how to configure
+only one instance of PostgreSQL per worker node, regardless of which PostgreSQL
+cluster it belongs to:</p>
+</div>
+<pre><code class="language-yaml">    additionalPodAntiAffinity:
+      requiredDuringSchedulingIgnoredDuringExecution:
+      - labelSelector:
+          matchExpressions:
+          - key: postgresql
+            operator: Exists
+            values: []
+        topologyKey: &quot;kubernetes.io/hostname&quot;
+</code></pre>
+<h2 id="node-selection-through-nodeselector">Node selection through <code>nodeSelector</code></h2>
+<p>Kubernetes allows <code>nodeSelector</code> to provide a list of labels (defined as
+key-value pairs) to select the nodes on which a pod can run. Specifically,
+the node must have each indicated key-value pair as labels for the
+pod to be scheduled and run.</p>
+<p>Similarly, CloudNativePG consents you to define a <code>nodeSelector</code> in the
+<code>affinity</code> section, so that you can request a PostgreSQL cluster to run only
+on nodes that have those labels.</p>
+<h2 id="tolerations">Tolerations</h2>
+<p>Kubernetes allows you to specify (through <code>taints</code>) whether a node should repel
+all pods not explicitly tolerating (through <code>tolerations</code>) their <code>taints</code>.</p>
+<p>So, by setting a proper set of <code>tolerations</code> for a workload matching a specific
+node's <code>taints</code>, Kubernetes scheduler will now take into consideration the
+tainted node, while deciding on which node to schedule the workload.
+Tolerations can be configured for all the pods of a Cluster through the
+<code>.spec.affinity.tolerations</code> section, which accepts the usual Kubernetes syntax
+for tolerations.</p>
+<div class="admonition seealso">
+<p class="admonition-title">Taints and Tolerations</p>
+<p>More information on taints and tolerations can be found in the
+<a href="https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/">Kubernetes documentation</a>.</p>
+</div>
+<h2 id="isolating-postgresql-workloads">Isolating PostgreSQL workloads</h2>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Before proceeding, please ensure you have read the
+<a href="../architecture/">"Architecture"</a> section of the documentation.</p>
+</div>
+<p>While you can deploy PostgreSQL on Kubernetes in various ways, we recommend
+following these essential principles for production environments:</p>
+<ul>
+<li><strong>Exploit Availability Zones:</strong> If possible, take advantage of availability
+  zones (AZs) within the same Kubernetes cluster by distributing PostgreSQL
+  instances across different AZs.</li>
+<li><strong>Dedicate Worker Nodes:</strong> Allocate specific worker nodes for PostgreSQL
+  workloads through the <code>node-role.kubernetes.io/postgres</code> label and taint,
+  as detailed in the <a href="../architecture/#reserving-nodes-for-postgresql-workloads">Reserving Nodes for PostgreSQL Workloads</a>
+  section.</li>
+<li><strong>Avoid Node Overlap:</strong> Ensure that no instances from the same PostgreSQL
+  cluster are running on the same node.</li>
+</ul>
+<p>As explained in greater detail in the previous sections, CloudNativePG
+provides the flexibility to configure pod anti-affinity, node selectors, and
+tolerations.</p>
+<p>Below is a sample configuration to ensure that a PostgreSQL <code>Cluster</code> is
+deployed on <code>postgres</code> nodes, with its instances distributed across different
+nodes:</p>
+<pre><code class="language-yaml">  # &lt;snip&gt;
+  affinity:
+    enablePodAntiAffinity: true
+    topologyKey: kubernetes.io/hostname
+    podAntiAffinityType: required
+    nodeSelector:
+      node-role.kubernetes.io/postgres: &quot;&quot;
+    tolerations:
+    - key: node-role.kubernetes.io/postgres
+      operator: Exists
+      effect: NoSchedule
+  # &lt;snip&gt;
+</code></pre>
+<p>Despite its simplicity, this setup ensures optimal distribution and isolation
+of PostgreSQL workloads, leading to enhanced performance and reliability in
+your production environment.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../instance_manager/" class="btn btn-neutral float-left" title="Postgres instance manager"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../resource_management/" class="btn btn-neutral float-right" title="Resource management">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../instance_manager/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../resource_management/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/search.html b/assets/documentation/1.27.0-rc1/search.html
new file mode 100644
index 000000000..8c45ccd9e
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/search.html
@@ -0,0 +1,354 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="./img/favicon.ico" />
+    <title>CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="./css/theme.css" />
+    <link rel="stylesheet" href="./css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="./css/override.css" rel="stylesheet" />
+    
+    <!--[if lt IE 9]>
+      <script src="./js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="./." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="./search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./.">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="./cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="./cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="./appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="./appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="./appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="./.">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="./." class="icon icon-home" aria-label="Docs"></a></li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+
+  <h1 id="search">Search Results</h1>
+
+  <form id="content_search" action="search.html">
+    <span role="status" aria-live="polite" class="ui-helper-hidden-accessible"></span>
+    <input name="q" id="mkdocs-search-query" type="text" class="search_input search-query ui-autocomplete-input" placeholder="Search the Docs" aria-label="Search the Docs" autocomplete="off" autofocus title="Type search term here">
+  </form>
+
+  <div id="mkdocs-search-results" class="search-results" data-no-results-text="No results found">
+    Searching...
+  </div>
+
+
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="./js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = ".";</script>
+    <script src="./js/theme_extra.js"></script>
+    <script src="./js/theme.js"></script>
+      <script src="./search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/search/lunr.js b/assets/documentation/1.27.0-rc1/search/lunr.js
new file mode 100644
index 000000000..aca0a167f
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/search/lunr.js
@@ -0,0 +1,3475 @@
+/**
+ * lunr - http://lunrjs.com - A bit like Solr, but much smaller and not as bright - 2.3.9
+ * Copyright (C) 2020 Oliver Nightingale
+ * @license MIT
+ */
+
+;(function(){
+
+/**
+ * A convenience function for configuring and constructing
+ * a new lunr Index.
+ *
+ * A lunr.Builder instance is created and the pipeline setup
+ * with a trimmer, stop word filter and stemmer.
+ *
+ * This builder object is yielded to the configuration function
+ * that is passed as a parameter, allowing the list of fields
+ * and other builder parameters to be customised.
+ *
+ * All documents _must_ be added within the passed config function.
+ *
+ * @example
+ * var idx = lunr(function () {
+ *   this.field('title')
+ *   this.field('body')
+ *   this.ref('id')
+ *
+ *   documents.forEach(function (doc) {
+ *     this.add(doc)
+ *   }, this)
+ * })
+ *
+ * @see {@link lunr.Builder}
+ * @see {@link lunr.Pipeline}
+ * @see {@link lunr.trimmer}
+ * @see {@link lunr.stopWordFilter}
+ * @see {@link lunr.stemmer}
+ * @namespace {function} lunr
+ */
+var lunr = function (config) {
+  var builder = new lunr.Builder
+
+  builder.pipeline.add(
+    lunr.trimmer,
+    lunr.stopWordFilter,
+    lunr.stemmer
+  )
+
+  builder.searchPipeline.add(
+    lunr.stemmer
+  )
+
+  config.call(builder, builder)
+  return builder.build()
+}
+
+lunr.version = "2.3.9"
+/*!
+ * lunr.utils
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/**
+ * A namespace containing utils for the rest of the lunr library
+ * @namespace lunr.utils
+ */
+lunr.utils = {}
+
+/**
+ * Print a warning message to the console.
+ *
+ * @param {String} message The message to be printed.
+ * @memberOf lunr.utils
+ * @function
+ */
+lunr.utils.warn = (function (global) {
+  /* eslint-disable no-console */
+  return function (message) {
+    if (global.console && console.warn) {
+      console.warn(message)
+    }
+  }
+  /* eslint-enable no-console */
+})(this)
+
+/**
+ * Convert an object to a string.
+ *
+ * In the case of `null` and `undefined` the function returns
+ * the empty string, in all other cases the result of calling
+ * `toString` on the passed object is returned.
+ *
+ * @param {Any} obj The object to convert to a string.
+ * @return {String} string representation of the passed object.
+ * @memberOf lunr.utils
+ */
+lunr.utils.asString = function (obj) {
+  if (obj === void 0 || obj === null) {
+    return ""
+  } else {
+    return obj.toString()
+  }
+}
+
+/**
+ * Clones an object.
+ *
+ * Will create a copy of an existing object such that any mutations
+ * on the copy cannot affect the original.
+ *
+ * Only shallow objects are supported, passing a nested object to this
+ * function will cause a TypeError.
+ *
+ * Objects with primitives, and arrays of primitives are supported.
+ *
+ * @param {Object} obj The object to clone.
+ * @return {Object} a clone of the passed object.
+ * @throws {TypeError} when a nested object is passed.
+ * @memberOf Utils
+ */
+lunr.utils.clone = function (obj) {
+  if (obj === null || obj === undefined) {
+    return obj
+  }
+
+  var clone = Object.create(null),
+      keys = Object.keys(obj)
+
+  for (var i = 0; i < keys.length; i++) {
+    var key = keys[i],
+        val = obj[key]
+
+    if (Array.isArray(val)) {
+      clone[key] = val.slice()
+      continue
+    }
+
+    if (typeof val === 'string' ||
+        typeof val === 'number' ||
+        typeof val === 'boolean') {
+      clone[key] = val
+      continue
+    }
+
+    throw new TypeError("clone is not deep and does not support nested objects")
+  }
+
+  return clone
+}
+lunr.FieldRef = function (docRef, fieldName, stringValue) {
+  this.docRef = docRef
+  this.fieldName = fieldName
+  this._stringValue = stringValue
+}
+
+lunr.FieldRef.joiner = "/"
+
+lunr.FieldRef.fromString = function (s) {
+  var n = s.indexOf(lunr.FieldRef.joiner)
+
+  if (n === -1) {
+    throw "malformed field ref string"
+  }
+
+  var fieldRef = s.slice(0, n),
+      docRef = s.slice(n + 1)
+
+  return new lunr.FieldRef (docRef, fieldRef, s)
+}
+
+lunr.FieldRef.prototype.toString = function () {
+  if (this._stringValue == undefined) {
+    this._stringValue = this.fieldName + lunr.FieldRef.joiner + this.docRef
+  }
+
+  return this._stringValue
+}
+/*!
+ * lunr.Set
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/**
+ * A lunr set.
+ *
+ * @constructor
+ */
+lunr.Set = function (elements) {
+  this.elements = Object.create(null)
+
+  if (elements) {
+    this.length = elements.length
+
+    for (var i = 0; i < this.length; i++) {
+      this.elements[elements[i]] = true
+    }
+  } else {
+    this.length = 0
+  }
+}
+
+/**
+ * A complete set that contains all elements.
+ *
+ * @static
+ * @readonly
+ * @type {lunr.Set}
+ */
+lunr.Set.complete = {
+  intersect: function (other) {
+    return other
+  },
+
+  union: function () {
+    return this
+  },
+
+  contains: function () {
+    return true
+  }
+}
+
+/**
+ * An empty set that contains no elements.
+ *
+ * @static
+ * @readonly
+ * @type {lunr.Set}
+ */
+lunr.Set.empty = {
+  intersect: function () {
+    return this
+  },
+
+  union: function (other) {
+    return other
+  },
+
+  contains: function () {
+    return false
+  }
+}
+
+/**
+ * Returns true if this set contains the specified object.
+ *
+ * @param {object} object - Object whose presence in this set is to be tested.
+ * @returns {boolean} - True if this set contains the specified object.
+ */
+lunr.Set.prototype.contains = function (object) {
+  return !!this.elements[object]
+}
+
+/**
+ * Returns a new set containing only the elements that are present in both
+ * this set and the specified set.
+ *
+ * @param {lunr.Set} other - set to intersect with this set.
+ * @returns {lunr.Set} a new set that is the intersection of this and the specified set.
+ */
+
+lunr.Set.prototype.intersect = function (other) {
+  var a, b, elements, intersection = []
+
+  if (other === lunr.Set.complete) {
+    return this
+  }
+
+  if (other === lunr.Set.empty) {
+    return other
+  }
+
+  if (this.length < other.length) {
+    a = this
+    b = other
+  } else {
+    a = other
+    b = this
+  }
+
+  elements = Object.keys(a.elements)
+
+  for (var i = 0; i < elements.length; i++) {
+    var element = elements[i]
+    if (element in b.elements) {
+      intersection.push(element)
+    }
+  }
+
+  return new lunr.Set (intersection)
+}
+
+/**
+ * Returns a new set combining the elements of this and the specified set.
+ *
+ * @param {lunr.Set} other - set to union with this set.
+ * @return {lunr.Set} a new set that is the union of this and the specified set.
+ */
+
+lunr.Set.prototype.union = function (other) {
+  if (other === lunr.Set.complete) {
+    return lunr.Set.complete
+  }
+
+  if (other === lunr.Set.empty) {
+    return this
+  }
+
+  return new lunr.Set(Object.keys(this.elements).concat(Object.keys(other.elements)))
+}
+/**
+ * A function to calculate the inverse document frequency for
+ * a posting. This is shared between the builder and the index
+ *
+ * @private
+ * @param {object} posting - The posting for a given term
+ * @param {number} documentCount - The total number of documents.
+ */
+lunr.idf = function (posting, documentCount) {
+  var documentsWithTerm = 0
+
+  for (var fieldName in posting) {
+    if (fieldName == '_index') continue // Ignore the term index, its not a field
+    documentsWithTerm += Object.keys(posting[fieldName]).length
+  }
+
+  var x = (documentCount - documentsWithTerm + 0.5) / (documentsWithTerm + 0.5)
+
+  return Math.log(1 + Math.abs(x))
+}
+
+/**
+ * A token wraps a string representation of a token
+ * as it is passed through the text processing pipeline.
+ *
+ * @constructor
+ * @param {string} [str=''] - The string token being wrapped.
+ * @param {object} [metadata={}] - Metadata associated with this token.
+ */
+lunr.Token = function (str, metadata) {
+  this.str = str || ""
+  this.metadata = metadata || {}
+}
+
+/**
+ * Returns the token string that is being wrapped by this object.
+ *
+ * @returns {string}
+ */
+lunr.Token.prototype.toString = function () {
+  return this.str
+}
+
+/**
+ * A token update function is used when updating or optionally
+ * when cloning a token.
+ *
+ * @callback lunr.Token~updateFunction
+ * @param {string} str - The string representation of the token.
+ * @param {Object} metadata - All metadata associated with this token.
+ */
+
+/**
+ * Applies the given function to the wrapped string token.
+ *
+ * @example
+ * token.update(function (str, metadata) {
+ *   return str.toUpperCase()
+ * })
+ *
+ * @param {lunr.Token~updateFunction} fn - A function to apply to the token string.
+ * @returns {lunr.Token}
+ */
+lunr.Token.prototype.update = function (fn) {
+  this.str = fn(this.str, this.metadata)
+  return this
+}
+
+/**
+ * Creates a clone of this token. Optionally a function can be
+ * applied to the cloned token.
+ *
+ * @param {lunr.Token~updateFunction} [fn] - An optional function to apply to the cloned token.
+ * @returns {lunr.Token}
+ */
+lunr.Token.prototype.clone = function (fn) {
+  fn = fn || function (s) { return s }
+  return new lunr.Token (fn(this.str, this.metadata), this.metadata)
+}
+/*!
+ * lunr.tokenizer
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/**
+ * A function for splitting a string into tokens ready to be inserted into
+ * the search index. Uses `lunr.tokenizer.separator` to split strings, change
+ * the value of this property to change how strings are split into tokens.
+ *
+ * This tokenizer will convert its parameter to a string by calling `toString` and
+ * then will split this string on the character in `lunr.tokenizer.separator`.
+ * Arrays will have their elements converted to strings and wrapped in a lunr.Token.
+ *
+ * Optional metadata can be passed to the tokenizer, this metadata will be cloned and
+ * added as metadata to every token that is created from the object to be tokenized.
+ *
+ * @static
+ * @param {?(string|object|object[])} obj - The object to convert into tokens
+ * @param {?object} metadata - Optional metadata to associate with every token
+ * @returns {lunr.Token[]}
+ * @see {@link lunr.Pipeline}
+ */
+lunr.tokenizer = function (obj, metadata) {
+  if (obj == null || obj == undefined) {
+    return []
+  }
+
+  if (Array.isArray(obj)) {
+    return obj.map(function (t) {
+      return new lunr.Token(
+        lunr.utils.asString(t).toLowerCase(),
+        lunr.utils.clone(metadata)
+      )
+    })
+  }
+
+  var str = obj.toString().toLowerCase(),
+      len = str.length,
+      tokens = []
+
+  for (var sliceEnd = 0, sliceStart = 0; sliceEnd <= len; sliceEnd++) {
+    var char = str.charAt(sliceEnd),
+        sliceLength = sliceEnd - sliceStart
+
+    if ((char.match(lunr.tokenizer.separator) || sliceEnd == len)) {
+
+      if (sliceLength > 0) {
+        var tokenMetadata = lunr.utils.clone(metadata) || {}
+        tokenMetadata["position"] = [sliceStart, sliceLength]
+        tokenMetadata["index"] = tokens.length
+
+        tokens.push(
+          new lunr.Token (
+            str.slice(sliceStart, sliceEnd),
+            tokenMetadata
+          )
+        )
+      }
+
+      sliceStart = sliceEnd + 1
+    }
+
+  }
+
+  return tokens
+}
+
+/**
+ * The separator used to split a string into tokens. Override this property to change the behaviour of
+ * `lunr.tokenizer` behaviour when tokenizing strings. By default this splits on whitespace and hyphens.
+ *
+ * @static
+ * @see lunr.tokenizer
+ */
+lunr.tokenizer.separator = /[\s\-]+/
+/*!
+ * lunr.Pipeline
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/**
+ * lunr.Pipelines maintain an ordered list of functions to be applied to all
+ * tokens in documents entering the search index and queries being ran against
+ * the index.
+ *
+ * An instance of lunr.Index created with the lunr shortcut will contain a
+ * pipeline with a stop word filter and an English language stemmer. Extra
+ * functions can be added before or after either of these functions or these
+ * default functions can be removed.
+ *
+ * When run the pipeline will call each function in turn, passing a token, the
+ * index of that token in the original list of all tokens and finally a list of
+ * all the original tokens.
+ *
+ * The output of functions in the pipeline will be passed to the next function
+ * in the pipeline. To exclude a token from entering the index the function
+ * should return undefined, the rest of the pipeline will not be called with
+ * this token.
+ *
+ * For serialisation of pipelines to work, all functions used in an instance of
+ * a pipeline should be registered with lunr.Pipeline. Registered functions can
+ * then be loaded. If trying to load a serialised pipeline that uses functions
+ * that are not registered an error will be thrown.
+ *
+ * If not planning on serialising the pipeline then registering pipeline functions
+ * is not necessary.
+ *
+ * @constructor
+ */
+lunr.Pipeline = function () {
+  this._stack = []
+}
+
+lunr.Pipeline.registeredFunctions = Object.create(null)
+
+/**
+ * A pipeline function maps lunr.Token to lunr.Token. A lunr.Token contains the token
+ * string as well as all known metadata. A pipeline function can mutate the token string
+ * or mutate (or add) metadata for a given token.
+ *
+ * A pipeline function can indicate that the passed token should be discarded by returning
+ * null, undefined or an empty string. This token will not be passed to any downstream pipeline
+ * functions and will not be added to the index.
+ *
+ * Multiple tokens can be returned by returning an array of tokens. Each token will be passed
+ * to any downstream pipeline functions and all will returned tokens will be added to the index.
+ *
+ * Any number of pipeline functions may be chained together using a lunr.Pipeline.
+ *
+ * @interface lunr.PipelineFunction
+ * @param {lunr.Token} token - A token from the document being processed.
+ * @param {number} i - The index of this token in the complete list of tokens for this document/field.
+ * @param {lunr.Token[]} tokens - All tokens for this document/field.
+ * @returns {(?lunr.Token|lunr.Token[])}
+ */
+
+/**
+ * Register a function with the pipeline.
+ *
+ * Functions that are used in the pipeline should be registered if the pipeline
+ * needs to be serialised, or a serialised pipeline needs to be loaded.
+ *
+ * Registering a function does not add it to a pipeline, functions must still be
+ * added to instances of the pipeline for them to be used when running a pipeline.
+ *
+ * @param {lunr.PipelineFunction} fn - The function to check for.
+ * @param {String} label - The label to register this function with
+ */
+lunr.Pipeline.registerFunction = function (fn, label) {
+  if (label in this.registeredFunctions) {
+    lunr.utils.warn('Overwriting existing registered function: ' + label)
+  }
+
+  fn.label = label
+  lunr.Pipeline.registeredFunctions[fn.label] = fn
+}
+
+/**
+ * Warns if the function is not registered as a Pipeline function.
+ *
+ * @param {lunr.PipelineFunction} fn - The function to check for.
+ * @private
+ */
+lunr.Pipeline.warnIfFunctionNotRegistered = function (fn) {
+  var isRegistered = fn.label && (fn.label in this.registeredFunctions)
+
+  if (!isRegistered) {
+    lunr.utils.warn('Function is not registered with pipeline. This may cause problems when serialising the index.\n', fn)
+  }
+}
+
+/**
+ * Loads a previously serialised pipeline.
+ *
+ * All functions to be loaded must already be registered with lunr.Pipeline.
+ * If any function from the serialised data has not been registered then an
+ * error will be thrown.
+ *
+ * @param {Object} serialised - The serialised pipeline to load.
+ * @returns {lunr.Pipeline}
+ */
+lunr.Pipeline.load = function (serialised) {
+  var pipeline = new lunr.Pipeline
+
+  serialised.forEach(function (fnName) {
+    var fn = lunr.Pipeline.registeredFunctions[fnName]
+
+    if (fn) {
+      pipeline.add(fn)
+    } else {
+      throw new Error('Cannot load unregistered function: ' + fnName)
+    }
+  })
+
+  return pipeline
+}
+
+/**
+ * Adds new functions to the end of the pipeline.
+ *
+ * Logs a warning if the function has not been registered.
+ *
+ * @param {lunr.PipelineFunction[]} functions - Any number of functions to add to the pipeline.
+ */
+lunr.Pipeline.prototype.add = function () {
+  var fns = Array.prototype.slice.call(arguments)
+
+  fns.forEach(function (fn) {
+    lunr.Pipeline.warnIfFunctionNotRegistered(fn)
+    this._stack.push(fn)
+  }, this)
+}
+
+/**
+ * Adds a single function after a function that already exists in the
+ * pipeline.
+ *
+ * Logs a warning if the function has not been registered.
+ *
+ * @param {lunr.PipelineFunction} existingFn - A function that already exists in the pipeline.
+ * @param {lunr.PipelineFunction} newFn - The new function to add to the pipeline.
+ */
+lunr.Pipeline.prototype.after = function (existingFn, newFn) {
+  lunr.Pipeline.warnIfFunctionNotRegistered(newFn)
+
+  var pos = this._stack.indexOf(existingFn)
+  if (pos == -1) {
+    throw new Error('Cannot find existingFn')
+  }
+
+  pos = pos + 1
+  this._stack.splice(pos, 0, newFn)
+}
+
+/**
+ * Adds a single function before a function that already exists in the
+ * pipeline.
+ *
+ * Logs a warning if the function has not been registered.
+ *
+ * @param {lunr.PipelineFunction} existingFn - A function that already exists in the pipeline.
+ * @param {lunr.PipelineFunction} newFn - The new function to add to the pipeline.
+ */
+lunr.Pipeline.prototype.before = function (existingFn, newFn) {
+  lunr.Pipeline.warnIfFunctionNotRegistered(newFn)
+
+  var pos = this._stack.indexOf(existingFn)
+  if (pos == -1) {
+    throw new Error('Cannot find existingFn')
+  }
+
+  this._stack.splice(pos, 0, newFn)
+}
+
+/**
+ * Removes a function from the pipeline.
+ *
+ * @param {lunr.PipelineFunction} fn The function to remove from the pipeline.
+ */
+lunr.Pipeline.prototype.remove = function (fn) {
+  var pos = this._stack.indexOf(fn)
+  if (pos == -1) {
+    return
+  }
+
+  this._stack.splice(pos, 1)
+}
+
+/**
+ * Runs the current list of functions that make up the pipeline against the
+ * passed tokens.
+ *
+ * @param {Array} tokens The tokens to run through the pipeline.
+ * @returns {Array}
+ */
+lunr.Pipeline.prototype.run = function (tokens) {
+  var stackLength = this._stack.length
+
+  for (var i = 0; i < stackLength; i++) {
+    var fn = this._stack[i]
+    var memo = []
+
+    for (var j = 0; j < tokens.length; j++) {
+      var result = fn(tokens[j], j, tokens)
+
+      if (result === null || result === void 0 || result === '') continue
+
+      if (Array.isArray(result)) {
+        for (var k = 0; k < result.length; k++) {
+          memo.push(result[k])
+        }
+      } else {
+        memo.push(result)
+      }
+    }
+
+    tokens = memo
+  }
+
+  return tokens
+}
+
+/**
+ * Convenience method for passing a string through a pipeline and getting
+ * strings out. This method takes care of wrapping the passed string in a
+ * token and mapping the resulting tokens back to strings.
+ *
+ * @param {string} str - The string to pass through the pipeline.
+ * @param {?object} metadata - Optional metadata to associate with the token
+ * passed to the pipeline.
+ * @returns {string[]}
+ */
+lunr.Pipeline.prototype.runString = function (str, metadata) {
+  var token = new lunr.Token (str, metadata)
+
+  return this.run([token]).map(function (t) {
+    return t.toString()
+  })
+}
+
+/**
+ * Resets the pipeline by removing any existing processors.
+ *
+ */
+lunr.Pipeline.prototype.reset = function () {
+  this._stack = []
+}
+
+/**
+ * Returns a representation of the pipeline ready for serialisation.
+ *
+ * Logs a warning if the function has not been registered.
+ *
+ * @returns {Array}
+ */
+lunr.Pipeline.prototype.toJSON = function () {
+  return this._stack.map(function (fn) {
+    lunr.Pipeline.warnIfFunctionNotRegistered(fn)
+
+    return fn.label
+  })
+}
+/*!
+ * lunr.Vector
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/**
+ * A vector is used to construct the vector space of documents and queries. These
+ * vectors support operations to determine the similarity between two documents or
+ * a document and a query.
+ *
+ * Normally no parameters are required for initializing a vector, but in the case of
+ * loading a previously dumped vector the raw elements can be provided to the constructor.
+ *
+ * For performance reasons vectors are implemented with a flat array, where an elements
+ * index is immediately followed by its value. E.g. [index, value, index, value]. This
+ * allows the underlying array to be as sparse as possible and still offer decent
+ * performance when being used for vector calculations.
+ *
+ * @constructor
+ * @param {Number[]} [elements] - The flat list of element index and element value pairs.
+ */
+lunr.Vector = function (elements) {
+  this._magnitude = 0
+  this.elements = elements || []
+}
+
+
+/**
+ * Calculates the position within the vector to insert a given index.
+ *
+ * This is used internally by insert and upsert. If there are duplicate indexes then
+ * the position is returned as if the value for that index were to be updated, but it
+ * is the callers responsibility to check whether there is a duplicate at that index
+ *
+ * @param {Number} insertIdx - The index at which the element should be inserted.
+ * @returns {Number}
+ */
+lunr.Vector.prototype.positionForIndex = function (index) {
+  // For an empty vector the tuple can be inserted at the beginning
+  if (this.elements.length == 0) {
+    return 0
+  }
+
+  var start = 0,
+      end = this.elements.length / 2,
+      sliceLength = end - start,
+      pivotPoint = Math.floor(sliceLength / 2),
+      pivotIndex = this.elements[pivotPoint * 2]
+
+  while (sliceLength > 1) {
+    if (pivotIndex < index) {
+      start = pivotPoint
+    }
+
+    if (pivotIndex > index) {
+      end = pivotPoint
+    }
+
+    if (pivotIndex == index) {
+      break
+    }
+
+    sliceLength = end - start
+    pivotPoint = start + Math.floor(sliceLength / 2)
+    pivotIndex = this.elements[pivotPoint * 2]
+  }
+
+  if (pivotIndex == index) {
+    return pivotPoint * 2
+  }
+
+  if (pivotIndex > index) {
+    return pivotPoint * 2
+  }
+
+  if (pivotIndex < index) {
+    return (pivotPoint + 1) * 2
+  }
+}
+
+/**
+ * Inserts an element at an index within the vector.
+ *
+ * Does not allow duplicates, will throw an error if there is already an entry
+ * for this index.
+ *
+ * @param {Number} insertIdx - The index at which the element should be inserted.
+ * @param {Number} val - The value to be inserted into the vector.
+ */
+lunr.Vector.prototype.insert = function (insertIdx, val) {
+  this.upsert(insertIdx, val, function () {
+    throw "duplicate index"
+  })
+}
+
+/**
+ * Inserts or updates an existing index within the vector.
+ *
+ * @param {Number} insertIdx - The index at which the element should be inserted.
+ * @param {Number} val - The value to be inserted into the vector.
+ * @param {function} fn - A function that is called for updates, the existing value and the
+ * requested value are passed as arguments
+ */
+lunr.Vector.prototype.upsert = function (insertIdx, val, fn) {
+  this._magnitude = 0
+  var position = this.positionForIndex(insertIdx)
+
+  if (this.elements[position] == insertIdx) {
+    this.elements[position + 1] = fn(this.elements[position + 1], val)
+  } else {
+    this.elements.splice(position, 0, insertIdx, val)
+  }
+}
+
+/**
+ * Calculates the magnitude of this vector.
+ *
+ * @returns {Number}
+ */
+lunr.Vector.prototype.magnitude = function () {
+  if (this._magnitude) return this._magnitude
+
+  var sumOfSquares = 0,
+      elementsLength = this.elements.length
+
+  for (var i = 1; i < elementsLength; i += 2) {
+    var val = this.elements[i]
+    sumOfSquares += val * val
+  }
+
+  return this._magnitude = Math.sqrt(sumOfSquares)
+}
+
+/**
+ * Calculates the dot product of this vector and another vector.
+ *
+ * @param {lunr.Vector} otherVector - The vector to compute the dot product with.
+ * @returns {Number}
+ */
+lunr.Vector.prototype.dot = function (otherVector) {
+  var dotProduct = 0,
+      a = this.elements, b = otherVector.elements,
+      aLen = a.length, bLen = b.length,
+      aVal = 0, bVal = 0,
+      i = 0, j = 0
+
+  while (i < aLen && j < bLen) {
+    aVal = a[i], bVal = b[j]
+    if (aVal < bVal) {
+      i += 2
+    } else if (aVal > bVal) {
+      j += 2
+    } else if (aVal == bVal) {
+      dotProduct += a[i + 1] * b[j + 1]
+      i += 2
+      j += 2
+    }
+  }
+
+  return dotProduct
+}
+
+/**
+ * Calculates the similarity between this vector and another vector.
+ *
+ * @param {lunr.Vector} otherVector - The other vector to calculate the
+ * similarity with.
+ * @returns {Number}
+ */
+lunr.Vector.prototype.similarity = function (otherVector) {
+  return this.dot(otherVector) / this.magnitude() || 0
+}
+
+/**
+ * Converts the vector to an array of the elements within the vector.
+ *
+ * @returns {Number[]}
+ */
+lunr.Vector.prototype.toArray = function () {
+  var output = new Array (this.elements.length / 2)
+
+  for (var i = 1, j = 0; i < this.elements.length; i += 2, j++) {
+    output[j] = this.elements[i]
+  }
+
+  return output
+}
+
+/**
+ * A JSON serializable representation of the vector.
+ *
+ * @returns {Number[]}
+ */
+lunr.Vector.prototype.toJSON = function () {
+  return this.elements
+}
+/* eslint-disable */
+/*!
+ * lunr.stemmer
+ * Copyright (C) 2020 Oliver Nightingale
+ * Includes code from - http://tartarus.org/~martin/PorterStemmer/js.txt
+ */
+
+/**
+ * lunr.stemmer is an english language stemmer, this is a JavaScript
+ * implementation of the PorterStemmer taken from http://tartarus.org/~martin
+ *
+ * @static
+ * @implements {lunr.PipelineFunction}
+ * @param {lunr.Token} token - The string to stem
+ * @returns {lunr.Token}
+ * @see {@link lunr.Pipeline}
+ * @function
+ */
+lunr.stemmer = (function(){
+  var step2list = {
+      "ational" : "ate",
+      "tional" : "tion",
+      "enci" : "ence",
+      "anci" : "ance",
+      "izer" : "ize",
+      "bli" : "ble",
+      "alli" : "al",
+      "entli" : "ent",
+      "eli" : "e",
+      "ousli" : "ous",
+      "ization" : "ize",
+      "ation" : "ate",
+      "ator" : "ate",
+      "alism" : "al",
+      "iveness" : "ive",
+      "fulness" : "ful",
+      "ousness" : "ous",
+      "aliti" : "al",
+      "iviti" : "ive",
+      "biliti" : "ble",
+      "logi" : "log"
+    },
+
+    step3list = {
+      "icate" : "ic",
+      "ative" : "",
+      "alize" : "al",
+      "iciti" : "ic",
+      "ical" : "ic",
+      "ful" : "",
+      "ness" : ""
+    },
+
+    c = "[^aeiou]",          // consonant
+    v = "[aeiouy]",          // vowel
+    C = c + "[^aeiouy]*",    // consonant sequence
+    V = v + "[aeiou]*",      // vowel sequence
+
+    mgr0 = "^(" + C + ")?" + V + C,               // [C]VC... is m>0
+    meq1 = "^(" + C + ")?" + V + C + "(" + V + ")?$",  // [C]VC[V] is m=1
+    mgr1 = "^(" + C + ")?" + V + C + V + C,       // [C]VCVC... is m>1
+    s_v = "^(" + C + ")?" + v;                   // vowel in stem
+
+  var re_mgr0 = new RegExp(mgr0);
+  var re_mgr1 = new RegExp(mgr1);
+  var re_meq1 = new RegExp(meq1);
+  var re_s_v = new RegExp(s_v);
+
+  var re_1a = /^(.+?)(ss|i)es$/;
+  var re2_1a = /^(.+?)([^s])s$/;
+  var re_1b = /^(.+?)eed$/;
+  var re2_1b = /^(.+?)(ed|ing)$/;
+  var re_1b_2 = /.$/;
+  var re2_1b_2 = /(at|bl|iz)$/;
+  var re3_1b_2 = new RegExp("([^aeiouylsz])\\1$");
+  var re4_1b_2 = new RegExp("^" + C + v + "[^aeiouwxy]$");
+
+  var re_1c = /^(.+?[^aeiou])y$/;
+  var re_2 = /^(.+?)(ational|tional|enci|anci|izer|bli|alli|entli|eli|ousli|ization|ation|ator|alism|iveness|fulness|ousness|aliti|iviti|biliti|logi)$/;
+
+  var re_3 = /^(.+?)(icate|ative|alize|iciti|ical|ful|ness)$/;
+
+  var re_4 = /^(.+?)(al|ance|ence|er|ic|able|ible|ant|ement|ment|ent|ou|ism|ate|iti|ous|ive|ize)$/;
+  var re2_4 = /^(.+?)(s|t)(ion)$/;
+
+  var re_5 = /^(.+?)e$/;
+  var re_5_1 = /ll$/;
+  var re3_5 = new RegExp("^" + C + v + "[^aeiouwxy]$");
+
+  var porterStemmer = function porterStemmer(w) {
+    var stem,
+      suffix,
+      firstch,
+      re,
+      re2,
+      re3,
+      re4;
+
+    if (w.length < 3) { return w; }
+
+    firstch = w.substr(0,1);
+    if (firstch == "y") {
+      w = firstch.toUpperCase() + w.substr(1);
+    }
+
+    // Step 1a
+    re = re_1a
+    re2 = re2_1a;
+
+    if (re.test(w)) { w = w.replace(re,"$1$2"); }
+    else if (re2.test(w)) { w = w.replace(re2,"$1$2"); }
+
+    // Step 1b
+    re = re_1b;
+    re2 = re2_1b;
+    if (re.test(w)) {
+      var fp = re.exec(w);
+      re = re_mgr0;
+      if (re.test(fp[1])) {
+        re = re_1b_2;
+        w = w.replace(re,"");
+      }
+    } else if (re2.test(w)) {
+      var fp = re2.exec(w);
+      stem = fp[1];
+      re2 = re_s_v;
+      if (re2.test(stem)) {
+        w = stem;
+        re2 = re2_1b_2;
+        re3 = re3_1b_2;
+        re4 = re4_1b_2;
+        if (re2.test(w)) { w = w + "e"; }
+        else if (re3.test(w)) { re = re_1b_2; w = w.replace(re,""); }
+        else if (re4.test(w)) { w = w + "e"; }
+      }
+    }
+
+    // Step 1c - replace suffix y or Y by i if preceded by a non-vowel which is not the first letter of the word (so cry -> cri, by -> by, say -> say)
+    re = re_1c;
+    if (re.test(w)) {
+      var fp = re.exec(w);
+      stem = fp[1];
+      w = stem + "i";
+    }
+
+    // Step 2
+    re = re_2;
+    if (re.test(w)) {
+      var fp = re.exec(w);
+      stem = fp[1];
+      suffix = fp[2];
+      re = re_mgr0;
+      if (re.test(stem)) {
+        w = stem + step2list[suffix];
+      }
+    }
+
+    // Step 3
+    re = re_3;
+    if (re.test(w)) {
+      var fp = re.exec(w);
+      stem = fp[1];
+      suffix = fp[2];
+      re = re_mgr0;
+      if (re.test(stem)) {
+        w = stem + step3list[suffix];
+      }
+    }
+
+    // Step 4
+    re = re_4;
+    re2 = re2_4;
+    if (re.test(w)) {
+      var fp = re.exec(w);
+      stem = fp[1];
+      re = re_mgr1;
+      if (re.test(stem)) {
+        w = stem;
+      }
+    } else if (re2.test(w)) {
+      var fp = re2.exec(w);
+      stem = fp[1] + fp[2];
+      re2 = re_mgr1;
+      if (re2.test(stem)) {
+        w = stem;
+      }
+    }
+
+    // Step 5
+    re = re_5;
+    if (re.test(w)) {
+      var fp = re.exec(w);
+      stem = fp[1];
+      re = re_mgr1;
+      re2 = re_meq1;
+      re3 = re3_5;
+      if (re.test(stem) || (re2.test(stem) && !(re3.test(stem)))) {
+        w = stem;
+      }
+    }
+
+    re = re_5_1;
+    re2 = re_mgr1;
+    if (re.test(w) && re2.test(w)) {
+      re = re_1b_2;
+      w = w.replace(re,"");
+    }
+
+    // and turn initial Y back to y
+
+    if (firstch == "y") {
+      w = firstch.toLowerCase() + w.substr(1);
+    }
+
+    return w;
+  };
+
+  return function (token) {
+    return token.update(porterStemmer);
+  }
+})();
+
+lunr.Pipeline.registerFunction(lunr.stemmer, 'stemmer')
+/*!
+ * lunr.stopWordFilter
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/**
+ * lunr.generateStopWordFilter builds a stopWordFilter function from the provided
+ * list of stop words.
+ *
+ * The built in lunr.stopWordFilter is built using this generator and can be used
+ * to generate custom stopWordFilters for applications or non English languages.
+ *
+ * @function
+ * @param {Array} token The token to pass through the filter
+ * @returns {lunr.PipelineFunction}
+ * @see lunr.Pipeline
+ * @see lunr.stopWordFilter
+ */
+lunr.generateStopWordFilter = function (stopWords) {
+  var words = stopWords.reduce(function (memo, stopWord) {
+    memo[stopWord] = stopWord
+    return memo
+  }, {})
+
+  return function (token) {
+    if (token && words[token.toString()] !== token.toString()) return token
+  }
+}
+
+/**
+ * lunr.stopWordFilter is an English language stop word list filter, any words
+ * contained in the list will not be passed through the filter.
+ *
+ * This is intended to be used in the Pipeline. If the token does not pass the
+ * filter then undefined will be returned.
+ *
+ * @function
+ * @implements {lunr.PipelineFunction}
+ * @params {lunr.Token} token - A token to check for being a stop word.
+ * @returns {lunr.Token}
+ * @see {@link lunr.Pipeline}
+ */
+lunr.stopWordFilter = lunr.generateStopWordFilter([
+  'a',
+  'able',
+  'about',
+  'across',
+  'after',
+  'all',
+  'almost',
+  'also',
+  'am',
+  'among',
+  'an',
+  'and',
+  'any',
+  'are',
+  'as',
+  'at',
+  'be',
+  'because',
+  'been',
+  'but',
+  'by',
+  'can',
+  'cannot',
+  'could',
+  'dear',
+  'did',
+  'do',
+  'does',
+  'either',
+  'else',
+  'ever',
+  'every',
+  'for',
+  'from',
+  'get',
+  'got',
+  'had',
+  'has',
+  'have',
+  'he',
+  'her',
+  'hers',
+  'him',
+  'his',
+  'how',
+  'however',
+  'i',
+  'if',
+  'in',
+  'into',
+  'is',
+  'it',
+  'its',
+  'just',
+  'least',
+  'let',
+  'like',
+  'likely',
+  'may',
+  'me',
+  'might',
+  'most',
+  'must',
+  'my',
+  'neither',
+  'no',
+  'nor',
+  'not',
+  'of',
+  'off',
+  'often',
+  'on',
+  'only',
+  'or',
+  'other',
+  'our',
+  'own',
+  'rather',
+  'said',
+  'say',
+  'says',
+  'she',
+  'should',
+  'since',
+  'so',
+  'some',
+  'than',
+  'that',
+  'the',
+  'their',
+  'them',
+  'then',
+  'there',
+  'these',
+  'they',
+  'this',
+  'tis',
+  'to',
+  'too',
+  'twas',
+  'us',
+  'wants',
+  'was',
+  'we',
+  'were',
+  'what',
+  'when',
+  'where',
+  'which',
+  'while',
+  'who',
+  'whom',
+  'why',
+  'will',
+  'with',
+  'would',
+  'yet',
+  'you',
+  'your'
+])
+
+lunr.Pipeline.registerFunction(lunr.stopWordFilter, 'stopWordFilter')
+/*!
+ * lunr.trimmer
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/**
+ * lunr.trimmer is a pipeline function for trimming non word
+ * characters from the beginning and end of tokens before they
+ * enter the index.
+ *
+ * This implementation may not work correctly for non latin
+ * characters and should either be removed or adapted for use
+ * with languages with non-latin characters.
+ *
+ * @static
+ * @implements {lunr.PipelineFunction}
+ * @param {lunr.Token} token The token to pass through the filter
+ * @returns {lunr.Token}
+ * @see lunr.Pipeline
+ */
+lunr.trimmer = function (token) {
+  return token.update(function (s) {
+    return s.replace(/^\W+/, '').replace(/\W+$/, '')
+  })
+}
+
+lunr.Pipeline.registerFunction(lunr.trimmer, 'trimmer')
+/*!
+ * lunr.TokenSet
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/**
+ * A token set is used to store the unique list of all tokens
+ * within an index. Token sets are also used to represent an
+ * incoming query to the index, this query token set and index
+ * token set are then intersected to find which tokens to look
+ * up in the inverted index.
+ *
+ * A token set can hold multiple tokens, as in the case of the
+ * index token set, or it can hold a single token as in the
+ * case of a simple query token set.
+ *
+ * Additionally token sets are used to perform wildcard matching.
+ * Leading, contained and trailing wildcards are supported, and
+ * from this edit distance matching can also be provided.
+ *
+ * Token sets are implemented as a minimal finite state automata,
+ * where both common prefixes and suffixes are shared between tokens.
+ * This helps to reduce the space used for storing the token set.
+ *
+ * @constructor
+ */
+lunr.TokenSet = function () {
+  this.final = false
+  this.edges = {}
+  this.id = lunr.TokenSet._nextId
+  lunr.TokenSet._nextId += 1
+}
+
+/**
+ * Keeps track of the next, auto increment, identifier to assign
+ * to a new tokenSet.
+ *
+ * TokenSets require a unique identifier to be correctly minimised.
+ *
+ * @private
+ */
+lunr.TokenSet._nextId = 1
+
+/**
+ * Creates a TokenSet instance from the given sorted array of words.
+ *
+ * @param {String[]} arr - A sorted array of strings to create the set from.
+ * @returns {lunr.TokenSet}
+ * @throws Will throw an error if the input array is not sorted.
+ */
+lunr.TokenSet.fromArray = function (arr) {
+  var builder = new lunr.TokenSet.Builder
+
+  for (var i = 0, len = arr.length; i < len; i++) {
+    builder.insert(arr[i])
+  }
+
+  builder.finish()
+  return builder.root
+}
+
+/**
+ * Creates a token set from a query clause.
+ *
+ * @private
+ * @param {Object} clause - A single clause from lunr.Query.
+ * @param {string} clause.term - The query clause term.
+ * @param {number} [clause.editDistance] - The optional edit distance for the term.
+ * @returns {lunr.TokenSet}
+ */
+lunr.TokenSet.fromClause = function (clause) {
+  if ('editDistance' in clause) {
+    return lunr.TokenSet.fromFuzzyString(clause.term, clause.editDistance)
+  } else {
+    return lunr.TokenSet.fromString(clause.term)
+  }
+}
+
+/**
+ * Creates a token set representing a single string with a specified
+ * edit distance.
+ *
+ * Insertions, deletions, substitutions and transpositions are each
+ * treated as an edit distance of 1.
+ *
+ * Increasing the allowed edit distance will have a dramatic impact
+ * on the performance of both creating and intersecting these TokenSets.
+ * It is advised to keep the edit distance less than 3.
+ *
+ * @param {string} str - The string to create the token set from.
+ * @param {number} editDistance - The allowed edit distance to match.
+ * @returns {lunr.Vector}
+ */
+lunr.TokenSet.fromFuzzyString = function (str, editDistance) {
+  var root = new lunr.TokenSet
+
+  var stack = [{
+    node: root,
+    editsRemaining: editDistance,
+    str: str
+  }]
+
+  while (stack.length) {
+    var frame = stack.pop()
+
+    // no edit
+    if (frame.str.length > 0) {
+      var char = frame.str.charAt(0),
+          noEditNode
+
+      if (char in frame.node.edges) {
+        noEditNode = frame.node.edges[char]
+      } else {
+        noEditNode = new lunr.TokenSet
+        frame.node.edges[char] = noEditNode
+      }
+
+      if (frame.str.length == 1) {
+        noEditNode.final = true
+      }
+
+      stack.push({
+        node: noEditNode,
+        editsRemaining: frame.editsRemaining,
+        str: frame.str.slice(1)
+      })
+    }
+
+    if (frame.editsRemaining == 0) {
+      continue
+    }
+
+    // insertion
+    if ("*" in frame.node.edges) {
+      var insertionNode = frame.node.edges["*"]
+    } else {
+      var insertionNode = new lunr.TokenSet
+      frame.node.edges["*"] = insertionNode
+    }
+
+    if (frame.str.length == 0) {
+      insertionNode.final = true
+    }
+
+    stack.push({
+      node: insertionNode,
+      editsRemaining: frame.editsRemaining - 1,
+      str: frame.str
+    })
+
+    // deletion
+    // can only do a deletion if we have enough edits remaining
+    // and if there are characters left to delete in the string
+    if (frame.str.length > 1) {
+      stack.push({
+        node: frame.node,
+        editsRemaining: frame.editsRemaining - 1,
+        str: frame.str.slice(1)
+      })
+    }
+
+    // deletion
+    // just removing the last character from the str
+    if (frame.str.length == 1) {
+      frame.node.final = true
+    }
+
+    // substitution
+    // can only do a substitution if we have enough edits remaining
+    // and if there are characters left to substitute
+    if (frame.str.length >= 1) {
+      if ("*" in frame.node.edges) {
+        var substitutionNode = frame.node.edges["*"]
+      } else {
+        var substitutionNode = new lunr.TokenSet
+        frame.node.edges["*"] = substitutionNode
+      }
+
+      if (frame.str.length == 1) {
+        substitutionNode.final = true
+      }
+
+      stack.push({
+        node: substitutionNode,
+        editsRemaining: frame.editsRemaining - 1,
+        str: frame.str.slice(1)
+      })
+    }
+
+    // transposition
+    // can only do a transposition if there are edits remaining
+    // and there are enough characters to transpose
+    if (frame.str.length > 1) {
+      var charA = frame.str.charAt(0),
+          charB = frame.str.charAt(1),
+          transposeNode
+
+      if (charB in frame.node.edges) {
+        transposeNode = frame.node.edges[charB]
+      } else {
+        transposeNode = new lunr.TokenSet
+        frame.node.edges[charB] = transposeNode
+      }
+
+      if (frame.str.length == 1) {
+        transposeNode.final = true
+      }
+
+      stack.push({
+        node: transposeNode,
+        editsRemaining: frame.editsRemaining - 1,
+        str: charA + frame.str.slice(2)
+      })
+    }
+  }
+
+  return root
+}
+
+/**
+ * Creates a TokenSet from a string.
+ *
+ * The string may contain one or more wildcard characters (*)
+ * that will allow wildcard matching when intersecting with
+ * another TokenSet.
+ *
+ * @param {string} str - The string to create a TokenSet from.
+ * @returns {lunr.TokenSet}
+ */
+lunr.TokenSet.fromString = function (str) {
+  var node = new lunr.TokenSet,
+      root = node
+
+  /*
+   * Iterates through all characters within the passed string
+   * appending a node for each character.
+   *
+   * When a wildcard character is found then a self
+   * referencing edge is introduced to continually match
+   * any number of any characters.
+   */
+  for (var i = 0, len = str.length; i < len; i++) {
+    var char = str[i],
+        final = (i == len - 1)
+
+    if (char == "*") {
+      node.edges[char] = node
+      node.final = final
+
+    } else {
+      var next = new lunr.TokenSet
+      next.final = final
+
+      node.edges[char] = next
+      node = next
+    }
+  }
+
+  return root
+}
+
+/**
+ * Converts this TokenSet into an array of strings
+ * contained within the TokenSet.
+ *
+ * This is not intended to be used on a TokenSet that
+ * contains wildcards, in these cases the results are
+ * undefined and are likely to cause an infinite loop.
+ *
+ * @returns {string[]}
+ */
+lunr.TokenSet.prototype.toArray = function () {
+  var words = []
+
+  var stack = [{
+    prefix: "",
+    node: this
+  }]
+
+  while (stack.length) {
+    var frame = stack.pop(),
+        edges = Object.keys(frame.node.edges),
+        len = edges.length
+
+    if (frame.node.final) {
+      /* In Safari, at this point the prefix is sometimes corrupted, see:
+       * https://github.com/olivernn/lunr.js/issues/279 Calling any
+       * String.prototype method forces Safari to "cast" this string to what
+       * it's supposed to be, fixing the bug. */
+      frame.prefix.charAt(0)
+      words.push(frame.prefix)
+    }
+
+    for (var i = 0; i < len; i++) {
+      var edge = edges[i]
+
+      stack.push({
+        prefix: frame.prefix.concat(edge),
+        node: frame.node.edges[edge]
+      })
+    }
+  }
+
+  return words
+}
+
+/**
+ * Generates a string representation of a TokenSet.
+ *
+ * This is intended to allow TokenSets to be used as keys
+ * in objects, largely to aid the construction and minimisation
+ * of a TokenSet. As such it is not designed to be a human
+ * friendly representation of the TokenSet.
+ *
+ * @returns {string}
+ */
+lunr.TokenSet.prototype.toString = function () {
+  // NOTE: Using Object.keys here as this.edges is very likely
+  // to enter 'hash-mode' with many keys being added
+  //
+  // avoiding a for-in loop here as it leads to the function
+  // being de-optimised (at least in V8). From some simple
+  // benchmarks the performance is comparable, but allowing
+  // V8 to optimize may mean easy performance wins in the future.
+
+  if (this._str) {
+    return this._str
+  }
+
+  var str = this.final ? '1' : '0',
+      labels = Object.keys(this.edges).sort(),
+      len = labels.length
+
+  for (var i = 0; i < len; i++) {
+    var label = labels[i],
+        node = this.edges[label]
+
+    str = str + label + node.id
+  }
+
+  return str
+}
+
+/**
+ * Returns a new TokenSet that is the intersection of
+ * this TokenSet and the passed TokenSet.
+ *
+ * This intersection will take into account any wildcards
+ * contained within the TokenSet.
+ *
+ * @param {lunr.TokenSet} b - An other TokenSet to intersect with.
+ * @returns {lunr.TokenSet}
+ */
+lunr.TokenSet.prototype.intersect = function (b) {
+  var output = new lunr.TokenSet,
+      frame = undefined
+
+  var stack = [{
+    qNode: b,
+    output: output,
+    node: this
+  }]
+
+  while (stack.length) {
+    frame = stack.pop()
+
+    // NOTE: As with the #toString method, we are using
+    // Object.keys and a for loop instead of a for-in loop
+    // as both of these objects enter 'hash' mode, causing
+    // the function to be de-optimised in V8
+    var qEdges = Object.keys(frame.qNode.edges),
+        qLen = qEdges.length,
+        nEdges = Object.keys(frame.node.edges),
+        nLen = nEdges.length
+
+    for (var q = 0; q < qLen; q++) {
+      var qEdge = qEdges[q]
+
+      for (var n = 0; n < nLen; n++) {
+        var nEdge = nEdges[n]
+
+        if (nEdge == qEdge || qEdge == '*') {
+          var node = frame.node.edges[nEdge],
+              qNode = frame.qNode.edges[qEdge],
+              final = node.final && qNode.final,
+              next = undefined
+
+          if (nEdge in frame.output.edges) {
+            // an edge already exists for this character
+            // no need to create a new node, just set the finality
+            // bit unless this node is already final
+            next = frame.output.edges[nEdge]
+            next.final = next.final || final
+
+          } else {
+            // no edge exists yet, must create one
+            // set the finality bit and insert it
+            // into the output
+            next = new lunr.TokenSet
+            next.final = final
+            frame.output.edges[nEdge] = next
+          }
+
+          stack.push({
+            qNode: qNode,
+            output: next,
+            node: node
+          })
+        }
+      }
+    }
+  }
+
+  return output
+}
+lunr.TokenSet.Builder = function () {
+  this.previousWord = ""
+  this.root = new lunr.TokenSet
+  this.uncheckedNodes = []
+  this.minimizedNodes = {}
+}
+
+lunr.TokenSet.Builder.prototype.insert = function (word) {
+  var node,
+      commonPrefix = 0
+
+  if (word < this.previousWord) {
+    throw new Error ("Out of order word insertion")
+  }
+
+  for (var i = 0; i < word.length && i < this.previousWord.length; i++) {
+    if (word[i] != this.previousWord[i]) break
+    commonPrefix++
+  }
+
+  this.minimize(commonPrefix)
+
+  if (this.uncheckedNodes.length == 0) {
+    node = this.root
+  } else {
+    node = this.uncheckedNodes[this.uncheckedNodes.length - 1].child
+  }
+
+  for (var i = commonPrefix; i < word.length; i++) {
+    var nextNode = new lunr.TokenSet,
+        char = word[i]
+
+    node.edges[char] = nextNode
+
+    this.uncheckedNodes.push({
+      parent: node,
+      char: char,
+      child: nextNode
+    })
+
+    node = nextNode
+  }
+
+  node.final = true
+  this.previousWord = word
+}
+
+lunr.TokenSet.Builder.prototype.finish = function () {
+  this.minimize(0)
+}
+
+lunr.TokenSet.Builder.prototype.minimize = function (downTo) {
+  for (var i = this.uncheckedNodes.length - 1; i >= downTo; i--) {
+    var node = this.uncheckedNodes[i],
+        childKey = node.child.toString()
+
+    if (childKey in this.minimizedNodes) {
+      node.parent.edges[node.char] = this.minimizedNodes[childKey]
+    } else {
+      // Cache the key for this node since
+      // we know it can't change anymore
+      node.child._str = childKey
+
+      this.minimizedNodes[childKey] = node.child
+    }
+
+    this.uncheckedNodes.pop()
+  }
+}
+/*!
+ * lunr.Index
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/**
+ * An index contains the built index of all documents and provides a query interface
+ * to the index.
+ *
+ * Usually instances of lunr.Index will not be created using this constructor, instead
+ * lunr.Builder should be used to construct new indexes, or lunr.Index.load should be
+ * used to load previously built and serialized indexes.
+ *
+ * @constructor
+ * @param {Object} attrs - The attributes of the built search index.
+ * @param {Object} attrs.invertedIndex - An index of term/field to document reference.
+ * @param {Object<string, lunr.Vector>} attrs.fieldVectors - Field vectors
+ * @param {lunr.TokenSet} attrs.tokenSet - An set of all corpus tokens.
+ * @param {string[]} attrs.fields - The names of indexed document fields.
+ * @param {lunr.Pipeline} attrs.pipeline - The pipeline to use for search terms.
+ */
+lunr.Index = function (attrs) {
+  this.invertedIndex = attrs.invertedIndex
+  this.fieldVectors = attrs.fieldVectors
+  this.tokenSet = attrs.tokenSet
+  this.fields = attrs.fields
+  this.pipeline = attrs.pipeline
+}
+
+/**
+ * A result contains details of a document matching a search query.
+ * @typedef {Object} lunr.Index~Result
+ * @property {string} ref - The reference of the document this result represents.
+ * @property {number} score - A number between 0 and 1 representing how similar this document is to the query.
+ * @property {lunr.MatchData} matchData - Contains metadata about this match including which term(s) caused the match.
+ */
+
+/**
+ * Although lunr provides the ability to create queries using lunr.Query, it also provides a simple
+ * query language which itself is parsed into an instance of lunr.Query.
+ *
+ * For programmatically building queries it is advised to directly use lunr.Query, the query language
+ * is best used for human entered text rather than program generated text.
+ *
+ * At its simplest queries can just be a single term, e.g. `hello`, multiple terms are also supported
+ * and will be combined with OR, e.g `hello world` will match documents that contain either 'hello'
+ * or 'world', though those that contain both will rank higher in the results.
+ *
+ * Wildcards can be included in terms to match one or more unspecified characters, these wildcards can
+ * be inserted anywhere within the term, and more than one wildcard can exist in a single term. Adding
+ * wildcards will increase the number of documents that will be found but can also have a negative
+ * impact on query performance, especially with wildcards at the beginning of a term.
+ *
+ * Terms can be restricted to specific fields, e.g. `title:hello`, only documents with the term
+ * hello in the title field will match this query. Using a field not present in the index will lead
+ * to an error being thrown.
+ *
+ * Modifiers can also be added to terms, lunr supports edit distance and boost modifiers on terms. A term
+ * boost will make documents matching that term score higher, e.g. `foo^5`. Edit distance is also supported
+ * to provide fuzzy matching, e.g. 'hello~2' will match documents with hello with an edit distance of 2.
+ * Avoid large values for edit distance to improve query performance.
+ *
+ * Each term also supports a presence modifier. By default a term's presence in document is optional, however
+ * this can be changed to either required or prohibited. For a term's presence to be required in a document the
+ * term should be prefixed with a '+', e.g. `+foo bar` is a search for documents that must contain 'foo' and
+ * optionally contain 'bar'. Conversely a leading '-' sets the terms presence to prohibited, i.e. it must not
+ * appear in a document, e.g. `-foo bar` is a search for documents that do not contain 'foo' but may contain 'bar'.
+ *
+ * To escape special characters the backslash character '\' can be used, this allows searches to include
+ * characters that would normally be considered modifiers, e.g. `foo\~2` will search for a term "foo~2" instead
+ * of attempting to apply a boost of 2 to the search term "foo".
+ *
+ * @typedef {string} lunr.Index~QueryString
+ * @example <caption>Simple single term query</caption>
+ * hello
+ * @example <caption>Multiple term query</caption>
+ * hello world
+ * @example <caption>term scoped to a field</caption>
+ * title:hello
+ * @example <caption>term with a boost of 10</caption>
+ * hello^10
+ * @example <caption>term with an edit distance of 2</caption>
+ * hello~2
+ * @example <caption>terms with presence modifiers</caption>
+ * -foo +bar baz
+ */
+
+/**
+ * Performs a search against the index using lunr query syntax.
+ *
+ * Results will be returned sorted by their score, the most relevant results
+ * will be returned first.  For details on how the score is calculated, please see
+ * the {@link https://lunrjs.com/guides/searching.html#scoring|guide}.
+ *
+ * For more programmatic querying use lunr.Index#query.
+ *
+ * @param {lunr.Index~QueryString} queryString - A string containing a lunr query.
+ * @throws {lunr.QueryParseError} If the passed query string cannot be parsed.
+ * @returns {lunr.Index~Result[]}
+ */
+lunr.Index.prototype.search = function (queryString) {
+  return this.query(function (query) {
+    var parser = new lunr.QueryParser(queryString, query)
+    parser.parse()
+  })
+}
+
+/**
+ * A query builder callback provides a query object to be used to express
+ * the query to perform on the index.
+ *
+ * @callback lunr.Index~queryBuilder
+ * @param {lunr.Query} query - The query object to build up.
+ * @this lunr.Query
+ */
+
+/**
+ * Performs a query against the index using the yielded lunr.Query object.
+ *
+ * If performing programmatic queries against the index, this method is preferred
+ * over lunr.Index#search so as to avoid the additional query parsing overhead.
+ *
+ * A query object is yielded to the supplied function which should be used to
+ * express the query to be run against the index.
+ *
+ * Note that although this function takes a callback parameter it is _not_ an
+ * asynchronous operation, the callback is just yielded a query object to be
+ * customized.
+ *
+ * @param {lunr.Index~queryBuilder} fn - A function that is used to build the query.
+ * @returns {lunr.Index~Result[]}
+ */
+lunr.Index.prototype.query = function (fn) {
+  // for each query clause
+  // * process terms
+  // * expand terms from token set
+  // * find matching documents and metadata
+  // * get document vectors
+  // * score documents
+
+  var query = new lunr.Query(this.fields),
+      matchingFields = Object.create(null),
+      queryVectors = Object.create(null),
+      termFieldCache = Object.create(null),
+      requiredMatches = Object.create(null),
+      prohibitedMatches = Object.create(null)
+
+  /*
+   * To support field level boosts a query vector is created per
+   * field. An empty vector is eagerly created to support negated
+   * queries.
+   */
+  for (var i = 0; i < this.fields.length; i++) {
+    queryVectors[this.fields[i]] = new lunr.Vector
+  }
+
+  fn.call(query, query)
+
+  for (var i = 0; i < query.clauses.length; i++) {
+    /*
+     * Unless the pipeline has been disabled for this term, which is
+     * the case for terms with wildcards, we need to pass the clause
+     * term through the search pipeline. A pipeline returns an array
+     * of processed terms. Pipeline functions may expand the passed
+     * term, which means we may end up performing multiple index lookups
+     * for a single query term.
+     */
+    var clause = query.clauses[i],
+        terms = null,
+        clauseMatches = lunr.Set.empty
+
+    if (clause.usePipeline) {
+      terms = this.pipeline.runString(clause.term, {
+        fields: clause.fields
+      })
+    } else {
+      terms = [clause.term]
+    }
+
+    for (var m = 0; m < terms.length; m++) {
+      var term = terms[m]
+
+      /*
+       * Each term returned from the pipeline needs to use the same query
+       * clause object, e.g. the same boost and or edit distance. The
+       * simplest way to do this is to re-use the clause object but mutate
+       * its term property.
+       */
+      clause.term = term
+
+      /*
+       * From the term in the clause we create a token set which will then
+       * be used to intersect the indexes token set to get a list of terms
+       * to lookup in the inverted index
+       */
+      var termTokenSet = lunr.TokenSet.fromClause(clause),
+          expandedTerms = this.tokenSet.intersect(termTokenSet).toArray()
+
+      /*
+       * If a term marked as required does not exist in the tokenSet it is
+       * impossible for the search to return any matches. We set all the field
+       * scoped required matches set to empty and stop examining any further
+       * clauses.
+       */
+      if (expandedTerms.length === 0 && clause.presence === lunr.Query.presence.REQUIRED) {
+        for (var k = 0; k < clause.fields.length; k++) {
+          var field = clause.fields[k]
+          requiredMatches[field] = lunr.Set.empty
+        }
+
+        break
+      }
+
+      for (var j = 0; j < expandedTerms.length; j++) {
+        /*
+         * For each term get the posting and termIndex, this is required for
+         * building the query vector.
+         */
+        var expandedTerm = expandedTerms[j],
+            posting = this.invertedIndex[expandedTerm],
+            termIndex = posting._index
+
+        for (var k = 0; k < clause.fields.length; k++) {
+          /*
+           * For each field that this query term is scoped by (by default
+           * all fields are in scope) we need to get all the document refs
+           * that have this term in that field.
+           *
+           * The posting is the entry in the invertedIndex for the matching
+           * term from above.
+           */
+          var field = clause.fields[k],
+              fieldPosting = posting[field],
+              matchingDocumentRefs = Object.keys(fieldPosting),
+              termField = expandedTerm + "/" + field,
+              matchingDocumentsSet = new lunr.Set(matchingDocumentRefs)
+
+          /*
+           * if the presence of this term is required ensure that the matching
+           * documents are added to the set of required matches for this clause.
+           *
+           */
+          if (clause.presence == lunr.Query.presence.REQUIRED) {
+            clauseMatches = clauseMatches.union(matchingDocumentsSet)
+
+            if (requiredMatches[field] === undefined) {
+              requiredMatches[field] = lunr.Set.complete
+            }
+          }
+
+          /*
+           * if the presence of this term is prohibited ensure that the matching
+           * documents are added to the set of prohibited matches for this field,
+           * creating that set if it does not yet exist.
+           */
+          if (clause.presence == lunr.Query.presence.PROHIBITED) {
+            if (prohibitedMatches[field] === undefined) {
+              prohibitedMatches[field] = lunr.Set.empty
+            }
+
+            prohibitedMatches[field] = prohibitedMatches[field].union(matchingDocumentsSet)
+
+            /*
+             * Prohibited matches should not be part of the query vector used for
+             * similarity scoring and no metadata should be extracted so we continue
+             * to the next field
+             */
+            continue
+          }
+
+          /*
+           * The query field vector is populated using the termIndex found for
+           * the term and a unit value with the appropriate boost applied.
+           * Using upsert because there could already be an entry in the vector
+           * for the term we are working with. In that case we just add the scores
+           * together.
+           */
+          queryVectors[field].upsert(termIndex, clause.boost, function (a, b) { return a + b })
+
+          /**
+           * If we've already seen this term, field combo then we've already collected
+           * the matching documents and metadata, no need to go through all that again
+           */
+          if (termFieldCache[termField]) {
+            continue
+          }
+
+          for (var l = 0; l < matchingDocumentRefs.length; l++) {
+            /*
+             * All metadata for this term/field/document triple
+             * are then extracted and collected into an instance
+             * of lunr.MatchData ready to be returned in the query
+             * results
+             */
+            var matchingDocumentRef = matchingDocumentRefs[l],
+                matchingFieldRef = new lunr.FieldRef (matchingDocumentRef, field),
+                metadata = fieldPosting[matchingDocumentRef],
+                fieldMatch
+
+            if ((fieldMatch = matchingFields[matchingFieldRef]) === undefined) {
+              matchingFields[matchingFieldRef] = new lunr.MatchData (expandedTerm, field, metadata)
+            } else {
+              fieldMatch.add(expandedTerm, field, metadata)
+            }
+
+          }
+
+          termFieldCache[termField] = true
+        }
+      }
+    }
+
+    /**
+     * If the presence was required we need to update the requiredMatches field sets.
+     * We do this after all fields for the term have collected their matches because
+     * the clause terms presence is required in _any_ of the fields not _all_ of the
+     * fields.
+     */
+    if (clause.presence === lunr.Query.presence.REQUIRED) {
+      for (var k = 0; k < clause.fields.length; k++) {
+        var field = clause.fields[k]
+        requiredMatches[field] = requiredMatches[field].intersect(clauseMatches)
+      }
+    }
+  }
+
+  /**
+   * Need to combine the field scoped required and prohibited
+   * matching documents into a global set of required and prohibited
+   * matches
+   */
+  var allRequiredMatches = lunr.Set.complete,
+      allProhibitedMatches = lunr.Set.empty
+
+  for (var i = 0; i < this.fields.length; i++) {
+    var field = this.fields[i]
+
+    if (requiredMatches[field]) {
+      allRequiredMatches = allRequiredMatches.intersect(requiredMatches[field])
+    }
+
+    if (prohibitedMatches[field]) {
+      allProhibitedMatches = allProhibitedMatches.union(prohibitedMatches[field])
+    }
+  }
+
+  var matchingFieldRefs = Object.keys(matchingFields),
+      results = [],
+      matches = Object.create(null)
+
+  /*
+   * If the query is negated (contains only prohibited terms)
+   * we need to get _all_ fieldRefs currently existing in the
+   * index. This is only done when we know that the query is
+   * entirely prohibited terms to avoid any cost of getting all
+   * fieldRefs unnecessarily.
+   *
+   * Additionally, blank MatchData must be created to correctly
+   * populate the results.
+   */
+  if (query.isNegated()) {
+    matchingFieldRefs = Object.keys(this.fieldVectors)
+
+    for (var i = 0; i < matchingFieldRefs.length; i++) {
+      var matchingFieldRef = matchingFieldRefs[i]
+      var fieldRef = lunr.FieldRef.fromString(matchingFieldRef)
+      matchingFields[matchingFieldRef] = new lunr.MatchData
+    }
+  }
+
+  for (var i = 0; i < matchingFieldRefs.length; i++) {
+    /*
+     * Currently we have document fields that match the query, but we
+     * need to return documents. The matchData and scores are combined
+     * from multiple fields belonging to the same document.
+     *
+     * Scores are calculated by field, using the query vectors created
+     * above, and combined into a final document score using addition.
+     */
+    var fieldRef = lunr.FieldRef.fromString(matchingFieldRefs[i]),
+        docRef = fieldRef.docRef
+
+    if (!allRequiredMatches.contains(docRef)) {
+      continue
+    }
+
+    if (allProhibitedMatches.contains(docRef)) {
+      continue
+    }
+
+    var fieldVector = this.fieldVectors[fieldRef],
+        score = queryVectors[fieldRef.fieldName].similarity(fieldVector),
+        docMatch
+
+    if ((docMatch = matches[docRef]) !== undefined) {
+      docMatch.score += score
+      docMatch.matchData.combine(matchingFields[fieldRef])
+    } else {
+      var match = {
+        ref: docRef,
+        score: score,
+        matchData: matchingFields[fieldRef]
+      }
+      matches[docRef] = match
+      results.push(match)
+    }
+  }
+
+  /*
+   * Sort the results objects by score, highest first.
+   */
+  return results.sort(function (a, b) {
+    return b.score - a.score
+  })
+}
+
+/**
+ * Prepares the index for JSON serialization.
+ *
+ * The schema for this JSON blob will be described in a
+ * separate JSON schema file.
+ *
+ * @returns {Object}
+ */
+lunr.Index.prototype.toJSON = function () {
+  var invertedIndex = Object.keys(this.invertedIndex)
+    .sort()
+    .map(function (term) {
+      return [term, this.invertedIndex[term]]
+    }, this)
+
+  var fieldVectors = Object.keys(this.fieldVectors)
+    .map(function (ref) {
+      return [ref, this.fieldVectors[ref].toJSON()]
+    }, this)
+
+  return {
+    version: lunr.version,
+    fields: this.fields,
+    fieldVectors: fieldVectors,
+    invertedIndex: invertedIndex,
+    pipeline: this.pipeline.toJSON()
+  }
+}
+
+/**
+ * Loads a previously serialized lunr.Index
+ *
+ * @param {Object} serializedIndex - A previously serialized lunr.Index
+ * @returns {lunr.Index}
+ */
+lunr.Index.load = function (serializedIndex) {
+  var attrs = {},
+      fieldVectors = {},
+      serializedVectors = serializedIndex.fieldVectors,
+      invertedIndex = Object.create(null),
+      serializedInvertedIndex = serializedIndex.invertedIndex,
+      tokenSetBuilder = new lunr.TokenSet.Builder,
+      pipeline = lunr.Pipeline.load(serializedIndex.pipeline)
+
+  if (serializedIndex.version != lunr.version) {
+    lunr.utils.warn("Version mismatch when loading serialised index. Current version of lunr '" + lunr.version + "' does not match serialized index '" + serializedIndex.version + "'")
+  }
+
+  for (var i = 0; i < serializedVectors.length; i++) {
+    var tuple = serializedVectors[i],
+        ref = tuple[0],
+        elements = tuple[1]
+
+    fieldVectors[ref] = new lunr.Vector(elements)
+  }
+
+  for (var i = 0; i < serializedInvertedIndex.length; i++) {
+    var tuple = serializedInvertedIndex[i],
+        term = tuple[0],
+        posting = tuple[1]
+
+    tokenSetBuilder.insert(term)
+    invertedIndex[term] = posting
+  }
+
+  tokenSetBuilder.finish()
+
+  attrs.fields = serializedIndex.fields
+
+  attrs.fieldVectors = fieldVectors
+  attrs.invertedIndex = invertedIndex
+  attrs.tokenSet = tokenSetBuilder.root
+  attrs.pipeline = pipeline
+
+  return new lunr.Index(attrs)
+}
+/*!
+ * lunr.Builder
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/**
+ * lunr.Builder performs indexing on a set of documents and
+ * returns instances of lunr.Index ready for querying.
+ *
+ * All configuration of the index is done via the builder, the
+ * fields to index, the document reference, the text processing
+ * pipeline and document scoring parameters are all set on the
+ * builder before indexing.
+ *
+ * @constructor
+ * @property {string} _ref - Internal reference to the document reference field.
+ * @property {string[]} _fields - Internal reference to the document fields to index.
+ * @property {object} invertedIndex - The inverted index maps terms to document fields.
+ * @property {object} documentTermFrequencies - Keeps track of document term frequencies.
+ * @property {object} documentLengths - Keeps track of the length of documents added to the index.
+ * @property {lunr.tokenizer} tokenizer - Function for splitting strings into tokens for indexing.
+ * @property {lunr.Pipeline} pipeline - The pipeline performs text processing on tokens before indexing.
+ * @property {lunr.Pipeline} searchPipeline - A pipeline for processing search terms before querying the index.
+ * @property {number} documentCount - Keeps track of the total number of documents indexed.
+ * @property {number} _b - A parameter to control field length normalization, setting this to 0 disabled normalization, 1 fully normalizes field lengths, the default value is 0.75.
+ * @property {number} _k1 - A parameter to control how quickly an increase in term frequency results in term frequency saturation, the default value is 1.2.
+ * @property {number} termIndex - A counter incremented for each unique term, used to identify a terms position in the vector space.
+ * @property {array} metadataWhitelist - A list of metadata keys that have been whitelisted for entry in the index.
+ */
+lunr.Builder = function () {
+  this._ref = "id"
+  this._fields = Object.create(null)
+  this._documents = Object.create(null)
+  this.invertedIndex = Object.create(null)
+  this.fieldTermFrequencies = {}
+  this.fieldLengths = {}
+  this.tokenizer = lunr.tokenizer
+  this.pipeline = new lunr.Pipeline
+  this.searchPipeline = new lunr.Pipeline
+  this.documentCount = 0
+  this._b = 0.75
+  this._k1 = 1.2
+  this.termIndex = 0
+  this.metadataWhitelist = []
+}
+
+/**
+ * Sets the document field used as the document reference. Every document must have this field.
+ * The type of this field in the document should be a string, if it is not a string it will be
+ * coerced into a string by calling toString.
+ *
+ * The default ref is 'id'.
+ *
+ * The ref should _not_ be changed during indexing, it should be set before any documents are
+ * added to the index. Changing it during indexing can lead to inconsistent results.
+ *
+ * @param {string} ref - The name of the reference field in the document.
+ */
+lunr.Builder.prototype.ref = function (ref) {
+  this._ref = ref
+}
+
+/**
+ * A function that is used to extract a field from a document.
+ *
+ * Lunr expects a field to be at the top level of a document, if however the field
+ * is deeply nested within a document an extractor function can be used to extract
+ * the right field for indexing.
+ *
+ * @callback fieldExtractor
+ * @param {object} doc - The document being added to the index.
+ * @returns {?(string|object|object[])} obj - The object that will be indexed for this field.
+ * @example <caption>Extracting a nested field</caption>
+ * function (doc) { return doc.nested.field }
+ */
+
+/**
+ * Adds a field to the list of document fields that will be indexed. Every document being
+ * indexed should have this field. Null values for this field in indexed documents will
+ * not cause errors but will limit the chance of that document being retrieved by searches.
+ *
+ * All fields should be added before adding documents to the index. Adding fields after
+ * a document has been indexed will have no effect on already indexed documents.
+ *
+ * Fields can be boosted at build time. This allows terms within that field to have more
+ * importance when ranking search results. Use a field boost to specify that matches within
+ * one field are more important than other fields.
+ *
+ * @param {string} fieldName - The name of a field to index in all documents.
+ * @param {object} attributes - Optional attributes associated with this field.
+ * @param {number} [attributes.boost=1] - Boost applied to all terms within this field.
+ * @param {fieldExtractor} [attributes.extractor] - Function to extract a field from a document.
+ * @throws {RangeError} fieldName cannot contain unsupported characters '/'
+ */
+lunr.Builder.prototype.field = function (fieldName, attributes) {
+  if (/\//.test(fieldName)) {
+    throw new RangeError ("Field '" + fieldName + "' contains illegal character '/'")
+  }
+
+  this._fields[fieldName] = attributes || {}
+}
+
+/**
+ * A parameter to tune the amount of field length normalisation that is applied when
+ * calculating relevance scores. A value of 0 will completely disable any normalisation
+ * and a value of 1 will fully normalise field lengths. The default is 0.75. Values of b
+ * will be clamped to the range 0 - 1.
+ *
+ * @param {number} number - The value to set for this tuning parameter.
+ */
+lunr.Builder.prototype.b = function (number) {
+  if (number < 0) {
+    this._b = 0
+  } else if (number > 1) {
+    this._b = 1
+  } else {
+    this._b = number
+  }
+}
+
+/**
+ * A parameter that controls the speed at which a rise in term frequency results in term
+ * frequency saturation. The default value is 1.2. Setting this to a higher value will give
+ * slower saturation levels, a lower value will result in quicker saturation.
+ *
+ * @param {number} number - The value to set for this tuning parameter.
+ */
+lunr.Builder.prototype.k1 = function (number) {
+  this._k1 = number
+}
+
+/**
+ * Adds a document to the index.
+ *
+ * Before adding fields to the index the index should have been fully setup, with the document
+ * ref and all fields to index already having been specified.
+ *
+ * The document must have a field name as specified by the ref (by default this is 'id') and
+ * it should have all fields defined for indexing, though null or undefined values will not
+ * cause errors.
+ *
+ * Entire documents can be boosted at build time. Applying a boost to a document indicates that
+ * this document should rank higher in search results than other documents.
+ *
+ * @param {object} doc - The document to add to the index.
+ * @param {object} attributes - Optional attributes associated with this document.
+ * @param {number} [attributes.boost=1] - Boost applied to all terms within this document.
+ */
+lunr.Builder.prototype.add = function (doc, attributes) {
+  var docRef = doc[this._ref],
+      fields = Object.keys(this._fields)
+
+  this._documents[docRef] = attributes || {}
+  this.documentCount += 1
+
+  for (var i = 0; i < fields.length; i++) {
+    var fieldName = fields[i],
+        extractor = this._fields[fieldName].extractor,
+        field = extractor ? extractor(doc) : doc[fieldName],
+        tokens = this.tokenizer(field, {
+          fields: [fieldName]
+        }),
+        terms = this.pipeline.run(tokens),
+        fieldRef = new lunr.FieldRef (docRef, fieldName),
+        fieldTerms = Object.create(null)
+
+    this.fieldTermFrequencies[fieldRef] = fieldTerms
+    this.fieldLengths[fieldRef] = 0
+
+    // store the length of this field for this document
+    this.fieldLengths[fieldRef] += terms.length
+
+    // calculate term frequencies for this field
+    for (var j = 0; j < terms.length; j++) {
+      var term = terms[j]
+
+      if (fieldTerms[term] == undefined) {
+        fieldTerms[term] = 0
+      }
+
+      fieldTerms[term] += 1
+
+      // add to inverted index
+      // create an initial posting if one doesn't exist
+      if (this.invertedIndex[term] == undefined) {
+        var posting = Object.create(null)
+        posting["_index"] = this.termIndex
+        this.termIndex += 1
+
+        for (var k = 0; k < fields.length; k++) {
+          posting[fields[k]] = Object.create(null)
+        }
+
+        this.invertedIndex[term] = posting
+      }
+
+      // add an entry for this term/fieldName/docRef to the invertedIndex
+      if (this.invertedIndex[term][fieldName][docRef] == undefined) {
+        this.invertedIndex[term][fieldName][docRef] = Object.create(null)
+      }
+
+      // store all whitelisted metadata about this token in the
+      // inverted index
+      for (var l = 0; l < this.metadataWhitelist.length; l++) {
+        var metadataKey = this.metadataWhitelist[l],
+            metadata = term.metadata[metadataKey]
+
+        if (this.invertedIndex[term][fieldName][docRef][metadataKey] == undefined) {
+          this.invertedIndex[term][fieldName][docRef][metadataKey] = []
+        }
+
+        this.invertedIndex[term][fieldName][docRef][metadataKey].push(metadata)
+      }
+    }
+
+  }
+}
+
+/**
+ * Calculates the average document length for this index
+ *
+ * @private
+ */
+lunr.Builder.prototype.calculateAverageFieldLengths = function () {
+
+  var fieldRefs = Object.keys(this.fieldLengths),
+      numberOfFields = fieldRefs.length,
+      accumulator = {},
+      documentsWithField = {}
+
+  for (var i = 0; i < numberOfFields; i++) {
+    var fieldRef = lunr.FieldRef.fromString(fieldRefs[i]),
+        field = fieldRef.fieldName
+
+    documentsWithField[field] || (documentsWithField[field] = 0)
+    documentsWithField[field] += 1
+
+    accumulator[field] || (accumulator[field] = 0)
+    accumulator[field] += this.fieldLengths[fieldRef]
+  }
+
+  var fields = Object.keys(this._fields)
+
+  for (var i = 0; i < fields.length; i++) {
+    var fieldName = fields[i]
+    accumulator[fieldName] = accumulator[fieldName] / documentsWithField[fieldName]
+  }
+
+  this.averageFieldLength = accumulator
+}
+
+/**
+ * Builds a vector space model of every document using lunr.Vector
+ *
+ * @private
+ */
+lunr.Builder.prototype.createFieldVectors = function () {
+  var fieldVectors = {},
+      fieldRefs = Object.keys(this.fieldTermFrequencies),
+      fieldRefsLength = fieldRefs.length,
+      termIdfCache = Object.create(null)
+
+  for (var i = 0; i < fieldRefsLength; i++) {
+    var fieldRef = lunr.FieldRef.fromString(fieldRefs[i]),
+        fieldName = fieldRef.fieldName,
+        fieldLength = this.fieldLengths[fieldRef],
+        fieldVector = new lunr.Vector,
+        termFrequencies = this.fieldTermFrequencies[fieldRef],
+        terms = Object.keys(termFrequencies),
+        termsLength = terms.length
+
+
+    var fieldBoost = this._fields[fieldName].boost || 1,
+        docBoost = this._documents[fieldRef.docRef].boost || 1
+
+    for (var j = 0; j < termsLength; j++) {
+      var term = terms[j],
+          tf = termFrequencies[term],
+          termIndex = this.invertedIndex[term]._index,
+          idf, score, scoreWithPrecision
+
+      if (termIdfCache[term] === undefined) {
+        idf = lunr.idf(this.invertedIndex[term], this.documentCount)
+        termIdfCache[term] = idf
+      } else {
+        idf = termIdfCache[term]
+      }
+
+      score = idf * ((this._k1 + 1) * tf) / (this._k1 * (1 - this._b + this._b * (fieldLength / this.averageFieldLength[fieldName])) + tf)
+      score *= fieldBoost
+      score *= docBoost
+      scoreWithPrecision = Math.round(score * 1000) / 1000
+      // Converts 1.23456789 to 1.234.
+      // Reducing the precision so that the vectors take up less
+      // space when serialised. Doing it now so that they behave
+      // the same before and after serialisation. Also, this is
+      // the fastest approach to reducing a number's precision in
+      // JavaScript.
+
+      fieldVector.insert(termIndex, scoreWithPrecision)
+    }
+
+    fieldVectors[fieldRef] = fieldVector
+  }
+
+  this.fieldVectors = fieldVectors
+}
+
+/**
+ * Creates a token set of all tokens in the index using lunr.TokenSet
+ *
+ * @private
+ */
+lunr.Builder.prototype.createTokenSet = function () {
+  this.tokenSet = lunr.TokenSet.fromArray(
+    Object.keys(this.invertedIndex).sort()
+  )
+}
+
+/**
+ * Builds the index, creating an instance of lunr.Index.
+ *
+ * This completes the indexing process and should only be called
+ * once all documents have been added to the index.
+ *
+ * @returns {lunr.Index}
+ */
+lunr.Builder.prototype.build = function () {
+  this.calculateAverageFieldLengths()
+  this.createFieldVectors()
+  this.createTokenSet()
+
+  return new lunr.Index({
+    invertedIndex: this.invertedIndex,
+    fieldVectors: this.fieldVectors,
+    tokenSet: this.tokenSet,
+    fields: Object.keys(this._fields),
+    pipeline: this.searchPipeline
+  })
+}
+
+/**
+ * Applies a plugin to the index builder.
+ *
+ * A plugin is a function that is called with the index builder as its context.
+ * Plugins can be used to customise or extend the behaviour of the index
+ * in some way. A plugin is just a function, that encapsulated the custom
+ * behaviour that should be applied when building the index.
+ *
+ * The plugin function will be called with the index builder as its argument, additional
+ * arguments can also be passed when calling use. The function will be called
+ * with the index builder as its context.
+ *
+ * @param {Function} plugin The plugin to apply.
+ */
+lunr.Builder.prototype.use = function (fn) {
+  var args = Array.prototype.slice.call(arguments, 1)
+  args.unshift(this)
+  fn.apply(this, args)
+}
+/**
+ * Contains and collects metadata about a matching document.
+ * A single instance of lunr.MatchData is returned as part of every
+ * lunr.Index~Result.
+ *
+ * @constructor
+ * @param {string} term - The term this match data is associated with
+ * @param {string} field - The field in which the term was found
+ * @param {object} metadata - The metadata recorded about this term in this field
+ * @property {object} metadata - A cloned collection of metadata associated with this document.
+ * @see {@link lunr.Index~Result}
+ */
+lunr.MatchData = function (term, field, metadata) {
+  var clonedMetadata = Object.create(null),
+      metadataKeys = Object.keys(metadata || {})
+
+  // Cloning the metadata to prevent the original
+  // being mutated during match data combination.
+  // Metadata is kept in an array within the inverted
+  // index so cloning the data can be done with
+  // Array#slice
+  for (var i = 0; i < metadataKeys.length; i++) {
+    var key = metadataKeys[i]
+    clonedMetadata[key] = metadata[key].slice()
+  }
+
+  this.metadata = Object.create(null)
+
+  if (term !== undefined) {
+    this.metadata[term] = Object.create(null)
+    this.metadata[term][field] = clonedMetadata
+  }
+}
+
+/**
+ * An instance of lunr.MatchData will be created for every term that matches a
+ * document. However only one instance is required in a lunr.Index~Result. This
+ * method combines metadata from another instance of lunr.MatchData with this
+ * objects metadata.
+ *
+ * @param {lunr.MatchData} otherMatchData - Another instance of match data to merge with this one.
+ * @see {@link lunr.Index~Result}
+ */
+lunr.MatchData.prototype.combine = function (otherMatchData) {
+  var terms = Object.keys(otherMatchData.metadata)
+
+  for (var i = 0; i < terms.length; i++) {
+    var term = terms[i],
+        fields = Object.keys(otherMatchData.metadata[term])
+
+    if (this.metadata[term] == undefined) {
+      this.metadata[term] = Object.create(null)
+    }
+
+    for (var j = 0; j < fields.length; j++) {
+      var field = fields[j],
+          keys = Object.keys(otherMatchData.metadata[term][field])
+
+      if (this.metadata[term][field] == undefined) {
+        this.metadata[term][field] = Object.create(null)
+      }
+
+      for (var k = 0; k < keys.length; k++) {
+        var key = keys[k]
+
+        if (this.metadata[term][field][key] == undefined) {
+          this.metadata[term][field][key] = otherMatchData.metadata[term][field][key]
+        } else {
+          this.metadata[term][field][key] = this.metadata[term][field][key].concat(otherMatchData.metadata[term][field][key])
+        }
+
+      }
+    }
+  }
+}
+
+/**
+ * Add metadata for a term/field pair to this instance of match data.
+ *
+ * @param {string} term - The term this match data is associated with
+ * @param {string} field - The field in which the term was found
+ * @param {object} metadata - The metadata recorded about this term in this field
+ */
+lunr.MatchData.prototype.add = function (term, field, metadata) {
+  if (!(term in this.metadata)) {
+    this.metadata[term] = Object.create(null)
+    this.metadata[term][field] = metadata
+    return
+  }
+
+  if (!(field in this.metadata[term])) {
+    this.metadata[term][field] = metadata
+    return
+  }
+
+  var metadataKeys = Object.keys(metadata)
+
+  for (var i = 0; i < metadataKeys.length; i++) {
+    var key = metadataKeys[i]
+
+    if (key in this.metadata[term][field]) {
+      this.metadata[term][field][key] = this.metadata[term][field][key].concat(metadata[key])
+    } else {
+      this.metadata[term][field][key] = metadata[key]
+    }
+  }
+}
+/**
+ * A lunr.Query provides a programmatic way of defining queries to be performed
+ * against a {@link lunr.Index}.
+ *
+ * Prefer constructing a lunr.Query using the {@link lunr.Index#query} method
+ * so the query object is pre-initialized with the right index fields.
+ *
+ * @constructor
+ * @property {lunr.Query~Clause[]} clauses - An array of query clauses.
+ * @property {string[]} allFields - An array of all available fields in a lunr.Index.
+ */
+lunr.Query = function (allFields) {
+  this.clauses = []
+  this.allFields = allFields
+}
+
+/**
+ * Constants for indicating what kind of automatic wildcard insertion will be used when constructing a query clause.
+ *
+ * This allows wildcards to be added to the beginning and end of a term without having to manually do any string
+ * concatenation.
+ *
+ * The wildcard constants can be bitwise combined to select both leading and trailing wildcards.
+ *
+ * @constant
+ * @default
+ * @property {number} wildcard.NONE - The term will have no wildcards inserted, this is the default behaviour
+ * @property {number} wildcard.LEADING - Prepend the term with a wildcard, unless a leading wildcard already exists
+ * @property {number} wildcard.TRAILING - Append a wildcard to the term, unless a trailing wildcard already exists
+ * @see lunr.Query~Clause
+ * @see lunr.Query#clause
+ * @see lunr.Query#term
+ * @example <caption>query term with trailing wildcard</caption>
+ * query.term('foo', { wildcard: lunr.Query.wildcard.TRAILING })
+ * @example <caption>query term with leading and trailing wildcard</caption>
+ * query.term('foo', {
+ *   wildcard: lunr.Query.wildcard.LEADING | lunr.Query.wildcard.TRAILING
+ * })
+ */
+
+lunr.Query.wildcard = new String ("*")
+lunr.Query.wildcard.NONE = 0
+lunr.Query.wildcard.LEADING = 1
+lunr.Query.wildcard.TRAILING = 2
+
+/**
+ * Constants for indicating what kind of presence a term must have in matching documents.
+ *
+ * @constant
+ * @enum {number}
+ * @see lunr.Query~Clause
+ * @see lunr.Query#clause
+ * @see lunr.Query#term
+ * @example <caption>query term with required presence</caption>
+ * query.term('foo', { presence: lunr.Query.presence.REQUIRED })
+ */
+lunr.Query.presence = {
+  /**
+   * Term's presence in a document is optional, this is the default value.
+   */
+  OPTIONAL: 1,
+
+  /**
+   * Term's presence in a document is required, documents that do not contain
+   * this term will not be returned.
+   */
+  REQUIRED: 2,
+
+  /**
+   * Term's presence in a document is prohibited, documents that do contain
+   * this term will not be returned.
+   */
+  PROHIBITED: 3
+}
+
+/**
+ * A single clause in a {@link lunr.Query} contains a term and details on how to
+ * match that term against a {@link lunr.Index}.
+ *
+ * @typedef {Object} lunr.Query~Clause
+ * @property {string[]} fields - The fields in an index this clause should be matched against.
+ * @property {number} [boost=1] - Any boost that should be applied when matching this clause.
+ * @property {number} [editDistance] - Whether the term should have fuzzy matching applied, and how fuzzy the match should be.
+ * @property {boolean} [usePipeline] - Whether the term should be passed through the search pipeline.
+ * @property {number} [wildcard=lunr.Query.wildcard.NONE] - Whether the term should have wildcards appended or prepended.
+ * @property {number} [presence=lunr.Query.presence.OPTIONAL] - The terms presence in any matching documents.
+ */
+
+/**
+ * Adds a {@link lunr.Query~Clause} to this query.
+ *
+ * Unless the clause contains the fields to be matched all fields will be matched. In addition
+ * a default boost of 1 is applied to the clause.
+ *
+ * @param {lunr.Query~Clause} clause - The clause to add to this query.
+ * @see lunr.Query~Clause
+ * @returns {lunr.Query}
+ */
+lunr.Query.prototype.clause = function (clause) {
+  if (!('fields' in clause)) {
+    clause.fields = this.allFields
+  }
+
+  if (!('boost' in clause)) {
+    clause.boost = 1
+  }
+
+  if (!('usePipeline' in clause)) {
+    clause.usePipeline = true
+  }
+
+  if (!('wildcard' in clause)) {
+    clause.wildcard = lunr.Query.wildcard.NONE
+  }
+
+  if ((clause.wildcard & lunr.Query.wildcard.LEADING) && (clause.term.charAt(0) != lunr.Query.wildcard)) {
+    clause.term = "*" + clause.term
+  }
+
+  if ((clause.wildcard & lunr.Query.wildcard.TRAILING) && (clause.term.slice(-1) != lunr.Query.wildcard)) {
+    clause.term = "" + clause.term + "*"
+  }
+
+  if (!('presence' in clause)) {
+    clause.presence = lunr.Query.presence.OPTIONAL
+  }
+
+  this.clauses.push(clause)
+
+  return this
+}
+
+/**
+ * A negated query is one in which every clause has a presence of
+ * prohibited. These queries require some special processing to return
+ * the expected results.
+ *
+ * @returns boolean
+ */
+lunr.Query.prototype.isNegated = function () {
+  for (var i = 0; i < this.clauses.length; i++) {
+    if (this.clauses[i].presence != lunr.Query.presence.PROHIBITED) {
+      return false
+    }
+  }
+
+  return true
+}
+
+/**
+ * Adds a term to the current query, under the covers this will create a {@link lunr.Query~Clause}
+ * to the list of clauses that make up this query.
+ *
+ * The term is used as is, i.e. no tokenization will be performed by this method. Instead conversion
+ * to a token or token-like string should be done before calling this method.
+ *
+ * The term will be converted to a string by calling `toString`. Multiple terms can be passed as an
+ * array, each term in the array will share the same options.
+ *
+ * @param {object|object[]} term - The term(s) to add to the query.
+ * @param {object} [options] - Any additional properties to add to the query clause.
+ * @returns {lunr.Query}
+ * @see lunr.Query#clause
+ * @see lunr.Query~Clause
+ * @example <caption>adding a single term to a query</caption>
+ * query.term("foo")
+ * @example <caption>adding a single term to a query and specifying search fields, term boost and automatic trailing wildcard</caption>
+ * query.term("foo", {
+ *   fields: ["title"],
+ *   boost: 10,
+ *   wildcard: lunr.Query.wildcard.TRAILING
+ * })
+ * @example <caption>using lunr.tokenizer to convert a string to tokens before using them as terms</caption>
+ * query.term(lunr.tokenizer("foo bar"))
+ */
+lunr.Query.prototype.term = function (term, options) {
+  if (Array.isArray(term)) {
+    term.forEach(function (t) { this.term(t, lunr.utils.clone(options)) }, this)
+    return this
+  }
+
+  var clause = options || {}
+  clause.term = term.toString()
+
+  this.clause(clause)
+
+  return this
+}
+lunr.QueryParseError = function (message, start, end) {
+  this.name = "QueryParseError"
+  this.message = message
+  this.start = start
+  this.end = end
+}
+
+lunr.QueryParseError.prototype = new Error
+lunr.QueryLexer = function (str) {
+  this.lexemes = []
+  this.str = str
+  this.length = str.length
+  this.pos = 0
+  this.start = 0
+  this.escapeCharPositions = []
+}
+
+lunr.QueryLexer.prototype.run = function () {
+  var state = lunr.QueryLexer.lexText
+
+  while (state) {
+    state = state(this)
+  }
+}
+
+lunr.QueryLexer.prototype.sliceString = function () {
+  var subSlices = [],
+      sliceStart = this.start,
+      sliceEnd = this.pos
+
+  for (var i = 0; i < this.escapeCharPositions.length; i++) {
+    sliceEnd = this.escapeCharPositions[i]
+    subSlices.push(this.str.slice(sliceStart, sliceEnd))
+    sliceStart = sliceEnd + 1
+  }
+
+  subSlices.push(this.str.slice(sliceStart, this.pos))
+  this.escapeCharPositions.length = 0
+
+  return subSlices.join('')
+}
+
+lunr.QueryLexer.prototype.emit = function (type) {
+  this.lexemes.push({
+    type: type,
+    str: this.sliceString(),
+    start: this.start,
+    end: this.pos
+  })
+
+  this.start = this.pos
+}
+
+lunr.QueryLexer.prototype.escapeCharacter = function () {
+  this.escapeCharPositions.push(this.pos - 1)
+  this.pos += 1
+}
+
+lunr.QueryLexer.prototype.next = function () {
+  if (this.pos >= this.length) {
+    return lunr.QueryLexer.EOS
+  }
+
+  var char = this.str.charAt(this.pos)
+  this.pos += 1
+  return char
+}
+
+lunr.QueryLexer.prototype.width = function () {
+  return this.pos - this.start
+}
+
+lunr.QueryLexer.prototype.ignore = function () {
+  if (this.start == this.pos) {
+    this.pos += 1
+  }
+
+  this.start = this.pos
+}
+
+lunr.QueryLexer.prototype.backup = function () {
+  this.pos -= 1
+}
+
+lunr.QueryLexer.prototype.acceptDigitRun = function () {
+  var char, charCode
+
+  do {
+    char = this.next()
+    charCode = char.charCodeAt(0)
+  } while (charCode > 47 && charCode < 58)
+
+  if (char != lunr.QueryLexer.EOS) {
+    this.backup()
+  }
+}
+
+lunr.QueryLexer.prototype.more = function () {
+  return this.pos < this.length
+}
+
+lunr.QueryLexer.EOS = 'EOS'
+lunr.QueryLexer.FIELD = 'FIELD'
+lunr.QueryLexer.TERM = 'TERM'
+lunr.QueryLexer.EDIT_DISTANCE = 'EDIT_DISTANCE'
+lunr.QueryLexer.BOOST = 'BOOST'
+lunr.QueryLexer.PRESENCE = 'PRESENCE'
+
+lunr.QueryLexer.lexField = function (lexer) {
+  lexer.backup()
+  lexer.emit(lunr.QueryLexer.FIELD)
+  lexer.ignore()
+  return lunr.QueryLexer.lexText
+}
+
+lunr.QueryLexer.lexTerm = function (lexer) {
+  if (lexer.width() > 1) {
+    lexer.backup()
+    lexer.emit(lunr.QueryLexer.TERM)
+  }
+
+  lexer.ignore()
+
+  if (lexer.more()) {
+    return lunr.QueryLexer.lexText
+  }
+}
+
+lunr.QueryLexer.lexEditDistance = function (lexer) {
+  lexer.ignore()
+  lexer.acceptDigitRun()
+  lexer.emit(lunr.QueryLexer.EDIT_DISTANCE)
+  return lunr.QueryLexer.lexText
+}
+
+lunr.QueryLexer.lexBoost = function (lexer) {
+  lexer.ignore()
+  lexer.acceptDigitRun()
+  lexer.emit(lunr.QueryLexer.BOOST)
+  return lunr.QueryLexer.lexText
+}
+
+lunr.QueryLexer.lexEOS = function (lexer) {
+  if (lexer.width() > 0) {
+    lexer.emit(lunr.QueryLexer.TERM)
+  }
+}
+
+// This matches the separator used when tokenising fields
+// within a document. These should match otherwise it is
+// not possible to search for some tokens within a document.
+//
+// It is possible for the user to change the separator on the
+// tokenizer so it _might_ clash with any other of the special
+// characters already used within the search string, e.g. :.
+//
+// This means that it is possible to change the separator in
+// such a way that makes some words unsearchable using a search
+// string.
+lunr.QueryLexer.termSeparator = lunr.tokenizer.separator
+
+lunr.QueryLexer.lexText = function (lexer) {
+  while (true) {
+    var char = lexer.next()
+
+    if (char == lunr.QueryLexer.EOS) {
+      return lunr.QueryLexer.lexEOS
+    }
+
+    // Escape character is '\'
+    if (char.charCodeAt(0) == 92) {
+      lexer.escapeCharacter()
+      continue
+    }
+
+    if (char == ":") {
+      return lunr.QueryLexer.lexField
+    }
+
+    if (char == "~") {
+      lexer.backup()
+      if (lexer.width() > 0) {
+        lexer.emit(lunr.QueryLexer.TERM)
+      }
+      return lunr.QueryLexer.lexEditDistance
+    }
+
+    if (char == "^") {
+      lexer.backup()
+      if (lexer.width() > 0) {
+        lexer.emit(lunr.QueryLexer.TERM)
+      }
+      return lunr.QueryLexer.lexBoost
+    }
+
+    // "+" indicates term presence is required
+    // checking for length to ensure that only
+    // leading "+" are considered
+    if (char == "+" && lexer.width() === 1) {
+      lexer.emit(lunr.QueryLexer.PRESENCE)
+      return lunr.QueryLexer.lexText
+    }
+
+    // "-" indicates term presence is prohibited
+    // checking for length to ensure that only
+    // leading "-" are considered
+    if (char == "-" && lexer.width() === 1) {
+      lexer.emit(lunr.QueryLexer.PRESENCE)
+      return lunr.QueryLexer.lexText
+    }
+
+    if (char.match(lunr.QueryLexer.termSeparator)) {
+      return lunr.QueryLexer.lexTerm
+    }
+  }
+}
+
+lunr.QueryParser = function (str, query) {
+  this.lexer = new lunr.QueryLexer (str)
+  this.query = query
+  this.currentClause = {}
+  this.lexemeIdx = 0
+}
+
+lunr.QueryParser.prototype.parse = function () {
+  this.lexer.run()
+  this.lexemes = this.lexer.lexemes
+
+  var state = lunr.QueryParser.parseClause
+
+  while (state) {
+    state = state(this)
+  }
+
+  return this.query
+}
+
+lunr.QueryParser.prototype.peekLexeme = function () {
+  return this.lexemes[this.lexemeIdx]
+}
+
+lunr.QueryParser.prototype.consumeLexeme = function () {
+  var lexeme = this.peekLexeme()
+  this.lexemeIdx += 1
+  return lexeme
+}
+
+lunr.QueryParser.prototype.nextClause = function () {
+  var completedClause = this.currentClause
+  this.query.clause(completedClause)
+  this.currentClause = {}
+}
+
+lunr.QueryParser.parseClause = function (parser) {
+  var lexeme = parser.peekLexeme()
+
+  if (lexeme == undefined) {
+    return
+  }
+
+  switch (lexeme.type) {
+    case lunr.QueryLexer.PRESENCE:
+      return lunr.QueryParser.parsePresence
+    case lunr.QueryLexer.FIELD:
+      return lunr.QueryParser.parseField
+    case lunr.QueryLexer.TERM:
+      return lunr.QueryParser.parseTerm
+    default:
+      var errorMessage = "expected either a field or a term, found " + lexeme.type
+
+      if (lexeme.str.length >= 1) {
+        errorMessage += " with value '" + lexeme.str + "'"
+      }
+
+      throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)
+  }
+}
+
+lunr.QueryParser.parsePresence = function (parser) {
+  var lexeme = parser.consumeLexeme()
+
+  if (lexeme == undefined) {
+    return
+  }
+
+  switch (lexeme.str) {
+    case "-":
+      parser.currentClause.presence = lunr.Query.presence.PROHIBITED
+      break
+    case "+":
+      parser.currentClause.presence = lunr.Query.presence.REQUIRED
+      break
+    default:
+      var errorMessage = "unrecognised presence operator'" + lexeme.str + "'"
+      throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)
+  }
+
+  var nextLexeme = parser.peekLexeme()
+
+  if (nextLexeme == undefined) {
+    var errorMessage = "expecting term or field, found nothing"
+    throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)
+  }
+
+  switch (nextLexeme.type) {
+    case lunr.QueryLexer.FIELD:
+      return lunr.QueryParser.parseField
+    case lunr.QueryLexer.TERM:
+      return lunr.QueryParser.parseTerm
+    default:
+      var errorMessage = "expecting term or field, found '" + nextLexeme.type + "'"
+      throw new lunr.QueryParseError (errorMessage, nextLexeme.start, nextLexeme.end)
+  }
+}
+
+lunr.QueryParser.parseField = function (parser) {
+  var lexeme = parser.consumeLexeme()
+
+  if (lexeme == undefined) {
+    return
+  }
+
+  if (parser.query.allFields.indexOf(lexeme.str) == -1) {
+    var possibleFields = parser.query.allFields.map(function (f) { return "'" + f + "'" }).join(', '),
+        errorMessage = "unrecognised field '" + lexeme.str + "', possible fields: " + possibleFields
+
+    throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)
+  }
+
+  parser.currentClause.fields = [lexeme.str]
+
+  var nextLexeme = parser.peekLexeme()
+
+  if (nextLexeme == undefined) {
+    var errorMessage = "expecting term, found nothing"
+    throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)
+  }
+
+  switch (nextLexeme.type) {
+    case lunr.QueryLexer.TERM:
+      return lunr.QueryParser.parseTerm
+    default:
+      var errorMessage = "expecting term, found '" + nextLexeme.type + "'"
+      throw new lunr.QueryParseError (errorMessage, nextLexeme.start, nextLexeme.end)
+  }
+}
+
+lunr.QueryParser.parseTerm = function (parser) {
+  var lexeme = parser.consumeLexeme()
+
+  if (lexeme == undefined) {
+    return
+  }
+
+  parser.currentClause.term = lexeme.str.toLowerCase()
+
+  if (lexeme.str.indexOf("*") != -1) {
+    parser.currentClause.usePipeline = false
+  }
+
+  var nextLexeme = parser.peekLexeme()
+
+  if (nextLexeme == undefined) {
+    parser.nextClause()
+    return
+  }
+
+  switch (nextLexeme.type) {
+    case lunr.QueryLexer.TERM:
+      parser.nextClause()
+      return lunr.QueryParser.parseTerm
+    case lunr.QueryLexer.FIELD:
+      parser.nextClause()
+      return lunr.QueryParser.parseField
+    case lunr.QueryLexer.EDIT_DISTANCE:
+      return lunr.QueryParser.parseEditDistance
+    case lunr.QueryLexer.BOOST:
+      return lunr.QueryParser.parseBoost
+    case lunr.QueryLexer.PRESENCE:
+      parser.nextClause()
+      return lunr.QueryParser.parsePresence
+    default:
+      var errorMessage = "Unexpected lexeme type '" + nextLexeme.type + "'"
+      throw new lunr.QueryParseError (errorMessage, nextLexeme.start, nextLexeme.end)
+  }
+}
+
+lunr.QueryParser.parseEditDistance = function (parser) {
+  var lexeme = parser.consumeLexeme()
+
+  if (lexeme == undefined) {
+    return
+  }
+
+  var editDistance = parseInt(lexeme.str, 10)
+
+  if (isNaN(editDistance)) {
+    var errorMessage = "edit distance must be numeric"
+    throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)
+  }
+
+  parser.currentClause.editDistance = editDistance
+
+  var nextLexeme = parser.peekLexeme()
+
+  if (nextLexeme == undefined) {
+    parser.nextClause()
+    return
+  }
+
+  switch (nextLexeme.type) {
+    case lunr.QueryLexer.TERM:
+      parser.nextClause()
+      return lunr.QueryParser.parseTerm
+    case lunr.QueryLexer.FIELD:
+      parser.nextClause()
+      return lunr.QueryParser.parseField
+    case lunr.QueryLexer.EDIT_DISTANCE:
+      return lunr.QueryParser.parseEditDistance
+    case lunr.QueryLexer.BOOST:
+      return lunr.QueryParser.parseBoost
+    case lunr.QueryLexer.PRESENCE:
+      parser.nextClause()
+      return lunr.QueryParser.parsePresence
+    default:
+      var errorMessage = "Unexpected lexeme type '" + nextLexeme.type + "'"
+      throw new lunr.QueryParseError (errorMessage, nextLexeme.start, nextLexeme.end)
+  }
+}
+
+lunr.QueryParser.parseBoost = function (parser) {
+  var lexeme = parser.consumeLexeme()
+
+  if (lexeme == undefined) {
+    return
+  }
+
+  var boost = parseInt(lexeme.str, 10)
+
+  if (isNaN(boost)) {
+    var errorMessage = "boost must be numeric"
+    throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)
+  }
+
+  parser.currentClause.boost = boost
+
+  var nextLexeme = parser.peekLexeme()
+
+  if (nextLexeme == undefined) {
+    parser.nextClause()
+    return
+  }
+
+  switch (nextLexeme.type) {
+    case lunr.QueryLexer.TERM:
+      parser.nextClause()
+      return lunr.QueryParser.parseTerm
+    case lunr.QueryLexer.FIELD:
+      parser.nextClause()
+      return lunr.QueryParser.parseField
+    case lunr.QueryLexer.EDIT_DISTANCE:
+      return lunr.QueryParser.parseEditDistance
+    case lunr.QueryLexer.BOOST:
+      return lunr.QueryParser.parseBoost
+    case lunr.QueryLexer.PRESENCE:
+      parser.nextClause()
+      return lunr.QueryParser.parsePresence
+    default:
+      var errorMessage = "Unexpected lexeme type '" + nextLexeme.type + "'"
+      throw new lunr.QueryParseError (errorMessage, nextLexeme.start, nextLexeme.end)
+  }
+}
+
+  /**
+   * export the module via AMD, CommonJS or as a browser global
+   * Export code from https://github.com/umdjs/umd/blob/master/returnExports.js
+   */
+  ;(function (root, factory) {
+    if (typeof define === 'function' && define.amd) {
+      // AMD. Register as an anonymous module.
+      define(factory)
+    } else if (typeof exports === 'object') {
+      /**
+       * Node. Does not work with strict CommonJS, but
+       * only CommonJS-like environments that support module.exports,
+       * like Node.
+       */
+      module.exports = factory()
+    } else {
+      // Browser globals (root is window)
+      root.lunr = factory()
+    }
+  }(this, function () {
+    /**
+     * Just return a value to define the module export.
+     * This example returns an object, but the module
+     * can return a function as the exported value.
+     */
+    return lunr
+  }))
+})();
diff --git a/assets/documentation/1.27.0-rc1/search/main.js b/assets/documentation/1.27.0-rc1/search/main.js
new file mode 100644
index 000000000..a5e469d7c
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/search/main.js
@@ -0,0 +1,109 @@
+function getSearchTermFromLocation() {
+  var sPageURL = window.location.search.substring(1);
+  var sURLVariables = sPageURL.split('&');
+  for (var i = 0; i < sURLVariables.length; i++) {
+    var sParameterName = sURLVariables[i].split('=');
+    if (sParameterName[0] == 'q') {
+      return decodeURIComponent(sParameterName[1].replace(/\+/g, '%20'));
+    }
+  }
+}
+
+function joinUrl (base, path) {
+  if (path.substring(0, 1) === "/") {
+    // path starts with `/`. Thus it is absolute.
+    return path;
+  }
+  if (base.substring(base.length-1) === "/") {
+    // base ends with `/`
+    return base + path;
+  }
+  return base + "/" + path;
+}
+
+function escapeHtml (value) {
+  return value.replace(/&/g, '&amp;')
+    .replace(/"/g, '&quot;')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;');
+}
+
+function formatResult (location, title, summary) {
+  return '<article><h3><a href="' + joinUrl(base_url, location) + '">'+ escapeHtml(title) + '</a></h3><p>' + escapeHtml(summary) +'</p></article>';
+}
+
+function displayResults (results) {
+  var search_results = document.getElementById("mkdocs-search-results");
+  while (search_results.firstChild) {
+    search_results.removeChild(search_results.firstChild);
+  }
+  if (results.length > 0){
+    for (var i=0; i < results.length; i++){
+      var result = results[i];
+      var html = formatResult(result.location, result.title, result.summary);
+      search_results.insertAdjacentHTML('beforeend', html);
+    }
+  } else {
+    var noResultsText = search_results.getAttribute('data-no-results-text');
+    if (!noResultsText) {
+      noResultsText = "No results found";
+    }
+    search_results.insertAdjacentHTML('beforeend', '<p>' + noResultsText + '</p>');
+  }
+}
+
+function doSearch () {
+  var query = document.getElementById('mkdocs-search-query').value;
+  if (query.length > min_search_length) {
+    if (!window.Worker) {
+      displayResults(search(query));
+    } else {
+      searchWorker.postMessage({query: query});
+    }
+  } else {
+    // Clear results for short queries
+    displayResults([]);
+  }
+}
+
+function initSearch () {
+  var search_input = document.getElementById('mkdocs-search-query');
+  if (search_input) {
+    search_input.addEventListener("keyup", doSearch);
+  }
+  var term = getSearchTermFromLocation();
+  if (term) {
+    search_input.value = term;
+    doSearch();
+  }
+}
+
+function onWorkerMessage (e) {
+  if (e.data.allowSearch) {
+    initSearch();
+  } else if (e.data.results) {
+    var results = e.data.results;
+    displayResults(results);
+  } else if (e.data.config) {
+    min_search_length = e.data.config.min_search_length-1;
+  }
+}
+
+if (!window.Worker) {
+  console.log('Web Worker API not supported');
+  // load index in main thread
+  $.getScript(joinUrl(base_url, "search/worker.js")).done(function () {
+    console.log('Loaded worker');
+    init();
+    window.postMessage = function (msg) {
+      onWorkerMessage({data: msg});
+    };
+  }).fail(function (jqxhr, settings, exception) {
+    console.error('Could not load worker.js');
+  });
+} else {
+  // Wrap search in a web worker
+  var searchWorker = new Worker(joinUrl(base_url, "search/worker.js"));
+  searchWorker.postMessage({init: true});
+  searchWorker.onmessage = onWorkerMessage;
+}
diff --git a/assets/documentation/1.27.0-rc1/search/search_index.json b/assets/documentation/1.27.0-rc1/search/search_index.json
new file mode 100644
index 000000000..9c42ee35b
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/search/search_index.json
@@ -0,0 +1 @@
+{"config":{"indexing":"full","lang":["en"],"min_search_length":3,"prebuild_index":false,"separator":"[\\s\\-]+"},"docs":[{"location":"","text":"CloudNativePG CloudNativePG (CNPG) is an open-source operator designed to manage PostgreSQL workloads on any supported Kubernetes cluster. It fosters cloud-neutrality through seamless deployment in private, public, hybrid, and multi-cloud environments via its distributed topology feature. Built around DevOps principles, CloudNativePG embraces declarative configuration and immutable infrastructure, ensuring reliability and automation in database management. At its core, CloudNativePG introduces a custom Kubernetes resource called Cluster , representing a PostgreSQL cluster with: A single primary instance for write operations. Optional replicas for High Availability and read scaling. These instances reside within a Kubernetes namespace, allowing applications to connect seamlessly using operator-managed services. Failovers and switchovers occur transparently, eliminating the need for manual intervention. For applications inside the Kubernetes cluster, CNPG provides a microservice database approach, enabling co-location of PostgreSQL clusters and applications in the same namespace for optimized access. For applications outside the cluster, CNPG offers flexible connectivity through service templates and LoadBalancer services for direct TCP exposure. Additionally, web applications can take advantage of the native connection pooler based on PgBouncer. CloudNativePG was originally built by EDB , then released open source under Apache License 2.0. The source code repository is in GitHub . Note Based on the Operator Capability Levels model , users can expect a \"Level V - Auto Pilot\" subset of capabilities from the CloudNativePG Operator. Supported Kubernetes distributions Each minor release of CloudNativePG is designed to work with a range of Kubernetes versions, usually the ones supported by the CNCF at the time the minor version was first released. Please refer to the \"Supported releases\" page for details. Container images The CloudNativePG community maintains container images for both the operator and PostgreSQL (the operand). Operator The CloudNativePG operator container images are available on the cloudnative-pg project's GitHub Container Registry in three different flavors: Debian 12 distroless Red Hat UBI 9 micro (suffix -ubi9 ) Red Hat UBI images are primarily intended for OLM consumption. All container images are signed and include SBOM and provenance attestations, provided separately for each architecture. Operands The PostgreSQL operand container images are available for all PGDG supported versions of PostgreSQL , across multiple architectures, directly from the postgres-containers project's GitHub Container Registry . The minimal and standard container images are signed and include SBOM and provenance attestations, provided separately for each architecture. Weekly jobs ensure that critical vulnerabilities (CVEs) in the entire stack are promptly addressed. Additionally, the community provides images for the PostGIS extension . Main features Direct integration with the Kubernetes API server for High Availability, eliminating the need for external tools. Self-healing capabilities, including: Automated failover by promoting the most aligned replica. Automatic recreation of failed replicas. Planned switchover of the primary instance by promoting a selected replica. Declarative management of key PostgreSQL configurations, including: PostgreSQL settings. Roles, users, and groups. Databases, extensions, and schemas. Tablespaces (including temporary tablespaces). Flexible instance definition, supporting any number of instances (minimum 1 primary server). Scale-up/down capabilities to dynamically adjust cluster size. Read-Write and Read-Only Services, ensuring applications connect correctly: Read-Write Service : Routes connections to the primary server. Read-Only Service : Distributes connections among replicas for read workloads. Support for quorum-based and priority-based PostgreSQL Synchronous Replication. Replica clusters enabling PostgreSQL distributed topologies across multiple Kubernetes clusters (private, public, hybrid, and multi-cloud). Delayed Replica clusters for point-in-time access to historical data. Persistent volume management, including: Support for Local Persistent Volumes with PVC templates. Reuse of Persistent Volumes storage in Pods. Separate volumes for WAL files and tablespaces. Backup and Recovery via CNPG-I Plugins: Pluggable architecture for continuous physical backup and recovery. Hot and cold base backups. WAL archiving. Full and Point-In-Time Recovery (PITR). Scheduled and on-demand backups. Backup from standbys to reduce primary load. Community-Supported Barman Cloud Plugin: WAL archiving to object stores with support for full/PITR recovery. Retention policies based on configurable recovery windows. Supported as a CNPG-I plugin (recommended approach). Native Backup Methods: Continuous backup and full/PITR recovery via volume snapshots (if supported by the storage class). Native integration with Barman Cloud for object store backups via .spec.backup.barmanObjectStore ( deprecated since v1.26 ). Offline in-place major upgrades of PostgreSQL Offline and online import of PostgreSQL databases, including major upgrades: Offline Import : Direct restore from existing databases. Online Import : PostgreSQL native logical replication via the Subscription resource. High Availability physical replication slots, including synchronization of user-defined replication slots and logical decoding failover. Parallel WAL archiving and restore, ensuring high-performance data synchronization in high-write environments. TLS support, including: Secure connections and client certificate authentication. Custom TLS certificates (integrated with cert-manager ). Startup and readiness probes, including replica probes based on desired lag from the primary. Declarative rolling updates for: PostgreSQL minor versions. Operator upgrades (in-place or rolling updates). Standard output logging of PostgreSQL error messages in JSON format for easier integration with log aggregation tools. Prometheus-compatible metrics exporter ( metrics port 9187) for custom monitoring. cnpg plugin for kubectl to simplify cluster operations. Cluster hibernation for resource efficiency in inactive states. Fencing of PostgreSQL clusters (full cluster or subset) to isolate instances when needed. Connection pooling with PgBouncer for improved database efficiency. OLM (Operator Lifecycle Manager) installation support for streamlined deployments. Multi-arch container images, including Software Bill of Materials (SBOM) and provenance attestations for security compliance. Info CloudNativePG does not use StatefulSet s for managing data persistence. Instead, it directly manages Persistent Volume Claims (PVCs). See \"Custom Pod Controller\" for more details. About this guide Follow the instructions in the \"Quickstart\" to test CloudNativePG on a local Kubernetes cluster using Kind, or Minikube. In case you are not familiar with some basic terminology on Kubernetes and PostgreSQL, please consult the \"Before you start\" section . The CloudNativePG documentation is licensed under a Creative Commons Attribution 4.0 International License. Postgres, PostgreSQL, and the Slonik Logo are trademarks or registered trademarks of the PostgreSQL Community Association of Canada, and used with their permission. CloudNativePG is a Cloud Native Computing Foundation Sandbox project .","title":"CloudNativePG"},{"location":"#cloudnativepg","text":"CloudNativePG (CNPG) is an open-source operator designed to manage PostgreSQL workloads on any supported Kubernetes cluster. It fosters cloud-neutrality through seamless deployment in private, public, hybrid, and multi-cloud environments via its distributed topology feature. Built around DevOps principles, CloudNativePG embraces declarative configuration and immutable infrastructure, ensuring reliability and automation in database management. At its core, CloudNativePG introduces a custom Kubernetes resource called Cluster , representing a PostgreSQL cluster with: A single primary instance for write operations. Optional replicas for High Availability and read scaling. These instances reside within a Kubernetes namespace, allowing applications to connect seamlessly using operator-managed services. Failovers and switchovers occur transparently, eliminating the need for manual intervention. For applications inside the Kubernetes cluster, CNPG provides a microservice database approach, enabling co-location of PostgreSQL clusters and applications in the same namespace for optimized access. For applications outside the cluster, CNPG offers flexible connectivity through service templates and LoadBalancer services for direct TCP exposure. Additionally, web applications can take advantage of the native connection pooler based on PgBouncer. CloudNativePG was originally built by EDB , then released open source under Apache License 2.0. The source code repository is in GitHub . Note Based on the Operator Capability Levels model , users can expect a \"Level V - Auto Pilot\" subset of capabilities from the CloudNativePG Operator.","title":"CloudNativePG"},{"location":"#supported-kubernetes-distributions","text":"Each minor release of CloudNativePG is designed to work with a range of Kubernetes versions, usually the ones supported by the CNCF at the time the minor version was first released. Please refer to the \"Supported releases\" page for details.","title":"Supported Kubernetes distributions"},{"location":"#container-images","text":"The CloudNativePG community maintains container images for both the operator and PostgreSQL (the operand).","title":"Container images"},{"location":"#operator","text":"The CloudNativePG operator container images are available on the cloudnative-pg project's GitHub Container Registry in three different flavors: Debian 12 distroless Red Hat UBI 9 micro (suffix -ubi9 ) Red Hat UBI images are primarily intended for OLM consumption. All container images are signed and include SBOM and provenance attestations, provided separately for each architecture.","title":"Operator"},{"location":"#operands","text":"The PostgreSQL operand container images are available for all PGDG supported versions of PostgreSQL , across multiple architectures, directly from the postgres-containers project's GitHub Container Registry . The minimal and standard container images are signed and include SBOM and provenance attestations, provided separately for each architecture. Weekly jobs ensure that critical vulnerabilities (CVEs) in the entire stack are promptly addressed. Additionally, the community provides images for the PostGIS extension .","title":"Operands"},{"location":"#main-features","text":"Direct integration with the Kubernetes API server for High Availability, eliminating the need for external tools. Self-healing capabilities, including: Automated failover by promoting the most aligned replica. Automatic recreation of failed replicas. Planned switchover of the primary instance by promoting a selected replica. Declarative management of key PostgreSQL configurations, including: PostgreSQL settings. Roles, users, and groups. Databases, extensions, and schemas. Tablespaces (including temporary tablespaces). Flexible instance definition, supporting any number of instances (minimum 1 primary server). Scale-up/down capabilities to dynamically adjust cluster size. Read-Write and Read-Only Services, ensuring applications connect correctly: Read-Write Service : Routes connections to the primary server. Read-Only Service : Distributes connections among replicas for read workloads. Support for quorum-based and priority-based PostgreSQL Synchronous Replication. Replica clusters enabling PostgreSQL distributed topologies across multiple Kubernetes clusters (private, public, hybrid, and multi-cloud). Delayed Replica clusters for point-in-time access to historical data. Persistent volume management, including: Support for Local Persistent Volumes with PVC templates. Reuse of Persistent Volumes storage in Pods. Separate volumes for WAL files and tablespaces. Backup and Recovery via CNPG-I Plugins: Pluggable architecture for continuous physical backup and recovery. Hot and cold base backups. WAL archiving. Full and Point-In-Time Recovery (PITR). Scheduled and on-demand backups. Backup from standbys to reduce primary load. Community-Supported Barman Cloud Plugin: WAL archiving to object stores with support for full/PITR recovery. Retention policies based on configurable recovery windows. Supported as a CNPG-I plugin (recommended approach). Native Backup Methods: Continuous backup and full/PITR recovery via volume snapshots (if supported by the storage class). Native integration with Barman Cloud for object store backups via .spec.backup.barmanObjectStore ( deprecated since v1.26 ). Offline in-place major upgrades of PostgreSQL Offline and online import of PostgreSQL databases, including major upgrades: Offline Import : Direct restore from existing databases. Online Import : PostgreSQL native logical replication via the Subscription resource. High Availability physical replication slots, including synchronization of user-defined replication slots and logical decoding failover. Parallel WAL archiving and restore, ensuring high-performance data synchronization in high-write environments. TLS support, including: Secure connections and client certificate authentication. Custom TLS certificates (integrated with cert-manager ). Startup and readiness probes, including replica probes based on desired lag from the primary. Declarative rolling updates for: PostgreSQL minor versions. Operator upgrades (in-place or rolling updates). Standard output logging of PostgreSQL error messages in JSON format for easier integration with log aggregation tools. Prometheus-compatible metrics exporter ( metrics port 9187) for custom monitoring. cnpg plugin for kubectl to simplify cluster operations. Cluster hibernation for resource efficiency in inactive states. Fencing of PostgreSQL clusters (full cluster or subset) to isolate instances when needed. Connection pooling with PgBouncer for improved database efficiency. OLM (Operator Lifecycle Manager) installation support for streamlined deployments. Multi-arch container images, including Software Bill of Materials (SBOM) and provenance attestations for security compliance. Info CloudNativePG does not use StatefulSet s for managing data persistence. Instead, it directly manages Persistent Volume Claims (PVCs). See \"Custom Pod Controller\" for more details.","title":"Main features"},{"location":"#about-this-guide","text":"Follow the instructions in the \"Quickstart\" to test CloudNativePG on a local Kubernetes cluster using Kind, or Minikube. In case you are not familiar with some basic terminology on Kubernetes and PostgreSQL, please consult the \"Before you start\" section . The CloudNativePG documentation is licensed under a Creative Commons Attribution 4.0 International License. Postgres, PostgreSQL, and the Slonik Logo are trademarks or registered trademarks of the PostgreSQL Community Association of Canada, and used with their permission. CloudNativePG is a Cloud Native Computing Foundation Sandbox project .","title":"About this guide"},{"location":"applications/","text":"Connecting from an application Applications are supposed to work with the services created by CloudNativePG in the same Kubernetes cluster. For more information on services and how to manage them, please refer to the \"Service management\" section. Hint It is highly recommended using those services in your applications, and avoiding connecting directly to a specific PostgreSQL instance, as the latter can change during the cluster lifetime. You can use these services in your applications through: DNS resolution environment variables For the credentials to connect to PostgreSQL, you can use the secrets generated by the operator. Connection Pooling Please refer to the \"Connection Pooling\" section for information about how to take advantage of PgBouncer as a connection pooler, and create an access layer between your applications and the PostgreSQL clusters. DNS resolution You can use the Kubernetes DNS service to point to a given server. The Kubernetes DNS service is required by the operator. You can do that by using the name of the service if the application is deployed in the same namespace as the PostgreSQL cluster. In case the PostgreSQL cluster resides in a different namespace, you can use the full qualifier: service-name.namespace-name . DNS is the preferred and recommended discovery method. Environment variables If you deploy your application in the same namespace that contains the PostgreSQL cluster, you can also use environment variables to connect to the database. For example, suppose that your PostgreSQL cluster is called pg-database , you can use the following environment variables in your applications: PG_DATABASE_R_SERVICE_HOST : the IP address of the service pointing to all the PostgreSQL instances for read-only workloads PG_DATABASE_RO_SERVICE_HOST : the IP address of the service pointing to all hot-standby replicas of the cluster PG_DATABASE_RW_SERVICE_HOST : the IP address of the service pointing to the primary instance of the cluster Secrets The PostgreSQL operator will generate up to two basic-auth type secrets for every PostgreSQL cluster it deploys: [cluster name]-app (unless you have provided an existing secret through .spec.bootstrap.initdb.secret.name ) [cluster name]-superuser (if .spec.enableSuperuserAccess is set to true and you have not specified a different secret using .spec.superuserSecret ) Each secret contain the following: username password hostname to the RW service port number database name a working .pgpass file uri jdbc-uri fqdn-uri fqdn-jdbc-uri The FQDN to be used in the URIs is calculated using the Kubernetes cluster domain specified in the KUBERNETES_CLUSTER_DOMAIN configuration parameter. See the operator configuration documentation for more information about that. The -app credentials are the ones that should be used by applications connecting to the PostgreSQL cluster, and correspond to the user owning the database. The -superuser ones are supposed to be used only for administrative purposes, and correspond to the postgres user. Important Superuser access over the network is disabled by default.","title":"Connecting from an application"},{"location":"applications/#connecting-from-an-application","text":"Applications are supposed to work with the services created by CloudNativePG in the same Kubernetes cluster. For more information on services and how to manage them, please refer to the \"Service management\" section. Hint It is highly recommended using those services in your applications, and avoiding connecting directly to a specific PostgreSQL instance, as the latter can change during the cluster lifetime. You can use these services in your applications through: DNS resolution environment variables For the credentials to connect to PostgreSQL, you can use the secrets generated by the operator. Connection Pooling Please refer to the \"Connection Pooling\" section for information about how to take advantage of PgBouncer as a connection pooler, and create an access layer between your applications and the PostgreSQL clusters.","title":"Connecting from an application"},{"location":"applications/#dns-resolution","text":"You can use the Kubernetes DNS service to point to a given server. The Kubernetes DNS service is required by the operator. You can do that by using the name of the service if the application is deployed in the same namespace as the PostgreSQL cluster. In case the PostgreSQL cluster resides in a different namespace, you can use the full qualifier: service-name.namespace-name . DNS is the preferred and recommended discovery method.","title":"DNS resolution"},{"location":"applications/#environment-variables","text":"If you deploy your application in the same namespace that contains the PostgreSQL cluster, you can also use environment variables to connect to the database. For example, suppose that your PostgreSQL cluster is called pg-database , you can use the following environment variables in your applications: PG_DATABASE_R_SERVICE_HOST : the IP address of the service pointing to all the PostgreSQL instances for read-only workloads PG_DATABASE_RO_SERVICE_HOST : the IP address of the service pointing to all hot-standby replicas of the cluster PG_DATABASE_RW_SERVICE_HOST : the IP address of the service pointing to the primary instance of the cluster","title":"Environment variables"},{"location":"applications/#secrets","text":"The PostgreSQL operator will generate up to two basic-auth type secrets for every PostgreSQL cluster it deploys: [cluster name]-app (unless you have provided an existing secret through .spec.bootstrap.initdb.secret.name ) [cluster name]-superuser (if .spec.enableSuperuserAccess is set to true and you have not specified a different secret using .spec.superuserSecret ) Each secret contain the following: username password hostname to the RW service port number database name a working .pgpass file uri jdbc-uri fqdn-uri fqdn-jdbc-uri The FQDN to be used in the URIs is calculated using the Kubernetes cluster domain specified in the KUBERNETES_CLUSTER_DOMAIN configuration parameter. See the operator configuration documentation for more information about that. The -app credentials are the ones that should be used by applications connecting to the PostgreSQL cluster, and correspond to the user owning the database. The -superuser ones are supposed to be used only for administrative purposes, and correspond to the postgres user. Important Superuser access over the network is disabled by default.","title":"Secrets"},{"location":"architecture/","text":"Architecture Hint For a deeper understanding, we recommend reading our article on the CNCF blog post titled \"Recommended Architectures for PostgreSQL in Kubernetes\" , which provides valuable insights into best practices and design considerations for PostgreSQL deployments in Kubernetes. This documentation page provides an overview of the key architectural considerations for implementing a robust business continuity strategy when deploying PostgreSQL in Kubernetes. These considerations include: Deployments in stretched vs. non-stretched clusters : Evaluating the differences between deploying in stretched clusters (across 3 or more availability zones) versus non-stretched clusters (within a single availability zone). Reservation of postgres worker nodes : Isolating PostgreSQL workloads by dedicating specific worker nodes to postgres tasks, ensuring optimal performance and minimizing interference from other workloads. PostgreSQL architectures within a single Kubernetes cluster : Designing effective PostgreSQL deployments within a single Kubernetes cluster to meet high availability and performance requirements. PostgreSQL architectures across Kubernetes clusters for disaster recovery : Planning and implementing PostgreSQL architectures that span multiple Kubernetes clusters to provide comprehensive disaster recovery capabilities. Synchronizing the state PostgreSQL is a database management system and, as such, it needs to be treated as a stateful workload in Kubernetes. While stateless applications mainly use traffic redirection to achieve High Availability (HA) and Disaster Recovery (DR), in the case of a database, state must be replicated in multiple locations, preferably in a continuous and instantaneous way, by adopting either of the following two strategies: storage-level replication , normally persistent volumes application-level replication , in this specific case PostgreSQL CloudNativePG relies on application-level replication, for a simple reason: the PostgreSQL database management system comes with robust and reliable built-in physical replication capabilities based on Write Ahead Log (WAL) shipping , which have been used in production by millions of users all over the world for over a decade. PostgreSQL supports both asynchronous and synchronous streaming replication over the network, as well as asynchronous file-based log shipping (normally used as a fallback option, for example, to store WAL files in an object store). Replicas are usually called standby servers and can also be used for read-only workloads, thanks to the Hot Standby feature. Important We recommend against storage-level replication with PostgreSQL , although CloudNativePG allows you to adopt that strategy. For more information, please refer to the talk given by Chris Milsted and Gabriele Bartolini at KubeCon NA 2022 entitled \"Data On Kubernetes, Deploying And Running PostgreSQL And Patterns For Databases In a Kubernetes Cluster\" where this topic was covered in detail. Kubernetes architecture Kubernetes natively provides the possibility to span separate physical locations - also known as data centers, failure zones, or more frequently availability zones - connected to each other via redundant, low-latency, private network connectivity. Being a distributed system, the recommended minimum number of availability zones for a Kubernetes cluster is three (3), in order to make the control plane resilient to the failure of a single zone. For details, please refer to \"Running in multiple zones\" . This means that each data center is active at any time and can run workloads simultaneously. Note Most of the public Cloud Providers' managed Kubernetes services already provide 3 or more availability zones in each region. Multi-availability zone Kubernetes clusters The multi-availability zone Kubernetes architecture with three (3) or more zones is the one that we recommend for PostgreSQL usage. This scenario is typical of Kubernetes services managed by Cloud Providers. Such an architecture enables the CloudNativePG operator to control the full lifecycle of a Cluster resource across the zones within a single Kubernetes cluster, by treating all the availability zones as active: this includes, among other operations, scheduling the workloads in a declarative manner (based on affinity rules, tolerations and node selectors), automated failover, self-healing, and updates. All will work seamlessly across the zones in a single Kubernetes cluster. Please refer to the \"PostgreSQL architecture\" section below for details on how you can design your PostgreSQL clusters within the same Kubernetes cluster through shared-nothing deployments at the storage, worker node, and availability zone levels. Additionally, you can leverage Kubernetes clusters to deploy distributed PostgreSQL topologies hosting \"passive\" PostgreSQL replica clusters in different regions and managing them via declarative configuration. This setup is ideal for disaster recovery (DR), read-only operations, or cross-region availability. Important Each operator deployment can only manage operations within its local Kubernetes cluster. For operations across Kubernetes clusters, such as controlled switchover or unexpected failover, coordination must be handled manually (through GitOps, for example) or by using a higher-level cluster management tool. Single availability zone Kubernetes clusters If your Kubernetes cluster has only one availability zone, CloudNativePG still provides you with a lot of features to improve HA and DR outcomes for your PostgreSQL databases, pushing the single point of failure (SPoF) to the level of the zone as much as possible - i.e. the zone must have an outage before your CloudNativePG clusters suffer a failure. This scenario is typical of self-managed on-premise Kubernetes clusters, where only one data center is available. Single availability zone Kubernetes clusters are the only viable option when only two data centers are available within reach of a low-latency connection (typically in the same metropolitan area). Having only two zones prevents the creation of a multi-availability zone Kubernetes cluster, which requires a minimum of three zones. As a result, users must create two separate Kubernetes clusters in an active/passive configuration, with the second cluster primarily used for Disaster Recovery (see the replica cluster feature ). Hint If you are at an early stage of your Kubernetes journey, please share this document with your infrastructure team. The two data centers setup might be simply the result of a \"lift-and-shift\" transition to Kubernetes from a traditional bare-metal or VM based infrastructure, and the benefits that Kubernetes offers in a 3+ zone scenario might not have been known, or addressed at the time the infrastructure architecture was designed. Ultimately, a third physical location connected to the other two might represent a valid option to consider for organization, as it reduces the overall costs of the infrastructure by moving the day-to-day complexity from the application level down to the physical infrastructure level. Please refer to the \"PostgreSQL architecture\" section below for details on how you can design your PostgreSQL clusters within your single availability zone Kubernetes cluster through shared-nothing deployments at the storage and worker node levels only. For HA, in such a scenario it becomes even more important that the PostgreSQL instances be located on different worker nodes and do not share the same storage. For DR, you can push the SPoF above the single zone, by using additional Kubernetes clusters to define a distributed topology hosting \"passive\" PostgreSQL replica clusters . As with other Kubernetes workloads in this scenario, promotion of a Kubernetes cluster as primary must be done manually. Through the replica cluster feature , you can define a distributed PostgreSQL topology and coordinate a controlled switchover between data centers by first demoting the primary cluster and then promoting the replica cluster, without the need to re-clone the former primary. While failover is now fully declarative, automated failover across Kubernetes clusters is not within CloudNativePG's scope, as the operator can only function within a single Kubernetes cluster. Important CloudNativePG provides all the necessary primitives and probes to coordinate PostgreSQL active/passive topologies across different Kubernetes clusters through a higher-level operator or management tool. Reserving nodes for PostgreSQL workloads Whether you're operating in a multi-availability zone environment or, more critically, within a single availability zone, we strongly recommend isolating PostgreSQL workloads by dedicating specific worker nodes exclusively to postgres in production. A Kubernetes worker node dedicated to running PostgreSQL workloads is referred to as a Postgres node or postgres node. This approach ensures optimal performance and resource allocation for your database operations. Hint As a general rule of thumb, deploy Postgres nodes in multiples of three\u2014ideally with one node per availability zone. Three nodes is an optimal number because it ensures that a PostgreSQL cluster with three instances (one primary and two standby replicas) is distributed across different nodes, enhancing fault tolerance and availability. In Kubernetes, this can be achieved using node labels and taints in a declarative manner, aligning with Infrastructure as Code (IaC) practices: labels ensure that a node is capable of running postgres workloads, while taints help prevent any non- postgres workloads from being scheduled on that node. Important This methodology is the most straightforward way to ensure that PostgreSQL workloads are isolated from other workloads in terms of both computing resources and, when using locally attached disks, storage. While different PostgreSQL clusters may share the same node, you can take this a step further by using labels and taints to ensure that a node is dedicated to a single instance of a specific Cluster . Proposed node label CloudNativePG recommends using the node-role.kubernetes.io/postgres label. Since this is a reserved label ( *.kubernetes.io ), it can only be applied after a worker node is created. To assign the postgres label to a node, use the following command: kubectl label node <NODE-NAME> node-role.kubernetes.io/postgres= To ensure that a Cluster resource is scheduled on a postgres node, you must correctly configure the .spec.affinity.nodeSelector stanza in your manifests. Here\u2019s an example: spec: # <snip> affinity: # <snip> nodeSelector: node-role.kubernetes.io/postgres: \"\" Proposed node taint CloudNativePG recommends using the node-role.kubernetes.io/postgres taint. To assign the postgres taint to a node, use the following command: kubectl taint node <NODE-NAME> node-role.kubernetes.io/postgres=:NoSchedule To ensure that a Cluster resource is scheduled on a node with a postgres taint, you must correctly configure the .spec.affinity.tolerations stanza in your manifests. Here\u2019s an example: spec: # <snip> affinity: # <snip> tolerations: - key: node-role.kubernetes.io/postgres operator: Exists effect: NoSchedule PostgreSQL architecture CloudNativePG supports clusters based on asynchronous and synchronous streaming replication to manage multiple hot standby replicas within the same Kubernetes cluster, with the following specifications: One primary, with optional multiple hot standby replicas for HA Available services for applications: -rw : applications connect only to the primary instance of the cluster -ro : applications connect only to hot standby replicas for read-only-workloads (optional) -r : applications connect to any of the instances for read-only workloads (optional) Shared-nothing architecture recommended for better resilience of the PostgreSQL cluster: PostgreSQL instances should reside on different Kubernetes worker nodes and share only the network - as a result, instances should not share the storage and preferably use local volumes attached to the node they run on PostgreSQL instances should reside in different availability zones within the same Kubernetes cluster / region Important You can configure the above services through the managed.services section in the Cluster configuration. This can be done by reducing the number of services and selecting the type (default is ClusterIP ). For more details, please refer to the \"Service Management\" section below. The below diagram provides a simplistic view of the recommended shared-nothing architecture for a PostgreSQL cluster spanning across 3 different availability zones, running on separate nodes, each with dedicated local storage for PostgreSQL data. CloudNativePG automatically takes care of updating the above services if the topology of the cluster changes. For example, in case of failover, it automatically updates the -rw service to point to the promoted primary, making sure that traffic from the applications is seamlessly redirected. Replication Please refer to the \"Replication\" section for more information about how CloudNativePG relies on PostgreSQL replication, including synchronous settings. Connecting from an application Please refer to the \"Connecting from an application\" section for information about how to connect to CloudNativePG from a stateless application within the same Kubernetes cluster. Connection Pooling Please refer to the \"Connection Pooling\" section for information about how to take advantage of PgBouncer as a connection pooler, and create an access layer between your applications and the PostgreSQL clusters. Read-write workloads Applications can decide to connect to the PostgreSQL instance elected as current primary by the Kubernetes operator, as depicted in the following diagram: Applications can use the -rw suffix service. In case of temporary or permanent unavailability of the primary, for High Availability purposes CloudNativePG will trigger a failover, pointing the -rw service to another instance of the cluster. Read-only workloads Important Applications must be aware of the limitations that Hot Standby presents and familiar with the way PostgreSQL operates when dealing with these workloads. Applications can access hot standby replicas through the -ro service made available by the operator. This service enables the application to offload read-only queries from the primary node. The following diagram shows the architecture: Applications can also access any PostgreSQL instance through the -r service. Deployments across Kubernetes clusters Info CloudNativePG supports deploying PostgreSQL across multiple Kubernetes clusters through a feature that allows you to define a distributed PostgreSQL topology using replica clusters, as described in this section. In a distributed PostgreSQL cluster there can only be a single PostgreSQL instance acting as a primary at all times. This means that applications can only write inside a single Kubernetes cluster, at any time. However, for business continuity objectives it is fundamental to: reduce global recovery point objectives ( RPO ) by storing PostgreSQL backup data in multiple locations, regions and possibly using different providers (Disaster Recovery) reduce global recovery time objectives ( RTO ) by taking advantage of PostgreSQL replication beyond the primary Kubernetes cluster (High Availability) In order to address the above concerns, CloudNativePG introduces the concept of a PostgreSQL Topology that is distributed across different Kubernetes clusters and is made up of a primary PostgreSQL cluster and one or more PostgreSQL replica clusters. This feature is called distributed PostgreSQL topology with replica clusters , and it enables multi-cluster deployments in private, public, hybrid, and multi-cloud contexts. A replica cluster is a separate Cluster resource that is in continuous recovery, replicating from another source, either via WAL shipping from a WAL archive or via streaming replication from a primary or a standby (cascading). The diagram below depicts a PostgreSQL cluster spanning over two different Kubernetes clusters, where the primary cluster is in the first Kubernetes cluster and the replica cluster is in the second. The second Kubernetes cluster acts as the company's disaster recovery cluster, ready to be activated in case of disaster and unavailability of the first one. A replica cluster can have the same architecture as the primary cluster. Instead of a primary instance, a replica cluster has a designated primary instance, which is a standby server with an arbitrary number of cascading standby servers in streaming replication (symmetric architecture). The designated primary can be promoted at any time, transforming the replica cluster into a primary cluster capable of accepting write connections. This is typically triggered by: Human decision: You choose to make the other PostgreSQL cluster (or the entire Kubernetes cluster) the primary. To avoid data loss and ensure that the former primary can follow without being re-cloned (especially with large data sets), you first demote the current primary, then promote the designated primary using the API provided by CloudNativePG. Unexpected failure: If the entire Kubernetes cluster fails, you might experience data loss, but you need to fail over to the other Kubernetes cluster by promoting the PostgreSQL replica cluster. Warning CloudNativePG cannot perform any cross-cluster automated failover, as it does not have authority beyond a single Kubernetes cluster. Such operations must be performed manually or delegated to a multi-cluster/federated cluster-aware authority. Important CloudNativePG allows you to control the distributed topology via declarative configuration, enabling you to automate these procedures as part of your Infrastructure as Code (IaC) process, including GitOps. In the example above, the designated primary receives WAL updates via streaming replication ( primary_conninfo ). As a fallback, it can retrieve WAL segments from an object store using file-based WAL shipping\u2014for instance, with the Barman Cloud plugin through restore_command and barman-cloud-wal-restore . CloudNativePG allows you to define topologies with multiple replica clusters. You can also define replica clusters with a lower number of replicas, and then increase this number when the cluster is promoted to primary. Replica clusters Please refer to the \"Replica Clusters\" section for more detailed information on how physical replica clusters operate and how to define a distributed topology with read-only clusters across different Kubernetes clusters. This approach can significantly enhance your global disaster recovery and high availability (HA) strategy.","title":"Architecture"},{"location":"architecture/#architecture","text":"Hint For a deeper understanding, we recommend reading our article on the CNCF blog post titled \"Recommended Architectures for PostgreSQL in Kubernetes\" , which provides valuable insights into best practices and design considerations for PostgreSQL deployments in Kubernetes. This documentation page provides an overview of the key architectural considerations for implementing a robust business continuity strategy when deploying PostgreSQL in Kubernetes. These considerations include: Deployments in stretched vs. non-stretched clusters : Evaluating the differences between deploying in stretched clusters (across 3 or more availability zones) versus non-stretched clusters (within a single availability zone). Reservation of postgres worker nodes : Isolating PostgreSQL workloads by dedicating specific worker nodes to postgres tasks, ensuring optimal performance and minimizing interference from other workloads. PostgreSQL architectures within a single Kubernetes cluster : Designing effective PostgreSQL deployments within a single Kubernetes cluster to meet high availability and performance requirements. PostgreSQL architectures across Kubernetes clusters for disaster recovery : Planning and implementing PostgreSQL architectures that span multiple Kubernetes clusters to provide comprehensive disaster recovery capabilities.","title":"Architecture"},{"location":"architecture/#synchronizing-the-state","text":"PostgreSQL is a database management system and, as such, it needs to be treated as a stateful workload in Kubernetes. While stateless applications mainly use traffic redirection to achieve High Availability (HA) and Disaster Recovery (DR), in the case of a database, state must be replicated in multiple locations, preferably in a continuous and instantaneous way, by adopting either of the following two strategies: storage-level replication , normally persistent volumes application-level replication , in this specific case PostgreSQL CloudNativePG relies on application-level replication, for a simple reason: the PostgreSQL database management system comes with robust and reliable built-in physical replication capabilities based on Write Ahead Log (WAL) shipping , which have been used in production by millions of users all over the world for over a decade. PostgreSQL supports both asynchronous and synchronous streaming replication over the network, as well as asynchronous file-based log shipping (normally used as a fallback option, for example, to store WAL files in an object store). Replicas are usually called standby servers and can also be used for read-only workloads, thanks to the Hot Standby feature. Important We recommend against storage-level replication with PostgreSQL , although CloudNativePG allows you to adopt that strategy. For more information, please refer to the talk given by Chris Milsted and Gabriele Bartolini at KubeCon NA 2022 entitled \"Data On Kubernetes, Deploying And Running PostgreSQL And Patterns For Databases In a Kubernetes Cluster\" where this topic was covered in detail.","title":"Synchronizing the state"},{"location":"architecture/#kubernetes-architecture","text":"Kubernetes natively provides the possibility to span separate physical locations - also known as data centers, failure zones, or more frequently availability zones - connected to each other via redundant, low-latency, private network connectivity. Being a distributed system, the recommended minimum number of availability zones for a Kubernetes cluster is three (3), in order to make the control plane resilient to the failure of a single zone. For details, please refer to \"Running in multiple zones\" . This means that each data center is active at any time and can run workloads simultaneously. Note Most of the public Cloud Providers' managed Kubernetes services already provide 3 or more availability zones in each region.","title":"Kubernetes architecture"},{"location":"architecture/#multi-availability-zone-kubernetes-clusters","text":"The multi-availability zone Kubernetes architecture with three (3) or more zones is the one that we recommend for PostgreSQL usage. This scenario is typical of Kubernetes services managed by Cloud Providers. Such an architecture enables the CloudNativePG operator to control the full lifecycle of a Cluster resource across the zones within a single Kubernetes cluster, by treating all the availability zones as active: this includes, among other operations, scheduling the workloads in a declarative manner (based on affinity rules, tolerations and node selectors), automated failover, self-healing, and updates. All will work seamlessly across the zones in a single Kubernetes cluster. Please refer to the \"PostgreSQL architecture\" section below for details on how you can design your PostgreSQL clusters within the same Kubernetes cluster through shared-nothing deployments at the storage, worker node, and availability zone levels. Additionally, you can leverage Kubernetes clusters to deploy distributed PostgreSQL topologies hosting \"passive\" PostgreSQL replica clusters in different regions and managing them via declarative configuration. This setup is ideal for disaster recovery (DR), read-only operations, or cross-region availability. Important Each operator deployment can only manage operations within its local Kubernetes cluster. For operations across Kubernetes clusters, such as controlled switchover or unexpected failover, coordination must be handled manually (through GitOps, for example) or by using a higher-level cluster management tool.","title":"Multi-availability zone Kubernetes clusters"},{"location":"architecture/#single-availability-zone-kubernetes-clusters","text":"If your Kubernetes cluster has only one availability zone, CloudNativePG still provides you with a lot of features to improve HA and DR outcomes for your PostgreSQL databases, pushing the single point of failure (SPoF) to the level of the zone as much as possible - i.e. the zone must have an outage before your CloudNativePG clusters suffer a failure. This scenario is typical of self-managed on-premise Kubernetes clusters, where only one data center is available. Single availability zone Kubernetes clusters are the only viable option when only two data centers are available within reach of a low-latency connection (typically in the same metropolitan area). Having only two zones prevents the creation of a multi-availability zone Kubernetes cluster, which requires a minimum of three zones. As a result, users must create two separate Kubernetes clusters in an active/passive configuration, with the second cluster primarily used for Disaster Recovery (see the replica cluster feature ). Hint If you are at an early stage of your Kubernetes journey, please share this document with your infrastructure team. The two data centers setup might be simply the result of a \"lift-and-shift\" transition to Kubernetes from a traditional bare-metal or VM based infrastructure, and the benefits that Kubernetes offers in a 3+ zone scenario might not have been known, or addressed at the time the infrastructure architecture was designed. Ultimately, a third physical location connected to the other two might represent a valid option to consider for organization, as it reduces the overall costs of the infrastructure by moving the day-to-day complexity from the application level down to the physical infrastructure level. Please refer to the \"PostgreSQL architecture\" section below for details on how you can design your PostgreSQL clusters within your single availability zone Kubernetes cluster through shared-nothing deployments at the storage and worker node levels only. For HA, in such a scenario it becomes even more important that the PostgreSQL instances be located on different worker nodes and do not share the same storage. For DR, you can push the SPoF above the single zone, by using additional Kubernetes clusters to define a distributed topology hosting \"passive\" PostgreSQL replica clusters . As with other Kubernetes workloads in this scenario, promotion of a Kubernetes cluster as primary must be done manually. Through the replica cluster feature , you can define a distributed PostgreSQL topology and coordinate a controlled switchover between data centers by first demoting the primary cluster and then promoting the replica cluster, without the need to re-clone the former primary. While failover is now fully declarative, automated failover across Kubernetes clusters is not within CloudNativePG's scope, as the operator can only function within a single Kubernetes cluster. Important CloudNativePG provides all the necessary primitives and probes to coordinate PostgreSQL active/passive topologies across different Kubernetes clusters through a higher-level operator or management tool.","title":"Single availability zone Kubernetes clusters"},{"location":"architecture/#reserving-nodes-for-postgresql-workloads","text":"Whether you're operating in a multi-availability zone environment or, more critically, within a single availability zone, we strongly recommend isolating PostgreSQL workloads by dedicating specific worker nodes exclusively to postgres in production. A Kubernetes worker node dedicated to running PostgreSQL workloads is referred to as a Postgres node or postgres node. This approach ensures optimal performance and resource allocation for your database operations. Hint As a general rule of thumb, deploy Postgres nodes in multiples of three\u2014ideally with one node per availability zone. Three nodes is an optimal number because it ensures that a PostgreSQL cluster with three instances (one primary and two standby replicas) is distributed across different nodes, enhancing fault tolerance and availability. In Kubernetes, this can be achieved using node labels and taints in a declarative manner, aligning with Infrastructure as Code (IaC) practices: labels ensure that a node is capable of running postgres workloads, while taints help prevent any non- postgres workloads from being scheduled on that node. Important This methodology is the most straightforward way to ensure that PostgreSQL workloads are isolated from other workloads in terms of both computing resources and, when using locally attached disks, storage. While different PostgreSQL clusters may share the same node, you can take this a step further by using labels and taints to ensure that a node is dedicated to a single instance of a specific Cluster .","title":"Reserving nodes for PostgreSQL workloads"},{"location":"architecture/#proposed-node-label","text":"CloudNativePG recommends using the node-role.kubernetes.io/postgres label. Since this is a reserved label ( *.kubernetes.io ), it can only be applied after a worker node is created. To assign the postgres label to a node, use the following command: kubectl label node <NODE-NAME> node-role.kubernetes.io/postgres= To ensure that a Cluster resource is scheduled on a postgres node, you must correctly configure the .spec.affinity.nodeSelector stanza in your manifests. Here\u2019s an example: spec: # <snip> affinity: # <snip> nodeSelector: node-role.kubernetes.io/postgres: \"\"","title":"Proposed node label"},{"location":"architecture/#proposed-node-taint","text":"CloudNativePG recommends using the node-role.kubernetes.io/postgres taint. To assign the postgres taint to a node, use the following command: kubectl taint node <NODE-NAME> node-role.kubernetes.io/postgres=:NoSchedule To ensure that a Cluster resource is scheduled on a node with a postgres taint, you must correctly configure the .spec.affinity.tolerations stanza in your manifests. Here\u2019s an example: spec: # <snip> affinity: # <snip> tolerations: - key: node-role.kubernetes.io/postgres operator: Exists effect: NoSchedule","title":"Proposed node taint"},{"location":"architecture/#postgresql-architecture","text":"CloudNativePG supports clusters based on asynchronous and synchronous streaming replication to manage multiple hot standby replicas within the same Kubernetes cluster, with the following specifications: One primary, with optional multiple hot standby replicas for HA Available services for applications: -rw : applications connect only to the primary instance of the cluster -ro : applications connect only to hot standby replicas for read-only-workloads (optional) -r : applications connect to any of the instances for read-only workloads (optional) Shared-nothing architecture recommended for better resilience of the PostgreSQL cluster: PostgreSQL instances should reside on different Kubernetes worker nodes and share only the network - as a result, instances should not share the storage and preferably use local volumes attached to the node they run on PostgreSQL instances should reside in different availability zones within the same Kubernetes cluster / region Important You can configure the above services through the managed.services section in the Cluster configuration. This can be done by reducing the number of services and selecting the type (default is ClusterIP ). For more details, please refer to the \"Service Management\" section below. The below diagram provides a simplistic view of the recommended shared-nothing architecture for a PostgreSQL cluster spanning across 3 different availability zones, running on separate nodes, each with dedicated local storage for PostgreSQL data. CloudNativePG automatically takes care of updating the above services if the topology of the cluster changes. For example, in case of failover, it automatically updates the -rw service to point to the promoted primary, making sure that traffic from the applications is seamlessly redirected. Replication Please refer to the \"Replication\" section for more information about how CloudNativePG relies on PostgreSQL replication, including synchronous settings. Connecting from an application Please refer to the \"Connecting from an application\" section for information about how to connect to CloudNativePG from a stateless application within the same Kubernetes cluster. Connection Pooling Please refer to the \"Connection Pooling\" section for information about how to take advantage of PgBouncer as a connection pooler, and create an access layer between your applications and the PostgreSQL clusters.","title":"PostgreSQL architecture"},{"location":"architecture/#read-write-workloads","text":"Applications can decide to connect to the PostgreSQL instance elected as current primary by the Kubernetes operator, as depicted in the following diagram: Applications can use the -rw suffix service. In case of temporary or permanent unavailability of the primary, for High Availability purposes CloudNativePG will trigger a failover, pointing the -rw service to another instance of the cluster.","title":"Read-write workloads"},{"location":"architecture/#read-only-workloads","text":"Important Applications must be aware of the limitations that Hot Standby presents and familiar with the way PostgreSQL operates when dealing with these workloads. Applications can access hot standby replicas through the -ro service made available by the operator. This service enables the application to offload read-only queries from the primary node. The following diagram shows the architecture: Applications can also access any PostgreSQL instance through the -r service.","title":"Read-only workloads"},{"location":"architecture/#deployments-across-kubernetes-clusters","text":"Info CloudNativePG supports deploying PostgreSQL across multiple Kubernetes clusters through a feature that allows you to define a distributed PostgreSQL topology using replica clusters, as described in this section. In a distributed PostgreSQL cluster there can only be a single PostgreSQL instance acting as a primary at all times. This means that applications can only write inside a single Kubernetes cluster, at any time. However, for business continuity objectives it is fundamental to: reduce global recovery point objectives ( RPO ) by storing PostgreSQL backup data in multiple locations, regions and possibly using different providers (Disaster Recovery) reduce global recovery time objectives ( RTO ) by taking advantage of PostgreSQL replication beyond the primary Kubernetes cluster (High Availability) In order to address the above concerns, CloudNativePG introduces the concept of a PostgreSQL Topology that is distributed across different Kubernetes clusters and is made up of a primary PostgreSQL cluster and one or more PostgreSQL replica clusters. This feature is called distributed PostgreSQL topology with replica clusters , and it enables multi-cluster deployments in private, public, hybrid, and multi-cloud contexts. A replica cluster is a separate Cluster resource that is in continuous recovery, replicating from another source, either via WAL shipping from a WAL archive or via streaming replication from a primary or a standby (cascading). The diagram below depicts a PostgreSQL cluster spanning over two different Kubernetes clusters, where the primary cluster is in the first Kubernetes cluster and the replica cluster is in the second. The second Kubernetes cluster acts as the company's disaster recovery cluster, ready to be activated in case of disaster and unavailability of the first one. A replica cluster can have the same architecture as the primary cluster. Instead of a primary instance, a replica cluster has a designated primary instance, which is a standby server with an arbitrary number of cascading standby servers in streaming replication (symmetric architecture). The designated primary can be promoted at any time, transforming the replica cluster into a primary cluster capable of accepting write connections. This is typically triggered by: Human decision: You choose to make the other PostgreSQL cluster (or the entire Kubernetes cluster) the primary. To avoid data loss and ensure that the former primary can follow without being re-cloned (especially with large data sets), you first demote the current primary, then promote the designated primary using the API provided by CloudNativePG. Unexpected failure: If the entire Kubernetes cluster fails, you might experience data loss, but you need to fail over to the other Kubernetes cluster by promoting the PostgreSQL replica cluster. Warning CloudNativePG cannot perform any cross-cluster automated failover, as it does not have authority beyond a single Kubernetes cluster. Such operations must be performed manually or delegated to a multi-cluster/federated cluster-aware authority. Important CloudNativePG allows you to control the distributed topology via declarative configuration, enabling you to automate these procedures as part of your Infrastructure as Code (IaC) process, including GitOps. In the example above, the designated primary receives WAL updates via streaming replication ( primary_conninfo ). As a fallback, it can retrieve WAL segments from an object store using file-based WAL shipping\u2014for instance, with the Barman Cloud plugin through restore_command and barman-cloud-wal-restore . CloudNativePG allows you to define topologies with multiple replica clusters. You can also define replica clusters with a lower number of replicas, and then increase this number when the cluster is promoted to primary. Replica clusters Please refer to the \"Replica Clusters\" section for more detailed information on how physical replica clusters operate and how to define a distributed topology with read-only clusters across different Kubernetes clusters. This approach can significantly enhance your global disaster recovery and high availability (HA) strategy.","title":"Deployments across Kubernetes clusters"},{"location":"backup/","text":"Backup Info This section covers physical backups in PostgreSQL. While PostgreSQL also supports logical backups using the pg_dump utility, these are not suitable for business continuity and are not managed by CloudNativePG. If you still wish to use pg_dump , refer to the Troubleshooting / Emergency backup section for guidance. Important Starting with version 1.26, native backup and recovery capabilities are being progressively phased out of the core operator and moved to official CNPG-I plugins. This transition aligns with CloudNativePG's shift towards a backup-agnostic architecture , enabled by its extensible interface\u2014 CNPG-I \u2014which standardizes the management of WAL archiving , physical base backups , and corresponding recovery processes . CloudNativePG currently supports physical backups of PostgreSQL clusters in two main ways: Via CNPG-I plugins : the CloudNativePG Community officially supports the Barman Cloud Plugin for integration with object storage services. Natively , with support for: Object storage via Barman Cloud (although deprecated from 1.26 in favor of the Barman Cloud Plugin) Kubernetes Volume Snapshots , if supported by the underlying storage class Before selecting a backup strategy with CloudNativePG, it's important to familiarize yourself with the foundational concepts covered in the \"Main Concepts\" section. These include WAL archiving, hot and cold backups, performing backups from a standby, and more. Main Concepts PostgreSQL natively provides first class backup and recovery capabilities based on file system level (physical) copy. These have been successfully used for more than 15 years in mission critical production databases, helping organizations all over the world achieve their disaster recovery goals with Postgres. In CloudNativePG, the backup infrastructure for each PostgreSQL cluster is made up of the following resources: WAL archive : a location containing the WAL files (transactional logs) that are continuously written by Postgres and archived for data durability Physical base backups : a copy of all the files that PostgreSQL uses to store the data in the database (primarily the PGDATA and any tablespace) CNPG-I provides a generic and extensible interface for managing WAL archiving (both archive and restore operations), as well as the base backup and corresponding restore processes. WAL archive The WAL archive in PostgreSQL is at the heart of continuous backup , and it is fundamental for the following reasons: Hot backups : the possibility to take physical base backups from any instance in the Postgres cluster (either primary or standby) without shutting down the server; they are also known as online backups Point in Time recovery (PITR): the possibility to recover at any point in time from the first available base backup in your system Warning WAL archive alone is useless. Without a physical base backup, you cannot restore a PostgreSQL cluster. In general, the presence of a WAL archive enhances the resilience of a PostgreSQL cluster, allowing each instance to fetch any required WAL file from the archive if needed (normally the WAL archive has higher retention periods than any Postgres instance that normally recycles those files). This use case can also be extended to replica clusters , as they can simply rely on the WAL archive to synchronize across long distances, extending disaster recovery goals across different regions. When you configure a WAL archive , CloudNativePG provides out-of-the-box an RPO <= 5 minutes for disaster recovery, even across regions. Important Our recommendation is to always setup the WAL archive in production. There are known use cases \u2014 normally involving staging and development environments \u2014 where none of the above benefits are needed and the WAL archive is not necessary. RPO in this case can be any value, such as 24 hours (daily backups) or infinite (no backup at all). Cold and Hot backups Hot backups have already been defined in the previous section. They require the presence of a WAL archive, and they are the norm in any modern database management system. Cold backups , also known as offline backups, are instead physical base backups taken when the PostgreSQL instance (standby or primary) is shut down. They are consistent per definition, and they represent a snapshot of the database at the time it was shut down. As a result, PostgreSQL instances can be restarted from a cold backup without the need of a WAL archive, even though they can take advantage of it, if available (with all the benefits on the recovery side highlighted in the previous section). In those situations with a higher RPO (for example, 1 hour or 24 hours), and shorter retention periods, cold backups represent a viable option to be considered for your disaster recovery plans. Comparing Available Backup Options: Object Stores vs Volume Snapshots CloudNativePG currently supports two main approaches for physical backups: Object store\u2013based backups , via the Barman Cloud Plugin or the deprecated native integration Volume Snapshots , using the Kubernetes CSI interface and supported storage classes Important CNPG-I is designed to enable third parties to build and integrate their own backup plugins. Over time, we expect the ecosystem of supported backup solutions to grow. Object Store\u2013Based Backups Backups to an object store (e.g. AWS S3, Azure Blob, GCS): Always require WAL archiving Support hot backups only Do not support incremental or differential copies Support retention policies Volume Snapshots Native volume snapshots: Do not require WAL archiving, though its use is still strongly recommended in production Support incremental and differential copies, depending on the capabilities of the underlying storage class Support both hot and cold backups Do not support retention policies Choosing Between the Two The best approach depends on your environment and operational requirements. Consider the following factors: Object store availability : Ensure your Kubernetes cluster can access a reliable object storage solution, including a stable networking layer. Storage class capabilities : Confirm that your storage class supports CSI volume snapshots with incremental/differential features. Database size : For very large databases (VLDBs), volume snapshots are generally preferred as they enable faster recovery due to copy-on-write technology\u2014this significantly improves your Recovery Time Objective (RTO) . Data mobility : Object store\u2013based backups may offer greater flexibility for replicating or storing backups across regions or environments. Operational familiarity : Choose the method that aligns best with your team's experience and confidence in managing storage. Comparison Summary Feature Object Store Volume Snapshots WAL archiving Required Recommended 1 Cold backup \u274c \u2705 Hot backup \u2705 \u2705 Incremental copy \u274c \u2705 2 Differential copy \u274c \u2705 2 Backup from a standby \u2705 \u2705 Snapshot recovery \u274c 3 \u2705 Retention policies \u2705 \u274c Point-in-Time Recovery (PITR) \u2705 Requires WAL archive Underlying technology Barman Cloud Kubernetes API Notes: WAL archiving must currently use an object store through a plugin (or the deprecated native one). Availability of incremental and differential copies depends on the capabilities of the storage class used for PostgreSQL volumes. Snapshot recovery can be emulated by using the bootstrap.recovery.recoveryTarget.targetImmediate option. Scheduled Backups Scheduled backups are the recommended way to implement a reliable backup strategy in CloudNativePG. They are defined using the ScheduledBackup custom resource. Info For a complete list of configuration options, refer to the ScheduledBackupSpec in the API reference. Cron Schedule The schedule field defines when the backup should occur, using a six-field cron expression that includes seconds. This format follows the Go cron package specification . Warning This format differs from the traditional Unix/Linux crontab \u2014it includes a seconds field as the first entry. Example of a daily scheduled backup: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: backup-example spec: schedule: \"0 0 0 * * *\" # At midnight every day backupOwnerReference: self cluster: name: pg-backup # method: plugin, volumeSnapshot, or barmanObjectStore (default) The schedule \"0 0 0 * * *\" triggers a backup every day at midnight (00:00:00). In Kubernetes CronJobs, the equivalent expression would be 0 0 * * * , since seconds are not supported. Backup Frequency and RTO Hint The frequency of your backups directly impacts your Recovery Time Objective ( RTO ). To optimize your disaster recovery strategy based on continuous backup: Regularly test restoring from your backups. Measure the time required for a full recovery. Account for the size of base backups and the number of WAL files that must be retrieved and replayed. In most cases, a weekly base backup is sufficient. It is rare to schedule full backups more frequently than once per day. Immediate Backup To trigger a backup immediately when the ScheduledBackup is created: spec: immediate: true Pause Scheduled Backups To temporarily stop scheduled backups from running: spec: suspend: true Backup Owner Reference ( .spec.backupOwnerReference ) Controls which Kubernetes object is set as the owner of the backup resource: none : No owner reference (legacy behavior) self : The ScheduledBackup object becomes the owner cluster : The PostgreSQL cluster becomes the owner On-Demand Backups On-demand backups allow you to manually trigger a backup operation at any time by creating a Backup resource. Info For a full list of available options, see the BackupSpec in the API reference. Example: Requesting an On-Demand Backup To start an on-demand backup, apply a Backup request custom resource like the following: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: backup-example spec: method: barmanObjectStore cluster: name: pg-backup In this example, the operator will orchestrate the backup process using the barman-cloud-backup tool and store the backup in the configured object store. Monitoring Backup Progress You can check the status of the backup using: kubectl describe backup backup-example While the backup is in progress, you'll see output similar to: Name: backup-example Namespace: default ... Spec: Cluster: Name: pg-backup Status: Phase: running Started At: 2020-10-26T13:57:40Z Events: <none> Once the backup has successfully completed, the phase will be set to completed , and the output will include additional metadata: Name: backup-example Namespace: default ... Status: Backup Id: 20201026T135740 Destination Path: s3://backups/ Endpoint URL: http://minio:9000 Phase: completed S3 Credentials: Access Key Id: Name: minio Key: ACCESS_KEY_ID Secret Access Key: Name: minio Key: ACCESS_SECRET_KEY Server Name: pg-backup Started At: 2020-10-26T13:57:40Z Stopped At: 2020-10-26T13:57:44Z Important On-demand backups do not include Kubernetes secrets for the PostgreSQL superuser or application user. You should ensure these secrets are included in your broader Kubernetes cluster backup strategy. Backup Methods CloudNativePG currently supports the following backup methods for scheduled and on-demand backups: plugin \u2013 Uses a CNPG-I plugin (requires .spec.pluginConfiguration ) volumeSnapshot \u2013 Uses native Kubernetes volume snapshots barmanObjectStore \u2013 Uses Barman Cloud for object storage (deprecated starting with v1.26 in favor of the Barman Cloud Plugin , but still the default for backward compatibility) Specify the method using the .spec.method field (defaults to barmanObjectStore ). If your cluster is configured to support volume snapshots, you can enable scheduled snapshot backups like this: spec: method: volumeSnapshot To use the Barman Cloud Plugin as the backup method, set method: plugin and configure the plugin accordingly. You can find an example in the \"Performing a Base Backup\" section of the plugin documentation Backup from a Standby Taking a base backup involves reading the entire on-disk data set of a PostgreSQL instance, which can introduce I/O contention and impact the performance of the active workload. To reduce this impact, CloudNativePG supports taking backups from a standby instance , leveraging PostgreSQL\u2019s built-in capability to perform backups from read-only replicas. By default, backups are performed on the most up-to-date replica in the cluster. If no replicas are available, the backup will fall back to the primary instance . Note The examples in this section are focused on backup target selection and do not take the backup method ( spec.method ) into account, as it is not relevant to the scope being discussed. How It Works When prefer-standby is the target (the default behavior), CloudNativePG will attempt to: Identify the most synchronized standby node. Run the backup process on that standby. Fall back to the primary if no standbys are available. This strategy minimizes interference with the primary\u2019s workload. Warning Although the standby might not always be up to date with the primary, in the time continuum from the first available backup to the last archived WAL this is normally irrelevant. The base backup indeed represents the starting point from which to begin a recovery operation, including PITR. Similarly to what happens with pg_basebackup , when backing up from an online standby we do not force a switch of the WAL on the primary. This might produce unexpected results in the short term (before archive_timeout kicks in) in deployments with low write activity. Forcing Backup on the Primary To always run backups on the primary instance, explicitly set the backup target to primary in the cluster configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: [...] spec: backup: target: \"primary\" Warning Be cautious when using primary as the target for cold backups using volume snapshots , as this will require shutting down the primary instance temporarily\u2014interrupting all write operations. The same caution applies to single-instance clusters, even if you haven't explicitly set the target. Overriding the Cluster-Wide Target You can override the cluster-level target on a per-backup basis, using either Backup or ScheduledBackup resources. Here's an example of an on-demand backup: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: [...] spec: cluster: name: [...] target: \"primary\" In this example, even if the cluster\u2019s default target is prefer-standby , the backup will be taken from the primary instance. Retention Policies CloudNativePG is evolving toward a backup-agnostic architecture , where backup responsibilities are delegated to external CNPG-I plugins . These plugins are expected to offer advanced and customizable data protection features, including sophisticated retention management, that go beyond the built-in capabilities and scope of CloudNativePG. As part of this transition, the spec.backup.retentionPolicy field in the Cluster resource is deprecated and will be removed in a future release. For more details on available retention features, refer to your chosen plugin\u2019s documentation. For example: \"Retention Policies\" with Barman Cloud Plugin . Important Users are encouraged to rely on the retention mechanisms provided by the backup plugin they are using. This ensures better flexibility and consistency with the backup method in use.","title":"Backup"},{"location":"backup/#backup","text":"Info This section covers physical backups in PostgreSQL. While PostgreSQL also supports logical backups using the pg_dump utility, these are not suitable for business continuity and are not managed by CloudNativePG. If you still wish to use pg_dump , refer to the Troubleshooting / Emergency backup section for guidance. Important Starting with version 1.26, native backup and recovery capabilities are being progressively phased out of the core operator and moved to official CNPG-I plugins. This transition aligns with CloudNativePG's shift towards a backup-agnostic architecture , enabled by its extensible interface\u2014 CNPG-I \u2014which standardizes the management of WAL archiving , physical base backups , and corresponding recovery processes . CloudNativePG currently supports physical backups of PostgreSQL clusters in two main ways: Via CNPG-I plugins : the CloudNativePG Community officially supports the Barman Cloud Plugin for integration with object storage services. Natively , with support for: Object storage via Barman Cloud (although deprecated from 1.26 in favor of the Barman Cloud Plugin) Kubernetes Volume Snapshots , if supported by the underlying storage class Before selecting a backup strategy with CloudNativePG, it's important to familiarize yourself with the foundational concepts covered in the \"Main Concepts\" section. These include WAL archiving, hot and cold backups, performing backups from a standby, and more.","title":"Backup"},{"location":"backup/#main-concepts","text":"PostgreSQL natively provides first class backup and recovery capabilities based on file system level (physical) copy. These have been successfully used for more than 15 years in mission critical production databases, helping organizations all over the world achieve their disaster recovery goals with Postgres. In CloudNativePG, the backup infrastructure for each PostgreSQL cluster is made up of the following resources: WAL archive : a location containing the WAL files (transactional logs) that are continuously written by Postgres and archived for data durability Physical base backups : a copy of all the files that PostgreSQL uses to store the data in the database (primarily the PGDATA and any tablespace) CNPG-I provides a generic and extensible interface for managing WAL archiving (both archive and restore operations), as well as the base backup and corresponding restore processes.","title":"Main Concepts"},{"location":"backup/#wal-archive","text":"The WAL archive in PostgreSQL is at the heart of continuous backup , and it is fundamental for the following reasons: Hot backups : the possibility to take physical base backups from any instance in the Postgres cluster (either primary or standby) without shutting down the server; they are also known as online backups Point in Time recovery (PITR): the possibility to recover at any point in time from the first available base backup in your system Warning WAL archive alone is useless. Without a physical base backup, you cannot restore a PostgreSQL cluster. In general, the presence of a WAL archive enhances the resilience of a PostgreSQL cluster, allowing each instance to fetch any required WAL file from the archive if needed (normally the WAL archive has higher retention periods than any Postgres instance that normally recycles those files). This use case can also be extended to replica clusters , as they can simply rely on the WAL archive to synchronize across long distances, extending disaster recovery goals across different regions. When you configure a WAL archive , CloudNativePG provides out-of-the-box an RPO <= 5 minutes for disaster recovery, even across regions. Important Our recommendation is to always setup the WAL archive in production. There are known use cases \u2014 normally involving staging and development environments \u2014 where none of the above benefits are needed and the WAL archive is not necessary. RPO in this case can be any value, such as 24 hours (daily backups) or infinite (no backup at all).","title":"WAL archive"},{"location":"backup/#cold-and-hot-backups","text":"Hot backups have already been defined in the previous section. They require the presence of a WAL archive, and they are the norm in any modern database management system. Cold backups , also known as offline backups, are instead physical base backups taken when the PostgreSQL instance (standby or primary) is shut down. They are consistent per definition, and they represent a snapshot of the database at the time it was shut down. As a result, PostgreSQL instances can be restarted from a cold backup without the need of a WAL archive, even though they can take advantage of it, if available (with all the benefits on the recovery side highlighted in the previous section). In those situations with a higher RPO (for example, 1 hour or 24 hours), and shorter retention periods, cold backups represent a viable option to be considered for your disaster recovery plans.","title":"Cold and Hot backups"},{"location":"backup/#comparing-available-backup-options-object-stores-vs-volume-snapshots","text":"CloudNativePG currently supports two main approaches for physical backups: Object store\u2013based backups , via the Barman Cloud Plugin or the deprecated native integration Volume Snapshots , using the Kubernetes CSI interface and supported storage classes Important CNPG-I is designed to enable third parties to build and integrate their own backup plugins. Over time, we expect the ecosystem of supported backup solutions to grow.","title":"Comparing Available Backup Options: Object Stores vs Volume Snapshots"},{"location":"backup/#object-storebased-backups","text":"Backups to an object store (e.g. AWS S3, Azure Blob, GCS): Always require WAL archiving Support hot backups only Do not support incremental or differential copies Support retention policies","title":"Object Store\u2013Based Backups"},{"location":"backup/#volume-snapshots","text":"Native volume snapshots: Do not require WAL archiving, though its use is still strongly recommended in production Support incremental and differential copies, depending on the capabilities of the underlying storage class Support both hot and cold backups Do not support retention policies","title":"Volume Snapshots"},{"location":"backup/#choosing-between-the-two","text":"The best approach depends on your environment and operational requirements. Consider the following factors: Object store availability : Ensure your Kubernetes cluster can access a reliable object storage solution, including a stable networking layer. Storage class capabilities : Confirm that your storage class supports CSI volume snapshots with incremental/differential features. Database size : For very large databases (VLDBs), volume snapshots are generally preferred as they enable faster recovery due to copy-on-write technology\u2014this significantly improves your Recovery Time Objective (RTO) . Data mobility : Object store\u2013based backups may offer greater flexibility for replicating or storing backups across regions or environments. Operational familiarity : Choose the method that aligns best with your team's experience and confidence in managing storage.","title":"Choosing Between the Two"},{"location":"backup/#comparison-summary","text":"Feature Object Store Volume Snapshots WAL archiving Required Recommended 1 Cold backup \u274c \u2705 Hot backup \u2705 \u2705 Incremental copy \u274c \u2705 2 Differential copy \u274c \u2705 2 Backup from a standby \u2705 \u2705 Snapshot recovery \u274c 3 \u2705 Retention policies \u2705 \u274c Point-in-Time Recovery (PITR) \u2705 Requires WAL archive Underlying technology Barman Cloud Kubernetes API Notes: WAL archiving must currently use an object store through a plugin (or the deprecated native one). Availability of incremental and differential copies depends on the capabilities of the storage class used for PostgreSQL volumes. Snapshot recovery can be emulated by using the bootstrap.recovery.recoveryTarget.targetImmediate option.","title":"Comparison Summary"},{"location":"backup/#scheduled-backups","text":"Scheduled backups are the recommended way to implement a reliable backup strategy in CloudNativePG. They are defined using the ScheduledBackup custom resource. Info For a complete list of configuration options, refer to the ScheduledBackupSpec in the API reference.","title":"Scheduled Backups"},{"location":"backup/#cron-schedule","text":"The schedule field defines when the backup should occur, using a six-field cron expression that includes seconds. This format follows the Go cron package specification . Warning This format differs from the traditional Unix/Linux crontab \u2014it includes a seconds field as the first entry. Example of a daily scheduled backup: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: backup-example spec: schedule: \"0 0 0 * * *\" # At midnight every day backupOwnerReference: self cluster: name: pg-backup # method: plugin, volumeSnapshot, or barmanObjectStore (default) The schedule \"0 0 0 * * *\" triggers a backup every day at midnight (00:00:00). In Kubernetes CronJobs, the equivalent expression would be 0 0 * * * , since seconds are not supported.","title":"Cron Schedule"},{"location":"backup/#backup-frequency-and-rto","text":"Hint The frequency of your backups directly impacts your Recovery Time Objective ( RTO ). To optimize your disaster recovery strategy based on continuous backup: Regularly test restoring from your backups. Measure the time required for a full recovery. Account for the size of base backups and the number of WAL files that must be retrieved and replayed. In most cases, a weekly base backup is sufficient. It is rare to schedule full backups more frequently than once per day.","title":"Backup Frequency and RTO"},{"location":"backup/#immediate-backup","text":"To trigger a backup immediately when the ScheduledBackup is created: spec: immediate: true","title":"Immediate Backup"},{"location":"backup/#pause-scheduled-backups","text":"To temporarily stop scheduled backups from running: spec: suspend: true","title":"Pause Scheduled Backups"},{"location":"backup/#backup-owner-reference-specbackupownerreference","text":"Controls which Kubernetes object is set as the owner of the backup resource: none : No owner reference (legacy behavior) self : The ScheduledBackup object becomes the owner cluster : The PostgreSQL cluster becomes the owner","title":"Backup Owner Reference (.spec.backupOwnerReference)"},{"location":"backup/#on-demand-backups","text":"On-demand backups allow you to manually trigger a backup operation at any time by creating a Backup resource. Info For a full list of available options, see the BackupSpec in the API reference.","title":"On-Demand Backups"},{"location":"backup/#example-requesting-an-on-demand-backup","text":"To start an on-demand backup, apply a Backup request custom resource like the following: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: backup-example spec: method: barmanObjectStore cluster: name: pg-backup In this example, the operator will orchestrate the backup process using the barman-cloud-backup tool and store the backup in the configured object store.","title":"Example: Requesting an On-Demand Backup"},{"location":"backup/#monitoring-backup-progress","text":"You can check the status of the backup using: kubectl describe backup backup-example While the backup is in progress, you'll see output similar to: Name: backup-example Namespace: default ... Spec: Cluster: Name: pg-backup Status: Phase: running Started At: 2020-10-26T13:57:40Z Events: <none> Once the backup has successfully completed, the phase will be set to completed , and the output will include additional metadata: Name: backup-example Namespace: default ... Status: Backup Id: 20201026T135740 Destination Path: s3://backups/ Endpoint URL: http://minio:9000 Phase: completed S3 Credentials: Access Key Id: Name: minio Key: ACCESS_KEY_ID Secret Access Key: Name: minio Key: ACCESS_SECRET_KEY Server Name: pg-backup Started At: 2020-10-26T13:57:40Z Stopped At: 2020-10-26T13:57:44Z Important On-demand backups do not include Kubernetes secrets for the PostgreSQL superuser or application user. You should ensure these secrets are included in your broader Kubernetes cluster backup strategy.","title":"Monitoring Backup Progress"},{"location":"backup/#backup-methods","text":"CloudNativePG currently supports the following backup methods for scheduled and on-demand backups: plugin \u2013 Uses a CNPG-I plugin (requires .spec.pluginConfiguration ) volumeSnapshot \u2013 Uses native Kubernetes volume snapshots barmanObjectStore \u2013 Uses Barman Cloud for object storage (deprecated starting with v1.26 in favor of the Barman Cloud Plugin , but still the default for backward compatibility) Specify the method using the .spec.method field (defaults to barmanObjectStore ). If your cluster is configured to support volume snapshots, you can enable scheduled snapshot backups like this: spec: method: volumeSnapshot To use the Barman Cloud Plugin as the backup method, set method: plugin and configure the plugin accordingly. You can find an example in the \"Performing a Base Backup\" section of the plugin documentation","title":"Backup Methods"},{"location":"backup/#backup-from-a-standby","text":"Taking a base backup involves reading the entire on-disk data set of a PostgreSQL instance, which can introduce I/O contention and impact the performance of the active workload. To reduce this impact, CloudNativePG supports taking backups from a standby instance , leveraging PostgreSQL\u2019s built-in capability to perform backups from read-only replicas. By default, backups are performed on the most up-to-date replica in the cluster. If no replicas are available, the backup will fall back to the primary instance . Note The examples in this section are focused on backup target selection and do not take the backup method ( spec.method ) into account, as it is not relevant to the scope being discussed.","title":"Backup from a Standby"},{"location":"backup/#how-it-works","text":"When prefer-standby is the target (the default behavior), CloudNativePG will attempt to: Identify the most synchronized standby node. Run the backup process on that standby. Fall back to the primary if no standbys are available. This strategy minimizes interference with the primary\u2019s workload. Warning Although the standby might not always be up to date with the primary, in the time continuum from the first available backup to the last archived WAL this is normally irrelevant. The base backup indeed represents the starting point from which to begin a recovery operation, including PITR. Similarly to what happens with pg_basebackup , when backing up from an online standby we do not force a switch of the WAL on the primary. This might produce unexpected results in the short term (before archive_timeout kicks in) in deployments with low write activity.","title":"How It Works"},{"location":"backup/#forcing-backup-on-the-primary","text":"To always run backups on the primary instance, explicitly set the backup target to primary in the cluster configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: [...] spec: backup: target: \"primary\" Warning Be cautious when using primary as the target for cold backups using volume snapshots , as this will require shutting down the primary instance temporarily\u2014interrupting all write operations. The same caution applies to single-instance clusters, even if you haven't explicitly set the target.","title":"Forcing Backup on the Primary"},{"location":"backup/#overriding-the-cluster-wide-target","text":"You can override the cluster-level target on a per-backup basis, using either Backup or ScheduledBackup resources. Here's an example of an on-demand backup: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: [...] spec: cluster: name: [...] target: \"primary\" In this example, even if the cluster\u2019s default target is prefer-standby , the backup will be taken from the primary instance.","title":"Overriding the Cluster-Wide Target"},{"location":"backup/#retention-policies","text":"CloudNativePG is evolving toward a backup-agnostic architecture , where backup responsibilities are delegated to external CNPG-I plugins . These plugins are expected to offer advanced and customizable data protection features, including sophisticated retention management, that go beyond the built-in capabilities and scope of CloudNativePG. As part of this transition, the spec.backup.retentionPolicy field in the Cluster resource is deprecated and will be removed in a future release. For more details on available retention features, refer to your chosen plugin\u2019s documentation. For example: \"Retention Policies\" with Barman Cloud Plugin . Important Users are encouraged to rely on the retention mechanisms provided by the backup plugin they are using. This ensures better flexibility and consistency with the backup method in use.","title":"Retention Policies"},{"location":"backup_recovery/","text":"Backup and Recovery Backup and recovery are in two separate sections.","title":"Backup and Recovery"},{"location":"backup_recovery/#backup-and-recovery","text":"Backup and recovery are in two separate sections.","title":"Backup and Recovery"},{"location":"before_you_start/","text":"Before You Start Before we get started, it is essential to go over some terminology that is specific to Kubernetes and PostgreSQL. Kubernetes terminology Node A node is a worker machine in Kubernetes, either virtual or physical, where all services necessary to run pods are managed by the control plane node(s). Postgres Node A Postgres node is a Kubernetes worker node dedicated to running PostgreSQL workloads. This is achieved by applying the node-role.kubernetes.io label and taint, as proposed by CloudNativePG . It is also referred to as a postgres node. Pod A pod is the smallest computing unit that can be deployed in a Kubernetes cluster and is composed of one or more containers that share network and storage. Service A service is an abstraction that exposes as a network service an application that runs on a group of pods and standardizes important features such as service discovery across applications, load balancing, failover, and so on. Secret A secret is an object that is designed to store small amounts of sensitive data such as passwords, access keys, or tokens, and use them in pods. Storage Class A storage class allows an administrator to define the classes of storage in a cluster, including provisioner (such as AWS EBS), reclaim policies, mount options, volume expansion, and so on. Persistent Volume A persistent volume (PV) is a resource in a Kubernetes cluster that represents storage that has been either manually provisioned by an administrator or dynamically provisioned by a storage class controller. A PV is associated with a pod using a persistent volume claim and its lifecycle is independent of any pod that uses it. Normally, a PV is a network volume, especially in the public cloud. A local persistent volume (LPV) is a persistent volume that exists only on the particular node where the pod that uses it is running. Persistent Volume Claim A persistent volume claim (PVC) represents a request for storage, which might include size, access mode, or a particular storage class. Similar to how a pod consumes node resources, a PVC consumes the resources of a PV. Namespace A namespace is a logical and isolated subset of a Kubernetes cluster and can be seen as a virtual cluster within the wider physical cluster. Namespaces allow administrators to create separated environments based on projects, departments, teams, and so on. RBAC Role Based Access Control (RBAC), also known as role-based security , is a method used in computer systems security to restrict access to the network and resources of a system to authorized users only. Kubernetes has a native API to control roles at the namespace and cluster level and associate them with specific resources and individuals. CRD A custom resource definition (CRD) is an extension of the Kubernetes API and allows developers to create new data types and objects, called custom resources . Operator An operator is a custom resource that automates those steps that are normally performed by a human operator when managing one or more applications or given services. An operator assists Kubernetes in making sure that the resource's defined state always matches the observed one. kubectl kubectl is the command-line tool used to manage a Kubernetes cluster. CloudNativePG requires a Kubernetes version supported by the community. Please refer to the \"Supported releases\" page for details. PostgreSQL terminology Instance A Postgres server process running and listening on a pair \"IP address(es)\" and \"TCP port\" (usually 5432). Primary A PostgreSQL instance that can accept both read and write operations. Replica A PostgreSQL instance replicating from the only primary instance in a cluster and is kept updated by reading a stream of Write-Ahead Log (WAL) records. A replica is also known as standby or secondary server. PostgreSQL relies on physical streaming replication (async/sync) and file-based log shipping (async). Hot Standby PostgreSQL feature that allows a replica to accept read-only workloads. Cluster To be intended as High Availability (HA) Cluster: a set of PostgreSQL instances made up by a single primary and an optional arbitrary number of replicas. Replica Cluster A CloudNativePG Cluster that is in continuous recovery mode from a selected PostgreSQL cluster, normally residing outside the Kubernetes cluster. It is a feature that enables multi-cluster deployments in private, public, hybrid, and multi-cloud contexts. Designated Primary A PostgreSQL standby instance in a replica cluster that is in continuous recovery from another PostgreSQL cluster and that is designated to become primary in case the replica cluster becomes primary. Superuser In PostgreSQL a superuser is any role with both LOGIN and SUPERUSER privileges. For security reasons, CloudNativePG performs administrative tasks by connecting to the postgres database as the postgres user via peer authentication over the local Unix Domain Socket. WAL Write-Ahead Logging (WAL) is a standard method for ensuring data integrity in database management systems. PVC group A PVC group in CloudNativePG's terminology is a group of related PVCs belonging to the same PostgreSQL instance, namely the main volume containing the PGDATA ( storage ) and the volume for WALs ( walStorage ). RTO Acronym for \"recovery time objective\", the amount of time a system can be unavailable without adversely impacting the application. RPO Acronym for \"recovery point objective\", a calculation of the level of acceptable data loss following a disaster recovery scenario. Cloud terminology Region A region in the Cloud is an isolated and independent geographic area organized in availability zones . Zones within a region have very little round-trip network latency. Zone An availability zone in the Cloud (also known as zone ) is an area in a region where resources can be deployed. Usually, an availability zone corresponds to a data center or an isolated building of the same data center. What to do next Now that you have familiarized with the terminology, you can decide to test CloudNativePG on your laptop using a local cluster before deploying the operator in your selected cloud environment.","title":"Before You Start"},{"location":"before_you_start/#before-you-start","text":"Before we get started, it is essential to go over some terminology that is specific to Kubernetes and PostgreSQL.","title":"Before You Start"},{"location":"before_you_start/#kubernetes-terminology","text":"Node A node is a worker machine in Kubernetes, either virtual or physical, where all services necessary to run pods are managed by the control plane node(s). Postgres Node A Postgres node is a Kubernetes worker node dedicated to running PostgreSQL workloads. This is achieved by applying the node-role.kubernetes.io label and taint, as proposed by CloudNativePG . It is also referred to as a postgres node. Pod A pod is the smallest computing unit that can be deployed in a Kubernetes cluster and is composed of one or more containers that share network and storage. Service A service is an abstraction that exposes as a network service an application that runs on a group of pods and standardizes important features such as service discovery across applications, load balancing, failover, and so on. Secret A secret is an object that is designed to store small amounts of sensitive data such as passwords, access keys, or tokens, and use them in pods. Storage Class A storage class allows an administrator to define the classes of storage in a cluster, including provisioner (such as AWS EBS), reclaim policies, mount options, volume expansion, and so on. Persistent Volume A persistent volume (PV) is a resource in a Kubernetes cluster that represents storage that has been either manually provisioned by an administrator or dynamically provisioned by a storage class controller. A PV is associated with a pod using a persistent volume claim and its lifecycle is independent of any pod that uses it. Normally, a PV is a network volume, especially in the public cloud. A local persistent volume (LPV) is a persistent volume that exists only on the particular node where the pod that uses it is running. Persistent Volume Claim A persistent volume claim (PVC) represents a request for storage, which might include size, access mode, or a particular storage class. Similar to how a pod consumes node resources, a PVC consumes the resources of a PV. Namespace A namespace is a logical and isolated subset of a Kubernetes cluster and can be seen as a virtual cluster within the wider physical cluster. Namespaces allow administrators to create separated environments based on projects, departments, teams, and so on. RBAC Role Based Access Control (RBAC), also known as role-based security , is a method used in computer systems security to restrict access to the network and resources of a system to authorized users only. Kubernetes has a native API to control roles at the namespace and cluster level and associate them with specific resources and individuals. CRD A custom resource definition (CRD) is an extension of the Kubernetes API and allows developers to create new data types and objects, called custom resources . Operator An operator is a custom resource that automates those steps that are normally performed by a human operator when managing one or more applications or given services. An operator assists Kubernetes in making sure that the resource's defined state always matches the observed one. kubectl kubectl is the command-line tool used to manage a Kubernetes cluster. CloudNativePG requires a Kubernetes version supported by the community. Please refer to the \"Supported releases\" page for details.","title":"Kubernetes terminology"},{"location":"before_you_start/#postgresql-terminology","text":"Instance A Postgres server process running and listening on a pair \"IP address(es)\" and \"TCP port\" (usually 5432). Primary A PostgreSQL instance that can accept both read and write operations. Replica A PostgreSQL instance replicating from the only primary instance in a cluster and is kept updated by reading a stream of Write-Ahead Log (WAL) records. A replica is also known as standby or secondary server. PostgreSQL relies on physical streaming replication (async/sync) and file-based log shipping (async). Hot Standby PostgreSQL feature that allows a replica to accept read-only workloads. Cluster To be intended as High Availability (HA) Cluster: a set of PostgreSQL instances made up by a single primary and an optional arbitrary number of replicas. Replica Cluster A CloudNativePG Cluster that is in continuous recovery mode from a selected PostgreSQL cluster, normally residing outside the Kubernetes cluster. It is a feature that enables multi-cluster deployments in private, public, hybrid, and multi-cloud contexts. Designated Primary A PostgreSQL standby instance in a replica cluster that is in continuous recovery from another PostgreSQL cluster and that is designated to become primary in case the replica cluster becomes primary. Superuser In PostgreSQL a superuser is any role with both LOGIN and SUPERUSER privileges. For security reasons, CloudNativePG performs administrative tasks by connecting to the postgres database as the postgres user via peer authentication over the local Unix Domain Socket. WAL Write-Ahead Logging (WAL) is a standard method for ensuring data integrity in database management systems. PVC group A PVC group in CloudNativePG's terminology is a group of related PVCs belonging to the same PostgreSQL instance, namely the main volume containing the PGDATA ( storage ) and the volume for WALs ( walStorage ). RTO Acronym for \"recovery time objective\", the amount of time a system can be unavailable without adversely impacting the application. RPO Acronym for \"recovery point objective\", a calculation of the level of acceptable data loss following a disaster recovery scenario.","title":"PostgreSQL terminology"},{"location":"before_you_start/#cloud-terminology","text":"Region A region in the Cloud is an isolated and independent geographic area organized in availability zones . Zones within a region have very little round-trip network latency. Zone An availability zone in the Cloud (also known as zone ) is an area in a region where resources can be deployed. Usually, an availability zone corresponds to a data center or an isolated building of the same data center.","title":"Cloud terminology"},{"location":"before_you_start/#what-to-do-next","text":"Now that you have familiarized with the terminology, you can decide to test CloudNativePG on your laptop using a local cluster before deploying the operator in your selected cloud environment.","title":"What to do next"},{"location":"benchmarking/","text":"Benchmarking The CNPG kubectl plugin provides an easy way for benchmarking a PostgreSQL deployment in Kubernetes using CloudNativePG. Benchmarking is focused on two aspects: the database , by relying on pgbench the storage , by relying on fio Important pgbench and fio must be run in a staging or pre-production environment. Do not use these plugins in a production environment, as it might have catastrophic consequences on your databases and the other workloads/applications that run in the same shared environment. pgbench The kubectl CNPG plugin command pgbench executes a user-defined pgbench job against an existing Postgres Cluster. Through the --dry-run flag you can generate the manifest of the job for later modification/execution. A common command structure with pgbench is the following: kubectl cnpg pgbench \\ -n <namespace> <cluster-name> \\ --job-name <pgbench-job> \\ --db-name <db-name> \\ -- <pgbench options> Important Please refer to the pgbench documentation for information about the specific options to be used in your jobs. This example creates a job called pgbench-init that initializes for pgbench OLTP-like purposes the app database in a Cluster named cluster-example , using a scale factor of 1000: kubectl cnpg pgbench \\ --job-name pgbench-init \\ cluster-example \\ -- --initialize --scale 1000 Note This will generate a database with 100000000 records, taking approximately 13GB of space on disk. You can see the progress of the job with: kubectl logs jobs/pgbench-run The following example creates a job called pgbench-run executing pgbench against the previously initialized database for 30 seconds, using a single connection: kubectl cnpg pgbench \\ --job-name pgbench-run \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 The next example runs pgbench against an existing database by using the --db-name flag and the pgbench namespace: kubectl cnpg pgbench \\ --db-name pgbench \\ --job-name pgbench-job \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 By default, jobs do not expire. You can enable automatic deletion with the --ttl flag. The job will be deleted after the specified duration (in seconds). kubectl cnpg pgbench \\ --job-name pgbench-run \\ --ttl 600 \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 If you want to run a pgbench job on a specific worker node, you can use the --node-selector option. Suppose you want to run the previous initialization job on a node having the workload=pgbench label, you can run: kubectl cnpg pgbench \\ --db-name pgbench \\ --job-name pgbench-init \\ --node-selector workload=pgbench \\ cluster-example \\ -- --initialize --scale 1000 The job status can be fetched by running: kubectl get job/pgbench-job -n <namespace> NAME COMPLETIONS DURATION AGE job-name 1/1 15s 41s Once the job is completed the results can be gathered by executing: kubectl logs job/pgbench-job -n <namespace> fio The kubectl CNPG plugin command fio executes a fio job with default values and read operations. Through the --dry-run flag you can generate the manifest of the job for later modification/execution. Note The kubectl plugin command fio will create a deployment with predefined fio job values using a ConfigMap. If you want to provide custom job values, we recommend generating a manifest using the --dry-run flag and providing your custom job values in the generated ConfigMap. Example of default usage: kubectl cnpg fio <fio-name> Example with custom values: kubectl cnpg fio <fio-name> \\ -n <namespace> \\ --storageClass <name> \\ --pvcSize <size> Example of how to run the fio command against a StorageClass named standard and pvcSize: 2Gi in the fio namespace: kubectl cnpg fio fio-job \\ -n fio \\ --storageClass standard \\ --pvcSize 2Gi The deployment status can be fetched by running: kubectl get deployment/fio-job -n fio NAME READY UP-TO-DATE AVAILABLE AGE fio-job 1/1 1 1 14s After running kubectl plugin command fio . It will: Create a PVC Create a ConfigMap representing the configuration of a fio job Create a fio deployment composed by a single Pod, which will run fio on the PVC, create graphs after completing the benchmark and start serving the generated files with a webserver. We use the fio-tools image for that. The Pod created by the deployment will be ready when it starts serving the results. You can forward the port of the pod created by the deployment kubectl port-forward -n <namespace> deployment/<fio-name> 8000 and then use a browser and connect to http://localhost:8000/ to get the data. The default 8k block size has been chosen to emulate a PostgreSQL workload. Disks that cap the amount of available IOPS can show very different throughput values when changing this parameter. Below is an example diagram of sequential writes on a local disk mounted on a dedicated Kubernetes node (1 hour benchmark): After all testing is done, fio deployment and resources can be deleted by: kubectl cnpg fio <fio-job-name> --dry-run | kubectl delete -f - make sure use the same name which was used to create the fio deployment and add namespace if applicable.","title":"Benchmarking"},{"location":"benchmarking/#benchmarking","text":"The CNPG kubectl plugin provides an easy way for benchmarking a PostgreSQL deployment in Kubernetes using CloudNativePG. Benchmarking is focused on two aspects: the database , by relying on pgbench the storage , by relying on fio Important pgbench and fio must be run in a staging or pre-production environment. Do not use these plugins in a production environment, as it might have catastrophic consequences on your databases and the other workloads/applications that run in the same shared environment.","title":"Benchmarking"},{"location":"benchmarking/#pgbench","text":"The kubectl CNPG plugin command pgbench executes a user-defined pgbench job against an existing Postgres Cluster. Through the --dry-run flag you can generate the manifest of the job for later modification/execution. A common command structure with pgbench is the following: kubectl cnpg pgbench \\ -n <namespace> <cluster-name> \\ --job-name <pgbench-job> \\ --db-name <db-name> \\ -- <pgbench options> Important Please refer to the pgbench documentation for information about the specific options to be used in your jobs. This example creates a job called pgbench-init that initializes for pgbench OLTP-like purposes the app database in a Cluster named cluster-example , using a scale factor of 1000: kubectl cnpg pgbench \\ --job-name pgbench-init \\ cluster-example \\ -- --initialize --scale 1000 Note This will generate a database with 100000000 records, taking approximately 13GB of space on disk. You can see the progress of the job with: kubectl logs jobs/pgbench-run The following example creates a job called pgbench-run executing pgbench against the previously initialized database for 30 seconds, using a single connection: kubectl cnpg pgbench \\ --job-name pgbench-run \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 The next example runs pgbench against an existing database by using the --db-name flag and the pgbench namespace: kubectl cnpg pgbench \\ --db-name pgbench \\ --job-name pgbench-job \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 By default, jobs do not expire. You can enable automatic deletion with the --ttl flag. The job will be deleted after the specified duration (in seconds). kubectl cnpg pgbench \\ --job-name pgbench-run \\ --ttl 600 \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 If you want to run a pgbench job on a specific worker node, you can use the --node-selector option. Suppose you want to run the previous initialization job on a node having the workload=pgbench label, you can run: kubectl cnpg pgbench \\ --db-name pgbench \\ --job-name pgbench-init \\ --node-selector workload=pgbench \\ cluster-example \\ -- --initialize --scale 1000 The job status can be fetched by running: kubectl get job/pgbench-job -n <namespace> NAME COMPLETIONS DURATION AGE job-name 1/1 15s 41s Once the job is completed the results can be gathered by executing: kubectl logs job/pgbench-job -n <namespace>","title":"pgbench"},{"location":"benchmarking/#fio","text":"The kubectl CNPG plugin command fio executes a fio job with default values and read operations. Through the --dry-run flag you can generate the manifest of the job for later modification/execution. Note The kubectl plugin command fio will create a deployment with predefined fio job values using a ConfigMap. If you want to provide custom job values, we recommend generating a manifest using the --dry-run flag and providing your custom job values in the generated ConfigMap. Example of default usage: kubectl cnpg fio <fio-name> Example with custom values: kubectl cnpg fio <fio-name> \\ -n <namespace> \\ --storageClass <name> \\ --pvcSize <size> Example of how to run the fio command against a StorageClass named standard and pvcSize: 2Gi in the fio namespace: kubectl cnpg fio fio-job \\ -n fio \\ --storageClass standard \\ --pvcSize 2Gi The deployment status can be fetched by running: kubectl get deployment/fio-job -n fio NAME READY UP-TO-DATE AVAILABLE AGE fio-job 1/1 1 1 14s After running kubectl plugin command fio . It will: Create a PVC Create a ConfigMap representing the configuration of a fio job Create a fio deployment composed by a single Pod, which will run fio on the PVC, create graphs after completing the benchmark and start serving the generated files with a webserver. We use the fio-tools image for that. The Pod created by the deployment will be ready when it starts serving the results. You can forward the port of the pod created by the deployment kubectl port-forward -n <namespace> deployment/<fio-name> 8000 and then use a browser and connect to http://localhost:8000/ to get the data. The default 8k block size has been chosen to emulate a PostgreSQL workload. Disks that cap the amount of available IOPS can show very different throughput values when changing this parameter. Below is an example diagram of sequential writes on a local disk mounted on a dedicated Kubernetes node (1 hour benchmark): After all testing is done, fio deployment and resources can be deleted by: kubectl cnpg fio <fio-job-name> --dry-run | kubectl delete -f - make sure use the same name which was used to create the fio deployment and add namespace if applicable.","title":"fio"},{"location":"bootstrap/","text":"Bootstrap This section describes the options available to create a new PostgreSQL cluster and the design rationale behind them. There are primarily two ways to bootstrap a new cluster: from scratch ( initdb ) from an existing PostgreSQL cluster, either directly ( pg_basebackup ) or indirectly through a physical base backup ( recovery ) The initdb bootstrap also provides the option to import one or more databases from an existing PostgreSQL cluster, even if it's outside Kubernetes or running a different major version of PostgreSQL. For more detailed information about this feature, please refer to the \"Importing Postgres databases\" section. Important Bootstrapping from an existing cluster enables the creation of a replica cluster \u2014an independent PostgreSQL cluster that remains in continuous recovery, stays synchronized with the source cluster, and accepts read-only connections. For more details, refer to the Replica Cluster section . Warning CloudNativePG requires both the postgres user and database to always exist. Using the local Unix Domain Socket, it needs to connect as the postgres user to the postgres database via peer authentication in order to perform administrative tasks on the cluster. DO NOT DELETE the postgres user or the postgres database!!! Info CloudNativePG is gradually introducing support for Kubernetes' native VolumeSnapshot API for both incremental and differential copy in backup and recovery operations - if supported by the underlying storage classes. Please see \"Recovery from Volume Snapshot objects\" for details. The bootstrap section The bootstrap method can be defined in the bootstrap section of the cluster specification. CloudNativePG currently supports the following bootstrap methods: initdb : initialize a new PostgreSQL cluster (default) recovery : create a PostgreSQL cluster by restoring from a base backup of an existing cluster and, if needed, replaying all the available WAL files or up to a given point in time pg_basebackup : create a PostgreSQL cluster by cloning an existing one of the same major version using pg_basebackup through the streaming replication protocol. This method is particularly useful for migrating databases to CloudNativePG, although meeting all requirements can be challenging. Be sure to review the warnings in the pg_basebackup subsection carefully. Only one bootstrap method can be specified in the manifest. Attempting to define multiple bootstrap methods will result in validation errors. In contrast to the initdb method, both recovery and pg_basebackup create a new cluster based on another one (either offline or online) and can be used to spin up replica clusters. They both rely on the definition of external clusters. Refer to the replica cluster section for more information. Given the amount of possible backup methods and combinations of backup storage that the CloudNativePG operator provides for recovery , please refer to the dedicated \"Recovery\" section for guidance on each method. API reference Please refer to the \"API reference for the bootstrap section for more information. The externalClusters section The externalClusters section of the cluster manifest can be used to configure access to one or more PostgreSQL clusters as sources . The primary use cases include: Importing Databases: Specify an external source to be utilized during the importation of databases via logical backup and restore, as part of the initdb bootstrap method. Cross-Region Replication: Define a cross-region PostgreSQL cluster employing physical replication, capable of extending across distinct Kubernetes clusters or traditional VM/bare-metal environments. Recovery from Physical Base Backup: Recover, fully or at a given Point-In-Time, a PostgreSQL cluster by referencing a physical base backup. Info Ongoing development will extend the functionality of externalClusters to accommodate additional use cases, such as logical replication and foreign servers in future releases. As far as bootstrapping is concerned, externalClusters can be used to define the source PostgreSQL cluster for either the pg_basebackup method or the recovery one. An external cluster needs to have: a name that identifies the external cluster, to be used as a reference via the source option at least one of the following: information about streaming connection information about the recovery object store , which is a Barman Cloud compatible object store that contains: the WAL archive (required for Point In Time Recovery) the catalog of physical base backups for the Postgres cluster Note A recovery object store is normally an AWS S3, Azure Blob Storage, or Google Cloud Storage source that is managed by Barman Cloud. When only the streaming connection is defined, the source can be used for the pg_basebackup method. When only the recovery object store is defined, the source can be used for the recovery method. When both are defined, any of the two bootstrap methods can be chosen. The following table summarizes your options: Content of externalClusters pg_basebackup recovery Only streaming \u2713 Only object store \u2713 Streaming and object store \u2713 \u2713 Furthermore, in case of pg_basebackup or full recovery point in time, the cluster is eligible for replica cluster mode. This means that the cluster is continuously fed from the source, either via streaming, via WAL shipping through the PostgreSQL's restore_command , or any of the two. API reference Please refer to the \"API reference for the externalClusters section for more information. Password files Whenever a password is supplied within an externalClusters entry, CloudNativePG autonomously manages a PostgreSQL password file for it, residing at /controller/external/NAME/pgpass in each instance. This approach enables CloudNativePG to securely establish connections with an external server without exposing any passwords in the connection string. Instead, the connection safely references the aforementioned file through the passfile connection parameter. Bootstrap an empty cluster ( initdb ) The initdb bootstrap method is used to create a new PostgreSQL cluster from scratch. It is the default one unless specified differently. The following example contains the full structure of the initdb configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app secret: name: app-secret storage: size: 1Gi The above example of bootstrap will: create a new PGDATA folder using PostgreSQL's native initdb command create an unprivileged user named app set the password of the latter ( app ) using the one in the app-secret secret (make sure that username matches the same name of the owner ) create a database called app owned by the app user. Thanks to the convention over configuration paradigm , you can let the operator choose a default database name ( app ) and a default application user name (same as the database name), as well as randomly generate a secure password for both the superuser and the application user in PostgreSQL. Alternatively, you can generate your password, store it as a secret, and use it in the PostgreSQL cluster - as described in the above example. The supplied secret must comply with the specifications of the kubernetes.io/basic-auth type . As a result, the username in the secret must match the one of the owner (for the application secret) and postgres for the superuser one. The following is an example of a basic-auth secret: apiVersion: v1 data: username: YXBw password: cGFzc3dvcmQ= kind: Secret metadata: name: app-secret type: kubernetes.io/basic-auth The application database is the one that should be used to store application data. Applications should connect to the cluster with the user that owns the application database. Important If you need to create additional users, please refer to \"Declarative database role management\" . In case you don't supply any database name, the operator will proceed by convention and create the app database, and adds it to the cluster definition using a defaulting webhook . The user that owns the database defaults to the database name instead. The application user is not used internally by the operator, which instead relies on the superuser to reconcile the cluster with the desired status. Passing Options to initdb The PostgreSQL data directory is initialized using the initdb PostgreSQL command . CloudNativePG enables you to customize the behavior of initdb to modify settings such as default locale configurations and data checksums. Warning CloudNativePG acts only as a direct proxy to initdb for locale-related options, due to the ongoing and significant enhancements in PostgreSQL's locale support. It is your responsibility to ensure that the correct options are provided, following the PostgreSQL documentation, and to verify that the bootstrap process completes successfully. To include custom options in the initdb command, you can use the following parameters: builtinLocale When builtinLocale is set to a value, CloudNativePG passes it to the --builtin-locale option in initdb . This option controls the builtin locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to builtin . Available from PostgreSQL 17. dataChecksums When dataChecksums is set to true , CloudNativePG invokes the -k option in initdb to enable checksums on data pages and help detect corruption by the I/O system - that would otherwise be silent (default: false ). encoding When encoding set to a value, CloudNativePG passes it to the --encoding option in initdb , which selects the encoding of the template database (default: UTF8 ). icuLocale When icuLocale is set to a value, CloudNativePG passes it to the --icu-locale option in initdb . This option controls the ICU locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules When icuRules is set to a value, CloudNativePG passes it to the --icu-rules option in initdb . This option controls the ICU locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to icu . Available from PostgreSQL 16. locale When locale is set to a value, CloudNativePG passes it to the --locale option in initdb . This option controls the locale, as defined in \"Locale Support\" from the PostgreSQL documentation. By default, the locale parameter is empty. In this case, environment variables such as LANG are used to determine the locale. Be aware that these variables can vary between container images, potentially leading to inconsistent behavior. localeCollate When localeCollate is set to a value, CloudNativePG passes it to the --lc-collate option in initdb . This option controls the collation order ( LC_COLLATE subcategory), as defined in \"Locale Support\" from the PostgreSQL documentation (default: C ). localeCType When localeCType is set to a value, CloudNativePG passes it to the --lc-ctype option in initdb . This option controls the collation order ( LC_CTYPE subcategory), as defined in \"Locale Support\" from the PostgreSQL documentation (default: C ). localeProvider When localeProvider is set to a value, CloudNativePG passes it to the --locale-provider option in initdb . This option controls the locale provider, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty, which means libc for PostgreSQL). Available from PostgreSQL 15. walSegmentSize When walSegmentSize is set to a value, CloudNativePG passes it to the --wal-segsize option in initdb (default: not set - defined by PostgreSQL as 16 megabytes). Note The only two locale options that CloudNativePG implements during the initdb bootstrap refer to the LC_COLLATE and LC_TYPE subcategories. The remaining locale subcategories can be configured directly in the PostgreSQL configuration, using the lc_messages , lc_monetary , lc_numeric , and lc_time parameters. The following example enables data checksums and sets the default encoding to LATIN1 : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app dataChecksums: true encoding: 'LATIN1' storage: size: 1Gi Warning CloudNativePG supports another way to customize the behavior of the initdb invocation, using the options subsection. However, given that there are options that can break the behavior of the operator (such as --auth or -d ), this technique is deprecated and will be removed from future versions of the API. Executing Queries After Initialization You can specify a custom list of queries that will be executed once, immediately after the cluster is created and configured. These queries will be executed as the superuser ( postgres ) against three different databases, in this specific order: The postgres database ( postInit section) The template1 database ( postInitTemplate section) The application database ( postInitApplication section) For each of these sections, CloudNativePG provides two ways to specify custom queries, executed in the following order: As a list of SQL queries in the cluster's definition ( postInitSQL , postInitTemplateSQL , and postInitApplicationSQL stanzas) As a list of Secrets and/or ConfigMaps, each containing a SQL script to be executed ( postInitSQLRefs , postInitTemplateSQLRefs , and postInitApplicationSQLRefs stanzas). Secrets are processed before ConfigMaps. Objects in each list will be processed sequentially. Warning Use the postInit , postInitTemplate , and postInitApplication options with extreme care, as queries are run as a superuser and can disrupt the entire cluster. An error in any of those queries will interrupt the bootstrap phase, leaving the cluster incomplete and requiring manual intervention. Important Ensure the existence of entries inside the ConfigMaps or Secrets specified in postInitSQLRefs , postInitTemplateSQLRefs , and postInitApplicationSQLRefs , otherwise the bootstrap will fail. Errors in any of those SQL files will prevent the bootstrap phase from completing successfully. The following example runs a single SQL query as part of the postInitSQL stanza: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app dataChecksums: true localeCollate: 'en_US' localeCType: 'en_US' postInitSQL: - CREATE DATABASE angus storage: size: 1Gi The example below relies on postInitApplicationSQLRefs to specify a secret and a ConfigMap containing the queries to run after the initialization on the application database: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app postInitApplicationSQLRefs: secretRefs: - name: my-secret key: secret.sql configMapRefs: - name: my-configmap key: configmap.sql storage: size: 1Gi Note Within SQL scripts, each SQL statement is executed in a single exec on the server according to the PostgreSQL semantics . Comments can be included, but internal commands like psql cannot. Bootstrap from another cluster CloudNativePG enables bootstrapping a cluster starting from another one of the same major version. This operation can be carried out either connecting directly to the source cluster via streaming replication ( pg_basebackup ), or indirectly via an existing physical base backup ( recovery ). The source cluster must be defined in the externalClusters section, identified by name (our recommendation is to use the same name of the origin cluster). Important By default the recovery method strictly uses the name of the cluster in the externalClusters section to locate the main folder of the backup data within the object store, which is normally reserved for the name of the server. Backup plugins provide ways to specify a different one. For example, the Barman Cloud Plugin provides the serverName parameter (by default assigned to the value of name in the external cluster definition). Bootstrap from a backup ( recovery ) Given the variety of backup methods and combinations of backup storage options provided by the CloudNativePG operator for recovery , please refer to the dedicated \"Recovery\" section for detailed guidance on each method. Bootstrap from a live cluster ( pg_basebackup ) The pg_basebackup bootstrap mode allows you to create a new cluster ( target ) as an exact physical copy of an existing and binary-compatible PostgreSQL instance ( source ) managed by CloudNativePG, using a valid streaming replication connection. The source instance can either be a primary or a standby PostgreSQL server. It\u2019s crucial to thoroughly review the requirements section below, as the pros and cons of PostgreSQL physical replication fully apply. The primary use cases for this method include: Reporting and business intelligence clusters that need to be regenerated periodically (daily, weekly) Test databases containing live data that require periodic regeneration (daily, weekly, monthly) and anonymization Rapid spin-up of a standalone replica cluster Physical migrations of CloudNativePG clusters to different namespaces or Kubernetes clusters Important Avoid using this method, based on physical replication, to migrate an existing PostgreSQL cluster outside of Kubernetes into CloudNativePG, unless you are completely certain that all requirements are met and the operation has been thoroughly tested. The CloudNativePG community does not endorse this approach for such use cases, and recommends using logical import instead. It is exceedingly rare that all requirements for physical replication are met in a way that seamlessly works with CloudNativePG. Warning In its current implementation, this method clones the source PostgreSQL instance, thereby creating a snapshot . Once the cloning process has finished, the new cluster is immediately started. Refer to \"Current limitations\" for more details. Similar to the recovery bootstrap method, once the cloning operation is complete, the operator takes full ownership of the target cluster, starting from the first instance. This includes overriding certain configuration parameters as required by CloudNativePG, resetting the superuser password, creating the streaming_replica user, managing replicas, and more. The resulting cluster operates independently from the source instance. Important Configuring the network connection between the target and source instances lies outside the scope of CloudNativePG documentation, as it depends heavily on the specific context and environment. The streaming replication client on the target instance, managed transparently by pg_basebackup , can authenticate on the source instance using one of the following methods: Username/password TLS client certificate Both authentication methods are detailed below. Requirements The following requirements apply to the pg_basebackup bootstrap method: target and source must have the same hardware architecture target and source must have the same major PostgreSQL version target and source must have the same tablespaces source must be configured with enough max_wal_senders to grant access from the target for this one-off operation by providing at least one walsender for the backup plus one for WAL streaming the network between source and target must be configured to enable the target instance to connect to the PostgreSQL port on the source instance source must have a role with REPLICATION LOGIN privileges and must accept connections from the target instance for this role in pg_hba.conf , preferably via TLS (see \"About the replication user\" below) target must be able to successfully connect to the source PostgreSQL instance using a role with REPLICATION LOGIN privileges Seealso For further information, please refer to the \"Planning\" section for Warm Standby , the pg_basebackup page and the \"High Availability, Load Balancing, and Replication\" chapter in the PostgreSQL documentation. About the replication user As explained in the requirements section, you need to have a user with either the SUPERUSER or, preferably, just the REPLICATION privilege in the source instance. If the source database is created with CloudNativePG, you can reuse the streaming_replica user and take advantage of client TLS certificates authentication (which, by default, is the only allowed connection method for streaming_replica ). For all other cases, including outside Kubernetes, please verify that you already have a user with the REPLICATION privilege, or create a new one by following the instructions below. As postgres user on the source system, please run: createuser -P --replication streaming_replica Enter the password at the prompt and save it for later, as you will need to add it to a secret in the target instance. Note Although the name is not important, we will use streaming_replica for the sake of simplicity. Feel free to change it as you like, provided you adapt the instructions in the following sections. Username/Password authentication The first authentication method supported by CloudNativePG with the pg_basebackup bootstrap is based on username and password matching. Make sure you have the following information before you start the procedure: location of the source instance, identified by a hostname or an IP address and a TCP port replication username ( streaming_replica for simplicity) password You might need to add a line similar to the following to the pg_hba.conf file on the source PostgreSQL instance: # A more restrictive rule for TLS and IP of origin is recommended host replication streaming_replica all md5 The following manifest creates a new PostgreSQL 17.5 cluster, called target-db , using the pg_basebackup bootstrap method to clone an external PostgreSQL cluster defined as source-db (in the externalClusters array). As you can see, the source-db definition points to the source-db.foo.com host and connects as the streaming_replica user, whose password is stored in the password key of the source-db-replica-user secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: target-db spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 bootstrap: pg_basebackup: source: source-db storage: size: 1Gi externalClusters: - name: source-db connectionParameters: host: source-db.foo.com user: streaming_replica password: name: source-db-replica-user key: password All the requirements must be met for the clone operation to work, including the same PostgreSQL version (in our case 17.5). TLS certificate authentication The second authentication method supported by CloudNativePG with the pg_basebackup bootstrap is based on TLS client certificates. This is the recommended approach from a security standpoint. The following example clones an existing PostgreSQL cluster ( cluster-example ) in the same Kubernetes cluster. Note This example can be easily adapted to cover an instance that resides outside the Kubernetes cluster. The manifest defines a new PostgreSQL 17.5 cluster called cluster-clone-tls , which is bootstrapped using the pg_basebackup method from the cluster-example external cluster. The host is identified by the read/write service in the same cluster, while the streaming_replica user is authenticated thanks to the provided keys, certificate, and certification authority information (respectively in the cluster-example-replication and cluster-example-ca secrets). apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-clone-tls spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 bootstrap: pg_basebackup: source: cluster-example storage: size: 1Gi externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw.default.svc user: streaming_replica sslmode: verify-full sslKey: name: cluster-example-replication key: tls.key sslCert: name: cluster-example-replication key: tls.crt sslRootCert: name: cluster-example-ca key: ca.crt Configure the application database We also support to configure the application database for cluster which bootstrap from a live cluster, just like the case of initdb and recovery bootstrap method. If the new cluster is created as a replica cluster (with replica mode enabled), application database configuration will be skipped. Important While the Cluster is in recovery mode, no changes to the database, including the catalog, are permitted. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. During the recovery phase, roles remain as defined in the source cluster. The example below configures the app database with the owner app and the password stored in the provided secret app-secret , following the bootstrap from a live cluster. apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: bootstrap: pg_basebackup: database: app owner: app secret: name: app-secret source: cluster-example With the above configuration, the following will happen only after recovery is completed : If the app database does not exist, it will be created. If the app user does not exist, it will be created. If the app user is not the owner of the app database, ownership will be granted to the app user. If the username value matches the owner value in the secret, the password for the application user (the app user in this case) will be updated to the password value in the secret. Current limitations Snapshot copy The pg_basebackup method takes a snapshot of the source instance in the form of a PostgreSQL base backup. All transactions written from the start of the backup to the correct termination of the backup will be streamed to the target instance using a second connection (see the --wal-method=stream option for pg_basebackup ). Once the backup is completed, the new instance will be started on a new timeline and diverge from the source. For this reason, it is advised to stop all write operations to the source database before migrating to the target database. Note that this limitation applies only if the target cluster is not defined as a replica cluster. Important Before you attempt a migration, you must test both the procedure and the applications. In particular, it is fundamental that you run the migration procedure as many times as needed to systematically measure the downtime of your applications in production.","title":"Bootstrap"},{"location":"bootstrap/#bootstrap","text":"This section describes the options available to create a new PostgreSQL cluster and the design rationale behind them. There are primarily two ways to bootstrap a new cluster: from scratch ( initdb ) from an existing PostgreSQL cluster, either directly ( pg_basebackup ) or indirectly through a physical base backup ( recovery ) The initdb bootstrap also provides the option to import one or more databases from an existing PostgreSQL cluster, even if it's outside Kubernetes or running a different major version of PostgreSQL. For more detailed information about this feature, please refer to the \"Importing Postgres databases\" section. Important Bootstrapping from an existing cluster enables the creation of a replica cluster \u2014an independent PostgreSQL cluster that remains in continuous recovery, stays synchronized with the source cluster, and accepts read-only connections. For more details, refer to the Replica Cluster section . Warning CloudNativePG requires both the postgres user and database to always exist. Using the local Unix Domain Socket, it needs to connect as the postgres user to the postgres database via peer authentication in order to perform administrative tasks on the cluster. DO NOT DELETE the postgres user or the postgres database!!! Info CloudNativePG is gradually introducing support for Kubernetes' native VolumeSnapshot API for both incremental and differential copy in backup and recovery operations - if supported by the underlying storage classes. Please see \"Recovery from Volume Snapshot objects\" for details.","title":"Bootstrap"},{"location":"bootstrap/#the-bootstrap-section","text":"The bootstrap method can be defined in the bootstrap section of the cluster specification. CloudNativePG currently supports the following bootstrap methods: initdb : initialize a new PostgreSQL cluster (default) recovery : create a PostgreSQL cluster by restoring from a base backup of an existing cluster and, if needed, replaying all the available WAL files or up to a given point in time pg_basebackup : create a PostgreSQL cluster by cloning an existing one of the same major version using pg_basebackup through the streaming replication protocol. This method is particularly useful for migrating databases to CloudNativePG, although meeting all requirements can be challenging. Be sure to review the warnings in the pg_basebackup subsection carefully. Only one bootstrap method can be specified in the manifest. Attempting to define multiple bootstrap methods will result in validation errors. In contrast to the initdb method, both recovery and pg_basebackup create a new cluster based on another one (either offline or online) and can be used to spin up replica clusters. They both rely on the definition of external clusters. Refer to the replica cluster section for more information. Given the amount of possible backup methods and combinations of backup storage that the CloudNativePG operator provides for recovery , please refer to the dedicated \"Recovery\" section for guidance on each method. API reference Please refer to the \"API reference for the bootstrap section for more information.","title":"The bootstrap section"},{"location":"bootstrap/#the-externalclusters-section","text":"The externalClusters section of the cluster manifest can be used to configure access to one or more PostgreSQL clusters as sources . The primary use cases include: Importing Databases: Specify an external source to be utilized during the importation of databases via logical backup and restore, as part of the initdb bootstrap method. Cross-Region Replication: Define a cross-region PostgreSQL cluster employing physical replication, capable of extending across distinct Kubernetes clusters or traditional VM/bare-metal environments. Recovery from Physical Base Backup: Recover, fully or at a given Point-In-Time, a PostgreSQL cluster by referencing a physical base backup. Info Ongoing development will extend the functionality of externalClusters to accommodate additional use cases, such as logical replication and foreign servers in future releases. As far as bootstrapping is concerned, externalClusters can be used to define the source PostgreSQL cluster for either the pg_basebackup method or the recovery one. An external cluster needs to have: a name that identifies the external cluster, to be used as a reference via the source option at least one of the following: information about streaming connection information about the recovery object store , which is a Barman Cloud compatible object store that contains: the WAL archive (required for Point In Time Recovery) the catalog of physical base backups for the Postgres cluster Note A recovery object store is normally an AWS S3, Azure Blob Storage, or Google Cloud Storage source that is managed by Barman Cloud. When only the streaming connection is defined, the source can be used for the pg_basebackup method. When only the recovery object store is defined, the source can be used for the recovery method. When both are defined, any of the two bootstrap methods can be chosen. The following table summarizes your options: Content of externalClusters pg_basebackup recovery Only streaming \u2713 Only object store \u2713 Streaming and object store \u2713 \u2713 Furthermore, in case of pg_basebackup or full recovery point in time, the cluster is eligible for replica cluster mode. This means that the cluster is continuously fed from the source, either via streaming, via WAL shipping through the PostgreSQL's restore_command , or any of the two. API reference Please refer to the \"API reference for the externalClusters section for more information.","title":"The externalClusters section"},{"location":"bootstrap/#password-files","text":"Whenever a password is supplied within an externalClusters entry, CloudNativePG autonomously manages a PostgreSQL password file for it, residing at /controller/external/NAME/pgpass in each instance. This approach enables CloudNativePG to securely establish connections with an external server without exposing any passwords in the connection string. Instead, the connection safely references the aforementioned file through the passfile connection parameter.","title":"Password files"},{"location":"bootstrap/#bootstrap-an-empty-cluster-initdb","text":"The initdb bootstrap method is used to create a new PostgreSQL cluster from scratch. It is the default one unless specified differently. The following example contains the full structure of the initdb configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app secret: name: app-secret storage: size: 1Gi The above example of bootstrap will: create a new PGDATA folder using PostgreSQL's native initdb command create an unprivileged user named app set the password of the latter ( app ) using the one in the app-secret secret (make sure that username matches the same name of the owner ) create a database called app owned by the app user. Thanks to the convention over configuration paradigm , you can let the operator choose a default database name ( app ) and a default application user name (same as the database name), as well as randomly generate a secure password for both the superuser and the application user in PostgreSQL. Alternatively, you can generate your password, store it as a secret, and use it in the PostgreSQL cluster - as described in the above example. The supplied secret must comply with the specifications of the kubernetes.io/basic-auth type . As a result, the username in the secret must match the one of the owner (for the application secret) and postgres for the superuser one. The following is an example of a basic-auth secret: apiVersion: v1 data: username: YXBw password: cGFzc3dvcmQ= kind: Secret metadata: name: app-secret type: kubernetes.io/basic-auth The application database is the one that should be used to store application data. Applications should connect to the cluster with the user that owns the application database. Important If you need to create additional users, please refer to \"Declarative database role management\" . In case you don't supply any database name, the operator will proceed by convention and create the app database, and adds it to the cluster definition using a defaulting webhook . The user that owns the database defaults to the database name instead. The application user is not used internally by the operator, which instead relies on the superuser to reconcile the cluster with the desired status.","title":"Bootstrap an empty cluster (initdb)"},{"location":"bootstrap/#passing-options-to-initdb","text":"The PostgreSQL data directory is initialized using the initdb PostgreSQL command . CloudNativePG enables you to customize the behavior of initdb to modify settings such as default locale configurations and data checksums. Warning CloudNativePG acts only as a direct proxy to initdb for locale-related options, due to the ongoing and significant enhancements in PostgreSQL's locale support. It is your responsibility to ensure that the correct options are provided, following the PostgreSQL documentation, and to verify that the bootstrap process completes successfully. To include custom options in the initdb command, you can use the following parameters: builtinLocale When builtinLocale is set to a value, CloudNativePG passes it to the --builtin-locale option in initdb . This option controls the builtin locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to builtin . Available from PostgreSQL 17. dataChecksums When dataChecksums is set to true , CloudNativePG invokes the -k option in initdb to enable checksums on data pages and help detect corruption by the I/O system - that would otherwise be silent (default: false ). encoding When encoding set to a value, CloudNativePG passes it to the --encoding option in initdb , which selects the encoding of the template database (default: UTF8 ). icuLocale When icuLocale is set to a value, CloudNativePG passes it to the --icu-locale option in initdb . This option controls the ICU locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules When icuRules is set to a value, CloudNativePG passes it to the --icu-rules option in initdb . This option controls the ICU locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to icu . Available from PostgreSQL 16. locale When locale is set to a value, CloudNativePG passes it to the --locale option in initdb . This option controls the locale, as defined in \"Locale Support\" from the PostgreSQL documentation. By default, the locale parameter is empty. In this case, environment variables such as LANG are used to determine the locale. Be aware that these variables can vary between container images, potentially leading to inconsistent behavior. localeCollate When localeCollate is set to a value, CloudNativePG passes it to the --lc-collate option in initdb . This option controls the collation order ( LC_COLLATE subcategory), as defined in \"Locale Support\" from the PostgreSQL documentation (default: C ). localeCType When localeCType is set to a value, CloudNativePG passes it to the --lc-ctype option in initdb . This option controls the collation order ( LC_CTYPE subcategory), as defined in \"Locale Support\" from the PostgreSQL documentation (default: C ). localeProvider When localeProvider is set to a value, CloudNativePG passes it to the --locale-provider option in initdb . This option controls the locale provider, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty, which means libc for PostgreSQL). Available from PostgreSQL 15. walSegmentSize When walSegmentSize is set to a value, CloudNativePG passes it to the --wal-segsize option in initdb (default: not set - defined by PostgreSQL as 16 megabytes). Note The only two locale options that CloudNativePG implements during the initdb bootstrap refer to the LC_COLLATE and LC_TYPE subcategories. The remaining locale subcategories can be configured directly in the PostgreSQL configuration, using the lc_messages , lc_monetary , lc_numeric , and lc_time parameters. The following example enables data checksums and sets the default encoding to LATIN1 : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app dataChecksums: true encoding: 'LATIN1' storage: size: 1Gi Warning CloudNativePG supports another way to customize the behavior of the initdb invocation, using the options subsection. However, given that there are options that can break the behavior of the operator (such as --auth or -d ), this technique is deprecated and will be removed from future versions of the API.","title":"Passing Options to initdb"},{"location":"bootstrap/#executing-queries-after-initialization","text":"You can specify a custom list of queries that will be executed once, immediately after the cluster is created and configured. These queries will be executed as the superuser ( postgres ) against three different databases, in this specific order: The postgres database ( postInit section) The template1 database ( postInitTemplate section) The application database ( postInitApplication section) For each of these sections, CloudNativePG provides two ways to specify custom queries, executed in the following order: As a list of SQL queries in the cluster's definition ( postInitSQL , postInitTemplateSQL , and postInitApplicationSQL stanzas) As a list of Secrets and/or ConfigMaps, each containing a SQL script to be executed ( postInitSQLRefs , postInitTemplateSQLRefs , and postInitApplicationSQLRefs stanzas). Secrets are processed before ConfigMaps. Objects in each list will be processed sequentially. Warning Use the postInit , postInitTemplate , and postInitApplication options with extreme care, as queries are run as a superuser and can disrupt the entire cluster. An error in any of those queries will interrupt the bootstrap phase, leaving the cluster incomplete and requiring manual intervention. Important Ensure the existence of entries inside the ConfigMaps or Secrets specified in postInitSQLRefs , postInitTemplateSQLRefs , and postInitApplicationSQLRefs , otherwise the bootstrap will fail. Errors in any of those SQL files will prevent the bootstrap phase from completing successfully. The following example runs a single SQL query as part of the postInitSQL stanza: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app dataChecksums: true localeCollate: 'en_US' localeCType: 'en_US' postInitSQL: - CREATE DATABASE angus storage: size: 1Gi The example below relies on postInitApplicationSQLRefs to specify a secret and a ConfigMap containing the queries to run after the initialization on the application database: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app postInitApplicationSQLRefs: secretRefs: - name: my-secret key: secret.sql configMapRefs: - name: my-configmap key: configmap.sql storage: size: 1Gi Note Within SQL scripts, each SQL statement is executed in a single exec on the server according to the PostgreSQL semantics . Comments can be included, but internal commands like psql cannot.","title":"Executing Queries After Initialization"},{"location":"bootstrap/#bootstrap-from-another-cluster","text":"CloudNativePG enables bootstrapping a cluster starting from another one of the same major version. This operation can be carried out either connecting directly to the source cluster via streaming replication ( pg_basebackup ), or indirectly via an existing physical base backup ( recovery ). The source cluster must be defined in the externalClusters section, identified by name (our recommendation is to use the same name of the origin cluster). Important By default the recovery method strictly uses the name of the cluster in the externalClusters section to locate the main folder of the backup data within the object store, which is normally reserved for the name of the server. Backup plugins provide ways to specify a different one. For example, the Barman Cloud Plugin provides the serverName parameter (by default assigned to the value of name in the external cluster definition).","title":"Bootstrap from another cluster"},{"location":"bootstrap/#bootstrap-from-a-backup-recovery","text":"Given the variety of backup methods and combinations of backup storage options provided by the CloudNativePG operator for recovery , please refer to the dedicated \"Recovery\" section for detailed guidance on each method.","title":"Bootstrap from a backup (recovery)"},{"location":"bootstrap/#bootstrap-from-a-live-cluster-pg_basebackup","text":"The pg_basebackup bootstrap mode allows you to create a new cluster ( target ) as an exact physical copy of an existing and binary-compatible PostgreSQL instance ( source ) managed by CloudNativePG, using a valid streaming replication connection. The source instance can either be a primary or a standby PostgreSQL server. It\u2019s crucial to thoroughly review the requirements section below, as the pros and cons of PostgreSQL physical replication fully apply. The primary use cases for this method include: Reporting and business intelligence clusters that need to be regenerated periodically (daily, weekly) Test databases containing live data that require periodic regeneration (daily, weekly, monthly) and anonymization Rapid spin-up of a standalone replica cluster Physical migrations of CloudNativePG clusters to different namespaces or Kubernetes clusters Important Avoid using this method, based on physical replication, to migrate an existing PostgreSQL cluster outside of Kubernetes into CloudNativePG, unless you are completely certain that all requirements are met and the operation has been thoroughly tested. The CloudNativePG community does not endorse this approach for such use cases, and recommends using logical import instead. It is exceedingly rare that all requirements for physical replication are met in a way that seamlessly works with CloudNativePG. Warning In its current implementation, this method clones the source PostgreSQL instance, thereby creating a snapshot . Once the cloning process has finished, the new cluster is immediately started. Refer to \"Current limitations\" for more details. Similar to the recovery bootstrap method, once the cloning operation is complete, the operator takes full ownership of the target cluster, starting from the first instance. This includes overriding certain configuration parameters as required by CloudNativePG, resetting the superuser password, creating the streaming_replica user, managing replicas, and more. The resulting cluster operates independently from the source instance. Important Configuring the network connection between the target and source instances lies outside the scope of CloudNativePG documentation, as it depends heavily on the specific context and environment. The streaming replication client on the target instance, managed transparently by pg_basebackup , can authenticate on the source instance using one of the following methods: Username/password TLS client certificate Both authentication methods are detailed below.","title":"Bootstrap from a live cluster (pg_basebackup)"},{"location":"bootstrap/#requirements","text":"The following requirements apply to the pg_basebackup bootstrap method: target and source must have the same hardware architecture target and source must have the same major PostgreSQL version target and source must have the same tablespaces source must be configured with enough max_wal_senders to grant access from the target for this one-off operation by providing at least one walsender for the backup plus one for WAL streaming the network between source and target must be configured to enable the target instance to connect to the PostgreSQL port on the source instance source must have a role with REPLICATION LOGIN privileges and must accept connections from the target instance for this role in pg_hba.conf , preferably via TLS (see \"About the replication user\" below) target must be able to successfully connect to the source PostgreSQL instance using a role with REPLICATION LOGIN privileges Seealso For further information, please refer to the \"Planning\" section for Warm Standby , the pg_basebackup page and the \"High Availability, Load Balancing, and Replication\" chapter in the PostgreSQL documentation.","title":"Requirements"},{"location":"bootstrap/#about-the-replication-user","text":"As explained in the requirements section, you need to have a user with either the SUPERUSER or, preferably, just the REPLICATION privilege in the source instance. If the source database is created with CloudNativePG, you can reuse the streaming_replica user and take advantage of client TLS certificates authentication (which, by default, is the only allowed connection method for streaming_replica ). For all other cases, including outside Kubernetes, please verify that you already have a user with the REPLICATION privilege, or create a new one by following the instructions below. As postgres user on the source system, please run: createuser -P --replication streaming_replica Enter the password at the prompt and save it for later, as you will need to add it to a secret in the target instance. Note Although the name is not important, we will use streaming_replica for the sake of simplicity. Feel free to change it as you like, provided you adapt the instructions in the following sections.","title":"About the replication user"},{"location":"bootstrap/#usernamepassword-authentication","text":"The first authentication method supported by CloudNativePG with the pg_basebackup bootstrap is based on username and password matching. Make sure you have the following information before you start the procedure: location of the source instance, identified by a hostname or an IP address and a TCP port replication username ( streaming_replica for simplicity) password You might need to add a line similar to the following to the pg_hba.conf file on the source PostgreSQL instance: # A more restrictive rule for TLS and IP of origin is recommended host replication streaming_replica all md5 The following manifest creates a new PostgreSQL 17.5 cluster, called target-db , using the pg_basebackup bootstrap method to clone an external PostgreSQL cluster defined as source-db (in the externalClusters array). As you can see, the source-db definition points to the source-db.foo.com host and connects as the streaming_replica user, whose password is stored in the password key of the source-db-replica-user secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: target-db spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 bootstrap: pg_basebackup: source: source-db storage: size: 1Gi externalClusters: - name: source-db connectionParameters: host: source-db.foo.com user: streaming_replica password: name: source-db-replica-user key: password All the requirements must be met for the clone operation to work, including the same PostgreSQL version (in our case 17.5).","title":"Username/Password authentication"},{"location":"bootstrap/#tls-certificate-authentication","text":"The second authentication method supported by CloudNativePG with the pg_basebackup bootstrap is based on TLS client certificates. This is the recommended approach from a security standpoint. The following example clones an existing PostgreSQL cluster ( cluster-example ) in the same Kubernetes cluster. Note This example can be easily adapted to cover an instance that resides outside the Kubernetes cluster. The manifest defines a new PostgreSQL 17.5 cluster called cluster-clone-tls , which is bootstrapped using the pg_basebackup method from the cluster-example external cluster. The host is identified by the read/write service in the same cluster, while the streaming_replica user is authenticated thanks to the provided keys, certificate, and certification authority information (respectively in the cluster-example-replication and cluster-example-ca secrets). apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-clone-tls spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 bootstrap: pg_basebackup: source: cluster-example storage: size: 1Gi externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw.default.svc user: streaming_replica sslmode: verify-full sslKey: name: cluster-example-replication key: tls.key sslCert: name: cluster-example-replication key: tls.crt sslRootCert: name: cluster-example-ca key: ca.crt","title":"TLS certificate authentication"},{"location":"bootstrap/#configure-the-application-database","text":"We also support to configure the application database for cluster which bootstrap from a live cluster, just like the case of initdb and recovery bootstrap method. If the new cluster is created as a replica cluster (with replica mode enabled), application database configuration will be skipped. Important While the Cluster is in recovery mode, no changes to the database, including the catalog, are permitted. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. During the recovery phase, roles remain as defined in the source cluster. The example below configures the app database with the owner app and the password stored in the provided secret app-secret , following the bootstrap from a live cluster. apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: bootstrap: pg_basebackup: database: app owner: app secret: name: app-secret source: cluster-example With the above configuration, the following will happen only after recovery is completed : If the app database does not exist, it will be created. If the app user does not exist, it will be created. If the app user is not the owner of the app database, ownership will be granted to the app user. If the username value matches the owner value in the secret, the password for the application user (the app user in this case) will be updated to the password value in the secret.","title":"Configure the application database"},{"location":"bootstrap/#current-limitations","text":"","title":"Current limitations"},{"location":"bootstrap/#snapshot-copy","text":"The pg_basebackup method takes a snapshot of the source instance in the form of a PostgreSQL base backup. All transactions written from the start of the backup to the correct termination of the backup will be streamed to the target instance using a second connection (see the --wal-method=stream option for pg_basebackup ). Once the backup is completed, the new instance will be started on a new timeline and diverge from the source. For this reason, it is advised to stop all write operations to the source database before migrating to the target database. Note that this limitation applies only if the target cluster is not defined as a replica cluster. Important Before you attempt a migration, you must test both the procedure and the applications. In particular, it is fundamental that you run the migration procedure as many times as needed to systematically measure the downtime of your applications in production.","title":"Snapshot copy"},{"location":"certificates/","text":"Certificates CloudNativePG was designed to natively support TLS certificates. To set up a cluster, the operator requires: A server certification authority (CA) certificate A server TLS certificate signed by the server CA A client CA certificate A streaming replication client certificate generated by the client CA Note You can find all the secrets used by the cluster and their expiration dates in the cluster's status. CloudNativePG is very flexible when it comes to TLS certificates. It primarily operates in two modes: Operator managed \u2013 Certificates are internally managed by the operator in a fully automated way and signed using a CA created by CloudNativePG. User provided \u2013 Certificates are generated outside the operator and imported in the cluster definition as secrets. CloudNativePG integrates itself with cert-manager (See Cert-manager example .) You can also choose a hybrid approach, where only part of the certificates is generated outside CNPG. Note The operator and instances verify server certificates against the CA only, disregarding the DNS name. This approach is due to the typical absence of DNS names in user-provided certificates for the <cluster>-rw service used for communication within the cluster. Operator-Managed Mode By default, the operator automatically generates a single Certificate Authority (CA) to issue both client and server certificates. These certificates are managed continuously by the operator, with automatic renewal 7 days before expiration (within a 90-day validity period). Info You can adjust this default behavior by configuring the CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD environment variables. For detailed guidance, refer to the Operator Configuration . Important Certificate renewal does not cause any downtime for the PostgreSQL server, as a simple reload operation is sufficient. However, any user-managed certificates not controlled by CloudNativePG must be re-issued following the renewal process. When generating certificates, the operator assumes that the Kubernetes cluster's DNS zone is set to cluster.local by default. This behavior can be customized by setting the KUBERNETES_CLUSTER_DOMAIN environment variable. A convenient alternative is to use the operator's configuration capability . Server certificates Server CA secret The operator generates a self-signed CA and stores it in a generic secret containing the following keys: ca.crt \u2013 CA certificate used to validate the server certificate, used as sslrootcert in clients' connection strings. ca.key \u2013 The key used to sign the server SSL certificate automatically. Server TLS secret The operator uses the generated self-signed CA to sign a server TLS certificate. It's stored in a secret of type kubernetes.io/tls and configured to be used as ssl_cert_file and ssl_key_file by the instances. This approach enables clients to verify their identity and connect securely. Server alternative DNS names In addition to the default ones, you can specify DNS server alternative names as part of the generated server TLS secret. Client certificates Client CA secret By default, the same self-signed CA as the server CA is used. The public part is passed as ssl_ca_file to all the instances so it can verify client certificates it signed. The private key is stored in the same secret and used to sign client certificates generated by the kubectl cnpg plugin. Client streaming_replica certificate The operator uses the generated self-signed CA to sign a client certificate for the user streaming_replica , storing it in a secret of type kubernetes.io/tls . To allow secure connection to the primary instance, this certificate is passed as sslcert and sslkey in the replicas' connection strings. User-provided certificates mode Server certificates If required, you can also provide the two server certificates, generating them using a separate component such as cert-manager . To use a custom server TLS certificate for a cluster, you must specify the following parameters: serverTLSSecret \u2013 The name of a secret of type kubernetes.io/tls containing the server TLS certificate. It must contain both the standard tls.crt and tls.key keys. serverCASecret \u2013 The name of a secret containing the ca.crt key. Note The operator still creates and manages the two secrets related to client certificates. Note The operator and instances verify server certificates against the CA only, disregarding the DNS name. This approach is due to the typical absence of DNS names in user-provided certificates for the <cluster>-rw service used for communication within the cluster. Note If you want ConfigMaps and secrets to be reloaded by instances, you can add a label with the key cnpg.io/reload to it. Otherwise you must reload the instances using the kubectl cnpg reload subcommand. Example Given the following files: server-ca.crt \u2013 The certificate of the CA that signed the server TLS certificate. server.crt \u2013 The certificate of the server TLS certificate. server.key \u2013 The private key of the server TLS certificate. Create a secret containing the CA certificate: kubectl create secret generic my-postgresql-server-ca \\ --from-file=ca.crt=./server-ca.crt Create a secret with the TLS certificate: kubectl create secret tls my-postgresql-server \\ --cert=./server.crt --key=./server.key Create a PostgreSQL cluster referencing those secrets: kubectl apply -f - <<EOF apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: serverCASecret: my-postgresql-server-ca serverTLSSecret: my-postgresql-server storage: storageClass: standard size: 1Gi EOF The new cluster uses the provided server certificates for TLS connections. Cert-manager example This simple example shows how to use cert-manager to set up a self-signed CA and generate the needed TLS server certificate: --- apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: selfsigned-issuer spec: selfSigned: {} --- apiVersion: v1 kind: Secret metadata: name: my-postgres-server-cert labels: cnpg.io/reload: \"\" --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-postgres-server-cert spec: secretName: my-postgres-server-cert usages: - server auth dnsNames: - cluster-example-lb.internal.mydomain.net - cluster-example-rw - cluster-example-rw.default - cluster-example-rw.default.svc - cluster-example-r - cluster-example-r.default - cluster-example-r.default.svc - cluster-example-ro - cluster-example-ro.default - cluster-example-ro.default.svc issuerRef: name: selfsigned-issuer kind: Issuer group: cert-manager.io Cert-manager creates a secret named my-postgres-server-cert . It contains all the needed files and can be referenced from a cluster as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: serverTLSSecret: my-postgres-server-cert serverCASecret: my-postgres-server-cert storage: size: 1Gi You can find a complete example using cert-manager to manage both server and client CA and certificates in the cluster-example-cert-manager.yaml deployment manifest. Client certificate If required, you can also provide the two client certificates, generating them using a separate component such as cert-manager or HashiCorp vault . To use a custom CA to verify client certificates for a cluster, you must specify the following parameters: replicationTLSSecret \u2013 The name of a secret of type kubernetes.io/tls containing the client certificate for user streaming_replica . It must contain both the standard tls.crt and tls.key keys. clientCASecret \u2013 The name of a secret containing the ca.crt key of the CA to use to verify client certificate. Note The operator still creates and manages the two secrets related to server certificates. Note As the cluster isn't in control of the client CA secret key, you can no longer generate client certificates using kubectl cnpg certificate . Note If you want ConfigMaps and secrets to be automatically reloaded by instances, you can add a label with the key cnpg.io/reload to it. Otherwise, you must reload the instances using the kubectl cnpg reload subcommand. Customizing the streaming_replica client certificate In some environments, it may not be possible to generate a certificate with the common name streaming_replica due to company policies or other security concerns, such as a CA shared across multiple clusters. In such cases, the user mapping feature can be used to allow authentication as the streaming_replica user with certificates containing different common names. To configure this setup, add a pg_ident.conf entry for the predefined map named cnpg_streaming_replica . For example, to enable streaming_replica authentication using a certificate with the common name streaming-replica.cnpg.svc.cluster.local , add the following to your cluster definition: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: postgresql: pg_ident: - cnpg_streaming_replica streaming-replica.cnpg.svc.cluster.local streaming_replica For further details on how pg_ident.conf is managed by the operator, see the \"PostgreSQL Configuration\" page in the documentation. Cert-manager example This simple example shows how to use cert-manager to set up a self-signed CA and generate the needed TLS server certificate: --- apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: selfsigned-issuer spec: selfSigned: {} --- apiVersion: v1 kind: Secret metadata: name: my-postgres-client-cert labels: cnpg.io/reload: \"\" --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-postgres-client-cert spec: secretName: my-postgres-client-cert usages: - client auth commonName: streaming_replica issuerRef: name: selfsigned-issuer kind: Issuer group: cert-manager.io Cert-manager creates a secret named my-postgres-client-cert that contains all the needed files. You can reference it from a cluster as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: clientCASecret: my-postgres-client-cert replicationTLSSecret: my-postgres-client-cert storage: size: 1Gi You can find a complete example using cert-manager to manage both server and client CA and certificates in the cluster-example-cert-manager.yaml deployment manifest.","title":"Certificates"},{"location":"certificates/#certificates","text":"CloudNativePG was designed to natively support TLS certificates. To set up a cluster, the operator requires: A server certification authority (CA) certificate A server TLS certificate signed by the server CA A client CA certificate A streaming replication client certificate generated by the client CA Note You can find all the secrets used by the cluster and their expiration dates in the cluster's status. CloudNativePG is very flexible when it comes to TLS certificates. It primarily operates in two modes: Operator managed \u2013 Certificates are internally managed by the operator in a fully automated way and signed using a CA created by CloudNativePG. User provided \u2013 Certificates are generated outside the operator and imported in the cluster definition as secrets. CloudNativePG integrates itself with cert-manager (See Cert-manager example .) You can also choose a hybrid approach, where only part of the certificates is generated outside CNPG. Note The operator and instances verify server certificates against the CA only, disregarding the DNS name. This approach is due to the typical absence of DNS names in user-provided certificates for the <cluster>-rw service used for communication within the cluster.","title":"Certificates"},{"location":"certificates/#operator-managed-mode","text":"By default, the operator automatically generates a single Certificate Authority (CA) to issue both client and server certificates. These certificates are managed continuously by the operator, with automatic renewal 7 days before expiration (within a 90-day validity period). Info You can adjust this default behavior by configuring the CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD environment variables. For detailed guidance, refer to the Operator Configuration . Important Certificate renewal does not cause any downtime for the PostgreSQL server, as a simple reload operation is sufficient. However, any user-managed certificates not controlled by CloudNativePG must be re-issued following the renewal process. When generating certificates, the operator assumes that the Kubernetes cluster's DNS zone is set to cluster.local by default. This behavior can be customized by setting the KUBERNETES_CLUSTER_DOMAIN environment variable. A convenient alternative is to use the operator's configuration capability .","title":"Operator-Managed Mode"},{"location":"certificates/#server-certificates","text":"","title":"Server certificates"},{"location":"certificates/#server-ca-secret","text":"The operator generates a self-signed CA and stores it in a generic secret containing the following keys: ca.crt \u2013 CA certificate used to validate the server certificate, used as sslrootcert in clients' connection strings. ca.key \u2013 The key used to sign the server SSL certificate automatically.","title":"Server CA secret"},{"location":"certificates/#server-tls-secret","text":"The operator uses the generated self-signed CA to sign a server TLS certificate. It's stored in a secret of type kubernetes.io/tls and configured to be used as ssl_cert_file and ssl_key_file by the instances. This approach enables clients to verify their identity and connect securely.","title":"Server TLS secret"},{"location":"certificates/#server-alternative-dns-names","text":"In addition to the default ones, you can specify DNS server alternative names as part of the generated server TLS secret.","title":"Server alternative DNS names"},{"location":"certificates/#client-certificates","text":"","title":"Client certificates"},{"location":"certificates/#client-ca-secret","text":"By default, the same self-signed CA as the server CA is used. The public part is passed as ssl_ca_file to all the instances so it can verify client certificates it signed. The private key is stored in the same secret and used to sign client certificates generated by the kubectl cnpg plugin.","title":"Client CA secret"},{"location":"certificates/#client-streaming_replica-certificate","text":"The operator uses the generated self-signed CA to sign a client certificate for the user streaming_replica , storing it in a secret of type kubernetes.io/tls . To allow secure connection to the primary instance, this certificate is passed as sslcert and sslkey in the replicas' connection strings.","title":"Client streaming_replica certificate"},{"location":"certificates/#user-provided-certificates-mode","text":"","title":"User-provided certificates mode"},{"location":"certificates/#server-certificates_1","text":"If required, you can also provide the two server certificates, generating them using a separate component such as cert-manager . To use a custom server TLS certificate for a cluster, you must specify the following parameters: serverTLSSecret \u2013 The name of a secret of type kubernetes.io/tls containing the server TLS certificate. It must contain both the standard tls.crt and tls.key keys. serverCASecret \u2013 The name of a secret containing the ca.crt key. Note The operator still creates and manages the two secrets related to client certificates. Note The operator and instances verify server certificates against the CA only, disregarding the DNS name. This approach is due to the typical absence of DNS names in user-provided certificates for the <cluster>-rw service used for communication within the cluster. Note If you want ConfigMaps and secrets to be reloaded by instances, you can add a label with the key cnpg.io/reload to it. Otherwise you must reload the instances using the kubectl cnpg reload subcommand.","title":"Server certificates"},{"location":"certificates/#example","text":"Given the following files: server-ca.crt \u2013 The certificate of the CA that signed the server TLS certificate. server.crt \u2013 The certificate of the server TLS certificate. server.key \u2013 The private key of the server TLS certificate. Create a secret containing the CA certificate: kubectl create secret generic my-postgresql-server-ca \\ --from-file=ca.crt=./server-ca.crt Create a secret with the TLS certificate: kubectl create secret tls my-postgresql-server \\ --cert=./server.crt --key=./server.key Create a PostgreSQL cluster referencing those secrets: kubectl apply -f - <<EOF apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: serverCASecret: my-postgresql-server-ca serverTLSSecret: my-postgresql-server storage: storageClass: standard size: 1Gi EOF The new cluster uses the provided server certificates for TLS connections.","title":"Example"},{"location":"certificates/#cert-manager-example","text":"This simple example shows how to use cert-manager to set up a self-signed CA and generate the needed TLS server certificate: --- apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: selfsigned-issuer spec: selfSigned: {} --- apiVersion: v1 kind: Secret metadata: name: my-postgres-server-cert labels: cnpg.io/reload: \"\" --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-postgres-server-cert spec: secretName: my-postgres-server-cert usages: - server auth dnsNames: - cluster-example-lb.internal.mydomain.net - cluster-example-rw - cluster-example-rw.default - cluster-example-rw.default.svc - cluster-example-r - cluster-example-r.default - cluster-example-r.default.svc - cluster-example-ro - cluster-example-ro.default - cluster-example-ro.default.svc issuerRef: name: selfsigned-issuer kind: Issuer group: cert-manager.io Cert-manager creates a secret named my-postgres-server-cert . It contains all the needed files and can be referenced from a cluster as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: serverTLSSecret: my-postgres-server-cert serverCASecret: my-postgres-server-cert storage: size: 1Gi You can find a complete example using cert-manager to manage both server and client CA and certificates in the cluster-example-cert-manager.yaml deployment manifest.","title":"Cert-manager example"},{"location":"certificates/#client-certificate","text":"If required, you can also provide the two client certificates, generating them using a separate component such as cert-manager or HashiCorp vault . To use a custom CA to verify client certificates for a cluster, you must specify the following parameters: replicationTLSSecret \u2013 The name of a secret of type kubernetes.io/tls containing the client certificate for user streaming_replica . It must contain both the standard tls.crt and tls.key keys. clientCASecret \u2013 The name of a secret containing the ca.crt key of the CA to use to verify client certificate. Note The operator still creates and manages the two secrets related to server certificates. Note As the cluster isn't in control of the client CA secret key, you can no longer generate client certificates using kubectl cnpg certificate . Note If you want ConfigMaps and secrets to be automatically reloaded by instances, you can add a label with the key cnpg.io/reload to it. Otherwise, you must reload the instances using the kubectl cnpg reload subcommand.","title":"Client certificate"},{"location":"certificates/#customizing-the-streaming_replica-client-certificate","text":"In some environments, it may not be possible to generate a certificate with the common name streaming_replica due to company policies or other security concerns, such as a CA shared across multiple clusters. In such cases, the user mapping feature can be used to allow authentication as the streaming_replica user with certificates containing different common names. To configure this setup, add a pg_ident.conf entry for the predefined map named cnpg_streaming_replica . For example, to enable streaming_replica authentication using a certificate with the common name streaming-replica.cnpg.svc.cluster.local , add the following to your cluster definition: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: postgresql: pg_ident: - cnpg_streaming_replica streaming-replica.cnpg.svc.cluster.local streaming_replica For further details on how pg_ident.conf is managed by the operator, see the \"PostgreSQL Configuration\" page in the documentation.","title":"Customizing the streaming_replica client certificate"},{"location":"certificates/#cert-manager-example_1","text":"This simple example shows how to use cert-manager to set up a self-signed CA and generate the needed TLS server certificate: --- apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: selfsigned-issuer spec: selfSigned: {} --- apiVersion: v1 kind: Secret metadata: name: my-postgres-client-cert labels: cnpg.io/reload: \"\" --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-postgres-client-cert spec: secretName: my-postgres-client-cert usages: - client auth commonName: streaming_replica issuerRef: name: selfsigned-issuer kind: Issuer group: cert-manager.io Cert-manager creates a secret named my-postgres-client-cert that contains all the needed files. You can reference it from a cluster as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: clientCASecret: my-postgres-client-cert replicationTLSSecret: my-postgres-client-cert storage: size: 1Gi You can find a complete example using cert-manager to manage both server and client CA and certificates in the cluster-example-cert-manager.yaml deployment manifest.","title":"Cert-manager example"},{"location":"cloudnative-pg.v1/","text":"API Reference Package v1 contains API Schema definitions for the postgresql v1 API group Resource Types Backup Cluster ClusterImageCatalog Database FailoverQuorum ImageCatalog Pooler Publication ScheduledBackup Subscription Backup A Backup resource is a request for a PostgreSQL backup by the user. Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Backup metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] BackupSpec Specification of the desired behavior of the backup. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status BackupStatus Most recently observed status of the backup. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Cluster Cluster is the Schema for the PostgreSQL API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Cluster metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ClusterSpec Specification of the desired behavior of the cluster. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status ClusterStatus Most recently observed status of the cluster. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status ClusterImageCatalog ClusterImageCatalog is the Schema for the clusterimagecatalogs API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ClusterImageCatalog metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ImageCatalogSpec Specification of the desired behavior of the ClusterImageCatalog. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Database Database is the Schema for the databases API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Database metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] DatabaseSpec Specification of the desired Database. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status DatabaseStatus Most recently observed status of the Database. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status FailoverQuorum Appears in: FailoverQuorum contains the information about the current failover quorum status of a PG cluster. It is updated by the instance manager of the primary node and reset to zero by the operator to trigger an update. Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string FailoverQuorum metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. status FailoverQuorumStatus Most recently observed status of the failover quorum. ImageCatalog ImageCatalog is the Schema for the imagecatalogs API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ImageCatalog metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ImageCatalogSpec Specification of the desired behavior of the ImageCatalog. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Pooler Pooler is the Schema for the poolers API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Pooler metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] PoolerSpec Specification of the desired behavior of the Pooler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status PoolerStatus Most recently observed status of the Pooler. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Publication Publication is the Schema for the publications API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Publication metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] PublicationSpec No description provided. status [Required] PublicationStatus No description provided. ScheduledBackup ScheduledBackup is the Schema for the scheduledbackups API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ScheduledBackup metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ScheduledBackupSpec Specification of the desired behavior of the ScheduledBackup. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status ScheduledBackupStatus Most recently observed status of the ScheduledBackup. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Subscription Subscription is the Schema for the subscriptions API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Subscription metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] SubscriptionSpec No description provided. status [Required] SubscriptionStatus No description provided. AffinityConfiguration Appears in: ClusterSpec AffinityConfiguration contains the info we need to create the affinity rules for Pods Field Description enablePodAntiAffinity bool Activates anti-affinity for the pods. The operator will define pods anti-affinity unless this field is explicitly set to false topologyKey string TopologyKey to use for anti-affinity configuration. See k8s documentation for more info on that nodeSelector map[string]string NodeSelector is map of key-value pairs used to define the nodes on which the pods can run. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ nodeAffinity core/v1.NodeAffinity NodeAffinity describes node affinity scheduling rules for the pod. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity tolerations []core/v1.Toleration Tolerations is a list of Tolerations that should be set for all the pods, in order to allow them to run on tainted nodes. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ podAntiAffinityType string PodAntiAffinityType allows the user to decide whether pod anti-affinity between cluster instance has to be considered a strong requirement during scheduling or not. Allowed values are: \"preferred\" (default if empty) or \"required\". Setting it to \"required\", could lead to instances remaining pending until new kubernetes nodes are added if all the existing nodes don't match the required pod anti-affinity rule. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity additionalPodAntiAffinity core/v1.PodAntiAffinity AdditionalPodAntiAffinity allows to specify pod anti-affinity terms to be added to the ones generated by the operator if EnablePodAntiAffinity is set to true (default) or to be used exclusively if set to false. additionalPodAffinity core/v1.PodAffinity AdditionalPodAffinity allows to specify pod affinity terms to be passed to all the cluster's pods. AvailableArchitecture Appears in: ClusterStatus AvailableArchitecture represents the state of a cluster's architecture Field Description goArch [Required] string GoArch is the name of the executable architecture hash [Required] string Hash is the hash of the executable BackupConfiguration Appears in: ClusterSpec BackupConfiguration defines how the backup of the cluster are taken. The supported backup methods are BarmanObjectStore and VolumeSnapshot. For details and examples refer to the Backup and Recovery section of the documentation Field Description volumeSnapshot VolumeSnapshotConfiguration VolumeSnapshot provides the configuration for the execution of volume snapshot backups. barmanObjectStore github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration The configuration for the barman-cloud tool suite retentionPolicy string RetentionPolicy is the retention policy to be used for backups and WALs (i.e. '60d'). The retention policy is expressed in the form of XXu where XX is a positive integer and u is in [dwm] - days, weeks, months. It's currently only applicable when using the BarmanObjectStore method. target BackupTarget The policy to decide which instance should perform backups. Available options are empty string, which will default to prefer-standby policy, primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. BackupMethod (Alias of string ) Appears in: BackupSpec BackupStatus ScheduledBackupSpec BackupMethod defines the way of executing the physical base backups of the selected PostgreSQL instance BackupPhase (Alias of string ) Appears in: BackupStatus BackupPhase is the phase of the backup BackupPluginConfiguration Appears in: BackupSpec ScheduledBackupSpec BackupPluginConfiguration contains the backup configuration used by the backup plugin Field Description name [Required] string Name is the name of the plugin managing this backup parameters map[string]string Parameters are the configuration parameters passed to the backup plugin for this backup BackupSnapshotElementStatus Appears in: BackupSnapshotStatus BackupSnapshotElementStatus is a volume snapshot that is part of a volume snapshot method backup Field Description name [Required] string Name is the snapshot resource name type [Required] string Type is tho role of the snapshot in the cluster, such as PG_DATA, PG_WAL and PG_TABLESPACE tablespaceName string TablespaceName is the name of the snapshotted tablespace. Only set when type is PG_TABLESPACE BackupSnapshotStatus Appears in: BackupStatus BackupSnapshotStatus the fields exclusive to the volumeSnapshot method backup Field Description elements []BackupSnapshotElementStatus The elements list, populated with the gathered volume snapshots BackupSource Appears in: BootstrapRecovery BackupSource contains the backup we need to restore from, plus some information that could be needed to correctly restore it. Field Description LocalObjectReference github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference (Members of LocalObjectReference are embedded into this type.) No description provided. endpointCA github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector EndpointCA store the CA bundle of the barman endpoint. Useful when using self-signed certificates to avoid errors with certificate issuer and barman-cloud-wal-archive. BackupSpec Appears in: Backup BackupSpec defines the desired state of Backup Field Description cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The cluster to backup target BackupTarget The policy to decide which instance should perform this backup. If empty, it defaults to cluster.spec.backup.target . Available options are empty string, primary and prefer-standby . primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. method BackupMethod The backup method to be used, possible options are barmanObjectStore , volumeSnapshot or plugin . Defaults to: barmanObjectStore . pluginConfiguration BackupPluginConfiguration Configuration parameters passed to the plugin managing this backup online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online' onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza BackupStatus Appears in: Backup BackupStatus defines the observed state of Backup Field Description BarmanCredentials github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanCredentials (Members of BarmanCredentials are embedded into this type.) The potential credentials for each cloud provider endpointCA github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector EndpointCA store the CA bundle of the barman endpoint. Useful when using self-signed certificates to avoid errors with certificate issuer and barman-cloud-wal-archive. endpointURL string Endpoint to be used to upload data to the cloud, overriding the automatic endpoint discovery destinationPath string The path where to store the backup (i.e. s3://bucket/path/to/folder) this path, with different destination folders, will be used for WALs and for data. This may not be populated in case of errors. serverName string The server name on S3, the cluster name is used if this parameter is omitted encryption string Encryption method required to S3 API backupId string The ID of the Barman backup backupName string The Name of the Barman backup phase BackupPhase The last backup status startedAt meta/v1.Time When the backup was started stoppedAt meta/v1.Time When the backup was terminated beginWal string The starting WAL endWal string The ending WAL beginLSN string The starting xlog endLSN string The ending xlog error string The detected error commandOutput string Unused. Retained for compatibility with old versions. commandError string The backup command output in case of error backupLabelFile []byte Backup label file content as returned by Postgres in case of online (hot) backups tablespaceMapFile []byte Tablespace map file content as returned by Postgres in case of online (hot) backups instanceID InstanceID Information to identify the instance where the backup has been taken from snapshotBackupStatus BackupSnapshotStatus Status of the volumeSnapshot backup method BackupMethod The backup method being used online bool Whether the backup was online/hot ( true ) or offline/cold ( false ) pluginMetadata map[string]string A map containing the plugin metadata BackupTarget (Alias of string ) Appears in: BackupConfiguration BackupSpec ScheduledBackupSpec BackupTarget describes the preferred targets for a backup BootstrapConfiguration Appears in: ClusterSpec BootstrapConfiguration contains information about how to create the PostgreSQL cluster. Only a single bootstrap method can be defined among the supported ones. initdb will be used as the bootstrap method if left unspecified. Refer to the Bootstrap page of the documentation for more information. Field Description initdb BootstrapInitDB Bootstrap the cluster via initdb recovery BootstrapRecovery Bootstrap the cluster from a backup pg_basebackup BootstrapPgBaseBackup Bootstrap the cluster taking a physical backup of another compatible PostgreSQL instance BootstrapInitDB Appears in: BootstrapConfiguration BootstrapInitDB is the configuration of the bootstrap process when initdb is used Refer to the Bootstrap page of the documentation for more information. Field Description database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch options []string The list of options that must be passed to initdb when creating the cluster. Deprecated: This could lead to inconsistent configurations, please use the explicit provided parameters instead. If defined, explicit values will be ignored. dataChecksums bool Whether the -k option should be passed to initdb, enabling checksums on data pages (default: false ) encoding string The value to be passed as option --encoding for initdb (default: UTF8 ) localeCollate string The value to be passed as option --lc-collate for initdb (default: C ) localeCType string The value to be passed as option --lc-ctype for initdb (default: C ) locale string Sets the default collation order and character classification in the new database. localeProvider string This option sets the locale provider for databases created in the new cluster. Available from PostgreSQL 16. icuLocale string Specifies the ICU locale when the ICU provider is used. This option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules string Specifies additional collation rules to customize the behavior of the default collation. This option requires localeProvider to be set to icu . Available from PostgreSQL 16. builtinLocale string Specifies the locale name when the builtin provider is used. This option requires localeProvider to be set to builtin . Available from PostgreSQL 17. walSegmentSize int The value in megabytes (1 to 1024) to be passed to the --wal-segsize option for initdb (default: empty, resulting in PostgreSQL default: 16MB) postInitSQL []string List of SQL queries to be executed as a superuser in the postgres database right after the cluster has been created - to be used with extreme care (by default empty) postInitApplicationSQL []string List of SQL queries to be executed as a superuser in the application database right after the cluster has been created - to be used with extreme care (by default empty) postInitTemplateSQL []string List of SQL queries to be executed as a superuser in the template1 database right after the cluster has been created - to be used with extreme care (by default empty) import Import Bootstraps the new cluster by importing data from an existing PostgreSQL instance using logical backup ( pg_dump and pg_restore ) postInitApplicationSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the application database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) postInitTemplateSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the template1 database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) postInitSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the postgres database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) BootstrapPgBaseBackup Appears in: BootstrapConfiguration BootstrapPgBaseBackup contains the configuration required to take a physical backup of an existing PostgreSQL cluster Field Description source [Required] string The name of the server of which we need to take a physical backup database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch BootstrapRecovery Appears in: BootstrapConfiguration BootstrapRecovery contains the configuration required to restore from an existing cluster using 3 methodologies: external cluster, volume snapshots or backup objects. Full recovery and Point-In-Time Recovery are supported. The method can be also be used to create clusters in continuous recovery (replica clusters), also supporting cascading replication when instances > Once the cluster exits recovery, the password for the superuser will be changed through the provided secret. Refer to the Bootstrap page of the documentation for more information. Field Description backup BackupSource The backup object containing the physical base backup from which to initiate the recovery procedure. Mutually exclusive with source and volumeSnapshots . source string The external cluster whose backup we will restore. This is also used as the name of the folder under which the backup is stored, so it must be set to the name of the source cluster Mutually exclusive with backup . volumeSnapshots DataSource The static PVC data source(s) from which to initiate the recovery procedure. Currently supporting VolumeSnapshot and PersistentVolumeClaim resources that map an existing PVC group, compatible with CloudNativePG, and taken with a cold backup copy on a fenced Postgres instance (limitation which will be removed in the future when online backup will be implemented). Mutually exclusive with backup . recoveryTarget RecoveryTarget By default, the recovery process applies all the available WAL files in the archive (full recovery). However, you can also end the recovery as soon as a consistent state is reached or recover to a point-in-time (PITR) by specifying a RecoveryTarget object, as expected by PostgreSQL (i.e., timestamp, transaction Id, LSN, ...). More info: https://www.postgresql.org/docs/current/runtime-config-wal.html#RUNTIME-CONFIG-WAL-RECOVERY-TARGET database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch CatalogImage Appears in: ImageCatalogSpec CatalogImage defines the image and major version Field Description image [Required] string The image reference major [Required] int The PostgreSQL major version of the image. Must be unique within the catalog. CertificatesConfiguration Appears in: CertificatesStatus ClusterSpec CertificatesConfiguration contains the needed configurations to handle server certificates. Field Description serverCASecret string The secret containing the Server CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate the TLS certificate ServerTLSSecret. Contains: ca.crt : CA that should be used to validate the server certificate, used as sslrootcert in client connection strings. ca.key : key used to generate Server SSL certs, if ServerTLSSecret is provided, this can be omitted. serverTLSSecret string The secret of type kubernetes.io/tls containing the server TLS certificate and key that will be set as ssl_cert_file and ssl_key_file so that clients can connect to postgres securely. If not defined, ServerCASecret must provide also ca.key and a new secret will be created using the provided CA. replicationTLSSecret string The secret of type kubernetes.io/tls containing the client certificate to authenticate as the streaming_replica user. If not defined, ClientCASecret must provide also ca.key , and a new secret will be created using the provided CA. clientCASecret string The secret containing the Client CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate all the client certificates. Contains: ca.crt : CA that should be used to validate the client certificates, used as ssl_ca_file of all the instances. ca.key : key used to generate client certificates, if ReplicationTLSSecret is provided, this can be omitted. serverAltDNSNames []string The list of the server alternative DNS names to be added to the generated server TLS certificates, when required. CertificatesStatus Appears in: ClusterStatus CertificatesStatus contains configuration certificates and related expiration dates. Field Description CertificatesConfiguration CertificatesConfiguration (Members of CertificatesConfiguration are embedded into this type.) Needed configurations to handle server certificates, initialized with default values, if needed. expirations map[string]string Expiration dates for all certificates. ClusterMonitoringTLSConfiguration Appears in: MonitoringConfiguration ClusterMonitoringTLSConfiguration is the type containing the TLS configuration for the cluster's monitoring Field Description enabled bool Enable TLS for the monitoring endpoint. Changing this option will force a rollout of all instances. ClusterSpec Appears in: Cluster ClusterSpec defines the desired state of Cluster Field Description description string Description of this PostgreSQL cluster inheritedMetadata EmbeddedObjectMetadata Metadata that will be inherited by all objects related to the Cluster imageName string Name of the container image, supporting both tags ( <image>:<tag> ) and digests for deterministic and repeatable deployments ( <image>:<tag>@sha256:<digestValue> ) imageCatalogRef ImageCatalogRef Defines the major PostgreSQL version we want to use within an ImageCatalog imagePullPolicy core/v1.PullPolicy Image pull policy. One of Always , Never or IfNotPresent . If not defined, it defaults to IfNotPresent . Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images schedulerName string If specified, the pod will be dispatched by specified Kubernetes scheduler. If not specified, the pod will be dispatched by the default scheduler. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/kube-scheduler/ postgresUID int64 The UID of the postgres user inside the image, defaults to 26 postgresGID int64 The GID of the postgres user inside the image, defaults to 26 instances [Required] int Number of instances required in the cluster minSyncReplicas int Minimum number of instances required in synchronous replication with the primary. Undefined or 0 allow writes to complete when no standby is available. maxSyncReplicas int The target value for the synchronous replication quorum, that can be decreased if the number of ready standbys is lower than this. Undefined or 0 disable synchronous replication. postgresql PostgresConfiguration Configuration of the PostgreSQL server replicationSlots ReplicationSlotsConfiguration Replication slots management configuration bootstrap BootstrapConfiguration Instructions to bootstrap this cluster replica ReplicaClusterConfiguration Replica cluster configuration superuserSecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The secret containing the superuser password. If not defined a new secret will be created with a randomly generated password enableSuperuserAccess bool When this option is enabled, the operator will use the SuperuserSecret to update the postgres user password (if the secret is not present, the operator will automatically create one). When this option is disabled, the operator will ignore the SuperuserSecret content, delete it when automatically created, and then blank the password of the postgres user by setting it to NULL . Disabled by default. certificates CertificatesConfiguration The configuration for the CA and related certificates imagePullSecrets []github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The list of pull secrets to be used to pull the images storage StorageConfiguration Configuration of the storage of the instances serviceAccountTemplate ServiceAccountTemplate Configure the generation of the service account walStorage StorageConfiguration Configuration of the storage for PostgreSQL WAL (Write-Ahead Log) ephemeralVolumeSource core/v1.EphemeralVolumeSource EphemeralVolumeSource allows the user to configure the source of ephemeral volumes. startDelay int32 The time in seconds that is allowed for a PostgreSQL instance to successfully start up (default 3600). The startup probe failure threshold is derived from this value using the formula: ceiling(startDelay / 10). stopDelay int32 The time in seconds that is allowed for a PostgreSQL instance to gracefully shutdown (default 1800) smartShutdownTimeout int32 The time in seconds that controls the window of time reserved for the smart shutdown of Postgres to complete. Make sure you reserve enough time for the operator to request a fast shutdown of Postgres (that is: stopDelay - smartShutdownTimeout ). switchoverDelay int32 The time in seconds that is allowed for a primary PostgreSQL instance to gracefully shutdown during a switchover. Default value is 3600 seconds (1 hour). failoverDelay int32 The amount of time (in seconds) to wait before triggering a failover after the primary PostgreSQL instance in the cluster was detected to be unhealthy livenessProbeTimeout int32 LivenessProbeTimeout is the time (in seconds) that is allowed for a PostgreSQL instance to successfully respond to the liveness probe (default 30). The Liveness probe failure threshold is derived from this value using the formula: ceiling(livenessProbe / 10). affinity AffinityConfiguration Affinity/Anti-affinity rules for Pods topologySpreadConstraints []core/v1.TopologySpreadConstraint TopologySpreadConstraints specifies how to spread matching pods among the given topology. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/ resources core/v1.ResourceRequirements Resources requirements of every generated Pod. Please refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ for more information. ephemeralVolumesSizeLimit EphemeralVolumesSizeLimitConfiguration EphemeralVolumesSizeLimit allows the user to set the limits for the ephemeral volumes priorityClassName string Name of the priority class which will be used in every generated Pod, if the PriorityClass specified does not exist, the pod will not be able to schedule. Please refer to https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass for more information primaryUpdateStrategy PrimaryUpdateStrategy Deployment strategy to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be automated ( unsupervised - default) or manual ( supervised ) primaryUpdateMethod PrimaryUpdateMethod Method to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be with a switchover ( switchover ) or in-place ( restart - default) backup BackupConfiguration The configuration to be used for backups nodeMaintenanceWindow NodeMaintenanceWindow Define a maintenance window for the Kubernetes nodes monitoring MonitoringConfiguration The configuration of the monitoring infrastructure of this cluster externalClusters []ExternalCluster The list of external clusters which are used in the configuration logLevel string The instances' log level, one of the following values: error, warning, info (default), debug, trace projectedVolumeTemplate core/v1.ProjectedVolumeSource Template to be used to define projected volumes, projected volumes will be mounted under /projected base folder env []core/v1.EnvVar Env follows the Env format to pass environment variables to the pods created in the cluster envFrom []core/v1.EnvFromSource EnvFrom follows the EnvFrom format to pass environment variables sources to the pods to be used by Env managed ManagedConfiguration The configuration that is used by the portions of PostgreSQL that are managed by the instance manager seccompProfile core/v1.SeccompProfile The SeccompProfile applied to every Pod and Container. Defaults to: RuntimeDefault tablespaces []TablespaceConfiguration The tablespaces configuration enablePDB bool Manage the PodDisruptionBudget resources within the cluster. When configured as true (default setting), the pod disruption budgets will safeguard the primary node from being terminated. Conversely, setting it to false will result in the absence of any PodDisruptionBudget resource, permitting the shutdown of all nodes hosting the PostgreSQL cluster. This latter configuration is advisable for any PostgreSQL cluster employed for development/staging purposes. plugins []PluginConfiguration The plugins configuration, containing any plugin to be loaded with the corresponding configuration probes ProbesConfiguration The configuration of the probes to be injected in the PostgreSQL Pods. ClusterStatus Appears in: Cluster ClusterStatus defines the observed state of Cluster Field Description instances int The total number of PVC Groups detected in the cluster. It may differ from the number of existing instance pods. readyInstances int The total number of ready instances in the cluster. It is equal to the number of ready instance pods. instancesStatus map[PodStatus][]string InstancesStatus indicates in which status the instances are instancesReportedState map[PodName]InstanceReportedState The reported state of the instances during the last reconciliation loop managedRolesStatus ManagedRoles ManagedRolesStatus reports the state of the managed roles in the cluster tablespacesStatus []TablespaceState TablespacesStatus reports the state of the declarative tablespaces in the cluster timelineID int The timeline of the Postgres cluster topology Topology Instances topology. latestGeneratedNode int ID of the latest generated node (used to avoid node name clashing) currentPrimary string Current primary instance targetPrimary string Target primary instance, this is different from the previous one during a switchover or a failover lastPromotionToken string LastPromotionToken is the last verified promotion token that was used to promote a replica cluster pvcCount int32 How many PVCs have been created by this cluster jobCount int32 How many Jobs have been created by this cluster danglingPVC []string List of all the PVCs created by this cluster and still available which are not attached to a Pod resizingPVC []string List of all the PVCs that have ResizingPVC condition. initializingPVC []string List of all the PVCs that are being initialized by this cluster healthyPVC []string List of all the PVCs not dangling nor initializing unusablePVC []string List of all the PVCs that are unusable because another PVC is missing writeService string Current write pod readService string Current list of read pods phase string Current phase of the cluster phaseReason string Reason for the current phase secretsResourceVersion SecretsResourceVersion The list of resource versions of the secrets managed by the operator. Every change here is done in the interest of the instance manager, which will refresh the secret data configMapResourceVersion ConfigMapResourceVersion The list of resource versions of the configmaps, managed by the operator. Every change here is done in the interest of the instance manager, which will refresh the configmap data certificates CertificatesStatus The configuration for the CA and related certificates, initialized with defaults. firstRecoverabilityPoint string The first recoverability point, stored as a date in RFC3339 format. This field is calculated from the content of FirstRecoverabilityPointByMethod. Deprecated: the field is not set for backup plugins. firstRecoverabilityPointByMethod map[BackupMethod]meta/v1.Time The first recoverability point, stored as a date in RFC3339 format, per backup method type. Deprecated: the field is not set for backup plugins. lastSuccessfulBackup string Last successful backup, stored as a date in RFC3339 format. This field is calculated from the content of LastSuccessfulBackupByMethod. Deprecated: the field is not set for backup plugins. lastSuccessfulBackupByMethod map[BackupMethod]meta/v1.Time Last successful backup, stored as a date in RFC3339 format, per backup method type. Deprecated: the field is not set for backup plugins. lastFailedBackup string Last failed backup, stored as a date in RFC3339 format. Deprecated: the field is not set for backup plugins. cloudNativePGCommitHash string The commit hash number of which this operator running currentPrimaryTimestamp string The timestamp when the last actual promotion to primary has occurred currentPrimaryFailingSinceTimestamp string The timestamp when the primary was detected to be unhealthy This field is reported when .spec.failoverDelay is populated or during online upgrades targetPrimaryTimestamp string The timestamp when the last request for a new primary has occurred poolerIntegrations PoolerIntegrations The integration needed by poolers referencing the cluster cloudNativePGOperatorHash string The hash of the binary of the operator availableArchitectures []AvailableArchitecture AvailableArchitectures reports the available architectures of a cluster conditions []meta/v1.Condition Conditions for cluster object instanceNames []string List of instance names in the cluster onlineUpdateEnabled bool OnlineUpdateEnabled shows if the online upgrade is enabled inside the cluster image string Image contains the image name used by the pods pgDataImageInfo ImageInfo PGDataImageInfo contains the details of the latest image that has run on the current data directory. pluginStatus []PluginStatus PluginStatus is the status of the loaded plugins switchReplicaClusterStatus SwitchReplicaClusterStatus SwitchReplicaClusterStatus is the status of the switch to replica cluster demotionToken string DemotionToken is a JSON token containing the information from pg_controldata such as Database system identifier, Latest checkpoint's TimeLineID, Latest checkpoint's REDO location, Latest checkpoint's REDO WAL file, and Time of latest checkpoint systemID string SystemID is the latest detected PostgreSQL SystemID ConfigMapResourceVersion Appears in: ClusterStatus ConfigMapResourceVersion is the resource versions of the secrets managed by the operator Field Description metrics map[string]string A map with the versions of all the config maps used to pass metrics. Map keys are the config map names, map values are the versions DataDurabilityLevel (Alias of string ) Appears in: SynchronousReplicaConfiguration DataDurabilityLevel specifies how strictly to enforce synchronous replication when cluster instances are unavailable. Options are required or preferred . DataSource Appears in: BootstrapRecovery DataSource contains the configuration required to bootstrap a PostgreSQL cluster from an existing storage Field Description storage [Required] core/v1.TypedLocalObjectReference Configuration of the storage of the instances walStorage core/v1.TypedLocalObjectReference Configuration of the storage for PostgreSQL WAL (Write-Ahead Log) tablespaceStorage map[string]core/v1.TypedLocalObjectReference Configuration of the storage for PostgreSQL tablespaces DatabaseObjectSpec Appears in: ExtensionSpec SchemaSpec DatabaseObjectSpec contains the fields which are common to every database object Field Description name [Required] string Name of the extension/schema ensure EnsureOption Specifies whether an extension/schema should be present or absent in the database. If set to present , the extension/schema will be created if it does not exist. If set to absent , the extension/schema will be removed if it exists. DatabaseObjectStatus Appears in: DatabaseStatus DatabaseObjectStatus is the status of the managed database objects Field Description name [Required] string The name of the object applied [Required] bool True of the object has been installed successfully in the database message string Message is the object reconciliation message DatabaseReclaimPolicy (Alias of string ) Appears in: DatabaseSpec DatabaseReclaimPolicy describes a policy for end-of-life maintenance of databases. DatabaseRoleRef Appears in: TablespaceConfiguration DatabaseRoleRef is a reference an a role available inside PostgreSQL Field Description name string No description provided. DatabaseSpec Appears in: Database DatabaseSpec is the specification of a Postgresql Database, built around the CREATE DATABASE , ALTER DATABASE , and DROP DATABASE SQL commands of PostgreSQL. Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster hosting the database. ensure EnsureOption Ensure the PostgreSQL database is present or absent - defaults to \"present\". name [Required] string The name of the database to create inside PostgreSQL. This setting cannot be changed. owner [Required] string Maps to the OWNER parameter of CREATE DATABASE . Maps to the OWNER TO command of ALTER DATABASE . The role name of the user who owns the database inside PostgreSQL. template string Maps to the TEMPLATE parameter of CREATE DATABASE . This setting cannot be changed. The name of the template from which to create this database. encoding string Maps to the ENCODING parameter of CREATE DATABASE . This setting cannot be changed. Character set encoding to use in the database. locale string Maps to the LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Sets the default collation order and character classification in the new database. localeProvider string Maps to the LOCALE_PROVIDER parameter of CREATE DATABASE . This setting cannot be changed. This option sets the locale provider for databases created in the new cluster. Available from PostgreSQL 16. localeCollate string Maps to the LC_COLLATE parameter of CREATE DATABASE . This setting cannot be changed. localeCType string Maps to the LC_CTYPE parameter of CREATE DATABASE . This setting cannot be changed. icuLocale string Maps to the ICU_LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Specifies the ICU locale when the ICU provider is used. This option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules string Maps to the ICU_RULES parameter of CREATE DATABASE . This setting cannot be changed. Specifies additional collation rules to customize the behavior of the default collation. This option requires localeProvider to be set to icu . Available from PostgreSQL 16. builtinLocale string Maps to the BUILTIN_LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Specifies the locale name when the builtin provider is used. This option requires localeProvider to be set to builtin . Available from PostgreSQL 17. collationVersion string Maps to the COLLATION_VERSION parameter of CREATE DATABASE . This setting cannot be changed. isTemplate bool Maps to the IS_TEMPLATE parameter of CREATE DATABASE and ALTER DATABASE . If true, this database is considered a template and can be cloned by any user with CREATEDB privileges. allowConnections bool Maps to the ALLOW_CONNECTIONS parameter of CREATE DATABASE and ALTER DATABASE . If false then no one can connect to this database. connectionLimit int Maps to the CONNECTION LIMIT clause of CREATE DATABASE and ALTER DATABASE . How many concurrent connections can be made to this database. -1 (the default) means no limit. tablespace string Maps to the TABLESPACE parameter of CREATE DATABASE . Maps to the SET TABLESPACE command of ALTER DATABASE . The name of the tablespace (in PostgreSQL) that will be associated with the new database. This tablespace will be the default tablespace used for objects created in this database. databaseReclaimPolicy DatabaseReclaimPolicy The policy for end-of-life maintenance of this database. schemas []SchemaSpec The list of schemas to be managed in the database extensions []ExtensionSpec The list of extensions to be managed in the database DatabaseStatus Appears in: Database DatabaseStatus defines the observed state of Database Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the database was reconciled correctly message string Message is the reconciliation output message schemas []DatabaseObjectStatus Schemas is the status of the managed schemas extensions []DatabaseObjectStatus Extensions is the status of the managed extensions EmbeddedObjectMetadata Appears in: ClusterSpec EmbeddedObjectMetadata contains metadata to be inherited by all resources related to a Cluster Field Description labels map[string]string No description provided. annotations map[string]string No description provided. EnsureOption (Alias of string ) Appears in: DatabaseObjectSpec DatabaseSpec RoleConfiguration EnsureOption represents whether we should enforce the presence or absence of a Role in a PostgreSQL instance EphemeralVolumesSizeLimitConfiguration Appears in: ClusterSpec EphemeralVolumesSizeLimitConfiguration contains the configuration of the ephemeral storage Field Description shm k8s.io/apimachinery/pkg/api/resource.Quantity Shm is the size limit of the shared memory volume temporaryData k8s.io/apimachinery/pkg/api/resource.Quantity TemporaryData is the size limit of the temporary data volume ExtensionConfiguration Appears in: PostgresConfiguration ExtensionConfiguration is the configuration used to add PostgreSQL extensions to the Cluster. Field Description name [Required] string The name of the extension, required image [Required] core/v1.ImageVolumeSource The image containing the extension, required extension_control_path []string The list of directories inside the image which should be added to extension_control_path. If not defined, defaults to \"/share\". dynamic_library_path []string The list of directories inside the image which should be added to dynamic_library_path. If not defined, defaults to \"/lib\". ld_library_path []string The list of directories inside the image which should be added to ld_library_path. ExtensionSpec Appears in: DatabaseSpec ExtensionSpec configures an extension in a database Field Description DatabaseObjectSpec DatabaseObjectSpec (Members of DatabaseObjectSpec are embedded into this type.) Common fields version [Required] string The version of the extension to install. If empty, the operator will install the default version (whatever is specified in the extension's control file) schema [Required] string The name of the schema in which to install the extension's objects, in case the extension allows its contents to be relocated. If not specified (default), and the extension's control file does not specify a schema either, the current default object creation schema is used. ExternalCluster Appears in: ClusterSpec ExternalCluster represents the connection parameters to an external cluster which is used in the other sections of the configuration Field Description name [Required] string The server name, required connectionParameters map[string]string The list of connection parameters, such as dbname, host, username, etc sslCert core/v1.SecretKeySelector The reference to an SSL certificate to be used to connect to this instance sslKey core/v1.SecretKeySelector The reference to an SSL private key to be used to connect to this instance sslRootCert core/v1.SecretKeySelector The reference to an SSL CA public key to be used to connect to this instance password core/v1.SecretKeySelector The reference to the password to be used to connect to the server. If a password is provided, CloudNativePG creates a PostgreSQL passfile at /controller/external/NAME/pass (where \"NAME\" is the cluster's name). This passfile is automatically referenced in the connection string when establishing a connection to the remote PostgreSQL server from the current PostgreSQL Cluster . This ensures secure and efficient password management for external clusters. barmanObjectStore github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration The configuration for the barman-cloud tool suite plugin [Required] PluginConfiguration The configuration of the plugin that is taking care of WAL archiving and backups for this external cluster FailoverQuorumStatus Appears in: FailoverQuorum FailoverQuorumStatus is the latest observed status of the failover quorum of the PG cluster. Field Description method string Contains the latest reported Method value. standbyNames []string StandbyNames is the list of potentially synchronous instance names. standbyNumber int StandbyNumber is the number of synchronous standbys that transactions need to wait for replies from. primary string Primary is the name of the primary instance that updated this object the latest time. ImageCatalogRef Appears in: ClusterSpec ImageCatalogRef defines the reference to a major version in an ImageCatalog Field Description TypedLocalObjectReference core/v1.TypedLocalObjectReference (Members of TypedLocalObjectReference are embedded into this type.) No description provided. major [Required] int The major version of PostgreSQL we want to use from the ImageCatalog ImageCatalogSpec Appears in: ClusterImageCatalog ImageCatalog ImageCatalogSpec defines the desired ImageCatalog Field Description images [Required] []CatalogImage List of CatalogImages available in the catalog ImageInfo Appears in: ClusterStatus ImageInfo contains the information about a PostgreSQL image Field Description image [Required] string Image is the image name majorVersion [Required] int MajorVersion is the major version of the image Import Appears in: BootstrapInitDB Import contains the configuration to init a database from a logic snapshot of an externalCluster Field Description source [Required] ImportSource The source of the import type [Required] SnapshotType The import type. Can be microservice or monolith . databases [Required] []string The databases to import roles []string The roles to import postImportApplicationSQL []string List of SQL queries to be executed as a superuser in the application database right after is imported - to be used with extreme care (by default empty). Only available in microservice type. schemaOnly bool When set to true, only the pre-data and post-data sections of pg_restore are invoked, avoiding data import. Default: false . pgDumpExtraOptions []string List of custom options to pass to the pg_dump command. IMPORTANT: Use these options with caution and at your own risk, as the operator does not validate their content. Be aware that certain options may conflict with the operator's intended functionality or design. pgRestoreExtraOptions []string List of custom options to pass to the pg_restore command. IMPORTANT: Use these options with caution and at your own risk, as the operator does not validate their content. Be aware that certain options may conflict with the operator's intended functionality or design. ImportSource Appears in: Import ImportSource describes the source for the logical snapshot Field Description externalCluster [Required] string The name of the externalCluster used for import InstanceID Appears in: BackupStatus InstanceID contains the information to identify an instance Field Description podName string The pod name ContainerID string The container ID InstanceReportedState Appears in: ClusterStatus InstanceReportedState describes the last reported state of an instance during a reconciliation loop Field Description isPrimary [Required] bool indicates if an instance is the primary one timeLineID int indicates on which TimelineId the instance is ip [Required] string IP address of the instance IsolationCheckConfiguration Appears in: LivenessProbe IsolationCheckConfiguration contains the configuration for the isolation check functionality in the liveness probe Field Description enabled bool Whether primary isolation checking is enabled for the liveness probe requestTimeout int Timeout in milliseconds for requests during the primary isolation check connectionTimeout int Timeout in milliseconds for connections during the primary isolation check LDAPBindAsAuth Appears in: LDAPConfig LDAPBindAsAuth provides the required fields to use the bind authentication for LDAP Field Description prefix string Prefix for the bind authentication option suffix string Suffix for the bind authentication option LDAPBindSearchAuth Appears in: LDAPConfig LDAPBindSearchAuth provides the required fields to use the bind+search LDAP authentication process Field Description baseDN string Root DN to begin the user search bindDN string DN of the user to bind to the directory bindPassword core/v1.SecretKeySelector Secret with the password for the user to bind to the directory searchAttribute string Attribute to match against the username searchFilter string Search filter to use when doing the search+bind authentication LDAPConfig Appears in: PostgresConfiguration LDAPConfig contains the parameters needed for LDAP authentication Field Description server string LDAP hostname or IP address port int LDAP server port scheme LDAPScheme LDAP schema to be used, possible options are ldap and ldaps bindAsAuth LDAPBindAsAuth Bind as authentication configuration bindSearchAuth LDAPBindSearchAuth Bind+Search authentication configuration tls bool Set to 'true' to enable LDAP over TLS. 'false' is default LDAPScheme (Alias of string ) Appears in: LDAPConfig LDAPScheme defines the possible schemes for LDAP LivenessProbe Appears in: ProbesConfiguration LivenessProbe is the configuration of the liveness probe Field Description Probe Probe (Members of Probe are embedded into this type.) Probe is the standard probe configuration isolationCheck IsolationCheckConfiguration Configure the feature that extends the liveness probe for a primary instance. In addition to the basic checks, this verifies whether the primary is isolated from the Kubernetes API server and from its replicas, ensuring that it can be safely shut down if network partition or API unavailability is detected. Enabled by default. ManagedConfiguration Appears in: ClusterSpec ManagedConfiguration represents the portions of PostgreSQL that are managed by the instance manager Field Description roles []RoleConfiguration Database roles managed by the Cluster services ManagedServices Services roles managed by the Cluster ManagedRoles Appears in: ClusterStatus ManagedRoles tracks the status of a cluster's managed roles Field Description byStatus map[RoleStatus][]string ByStatus gives the list of roles in each state cannotReconcile map[string][]string CannotReconcile lists roles that cannot be reconciled in PostgreSQL, with an explanation of the cause passwordStatus map[string]PasswordState PasswordStatus gives the last transaction id and password secret version for each managed role ManagedService Appears in: ManagedServices ManagedService represents a specific service managed by the cluster. It includes the type of service and its associated template specification. Field Description selectorType [Required] ServiceSelectorType SelectorType specifies the type of selectors that the service will have. Valid values are \"rw\", \"r\", and \"ro\", representing read-write, read, and read-only services. updateStrategy ServiceUpdateStrategy UpdateStrategy describes how the service differences should be reconciled serviceTemplate [Required] ServiceTemplateSpec ServiceTemplate is the template specification for the service. ManagedServices Appears in: ManagedConfiguration ManagedServices represents the services managed by the cluster. Field Description disabledDefaultServices []ServiceSelectorType DisabledDefaultServices is a list of service types that are disabled by default. Valid values are \"r\", and \"ro\", representing read, and read-only services. additional []ManagedService Additional is a list of additional managed services specified by the user. Metadata Appears in: PodTemplateSpec ServiceAccountTemplate ServiceTemplateSpec Metadata is a structure similar to the metav1.ObjectMeta, but still parseable by controller-gen to create a suitable CRD for the user. The comment of PodTemplateSpec has an explanation of why we are not using the core data types. Field Description name string The name of the resource. Only supported for certain types labels map[string]string Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels annotations map[string]string Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations MonitoringConfiguration Appears in: ClusterSpec MonitoringConfiguration is the type containing all the monitoring configuration for a certain cluster Field Description disableDefaultQueries bool Whether the default queries should be injected. Set it to true if you don't want to inject default queries into the cluster. Default: false. customQueriesConfigMap []github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector The list of config maps containing the custom queries customQueriesSecret []github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector The list of secrets containing the custom queries enablePodMonitor bool Enable or disable the PodMonitor tls ClusterMonitoringTLSConfiguration Configure TLS communication for the metrics endpoint. Changing tls.enabled option will force a rollout of all instances. podMonitorMetricRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of metric relabelings for the PodMonitor . Applied to samples before ingestion. podMonitorRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of relabelings for the PodMonitor . Applied to samples before scraping. NodeMaintenanceWindow Appears in: ClusterSpec NodeMaintenanceWindow contains information that the operator will use while upgrading the underlying node. This option is only useful when the chosen storage prevents the Pods from being freely moved across nodes. Field Description reusePVC bool Reuse the existing PVC (wait for the node to come up again) or not (recreate it elsewhere - when instances >1) inProgress bool Is there a node maintenance activity in progress? OnlineConfiguration Appears in: BackupSpec ScheduledBackupSpec VolumeSnapshotConfiguration OnlineConfiguration contains the configuration parameters for the online volume snapshot Field Description waitForArchive bool If false, the function will return immediately after the backup is completed, without waiting for WAL to be archived. This behavior is only useful with backup software that independently monitors WAL archiving. Otherwise, WAL required to make the backup consistent might be missing and make the backup useless. By default, or when this parameter is true, pg_backup_stop will wait for WAL to be archived when archiving is enabled. On a standby, this means that it will wait only when archive_mode = always. If write activity on the primary is low, it may be useful to run pg_switch_wal on the primary in order to trigger an immediate segment switch. immediateCheckpoint bool Control whether the I/O workload for the backup initial checkpoint will be limited, according to the checkpoint_completion_target setting on the PostgreSQL server. If set to true, an immediate checkpoint will be used, meaning PostgreSQL will complete the checkpoint as soon as possible. false by default. PasswordState Appears in: ManagedRoles PasswordState represents the state of the password of a managed RoleConfiguration Field Description transactionID int64 the last transaction ID to affect the role definition in PostgreSQL resourceVersion string the resource version of the password secret PgBouncerIntegrationStatus Appears in: PoolerIntegrations PgBouncerIntegrationStatus encapsulates the needed integration for the pgbouncer poolers referencing the cluster Field Description secrets []string No description provided. PgBouncerPoolMode (Alias of string ) Appears in: PgBouncerSpec PgBouncerPoolMode is the mode of PgBouncer PgBouncerSecrets Appears in: PoolerSecrets PgBouncerSecrets contains the versions of the secrets used by pgbouncer Field Description authQuery SecretVersion The auth query secret version PgBouncerSpec Appears in: PoolerSpec PgBouncerSpec defines how to configure PgBouncer Field Description poolMode PgBouncerPoolMode The pool mode. Default: session . authQuerySecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The credentials of the user that need to be used for the authentication query. In case it is specified, also an AuthQuery (e.g. \"SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1\") has to be specified and no automatic CNPG Cluster integration will be triggered. authQuery string The query that will be used to download the hash of the password of a certain user. Default: \"SELECT usename, passwd FROM public.user_search($1)\". In case it is specified, also an AuthQuerySecret has to be specified and no automatic CNPG Cluster integration will be triggered. parameters map[string]string Additional parameters to be passed to PgBouncer - please check the CNPG documentation for a list of options you can configure pg_hba []string PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) paused bool When set to true , PgBouncer will disconnect from the PostgreSQL server, first waiting for all queries to complete, and pause all new client connections until this value is set to false (default). Internally, the operator calls PgBouncer's PAUSE and RESUME commands. PluginConfiguration Appears in: ClusterSpec ExternalCluster PluginConfiguration specifies a plugin that need to be loaded for this cluster to be reconciled Field Description name [Required] string Name is the plugin name enabled bool Enabled is true if this plugin will be used isWALArchiver bool Only one plugin can be declared as WALArchiver. Cannot be active if \".spec.backup.barmanObjectStore\" configuration is present. parameters map[string]string Parameters is the configuration of the plugin PluginStatus Appears in: ClusterStatus PluginStatus is the status of a loaded plugin Field Description name [Required] string Name is the name of the plugin version [Required] string Version is the version of the plugin loaded by the latest reconciliation loop capabilities []string Capabilities are the list of capabilities of the plugin operatorCapabilities []string OperatorCapabilities are the list of capabilities of the plugin regarding the reconciler walCapabilities []string WALCapabilities are the list of capabilities of the plugin regarding the WAL management backupCapabilities []string BackupCapabilities are the list of capabilities of the plugin regarding the Backup management restoreJobHookCapabilities []string RestoreJobHookCapabilities are the list of capabilities of the plugin regarding the RestoreJobHook management status string Status contain the status reported by the plugin through the SetStatusInCluster interface PodTemplateSpec Appears in: PoolerSpec PodTemplateSpec is a structure allowing the user to set a template for Pod generation. Unfortunately we can't use the corev1.PodTemplateSpec type because the generated CRD won't have the field for the metadata section. References: https://github.com/kubernetes-sigs/controller-tools/issues/385 https://github.com/kubernetes-sigs/controller-tools/issues/448 https://github.com/prometheus-operator/prometheus-operator/issues/3041 Field Description metadata Metadata Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata spec core/v1.PodSpec Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status PodTopologyLabels (Alias of map[string]string ) Appears in: Topology PodTopologyLabels represent the topology of a Pod. map[labelName]labelValue PoolerIntegrations Appears in: ClusterStatus PoolerIntegrations encapsulates the needed integration for the poolers referencing the cluster Field Description pgBouncerIntegration PgBouncerIntegrationStatus No description provided. PoolerMonitoringConfiguration Appears in: PoolerSpec PoolerMonitoringConfiguration is the type containing all the monitoring configuration for a certain Pooler. Mirrors the Cluster's MonitoringConfiguration but without the custom queries part for now. Field Description enablePodMonitor bool Enable or disable the PodMonitor podMonitorMetricRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of metric relabelings for the PodMonitor . Applied to samples before ingestion. podMonitorRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of relabelings for the PodMonitor . Applied to samples before scraping. PoolerSecrets Appears in: PoolerStatus PoolerSecrets contains the versions of all the secrets used Field Description serverTLS SecretVersion The server TLS secret version serverCA SecretVersion The server CA secret version clientCA SecretVersion The client CA secret version pgBouncerSecrets PgBouncerSecrets The version of the secrets used by PgBouncer PoolerSpec Appears in: Pooler PoolerSpec defines the desired state of Pooler Field Description cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference This is the cluster reference on which the Pooler will work. Pooler name should never match with any cluster name within the same namespace. type PoolerType Type of service to forward traffic to. Default: rw . instances int32 The number of replicas we want. Default: 1. template PodTemplateSpec The template of the Pod to be created pgbouncer [Required] PgBouncerSpec The PgBouncer configuration deploymentStrategy apps/v1.DeploymentStrategy The deployment strategy to use for pgbouncer to replace existing pods with new ones monitoring PoolerMonitoringConfiguration The configuration of the monitoring infrastructure of this pooler. serviceTemplate ServiceTemplateSpec Template for the Service to be created PoolerStatus Appears in: Pooler PoolerStatus defines the observed state of Pooler Field Description secrets PoolerSecrets The resource version of the config object instances int32 The number of pods trying to be scheduled PoolerType (Alias of string ) Appears in: PoolerSpec PoolerType is the type of the connection pool, meaning the service we are targeting. Allowed values are rw and ro . PostgresConfiguration Appears in: ClusterSpec PostgresConfiguration defines the PostgreSQL configuration Field Description parameters map[string]string PostgreSQL configuration options (postgresql.conf) synchronous SynchronousReplicaConfiguration Configuration of the PostgreSQL synchronous replication feature pg_hba []string PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) pg_ident []string PostgreSQL User Name Maps rules (lines to be appended to the pg_ident.conf file) syncReplicaElectionConstraint SyncReplicaElectionConstraints Requirements to be met by sync replicas. This will affect how the \"synchronous_standby_names\" parameter will be set up. shared_preload_libraries []string Lists of shared preload libraries to add to the default ones ldap LDAPConfig Options to specify LDAP configuration promotionTimeout int32 Specifies the maximum number of seconds to wait when promoting an instance to primary. Default value is 40000000, greater than one year in seconds, big enough to simulate an infinite timeout enableAlterSystem bool If this parameter is true, the user will be able to invoke ALTER SYSTEM on this CloudNativePG Cluster. This should only be used for debugging and troubleshooting. Defaults to false. extensions []ExtensionConfiguration The configuration of the extensions to be added PrimaryUpdateMethod (Alias of string ) Appears in: ClusterSpec PrimaryUpdateMethod contains the method to use when upgrading the primary server of the cluster as part of rolling updates PrimaryUpdateStrategy (Alias of string ) Appears in: ClusterSpec PrimaryUpdateStrategy contains the strategy to follow when upgrading the primary server of the cluster as part of rolling updates Probe Appears in: LivenessProbe ProbeWithStrategy Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic. Field Description initialDelaySeconds int32 Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes timeoutSeconds int32 Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes periodSeconds int32 How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. successThreshold int32 Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1. failureThreshold int32 Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. terminationGracePeriodSeconds int64 Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset. ProbeStrategyType (Alias of string ) Appears in: ProbeWithStrategy ProbeStrategyType is the type of the strategy used to declare a PostgreSQL instance ready ProbeWithStrategy Appears in: ProbesConfiguration ProbeWithStrategy is the configuration of the startup probe Field Description Probe Probe (Members of Probe are embedded into this type.) Probe is the standard probe configuration type ProbeStrategyType The probe strategy maximumLag k8s.io/apimachinery/pkg/api/resource.Quantity Lag limit. Used only for streaming strategy ProbesConfiguration Appears in: ClusterSpec ProbesConfiguration represent the configuration for the probes to be injected in the PostgreSQL Pods Field Description startup [Required] ProbeWithStrategy The startup probe configuration liveness [Required] LivenessProbe The liveness probe configuration readiness [Required] ProbeWithStrategy The readiness probe configuration PublicationReclaimPolicy (Alias of string ) Appears in: PublicationSpec PublicationReclaimPolicy defines a policy for end-of-life maintenance of Publications. PublicationSpec Appears in: Publication PublicationSpec defines the desired state of Publication Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster that identifies the \"publisher\" name [Required] string The name of the publication inside PostgreSQL dbname [Required] string The name of the database where the publication will be installed in the \"publisher\" cluster parameters map[string]string Publication parameters part of the WITH clause as expected by PostgreSQL CREATE PUBLICATION command target [Required] PublicationTarget Target of the publication as expected by PostgreSQL CREATE PUBLICATION command publicationReclaimPolicy PublicationReclaimPolicy The policy for end-of-life maintenance of this publication PublicationStatus Appears in: Publication PublicationStatus defines the observed state of Publication Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the publication was reconciled correctly message string Message is the reconciliation output message PublicationTarget Appears in: PublicationSpec PublicationTarget is what this publication should publish Field Description allTables bool Marks the publication as one that replicates changes for all tables in the database, including tables created in the future. Corresponding to FOR ALL TABLES in PostgreSQL. objects []PublicationTargetObject Just the following schema objects PublicationTargetObject Appears in: PublicationTarget PublicationTargetObject is an object to publish Field Description tablesInSchema string Marks the publication as one that replicates changes for all tables in the specified list of schemas, including tables created in the future. Corresponding to FOR TABLES IN SCHEMA in PostgreSQL. table PublicationTargetTable Specifies a list of tables to add to the publication. Corresponding to FOR TABLE in PostgreSQL. PublicationTargetTable Appears in: PublicationTargetObject PublicationTargetTable is a table to publish Field Description only bool Whether to limit to the table only or include all its descendants name [Required] string The table name schema string The schema name columns []string The columns to publish RecoveryTarget Appears in: BootstrapRecovery RecoveryTarget allows to configure the moment where the recovery process will stop. All the target options except TargetTLI are mutually exclusive. Field Description backupID string The ID of the backup from which to start the recovery process. If empty (default) the operator will automatically detect the backup based on targetTime or targetLSN if specified. Otherwise use the latest available backup in chronological order. targetTLI string The target timeline (\"latest\" or a positive integer) targetXID string The target transaction ID targetName string The target name (to be previously created with pg_create_restore_point ) targetLSN string The target LSN (Log Sequence Number) targetTime string The target time as a timestamp in the RFC3339 standard targetImmediate bool End recovery as soon as a consistent state is reached exclusive bool Set the target to be exclusive. If omitted, defaults to false, so that in Postgres, recovery_target_inclusive will be true ReplicaClusterConfiguration Appears in: ClusterSpec ReplicaClusterConfiguration encapsulates the configuration of a replica cluster Field Description self string Self defines the name of this cluster. It is used to determine if this is a primary or a replica cluster, comparing it with primary primary string Primary defines which Cluster is defined to be the primary in the distributed PostgreSQL cluster, based on the topology specified in externalClusters source [Required] string The name of the external cluster which is the replication origin enabled bool If replica mode is enabled, this cluster will be a replica of an existing cluster. Replica cluster can be created from a recovery object store or via streaming through pg_basebackup. Refer to the Replica clusters page of the documentation for more information. promotionToken string A demotion token generated by an external cluster used to check if the promotion requirements are met. minApplyDelay meta/v1.Duration When replica mode is enabled, this parameter allows you to replay transactions only when the system time is at least the configured time past the commit time. This provides an opportunity to correct data loss errors. Note that when this parameter is set, a promotion token cannot be used. ReplicationSlotsConfiguration Appears in: ClusterSpec ReplicationSlotsConfiguration encapsulates the configuration of replication slots Field Description highAvailability ReplicationSlotsHAConfiguration Replication slots for high availability configuration updateInterval int Standby will update the status of the local replication slots every updateInterval seconds (default 30). synchronizeReplicas SynchronizeReplicasConfiguration Configures the synchronization of the user defined physical replication slots ReplicationSlotsHAConfiguration Appears in: ReplicationSlotsConfiguration ReplicationSlotsHAConfiguration encapsulates the configuration of the replication slots that are automatically managed by the operator to control the streaming replication connections with the standby instances for high availability (HA) purposes. Replication slots are a PostgreSQL feature that makes sure that PostgreSQL automatically keeps WAL files in the primary when a streaming client (in this specific case a replica that is part of the HA cluster) gets disconnected. Field Description enabled bool If enabled (default), the operator will automatically manage replication slots on the primary instance and use them in streaming replication connections with all the standby instances that are part of the HA cluster. If disabled, the operator will not take advantage of replication slots in streaming connections with the replicas. This feature also controls replication slots in replica cluster, from the designated primary to its cascading replicas. slotPrefix string Prefix for replication slots managed by the operator for HA. It may only contain lower case letters, numbers, and the underscore character. This can only be set at creation time. By default set to _cnpg_ . synchronizeLogicalDecoding bool When enabled, the operator automatically manages synchronization of logical decoding (replication) slots across high-availability clusters. Requires one of the following conditions: PostgreSQL version 17 or later PostgreSQL version < 17 with pg_failover_slots extension enabled RoleConfiguration Appears in: ManagedConfiguration RoleConfiguration is the representation, in Kubernetes, of a PostgreSQL role with the additional field Ensure specifying whether to ensure the presence or absence of the role in the database The defaults of the CREATE ROLE command are applied Reference: https://www.postgresql.org/docs/current/sql-createrole.html Field Description name [Required] string Name of the role comment string Description of the role ensure EnsureOption Ensure the role is present or absent - defaults to \"present\" passwordSecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Secret containing the password of the role (if present) If null, the password will be ignored unless DisablePassword is set connectionLimit int64 If the role can log in, this specifies how many concurrent connections the role can make. -1 (the default) means no limit. validUntil meta/v1.Time Date and time after which the role's password is no longer valid. When omitted, the password will never expire (default). inRoles []string List of one or more existing roles to which this role will be immediately added as a new member. Default empty. inherit bool Whether a role \"inherits\" the privileges of roles it is a member of. Defaults is true . disablePassword bool DisablePassword indicates that a role's password should be set to NULL in Postgres superuser bool Whether the role is a superuser who can override all access restrictions within the database - superuser status is dangerous and should be used only when really needed. You must yourself be a superuser to create a new superuser. Defaults is false . createdb bool When set to true , the role being defined will be allowed to create new databases. Specifying false (default) will deny a role the ability to create databases. createrole bool Whether the role will be permitted to create, alter, drop, comment on, change the security label for, and grant or revoke membership in other roles. Default is false . login bool Whether the role is allowed to log in. A role having the login attribute can be thought of as a user. Roles without this attribute are useful for managing database privileges, but are not users in the usual sense of the word. Default is false . replication bool Whether a role is a replication role. A role must have this attribute (or be a superuser) in order to be able to connect to the server in replication mode (physical or logical replication) and in order to be able to create or drop replication slots. A role having the replication attribute is a very highly privileged role, and should only be used on roles actually used for replication. Default is false . bypassrls bool Whether a role bypasses every row-level security (RLS) policy. Default is false . SQLRefs Appears in: BootstrapInitDB SQLRefs holds references to ConfigMaps or Secrets containing SQL files. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. Field Description secretRefs []github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector SecretRefs holds a list of references to Secrets configMapRefs []github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector ConfigMapRefs holds a list of references to ConfigMaps ScheduledBackupSpec Appears in: ScheduledBackup ScheduledBackupSpec defines the desired state of ScheduledBackup Field Description suspend bool If this backup is suspended or not immediate bool If the first backup has to be immediately start after creation or not schedule [Required] string The schedule does not follow the same format used in Kubernetes CronJobs as it includes an additional seconds specifier, see https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The cluster to backup backupOwnerReference string Indicates which ownerReference should be put inside the created backup resources. none: no owner reference for created backup objects (same behavior as before the field was introduced) self: sets the Scheduled backup object as owner of the backup cluster: set the cluster as owner of the backup target BackupTarget The policy to decide which instance should perform this backup. If empty, it defaults to cluster.spec.backup.target . Available options are empty string, primary and prefer-standby . primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. method BackupMethod The backup method to be used, possible options are barmanObjectStore , volumeSnapshot or plugin . Defaults to: barmanObjectStore . pluginConfiguration BackupPluginConfiguration Configuration parameters passed to the plugin managing this backup online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online' onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza ScheduledBackupStatus Appears in: ScheduledBackup ScheduledBackupStatus defines the observed state of ScheduledBackup Field Description lastCheckTime meta/v1.Time The latest time the schedule lastScheduleTime meta/v1.Time Information when was the last time that backup was successfully scheduled. nextScheduleTime meta/v1.Time Next time we will run a backup SchemaSpec Appears in: DatabaseSpec SchemaSpec configures a schema in a database Field Description DatabaseObjectSpec DatabaseObjectSpec (Members of DatabaseObjectSpec are embedded into this type.) Common fields owner [Required] string The role name of the user who owns the schema inside PostgreSQL. It maps to the AUTHORIZATION parameter of CREATE SCHEMA and the OWNER TO command of ALTER SCHEMA . SecretVersion Appears in: PgBouncerSecrets PoolerSecrets SecretVersion contains a secret name and its ResourceVersion Field Description name string The name of the secret version string The ResourceVersion of the secret SecretsResourceVersion Appears in: ClusterStatus SecretsResourceVersion is the resource versions of the secrets managed by the operator Field Description superuserSecretVersion string The resource version of the \"postgres\" user secret replicationSecretVersion string The resource version of the \"streaming_replica\" user secret applicationSecretVersion string The resource version of the \"app\" user secret managedRoleSecretVersion map[string]string The resource versions of the managed roles secrets caSecretVersion string Unused. Retained for compatibility with old versions. clientCaSecretVersion string The resource version of the PostgreSQL client-side CA secret version serverCaSecretVersion string The resource version of the PostgreSQL server-side CA secret version serverSecretVersion string The resource version of the PostgreSQL server-side secret version barmanEndpointCA string The resource version of the Barman Endpoint CA if provided externalClusterSecretVersion map[string]string The resource versions of the external cluster secrets metrics map[string]string A map with the versions of all the secrets used to pass metrics. Map keys are the secret names, map values are the versions ServiceAccountTemplate Appears in: ClusterSpec ServiceAccountTemplate contains the template needed to generate the service accounts Field Description metadata [Required] Metadata Metadata are the metadata to be used for the generated service account ServiceSelectorType (Alias of string ) Appears in: ManagedService ManagedServices ServiceSelectorType describes a valid value for generating the service selectors. It indicates which type of service the selector applies to, such as read-write, read, or read-only ServiceTemplateSpec Appears in: ManagedService PoolerSpec ServiceTemplateSpec is a structure allowing the user to set a template for Service generation. Field Description metadata Metadata Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata spec core/v1.ServiceSpec Specification of the desired behavior of the service. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status ServiceUpdateStrategy (Alias of string ) Appears in: ManagedService ServiceUpdateStrategy describes how the changes to the managed service should be handled SnapshotOwnerReference (Alias of string ) Appears in: VolumeSnapshotConfiguration SnapshotOwnerReference defines the reference type for the owner of the snapshot. This specifies which owner the processed resources should relate to. SnapshotType (Alias of string ) Appears in: Import SnapshotType is a type of allowed import StorageConfiguration Appears in: ClusterSpec TablespaceConfiguration StorageConfiguration is the configuration used to create and reconcile PVCs, usable for WAL volumes, PGDATA volumes, or tablespaces Field Description storageClass string StorageClass to use for PVCs. Applied after evaluating the PVC template, if available. If not specified, the generated PVCs will use the default storage class size string Size of the storage. Required if not already specified in the PVC template. Changes to this field are automatically reapplied to the created PVCs. Size cannot be decreased. resizeInUseVolumes bool Resize existent PVCs, defaults to true pvcTemplate core/v1.PersistentVolumeClaimSpec Template to be used to generate the Persistent Volume Claim SubscriptionReclaimPolicy (Alias of string ) Appears in: SubscriptionSpec SubscriptionReclaimPolicy describes a policy for end-of-life maintenance of Subscriptions. SubscriptionSpec Appears in: Subscription SubscriptionSpec defines the desired state of Subscription Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster that identifies the \"subscriber\" name [Required] string The name of the subscription inside PostgreSQL dbname [Required] string The name of the database where the publication will be installed in the \"subscriber\" cluster parameters map[string]string Subscription parameters included in the WITH clause of the PostgreSQL CREATE SUBSCRIPTION command. Most parameters cannot be changed after the subscription is created and will be ignored if modified later, except for a limited set documented at: https://www.postgresql.org/docs/current/sql-altersubscription.html#SQL-ALTERSUBSCRIPTION-PARAMS-SET publicationName [Required] string The name of the publication inside the PostgreSQL database in the \"publisher\" publicationDBName string The name of the database containing the publication on the external cluster. Defaults to the one in the external cluster definition. externalClusterName [Required] string The name of the external cluster with the publication (\"publisher\") subscriptionReclaimPolicy SubscriptionReclaimPolicy The policy for end-of-life maintenance of this subscription SubscriptionStatus Appears in: Subscription SubscriptionStatus defines the observed state of Subscription Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the subscription was reconciled correctly message string Message is the reconciliation output message SwitchReplicaClusterStatus Appears in: ClusterStatus SwitchReplicaClusterStatus contains all the statuses regarding the switch of a cluster to a replica cluster Field Description inProgress bool InProgress indicates if there is an ongoing procedure of switching a cluster to a replica cluster. SyncReplicaElectionConstraints Appears in: PostgresConfiguration SyncReplicaElectionConstraints contains the constraints for sync replicas election. For anti-affinity parameters two instances are considered in the same location if all the labels values match. In future synchronous replica election restriction by name will be supported. Field Description nodeLabelsAntiAffinity []string A list of node labels values to extract and compare to evaluate if the pods reside in the same topology or not enabled [Required] bool This flag enables the constraints for sync replicas SynchronizeReplicasConfiguration Appears in: ReplicationSlotsConfiguration SynchronizeReplicasConfiguration contains the configuration for the synchronization of user defined physical replication slots Field Description enabled [Required] bool When set to true, every replication slot that is on the primary is synchronized on each standby excludePatterns []string List of regular expression patterns to match the names of replication slots to be excluded (by default empty) SynchronousReplicaConfiguration Appears in: PostgresConfiguration SynchronousReplicaConfiguration contains the configuration of the PostgreSQL synchronous replication feature. Important: at this moment, also .spec.minSyncReplicas and .spec.maxSyncReplicas need to be considered. Field Description method [Required] SynchronousReplicaConfigurationMethod Method to select synchronous replication standbys from the listed servers, accepting 'any' (quorum-based synchronous replication) or 'first' (priority-based synchronous replication) as values. number [Required] int Specifies the number of synchronous standby servers that transactions must wait for responses from. maxStandbyNamesFromCluster int Specifies the maximum number of local cluster pods that can be automatically included in the synchronous_standby_names option in PostgreSQL. standbyNamesPre []string A user-defined list of application names to be added to synchronous_standby_names before local cluster pods (the order is only useful for priority-based synchronous replication). standbyNamesPost []string A user-defined list of application names to be added to synchronous_standby_names after local cluster pods (the order is only useful for priority-based synchronous replication). dataDurability DataDurabilityLevel If set to \"required\", data durability is strictly enforced. Write operations with synchronous commit settings ( on , remote_write , or remote_apply ) will block if there are insufficient healthy replicas, ensuring data persistence. If set to \"preferred\", data durability is maintained when healthy replicas are available, but the required number of instances will adjust dynamically if replicas become unavailable. This setting relaxes strict durability enforcement to allow for operational continuity. This setting is only applicable if both standbyNamesPre and standbyNamesPost are unset (empty). SynchronousReplicaConfigurationMethod (Alias of string ) Appears in: SynchronousReplicaConfiguration SynchronousReplicaConfigurationMethod configures whether to use quorum based replication or a priority list TablespaceConfiguration Appears in: ClusterSpec TablespaceConfiguration is the configuration of a tablespace, and includes the storage specification for the tablespace Field Description name [Required] string The name of the tablespace storage [Required] StorageConfiguration The storage configuration for the tablespace owner DatabaseRoleRef Owner is the PostgreSQL user owning the tablespace temporary bool When set to true, the tablespace will be added as a temp_tablespaces entry in PostgreSQL, and will be available to automatically house temp database objects, or other temporary files. Please refer to PostgreSQL documentation for more information on the temp_tablespaces GUC. TablespaceState Appears in: ClusterStatus TablespaceState represents the state of a tablespace in a cluster Field Description name [Required] string Name is the name of the tablespace owner string Owner is the PostgreSQL user owning the tablespace state [Required] TablespaceStatus State is the latest reconciliation state error string Error is the reconciliation error, if any TablespaceStatus (Alias of string ) Appears in: TablespaceState TablespaceStatus represents the status of a tablespace in the cluster Topology Appears in: ClusterStatus Topology contains the cluster topology Field Description instances map[PodName]PodTopologyLabels Instances contains the pod topology of the instances nodesUsed int32 NodesUsed represents the count of distinct nodes accommodating the instances. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally, this value should be the same as the number of instances in the Postgres HA cluster, implying shared nothing architecture on the compute side. successfullyExtracted bool SuccessfullyExtracted indicates if the topology data was extract. It is useful to enact fallback behaviors in synchronous replica election in case of failures VolumeSnapshotConfiguration Appears in: BackupConfiguration VolumeSnapshotConfiguration represents the configuration for the execution of snapshot backups. Field Description labels map[string]string Labels are key-value pairs that will be added to .metadata.labels snapshot resources. annotations map[string]string Annotations key-value pairs that will be added to .metadata.annotations snapshot resources. className string ClassName specifies the Snapshot Class to be used for PG_DATA PersistentVolumeClaim. It is the default class for the other types if no specific class is present walClassName string WalClassName specifies the Snapshot Class to be used for the PG_WAL PersistentVolumeClaim. tablespaceClassName map[string]string TablespaceClassName specifies the Snapshot Class to be used for the tablespaces. defaults to the PGDATA Snapshot Class, if set snapshotOwnerReference SnapshotOwnerReference SnapshotOwnerReference indicates the type of owner reference the snapshot should have online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots","title":"API Reference"},{"location":"cloudnative-pg.v1/#api-reference","text":"Package v1 contains API Schema definitions for the postgresql v1 API group","title":"API Reference"},{"location":"cloudnative-pg.v1/#resource-types","text":"Backup Cluster ClusterImageCatalog Database FailoverQuorum ImageCatalog Pooler Publication ScheduledBackup Subscription","title":"Resource Types"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Backup","text":"A Backup resource is a request for a PostgreSQL backup by the user. Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Backup metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] BackupSpec Specification of the desired behavior of the backup. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status BackupStatus Most recently observed status of the backup. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"Backup"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Cluster","text":"Cluster is the Schema for the PostgreSQL API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Cluster metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ClusterSpec Specification of the desired behavior of the cluster. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status ClusterStatus Most recently observed status of the cluster. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"Cluster"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterImageCatalog","text":"ClusterImageCatalog is the Schema for the clusterimagecatalogs API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ClusterImageCatalog metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ImageCatalogSpec Specification of the desired behavior of the ClusterImageCatalog. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"ClusterImageCatalog"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Database","text":"Database is the Schema for the databases API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Database metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] DatabaseSpec Specification of the desired Database. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status DatabaseStatus Most recently observed status of the Database. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"Database"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-FailoverQuorum","text":"Appears in: FailoverQuorum contains the information about the current failover quorum status of a PG cluster. It is updated by the instance manager of the primary node and reset to zero by the operator to trigger an update. Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string FailoverQuorum metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. status FailoverQuorumStatus Most recently observed status of the failover quorum.","title":"FailoverQuorum"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImageCatalog","text":"ImageCatalog is the Schema for the imagecatalogs API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ImageCatalog metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ImageCatalogSpec Specification of the desired behavior of the ImageCatalog. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"ImageCatalog"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Pooler","text":"Pooler is the Schema for the poolers API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Pooler metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] PoolerSpec Specification of the desired behavior of the Pooler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status PoolerStatus Most recently observed status of the Pooler. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"Pooler"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Publication","text":"Publication is the Schema for the publications API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Publication metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] PublicationSpec No description provided. status [Required] PublicationStatus No description provided.","title":"Publication"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ScheduledBackup","text":"ScheduledBackup is the Schema for the scheduledbackups API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ScheduledBackup metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ScheduledBackupSpec Specification of the desired behavior of the ScheduledBackup. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status ScheduledBackupStatus Most recently observed status of the ScheduledBackup. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"ScheduledBackup"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Subscription","text":"Subscription is the Schema for the subscriptions API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Subscription metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] SubscriptionSpec No description provided. status [Required] SubscriptionStatus No description provided.","title":"Subscription"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-AffinityConfiguration","text":"Appears in: ClusterSpec AffinityConfiguration contains the info we need to create the affinity rules for Pods Field Description enablePodAntiAffinity bool Activates anti-affinity for the pods. The operator will define pods anti-affinity unless this field is explicitly set to false topologyKey string TopologyKey to use for anti-affinity configuration. See k8s documentation for more info on that nodeSelector map[string]string NodeSelector is map of key-value pairs used to define the nodes on which the pods can run. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ nodeAffinity core/v1.NodeAffinity NodeAffinity describes node affinity scheduling rules for the pod. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity tolerations []core/v1.Toleration Tolerations is a list of Tolerations that should be set for all the pods, in order to allow them to run on tainted nodes. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ podAntiAffinityType string PodAntiAffinityType allows the user to decide whether pod anti-affinity between cluster instance has to be considered a strong requirement during scheduling or not. Allowed values are: \"preferred\" (default if empty) or \"required\". Setting it to \"required\", could lead to instances remaining pending until new kubernetes nodes are added if all the existing nodes don't match the required pod anti-affinity rule. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity additionalPodAntiAffinity core/v1.PodAntiAffinity AdditionalPodAntiAffinity allows to specify pod anti-affinity terms to be added to the ones generated by the operator if EnablePodAntiAffinity is set to true (default) or to be used exclusively if set to false. additionalPodAffinity core/v1.PodAffinity AdditionalPodAffinity allows to specify pod affinity terms to be passed to all the cluster's pods.","title":"AffinityConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-AvailableArchitecture","text":"Appears in: ClusterStatus AvailableArchitecture represents the state of a cluster's architecture Field Description goArch [Required] string GoArch is the name of the executable architecture hash [Required] string Hash is the hash of the executable","title":"AvailableArchitecture"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupConfiguration","text":"Appears in: ClusterSpec BackupConfiguration defines how the backup of the cluster are taken. The supported backup methods are BarmanObjectStore and VolumeSnapshot. For details and examples refer to the Backup and Recovery section of the documentation Field Description volumeSnapshot VolumeSnapshotConfiguration VolumeSnapshot provides the configuration for the execution of volume snapshot backups. barmanObjectStore github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration The configuration for the barman-cloud tool suite retentionPolicy string RetentionPolicy is the retention policy to be used for backups and WALs (i.e. '60d'). The retention policy is expressed in the form of XXu where XX is a positive integer and u is in [dwm] - days, weeks, months. It's currently only applicable when using the BarmanObjectStore method. target BackupTarget The policy to decide which instance should perform backups. Available options are empty string, which will default to prefer-standby policy, primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available.","title":"BackupConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupMethod","text":"(Alias of string ) Appears in: BackupSpec BackupStatus ScheduledBackupSpec BackupMethod defines the way of executing the physical base backups of the selected PostgreSQL instance","title":"BackupMethod"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupPhase","text":"(Alias of string ) Appears in: BackupStatus BackupPhase is the phase of the backup","title":"BackupPhase"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupPluginConfiguration","text":"Appears in: BackupSpec ScheduledBackupSpec BackupPluginConfiguration contains the backup configuration used by the backup plugin Field Description name [Required] string Name is the name of the plugin managing this backup parameters map[string]string Parameters are the configuration parameters passed to the backup plugin for this backup","title":"BackupPluginConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSnapshotElementStatus","text":"Appears in: BackupSnapshotStatus BackupSnapshotElementStatus is a volume snapshot that is part of a volume snapshot method backup Field Description name [Required] string Name is the snapshot resource name type [Required] string Type is tho role of the snapshot in the cluster, such as PG_DATA, PG_WAL and PG_TABLESPACE tablespaceName string TablespaceName is the name of the snapshotted tablespace. Only set when type is PG_TABLESPACE","title":"BackupSnapshotElementStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSnapshotStatus","text":"Appears in: BackupStatus BackupSnapshotStatus the fields exclusive to the volumeSnapshot method backup Field Description elements []BackupSnapshotElementStatus The elements list, populated with the gathered volume snapshots","title":"BackupSnapshotStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSource","text":"Appears in: BootstrapRecovery BackupSource contains the backup we need to restore from, plus some information that could be needed to correctly restore it. Field Description LocalObjectReference github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference (Members of LocalObjectReference are embedded into this type.) No description provided. endpointCA github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector EndpointCA store the CA bundle of the barman endpoint. Useful when using self-signed certificates to avoid errors with certificate issuer and barman-cloud-wal-archive.","title":"BackupSource"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSpec","text":"Appears in: Backup BackupSpec defines the desired state of Backup Field Description cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The cluster to backup target BackupTarget The policy to decide which instance should perform this backup. If empty, it defaults to cluster.spec.backup.target . Available options are empty string, primary and prefer-standby . primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. method BackupMethod The backup method to be used, possible options are barmanObjectStore , volumeSnapshot or plugin . Defaults to: barmanObjectStore . pluginConfiguration BackupPluginConfiguration Configuration parameters passed to the plugin managing this backup online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online' onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza","title":"BackupSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupStatus","text":"Appears in: Backup BackupStatus defines the observed state of Backup Field Description BarmanCredentials github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanCredentials (Members of BarmanCredentials are embedded into this type.) The potential credentials for each cloud provider endpointCA github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector EndpointCA store the CA bundle of the barman endpoint. Useful when using self-signed certificates to avoid errors with certificate issuer and barman-cloud-wal-archive. endpointURL string Endpoint to be used to upload data to the cloud, overriding the automatic endpoint discovery destinationPath string The path where to store the backup (i.e. s3://bucket/path/to/folder) this path, with different destination folders, will be used for WALs and for data. This may not be populated in case of errors. serverName string The server name on S3, the cluster name is used if this parameter is omitted encryption string Encryption method required to S3 API backupId string The ID of the Barman backup backupName string The Name of the Barman backup phase BackupPhase The last backup status startedAt meta/v1.Time When the backup was started stoppedAt meta/v1.Time When the backup was terminated beginWal string The starting WAL endWal string The ending WAL beginLSN string The starting xlog endLSN string The ending xlog error string The detected error commandOutput string Unused. Retained for compatibility with old versions. commandError string The backup command output in case of error backupLabelFile []byte Backup label file content as returned by Postgres in case of online (hot) backups tablespaceMapFile []byte Tablespace map file content as returned by Postgres in case of online (hot) backups instanceID InstanceID Information to identify the instance where the backup has been taken from snapshotBackupStatus BackupSnapshotStatus Status of the volumeSnapshot backup method BackupMethod The backup method being used online bool Whether the backup was online/hot ( true ) or offline/cold ( false ) pluginMetadata map[string]string A map containing the plugin metadata","title":"BackupStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupTarget","text":"(Alias of string ) Appears in: BackupConfiguration BackupSpec ScheduledBackupSpec BackupTarget describes the preferred targets for a backup","title":"BackupTarget"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BootstrapConfiguration","text":"Appears in: ClusterSpec BootstrapConfiguration contains information about how to create the PostgreSQL cluster. Only a single bootstrap method can be defined among the supported ones. initdb will be used as the bootstrap method if left unspecified. Refer to the Bootstrap page of the documentation for more information. Field Description initdb BootstrapInitDB Bootstrap the cluster via initdb recovery BootstrapRecovery Bootstrap the cluster from a backup pg_basebackup BootstrapPgBaseBackup Bootstrap the cluster taking a physical backup of another compatible PostgreSQL instance","title":"BootstrapConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BootstrapInitDB","text":"Appears in: BootstrapConfiguration BootstrapInitDB is the configuration of the bootstrap process when initdb is used Refer to the Bootstrap page of the documentation for more information. Field Description database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch options []string The list of options that must be passed to initdb when creating the cluster. Deprecated: This could lead to inconsistent configurations, please use the explicit provided parameters instead. If defined, explicit values will be ignored. dataChecksums bool Whether the -k option should be passed to initdb, enabling checksums on data pages (default: false ) encoding string The value to be passed as option --encoding for initdb (default: UTF8 ) localeCollate string The value to be passed as option --lc-collate for initdb (default: C ) localeCType string The value to be passed as option --lc-ctype for initdb (default: C ) locale string Sets the default collation order and character classification in the new database. localeProvider string This option sets the locale provider for databases created in the new cluster. Available from PostgreSQL 16. icuLocale string Specifies the ICU locale when the ICU provider is used. This option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules string Specifies additional collation rules to customize the behavior of the default collation. This option requires localeProvider to be set to icu . Available from PostgreSQL 16. builtinLocale string Specifies the locale name when the builtin provider is used. This option requires localeProvider to be set to builtin . Available from PostgreSQL 17. walSegmentSize int The value in megabytes (1 to 1024) to be passed to the --wal-segsize option for initdb (default: empty, resulting in PostgreSQL default: 16MB) postInitSQL []string List of SQL queries to be executed as a superuser in the postgres database right after the cluster has been created - to be used with extreme care (by default empty) postInitApplicationSQL []string List of SQL queries to be executed as a superuser in the application database right after the cluster has been created - to be used with extreme care (by default empty) postInitTemplateSQL []string List of SQL queries to be executed as a superuser in the template1 database right after the cluster has been created - to be used with extreme care (by default empty) import Import Bootstraps the new cluster by importing data from an existing PostgreSQL instance using logical backup ( pg_dump and pg_restore ) postInitApplicationSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the application database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) postInitTemplateSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the template1 database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) postInitSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the postgres database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty)","title":"BootstrapInitDB"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BootstrapPgBaseBackup","text":"Appears in: BootstrapConfiguration BootstrapPgBaseBackup contains the configuration required to take a physical backup of an existing PostgreSQL cluster Field Description source [Required] string The name of the server of which we need to take a physical backup database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch","title":"BootstrapPgBaseBackup"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BootstrapRecovery","text":"Appears in: BootstrapConfiguration BootstrapRecovery contains the configuration required to restore from an existing cluster using 3 methodologies: external cluster, volume snapshots or backup objects. Full recovery and Point-In-Time Recovery are supported. The method can be also be used to create clusters in continuous recovery (replica clusters), also supporting cascading replication when instances > Once the cluster exits recovery, the password for the superuser will be changed through the provided secret. Refer to the Bootstrap page of the documentation for more information. Field Description backup BackupSource The backup object containing the physical base backup from which to initiate the recovery procedure. Mutually exclusive with source and volumeSnapshots . source string The external cluster whose backup we will restore. This is also used as the name of the folder under which the backup is stored, so it must be set to the name of the source cluster Mutually exclusive with backup . volumeSnapshots DataSource The static PVC data source(s) from which to initiate the recovery procedure. Currently supporting VolumeSnapshot and PersistentVolumeClaim resources that map an existing PVC group, compatible with CloudNativePG, and taken with a cold backup copy on a fenced Postgres instance (limitation which will be removed in the future when online backup will be implemented). Mutually exclusive with backup . recoveryTarget RecoveryTarget By default, the recovery process applies all the available WAL files in the archive (full recovery). However, you can also end the recovery as soon as a consistent state is reached or recover to a point-in-time (PITR) by specifying a RecoveryTarget object, as expected by PostgreSQL (i.e., timestamp, transaction Id, LSN, ...). More info: https://www.postgresql.org/docs/current/runtime-config-wal.html#RUNTIME-CONFIG-WAL-RECOVERY-TARGET database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch","title":"BootstrapRecovery"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-CatalogImage","text":"Appears in: ImageCatalogSpec CatalogImage defines the image and major version Field Description image [Required] string The image reference major [Required] int The PostgreSQL major version of the image. Must be unique within the catalog.","title":"CatalogImage"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-CertificatesConfiguration","text":"Appears in: CertificatesStatus ClusterSpec CertificatesConfiguration contains the needed configurations to handle server certificates. Field Description serverCASecret string The secret containing the Server CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate the TLS certificate ServerTLSSecret. Contains: ca.crt : CA that should be used to validate the server certificate, used as sslrootcert in client connection strings. ca.key : key used to generate Server SSL certs, if ServerTLSSecret is provided, this can be omitted. serverTLSSecret string The secret of type kubernetes.io/tls containing the server TLS certificate and key that will be set as ssl_cert_file and ssl_key_file so that clients can connect to postgres securely. If not defined, ServerCASecret must provide also ca.key and a new secret will be created using the provided CA. replicationTLSSecret string The secret of type kubernetes.io/tls containing the client certificate to authenticate as the streaming_replica user. If not defined, ClientCASecret must provide also ca.key , and a new secret will be created using the provided CA. clientCASecret string The secret containing the Client CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate all the client certificates. Contains: ca.crt : CA that should be used to validate the client certificates, used as ssl_ca_file of all the instances. ca.key : key used to generate client certificates, if ReplicationTLSSecret is provided, this can be omitted. serverAltDNSNames []string The list of the server alternative DNS names to be added to the generated server TLS certificates, when required.","title":"CertificatesConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-CertificatesStatus","text":"Appears in: ClusterStatus CertificatesStatus contains configuration certificates and related expiration dates. Field Description CertificatesConfiguration CertificatesConfiguration (Members of CertificatesConfiguration are embedded into this type.) Needed configurations to handle server certificates, initialized with default values, if needed. expirations map[string]string Expiration dates for all certificates.","title":"CertificatesStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterMonitoringTLSConfiguration","text":"Appears in: MonitoringConfiguration ClusterMonitoringTLSConfiguration is the type containing the TLS configuration for the cluster's monitoring Field Description enabled bool Enable TLS for the monitoring endpoint. Changing this option will force a rollout of all instances.","title":"ClusterMonitoringTLSConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterSpec","text":"Appears in: Cluster ClusterSpec defines the desired state of Cluster Field Description description string Description of this PostgreSQL cluster inheritedMetadata EmbeddedObjectMetadata Metadata that will be inherited by all objects related to the Cluster imageName string Name of the container image, supporting both tags ( <image>:<tag> ) and digests for deterministic and repeatable deployments ( <image>:<tag>@sha256:<digestValue> ) imageCatalogRef ImageCatalogRef Defines the major PostgreSQL version we want to use within an ImageCatalog imagePullPolicy core/v1.PullPolicy Image pull policy. One of Always , Never or IfNotPresent . If not defined, it defaults to IfNotPresent . Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images schedulerName string If specified, the pod will be dispatched by specified Kubernetes scheduler. If not specified, the pod will be dispatched by the default scheduler. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/kube-scheduler/ postgresUID int64 The UID of the postgres user inside the image, defaults to 26 postgresGID int64 The GID of the postgres user inside the image, defaults to 26 instances [Required] int Number of instances required in the cluster minSyncReplicas int Minimum number of instances required in synchronous replication with the primary. Undefined or 0 allow writes to complete when no standby is available. maxSyncReplicas int The target value for the synchronous replication quorum, that can be decreased if the number of ready standbys is lower than this. Undefined or 0 disable synchronous replication. postgresql PostgresConfiguration Configuration of the PostgreSQL server replicationSlots ReplicationSlotsConfiguration Replication slots management configuration bootstrap BootstrapConfiguration Instructions to bootstrap this cluster replica ReplicaClusterConfiguration Replica cluster configuration superuserSecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The secret containing the superuser password. If not defined a new secret will be created with a randomly generated password enableSuperuserAccess bool When this option is enabled, the operator will use the SuperuserSecret to update the postgres user password (if the secret is not present, the operator will automatically create one). When this option is disabled, the operator will ignore the SuperuserSecret content, delete it when automatically created, and then blank the password of the postgres user by setting it to NULL . Disabled by default. certificates CertificatesConfiguration The configuration for the CA and related certificates imagePullSecrets []github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The list of pull secrets to be used to pull the images storage StorageConfiguration Configuration of the storage of the instances serviceAccountTemplate ServiceAccountTemplate Configure the generation of the service account walStorage StorageConfiguration Configuration of the storage for PostgreSQL WAL (Write-Ahead Log) ephemeralVolumeSource core/v1.EphemeralVolumeSource EphemeralVolumeSource allows the user to configure the source of ephemeral volumes. startDelay int32 The time in seconds that is allowed for a PostgreSQL instance to successfully start up (default 3600). The startup probe failure threshold is derived from this value using the formula: ceiling(startDelay / 10). stopDelay int32 The time in seconds that is allowed for a PostgreSQL instance to gracefully shutdown (default 1800) smartShutdownTimeout int32 The time in seconds that controls the window of time reserved for the smart shutdown of Postgres to complete. Make sure you reserve enough time for the operator to request a fast shutdown of Postgres (that is: stopDelay - smartShutdownTimeout ). switchoverDelay int32 The time in seconds that is allowed for a primary PostgreSQL instance to gracefully shutdown during a switchover. Default value is 3600 seconds (1 hour). failoverDelay int32 The amount of time (in seconds) to wait before triggering a failover after the primary PostgreSQL instance in the cluster was detected to be unhealthy livenessProbeTimeout int32 LivenessProbeTimeout is the time (in seconds) that is allowed for a PostgreSQL instance to successfully respond to the liveness probe (default 30). The Liveness probe failure threshold is derived from this value using the formula: ceiling(livenessProbe / 10). affinity AffinityConfiguration Affinity/Anti-affinity rules for Pods topologySpreadConstraints []core/v1.TopologySpreadConstraint TopologySpreadConstraints specifies how to spread matching pods among the given topology. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/ resources core/v1.ResourceRequirements Resources requirements of every generated Pod. Please refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ for more information. ephemeralVolumesSizeLimit EphemeralVolumesSizeLimitConfiguration EphemeralVolumesSizeLimit allows the user to set the limits for the ephemeral volumes priorityClassName string Name of the priority class which will be used in every generated Pod, if the PriorityClass specified does not exist, the pod will not be able to schedule. Please refer to https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass for more information primaryUpdateStrategy PrimaryUpdateStrategy Deployment strategy to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be automated ( unsupervised - default) or manual ( supervised ) primaryUpdateMethod PrimaryUpdateMethod Method to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be with a switchover ( switchover ) or in-place ( restart - default) backup BackupConfiguration The configuration to be used for backups nodeMaintenanceWindow NodeMaintenanceWindow Define a maintenance window for the Kubernetes nodes monitoring MonitoringConfiguration The configuration of the monitoring infrastructure of this cluster externalClusters []ExternalCluster The list of external clusters which are used in the configuration logLevel string The instances' log level, one of the following values: error, warning, info (default), debug, trace projectedVolumeTemplate core/v1.ProjectedVolumeSource Template to be used to define projected volumes, projected volumes will be mounted under /projected base folder env []core/v1.EnvVar Env follows the Env format to pass environment variables to the pods created in the cluster envFrom []core/v1.EnvFromSource EnvFrom follows the EnvFrom format to pass environment variables sources to the pods to be used by Env managed ManagedConfiguration The configuration that is used by the portions of PostgreSQL that are managed by the instance manager seccompProfile core/v1.SeccompProfile The SeccompProfile applied to every Pod and Container. Defaults to: RuntimeDefault tablespaces []TablespaceConfiguration The tablespaces configuration enablePDB bool Manage the PodDisruptionBudget resources within the cluster. When configured as true (default setting), the pod disruption budgets will safeguard the primary node from being terminated. Conversely, setting it to false will result in the absence of any PodDisruptionBudget resource, permitting the shutdown of all nodes hosting the PostgreSQL cluster. This latter configuration is advisable for any PostgreSQL cluster employed for development/staging purposes. plugins []PluginConfiguration The plugins configuration, containing any plugin to be loaded with the corresponding configuration probes ProbesConfiguration The configuration of the probes to be injected in the PostgreSQL Pods.","title":"ClusterSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterStatus","text":"Appears in: Cluster ClusterStatus defines the observed state of Cluster Field Description instances int The total number of PVC Groups detected in the cluster. It may differ from the number of existing instance pods. readyInstances int The total number of ready instances in the cluster. It is equal to the number of ready instance pods. instancesStatus map[PodStatus][]string InstancesStatus indicates in which status the instances are instancesReportedState map[PodName]InstanceReportedState The reported state of the instances during the last reconciliation loop managedRolesStatus ManagedRoles ManagedRolesStatus reports the state of the managed roles in the cluster tablespacesStatus []TablespaceState TablespacesStatus reports the state of the declarative tablespaces in the cluster timelineID int The timeline of the Postgres cluster topology Topology Instances topology. latestGeneratedNode int ID of the latest generated node (used to avoid node name clashing) currentPrimary string Current primary instance targetPrimary string Target primary instance, this is different from the previous one during a switchover or a failover lastPromotionToken string LastPromotionToken is the last verified promotion token that was used to promote a replica cluster pvcCount int32 How many PVCs have been created by this cluster jobCount int32 How many Jobs have been created by this cluster danglingPVC []string List of all the PVCs created by this cluster and still available which are not attached to a Pod resizingPVC []string List of all the PVCs that have ResizingPVC condition. initializingPVC []string List of all the PVCs that are being initialized by this cluster healthyPVC []string List of all the PVCs not dangling nor initializing unusablePVC []string List of all the PVCs that are unusable because another PVC is missing writeService string Current write pod readService string Current list of read pods phase string Current phase of the cluster phaseReason string Reason for the current phase secretsResourceVersion SecretsResourceVersion The list of resource versions of the secrets managed by the operator. Every change here is done in the interest of the instance manager, which will refresh the secret data configMapResourceVersion ConfigMapResourceVersion The list of resource versions of the configmaps, managed by the operator. Every change here is done in the interest of the instance manager, which will refresh the configmap data certificates CertificatesStatus The configuration for the CA and related certificates, initialized with defaults. firstRecoverabilityPoint string The first recoverability point, stored as a date in RFC3339 format. This field is calculated from the content of FirstRecoverabilityPointByMethod. Deprecated: the field is not set for backup plugins. firstRecoverabilityPointByMethod map[BackupMethod]meta/v1.Time The first recoverability point, stored as a date in RFC3339 format, per backup method type. Deprecated: the field is not set for backup plugins. lastSuccessfulBackup string Last successful backup, stored as a date in RFC3339 format. This field is calculated from the content of LastSuccessfulBackupByMethod. Deprecated: the field is not set for backup plugins. lastSuccessfulBackupByMethod map[BackupMethod]meta/v1.Time Last successful backup, stored as a date in RFC3339 format, per backup method type. Deprecated: the field is not set for backup plugins. lastFailedBackup string Last failed backup, stored as a date in RFC3339 format. Deprecated: the field is not set for backup plugins. cloudNativePGCommitHash string The commit hash number of which this operator running currentPrimaryTimestamp string The timestamp when the last actual promotion to primary has occurred currentPrimaryFailingSinceTimestamp string The timestamp when the primary was detected to be unhealthy This field is reported when .spec.failoverDelay is populated or during online upgrades targetPrimaryTimestamp string The timestamp when the last request for a new primary has occurred poolerIntegrations PoolerIntegrations The integration needed by poolers referencing the cluster cloudNativePGOperatorHash string The hash of the binary of the operator availableArchitectures []AvailableArchitecture AvailableArchitectures reports the available architectures of a cluster conditions []meta/v1.Condition Conditions for cluster object instanceNames []string List of instance names in the cluster onlineUpdateEnabled bool OnlineUpdateEnabled shows if the online upgrade is enabled inside the cluster image string Image contains the image name used by the pods pgDataImageInfo ImageInfo PGDataImageInfo contains the details of the latest image that has run on the current data directory. pluginStatus []PluginStatus PluginStatus is the status of the loaded plugins switchReplicaClusterStatus SwitchReplicaClusterStatus SwitchReplicaClusterStatus is the status of the switch to replica cluster demotionToken string DemotionToken is a JSON token containing the information from pg_controldata such as Database system identifier, Latest checkpoint's TimeLineID, Latest checkpoint's REDO location, Latest checkpoint's REDO WAL file, and Time of latest checkpoint systemID string SystemID is the latest detected PostgreSQL SystemID","title":"ClusterStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ConfigMapResourceVersion","text":"Appears in: ClusterStatus ConfigMapResourceVersion is the resource versions of the secrets managed by the operator Field Description metrics map[string]string A map with the versions of all the config maps used to pass metrics. Map keys are the config map names, map values are the versions","title":"ConfigMapResourceVersion"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DataDurabilityLevel","text":"(Alias of string ) Appears in: SynchronousReplicaConfiguration DataDurabilityLevel specifies how strictly to enforce synchronous replication when cluster instances are unavailable. Options are required or preferred .","title":"DataDurabilityLevel"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DataSource","text":"Appears in: BootstrapRecovery DataSource contains the configuration required to bootstrap a PostgreSQL cluster from an existing storage Field Description storage [Required] core/v1.TypedLocalObjectReference Configuration of the storage of the instances walStorage core/v1.TypedLocalObjectReference Configuration of the storage for PostgreSQL WAL (Write-Ahead Log) tablespaceStorage map[string]core/v1.TypedLocalObjectReference Configuration of the storage for PostgreSQL tablespaces","title":"DataSource"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseObjectSpec","text":"Appears in: ExtensionSpec SchemaSpec DatabaseObjectSpec contains the fields which are common to every database object Field Description name [Required] string Name of the extension/schema ensure EnsureOption Specifies whether an extension/schema should be present or absent in the database. If set to present , the extension/schema will be created if it does not exist. If set to absent , the extension/schema will be removed if it exists.","title":"DatabaseObjectSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseObjectStatus","text":"Appears in: DatabaseStatus DatabaseObjectStatus is the status of the managed database objects Field Description name [Required] string The name of the object applied [Required] bool True of the object has been installed successfully in the database message string Message is the object reconciliation message","title":"DatabaseObjectStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseReclaimPolicy","text":"(Alias of string ) Appears in: DatabaseSpec DatabaseReclaimPolicy describes a policy for end-of-life maintenance of databases.","title":"DatabaseReclaimPolicy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseRoleRef","text":"Appears in: TablespaceConfiguration DatabaseRoleRef is a reference an a role available inside PostgreSQL Field Description name string No description provided.","title":"DatabaseRoleRef"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseSpec","text":"Appears in: Database DatabaseSpec is the specification of a Postgresql Database, built around the CREATE DATABASE , ALTER DATABASE , and DROP DATABASE SQL commands of PostgreSQL. Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster hosting the database. ensure EnsureOption Ensure the PostgreSQL database is present or absent - defaults to \"present\". name [Required] string The name of the database to create inside PostgreSQL. This setting cannot be changed. owner [Required] string Maps to the OWNER parameter of CREATE DATABASE . Maps to the OWNER TO command of ALTER DATABASE . The role name of the user who owns the database inside PostgreSQL. template string Maps to the TEMPLATE parameter of CREATE DATABASE . This setting cannot be changed. The name of the template from which to create this database. encoding string Maps to the ENCODING parameter of CREATE DATABASE . This setting cannot be changed. Character set encoding to use in the database. locale string Maps to the LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Sets the default collation order and character classification in the new database. localeProvider string Maps to the LOCALE_PROVIDER parameter of CREATE DATABASE . This setting cannot be changed. This option sets the locale provider for databases created in the new cluster. Available from PostgreSQL 16. localeCollate string Maps to the LC_COLLATE parameter of CREATE DATABASE . This setting cannot be changed. localeCType string Maps to the LC_CTYPE parameter of CREATE DATABASE . This setting cannot be changed. icuLocale string Maps to the ICU_LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Specifies the ICU locale when the ICU provider is used. This option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules string Maps to the ICU_RULES parameter of CREATE DATABASE . This setting cannot be changed. Specifies additional collation rules to customize the behavior of the default collation. This option requires localeProvider to be set to icu . Available from PostgreSQL 16. builtinLocale string Maps to the BUILTIN_LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Specifies the locale name when the builtin provider is used. This option requires localeProvider to be set to builtin . Available from PostgreSQL 17. collationVersion string Maps to the COLLATION_VERSION parameter of CREATE DATABASE . This setting cannot be changed. isTemplate bool Maps to the IS_TEMPLATE parameter of CREATE DATABASE and ALTER DATABASE . If true, this database is considered a template and can be cloned by any user with CREATEDB privileges. allowConnections bool Maps to the ALLOW_CONNECTIONS parameter of CREATE DATABASE and ALTER DATABASE . If false then no one can connect to this database. connectionLimit int Maps to the CONNECTION LIMIT clause of CREATE DATABASE and ALTER DATABASE . How many concurrent connections can be made to this database. -1 (the default) means no limit. tablespace string Maps to the TABLESPACE parameter of CREATE DATABASE . Maps to the SET TABLESPACE command of ALTER DATABASE . The name of the tablespace (in PostgreSQL) that will be associated with the new database. This tablespace will be the default tablespace used for objects created in this database. databaseReclaimPolicy DatabaseReclaimPolicy The policy for end-of-life maintenance of this database. schemas []SchemaSpec The list of schemas to be managed in the database extensions []ExtensionSpec The list of extensions to be managed in the database","title":"DatabaseSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseStatus","text":"Appears in: Database DatabaseStatus defines the observed state of Database Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the database was reconciled correctly message string Message is the reconciliation output message schemas []DatabaseObjectStatus Schemas is the status of the managed schemas extensions []DatabaseObjectStatus Extensions is the status of the managed extensions","title":"DatabaseStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-EmbeddedObjectMetadata","text":"Appears in: ClusterSpec EmbeddedObjectMetadata contains metadata to be inherited by all resources related to a Cluster Field Description labels map[string]string No description provided. annotations map[string]string No description provided.","title":"EmbeddedObjectMetadata"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-EnsureOption","text":"(Alias of string ) Appears in: DatabaseObjectSpec DatabaseSpec RoleConfiguration EnsureOption represents whether we should enforce the presence or absence of a Role in a PostgreSQL instance","title":"EnsureOption"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-EphemeralVolumesSizeLimitConfiguration","text":"Appears in: ClusterSpec EphemeralVolumesSizeLimitConfiguration contains the configuration of the ephemeral storage Field Description shm k8s.io/apimachinery/pkg/api/resource.Quantity Shm is the size limit of the shared memory volume temporaryData k8s.io/apimachinery/pkg/api/resource.Quantity TemporaryData is the size limit of the temporary data volume","title":"EphemeralVolumesSizeLimitConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ExtensionConfiguration","text":"Appears in: PostgresConfiguration ExtensionConfiguration is the configuration used to add PostgreSQL extensions to the Cluster. Field Description name [Required] string The name of the extension, required image [Required] core/v1.ImageVolumeSource The image containing the extension, required extension_control_path []string The list of directories inside the image which should be added to extension_control_path. If not defined, defaults to \"/share\". dynamic_library_path []string The list of directories inside the image which should be added to dynamic_library_path. If not defined, defaults to \"/lib\". ld_library_path []string The list of directories inside the image which should be added to ld_library_path.","title":"ExtensionConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ExtensionSpec","text":"Appears in: DatabaseSpec ExtensionSpec configures an extension in a database Field Description DatabaseObjectSpec DatabaseObjectSpec (Members of DatabaseObjectSpec are embedded into this type.) Common fields version [Required] string The version of the extension to install. If empty, the operator will install the default version (whatever is specified in the extension's control file) schema [Required] string The name of the schema in which to install the extension's objects, in case the extension allows its contents to be relocated. If not specified (default), and the extension's control file does not specify a schema either, the current default object creation schema is used.","title":"ExtensionSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ExternalCluster","text":"Appears in: ClusterSpec ExternalCluster represents the connection parameters to an external cluster which is used in the other sections of the configuration Field Description name [Required] string The server name, required connectionParameters map[string]string The list of connection parameters, such as dbname, host, username, etc sslCert core/v1.SecretKeySelector The reference to an SSL certificate to be used to connect to this instance sslKey core/v1.SecretKeySelector The reference to an SSL private key to be used to connect to this instance sslRootCert core/v1.SecretKeySelector The reference to an SSL CA public key to be used to connect to this instance password core/v1.SecretKeySelector The reference to the password to be used to connect to the server. If a password is provided, CloudNativePG creates a PostgreSQL passfile at /controller/external/NAME/pass (where \"NAME\" is the cluster's name). This passfile is automatically referenced in the connection string when establishing a connection to the remote PostgreSQL server from the current PostgreSQL Cluster . This ensures secure and efficient password management for external clusters. barmanObjectStore github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration The configuration for the barman-cloud tool suite plugin [Required] PluginConfiguration The configuration of the plugin that is taking care of WAL archiving and backups for this external cluster","title":"ExternalCluster"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-FailoverQuorumStatus","text":"Appears in: FailoverQuorum FailoverQuorumStatus is the latest observed status of the failover quorum of the PG cluster. Field Description method string Contains the latest reported Method value. standbyNames []string StandbyNames is the list of potentially synchronous instance names. standbyNumber int StandbyNumber is the number of synchronous standbys that transactions need to wait for replies from. primary string Primary is the name of the primary instance that updated this object the latest time.","title":"FailoverQuorumStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImageCatalogRef","text":"Appears in: ClusterSpec ImageCatalogRef defines the reference to a major version in an ImageCatalog Field Description TypedLocalObjectReference core/v1.TypedLocalObjectReference (Members of TypedLocalObjectReference are embedded into this type.) No description provided. major [Required] int The major version of PostgreSQL we want to use from the ImageCatalog","title":"ImageCatalogRef"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImageCatalogSpec","text":"Appears in: ClusterImageCatalog ImageCatalog ImageCatalogSpec defines the desired ImageCatalog Field Description images [Required] []CatalogImage List of CatalogImages available in the catalog","title":"ImageCatalogSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImageInfo","text":"Appears in: ClusterStatus ImageInfo contains the information about a PostgreSQL image Field Description image [Required] string Image is the image name majorVersion [Required] int MajorVersion is the major version of the image","title":"ImageInfo"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Import","text":"Appears in: BootstrapInitDB Import contains the configuration to init a database from a logic snapshot of an externalCluster Field Description source [Required] ImportSource The source of the import type [Required] SnapshotType The import type. Can be microservice or monolith . databases [Required] []string The databases to import roles []string The roles to import postImportApplicationSQL []string List of SQL queries to be executed as a superuser in the application database right after is imported - to be used with extreme care (by default empty). Only available in microservice type. schemaOnly bool When set to true, only the pre-data and post-data sections of pg_restore are invoked, avoiding data import. Default: false . pgDumpExtraOptions []string List of custom options to pass to the pg_dump command. IMPORTANT: Use these options with caution and at your own risk, as the operator does not validate their content. Be aware that certain options may conflict with the operator's intended functionality or design. pgRestoreExtraOptions []string List of custom options to pass to the pg_restore command. IMPORTANT: Use these options with caution and at your own risk, as the operator does not validate their content. Be aware that certain options may conflict with the operator's intended functionality or design.","title":"Import"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImportSource","text":"Appears in: Import ImportSource describes the source for the logical snapshot Field Description externalCluster [Required] string The name of the externalCluster used for import","title":"ImportSource"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-InstanceID","text":"Appears in: BackupStatus InstanceID contains the information to identify an instance Field Description podName string The pod name ContainerID string The container ID","title":"InstanceID"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-InstanceReportedState","text":"Appears in: ClusterStatus InstanceReportedState describes the last reported state of an instance during a reconciliation loop Field Description isPrimary [Required] bool indicates if an instance is the primary one timeLineID int indicates on which TimelineId the instance is ip [Required] string IP address of the instance","title":"InstanceReportedState"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-IsolationCheckConfiguration","text":"Appears in: LivenessProbe IsolationCheckConfiguration contains the configuration for the isolation check functionality in the liveness probe Field Description enabled bool Whether primary isolation checking is enabled for the liveness probe requestTimeout int Timeout in milliseconds for requests during the primary isolation check connectionTimeout int Timeout in milliseconds for connections during the primary isolation check","title":"IsolationCheckConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LDAPBindAsAuth","text":"Appears in: LDAPConfig LDAPBindAsAuth provides the required fields to use the bind authentication for LDAP Field Description prefix string Prefix for the bind authentication option suffix string Suffix for the bind authentication option","title":"LDAPBindAsAuth"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LDAPBindSearchAuth","text":"Appears in: LDAPConfig LDAPBindSearchAuth provides the required fields to use the bind+search LDAP authentication process Field Description baseDN string Root DN to begin the user search bindDN string DN of the user to bind to the directory bindPassword core/v1.SecretKeySelector Secret with the password for the user to bind to the directory searchAttribute string Attribute to match against the username searchFilter string Search filter to use when doing the search+bind authentication","title":"LDAPBindSearchAuth"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LDAPConfig","text":"Appears in: PostgresConfiguration LDAPConfig contains the parameters needed for LDAP authentication Field Description server string LDAP hostname or IP address port int LDAP server port scheme LDAPScheme LDAP schema to be used, possible options are ldap and ldaps bindAsAuth LDAPBindAsAuth Bind as authentication configuration bindSearchAuth LDAPBindSearchAuth Bind+Search authentication configuration tls bool Set to 'true' to enable LDAP over TLS. 'false' is default","title":"LDAPConfig"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LDAPScheme","text":"(Alias of string ) Appears in: LDAPConfig LDAPScheme defines the possible schemes for LDAP","title":"LDAPScheme"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LivenessProbe","text":"Appears in: ProbesConfiguration LivenessProbe is the configuration of the liveness probe Field Description Probe Probe (Members of Probe are embedded into this type.) Probe is the standard probe configuration isolationCheck IsolationCheckConfiguration Configure the feature that extends the liveness probe for a primary instance. In addition to the basic checks, this verifies whether the primary is isolated from the Kubernetes API server and from its replicas, ensuring that it can be safely shut down if network partition or API unavailability is detected. Enabled by default.","title":"LivenessProbe"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedConfiguration","text":"Appears in: ClusterSpec ManagedConfiguration represents the portions of PostgreSQL that are managed by the instance manager Field Description roles []RoleConfiguration Database roles managed by the Cluster services ManagedServices Services roles managed by the Cluster","title":"ManagedConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedRoles","text":"Appears in: ClusterStatus ManagedRoles tracks the status of a cluster's managed roles Field Description byStatus map[RoleStatus][]string ByStatus gives the list of roles in each state cannotReconcile map[string][]string CannotReconcile lists roles that cannot be reconciled in PostgreSQL, with an explanation of the cause passwordStatus map[string]PasswordState PasswordStatus gives the last transaction id and password secret version for each managed role","title":"ManagedRoles"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedService","text":"Appears in: ManagedServices ManagedService represents a specific service managed by the cluster. It includes the type of service and its associated template specification. Field Description selectorType [Required] ServiceSelectorType SelectorType specifies the type of selectors that the service will have. Valid values are \"rw\", \"r\", and \"ro\", representing read-write, read, and read-only services. updateStrategy ServiceUpdateStrategy UpdateStrategy describes how the service differences should be reconciled serviceTemplate [Required] ServiceTemplateSpec ServiceTemplate is the template specification for the service.","title":"ManagedService"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedServices","text":"Appears in: ManagedConfiguration ManagedServices represents the services managed by the cluster. Field Description disabledDefaultServices []ServiceSelectorType DisabledDefaultServices is a list of service types that are disabled by default. Valid values are \"r\", and \"ro\", representing read, and read-only services. additional []ManagedService Additional is a list of additional managed services specified by the user.","title":"ManagedServices"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Metadata","text":"Appears in: PodTemplateSpec ServiceAccountTemplate ServiceTemplateSpec Metadata is a structure similar to the metav1.ObjectMeta, but still parseable by controller-gen to create a suitable CRD for the user. The comment of PodTemplateSpec has an explanation of why we are not using the core data types. Field Description name string The name of the resource. Only supported for certain types labels map[string]string Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels annotations map[string]string Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations","title":"Metadata"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-MonitoringConfiguration","text":"Appears in: ClusterSpec MonitoringConfiguration is the type containing all the monitoring configuration for a certain cluster Field Description disableDefaultQueries bool Whether the default queries should be injected. Set it to true if you don't want to inject default queries into the cluster. Default: false. customQueriesConfigMap []github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector The list of config maps containing the custom queries customQueriesSecret []github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector The list of secrets containing the custom queries enablePodMonitor bool Enable or disable the PodMonitor tls ClusterMonitoringTLSConfiguration Configure TLS communication for the metrics endpoint. Changing tls.enabled option will force a rollout of all instances. podMonitorMetricRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of metric relabelings for the PodMonitor . Applied to samples before ingestion. podMonitorRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of relabelings for the PodMonitor . Applied to samples before scraping.","title":"MonitoringConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-NodeMaintenanceWindow","text":"Appears in: ClusterSpec NodeMaintenanceWindow contains information that the operator will use while upgrading the underlying node. This option is only useful when the chosen storage prevents the Pods from being freely moved across nodes. Field Description reusePVC bool Reuse the existing PVC (wait for the node to come up again) or not (recreate it elsewhere - when instances >1) inProgress bool Is there a node maintenance activity in progress?","title":"NodeMaintenanceWindow"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-OnlineConfiguration","text":"Appears in: BackupSpec ScheduledBackupSpec VolumeSnapshotConfiguration OnlineConfiguration contains the configuration parameters for the online volume snapshot Field Description waitForArchive bool If false, the function will return immediately after the backup is completed, without waiting for WAL to be archived. This behavior is only useful with backup software that independently monitors WAL archiving. Otherwise, WAL required to make the backup consistent might be missing and make the backup useless. By default, or when this parameter is true, pg_backup_stop will wait for WAL to be archived when archiving is enabled. On a standby, this means that it will wait only when archive_mode = always. If write activity on the primary is low, it may be useful to run pg_switch_wal on the primary in order to trigger an immediate segment switch. immediateCheckpoint bool Control whether the I/O workload for the backup initial checkpoint will be limited, according to the checkpoint_completion_target setting on the PostgreSQL server. If set to true, an immediate checkpoint will be used, meaning PostgreSQL will complete the checkpoint as soon as possible. false by default.","title":"OnlineConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PasswordState","text":"Appears in: ManagedRoles PasswordState represents the state of the password of a managed RoleConfiguration Field Description transactionID int64 the last transaction ID to affect the role definition in PostgreSQL resourceVersion string the resource version of the password secret","title":"PasswordState"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PgBouncerIntegrationStatus","text":"Appears in: PoolerIntegrations PgBouncerIntegrationStatus encapsulates the needed integration for the pgbouncer poolers referencing the cluster Field Description secrets []string No description provided.","title":"PgBouncerIntegrationStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PgBouncerPoolMode","text":"(Alias of string ) Appears in: PgBouncerSpec PgBouncerPoolMode is the mode of PgBouncer","title":"PgBouncerPoolMode"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PgBouncerSecrets","text":"Appears in: PoolerSecrets PgBouncerSecrets contains the versions of the secrets used by pgbouncer Field Description authQuery SecretVersion The auth query secret version","title":"PgBouncerSecrets"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PgBouncerSpec","text":"Appears in: PoolerSpec PgBouncerSpec defines how to configure PgBouncer Field Description poolMode PgBouncerPoolMode The pool mode. Default: session . authQuerySecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The credentials of the user that need to be used for the authentication query. In case it is specified, also an AuthQuery (e.g. \"SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1\") has to be specified and no automatic CNPG Cluster integration will be triggered. authQuery string The query that will be used to download the hash of the password of a certain user. Default: \"SELECT usename, passwd FROM public.user_search($1)\". In case it is specified, also an AuthQuerySecret has to be specified and no automatic CNPG Cluster integration will be triggered. parameters map[string]string Additional parameters to be passed to PgBouncer - please check the CNPG documentation for a list of options you can configure pg_hba []string PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) paused bool When set to true , PgBouncer will disconnect from the PostgreSQL server, first waiting for all queries to complete, and pause all new client connections until this value is set to false (default). Internally, the operator calls PgBouncer's PAUSE and RESUME commands.","title":"PgBouncerSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PluginConfiguration","text":"Appears in: ClusterSpec ExternalCluster PluginConfiguration specifies a plugin that need to be loaded for this cluster to be reconciled Field Description name [Required] string Name is the plugin name enabled bool Enabled is true if this plugin will be used isWALArchiver bool Only one plugin can be declared as WALArchiver. Cannot be active if \".spec.backup.barmanObjectStore\" configuration is present. parameters map[string]string Parameters is the configuration of the plugin","title":"PluginConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PluginStatus","text":"Appears in: ClusterStatus PluginStatus is the status of a loaded plugin Field Description name [Required] string Name is the name of the plugin version [Required] string Version is the version of the plugin loaded by the latest reconciliation loop capabilities []string Capabilities are the list of capabilities of the plugin operatorCapabilities []string OperatorCapabilities are the list of capabilities of the plugin regarding the reconciler walCapabilities []string WALCapabilities are the list of capabilities of the plugin regarding the WAL management backupCapabilities []string BackupCapabilities are the list of capabilities of the plugin regarding the Backup management restoreJobHookCapabilities []string RestoreJobHookCapabilities are the list of capabilities of the plugin regarding the RestoreJobHook management status string Status contain the status reported by the plugin through the SetStatusInCluster interface","title":"PluginStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PodTemplateSpec","text":"Appears in: PoolerSpec PodTemplateSpec is a structure allowing the user to set a template for Pod generation. Unfortunately we can't use the corev1.PodTemplateSpec type because the generated CRD won't have the field for the metadata section. References: https://github.com/kubernetes-sigs/controller-tools/issues/385 https://github.com/kubernetes-sigs/controller-tools/issues/448 https://github.com/prometheus-operator/prometheus-operator/issues/3041 Field Description metadata Metadata Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata spec core/v1.PodSpec Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"PodTemplateSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PodTopologyLabels","text":"(Alias of map[string]string ) Appears in: Topology PodTopologyLabels represent the topology of a Pod. map[labelName]labelValue","title":"PodTopologyLabels"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerIntegrations","text":"Appears in: ClusterStatus PoolerIntegrations encapsulates the needed integration for the poolers referencing the cluster Field Description pgBouncerIntegration PgBouncerIntegrationStatus No description provided.","title":"PoolerIntegrations"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerMonitoringConfiguration","text":"Appears in: PoolerSpec PoolerMonitoringConfiguration is the type containing all the monitoring configuration for a certain Pooler. Mirrors the Cluster's MonitoringConfiguration but without the custom queries part for now. Field Description enablePodMonitor bool Enable or disable the PodMonitor podMonitorMetricRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of metric relabelings for the PodMonitor . Applied to samples before ingestion. podMonitorRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of relabelings for the PodMonitor . Applied to samples before scraping.","title":"PoolerMonitoringConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerSecrets","text":"Appears in: PoolerStatus PoolerSecrets contains the versions of all the secrets used Field Description serverTLS SecretVersion The server TLS secret version serverCA SecretVersion The server CA secret version clientCA SecretVersion The client CA secret version pgBouncerSecrets PgBouncerSecrets The version of the secrets used by PgBouncer","title":"PoolerSecrets"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerSpec","text":"Appears in: Pooler PoolerSpec defines the desired state of Pooler Field Description cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference This is the cluster reference on which the Pooler will work. Pooler name should never match with any cluster name within the same namespace. type PoolerType Type of service to forward traffic to. Default: rw . instances int32 The number of replicas we want. Default: 1. template PodTemplateSpec The template of the Pod to be created pgbouncer [Required] PgBouncerSpec The PgBouncer configuration deploymentStrategy apps/v1.DeploymentStrategy The deployment strategy to use for pgbouncer to replace existing pods with new ones monitoring PoolerMonitoringConfiguration The configuration of the monitoring infrastructure of this pooler. serviceTemplate ServiceTemplateSpec Template for the Service to be created","title":"PoolerSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerStatus","text":"Appears in: Pooler PoolerStatus defines the observed state of Pooler Field Description secrets PoolerSecrets The resource version of the config object instances int32 The number of pods trying to be scheduled","title":"PoolerStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerType","text":"(Alias of string ) Appears in: PoolerSpec PoolerType is the type of the connection pool, meaning the service we are targeting. Allowed values are rw and ro .","title":"PoolerType"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PostgresConfiguration","text":"Appears in: ClusterSpec PostgresConfiguration defines the PostgreSQL configuration Field Description parameters map[string]string PostgreSQL configuration options (postgresql.conf) synchronous SynchronousReplicaConfiguration Configuration of the PostgreSQL synchronous replication feature pg_hba []string PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) pg_ident []string PostgreSQL User Name Maps rules (lines to be appended to the pg_ident.conf file) syncReplicaElectionConstraint SyncReplicaElectionConstraints Requirements to be met by sync replicas. This will affect how the \"synchronous_standby_names\" parameter will be set up. shared_preload_libraries []string Lists of shared preload libraries to add to the default ones ldap LDAPConfig Options to specify LDAP configuration promotionTimeout int32 Specifies the maximum number of seconds to wait when promoting an instance to primary. Default value is 40000000, greater than one year in seconds, big enough to simulate an infinite timeout enableAlterSystem bool If this parameter is true, the user will be able to invoke ALTER SYSTEM on this CloudNativePG Cluster. This should only be used for debugging and troubleshooting. Defaults to false. extensions []ExtensionConfiguration The configuration of the extensions to be added","title":"PostgresConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PrimaryUpdateMethod","text":"(Alias of string ) Appears in: ClusterSpec PrimaryUpdateMethod contains the method to use when upgrading the primary server of the cluster as part of rolling updates","title":"PrimaryUpdateMethod"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PrimaryUpdateStrategy","text":"(Alias of string ) Appears in: ClusterSpec PrimaryUpdateStrategy contains the strategy to follow when upgrading the primary server of the cluster as part of rolling updates","title":"PrimaryUpdateStrategy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Probe","text":"Appears in: LivenessProbe ProbeWithStrategy Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic. Field Description initialDelaySeconds int32 Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes timeoutSeconds int32 Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes periodSeconds int32 How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. successThreshold int32 Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1. failureThreshold int32 Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. terminationGracePeriodSeconds int64 Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.","title":"Probe"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ProbeStrategyType","text":"(Alias of string ) Appears in: ProbeWithStrategy ProbeStrategyType is the type of the strategy used to declare a PostgreSQL instance ready","title":"ProbeStrategyType"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ProbeWithStrategy","text":"Appears in: ProbesConfiguration ProbeWithStrategy is the configuration of the startup probe Field Description Probe Probe (Members of Probe are embedded into this type.) Probe is the standard probe configuration type ProbeStrategyType The probe strategy maximumLag k8s.io/apimachinery/pkg/api/resource.Quantity Lag limit. Used only for streaming strategy","title":"ProbeWithStrategy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ProbesConfiguration","text":"Appears in: ClusterSpec ProbesConfiguration represent the configuration for the probes to be injected in the PostgreSQL Pods Field Description startup [Required] ProbeWithStrategy The startup probe configuration liveness [Required] LivenessProbe The liveness probe configuration readiness [Required] ProbeWithStrategy The readiness probe configuration","title":"ProbesConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationReclaimPolicy","text":"(Alias of string ) Appears in: PublicationSpec PublicationReclaimPolicy defines a policy for end-of-life maintenance of Publications.","title":"PublicationReclaimPolicy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationSpec","text":"Appears in: Publication PublicationSpec defines the desired state of Publication Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster that identifies the \"publisher\" name [Required] string The name of the publication inside PostgreSQL dbname [Required] string The name of the database where the publication will be installed in the \"publisher\" cluster parameters map[string]string Publication parameters part of the WITH clause as expected by PostgreSQL CREATE PUBLICATION command target [Required] PublicationTarget Target of the publication as expected by PostgreSQL CREATE PUBLICATION command publicationReclaimPolicy PublicationReclaimPolicy The policy for end-of-life maintenance of this publication","title":"PublicationSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationStatus","text":"Appears in: Publication PublicationStatus defines the observed state of Publication Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the publication was reconciled correctly message string Message is the reconciliation output message","title":"PublicationStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationTarget","text":"Appears in: PublicationSpec PublicationTarget is what this publication should publish Field Description allTables bool Marks the publication as one that replicates changes for all tables in the database, including tables created in the future. Corresponding to FOR ALL TABLES in PostgreSQL. objects []PublicationTargetObject Just the following schema objects","title":"PublicationTarget"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationTargetObject","text":"Appears in: PublicationTarget PublicationTargetObject is an object to publish Field Description tablesInSchema string Marks the publication as one that replicates changes for all tables in the specified list of schemas, including tables created in the future. Corresponding to FOR TABLES IN SCHEMA in PostgreSQL. table PublicationTargetTable Specifies a list of tables to add to the publication. Corresponding to FOR TABLE in PostgreSQL.","title":"PublicationTargetObject"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationTargetTable","text":"Appears in: PublicationTargetObject PublicationTargetTable is a table to publish Field Description only bool Whether to limit to the table only or include all its descendants name [Required] string The table name schema string The schema name columns []string The columns to publish","title":"PublicationTargetTable"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-RecoveryTarget","text":"Appears in: BootstrapRecovery RecoveryTarget allows to configure the moment where the recovery process will stop. All the target options except TargetTLI are mutually exclusive. Field Description backupID string The ID of the backup from which to start the recovery process. If empty (default) the operator will automatically detect the backup based on targetTime or targetLSN if specified. Otherwise use the latest available backup in chronological order. targetTLI string The target timeline (\"latest\" or a positive integer) targetXID string The target transaction ID targetName string The target name (to be previously created with pg_create_restore_point ) targetLSN string The target LSN (Log Sequence Number) targetTime string The target time as a timestamp in the RFC3339 standard targetImmediate bool End recovery as soon as a consistent state is reached exclusive bool Set the target to be exclusive. If omitted, defaults to false, so that in Postgres, recovery_target_inclusive will be true","title":"RecoveryTarget"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ReplicaClusterConfiguration","text":"Appears in: ClusterSpec ReplicaClusterConfiguration encapsulates the configuration of a replica cluster Field Description self string Self defines the name of this cluster. It is used to determine if this is a primary or a replica cluster, comparing it with primary primary string Primary defines which Cluster is defined to be the primary in the distributed PostgreSQL cluster, based on the topology specified in externalClusters source [Required] string The name of the external cluster which is the replication origin enabled bool If replica mode is enabled, this cluster will be a replica of an existing cluster. Replica cluster can be created from a recovery object store or via streaming through pg_basebackup. Refer to the Replica clusters page of the documentation for more information. promotionToken string A demotion token generated by an external cluster used to check if the promotion requirements are met. minApplyDelay meta/v1.Duration When replica mode is enabled, this parameter allows you to replay transactions only when the system time is at least the configured time past the commit time. This provides an opportunity to correct data loss errors. Note that when this parameter is set, a promotion token cannot be used.","title":"ReplicaClusterConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ReplicationSlotsConfiguration","text":"Appears in: ClusterSpec ReplicationSlotsConfiguration encapsulates the configuration of replication slots Field Description highAvailability ReplicationSlotsHAConfiguration Replication slots for high availability configuration updateInterval int Standby will update the status of the local replication slots every updateInterval seconds (default 30). synchronizeReplicas SynchronizeReplicasConfiguration Configures the synchronization of the user defined physical replication slots","title":"ReplicationSlotsConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ReplicationSlotsHAConfiguration","text":"Appears in: ReplicationSlotsConfiguration ReplicationSlotsHAConfiguration encapsulates the configuration of the replication slots that are automatically managed by the operator to control the streaming replication connections with the standby instances for high availability (HA) purposes. Replication slots are a PostgreSQL feature that makes sure that PostgreSQL automatically keeps WAL files in the primary when a streaming client (in this specific case a replica that is part of the HA cluster) gets disconnected. Field Description enabled bool If enabled (default), the operator will automatically manage replication slots on the primary instance and use them in streaming replication connections with all the standby instances that are part of the HA cluster. If disabled, the operator will not take advantage of replication slots in streaming connections with the replicas. This feature also controls replication slots in replica cluster, from the designated primary to its cascading replicas. slotPrefix string Prefix for replication slots managed by the operator for HA. It may only contain lower case letters, numbers, and the underscore character. This can only be set at creation time. By default set to _cnpg_ . synchronizeLogicalDecoding bool When enabled, the operator automatically manages synchronization of logical decoding (replication) slots across high-availability clusters. Requires one of the following conditions: PostgreSQL version 17 or later PostgreSQL version < 17 with pg_failover_slots extension enabled","title":"ReplicationSlotsHAConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-RoleConfiguration","text":"Appears in: ManagedConfiguration RoleConfiguration is the representation, in Kubernetes, of a PostgreSQL role with the additional field Ensure specifying whether to ensure the presence or absence of the role in the database The defaults of the CREATE ROLE command are applied Reference: https://www.postgresql.org/docs/current/sql-createrole.html Field Description name [Required] string Name of the role comment string Description of the role ensure EnsureOption Ensure the role is present or absent - defaults to \"present\" passwordSecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Secret containing the password of the role (if present) If null, the password will be ignored unless DisablePassword is set connectionLimit int64 If the role can log in, this specifies how many concurrent connections the role can make. -1 (the default) means no limit. validUntil meta/v1.Time Date and time after which the role's password is no longer valid. When omitted, the password will never expire (default). inRoles []string List of one or more existing roles to which this role will be immediately added as a new member. Default empty. inherit bool Whether a role \"inherits\" the privileges of roles it is a member of. Defaults is true . disablePassword bool DisablePassword indicates that a role's password should be set to NULL in Postgres superuser bool Whether the role is a superuser who can override all access restrictions within the database - superuser status is dangerous and should be used only when really needed. You must yourself be a superuser to create a new superuser. Defaults is false . createdb bool When set to true , the role being defined will be allowed to create new databases. Specifying false (default) will deny a role the ability to create databases. createrole bool Whether the role will be permitted to create, alter, drop, comment on, change the security label for, and grant or revoke membership in other roles. Default is false . login bool Whether the role is allowed to log in. A role having the login attribute can be thought of as a user. Roles without this attribute are useful for managing database privileges, but are not users in the usual sense of the word. Default is false . replication bool Whether a role is a replication role. A role must have this attribute (or be a superuser) in order to be able to connect to the server in replication mode (physical or logical replication) and in order to be able to create or drop replication slots. A role having the replication attribute is a very highly privileged role, and should only be used on roles actually used for replication. Default is false . bypassrls bool Whether a role bypasses every row-level security (RLS) policy. Default is false .","title":"RoleConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SQLRefs","text":"Appears in: BootstrapInitDB SQLRefs holds references to ConfigMaps or Secrets containing SQL files. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. Field Description secretRefs []github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector SecretRefs holds a list of references to Secrets configMapRefs []github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector ConfigMapRefs holds a list of references to ConfigMaps","title":"SQLRefs"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ScheduledBackupSpec","text":"Appears in: ScheduledBackup ScheduledBackupSpec defines the desired state of ScheduledBackup Field Description suspend bool If this backup is suspended or not immediate bool If the first backup has to be immediately start after creation or not schedule [Required] string The schedule does not follow the same format used in Kubernetes CronJobs as it includes an additional seconds specifier, see https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The cluster to backup backupOwnerReference string Indicates which ownerReference should be put inside the created backup resources. none: no owner reference for created backup objects (same behavior as before the field was introduced) self: sets the Scheduled backup object as owner of the backup cluster: set the cluster as owner of the backup target BackupTarget The policy to decide which instance should perform this backup. If empty, it defaults to cluster.spec.backup.target . Available options are empty string, primary and prefer-standby . primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. method BackupMethod The backup method to be used, possible options are barmanObjectStore , volumeSnapshot or plugin . Defaults to: barmanObjectStore . pluginConfiguration BackupPluginConfiguration Configuration parameters passed to the plugin managing this backup online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online' onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza","title":"ScheduledBackupSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ScheduledBackupStatus","text":"Appears in: ScheduledBackup ScheduledBackupStatus defines the observed state of ScheduledBackup Field Description lastCheckTime meta/v1.Time The latest time the schedule lastScheduleTime meta/v1.Time Information when was the last time that backup was successfully scheduled. nextScheduleTime meta/v1.Time Next time we will run a backup","title":"ScheduledBackupStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SchemaSpec","text":"Appears in: DatabaseSpec SchemaSpec configures a schema in a database Field Description DatabaseObjectSpec DatabaseObjectSpec (Members of DatabaseObjectSpec are embedded into this type.) Common fields owner [Required] string The role name of the user who owns the schema inside PostgreSQL. It maps to the AUTHORIZATION parameter of CREATE SCHEMA and the OWNER TO command of ALTER SCHEMA .","title":"SchemaSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SecretVersion","text":"Appears in: PgBouncerSecrets PoolerSecrets SecretVersion contains a secret name and its ResourceVersion Field Description name string The name of the secret version string The ResourceVersion of the secret","title":"SecretVersion"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SecretsResourceVersion","text":"Appears in: ClusterStatus SecretsResourceVersion is the resource versions of the secrets managed by the operator Field Description superuserSecretVersion string The resource version of the \"postgres\" user secret replicationSecretVersion string The resource version of the \"streaming_replica\" user secret applicationSecretVersion string The resource version of the \"app\" user secret managedRoleSecretVersion map[string]string The resource versions of the managed roles secrets caSecretVersion string Unused. Retained for compatibility with old versions. clientCaSecretVersion string The resource version of the PostgreSQL client-side CA secret version serverCaSecretVersion string The resource version of the PostgreSQL server-side CA secret version serverSecretVersion string The resource version of the PostgreSQL server-side secret version barmanEndpointCA string The resource version of the Barman Endpoint CA if provided externalClusterSecretVersion map[string]string The resource versions of the external cluster secrets metrics map[string]string A map with the versions of all the secrets used to pass metrics. Map keys are the secret names, map values are the versions","title":"SecretsResourceVersion"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ServiceAccountTemplate","text":"Appears in: ClusterSpec ServiceAccountTemplate contains the template needed to generate the service accounts Field Description metadata [Required] Metadata Metadata are the metadata to be used for the generated service account","title":"ServiceAccountTemplate"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ServiceSelectorType","text":"(Alias of string ) Appears in: ManagedService ManagedServices ServiceSelectorType describes a valid value for generating the service selectors. It indicates which type of service the selector applies to, such as read-write, read, or read-only","title":"ServiceSelectorType"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ServiceTemplateSpec","text":"Appears in: ManagedService PoolerSpec ServiceTemplateSpec is a structure allowing the user to set a template for Service generation. Field Description metadata Metadata Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata spec core/v1.ServiceSpec Specification of the desired behavior of the service. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"ServiceTemplateSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ServiceUpdateStrategy","text":"(Alias of string ) Appears in: ManagedService ServiceUpdateStrategy describes how the changes to the managed service should be handled","title":"ServiceUpdateStrategy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SnapshotOwnerReference","text":"(Alias of string ) Appears in: VolumeSnapshotConfiguration SnapshotOwnerReference defines the reference type for the owner of the snapshot. This specifies which owner the processed resources should relate to.","title":"SnapshotOwnerReference"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SnapshotType","text":"(Alias of string ) Appears in: Import SnapshotType is a type of allowed import","title":"SnapshotType"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-StorageConfiguration","text":"Appears in: ClusterSpec TablespaceConfiguration StorageConfiguration is the configuration used to create and reconcile PVCs, usable for WAL volumes, PGDATA volumes, or tablespaces Field Description storageClass string StorageClass to use for PVCs. Applied after evaluating the PVC template, if available. If not specified, the generated PVCs will use the default storage class size string Size of the storage. Required if not already specified in the PVC template. Changes to this field are automatically reapplied to the created PVCs. Size cannot be decreased. resizeInUseVolumes bool Resize existent PVCs, defaults to true pvcTemplate core/v1.PersistentVolumeClaimSpec Template to be used to generate the Persistent Volume Claim","title":"StorageConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SubscriptionReclaimPolicy","text":"(Alias of string ) Appears in: SubscriptionSpec SubscriptionReclaimPolicy describes a policy for end-of-life maintenance of Subscriptions.","title":"SubscriptionReclaimPolicy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SubscriptionSpec","text":"Appears in: Subscription SubscriptionSpec defines the desired state of Subscription Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster that identifies the \"subscriber\" name [Required] string The name of the subscription inside PostgreSQL dbname [Required] string The name of the database where the publication will be installed in the \"subscriber\" cluster parameters map[string]string Subscription parameters included in the WITH clause of the PostgreSQL CREATE SUBSCRIPTION command. Most parameters cannot be changed after the subscription is created and will be ignored if modified later, except for a limited set documented at: https://www.postgresql.org/docs/current/sql-altersubscription.html#SQL-ALTERSUBSCRIPTION-PARAMS-SET publicationName [Required] string The name of the publication inside the PostgreSQL database in the \"publisher\" publicationDBName string The name of the database containing the publication on the external cluster. Defaults to the one in the external cluster definition. externalClusterName [Required] string The name of the external cluster with the publication (\"publisher\") subscriptionReclaimPolicy SubscriptionReclaimPolicy The policy for end-of-life maintenance of this subscription","title":"SubscriptionSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SubscriptionStatus","text":"Appears in: Subscription SubscriptionStatus defines the observed state of Subscription Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the subscription was reconciled correctly message string Message is the reconciliation output message","title":"SubscriptionStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SwitchReplicaClusterStatus","text":"Appears in: ClusterStatus SwitchReplicaClusterStatus contains all the statuses regarding the switch of a cluster to a replica cluster Field Description inProgress bool InProgress indicates if there is an ongoing procedure of switching a cluster to a replica cluster.","title":"SwitchReplicaClusterStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SyncReplicaElectionConstraints","text":"Appears in: PostgresConfiguration SyncReplicaElectionConstraints contains the constraints for sync replicas election. For anti-affinity parameters two instances are considered in the same location if all the labels values match. In future synchronous replica election restriction by name will be supported. Field Description nodeLabelsAntiAffinity []string A list of node labels values to extract and compare to evaluate if the pods reside in the same topology or not enabled [Required] bool This flag enables the constraints for sync replicas","title":"SyncReplicaElectionConstraints"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SynchronizeReplicasConfiguration","text":"Appears in: ReplicationSlotsConfiguration SynchronizeReplicasConfiguration contains the configuration for the synchronization of user defined physical replication slots Field Description enabled [Required] bool When set to true, every replication slot that is on the primary is synchronized on each standby excludePatterns []string List of regular expression patterns to match the names of replication slots to be excluded (by default empty)","title":"SynchronizeReplicasConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SynchronousReplicaConfiguration","text":"Appears in: PostgresConfiguration SynchronousReplicaConfiguration contains the configuration of the PostgreSQL synchronous replication feature. Important: at this moment, also .spec.minSyncReplicas and .spec.maxSyncReplicas need to be considered. Field Description method [Required] SynchronousReplicaConfigurationMethod Method to select synchronous replication standbys from the listed servers, accepting 'any' (quorum-based synchronous replication) or 'first' (priority-based synchronous replication) as values. number [Required] int Specifies the number of synchronous standby servers that transactions must wait for responses from. maxStandbyNamesFromCluster int Specifies the maximum number of local cluster pods that can be automatically included in the synchronous_standby_names option in PostgreSQL. standbyNamesPre []string A user-defined list of application names to be added to synchronous_standby_names before local cluster pods (the order is only useful for priority-based synchronous replication). standbyNamesPost []string A user-defined list of application names to be added to synchronous_standby_names after local cluster pods (the order is only useful for priority-based synchronous replication). dataDurability DataDurabilityLevel If set to \"required\", data durability is strictly enforced. Write operations with synchronous commit settings ( on , remote_write , or remote_apply ) will block if there are insufficient healthy replicas, ensuring data persistence. If set to \"preferred\", data durability is maintained when healthy replicas are available, but the required number of instances will adjust dynamically if replicas become unavailable. This setting relaxes strict durability enforcement to allow for operational continuity. This setting is only applicable if both standbyNamesPre and standbyNamesPost are unset (empty).","title":"SynchronousReplicaConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SynchronousReplicaConfigurationMethod","text":"(Alias of string ) Appears in: SynchronousReplicaConfiguration SynchronousReplicaConfigurationMethod configures whether to use quorum based replication or a priority list","title":"SynchronousReplicaConfigurationMethod"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-TablespaceConfiguration","text":"Appears in: ClusterSpec TablespaceConfiguration is the configuration of a tablespace, and includes the storage specification for the tablespace Field Description name [Required] string The name of the tablespace storage [Required] StorageConfiguration The storage configuration for the tablespace owner DatabaseRoleRef Owner is the PostgreSQL user owning the tablespace temporary bool When set to true, the tablespace will be added as a temp_tablespaces entry in PostgreSQL, and will be available to automatically house temp database objects, or other temporary files. Please refer to PostgreSQL documentation for more information on the temp_tablespaces GUC.","title":"TablespaceConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-TablespaceState","text":"Appears in: ClusterStatus TablespaceState represents the state of a tablespace in a cluster Field Description name [Required] string Name is the name of the tablespace owner string Owner is the PostgreSQL user owning the tablespace state [Required] TablespaceStatus State is the latest reconciliation state error string Error is the reconciliation error, if any","title":"TablespaceState"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-TablespaceStatus","text":"(Alias of string ) Appears in: TablespaceState TablespaceStatus represents the status of a tablespace in the cluster","title":"TablespaceStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Topology","text":"Appears in: ClusterStatus Topology contains the cluster topology Field Description instances map[PodName]PodTopologyLabels Instances contains the pod topology of the instances nodesUsed int32 NodesUsed represents the count of distinct nodes accommodating the instances. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally, this value should be the same as the number of instances in the Postgres HA cluster, implying shared nothing architecture on the compute side. successfullyExtracted bool SuccessfullyExtracted indicates if the topology data was extract. It is useful to enact fallback behaviors in synchronous replica election in case of failures","title":"Topology"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-VolumeSnapshotConfiguration","text":"Appears in: BackupConfiguration VolumeSnapshotConfiguration represents the configuration for the execution of snapshot backups. Field Description labels map[string]string Labels are key-value pairs that will be added to .metadata.labels snapshot resources. annotations map[string]string Annotations key-value pairs that will be added to .metadata.annotations snapshot resources. className string ClassName specifies the Snapshot Class to be used for PG_DATA PersistentVolumeClaim. It is the default class for the other types if no specific class is present walClassName string WalClassName specifies the Snapshot Class to be used for the PG_WAL PersistentVolumeClaim. tablespaceClassName map[string]string TablespaceClassName specifies the Snapshot Class to be used for the tablespaces. defaults to the PGDATA Snapshot Class, if set snapshotOwnerReference SnapshotOwnerReference SnapshotOwnerReference indicates the type of owner reference the snapshot should have online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots","title":"VolumeSnapshotConfiguration"},{"location":"cluster_conf/","text":"Instance pod configuration Projected volumes CloudNativePG supports mounting custom files inside the Postgres pods through .spec.projectedVolumeTemplate . This ability is useful for several Postgres features and extensions that require additional data files. In CloudNativePG, the .spec.projectedVolumeTemplate field is a projected volume template in Kubernetes that allows you to mount arbitrary data under the /projected folder in Postgres pods. This simple example shows how to mount an existing TLS secret (named sample-secret ) as files into Postgres pods. The values for the secret keys tls.crt and tls.key in sample-secret are mounted as files into the paths /projected/certificate/tls.crt and /projected/certificate/tls.key in the Postgres pod. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-projected-volumes spec: instances: 3 projectedVolumeTemplate: sources: - secret: name: sample-secret items: - key: tls.crt path: certificate/tls.crt - key: tls.key path: certificate/tls.key storage: size: 1Gi You can find a complete example that uses a projected volume template to mount the secret and ConfigMap in the cluster-example-projected-volume.yaml deployment manifest. Ephemeral volumes CloudNativePG relies on ephemeral volumes for part of the internal activities. Ephemeral volumes exist for the sole duration of a pod's life, without persisting across pod restarts. Volume Claim Template for Temporary Storage The operator uses by default an emptyDir volume, which can be customized by using the .spec.ephemeralVolumesSizeLimit field . This can be overridden by specifying a volume claim template in the .spec.ephemeralVolumeSource field. In the following example, a 1Gi ephemeral volume is set. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-ephemeral-volume-source spec: instances: 3 ephemeralVolumeSource: volumeClaimTemplate: spec: accessModes: [\"ReadWriteOnce\"] # example storageClassName, replace with one existing in your Kubernetes cluster storageClassName: \"scratch-storage-class\" resources: requests: storage: 1Gi Both .spec.emphemeralVolumeSource and .spec.ephemeralVolumesSizeLimit.temporaryData cannot be specified simultaneously. Volume for shared memory This volume is used as shared memory space for Postgres and as an ephemeral type but stored in memory. You can configure an upper bound on the size using the .spec.ephemeralVolumesSizeLimit.shm field in the cluster spec. Use this field only in case of PostgreSQL running with posix shared memory dynamic allocation . Environment variables You can customize some system behavior using environment variables. One example is the LDAPCONF variable, which can point to a custom LDAP configuration file. Another example is the TZ environment variable, which represents the timezone used by the PostgreSQL container. CloudNativePG allows you to set custom environment variables using the env and the envFrom stanza of the cluster specification. This example defines a PostgreSQL cluster using the Australia/Sydney timezone as the default cluster-level timezone: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 env: - name: TZ value: Australia/Sydney storage: size: 1Gi The envFrom stanza can refer to ConfigMaps or secrets to use their content as environment variables: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 envFrom: - configMapRef: name: config-map-name - secretRef: name: secret-name storage: size: 1Gi The operator doesn't allow setting the following environment variables: POD_NAME NAMESPACE Any environment variable whose name starts with PG . Any change in the env or in the envFrom section triggers a rolling update of the PostgreSQL pods. If the env or the envFrom section refers to a secret or a ConfigMap, the operator doesn't detect any changes in them and doesn't trigger a rollout. The kubelet uses the same behavior with pods, and you must trigger the pod rollout manually.","title":"Instance pod configuration"},{"location":"cluster_conf/#instance-pod-configuration","text":"","title":"Instance pod configuration"},{"location":"cluster_conf/#projected-volumes","text":"CloudNativePG supports mounting custom files inside the Postgres pods through .spec.projectedVolumeTemplate . This ability is useful for several Postgres features and extensions that require additional data files. In CloudNativePG, the .spec.projectedVolumeTemplate field is a projected volume template in Kubernetes that allows you to mount arbitrary data under the /projected folder in Postgres pods. This simple example shows how to mount an existing TLS secret (named sample-secret ) as files into Postgres pods. The values for the secret keys tls.crt and tls.key in sample-secret are mounted as files into the paths /projected/certificate/tls.crt and /projected/certificate/tls.key in the Postgres pod. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-projected-volumes spec: instances: 3 projectedVolumeTemplate: sources: - secret: name: sample-secret items: - key: tls.crt path: certificate/tls.crt - key: tls.key path: certificate/tls.key storage: size: 1Gi You can find a complete example that uses a projected volume template to mount the secret and ConfigMap in the cluster-example-projected-volume.yaml deployment manifest.","title":"Projected volumes"},{"location":"cluster_conf/#ephemeral-volumes","text":"CloudNativePG relies on ephemeral volumes for part of the internal activities. Ephemeral volumes exist for the sole duration of a pod's life, without persisting across pod restarts.","title":"Ephemeral volumes"},{"location":"cluster_conf/#volume-claim-template-for-temporary-storage","text":"The operator uses by default an emptyDir volume, which can be customized by using the .spec.ephemeralVolumesSizeLimit field . This can be overridden by specifying a volume claim template in the .spec.ephemeralVolumeSource field. In the following example, a 1Gi ephemeral volume is set. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-ephemeral-volume-source spec: instances: 3 ephemeralVolumeSource: volumeClaimTemplate: spec: accessModes: [\"ReadWriteOnce\"] # example storageClassName, replace with one existing in your Kubernetes cluster storageClassName: \"scratch-storage-class\" resources: requests: storage: 1Gi Both .spec.emphemeralVolumeSource and .spec.ephemeralVolumesSizeLimit.temporaryData cannot be specified simultaneously.","title":"Volume Claim Template for Temporary Storage"},{"location":"cluster_conf/#volume-for-shared-memory","text":"This volume is used as shared memory space for Postgres and as an ephemeral type but stored in memory. You can configure an upper bound on the size using the .spec.ephemeralVolumesSizeLimit.shm field in the cluster spec. Use this field only in case of PostgreSQL running with posix shared memory dynamic allocation .","title":"Volume for shared memory"},{"location":"cluster_conf/#environment-variables","text":"You can customize some system behavior using environment variables. One example is the LDAPCONF variable, which can point to a custom LDAP configuration file. Another example is the TZ environment variable, which represents the timezone used by the PostgreSQL container. CloudNativePG allows you to set custom environment variables using the env and the envFrom stanza of the cluster specification. This example defines a PostgreSQL cluster using the Australia/Sydney timezone as the default cluster-level timezone: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 env: - name: TZ value: Australia/Sydney storage: size: 1Gi The envFrom stanza can refer to ConfigMaps or secrets to use their content as environment variables: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 envFrom: - configMapRef: name: config-map-name - secretRef: name: secret-name storage: size: 1Gi The operator doesn't allow setting the following environment variables: POD_NAME NAMESPACE Any environment variable whose name starts with PG . Any change in the env or in the envFrom section triggers a rolling update of the PostgreSQL pods. If the env or the envFrom section refers to a secret or a ConfigMap, the operator doesn't detect any changes in them and doesn't trigger a rollout. The kubelet uses the same behavior with pods, and you must trigger the pod rollout manually.","title":"Environment variables"},{"location":"connection_pooling/","text":"Connection pooling CloudNativePG provides native support for connection pooling with PgBouncer , one of the most popular open source connection poolers for PostgreSQL, through the Pooler custom resource definition (CRD). In brief, a pooler in CloudNativePG is a deployment of PgBouncer pods that sits between your applications and a PostgreSQL service, for example, the rw service. It creates a separate, scalable, configurable, and highly available database access layer. Architecture The following diagram highlights how introducing a database access layer based on PgBouncer changes the architecture of CloudNativePG. Instead of directly connecting to the PostgreSQL primary service, applications can connect to the equivalent service for PgBouncer. This ability enables reuse of existing connections for faster performance and better resource management on the PostgreSQL side. Quick start This example helps to show how CloudNativePG implements a PgBouncer pooler: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw pgbouncer: poolMode: session parameters: max_client_conn: \"1000\" default_pool_size: \"10\" Important The pooler name can't be the same as any cluster name in the same namespace. This example creates a Pooler resource called pooler-example-rw that's strictly associated with the Postgres Cluster resource called cluster-example . It points to the primary, identified by the read/write service ( rw , therefore cluster-example-rw ). The Pooler resource must live in the same namespace as the Postgres cluster. It consists of a Kubernetes deployment of 3 pods running the latest stable image of PgBouncer , configured with the session pooling mode and accepting up to 1000 connections each. The default pool size is 10 user/database pairs toward PostgreSQL. Important The Pooler resource sets only the * fallback database in PgBouncer. This setting means that that all parameters in the connection strings passed from the client are relayed to the PostgreSQL server. For details, see \"Section [databases]\" in the PgBouncer documentation . CloudNativePG also creates a secret with the same name as the pooler containing the configuration files used with PgBouncer. API reference For details, see PgBouncerSpec in the API reference. Pooler resource lifecycle Pooler resources aren't cluster-managed resources. You create poolers manually when they're needed. You can also deploy multiple poolers per PostgreSQL cluster. What's important is that the life cycles of the Cluster and the Pooler resources are currently independent. Deleting the cluster doesn't imply the deletion of the pooler, and vice versa. Important Once you know how a pooler works, you have full freedom in terms of possible architectures. You can have clusters without poolers, clusters with a single pooler, or clusters with several poolers, that is, one per application. Important When the operator is upgraded, the pooler pods will undergo a rolling upgrade. This is necessary to ensure that the instance manager within the pooler pods is also upgraded. Security Any PgBouncer pooler is transparently integrated with CloudNativePG support for in-transit encryption by way of TLS connections, both on the client (application) and server (PostgreSQL) side of the pool. Specifically, PgBouncer reuses the certificates of the PostgreSQL server. It also uses TLS client certificate authentication to connect to the PostgreSQL server to run the auth_query for clients' password authentication (see Authentication ). Containers run as the pgbouncer system user, and access to the pgbouncer database is allowed only by way of local connections, through peer authentication. Certificates By default, a PgBouncer pooler uses the same certificates that are used by the cluster. However, if you provide those certificates, the pooler accepts secrets with the following formats: Basic Auth TLS Opaque In the Opaque case, it looks for the following specific keys that need to be used: tls.crt tls.key So you can treat this secret as a TLS secret, and start from there. Authentication Password-based authentication is the only supported method for clients of PgBouncer in CloudNativePG. Internally, the implementation relies on PgBouncer's auth_user and auth_query options. Specifically, the operator: Creates a standard user called cnpg_pooler_pgbouncer in the PostgreSQL server Creates the lookup function in the postgres database and grants execution privileges to the cnpg_pooler_pgbouncer user (PoLA) Issues a TLS certificate for this user Sets cnpg_pooler_pgbouncer as the auth_user Configures PgBouncer to use the TLS certificate to authenticate cnpg_pooler_pgbouncer against the PostgreSQL server Removes all the above when it detects that a cluster doesn't have any pooler associated to it Important If you specify your own secrets, the operator doesn't automatically integrate the pooler. To manually integrate the pooler, if you specified your own secrets, you must run the following queries from inside your cluster. First, you must create the role: CREATE ROLE cnpg_pooler_pgbouncer WITH LOGIN; Then, for each application database, grant the permission for cnpg_pooler_pgbouncer to connect to it: GRANT CONNECT ON DATABASE { database name here } TO cnpg_pooler_pgbouncer; Finally, as a superuser connect in each application database, and then create the authentication function inside each of the application databases: CREATE OR REPLACE FUNCTION public.user_search(uname TEXT) RETURNS TABLE (usename name, passwd text) LANGUAGE sql SECURITY DEFINER AS 'SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1;'; REVOKE ALL ON FUNCTION public.user_search(text) FROM public; GRANT EXECUTE ON FUNCTION public.user_search(text) TO cnpg_pooler_pgbouncer; Important Given that user_search is a SECURITY DEFINER function, you need to create it through a role with SUPERUSER privileges, such as the postgres user. Pod templates You can take advantage of pod templates specification in the template section of a Pooler resource. For details, see PoolerSpec in the API reference. Using templates, you can configure pods as you like, including fine control over affinity and anti-affinity rules for pods and nodes. By default, containers use images from ghcr.io/cloudnative-pg/pgbouncer . This example shows Pooler specifying `PodAntiAffinity``: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw template: metadata: labels: app: pooler spec: containers: [] affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: app operator: In values: - pooler topologyKey: \"kubernetes.io/hostname\" Note Explicitly set .spec.template.spec.containers to [] when not modified, as it's a required field for a PodSpec . If .spec.template.spec.containers isn't set, the Kubernetes api-server returns the following error when trying to apply the manifest: error validating \"pooler.yaml\": error validating data: ValidationError(Pooler.spec.template.spec): missing required field \"containers\" This example sets resources and changes the used image: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw template: metadata: labels: app: pooler spec: containers: - name: pgbouncer image: my-pgbouncer:latest resources: requests: cpu: \"0.1\" memory: 100Mi limits: cpu: \"0.5\" memory: 500Mi Service Template Sometimes, your pooler will require some different labels, annotations, or even change the type of the service, you can achieve that by using the serviceTemplate field: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw serviceTemplate: metadata: labels: app: pooler spec: type: LoadBalancer pgbouncer: poolMode: session parameters: max_client_conn: \"1000\" default_pool_size: \"10\" The operator by default adds a ServicePort with the following data: ports: - name: pgbouncer port: 5432 protocol: TCP targetPort: pgbouncer Warning Specifying a ServicePort with the name pgbouncer or the port 5432 will prevent the default ServicePort from being added. This because ServicePort entries with the same name or port are not allowed on Kubernetes and result in errors. High availability (HA) Because of Kubernetes' deployments, you can configure your pooler to run on a single instance or over multiple pods. The exposed service makes sure that your clients are randomly distributed over the available pods running PgBouncer, which then manages and reuses connections toward the underlying server (if using the rw service) or servers (if using the ro service with multiple replicas). Warning If your infrastructure spans multiple availability zones with high latency across them, be aware of network hops. Consider, for example, the case of your application running in zone 2, connecting to PgBouncer running in zone 3, and pointing to the PostgreSQL primary in zone 1. PgBouncer configuration options The operator manages most of the configuration options for PgBouncer , allowing you to modify only a subset of them. Warning You are responsible for correctly setting the value of each option, as the operator doesn't validate them. These are the PgBouncer options you can customize, with links to the PgBouncer documentation for each parameter. Unless stated otherwise, the default values are the ones directly set by PgBouncer. application_name_add_host autodb_idle_timeout cancel_wait_timeout client_idle_timeout client_login_timeout default_pool_size disable_pqexec dns_max_ttl dns_nxdomain_ttl idle_transaction_timeout ignore_startup_parameters : to be appended to extra_float_digits,options - required by CloudNativePG listen_backlog log_connections log_disconnections log_pooler_errors log_stats : by default disabled ( 0 ), given that statistics are already collected by the Prometheus export as described in the \"Monitoring\" section below max_client_conn max_db_connections max_packet_size max_prepared_statements max_user_connections min_pool_size pkt_buf query_timeout query_wait_timeout reserve_pool_size reserve_pool_timeout sbuf_loopcnt server_check_delay server_check_query server_connect_timeout server_fast_close server_idle_timeout server_lifetime server_login_retry server_reset_query server_reset_query_always server_round_robin server_tls_ciphers server_tls_protocols stats_period suspend_timeout tcp_defer_accept tcp_keepalive tcp_keepcnt tcp_keepidle tcp_keepintvl tcp_user_timeout tcp_socket_buffer track_extra_parameters verbose Customizations of the PgBouncer configuration are written declaratively in the .spec.pgbouncer.parameters map. The operator reacts to the changes in the pooler specification, and every PgBouncer instance reloads the updated configuration without disrupting the service. Warning Every PgBouncer pod has the same configuration, aligned with the parameters in the specification. A mistake in these parameters might disrupt the operability of the whole pooler. The operator doesn't validate the value of any option. Monitoring The PgBouncer implementation of the Pooler comes with a default Prometheus exporter. It makes available several metrics having the cnpg_pgbouncer_ prefix by running: SHOW LISTS (prefix: cnpg_pgbouncer_lists ) SHOW POOLS (prefix: cnpg_pgbouncer_pools ) SHOW STATS (prefix: cnpg_pgbouncer_stats ) Like the CloudNativePG instance, the exporter runs on port 9127 of each pod running PgBouncer and also provides metrics related to the Go runtime (with the prefix go_* ). Info You can inspect the exported metrics on a pod running PgBouncer. For instructions, see How to inspect the exported metrics . Make sure that you use the correct IP and the 9127 port. This example shows the output for cnpg_pgbouncer metrics: # HELP cnpg_pgbouncer_collection_duration_seconds Collection time duration in seconds # TYPE cnpg_pgbouncer_collection_duration_seconds gauge cnpg_pgbouncer_collection_duration_seconds{collector=\"Collect.up\"} 0.002338805 # HELP cnpg_pgbouncer_collection_errors_total Total errors occurred accessing PostgreSQL for metrics. # TYPE cnpg_pgbouncer_collection_errors_total counter cnpg_pgbouncer_collection_errors_total{collector=\"sql: Scan error on column index 16, name \\\"load_balance_hosts\\\": converting NULL to int is unsupported\"} 5 # HELP cnpg_pgbouncer_collections_total Total number of times PostgreSQL was accessed for metrics. # TYPE cnpg_pgbouncer_collections_total counter cnpg_pgbouncer_collections_total 5 # HELP cnpg_pgbouncer_last_collection_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_pgbouncer_last_collection_error gauge cnpg_pgbouncer_last_collection_error 0 # HELP cnpg_pgbouncer_lists_databases Count of databases. # TYPE cnpg_pgbouncer_lists_databases gauge cnpg_pgbouncer_lists_databases 1 # HELP cnpg_pgbouncer_lists_dns_names Count of DNS names in the cache. # TYPE cnpg_pgbouncer_lists_dns_names gauge cnpg_pgbouncer_lists_dns_names 0 # HELP cnpg_pgbouncer_lists_dns_pending Not used. # TYPE cnpg_pgbouncer_lists_dns_pending gauge cnpg_pgbouncer_lists_dns_pending 0 # HELP cnpg_pgbouncer_lists_dns_queries Count of in-flight DNS queries. # TYPE cnpg_pgbouncer_lists_dns_queries gauge cnpg_pgbouncer_lists_dns_queries 0 # HELP cnpg_pgbouncer_lists_dns_zones Count of DNS zones in the cache. # TYPE cnpg_pgbouncer_lists_dns_zones gauge cnpg_pgbouncer_lists_dns_zones 0 # HELP cnpg_pgbouncer_lists_free_clients Count of free clients. # TYPE cnpg_pgbouncer_lists_free_clients gauge cnpg_pgbouncer_lists_free_clients 49 # HELP cnpg_pgbouncer_lists_free_servers Count of free servers. # TYPE cnpg_pgbouncer_lists_free_servers gauge cnpg_pgbouncer_lists_free_servers 0 # HELP cnpg_pgbouncer_lists_login_clients Count of clients in login state. # TYPE cnpg_pgbouncer_lists_login_clients gauge cnpg_pgbouncer_lists_login_clients 0 # HELP cnpg_pgbouncer_lists_pools Count of pools. # TYPE cnpg_pgbouncer_lists_pools gauge cnpg_pgbouncer_lists_pools 1 # HELP cnpg_pgbouncer_lists_used_clients Count of used clients. # TYPE cnpg_pgbouncer_lists_used_clients gauge cnpg_pgbouncer_lists_used_clients 1 # HELP cnpg_pgbouncer_lists_used_servers Count of used servers. # TYPE cnpg_pgbouncer_lists_used_servers gauge cnpg_pgbouncer_lists_used_servers 0 # HELP cnpg_pgbouncer_lists_users Count of users. # TYPE cnpg_pgbouncer_lists_users gauge cnpg_pgbouncer_lists_users 2 # HELP cnpg_pgbouncer_pools_cl_active Client connections that are linked to server connection and can process queries. # TYPE cnpg_pgbouncer_pools_cl_active gauge cnpg_pgbouncer_pools_cl_active{database=\"pgbouncer\",user=\"pgbouncer\"} 1 # HELP cnpg_pgbouncer_pools_cl_active_cancel_req Client connections that have forwarded query cancellations to the server and are waiting for the server response. # TYPE cnpg_pgbouncer_pools_cl_active_cancel_req gauge cnpg_pgbouncer_pools_cl_active_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_cancel_req Client connections that have not forwarded query cancellations to the server yet. # TYPE cnpg_pgbouncer_pools_cl_cancel_req gauge cnpg_pgbouncer_pools_cl_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_waiting Client connections that have sent queries but have not yet got a server connection. # TYPE cnpg_pgbouncer_pools_cl_waiting gauge cnpg_pgbouncer_pools_cl_waiting{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_waiting_cancel_req Client connections that have not forwarded query cancellations to the server yet. # TYPE cnpg_pgbouncer_pools_cl_waiting_cancel_req gauge cnpg_pgbouncer_pools_cl_waiting_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_load_balance_hosts Number of hosts not load balancing between hosts # TYPE cnpg_pgbouncer_pools_load_balance_hosts gauge cnpg_pgbouncer_pools_load_balance_hosts{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_maxwait How long the first (oldest) client in the queue has waited, in seconds. If this starts increasing, then the current pool of servers does not handle requests quickly enough. The reason may be either an overloaded server or just too small of a pool_size setting. # TYPE cnpg_pgbouncer_pools_maxwait gauge cnpg_pgbouncer_pools_maxwait{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_maxwait_us Microsecond part of the maximum waiting time. # TYPE cnpg_pgbouncer_pools_maxwait_us gauge cnpg_pgbouncer_pools_maxwait_us{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_pool_mode The pooling mode in use. 1 for session, 2 for transaction, 3 for statement, -1 if unknown # TYPE cnpg_pgbouncer_pools_pool_mode gauge cnpg_pgbouncer_pools_pool_mode{database=\"pgbouncer\",user=\"pgbouncer\"} 3 # HELP cnpg_pgbouncer_pools_sv_active Server connections that are linked to a client. # TYPE cnpg_pgbouncer_pools_sv_active gauge cnpg_pgbouncer_pools_sv_active{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_active_cancel Server connections that are currently forwarding a cancel request # TYPE cnpg_pgbouncer_pools_sv_active_cancel gauge cnpg_pgbouncer_pools_sv_active_cancel{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_idle Server connections that are unused and immediately usable for client queries. # TYPE cnpg_pgbouncer_pools_sv_idle gauge cnpg_pgbouncer_pools_sv_idle{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_login Server connections currently in the process of logging in. # TYPE cnpg_pgbouncer_pools_sv_login gauge cnpg_pgbouncer_pools_sv_login{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_tested Server connections that are currently running either server_reset_query or server_check_query. # TYPE cnpg_pgbouncer_pools_sv_tested gauge cnpg_pgbouncer_pools_sv_tested{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_used Server connections that have been idle for more than server_check_delay, so they need server_check_query to run on them before they can be used again. # TYPE cnpg_pgbouncer_pools_sv_used gauge cnpg_pgbouncer_pools_sv_used{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_wait_cancels Servers that normally could become idle, but are waiting to do so until all in-flight cancel requests have completed that were sent to cancel a query on this server. # TYPE cnpg_pgbouncer_pools_sv_wait_cancels gauge cnpg_pgbouncer_pools_sv_wait_cancels{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_bind_count Average number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer. # TYPE cnpg_pgbouncer_stats_avg_bind_count gauge cnpg_pgbouncer_stats_avg_bind_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_client_parse_count Average number of prepared statements created by clients. # TYPE cnpg_pgbouncer_stats_avg_client_parse_count gauge cnpg_pgbouncer_stats_avg_client_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_query_count Average queries per second in last stat period. # TYPE cnpg_pgbouncer_stats_avg_query_count gauge cnpg_pgbouncer_stats_avg_query_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_query_time Average query duration, in microseconds. # TYPE cnpg_pgbouncer_stats_avg_query_time gauge cnpg_pgbouncer_stats_avg_query_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_recv Average received (from clients) bytes per second. # TYPE cnpg_pgbouncer_stats_avg_recv gauge cnpg_pgbouncer_stats_avg_recv{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_sent Average sent (to clients) bytes per second. # TYPE cnpg_pgbouncer_stats_avg_sent gauge cnpg_pgbouncer_stats_avg_sent{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_server_parse_count Average number of prepared statements created by pgbouncer on a server. # TYPE cnpg_pgbouncer_stats_avg_server_parse_count gauge cnpg_pgbouncer_stats_avg_server_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_wait_time Time spent by clients waiting for a server, in microseconds (average per second). # TYPE cnpg_pgbouncer_stats_avg_wait_time gauge cnpg_pgbouncer_stats_avg_wait_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_xact_count Average transactions per second in last stat period. # TYPE cnpg_pgbouncer_stats_avg_xact_count gauge cnpg_pgbouncer_stats_avg_xact_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_xact_time Average transaction duration, in microseconds. # TYPE cnpg_pgbouncer_stats_avg_xact_time gauge cnpg_pgbouncer_stats_avg_xact_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_bind_count Total number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer # TYPE cnpg_pgbouncer_stats_total_bind_count gauge cnpg_pgbouncer_stats_total_bind_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_client_parse_count Total number of prepared statements created by clients. # TYPE cnpg_pgbouncer_stats_total_client_parse_count gauge cnpg_pgbouncer_stats_total_client_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_query_count Total number of SQL queries pooled by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_query_count gauge cnpg_pgbouncer_stats_total_query_count{database=\"pgbouncer\"} 15 # HELP cnpg_pgbouncer_stats_total_query_time Total number of microseconds spent by pgbouncer when actively connected to PostgreSQL, executing queries. # TYPE cnpg_pgbouncer_stats_total_query_time gauge cnpg_pgbouncer_stats_total_query_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_received Total volume in bytes of network traffic received by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_received gauge cnpg_pgbouncer_stats_total_received{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_sent Total volume in bytes of network traffic sent by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_sent gauge cnpg_pgbouncer_stats_total_sent{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_server_parse_count Total number of prepared statements created by pgbouncer on a server. # TYPE cnpg_pgbouncer_stats_total_server_parse_count gauge cnpg_pgbouncer_stats_total_server_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_wait_time Time spent by clients waiting for a server, in microseconds. # TYPE cnpg_pgbouncer_stats_total_wait_time gauge cnpg_pgbouncer_stats_total_wait_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_xact_count Total number of SQL transactions pooled by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_xact_count gauge cnpg_pgbouncer_stats_total_xact_count{database=\"pgbouncer\"} 15 # HELP cnpg_pgbouncer_stats_total_xact_time Total number of microseconds spent by pgbouncer when connected to PostgreSQL in a transaction, either idle in transaction or executing queries. # TYPE cnpg_pgbouncer_stats_total_xact_time gauge cnpg_pgbouncer_stats_total_xact_time{database=\"pgbouncer\"} 0 Info For a better understanding of the metrics please refer to the PgBouncer documentation. As for clusters, a specific pooler can be monitored using the Prometheus operator's resource PodMonitor . A PodMonitor correctly pointing to a pooler can be created by the operator by setting .spec.monitoring.enablePodMonitor to true in the Pooler resource. The default is false . Important Any change to PodMonitor created automatically is overridden by the operator at the next reconciliation cycle. If you need to customize it, you can do so as shown in the following example. To deploy a PodMonitor for a specific pooler manually, you can define it as follows and change it as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: <POOLER_NAME> spec: selector: matchLabels: cnpg.io/poolerName: <POOLER_NAME> podMetricsEndpoints: - port: metrics Logging Logs are directly sent to standard output, in JSON format, like in the following example: { \"level\": \"info\", \"ts\": SECONDS.MICROSECONDS, \"msg\": \"record\", \"pipe\": \"stderr\", \"record\": { \"timestamp\": \"YYYY-MM-DD HH:MM:SS.MS UTC\", \"pid\": \"<PID>\", \"level\": \"LOG\", \"msg\": \"kernel file descriptor limit: 1048576 (hard: 1048576); max_client_conn: 100, max expected fd use: 112\" } } Pausing connections The Pooler specification allows you to take advantage of PgBouncer's PAUSE and RESUME commands, using only declarative configuration. You can ado this using the paused option, which by default is set to false . When set to true , the operator internally invokes the PAUSE command in PgBouncer, which: Closes all active connections toward the PostgreSQL server, after waiting for the queries to complete Pauses any new connection coming from the client When the paused option is reset to false , the operator invokes the RESUME command in PgBouncer, reopening the taps toward the PostgreSQL service defined in the Pooler resource. PAUSE For more information, see PAUSE in the PgBouncer documentation . Important In future versions, the switchover operation will be fully integrated with the PgBouncer pooler and take advantage of the PAUSE / RESUME features to reduce the perceived downtime by client applications. Currently, you can achieve the same results by setting the paused attribute to true , issuing the switchover command through the cnpg plugin , and then restoring the paused attribute to false . Limitations Single PostgreSQL cluster The current implementation of the pooler is designed to work as part of a specific CloudNativePG cluster (a service). It isn't currently possible to create a pooler that spans multiple clusters. Controlled configurability CloudNativePG transparently manages several configuration options that are used for the PgBouncer layer to communicate with PostgreSQL. Such options aren't configurable from outside and include TLS certificates, authentication settings, the databases section, and the users section. Also, considering the specific use case for the single PostgreSQL cluster, the adopted criteria is to explicitly list the options that can be configured by users. Note The adopted solution likely addresses the majority of use cases. It leaves room for the future implementation of a separate operator for PgBouncer to complete the gamma with more advanced and customized scenarios.","title":"Connection pooling"},{"location":"connection_pooling/#connection-pooling","text":"CloudNativePG provides native support for connection pooling with PgBouncer , one of the most popular open source connection poolers for PostgreSQL, through the Pooler custom resource definition (CRD). In brief, a pooler in CloudNativePG is a deployment of PgBouncer pods that sits between your applications and a PostgreSQL service, for example, the rw service. It creates a separate, scalable, configurable, and highly available database access layer.","title":"Connection pooling"},{"location":"connection_pooling/#architecture","text":"The following diagram highlights how introducing a database access layer based on PgBouncer changes the architecture of CloudNativePG. Instead of directly connecting to the PostgreSQL primary service, applications can connect to the equivalent service for PgBouncer. This ability enables reuse of existing connections for faster performance and better resource management on the PostgreSQL side.","title":"Architecture"},{"location":"connection_pooling/#quick-start","text":"This example helps to show how CloudNativePG implements a PgBouncer pooler: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw pgbouncer: poolMode: session parameters: max_client_conn: \"1000\" default_pool_size: \"10\" Important The pooler name can't be the same as any cluster name in the same namespace. This example creates a Pooler resource called pooler-example-rw that's strictly associated with the Postgres Cluster resource called cluster-example . It points to the primary, identified by the read/write service ( rw , therefore cluster-example-rw ). The Pooler resource must live in the same namespace as the Postgres cluster. It consists of a Kubernetes deployment of 3 pods running the latest stable image of PgBouncer , configured with the session pooling mode and accepting up to 1000 connections each. The default pool size is 10 user/database pairs toward PostgreSQL. Important The Pooler resource sets only the * fallback database in PgBouncer. This setting means that that all parameters in the connection strings passed from the client are relayed to the PostgreSQL server. For details, see \"Section [databases]\" in the PgBouncer documentation . CloudNativePG also creates a secret with the same name as the pooler containing the configuration files used with PgBouncer. API reference For details, see PgBouncerSpec in the API reference.","title":"Quick start"},{"location":"connection_pooling/#pooler-resource-lifecycle","text":"Pooler resources aren't cluster-managed resources. You create poolers manually when they're needed. You can also deploy multiple poolers per PostgreSQL cluster. What's important is that the life cycles of the Cluster and the Pooler resources are currently independent. Deleting the cluster doesn't imply the deletion of the pooler, and vice versa. Important Once you know how a pooler works, you have full freedom in terms of possible architectures. You can have clusters without poolers, clusters with a single pooler, or clusters with several poolers, that is, one per application. Important When the operator is upgraded, the pooler pods will undergo a rolling upgrade. This is necessary to ensure that the instance manager within the pooler pods is also upgraded.","title":"Pooler resource lifecycle"},{"location":"connection_pooling/#security","text":"Any PgBouncer pooler is transparently integrated with CloudNativePG support for in-transit encryption by way of TLS connections, both on the client (application) and server (PostgreSQL) side of the pool. Specifically, PgBouncer reuses the certificates of the PostgreSQL server. It also uses TLS client certificate authentication to connect to the PostgreSQL server to run the auth_query for clients' password authentication (see Authentication ). Containers run as the pgbouncer system user, and access to the pgbouncer database is allowed only by way of local connections, through peer authentication.","title":"Security"},{"location":"connection_pooling/#certificates","text":"By default, a PgBouncer pooler uses the same certificates that are used by the cluster. However, if you provide those certificates, the pooler accepts secrets with the following formats: Basic Auth TLS Opaque In the Opaque case, it looks for the following specific keys that need to be used: tls.crt tls.key So you can treat this secret as a TLS secret, and start from there.","title":"Certificates"},{"location":"connection_pooling/#authentication","text":"Password-based authentication is the only supported method for clients of PgBouncer in CloudNativePG. Internally, the implementation relies on PgBouncer's auth_user and auth_query options. Specifically, the operator: Creates a standard user called cnpg_pooler_pgbouncer in the PostgreSQL server Creates the lookup function in the postgres database and grants execution privileges to the cnpg_pooler_pgbouncer user (PoLA) Issues a TLS certificate for this user Sets cnpg_pooler_pgbouncer as the auth_user Configures PgBouncer to use the TLS certificate to authenticate cnpg_pooler_pgbouncer against the PostgreSQL server Removes all the above when it detects that a cluster doesn't have any pooler associated to it Important If you specify your own secrets, the operator doesn't automatically integrate the pooler. To manually integrate the pooler, if you specified your own secrets, you must run the following queries from inside your cluster. First, you must create the role: CREATE ROLE cnpg_pooler_pgbouncer WITH LOGIN; Then, for each application database, grant the permission for cnpg_pooler_pgbouncer to connect to it: GRANT CONNECT ON DATABASE { database name here } TO cnpg_pooler_pgbouncer; Finally, as a superuser connect in each application database, and then create the authentication function inside each of the application databases: CREATE OR REPLACE FUNCTION public.user_search(uname TEXT) RETURNS TABLE (usename name, passwd text) LANGUAGE sql SECURITY DEFINER AS 'SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1;'; REVOKE ALL ON FUNCTION public.user_search(text) FROM public; GRANT EXECUTE ON FUNCTION public.user_search(text) TO cnpg_pooler_pgbouncer; Important Given that user_search is a SECURITY DEFINER function, you need to create it through a role with SUPERUSER privileges, such as the postgres user.","title":"Authentication"},{"location":"connection_pooling/#pod-templates","text":"You can take advantage of pod templates specification in the template section of a Pooler resource. For details, see PoolerSpec in the API reference. Using templates, you can configure pods as you like, including fine control over affinity and anti-affinity rules for pods and nodes. By default, containers use images from ghcr.io/cloudnative-pg/pgbouncer . This example shows Pooler specifying `PodAntiAffinity``: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw template: metadata: labels: app: pooler spec: containers: [] affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: app operator: In values: - pooler topologyKey: \"kubernetes.io/hostname\" Note Explicitly set .spec.template.spec.containers to [] when not modified, as it's a required field for a PodSpec . If .spec.template.spec.containers isn't set, the Kubernetes api-server returns the following error when trying to apply the manifest: error validating \"pooler.yaml\": error validating data: ValidationError(Pooler.spec.template.spec): missing required field \"containers\" This example sets resources and changes the used image: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw template: metadata: labels: app: pooler spec: containers: - name: pgbouncer image: my-pgbouncer:latest resources: requests: cpu: \"0.1\" memory: 100Mi limits: cpu: \"0.5\" memory: 500Mi","title":"Pod templates"},{"location":"connection_pooling/#service-template","text":"Sometimes, your pooler will require some different labels, annotations, or even change the type of the service, you can achieve that by using the serviceTemplate field: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw serviceTemplate: metadata: labels: app: pooler spec: type: LoadBalancer pgbouncer: poolMode: session parameters: max_client_conn: \"1000\" default_pool_size: \"10\" The operator by default adds a ServicePort with the following data: ports: - name: pgbouncer port: 5432 protocol: TCP targetPort: pgbouncer Warning Specifying a ServicePort with the name pgbouncer or the port 5432 will prevent the default ServicePort from being added. This because ServicePort entries with the same name or port are not allowed on Kubernetes and result in errors.","title":"Service Template"},{"location":"connection_pooling/#high-availability-ha","text":"Because of Kubernetes' deployments, you can configure your pooler to run on a single instance or over multiple pods. The exposed service makes sure that your clients are randomly distributed over the available pods running PgBouncer, which then manages and reuses connections toward the underlying server (if using the rw service) or servers (if using the ro service with multiple replicas). Warning If your infrastructure spans multiple availability zones with high latency across them, be aware of network hops. Consider, for example, the case of your application running in zone 2, connecting to PgBouncer running in zone 3, and pointing to the PostgreSQL primary in zone 1.","title":"High availability (HA)"},{"location":"connection_pooling/#pgbouncer-configuration-options","text":"The operator manages most of the configuration options for PgBouncer , allowing you to modify only a subset of them. Warning You are responsible for correctly setting the value of each option, as the operator doesn't validate them. These are the PgBouncer options you can customize, with links to the PgBouncer documentation for each parameter. Unless stated otherwise, the default values are the ones directly set by PgBouncer. application_name_add_host autodb_idle_timeout cancel_wait_timeout client_idle_timeout client_login_timeout default_pool_size disable_pqexec dns_max_ttl dns_nxdomain_ttl idle_transaction_timeout ignore_startup_parameters : to be appended to extra_float_digits,options - required by CloudNativePG listen_backlog log_connections log_disconnections log_pooler_errors log_stats : by default disabled ( 0 ), given that statistics are already collected by the Prometheus export as described in the \"Monitoring\" section below max_client_conn max_db_connections max_packet_size max_prepared_statements max_user_connections min_pool_size pkt_buf query_timeout query_wait_timeout reserve_pool_size reserve_pool_timeout sbuf_loopcnt server_check_delay server_check_query server_connect_timeout server_fast_close server_idle_timeout server_lifetime server_login_retry server_reset_query server_reset_query_always server_round_robin server_tls_ciphers server_tls_protocols stats_period suspend_timeout tcp_defer_accept tcp_keepalive tcp_keepcnt tcp_keepidle tcp_keepintvl tcp_user_timeout tcp_socket_buffer track_extra_parameters verbose Customizations of the PgBouncer configuration are written declaratively in the .spec.pgbouncer.parameters map. The operator reacts to the changes in the pooler specification, and every PgBouncer instance reloads the updated configuration without disrupting the service. Warning Every PgBouncer pod has the same configuration, aligned with the parameters in the specification. A mistake in these parameters might disrupt the operability of the whole pooler. The operator doesn't validate the value of any option.","title":"PgBouncer configuration options"},{"location":"connection_pooling/#monitoring","text":"The PgBouncer implementation of the Pooler comes with a default Prometheus exporter. It makes available several metrics having the cnpg_pgbouncer_ prefix by running: SHOW LISTS (prefix: cnpg_pgbouncer_lists ) SHOW POOLS (prefix: cnpg_pgbouncer_pools ) SHOW STATS (prefix: cnpg_pgbouncer_stats ) Like the CloudNativePG instance, the exporter runs on port 9127 of each pod running PgBouncer and also provides metrics related to the Go runtime (with the prefix go_* ). Info You can inspect the exported metrics on a pod running PgBouncer. For instructions, see How to inspect the exported metrics . Make sure that you use the correct IP and the 9127 port. This example shows the output for cnpg_pgbouncer metrics: # HELP cnpg_pgbouncer_collection_duration_seconds Collection time duration in seconds # TYPE cnpg_pgbouncer_collection_duration_seconds gauge cnpg_pgbouncer_collection_duration_seconds{collector=\"Collect.up\"} 0.002338805 # HELP cnpg_pgbouncer_collection_errors_total Total errors occurred accessing PostgreSQL for metrics. # TYPE cnpg_pgbouncer_collection_errors_total counter cnpg_pgbouncer_collection_errors_total{collector=\"sql: Scan error on column index 16, name \\\"load_balance_hosts\\\": converting NULL to int is unsupported\"} 5 # HELP cnpg_pgbouncer_collections_total Total number of times PostgreSQL was accessed for metrics. # TYPE cnpg_pgbouncer_collections_total counter cnpg_pgbouncer_collections_total 5 # HELP cnpg_pgbouncer_last_collection_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_pgbouncer_last_collection_error gauge cnpg_pgbouncer_last_collection_error 0 # HELP cnpg_pgbouncer_lists_databases Count of databases. # TYPE cnpg_pgbouncer_lists_databases gauge cnpg_pgbouncer_lists_databases 1 # HELP cnpg_pgbouncer_lists_dns_names Count of DNS names in the cache. # TYPE cnpg_pgbouncer_lists_dns_names gauge cnpg_pgbouncer_lists_dns_names 0 # HELP cnpg_pgbouncer_lists_dns_pending Not used. # TYPE cnpg_pgbouncer_lists_dns_pending gauge cnpg_pgbouncer_lists_dns_pending 0 # HELP cnpg_pgbouncer_lists_dns_queries Count of in-flight DNS queries. # TYPE cnpg_pgbouncer_lists_dns_queries gauge cnpg_pgbouncer_lists_dns_queries 0 # HELP cnpg_pgbouncer_lists_dns_zones Count of DNS zones in the cache. # TYPE cnpg_pgbouncer_lists_dns_zones gauge cnpg_pgbouncer_lists_dns_zones 0 # HELP cnpg_pgbouncer_lists_free_clients Count of free clients. # TYPE cnpg_pgbouncer_lists_free_clients gauge cnpg_pgbouncer_lists_free_clients 49 # HELP cnpg_pgbouncer_lists_free_servers Count of free servers. # TYPE cnpg_pgbouncer_lists_free_servers gauge cnpg_pgbouncer_lists_free_servers 0 # HELP cnpg_pgbouncer_lists_login_clients Count of clients in login state. # TYPE cnpg_pgbouncer_lists_login_clients gauge cnpg_pgbouncer_lists_login_clients 0 # HELP cnpg_pgbouncer_lists_pools Count of pools. # TYPE cnpg_pgbouncer_lists_pools gauge cnpg_pgbouncer_lists_pools 1 # HELP cnpg_pgbouncer_lists_used_clients Count of used clients. # TYPE cnpg_pgbouncer_lists_used_clients gauge cnpg_pgbouncer_lists_used_clients 1 # HELP cnpg_pgbouncer_lists_used_servers Count of used servers. # TYPE cnpg_pgbouncer_lists_used_servers gauge cnpg_pgbouncer_lists_used_servers 0 # HELP cnpg_pgbouncer_lists_users Count of users. # TYPE cnpg_pgbouncer_lists_users gauge cnpg_pgbouncer_lists_users 2 # HELP cnpg_pgbouncer_pools_cl_active Client connections that are linked to server connection and can process queries. # TYPE cnpg_pgbouncer_pools_cl_active gauge cnpg_pgbouncer_pools_cl_active{database=\"pgbouncer\",user=\"pgbouncer\"} 1 # HELP cnpg_pgbouncer_pools_cl_active_cancel_req Client connections that have forwarded query cancellations to the server and are waiting for the server response. # TYPE cnpg_pgbouncer_pools_cl_active_cancel_req gauge cnpg_pgbouncer_pools_cl_active_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_cancel_req Client connections that have not forwarded query cancellations to the server yet. # TYPE cnpg_pgbouncer_pools_cl_cancel_req gauge cnpg_pgbouncer_pools_cl_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_waiting Client connections that have sent queries but have not yet got a server connection. # TYPE cnpg_pgbouncer_pools_cl_waiting gauge cnpg_pgbouncer_pools_cl_waiting{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_waiting_cancel_req Client connections that have not forwarded query cancellations to the server yet. # TYPE cnpg_pgbouncer_pools_cl_waiting_cancel_req gauge cnpg_pgbouncer_pools_cl_waiting_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_load_balance_hosts Number of hosts not load balancing between hosts # TYPE cnpg_pgbouncer_pools_load_balance_hosts gauge cnpg_pgbouncer_pools_load_balance_hosts{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_maxwait How long the first (oldest) client in the queue has waited, in seconds. If this starts increasing, then the current pool of servers does not handle requests quickly enough. The reason may be either an overloaded server or just too small of a pool_size setting. # TYPE cnpg_pgbouncer_pools_maxwait gauge cnpg_pgbouncer_pools_maxwait{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_maxwait_us Microsecond part of the maximum waiting time. # TYPE cnpg_pgbouncer_pools_maxwait_us gauge cnpg_pgbouncer_pools_maxwait_us{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_pool_mode The pooling mode in use. 1 for session, 2 for transaction, 3 for statement, -1 if unknown # TYPE cnpg_pgbouncer_pools_pool_mode gauge cnpg_pgbouncer_pools_pool_mode{database=\"pgbouncer\",user=\"pgbouncer\"} 3 # HELP cnpg_pgbouncer_pools_sv_active Server connections that are linked to a client. # TYPE cnpg_pgbouncer_pools_sv_active gauge cnpg_pgbouncer_pools_sv_active{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_active_cancel Server connections that are currently forwarding a cancel request # TYPE cnpg_pgbouncer_pools_sv_active_cancel gauge cnpg_pgbouncer_pools_sv_active_cancel{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_idle Server connections that are unused and immediately usable for client queries. # TYPE cnpg_pgbouncer_pools_sv_idle gauge cnpg_pgbouncer_pools_sv_idle{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_login Server connections currently in the process of logging in. # TYPE cnpg_pgbouncer_pools_sv_login gauge cnpg_pgbouncer_pools_sv_login{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_tested Server connections that are currently running either server_reset_query or server_check_query. # TYPE cnpg_pgbouncer_pools_sv_tested gauge cnpg_pgbouncer_pools_sv_tested{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_used Server connections that have been idle for more than server_check_delay, so they need server_check_query to run on them before they can be used again. # TYPE cnpg_pgbouncer_pools_sv_used gauge cnpg_pgbouncer_pools_sv_used{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_wait_cancels Servers that normally could become idle, but are waiting to do so until all in-flight cancel requests have completed that were sent to cancel a query on this server. # TYPE cnpg_pgbouncer_pools_sv_wait_cancels gauge cnpg_pgbouncer_pools_sv_wait_cancels{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_bind_count Average number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer. # TYPE cnpg_pgbouncer_stats_avg_bind_count gauge cnpg_pgbouncer_stats_avg_bind_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_client_parse_count Average number of prepared statements created by clients. # TYPE cnpg_pgbouncer_stats_avg_client_parse_count gauge cnpg_pgbouncer_stats_avg_client_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_query_count Average queries per second in last stat period. # TYPE cnpg_pgbouncer_stats_avg_query_count gauge cnpg_pgbouncer_stats_avg_query_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_query_time Average query duration, in microseconds. # TYPE cnpg_pgbouncer_stats_avg_query_time gauge cnpg_pgbouncer_stats_avg_query_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_recv Average received (from clients) bytes per second. # TYPE cnpg_pgbouncer_stats_avg_recv gauge cnpg_pgbouncer_stats_avg_recv{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_sent Average sent (to clients) bytes per second. # TYPE cnpg_pgbouncer_stats_avg_sent gauge cnpg_pgbouncer_stats_avg_sent{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_server_parse_count Average number of prepared statements created by pgbouncer on a server. # TYPE cnpg_pgbouncer_stats_avg_server_parse_count gauge cnpg_pgbouncer_stats_avg_server_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_wait_time Time spent by clients waiting for a server, in microseconds (average per second). # TYPE cnpg_pgbouncer_stats_avg_wait_time gauge cnpg_pgbouncer_stats_avg_wait_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_xact_count Average transactions per second in last stat period. # TYPE cnpg_pgbouncer_stats_avg_xact_count gauge cnpg_pgbouncer_stats_avg_xact_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_xact_time Average transaction duration, in microseconds. # TYPE cnpg_pgbouncer_stats_avg_xact_time gauge cnpg_pgbouncer_stats_avg_xact_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_bind_count Total number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer # TYPE cnpg_pgbouncer_stats_total_bind_count gauge cnpg_pgbouncer_stats_total_bind_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_client_parse_count Total number of prepared statements created by clients. # TYPE cnpg_pgbouncer_stats_total_client_parse_count gauge cnpg_pgbouncer_stats_total_client_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_query_count Total number of SQL queries pooled by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_query_count gauge cnpg_pgbouncer_stats_total_query_count{database=\"pgbouncer\"} 15 # HELP cnpg_pgbouncer_stats_total_query_time Total number of microseconds spent by pgbouncer when actively connected to PostgreSQL, executing queries. # TYPE cnpg_pgbouncer_stats_total_query_time gauge cnpg_pgbouncer_stats_total_query_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_received Total volume in bytes of network traffic received by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_received gauge cnpg_pgbouncer_stats_total_received{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_sent Total volume in bytes of network traffic sent by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_sent gauge cnpg_pgbouncer_stats_total_sent{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_server_parse_count Total number of prepared statements created by pgbouncer on a server. # TYPE cnpg_pgbouncer_stats_total_server_parse_count gauge cnpg_pgbouncer_stats_total_server_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_wait_time Time spent by clients waiting for a server, in microseconds. # TYPE cnpg_pgbouncer_stats_total_wait_time gauge cnpg_pgbouncer_stats_total_wait_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_xact_count Total number of SQL transactions pooled by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_xact_count gauge cnpg_pgbouncer_stats_total_xact_count{database=\"pgbouncer\"} 15 # HELP cnpg_pgbouncer_stats_total_xact_time Total number of microseconds spent by pgbouncer when connected to PostgreSQL in a transaction, either idle in transaction or executing queries. # TYPE cnpg_pgbouncer_stats_total_xact_time gauge cnpg_pgbouncer_stats_total_xact_time{database=\"pgbouncer\"} 0 Info For a better understanding of the metrics please refer to the PgBouncer documentation. As for clusters, a specific pooler can be monitored using the Prometheus operator's resource PodMonitor . A PodMonitor correctly pointing to a pooler can be created by the operator by setting .spec.monitoring.enablePodMonitor to true in the Pooler resource. The default is false . Important Any change to PodMonitor created automatically is overridden by the operator at the next reconciliation cycle. If you need to customize it, you can do so as shown in the following example. To deploy a PodMonitor for a specific pooler manually, you can define it as follows and change it as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: <POOLER_NAME> spec: selector: matchLabels: cnpg.io/poolerName: <POOLER_NAME> podMetricsEndpoints: - port: metrics","title":"Monitoring"},{"location":"connection_pooling/#logging","text":"Logs are directly sent to standard output, in JSON format, like in the following example: { \"level\": \"info\", \"ts\": SECONDS.MICROSECONDS, \"msg\": \"record\", \"pipe\": \"stderr\", \"record\": { \"timestamp\": \"YYYY-MM-DD HH:MM:SS.MS UTC\", \"pid\": \"<PID>\", \"level\": \"LOG\", \"msg\": \"kernel file descriptor limit: 1048576 (hard: 1048576); max_client_conn: 100, max expected fd use: 112\" } }","title":"Logging"},{"location":"connection_pooling/#pausing-connections","text":"The Pooler specification allows you to take advantage of PgBouncer's PAUSE and RESUME commands, using only declarative configuration. You can ado this using the paused option, which by default is set to false . When set to true , the operator internally invokes the PAUSE command in PgBouncer, which: Closes all active connections toward the PostgreSQL server, after waiting for the queries to complete Pauses any new connection coming from the client When the paused option is reset to false , the operator invokes the RESUME command in PgBouncer, reopening the taps toward the PostgreSQL service defined in the Pooler resource. PAUSE For more information, see PAUSE in the PgBouncer documentation . Important In future versions, the switchover operation will be fully integrated with the PgBouncer pooler and take advantage of the PAUSE / RESUME features to reduce the perceived downtime by client applications. Currently, you can achieve the same results by setting the paused attribute to true , issuing the switchover command through the cnpg plugin , and then restoring the paused attribute to false .","title":"Pausing connections"},{"location":"connection_pooling/#limitations","text":"","title":"Limitations"},{"location":"connection_pooling/#single-postgresql-cluster","text":"The current implementation of the pooler is designed to work as part of a specific CloudNativePG cluster (a service). It isn't currently possible to create a pooler that spans multiple clusters.","title":"Single PostgreSQL cluster"},{"location":"connection_pooling/#controlled-configurability","text":"CloudNativePG transparently manages several configuration options that are used for the PgBouncer layer to communicate with PostgreSQL. Such options aren't configurable from outside and include TLS certificates, authentication settings, the databases section, and the users section. Also, considering the specific use case for the single PostgreSQL cluster, the adopted criteria is to explicitly list the options that can be configured by users. Note The adopted solution likely addresses the majority of use cases. It leaves room for the future implementation of a separate operator for PgBouncer to complete the gamma with more advanced and customized scenarios.","title":"Controlled configurability"},{"location":"container_images/","text":"Container Image Requirements The CloudNativePG operator for Kubernetes is designed to work with any compatible PostgreSQL container image that meets the following requirements: PostgreSQL executables must be available in the system path: initdb postgres pg_ctl pg_controldata pg_basebackup Proper locale settings configured Optional Components: PGAudit extension (only required if audit logging is needed) du (used for kubectl cnpg status ) Important Only PostgreSQL versions officially supported by PGDG are allowed. Info Barman Cloud executables are no longer required in CloudNativePG. The recommended approach is to use the dedicated Barman Cloud Plugin . No entry point or command is required in the image definition. CloudNativePG automatically overrides it with its instance manager. Warning CloudNativePG only supports Primary with multiple/optional Hot Standby Servers architecture for PostgreSQL application container images. The CloudNativePG community provides and maintains public PostgreSQL container images that are fully compatible with CloudNativePG. These images are published on ghcr.io . Image Tag Requirements To ensure the operator makes informed decisions, it must accurately detect the PostgreSQL major version. This detection can occur in two ways: Utilizing the major field of the imageCatalogRef , if defined. Auto-detecting the major version from the image tag of the imageName if not explicitly specified. For auto-detection to work, the image tag must adhere to a specific format. It should commence with a valid PostgreSQL major version number (e.g., 15.6 or 16), optionally followed by a dot and the patch level. Following this, the tag can include any character combination valid and accepted in a Docker tag, preceded by a dot, an underscore, or a minus sign. Examples of accepted image tags: 12.1 13.3.2.1-1 13.4 14 15.5-10 16.0 Warning latest is not considered a valid tag for the image. Note Image tag requirements do no apply for images defined in a catalog.","title":"Container Image Requirements"},{"location":"container_images/#container-image-requirements","text":"The CloudNativePG operator for Kubernetes is designed to work with any compatible PostgreSQL container image that meets the following requirements: PostgreSQL executables must be available in the system path: initdb postgres pg_ctl pg_controldata pg_basebackup Proper locale settings configured Optional Components: PGAudit extension (only required if audit logging is needed) du (used for kubectl cnpg status ) Important Only PostgreSQL versions officially supported by PGDG are allowed. Info Barman Cloud executables are no longer required in CloudNativePG. The recommended approach is to use the dedicated Barman Cloud Plugin . No entry point or command is required in the image definition. CloudNativePG automatically overrides it with its instance manager. Warning CloudNativePG only supports Primary with multiple/optional Hot Standby Servers architecture for PostgreSQL application container images. The CloudNativePG community provides and maintains public PostgreSQL container images that are fully compatible with CloudNativePG. These images are published on ghcr.io .","title":"Container Image Requirements"},{"location":"container_images/#image-tag-requirements","text":"To ensure the operator makes informed decisions, it must accurately detect the PostgreSQL major version. This detection can occur in two ways: Utilizing the major field of the imageCatalogRef , if defined. Auto-detecting the major version from the image tag of the imageName if not explicitly specified. For auto-detection to work, the image tag must adhere to a specific format. It should commence with a valid PostgreSQL major version number (e.g., 15.6 or 16), optionally followed by a dot and the patch level. Following this, the tag can include any character combination valid and accepted in a Docker tag, preceded by a dot, an underscore, or a minus sign. Examples of accepted image tags: 12.1 13.3.2.1-1 13.4 14 15.5-10 16.0 Warning latest is not considered a valid tag for the image. Note Image tag requirements do no apply for images defined in a catalog.","title":"Image Tag Requirements"},{"location":"controller/","text":"Custom Pod Controller Kubernetes uses the Controller pattern to align the current cluster state with the desired one. Stateful applications are usually managed with the StatefulSet controller, which creates and reconciles a set of Pods built from the same specification, and assigns them a sticky identity. CloudNativePG implements its own custom controller to manage PostgreSQL instances, instead of relying on the StatefulSet controller. While bringing more complexity to the implementation, this design choice provides the operator with more flexibility on how we manage the cluster, while being transparent on the topology of PostgreSQL clusters. Like many choices in the design realm, different ones lead to other compromises. The following sections discuss a few points where we believe this design choice has made the implementation of CloudNativePG more reliable, and easier to understand. PVC resizing This is a well known limitation of StatefulSet : it does not support resizing PVCs. This is inconvenient for a database. Resizing volumes requires convoluted workarounds. In contrast, CloudNativePG leverages the configured storage class to manage the underlying PVCs directly, and can handle PVC resizing if the storage class supports it. Primary Instances versus Replicas The StatefulSet controller is designed to create a set of Pods from just one template. Given that we use one Pod per PostgreSQL instance, we have two kinds of Pods: primary instance (only one) replicas (multiple, optional) This difference is relevant when deciding the correct deployment strategy to execute for a given operation. Some operations should be performed on the replicas first, and then on the primary, but only after an updated replica is promoted as the new primary. For example, when you want to apply a different PostgreSQL image version, or when you increase configuration parameters like max_connections (which are treated specially by PostgreSQL because CloudNativePG uses hot standby replicas ). While doing that, CloudNativePG considers the PostgreSQL instance's role - and not just its serial number. Sometimes the operator needs to follow the opposite process: work on the primary first and then on the replicas. For example, when you lower max_connections . In that case, CloudNativePG will: apply the new setting to the primary instance restart it apply the new setting on the replicas The StatefulSet controller, being application-independent, can't incorporate this behavior, which is specific to PostgreSQL's native replication technology. Coherence of PVCs PostgreSQL instances can be configured to work with multiple PVCs: this is how WAL storage can be separated from PGDATA . The two data stores need to be coherent from the PostgreSQL point of view, as they're used simultaneously. If you delete the PVC corresponding to the WAL storage of an instance, the PVC where PGDATA is stored will not be usable anymore. This behavior is specific to PostgreSQL and is not implemented in the StatefulSet controller - the latter not being application specific. After the user dropped a PVC, a StatefulSet would just recreate it, leading to a corrupted PostgreSQL instance. CloudNativePG would instead classify the remaining PVC as unusable, and start creating a new pair of PVCs for another instance to join the cluster correctly. Local storage, remote storage, and database size Sometimes you need to take down a Kubernetes node to do an upgrade. After the upgrade, depending on your upgrade strategy, the updated node could go up again, or a new node could replace it. Supposing the unavailable node was hosting a PostgreSQL instance, depending on your database size and your cloud infrastructure, you may prefer to choose one of the following actions: drop the PVC and the Pod residing on the downed node; create a new PVC cloning the data from another PVC; after that, schedule a Pod for it drop the Pod, schedule the Pod in a different node, and mount the PVC from there leave the Pod and the PVC as they are, and wait for the node to be back up. The first solution is practical when your database size permits, allowing you to immediately bring back the desired number of replicas. The second solution is only feasible when you're not using the storage of the local node, and re-mounting the PVC in another host is possible in a reasonable amount of time (which only you and your organization know). The third solution is appropriate when the database is big and uses local node storage for maximum performance and data durability. The CloudNativePG controller implements all these strategies so that the user can select the preferred behavior at the cluster level (read the \"Kubernetes upgrade\" section for details). Being generic, the StatefulSet doesn't allow this level of customization.","title":"Custom Pod Controller"},{"location":"controller/#custom-pod-controller","text":"Kubernetes uses the Controller pattern to align the current cluster state with the desired one. Stateful applications are usually managed with the StatefulSet controller, which creates and reconciles a set of Pods built from the same specification, and assigns them a sticky identity. CloudNativePG implements its own custom controller to manage PostgreSQL instances, instead of relying on the StatefulSet controller. While bringing more complexity to the implementation, this design choice provides the operator with more flexibility on how we manage the cluster, while being transparent on the topology of PostgreSQL clusters. Like many choices in the design realm, different ones lead to other compromises. The following sections discuss a few points where we believe this design choice has made the implementation of CloudNativePG more reliable, and easier to understand.","title":"Custom Pod Controller"},{"location":"controller/#pvc-resizing","text":"This is a well known limitation of StatefulSet : it does not support resizing PVCs. This is inconvenient for a database. Resizing volumes requires convoluted workarounds. In contrast, CloudNativePG leverages the configured storage class to manage the underlying PVCs directly, and can handle PVC resizing if the storage class supports it.","title":"PVC resizing"},{"location":"controller/#primary-instances-versus-replicas","text":"The StatefulSet controller is designed to create a set of Pods from just one template. Given that we use one Pod per PostgreSQL instance, we have two kinds of Pods: primary instance (only one) replicas (multiple, optional) This difference is relevant when deciding the correct deployment strategy to execute for a given operation. Some operations should be performed on the replicas first, and then on the primary, but only after an updated replica is promoted as the new primary. For example, when you want to apply a different PostgreSQL image version, or when you increase configuration parameters like max_connections (which are treated specially by PostgreSQL because CloudNativePG uses hot standby replicas ). While doing that, CloudNativePG considers the PostgreSQL instance's role - and not just its serial number. Sometimes the operator needs to follow the opposite process: work on the primary first and then on the replicas. For example, when you lower max_connections . In that case, CloudNativePG will: apply the new setting to the primary instance restart it apply the new setting on the replicas The StatefulSet controller, being application-independent, can't incorporate this behavior, which is specific to PostgreSQL's native replication technology.","title":"Primary Instances versus Replicas"},{"location":"controller/#coherence-of-pvcs","text":"PostgreSQL instances can be configured to work with multiple PVCs: this is how WAL storage can be separated from PGDATA . The two data stores need to be coherent from the PostgreSQL point of view, as they're used simultaneously. If you delete the PVC corresponding to the WAL storage of an instance, the PVC where PGDATA is stored will not be usable anymore. This behavior is specific to PostgreSQL and is not implemented in the StatefulSet controller - the latter not being application specific. After the user dropped a PVC, a StatefulSet would just recreate it, leading to a corrupted PostgreSQL instance. CloudNativePG would instead classify the remaining PVC as unusable, and start creating a new pair of PVCs for another instance to join the cluster correctly.","title":"Coherence of PVCs"},{"location":"controller/#local-storage-remote-storage-and-database-size","text":"Sometimes you need to take down a Kubernetes node to do an upgrade. After the upgrade, depending on your upgrade strategy, the updated node could go up again, or a new node could replace it. Supposing the unavailable node was hosting a PostgreSQL instance, depending on your database size and your cloud infrastructure, you may prefer to choose one of the following actions: drop the PVC and the Pod residing on the downed node; create a new PVC cloning the data from another PVC; after that, schedule a Pod for it drop the Pod, schedule the Pod in a different node, and mount the PVC from there leave the Pod and the PVC as they are, and wait for the node to be back up. The first solution is practical when your database size permits, allowing you to immediately bring back the desired number of replicas. The second solution is only feasible when you're not using the storage of the local node, and re-mounting the PVC in another host is possible in a reasonable amount of time (which only you and your organization know). The third solution is appropriate when the database is big and uses local node storage for maximum performance and data durability. The CloudNativePG controller implements all these strategies so that the user can select the preferred behavior at the cluster level (read the \"Kubernetes upgrade\" section for details). Being generic, the StatefulSet doesn't allow this level of customization.","title":"Local storage, remote storage, and database size"},{"location":"database_import/","text":"Importing Postgres databases This section describes how to import one or more existing PostgreSQL databases inside a brand new CloudNativePG cluster. The import operation is based on the concept of online logical backups in PostgreSQL, and relies on pg_dump via a network connection to the origin host, and pg_restore . Thanks to native Multi-Version Concurrency Control (MVCC) and snapshots, PostgreSQL enables taking consistent backups over the network, in a concurrent manner, without stopping any write activity. Logical backups are also the most common, flexible and reliable technique to perform major upgrades of PostgreSQL versions. As a result, the instructions in this section are suitable for both: importing one or more databases from an existing PostgreSQL instance, even outside Kubernetes importing the database from any PostgreSQL version to one that is either the same or newer, enabling major upgrades of PostgreSQL (e.g. from version 13.x to version 17.x) Warning When performing major upgrades of PostgreSQL you are responsible for making sure that applications are compatible with the new version and that the upgrade path of the objects contained in the database (including extensions) is feasible. In both cases, the operation is performed on a consistent snapshot of the origin database. Important For this reason we suggest to stop write operations on the source before the final import in the Cluster resource, as changes done to the source database after the start of the backup will not be in the destination cluster - hence why this feature is referred to as \"offline import\" or \"offline major upgrade\". How it works Conceptually, the import requires you to create a new cluster from scratch ( destination cluster ), using the initdb bootstrap method , and then complete the initdb.import subsection to import objects from an existing Postgres cluster ( source cluster ). As per PostgreSQL recommendation, we suggest that the PostgreSQL major version of the destination cluster is greater or equal than the one of the source cluster . CloudNativePG provides two main ways to import objects from the source cluster into the destination cluster: microservice approach : the destination cluster is designed to host a single application database owned by the specified application user, as recommended by the CloudNativePG project monolith approach : the destination cluster is designed to host multiple databases and different users, imported from the source cluster The first import method is available via the microservice type, the second via the monolith type. Warning It is your responsibility to ensure that the destination cluster can access the source cluster with a superuser or a user having enough privileges to take a logical backup with pg_dump . Please refer to the PostgreSQL documentation on pg_dump for further information. The microservice type With the microservice approach, you can specify a single database you want to import from the source cluster into the destination cluster. The operation is performed in 4 steps: initdb bootstrap of the new cluster export of the selected database (in initdb.import.databases ) using pg_dump -Fd import of the database using pg_restore --no-acl --no-owner into the initdb.database (application database) owned by the initdb.owner user cleanup of the database dump file optional execution of the user defined SQL queries in the application database via the postImportApplicationSQL parameter execution of ANALYZE VERBOSE on the imported database In the figure below, a single PostgreSQL cluster containing N databases is imported into separate CloudNativePG clusters, with each cluster using a microservice import for one of the N source databases. For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest available major version at the time the operator was released) called cluster-microservice that imports the angus database from the cluster-pg96 cluster (with the unsupported PostgreSQL 9.6), by connecting to the postgres database using the postgres user, via the password stored in the cluster-pg96-superuser secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-microservice spec: instances: 3 bootstrap: initdb: import: type: microservice databases: - angus source: externalCluster: cluster-pg96 #postImportApplicationSQL: #- | # INSERT YOUR SQL QUERIES HERE storage: size: 1Gi externalClusters: - name: cluster-pg96 connectionParameters: # Use the correct IP or host name for the source database host: pg96.local user: postgres dbname: postgres password: name: cluster-pg96-superuser key: password Warning The example above deliberately uses a source database running a version of PostgreSQL that is not supported anymore by the Community, and consequently by CloudNativePG. Data export from the source instance is performed using the version of pg_dump in the destination cluster, which must be a supported one, and equal or greater than the source one. Based on our experience, this way of exporting data should work on older and unsupported versions of Postgres too, giving you the chance to move your legacy data to a better system, inside Kubernetes. This is the main reason why we used 9.6 in the examples of this section. We'd be interested to hear from you, should you experience any issues in this area. There are a few things you need to be aware of when using the microservice type: It requires an externalCluster that points to an existing PostgreSQL instance containing the data to import (for more information, please refer to \"The externalClusters section\" ) Traffic must be allowed between the Kubernetes cluster and the externalCluster during the operation Connection to the source database must be granted with the specified user that needs to run pg_dump and read roles information ( superuser is OK) Currently, the pg_dump -Fd result is stored temporarily inside the dumps folder in the PGDATA volume, so there should be enough available space to temporarily contain the dump result on the assigned node, as well as the restored data and indexes. Once the import operation is completed, this folder is automatically deleted by the operator. Only one database can be specified inside the initdb.import.databases array Roles are not imported - and as such they cannot be specified inside initdb.import.roles Hint The microservice approach adheres to CloudNativePG conventions and defaults for the destination cluster. If you do not set initdb.database or initdb.owner for the destination cluster, both parameters will default to app . The monolith type With the monolith approach, you can specify a set of roles and databases you want to import from the source cluster into the destination cluster. The operation is performed in the following steps: initdb bootstrap of the new cluster export and import of the selected roles export of the selected databases (in initdb.import.databases ), one at a time, using pg_dump -Fd create each of the selected databases and import data using pg_restore run ANALYZE on each imported database cleanup of the database dump files For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest available major version at the time the operator was released) called cluster-monolith that imports the accountant and the bank_user roles, as well as the accounting , banking , resort databases from the cluster-pg96 cluster (with the unsupported PostgreSQL 9.6), by connecting to the postgres database using the postgres user, via the password stored in the cluster-pg96-superuser secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-monolith spec: instances: 3 bootstrap: initdb: import: type: monolith databases: - accounting - banking - resort roles: - accountant - bank_user source: externalCluster: cluster-pg96 storage: size: 1Gi externalClusters: - name: cluster-pg96 connectionParameters: # Use the correct IP or host name for the source database host: pg96.local user: postgres dbname: postgres sslmode: require password: name: cluster-pg96-superuser key: password There are a few things you need to be aware of when using the monolith type: It requires an externalCluster that points to an existing PostgreSQL instance containing the data to import (for more information, please refer to \"The externalClusters section\" ) Traffic must be allowed between the Kubernetes cluster and the externalCluster during the operation Connection to the source database must be granted with the specified user that needs to run pg_dump and retrieve roles information ( superuser is OK) Currently, the pg_dump -Fd result is stored temporarily inside the dumps folder in the PGDATA volume of the destination cluster's instances, so there should be enough available space to temporarily contain the dump result on the assigned node, as well as the restored data and indexes. Once the import operation is completed, this folder is automatically deleted by the operator. At least one database to be specified in the initdb.import.databases array Any role that is required by the imported databases must be specified inside initdb.import.roles , with the limitations below: The following roles, if present, are not imported: postgres , streaming_replica , cnpg_pooler_pgbouncer The SUPERUSER option is removed from any imported role Wildcard \"*\" can be used as the only element in the databases and/or roles arrays to import every object of the kind; When matching databases the wildcard will ignore the postgres database, template databases, and those databases not allowing connections After the clone procedure is done, ANALYZE VERBOSE is executed for every database. The postImportApplicationSQL field is not supported Hint The databases and their owners are preserved exactly as they exist in the source cluster\u2014no app database or user will be created during import. If your bootstrap.initdb stanza specifies custom database and owner values that do not match any of the databases or users being imported, the instance manager will create a new, empty application database and owner role with those specified names, while leaving the imported databases and owners unchanged. A practical example There is nothing to stop you from using the monolith approach to import a single database. It is interesting to see how the results of doing so would differ from using the microservice approach. Given a source cluster, for example the following, with a database named mydb owned by role me : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 1 postgresql: pg_hba: - host all all all trust storage: size: 1Gi bootstrap: initdb: database: mydb owner: me We can import it via microservice : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-microservice spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: microservice databases: - mydb source: externalCluster: cluster-example externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw dbname: postgres as well as via monolith: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-monolith spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: monolith databases: - mydb roles: - me source: externalCluster: cluster-example externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw dbname: postgres In both cases, the database's contents will be imported, but: In the microservice case, the imported database's name and owner both become app , or whichever configuration for the fields database and owner are set in the bootstrap.initdb stanza. In the monolith case, the database and owner are kept exactly as in the source cluster, i.e. mydb and me respectively. No app database nor user will be created. If there are custom settings for database and owner in the bootstrap.initdb stanza that don't match the source databases/owners to import, the instance manager will create a new empty application database and owner role, but will leave the imported databases/owners intact. Import optimizations During the logical import of a database, CloudNativePG optimizes the configuration of PostgreSQL in order to prioritize speed versus data durability, by forcing: archive_mode to off fsync to off full_page_writes to off max_wal_senders to 0 wal_level to minimal Before completing the import job, CloudNativePG restores the expected configuration, then runs initdb --sync-only to ensure that data is permanently written on disk. Important WAL archiving, if requested, and WAL level will be honored after the database import process has completed. Similarly, replicas will be cloned after the bootstrap phase, when the actual cluster resource starts. There are other optimizations you can do during the import phase. Although this topic is beyond the scope of CloudNativePG, we recommend that you reduce unnecessary writes in the checkpoint area by tuning Postgres GUCs like shared_buffers , max_wal_size , checkpoint_timeout directly in the Cluster configuration. Customizing pg_dump and pg_restore Behavior You can customize the behavior of pg_dump and pg_restore by specifying additional options using the pgDumpExtraOptions and pgRestoreExtraOptions parameters. For instance, you can enable parallel jobs to speed up data import/export processes, as shown in the following example: # <snip> bootstrap: initdb: import: type: microservice databases: - app source: externalCluster: cluster-example pgDumpExtraOptions: - '--jobs=2' pgRestoreExtraOptions: - '--jobs=2' # <snip> Warning Use the pgDumpExtraOptions and pgRestoreExtraOptions fields with caution and at your own risk. These options are not validated or verified by the operator, and some configurations may conflict with its intended functionality or behavior. Always test thoroughly in a safe and controlled environment before applying them in production. Online Import and Upgrades Logical replication offers a powerful way to import any PostgreSQL database accessible over the network using the following approach: Import Bootstrap with Schema-Only Option : Initialize the schema in the target database before replication begins. Subscription Resource : Set up continuous replication to synchronize data changes. This technique can also be leveraged for performing major PostgreSQL upgrades with minimal downtime, making it ideal for seamless migrations and system upgrades. For more details, including limitations and best practices, refer to the Logical Replication section in the documentation.","title":"Importing Postgres databases"},{"location":"database_import/#importing-postgres-databases","text":"This section describes how to import one or more existing PostgreSQL databases inside a brand new CloudNativePG cluster. The import operation is based on the concept of online logical backups in PostgreSQL, and relies on pg_dump via a network connection to the origin host, and pg_restore . Thanks to native Multi-Version Concurrency Control (MVCC) and snapshots, PostgreSQL enables taking consistent backups over the network, in a concurrent manner, without stopping any write activity. Logical backups are also the most common, flexible and reliable technique to perform major upgrades of PostgreSQL versions. As a result, the instructions in this section are suitable for both: importing one or more databases from an existing PostgreSQL instance, even outside Kubernetes importing the database from any PostgreSQL version to one that is either the same or newer, enabling major upgrades of PostgreSQL (e.g. from version 13.x to version 17.x) Warning When performing major upgrades of PostgreSQL you are responsible for making sure that applications are compatible with the new version and that the upgrade path of the objects contained in the database (including extensions) is feasible. In both cases, the operation is performed on a consistent snapshot of the origin database. Important For this reason we suggest to stop write operations on the source before the final import in the Cluster resource, as changes done to the source database after the start of the backup will not be in the destination cluster - hence why this feature is referred to as \"offline import\" or \"offline major upgrade\".","title":"Importing Postgres databases"},{"location":"database_import/#how-it-works","text":"Conceptually, the import requires you to create a new cluster from scratch ( destination cluster ), using the initdb bootstrap method , and then complete the initdb.import subsection to import objects from an existing Postgres cluster ( source cluster ). As per PostgreSQL recommendation, we suggest that the PostgreSQL major version of the destination cluster is greater or equal than the one of the source cluster . CloudNativePG provides two main ways to import objects from the source cluster into the destination cluster: microservice approach : the destination cluster is designed to host a single application database owned by the specified application user, as recommended by the CloudNativePG project monolith approach : the destination cluster is designed to host multiple databases and different users, imported from the source cluster The first import method is available via the microservice type, the second via the monolith type. Warning It is your responsibility to ensure that the destination cluster can access the source cluster with a superuser or a user having enough privileges to take a logical backup with pg_dump . Please refer to the PostgreSQL documentation on pg_dump for further information.","title":"How it works"},{"location":"database_import/#the-microservice-type","text":"With the microservice approach, you can specify a single database you want to import from the source cluster into the destination cluster. The operation is performed in 4 steps: initdb bootstrap of the new cluster export of the selected database (in initdb.import.databases ) using pg_dump -Fd import of the database using pg_restore --no-acl --no-owner into the initdb.database (application database) owned by the initdb.owner user cleanup of the database dump file optional execution of the user defined SQL queries in the application database via the postImportApplicationSQL parameter execution of ANALYZE VERBOSE on the imported database In the figure below, a single PostgreSQL cluster containing N databases is imported into separate CloudNativePG clusters, with each cluster using a microservice import for one of the N source databases. For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest available major version at the time the operator was released) called cluster-microservice that imports the angus database from the cluster-pg96 cluster (with the unsupported PostgreSQL 9.6), by connecting to the postgres database using the postgres user, via the password stored in the cluster-pg96-superuser secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-microservice spec: instances: 3 bootstrap: initdb: import: type: microservice databases: - angus source: externalCluster: cluster-pg96 #postImportApplicationSQL: #- | # INSERT YOUR SQL QUERIES HERE storage: size: 1Gi externalClusters: - name: cluster-pg96 connectionParameters: # Use the correct IP or host name for the source database host: pg96.local user: postgres dbname: postgres password: name: cluster-pg96-superuser key: password Warning The example above deliberately uses a source database running a version of PostgreSQL that is not supported anymore by the Community, and consequently by CloudNativePG. Data export from the source instance is performed using the version of pg_dump in the destination cluster, which must be a supported one, and equal or greater than the source one. Based on our experience, this way of exporting data should work on older and unsupported versions of Postgres too, giving you the chance to move your legacy data to a better system, inside Kubernetes. This is the main reason why we used 9.6 in the examples of this section. We'd be interested to hear from you, should you experience any issues in this area. There are a few things you need to be aware of when using the microservice type: It requires an externalCluster that points to an existing PostgreSQL instance containing the data to import (for more information, please refer to \"The externalClusters section\" ) Traffic must be allowed between the Kubernetes cluster and the externalCluster during the operation Connection to the source database must be granted with the specified user that needs to run pg_dump and read roles information ( superuser is OK) Currently, the pg_dump -Fd result is stored temporarily inside the dumps folder in the PGDATA volume, so there should be enough available space to temporarily contain the dump result on the assigned node, as well as the restored data and indexes. Once the import operation is completed, this folder is automatically deleted by the operator. Only one database can be specified inside the initdb.import.databases array Roles are not imported - and as such they cannot be specified inside initdb.import.roles Hint The microservice approach adheres to CloudNativePG conventions and defaults for the destination cluster. If you do not set initdb.database or initdb.owner for the destination cluster, both parameters will default to app .","title":"The microservice type"},{"location":"database_import/#the-monolith-type","text":"With the monolith approach, you can specify a set of roles and databases you want to import from the source cluster into the destination cluster. The operation is performed in the following steps: initdb bootstrap of the new cluster export and import of the selected roles export of the selected databases (in initdb.import.databases ), one at a time, using pg_dump -Fd create each of the selected databases and import data using pg_restore run ANALYZE on each imported database cleanup of the database dump files For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest available major version at the time the operator was released) called cluster-monolith that imports the accountant and the bank_user roles, as well as the accounting , banking , resort databases from the cluster-pg96 cluster (with the unsupported PostgreSQL 9.6), by connecting to the postgres database using the postgres user, via the password stored in the cluster-pg96-superuser secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-monolith spec: instances: 3 bootstrap: initdb: import: type: monolith databases: - accounting - banking - resort roles: - accountant - bank_user source: externalCluster: cluster-pg96 storage: size: 1Gi externalClusters: - name: cluster-pg96 connectionParameters: # Use the correct IP or host name for the source database host: pg96.local user: postgres dbname: postgres sslmode: require password: name: cluster-pg96-superuser key: password There are a few things you need to be aware of when using the monolith type: It requires an externalCluster that points to an existing PostgreSQL instance containing the data to import (for more information, please refer to \"The externalClusters section\" ) Traffic must be allowed between the Kubernetes cluster and the externalCluster during the operation Connection to the source database must be granted with the specified user that needs to run pg_dump and retrieve roles information ( superuser is OK) Currently, the pg_dump -Fd result is stored temporarily inside the dumps folder in the PGDATA volume of the destination cluster's instances, so there should be enough available space to temporarily contain the dump result on the assigned node, as well as the restored data and indexes. Once the import operation is completed, this folder is automatically deleted by the operator. At least one database to be specified in the initdb.import.databases array Any role that is required by the imported databases must be specified inside initdb.import.roles , with the limitations below: The following roles, if present, are not imported: postgres , streaming_replica , cnpg_pooler_pgbouncer The SUPERUSER option is removed from any imported role Wildcard \"*\" can be used as the only element in the databases and/or roles arrays to import every object of the kind; When matching databases the wildcard will ignore the postgres database, template databases, and those databases not allowing connections After the clone procedure is done, ANALYZE VERBOSE is executed for every database. The postImportApplicationSQL field is not supported Hint The databases and their owners are preserved exactly as they exist in the source cluster\u2014no app database or user will be created during import. If your bootstrap.initdb stanza specifies custom database and owner values that do not match any of the databases or users being imported, the instance manager will create a new, empty application database and owner role with those specified names, while leaving the imported databases and owners unchanged.","title":"The monolith type"},{"location":"database_import/#a-practical-example","text":"There is nothing to stop you from using the monolith approach to import a single database. It is interesting to see how the results of doing so would differ from using the microservice approach. Given a source cluster, for example the following, with a database named mydb owned by role me : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 1 postgresql: pg_hba: - host all all all trust storage: size: 1Gi bootstrap: initdb: database: mydb owner: me We can import it via microservice : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-microservice spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: microservice databases: - mydb source: externalCluster: cluster-example externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw dbname: postgres as well as via monolith: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-monolith spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: monolith databases: - mydb roles: - me source: externalCluster: cluster-example externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw dbname: postgres In both cases, the database's contents will be imported, but: In the microservice case, the imported database's name and owner both become app , or whichever configuration for the fields database and owner are set in the bootstrap.initdb stanza. In the monolith case, the database and owner are kept exactly as in the source cluster, i.e. mydb and me respectively. No app database nor user will be created. If there are custom settings for database and owner in the bootstrap.initdb stanza that don't match the source databases/owners to import, the instance manager will create a new empty application database and owner role, but will leave the imported databases/owners intact.","title":"A practical example"},{"location":"database_import/#import-optimizations","text":"During the logical import of a database, CloudNativePG optimizes the configuration of PostgreSQL in order to prioritize speed versus data durability, by forcing: archive_mode to off fsync to off full_page_writes to off max_wal_senders to 0 wal_level to minimal Before completing the import job, CloudNativePG restores the expected configuration, then runs initdb --sync-only to ensure that data is permanently written on disk. Important WAL archiving, if requested, and WAL level will be honored after the database import process has completed. Similarly, replicas will be cloned after the bootstrap phase, when the actual cluster resource starts. There are other optimizations you can do during the import phase. Although this topic is beyond the scope of CloudNativePG, we recommend that you reduce unnecessary writes in the checkpoint area by tuning Postgres GUCs like shared_buffers , max_wal_size , checkpoint_timeout directly in the Cluster configuration.","title":"Import optimizations"},{"location":"database_import/#customizing-pg_dump-and-pg_restore-behavior","text":"You can customize the behavior of pg_dump and pg_restore by specifying additional options using the pgDumpExtraOptions and pgRestoreExtraOptions parameters. For instance, you can enable parallel jobs to speed up data import/export processes, as shown in the following example: # <snip> bootstrap: initdb: import: type: microservice databases: - app source: externalCluster: cluster-example pgDumpExtraOptions: - '--jobs=2' pgRestoreExtraOptions: - '--jobs=2' # <snip> Warning Use the pgDumpExtraOptions and pgRestoreExtraOptions fields with caution and at your own risk. These options are not validated or verified by the operator, and some configurations may conflict with its intended functionality or behavior. Always test thoroughly in a safe and controlled environment before applying them in production.","title":"Customizing pg_dump and pg_restore Behavior"},{"location":"database_import/#online-import-and-upgrades","text":"Logical replication offers a powerful way to import any PostgreSQL database accessible over the network using the following approach: Import Bootstrap with Schema-Only Option : Initialize the schema in the target database before replication begins. Subscription Resource : Set up continuous replication to synchronize data changes. This technique can also be leveraged for performing major PostgreSQL upgrades with minimal downtime, making it ideal for seamless migrations and system upgrades. For more details, including limitations and best practices, refer to the Logical Replication section in the documentation.","title":"Online Import and Upgrades"},{"location":"declarative_database_management/","text":"PostgreSQL Database Management CloudNativePG simplifies PostgreSQL database provisioning by automatically creating an application database named app by default. This default behavior is explained in the \"Bootstrap an Empty Cluster\" section. For more advanced use cases, CloudNativePG introduces declarative database management , which empowers users to define and control the lifecycle of PostgreSQL databases using the Database Custom Resource Definition (CRD). This method seamlessly integrates with Kubernetes, providing a scalable, automated, and consistent approach to managing PostgreSQL databases. Key Concepts Scope of Management Important CloudNativePG manages global objects in PostgreSQL clusters, including databases, roles, and tablespaces. However, it does not manage database content beyond extensions and schemas (e.g., tables). To manage database content, use specialized tools or rely on the applications themselves. Declarative Database Manifest The following example demonstrates how a Database resource interacts with a Cluster : apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-one spec: name: one owner: app cluster: name: cluster-example extensions: - name: bloom ensure: present When applied, this manifest creates a Database object called cluster-example-one requesting a database named one , owned by the app role, in the cluster-example PostgreSQL cluster. Info Please refer to the API reference the full list of attributes you can define for each Database object. Required Fields in the Database Manifest metadata.name : Unique name of the Kubernetes object within its namespace. spec.name : Name of the database as it will appear in PostgreSQL. spec.owner : PostgreSQL role that owns the database. spec.cluster.name : Name of the target PostgreSQL cluster. The Database object must reference a specific Cluster , determining where the database will be created. It is managed by the cluster's primary instance, ensuring the database is created or updated as needed. Info The distinction between metadata.name and spec.name allows multiple Database resources to reference databases with the same name across different CloudNativePG clusters in the same Kubernetes namespace. Reserved Database Names PostgreSQL automatically creates databases such as postgres , template0 , and template1 . These names are reserved and cannot be used for new Database objects in CloudNativePG. Important Creating a Database with spec.name set to postgres , template0 , or template1 is not allowed. Reconciliation and Status Once a Database object is reconciled successfully: status.applied will be set to true . status.observedGeneration will match the metadata.generation of the last applied configuration. Example of a reconciled Database object: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: generation: 1 name: cluster-example-one spec: cluster: name: cluster-example name: one owner: app status: observedGeneration: 1 applied: true If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field. Deleting a Database CloudNativePG supports two methods for database deletion: Using the delete reclaim policy Declaratively setting the database's ensure field to absent Deleting via delete Reclaim Policy The databaseReclaimPolicy field determines the behavior when a Database object is deleted: retain (default): The database remains in PostgreSQL for manual management. delete : The database is automatically removed from PostgreSQL. Example: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-two spec: databaseReclaimPolicy: delete name: two owner: app cluster: name: cluster-example Deleting this Database object will automatically remove the two database from the cluster-example cluster. Declaratively Setting ensure: absent To remove a database, set the ensure field to absent like in the following example:. apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-database-to-drop spec: cluster: name: cluster-example name: database-to-drop owner: app ensure: absent This manifest ensures that the database-to-drop database is removed from the cluster-example cluster. Managing Extensions in a Database Info While extensions are database-scoped rather than global objects, CloudNativePG provides a declarative interface for managing them. This approach is necessary because installing certain extensions may require superuser privileges, which CloudNativePG recommends disabling by default. By leveraging this API, users can efficiently manage extensions in a scalable and controlled manner without requiring elevated privileges. CloudNativePG simplifies and automates the management of PostgreSQL extensions within the target database. To enable this feature, define the spec.extensions field with a list of extension specifications, as shown in the following example: # ... spec: extensions: - name: bloom ensure: present # ... Each extension entry supports the following properties: name (mandatory) : The name of the extension. ensure : Specifies whether the extension should be present or absent in the database: present : Ensures that the extension is installed (default). absent : Ensures that the extension is removed. version : The specific version of the extension to install or upgrade to. schema : The schema in which the extension should be installed. Info CloudNativePG manages extensions using the following PostgreSQL\u2019s SQL commands: CREATE EXTENSION , DROP EXTENSION , ALTER EXTENSION (limited to UPDATE TO and SET SCHEMA ). The operator reconciles only the extensions explicitly listed in spec.extensions . Any existing extensions not specified in this list remain unchanged. Warning Before the introduction of declarative extension management, CloudNativePG did not offer a straightforward way to create extensions through configuration. To address this, the \"managed extensions\" feature was introduced, enabling the automated and transparent management of key extensions like pg_stat_statements . Currently, it is your responsibility to ensure there are no conflicts between extension support in the Database CRD and the managed extensions feature. Managing Schemas in a Database Info Schema management in PostgreSQL is an exception to CloudNativePG's primary focus on managing global objects. Since schemas exist within a database, they are typically managed as part of the application development process. However, CloudNativePG provides a declarative interface for schema management, primarily to complete the support of extensions deployment within schemas. CloudNativePG simplifies and automates the management of PostgreSQL schemas within the target database. To enable this feature, define the spec.schemas field with a list of schema specifications, as shown in the following example: # ... spec: schemas: - name: app owner: app # ... Each schema entry supports the following properties: name (mandatory) : The name of the schema. owner : The owner of the schema. ensure : Specifies whether the schema should be present or absent in the database: present : Ensures that the schema is installed (default). absent : Ensures that the schema is removed. Info CloudNativePG manages schemas using the following PostgreSQL\u2019s SQL commands: CREATE SCHEMA , DROP SCHEMA , ALTER SCHEMA . Limitations and Caveats Renaming a database While CloudNativePG adheres to PostgreSQL\u2019s CREATE DATABASE and ALTER DATABASE commands, renaming databases is not supported . Attempting to modify spec.name in an existing Database object will result in rejection by Kubernetes. Creating vs. Altering a Database For new databases, CloudNativePG uses the CREATE DATABASE statement. For existing databases, ALTER DATABASE is used to apply changes. It is important to note that there are some differences between these two Postgres commands: in particular, the options accepted by ALTER are a subset of those accepted by CREATE . Warning Some fields, such as encoding and collation settings, are immutable in PostgreSQL. Attempts to modify these fields on existing databases will be ignored. Replica Clusters Database objects declared on replica clusters cannot be enforced, as replicas lack write privileges. These objects will remain in a pending state until the replica is promoted. Conflict Resolution If two Database objects in the same namespace manage the same PostgreSQL database (i.e., identical spec.name and spec.cluster.name ), the second object will be rejected. Example status message: status: applied: false message: 'reconciliation error: database \"one\" is already managed by Database object \"cluster-example-one\"' Postgres Version Differences CloudNativePG adheres to PostgreSQL's capabilities. For example, features like ICU_RULES introduced in PostgreSQL 16 are unavailable in earlier versions. Errors from PostgreSQL will be reflected in the Database object's status . Manual Changes CloudNativePG does not overwrite manual changes to databases. Once reconciled, a Database object will not be reapplied unless its metadata.generation changes, giving flexibility for direct PostgreSQL modifications.","title":"PostgreSQL Database Management"},{"location":"declarative_database_management/#postgresql-database-management","text":"CloudNativePG simplifies PostgreSQL database provisioning by automatically creating an application database named app by default. This default behavior is explained in the \"Bootstrap an Empty Cluster\" section. For more advanced use cases, CloudNativePG introduces declarative database management , which empowers users to define and control the lifecycle of PostgreSQL databases using the Database Custom Resource Definition (CRD). This method seamlessly integrates with Kubernetes, providing a scalable, automated, and consistent approach to managing PostgreSQL databases.","title":"PostgreSQL Database Management"},{"location":"declarative_database_management/#key-concepts","text":"","title":"Key Concepts"},{"location":"declarative_database_management/#scope-of-management","text":"Important CloudNativePG manages global objects in PostgreSQL clusters, including databases, roles, and tablespaces. However, it does not manage database content beyond extensions and schemas (e.g., tables). To manage database content, use specialized tools or rely on the applications themselves.","title":"Scope of Management"},{"location":"declarative_database_management/#declarative-database-manifest","text":"The following example demonstrates how a Database resource interacts with a Cluster : apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-one spec: name: one owner: app cluster: name: cluster-example extensions: - name: bloom ensure: present When applied, this manifest creates a Database object called cluster-example-one requesting a database named one , owned by the app role, in the cluster-example PostgreSQL cluster. Info Please refer to the API reference the full list of attributes you can define for each Database object.","title":"Declarative Database Manifest"},{"location":"declarative_database_management/#required-fields-in-the-database-manifest","text":"metadata.name : Unique name of the Kubernetes object within its namespace. spec.name : Name of the database as it will appear in PostgreSQL. spec.owner : PostgreSQL role that owns the database. spec.cluster.name : Name of the target PostgreSQL cluster. The Database object must reference a specific Cluster , determining where the database will be created. It is managed by the cluster's primary instance, ensuring the database is created or updated as needed. Info The distinction between metadata.name and spec.name allows multiple Database resources to reference databases with the same name across different CloudNativePG clusters in the same Kubernetes namespace.","title":"Required Fields in the Database Manifest"},{"location":"declarative_database_management/#reserved-database-names","text":"PostgreSQL automatically creates databases such as postgres , template0 , and template1 . These names are reserved and cannot be used for new Database objects in CloudNativePG. Important Creating a Database with spec.name set to postgres , template0 , or template1 is not allowed.","title":"Reserved Database Names"},{"location":"declarative_database_management/#reconciliation-and-status","text":"Once a Database object is reconciled successfully: status.applied will be set to true . status.observedGeneration will match the metadata.generation of the last applied configuration. Example of a reconciled Database object: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: generation: 1 name: cluster-example-one spec: cluster: name: cluster-example name: one owner: app status: observedGeneration: 1 applied: true If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field.","title":"Reconciliation and Status"},{"location":"declarative_database_management/#deleting-a-database","text":"CloudNativePG supports two methods for database deletion: Using the delete reclaim policy Declaratively setting the database's ensure field to absent","title":"Deleting a Database"},{"location":"declarative_database_management/#deleting-via-delete-reclaim-policy","text":"The databaseReclaimPolicy field determines the behavior when a Database object is deleted: retain (default): The database remains in PostgreSQL for manual management. delete : The database is automatically removed from PostgreSQL. Example: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-two spec: databaseReclaimPolicy: delete name: two owner: app cluster: name: cluster-example Deleting this Database object will automatically remove the two database from the cluster-example cluster.","title":"Deleting via delete Reclaim Policy"},{"location":"declarative_database_management/#declaratively-setting-ensure-absent","text":"To remove a database, set the ensure field to absent like in the following example:. apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-database-to-drop spec: cluster: name: cluster-example name: database-to-drop owner: app ensure: absent This manifest ensures that the database-to-drop database is removed from the cluster-example cluster.","title":"Declaratively Setting ensure: absent"},{"location":"declarative_database_management/#managing-extensions-in-a-database","text":"Info While extensions are database-scoped rather than global objects, CloudNativePG provides a declarative interface for managing them. This approach is necessary because installing certain extensions may require superuser privileges, which CloudNativePG recommends disabling by default. By leveraging this API, users can efficiently manage extensions in a scalable and controlled manner without requiring elevated privileges. CloudNativePG simplifies and automates the management of PostgreSQL extensions within the target database. To enable this feature, define the spec.extensions field with a list of extension specifications, as shown in the following example: # ... spec: extensions: - name: bloom ensure: present # ... Each extension entry supports the following properties: name (mandatory) : The name of the extension. ensure : Specifies whether the extension should be present or absent in the database: present : Ensures that the extension is installed (default). absent : Ensures that the extension is removed. version : The specific version of the extension to install or upgrade to. schema : The schema in which the extension should be installed. Info CloudNativePG manages extensions using the following PostgreSQL\u2019s SQL commands: CREATE EXTENSION , DROP EXTENSION , ALTER EXTENSION (limited to UPDATE TO and SET SCHEMA ). The operator reconciles only the extensions explicitly listed in spec.extensions . Any existing extensions not specified in this list remain unchanged. Warning Before the introduction of declarative extension management, CloudNativePG did not offer a straightforward way to create extensions through configuration. To address this, the \"managed extensions\" feature was introduced, enabling the automated and transparent management of key extensions like pg_stat_statements . Currently, it is your responsibility to ensure there are no conflicts between extension support in the Database CRD and the managed extensions feature.","title":"Managing Extensions in a Database"},{"location":"declarative_database_management/#managing-schemas-in-a-database","text":"Info Schema management in PostgreSQL is an exception to CloudNativePG's primary focus on managing global objects. Since schemas exist within a database, they are typically managed as part of the application development process. However, CloudNativePG provides a declarative interface for schema management, primarily to complete the support of extensions deployment within schemas. CloudNativePG simplifies and automates the management of PostgreSQL schemas within the target database. To enable this feature, define the spec.schemas field with a list of schema specifications, as shown in the following example: # ... spec: schemas: - name: app owner: app # ... Each schema entry supports the following properties: name (mandatory) : The name of the schema. owner : The owner of the schema. ensure : Specifies whether the schema should be present or absent in the database: present : Ensures that the schema is installed (default). absent : Ensures that the schema is removed. Info CloudNativePG manages schemas using the following PostgreSQL\u2019s SQL commands: CREATE SCHEMA , DROP SCHEMA , ALTER SCHEMA .","title":"Managing Schemas in a Database"},{"location":"declarative_database_management/#limitations-and-caveats","text":"","title":"Limitations and Caveats"},{"location":"declarative_database_management/#renaming-a-database","text":"While CloudNativePG adheres to PostgreSQL\u2019s CREATE DATABASE and ALTER DATABASE commands, renaming databases is not supported . Attempting to modify spec.name in an existing Database object will result in rejection by Kubernetes.","title":"Renaming a database"},{"location":"declarative_database_management/#creating-vs-altering-a-database","text":"For new databases, CloudNativePG uses the CREATE DATABASE statement. For existing databases, ALTER DATABASE is used to apply changes. It is important to note that there are some differences between these two Postgres commands: in particular, the options accepted by ALTER are a subset of those accepted by CREATE . Warning Some fields, such as encoding and collation settings, are immutable in PostgreSQL. Attempts to modify these fields on existing databases will be ignored.","title":"Creating vs. Altering a Database"},{"location":"declarative_database_management/#replica-clusters","text":"Database objects declared on replica clusters cannot be enforced, as replicas lack write privileges. These objects will remain in a pending state until the replica is promoted.","title":"Replica Clusters"},{"location":"declarative_database_management/#conflict-resolution","text":"If two Database objects in the same namespace manage the same PostgreSQL database (i.e., identical spec.name and spec.cluster.name ), the second object will be rejected. Example status message: status: applied: false message: 'reconciliation error: database \"one\" is already managed by Database object \"cluster-example-one\"'","title":"Conflict Resolution"},{"location":"declarative_database_management/#postgres-version-differences","text":"CloudNativePG adheres to PostgreSQL's capabilities. For example, features like ICU_RULES introduced in PostgreSQL 16 are unavailable in earlier versions. Errors from PostgreSQL will be reflected in the Database object's status .","title":"Postgres Version Differences"},{"location":"declarative_database_management/#manual-changes","text":"CloudNativePG does not overwrite manual changes to databases. Once reconciled, a Database object will not be reapplied unless its metadata.generation changes, giving flexibility for direct PostgreSQL modifications.","title":"Manual Changes"},{"location":"declarative_hibernation/","text":"Declarative hibernation CloudNativePG is designed to keep PostgreSQL clusters up, running and available anytime. There are some kinds of workloads that require the database to be up only when the workload is active. Batch-driven solutions are one such case. In batch-driven solutions, the database needs to be up only when the batch process is running. The declarative hibernation feature enables saving CPU power by removing the database Pods, while keeping the database PVCs. Hibernation To hibernate a cluster, set the cnpg.io/hibernation=on annotation: $ kubectl annotate cluster <cluster-name> --overwrite cnpg.io/hibernation=on A hibernated cluster won't have any running Pods, while the PVCs are retained so that the cluster can be rehydrated at a later time. Replica PVCs will be kept in addition to the primary's PVC. The hibernation procedure will delete the primary Pod and then the replica Pods, avoiding switchover, to ensure the replicas are kept in sync. The hibernation status can be monitored by looking for the cnpg.io/hibernation condition: $ kubectl get cluster <cluster-name> -o \"jsonpath={.status.conditions[?(.type==\\\"cnpg.io/hibernation\\\")]}\" { \"lastTransitionTime\":\"2023-03-05T16:43:35Z\", \"message\":\"Cluster has been hibernated\", \"reason\":\"Hibernated\", \"status\":\"True\", \"type\":\"cnpg.io/hibernation\" } The hibernation status can also be read with the status sub-command of the cnpg plugin for kubectl : $ kubectl cnpg status <cluster-name> Cluster Summary Name: cluster-example Namespace: default PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:17.5 Primary instance: cluster-example-2 Status: Cluster in healthy state Instances: 3 Ready instances: 0 Hibernation Status Hibernated Message Cluster has been hibernated Time 2023-03-05 16:43:35 +0000 UTC [..] Rehydration To rehydrate a cluster, either set the cnpg.io/hibernation annotation to off : $ kubectl annotate cluster <cluster-name> --overwrite cnpg.io/hibernation=off Or, just unset it altogether: $ kubectl annotate cluster <cluster-name> cnpg.io/hibernation- The Pods will be recreated and the cluster will resume operation.","title":"Declarative hibernation"},{"location":"declarative_hibernation/#declarative-hibernation","text":"CloudNativePG is designed to keep PostgreSQL clusters up, running and available anytime. There are some kinds of workloads that require the database to be up only when the workload is active. Batch-driven solutions are one such case. In batch-driven solutions, the database needs to be up only when the batch process is running. The declarative hibernation feature enables saving CPU power by removing the database Pods, while keeping the database PVCs.","title":"Declarative hibernation"},{"location":"declarative_hibernation/#hibernation","text":"To hibernate a cluster, set the cnpg.io/hibernation=on annotation: $ kubectl annotate cluster <cluster-name> --overwrite cnpg.io/hibernation=on A hibernated cluster won't have any running Pods, while the PVCs are retained so that the cluster can be rehydrated at a later time. Replica PVCs will be kept in addition to the primary's PVC. The hibernation procedure will delete the primary Pod and then the replica Pods, avoiding switchover, to ensure the replicas are kept in sync. The hibernation status can be monitored by looking for the cnpg.io/hibernation condition: $ kubectl get cluster <cluster-name> -o \"jsonpath={.status.conditions[?(.type==\\\"cnpg.io/hibernation\\\")]}\" { \"lastTransitionTime\":\"2023-03-05T16:43:35Z\", \"message\":\"Cluster has been hibernated\", \"reason\":\"Hibernated\", \"status\":\"True\", \"type\":\"cnpg.io/hibernation\" } The hibernation status can also be read with the status sub-command of the cnpg plugin for kubectl : $ kubectl cnpg status <cluster-name> Cluster Summary Name: cluster-example Namespace: default PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:17.5 Primary instance: cluster-example-2 Status: Cluster in healthy state Instances: 3 Ready instances: 0 Hibernation Status Hibernated Message Cluster has been hibernated Time 2023-03-05 16:43:35 +0000 UTC [..]","title":"Hibernation"},{"location":"declarative_hibernation/#rehydration","text":"To rehydrate a cluster, either set the cnpg.io/hibernation annotation to off : $ kubectl annotate cluster <cluster-name> --overwrite cnpg.io/hibernation=off Or, just unset it altogether: $ kubectl annotate cluster <cluster-name> cnpg.io/hibernation- The Pods will be recreated and the cluster will resume operation.","title":"Rehydration"},{"location":"declarative_role_management/","text":"PostgreSQL Role Management From its inception, CloudNativePG has managed the creation of specific roles required in PostgreSQL instances: some reserved users, such as the postgres superuser, streaming_replica and cnpg_pooler_pgbouncer (when the PgBouncer Pooler is used) The application user, set as the low-privilege owner of the application database This process is described in the \"Bootstrap\" section. With the managed stanza in the cluster spec, CloudNativePG now provides full lifecycle management for roles specified in .spec.managed.roles . This feature enables declarative management of existing roles, as well as the creation of new roles if they are not already present in the database. Role creation will occur after the database bootstrapping is complete. An example manifest for a cluster with declarative role management can be found in the file cluster-example-with-roles.yaml . Here is an excerpt from that file: apiVersion: postgresql.cnpg.io/v1 kind: Cluster spec: managed: roles: - name: dante ensure: present comment: Dante Alighieri login: true superuser: false inRoles: - pg_monitor - pg_signal_backend The role specification in .spec.managed.roles adheres to the PostgreSQL structure and naming conventions . Please refer to the API reference for the full list of attributes you can define for each role. A few points are worth noting: The ensure attribute is not part of PostgreSQL. It enables declarative role management to create and remove roles. The two possible values are present (the default) and absent . The inherit attribute is true by default, following PostgreSQL conventions. The connectionLimit attribute defaults to -1, in line with PostgreSQL conventions. Role membership with inRoles defaults to no memberships. Declarative role management ensures that PostgreSQL instances align with the spec. If a user modifies role attributes directly in the database, the CloudNativePG operator will revert those changes during the next reconciliation cycle. Password management The declarative role management feature includes reconciling of role passwords. Passwords are managed in fundamentally different ways in the Kubernetes world and in PostgreSQL, and as a result there are a few things to note. Managed role configurations may optionally specify the name of a Secret where the username and password are stored (encoded in Base64 as is usual in Kubernetes). For example: managed: roles: - name: dante ensure: present [\u2026 snipped \u2026] passwordSecret: name: cluster-example-dante This would assume the existence of a Secret called cluster-example-dante , containing a username and password. The username should match the role we are setting the password for. For example, : apiVersion: v1 data: username: ZGFudGU= password: ZGFudGU= kind: Secret metadata: name: cluster-example-dante labels: cnpg.io/reload: \"true\" type: kubernetes.io/basic-auth If there is no passwordSecret specified for a role, the instance manager will not try to CREATE / ALTER the role with a password. This keeps with PostgreSQL conventions, where ALTER will not update passwords unless directed to with WITH PASSWORD . If a role was initially created with a password, and we would like to set the password to NULL in PostgreSQL, this necessitates being explicit on the part of the user of CloudNativePG. To distinguish \"no password provided in spec\" from \"set the password to NULL\", the field DisablePassword should be used. Imagine we decided we would like to have no password on the dante role in the database. In such case we would specify the following: managed: roles: - name: dante ensure: present [\u2026 snipped \u2026] disablePassword: true NOTE: it is considered an error to set both passwordSecret and disablePassword on a given role. This configuration will be rejected by the validation webhook. Password expiry, VALID UNTIL The VALID UNTIL role attribute in PostgreSQL controls password expiry. Roles created without VALID UNTIL specified get NULL by default in PostgreSQL, meaning that their password will never expire. PostgreSQL uses a timestamp type for VALID UNTIL , which includes support for the value 'infinity' indicating that the password never expires. Please see the PostgreSQL documentation for reference. With declarative role management, the validUntil attribute for managed roles controls password expiry. validUntil can only take: a Kubernetes timestamp, or be omitted (defaulting to null ) In the first case, the given validUntil timestamp will be set in the database as the VALID UNTIL attribute of the role. In the second case (omitted validUntil ) the operator will ensure password never expires, mirroring the behavior of PostgreSQL. Specifically: in case of new role, it will omit the VALID UNTIL clause in the role creation statement in case of existing role, it will set VALID UNTIL to infinity if VALID UNTIL was not set to NULL in the database (this is due to PostgreSQL not allowing VALID UNTIL NULL in the ALTER ROLE SQL statement) Warning New roles created without passwordSecret will have a NULL password inside PostgreSQL. Password hashed You can also provide pre-encrypted passwords by specifying the password in MD5/SCRAM-SHA-256 hash format: kind: Secret type: kubernetes.io/basic-auth metadata: name: cluster-example-cavalcanti labels: cnpg.io/reload: \"true\" apiVersion: v1 stringData: username: cavalcanti password: SCRAM-SHA-256$<iteration count>:<salt>$<StoredKey>:<ServerKey> Unrealizable role configurations In PostgreSQL, in some cases, commands cannot be honored by the database and will be rejected. Please refer to the PostgreSQL documentation on error codes for details. Role operations can produce such fundamental errors. Two examples: We ask PostgreSQL to create the role petrarca as a member of the role (group) poets , but poets does not exist. We ask PostgreSQL to drop the role dante , but the role dante is the owner of the database inferno . These fundamental errors cannot be fixed by the database, nor the CloudNativePG operator, without clarification from the human administrator. The two examples above could be fixed by creating the role poets or dropping the database inferno respectively, but they might have originated due to human error, and in such case, the \"fix\" proposed might be the wrong thing to do. CloudNativePG will record when such fundamental errors occur, and will display them in the cluster Status. Which segues into\u2026 Status of managed roles The Cluster status includes a section for the managed roles' status, as shown below: status: [\u2026snipped\u2026] managedRolesStatus: byStatus: not-managed: - app pending-reconciliation: - dante - petrarca reconciled: - ariosto reserved: - postgres - streaming_replica cannotReconcile: dante: - 'could not perform DELETE on role dante: owner of database inferno' petrarca: - 'could not perform UPDATE_MEMBERSHIPS on role petrarca: role \"poets\" does not exist' Note the special sub-section cannotReconcile for operations the database (and CloudNativePG) cannot honor, and which require human intervention. This section covers roles reserved for operator use and those that are not under declarative management, providing a comprehensive view of the roles in the database instances. The kubectl plugin also shows the status of managed roles in its status sub-command: Managed roles status Status Roles ------ ----- pending-reconciliation petrarca reconciled app,dante reserved postgres,streaming_replica Irreconcilable roles Role Errors ---- ------ petrarca could not perform UPDATE_MEMBERSHIPS on role petrarca: role \"poets\" does not exist Important In terms of backward compatibility, declarative role management is designed to ignore roles that exist in the database but are not included in the spec. The lifecycle of these roles will continue to be managed within PostgreSQL, allowing CloudNativePG users to adopt this feature at their convenience.","title":"PostgreSQL Role Management"},{"location":"declarative_role_management/#postgresql-role-management","text":"From its inception, CloudNativePG has managed the creation of specific roles required in PostgreSQL instances: some reserved users, such as the postgres superuser, streaming_replica and cnpg_pooler_pgbouncer (when the PgBouncer Pooler is used) The application user, set as the low-privilege owner of the application database This process is described in the \"Bootstrap\" section. With the managed stanza in the cluster spec, CloudNativePG now provides full lifecycle management for roles specified in .spec.managed.roles . This feature enables declarative management of existing roles, as well as the creation of new roles if they are not already present in the database. Role creation will occur after the database bootstrapping is complete. An example manifest for a cluster with declarative role management can be found in the file cluster-example-with-roles.yaml . Here is an excerpt from that file: apiVersion: postgresql.cnpg.io/v1 kind: Cluster spec: managed: roles: - name: dante ensure: present comment: Dante Alighieri login: true superuser: false inRoles: - pg_monitor - pg_signal_backend The role specification in .spec.managed.roles adheres to the PostgreSQL structure and naming conventions . Please refer to the API reference for the full list of attributes you can define for each role. A few points are worth noting: The ensure attribute is not part of PostgreSQL. It enables declarative role management to create and remove roles. The two possible values are present (the default) and absent . The inherit attribute is true by default, following PostgreSQL conventions. The connectionLimit attribute defaults to -1, in line with PostgreSQL conventions. Role membership with inRoles defaults to no memberships. Declarative role management ensures that PostgreSQL instances align with the spec. If a user modifies role attributes directly in the database, the CloudNativePG operator will revert those changes during the next reconciliation cycle.","title":"PostgreSQL Role Management"},{"location":"declarative_role_management/#password-management","text":"The declarative role management feature includes reconciling of role passwords. Passwords are managed in fundamentally different ways in the Kubernetes world and in PostgreSQL, and as a result there are a few things to note. Managed role configurations may optionally specify the name of a Secret where the username and password are stored (encoded in Base64 as is usual in Kubernetes). For example: managed: roles: - name: dante ensure: present [\u2026 snipped \u2026] passwordSecret: name: cluster-example-dante This would assume the existence of a Secret called cluster-example-dante , containing a username and password. The username should match the role we are setting the password for. For example, : apiVersion: v1 data: username: ZGFudGU= password: ZGFudGU= kind: Secret metadata: name: cluster-example-dante labels: cnpg.io/reload: \"true\" type: kubernetes.io/basic-auth If there is no passwordSecret specified for a role, the instance manager will not try to CREATE / ALTER the role with a password. This keeps with PostgreSQL conventions, where ALTER will not update passwords unless directed to with WITH PASSWORD . If a role was initially created with a password, and we would like to set the password to NULL in PostgreSQL, this necessitates being explicit on the part of the user of CloudNativePG. To distinguish \"no password provided in spec\" from \"set the password to NULL\", the field DisablePassword should be used. Imagine we decided we would like to have no password on the dante role in the database. In such case we would specify the following: managed: roles: - name: dante ensure: present [\u2026 snipped \u2026] disablePassword: true NOTE: it is considered an error to set both passwordSecret and disablePassword on a given role. This configuration will be rejected by the validation webhook.","title":"Password management"},{"location":"declarative_role_management/#password-expiry-valid-until","text":"The VALID UNTIL role attribute in PostgreSQL controls password expiry. Roles created without VALID UNTIL specified get NULL by default in PostgreSQL, meaning that their password will never expire. PostgreSQL uses a timestamp type for VALID UNTIL , which includes support for the value 'infinity' indicating that the password never expires. Please see the PostgreSQL documentation for reference. With declarative role management, the validUntil attribute for managed roles controls password expiry. validUntil can only take: a Kubernetes timestamp, or be omitted (defaulting to null ) In the first case, the given validUntil timestamp will be set in the database as the VALID UNTIL attribute of the role. In the second case (omitted validUntil ) the operator will ensure password never expires, mirroring the behavior of PostgreSQL. Specifically: in case of new role, it will omit the VALID UNTIL clause in the role creation statement in case of existing role, it will set VALID UNTIL to infinity if VALID UNTIL was not set to NULL in the database (this is due to PostgreSQL not allowing VALID UNTIL NULL in the ALTER ROLE SQL statement) Warning New roles created without passwordSecret will have a NULL password inside PostgreSQL.","title":"Password expiry, VALID UNTIL"},{"location":"declarative_role_management/#password-hashed","text":"You can also provide pre-encrypted passwords by specifying the password in MD5/SCRAM-SHA-256 hash format: kind: Secret type: kubernetes.io/basic-auth metadata: name: cluster-example-cavalcanti labels: cnpg.io/reload: \"true\" apiVersion: v1 stringData: username: cavalcanti password: SCRAM-SHA-256$<iteration count>:<salt>$<StoredKey>:<ServerKey>","title":"Password hashed"},{"location":"declarative_role_management/#unrealizable-role-configurations","text":"In PostgreSQL, in some cases, commands cannot be honored by the database and will be rejected. Please refer to the PostgreSQL documentation on error codes for details. Role operations can produce such fundamental errors. Two examples: We ask PostgreSQL to create the role petrarca as a member of the role (group) poets , but poets does not exist. We ask PostgreSQL to drop the role dante , but the role dante is the owner of the database inferno . These fundamental errors cannot be fixed by the database, nor the CloudNativePG operator, without clarification from the human administrator. The two examples above could be fixed by creating the role poets or dropping the database inferno respectively, but they might have originated due to human error, and in such case, the \"fix\" proposed might be the wrong thing to do. CloudNativePG will record when such fundamental errors occur, and will display them in the cluster Status. Which segues into\u2026","title":"Unrealizable role configurations"},{"location":"declarative_role_management/#status-of-managed-roles","text":"The Cluster status includes a section for the managed roles' status, as shown below: status: [\u2026snipped\u2026] managedRolesStatus: byStatus: not-managed: - app pending-reconciliation: - dante - petrarca reconciled: - ariosto reserved: - postgres - streaming_replica cannotReconcile: dante: - 'could not perform DELETE on role dante: owner of database inferno' petrarca: - 'could not perform UPDATE_MEMBERSHIPS on role petrarca: role \"poets\" does not exist' Note the special sub-section cannotReconcile for operations the database (and CloudNativePG) cannot honor, and which require human intervention. This section covers roles reserved for operator use and those that are not under declarative management, providing a comprehensive view of the roles in the database instances. The kubectl plugin also shows the status of managed roles in its status sub-command: Managed roles status Status Roles ------ ----- pending-reconciliation petrarca reconciled app,dante reserved postgres,streaming_replica Irreconcilable roles Role Errors ---- ------ petrarca could not perform UPDATE_MEMBERSHIPS on role petrarca: role \"poets\" does not exist Important In terms of backward compatibility, declarative role management is designed to ignore roles that exist in the database but are not included in the spec. The lifecycle of these roles will continue to be managed within PostgreSQL, allowing CloudNativePG users to adopt this feature at their convenience.","title":"Status of managed roles"},{"location":"e2e/","text":"End-to-End Tests CloudNativePG is automatically tested after each commit via a suite of End-to-end (E2E) tests (or integration tests) which ensure that the operator correctly deploys and manages PostgreSQL clusters. Kubernetes versions 1.27 through 1.32, and PostgreSQL versions 13 through 17, are tested for each commit, helping detect bugs at an early stage of the development process. For each tested version of Kubernetes and PostgreSQL, a Kubernetes cluster is created using kind , run on the GitHub Actions platform, and the following suite of E2E tests are performed on that cluster: Basic: Installation of the operator Creation of a Cluster Usage of a persistent volume for data storage Service connectivity: Connection via services, including read-only Connection via user-provided server and/or client certificates PgBouncer Self-healing: Failover Switchover Primary endpoint switch in case of failover in less than 10 seconds Primary endpoint switch in case of switchover in less than 20 seconds Recover from a degraded state in less than 60 seconds PVC Deletion Corrupted PVC Backup and Restore: Backup and restore from Volume Snapshots Backup and ScheduledBackups execution using Barman Cloud on S3 Backup and ScheduledBackups execution using Barman Cloud on Azure blob storage Restore from backup using Barman Cloud on S3 Restore from backup using Barman Cloud on Azure blob storage Point-in-time recovery (PITR) on Azure, S3 storage Wal-Restore (sequential / parallel) Operator: Operator Deployment Operator configuration via ConfigMap Operator pod deletion Operator pod eviction Operator upgrade Operator High Availability Observability: Metrics collection PgBouncer Metrics JSON log format Replication: Replication Slots Synchronous replication Scale-up and scale-down of a Cluster Logical replication via declarative Publication / Subscription Replica clusters Bootstrapping a replica cluster from backup Bootstrapping a replica cluster via streaming Bootstrapping via volume snapshots Detaching a replica cluster Plugin: Cluster Hibernation using CNPG plugin Fencing Creation of a connection certificate Postgres Configuration: Manage PostgreSQL configuration changes Rolling updates when changing PostgreSQL images Rolling updates when changing ImageCatalog/ClusterImageCatalog images Rolling updates on hot standby sensitive parameter changes Database initialization via InitDB Pod Scheduling: Tolerations and taints Pod affinity using NodeSelector Rolling updates on PodSpec drift detection In-place upgrades Multi-Arch availability Cluster Metadata: ConfigMap for Cluster Labels and Annotations Object metadata Recovery: Data corruption pg_basebackup Importing Databases: Microservice approach Monolith approach Storage: Storage expansion Dedicated PG_WAL persistent volume Security: AppArmor annotation propagation. Executed only on Azure environment Maintenance: Node Drain with maintenance window Node Drain with single-instance cluster with/without Pod Disruption Budgets Hibernation Declarative hibernation / rehydration Volume snapshots Backup/restore for cold and online snapshots Point-in-time recovery (PITR) for cold and online snapshots Backups via plugin for cold and online snapshots Declarative backups for cold and online snapshots Managed Roles Creation and update of managed roles Password maintenance using Kubernetes secrets Tablespaces Declarative creation of tablespaces Declarative creation of temporary tablespaces Backup / recovery from object storage Backup / recovery from volume snapshots Declarative databases Declarative creation of databases with default (retain) reclaim policy Declarative creation of databases with delete reclaim policy Major version upgrade Upgrade to the latest major version","title":"End-to-End Tests"},{"location":"e2e/#end-to-end-tests","text":"CloudNativePG is automatically tested after each commit via a suite of End-to-end (E2E) tests (or integration tests) which ensure that the operator correctly deploys and manages PostgreSQL clusters. Kubernetes versions 1.27 through 1.32, and PostgreSQL versions 13 through 17, are tested for each commit, helping detect bugs at an early stage of the development process. For each tested version of Kubernetes and PostgreSQL, a Kubernetes cluster is created using kind , run on the GitHub Actions platform, and the following suite of E2E tests are performed on that cluster: Basic: Installation of the operator Creation of a Cluster Usage of a persistent volume for data storage Service connectivity: Connection via services, including read-only Connection via user-provided server and/or client certificates PgBouncer Self-healing: Failover Switchover Primary endpoint switch in case of failover in less than 10 seconds Primary endpoint switch in case of switchover in less than 20 seconds Recover from a degraded state in less than 60 seconds PVC Deletion Corrupted PVC Backup and Restore: Backup and restore from Volume Snapshots Backup and ScheduledBackups execution using Barman Cloud on S3 Backup and ScheduledBackups execution using Barman Cloud on Azure blob storage Restore from backup using Barman Cloud on S3 Restore from backup using Barman Cloud on Azure blob storage Point-in-time recovery (PITR) on Azure, S3 storage Wal-Restore (sequential / parallel) Operator: Operator Deployment Operator configuration via ConfigMap Operator pod deletion Operator pod eviction Operator upgrade Operator High Availability Observability: Metrics collection PgBouncer Metrics JSON log format Replication: Replication Slots Synchronous replication Scale-up and scale-down of a Cluster Logical replication via declarative Publication / Subscription Replica clusters Bootstrapping a replica cluster from backup Bootstrapping a replica cluster via streaming Bootstrapping via volume snapshots Detaching a replica cluster Plugin: Cluster Hibernation using CNPG plugin Fencing Creation of a connection certificate Postgres Configuration: Manage PostgreSQL configuration changes Rolling updates when changing PostgreSQL images Rolling updates when changing ImageCatalog/ClusterImageCatalog images Rolling updates on hot standby sensitive parameter changes Database initialization via InitDB Pod Scheduling: Tolerations and taints Pod affinity using NodeSelector Rolling updates on PodSpec drift detection In-place upgrades Multi-Arch availability Cluster Metadata: ConfigMap for Cluster Labels and Annotations Object metadata Recovery: Data corruption pg_basebackup Importing Databases: Microservice approach Monolith approach Storage: Storage expansion Dedicated PG_WAL persistent volume Security: AppArmor annotation propagation. Executed only on Azure environment Maintenance: Node Drain with maintenance window Node Drain with single-instance cluster with/without Pod Disruption Budgets Hibernation Declarative hibernation / rehydration Volume snapshots Backup/restore for cold and online snapshots Point-in-time recovery (PITR) for cold and online snapshots Backups via plugin for cold and online snapshots Declarative backups for cold and online snapshots Managed Roles Creation and update of managed roles Password maintenance using Kubernetes secrets Tablespaces Declarative creation of tablespaces Declarative creation of temporary tablespaces Backup / recovery from object storage Backup / recovery from volume snapshots Declarative databases Declarative creation of databases with default (retain) reclaim policy Declarative creation of databases with delete reclaim policy Major version upgrade Upgrade to the latest major version","title":"End-to-End Tests"},{"location":"failover/","text":"Automated failover In the case of unexpected errors on the primary for longer than the .spec.failoverDelay (by default 0 seconds), the cluster will go into failover mode . This may happen, for example, when: The primary pod has a disk failure The primary pod is deleted The postgres container on the primary has any kind of sustained failure In the failover scenario, the primary cannot be assumed to be working properly. After cases like the ones above, the readiness probe for the primary pod will start failing. This will be picked up in the controller's reconciliation loop. The controller will initiate the failover process, in two steps: First, it will mark the TargetPrimary as pending . This change of state will force the primary pod to shutdown, to ensure the WAL receivers on the replicas will stop. The cluster will be marked in failover phase (\"Failing over\"). Once all WAL receivers are stopped, there will be a leader election, and a new primary will be named. The chosen instance will initiate promotion to primary, and, after this is completed, the cluster will resume normal operations. Meanwhile, the former primary pod will restart, detect that it is no longer the primary, and become a replica node. Important The two-phase procedure helps ensure the WAL receivers can stop in an orderly fashion, and that the failing primary will not start streaming WALs again upon restart. These safeguards prevent timeline discrepancies between the new primary and the replicas. During the time the failing primary is being shut down: It will first try a PostgreSQL's fast shutdown with .spec.switchoverDelay seconds as timeout. This graceful shutdown will attempt to archive pending WALs. If the fast shutdown fails, or its timeout is exceeded, a PostgreSQL's immediate shutdown is initiated. Info \"Fast\" mode does not wait for PostgreSQL clients to disconnect and will terminate an online backup in progress. All active transactions are rolled back and clients are forcibly disconnected, then the server is shut down. \"Immediate\" mode will abort all PostgreSQL server processes immediately, without a clean shutdown. RTO and RPO impact Failover may result in the service being impacted ( RTO ) and/or data being lost ( RPO ): During the time when the primary has started to fail, and before the controller starts failover procedures, queries in transit, WAL writes, checkpoints and similar operations, may fail. Once the fast shutdown command has been issued, the cluster will no longer accept connections, so service will be impacted but no data will be lost. If the fast shutdown fails, the immediate shutdown will stop any pending processes, including WAL writing. Data may be lost. During the time the primary is shutting down and a new primary hasn't yet started, the cluster will operate without a primary and thus be impaired - but with no data loss. Note The timeout that controls fast shutdown is set by .spec.switchoverDelay , as in the case of a switchover. Increasing the time for fast shutdown is safer from an RPO point of view, but possibly delays the return to normal operation - negatively affecting RTO. Warning As already mentioned in the \"Instance Manager\" section when explaining the switchover process, the .spec.switchoverDelay option affects the RPO and RTO of your PostgreSQL database. Setting it to a low value, might favor RTO over RPO but lead to data loss at cluster level and/or backup level. On the contrary, setting it to a high value, might remove the risk of data loss while leaving the cluster without an active primary for a longer time during the switchover. Delayed failover As anticipated above, the .spec.failoverDelay option allows you to delay the start of the failover procedure by a number of seconds after the primary has been detected to be unhealthy. By default, this setting is set to 0 , triggering the failover procedure immediately. Sometimes failing over to a new primary can be more disruptive than waiting for the primary to come back online. This is especially true of network disruptions where multiple tiers are affected (i.e., downstream logical subscribers) or when the time to perform the failover is longer than the expected outage. Enabling a new configuration option to delay failover provides a mechanism to prevent premature failover for short-lived network or node instability. Failover Quorum (Quorum-based Failover) Warning Failover quorum is an experimental feature introduced in version 1.27.0. Use with caution in production environments. Failover quorum is a mechanism that enhances data durability and safety during failover events in CloudNativePG-managed PostgreSQL clusters. Quorum-based failover allows the controller to determine whether to promote a replica to primary based on the state of a quorum of replicas. This is useful when stronger data durability is required than the one offered by synchronous replication and default automated failover procedures. When synchronous replication is not enabled, some data loss is expected and accepted during failover, as a replica may lag behind the primary when promoted. With synchronous replication enabled, the guarantee is that the application will not receive explicit acknowledgment of the successful commit of a transaction until the WAL data is known to be safely received by all required synchronous standbys. This is not enough to guarantee that the operator is able to promote the most advanced replica. For example, in a three-node cluster with synchronous replication set to ANY 1 (...) , data is written to the primary and one standby before a commit is acknowledged. If both the primary and the aligned standby become unavailable (such as during a network partition), the remaining replica may not have the latest data. Promoting it could lose some data that the application considered committed. Quorum-based failover addresses this risk by ensuring that failover only occurs if the operator can confirm the presence of all synchronously committed data in the instance to promote, and it does not occur otherwise. This feature allows users to choose their preferred trade-off between data durability and data availability. Failover quorum can be enabled by setting the annotation alpha.cnpg.io/failoverQuorum=\"true\" in the Cluster resource. Info When this feature is out of the experimental phase, the annotation alpha.cnpg.io/failoverQuorum will be replaced by a configuration option in the Cluster resource. How it works Before promoting a replica to primary, the operator performs a quorum check, following the principles of the Dynamo R + W > N consistency model 1 . In the quorum failover, these values assume the following meaning: R is the number of promotable replicas (read quorum); W is the number of replicas that must acknowledge the write before the COMMIT is returned to the client (write quorum); N is the total number of potentially synchronous replicas; Promotable replicas are replicas that have these properties: are part of the cluster; are able to report their state to the operator; are potentially synchronous; If R + W > N , then we can be sure that among the promotable replicas there is at least one that has confirmed all the synchronous commits, and we can safely promote it to primary. If this is not the case, the controller will not promote any replica to primary, and will wait for the situation to change. Users can force a promotion of a replica to primary through the kubectl cnpg promote command even if the quorum check is failing. Warning Manual promotion should only be used as a last resort. Before proceeding, make sure you fully understand the risk of data loss and carefully consider the consequences of prioritizing the resumption of write workloads for your applications. An additional CRD is used to track the quorum state of the cluster. A Cluster with the quorum failover enabled will have a FailoverQuorum resource with the same name as the Cluster resource. The FailoverQuorum CR is created by the controller when the quorum failover is enabled, and it is updated by the primary instance during its reconciliation loop, and read by the operator during quorum checks. It is used to track the latest known configuration of the synchronous replication. Important Users should not modify the FailoverQuorum resource directly. During PostgreSQL configuration changes, when it is not possible to determine the configuration, the FailoverQuorum resource will be reset, preventing any failover until the new configuration is applied. The FailoverQuorum resource works in conjunction with PostgreSQL synchronous replication. Warning There is no guarantee that COMMIT operations returned to the client but that have not been performed synchronously, such as those made explicitly disabling synchronous replication with SET synchronous_commit TO local , will be present on a promoted replica. Quorum Failover Example Scenarios In the following scenarios, R is the number of promotable replicas, W is the number of replicas that must acknowledge a write before commit, and N is the total number of potentially synchronous replicas. The \"Failover\" column indicates whether failover is allowed under quorum failover rules. Scenario 1: Three-node cluster, failing pod(s) A cluster with instances: 3 , synchronous.number=1 , and dataDurability=required . If only the primary fails, two promotable replicas remain (R=2). Since R + W > N (2 + 1 > 2), failover is allowed and safe. If both the primary and one replica fail, only one promotable replica remains (R=1). Since R + W = N (1 + 1 = 2), failover is not allowed to prevent possible data loss. R W N Failover 2 1 2 \u2705 1 1 2 \u274c Scenario 2: Three-node cluster, network partition A cluster with instances: 3 , synchronous.number: 1 , and dataDurability: required experiences a network partition. If the operator can communicate with the primary, no failover occurs. The cluster can be impacted if the primary cannot reach any standby, since it won't commit transactions due to synchronous replication requirements. If the operator cannot reach the primary but can reach both replicas (R=2), failover is allowed. If the operator can reach only one replica (R=1), failover is not allowed, as the synchronous one may be the other one. R W N Failover 2 1 2 \u2705 1 1 2 \u274c Scenario 3: Five-node cluster, network partition A cluster with instances: 5 , synchronous.number=2 , and dataDurability=required experiences a network partition. If the operator can communicate with the primary, no failover occurs. The cluster can be impacted if the primary cannot reach at least two standbys, as since it won't commit transactions due to synchronous replication requirements. If the operator cannot reach the primary but can reach at least three replicas (R=3), failover is allowed. If the operator can reach only two replicas (R=2), failover is not allowed, as the synchronous one may be the other one. R W N Failover 3 2 4 \u2705 2 2 4 \u274c Scenario 4: Three-node cluster with remote synchronous replicas A cluster with instances: 3 and remote synchronous replicas defined in standbyNamesPre or standbyNamesPost . We assume that the primary is failing. This scenario requires an important consideration. Replicas listed in standbyNamesPre or standbyNamesPost are not counted in R (they cannot be promoted), but are included in N (they may have received synchronous writes). So, if synchronous.number <= len(standbyNamesPre) + len(standbyNamesPost) , failover is not possible, as no local replica can be guaranteed to have the required data. The operator prevents such configurations during validation, but some invalid configurations are shown below for clarity. Example configurations: Configuration #1 (valid): instances: 3 postgresql: synchronous: method: any number: 2 standbyNamesPre: - angus In this configuration, when the primary fails, R = 2 (the local replicas), W = 2 , and N = 3 (2 local replicas + 1 remote), allowing failover. In case of an additional replica failing ( R = 1 ) failover is not allowed. R W N Failover 3 2 4 \u2705 2 2 4 \u274c Configuration #2 (invalid): instances: 3 postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus In this configuration, R = 2 (the local replicas), W = 1 , and N = 3 (2 local replicas + 1 remote). Failover is not possible in this setup, so quorum failover can not be enabled with this configuration. R W N Failover 1 1 2 \u274c Configuration #3 (invalid): instances: 3 postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 0 standbyNamesPre: - angus - malcolm In this configuration, R = 0 (the local replicas), W = 1 , and N = 2 (0 local replicas + 2 remote). Failover is not possible in this setup, so quorum failover can not be enabled with this configuration. R W N Failover 0 1 2 \u274c Scenario 5: Three-node cluster, preferred data durability, network partition Consider a cluster with instances: 3 , synchronous.number=1 , and dataDurability=preferred that experiences a network partition. If the operator can communicate with both the primary and the API server, the primary continues to operate, removing unreachable standbys from the synchronous_standby_names set. If the primary cannot reach the operator or API server, a quorum check is performed. The FailoverQuorum status cannot have changed, as the primary cannot have received new configuration. If the operator can reach both replicas, failover is allowed ( R=2 ). If only one replica is reachable ( R=1 ), failover is not allowed. R W N Failover 2 1 2 \u2705 1 1 2 \u274c Dynamo: Amazon\u2019s highly available key-value store \u21a9","title":"Automated failover"},{"location":"failover/#automated-failover","text":"In the case of unexpected errors on the primary for longer than the .spec.failoverDelay (by default 0 seconds), the cluster will go into failover mode . This may happen, for example, when: The primary pod has a disk failure The primary pod is deleted The postgres container on the primary has any kind of sustained failure In the failover scenario, the primary cannot be assumed to be working properly. After cases like the ones above, the readiness probe for the primary pod will start failing. This will be picked up in the controller's reconciliation loop. The controller will initiate the failover process, in two steps: First, it will mark the TargetPrimary as pending . This change of state will force the primary pod to shutdown, to ensure the WAL receivers on the replicas will stop. The cluster will be marked in failover phase (\"Failing over\"). Once all WAL receivers are stopped, there will be a leader election, and a new primary will be named. The chosen instance will initiate promotion to primary, and, after this is completed, the cluster will resume normal operations. Meanwhile, the former primary pod will restart, detect that it is no longer the primary, and become a replica node. Important The two-phase procedure helps ensure the WAL receivers can stop in an orderly fashion, and that the failing primary will not start streaming WALs again upon restart. These safeguards prevent timeline discrepancies between the new primary and the replicas. During the time the failing primary is being shut down: It will first try a PostgreSQL's fast shutdown with .spec.switchoverDelay seconds as timeout. This graceful shutdown will attempt to archive pending WALs. If the fast shutdown fails, or its timeout is exceeded, a PostgreSQL's immediate shutdown is initiated. Info \"Fast\" mode does not wait for PostgreSQL clients to disconnect and will terminate an online backup in progress. All active transactions are rolled back and clients are forcibly disconnected, then the server is shut down. \"Immediate\" mode will abort all PostgreSQL server processes immediately, without a clean shutdown.","title":"Automated failover"},{"location":"failover/#rto-and-rpo-impact","text":"Failover may result in the service being impacted ( RTO ) and/or data being lost ( RPO ): During the time when the primary has started to fail, and before the controller starts failover procedures, queries in transit, WAL writes, checkpoints and similar operations, may fail. Once the fast shutdown command has been issued, the cluster will no longer accept connections, so service will be impacted but no data will be lost. If the fast shutdown fails, the immediate shutdown will stop any pending processes, including WAL writing. Data may be lost. During the time the primary is shutting down and a new primary hasn't yet started, the cluster will operate without a primary and thus be impaired - but with no data loss. Note The timeout that controls fast shutdown is set by .spec.switchoverDelay , as in the case of a switchover. Increasing the time for fast shutdown is safer from an RPO point of view, but possibly delays the return to normal operation - negatively affecting RTO. Warning As already mentioned in the \"Instance Manager\" section when explaining the switchover process, the .spec.switchoverDelay option affects the RPO and RTO of your PostgreSQL database. Setting it to a low value, might favor RTO over RPO but lead to data loss at cluster level and/or backup level. On the contrary, setting it to a high value, might remove the risk of data loss while leaving the cluster without an active primary for a longer time during the switchover.","title":"RTO and RPO impact"},{"location":"failover/#delayed-failover","text":"As anticipated above, the .spec.failoverDelay option allows you to delay the start of the failover procedure by a number of seconds after the primary has been detected to be unhealthy. By default, this setting is set to 0 , triggering the failover procedure immediately. Sometimes failing over to a new primary can be more disruptive than waiting for the primary to come back online. This is especially true of network disruptions where multiple tiers are affected (i.e., downstream logical subscribers) or when the time to perform the failover is longer than the expected outage. Enabling a new configuration option to delay failover provides a mechanism to prevent premature failover for short-lived network or node instability.","title":"Delayed failover"},{"location":"failover/#failover-quorum-quorum-based-failover","text":"Warning Failover quorum is an experimental feature introduced in version 1.27.0. Use with caution in production environments. Failover quorum is a mechanism that enhances data durability and safety during failover events in CloudNativePG-managed PostgreSQL clusters. Quorum-based failover allows the controller to determine whether to promote a replica to primary based on the state of a quorum of replicas. This is useful when stronger data durability is required than the one offered by synchronous replication and default automated failover procedures. When synchronous replication is not enabled, some data loss is expected and accepted during failover, as a replica may lag behind the primary when promoted. With synchronous replication enabled, the guarantee is that the application will not receive explicit acknowledgment of the successful commit of a transaction until the WAL data is known to be safely received by all required synchronous standbys. This is not enough to guarantee that the operator is able to promote the most advanced replica. For example, in a three-node cluster with synchronous replication set to ANY 1 (...) , data is written to the primary and one standby before a commit is acknowledged. If both the primary and the aligned standby become unavailable (such as during a network partition), the remaining replica may not have the latest data. Promoting it could lose some data that the application considered committed. Quorum-based failover addresses this risk by ensuring that failover only occurs if the operator can confirm the presence of all synchronously committed data in the instance to promote, and it does not occur otherwise. This feature allows users to choose their preferred trade-off between data durability and data availability. Failover quorum can be enabled by setting the annotation alpha.cnpg.io/failoverQuorum=\"true\" in the Cluster resource. Info When this feature is out of the experimental phase, the annotation alpha.cnpg.io/failoverQuorum will be replaced by a configuration option in the Cluster resource.","title":"Failover Quorum (Quorum-based Failover)"},{"location":"failover/#how-it-works","text":"Before promoting a replica to primary, the operator performs a quorum check, following the principles of the Dynamo R + W > N consistency model 1 . In the quorum failover, these values assume the following meaning: R is the number of promotable replicas (read quorum); W is the number of replicas that must acknowledge the write before the COMMIT is returned to the client (write quorum); N is the total number of potentially synchronous replicas; Promotable replicas are replicas that have these properties: are part of the cluster; are able to report their state to the operator; are potentially synchronous; If R + W > N , then we can be sure that among the promotable replicas there is at least one that has confirmed all the synchronous commits, and we can safely promote it to primary. If this is not the case, the controller will not promote any replica to primary, and will wait for the situation to change. Users can force a promotion of a replica to primary through the kubectl cnpg promote command even if the quorum check is failing. Warning Manual promotion should only be used as a last resort. Before proceeding, make sure you fully understand the risk of data loss and carefully consider the consequences of prioritizing the resumption of write workloads for your applications. An additional CRD is used to track the quorum state of the cluster. A Cluster with the quorum failover enabled will have a FailoverQuorum resource with the same name as the Cluster resource. The FailoverQuorum CR is created by the controller when the quorum failover is enabled, and it is updated by the primary instance during its reconciliation loop, and read by the operator during quorum checks. It is used to track the latest known configuration of the synchronous replication. Important Users should not modify the FailoverQuorum resource directly. During PostgreSQL configuration changes, when it is not possible to determine the configuration, the FailoverQuorum resource will be reset, preventing any failover until the new configuration is applied. The FailoverQuorum resource works in conjunction with PostgreSQL synchronous replication. Warning There is no guarantee that COMMIT operations returned to the client but that have not been performed synchronously, such as those made explicitly disabling synchronous replication with SET synchronous_commit TO local , will be present on a promoted replica.","title":"How it works"},{"location":"failover/#quorum-failover-example-scenarios","text":"In the following scenarios, R is the number of promotable replicas, W is the number of replicas that must acknowledge a write before commit, and N is the total number of potentially synchronous replicas. The \"Failover\" column indicates whether failover is allowed under quorum failover rules.","title":"Quorum Failover Example Scenarios"},{"location":"failover/#scenario-1-three-node-cluster-failing-pods","text":"A cluster with instances: 3 , synchronous.number=1 , and dataDurability=required . If only the primary fails, two promotable replicas remain (R=2). Since R + W > N (2 + 1 > 2), failover is allowed and safe. If both the primary and one replica fail, only one promotable replica remains (R=1). Since R + W = N (1 + 1 = 2), failover is not allowed to prevent possible data loss. R W N Failover 2 1 2 \u2705 1 1 2 \u274c","title":"Scenario 1: Three-node cluster, failing pod(s)"},{"location":"failover/#scenario-2-three-node-cluster-network-partition","text":"A cluster with instances: 3 , synchronous.number: 1 , and dataDurability: required experiences a network partition. If the operator can communicate with the primary, no failover occurs. The cluster can be impacted if the primary cannot reach any standby, since it won't commit transactions due to synchronous replication requirements. If the operator cannot reach the primary but can reach both replicas (R=2), failover is allowed. If the operator can reach only one replica (R=1), failover is not allowed, as the synchronous one may be the other one. R W N Failover 2 1 2 \u2705 1 1 2 \u274c","title":"Scenario 2: Three-node cluster, network partition"},{"location":"failover/#scenario-3-five-node-cluster-network-partition","text":"A cluster with instances: 5 , synchronous.number=2 , and dataDurability=required experiences a network partition. If the operator can communicate with the primary, no failover occurs. The cluster can be impacted if the primary cannot reach at least two standbys, as since it won't commit transactions due to synchronous replication requirements. If the operator cannot reach the primary but can reach at least three replicas (R=3), failover is allowed. If the operator can reach only two replicas (R=2), failover is not allowed, as the synchronous one may be the other one. R W N Failover 3 2 4 \u2705 2 2 4 \u274c","title":"Scenario 3: Five-node cluster, network partition"},{"location":"failover/#scenario-4-three-node-cluster-with-remote-synchronous-replicas","text":"A cluster with instances: 3 and remote synchronous replicas defined in standbyNamesPre or standbyNamesPost . We assume that the primary is failing. This scenario requires an important consideration. Replicas listed in standbyNamesPre or standbyNamesPost are not counted in R (they cannot be promoted), but are included in N (they may have received synchronous writes). So, if synchronous.number <= len(standbyNamesPre) + len(standbyNamesPost) , failover is not possible, as no local replica can be guaranteed to have the required data. The operator prevents such configurations during validation, but some invalid configurations are shown below for clarity. Example configurations: Configuration #1 (valid): instances: 3 postgresql: synchronous: method: any number: 2 standbyNamesPre: - angus In this configuration, when the primary fails, R = 2 (the local replicas), W = 2 , and N = 3 (2 local replicas + 1 remote), allowing failover. In case of an additional replica failing ( R = 1 ) failover is not allowed. R W N Failover 3 2 4 \u2705 2 2 4 \u274c Configuration #2 (invalid): instances: 3 postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus In this configuration, R = 2 (the local replicas), W = 1 , and N = 3 (2 local replicas + 1 remote). Failover is not possible in this setup, so quorum failover can not be enabled with this configuration. R W N Failover 1 1 2 \u274c Configuration #3 (invalid): instances: 3 postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 0 standbyNamesPre: - angus - malcolm In this configuration, R = 0 (the local replicas), W = 1 , and N = 2 (0 local replicas + 2 remote). Failover is not possible in this setup, so quorum failover can not be enabled with this configuration. R W N Failover 0 1 2 \u274c","title":"Scenario 4: Three-node cluster with remote synchronous replicas"},{"location":"failover/#scenario-5-three-node-cluster-preferred-data-durability-network-partition","text":"Consider a cluster with instances: 3 , synchronous.number=1 , and dataDurability=preferred that experiences a network partition. If the operator can communicate with both the primary and the API server, the primary continues to operate, removing unreachable standbys from the synchronous_standby_names set. If the primary cannot reach the operator or API server, a quorum check is performed. The FailoverQuorum status cannot have changed, as the primary cannot have received new configuration. If the operator can reach both replicas, failover is allowed ( R=2 ). If only one replica is reachable ( R=1 ), failover is not allowed. R W N Failover 2 1 2 \u2705 1 1 2 \u274c Dynamo: Amazon\u2019s highly available key-value store \u21a9","title":"Scenario 5: Three-node cluster, preferred data durability, network partition"},{"location":"failure_modes/","text":"Failure Modes Note In previous versions of CloudNativePG, this page included specific failure scenarios. Since these largely follow standard Kubernetes behavior, we have streamlined the content to avoid duplication of information that belongs to the underlying Kubernetes stack and is not specific to CloudNativePG. CloudNativePG adheres to standard Kubernetes principles for self-healing and high availability. We assume familiarity with core Kubernetes concepts such as storage classes, PVCs, nodes, and Pods. For CloudNativePG-specific details, refer to the \"Postgres Instance Manager\" section , which covers startup, liveness, and readiness probes, as well as the self-healing section below. Important If you are running CloudNativePG in production, we strongly recommend seeking professional support . Self-Healing Primary Failure If the primary Pod fails: The operator promotes the most up-to-date standby with the lowest replication lag. The -rw service is updated to point to the new primary. The failed Pod is removed from the -r and -rw services. Standby Pods begin replicating from the new primary. The former primary uses pg_rewind to re-synchronize if its PVC is available; otherwise, a new standby is created from a backup of the new primary. Standby Failure If a standby Pod fails: It is removed from the -r and -ro services. The Pod is restarted using its PVC if available; otherwise, a new Pod is created from a backup of the current primary. Once ready, the Pod is re-added to the -r and -ro services. Manual Intervention For failure scenarios not covered by automated recovery, manual intervention may be required. Important Do not perform manual operations without professional support . Disabling Reconciliation To temporarily disable the reconciliation loop for a PostgreSQL cluster, use the cnpg.io/reconciliationLoop annotation: metadata: name: cluster-example-no-reconcile annotations: cnpg.io/reconciliationLoop: \"disabled\" spec: # ... Use this annotation with extreme caution and only during emergency operations. Warning This annotation should be removed as soon as the issue is resolved. Leaving it in place prevents the operator from executing self-healing actions, including failover.","title":"Failure Modes"},{"location":"failure_modes/#failure-modes","text":"Note In previous versions of CloudNativePG, this page included specific failure scenarios. Since these largely follow standard Kubernetes behavior, we have streamlined the content to avoid duplication of information that belongs to the underlying Kubernetes stack and is not specific to CloudNativePG. CloudNativePG adheres to standard Kubernetes principles for self-healing and high availability. We assume familiarity with core Kubernetes concepts such as storage classes, PVCs, nodes, and Pods. For CloudNativePG-specific details, refer to the \"Postgres Instance Manager\" section , which covers startup, liveness, and readiness probes, as well as the self-healing section below. Important If you are running CloudNativePG in production, we strongly recommend seeking professional support .","title":"Failure Modes"},{"location":"failure_modes/#self-healing","text":"","title":"Self-Healing"},{"location":"failure_modes/#primary-failure","text":"If the primary Pod fails: The operator promotes the most up-to-date standby with the lowest replication lag. The -rw service is updated to point to the new primary. The failed Pod is removed from the -r and -rw services. Standby Pods begin replicating from the new primary. The former primary uses pg_rewind to re-synchronize if its PVC is available; otherwise, a new standby is created from a backup of the new primary.","title":"Primary Failure"},{"location":"failure_modes/#standby-failure","text":"If a standby Pod fails: It is removed from the -r and -ro services. The Pod is restarted using its PVC if available; otherwise, a new Pod is created from a backup of the current primary. Once ready, the Pod is re-added to the -r and -ro services.","title":"Standby Failure"},{"location":"failure_modes/#manual-intervention","text":"For failure scenarios not covered by automated recovery, manual intervention may be required. Important Do not perform manual operations without professional support .","title":"Manual Intervention"},{"location":"failure_modes/#disabling-reconciliation","text":"To temporarily disable the reconciliation loop for a PostgreSQL cluster, use the cnpg.io/reconciliationLoop annotation: metadata: name: cluster-example-no-reconcile annotations: cnpg.io/reconciliationLoop: \"disabled\" spec: # ... Use this annotation with extreme caution and only during emergency operations. Warning This annotation should be removed as soon as the issue is resolved. Leaving it in place prevents the operator from executing self-healing actions, including failover.","title":"Disabling Reconciliation"},{"location":"faq/","text":"Frequently Asked Questions (FAQ) Running PostgreSQL in Kubernetes Everyone knows that stateful workloads like PostgreSQL cannot run in Kubernetes. Why do you say the contrary? An independent research survey commissioned by the Data on Kubernetes Community in September 2021 revealed that half of the respondents run most of their production workloads on Kubernetes. 90% of them believe that Kubernetes is ready for stateful workloads, and 70% of them run databases in production. Databases like Postgres. However, according to them, significant challenges remain, such as the knowledge gap (Kubernetes and Cloud Native, in general, have a steep learning curve) and the quality of Kubernetes operators. The latter is the reason why we believe that an operator like CloudNativePG highly contributes to the success of your project. For database fanatics like us, a real game-changer has been the introduction of the support for local persistent volumes in Kubernetes 1.14 in April 2019 . CloudNativePG is built on immutable application containers. What does it mean? According to the microservice architectural pattern, a container is designed to run a single application or process. As a result, such container images are built to run the main application as the single entry point (the so-called PID 1 process). In Kubernetes terms, the application is referred to as workload. Workloads can be stateless like a web application server or stateful like a database. Mapping this concept to PostgreSQL, an immutable application container is a single \"postgres\" process that is running and tied to a single and specific version - the one in the immutable container image. No other processes such as SSH or systemd, or syslog are allowed. Immutable Application Containers are in contrast with Mutable System Containers, which are still a very common way to interpret and use containers. Immutable means that a container won't be modified during its life: no updates, no patches, no configuration changes. If you must update the application code or apply a patch, you build a new image and redeploy it. Immutability makes deployments safer and more repeatable. For more information, please refer to \"Why EDB chose immutable application containers\" . What does Cloud Native mean? The Cloud Native Computing Foundation defines the term \" Cloud Native \". However, since the start of the Cloud Native PostgreSQL/CloudNativePG operator at 2ndQuadrant, the development team has been interpreting Cloud Native as three main concepts: An existing, healthy, genuine, and prosperous DevOps culture, founded on people, as well as principles and processes, which enables teams and organizations (as teams of teams) to continuously change so to innovate and accelerate the delivery of outcomes and produce value for the business in safer, more efficient, and more engaging ways A microservice architecture that is based on Immutable Application Containers A way to manage and orchestrate these containers, such as Kubernetes Currently, the standard de facto for container orchestration is Kubernetes, which automates the deployment, administration and scalability of Cloud Native Applications. Another definition of Cloud Native that resonates with us is the one defined by Ibryam and Hu\u00df in \"Kubernetes Patterns\", published by O'Reilly : Principles, Patterns, Tools to automate containerized microservices at scale Can I run CloudNativePG on bare metal Kubernetes? Yes, definitely. You can run Kubernetes on bare metal. And you can dedicate one or more physical worker nodes with locally attached storage to PostgreSQL workloads for maximum and predictable I/O performance. The actual Cloud Native PostgreSQL project, from which CloudNativePG originated, was born after a pilot project in 2019 that benchmarked storage and PostgreSQL on the same bare metal server, first directly in Linux, and then inside Kubernetes. As expected, the experiment showed only negligible performance impact introduced by the container running in Kubernetes through local persistent volumes, allowing the Cloud Native initiative to continue. Why should I use PostgreSQL replication instead of file system replication? Please read the \"Architecture: Synchronizing the state\" section. Why should I use an operator instead of running PostgreSQL as a container? The most basic approach to running PostgreSQL in Kubernetes is to have a pod, which is the smallest unit of deployment in Kubernetes, running a Postgres container with no replica. The volume hosting the Postgres data directory is mounted on the pod, and it usually resides on network storage. In this case, Kubernetes restarts the pod in case of a problem or moves it to another Kubernetes node. The most sophisticated approach is to run PostgreSQL using an operator. An operator is an extension of the Kubernetes controller and defines how a complex application works in business continuity contexts. The operator pattern is currently state of the art in Kubernetes for this purpose. An operator simulates the work of a human operator in an automated and programmatic way. Postgres is a complex application, and an operator not only needs to deploy a cluster (the first step), but also properly react after unexpected events. The typical example is that of a failover. An operator relies on Kubernetes for capabilities like self-healing, scalability, replication, high availability, backup, recovery, updates, access, resource control, storage management, and so on. It also facilitates the integration of a PostgreSQL cluster in the log management and monitoring infrastructure. CloudNativePG enables the definition of the desired state of a PostgreSQL cluster via declarative configuration. Kubernetes continuously makes sure that the current state of the infrastructure matches the desired one through reconciliation loops initiated by the Kubernetes controller. If the desired state and the actual state don't match, reconciliation loops trigger self-healing procedures. That's where an operator like CloudNativePG comes into play. Are there any other operators for Postgres out there? Yes, of course. And our advice is that you look at all of them and compare them with CloudNativePG before making your decision. You will see that most of these operators use an external failover management tool (Patroni or similar) and rely on StatefulSets. Here is a non exhaustive list, in chronological order from their publication on GitHub: Crunchy Data Postgres Operator (2017) Zalando Postgres Operator (2017) Stackgres (2020) Percona Operator for PostgreSQL (2021) Kubegres (2021) Feel free to report any relevant missing entry as a PR. Info The Data on Kubernetes Community (which includes some of our maintainers) is working on an independent and vendor neutral project to list the operators called Operator Feature Matrix . You say that CloudNativePG is a fully declarative operator. What do you mean by that? The easiest way is to explain declarative configuration through an example that highlights the differences with imperative configuration. In an imperative context, the state is defined as a series of tasks to be executed in sequence. So, we can get a three-node PostgreSQL cluster by creating the first instance, configuring the replication, cloning a second instance, and the third one. In a declarative approach, the state of a system is defined using configuration, namely: there's a PostgreSQL 13 cluster with two replicas. This approach highly simplifies change management operations, and when these are stored in source control systems like Git, it enables the Infrastructure as Code capability. And Kubernetes takes it farther than deployment, as it makes sure that our request is fulfilled at any time. What are the required skills to run PostgreSQL on Kubernetes? Running PostgreSQL on Kubernetes requires both PostgreSQL and Kubernetes skills in your DevOps team. The best experience is when database administrators familiarize themselves with Kubernetes core concepts and are able to interact with Kubernetes administrators. Our advice is for everyone that wants to fully exploit Cloud Native PostgreSQL to acquire the \"Certified Kubernetes Administrator (CKA)\" status from the CNCF certification program. Why isn't CloudNativePG using StatefulSets? CloudNativePG does not rely on StatefulSet resources, and instead manages the underlying PVCs directly by leveraging the selected storage class for dynamic provisioning. Please refer to the \"Custom Pod Controller\" section for details and reasons behind this decision. High availability What happens to the PostgreSQL clusters when the operator pod dies or it is not available for a certain amount of time? The CloudNativePG operator, among other things, is responsible for self-healing capabilities. As such, they might not be available during an outage of the operator. However, assuming that the outage does not affect the nodes where PostgreSQL clusters are running, the database will continue to serve normal operations, through the relevant Kubernetes services. Moreover, the instance manager , which runs inside each PostgreSQL pod will still work, making sure that the database server is up, including accessory services like logging, export of metrics, continuous archiving of WAL files, etc. To summarize: an outage of the operator does not necessarily imply a PostgreSQL database outage; it's like running a database without a DBA or system administrator. What are the reasons behind CloudNativePG not relying on a failover management tool like Patroni, repmgr, or Stolon? Although part of the team that develops CloudNativePG has been heavily involved in repmgr in the past, we decided to take a different approach and directly extend the Kubernetes controller and rely on the Kubernetes API server to hold the status of a Postgres cluster, and use it as the only source of truth to: control High Availability of a Postgres cluster primarily via automated failover and switchover, coordinating itself with the instance manager control the Kubernetes services, that is the entry points for your applications Should I manually resync a former primary with the new one following a failover? No. The operator does that automatically for you, and relies on pg_rewind to synchronize the former primary with the new one. Database management Why should I use PostgreSQL? We believe that PostgreSQL is the equivalent in the database area of what Linux represents in the operating system space. The current latest major version of Postgres is version 16, which ships out of the box: native streaming replication, both physical and logical continuous hot backup and point in time recovery declarative partitioning for horizontal table partitioning, which is a very well-known technique in the database area to improve vertical scalability on a single instance extensibility, with extensions like PostGIS for geographical databases parallel queries for vertical scalability JSON support, unleashing the multi-model hybrid database for both structured and unstructured data queried via standard SQL And so on ... How many databases should be hosted in a single PostgreSQL instance? Our recommendation is to dedicate a single PostgreSQL cluster (intended as primary and multiple standby servers) to a single database, entirely managed by a single microservice application. However, by leveraging the \"postgres\" superuser, it is possible to create as many users and databases as desired (subject to the available resources). The reason for this recommendation lies in the Cloud Native concept, based on microservices. In a pure microservice architecture, the microservice itself should own the data it manages exclusively. These could be flat files, queues, key-value stores, or, in our case, a PostgreSQL relational database containing both structured and unstructured data. The general idea is that only the microservice can access the database, including schema management and migrations. CloudNativePG has been designed to work this way out of the box, by default creating an application user and an application database owned by the aforementioned application user. Reserving a PostgreSQL instance to a single microservice owned database, enhances: resource management: in PostgreSQL, CPU, and memory constrained resources are generally handled at the instance level, not the database level, making it easier to integrate it with Kubernetes resource management policies at the pod level physical continuous backup and Point-In-Time-Recovery (PITR): given that PostgreSQL handles continuous backup and recovery at the instance level, having one database per instance simplifies PITR operations, differentiates retention policy management, and increases data protection of backups application updates: enable each application to decide their update policies without impacting other databases owned by different applications database updates: each application can decide which PostgreSQL version to use, and independently, when to upgrade to a different major version of PostgreSQL and at what conditions (e.g., cutover time) Is there an upper limit in database size for not considering Kubernetes? No, as Kubernetes is no different from virtual machines and bare metal as far as this is regarded. Practically, however, it depends on the available resources of your Kubernetes cluster. Our advice with very large databases (VLDB) is to consider a shared nothing architecture, where a Kubernetes worker node is dedicated to a single Postgres instance, with dedicated storage. We proved that this extreme architectural pattern works when we benchmarked running PostgreSQL on bare metal Kubernetes with local persistent volumes . Tablespaces and horizontal partitioning are data modeling techniques that you can use to improve the vertical scalability of you databases. How can I specify a time zone in the PostgreSQL cluster? PostgreSQL has an extensive support for time zones, as explained in the official documentation: Date time data types Client connections config options Although time zones can even be used at session, transaction and even as part of a query in PostgreSQL, a very common way is to set them up globally. With CloudNativePG you can configure the cluster level time zone in the .spec.postgresql.parameters section as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: pg-italy spec: instances: 1 postgresql: parameters: timezone: \"Europe/Rome\" storage: size: 1Gi The time zone can be verified with: $ kubectl exec -ti pg-italy-1 -c postgres -- psql -x -c \"SHOW timezone\" -[ RECORD 1 ]--------- TimeZone | Europe/Rome What is the recommended architecture for best business continuity outcomes? As covered in the \"Architecture\" section, the main recommendation is to adopt shared nothing architectures as much as possible, by leveraging the native capabilities and resources that Kubernetes provides in a single cluster, namely: availability zones: spread your instances across different availability zones in the same Kubernetes cluster worker nodes: as a consequence, make sure that your Postgres instances reside on different Kubernetes worker nodes storage: use dedicated storage for each worker node running Postgres Use at least one standby, preferably at least two, so that you can configure synchronous replication in the cluster, introducing RPO =0 for high availability. If you do not have availability zones - normally the case of on-premise installations - separate on worker nodes and storage. Properly setup continuous backup on a local/regional object store. The same architecture that is in a single Kubernetes cluster can be replicated in another Kubernetes cluster (normally in another geographical area or region) through the replica cluster feature, providing disaster recovery and high availability at global scale. You can use the WAL archive in the primary object store to feed the replica in the other region, without having to provide a streaming connection, if the default maximum RPO of 5 minutes is enough for you. How can instances be stopped or started? Please look at \"Fencing\" or \"Hibernation\" . What are the global objects such as roles and databases that are automatically created by CloudNativePG? The operator automatically creates a user for the application (by default called app ) and a database for the application (by default called app ) which is owned by the aforementioned user. This way, the database is ready for a microservice adoption, as developers can control migrations using the app user, without requiring superuser access. Teams can then create another user for read-write operations through the \"Declarative role management\" feature and assign the required GRANT to the tables.","title":"Frequently Asked Questions (FAQ)"},{"location":"faq/#frequently-asked-questions-faq","text":"","title":"Frequently Asked Questions (FAQ)"},{"location":"faq/#running-postgresql-in-kubernetes","text":"Everyone knows that stateful workloads like PostgreSQL cannot run in Kubernetes. Why do you say the contrary? An independent research survey commissioned by the Data on Kubernetes Community in September 2021 revealed that half of the respondents run most of their production workloads on Kubernetes. 90% of them believe that Kubernetes is ready for stateful workloads, and 70% of them run databases in production. Databases like Postgres. However, according to them, significant challenges remain, such as the knowledge gap (Kubernetes and Cloud Native, in general, have a steep learning curve) and the quality of Kubernetes operators. The latter is the reason why we believe that an operator like CloudNativePG highly contributes to the success of your project. For database fanatics like us, a real game-changer has been the introduction of the support for local persistent volumes in Kubernetes 1.14 in April 2019 . CloudNativePG is built on immutable application containers. What does it mean? According to the microservice architectural pattern, a container is designed to run a single application or process. As a result, such container images are built to run the main application as the single entry point (the so-called PID 1 process). In Kubernetes terms, the application is referred to as workload. Workloads can be stateless like a web application server or stateful like a database. Mapping this concept to PostgreSQL, an immutable application container is a single \"postgres\" process that is running and tied to a single and specific version - the one in the immutable container image. No other processes such as SSH or systemd, or syslog are allowed. Immutable Application Containers are in contrast with Mutable System Containers, which are still a very common way to interpret and use containers. Immutable means that a container won't be modified during its life: no updates, no patches, no configuration changes. If you must update the application code or apply a patch, you build a new image and redeploy it. Immutability makes deployments safer and more repeatable. For more information, please refer to \"Why EDB chose immutable application containers\" . What does Cloud Native mean? The Cloud Native Computing Foundation defines the term \" Cloud Native \". However, since the start of the Cloud Native PostgreSQL/CloudNativePG operator at 2ndQuadrant, the development team has been interpreting Cloud Native as three main concepts: An existing, healthy, genuine, and prosperous DevOps culture, founded on people, as well as principles and processes, which enables teams and organizations (as teams of teams) to continuously change so to innovate and accelerate the delivery of outcomes and produce value for the business in safer, more efficient, and more engaging ways A microservice architecture that is based on Immutable Application Containers A way to manage and orchestrate these containers, such as Kubernetes Currently, the standard de facto for container orchestration is Kubernetes, which automates the deployment, administration and scalability of Cloud Native Applications. Another definition of Cloud Native that resonates with us is the one defined by Ibryam and Hu\u00df in \"Kubernetes Patterns\", published by O'Reilly : Principles, Patterns, Tools to automate containerized microservices at scale Can I run CloudNativePG on bare metal Kubernetes? Yes, definitely. You can run Kubernetes on bare metal. And you can dedicate one or more physical worker nodes with locally attached storage to PostgreSQL workloads for maximum and predictable I/O performance. The actual Cloud Native PostgreSQL project, from which CloudNativePG originated, was born after a pilot project in 2019 that benchmarked storage and PostgreSQL on the same bare metal server, first directly in Linux, and then inside Kubernetes. As expected, the experiment showed only negligible performance impact introduced by the container running in Kubernetes through local persistent volumes, allowing the Cloud Native initiative to continue. Why should I use PostgreSQL replication instead of file system replication? Please read the \"Architecture: Synchronizing the state\" section. Why should I use an operator instead of running PostgreSQL as a container? The most basic approach to running PostgreSQL in Kubernetes is to have a pod, which is the smallest unit of deployment in Kubernetes, running a Postgres container with no replica. The volume hosting the Postgres data directory is mounted on the pod, and it usually resides on network storage. In this case, Kubernetes restarts the pod in case of a problem or moves it to another Kubernetes node. The most sophisticated approach is to run PostgreSQL using an operator. An operator is an extension of the Kubernetes controller and defines how a complex application works in business continuity contexts. The operator pattern is currently state of the art in Kubernetes for this purpose. An operator simulates the work of a human operator in an automated and programmatic way. Postgres is a complex application, and an operator not only needs to deploy a cluster (the first step), but also properly react after unexpected events. The typical example is that of a failover. An operator relies on Kubernetes for capabilities like self-healing, scalability, replication, high availability, backup, recovery, updates, access, resource control, storage management, and so on. It also facilitates the integration of a PostgreSQL cluster in the log management and monitoring infrastructure. CloudNativePG enables the definition of the desired state of a PostgreSQL cluster via declarative configuration. Kubernetes continuously makes sure that the current state of the infrastructure matches the desired one through reconciliation loops initiated by the Kubernetes controller. If the desired state and the actual state don't match, reconciliation loops trigger self-healing procedures. That's where an operator like CloudNativePG comes into play. Are there any other operators for Postgres out there? Yes, of course. And our advice is that you look at all of them and compare them with CloudNativePG before making your decision. You will see that most of these operators use an external failover management tool (Patroni or similar) and rely on StatefulSets. Here is a non exhaustive list, in chronological order from their publication on GitHub: Crunchy Data Postgres Operator (2017) Zalando Postgres Operator (2017) Stackgres (2020) Percona Operator for PostgreSQL (2021) Kubegres (2021) Feel free to report any relevant missing entry as a PR. Info The Data on Kubernetes Community (which includes some of our maintainers) is working on an independent and vendor neutral project to list the operators called Operator Feature Matrix . You say that CloudNativePG is a fully declarative operator. What do you mean by that? The easiest way is to explain declarative configuration through an example that highlights the differences with imperative configuration. In an imperative context, the state is defined as a series of tasks to be executed in sequence. So, we can get a three-node PostgreSQL cluster by creating the first instance, configuring the replication, cloning a second instance, and the third one. In a declarative approach, the state of a system is defined using configuration, namely: there's a PostgreSQL 13 cluster with two replicas. This approach highly simplifies change management operations, and when these are stored in source control systems like Git, it enables the Infrastructure as Code capability. And Kubernetes takes it farther than deployment, as it makes sure that our request is fulfilled at any time. What are the required skills to run PostgreSQL on Kubernetes? Running PostgreSQL on Kubernetes requires both PostgreSQL and Kubernetes skills in your DevOps team. The best experience is when database administrators familiarize themselves with Kubernetes core concepts and are able to interact with Kubernetes administrators. Our advice is for everyone that wants to fully exploit Cloud Native PostgreSQL to acquire the \"Certified Kubernetes Administrator (CKA)\" status from the CNCF certification program. Why isn't CloudNativePG using StatefulSets? CloudNativePG does not rely on StatefulSet resources, and instead manages the underlying PVCs directly by leveraging the selected storage class for dynamic provisioning. Please refer to the \"Custom Pod Controller\" section for details and reasons behind this decision.","title":"Running PostgreSQL in Kubernetes"},{"location":"faq/#high-availability","text":"What happens to the PostgreSQL clusters when the operator pod dies or it is not available for a certain amount of time? The CloudNativePG operator, among other things, is responsible for self-healing capabilities. As such, they might not be available during an outage of the operator. However, assuming that the outage does not affect the nodes where PostgreSQL clusters are running, the database will continue to serve normal operations, through the relevant Kubernetes services. Moreover, the instance manager , which runs inside each PostgreSQL pod will still work, making sure that the database server is up, including accessory services like logging, export of metrics, continuous archiving of WAL files, etc. To summarize: an outage of the operator does not necessarily imply a PostgreSQL database outage; it's like running a database without a DBA or system administrator. What are the reasons behind CloudNativePG not relying on a failover management tool like Patroni, repmgr, or Stolon? Although part of the team that develops CloudNativePG has been heavily involved in repmgr in the past, we decided to take a different approach and directly extend the Kubernetes controller and rely on the Kubernetes API server to hold the status of a Postgres cluster, and use it as the only source of truth to: control High Availability of a Postgres cluster primarily via automated failover and switchover, coordinating itself with the instance manager control the Kubernetes services, that is the entry points for your applications Should I manually resync a former primary with the new one following a failover? No. The operator does that automatically for you, and relies on pg_rewind to synchronize the former primary with the new one.","title":"High availability"},{"location":"faq/#database-management","text":"Why should I use PostgreSQL? We believe that PostgreSQL is the equivalent in the database area of what Linux represents in the operating system space. The current latest major version of Postgres is version 16, which ships out of the box: native streaming replication, both physical and logical continuous hot backup and point in time recovery declarative partitioning for horizontal table partitioning, which is a very well-known technique in the database area to improve vertical scalability on a single instance extensibility, with extensions like PostGIS for geographical databases parallel queries for vertical scalability JSON support, unleashing the multi-model hybrid database for both structured and unstructured data queried via standard SQL And so on ... How many databases should be hosted in a single PostgreSQL instance? Our recommendation is to dedicate a single PostgreSQL cluster (intended as primary and multiple standby servers) to a single database, entirely managed by a single microservice application. However, by leveraging the \"postgres\" superuser, it is possible to create as many users and databases as desired (subject to the available resources). The reason for this recommendation lies in the Cloud Native concept, based on microservices. In a pure microservice architecture, the microservice itself should own the data it manages exclusively. These could be flat files, queues, key-value stores, or, in our case, a PostgreSQL relational database containing both structured and unstructured data. The general idea is that only the microservice can access the database, including schema management and migrations. CloudNativePG has been designed to work this way out of the box, by default creating an application user and an application database owned by the aforementioned application user. Reserving a PostgreSQL instance to a single microservice owned database, enhances: resource management: in PostgreSQL, CPU, and memory constrained resources are generally handled at the instance level, not the database level, making it easier to integrate it with Kubernetes resource management policies at the pod level physical continuous backup and Point-In-Time-Recovery (PITR): given that PostgreSQL handles continuous backup and recovery at the instance level, having one database per instance simplifies PITR operations, differentiates retention policy management, and increases data protection of backups application updates: enable each application to decide their update policies without impacting other databases owned by different applications database updates: each application can decide which PostgreSQL version to use, and independently, when to upgrade to a different major version of PostgreSQL and at what conditions (e.g., cutover time) Is there an upper limit in database size for not considering Kubernetes? No, as Kubernetes is no different from virtual machines and bare metal as far as this is regarded. Practically, however, it depends on the available resources of your Kubernetes cluster. Our advice with very large databases (VLDB) is to consider a shared nothing architecture, where a Kubernetes worker node is dedicated to a single Postgres instance, with dedicated storage. We proved that this extreme architectural pattern works when we benchmarked running PostgreSQL on bare metal Kubernetes with local persistent volumes . Tablespaces and horizontal partitioning are data modeling techniques that you can use to improve the vertical scalability of you databases. How can I specify a time zone in the PostgreSQL cluster? PostgreSQL has an extensive support for time zones, as explained in the official documentation: Date time data types Client connections config options Although time zones can even be used at session, transaction and even as part of a query in PostgreSQL, a very common way is to set them up globally. With CloudNativePG you can configure the cluster level time zone in the .spec.postgresql.parameters section as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: pg-italy spec: instances: 1 postgresql: parameters: timezone: \"Europe/Rome\" storage: size: 1Gi The time zone can be verified with: $ kubectl exec -ti pg-italy-1 -c postgres -- psql -x -c \"SHOW timezone\" -[ RECORD 1 ]--------- TimeZone | Europe/Rome What is the recommended architecture for best business continuity outcomes? As covered in the \"Architecture\" section, the main recommendation is to adopt shared nothing architectures as much as possible, by leveraging the native capabilities and resources that Kubernetes provides in a single cluster, namely: availability zones: spread your instances across different availability zones in the same Kubernetes cluster worker nodes: as a consequence, make sure that your Postgres instances reside on different Kubernetes worker nodes storage: use dedicated storage for each worker node running Postgres Use at least one standby, preferably at least two, so that you can configure synchronous replication in the cluster, introducing RPO =0 for high availability. If you do not have availability zones - normally the case of on-premise installations - separate on worker nodes and storage. Properly setup continuous backup on a local/regional object store. The same architecture that is in a single Kubernetes cluster can be replicated in another Kubernetes cluster (normally in another geographical area or region) through the replica cluster feature, providing disaster recovery and high availability at global scale. You can use the WAL archive in the primary object store to feed the replica in the other region, without having to provide a streaming connection, if the default maximum RPO of 5 minutes is enough for you. How can instances be stopped or started? Please look at \"Fencing\" or \"Hibernation\" . What are the global objects such as roles and databases that are automatically created by CloudNativePG? The operator automatically creates a user for the application (by default called app ) and a database for the application (by default called app ) which is owned by the aforementioned user. This way, the database is ready for a microservice adoption, as developers can control migrations using the app user, without requiring superuser access. Teams can then create another user for read-write operations through the \"Declarative role management\" feature and assign the required GRANT to the tables.","title":"Database management"},{"location":"fencing/","text":"Fencing Fencing in CloudNativePG is the ultimate process of protecting the data in one, more, or even all instances of a PostgreSQL cluster when they appear to be malfunctioning. When an instance is fenced, the PostgreSQL server process ( postmaster ) is guaranteed to be shut down, while the pod is kept running. This makes sure that, until the fence is lifted, data on the pod is not modified by PostgreSQL and that the file system can be investigated for debugging and troubleshooting purposes. How to fence instances In CloudNativePG you can fence: a specific instance a list of instances an entire Postgres Cluster Fencing is controlled through the content of the cnpg.io/fencedInstances annotation, which expects a JSON formatted list of instance names. If the annotation is set to '[\"*\"]' , a singleton list with a wildcard, the whole cluster is fenced. If the annotation is set to an empty JSON list, the operator behaves as if the annotation was not set. For example: cnpg.io/fencedInstances: '[\"cluster-example-1\"]' will fence just the cluster-example-1 instance cnpg.io/fencedInstances: '[\"cluster-example-1\",\"cluster-example-2\"]' will fence the cluster-example-1 and cluster-example-2 instances cnpg.io/fencedInstances: '[\"*\"]' will fence every instance in the cluster. The annotation can be manually set on the Kubernetes object, for example via the kubectl annotate command, or in a transparent way using the kubectl cnpg fencing on subcommand: # to fence only one instance kubectl cnpg fencing on cluster-example 1 # to fence all the instances in a Cluster kubectl cnpg fencing on cluster-example \"*\" Here is an example of a Cluster with an instance that was previously fenced: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: annotations: cnpg.io/fencedInstances: '[\"cluster-example-1\"]' [...] How to lift fencing Fencing can be lifted by clearing the annotation, or set it to a different value. As for fencing, this can be done either manually with kubectl annotate , or using the kubectl cnpg fencing subcommand as follows: # to lift the fencing only for one instance # N.B.: at the moment this won't work if the whole cluster was fenced previously, # in that case you will have to manually set the annotation as explained above kubectl cnpg fencing off cluster-example 1 # to lift the fencing for all the instances in a Cluster kubectl cnpg fencing off cluster-example \"*\" How fencing works Once an instance is set for fencing, the procedure to shut down the postmaster process is initiated, identical to the one of the switchover. This consists of an initial fast shutdown with a timeout set to .spec.switchoverDelay , followed by an immediate shutdown. Then: the Pod will be kept alive the Pod won't be marked as Ready all the changes that don't require the Postgres instance to be up will be reconciled, including: configuration files certificates and all the cryptographic material metrics will not be collected, except cnpg_collector_fencing_on which will be set to 1 Warning If a primary instance is fenced, its postmaster process is shut down but no failover is performed, interrupting the operativity of the applications. When the fence will be lifted, the primary instance will be started up again without performing a failover. Given that, we advise users to fence primary instances only if strictly required. If a fenced instance is deleted, the pod will be recreated normally, but the postmaster won't be started. This can be extremely helpful when instances are Crashlooping .","title":"Fencing"},{"location":"fencing/#fencing","text":"Fencing in CloudNativePG is the ultimate process of protecting the data in one, more, or even all instances of a PostgreSQL cluster when they appear to be malfunctioning. When an instance is fenced, the PostgreSQL server process ( postmaster ) is guaranteed to be shut down, while the pod is kept running. This makes sure that, until the fence is lifted, data on the pod is not modified by PostgreSQL and that the file system can be investigated for debugging and troubleshooting purposes.","title":"Fencing"},{"location":"fencing/#how-to-fence-instances","text":"In CloudNativePG you can fence: a specific instance a list of instances an entire Postgres Cluster Fencing is controlled through the content of the cnpg.io/fencedInstances annotation, which expects a JSON formatted list of instance names. If the annotation is set to '[\"*\"]' , a singleton list with a wildcard, the whole cluster is fenced. If the annotation is set to an empty JSON list, the operator behaves as if the annotation was not set. For example: cnpg.io/fencedInstances: '[\"cluster-example-1\"]' will fence just the cluster-example-1 instance cnpg.io/fencedInstances: '[\"cluster-example-1\",\"cluster-example-2\"]' will fence the cluster-example-1 and cluster-example-2 instances cnpg.io/fencedInstances: '[\"*\"]' will fence every instance in the cluster. The annotation can be manually set on the Kubernetes object, for example via the kubectl annotate command, or in a transparent way using the kubectl cnpg fencing on subcommand: # to fence only one instance kubectl cnpg fencing on cluster-example 1 # to fence all the instances in a Cluster kubectl cnpg fencing on cluster-example \"*\" Here is an example of a Cluster with an instance that was previously fenced: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: annotations: cnpg.io/fencedInstances: '[\"cluster-example-1\"]' [...]","title":"How to fence instances"},{"location":"fencing/#how-to-lift-fencing","text":"Fencing can be lifted by clearing the annotation, or set it to a different value. As for fencing, this can be done either manually with kubectl annotate , or using the kubectl cnpg fencing subcommand as follows: # to lift the fencing only for one instance # N.B.: at the moment this won't work if the whole cluster was fenced previously, # in that case you will have to manually set the annotation as explained above kubectl cnpg fencing off cluster-example 1 # to lift the fencing for all the instances in a Cluster kubectl cnpg fencing off cluster-example \"*\"","title":"How to lift fencing"},{"location":"fencing/#how-fencing-works","text":"Once an instance is set for fencing, the procedure to shut down the postmaster process is initiated, identical to the one of the switchover. This consists of an initial fast shutdown with a timeout set to .spec.switchoverDelay , followed by an immediate shutdown. Then: the Pod will be kept alive the Pod won't be marked as Ready all the changes that don't require the Postgres instance to be up will be reconciled, including: configuration files certificates and all the cryptographic material metrics will not be collected, except cnpg_collector_fencing_on which will be set to 1 Warning If a primary instance is fenced, its postmaster process is shut down but no failover is performed, interrupting the operativity of the applications. When the fence will be lifted, the primary instance will be started up again without performing a failover. Given that, we advise users to fence primary instances only if strictly required. If a fenced instance is deleted, the pod will be recreated normally, but the postmaster won't be started. This can be extremely helpful when instances are Crashlooping .","title":"How fencing works"},{"location":"image_catalog/","text":"Image Catalog ImageCatalog and ClusterImageCatalog are essential resources that empower you to define images for creating a Cluster . The key distinction lies in their scope: an ImageCatalog is namespaced, while a ClusterImageCatalog is cluster-scoped. Both share a common structure, comprising a list of images, each equipped with a major field indicating the major version of the image. Warning The operator places trust in the user-defined major version and refrains from conducting any PostgreSQL version detection. It is the user's responsibility to ensure alignment between the declared major version in the catalog and the PostgreSQL image. The major field's value must remain unique within a catalog, preventing duplication across images. Distinct catalogs, however, may expose different images under the same major value. Example of a Namespaced ImageCatalog : apiVersion: postgresql.cnpg.io/v1 kind: ImageCatalog metadata: name: postgresql namespace: default spec: images: - major: 15 image: ghcr.io/cloudnative-pg/postgresql:15.6 - major: 16 image: ghcr.io/cloudnative-pg/postgresql:16.8 - major: 17 image: ghcr.io/cloudnative-pg/postgresql:17.5 Example of a Cluster-Wide Catalog using ClusterImageCatalog Resource: apiVersion: postgresql.cnpg.io/v1 kind: ClusterImageCatalog metadata: name: postgresql spec: images: - major: 15 image: ghcr.io/cloudnative-pg/postgresql:15.6 - major: 16 image: ghcr.io/cloudnative-pg/postgresql:16.8 - major: 17 image: ghcr.io/cloudnative-pg/postgresql:17.5 A Cluster resource has the flexibility to reference either an ImageCatalog or a ClusterImageCatalog to precisely specify the desired image. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 imageCatalogRef: apiGroup: postgresql.cnpg.io kind: ImageCatalog name: postgresql major: 16 storage: size: 1Gi Clusters utilizing these catalogs maintain continuous monitoring. Any alterations to the images within a catalog trigger automatic updates for all associated clusters referencing that specific entry. CloudNativePG Catalogs The CloudNativePG project maintains ClusterImageCatalogs for the images it provides. These catalogs are regularly updated with the latest images for each major version. By applying the ClusterImageCatalog.yaml file from the CloudNativePG project's GitHub repositories, cluster administrators can ensure that their clusters are automatically updated to the latest version within the specified major release. PostgreSQL Container Images You can install the latest version of the cluster catalog for the PostgreSQL Container Images ( cloudnative-pg/postgres-containers repository) with: kubectl apply \\ -f https://raw.githubusercontent.com/cloudnative-pg/postgres-containers/main/Debian/ClusterImageCatalog-bookworm.yaml PostGIS Container Images You can install the latest version of the cluster catalog for the PostGIS Container Images ( cloudnative-pg/postgis-containers repository) with: kubectl apply \\ -f https://raw.githubusercontent.com/cloudnative-pg/postgis-containers/main/PostGIS/ClusterImageCatalog.yaml","title":"Image Catalog"},{"location":"image_catalog/#image-catalog","text":"ImageCatalog and ClusterImageCatalog are essential resources that empower you to define images for creating a Cluster . The key distinction lies in their scope: an ImageCatalog is namespaced, while a ClusterImageCatalog is cluster-scoped. Both share a common structure, comprising a list of images, each equipped with a major field indicating the major version of the image. Warning The operator places trust in the user-defined major version and refrains from conducting any PostgreSQL version detection. It is the user's responsibility to ensure alignment between the declared major version in the catalog and the PostgreSQL image. The major field's value must remain unique within a catalog, preventing duplication across images. Distinct catalogs, however, may expose different images under the same major value. Example of a Namespaced ImageCatalog : apiVersion: postgresql.cnpg.io/v1 kind: ImageCatalog metadata: name: postgresql namespace: default spec: images: - major: 15 image: ghcr.io/cloudnative-pg/postgresql:15.6 - major: 16 image: ghcr.io/cloudnative-pg/postgresql:16.8 - major: 17 image: ghcr.io/cloudnative-pg/postgresql:17.5 Example of a Cluster-Wide Catalog using ClusterImageCatalog Resource: apiVersion: postgresql.cnpg.io/v1 kind: ClusterImageCatalog metadata: name: postgresql spec: images: - major: 15 image: ghcr.io/cloudnative-pg/postgresql:15.6 - major: 16 image: ghcr.io/cloudnative-pg/postgresql:16.8 - major: 17 image: ghcr.io/cloudnative-pg/postgresql:17.5 A Cluster resource has the flexibility to reference either an ImageCatalog or a ClusterImageCatalog to precisely specify the desired image. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 imageCatalogRef: apiGroup: postgresql.cnpg.io kind: ImageCatalog name: postgresql major: 16 storage: size: 1Gi Clusters utilizing these catalogs maintain continuous monitoring. Any alterations to the images within a catalog trigger automatic updates for all associated clusters referencing that specific entry.","title":"Image Catalog"},{"location":"image_catalog/#cloudnativepg-catalogs","text":"The CloudNativePG project maintains ClusterImageCatalogs for the images it provides. These catalogs are regularly updated with the latest images for each major version. By applying the ClusterImageCatalog.yaml file from the CloudNativePG project's GitHub repositories, cluster administrators can ensure that their clusters are automatically updated to the latest version within the specified major release.","title":"CloudNativePG Catalogs"},{"location":"image_catalog/#postgresql-container-images","text":"You can install the latest version of the cluster catalog for the PostgreSQL Container Images ( cloudnative-pg/postgres-containers repository) with: kubectl apply \\ -f https://raw.githubusercontent.com/cloudnative-pg/postgres-containers/main/Debian/ClusterImageCatalog-bookworm.yaml","title":"PostgreSQL Container Images"},{"location":"image_catalog/#postgis-container-images","text":"You can install the latest version of the cluster catalog for the PostGIS Container Images ( cloudnative-pg/postgis-containers repository) with: kubectl apply \\ -f https://raw.githubusercontent.com/cloudnative-pg/postgis-containers/main/PostGIS/ClusterImageCatalog.yaml","title":"PostGIS Container Images"},{"location":"imagevolume_extensions/","text":"Image Volume Extensions CloudNativePG supports the dynamic loading of PostgreSQL extensions into a Cluster at Pod startup using the Kubernetes ImageVolume feature and the extension_control_path GUC introduced in PostgreSQL 18, to which this project contributed. This feature allows you to mount a PostgreSQL extension , packaged as an OCI-compliant container image, as a read-only and immutable volume inside a running pod at a known filesystem path. You can make the extension available either globally, using the shared_preload_libraries option , or at the database level through the CREATE EXTENSION command. For the latter, you can use the Database resource\u2019s declarative extension management to ensure consistent, automated extension setup within your PostgreSQL databases. Benefits Image volume extensions decouple the distribution of PostgreSQL operand container images from the distribution of extensions. This eliminates the need to define and embed extensions at build time within your PostgreSQL images\u2014a major adoption blocker for PostgreSQL as a containerized workload, including from a security and supply chain perspective. As a result, you can: Use the official PostgreSQL minimal operand images provided by CloudNativePG. Dynamically add the extensions you need to your Cluster definitions, without rebuilding or maintaining custom PostgreSQL images. Reduce your operational surface by using immutable, minimal, and secure base images while adding only the extensions required for each workload. Extension images must be built according to the documented specifications . Requirements To use image volume extensions with CloudNativePG, you need: PostgreSQL 18 or later , with support for extension_control_path . Kubernetes 1.33 , with the ImageVolume feature gate enabled. CloudNativePG-compatible extension container images , ensuring: Matching PostgreSQL major version of the Cluster resource. Compatible operating system distribution of the Cluster resource. Matching CPU architecture of the Cluster resource. How it works Extension images are defined in the .spec.postgresql.extensions stanza of a Cluster resource, which accepts an ordered list of extensions to be added to the PostgreSQL cluster. Info For field-level details, see the API reference for ExtensionConfiguration . Each image volume is mounted at /extensions/<EXTENSION_NAME> . By default, CloudNativePG automatically manages the relevant GUCs, setting: extension_control_path to /extensions/<EXTENSION_NAME>/share , allowing PostgreSQL to locate any extension control file within /extensions/<EXTENSION_NAME>/share/extension dynamic_library_path to /extensions/<EXTENSION_NAME>/lib These values are appended in the order in which the extensions are defined in the extensions list, ensuring deterministic path resolution within PostgreSQL. This allows PostgreSQL to discover and load the extension without requiring manual configuration inside the pod. Info Depending on how your extension container images are built and their layout, you may need to adjust the default extension_control_path and dynamic_library_path values to match the image structure. Important If the extension image includes shared libraries, they must be compiled with the same PostgreSQL major version, operating system distribution, and CPU architecture as the PostgreSQL container image used by your cluster, to ensure compatibility and prevent runtime issues. How to add a new extension Adding an extension to a database in CloudNativePG involves a few steps: Define the extension image in the Cluster resource so that PostgreSQL can discover and load it. Add the library to shared_preload_libraries if the extension requires it. Declare the extension in the Database resource where you want it installed, if the extension supports CREATE EXTENSION . Warning Avoid making changes to extension images and PostgreSQL configuration settings (such as shared_preload_libraries ) simultaneously. First, allow the pod to roll out with the new extension image, then update the PostgreSQL configuration. This limitation will be addressed in a future release of CloudNativePG. For illustration purposes, this guide uses a simple, fictitious extension named foo that supports CREATE EXTENSION . Adding a new extension to a Cluster resource You can add an ImageVolume -based extension to a Cluster using the .spec.postgresql.extensions stanza. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: foo-18 spec: # ... postgresql: extensions: - name: foo image: reference: # registry path for your extension image # ... The name field is mandatory and must be unique within the cluster , as it determines the mount path ( /extensions/foo in this example). It must consist of lowercase alphanumeric characters or hyphens ( - ) and must start and end with an alphanumeric character. The image stanza follows the Kubernetes ImageVolume API . The reference must point to a valid container registry path for the extension image. Important When a new extension is added to a running Cluster , CloudNativePG will automatically trigger a rolling update to attach the new image volume to each pod. Before adding a new extension in production, ensure you have thoroughly tested it in a staging environment to prevent configuration issues that could leave your PostgreSQL cluster in an unhealthy state. Once mounted, CloudNativePG will automatically configure PostgreSQL by appending: /extensions/foo/share to extension_control_path /extensions/foo/lib to dynamic_library_path This ensures that the PostgreSQL container is ready to serve the foo extension when requested by a database, as described in the next section. The CREATE EXTENSION foo command, triggered automatically during the reconciliation of the Database resource , will work without additional configuration, as PostgreSQL will locate: the extension control file at /extensions/foo/share/extension/foo.control the shared library at /extensions/foo/lib/foo.so Adding a new extension to a Database resource Once the extension is available in the PostgreSQL instance, you can leverage declarative databases to manage the lifecycle of your extensions within the target database. Continuing with the foo example, you can request the installation of the foo extension in the app database of the foo-18 cluster using the following resource definition: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: foo-app spec: name: app owner: app cluster: name: foo-18 extensions: - name: foo version: 1.0 CloudNativePG will automatically reconcile this resource, executing the CREATE EXTENSION foo command inside the app database if it is not already installed, ensuring your desired state is maintained without manual intervention. Advanced Topics In some cases, the default expected structure may be insufficient for your extension image, particularly when: The extension requires additional system libraries. Multiple extensions are bundled in the same image. The image uses a custom directory structure. Following the \"convention over configuration\" paradigm, CloudNativePG allows you to finely control the configuration of each extension image through the following fields: extension_control_path : A list of relative paths within the container image to be appended to PostgreSQL\u2019s extension_control_path , allowing it to locate extension control files. dynamic_library_path : A list of relative paths within the container image to be appended to PostgreSQL\u2019s dynamic_library_path , enabling it to locate shared library files for extensions. ld_library_path : A list of relative paths within the container image to be appended to the LD_LIBRARY_PATH environment variable of the instance manager process, allowing PostgreSQL to locate required system libraries at runtime. This flexibility enables you to support complex or non-standard extension images while maintaining clarity and predictability. Setting Custom Paths If your extension image does not use the default lib and share directories for its libraries and control files, you can override the defaults by explicitly setting extension_control_path and dynamic_library_path . For example: spec: postgresql: extensions: - name: my-extension extension_control_path: - my/share/path dynamic_library_path: - my/lib/path image: reference: # registry path for your extension image CloudNativePG will configure PostgreSQL with: /extensions/my-extension/my/share/path appended to extension_control_path /extensions/my-extension/my/lib/path appended to dynamic_library_path This allows PostgreSQL to discover your extension\u2019s control files and shared libraries correctly, even with a non-standard layout. Multi-extension Images You may need to include multiple extensions within the same container image, adopting a structure where each extension\u2019s files reside in their own subdirectory. For example, to package PostGIS and pgRouting together in a single image, each in its own subdirectory: # ... spec: # ... postgresql: extensions: - name: geospatial extension_control_path: - postgis/share - pgrouting/share dynamic_library_path: - postgis/lib - pgrouting/lib # ... image: reference: # registry path for your geospatial image # ... # ... # ... Including System Libraries Some extensions, such as PostGIS, require system libraries that may not be present in the base PostgreSQL image. To support these requirements, you can package the necessary libraries within your extension container image and make them available to PostgreSQL using the ld_library_path field. For example, if your extension image includes a system directory with the required libraries: # ... spec: # ... postgresql: extensions: - name: postgis # ... ld_library_path: - syslib image: reference: # registry path for your PostGIS image # ... # ... # ... CloudNativePG will set the LD_LIBRARY_PATH environment variable to include /extensions/postgis/system , allowing PostgreSQL to locate and load these system libraries at runtime. Important Since ld_library_path must be set when the PostgreSQL process starts, changing this value requires a cluster restart for the new value to take effect. CloudNativePG does not currently trigger this restart automatically; you will need to manually restart the cluster (e.g., using cnpg restart ) after modifying ld_library_path . Image Specifications A standard extension container image for CloudNativePG includes two required directories at its root: share : contains the extension control file (e.g., <EXTENSION>.control ) and any SQL files. lib : contains the extension's shared library (e.g., <EXTENSION>.so ) and any additional required libraries. Following this structure ensures that the extension will be automatically discoverable and usable by PostgreSQL within CloudNativePG without requiring manual configuration. Important We encourage PostgreSQL extension developers to publish OCI-compliant extension images following this layout as part of their artifact distribution, making their extensions easily consumable within Kubernetes environments. Ideally, extension images should target a specific operating system distribution and architecture, be tied to a particular PostgreSQL version, and be built using the distribution\u2019s native packaging system (for example, using Debian or RPM packages). This approach ensures consistency, security, and compatibility with the PostgreSQL images used in your clusters. Caveats Currently, adding, removing, or updating an extension image triggers a restart of the PostgreSQL pods. This behavior is inherited from how image volumes work in Kubernetes. Before performing an extension update, ensure you have: Thoroughly tested the update process in a staging environment. Verified that the extension image contains the required upgrade path between the currently installed version and the target version. Updated the version field for the extension in the relevant Database resource definition to align with the new version in the image. These steps help prevent downtime or data inconsistencies in your PostgreSQL clusters during extension updates.","title":"Image Volume Extensions"},{"location":"imagevolume_extensions/#image-volume-extensions","text":"CloudNativePG supports the dynamic loading of PostgreSQL extensions into a Cluster at Pod startup using the Kubernetes ImageVolume feature and the extension_control_path GUC introduced in PostgreSQL 18, to which this project contributed. This feature allows you to mount a PostgreSQL extension , packaged as an OCI-compliant container image, as a read-only and immutable volume inside a running pod at a known filesystem path. You can make the extension available either globally, using the shared_preload_libraries option , or at the database level through the CREATE EXTENSION command. For the latter, you can use the Database resource\u2019s declarative extension management to ensure consistent, automated extension setup within your PostgreSQL databases.","title":"Image Volume Extensions"},{"location":"imagevolume_extensions/#benefits","text":"Image volume extensions decouple the distribution of PostgreSQL operand container images from the distribution of extensions. This eliminates the need to define and embed extensions at build time within your PostgreSQL images\u2014a major adoption blocker for PostgreSQL as a containerized workload, including from a security and supply chain perspective. As a result, you can: Use the official PostgreSQL minimal operand images provided by CloudNativePG. Dynamically add the extensions you need to your Cluster definitions, without rebuilding or maintaining custom PostgreSQL images. Reduce your operational surface by using immutable, minimal, and secure base images while adding only the extensions required for each workload. Extension images must be built according to the documented specifications .","title":"Benefits"},{"location":"imagevolume_extensions/#requirements","text":"To use image volume extensions with CloudNativePG, you need: PostgreSQL 18 or later , with support for extension_control_path . Kubernetes 1.33 , with the ImageVolume feature gate enabled. CloudNativePG-compatible extension container images , ensuring: Matching PostgreSQL major version of the Cluster resource. Compatible operating system distribution of the Cluster resource. Matching CPU architecture of the Cluster resource.","title":"Requirements"},{"location":"imagevolume_extensions/#how-it-works","text":"Extension images are defined in the .spec.postgresql.extensions stanza of a Cluster resource, which accepts an ordered list of extensions to be added to the PostgreSQL cluster. Info For field-level details, see the API reference for ExtensionConfiguration . Each image volume is mounted at /extensions/<EXTENSION_NAME> . By default, CloudNativePG automatically manages the relevant GUCs, setting: extension_control_path to /extensions/<EXTENSION_NAME>/share , allowing PostgreSQL to locate any extension control file within /extensions/<EXTENSION_NAME>/share/extension dynamic_library_path to /extensions/<EXTENSION_NAME>/lib These values are appended in the order in which the extensions are defined in the extensions list, ensuring deterministic path resolution within PostgreSQL. This allows PostgreSQL to discover and load the extension without requiring manual configuration inside the pod. Info Depending on how your extension container images are built and their layout, you may need to adjust the default extension_control_path and dynamic_library_path values to match the image structure. Important If the extension image includes shared libraries, they must be compiled with the same PostgreSQL major version, operating system distribution, and CPU architecture as the PostgreSQL container image used by your cluster, to ensure compatibility and prevent runtime issues.","title":"How it works"},{"location":"imagevolume_extensions/#how-to-add-a-new-extension","text":"Adding an extension to a database in CloudNativePG involves a few steps: Define the extension image in the Cluster resource so that PostgreSQL can discover and load it. Add the library to shared_preload_libraries if the extension requires it. Declare the extension in the Database resource where you want it installed, if the extension supports CREATE EXTENSION . Warning Avoid making changes to extension images and PostgreSQL configuration settings (such as shared_preload_libraries ) simultaneously. First, allow the pod to roll out with the new extension image, then update the PostgreSQL configuration. This limitation will be addressed in a future release of CloudNativePG. For illustration purposes, this guide uses a simple, fictitious extension named foo that supports CREATE EXTENSION .","title":"How to add a new extension"},{"location":"imagevolume_extensions/#adding-a-new-extension-to-a-cluster-resource","text":"You can add an ImageVolume -based extension to a Cluster using the .spec.postgresql.extensions stanza. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: foo-18 spec: # ... postgresql: extensions: - name: foo image: reference: # registry path for your extension image # ... The name field is mandatory and must be unique within the cluster , as it determines the mount path ( /extensions/foo in this example). It must consist of lowercase alphanumeric characters or hyphens ( - ) and must start and end with an alphanumeric character. The image stanza follows the Kubernetes ImageVolume API . The reference must point to a valid container registry path for the extension image. Important When a new extension is added to a running Cluster , CloudNativePG will automatically trigger a rolling update to attach the new image volume to each pod. Before adding a new extension in production, ensure you have thoroughly tested it in a staging environment to prevent configuration issues that could leave your PostgreSQL cluster in an unhealthy state. Once mounted, CloudNativePG will automatically configure PostgreSQL by appending: /extensions/foo/share to extension_control_path /extensions/foo/lib to dynamic_library_path This ensures that the PostgreSQL container is ready to serve the foo extension when requested by a database, as described in the next section. The CREATE EXTENSION foo command, triggered automatically during the reconciliation of the Database resource , will work without additional configuration, as PostgreSQL will locate: the extension control file at /extensions/foo/share/extension/foo.control the shared library at /extensions/foo/lib/foo.so","title":"Adding a new extension to a Cluster resource"},{"location":"imagevolume_extensions/#adding-a-new-extension-to-a-database-resource","text":"Once the extension is available in the PostgreSQL instance, you can leverage declarative databases to manage the lifecycle of your extensions within the target database. Continuing with the foo example, you can request the installation of the foo extension in the app database of the foo-18 cluster using the following resource definition: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: foo-app spec: name: app owner: app cluster: name: foo-18 extensions: - name: foo version: 1.0 CloudNativePG will automatically reconcile this resource, executing the CREATE EXTENSION foo command inside the app database if it is not already installed, ensuring your desired state is maintained without manual intervention.","title":"Adding a new extension to a Database resource"},{"location":"imagevolume_extensions/#advanced-topics","text":"In some cases, the default expected structure may be insufficient for your extension image, particularly when: The extension requires additional system libraries. Multiple extensions are bundled in the same image. The image uses a custom directory structure. Following the \"convention over configuration\" paradigm, CloudNativePG allows you to finely control the configuration of each extension image through the following fields: extension_control_path : A list of relative paths within the container image to be appended to PostgreSQL\u2019s extension_control_path , allowing it to locate extension control files. dynamic_library_path : A list of relative paths within the container image to be appended to PostgreSQL\u2019s dynamic_library_path , enabling it to locate shared library files for extensions. ld_library_path : A list of relative paths within the container image to be appended to the LD_LIBRARY_PATH environment variable of the instance manager process, allowing PostgreSQL to locate required system libraries at runtime. This flexibility enables you to support complex or non-standard extension images while maintaining clarity and predictability.","title":"Advanced Topics"},{"location":"imagevolume_extensions/#setting-custom-paths","text":"If your extension image does not use the default lib and share directories for its libraries and control files, you can override the defaults by explicitly setting extension_control_path and dynamic_library_path . For example: spec: postgresql: extensions: - name: my-extension extension_control_path: - my/share/path dynamic_library_path: - my/lib/path image: reference: # registry path for your extension image CloudNativePG will configure PostgreSQL with: /extensions/my-extension/my/share/path appended to extension_control_path /extensions/my-extension/my/lib/path appended to dynamic_library_path This allows PostgreSQL to discover your extension\u2019s control files and shared libraries correctly, even with a non-standard layout.","title":"Setting Custom Paths"},{"location":"imagevolume_extensions/#multi-extension-images","text":"You may need to include multiple extensions within the same container image, adopting a structure where each extension\u2019s files reside in their own subdirectory. For example, to package PostGIS and pgRouting together in a single image, each in its own subdirectory: # ... spec: # ... postgresql: extensions: - name: geospatial extension_control_path: - postgis/share - pgrouting/share dynamic_library_path: - postgis/lib - pgrouting/lib # ... image: reference: # registry path for your geospatial image # ... # ... # ...","title":"Multi-extension Images"},{"location":"imagevolume_extensions/#including-system-libraries","text":"Some extensions, such as PostGIS, require system libraries that may not be present in the base PostgreSQL image. To support these requirements, you can package the necessary libraries within your extension container image and make them available to PostgreSQL using the ld_library_path field. For example, if your extension image includes a system directory with the required libraries: # ... spec: # ... postgresql: extensions: - name: postgis # ... ld_library_path: - syslib image: reference: # registry path for your PostGIS image # ... # ... # ... CloudNativePG will set the LD_LIBRARY_PATH environment variable to include /extensions/postgis/system , allowing PostgreSQL to locate and load these system libraries at runtime. Important Since ld_library_path must be set when the PostgreSQL process starts, changing this value requires a cluster restart for the new value to take effect. CloudNativePG does not currently trigger this restart automatically; you will need to manually restart the cluster (e.g., using cnpg restart ) after modifying ld_library_path .","title":"Including System Libraries"},{"location":"imagevolume_extensions/#image-specifications","text":"A standard extension container image for CloudNativePG includes two required directories at its root: share : contains the extension control file (e.g., <EXTENSION>.control ) and any SQL files. lib : contains the extension's shared library (e.g., <EXTENSION>.so ) and any additional required libraries. Following this structure ensures that the extension will be automatically discoverable and usable by PostgreSQL within CloudNativePG without requiring manual configuration. Important We encourage PostgreSQL extension developers to publish OCI-compliant extension images following this layout as part of their artifact distribution, making their extensions easily consumable within Kubernetes environments. Ideally, extension images should target a specific operating system distribution and architecture, be tied to a particular PostgreSQL version, and be built using the distribution\u2019s native packaging system (for example, using Debian or RPM packages). This approach ensures consistency, security, and compatibility with the PostgreSQL images used in your clusters.","title":"Image Specifications"},{"location":"imagevolume_extensions/#caveats","text":"Currently, adding, removing, or updating an extension image triggers a restart of the PostgreSQL pods. This behavior is inherited from how image volumes work in Kubernetes. Before performing an extension update, ensure you have: Thoroughly tested the update process in a staging environment. Verified that the extension image contains the required upgrade path between the currently installed version and the target version. Updated the version field for the extension in the relevant Database resource definition to align with the new version in the image. These steps help prevent downtime or data inconsistencies in your PostgreSQL clusters during extension updates.","title":"Caveats"},{"location":"installation_upgrade/","text":"Installation and upgrades Installation on Kubernetes Directly using the operator manifest The operator can be installed like any other resource in Kubernetes, through a YAML manifest applied via kubectl . You can install the latest operator manifest for this minor release as follows: kubectl apply --server-side -f \\ https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/releases/cnpg-1.27.0-rc1.yaml You can verify that with: kubectl rollout status deployment \\ -n cnpg-system cnpg-controller-manager Using the cnpg plugin for kubectl You can use the cnpg plugin to override the default configuration options that are in the static manifests. For example, to generate the default latest manifest but change the watch namespaces to only be a specific namespace, you could run: kubectl cnpg install generate \\ --watch-namespace \"specific-namespace\" \\ > cnpg_for_specific_namespace.yaml Please refer to \" cnpg plugin\" documentation for a more comprehensive example. Warning If you are deploying CloudNativePG on GKE and get an error ( ... failed to call webhook... ), be aware that by default traffic between worker nodes and control plane is blocked by the firewall except for a few specific ports, as explained in the official docs and by this issue . You'll need to either change the targetPort in the webhook service, to be one of the allowed ones, or open the webhooks' port ( 9443 ) on the firewall. Testing the latest development snapshot If you want to test or evaluate the latest development snapshot of CloudNativePG before the next official patch release, you can download the manifests from the cloudnative-pg/artifacts which provides easy access to the current trunk (main) as well as to each supported release. For example, you can install the latest snapshot of the operator with: curl -sSfL \\ https://raw.githubusercontent.com/cloudnative-pg/artifacts/main/manifests/operator-manifest.yaml | \\ kubectl apply --server-side -f - If you are instead looking for the latest snapshot of the operator for this specific minor release, you can just run: curl -sSfL \\ https://raw.githubusercontent.com/cloudnative-pg/artifacts/release-1.27/manifests/operator-manifest.yaml | \\ kubectl apply --server-side -f - Important Snapshots are not supported by the CloudNativePG Community, and are not intended for use in production. Using the Helm Chart The operator can be installed using the provided Helm chart . Using OLM CloudNativePG can also be installed via the Operator Lifecycle Manager (OLM) directly from OperatorHub.io . For deployments on Red Hat OpenShift, EDB offers and fully supports a certified version of CloudNativePG, available through the Red Hat OpenShift Container Platform . Details about the deployment In Kubernetes, the operator is by default installed in the cnpg-system namespace as a Kubernetes Deployment . The name of this deployment depends on the installation method. When installed through the manifest or the cnpg plugin, it is called cnpg-controller-manager by default. When installed via Helm, the default name is cnpg-cloudnative-pg . Note With Helm you can customize the name of the deployment via the fullnameOverride field in the \"values.yaml\" file . You can get more information using the describe command in kubectl : $ kubectl get deployments -n cnpg-system NAME READY UP-TO-DATE AVAILABLE AGE <deployment-name> 1/1 1 1 18m kubectl describe deploy \\ -n cnpg-system \\ <deployment-name> As with any Deployment, it sits on top of a ReplicaSet and supports rolling upgrades. The default configuration of the CloudNativePG operator comes with a Deployment of a single replica, which is suitable for most installations. In case the node where the pod is running is not reachable anymore, the pod will be rescheduled on another node. If you require high availability at the operator level, it is possible to specify multiple replicas in the Deployment configuration - given that the operator supports leader election. Also, you can take advantage of taints and tolerations to make sure that the operator does not run on the same nodes where the actual PostgreSQL clusters are running (this might even include the control plane for self-managed Kubernetes installations). Operator configuration You can change the default behavior of the operator by overriding some default options. For more information, please refer to the \"Operator configuration\" section. Upgrades Important Please carefully read the release notes before performing an upgrade as some versions might require extra steps. Upgrading CloudNativePG operator is a two-step process: upgrade the controller and the related Kubernetes resources upgrade the instance manager running in every PostgreSQL pod Unless differently stated in the release notes, the first step is normally done by applying the manifest of the newer version for plain Kubernetes installations, or using the native package manager of the used distribution (please follow the instructions in the above sections). The second step is automatically triggered after updating the controller. By default, this initiates a rolling update of every deployed PostgreSQL cluster, upgrading one instance at a time to use the new instance manager. The rolling update concludes with a switchover, which is governed by the primaryUpdateStrategy option. The default value, unsupervised , completes the switchover automatically. If set to supervised , the user must manually promote the new primary instance using the cnpg plugin for kubectl . Rolling updates This process is discussed in-depth on the Rolling Updates page. Important In case primaryUpdateStrategy is set to the default value of unsupervised , an upgrade of the operator will trigger a switchover on your PostgreSQL cluster, causing a (normally negligible) downtime. If your PostgreSQL Cluster has only one instance, the instance will be automatically restarted as supervised value is not supported for primaryUpdateStrategy . In either case, your applications will have to reconnect to PostgreSQL. The default rolling update behavior can be replaced with in-place updates of the instance manager. This approach does not require a restart of the PostgreSQL instance, thereby avoiding a switchover within the cluster. This feature, which is disabled by default, is described in detail below. Spread Upgrades By default, all PostgreSQL clusters are rolled out simultaneously, which may lead to a spike in resource usage, especially when managing multiple clusters. CloudNativePG provides two configuration options at the operator level that allow you to introduce delays between cluster roll-outs or even between instances within the same cluster, helping to distribute resource usage over time: CLUSTERS_ROLLOUT_DELAY : Defines the number of seconds to wait between roll-outs of different PostgreSQL clusters (default: 0 ). INSTANCES_ROLLOUT_DELAY : Defines the number of seconds to wait between roll-outs of individual instances within the same PostgreSQL cluster (default: 0 ). In-place updates of the instance manager By default, CloudNativePG issues a rolling update of the cluster every time the operator is updated. The new instance manager shipped with the operator is added to each PostgreSQL pod via an init container. However, this behavior can be changed via configuration to enable in-place updates of the instance manager, which is the PID 1 process that keeps the container alive. Internally, each instance manager in CloudNativePG supports the injection of a new executable that replaces the existing one after successfully completing an integrity verification phase and gracefully terminating all internal processes. Upon restarting with the new binary, the instance manager seamlessly adopts the already running postmaster . As a result, the PostgreSQL process is unaffected by the update, refraining from the need to perform a switchover. The other side of the coin, is that the Pod is changed after the start, breaking the pure concept of immutability. You can enable this feature by setting the ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES environment variable to 'true' in the operator configuration . The in-place upgrade process will not change the init container image inside the Pods. Therefore, the Pod definition will not reflect the current version of the operator. Compatibility among versions CloudNativePG follows semantic versioning. Every release of the operator within the same API version is compatible with the previous one. The current API version is v1, corresponding to versions 1.x.y of the operator. In addition to new features, new versions of the operator contain bug fixes and stability enhancements. Because of this, we strongly encourage users to upgrade to the latest version of the operator , as each version is released in order to maintain the most secure and stable Postgres environment. CloudNativePG currently releases new versions of the operator at least monthly. If you are unable to apply updates as each version becomes available, we recommend upgrading through each version in sequential order to come current periodically and not skipping versions. The release notes page contains a detailed list of the changes introduced in every released version of CloudNativePG, and it must be read before upgrading to a newer version of the software. Most versions are directly upgradable and in that case, applying the newer manifest for plain Kubernetes installations or using the native package manager of the chosen distribution is enough. When versions are not directly upgradable, the old version needs to be removed before installing the new one. This won't affect user data but only the operator itself. Upgrading to 1.26 from a previous minor version Important We strongly recommend that all CloudNativePG users upgrade to version 1.26.1, or at a minimum, to the latest stable version of your current minor release (for example, 1.25.x). Warning Due to changes in the startup probe for the manager component ( #6623 ), upgrading the operator will trigger a restart of your PostgreSQL clusters, even if in-place updates are enabled ( ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES=true ). Your applications will need to reconnect to PostgreSQL after the upgrade. Deprecation of backup metrics and fields in the Cluster .status With the transition to a backup and recovery agnostic approach based on CNPG-I plugins in CloudNativePG, which began with version 1.26.0 for Barman Cloud, we are starting the deprecation period for the following fields in the .status section of the Cluster resource: firstRecoverabilityPoint firstRecoverabilityPointByMethod lastSuccessfulBackup lastSuccessfulBackupByMethod lastFailedBackup The following Prometheus metrics are also deprecated: cnpg_collector_first_recoverability_point cnpg_collector_last_failed_backup_timestamp cnpg_collector_last_available_backup_timestamp Warning If you have migrated to a plugin-based backup and recovery solution such as Barman Cloud, these fields and metrics are no longer synchronized and will not be updated. Users still relying on the in-core support for Barman Cloud and volume snapshots can continue to use these fields for the time being. Under the new plugin-based approach, multiple backup methods can operate simultaneously, each with its own timeline for backup and recovery. For example, some plugins may provide snapshots without WAL archiving, while others support continuous archiving. Because of this flexibility, maintaining centralized status fields in the Cluster resource could be misleading or confusing, as they would not accurately represent the state across all configured backup methods. For this reason, these fields are being deprecated. Instead, each plugin is responsible for exposing its own backup status information and providing metrics back to the instance manager for monitoring and operational awareness. Declarative Hibernation in the cnpg plugin In this release, the cnpg plugin for kubectl transitions from an imperative to a declarative approach for cluster hibernation . The hibernate on and hibernate off commands are now convenient shortcuts that apply declarative changes to enable or disable hibernation. The hibernate status command has been removed, as its purpose is now fulfilled by the standard status command. Upgrading to 1.25 from a previous minor version Warning Every time you are upgrading to a higher minor release, make sure you go through the release notes and upgrade instructions of all the intermediate minor releases. For example, if you want to move from 1.23.x to 1.25, make sure you go through the release notes and upgrade instructions for 1.24 and 1.25. No changes to existing 1.24 cluster configurations are required when upgrading to 1.25. Upgrading to 1.24 from a previous minor version From Replica Clusters to Distributed Topology One of the key enhancements in CloudNativePG 1.24.0 is the upgrade of the replica cluster feature. The former replica cluster feature, now referred to as the \"Standalone Replica Cluster,\" is no longer recommended for Disaster Recovery (DR) and High Availability (HA) scenarios that span multiple Kubernetes clusters. Standalone replica clusters are best suited for read-only workloads, such as reporting, OLAP, or creating development environments with test data. For DR and HA purposes, CloudNativePG now introduces the Distributed Topology strategy for replica clusters. This new strategy allows you to build PostgreSQL clusters across private, public, hybrid, and multi-cloud environments, spanning multiple regions and potentially different cloud providers. It also provides an API to control the switchover operation, ensuring that only one cluster acts as the primary at any given time. This Distributed Topology strategy enhances resilience and scalability, making it a robust solution for modern, distributed applications that require high availability and disaster recovery capabilities across diverse infrastructure setups. You can seamlessly transition from a previous replica cluster configuration to a distributed topology by modifying all the Cluster resources involved in the distributed PostgreSQL setup. Ensure the following steps are taken: Configure the externalClusters section to include all the clusters involved in the distributed topology. We strongly suggest using the same configuration across all Cluster resources for maintainability and consistency. Configure the primary and source fields in the .spec.replica stanza to reflect the distributed topology. The primary field should contain the name of the current primary cluster in the distributed topology, while the source field should contain the name of the cluster each Cluster resource is replicating from. It is important to note that the enabled field, which was previously set to true or false , should now be unset (default). For more information, please refer to the \"Distributed Topology\" section for replica clusters .","title":"Installation and upgrades"},{"location":"installation_upgrade/#installation-and-upgrades","text":"","title":"Installation and upgrades"},{"location":"installation_upgrade/#installation-on-kubernetes","text":"","title":"Installation on Kubernetes"},{"location":"installation_upgrade/#directly-using-the-operator-manifest","text":"The operator can be installed like any other resource in Kubernetes, through a YAML manifest applied via kubectl . You can install the latest operator manifest for this minor release as follows: kubectl apply --server-side -f \\ https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/releases/cnpg-1.27.0-rc1.yaml You can verify that with: kubectl rollout status deployment \\ -n cnpg-system cnpg-controller-manager","title":"Directly using the operator manifest"},{"location":"installation_upgrade/#using-the-cnpg-plugin-for-kubectl","text":"You can use the cnpg plugin to override the default configuration options that are in the static manifests. For example, to generate the default latest manifest but change the watch namespaces to only be a specific namespace, you could run: kubectl cnpg install generate \\ --watch-namespace \"specific-namespace\" \\ > cnpg_for_specific_namespace.yaml Please refer to \" cnpg plugin\" documentation for a more comprehensive example. Warning If you are deploying CloudNativePG on GKE and get an error ( ... failed to call webhook... ), be aware that by default traffic between worker nodes and control plane is blocked by the firewall except for a few specific ports, as explained in the official docs and by this issue . You'll need to either change the targetPort in the webhook service, to be one of the allowed ones, or open the webhooks' port ( 9443 ) on the firewall.","title":"Using the cnpg plugin for kubectl"},{"location":"installation_upgrade/#testing-the-latest-development-snapshot","text":"If you want to test or evaluate the latest development snapshot of CloudNativePG before the next official patch release, you can download the manifests from the cloudnative-pg/artifacts which provides easy access to the current trunk (main) as well as to each supported release. For example, you can install the latest snapshot of the operator with: curl -sSfL \\ https://raw.githubusercontent.com/cloudnative-pg/artifacts/main/manifests/operator-manifest.yaml | \\ kubectl apply --server-side -f - If you are instead looking for the latest snapshot of the operator for this specific minor release, you can just run: curl -sSfL \\ https://raw.githubusercontent.com/cloudnative-pg/artifacts/release-1.27/manifests/operator-manifest.yaml | \\ kubectl apply --server-side -f - Important Snapshots are not supported by the CloudNativePG Community, and are not intended for use in production.","title":"Testing the latest development snapshot"},{"location":"installation_upgrade/#using-the-helm-chart","text":"The operator can be installed using the provided Helm chart .","title":"Using the Helm Chart"},{"location":"installation_upgrade/#using-olm","text":"CloudNativePG can also be installed via the Operator Lifecycle Manager (OLM) directly from OperatorHub.io . For deployments on Red Hat OpenShift, EDB offers and fully supports a certified version of CloudNativePG, available through the Red Hat OpenShift Container Platform .","title":"Using OLM"},{"location":"installation_upgrade/#details-about-the-deployment","text":"In Kubernetes, the operator is by default installed in the cnpg-system namespace as a Kubernetes Deployment . The name of this deployment depends on the installation method. When installed through the manifest or the cnpg plugin, it is called cnpg-controller-manager by default. When installed via Helm, the default name is cnpg-cloudnative-pg . Note With Helm you can customize the name of the deployment via the fullnameOverride field in the \"values.yaml\" file . You can get more information using the describe command in kubectl : $ kubectl get deployments -n cnpg-system NAME READY UP-TO-DATE AVAILABLE AGE <deployment-name> 1/1 1 1 18m kubectl describe deploy \\ -n cnpg-system \\ <deployment-name> As with any Deployment, it sits on top of a ReplicaSet and supports rolling upgrades. The default configuration of the CloudNativePG operator comes with a Deployment of a single replica, which is suitable for most installations. In case the node where the pod is running is not reachable anymore, the pod will be rescheduled on another node. If you require high availability at the operator level, it is possible to specify multiple replicas in the Deployment configuration - given that the operator supports leader election. Also, you can take advantage of taints and tolerations to make sure that the operator does not run on the same nodes where the actual PostgreSQL clusters are running (this might even include the control plane for self-managed Kubernetes installations). Operator configuration You can change the default behavior of the operator by overriding some default options. For more information, please refer to the \"Operator configuration\" section.","title":"Details about the deployment"},{"location":"installation_upgrade/#upgrades","text":"Important Please carefully read the release notes before performing an upgrade as some versions might require extra steps. Upgrading CloudNativePG operator is a two-step process: upgrade the controller and the related Kubernetes resources upgrade the instance manager running in every PostgreSQL pod Unless differently stated in the release notes, the first step is normally done by applying the manifest of the newer version for plain Kubernetes installations, or using the native package manager of the used distribution (please follow the instructions in the above sections). The second step is automatically triggered after updating the controller. By default, this initiates a rolling update of every deployed PostgreSQL cluster, upgrading one instance at a time to use the new instance manager. The rolling update concludes with a switchover, which is governed by the primaryUpdateStrategy option. The default value, unsupervised , completes the switchover automatically. If set to supervised , the user must manually promote the new primary instance using the cnpg plugin for kubectl . Rolling updates This process is discussed in-depth on the Rolling Updates page. Important In case primaryUpdateStrategy is set to the default value of unsupervised , an upgrade of the operator will trigger a switchover on your PostgreSQL cluster, causing a (normally negligible) downtime. If your PostgreSQL Cluster has only one instance, the instance will be automatically restarted as supervised value is not supported for primaryUpdateStrategy . In either case, your applications will have to reconnect to PostgreSQL. The default rolling update behavior can be replaced with in-place updates of the instance manager. This approach does not require a restart of the PostgreSQL instance, thereby avoiding a switchover within the cluster. This feature, which is disabled by default, is described in detail below.","title":"Upgrades"},{"location":"installation_upgrade/#spread-upgrades","text":"By default, all PostgreSQL clusters are rolled out simultaneously, which may lead to a spike in resource usage, especially when managing multiple clusters. CloudNativePG provides two configuration options at the operator level that allow you to introduce delays between cluster roll-outs or even between instances within the same cluster, helping to distribute resource usage over time: CLUSTERS_ROLLOUT_DELAY : Defines the number of seconds to wait between roll-outs of different PostgreSQL clusters (default: 0 ). INSTANCES_ROLLOUT_DELAY : Defines the number of seconds to wait between roll-outs of individual instances within the same PostgreSQL cluster (default: 0 ).","title":"Spread Upgrades"},{"location":"installation_upgrade/#in-place-updates-of-the-instance-manager","text":"By default, CloudNativePG issues a rolling update of the cluster every time the operator is updated. The new instance manager shipped with the operator is added to each PostgreSQL pod via an init container. However, this behavior can be changed via configuration to enable in-place updates of the instance manager, which is the PID 1 process that keeps the container alive. Internally, each instance manager in CloudNativePG supports the injection of a new executable that replaces the existing one after successfully completing an integrity verification phase and gracefully terminating all internal processes. Upon restarting with the new binary, the instance manager seamlessly adopts the already running postmaster . As a result, the PostgreSQL process is unaffected by the update, refraining from the need to perform a switchover. The other side of the coin, is that the Pod is changed after the start, breaking the pure concept of immutability. You can enable this feature by setting the ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES environment variable to 'true' in the operator configuration . The in-place upgrade process will not change the init container image inside the Pods. Therefore, the Pod definition will not reflect the current version of the operator.","title":"In-place updates of the instance manager"},{"location":"installation_upgrade/#compatibility-among-versions","text":"CloudNativePG follows semantic versioning. Every release of the operator within the same API version is compatible with the previous one. The current API version is v1, corresponding to versions 1.x.y of the operator. In addition to new features, new versions of the operator contain bug fixes and stability enhancements. Because of this, we strongly encourage users to upgrade to the latest version of the operator , as each version is released in order to maintain the most secure and stable Postgres environment. CloudNativePG currently releases new versions of the operator at least monthly. If you are unable to apply updates as each version becomes available, we recommend upgrading through each version in sequential order to come current periodically and not skipping versions. The release notes page contains a detailed list of the changes introduced in every released version of CloudNativePG, and it must be read before upgrading to a newer version of the software. Most versions are directly upgradable and in that case, applying the newer manifest for plain Kubernetes installations or using the native package manager of the chosen distribution is enough. When versions are not directly upgradable, the old version needs to be removed before installing the new one. This won't affect user data but only the operator itself.","title":"Compatibility among versions"},{"location":"installation_upgrade/#upgrading-to-126-from-a-previous-minor-version","text":"Important We strongly recommend that all CloudNativePG users upgrade to version 1.26.1, or at a minimum, to the latest stable version of your current minor release (for example, 1.25.x). Warning Due to changes in the startup probe for the manager component ( #6623 ), upgrading the operator will trigger a restart of your PostgreSQL clusters, even if in-place updates are enabled ( ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES=true ). Your applications will need to reconnect to PostgreSQL after the upgrade.","title":"Upgrading to 1.26 from a previous minor version"},{"location":"installation_upgrade/#deprecation-of-backup-metrics-and-fields-in-the-cluster-status","text":"With the transition to a backup and recovery agnostic approach based on CNPG-I plugins in CloudNativePG, which began with version 1.26.0 for Barman Cloud, we are starting the deprecation period for the following fields in the .status section of the Cluster resource: firstRecoverabilityPoint firstRecoverabilityPointByMethod lastSuccessfulBackup lastSuccessfulBackupByMethod lastFailedBackup The following Prometheus metrics are also deprecated: cnpg_collector_first_recoverability_point cnpg_collector_last_failed_backup_timestamp cnpg_collector_last_available_backup_timestamp Warning If you have migrated to a plugin-based backup and recovery solution such as Barman Cloud, these fields and metrics are no longer synchronized and will not be updated. Users still relying on the in-core support for Barman Cloud and volume snapshots can continue to use these fields for the time being. Under the new plugin-based approach, multiple backup methods can operate simultaneously, each with its own timeline for backup and recovery. For example, some plugins may provide snapshots without WAL archiving, while others support continuous archiving. Because of this flexibility, maintaining centralized status fields in the Cluster resource could be misleading or confusing, as they would not accurately represent the state across all configured backup methods. For this reason, these fields are being deprecated. Instead, each plugin is responsible for exposing its own backup status information and providing metrics back to the instance manager for monitoring and operational awareness.","title":"Deprecation of backup metrics and fields in the Cluster .status"},{"location":"installation_upgrade/#declarative-hibernation-in-the-cnpg-plugin","text":"In this release, the cnpg plugin for kubectl transitions from an imperative to a declarative approach for cluster hibernation . The hibernate on and hibernate off commands are now convenient shortcuts that apply declarative changes to enable or disable hibernation. The hibernate status command has been removed, as its purpose is now fulfilled by the standard status command.","title":"Declarative Hibernation in the cnpg plugin"},{"location":"installation_upgrade/#upgrading-to-125-from-a-previous-minor-version","text":"Warning Every time you are upgrading to a higher minor release, make sure you go through the release notes and upgrade instructions of all the intermediate minor releases. For example, if you want to move from 1.23.x to 1.25, make sure you go through the release notes and upgrade instructions for 1.24 and 1.25. No changes to existing 1.24 cluster configurations are required when upgrading to 1.25.","title":"Upgrading to 1.25 from a previous minor version"},{"location":"installation_upgrade/#upgrading-to-124-from-a-previous-minor-version","text":"","title":"Upgrading to 1.24 from a previous minor version"},{"location":"installation_upgrade/#from-replica-clusters-to-distributed-topology","text":"One of the key enhancements in CloudNativePG 1.24.0 is the upgrade of the replica cluster feature. The former replica cluster feature, now referred to as the \"Standalone Replica Cluster,\" is no longer recommended for Disaster Recovery (DR) and High Availability (HA) scenarios that span multiple Kubernetes clusters. Standalone replica clusters are best suited for read-only workloads, such as reporting, OLAP, or creating development environments with test data. For DR and HA purposes, CloudNativePG now introduces the Distributed Topology strategy for replica clusters. This new strategy allows you to build PostgreSQL clusters across private, public, hybrid, and multi-cloud environments, spanning multiple regions and potentially different cloud providers. It also provides an API to control the switchover operation, ensuring that only one cluster acts as the primary at any given time. This Distributed Topology strategy enhances resilience and scalability, making it a robust solution for modern, distributed applications that require high availability and disaster recovery capabilities across diverse infrastructure setups. You can seamlessly transition from a previous replica cluster configuration to a distributed topology by modifying all the Cluster resources involved in the distributed PostgreSQL setup. Ensure the following steps are taken: Configure the externalClusters section to include all the clusters involved in the distributed topology. We strongly suggest using the same configuration across all Cluster resources for maintainability and consistency. Configure the primary and source fields in the .spec.replica stanza to reflect the distributed topology. The primary field should contain the name of the current primary cluster in the distributed topology, while the source field should contain the name of the cluster each Cluster resource is replicating from. It is important to note that the enabled field, which was previously set to true or false , should now be unset (default). For more information, please refer to the \"Distributed Topology\" section for replica clusters .","title":"From Replica Clusters to Distributed Topology"},{"location":"instance_manager/","text":"Postgres instance manager CloudNativePG does not rely on an external tool for failover management. It simply relies on the Kubernetes API server and a native key component called: the Postgres instance manager . The instance manager takes care of the entire lifecycle of the PostgreSQL server process (also known as postmaster ). When you create a new cluster, the operator makes a Pod per instance. The field .spec.instances specifies how many instances to create. Each Pod will start the instance manager as the parent process (PID 1) for the main container, which in turn runs the PostgreSQL instance. During the lifetime of the Pod, the instance manager acts as a backend to handle the startup, liveness and readiness probes . Startup Probe The startup probe ensures that a PostgreSQL instance, whether a primary or standby, has fully started. Info By default, the startup probe uses pg_isready . However, the behavior can be customized by specifying a different startup strategy. While the startup probe is running, the liveness and readiness probes remain disabled. Following Kubernetes standards, if the startup probe fails, the kubelet will terminate the container, which will then be restarted. The .spec.startDelay parameter specifies the maximum time, in seconds, allowed for the startup probe to succeed. By default, the startDelay is set to 3600 seconds. It is recommended to adjust this setting based on the time PostgreSQL needs to fully initialize in your specific environment. Warning Setting .spec.startDelay too low can cause the liveness probe to activate prematurely, potentially resulting in unnecessary Pod restarts if PostgreSQL hasn\u2019t fully initialized. CloudNativePG configures the startup probe with the following default parameters: failureThreshold: FAILURE_THRESHOLD periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 The failureThreshold value is automatically calculated by dividing startDelay by periodSeconds . You can customize any of the probe settings in the .spec.probes.startup section of your configuration. Warning Be sure that any custom probe settings are tailored to your cluster's operational requirements to avoid unintended disruptions. Info For more details on probe configuration, refer to the probe API documentation . If you manually specify .spec.probes.startup.failureThreshold , it will override the default behavior and disable the automatic use of startDelay . For example, the following configuration explicitly sets custom probe parameters, bypassing startDelay : # ... snip spec: probes: startup: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10 Startup Probe Strategy In certain scenarios, you may need to customize the startup strategy for your PostgreSQL cluster. For example, you might delay marking a replica as started until it begins streaming from the primary or define a replication lag threshold that must be met before considering the replica ready. To accommodate these requirements, CloudNativePG extends the .spec.probes.startup stanza with two optional parameters: type : specifies the criteria for considering the probe successful. Accepted values, in increasing order of complexity/depth, include: pg_isready : marks the probe as successful when the pg_isready command exits with 0 . This is the default for primary instances and replicas. query : marks the probe as successful when a basic query is executed on the postgres database locally. streaming : marks the probe as successful when the replica begins streaming from its source and meets the specified lag requirements (details below). maximumLag : defines the maximum acceptable replication lag, measured in bytes (expressed as Kubernetes quantities). This parameter is only applicable when type is set to streaming . If maximumLag is not specified, the replica is considered successfully started as soon as it begins streaming. Important The .spec.probes.startup.maximumLag option is validated and enforced only during the startup phase of the pod, meaning it applies exclusively when the replica is starting. Warning Incorrect configuration of the maximumLag option can cause continuous failures of the startup probe, leading to repeated replica restarts. Ensure you understand how this option works and configure appropriate values for failureThreshold and periodSeconds to give the replica enough time to catch up with its source. The following example requires a replica to have a maximum lag of 16Mi from the source to be considered started: # <snip> probes: startup: type: streaming maximumLag: 16Mi Liveness Probe The liveness probe begins after the startup probe successfully completes. Its primary role is to ensure the PostgreSQL instance manager is operating correctly. Following Kubernetes standards, if the liveness probe fails, the kubelet will terminate the container, which will then be restarted. The amount of time before a Pod is classified as not alive is configurable via the .spec.livenessProbeTimeout parameter. CloudNativePG configures the liveness probe with the following default parameters: failureThreshold: FAILURE_THRESHOLD periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 The failureThreshold value is automatically calculated by dividing livenessProbeTimeout by periodSeconds . By default, .spec.livenessProbeTimeout is set to 30 seconds. This means the liveness probe will report a failure if it detects three consecutive probe failures, with a 10-second interval between each check. You can customize any of the probe settings in the .spec.probes.liveness section of your configuration. Warning Be sure that any custom probe settings are tailored to your cluster's operational requirements to avoid unintended disruptions. Info For more details on probe configuration, refer to the probe API documentation . If you manually specify .spec.probes.liveness.failureThreshold , it will override the default behavior and disable the automatic use of livenessProbeTimeout . For example, the following configuration explicitly sets custom probe parameters, bypassing livenessProbeTimeout : # ... snip spec: probes: liveness: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10 Primary Isolation CloudNativePG 1.27 introduces an additional behavior for the liveness probe of a PostgreSQL primary, which will report a failure if both of the following conditions are met: The instance manager cannot reach the Kubernetes API server The instance manager cannot reach any other instance via the instance manager\u2019s REST API The effect of this behavior is to consider an isolated primary to be not alive and subsequently shut it down when the liveness probe fails. It is enabled by default and can be disabled by adding the following: spec: probes: liveness: isolationCheck: enabled: false Important Be aware that the default liveness probe settings\u2014automatically derived from livenessProbeTimeout \u2014might be aggressive (30 seconds). As such, we recommend explicitly setting the liveness probe configuration to suit your environment. The spec also accepts two optional network settings: requestTimeout and connectionTimeout , both defaulting to 1000 (in milliseconds). In cloud environments, you may need to increase these values. For example: spec: probes: liveness: isolationCheck: enabled: true requestTimeout: \"2000\" connectionTimeout: \"2000\" Readiness Probe The readiness probe starts once the startup probe has successfully completed. Its primary purpose is to check whether the PostgreSQL instance is ready to accept traffic and serve requests at any point during the pod's lifecycle. Info By default, the readiness probe uses pg_isready . However, the behavior can be customized by specifying a different readiness strategy. Following Kubernetes standards, if the readiness probe fails, the pod will be marked unready and will not receive traffic from any services. An unready pod is also ineligible for promotion during automated failover scenarios. CloudNativePG uses the following default configuration for the readiness probe: failureThreshold: 3 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 If the default settings do not suit your requirements, you can fully customize the readiness probe by specifying parameters in the .spec.probes.readiness stanza. For example: # ... snip spec: probes: readiness: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10 Warning Ensure that any custom probe settings are aligned with your cluster\u2019s operational requirements to prevent unintended disruptions. Info For more information on configuring probes, see the probe API . Readiness Probe Strategy In certain scenarios, you may need to customize the readiness strategy for your cluster. For example, you might delay marking a replica as ready until it begins streaming from the primary or define a maximum replication lag threshold before considering the replica ready. To accommodate these requirements, CloudNativePG extends the .spec.probes.readiness stanza with two optional parameters: type and maximumLag . Please refer to the Startup Probe Strategy section for detailed information on these options. Important Unlike the startup probe, the .spec.probes.readiness.maximumLag option is continuously monitored. A lagging replica may become unready if this setting is not appropriately tuned. Warning Incorrect configuration of the maximumLag option can lead to repeated readiness probe failures, causing serious consequences, such as: Exclusion of the replica from key operator features, such as promotion during failover or participation in synchronous replication quorum. Disruptions in read/read-only services. In longer failover times scenarios, replicas might be declared unready, leading to a cluster stall requiring manual intervention. Recommendation Use the streaming and maximumLag options with extreme caution. If you're unfamiliar with PostgreSQL replication, rely on the default strategy. Seek professional advice if unsure. The following example requires a replica to have a maximum lag of 64Mi from the source to be considered ready. It also provides approximately 300 seconds (30 failures \u00d7 10 seconds) for the startup probe to succeed: # <snip> probes: readiness: type: streaming maximumLag: 64Mi failureThreshold: 30 periodSeconds: 10 Shutdown control When a Pod running Postgres is deleted, either manually or by Kubernetes following a node drain operation, the kubelet will send a termination signal to the instance manager, and the instance manager will take care of shutting down PostgreSQL in an appropriate way. The .spec.smartShutdownTimeout and .spec.stopDelay options, expressed in seconds, control the amount of time given to PostgreSQL to shut down. The values default to 180 and 1800 seconds, respectively. The shutdown procedure is composed of two steps: The instance manager requests a smart shut down, disallowing any new connection to PostgreSQL. This step will last for up to .spec.smartShutdownTimeout seconds. If PostgreSQL is still up, the instance manager requests a fast shut down, terminating any existing connection and exiting promptly. If the instance is archiving and/or streaming WAL files, the process will wait for up to the remaining time set in .spec.stopDelay to complete the operation and then forcibly shut down. Such a timeout needs to be at least 15 seconds. Important In order to avoid any data loss in the Postgres cluster, which impacts the database RPO , don't delete the Pod where the primary instance is running. In this case, perform a switchover to another instance first. Shutdown of the primary during a switchover During a switchover, the shutdown procedure is slightly different from the general case. Indeed, the operator requires the former primary to issue a fast shut down before the selected new primary can be promoted, in order to ensure that all the data are available on the new primary. For this reason, the .spec.switchoverDelay , expressed in seconds, controls the time given to the former primary to shut down gracefully and archive all the WAL files. By default it is set to 3600 (1 hour). Warning The .spec.switchoverDelay option affects the RPO and RTO of your PostgreSQL database. Setting it to a low value, might favor RTO over RPO but lead to data loss at cluster level and/or backup level. On the contrary, setting it to a high value, might remove the risk of data loss while leaving the cluster without an active primary for a longer time during the switchover. Failover In case of primary pod failure, the cluster will go into failover mode. Please refer to the \"Failover\" section for details. Disk Full Failure Storage exhaustion is a well known issue for PostgreSQL clusters. The PostgreSQL documentation highlights the possible failure scenarios and the importance of monitoring disk usage to prevent it from becoming full. The same applies to CloudNativePG and Kubernetes as well: the \"Monitoring\" section provides details on checking the disk space used by WAL segments and standard metrics on disk usage exported to Prometheus. Important In a production system, it is critical to monitor the database continuously. Exhausted disk storage can lead to a database server shutdown. Note The detection of exhausted storage relies on a storage class that accurately reports disk size and usage. This may not be the case in simulated Kubernetes environments like Kind or with test storage class implementations such as csi-driver-host-path . If the disk containing the WALs becomes full and no more WAL segments can be stored, PostgreSQL will stop working. CloudNativePG correctly detects this issue by verifying that there is enough space to store the next WAL segment, and avoids triggering a failover, which could complicate recovery. That allows a human administrator to address the root cause. In such a case, if supported by the storage class, the quickest course of action is currently to: Expand the storage size of the full PVC Increase the size in the Cluster resource to the same value Once the issue is resolved and there is sufficient free space for WAL segments, the Pod will restart and the cluster will become healthy. See also the \"Volume expansion\" section of the documentation.","title":"Postgres instance manager"},{"location":"instance_manager/#postgres-instance-manager","text":"CloudNativePG does not rely on an external tool for failover management. It simply relies on the Kubernetes API server and a native key component called: the Postgres instance manager . The instance manager takes care of the entire lifecycle of the PostgreSQL server process (also known as postmaster ). When you create a new cluster, the operator makes a Pod per instance. The field .spec.instances specifies how many instances to create. Each Pod will start the instance manager as the parent process (PID 1) for the main container, which in turn runs the PostgreSQL instance. During the lifetime of the Pod, the instance manager acts as a backend to handle the startup, liveness and readiness probes .","title":"Postgres instance manager"},{"location":"instance_manager/#startup-probe","text":"The startup probe ensures that a PostgreSQL instance, whether a primary or standby, has fully started. Info By default, the startup probe uses pg_isready . However, the behavior can be customized by specifying a different startup strategy. While the startup probe is running, the liveness and readiness probes remain disabled. Following Kubernetes standards, if the startup probe fails, the kubelet will terminate the container, which will then be restarted. The .spec.startDelay parameter specifies the maximum time, in seconds, allowed for the startup probe to succeed. By default, the startDelay is set to 3600 seconds. It is recommended to adjust this setting based on the time PostgreSQL needs to fully initialize in your specific environment. Warning Setting .spec.startDelay too low can cause the liveness probe to activate prematurely, potentially resulting in unnecessary Pod restarts if PostgreSQL hasn\u2019t fully initialized. CloudNativePG configures the startup probe with the following default parameters: failureThreshold: FAILURE_THRESHOLD periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 The failureThreshold value is automatically calculated by dividing startDelay by periodSeconds . You can customize any of the probe settings in the .spec.probes.startup section of your configuration. Warning Be sure that any custom probe settings are tailored to your cluster's operational requirements to avoid unintended disruptions. Info For more details on probe configuration, refer to the probe API documentation . If you manually specify .spec.probes.startup.failureThreshold , it will override the default behavior and disable the automatic use of startDelay . For example, the following configuration explicitly sets custom probe parameters, bypassing startDelay : # ... snip spec: probes: startup: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10","title":"Startup Probe"},{"location":"instance_manager/#startup-probe-strategy","text":"In certain scenarios, you may need to customize the startup strategy for your PostgreSQL cluster. For example, you might delay marking a replica as started until it begins streaming from the primary or define a replication lag threshold that must be met before considering the replica ready. To accommodate these requirements, CloudNativePG extends the .spec.probes.startup stanza with two optional parameters: type : specifies the criteria for considering the probe successful. Accepted values, in increasing order of complexity/depth, include: pg_isready : marks the probe as successful when the pg_isready command exits with 0 . This is the default for primary instances and replicas. query : marks the probe as successful when a basic query is executed on the postgres database locally. streaming : marks the probe as successful when the replica begins streaming from its source and meets the specified lag requirements (details below). maximumLag : defines the maximum acceptable replication lag, measured in bytes (expressed as Kubernetes quantities). This parameter is only applicable when type is set to streaming . If maximumLag is not specified, the replica is considered successfully started as soon as it begins streaming. Important The .spec.probes.startup.maximumLag option is validated and enforced only during the startup phase of the pod, meaning it applies exclusively when the replica is starting. Warning Incorrect configuration of the maximumLag option can cause continuous failures of the startup probe, leading to repeated replica restarts. Ensure you understand how this option works and configure appropriate values for failureThreshold and periodSeconds to give the replica enough time to catch up with its source. The following example requires a replica to have a maximum lag of 16Mi from the source to be considered started: # <snip> probes: startup: type: streaming maximumLag: 16Mi","title":"Startup Probe Strategy"},{"location":"instance_manager/#liveness-probe","text":"The liveness probe begins after the startup probe successfully completes. Its primary role is to ensure the PostgreSQL instance manager is operating correctly. Following Kubernetes standards, if the liveness probe fails, the kubelet will terminate the container, which will then be restarted. The amount of time before a Pod is classified as not alive is configurable via the .spec.livenessProbeTimeout parameter. CloudNativePG configures the liveness probe with the following default parameters: failureThreshold: FAILURE_THRESHOLD periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 The failureThreshold value is automatically calculated by dividing livenessProbeTimeout by periodSeconds . By default, .spec.livenessProbeTimeout is set to 30 seconds. This means the liveness probe will report a failure if it detects three consecutive probe failures, with a 10-second interval between each check. You can customize any of the probe settings in the .spec.probes.liveness section of your configuration. Warning Be sure that any custom probe settings are tailored to your cluster's operational requirements to avoid unintended disruptions. Info For more details on probe configuration, refer to the probe API documentation . If you manually specify .spec.probes.liveness.failureThreshold , it will override the default behavior and disable the automatic use of livenessProbeTimeout . For example, the following configuration explicitly sets custom probe parameters, bypassing livenessProbeTimeout : # ... snip spec: probes: liveness: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10","title":"Liveness Probe"},{"location":"instance_manager/#primary-isolation","text":"CloudNativePG 1.27 introduces an additional behavior for the liveness probe of a PostgreSQL primary, which will report a failure if both of the following conditions are met: The instance manager cannot reach the Kubernetes API server The instance manager cannot reach any other instance via the instance manager\u2019s REST API The effect of this behavior is to consider an isolated primary to be not alive and subsequently shut it down when the liveness probe fails. It is enabled by default and can be disabled by adding the following: spec: probes: liveness: isolationCheck: enabled: false Important Be aware that the default liveness probe settings\u2014automatically derived from livenessProbeTimeout \u2014might be aggressive (30 seconds). As such, we recommend explicitly setting the liveness probe configuration to suit your environment. The spec also accepts two optional network settings: requestTimeout and connectionTimeout , both defaulting to 1000 (in milliseconds). In cloud environments, you may need to increase these values. For example: spec: probes: liveness: isolationCheck: enabled: true requestTimeout: \"2000\" connectionTimeout: \"2000\"","title":"Primary Isolation"},{"location":"instance_manager/#readiness-probe","text":"The readiness probe starts once the startup probe has successfully completed. Its primary purpose is to check whether the PostgreSQL instance is ready to accept traffic and serve requests at any point during the pod's lifecycle. Info By default, the readiness probe uses pg_isready . However, the behavior can be customized by specifying a different readiness strategy. Following Kubernetes standards, if the readiness probe fails, the pod will be marked unready and will not receive traffic from any services. An unready pod is also ineligible for promotion during automated failover scenarios. CloudNativePG uses the following default configuration for the readiness probe: failureThreshold: 3 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 If the default settings do not suit your requirements, you can fully customize the readiness probe by specifying parameters in the .spec.probes.readiness stanza. For example: # ... snip spec: probes: readiness: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10 Warning Ensure that any custom probe settings are aligned with your cluster\u2019s operational requirements to prevent unintended disruptions. Info For more information on configuring probes, see the probe API .","title":"Readiness Probe"},{"location":"instance_manager/#readiness-probe-strategy","text":"In certain scenarios, you may need to customize the readiness strategy for your cluster. For example, you might delay marking a replica as ready until it begins streaming from the primary or define a maximum replication lag threshold before considering the replica ready. To accommodate these requirements, CloudNativePG extends the .spec.probes.readiness stanza with two optional parameters: type and maximumLag . Please refer to the Startup Probe Strategy section for detailed information on these options. Important Unlike the startup probe, the .spec.probes.readiness.maximumLag option is continuously monitored. A lagging replica may become unready if this setting is not appropriately tuned. Warning Incorrect configuration of the maximumLag option can lead to repeated readiness probe failures, causing serious consequences, such as: Exclusion of the replica from key operator features, such as promotion during failover or participation in synchronous replication quorum. Disruptions in read/read-only services. In longer failover times scenarios, replicas might be declared unready, leading to a cluster stall requiring manual intervention. Recommendation Use the streaming and maximumLag options with extreme caution. If you're unfamiliar with PostgreSQL replication, rely on the default strategy. Seek professional advice if unsure. The following example requires a replica to have a maximum lag of 64Mi from the source to be considered ready. It also provides approximately 300 seconds (30 failures \u00d7 10 seconds) for the startup probe to succeed: # <snip> probes: readiness: type: streaming maximumLag: 64Mi failureThreshold: 30 periodSeconds: 10","title":"Readiness Probe Strategy"},{"location":"instance_manager/#shutdown-control","text":"When a Pod running Postgres is deleted, either manually or by Kubernetes following a node drain operation, the kubelet will send a termination signal to the instance manager, and the instance manager will take care of shutting down PostgreSQL in an appropriate way. The .spec.smartShutdownTimeout and .spec.stopDelay options, expressed in seconds, control the amount of time given to PostgreSQL to shut down. The values default to 180 and 1800 seconds, respectively. The shutdown procedure is composed of two steps: The instance manager requests a smart shut down, disallowing any new connection to PostgreSQL. This step will last for up to .spec.smartShutdownTimeout seconds. If PostgreSQL is still up, the instance manager requests a fast shut down, terminating any existing connection and exiting promptly. If the instance is archiving and/or streaming WAL files, the process will wait for up to the remaining time set in .spec.stopDelay to complete the operation and then forcibly shut down. Such a timeout needs to be at least 15 seconds. Important In order to avoid any data loss in the Postgres cluster, which impacts the database RPO , don't delete the Pod where the primary instance is running. In this case, perform a switchover to another instance first.","title":"Shutdown control"},{"location":"instance_manager/#shutdown-of-the-primary-during-a-switchover","text":"During a switchover, the shutdown procedure is slightly different from the general case. Indeed, the operator requires the former primary to issue a fast shut down before the selected new primary can be promoted, in order to ensure that all the data are available on the new primary. For this reason, the .spec.switchoverDelay , expressed in seconds, controls the time given to the former primary to shut down gracefully and archive all the WAL files. By default it is set to 3600 (1 hour). Warning The .spec.switchoverDelay option affects the RPO and RTO of your PostgreSQL database. Setting it to a low value, might favor RTO over RPO but lead to data loss at cluster level and/or backup level. On the contrary, setting it to a high value, might remove the risk of data loss while leaving the cluster without an active primary for a longer time during the switchover.","title":"Shutdown of the primary during a switchover"},{"location":"instance_manager/#failover","text":"In case of primary pod failure, the cluster will go into failover mode. Please refer to the \"Failover\" section for details.","title":"Failover"},{"location":"instance_manager/#disk-full-failure","text":"Storage exhaustion is a well known issue for PostgreSQL clusters. The PostgreSQL documentation highlights the possible failure scenarios and the importance of monitoring disk usage to prevent it from becoming full. The same applies to CloudNativePG and Kubernetes as well: the \"Monitoring\" section provides details on checking the disk space used by WAL segments and standard metrics on disk usage exported to Prometheus. Important In a production system, it is critical to monitor the database continuously. Exhausted disk storage can lead to a database server shutdown. Note The detection of exhausted storage relies on a storage class that accurately reports disk size and usage. This may not be the case in simulated Kubernetes environments like Kind or with test storage class implementations such as csi-driver-host-path . If the disk containing the WALs becomes full and no more WAL segments can be stored, PostgreSQL will stop working. CloudNativePG correctly detects this issue by verifying that there is enough space to store the next WAL segment, and avoids triggering a failover, which could complicate recovery. That allows a human administrator to address the root cause. In such a case, if supported by the storage class, the quickest course of action is currently to: Expand the storage size of the full PVC Increase the size in the Cluster resource to the same value Once the issue is resolved and there is sufficient free space for WAL segments, the Pod will restart and the cluster will become healthy. See also the \"Volume expansion\" section of the documentation.","title":"Disk Full Failure"},{"location":"kubectl-plugin/","text":"Kubectl Plugin CloudNativePG provides a plugin for kubectl to manage a cluster in Kubernetes. Install You can install the cnpg plugin using a variety of methods. Note For air-gapped systems, installation via package managers, using previously downloaded files, may be a good option. Via the installation script curl -sSfL \\ https://github.com/cloudnative-pg/cloudnative-pg/raw/main/hack/install-cnpg-plugin.sh | \\ sudo sh -s -- -b /usr/local/bin Using the Debian or RedHat packages In the releases section of the GitHub repository , you can navigate to any release of interest (pick the same or newer release than your CloudNativePG operator), and in it you will find an Assets section. In that section are pre-built packages for a variety of systems. As a result, you can follow standard practices and instructions to install them in your systems. Debian packages For example, let's install the 1.27.0-rc1 release of the plugin, for an Intel based 64 bit server. First, we download the right .deb file. wget https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.27.0-rc1/kubectl-cnpg_1.27.0-rc1_linux_x86_64.deb \\ --output-document kube-plugin.deb Then, with superuser privileges, install from the local file using dpkg : $ sudo dpkg -i kube-plugin.deb Selecting previously unselected package cnpg. (Reading database ... 6688 files and directories currently installed.) Preparing to unpack kube-plugin.deb ... Unpacking cnpg (1.27.0-rc1) ... Setting up cnpg (1.27.0-rc1) ... RPM packages As in the example for .rpm packages, let's install the 1.27.0-rc1 release for an Intel 64 bit machine. Note the --output flag to provide a file name. curl -L https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.27.0-rc1/kubectl-cnpg_1.27.0-rc1_linux_x86_64.rpm \\ --output kube-plugin.rpm Then, with superuser privileges, install with yum , and you're ready to use: $ sudo yum --disablerepo=* localinstall kube-plugin.rpm Failed to set locale, defaulting to C.UTF-8 Dependencies resolved. ==================================================================================================== Package Architecture Version Repository Size ==================================================================================================== Installing: cnpg x86_64 1.27.0-rc1 @commandline 20 M Transaction Summary ==================================================================================================== Install 1 Package Total size: 20 M Installed size: 78 M Is this ok [y/N]: y Using the Arch Linux User Repository (AUR) Package To install the plugin from the AUR , follow these steps: git clone https://aur.archlinux.org/kubectl-cnpg.git cd kubectl-cnpg makepkg -si Or use your favorite AUR-helper, for example paru : paru -S kubectl-cnpg Using Krew If you already have Krew installed, you can simply run: kubectl krew install cnpg When a new version of the plugin is released, you can update the existing installation with: kubectl krew update kubectl krew upgrade cnpg Using Homebrew Note Please note that the Homebrew community manages the availability of the kubectl-cnpg plugin on Homebrew . If you already have Homebrew installed, you can simply run: brew install kubectl-cnpg When a new version of the plugin is released, you can update the existing installation with: brew update brew upgrade kubectl-cnpg Note Auto-completion for the kubectl plugin is already managed by Homebrew. There's no need to create the kubectl_complete-cnpg script mentioned below. Supported Architectures CloudNativePG Plugin is currently built for the following operating system and architectures: Linux amd64 arm 5/6/7 arm64 s390x ppc64le macOS amd64 arm64 Windows 386 amd64 arm 5/6/7 arm64 Configuring auto-completion To configure auto-completion for the plugin, a helper shell script needs to be installed into your current PATH. Assuming the latter contains /usr/local/bin , this can be done with the following commands: cat > kubectl_complete-cnpg <<EOF #!/usr/bin/env sh # Call the __complete command passing it all arguments kubectl cnpg __complete \"\\$@\" EOF chmod +x kubectl_complete-cnpg # Important: the following command may require superuser permission sudo mv kubectl_complete-cnpg /usr/local/bin Important The name of the script needs to be exactly the one provided since it's used by the kubectl auto-complete process Use Once the plugin is installed and deployed, you can start using it like this: kubectl cnpg COMMAND [ARGS...] Note The plugin automatically detects if the standard output channel is connected to a terminal. In such cases, it may add ANSI colors to the command output. To disable colors, use the --color=never option with the command. Generation of installation manifests The cnpg plugin can be used to generate the YAML manifest for the installation of the operator. This option would typically be used if you want to override some default configurations such as number of replicas, installation namespace, namespaces to watch, and so on. For details and available options, run: kubectl cnpg install generate --help The main options are: -n : specifies the namespace in which to install the operator (default: cnpg-system ). --control-plane : if set to true, the operator deployment will include a toleration and affinity for node-role.kubernetes.io/control-plane . --replicas : sets the number of replicas in the deployment. --watch-namespace : specifies a comma-separated list of namespaces to watch (default: all namespaces). --version : defines the minor version of the operator to be installed, such as 1.23 . If a minor version is specified, the plugin installs the latest patch version of that minor version. If no version is supplied, the plugin installs the latest MAJOR.MINOR.PATCH version of the operator. An example of the generate command, which will generate a YAML manifest that will install the operator, is as follows: kubectl cnpg install generate \\ -n king \\ --version 1.23 \\ --replicas 3 \\ --watch-namespace \"albert, bb, freddie\" \\ > operator.yaml The flags in the above command have the following meaning: - -n king install the CNPG operator into the king namespace - --version 1.23 install the latest patch version for minor version 1.23 - --replicas 3 install the operator with 3 replicas - --watch-namespace \"albert, bb, freddie\" have the operator watch for changes in the albert , bb and freddie namespaces only Status The status command provides an overview of the current status of your cluster, including: general information : name of the cluster, PostgreSQL's system ID, number of instances, current timeline and position in the WAL backup : point of recoverability, and WAL archiving status as returned by the pg_stat_archiver view from the primary - or designated primary in the case of a replica cluster streaming replication : information taken directly from the pg_stat_replication view on the primary instance instances : information about each Postgres instance, taken directly by each instance manager; in the case of a standby, the Current LSN field corresponds to the latest write-ahead log location that has been replayed during recovery (replay LSN). Important The status information above is taken at different times and at different locations, resulting in slightly inconsistent returned values. For example, the Current Write LSN location in the main header, might be different from the Current LSN field in the instances status as it is taken at two different time intervals. kubectl cnpg status sandbox Cluster Summary Name: default/sandbox System ID: 7423474350493388827 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:16.4 Primary instance: sandbox-1 Primary start time: 2024-10-08 18:31:57 +0000 UTC (uptime 1m14s) Status: Cluster in healthy state Instances: 3 Ready instances: 3 Size: 126M Current Write LSN: 0/604DE38 (Timeline: 1 - WAL File: 000000010000000000000006) Continuous Backup status Not configured Streaming Replication status Replication Slots Enabled Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority Replication Slot ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- ---------------- sandbox-2 0/604DE38 0/604DE38 0/604DE38 0/604DE38 00:00:00 00:00:00 00:00:00 streaming async 0 active sandbox-3 0/604DE38 0/604DE38 0/604DE38 0/604DE38 00:00:00 00:00:00 00:00:00 streaming async 0 active Instances status Name Current LSN Replication role Status QoS Manager Version Node ---- ----------- ---------------- ------ --- --------------- ---- sandbox-1 0/604DE38 Primary OK BestEffort 1.27.0-rc1 k8s-eu-worker sandbox-2 0/604DE38 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker2 sandbox-3 0/604DE38 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker If you require more detailed status information, use the --verbose option (or -v for short). The level of detail increases each time the flag is repeated: kubectl cnpg status sandbox --verbose Cluster Summary Name: default/sandbox System ID: 7423474350493388827 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:16.4 Primary instance: sandbox-1 Primary start time: 2024-10-08 18:31:57 +0000 UTC (uptime 2m4s) Status: Cluster in healthy state Instances: 3 Ready instances: 3 Size: 126M Current Write LSN: 0/6053720 (Timeline: 1 - WAL File: 000000010000000000000006) Continuous Backup status Not configured Physical backups No running physical backups found Streaming Replication status Replication Slots Enabled Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority Replication Slot Slot Restart LSN Slot WAL Status Slot Safe WAL Size ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- ---------------- ---------------- --------------- ------------------ sandbox-2 0/6053720 0/6053720 0/6053720 0/6053720 00:00:00 00:00:00 00:00:00 streaming async 0 active 0/6053720 reserved NULL sandbox-3 0/6053720 0/6053720 0/6053720 0/6053720 00:00:00 00:00:00 00:00:00 streaming async 0 active 0/6053720 reserved NULL Unmanaged Replication Slot Status No unmanaged replication slots found Managed roles status No roles managed Tablespaces status No managed tablespaces Pod Disruption Budgets status Name Role Expected Pods Current Healthy Minimum Desired Healthy Disruptions Allowed ---- ---- ------------- --------------- ----------------------- ------------------- sandbox replica 2 2 1 1 sandbox-primary primary 1 1 1 0 Instances status Name Current LSN Replication role Status QoS Manager Version Node ---- ----------- ---------------- ------ --- --------------- ---- sandbox-1 0/6053720 Primary OK BestEffort 1.27.0-rc1 k8s-eu-worker sandbox-2 0/6053720 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker2 sandbox-3 0/6053720 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker With an additional -v (e.g. kubectl cnpg status sandbox -v -v ), you can also view PostgreSQL configuration, HBA settings, and certificates. The command also supports output in yaml and json format. Promote The meaning of this command is to promote a pod in the cluster to primary, so you can start with maintenance work or test a switch-over situation in your cluster: kubectl cnpg promote CLUSTER CLUSTER-INSTANCE Or you can use the instance node number to promote: kubectl cnpg promote CLUSTER INSTANCE Certificates Clusters created using the CloudNativePG operator work with a CA to sign a TLS authentication certificate. To get a certificate, you need to provide a name for the secret to store the credentials, the cluster name, and a user for this certificate: kubectl cnpg certificate cluster-cert --cnpg-cluster CLUSTER --cnpg-user USER After the secret it's created, you can get it using kubectl : kubectl get secret cluster-cert And the content of the same in plain text using the following commands: kubectl get secret cluster-cert -o json | jq -r '.data | map(@base64d) | .[]' Restart The kubectl cnpg restart command can be used in two cases: requesting the operator to orchestrate a rollout restart for a certain cluster. This is useful to apply configuration changes to cluster dependent objects, such as ConfigMaps containing custom monitoring queries. request a single instance restart, either in-place if the instance is the cluster's primary or deleting and recreating the pod if it is a replica. # this command will restart a whole cluster in a rollout fashion kubectl cnpg restart CLUSTER # this command will restart a single instance, according to the policy above kubectl cnpg restart CLUSTER INSTANCE If the in-place restart is requested but the change cannot be applied without a switchover, the switchover will take precedence over the in-place restart. A common case for this will be a minor upgrade of PostgreSQL image. Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to it. Reload The kubectl cnpg reload command requests the operator to trigger a reconciliation loop for a certain cluster. This is useful to apply configuration changes to cluster dependent objects, such as ConfigMaps containing custom monitoring queries. The following command will reload all configurations for a given cluster: kubectl cnpg reload CLUSTER Maintenance The kubectl cnpg maintenance command helps to modify one or more clusters across namespaces and set the maintenance window values, it will change the following fields: .spec.nodeMaintenanceWindow.inProgress .spec.nodeMaintenanceWindow.reusePVC Accepts as argument set and unset using this to set the inProgress to true in case set and to false in case of unset . By default, reusePVC is always set to false unless the --reusePVC flag is passed. The plugin will ask for a confirmation with a list of the cluster to modify and their new values, if this is accepted this action will be applied to all the cluster in the list. If you want to set in maintenance all the PostgreSQL in your Kubernetes cluster, just need to write the following command: kubectl cnpg maintenance set --all-namespaces And you'll have the list of all the cluster to update The following are the new values for the clusters Namespace Cluster Name Maintenance reusePVC --------- ------------ ----------- -------- default cluster-example true false default pg-backup true false test cluster-example true false Do you want to proceed? [y/n]: y Report The kubectl cnpg report command bundles various pieces of information into a ZIP file. It aims to provide the needed context to debug problems with clusters in production. It has two sub-commands: operator and cluster . report Operator The operator sub-command requests the operator to provide information regarding the operator deployment, configuration and events. Important All confidential information in Secrets and ConfigMaps is REDACTED. The Data map will show the keys but the values will be empty. The flag -S / --stopRedaction will defeat the redaction and show the values. Use only at your own risk, this will share private data. Note By default, operator logs are not collected, but you can enable operator log collection with the --logs flag deployment information : the operator Deployment and operator Pod configuration : the Secrets and ConfigMaps in the operator namespace events : the Events in the operator namespace webhook configuration : the mutating and validating webhook configurations webhook service : the webhook service logs : logs for the operator Pod (optional, off by default) in JSON-lines format The command will generate a ZIP file containing various manifest in YAML format (by default, but settable to JSON with the -o flag). Use the -f flag to name a result file explicitly. If the -f flag is not used, a default time-stamped filename is created for the zip file. Note The report plugin obeys kubectl conventions, and will look for objects constrained by namespace. The CNPG Operator will generally not be installed in the same namespace as the clusters. E.g. the default installation namespace is cnpg-system kubectl cnpg report operator -n cnpg-system results in Successfully written report to \"report_operator_<TIMESTAMP>.zip\" (format: \"yaml\") With the -f flag set: kubectl cnpg report operator -n cnpg-system -f reportRedacted.zip Unzipping the file will produce a time-stamped top-level folder to keep the directory tidy: unzip reportRedacted.zip will result in: Archive: reportRedacted.zip creating: report_operator_<TIMESTAMP>/ creating: report_operator_<TIMESTAMP>/manifests/ inflating: report_operator_<TIMESTAMP>/manifests/deployment.yaml inflating: report_operator_<TIMESTAMP>/manifests/operator-pod.yaml inflating: report_operator_<TIMESTAMP>/manifests/events.yaml inflating: report_operator_<TIMESTAMP>/manifests/validating-webhook-configuration.yaml inflating: report_operator_<TIMESTAMP>/manifests/mutating-webhook-configuration.yaml inflating: report_operator_<TIMESTAMP>/manifests/webhook-service.yaml inflating: report_operator_<TIMESTAMP>/manifests/cnpg-ca-secret(secret).yaml inflating: report_operator_<TIMESTAMP>/manifests/cnpg-webhook-cert(secret).yaml If you activated the --logs option, you'd see an extra subdirectory: Archive: report_operator_<TIMESTAMP>.zip <snipped \u2026> creating: report_operator_<TIMESTAMP>/operator-logs/ inflating: report_operator_<TIMESTAMP>/operator-logs/cnpg-controller-manager-66fb98dbc5-pxkmh-logs.jsonl Note The plugin will try to get the PREVIOUS operator's logs, which is helpful when investigating restarted operators. In all cases, it will also try to get the CURRENT operator logs. If current and previous logs are available, it will show them both. ====== Beginning of Previous Log ===== 2023-03-28T12:56:41.251711811Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:56:41Z\",\"logger\":\"setup\",\"msg\":\"Starting CloudNativePG Operator\",\"version\":\"1.27.0-rc1\",\"build\":{\"Version\":\"1.27.0-rc1+dev107\",\"Commit\":\"cc9bab17\",\"Date\":\"2023-03-28\"}} 2023-03-28T12:56:41.251851909Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:56:41Z\",\"logger\":\"setup\",\"msg\":\"Starting pprof HTTP server\",\"addr\":\"0.0.0.0:6060\"} <snipped \u2026> ====== End of Previous Log ===== 2023-03-28T12:57:09.854306024Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:57:09Z\",\"logger\":\"setup\",\"msg\":\"Starting CloudNativePG Operator\",\"version\":\"1.27.0-rc1\",\"build\":{\"Version\":\"1.27.0-rc1+dev107\",\"Commit\":\"cc9bab17\",\"Date\":\"2023-03-28\"}} 2023-03-28T12:57:09.854363943Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:57:09Z\",\"logger\":\"setup\",\"msg\":\"Starting pprof HTTP server\",\"addr\":\"0.0.0.0:6060\"} If the operator hasn't been restarted, you'll still see the ====== Begin \u2026 and ====== End \u2026 guards, with no content inside. You can verify that the confidential information is REDACTED by default: cd report_operator_<TIMESTAMP>/manifests/ head cnpg-ca-secret\\(secret\\).yaml data: ca.crt: \"\" ca.key: \"\" metadata: creationTimestamp: \"2022-03-22T10:42:28Z\" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: With the -S ( --stopRedaction ) option activated, secrets are shown: kubectl cnpg report operator -n cnpg-system -f reportNonRedacted.zip -S You'll get a reminder that you're about to view confidential information: WARNING: secret Redaction is OFF. Use it with caution Successfully written report to \"reportNonRedacted.zip\" (format: \"yaml\") unzip reportNonRedacted.zip head cnpg-ca-secret\\(secret\\).yaml data: ca.crt: LS0tLS1CRUdJTiBD\u2026 ca.key: LS0tLS1CRUdJTiBF\u2026 metadata: creationTimestamp: \"2022-03-22T10:42:28Z\" managedFields: - apiVersion: v1 fieldsType: FieldsV1 report Cluster The cluster sub-command gathers the following: cluster resources : the cluster information, same as kubectl get cluster -o yaml cluster pods : pods in the cluster namespace matching the cluster name cluster jobs : jobs, if any, in the cluster namespace matching the cluster name events : events in the cluster namespace pod logs : logs for the cluster Pods (optional, off by default) in JSON-lines format job logs : logs for the Pods created by jobs (optional, off by default) in JSON-lines format The cluster sub-command accepts the -f and -o flags, as the operator does. If the -f flag is not used, a default timestamped report name will be used. Note that the cluster information does not contain configuration Secrets / ConfigMaps, so the -S is disabled. Note By default, cluster logs are not collected, but you can enable cluster log collection with the --logs flag Usage: kubectl cnpg report cluster CLUSTER [flags] Note that, unlike the operator sub-command, for the cluster sub-command you need to provide the cluster name, and very likely the namespace, unless the cluster is in the default one. kubectl cnpg report cluster CLUSTER -f report.zip [-n NAMESPACE] and then: unzip report.zip Archive: report.zip creating: report_cluster_example_<TIMESTAMP>/ creating: report_cluster_example_<TIMESTAMP>/manifests/ inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-pods.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-jobs.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/events.yaml Remember that you can use the --logs flag to add the pod and job logs to the ZIP. kubectl cnpg report cluster CLUSTER [-n NAMESPACE] --logs will result in: Successfully written report to \"report_cluster_example_<TIMESTAMP>.zip\" (format: \"yaml\") unzip report_cluster_<TIMESTAMP>.zip Archive: report_cluster_example_<TIMESTAMP>.zip creating: report_cluster_example_<TIMESTAMP>/ creating: report_cluster_example_<TIMESTAMP>/manifests/ inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-pods.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-jobs.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/events.yaml creating: report_cluster_example_<TIMESTAMP>/logs/ inflating: report_cluster_example_<TIMESTAMP>/logs/cluster-example-full-1.jsonl creating: report_cluster_example_<TIMESTAMP>/job-logs/ inflating: report_cluster_example_<TIMESTAMP>/job-logs/cluster-example-full-1-initdb-qnnvw.jsonl inflating: report_cluster_example_<TIMESTAMP>/job-logs/cluster-example-full-2-join-tvj8r.jsonl Logs The kubectl cnpg logs command allows to follow the logs of a collection of pods related to CloudNativePG in a single go. It has at the moment one available sub-command: cluster . Cluster logs The cluster sub-command gathers all the pod logs for a cluster in a single stream or file. This means that you can get all the pod logs in a single terminal window, with a single invocation of the command. As in all the cnpg plugin sub-commands, you can get instructions and help with the -h flag: kubectl cnpg logs cluster -h The logs command will display logs in JSON-lines format, unless the --timestamps flag is used, in which case, a human-readable timestamp will be prepended to each line. In this case, lines will no longer be valid JSON, and tools such as jq may not work as desired. If the logs cluster sub-command is given the -f flag (aka --follow ), it will follow the cluster pod logs, and will also watch for any new pods created in the cluster after the command has been invoked. Any new pods found, including pods that have been restarted or re-created, will also have their pods followed. The logs will be displayed in the terminal's standard-out. This command will only exit when the cluster has no more pods left, or when it is interrupted by the user. If logs is called without the -f option, it will read the logs from all cluster pods until the time of invocation and display them in the terminal's standard-out, then exit. The -o or --output flag can be provided, to specify the name of the file where the logs should be saved, instead of displaying over standard-out. The --tail flag can be used to specify how many log lines will be retrieved from each pod in the cluster. By default, the logs cluster sub-command will display all the logs from each pod in the cluster. If combined with the \"follow\" flag -f , the number of logs specified by --tail will be retrieved until the current time, and from then the new logs will be followed. NOTE: unlike other cnpg plugin commands, the -f is used to denote \"follow\" rather than specify a file. This keeps with the convention of kubectl logs , which takes -f to mean the logs should be followed. Usage: kubectl cnpg logs cluster CLUSTER [flags] Using the -f option to follow: kubectl cnpg report cluster CLUSTER -f Using --tail option to display 3 lines from each pod and the -f option to follow: kubectl cnpg report cluster CLUSTER -f --tail 3 {\"level\":\"info\",\"ts\":\"2023-06-30T13:37:33Z\",\"logger\":\"postgres\",\"msg\":\"2023-06-30 13:37:33.142 UTC [26] LOG: ending log output to stderr\",\"source\":\"/controller/log/postgres\",\"logging_pod\":\"cluster-example-3\"} {\"level\":\"info\",\"ts\":\"2023-06-30T13:37:33Z\",\"logger\":\"postgres\",\"msg\":\"2023-06-30 13:37:33.142 UTC [26] HINT: Future log output will go to log destination \\\"csvlog\\\".\",\"source\":\"/controller/log/postgres\",\"logging_pod\":\"cluster-example-3\"} \u2026 \u2026 With the -o option omitted, and with --output specified: $ kubectl cnpg logs cluster CLUSTER --output my-cluster.log Successfully written logs to \"my-cluster.log\" Pretty The pretty sub-command reads a log stream from standard input, formats it into a human-readable output, and attempts to sort the entries by timestamp. It can be used in combination with kubectl cnpg logs cluster , as shown in the following example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting tablespace manager 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting external server manager [...] Alternatively, it can be used in combination with other commands that produce CNPG logs in JSON format, such as stern , or kubectl logs , as in the following example: $ kubectl logs cluster-example-1 | kubectl cnpg logs pretty 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting tablespace manager 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting external server manager [...] The pretty sub-command also supports advanced log filtering, allowing users to display logs for specific pods or loggers, or to filter logs by severity level. Here's an example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --pods cluster-example-1 --loggers postgres --log-level info 2024-10-15T17:35:00.509 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] LOG: redirecting log output to logging collector process 2024-10-15T17:35:00.509 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] HINT: Future log output will appear in directory \"/controller/log\"... 2024-10-15T17:35:00.510 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] LOG: ending log output to stderr 2024-10-15T17:35:00.510 INFO cluster-example-1 postgres ending log output to stderr [...] The pretty sub-command will try to sort the log stream, to make logs easier to reason about. In order to achieve this, it gathers the logs into groups, and within groups it sorts by timestamp. This is the only way to sort interactively, as pretty may be piped from a command in \"follow\" mode. The sub-command will add a group separator line, --- , at the end of each sorted group. The size of the grouping can be configured via the --sorting-group-size flag (default: 1000), as illustrated in the following example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --sorting-group-size=3 2024-10-15T17:35:20.426 INFO cluster-example-2 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:20.426 INFO cluster-example-2 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting tablespace manager --- 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting external server manager 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting controller-runtime manager 2024-10-15T17:35:20.439 INFO cluster-example-2 instance-manager Starting EventSource --- [...] To explore all available options, use the -h flag for detailed explanations of the supported flags and their usage. Info You can also increase the verbosity of the log by adding more -v options. Destroy The kubectl cnpg destroy command helps remove an instance and all the associated PVCs from a Kubernetes cluster. The optional --keep-pvc flag, if specified, allows you to keep the PVCs, while removing all metadata.ownerReferences that were set by the instance. Additionally, the cnpg.io/pvcStatus label on the PVCs will change from ready to detached to signify that they are no longer in use. Running again the command without the --keep-pvc flag will remove the detached PVCs. Usage: kubectl cnpg destroy CLUSTER INSTANCE The following example removes the cluster-example-2 pod and the associated PVCs: kubectl cnpg destroy cluster-example 2 Cluster Hibernation There are times when you may need to temporarily suspend a CloudNativePG Cluster while preserving its data, allowing you to resume operations later. This feature is known as cluster hibernation . Hibernation is managed declaratively using the cnpg.io/hibernation annotation. Info For more details, see the \"Declarative Hibernation\" documentation page. To simplify the process, the cnpg plugin for kubectl provides a hibernate command, which acts as a convenient shortcut for applying the annotation. To hibernate a cluster, run: kubectl cnpg hibernate on CLUSTER This command applies the cnpg.io/hibernation=on annotation to the cluster, suspending its execution. To resume a hibernated cluster, use: kubectl cnpg hibernate off CLUSTER This will remove the hibernation state by setting cnpg.io/hibernation=off . You can check the cluster\u2019s status at any time with: kubectl cnpg status CLUSTER This will display the current state of the cluster, including whether it is hibernated. Benchmarking the database with pgbench Pgbench can be run against an existing PostgreSQL cluster with following command: kubectl cnpg pgbench CLUSTER -- --time 30 --client 1 --jobs 1 Refer to the Benchmarking pgbench section for more details. Benchmarking the storage with fio fio can be run on an existing storage class with following command: kubectl cnpg fio FIO_JOB_NAME [-n NAMESPACE] Refer to the Benchmarking fio section for more details. Requesting a new physical backup The kubectl cnpg backup command requests a new physical backup for an existing Postgres cluster by creating a new Backup resource. The following example requests an on-demand backup for a given cluster: kubectl cnpg backup CLUSTER or, if using volume snapshots: kubectl cnpg backup CLUSTER -m volumeSnapshot The created backup will be named after the request time: $ kubectl cnpg backup cluster-example backup/cluster-example-20230121002300 created By default, a newly created backup will use the backup target policy defined in the cluster to choose which instance to run on. However, you can override this policy with the --backup-target option. In the case of volume snapshot backups, you can also use the --online option to request an online/hot backup or an offline/cold one: additionally, you can also tune online backups by explicitly setting the --immediate-checkpoint and --wait-for-archive options. The \"Backup\" section contains more information about the configuration settings. Launching psql The kubectl cnpg psql CLUSTER command starts a new PostgreSQL interactive front-end process (psql) connected to an existing Postgres cluster, as if you were running it from the actual pod. This means that you will be using the postgres user. Important As you will be connecting as postgres user, in production environments this method should be used with extreme care, by authorized personnel only. $ kubectl cnpg psql cluster-example psql (17.5 (Debian 17.5-1.pgdg110+1)) Type \"help\" for help. postgres=# By default, the command will connect to the primary instance. The user can select to work against a replica by using the --replica option: $ kubectl cnpg psql --replica cluster-example psql (17.5 (Debian 17.5-1.pgdg110+1)) Type \"help\" for help. postgres=# select pg_is_in_recovery(); pg_is_in_recovery ------------------- t (1 row) postgres=# \\q This command will start kubectl exec , and the kubectl executable must be reachable in your PATH variable to correctly work. Snapshotting a Postgres cluster Warning The kubectl cnpg snapshot command has been removed. Please use the backup command to request backups using volume snapshots. Using pgAdmin4 for evaluation/demonstration purposes only pgAdmin stands as the most popular and feature-rich open-source administration and development platform for PostgreSQL. For more information on the project, please refer to the official documentation . Given that the pgAdmin Development Team maintains official Docker container images, you can install pgAdmin in your environment as a standard Kubernetes deployment. Important Deployment of pgAdmin in Kubernetes production environments is beyond the scope of this document and, more broadly, of the CloudNativePG project. However, for the purposes of demonstration and evaluation , CloudNativePG offers a suitable solution. The cnpg plugin implements the pgadmin4 command, providing a straightforward method to connect to a given database Cluster and navigate its content in a local environment such as kind . For example, you can install a demo deployment of pgAdmin4 for the cluster-example cluster as follows: kubectl cnpg pgadmin4 cluster-example This command will produce: ConfigMap/cluster-example-pgadmin4 created Deployment/cluster-example-pgadmin4 created Service/cluster-example-pgadmin4 created Secret/cluster-example-pgadmin4 created [...] After deploying pgAdmin, forward the port using kubectl and connect through your browser by following the on-screen instructions. As usual, you can use the --dry-run option to generate the YAML file: kubectl cnpg pgadmin4 --dry-run cluster-example pgAdmin4 can be installed in either desktop or server mode, with the default being server. In server mode, authentication is required using a randomly generated password, and users must manually specify the database to connect to. On the other hand, desktop mode initiates a pgAdmin web interface without requiring authentication. It automatically connects to the app database as the app user, making it ideal for quick demos, such as on a local deployment using kind : kubectl cnpg pgadmin4 --mode desktop cluster-example After concluding your demo, ensure the termination of the pgAdmin deployment by executing: kubectl cnpg pgadmin4 --dry-run cluster-example | kubectl delete -f - Warning Never deploy pgAdmin in production using the plugin. Logical Replication Publications The cnpg publication command group is designed to streamline the creation and removal of PostgreSQL logical replication publications . Be aware that these commands are primarily intended for assisting in the creation of logical replication publications, particularly on remote PostgreSQL databases. Warning It is crucial to have a solid understanding of both the capabilities and limitations of PostgreSQL's native logical replication system before using these commands. In particular, be mindful of the logical replication restrictions . Creating a new publication To create a logical replication publication, use the cnpg publication create command. The basic structure of this command is as follows: kubectl cnpg publication create \\ --publication PUBLICATION_NAME \\ [--external-cluster EXTERNAL_CLUSTER] LOCAL_CLUSTER [options] There are two primary use cases: With --external-cluster : Use this option to create a publication on an external cluster (i.e. defined in the externalClusters stanza). The commands will be issued from the LOCAL_CLUSTER , but the publication will be for the data in EXTERNAL_CLUSTER . Without --external-cluster : Use this option to create a publication in the LOCAL_CLUSTER PostgreSQL Cluster (by default, the app database). Warning When connecting to an external cluster, ensure that the specified user has sufficient permissions to execute the CREATE PUBLICATION command. You have several options, similar to the CREATE PUBLICATION command, to define the group of tables to replicate. Notable options include: If you specify the --all-tables option, you create a publication FOR ALL TABLES . Alternatively, you can specify multiple occurrences of: --table : Add a specific table (with an expression) to the publication. --schema : Include all tables in the specified database schema (available from PostgreSQL 15). The --dry-run option enables you to preview the SQL commands that the plugin will execute. For additional information and detailed instructions, type the following command: kubectl cnpg publication create --help Example Given a source-cluster and a destination-cluster , we would like to create a publication for the data on source-cluster . The destination-cluster has an entry in the externalClusters stanza pointing to source-cluster . We can run: kubectl cnpg publication create destination-cluster \\ --external-cluster=source-cluster --all-tables which will create a publication for all tables on source-cluster , running the SQL commands on the destination-cluster . Or instead, we can run: kubectl cnpg publication create source-cluster \\ --publication=app --all-tables which will create a publication named app for all the tables in the source-cluster , running the SQL commands on the source cluster. Info There are two sample files that have been provided for illustration and inspiration: logical-source and logical-destination . Dropping a publication The cnpg publication drop command seamlessly complements the create command by offering similar key options, including the publication name, cluster name, and an optional external cluster. You can drop a PUBLICATION with the following command structure: kubectl cnpg publication drop \\ --publication PUBLICATION_NAME \\ [--external-cluster EXTERNAL_CLUSTER] LOCAL_CLUSTER [options] To access further details and precise instructions, use the following command: kubectl cnpg publication drop --help Logical Replication Subscriptions The cnpg subscription command group is a dedicated set of commands designed to simplify the creation and removal of PostgreSQL logical replication subscriptions . These commands are specifically crafted to aid in the establishment of logical replication subscriptions, especially when dealing with remote PostgreSQL databases. Warning Before using these commands, it is essential to have a comprehensive understanding of both the capabilities and limitations of PostgreSQL's native logical replication system. In particular, be mindful of the logical replication restrictions . In addition to subscription management, we provide a helpful command for synchronizing all sequences from the source cluster. While its applicability may vary, this command can be particularly useful in scenarios involving major upgrades or data import from remote servers. Creating a new subscription To create a logical replication subscription, use the cnpg subscription create command. The basic structure of this command is as follows: kubectl cnpg subscription create \\ --subscription SUBSCRIPTION_NAME \\ --publication PUBLICATION_NAME \\ --external-cluster EXTERNAL_CLUSTER \\ LOCAL_CLUSTER [options] This command configures a subscription directed towards the specified publication in the designated external cluster, as defined in the externalClusters stanza of the LOCAL_CLUSTER . For additional information and detailed instructions, type the following command: kubectl cnpg subscription create --help Example As in the section on publications, we have a source-cluster and a destination-cluster , and we have already created a publication called app . The following command: kubectl cnpg subscription create destination-cluster \\ --external-cluster=source-cluster \\ --publication=app --subscription=app will create a subscription for app on the destination cluster. Warning Prioritize testing subscriptions in a non-production environment to ensure their effectiveness and identify any potential issues before implementing them in a production setting. Info There are two sample files that have been provided for illustration and inspiration: logical-source and logical-destination . Dropping a subscription The cnpg subscription drop command seamlessly complements the create command. You can drop a SUBSCRIPTION with the following command structure: kubectl cnpg subcription drop \\ --subscription SUBSCRIPTION_NAME \\ LOCAL_CLUSTER [options] To access further details and precise instructions, use the following command: kubectl cnpg subscription drop --help Synchronizing sequences One notable constraint of PostgreSQL logical replication, implemented through publications and subscriptions, is the lack of sequence synchronization. This becomes particularly relevant when utilizing logical replication for live database migration, especially to a higher version of PostgreSQL. A crucial step in this process involves updating sequences before transitioning applications to the new database ( cutover ). To address this limitation, the cnpg subscription sync-sequences command offers a solution. This command establishes a connection with the source database, retrieves all relevant sequences, and subsequently updates local sequences with matching identities (based on database schema and sequence name). You can use the command as shown below: kubectl cnpg subscription sync-sequences \\ --subscription SUBSCRIPTION_NAME \\ LOCAL_CLUSTER For comprehensive details and specific instructions, utilize the following command: kubectl cnpg subscription sync-sequences --help Example As in the previous sections for publication and subscription, we have a source-cluster and a destination-cluster . The publication and the subscription, both called app , are already present. The following command will synchronize the sequences involved in the app subscription, from the source cluster into the destination cluster. kubectl cnpg subscription sync-sequences destination-cluster \\ --subscription=app Warning Prioritize testing subscriptions in a non-production environment to guarantee their effectiveness and detect any potential issues before deploying them in a production setting. Integration with K9s The cnpg plugin can be easily integrated in K9s , a popular terminal-based UI to interact with Kubernetes clusters. See k9s/plugins.yml for details. Permissions required by the plugin The plugin requires a set of Kubernetes permissions that depends on the command to execute. These permissions may affect resources and sub-resources like Pods, PDBs, PVCs, and enable actions like get , delete , patch . The following table contains the full details: Command Resource Permissions backup clusters: get backups: create certificate clusters: get secrets: get,create destroy pods: get,delete jobs: delete,list PVCs: list,delete,update fencing clusters: get,patch pods: get fio PVCs: create configmaps: create deployment: create hibernate clusters: get,patch,delete pods: list,get,delete pods/exec: create jobs: list PVCs: get,list,update,patch,delete install none logs clusters: get pods: list pods/log: get maintenance clusters: get,patch,list pgadmin4 clusters: get configmaps: create deployments: create services: create secrets: create pgbench clusters: get jobs: create promote clusters: get clusters/status: patch pods: get psql pods: get,list pods/exec: create publication clusters: get pods: get,list pods/exec: create reload clusters: get,patch report cluster clusters: get pods: list pods/log: get jobs: list events: list PVCs: list report operator configmaps: get deployments: get events: list pods: list pods/log: get secrets: get services: get mutatingwebhookconfigurations: list 1 validatingwebhookconfigurations: list 1 If OLM is present on the K8s cluster, also: clusterserviceversions: list installplans: list subscriptions: list restart clusters: get,patch pods: get,delete status clusters: get pods: list pods/exec: create pods/proxy: create PDBs: list subscription clusters: get pods: get,list pods/exec: create version none The permissions are cluster scope ClusterRole resources. \u21a9 \u21a9 Additionally, assigning the list permission on the clusters will enable autocompletion for multiple commands. Role examples It is possible to create roles with restricted permissions. The following example creates a role that only has access to the cluster logs: --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: cnpg-log rules: - verbs: - get apiGroups: - postgresql.cnpg.io resources: - clusters - verbs: - list apiGroups: - '' resources: - pods - verbs: - get apiGroups: - '' resources: - pods/log The next example shows a role with the minimal permissions required to get the cluster status using the plugin's status command: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: cnpg-status rules: - verbs: - get apiGroups: - postgresql.cnpg.io resources: - clusters - verbs: - list apiGroups: - '' resources: - pods - verbs: - create apiGroups: - '' resources: - pods/exec - verbs: - create apiGroups: - '' resources: - pods/proxy - verbs: - list apiGroups: - policy resources: - poddisruptionbudgets Important Keeping the verbs restricted per resources and per apiGroups helps to prevent inadvertently granting more than intended permissions.","title":"Kubectl Plugin"},{"location":"kubectl-plugin/#kubectl-plugin","text":"CloudNativePG provides a plugin for kubectl to manage a cluster in Kubernetes.","title":"Kubectl Plugin"},{"location":"kubectl-plugin/#install","text":"You can install the cnpg plugin using a variety of methods. Note For air-gapped systems, installation via package managers, using previously downloaded files, may be a good option.","title":"Install"},{"location":"kubectl-plugin/#via-the-installation-script","text":"curl -sSfL \\ https://github.com/cloudnative-pg/cloudnative-pg/raw/main/hack/install-cnpg-plugin.sh | \\ sudo sh -s -- -b /usr/local/bin","title":"Via the installation script"},{"location":"kubectl-plugin/#using-the-debian-or-redhat-packages","text":"In the releases section of the GitHub repository , you can navigate to any release of interest (pick the same or newer release than your CloudNativePG operator), and in it you will find an Assets section. In that section are pre-built packages for a variety of systems. As a result, you can follow standard practices and instructions to install them in your systems.","title":"Using the Debian or RedHat packages"},{"location":"kubectl-plugin/#debian-packages","text":"For example, let's install the 1.27.0-rc1 release of the plugin, for an Intel based 64 bit server. First, we download the right .deb file. wget https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.27.0-rc1/kubectl-cnpg_1.27.0-rc1_linux_x86_64.deb \\ --output-document kube-plugin.deb Then, with superuser privileges, install from the local file using dpkg : $ sudo dpkg -i kube-plugin.deb Selecting previously unselected package cnpg. (Reading database ... 6688 files and directories currently installed.) Preparing to unpack kube-plugin.deb ... Unpacking cnpg (1.27.0-rc1) ... Setting up cnpg (1.27.0-rc1) ...","title":"Debian packages"},{"location":"kubectl-plugin/#rpm-packages","text":"As in the example for .rpm packages, let's install the 1.27.0-rc1 release for an Intel 64 bit machine. Note the --output flag to provide a file name. curl -L https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.27.0-rc1/kubectl-cnpg_1.27.0-rc1_linux_x86_64.rpm \\ --output kube-plugin.rpm Then, with superuser privileges, install with yum , and you're ready to use: $ sudo yum --disablerepo=* localinstall kube-plugin.rpm Failed to set locale, defaulting to C.UTF-8 Dependencies resolved. ==================================================================================================== Package Architecture Version Repository Size ==================================================================================================== Installing: cnpg x86_64 1.27.0-rc1 @commandline 20 M Transaction Summary ==================================================================================================== Install 1 Package Total size: 20 M Installed size: 78 M Is this ok [y/N]: y","title":"RPM packages"},{"location":"kubectl-plugin/#using-the-arch-linux-user-repository-aur-package","text":"To install the plugin from the AUR , follow these steps: git clone https://aur.archlinux.org/kubectl-cnpg.git cd kubectl-cnpg makepkg -si Or use your favorite AUR-helper, for example paru : paru -S kubectl-cnpg","title":"Using the Arch Linux User Repository (AUR) Package"},{"location":"kubectl-plugin/#using-krew","text":"If you already have Krew installed, you can simply run: kubectl krew install cnpg When a new version of the plugin is released, you can update the existing installation with: kubectl krew update kubectl krew upgrade cnpg","title":"Using Krew"},{"location":"kubectl-plugin/#using-homebrew","text":"Note Please note that the Homebrew community manages the availability of the kubectl-cnpg plugin on Homebrew . If you already have Homebrew installed, you can simply run: brew install kubectl-cnpg When a new version of the plugin is released, you can update the existing installation with: brew update brew upgrade kubectl-cnpg Note Auto-completion for the kubectl plugin is already managed by Homebrew. There's no need to create the kubectl_complete-cnpg script mentioned below.","title":"Using Homebrew"},{"location":"kubectl-plugin/#supported-architectures","text":"CloudNativePG Plugin is currently built for the following operating system and architectures: Linux amd64 arm 5/6/7 arm64 s390x ppc64le macOS amd64 arm64 Windows 386 amd64 arm 5/6/7 arm64","title":"Supported Architectures"},{"location":"kubectl-plugin/#configuring-auto-completion","text":"To configure auto-completion for the plugin, a helper shell script needs to be installed into your current PATH. Assuming the latter contains /usr/local/bin , this can be done with the following commands: cat > kubectl_complete-cnpg <<EOF #!/usr/bin/env sh # Call the __complete command passing it all arguments kubectl cnpg __complete \"\\$@\" EOF chmod +x kubectl_complete-cnpg # Important: the following command may require superuser permission sudo mv kubectl_complete-cnpg /usr/local/bin Important The name of the script needs to be exactly the one provided since it's used by the kubectl auto-complete process","title":"Configuring auto-completion"},{"location":"kubectl-plugin/#use","text":"Once the plugin is installed and deployed, you can start using it like this: kubectl cnpg COMMAND [ARGS...] Note The plugin automatically detects if the standard output channel is connected to a terminal. In such cases, it may add ANSI colors to the command output. To disable colors, use the --color=never option with the command.","title":"Use"},{"location":"kubectl-plugin/#generation-of-installation-manifests","text":"The cnpg plugin can be used to generate the YAML manifest for the installation of the operator. This option would typically be used if you want to override some default configurations such as number of replicas, installation namespace, namespaces to watch, and so on. For details and available options, run: kubectl cnpg install generate --help The main options are: -n : specifies the namespace in which to install the operator (default: cnpg-system ). --control-plane : if set to true, the operator deployment will include a toleration and affinity for node-role.kubernetes.io/control-plane . --replicas : sets the number of replicas in the deployment. --watch-namespace : specifies a comma-separated list of namespaces to watch (default: all namespaces). --version : defines the minor version of the operator to be installed, such as 1.23 . If a minor version is specified, the plugin installs the latest patch version of that minor version. If no version is supplied, the plugin installs the latest MAJOR.MINOR.PATCH version of the operator. An example of the generate command, which will generate a YAML manifest that will install the operator, is as follows: kubectl cnpg install generate \\ -n king \\ --version 1.23 \\ --replicas 3 \\ --watch-namespace \"albert, bb, freddie\" \\ > operator.yaml The flags in the above command have the following meaning: - -n king install the CNPG operator into the king namespace - --version 1.23 install the latest patch version for minor version 1.23 - --replicas 3 install the operator with 3 replicas - --watch-namespace \"albert, bb, freddie\" have the operator watch for changes in the albert , bb and freddie namespaces only","title":"Generation of installation manifests"},{"location":"kubectl-plugin/#status","text":"The status command provides an overview of the current status of your cluster, including: general information : name of the cluster, PostgreSQL's system ID, number of instances, current timeline and position in the WAL backup : point of recoverability, and WAL archiving status as returned by the pg_stat_archiver view from the primary - or designated primary in the case of a replica cluster streaming replication : information taken directly from the pg_stat_replication view on the primary instance instances : information about each Postgres instance, taken directly by each instance manager; in the case of a standby, the Current LSN field corresponds to the latest write-ahead log location that has been replayed during recovery (replay LSN). Important The status information above is taken at different times and at different locations, resulting in slightly inconsistent returned values. For example, the Current Write LSN location in the main header, might be different from the Current LSN field in the instances status as it is taken at two different time intervals. kubectl cnpg status sandbox Cluster Summary Name: default/sandbox System ID: 7423474350493388827 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:16.4 Primary instance: sandbox-1 Primary start time: 2024-10-08 18:31:57 +0000 UTC (uptime 1m14s) Status: Cluster in healthy state Instances: 3 Ready instances: 3 Size: 126M Current Write LSN: 0/604DE38 (Timeline: 1 - WAL File: 000000010000000000000006) Continuous Backup status Not configured Streaming Replication status Replication Slots Enabled Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority Replication Slot ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- ---------------- sandbox-2 0/604DE38 0/604DE38 0/604DE38 0/604DE38 00:00:00 00:00:00 00:00:00 streaming async 0 active sandbox-3 0/604DE38 0/604DE38 0/604DE38 0/604DE38 00:00:00 00:00:00 00:00:00 streaming async 0 active Instances status Name Current LSN Replication role Status QoS Manager Version Node ---- ----------- ---------------- ------ --- --------------- ---- sandbox-1 0/604DE38 Primary OK BestEffort 1.27.0-rc1 k8s-eu-worker sandbox-2 0/604DE38 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker2 sandbox-3 0/604DE38 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker If you require more detailed status information, use the --verbose option (or -v for short). The level of detail increases each time the flag is repeated: kubectl cnpg status sandbox --verbose Cluster Summary Name: default/sandbox System ID: 7423474350493388827 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:16.4 Primary instance: sandbox-1 Primary start time: 2024-10-08 18:31:57 +0000 UTC (uptime 2m4s) Status: Cluster in healthy state Instances: 3 Ready instances: 3 Size: 126M Current Write LSN: 0/6053720 (Timeline: 1 - WAL File: 000000010000000000000006) Continuous Backup status Not configured Physical backups No running physical backups found Streaming Replication status Replication Slots Enabled Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority Replication Slot Slot Restart LSN Slot WAL Status Slot Safe WAL Size ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- ---------------- ---------------- --------------- ------------------ sandbox-2 0/6053720 0/6053720 0/6053720 0/6053720 00:00:00 00:00:00 00:00:00 streaming async 0 active 0/6053720 reserved NULL sandbox-3 0/6053720 0/6053720 0/6053720 0/6053720 00:00:00 00:00:00 00:00:00 streaming async 0 active 0/6053720 reserved NULL Unmanaged Replication Slot Status No unmanaged replication slots found Managed roles status No roles managed Tablespaces status No managed tablespaces Pod Disruption Budgets status Name Role Expected Pods Current Healthy Minimum Desired Healthy Disruptions Allowed ---- ---- ------------- --------------- ----------------------- ------------------- sandbox replica 2 2 1 1 sandbox-primary primary 1 1 1 0 Instances status Name Current LSN Replication role Status QoS Manager Version Node ---- ----------- ---------------- ------ --- --------------- ---- sandbox-1 0/6053720 Primary OK BestEffort 1.27.0-rc1 k8s-eu-worker sandbox-2 0/6053720 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker2 sandbox-3 0/6053720 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker With an additional -v (e.g. kubectl cnpg status sandbox -v -v ), you can also view PostgreSQL configuration, HBA settings, and certificates. The command also supports output in yaml and json format.","title":"Status"},{"location":"kubectl-plugin/#promote","text":"The meaning of this command is to promote a pod in the cluster to primary, so you can start with maintenance work or test a switch-over situation in your cluster: kubectl cnpg promote CLUSTER CLUSTER-INSTANCE Or you can use the instance node number to promote: kubectl cnpg promote CLUSTER INSTANCE","title":"Promote"},{"location":"kubectl-plugin/#certificates","text":"Clusters created using the CloudNativePG operator work with a CA to sign a TLS authentication certificate. To get a certificate, you need to provide a name for the secret to store the credentials, the cluster name, and a user for this certificate: kubectl cnpg certificate cluster-cert --cnpg-cluster CLUSTER --cnpg-user USER After the secret it's created, you can get it using kubectl : kubectl get secret cluster-cert And the content of the same in plain text using the following commands: kubectl get secret cluster-cert -o json | jq -r '.data | map(@base64d) | .[]'","title":"Certificates"},{"location":"kubectl-plugin/#restart","text":"The kubectl cnpg restart command can be used in two cases: requesting the operator to orchestrate a rollout restart for a certain cluster. This is useful to apply configuration changes to cluster dependent objects, such as ConfigMaps containing custom monitoring queries. request a single instance restart, either in-place if the instance is the cluster's primary or deleting and recreating the pod if it is a replica. # this command will restart a whole cluster in a rollout fashion kubectl cnpg restart CLUSTER # this command will restart a single instance, according to the policy above kubectl cnpg restart CLUSTER INSTANCE If the in-place restart is requested but the change cannot be applied without a switchover, the switchover will take precedence over the in-place restart. A common case for this will be a minor upgrade of PostgreSQL image. Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to it.","title":"Restart"},{"location":"kubectl-plugin/#reload","text":"The kubectl cnpg reload command requests the operator to trigger a reconciliation loop for a certain cluster. This is useful to apply configuration changes to cluster dependent objects, such as ConfigMaps containing custom monitoring queries. The following command will reload all configurations for a given cluster: kubectl cnpg reload CLUSTER","title":"Reload"},{"location":"kubectl-plugin/#maintenance","text":"The kubectl cnpg maintenance command helps to modify one or more clusters across namespaces and set the maintenance window values, it will change the following fields: .spec.nodeMaintenanceWindow.inProgress .spec.nodeMaintenanceWindow.reusePVC Accepts as argument set and unset using this to set the inProgress to true in case set and to false in case of unset . By default, reusePVC is always set to false unless the --reusePVC flag is passed. The plugin will ask for a confirmation with a list of the cluster to modify and their new values, if this is accepted this action will be applied to all the cluster in the list. If you want to set in maintenance all the PostgreSQL in your Kubernetes cluster, just need to write the following command: kubectl cnpg maintenance set --all-namespaces And you'll have the list of all the cluster to update The following are the new values for the clusters Namespace Cluster Name Maintenance reusePVC --------- ------------ ----------- -------- default cluster-example true false default pg-backup true false test cluster-example true false Do you want to proceed? [y/n]: y","title":"Maintenance"},{"location":"kubectl-plugin/#report","text":"The kubectl cnpg report command bundles various pieces of information into a ZIP file. It aims to provide the needed context to debug problems with clusters in production. It has two sub-commands: operator and cluster .","title":"Report"},{"location":"kubectl-plugin/#report-operator","text":"The operator sub-command requests the operator to provide information regarding the operator deployment, configuration and events. Important All confidential information in Secrets and ConfigMaps is REDACTED. The Data map will show the keys but the values will be empty. The flag -S / --stopRedaction will defeat the redaction and show the values. Use only at your own risk, this will share private data. Note By default, operator logs are not collected, but you can enable operator log collection with the --logs flag deployment information : the operator Deployment and operator Pod configuration : the Secrets and ConfigMaps in the operator namespace events : the Events in the operator namespace webhook configuration : the mutating and validating webhook configurations webhook service : the webhook service logs : logs for the operator Pod (optional, off by default) in JSON-lines format The command will generate a ZIP file containing various manifest in YAML format (by default, but settable to JSON with the -o flag). Use the -f flag to name a result file explicitly. If the -f flag is not used, a default time-stamped filename is created for the zip file. Note The report plugin obeys kubectl conventions, and will look for objects constrained by namespace. The CNPG Operator will generally not be installed in the same namespace as the clusters. E.g. the default installation namespace is cnpg-system kubectl cnpg report operator -n cnpg-system results in Successfully written report to \"report_operator_<TIMESTAMP>.zip\" (format: \"yaml\") With the -f flag set: kubectl cnpg report operator -n cnpg-system -f reportRedacted.zip Unzipping the file will produce a time-stamped top-level folder to keep the directory tidy: unzip reportRedacted.zip will result in: Archive: reportRedacted.zip creating: report_operator_<TIMESTAMP>/ creating: report_operator_<TIMESTAMP>/manifests/ inflating: report_operator_<TIMESTAMP>/manifests/deployment.yaml inflating: report_operator_<TIMESTAMP>/manifests/operator-pod.yaml inflating: report_operator_<TIMESTAMP>/manifests/events.yaml inflating: report_operator_<TIMESTAMP>/manifests/validating-webhook-configuration.yaml inflating: report_operator_<TIMESTAMP>/manifests/mutating-webhook-configuration.yaml inflating: report_operator_<TIMESTAMP>/manifests/webhook-service.yaml inflating: report_operator_<TIMESTAMP>/manifests/cnpg-ca-secret(secret).yaml inflating: report_operator_<TIMESTAMP>/manifests/cnpg-webhook-cert(secret).yaml If you activated the --logs option, you'd see an extra subdirectory: Archive: report_operator_<TIMESTAMP>.zip <snipped \u2026> creating: report_operator_<TIMESTAMP>/operator-logs/ inflating: report_operator_<TIMESTAMP>/operator-logs/cnpg-controller-manager-66fb98dbc5-pxkmh-logs.jsonl Note The plugin will try to get the PREVIOUS operator's logs, which is helpful when investigating restarted operators. In all cases, it will also try to get the CURRENT operator logs. If current and previous logs are available, it will show them both. ====== Beginning of Previous Log ===== 2023-03-28T12:56:41.251711811Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:56:41Z\",\"logger\":\"setup\",\"msg\":\"Starting CloudNativePG Operator\",\"version\":\"1.27.0-rc1\",\"build\":{\"Version\":\"1.27.0-rc1+dev107\",\"Commit\":\"cc9bab17\",\"Date\":\"2023-03-28\"}} 2023-03-28T12:56:41.251851909Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:56:41Z\",\"logger\":\"setup\",\"msg\":\"Starting pprof HTTP server\",\"addr\":\"0.0.0.0:6060\"} <snipped \u2026> ====== End of Previous Log ===== 2023-03-28T12:57:09.854306024Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:57:09Z\",\"logger\":\"setup\",\"msg\":\"Starting CloudNativePG Operator\",\"version\":\"1.27.0-rc1\",\"build\":{\"Version\":\"1.27.0-rc1+dev107\",\"Commit\":\"cc9bab17\",\"Date\":\"2023-03-28\"}} 2023-03-28T12:57:09.854363943Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:57:09Z\",\"logger\":\"setup\",\"msg\":\"Starting pprof HTTP server\",\"addr\":\"0.0.0.0:6060\"} If the operator hasn't been restarted, you'll still see the ====== Begin \u2026 and ====== End \u2026 guards, with no content inside. You can verify that the confidential information is REDACTED by default: cd report_operator_<TIMESTAMP>/manifests/ head cnpg-ca-secret\\(secret\\).yaml data: ca.crt: \"\" ca.key: \"\" metadata: creationTimestamp: \"2022-03-22T10:42:28Z\" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: With the -S ( --stopRedaction ) option activated, secrets are shown: kubectl cnpg report operator -n cnpg-system -f reportNonRedacted.zip -S You'll get a reminder that you're about to view confidential information: WARNING: secret Redaction is OFF. Use it with caution Successfully written report to \"reportNonRedacted.zip\" (format: \"yaml\") unzip reportNonRedacted.zip head cnpg-ca-secret\\(secret\\).yaml data: ca.crt: LS0tLS1CRUdJTiBD\u2026 ca.key: LS0tLS1CRUdJTiBF\u2026 metadata: creationTimestamp: \"2022-03-22T10:42:28Z\" managedFields: - apiVersion: v1 fieldsType: FieldsV1","title":"report Operator"},{"location":"kubectl-plugin/#report-cluster","text":"The cluster sub-command gathers the following: cluster resources : the cluster information, same as kubectl get cluster -o yaml cluster pods : pods in the cluster namespace matching the cluster name cluster jobs : jobs, if any, in the cluster namespace matching the cluster name events : events in the cluster namespace pod logs : logs for the cluster Pods (optional, off by default) in JSON-lines format job logs : logs for the Pods created by jobs (optional, off by default) in JSON-lines format The cluster sub-command accepts the -f and -o flags, as the operator does. If the -f flag is not used, a default timestamped report name will be used. Note that the cluster information does not contain configuration Secrets / ConfigMaps, so the -S is disabled. Note By default, cluster logs are not collected, but you can enable cluster log collection with the --logs flag Usage: kubectl cnpg report cluster CLUSTER [flags] Note that, unlike the operator sub-command, for the cluster sub-command you need to provide the cluster name, and very likely the namespace, unless the cluster is in the default one. kubectl cnpg report cluster CLUSTER -f report.zip [-n NAMESPACE] and then: unzip report.zip Archive: report.zip creating: report_cluster_example_<TIMESTAMP>/ creating: report_cluster_example_<TIMESTAMP>/manifests/ inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-pods.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-jobs.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/events.yaml Remember that you can use the --logs flag to add the pod and job logs to the ZIP. kubectl cnpg report cluster CLUSTER [-n NAMESPACE] --logs will result in: Successfully written report to \"report_cluster_example_<TIMESTAMP>.zip\" (format: \"yaml\") unzip report_cluster_<TIMESTAMP>.zip Archive: report_cluster_example_<TIMESTAMP>.zip creating: report_cluster_example_<TIMESTAMP>/ creating: report_cluster_example_<TIMESTAMP>/manifests/ inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-pods.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-jobs.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/events.yaml creating: report_cluster_example_<TIMESTAMP>/logs/ inflating: report_cluster_example_<TIMESTAMP>/logs/cluster-example-full-1.jsonl creating: report_cluster_example_<TIMESTAMP>/job-logs/ inflating: report_cluster_example_<TIMESTAMP>/job-logs/cluster-example-full-1-initdb-qnnvw.jsonl inflating: report_cluster_example_<TIMESTAMP>/job-logs/cluster-example-full-2-join-tvj8r.jsonl","title":"report Cluster"},{"location":"kubectl-plugin/#logs","text":"The kubectl cnpg logs command allows to follow the logs of a collection of pods related to CloudNativePG in a single go. It has at the moment one available sub-command: cluster .","title":"Logs"},{"location":"kubectl-plugin/#cluster-logs","text":"The cluster sub-command gathers all the pod logs for a cluster in a single stream or file. This means that you can get all the pod logs in a single terminal window, with a single invocation of the command. As in all the cnpg plugin sub-commands, you can get instructions and help with the -h flag: kubectl cnpg logs cluster -h The logs command will display logs in JSON-lines format, unless the --timestamps flag is used, in which case, a human-readable timestamp will be prepended to each line. In this case, lines will no longer be valid JSON, and tools such as jq may not work as desired. If the logs cluster sub-command is given the -f flag (aka --follow ), it will follow the cluster pod logs, and will also watch for any new pods created in the cluster after the command has been invoked. Any new pods found, including pods that have been restarted or re-created, will also have their pods followed. The logs will be displayed in the terminal's standard-out. This command will only exit when the cluster has no more pods left, or when it is interrupted by the user. If logs is called without the -f option, it will read the logs from all cluster pods until the time of invocation and display them in the terminal's standard-out, then exit. The -o or --output flag can be provided, to specify the name of the file where the logs should be saved, instead of displaying over standard-out. The --tail flag can be used to specify how many log lines will be retrieved from each pod in the cluster. By default, the logs cluster sub-command will display all the logs from each pod in the cluster. If combined with the \"follow\" flag -f , the number of logs specified by --tail will be retrieved until the current time, and from then the new logs will be followed. NOTE: unlike other cnpg plugin commands, the -f is used to denote \"follow\" rather than specify a file. This keeps with the convention of kubectl logs , which takes -f to mean the logs should be followed. Usage: kubectl cnpg logs cluster CLUSTER [flags] Using the -f option to follow: kubectl cnpg report cluster CLUSTER -f Using --tail option to display 3 lines from each pod and the -f option to follow: kubectl cnpg report cluster CLUSTER -f --tail 3 {\"level\":\"info\",\"ts\":\"2023-06-30T13:37:33Z\",\"logger\":\"postgres\",\"msg\":\"2023-06-30 13:37:33.142 UTC [26] LOG: ending log output to stderr\",\"source\":\"/controller/log/postgres\",\"logging_pod\":\"cluster-example-3\"} {\"level\":\"info\",\"ts\":\"2023-06-30T13:37:33Z\",\"logger\":\"postgres\",\"msg\":\"2023-06-30 13:37:33.142 UTC [26] HINT: Future log output will go to log destination \\\"csvlog\\\".\",\"source\":\"/controller/log/postgres\",\"logging_pod\":\"cluster-example-3\"} \u2026 \u2026 With the -o option omitted, and with --output specified: $ kubectl cnpg logs cluster CLUSTER --output my-cluster.log Successfully written logs to \"my-cluster.log\"","title":"Cluster logs"},{"location":"kubectl-plugin/#pretty","text":"The pretty sub-command reads a log stream from standard input, formats it into a human-readable output, and attempts to sort the entries by timestamp. It can be used in combination with kubectl cnpg logs cluster , as shown in the following example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting tablespace manager 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting external server manager [...] Alternatively, it can be used in combination with other commands that produce CNPG logs in JSON format, such as stern , or kubectl logs , as in the following example: $ kubectl logs cluster-example-1 | kubectl cnpg logs pretty 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting tablespace manager 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting external server manager [...] The pretty sub-command also supports advanced log filtering, allowing users to display logs for specific pods or loggers, or to filter logs by severity level. Here's an example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --pods cluster-example-1 --loggers postgres --log-level info 2024-10-15T17:35:00.509 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] LOG: redirecting log output to logging collector process 2024-10-15T17:35:00.509 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] HINT: Future log output will appear in directory \"/controller/log\"... 2024-10-15T17:35:00.510 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] LOG: ending log output to stderr 2024-10-15T17:35:00.510 INFO cluster-example-1 postgres ending log output to stderr [...] The pretty sub-command will try to sort the log stream, to make logs easier to reason about. In order to achieve this, it gathers the logs into groups, and within groups it sorts by timestamp. This is the only way to sort interactively, as pretty may be piped from a command in \"follow\" mode. The sub-command will add a group separator line, --- , at the end of each sorted group. The size of the grouping can be configured via the --sorting-group-size flag (default: 1000), as illustrated in the following example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --sorting-group-size=3 2024-10-15T17:35:20.426 INFO cluster-example-2 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:20.426 INFO cluster-example-2 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting tablespace manager --- 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting external server manager 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting controller-runtime manager 2024-10-15T17:35:20.439 INFO cluster-example-2 instance-manager Starting EventSource --- [...] To explore all available options, use the -h flag for detailed explanations of the supported flags and their usage. Info You can also increase the verbosity of the log by adding more -v options.","title":"Pretty"},{"location":"kubectl-plugin/#destroy","text":"The kubectl cnpg destroy command helps remove an instance and all the associated PVCs from a Kubernetes cluster. The optional --keep-pvc flag, if specified, allows you to keep the PVCs, while removing all metadata.ownerReferences that were set by the instance. Additionally, the cnpg.io/pvcStatus label on the PVCs will change from ready to detached to signify that they are no longer in use. Running again the command without the --keep-pvc flag will remove the detached PVCs. Usage: kubectl cnpg destroy CLUSTER INSTANCE The following example removes the cluster-example-2 pod and the associated PVCs: kubectl cnpg destroy cluster-example 2","title":"Destroy"},{"location":"kubectl-plugin/#cluster-hibernation","text":"There are times when you may need to temporarily suspend a CloudNativePG Cluster while preserving its data, allowing you to resume operations later. This feature is known as cluster hibernation . Hibernation is managed declaratively using the cnpg.io/hibernation annotation. Info For more details, see the \"Declarative Hibernation\" documentation page. To simplify the process, the cnpg plugin for kubectl provides a hibernate command, which acts as a convenient shortcut for applying the annotation. To hibernate a cluster, run: kubectl cnpg hibernate on CLUSTER This command applies the cnpg.io/hibernation=on annotation to the cluster, suspending its execution. To resume a hibernated cluster, use: kubectl cnpg hibernate off CLUSTER This will remove the hibernation state by setting cnpg.io/hibernation=off . You can check the cluster\u2019s status at any time with: kubectl cnpg status CLUSTER This will display the current state of the cluster, including whether it is hibernated.","title":"Cluster Hibernation"},{"location":"kubectl-plugin/#benchmarking-the-database-with-pgbench","text":"Pgbench can be run against an existing PostgreSQL cluster with following command: kubectl cnpg pgbench CLUSTER -- --time 30 --client 1 --jobs 1 Refer to the Benchmarking pgbench section for more details.","title":"Benchmarking the database with pgbench"},{"location":"kubectl-plugin/#benchmarking-the-storage-with-fio","text":"fio can be run on an existing storage class with following command: kubectl cnpg fio FIO_JOB_NAME [-n NAMESPACE] Refer to the Benchmarking fio section for more details.","title":"Benchmarking the storage with fio"},{"location":"kubectl-plugin/#requesting-a-new-physical-backup","text":"The kubectl cnpg backup command requests a new physical backup for an existing Postgres cluster by creating a new Backup resource. The following example requests an on-demand backup for a given cluster: kubectl cnpg backup CLUSTER or, if using volume snapshots: kubectl cnpg backup CLUSTER -m volumeSnapshot The created backup will be named after the request time: $ kubectl cnpg backup cluster-example backup/cluster-example-20230121002300 created By default, a newly created backup will use the backup target policy defined in the cluster to choose which instance to run on. However, you can override this policy with the --backup-target option. In the case of volume snapshot backups, you can also use the --online option to request an online/hot backup or an offline/cold one: additionally, you can also tune online backups by explicitly setting the --immediate-checkpoint and --wait-for-archive options. The \"Backup\" section contains more information about the configuration settings.","title":"Requesting a new physical backup"},{"location":"kubectl-plugin/#launching-psql","text":"The kubectl cnpg psql CLUSTER command starts a new PostgreSQL interactive front-end process (psql) connected to an existing Postgres cluster, as if you were running it from the actual pod. This means that you will be using the postgres user. Important As you will be connecting as postgres user, in production environments this method should be used with extreme care, by authorized personnel only. $ kubectl cnpg psql cluster-example psql (17.5 (Debian 17.5-1.pgdg110+1)) Type \"help\" for help. postgres=# By default, the command will connect to the primary instance. The user can select to work against a replica by using the --replica option: $ kubectl cnpg psql --replica cluster-example psql (17.5 (Debian 17.5-1.pgdg110+1)) Type \"help\" for help. postgres=# select pg_is_in_recovery(); pg_is_in_recovery ------------------- t (1 row) postgres=# \\q This command will start kubectl exec , and the kubectl executable must be reachable in your PATH variable to correctly work.","title":"Launching psql"},{"location":"kubectl-plugin/#snapshotting-a-postgres-cluster","text":"Warning The kubectl cnpg snapshot command has been removed. Please use the backup command to request backups using volume snapshots.","title":"Snapshotting a Postgres cluster"},{"location":"kubectl-plugin/#using-pgadmin4-for-evaluationdemonstration-purposes-only","text":"pgAdmin stands as the most popular and feature-rich open-source administration and development platform for PostgreSQL. For more information on the project, please refer to the official documentation . Given that the pgAdmin Development Team maintains official Docker container images, you can install pgAdmin in your environment as a standard Kubernetes deployment. Important Deployment of pgAdmin in Kubernetes production environments is beyond the scope of this document and, more broadly, of the CloudNativePG project. However, for the purposes of demonstration and evaluation , CloudNativePG offers a suitable solution. The cnpg plugin implements the pgadmin4 command, providing a straightforward method to connect to a given database Cluster and navigate its content in a local environment such as kind . For example, you can install a demo deployment of pgAdmin4 for the cluster-example cluster as follows: kubectl cnpg pgadmin4 cluster-example This command will produce: ConfigMap/cluster-example-pgadmin4 created Deployment/cluster-example-pgadmin4 created Service/cluster-example-pgadmin4 created Secret/cluster-example-pgadmin4 created [...] After deploying pgAdmin, forward the port using kubectl and connect through your browser by following the on-screen instructions. As usual, you can use the --dry-run option to generate the YAML file: kubectl cnpg pgadmin4 --dry-run cluster-example pgAdmin4 can be installed in either desktop or server mode, with the default being server. In server mode, authentication is required using a randomly generated password, and users must manually specify the database to connect to. On the other hand, desktop mode initiates a pgAdmin web interface without requiring authentication. It automatically connects to the app database as the app user, making it ideal for quick demos, such as on a local deployment using kind : kubectl cnpg pgadmin4 --mode desktop cluster-example After concluding your demo, ensure the termination of the pgAdmin deployment by executing: kubectl cnpg pgadmin4 --dry-run cluster-example | kubectl delete -f - Warning Never deploy pgAdmin in production using the plugin.","title":"Using pgAdmin4 for evaluation/demonstration purposes only"},{"location":"kubectl-plugin/#logical-replication-publications","text":"The cnpg publication command group is designed to streamline the creation and removal of PostgreSQL logical replication publications . Be aware that these commands are primarily intended for assisting in the creation of logical replication publications, particularly on remote PostgreSQL databases. Warning It is crucial to have a solid understanding of both the capabilities and limitations of PostgreSQL's native logical replication system before using these commands. In particular, be mindful of the logical replication restrictions .","title":"Logical Replication Publications"},{"location":"kubectl-plugin/#creating-a-new-publication","text":"To create a logical replication publication, use the cnpg publication create command. The basic structure of this command is as follows: kubectl cnpg publication create \\ --publication PUBLICATION_NAME \\ [--external-cluster EXTERNAL_CLUSTER] LOCAL_CLUSTER [options] There are two primary use cases: With --external-cluster : Use this option to create a publication on an external cluster (i.e. defined in the externalClusters stanza). The commands will be issued from the LOCAL_CLUSTER , but the publication will be for the data in EXTERNAL_CLUSTER . Without --external-cluster : Use this option to create a publication in the LOCAL_CLUSTER PostgreSQL Cluster (by default, the app database). Warning When connecting to an external cluster, ensure that the specified user has sufficient permissions to execute the CREATE PUBLICATION command. You have several options, similar to the CREATE PUBLICATION command, to define the group of tables to replicate. Notable options include: If you specify the --all-tables option, you create a publication FOR ALL TABLES . Alternatively, you can specify multiple occurrences of: --table : Add a specific table (with an expression) to the publication. --schema : Include all tables in the specified database schema (available from PostgreSQL 15). The --dry-run option enables you to preview the SQL commands that the plugin will execute. For additional information and detailed instructions, type the following command: kubectl cnpg publication create --help","title":"Creating a new publication"},{"location":"kubectl-plugin/#example","text":"Given a source-cluster and a destination-cluster , we would like to create a publication for the data on source-cluster . The destination-cluster has an entry in the externalClusters stanza pointing to source-cluster . We can run: kubectl cnpg publication create destination-cluster \\ --external-cluster=source-cluster --all-tables which will create a publication for all tables on source-cluster , running the SQL commands on the destination-cluster . Or instead, we can run: kubectl cnpg publication create source-cluster \\ --publication=app --all-tables which will create a publication named app for all the tables in the source-cluster , running the SQL commands on the source cluster. Info There are two sample files that have been provided for illustration and inspiration: logical-source and logical-destination .","title":"Example"},{"location":"kubectl-plugin/#dropping-a-publication","text":"The cnpg publication drop command seamlessly complements the create command by offering similar key options, including the publication name, cluster name, and an optional external cluster. You can drop a PUBLICATION with the following command structure: kubectl cnpg publication drop \\ --publication PUBLICATION_NAME \\ [--external-cluster EXTERNAL_CLUSTER] LOCAL_CLUSTER [options] To access further details and precise instructions, use the following command: kubectl cnpg publication drop --help","title":"Dropping a publication"},{"location":"kubectl-plugin/#logical-replication-subscriptions","text":"The cnpg subscription command group is a dedicated set of commands designed to simplify the creation and removal of PostgreSQL logical replication subscriptions . These commands are specifically crafted to aid in the establishment of logical replication subscriptions, especially when dealing with remote PostgreSQL databases. Warning Before using these commands, it is essential to have a comprehensive understanding of both the capabilities and limitations of PostgreSQL's native logical replication system. In particular, be mindful of the logical replication restrictions . In addition to subscription management, we provide a helpful command for synchronizing all sequences from the source cluster. While its applicability may vary, this command can be particularly useful in scenarios involving major upgrades or data import from remote servers.","title":"Logical Replication Subscriptions"},{"location":"kubectl-plugin/#creating-a-new-subscription","text":"To create a logical replication subscription, use the cnpg subscription create command. The basic structure of this command is as follows: kubectl cnpg subscription create \\ --subscription SUBSCRIPTION_NAME \\ --publication PUBLICATION_NAME \\ --external-cluster EXTERNAL_CLUSTER \\ LOCAL_CLUSTER [options] This command configures a subscription directed towards the specified publication in the designated external cluster, as defined in the externalClusters stanza of the LOCAL_CLUSTER . For additional information and detailed instructions, type the following command: kubectl cnpg subscription create --help","title":"Creating a new subscription"},{"location":"kubectl-plugin/#example_1","text":"As in the section on publications, we have a source-cluster and a destination-cluster , and we have already created a publication called app . The following command: kubectl cnpg subscription create destination-cluster \\ --external-cluster=source-cluster \\ --publication=app --subscription=app will create a subscription for app on the destination cluster. Warning Prioritize testing subscriptions in a non-production environment to ensure their effectiveness and identify any potential issues before implementing them in a production setting. Info There are two sample files that have been provided for illustration and inspiration: logical-source and logical-destination .","title":"Example"},{"location":"kubectl-plugin/#dropping-a-subscription","text":"The cnpg subscription drop command seamlessly complements the create command. You can drop a SUBSCRIPTION with the following command structure: kubectl cnpg subcription drop \\ --subscription SUBSCRIPTION_NAME \\ LOCAL_CLUSTER [options] To access further details and precise instructions, use the following command: kubectl cnpg subscription drop --help","title":"Dropping a subscription"},{"location":"kubectl-plugin/#synchronizing-sequences","text":"One notable constraint of PostgreSQL logical replication, implemented through publications and subscriptions, is the lack of sequence synchronization. This becomes particularly relevant when utilizing logical replication for live database migration, especially to a higher version of PostgreSQL. A crucial step in this process involves updating sequences before transitioning applications to the new database ( cutover ). To address this limitation, the cnpg subscription sync-sequences command offers a solution. This command establishes a connection with the source database, retrieves all relevant sequences, and subsequently updates local sequences with matching identities (based on database schema and sequence name). You can use the command as shown below: kubectl cnpg subscription sync-sequences \\ --subscription SUBSCRIPTION_NAME \\ LOCAL_CLUSTER For comprehensive details and specific instructions, utilize the following command: kubectl cnpg subscription sync-sequences --help","title":"Synchronizing sequences"},{"location":"kubectl-plugin/#example_2","text":"As in the previous sections for publication and subscription, we have a source-cluster and a destination-cluster . The publication and the subscription, both called app , are already present. The following command will synchronize the sequences involved in the app subscription, from the source cluster into the destination cluster. kubectl cnpg subscription sync-sequences destination-cluster \\ --subscription=app Warning Prioritize testing subscriptions in a non-production environment to guarantee their effectiveness and detect any potential issues before deploying them in a production setting.","title":"Example"},{"location":"kubectl-plugin/#integration-with-k9s","text":"The cnpg plugin can be easily integrated in K9s , a popular terminal-based UI to interact with Kubernetes clusters. See k9s/plugins.yml for details.","title":"Integration with K9s"},{"location":"kubectl-plugin/#permissions-required-by-the-plugin","text":"The plugin requires a set of Kubernetes permissions that depends on the command to execute. These permissions may affect resources and sub-resources like Pods, PDBs, PVCs, and enable actions like get , delete , patch . The following table contains the full details: Command Resource Permissions backup clusters: get backups: create certificate clusters: get secrets: get,create destroy pods: get,delete jobs: delete,list PVCs: list,delete,update fencing clusters: get,patch pods: get fio PVCs: create configmaps: create deployment: create hibernate clusters: get,patch,delete pods: list,get,delete pods/exec: create jobs: list PVCs: get,list,update,patch,delete install none logs clusters: get pods: list pods/log: get maintenance clusters: get,patch,list pgadmin4 clusters: get configmaps: create deployments: create services: create secrets: create pgbench clusters: get jobs: create promote clusters: get clusters/status: patch pods: get psql pods: get,list pods/exec: create publication clusters: get pods: get,list pods/exec: create reload clusters: get,patch report cluster clusters: get pods: list pods/log: get jobs: list events: list PVCs: list report operator configmaps: get deployments: get events: list pods: list pods/log: get secrets: get services: get mutatingwebhookconfigurations: list 1 validatingwebhookconfigurations: list 1 If OLM is present on the K8s cluster, also: clusterserviceversions: list installplans: list subscriptions: list restart clusters: get,patch pods: get,delete status clusters: get pods: list pods/exec: create pods/proxy: create PDBs: list subscription clusters: get pods: get,list pods/exec: create version none The permissions are cluster scope ClusterRole resources. \u21a9 \u21a9 Additionally, assigning the list permission on the clusters will enable autocompletion for multiple commands.","title":"Permissions required by the plugin"},{"location":"kubectl-plugin/#role-examples","text":"It is possible to create roles with restricted permissions. The following example creates a role that only has access to the cluster logs: --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: cnpg-log rules: - verbs: - get apiGroups: - postgresql.cnpg.io resources: - clusters - verbs: - list apiGroups: - '' resources: - pods - verbs: - get apiGroups: - '' resources: - pods/log The next example shows a role with the minimal permissions required to get the cluster status using the plugin's status command: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: cnpg-status rules: - verbs: - get apiGroups: - postgresql.cnpg.io resources: - clusters - verbs: - list apiGroups: - '' resources: - pods - verbs: - create apiGroups: - '' resources: - pods/exec - verbs: - create apiGroups: - '' resources: - pods/proxy - verbs: - list apiGroups: - policy resources: - poddisruptionbudgets Important Keeping the verbs restricted per resources and per apiGroups helps to prevent inadvertently granting more than intended permissions.","title":"Role examples"},{"location":"kubernetes_upgrade/","text":"Kubernetes Upgrade and Maintenance Maintaining an up-to-date Kubernetes cluster is crucial for ensuring optimal performance and security, particularly for self-managed clusters, especially those running on bare metal infrastructure. Regular updates help address technical debt and mitigate business risks, despite the controlled downtimes associated with temporarily removing a node from the cluster for maintenance purposes. For further insights on embracing risk in operations, refer to the \"Embracing Risk\" chapter from the Site Reliability Engineering book. Importance of Regular Updates Updating Kubernetes involves planning and executing maintenance tasks, such as applying security updates to underlying Linux servers, replacing malfunctioning hardware components, or upgrading the cluster to the latest Kubernetes version. These activities are essential for maintaining a robust and secure infrastructure. Maintenance Operations in a Cluster Typically, maintenance operations are carried out on one node at a time, following a structured process : eviction of workloads ( drain ): workloads are gracefully moved away from the node to be updated, ensuring a smooth transition. performing the operation: the actual maintenance operation, such as a system update or hardware replacement, is executed. rejoining the node to the cluster ( uncordon ): the updated node is reintegrated into the cluster, ready to resume its responsibilities. This process requires either stopping workloads for the entire upgrade duration or migrating them to other nodes in the cluster. Temporary PostgreSQL Cluster Degradation While the standard approach ensures service reliability and leverages Kubernetes' self-healing capabilities, there are scenarios where operating with a temporarily degraded cluster may be acceptable. This is particularly relevant for PostgreSQL clusters relying on node-local storage , where the storage is local to the Kubernetes worker node running the PostgreSQL database. Node-local storage, or simply local storage , is employed to enhance performance. Note If your database files reside on shared storage accessible over the network, the default self-healing behavior of the operator can efficiently handle scenarios where volumes are reused by pods on different nodes after a drain operation. In such cases, you can skip the remaining sections of this document. Pod Disruption Budgets By default, CloudNativePG safeguards Postgres cluster operations. If a node is to be drained and contains a cluster's primary instance, a switchover happens ahead of the drain. Once the instance in the node is downgraded to replica, the draining can resume. For single-instance clusters, a switchover is not possible, so CloudNativePG will prevent draining the node where the instance is housed. Additionally, in clusters with 3 or more instances, CloudNativePG guarantees that only one replica at a time is gracefully shut down during a drain operation. Each PostgreSQL Cluster is equipped with two associated PodDisruptionBudget resources - you can easily confirm it with the kubectl get pdb command. Our recommendation is to leave pod disruption budgets enabled for every production Postgres cluster. This can be effortlessly managed by toggling the .spec.enablePDB option, as detailed in the API reference . PostgreSQL Clusters used for Development or Testing For PostgreSQL clusters used for development purposes, often consisting of a single instance, it is essential to disable pod disruption budgets. Failure to do so will prevent the node hosting that cluster from being drained. The following example illustrates how to disable pod disruption budgets for a 1-instance development cluster: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: dev spec: instances: 1 enablePDB: false storage: size: 1Gi This configuration ensures smoother maintenance procedures without restrictions on draining the node during development activities. Node Maintenance Window Important While CloudNativePG will continue supporting the node maintenance window, it is currently recommended to transition to direct control of pod disruption budgets, as explained in the previous section. This section is retained mainly for backward compatibility. Prior to release 1.23, CloudNativePG had just one declarative mechanism to manage Kubernetes upgrades when dealing with local storage: you had to temporarily put the cluster in maintenance mode through the nodeMaintenanceWindow option to avoid standard self-healing procedures to kick in, while, for example, enlarging the partition on the physical node or updating the node itself. Warning Limit the duration of the maintenance window to the shortest amount of time possible. In this phase, some of the expected behaviors of Kubernetes are either disabled or running with some limitations, including self-healing, rolling updates, and Pod disruption budget. The nodeMaintenanceWindow option of the cluster has two further settings: inProgress : Boolean value that states if the maintenance window for the nodes is currently in progress or not. By default, it is set to off . During the maintenance window, the reusePVC option below is evaluated by the operator. reusePVC : Boolean value that defines if an existing PVC is reused or not during the maintenance operation. By default, it is set to on . When enabled , Kubernetes waits for the node to come up again and then reuses the existing PVC; the PodDisruptionBudget policy is temporarily removed. When disabled , Kubernetes forces the recreation of the Pod on a different node with a new PVC by relying on PostgreSQL's physical streaming replication, then destroys the old PVC together with the Pod. This scenario is generally not recommended unless the database's size is small, and re-cloning the new PostgreSQL instance takes shorter than waiting. This behavior does not apply to clusters with only one instance and reusePVC disabled: see section below. Note When performing the kubectl drain command, you will need to add the --delete-emptydir-data option. Don't be afraid: it refers to another volume internally used by the operator - not the PostgreSQL data directory. Important PodDisruptionBudget management can be disabled by setting the .spec.enablePDB field to false . In that case, the operator won't create PodDisruptionBudgets and will delete them if they were previously created. Single instance clusters with reusePVC set to false Important We recommend to always create clusters with more than one instance in order to guarantee high availability. Deleting the only PostgreSQL instance in a single instance cluster with reusePVC set to false would imply all data being lost, therefore we prevent users from draining nodes such instances might be running on, even in maintenance mode. However, in case maintenance is required for such a node you have two options: Enable reusePVC , accepting the downtime Replicate the instance on a different node and switch over the primary As long as a database service downtime is acceptable for your environment, draining the node is as simple as setting the nodeMaintenanceWindow to inProgress: true and reusePVC: true . This will allow the instance to be deleted and recreated as soon as the original PVC is available (e.g. with node local storage, as soon as the node is back up). Otherwise you will have to scale up the cluster, creating a new instance on a different node and promoting the new instance to primary in order to shut down the original one on the node undergoing maintenance. The only downtime in this case will be the duration of the switchover. A possible approach could be: Cordon the node on which the current instance is running. Scale up the cluster to 2 instances, could take some time depending on the database size. As soon as the new instance is running, the operator will automatically perform a switchover given that the current primary is running on a cordoned node. Scale back down the cluster to a single instance, this will delete the old instance The old primary's node can now be drained successfully, while leaving the new primary running on a new node.","title":"Kubernetes Upgrade and Maintenance"},{"location":"kubernetes_upgrade/#kubernetes-upgrade-and-maintenance","text":"Maintaining an up-to-date Kubernetes cluster is crucial for ensuring optimal performance and security, particularly for self-managed clusters, especially those running on bare metal infrastructure. Regular updates help address technical debt and mitigate business risks, despite the controlled downtimes associated with temporarily removing a node from the cluster for maintenance purposes. For further insights on embracing risk in operations, refer to the \"Embracing Risk\" chapter from the Site Reliability Engineering book.","title":"Kubernetes Upgrade and Maintenance"},{"location":"kubernetes_upgrade/#importance-of-regular-updates","text":"Updating Kubernetes involves planning and executing maintenance tasks, such as applying security updates to underlying Linux servers, replacing malfunctioning hardware components, or upgrading the cluster to the latest Kubernetes version. These activities are essential for maintaining a robust and secure infrastructure.","title":"Importance of Regular Updates"},{"location":"kubernetes_upgrade/#maintenance-operations-in-a-cluster","text":"Typically, maintenance operations are carried out on one node at a time, following a structured process : eviction of workloads ( drain ): workloads are gracefully moved away from the node to be updated, ensuring a smooth transition. performing the operation: the actual maintenance operation, such as a system update or hardware replacement, is executed. rejoining the node to the cluster ( uncordon ): the updated node is reintegrated into the cluster, ready to resume its responsibilities. This process requires either stopping workloads for the entire upgrade duration or migrating them to other nodes in the cluster.","title":"Maintenance Operations in a Cluster"},{"location":"kubernetes_upgrade/#temporary-postgresql-cluster-degradation","text":"While the standard approach ensures service reliability and leverages Kubernetes' self-healing capabilities, there are scenarios where operating with a temporarily degraded cluster may be acceptable. This is particularly relevant for PostgreSQL clusters relying on node-local storage , where the storage is local to the Kubernetes worker node running the PostgreSQL database. Node-local storage, or simply local storage , is employed to enhance performance. Note If your database files reside on shared storage accessible over the network, the default self-healing behavior of the operator can efficiently handle scenarios where volumes are reused by pods on different nodes after a drain operation. In such cases, you can skip the remaining sections of this document.","title":"Temporary PostgreSQL Cluster Degradation"},{"location":"kubernetes_upgrade/#pod-disruption-budgets","text":"By default, CloudNativePG safeguards Postgres cluster operations. If a node is to be drained and contains a cluster's primary instance, a switchover happens ahead of the drain. Once the instance in the node is downgraded to replica, the draining can resume. For single-instance clusters, a switchover is not possible, so CloudNativePG will prevent draining the node where the instance is housed. Additionally, in clusters with 3 or more instances, CloudNativePG guarantees that only one replica at a time is gracefully shut down during a drain operation. Each PostgreSQL Cluster is equipped with two associated PodDisruptionBudget resources - you can easily confirm it with the kubectl get pdb command. Our recommendation is to leave pod disruption budgets enabled for every production Postgres cluster. This can be effortlessly managed by toggling the .spec.enablePDB option, as detailed in the API reference .","title":"Pod Disruption Budgets"},{"location":"kubernetes_upgrade/#postgresql-clusters-used-for-development-or-testing","text":"For PostgreSQL clusters used for development purposes, often consisting of a single instance, it is essential to disable pod disruption budgets. Failure to do so will prevent the node hosting that cluster from being drained. The following example illustrates how to disable pod disruption budgets for a 1-instance development cluster: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: dev spec: instances: 1 enablePDB: false storage: size: 1Gi This configuration ensures smoother maintenance procedures without restrictions on draining the node during development activities.","title":"PostgreSQL Clusters used for Development or Testing"},{"location":"kubernetes_upgrade/#node-maintenance-window","text":"Important While CloudNativePG will continue supporting the node maintenance window, it is currently recommended to transition to direct control of pod disruption budgets, as explained in the previous section. This section is retained mainly for backward compatibility. Prior to release 1.23, CloudNativePG had just one declarative mechanism to manage Kubernetes upgrades when dealing with local storage: you had to temporarily put the cluster in maintenance mode through the nodeMaintenanceWindow option to avoid standard self-healing procedures to kick in, while, for example, enlarging the partition on the physical node or updating the node itself. Warning Limit the duration of the maintenance window to the shortest amount of time possible. In this phase, some of the expected behaviors of Kubernetes are either disabled or running with some limitations, including self-healing, rolling updates, and Pod disruption budget. The nodeMaintenanceWindow option of the cluster has two further settings: inProgress : Boolean value that states if the maintenance window for the nodes is currently in progress or not. By default, it is set to off . During the maintenance window, the reusePVC option below is evaluated by the operator. reusePVC : Boolean value that defines if an existing PVC is reused or not during the maintenance operation. By default, it is set to on . When enabled , Kubernetes waits for the node to come up again and then reuses the existing PVC; the PodDisruptionBudget policy is temporarily removed. When disabled , Kubernetes forces the recreation of the Pod on a different node with a new PVC by relying on PostgreSQL's physical streaming replication, then destroys the old PVC together with the Pod. This scenario is generally not recommended unless the database's size is small, and re-cloning the new PostgreSQL instance takes shorter than waiting. This behavior does not apply to clusters with only one instance and reusePVC disabled: see section below. Note When performing the kubectl drain command, you will need to add the --delete-emptydir-data option. Don't be afraid: it refers to another volume internally used by the operator - not the PostgreSQL data directory. Important PodDisruptionBudget management can be disabled by setting the .spec.enablePDB field to false . In that case, the operator won't create PodDisruptionBudgets and will delete them if they were previously created.","title":"Node Maintenance Window"},{"location":"kubernetes_upgrade/#single-instance-clusters-with-reusepvc-set-to-false","text":"Important We recommend to always create clusters with more than one instance in order to guarantee high availability. Deleting the only PostgreSQL instance in a single instance cluster with reusePVC set to false would imply all data being lost, therefore we prevent users from draining nodes such instances might be running on, even in maintenance mode. However, in case maintenance is required for such a node you have two options: Enable reusePVC , accepting the downtime Replicate the instance on a different node and switch over the primary As long as a database service downtime is acceptable for your environment, draining the node is as simple as setting the nodeMaintenanceWindow to inProgress: true and reusePVC: true . This will allow the instance to be deleted and recreated as soon as the original PVC is available (e.g. with node local storage, as soon as the node is back up). Otherwise you will have to scale up the cluster, creating a new instance on a different node and promoting the new instance to primary in order to shut down the original one on the node undergoing maintenance. The only downtime in this case will be the duration of the switchover. A possible approach could be: Cordon the node on which the current instance is running. Scale up the cluster to 2 instances, could take some time depending on the database size. As soon as the new instance is running, the operator will automatically perform a switchover given that the current primary is running on a cordoned node. Scale back down the cluster to a single instance, this will delete the old instance The old primary's node can now be drained successfully, while leaving the new primary running on a new node.","title":"Single instance clusters with reusePVC set to false"},{"location":"labels_annotations/","text":"Labels and annotations Resources in Kubernetes are organized in a flat structure, with no hierarchical information or relationship between them. However, such resources and objects can be linked together and put in relationship through labels and annotations . Info For more information, see the Kubernetes documentation on annotations and labels . In brief: An annotation is used to assign additional non-identifying information to resources with the goal of facilitating integration with external tools. A label is used to group objects and query them through the Kubernetes native selector capability. You can select one or more labels or annotations to use in your CloudNativePG deployments. Then you need to configure the operator so that when you define these labels or annotations in a cluster's metadata, they're inherited by all resources created by it (including pods). Note Label and annotation inheritance is the technique adopted by CloudNativePG instead of alternative approaches such as pod templates. Predefined labels CloudNativePG manages the following predefined labels: cnpg.io/backupDate The date of the backup in ISO 8601 format ( YYYYMMDD ). This label is available only on VolumeSnapshot resources. cnpg.io/backupName Backup identifier. This label is available only on VolumeSnapshot resources. cnpg.io/backupMonth The year/month when a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/backupTimeline The timeline of the instance when a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/backupYear The year a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/cluster Name of the cluster. cnpg.io/immediateBackup Applied to a Backup resource if the backup is the first one created from a ScheduledBackup object having immediate set to true . cnpg.io/instanceName Name of the PostgreSQL instance (replaces the old and deprecated postgresql label). cnpg.io/jobRole Role of the job (that is, import , initdb , join , ...) cnpg.io/onlineBackup Whether the backup is online (hot) or taken when Postgres is down (cold). This label is available only on VolumeSnapshot resources. cnpg.io/podRole Distinguishes pods dedicated to pooler deployment from those used for database instances. cnpg.io/poolerName Name of the PgBouncer pooler. cnpg.io/pvcRole Purpose of the PVC, such as PG_DATA or PG_WAL . cnpg.io/reload Available on ConfigMap and Secret resources. When set to true , a change in the resource is automatically reloaded by the operator. cnpg.io/userType Specifies the type of PostgreSQL user associated with the Secret , either superuser (Postgres superuser access) or app (application-level user in CloudNativePG terminology), and is limited to the default users created by CloudNativePG (typically postgres and app ). role - deprecated Whether the instance running in a pod is a primary or a replica . This label is deprecated, you should use cnpg.io/instanceRole instead. cnpg.io/scheduled-backup When available, name of the ScheduledBackup resource that created a given Backup object. cnpg.io/instanceRole Whether the instance running in a pod is a primary or a replica . Predefined annotations CloudNativePG manages the following predefined annotations: container.apparmor.security.beta.kubernetes.io/* Name of the AppArmor profile to apply to the named container. See AppArmor for details. cnpg.io/backupEndTime The time a backup ended. This annotation is available only on VolumeSnapshot resources. cnpg.io/backupEndWAL The WAL at the conclusion of a backup. This annotation is available only on VolumeSnapshot resources. cnpg.io/backupStartTime The time a backup started. cnpg.io/backupStartWAL The WAL at the start of a backup. This annotation is available only on VolumeSnapshot resources. cnpg.io/coredumpFilter Filter to control the coredump of Postgres processes, expressed with a bitmask. By default it's set to 0x31 to exclude shared memory segments from the dump. See PostgreSQL core dumps for more information. cnpg.io/clusterManifest Manifest of the Cluster owning this resource (such as a PVC). This label replaces the old, deprecated cnpg.io/hibernateClusterManifest label. cnpg.io/fencedInstances List of the instances that need to be fenced, expressed in JSON format. The whole cluster is fenced if the list contains the * element. cnpg.io/forceLegacyBackup Applied to a Cluster resource for testing purposes only, to simulate the behavior of barman-cloud-backup prior to version 3.4 (Jan 2023) when the --name option wasn't available. cnpg.io/hash The hash value of the resource. cnpg.io/hibernation Applied to a Cluster resource to control the declarative hibernation feature . Allowed values are on and off . cnpg.io/managedSecrets Pull secrets managed by the operator and automatically set in the ServiceAccount resources for each Postgres cluster. cnpg.io/nodeSerial On a pod resource, identifies the serial number of the instance within the Postgres cluster. cnpg.io/operatorVersion Version of the operator. cnpg.io/pgControldata Output of the pg_controldata command. This annotation replaces the old, deprecated cnpg.io/hibernatePgControlData annotation. cnpg.io/podEnvHash Deprecated, as the cnpg.io/podSpec annotation now also contains the pod environment. cnpg.io/podPatch Annotation can be applied on a Cluster resource. When set to JSON-patch formatted patch, the patch will be applied on the instance Pods. \u26a0\ufe0f WARNING: This feature may introduce discrepancies between the operator\u2019s expectations and Kubernetes behavior. Use with caution and only as a last resort. IMPORTANT : adding or changing this annotation won't trigger a rolling deployment of the generated Pods. The latter can be triggered manually by the user with kubectl cnpg restart . cnpg.io/podSpec Snapshot of the spec of the pod generated by the operator. This annotation replaces the old, deprecated cnpg.io/podEnvHash annotation. cnpg.io/poolerSpecHash Hash of the pooler resource. cnpg.io/pvcStatus Current status of the PVC: initializing , ready , or detached . cnpg.io/reconcilePodSpec Annotation can be applied to a Cluster or Pooler to prevent restarts. When set to disabled on a Cluster , the operator prevents instances from restarting due to changes in the PodSpec. This includes changes to: Topology or affinity Scheduler Volumes or containers When set to disabled on a Pooler , the operator restricts any modifications to the deployment specification, except for changes to spec.instances . cnpg.io/reconciliationLoop When set to disabled on a Cluster , the operator prevents the reconciliation loop from running. cnpg.io/reloadedAt Contains the latest cluster reload time. reload is triggered by the user through a plugin. cnpg.io/skipEmptyWalArchiveCheck When set to enabled on a Cluster resource, the operator disables the check that ensures that the WAL archive is empty before writing data. Use at your own risk. cnpg.io/skipWalArchiving When set to enabled on a Cluster resource, the operator disables WAL archiving. This will set archive_mode to off and require a restart of all PostgreSQL instances. Use at your own risk. cnpg.io/snapshotStartTime The time a snapshot started. cnpg.io/snapshotEndTime The time a snapshot was marked as ready to use. cnpg.io/validation When set to disabled on a CloudNativePG-managed custom resource, the validation webhook allows all changes without restriction. \u26a0\ufe0f WARNING: Disabling validation may permit unsafe or destructive operations. Use this setting with caution and at your own risk. cnpg.io/volumeSnapshotDeadline Applied to Backup and ScheduledBackup resources, allows you to control how long the operator should retry recoverable errors before considering the volume snapshot backup failed. In minutes, defaulting to 10. kubectl.kubernetes.io/restartedAt When available, the time of last requested restart of a Postgres cluster. Prerequisites By default, no label or annotation defined in the cluster's metadata is inherited by the associated resources. To enable label/annotation inheritance, follow the instructions provided in Operator configuration . The following continues from that example and limits it to the following: Annotations: categories Labels: app , environment , and workload Note Feel free to select the names that most suit your context for both annotations and labels. You can also use wildcards in naming and adopt strategies like using mycompany/* for all labels or setting annotations starting with mycompany/ to be inherited. Defining cluster's metadata When defining the cluster, before any resource is deployed, you can set the metadata as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example annotations: categories: database labels: environment: production workload: database app: sso spec: # ... <snip> Once the cluster is deployed, you can verify, for example, that the labels were correctly set in the pods: kubectl get pods --show-labels Current limitations Currently, CloudNativePG doesn't automatically propagate labels or annotations deletions. Therefore, when an annotation or label is removed from a cluster that was previously propagated to the underlying pods, the operator doesn't remove it on the associated resources.","title":"Labels and annotations"},{"location":"labels_annotations/#labels-and-annotations","text":"Resources in Kubernetes are organized in a flat structure, with no hierarchical information or relationship between them. However, such resources and objects can be linked together and put in relationship through labels and annotations . Info For more information, see the Kubernetes documentation on annotations and labels . In brief: An annotation is used to assign additional non-identifying information to resources with the goal of facilitating integration with external tools. A label is used to group objects and query them through the Kubernetes native selector capability. You can select one or more labels or annotations to use in your CloudNativePG deployments. Then you need to configure the operator so that when you define these labels or annotations in a cluster's metadata, they're inherited by all resources created by it (including pods). Note Label and annotation inheritance is the technique adopted by CloudNativePG instead of alternative approaches such as pod templates.","title":"Labels and annotations"},{"location":"labels_annotations/#predefined-labels","text":"CloudNativePG manages the following predefined labels: cnpg.io/backupDate The date of the backup in ISO 8601 format ( YYYYMMDD ). This label is available only on VolumeSnapshot resources. cnpg.io/backupName Backup identifier. This label is available only on VolumeSnapshot resources. cnpg.io/backupMonth The year/month when a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/backupTimeline The timeline of the instance when a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/backupYear The year a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/cluster Name of the cluster. cnpg.io/immediateBackup Applied to a Backup resource if the backup is the first one created from a ScheduledBackup object having immediate set to true . cnpg.io/instanceName Name of the PostgreSQL instance (replaces the old and deprecated postgresql label). cnpg.io/jobRole Role of the job (that is, import , initdb , join , ...) cnpg.io/onlineBackup Whether the backup is online (hot) or taken when Postgres is down (cold). This label is available only on VolumeSnapshot resources. cnpg.io/podRole Distinguishes pods dedicated to pooler deployment from those used for database instances. cnpg.io/poolerName Name of the PgBouncer pooler. cnpg.io/pvcRole Purpose of the PVC, such as PG_DATA or PG_WAL . cnpg.io/reload Available on ConfigMap and Secret resources. When set to true , a change in the resource is automatically reloaded by the operator. cnpg.io/userType Specifies the type of PostgreSQL user associated with the Secret , either superuser (Postgres superuser access) or app (application-level user in CloudNativePG terminology), and is limited to the default users created by CloudNativePG (typically postgres and app ). role - deprecated Whether the instance running in a pod is a primary or a replica . This label is deprecated, you should use cnpg.io/instanceRole instead. cnpg.io/scheduled-backup When available, name of the ScheduledBackup resource that created a given Backup object. cnpg.io/instanceRole Whether the instance running in a pod is a primary or a replica .","title":"Predefined labels"},{"location":"labels_annotations/#predefined-annotations","text":"CloudNativePG manages the following predefined annotations: container.apparmor.security.beta.kubernetes.io/* Name of the AppArmor profile to apply to the named container. See AppArmor for details. cnpg.io/backupEndTime The time a backup ended. This annotation is available only on VolumeSnapshot resources. cnpg.io/backupEndWAL The WAL at the conclusion of a backup. This annotation is available only on VolumeSnapshot resources. cnpg.io/backupStartTime The time a backup started. cnpg.io/backupStartWAL The WAL at the start of a backup. This annotation is available only on VolumeSnapshot resources. cnpg.io/coredumpFilter Filter to control the coredump of Postgres processes, expressed with a bitmask. By default it's set to 0x31 to exclude shared memory segments from the dump. See PostgreSQL core dumps for more information. cnpg.io/clusterManifest Manifest of the Cluster owning this resource (such as a PVC). This label replaces the old, deprecated cnpg.io/hibernateClusterManifest label. cnpg.io/fencedInstances List of the instances that need to be fenced, expressed in JSON format. The whole cluster is fenced if the list contains the * element. cnpg.io/forceLegacyBackup Applied to a Cluster resource for testing purposes only, to simulate the behavior of barman-cloud-backup prior to version 3.4 (Jan 2023) when the --name option wasn't available. cnpg.io/hash The hash value of the resource. cnpg.io/hibernation Applied to a Cluster resource to control the declarative hibernation feature . Allowed values are on and off . cnpg.io/managedSecrets Pull secrets managed by the operator and automatically set in the ServiceAccount resources for each Postgres cluster. cnpg.io/nodeSerial On a pod resource, identifies the serial number of the instance within the Postgres cluster. cnpg.io/operatorVersion Version of the operator. cnpg.io/pgControldata Output of the pg_controldata command. This annotation replaces the old, deprecated cnpg.io/hibernatePgControlData annotation. cnpg.io/podEnvHash Deprecated, as the cnpg.io/podSpec annotation now also contains the pod environment. cnpg.io/podPatch Annotation can be applied on a Cluster resource. When set to JSON-patch formatted patch, the patch will be applied on the instance Pods. \u26a0\ufe0f WARNING: This feature may introduce discrepancies between the operator\u2019s expectations and Kubernetes behavior. Use with caution and only as a last resort. IMPORTANT : adding or changing this annotation won't trigger a rolling deployment of the generated Pods. The latter can be triggered manually by the user with kubectl cnpg restart . cnpg.io/podSpec Snapshot of the spec of the pod generated by the operator. This annotation replaces the old, deprecated cnpg.io/podEnvHash annotation. cnpg.io/poolerSpecHash Hash of the pooler resource. cnpg.io/pvcStatus Current status of the PVC: initializing , ready , or detached . cnpg.io/reconcilePodSpec Annotation can be applied to a Cluster or Pooler to prevent restarts. When set to disabled on a Cluster , the operator prevents instances from restarting due to changes in the PodSpec. This includes changes to: Topology or affinity Scheduler Volumes or containers When set to disabled on a Pooler , the operator restricts any modifications to the deployment specification, except for changes to spec.instances . cnpg.io/reconciliationLoop When set to disabled on a Cluster , the operator prevents the reconciliation loop from running. cnpg.io/reloadedAt Contains the latest cluster reload time. reload is triggered by the user through a plugin. cnpg.io/skipEmptyWalArchiveCheck When set to enabled on a Cluster resource, the operator disables the check that ensures that the WAL archive is empty before writing data. Use at your own risk. cnpg.io/skipWalArchiving When set to enabled on a Cluster resource, the operator disables WAL archiving. This will set archive_mode to off and require a restart of all PostgreSQL instances. Use at your own risk. cnpg.io/snapshotStartTime The time a snapshot started. cnpg.io/snapshotEndTime The time a snapshot was marked as ready to use. cnpg.io/validation When set to disabled on a CloudNativePG-managed custom resource, the validation webhook allows all changes without restriction. \u26a0\ufe0f WARNING: Disabling validation may permit unsafe or destructive operations. Use this setting with caution and at your own risk. cnpg.io/volumeSnapshotDeadline Applied to Backup and ScheduledBackup resources, allows you to control how long the operator should retry recoverable errors before considering the volume snapshot backup failed. In minutes, defaulting to 10. kubectl.kubernetes.io/restartedAt When available, the time of last requested restart of a Postgres cluster.","title":"Predefined annotations"},{"location":"labels_annotations/#prerequisites","text":"By default, no label or annotation defined in the cluster's metadata is inherited by the associated resources. To enable label/annotation inheritance, follow the instructions provided in Operator configuration . The following continues from that example and limits it to the following: Annotations: categories Labels: app , environment , and workload Note Feel free to select the names that most suit your context for both annotations and labels. You can also use wildcards in naming and adopt strategies like using mycompany/* for all labels or setting annotations starting with mycompany/ to be inherited.","title":"Prerequisites"},{"location":"labels_annotations/#defining-clusters-metadata","text":"When defining the cluster, before any resource is deployed, you can set the metadata as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example annotations: categories: database labels: environment: production workload: database app: sso spec: # ... <snip> Once the cluster is deployed, you can verify, for example, that the labels were correctly set in the pods: kubectl get pods --show-labels","title":"Defining cluster's metadata"},{"location":"labels_annotations/#current-limitations","text":"Currently, CloudNativePG doesn't automatically propagate labels or annotations deletions. Therefore, when an annotation or label is removed from a cluster that was previously propagated to the underlying pods, the operator doesn't remove it on the associated resources.","title":"Current limitations"},{"location":"logging/","text":"Logging CloudNativePG outputs logs in JSON format directly to standard output, including PostgreSQL logs, without persisting them to storage for security reasons. This design facilitates seamless integration with most Kubernetes-compatible log management tools, including command line ones like stern . Important Long-term storage and management of logs are outside the scope of the operator and should be handled at the Kubernetes infrastructure level. For more information, see the Kubernetes Logging Architecture documentation. Each log entry includes the following fields: level \u2013 The log level (e.g., info , notice ). ts \u2013 The timestamp. logger \u2013 The type of log (e.g., postgres , pg_controldata ). msg \u2013 The log message, or the keyword record if the message is in JSON format. record \u2013 The actual record, with a structure that varies depending on the logger type. logging_pod \u2013 The name of the pod where the log was generated. Info If your log ingestion system requires custom field names, you can rename the level and ts fields using the log-field-level and log-field-timestamp flags in the operator controller. This can be configured by editing the Deployment definition of the cloudnative-pg operator. Cluster Logs You can configure the log level for the instance pods in the cluster specification using the logLevel option. Available log levels are: error , warning , info (default), debug , and trace . Important Currently, the log level can only be set at the time the instance starts. Changes to the log level in the cluster specification after the cluster has started will only apply to new pods, not existing ones. Operator Logs The logs produced by the operator pod can be configured with log levels, same as instance pods: error , warning , info (default), debug , and trace . The log level for the operator can be configured by editing the Deployment definition of the operator and setting the --log-level command line argument to the desired value. PostgreSQL Logs Each PostgreSQL log entry is a JSON object with the logger key set to postgres . The structure of the log entries is as follows: { \"level\": \"info\", \"ts\": 1619781249.7188137, \"logger\": \"postgres\", \"msg\": \"record\", \"record\": { \"log_time\": \"2021-04-30 11:14:09.718 UTC\", \"user_name\": \"\", \"database_name\": \"\", \"process_id\": \"25\", \"connection_from\": \"\", \"session_id\": \"608be681.19\", \"session_line_num\": \"1\", \"command_tag\": \"\", \"session_start_time\": \"2021-04-30 11:14:09 UTC\", \"virtual_transaction_id\": \"\", \"transaction_id\": \"0\", \"error_severity\": \"LOG\", \"sql_state_code\": \"00000\", \"message\": \"database system was interrupted; last known up at 2021-04-30 11:14:07 UTC\", \"detail\": \"\", \"hint\": \"\", \"internal_query\": \"\", \"internal_query_pos\": \"\", \"context\": \"\", \"query\": \"\", \"query_pos\": \"\", \"location\": \"\", \"application_name\": \"\", \"backend_type\": \"startup\" }, \"logging_pod\": \"cluster-example-1\", } Info Internally, the operator uses PostgreSQL's CSV log format. For more details, refer to the PostgreSQL documentation on CSV log format . PGAudit Logs CloudNativePG offers seamless and native support for PGAudit on PostgreSQL clusters. To enable PGAudit, add the necessary pgaudit parameters in the postgresql section of the cluster configuration. Important The PGAudit library must be added to shared_preload_libraries . CloudNativePG automatically manages this based on the presence of pgaudit.* parameters in the PostgreSQL configuration. The operator handles both the addition and removal of the library from shared_preload_libraries . Additionally, the operator manages the creation and removal of the PGAudit extension across all databases within the cluster. Important CloudNativePG executes the CREATE EXTENSION and DROP EXTENSION commands in all databases within the cluster that accept connections. The following example demonstrates a PostgreSQL Cluster deployment with PGAudit enabled and configured: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 postgresql: parameters: \"pgaudit.log\": \"all, -misc\" \"pgaudit.log_catalog\": \"off\" \"pgaudit.log_parameter\": \"on\" \"pgaudit.log_relation\": \"on\" storage: size: 1Gi The audit CSV log entries generated by PGAudit are parsed and routed to standard output in JSON format, similar to all other logs: .logger is set to pgaudit . .msg is set to record . .record contains the entire parsed record as a JSON object. This structure resembles that of logging_collector logs, with the exception of .record.audit , which contains the PGAudit CSV message formatted as a JSON object. This example shows sample log entries: { \"level\": \"info\", \"ts\": 1627394507.8814096, \"logger\": \"pgaudit\", \"msg\": \"record\", \"record\": { \"log_time\": \"2021-07-27 14:01:47.881 UTC\", \"user_name\": \"postgres\", \"database_name\": \"postgres\", \"process_id\": \"203\", \"connection_from\": \"[local]\", \"session_id\": \"610011cb.cb\", \"session_line_num\": \"1\", \"command_tag\": \"SELECT\", \"session_start_time\": \"2021-07-27 14:01:47 UTC\", \"virtual_transaction_id\": \"3/336\", \"transaction_id\": \"0\", \"error_severity\": \"LOG\", \"sql_state_code\": \"00000\", \"backend_type\": \"client backend\", \"audit\": { \"audit_type\": \"SESSION\", \"statement_id\": \"1\", \"substatement_id\": \"1\", \"class\": \"READ\", \"command\": \"SELECT FOR KEY SHARE\", \"statement\": \"SELECT pg_current_wal_lsn()\", \"parameter\": \"<none>\" } }, \"logging_pod\": \"cluster-example-1\", } See the PGAudit documentation for more details about each field in a record. Other Logs All logs generated by the operator and its instances are in JSON format, with the logger field indicating the process that produced them. The possible logger values are as follows: barman-cloud-wal-archive : logs from barman-cloud-wal-archive barman-cloud-wal-restore : logs from barman-cloud-wal-restore initdb : logs from running initdb pg_basebackup : logs from running pg_basebackup pg_controldata : logs from running pg_controldata pg_ctl : logs from running any pg_ctl subcommand pg_rewind : logs from running pg_rewind pgaudit : logs from the PGAudit extension postgres : logs from the postgres instance (with msg distinct from record ) wal-archive : logs from the wal-archive subcommand of the instance manager wal-restore : logs from the wal-restore subcommand of the instance manager instance-manager : from the PostgreSQL instance manager With the exception of postgres , which follows a specific structure, all other logger values contain the msg field with the escaped message that is logged.","title":"Logging"},{"location":"logging/#logging","text":"CloudNativePG outputs logs in JSON format directly to standard output, including PostgreSQL logs, without persisting them to storage for security reasons. This design facilitates seamless integration with most Kubernetes-compatible log management tools, including command line ones like stern . Important Long-term storage and management of logs are outside the scope of the operator and should be handled at the Kubernetes infrastructure level. For more information, see the Kubernetes Logging Architecture documentation. Each log entry includes the following fields: level \u2013 The log level (e.g., info , notice ). ts \u2013 The timestamp. logger \u2013 The type of log (e.g., postgres , pg_controldata ). msg \u2013 The log message, or the keyword record if the message is in JSON format. record \u2013 The actual record, with a structure that varies depending on the logger type. logging_pod \u2013 The name of the pod where the log was generated. Info If your log ingestion system requires custom field names, you can rename the level and ts fields using the log-field-level and log-field-timestamp flags in the operator controller. This can be configured by editing the Deployment definition of the cloudnative-pg operator.","title":"Logging"},{"location":"logging/#cluster-logs","text":"You can configure the log level for the instance pods in the cluster specification using the logLevel option. Available log levels are: error , warning , info (default), debug , and trace . Important Currently, the log level can only be set at the time the instance starts. Changes to the log level in the cluster specification after the cluster has started will only apply to new pods, not existing ones.","title":"Cluster Logs"},{"location":"logging/#operator-logs","text":"The logs produced by the operator pod can be configured with log levels, same as instance pods: error , warning , info (default), debug , and trace . The log level for the operator can be configured by editing the Deployment definition of the operator and setting the --log-level command line argument to the desired value.","title":"Operator Logs"},{"location":"logging/#postgresql-logs","text":"Each PostgreSQL log entry is a JSON object with the logger key set to postgres . The structure of the log entries is as follows: { \"level\": \"info\", \"ts\": 1619781249.7188137, \"logger\": \"postgres\", \"msg\": \"record\", \"record\": { \"log_time\": \"2021-04-30 11:14:09.718 UTC\", \"user_name\": \"\", \"database_name\": \"\", \"process_id\": \"25\", \"connection_from\": \"\", \"session_id\": \"608be681.19\", \"session_line_num\": \"1\", \"command_tag\": \"\", \"session_start_time\": \"2021-04-30 11:14:09 UTC\", \"virtual_transaction_id\": \"\", \"transaction_id\": \"0\", \"error_severity\": \"LOG\", \"sql_state_code\": \"00000\", \"message\": \"database system was interrupted; last known up at 2021-04-30 11:14:07 UTC\", \"detail\": \"\", \"hint\": \"\", \"internal_query\": \"\", \"internal_query_pos\": \"\", \"context\": \"\", \"query\": \"\", \"query_pos\": \"\", \"location\": \"\", \"application_name\": \"\", \"backend_type\": \"startup\" }, \"logging_pod\": \"cluster-example-1\", } Info Internally, the operator uses PostgreSQL's CSV log format. For more details, refer to the PostgreSQL documentation on CSV log format .","title":"PostgreSQL Logs"},{"location":"logging/#pgaudit-logs","text":"CloudNativePG offers seamless and native support for PGAudit on PostgreSQL clusters. To enable PGAudit, add the necessary pgaudit parameters in the postgresql section of the cluster configuration. Important The PGAudit library must be added to shared_preload_libraries . CloudNativePG automatically manages this based on the presence of pgaudit.* parameters in the PostgreSQL configuration. The operator handles both the addition and removal of the library from shared_preload_libraries . Additionally, the operator manages the creation and removal of the PGAudit extension across all databases within the cluster. Important CloudNativePG executes the CREATE EXTENSION and DROP EXTENSION commands in all databases within the cluster that accept connections. The following example demonstrates a PostgreSQL Cluster deployment with PGAudit enabled and configured: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 postgresql: parameters: \"pgaudit.log\": \"all, -misc\" \"pgaudit.log_catalog\": \"off\" \"pgaudit.log_parameter\": \"on\" \"pgaudit.log_relation\": \"on\" storage: size: 1Gi The audit CSV log entries generated by PGAudit are parsed and routed to standard output in JSON format, similar to all other logs: .logger is set to pgaudit . .msg is set to record . .record contains the entire parsed record as a JSON object. This structure resembles that of logging_collector logs, with the exception of .record.audit , which contains the PGAudit CSV message formatted as a JSON object. This example shows sample log entries: { \"level\": \"info\", \"ts\": 1627394507.8814096, \"logger\": \"pgaudit\", \"msg\": \"record\", \"record\": { \"log_time\": \"2021-07-27 14:01:47.881 UTC\", \"user_name\": \"postgres\", \"database_name\": \"postgres\", \"process_id\": \"203\", \"connection_from\": \"[local]\", \"session_id\": \"610011cb.cb\", \"session_line_num\": \"1\", \"command_tag\": \"SELECT\", \"session_start_time\": \"2021-07-27 14:01:47 UTC\", \"virtual_transaction_id\": \"3/336\", \"transaction_id\": \"0\", \"error_severity\": \"LOG\", \"sql_state_code\": \"00000\", \"backend_type\": \"client backend\", \"audit\": { \"audit_type\": \"SESSION\", \"statement_id\": \"1\", \"substatement_id\": \"1\", \"class\": \"READ\", \"command\": \"SELECT FOR KEY SHARE\", \"statement\": \"SELECT pg_current_wal_lsn()\", \"parameter\": \"<none>\" } }, \"logging_pod\": \"cluster-example-1\", } See the PGAudit documentation for more details about each field in a record.","title":"PGAudit Logs"},{"location":"logging/#other-logs","text":"All logs generated by the operator and its instances are in JSON format, with the logger field indicating the process that produced them. The possible logger values are as follows: barman-cloud-wal-archive : logs from barman-cloud-wal-archive barman-cloud-wal-restore : logs from barman-cloud-wal-restore initdb : logs from running initdb pg_basebackup : logs from running pg_basebackup pg_controldata : logs from running pg_controldata pg_ctl : logs from running any pg_ctl subcommand pg_rewind : logs from running pg_rewind pgaudit : logs from the PGAudit extension postgres : logs from the postgres instance (with msg distinct from record ) wal-archive : logs from the wal-archive subcommand of the instance manager wal-restore : logs from the wal-restore subcommand of the instance manager instance-manager : from the PostgreSQL instance manager With the exception of postgres , which follows a specific structure, all other logger values contain the msg field with the escaped message that is logged.","title":"Other Logs"},{"location":"logical_replication/","text":"Logical Replication PostgreSQL extends its replication capabilities beyond physical replication, which operates at the level of exact block addresses and byte-by-byte copying, by offering logical replication . Logical replication replicates data objects and their changes based on a defined replication identity, typically the primary key. Logical replication uses a publish-and-subscribe model, where subscribers connect to publications on a publisher node. Subscribers pull data changes from these publications and can re-publish them, enabling cascading replication and complex topologies. Important To protect your logical replication subscribers after a failover of the publisher cluster in CloudNativePG, ensure that replication slot synchronization for logical decoding is enabled. Without this, your logical replication clients may lose data and fail to continue seamlessly after a failover. For configuration details, see \"Replication: Logical Decoding Slot Synchronization\" . This flexible model is particularly useful for: Online data migrations Live PostgreSQL version upgrades Data distribution across systems Real-time analytics Integration with external applications Info For more details, examples, and limitations, please refer to the official PostgreSQL documentation on Logical Replication . CloudNativePG enhances this capability by providing declarative support for key PostgreSQL logical replication objects: Publications via the Publication resource Subscriptions via the Subscription resource Publications In PostgreSQL's publish-and-subscribe replication model, a publication is the source of data changes. It acts as a logical container for the change sets (also known as replication sets ) generated from one or more tables within a database. Publications can be defined on any PostgreSQL 10+ instance acting as the publisher , including instances managed by popular DBaaS solutions in the public cloud. Each publication is tied to a single database and provides fine-grained control over which tables and changes are replicated. For publishers outside Kubernetes, you can create publications using SQL or leverage the cnpg publication create plugin command . When managing Cluster objects with CloudNativePG , PostgreSQL publications can be defined declaratively through the Publication resource. Info Please refer to the API reference for the full list of attributes you can define for each Publication object. Suppose you have a cluster named freddie and want to replicate all tables in the app database. Here's a Publication manifest: apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true In the above example: The publication object is named freddie-publisher ( metadata.name ). The publication is created via the primary of the freddie cluster ( spec.cluster.name ) with name publisher ( spec.name ). It includes all tables ( spec.target.allTables: true ) from the app database ( spec.dbname ). Important While allTables simplifies configuration, PostgreSQL offers fine-grained control for replicating specific tables or targeted data changes. For advanced configurations, consult the PostgreSQL documentation . Additionally, refer to the CloudNativePG API reference for details on declaratively customizing replication targets. Required Fields in the Publication Manifest The following fields are required for a Publication object: metadata.name : Unique name for the Kubernetes Publication object. spec.cluster.name : Name of the PostgreSQL cluster. spec.dbname : Database name where the publication is created. spec.name : Publication name in PostgreSQL. spec.target : Specifies the tables or changes to include in the publication. The Publication object must reference a specific Cluster , determining where the publication will be created. It is managed by the cluster's primary instance, ensuring the publication is created or updated as needed. Reconciliation and Status After creating a Publication , CloudNativePG manages it on the primary instance of the specified cluster. Following a successful reconciliation cycle, the Publication status will reflect the following: applied: true , indicates the configuration has been successfully applied. observedGeneration matches metadata.generation , confirming the applied configuration corresponds to the most recent changes. If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field. Removing a publication The publicationReclaimPolicy field controls the behavior when deleting a Publication object: retain (default): Leaves the publication in PostgreSQL for manual management. delete : Automatically removes the publication from PostgreSQL. Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true publicationReclaimPolicy: delete In this case, deleting the Publication object also removes the publisher publication from the app database of the freddie cluster. Subscriptions In PostgreSQL's publish-and-subscribe replication model, a subscription represents the downstream component that consumes data changes. A subscription establishes the connection to a publisher's database and specifies the set of publications (one or more) it subscribes to. Subscriptions can be created on any supported PostgreSQL instance acting as the subscriber . Important Since schema definitions are not replicated, the subscriber must have the corresponding tables already defined before data replication begins. CloudNativePG simplifies subscription management by enabling you to define them declaratively using the Subscription resource. Info Please refer to the API reference for the full list of attributes you can define for each Subscription object. Suppose you want to replicate changes from the publisher publication on the app database of the freddie cluster ( publisher ) to the app database of the king cluster ( subscriber ). Here's an example of a Subscription manifest: apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher In the above example: The subscription object is named freddie-to-king-subscriber ( metadata.name ). The subscription is created in the app database ( spec.dbname ) of the king cluster ( spec.cluster.name ), with name subscriber ( spec.name ). It connects to the publisher publication in the external freddie cluster, referenced by spec.externalClusterName . To facilitate this setup, the freddie external cluster must be defined in the king cluster's configuration. Below is an example excerpt showing how to define the external cluster in the king manifest: externalClusters: - name: freddie connectionParameters: host: freddie-rw.default.svc user: postgres dbname: app Info For more details on configuring the externalClusters section, see the \"Bootstrap\" section of the documentation. As you can see, a subscription can connect to any PostgreSQL database accessible over the network. This flexibility allows you to seamlessly migrate your data into Kubernetes with nearly zero downtime. It\u2019s an excellent option for transitioning from various environments, including popular cloud-based Database-as-a-Service (DBaaS) platforms. Required Fields in the Subscription Manifest The following fields are mandatory for defining a Subscription object: metadata.name : A unique name for the Kubernetes Subscription object within its namespace. spec.cluster.name : The name of the PostgreSQL cluster where the subscription will be created. spec.dbname : The name of the database in which the subscription will be created. spec.name : The name of the subscription as it will appear in PostgreSQL. spec.externalClusterName : The name of the external cluster, as defined in the spec.cluster.name cluster's configuration. This references the publisher database. spec.publicationName : The name of the publication in the publisher database to which the subscription will connect. The Subscription object must reference a specific Cluster , determining where the subscription will be managed. CloudNativePG ensures that the subscription is created or updated on the primary instance of the specified cluster. Reconciliation and Status After creating a Subscription , CloudNativePG manages it on the primary instance of the specified cluster. Following a successful reconciliation cycle, the Subscription status will reflect the following: applied: true , indicates the configuration has been successfully applied. observedGeneration matches metadata.generation , confirming the applied configuration corresponds to the most recent changes. If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field. Removing a Subscription The subscriptionReclaimPolicy field controls the behavior when deleting a Subscription object: retain (default): Leaves the subscription in PostgreSQL for manual management. delete : Automatically removes the subscription from PostgreSQL. Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher subscriptionReclaimPolicy: delete In this case, deleting the Subscription object also removes the subscriber subscription from the app database of the king cluster. Resilience to Failovers To ensure that your logical replication subscriptions remain operational after a failover of the publisher, configure CloudNativePG to synchronize logical decoding slots across the cluster. For detailed instructions, see Logical Decoding Slot Synchronization . Limitations Logical replication in PostgreSQL has some inherent limitations, as outlined in the official documentation . Notably, the following objects are not replicated: Database schema and DDL commands Sequence data Large objects Addressing Schema Replication The first limitation, related to schema replication, can be easily addressed using CloudNativePG's capabilities. For instance, you can leverage the import bootstrap feature to copy the schema of the tables you need to replicate. Alternatively, you can manually create the schema as you would for any PostgreSQL database. Handling Sequences While sequences are not automatically kept in sync through logical replication, CloudNativePG provides a solution to be used in live migrations. You can use the cnpg plugin to synchronize sequence values, ensuring consistency between the publisher and subscriber databases. Example of live migration and major Postgres upgrade with logical replication To highlight the powerful capabilities of logical replication, this example demonstrates how to replicate data from a publisher database ( freddie ) running PostgreSQL 16 to a subscriber database ( king ) running the latest PostgreSQL version. This setup can be deployed in your Kubernetes cluster for evaluation and hands-on learning. This example illustrates how logical replication facilitates live migrations and upgrades between PostgreSQL versions while ensuring data consistency. By combining logical replication with CloudNativePG, you can easily set up, manage, and evaluate such scenarios in a Kubernetes environment. Step 1: Setting Up the Publisher ( freddie ) The first step involves creating a freddie PostgreSQL cluster with version 16. The cluster contains a single instance and includes an app database initialized with a table, n , storing 10,000 numbers. A logical replication publication named publisher is also configured to include all tables in the database. Here\u2019s the manifest for setting up the freddie cluster and its publication resource: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: freddie spec: instances: 1 imageName: ghcr.io/cloudnative-pg/postgresql:16 storage: size: 1Gi bootstrap: initdb: postInitApplicationSQL: - CREATE TABLE n (i SERIAL PRIMARY KEY, m INTEGER) - INSERT INTO n (m) (SELECT generate_series(1, 10000)) - ALTER TABLE n OWNER TO app managed: roles: - name: app login: true replication: true --- apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true Step 2: Setting Up the Subscriber ( king ) Next, create the king PostgreSQL cluster, running the latest version of PostgreSQL. This cluster initializes by importing the schema from the app database on the freddie cluster using the external cluster configuration. A Subscription resource, freddie-to-king-subscription , is then configured to consume changes published by the publisher on freddie . Below is the manifest for setting up the king cluster and its subscription: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: king spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: microservice schemaOnly: true databases: - app source: externalCluster: freddie externalClusters: - name: freddie connectionParameters: host: freddie-rw.default.svc user: app dbname: app password: name: freddie-app key: password --- apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher Once the king cluster is running, you can verify that the replication is working by connecting to the app database and counting the records in the n table. The following example uses the psql command provided by the cnpg plugin for simplicity: kubectl cnpg psql king -- app -qAt -c 'SELECT count(*) FROM n' 10000 This command should return 10000 , confirming that the data from the freddie cluster has been successfully replicated to the king cluster. Using the cnpg plugin, you can also synchronize existing sequences to ensure consistency between the publisher and subscriber. The example below demonstrates how to synchronize a sequence for the king cluster: kubectl cnpg subscription sync-sequences king --subscription=subscriber SELECT setval('\"public\".\"n_i_seq\"', 10000); 10000 This command updates the sequence n_i_seq in the king cluster to match the current value, ensuring it is in sync with the source database.","title":"Logical Replication"},{"location":"logical_replication/#logical-replication","text":"PostgreSQL extends its replication capabilities beyond physical replication, which operates at the level of exact block addresses and byte-by-byte copying, by offering logical replication . Logical replication replicates data objects and their changes based on a defined replication identity, typically the primary key. Logical replication uses a publish-and-subscribe model, where subscribers connect to publications on a publisher node. Subscribers pull data changes from these publications and can re-publish them, enabling cascading replication and complex topologies. Important To protect your logical replication subscribers after a failover of the publisher cluster in CloudNativePG, ensure that replication slot synchronization for logical decoding is enabled. Without this, your logical replication clients may lose data and fail to continue seamlessly after a failover. For configuration details, see \"Replication: Logical Decoding Slot Synchronization\" . This flexible model is particularly useful for: Online data migrations Live PostgreSQL version upgrades Data distribution across systems Real-time analytics Integration with external applications Info For more details, examples, and limitations, please refer to the official PostgreSQL documentation on Logical Replication . CloudNativePG enhances this capability by providing declarative support for key PostgreSQL logical replication objects: Publications via the Publication resource Subscriptions via the Subscription resource","title":"Logical Replication"},{"location":"logical_replication/#publications","text":"In PostgreSQL's publish-and-subscribe replication model, a publication is the source of data changes. It acts as a logical container for the change sets (also known as replication sets ) generated from one or more tables within a database. Publications can be defined on any PostgreSQL 10+ instance acting as the publisher , including instances managed by popular DBaaS solutions in the public cloud. Each publication is tied to a single database and provides fine-grained control over which tables and changes are replicated. For publishers outside Kubernetes, you can create publications using SQL or leverage the cnpg publication create plugin command . When managing Cluster objects with CloudNativePG , PostgreSQL publications can be defined declaratively through the Publication resource. Info Please refer to the API reference for the full list of attributes you can define for each Publication object. Suppose you have a cluster named freddie and want to replicate all tables in the app database. Here's a Publication manifest: apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true In the above example: The publication object is named freddie-publisher ( metadata.name ). The publication is created via the primary of the freddie cluster ( spec.cluster.name ) with name publisher ( spec.name ). It includes all tables ( spec.target.allTables: true ) from the app database ( spec.dbname ). Important While allTables simplifies configuration, PostgreSQL offers fine-grained control for replicating specific tables or targeted data changes. For advanced configurations, consult the PostgreSQL documentation . Additionally, refer to the CloudNativePG API reference for details on declaratively customizing replication targets.","title":"Publications"},{"location":"logical_replication/#required-fields-in-the-publication-manifest","text":"The following fields are required for a Publication object: metadata.name : Unique name for the Kubernetes Publication object. spec.cluster.name : Name of the PostgreSQL cluster. spec.dbname : Database name where the publication is created. spec.name : Publication name in PostgreSQL. spec.target : Specifies the tables or changes to include in the publication. The Publication object must reference a specific Cluster , determining where the publication will be created. It is managed by the cluster's primary instance, ensuring the publication is created or updated as needed.","title":"Required Fields in the Publication Manifest"},{"location":"logical_replication/#reconciliation-and-status","text":"After creating a Publication , CloudNativePG manages it on the primary instance of the specified cluster. Following a successful reconciliation cycle, the Publication status will reflect the following: applied: true , indicates the configuration has been successfully applied. observedGeneration matches metadata.generation , confirming the applied configuration corresponds to the most recent changes. If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field.","title":"Reconciliation and Status"},{"location":"logical_replication/#removing-a-publication","text":"The publicationReclaimPolicy field controls the behavior when deleting a Publication object: retain (default): Leaves the publication in PostgreSQL for manual management. delete : Automatically removes the publication from PostgreSQL. Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true publicationReclaimPolicy: delete In this case, deleting the Publication object also removes the publisher publication from the app database of the freddie cluster.","title":"Removing a publication"},{"location":"logical_replication/#subscriptions","text":"In PostgreSQL's publish-and-subscribe replication model, a subscription represents the downstream component that consumes data changes. A subscription establishes the connection to a publisher's database and specifies the set of publications (one or more) it subscribes to. Subscriptions can be created on any supported PostgreSQL instance acting as the subscriber . Important Since schema definitions are not replicated, the subscriber must have the corresponding tables already defined before data replication begins. CloudNativePG simplifies subscription management by enabling you to define them declaratively using the Subscription resource. Info Please refer to the API reference for the full list of attributes you can define for each Subscription object. Suppose you want to replicate changes from the publisher publication on the app database of the freddie cluster ( publisher ) to the app database of the king cluster ( subscriber ). Here's an example of a Subscription manifest: apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher In the above example: The subscription object is named freddie-to-king-subscriber ( metadata.name ). The subscription is created in the app database ( spec.dbname ) of the king cluster ( spec.cluster.name ), with name subscriber ( spec.name ). It connects to the publisher publication in the external freddie cluster, referenced by spec.externalClusterName . To facilitate this setup, the freddie external cluster must be defined in the king cluster's configuration. Below is an example excerpt showing how to define the external cluster in the king manifest: externalClusters: - name: freddie connectionParameters: host: freddie-rw.default.svc user: postgres dbname: app Info For more details on configuring the externalClusters section, see the \"Bootstrap\" section of the documentation. As you can see, a subscription can connect to any PostgreSQL database accessible over the network. This flexibility allows you to seamlessly migrate your data into Kubernetes with nearly zero downtime. It\u2019s an excellent option for transitioning from various environments, including popular cloud-based Database-as-a-Service (DBaaS) platforms.","title":"Subscriptions"},{"location":"logical_replication/#required-fields-in-the-subscription-manifest","text":"The following fields are mandatory for defining a Subscription object: metadata.name : A unique name for the Kubernetes Subscription object within its namespace. spec.cluster.name : The name of the PostgreSQL cluster where the subscription will be created. spec.dbname : The name of the database in which the subscription will be created. spec.name : The name of the subscription as it will appear in PostgreSQL. spec.externalClusterName : The name of the external cluster, as defined in the spec.cluster.name cluster's configuration. This references the publisher database. spec.publicationName : The name of the publication in the publisher database to which the subscription will connect. The Subscription object must reference a specific Cluster , determining where the subscription will be managed. CloudNativePG ensures that the subscription is created or updated on the primary instance of the specified cluster.","title":"Required Fields in the Subscription Manifest"},{"location":"logical_replication/#reconciliation-and-status_1","text":"After creating a Subscription , CloudNativePG manages it on the primary instance of the specified cluster. Following a successful reconciliation cycle, the Subscription status will reflect the following: applied: true , indicates the configuration has been successfully applied. observedGeneration matches metadata.generation , confirming the applied configuration corresponds to the most recent changes. If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field.","title":"Reconciliation and Status"},{"location":"logical_replication/#removing-a-subscription","text":"The subscriptionReclaimPolicy field controls the behavior when deleting a Subscription object: retain (default): Leaves the subscription in PostgreSQL for manual management. delete : Automatically removes the subscription from PostgreSQL. Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher subscriptionReclaimPolicy: delete In this case, deleting the Subscription object also removes the subscriber subscription from the app database of the king cluster.","title":"Removing a Subscription"},{"location":"logical_replication/#resilience-to-failovers","text":"To ensure that your logical replication subscriptions remain operational after a failover of the publisher, configure CloudNativePG to synchronize logical decoding slots across the cluster. For detailed instructions, see Logical Decoding Slot Synchronization .","title":"Resilience to Failovers"},{"location":"logical_replication/#limitations","text":"Logical replication in PostgreSQL has some inherent limitations, as outlined in the official documentation . Notably, the following objects are not replicated: Database schema and DDL commands Sequence data Large objects","title":"Limitations"},{"location":"logical_replication/#addressing-schema-replication","text":"The first limitation, related to schema replication, can be easily addressed using CloudNativePG's capabilities. For instance, you can leverage the import bootstrap feature to copy the schema of the tables you need to replicate. Alternatively, you can manually create the schema as you would for any PostgreSQL database.","title":"Addressing Schema Replication"},{"location":"logical_replication/#handling-sequences","text":"While sequences are not automatically kept in sync through logical replication, CloudNativePG provides a solution to be used in live migrations. You can use the cnpg plugin to synchronize sequence values, ensuring consistency between the publisher and subscriber databases.","title":"Handling Sequences"},{"location":"logical_replication/#example-of-live-migration-and-major-postgres-upgrade-with-logical-replication","text":"To highlight the powerful capabilities of logical replication, this example demonstrates how to replicate data from a publisher database ( freddie ) running PostgreSQL 16 to a subscriber database ( king ) running the latest PostgreSQL version. This setup can be deployed in your Kubernetes cluster for evaluation and hands-on learning. This example illustrates how logical replication facilitates live migrations and upgrades between PostgreSQL versions while ensuring data consistency. By combining logical replication with CloudNativePG, you can easily set up, manage, and evaluate such scenarios in a Kubernetes environment.","title":"Example of live migration and major Postgres upgrade with logical replication"},{"location":"logical_replication/#step-1-setting-up-the-publisher-freddie","text":"The first step involves creating a freddie PostgreSQL cluster with version 16. The cluster contains a single instance and includes an app database initialized with a table, n , storing 10,000 numbers. A logical replication publication named publisher is also configured to include all tables in the database. Here\u2019s the manifest for setting up the freddie cluster and its publication resource: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: freddie spec: instances: 1 imageName: ghcr.io/cloudnative-pg/postgresql:16 storage: size: 1Gi bootstrap: initdb: postInitApplicationSQL: - CREATE TABLE n (i SERIAL PRIMARY KEY, m INTEGER) - INSERT INTO n (m) (SELECT generate_series(1, 10000)) - ALTER TABLE n OWNER TO app managed: roles: - name: app login: true replication: true --- apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true","title":"Step 1: Setting Up the Publisher (freddie)"},{"location":"logical_replication/#step-2-setting-up-the-subscriber-king","text":"Next, create the king PostgreSQL cluster, running the latest version of PostgreSQL. This cluster initializes by importing the schema from the app database on the freddie cluster using the external cluster configuration. A Subscription resource, freddie-to-king-subscription , is then configured to consume changes published by the publisher on freddie . Below is the manifest for setting up the king cluster and its subscription: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: king spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: microservice schemaOnly: true databases: - app source: externalCluster: freddie externalClusters: - name: freddie connectionParameters: host: freddie-rw.default.svc user: app dbname: app password: name: freddie-app key: password --- apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher Once the king cluster is running, you can verify that the replication is working by connecting to the app database and counting the records in the n table. The following example uses the psql command provided by the cnpg plugin for simplicity: kubectl cnpg psql king -- app -qAt -c 'SELECT count(*) FROM n' 10000 This command should return 10000 , confirming that the data from the freddie cluster has been successfully replicated to the king cluster. Using the cnpg plugin, you can also synchronize existing sequences to ensure consistency between the publisher and subscriber. The example below demonstrates how to synchronize a sequence for the king cluster: kubectl cnpg subscription sync-sequences king --subscription=subscriber SELECT setval('\"public\".\"n_i_seq\"', 10000); 10000 This command updates the sequence n_i_seq in the king cluster to match the current value, ensuring it is in sync with the source database.","title":"Step 2: Setting Up the Subscriber (king)"},{"location":"monitoring/","text":"Monitoring Important Installing Prometheus and Grafana is beyond the scope of this project. We assume they are correctly installed in your system. However, for experimentation we provide instructions in Part 4 of the Quickstart . Monitoring Instances For each PostgreSQL instance, the operator provides an exporter of metrics for Prometheus via HTTP or HTTPS, on port 9187, named metrics . The operator comes with a predefined set of metrics , as well as a highly configurable and customizable system to define additional queries via one or more ConfigMap or Secret resources (see the \"User defined metrics\" section below for details). Important CloudNativePG, by default, installs a set of predefined metrics in a ConfigMap named default-monitoring . Info You can inspect the exported metrics by following the instructions in the \"How to inspect the exported metrics\" section below. All monitoring queries that are performed on PostgreSQL are: atomic (one transaction per query) executed with the pg_monitor role executed with application_name set to cnpg_metrics_exporter executed as user postgres Please refer to the \"Predefined Roles\" section in PostgreSQL documentation for details on the pg_monitor role. Queries, by default, are run against the main database , as defined by the specified bootstrap method of the Cluster resource, according to the following logic: using initdb : queries will be run by default against the specified database in initdb.database , or app if not specified using recovery : queries will be run by default against the specified database in recovery.database , or postgres if not specified using pg_basebackup : queries will be run by default against the specified database in pg_basebackup.database , or postgres if not specified The default database can always be overridden for a given user-defined metric, by specifying a list of one or more databases in the target_databases option. Prometheus/Grafana If you are interested in evaluating the integration of CloudNativePG with Prometheus and Grafana, you can find a quick setup guide in Part 4 of the quickstart Monitoring with the Prometheus operator A specific PostgreSQL cluster can be monitored using the Prometheus Operator's resource PodMonitor . A PodMonitor that correctly points to the Cluster can be automatically created by the operator by setting .spec.monitoring.enablePodMonitor to true in the Cluster resource itself (default: false ). Important Any change to the PodMonitor created automatically will be overridden by the Operator at the next reconciliation cycle, in case you need to customize it, you can do so as described below. To deploy a PodMonitor for a specific Cluster manually, define it as follows and adjust as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cluster-example spec: selector: matchLabels: \"cnpg.io/cluster\": cluster-example podMetricsEndpoints: - port: metrics Important Ensure you modify the example above with a unique name, as well as the correct cluster's namespace and labels (e.g., cluster-example ). Important The postgresql label, used in previous versions of this document, is deprecated and will be removed in the future. Please use the cnpg.io/cluster label instead to select the instances. Enabling TLS on the Metrics Port To enable TLS communication on the metrics port, configure the .spec.monitoring.tls.enabled setting to true . This setup ensures that the metrics exporter uses the same server certificate used by PostgreSQL to secure communication on port 5432. Important Changing the .spec.monitoring.tls.enabled setting will trigger a rolling restart of the Cluster. If the PodMonitor is managed by the operator ( .spec.monitoring.enablePodMonitor set to true ), it will automatically contain the necessary configurations to access the metrics via TLS. To manually deploy a PodMonitor suitable for reading metrics via TLS, define it as follows and adjust as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cluster-example spec: selector: matchLabels: \"cnpg.io/cluster\": cluster-example podMetricsEndpoints: - port: metrics scheme: https tlsConfig: ca: secret: name: cluster-example-ca key: ca.crt serverName: cluster-example-rw Important Ensure you modify the example above with a unique name, as well as the correct Cluster's namespace and labels (e.g., cluster-example ). Important The serverName field in the metrics endpoint must match one of the names defined in the server certificate. If the default certificate is in use, the serverName value should be in the format <cluster-name>-rw . Predefined set of metrics Every PostgreSQL instance exporter automatically exposes a set of predefined metrics, which can be classified in two major categories: PostgreSQL related metrics, starting with cnpg_collector_* , including: number of WAL files and total size on disk number of .ready and .done files in the archive status folder requested minimum and maximum number of synchronous replicas, as well as the expected and actually observed values number of distinct nodes accommodating the instances timestamps indicating last failed and last available backup, as well as the first point of recoverability for the cluster flag indicating if replica cluster mode is enabled or disabled flag indicating if a manual switchover is required flag indicating if fencing is enabled or disabled Go runtime related metrics, starting with go_* Below is a sample of the metrics returned by the localhost:9187/metrics endpoint of an instance. As you can see, the Prometheus format is self-documenting: # HELP cnpg_collector_collection_duration_seconds Collection time duration in seconds # TYPE cnpg_collector_collection_duration_seconds gauge cnpg_collector_collection_duration_seconds{collector=\"Collect.up\"} 0.0031393 # HELP cnpg_collector_collections_total Total number of times PostgreSQL was accessed for metrics. # TYPE cnpg_collector_collections_total counter cnpg_collector_collections_total 2 # HELP cnpg_collector_fencing_on 1 if the instance is fenced, 0 otherwise # TYPE cnpg_collector_fencing_on gauge cnpg_collector_fencing_on 0 # HELP cnpg_collector_nodes_used NodesUsed represents the count of distinct nodes accommodating the instances. A value of '-1' suggests that the metric is not available. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally this value should match the number of instances in the cluster. # TYPE cnpg_collector_nodes_used gauge cnpg_collector_nodes_used 3 # HELP cnpg_collector_last_collection_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_collector_last_collection_error gauge cnpg_collector_last_collection_error 0 # HELP cnpg_collector_manual_switchover_required 1 if a manual switchover is required, 0 otherwise # TYPE cnpg_collector_manual_switchover_required gauge cnpg_collector_manual_switchover_required 0 # HELP cnpg_collector_pg_wal Total size in bytes of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal' directory computed as (wal_segment_size * count) # TYPE cnpg_collector_pg_wal gauge cnpg_collector_pg_wal{value=\"count\"} 9 cnpg_collector_pg_wal{value=\"slots_max\"} NaN cnpg_collector_pg_wal{value=\"keep\"} 32 cnpg_collector_pg_wal{value=\"max\"} 64 cnpg_collector_pg_wal{value=\"min\"} 5 cnpg_collector_pg_wal{value=\"size\"} 1.50994944e+08 cnpg_collector_pg_wal{value=\"volume_max\"} 128 cnpg_collector_pg_wal{value=\"volume_size\"} 2.147483648e+09 # HELP cnpg_collector_pg_wal_archive_status Number of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal/archive_status' directory (ready, done) # TYPE cnpg_collector_pg_wal_archive_status gauge cnpg_collector_pg_wal_archive_status{value=\"done\"} 6 cnpg_collector_pg_wal_archive_status{value=\"ready\"} 0 # HELP cnpg_collector_replica_mode 1 if the cluster is in replica mode, 0 otherwise # TYPE cnpg_collector_replica_mode gauge cnpg_collector_replica_mode 0 # HELP cnpg_collector_sync_replicas Number of requested synchronous replicas (synchronous_standby_names) # TYPE cnpg_collector_sync_replicas gauge cnpg_collector_sync_replicas{value=\"expected\"} 0 cnpg_collector_sync_replicas{value=\"max\"} 0 cnpg_collector_sync_replicas{value=\"min\"} 0 cnpg_collector_sync_replicas{value=\"observed\"} 0 # HELP cnpg_collector_up 1 if PostgreSQL is up, 0 otherwise. # TYPE cnpg_collector_up gauge cnpg_collector_up{cluster=\"cluster-example\"} 1 # HELP cnpg_collector_postgres_version Postgres version # TYPE cnpg_collector_postgres_version gauge cnpg_collector_postgres_version{cluster=\"cluster-example\",full=\"17.5\"} 17.5 # HELP cnpg_collector_last_failed_backup_timestamp The last failed backup as a unix timestamp (Deprecated) # TYPE cnpg_collector_last_failed_backup_timestamp gauge cnpg_collector_last_failed_backup_timestamp 0 # HELP cnpg_collector_last_available_backup_timestamp The last available backup as a unix timestamp (Deprecated) # TYPE cnpg_collector_last_available_backup_timestamp gauge cnpg_collector_last_available_backup_timestamp 1.63238406e+09 # HELP cnpg_collector_first_recoverability_point The first point of recoverability for the cluster as a unix timestamp (Deprecated) # TYPE cnpg_collector_first_recoverability_point gauge cnpg_collector_first_recoverability_point 1.63238406e+09 # HELP cnpg_collector_lo_pages Estimated number of pages in the pg_largeobject table # TYPE cnpg_collector_lo_pages gauge cnpg_collector_lo_pages{datname=\"app\"} 0 cnpg_collector_lo_pages{datname=\"postgres\"} 78 # HELP cnpg_collector_wal_buffers_full Number of times WAL data was written to disk because WAL buffers became full. Only available on PG 14+ # TYPE cnpg_collector_wal_buffers_full gauge cnpg_collector_wal_buffers_full{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 6472 # HELP cnpg_collector_wal_bytes Total amount of WAL generated in bytes. Only available on PG 14+ # TYPE cnpg_collector_wal_bytes gauge cnpg_collector_wal_bytes{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 1.0035147e+07 # HELP cnpg_collector_wal_fpi Total number of WAL full page images generated. Only available on PG 14+ # TYPE cnpg_collector_wal_fpi gauge cnpg_collector_wal_fpi{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 1474 # HELP cnpg_collector_wal_records Total number of WAL records generated. Only available on PG 14+ # TYPE cnpg_collector_wal_records gauge cnpg_collector_wal_records{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 26178 # HELP cnpg_collector_wal_sync Number of times WAL files were synced to disk via issue_xlog_fsync request (if fsync is on and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+ # TYPE cnpg_collector_wal_sync gauge cnpg_collector_wal_sync{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 37 # HELP cnpg_collector_wal_sync_time Total amount of time spent syncing WAL files to disk via issue_xlog_fsync request, in milliseconds (if track_wal_io_timing is enabled, fsync is on, and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+ # TYPE cnpg_collector_wal_sync_time gauge cnpg_collector_wal_sync_time{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 0 # HELP cnpg_collector_wal_write Number of times WAL buffers were written out to disk via XLogWrite request. Only available on PG 14+ # TYPE cnpg_collector_wal_write gauge cnpg_collector_wal_write{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 7243 # HELP cnpg_collector_wal_write_time Total amount of time spent writing WAL buffers to disk via XLogWrite request, in milliseconds (if track_wal_io_timing is enabled, otherwise zero). This includes the sync time when wal_sync_method is either open_datasync or open_sync. Only available on PG 14+ # TYPE cnpg_collector_wal_write_time gauge cnpg_collector_wal_write_time{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 0 # HELP cnpg_last_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_last_error gauge cnpg_last_error 0 # HELP go_gc_duration_seconds A summary of the pause duration of garbage collection cycles. # TYPE go_gc_duration_seconds summary go_gc_duration_seconds{quantile=\"0\"} 5.01e-05 go_gc_duration_seconds{quantile=\"0.25\"} 7.27e-05 go_gc_duration_seconds{quantile=\"0.5\"} 0.0001748 go_gc_duration_seconds{quantile=\"0.75\"} 0.0002959 go_gc_duration_seconds{quantile=\"1\"} 0.0012776 go_gc_duration_seconds_sum 0.0035741 go_gc_duration_seconds_count 13 # HELP go_goroutines Number of goroutines that currently exist. # TYPE go_goroutines gauge go_goroutines 25 # HELP go_info Information about the Go environment. # TYPE go_info gauge go_info{version=\"go1.20.5\"} 1 # HELP go_memstats_alloc_bytes Number of bytes allocated and still in use. # TYPE go_memstats_alloc_bytes gauge go_memstats_alloc_bytes 4.493744e+06 # HELP go_memstats_alloc_bytes_total Total number of bytes allocated, even if freed. # TYPE go_memstats_alloc_bytes_total counter go_memstats_alloc_bytes_total 2.1698216e+07 # HELP go_memstats_buck_hash_sys_bytes Number of bytes used by the profiling bucket hash table. # TYPE go_memstats_buck_hash_sys_bytes gauge go_memstats_buck_hash_sys_bytes 1.456234e+06 # HELP go_memstats_frees_total Total number of frees. # TYPE go_memstats_frees_total counter go_memstats_frees_total 172118 # HELP go_memstats_gc_cpu_fraction The fraction of this program's available CPU time used by the GC since the program started. # TYPE go_memstats_gc_cpu_fraction gauge go_memstats_gc_cpu_fraction 1.0749468700447189e-05 # HELP go_memstats_gc_sys_bytes Number of bytes used for garbage collection system metadata. # TYPE go_memstats_gc_sys_bytes gauge go_memstats_gc_sys_bytes 5.530048e+06 # HELP go_memstats_heap_alloc_bytes Number of heap bytes allocated and still in use. # TYPE go_memstats_heap_alloc_bytes gauge go_memstats_heap_alloc_bytes 4.493744e+06 # HELP go_memstats_heap_idle_bytes Number of heap bytes waiting to be used. # TYPE go_memstats_heap_idle_bytes gauge go_memstats_heap_idle_bytes 5.8236928e+07 # HELP go_memstats_heap_inuse_bytes Number of heap bytes that are in use. # TYPE go_memstats_heap_inuse_bytes gauge go_memstats_heap_inuse_bytes 7.528448e+06 # HELP go_memstats_heap_objects Number of allocated objects. # TYPE go_memstats_heap_objects gauge go_memstats_heap_objects 26306 # HELP go_memstats_heap_released_bytes Number of heap bytes released to OS. # TYPE go_memstats_heap_released_bytes gauge go_memstats_heap_released_bytes 5.7401344e+07 # HELP go_memstats_heap_sys_bytes Number of heap bytes obtained from system. # TYPE go_memstats_heap_sys_bytes gauge go_memstats_heap_sys_bytes 6.5765376e+07 # HELP go_memstats_last_gc_time_seconds Number of seconds since 1970 of last garbage collection. # TYPE go_memstats_last_gc_time_seconds gauge go_memstats_last_gc_time_seconds 1.6311727586032727e+09 # HELP go_memstats_lookups_total Total number of pointer lookups. # TYPE go_memstats_lookups_total counter go_memstats_lookups_total 0 # HELP go_memstats_mallocs_total Total number of mallocs. # TYPE go_memstats_mallocs_total counter go_memstats_mallocs_total 198424 # HELP go_memstats_mcache_inuse_bytes Number of bytes in use by mcache structures. # TYPE go_memstats_mcache_inuse_bytes gauge go_memstats_mcache_inuse_bytes 14400 # HELP go_memstats_mcache_sys_bytes Number of bytes used for mcache structures obtained from system. # TYPE go_memstats_mcache_sys_bytes gauge go_memstats_mcache_sys_bytes 16384 # HELP go_memstats_mspan_inuse_bytes Number of bytes in use by mspan structures. # TYPE go_memstats_mspan_inuse_bytes gauge go_memstats_mspan_inuse_bytes 191896 # HELP go_memstats_mspan_sys_bytes Number of bytes used for mspan structures obtained from system. # TYPE go_memstats_mspan_sys_bytes gauge go_memstats_mspan_sys_bytes 212992 # HELP go_memstats_next_gc_bytes Number of heap bytes when next garbage collection will take place. # TYPE go_memstats_next_gc_bytes gauge go_memstats_next_gc_bytes 8.689632e+06 # HELP go_memstats_other_sys_bytes Number of bytes used for other system allocations. # TYPE go_memstats_other_sys_bytes gauge go_memstats_other_sys_bytes 2.566622e+06 # HELP go_memstats_stack_inuse_bytes Number of bytes in use by the stack allocator. # TYPE go_memstats_stack_inuse_bytes gauge go_memstats_stack_inuse_bytes 1.343488e+06 # HELP go_memstats_stack_sys_bytes Number of bytes obtained from system for stack allocator. # TYPE go_memstats_stack_sys_bytes gauge go_memstats_stack_sys_bytes 1.343488e+06 # HELP go_memstats_sys_bytes Number of bytes obtained from system. # TYPE go_memstats_sys_bytes gauge go_memstats_sys_bytes 7.6891144e+07 # HELP go_threads Number of OS threads created. # TYPE go_threads gauge go_threads 18 Note cnpg_collector_postgres_version is a GaugeVec metric containing the Major.Minor version of PostgreSQL. The full semantic version Major.Minor.Patch can be found inside one of its label field named full . Warning The metrics cnpg_collector_last_failed_backup_timestamp , cnpg_collector_last_available_backup_timestamp , and cnpg_collector_first_recoverability_point have been deprecated starting from version 1.26. These metrics will continue to function with native backup solutions such as in-core Barman Cloud (deprecated) and volume snapshots. Note that for these cases, cnpg_collector_first_recoverability_point and cnpg_collector_last_available_backup_timestamp will remain zero until the first backup is completed to the object store. This is separate from WAL archiving. User defined metrics This feature is currently in beta state and the format is inspired by the queries.yaml file (release 0.12) of the PostgreSQL Prometheus Exporter. Custom metrics can be defined by users by referring to the created Configmap / Secret in a Cluster definition under the .spec.monitoring.customQueriesConfigMap or customQueriesSecret section as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example namespace: test spec: instances: 3 storage: size: 1Gi monitoring: customQueriesConfigMap: - name: example-monitoring key: custom-queries The customQueriesConfigMap / customQueriesSecret sections contain a list of ConfigMap / Secret references specifying the key in which the custom queries are defined. Take care that the referred resources have to be created in the same namespace as the Cluster resource. Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to it, otherwise you will have to reload the instances using the kubectl cnpg reload subcommand. Important When a user defined metric overwrites an already existing metric the instance manager prints a json warning log, containing the message: Query with the same name already found. Overwriting the existing one. and a key queryName containing the overwritten query name. Example of a user defined metric Here you can see an example of a ConfigMap containing a single custom query, referenced by the Cluster example above: apiVersion: v1 kind: ConfigMap metadata: name: example-monitoring namespace: test labels: cnpg.io/reload: \"\" data: custom-queries: | pg_replication: query: \"SELECT CASE WHEN NOT pg_is_in_recovery() THEN 0 ELSE GREATEST (0, EXTRACT(EPOCH FROM (now() - pg_last_xact_replay_timestamp()))) END AS lag, pg_is_in_recovery() AS in_recovery, EXISTS (TABLE pg_stat_wal_receiver) AS is_wal_receiver_up, (SELECT count(*) FROM pg_stat_replication) AS streaming_replicas\" metrics: - lag: usage: \"GAUGE\" description: \"Replication lag behind primary in seconds\" - in_recovery: usage: \"GAUGE\" description: \"Whether the instance is in recovery\" - is_wal_receiver_up: usage: \"GAUGE\" description: \"Whether the instance wal_receiver is up\" - streaming_replicas: usage: \"GAUGE\" description: \"Number of streaming replicas connected to the instance\" A list of basic monitoring queries can be found in the default-monitoring.yaml file that is already installed in your CloudNativePG deployment (see \"Default set of metrics\" ). Example of a user defined metric with predicate query The predicate_query option allows the user to execute the query to collect the metrics only under the specified conditions. To do so the user needs to provide a predicate query that returns at most one row with a single boolean column. The predicate query is executed in the same transaction as the main query and against the same databases. some_query: | predicate_query: | SELECT some_bool as predicate FROM some_table query: | SELECT count(*) as rows FROM some_table metrics: - rows: usage: \"GAUGE\" description: \"number of rows\" Example of a user defined metric running on multiple databases If the target_databases option lists more than one database the metric is collected from each of them. Database auto-discovery can be enabled for a specific query by specifying a shell-like pattern (i.e., containing * , ? or [] ) in the list of target_databases . If provided, the operator will expand the list of target databases by adding all the databases returned by the execution of SELECT datname FROM pg_database WHERE datallowconn AND NOT datistemplate and matching the pattern according to path.Match() rules. Note The * character has a special meaning in yaml, so you need to quote ( \"*\" ) the target_databases value when it includes such a pattern. It is recommended that you always include the name of the database in the returned labels, for example using the current_database() function as in the following example: some_query: | query: | SELECT current_database() as datname, count(*) as rows FROM some_table metrics: - datname: usage: \"LABEL\" description: \"Name of current database\" - rows: usage: \"GAUGE\" description: \"number of rows\" target_databases: - albert - bb - freddie This will produce in the following metric being exposed: cnpg_some_query_rows{datname=\"albert\"} 2 cnpg_some_query_rows{datname=\"bb\"} 5 cnpg_some_query_rows{datname=\"freddie\"} 10 Here is an example of a query with auto-discovery enabled which also runs on the template1 database (otherwise not returned by the aforementioned query): some_query: | query: | SELECT current_database() as datname, count(*) as rows FROM some_table metrics: - datname: usage: \"LABEL\" description: \"Name of current database\" - rows: usage: \"GAUGE\" description: \"number of rows\" target_databases: - \"*\" - \"template1\" The above example will produce the following metrics (provided the databases exist): cnpg_some_query_rows{datname=\"albert\"} 2 cnpg_some_query_rows{datname=\"bb\"} 5 cnpg_some_query_rows{datname=\"freddie\"} 10 cnpg_some_query_rows{datname=\"template1\"} 7 cnpg_some_query_rows{datname=\"postgres\"} 42 Structure of a user defined metric Every custom query has the following basic structure: <MetricName>: query: \"<SQLQuery>\" metrics: - <ColumnName>: usage: \"<MetricType>\" description: \"<MetricDescription>\" Here is a short description of all the available fields: <MetricName> : the name of the Prometheus metric name : override <MetricName> , if defined query : the SQL query to run on the target database to generate the metrics primary : whether to run the query only on the primary instance master : same as primary (for compatibility with the Prometheus PostgreSQL exporter's syntax - deprecated) runonserver : a semantic version range to limit the versions of PostgreSQL the query should run on (e.g. \">=11.0.0\" or \">=12.0.0 <=15.0.0\" ) target_databases : a list of databases to run the query against, or a shell-like pattern to enable auto discovery. Overwrites the default database if provided. predicate_query : a SQL query that returns at most one row and one boolean column to run on the target database. The system evaluates the predicate and if true executes the query . metrics : section containing a list of all exported columns, defined as follows: <ColumnName> : the name of the column returned by the query name : override the ColumnName of the column in the metric, if defined usage : one of the values described below description : the metric's description metrics_mapping : the optional column mapping when usage is set to MAPPEDMETRIC The possible values for usage are: Column Usage Label Description DISCARD this column should be ignored LABEL use this column as a label COUNTER use this column as a counter GAUGE use this column as a gauge MAPPEDMETRIC use this column with the supplied mapping of text values DURATION use this column as a text duration (in milliseconds) HISTOGRAM use this column as a histogram Please visit the \"Metric Types\" page from the Prometheus documentation for more information. Output of a user defined metric Custom defined metrics are returned by the Prometheus exporter endpoint ( :9187/metrics ) with the following format: cnpg_<MetricName>_<ColumnName>{<LabelColumnName>=<LabelColumnValue> ... } <ColumnValue> Note LabelColumnName are metrics with usage set to LABEL and their Value Considering the pg_replication example above, the exporter's endpoint would return the following output when invoked: # HELP cnpg_pg_replication_in_recovery Whether the instance is in recovery # TYPE cnpg_pg_replication_in_recovery gauge cnpg_pg_replication_in_recovery 0 # HELP cnpg_pg_replication_lag Replication lag behind primary in seconds # TYPE cnpg_pg_replication_lag gauge cnpg_pg_replication_lag 0 # HELP cnpg_pg_replication_streaming_replicas Number of streaming replicas connected to the instance # TYPE cnpg_pg_replication_streaming_replicas gauge cnpg_pg_replication_streaming_replicas 2 # HELP cnpg_pg_replication_is_wal_receiver_up Whether the instance wal_receiver is up # TYPE cnpg_pg_replication_is_wal_receiver_up gauge cnpg_pg_replication_is_wal_receiver_up 0 Default set of metrics The operator can be configured to automatically inject in a Cluster a set of monitoring queries defined in a ConfigMap or a Secret, inside the operator's namespace. You have to set the MONITORING_QUERIES_CONFIGMAP or MONITORING_QUERIES_SECRET key in the \"operator configuration\" , respectively to the name of the ConfigMap or the Secret; the operator will then use the content of the queries key. Any change to the queries content will be immediately reflected on all the deployed Clusters using it. The operator installation manifests come with a predefined ConfigMap, called cnpg-default-monitoring , to be used by all Clusters. MONITORING_QUERIES_CONFIGMAP is by default set to cnpg-default-monitoring in the operator configuration. If you want to disable the default set of metrics, you can: disable it at operator level: set the MONITORING_QUERIES_CONFIGMAP / MONITORING_QUERIES_SECRET key to \"\" (empty string), in the operator ConfigMap. Changes to operator ConfigMap require an operator restart. disable it for a specific Cluster: set .spec.monitoring.disableDefaultQueries to true in the Cluster. Important The ConfigMap or Secret specified via MONITORING_QUERIES_CONFIGMAP / MONITORING_QUERIES_SECRET will always be copied to the Cluster's namespace with a fixed name: cnpg-default-monitoring . So that, if you intend to have default metrics, you should not create a ConfigMap with this name in the cluster's namespace. Differences with the Prometheus Postgres exporter CloudNativePG is inspired by the PostgreSQL Prometheus Exporter, but presents some differences. In particular, the cache_seconds field is not implemented in CloudNativePG's exporter. Monitoring the CloudNativePG operator The operator internally exposes Prometheus metrics via HTTP on port 8080, named metrics . Info You can inspect the exported metrics by following the instructions in the \"How to inspect the exported metrics\" section below. Currently, the operator exposes default kubebuilder metrics. See kubebuilder documentation for more details. Monitoring the operator with Prometheus The operator can be monitored using the Prometheus Operator by defining a PodMonitor pointing to the operator pod(s), as follows (note it's applied in the same namespace as the operator): kubectl -n cnpg-system apply -f - <<EOF --- apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cnpg-controller-manager spec: selector: matchLabels: app.kubernetes.io/name: cloudnative-pg podMetricsEndpoints: - port: metrics EOF How to inspect the exported metrics In this section we provide basic instructions on how to inspect the metrics exported by a specific PostgreSQL instance manager (primary or replica) or the operator. Note In the examples below we assume we are working in the default namespace, and with the operator installed in the cnpg-system namespace. Please adapt to your use case. Using port forwarding The simplest way to inspect the metrics is to port-forward the metrics ports of the pods involved. For example, to inspect the metrics on the -1 instance of cluster-example , we port-forward the 9187 port: kubectl port-forward cluster-example-1 9187:9187 With port-forwarding active, the metrics can be inspected easily, for example on a web browser, using HTTP or HTTPS depending on the configuration, with address: localhost:9187/metrics . The operator pod also exports metrics, on port 8080. Similarly to instances, we port-forward the operator pod, which is located in the operator namespace: kubectl -n cnpg-system port-forward pod/<CONTROLLER-MANAGER-POD> 8080:8080 With port forwarding active, the metrics are easily viewable on a browser at localhost:8080/metrics . Using curl Create the curl pod with the following command: kubectl apply -f - <<EOF --- apiVersion: v1 kind: Pod metadata: name: curl spec: containers: - name: curl image: curlimages/curl:8.2.1 command: ['sleep', '3600'] EOF To inspect the metrics exported by an instance, you need to connect to port 9187 of the target pod. You will need to know the pod's IP address, which you can find easily by running kubectl get pod -o wide . The following generic command will run curl on the desired pod: kubectl exec -ti curl -- curl -s <pod_ip>:9187/metrics For example, if your PostgreSQL cluster is called cluster-example and you want to retrieve the exported metrics of the first pod in the cluster, you can run the following command to programmatically get the IP of that pod: POD_IP=$(kubectl get pod cluster-example-1 --template '{{.status.podIP}}') And then run: kubectl exec -ti curl -- curl -s ${POD_IP}:9187/metrics If you enabled TLS metrics, run instead: kubectl exec -ti curl -- curl -sk https://${POD_IP}:9187/metrics To access the metrics of the operator, you need to point to the pod where the operator is running, and use TCP port 8080 as target. When you're done inspecting metrics, please remember to delete the curl pod: kubectl delete -f curl.yaml Auxiliary resources Important These resources are provided for illustration and experimentation, and do not represent any kind of recommendation for your production system In the doc/src/samples/monitoring/ directory you will find a series of sample files for observability. Please refer to Part 4 of the quickstart section for context: kube-stack-config.yaml : a configuration file for the kube-stack helm chart installation. It ensures that Prometheus listens for all PodMonitor resources. prometheusrule.yaml : a PrometheusRule with alerts for CloudNativePG. NOTE: this does not include inter-operation with notification services. Please refer to the Prometheus documentation . podmonitor.yaml : a PodMonitor for the CloudNativePG Operator deployment. In addition, we provide the \"raw\" sources for the Prometheus alert rules in the alerts.yaml file. A Grafana dashboard for CloudNativePG clusters and operator, is kept in the dedicated repository cloudnative-pg/grafana-dashboards as a dashboard JSON configuration: grafana-dashboard.json . The file can be downloaded, and imported into Grafana (menus: Dashboard > New > Import). For a general reference on the settings available on kube-prometheus-stack , you can execute helm show values prometheus-community/kube-prometheus-stack . Please refer to the kube-prometheus-stack page for more detail.","title":"Monitoring"},{"location":"monitoring/#monitoring","text":"Important Installing Prometheus and Grafana is beyond the scope of this project. We assume they are correctly installed in your system. However, for experimentation we provide instructions in Part 4 of the Quickstart .","title":"Monitoring"},{"location":"monitoring/#monitoring-instances","text":"For each PostgreSQL instance, the operator provides an exporter of metrics for Prometheus via HTTP or HTTPS, on port 9187, named metrics . The operator comes with a predefined set of metrics , as well as a highly configurable and customizable system to define additional queries via one or more ConfigMap or Secret resources (see the \"User defined metrics\" section below for details). Important CloudNativePG, by default, installs a set of predefined metrics in a ConfigMap named default-monitoring . Info You can inspect the exported metrics by following the instructions in the \"How to inspect the exported metrics\" section below. All monitoring queries that are performed on PostgreSQL are: atomic (one transaction per query) executed with the pg_monitor role executed with application_name set to cnpg_metrics_exporter executed as user postgres Please refer to the \"Predefined Roles\" section in PostgreSQL documentation for details on the pg_monitor role. Queries, by default, are run against the main database , as defined by the specified bootstrap method of the Cluster resource, according to the following logic: using initdb : queries will be run by default against the specified database in initdb.database , or app if not specified using recovery : queries will be run by default against the specified database in recovery.database , or postgres if not specified using pg_basebackup : queries will be run by default against the specified database in pg_basebackup.database , or postgres if not specified The default database can always be overridden for a given user-defined metric, by specifying a list of one or more databases in the target_databases option. Prometheus/Grafana If you are interested in evaluating the integration of CloudNativePG with Prometheus and Grafana, you can find a quick setup guide in Part 4 of the quickstart","title":"Monitoring Instances"},{"location":"monitoring/#monitoring-with-the-prometheus-operator","text":"A specific PostgreSQL cluster can be monitored using the Prometheus Operator's resource PodMonitor . A PodMonitor that correctly points to the Cluster can be automatically created by the operator by setting .spec.monitoring.enablePodMonitor to true in the Cluster resource itself (default: false ). Important Any change to the PodMonitor created automatically will be overridden by the Operator at the next reconciliation cycle, in case you need to customize it, you can do so as described below. To deploy a PodMonitor for a specific Cluster manually, define it as follows and adjust as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cluster-example spec: selector: matchLabels: \"cnpg.io/cluster\": cluster-example podMetricsEndpoints: - port: metrics Important Ensure you modify the example above with a unique name, as well as the correct cluster's namespace and labels (e.g., cluster-example ). Important The postgresql label, used in previous versions of this document, is deprecated and will be removed in the future. Please use the cnpg.io/cluster label instead to select the instances.","title":"Monitoring with the Prometheus operator"},{"location":"monitoring/#enabling-tls-on-the-metrics-port","text":"To enable TLS communication on the metrics port, configure the .spec.monitoring.tls.enabled setting to true . This setup ensures that the metrics exporter uses the same server certificate used by PostgreSQL to secure communication on port 5432. Important Changing the .spec.monitoring.tls.enabled setting will trigger a rolling restart of the Cluster. If the PodMonitor is managed by the operator ( .spec.monitoring.enablePodMonitor set to true ), it will automatically contain the necessary configurations to access the metrics via TLS. To manually deploy a PodMonitor suitable for reading metrics via TLS, define it as follows and adjust as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cluster-example spec: selector: matchLabels: \"cnpg.io/cluster\": cluster-example podMetricsEndpoints: - port: metrics scheme: https tlsConfig: ca: secret: name: cluster-example-ca key: ca.crt serverName: cluster-example-rw Important Ensure you modify the example above with a unique name, as well as the correct Cluster's namespace and labels (e.g., cluster-example ). Important The serverName field in the metrics endpoint must match one of the names defined in the server certificate. If the default certificate is in use, the serverName value should be in the format <cluster-name>-rw .","title":"Enabling TLS on the Metrics Port"},{"location":"monitoring/#predefined-set-of-metrics","text":"Every PostgreSQL instance exporter automatically exposes a set of predefined metrics, which can be classified in two major categories: PostgreSQL related metrics, starting with cnpg_collector_* , including: number of WAL files and total size on disk number of .ready and .done files in the archive status folder requested minimum and maximum number of synchronous replicas, as well as the expected and actually observed values number of distinct nodes accommodating the instances timestamps indicating last failed and last available backup, as well as the first point of recoverability for the cluster flag indicating if replica cluster mode is enabled or disabled flag indicating if a manual switchover is required flag indicating if fencing is enabled or disabled Go runtime related metrics, starting with go_* Below is a sample of the metrics returned by the localhost:9187/metrics endpoint of an instance. As you can see, the Prometheus format is self-documenting: # HELP cnpg_collector_collection_duration_seconds Collection time duration in seconds # TYPE cnpg_collector_collection_duration_seconds gauge cnpg_collector_collection_duration_seconds{collector=\"Collect.up\"} 0.0031393 # HELP cnpg_collector_collections_total Total number of times PostgreSQL was accessed for metrics. # TYPE cnpg_collector_collections_total counter cnpg_collector_collections_total 2 # HELP cnpg_collector_fencing_on 1 if the instance is fenced, 0 otherwise # TYPE cnpg_collector_fencing_on gauge cnpg_collector_fencing_on 0 # HELP cnpg_collector_nodes_used NodesUsed represents the count of distinct nodes accommodating the instances. A value of '-1' suggests that the metric is not available. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally this value should match the number of instances in the cluster. # TYPE cnpg_collector_nodes_used gauge cnpg_collector_nodes_used 3 # HELP cnpg_collector_last_collection_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_collector_last_collection_error gauge cnpg_collector_last_collection_error 0 # HELP cnpg_collector_manual_switchover_required 1 if a manual switchover is required, 0 otherwise # TYPE cnpg_collector_manual_switchover_required gauge cnpg_collector_manual_switchover_required 0 # HELP cnpg_collector_pg_wal Total size in bytes of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal' directory computed as (wal_segment_size * count) # TYPE cnpg_collector_pg_wal gauge cnpg_collector_pg_wal{value=\"count\"} 9 cnpg_collector_pg_wal{value=\"slots_max\"} NaN cnpg_collector_pg_wal{value=\"keep\"} 32 cnpg_collector_pg_wal{value=\"max\"} 64 cnpg_collector_pg_wal{value=\"min\"} 5 cnpg_collector_pg_wal{value=\"size\"} 1.50994944e+08 cnpg_collector_pg_wal{value=\"volume_max\"} 128 cnpg_collector_pg_wal{value=\"volume_size\"} 2.147483648e+09 # HELP cnpg_collector_pg_wal_archive_status Number of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal/archive_status' directory (ready, done) # TYPE cnpg_collector_pg_wal_archive_status gauge cnpg_collector_pg_wal_archive_status{value=\"done\"} 6 cnpg_collector_pg_wal_archive_status{value=\"ready\"} 0 # HELP cnpg_collector_replica_mode 1 if the cluster is in replica mode, 0 otherwise # TYPE cnpg_collector_replica_mode gauge cnpg_collector_replica_mode 0 # HELP cnpg_collector_sync_replicas Number of requested synchronous replicas (synchronous_standby_names) # TYPE cnpg_collector_sync_replicas gauge cnpg_collector_sync_replicas{value=\"expected\"} 0 cnpg_collector_sync_replicas{value=\"max\"} 0 cnpg_collector_sync_replicas{value=\"min\"} 0 cnpg_collector_sync_replicas{value=\"observed\"} 0 # HELP cnpg_collector_up 1 if PostgreSQL is up, 0 otherwise. # TYPE cnpg_collector_up gauge cnpg_collector_up{cluster=\"cluster-example\"} 1 # HELP cnpg_collector_postgres_version Postgres version # TYPE cnpg_collector_postgres_version gauge cnpg_collector_postgres_version{cluster=\"cluster-example\",full=\"17.5\"} 17.5 # HELP cnpg_collector_last_failed_backup_timestamp The last failed backup as a unix timestamp (Deprecated) # TYPE cnpg_collector_last_failed_backup_timestamp gauge cnpg_collector_last_failed_backup_timestamp 0 # HELP cnpg_collector_last_available_backup_timestamp The last available backup as a unix timestamp (Deprecated) # TYPE cnpg_collector_last_available_backup_timestamp gauge cnpg_collector_last_available_backup_timestamp 1.63238406e+09 # HELP cnpg_collector_first_recoverability_point The first point of recoverability for the cluster as a unix timestamp (Deprecated) # TYPE cnpg_collector_first_recoverability_point gauge cnpg_collector_first_recoverability_point 1.63238406e+09 # HELP cnpg_collector_lo_pages Estimated number of pages in the pg_largeobject table # TYPE cnpg_collector_lo_pages gauge cnpg_collector_lo_pages{datname=\"app\"} 0 cnpg_collector_lo_pages{datname=\"postgres\"} 78 # HELP cnpg_collector_wal_buffers_full Number of times WAL data was written to disk because WAL buffers became full. Only available on PG 14+ # TYPE cnpg_collector_wal_buffers_full gauge cnpg_collector_wal_buffers_full{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 6472 # HELP cnpg_collector_wal_bytes Total amount of WAL generated in bytes. Only available on PG 14+ # TYPE cnpg_collector_wal_bytes gauge cnpg_collector_wal_bytes{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 1.0035147e+07 # HELP cnpg_collector_wal_fpi Total number of WAL full page images generated. Only available on PG 14+ # TYPE cnpg_collector_wal_fpi gauge cnpg_collector_wal_fpi{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 1474 # HELP cnpg_collector_wal_records Total number of WAL records generated. Only available on PG 14+ # TYPE cnpg_collector_wal_records gauge cnpg_collector_wal_records{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 26178 # HELP cnpg_collector_wal_sync Number of times WAL files were synced to disk via issue_xlog_fsync request (if fsync is on and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+ # TYPE cnpg_collector_wal_sync gauge cnpg_collector_wal_sync{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 37 # HELP cnpg_collector_wal_sync_time Total amount of time spent syncing WAL files to disk via issue_xlog_fsync request, in milliseconds (if track_wal_io_timing is enabled, fsync is on, and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+ # TYPE cnpg_collector_wal_sync_time gauge cnpg_collector_wal_sync_time{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 0 # HELP cnpg_collector_wal_write Number of times WAL buffers were written out to disk via XLogWrite request. Only available on PG 14+ # TYPE cnpg_collector_wal_write gauge cnpg_collector_wal_write{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 7243 # HELP cnpg_collector_wal_write_time Total amount of time spent writing WAL buffers to disk via XLogWrite request, in milliseconds (if track_wal_io_timing is enabled, otherwise zero). This includes the sync time when wal_sync_method is either open_datasync or open_sync. Only available on PG 14+ # TYPE cnpg_collector_wal_write_time gauge cnpg_collector_wal_write_time{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 0 # HELP cnpg_last_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_last_error gauge cnpg_last_error 0 # HELP go_gc_duration_seconds A summary of the pause duration of garbage collection cycles. # TYPE go_gc_duration_seconds summary go_gc_duration_seconds{quantile=\"0\"} 5.01e-05 go_gc_duration_seconds{quantile=\"0.25\"} 7.27e-05 go_gc_duration_seconds{quantile=\"0.5\"} 0.0001748 go_gc_duration_seconds{quantile=\"0.75\"} 0.0002959 go_gc_duration_seconds{quantile=\"1\"} 0.0012776 go_gc_duration_seconds_sum 0.0035741 go_gc_duration_seconds_count 13 # HELP go_goroutines Number of goroutines that currently exist. # TYPE go_goroutines gauge go_goroutines 25 # HELP go_info Information about the Go environment. # TYPE go_info gauge go_info{version=\"go1.20.5\"} 1 # HELP go_memstats_alloc_bytes Number of bytes allocated and still in use. # TYPE go_memstats_alloc_bytes gauge go_memstats_alloc_bytes 4.493744e+06 # HELP go_memstats_alloc_bytes_total Total number of bytes allocated, even if freed. # TYPE go_memstats_alloc_bytes_total counter go_memstats_alloc_bytes_total 2.1698216e+07 # HELP go_memstats_buck_hash_sys_bytes Number of bytes used by the profiling bucket hash table. # TYPE go_memstats_buck_hash_sys_bytes gauge go_memstats_buck_hash_sys_bytes 1.456234e+06 # HELP go_memstats_frees_total Total number of frees. # TYPE go_memstats_frees_total counter go_memstats_frees_total 172118 # HELP go_memstats_gc_cpu_fraction The fraction of this program's available CPU time used by the GC since the program started. # TYPE go_memstats_gc_cpu_fraction gauge go_memstats_gc_cpu_fraction 1.0749468700447189e-05 # HELP go_memstats_gc_sys_bytes Number of bytes used for garbage collection system metadata. # TYPE go_memstats_gc_sys_bytes gauge go_memstats_gc_sys_bytes 5.530048e+06 # HELP go_memstats_heap_alloc_bytes Number of heap bytes allocated and still in use. # TYPE go_memstats_heap_alloc_bytes gauge go_memstats_heap_alloc_bytes 4.493744e+06 # HELP go_memstats_heap_idle_bytes Number of heap bytes waiting to be used. # TYPE go_memstats_heap_idle_bytes gauge go_memstats_heap_idle_bytes 5.8236928e+07 # HELP go_memstats_heap_inuse_bytes Number of heap bytes that are in use. # TYPE go_memstats_heap_inuse_bytes gauge go_memstats_heap_inuse_bytes 7.528448e+06 # HELP go_memstats_heap_objects Number of allocated objects. # TYPE go_memstats_heap_objects gauge go_memstats_heap_objects 26306 # HELP go_memstats_heap_released_bytes Number of heap bytes released to OS. # TYPE go_memstats_heap_released_bytes gauge go_memstats_heap_released_bytes 5.7401344e+07 # HELP go_memstats_heap_sys_bytes Number of heap bytes obtained from system. # TYPE go_memstats_heap_sys_bytes gauge go_memstats_heap_sys_bytes 6.5765376e+07 # HELP go_memstats_last_gc_time_seconds Number of seconds since 1970 of last garbage collection. # TYPE go_memstats_last_gc_time_seconds gauge go_memstats_last_gc_time_seconds 1.6311727586032727e+09 # HELP go_memstats_lookups_total Total number of pointer lookups. # TYPE go_memstats_lookups_total counter go_memstats_lookups_total 0 # HELP go_memstats_mallocs_total Total number of mallocs. # TYPE go_memstats_mallocs_total counter go_memstats_mallocs_total 198424 # HELP go_memstats_mcache_inuse_bytes Number of bytes in use by mcache structures. # TYPE go_memstats_mcache_inuse_bytes gauge go_memstats_mcache_inuse_bytes 14400 # HELP go_memstats_mcache_sys_bytes Number of bytes used for mcache structures obtained from system. # TYPE go_memstats_mcache_sys_bytes gauge go_memstats_mcache_sys_bytes 16384 # HELP go_memstats_mspan_inuse_bytes Number of bytes in use by mspan structures. # TYPE go_memstats_mspan_inuse_bytes gauge go_memstats_mspan_inuse_bytes 191896 # HELP go_memstats_mspan_sys_bytes Number of bytes used for mspan structures obtained from system. # TYPE go_memstats_mspan_sys_bytes gauge go_memstats_mspan_sys_bytes 212992 # HELP go_memstats_next_gc_bytes Number of heap bytes when next garbage collection will take place. # TYPE go_memstats_next_gc_bytes gauge go_memstats_next_gc_bytes 8.689632e+06 # HELP go_memstats_other_sys_bytes Number of bytes used for other system allocations. # TYPE go_memstats_other_sys_bytes gauge go_memstats_other_sys_bytes 2.566622e+06 # HELP go_memstats_stack_inuse_bytes Number of bytes in use by the stack allocator. # TYPE go_memstats_stack_inuse_bytes gauge go_memstats_stack_inuse_bytes 1.343488e+06 # HELP go_memstats_stack_sys_bytes Number of bytes obtained from system for stack allocator. # TYPE go_memstats_stack_sys_bytes gauge go_memstats_stack_sys_bytes 1.343488e+06 # HELP go_memstats_sys_bytes Number of bytes obtained from system. # TYPE go_memstats_sys_bytes gauge go_memstats_sys_bytes 7.6891144e+07 # HELP go_threads Number of OS threads created. # TYPE go_threads gauge go_threads 18 Note cnpg_collector_postgres_version is a GaugeVec metric containing the Major.Minor version of PostgreSQL. The full semantic version Major.Minor.Patch can be found inside one of its label field named full . Warning The metrics cnpg_collector_last_failed_backup_timestamp , cnpg_collector_last_available_backup_timestamp , and cnpg_collector_first_recoverability_point have been deprecated starting from version 1.26. These metrics will continue to function with native backup solutions such as in-core Barman Cloud (deprecated) and volume snapshots. Note that for these cases, cnpg_collector_first_recoverability_point and cnpg_collector_last_available_backup_timestamp will remain zero until the first backup is completed to the object store. This is separate from WAL archiving.","title":"Predefined set of metrics"},{"location":"monitoring/#user-defined-metrics","text":"This feature is currently in beta state and the format is inspired by the queries.yaml file (release 0.12) of the PostgreSQL Prometheus Exporter. Custom metrics can be defined by users by referring to the created Configmap / Secret in a Cluster definition under the .spec.monitoring.customQueriesConfigMap or customQueriesSecret section as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example namespace: test spec: instances: 3 storage: size: 1Gi monitoring: customQueriesConfigMap: - name: example-monitoring key: custom-queries The customQueriesConfigMap / customQueriesSecret sections contain a list of ConfigMap / Secret references specifying the key in which the custom queries are defined. Take care that the referred resources have to be created in the same namespace as the Cluster resource. Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to it, otherwise you will have to reload the instances using the kubectl cnpg reload subcommand. Important When a user defined metric overwrites an already existing metric the instance manager prints a json warning log, containing the message: Query with the same name already found. Overwriting the existing one. and a key queryName containing the overwritten query name.","title":"User defined metrics"},{"location":"monitoring/#example-of-a-user-defined-metric","text":"Here you can see an example of a ConfigMap containing a single custom query, referenced by the Cluster example above: apiVersion: v1 kind: ConfigMap metadata: name: example-monitoring namespace: test labels: cnpg.io/reload: \"\" data: custom-queries: | pg_replication: query: \"SELECT CASE WHEN NOT pg_is_in_recovery() THEN 0 ELSE GREATEST (0, EXTRACT(EPOCH FROM (now() - pg_last_xact_replay_timestamp()))) END AS lag, pg_is_in_recovery() AS in_recovery, EXISTS (TABLE pg_stat_wal_receiver) AS is_wal_receiver_up, (SELECT count(*) FROM pg_stat_replication) AS streaming_replicas\" metrics: - lag: usage: \"GAUGE\" description: \"Replication lag behind primary in seconds\" - in_recovery: usage: \"GAUGE\" description: \"Whether the instance is in recovery\" - is_wal_receiver_up: usage: \"GAUGE\" description: \"Whether the instance wal_receiver is up\" - streaming_replicas: usage: \"GAUGE\" description: \"Number of streaming replicas connected to the instance\" A list of basic monitoring queries can be found in the default-monitoring.yaml file that is already installed in your CloudNativePG deployment (see \"Default set of metrics\" ).","title":"Example of a user defined metric"},{"location":"monitoring/#example-of-a-user-defined-metric-with-predicate-query","text":"The predicate_query option allows the user to execute the query to collect the metrics only under the specified conditions. To do so the user needs to provide a predicate query that returns at most one row with a single boolean column. The predicate query is executed in the same transaction as the main query and against the same databases. some_query: | predicate_query: | SELECT some_bool as predicate FROM some_table query: | SELECT count(*) as rows FROM some_table metrics: - rows: usage: \"GAUGE\" description: \"number of rows\"","title":"Example of a user defined metric with predicate query"},{"location":"monitoring/#example-of-a-user-defined-metric-running-on-multiple-databases","text":"If the target_databases option lists more than one database the metric is collected from each of them. Database auto-discovery can be enabled for a specific query by specifying a shell-like pattern (i.e., containing * , ? or [] ) in the list of target_databases . If provided, the operator will expand the list of target databases by adding all the databases returned by the execution of SELECT datname FROM pg_database WHERE datallowconn AND NOT datistemplate and matching the pattern according to path.Match() rules. Note The * character has a special meaning in yaml, so you need to quote ( \"*\" ) the target_databases value when it includes such a pattern. It is recommended that you always include the name of the database in the returned labels, for example using the current_database() function as in the following example: some_query: | query: | SELECT current_database() as datname, count(*) as rows FROM some_table metrics: - datname: usage: \"LABEL\" description: \"Name of current database\" - rows: usage: \"GAUGE\" description: \"number of rows\" target_databases: - albert - bb - freddie This will produce in the following metric being exposed: cnpg_some_query_rows{datname=\"albert\"} 2 cnpg_some_query_rows{datname=\"bb\"} 5 cnpg_some_query_rows{datname=\"freddie\"} 10 Here is an example of a query with auto-discovery enabled which also runs on the template1 database (otherwise not returned by the aforementioned query): some_query: | query: | SELECT current_database() as datname, count(*) as rows FROM some_table metrics: - datname: usage: \"LABEL\" description: \"Name of current database\" - rows: usage: \"GAUGE\" description: \"number of rows\" target_databases: - \"*\" - \"template1\" The above example will produce the following metrics (provided the databases exist): cnpg_some_query_rows{datname=\"albert\"} 2 cnpg_some_query_rows{datname=\"bb\"} 5 cnpg_some_query_rows{datname=\"freddie\"} 10 cnpg_some_query_rows{datname=\"template1\"} 7 cnpg_some_query_rows{datname=\"postgres\"} 42","title":"Example of a user defined metric running on multiple databases"},{"location":"monitoring/#structure-of-a-user-defined-metric","text":"Every custom query has the following basic structure: <MetricName>: query: \"<SQLQuery>\" metrics: - <ColumnName>: usage: \"<MetricType>\" description: \"<MetricDescription>\" Here is a short description of all the available fields: <MetricName> : the name of the Prometheus metric name : override <MetricName> , if defined query : the SQL query to run on the target database to generate the metrics primary : whether to run the query only on the primary instance master : same as primary (for compatibility with the Prometheus PostgreSQL exporter's syntax - deprecated) runonserver : a semantic version range to limit the versions of PostgreSQL the query should run on (e.g. \">=11.0.0\" or \">=12.0.0 <=15.0.0\" ) target_databases : a list of databases to run the query against, or a shell-like pattern to enable auto discovery. Overwrites the default database if provided. predicate_query : a SQL query that returns at most one row and one boolean column to run on the target database. The system evaluates the predicate and if true executes the query . metrics : section containing a list of all exported columns, defined as follows: <ColumnName> : the name of the column returned by the query name : override the ColumnName of the column in the metric, if defined usage : one of the values described below description : the metric's description metrics_mapping : the optional column mapping when usage is set to MAPPEDMETRIC The possible values for usage are: Column Usage Label Description DISCARD this column should be ignored LABEL use this column as a label COUNTER use this column as a counter GAUGE use this column as a gauge MAPPEDMETRIC use this column with the supplied mapping of text values DURATION use this column as a text duration (in milliseconds) HISTOGRAM use this column as a histogram Please visit the \"Metric Types\" page from the Prometheus documentation for more information.","title":"Structure of a user defined metric"},{"location":"monitoring/#output-of-a-user-defined-metric","text":"Custom defined metrics are returned by the Prometheus exporter endpoint ( :9187/metrics ) with the following format: cnpg_<MetricName>_<ColumnName>{<LabelColumnName>=<LabelColumnValue> ... } <ColumnValue> Note LabelColumnName are metrics with usage set to LABEL and their Value Considering the pg_replication example above, the exporter's endpoint would return the following output when invoked: # HELP cnpg_pg_replication_in_recovery Whether the instance is in recovery # TYPE cnpg_pg_replication_in_recovery gauge cnpg_pg_replication_in_recovery 0 # HELP cnpg_pg_replication_lag Replication lag behind primary in seconds # TYPE cnpg_pg_replication_lag gauge cnpg_pg_replication_lag 0 # HELP cnpg_pg_replication_streaming_replicas Number of streaming replicas connected to the instance # TYPE cnpg_pg_replication_streaming_replicas gauge cnpg_pg_replication_streaming_replicas 2 # HELP cnpg_pg_replication_is_wal_receiver_up Whether the instance wal_receiver is up # TYPE cnpg_pg_replication_is_wal_receiver_up gauge cnpg_pg_replication_is_wal_receiver_up 0","title":"Output of a user defined metric"},{"location":"monitoring/#default-set-of-metrics","text":"The operator can be configured to automatically inject in a Cluster a set of monitoring queries defined in a ConfigMap or a Secret, inside the operator's namespace. You have to set the MONITORING_QUERIES_CONFIGMAP or MONITORING_QUERIES_SECRET key in the \"operator configuration\" , respectively to the name of the ConfigMap or the Secret; the operator will then use the content of the queries key. Any change to the queries content will be immediately reflected on all the deployed Clusters using it. The operator installation manifests come with a predefined ConfigMap, called cnpg-default-monitoring , to be used by all Clusters. MONITORING_QUERIES_CONFIGMAP is by default set to cnpg-default-monitoring in the operator configuration. If you want to disable the default set of metrics, you can: disable it at operator level: set the MONITORING_QUERIES_CONFIGMAP / MONITORING_QUERIES_SECRET key to \"\" (empty string), in the operator ConfigMap. Changes to operator ConfigMap require an operator restart. disable it for a specific Cluster: set .spec.monitoring.disableDefaultQueries to true in the Cluster. Important The ConfigMap or Secret specified via MONITORING_QUERIES_CONFIGMAP / MONITORING_QUERIES_SECRET will always be copied to the Cluster's namespace with a fixed name: cnpg-default-monitoring . So that, if you intend to have default metrics, you should not create a ConfigMap with this name in the cluster's namespace.","title":"Default set of metrics"},{"location":"monitoring/#differences-with-the-prometheus-postgres-exporter","text":"CloudNativePG is inspired by the PostgreSQL Prometheus Exporter, but presents some differences. In particular, the cache_seconds field is not implemented in CloudNativePG's exporter.","title":"Differences with the Prometheus Postgres exporter"},{"location":"monitoring/#monitoring-the-cloudnativepg-operator","text":"The operator internally exposes Prometheus metrics via HTTP on port 8080, named metrics . Info You can inspect the exported metrics by following the instructions in the \"How to inspect the exported metrics\" section below. Currently, the operator exposes default kubebuilder metrics. See kubebuilder documentation for more details.","title":"Monitoring the CloudNativePG operator"},{"location":"monitoring/#monitoring-the-operator-with-prometheus","text":"The operator can be monitored using the Prometheus Operator by defining a PodMonitor pointing to the operator pod(s), as follows (note it's applied in the same namespace as the operator): kubectl -n cnpg-system apply -f - <<EOF --- apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cnpg-controller-manager spec: selector: matchLabels: app.kubernetes.io/name: cloudnative-pg podMetricsEndpoints: - port: metrics EOF","title":"Monitoring the operator with Prometheus"},{"location":"monitoring/#how-to-inspect-the-exported-metrics","text":"In this section we provide basic instructions on how to inspect the metrics exported by a specific PostgreSQL instance manager (primary or replica) or the operator. Note In the examples below we assume we are working in the default namespace, and with the operator installed in the cnpg-system namespace. Please adapt to your use case.","title":"How to inspect the exported metrics"},{"location":"monitoring/#using-port-forwarding","text":"The simplest way to inspect the metrics is to port-forward the metrics ports of the pods involved. For example, to inspect the metrics on the -1 instance of cluster-example , we port-forward the 9187 port: kubectl port-forward cluster-example-1 9187:9187 With port-forwarding active, the metrics can be inspected easily, for example on a web browser, using HTTP or HTTPS depending on the configuration, with address: localhost:9187/metrics . The operator pod also exports metrics, on port 8080. Similarly to instances, we port-forward the operator pod, which is located in the operator namespace: kubectl -n cnpg-system port-forward pod/<CONTROLLER-MANAGER-POD> 8080:8080 With port forwarding active, the metrics are easily viewable on a browser at localhost:8080/metrics .","title":"Using port forwarding"},{"location":"monitoring/#using-curl","text":"Create the curl pod with the following command: kubectl apply -f - <<EOF --- apiVersion: v1 kind: Pod metadata: name: curl spec: containers: - name: curl image: curlimages/curl:8.2.1 command: ['sleep', '3600'] EOF To inspect the metrics exported by an instance, you need to connect to port 9187 of the target pod. You will need to know the pod's IP address, which you can find easily by running kubectl get pod -o wide . The following generic command will run curl on the desired pod: kubectl exec -ti curl -- curl -s <pod_ip>:9187/metrics For example, if your PostgreSQL cluster is called cluster-example and you want to retrieve the exported metrics of the first pod in the cluster, you can run the following command to programmatically get the IP of that pod: POD_IP=$(kubectl get pod cluster-example-1 --template '{{.status.podIP}}') And then run: kubectl exec -ti curl -- curl -s ${POD_IP}:9187/metrics If you enabled TLS metrics, run instead: kubectl exec -ti curl -- curl -sk https://${POD_IP}:9187/metrics To access the metrics of the operator, you need to point to the pod where the operator is running, and use TCP port 8080 as target. When you're done inspecting metrics, please remember to delete the curl pod: kubectl delete -f curl.yaml","title":"Using curl"},{"location":"monitoring/#auxiliary-resources","text":"Important These resources are provided for illustration and experimentation, and do not represent any kind of recommendation for your production system In the doc/src/samples/monitoring/ directory you will find a series of sample files for observability. Please refer to Part 4 of the quickstart section for context: kube-stack-config.yaml : a configuration file for the kube-stack helm chart installation. It ensures that Prometheus listens for all PodMonitor resources. prometheusrule.yaml : a PrometheusRule with alerts for CloudNativePG. NOTE: this does not include inter-operation with notification services. Please refer to the Prometheus documentation . podmonitor.yaml : a PodMonitor for the CloudNativePG Operator deployment. In addition, we provide the \"raw\" sources for the Prometheus alert rules in the alerts.yaml file. A Grafana dashboard for CloudNativePG clusters and operator, is kept in the dedicated repository cloudnative-pg/grafana-dashboards as a dashboard JSON configuration: grafana-dashboard.json . The file can be downloaded, and imported into Grafana (menus: Dashboard > New > Import). For a general reference on the settings available on kube-prometheus-stack , you can execute helm show values prometheus-community/kube-prometheus-stack . Please refer to the kube-prometheus-stack page for more detail.","title":"Auxiliary resources"},{"location":"networking/","text":"Networking CloudNativePG assumes the underlying Kubernetes cluster has the required connectivity already set up. Networking on Kubernetes is an important and extended topic; please refer to the Kubernetes documentation for further information. If you're following the quickstart guide to install CloudNativePG on a local KinD or K3d cluster, you should not encounter any networking issues as neither platform will add any networking restrictions by default. However, when deploying CloudNativePG on existing infrastructure, networking restrictions might be in place that could impair the communication of the operator with PostgreSQL clusters. Specifically, existing Network Policies might restrict certain types of traffic. Or, you might be interested in adding network policies in your environment for increased security. As mentioned in the security document , please ensure the operator can reach every cluster pod on ports 8000 and 5432, and that pods can connect to each other. Cross-namespace network policy for the operator Following the quickstart guide or using helm chart for deployment will install the operator in a dedicated namespace ( cnpg-system by default). We recommend that you create clusters in a different namespace. The operator must be able to connect to cluster pods. This might be precluded if there is a NetworkPolicy restricting cross-namespace traffic. For example, the kubernetes guide on network policies contains an example policy denying all ingress traffic by default. If your local kubernetes setup has this kind of restrictive network policy, you will need to create a NetworkPolicy to explicitly allow connection from the operator namespace and pod to the cluster namespace and pods. You can find an example in the networkpolicy-example.yaml file in this repository. Please note, you'll need to adjust the cluster name and cluster namespace to match your specific setup, and also the operator namespace if it is not the default namespace. Cross-cluster networking While bootstrapping from another cluster or when using the externalClusters section, ensure connectivity among all clusters, object stores, and namespaces involved. Again, we refer you to the Kubernetes documentation for setup information.","title":"Networking"},{"location":"networking/#networking","text":"CloudNativePG assumes the underlying Kubernetes cluster has the required connectivity already set up. Networking on Kubernetes is an important and extended topic; please refer to the Kubernetes documentation for further information. If you're following the quickstart guide to install CloudNativePG on a local KinD or K3d cluster, you should not encounter any networking issues as neither platform will add any networking restrictions by default. However, when deploying CloudNativePG on existing infrastructure, networking restrictions might be in place that could impair the communication of the operator with PostgreSQL clusters. Specifically, existing Network Policies might restrict certain types of traffic. Or, you might be interested in adding network policies in your environment for increased security. As mentioned in the security document , please ensure the operator can reach every cluster pod on ports 8000 and 5432, and that pods can connect to each other.","title":"Networking"},{"location":"networking/#cross-namespace-network-policy-for-the-operator","text":"Following the quickstart guide or using helm chart for deployment will install the operator in a dedicated namespace ( cnpg-system by default). We recommend that you create clusters in a different namespace. The operator must be able to connect to cluster pods. This might be precluded if there is a NetworkPolicy restricting cross-namespace traffic. For example, the kubernetes guide on network policies contains an example policy denying all ingress traffic by default. If your local kubernetes setup has this kind of restrictive network policy, you will need to create a NetworkPolicy to explicitly allow connection from the operator namespace and pod to the cluster namespace and pods. You can find an example in the networkpolicy-example.yaml file in this repository. Please note, you'll need to adjust the cluster name and cluster namespace to match your specific setup, and also the operator namespace if it is not the default namespace.","title":"Cross-namespace network policy for the operator"},{"location":"networking/#cross-cluster-networking","text":"While bootstrapping from another cluster or when using the externalClusters section, ensure connectivity among all clusters, object stores, and namespaces involved. Again, we refer you to the Kubernetes documentation for setup information.","title":"Cross-cluster networking"},{"location":"operator_capability_levels/","text":"Operator capability levels These capabilities were implemented by CloudNativePG, classified using the Operator SDK definition of Capability Levels framework. Important Based on the Operator Capability Levels model , you can expect a \"Level V - Auto Pilot\" set of capabilities from the CloudNativePG operator. Each capability level is associated with a certain set of management features the operator offers: Basic install Seamless upgrades Full lifecycle Deep insights Auto pilot Note We consider this framework as a guide for future work and implementations in the operator. Level 1: Basic install Capability level 1 involves installing and configuring the operator. This category includes usability and user experience enhancements, such as improvements in how you interact with the operator and a PostgreSQL cluster configuration. Important We consider information security part of this level. Operator deployment via declarative configuration The operator is installed in a declarative way using a Kubernetes manifest that defines four major CustomResourceDefinition objects: Cluster , Pooler , Backup , and ScheduledBackup . PostgreSQL cluster deployment via declarative configuration You define a PostgreSQL cluster (operand) using the Cluster custom resource in a fully declarative way. The PostgreSQL version is determined by the operand container image defined in the CR, which is automatically fetched from the requested registry. When deploying an operand, the operator also creates the following resources: Pod , Service , Secret , ConfigMap , PersistentVolumeClaim , PodDisruptionBudget , ServiceAccount , RoleBinding , and Role . Override of operand images through the CRD The operator is designed to support any operand container image with PostgreSQL inside. By default, the operator uses the latest available minor version of the latest stable major version supported by the PostgreSQL community and published on ghcr.io. You can use any compatible image of PostgreSQL supporting the primary/standby architecture directly by setting the imageName attribute in the CR. The operator also supports imagePullSecrets to access private container registries, and it supports digests and tags for finer control of container image immutability. If you prefer not to specify an image name, you can leverage image catalogs by simply referencing the PostgreSQL major version. Moreover, image catalogs enable you to effortlessly create custom catalogs, directing to images based on your specific requirements. Labels and annotations You can configure the operator to support inheriting labels and annotations that are defined in a cluster's metadata. The goal is to improve the organization of the CloudNativePG deployment in your Kubernetes infrastructure. Self-contained instance manager Instead of relying on an external tool to coordinate PostgreSQL instances in the Kubernetes cluster pods, such as Patroni or Stolon, the operator injects the operator executable inside each pod, in a file named /controller/manager . The application is used to control the underlying PostgreSQL instance and to reconcile the pod status with the instance based on the PostgreSQL cluster topology. The instance manager also starts a web server that's invoked by the kubelet for probes. Unix signals invoked by the kubelet are filtered by the instance manager. Where appropriate, they're forwarded to the postgres process for fast and controlled reactions to external events. The instance manager is written in Go and has no external dependencies. Storage configuration Storage is a critical component in a database workload. Taking advantage of the Kubernetes native capabilities and resources in terms of storage, the operator gives you enough flexibility to choose the right storage for your workload requirements, based on what the underlying Kubernetes environment can offer. This implies choosing a particular storage class in a public cloud environment or fine-tuning the generated PVC through a PVC template in the CR's storage parameter. For better performance and finer control, you can also choose to host your cluster's write-ahead log (WAL, also known as pg_wal ) on a separate volume, preferably on different storage. The \"Benchmarking\" section of the documentation provides detailed instructions on benchmarking both storage and the database before production. It relies on the cnpg plugin to ensure optimal performance and reliability. Replica configuration The operator detects replicas in a cluster through a single parameter, called instances . If set to 1 , the cluster comprises a single primary PostgreSQL instance with no replica. If higher than 1 , the operator manages instances -1 replicas, including high availability (HA) through automated failover and rolling updates through switchover operations. CloudNativePG manages replication slots for all replicas in the high-availability cluster. It also supports user-defined physical replication slots on the primary and enables logical decoding failover\u2014natively for PostgreSQL 17 and later using sync_replication_slots , and through the pg_failover_slots extension for earlier versions. Service Configuration By default, CloudNativePG creates three Kubernetes services for applications to access the cluster via the network: One pointing to the primary for read/write operations. One pointing to replicas for read-only queries. A generic one pointing to any instance for read operations. You can disable the read-only and read services via configuration. Additionally, you can leverage the service template capability to create custom service resources, including load balancers, to access PostgreSQL outside Kubernetes. This is particularly useful for DBaaS purposes. Database configuration The operator is designed to bootstrap a PostgreSQL cluster with a single database. The operator transparently manages network access to the cluster through three Kubernetes services provisioned and managed for read-write, read, and read-only workloads. Using the convention-over-configuration approach, the operator creates a database called app , by default owned by a regular Postgres user with the same name. You can specify both the database name and the user name, if required, as part of the bootstrap. Additional databases can be created or managed via declarative database management using the Database CRD, also supporting extensions and schemas. Although no configuration is required to run the cluster, you can customize both PostgreSQL runtime configuration and PostgreSQL host-based authentication rules in the postgresql section of the CR. Configuration of Postgres roles, users, and groups CloudNativePG supports management of PostgreSQL roles, users, and groups through declarative configuration using the .spec.managed.roles stanza. Pod security standards For InfoSec requirements, the operator doesn't require privileged mode for any container. It enforces a read-only root filesystem to guarantee containers immutability for both the operator and the operand pods. It also explicitly sets the required security contexts. Affinity The cluster's affinity section enables fine-tuning of how pods and related resources, such as persistent volumes, are scheduled across the nodes of a Kubernetes cluster. In particular, the operator supports: Pod affinity and anti-affinity Node selector Taints and tolerations Topology spread constraints The cluster's topologySpreadConstraints section enables additional control of scheduling pods across topologies, enhancing what affinity and anti-affinity can offer. Command-line interface CloudNativePG doesn't have its own command-line interface. It relies on the best command-line interface for Kubernetes, kubectl, by providing a plugin called cnpg . This plugin enhances and simplifies your PostgreSQL cluster management experience. Current status of the cluster The operator continuously updates the status section of the CR with the observed status of the cluster. The entire PostgreSQL cluster status is continuously monitored by the instance manager running in each pod. The instance manager is responsible for applying the required changes to the controlled PostgreSQL instance to converge to the required status of the cluster. (For example, if the cluster status reports that pod -1 is the primary, pod -1 needs to promote itself while the other pods need to follow pod -1 .) The same status is used by the cnpg plugin for kubectl to provide details. Operator's certification authority The operator creates a certification authority for itself. It creates and signs with the operator certification authority a leaf certificate for the webhook server to use. This certificate ensures safe communication between the Kubernetes API server and the operator. Cluster's certification authority The operator creates a certification authority for every PostgreSQL cluster. This certification authority is used to issue and renew TLS certificates for clients' authentication, including streaming replication standby servers (instead of passwords). Support for a custom certification authority for client certificates is available through secrets, which also includes integration with cert-manager. Certificates can be issued with the cnpg plugin for kubectl. TLS connections The operator transparently and natively supports TLS/SSL connections to encrypt client/server communications for increased security using the cluster's certification authority. Support for custom server certificates is available through secrets, which also includes integration with cert-manager. Certificate authentication for streaming replication To authorize streaming replication connections from the standby servers, the operator relies on TLS client certificate authentication. This method is used instead of relying on a password (and therefore a secret). Continuous configuration management The operator enables you to apply changes to the Cluster resource YAML section of the PostgreSQL configuration. Depending on the configuration option, it also makes sure that all instances are properly reloaded or restarted. Note Changes with ALTER SYSTEM aren't detected, meaning that the cluster state isn't enforced. Import of existing PostgreSQL databases The operator provides a declarative way to import existing Postgres databases in a new CloudNativePG cluster in Kubernetes, using offline migrations. The same feature also covers offline major upgrades of PostgreSQL databases. Offline means that applications must stop their write operations at the source until the database is imported. The feature extends the initdb bootstrap method to create a new PostgreSQL cluster using a logical snapshot of the data available in another PostgreSQL database. This data can be accessed by way of the network through a superuser connection. Import is from any supported version of Postgres. It relies on pg_dump and pg_restore being executed from the new cluster primary for all databases that are part of the operation and, if requested, for roles. PostGIS clusters CloudNativePG supports the installation of clusters with the PostGIS open source extension for geographical databases. This extension is one of the most popular extensions for PostgreSQL. Basic LDAP authentication for PostgreSQL The operator allows you to configure LDAP authentication for your PostgreSQL clients, using either the simple bind or search+bind mode, as described in the LDAP authentication section of the PostgreSQL documentation . Multiple installation methods The operator can be installed through a Kubernetes manifest by way of kubectl apply , to be used in a traditional Kubernetes installation in public and private cloud environments. CloudNativePG also supports installation by way of a Helm chart or OLM bundle from OperatorHub.io. Convention over configuration The operator supports the convention-over-configuration paradigm, deciding standard default values while allowing you to override them and customize them. You can specify a deployment of a PostgreSQL cluster using the Cluster CRD in a couple of lines of YAML code. Level 2: Seamless upgrades Capability level 2 is about enabling updates of the operator and the actual workload, in this case PostgreSQL servers. This includes PostgreSQL minor release updates (security and bug fixes normally) as well as major online upgrades. Operator Upgrade Upgrading the operator is seamless and can be done as a new deployment. After upgrading the controller, a rolling update of all deployed PostgreSQL clusters is initiated. You can choose to update all clusters simultaneously or distribute their upgrades over time. Thanks to the instance manager's injection, upgrading the operator does not require changes to the operand, allowing the operator to manage older versions of it. Additionally, CloudNativePG supports in-place updates of the instance manager following an operator upgrade. In-place updates do not require a rolling update or a subsequent switchover of the cluster. Upgrade of the managed workload The operand can be upgraded using a declarative configuration approach as part of changing the CR and, in particular, the imageName parameter. This is normally initiated by security updates or Postgres minor version updates. In the presence of standby servers, the operator performs rolling updates starting from the replicas. It does this by dropping the existing pod and creating a new one with the new requested operand image that reuses the underlying storage. Depending on the value of the primaryUpdateStrategy , the operator proceeds with a switchover before updating the former primary ( unsupervised ). Or, it waits for the user to manually issue the switchover procedure ( supervised ) by way of the cnpg plugin for kubectl. The setting to use depends on the business requirements, as the operation might generate some downtime for the applications. This downtime can range from a few seconds to minutes, based on the actual database workload. Offline In-Place Major Upgrades of PostgreSQL CloudNativePG supports declarative offline in-place major upgrades when a new operand container image with a higher PostgreSQL major version is applied to a cluster. The upgrade can be triggered by updating the image tag via the .spec.imageName option or by using an image catalog to manage version changes. During the upgrade, all cluster pods are shut down to ensure data consistency. A new job is then created to validate the upgrade conditions, execute pg_upgrade , and create new directories for PGDATA , WAL files, and tablespaces if needed. Once the upgrade is complete, replicas are re-created. Failed upgrades can be rolled back. Display cluster availability status during upgrade At any time, convey the cluster's high availability status, for example, Setting up primary , Creating a new replica , Cluster in healthy state , Switchover in progress , Failing over , Upgrading cluster , and Upgrading Postgres major version . Level 3: Full lifecycle Capability level 3 requires the operator to manage aspects of business continuity and scalability. Disaster recovery is a business continuity component that requires that both backup and recovery of a database work correctly. While as a starting point, the goal is to achieve RPO < 5 minutes, the long-term goal is to implement RPO=0 backup solutions. High availability is the other important component of business continuity. Through PostgreSQL native physical replication and hot standby replicas, it allows the operator to perform failover and switchover operations. This area includes enhancements in: Control of PostgreSQL physical replication, such as synchronous replication, (cascading) replication clusters, and so on Connection pooling, to improve performance and control through a connection pooling layer with pgBouncer PostgreSQL WAL archive The operator supports PostgreSQL continuous archiving of WAL files to an object store (AWS S3 and S3-compatible, Azure Blob Storage, Google Cloud Storage, and gateways like MinIO). WAL archiving is defined at the cluster level, declaratively, through the backup parameter in the cluster definition. This is done by specifying an S3 protocol destination URL (for example, to point to a specific folder in an AWS S3 bucket) and, optionally, a generic endpoint URL. WAL archiving, a prerequisite for continuous backup, doesn't require any further user action. The operator transparently sets the archive_command to rely on barman-cloud-wal-archive to ship WAL files to the defined endpoint. You can decide the compression algorithm, as well as the number of parallel jobs to concurrently upload WAL files in the archive. In addition, Instance Manager checks the correctness of the archive destination by performing the barman-cloud-check-wal-archive command before beginning to ship the first set of WAL files. PostgreSQL Backups CloudNativePG provides a pluggable interface (CNPG-I) for managing application-level backups using PostgreSQL\u2019s native physical backup mechanisms\u2014namely base backups and continuous WAL archiving. This design enables flexibility and extensibility while ensuring consistency and performance. The CloudNativePG Community officially supports the Barman Cloud Plugin , which enables continuous physical backups to object stores, along with full and Point-In-Time Recovery (PITR) capabilities. In addition to CNPG-I plugins, CloudNativePG also natively supports backups using Kubernetes volume snapshots, when supported by the underlying storage class and CSI driver. You can initiate base backups in two ways: On-demand, using the Backup custom resource Scheduled, using the ScheduledBackup custom resource, with a cron-like schedule format Volume snapshots leverage the Kubernetes API and are particularly effective for very large databases (VLDBs) due to their speed and storage efficiency. Both volume snapshots and CNPG-I-based backups support: Hot backups: Taken while PostgreSQL is running, ensuring minimal disruption. Cold backups: Performed by temporarily stopping PostgreSQL to ensure a fully consistent snapshot, when required. Backups from a standby The operator supports offloading base backups onto a standby without impacting the RPO of the database. This allows resources to be preserved on the primary, in particular I/O, for standard database operations. Full restore from a backup The operator enables you to bootstrap a new cluster (with its settings) starting from an existing and accessible backup, either on a volume snapshot, or in an object store, or via a plugin. Once the bootstrap process is completed, the operator initiates the instance in recovery mode. It replays all available WAL files from the specified archive, exiting recovery and starting as a primary. Subsequently, the operator clones the requested number of standby instances from the primary. CloudNativePG supports parallel WAL fetching from the archive. Point-in-time recovery (PITR) from a backup The operator enables you to create a new PostgreSQL cluster by recovering an existing backup to a specific point in time, defined with a timestamp, a label, or a transaction ID. This capability is built on top of the full restore one and supports all the options available in PostgreSQL for PITR . Zero-Data-Loss Clusters Through Synchronous Replication Achieve zero data loss (RPO=0) in your local high-availability CloudNativePG cluster with support for both quorum-based and priority-based synchronous replication. The operator offers a flexible way to define the number of expected synchronous standby replicas available at any time, and allows customization of the synchronous_standby_names option as needed. Replica clusters Establish a robust cross-Kubernetes cluster topology for PostgreSQL clusters, harnessing the power of native streaming and cascading replication. With the replica option, you can configure an autonomous cluster to consistently replicate data from another PostgreSQL source of the same major version. This source can be located anywhere, provided you have access to a WAL archive for fetching WAL files or a direct streaming connection via TLS between the two endpoints. Notably, the source PostgreSQL instance can exist outside the Kubernetes environment, whether in a physical or virtual setting. Replica clusters can be instantiated through various methods, including volume snapshots, a recovery object store (using the Barman Cloud backup format), or streaming using pg_basebackup . Both WAL file shipping and WAL streaming are supported. The deployment of replica clusters significantly elevates the business continuity posture of PostgreSQL databases within Kubernetes, extending across multiple data centers and facilitating hybrid and multi-cloud setups. (While anticipating Kubernetes federation native capabilities, manual switchover across data centers remains necessary.) Additionally, the flexibility extends to creating delayed replica clusters intentionally lagging behind the primary cluster. This intentional lag aims to minimize the Recovery Time Objective ( RTO ) in the event of unintended errors, such as incorrect DELETE or UPDATE SQL operations. Distributed Database Topologies Leverage replica clusters to define distributed database topologies for PostgreSQL that span across various Kubernetes clusters, facilitating hybrid and multi-cloud deployments. With CloudNativePG, you gain powerful capabilities, including: Declarative Primary Control : Easily specify which PostgreSQL cluster acts as the primary. Seamless Primary Switchover : Effortlessly demote the current primary and promote another PostgreSQL cluster, typically located in a different region, without needing to re-clone the former primary. This setup can efficiently operate across two or more regions, can rely entirely on object stores for replication, and guarantees a maximum RPO (Recovery Point Objective) of 5 minutes. This advanced feature is uniquely provided by CloudNativePG, ensuring robust data integrity and continuity across diverse environments. Tablespace support CloudNativePG seamlessly integrates robust support for PostgreSQL tablespaces by facilitating the declarative definition of individual persistent volumes. This innovative feature empowers you to efficiently distribute I/O operations across a diverse array of storage devices. Through the transparent orchestration of tablespaces, CloudNativePG enhances the performance and scalability of PostgreSQL databases, ensuring a streamlined and optimized experience for managing large scale data storage in cloud-native environments. Support for temporary tablespaces is also included. Customizable Startup, Liveness, and Readiness Probes CloudNativePG configures startup, liveness, and readiness probes for PostgreSQL containers, which are managed by the Kubernetes kubelet. These probes interact with the /startupz , /healthz , and /readyz endpoints exposed by the instance manager's web server to monitor the Pod's health and readiness. All probes are configured with default settings but can be fully customized to meet specific needs, allowing for fine-tuning to align with your environment and workloads. For detailed configuration options and advanced usage, refer to the Postgres instance manager documentation. Rolling deployments The operator supports rolling deployments to minimize the downtime. If a PostgreSQL cluster is exposed publicly, the service load-balances the read-only traffic only to available pods during the initialization or the update. Scale up and down of replicas The operator allows you to scale up and down the number of instances in a PostgreSQL cluster. New replicas are started up from the primary server and participate in the cluster's HA infrastructure. The CRD declares a \"scale\" subresource that allows you to use the kubectl scale command. Maintenance window and PodDisruptionBudget for Kubernetes nodes The operator creates a PodDisruptionBudget resource to limit the number of concurrent disruptions to one primary instance. This configuration prevents the maintenance operation from deleting all the pods in a cluster, allowing the specified number of instances to be created. The PodDisruptionBudget is applied during the node-draining operation, preventing any disruption of the cluster service. While this strategy is correct for Kubernetes clusters where storage is shared among all the worker nodes, it might not be the best solution for clusters using local storage or for clusters installed in a private cloud. The operator allows you to specify a maintenance window and configure the reaction to any underlying node eviction. The ReusePVC option in the maintenance window section enables to specify the strategy to use. Allocate new storage in a different PVC for the evicted instance, or wait for the underlying node to be available again. Fencing Fencing is the process of protecting the data in one, more, or even all instances of a PostgreSQL cluster when they appear to be malfunctioning. When an instance is fenced, the PostgreSQL server process is guaranteed to be shut down, while the pod is kept running. This ensures that, until the fence is lifted, data on the pod isn't modified by PostgreSQL and that you can investigate file system for debugging and troubleshooting purposes. Hibernation CloudNativePG supports hibernation of a running PostgreSQL cluster in a declarative manner, through the cnpg.io/hibernation annotation. Hibernation enables saving CPU power by removing the database pods while keeping the database PVCs. This feature simulates scaling to 0 instances. Reuse of persistent volumes storage in pods When the operator needs to create a pod that was deleted by the user or was evicted by a Kubernetes maintenance operation, it reuses the PersistentVolumeClaim , if available. This ability avoids the need to clone the data from the primary again. CPU and memory requests and limits The operator allows administrators to control and manage resource usage by the cluster's pods in the resources section of the manifest. In particular, you can set requests and limits values for both CPU and RAM. Connection pooling with PgBouncer CloudNativePG provides native support for connection pooling with PgBouncer , one of the most popular open source connection poolers for PostgreSQL. From an architectural point of view, the native implementation of a PgBouncer connection pooler introduces a new layer to access the database. This optimizes the query flow toward the instances and makes the use of the underlying PostgreSQL resources more efficient. Instead of connecting directly to a PostgreSQL service, applications can now connect to the PgBouncer service and start reusing any existing connection. Logical Replication CloudNativePG supports PostgreSQL's logical replication in a declarative manner using Publication and Subscription custom resource definitions. Logical replication is particularly useful together with the import facility for online data migrations (even from public DBaaS solutions) and major PostgreSQL upgrades. Level 4: Deep insights Capability level 4 is about observability : monitoring, alerting, trending, and log processing. This might involve the use of external tools, such as Prometheus, Grafana, and Fluent Bit, as well as extensions in the PostgreSQL engine for the output of error logs directly in JSON format. CloudNativePG was designed to provide everything needed to easily integrate with industry-standard and community-accepted tools for flexible monitoring and logging. Prometheus exporter with configurable queries The instance manager provides a pluggable framework. By way of its own web server listening on the metrics port (9187), it exposes an endpoint to export metrics for the Prometheus monitoring and alerting tool. The operator supports custom monitoring queries defined as ConfigMap or Secret objects using a syntax that's compatible with postgres_exporter for Prometheus . CloudNativePG provides a set of basic monitoring queries for PostgreSQL that can be integrated and adapted to your context. Grafana dashboard CloudNativePG comes with a Grafana dashboard that you can use as a base to monitor all critical aspects of a PostgreSQL cluster, and customize. Standard output logging of PostgreSQL error messages in JSON format Every log message is delivered to standard output in JSON format. The first level is the definition of the timestamp, the log level, and the type of log entry, such as postgres for the canonical PostgreSQL error message channel. As a result, every pod managed by CloudNativePG can be easily and directly integrated with any downstream log processing stack that supports JSON as source data type. Real-time query monitoring CloudNativePG transparently and natively supports: The essential pg_stat_statements extension , which enables tracking of planning and execution statistics of all SQL statements executed by a PostgreSQL server The auto_explain extension , which provides a means for logging execution plans of slow statements automatically, without having to manually run EXPLAIN (helpful for tracking down un-optimized queries) The pg_failover_slots extension , which makes logical replication slots usable across a physical failover, ensuring resilience in change data capture (CDC) contexts based on PostgreSQL's native logical replication Audit CloudNativePG allows database and security administrators, auditors, and operators to track and analyze database activities using PGAudit for PostgreSQL. Such activities flow directly in the JSON log and can be properly routed to the correct downstream target using common log brokers like Fluentd. Kubernetes events Record major events as expected by the Kubernetes API, such as creating resources, removing nodes, and upgrading. Events can be displayed by using the kubectl describe and kubectl get events commands. Level 5: Auto pilot Capability level 5 is focused on automated scaling, healing, and tuning through the discovery of anomalies and insights that emerged from the observability layer. Automated failover for self-healing In case of detected failure on the primary, the operator changes the status of the cluster by setting the most aligned replica as the new target primary. As a consequence, the instance manager in each alive pod initiates the required procedures to align itself with the requested status of the cluster. It does this by either becoming the new primary or by following it. In case the former primary comes back up, the same mechanism avoids a split-brain by preventing applications from reaching it, running pg_rewind on the server and restarting it as a standby. Automated recreation of a standby If the pod hosting a standby is removed, the operator initiates the procedure to re-create a standby server.","title":"Operator capability levels"},{"location":"operator_capability_levels/#operator-capability-levels","text":"These capabilities were implemented by CloudNativePG, classified using the Operator SDK definition of Capability Levels framework. Important Based on the Operator Capability Levels model , you can expect a \"Level V - Auto Pilot\" set of capabilities from the CloudNativePG operator. Each capability level is associated with a certain set of management features the operator offers: Basic install Seamless upgrades Full lifecycle Deep insights Auto pilot Note We consider this framework as a guide for future work and implementations in the operator.","title":"Operator capability levels"},{"location":"operator_capability_levels/#level-1-basic-install","text":"Capability level 1 involves installing and configuring the operator. This category includes usability and user experience enhancements, such as improvements in how you interact with the operator and a PostgreSQL cluster configuration. Important We consider information security part of this level.","title":"Level 1: Basic install"},{"location":"operator_capability_levels/#operator-deployment-via-declarative-configuration","text":"The operator is installed in a declarative way using a Kubernetes manifest that defines four major CustomResourceDefinition objects: Cluster , Pooler , Backup , and ScheduledBackup .","title":"Operator deployment via declarative configuration"},{"location":"operator_capability_levels/#postgresql-cluster-deployment-via-declarative-configuration","text":"You define a PostgreSQL cluster (operand) using the Cluster custom resource in a fully declarative way. The PostgreSQL version is determined by the operand container image defined in the CR, which is automatically fetched from the requested registry. When deploying an operand, the operator also creates the following resources: Pod , Service , Secret , ConfigMap , PersistentVolumeClaim , PodDisruptionBudget , ServiceAccount , RoleBinding , and Role .","title":"PostgreSQL cluster deployment via declarative configuration"},{"location":"operator_capability_levels/#override-of-operand-images-through-the-crd","text":"The operator is designed to support any operand container image with PostgreSQL inside. By default, the operator uses the latest available minor version of the latest stable major version supported by the PostgreSQL community and published on ghcr.io. You can use any compatible image of PostgreSQL supporting the primary/standby architecture directly by setting the imageName attribute in the CR. The operator also supports imagePullSecrets to access private container registries, and it supports digests and tags for finer control of container image immutability. If you prefer not to specify an image name, you can leverage image catalogs by simply referencing the PostgreSQL major version. Moreover, image catalogs enable you to effortlessly create custom catalogs, directing to images based on your specific requirements.","title":"Override of operand images through the CRD"},{"location":"operator_capability_levels/#labels-and-annotations","text":"You can configure the operator to support inheriting labels and annotations that are defined in a cluster's metadata. The goal is to improve the organization of the CloudNativePG deployment in your Kubernetes infrastructure.","title":"Labels and annotations"},{"location":"operator_capability_levels/#self-contained-instance-manager","text":"Instead of relying on an external tool to coordinate PostgreSQL instances in the Kubernetes cluster pods, such as Patroni or Stolon, the operator injects the operator executable inside each pod, in a file named /controller/manager . The application is used to control the underlying PostgreSQL instance and to reconcile the pod status with the instance based on the PostgreSQL cluster topology. The instance manager also starts a web server that's invoked by the kubelet for probes. Unix signals invoked by the kubelet are filtered by the instance manager. Where appropriate, they're forwarded to the postgres process for fast and controlled reactions to external events. The instance manager is written in Go and has no external dependencies.","title":"Self-contained instance manager"},{"location":"operator_capability_levels/#storage-configuration","text":"Storage is a critical component in a database workload. Taking advantage of the Kubernetes native capabilities and resources in terms of storage, the operator gives you enough flexibility to choose the right storage for your workload requirements, based on what the underlying Kubernetes environment can offer. This implies choosing a particular storage class in a public cloud environment or fine-tuning the generated PVC through a PVC template in the CR's storage parameter. For better performance and finer control, you can also choose to host your cluster's write-ahead log (WAL, also known as pg_wal ) on a separate volume, preferably on different storage. The \"Benchmarking\" section of the documentation provides detailed instructions on benchmarking both storage and the database before production. It relies on the cnpg plugin to ensure optimal performance and reliability.","title":"Storage configuration"},{"location":"operator_capability_levels/#replica-configuration","text":"The operator detects replicas in a cluster through a single parameter, called instances . If set to 1 , the cluster comprises a single primary PostgreSQL instance with no replica. If higher than 1 , the operator manages instances -1 replicas, including high availability (HA) through automated failover and rolling updates through switchover operations. CloudNativePG manages replication slots for all replicas in the high-availability cluster. It also supports user-defined physical replication slots on the primary and enables logical decoding failover\u2014natively for PostgreSQL 17 and later using sync_replication_slots , and through the pg_failover_slots extension for earlier versions.","title":"Replica configuration"},{"location":"operator_capability_levels/#service-configuration","text":"By default, CloudNativePG creates three Kubernetes services for applications to access the cluster via the network: One pointing to the primary for read/write operations. One pointing to replicas for read-only queries. A generic one pointing to any instance for read operations. You can disable the read-only and read services via configuration. Additionally, you can leverage the service template capability to create custom service resources, including load balancers, to access PostgreSQL outside Kubernetes. This is particularly useful for DBaaS purposes.","title":"Service Configuration"},{"location":"operator_capability_levels/#database-configuration","text":"The operator is designed to bootstrap a PostgreSQL cluster with a single database. The operator transparently manages network access to the cluster through three Kubernetes services provisioned and managed for read-write, read, and read-only workloads. Using the convention-over-configuration approach, the operator creates a database called app , by default owned by a regular Postgres user with the same name. You can specify both the database name and the user name, if required, as part of the bootstrap. Additional databases can be created or managed via declarative database management using the Database CRD, also supporting extensions and schemas. Although no configuration is required to run the cluster, you can customize both PostgreSQL runtime configuration and PostgreSQL host-based authentication rules in the postgresql section of the CR.","title":"Database configuration"},{"location":"operator_capability_levels/#configuration-of-postgres-roles-users-and-groups","text":"CloudNativePG supports management of PostgreSQL roles, users, and groups through declarative configuration using the .spec.managed.roles stanza.","title":"Configuration of Postgres roles, users, and groups"},{"location":"operator_capability_levels/#pod-security-standards","text":"For InfoSec requirements, the operator doesn't require privileged mode for any container. It enforces a read-only root filesystem to guarantee containers immutability for both the operator and the operand pods. It also explicitly sets the required security contexts.","title":"Pod security standards"},{"location":"operator_capability_levels/#affinity","text":"The cluster's affinity section enables fine-tuning of how pods and related resources, such as persistent volumes, are scheduled across the nodes of a Kubernetes cluster. In particular, the operator supports: Pod affinity and anti-affinity Node selector Taints and tolerations","title":"Affinity"},{"location":"operator_capability_levels/#topology-spread-constraints","text":"The cluster's topologySpreadConstraints section enables additional control of scheduling pods across topologies, enhancing what affinity and anti-affinity can offer.","title":"Topology spread constraints"},{"location":"operator_capability_levels/#command-line-interface","text":"CloudNativePG doesn't have its own command-line interface. It relies on the best command-line interface for Kubernetes, kubectl, by providing a plugin called cnpg . This plugin enhances and simplifies your PostgreSQL cluster management experience.","title":"Command-line interface"},{"location":"operator_capability_levels/#current-status-of-the-cluster","text":"The operator continuously updates the status section of the CR with the observed status of the cluster. The entire PostgreSQL cluster status is continuously monitored by the instance manager running in each pod. The instance manager is responsible for applying the required changes to the controlled PostgreSQL instance to converge to the required status of the cluster. (For example, if the cluster status reports that pod -1 is the primary, pod -1 needs to promote itself while the other pods need to follow pod -1 .) The same status is used by the cnpg plugin for kubectl to provide details.","title":"Current status of the cluster"},{"location":"operator_capability_levels/#operators-certification-authority","text":"The operator creates a certification authority for itself. It creates and signs with the operator certification authority a leaf certificate for the webhook server to use. This certificate ensures safe communication between the Kubernetes API server and the operator.","title":"Operator's certification authority"},{"location":"operator_capability_levels/#clusters-certification-authority","text":"The operator creates a certification authority for every PostgreSQL cluster. This certification authority is used to issue and renew TLS certificates for clients' authentication, including streaming replication standby servers (instead of passwords). Support for a custom certification authority for client certificates is available through secrets, which also includes integration with cert-manager. Certificates can be issued with the cnpg plugin for kubectl.","title":"Cluster's certification authority"},{"location":"operator_capability_levels/#tls-connections","text":"The operator transparently and natively supports TLS/SSL connections to encrypt client/server communications for increased security using the cluster's certification authority. Support for custom server certificates is available through secrets, which also includes integration with cert-manager.","title":"TLS connections"},{"location":"operator_capability_levels/#certificate-authentication-for-streaming-replication","text":"To authorize streaming replication connections from the standby servers, the operator relies on TLS client certificate authentication. This method is used instead of relying on a password (and therefore a secret).","title":"Certificate authentication for streaming replication"},{"location":"operator_capability_levels/#continuous-configuration-management","text":"The operator enables you to apply changes to the Cluster resource YAML section of the PostgreSQL configuration. Depending on the configuration option, it also makes sure that all instances are properly reloaded or restarted. Note Changes with ALTER SYSTEM aren't detected, meaning that the cluster state isn't enforced.","title":"Continuous configuration management"},{"location":"operator_capability_levels/#import-of-existing-postgresql-databases","text":"The operator provides a declarative way to import existing Postgres databases in a new CloudNativePG cluster in Kubernetes, using offline migrations. The same feature also covers offline major upgrades of PostgreSQL databases. Offline means that applications must stop their write operations at the source until the database is imported. The feature extends the initdb bootstrap method to create a new PostgreSQL cluster using a logical snapshot of the data available in another PostgreSQL database. This data can be accessed by way of the network through a superuser connection. Import is from any supported version of Postgres. It relies on pg_dump and pg_restore being executed from the new cluster primary for all databases that are part of the operation and, if requested, for roles.","title":"Import of existing PostgreSQL databases"},{"location":"operator_capability_levels/#postgis-clusters","text":"CloudNativePG supports the installation of clusters with the PostGIS open source extension for geographical databases. This extension is one of the most popular extensions for PostgreSQL.","title":"PostGIS clusters"},{"location":"operator_capability_levels/#basic-ldap-authentication-for-postgresql","text":"The operator allows you to configure LDAP authentication for your PostgreSQL clients, using either the simple bind or search+bind mode, as described in the LDAP authentication section of the PostgreSQL documentation .","title":"Basic LDAP authentication for PostgreSQL"},{"location":"operator_capability_levels/#multiple-installation-methods","text":"The operator can be installed through a Kubernetes manifest by way of kubectl apply , to be used in a traditional Kubernetes installation in public and private cloud environments. CloudNativePG also supports installation by way of a Helm chart or OLM bundle from OperatorHub.io.","title":"Multiple installation methods"},{"location":"operator_capability_levels/#convention-over-configuration","text":"The operator supports the convention-over-configuration paradigm, deciding standard default values while allowing you to override them and customize them. You can specify a deployment of a PostgreSQL cluster using the Cluster CRD in a couple of lines of YAML code.","title":"Convention over configuration"},{"location":"operator_capability_levels/#level-2-seamless-upgrades","text":"Capability level 2 is about enabling updates of the operator and the actual workload, in this case PostgreSQL servers. This includes PostgreSQL minor release updates (security and bug fixes normally) as well as major online upgrades.","title":"Level 2: Seamless upgrades"},{"location":"operator_capability_levels/#operator-upgrade","text":"Upgrading the operator is seamless and can be done as a new deployment. After upgrading the controller, a rolling update of all deployed PostgreSQL clusters is initiated. You can choose to update all clusters simultaneously or distribute their upgrades over time. Thanks to the instance manager's injection, upgrading the operator does not require changes to the operand, allowing the operator to manage older versions of it. Additionally, CloudNativePG supports in-place updates of the instance manager following an operator upgrade. In-place updates do not require a rolling update or a subsequent switchover of the cluster.","title":"Operator Upgrade"},{"location":"operator_capability_levels/#upgrade-of-the-managed-workload","text":"The operand can be upgraded using a declarative configuration approach as part of changing the CR and, in particular, the imageName parameter. This is normally initiated by security updates or Postgres minor version updates. In the presence of standby servers, the operator performs rolling updates starting from the replicas. It does this by dropping the existing pod and creating a new one with the new requested operand image that reuses the underlying storage. Depending on the value of the primaryUpdateStrategy , the operator proceeds with a switchover before updating the former primary ( unsupervised ). Or, it waits for the user to manually issue the switchover procedure ( supervised ) by way of the cnpg plugin for kubectl. The setting to use depends on the business requirements, as the operation might generate some downtime for the applications. This downtime can range from a few seconds to minutes, based on the actual database workload.","title":"Upgrade of the managed workload"},{"location":"operator_capability_levels/#offline-in-place-major-upgrades-of-postgresql","text":"CloudNativePG supports declarative offline in-place major upgrades when a new operand container image with a higher PostgreSQL major version is applied to a cluster. The upgrade can be triggered by updating the image tag via the .spec.imageName option or by using an image catalog to manage version changes. During the upgrade, all cluster pods are shut down to ensure data consistency. A new job is then created to validate the upgrade conditions, execute pg_upgrade , and create new directories for PGDATA , WAL files, and tablespaces if needed. Once the upgrade is complete, replicas are re-created. Failed upgrades can be rolled back.","title":"Offline In-Place Major Upgrades of PostgreSQL"},{"location":"operator_capability_levels/#display-cluster-availability-status-during-upgrade","text":"At any time, convey the cluster's high availability status, for example, Setting up primary , Creating a new replica , Cluster in healthy state , Switchover in progress , Failing over , Upgrading cluster , and Upgrading Postgres major version .","title":"Display cluster availability status during upgrade"},{"location":"operator_capability_levels/#level-3-full-lifecycle","text":"Capability level 3 requires the operator to manage aspects of business continuity and scalability. Disaster recovery is a business continuity component that requires that both backup and recovery of a database work correctly. While as a starting point, the goal is to achieve RPO < 5 minutes, the long-term goal is to implement RPO=0 backup solutions. High availability is the other important component of business continuity. Through PostgreSQL native physical replication and hot standby replicas, it allows the operator to perform failover and switchover operations. This area includes enhancements in: Control of PostgreSQL physical replication, such as synchronous replication, (cascading) replication clusters, and so on Connection pooling, to improve performance and control through a connection pooling layer with pgBouncer","title":"Level 3: Full lifecycle"},{"location":"operator_capability_levels/#postgresql-wal-archive","text":"The operator supports PostgreSQL continuous archiving of WAL files to an object store (AWS S3 and S3-compatible, Azure Blob Storage, Google Cloud Storage, and gateways like MinIO). WAL archiving is defined at the cluster level, declaratively, through the backup parameter in the cluster definition. This is done by specifying an S3 protocol destination URL (for example, to point to a specific folder in an AWS S3 bucket) and, optionally, a generic endpoint URL. WAL archiving, a prerequisite for continuous backup, doesn't require any further user action. The operator transparently sets the archive_command to rely on barman-cloud-wal-archive to ship WAL files to the defined endpoint. You can decide the compression algorithm, as well as the number of parallel jobs to concurrently upload WAL files in the archive. In addition, Instance Manager checks the correctness of the archive destination by performing the barman-cloud-check-wal-archive command before beginning to ship the first set of WAL files.","title":"PostgreSQL WAL archive"},{"location":"operator_capability_levels/#postgresql-backups","text":"CloudNativePG provides a pluggable interface (CNPG-I) for managing application-level backups using PostgreSQL\u2019s native physical backup mechanisms\u2014namely base backups and continuous WAL archiving. This design enables flexibility and extensibility while ensuring consistency and performance. The CloudNativePG Community officially supports the Barman Cloud Plugin , which enables continuous physical backups to object stores, along with full and Point-In-Time Recovery (PITR) capabilities. In addition to CNPG-I plugins, CloudNativePG also natively supports backups using Kubernetes volume snapshots, when supported by the underlying storage class and CSI driver. You can initiate base backups in two ways: On-demand, using the Backup custom resource Scheduled, using the ScheduledBackup custom resource, with a cron-like schedule format Volume snapshots leverage the Kubernetes API and are particularly effective for very large databases (VLDBs) due to their speed and storage efficiency. Both volume snapshots and CNPG-I-based backups support: Hot backups: Taken while PostgreSQL is running, ensuring minimal disruption. Cold backups: Performed by temporarily stopping PostgreSQL to ensure a fully consistent snapshot, when required.","title":"PostgreSQL Backups"},{"location":"operator_capability_levels/#backups-from-a-standby","text":"The operator supports offloading base backups onto a standby without impacting the RPO of the database. This allows resources to be preserved on the primary, in particular I/O, for standard database operations.","title":"Backups from a standby"},{"location":"operator_capability_levels/#full-restore-from-a-backup","text":"The operator enables you to bootstrap a new cluster (with its settings) starting from an existing and accessible backup, either on a volume snapshot, or in an object store, or via a plugin. Once the bootstrap process is completed, the operator initiates the instance in recovery mode. It replays all available WAL files from the specified archive, exiting recovery and starting as a primary. Subsequently, the operator clones the requested number of standby instances from the primary. CloudNativePG supports parallel WAL fetching from the archive.","title":"Full restore from a backup"},{"location":"operator_capability_levels/#point-in-time-recovery-pitr-from-a-backup","text":"The operator enables you to create a new PostgreSQL cluster by recovering an existing backup to a specific point in time, defined with a timestamp, a label, or a transaction ID. This capability is built on top of the full restore one and supports all the options available in PostgreSQL for PITR .","title":"Point-in-time recovery (PITR) from a backup"},{"location":"operator_capability_levels/#zero-data-loss-clusters-through-synchronous-replication","text":"Achieve zero data loss (RPO=0) in your local high-availability CloudNativePG cluster with support for both quorum-based and priority-based synchronous replication. The operator offers a flexible way to define the number of expected synchronous standby replicas available at any time, and allows customization of the synchronous_standby_names option as needed.","title":"Zero-Data-Loss Clusters Through Synchronous Replication"},{"location":"operator_capability_levels/#replica-clusters","text":"Establish a robust cross-Kubernetes cluster topology for PostgreSQL clusters, harnessing the power of native streaming and cascading replication. With the replica option, you can configure an autonomous cluster to consistently replicate data from another PostgreSQL source of the same major version. This source can be located anywhere, provided you have access to a WAL archive for fetching WAL files or a direct streaming connection via TLS between the two endpoints. Notably, the source PostgreSQL instance can exist outside the Kubernetes environment, whether in a physical or virtual setting. Replica clusters can be instantiated through various methods, including volume snapshots, a recovery object store (using the Barman Cloud backup format), or streaming using pg_basebackup . Both WAL file shipping and WAL streaming are supported. The deployment of replica clusters significantly elevates the business continuity posture of PostgreSQL databases within Kubernetes, extending across multiple data centers and facilitating hybrid and multi-cloud setups. (While anticipating Kubernetes federation native capabilities, manual switchover across data centers remains necessary.) Additionally, the flexibility extends to creating delayed replica clusters intentionally lagging behind the primary cluster. This intentional lag aims to minimize the Recovery Time Objective ( RTO ) in the event of unintended errors, such as incorrect DELETE or UPDATE SQL operations.","title":"Replica clusters"},{"location":"operator_capability_levels/#distributed-database-topologies","text":"Leverage replica clusters to define distributed database topologies for PostgreSQL that span across various Kubernetes clusters, facilitating hybrid and multi-cloud deployments. With CloudNativePG, you gain powerful capabilities, including: Declarative Primary Control : Easily specify which PostgreSQL cluster acts as the primary. Seamless Primary Switchover : Effortlessly demote the current primary and promote another PostgreSQL cluster, typically located in a different region, without needing to re-clone the former primary. This setup can efficiently operate across two or more regions, can rely entirely on object stores for replication, and guarantees a maximum RPO (Recovery Point Objective) of 5 minutes. This advanced feature is uniquely provided by CloudNativePG, ensuring robust data integrity and continuity across diverse environments.","title":"Distributed Database Topologies"},{"location":"operator_capability_levels/#tablespace-support","text":"CloudNativePG seamlessly integrates robust support for PostgreSQL tablespaces by facilitating the declarative definition of individual persistent volumes. This innovative feature empowers you to efficiently distribute I/O operations across a diverse array of storage devices. Through the transparent orchestration of tablespaces, CloudNativePG enhances the performance and scalability of PostgreSQL databases, ensuring a streamlined and optimized experience for managing large scale data storage in cloud-native environments. Support for temporary tablespaces is also included.","title":"Tablespace support"},{"location":"operator_capability_levels/#customizable-startup-liveness-and-readiness-probes","text":"CloudNativePG configures startup, liveness, and readiness probes for PostgreSQL containers, which are managed by the Kubernetes kubelet. These probes interact with the /startupz , /healthz , and /readyz endpoints exposed by the instance manager's web server to monitor the Pod's health and readiness. All probes are configured with default settings but can be fully customized to meet specific needs, allowing for fine-tuning to align with your environment and workloads. For detailed configuration options and advanced usage, refer to the Postgres instance manager documentation.","title":"Customizable Startup, Liveness, and Readiness Probes"},{"location":"operator_capability_levels/#rolling-deployments","text":"The operator supports rolling deployments to minimize the downtime. If a PostgreSQL cluster is exposed publicly, the service load-balances the read-only traffic only to available pods during the initialization or the update.","title":"Rolling deployments"},{"location":"operator_capability_levels/#scale-up-and-down-of-replicas","text":"The operator allows you to scale up and down the number of instances in a PostgreSQL cluster. New replicas are started up from the primary server and participate in the cluster's HA infrastructure. The CRD declares a \"scale\" subresource that allows you to use the kubectl scale command.","title":"Scale up and down of replicas"},{"location":"operator_capability_levels/#maintenance-window-and-poddisruptionbudget-for-kubernetes-nodes","text":"The operator creates a PodDisruptionBudget resource to limit the number of concurrent disruptions to one primary instance. This configuration prevents the maintenance operation from deleting all the pods in a cluster, allowing the specified number of instances to be created. The PodDisruptionBudget is applied during the node-draining operation, preventing any disruption of the cluster service. While this strategy is correct for Kubernetes clusters where storage is shared among all the worker nodes, it might not be the best solution for clusters using local storage or for clusters installed in a private cloud. The operator allows you to specify a maintenance window and configure the reaction to any underlying node eviction. The ReusePVC option in the maintenance window section enables to specify the strategy to use. Allocate new storage in a different PVC for the evicted instance, or wait for the underlying node to be available again.","title":"Maintenance window and PodDisruptionBudget for Kubernetes nodes"},{"location":"operator_capability_levels/#fencing","text":"Fencing is the process of protecting the data in one, more, or even all instances of a PostgreSQL cluster when they appear to be malfunctioning. When an instance is fenced, the PostgreSQL server process is guaranteed to be shut down, while the pod is kept running. This ensures that, until the fence is lifted, data on the pod isn't modified by PostgreSQL and that you can investigate file system for debugging and troubleshooting purposes.","title":"Fencing"},{"location":"operator_capability_levels/#hibernation","text":"CloudNativePG supports hibernation of a running PostgreSQL cluster in a declarative manner, through the cnpg.io/hibernation annotation. Hibernation enables saving CPU power by removing the database pods while keeping the database PVCs. This feature simulates scaling to 0 instances.","title":"Hibernation"},{"location":"operator_capability_levels/#reuse-of-persistent-volumes-storage-in-pods","text":"When the operator needs to create a pod that was deleted by the user or was evicted by a Kubernetes maintenance operation, it reuses the PersistentVolumeClaim , if available. This ability avoids the need to clone the data from the primary again.","title":"Reuse of persistent volumes storage in pods"},{"location":"operator_capability_levels/#cpu-and-memory-requests-and-limits","text":"The operator allows administrators to control and manage resource usage by the cluster's pods in the resources section of the manifest. In particular, you can set requests and limits values for both CPU and RAM.","title":"CPU and memory requests and limits"},{"location":"operator_capability_levels/#connection-pooling-with-pgbouncer","text":"CloudNativePG provides native support for connection pooling with PgBouncer , one of the most popular open source connection poolers for PostgreSQL. From an architectural point of view, the native implementation of a PgBouncer connection pooler introduces a new layer to access the database. This optimizes the query flow toward the instances and makes the use of the underlying PostgreSQL resources more efficient. Instead of connecting directly to a PostgreSQL service, applications can now connect to the PgBouncer service and start reusing any existing connection.","title":"Connection pooling with PgBouncer"},{"location":"operator_capability_levels/#logical-replication","text":"CloudNativePG supports PostgreSQL's logical replication in a declarative manner using Publication and Subscription custom resource definitions. Logical replication is particularly useful together with the import facility for online data migrations (even from public DBaaS solutions) and major PostgreSQL upgrades.","title":"Logical Replication"},{"location":"operator_capability_levels/#level-4-deep-insights","text":"Capability level 4 is about observability : monitoring, alerting, trending, and log processing. This might involve the use of external tools, such as Prometheus, Grafana, and Fluent Bit, as well as extensions in the PostgreSQL engine for the output of error logs directly in JSON format. CloudNativePG was designed to provide everything needed to easily integrate with industry-standard and community-accepted tools for flexible monitoring and logging.","title":"Level 4: Deep insights"},{"location":"operator_capability_levels/#prometheus-exporter-with-configurable-queries","text":"The instance manager provides a pluggable framework. By way of its own web server listening on the metrics port (9187), it exposes an endpoint to export metrics for the Prometheus monitoring and alerting tool. The operator supports custom monitoring queries defined as ConfigMap or Secret objects using a syntax that's compatible with postgres_exporter for Prometheus . CloudNativePG provides a set of basic monitoring queries for PostgreSQL that can be integrated and adapted to your context.","title":"Prometheus exporter with configurable queries"},{"location":"operator_capability_levels/#grafana-dashboard","text":"CloudNativePG comes with a Grafana dashboard that you can use as a base to monitor all critical aspects of a PostgreSQL cluster, and customize.","title":"Grafana dashboard"},{"location":"operator_capability_levels/#standard-output-logging-of-postgresql-error-messages-in-json-format","text":"Every log message is delivered to standard output in JSON format. The first level is the definition of the timestamp, the log level, and the type of log entry, such as postgres for the canonical PostgreSQL error message channel. As a result, every pod managed by CloudNativePG can be easily and directly integrated with any downstream log processing stack that supports JSON as source data type.","title":"Standard output logging of PostgreSQL error messages in JSON format"},{"location":"operator_capability_levels/#real-time-query-monitoring","text":"CloudNativePG transparently and natively supports: The essential pg_stat_statements extension , which enables tracking of planning and execution statistics of all SQL statements executed by a PostgreSQL server The auto_explain extension , which provides a means for logging execution plans of slow statements automatically, without having to manually run EXPLAIN (helpful for tracking down un-optimized queries) The pg_failover_slots extension , which makes logical replication slots usable across a physical failover, ensuring resilience in change data capture (CDC) contexts based on PostgreSQL's native logical replication","title":"Real-time query monitoring"},{"location":"operator_capability_levels/#audit","text":"CloudNativePG allows database and security administrators, auditors, and operators to track and analyze database activities using PGAudit for PostgreSQL. Such activities flow directly in the JSON log and can be properly routed to the correct downstream target using common log brokers like Fluentd.","title":"Audit"},{"location":"operator_capability_levels/#kubernetes-events","text":"Record major events as expected by the Kubernetes API, such as creating resources, removing nodes, and upgrading. Events can be displayed by using the kubectl describe and kubectl get events commands.","title":"Kubernetes events"},{"location":"operator_capability_levels/#level-5-auto-pilot","text":"Capability level 5 is focused on automated scaling, healing, and tuning through the discovery of anomalies and insights that emerged from the observability layer.","title":"Level 5: Auto pilot"},{"location":"operator_capability_levels/#automated-failover-for-self-healing","text":"In case of detected failure on the primary, the operator changes the status of the cluster by setting the most aligned replica as the new target primary. As a consequence, the instance manager in each alive pod initiates the required procedures to align itself with the requested status of the cluster. It does this by either becoming the new primary or by following it. In case the former primary comes back up, the same mechanism avoids a split-brain by preventing applications from reaching it, running pg_rewind on the server and restarting it as a standby.","title":"Automated failover for self-healing"},{"location":"operator_capability_levels/#automated-recreation-of-a-standby","text":"If the pod hosting a standby is removed, the operator initiates the procedure to re-create a standby server.","title":"Automated recreation of a standby"},{"location":"operator_conf/","text":"Operator configuration The operator for CloudNativePG is installed from a standard deployment manifest and follows the convention over configuration paradigm. While this is fine in most cases, there are some scenarios where you want to change the default behavior, such as: defining annotations and labels to be inherited by all resources created by the operator and that are set in the cluster resource defining a different default image for PostgreSQL or an additional pull secret By default, the operator is installed in the cnpg-system namespace as a Kubernetes Deployment called cnpg-controller-manager . Note In the examples below we assume the default name and namespace for the operator deployment. The behavior of the operator can be customized through a ConfigMap / Secret that is located in the same namespace of the operator deployment and with cnpg-controller-manager-config as the name. Important Any change to the config's ConfigMap / Secret will not be automatically detected by the operator, - and as such, it needs to be reloaded (see below). Moreover, changes only apply to the resources created after the configuration is reloaded. Important The operator first processes the ConfigMap values and then the Secret\u2019s, in this order. As a result, if a parameter is defined in both places, the one in the Secret will be used. Available options The operator looks for the following environment variables to be defined in the ConfigMap / Secret : Name Description CERTIFICATE_DURATION Determines the lifetime of the generated certificates in days. Default is 90. CLUSTERS_ROLLOUT_DELAY The duration (in seconds) to wait between the roll-outs of different clusters during an operator upgrade. This setting controls the timing of upgrades across clusters, spreading them out to reduce system impact. The default value is 0 which means no delay between PostgreSQL cluster upgrades. CREATE_ANY_SERVICE When set to true , will create -any service for the cluster. Default is false ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES When set to true , enables in-place updates of the instance manager after an update of the operator, avoiding rolling updates of the cluster (default false ) EXPIRING_CHECK_THRESHOLD Determines the threshold, in days, for identifying a certificate as expiring. Default is 7. INCLUDE_PLUGINS A comma-separated list of plugins to be always included in the Cluster's reconciliation. INHERITED_ANNOTATIONS List of annotation names that, when defined in a Cluster metadata, will be inherited by all the generated resources, including pods INHERITED_LABELS List of label names that, when defined in a Cluster metadata, will be inherited by all the generated resources, including pods INSTANCES_ROLLOUT_DELAY The duration (in seconds) to wait between roll-outs of individual PostgreSQL instances within the same cluster during an operator upgrade. The default value is 0 , meaning no delay between upgrades of instances in the same PostgreSQL cluster. KUBERNETES_CLUSTER_DOMAIN Defines the domain suffix for service FQDNs within the Kubernetes cluster. If left unset, it defaults to \"cluster.local\". MONITORING_QUERIES_CONFIGMAP The name of a ConfigMap in the operator's namespace with a set of default queries (to be specified under the key queries ) to be applied to all created Clusters MONITORING_QUERIES_SECRET The name of a Secret in the operator's namespace with a set of default queries (to be specified under the key queries ) to be applied to all created Clusters OPERATOR_IMAGE_NAME The name of the operator image used to bootstrap Pods. Defaults to the image specified during installation. POSTGRES_IMAGE_NAME The name of the PostgreSQL image used by default for new clusters. Defaults to the version specified in the operator. PULL_SECRET_NAME Name of an additional pull secret to be defined in the operator's namespace and to be used to download images STANDBY_TCP_USER_TIMEOUT Defines the TCP_USER_TIMEOUT socket option for replication connections from standby instances to the primary. Default is 0 (system's default). DRAIN_TAINTS Specifies the taint keys that should be interpreted as indicators of node drain. By default, it includes the taints commonly applied by kubectl , Cluster Autoscaler , and Karpenter : node.kubernetes.io/unschedulable , ToBeDeletedByClusterAutoscaler , karpenter.sh/disrupted , karpenter.sh/disruption . Values in INHERITED_ANNOTATIONS and INHERITED_LABELS support path-like wildcards. For example, the value example.com/* will match both the value example.com/one and example.com/two . When you specify an additional pull secret name using the PULL_SECRET_NAME parameter, the operator will use that secret to create a pull secret for every created PostgreSQL cluster. That secret will be named <cluster-name>-pull . The namespace where the operator looks for the PULL_SECRET_NAME secret is where you installed the operator. If the operator is not able to find that secret, it will ignore the configuration parameter. Defining an operator config map The example below customizes the behavior of the operator, by defining the label/annotation names to be inherited by the resources created by any Cluster object that is deployed at a later time, by enabling in-place updates for the instance manager , and by spreading upgrades. apiVersion: v1 kind: ConfigMap metadata: name: cnpg-controller-manager-config namespace: cnpg-system data: CLUSTERS_ROLLOUT_DELAY: '60' ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true' INHERITED_ANNOTATIONS: categories INHERITED_LABELS: environment, workload, app INSTANCES_ROLLOUT_DELAY: '10' Defining an operator secret The example below customizes the behavior of the operator, by defining the label/annotation names to be inherited by the resources created by any Cluster object that is deployed at a later time, and by enabling in-place updates for the instance manager , and by spreading upgrades. apiVersion: v1 kind: Secret metadata: name: cnpg-controller-manager-config namespace: cnpg-system type: Opaque stringData: CLUSTERS_ROLLOUT_DELAY: '60' ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true' INHERITED_ANNOTATIONS: categories INHERITED_LABELS: environment, workload, app INSTANCES_ROLLOUT_DELAY: '10' Restarting the operator to reload configs For the change to be effective, you need to recreate the operator pods to reload the config map. If you have installed the operator on Kubernetes using the manifest you can do that by issuing: kubectl rollout restart deployment \\ -n cnpg-system \\ cnpg-controller-manager In general, given a specific namespace, you can delete the operator pods with the following command: kubectl delete pods -n [NAMESPACE_NAME_HERE] \\ -l app.kubernetes.io/name=cloudnative-pg Warning Customizations will be applied only to Cluster resources created after the reload of the operator deployment. Following the above example, if the Cluster definition contains a categories annotation and any of the environment , workload , or app labels, these will be inherited by all the resources generated by the deployment. pprof HTTP Server The operator can expose a PPROF HTTP server with the following endpoints on localhost:6060 : /debug/pprof/ . Responds to a request for \"/debug/pprof/\" with an HTML page listing the available profiles /debug/pprof/cmdline . Responds with the running program's command line, with arguments separated by NULL bytes. /debug/pprof/profile . Responds with the pprof-formatted cpu profile. Profiling lasts for duration specified in seconds GET parameter, or for 30 seconds if not specified. /debug/pprof/symbol . Looks up the program counters listed in the request, responding with a table mapping program counters to function names. /debug/pprof/trace . Responds with the execution trace in binary form. Tracing lasts for duration specified in seconds GET parameter, or for 1 second if not specified. To enable the operator you need to edit the operator deployment add the flag --pprof-server=true . You can do this by executing these commands: kubectl edit deployment -n cnpg-system cnpg-controller-manager Then on the edit page scroll down the container args and add --pprof-server=true , as in this example: containers: - args: - controller - --enable-leader-election - --config-map-name=cnpg-controller-manager-config - --secret-name=cnpg-controller-manager-config - --log-level=info - --pprof-server=true # relevant line command: - /manager Save the changes; the deployment now will execute a roll-out, and the new pod will have the PPROF server enabled. Once the pod is running you can exec inside the container by doing: kubectl exec -ti -n cnpg-system <pod name> -- bash Once inside execute: curl localhost:6060/debug/pprof/","title":"Operator configuration"},{"location":"operator_conf/#operator-configuration","text":"The operator for CloudNativePG is installed from a standard deployment manifest and follows the convention over configuration paradigm. While this is fine in most cases, there are some scenarios where you want to change the default behavior, such as: defining annotations and labels to be inherited by all resources created by the operator and that are set in the cluster resource defining a different default image for PostgreSQL or an additional pull secret By default, the operator is installed in the cnpg-system namespace as a Kubernetes Deployment called cnpg-controller-manager . Note In the examples below we assume the default name and namespace for the operator deployment. The behavior of the operator can be customized through a ConfigMap / Secret that is located in the same namespace of the operator deployment and with cnpg-controller-manager-config as the name. Important Any change to the config's ConfigMap / Secret will not be automatically detected by the operator, - and as such, it needs to be reloaded (see below). Moreover, changes only apply to the resources created after the configuration is reloaded. Important The operator first processes the ConfigMap values and then the Secret\u2019s, in this order. As a result, if a parameter is defined in both places, the one in the Secret will be used.","title":"Operator configuration"},{"location":"operator_conf/#available-options","text":"The operator looks for the following environment variables to be defined in the ConfigMap / Secret : Name Description CERTIFICATE_DURATION Determines the lifetime of the generated certificates in days. Default is 90. CLUSTERS_ROLLOUT_DELAY The duration (in seconds) to wait between the roll-outs of different clusters during an operator upgrade. This setting controls the timing of upgrades across clusters, spreading them out to reduce system impact. The default value is 0 which means no delay between PostgreSQL cluster upgrades. CREATE_ANY_SERVICE When set to true , will create -any service for the cluster. Default is false ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES When set to true , enables in-place updates of the instance manager after an update of the operator, avoiding rolling updates of the cluster (default false ) EXPIRING_CHECK_THRESHOLD Determines the threshold, in days, for identifying a certificate as expiring. Default is 7. INCLUDE_PLUGINS A comma-separated list of plugins to be always included in the Cluster's reconciliation. INHERITED_ANNOTATIONS List of annotation names that, when defined in a Cluster metadata, will be inherited by all the generated resources, including pods INHERITED_LABELS List of label names that, when defined in a Cluster metadata, will be inherited by all the generated resources, including pods INSTANCES_ROLLOUT_DELAY The duration (in seconds) to wait between roll-outs of individual PostgreSQL instances within the same cluster during an operator upgrade. The default value is 0 , meaning no delay between upgrades of instances in the same PostgreSQL cluster. KUBERNETES_CLUSTER_DOMAIN Defines the domain suffix for service FQDNs within the Kubernetes cluster. If left unset, it defaults to \"cluster.local\". MONITORING_QUERIES_CONFIGMAP The name of a ConfigMap in the operator's namespace with a set of default queries (to be specified under the key queries ) to be applied to all created Clusters MONITORING_QUERIES_SECRET The name of a Secret in the operator's namespace with a set of default queries (to be specified under the key queries ) to be applied to all created Clusters OPERATOR_IMAGE_NAME The name of the operator image used to bootstrap Pods. Defaults to the image specified during installation. POSTGRES_IMAGE_NAME The name of the PostgreSQL image used by default for new clusters. Defaults to the version specified in the operator. PULL_SECRET_NAME Name of an additional pull secret to be defined in the operator's namespace and to be used to download images STANDBY_TCP_USER_TIMEOUT Defines the TCP_USER_TIMEOUT socket option for replication connections from standby instances to the primary. Default is 0 (system's default). DRAIN_TAINTS Specifies the taint keys that should be interpreted as indicators of node drain. By default, it includes the taints commonly applied by kubectl , Cluster Autoscaler , and Karpenter : node.kubernetes.io/unschedulable , ToBeDeletedByClusterAutoscaler , karpenter.sh/disrupted , karpenter.sh/disruption . Values in INHERITED_ANNOTATIONS and INHERITED_LABELS support path-like wildcards. For example, the value example.com/* will match both the value example.com/one and example.com/two . When you specify an additional pull secret name using the PULL_SECRET_NAME parameter, the operator will use that secret to create a pull secret for every created PostgreSQL cluster. That secret will be named <cluster-name>-pull . The namespace where the operator looks for the PULL_SECRET_NAME secret is where you installed the operator. If the operator is not able to find that secret, it will ignore the configuration parameter.","title":"Available options"},{"location":"operator_conf/#defining-an-operator-config-map","text":"The example below customizes the behavior of the operator, by defining the label/annotation names to be inherited by the resources created by any Cluster object that is deployed at a later time, by enabling in-place updates for the instance manager , and by spreading upgrades. apiVersion: v1 kind: ConfigMap metadata: name: cnpg-controller-manager-config namespace: cnpg-system data: CLUSTERS_ROLLOUT_DELAY: '60' ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true' INHERITED_ANNOTATIONS: categories INHERITED_LABELS: environment, workload, app INSTANCES_ROLLOUT_DELAY: '10'","title":"Defining an operator config map"},{"location":"operator_conf/#defining-an-operator-secret","text":"The example below customizes the behavior of the operator, by defining the label/annotation names to be inherited by the resources created by any Cluster object that is deployed at a later time, and by enabling in-place updates for the instance manager , and by spreading upgrades. apiVersion: v1 kind: Secret metadata: name: cnpg-controller-manager-config namespace: cnpg-system type: Opaque stringData: CLUSTERS_ROLLOUT_DELAY: '60' ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true' INHERITED_ANNOTATIONS: categories INHERITED_LABELS: environment, workload, app INSTANCES_ROLLOUT_DELAY: '10'","title":"Defining an operator secret"},{"location":"operator_conf/#restarting-the-operator-to-reload-configs","text":"For the change to be effective, you need to recreate the operator pods to reload the config map. If you have installed the operator on Kubernetes using the manifest you can do that by issuing: kubectl rollout restart deployment \\ -n cnpg-system \\ cnpg-controller-manager In general, given a specific namespace, you can delete the operator pods with the following command: kubectl delete pods -n [NAMESPACE_NAME_HERE] \\ -l app.kubernetes.io/name=cloudnative-pg Warning Customizations will be applied only to Cluster resources created after the reload of the operator deployment. Following the above example, if the Cluster definition contains a categories annotation and any of the environment , workload , or app labels, these will be inherited by all the resources generated by the deployment.","title":"Restarting the operator to reload configs"},{"location":"operator_conf/#pprof-http-server","text":"The operator can expose a PPROF HTTP server with the following endpoints on localhost:6060 : /debug/pprof/ . Responds to a request for \"/debug/pprof/\" with an HTML page listing the available profiles /debug/pprof/cmdline . Responds with the running program's command line, with arguments separated by NULL bytes. /debug/pprof/profile . Responds with the pprof-formatted cpu profile. Profiling lasts for duration specified in seconds GET parameter, or for 30 seconds if not specified. /debug/pprof/symbol . Looks up the program counters listed in the request, responding with a table mapping program counters to function names. /debug/pprof/trace . Responds with the execution trace in binary form. Tracing lasts for duration specified in seconds GET parameter, or for 1 second if not specified. To enable the operator you need to edit the operator deployment add the flag --pprof-server=true . You can do this by executing these commands: kubectl edit deployment -n cnpg-system cnpg-controller-manager Then on the edit page scroll down the container args and add --pprof-server=true , as in this example: containers: - args: - controller - --enable-leader-election - --config-map-name=cnpg-controller-manager-config - --secret-name=cnpg-controller-manager-config - --log-level=info - --pprof-server=true # relevant line command: - /manager Save the changes; the deployment now will execute a roll-out, and the new pod will have the PPROF server enabled. Once the pod is running you can exec inside the container by doing: kubectl exec -ti -n cnpg-system <pod name> -- bash Once inside execute: curl localhost:6060/debug/pprof/","title":"pprof HTTP Server"},{"location":"postgis/","text":"PostGIS PostGIS is a very popular open source extension for PostgreSQL that introduces support for storing GIS (Geographic Information Systems) objects in the database and be queried via SQL. Important This section assumes you are familiar with PostGIS and provides some basic information about how to create a new PostgreSQL cluster with a PostGIS database in Kubernetes via CloudNativePG. The CloudNativePG Community maintains container images that are built on top of the official PostGIS images hosted on DockerHub . For more information please visit: The postgis-containers project in GitHub The postgis-containers Container Registry in GitHub Basic concepts about a PostGIS cluster Conceptually, a PostGIS-based PostgreSQL cluster (or simply a PostGIS cluster) is like any other PostgreSQL cluster. The only differences are: the presence in the system of PostGIS and related libraries the presence in the database(s) of the PostGIS extension Since CloudNativePG is based on Immutable Application Containers, the only way to provision PostGIS is to add it to the container image that you use for the operand. The \"Container Image Requirements\" section provides detailed instructions on how this is achieved. More simply, you can just use the PostGIS container images from the Community, as in the examples below. The second step is to install the extension in the PostgreSQL database. You can do this in two ways: install it in the application database, which is the main and supposedly only database you host in the cluster according to the microservice architecture, or install it in the template1 database so as to make it available for all the databases you end up creating in the cluster, in case you adopt the monolith architecture where the instance is shared by multiple databases Info For more information on the microservice vs monolith architecture in the database please refer to the \"How many databases should be hosted in a single PostgreSQL instance?\" FAQ or the \"Database import\" section . Create a new PostgreSQL cluster with PostGIS Let's suppose you want to create a new PostgreSQL 17 cluster with PostGIS 3.2. The first step is to ensure you use the right PostGIS container image for the operand, and properly set the .spec.imageName option in the Cluster resource. The postgis-example.yaml manifest below provides some guidance on how the creation of a PostGIS cluster can be done. Warning Please consider that, although convention over configuration applies in CloudNativePG, you should spend time configuring and tuning your system for production. Also the imageName in the example below deliberately points to the latest available image for PostgreSQL 17 - you should use a specific image name or, preferably, the SHA256 digest for true immutability. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgis-example spec: instances: 1 imageName: ghcr.io/cloudnative-pg/postgis:17 storage: size: 1Gi postgresql: parameters: log_statement: ddl --- apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: postgis-example-app spec: name: app owner: app cluster: name: postgis-example extensions: - name: postgis - name: postgis_topology - name: fuzzystrmatch - name: postgis_tiger_geocoder The example leverages the Database resource's declarative extension management to add the specified extensions to the app database. Info For more details, see the \"Managing Extensions in a Database\" section . You can easily verify the available version of PostGIS that is in the container, by connecting to the app database (you might obtain different values from the ones in this document): $ kubectl cnpg psql postgis-example -- app psql (17.5 (Debian 17.5-1.pgdg110+2)) Type \"help\" for help. app=# SELECT * FROM pg_available_extensions WHERE name ~ '^postgis' ORDER BY 1; name | default_version | installed_version | comment --------------------------+-----------------+-------------------+------------------------------------------------------------ postgis | 3.5.2 | 3.5.2 | PostGIS geometry and geography spatial types and functions postgis-3 | 3.5.2 | | PostGIS geometry and geography spatial types and functions postgis_raster | 3.5.2 | | PostGIS raster types and functions postgis_raster-3 | 3.5.2 | | PostGIS raster types and functions postgis_sfcgal | 3.5.2 | | PostGIS SFCGAL functions postgis_sfcgal-3 | 3.5.2 | | PostGIS SFCGAL functions postgis_tiger_geocoder | 3.5.2 | 3.5.2 | PostGIS tiger geocoder and reverse geocoder postgis_tiger_geocoder-3 | 3.5.2 | | PostGIS tiger geocoder and reverse geocoder postgis_topology | 3.5.2 | 3.5.2 | PostGIS topology spatial types and functions postgis_topology-3 | 3.5.2 | | PostGIS topology spatial types and functions (10 rows) The next step is to verify that the extensions listed in the Database resource have been correctly installed in the app database. app=# \\dx List of installed extensions Name | Version | Schema | Description ------------------------+---------+------------+------------------------------------------------------------ fuzzystrmatch | 1.2 | public | determine similarities and distance between strings plpgsql | 1.0 | pg_catalog | PL/pgSQL procedural language postgis | 3.5.2 | public | PostGIS geometry and geography spatial types and functions postgis_tiger_geocoder | 3.5.2 | tiger | PostGIS tiger geocoder and reverse geocoder postgis_topology | 3.5.2 | topology | PostGIS topology spatial types and functions (5 rows) Finally: app=# SELECT postgis_full_version(); postgis_full_version ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- POSTGIS=\"3.5.2 dea6d0a\" [EXTENSION] PGSQL=\"170\" GEOS=\"3.9.0-CAPI-1.16.2\" PROJ=\"7.2.1 NETWORK_ENABLED=OFF URL_ENDPOINT=https://cdn.proj.org USER_WRITABLE_DIRECTORY=/tmp/proj DATABASE_PATH=/usr/share/proj/proj.db\" (compiled against PROJ 7.2.1) LIBXML=\"2.9.10\" LIBJSON=\"0.15\" LIBPROTOBUF=\"1.3.3\" WAGYU=\"0.5.0 (Internal)\" TOPOLOGY (1 row)","title":"PostGIS"},{"location":"postgis/#postgis","text":"PostGIS is a very popular open source extension for PostgreSQL that introduces support for storing GIS (Geographic Information Systems) objects in the database and be queried via SQL. Important This section assumes you are familiar with PostGIS and provides some basic information about how to create a new PostgreSQL cluster with a PostGIS database in Kubernetes via CloudNativePG. The CloudNativePG Community maintains container images that are built on top of the official PostGIS images hosted on DockerHub . For more information please visit: The postgis-containers project in GitHub The postgis-containers Container Registry in GitHub","title":"PostGIS"},{"location":"postgis/#basic-concepts-about-a-postgis-cluster","text":"Conceptually, a PostGIS-based PostgreSQL cluster (or simply a PostGIS cluster) is like any other PostgreSQL cluster. The only differences are: the presence in the system of PostGIS and related libraries the presence in the database(s) of the PostGIS extension Since CloudNativePG is based on Immutable Application Containers, the only way to provision PostGIS is to add it to the container image that you use for the operand. The \"Container Image Requirements\" section provides detailed instructions on how this is achieved. More simply, you can just use the PostGIS container images from the Community, as in the examples below. The second step is to install the extension in the PostgreSQL database. You can do this in two ways: install it in the application database, which is the main and supposedly only database you host in the cluster according to the microservice architecture, or install it in the template1 database so as to make it available for all the databases you end up creating in the cluster, in case you adopt the monolith architecture where the instance is shared by multiple databases Info For more information on the microservice vs monolith architecture in the database please refer to the \"How many databases should be hosted in a single PostgreSQL instance?\" FAQ or the \"Database import\" section .","title":"Basic concepts about a PostGIS cluster"},{"location":"postgis/#create-a-new-postgresql-cluster-with-postgis","text":"Let's suppose you want to create a new PostgreSQL 17 cluster with PostGIS 3.2. The first step is to ensure you use the right PostGIS container image for the operand, and properly set the .spec.imageName option in the Cluster resource. The postgis-example.yaml manifest below provides some guidance on how the creation of a PostGIS cluster can be done. Warning Please consider that, although convention over configuration applies in CloudNativePG, you should spend time configuring and tuning your system for production. Also the imageName in the example below deliberately points to the latest available image for PostgreSQL 17 - you should use a specific image name or, preferably, the SHA256 digest for true immutability. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgis-example spec: instances: 1 imageName: ghcr.io/cloudnative-pg/postgis:17 storage: size: 1Gi postgresql: parameters: log_statement: ddl --- apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: postgis-example-app spec: name: app owner: app cluster: name: postgis-example extensions: - name: postgis - name: postgis_topology - name: fuzzystrmatch - name: postgis_tiger_geocoder The example leverages the Database resource's declarative extension management to add the specified extensions to the app database. Info For more details, see the \"Managing Extensions in a Database\" section . You can easily verify the available version of PostGIS that is in the container, by connecting to the app database (you might obtain different values from the ones in this document): $ kubectl cnpg psql postgis-example -- app psql (17.5 (Debian 17.5-1.pgdg110+2)) Type \"help\" for help. app=# SELECT * FROM pg_available_extensions WHERE name ~ '^postgis' ORDER BY 1; name | default_version | installed_version | comment --------------------------+-----------------+-------------------+------------------------------------------------------------ postgis | 3.5.2 | 3.5.2 | PostGIS geometry and geography spatial types and functions postgis-3 | 3.5.2 | | PostGIS geometry and geography spatial types and functions postgis_raster | 3.5.2 | | PostGIS raster types and functions postgis_raster-3 | 3.5.2 | | PostGIS raster types and functions postgis_sfcgal | 3.5.2 | | PostGIS SFCGAL functions postgis_sfcgal-3 | 3.5.2 | | PostGIS SFCGAL functions postgis_tiger_geocoder | 3.5.2 | 3.5.2 | PostGIS tiger geocoder and reverse geocoder postgis_tiger_geocoder-3 | 3.5.2 | | PostGIS tiger geocoder and reverse geocoder postgis_topology | 3.5.2 | 3.5.2 | PostGIS topology spatial types and functions postgis_topology-3 | 3.5.2 | | PostGIS topology spatial types and functions (10 rows) The next step is to verify that the extensions listed in the Database resource have been correctly installed in the app database. app=# \\dx List of installed extensions Name | Version | Schema | Description ------------------------+---------+------------+------------------------------------------------------------ fuzzystrmatch | 1.2 | public | determine similarities and distance between strings plpgsql | 1.0 | pg_catalog | PL/pgSQL procedural language postgis | 3.5.2 | public | PostGIS geometry and geography spatial types and functions postgis_tiger_geocoder | 3.5.2 | tiger | PostGIS tiger geocoder and reverse geocoder postgis_topology | 3.5.2 | topology | PostGIS topology spatial types and functions (5 rows) Finally: app=# SELECT postgis_full_version(); postgis_full_version ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- POSTGIS=\"3.5.2 dea6d0a\" [EXTENSION] PGSQL=\"170\" GEOS=\"3.9.0-CAPI-1.16.2\" PROJ=\"7.2.1 NETWORK_ENABLED=OFF URL_ENDPOINT=https://cdn.proj.org USER_WRITABLE_DIRECTORY=/tmp/proj DATABASE_PATH=/usr/share/proj/proj.db\" (compiled against PROJ 7.2.1) LIBXML=\"2.9.10\" LIBJSON=\"0.15\" LIBPROTOBUF=\"1.3.3\" WAGYU=\"0.5.0 (Internal)\" TOPOLOGY (1 row)","title":"Create a new PostgreSQL cluster with PostGIS"},{"location":"postgres_upgrades/","text":"PostgreSQL Upgrades PostgreSQL upgrades fall into two categories: Minor version upgrades (e.g., from 17.0 to 17.1) Major version upgrades (e.g., from 16.x to 17.0) Minor Version Upgrades PostgreSQL version numbers follow a major.minor format. For instance, in version 17.1: 17 is the major version 1 is the minor version Minor releases are fully compatible with earlier and later minor releases of the same major version. They include bug fixes and security updates but do not introduce changes to the internal storage format. For example, PostgreSQL 17.1 is compatible with 17.0 and 17.5. Upgrading a Minor Version in CloudNativePG To upgrade to a newer minor version, simply update the PostgreSQL container image reference in your cluster definition, either directly or via image catalogs. CloudNativePG will trigger a rolling update of the cluster , replacing each instance one by one, starting with the replicas. Once all replicas have been updated, it will perform either a switchover or a restart of the primary to complete the process. Major Version Upgrades Major PostgreSQL releases introduce changes to the internal data storage format, requiring a more structured upgrade process. CloudNativePG supports three methods for performing major upgrades: Logical dump/restore \u2013 Blue/green deployment, offline. Native logical replication \u2013 Blue/green deployment, online. Physical with pg_upgrade \u2013 In-place upgrade, offline (covered in the \"Offline In-Place Major Upgrades\" section below). Each method has trade-offs in terms of downtime, complexity, and data volume handling. The best approach depends on your upgrade strategy and operational constraints. Important We strongly recommend testing all methods in a controlled environment before proceeding with a production upgrade. Offline In-Place Major Upgrades CloudNativePG performs an offline in-place major upgrade when a new operand container image with a higher PostgreSQL major version is declaratively requested for a cluster. Important Major upgrades are only supported between images based on the same operating system distribution. For example, if your previous version uses a bullseye image, you cannot upgrade to a bookworm image. Warning There is a bug in PostgreSQL 17.0 through 17.5 that prevents successful upgrades if the max_slot_wal_keep_size parameter is set to any value other than -1 . The upgrade process will fail with an error related to replication slot configuration. This issue has been fixed in PostgreSQL 17.6 and 18beta2 or later versions . If you are using PostgreSQL 17.0 through 17.5, ensure that you upgrade to at least PostgreSQL 17.6 before attempting a major upgrade, or make sure to temporarily set the max_slot_wal_keep_size parameter to -1 in your cluster configuration. You can trigger the upgrade in one of two ways: By updating the major version in the image tag via the .spec.imageName option. Using an image catalog to manage version changes. For details on supported image tags, see \"Image Tag Requirements\" . Warning CloudNativePG is not responsible for PostgreSQL extensions. You must ensure that extensions in the source PostgreSQL image are compatible with those in the target image and that upgrade paths are supported. Thoroughly test the upgrade process in advance to avoid unexpected issues. The extensions management feature can help manage extension upgrades declaratively. Upgrade Process Shuts down all cluster pods to ensure data consistency. Records the previous PostgreSQL version and image in the cluster\u2019s status under .status.pgDataImageInfo . Initiates a new upgrade job, which: Verifies that the binaries in the image and the data files align with a major upgrade request. Creates new directories for PGDATA , and where applicable, WAL files and tablespaces. Performs the upgrade using pg_upgrade with the --link option. Upon successful completion, replaces the original directories with their upgraded counterparts. Warning During the upgrade process, the entire PostgreSQL cluster, including replicas, is unavailable to applications. Ensure that your system can tolerate this downtime before proceeding. Warning Performing an in-place upgrade is an exceptional operation that carries inherent risks. It is strongly recommended to take a full backup of the cluster before initiating the upgrade process. Info For detailed guidance on pg_upgrade , refer to the official PostgreSQL documentation . Post-Upgrade Actions If the upgrade is successful, CloudNativePG: Destroys the PVCs of replicas (if available). Scales up replicas as required. Warning Re-cloning replicas can be time-consuming, especially for very large databases. Plan accordingly to accommodate potential delays. After completing the upgrade, it is strongly recommended to take a full backup. Existing backup data (namely base backups and WAL files) is only available for the previous minor PostgreSQL release. Warning pg_upgrade doesn't transfer optimizer statistics. After the upgrade, you may want to run ANALYZE on your databases to update them. If the upgrade fails, you must manually revert the major version change in the cluster's configuration and delete the upgrade job, as CloudNativePG cannot automatically decide the rollback. Important This process protects your existing database from data loss , as no data is modified during the upgrade. If the upgrade fails, a rollback is usually possible, without having to perform a full recovery from a backup. Ensure you monitor the process closely and take corrective action if needed. Example: Performing a Major Upgrade Consider the following PostgreSQL cluster running version 16: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: imageName: ghcr.io/cloudnative-pg/postgresql:16-minimal-bookworm instances: 3 storage: size: 1Gi You can check the current PostgreSQL version using the following command: kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()' This will return output similar to: PostgreSQL 16.x ... To upgrade the cluster to version 17, update the imageName field by changing the major version tag from 16 to 17 : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: imageName: ghcr.io/cloudnative-pg/postgresql:17-minimal-bookworm instances: 3 storage: size: 1Gi Upgrade Process Cluster shutdown \u2013 All cluster pods are terminated to ensure a consistent upgrade. Upgrade job execution \u2013 A new job is created with the name of the primary pod, appended with the suffix -major-upgrade . This job runs pg_upgrade on the primary\u2019s persistent volume group. Post-upgrade steps: The PVC groups of the replicas ( cluster-example-2 and cluster-example-3 ) are removed. The primary pod is restarted. Two new replicas ( cluster-example-4 and cluster-example-5 ) are re-cloned from the upgraded primary. Once the upgrade is complete, you can verify the new major version by running the same command: kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()' This should now return output similar to: PostgreSQL 17.x ... You can now update the statistics by running ANALYZE on the app database: kubectl cnpg psql cluster-example -- app -c 'ANALYZE'","title":"PostgreSQL Upgrades"},{"location":"postgres_upgrades/#postgresql-upgrades","text":"PostgreSQL upgrades fall into two categories: Minor version upgrades (e.g., from 17.0 to 17.1) Major version upgrades (e.g., from 16.x to 17.0)","title":"PostgreSQL Upgrades"},{"location":"postgres_upgrades/#minor-version-upgrades","text":"PostgreSQL version numbers follow a major.minor format. For instance, in version 17.1: 17 is the major version 1 is the minor version Minor releases are fully compatible with earlier and later minor releases of the same major version. They include bug fixes and security updates but do not introduce changes to the internal storage format. For example, PostgreSQL 17.1 is compatible with 17.0 and 17.5.","title":"Minor Version Upgrades"},{"location":"postgres_upgrades/#upgrading-a-minor-version-in-cloudnativepg","text":"To upgrade to a newer minor version, simply update the PostgreSQL container image reference in your cluster definition, either directly or via image catalogs. CloudNativePG will trigger a rolling update of the cluster , replacing each instance one by one, starting with the replicas. Once all replicas have been updated, it will perform either a switchover or a restart of the primary to complete the process.","title":"Upgrading a Minor Version in CloudNativePG"},{"location":"postgres_upgrades/#major-version-upgrades","text":"Major PostgreSQL releases introduce changes to the internal data storage format, requiring a more structured upgrade process. CloudNativePG supports three methods for performing major upgrades: Logical dump/restore \u2013 Blue/green deployment, offline. Native logical replication \u2013 Blue/green deployment, online. Physical with pg_upgrade \u2013 In-place upgrade, offline (covered in the \"Offline In-Place Major Upgrades\" section below). Each method has trade-offs in terms of downtime, complexity, and data volume handling. The best approach depends on your upgrade strategy and operational constraints. Important We strongly recommend testing all methods in a controlled environment before proceeding with a production upgrade.","title":"Major Version Upgrades"},{"location":"postgres_upgrades/#offline-in-place-major-upgrades","text":"CloudNativePG performs an offline in-place major upgrade when a new operand container image with a higher PostgreSQL major version is declaratively requested for a cluster. Important Major upgrades are only supported between images based on the same operating system distribution. For example, if your previous version uses a bullseye image, you cannot upgrade to a bookworm image. Warning There is a bug in PostgreSQL 17.0 through 17.5 that prevents successful upgrades if the max_slot_wal_keep_size parameter is set to any value other than -1 . The upgrade process will fail with an error related to replication slot configuration. This issue has been fixed in PostgreSQL 17.6 and 18beta2 or later versions . If you are using PostgreSQL 17.0 through 17.5, ensure that you upgrade to at least PostgreSQL 17.6 before attempting a major upgrade, or make sure to temporarily set the max_slot_wal_keep_size parameter to -1 in your cluster configuration. You can trigger the upgrade in one of two ways: By updating the major version in the image tag via the .spec.imageName option. Using an image catalog to manage version changes. For details on supported image tags, see \"Image Tag Requirements\" . Warning CloudNativePG is not responsible for PostgreSQL extensions. You must ensure that extensions in the source PostgreSQL image are compatible with those in the target image and that upgrade paths are supported. Thoroughly test the upgrade process in advance to avoid unexpected issues. The extensions management feature can help manage extension upgrades declaratively.","title":"Offline In-Place Major Upgrades"},{"location":"postgres_upgrades/#upgrade-process","text":"Shuts down all cluster pods to ensure data consistency. Records the previous PostgreSQL version and image in the cluster\u2019s status under .status.pgDataImageInfo . Initiates a new upgrade job, which: Verifies that the binaries in the image and the data files align with a major upgrade request. Creates new directories for PGDATA , and where applicable, WAL files and tablespaces. Performs the upgrade using pg_upgrade with the --link option. Upon successful completion, replaces the original directories with their upgraded counterparts. Warning During the upgrade process, the entire PostgreSQL cluster, including replicas, is unavailable to applications. Ensure that your system can tolerate this downtime before proceeding. Warning Performing an in-place upgrade is an exceptional operation that carries inherent risks. It is strongly recommended to take a full backup of the cluster before initiating the upgrade process. Info For detailed guidance on pg_upgrade , refer to the official PostgreSQL documentation .","title":"Upgrade Process"},{"location":"postgres_upgrades/#post-upgrade-actions","text":"If the upgrade is successful, CloudNativePG: Destroys the PVCs of replicas (if available). Scales up replicas as required. Warning Re-cloning replicas can be time-consuming, especially for very large databases. Plan accordingly to accommodate potential delays. After completing the upgrade, it is strongly recommended to take a full backup. Existing backup data (namely base backups and WAL files) is only available for the previous minor PostgreSQL release. Warning pg_upgrade doesn't transfer optimizer statistics. After the upgrade, you may want to run ANALYZE on your databases to update them. If the upgrade fails, you must manually revert the major version change in the cluster's configuration and delete the upgrade job, as CloudNativePG cannot automatically decide the rollback. Important This process protects your existing database from data loss , as no data is modified during the upgrade. If the upgrade fails, a rollback is usually possible, without having to perform a full recovery from a backup. Ensure you monitor the process closely and take corrective action if needed.","title":"Post-Upgrade Actions"},{"location":"postgres_upgrades/#example-performing-a-major-upgrade","text":"Consider the following PostgreSQL cluster running version 16: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: imageName: ghcr.io/cloudnative-pg/postgresql:16-minimal-bookworm instances: 3 storage: size: 1Gi You can check the current PostgreSQL version using the following command: kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()' This will return output similar to: PostgreSQL 16.x ... To upgrade the cluster to version 17, update the imageName field by changing the major version tag from 16 to 17 : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: imageName: ghcr.io/cloudnative-pg/postgresql:17-minimal-bookworm instances: 3 storage: size: 1Gi","title":"Example: Performing a Major Upgrade"},{"location":"postgres_upgrades/#upgrade-process_1","text":"Cluster shutdown \u2013 All cluster pods are terminated to ensure a consistent upgrade. Upgrade job execution \u2013 A new job is created with the name of the primary pod, appended with the suffix -major-upgrade . This job runs pg_upgrade on the primary\u2019s persistent volume group. Post-upgrade steps: The PVC groups of the replicas ( cluster-example-2 and cluster-example-3 ) are removed. The primary pod is restarted. Two new replicas ( cluster-example-4 and cluster-example-5 ) are re-cloned from the upgraded primary. Once the upgrade is complete, you can verify the new major version by running the same command: kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()' This should now return output similar to: PostgreSQL 17.x ... You can now update the statistics by running ANALYZE on the app database: kubectl cnpg psql cluster-example -- app -c 'ANALYZE'","title":"Upgrade Process"},{"location":"postgresql_conf/","text":"PostgreSQL Configuration Users that are familiar with PostgreSQL are aware of the existence of the following three files to configure an instance: postgresql.conf : main run-time configuration file of PostgreSQL pg_hba.conf : clients authentication file pg_ident.conf : map external users to internal users Due to the concepts of declarative configuration and immutability of the PostgreSQL containers, users are not allowed to directly touch those files. Configuration is possible through the postgresql section of the Cluster resource definition by defining custom postgresql.conf , pg_hba.conf , and pg_ident.conf settings via the parameters , the pg_hba , and the pg_ident keys. These settings are the same across all instances. Warning Please don't use the ALTER SYSTEM query to change the configuration of the PostgreSQL instances in an imperative way. Changing some of the options that are normally controlled by the operator might indeed lead to an unpredictable/unrecoverable state of the cluster. Moreover, ALTER SYSTEM changes are not replicated across the cluster. See \"Enabling ALTER SYSTEM\" below for details. A reference for custom settings usage is included in the samples, see cluster-example-custom.yaml . The postgresql section The PostgreSQL instance in the pod starts with a default postgresql.conf file, to which these settings are automatically added: listen_addresses = '*' include custom.conf The custom.conf file will contain the user-defined settings in the postgresql section, as in the following example: # ... postgresql: parameters: shared_buffers: \"1GB\" # ... PostgreSQL GUCs: Grand Unified Configuration Refer to the PostgreSQL documentation for more information on the available parameters , also known as GUC (Grand Unified Configuration). Please note that CloudNativePG accepts only strings for the PostgreSQL parameters. The content of custom.conf is automatically generated and maintained by the operator by applying the following sections in this order: Global default parameters Default parameters that depend on the PostgreSQL major version User-provided parameters Fixed parameters The global default parameters are: archive_timeout = '5min' dynamic_shared_memory_type = 'posix' full_page_writes = 'on' logging_collector = 'on' log_destination = 'csvlog' log_directory = '/controller/log' log_filename = 'postgres' log_rotation_age = '0' log_rotation_size = '0' log_truncate_on_rotation = 'false' max_parallel_workers = '32' max_replication_slots = '32' max_worker_processes = '32' shared_memory_type = 'mmap' shared_preload_libraries = '' ssl_max_protocol_version = 'TLSv1.3' ssl_min_protocol_version = 'TLSv1.3' wal_keep_size = '512MB' wal_level = 'logical' wal_log_hints = 'on' wal_sender_timeout = '5s' wal_receiver_timeout = '5s' Warning It is your duty to plan for WAL segments retention in your PostgreSQL cluster and properly configure either wal_keep_size or wal_keep_segments , depending on the server version, based on the expected and observed workloads. Alternatively, if the only streaming replication clients are the replica instances running in the High Availability cluster, you can take advantage of the replication slots feature, which adds support for replication slots at the cluster level. You can enable the feature with the replicationSlots.highAvailability option (for more information, please refer to the \"Replication\" section .) Without replication slots nor continuous backups in place, configuring wal_keep_size or wal_keep_segments is the only way to protect standbys from falling out of sync. If a standby did fall out of sync it would produce error messages like: \"could not receive data from WAL stream: ERROR: requested WAL segment ************************ has already been removed\" . This will require you to dedicate a part of your PGDATA , or the volume dedicated to storing WAL files, to keep older WAL segments for streaming replication purposes. The following parameters are fixed and exclusively controlled by the operator: archive_command = '/controller/manager wal-archive %p' hot_standby = 'true' listen_addresses = '*' port = '5432' restart_after_crash = 'false' ssl = 'on' ssl_ca_file = '/controller/certificates/client-ca.crt' ssl_cert_file = '/controller/certificates/server.crt' ssl_key_file = '/controller/certificates/server.key' unix_socket_directories = '/controller/run' Since the fixed parameters are added at the end, they can't be overridden by the user via the YAML configuration. Those parameters are required for correct WAL archiving and replication. Write-Ahead Log Level The wal_level parameter in PostgreSQL determines the amount of information written to the Write-Ahead Log (WAL). It accepts the following values: minimal : Writes only the information required for crash recovery. replica : Adds sufficient information to support WAL archiving and streaming replication, including the ability to run read-only queries on standby instances. logical : Includes all information from replica , plus additional information required for logical decoding and replication. By default, upstream PostgreSQL sets wal_level to replica . CloudNativePG, instead, sets wal_level to logical by default to enable logical replication out of the box. This makes it easier to support use cases such as migrations from external PostgreSQL servers. If your cluster does not require logical replication, it is recommended to set wal_level to replica to reduce WAL volume and overhead. Finally, CloudNativePG allows wal_level to be set to minimal only for single-instance clusters with WAL archiving disabled. Replication Settings The primary_conninfo , restore_command , and recovery_target_timeline parameters are automatically managed by the operator based on the instance's role within the cluster. These parameters are effectively applied only when the instance is operating as a replica. primary_conninfo = 'host=<PRIMARY> user=postgres dbname=postgres' recovery_target_timeline = 'latest' The STANDBY_TCP_USER_TIMEOUT operator configuration setting , if specified, sets the tcp_user_timeout parameter on all standby instances managed by the operator. The tcp_user_timeout parameter determines how long transmitted data can remain unacknowledged before the TCP connection is forcibly closed. Adjusting this value allows you to fine-tune the responsiveness of standby instances to network disruptions. For more details, refer to the PostgreSQL documentation . Log control settings The operator requires PostgreSQL to output its log in CSV format, and the instance manager automatically parses it and outputs it in JSON format. For this reason, all log settings in PostgreSQL are fixed and cannot be changed. For further information, please refer to the \"Logging\" section . Shared Preload Libraries The shared_preload_libraries option in PostgreSQL exists to specify one or more shared libraries to be pre-loaded at server start, in the form of a comma-separated list. Typically, it is used in PostgreSQL to load those extensions that need to be available to most database sessions in the whole system (e.g. pg_stat_statements ). In CloudNativePG the shared_preload_libraries option is empty by default. Although you can override the content of shared_preload_libraries , we recommend that only expert Postgres users take advantage of this option. Important In case a specified library is not found, the server fails to start, preventing CloudNativePG from any self-healing attempt and requiring manual intervention. Please make sure you always test both the extensions and the settings of shared_preload_libraries if you plan to directly manage its content. CloudNativePG is able to automatically manage the content of the shared_preload_libraries option for some of the most used PostgreSQL extensions (see the \"Managed extensions\" section below for details). Specifically, as soon as the operator notices that a configuration parameter requires one of the managed libraries, it will automatically add the needed library. The operator will also remove the library as soon as no actual parameter requires it. Important Please always keep in mind that removing libraries from shared_preload_libraries requires a restart of all instances in the cluster in order to be effective. You can provide additional shared_preload_libraries via .spec.postgresql.shared_preload_libraries as a list of strings: the operator will merge them with the ones that it automatically manages. Managed extensions As anticipated in the previous section, CloudNativePG automatically manages the content in shared_preload_libraries for some well-known and supported extensions. The current list includes: auto_explain pg_stat_statements pgaudit pg_failover_slots Some of these libraries also require additional objects in a database before using them, normally views and/or functions managed via the CREATE EXTENSION command to be run in a database (the DROP EXTENSION command typically removes those objects). For such libraries, CloudNativePG automatically handles the creation and removal of the extension in all databases that accept a connection in the cluster, identified by the following query: SELECT datname FROM pg_database WHERE datallowconn Note The above query also includes template databases like template1 . Important With the introduction of declarative extensions in the Database CRD, you can now manage extensions directly. As a result, the managed extensions feature may undergo significant changes in future versions of CloudNativePG, and some functionalities might be deprecated. Enabling auto_explain The auto_explain extension provides a means for logging execution plans of slow statements automatically, without having to manually run EXPLAIN (helpful for tracking down un-optimized queries). You can enable auto_explain by adding to the configuration a parameter that starts with auto_explain. as in the following example excerpt (which automatically logs execution plans of queries that take longer than 10 seconds to complete): # ... postgresql: parameters: auto_explain.log_min_duration: \"10s\" # ... Note Enabling auto_explain can lead to performance issues. Please refer to the auto explain documentation Enabling pg_stat_statements The pg_stat_statements extension is one of the most important capabilities available in PostgreSQL for real-time monitoring of queries. You can enable pg_stat_statements by adding to the configuration a parameter that starts with pg_stat_statements. as in the following example excerpt: # ... postgresql: parameters: pg_stat_statements.max: \"10000\" pg_stat_statements.track: all # ... As explained previously, the operator will automatically add pg_stat_statements to shared_preload_libraries and run CREATE EXTENSION IF NOT EXISTS pg_stat_statements on each database, enabling you to run queries against the pg_stat_statements view. Enabling pgaudit The pgaudit extension provides detailed session and/or object audit logging via the standard PostgreSQL logging facility. CloudNativePG has transparent and native support for PGAudit on PostgreSQL clusters. For further information, please refer to the \"PGAudit\" logs section. You can enable pgaudit by adding to the configuration a parameter that starts with pgaudit. as in the following example excerpt: # postgresql: parameters: pgaudit.log: \"all, -misc\" pgaudit.log_catalog: \"off\" pgaudit.log_parameter: \"on\" pgaudit.log_relation: \"on\" # Enabling pg_failover_slots The pg_failover_slots extension by EDB ensures that logical replication slots can survive a failover scenario. Failovers are normally implemented using physical streaming replication, like in the case of CloudNativePG. You can enable pg_failover_slots by adding to the configuration a parameter that starts with pg_failover_slots. : as explained above, the operator will transparently manage the pg_failover_slots entry in the shared_preload_libraries option depending on this. Please refer to the pg_failover_slots documentation for details on this extension. Additionally, for each database that you intend to you use with pg_failover_slots you need to add an entry in the pg_hba section that enables each replica to connect to the primary. For example, suppose that you want to use the app database with pg_failover_slots , you need to add this entry in the pg_hba section: postgresql: pg_hba: - hostssl app streaming_replica all cert The pg_hba section pg_hba is a list of PostgreSQL Host Based Authentication rules used to create the pg_hba.conf used by the pods. Important See the PostgreSQL documentation for more information on pg_hba.conf . Since the first matching rule is used for authentication, the pg_hba.conf file generated by the operator can be seen as composed of four sections: Fixed rules User-defined rules Optional LDAP section Default rules Fixed rules: local all all peer hostssl postgres streaming_replica all cert map=cnpg_streaming_replica hostssl replication streaming_replica all cert map=cnpg_streaming_replica hostssl all cnpg_pooler_pgbouncer all cert map=cnpg_pooler_pgbouncer Default rules: host all all all <default-authentication-method> From PostgreSQL 14 the default value of the password_encryption database parameter is set to scram-sha-256 . Because of that, the default authentication method is scram-sha-256 from this PostgreSQL version. PostgreSQL 13 and older will use md5 as the default authentication method. The resulting pg_hba.conf will look like this: local all all peer hostssl postgres streaming_replica all cert map=cnpg_streaming_replica hostssl replication streaming_replica all cert map=cnpg_streaming_replica hostssl all cnpg_pooler_pgbouncer all cert map=cnpg_pooler_pgbouncer <user defined rules> <user defined LDAP> host all all all scram-sha-256 # (or md5 for PostgreSQL version <= 13) Inside the cluster manifest, pg_hba lines are added as list items in .spec.postgresql.pg_hba , as in the following excerpt: postgresql: pg_hba: - hostssl app app 10.244.0.0/16 md5 In the above example we are enabling access for the app user to the app database using MD5 password authentication (you can use scram-sha-256 if you prefer) via a secure channel ( hostssl ). LDAP Configuration Under the postgres section of the cluster spec there is an optional ldap section available to define an LDAP configuration to be converted into a rule added into the pg_hba.conf file. This will support two modes: simple bind mode which requires specifying a server , prefix and suffix in the LDAP section and the search+bind mode which requires specifying server , baseDN , binDN , and a bindPassword which is a secret containing the ldap password. Additionally, in search+bind mode you have the option to specify a searchFilter or searchAttribute . If no searchAttribute is specified the default one of uid will be used. Additionally, both modes allow the specification of a scheme for ldapscheme and a port . Neither scheme nor port are required, however. This section filled out for search+bind could look as follows: postgresql: ldap: server: 'openldap.default.svc.cluster.local' bindSearchAuth: baseDN: 'ou=org,dc=example,dc=com' bindDN: 'cn=admin,dc=example,dc=com' bindPassword: name: 'ldapBindPassword' key: 'data' searchAttribute: 'uid' The pg_ident section pg_ident is a list of PostgreSQL User Name Maps that CloudNativePG uses to generate and maintain the ident map file (known as pg_ident.conf ) inside the data directory. Important See the PostgreSQL documentation for more information on pg_ident.conf . The pg_ident.conf file written by the operator is made up of the following two sections: Fixed rules User-defined rules Currently the only fixed rule, automatically generated by the operator, is: local <postgres system user> postgres The instance manager detects the user running the PostgreSQL instance and automatically adds a rule to map it to the postgres user in the database. If the postgres user is not properly configured inside the container, the instance manager will allow any local user to connect and then log a warning message like the following: Unable to identify the current user. Falling back to insecure mapping. The resulting pg_ident.conf will look like this: local <postgres system user> postgres <user defined lines> Inside the cluster manifest, pg_ident lines are added as list items in .spec.postgresql.pg_ident . For example: postgresql: pg_ident: - \"mymap /^(.*)@mydomain\\\\.com$ \\\\1\" Changing configuration You can apply configuration changes by editing the postgresql section of the Cluster resource. After the change, the cluster instances will immediately reload the configuration to apply the changes. If the change involves a parameter requiring a restart, the operator will perform a rolling upgrade. Enabling ALTER SYSTEM CloudNativePG strongly advocates employing the Cluster manifest as the exclusive method for altering the configuration of a PostgreSQL cluster. This approach guarantees coherence across the entire high-availability cluster and aligns with best practices for Infrastructure-as-Code. In CloudNativePG the default configuration disables the use of ALTER SYSTEM on new Postgres clusters. This decision is rooted in the recognition of potential risks associated with this command. To enable the use of ALTER SYSTEM , you can explicitly set .spec.postgresql.enableAlterSystem to true . Warning Proceed with caution when utilizing ALTER SYSTEM . This command operates directly on the connected instance and does not undergo replication. CloudNativePG assumes responsibility for certain fixed parameters and complete control over others, emphasizing the need for careful consideration. Starting from PostgreSQL 17, the .spec.postgresql.enableAlterSystem setting directly controls the allow_alter_system GUC in PostgreSQL \u2014 a feature directly contributed by CloudNativePG to PostgreSQL. Prior to PostgreSQL 17, when .spec.postgresql.enableAlterSystem is set to false , the postgresql.auto.conf file is made read-only. Consequently, any attempt to execute the ALTER SYSTEM command will result in an error. The error message might look like this: ERROR: could not open file \"postgresql.auto.conf\": Permission denied Dynamic Shared Memory settings PostgreSQL supports a few implementations for dynamic shared memory management through the dynamic_shared_memory_type configuration option. In CloudNativePG we recommend to limit ourselves to any of the following two values: posix : which relies on POSIX shared memory allocated using shm_open (default setting) sysv : which is based on System V shared memory allocated via shmget In PostgreSQL, this setting is particularly important for memory allocation in parallel queries. For details, please refer to this thread from the pgsql-general mailing list . POSIX shared memory The default setting of posix should be enough in most cases, considering that the operator automatically mounts a memory-bound EmptyDir volume called shm under /dev/shm . You can verify the size of such volume inside the running Postgres container with: mount | grep shm You should get something similar to the following output: shm on /dev/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=******) If you would like to set a maximum size for the shm volume, you can do so by setting the .spec.ephemeralVolumesSizeLimit.shm field in the Cluster resource. For example: spec: ephemeralVolumesSizeLimit: shm: 1Gi System V shared memory In case your Kubernetes cluster has a high enough value for the SHMMAX and SHMALL parameters, you can also set: dynamic_shared_memory_type: \"sysv\" You can check the SHMMAX / SHMALL from inside a PostgreSQL container, by running: ipcs -lm For example: ------ Shared Memory Limits -------- max number of segments = 4096 max seg size (kbytes) = 18014398509465599 max total shared memory (kbytes) = 18014398509481980 min seg size (bytes) = 1 As you can see, the very high number of max total shared memory recommends setting dynamic_shared_memory_type to sysv . An alternate method is to run: cat /proc/sys/kernel/shmall cat /proc/sys/kernel/shmmax Fixed parameters Some PostgreSQL configuration parameters should be managed exclusively by the operator. The operator prevents the user from setting them using a webhook. Users are not allowed to set the following configuration parameters in the postgresql section: allow_alter_system allow_system_table_mods archive_cleanup_command archive_command archive_mode bonjour bonjour_name cluster_name config_file data_directory data_sync_retry event_source external_pid_file hba_file hot_standby ident_file jit_provider listen_addresses log_destination log_directory log_file_mode log_filename log_rotation_age log_rotation_size log_truncate_on_rotation logging_collector port primary_conninfo primary_slot_name promote_trigger_file recovery_end_command recovery_min_apply_delay recovery_target recovery_target_action recovery_target_inclusive recovery_target_lsn recovery_target_name recovery_target_time recovery_target_timeline recovery_target_xid restart_after_crash restore_command shared_preload_libraries ssl ssl_ca_file ssl_cert_file ssl_crl_file ssl_dh_params_file ssl_ecdh_curve ssl_key_file ssl_passphrase_command ssl_passphrase_command_supports_reload ssl_prefer_server_ciphers stats_temp_directory synchronous_standby_names syslog_facility syslog_ident syslog_sequence_numbers syslog_split_messages unix_socket_directories unix_socket_group unix_socket_permissions","title":"PostgreSQL Configuration"},{"location":"postgresql_conf/#postgresql-configuration","text":"Users that are familiar with PostgreSQL are aware of the existence of the following three files to configure an instance: postgresql.conf : main run-time configuration file of PostgreSQL pg_hba.conf : clients authentication file pg_ident.conf : map external users to internal users Due to the concepts of declarative configuration and immutability of the PostgreSQL containers, users are not allowed to directly touch those files. Configuration is possible through the postgresql section of the Cluster resource definition by defining custom postgresql.conf , pg_hba.conf , and pg_ident.conf settings via the parameters , the pg_hba , and the pg_ident keys. These settings are the same across all instances. Warning Please don't use the ALTER SYSTEM query to change the configuration of the PostgreSQL instances in an imperative way. Changing some of the options that are normally controlled by the operator might indeed lead to an unpredictable/unrecoverable state of the cluster. Moreover, ALTER SYSTEM changes are not replicated across the cluster. See \"Enabling ALTER SYSTEM\" below for details. A reference for custom settings usage is included in the samples, see cluster-example-custom.yaml .","title":"PostgreSQL Configuration"},{"location":"postgresql_conf/#the-postgresql-section","text":"The PostgreSQL instance in the pod starts with a default postgresql.conf file, to which these settings are automatically added: listen_addresses = '*' include custom.conf The custom.conf file will contain the user-defined settings in the postgresql section, as in the following example: # ... postgresql: parameters: shared_buffers: \"1GB\" # ... PostgreSQL GUCs: Grand Unified Configuration Refer to the PostgreSQL documentation for more information on the available parameters , also known as GUC (Grand Unified Configuration). Please note that CloudNativePG accepts only strings for the PostgreSQL parameters. The content of custom.conf is automatically generated and maintained by the operator by applying the following sections in this order: Global default parameters Default parameters that depend on the PostgreSQL major version User-provided parameters Fixed parameters The global default parameters are: archive_timeout = '5min' dynamic_shared_memory_type = 'posix' full_page_writes = 'on' logging_collector = 'on' log_destination = 'csvlog' log_directory = '/controller/log' log_filename = 'postgres' log_rotation_age = '0' log_rotation_size = '0' log_truncate_on_rotation = 'false' max_parallel_workers = '32' max_replication_slots = '32' max_worker_processes = '32' shared_memory_type = 'mmap' shared_preload_libraries = '' ssl_max_protocol_version = 'TLSv1.3' ssl_min_protocol_version = 'TLSv1.3' wal_keep_size = '512MB' wal_level = 'logical' wal_log_hints = 'on' wal_sender_timeout = '5s' wal_receiver_timeout = '5s' Warning It is your duty to plan for WAL segments retention in your PostgreSQL cluster and properly configure either wal_keep_size or wal_keep_segments , depending on the server version, based on the expected and observed workloads. Alternatively, if the only streaming replication clients are the replica instances running in the High Availability cluster, you can take advantage of the replication slots feature, which adds support for replication slots at the cluster level. You can enable the feature with the replicationSlots.highAvailability option (for more information, please refer to the \"Replication\" section .) Without replication slots nor continuous backups in place, configuring wal_keep_size or wal_keep_segments is the only way to protect standbys from falling out of sync. If a standby did fall out of sync it would produce error messages like: \"could not receive data from WAL stream: ERROR: requested WAL segment ************************ has already been removed\" . This will require you to dedicate a part of your PGDATA , or the volume dedicated to storing WAL files, to keep older WAL segments for streaming replication purposes. The following parameters are fixed and exclusively controlled by the operator: archive_command = '/controller/manager wal-archive %p' hot_standby = 'true' listen_addresses = '*' port = '5432' restart_after_crash = 'false' ssl = 'on' ssl_ca_file = '/controller/certificates/client-ca.crt' ssl_cert_file = '/controller/certificates/server.crt' ssl_key_file = '/controller/certificates/server.key' unix_socket_directories = '/controller/run' Since the fixed parameters are added at the end, they can't be overridden by the user via the YAML configuration. Those parameters are required for correct WAL archiving and replication.","title":"The postgresql section"},{"location":"postgresql_conf/#write-ahead-log-level","text":"The wal_level parameter in PostgreSQL determines the amount of information written to the Write-Ahead Log (WAL). It accepts the following values: minimal : Writes only the information required for crash recovery. replica : Adds sufficient information to support WAL archiving and streaming replication, including the ability to run read-only queries on standby instances. logical : Includes all information from replica , plus additional information required for logical decoding and replication. By default, upstream PostgreSQL sets wal_level to replica . CloudNativePG, instead, sets wal_level to logical by default to enable logical replication out of the box. This makes it easier to support use cases such as migrations from external PostgreSQL servers. If your cluster does not require logical replication, it is recommended to set wal_level to replica to reduce WAL volume and overhead. Finally, CloudNativePG allows wal_level to be set to minimal only for single-instance clusters with WAL archiving disabled.","title":"Write-Ahead Log Level"},{"location":"postgresql_conf/#replication-settings","text":"The primary_conninfo , restore_command , and recovery_target_timeline parameters are automatically managed by the operator based on the instance's role within the cluster. These parameters are effectively applied only when the instance is operating as a replica. primary_conninfo = 'host=<PRIMARY> user=postgres dbname=postgres' recovery_target_timeline = 'latest' The STANDBY_TCP_USER_TIMEOUT operator configuration setting , if specified, sets the tcp_user_timeout parameter on all standby instances managed by the operator. The tcp_user_timeout parameter determines how long transmitted data can remain unacknowledged before the TCP connection is forcibly closed. Adjusting this value allows you to fine-tune the responsiveness of standby instances to network disruptions. For more details, refer to the PostgreSQL documentation .","title":"Replication Settings"},{"location":"postgresql_conf/#log-control-settings","text":"The operator requires PostgreSQL to output its log in CSV format, and the instance manager automatically parses it and outputs it in JSON format. For this reason, all log settings in PostgreSQL are fixed and cannot be changed. For further information, please refer to the \"Logging\" section .","title":"Log control settings"},{"location":"postgresql_conf/#shared-preload-libraries","text":"The shared_preload_libraries option in PostgreSQL exists to specify one or more shared libraries to be pre-loaded at server start, in the form of a comma-separated list. Typically, it is used in PostgreSQL to load those extensions that need to be available to most database sessions in the whole system (e.g. pg_stat_statements ). In CloudNativePG the shared_preload_libraries option is empty by default. Although you can override the content of shared_preload_libraries , we recommend that only expert Postgres users take advantage of this option. Important In case a specified library is not found, the server fails to start, preventing CloudNativePG from any self-healing attempt and requiring manual intervention. Please make sure you always test both the extensions and the settings of shared_preload_libraries if you plan to directly manage its content. CloudNativePG is able to automatically manage the content of the shared_preload_libraries option for some of the most used PostgreSQL extensions (see the \"Managed extensions\" section below for details). Specifically, as soon as the operator notices that a configuration parameter requires one of the managed libraries, it will automatically add the needed library. The operator will also remove the library as soon as no actual parameter requires it. Important Please always keep in mind that removing libraries from shared_preload_libraries requires a restart of all instances in the cluster in order to be effective. You can provide additional shared_preload_libraries via .spec.postgresql.shared_preload_libraries as a list of strings: the operator will merge them with the ones that it automatically manages.","title":"Shared Preload Libraries"},{"location":"postgresql_conf/#managed-extensions","text":"As anticipated in the previous section, CloudNativePG automatically manages the content in shared_preload_libraries for some well-known and supported extensions. The current list includes: auto_explain pg_stat_statements pgaudit pg_failover_slots Some of these libraries also require additional objects in a database before using them, normally views and/or functions managed via the CREATE EXTENSION command to be run in a database (the DROP EXTENSION command typically removes those objects). For such libraries, CloudNativePG automatically handles the creation and removal of the extension in all databases that accept a connection in the cluster, identified by the following query: SELECT datname FROM pg_database WHERE datallowconn Note The above query also includes template databases like template1 . Important With the introduction of declarative extensions in the Database CRD, you can now manage extensions directly. As a result, the managed extensions feature may undergo significant changes in future versions of CloudNativePG, and some functionalities might be deprecated.","title":"Managed extensions"},{"location":"postgresql_conf/#enabling-auto_explain","text":"The auto_explain extension provides a means for logging execution plans of slow statements automatically, without having to manually run EXPLAIN (helpful for tracking down un-optimized queries). You can enable auto_explain by adding to the configuration a parameter that starts with auto_explain. as in the following example excerpt (which automatically logs execution plans of queries that take longer than 10 seconds to complete): # ... postgresql: parameters: auto_explain.log_min_duration: \"10s\" # ... Note Enabling auto_explain can lead to performance issues. Please refer to the auto explain documentation","title":"Enabling auto_explain"},{"location":"postgresql_conf/#enabling-pg_stat_statements","text":"The pg_stat_statements extension is one of the most important capabilities available in PostgreSQL for real-time monitoring of queries. You can enable pg_stat_statements by adding to the configuration a parameter that starts with pg_stat_statements. as in the following example excerpt: # ... postgresql: parameters: pg_stat_statements.max: \"10000\" pg_stat_statements.track: all # ... As explained previously, the operator will automatically add pg_stat_statements to shared_preload_libraries and run CREATE EXTENSION IF NOT EXISTS pg_stat_statements on each database, enabling you to run queries against the pg_stat_statements view.","title":"Enabling pg_stat_statements"},{"location":"postgresql_conf/#enabling-pgaudit","text":"The pgaudit extension provides detailed session and/or object audit logging via the standard PostgreSQL logging facility. CloudNativePG has transparent and native support for PGAudit on PostgreSQL clusters. For further information, please refer to the \"PGAudit\" logs section. You can enable pgaudit by adding to the configuration a parameter that starts with pgaudit. as in the following example excerpt: # postgresql: parameters: pgaudit.log: \"all, -misc\" pgaudit.log_catalog: \"off\" pgaudit.log_parameter: \"on\" pgaudit.log_relation: \"on\" #","title":"Enabling pgaudit"},{"location":"postgresql_conf/#enabling-pg_failover_slots","text":"The pg_failover_slots extension by EDB ensures that logical replication slots can survive a failover scenario. Failovers are normally implemented using physical streaming replication, like in the case of CloudNativePG. You can enable pg_failover_slots by adding to the configuration a parameter that starts with pg_failover_slots. : as explained above, the operator will transparently manage the pg_failover_slots entry in the shared_preload_libraries option depending on this. Please refer to the pg_failover_slots documentation for details on this extension. Additionally, for each database that you intend to you use with pg_failover_slots you need to add an entry in the pg_hba section that enables each replica to connect to the primary. For example, suppose that you want to use the app database with pg_failover_slots , you need to add this entry in the pg_hba section: postgresql: pg_hba: - hostssl app streaming_replica all cert","title":"Enabling pg_failover_slots"},{"location":"postgresql_conf/#the-pg_hba-section","text":"pg_hba is a list of PostgreSQL Host Based Authentication rules used to create the pg_hba.conf used by the pods. Important See the PostgreSQL documentation for more information on pg_hba.conf . Since the first matching rule is used for authentication, the pg_hba.conf file generated by the operator can be seen as composed of four sections: Fixed rules User-defined rules Optional LDAP section Default rules Fixed rules: local all all peer hostssl postgres streaming_replica all cert map=cnpg_streaming_replica hostssl replication streaming_replica all cert map=cnpg_streaming_replica hostssl all cnpg_pooler_pgbouncer all cert map=cnpg_pooler_pgbouncer Default rules: host all all all <default-authentication-method> From PostgreSQL 14 the default value of the password_encryption database parameter is set to scram-sha-256 . Because of that, the default authentication method is scram-sha-256 from this PostgreSQL version. PostgreSQL 13 and older will use md5 as the default authentication method. The resulting pg_hba.conf will look like this: local all all peer hostssl postgres streaming_replica all cert map=cnpg_streaming_replica hostssl replication streaming_replica all cert map=cnpg_streaming_replica hostssl all cnpg_pooler_pgbouncer all cert map=cnpg_pooler_pgbouncer <user defined rules> <user defined LDAP> host all all all scram-sha-256 # (or md5 for PostgreSQL version <= 13) Inside the cluster manifest, pg_hba lines are added as list items in .spec.postgresql.pg_hba , as in the following excerpt: postgresql: pg_hba: - hostssl app app 10.244.0.0/16 md5 In the above example we are enabling access for the app user to the app database using MD5 password authentication (you can use scram-sha-256 if you prefer) via a secure channel ( hostssl ).","title":"The pg_hba section"},{"location":"postgresql_conf/#ldap-configuration","text":"Under the postgres section of the cluster spec there is an optional ldap section available to define an LDAP configuration to be converted into a rule added into the pg_hba.conf file. This will support two modes: simple bind mode which requires specifying a server , prefix and suffix in the LDAP section and the search+bind mode which requires specifying server , baseDN , binDN , and a bindPassword which is a secret containing the ldap password. Additionally, in search+bind mode you have the option to specify a searchFilter or searchAttribute . If no searchAttribute is specified the default one of uid will be used. Additionally, both modes allow the specification of a scheme for ldapscheme and a port . Neither scheme nor port are required, however. This section filled out for search+bind could look as follows: postgresql: ldap: server: 'openldap.default.svc.cluster.local' bindSearchAuth: baseDN: 'ou=org,dc=example,dc=com' bindDN: 'cn=admin,dc=example,dc=com' bindPassword: name: 'ldapBindPassword' key: 'data' searchAttribute: 'uid'","title":"LDAP Configuration"},{"location":"postgresql_conf/#the-pg_ident-section","text":"pg_ident is a list of PostgreSQL User Name Maps that CloudNativePG uses to generate and maintain the ident map file (known as pg_ident.conf ) inside the data directory. Important See the PostgreSQL documentation for more information on pg_ident.conf . The pg_ident.conf file written by the operator is made up of the following two sections: Fixed rules User-defined rules Currently the only fixed rule, automatically generated by the operator, is: local <postgres system user> postgres The instance manager detects the user running the PostgreSQL instance and automatically adds a rule to map it to the postgres user in the database. If the postgres user is not properly configured inside the container, the instance manager will allow any local user to connect and then log a warning message like the following: Unable to identify the current user. Falling back to insecure mapping. The resulting pg_ident.conf will look like this: local <postgres system user> postgres <user defined lines> Inside the cluster manifest, pg_ident lines are added as list items in .spec.postgresql.pg_ident . For example: postgresql: pg_ident: - \"mymap /^(.*)@mydomain\\\\.com$ \\\\1\"","title":"The pg_ident section"},{"location":"postgresql_conf/#changing-configuration","text":"You can apply configuration changes by editing the postgresql section of the Cluster resource. After the change, the cluster instances will immediately reload the configuration to apply the changes. If the change involves a parameter requiring a restart, the operator will perform a rolling upgrade.","title":"Changing configuration"},{"location":"postgresql_conf/#enabling-alter-system","text":"CloudNativePG strongly advocates employing the Cluster manifest as the exclusive method for altering the configuration of a PostgreSQL cluster. This approach guarantees coherence across the entire high-availability cluster and aligns with best practices for Infrastructure-as-Code. In CloudNativePG the default configuration disables the use of ALTER SYSTEM on new Postgres clusters. This decision is rooted in the recognition of potential risks associated with this command. To enable the use of ALTER SYSTEM , you can explicitly set .spec.postgresql.enableAlterSystem to true . Warning Proceed with caution when utilizing ALTER SYSTEM . This command operates directly on the connected instance and does not undergo replication. CloudNativePG assumes responsibility for certain fixed parameters and complete control over others, emphasizing the need for careful consideration. Starting from PostgreSQL 17, the .spec.postgresql.enableAlterSystem setting directly controls the allow_alter_system GUC in PostgreSQL \u2014 a feature directly contributed by CloudNativePG to PostgreSQL. Prior to PostgreSQL 17, when .spec.postgresql.enableAlterSystem is set to false , the postgresql.auto.conf file is made read-only. Consequently, any attempt to execute the ALTER SYSTEM command will result in an error. The error message might look like this: ERROR: could not open file \"postgresql.auto.conf\": Permission denied","title":"Enabling ALTER SYSTEM"},{"location":"postgresql_conf/#dynamic-shared-memory-settings","text":"PostgreSQL supports a few implementations for dynamic shared memory management through the dynamic_shared_memory_type configuration option. In CloudNativePG we recommend to limit ourselves to any of the following two values: posix : which relies on POSIX shared memory allocated using shm_open (default setting) sysv : which is based on System V shared memory allocated via shmget In PostgreSQL, this setting is particularly important for memory allocation in parallel queries. For details, please refer to this thread from the pgsql-general mailing list .","title":"Dynamic Shared Memory settings"},{"location":"postgresql_conf/#posix-shared-memory","text":"The default setting of posix should be enough in most cases, considering that the operator automatically mounts a memory-bound EmptyDir volume called shm under /dev/shm . You can verify the size of such volume inside the running Postgres container with: mount | grep shm You should get something similar to the following output: shm on /dev/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=******) If you would like to set a maximum size for the shm volume, you can do so by setting the .spec.ephemeralVolumesSizeLimit.shm field in the Cluster resource. For example: spec: ephemeralVolumesSizeLimit: shm: 1Gi","title":"POSIX shared memory"},{"location":"postgresql_conf/#system-v-shared-memory","text":"In case your Kubernetes cluster has a high enough value for the SHMMAX and SHMALL parameters, you can also set: dynamic_shared_memory_type: \"sysv\" You can check the SHMMAX / SHMALL from inside a PostgreSQL container, by running: ipcs -lm For example: ------ Shared Memory Limits -------- max number of segments = 4096 max seg size (kbytes) = 18014398509465599 max total shared memory (kbytes) = 18014398509481980 min seg size (bytes) = 1 As you can see, the very high number of max total shared memory recommends setting dynamic_shared_memory_type to sysv . An alternate method is to run: cat /proc/sys/kernel/shmall cat /proc/sys/kernel/shmmax","title":"System V shared memory"},{"location":"postgresql_conf/#fixed-parameters","text":"Some PostgreSQL configuration parameters should be managed exclusively by the operator. The operator prevents the user from setting them using a webhook. Users are not allowed to set the following configuration parameters in the postgresql section: allow_alter_system allow_system_table_mods archive_cleanup_command archive_command archive_mode bonjour bonjour_name cluster_name config_file data_directory data_sync_retry event_source external_pid_file hba_file hot_standby ident_file jit_provider listen_addresses log_destination log_directory log_file_mode log_filename log_rotation_age log_rotation_size log_truncate_on_rotation logging_collector port primary_conninfo primary_slot_name promote_trigger_file recovery_end_command recovery_min_apply_delay recovery_target recovery_target_action recovery_target_inclusive recovery_target_lsn recovery_target_name recovery_target_time recovery_target_timeline recovery_target_xid restart_after_crash restore_command shared_preload_libraries ssl ssl_ca_file ssl_cert_file ssl_crl_file ssl_dh_params_file ssl_ecdh_curve ssl_key_file ssl_passphrase_command ssl_passphrase_command_supports_reload ssl_prefer_server_ciphers stats_temp_directory synchronous_standby_names syslog_facility syslog_ident syslog_sequence_numbers syslog_split_messages unix_socket_directories unix_socket_group unix_socket_permissions","title":"Fixed parameters"},{"location":"preview_version/","text":"Preview Versions CloudNativePG candidate releases are pre-release versions made available for testing before the community issues a new generally available (GA) release. These versions are feature-frozen, meaning no new features are added, and are intended for public testing prior to the final release. Important CloudNativePG release candidates are not intended for use in production systems. Purpose of Release Candidates Release candidates are provided to the community for extensive testing before the official release. While a release candidate aims to be identical to the initial release of a new minor version of CloudNativePG, additional changes may be implemented before the GA release. Community Involvement The stability of each CloudNativePG minor release significantly depends on the community's efforts to test the upcoming version with their workloads and tools. Identifying bugs and regressions through user testing is crucial in determining when we can finalize the release. Usage Advisory The CloudNativePG Community strongly advises against using preview versions of CloudNativePG in production environments or active development projects. Although CloudNativePG undergoes extensive automated and manual testing, beta releases may contain serious bugs. Features in preview versions may change in ways that are not backwards compatible and could be removed entirely. Current Preview Version The current preview version is 1.27.0-rc1 . For more information on the current preview version and how to test, please view the links below: Announcement Documentation","title":"Preview Versions"},{"location":"preview_version/#preview-versions","text":"CloudNativePG candidate releases are pre-release versions made available for testing before the community issues a new generally available (GA) release. These versions are feature-frozen, meaning no new features are added, and are intended for public testing prior to the final release. Important CloudNativePG release candidates are not intended for use in production systems.","title":"Preview Versions"},{"location":"preview_version/#purpose-of-release-candidates","text":"Release candidates are provided to the community for extensive testing before the official release. While a release candidate aims to be identical to the initial release of a new minor version of CloudNativePG, additional changes may be implemented before the GA release.","title":"Purpose of Release Candidates"},{"location":"preview_version/#community-involvement","text":"The stability of each CloudNativePG minor release significantly depends on the community's efforts to test the upcoming version with their workloads and tools. Identifying bugs and regressions through user testing is crucial in determining when we can finalize the release.","title":"Community Involvement"},{"location":"preview_version/#usage-advisory","text":"The CloudNativePG Community strongly advises against using preview versions of CloudNativePG in production environments or active development projects. Although CloudNativePG undergoes extensive automated and manual testing, beta releases may contain serious bugs. Features in preview versions may change in ways that are not backwards compatible and could be removed entirely.","title":"Usage Advisory"},{"location":"preview_version/#current-preview-version","text":"The current preview version is 1.27.0-rc1 . For more information on the current preview version and how to test, please view the links below: Announcement Documentation","title":"Current Preview Version"},{"location":"quickstart/","text":"Quickstart This section guides you through testing a PostgreSQL cluster on your local machine by deploying CloudNativePG on a local Kubernetes cluster using either Kind or Minikube . Warning The instructions contained in this section are for demonstration, testing, and practice purposes only and must not be used in production. Like any other Kubernetes application, CloudNativePG is deployed using regular manifests written in YAML. By following the instructions on this page you should be able to start a PostgreSQL cluster on your local Kubernetes installation and experiment with it. Important Make sure that you have kubectl installed on your machine in order to connect to the Kubernetes cluster. Please follow the Kubernetes documentation on how to install kubectl . Part 1: Setup the local Kubernetes playground The first part is about installing Minikube or Kind. Please spend some time reading about the systems and decide which one to proceed with. After setting up one of them, please proceed with part 2. We also provide instructions for setting up monitoring with Prometheus and Grafana for local testing/evaluation, in part 4 Minikube Minikube is a tool that makes it easy to run Kubernetes locally. Minikube runs a single-node Kubernetes cluster inside a Virtual Machine (VM) on your laptop for users looking to try out Kubernetes or develop with it day-to-day. Normally, it is used in conjunction with VirtualBox. You can find more information in the official Kubernetes documentation on how to install Minikube in your local personal environment. When you installed it, run the following command to create a minikube cluster: minikube start This will create the Kubernetes cluster, and you will be ready to use it. Verify that it works with the following command: kubectl get nodes You will see one node called minikube . Kind If you do not want to use a virtual machine hypervisor, then Kind is a tool for running local Kubernetes clusters using Docker container \"nodes\" (Kind stands for \"Kubernetes IN Docker\" indeed). Install kind on your environment following the instructions in the Quickstart , then create a Kubernetes cluster with: kind create cluster --name pg Part 2: Install CloudNativePG Now that you have a Kubernetes installation up and running on your laptop, you can proceed with CloudNativePG installation. Please refer to the \"Installation\" section and then proceed with the deployment of a PostgreSQL cluster. Part 3: Deploy a PostgreSQL cluster As with any other deployment in Kubernetes, to deploy a PostgreSQL cluster you need to apply a configuration file that defines your desired Cluster . The cluster-example.yaml sample file defines a simple Cluster using the default storage class to allocate disk space: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 storage: size: 1Gi There's more For more detailed information about the available options, please refer to the \"API Reference\" section . In order to create the 3-node PostgreSQL cluster, you need to run the following command: kubectl apply -f cluster-example.yaml You can check that the pods are being created with the get pods command: kubectl get pods That will look for pods in the default namespace. To separate your cluster from other workloads on your Kubernetes installation, you could always create a new namespace to deploy clusters on. Alternatively, you can use labels. The operator will apply the cnpg.io/cluster label on all objects relevant to a particular cluster. For example: kubectl get pods -l cnpg.io/cluster=<CLUSTER> Important Note that we are using cnpg.io/cluster as the label. In the past you may have seen or used postgresql . This label is being deprecated, and will be dropped in the future. Please use cnpg.io/cluster . By default, the operator will install the latest available minor version of the latest major version of PostgreSQL when the operator was released. You can override this by setting the imageName key in the spec section of the Cluster definition. For example, to install PostgreSQL 13.6: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: # [...] spec: # [...] imageName: ghcr.io/cloudnative-pg/postgresql:13.6 #[...] Important The immutable infrastructure paradigm requires that you always point to a specific version of the container image. Never use tags like latest or 13 in a production environment as it might lead to unpredictable scenarios in terms of update policies and version consistency in the cluster. For strict deterministic and repeatable deployments, you can add the digests to the image name, through the <image>:<tag>@sha256:<digestValue> format. There's more There are some examples cluster configurations bundled with the operator. Please refer to the \"Examples\" section . Part 4: Monitor clusters with Prometheus and Grafana Important Installing Prometheus and Grafana is beyond the scope of this project. The instructions in this section are provided for experimentation and illustration only. In this section we show how to deploy Prometheus and Grafana for observability, and how to create a Grafana Dashboard to monitor CloudNativePG clusters, and a set of Prometheus Rules defining alert conditions. We leverage the Kube-Prometheus stack Helm chart, which is maintained by the Prometheus Community . Please refer to the project website for additional documentation and background. The Kube-Prometheus-stack Helm chart installs the Prometheus Operator , including the Alert Manager , and a Grafana deployment. We include a configuration file for the deployment of this Helm chart that will provide useful initial settings for observability of CloudNativePG clusters. Installation If you don't have Helm installed yet, please follow the instructions to install it in your system. We need to add the prometheus-community helm chart repository, and then install the Kube Prometheus stack with our sample configuration kube-stack-config.yaml . We can accomplish this with the following commands: helm repo add prometheus-community \\ https://prometheus-community.github.io/helm-charts helm upgrade --install \\ -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/kube-stack-config.yaml \\ prometheus-community \\ prometheus-community/kube-prometheus-stack After completion, you will have Prometheus, Grafana, and Alert Manager, configured with the kube-stack-config.yaml file: From the Prometheus installation, you will have the Prometheus Operator watching for any PodMonitor (see monitoring ). Alert Manager and Grafana are both enabled. Seealso For further information about the above helm commands, refer to the helm install documentation. You can see several Custom Resources have been created: % kubectl get crds NAME CREATED AT \u2026 alertmanagers.monitoring.coreos.com <timestamp> \u2026 prometheuses.monitoring.coreos.com <timestamp> prometheusrules.monitoring.coreos.com <timestamp> \u2026 as well as a series of Services: % kubectl get svc NAME TYPE PORT(S) \u2026 \u2026 \u2026 prometheus-community-grafana ClusterIP 80/TCP prometheus-community-kube-alertmanager ClusterIP 9093/TCP prometheus-community-kube-operator ClusterIP 443/TCP prometheus-community-kube-prometheus ClusterIP 9090/TCP Viewing with Prometheus At this point, a CloudNativePG cluster deployed with monitoring activated would be observable via Prometheus. For example, you could deploy a simple cluster with PodMonitor enabled: kubectl apply -f - <<EOF --- apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-with-metrics spec: instances: 3 storage: size: 1Gi monitoring: enablePodMonitor: true EOF To access Prometheus, port-forward the Prometheus service: kubectl port-forward svc/prometheus-community-kube-prometheus 9090 Then access the Prometheus console locally at: http://localhost:9090/ You should find a series of metrics relating to CloudNativePG clusters. Please refer to the monitoring section for more information. You can also monitor the CloudNativePG operator by creating a PodMonitor to target it. See the relevant section in the monitoring page . You can define some alerts by creating a prometheusRule : kubectl apply -f \\ https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/prometheusrule.yaml You should see the default alerts now: % kubectl get prometheusrules NAME AGE cnpg-default-alerts 3m27s In the Prometheus console, you can click on the Alerts menu to see the alerts we just installed. Grafana Dashboard In our installation so far, Grafana is deployed with no predefined dashboards. To open Grafana, you can port-forward the grafana service: kubectl port-forward svc/prometheus-community-grafana 3000:80 and access Grafana locally at http://localhost:3000/ providing the credentials admin as username, prom-operator as password (defined in kube-stack-config.yaml ). CloudNativePG provides a default dashboard for Grafana in the dedicated grafana-dashboards repository . You can download the file grafana-dashboard.json and manually import it via the GUI (menu: Dashboards > New > Import). You can now click on the CloudNativePG dashboard just created: Warning Some graphs in the previous dashboard make use of metrics that are in alpha stage by the time this was created, like kubelet_volume_stats_available_bytes and kubelet_volume_stats_capacity_bytes producing some graphs to show No data . Note that in our local setup, Prometheus and Grafana are configured to automatically discover and monitor any CloudNativePG clusters deployed with the Monitoring feature enabled.","title":"Quickstart"},{"location":"quickstart/#quickstart","text":"This section guides you through testing a PostgreSQL cluster on your local machine by deploying CloudNativePG on a local Kubernetes cluster using either Kind or Minikube . Warning The instructions contained in this section are for demonstration, testing, and practice purposes only and must not be used in production. Like any other Kubernetes application, CloudNativePG is deployed using regular manifests written in YAML. By following the instructions on this page you should be able to start a PostgreSQL cluster on your local Kubernetes installation and experiment with it. Important Make sure that you have kubectl installed on your machine in order to connect to the Kubernetes cluster. Please follow the Kubernetes documentation on how to install kubectl .","title":"Quickstart"},{"location":"quickstart/#part-1-setup-the-local-kubernetes-playground","text":"The first part is about installing Minikube or Kind. Please spend some time reading about the systems and decide which one to proceed with. After setting up one of them, please proceed with part 2. We also provide instructions for setting up monitoring with Prometheus and Grafana for local testing/evaluation, in part 4","title":"Part 1: Setup the local Kubernetes playground"},{"location":"quickstart/#minikube","text":"Minikube is a tool that makes it easy to run Kubernetes locally. Minikube runs a single-node Kubernetes cluster inside a Virtual Machine (VM) on your laptop for users looking to try out Kubernetes or develop with it day-to-day. Normally, it is used in conjunction with VirtualBox. You can find more information in the official Kubernetes documentation on how to install Minikube in your local personal environment. When you installed it, run the following command to create a minikube cluster: minikube start This will create the Kubernetes cluster, and you will be ready to use it. Verify that it works with the following command: kubectl get nodes You will see one node called minikube .","title":"Minikube"},{"location":"quickstart/#kind","text":"If you do not want to use a virtual machine hypervisor, then Kind is a tool for running local Kubernetes clusters using Docker container \"nodes\" (Kind stands for \"Kubernetes IN Docker\" indeed). Install kind on your environment following the instructions in the Quickstart , then create a Kubernetes cluster with: kind create cluster --name pg","title":"Kind"},{"location":"quickstart/#part-2-install-cloudnativepg","text":"Now that you have a Kubernetes installation up and running on your laptop, you can proceed with CloudNativePG installation. Please refer to the \"Installation\" section and then proceed with the deployment of a PostgreSQL cluster.","title":"Part 2: Install CloudNativePG"},{"location":"quickstart/#part-3-deploy-a-postgresql-cluster","text":"As with any other deployment in Kubernetes, to deploy a PostgreSQL cluster you need to apply a configuration file that defines your desired Cluster . The cluster-example.yaml sample file defines a simple Cluster using the default storage class to allocate disk space: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 storage: size: 1Gi There's more For more detailed information about the available options, please refer to the \"API Reference\" section . In order to create the 3-node PostgreSQL cluster, you need to run the following command: kubectl apply -f cluster-example.yaml You can check that the pods are being created with the get pods command: kubectl get pods That will look for pods in the default namespace. To separate your cluster from other workloads on your Kubernetes installation, you could always create a new namespace to deploy clusters on. Alternatively, you can use labels. The operator will apply the cnpg.io/cluster label on all objects relevant to a particular cluster. For example: kubectl get pods -l cnpg.io/cluster=<CLUSTER> Important Note that we are using cnpg.io/cluster as the label. In the past you may have seen or used postgresql . This label is being deprecated, and will be dropped in the future. Please use cnpg.io/cluster . By default, the operator will install the latest available minor version of the latest major version of PostgreSQL when the operator was released. You can override this by setting the imageName key in the spec section of the Cluster definition. For example, to install PostgreSQL 13.6: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: # [...] spec: # [...] imageName: ghcr.io/cloudnative-pg/postgresql:13.6 #[...] Important The immutable infrastructure paradigm requires that you always point to a specific version of the container image. Never use tags like latest or 13 in a production environment as it might lead to unpredictable scenarios in terms of update policies and version consistency in the cluster. For strict deterministic and repeatable deployments, you can add the digests to the image name, through the <image>:<tag>@sha256:<digestValue> format. There's more There are some examples cluster configurations bundled with the operator. Please refer to the \"Examples\" section .","title":"Part 3: Deploy a PostgreSQL cluster"},{"location":"quickstart/#part-4-monitor-clusters-with-prometheus-and-grafana","text":"Important Installing Prometheus and Grafana is beyond the scope of this project. The instructions in this section are provided for experimentation and illustration only. In this section we show how to deploy Prometheus and Grafana for observability, and how to create a Grafana Dashboard to monitor CloudNativePG clusters, and a set of Prometheus Rules defining alert conditions. We leverage the Kube-Prometheus stack Helm chart, which is maintained by the Prometheus Community . Please refer to the project website for additional documentation and background. The Kube-Prometheus-stack Helm chart installs the Prometheus Operator , including the Alert Manager , and a Grafana deployment. We include a configuration file for the deployment of this Helm chart that will provide useful initial settings for observability of CloudNativePG clusters.","title":"Part 4: Monitor clusters with Prometheus and Grafana"},{"location":"quickstart/#installation","text":"If you don't have Helm installed yet, please follow the instructions to install it in your system. We need to add the prometheus-community helm chart repository, and then install the Kube Prometheus stack with our sample configuration kube-stack-config.yaml . We can accomplish this with the following commands: helm repo add prometheus-community \\ https://prometheus-community.github.io/helm-charts helm upgrade --install \\ -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/kube-stack-config.yaml \\ prometheus-community \\ prometheus-community/kube-prometheus-stack After completion, you will have Prometheus, Grafana, and Alert Manager, configured with the kube-stack-config.yaml file: From the Prometheus installation, you will have the Prometheus Operator watching for any PodMonitor (see monitoring ). Alert Manager and Grafana are both enabled. Seealso For further information about the above helm commands, refer to the helm install documentation. You can see several Custom Resources have been created: % kubectl get crds NAME CREATED AT \u2026 alertmanagers.monitoring.coreos.com <timestamp> \u2026 prometheuses.monitoring.coreos.com <timestamp> prometheusrules.monitoring.coreos.com <timestamp> \u2026 as well as a series of Services: % kubectl get svc NAME TYPE PORT(S) \u2026 \u2026 \u2026 prometheus-community-grafana ClusterIP 80/TCP prometheus-community-kube-alertmanager ClusterIP 9093/TCP prometheus-community-kube-operator ClusterIP 443/TCP prometheus-community-kube-prometheus ClusterIP 9090/TCP","title":"Installation"},{"location":"quickstart/#viewing-with-prometheus","text":"At this point, a CloudNativePG cluster deployed with monitoring activated would be observable via Prometheus. For example, you could deploy a simple cluster with PodMonitor enabled: kubectl apply -f - <<EOF --- apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-with-metrics spec: instances: 3 storage: size: 1Gi monitoring: enablePodMonitor: true EOF To access Prometheus, port-forward the Prometheus service: kubectl port-forward svc/prometheus-community-kube-prometheus 9090 Then access the Prometheus console locally at: http://localhost:9090/ You should find a series of metrics relating to CloudNativePG clusters. Please refer to the monitoring section for more information. You can also monitor the CloudNativePG operator by creating a PodMonitor to target it. See the relevant section in the monitoring page . You can define some alerts by creating a prometheusRule : kubectl apply -f \\ https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/prometheusrule.yaml You should see the default alerts now: % kubectl get prometheusrules NAME AGE cnpg-default-alerts 3m27s In the Prometheus console, you can click on the Alerts menu to see the alerts we just installed.","title":"Viewing with Prometheus"},{"location":"quickstart/#grafana-dashboard","text":"In our installation so far, Grafana is deployed with no predefined dashboards. To open Grafana, you can port-forward the grafana service: kubectl port-forward svc/prometheus-community-grafana 3000:80 and access Grafana locally at http://localhost:3000/ providing the credentials admin as username, prom-operator as password (defined in kube-stack-config.yaml ). CloudNativePG provides a default dashboard for Grafana in the dedicated grafana-dashboards repository . You can download the file grafana-dashboard.json and manually import it via the GUI (menu: Dashboards > New > Import). You can now click on the CloudNativePG dashboard just created: Warning Some graphs in the previous dashboard make use of metrics that are in alpha stage by the time this was created, like kubelet_volume_stats_available_bytes and kubelet_volume_stats_capacity_bytes producing some graphs to show No data . Note that in our local setup, Prometheus and Grafana are configured to automatically discover and monitor any CloudNativePG clusters deployed with the Monitoring feature enabled.","title":"Grafana Dashboard"},{"location":"recovery/","text":"Recovery In PostgreSQL, recovery refers to the process of starting an instance from an existing physical backup. PostgreSQL's recovery system is robust and feature-rich, supporting Point-In-Time Recovery (PITR) \u2014the ability to restore a cluster to any specific moment, from the earliest available backup to the latest archived WAL file. Important A valid WAL archive is required to perform PITR. In CloudNativePG, recovery is not performed in-place on an existing cluster. Instead, it is used to bootstrap a new cluster from a physical backup. Note For more details on configuring the bootstrap stanza, refer to Bootstrap . The recovery bootstrap mode allows you to initialize a cluster from a physical base backup and replay the associated WAL files to bring the system to a consistent and optionally point-in-time state. CloudNativePG supports recovery via: A pluggable backup and recovery interface (CNPG-I) , enabling integration with external tools such as the Barman Cloud Plugin . Native recovery from volume snapshots , where supported by the underlying Kubernetes storage infrastructure. Native recovery from object stores via Barman Cloud , which is deprecated as of version 1.26 in favor of the plugin-based approach. With the deprecation of native Barman Cloud support in version 1.26, this section now focuses on two supported recovery methods: using the Barman Cloud Plugin for recovery from object stores, and the native interface for recovery from volume snapshots. Important For legacy documentation, see Appendix B \u2013 Recovery from an Object Store . Recovery from an Object Store with the Barman Cloud Plugin This section outlines how to recover a PostgreSQL cluster from an object store using the recommended Barman Cloud Plugin. Important The object store must contain backup data produced by a CloudNativePG Cluster \u2014either using the deprecated native Barman Cloud integration or the Barman Cloud Plugin . Info For full details, refer to the \u201cRecovery of a Postgres Cluster\u201d section in the Barman Cloud Plugin documentation . Begin by defining the object store that holds both your base backups and WAL files. The Barman Cloud Plugin uses a custom ObjectStore resource for this purpose. The following example shows how to configure one for Azure Blob Storage: apiVersion: barmancloud.cnpg.io/v1 kind: ObjectStore metadata: name: cluster-example-backup spec: configuration: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8 Next, configure the Cluster resource to use the ObjectStore you defined. In the bootstrap section, specify the recovery source, and define an externalCluster entry that references the plugin: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] superuserSecret: name: superuser-secret bootstrap: recovery: source: origin externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example Recovery from VolumeSnapshot Objects Warning When creating replicas after recovering a primary instance from a VolumeSnapshot , the operator may fall back to using pg_basebackup to synchronize them. This process can be significantly slower\u2014especially for large databases\u2014because it involves a full base backup. This limitation will be addressed in the future with support for online backups and PVC cloning in the scale-up process. CloudNativePG allows you to create a new cluster from a VolumeSnapshot of a PersistentVolumeClaim (PVC) that belongs to an existing Cluster . These snapshots are created using the declarative API for volume snapshot backups . To complete the recovery process, the new cluster must also reference an external cluster that provides access to the WAL archive needed to reapply changes and finalize the recovery. The following example shows a cluster being recovered using both a VolumeSnapshot for the base backup and a WAL archive accessed through the Barman Cloud Plugin: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] bootstrap: recovery: source: origin volumeSnapshots: storage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example In case the backed-up cluster was using a separate PVC to store the WAL files, the recovery must include that too: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] bootstrap: recovery: volumeSnapshots: storage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io walStorage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Warning If bootstrapping a replica-mode cluster from snapshots, to leverage snapshots for the standby instances and not just the primary, we recommend that you: Start with a single instance replica cluster. The primary instance will be recovered using the snapshot, and available WALs from the source cluster. Take a snapshot of the primary in the replica cluster. Increase the number of instances in the replica cluster as desired. Recovery from a Backup object If a Backup resource is already available in the namespace in which you need to create the cluster, you can specify the name using .spec.bootstrap.recovery.backup.name , as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: recovery: backup: name: backup-example storage: size: 1Gi This bootstrap method allows you to specify just a reference to the backup that needs to be restored. The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Additional Considerations Whether you recover from an object store, a volume snapshot, or an existing Backup resource, no changes to the database, including the catalog, are permitted until the Cluster is fully promoted to primary and accepts write operations. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. As a result, the following considerations apply: The application database name and user are copied from the backup being restored. The operator does not currently back up the underlying secrets, as this is part of the usual maintenance activity of the Kubernetes cluster. To preserve the original postgres user password, configure enableSuperuserAccess and supply a superuserSecret . By default, recovery continues up to the latest available WAL on the default target timeline ( latest ). You can optionally specify a recoveryTarget to perform a point-in-time recovery (see Point in Time Recovery (PITR) ). Important Consider using the barmanObjectStore.wal.maxParallel option to speed up WAL fetching from the archive by concurrently downloading the transaction logs from the recovery object store. Point in time recovery (PITR) Instead of replaying all the WALs up to the latest one, after extracting a base backup, you can ask PostgreSQL to stop replaying WALs at any given point in time. PostgreSQL uses this technique to achieve PITR. The presence of a WAL archive is mandatory. Important PITR requires you to specify a recovery target by using the options described in Recovery targets . The operator generates the configuration parameters required for this feature to work if you specify a recovery target. PITR from an object store This example uses the same recovery object store in Azure defined earlier for the Barman Cloud plugin, containing both the base backups and the WAL archive. The recovery target is based on a requested timestamp. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore-pitr spec: instances: 3 storage: size: 5Gi bootstrap: recovery: # Recovery object store containing WAL archive and base backups source: origin recoveryTarget: # Time base target for the recovery targetTime: \"2023-08-11 11:14:21.00000+02\" externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example In this example, you had to specify only the targetTime in the form of a timestamp. You didn't have to specify the base backup from which to start the recovery. The backupID option is the one that allows you to specify the base backup from which to initiate the recovery process. By default, this value is empty. If you assign a value to it (in the form of a Barman backup ID), the operator uses that backup as the base for the recovery. Important You need to make sure that such a backup exists and is accessible. If you don't specify the backup ID, the operator detects the base backup for the recovery as follows: When you use targetTime or targetLSN , the operator selects the closest backup that was completed before that target. Otherwise, the operator selects the last available backup, in chronological order. Point-in-Time Recovery (PITR) from VolumeSnapshot Objects The following example demonstrates how to perform a Point-in-Time Recovery (PITR) using: A Kubernetes VolumeSnapshot of the PGDATA directory, which provides the base backup. This snapshot is specified in the recovery.volumeSnapshots section and is named test-snapshot-1 . A recovery object store (in this case, MinIO) containing the archived WAL files. The object store is defined via a Barman Cloud Plugin ObjectStore resource (not shown here), and referenced using the recovery.source field, which points to an external cluster configuration. The cluster will be restored to a specific point in time using the recoveryTarget.targetTime option. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-snapshot spec: # ... bootstrap: recovery: source: origin volumeSnapshots: storage: name: test-snapshot-1 kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io recoveryTarget: targetTime: \"2023-07-06T08:00:39\" externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: minio-backup serverName: cluster-example This setup enables CloudNativePG to restore the base data from a volume snapshot and apply WAL segments from the object store to reach the desired recovery target. Note If the backed-up cluster had walStorage enabled, you also must specify the volume snapshot containing the PGWAL directory, as mentioned in Recovery from VolumeSnapshot objects . Warning It's your responsibility to ensure that the end time of the base backup in the volume snapshot is before the recovery target timestamp. Warning If you added or removed a tablespace in your cluster since the last base backup, replaying the WAL will fail. You need a base backup between the time of the tablespace change and the recovery target timestamp. Recovery targets Here are the recovery target criteria you can use: targetTime Time stamp up to which recovery proceeds, expressed in RFC 3339 format. (The precise stopping point is also influenced by the exclusive option.) Warning PostgreSQL recovery will stop when it encounters the first transaction that occurs after the specified time. If no such transaction exists after the target time, the recovery process will fail. targetXID Transaction ID up to which recovery proceeds. (The precise stopping point is also influenced by the exclusive option.) Keep in mind that while transaction IDs are assigned sequentially at transaction start, transactions can complete in a different numeric order. The transactions that are recovered are those that committed before (and optionally including) the specified one. targetName Named restore point (created with pg_create_restore_point() ) to which recovery proceeds. targetLSN LSN of the write-ahead log location up to which recovery proceeds. (The precise stopping point is also influenced by the exclusive option.) targetImmediate Recovery ends as soon as a consistent state is reached, that is, as early as possible. When restoring from an online backup, this means the point where taking the backup ended. Important The operator can retrieve the closest backup when you specify either targetTime or targetLSN . However, this isn't possible for the remaining targets: targetName , targetXID , and targetImmediate . In such cases, it's mandatory to specify backupID . This example uses a targetName -based recovery target: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] bootstrap: recovery: source: origin recoveryTarget: backupID: 20220616T142236 targetName: 'restore_point_1' [...] You can choose only a single one among the targets in each recoveryTarget configuration. Additionally, you can specify targetTLI to force recovery to a specific timeline. By default, the previous parameters are considered to be inclusive, stopping just after the recovery target, matching the behavior in PostgreSQL . You can request exclusive behavior, stopping right before the recovery target, by setting the exclusive parameter to true . The following example shows this behavior, relying on a blob container in Azure for both base backups and the WAL archive: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore-pitr spec: instances: 3 storage: size: 5Gi bootstrap: recovery: source: origin recoveryTarget: backupID: 20220616T142236 targetName: \"maintenance-activity\" exclusive: true externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example Configure the application database For the recovered cluster, you can configure the application database name and credentials with additional configuration. To update application database credentials, you can generate your own passwords, store them as secrets, and update the database to use the secrets. Or you can also let the operator generate a secret with a randomly secure password for use. See Bootstrap an empty cluster for more information about secrets. Important While the Cluster is in recovery mode, no changes to the database, including the catalog, are permitted. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. During this phase, users remain as defined in the source cluster. The following example configures the app database with the owner app and the password stored in the provided secret app-secret , following the bootstrap from a live cluster. apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: bootstrap: recovery: database: app owner: app secret: name: app-secret [...] With the above configuration, the following will happen only after recovery is completed : If the app database does not exist, it will be created. If the app user does not exist, it will be created. If the app user is not the owner of the app database, ownership will be granted to the app user. If the username value matches the owner value in the secret, the password for the application user (the app user in this case) will be updated to the password value in the secret. How recovery works under the hood You can use the data uploaded to the object storage to bootstrap a new cluster from an existing backup. The operator orchestrates the recovery process using the barman-cloud-restore tool (for the base backup) and the barman-cloud-wal-restore tool (for WAL files, including parallel support, if requested). For details and instructions on the recovery bootstrap method, see Bootstrap from a backup . Important If you're not familiar with how PostgreSQL PITR works, we suggest that you configure the recovery cluster as the original one when it comes to .spec.postgresql.parameters . Once the new cluster is restored, you can then change the settings as desired. The way it works is that the operator injects an init container in the first instance of the new cluster, and the init container starts recovering the backup from the object storage. Important The duration of the base backup copy in the new PVC depends on the size of the backup, as well as the speed of both the network and the storage. When the base backup recovery process is complete, the operator starts the Postgres instance in recovery mode. In this phase, PostgreSQL is up, though not able to accept connections, and the pod is healthy according to the liveness probe. By way of the restore_command , PostgreSQL starts fetching WAL files from the archive. You can speed up this phase by setting the maxParallel option and enabling the parallel WAL restore capability. This phase terminates when PostgreSQL reaches the target, either the end of the WAL or the required target in case of PITR. You can optionally specify a recoveryTarget to perform a PITR. If left unspecified, the recovery continues up to the latest available WAL on the default target timeline ( latest ). Once the recovery is complete, the operator sets the required superuser password into the instance. The new primary instance starts as usual, and the remaining instances join the cluster as replicas. The process is transparent for the user and is managed by the instance manager running in the pods. Restoring into a Cluster with a Backup Section When restoring a cluster, the manifest may include a plugins section with Barman Cloud plugin pointing to a backup object store resource. This enables the newly created cluster to begin archiving WAL files and taking backups immediately after recovery\u2014provided backup policies are configured. Avoid reusing the same ObjectStore configuration for both backup and recovery in the same cluster. If you must, ensure that each cluster uses a unique serverName to prevent accidental overwrites of backup or WAL archive data. Warning CloudNativePG includes a safety check to prevent a cluster from overwriting existing data in a shared storage bucket. If a conflict is detected, the cluster remains in the Setting up primary state, and the associated pods will fail with an error. The pod logs will display: ERROR: WAL archive check failed for server recoveredCluster: Expected empty archive . Important You can bypass this safety check by setting the cnpg.io/skipEmptyWalArchiveCheck annotation to enabled on the recovered cluster. However, this is strongly discouraged unless you are highly familiar with PostgreSQL's recovery process. Skipping the check incorrectly can lead to severe data loss. Use with caution and only in expert scenarios.","title":"Recovery"},{"location":"recovery/#recovery","text":"In PostgreSQL, recovery refers to the process of starting an instance from an existing physical backup. PostgreSQL's recovery system is robust and feature-rich, supporting Point-In-Time Recovery (PITR) \u2014the ability to restore a cluster to any specific moment, from the earliest available backup to the latest archived WAL file. Important A valid WAL archive is required to perform PITR. In CloudNativePG, recovery is not performed in-place on an existing cluster. Instead, it is used to bootstrap a new cluster from a physical backup. Note For more details on configuring the bootstrap stanza, refer to Bootstrap . The recovery bootstrap mode allows you to initialize a cluster from a physical base backup and replay the associated WAL files to bring the system to a consistent and optionally point-in-time state. CloudNativePG supports recovery via: A pluggable backup and recovery interface (CNPG-I) , enabling integration with external tools such as the Barman Cloud Plugin . Native recovery from volume snapshots , where supported by the underlying Kubernetes storage infrastructure. Native recovery from object stores via Barman Cloud , which is deprecated as of version 1.26 in favor of the plugin-based approach. With the deprecation of native Barman Cloud support in version 1.26, this section now focuses on two supported recovery methods: using the Barman Cloud Plugin for recovery from object stores, and the native interface for recovery from volume snapshots. Important For legacy documentation, see Appendix B \u2013 Recovery from an Object Store .","title":"Recovery"},{"location":"recovery/#recovery-from-an-object-store-with-the-barman-cloud-plugin","text":"This section outlines how to recover a PostgreSQL cluster from an object store using the recommended Barman Cloud Plugin. Important The object store must contain backup data produced by a CloudNativePG Cluster \u2014either using the deprecated native Barman Cloud integration or the Barman Cloud Plugin . Info For full details, refer to the \u201cRecovery of a Postgres Cluster\u201d section in the Barman Cloud Plugin documentation . Begin by defining the object store that holds both your base backups and WAL files. The Barman Cloud Plugin uses a custom ObjectStore resource for this purpose. The following example shows how to configure one for Azure Blob Storage: apiVersion: barmancloud.cnpg.io/v1 kind: ObjectStore metadata: name: cluster-example-backup spec: configuration: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8 Next, configure the Cluster resource to use the ObjectStore you defined. In the bootstrap section, specify the recovery source, and define an externalCluster entry that references the plugin: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] superuserSecret: name: superuser-secret bootstrap: recovery: source: origin externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example","title":"Recovery from an Object Store with the Barman Cloud Plugin"},{"location":"recovery/#recovery-from-volumesnapshot-objects","text":"Warning When creating replicas after recovering a primary instance from a VolumeSnapshot , the operator may fall back to using pg_basebackup to synchronize them. This process can be significantly slower\u2014especially for large databases\u2014because it involves a full base backup. This limitation will be addressed in the future with support for online backups and PVC cloning in the scale-up process. CloudNativePG allows you to create a new cluster from a VolumeSnapshot of a PersistentVolumeClaim (PVC) that belongs to an existing Cluster . These snapshots are created using the declarative API for volume snapshot backups . To complete the recovery process, the new cluster must also reference an external cluster that provides access to the WAL archive needed to reapply changes and finalize the recovery. The following example shows a cluster being recovered using both a VolumeSnapshot for the base backup and a WAL archive accessed through the Barman Cloud Plugin: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] bootstrap: recovery: source: origin volumeSnapshots: storage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example In case the backed-up cluster was using a separate PVC to store the WAL files, the recovery must include that too: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] bootstrap: recovery: volumeSnapshots: storage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io walStorage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Warning If bootstrapping a replica-mode cluster from snapshots, to leverage snapshots for the standby instances and not just the primary, we recommend that you: Start with a single instance replica cluster. The primary instance will be recovered using the snapshot, and available WALs from the source cluster. Take a snapshot of the primary in the replica cluster. Increase the number of instances in the replica cluster as desired.","title":"Recovery from VolumeSnapshot Objects"},{"location":"recovery/#recovery-from-a-backup-object","text":"If a Backup resource is already available in the namespace in which you need to create the cluster, you can specify the name using .spec.bootstrap.recovery.backup.name , as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: recovery: backup: name: backup-example storage: size: 1Gi This bootstrap method allows you to specify just a reference to the backup that needs to be restored. The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" .","title":"Recovery from a Backup object"},{"location":"recovery/#additional-considerations","text":"Whether you recover from an object store, a volume snapshot, or an existing Backup resource, no changes to the database, including the catalog, are permitted until the Cluster is fully promoted to primary and accepts write operations. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. As a result, the following considerations apply: The application database name and user are copied from the backup being restored. The operator does not currently back up the underlying secrets, as this is part of the usual maintenance activity of the Kubernetes cluster. To preserve the original postgres user password, configure enableSuperuserAccess and supply a superuserSecret . By default, recovery continues up to the latest available WAL on the default target timeline ( latest ). You can optionally specify a recoveryTarget to perform a point-in-time recovery (see Point in Time Recovery (PITR) ). Important Consider using the barmanObjectStore.wal.maxParallel option to speed up WAL fetching from the archive by concurrently downloading the transaction logs from the recovery object store.","title":"Additional Considerations"},{"location":"recovery/#point-in-time-recovery-pitr","text":"Instead of replaying all the WALs up to the latest one, after extracting a base backup, you can ask PostgreSQL to stop replaying WALs at any given point in time. PostgreSQL uses this technique to achieve PITR. The presence of a WAL archive is mandatory. Important PITR requires you to specify a recovery target by using the options described in Recovery targets . The operator generates the configuration parameters required for this feature to work if you specify a recovery target.","title":"Point in time recovery (PITR)"},{"location":"recovery/#pitr-from-an-object-store","text":"This example uses the same recovery object store in Azure defined earlier for the Barman Cloud plugin, containing both the base backups and the WAL archive. The recovery target is based on a requested timestamp. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore-pitr spec: instances: 3 storage: size: 5Gi bootstrap: recovery: # Recovery object store containing WAL archive and base backups source: origin recoveryTarget: # Time base target for the recovery targetTime: \"2023-08-11 11:14:21.00000+02\" externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example In this example, you had to specify only the targetTime in the form of a timestamp. You didn't have to specify the base backup from which to start the recovery. The backupID option is the one that allows you to specify the base backup from which to initiate the recovery process. By default, this value is empty. If you assign a value to it (in the form of a Barman backup ID), the operator uses that backup as the base for the recovery. Important You need to make sure that such a backup exists and is accessible. If you don't specify the backup ID, the operator detects the base backup for the recovery as follows: When you use targetTime or targetLSN , the operator selects the closest backup that was completed before that target. Otherwise, the operator selects the last available backup, in chronological order.","title":"PITR from an object store"},{"location":"recovery/#point-in-time-recovery-pitr-from-volumesnapshot-objects","text":"The following example demonstrates how to perform a Point-in-Time Recovery (PITR) using: A Kubernetes VolumeSnapshot of the PGDATA directory, which provides the base backup. This snapshot is specified in the recovery.volumeSnapshots section and is named test-snapshot-1 . A recovery object store (in this case, MinIO) containing the archived WAL files. The object store is defined via a Barman Cloud Plugin ObjectStore resource (not shown here), and referenced using the recovery.source field, which points to an external cluster configuration. The cluster will be restored to a specific point in time using the recoveryTarget.targetTime option. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-snapshot spec: # ... bootstrap: recovery: source: origin volumeSnapshots: storage: name: test-snapshot-1 kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io recoveryTarget: targetTime: \"2023-07-06T08:00:39\" externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: minio-backup serverName: cluster-example This setup enables CloudNativePG to restore the base data from a volume snapshot and apply WAL segments from the object store to reach the desired recovery target. Note If the backed-up cluster had walStorage enabled, you also must specify the volume snapshot containing the PGWAL directory, as mentioned in Recovery from VolumeSnapshot objects . Warning It's your responsibility to ensure that the end time of the base backup in the volume snapshot is before the recovery target timestamp. Warning If you added or removed a tablespace in your cluster since the last base backup, replaying the WAL will fail. You need a base backup between the time of the tablespace change and the recovery target timestamp.","title":"Point-in-Time Recovery (PITR) from VolumeSnapshot Objects"},{"location":"recovery/#recovery-targets","text":"Here are the recovery target criteria you can use: targetTime Time stamp up to which recovery proceeds, expressed in RFC 3339 format. (The precise stopping point is also influenced by the exclusive option.) Warning PostgreSQL recovery will stop when it encounters the first transaction that occurs after the specified time. If no such transaction exists after the target time, the recovery process will fail. targetXID Transaction ID up to which recovery proceeds. (The precise stopping point is also influenced by the exclusive option.) Keep in mind that while transaction IDs are assigned sequentially at transaction start, transactions can complete in a different numeric order. The transactions that are recovered are those that committed before (and optionally including) the specified one. targetName Named restore point (created with pg_create_restore_point() ) to which recovery proceeds. targetLSN LSN of the write-ahead log location up to which recovery proceeds. (The precise stopping point is also influenced by the exclusive option.) targetImmediate Recovery ends as soon as a consistent state is reached, that is, as early as possible. When restoring from an online backup, this means the point where taking the backup ended. Important The operator can retrieve the closest backup when you specify either targetTime or targetLSN . However, this isn't possible for the remaining targets: targetName , targetXID , and targetImmediate . In such cases, it's mandatory to specify backupID . This example uses a targetName -based recovery target: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] bootstrap: recovery: source: origin recoveryTarget: backupID: 20220616T142236 targetName: 'restore_point_1' [...] You can choose only a single one among the targets in each recoveryTarget configuration. Additionally, you can specify targetTLI to force recovery to a specific timeline. By default, the previous parameters are considered to be inclusive, stopping just after the recovery target, matching the behavior in PostgreSQL . You can request exclusive behavior, stopping right before the recovery target, by setting the exclusive parameter to true . The following example shows this behavior, relying on a blob container in Azure for both base backups and the WAL archive: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore-pitr spec: instances: 3 storage: size: 5Gi bootstrap: recovery: source: origin recoveryTarget: backupID: 20220616T142236 targetName: \"maintenance-activity\" exclusive: true externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example","title":"Recovery targets"},{"location":"recovery/#configure-the-application-database","text":"For the recovered cluster, you can configure the application database name and credentials with additional configuration. To update application database credentials, you can generate your own passwords, store them as secrets, and update the database to use the secrets. Or you can also let the operator generate a secret with a randomly secure password for use. See Bootstrap an empty cluster for more information about secrets. Important While the Cluster is in recovery mode, no changes to the database, including the catalog, are permitted. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. During this phase, users remain as defined in the source cluster. The following example configures the app database with the owner app and the password stored in the provided secret app-secret , following the bootstrap from a live cluster. apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: bootstrap: recovery: database: app owner: app secret: name: app-secret [...] With the above configuration, the following will happen only after recovery is completed : If the app database does not exist, it will be created. If the app user does not exist, it will be created. If the app user is not the owner of the app database, ownership will be granted to the app user. If the username value matches the owner value in the secret, the password for the application user (the app user in this case) will be updated to the password value in the secret.","title":"Configure the application database"},{"location":"recovery/#how-recovery-works-under-the-hood","text":"You can use the data uploaded to the object storage to bootstrap a new cluster from an existing backup. The operator orchestrates the recovery process using the barman-cloud-restore tool (for the base backup) and the barman-cloud-wal-restore tool (for WAL files, including parallel support, if requested). For details and instructions on the recovery bootstrap method, see Bootstrap from a backup . Important If you're not familiar with how PostgreSQL PITR works, we suggest that you configure the recovery cluster as the original one when it comes to .spec.postgresql.parameters . Once the new cluster is restored, you can then change the settings as desired. The way it works is that the operator injects an init container in the first instance of the new cluster, and the init container starts recovering the backup from the object storage. Important The duration of the base backup copy in the new PVC depends on the size of the backup, as well as the speed of both the network and the storage. When the base backup recovery process is complete, the operator starts the Postgres instance in recovery mode. In this phase, PostgreSQL is up, though not able to accept connections, and the pod is healthy according to the liveness probe. By way of the restore_command , PostgreSQL starts fetching WAL files from the archive. You can speed up this phase by setting the maxParallel option and enabling the parallel WAL restore capability. This phase terminates when PostgreSQL reaches the target, either the end of the WAL or the required target in case of PITR. You can optionally specify a recoveryTarget to perform a PITR. If left unspecified, the recovery continues up to the latest available WAL on the default target timeline ( latest ). Once the recovery is complete, the operator sets the required superuser password into the instance. The new primary instance starts as usual, and the remaining instances join the cluster as replicas. The process is transparent for the user and is managed by the instance manager running in the pods.","title":"How recovery works under the hood"},{"location":"recovery/#restoring-into-a-cluster-with-a-backup-section","text":"When restoring a cluster, the manifest may include a plugins section with Barman Cloud plugin pointing to a backup object store resource. This enables the newly created cluster to begin archiving WAL files and taking backups immediately after recovery\u2014provided backup policies are configured. Avoid reusing the same ObjectStore configuration for both backup and recovery in the same cluster. If you must, ensure that each cluster uses a unique serverName to prevent accidental overwrites of backup or WAL archive data. Warning CloudNativePG includes a safety check to prevent a cluster from overwriting existing data in a shared storage bucket. If a conflict is detected, the cluster remains in the Setting up primary state, and the associated pods will fail with an error. The pod logs will display: ERROR: WAL archive check failed for server recoveredCluster: Expected empty archive . Important You can bypass this safety check by setting the cnpg.io/skipEmptyWalArchiveCheck annotation to enabled on the recovered cluster. However, this is strongly discouraged unless you are highly familiar with PostgreSQL's recovery process. Skipping the check incorrectly can lead to severe data loss. Use with caution and only in expert scenarios.","title":"Restoring into a Cluster with a Backup Section"},{"location":"release_notes/","text":"Release notes History of user-visible changes for CloudNativePG, classified for each minor release. CloudNativePG 1.27 - Release Candidate CloudNativePG 1.26 CloudNativePG 1.25 For information on the community support policy for CloudNativePG, please refer to \"Supported releases\" . Older releases: CloudNativePG 1.24 CloudNativePG 1.23 CloudNativePG 1.22 CloudNativePG 1.21 CloudNativePG 1.20 CloudNativePG 1.19 CloudNativePG 1.18 CloudNativePG 1.17 CloudNativePG 1.16 CloudNativePG 1.15 We also keep record of all the release notes from 1.0.0 to 1.14.0 of Cloud Native PostgreSQL by EDB , the predecessor of CloudNativePG.","title":"Release notes"},{"location":"release_notes/#release-notes","text":"History of user-visible changes for CloudNativePG, classified for each minor release. CloudNativePG 1.27 - Release Candidate CloudNativePG 1.26 CloudNativePG 1.25 For information on the community support policy for CloudNativePG, please refer to \"Supported releases\" . Older releases: CloudNativePG 1.24 CloudNativePG 1.23 CloudNativePG 1.22 CloudNativePG 1.21 CloudNativePG 1.20 CloudNativePG 1.19 CloudNativePG 1.18 CloudNativePG 1.17 CloudNativePG 1.16 CloudNativePG 1.15 We also keep record of all the release notes from 1.0.0 to 1.14.0 of Cloud Native PostgreSQL by EDB , the predecessor of CloudNativePG.","title":"Release notes"},{"location":"replica_cluster/","text":"Replica clusters A replica cluster is a CloudNativePG Cluster resource designed to replicate data from another PostgreSQL instance, ideally also managed by CloudNativePG. Typically, a replica cluster is deployed in a different Kubernetes cluster in another region. These clusters can be configured to perform cascading replication and can rely on object stores for data replication from the source, as detailed further down. There are primarily two use cases for replica clusters: Disaster Recovery and High Availability : Enhance disaster recovery and, to some extent, high availability of a CloudNativePG cluster across different Kubernetes clusters, typically located in different regions. In CloudNativePG terms, this is known as a \"Distributed Topology\" . Read-Only Workloads : Create standalone replicas of a PostgreSQL cluster for purposes such as reporting or Online Analytical Processing (OLAP). These replicas are primarily for read-only workloads. In CloudNativePG terms, this is referred to as a \"Standalone Replica Cluster\" . For example, the diagram below \u2014 taken from the \"Architecture\" section \u2014 illustrates a distributed PostgreSQL topology spanning two Kubernetes clusters, with a symmetric replica cluster primarily serving disaster recovery purposes. Basic Concepts CloudNativePG builds on the PostgreSQL replication framework, allowing you to create and synchronize a PostgreSQL cluster from an existing source cluster using the replica cluster feature \u2014 described in this section. The source can be a primary cluster or another replica cluster (cascading replication). About PostgreSQL Roles A replica cluster operates in continuous recovery mode, meaning no changes to the database, including the catalog and global objects like roles or databases, are permitted. These changes are deferred until the Cluster transitions to primary. During this phase, global objects such as roles remain as defined in the source cluster. CloudNativePG applies any local redefinitions once the cluster is promoted. If you are not planning to promote the cluster (e.g., for read-only workloads) or if you intend to detach completely from the source cluster once the replica cluster is promoted, you don't need to take any action. This is normally the case of the \"Standalone Replica Cluster\" . If you are planning to promote the cluster at some point, CloudNativePG will manage the following roles and passwords when transitioning from replica cluster to primary: the application user the superuser (if you are using it) any role defined using the declarative interface If your intention is to seamlessly ensure that the above roles and passwords don't change, you need to define the necessary secrets for the above in each Cluster . This is normally the case of the \"Distributed Topology\" . Bootstrapping a Replica Cluster The first step is to bootstrap the replica cluster using one of the following methods: Streaming replication via pg_basebackup Recovery from a volume snapshot Recovery from a Barman Cloud backup in an object store For detailed instructions on cloning a PostgreSQL server using pg_basebackup (streaming) or recovery (volume snapshot or object store), refer to the \"Bootstrap\" section . Configuring Replication Once the base backup for the replica cluster is available, you need to define how changes will be replicated from the origin using PostgreSQL continuous recovery. There are three main options: Streaming Replication : Set up streaming replication between the replica cluster and the source. This method requires configuring network connections and implementing appropriate administrative and security measures to ensure seamless data transfer. WAL Archive : Use the WAL (Write-Ahead Logging) archive stored in an object store. WAL files are regularly transferred from the source cluster to the object store, from where a CNPG-I plugin like Barman Cloud retrieves them for the replica cluster via the restore_command . Hybrid Approach : Combine both streaming replication and WAL archive methods. PostgreSQL can manage and switch between these two approaches as needed to ensure data consistency and availability. Defining an External Cluster When configuring the external cluster, you have the following options: plugin section : Enables bootstrapping the replica cluster using a CNPG-I plugin that support the restore_job and the wal protocols. CloudNativePG supports the Barman Cloud Plugin to allow bootstrapping the replica cluster from an object store. connectionParameters section : Enables bootstrapping the replica cluster via streaming replication using the pg_basebackup section. CloudNativePG automatically sets the primary_conninfo option in the designated primary instance, initiating a WAL receiver process to connect to the source cluster and receive data. You still have access to the barmanObjectStore section , although deprecated: Enables use of the WAL archive, with CloudNativePG automatically setting the restore_command in the designated primary instance. Allows bootstrapping the replica cluster from an object store using the recovery section if volume snapshots are not feasible. Backup and Symmetric Architectures The replica cluster can perform backups to a reserved object store from the designated primary, supporting symmetric architectures in a distributed environment. This architectural choice is crucial as it ensures the cluster is prepared for promotion during a controlled data center switchover or a failover following an unexpected event. Distributed Architecture Flexibility You have the flexibility to design your preferred distributed architecture for a PostgreSQL database, choosing from: Private Cloud : Spanning multiple Kubernetes clusters in different data centers. Public Cloud : Spanning multiple Kubernetes clusters in different regions. Hybrid Cloud : Combining private and public clouds. Multi-Cloud : Spanning multiple Kubernetes clusters across different regions and Cloud Service Providers. Setting Up a Replica Cluster To set up a replica cluster from a source cluster, follow these steps to create a cluster YAML file and configure it accordingly: Define External Clusters : In the externalClusters section, specify the replica cluster. For a distributed PostgreSQL topology aimed at disaster recovery (DR) and high availability (HA), this section should be defined for every PostgreSQL cluster in the distributed database. Bootstrap the Replica Cluster : Streaming Bootstrap : Use the pg_basebackup section for bootstrapping via streaming replication. Snapshot/Object Store Bootstrap : Use the recovery section to bootstrap from a volume snapshot or an object store. Continuous Recovery Strategy : Define this in the .spec.replica stanza: Distributed Topology : Configure using the primary , source , and self fields along with the distributed topology defined in externalClusters . This allows CloudNativePG to declaratively control the demotion of a primary cluster and the subsequent promotion of a replica cluster using a promotion token. Standalone Replica Cluster : Enable continuous recovery using the enabled option and set the source field to point to an externalClusters name. This configuration is suitable for creating replicas primarily intended for read-only workloads. Both the Distributed Topology and the Standalone Replica Cluster strategies for continuous recovery are thoroughly explained below. Distributed Topology Planning for a Distributed PostgreSQL Database As Dwight Eisenhower famously said, \"Planning is everything\", and this holds true for designing PostgreSQL architectures in Kubernetes. First, conceptualize your distributed topology on paper, and then translate it into a CloudNativePG API configuration. This configuration primarily involves: The externalClusters section, which must be included in every Cluster definition within your distributed PostgreSQL setup. The .spec.replica stanza, specifically the primary , source , and (optionally) self fields. For example, suppose you want to deploy a PostgreSQL cluster distributed across two Kubernetes clusters located in Southern Europe and Central Europe. In this scenario, assume you have CloudNativePG installed in the Southern Europe Kubernetes cluster, with a PostgreSQL Cluster named cluster-eu-south acting as the primary. This cluster has continuous backup configured with a local object store. This object store is also accessible by the PostgreSQL Cluster named cluster-eu-central , installed in the Central European Kubernetes cluster. Initially, cluster-eu-central functions as a replica cluster. Following a symmetric approach, it also has a local object store for continuous backup, which needs to be read by cluster-eu-south . In this example, recovery is performed solely through WAL shipping, without any streaming replication between the two clusters. However, you can configure the setup to use streaming replication alone or adopt a hybrid approach\u2014streaming replication with WAL shipping as a fallback\u2014as described in the \u201cConfiguring replication\u201d section. Here\u2019s how you would configure the externalClusters section for both Cluster resources, relying on Barman Cloud Plugin for the object store: # Distributed topology configuration externalClusters: - name: cluster-eu-south plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-eu-south serverName: cluster-eu-south - name: cluster-eu-central plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-eu-central serverName: cluster-eu-central The .spec.replica stanza for the cluster-eu-south PostgreSQL primary Cluster should be configured as follows: replica: primary: cluster-eu-south source: cluster-eu-central Meanwhile, the .spec.replica stanza for the cluster-eu-central PostgreSQL replica Cluster should be configured as: replica: primary: cluster-eu-south source: cluster-eu-south In this configuration, when the primary field matches the name of the Cluster resource (or .spec.replica.self if a different one is used), the current cluster is considered the primary in the distributed topology. Otherwise, it is set as a replica from the source (in this case, using the Barman object store). This setup allows you to efficiently manage a distributed PostgreSQL architecture across multiple Kubernetes clusters, ensuring both high availability and disaster recovery through controlled switchover of a primary PostgreSQL cluster using declarative configuration. Controlled switchover in a distributed topology is a two-step process involving: Demotion of a primary cluster to a replica cluster Promotion of a replica cluster to a primary cluster These processes are described in the next sections. Important Before you proceed, ensure you review the \"About PostgreSQL Roles\" section above and use identical role definitions, including secrets, in all Cluster objects participating in the distributed topology. Demoting a Primary to a Replica Cluster CloudNativePG provides the functionality to demote a primary cluster to a replica cluster. This action is typically planned when transitioning the primary role from one data center to another. The process involves demoting the current primary cluster (e.g., cluster-eu-south ) to a replica cluster and subsequently promoting the designated replica cluster (e.g., cluster-eu-central ) to primary when fully synchronized. Provided you have defined an external cluster in the current primary Cluster resource that points to the replica cluster that's been selected to become the new primary, all you need to do is change the primary field as follows: replica: primary: cluster-eu-central source: cluster-eu-central When the primary PostgreSQL cluster is demoted, write operations are no longer possible. CloudNativePG then: Archives the WAL file containing the shutdown checkpoint as a .partial file in the WAL archive. Generates a demotionToken in the status, a base64-encoded JSON structure containing relevant information from pg_controldata such as the system identifier, the timestamp, timeline ID, REDO location, and REDO WAL file of the latest checkpoint. The first step is necessary to demote/promote using solely the WAL archive to feed the continuous recovery process (without streaming replication). The second step, generation of the .status.demotionToken , will ensure a smooth demotion/promotion process, without any data loss and without rebuilding the former primary. At this stage, the former primary has transitioned to a replica cluster, awaiting WAL data from the new global primary: cluster-eu-central . To proceed with promoting the other cluster, you need to retrieve the demotionToken from cluster-eu-south using the following command: kubectl get cluster cluster-eu-south \\ -o jsonpath='{.status.demotionToken}' You can obtain the demotionToken using the cnpg plugin by checking the cluster's status. The token is listed under the Demotion token section. Note The demotionToken obtained from cluster-eu-south will serve as the promotionToken for cluster-eu-central . You can verify the role change using the cnpg plugin, checking the status of the cluster: kubectl cnpg status cluster-eu-south Promoting a Replica to a Primary Cluster To promote a PostgreSQL replica cluster (e.g., cluster-eu-central ) to a primary cluster and make the designated primary an actual primary instance, you need to perform the following steps simultaneously: Set the .spec.replica.primary to the name of the current replica cluster to be promoted (e.g., cluster-eu-central ). Set the .spec.replica.promotionToken with the value obtained from the former primary cluster (refer to \"Demoting a Primary to a Replica Cluster\" ). The updated replica section in cluster-eu-central 's spec should look like this: replica: primary: cluster-eu-central promotionToken: <PROMOTION_TOKEN> source: cluster-eu-south Warning It is crucial to apply the changes to the primary and promotionToken fields simultaneously. If the promotion token is omitted, a failover will be triggered, necessitating a rebuild of the former primary. After making these adjustments, CloudNativePG will initiate the promotion of the replica cluster to a primary cluster. Initially, CloudNativePG will wait for the designated primary cluster to replicate all Write-Ahead Logging (WAL) information up to the specified Log Sequence Number (LSN) contained in the token. Once this target is achieved, the promotion process will commence. The new primary cluster will switch timelines, archive the history file and new WAL, thereby unblocking the replication process in the cluster-eu-south cluster, which will then operate as a replica. To verify the role change, use the cnpg plugin to check the status of the cluster: kubectl cnpg status cluster-eu-central This command will provide you with the current status of cluster-eu-central , confirming its promotion to primary. By following these steps, you ensure a smooth and controlled promotion process, minimizing disruption and maintaining data integrity across your PostgreSQL clusters. Standalone Replica Clusters Important Standalone Replica Clusters were previously known as Replica Clusters before the introduction of the Distributed Topology strategy in CloudNativePG 1.24. In CloudNativePG, a Standalone Replica Cluster is a PostgreSQL cluster in continuous recovery with the following configurations: .spec.replica.enabled set to true A physical replication source defined via the .spec.replica.source field, pointing to an externalClusters name When .spec.replica.enabled is set to false , the replica cluster exits continuous recovery mode and becomes a primary cluster, completely detached from the original source. Warning Disabling replication is an irreversible operation. Once replication is disabled and the designated primary is promoted to primary, the replica cluster and the source cluster become two independent clusters definitively. Important Standalone replica clusters are suitable for several use cases, primarily involving read-only workloads. If you are planning to setup a disaster recovery solution, look into \"Distributed Topology\" above. Main Differences with Distributed Topology Although Standalone Replica Clusters can be used for disaster recovery purposes, they differ from the \"Distributed Topology\" strategy in several key ways: Lack of Distributed Database Concept : Standalone Replica Clusters do not support the concept of a distributed database, whether in simple forms (two clusters) or more complex configurations (e.g., three clusters in a circular topology). No Global Primary Cluster : There is no notion of a global primary cluster in Standalone Replica Clusters. No Controlled Switchover : A Standalone Replica Cluster can only be promoted to primary. The former primary cluster must be re-cloned, as controlled switchover is not possible. Failover is identical in both strategies, requiring the former primary to be re-cloned if it ever comes back up. Example of Standalone Replica Cluster using pg_basebackup This first example defines a standalone replica cluster using streaming replication in both bootstrap and continuous recovery. The replica cluster connects to the source cluster using TLS authentication. You can check the sample YAML in the samples/ subdirectory. Note the bootstrap and replica sections pointing to the source cluster. bootstrap: pg_basebackup: source: cluster-example replica: enabled: true source: cluster-example The previous configuration assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. In the externalClusters section, remember to use the right namespace for the host in the connectionParameters sub-section. The -replication and -ca secrets should have been copied over if necessary, in case the replica cluster is in a separate namespace. externalClusters: - name: <MAIN-CLUSTER> connectionParameters: host: <MAIN-CLUSTER>-rw.<NAMESPACE>.svc user: streaming_replica sslmode: verify-full dbname: postgres sslKey: name: <MAIN-CLUSTER>-replication key: tls.key sslCert: name: <MAIN-CLUSTER>-replication key: tls.crt sslRootCert: name: <MAIN-CLUSTER>-ca key: ca.crt Example of Standalone Replica Cluster from an object store The second example defines a replica cluster that bootstraps from an object store using the recovery section and continuous recovery using both streaming replication and the given object store. For streaming replication, the replica cluster connects to the source cluster using basic authentication. You can check the sample YAML for it in the samples/ subdirectory. Note the bootstrap and replica sections pointing to the source cluster. bootstrap: recovery: source: cluster-example replica: enabled: true source: cluster-example The previous configuration assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. In the externalClusters section, take care to use the right namespace in the endpointURL and the connectionParameters.host . And do ensure that the necessary secrets have been copied if necessary, and that a backup of the source cluster has been created already. externalClusters: - name: <MAIN-CLUSTER> # Example with Barman Cloud Plugin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: <MAIN-CLUSTER> serverName: <MAIN-CLUSTER> \u2026 connectionParameters: host: <MAIN-CLUSTER>-rw.default.svc user: postgres dbname: postgres password: name: <MAIN-CLUSTER>-superuser key: password Note To use streaming replication between the source cluster and the replica cluster, we need to make sure there is network connectivity between the two clusters, and that all the necessary secrets which hold passwords or certificates are properly created in advance. Example using a Volume Snapshot If you use volume snapshots and your storage class provides snapshots cross-cluster availability, you can leverage that to bootstrap a replica cluster through a volume snapshot of the source cluster. The third example defines a replica cluster that bootstraps from a volume snapshot using the recovery section. It uses streaming replication (via basic authentication) and the object store to fetch the WAL files. You can check the sample YAML for it in the samples/ subdirectory. The example assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. Delayed replicas CloudNativePG supports the creation of delayed replicas through the .spec.replica.minApplyDelay option , leveraging PostgreSQL's recovery_min_apply_delay . Delayed replicas are designed to intentionally lag behind the primary database by a specified amount of time. This delay is configurable using the .spec.replica.minApplyDelay option, which maps to the underlying recovery_min_apply_delay parameter in PostgreSQL. The primary objective of delayed replicas is to mitigate the impact of unintended SQL statement executions on the primary database. This is especially useful in scenarios where operations such as UPDATE or DELETE are performed without a proper WHERE clause. To configure a delay in a replica cluster, adjust the .spec.replica.minApplyDelay option. This parameter determines how much time the replicas will lag behind the primary. For example: # ... replica: enabled: true source: cluster-example # Enforce a delay of 8 hours minApplyDelay: '8h' # ... The above example helps safeguard against accidental data modifications by providing a buffer period of 8 hours to detect and correct issues before they propagate to the replicas. Monitor and adjust the delay as needed based on your recovery time objectives and the potential impact of unintended primary database operations. The main use cases of delayed replicas can be summarized into: mitigating human errors: reduce the risk of data corruption or loss resulting from unintentional SQL operations on the primary database recovery time optimization: facilitate quicker recovery from unintended changes by having a delayed replica that allows you to identify and rectify issues before changes are applied to other replicas. enhanced data protection: safeguard critical data by introducing a time buffer that provides an opportunity to intervene and prevent the propagation of undesirable changes. Warning The minApplyDelay option of delayed replicas cannot be used in conjunction with promotionToken . By integrating delayed replicas into your replication strategy, you can enhance the resilience and data protection capabilities of your PostgreSQL environment. Adjust the delay duration based on your specific needs and the criticality of your data. Important Always measure your goals. Depending on your environment, it might be more efficient to rely on volume snapshot-based recovery for faster outcomes. Evaluate and choose the approach that best aligns with your unique requirements and infrastructure.","title":"Replica clusters"},{"location":"replica_cluster/#replica-clusters","text":"A replica cluster is a CloudNativePG Cluster resource designed to replicate data from another PostgreSQL instance, ideally also managed by CloudNativePG. Typically, a replica cluster is deployed in a different Kubernetes cluster in another region. These clusters can be configured to perform cascading replication and can rely on object stores for data replication from the source, as detailed further down. There are primarily two use cases for replica clusters: Disaster Recovery and High Availability : Enhance disaster recovery and, to some extent, high availability of a CloudNativePG cluster across different Kubernetes clusters, typically located in different regions. In CloudNativePG terms, this is known as a \"Distributed Topology\" . Read-Only Workloads : Create standalone replicas of a PostgreSQL cluster for purposes such as reporting or Online Analytical Processing (OLAP). These replicas are primarily for read-only workloads. In CloudNativePG terms, this is referred to as a \"Standalone Replica Cluster\" . For example, the diagram below \u2014 taken from the \"Architecture\" section \u2014 illustrates a distributed PostgreSQL topology spanning two Kubernetes clusters, with a symmetric replica cluster primarily serving disaster recovery purposes.","title":"Replica clusters"},{"location":"replica_cluster/#basic-concepts","text":"CloudNativePG builds on the PostgreSQL replication framework, allowing you to create and synchronize a PostgreSQL cluster from an existing source cluster using the replica cluster feature \u2014 described in this section. The source can be a primary cluster or another replica cluster (cascading replication).","title":"Basic Concepts"},{"location":"replica_cluster/#about-postgresql-roles","text":"A replica cluster operates in continuous recovery mode, meaning no changes to the database, including the catalog and global objects like roles or databases, are permitted. These changes are deferred until the Cluster transitions to primary. During this phase, global objects such as roles remain as defined in the source cluster. CloudNativePG applies any local redefinitions once the cluster is promoted. If you are not planning to promote the cluster (e.g., for read-only workloads) or if you intend to detach completely from the source cluster once the replica cluster is promoted, you don't need to take any action. This is normally the case of the \"Standalone Replica Cluster\" . If you are planning to promote the cluster at some point, CloudNativePG will manage the following roles and passwords when transitioning from replica cluster to primary: the application user the superuser (if you are using it) any role defined using the declarative interface If your intention is to seamlessly ensure that the above roles and passwords don't change, you need to define the necessary secrets for the above in each Cluster . This is normally the case of the \"Distributed Topology\" .","title":"About PostgreSQL Roles"},{"location":"replica_cluster/#bootstrapping-a-replica-cluster","text":"The first step is to bootstrap the replica cluster using one of the following methods: Streaming replication via pg_basebackup Recovery from a volume snapshot Recovery from a Barman Cloud backup in an object store For detailed instructions on cloning a PostgreSQL server using pg_basebackup (streaming) or recovery (volume snapshot or object store), refer to the \"Bootstrap\" section .","title":"Bootstrapping a Replica Cluster"},{"location":"replica_cluster/#configuring-replication","text":"Once the base backup for the replica cluster is available, you need to define how changes will be replicated from the origin using PostgreSQL continuous recovery. There are three main options: Streaming Replication : Set up streaming replication between the replica cluster and the source. This method requires configuring network connections and implementing appropriate administrative and security measures to ensure seamless data transfer. WAL Archive : Use the WAL (Write-Ahead Logging) archive stored in an object store. WAL files are regularly transferred from the source cluster to the object store, from where a CNPG-I plugin like Barman Cloud retrieves them for the replica cluster via the restore_command . Hybrid Approach : Combine both streaming replication and WAL archive methods. PostgreSQL can manage and switch between these two approaches as needed to ensure data consistency and availability.","title":"Configuring Replication"},{"location":"replica_cluster/#defining-an-external-cluster","text":"When configuring the external cluster, you have the following options: plugin section : Enables bootstrapping the replica cluster using a CNPG-I plugin that support the restore_job and the wal protocols. CloudNativePG supports the Barman Cloud Plugin to allow bootstrapping the replica cluster from an object store. connectionParameters section : Enables bootstrapping the replica cluster via streaming replication using the pg_basebackup section. CloudNativePG automatically sets the primary_conninfo option in the designated primary instance, initiating a WAL receiver process to connect to the source cluster and receive data. You still have access to the barmanObjectStore section , although deprecated: Enables use of the WAL archive, with CloudNativePG automatically setting the restore_command in the designated primary instance. Allows bootstrapping the replica cluster from an object store using the recovery section if volume snapshots are not feasible.","title":"Defining an External Cluster"},{"location":"replica_cluster/#backup-and-symmetric-architectures","text":"The replica cluster can perform backups to a reserved object store from the designated primary, supporting symmetric architectures in a distributed environment. This architectural choice is crucial as it ensures the cluster is prepared for promotion during a controlled data center switchover or a failover following an unexpected event.","title":"Backup and Symmetric Architectures"},{"location":"replica_cluster/#distributed-architecture-flexibility","text":"You have the flexibility to design your preferred distributed architecture for a PostgreSQL database, choosing from: Private Cloud : Spanning multiple Kubernetes clusters in different data centers. Public Cloud : Spanning multiple Kubernetes clusters in different regions. Hybrid Cloud : Combining private and public clouds. Multi-Cloud : Spanning multiple Kubernetes clusters across different regions and Cloud Service Providers.","title":"Distributed Architecture Flexibility"},{"location":"replica_cluster/#setting-up-a-replica-cluster","text":"To set up a replica cluster from a source cluster, follow these steps to create a cluster YAML file and configure it accordingly: Define External Clusters : In the externalClusters section, specify the replica cluster. For a distributed PostgreSQL topology aimed at disaster recovery (DR) and high availability (HA), this section should be defined for every PostgreSQL cluster in the distributed database. Bootstrap the Replica Cluster : Streaming Bootstrap : Use the pg_basebackup section for bootstrapping via streaming replication. Snapshot/Object Store Bootstrap : Use the recovery section to bootstrap from a volume snapshot or an object store. Continuous Recovery Strategy : Define this in the .spec.replica stanza: Distributed Topology : Configure using the primary , source , and self fields along with the distributed topology defined in externalClusters . This allows CloudNativePG to declaratively control the demotion of a primary cluster and the subsequent promotion of a replica cluster using a promotion token. Standalone Replica Cluster : Enable continuous recovery using the enabled option and set the source field to point to an externalClusters name. This configuration is suitable for creating replicas primarily intended for read-only workloads. Both the Distributed Topology and the Standalone Replica Cluster strategies for continuous recovery are thoroughly explained below.","title":"Setting Up a Replica Cluster"},{"location":"replica_cluster/#distributed-topology","text":"","title":"Distributed Topology"},{"location":"replica_cluster/#planning-for-a-distributed-postgresql-database","text":"As Dwight Eisenhower famously said, \"Planning is everything\", and this holds true for designing PostgreSQL architectures in Kubernetes. First, conceptualize your distributed topology on paper, and then translate it into a CloudNativePG API configuration. This configuration primarily involves: The externalClusters section, which must be included in every Cluster definition within your distributed PostgreSQL setup. The .spec.replica stanza, specifically the primary , source , and (optionally) self fields. For example, suppose you want to deploy a PostgreSQL cluster distributed across two Kubernetes clusters located in Southern Europe and Central Europe. In this scenario, assume you have CloudNativePG installed in the Southern Europe Kubernetes cluster, with a PostgreSQL Cluster named cluster-eu-south acting as the primary. This cluster has continuous backup configured with a local object store. This object store is also accessible by the PostgreSQL Cluster named cluster-eu-central , installed in the Central European Kubernetes cluster. Initially, cluster-eu-central functions as a replica cluster. Following a symmetric approach, it also has a local object store for continuous backup, which needs to be read by cluster-eu-south . In this example, recovery is performed solely through WAL shipping, without any streaming replication between the two clusters. However, you can configure the setup to use streaming replication alone or adopt a hybrid approach\u2014streaming replication with WAL shipping as a fallback\u2014as described in the \u201cConfiguring replication\u201d section. Here\u2019s how you would configure the externalClusters section for both Cluster resources, relying on Barman Cloud Plugin for the object store: # Distributed topology configuration externalClusters: - name: cluster-eu-south plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-eu-south serverName: cluster-eu-south - name: cluster-eu-central plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-eu-central serverName: cluster-eu-central The .spec.replica stanza for the cluster-eu-south PostgreSQL primary Cluster should be configured as follows: replica: primary: cluster-eu-south source: cluster-eu-central Meanwhile, the .spec.replica stanza for the cluster-eu-central PostgreSQL replica Cluster should be configured as: replica: primary: cluster-eu-south source: cluster-eu-south In this configuration, when the primary field matches the name of the Cluster resource (or .spec.replica.self if a different one is used), the current cluster is considered the primary in the distributed topology. Otherwise, it is set as a replica from the source (in this case, using the Barman object store). This setup allows you to efficiently manage a distributed PostgreSQL architecture across multiple Kubernetes clusters, ensuring both high availability and disaster recovery through controlled switchover of a primary PostgreSQL cluster using declarative configuration. Controlled switchover in a distributed topology is a two-step process involving: Demotion of a primary cluster to a replica cluster Promotion of a replica cluster to a primary cluster These processes are described in the next sections. Important Before you proceed, ensure you review the \"About PostgreSQL Roles\" section above and use identical role definitions, including secrets, in all Cluster objects participating in the distributed topology.","title":"Planning for a Distributed PostgreSQL Database"},{"location":"replica_cluster/#demoting-a-primary-to-a-replica-cluster","text":"CloudNativePG provides the functionality to demote a primary cluster to a replica cluster. This action is typically planned when transitioning the primary role from one data center to another. The process involves demoting the current primary cluster (e.g., cluster-eu-south ) to a replica cluster and subsequently promoting the designated replica cluster (e.g., cluster-eu-central ) to primary when fully synchronized. Provided you have defined an external cluster in the current primary Cluster resource that points to the replica cluster that's been selected to become the new primary, all you need to do is change the primary field as follows: replica: primary: cluster-eu-central source: cluster-eu-central When the primary PostgreSQL cluster is demoted, write operations are no longer possible. CloudNativePG then: Archives the WAL file containing the shutdown checkpoint as a .partial file in the WAL archive. Generates a demotionToken in the status, a base64-encoded JSON structure containing relevant information from pg_controldata such as the system identifier, the timestamp, timeline ID, REDO location, and REDO WAL file of the latest checkpoint. The first step is necessary to demote/promote using solely the WAL archive to feed the continuous recovery process (without streaming replication). The second step, generation of the .status.demotionToken , will ensure a smooth demotion/promotion process, without any data loss and without rebuilding the former primary. At this stage, the former primary has transitioned to a replica cluster, awaiting WAL data from the new global primary: cluster-eu-central . To proceed with promoting the other cluster, you need to retrieve the demotionToken from cluster-eu-south using the following command: kubectl get cluster cluster-eu-south \\ -o jsonpath='{.status.demotionToken}' You can obtain the demotionToken using the cnpg plugin by checking the cluster's status. The token is listed under the Demotion token section. Note The demotionToken obtained from cluster-eu-south will serve as the promotionToken for cluster-eu-central . You can verify the role change using the cnpg plugin, checking the status of the cluster: kubectl cnpg status cluster-eu-south","title":"Demoting a Primary to a Replica Cluster"},{"location":"replica_cluster/#promoting-a-replica-to-a-primary-cluster","text":"To promote a PostgreSQL replica cluster (e.g., cluster-eu-central ) to a primary cluster and make the designated primary an actual primary instance, you need to perform the following steps simultaneously: Set the .spec.replica.primary to the name of the current replica cluster to be promoted (e.g., cluster-eu-central ). Set the .spec.replica.promotionToken with the value obtained from the former primary cluster (refer to \"Demoting a Primary to a Replica Cluster\" ). The updated replica section in cluster-eu-central 's spec should look like this: replica: primary: cluster-eu-central promotionToken: <PROMOTION_TOKEN> source: cluster-eu-south Warning It is crucial to apply the changes to the primary and promotionToken fields simultaneously. If the promotion token is omitted, a failover will be triggered, necessitating a rebuild of the former primary. After making these adjustments, CloudNativePG will initiate the promotion of the replica cluster to a primary cluster. Initially, CloudNativePG will wait for the designated primary cluster to replicate all Write-Ahead Logging (WAL) information up to the specified Log Sequence Number (LSN) contained in the token. Once this target is achieved, the promotion process will commence. The new primary cluster will switch timelines, archive the history file and new WAL, thereby unblocking the replication process in the cluster-eu-south cluster, which will then operate as a replica. To verify the role change, use the cnpg plugin to check the status of the cluster: kubectl cnpg status cluster-eu-central This command will provide you with the current status of cluster-eu-central , confirming its promotion to primary. By following these steps, you ensure a smooth and controlled promotion process, minimizing disruption and maintaining data integrity across your PostgreSQL clusters.","title":"Promoting a Replica to a Primary Cluster"},{"location":"replica_cluster/#standalone-replica-clusters","text":"Important Standalone Replica Clusters were previously known as Replica Clusters before the introduction of the Distributed Topology strategy in CloudNativePG 1.24. In CloudNativePG, a Standalone Replica Cluster is a PostgreSQL cluster in continuous recovery with the following configurations: .spec.replica.enabled set to true A physical replication source defined via the .spec.replica.source field, pointing to an externalClusters name When .spec.replica.enabled is set to false , the replica cluster exits continuous recovery mode and becomes a primary cluster, completely detached from the original source. Warning Disabling replication is an irreversible operation. Once replication is disabled and the designated primary is promoted to primary, the replica cluster and the source cluster become two independent clusters definitively. Important Standalone replica clusters are suitable for several use cases, primarily involving read-only workloads. If you are planning to setup a disaster recovery solution, look into \"Distributed Topology\" above.","title":"Standalone Replica Clusters"},{"location":"replica_cluster/#main-differences-with-distributed-topology","text":"Although Standalone Replica Clusters can be used for disaster recovery purposes, they differ from the \"Distributed Topology\" strategy in several key ways: Lack of Distributed Database Concept : Standalone Replica Clusters do not support the concept of a distributed database, whether in simple forms (two clusters) or more complex configurations (e.g., three clusters in a circular topology). No Global Primary Cluster : There is no notion of a global primary cluster in Standalone Replica Clusters. No Controlled Switchover : A Standalone Replica Cluster can only be promoted to primary. The former primary cluster must be re-cloned, as controlled switchover is not possible. Failover is identical in both strategies, requiring the former primary to be re-cloned if it ever comes back up.","title":"Main Differences with Distributed Topology"},{"location":"replica_cluster/#example-of-standalone-replica-cluster-using-pg_basebackup","text":"This first example defines a standalone replica cluster using streaming replication in both bootstrap and continuous recovery. The replica cluster connects to the source cluster using TLS authentication. You can check the sample YAML in the samples/ subdirectory. Note the bootstrap and replica sections pointing to the source cluster. bootstrap: pg_basebackup: source: cluster-example replica: enabled: true source: cluster-example The previous configuration assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. In the externalClusters section, remember to use the right namespace for the host in the connectionParameters sub-section. The -replication and -ca secrets should have been copied over if necessary, in case the replica cluster is in a separate namespace. externalClusters: - name: <MAIN-CLUSTER> connectionParameters: host: <MAIN-CLUSTER>-rw.<NAMESPACE>.svc user: streaming_replica sslmode: verify-full dbname: postgres sslKey: name: <MAIN-CLUSTER>-replication key: tls.key sslCert: name: <MAIN-CLUSTER>-replication key: tls.crt sslRootCert: name: <MAIN-CLUSTER>-ca key: ca.crt","title":"Example of Standalone Replica Cluster using pg_basebackup"},{"location":"replica_cluster/#example-of-standalone-replica-cluster-from-an-object-store","text":"The second example defines a replica cluster that bootstraps from an object store using the recovery section and continuous recovery using both streaming replication and the given object store. For streaming replication, the replica cluster connects to the source cluster using basic authentication. You can check the sample YAML for it in the samples/ subdirectory. Note the bootstrap and replica sections pointing to the source cluster. bootstrap: recovery: source: cluster-example replica: enabled: true source: cluster-example The previous configuration assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. In the externalClusters section, take care to use the right namespace in the endpointURL and the connectionParameters.host . And do ensure that the necessary secrets have been copied if necessary, and that a backup of the source cluster has been created already. externalClusters: - name: <MAIN-CLUSTER> # Example with Barman Cloud Plugin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: <MAIN-CLUSTER> serverName: <MAIN-CLUSTER> \u2026 connectionParameters: host: <MAIN-CLUSTER>-rw.default.svc user: postgres dbname: postgres password: name: <MAIN-CLUSTER>-superuser key: password Note To use streaming replication between the source cluster and the replica cluster, we need to make sure there is network connectivity between the two clusters, and that all the necessary secrets which hold passwords or certificates are properly created in advance.","title":"Example of Standalone Replica Cluster from an object store"},{"location":"replica_cluster/#example-using-a-volume-snapshot","text":"If you use volume snapshots and your storage class provides snapshots cross-cluster availability, you can leverage that to bootstrap a replica cluster through a volume snapshot of the source cluster. The third example defines a replica cluster that bootstraps from a volume snapshot using the recovery section. It uses streaming replication (via basic authentication) and the object store to fetch the WAL files. You can check the sample YAML for it in the samples/ subdirectory. The example assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details.","title":"Example using a Volume Snapshot"},{"location":"replica_cluster/#delayed-replicas","text":"CloudNativePG supports the creation of delayed replicas through the .spec.replica.minApplyDelay option , leveraging PostgreSQL's recovery_min_apply_delay . Delayed replicas are designed to intentionally lag behind the primary database by a specified amount of time. This delay is configurable using the .spec.replica.minApplyDelay option, which maps to the underlying recovery_min_apply_delay parameter in PostgreSQL. The primary objective of delayed replicas is to mitigate the impact of unintended SQL statement executions on the primary database. This is especially useful in scenarios where operations such as UPDATE or DELETE are performed without a proper WHERE clause. To configure a delay in a replica cluster, adjust the .spec.replica.minApplyDelay option. This parameter determines how much time the replicas will lag behind the primary. For example: # ... replica: enabled: true source: cluster-example # Enforce a delay of 8 hours minApplyDelay: '8h' # ... The above example helps safeguard against accidental data modifications by providing a buffer period of 8 hours to detect and correct issues before they propagate to the replicas. Monitor and adjust the delay as needed based on your recovery time objectives and the potential impact of unintended primary database operations. The main use cases of delayed replicas can be summarized into: mitigating human errors: reduce the risk of data corruption or loss resulting from unintentional SQL operations on the primary database recovery time optimization: facilitate quicker recovery from unintended changes by having a delayed replica that allows you to identify and rectify issues before changes are applied to other replicas. enhanced data protection: safeguard critical data by introducing a time buffer that provides an opportunity to intervene and prevent the propagation of undesirable changes. Warning The minApplyDelay option of delayed replicas cannot be used in conjunction with promotionToken . By integrating delayed replicas into your replication strategy, you can enhance the resilience and data protection capabilities of your PostgreSQL environment. Adjust the delay duration based on your specific needs and the criticality of your data. Important Always measure your goals. Depending on your environment, it might be more efficient to rely on volume snapshot-based recovery for faster outcomes. Evaluate and choose the approach that best aligns with your unique requirements and infrastructure.","title":"Delayed replicas"},{"location":"replication/","text":"Replication Physical replication is one of the strengths of PostgreSQL and one of the reasons why some of the largest organizations in the world have chosen it for the management of their data in business continuity contexts. Primarily used to achieve high availability, physical replication also allows scale-out of read-only workloads and offloading of some work from the primary. Important This section is about replication within the same Cluster resource managed in the same Kubernetes cluster. For information about how to replicate with another Postgres Cluster resource, even across different Kubernetes clusters, please refer to the \"Replica clusters\" section. Application-level replication Having contributed throughout the years to the replication feature in PostgreSQL, we have decided to build high availability in CloudNativePG on top of the native physical replication technology, and integrate it directly in the Kubernetes API. In Kubernetes terms, this is referred to as application-level replication , in contrast with storage-level replication . A very mature technology PostgreSQL has a very robust and mature native framework for replicating data from the primary instance to one or more replicas, built around the concept of transactional changes continuously stored in the WAL (Write Ahead Log). Started as the evolution of crash recovery and point in time recovery technologies, physical replication was first introduced in PostgreSQL 8.2 (2006) through WAL shipping from the primary to a warm standby in continuous recovery. PostgreSQL 9.0 (2010) introduced WAL streaming and read-only replicas through hot standby . In 2011, PostgreSQL 9.1 brought synchronous replication at the transaction level, supporting RPO =0 clusters. Cascading replication was added in PostgreSQL 9.2 (2012). The foundations for logical replication were established in PostgreSQL 9.4 (2014), and version 10 (2017) introduced native support for the publisher/subscriber pattern to replicate data from an origin to a destination. The table below summarizes these milestones. Version Year Feature 8.2 2006 Warm Standby with WAL shipping 9.0 2010 Hot Standby and physical streaming replication 9.1 2011 Synchronous replication (priority-based) 9.2 2012 Cascading replication 9.4 2014 Foundations of logical replication 10 2017 Logical publisher/subscriber and quorum-based synchronous replication This table highlights key PostgreSQL replication features and their respective versions. Streaming replication support At the moment, CloudNativePG natively and transparently manages physical streaming replicas within a cluster in a declarative way, based on the number of provided instances in the spec : replicas = instances - 1 (where instances > 0) Immediately after the initialization of a cluster, the operator creates a user called streaming_replica as follows: CREATE USER streaming_replica WITH REPLICATION; -- NOSUPERUSER INHERIT NOCREATEROLE NOCREATEDB NOBYPASSRLS Out of the box, the operator automatically sets up streaming replication within the cluster over an encrypted channel and enforces TLS client certificate authentication for the streaming_replica user - as highlighted by the following excerpt taken from pg_hba.conf : # Require client certificate authentication for the streaming_replica user hostssl postgres streaming_replica all cert map=cnpg_streaming_replica hostssl replication streaming_replica all cert map=cnpg_streaming_replica Certificates For details on how CloudNativePG manages certificates, please refer to the \"Certificates\" section in the documentation. If configured, the operator manages replication slots for all the replicas in the HA cluster, ensuring that WAL files required by each standby are retained on the primary's storage, even after a failover or switchover. Replication slots for High Availability For details on how CloudNativePG automatically manages replication slots for the High Availability replicas, please refer to the \"Replication slots for High Availability\" section below. Continuous backup integration In case continuous backup is configured in the cluster, CloudNativePG transparently configures replicas to take advantage of restore_command when in continuous recovery. As a result, PostgreSQL can use the WAL archive as a fallback option whenever pulling WALs via streaming replication fails. Synchronous Replication CloudNativePG supports both quorum-based and priority-based synchronous replication for PostgreSQL . Warning By default, synchronous replication pauses write operations if the required number of standby nodes for WAL replication during transaction commits is unavailable. This behavior prioritizes data durability and aligns with PostgreSQL DBA best practices. However, if self-healing is a higher priority than strict data durability in your setup, this setting can be adjusted. For details on managing this behavior, refer to the Data Durability and Synchronous Replication section. Important The failover quorum feature (experimental) can be used alongside synchronous replication to improve data durability and safety during failover events. Direct configuration of the synchronous_standby_names option is not permitted. However, CloudNativePG automatically populates this option with the names of local pods, while also allowing customization to extend synchronous replication beyond the Cluster resource. This can be achieved through the .spec.postgresql.synchronous stanza . Synchronous replication is disabled by default (the synchronous stanza is not defined). When defined, two options are mandatory: method : either any (quorum) or first (priority) number : the number of synchronous standby servers that transactions must wait for responses from Quorum-based Synchronous Replication In PostgreSQL, quorum-based synchronous replication ensures that transaction commits wait until their WAL records are replicated to a specified number of standbys. To enable this, set the method to any . This replication method is the most common setup for a CloudNativePG cluster. Example The example below, based on a typical cluster-example configuration with three instances, sets up quorum-based synchronous replication with at least one instance: postgresql: synchronous: method: any number: 1 With this configuration, CloudNativePG automatically sets the content of synchronous_standby_names as follows: ANY 1 (cluster-example-2, cluster-example-3, cluster-example-1) Migrating from Deprecated Synchronous Replication Implementation This section outlines how to migrate from the deprecated quorum-based synchronous replication format to the newer, more robust implementation in CloudNativePG. Given the following manifest: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: angus spec: instances: 3 minSyncReplicas: 1 maxSyncReplicas: 1 storage: size: 1G You can update it to the new format as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: angus spec: instances: 3 storage: size: 1G postgresql: synchronous: method: any number: 1 dataDurability: required To prioritize self-healing over strict data durability, set dataDurability to preferred instead. Priority-based Synchronous Replication PostgreSQL's priority-based synchronous replication makes transaction commits wait until their WAL records are replicated to the requested number of synchronous standbys chosen based on their priorities. Standbys listed earlier in the synchronous_standby_names option are given higher priority and considered synchronous. If a current synchronous standby disconnects, it is immediately replaced by the next-highest-priority standby. To use this method, set method to first . Important Currently, this method is most useful when extending synchronous replication beyond the current cluster using the maxStandbyNamesFromCluster , standbyNamesPre , and standbyNamesPost options explained below. Controlling synchronous_standby_names Content By default, CloudNativePG populates synchronous_standby_names with the names of local pods in a Cluster resource, ensuring synchronous replication within the PostgreSQL cluster. You can customize the content of synchronous_standby_names based on your requirements and replication method (quorum or priority) using the following optional parameters in the .spec.postgresql.synchronous stanza: maxStandbyNamesFromCluster : the maximum number of pod names from the local Cluster object that can be automatically included in the synchronous_standby_names option in PostgreSQL. standbyNamesPre : a list of standby names (specifically application_name ) to be prepended to the list of local pod names automatically listed by the operator. standbyNamesPost : a list of standby names (specifically application_name ) to be appended to the list of local pod names automatically listed by the operator. Warning You are responsible for ensuring the correct names in standbyNamesPre and standbyNamesPost . CloudNativePG expects that you manage any standby with an application_name listed here, ensuring their high availability. Incorrect entries can jeopardize your PostgreSQL database uptime. Examples Here are some examples, all based on a cluster-example with three instances: If you set: postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus The content of synchronous_standby_names will be: ANY 1 (angus, cluster-example-2) If you set: postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 0 standbyNamesPre: - angus - malcolm The content of synchronous_standby_names will be: ANY 1 (angus, malcolm) If you set: postgresql: synchronous: method: first number: 2 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus standbyNamesPost: - malcolm The synchronous_standby_names option will look like: FIRST 2 (angus, cluster-example-2, malcolm) Data Durability and Synchronous Replication The dataDurability option in the .spec.postgresql.synchronous stanza controls the trade-off between data safety and availability for synchronous replication. It can be set to required or preferred , with the default being required if not specified. Important preferred can only be used when standbyNamesPre and standbyNamesPost are unset. Required Data Durability When dataDurability is set to required , PostgreSQL only considers transactions committed once WAL (Write-Ahead Log) records have been replicated to the specified number of synchronous standbys. This setting prioritizes data safety over availability, meaning write operations will pause if the required number of synchronous standbys is unavailable. This ensures zero data loss (RPO=0) but may reduce database availability during network disruptions or standby failures. Synchronous standbys are selected in this priority order: Healthy instances Unhealthy instances Primary The list is then truncated based on maxStandbyNamesFromCluster if this value is set, prioritizing healthy instances and ensuring synchronous_standby_names is populated. Example Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: foo spec: instances: 3 postgresql: synchronous: method: any number: 1 dataDurability: required Initial state. The content of synchronous_standby_names is: ANY 1 (\"foo-2\",\"foo-3\",\"foo-1\") foo-2 becomes unavailable. It gets pushed back in priority: ANY 1 (\"foo-3\",\"foo-2\",\"foo-1\") foo-3 also becomes unavailable. The list contains no healthy standbys: ANY 1 (\"foo-2\",\"foo-3\",\"foo-1\") At this point no write operations will be allowed until at least one of the standbys is available again. When the standbys are available again, synchronous_standby_names will be back to the initial state. Preferred Data Durability When dataDurability is set to preferred , the required number of synchronous instances adjusts based on the number of available standbys. PostgreSQL will attempt to replicate WAL records to the designated number of synchronous standbys, but write operations will continue even if fewer than the requested number of standbys are available. Important Make sure you have a clear understanding of what ready/available means for a replica and set your expectations accordingly. By default, a replica is considered ready when it has successfully connected to the source at least once. However, CloudNativePG allows you to configure startup and readiness probes for replicas based on maximum lag. For more details, please refer to the \"Postgres instance manager\" section . This setting balances data safety with availability, enabling applications to continue writing during temporary standby unavailability\u2014hence, it\u2019s also known as self-healing mode . Warning This mode may result in data loss if all standbys become unavailable. With preferred data durability, only healthy replicas are included in synchronous_standby_names . Example Consider the following example. For demonstration, we\u2019ll use a cluster named bar with 5 instances and 2 synchronous standbys: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: bar spec: instances: 5 postgresql: synchronous: method: any number: 2 dataDurability: preferred Initial state. The content of synchronous_standby_names is: ANY 2 (\"bar-2\",\"bar-3\", \"bar-4\", \"bar-5\") bar-2 and bar-3 become unavailable. They are removed from the list: ANY 2 (\"bar-4\", \"bar-5\") bar-4 also becomes unavailable. It gets removed from the list. Since the number of available standbys is less than the requested number, the requested amount gets reduced: ANY 1 (\"bar-5\") bar-5 also becomes unavailable. synchronous_standby_names becomes empty, disabling synchronous replication completely. Write operations will continue, but with the risk of potential data loss in case of a primary failure. When the replicas are back, synchronous_standby_names will be back to the initial state. Synchronous Replication (Deprecated) Warning Prior to CloudNativePG 1.24, only the quorum-based synchronous replication implementation was supported. Although this method is now deprecated, it will not be removed anytime soon. The new method prioritizes data durability over self-healing and offers more robust features, including priority-based synchronous replication and full control over the synchronous_standby_names option. It is recommended to gradually migrate to the new configuration method for synchronous replication, as explained in the previous paragraph. Important The deprecated method and the new method are mutually exclusive. CloudNativePG supports the configuration of quorum-based synchronous streaming replication via two configuration options called minSyncReplicas and maxSyncReplicas , which are the minimum and the maximum number of expected synchronous standby replicas available at any time. For self-healing purposes, the operator always compares these two values with the number of available replicas to determine the quorum. Important By default, synchronous replication selects among all the available replicas indistinctively. You can limit on which nodes your synchronous replicas can be scheduled, by working on node labels through the syncReplicaElectionConstraint option as described in the next section. Synchronous replication is disabled by default ( minSyncReplicas and maxSyncReplicas are not defined). In case both minSyncReplicas and maxSyncReplicas are set, CloudNativePG automatically updates the synchronous_standby_names option in PostgreSQL to the following value: ANY q (pod1, pod2, ...) Where: q is an integer automatically calculated by the operator to be: 1 <= minSyncReplicas <= q <= maxSyncReplicas <= readyReplicas pod1, pod2, ... is the list of all PostgreSQL pods in the cluster Warning To provide self-healing capabilities, the operator can ignore minSyncReplicas if such value is higher than the currently available number of replicas. Synchronous replication is automatically disabled when readyReplicas is 0 . As stated in the PostgreSQL documentation , the method ANY specifies a quorum-based synchronous replication and makes transaction commits wait until their WAL records are replicated to at least the requested number of synchronous standbys in the list . Important Even though the operator chooses self-healing over enforcement of synchronous replication settings, our recommendation is to plan for synchronous replication only in clusters with 3+ instances or, more generally, when maxSyncReplicas < (instances - 1) . Select nodes for synchronous replication CloudNativePG enables you to select which PostgreSQL instances are eligible to participate in a quorum-based synchronous replication set through anti-affinity rules based on the node labels where the PVC holding the PGDATA and the Postgres pod are. Scheduling For more information on the general pod affinity and anti-affinity rules, please check the \"Scheduling\" section . Warning The .spec.postgresql.syncReplicaElectionConstraint option only applies to the legacy implementation of synchronous replication (see \"Synchronous Replication (Deprecated)\" ). As an example use-case for this feature: in a cluster with a single sync replica, we would be able to ensure the sync replica will be in a different availability zone from the primary instance, usually identified by the topology.kubernetes.io/zone label on a node . This would increase the robustness of the cluster in case of an outage in a single availability zone, especially in terms of recovery point objective ( RPO ). The idea of anti-affinity is to ensure that sync replicas that participate in the quorum are chosen from pods running on nodes that have different values for the selected labels (in this case, the availability zone label) then the node where the primary is currently in execution. If no node matches such criteria, the replicas are eligible for synchronous replication. Important The self-healing enforcement still applies while defining additional constraints for synchronous replica election (see \"Synchronous replication\" ). The example below shows how this can be done through the syncReplicaElectionConstraint section within .spec.postgresql . nodeLabelsAntiAffinity allows you to specify those node labels that need to be evaluated to make sure that synchronous replication will be dynamically configured by the operator between the current primary and the replicas which are located on nodes having a value of the availability zone label different from that of the node where the primary is: spec: instances: 3 postgresql: syncReplicaElectionConstraint: enabled: true nodeLabelsAntiAffinity: - topology.kubernetes.io/zone As you can imagine, the availability zone is just an example, but you could customize this behavior based on other labels that describe the node, such as storage, CPU, or memory. Replication slots Replication slots are a native PostgreSQL feature introduced in 9.4 that provides an automated way to ensure that the primary does not remove WAL segments until all the attached streaming replication clients have received them, and that the primary does not remove rows which could cause a recovery conflict even when the standby is ( temporarily) disconnected. A replication slot exists solely on the instance that created it, and PostgreSQL does not replicate it on the standby servers. As a result, after a failover or a switchover, the new primary does not contain the replication slot from the old primary. This can create problems for the streaming replication clients that were connected to the old primary and have lost their slot. CloudNativePG provides a turn-key solution to synchronize the content of physical replication slots from the primary to each standby, addressing two use cases: the replication slots automatically created for the High Availability of the Postgres cluster ( see \"Replication slots for High Availability\" below for details) user-defined replication slots created on the primary Replication slots for High Availability CloudNativePG fills this gap by introducing the concept of cluster-managed replication slots, starting with high availability clusters. This feature automatically manages physical replication slots for each hot standby replica in the High Availability cluster, both in the primary and the standby. In CloudNativePG, we use the terms: Primary HA slot : a physical replication slot whose lifecycle is entirely managed by the current primary of the cluster and whose purpose is to map to a specific standby in streaming replication. Such a slot lives on the primary only. Standby HA slot : a physical replication slot for a standby whose lifecycle is entirely managed by another standby in the cluster, based on the content of the pg_replication_slots view in the primary, and updated at regular intervals using pg_replication_slot_advance() . This feature is enabled by default and can be disabled via configuration. For details, please refer to the \"replicationSlots\" section in the API reference . Here follows a brief description of the main options: .spec.replicationSlots.highAvailability.enabled if true , the feature is enabled ( true is the default) .spec.replicationSlots.highAvailability.slotPrefix the prefix that identifies replication slots managed by the operator for this feature (default: _cnpg_ ) .spec.replicationSlots.updateInterval how often the standby synchronizes the position of the local copy of the replication slots with the position on the current primary, expressed in seconds (default: 30) Although it is not recommended, if you desire a different behavior, you can customize the above options. For example, the following manifest will create a cluster with replication slots disabled. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 # Disable replication slots for HA in the cluster replicationSlots: highAvailability: enabled: false storage: size: 1Gi User-Defined Replication slots Although CloudNativePG doesn't support a way to declaratively define physical replication slots, you can still create your own slots via SQL . Information At the moment, we don't have any plans to manage replication slots in a declarative way, but it might change depending on the feedback we receive from users. The reason is that replication slots exist for a specific purpose and each should be managed by a specific application the oversees the entire lifecycle of the slot on the primary. CloudNativePG can manage the synchronization of any user managed physical replication slots between the primary and standbys, similarly to what it does for the HA replication slots explained above (the only difference is that you need to create the replication slot). This feature is enabled by default (meaning that any replication slot is synchronized), but you can disable it or further customize its behavior (for example by excluding some slots using regular expressions) through the synchronizeReplicas stanza. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 replicationSlots: synchronizeReplicas: enabled: true excludePatterns: - \"^foo\" For details, please refer to the \"replicationSlots\" section in the API reference . Here follows a brief description of the main options: .spec.replicationSlots.synchronizeReplicas.enabled When true or not specified, every user-defined replication slot on the primary is synchronized on each standby. If changed to false, the operator will remove any replication slot previously created by itself on each standby. .spec.replicationSlots.synchronizeReplicas.excludePatterns A list of regular expression patterns to match the names of user-defined replication slots to be excluded from synchronization. This can be useful to exclude specific slots based on naming conventions. Warning Users utilizing this feature should carefully monitor user-defined replication slots to ensure they align with their operational requirements and do not interfere with the failover process. Synchronization frequency You can also control the frequency with which a standby queries the pg_replication_slots view on the primary, and updates its local copy of the replication slots, like in this example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 # Reduce the frequency of standby HA slots updates to once every 5 minutes replicationSlots: updateInterval: 300 storage: size: 1Gi Logical Decoding Slot Synchronization CloudNativePG can synchronize logical decoding (replication) slots across all nodes in a high-availability cluster, ensuring seamless continuation of logical replication after a failover or switchover. This feature is disabled by default, and enabling it requires two steps. The first step is to enable logical decoding slot synchronization: # ... replicationSlots: highAvailability: synchronizeLogicalDecoding: true The second step involves configuring PostgreSQL parameters: the required configuration depends on your PostgreSQL version, as explained below. When enabled, the operator automatically manages logical decoding slot states during failover and switchover, preventing slot invalidation and avoiding data loss for logical replication clients. Behavior on PostgreSQL 17 and later For PostgreSQL 17 and newer, CloudNativePG transparently manages the synchronized_standby_slots parameter . You must enable both sync_replication_slots and hot_standby_feedback in your PostgreSQL configuration: # ... postgresql: parameters: # ... hot_standby_feedback: 'on' sync_replication_slots: 'on' Additionally, you must create the logical replication Subscription with the failover option enabled, for example: apiVersion: postgresql.cnpg.io/v1 kind: Subscription # ... spec: # ... parameters: failover: 'true' # ... When configured, logical WAL sender processes send decoded changes to plugins only after the specified replication slots confirm receiving and flushing the relevant WAL, ensuring that: logical replication slots do not consume changes until they are safely received by the replicas of the publisher, and logical replication clients can seamlessly reconnect to a promoted standby without missing data after failover. For more details on logical replication slot synchronization, see the PostgreSQL documentation on Logical Replication Failover . Behavior on PostgreSQL 16 and earlier For PostgreSQL 16 and older versions, CloudNativePG uses the pg_failover_slots extension to maintain synchronization of logical replication slots across failovers. Capping the WAL size retained for replication slots When replication slots is enabled, you might end up running out of disk space due to PostgreSQL trying to retain WAL files requested by a replication slot. This might happen due to a standby that is (temporarily?) down, or lagging, or simply an orphan replication slot. Starting with PostgreSQL 13, you can take advantage of the max_slot_wal_keep_size configuration option controlling the maximum size of WAL files that replication slots are allowed to retain in the pg_wal directory at checkpoint time. By default, in PostgreSQL max_slot_wal_keep_size is set to -1 , meaning that replication slots may retain an unlimited amount of WAL files. As a result, our recommendation is to explicitly set max_slot_wal_keep_size when replication slots support is enabled. For example: # ... postgresql: parameters: max_slot_wal_keep_size: \"10GB\" # ... Monitoring replication slots Replication slots must be carefully monitored in your infrastructure. By default, we provide the pg_replication_slots metric in our Prometheus exporter with key information such as the name of the slot, the type, whether it is active, the lag from the primary. Monitoring Please refer to the \"Monitoring\" section for details on how to monitor a CloudNativePG deployment.","title":"Replication"},{"location":"replication/#replication","text":"Physical replication is one of the strengths of PostgreSQL and one of the reasons why some of the largest organizations in the world have chosen it for the management of their data in business continuity contexts. Primarily used to achieve high availability, physical replication also allows scale-out of read-only workloads and offloading of some work from the primary. Important This section is about replication within the same Cluster resource managed in the same Kubernetes cluster. For information about how to replicate with another Postgres Cluster resource, even across different Kubernetes clusters, please refer to the \"Replica clusters\" section.","title":"Replication"},{"location":"replication/#application-level-replication","text":"Having contributed throughout the years to the replication feature in PostgreSQL, we have decided to build high availability in CloudNativePG on top of the native physical replication technology, and integrate it directly in the Kubernetes API. In Kubernetes terms, this is referred to as application-level replication , in contrast with storage-level replication .","title":"Application-level replication"},{"location":"replication/#a-very-mature-technology","text":"PostgreSQL has a very robust and mature native framework for replicating data from the primary instance to one or more replicas, built around the concept of transactional changes continuously stored in the WAL (Write Ahead Log). Started as the evolution of crash recovery and point in time recovery technologies, physical replication was first introduced in PostgreSQL 8.2 (2006) through WAL shipping from the primary to a warm standby in continuous recovery. PostgreSQL 9.0 (2010) introduced WAL streaming and read-only replicas through hot standby . In 2011, PostgreSQL 9.1 brought synchronous replication at the transaction level, supporting RPO =0 clusters. Cascading replication was added in PostgreSQL 9.2 (2012). The foundations for logical replication were established in PostgreSQL 9.4 (2014), and version 10 (2017) introduced native support for the publisher/subscriber pattern to replicate data from an origin to a destination. The table below summarizes these milestones. Version Year Feature 8.2 2006 Warm Standby with WAL shipping 9.0 2010 Hot Standby and physical streaming replication 9.1 2011 Synchronous replication (priority-based) 9.2 2012 Cascading replication 9.4 2014 Foundations of logical replication 10 2017 Logical publisher/subscriber and quorum-based synchronous replication This table highlights key PostgreSQL replication features and their respective versions.","title":"A very mature technology"},{"location":"replication/#streaming-replication-support","text":"At the moment, CloudNativePG natively and transparently manages physical streaming replicas within a cluster in a declarative way, based on the number of provided instances in the spec : replicas = instances - 1 (where instances > 0) Immediately after the initialization of a cluster, the operator creates a user called streaming_replica as follows: CREATE USER streaming_replica WITH REPLICATION; -- NOSUPERUSER INHERIT NOCREATEROLE NOCREATEDB NOBYPASSRLS Out of the box, the operator automatically sets up streaming replication within the cluster over an encrypted channel and enforces TLS client certificate authentication for the streaming_replica user - as highlighted by the following excerpt taken from pg_hba.conf : # Require client certificate authentication for the streaming_replica user hostssl postgres streaming_replica all cert map=cnpg_streaming_replica hostssl replication streaming_replica all cert map=cnpg_streaming_replica Certificates For details on how CloudNativePG manages certificates, please refer to the \"Certificates\" section in the documentation. If configured, the operator manages replication slots for all the replicas in the HA cluster, ensuring that WAL files required by each standby are retained on the primary's storage, even after a failover or switchover. Replication slots for High Availability For details on how CloudNativePG automatically manages replication slots for the High Availability replicas, please refer to the \"Replication slots for High Availability\" section below.","title":"Streaming replication support"},{"location":"replication/#continuous-backup-integration","text":"In case continuous backup is configured in the cluster, CloudNativePG transparently configures replicas to take advantage of restore_command when in continuous recovery. As a result, PostgreSQL can use the WAL archive as a fallback option whenever pulling WALs via streaming replication fails.","title":"Continuous backup integration"},{"location":"replication/#synchronous-replication","text":"CloudNativePG supports both quorum-based and priority-based synchronous replication for PostgreSQL . Warning By default, synchronous replication pauses write operations if the required number of standby nodes for WAL replication during transaction commits is unavailable. This behavior prioritizes data durability and aligns with PostgreSQL DBA best practices. However, if self-healing is a higher priority than strict data durability in your setup, this setting can be adjusted. For details on managing this behavior, refer to the Data Durability and Synchronous Replication section. Important The failover quorum feature (experimental) can be used alongside synchronous replication to improve data durability and safety during failover events. Direct configuration of the synchronous_standby_names option is not permitted. However, CloudNativePG automatically populates this option with the names of local pods, while also allowing customization to extend synchronous replication beyond the Cluster resource. This can be achieved through the .spec.postgresql.synchronous stanza . Synchronous replication is disabled by default (the synchronous stanza is not defined). When defined, two options are mandatory: method : either any (quorum) or first (priority) number : the number of synchronous standby servers that transactions must wait for responses from","title":"Synchronous Replication"},{"location":"replication/#quorum-based-synchronous-replication","text":"In PostgreSQL, quorum-based synchronous replication ensures that transaction commits wait until their WAL records are replicated to a specified number of standbys. To enable this, set the method to any . This replication method is the most common setup for a CloudNativePG cluster.","title":"Quorum-based Synchronous Replication"},{"location":"replication/#example","text":"The example below, based on a typical cluster-example configuration with three instances, sets up quorum-based synchronous replication with at least one instance: postgresql: synchronous: method: any number: 1 With this configuration, CloudNativePG automatically sets the content of synchronous_standby_names as follows: ANY 1 (cluster-example-2, cluster-example-3, cluster-example-1)","title":"Example"},{"location":"replication/#migrating-from-deprecated-synchronous-replication-implementation","text":"This section outlines how to migrate from the deprecated quorum-based synchronous replication format to the newer, more robust implementation in CloudNativePG. Given the following manifest: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: angus spec: instances: 3 minSyncReplicas: 1 maxSyncReplicas: 1 storage: size: 1G You can update it to the new format as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: angus spec: instances: 3 storage: size: 1G postgresql: synchronous: method: any number: 1 dataDurability: required To prioritize self-healing over strict data durability, set dataDurability to preferred instead.","title":"Migrating from Deprecated Synchronous Replication Implementation"},{"location":"replication/#priority-based-synchronous-replication","text":"PostgreSQL's priority-based synchronous replication makes transaction commits wait until their WAL records are replicated to the requested number of synchronous standbys chosen based on their priorities. Standbys listed earlier in the synchronous_standby_names option are given higher priority and considered synchronous. If a current synchronous standby disconnects, it is immediately replaced by the next-highest-priority standby. To use this method, set method to first . Important Currently, this method is most useful when extending synchronous replication beyond the current cluster using the maxStandbyNamesFromCluster , standbyNamesPre , and standbyNamesPost options explained below.","title":"Priority-based Synchronous Replication"},{"location":"replication/#controlling-synchronous_standby_names-content","text":"By default, CloudNativePG populates synchronous_standby_names with the names of local pods in a Cluster resource, ensuring synchronous replication within the PostgreSQL cluster. You can customize the content of synchronous_standby_names based on your requirements and replication method (quorum or priority) using the following optional parameters in the .spec.postgresql.synchronous stanza: maxStandbyNamesFromCluster : the maximum number of pod names from the local Cluster object that can be automatically included in the synchronous_standby_names option in PostgreSQL. standbyNamesPre : a list of standby names (specifically application_name ) to be prepended to the list of local pod names automatically listed by the operator. standbyNamesPost : a list of standby names (specifically application_name ) to be appended to the list of local pod names automatically listed by the operator. Warning You are responsible for ensuring the correct names in standbyNamesPre and standbyNamesPost . CloudNativePG expects that you manage any standby with an application_name listed here, ensuring their high availability. Incorrect entries can jeopardize your PostgreSQL database uptime.","title":"Controlling synchronous_standby_names Content"},{"location":"replication/#examples","text":"Here are some examples, all based on a cluster-example with three instances: If you set: postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus The content of synchronous_standby_names will be: ANY 1 (angus, cluster-example-2) If you set: postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 0 standbyNamesPre: - angus - malcolm The content of synchronous_standby_names will be: ANY 1 (angus, malcolm) If you set: postgresql: synchronous: method: first number: 2 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus standbyNamesPost: - malcolm The synchronous_standby_names option will look like: FIRST 2 (angus, cluster-example-2, malcolm)","title":"Examples"},{"location":"replication/#data-durability-and-synchronous-replication","text":"The dataDurability option in the .spec.postgresql.synchronous stanza controls the trade-off between data safety and availability for synchronous replication. It can be set to required or preferred , with the default being required if not specified. Important preferred can only be used when standbyNamesPre and standbyNamesPost are unset.","title":"Data Durability and Synchronous Replication"},{"location":"replication/#required-data-durability","text":"When dataDurability is set to required , PostgreSQL only considers transactions committed once WAL (Write-Ahead Log) records have been replicated to the specified number of synchronous standbys. This setting prioritizes data safety over availability, meaning write operations will pause if the required number of synchronous standbys is unavailable. This ensures zero data loss (RPO=0) but may reduce database availability during network disruptions or standby failures. Synchronous standbys are selected in this priority order: Healthy instances Unhealthy instances Primary The list is then truncated based on maxStandbyNamesFromCluster if this value is set, prioritizing healthy instances and ensuring synchronous_standby_names is populated.","title":"Required Data Durability"},{"location":"replication/#example_1","text":"Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: foo spec: instances: 3 postgresql: synchronous: method: any number: 1 dataDurability: required Initial state. The content of synchronous_standby_names is: ANY 1 (\"foo-2\",\"foo-3\",\"foo-1\") foo-2 becomes unavailable. It gets pushed back in priority: ANY 1 (\"foo-3\",\"foo-2\",\"foo-1\") foo-3 also becomes unavailable. The list contains no healthy standbys: ANY 1 (\"foo-2\",\"foo-3\",\"foo-1\") At this point no write operations will be allowed until at least one of the standbys is available again. When the standbys are available again, synchronous_standby_names will be back to the initial state.","title":"Example"},{"location":"replication/#preferred-data-durability","text":"When dataDurability is set to preferred , the required number of synchronous instances adjusts based on the number of available standbys. PostgreSQL will attempt to replicate WAL records to the designated number of synchronous standbys, but write operations will continue even if fewer than the requested number of standbys are available. Important Make sure you have a clear understanding of what ready/available means for a replica and set your expectations accordingly. By default, a replica is considered ready when it has successfully connected to the source at least once. However, CloudNativePG allows you to configure startup and readiness probes for replicas based on maximum lag. For more details, please refer to the \"Postgres instance manager\" section . This setting balances data safety with availability, enabling applications to continue writing during temporary standby unavailability\u2014hence, it\u2019s also known as self-healing mode . Warning This mode may result in data loss if all standbys become unavailable. With preferred data durability, only healthy replicas are included in synchronous_standby_names .","title":"Preferred Data Durability"},{"location":"replication/#example_2","text":"Consider the following example. For demonstration, we\u2019ll use a cluster named bar with 5 instances and 2 synchronous standbys: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: bar spec: instances: 5 postgresql: synchronous: method: any number: 2 dataDurability: preferred Initial state. The content of synchronous_standby_names is: ANY 2 (\"bar-2\",\"bar-3\", \"bar-4\", \"bar-5\") bar-2 and bar-3 become unavailable. They are removed from the list: ANY 2 (\"bar-4\", \"bar-5\") bar-4 also becomes unavailable. It gets removed from the list. Since the number of available standbys is less than the requested number, the requested amount gets reduced: ANY 1 (\"bar-5\") bar-5 also becomes unavailable. synchronous_standby_names becomes empty, disabling synchronous replication completely. Write operations will continue, but with the risk of potential data loss in case of a primary failure. When the replicas are back, synchronous_standby_names will be back to the initial state.","title":"Example"},{"location":"replication/#synchronous-replication-deprecated","text":"Warning Prior to CloudNativePG 1.24, only the quorum-based synchronous replication implementation was supported. Although this method is now deprecated, it will not be removed anytime soon. The new method prioritizes data durability over self-healing and offers more robust features, including priority-based synchronous replication and full control over the synchronous_standby_names option. It is recommended to gradually migrate to the new configuration method for synchronous replication, as explained in the previous paragraph. Important The deprecated method and the new method are mutually exclusive. CloudNativePG supports the configuration of quorum-based synchronous streaming replication via two configuration options called minSyncReplicas and maxSyncReplicas , which are the minimum and the maximum number of expected synchronous standby replicas available at any time. For self-healing purposes, the operator always compares these two values with the number of available replicas to determine the quorum. Important By default, synchronous replication selects among all the available replicas indistinctively. You can limit on which nodes your synchronous replicas can be scheduled, by working on node labels through the syncReplicaElectionConstraint option as described in the next section. Synchronous replication is disabled by default ( minSyncReplicas and maxSyncReplicas are not defined). In case both minSyncReplicas and maxSyncReplicas are set, CloudNativePG automatically updates the synchronous_standby_names option in PostgreSQL to the following value: ANY q (pod1, pod2, ...) Where: q is an integer automatically calculated by the operator to be: 1 <= minSyncReplicas <= q <= maxSyncReplicas <= readyReplicas pod1, pod2, ... is the list of all PostgreSQL pods in the cluster Warning To provide self-healing capabilities, the operator can ignore minSyncReplicas if such value is higher than the currently available number of replicas. Synchronous replication is automatically disabled when readyReplicas is 0 . As stated in the PostgreSQL documentation , the method ANY specifies a quorum-based synchronous replication and makes transaction commits wait until their WAL records are replicated to at least the requested number of synchronous standbys in the list . Important Even though the operator chooses self-healing over enforcement of synchronous replication settings, our recommendation is to plan for synchronous replication only in clusters with 3+ instances or, more generally, when maxSyncReplicas < (instances - 1) .","title":"Synchronous Replication (Deprecated)"},{"location":"replication/#select-nodes-for-synchronous-replication","text":"CloudNativePG enables you to select which PostgreSQL instances are eligible to participate in a quorum-based synchronous replication set through anti-affinity rules based on the node labels where the PVC holding the PGDATA and the Postgres pod are. Scheduling For more information on the general pod affinity and anti-affinity rules, please check the \"Scheduling\" section . Warning The .spec.postgresql.syncReplicaElectionConstraint option only applies to the legacy implementation of synchronous replication (see \"Synchronous Replication (Deprecated)\" ). As an example use-case for this feature: in a cluster with a single sync replica, we would be able to ensure the sync replica will be in a different availability zone from the primary instance, usually identified by the topology.kubernetes.io/zone label on a node . This would increase the robustness of the cluster in case of an outage in a single availability zone, especially in terms of recovery point objective ( RPO ). The idea of anti-affinity is to ensure that sync replicas that participate in the quorum are chosen from pods running on nodes that have different values for the selected labels (in this case, the availability zone label) then the node where the primary is currently in execution. If no node matches such criteria, the replicas are eligible for synchronous replication. Important The self-healing enforcement still applies while defining additional constraints for synchronous replica election (see \"Synchronous replication\" ). The example below shows how this can be done through the syncReplicaElectionConstraint section within .spec.postgresql . nodeLabelsAntiAffinity allows you to specify those node labels that need to be evaluated to make sure that synchronous replication will be dynamically configured by the operator between the current primary and the replicas which are located on nodes having a value of the availability zone label different from that of the node where the primary is: spec: instances: 3 postgresql: syncReplicaElectionConstraint: enabled: true nodeLabelsAntiAffinity: - topology.kubernetes.io/zone As you can imagine, the availability zone is just an example, but you could customize this behavior based on other labels that describe the node, such as storage, CPU, or memory.","title":"Select nodes for synchronous replication"},{"location":"replication/#replication-slots","text":"Replication slots are a native PostgreSQL feature introduced in 9.4 that provides an automated way to ensure that the primary does not remove WAL segments until all the attached streaming replication clients have received them, and that the primary does not remove rows which could cause a recovery conflict even when the standby is ( temporarily) disconnected. A replication slot exists solely on the instance that created it, and PostgreSQL does not replicate it on the standby servers. As a result, after a failover or a switchover, the new primary does not contain the replication slot from the old primary. This can create problems for the streaming replication clients that were connected to the old primary and have lost their slot. CloudNativePG provides a turn-key solution to synchronize the content of physical replication slots from the primary to each standby, addressing two use cases: the replication slots automatically created for the High Availability of the Postgres cluster ( see \"Replication slots for High Availability\" below for details) user-defined replication slots created on the primary","title":"Replication slots"},{"location":"replication/#replication-slots-for-high-availability","text":"CloudNativePG fills this gap by introducing the concept of cluster-managed replication slots, starting with high availability clusters. This feature automatically manages physical replication slots for each hot standby replica in the High Availability cluster, both in the primary and the standby. In CloudNativePG, we use the terms: Primary HA slot : a physical replication slot whose lifecycle is entirely managed by the current primary of the cluster and whose purpose is to map to a specific standby in streaming replication. Such a slot lives on the primary only. Standby HA slot : a physical replication slot for a standby whose lifecycle is entirely managed by another standby in the cluster, based on the content of the pg_replication_slots view in the primary, and updated at regular intervals using pg_replication_slot_advance() . This feature is enabled by default and can be disabled via configuration. For details, please refer to the \"replicationSlots\" section in the API reference . Here follows a brief description of the main options: .spec.replicationSlots.highAvailability.enabled if true , the feature is enabled ( true is the default) .spec.replicationSlots.highAvailability.slotPrefix the prefix that identifies replication slots managed by the operator for this feature (default: _cnpg_ ) .spec.replicationSlots.updateInterval how often the standby synchronizes the position of the local copy of the replication slots with the position on the current primary, expressed in seconds (default: 30) Although it is not recommended, if you desire a different behavior, you can customize the above options. For example, the following manifest will create a cluster with replication slots disabled. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 # Disable replication slots for HA in the cluster replicationSlots: highAvailability: enabled: false storage: size: 1Gi","title":"Replication slots for High Availability"},{"location":"replication/#user-defined-replication-slots","text":"Although CloudNativePG doesn't support a way to declaratively define physical replication slots, you can still create your own slots via SQL . Information At the moment, we don't have any plans to manage replication slots in a declarative way, but it might change depending on the feedback we receive from users. The reason is that replication slots exist for a specific purpose and each should be managed by a specific application the oversees the entire lifecycle of the slot on the primary. CloudNativePG can manage the synchronization of any user managed physical replication slots between the primary and standbys, similarly to what it does for the HA replication slots explained above (the only difference is that you need to create the replication slot). This feature is enabled by default (meaning that any replication slot is synchronized), but you can disable it or further customize its behavior (for example by excluding some slots using regular expressions) through the synchronizeReplicas stanza. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 replicationSlots: synchronizeReplicas: enabled: true excludePatterns: - \"^foo\" For details, please refer to the \"replicationSlots\" section in the API reference . Here follows a brief description of the main options: .spec.replicationSlots.synchronizeReplicas.enabled When true or not specified, every user-defined replication slot on the primary is synchronized on each standby. If changed to false, the operator will remove any replication slot previously created by itself on each standby. .spec.replicationSlots.synchronizeReplicas.excludePatterns A list of regular expression patterns to match the names of user-defined replication slots to be excluded from synchronization. This can be useful to exclude specific slots based on naming conventions. Warning Users utilizing this feature should carefully monitor user-defined replication slots to ensure they align with their operational requirements and do not interfere with the failover process.","title":"User-Defined Replication slots"},{"location":"replication/#synchronization-frequency","text":"You can also control the frequency with which a standby queries the pg_replication_slots view on the primary, and updates its local copy of the replication slots, like in this example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 # Reduce the frequency of standby HA slots updates to once every 5 minutes replicationSlots: updateInterval: 300 storage: size: 1Gi","title":"Synchronization frequency"},{"location":"replication/#logical-decoding-slot-synchronization","text":"CloudNativePG can synchronize logical decoding (replication) slots across all nodes in a high-availability cluster, ensuring seamless continuation of logical replication after a failover or switchover. This feature is disabled by default, and enabling it requires two steps. The first step is to enable logical decoding slot synchronization: # ... replicationSlots: highAvailability: synchronizeLogicalDecoding: true The second step involves configuring PostgreSQL parameters: the required configuration depends on your PostgreSQL version, as explained below. When enabled, the operator automatically manages logical decoding slot states during failover and switchover, preventing slot invalidation and avoiding data loss for logical replication clients.","title":"Logical Decoding Slot Synchronization"},{"location":"replication/#behavior-on-postgresql-17-and-later","text":"For PostgreSQL 17 and newer, CloudNativePG transparently manages the synchronized_standby_slots parameter . You must enable both sync_replication_slots and hot_standby_feedback in your PostgreSQL configuration: # ... postgresql: parameters: # ... hot_standby_feedback: 'on' sync_replication_slots: 'on' Additionally, you must create the logical replication Subscription with the failover option enabled, for example: apiVersion: postgresql.cnpg.io/v1 kind: Subscription # ... spec: # ... parameters: failover: 'true' # ... When configured, logical WAL sender processes send decoded changes to plugins only after the specified replication slots confirm receiving and flushing the relevant WAL, ensuring that: logical replication slots do not consume changes until they are safely received by the replicas of the publisher, and logical replication clients can seamlessly reconnect to a promoted standby without missing data after failover. For more details on logical replication slot synchronization, see the PostgreSQL documentation on Logical Replication Failover .","title":"Behavior on PostgreSQL 17 and later"},{"location":"replication/#behavior-on-postgresql-16-and-earlier","text":"For PostgreSQL 16 and older versions, CloudNativePG uses the pg_failover_slots extension to maintain synchronization of logical replication slots across failovers.","title":"Behavior on PostgreSQL 16 and earlier"},{"location":"replication/#capping-the-wal-size-retained-for-replication-slots","text":"When replication slots is enabled, you might end up running out of disk space due to PostgreSQL trying to retain WAL files requested by a replication slot. This might happen due to a standby that is (temporarily?) down, or lagging, or simply an orphan replication slot. Starting with PostgreSQL 13, you can take advantage of the max_slot_wal_keep_size configuration option controlling the maximum size of WAL files that replication slots are allowed to retain in the pg_wal directory at checkpoint time. By default, in PostgreSQL max_slot_wal_keep_size is set to -1 , meaning that replication slots may retain an unlimited amount of WAL files. As a result, our recommendation is to explicitly set max_slot_wal_keep_size when replication slots support is enabled. For example: # ... postgresql: parameters: max_slot_wal_keep_size: \"10GB\" # ...","title":"Capping the WAL size retained for replication slots"},{"location":"replication/#monitoring-replication-slots","text":"Replication slots must be carefully monitored in your infrastructure. By default, we provide the pg_replication_slots metric in our Prometheus exporter with key information such as the name of the slot, the type, whether it is active, the lag from the primary. Monitoring Please refer to the \"Monitoring\" section for details on how to monitor a CloudNativePG deployment.","title":"Monitoring replication slots"},{"location":"resource_management/","text":"Resource management In a typical Kubernetes cluster, pods run with unlimited resources. By default, they might be allowed to use as much CPU and RAM as needed. CloudNativePG allows administrators to control and manage resource usage by the pods of the cluster, through the resources section of the manifest, with two knobs: requests : initial requirement limits : maximum usage, in case of dynamic increase of resource needs For example, you can request an initial amount of RAM of 32MiB (scalable to 128MiB) and 50m of CPU (scalable to 100m) as follows: resources: requests: memory: \"32Mi\" cpu: \"50m\" limits: memory: \"128Mi\" cpu: \"100m\" Memory requests and limits are associated with containers, but it is useful to think of a pod as having a memory request and limit. The pod's memory request is the sum of the memory requests for all the containers in the pod. Pod scheduling is based on requests and not on limits. A pod is scheduled to run on a Node only if the Node has enough available memory to satisfy the pod's memory request. For each resource, we divide containers into 3 Quality of Service (QoS) classes, in decreasing order of priority: Guaranteed Burstable Best-Effort For more details, please refer to the \"Configure Quality of Service for Pods\" section in the Kubernetes documentation. For a PostgreSQL workload it is recommended to set a \"Guaranteed\" QoS. Info When the quality of service is set to \"Guaranteed\", CloudNativePG sets the PG_OOM_ADJUST_VALUE for the postmaster process to 0 , in line with the PostgreSQL documentation . This allows the postmaster to retain its low Out-Of-Memory (OOM) score of -997 , while its child processes run with an OOM score adjustment of 0 . As a result, if the OOM killer is triggered, it will terminate the child processes before the postmaster . This behavior helps keep the PostgreSQL instance alive for as long as possible and enables a clean shutdown procedure in the event of an eviction. To avoid resources related issues in Kubernetes, we can refer to the best practices for \"out of resource\" handling while creating a cluster: Specify your required values for memory and CPU in the resources section of the manifest file. This way, you can avoid the OOM Killed and CPU throttle or any other resource-related issues on running instances. For your cluster's pods to get assigned to the \"Guaranteed\" QoS class, you must set limits and requests for both memory and CPU to the same value. Specify your required PostgreSQL memory parameters consistently with the pod resources (as you would do in a VM or physical machine scenario - see below). Set up database server pods on a dedicated node using nodeSelector. See the \"nodeSelector\" and \"tolerations\" fields of the \u201caffinityconfiguration\" resource on the API reference page. You can refer to the following example manifest: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-resources spec: instances: 3 postgresql: parameters: shared_buffers: \"256MB\" resources: requests: memory: \"1024Mi\" cpu: 1 limits: memory: \"1024Mi\" cpu: 1 storage: size: 1Gi In the above example, we have specified shared_buffers parameter with a value of 256MB - i.e., how much memory is dedicated to the PostgreSQL server for caching data (the default value for this parameter is 128MB in case it's not defined). A reasonable starting value for shared_buffers is 25% of the memory in your system. For example: if your shared_buffers is 256 MB, then the recommended value for your container memory size is 1 GB, which means that within a pod all the containers will have a total of 1 GB memory that Kubernetes will always preserve, enabling our containers to work as expected. For more details, please refer to the \"Resource Consumption\" section in the PostgreSQL documentation. Managing Compute Resources for Containers For more details on resource management, please refer to the \"Managing Compute Resources for Containers\" page from the Kubernetes documentation.","title":"Resource management"},{"location":"resource_management/#resource-management","text":"In a typical Kubernetes cluster, pods run with unlimited resources. By default, they might be allowed to use as much CPU and RAM as needed. CloudNativePG allows administrators to control and manage resource usage by the pods of the cluster, through the resources section of the manifest, with two knobs: requests : initial requirement limits : maximum usage, in case of dynamic increase of resource needs For example, you can request an initial amount of RAM of 32MiB (scalable to 128MiB) and 50m of CPU (scalable to 100m) as follows: resources: requests: memory: \"32Mi\" cpu: \"50m\" limits: memory: \"128Mi\" cpu: \"100m\" Memory requests and limits are associated with containers, but it is useful to think of a pod as having a memory request and limit. The pod's memory request is the sum of the memory requests for all the containers in the pod. Pod scheduling is based on requests and not on limits. A pod is scheduled to run on a Node only if the Node has enough available memory to satisfy the pod's memory request. For each resource, we divide containers into 3 Quality of Service (QoS) classes, in decreasing order of priority: Guaranteed Burstable Best-Effort For more details, please refer to the \"Configure Quality of Service for Pods\" section in the Kubernetes documentation. For a PostgreSQL workload it is recommended to set a \"Guaranteed\" QoS. Info When the quality of service is set to \"Guaranteed\", CloudNativePG sets the PG_OOM_ADJUST_VALUE for the postmaster process to 0 , in line with the PostgreSQL documentation . This allows the postmaster to retain its low Out-Of-Memory (OOM) score of -997 , while its child processes run with an OOM score adjustment of 0 . As a result, if the OOM killer is triggered, it will terminate the child processes before the postmaster . This behavior helps keep the PostgreSQL instance alive for as long as possible and enables a clean shutdown procedure in the event of an eviction. To avoid resources related issues in Kubernetes, we can refer to the best practices for \"out of resource\" handling while creating a cluster: Specify your required values for memory and CPU in the resources section of the manifest file. This way, you can avoid the OOM Killed and CPU throttle or any other resource-related issues on running instances. For your cluster's pods to get assigned to the \"Guaranteed\" QoS class, you must set limits and requests for both memory and CPU to the same value. Specify your required PostgreSQL memory parameters consistently with the pod resources (as you would do in a VM or physical machine scenario - see below). Set up database server pods on a dedicated node using nodeSelector. See the \"nodeSelector\" and \"tolerations\" fields of the \u201caffinityconfiguration\" resource on the API reference page. You can refer to the following example manifest: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-resources spec: instances: 3 postgresql: parameters: shared_buffers: \"256MB\" resources: requests: memory: \"1024Mi\" cpu: 1 limits: memory: \"1024Mi\" cpu: 1 storage: size: 1Gi In the above example, we have specified shared_buffers parameter with a value of 256MB - i.e., how much memory is dedicated to the PostgreSQL server for caching data (the default value for this parameter is 128MB in case it's not defined). A reasonable starting value for shared_buffers is 25% of the memory in your system. For example: if your shared_buffers is 256 MB, then the recommended value for your container memory size is 1 GB, which means that within a pod all the containers will have a total of 1 GB memory that Kubernetes will always preserve, enabling our containers to work as expected. For more details, please refer to the \"Resource Consumption\" section in the PostgreSQL documentation. Managing Compute Resources for Containers For more details on resource management, please refer to the \"Managing Compute Resources for Containers\" page from the Kubernetes documentation.","title":"Resource management"},{"location":"rolling_update/","text":"Rolling Updates The operator allows changing the PostgreSQL version used in a cluster while applications are running against it. Important Only upgrades for PostgreSQL minor releases are supported. Rolling upgrades are started when: the user changes the imageName attribute of the cluster specification; the image catalog is updated with a new image for the major used by the cluster; a change in the PostgreSQL configuration requires a restart to be applied; a change on the Cluster .spec.resources values a change in size of the persistent volume claim on AKS after the operator is updated, to ensure the Pods run the latest instance manager (unless in-place updates are enabled ). The operator starts upgrading all the replicas, one Pod at a time, and begins from the one with the highest serial. The primary is the last node to be upgraded. Rolling updates are configurable and can be either entirely automated ( unsupervised ) or requiring human intervention ( supervised ). The upgrade keeps the CloudNativePG identity, without re-cloning the data. Pods will be deleted and created again with the same PVCs and a new image, if required. During the rolling update procedure, each service endpoints move to reflect the cluster's status, so that applications can ignore the node that is being updated. Automated updates ( unsupervised ) When primaryUpdateStrategy is set to unsupervised , the rolling update process is managed by Kubernetes and is entirely automated. Once the replicas have been upgraded, the selected primaryUpdateMethod operation will initiate on the primary. This is the default behavior. The primaryUpdateMethod option accepts one of the following values: restart : if possible, perform an automated restart of the pod where the primary instance is running. Otherwise, the restart request is ignored and a switchover issued. This is the default behavior. switchover : a switchover operation is automatically performed, setting the most aligned replica as the new target primary, and shutting down the former primary pod. There's no one-size-fits-all configuration for the update method, as that depends on several factors like the actual workload of your database, the requirements in terms of RPO and RTO , whether your PostgreSQL architecture is shared or shared nothing, and so on. Indeed, being PostgreSQL a primary/standby architecture database management system, the update process inevitably generates a downtime for your applications. One important aspect to consider for your context is the time it takes for your pod to download the new PostgreSQL container image, as that depends on your Kubernetes cluster settings and specifications. The switchover method makes sure that the promoted instance already runs the target image version of the container. The restart method instead might require to download the image from the origin registry after the primary pod has been shut down. It is up to you to determine whether, for your database, it is best to use restart or switchover as part of the rolling update procedure. Manual updates ( supervised ) When primaryUpdateStrategy is set to supervised , the rolling update process is suspended immediately after all replicas have been upgraded. This phase can only be completed with either a manual switchover or an in-place restart. Keep in mind that image upgrades can not be applied with an in-place restart, so a switchover is required in such cases. You can trigger a switchover with: kubectl cnpg promote [cluster] [new_primary] You can trigger a restart with: kubectl cnpg restart [cluster] [current_primary] You can find more information in the cnpg plugin page .","title":"Rolling Updates"},{"location":"rolling_update/#rolling-updates","text":"The operator allows changing the PostgreSQL version used in a cluster while applications are running against it. Important Only upgrades for PostgreSQL minor releases are supported. Rolling upgrades are started when: the user changes the imageName attribute of the cluster specification; the image catalog is updated with a new image for the major used by the cluster; a change in the PostgreSQL configuration requires a restart to be applied; a change on the Cluster .spec.resources values a change in size of the persistent volume claim on AKS after the operator is updated, to ensure the Pods run the latest instance manager (unless in-place updates are enabled ). The operator starts upgrading all the replicas, one Pod at a time, and begins from the one with the highest serial. The primary is the last node to be upgraded. Rolling updates are configurable and can be either entirely automated ( unsupervised ) or requiring human intervention ( supervised ). The upgrade keeps the CloudNativePG identity, without re-cloning the data. Pods will be deleted and created again with the same PVCs and a new image, if required. During the rolling update procedure, each service endpoints move to reflect the cluster's status, so that applications can ignore the node that is being updated.","title":"Rolling Updates"},{"location":"rolling_update/#automated-updates-unsupervised","text":"When primaryUpdateStrategy is set to unsupervised , the rolling update process is managed by Kubernetes and is entirely automated. Once the replicas have been upgraded, the selected primaryUpdateMethod operation will initiate on the primary. This is the default behavior. The primaryUpdateMethod option accepts one of the following values: restart : if possible, perform an automated restart of the pod where the primary instance is running. Otherwise, the restart request is ignored and a switchover issued. This is the default behavior. switchover : a switchover operation is automatically performed, setting the most aligned replica as the new target primary, and shutting down the former primary pod. There's no one-size-fits-all configuration for the update method, as that depends on several factors like the actual workload of your database, the requirements in terms of RPO and RTO , whether your PostgreSQL architecture is shared or shared nothing, and so on. Indeed, being PostgreSQL a primary/standby architecture database management system, the update process inevitably generates a downtime for your applications. One important aspect to consider for your context is the time it takes for your pod to download the new PostgreSQL container image, as that depends on your Kubernetes cluster settings and specifications. The switchover method makes sure that the promoted instance already runs the target image version of the container. The restart method instead might require to download the image from the origin registry after the primary pod has been shut down. It is up to you to determine whether, for your database, it is best to use restart or switchover as part of the rolling update procedure.","title":"Automated updates (unsupervised)"},{"location":"rolling_update/#manual-updates-supervised","text":"When primaryUpdateStrategy is set to supervised , the rolling update process is suspended immediately after all replicas have been upgraded. This phase can only be completed with either a manual switchover or an in-place restart. Keep in mind that image upgrades can not be applied with an in-place restart, so a switchover is required in such cases. You can trigger a switchover with: kubectl cnpg promote [cluster] [new_primary] You can trigger a restart with: kubectl cnpg restart [cluster] [current_primary] You can find more information in the cnpg plugin page .","title":"Manual updates (supervised)"},{"location":"samples/","text":"Examples The examples show configuration files for setting up your PostgreSQL cluster. Important These examples are for demonstration and experimentation purposes. You can execute them on a personal Kubernetes cluster with Minikube or Kind, as described in Quick start . Reference For a list of available options, see API reference . Basics Basic cluster cluster-example.yaml A basic example of a cluster. Custom cluster cluster-example-custom.yaml A basic cluster that uses the default storage class and custom parameters for the postgresql.conf and pg_hba.conf files. Cluster with customized storage class cluster-storage-class.yaml : A basic cluster that uses a specified storage class of standard . Cluster with persistent volume claim (PVC) template configured cluster-pvc-template.yaml : A basic cluster with an explicit persistent volume claim template. Extended configuration example cluster-example-full.yaml : A cluster that sets most of the available options. Bootstrap cluster with SQL files cluster-example-initdb-sql-refs.yaml : A cluster example that executes a set of queries defined in a secret and a ConfigMap right after the database is created. Sample cluster with customized pg_hba configuration cluster-example-pg-hba.yaml : A basic cluster that enables the user app to authenticate using certificates. Sample cluster with Secret and ConfigMap mounted using projected volume template cluster-example-projected-volume.yaml A basic cluster with the existing Secret and ConfigMap mounted into Postgres pod using projected volume mount. Backups Customized storage class and backups Prerequisites : Bucket storage must be available. The sample config is for AWS. Change it to suit your setup. cluster-storage-class-with-backup.yaml A cluster with backups configured. Backup Prerequisites : cluster-storage-class-with-backup.yaml applied and healthy. backup-example.yaml : An example of a backup that runs against the previous sample. Simple cluster with backup configured for minio Prerequisites : The configuration assumes minio is running and working. Update backup.barmanObjectStore with your minio parameters or your cloud solution. cluster-example-with-backup.yaml A basic cluster with backups configured. Simple cluster with backup configured for Scaleway Object Storage Prerequisites : The configuration assumes a Scaleway Object Storage bucket exists. Update backup.barmanObjectStore with your Scaleway parameters. cluster-example-with-backup-scaleway.yaml A basic cluster with backups configured to work with Scaleway Object Storage.. Replica clusters Replica cluster by way of backup from an object store Prerequisites : cluster-storage-class-with-backup.yaml applied and healthy, and a backup cluster-example-trigger-backup.yaml applied and completed. cluster-example-replica-from-backup-simple.yaml : A replica cluster following a cluster with backup configured. Replica cluster by way of volume snapshot Prerequisites : cluster-example-with-volume-snapshot.yaml applied and healthy, and a volume snapshot backup-with-volume-snapshot.yaml applied and completed. cluster-example-replica-from-volume-snapshot.yaml : A replica cluster following a cluster with volume snapshot configured. Replica cluster by way of streaming (pg_basebackup) Prerequisites : cluster-example.yaml applied and healthy. cluster-example-replica-streaming.yaml : A replica cluster following cluster-example with streaming replication. PostGIS PostGIS example postgis-example.yaml : An example of a PostGIS cluster. See PostGIS for details. Managed roles Cluster with declarative role management cluster-example-with-roles.yaml : Declares a role with the managed stanza. Includes password management with Kubernetes secrets. Managed services Cluster with managed services cluster-example-managed-services.yaml : Declares a service with the managed stanza. Includes default service disabled and new rw service template of LoadBalancer type defined. Declarative tablespaces Cluster with declarative tablespaces cluster-example-with-tablespaces.yaml Cluster with declarative tablespaces and backup Prerequisites : The configuration assumes minio is running and working. Update backup.barmanObjectStore with your minio parameters or your cloud solution. cluster-example-with-tablespaces-backup.yaml Restored cluster with tablespaces from object store Prerequisites : The previous cluster applied and a base backup completed. Remember to update bootstrap.recovery.backup.name with the backup name. cluster-restore-with-tablespaces.yaml For a list of available options, see API reference . Pooler configuration Pooler with custom service config pooler-external.yaml Logical replication via declarative Publication and Subscription objects Two test manifests contain everything needed to set up logical replication: Source cluster with a publication cluster-example-logical-source.yaml Sets up a cluster, cluster-example with some tables created in the app database, and, importantly, adds replication to the app user . A publication is created for the cluster on the app database: note that the publication will be reconciled only after the cluster's primary is up and running. Destination cluster with a subscription Prerequisites : The source cluster with publication, defined as above. cluster-example-logical-destination.yaml Sets up a cluster cluster-example-dest with: the source cluster defined in the externalClusters stanza. Note that it uses the app role to connect, which assumes the source cluster grants it replication privilege. a bootstrap import of microservice type, with schemaOnly enabled A subscription is created on the destination cluster: note that the subscription will be reconciled only after the destination cluster's primary is up and running. After both clusters have been reconciled, together with the publication and subscription objects, you can verify that that tables in the source cluster, and the data in them, have been replicated in the destination cluster In addition, there are some standalone example manifests: A plain Publication targeting All Tables Prerequisites : an existing cluster cluster-example . publication-example.yaml A Publication with a constrained publication target Prerequisites : an existing cluster cluster-example . publication-example-objects.yaml A plain Subscription Prerequisites: an existing cluster cluster-example set up as source, with a publication pub-all . A cluster cluster-example-dest set up as a destination cluster, including the externalClusters stanza with connection parameters to the source cluster, including a role with replication privilege. subscription-example.yaml All the above manifests create publications or subscriptions on the app database. The Database CRD offers a convenient way to create databases declaratively. With it, logical replication could be set up for arbitrary databases. Which brings us to the next section. Declarative management of Postgres databases A plain Database Prerequisites : an existing cluster cluster-example . database-example.yaml A Database with ICU local specifications Prerequisites : an existing cluster cluster-example running Postgres 16 or more advanced. database-example-icu.yaml","title":"Examples"},{"location":"samples/#examples","text":"The examples show configuration files for setting up your PostgreSQL cluster. Important These examples are for demonstration and experimentation purposes. You can execute them on a personal Kubernetes cluster with Minikube or Kind, as described in Quick start . Reference For a list of available options, see API reference .","title":"Examples"},{"location":"samples/#basics","text":"Basic cluster cluster-example.yaml A basic example of a cluster. Custom cluster cluster-example-custom.yaml A basic cluster that uses the default storage class and custom parameters for the postgresql.conf and pg_hba.conf files. Cluster with customized storage class cluster-storage-class.yaml : A basic cluster that uses a specified storage class of standard . Cluster with persistent volume claim (PVC) template configured cluster-pvc-template.yaml : A basic cluster with an explicit persistent volume claim template. Extended configuration example cluster-example-full.yaml : A cluster that sets most of the available options. Bootstrap cluster with SQL files cluster-example-initdb-sql-refs.yaml : A cluster example that executes a set of queries defined in a secret and a ConfigMap right after the database is created. Sample cluster with customized pg_hba configuration cluster-example-pg-hba.yaml : A basic cluster that enables the user app to authenticate using certificates. Sample cluster with Secret and ConfigMap mounted using projected volume template cluster-example-projected-volume.yaml A basic cluster with the existing Secret and ConfigMap mounted into Postgres pod using projected volume mount.","title":"Basics"},{"location":"samples/#backups","text":"Customized storage class and backups Prerequisites : Bucket storage must be available. The sample config is for AWS. Change it to suit your setup. cluster-storage-class-with-backup.yaml A cluster with backups configured. Backup Prerequisites : cluster-storage-class-with-backup.yaml applied and healthy. backup-example.yaml : An example of a backup that runs against the previous sample. Simple cluster with backup configured for minio Prerequisites : The configuration assumes minio is running and working. Update backup.barmanObjectStore with your minio parameters or your cloud solution. cluster-example-with-backup.yaml A basic cluster with backups configured. Simple cluster with backup configured for Scaleway Object Storage Prerequisites : The configuration assumes a Scaleway Object Storage bucket exists. Update backup.barmanObjectStore with your Scaleway parameters. cluster-example-with-backup-scaleway.yaml A basic cluster with backups configured to work with Scaleway Object Storage..","title":"Backups"},{"location":"samples/#replica-clusters","text":"Replica cluster by way of backup from an object store Prerequisites : cluster-storage-class-with-backup.yaml applied and healthy, and a backup cluster-example-trigger-backup.yaml applied and completed. cluster-example-replica-from-backup-simple.yaml : A replica cluster following a cluster with backup configured. Replica cluster by way of volume snapshot Prerequisites : cluster-example-with-volume-snapshot.yaml applied and healthy, and a volume snapshot backup-with-volume-snapshot.yaml applied and completed. cluster-example-replica-from-volume-snapshot.yaml : A replica cluster following a cluster with volume snapshot configured. Replica cluster by way of streaming (pg_basebackup) Prerequisites : cluster-example.yaml applied and healthy. cluster-example-replica-streaming.yaml : A replica cluster following cluster-example with streaming replication.","title":"Replica clusters"},{"location":"samples/#postgis","text":"PostGIS example postgis-example.yaml : An example of a PostGIS cluster. See PostGIS for details.","title":"PostGIS"},{"location":"samples/#managed-roles","text":"Cluster with declarative role management cluster-example-with-roles.yaml : Declares a role with the managed stanza. Includes password management with Kubernetes secrets.","title":"Managed roles"},{"location":"samples/#managed-services","text":"Cluster with managed services cluster-example-managed-services.yaml : Declares a service with the managed stanza. Includes default service disabled and new rw service template of LoadBalancer type defined.","title":"Managed services"},{"location":"samples/#declarative-tablespaces","text":"Cluster with declarative tablespaces cluster-example-with-tablespaces.yaml Cluster with declarative tablespaces and backup Prerequisites : The configuration assumes minio is running and working. Update backup.barmanObjectStore with your minio parameters or your cloud solution. cluster-example-with-tablespaces-backup.yaml Restored cluster with tablespaces from object store Prerequisites : The previous cluster applied and a base backup completed. Remember to update bootstrap.recovery.backup.name with the backup name. cluster-restore-with-tablespaces.yaml For a list of available options, see API reference .","title":"Declarative tablespaces"},{"location":"samples/#pooler-configuration","text":"Pooler with custom service config pooler-external.yaml","title":"Pooler configuration"},{"location":"samples/#logical-replication-via-declarative-publication-and-subscription-objects","text":"Two test manifests contain everything needed to set up logical replication: Source cluster with a publication cluster-example-logical-source.yaml Sets up a cluster, cluster-example with some tables created in the app database, and, importantly, adds replication to the app user . A publication is created for the cluster on the app database: note that the publication will be reconciled only after the cluster's primary is up and running. Destination cluster with a subscription Prerequisites : The source cluster with publication, defined as above. cluster-example-logical-destination.yaml Sets up a cluster cluster-example-dest with: the source cluster defined in the externalClusters stanza. Note that it uses the app role to connect, which assumes the source cluster grants it replication privilege. a bootstrap import of microservice type, with schemaOnly enabled A subscription is created on the destination cluster: note that the subscription will be reconciled only after the destination cluster's primary is up and running. After both clusters have been reconciled, together with the publication and subscription objects, you can verify that that tables in the source cluster, and the data in them, have been replicated in the destination cluster In addition, there are some standalone example manifests: A plain Publication targeting All Tables Prerequisites : an existing cluster cluster-example . publication-example.yaml A Publication with a constrained publication target Prerequisites : an existing cluster cluster-example . publication-example-objects.yaml A plain Subscription Prerequisites: an existing cluster cluster-example set up as source, with a publication pub-all . A cluster cluster-example-dest set up as a destination cluster, including the externalClusters stanza with connection parameters to the source cluster, including a role with replication privilege. subscription-example.yaml All the above manifests create publications or subscriptions on the app database. The Database CRD offers a convenient way to create databases declaratively. With it, logical replication could be set up for arbitrary databases. Which brings us to the next section.","title":"Logical replication via declarative Publication and Subscription objects"},{"location":"samples/#declarative-management-of-postgres-databases","text":"A plain Database Prerequisites : an existing cluster cluster-example . database-example.yaml A Database with ICU local specifications Prerequisites : an existing cluster cluster-example running Postgres 16 or more advanced. database-example-icu.yaml","title":"Declarative management of Postgres databases"},{"location":"scheduling/","text":"Scheduling Scheduling, in Kubernetes, is the process responsible for placing a new pod on the best node possible, based on several criteria. Kubernetes documentation Please refer to the Kubernetes documentation for more information on scheduling, including all the available policies. On this page we assume you are familiar with concepts like affinity, anti-affinity, node selectors, and so on. You can control how the CloudNativePG cluster's instances should be scheduled through the affinity section in the definition of the cluster, which supports: pod affinity/anti-affinity node selectors tolerations Pod Affinity and Anti-Affinity Kubernetes provides mechanisms to control where pods are scheduled using affinity and anti-affinity rules. These rules allow you to specify whether a pod should be scheduled on particular nodes ( affinity ) or avoided on specific nodes ( anti-affinity ) based on the workloads already running there. This capability is technically referred to as inter-pod affinity/anti-affinity . By default, CloudNativePG configures cluster instances to preferably be scheduled on different nodes, while pgBouncer instances might still run on the same nodes. For example, given the following Cluster specification: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 affinity: enablePodAntiAffinity: true # Default value topologyKey: kubernetes.io/hostname # Default value podAntiAffinityType: preferred # Default value storage: size: 1Gi The affinity configuration applied in the instance pods will be: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: cnpg.io/cluster operator: In values: - cluster-example - key: cnpg.io/podRole operator: In values: - instance topologyKey: kubernetes.io/hostname weight: 100 With this setup, Kubernetes will prefer to schedule a 3-node PostgreSQL cluster across three different nodes, assuming sufficient resources are available. Requiring Pod Anti-Affinity You can modify the default behavior by adjusting the settings mentioned above. For example, setting podAntiAffinityType to required will enforce requiredDuringSchedulingIgnoredDuringExecution instead of preferredDuringSchedulingIgnoredDuringExecution . However, be aware that this strict requirement may cause pods to remain pending if resources are insufficient\u2014this is particularly relevant when using Cluster Autoscaler for automated horizontal scaling in a Kubernetes cluster. Inter-pod Affinity and Anti-Affinity For more details, refer to the Kubernetes documentation . Topology Considerations In cloud environments, you might consider using topology.kubernetes.io/zone as the topologyKey to ensure pods are distributed across different availability zones rather than just nodes. For more options, see Well-Known Labels, Annotations, and Taints . Disabling Anti-Affinity Policies If needed, you can disable the operator-generated anti-affinity policies by setting enablePodAntiAffinity to false . Fine-Grained Control with Custom Rules For scenarios requiring more precise control, you can specify custom pod affinity or anti-affinity rules using the additionalPodAffinity and additionalPodAntiAffinity configuration attributes. These custom rules will be added to those generated by the operator, if enabled, or used directly if the operator-generated rules are disabled. Note When using additionalPodAntiAffinity or additionalPodAffinity , you must provide the full podAntiAffinity or podAffinity structure expected by the Pod specification. The following YAML example demonstrates how to configure only one instance of PostgreSQL per worker node, regardless of which PostgreSQL cluster it belongs to: additionalPodAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: postgresql operator: Exists values: [] topologyKey: \"kubernetes.io/hostname\" Node selection through nodeSelector Kubernetes allows nodeSelector to provide a list of labels (defined as key-value pairs) to select the nodes on which a pod can run. Specifically, the node must have each indicated key-value pair as labels for the pod to be scheduled and run. Similarly, CloudNativePG consents you to define a nodeSelector in the affinity section, so that you can request a PostgreSQL cluster to run only on nodes that have those labels. Tolerations Kubernetes allows you to specify (through taints ) whether a node should repel all pods not explicitly tolerating (through tolerations ) their taints . So, by setting a proper set of tolerations for a workload matching a specific node's taints , Kubernetes scheduler will now take into consideration the tainted node, while deciding on which node to schedule the workload. Tolerations can be configured for all the pods of a Cluster through the .spec.affinity.tolerations section, which accepts the usual Kubernetes syntax for tolerations. Taints and Tolerations More information on taints and tolerations can be found in the Kubernetes documentation . Isolating PostgreSQL workloads Important Before proceeding, please ensure you have read the \"Architecture\" section of the documentation. While you can deploy PostgreSQL on Kubernetes in various ways, we recommend following these essential principles for production environments: Exploit Availability Zones: If possible, take advantage of availability zones (AZs) within the same Kubernetes cluster by distributing PostgreSQL instances across different AZs. Dedicate Worker Nodes: Allocate specific worker nodes for PostgreSQL workloads through the node-role.kubernetes.io/postgres label and taint, as detailed in the Reserving Nodes for PostgreSQL Workloads section. Avoid Node Overlap: Ensure that no instances from the same PostgreSQL cluster are running on the same node. As explained in greater detail in the previous sections, CloudNativePG provides the flexibility to configure pod anti-affinity, node selectors, and tolerations. Below is a sample configuration to ensure that a PostgreSQL Cluster is deployed on postgres nodes, with its instances distributed across different nodes: # <snip> affinity: enablePodAntiAffinity: true topologyKey: kubernetes.io/hostname podAntiAffinityType: required nodeSelector: node-role.kubernetes.io/postgres: \"\" tolerations: - key: node-role.kubernetes.io/postgres operator: Exists effect: NoSchedule # <snip> Despite its simplicity, this setup ensures optimal distribution and isolation of PostgreSQL workloads, leading to enhanced performance and reliability in your production environment.","title":"Scheduling"},{"location":"scheduling/#scheduling","text":"Scheduling, in Kubernetes, is the process responsible for placing a new pod on the best node possible, based on several criteria. Kubernetes documentation Please refer to the Kubernetes documentation for more information on scheduling, including all the available policies. On this page we assume you are familiar with concepts like affinity, anti-affinity, node selectors, and so on. You can control how the CloudNativePG cluster's instances should be scheduled through the affinity section in the definition of the cluster, which supports: pod affinity/anti-affinity node selectors tolerations","title":"Scheduling"},{"location":"scheduling/#pod-affinity-and-anti-affinity","text":"Kubernetes provides mechanisms to control where pods are scheduled using affinity and anti-affinity rules. These rules allow you to specify whether a pod should be scheduled on particular nodes ( affinity ) or avoided on specific nodes ( anti-affinity ) based on the workloads already running there. This capability is technically referred to as inter-pod affinity/anti-affinity . By default, CloudNativePG configures cluster instances to preferably be scheduled on different nodes, while pgBouncer instances might still run on the same nodes. For example, given the following Cluster specification: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 affinity: enablePodAntiAffinity: true # Default value topologyKey: kubernetes.io/hostname # Default value podAntiAffinityType: preferred # Default value storage: size: 1Gi The affinity configuration applied in the instance pods will be: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: cnpg.io/cluster operator: In values: - cluster-example - key: cnpg.io/podRole operator: In values: - instance topologyKey: kubernetes.io/hostname weight: 100 With this setup, Kubernetes will prefer to schedule a 3-node PostgreSQL cluster across three different nodes, assuming sufficient resources are available.","title":"Pod Affinity and Anti-Affinity"},{"location":"scheduling/#requiring-pod-anti-affinity","text":"You can modify the default behavior by adjusting the settings mentioned above. For example, setting podAntiAffinityType to required will enforce requiredDuringSchedulingIgnoredDuringExecution instead of preferredDuringSchedulingIgnoredDuringExecution . However, be aware that this strict requirement may cause pods to remain pending if resources are insufficient\u2014this is particularly relevant when using Cluster Autoscaler for automated horizontal scaling in a Kubernetes cluster. Inter-pod Affinity and Anti-Affinity For more details, refer to the Kubernetes documentation .","title":"Requiring Pod Anti-Affinity"},{"location":"scheduling/#topology-considerations","text":"In cloud environments, you might consider using topology.kubernetes.io/zone as the topologyKey to ensure pods are distributed across different availability zones rather than just nodes. For more options, see Well-Known Labels, Annotations, and Taints .","title":"Topology Considerations"},{"location":"scheduling/#disabling-anti-affinity-policies","text":"If needed, you can disable the operator-generated anti-affinity policies by setting enablePodAntiAffinity to false .","title":"Disabling Anti-Affinity Policies"},{"location":"scheduling/#fine-grained-control-with-custom-rules","text":"For scenarios requiring more precise control, you can specify custom pod affinity or anti-affinity rules using the additionalPodAffinity and additionalPodAntiAffinity configuration attributes. These custom rules will be added to those generated by the operator, if enabled, or used directly if the operator-generated rules are disabled. Note When using additionalPodAntiAffinity or additionalPodAffinity , you must provide the full podAntiAffinity or podAffinity structure expected by the Pod specification. The following YAML example demonstrates how to configure only one instance of PostgreSQL per worker node, regardless of which PostgreSQL cluster it belongs to: additionalPodAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: postgresql operator: Exists values: [] topologyKey: \"kubernetes.io/hostname\"","title":"Fine-Grained Control with Custom Rules"},{"location":"scheduling/#node-selection-through-nodeselector","text":"Kubernetes allows nodeSelector to provide a list of labels (defined as key-value pairs) to select the nodes on which a pod can run. Specifically, the node must have each indicated key-value pair as labels for the pod to be scheduled and run. Similarly, CloudNativePG consents you to define a nodeSelector in the affinity section, so that you can request a PostgreSQL cluster to run only on nodes that have those labels.","title":"Node selection through nodeSelector"},{"location":"scheduling/#tolerations","text":"Kubernetes allows you to specify (through taints ) whether a node should repel all pods not explicitly tolerating (through tolerations ) their taints . So, by setting a proper set of tolerations for a workload matching a specific node's taints , Kubernetes scheduler will now take into consideration the tainted node, while deciding on which node to schedule the workload. Tolerations can be configured for all the pods of a Cluster through the .spec.affinity.tolerations section, which accepts the usual Kubernetes syntax for tolerations. Taints and Tolerations More information on taints and tolerations can be found in the Kubernetes documentation .","title":"Tolerations"},{"location":"scheduling/#isolating-postgresql-workloads","text":"Important Before proceeding, please ensure you have read the \"Architecture\" section of the documentation. While you can deploy PostgreSQL on Kubernetes in various ways, we recommend following these essential principles for production environments: Exploit Availability Zones: If possible, take advantage of availability zones (AZs) within the same Kubernetes cluster by distributing PostgreSQL instances across different AZs. Dedicate Worker Nodes: Allocate specific worker nodes for PostgreSQL workloads through the node-role.kubernetes.io/postgres label and taint, as detailed in the Reserving Nodes for PostgreSQL Workloads section. Avoid Node Overlap: Ensure that no instances from the same PostgreSQL cluster are running on the same node. As explained in greater detail in the previous sections, CloudNativePG provides the flexibility to configure pod anti-affinity, node selectors, and tolerations. Below is a sample configuration to ensure that a PostgreSQL Cluster is deployed on postgres nodes, with its instances distributed across different nodes: # <snip> affinity: enablePodAntiAffinity: true topologyKey: kubernetes.io/hostname podAntiAffinityType: required nodeSelector: node-role.kubernetes.io/postgres: \"\" tolerations: - key: node-role.kubernetes.io/postgres operator: Exists effect: NoSchedule # <snip> Despite its simplicity, this setup ensures optimal distribution and isolation of PostgreSQL workloads, leading to enhanced performance and reliability in your production environment.","title":"Isolating PostgreSQL workloads"},{"location":"security/","text":"Security This section contains information about security for CloudNativePG, that are analyzed at 3 different layers: Code, Container and Cluster. Warning The information contained in this page must not exonerate you from performing regular InfoSec duties on your Kubernetes cluster. Please familiarize yourself with the \"Overview of Cloud Native Security\" page from the Kubernetes documentation. About the 4C's Security Model Please refer to \"The 4C\u2019s Security Model in Kubernetes\" blog article to get a better understanding and context of the approach EDB has taken with security in CloudNativePG. Code CloudNativePG's source code undergoes systematic static analysis, including checks for security vulnerabilities, using the popular open-source linter for Go, GolangCI-Lint , directly integrated into the CI/CD pipeline. GolangCI-Lint can run multiple linters on the same source code. The following tools are used to identify security issues: Golang Security Checker ( gosec ): A linter that scans the abstract syntax tree of the source code against a set of rules designed to detect known vulnerabilities, threats, and weaknesses, such as hard-coded credentials, integer overflows, and SQL injections. GolangCI-Lint runs gosec as part of its suite. govulncheck : This tool runs in the CI/CD pipeline and reports known vulnerabilities affecting Go code or the compiler. If the operator is built with a version of the Go compiler containing a known vulnerability, govulncheck will detect it. CodeQL : Provided by GitHub, this tool scans for security issues and blocks any pull request with detected vulnerabilities. CodeQL is configured to review only Go code, excluding other languages in the repository such as Python or Bash. Snyk : Conducts nightly code scans in a scheduled job and generates weekly reports highlighting any new findings related to code security and licensing issues. The CloudNativePG repository has the \"Private vulnerability reporting\" option enabled in the Security section . This feature allows users to safely report security issues that require careful handling before being publicly disclosed. If you discover any security bug, please use this medium to report it. Important A failure in the static code analysis phase of the CI/CD pipeline will block the entire delivery process of CloudNativePG. Every commit must pass all the linters defined by GolangCI-Lint. Container Every container image in CloudNativePG is automatically built via CI/CD pipelines after every commit. These images include not only the operator's image but also the operands' images, specifically for every supported PostgreSQL version. Important All operand images are automatically and regularly rebuilt by our pipelines to incorporate the latest security updates at both the base image and package levels. This ensures that container images distributed to the community receive patch-level updates regularly. During the CI/CD process, images are scanned using the following tools: Dockle : Ensures best practices in the container build process. Snyk : Detects security issues within the container and reports findings via the GitHub interface. Image Signatures The operator and operand images are cryptographically signed using cosign , a signature tool from sigstore . This process is automated via GitHub Actions and leverages short-lived tokens issued through OpenID Connect . The token issuer is https://token.actions.githubusercontent.com , and the signing identity corresponds to a GitHub workflow executed under the cloudnative-pg repository. This workflow uses the cosign-installer action to streamline the signing process. To verify the authenticity of an operator image, use the following cosign command with the image digest: cosign verify ghcr.io/cloudnative-pg/cloudnative-pg@sha256:<DIGEST> \\ --certificate-identity-regexp=\"^https://github.com/cloudnative-pg/cloudnative-pg/\" \\ --certificate-oidc-issuer=\"https://token.actions.githubusercontent.com\" Attestations Container images include the following attestations for transparency and traceability: Software Bill of Materials (SBOM) : A comprehensive list of software artifacts included in the image or used during its build process, formatted using the in-toto SPDX predicate standard . Provenance : Metadata detailing how the image was built, following the SLSA Provenance framework. You can retrieve the SBOM for a specific image and platform using the following command: docker buildx imagetools inspect <IMAGE> \\ --format '{{ json (index .SBOM \"<PLATFORM>\").SPDX }}' This command outputs the SBOM in JSON format, providing a detailed view of the software components and build dependencies. For the provenance, use: docker buildx imagetools inspect <IMAGE> \\ --format '{{ json (index .Provenance \"<PLATFORM>\").SLSA }}' Guidelines and Frameworks for Container Security The following guidelines and frameworks have been considered for ensuring container-level security: \"Container Image Creation and Deployment Guide\" : Developed by the Defense Information Systems Agency (DISA) of the United States Department of Defense (DoD). \"CIS Benchmark for Docker\" : Developed by the Center for Internet Security (CIS). About Container-Level Security For more information on the approach that EDB has taken regarding security at the container level in CloudNativePG, please refer to the blog article \"Security and Containers in CloudNativePG\" . Cluster Security at the cluster level takes into account all Kubernetes components that form both the control plane and the nodes, as well as the applications that run in the cluster (PostgreSQL included). Role Based Access Control (RBAC) The operator interacts with the Kubernetes API server using a dedicated service account named cnpg-manager . This service account is typically installed in the operator namespace, commonly cnpg-system . However, the namespace may vary based on the deployment method (see the subsection below). In the same namespace, there is a binding between the cnpg-manager service account and a role. The specific name and type of this role (either Role or ClusterRole ) also depend on the deployment method. This role defines the necessary permissions required by the operator to function correctly. To learn more about these roles, you can use the kubectl describe clusterrole or kubectl describe role commands, depending on the deployment method. Important The above permissions are exclusively reserved for the operator's service account to interact with the Kubernetes API server. They are not directly accessible by the users of the operator that interact only with Cluster , Pooler , Backup , ScheduledBackup , Database , Publication , Subscription , ImageCatalog and ClusterImageCatalog resources. Below we provide some examples and, most importantly, the reasons why CloudNativePG requires full or partial management of standard Kubernetes namespaced or non-namespaced resources. configmaps The operator needs to create and manage default config maps for the Prometheus exporter monitoring metrics. deployments The operator needs to manage a PgBouncer connection pooler using a standard Kubernetes Deployment resource. jobs The operator needs to handle jobs to manage different Cluster 's phases. persistentvolumeclaims The volume where the PGDATA resides is the central element of a PostgreSQL Cluster resource; the operator needs to interact with the selected storage class to dynamically provision the requested volumes, based on the defined scheduling policies. pods The operator needs to manage Cluster 's instances. secrets Unless you provide certificates and passwords to your Cluster objects, the operator adopts the \"convention over configuration\" paradigm by self-provisioning random generated passwords and TLS certificates, and by storing them in secrets. serviceaccounts The operator needs to create a service account that enables the instance manager (which is the PID 1 process of the container that controls the PostgreSQL server) to safely communicate with the Kubernetes API server to coordinate actions and continuously provide a reliable status of the Cluster . services The operator needs to control network access to the PostgreSQL cluster (or the connection pooler) from applications, and properly manage failover/switchover operations in an automated way (by assigning, for example, the correct end-point of a service to the proper primary PostgreSQL instance). validatingwebhookconfigurations and mutatingwebhookconfigurations The operator injects its self-signed webhook CA into both webhook configurations, which are needed to validate and mutate all the resources it manages. For more details, please see the Kubernetes documentation . volumesnapshots The operator needs to generate VolumeSnapshots objects in order to take backups of a PostgreSQL server. VolumeSnapshots are read too in order to validate them before starting the restore process. nodes The operator needs to get the labels for Affinity and AntiAffinity so it can decide in which nodes a pod can be scheduled. This is useful, for example, to prevent the replicas from being scheduled in the same node - especially important if nodes are in different availability zones. This permission is also used to determine whether a node is scheduled, preventing the creation of pods on unscheduled nodes, or triggering a switchover if the primary lives in an unscheduled node. Deployments and ClusterRole Resources As mentioned above, each deployment method may have variations in the namespace location of the service account, as well as the names and types of role bindings and respective roles. Via Kubernetes Manifest When installing CloudNativePG using the Kubernetes manifest, permissions are set to ClusterRoleBinding by default. You can inspect the permissions required by the operator by running: kubectl describe clusterrole cnpg-manager Via OLM From a security perspective, the Operator Lifecycle Manager (OLM) provides a more flexible deployment method. It allows you to configure the operator to watch either all namespaces or specific namespaces, enabling more granular permission management. Info OLM allows you to deploy the operator in its own namespace and configure it to watch specific namespaces used for CloudNativePG clusters. This setup helps to contain permissions and restrict access more effectively. Why Are ClusterRole Permissions Needed? The operator currently requires ClusterRole permissions to read nodes and ClusterImageCatalog objects. All other permissions can be namespace-scoped (i.e., Role ) or cluster-wide (i.e., ClusterRole ). Even with these permissions, if someone gains access to the ServiceAccount , they will only have get , list , and watch permissions, which are limited to viewing resources. However, if an unauthorized user gains access to the ServiceAccount , it indicates a more significant security issue. Therefore, it's crucial to prevent users from accessing the operator's ServiceAccount and any other ServiceAccount with elevated permissions. Calls to the API server made by the instance manager The instance manager, which is the entry point of the operand container, needs to make some calls to the Kubernetes API server to ensure that the status of some resources is correctly updated and to access the config maps and secrets that are associated with that Postgres cluster. Such calls are performed through a dedicated ServiceAccount created by the operator that shares the same PostgreSQL Cluster resource name. Important The operand can only access a specific and limited subset of resources through the API server. A service account is the recommended way to access the API server from within a Pod . For transparency, the permissions associated with the service account are defined in the roles.go file. For example, to retrieve the permissions of a generic mypg cluster in the myns namespace, you can type the following command: kubectl get role -n myns mypg -o yaml Then verify that the role is bound to the service account: kubectl get rolebinding -n myns mypg -o yaml Important Remember that roles are limited to a given namespace . Below we provide a quick summary of the permissions associated with the service account for generic Kubernetes resources. configmaps The instance manager can only read config maps that are related to the same cluster, such as custom monitoring queries secrets The instance manager can only read secrets that are related to the same cluster, namely: streaming replication user, application user, super user, LDAP authentication user, client CA, server CA, server certificate, backup credentials, custom monitoring queries events The instance manager can create an event for the cluster, informing the API server about a particular aspect of the PostgreSQL instance lifecycle Here instead, we provide the same summary for resources specific to CloudNativePG. clusters The instance manager requires read-only permissions, namely get , list and watch , just for its own Cluster resource clusters/status The instance manager requires to update and patch the status of just its own Cluster resource backups The instance manager requires get and list permissions to read any Backup resource in the namespace. Additionally, it requires the delete permission to clean up the Kubernetes cluster by removing the Backup objects that do not have a counterpart in the object store - typically because of retention policies backups/status The instance manager requires to update and patch the status of any Backup resource in the namespace Pod and Container Security Contexts A Security Context defines privilege and access control settings for a pod or container. CloudNativePG does not require privileged mode for container execution. The PostgreSQL containers run as the postgres system user. No component whatsoever requires running as root . Likewise, Volume access does not require privileged mode nor root privileges. Proper permissions must be assigned by the Kubernetes platform and/or administrators. The PostgreSQL containers run with a read-only root filesystem (i.e. no writable layer). The operator manages the setting of security contexts for all pods and containers of a PostgreSQL cluster. The Seccomp Profile to be used for the PostgreSQL containers can be configured with the spec.seccompProfile section of the Cluster resource. If this section is left blank, the containers will use a seccompProfile Type of RuntimeDefault , that is, the container runtime default. The security context of PostgreSQL containers using the default seccompProfile will look like this: securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsNonRoot: true seccompProfile: type: RuntimeDefault Security Context Constraints When running in an environment that is utilizing Security Context Constraints (SCC) the operator does not explicitly set the security context of the PostgreSQL cluster pods, but rather allows the pods to inherit the restricted Security Context Constraints that are already defined. Restricting Pod access using AppArmor You can assign an AppArmor profile to the postgres , initdb , join , full-recovery and bootstrap-controller containers inside every Cluster pod through the container.apparmor.security.beta.kubernetes.io annotation. Example of cluster annotations kind: Cluster metadata: name: cluster-apparmor annotations: container.apparmor.security.beta.kubernetes.io/postgres: runtime/default container.apparmor.security.beta.kubernetes.io/initdb: runtime/default container.apparmor.security.beta.kubernetes.io/join: runtime/default Warning Using this kind of annotations can result in your cluster to stop working. If this is the case, the annotation can be safely removed from the Cluster . The AppArmor configuration must be at Kubernetes node level, meaning that the underlying operating system must have this option enable and properly configured. In case this is not the situation, and the annotations were added at the Cluster creation time, pods will not be created. On the other hand, if you add the annotations after the Cluster was created the pods in the cluster will be unable to start and you will get an error like this: metadata.annotations[container.apparmor.security.beta.kubernetes.io/postgres]: Forbidden: may not add AppArmor annotations] In such cases, please refer to your Kubernetes administrators and ask for the proper AppArmor profile to use. Network Policies The pods created by the Cluster resource can be controlled by Kubernetes network policies to enable/disable inbound and outbound network access at IP and TCP level. You can find more information in the networking document . Important The operator needs to communicate to each instance on TCP port 8000 to get information about the status of the PostgreSQL server. Please make sure you keep this in mind in case you add any network policy, and refer to the \"Exposed Ports\" section below for a list of ports used by CloudNativePG for finer control. Network policies are beyond the scope of this document. Please refer to the \"Network policies\" section of the Kubernetes documentation for further information. Exposed Ports CloudNativePG exposes ports at operator, instance manager and operand levels, as listed in the table below: System Port number Exposing Name TLS Authentication operator 9443 webhook server webhook-server Yes Yes operator 8080 metrics metrics No No instance manager 9187 metrics metrics Optional No instance manager 8000 status status Yes No operand 5432 PostgreSQL instance postgresql Optional Yes PostgreSQL The current implementation of CloudNativePG automatically creates passwords and .pgpass files for the database owner and, only if requested by setting enableSuperuserAccess to true , for the postgres superuser. Warning enableSuperuserAccess is set to false by default to improve the security-by-default posture of the operator, fostering a microservice approach where changes to PostgreSQL are performed in a declarative way through the spec of the Cluster resource, while providing developers with full powers inside the database through the database owner user. As far as password encryption is concerned, CloudNativePG follows the default behavior of PostgreSQL: starting from PostgreSQL 14, password_encryption is by default set to scram-sha-256 , while on earlier versions it is set to md5 . Important Please refer to the \"Password authentication\" section in the PostgreSQL documentation for details. Note The operator supports toggling the enableSuperuserAccess option. When you disable it on a running cluster, the operator will ignore the content of the secret, remove it (if previously generated by the operator) and set the password of the postgres user to NULL (de facto disabling remote access through password authentication). See the \"Secrets\" section in the \"Connecting from an application\" page for more information. You can use those files to configure application access to the database. By default, every replica is automatically configured to connect in physical async streaming replication with the current primary instance, with a special user called streaming_replica . The connection between nodes is encrypted and authentication is via TLS client certificates (please refer to the \"Client TLS/SSL Connections\" page for details). By default, the operator requires TLS v1.3 connections. Currently, the operator allows administrators to add pg_hba.conf lines directly in the manifest as part of the pg_hba section of the postgresql configuration. The lines defined in the manifest are added to a default pg_hba.conf . For further detail on how pg_hba.conf is managed by the operator, see the \"PostgreSQL Configuration\" page of the documentation. The administrator can also customize the content of the pg_ident.conf file that by default only maps the local postgres user to the postgres user in the database. For further detail on how pg_ident.conf is managed by the operator, see the \"PostgreSQL Configuration\" page of the documentation. Important Examples assume that the Kubernetes cluster runs in a private and secure network. Storage CloudNativePG delegates encryption at rest to the underlying storage class. For data protection in production environments, we highly recommend that you choose a storage class that supports encryption at rest.","title":"Security"},{"location":"security/#security","text":"This section contains information about security for CloudNativePG, that are analyzed at 3 different layers: Code, Container and Cluster. Warning The information contained in this page must not exonerate you from performing regular InfoSec duties on your Kubernetes cluster. Please familiarize yourself with the \"Overview of Cloud Native Security\" page from the Kubernetes documentation. About the 4C's Security Model Please refer to \"The 4C\u2019s Security Model in Kubernetes\" blog article to get a better understanding and context of the approach EDB has taken with security in CloudNativePG.","title":"Security"},{"location":"security/#code","text":"CloudNativePG's source code undergoes systematic static analysis, including checks for security vulnerabilities, using the popular open-source linter for Go, GolangCI-Lint , directly integrated into the CI/CD pipeline. GolangCI-Lint can run multiple linters on the same source code. The following tools are used to identify security issues: Golang Security Checker ( gosec ): A linter that scans the abstract syntax tree of the source code against a set of rules designed to detect known vulnerabilities, threats, and weaknesses, such as hard-coded credentials, integer overflows, and SQL injections. GolangCI-Lint runs gosec as part of its suite. govulncheck : This tool runs in the CI/CD pipeline and reports known vulnerabilities affecting Go code or the compiler. If the operator is built with a version of the Go compiler containing a known vulnerability, govulncheck will detect it. CodeQL : Provided by GitHub, this tool scans for security issues and blocks any pull request with detected vulnerabilities. CodeQL is configured to review only Go code, excluding other languages in the repository such as Python or Bash. Snyk : Conducts nightly code scans in a scheduled job and generates weekly reports highlighting any new findings related to code security and licensing issues. The CloudNativePG repository has the \"Private vulnerability reporting\" option enabled in the Security section . This feature allows users to safely report security issues that require careful handling before being publicly disclosed. If you discover any security bug, please use this medium to report it. Important A failure in the static code analysis phase of the CI/CD pipeline will block the entire delivery process of CloudNativePG. Every commit must pass all the linters defined by GolangCI-Lint.","title":"Code"},{"location":"security/#container","text":"Every container image in CloudNativePG is automatically built via CI/CD pipelines after every commit. These images include not only the operator's image but also the operands' images, specifically for every supported PostgreSQL version. Important All operand images are automatically and regularly rebuilt by our pipelines to incorporate the latest security updates at both the base image and package levels. This ensures that container images distributed to the community receive patch-level updates regularly. During the CI/CD process, images are scanned using the following tools: Dockle : Ensures best practices in the container build process. Snyk : Detects security issues within the container and reports findings via the GitHub interface.","title":"Container"},{"location":"security/#image-signatures","text":"The operator and operand images are cryptographically signed using cosign , a signature tool from sigstore . This process is automated via GitHub Actions and leverages short-lived tokens issued through OpenID Connect . The token issuer is https://token.actions.githubusercontent.com , and the signing identity corresponds to a GitHub workflow executed under the cloudnative-pg repository. This workflow uses the cosign-installer action to streamline the signing process. To verify the authenticity of an operator image, use the following cosign command with the image digest: cosign verify ghcr.io/cloudnative-pg/cloudnative-pg@sha256:<DIGEST> \\ --certificate-identity-regexp=\"^https://github.com/cloudnative-pg/cloudnative-pg/\" \\ --certificate-oidc-issuer=\"https://token.actions.githubusercontent.com\"","title":"Image Signatures"},{"location":"security/#attestations","text":"Container images include the following attestations for transparency and traceability: Software Bill of Materials (SBOM) : A comprehensive list of software artifacts included in the image or used during its build process, formatted using the in-toto SPDX predicate standard . Provenance : Metadata detailing how the image was built, following the SLSA Provenance framework. You can retrieve the SBOM for a specific image and platform using the following command: docker buildx imagetools inspect <IMAGE> \\ --format '{{ json (index .SBOM \"<PLATFORM>\").SPDX }}' This command outputs the SBOM in JSON format, providing a detailed view of the software components and build dependencies. For the provenance, use: docker buildx imagetools inspect <IMAGE> \\ --format '{{ json (index .Provenance \"<PLATFORM>\").SLSA }}'","title":"Attestations"},{"location":"security/#guidelines-and-frameworks-for-container-security","text":"The following guidelines and frameworks have been considered for ensuring container-level security: \"Container Image Creation and Deployment Guide\" : Developed by the Defense Information Systems Agency (DISA) of the United States Department of Defense (DoD). \"CIS Benchmark for Docker\" : Developed by the Center for Internet Security (CIS). About Container-Level Security For more information on the approach that EDB has taken regarding security at the container level in CloudNativePG, please refer to the blog article \"Security and Containers in CloudNativePG\" .","title":"Guidelines and Frameworks for Container Security"},{"location":"security/#cluster","text":"Security at the cluster level takes into account all Kubernetes components that form both the control plane and the nodes, as well as the applications that run in the cluster (PostgreSQL included).","title":"Cluster"},{"location":"security/#role-based-access-control-rbac","text":"The operator interacts with the Kubernetes API server using a dedicated service account named cnpg-manager . This service account is typically installed in the operator namespace, commonly cnpg-system . However, the namespace may vary based on the deployment method (see the subsection below). In the same namespace, there is a binding between the cnpg-manager service account and a role. The specific name and type of this role (either Role or ClusterRole ) also depend on the deployment method. This role defines the necessary permissions required by the operator to function correctly. To learn more about these roles, you can use the kubectl describe clusterrole or kubectl describe role commands, depending on the deployment method. Important The above permissions are exclusively reserved for the operator's service account to interact with the Kubernetes API server. They are not directly accessible by the users of the operator that interact only with Cluster , Pooler , Backup , ScheduledBackup , Database , Publication , Subscription , ImageCatalog and ClusterImageCatalog resources. Below we provide some examples and, most importantly, the reasons why CloudNativePG requires full or partial management of standard Kubernetes namespaced or non-namespaced resources. configmaps The operator needs to create and manage default config maps for the Prometheus exporter monitoring metrics. deployments The operator needs to manage a PgBouncer connection pooler using a standard Kubernetes Deployment resource. jobs The operator needs to handle jobs to manage different Cluster 's phases. persistentvolumeclaims The volume where the PGDATA resides is the central element of a PostgreSQL Cluster resource; the operator needs to interact with the selected storage class to dynamically provision the requested volumes, based on the defined scheduling policies. pods The operator needs to manage Cluster 's instances. secrets Unless you provide certificates and passwords to your Cluster objects, the operator adopts the \"convention over configuration\" paradigm by self-provisioning random generated passwords and TLS certificates, and by storing them in secrets. serviceaccounts The operator needs to create a service account that enables the instance manager (which is the PID 1 process of the container that controls the PostgreSQL server) to safely communicate with the Kubernetes API server to coordinate actions and continuously provide a reliable status of the Cluster . services The operator needs to control network access to the PostgreSQL cluster (or the connection pooler) from applications, and properly manage failover/switchover operations in an automated way (by assigning, for example, the correct end-point of a service to the proper primary PostgreSQL instance). validatingwebhookconfigurations and mutatingwebhookconfigurations The operator injects its self-signed webhook CA into both webhook configurations, which are needed to validate and mutate all the resources it manages. For more details, please see the Kubernetes documentation . volumesnapshots The operator needs to generate VolumeSnapshots objects in order to take backups of a PostgreSQL server. VolumeSnapshots are read too in order to validate them before starting the restore process. nodes The operator needs to get the labels for Affinity and AntiAffinity so it can decide in which nodes a pod can be scheduled. This is useful, for example, to prevent the replicas from being scheduled in the same node - especially important if nodes are in different availability zones. This permission is also used to determine whether a node is scheduled, preventing the creation of pods on unscheduled nodes, or triggering a switchover if the primary lives in an unscheduled node.","title":"Role Based Access Control (RBAC)"},{"location":"security/#deployments-and-clusterrole-resources","text":"As mentioned above, each deployment method may have variations in the namespace location of the service account, as well as the names and types of role bindings and respective roles.","title":"Deployments and ClusterRole Resources"},{"location":"security/#via-kubernetes-manifest","text":"When installing CloudNativePG using the Kubernetes manifest, permissions are set to ClusterRoleBinding by default. You can inspect the permissions required by the operator by running: kubectl describe clusterrole cnpg-manager","title":"Via Kubernetes Manifest"},{"location":"security/#via-olm","text":"From a security perspective, the Operator Lifecycle Manager (OLM) provides a more flexible deployment method. It allows you to configure the operator to watch either all namespaces or specific namespaces, enabling more granular permission management. Info OLM allows you to deploy the operator in its own namespace and configure it to watch specific namespaces used for CloudNativePG clusters. This setup helps to contain permissions and restrict access more effectively.","title":"Via OLM"},{"location":"security/#why-are-clusterrole-permissions-needed","text":"The operator currently requires ClusterRole permissions to read nodes and ClusterImageCatalog objects. All other permissions can be namespace-scoped (i.e., Role ) or cluster-wide (i.e., ClusterRole ). Even with these permissions, if someone gains access to the ServiceAccount , they will only have get , list , and watch permissions, which are limited to viewing resources. However, if an unauthorized user gains access to the ServiceAccount , it indicates a more significant security issue. Therefore, it's crucial to prevent users from accessing the operator's ServiceAccount and any other ServiceAccount with elevated permissions.","title":"Why Are ClusterRole Permissions Needed?"},{"location":"security/#calls-to-the-api-server-made-by-the-instance-manager","text":"The instance manager, which is the entry point of the operand container, needs to make some calls to the Kubernetes API server to ensure that the status of some resources is correctly updated and to access the config maps and secrets that are associated with that Postgres cluster. Such calls are performed through a dedicated ServiceAccount created by the operator that shares the same PostgreSQL Cluster resource name. Important The operand can only access a specific and limited subset of resources through the API server. A service account is the recommended way to access the API server from within a Pod . For transparency, the permissions associated with the service account are defined in the roles.go file. For example, to retrieve the permissions of a generic mypg cluster in the myns namespace, you can type the following command: kubectl get role -n myns mypg -o yaml Then verify that the role is bound to the service account: kubectl get rolebinding -n myns mypg -o yaml Important Remember that roles are limited to a given namespace . Below we provide a quick summary of the permissions associated with the service account for generic Kubernetes resources. configmaps The instance manager can only read config maps that are related to the same cluster, such as custom monitoring queries secrets The instance manager can only read secrets that are related to the same cluster, namely: streaming replication user, application user, super user, LDAP authentication user, client CA, server CA, server certificate, backup credentials, custom monitoring queries events The instance manager can create an event for the cluster, informing the API server about a particular aspect of the PostgreSQL instance lifecycle Here instead, we provide the same summary for resources specific to CloudNativePG. clusters The instance manager requires read-only permissions, namely get , list and watch , just for its own Cluster resource clusters/status The instance manager requires to update and patch the status of just its own Cluster resource backups The instance manager requires get and list permissions to read any Backup resource in the namespace. Additionally, it requires the delete permission to clean up the Kubernetes cluster by removing the Backup objects that do not have a counterpart in the object store - typically because of retention policies backups/status The instance manager requires to update and patch the status of any Backup resource in the namespace","title":"Calls to the API server made by the instance manager"},{"location":"security/#pod-and-container-security-contexts","text":"A Security Context defines privilege and access control settings for a pod or container. CloudNativePG does not require privileged mode for container execution. The PostgreSQL containers run as the postgres system user. No component whatsoever requires running as root . Likewise, Volume access does not require privileged mode nor root privileges. Proper permissions must be assigned by the Kubernetes platform and/or administrators. The PostgreSQL containers run with a read-only root filesystem (i.e. no writable layer). The operator manages the setting of security contexts for all pods and containers of a PostgreSQL cluster. The Seccomp Profile to be used for the PostgreSQL containers can be configured with the spec.seccompProfile section of the Cluster resource. If this section is left blank, the containers will use a seccompProfile Type of RuntimeDefault , that is, the container runtime default. The security context of PostgreSQL containers using the default seccompProfile will look like this: securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsNonRoot: true seccompProfile: type: RuntimeDefault","title":"Pod and Container Security Contexts"},{"location":"security/#security-context-constraints","text":"When running in an environment that is utilizing Security Context Constraints (SCC) the operator does not explicitly set the security context of the PostgreSQL cluster pods, but rather allows the pods to inherit the restricted Security Context Constraints that are already defined.","title":"Security Context Constraints"},{"location":"security/#restricting-pod-access-using-apparmor","text":"You can assign an AppArmor profile to the postgres , initdb , join , full-recovery and bootstrap-controller containers inside every Cluster pod through the container.apparmor.security.beta.kubernetes.io annotation. Example of cluster annotations kind: Cluster metadata: name: cluster-apparmor annotations: container.apparmor.security.beta.kubernetes.io/postgres: runtime/default container.apparmor.security.beta.kubernetes.io/initdb: runtime/default container.apparmor.security.beta.kubernetes.io/join: runtime/default Warning Using this kind of annotations can result in your cluster to stop working. If this is the case, the annotation can be safely removed from the Cluster . The AppArmor configuration must be at Kubernetes node level, meaning that the underlying operating system must have this option enable and properly configured. In case this is not the situation, and the annotations were added at the Cluster creation time, pods will not be created. On the other hand, if you add the annotations after the Cluster was created the pods in the cluster will be unable to start and you will get an error like this: metadata.annotations[container.apparmor.security.beta.kubernetes.io/postgres]: Forbidden: may not add AppArmor annotations] In such cases, please refer to your Kubernetes administrators and ask for the proper AppArmor profile to use.","title":"Restricting Pod access using AppArmor"},{"location":"security/#network-policies","text":"The pods created by the Cluster resource can be controlled by Kubernetes network policies to enable/disable inbound and outbound network access at IP and TCP level. You can find more information in the networking document . Important The operator needs to communicate to each instance on TCP port 8000 to get information about the status of the PostgreSQL server. Please make sure you keep this in mind in case you add any network policy, and refer to the \"Exposed Ports\" section below for a list of ports used by CloudNativePG for finer control. Network policies are beyond the scope of this document. Please refer to the \"Network policies\" section of the Kubernetes documentation for further information.","title":"Network Policies"},{"location":"security/#exposed-ports","text":"CloudNativePG exposes ports at operator, instance manager and operand levels, as listed in the table below: System Port number Exposing Name TLS Authentication operator 9443 webhook server webhook-server Yes Yes operator 8080 metrics metrics No No instance manager 9187 metrics metrics Optional No instance manager 8000 status status Yes No operand 5432 PostgreSQL instance postgresql Optional Yes","title":"Exposed Ports"},{"location":"security/#postgresql","text":"The current implementation of CloudNativePG automatically creates passwords and .pgpass files for the database owner and, only if requested by setting enableSuperuserAccess to true , for the postgres superuser. Warning enableSuperuserAccess is set to false by default to improve the security-by-default posture of the operator, fostering a microservice approach where changes to PostgreSQL are performed in a declarative way through the spec of the Cluster resource, while providing developers with full powers inside the database through the database owner user. As far as password encryption is concerned, CloudNativePG follows the default behavior of PostgreSQL: starting from PostgreSQL 14, password_encryption is by default set to scram-sha-256 , while on earlier versions it is set to md5 . Important Please refer to the \"Password authentication\" section in the PostgreSQL documentation for details. Note The operator supports toggling the enableSuperuserAccess option. When you disable it on a running cluster, the operator will ignore the content of the secret, remove it (if previously generated by the operator) and set the password of the postgres user to NULL (de facto disabling remote access through password authentication). See the \"Secrets\" section in the \"Connecting from an application\" page for more information. You can use those files to configure application access to the database. By default, every replica is automatically configured to connect in physical async streaming replication with the current primary instance, with a special user called streaming_replica . The connection between nodes is encrypted and authentication is via TLS client certificates (please refer to the \"Client TLS/SSL Connections\" page for details). By default, the operator requires TLS v1.3 connections. Currently, the operator allows administrators to add pg_hba.conf lines directly in the manifest as part of the pg_hba section of the postgresql configuration. The lines defined in the manifest are added to a default pg_hba.conf . For further detail on how pg_hba.conf is managed by the operator, see the \"PostgreSQL Configuration\" page of the documentation. The administrator can also customize the content of the pg_ident.conf file that by default only maps the local postgres user to the postgres user in the database. For further detail on how pg_ident.conf is managed by the operator, see the \"PostgreSQL Configuration\" page of the documentation. Important Examples assume that the Kubernetes cluster runs in a private and secure network.","title":"PostgreSQL"},{"location":"security/#storage","text":"CloudNativePG delegates encryption at rest to the underlying storage class. For data protection in production environments, we highly recommend that you choose a storage class that supports encryption at rest.","title":"Storage"},{"location":"service_management/","text":"Service Management A PostgreSQL cluster should only be accessed via standard Kubernetes network services directly managed by CloudNativePG. For more details, refer to the \"Service\" page of the Kubernetes Documentation . CloudNativePG defines three types of services for each Cluster resource: rw : Points to the primary instance of the cluster (read/write). ro : Points to the replicas, where available (read-only). r : Points to any PostgreSQL instance in the cluster (read). By default, CloudNativePG creates all the above services for a Cluster resource, with the following conventions: The name of the service follows this format: <CLUSTER_NAME>-<SERVICE_NAME> . All services are of type ClusterIP . Important Default service names are reserved for CloudNativePG usage. While this setup covers most use cases for accessing PostgreSQL within the same Kubernetes cluster, CloudNativePG offers flexibility to: Disable the creation of the ro and/or r default services. Define your own services using the standard Service API provided by Kubernetes. You can mix these two options. A common scenario arises when using CloudNativePG in database-as-a-service (DBaaS) contexts, where access to the database from outside the Kubernetes cluster is required. In such cases, you can create your own service of type LoadBalancer , if available in your Kubernetes environment. Disabling Default Services You can disable any or all of the ro and r default services through the managed.services.disabledDefaultServices option . Important The rw service is essential and cannot be disabled because CloudNativePG relies on it to ensure PostgreSQL replication. For example, if you want to remove both the ro (read-only) and r (read) services, you can use this configuration: # <snip> managed: services: disabledDefaultServices: [\"ro\", \"r\"] Adding Your Own Services Important When defining your own services, you cannot use any of the default reserved service names that follow the convention <CLUSTER_NAME>-<SERVICE_NAME> . It is your responsibility to pick a unique name for the service in the Kubernetes namespace. You can define a list of additional services through the managed.services.additional stanza by specifying the service type (e.g., rw ) in the selectorType field and optionally the updateStrategy . The serviceTemplate field gives you access to the standard Kubernetes API for the network Service resource, allowing you to define both the metadata and the spec sections as you like. You must provide a name to the service and avoid defining the selector field, as it is managed by the operator. Warning Service templates give you unlimited possibilities in terms of configuring network access to your PostgreSQL database. This translates into greater responsibility on your end to ensure that services work as expected. CloudNativePG has no control over the service configuration, except honoring the selector. The updateStrategy field allows you to control how the operator updates a service definition. By default, the operator uses the patch strategy, applying changes directly to the service. Alternatively, the replace strategy deletes the existing service and recreates it from the template. Warning The replace strategy will cause a service disruption with every change. However, it may be necessary for modifying certain parameters that can only be set during service creation. For example, if you want to have a single LoadBalancer service for your PostgreSQL database primary, you can use the following excerpt: # <snip> managed: services: additional: - selectorType: rw serviceTemplate: metadata: name: \"mydb-lb\" labels: test-label: \"true\" annotations: test-annotation: \"true\" spec: type: LoadBalancer The above example also shows how to set metadata such as annotations and labels for the created service. About Exposing Postgres Services There are primarily three use cases for exposing your PostgreSQL service outside your Kubernetes cluster: Temporarily, for testing. Permanently, for DBaaS purposes . Prolonged period/permanently, for legacy applications that cannot be easily or sustainably containerized and need to reside in a virtual machine or physical machine outside Kubernetes. This use case is very similar to DBaaS. Be aware that allowing access to a database from the public network could expose your database to potential attacks from malicious users. Warning Ensure you secure your database before granting external access, or make sure your Kubernetes cluster is only reachable from a private network.","title":"Service Management"},{"location":"service_management/#service-management","text":"A PostgreSQL cluster should only be accessed via standard Kubernetes network services directly managed by CloudNativePG. For more details, refer to the \"Service\" page of the Kubernetes Documentation . CloudNativePG defines three types of services for each Cluster resource: rw : Points to the primary instance of the cluster (read/write). ro : Points to the replicas, where available (read-only). r : Points to any PostgreSQL instance in the cluster (read). By default, CloudNativePG creates all the above services for a Cluster resource, with the following conventions: The name of the service follows this format: <CLUSTER_NAME>-<SERVICE_NAME> . All services are of type ClusterIP . Important Default service names are reserved for CloudNativePG usage. While this setup covers most use cases for accessing PostgreSQL within the same Kubernetes cluster, CloudNativePG offers flexibility to: Disable the creation of the ro and/or r default services. Define your own services using the standard Service API provided by Kubernetes. You can mix these two options. A common scenario arises when using CloudNativePG in database-as-a-service (DBaaS) contexts, where access to the database from outside the Kubernetes cluster is required. In such cases, you can create your own service of type LoadBalancer , if available in your Kubernetes environment.","title":"Service Management"},{"location":"service_management/#disabling-default-services","text":"You can disable any or all of the ro and r default services through the managed.services.disabledDefaultServices option . Important The rw service is essential and cannot be disabled because CloudNativePG relies on it to ensure PostgreSQL replication. For example, if you want to remove both the ro (read-only) and r (read) services, you can use this configuration: # <snip> managed: services: disabledDefaultServices: [\"ro\", \"r\"]","title":"Disabling Default Services"},{"location":"service_management/#adding-your-own-services","text":"Important When defining your own services, you cannot use any of the default reserved service names that follow the convention <CLUSTER_NAME>-<SERVICE_NAME> . It is your responsibility to pick a unique name for the service in the Kubernetes namespace. You can define a list of additional services through the managed.services.additional stanza by specifying the service type (e.g., rw ) in the selectorType field and optionally the updateStrategy . The serviceTemplate field gives you access to the standard Kubernetes API for the network Service resource, allowing you to define both the metadata and the spec sections as you like. You must provide a name to the service and avoid defining the selector field, as it is managed by the operator. Warning Service templates give you unlimited possibilities in terms of configuring network access to your PostgreSQL database. This translates into greater responsibility on your end to ensure that services work as expected. CloudNativePG has no control over the service configuration, except honoring the selector. The updateStrategy field allows you to control how the operator updates a service definition. By default, the operator uses the patch strategy, applying changes directly to the service. Alternatively, the replace strategy deletes the existing service and recreates it from the template. Warning The replace strategy will cause a service disruption with every change. However, it may be necessary for modifying certain parameters that can only be set during service creation. For example, if you want to have a single LoadBalancer service for your PostgreSQL database primary, you can use the following excerpt: # <snip> managed: services: additional: - selectorType: rw serviceTemplate: metadata: name: \"mydb-lb\" labels: test-label: \"true\" annotations: test-annotation: \"true\" spec: type: LoadBalancer The above example also shows how to set metadata such as annotations and labels for the created service.","title":"Adding Your Own Services"},{"location":"service_management/#about-exposing-postgres-services","text":"There are primarily three use cases for exposing your PostgreSQL service outside your Kubernetes cluster: Temporarily, for testing. Permanently, for DBaaS purposes . Prolonged period/permanently, for legacy applications that cannot be easily or sustainably containerized and need to reside in a virtual machine or physical machine outside Kubernetes. This use case is very similar to DBaaS. Be aware that allowing access to a database from the public network could expose your database to potential attacks from malicious users. Warning Ensure you secure your database before granting external access, or make sure your Kubernetes cluster is only reachable from a private network.","title":"About Exposing Postgres Services"},{"location":"ssl_connections/","text":"Client TLS/SSL connections Certificates See Certificates for more details on how CloudNativePG supports TLS certificates. The CloudNativePG operator was designed to work with TLS/SSL for both encryption in transit and authentication on the server and client sides. Clusters created using the CNPG operator come with a certification authority (CA) to create and sign TLS client certificates. Using the cnpg plugin for kubectl, you can issue a new TLS client certificate for authenticating a user instead of using passwords. These instructions for authenticating using TLS/SSL certificates assume you installed a cluster using the cluster-example-pg-hba.yaml manifest. According to the convention-over-configuration paradigm, that file creates an app database that's owned by a user called app. (You can change this convention by way of the initdb configuration in the bootstrap section.) Issuing a new certificate About CNPG plugin for kubectl See the Certificates in the CloudNativePG plugin content for details on how to use the plugin for kubectl. You can create a certificate for the app user in the cluster-example PostgreSQL cluster as follows: kubectl cnpg certificate cluster-app \\ --cnpg-cluster cluster-example \\ --cnpg-user app You can now verify the certificate: kubectl get secret cluster-app \\ -o jsonpath=\"{.data['tls\\.crt']}\" \\ | base64 -d | openssl x509 -text -noout \\ | head -n 11 Output: Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e1:72:8a:39:9f:ce:51:19:9d:21:ff:1e:4b:24:5d Signature Algorithm: ecdsa-with-SHA256 Issuer: OU = default, CN = cluster-example Validity Not Before: Mar 22 10:22:14 2021 GMT Not After : Mar 22 10:22:14 2022 GMT Subject: CN = app As you can see, TLS client certificates by default are created with 90 days of validity, and with a simple CN that corresponds to the username in PostgreSQL. You can specify the validity and threshold values using the EXPIRE_CHECK_THRESHOLD and CERTIFICATE_DURATION parameters. This is necessary to leverage the cert authentication method for hostssl entries in pg_hba.conf . Testing the connection via a TLS certificate Next, test this client certificate by configuring a demo client application that connects to your CloudNativePG cluster. The following manifest, called cert-test.yaml , creates a demo pod with a test application in the same namespace where your database cluster is running: apiVersion: apps/v1 kind: Deployment metadata: name: cert-test spec: replicas: 1 selector: matchLabels: app: webtest template: metadata: labels: app: webtest spec: containers: - image: ghcr.io/cloudnative-pg/webtest:1.7.0 name: cert-test volumeMounts: - name: secret-volume-root-ca mountPath: /etc/secrets/ca - name: secret-volume-app mountPath: /etc/secrets/app ports: - containerPort: 8080 env: - name: DATABASE_URL value: > sslkey=/etc/secrets/app/tls.key sslcert=/etc/secrets/app/tls.crt sslrootcert=/etc/secrets/ca/ca.crt host=cluster-example-rw.default.svc dbname=app user=app sslmode=verify-full - name: SQL_QUERY value: SELECT 1 readinessProbe: httpGet: port: 8080 path: /tx volumes: - name: secret-volume-root-ca secret: secretName: cluster-example-ca defaultMode: 0600 - name: secret-volume-app secret: secretName: cluster-app defaultMode: 0600 This pod mounts secrets managed by the CloudNativePG operator, including: sslcert \u2013 The TLS client public certificate. sslkey \u2013 The TLS client certificate private key. sslrootcert \u2013 The TLS CA certificate that signed the certificate on the server to use to verify the identity of the instances. They're used to create the default resources that psql (and other libpq-based applications, like pgbench) requires to establish a TLS-encrypted connection to the Postgres database. By default, psql searches for certificates in the ~/.postgresql directory of the current user, but you can use the sslkey , sslcert , and sslrootcert options to point libpq to the actual location of the cryptographic material. The content of these files is gathered from the secrets that were previously created by using the cnpg plugin for kubectl. Deploy the application: kubectl create -f cert-test.yaml Then use the created pod as the PostgreSQL client to validate the SSL connection and authentication using the TLS certificates you just created. A readiness probe was configured to ensure that the application is ready when the database server can be reached. You can verify that the connection works. To do so, execute an interactive bash inside the pod's container to run psql using the necessary options. The PostgreSQL server is exposed through the read-write Kubernetes service. Point the psql command to connect to this service: kubectl exec -it cert-test -- bash -c \"psql 'sslkey=/etc/secrets/app/tls.key sslcert=/etc/secrets/app/tls.crt sslrootcert=/etc/secrets/ca/ca.crt host=cluster-example-rw.default.svc dbname=app user=app sslmode=verify-full' -c 'select version();'\" Output: version -------------------------------------------------------------------------------------- ------------------ PostgreSQL 17.5 on x86_64-pc-linux-gnu, compiled by gcc (GCC) 8.3.1 20191121 (Red Hat 8.3.1-5), 64-bit (1 row) About TLS protocol versions By default, the operator sets both ssl_min_protocol_version and ssl_max_protocol_version to TLSv1.3 . This assumes that the PostgreSQL operand images include an OpenSSL library that supports the TLSv1.3 version. If not, or if your client applications need a lower version number, you need to manually configure it in the PostgreSQL configuration as any other Postgres GUC.","title":"Client TLS/SSL connections"},{"location":"ssl_connections/#client-tlsssl-connections","text":"Certificates See Certificates for more details on how CloudNativePG supports TLS certificates. The CloudNativePG operator was designed to work with TLS/SSL for both encryption in transit and authentication on the server and client sides. Clusters created using the CNPG operator come with a certification authority (CA) to create and sign TLS client certificates. Using the cnpg plugin for kubectl, you can issue a new TLS client certificate for authenticating a user instead of using passwords. These instructions for authenticating using TLS/SSL certificates assume you installed a cluster using the cluster-example-pg-hba.yaml manifest. According to the convention-over-configuration paradigm, that file creates an app database that's owned by a user called app. (You can change this convention by way of the initdb configuration in the bootstrap section.)","title":"Client TLS/SSL connections"},{"location":"ssl_connections/#issuing-a-new-certificate","text":"About CNPG plugin for kubectl See the Certificates in the CloudNativePG plugin content for details on how to use the plugin for kubectl. You can create a certificate for the app user in the cluster-example PostgreSQL cluster as follows: kubectl cnpg certificate cluster-app \\ --cnpg-cluster cluster-example \\ --cnpg-user app You can now verify the certificate: kubectl get secret cluster-app \\ -o jsonpath=\"{.data['tls\\.crt']}\" \\ | base64 -d | openssl x509 -text -noout \\ | head -n 11 Output: Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e1:72:8a:39:9f:ce:51:19:9d:21:ff:1e:4b:24:5d Signature Algorithm: ecdsa-with-SHA256 Issuer: OU = default, CN = cluster-example Validity Not Before: Mar 22 10:22:14 2021 GMT Not After : Mar 22 10:22:14 2022 GMT Subject: CN = app As you can see, TLS client certificates by default are created with 90 days of validity, and with a simple CN that corresponds to the username in PostgreSQL. You can specify the validity and threshold values using the EXPIRE_CHECK_THRESHOLD and CERTIFICATE_DURATION parameters. This is necessary to leverage the cert authentication method for hostssl entries in pg_hba.conf .","title":"Issuing a new certificate"},{"location":"ssl_connections/#testing-the-connection-via-a-tls-certificate","text":"Next, test this client certificate by configuring a demo client application that connects to your CloudNativePG cluster. The following manifest, called cert-test.yaml , creates a demo pod with a test application in the same namespace where your database cluster is running: apiVersion: apps/v1 kind: Deployment metadata: name: cert-test spec: replicas: 1 selector: matchLabels: app: webtest template: metadata: labels: app: webtest spec: containers: - image: ghcr.io/cloudnative-pg/webtest:1.7.0 name: cert-test volumeMounts: - name: secret-volume-root-ca mountPath: /etc/secrets/ca - name: secret-volume-app mountPath: /etc/secrets/app ports: - containerPort: 8080 env: - name: DATABASE_URL value: > sslkey=/etc/secrets/app/tls.key sslcert=/etc/secrets/app/tls.crt sslrootcert=/etc/secrets/ca/ca.crt host=cluster-example-rw.default.svc dbname=app user=app sslmode=verify-full - name: SQL_QUERY value: SELECT 1 readinessProbe: httpGet: port: 8080 path: /tx volumes: - name: secret-volume-root-ca secret: secretName: cluster-example-ca defaultMode: 0600 - name: secret-volume-app secret: secretName: cluster-app defaultMode: 0600 This pod mounts secrets managed by the CloudNativePG operator, including: sslcert \u2013 The TLS client public certificate. sslkey \u2013 The TLS client certificate private key. sslrootcert \u2013 The TLS CA certificate that signed the certificate on the server to use to verify the identity of the instances. They're used to create the default resources that psql (and other libpq-based applications, like pgbench) requires to establish a TLS-encrypted connection to the Postgres database. By default, psql searches for certificates in the ~/.postgresql directory of the current user, but you can use the sslkey , sslcert , and sslrootcert options to point libpq to the actual location of the cryptographic material. The content of these files is gathered from the secrets that were previously created by using the cnpg plugin for kubectl. Deploy the application: kubectl create -f cert-test.yaml Then use the created pod as the PostgreSQL client to validate the SSL connection and authentication using the TLS certificates you just created. A readiness probe was configured to ensure that the application is ready when the database server can be reached. You can verify that the connection works. To do so, execute an interactive bash inside the pod's container to run psql using the necessary options. The PostgreSQL server is exposed through the read-write Kubernetes service. Point the psql command to connect to this service: kubectl exec -it cert-test -- bash -c \"psql 'sslkey=/etc/secrets/app/tls.key sslcert=/etc/secrets/app/tls.crt sslrootcert=/etc/secrets/ca/ca.crt host=cluster-example-rw.default.svc dbname=app user=app sslmode=verify-full' -c 'select version();'\" Output: version -------------------------------------------------------------------------------------- ------------------ PostgreSQL 17.5 on x86_64-pc-linux-gnu, compiled by gcc (GCC) 8.3.1 20191121 (Red Hat 8.3.1-5), 64-bit (1 row)","title":"Testing the connection via a TLS certificate"},{"location":"ssl_connections/#about-tls-protocol-versions","text":"By default, the operator sets both ssl_min_protocol_version and ssl_max_protocol_version to TLSv1.3 . This assumes that the PostgreSQL operand images include an OpenSSL library that supports the TLSv1.3 version. If not, or if your client applications need a lower version number, you need to manually configure it in the PostgreSQL configuration as any other Postgres GUC.","title":"About TLS protocol versions"},{"location":"storage/","text":"Storage Storage is the most critical component in a database workload. Storage must always be available, scale, perform well, and guarantee consistency and durability. The same expectations and requirements that apply to traditional environments, such as virtual machines and bare metal, are also valid in container contexts managed by Kubernetes. Important When it comes to dynamically provisioned storage, Kubernetes has its own specifics. These include storage classes , persistent volumes , and Persistent Volume Claims (PVCs) . You need to own these concepts, on top of all the valuable knowledge you've built over the years in terms of storage for database workloads on VMs and physical servers. There are two primary methods of access to storage: Network \u2013 Either directly or indirectly. (Think of an NFS volume locally mounted on a host running Kubernetes.) Local \u2013 Directly attached to the node where a pod is running. This also includes directly attached disks on bare metal installations of Kubernetes. Network storage, which is the most common usage pattern in Kubernetes, presents the same issues of throughput and latency that you can experience in a traditional environment. These issues can be accentuated in a shared environment, where I/O contention with several applications increases the variability of performance results. Local storage enables shared-nothing architectures, which is more suitable for high transactional and very large database (VLDB) workloads, as it guarantees higher and more predictable performance. Warning Before you deploy a PostgreSQL cluster with CloudNativePG, ensure that the storage you're using is recommended for database workloads. We recommend clearly setting performance expectations by first benchmarking the storage using tools such as fio and then the database using pgbench . Info CloudNativePG doesn't use StatefulSet for managing data persistence. Rather, it manages PVCs directly. If you want to know more, see Custom pod controller . Backup and recovery Since CloudNativePG supports volume snapshots for both backup and recovery, we recommend that you also consider this aspect when you choose your storage solution, especially if you manage very large databases. Important See the Kubernetes documentation for a list of all the supported container storage interface (CSI) drivers that provide snapshot capabilities. Benchmarking CloudNativePG Before deploying the database in production, we recommend that you benchmark CloudNativePG in a controlled Kubernetes environment. Follow the guidelines in Benchmarking . Briefly, we recommend operating at two levels: Measuring the performance of the underlying storage using fio, with relevant metrics for database workloads such as throughput for sequential reads, sequential writes, random reads, and random writes Measuring the performance of the database using pgbench, the default benchmarking tool distributed with PostgreSQL Important You must measure both the storage and database performance before putting the database into production. These results are extremely valuable not just in the planning phase (for example, capacity planning). They are also valuable in the production lifecycle, particularly in emergency situations when you don't have time to run this kind of test. Databases change and evolve over time, and so does the distribution of data, potentially affecting performance. Knowing the theoretical maximum throughput of sequential reads or writes is extremely useful in those situations. This is true especially in shared-nothing contexts, where results don't vary due to the influence of external workloads. Know your system: benchmark it. Encryption at rest Encryption at rest is possible with CloudNativePG. The operator delegates that to the underlying storage class. See the storage class for information about this important security feature. Persistent Volume Claim (PVC) The operator creates a PVC for each PostgreSQL instance, with the goal of storing the PGDATA . It then mounts it into each pod. Additionally, it supports creating clusters with: A separate PVC on which to store PostgreSQL WAL, as explained in Volume for WAL Additional separate volumes reserved for PostgreSQL tablespaces, as explained in Tablespaces In CloudNativePG, the volumes attached to a single PostgreSQL instance are defined as a PVC group . Configuration via a storage class Important CloudNativePG was designed to work interchangeably with all storage classes. As usual, we recommend properly benchmarking the storage class in a controlled environment before deploying to production. The easiest way to configure the storage for a PostgreSQL class is to request storage of a certain size, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-storage-class spec: instances: 3 storage: size: 1Gi Using the previous configuration, the generated PVCs are satisfied by the default storage class. If the target Kubernetes cluster has no default storage class, or even if you need your PVCs to be satisfied by a known storage class, you can set it into the custom resource: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-storage-class spec: instances: 3 storage: storageClass: standard size: 1Gi Configuration via a PVC template To further customize the generated PVCs, you can provide a PVC template inside the custom resource, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-pvc-template spec: instances: 3 storage: pvcTemplate: accessModes: - ReadWriteOnce resources: requests: storage: 1Gi storageClassName: standard volumeMode: Filesystem Volume for WAL By default, PostgreSQL stores all its data in the so-called PGDATA (a directory). One of the core directories inside PGDATA is pg_wal , which contains the log of transactional changes that occurred in the database, in the form of segment files. ( pg_wal is historically known as pg_xlog in PostgreSQL.) Info Normally, each segment is 16MB in size, but you can configure the size using the walSegmentSize option. This option is applied at cluster initialization time, as described in Bootstrap an empty cluster . In most cases, having pg_wal on the same volume where PGDATA resides is fine. However, having WALs stored in a separate volume has a few benefits: I/O performance \u2013 By storing WAL files on different storage from PGDATA , PostgreSQL can exploit parallel I/O for WAL operations (normally sequential writes) and for data files (tables and indexes for example), thus improving vertical scalability. More reliability \u2013 By reserving dedicated disk space to WAL files, you can be sure that exhausting space on the PGDATA volume never interferes with WAL writing. This behavior ensures that your PostgreSQL primary is correctly shut down. Finer control \u2013 You can define the amount of space dedicated to both PGDATA and pg_wal , fine tune WAL configuration and checkpoints, and even use a different storage class for cost optimization. Better I/O monitoring \u2013 You can constantly monitor the load and disk usage on both PGDATA and pg_wal . You can also set alerts that notify you in case, for example, PGDATA requires resizing. Write-Ahead Log (WAL) See Reliability and the Write-Ahead Log in the PostgreSQL documentation for more information. You can add a separate volume for WAL using the .spec.walStorage option. It follows the same rules described for the storage field and provisions a dedicated PVC. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: separate-pgwal-volume spec: instances: 3 storage: size: 1Gi walStorage: size: 1Gi Important Removing walStorage isn't supported. Once added, a separate volume for WALs can't be removed from an existing Postgres cluster. Volumes for tablespaces CloudNativePG supports declarative tablespaces. You can add one or more volumes, each dedicated to a single PostgreSQL tablespace. See Tablespaces for details. Volume expansion Kubernetes exposes an API allowing expanding PVCs that's enabled by default. However, it needs to be supported by the underlying StorageClass . To check if a certain StorageClass supports volume expansion, you can read the allowVolumeExpansion field for your storage class: $ kubectl get storageclass -o jsonpath='{$.allowVolumeExpansion}' premium-storage true Using the volume expansion Kubernetes feature Given the storage class supports volume expansion, you can change the size requirement of the Cluster , and the operator applies the change to every PVC. If the StorageClass supports online volume resizing , the change is immediately applied to the pods. If the underlying storage class doesn't support that, you must delete the pod to trigger the resize. The best way to proceed is to delete one pod at a time, starting from replicas and waiting for each pod to be back up. Re-creating storage If the storage class doesn't support volume expansion, you can still regenerate your cluster on different PVCs. Allocate new PVCs with increased storage and then move the database there. This operation is feasible only when the cluster contains more than one node. While you do that, you need to prevent the operator from changing the existing PVC by disabling the resizeInUseVolumes flag, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-pvc-template spec: instances: 3 storage: storageClass: standard size: 1Gi resizeInUseVolumes: False To move the entire cluster to a different storage area, you need to re-create all the PVCs and all the pods. Suppose you have a cluster with three replicas, like in the following example: $ kubectl get pods NAME READY STATUS RESTARTS AGE cluster-example-1 1/1 Running 0 2m37s cluster-example-2 1/1 Running 0 2m22s cluster-example-3 1/1 Running 0 2m10s To re-create the cluster using different PVCs, you can edit the cluster definition to disable resizeInUseVolumes . Then re-create every instance in a different PVC. For example, re-create the storage for cluster-example-3 : $ kubectl delete pvc/cluster-example-3 pod/cluster-example-3 Important If you created a dedicated WAL volume, both PVCs must be deleted during this process. The same procedure applies if you want to regenerate the WAL volume PVC. You can do this by also disabling resizeInUseVolumes for the .spec.walStorage section. For example, if a PVC dedicated to WAL storage is present: $ kubectl delete pvc/cluster-example-3 pvc/cluster-example-3-wal pod/cluster-example-3 Having done that, the operator orchestrates creating another replica with a resized PVC: $ kubectl get pods NAME READY STATUS RESTARTS AGE cluster-example-1 1/1 Running 0 5m58s cluster-example-2 1/1 Running 0 5m43s cluster-example-4-join-v2 0/1 Completed 0 17s cluster-example-4 1/1 Running 0 10s Static provisioning of persistent volumes CloudNativePG was designed to work with dynamic volume provisioning. This capability allows storage volumes to be created on demand when requested by users by way of storage classes and PVC templates. See Re-creating storage . However, in some cases, Kubernetes administrators prefer to manually create storage volumes and then create the related PersistentVolume objects for their representation inside the Kubernetes cluster. This is also known as pre-provisioning of volumes. Important We recommend that you avoid pre-provisioning volumes, as it has an effect on the high availability and self-healing capabilities of the operator. It breaks the fully declarative model on which CloudNativePG was built. To use a pre-provisioned volume in CloudNativePG: Manually create the volume outside Kubernetes. Create the PersistentVolume object to match this volume using the correct parameters as required by the actual CSI driver (that is, volumeHandle , fsType , storageClassName , and so on). Create the Postgres Cluster using, for each storage section, a coherent pvcTemplate section that can help Kubernetes match the PersistentVolume and enable CloudNativePG to create the needed PersistentVolumeClaim . Warning With static provisioning, it's your responsibility to ensure that Postgres pods can be correctly scheduled by Kubernetes where a pre-provisioned volume exists. (The scheduling configuration is based on the affinity rules of your cluster.) Make sure you check for any pods stuck in Pending after you deploy the cluster. If the condition persists, investigate why it's happening. Block storage considerations (Ceph/Longhorn) Most block storage solutions in Kubernetes, such as Longhorn and Ceph, recommend having multiple replicas of a volume to enhance resiliency. This approach works well for workloads that lack built-in resiliency. However, CloudNativePG integrates this resiliency directly into the Postgres Cluster through the number of instances and the persistent volumes attached to them, as explained in \"Synchronizing the state\" . As a result, defining additional replicas at the storage level can lead to write amplification, unnecessarily increasing disk I/O and space usage. For CloudNativePG usage, consider reducing the number of replicas at the block storage level to one, while ensuring that no single point of failure (SPoF) exists at the storage level for the entire Cluster resource. This typically means ensuring that a single storage host\u2014and ultimately, a physical disk\u2014does not host blocks from different instances of the same Cluster , in alignment with the broader shared-nothing architecture principle. In Longhorn, you can mitigate this risk by enabling strict-local data locality when creating a custom storage class. Detailed instructions for creating a volume with strict-local data locality are available here . This setting ensures that a pod\u2019s data volume resides on the same node as the pod itself. Additionally, your Postgres Cluster should have pod anti-affinity rules in place to ensure that the operator deploys pods across different nodes, allowing Longhorn to place the data volumes on the corresponding hosts. If needed, you can manually relocate volumes in Longhorn by temporarily setting the volume replica count to 2, reducing it afterward, and then removing the old replica. If a host becomes corrupted, you can use the cnpg plugin to destroy the affected instance. CloudNativePG will then recreate the instance on another host and replicate the data. In Ceph, this can be configured through CRUSH rules. The documentation for configuring CRUSH rules is available here . These rules aim to ensure one volume per pod per node. You can also relocate volumes by importing them into a different pool.","title":"Storage"},{"location":"storage/#storage","text":"Storage is the most critical component in a database workload. Storage must always be available, scale, perform well, and guarantee consistency and durability. The same expectations and requirements that apply to traditional environments, such as virtual machines and bare metal, are also valid in container contexts managed by Kubernetes. Important When it comes to dynamically provisioned storage, Kubernetes has its own specifics. These include storage classes , persistent volumes , and Persistent Volume Claims (PVCs) . You need to own these concepts, on top of all the valuable knowledge you've built over the years in terms of storage for database workloads on VMs and physical servers. There are two primary methods of access to storage: Network \u2013 Either directly or indirectly. (Think of an NFS volume locally mounted on a host running Kubernetes.) Local \u2013 Directly attached to the node where a pod is running. This also includes directly attached disks on bare metal installations of Kubernetes. Network storage, which is the most common usage pattern in Kubernetes, presents the same issues of throughput and latency that you can experience in a traditional environment. These issues can be accentuated in a shared environment, where I/O contention with several applications increases the variability of performance results. Local storage enables shared-nothing architectures, which is more suitable for high transactional and very large database (VLDB) workloads, as it guarantees higher and more predictable performance. Warning Before you deploy a PostgreSQL cluster with CloudNativePG, ensure that the storage you're using is recommended for database workloads. We recommend clearly setting performance expectations by first benchmarking the storage using tools such as fio and then the database using pgbench . Info CloudNativePG doesn't use StatefulSet for managing data persistence. Rather, it manages PVCs directly. If you want to know more, see Custom pod controller .","title":"Storage"},{"location":"storage/#backup-and-recovery","text":"Since CloudNativePG supports volume snapshots for both backup and recovery, we recommend that you also consider this aspect when you choose your storage solution, especially if you manage very large databases. Important See the Kubernetes documentation for a list of all the supported container storage interface (CSI) drivers that provide snapshot capabilities.","title":"Backup and recovery"},{"location":"storage/#benchmarking-cloudnativepg","text":"Before deploying the database in production, we recommend that you benchmark CloudNativePG in a controlled Kubernetes environment. Follow the guidelines in Benchmarking . Briefly, we recommend operating at two levels: Measuring the performance of the underlying storage using fio, with relevant metrics for database workloads such as throughput for sequential reads, sequential writes, random reads, and random writes Measuring the performance of the database using pgbench, the default benchmarking tool distributed with PostgreSQL Important You must measure both the storage and database performance before putting the database into production. These results are extremely valuable not just in the planning phase (for example, capacity planning). They are also valuable in the production lifecycle, particularly in emergency situations when you don't have time to run this kind of test. Databases change and evolve over time, and so does the distribution of data, potentially affecting performance. Knowing the theoretical maximum throughput of sequential reads or writes is extremely useful in those situations. This is true especially in shared-nothing contexts, where results don't vary due to the influence of external workloads. Know your system: benchmark it.","title":"Benchmarking CloudNativePG"},{"location":"storage/#encryption-at-rest","text":"Encryption at rest is possible with CloudNativePG. The operator delegates that to the underlying storage class. See the storage class for information about this important security feature.","title":"Encryption at rest"},{"location":"storage/#persistent-volume-claim-pvc","text":"The operator creates a PVC for each PostgreSQL instance, with the goal of storing the PGDATA . It then mounts it into each pod. Additionally, it supports creating clusters with: A separate PVC on which to store PostgreSQL WAL, as explained in Volume for WAL Additional separate volumes reserved for PostgreSQL tablespaces, as explained in Tablespaces In CloudNativePG, the volumes attached to a single PostgreSQL instance are defined as a PVC group .","title":"Persistent Volume Claim (PVC)"},{"location":"storage/#configuration-via-a-storage-class","text":"Important CloudNativePG was designed to work interchangeably with all storage classes. As usual, we recommend properly benchmarking the storage class in a controlled environment before deploying to production. The easiest way to configure the storage for a PostgreSQL class is to request storage of a certain size, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-storage-class spec: instances: 3 storage: size: 1Gi Using the previous configuration, the generated PVCs are satisfied by the default storage class. If the target Kubernetes cluster has no default storage class, or even if you need your PVCs to be satisfied by a known storage class, you can set it into the custom resource: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-storage-class spec: instances: 3 storage: storageClass: standard size: 1Gi","title":"Configuration via a storage class"},{"location":"storage/#configuration-via-a-pvc-template","text":"To further customize the generated PVCs, you can provide a PVC template inside the custom resource, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-pvc-template spec: instances: 3 storage: pvcTemplate: accessModes: - ReadWriteOnce resources: requests: storage: 1Gi storageClassName: standard volumeMode: Filesystem","title":"Configuration via a PVC template"},{"location":"storage/#volume-for-wal","text":"By default, PostgreSQL stores all its data in the so-called PGDATA (a directory). One of the core directories inside PGDATA is pg_wal , which contains the log of transactional changes that occurred in the database, in the form of segment files. ( pg_wal is historically known as pg_xlog in PostgreSQL.) Info Normally, each segment is 16MB in size, but you can configure the size using the walSegmentSize option. This option is applied at cluster initialization time, as described in Bootstrap an empty cluster . In most cases, having pg_wal on the same volume where PGDATA resides is fine. However, having WALs stored in a separate volume has a few benefits: I/O performance \u2013 By storing WAL files on different storage from PGDATA , PostgreSQL can exploit parallel I/O for WAL operations (normally sequential writes) and for data files (tables and indexes for example), thus improving vertical scalability. More reliability \u2013 By reserving dedicated disk space to WAL files, you can be sure that exhausting space on the PGDATA volume never interferes with WAL writing. This behavior ensures that your PostgreSQL primary is correctly shut down. Finer control \u2013 You can define the amount of space dedicated to both PGDATA and pg_wal , fine tune WAL configuration and checkpoints, and even use a different storage class for cost optimization. Better I/O monitoring \u2013 You can constantly monitor the load and disk usage on both PGDATA and pg_wal . You can also set alerts that notify you in case, for example, PGDATA requires resizing. Write-Ahead Log (WAL) See Reliability and the Write-Ahead Log in the PostgreSQL documentation for more information. You can add a separate volume for WAL using the .spec.walStorage option. It follows the same rules described for the storage field and provisions a dedicated PVC. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: separate-pgwal-volume spec: instances: 3 storage: size: 1Gi walStorage: size: 1Gi Important Removing walStorage isn't supported. Once added, a separate volume for WALs can't be removed from an existing Postgres cluster.","title":"Volume for WAL"},{"location":"storage/#volumes-for-tablespaces","text":"CloudNativePG supports declarative tablespaces. You can add one or more volumes, each dedicated to a single PostgreSQL tablespace. See Tablespaces for details.","title":"Volumes for tablespaces"},{"location":"storage/#volume-expansion","text":"Kubernetes exposes an API allowing expanding PVCs that's enabled by default. However, it needs to be supported by the underlying StorageClass . To check if a certain StorageClass supports volume expansion, you can read the allowVolumeExpansion field for your storage class: $ kubectl get storageclass -o jsonpath='{$.allowVolumeExpansion}' premium-storage true","title":"Volume expansion"},{"location":"storage/#using-the-volume-expansion-kubernetes-feature","text":"Given the storage class supports volume expansion, you can change the size requirement of the Cluster , and the operator applies the change to every PVC. If the StorageClass supports online volume resizing , the change is immediately applied to the pods. If the underlying storage class doesn't support that, you must delete the pod to trigger the resize. The best way to proceed is to delete one pod at a time, starting from replicas and waiting for each pod to be back up.","title":"Using the volume expansion Kubernetes feature"},{"location":"storage/#re-creating-storage","text":"If the storage class doesn't support volume expansion, you can still regenerate your cluster on different PVCs. Allocate new PVCs with increased storage and then move the database there. This operation is feasible only when the cluster contains more than one node. While you do that, you need to prevent the operator from changing the existing PVC by disabling the resizeInUseVolumes flag, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-pvc-template spec: instances: 3 storage: storageClass: standard size: 1Gi resizeInUseVolumes: False To move the entire cluster to a different storage area, you need to re-create all the PVCs and all the pods. Suppose you have a cluster with three replicas, like in the following example: $ kubectl get pods NAME READY STATUS RESTARTS AGE cluster-example-1 1/1 Running 0 2m37s cluster-example-2 1/1 Running 0 2m22s cluster-example-3 1/1 Running 0 2m10s To re-create the cluster using different PVCs, you can edit the cluster definition to disable resizeInUseVolumes . Then re-create every instance in a different PVC. For example, re-create the storage for cluster-example-3 : $ kubectl delete pvc/cluster-example-3 pod/cluster-example-3 Important If you created a dedicated WAL volume, both PVCs must be deleted during this process. The same procedure applies if you want to regenerate the WAL volume PVC. You can do this by also disabling resizeInUseVolumes for the .spec.walStorage section. For example, if a PVC dedicated to WAL storage is present: $ kubectl delete pvc/cluster-example-3 pvc/cluster-example-3-wal pod/cluster-example-3 Having done that, the operator orchestrates creating another replica with a resized PVC: $ kubectl get pods NAME READY STATUS RESTARTS AGE cluster-example-1 1/1 Running 0 5m58s cluster-example-2 1/1 Running 0 5m43s cluster-example-4-join-v2 0/1 Completed 0 17s cluster-example-4 1/1 Running 0 10s","title":"Re-creating storage"},{"location":"storage/#static-provisioning-of-persistent-volumes","text":"CloudNativePG was designed to work with dynamic volume provisioning. This capability allows storage volumes to be created on demand when requested by users by way of storage classes and PVC templates. See Re-creating storage . However, in some cases, Kubernetes administrators prefer to manually create storage volumes and then create the related PersistentVolume objects for their representation inside the Kubernetes cluster. This is also known as pre-provisioning of volumes. Important We recommend that you avoid pre-provisioning volumes, as it has an effect on the high availability and self-healing capabilities of the operator. It breaks the fully declarative model on which CloudNativePG was built. To use a pre-provisioned volume in CloudNativePG: Manually create the volume outside Kubernetes. Create the PersistentVolume object to match this volume using the correct parameters as required by the actual CSI driver (that is, volumeHandle , fsType , storageClassName , and so on). Create the Postgres Cluster using, for each storage section, a coherent pvcTemplate section that can help Kubernetes match the PersistentVolume and enable CloudNativePG to create the needed PersistentVolumeClaim . Warning With static provisioning, it's your responsibility to ensure that Postgres pods can be correctly scheduled by Kubernetes where a pre-provisioned volume exists. (The scheduling configuration is based on the affinity rules of your cluster.) Make sure you check for any pods stuck in Pending after you deploy the cluster. If the condition persists, investigate why it's happening.","title":"Static provisioning of persistent volumes"},{"location":"storage/#block-storage-considerations-cephlonghorn","text":"Most block storage solutions in Kubernetes, such as Longhorn and Ceph, recommend having multiple replicas of a volume to enhance resiliency. This approach works well for workloads that lack built-in resiliency. However, CloudNativePG integrates this resiliency directly into the Postgres Cluster through the number of instances and the persistent volumes attached to them, as explained in \"Synchronizing the state\" . As a result, defining additional replicas at the storage level can lead to write amplification, unnecessarily increasing disk I/O and space usage. For CloudNativePG usage, consider reducing the number of replicas at the block storage level to one, while ensuring that no single point of failure (SPoF) exists at the storage level for the entire Cluster resource. This typically means ensuring that a single storage host\u2014and ultimately, a physical disk\u2014does not host blocks from different instances of the same Cluster , in alignment with the broader shared-nothing architecture principle. In Longhorn, you can mitigate this risk by enabling strict-local data locality when creating a custom storage class. Detailed instructions for creating a volume with strict-local data locality are available here . This setting ensures that a pod\u2019s data volume resides on the same node as the pod itself. Additionally, your Postgres Cluster should have pod anti-affinity rules in place to ensure that the operator deploys pods across different nodes, allowing Longhorn to place the data volumes on the corresponding hosts. If needed, you can manually relocate volumes in Longhorn by temporarily setting the volume replica count to 2, reducing it afterward, and then removing the old replica. If a host becomes corrupted, you can use the cnpg plugin to destroy the affected instance. CloudNativePG will then recreate the instance on another host and replicate the data. In Ceph, this can be configured through CRUSH rules. The documentation for configuring CRUSH rules is available here . These rules aim to ensure one volume per pod per node. You can also relocate volumes by importing them into a different pool.","title":"Block storage considerations (Ceph/Longhorn)"},{"location":"supported_releases/","text":"Supported releases This page lists the status, timeline and policy for currently supported releases of CloudNativePG . We are committed to providing support for the latest minor release, with a dedication to launching a new minor release every three months. Each release remains fully supported until reaching its designated \"End of Life\" date, as outlined in the support status table for CloudNativePG releases . This includes an additional 3-month assistance window to facilitate seamless upgrade planning. Supported releases of CloudNativePG include releases that are in the active maintenance window and are patched for security and bug fixes. Subsequent patch releases on a minor release contain backward-compatible changes only. Support policy Naming scheme Support status of CloudNativePG releases What we mean by support Support Policy CloudNativePG produces new builds for each commit. Approximately every two months, we create a minor release that undergoes several additional tests and a thorough release qualification process. We release patch versions for issues found in supported minor releases. Before an official release, at least one Release Candidate (RC) is built for preview testing . Additional release candidates may be issued if new bugs are discovered. The Release Candidates are announced on the Slack channel to encourage community testing before the final release. The maintainers provide 1-2 weeks for community testing, and if no objections are raised, the final release is announced. Different types of releases represent varying levels of product quality and assistance from the CloudNativePG community. For details on the support provided by the community, see What we mean by support . Type Support level Quality and recommended Use Development Build No support Dangerous, might not be fully reliable. Useful to experiment with. Release Candidate No support Preview version: Not production-ready . Released for experimentation and testing. Minor Release Support provided until 3 months after the N+1 minor release (ex. 1.23 supported until 3 months after 1.24.0 is released) Patch Same as the corresponding minor release Users are encouraged to adopt patch releases as soon as they are available for a given release. Security Patch Same as a patch, however, it doesn't contain any additional code other than the security fix from the previous patch Given the nature of security fixes, users are strongly encouraged to adopt security patches after release. You can find available releases on the releases page . You can find high-level more information for each minor and patch release in the release notes . Sure, here\u2019s an improved version of the naming scheme section: Naming Scheme Our naming scheme follows Semantic Versioning 2.0.0 and is structured as follows: <major>.<minor>.<patch> <minor> is incremented for each release. <patch> counts the number of patches for the current <minor> release, representing small changes relative to the <minor> release. Release candidates are indicated by an additional -<pre-release> identifier following the patch version, as specified in Semantic Versioning 2.0.0 - item #9 . Git tags for versions are prefixed with v . Support status of CloudNativePG releases Version Currently supported Release date End of life Supported Kubernetes versions Tested, but not supported Supported Postgres versions 1.27.x No (preview) ~ Aug 2025 ~ Feb 2026 1.31, 1.32, 1.33 1.30, 1.29 13 - 17 1.26.x Yes May 23, 2025 ~ Nov 2025 1.30, 1.31, 1.32, 1.33 1.29 13 - 17 1.25.x Yes Dec 23, 2024 22 Aug 2025 1.29, 1.30, 1.31, 1.32 1.33 13 - 17 main No, development only 13 - 17 1 PostgreSQL 13 will be supported until November 13, 2025. The list of supported Kubernetes versions in the table depends on what the CloudNativePG maintainers think is reasonable to support and to test. Currently, the CloudNativePG community does not officially support or test any Kubernetes distributions beyond the standard/vanilla one - such as Red Hat OpenShift. This may change in the future, and if it does, the CloudNativePG maintainers will update the official policy accordingly. If you plan to deploy CloudNativePG on Red Hat OpenShift, you can use the certified operator provided by EDB , which comes with full support from EDB. Supported PostgreSQL versions The list of supported Postgres versions in the previous table generally depends on what PostgreSQL versions were supported by the community at the time the minor version of CloudNativePG was released. See the PostgreSQL Versioning Policy page for more information about supported versions. Info Starting from November 14, 2024, Postgres 12 is no longer supported . We also recommend that you regularly update your PostgreSQL operand images and use the latest minor release for the major version you have in use, as not upgrading is riskier than upgrading. As a result, when opening an issue with an older minor version of PostgreSQL, we might not be able to help you. Upcoming releases Version Release date End of life 1.28.0 ~ Nov, 2025 ~ May, 2026 1.29.0 ~ Feb, 2026 ~ Aug, 2026 1.30.0 ~ May, 2026 ~ Nov, 2026 Note Feature freeze occurs 1-2 weeks before the release, at which point a release candidate version is built and distributed for testing, as described earlier. Important Dates in the future are uncertain and might change. This applies to Kubernetes versions, too. Updates and changes on the release schedule will be communicated in the Release updates discussion in the main GitHub repository. Old releases Version Release date End of life Compatible Kubernetes versions 1.24.x Aug 22, 2024 May 23, 2025 1.28, 1.29, 1.30, 1.31 1.23.x April 24, 2024 November 24, 2024 1.27, 1.28, 1.29 1.22.x December 21, 2023 July 24, 2024 1.26, 1.27, 1.28 1.21.x October 12, 2023 Jun 12, 2024 1.25, 1.26, 1.27, 1.28 1.20.x April 27, 2023 January 21, 2024 1.24, 1.25, 1.26, 1.27 1.19.x February 14, 2023 November 3, 2023 1.23, 1.24, 1.25, 1.26 1.18.x Nov 10, 2022 June 12, 2023 1.23, 1.24, 1.25, 1.26, 1.27 1.17.x September 6, 2022 March 20, 2023 1.22, 1.23, 1.24 1.16.x July 7, 2022 December 21, 2022 1.22, 1.23, 1.24 1.15.x April 21, 2022 October 6, 2022 1.21, 1.22, 1.23 What we mean by support Our support window is roughly five months for each release branch (latest minor release, plus 3 additional months), given that we produce a new final release every two months. In the following diagram, release-1.23 is an example of a release branch. For example, if the latest release is v1.23.0 , you can expect a supplementary 3-month support period for the preceding release, v1.22.x . Only the last patch release of each branch is supported. ------+---------------------------------------------> main (trunk development) \\ \\ \\ \\ \\ \\ v1.23.0 \\ \\ Apr 24, 2024 ^ \\ \\----------+---------------> release-1.23 | \\ | SUPPORTED \\ | RELEASES \\ v1.22.0 | = last minor \\ Dec 21, 2023 | release + +-------------------+---------------> release-1.22 | 3 months v We offer two types of support: Technical support Technical assistance is offered on a best-effort basis and is limited to supported releases only. For help, you can reach out to the community via the #cloudnativepg-users channel on the CNCF Slack workspace (if you're not yet a member, you can join the workspace ). Alternatively, you can post your questions in the GitHub Discussions section of the CloudNativePG repository. Security and bug fixes We backport important bug fixes \u2014 including security fixes - to all currently supported releases. Before backporting a patch, we ask ourselves: \"Does this backport improve CloudNativePG , bearing in mind that we really value stability for already-released versions?\" If you\u2019re looking for professional support, please refer to the Support page on our website . The vendors listed there may offer service level agreements (SLA), including extended support periods and additional services.","title":"Supported releases"},{"location":"supported_releases/#supported-releases","text":"This page lists the status, timeline and policy for currently supported releases of CloudNativePG . We are committed to providing support for the latest minor release, with a dedication to launching a new minor release every three months. Each release remains fully supported until reaching its designated \"End of Life\" date, as outlined in the support status table for CloudNativePG releases . This includes an additional 3-month assistance window to facilitate seamless upgrade planning. Supported releases of CloudNativePG include releases that are in the active maintenance window and are patched for security and bug fixes. Subsequent patch releases on a minor release contain backward-compatible changes only. Support policy Naming scheme Support status of CloudNativePG releases What we mean by support","title":"Supported releases"},{"location":"supported_releases/#support-policy","text":"CloudNativePG produces new builds for each commit. Approximately every two months, we create a minor release that undergoes several additional tests and a thorough release qualification process. We release patch versions for issues found in supported minor releases. Before an official release, at least one Release Candidate (RC) is built for preview testing . Additional release candidates may be issued if new bugs are discovered. The Release Candidates are announced on the Slack channel to encourage community testing before the final release. The maintainers provide 1-2 weeks for community testing, and if no objections are raised, the final release is announced. Different types of releases represent varying levels of product quality and assistance from the CloudNativePG community. For details on the support provided by the community, see What we mean by support . Type Support level Quality and recommended Use Development Build No support Dangerous, might not be fully reliable. Useful to experiment with. Release Candidate No support Preview version: Not production-ready . Released for experimentation and testing. Minor Release Support provided until 3 months after the N+1 minor release (ex. 1.23 supported until 3 months after 1.24.0 is released) Patch Same as the corresponding minor release Users are encouraged to adopt patch releases as soon as they are available for a given release. Security Patch Same as a patch, however, it doesn't contain any additional code other than the security fix from the previous patch Given the nature of security fixes, users are strongly encouraged to adopt security patches after release. You can find available releases on the releases page . You can find high-level more information for each minor and patch release in the release notes . Sure, here\u2019s an improved version of the naming scheme section:","title":"Support Policy"},{"location":"supported_releases/#naming-scheme","text":"Our naming scheme follows Semantic Versioning 2.0.0 and is structured as follows: <major>.<minor>.<patch> <minor> is incremented for each release. <patch> counts the number of patches for the current <minor> release, representing small changes relative to the <minor> release. Release candidates are indicated by an additional -<pre-release> identifier following the patch version, as specified in Semantic Versioning 2.0.0 - item #9 . Git tags for versions are prefixed with v .","title":"Naming Scheme"},{"location":"supported_releases/#support-status-of-cloudnativepg-releases","text":"Version Currently supported Release date End of life Supported Kubernetes versions Tested, but not supported Supported Postgres versions 1.27.x No (preview) ~ Aug 2025 ~ Feb 2026 1.31, 1.32, 1.33 1.30, 1.29 13 - 17 1.26.x Yes May 23, 2025 ~ Nov 2025 1.30, 1.31, 1.32, 1.33 1.29 13 - 17 1.25.x Yes Dec 23, 2024 22 Aug 2025 1.29, 1.30, 1.31, 1.32 1.33 13 - 17 main No, development only 13 - 17 1 PostgreSQL 13 will be supported until November 13, 2025. The list of supported Kubernetes versions in the table depends on what the CloudNativePG maintainers think is reasonable to support and to test. Currently, the CloudNativePG community does not officially support or test any Kubernetes distributions beyond the standard/vanilla one - such as Red Hat OpenShift. This may change in the future, and if it does, the CloudNativePG maintainers will update the official policy accordingly. If you plan to deploy CloudNativePG on Red Hat OpenShift, you can use the certified operator provided by EDB , which comes with full support from EDB.","title":"Support status of CloudNativePG releases"},{"location":"supported_releases/#supported-postgresql-versions","text":"The list of supported Postgres versions in the previous table generally depends on what PostgreSQL versions were supported by the community at the time the minor version of CloudNativePG was released. See the PostgreSQL Versioning Policy page for more information about supported versions. Info Starting from November 14, 2024, Postgres 12 is no longer supported . We also recommend that you regularly update your PostgreSQL operand images and use the latest minor release for the major version you have in use, as not upgrading is riskier than upgrading. As a result, when opening an issue with an older minor version of PostgreSQL, we might not be able to help you.","title":"Supported PostgreSQL versions"},{"location":"supported_releases/#upcoming-releases","text":"Version Release date End of life 1.28.0 ~ Nov, 2025 ~ May, 2026 1.29.0 ~ Feb, 2026 ~ Aug, 2026 1.30.0 ~ May, 2026 ~ Nov, 2026 Note Feature freeze occurs 1-2 weeks before the release, at which point a release candidate version is built and distributed for testing, as described earlier. Important Dates in the future are uncertain and might change. This applies to Kubernetes versions, too. Updates and changes on the release schedule will be communicated in the Release updates discussion in the main GitHub repository.","title":"Upcoming releases"},{"location":"supported_releases/#old-releases","text":"Version Release date End of life Compatible Kubernetes versions 1.24.x Aug 22, 2024 May 23, 2025 1.28, 1.29, 1.30, 1.31 1.23.x April 24, 2024 November 24, 2024 1.27, 1.28, 1.29 1.22.x December 21, 2023 July 24, 2024 1.26, 1.27, 1.28 1.21.x October 12, 2023 Jun 12, 2024 1.25, 1.26, 1.27, 1.28 1.20.x April 27, 2023 January 21, 2024 1.24, 1.25, 1.26, 1.27 1.19.x February 14, 2023 November 3, 2023 1.23, 1.24, 1.25, 1.26 1.18.x Nov 10, 2022 June 12, 2023 1.23, 1.24, 1.25, 1.26, 1.27 1.17.x September 6, 2022 March 20, 2023 1.22, 1.23, 1.24 1.16.x July 7, 2022 December 21, 2022 1.22, 1.23, 1.24 1.15.x April 21, 2022 October 6, 2022 1.21, 1.22, 1.23","title":"Old releases"},{"location":"supported_releases/#what-we-mean-by-support","text":"Our support window is roughly five months for each release branch (latest minor release, plus 3 additional months), given that we produce a new final release every two months. In the following diagram, release-1.23 is an example of a release branch. For example, if the latest release is v1.23.0 , you can expect a supplementary 3-month support period for the preceding release, v1.22.x . Only the last patch release of each branch is supported. ------+---------------------------------------------> main (trunk development) \\ \\ \\ \\ \\ \\ v1.23.0 \\ \\ Apr 24, 2024 ^ \\ \\----------+---------------> release-1.23 | \\ | SUPPORTED \\ | RELEASES \\ v1.22.0 | = last minor \\ Dec 21, 2023 | release + +-------------------+---------------> release-1.22 | 3 months v We offer two types of support: Technical support Technical assistance is offered on a best-effort basis and is limited to supported releases only. For help, you can reach out to the community via the #cloudnativepg-users channel on the CNCF Slack workspace (if you're not yet a member, you can join the workspace ). Alternatively, you can post your questions in the GitHub Discussions section of the CloudNativePG repository. Security and bug fixes We backport important bug fixes \u2014 including security fixes - to all currently supported releases. Before backporting a patch, we ask ourselves: \"Does this backport improve CloudNativePG , bearing in mind that we really value stability for already-released versions?\" If you\u2019re looking for professional support, please refer to the Support page on our website . The vendors listed there may offer service level agreements (SLA), including extended support periods and additional services.","title":"What we mean by support"},{"location":"tablespaces/","text":"Tablespaces A tablespace is a robust and widely embraced feature in database management systems. It offers a powerful means to enhance the vertical scalability of a database by decoupling the physical and logical modeling of data. Essentially, it serves as a technique for physical database modeling, enabling the efficient distribution of I/O operations across multiple volumes on distinct storage. It thereby optimizes performance through parallel on-disk read/write operations. In the context of the database industry, tablespaces play a strategic role, particularly when paired with table partitioning, a logical database modeling technique. They prove instrumental in managing large-scale databases and are also used for tasks such as separating tables from indexes or executing temporary operations. Tablespaces in PostgreSQL have been playing a pivotal role since 2005 (version 8.0), while declarative partitioning was introduced in 2017 (version 10). Consequently, tablespaces are seamlessly integrated into all supported releases of PostgreSQL. Quoting from the PostgreSQL documentation on tablespaces : By using tablespaces, an administrator can control the disk layout of a PostgreSQL installation. This is useful in at least two ways. First, if the partition or volume on which the cluster was initialized runs out of space and cannot be extended, a tablespace can be created on a different partition and used until the system can be reconfigured. Second, tablespaces allow an administrator to use knowledge of the usage pattern of database objects to optimize performance. Declarative tablespaces CloudNativePG provides support for PostgreSQL tablespaces through declarative tablespaces , operating at two distinct levels: Kubernetes, managing persistent volume claims, identically to how PGDATA and WAL volumes are handled PostgreSQL, managing the TABLESPACE global objects in the PostgreSQL instance Being a part of the Kubernetes ecosystem, CloudNativePG's declarative tablespaces are implemented by leveraging persistent volume claims (and persistent volumes). Each tablespace defined in the cluster is housed in its own persistent volume. CloudNativePG takes care of generating the PVCs. It mounts the required volumes in the instance pods in normalized locations and ensures replicas are ready to support tablespaces before activating them in the primary. You can set up tablespaces when creating the cluster or add them later, provided the storage is available when requested. Currently, you can't remove them. However, this limitation will be addressed in a future minor or patch version of CloudNativePG. Using declarative tablespaces Using declarative tablespaces is straightforward. You can find a full example in cluster-example-with-tablespaces.yaml . To use them, use the new tablespaces stanza on a new or existing Cluster resource: spec: instances: 3 # ... tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 storage: size: 2Gi Each tablespace has its own storage section where you can configure the size and the storage class of the generated PVC. The administrator can thus plan to use different storage classes for different kinds of workloads, as explained in Storage classes and tablespaces . CloudNativePG creates the persistent volume claims for each instance in the high-availability Postgres cluster. It mounts them in each pod when they have been provisioned. Then, it ensures that the tbs1 , tbs2 , and tbs3 tablespaces are created on the primary PostgreSQL instance using the CREATE TABLESPACE command. This process is quick, and you see this reflected in Postgres: app=# SELECT oid, spcname FROM pg_tablespace; oid | spcname -------+-------------------- 1663 | pg_default 1664 | pg_global 16387 | tbs1 16388 | tbs2 16389 | tbs3 (5 rows) You can start using them right away: app=# CREATE TABLE fibonacci(num INTEGER) TABLESPACE tbs1; CREATE TABLE The cluster status has a section for tablespaces: status: <- snipped -> tablespacesStatus: - name: atablespace state: reconciled - name: another_tablespace state: reconciled - name: tablespacea1 state: reconciled Storage classes and tablespaces You can use different storage classes for your tablespaces, just as you can for PGDATA and WAL volumes. This is a convenient way of optimizing your resources, balancing performance and costs of your storage based on data access usage and expectations. This example helps to explain the feature: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: yardbirds spec: instances: 3 storage: size: 10Gi walStorage: size: 10Gi tablespaces: - name: current storage: size: 100Gi storageClass: fastest - name: this_year storage: size: 500Gi storageClass: balanced The yardbirds cluster example requests 4 persistent volume claims using 3 different storage classes: Default storage class \u2013 Used by the PGDATA and WAL volumes. fastest \u2013 Used by the current tablespace to store the most active and demanding set of data in the database. balanced \u2013 Used by the this_year tablespace to store older partitions of data that are rarely accessed by users and where performance expectations aren't the highest. You can then take advantage of horizontal table partitioning and create the current month's table (for example, facts for December 2023) in the current tablespace: CREATE TABLE facts_202312 PARTITION OF facts FOR VALUES FROM ('2023-12-01') TO ('2024-01-01') TABLESPACE current; Important This example assumes you're familiar with PostgreSQL declarative partitioning . Tablespace ownership By default, unless otherwise specified, tablespaces are owned by the app application user, as defined in .spec.bootstrap.initdb.owner . See Bootstrap a new cluster for details. This default behavior works in most microservice database use cases. You can set the owner of a tablespace in the owner stanza, for example the postgres user, like in the following excerpt: # ... tablespaces: - name: clapton owner: name: postgres storage: size: 1Gi Important If you change the ownership of a tablespace, make sure that you're using an existing role. Otherwise, the status of the cluster reports the issue and stops reconciling tablespaces until fixed. It's your responsibility to monitor the status and the log and to promptly intervene by fixing the issue. If you define a tablespace with an owner that doesn't exist, CloudNativePG can't create the tablespace and reflects this in the cluster status: spec: instances: 3 # ... tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 owner: name: badhombre storage: size: 2Gi status: <- snipped -> tablespacesStatus: - name: tbs1 status: reconciled - name: tbs2 status: reconciled - error: 'while creating tablespace tbs3: ERROR: role \"badhombre\" does not exist (SQLSTATE 42704)' name: tbs3 status: pending Backup and recovery CloudNativePG handles backup of tablespaces (and the relative tablespace map) both on object stores and volume snapshots. Warning By default, backups are taken from replica nodes. A backup taken immediately after creating tablespaces in a cluster can result in an incomplete view of the tablespaces from the replica and thus an incomplete backup. The lag will be resolved in a maximum of 5 minutes, with the next reconciliation. Warning When you add or remove a tablespace in an existing cluster, recovery from WAL will fail until you take a new base backup. Once a cluster with tablespaces has a base backup, you can restore a new cluster from it. When it comes to the recovery side, it's your responsibility to ensure that the Cluster definition of the recovered database contains the exact list of tablespaces. Replica clusters Replica clusters must have the same tablespace definition as their origin. The reason is that tablespace management commands like CREATE TABLESPACE are WAL logged and are replayed by any physical replication client (streaming or by way of WAL shipping). It's your responsibility to ensure that replica clusters have the same list of tablespaces, with the same name. Storage class and size might vary. For example: spec: # ... bootstrap: recovery: # ... your selected recovery method tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 storage: size: 2Gi Temporary tablespaces PostgreSQL allows you to define one or more temporary tablespaces to create temporary objects (temporary tables and indexes on temporary tables) when a CREATE command doesn't explicitly specify a tablespace, and to create temporary files for purposes such as sorting large data sets. When no temporary tablespace is specified, PostgreSQL uses the default tablespace of a database, which is currently the main PGDATA volume. When you specify more than one temporary tablespace, PostgreSQL randomly picks one the first time a temporary object needs to be created in a transaction. Then it sequentially iterates through the list. Temporary tablespaces also work like regular tablespaces with regard to backups. CloudNativePG provides the .spec.tablespaces[*].temporary option to determine whether to add a tablespace to the temp_tablespaces PostgreSQL parameter and thus become eligible to store temporary data that doesn't have an explicit tablespace assignment. spec: [...] tablespaces: - name: atablespace storage: size: 1Gi temporary: true They can be created at initialization time or added later, requiring a rolling update. The temporary: true/false option adds or removes the tablespace name to or from the list of tablespaces in the temp_tablespaces option. This change doesn't require a restart of PostgreSQL. Although temporary tablespaces can also work as regular tablespaces (meaning that users can also host regular data on them while using them for temporary operations), we recommend that you don't mix the two workloads. See the PostgreSQL documentation on temp_tablespaces for details. kubectl plugin support The kubectl status plugin includes a section dedicated to tablespaces that offers a convenient overview, including tablespace status, owner, temporary flag, and any errors: [...] Tablespaces status Tablespace Owner Status Temporary Error ---------- ----- ------ --------- ----- atablespace app reconciled true another_tablespace app reconciled true tablespacea1 app reconciled false Instances status [...] Limitations Currently, you can't remove tablespaces from an existing CloudNativePG cluster.","title":"Tablespaces"},{"location":"tablespaces/#tablespaces","text":"A tablespace is a robust and widely embraced feature in database management systems. It offers a powerful means to enhance the vertical scalability of a database by decoupling the physical and logical modeling of data. Essentially, it serves as a technique for physical database modeling, enabling the efficient distribution of I/O operations across multiple volumes on distinct storage. It thereby optimizes performance through parallel on-disk read/write operations. In the context of the database industry, tablespaces play a strategic role, particularly when paired with table partitioning, a logical database modeling technique. They prove instrumental in managing large-scale databases and are also used for tasks such as separating tables from indexes or executing temporary operations. Tablespaces in PostgreSQL have been playing a pivotal role since 2005 (version 8.0), while declarative partitioning was introduced in 2017 (version 10). Consequently, tablespaces are seamlessly integrated into all supported releases of PostgreSQL. Quoting from the PostgreSQL documentation on tablespaces : By using tablespaces, an administrator can control the disk layout of a PostgreSQL installation. This is useful in at least two ways. First, if the partition or volume on which the cluster was initialized runs out of space and cannot be extended, a tablespace can be created on a different partition and used until the system can be reconfigured. Second, tablespaces allow an administrator to use knowledge of the usage pattern of database objects to optimize performance.","title":"Tablespaces"},{"location":"tablespaces/#declarative-tablespaces","text":"CloudNativePG provides support for PostgreSQL tablespaces through declarative tablespaces , operating at two distinct levels: Kubernetes, managing persistent volume claims, identically to how PGDATA and WAL volumes are handled PostgreSQL, managing the TABLESPACE global objects in the PostgreSQL instance Being a part of the Kubernetes ecosystem, CloudNativePG's declarative tablespaces are implemented by leveraging persistent volume claims (and persistent volumes). Each tablespace defined in the cluster is housed in its own persistent volume. CloudNativePG takes care of generating the PVCs. It mounts the required volumes in the instance pods in normalized locations and ensures replicas are ready to support tablespaces before activating them in the primary. You can set up tablespaces when creating the cluster or add them later, provided the storage is available when requested. Currently, you can't remove them. However, this limitation will be addressed in a future minor or patch version of CloudNativePG.","title":"Declarative tablespaces"},{"location":"tablespaces/#using-declarative-tablespaces","text":"Using declarative tablespaces is straightforward. You can find a full example in cluster-example-with-tablespaces.yaml . To use them, use the new tablespaces stanza on a new or existing Cluster resource: spec: instances: 3 # ... tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 storage: size: 2Gi Each tablespace has its own storage section where you can configure the size and the storage class of the generated PVC. The administrator can thus plan to use different storage classes for different kinds of workloads, as explained in Storage classes and tablespaces . CloudNativePG creates the persistent volume claims for each instance in the high-availability Postgres cluster. It mounts them in each pod when they have been provisioned. Then, it ensures that the tbs1 , tbs2 , and tbs3 tablespaces are created on the primary PostgreSQL instance using the CREATE TABLESPACE command. This process is quick, and you see this reflected in Postgres: app=# SELECT oid, spcname FROM pg_tablespace; oid | spcname -------+-------------------- 1663 | pg_default 1664 | pg_global 16387 | tbs1 16388 | tbs2 16389 | tbs3 (5 rows) You can start using them right away: app=# CREATE TABLE fibonacci(num INTEGER) TABLESPACE tbs1; CREATE TABLE The cluster status has a section for tablespaces: status: <- snipped -> tablespacesStatus: - name: atablespace state: reconciled - name: another_tablespace state: reconciled - name: tablespacea1 state: reconciled","title":"Using declarative tablespaces"},{"location":"tablespaces/#storage-classes-and-tablespaces","text":"You can use different storage classes for your tablespaces, just as you can for PGDATA and WAL volumes. This is a convenient way of optimizing your resources, balancing performance and costs of your storage based on data access usage and expectations. This example helps to explain the feature: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: yardbirds spec: instances: 3 storage: size: 10Gi walStorage: size: 10Gi tablespaces: - name: current storage: size: 100Gi storageClass: fastest - name: this_year storage: size: 500Gi storageClass: balanced The yardbirds cluster example requests 4 persistent volume claims using 3 different storage classes: Default storage class \u2013 Used by the PGDATA and WAL volumes. fastest \u2013 Used by the current tablespace to store the most active and demanding set of data in the database. balanced \u2013 Used by the this_year tablespace to store older partitions of data that are rarely accessed by users and where performance expectations aren't the highest. You can then take advantage of horizontal table partitioning and create the current month's table (for example, facts for December 2023) in the current tablespace: CREATE TABLE facts_202312 PARTITION OF facts FOR VALUES FROM ('2023-12-01') TO ('2024-01-01') TABLESPACE current; Important This example assumes you're familiar with PostgreSQL declarative partitioning .","title":"Storage classes and tablespaces"},{"location":"tablespaces/#tablespace-ownership","text":"By default, unless otherwise specified, tablespaces are owned by the app application user, as defined in .spec.bootstrap.initdb.owner . See Bootstrap a new cluster for details. This default behavior works in most microservice database use cases. You can set the owner of a tablespace in the owner stanza, for example the postgres user, like in the following excerpt: # ... tablespaces: - name: clapton owner: name: postgres storage: size: 1Gi Important If you change the ownership of a tablespace, make sure that you're using an existing role. Otherwise, the status of the cluster reports the issue and stops reconciling tablespaces until fixed. It's your responsibility to monitor the status and the log and to promptly intervene by fixing the issue. If you define a tablespace with an owner that doesn't exist, CloudNativePG can't create the tablespace and reflects this in the cluster status: spec: instances: 3 # ... tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 owner: name: badhombre storage: size: 2Gi status: <- snipped -> tablespacesStatus: - name: tbs1 status: reconciled - name: tbs2 status: reconciled - error: 'while creating tablespace tbs3: ERROR: role \"badhombre\" does not exist (SQLSTATE 42704)' name: tbs3 status: pending","title":"Tablespace ownership"},{"location":"tablespaces/#backup-and-recovery","text":"CloudNativePG handles backup of tablespaces (and the relative tablespace map) both on object stores and volume snapshots. Warning By default, backups are taken from replica nodes. A backup taken immediately after creating tablespaces in a cluster can result in an incomplete view of the tablespaces from the replica and thus an incomplete backup. The lag will be resolved in a maximum of 5 minutes, with the next reconciliation. Warning When you add or remove a tablespace in an existing cluster, recovery from WAL will fail until you take a new base backup. Once a cluster with tablespaces has a base backup, you can restore a new cluster from it. When it comes to the recovery side, it's your responsibility to ensure that the Cluster definition of the recovered database contains the exact list of tablespaces.","title":"Backup and recovery"},{"location":"tablespaces/#replica-clusters","text":"Replica clusters must have the same tablespace definition as their origin. The reason is that tablespace management commands like CREATE TABLESPACE are WAL logged and are replayed by any physical replication client (streaming or by way of WAL shipping). It's your responsibility to ensure that replica clusters have the same list of tablespaces, with the same name. Storage class and size might vary. For example: spec: # ... bootstrap: recovery: # ... your selected recovery method tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 storage: size: 2Gi","title":"Replica clusters"},{"location":"tablespaces/#temporary-tablespaces","text":"PostgreSQL allows you to define one or more temporary tablespaces to create temporary objects (temporary tables and indexes on temporary tables) when a CREATE command doesn't explicitly specify a tablespace, and to create temporary files for purposes such as sorting large data sets. When no temporary tablespace is specified, PostgreSQL uses the default tablespace of a database, which is currently the main PGDATA volume. When you specify more than one temporary tablespace, PostgreSQL randomly picks one the first time a temporary object needs to be created in a transaction. Then it sequentially iterates through the list. Temporary tablespaces also work like regular tablespaces with regard to backups. CloudNativePG provides the .spec.tablespaces[*].temporary option to determine whether to add a tablespace to the temp_tablespaces PostgreSQL parameter and thus become eligible to store temporary data that doesn't have an explicit tablespace assignment. spec: [...] tablespaces: - name: atablespace storage: size: 1Gi temporary: true They can be created at initialization time or added later, requiring a rolling update. The temporary: true/false option adds or removes the tablespace name to or from the list of tablespaces in the temp_tablespaces option. This change doesn't require a restart of PostgreSQL. Although temporary tablespaces can also work as regular tablespaces (meaning that users can also host regular data on them while using them for temporary operations), we recommend that you don't mix the two workloads. See the PostgreSQL documentation on temp_tablespaces for details.","title":"Temporary tablespaces"},{"location":"tablespaces/#kubectl-plugin-support","text":"The kubectl status plugin includes a section dedicated to tablespaces that offers a convenient overview, including tablespace status, owner, temporary flag, and any errors: [...] Tablespaces status Tablespace Owner Status Temporary Error ---------- ----- ------ --------- ----- atablespace app reconciled true another_tablespace app reconciled true tablespacea1 app reconciled false Instances status [...]","title":"kubectl plugin support"},{"location":"tablespaces/#limitations","text":"Currently, you can't remove tablespaces from an existing CloudNativePG cluster.","title":"Limitations"},{"location":"troubleshooting/","text":"Troubleshooting In this page, you can find some basic information on how to troubleshoot CloudNativePG in your Kubernetes cluster deployment. Hint As a Kubernetes administrator, you should have the kubectl Cheat Sheet page bookmarked! Before you start Kubernetes environment What can make a difference in a troubleshooting activity is to provide clear information about the underlying Kubernetes system. Make sure you know: the Kubernetes distribution and version you are using the specifications of the nodes where PostgreSQL is running as much as you can about the actual storage , including storage class and benchmarks you have done before going into production. which relevant Kubernetes applications you are using in your cluster (i.e. Prometheus, Grafana, Istio, Certmanager, ...) the situation of continuous backup, in particular if it's in place and working correctly: in case it is not, make sure you take an emergency backup before performing any potential disrupting operation Useful utilities On top of the mandatory kubectl utility, for troubleshooting, we recommend the following plugins/utilities to be available in your system: cnpg plugin for kubectl jq , a lightweight and flexible command-line JSON processor grep , searches one or more input files for lines containing a match to a specified pattern. It is already available in most *nix distros. If you are on Windows OS, you can use findstr as an alternative to grep or directly use wsl and install your preferred *nix distro and use the tools mentioned above. First steps To quickly get an overview of the cluster or installation, the kubectl plugin is the primary tool to use: the status subcommand provides an overview of a cluster the report subcommand provides the manifests for clusters and the operator deployment. It can also include logs using the --logs option. The report generated via the plugin will include the full cluster manifest. The plugin can be installed on air-gapped systems via packages. Please refer to the plugin document for complete instructions. Are there backups? After getting the cluster manifest with the plugin, you should verify if backups are set up and working. Before proceeding with troubleshooting operations, it may be advisable to perform an emergency backup depending on your findings regarding backups. Refer to the following section for instructions. It is extremely risky to operate a production database without keeping regular backups. Emergency backup In some emergency situations, you might need to take an emergency logical backup of the main app database. Important The instructions you find below must be executed only in emergency situations and the temporary backup files kept under the data protection policies that are effective in your organization. The dump file is indeed stored in the client machine that runs the kubectl command, so make sure that all protections are in place and you have enough space to store the backup file. The following example shows how to take a logical backup of the app database in the cluster-example Postgres cluster, from the cluster-example-1 pod: kubectl exec cluster-example-1 -c postgres \\ -- pg_dump -Fc -d app > app.dump Note You can easily adapt the above command to backup your cluster, by providing the names of the objects you have used in your environment. The above command issues a pg_dump command in custom format, which is the most versatile way to take logical backups in PostgreSQL . The next step is to restore the database. We assume that you are operating on a new PostgreSQL cluster that's been just initialized (so the app database is empty). The following example shows how to restore the above logical backup in the app database of the new-cluster-example Postgres cluster, by connecting to the primary ( new-cluster-example-1 pod): kubectl exec -i new-cluster-example-1 -c postgres \\ -- pg_restore --no-owner --role=app -d app --verbose < app.dump Important The example in this section assumes that you have no other global objects (databases and roles) to dump and restore, as per our recommendation. In case you have multiple roles, make sure you have taken a backup using pg_dumpall -g and you manually restore them in the new cluster. In case you have multiple databases, you need to repeat the above operation one database at a time, making sure you assign the right ownership. If you are not familiar with PostgreSQL, we advise that you do these critical operations under the guidance of a professional support company. The above steps might be integrated into the cnpg plugin at some stage in the future. Logs All resources created and managed by CloudNativePG log to standard output in accordance with Kubernetes conventions, using JSON format . While logs are typically processed at the infrastructure level and include those from CloudNativePG, accessing logs directly from the command line interface is critical during troubleshooting. You have three primary options for doing so: Use the kubectl logs command to retrieve logs from a specific resource, and apply jq for better readability. Use the kubectl cnpg logs command for CloudNativePG-specific logging. Leverage specialized open-source tools like stern , which can aggregate logs from multiple resources (e.g., all pods in a PostgreSQL cluster by selecting the cnpg.io/clusterName label), filter log entries, customize output formats, and more. Note The following sections provide examples of how to retrieve logs for various resources when troubleshooting CloudNativePG. Operator information By default, the CloudNativePG operator is installed in the cnpg-system namespace in Kubernetes as a Deployment (see the \"Details about the deployment\" section for details). You can get a list of the operator pods by running: kubectl get pods -n cnpg-system Note Under normal circumstances, you should have one pod where the operator is running, identified by a name starting with cnpg-controller-manager- . In case you have set up your operator for high availability, you should have more entries. Those pods are managed by a deployment named cnpg-controller-manager . Collect the relevant information about the operator that is running in pod <POD> with: kubectl describe pod -n cnpg-system <POD> Then get the logs from the same pod by running: kubectl logs -n cnpg-system <POD> Gather more information about the operator Get logs from all pods in CloudNativePG operator Deployment (in case you have a multi operator deployment) by running: kubectl logs -n cnpg-system \\ deployment/cnpg-controller-manager --all-containers=true Tip You can add -f flag to above command to follow logs in real time. Save logs to a JSON file by running: kubectl logs -n cnpg-system \\ deployment/cnpg-controller-manager --all-containers=true | \\ jq -r . > cnpg_logs.json Get CloudNativePG operator version by using kubectl-cnpg plugin: kubectl-cnpg status <CLUSTER> Output: Cluster in healthy state Name: cluster-example Namespace: default System ID: 7044925089871458324 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:17.5-3 Primary instance: cluster-example-1 Instances: 3 Ready instances: 3 Current Write LSN: 0/5000000 (Timeline: 1 - WAL File: 000000010000000000000004) Continuous Backup status Not configured Streaming Replication status Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- cluster-example-2 0/5000000 0/5000000 0/5000000 0/5000000 00:00:00 00:00:00 00:00:00 streaming async 0 cluster-example-3 0/5000000 0/5000000 0/5000000 0/5000000 00:00:00.10033 00:00:00.10033 00:00:00.10033 streaming async 0 Instances status Name Database Size Current LSN Replication role Status QoS Manager Version ---- ------------- ----------- ---------------- ------ --- --------------- cluster-example-1 33 MB 0/5000000 Primary OK BestEffort 1.12.0 cluster-example-2 33 MB 0/5000000 Standby (async) OK BestEffort 1.12.0 cluster-example-3 33 MB 0/5000060 Standby (async) OK BestEffort 1.12.0 Cluster information You can check the status of the <CLUSTER> cluster in the NAMESPACE namespace with: kubectl get cluster -n <NAMESPACE> <CLUSTER> Output: NAME AGE INSTANCES READY STATUS PRIMARY <CLUSTER> 10d4h3m 3 3 Cluster in healthy state <CLUSTER>-1 The above example reports a healthy PostgreSQL cluster of 3 instances, all in ready state, and with <CLUSTER>-1 being the primary. In case of unhealthy conditions, you can discover more by getting the manifest of the Cluster resource: kubectl get cluster -o yaml -n <NAMESPACE> <CLUSTER> Another important command to gather is the status one, as provided by the cnpg plugin: kubectl cnpg status -n <NAMESPACE> <CLUSTER> Tip You can print more information by adding the --verbose option. Get PostgreSQL container image version: kubectl describe cluster <CLUSTER_NAME> -n <NAMESPACE> | grep \"Image Name\" Output: Image Name: ghcr.io/cloudnative-pg/postgresql:17.5-3 Note Also you can use kubectl-cnpg status -n <NAMESPACE> <CLUSTER_NAME> to get the same information. Pod information You can retrieve the list of instances that belong to a given PostgreSQL cluster with: kubectl get pod -l cnpg.io/cluster=<CLUSTER> -L role -n <NAMESPACE> Output: NAME READY STATUS RESTARTS AGE ROLE <CLUSTER>-1 1/1 Running 0 10d4h5m primary <CLUSTER>-2 1/1 Running 0 10d4h4m replica <CLUSTER>-3 1/1 Running 0 10d4h4m replica You can check if/how a pod is failing by running: kubectl get pod -n <NAMESPACE> -o yaml <CLUSTER>-<N> You can get all the logs for a given PostgreSQL instance with: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> If you want to limit the search to the PostgreSQL process only, you can run: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq 'select(.logger==\"postgres\") | .record.message' The following example also adds the timestamp: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r 'select(.logger==\"postgres\") | [.ts, .record.message] | @csv' If the timestamp is displayed in Unix Epoch time, you can convert it to a user-friendly format: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r 'select(.logger==\"postgres\") | [(.ts|strflocaltime(\"%Y-%m-%dT%H:%M:%S %Z\")), .record.message] | @csv' Gather and filter extra information about PostgreSQL pods Check logs from a specific pod that has crashed: kubectl logs -n <NAMESPACE> --previous <CLUSTER>-<N> Get FATAL errors from a specific PostgreSQL pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '.record | select(.error_severity == \"FATAL\")' Output: { \"log_time\": \"2021-11-08 14:07:44.520 UTC\", \"user_name\": \"streaming_replica\", \"process_id\": \"68\", \"connection_from\": \"10.244.0.10:60616\", \"session_id\": \"61892f30.44\", \"session_line_num\": \"1\", \"command_tag\": \"startup\", \"session_start_time\": \"2021-11-08 14:07:44 UTC\", \"virtual_transaction_id\": \"3/75\", \"transaction_id\": \"0\", \"error_severity\": \"FATAL\", \"sql_state_code\": \"28000\", \"message\": \"role \\\"streaming_replica\\\" does not exist\", \"backend_type\": \"walsender\" } Filter PostgreSQL DB error messages in logs for a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | jq -r '.err | select(. != null)' Output: dial unix /controller/run/.s.PGSQL.5432: connect: no such file or directory Get messages matching err word from a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | jq -r '.msg' | grep \"err\" Output: 2021-11-08 14:07:39.610 UTC [15] LOG: ending log output to stderr Get all logs from PostgreSQL process from a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '. | select(.logger == \"postgres\") | select(.msg != \"record\") | .msg' Output: 2021-11-08 14:07:52.591 UTC [16] LOG: redirecting log output to logging collector process 2021-11-08 14:07:52.591 UTC [16] HINT: Future log output will appear in directory \"/controller/log\". 2021-11-08 14:07:52.591 UTC [16] LOG: ending log output to stderr 2021-11-08 14:07:52.591 UTC [16] HINT: Future log output will go to log destination \"csvlog\". Get pod logs filtered by fields with values and join them separated by | running: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '[.level, .ts, .logger, .msg] | join(\" | \")' Output: info | 1636380469.5728037 | wal-archive | Backup not configured, skip WAL archiving info | 1636383566.0664876 | postgres | record Backup information You can list the backups that have been created for a named cluster with: kubectl get backup -l cnpg.io/cluster=<CLUSTER> Storage information Sometimes is useful to double-check the StorageClass used by the cluster to have some more context during investigations or troubleshooting, like this: STORAGECLASS=$(kubectl get pvc <POD> -o jsonpath='{.spec.storageClassName}') kubectl get storageclasses $STORAGECLASS -o yaml We are taking the StorageClass from one of the cluster pod here since often clusters are created using the default StorageClass. Node information Kubernetes nodes is where ultimately PostgreSQL pods will be running. It's strategically important to know as much as we can about them. You can get the list of nodes in your Kubernetes cluster with: # look at the worker nodes and their status kubectl get nodes -o wide Additionally, you can gather the list of nodes where the pods of a given cluster are running with: kubectl get pod -l cnpg.io/cluster=<CLUSTER> \\ -L role -n <NAMESPACE> -o wide The latter is important to understand where your pods are distributed - very useful if you are using affinity/anti-affinity rules and/or tolerations . Conditions Like many native kubernetes objects like here , Cluster exposes status.conditions as well. This allows one to 'wait' for a particular event to occur instead of relying on the overall cluster health state. Available conditions as of now are: LastBackupSucceeded ContinuousArchiving Ready LastBackupSucceeded is reporting the status of the latest backup. If set to True the last backup has been taken correctly, it is set to False otherwise. ContinuousArchiving is reporting the status of the WAL archiving. If set to True the last WAL archival process has been terminated correctly, it is set to False otherwise. Ready is True when the cluster has the number of instances specified by the user and the primary instance is ready. This condition can be used in scripts to wait for the cluster to be created. How to wait for a particular condition Backup: $ kubectl wait --for=condition=LastBackupSucceeded cluster/<CLUSTER-NAME> -n <NAMESPACE> ContinuousArchiving: $ kubectl wait --for=condition=ContinuousArchiving cluster/<CLUSTER-NAME> -n <NAMESPACE> Ready (Cluster is ready or not): $ kubectl wait --for=condition=Ready cluster/<CLUSTER-NAME> -n <NAMESPACE> Below is a snippet of a cluster.status that contains a failing condition. $ kubectl get cluster/<cluster-name> -o yaml . . . status: conditions: - message: 'unexpected failure invoking barman-cloud-wal-archive: exit status 2' reason: ContinuousArchivingFailing status: \"False\" type: ContinuousArchiving - message: exit status 2 reason: LastBackupFailed status: \"False\" type: LastBackupSucceeded - message: Cluster Is Not Ready reason: ClusterIsNotReady status: \"False\" type: Ready Networking CloudNativePG requires basic networking and connectivity in place. You can find more information in the networking section. If installing CloudNativePG in an existing environment, there might be network policies in place, or other network configuration made specifically for the cluster, which could have an impact on the required connectivity between the operator and the cluster pods and/or the between the pods. You can look for existing network policies with the following command: kubectl get networkpolicies There might be several network policies set up by the Kubernetes network administrator. $ kubectl get networkpolicies NAME POD-SELECTOR AGE allow-prometheus cnpg.io/cluster=cluster-example 47m default-deny-ingress <none> 57m PostgreSQL core dumps Although rare, PostgreSQL can sometimes crash and generate a core dump in the PGDATA folder. When that happens, normally it is a bug in PostgreSQL (and most likely it has already been solved - this is why it is important to always run the latest minor version of PostgreSQL). CloudNativePG allows you to control what to include in the core dump through the cnpg.io/coredumpFilter annotation. Info Please refer to \"Labels and annotations\" for more details on the standard annotations that CloudNativePG provides. By default, the cnpg.io/coredumpFilter is set to 0x31 in order to exclude shared memory segments from the dump, as this is the safest approach in most cases. Info Please refer to \"Core dump filtering settings\" section of \"The /proc Filesystem\" page of the Linux Kernel documentation . for more details on how to set the bitmask that controls the core dump filter. Important Beware that this setting only takes effect during Pod startup and that changing the annotation doesn't trigger an automated rollout of the instances. Although you might not personally be involved in inspecting core dumps, you might be asked to provide them so that a Postgres expert can look into them. First, verify that you have a core dump in the PGDATA directory with the following command (please run it against the correct pod where the Postgres instance is running): kubectl exec -ti POD -c postgres \\ -- find /var/lib/postgresql/data/pgdata -name 'core.*' Under normal circumstances, this should return an empty set. Suppose, for example, that we have a core dump file: /var/lib/postgresql/data/pgdata/core.14177 Once you have verified the space on disk is sufficient, you can collect the core dump on your machine through kubectl cp as follows: kubectl cp POD:/var/lib/postgresql/data/pgdata/core.14177 core.14177 You now have the file. Make sure you free the space on the server by removing the core dumps. Some known issues Storage is full In case the storage is full, the PostgreSQL pods will not be able to write new data, or, in case of the disk containing the WAL segments being full, PostgreSQL will shut down. If you see messages in the logs about the disk being full, you should increase the size of the affected PVC. You can do this by editing the PVC and changing the spec.resources.requests.storage field. After that, you should also update the Cluster resource with the new size to apply the same change to all the pods. Please look at the \"Volume expansion\" section in the documentation. If the space for WAL segments is exhausted, the pod will be crash-looping and the cluster status will report Not enough disk space . Increasing the size in the PVC and then in the Cluster resource will solve the issue. See also the \"Disk Full Failure\" section Pods are stuck in Pending state In case a Cluster's instance is stuck in the Pending phase, you should check the pod's Events section to get an idea of the reasons behind this: kubectl describe pod -n <NAMESPACE> <POD> Some of the possible causes for this are: No nodes are matching the nodeSelector Tolerations are not correctly configured to match the nodes' taints No nodes are available at all: this could also be related to cluster-autoscaler hitting some limits, or having some temporary issues In this case, it could also be useful to check events in the namespace: kubectl get events -n <NAMESPACE> # list events in chronological order kubectl get events -n <NAMESPACE> --sort-by=.metadata.creationTimestamp Replicas out of sync when no backup is configured Sometimes replicas might be switched off for a bit of time due to maintenance reasons (think of when a Kubernetes nodes is drained). In case your cluster does not have backup configured, when replicas come back up, they might require a WAL file that is not present anymore on the primary (having been already recycled according to the WAL management policies as mentioned in \"The postgresql section\" ), and fall out of synchronization. Similarly, when pg_rewind might require a WAL file that is not present anymore in the former primary, reporting pg_rewind: error: could not open file . In these cases, pods cannot become ready anymore, and you are required to delete the PVC and let the operator rebuild the replica. If you rely on dynamically provisioned Persistent Volumes, and you are confident in deleting the PV itself, you can do so with: PODNAME=<POD> VOLNAME=$(kubectl get pv -o json | \\ jq -r '.items[]|select(.spec.claimRef.name=='\\\"$PODNAME\\\"')|.metadata.name') kubectl delete pod/$PODNAME pvc/$PODNAME pvc/$PODNAME-wal pv/$VOLNAME Cluster stuck in Creating new replica Cluster is stuck in \"Creating a new replica\", while pod logs don't show relevant problems. This has been found to be related to the next issue on connectivity . Networking issues are reflected in the status column as follows: Instance Status Extraction Error: HTTP communication issue Networking is impaired by installed Network Policies As pointed out in the networking section , local network policies could prevent some of the required connectivity. A tell-tale sign that connectivity is impaired is the presence in the operator logs of messages like: \"Cannot extract Pod status\", [\u2026snipped\u2026] \"Get \\\"http://<pod IP>:8000/pg/status\\\": dial tcp <pod IP>:8000: i/o timeout\" You should list the network policies, and look for any policies restricting connectivity. $ kubectl get networkpolicies NAME POD-SELECTOR AGE allow-prometheus cnpg.io/cluster=cluster-example 47m default-deny-ingress <none> 57m For example, in the listing above, default-deny-ingress seems a likely culprit. You can drill into it: $ kubectl get networkpolicies default-deny-ingress -o yaml <\u2026snipped\u2026> spec: podSelector: {} policyTypes: - Ingress In the networking page you can find a network policy file that you can customize to create a NetworkPolicy explicitly allowing the operator to connect cross-namespace to cluster pods. Error while bootstrapping the data directory If your Cluster's initialization job crashes with a \"Bus error (core dumped) child process exited with exit code 135\", you likely need to fix the Cluster hugepages settings. The reason is the incomplete support of hugepages in the cgroup v1 that should be fixed in v2. For more information, check the PostgreSQL BUG #17757: Not honoring huge_pages setting during initdb causes DB crash in Kubernetes . To check whether hugepages are enabled, run grep HugePages /proc/meminfo on the Kubernetes node and check if hugepages are present, their size, and how many are free. If the hugepages are present, you need to configure how much hugepages memory every PostgreSQL pod should have available. For example: postgresql: parameters: shared_buffers: \"128MB\" resources: requests: memory: \"512Mi\" limits: hugepages-2Mi: \"512Mi\" Please remember that you must have enough hugepages memory available to schedule every Pod in the Cluster (in the example above, at least 512MiB per Pod must be free). Bootstrap job hangs in running status If your Cluster's initialization job hangs while in Running status with the message: \"error while waiting for the API server to be reachable\", you probably have a network issue preventing communication with the Kubernetes API server. Initialization jobs (like most of jobs) need to access the Kubernetes API. Please check your networking. Another possible cause is when you have sidecar injection configured. Sidecars such as Istio may make the network temporarily unavailable during startup. If you have sidecar injection enabled, retry with injection disabled. Replicas take over two minutes to reconnect after a failover When the primary instance fails, the operator promotes the most advanced standby to the primary role. Other standby instances then attempt to reconnect to the -rw service for replication. However, during this reconnection process, kube-proxy may not have updated its routing information yet. As a result, the initial SYN packet sent by the standby instances might fail to reach its intended destination. If the network is configured to silently drop packets instead of rejecting them, standby instances will not receive a response and will retry the connection after an exponential backoff period. On Linux systems, the default value for the tcp_syn_retries kernel parameter is 6, meaning the system will attempt to establish the connection for approximately 127 seconds before giving up. This prolonged retry period can significantly delay the reconnection process. For more details, consult the tcp_syn_retries documentation . You can work around this issue by setting STANDBY_TCP_USER_TIMEOUT in the operator configuration . This will cause the standby instances to close the TCP connection if the initial SYN packet is not acknowledged within the specified timeout, allowing them to retry the connection more quickly.","title":"Troubleshooting"},{"location":"troubleshooting/#troubleshooting","text":"In this page, you can find some basic information on how to troubleshoot CloudNativePG in your Kubernetes cluster deployment. Hint As a Kubernetes administrator, you should have the kubectl Cheat Sheet page bookmarked!","title":"Troubleshooting"},{"location":"troubleshooting/#before-you-start","text":"","title":"Before you start"},{"location":"troubleshooting/#kubernetes-environment","text":"What can make a difference in a troubleshooting activity is to provide clear information about the underlying Kubernetes system. Make sure you know: the Kubernetes distribution and version you are using the specifications of the nodes where PostgreSQL is running as much as you can about the actual storage , including storage class and benchmarks you have done before going into production. which relevant Kubernetes applications you are using in your cluster (i.e. Prometheus, Grafana, Istio, Certmanager, ...) the situation of continuous backup, in particular if it's in place and working correctly: in case it is not, make sure you take an emergency backup before performing any potential disrupting operation","title":"Kubernetes environment"},{"location":"troubleshooting/#useful-utilities","text":"On top of the mandatory kubectl utility, for troubleshooting, we recommend the following plugins/utilities to be available in your system: cnpg plugin for kubectl jq , a lightweight and flexible command-line JSON processor grep , searches one or more input files for lines containing a match to a specified pattern. It is already available in most *nix distros. If you are on Windows OS, you can use findstr as an alternative to grep or directly use wsl and install your preferred *nix distro and use the tools mentioned above.","title":"Useful utilities"},{"location":"troubleshooting/#first-steps","text":"To quickly get an overview of the cluster or installation, the kubectl plugin is the primary tool to use: the status subcommand provides an overview of a cluster the report subcommand provides the manifests for clusters and the operator deployment. It can also include logs using the --logs option. The report generated via the plugin will include the full cluster manifest. The plugin can be installed on air-gapped systems via packages. Please refer to the plugin document for complete instructions.","title":"First steps"},{"location":"troubleshooting/#are-there-backups","text":"After getting the cluster manifest with the plugin, you should verify if backups are set up and working. Before proceeding with troubleshooting operations, it may be advisable to perform an emergency backup depending on your findings regarding backups. Refer to the following section for instructions. It is extremely risky to operate a production database without keeping regular backups.","title":"Are there backups?"},{"location":"troubleshooting/#emergency-backup","text":"In some emergency situations, you might need to take an emergency logical backup of the main app database. Important The instructions you find below must be executed only in emergency situations and the temporary backup files kept under the data protection policies that are effective in your organization. The dump file is indeed stored in the client machine that runs the kubectl command, so make sure that all protections are in place and you have enough space to store the backup file. The following example shows how to take a logical backup of the app database in the cluster-example Postgres cluster, from the cluster-example-1 pod: kubectl exec cluster-example-1 -c postgres \\ -- pg_dump -Fc -d app > app.dump Note You can easily adapt the above command to backup your cluster, by providing the names of the objects you have used in your environment. The above command issues a pg_dump command in custom format, which is the most versatile way to take logical backups in PostgreSQL . The next step is to restore the database. We assume that you are operating on a new PostgreSQL cluster that's been just initialized (so the app database is empty). The following example shows how to restore the above logical backup in the app database of the new-cluster-example Postgres cluster, by connecting to the primary ( new-cluster-example-1 pod): kubectl exec -i new-cluster-example-1 -c postgres \\ -- pg_restore --no-owner --role=app -d app --verbose < app.dump Important The example in this section assumes that you have no other global objects (databases and roles) to dump and restore, as per our recommendation. In case you have multiple roles, make sure you have taken a backup using pg_dumpall -g and you manually restore them in the new cluster. In case you have multiple databases, you need to repeat the above operation one database at a time, making sure you assign the right ownership. If you are not familiar with PostgreSQL, we advise that you do these critical operations under the guidance of a professional support company. The above steps might be integrated into the cnpg plugin at some stage in the future.","title":"Emergency backup"},{"location":"troubleshooting/#logs","text":"All resources created and managed by CloudNativePG log to standard output in accordance with Kubernetes conventions, using JSON format . While logs are typically processed at the infrastructure level and include those from CloudNativePG, accessing logs directly from the command line interface is critical during troubleshooting. You have three primary options for doing so: Use the kubectl logs command to retrieve logs from a specific resource, and apply jq for better readability. Use the kubectl cnpg logs command for CloudNativePG-specific logging. Leverage specialized open-source tools like stern , which can aggregate logs from multiple resources (e.g., all pods in a PostgreSQL cluster by selecting the cnpg.io/clusterName label), filter log entries, customize output formats, and more. Note The following sections provide examples of how to retrieve logs for various resources when troubleshooting CloudNativePG.","title":"Logs"},{"location":"troubleshooting/#operator-information","text":"By default, the CloudNativePG operator is installed in the cnpg-system namespace in Kubernetes as a Deployment (see the \"Details about the deployment\" section for details). You can get a list of the operator pods by running: kubectl get pods -n cnpg-system Note Under normal circumstances, you should have one pod where the operator is running, identified by a name starting with cnpg-controller-manager- . In case you have set up your operator for high availability, you should have more entries. Those pods are managed by a deployment named cnpg-controller-manager . Collect the relevant information about the operator that is running in pod <POD> with: kubectl describe pod -n cnpg-system <POD> Then get the logs from the same pod by running: kubectl logs -n cnpg-system <POD>","title":"Operator information"},{"location":"troubleshooting/#gather-more-information-about-the-operator","text":"Get logs from all pods in CloudNativePG operator Deployment (in case you have a multi operator deployment) by running: kubectl logs -n cnpg-system \\ deployment/cnpg-controller-manager --all-containers=true Tip You can add -f flag to above command to follow logs in real time. Save logs to a JSON file by running: kubectl logs -n cnpg-system \\ deployment/cnpg-controller-manager --all-containers=true | \\ jq -r . > cnpg_logs.json Get CloudNativePG operator version by using kubectl-cnpg plugin: kubectl-cnpg status <CLUSTER> Output: Cluster in healthy state Name: cluster-example Namespace: default System ID: 7044925089871458324 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:17.5-3 Primary instance: cluster-example-1 Instances: 3 Ready instances: 3 Current Write LSN: 0/5000000 (Timeline: 1 - WAL File: 000000010000000000000004) Continuous Backup status Not configured Streaming Replication status Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- cluster-example-2 0/5000000 0/5000000 0/5000000 0/5000000 00:00:00 00:00:00 00:00:00 streaming async 0 cluster-example-3 0/5000000 0/5000000 0/5000000 0/5000000 00:00:00.10033 00:00:00.10033 00:00:00.10033 streaming async 0 Instances status Name Database Size Current LSN Replication role Status QoS Manager Version ---- ------------- ----------- ---------------- ------ --- --------------- cluster-example-1 33 MB 0/5000000 Primary OK BestEffort 1.12.0 cluster-example-2 33 MB 0/5000000 Standby (async) OK BestEffort 1.12.0 cluster-example-3 33 MB 0/5000060 Standby (async) OK BestEffort 1.12.0","title":"Gather more information about the operator"},{"location":"troubleshooting/#cluster-information","text":"You can check the status of the <CLUSTER> cluster in the NAMESPACE namespace with: kubectl get cluster -n <NAMESPACE> <CLUSTER> Output: NAME AGE INSTANCES READY STATUS PRIMARY <CLUSTER> 10d4h3m 3 3 Cluster in healthy state <CLUSTER>-1 The above example reports a healthy PostgreSQL cluster of 3 instances, all in ready state, and with <CLUSTER>-1 being the primary. In case of unhealthy conditions, you can discover more by getting the manifest of the Cluster resource: kubectl get cluster -o yaml -n <NAMESPACE> <CLUSTER> Another important command to gather is the status one, as provided by the cnpg plugin: kubectl cnpg status -n <NAMESPACE> <CLUSTER> Tip You can print more information by adding the --verbose option. Get PostgreSQL container image version: kubectl describe cluster <CLUSTER_NAME> -n <NAMESPACE> | grep \"Image Name\" Output: Image Name: ghcr.io/cloudnative-pg/postgresql:17.5-3 Note Also you can use kubectl-cnpg status -n <NAMESPACE> <CLUSTER_NAME> to get the same information.","title":"Cluster information"},{"location":"troubleshooting/#pod-information","text":"You can retrieve the list of instances that belong to a given PostgreSQL cluster with: kubectl get pod -l cnpg.io/cluster=<CLUSTER> -L role -n <NAMESPACE> Output: NAME READY STATUS RESTARTS AGE ROLE <CLUSTER>-1 1/1 Running 0 10d4h5m primary <CLUSTER>-2 1/1 Running 0 10d4h4m replica <CLUSTER>-3 1/1 Running 0 10d4h4m replica You can check if/how a pod is failing by running: kubectl get pod -n <NAMESPACE> -o yaml <CLUSTER>-<N> You can get all the logs for a given PostgreSQL instance with: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> If you want to limit the search to the PostgreSQL process only, you can run: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq 'select(.logger==\"postgres\") | .record.message' The following example also adds the timestamp: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r 'select(.logger==\"postgres\") | [.ts, .record.message] | @csv' If the timestamp is displayed in Unix Epoch time, you can convert it to a user-friendly format: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r 'select(.logger==\"postgres\") | [(.ts|strflocaltime(\"%Y-%m-%dT%H:%M:%S %Z\")), .record.message] | @csv'","title":"Pod information"},{"location":"troubleshooting/#gather-and-filter-extra-information-about-postgresql-pods","text":"Check logs from a specific pod that has crashed: kubectl logs -n <NAMESPACE> --previous <CLUSTER>-<N> Get FATAL errors from a specific PostgreSQL pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '.record | select(.error_severity == \"FATAL\")' Output: { \"log_time\": \"2021-11-08 14:07:44.520 UTC\", \"user_name\": \"streaming_replica\", \"process_id\": \"68\", \"connection_from\": \"10.244.0.10:60616\", \"session_id\": \"61892f30.44\", \"session_line_num\": \"1\", \"command_tag\": \"startup\", \"session_start_time\": \"2021-11-08 14:07:44 UTC\", \"virtual_transaction_id\": \"3/75\", \"transaction_id\": \"0\", \"error_severity\": \"FATAL\", \"sql_state_code\": \"28000\", \"message\": \"role \\\"streaming_replica\\\" does not exist\", \"backend_type\": \"walsender\" } Filter PostgreSQL DB error messages in logs for a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | jq -r '.err | select(. != null)' Output: dial unix /controller/run/.s.PGSQL.5432: connect: no such file or directory Get messages matching err word from a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | jq -r '.msg' | grep \"err\" Output: 2021-11-08 14:07:39.610 UTC [15] LOG: ending log output to stderr Get all logs from PostgreSQL process from a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '. | select(.logger == \"postgres\") | select(.msg != \"record\") | .msg' Output: 2021-11-08 14:07:52.591 UTC [16] LOG: redirecting log output to logging collector process 2021-11-08 14:07:52.591 UTC [16] HINT: Future log output will appear in directory \"/controller/log\". 2021-11-08 14:07:52.591 UTC [16] LOG: ending log output to stderr 2021-11-08 14:07:52.591 UTC [16] HINT: Future log output will go to log destination \"csvlog\". Get pod logs filtered by fields with values and join them separated by | running: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '[.level, .ts, .logger, .msg] | join(\" | \")' Output: info | 1636380469.5728037 | wal-archive | Backup not configured, skip WAL archiving info | 1636383566.0664876 | postgres | record","title":"Gather and filter extra information about PostgreSQL pods"},{"location":"troubleshooting/#backup-information","text":"You can list the backups that have been created for a named cluster with: kubectl get backup -l cnpg.io/cluster=<CLUSTER>","title":"Backup information"},{"location":"troubleshooting/#storage-information","text":"Sometimes is useful to double-check the StorageClass used by the cluster to have some more context during investigations or troubleshooting, like this: STORAGECLASS=$(kubectl get pvc <POD> -o jsonpath='{.spec.storageClassName}') kubectl get storageclasses $STORAGECLASS -o yaml We are taking the StorageClass from one of the cluster pod here since often clusters are created using the default StorageClass.","title":"Storage information"},{"location":"troubleshooting/#node-information","text":"Kubernetes nodes is where ultimately PostgreSQL pods will be running. It's strategically important to know as much as we can about them. You can get the list of nodes in your Kubernetes cluster with: # look at the worker nodes and their status kubectl get nodes -o wide Additionally, you can gather the list of nodes where the pods of a given cluster are running with: kubectl get pod -l cnpg.io/cluster=<CLUSTER> \\ -L role -n <NAMESPACE> -o wide The latter is important to understand where your pods are distributed - very useful if you are using affinity/anti-affinity rules and/or tolerations .","title":"Node information"},{"location":"troubleshooting/#conditions","text":"Like many native kubernetes objects like here , Cluster exposes status.conditions as well. This allows one to 'wait' for a particular event to occur instead of relying on the overall cluster health state. Available conditions as of now are: LastBackupSucceeded ContinuousArchiving Ready LastBackupSucceeded is reporting the status of the latest backup. If set to True the last backup has been taken correctly, it is set to False otherwise. ContinuousArchiving is reporting the status of the WAL archiving. If set to True the last WAL archival process has been terminated correctly, it is set to False otherwise. Ready is True when the cluster has the number of instances specified by the user and the primary instance is ready. This condition can be used in scripts to wait for the cluster to be created.","title":"Conditions"},{"location":"troubleshooting/#how-to-wait-for-a-particular-condition","text":"Backup: $ kubectl wait --for=condition=LastBackupSucceeded cluster/<CLUSTER-NAME> -n <NAMESPACE> ContinuousArchiving: $ kubectl wait --for=condition=ContinuousArchiving cluster/<CLUSTER-NAME> -n <NAMESPACE> Ready (Cluster is ready or not): $ kubectl wait --for=condition=Ready cluster/<CLUSTER-NAME> -n <NAMESPACE> Below is a snippet of a cluster.status that contains a failing condition. $ kubectl get cluster/<cluster-name> -o yaml . . . status: conditions: - message: 'unexpected failure invoking barman-cloud-wal-archive: exit status 2' reason: ContinuousArchivingFailing status: \"False\" type: ContinuousArchiving - message: exit status 2 reason: LastBackupFailed status: \"False\" type: LastBackupSucceeded - message: Cluster Is Not Ready reason: ClusterIsNotReady status: \"False\" type: Ready","title":"How to wait for a particular condition"},{"location":"troubleshooting/#networking","text":"CloudNativePG requires basic networking and connectivity in place. You can find more information in the networking section. If installing CloudNativePG in an existing environment, there might be network policies in place, or other network configuration made specifically for the cluster, which could have an impact on the required connectivity between the operator and the cluster pods and/or the between the pods. You can look for existing network policies with the following command: kubectl get networkpolicies There might be several network policies set up by the Kubernetes network administrator. $ kubectl get networkpolicies NAME POD-SELECTOR AGE allow-prometheus cnpg.io/cluster=cluster-example 47m default-deny-ingress <none> 57m","title":"Networking"},{"location":"troubleshooting/#postgresql-core-dumps","text":"Although rare, PostgreSQL can sometimes crash and generate a core dump in the PGDATA folder. When that happens, normally it is a bug in PostgreSQL (and most likely it has already been solved - this is why it is important to always run the latest minor version of PostgreSQL). CloudNativePG allows you to control what to include in the core dump through the cnpg.io/coredumpFilter annotation. Info Please refer to \"Labels and annotations\" for more details on the standard annotations that CloudNativePG provides. By default, the cnpg.io/coredumpFilter is set to 0x31 in order to exclude shared memory segments from the dump, as this is the safest approach in most cases. Info Please refer to \"Core dump filtering settings\" section of \"The /proc Filesystem\" page of the Linux Kernel documentation . for more details on how to set the bitmask that controls the core dump filter. Important Beware that this setting only takes effect during Pod startup and that changing the annotation doesn't trigger an automated rollout of the instances. Although you might not personally be involved in inspecting core dumps, you might be asked to provide them so that a Postgres expert can look into them. First, verify that you have a core dump in the PGDATA directory with the following command (please run it against the correct pod where the Postgres instance is running): kubectl exec -ti POD -c postgres \\ -- find /var/lib/postgresql/data/pgdata -name 'core.*' Under normal circumstances, this should return an empty set. Suppose, for example, that we have a core dump file: /var/lib/postgresql/data/pgdata/core.14177 Once you have verified the space on disk is sufficient, you can collect the core dump on your machine through kubectl cp as follows: kubectl cp POD:/var/lib/postgresql/data/pgdata/core.14177 core.14177 You now have the file. Make sure you free the space on the server by removing the core dumps.","title":"PostgreSQL core dumps"},{"location":"troubleshooting/#some-known-issues","text":"","title":"Some known issues"},{"location":"troubleshooting/#storage-is-full","text":"In case the storage is full, the PostgreSQL pods will not be able to write new data, or, in case of the disk containing the WAL segments being full, PostgreSQL will shut down. If you see messages in the logs about the disk being full, you should increase the size of the affected PVC. You can do this by editing the PVC and changing the spec.resources.requests.storage field. After that, you should also update the Cluster resource with the new size to apply the same change to all the pods. Please look at the \"Volume expansion\" section in the documentation. If the space for WAL segments is exhausted, the pod will be crash-looping and the cluster status will report Not enough disk space . Increasing the size in the PVC and then in the Cluster resource will solve the issue. See also the \"Disk Full Failure\" section","title":"Storage is full"},{"location":"troubleshooting/#pods-are-stuck-in-pending-state","text":"In case a Cluster's instance is stuck in the Pending phase, you should check the pod's Events section to get an idea of the reasons behind this: kubectl describe pod -n <NAMESPACE> <POD> Some of the possible causes for this are: No nodes are matching the nodeSelector Tolerations are not correctly configured to match the nodes' taints No nodes are available at all: this could also be related to cluster-autoscaler hitting some limits, or having some temporary issues In this case, it could also be useful to check events in the namespace: kubectl get events -n <NAMESPACE> # list events in chronological order kubectl get events -n <NAMESPACE> --sort-by=.metadata.creationTimestamp","title":"Pods are stuck in Pending state"},{"location":"troubleshooting/#replicas-out-of-sync-when-no-backup-is-configured","text":"Sometimes replicas might be switched off for a bit of time due to maintenance reasons (think of when a Kubernetes nodes is drained). In case your cluster does not have backup configured, when replicas come back up, they might require a WAL file that is not present anymore on the primary (having been already recycled according to the WAL management policies as mentioned in \"The postgresql section\" ), and fall out of synchronization. Similarly, when pg_rewind might require a WAL file that is not present anymore in the former primary, reporting pg_rewind: error: could not open file . In these cases, pods cannot become ready anymore, and you are required to delete the PVC and let the operator rebuild the replica. If you rely on dynamically provisioned Persistent Volumes, and you are confident in deleting the PV itself, you can do so with: PODNAME=<POD> VOLNAME=$(kubectl get pv -o json | \\ jq -r '.items[]|select(.spec.claimRef.name=='\\\"$PODNAME\\\"')|.metadata.name') kubectl delete pod/$PODNAME pvc/$PODNAME pvc/$PODNAME-wal pv/$VOLNAME","title":"Replicas out of sync when no backup is configured"},{"location":"troubleshooting/#cluster-stuck-in-creating-new-replica","text":"Cluster is stuck in \"Creating a new replica\", while pod logs don't show relevant problems. This has been found to be related to the next issue on connectivity . Networking issues are reflected in the status column as follows: Instance Status Extraction Error: HTTP communication issue","title":"Cluster stuck in Creating new replica"},{"location":"troubleshooting/#networking-is-impaired-by-installed-network-policies","text":"As pointed out in the networking section , local network policies could prevent some of the required connectivity. A tell-tale sign that connectivity is impaired is the presence in the operator logs of messages like: \"Cannot extract Pod status\", [\u2026snipped\u2026] \"Get \\\"http://<pod IP>:8000/pg/status\\\": dial tcp <pod IP>:8000: i/o timeout\" You should list the network policies, and look for any policies restricting connectivity. $ kubectl get networkpolicies NAME POD-SELECTOR AGE allow-prometheus cnpg.io/cluster=cluster-example 47m default-deny-ingress <none> 57m For example, in the listing above, default-deny-ingress seems a likely culprit. You can drill into it: $ kubectl get networkpolicies default-deny-ingress -o yaml <\u2026snipped\u2026> spec: podSelector: {} policyTypes: - Ingress In the networking page you can find a network policy file that you can customize to create a NetworkPolicy explicitly allowing the operator to connect cross-namespace to cluster pods.","title":"Networking is impaired by installed Network Policies"},{"location":"troubleshooting/#error-while-bootstrapping-the-data-directory","text":"If your Cluster's initialization job crashes with a \"Bus error (core dumped) child process exited with exit code 135\", you likely need to fix the Cluster hugepages settings. The reason is the incomplete support of hugepages in the cgroup v1 that should be fixed in v2. For more information, check the PostgreSQL BUG #17757: Not honoring huge_pages setting during initdb causes DB crash in Kubernetes . To check whether hugepages are enabled, run grep HugePages /proc/meminfo on the Kubernetes node and check if hugepages are present, their size, and how many are free. If the hugepages are present, you need to configure how much hugepages memory every PostgreSQL pod should have available. For example: postgresql: parameters: shared_buffers: \"128MB\" resources: requests: memory: \"512Mi\" limits: hugepages-2Mi: \"512Mi\" Please remember that you must have enough hugepages memory available to schedule every Pod in the Cluster (in the example above, at least 512MiB per Pod must be free).","title":"Error while bootstrapping the data directory"},{"location":"troubleshooting/#bootstrap-job-hangs-in-running-status","text":"If your Cluster's initialization job hangs while in Running status with the message: \"error while waiting for the API server to be reachable\", you probably have a network issue preventing communication with the Kubernetes API server. Initialization jobs (like most of jobs) need to access the Kubernetes API. Please check your networking. Another possible cause is when you have sidecar injection configured. Sidecars such as Istio may make the network temporarily unavailable during startup. If you have sidecar injection enabled, retry with injection disabled.","title":"Bootstrap job hangs in running status"},{"location":"troubleshooting/#replicas-take-over-two-minutes-to-reconnect-after-a-failover","text":"When the primary instance fails, the operator promotes the most advanced standby to the primary role. Other standby instances then attempt to reconnect to the -rw service for replication. However, during this reconnection process, kube-proxy may not have updated its routing information yet. As a result, the initial SYN packet sent by the standby instances might fail to reach its intended destination. If the network is configured to silently drop packets instead of rejecting them, standby instances will not receive a response and will retry the connection after an exponential backoff period. On Linux systems, the default value for the tcp_syn_retries kernel parameter is 6, meaning the system will attempt to establish the connection for approximately 127 seconds before giving up. This prolonged retry period can significantly delay the reconnection process. For more details, consult the tcp_syn_retries documentation . You can work around this issue by setting STANDBY_TCP_USER_TIMEOUT in the operator configuration . This will cause the standby instances to close the TCP connection if the initial SYN packet is not acknowledged within the specified timeout, allowing them to retry the connection more quickly.","title":"Replicas take over two minutes to reconnect after a failover"},{"location":"use_cases/","text":"Use cases CloudNativePG has been designed to work with applications that reside in the same Kubernetes cluster, for a full cloud native experience. However, it might happen that, while the database can be hosted inside a Kubernetes cluster, applications cannot be containerized at the same time and need to run in a traditional environment such as a VM. Case 1: Applications inside Kubernetes In a typical situation, the application and the database run in the same namespace inside a Kubernetes cluster. The application, normally stateless, is managed as a standard Deployment , with multiple replicas spread over different Kubernetes node, and internally exposed through a ClusterIP service. The service is exposed externally to the end user through an Ingress and the provider's load balancer facility, via HTTPS. The application uses the backend PostgreSQL database to keep track of the state in a reliable and persistent way. The application refers to the read-write service exposed by the Cluster resource defined by CloudNativePG, which points to the current primary instance, through a TLS connection. The Cluster resource embeds the logic of single primary and multiple standby architecture, hiding the complexity of managing a high availability cluster in Postgres. Case 2: Applications outside Kubernetes Another possible use case is to manage your PostgreSQL database inside Kubernetes, while having your applications outside of it (for example in a virtualized environment). In this case, PostgreSQL is represented by an IP address (or host name) and a TCP port, corresponding to the defined Ingress resource in Kubernetes (normally a LoadBalancer service type as explained in the \"Service Management\" page). The application can still benefit from a TLS connection to PostgreSQL.","title":"Use cases"},{"location":"use_cases/#use-cases","text":"CloudNativePG has been designed to work with applications that reside in the same Kubernetes cluster, for a full cloud native experience. However, it might happen that, while the database can be hosted inside a Kubernetes cluster, applications cannot be containerized at the same time and need to run in a traditional environment such as a VM.","title":"Use cases"},{"location":"use_cases/#case-1-applications-inside-kubernetes","text":"In a typical situation, the application and the database run in the same namespace inside a Kubernetes cluster. The application, normally stateless, is managed as a standard Deployment , with multiple replicas spread over different Kubernetes node, and internally exposed through a ClusterIP service. The service is exposed externally to the end user through an Ingress and the provider's load balancer facility, via HTTPS. The application uses the backend PostgreSQL database to keep track of the state in a reliable and persistent way. The application refers to the read-write service exposed by the Cluster resource defined by CloudNativePG, which points to the current primary instance, through a TLS connection. The Cluster resource embeds the logic of single primary and multiple standby architecture, hiding the complexity of managing a high availability cluster in Postgres.","title":"Case 1: Applications inside Kubernetes"},{"location":"use_cases/#case-2-applications-outside-kubernetes","text":"Another possible use case is to manage your PostgreSQL database inside Kubernetes, while having your applications outside of it (for example in a virtualized environment). In this case, PostgreSQL is represented by an IP address (or host name) and a TCP port, corresponding to the defined Ingress resource in Kubernetes (normally a LoadBalancer service type as explained in the \"Service Management\" page). The application can still benefit from a TLS connection to PostgreSQL.","title":"Case 2: Applications outside Kubernetes"},{"location":"wal_archiving/","text":"WAL archiving Write-Ahead Log (WAL) archiving in CloudNativePG is the process of continuously shipping WAL files to a designated object store from the PostgreSQL primary. These archives are essential for enabling Point-In-Time Recovery (PITR) and are a foundational component for both object store and volume snapshot-based backup strategies. Plugin-Based Architecture CloudNativePG supports WAL archiving through a plugin-based mechanism , defined via the spec.pluginConfiguration section of the Cluster resource. Only one plugin at a time can be responsible for WAL archiving. This is configured by setting the isWALArchiver field to true within the plugin configuration. Supported Plugins Currently, the Barman Cloud Plugin is the only officially supported WAL archiving plugin maintained by the CloudNativePG Community. For full documentation, configuration options, and best practices, see the Barman Cloud Plugin documentation . Deprecation Notice: Native Barman Cloud CloudNativePG still supports WAL archiving natively through the .spec.backup.barmanObjectStore field. While still functional, this interface is deprecated and will be removed in a future release. Important All new deployments are strongly encouraged to adopt the plugin-based architecture, which offers a more flexible and maintainable approach. If you are currently using the native .spec.backup.barmanObjectStore approach, refer to the official guide for a smooth transition: Migrating from Built-in CloudNativePG Backup . About the archive timeout By default, CloudNativePG sets archive_timeout to 5min , ensuring that WAL files, even in case of low workloads, are closed and archived at least every 5 minutes, providing a deterministic time-based value for your Recovery Point Objective ( RPO ). Even though you change the value of the archive_timeout setting in the PostgreSQL configuration , our experience suggests that the default value set by the operator is suitable for most use cases.","title":"WAL archiving"},{"location":"wal_archiving/#wal-archiving","text":"Write-Ahead Log (WAL) archiving in CloudNativePG is the process of continuously shipping WAL files to a designated object store from the PostgreSQL primary. These archives are essential for enabling Point-In-Time Recovery (PITR) and are a foundational component for both object store and volume snapshot-based backup strategies.","title":"WAL archiving"},{"location":"wal_archiving/#plugin-based-architecture","text":"CloudNativePG supports WAL archiving through a plugin-based mechanism , defined via the spec.pluginConfiguration section of the Cluster resource. Only one plugin at a time can be responsible for WAL archiving. This is configured by setting the isWALArchiver field to true within the plugin configuration.","title":"Plugin-Based Architecture"},{"location":"wal_archiving/#supported-plugins","text":"Currently, the Barman Cloud Plugin is the only officially supported WAL archiving plugin maintained by the CloudNativePG Community. For full documentation, configuration options, and best practices, see the Barman Cloud Plugin documentation .","title":"Supported Plugins"},{"location":"wal_archiving/#deprecation-notice-native-barman-cloud","text":"CloudNativePG still supports WAL archiving natively through the .spec.backup.barmanObjectStore field. While still functional, this interface is deprecated and will be removed in a future release. Important All new deployments are strongly encouraged to adopt the plugin-based architecture, which offers a more flexible and maintainable approach. If you are currently using the native .spec.backup.barmanObjectStore approach, refer to the official guide for a smooth transition: Migrating from Built-in CloudNativePG Backup .","title":"Deprecation Notice: Native Barman Cloud"},{"location":"wal_archiving/#about-the-archive-timeout","text":"By default, CloudNativePG sets archive_timeout to 5min , ensuring that WAL files, even in case of low workloads, are closed and archived at least every 5 minutes, providing a deterministic time-based value for your Recovery Point Objective ( RPO ). Even though you change the value of the archive_timeout setting in the PostgreSQL configuration , our experience suggests that the default value set by the operator is suitable for most use cases.","title":"About the archive timeout"},{"location":"appendixes/backup_barmanobjectstore/","text":"Appendix B - Backup on object stores Warning As of CloudNativePG 1.26, native Barman Cloud support is deprecated in favor of the Barman Cloud Plugin . This page has been moved to the appendix for reference purposes. While the native integration remains functional for now, we strongly recommend beginning a gradual migration to the plugin-based interface after appropriate testing. For guidance, see Migrating from Built-in CloudNativePG Backup . CloudNativePG natively supports online/hot backup of PostgreSQL clusters through continuous physical backup and WAL archiving on an object store. This means that the database is always up (no downtime required) and that Point In Time Recovery is available. The operator can orchestrate a continuous backup infrastructure that is based on the Barman Cloud tool. Instead of using the classical architecture with a Barman server, which backs up many PostgreSQL instances, the operator relies on the barman-cloud-wal-archive , barman-cloud-check-wal-archive , barman-cloud-backup , barman-cloud-backup-list , and barman-cloud-backup-delete tools. As a result, base backups will be tarballs . Both base backups and WAL files can be compressed and encrypted. For this, it is required to use an image with barman-cli-cloud included. You can use the image ghcr.io/cloudnative-pg/postgresql for this scope, as it is composed of a community PostgreSQL image and the latest barman-cli-cloud package. Important Always ensure that you are running the latest version of the operands in your system to take advantage of the improvements introduced in Barman cloud (as well as improve the security aspects of your cluster). A backup is performed from a primary or a designated primary instance in a Cluster (please refer to replica clusters for more information about designated primary instances), or alternatively on a standby . Common object stores If you are looking for a specific object store such as AWS S3 , Microsoft Azure Blob Storage , Google Cloud Storage , or a compatible provider, please refer to Appendix C - Common object stores for backups . WAL archiving WAL archiving is the process that feeds a WAL archive in CloudNativePG. The WAL archive is defined in the .spec.backup.barmanObjectStore stanza of a Cluster resource. Info Please refer to BarmanObjectStoreConfiguration in the barman-cloud API for a full list of options. If required, you can choose to compress WAL files as soon as they are uploaded and/or encrypt them: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: compression: gzip encryption: AES256 You can configure the encryption directly in your bucket, and the operator will use it unless you override it in the cluster configuration. PostgreSQL implements a sequential archiving scheme, where the archive_command will be executed sequentially for every WAL segment to be archived. Important By default, CloudNativePG sets archive_timeout to 5min , ensuring that WAL files, even in case of low workloads, are closed and archived at least every 5 minutes, providing a deterministic time-based value for your Recovery Point Objective ( RPO ). Even though you change the value of the archive_timeout setting in the PostgreSQL configuration , our experience suggests that the default value set by the operator is suitable for most use cases. When the bandwidth between the PostgreSQL instance and the object store allows archiving more than one WAL file in parallel, you can use the parallel WAL archiving feature of the instance manager like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: compression: gzip maxParallel: 8 encryption: AES256 In the previous example, the instance manager optimizes the WAL archiving process by archiving in parallel at most eight ready WALs, including the one requested by PostgreSQL. When PostgreSQL will request the archiving of a WAL that has already been archived by the instance manager as an optimization, that archival request will be just dismissed with a positive status. Retention policies CloudNativePG can manage the automated deletion of backup files from the backup object store, using retention policies based on the recovery window. Internally, the retention policy feature uses barman-cloud-backup-delete with --retention-policy \u201cRECOVERY WINDOW OF {{ retention policy value }} {{ retention policy unit }}\u201d . For example, you can define your backups with a retention policy of 30 days as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" s3Credentials: accessKeyId: name: aws-creds key: ACCESS_KEY_ID secretAccessKey: name: aws-creds key: ACCESS_SECRET_KEY retentionPolicy: \"30d\" There's more ... The recovery window retention policy is focused on the concept of Point of Recoverability ( PoR ), a moving point in time determined by current time - recovery window . The first valid backup is the first available backup before PoR (in reverse chronological order). CloudNativePG must ensure that we can recover the cluster at any point in time between PoR and the latest successfully archived WAL file, starting from the first valid backup. Base backups that are older than the first valid backup will be marked as obsolete and permanently removed after the next backup is completed. Compression algorithms CloudNativePG by default archives backups and WAL files in an uncompressed fashion. However, it also supports the following compression algorithms via barman-cloud-backup (for backups) and barman-cloud-wal-archive (for WAL files): bzip2 gzip lz4 snappy xz zstd The compression settings for backups and WALs are independent. See the DataBackupConfiguration and WALBackupConfiguration sections in the barman-cloud API reference. It is important to note that archival time, restore time, and size change between the algorithms, so the compression algorithm should be chosen according to your use case. The Barman team has performed an evaluation of the performance of the supported algorithms for Barman Cloud. The following table summarizes a scenario where a backup is taken on a local MinIO deployment. The Barman GitHub project includes a deeper analysis . Compression Backup Time (ms) Restore Time (ms) Uncompressed size (MB) Compressed size (MB) Approx ratio None 10927 7553 395 395 1:1 bzip2 25404 13886 395 67 5.9:1 gzip 116281 3077 395 91 4.3:1 snappy 8134 8341 395 166 2.4:1 Tagging of backup objects Barman 2.18 introduces support for tagging backup resources when saving them in object stores via barman-cloud-backup and barman-cloud-wal-archive . As a result, if your PostgreSQL container image includes Barman with version 2.18 or higher, CloudNativePG enables you to specify tags as key-value pairs for backup objects, namely base backups, WAL files and history files. You can use two properties in the .spec.backup.barmanObjectStore definition: tags : key-value pair tags to be added to backup objects and archived WAL file in the backup object store historyTags : key-value pair tags to be added to archived history files in the backup object store The excerpt of a YAML manifest below provides an example of usage of this feature: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] tags: backupRetentionPolicy: \"expire\" historyTags: backupRetentionPolicy: \"keep\" Extra options for the backup and WAL commands You can append additional options to the barman-cloud-backup and barman-cloud-wal-archive commands by using the additionalCommandArgs property in the .spec.backup.barmanObjectStore.data and .spec.backup.barmanObjectStore.wal sections respectively. These properties are lists of strings that will be appended to the barman-cloud-backup and barman-cloud-wal-archive commands. For example, you can use the --read-timeout=60 to customize the connection reading timeout. For additional options supported by barman-cloud-backup and barman-cloud-wal-archive commands you can refer to the official barman documentation here . If an option provided in additionalCommandArgs is already present in the declared options in its section ( .spec.backup.barmanObjectStore.data or .spec.backup.barmanObjectStore.wal ), the extra option will be ignored. The following is an example of how to use this property: For backups: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] data: additionalCommandArgs: - \"--min-chunk-size=5MB\" - \"--read-timeout=60\" For WAL files: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: additionalCommandArgs: - \"--max-concurrency=1\" - \"--read-timeout=60\" Recovery from an object store You can recover from a backup created by Barman Cloud and stored on a supported object store. After you define the external cluster, including all the required configuration in the barmanObjectStore section, you need to reference it in the .spec.recovery.source option. This example defines a recovery object store in a blob container in Azure: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] superuserSecret: name: superuser-secret bootstrap: recovery: source: clusterBackup externalClusters: - name: clusterBackup barmanObjectStore: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8 The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Important By default, the recovery method strictly uses the name of the cluster in the externalClusters section as the name of the main folder of the backup data within the object store. This name is normally reserved for the name of the server. You can specify a different folder name using the barmanObjectStore.serverName property. Note This example takes advantage of the parallel WAL restore feature, dedicating up to 8 jobs to concurrently fetch the required WAL files from the archive. This feature can appreciably reduce the recovery time. Make sure that you plan ahead for this scenario and correctly tune the value of this parameter for your environment. It will make a difference when you need it, and you will.","title":"Appendix B - Backup on object stores"},{"location":"appendixes/backup_barmanobjectstore/#appendix-b-backup-on-object-stores","text":"Warning As of CloudNativePG 1.26, native Barman Cloud support is deprecated in favor of the Barman Cloud Plugin . This page has been moved to the appendix for reference purposes. While the native integration remains functional for now, we strongly recommend beginning a gradual migration to the plugin-based interface after appropriate testing. For guidance, see Migrating from Built-in CloudNativePG Backup . CloudNativePG natively supports online/hot backup of PostgreSQL clusters through continuous physical backup and WAL archiving on an object store. This means that the database is always up (no downtime required) and that Point In Time Recovery is available. The operator can orchestrate a continuous backup infrastructure that is based on the Barman Cloud tool. Instead of using the classical architecture with a Barman server, which backs up many PostgreSQL instances, the operator relies on the barman-cloud-wal-archive , barman-cloud-check-wal-archive , barman-cloud-backup , barman-cloud-backup-list , and barman-cloud-backup-delete tools. As a result, base backups will be tarballs . Both base backups and WAL files can be compressed and encrypted. For this, it is required to use an image with barman-cli-cloud included. You can use the image ghcr.io/cloudnative-pg/postgresql for this scope, as it is composed of a community PostgreSQL image and the latest barman-cli-cloud package. Important Always ensure that you are running the latest version of the operands in your system to take advantage of the improvements introduced in Barman cloud (as well as improve the security aspects of your cluster). A backup is performed from a primary or a designated primary instance in a Cluster (please refer to replica clusters for more information about designated primary instances), or alternatively on a standby .","title":"Appendix B - Backup on object stores"},{"location":"appendixes/backup_barmanobjectstore/#common-object-stores","text":"If you are looking for a specific object store such as AWS S3 , Microsoft Azure Blob Storage , Google Cloud Storage , or a compatible provider, please refer to Appendix C - Common object stores for backups .","title":"Common object stores"},{"location":"appendixes/backup_barmanobjectstore/#wal-archiving","text":"WAL archiving is the process that feeds a WAL archive in CloudNativePG. The WAL archive is defined in the .spec.backup.barmanObjectStore stanza of a Cluster resource. Info Please refer to BarmanObjectStoreConfiguration in the barman-cloud API for a full list of options. If required, you can choose to compress WAL files as soon as they are uploaded and/or encrypt them: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: compression: gzip encryption: AES256 You can configure the encryption directly in your bucket, and the operator will use it unless you override it in the cluster configuration. PostgreSQL implements a sequential archiving scheme, where the archive_command will be executed sequentially for every WAL segment to be archived. Important By default, CloudNativePG sets archive_timeout to 5min , ensuring that WAL files, even in case of low workloads, are closed and archived at least every 5 minutes, providing a deterministic time-based value for your Recovery Point Objective ( RPO ). Even though you change the value of the archive_timeout setting in the PostgreSQL configuration , our experience suggests that the default value set by the operator is suitable for most use cases. When the bandwidth between the PostgreSQL instance and the object store allows archiving more than one WAL file in parallel, you can use the parallel WAL archiving feature of the instance manager like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: compression: gzip maxParallel: 8 encryption: AES256 In the previous example, the instance manager optimizes the WAL archiving process by archiving in parallel at most eight ready WALs, including the one requested by PostgreSQL. When PostgreSQL will request the archiving of a WAL that has already been archived by the instance manager as an optimization, that archival request will be just dismissed with a positive status.","title":"WAL archiving"},{"location":"appendixes/backup_barmanobjectstore/#retention-policies","text":"CloudNativePG can manage the automated deletion of backup files from the backup object store, using retention policies based on the recovery window. Internally, the retention policy feature uses barman-cloud-backup-delete with --retention-policy \u201cRECOVERY WINDOW OF {{ retention policy value }} {{ retention policy unit }}\u201d . For example, you can define your backups with a retention policy of 30 days as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" s3Credentials: accessKeyId: name: aws-creds key: ACCESS_KEY_ID secretAccessKey: name: aws-creds key: ACCESS_SECRET_KEY retentionPolicy: \"30d\" There's more ... The recovery window retention policy is focused on the concept of Point of Recoverability ( PoR ), a moving point in time determined by current time - recovery window . The first valid backup is the first available backup before PoR (in reverse chronological order). CloudNativePG must ensure that we can recover the cluster at any point in time between PoR and the latest successfully archived WAL file, starting from the first valid backup. Base backups that are older than the first valid backup will be marked as obsolete and permanently removed after the next backup is completed.","title":"Retention policies"},{"location":"appendixes/backup_barmanobjectstore/#compression-algorithms","text":"CloudNativePG by default archives backups and WAL files in an uncompressed fashion. However, it also supports the following compression algorithms via barman-cloud-backup (for backups) and barman-cloud-wal-archive (for WAL files): bzip2 gzip lz4 snappy xz zstd The compression settings for backups and WALs are independent. See the DataBackupConfiguration and WALBackupConfiguration sections in the barman-cloud API reference. It is important to note that archival time, restore time, and size change between the algorithms, so the compression algorithm should be chosen according to your use case. The Barman team has performed an evaluation of the performance of the supported algorithms for Barman Cloud. The following table summarizes a scenario where a backup is taken on a local MinIO deployment. The Barman GitHub project includes a deeper analysis . Compression Backup Time (ms) Restore Time (ms) Uncompressed size (MB) Compressed size (MB) Approx ratio None 10927 7553 395 395 1:1 bzip2 25404 13886 395 67 5.9:1 gzip 116281 3077 395 91 4.3:1 snappy 8134 8341 395 166 2.4:1","title":"Compression algorithms"},{"location":"appendixes/backup_barmanobjectstore/#tagging-of-backup-objects","text":"Barman 2.18 introduces support for tagging backup resources when saving them in object stores via barman-cloud-backup and barman-cloud-wal-archive . As a result, if your PostgreSQL container image includes Barman with version 2.18 or higher, CloudNativePG enables you to specify tags as key-value pairs for backup objects, namely base backups, WAL files and history files. You can use two properties in the .spec.backup.barmanObjectStore definition: tags : key-value pair tags to be added to backup objects and archived WAL file in the backup object store historyTags : key-value pair tags to be added to archived history files in the backup object store The excerpt of a YAML manifest below provides an example of usage of this feature: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] tags: backupRetentionPolicy: \"expire\" historyTags: backupRetentionPolicy: \"keep\"","title":"Tagging of backup objects"},{"location":"appendixes/backup_barmanobjectstore/#extra-options-for-the-backup-and-wal-commands","text":"You can append additional options to the barman-cloud-backup and barman-cloud-wal-archive commands by using the additionalCommandArgs property in the .spec.backup.barmanObjectStore.data and .spec.backup.barmanObjectStore.wal sections respectively. These properties are lists of strings that will be appended to the barman-cloud-backup and barman-cloud-wal-archive commands. For example, you can use the --read-timeout=60 to customize the connection reading timeout. For additional options supported by barman-cloud-backup and barman-cloud-wal-archive commands you can refer to the official barman documentation here . If an option provided in additionalCommandArgs is already present in the declared options in its section ( .spec.backup.barmanObjectStore.data or .spec.backup.barmanObjectStore.wal ), the extra option will be ignored. The following is an example of how to use this property: For backups: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] data: additionalCommandArgs: - \"--min-chunk-size=5MB\" - \"--read-timeout=60\" For WAL files: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: additionalCommandArgs: - \"--max-concurrency=1\" - \"--read-timeout=60\"","title":"Extra options for the backup and WAL commands"},{"location":"appendixes/backup_barmanobjectstore/#recovery-from-an-object-store","text":"You can recover from a backup created by Barman Cloud and stored on a supported object store. After you define the external cluster, including all the required configuration in the barmanObjectStore section, you need to reference it in the .spec.recovery.source option. This example defines a recovery object store in a blob container in Azure: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] superuserSecret: name: superuser-secret bootstrap: recovery: source: clusterBackup externalClusters: - name: clusterBackup barmanObjectStore: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8 The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Important By default, the recovery method strictly uses the name of the cluster in the externalClusters section as the name of the main folder of the backup data within the object store. This name is normally reserved for the name of the server. You can specify a different folder name using the barmanObjectStore.serverName property. Note This example takes advantage of the parallel WAL restore feature, dedicating up to 8 jobs to concurrently fetch the required WAL files from the archive. This feature can appreciably reduce the recovery time. Make sure that you plan ahead for this scenario and correctly tune the value of this parameter for your environment. It will make a difference when you need it, and you will.","title":"Recovery from an object store"},{"location":"appendixes/backup_volumesnapshot/","text":"Appendix A - Backup on volume snapshots Important Please refer to the official Kubernetes documentation for a list of all the supported Container Storage Interface (CSI) drivers that provide snapshotting capabilities. CloudNativePG is one of the first known cases of database operators that directly leverages the Kubernetes native Volume Snapshot API for both backup and recovery operations, in an entirely declarative way. About standard Volume Snapshots Volume snapshotting was first introduced in Kubernetes 1.12 (2018) as alpha , promoted to beta in 1.17 (2019) , and moved to GA in 1.20 (2020) . It\u2019s now stable, widely available, and standard, providing 3 custom resource definitions: VolumeSnapshot , VolumeSnapshotContent and VolumeSnapshotClass . This Kubernetes feature defines a generic interface for: the creation of a new volume snapshot, starting from a PVC the deletion of an existing snapshot the creation of a new volume from a snapshot Kubernetes delegates the actual implementation to the underlying CSI drivers (not all of them support volume snapshots). Normally, storage classes that provide volume snapshotting support incremental and differential block level backup in a transparent way for the application , which can delegate the complexity and the independent management down the stack, including cross-cluster availability of the snapshots. Requirements For Volume Snapshots to work with a CloudNativePG cluster, you need to ensure that each storage class used to dynamically provision the PostgreSQL volumes (namely, storage and walStorage sections) support volume snapshots. Given that instructions vary from storage class to storage class, please refer to the documentation of the specific storage class and related CSI drivers you have deployed in your Kubernetes system. Normally, it is the VolumeSnapshotClass that is responsible to ensure that snapshots can be taken from persistent volumes of a given storage class, and managed as VolumeSnapshot and VolumeSnapshotContent resources. Important It is your responsibility to verify with the third party vendor that volume snapshots are supported. CloudNativePG only interacts with the Kubernetes API on this matter, and we cannot support issues at the storage level for each specific CSI driver. How to configure Volume Snapshot backups CloudNativePG allows you to configure a given Postgres cluster for Volume Snapshot backups through the backup.volumeSnapshot stanza. Info Please refer to VolumeSnapshotConfiguration in the API reference for a full list of options. A generic example with volume snapshots (assuming that PGDATA and WALs share the same storage class) is the following: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: snapshot-cluster spec: instances: 3 storage: storageClass: @STORAGE_CLASS@ size: 10Gi walStorage: storageClass: @STORAGE_CLASS@ size: 10Gi backup: # Volume snapshot backups volumeSnapshot: className: @VOLUME_SNAPSHOT_CLASS_NAME@ plugins: - name: barman-cloud.cloudnative-pg.io isWALArchiver: true parameters: barmanObjectName: @OBJECTSTORE_NAME@ As you can see, the backup section contains both the volumeSnapshot stanza (controlling physical base backups on volume snapshots) and the plugins one (controlling the WAL archive ). Info Once you have defined the plugin , you can decide to use both volume snapshot and plugin backup strategies simultaneously to take physical backups. The volumeSnapshot.className option allows you to reference the default VolumeSnapshotClass object used for all the storage volumes you have defined in your PostgreSQL cluster. Info In case you are using a different storage class for PGDATA and WAL files, you can specify a separate VolumeSnapshotClass for that volume through the walClassName option (which defaults to the same value as className ). Once a cluster is defined for volume snapshot backups, you need to define a ScheduledBackup resource that requests such backups on a periodic basis. Hot and cold backups Warning As noted in the backup document , a cold snapshot explicitly set to target the primary will result in the primary being fenced for the duration of the backup, making the cluster read-only during this period. For safety, in a cluster already containing fenced instances, a cold snapshot is rejected. By default, CloudNativePG requests an online/hot backup on volume snapshots, using the PostgreSQL defaults of the low-level API for base backups : it doesn't request an immediate checkpoint when starting the backup procedure it waits for the WAL archiver to archive the last segment of the backup when terminating the backup procedure Important The default values are suitable for most production environments. Hot backups are consistent and can be used to perform snapshot recovery, as we ensure WAL retention from the start of the backup through a temporary replication slot. However, our recommendation is to rely on cold backups for that purpose. You can explicitly change the default behavior through the following options in the .spec.backup.volumeSnapshot stanza of the Cluster resource: online : accepting true (default) or false as a value onlineConfiguration.immediateCheckpoint : whether you want to request an immediate checkpoint before you start the backup procedure or not; technically, it corresponds to the fast argument you pass to the pg_backup_start / pg_start_backup() function in PostgreSQL, accepting true (default) or false onlineConfiguration.waitForArchive : whether you want to wait for the archiver to process the last segment of the backup or not; technically, it corresponds to the wait_for_archive argument you pass to the pg_backup_stop / pg_stop_backup() function in PostgreSQL, accepting true (default) or false If you want to change the default behavior of your Postgres cluster to take cold backups by default, all you need to do is add the online: false option to your manifest, as follows: # ... backup: volumeSnapshot: online: false # ... If you are instead requesting an immediate checkpoint as the default behavior, you can add this section: # ... backup: volumeSnapshot: online: true onlineConfiguration: immediateCheckpoint: true # ... Overriding the default behavior You can change the default behavior defined in the cluster resource by setting different values for online and, if needed, onlineConfiguration in the Backup or ScheduledBackup objects. For example, in case you want to issue an on-demand cold backup, you can create a Backup object with .spec.online: false : apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: snapshot-cluster-cold-backup-example spec: cluster: name: snapshot-cluster method: volumeSnapshot online: false Similarly, for the ScheduledBackup: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: snapshot-cluster-cold-backup-example spec: schedule: \"0 0 0 * * *\" backupOwnerReference: self cluster: name: snapshot-cluster method: volumeSnapshot online: false Persistence of volume snapshot objects By default, VolumeSnapshot objects created by CloudNativePG are retained after deleting the Backup object that originated them, or the Cluster they refer to. Such behavior is controlled by the .spec.backup.volumeSnapshot.snapshotOwnerReference option which accepts the following values: none : no ownership is set, meaning that VolumeSnapshot objects persist after the Backup and/or the Cluster resources are removed backup : the VolumeSnapshot object is owned by the Backup resource that originated it, and when the backup object is removed, the volume snapshot is also removed cluster : the VolumeSnapshot object is owned by the Cluster resource that is backed up, and when the Postgres cluster is removed, the volume snapshot is also removed In case a VolumeSnapshot is deleted, the deletionPolicy specified in the VolumeSnapshotContent is evaluated: if set to Retain , the VolumeSnapshotContent object is kept if set to Delete , the VolumeSnapshotContent object is removed as well Warning VolumeSnapshotContent objects do not keep all the information regarding the backup and the cluster they refer to (like the annotations and labels that are contained in the VolumeSnapshot object). Although possible, restoring from just this kind of object might not be straightforward. For this reason, our recommendation is to always backup the VolumeSnapshot definitions, even using a Kubernetes level data protection solution. The value in VolumeSnapshotContent is determined by the deletionPolicy set in the corresponding VolumeSnapshotClass definition, which is referenced in the .spec.backup.volumeSnapshot.className option. Please refer to the Kubernetes documentation on Volume Snapshot Classes for details on this standard behavior. Backup Volume Snapshot Deadlines CloudNativePG supports backups using the volume snapshot method. In some environments, volume snapshots may encounter temporary issues that can be retried. The backup.cnpg.io/volumeSnapshotDeadline annotation defines how long CloudNativePG should continue retrying recoverable errors before marking the backup as failed. You can add the backup.cnpg.io/volumeSnapshotDeadline annotation to both Backup and ScheduledBackup resources. For ScheduledBackup resources, this annotation is automatically inherited by any Backup resources created from the schedule. If not specified, the default retry deadline is 10 minutes . Error Handling When a retryable error occurs during a volume snapshot operation: CloudNativePG records the time of the first error. The system retries the operation every 10 seconds . If the error persists beyond the specified deadline (or the default 10 minutes), the backup is marked as failed . Retryable Errors CloudNativePG treats the following types of errors as retryable: Server timeout errors (HTTP 408, 429, 500, 502, 503, 504) Conflicts (optimistic locking errors) Internal errors Context deadline exceeded errors Timeout errors from the CSI snapshot controller Examples You can add the annotation to a ScheduledBackup resource as follows: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: daily-backup-schedule annotations: backup.cnpg.io/volumeSnapshotDeadline: \"20\" spec: schedule: \"0 0 * * *\" backupOwnerReference: self method: volumeSnapshot # other configuration... When you define a ScheduledBackup with the annotation, any Backup resources created from this schedule automatically inherit the specified timeout value. In the following example, all backups created from the schedule will have a 30-minute timeout for retrying recoverable snapshot errors. apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: weekly-backup annotations: backup.cnpg.io/volumeSnapshotDeadline: \"30\" spec: schedule: \"0 0 * * 0\" # Weekly backup on Sunday method: volumeSnapshot cluster: name: my-postgresql-cluster Alternatively, you can add the annotation directly to a Backup Resource: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: my-backup annotations: backup.cnpg.io/volumeSnapshotDeadline: \"15\" spec: method: volumeSnapshot # other backup configuration... Example of Volume Snapshot Backup The following example shows how to configure volume snapshot base backups on an EKS cluster on AWS using the ebs-sc storage class and the csi-aws-vsc volume snapshot class. Important If you are interested in testing the example, please read \"Volume Snapshots\" for the Amazon Elastic Block Store (EBS) CSI driver for detailed instructions on the installation process for the storage class and the snapshot class. The following manifest creates a Cluster that is ready to be used for volume snapshots and that stores the WAL archive in a S3 bucket via IAM role for the Service Account (IRSA, see AWS S3 ): apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: hendrix spec: instances: 3 storage: storageClass: ebs-sc size: 10Gi walStorage: storageClass: ebs-sc size: 10Gi backup: volumeSnapshot: className: csi-aws-vsc plugins: - name: barman-cloud.cloudnative-pg.io isWALArchiver: true parameters: barmanObjectName: @OBJECTSTORE_NAME@ serviceAccountTemplate: metadata: annotations: eks.amazonaws.com/role-arn: \"@ARN@\" --- apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: hendrix-vs-backup spec: cluster: name: hendrix method: volumeSnapshot schedule: '0 0 0 * * *' backupOwnerReference: cluster immediate: true The last resource defines daily volume snapshot backups at midnight, requesting one immediately after the cluster is created.","title":"Appendix A - Backup on volume snapshots"},{"location":"appendixes/backup_volumesnapshot/#appendix-a-backup-on-volume-snapshots","text":"Important Please refer to the official Kubernetes documentation for a list of all the supported Container Storage Interface (CSI) drivers that provide snapshotting capabilities. CloudNativePG is one of the first known cases of database operators that directly leverages the Kubernetes native Volume Snapshot API for both backup and recovery operations, in an entirely declarative way.","title":"Appendix A - Backup on volume snapshots"},{"location":"appendixes/backup_volumesnapshot/#about-standard-volume-snapshots","text":"Volume snapshotting was first introduced in Kubernetes 1.12 (2018) as alpha , promoted to beta in 1.17 (2019) , and moved to GA in 1.20 (2020) . It\u2019s now stable, widely available, and standard, providing 3 custom resource definitions: VolumeSnapshot , VolumeSnapshotContent and VolumeSnapshotClass . This Kubernetes feature defines a generic interface for: the creation of a new volume snapshot, starting from a PVC the deletion of an existing snapshot the creation of a new volume from a snapshot Kubernetes delegates the actual implementation to the underlying CSI drivers (not all of them support volume snapshots). Normally, storage classes that provide volume snapshotting support incremental and differential block level backup in a transparent way for the application , which can delegate the complexity and the independent management down the stack, including cross-cluster availability of the snapshots.","title":"About standard Volume Snapshots"},{"location":"appendixes/backup_volumesnapshot/#requirements","text":"For Volume Snapshots to work with a CloudNativePG cluster, you need to ensure that each storage class used to dynamically provision the PostgreSQL volumes (namely, storage and walStorage sections) support volume snapshots. Given that instructions vary from storage class to storage class, please refer to the documentation of the specific storage class and related CSI drivers you have deployed in your Kubernetes system. Normally, it is the VolumeSnapshotClass that is responsible to ensure that snapshots can be taken from persistent volumes of a given storage class, and managed as VolumeSnapshot and VolumeSnapshotContent resources. Important It is your responsibility to verify with the third party vendor that volume snapshots are supported. CloudNativePG only interacts with the Kubernetes API on this matter, and we cannot support issues at the storage level for each specific CSI driver.","title":"Requirements"},{"location":"appendixes/backup_volumesnapshot/#how-to-configure-volume-snapshot-backups","text":"CloudNativePG allows you to configure a given Postgres cluster for Volume Snapshot backups through the backup.volumeSnapshot stanza. Info Please refer to VolumeSnapshotConfiguration in the API reference for a full list of options. A generic example with volume snapshots (assuming that PGDATA and WALs share the same storage class) is the following: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: snapshot-cluster spec: instances: 3 storage: storageClass: @STORAGE_CLASS@ size: 10Gi walStorage: storageClass: @STORAGE_CLASS@ size: 10Gi backup: # Volume snapshot backups volumeSnapshot: className: @VOLUME_SNAPSHOT_CLASS_NAME@ plugins: - name: barman-cloud.cloudnative-pg.io isWALArchiver: true parameters: barmanObjectName: @OBJECTSTORE_NAME@ As you can see, the backup section contains both the volumeSnapshot stanza (controlling physical base backups on volume snapshots) and the plugins one (controlling the WAL archive ). Info Once you have defined the plugin , you can decide to use both volume snapshot and plugin backup strategies simultaneously to take physical backups. The volumeSnapshot.className option allows you to reference the default VolumeSnapshotClass object used for all the storage volumes you have defined in your PostgreSQL cluster. Info In case you are using a different storage class for PGDATA and WAL files, you can specify a separate VolumeSnapshotClass for that volume through the walClassName option (which defaults to the same value as className ). Once a cluster is defined for volume snapshot backups, you need to define a ScheduledBackup resource that requests such backups on a periodic basis.","title":"How to configure Volume Snapshot backups"},{"location":"appendixes/backup_volumesnapshot/#hot-and-cold-backups","text":"Warning As noted in the backup document , a cold snapshot explicitly set to target the primary will result in the primary being fenced for the duration of the backup, making the cluster read-only during this period. For safety, in a cluster already containing fenced instances, a cold snapshot is rejected. By default, CloudNativePG requests an online/hot backup on volume snapshots, using the PostgreSQL defaults of the low-level API for base backups : it doesn't request an immediate checkpoint when starting the backup procedure it waits for the WAL archiver to archive the last segment of the backup when terminating the backup procedure Important The default values are suitable for most production environments. Hot backups are consistent and can be used to perform snapshot recovery, as we ensure WAL retention from the start of the backup through a temporary replication slot. However, our recommendation is to rely on cold backups for that purpose. You can explicitly change the default behavior through the following options in the .spec.backup.volumeSnapshot stanza of the Cluster resource: online : accepting true (default) or false as a value onlineConfiguration.immediateCheckpoint : whether you want to request an immediate checkpoint before you start the backup procedure or not; technically, it corresponds to the fast argument you pass to the pg_backup_start / pg_start_backup() function in PostgreSQL, accepting true (default) or false onlineConfiguration.waitForArchive : whether you want to wait for the archiver to process the last segment of the backup or not; technically, it corresponds to the wait_for_archive argument you pass to the pg_backup_stop / pg_stop_backup() function in PostgreSQL, accepting true (default) or false If you want to change the default behavior of your Postgres cluster to take cold backups by default, all you need to do is add the online: false option to your manifest, as follows: # ... backup: volumeSnapshot: online: false # ... If you are instead requesting an immediate checkpoint as the default behavior, you can add this section: # ... backup: volumeSnapshot: online: true onlineConfiguration: immediateCheckpoint: true # ...","title":"Hot and cold backups"},{"location":"appendixes/backup_volumesnapshot/#overriding-the-default-behavior","text":"You can change the default behavior defined in the cluster resource by setting different values for online and, if needed, onlineConfiguration in the Backup or ScheduledBackup objects. For example, in case you want to issue an on-demand cold backup, you can create a Backup object with .spec.online: false : apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: snapshot-cluster-cold-backup-example spec: cluster: name: snapshot-cluster method: volumeSnapshot online: false Similarly, for the ScheduledBackup: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: snapshot-cluster-cold-backup-example spec: schedule: \"0 0 0 * * *\" backupOwnerReference: self cluster: name: snapshot-cluster method: volumeSnapshot online: false","title":"Overriding the default behavior"},{"location":"appendixes/backup_volumesnapshot/#persistence-of-volume-snapshot-objects","text":"By default, VolumeSnapshot objects created by CloudNativePG are retained after deleting the Backup object that originated them, or the Cluster they refer to. Such behavior is controlled by the .spec.backup.volumeSnapshot.snapshotOwnerReference option which accepts the following values: none : no ownership is set, meaning that VolumeSnapshot objects persist after the Backup and/or the Cluster resources are removed backup : the VolumeSnapshot object is owned by the Backup resource that originated it, and when the backup object is removed, the volume snapshot is also removed cluster : the VolumeSnapshot object is owned by the Cluster resource that is backed up, and when the Postgres cluster is removed, the volume snapshot is also removed In case a VolumeSnapshot is deleted, the deletionPolicy specified in the VolumeSnapshotContent is evaluated: if set to Retain , the VolumeSnapshotContent object is kept if set to Delete , the VolumeSnapshotContent object is removed as well Warning VolumeSnapshotContent objects do not keep all the information regarding the backup and the cluster they refer to (like the annotations and labels that are contained in the VolumeSnapshot object). Although possible, restoring from just this kind of object might not be straightforward. For this reason, our recommendation is to always backup the VolumeSnapshot definitions, even using a Kubernetes level data protection solution. The value in VolumeSnapshotContent is determined by the deletionPolicy set in the corresponding VolumeSnapshotClass definition, which is referenced in the .spec.backup.volumeSnapshot.className option. Please refer to the Kubernetes documentation on Volume Snapshot Classes for details on this standard behavior.","title":"Persistence of volume snapshot objects"},{"location":"appendixes/backup_volumesnapshot/#backup-volume-snapshot-deadlines","text":"CloudNativePG supports backups using the volume snapshot method. In some environments, volume snapshots may encounter temporary issues that can be retried. The backup.cnpg.io/volumeSnapshotDeadline annotation defines how long CloudNativePG should continue retrying recoverable errors before marking the backup as failed. You can add the backup.cnpg.io/volumeSnapshotDeadline annotation to both Backup and ScheduledBackup resources. For ScheduledBackup resources, this annotation is automatically inherited by any Backup resources created from the schedule. If not specified, the default retry deadline is 10 minutes .","title":"Backup Volume Snapshot Deadlines"},{"location":"appendixes/backup_volumesnapshot/#error-handling","text":"When a retryable error occurs during a volume snapshot operation: CloudNativePG records the time of the first error. The system retries the operation every 10 seconds . If the error persists beyond the specified deadline (or the default 10 minutes), the backup is marked as failed .","title":"Error Handling"},{"location":"appendixes/backup_volumesnapshot/#retryable-errors","text":"CloudNativePG treats the following types of errors as retryable: Server timeout errors (HTTP 408, 429, 500, 502, 503, 504) Conflicts (optimistic locking errors) Internal errors Context deadline exceeded errors Timeout errors from the CSI snapshot controller","title":"Retryable Errors"},{"location":"appendixes/backup_volumesnapshot/#examples","text":"You can add the annotation to a ScheduledBackup resource as follows: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: daily-backup-schedule annotations: backup.cnpg.io/volumeSnapshotDeadline: \"20\" spec: schedule: \"0 0 * * *\" backupOwnerReference: self method: volumeSnapshot # other configuration... When you define a ScheduledBackup with the annotation, any Backup resources created from this schedule automatically inherit the specified timeout value. In the following example, all backups created from the schedule will have a 30-minute timeout for retrying recoverable snapshot errors. apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: weekly-backup annotations: backup.cnpg.io/volumeSnapshotDeadline: \"30\" spec: schedule: \"0 0 * * 0\" # Weekly backup on Sunday method: volumeSnapshot cluster: name: my-postgresql-cluster Alternatively, you can add the annotation directly to a Backup Resource: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: my-backup annotations: backup.cnpg.io/volumeSnapshotDeadline: \"15\" spec: method: volumeSnapshot # other backup configuration...","title":"Examples"},{"location":"appendixes/backup_volumesnapshot/#example-of-volume-snapshot-backup","text":"The following example shows how to configure volume snapshot base backups on an EKS cluster on AWS using the ebs-sc storage class and the csi-aws-vsc volume snapshot class. Important If you are interested in testing the example, please read \"Volume Snapshots\" for the Amazon Elastic Block Store (EBS) CSI driver for detailed instructions on the installation process for the storage class and the snapshot class. The following manifest creates a Cluster that is ready to be used for volume snapshots and that stores the WAL archive in a S3 bucket via IAM role for the Service Account (IRSA, see AWS S3 ): apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: hendrix spec: instances: 3 storage: storageClass: ebs-sc size: 10Gi walStorage: storageClass: ebs-sc size: 10Gi backup: volumeSnapshot: className: csi-aws-vsc plugins: - name: barman-cloud.cloudnative-pg.io isWALArchiver: true parameters: barmanObjectName: @OBJECTSTORE_NAME@ serviceAccountTemplate: metadata: annotations: eks.amazonaws.com/role-arn: \"@ARN@\" --- apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: hendrix-vs-backup spec: cluster: name: hendrix method: volumeSnapshot schedule: '0 0 0 * * *' backupOwnerReference: cluster immediate: true The last resource defines daily volume snapshot backups at midnight, requesting one immediately after the cluster is created.","title":"Example of Volume Snapshot Backup"},{"location":"appendixes/object_stores/","text":"Appendix C - Common object stores for backups Warning As of CloudNativePG 1.26, native Barman Cloud support is deprecated in favor of the Barman Cloud Plugin . While the native integration remains functional for now, we strongly recommend beginning a gradual migration to the plugin-based interface after appropriate testing. The Barman Cloud Plugin documentation describes how to use common object stores . You can store the backup files in any service that is supported by the Barman Cloud infrastructure. That is: Amazon S3 Microsoft Azure Blob Storage Google Cloud Storage You can also use any compatible implementation of the supported services. The required setup depends on the chosen storage provider and is discussed in the following sections. AWS S3 AWS Simple Storage Service (S3) is a very popular object storage service offered by Amazon. As far as CloudNativePG backup is concerned, you can define the permissions to store backups in S3 buckets in two ways: If CloudNativePG is running in EKS. you may want to use the IRSA authentication method Alternatively, you can use the ACCESS_KEY_ID and ACCESS_SECRET_KEY credentials AWS Access key You will need the following information about your environment: ACCESS_KEY_ID : the ID of the access key that will be used to upload files into S3 ACCESS_SECRET_KEY : the secret part of the access key mentioned above ACCESS_SESSION_TOKEN : the optional session token, in case it is required The access key used must have permission to upload files into the bucket. Given that, you must create a Kubernetes secret with the credentials, and you can do that with the following command: kubectl create secret generic aws-creds \\ --from-literal=ACCESS_KEY_ID=<access key here> \\ --from-literal=ACCESS_SECRET_KEY=<secret key here> # --from-literal=ACCESS_SESSION_TOKEN=<session token here> # if required The credentials will be stored inside Kubernetes and will be encrypted if encryption at rest is configured in your installation. Once that secret has been created, you can configure your cluster like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" s3Credentials: accessKeyId: name: aws-creds key: ACCESS_KEY_ID secretAccessKey: name: aws-creds key: ACCESS_SECRET_KEY The destination path can be any URL pointing to a folder where the instance can upload the WAL files, e.g. s3://BUCKET_NAME/path/to/folder . IAM Role for Service Account (IRSA) In order to use IRSA you need to set an annotation in the ServiceAccount of the Postgres cluster. We can configure CloudNativePG to inject them using the serviceAccountTemplate stanza: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: [...] spec: serviceAccountTemplate: metadata: annotations: eks.amazonaws.com/role-arn: arn:[...] [...] S3 lifecycle policy Barman Cloud writes objects to S3, then does not update them until they are deleted by the Barman Cloud retention policy. A recommended approach for an S3 lifecycle policy is to expire the current version of objects a few days longer than the Barman retention policy, enable object versioning, and expire non-current versions after a number of days. Such a policy protects against accidental deletion, and also allows for restricting permissions to the CloudNativePG workload so that it may delete objects from S3 without granting permissions to permanently delete objects. Other S3-compatible Object Storages providers In case you're using S3-compatible object storage, like MinIO or Linode Object Storage , you can specify an endpoint instead of using the default S3 one. In this example, it will use the bucket of Linode in the region us-east1 . apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"s3://bucket/\" endpointURL: \"https://us-east1.linodeobjects.com\" s3Credentials: [...] In case you're using Digital Ocean Spaces , you will have to use the Path-style syntax. In this example, it will use the bucket from Digital Ocean Spaces in the region SFO3 . apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"s3://[your-bucket-name]/[your-backup-folder]/\" endpointURL: \"https://sfo3.digitaloceanspaces.com\" s3Credentials: [...] Using Object Storage with a private CA Suppose you configure an Object Storage provider which uses a certificate signed with a private CA, for example when using MinIO via HTTPS. In that case, you need to set the option endpointCA inside barmanObjectStore referring to a secret containing the CA bundle, so that Barman can verify the certificate correctly. You can find instructions on creating a secret using your cert files in the certificates document. Once you have created the secret, you can populate the endpointCA as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: [...] backup: barmanObjectStore: endpointURL: <myEndpointURL> endpointCA: name: my-ca-secret key: ca.crt Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to the Secrets/ConfigMaps. Otherwise, you will have to reload the instances using the kubectl cnpg reload subcommand. Azure Blob Storage Azure Blob Storage is the object storage service provided by Microsoft. In order to access your storage account for backup and recovery of CloudNativePG managed databases, you will need one of the following combinations of credentials: Connection String Storage account name and Storage account access key Storage account name and Storage account SAS Token Storage account name and Azure AD Workload Identity properly configured. Using Azure AD Workload Identity , you can avoid saving the credentials into a Kubernetes Secret, and have a Cluster configuration adding the inheritFromAzureAD as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" azureCredentials: inheritFromAzureAD: true On the other side, using both Storage account access key or Storage account SAS Token , the credentials need to be stored inside a Kubernetes Secret, adding data entries only when needed. The following command performs that: kubectl create secret generic azure-creds \\ --from-literal=AZURE_STORAGE_ACCOUNT=<storage account name> \\ --from-literal=AZURE_STORAGE_KEY=<storage account key> \\ --from-literal=AZURE_STORAGE_SAS_TOKEN=<SAS token> \\ --from-literal=AZURE_STORAGE_CONNECTION_STRING=<connection string> The credentials will be encrypted at rest, if this feature is enabled in the used Kubernetes cluster. Given the previous secret, the provided credentials can be injected inside the cluster configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" azureCredentials: connectionString: name: azure-creds key: AZURE_CONNECTION_STRING storageAccount: name: azure-creds key: AZURE_STORAGE_ACCOUNT storageKey: name: azure-creds key: AZURE_STORAGE_KEY storageSasToken: name: azure-creds key: AZURE_STORAGE_SAS_TOKEN When using the Azure Blob Storage, the destinationPath fulfills the following structure: <http|https>://<account-name>.<service-name>.core.windows.net/<resource-path> where <resource-path> is <container>/<blob> . The account name , which is also called storage account name , is included in the used host name. Other Azure Blob Storage compatible providers If you are using a different implementation of the Azure Blob Storage APIs, the destinationPath will have the following structure: <http|https>://<local-machine-address>:<port>/<account-name>/<resource-path> In that case, <account-name> is the first component of the path. This is required if you are testing the Azure support via the Azure Storage Emulator or Azurite . Google Cloud Storage Currently, the CloudNativePG operator supports two authentication methods for Google Cloud Storage : the first one assumes that the pod is running inside a Google Kubernetes Engine cluster the second one leverages the environment variable GOOGLE_APPLICATION_CREDENTIALS Running inside Google Kubernetes Engine When running inside Google Kubernetes Engine you can configure your backups to simply rely on Workload Identity , without having to set any credentials. In particular, you need to: set .spec.backup.barmanObjectStore.googleCredentials.gkeEnvironment to true set the iam.gke.io/gcp-service-account annotation in the serviceAccountTemplate stanza Please use the following example as a reference: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: [...] backup: barmanObjectStore: destinationPath: \"gs://<destination path here>\" googleCredentials: gkeEnvironment: true serviceAccountTemplate: metadata: annotations: iam.gke.io/gcp-service-account: [...].iam.gserviceaccount.com [...] Using authentication Following the instruction from Google you will get a JSON file that contains all the required information to authenticate. The content of the JSON file must be provided using a Secret that can be created with the following command: kubectl create secret generic backup-creds --from-file=gcsCredentials=gcs_credentials_file.json This will create the Secret with the name backup-creds to be used in the yaml file like this: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"gs://<destination path here>\" googleCredentials: applicationCredentials: name: backup-creds key: gcsCredentials Now the operator will use the credentials to authenticate against Google Cloud Storage. Important This way of authentication will create a JSON file inside the container with all the needed information to access your Google Cloud Storage bucket, meaning that if someone gets access to the pod will also have write permissions to the bucket.","title":"Appendix C - Common object stores for backups"},{"location":"appendixes/object_stores/#appendix-c-common-object-stores-for-backups","text":"Warning As of CloudNativePG 1.26, native Barman Cloud support is deprecated in favor of the Barman Cloud Plugin . While the native integration remains functional for now, we strongly recommend beginning a gradual migration to the plugin-based interface after appropriate testing. The Barman Cloud Plugin documentation describes how to use common object stores . You can store the backup files in any service that is supported by the Barman Cloud infrastructure. That is: Amazon S3 Microsoft Azure Blob Storage Google Cloud Storage You can also use any compatible implementation of the supported services. The required setup depends on the chosen storage provider and is discussed in the following sections.","title":"Appendix C - Common object stores for backups"},{"location":"appendixes/object_stores/#aws-s3","text":"AWS Simple Storage Service (S3) is a very popular object storage service offered by Amazon. As far as CloudNativePG backup is concerned, you can define the permissions to store backups in S3 buckets in two ways: If CloudNativePG is running in EKS. you may want to use the IRSA authentication method Alternatively, you can use the ACCESS_KEY_ID and ACCESS_SECRET_KEY credentials","title":"AWS S3"},{"location":"appendixes/object_stores/#aws-access-key","text":"You will need the following information about your environment: ACCESS_KEY_ID : the ID of the access key that will be used to upload files into S3 ACCESS_SECRET_KEY : the secret part of the access key mentioned above ACCESS_SESSION_TOKEN : the optional session token, in case it is required The access key used must have permission to upload files into the bucket. Given that, you must create a Kubernetes secret with the credentials, and you can do that with the following command: kubectl create secret generic aws-creds \\ --from-literal=ACCESS_KEY_ID=<access key here> \\ --from-literal=ACCESS_SECRET_KEY=<secret key here> # --from-literal=ACCESS_SESSION_TOKEN=<session token here> # if required The credentials will be stored inside Kubernetes and will be encrypted if encryption at rest is configured in your installation. Once that secret has been created, you can configure your cluster like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" s3Credentials: accessKeyId: name: aws-creds key: ACCESS_KEY_ID secretAccessKey: name: aws-creds key: ACCESS_SECRET_KEY The destination path can be any URL pointing to a folder where the instance can upload the WAL files, e.g. s3://BUCKET_NAME/path/to/folder .","title":"AWS Access key"},{"location":"appendixes/object_stores/#iam-role-for-service-account-irsa","text":"In order to use IRSA you need to set an annotation in the ServiceAccount of the Postgres cluster. We can configure CloudNativePG to inject them using the serviceAccountTemplate stanza: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: [...] spec: serviceAccountTemplate: metadata: annotations: eks.amazonaws.com/role-arn: arn:[...] [...]","title":"IAM Role for Service Account (IRSA)"},{"location":"appendixes/object_stores/#s3-lifecycle-policy","text":"Barman Cloud writes objects to S3, then does not update them until they are deleted by the Barman Cloud retention policy. A recommended approach for an S3 lifecycle policy is to expire the current version of objects a few days longer than the Barman retention policy, enable object versioning, and expire non-current versions after a number of days. Such a policy protects against accidental deletion, and also allows for restricting permissions to the CloudNativePG workload so that it may delete objects from S3 without granting permissions to permanently delete objects.","title":"S3 lifecycle policy"},{"location":"appendixes/object_stores/#other-s3-compatible-object-storages-providers","text":"In case you're using S3-compatible object storage, like MinIO or Linode Object Storage , you can specify an endpoint instead of using the default S3 one. In this example, it will use the bucket of Linode in the region us-east1 . apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"s3://bucket/\" endpointURL: \"https://us-east1.linodeobjects.com\" s3Credentials: [...] In case you're using Digital Ocean Spaces , you will have to use the Path-style syntax. In this example, it will use the bucket from Digital Ocean Spaces in the region SFO3 . apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"s3://[your-bucket-name]/[your-backup-folder]/\" endpointURL: \"https://sfo3.digitaloceanspaces.com\" s3Credentials: [...]","title":"Other S3-compatible Object Storages providers"},{"location":"appendixes/object_stores/#using-object-storage-with-a-private-ca","text":"Suppose you configure an Object Storage provider which uses a certificate signed with a private CA, for example when using MinIO via HTTPS. In that case, you need to set the option endpointCA inside barmanObjectStore referring to a secret containing the CA bundle, so that Barman can verify the certificate correctly. You can find instructions on creating a secret using your cert files in the certificates document. Once you have created the secret, you can populate the endpointCA as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: [...] backup: barmanObjectStore: endpointURL: <myEndpointURL> endpointCA: name: my-ca-secret key: ca.crt Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to the Secrets/ConfigMaps. Otherwise, you will have to reload the instances using the kubectl cnpg reload subcommand.","title":"Using Object Storage with a private CA"},{"location":"appendixes/object_stores/#azure-blob-storage","text":"Azure Blob Storage is the object storage service provided by Microsoft. In order to access your storage account for backup and recovery of CloudNativePG managed databases, you will need one of the following combinations of credentials: Connection String Storage account name and Storage account access key Storage account name and Storage account SAS Token Storage account name and Azure AD Workload Identity properly configured. Using Azure AD Workload Identity , you can avoid saving the credentials into a Kubernetes Secret, and have a Cluster configuration adding the inheritFromAzureAD as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" azureCredentials: inheritFromAzureAD: true On the other side, using both Storage account access key or Storage account SAS Token , the credentials need to be stored inside a Kubernetes Secret, adding data entries only when needed. The following command performs that: kubectl create secret generic azure-creds \\ --from-literal=AZURE_STORAGE_ACCOUNT=<storage account name> \\ --from-literal=AZURE_STORAGE_KEY=<storage account key> \\ --from-literal=AZURE_STORAGE_SAS_TOKEN=<SAS token> \\ --from-literal=AZURE_STORAGE_CONNECTION_STRING=<connection string> The credentials will be encrypted at rest, if this feature is enabled in the used Kubernetes cluster. Given the previous secret, the provided credentials can be injected inside the cluster configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" azureCredentials: connectionString: name: azure-creds key: AZURE_CONNECTION_STRING storageAccount: name: azure-creds key: AZURE_STORAGE_ACCOUNT storageKey: name: azure-creds key: AZURE_STORAGE_KEY storageSasToken: name: azure-creds key: AZURE_STORAGE_SAS_TOKEN When using the Azure Blob Storage, the destinationPath fulfills the following structure: <http|https>://<account-name>.<service-name>.core.windows.net/<resource-path> where <resource-path> is <container>/<blob> . The account name , which is also called storage account name , is included in the used host name.","title":"Azure Blob Storage"},{"location":"appendixes/object_stores/#other-azure-blob-storage-compatible-providers","text":"If you are using a different implementation of the Azure Blob Storage APIs, the destinationPath will have the following structure: <http|https>://<local-machine-address>:<port>/<account-name>/<resource-path> In that case, <account-name> is the first component of the path. This is required if you are testing the Azure support via the Azure Storage Emulator or Azurite .","title":"Other Azure Blob Storage compatible providers"},{"location":"appendixes/object_stores/#google-cloud-storage","text":"Currently, the CloudNativePG operator supports two authentication methods for Google Cloud Storage : the first one assumes that the pod is running inside a Google Kubernetes Engine cluster the second one leverages the environment variable GOOGLE_APPLICATION_CREDENTIALS","title":"Google Cloud Storage"},{"location":"appendixes/object_stores/#running-inside-google-kubernetes-engine","text":"When running inside Google Kubernetes Engine you can configure your backups to simply rely on Workload Identity , without having to set any credentials. In particular, you need to: set .spec.backup.barmanObjectStore.googleCredentials.gkeEnvironment to true set the iam.gke.io/gcp-service-account annotation in the serviceAccountTemplate stanza Please use the following example as a reference: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: [...] backup: barmanObjectStore: destinationPath: \"gs://<destination path here>\" googleCredentials: gkeEnvironment: true serviceAccountTemplate: metadata: annotations: iam.gke.io/gcp-service-account: [...].iam.gserviceaccount.com [...]","title":"Running inside Google Kubernetes Engine"},{"location":"appendixes/object_stores/#using-authentication","text":"Following the instruction from Google you will get a JSON file that contains all the required information to authenticate. The content of the JSON file must be provided using a Secret that can be created with the following command: kubectl create secret generic backup-creds --from-file=gcsCredentials=gcs_credentials_file.json This will create the Secret with the name backup-creds to be used in the yaml file like this: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"gs://<destination path here>\" googleCredentials: applicationCredentials: name: backup-creds key: gcsCredentials Now the operator will use the credentials to authenticate against Google Cloud Storage. Important This way of authentication will create a JSON file inside the container with all the needed information to access your Google Cloud Storage bucket, meaning that if someone gets access to the pod will also have write permissions to the bucket.","title":"Using authentication"},{"location":"cncf-projects/cilium/","text":"Cilium About Cilium is a CNCF Graduated project that was accepted as an Incubating project in 2021 and graduated in 2023. It was originally created by Isovalent. It is an advanced networking, security, and observability solution for cloud native environments, built on top of eBPF technology. Cilium manages network traffic in Kubernetes clusters by dynamically injecting eBPF programs into the Linux Kernel, enabling low-latency, high-performance communication, and enforcing fine-grained security policies. Key features of Cilium: Advanced L3-L7 security policies for fine-grained network traffic control Efficient, kernel-level traffic management via eBPF Service Mesh integration (Cilium Service Mesh) Support for both Kubernetes NetworkPolicy and CiliumNetworkPolicy Built-in observability and monitoring with Hubble To install Cilium in your environment, follow the instructions in the documentation: https://docs.cilium.io/en/stable/gettingstarted/k8s-install-default/ Pod-to-Pod Network Security with CloudNativePG and Cilium Kubernetes\u2019 default behavior is to allow traffic between any two Pods in the cluster network. Cilium provides advanced L3/L4 network security using the CiliumNetworkPolicy resource. This enables fine-grained control over network traffic between Pods within a Kubernetes cluster. It is especially useful for securing communication between application workloads and backend services. In the following examples, we demonstrate how Cilium can be used to secure a CloudNativePG PostgreSQL instance by restricting ingress traffic to only authorized Pods. Important Before proceeding, ensure that the cluster-example Postgres cluster is up and running in your environment. Default Deny Behavior in Cilium By default, Cilium does not deny all traffic unless explicitly configured to do so. In contrast to Kubernetes NetworkPolicy, which uses a deny-by-default model once a policy is present in a namespace, Cilium provides more flexible control over default deny behavior. To enforce a default deny posture with Cilium, you need to explicitly create a policy that denies all traffic to a set of Pods unless otherwise allowed. This is commonly achieved by using an empty ingress section in combination with endpointSelector , or by enabling --enable-default-deny at the Cilium agent level for broader enforcement. A minimal example of a default deny policy: apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: default-deny namespace: default spec: description: \"Default deny all ingress traffic to all Pods in this namespace\" endpointSelector: {} ingress: [] Making Cilium Network Policies work with CloudNativePG Operator When working with a network policy, Cilium or not, the first step is to make sure that the operator can reach the Pods in the target namespace. This is important because the operator needs to be able to perform checks and actions on the Pods, and one of those actions requires access to the port 8000 on the Pods to get the current status of the PostgreSQL instance running inside. The following CiliumNetworkPolicy allows the operator to access the Pods in the target default namespace: apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: cnpg-operator-access namespace: default spec: description: \"Allow CloudNativePG operator access to any pod in the target namespace\" endpointSelector: {} ingress: - fromEndpoints: - matchLabels: io.kubernetes.pod.namespace: cnpg-system toPorts: - ports: - port: \"8000\" protocol: TCP Important The cnpg-system namespace is the default namespace for the operator when using the YAML manifests. If the operator was installed using a different process (Helm, OLM, etc.), the namespace may be different. Make sure to adjust the namespace properly. Allowing access between cluster Pods Since the default policy is \"deny all\", we need to explicitly allow access between the cluster Pods in the same namespace. We will improve our previous policy by adding the required ingress rule: apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: cnpg-cluster-internal-access namespace: default spec: description: \"Allow CloudNativePG operator access and connection between pods in the same namespace\" endpointSelector: {} ingress: - fromEndpoints: - matchLabels: io.kubernetes.pod.namespace: cnpg-system - matchLabels: io.kubernetes.pod.namespace: default cnpg.io/cluster: cluster-example toPorts: - ports: - port: \"8000\" protocol: TCP - port: \"5432\" protocol: TCP The policy allows access from cnpg-system Pods and from default namespace Pods that also belong to cluster-example . The matchLabels selector requires Pods to have the complete set of listed labels. Missing even one label means the Pod will not match. Restricting Access to PostgreSQL with Cilium In this example, we define a CiliumNetworkPolicy that allows only Pods labeled role=backend in the default namespace to connect to a PostgreSQL cluster named cluster-example . All other ingress traffic is blocked by default. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-backend-label namespace: default spec: description: \"Allow PostgreSQL access on port 5432 from Pods with role=backend\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEndpoints: - matchLabels: role: backend toPorts: - ports: - port: \"5432\" protocol: TCP This CiliumNetworkPolicy ensures that only Pods labeled with role=backend can access the PostgreSQL instance managed by CloudNativePG via port 5432 in the default namespace. In the following policy, we demonstrate how to allow ingress traffic to port 5432 of a PostgreSQL cluster named cluster-example , only from Pods with the label role=backend in any namespace. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-backend-any-ns namespace: default spec: description: \"Allow PostgreSQL access on port 5432 from Pods with role=backend in any namespace\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEndpoints: - labelSelector: matchLabels: role: backend matchExpressions: - key: io.kubernetes.pod.namespace operator: Exists toPorts: - ports: - port: \"5432\" protocol: TCP The following example allows ingress traffic to port 5432 of the cluster-example cluster (located in the default namespace) from any Pods in the backend namespace. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-backend-namespace namespace: default spec: description: \"Allow PostgreSQL access on port 5432 from any Pods in the backend namespace\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEndpoints: - matchLabels: io.kubernetes.pod.namespace: backend toPorts: - ports: - port: \"5432\" protocol: TCP Using Cilium\u2019s L3/L4 policy model, we define a CiliumNetworkPolicy that explicitly allows ingress traffic to cluster Pods only from application Pods in the backend namespace. All other traffic is implicitly denied unless explicitly permitted by additional policies. The following example allows ingress traffic to port 5432 of the cluster-example cluster (located in the default namespace) from any source within the Kubernetes cluster. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-cluster-wide namespace: default spec: description: \"Allow ingress traffic to port 5432 of the cluster-example from any pods within the Kubernetes cluster\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEntities: - cluster toPorts: - ports: - port: \"5432\" protocol: TCP You may consider using editor.networkpolicy.io , a visual and interactive tool that simplifies the creation and validation of Cilium Network Policies. It\u2019s especially helpful for avoiding misconfigurations and understanding traffic rules more clearly by presenting in a visual way. With these policies, you've established baseline access controls for PostgreSQL. You can layer additional egress or audit rules using Cilium's policy language or extend to L7 enforcement with Envoy.","title":"Cilium"},{"location":"cncf-projects/cilium/#cilium","text":"","title":"Cilium"},{"location":"cncf-projects/cilium/#about","text":"Cilium is a CNCF Graduated project that was accepted as an Incubating project in 2021 and graduated in 2023. It was originally created by Isovalent. It is an advanced networking, security, and observability solution for cloud native environments, built on top of eBPF technology. Cilium manages network traffic in Kubernetes clusters by dynamically injecting eBPF programs into the Linux Kernel, enabling low-latency, high-performance communication, and enforcing fine-grained security policies. Key features of Cilium: Advanced L3-L7 security policies for fine-grained network traffic control Efficient, kernel-level traffic management via eBPF Service Mesh integration (Cilium Service Mesh) Support for both Kubernetes NetworkPolicy and CiliumNetworkPolicy Built-in observability and monitoring with Hubble To install Cilium in your environment, follow the instructions in the documentation: https://docs.cilium.io/en/stable/gettingstarted/k8s-install-default/","title":"About"},{"location":"cncf-projects/cilium/#pod-to-pod-network-security-with-cloudnativepg-and-cilium","text":"Kubernetes\u2019 default behavior is to allow traffic between any two Pods in the cluster network. Cilium provides advanced L3/L4 network security using the CiliumNetworkPolicy resource. This enables fine-grained control over network traffic between Pods within a Kubernetes cluster. It is especially useful for securing communication between application workloads and backend services. In the following examples, we demonstrate how Cilium can be used to secure a CloudNativePG PostgreSQL instance by restricting ingress traffic to only authorized Pods. Important Before proceeding, ensure that the cluster-example Postgres cluster is up and running in your environment.","title":"Pod-to-Pod Network Security with CloudNativePG and Cilium"},{"location":"cncf-projects/cilium/#default-deny-behavior-in-cilium","text":"By default, Cilium does not deny all traffic unless explicitly configured to do so. In contrast to Kubernetes NetworkPolicy, which uses a deny-by-default model once a policy is present in a namespace, Cilium provides more flexible control over default deny behavior. To enforce a default deny posture with Cilium, you need to explicitly create a policy that denies all traffic to a set of Pods unless otherwise allowed. This is commonly achieved by using an empty ingress section in combination with endpointSelector , or by enabling --enable-default-deny at the Cilium agent level for broader enforcement. A minimal example of a default deny policy: apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: default-deny namespace: default spec: description: \"Default deny all ingress traffic to all Pods in this namespace\" endpointSelector: {} ingress: []","title":"Default Deny Behavior in Cilium"},{"location":"cncf-projects/cilium/#making-cilium-network-policies-work-with-cloudnativepg-operator","text":"When working with a network policy, Cilium or not, the first step is to make sure that the operator can reach the Pods in the target namespace. This is important because the operator needs to be able to perform checks and actions on the Pods, and one of those actions requires access to the port 8000 on the Pods to get the current status of the PostgreSQL instance running inside. The following CiliumNetworkPolicy allows the operator to access the Pods in the target default namespace: apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: cnpg-operator-access namespace: default spec: description: \"Allow CloudNativePG operator access to any pod in the target namespace\" endpointSelector: {} ingress: - fromEndpoints: - matchLabels: io.kubernetes.pod.namespace: cnpg-system toPorts: - ports: - port: \"8000\" protocol: TCP Important The cnpg-system namespace is the default namespace for the operator when using the YAML manifests. If the operator was installed using a different process (Helm, OLM, etc.), the namespace may be different. Make sure to adjust the namespace properly.","title":"Making Cilium Network Policies work with CloudNativePG Operator"},{"location":"cncf-projects/cilium/#allowing-access-between-cluster-pods","text":"Since the default policy is \"deny all\", we need to explicitly allow access between the cluster Pods in the same namespace. We will improve our previous policy by adding the required ingress rule: apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: cnpg-cluster-internal-access namespace: default spec: description: \"Allow CloudNativePG operator access and connection between pods in the same namespace\" endpointSelector: {} ingress: - fromEndpoints: - matchLabels: io.kubernetes.pod.namespace: cnpg-system - matchLabels: io.kubernetes.pod.namespace: default cnpg.io/cluster: cluster-example toPorts: - ports: - port: \"8000\" protocol: TCP - port: \"5432\" protocol: TCP The policy allows access from cnpg-system Pods and from default namespace Pods that also belong to cluster-example . The matchLabels selector requires Pods to have the complete set of listed labels. Missing even one label means the Pod will not match.","title":"Allowing access between cluster Pods"},{"location":"cncf-projects/cilium/#restricting-access-to-postgresql-with-cilium","text":"In this example, we define a CiliumNetworkPolicy that allows only Pods labeled role=backend in the default namespace to connect to a PostgreSQL cluster named cluster-example . All other ingress traffic is blocked by default. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-backend-label namespace: default spec: description: \"Allow PostgreSQL access on port 5432 from Pods with role=backend\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEndpoints: - matchLabels: role: backend toPorts: - ports: - port: \"5432\" protocol: TCP This CiliumNetworkPolicy ensures that only Pods labeled with role=backend can access the PostgreSQL instance managed by CloudNativePG via port 5432 in the default namespace. In the following policy, we demonstrate how to allow ingress traffic to port 5432 of a PostgreSQL cluster named cluster-example , only from Pods with the label role=backend in any namespace. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-backend-any-ns namespace: default spec: description: \"Allow PostgreSQL access on port 5432 from Pods with role=backend in any namespace\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEndpoints: - labelSelector: matchLabels: role: backend matchExpressions: - key: io.kubernetes.pod.namespace operator: Exists toPorts: - ports: - port: \"5432\" protocol: TCP The following example allows ingress traffic to port 5432 of the cluster-example cluster (located in the default namespace) from any Pods in the backend namespace. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-backend-namespace namespace: default spec: description: \"Allow PostgreSQL access on port 5432 from any Pods in the backend namespace\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEndpoints: - matchLabels: io.kubernetes.pod.namespace: backend toPorts: - ports: - port: \"5432\" protocol: TCP Using Cilium\u2019s L3/L4 policy model, we define a CiliumNetworkPolicy that explicitly allows ingress traffic to cluster Pods only from application Pods in the backend namespace. All other traffic is implicitly denied unless explicitly permitted by additional policies. The following example allows ingress traffic to port 5432 of the cluster-example cluster (located in the default namespace) from any source within the Kubernetes cluster. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-cluster-wide namespace: default spec: description: \"Allow ingress traffic to port 5432 of the cluster-example from any pods within the Kubernetes cluster\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEntities: - cluster toPorts: - ports: - port: \"5432\" protocol: TCP You may consider using editor.networkpolicy.io , a visual and interactive tool that simplifies the creation and validation of Cilium Network Policies. It\u2019s especially helpful for avoiding misconfigurations and understanding traffic rules more clearly by presenting in a visual way. With these policies, you've established baseline access controls for PostgreSQL. You can layer additional egress or audit rules using Cilium's policy language or extend to L7 enforcement with Envoy.","title":"Restricting Access to PostgreSQL with Cilium"},{"location":"cncf-projects/external-secrets/","text":"External Secrets External Secrets is a CNCF Sandbox project, accepted in 2022 under the sponsorship of TAG Security. About The External Secrets Operator (ESO) is a Kubernetes operator that enhances secret management by decoupling the storage of secrets from Kubernetes itself. It enables seamless synchronization between external secret management systems and native Kubernetes Secret resources. ESO supports a wide range of backends, including: HashiCorp Vault AWS Secrets Manager Google Secret Manager Azure Key Vault IBM Cloud Secrets Manager \u2026and many more. For a full and up-to-date list of supported providers, refer to the official External Secrets documentation . Integration with PostgreSQL and CloudNativePG When it comes to PostgreSQL databases, External Secrets integrates seamlessly with CloudNativePG in two major use cases: Automated password management: ESO can handle the automatic generation and rotation of database user passwords stored in Kubernetes Secret resources, ensuring that applications running inside the cluster always have access to up-to-date credentials. Cross-platform secret access: It enables transparent synchronization of those passwords with an external Key Management Service (KMS) via a SecretStore resources. This allows applications and developers outside the Kubernetes cluster\u2014who may not have access to Kubernetes secrets\u2014to retrieve the database credentials directly from the external KMS. Example: Automated Password Management with External Secrets Let\u2019s walk through how to automatically rotate the password of the app user every 24 hours in the cluster-example Postgres cluster from the quickstart guide . Important Before proceeding, ensure that the cluster-example Postgres cluster is up and running in your environment. By default, CloudNativePG generates and manages a Kubernetes Secret named cluster-example-app , which contains the credentials for the app user in the cluster-example cluster. You can read more about this in the \u201cConnecting from an application\u201d section . With External Secrets, the goal is to: Define a Password generator that specifies how to generate the password. Create an ExternalSecret resource that keeps the cluster-example-app secret in sync by updating only the password and pgpass fields. Creating the Password Generator The following example creates a Password generator resource named pg-password-generator in the default namespace. You can customize the name and properties to suit your needs: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password metadata: name: pg-password-generator spec: length: 42 digits: 5 symbols: 5 symbolCharacters: \"-_$@\" noUpper: false allowRepeat: true This specification defines the characteristics of the generated password, including its length and the inclusion of digits, symbols, and uppercase letters. Creating the External Secret The example below creates an ExternalSecret resource named cluster-example-app-secret , which refreshes the password every 24 hours. It uses a Merge policy to update only the specified fields ( password , pgpass , jdbc-uri and uri ) in the cluster-example-app secret. apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: cluster-example-app-secret spec: refreshInterval: \"24h\" target: name: cluster-example-app creationPolicy: Merge template: metadata: labels: cnpg.io/reload: \"true\" data: password: \"{{ .password }}\" pgpass: \"cluster-example-rw:5432:app:app:{{ .password }}\" jdbc-uri: \"jdbc:postgresql://cluster-example-rw.default:5432/app?password={{ .password }}&user=app\" uri: \"postgresql://app:{{ .password }}@cluster-example-rw.default:5432/app\" dataFrom: - sourceRef: generatorRef: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password name: pg-password-generator The label cnpg.io/reload: \"true\" ensures that CloudNativePG triggers a reload of the user password in the database when the secret changes. Verifying the Configuration To check that the ExternalSecret is correctly synchronizing: kubectl get es cluster-example-app-secret To observe the password being refreshed in real time, temporarily reduce the refreshInterval to 30s and run the following command repeatedly: kubectl get secret cluster-example-app \\ -o jsonpath=\"{.data.password}\" | base64 -d You should see the password change every 30 seconds, confirming that the rotation is working correctly. There's More While the example above focuses on the default cluster-example-app secret created by CloudNativePG, the same approach can be extended to manage any custom secrets or PostgreSQL users you create to regularly rotate their password. Example: Integration with an External KMS One of the most widely used Key Management Service (KMS) providers in the CNCF ecosystem is HashiCorp Vault . Although Vault is licensed under the Business Source License (BUSL), a fully compatible and actively maintained open source alternative is available: OpenBao . OpenBao supports all the same interfaces as HashiCorp Vault, making it a true drop-in replacement. In this example, we'll demonstrate how to integrate CloudNativePG, External Secrets Operator, and HashiCorp Vault to automatically rotate a PostgreSQL password and securely store it in Vault. Important This example assumes that HashiCorp Vault is already installed and properly configured in your environment, and that your team has the necessary expertise to operate it. There are various ways to deploy Vault, and detailing them is outside the scope of CloudNativePG. While it's possible to run Vault inside Kubernetes, it is more commonly deployed externally. For detailed instructions, consult the HashiCorp Vault documentation . Continuing from the previous example, we will now create the necessary SecretStore and PushSecret resources to complete the integration with Vault. Creating the SecretStore In this example, we assume that HashiCorp Vault is accessible from within the namespace at http://vault.vault.svc:8200 , and that a Kubernetes Secret named vault-token exists in the same namespace, containing the token used to authenticate with Vault. apiVersion: external-secrets.io/v1beta1 kind: SecretStore metadata: name: vault-backend spec: provider: vault: server: \"http://vault.vault.svc:8200\" path: \"secrets\" # Specifies the Vault KV secret engine version (\"v1\" or \"v2\"). # Defaults to \"v2\" if not set. version: \"v2\" auth: # References a Kubernetes Secret that contains the Vault token. # See: https://www.vaultproject.io/docs/auth/token tokenSecretRef: name: \"vault-token\" key: \"token\" --- apiVersion: v1 kind: Secret metadata: name: vault-token data: token: aHZzLioqKioqKio= # hvs.******* This configuration creates a SecretStore resource named vault-backend . Important This example uses basic token-based authentication, which is suitable for testing API, and CLI use cases. While it is the default method enabled in Vault, it is not recommended for production environments. For production, consider using more secure authentication methods. Refer to the External Secrets Operator documentation for a full list of supported authentication mechanisms. Info HashiCorp Vault must have a KV secrets engine enabled at the secrets path with version v2 . If your Vault instance uses a different path or version, be sure to update the path and version fields accordingly. Creating the PushSecret The PushSecret resource is used to push a Kubernetes Secret to HashiCorp Vault. In this simplified example, we'll push the credentials for the app user of the sample cluster cluster-example . For more details on configuring PushSecret , refer to the External Secrets Operator documentation . apiVersion: external-secrets.io/v1alpha1 kind: PushSecret metadata: name: pushsecret-example spec: deletionPolicy: Delete refreshInterval: 24h secretStoreRefs: - name: vault-backend kind: SecretStore selector: secret: name: cluster-example-app data: - match: remoteRef: remoteKey: cluster-example-app In this example, the PushSecret resource instructs the External Secrets Operator to push the Kubernetes Secret named cluster-example-app to HashiCorp Vault (from the previous example). The remoteKey defines the name under which the secret will be stored in Vault, using the SecretStore named vault-backend . Verifying the Configuration To verify that the PushSecret is functioning correctly, navigate to the HashiCorp Vault UI. In the kv secrets engine at the path secrets , you should find a secret named cluster-example-app , corresponding to the remoteKey defined above.","title":"External Secrets"},{"location":"cncf-projects/external-secrets/#external-secrets","text":"External Secrets is a CNCF Sandbox project, accepted in 2022 under the sponsorship of TAG Security.","title":"External Secrets"},{"location":"cncf-projects/external-secrets/#about","text":"The External Secrets Operator (ESO) is a Kubernetes operator that enhances secret management by decoupling the storage of secrets from Kubernetes itself. It enables seamless synchronization between external secret management systems and native Kubernetes Secret resources. ESO supports a wide range of backends, including: HashiCorp Vault AWS Secrets Manager Google Secret Manager Azure Key Vault IBM Cloud Secrets Manager \u2026and many more. For a full and up-to-date list of supported providers, refer to the official External Secrets documentation .","title":"About"},{"location":"cncf-projects/external-secrets/#integration-with-postgresql-and-cloudnativepg","text":"When it comes to PostgreSQL databases, External Secrets integrates seamlessly with CloudNativePG in two major use cases: Automated password management: ESO can handle the automatic generation and rotation of database user passwords stored in Kubernetes Secret resources, ensuring that applications running inside the cluster always have access to up-to-date credentials. Cross-platform secret access: It enables transparent synchronization of those passwords with an external Key Management Service (KMS) via a SecretStore resources. This allows applications and developers outside the Kubernetes cluster\u2014who may not have access to Kubernetes secrets\u2014to retrieve the database credentials directly from the external KMS.","title":"Integration with PostgreSQL and CloudNativePG"},{"location":"cncf-projects/external-secrets/#example-automated-password-management-with-external-secrets","text":"Let\u2019s walk through how to automatically rotate the password of the app user every 24 hours in the cluster-example Postgres cluster from the quickstart guide . Important Before proceeding, ensure that the cluster-example Postgres cluster is up and running in your environment. By default, CloudNativePG generates and manages a Kubernetes Secret named cluster-example-app , which contains the credentials for the app user in the cluster-example cluster. You can read more about this in the \u201cConnecting from an application\u201d section . With External Secrets, the goal is to: Define a Password generator that specifies how to generate the password. Create an ExternalSecret resource that keeps the cluster-example-app secret in sync by updating only the password and pgpass fields.","title":"Example: Automated Password Management with External Secrets"},{"location":"cncf-projects/external-secrets/#creating-the-password-generator","text":"The following example creates a Password generator resource named pg-password-generator in the default namespace. You can customize the name and properties to suit your needs: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password metadata: name: pg-password-generator spec: length: 42 digits: 5 symbols: 5 symbolCharacters: \"-_$@\" noUpper: false allowRepeat: true This specification defines the characteristics of the generated password, including its length and the inclusion of digits, symbols, and uppercase letters.","title":"Creating the Password Generator"},{"location":"cncf-projects/external-secrets/#creating-the-external-secret","text":"The example below creates an ExternalSecret resource named cluster-example-app-secret , which refreshes the password every 24 hours. It uses a Merge policy to update only the specified fields ( password , pgpass , jdbc-uri and uri ) in the cluster-example-app secret. apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: cluster-example-app-secret spec: refreshInterval: \"24h\" target: name: cluster-example-app creationPolicy: Merge template: metadata: labels: cnpg.io/reload: \"true\" data: password: \"{{ .password }}\" pgpass: \"cluster-example-rw:5432:app:app:{{ .password }}\" jdbc-uri: \"jdbc:postgresql://cluster-example-rw.default:5432/app?password={{ .password }}&user=app\" uri: \"postgresql://app:{{ .password }}@cluster-example-rw.default:5432/app\" dataFrom: - sourceRef: generatorRef: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password name: pg-password-generator The label cnpg.io/reload: \"true\" ensures that CloudNativePG triggers a reload of the user password in the database when the secret changes.","title":"Creating the External Secret"},{"location":"cncf-projects/external-secrets/#verifying-the-configuration","text":"To check that the ExternalSecret is correctly synchronizing: kubectl get es cluster-example-app-secret To observe the password being refreshed in real time, temporarily reduce the refreshInterval to 30s and run the following command repeatedly: kubectl get secret cluster-example-app \\ -o jsonpath=\"{.data.password}\" | base64 -d You should see the password change every 30 seconds, confirming that the rotation is working correctly.","title":"Verifying the Configuration"},{"location":"cncf-projects/external-secrets/#theres-more","text":"While the example above focuses on the default cluster-example-app secret created by CloudNativePG, the same approach can be extended to manage any custom secrets or PostgreSQL users you create to regularly rotate their password.","title":"There's More"},{"location":"cncf-projects/external-secrets/#example-integration-with-an-external-kms","text":"One of the most widely used Key Management Service (KMS) providers in the CNCF ecosystem is HashiCorp Vault . Although Vault is licensed under the Business Source License (BUSL), a fully compatible and actively maintained open source alternative is available: OpenBao . OpenBao supports all the same interfaces as HashiCorp Vault, making it a true drop-in replacement. In this example, we'll demonstrate how to integrate CloudNativePG, External Secrets Operator, and HashiCorp Vault to automatically rotate a PostgreSQL password and securely store it in Vault. Important This example assumes that HashiCorp Vault is already installed and properly configured in your environment, and that your team has the necessary expertise to operate it. There are various ways to deploy Vault, and detailing them is outside the scope of CloudNativePG. While it's possible to run Vault inside Kubernetes, it is more commonly deployed externally. For detailed instructions, consult the HashiCorp Vault documentation . Continuing from the previous example, we will now create the necessary SecretStore and PushSecret resources to complete the integration with Vault.","title":"Example: Integration with an External KMS"},{"location":"cncf-projects/external-secrets/#creating-the-secretstore","text":"In this example, we assume that HashiCorp Vault is accessible from within the namespace at http://vault.vault.svc:8200 , and that a Kubernetes Secret named vault-token exists in the same namespace, containing the token used to authenticate with Vault. apiVersion: external-secrets.io/v1beta1 kind: SecretStore metadata: name: vault-backend spec: provider: vault: server: \"http://vault.vault.svc:8200\" path: \"secrets\" # Specifies the Vault KV secret engine version (\"v1\" or \"v2\"). # Defaults to \"v2\" if not set. version: \"v2\" auth: # References a Kubernetes Secret that contains the Vault token. # See: https://www.vaultproject.io/docs/auth/token tokenSecretRef: name: \"vault-token\" key: \"token\" --- apiVersion: v1 kind: Secret metadata: name: vault-token data: token: aHZzLioqKioqKio= # hvs.******* This configuration creates a SecretStore resource named vault-backend . Important This example uses basic token-based authentication, which is suitable for testing API, and CLI use cases. While it is the default method enabled in Vault, it is not recommended for production environments. For production, consider using more secure authentication methods. Refer to the External Secrets Operator documentation for a full list of supported authentication mechanisms. Info HashiCorp Vault must have a KV secrets engine enabled at the secrets path with version v2 . If your Vault instance uses a different path or version, be sure to update the path and version fields accordingly.","title":"Creating the SecretStore"},{"location":"cncf-projects/external-secrets/#creating-the-pushsecret","text":"The PushSecret resource is used to push a Kubernetes Secret to HashiCorp Vault. In this simplified example, we'll push the credentials for the app user of the sample cluster cluster-example . For more details on configuring PushSecret , refer to the External Secrets Operator documentation . apiVersion: external-secrets.io/v1alpha1 kind: PushSecret metadata: name: pushsecret-example spec: deletionPolicy: Delete refreshInterval: 24h secretStoreRefs: - name: vault-backend kind: SecretStore selector: secret: name: cluster-example-app data: - match: remoteRef: remoteKey: cluster-example-app In this example, the PushSecret resource instructs the External Secrets Operator to push the Kubernetes Secret named cluster-example-app to HashiCorp Vault (from the previous example). The remoteKey defines the name under which the secret will be stored in Vault, using the SecretStore named vault-backend .","title":"Creating the PushSecret"},{"location":"cncf-projects/external-secrets/#verifying-the-configuration_1","text":"To verify that the PushSecret is functioning correctly, navigate to the HashiCorp Vault UI. In the kv secrets engine at the path secrets , you should find a secret named cluster-example-app , corresponding to the remoteKey defined above.","title":"Verifying the Configuration"},{"location":"release_notes/edb-cloud-native-postgresql/","text":"Release notes for 1.14.0 and earlier The first public release of CloudNativePG is version 1.15.0. Before that, the product was entirely owned by EDB and distributed under the name of \"Cloud Native PostgreSQL\" . The list of changes in this page is only for informative purposes, to demonstrate the history of the product on top of commits. None of the versions listed here exists for CloudNativePG. Version 1.14.0 Release date: 25 March 2022 Features: Natively support Google Cloud Storage for backup and recovery, by taking advantage of the features introduced in Barman Cloud 2.19 Improved observability of backups through the introduction of the LastBackupSucceeded condition for the Cluster object Support update of Hot Standby sensitive parameters: max_connections , max_prepared_transactions , max_locks_per_transaction , max_wal_senders , max_worker_processes Add the Online upgrade in progress phase in the Cluster object to show when an online upgrade of the operator is in progress Ability to inherit an AWS IAM Role as an alternative way to provide credentials for the S3 object storage Support for Opaque secrets for Pooler\u2019s authQuerySecret and certificates Updated default PostgreSQL version to 14.2 Add a new command to kubectl cnp plugin named maintenance to set maintenance window to cluster(s) in one or all namespaces across the Kubernetes cluster Container Images: Latest PostgreSQL containers include Barman Cloud 2.19 Security Enhancements: Stronger RBAC enforcement for namespaced operator installations with Operator Lifecycle Manager, including OpenShift. OpenShift users are recommended to update to this version. Fixes: Allow the instance manager to retry an interrupted pg_rewind by preserving a copy of the original pg_control file Clean up stale PID files before running pg_rewind Force sorting by key in primary_conninfo to avoid random restarts with PostgreSQL versions prior to 13 Preserve ServiceAccount changes (e.g., labels, annotations) upon reconciliation Disable enforcement of the imagePullPolicy default value Improve initDB validation for WAL segment size Properly handle the targetLSN option when recovering a cluster with the LSN specified Fix custom TLS certificates validation by allowing a certificates chain both in the server and CA certificates Version 1.13.0 Release date: 17 February 2022 Features: Support for Snappy compression. Snappy is a fast compression option for backups that increase the speed of uploads to the object store using a lower compression ratio Support for tagging files uploaded to the Barman object store. This feature requires Barman 2.18 in the operand image. of backups after Cluster deletion Extension of the status of a Cluster with status.conditions . The condition ContinuousArchiving indicates that the Cluster has started to archive WAL files Improve the status command of the cnp plugin for kubectl with additional information: add a Cluster Summary section showing the status of the Cluster and a Certificates Status section including the status of the certificates used in the Cluster along with the time left to expire Support the new barman-cloud-check-wal-archive command to detect a non-empty backup destination when creating a new cluster Add support for using a Secret to add default monitoring queries through MONITORING_QUERIES_SECRET configuration variable. Allow the user to restrict container\u2019s permissions using AppArmor (on Kubernetes clusters deployed with AppArmor support) Add Windows platform support to cnp plugin for kubectl , now the plugin is available on Windows x86 and ARM Drop support for Kubernetes 1.18 and deprecated API versions Container Images: PostgreSQL containers include Barman 2.18 Security Fix: Add coherence check of username field inside owner and superuser secrets; previously, a malicious user could have used the secrets to change the password of any PostgreSQL user Fixes: Fix a memory leak in code fetching status from Postgres pods Disable PostgreSQL self-restart after a crash. The instance controller handles the lifecycle of the PostgreSQL instance Prevent modification of .spec.postgresUID and .spec.postgresGID fields in validation webhook. Changing these fields after Cluster creation makes PostgreSQL unable to start Reduce the log verbosity from the backup and WAL archiving handling code Correct a bug resulting in a Cluster being marked as Healthy when not initialized yet Allows standby servers in clusters with a very high WAL production rate to switch to streaming once they are aligned Fix a race condition during the startup of a PostgreSQL pod that could seldom lead to a crash Fix a race condition that could lead to a failure initializing the first PVC in a Cluster Remove an extra restart of a just demoted primary Pod before joining the Cluster as a replica Correctly handle replication-sensitive PostgreSQL configuration parameters when recovering from a backup Fix missing validation of PostgreSQL configurations during Cluster creation Version 1.12.0 Release date: 11 January 2022 Features: Add Kubernetes 1.23 to the list of supported Kubernetes distributions and remove end-to-end tests for 1.17, which ended support by the Kubernetes project in Dec 2020 Improve the responsiveness of pod status checks in case of network issues by adding a connection timeout of 2 seconds and a communication timeout of 30 seconds. This change sets a limit on the time the operator waits for a pod to report its status before declaring it as failed, enhancing the robustness and predictability of a failover operation Introduce the .spec.inheritedMetadata field to the Cluster allowing the user to specify labels and annotations that will apply to all objects generated by the Cluster Reduce the number of queries executed when calculating the status of an instance Add a readiness probe for PgBouncer Add support for custom Certification Authority of the endpoint of Barman\u2019s backup object store when using Azure protocol Fixes: During a failover, wait to select a new primary until all the WAL streaming connections are closed. The operator now sets by default wal_sender_timeout and wal_receiver_timeout to 5 seconds to make sure standby nodes will quickly notice if the primary has network issues Change WAL archiving strategy in replica clusters to fix rolling updates by setting \"archive_mode\" to \"always\" for any PostgreSQL instance in a replica cluster. We then restrict the upload of the WAL only from the current and target designated primary. A WAL may be uploaded twice during switchovers, which is not an issue Fix support for custom Certification Authority of the endpoint of Barman\u2019s backup object store in replica clusters source Use a fixed name for default monitoring config map in the cluster namespace If the defaulting webhook is not working for any reason, the operator now updates the Cluster with the defaults also during the reconciliation cycle Fix the comparison of resource requests and limits to fix a rare issue leading to an update of all the pods on every reconciliation cycle Improve log messages from webhooks to also include the object namespace Stop logging a \u201cdefault\u201d message at the start of every reconciliation loop Stop logging a PodMonitor deletion on every reconciliation cycle if enablePodMonitor is false Do not complain about possible architecture mismatch if a pod is not reachable Version 1.11.0 Release date: 15 December 2021 Features: Parallel WAL archiving and restore: allow the database to keep up with WAL generation on high write systems by introducing the backupObjectStore.maxParallel option to set the maximum number of parallel jobs to be executed during both WAL archiving (by PostgreSQL\u2019s archive_command ) and WAL restore (by restore_command ). Using parallel restore option can allow newly promoted Standbys to get to a ready state faster by fetching needed WAL files to replay in parallel rather than sequentially Default set of metrics for monitoring: a new ConfigMap called default-monitoring is automatically deployed in the same namespace of the operator and, by default, added to any existing Postgres cluster. Such behavior can be changed globally by setting the MONITORING_QUERIES_CONFIGMAP parameter in the operator\u2019s configuration, or at cluster level through the .spec.monitoring.disableDefaultQueries option (by default set to false ) Introduce the enablePodMonitor option in the monitoring section of a cluster to automatically manage a PodMonitor resource and seamlessly integrate with Prometheus Improve the PostgreSQL shutdown procedure by trying to execute a smart shutdown for the first half of the desired stopDelay time, and a fast shutdown for the remaining half, before the pod is killed by Kubernetes Add the switchoverDelay option to control the time given to the former primary to shut down gracefully and archive all the WAL files before promoting the new primary (by default, CloudNativePG waits indefinitely to privilege data durability) Handle changes to resource requests and limits for a PostgreSQL Cluster by issuing a rolling update Improve the status command of the cnp plugin for kubectl with additional information: streaming replication status, total size of the database, role of an instance in the cluster Enhance support of workloads with many parallel workers by enabling configuration of the dynamic_shared_memory_type and shared_memory_type parameters for PostgreSQL\u2019s management of shared memory Propagate labels and annotations defined at cluster level to the associated resources, including pods (deletions are not supported) Automatically remove pods that have been evicted by the Kubelet Manage automated resizing of persistent volumes in Azure through the ENABLE_AZURE_PVC_UPDATES operator configuration option, by issuing a rolling update of the cluster if needed (disabled by default) Introduce the cnpg.io/reconciliationLoop annotation that, when set to disabled on a given Postgres cluster, prevents the reconciliation loop from running Introduce the postInitApplicationSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed on the main application database as a superuser immediately after the cluster has been created Fixes: Liveness probe now correctly handles the startup process of a PostgreSQL server. This fixes an issue reported by a few customers and affects a restarted standby server that needs to recover WAL files to reach a consistent state, but it was not able to do it before the timeout of liveness probe would kick in, leaving the pods in CrashLoopBackOff status. Liveness probe now correctly handles the case of a former primary that needs to use pg_rewind to re-align with the current primary after a timeline diversion. This fixes the pod of the new standby from repeatedly being killed by Kubernetes. Reduce client-side throttling from Postgres pods (e.g. Waited for 1.182388649s due to client-side throttling, not priority and fairness, request: GET ) Disable Public Key Infrastructure (PKI) initialization on OpenShift and OLM installations, by using the provided one When changing configuration parameters that require a restart, always leave the primary as last Mark a PVC to be ready only after a job has been completed successfully, preventing a race condition in PVC initialization Use the correct public key when renewing the expired webhook TLS secret. Fix an overflow when parsing an LSN Remove stale PID files at startup Let the Pooler resource inherit the imagePullSecret defined in the operator, if exists Version 1.10.0 Release date: 11 November 2021 Features: Connection Pooling with PgBouncer : introduce the Pooler resource and controller to automatically manage a PgBouncer deployment to be used as a connection pooler for a local PostgreSQL Cluster . The feature includes TLS client/server connections, password authentication, High Availability, pod templates support, configuration of key PgBouncer parameters, PAUSE / RESUME , logging in JSON format, Prometheus exporter for stats, pools, and lists Backup Retention Policies : support definition of recovery window retention policies for backups (e.g. \u201830d\u2019 to ensure a recovery window of 30 days) In-Place updates of the operator : introduce an in-place online update of the instance manager, which removes the need to perform a rolling update of the entire cluster following an update of the operator. By default this option is disabled (please refer to the documentation for more detailed information ) Limit the list of options that can be customized in the initdb bootstrap method to dataChecksums , encoding , localeCollate , localeCType , walSegmentSize . This makes the options array obsolete and planned to be removed in the v2 API Introduce the postInitTemplateSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed on the template1 database as a superuser immediately after the cluster has been created. This feature allows you to include default objects in all application databases created in the cluster New default metrics added to the instance Prometheus exporter: Postgres version, cluster name, and first point of recoverability according to the backup catalog Retry taking a backup after a failure Build awareness about Barman Cloud capabilities in order to prevent the operator from invoking recently introduced features (such as retention policies, or Azure Blob Container storage) that are not present in operand images that are not frequently updated Integrate the output of the status command of the cnp plugin with information about the backup Introduce a new annotation that reports the status of a PVC (being initialized or ready) Set the cluster name in the k8s.enterprisedb.io/cluster label for every object generated in a Cluster , including Backup objects Drop support for deprecated API version postgresql.cnpg.io/v1alpha1 on the Cluster , Backup , and ScheduledBackup kinds Set default operand image to PostgreSQL 14.2 Security: Set allowPrivilegeEscalation to false for the operator containers securityContext Fixes: Disable primary PodDisruptionBudget during maintenance in single-instance clusters Use the correct certificate certification authority (CA) during recovery operations Prevent Postgres connection leaking when checking WAL archiving status before taking a backup Let WAL archive/restore sleep for 100ms following transient errors that would flood logs otherwise Version 1.9.2 Release date: 15 October 2021 Features: Enhance JSON log with two new loggers: wal-archive for PostgreSQL's archive_command , and wal-restore for restore_command in a standby Fixes: Enable WAL archiving during the standby promotion (prevented .history files from being archived) Pass the --cloud-provider option to Barman Cloud tools only when using Barman 2.13 or higher to avoid errors with older operands Wait for the pod of the primary to be ready before triggering a backup Version 1.9.1 Release date: 30 September 2021 This release is to celebrate the launch of PostgreSQL 14 by making it the default major version when a new Cluster is created without defining a specific image name. Fixes: Fix issue causing Error while getting barman endpoint CA secret message to appear in the logs of the primary pod, which prevented the backup to work correctly Properly retry requesting a new backup in case of temporary communication issues with the instance manager Version 1.9.0 Release date: 28 September 2021 Version 1.9.0 is not available on OpenShift due to delays with the release process and the subsequent release of version 1.9.1. Features: Add Kubernetes 1.22 to the list of supported Kubernetes distributions, and remove 1.16 Introduce support for the --restore-target-wal option in pg_rewind , in order to fetch WAL files from the backup archive, if necessary (available only with PostgreSQL 13+) Expose a default metric for the Prometheus exporter that estimates the number of pages in the pg_catalog.pg_largeobject table in each database Enhance the performance of WAL archiving and fetching, through local in-memory cache Fixes: Explicitly set the postgres user when invoking pg_isready - required by restricted SCC in OpenShift Properly update the FirstRecoverabilityPoint in the status Set archive_mode = always on the designated primary if backup is requested Minor bug fixes Version 1.8.0 Release date: 13 September 2021 Features: Bootstrap a new cluster via full or Point-In-Time Recovery directly from an object store defined in the external cluster section, eliminating the previous requirement to have a Backup CR defined Introduce the immediate option in scheduled backups to request a backup immediately after the first Postgres instance running, adding the capability to rewind to the very beginning of a cluster when Point-In-Time Recovery is configured Add the firstRecoverabilityPoint in the cluster status to report the oldest consistent point in time to request a recovery based on the backup object store\u2019s content Enhance the default Prometheus exporter for a PostgreSQL instance by exposing the following new metrics: number of WAL files and computed total size on disk number of .ready and .done files in the archive status folder flag for replica mode number of requested minimum/maximum synchronous replicas, as well as the expected and actually observed ones Add support for the runonserver option when defining custom metrics in the Prometheus exporter to limit the collection of a metric to a range of PostgreSQL versions Natively support Azure Blob Storage for backup and recovery, by taking advantage of the feature introduced in Barman 2.13 for Barman Cloud Rely on pg_isready for the liveness probe Support RFC3339 format for timestamp specification in recovery target times Introduce .spec.imagePullPolicy to control the pull policy of image containers for all pods and jobs created for a cluster Add support for OpenShift 4.8, which replaces OpenShift 4.5 Support PostgreSQL 14 (beta) Enhance the replica cluster feature with cross-cluster replication from an object store defined in an external cluster section, without requiring a streaming connection (experimental) Introduce logLevel option to the cluster's spec to specify one of the following levels: error, info, debug or trace Security Enhancements: Introduce .spec.enableSuperuserAccess to enable/disable network access with the postgres user through password authentication Fixes: Properly inform users when a cluster enters an unrecoverable state and requires human intervention Version 1.7.1 Release date: 11 August 2021 Features: Prefer self-healing over configuration with regards to synchronous replication, empowering the operator to temporarily override minSyncReplicas and maxSyncReplicas settings in case the cluster is not able to meet the requirements during self-healing operations Introduce the postInitSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed as a superuser immediately after the cluster has been created Fixes: Allow the operator to failover when the primary is not ready (bug introduced in 1.7.0) Execute administrative queries using the LOCAL synchronous commit level Correctly parse multi-line log entries in PGAudit Version 1.7.0 Release date: 28 July 2021 Features: Add native support to PGAudit with a new type of logger called pgaudit directly available in the JSON output Enhance monitoring and observability capabilities through: Native support for the pg_stat_statements and auto_explain extensions The target_databases option in the Prometheus exporter to run a user-defined metric query on one or more databases (including auto-discovery of databases through shell-like pattern matching) Exposure of the manual_switchover_required metric to promptly report whether a cluster with primaryUpdateStrategy set to supervised requires a manual switchover Transparently handle shared_preload_libraries for pg_audit , auto_explain and pg_stat_statements Automatic configuration of shared_preload_libraries for PostgreSQL when pg_stat_statements , pgaudit or auto_explain options are added to the postgresql parameters section Support the cnpg.io/reload label to finely control the automated reload of config maps and secrets, including those used for custom monitoring/alerting metrics in the Prometheus exporter or to store certificates Add the reload command to the cnp plugin for kubectl to trigger a reconciliation loop on the instances Improve control of pod affinity and anti-affinity configurations through additionalPodAffinity and additionalPodAntiAffinity Introduce a separate PodDisruptionBudget for primary instances, by requiring at least a primary instance to run at any time Security Enhancements: Add the .spec.certificates.clientCASecret and .spec.certificates.replicationTLSSecret options to define custom client Certification Authority and certificate for the PostgreSQL server, to be used to authenticate client certificates and secure communication between PostgreSQL nodes Add the .spec.backup.barmanObjectStore.endpointCA option to define the custom Certification Authority bundle of the endpoint of Barman\u2019s backup object store Fixes: Correctly parse histograms in the Prometheus exporter Reconcile services created by the operator for a cluster Version 1.6.0 Release date: 12 July 2021 Features: Replica mode ( EXPERIMENTAL ): allow a cluster to be created as a replica of a source cluster. A replica cluster has a designated primary and any number of standbys. Add the .spec.postgresql.promotionTimeout parameter to specify the maximum amount of seconds to wait when promoting an instance to primary, defaulting to 40000000 seconds. Add the .spec.affinity.podAntiAffinityType parameter. It can be set to preferred (default), resulting in preferredDuringSchedulingIgnoredDuringExecution being used, or to required , resulting in requiredDuringSchedulingIgnoredDuringExecution . Changes: Fixed a race condition when deleting a PVC and a pod which prevented the operator from creating a new pod. Fixed a race condition preventing the manager from detecting the need for a PostgreSQL restart on a configuration change. Fixed a panic in kubectl-cnp on clusters without annotations. Lowered the level of some log messages to debug . E2E tests for server CA and TLS injection. Version 1.5.1 Release date: 17 June 2021 Change: Fix a bug with CRD validation preventing auto-update with Operator Deployments on Red Hat OpenShift Allow passing operator's configuration using a Secret. Version 1.5.0 Release date: 11 June 2021 Features: Introduce the pg_basebackup bootstrap method to create a new PostgreSQL cluster as a copy of an existing PostgreSQL instance of the same major version, even outside Kubernetes Add support for Kubernetes\u2019 tolerations in the Affinity section of the Cluster resource, allowing users to distribute PostgreSQL instances on Kubernetes nodes with the required taint Enable specification of a digest to an image name, through the <image>:<tag>@sha256:<digestValue> format, for more deterministic and repeatable deployments Security Enhancements: Customize TLS certificates to authenticate the PostgreSQL server by defining secrets for the server certificate and the related Certification Authority that signed it Raise the sslmode for the WAL receiver process of internal and automatically managed streaming replicas from require to verify-ca Changes: Enhance the promote subcommand of the cnp plugin for kubectl to accept just the node number rather than the whole name of the pod Adopt DNS-1035 validation scheme for cluster names (from which service names are inherited) Enforce streaming replication connection when cloning a standby instance or when bootstrapping using the pg_basebackup method Integrate the Backup resource with beginWal , endWal , beginLSN , endLSN , startedAt and stoppedAt regarding the physical base backup Documentation improvements: Provide a list of ports exposed by the operator and the operand container Introduce the cnp-bench helm charts and guidelines for benchmarking the storage and PostgreSQL for database workloads E2E tests enhancements: Test Kubernetes 1.21 Add test for High Availability of the operator Add test for node draining Minor bug fixes, including: Timeout to pg_ctl start during recovery operations too short Operator not watching over direct events on PVCs Fix handling of immediateCheckpoint and jobs parameter in barmanObjectStore backups Empty logs when recovering from a backup Version 1.4.0 Release date: 18 May 2021 Features: Standard output logging of PostgreSQL error messages in JSON format Provide a basic set of PostgreSQL metrics for the Prometheus exporter Add the restart command to the cnp plugin for kubectl to restart the pods of a given PostgreSQL cluster in a rollout fashion Security Enhancements: Set readOnlyRootFilesystem security context for pods Changes: IMPORTANT: If you have previously deployed the CloudNativePG operator using the YAML manifest, you must delete the existing operator deployment before installing the new version. This is required to avoid conflicts with other Kubernetes API's due to a change in labels and label selectors being directly managed by the operator. Please refer to the CloudNativePG documentation for additional detail on upgrading to 1.4.0 Fix the labels that are automatically defined by the operator, renaming them from control-plane: controller-manager to app.kubernetes.io/name: cloudnative-pg Assign the metrics name to the TCP port for the Prometheus exporter Set cnp_metrics_exporter as the application_name to the metrics exporter connection in PostgreSQL When available, use the application database for monitoring queries of the Prometheus exporter instead of the postgres database Documentation improvements: Customization of monitoring queries Operator upgrade instructions E2E tests enhancements Minor bug fixes, including: Avoid using -R when calling pg_basebackup Remove stack trace from error log when getting the status Version 1.3.0 Release date: 23 Apr 2021 Features: Inheritance of labels and annotations Set resource limits for every container Security Enhancements: Support for restricted security context constraint on Red Hat OpenShift to limit pod execution to a namespace allocated UID and SELinux context Pod security contexts explicitly defined by the operator to run as non-root, non-privileged and without privilege escalation Changes: Prometheus exporter endpoint listening on port 9187 (port 8000 is now reserved to instance coordination with API server) Documentation improvements E2E tests enhancements, including GKE environment Minor bug fixes Version 1.2.1 Release date: 6 Apr 2021 ScheduledBackup are no longer owners of the Backups, meaning that backups are not removed when ScheduledBackup objects are deleted Update on ubi8-minimal image to solve RHSA-2021:1024 (Security Advisory: Important) Version 1.2.0 Release date: 31 Mar 2021 Introduce experimental support for custom monitoring queries as ConfigMap and Secret objects using a compatible syntax with postgres_exporter for Prometheus Support Operator Lifecycle Manager (OLM) deployments, with the subsequent presence on OperatorHub.io Enhance container security by applying guidelines from the US Department of Defense (DoD)'s Defense Information Systems Agency (DISA) and the Center for Internet Security (CIS) and verifying them directly in the pipeline with Dockle Improve E2E tests on AKS Minor bug fixes Version 1.1.0 Release date: 3 Mar 2021 Add kubectl cnp status to pretty-print the status of a cluster, including JSON and YAML output Add kubectl cnp certificate to enable TLS authentication for client applications Add the -ro service to route connections to the available hot standby replicas only, enabling offload of read-only queries from the cluster's primary instance Rollback scaling down a cluster to a value lower than maxSyncReplicas Request a checkpoint before demoting a former primary Send SIGINT signal (fast shutdown) to PostgreSQL process on SIGTERM Minor bug fixes Version 1.0.0 Release date: 4 Feb 2021 The first major stable release of CloudNativePG implements Cluster , Backup and ScheduledBackup in the API group postgresql.cnpg.io/v1 . It uses these resources to create and manage PostgreSQL clusters inside Kubernetes with the following main capabilities: Direct integration with Kubernetes API server for High Availability, without requiring an external tool Self-Healing capability, through: failover of the primary instance by promoting the most aligned replica automated recreation of a replica Planned switchover of the primary instance by promoting a selected replica Scale up/down capabilities Definition of an arbitrary number of instances (minimum 1 - one primary server) Definition of the read-write service to connect your applications to the only primary server of the cluster Definition of the read service to connect your applications to any of the instances for reading workloads Support for Local Persistent Volumes with PVC templates Reuse of Persistent Volumes storage in Pods Rolling updates for PostgreSQL minor versions and operator upgrades TLS connections and client certificate authentication Continuous backup to an S3 compatible object store Full recovery and point-in-time recovery from an S3 compatible object store backup Support for synchronous replicas Support for node affinity via nodeSelector property Standard output logging of PostgreSQL error messages","title":"Release notes for 1.14.0 and earlier"},{"location":"release_notes/edb-cloud-native-postgresql/#release-notes-for-1140-and-earlier","text":"The first public release of CloudNativePG is version 1.15.0. Before that, the product was entirely owned by EDB and distributed under the name of \"Cloud Native PostgreSQL\" . The list of changes in this page is only for informative purposes, to demonstrate the history of the product on top of commits. None of the versions listed here exists for CloudNativePG.","title":"Release notes for 1.14.0 and earlier"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1140","text":"Release date: 25 March 2022 Features: Natively support Google Cloud Storage for backup and recovery, by taking advantage of the features introduced in Barman Cloud 2.19 Improved observability of backups through the introduction of the LastBackupSucceeded condition for the Cluster object Support update of Hot Standby sensitive parameters: max_connections , max_prepared_transactions , max_locks_per_transaction , max_wal_senders , max_worker_processes Add the Online upgrade in progress phase in the Cluster object to show when an online upgrade of the operator is in progress Ability to inherit an AWS IAM Role as an alternative way to provide credentials for the S3 object storage Support for Opaque secrets for Pooler\u2019s authQuerySecret and certificates Updated default PostgreSQL version to 14.2 Add a new command to kubectl cnp plugin named maintenance to set maintenance window to cluster(s) in one or all namespaces across the Kubernetes cluster Container Images: Latest PostgreSQL containers include Barman Cloud 2.19 Security Enhancements: Stronger RBAC enforcement for namespaced operator installations with Operator Lifecycle Manager, including OpenShift. OpenShift users are recommended to update to this version. Fixes: Allow the instance manager to retry an interrupted pg_rewind by preserving a copy of the original pg_control file Clean up stale PID files before running pg_rewind Force sorting by key in primary_conninfo to avoid random restarts with PostgreSQL versions prior to 13 Preserve ServiceAccount changes (e.g., labels, annotations) upon reconciliation Disable enforcement of the imagePullPolicy default value Improve initDB validation for WAL segment size Properly handle the targetLSN option when recovering a cluster with the LSN specified Fix custom TLS certificates validation by allowing a certificates chain both in the server and CA certificates","title":"Version 1.14.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1130","text":"Release date: 17 February 2022 Features: Support for Snappy compression. Snappy is a fast compression option for backups that increase the speed of uploads to the object store using a lower compression ratio Support for tagging files uploaded to the Barman object store. This feature requires Barman 2.18 in the operand image. of backups after Cluster deletion Extension of the status of a Cluster with status.conditions . The condition ContinuousArchiving indicates that the Cluster has started to archive WAL files Improve the status command of the cnp plugin for kubectl with additional information: add a Cluster Summary section showing the status of the Cluster and a Certificates Status section including the status of the certificates used in the Cluster along with the time left to expire Support the new barman-cloud-check-wal-archive command to detect a non-empty backup destination when creating a new cluster Add support for using a Secret to add default monitoring queries through MONITORING_QUERIES_SECRET configuration variable. Allow the user to restrict container\u2019s permissions using AppArmor (on Kubernetes clusters deployed with AppArmor support) Add Windows platform support to cnp plugin for kubectl , now the plugin is available on Windows x86 and ARM Drop support for Kubernetes 1.18 and deprecated API versions Container Images: PostgreSQL containers include Barman 2.18 Security Fix: Add coherence check of username field inside owner and superuser secrets; previously, a malicious user could have used the secrets to change the password of any PostgreSQL user Fixes: Fix a memory leak in code fetching status from Postgres pods Disable PostgreSQL self-restart after a crash. The instance controller handles the lifecycle of the PostgreSQL instance Prevent modification of .spec.postgresUID and .spec.postgresGID fields in validation webhook. Changing these fields after Cluster creation makes PostgreSQL unable to start Reduce the log verbosity from the backup and WAL archiving handling code Correct a bug resulting in a Cluster being marked as Healthy when not initialized yet Allows standby servers in clusters with a very high WAL production rate to switch to streaming once they are aligned Fix a race condition during the startup of a PostgreSQL pod that could seldom lead to a crash Fix a race condition that could lead to a failure initializing the first PVC in a Cluster Remove an extra restart of a just demoted primary Pod before joining the Cluster as a replica Correctly handle replication-sensitive PostgreSQL configuration parameters when recovering from a backup Fix missing validation of PostgreSQL configurations during Cluster creation","title":"Version 1.13.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1120","text":"Release date: 11 January 2022 Features: Add Kubernetes 1.23 to the list of supported Kubernetes distributions and remove end-to-end tests for 1.17, which ended support by the Kubernetes project in Dec 2020 Improve the responsiveness of pod status checks in case of network issues by adding a connection timeout of 2 seconds and a communication timeout of 30 seconds. This change sets a limit on the time the operator waits for a pod to report its status before declaring it as failed, enhancing the robustness and predictability of a failover operation Introduce the .spec.inheritedMetadata field to the Cluster allowing the user to specify labels and annotations that will apply to all objects generated by the Cluster Reduce the number of queries executed when calculating the status of an instance Add a readiness probe for PgBouncer Add support for custom Certification Authority of the endpoint of Barman\u2019s backup object store when using Azure protocol Fixes: During a failover, wait to select a new primary until all the WAL streaming connections are closed. The operator now sets by default wal_sender_timeout and wal_receiver_timeout to 5 seconds to make sure standby nodes will quickly notice if the primary has network issues Change WAL archiving strategy in replica clusters to fix rolling updates by setting \"archive_mode\" to \"always\" for any PostgreSQL instance in a replica cluster. We then restrict the upload of the WAL only from the current and target designated primary. A WAL may be uploaded twice during switchovers, which is not an issue Fix support for custom Certification Authority of the endpoint of Barman\u2019s backup object store in replica clusters source Use a fixed name for default monitoring config map in the cluster namespace If the defaulting webhook is not working for any reason, the operator now updates the Cluster with the defaults also during the reconciliation cycle Fix the comparison of resource requests and limits to fix a rare issue leading to an update of all the pods on every reconciliation cycle Improve log messages from webhooks to also include the object namespace Stop logging a \u201cdefault\u201d message at the start of every reconciliation loop Stop logging a PodMonitor deletion on every reconciliation cycle if enablePodMonitor is false Do not complain about possible architecture mismatch if a pod is not reachable","title":"Version 1.12.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1110","text":"Release date: 15 December 2021 Features: Parallel WAL archiving and restore: allow the database to keep up with WAL generation on high write systems by introducing the backupObjectStore.maxParallel option to set the maximum number of parallel jobs to be executed during both WAL archiving (by PostgreSQL\u2019s archive_command ) and WAL restore (by restore_command ). Using parallel restore option can allow newly promoted Standbys to get to a ready state faster by fetching needed WAL files to replay in parallel rather than sequentially Default set of metrics for monitoring: a new ConfigMap called default-monitoring is automatically deployed in the same namespace of the operator and, by default, added to any existing Postgres cluster. Such behavior can be changed globally by setting the MONITORING_QUERIES_CONFIGMAP parameter in the operator\u2019s configuration, or at cluster level through the .spec.monitoring.disableDefaultQueries option (by default set to false ) Introduce the enablePodMonitor option in the monitoring section of a cluster to automatically manage a PodMonitor resource and seamlessly integrate with Prometheus Improve the PostgreSQL shutdown procedure by trying to execute a smart shutdown for the first half of the desired stopDelay time, and a fast shutdown for the remaining half, before the pod is killed by Kubernetes Add the switchoverDelay option to control the time given to the former primary to shut down gracefully and archive all the WAL files before promoting the new primary (by default, CloudNativePG waits indefinitely to privilege data durability) Handle changes to resource requests and limits for a PostgreSQL Cluster by issuing a rolling update Improve the status command of the cnp plugin for kubectl with additional information: streaming replication status, total size of the database, role of an instance in the cluster Enhance support of workloads with many parallel workers by enabling configuration of the dynamic_shared_memory_type and shared_memory_type parameters for PostgreSQL\u2019s management of shared memory Propagate labels and annotations defined at cluster level to the associated resources, including pods (deletions are not supported) Automatically remove pods that have been evicted by the Kubelet Manage automated resizing of persistent volumes in Azure through the ENABLE_AZURE_PVC_UPDATES operator configuration option, by issuing a rolling update of the cluster if needed (disabled by default) Introduce the cnpg.io/reconciliationLoop annotation that, when set to disabled on a given Postgres cluster, prevents the reconciliation loop from running Introduce the postInitApplicationSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed on the main application database as a superuser immediately after the cluster has been created Fixes: Liveness probe now correctly handles the startup process of a PostgreSQL server. This fixes an issue reported by a few customers and affects a restarted standby server that needs to recover WAL files to reach a consistent state, but it was not able to do it before the timeout of liveness probe would kick in, leaving the pods in CrashLoopBackOff status. Liveness probe now correctly handles the case of a former primary that needs to use pg_rewind to re-align with the current primary after a timeline diversion. This fixes the pod of the new standby from repeatedly being killed by Kubernetes. Reduce client-side throttling from Postgres pods (e.g. Waited for 1.182388649s due to client-side throttling, not priority and fairness, request: GET ) Disable Public Key Infrastructure (PKI) initialization on OpenShift and OLM installations, by using the provided one When changing configuration parameters that require a restart, always leave the primary as last Mark a PVC to be ready only after a job has been completed successfully, preventing a race condition in PVC initialization Use the correct public key when renewing the expired webhook TLS secret. Fix an overflow when parsing an LSN Remove stale PID files at startup Let the Pooler resource inherit the imagePullSecret defined in the operator, if exists","title":"Version 1.11.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1100","text":"Release date: 11 November 2021 Features: Connection Pooling with PgBouncer : introduce the Pooler resource and controller to automatically manage a PgBouncer deployment to be used as a connection pooler for a local PostgreSQL Cluster . The feature includes TLS client/server connections, password authentication, High Availability, pod templates support, configuration of key PgBouncer parameters, PAUSE / RESUME , logging in JSON format, Prometheus exporter for stats, pools, and lists Backup Retention Policies : support definition of recovery window retention policies for backups (e.g. \u201830d\u2019 to ensure a recovery window of 30 days) In-Place updates of the operator : introduce an in-place online update of the instance manager, which removes the need to perform a rolling update of the entire cluster following an update of the operator. By default this option is disabled (please refer to the documentation for more detailed information ) Limit the list of options that can be customized in the initdb bootstrap method to dataChecksums , encoding , localeCollate , localeCType , walSegmentSize . This makes the options array obsolete and planned to be removed in the v2 API Introduce the postInitTemplateSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed on the template1 database as a superuser immediately after the cluster has been created. This feature allows you to include default objects in all application databases created in the cluster New default metrics added to the instance Prometheus exporter: Postgres version, cluster name, and first point of recoverability according to the backup catalog Retry taking a backup after a failure Build awareness about Barman Cloud capabilities in order to prevent the operator from invoking recently introduced features (such as retention policies, or Azure Blob Container storage) that are not present in operand images that are not frequently updated Integrate the output of the status command of the cnp plugin with information about the backup Introduce a new annotation that reports the status of a PVC (being initialized or ready) Set the cluster name in the k8s.enterprisedb.io/cluster label for every object generated in a Cluster , including Backup objects Drop support for deprecated API version postgresql.cnpg.io/v1alpha1 on the Cluster , Backup , and ScheduledBackup kinds Set default operand image to PostgreSQL 14.2 Security: Set allowPrivilegeEscalation to false for the operator containers securityContext Fixes: Disable primary PodDisruptionBudget during maintenance in single-instance clusters Use the correct certificate certification authority (CA) during recovery operations Prevent Postgres connection leaking when checking WAL archiving status before taking a backup Let WAL archive/restore sleep for 100ms following transient errors that would flood logs otherwise","title":"Version 1.10.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-192","text":"Release date: 15 October 2021 Features: Enhance JSON log with two new loggers: wal-archive for PostgreSQL's archive_command , and wal-restore for restore_command in a standby Fixes: Enable WAL archiving during the standby promotion (prevented .history files from being archived) Pass the --cloud-provider option to Barman Cloud tools only when using Barman 2.13 or higher to avoid errors with older operands Wait for the pod of the primary to be ready before triggering a backup","title":"Version 1.9.2"},{"location":"release_notes/edb-cloud-native-postgresql/#version-191","text":"Release date: 30 September 2021 This release is to celebrate the launch of PostgreSQL 14 by making it the default major version when a new Cluster is created without defining a specific image name. Fixes: Fix issue causing Error while getting barman endpoint CA secret message to appear in the logs of the primary pod, which prevented the backup to work correctly Properly retry requesting a new backup in case of temporary communication issues with the instance manager","title":"Version 1.9.1"},{"location":"release_notes/edb-cloud-native-postgresql/#version-190","text":"Release date: 28 September 2021 Version 1.9.0 is not available on OpenShift due to delays with the release process and the subsequent release of version 1.9.1. Features: Add Kubernetes 1.22 to the list of supported Kubernetes distributions, and remove 1.16 Introduce support for the --restore-target-wal option in pg_rewind , in order to fetch WAL files from the backup archive, if necessary (available only with PostgreSQL 13+) Expose a default metric for the Prometheus exporter that estimates the number of pages in the pg_catalog.pg_largeobject table in each database Enhance the performance of WAL archiving and fetching, through local in-memory cache Fixes: Explicitly set the postgres user when invoking pg_isready - required by restricted SCC in OpenShift Properly update the FirstRecoverabilityPoint in the status Set archive_mode = always on the designated primary if backup is requested Minor bug fixes","title":"Version 1.9.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-180","text":"Release date: 13 September 2021 Features: Bootstrap a new cluster via full or Point-In-Time Recovery directly from an object store defined in the external cluster section, eliminating the previous requirement to have a Backup CR defined Introduce the immediate option in scheduled backups to request a backup immediately after the first Postgres instance running, adding the capability to rewind to the very beginning of a cluster when Point-In-Time Recovery is configured Add the firstRecoverabilityPoint in the cluster status to report the oldest consistent point in time to request a recovery based on the backup object store\u2019s content Enhance the default Prometheus exporter for a PostgreSQL instance by exposing the following new metrics: number of WAL files and computed total size on disk number of .ready and .done files in the archive status folder flag for replica mode number of requested minimum/maximum synchronous replicas, as well as the expected and actually observed ones Add support for the runonserver option when defining custom metrics in the Prometheus exporter to limit the collection of a metric to a range of PostgreSQL versions Natively support Azure Blob Storage for backup and recovery, by taking advantage of the feature introduced in Barman 2.13 for Barman Cloud Rely on pg_isready for the liveness probe Support RFC3339 format for timestamp specification in recovery target times Introduce .spec.imagePullPolicy to control the pull policy of image containers for all pods and jobs created for a cluster Add support for OpenShift 4.8, which replaces OpenShift 4.5 Support PostgreSQL 14 (beta) Enhance the replica cluster feature with cross-cluster replication from an object store defined in an external cluster section, without requiring a streaming connection (experimental) Introduce logLevel option to the cluster's spec to specify one of the following levels: error, info, debug or trace Security Enhancements: Introduce .spec.enableSuperuserAccess to enable/disable network access with the postgres user through password authentication Fixes: Properly inform users when a cluster enters an unrecoverable state and requires human intervention","title":"Version 1.8.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-171","text":"Release date: 11 August 2021 Features: Prefer self-healing over configuration with regards to synchronous replication, empowering the operator to temporarily override minSyncReplicas and maxSyncReplicas settings in case the cluster is not able to meet the requirements during self-healing operations Introduce the postInitSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed as a superuser immediately after the cluster has been created Fixes: Allow the operator to failover when the primary is not ready (bug introduced in 1.7.0) Execute administrative queries using the LOCAL synchronous commit level Correctly parse multi-line log entries in PGAudit","title":"Version 1.7.1"},{"location":"release_notes/edb-cloud-native-postgresql/#version-170","text":"Release date: 28 July 2021 Features: Add native support to PGAudit with a new type of logger called pgaudit directly available in the JSON output Enhance monitoring and observability capabilities through: Native support for the pg_stat_statements and auto_explain extensions The target_databases option in the Prometheus exporter to run a user-defined metric query on one or more databases (including auto-discovery of databases through shell-like pattern matching) Exposure of the manual_switchover_required metric to promptly report whether a cluster with primaryUpdateStrategy set to supervised requires a manual switchover Transparently handle shared_preload_libraries for pg_audit , auto_explain and pg_stat_statements Automatic configuration of shared_preload_libraries for PostgreSQL when pg_stat_statements , pgaudit or auto_explain options are added to the postgresql parameters section Support the cnpg.io/reload label to finely control the automated reload of config maps and secrets, including those used for custom monitoring/alerting metrics in the Prometheus exporter or to store certificates Add the reload command to the cnp plugin for kubectl to trigger a reconciliation loop on the instances Improve control of pod affinity and anti-affinity configurations through additionalPodAffinity and additionalPodAntiAffinity Introduce a separate PodDisruptionBudget for primary instances, by requiring at least a primary instance to run at any time Security Enhancements: Add the .spec.certificates.clientCASecret and .spec.certificates.replicationTLSSecret options to define custom client Certification Authority and certificate for the PostgreSQL server, to be used to authenticate client certificates and secure communication between PostgreSQL nodes Add the .spec.backup.barmanObjectStore.endpointCA option to define the custom Certification Authority bundle of the endpoint of Barman\u2019s backup object store Fixes: Correctly parse histograms in the Prometheus exporter Reconcile services created by the operator for a cluster","title":"Version 1.7.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-160","text":"Release date: 12 July 2021 Features: Replica mode ( EXPERIMENTAL ): allow a cluster to be created as a replica of a source cluster. A replica cluster has a designated primary and any number of standbys. Add the .spec.postgresql.promotionTimeout parameter to specify the maximum amount of seconds to wait when promoting an instance to primary, defaulting to 40000000 seconds. Add the .spec.affinity.podAntiAffinityType parameter. It can be set to preferred (default), resulting in preferredDuringSchedulingIgnoredDuringExecution being used, or to required , resulting in requiredDuringSchedulingIgnoredDuringExecution . Changes: Fixed a race condition when deleting a PVC and a pod which prevented the operator from creating a new pod. Fixed a race condition preventing the manager from detecting the need for a PostgreSQL restart on a configuration change. Fixed a panic in kubectl-cnp on clusters without annotations. Lowered the level of some log messages to debug . E2E tests for server CA and TLS injection.","title":"Version 1.6.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-151","text":"Release date: 17 June 2021 Change: Fix a bug with CRD validation preventing auto-update with Operator Deployments on Red Hat OpenShift Allow passing operator's configuration using a Secret.","title":"Version 1.5.1"},{"location":"release_notes/edb-cloud-native-postgresql/#version-150","text":"Release date: 11 June 2021 Features: Introduce the pg_basebackup bootstrap method to create a new PostgreSQL cluster as a copy of an existing PostgreSQL instance of the same major version, even outside Kubernetes Add support for Kubernetes\u2019 tolerations in the Affinity section of the Cluster resource, allowing users to distribute PostgreSQL instances on Kubernetes nodes with the required taint Enable specification of a digest to an image name, through the <image>:<tag>@sha256:<digestValue> format, for more deterministic and repeatable deployments Security Enhancements: Customize TLS certificates to authenticate the PostgreSQL server by defining secrets for the server certificate and the related Certification Authority that signed it Raise the sslmode for the WAL receiver process of internal and automatically managed streaming replicas from require to verify-ca Changes: Enhance the promote subcommand of the cnp plugin for kubectl to accept just the node number rather than the whole name of the pod Adopt DNS-1035 validation scheme for cluster names (from which service names are inherited) Enforce streaming replication connection when cloning a standby instance or when bootstrapping using the pg_basebackup method Integrate the Backup resource with beginWal , endWal , beginLSN , endLSN , startedAt and stoppedAt regarding the physical base backup Documentation improvements: Provide a list of ports exposed by the operator and the operand container Introduce the cnp-bench helm charts and guidelines for benchmarking the storage and PostgreSQL for database workloads E2E tests enhancements: Test Kubernetes 1.21 Add test for High Availability of the operator Add test for node draining Minor bug fixes, including: Timeout to pg_ctl start during recovery operations too short Operator not watching over direct events on PVCs Fix handling of immediateCheckpoint and jobs parameter in barmanObjectStore backups Empty logs when recovering from a backup","title":"Version 1.5.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-140","text":"Release date: 18 May 2021 Features: Standard output logging of PostgreSQL error messages in JSON format Provide a basic set of PostgreSQL metrics for the Prometheus exporter Add the restart command to the cnp plugin for kubectl to restart the pods of a given PostgreSQL cluster in a rollout fashion Security Enhancements: Set readOnlyRootFilesystem security context for pods Changes: IMPORTANT: If you have previously deployed the CloudNativePG operator using the YAML manifest, you must delete the existing operator deployment before installing the new version. This is required to avoid conflicts with other Kubernetes API's due to a change in labels and label selectors being directly managed by the operator. Please refer to the CloudNativePG documentation for additional detail on upgrading to 1.4.0 Fix the labels that are automatically defined by the operator, renaming them from control-plane: controller-manager to app.kubernetes.io/name: cloudnative-pg Assign the metrics name to the TCP port for the Prometheus exporter Set cnp_metrics_exporter as the application_name to the metrics exporter connection in PostgreSQL When available, use the application database for monitoring queries of the Prometheus exporter instead of the postgres database Documentation improvements: Customization of monitoring queries Operator upgrade instructions E2E tests enhancements Minor bug fixes, including: Avoid using -R when calling pg_basebackup Remove stack trace from error log when getting the status","title":"Version 1.4.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-130","text":"Release date: 23 Apr 2021 Features: Inheritance of labels and annotations Set resource limits for every container Security Enhancements: Support for restricted security context constraint on Red Hat OpenShift to limit pod execution to a namespace allocated UID and SELinux context Pod security contexts explicitly defined by the operator to run as non-root, non-privileged and without privilege escalation Changes: Prometheus exporter endpoint listening on port 9187 (port 8000 is now reserved to instance coordination with API server) Documentation improvements E2E tests enhancements, including GKE environment Minor bug fixes","title":"Version 1.3.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-121","text":"Release date: 6 Apr 2021 ScheduledBackup are no longer owners of the Backups, meaning that backups are not removed when ScheduledBackup objects are deleted Update on ubi8-minimal image to solve RHSA-2021:1024 (Security Advisory: Important)","title":"Version 1.2.1"},{"location":"release_notes/edb-cloud-native-postgresql/#version-120","text":"Release date: 31 Mar 2021 Introduce experimental support for custom monitoring queries as ConfigMap and Secret objects using a compatible syntax with postgres_exporter for Prometheus Support Operator Lifecycle Manager (OLM) deployments, with the subsequent presence on OperatorHub.io Enhance container security by applying guidelines from the US Department of Defense (DoD)'s Defense Information Systems Agency (DISA) and the Center for Internet Security (CIS) and verifying them directly in the pipeline with Dockle Improve E2E tests on AKS Minor bug fixes","title":"Version 1.2.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-110","text":"Release date: 3 Mar 2021 Add kubectl cnp status to pretty-print the status of a cluster, including JSON and YAML output Add kubectl cnp certificate to enable TLS authentication for client applications Add the -ro service to route connections to the available hot standby replicas only, enabling offload of read-only queries from the cluster's primary instance Rollback scaling down a cluster to a value lower than maxSyncReplicas Request a checkpoint before demoting a former primary Send SIGINT signal (fast shutdown) to PostgreSQL process on SIGTERM Minor bug fixes","title":"Version 1.1.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-100","text":"Release date: 4 Feb 2021 The first major stable release of CloudNativePG implements Cluster , Backup and ScheduledBackup in the API group postgresql.cnpg.io/v1 . It uses these resources to create and manage PostgreSQL clusters inside Kubernetes with the following main capabilities: Direct integration with Kubernetes API server for High Availability, without requiring an external tool Self-Healing capability, through: failover of the primary instance by promoting the most aligned replica automated recreation of a replica Planned switchover of the primary instance by promoting a selected replica Scale up/down capabilities Definition of an arbitrary number of instances (minimum 1 - one primary server) Definition of the read-write service to connect your applications to the only primary server of the cluster Definition of the read service to connect your applications to any of the instances for reading workloads Support for Local Persistent Volumes with PVC templates Reuse of Persistent Volumes storage in Pods Rolling updates for PostgreSQL minor versions and operator upgrades TLS connections and client certificate authentication Continuous backup to an S3 compatible object store Full recovery and point-in-time recovery from an S3 compatible object store backup Support for synchronous replicas Support for node affinity via nodeSelector property Standard output logging of PostgreSQL error messages","title":"Version 1.0.0"},{"location":"release_notes/v1.25/","text":"Release notes for CloudNativePG 1.25 History of user-visible changes in the 1.25 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.25.3 Release date: Jul 25, 2025 In memory of DJ Walker-Morgan . Changes Removed 386 and ARM (v5/v6/v7) architectures from the cnpg plugin build matrix, reducing the number of published binaries ( #7648 ). Enhancements Improved validation of shared_buffers by correctly considering HugePages settings, ensuring accurate memory configuration checks ( #7864 ). Set oom_score_adj for PostgreSQL worker processes to improve prioritization during out-of-memory situations ( #7891 ). Added fqdn-uri and fqdn-jdbc-uri fields in user secrets to simplify application connection string management and align with DNS-based connection best practices ( #7852 ). Added the systemID field and related condition in the Cluster status to track the PostgreSQL system identifier. ( #7717 ). Fixes Added a mutex in the connection pooler to protect concurrent access to the connections map, improving stability in high-concurrency environments ( #7804 ). Fixed replica cluster instance ordering by correctly detecting the designated primary, improving replica cluster stability and switchover operations ( #8108 ). Added support for reconciling VolumeAttributesClass for PVCs, enhancing storage compatibility and lifecycle management ( #7885 ). Made the internal webserver routines non-blocking to improve responsiveness under load ( #8071 ). Fixed an issue where the ensureReplicationClientLeafCertificate error did not display the correct secretName in the not found message ( #8086 ). Prevented invalid ALTER SUBSCRIPTION statements by updating only PostgreSQL\u2011supported parameters; unsupported options like copy_data are ignored to avoid reconciliation failures ( 7844 ). Fixed an issue where the bootstrap-controller in the connection pooler did not apply resources settings correctly ( #7922 ). Ensured online backups fail cleanly if the targetPod becomes unhealthy during backup, preventing partial or misleading backups ( #7944 ). Ensured the Backup resource status is set properly after a failure, improving observability and scripting reliability ( #7898 ). Version 1.25.2 Release date: May 23, 2025 Important Changes CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203) Enhancements Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151) CloudNativePG Interface (CNPG-I): A plugin can now trigger instance rollouts by implementing the EVALUATE verb, ensuring that plugin-induced changes are properly reconciled. (#7126) Introduced support for WAL recovery via CNPG-I plugins during snapshot restore. (#7284) Security Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250) Fixes Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Fixed a regression in WAL restore operations that prevented fallback to the in-tree barmanObjectStore configuration defined in the externalCluster source when a plugin failed to locate a WAL file (#7507). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) Treated timeout errors during volume snapshot creation as retryable to prevent unnecessary backup failures. (#7010) Moved the defaulting logic for .spec.postgresql.synchronous.dataDurability from the CRD to the webhook to avoid UI issues with OLM. (#7600) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). cnpg plugin: Increased the buffer size in the logs pretty command to better handle larger log output (#7281). Ensured the plugin-name parameter is required for plugin-based backups and disallowed for non-plugin backup methods (#7506). Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122) Changes Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556) Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399). Version 1.25.1 Release Date: February 28, 2025 Enhancements Introduced a startup probe for the operator to enhance reliability and prevent premature liveness probe failures during initialization. (#7008) Added support for using the -r service with the Pooler. (#6868) Introduced an optional --ttl flag for the pgbench plugin, enabling automatic deletion of completed jobs after a user-defined duration. (#6701) Marked known error messages from the Azure CSI Driver for volume snapshots as retryable, improving resilience. (#6906) Updated the default PostgreSQL version to 17.4 for new cluster definitions. (#6960) Security The operator image build process has been enhanced to strengthen security and transparency. Images are now signed with cosign , and OCI attestations are generated, incorporating the Software Bill of Materials (SBOM) and provenance data. Additionally, OCI annotations have been added to improve traceability and ensure the integrity of the images. Bug Fixes Fixed inconsistent behavior in default probe knob values when .spec.probes is defined, ensuring users can override all settings, including failureThreshold . If unspecified in the startup probe, failureThreshold is now correctly derived from .spec.startupDelay / periodSeconds (default: 10 , now overridable). The same logic applies to liveness probes via .spec.livenessProbeTimeout . (#6656) Managed service ports now take precedence over default operator-defined ports. (#6474) Fixed an issue where WAL metrics were unavailable after an instance restart until a configuration change was applied. (#6816) Fixed an issue in monolithic database import where role import was skipped if no roles were specified. (#6646) Added support for new metrics introduced in PgBouncer 1.24. (#6630) Resolved an issue where Database , Publication , and Subscription CRDs became stuck in cluster resource has been deleted, skipping reconciliation after cluster rehydration. This patch forces status.observedGeneration to zero, ensuring proper reconciliation. (#6607) Improved handling of replication-sensitive parameter reductions by ensuring timely reconciliation after primary server restarts. (#6440) Introduced a new isWALArchiver flag in the CNPG-I plugin configuration, allowing users to designate a plugin as a WAL archiver. This enables seamless migration from in-tree Barman Cloud support to the plugin while maintaining WAL archive consistency. (#6593) Ensured override.conf is consistently included in postgresql.conf during replica cluster bootstrapping, preventing replication failures due to missing configuration settings. (#6808) Ensured override.conf is correctly initialized before invoking pg_rewind to prevent failures during primary role changes. (#6670) Enhanced webhook responses to return both warnings and errors when applicable, improving diagnostic accuracy. (#6579) Ensured the operator version is correctly reconciled. (#6496) Improved PostgreSQL version detection by using a more precise check of the data directory. (#6659) Volume Snapshot Backups: Fixed an issue where unused backup connections were not properly cleaned up. (#6882) Ensured the instance manager closes stale PostgreSQL connections left by failed volume snapshot backups. (#6879) Prevented the operator from starting a new volume snapshot backup while another is already in progress. (#6890) cnpg plugin: Restored functionality of the promote plugin command. (#6476) Enhanced kubectl cnpg report --logs <cluster> to collect logs from all containers, including sidecars. (#6636) Ensured pgbench jobs can run when a Cluster uses an ImageCatalog . (#6868) Technical Enhancements Added support for Kubernetes client-gen , enabling automated generation of Go clients for all CloudNativePG CRDs. (#6695) Version 1.25.0 Release Date: December 23, 2024 Features Declarative Database Management : Introduce the Database Custom Resource Definition (CRD), enabling users to create and manage PostgreSQL databases declaratively within a cluster. (#5325) Logical Replication Management : Add Publication and Subscription CRDs for declarative management of PostgreSQL logical replication. These simplify replication setup and facilitate online migrations to CloudNativePG. (#5329) Experimental Support for CNPG-I : Introducing CNPG-I (CloudNativePG Interface), a standardized framework designed to extend CloudNativePG functionality through third-party plugins and foster the growth of the CNPG ecosystem. The Barman Cloud Plugin serves as a live example, illustrating how plugins can be developed to enhance backup and recovery workflows. Although CNPG-I support is currently experimental, it offers a powerful approach to extending CloudNativePG without modifying the operator\u2019s core code\u2014akin to PostgreSQL extensions. We welcome community feedback and contributions to shape this exciting new capability. Enhancements Add the dataDurability option to the .spec.postgresql.synchronous stanza, allowing users to choose between required (default) or preferred durability in synchronous replication. (#5878) Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Support additional pg_dump and pg_restore options to enhance database import flexibility. (#6214) Add support for maxConcurrentReconciles in the CloudNativePG controller and set the default to 10, improving the operator's ability to efficiently manage larger deployments out of the box. (#5678) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Enhance the backup command to support plugins. (#6045) Honor the User-Agent header in HTTP requests with the API server. (#6153) Bug Fixes Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998) Supported Versions Kubernetes : 1.32, 1.31, 1.30, and 1.29 PostgreSQL : 17, 16, 15, 14, and 13 Default image: PostgreSQL 17.2 Officially dropped support for PostgreSQL 12 PostgreSQL 13 support ends on November 12, 2025","title":"Release notes for CloudNativePG 1.25"},{"location":"release_notes/v1.25/#release-notes-for-cloudnativepg-125","text":"History of user-visible changes in the 1.25 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.25"},{"location":"release_notes/v1.25/#version-1253","text":"Release date: Jul 25, 2025 In memory of DJ Walker-Morgan .","title":"Version 1.25.3"},{"location":"release_notes/v1.25/#changes","text":"Removed 386 and ARM (v5/v6/v7) architectures from the cnpg plugin build matrix, reducing the number of published binaries ( #7648 ).","title":"Changes"},{"location":"release_notes/v1.25/#enhancements","text":"Improved validation of shared_buffers by correctly considering HugePages settings, ensuring accurate memory configuration checks ( #7864 ). Set oom_score_adj for PostgreSQL worker processes to improve prioritization during out-of-memory situations ( #7891 ). Added fqdn-uri and fqdn-jdbc-uri fields in user secrets to simplify application connection string management and align with DNS-based connection best practices ( #7852 ). Added the systemID field and related condition in the Cluster status to track the PostgreSQL system identifier. ( #7717 ).","title":"Enhancements"},{"location":"release_notes/v1.25/#fixes","text":"Added a mutex in the connection pooler to protect concurrent access to the connections map, improving stability in high-concurrency environments ( #7804 ). Fixed replica cluster instance ordering by correctly detecting the designated primary, improving replica cluster stability and switchover operations ( #8108 ). Added support for reconciling VolumeAttributesClass for PVCs, enhancing storage compatibility and lifecycle management ( #7885 ). Made the internal webserver routines non-blocking to improve responsiveness under load ( #8071 ). Fixed an issue where the ensureReplicationClientLeafCertificate error did not display the correct secretName in the not found message ( #8086 ). Prevented invalid ALTER SUBSCRIPTION statements by updating only PostgreSQL\u2011supported parameters; unsupported options like copy_data are ignored to avoid reconciliation failures ( 7844 ). Fixed an issue where the bootstrap-controller in the connection pooler did not apply resources settings correctly ( #7922 ). Ensured online backups fail cleanly if the targetPod becomes unhealthy during backup, preventing partial or misleading backups ( #7944 ). Ensured the Backup resource status is set properly after a failure, improving observability and scripting reliability ( #7898 ).","title":"Fixes"},{"location":"release_notes/v1.25/#version-1252","text":"Release date: May 23, 2025","title":"Version 1.25.2"},{"location":"release_notes/v1.25/#important-changes","text":"CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203)","title":"Important Changes"},{"location":"release_notes/v1.25/#enhancements_1","text":"Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151) CloudNativePG Interface (CNPG-I): A plugin can now trigger instance rollouts by implementing the EVALUATE verb, ensuring that plugin-induced changes are properly reconciled. (#7126) Introduced support for WAL recovery via CNPG-I plugins during snapshot restore. (#7284)","title":"Enhancements"},{"location":"release_notes/v1.25/#security","text":"Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250)","title":"Security"},{"location":"release_notes/v1.25/#fixes_1","text":"Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Fixed a regression in WAL restore operations that prevented fallback to the in-tree barmanObjectStore configuration defined in the externalCluster source when a plugin failed to locate a WAL file (#7507). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) Treated timeout errors during volume snapshot creation as retryable to prevent unnecessary backup failures. (#7010) Moved the defaulting logic for .spec.postgresql.synchronous.dataDurability from the CRD to the webhook to avoid UI issues with OLM. (#7600) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). cnpg plugin: Increased the buffer size in the logs pretty command to better handle larger log output (#7281). Ensured the plugin-name parameter is required for plugin-based backups and disallowed for non-plugin backup methods (#7506). Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122)","title":"Fixes"},{"location":"release_notes/v1.25/#changes_1","text":"Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556) Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399).","title":"Changes"},{"location":"release_notes/v1.25/#version-1251","text":"Release Date: February 28, 2025","title":"Version 1.25.1"},{"location":"release_notes/v1.25/#enhancements_2","text":"Introduced a startup probe for the operator to enhance reliability and prevent premature liveness probe failures during initialization. (#7008) Added support for using the -r service with the Pooler. (#6868) Introduced an optional --ttl flag for the pgbench plugin, enabling automatic deletion of completed jobs after a user-defined duration. (#6701) Marked known error messages from the Azure CSI Driver for volume snapshots as retryable, improving resilience. (#6906) Updated the default PostgreSQL version to 17.4 for new cluster definitions. (#6960)","title":"Enhancements"},{"location":"release_notes/v1.25/#security_1","text":"The operator image build process has been enhanced to strengthen security and transparency. Images are now signed with cosign , and OCI attestations are generated, incorporating the Software Bill of Materials (SBOM) and provenance data. Additionally, OCI annotations have been added to improve traceability and ensure the integrity of the images.","title":"Security"},{"location":"release_notes/v1.25/#bug-fixes","text":"Fixed inconsistent behavior in default probe knob values when .spec.probes is defined, ensuring users can override all settings, including failureThreshold . If unspecified in the startup probe, failureThreshold is now correctly derived from .spec.startupDelay / periodSeconds (default: 10 , now overridable). The same logic applies to liveness probes via .spec.livenessProbeTimeout . (#6656) Managed service ports now take precedence over default operator-defined ports. (#6474) Fixed an issue where WAL metrics were unavailable after an instance restart until a configuration change was applied. (#6816) Fixed an issue in monolithic database import where role import was skipped if no roles were specified. (#6646) Added support for new metrics introduced in PgBouncer 1.24. (#6630) Resolved an issue where Database , Publication , and Subscription CRDs became stuck in cluster resource has been deleted, skipping reconciliation after cluster rehydration. This patch forces status.observedGeneration to zero, ensuring proper reconciliation. (#6607) Improved handling of replication-sensitive parameter reductions by ensuring timely reconciliation after primary server restarts. (#6440) Introduced a new isWALArchiver flag in the CNPG-I plugin configuration, allowing users to designate a plugin as a WAL archiver. This enables seamless migration from in-tree Barman Cloud support to the plugin while maintaining WAL archive consistency. (#6593) Ensured override.conf is consistently included in postgresql.conf during replica cluster bootstrapping, preventing replication failures due to missing configuration settings. (#6808) Ensured override.conf is correctly initialized before invoking pg_rewind to prevent failures during primary role changes. (#6670) Enhanced webhook responses to return both warnings and errors when applicable, improving diagnostic accuracy. (#6579) Ensured the operator version is correctly reconciled. (#6496) Improved PostgreSQL version detection by using a more precise check of the data directory. (#6659) Volume Snapshot Backups: Fixed an issue where unused backup connections were not properly cleaned up. (#6882) Ensured the instance manager closes stale PostgreSQL connections left by failed volume snapshot backups. (#6879) Prevented the operator from starting a new volume snapshot backup while another is already in progress. (#6890) cnpg plugin: Restored functionality of the promote plugin command. (#6476) Enhanced kubectl cnpg report --logs <cluster> to collect logs from all containers, including sidecars. (#6636) Ensured pgbench jobs can run when a Cluster uses an ImageCatalog . (#6868)","title":"Bug Fixes"},{"location":"release_notes/v1.25/#technical-enhancements","text":"Added support for Kubernetes client-gen , enabling automated generation of Go clients for all CloudNativePG CRDs. (#6695)","title":"Technical Enhancements"},{"location":"release_notes/v1.25/#version-1250","text":"Release Date: December 23, 2024","title":"Version 1.25.0"},{"location":"release_notes/v1.25/#features","text":"Declarative Database Management : Introduce the Database Custom Resource Definition (CRD), enabling users to create and manage PostgreSQL databases declaratively within a cluster. (#5325) Logical Replication Management : Add Publication and Subscription CRDs for declarative management of PostgreSQL logical replication. These simplify replication setup and facilitate online migrations to CloudNativePG. (#5329) Experimental Support for CNPG-I : Introducing CNPG-I (CloudNativePG Interface), a standardized framework designed to extend CloudNativePG functionality through third-party plugins and foster the growth of the CNPG ecosystem. The Barman Cloud Plugin serves as a live example, illustrating how plugins can be developed to enhance backup and recovery workflows. Although CNPG-I support is currently experimental, it offers a powerful approach to extending CloudNativePG without modifying the operator\u2019s core code\u2014akin to PostgreSQL extensions. We welcome community feedback and contributions to shape this exciting new capability.","title":"Features"},{"location":"release_notes/v1.25/#enhancements_3","text":"Add the dataDurability option to the .spec.postgresql.synchronous stanza, allowing users to choose between required (default) or preferred durability in synchronous replication. (#5878) Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Support additional pg_dump and pg_restore options to enhance database import flexibility. (#6214) Add support for maxConcurrentReconciles in the CloudNativePG controller and set the default to 10, improving the operator's ability to efficiently manage larger deployments out of the box. (#5678) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Enhance the backup command to support plugins. (#6045) Honor the User-Agent header in HTTP requests with the API server. (#6153)","title":"Enhancements"},{"location":"release_notes/v1.25/#bug-fixes_1","text":"Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998)","title":"Bug Fixes"},{"location":"release_notes/v1.25/#supported-versions","text":"Kubernetes : 1.32, 1.31, 1.30, and 1.29 PostgreSQL : 17, 16, 15, 14, and 13 Default image: PostgreSQL 17.2 Officially dropped support for PostgreSQL 12 PostgreSQL 13 support ends on November 12, 2025","title":"Supported Versions"},{"location":"release_notes/v1.26/","text":"Release notes for CloudNativePG 1.26 History of user-visible changes in the 1.26 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.26.1 Release date: Jul 25, 2025 In memory of DJ Walker-Morgan . Important Changes CloudNativePG is moving toward a plugin-based, backup and recovery agnostic architecture (initiated in 1.26.0 with Barman Cloud). As part of this transition, the following fields in the .status section of the Cluster resource are now deprecated: firstRecoverabilityPoint firstRecoverabilityPointByMethod lastSuccessfulBackup lastSuccessfulBackupByMethod lastFailedBackup Additionally, the following Prometheus metrics are deprecated: cnpg_collector_first_recoverability_point cnpg_collector_last_available_backup_timestamp cnpg_collector_last_failed_backup_timestamp These fields and metrics will no longer update when using plugin-based backups (e.g., Barman Cloud via CNPG-I). They remain functional for users still using in-core Barman Cloud and volume snapshot backups. Note: We, as maintainers, are sorry for any inconvenience caused by not highlighting this change during the 1.26.0 release. As we transition to a plugin-based backup and recovery architecture, we encourage you to test your chosen plugin thoroughly in a staging environment before moving to production to ensure your workflows and observability integration continue to meet your needs. Thank you for your understanding and for working with us as CloudNativePG evolves to provide a more modular and robust experience. Changes Removed 386 and ARM (v5/v6/v7) architectures from the cnpg plugin build matrix, reducing the number of published binaries ( #7648 ). Enhancements Improved validation of shared_buffers by correctly considering HugePages settings, ensuring accurate memory configuration checks ( #7864 ). Set oom_score_adj for PostgreSQL worker processes to improve prioritization during out-of-memory situations ( #7891 ). Added fqdn-uri and fqdn-jdbc-uri fields in user secrets to simplify application connection string management and align with DNS-based connection best practices ( #7852 ). Added the systemID field and related condition in the Cluster status to track the PostgreSQL system identifier. ( #7717 ). Fixes Added a mutex in the connection pooler to protect concurrent access to the connections map, improving stability in high-concurrency environments ( #7804 ). Fixed replica cluster instance ordering by correctly detecting the designated primary, improving replica cluster stability and switchover operations ( #8108 ). Added support for reconciling VolumeAttributesClass for PVCs, enhancing storage compatibility and lifecycle management ( #7885 ). Made the internal webserver routines non-blocking to improve responsiveness under load ( #8071 ). Fixed an issue where the ensureReplicationClientLeafCertificate error did not display the correct secretName in the not found message ( #8086 ). Prevented invalid ALTER SUBSCRIPTION statements by updating only PostgreSQL\u2011supported parameters; unsupported options like copy_data are ignored to avoid reconciliation failures ( 7844 ). Fixed an issue where the bootstrap-controller in the connection pooler did not apply resources settings correctly ( #7922 ). Ensured online backups fail cleanly if the targetPod becomes unhealthy during backup, preventing partial or misleading backups ( #7944 ). Ensured the Backup resource status is set properly after a failure, improving observability and scripting reliability ( #7898 ). Improved liveness probe handling to avoid unnecessary timeouts when they are not required ( #7902 ). Version 1.26.0 Release date: May 23, 2025 Important Changes CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203) Deprecation of Native Barman Cloud Support : Native support for Barman Cloud backups and recovery is now deprecated and will be fully removed in CloudNativePG version 1.28.0. Although still available in the current release, users are strongly encouraged to begin migrating their existing clusters to the new Barman Cloud Plugin to ensure a smooth and seamless transition. The plugin should also be used for all new deployments. This change marks the first step toward making CloudNativePG a backup-agnostic solution, a goal that will be fully realized when volume snapshot support is also moved to a plugin-based architecture. (#6876) End of Support for Barman 3.4 and Earlier : CloudNativePG no longer supports Barman versions 3.4 and earlier, including the capability detection framework. Users running older operand versions (from before April 2023) must update their operand before upgrading the operator to avoid compatibility issues. (#7220) Hibernation Command Changes : The hibernate on and hibernate off commands in the cnpg plugin for kubectl now serve as shortcuts for declarative hibernation. The previous imperative approach has been removed in favor of this method. Additionally, the hibernate status command has been removed, as its functionality is now covered by the standard status command. Warning: Do not upgrade to version 1.26 of both the plugin and the operator unless you are prepared to migrate to the declarative hibernation method. (#7155) Features Declarative Offline In-Place Major Upgrades of PostgreSQL : Introduced support for offline in-place major upgrades when a new operand container image with a higher PostgreSQL major version is applied to a cluster. During the upgrade, all cluster pods are shut down to ensure data consistency. A new job is created to validate upgrade conditions, run pg_upgrade , and set up new directories for PGDATA , WAL files, and tablespaces as needed. Once the upgrade is complete, replicas are re-created. Failed upgrades can be rolled back declaratively. (#6664) Improved Startup and Readiness Probes for Replicas : Enhanced support for Kubernetes startup and readiness probes in PostgreSQL instances, providing greater control over replicas based on the streaming lag. (#6623) Declarative management of extensions and schemas : Introduced the extensions and schemas stanzas in the Database resource to declaratively create, modify, and drop PostgreSQL extensions and schemas within a database. (#7062) Enhancements Introduced an opt-in experimental feature to enhance the liveness probe with network isolation detection for primary instances. This feature can be activated via the alpha.cnpg.io/livenessPinger annotation (#7466). Introduced the STANDBY_TCP_USER_TIMEOUT operator configuration setting, allowing users to specify the tcp_user_timeout parameter on all standby instances managed by the operator. (#7036) Introduced the DRAIN_TAINTS operator configuration option, enabling users to customize which node taints indicate a node is being drained. This replaces the previous fixed behavior of only recognizing node.kubernetes.io/unschedulable as a drain signal. (#6928) Added a new field in the status of the Cluster resource to track the latest known Pod IP (#7546). Added the pg_extensions metric, providing information about installed PostgreSQL extensions and their latest available versions. (#7195) Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for patching PostgreSQL instance pods using the cnpg.io/podPatch annotation with a JSON Patch. This may introduce discrepancies between the operator\u2019s expectations and Kubernetes behavior, so it should be used with caution. (#6323) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) Removed the ENABLE_AZURE_PVC_UPDATES configuration, as it is no longer required to resize Azure volumes correctly. The Azure CSI driver includes the necessary fix as of version 1.11.0 . (#7297) The .spec.backup.barmanObjectStore and .spec.backup.retentionPolicy fields are now deprecated in favor of the external Barman Cloud Plugin, and a warning is now emitted by the admission webhook when these fields are used in the Cluster specification (#7500). Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151) CloudNativePG Interface (CNPG-I): A plugin can now trigger instance rollouts by implementing the EVALUATE verb, ensuring that plugin-induced changes are properly reconciled. (#7126) Introduced support for WAL recovery via CNPG-I plugins during snapshot restore. (#7284) Security Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250) Fixes Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Fixed a regression in WAL restore operations that prevented fallback to the in-tree barmanObjectStore configuration defined in the externalCluster source when a plugin failed to locate a WAL file (#7507). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) Treated timeout errors during volume snapshot creation as retryable to prevent unnecessary backup failures. (#7010) Moved the defaulting logic for .spec.postgresql.synchronous.dataDurability from the CRD to the webhook to avoid UI issues with OLM. (#7600) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Fixed an issue that prevented WALs from being archived on a former primary node when using a plugin. (#6964) Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). cnpg plugin: Increased the buffer size in the logs pretty command to better handle larger log output (#7281). Ensured the plugin-name parameter is required for plugin-based backups and disallowed for non-plugin backup methods (#7506). Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122) Changes Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556) Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399). Supported versions Kubernetes 1.33, 1.32, 1.31, and 1.30 PostgreSQL 17, 16, 15, 14, and 13 PostgreSQL 17.5 is the default image PostgreSQL 13 support ends on November 12, 2025","title":"Release notes for CloudNativePG 1.26"},{"location":"release_notes/v1.26/#release-notes-for-cloudnativepg-126","text":"History of user-visible changes in the 1.26 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.26"},{"location":"release_notes/v1.26/#version-1261","text":"Release date: Jul 25, 2025 In memory of DJ Walker-Morgan .","title":"Version 1.26.1"},{"location":"release_notes/v1.26/#important-changes","text":"CloudNativePG is moving toward a plugin-based, backup and recovery agnostic architecture (initiated in 1.26.0 with Barman Cloud). As part of this transition, the following fields in the .status section of the Cluster resource are now deprecated: firstRecoverabilityPoint firstRecoverabilityPointByMethod lastSuccessfulBackup lastSuccessfulBackupByMethod lastFailedBackup Additionally, the following Prometheus metrics are deprecated: cnpg_collector_first_recoverability_point cnpg_collector_last_available_backup_timestamp cnpg_collector_last_failed_backup_timestamp These fields and metrics will no longer update when using plugin-based backups (e.g., Barman Cloud via CNPG-I). They remain functional for users still using in-core Barman Cloud and volume snapshot backups. Note: We, as maintainers, are sorry for any inconvenience caused by not highlighting this change during the 1.26.0 release. As we transition to a plugin-based backup and recovery architecture, we encourage you to test your chosen plugin thoroughly in a staging environment before moving to production to ensure your workflows and observability integration continue to meet your needs. Thank you for your understanding and for working with us as CloudNativePG evolves to provide a more modular and robust experience.","title":"Important Changes"},{"location":"release_notes/v1.26/#changes","text":"Removed 386 and ARM (v5/v6/v7) architectures from the cnpg plugin build matrix, reducing the number of published binaries ( #7648 ).","title":"Changes"},{"location":"release_notes/v1.26/#enhancements","text":"Improved validation of shared_buffers by correctly considering HugePages settings, ensuring accurate memory configuration checks ( #7864 ). Set oom_score_adj for PostgreSQL worker processes to improve prioritization during out-of-memory situations ( #7891 ). Added fqdn-uri and fqdn-jdbc-uri fields in user secrets to simplify application connection string management and align with DNS-based connection best practices ( #7852 ). Added the systemID field and related condition in the Cluster status to track the PostgreSQL system identifier. ( #7717 ).","title":"Enhancements"},{"location":"release_notes/v1.26/#fixes","text":"Added a mutex in the connection pooler to protect concurrent access to the connections map, improving stability in high-concurrency environments ( #7804 ). Fixed replica cluster instance ordering by correctly detecting the designated primary, improving replica cluster stability and switchover operations ( #8108 ). Added support for reconciling VolumeAttributesClass for PVCs, enhancing storage compatibility and lifecycle management ( #7885 ). Made the internal webserver routines non-blocking to improve responsiveness under load ( #8071 ). Fixed an issue where the ensureReplicationClientLeafCertificate error did not display the correct secretName in the not found message ( #8086 ). Prevented invalid ALTER SUBSCRIPTION statements by updating only PostgreSQL\u2011supported parameters; unsupported options like copy_data are ignored to avoid reconciliation failures ( 7844 ). Fixed an issue where the bootstrap-controller in the connection pooler did not apply resources settings correctly ( #7922 ). Ensured online backups fail cleanly if the targetPod becomes unhealthy during backup, preventing partial or misleading backups ( #7944 ). Ensured the Backup resource status is set properly after a failure, improving observability and scripting reliability ( #7898 ). Improved liveness probe handling to avoid unnecessary timeouts when they are not required ( #7902 ).","title":"Fixes"},{"location":"release_notes/v1.26/#version-1260","text":"Release date: May 23, 2025","title":"Version 1.26.0"},{"location":"release_notes/v1.26/#important-changes_1","text":"CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203) Deprecation of Native Barman Cloud Support : Native support for Barman Cloud backups and recovery is now deprecated and will be fully removed in CloudNativePG version 1.28.0. Although still available in the current release, users are strongly encouraged to begin migrating their existing clusters to the new Barman Cloud Plugin to ensure a smooth and seamless transition. The plugin should also be used for all new deployments. This change marks the first step toward making CloudNativePG a backup-agnostic solution, a goal that will be fully realized when volume snapshot support is also moved to a plugin-based architecture. (#6876) End of Support for Barman 3.4 and Earlier : CloudNativePG no longer supports Barman versions 3.4 and earlier, including the capability detection framework. Users running older operand versions (from before April 2023) must update their operand before upgrading the operator to avoid compatibility issues. (#7220) Hibernation Command Changes : The hibernate on and hibernate off commands in the cnpg plugin for kubectl now serve as shortcuts for declarative hibernation. The previous imperative approach has been removed in favor of this method. Additionally, the hibernate status command has been removed, as its functionality is now covered by the standard status command. Warning: Do not upgrade to version 1.26 of both the plugin and the operator unless you are prepared to migrate to the declarative hibernation method. (#7155)","title":"Important Changes"},{"location":"release_notes/v1.26/#features","text":"Declarative Offline In-Place Major Upgrades of PostgreSQL : Introduced support for offline in-place major upgrades when a new operand container image with a higher PostgreSQL major version is applied to a cluster. During the upgrade, all cluster pods are shut down to ensure data consistency. A new job is created to validate upgrade conditions, run pg_upgrade , and set up new directories for PGDATA , WAL files, and tablespaces as needed. Once the upgrade is complete, replicas are re-created. Failed upgrades can be rolled back declaratively. (#6664) Improved Startup and Readiness Probes for Replicas : Enhanced support for Kubernetes startup and readiness probes in PostgreSQL instances, providing greater control over replicas based on the streaming lag. (#6623) Declarative management of extensions and schemas : Introduced the extensions and schemas stanzas in the Database resource to declaratively create, modify, and drop PostgreSQL extensions and schemas within a database. (#7062)","title":"Features"},{"location":"release_notes/v1.26/#enhancements_1","text":"Introduced an opt-in experimental feature to enhance the liveness probe with network isolation detection for primary instances. This feature can be activated via the alpha.cnpg.io/livenessPinger annotation (#7466). Introduced the STANDBY_TCP_USER_TIMEOUT operator configuration setting, allowing users to specify the tcp_user_timeout parameter on all standby instances managed by the operator. (#7036) Introduced the DRAIN_TAINTS operator configuration option, enabling users to customize which node taints indicate a node is being drained. This replaces the previous fixed behavior of only recognizing node.kubernetes.io/unschedulable as a drain signal. (#6928) Added a new field in the status of the Cluster resource to track the latest known Pod IP (#7546). Added the pg_extensions metric, providing information about installed PostgreSQL extensions and their latest available versions. (#7195) Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for patching PostgreSQL instance pods using the cnpg.io/podPatch annotation with a JSON Patch. This may introduce discrepancies between the operator\u2019s expectations and Kubernetes behavior, so it should be used with caution. (#6323) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) Removed the ENABLE_AZURE_PVC_UPDATES configuration, as it is no longer required to resize Azure volumes correctly. The Azure CSI driver includes the necessary fix as of version 1.11.0 . (#7297) The .spec.backup.barmanObjectStore and .spec.backup.retentionPolicy fields are now deprecated in favor of the external Barman Cloud Plugin, and a warning is now emitted by the admission webhook when these fields are used in the Cluster specification (#7500). Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151) CloudNativePG Interface (CNPG-I): A plugin can now trigger instance rollouts by implementing the EVALUATE verb, ensuring that plugin-induced changes are properly reconciled. (#7126) Introduced support for WAL recovery via CNPG-I plugins during snapshot restore. (#7284)","title":"Enhancements"},{"location":"release_notes/v1.26/#security","text":"Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250)","title":"Security"},{"location":"release_notes/v1.26/#fixes_1","text":"Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Fixed a regression in WAL restore operations that prevented fallback to the in-tree barmanObjectStore configuration defined in the externalCluster source when a plugin failed to locate a WAL file (#7507). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) Treated timeout errors during volume snapshot creation as retryable to prevent unnecessary backup failures. (#7010) Moved the defaulting logic for .spec.postgresql.synchronous.dataDurability from the CRD to the webhook to avoid UI issues with OLM. (#7600) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Fixed an issue that prevented WALs from being archived on a former primary node when using a plugin. (#6964) Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). cnpg plugin: Increased the buffer size in the logs pretty command to better handle larger log output (#7281). Ensured the plugin-name parameter is required for plugin-based backups and disallowed for non-plugin backup methods (#7506). Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122)","title":"Fixes"},{"location":"release_notes/v1.26/#changes_1","text":"Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556) Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399).","title":"Changes"},{"location":"release_notes/v1.26/#supported-versions","text":"Kubernetes 1.33, 1.32, 1.31, and 1.30 PostgreSQL 17, 16, 15, 14, and 13 PostgreSQL 17.5 is the default image PostgreSQL 13 support ends on November 12, 2025","title":"Supported versions"},{"location":"release_notes/v1.27/","text":"Release notes for CloudNativePG 1.27 History of user-visible changes in the 1.27 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.27.0-rc1 Release date: Jul 29, 2025 Important changes: A change in the default behavior of the liveness probe , now enforcing the shutdown of an isolated primary within the livenessProbeTimeout (30 seconds), will require a restart of your pods. Features: Dynamic loading of PostgreSQL extensions : Introduced the .spec.postgresql.extensions stanza for mounting PostgreSQL extensions, packaged as OCI-compliant container images, as read-only and immutable volumes inside instance pods. This allows dynamic extension management without rebuilding base images. ( #7991 ). Logical decoding slot synchronization in HA clusters : Added the synchronizeLogicalDecoding field under spec.replicationSlots.highAvailability to enable automatic synchronization of logical decoding slots across high-availability clusters, ensuring logical replication subscribers continue seamlessly after a publisher failover ( #7931 ). Primary Isolation Check : Promoted to stable the liveness pinger experimental feature introduced in 1.26, adding the .spec.probes.liveness.isolationCheck section to enable primary isolation checks in the liveness probe by default. This improves the detection and handling of primary connectivity issues in Kubernetes environments ( #7845 ). Enhancements: Introduced an opt-in experimental feature that enables quorum-based failover to improve safety and data durability during failover events. This feature, also called failover quorum, can be activated via the alpha.cnpg.io/failoverQuorum annotation. ( #7572 ). Added support for user maps for predefined users such as streaming_replica , allowing the use of self-managed client certificates with different Common Names in environments with strict policies or shared CAs, while still enabling replicas to join clusters using the streaming_replica role ( #7725 ). Added a new PhaseFailurePlugin phase in the Cluster status to improve observability of plugin-related failures ( #7988 ). Made the Backup.spec field immutable after creation, ensuring consistency and predictability in backup operations ( #7904 ). Added fqdn-uri and fqdn-jdbc-uri fields in the user secret to simplify the retrieval of fully qualified domain name-based connection strings ( #7852 ). CNPG-I: Added Postgres interface support to the CNPG-I operator, continuing the transition toward a plugin-based architecture ( #7179 ). Added metrics capabilities to the CNPG-I instance webserver, enabling metrics exposure directly from the instance for better observability ( #8033 ). Supported versions Kubernetes 1.33, 1.32, and 1.31 PostgreSQL 17, 16, 15, 14, and 13 PostgreSQL 17.5 is the default image PostgreSQL 13 support ends on November 12, 2025","title":"Release notes for CloudNativePG 1.27"},{"location":"release_notes/v1.27/#release-notes-for-cloudnativepg-127","text":"History of user-visible changes in the 1.27 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.27"},{"location":"release_notes/v1.27/#version-1270-rc1","text":"Release date: Jul 29, 2025","title":"Version 1.27.0-rc1"},{"location":"release_notes/v1.27/#important-changes","text":"A change in the default behavior of the liveness probe , now enforcing the shutdown of an isolated primary within the livenessProbeTimeout (30 seconds), will require a restart of your pods.","title":"Important changes:"},{"location":"release_notes/v1.27/#features","text":"Dynamic loading of PostgreSQL extensions : Introduced the .spec.postgresql.extensions stanza for mounting PostgreSQL extensions, packaged as OCI-compliant container images, as read-only and immutable volumes inside instance pods. This allows dynamic extension management without rebuilding base images. ( #7991 ). Logical decoding slot synchronization in HA clusters : Added the synchronizeLogicalDecoding field under spec.replicationSlots.highAvailability to enable automatic synchronization of logical decoding slots across high-availability clusters, ensuring logical replication subscribers continue seamlessly after a publisher failover ( #7931 ). Primary Isolation Check : Promoted to stable the liveness pinger experimental feature introduced in 1.26, adding the .spec.probes.liveness.isolationCheck section to enable primary isolation checks in the liveness probe by default. This improves the detection and handling of primary connectivity issues in Kubernetes environments ( #7845 ).","title":"Features:"},{"location":"release_notes/v1.27/#enhancements","text":"Introduced an opt-in experimental feature that enables quorum-based failover to improve safety and data durability during failover events. This feature, also called failover quorum, can be activated via the alpha.cnpg.io/failoverQuorum annotation. ( #7572 ). Added support for user maps for predefined users such as streaming_replica , allowing the use of self-managed client certificates with different Common Names in environments with strict policies or shared CAs, while still enabling replicas to join clusters using the streaming_replica role ( #7725 ). Added a new PhaseFailurePlugin phase in the Cluster status to improve observability of plugin-related failures ( #7988 ). Made the Backup.spec field immutable after creation, ensuring consistency and predictability in backup operations ( #7904 ). Added fqdn-uri and fqdn-jdbc-uri fields in the user secret to simplify the retrieval of fully qualified domain name-based connection strings ( #7852 ). CNPG-I: Added Postgres interface support to the CNPG-I operator, continuing the transition toward a plugin-based architecture ( #7179 ). Added metrics capabilities to the CNPG-I instance webserver, enabling metrics exposure directly from the instance for better observability ( #8033 ).","title":"Enhancements:"},{"location":"release_notes/v1.27/#supported-versions","text":"Kubernetes 1.33, 1.32, and 1.31 PostgreSQL 17, 16, 15, 14, and 13 PostgreSQL 17.5 is the default image PostgreSQL 13 support ends on November 12, 2025","title":"Supported versions"},{"location":"release_notes/old/v1.15/","text":"Release notes for CloudNativePG 1.15 History of user-visible changes in the 1.15 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Warning This is expected to be the last release in the 1.15.X series. Users are encouraged to update to a newer minor version soon. Version 1.15.5 Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Make the cluster's conditions compatible with metav1.Conditions struct (#720) Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765) Version 1.15.4 Release date: Sep 6, 2022 Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Fixes: Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641) Version 1.15.3 Release date: Aug 12, 2022 Enhancements: Enable the configuration of the huge_pages option for PostgreSQL (#456) Enhance log during promotion and demotion, after a failover or a switchover, by printing the time elapsed between the request of promotion and the actual availability for writes (#371) Add the instanceName and clusterName labels on jobs, pods, and PVCs to improve interaction with these resources (#534) Add instructions on how to create PostGIS clusters (#570) Security: Explicitly assign securityContext to the Pooler deployment (#485) Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437) Fixes: Use the correct delays for restarts ( stopDelay ) and for switchover ( switchoverDelay ), as they were erroneously swapped before. This is an important fix, as it might block indefinitely restarts if switchoverDelay is not set and uses the default value of 40000000 seconds (#531) Prevent the metrics collector from causing panic when the query returns an error (#396) Removing an unsafe debug message that was referencing an unchecked pointer, leading in some cases to segmentation faults regardless of the log level (#491) Prevent panic when fencing in case the cluster had no annotation (#512) Avoid updating the CRD if a TLS certificate is not changed (#501) Handle conflicts while injecting a certificate in the CRD (#547) Backup and recovery: Correctly pass object store credentials in Google Cloud (#454) Minor changes: Set the default operand image to PostgreSQL 15.0 Version 1.15.2 Release date: Jul 7, 2022 (patch release) Enhancements: Improve logging of the instance manager during switchover and failover Require Barman >= 3.0.0 for future support of PostgreSQL 15 in backup and recovery Changes: Set the default operand image to PostgreSQL 15.0 Fixes: Fix the initialization order inside the WithActiveInstance function that starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in the cluster initialization phase - this is especially useful in bootstrap operations like recovery from a backup are failing (before this patch, such logs were not sent to the standard output channel and were permanently lost) Avoid an unnecessary switchover when a hot standby sensitive parameter is decreased, and the primary has already restarted Properly quote role names in ALTER ROLE statements Backup and recovery: Fix the algorithm detecting the closest Barman backup for PITR, which was comparing the requested recovery timestamp with the backup start instead of the end Fix Point in Time Recovery based on a transaction ID, a named restore point, or the \u201cimmediate\u201d target by providing a new field called backupID in the recoveryTarget section Fix encryption parameters invoking barman-cloud-wal-archive and barman-cloud-backup commands Stop ignoring barmanObjectStore.serverName option when recovering from a backup object store using a server name that doesn\u2019t match the current cluster name cnpg plug-in: Make sure that the plug-in complies with the -n parameter when specified by the user Fix the status command to sort results and remove variability in the output Version 1.15.1 Release date: May 27, 2022 (patch release) Minor changes: Enable configuration of the archive_timeout setting for PostgreSQL, which was previously a fixed parameter (by default set to 5 minutes) Introduce a new field called backupOwnerReference in the scheduledBackup resource to set the ownership reference on the created backup resources, with possible values being none (default), self (objects owned by the scheduled backup object), and cluster (owned by the Postgres cluster object) Introduce automated collection of pg_stat_wal metrics for PostgreSQL 14 or higher in the native Prometheus exporter Set the default operand image to PostgreSQL 15.0 Fixes: Fix fencing by killing orphaned processes related to postgres Enable the CSV log pipe inside the WithActiveInstance function to collect logs from recovery bootstrap jobs and help in the troubleshooting phase Prevent bootstrapping a new cluster with a non-empty backup object store, removing the risk of overwriting existing backups With the recovery bootstrap method, make sure that the recovery object store and the backup object store are different to avoid overwriting existing backups Re-queue the reconciliation loop if the RBAC for backups is not yet created Fix an issue with backups and the wrong specification of the cluster name property Ensures that operator pods always have the latest certificates in the case of a deployment of the operator in high availability, with more than one replica Fix the cnpg report operator command to correctly handle the case of a deployment of the operator in high availability, with more than one replica Properly propagate changes in the cluster\u2019s inheritedMetadata set of labels and annotations to the related resources of the cluster without requiring a restart Fix the cnpg plugin to correctly parse any custom configmap and secret name defined in the operator deployment, instead of relying just on the default values Fix the local building of the documentation by using the minidocks/mkdocs image for mkdocs Version 1.15.0 Release date: 21 April 2022 Features: Fencing: Introduction of the fencing capability for a cluster or a given set of PostgreSQL instances through the cnpg.io/fencedInstances annotation, which, if not empty, disables switchover/failovers in the cluster; fenced instances are shut down and the pod is kept running (while considered not ready) for inspection and emergencies LDAP authentication: Allow LDAP Simple Bind and Search+Bind configuration options in the pg_hba.conf to be defined in the Postgres cluster spec declaratively, enabling the optional use of Kubernetes secrets for sensitive options such as ldapbindpasswd Introduction of the primaryUpdateMethod option, accepting the values of switchover (default) and restart , to be used in case of unsupervised primaryUpdateStrategy ; this method controls what happens to the primary instance during the rolling update procedure New report command in the kubectl cnp plugin for better diagnosis and more effective troubleshooting of both the operator and a specific Postgres cluster Prune those Backup objects that are no longer in the backup object store Specification of target timeline and LSN in Point-In-Time Recovery bootstrap method Support for the AWS_SESSION_TOKEN authentication token in AWS S3 through the sessionToken option Default image name for PgBouncer in Pooler pods set to quay.io/enterprisedb/pgbouncer:1.17.0 Fixes: Base backup detection for Point-In-Time Recovery via targetTime correctly works now, as previously a target prior to the latest available backup was not possible (the detection algorithm was always wrong by selecting the last backup as a starting point) Improved resilience of hot standby sensitive parameters by relying on the values the operator collects from pg_controldata Intermediate certificates handling has been improved by properly discarding invalid entries, instead of throwing an invalid certificate error Prometheus exporter metric collection queries in the databases are now committed instead of rolled back (this might result in a change in the number of rolled back transactions that are visible from downstream dashboards, where applicable) Version 1.15.0 is the first release of CloudNativePG. Previously, this software was called EDB Cloud Native PostgreSQL (now EDB Postgres for Kubernetes). If you are looking for information about a previous release, please refer to the EDB documentation .","title":"Release notes for CloudNativePG 1.15"},{"location":"release_notes/old/v1.15/#release-notes-for-cloudnativepg-115","text":"History of user-visible changes in the 1.15 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Warning This is expected to be the last release in the 1.15.X series. Users are encouraged to update to a newer minor version soon.","title":"Release notes for CloudNativePG 1.15"},{"location":"release_notes/old/v1.15/#version-1155","text":"Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Make the cluster's conditions compatible with metav1.Conditions struct (#720) Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765)","title":"Version 1.15.5"},{"location":"release_notes/old/v1.15/#version-1154","text":"Release date: Sep 6, 2022 Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Fixes: Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641)","title":"Version 1.15.4"},{"location":"release_notes/old/v1.15/#version-1153","text":"Release date: Aug 12, 2022 Enhancements: Enable the configuration of the huge_pages option for PostgreSQL (#456) Enhance log during promotion and demotion, after a failover or a switchover, by printing the time elapsed between the request of promotion and the actual availability for writes (#371) Add the instanceName and clusterName labels on jobs, pods, and PVCs to improve interaction with these resources (#534) Add instructions on how to create PostGIS clusters (#570) Security: Explicitly assign securityContext to the Pooler deployment (#485) Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437) Fixes: Use the correct delays for restarts ( stopDelay ) and for switchover ( switchoverDelay ), as they were erroneously swapped before. This is an important fix, as it might block indefinitely restarts if switchoverDelay is not set and uses the default value of 40000000 seconds (#531) Prevent the metrics collector from causing panic when the query returns an error (#396) Removing an unsafe debug message that was referencing an unchecked pointer, leading in some cases to segmentation faults regardless of the log level (#491) Prevent panic when fencing in case the cluster had no annotation (#512) Avoid updating the CRD if a TLS certificate is not changed (#501) Handle conflicts while injecting a certificate in the CRD (#547) Backup and recovery: Correctly pass object store credentials in Google Cloud (#454) Minor changes: Set the default operand image to PostgreSQL 15.0","title":"Version 1.15.3"},{"location":"release_notes/old/v1.15/#version-1152","text":"Release date: Jul 7, 2022 (patch release) Enhancements: Improve logging of the instance manager during switchover and failover Require Barman >= 3.0.0 for future support of PostgreSQL 15 in backup and recovery Changes: Set the default operand image to PostgreSQL 15.0 Fixes: Fix the initialization order inside the WithActiveInstance function that starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in the cluster initialization phase - this is especially useful in bootstrap operations like recovery from a backup are failing (before this patch, such logs were not sent to the standard output channel and were permanently lost) Avoid an unnecessary switchover when a hot standby sensitive parameter is decreased, and the primary has already restarted Properly quote role names in ALTER ROLE statements Backup and recovery: Fix the algorithm detecting the closest Barman backup for PITR, which was comparing the requested recovery timestamp with the backup start instead of the end Fix Point in Time Recovery based on a transaction ID, a named restore point, or the \u201cimmediate\u201d target by providing a new field called backupID in the recoveryTarget section Fix encryption parameters invoking barman-cloud-wal-archive and barman-cloud-backup commands Stop ignoring barmanObjectStore.serverName option when recovering from a backup object store using a server name that doesn\u2019t match the current cluster name cnpg plug-in: Make sure that the plug-in complies with the -n parameter when specified by the user Fix the status command to sort results and remove variability in the output","title":"Version 1.15.2"},{"location":"release_notes/old/v1.15/#version-1151","text":"Release date: May 27, 2022 (patch release) Minor changes: Enable configuration of the archive_timeout setting for PostgreSQL, which was previously a fixed parameter (by default set to 5 minutes) Introduce a new field called backupOwnerReference in the scheduledBackup resource to set the ownership reference on the created backup resources, with possible values being none (default), self (objects owned by the scheduled backup object), and cluster (owned by the Postgres cluster object) Introduce automated collection of pg_stat_wal metrics for PostgreSQL 14 or higher in the native Prometheus exporter Set the default operand image to PostgreSQL 15.0 Fixes: Fix fencing by killing orphaned processes related to postgres Enable the CSV log pipe inside the WithActiveInstance function to collect logs from recovery bootstrap jobs and help in the troubleshooting phase Prevent bootstrapping a new cluster with a non-empty backup object store, removing the risk of overwriting existing backups With the recovery bootstrap method, make sure that the recovery object store and the backup object store are different to avoid overwriting existing backups Re-queue the reconciliation loop if the RBAC for backups is not yet created Fix an issue with backups and the wrong specification of the cluster name property Ensures that operator pods always have the latest certificates in the case of a deployment of the operator in high availability, with more than one replica Fix the cnpg report operator command to correctly handle the case of a deployment of the operator in high availability, with more than one replica Properly propagate changes in the cluster\u2019s inheritedMetadata set of labels and annotations to the related resources of the cluster without requiring a restart Fix the cnpg plugin to correctly parse any custom configmap and secret name defined in the operator deployment, instead of relying just on the default values Fix the local building of the documentation by using the minidocks/mkdocs image for mkdocs","title":"Version 1.15.1"},{"location":"release_notes/old/v1.15/#version-1150","text":"Release date: 21 April 2022 Features: Fencing: Introduction of the fencing capability for a cluster or a given set of PostgreSQL instances through the cnpg.io/fencedInstances annotation, which, if not empty, disables switchover/failovers in the cluster; fenced instances are shut down and the pod is kept running (while considered not ready) for inspection and emergencies LDAP authentication: Allow LDAP Simple Bind and Search+Bind configuration options in the pg_hba.conf to be defined in the Postgres cluster spec declaratively, enabling the optional use of Kubernetes secrets for sensitive options such as ldapbindpasswd Introduction of the primaryUpdateMethod option, accepting the values of switchover (default) and restart , to be used in case of unsupervised primaryUpdateStrategy ; this method controls what happens to the primary instance during the rolling update procedure New report command in the kubectl cnp plugin for better diagnosis and more effective troubleshooting of both the operator and a specific Postgres cluster Prune those Backup objects that are no longer in the backup object store Specification of target timeline and LSN in Point-In-Time Recovery bootstrap method Support for the AWS_SESSION_TOKEN authentication token in AWS S3 through the sessionToken option Default image name for PgBouncer in Pooler pods set to quay.io/enterprisedb/pgbouncer:1.17.0 Fixes: Base backup detection for Point-In-Time Recovery via targetTime correctly works now, as previously a target prior to the latest available backup was not possible (the detection algorithm was always wrong by selecting the last backup as a starting point) Improved resilience of hot standby sensitive parameters by relying on the values the operator collects from pg_controldata Intermediate certificates handling has been improved by properly discarding invalid entries, instead of throwing an invalid certificate error Prometheus exporter metric collection queries in the databases are now committed instead of rolled back (this might result in a change in the number of rolled back transactions that are visible from downstream dashboards, where applicable) Version 1.15.0 is the first release of CloudNativePG. Previously, this software was called EDB Cloud Native PostgreSQL (now EDB Postgres for Kubernetes). If you are looking for information about a previous release, please refer to the EDB documentation .","title":"Version 1.15.0"},{"location":"release_notes/old/v1.16/","text":"Release notes for CloudNativePG 1.16 History of user-visible changes in the 1.16 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.16.5 Release date: Dec 21, 2022 Warning This is expected to be the last release in the 1.16.X series. Users are encouraged to update to a newer minor version soon. Important announcements: Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166) Version 1.16.4 Release date: Nov 10, 2022 Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: status command for the cnpg plugin: Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866) Version 1.16.3 Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765) Version 1.16.2 Release date: Sep 6, 2022 Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Fixes: Use shared_preload_libraries when bootstrapping the new cluster's primary (#642) Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641) Version 1.16.1 Release date: Aug 12, 2022 Enhancements: Enable the configuration of the huge_pages option for PostgreSQL (#456) Enhance log during promotion and demotion, after a failover or a switchover, by printing the time elapsed between the request of promotion and the actual availability for writes (#371) Introduce the PostgreSQL cluster\u2019s timeline in the cluster status (#462) Add the instanceName and clusterName labels on jobs, pods, and PVCs to improve interaction with these resources (#534) Add instructions on how to create PostGIS clusters (#570) Security: Explicitly assign securityContext to the Pooler deployment (#485) Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437) Fixes: Use the correct delays for restarts ( stopDelay ) and for switchover ( switchoverDelay ), as they were erroneously swapped before. This is an important fix, as it might block indefinitely restarts if switchoverDelay is not set and uses the default value of 40000000 seconds (#531) Prevent the metrics collector from causing panic when the query returns an error (#396) Removing an unsafe debug message that was referencing an unchecked pointer, leading in some cases to segmentation faults regardless of the log level (#491) Prevent panic when fencing in case the cluster had no annotation (#512) Avoid updating the CRD if a TLS certificate is not changed (#501) Handle conflicts while injecting a certificate in the CRD (#547) Database import: Use the postgres user while running pg_restore in database import (#411) Document the requirement to explicitly set sslmode in the monolith import case to control SSL connections with the origin external server (#572) Fix bug that prevented import from working when dbname was specified in connectionParameters (#569) Backup and recovery: Correctly pass object store credentials in Google Cloud (#454) Minor changes: Set the default operand image to PostgreSQL 15.0 Version 1.16.0 Release date: Jul 7, 2022 (minor release) Features: Offline data import and major upgrades for PostgreSQL: introduce the bootstrap.initdb.import section to provide a way to import objects via the network from an existing PostgreSQL instance (even outside Kubernetes) inside a brand new CloudNativePG cluster using the PostgreSQL logical backup concept ( pg_dump / pg_restore ). The same method can be used to perform major PostgreSQL upgrades on a new cluster. The feature introduces two types of import: microservice (import one database only in the new cluster) and monolith (import the selected databases and roles from the existing instance). Anti-affinity rules for synchronous replication based on labels: make sure that synchronous replicas are running on nodes with different characteristics than the node where the primary is running, for example, availability zone Enhancements: Improve fencing by removing the existing limitation that disables failover when one or more instances are fenced Enhance the automated extension management framework by checking whether an extension exists in the catalog instead of running DROP EXTENSION IF EXISTS unnecessarily Improve logging of the instance manager during switchover and failover Enable redefining the name of the database of the application, its owner, and the related secret when recovering from an object store or cloning an instance via pg_basebackup (this was only possible in the initdb bootstrap so far) Backup and recovery: Require Barman >= 3.0.0 for future support of PostgreSQL 15 Enable Azure AD Workload Identity for Barman Cloud backups through the inheritFromAzureAD option Introduce barmanObjectStore.s3Credentials.region to define the region in AWS ( AWS_DEFAULT_REGION ) for both backup and recovery object stores Support for Kubernetes 1.24 Changes: Set the default operand image to PostgreSQL 15.0 Use conditions from the Kubernetes API instead of relying on our own implementation for backup and WAL archiving Fixes: Fix the initialization order inside the WithActiveInstance function that starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in the cluster initialization phase - this is especially useful in bootstrap operations like recovery from a backup are failing (before this patch, such logs were not sent to the standard output channel and were permanently lost) Avoid an unnecessary switchover when a hot standby sensitive parameter is decreased, and the primary has already restarted Properly quote role names in ALTER ROLE statements Backup and recovery: Fix the algorithm detecting the closest Barman backup for PITR, which was comparing the requested recovery timestamp with the backup start instead of the end Fix Point in Time Recovery based on a transaction ID, a named restore point, or the \u201cimmediate\u201d target by providing a new field called backupID in the recoveryTarget section Fix encryption parameters invoking barman-cloud-wal-archive and barman-cloud-backup commands Stop ignoring barmanObjectStore.serverName option when recovering from a backup object store using a server name that doesn\u2019t match the current cluster name cnpg plug-in: Make sure that the plug-in complies with the -n parameter when specified by the user Fix the status command to sort results and remove variability in the output","title":"Release notes for CloudNativePG 1.16"},{"location":"release_notes/old/v1.16/#release-notes-for-cloudnativepg-116","text":"History of user-visible changes in the 1.16 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.16"},{"location":"release_notes/old/v1.16/#version-1165","text":"Release date: Dec 21, 2022 Warning This is expected to be the last release in the 1.16.X series. Users are encouraged to update to a newer minor version soon. Important announcements: Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166)","title":"Version 1.16.5"},{"location":"release_notes/old/v1.16/#version-1164","text":"Release date: Nov 10, 2022 Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: status command for the cnpg plugin: Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866)","title":"Version 1.16.4"},{"location":"release_notes/old/v1.16/#version-1163","text":"Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765)","title":"Version 1.16.3"},{"location":"release_notes/old/v1.16/#version-1162","text":"Release date: Sep 6, 2022 Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Fixes: Use shared_preload_libraries when bootstrapping the new cluster's primary (#642) Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641)","title":"Version 1.16.2"},{"location":"release_notes/old/v1.16/#version-1161","text":"Release date: Aug 12, 2022 Enhancements: Enable the configuration of the huge_pages option for PostgreSQL (#456) Enhance log during promotion and demotion, after a failover or a switchover, by printing the time elapsed between the request of promotion and the actual availability for writes (#371) Introduce the PostgreSQL cluster\u2019s timeline in the cluster status (#462) Add the instanceName and clusterName labels on jobs, pods, and PVCs to improve interaction with these resources (#534) Add instructions on how to create PostGIS clusters (#570) Security: Explicitly assign securityContext to the Pooler deployment (#485) Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437) Fixes: Use the correct delays for restarts ( stopDelay ) and for switchover ( switchoverDelay ), as they were erroneously swapped before. This is an important fix, as it might block indefinitely restarts if switchoverDelay is not set and uses the default value of 40000000 seconds (#531) Prevent the metrics collector from causing panic when the query returns an error (#396) Removing an unsafe debug message that was referencing an unchecked pointer, leading in some cases to segmentation faults regardless of the log level (#491) Prevent panic when fencing in case the cluster had no annotation (#512) Avoid updating the CRD if a TLS certificate is not changed (#501) Handle conflicts while injecting a certificate in the CRD (#547) Database import: Use the postgres user while running pg_restore in database import (#411) Document the requirement to explicitly set sslmode in the monolith import case to control SSL connections with the origin external server (#572) Fix bug that prevented import from working when dbname was specified in connectionParameters (#569) Backup and recovery: Correctly pass object store credentials in Google Cloud (#454) Minor changes: Set the default operand image to PostgreSQL 15.0","title":"Version 1.16.1"},{"location":"release_notes/old/v1.16/#version-1160","text":"Release date: Jul 7, 2022 (minor release) Features: Offline data import and major upgrades for PostgreSQL: introduce the bootstrap.initdb.import section to provide a way to import objects via the network from an existing PostgreSQL instance (even outside Kubernetes) inside a brand new CloudNativePG cluster using the PostgreSQL logical backup concept ( pg_dump / pg_restore ). The same method can be used to perform major PostgreSQL upgrades on a new cluster. The feature introduces two types of import: microservice (import one database only in the new cluster) and monolith (import the selected databases and roles from the existing instance). Anti-affinity rules for synchronous replication based on labels: make sure that synchronous replicas are running on nodes with different characteristics than the node where the primary is running, for example, availability zone Enhancements: Improve fencing by removing the existing limitation that disables failover when one or more instances are fenced Enhance the automated extension management framework by checking whether an extension exists in the catalog instead of running DROP EXTENSION IF EXISTS unnecessarily Improve logging of the instance manager during switchover and failover Enable redefining the name of the database of the application, its owner, and the related secret when recovering from an object store or cloning an instance via pg_basebackup (this was only possible in the initdb bootstrap so far) Backup and recovery: Require Barman >= 3.0.0 for future support of PostgreSQL 15 Enable Azure AD Workload Identity for Barman Cloud backups through the inheritFromAzureAD option Introduce barmanObjectStore.s3Credentials.region to define the region in AWS ( AWS_DEFAULT_REGION ) for both backup and recovery object stores Support for Kubernetes 1.24 Changes: Set the default operand image to PostgreSQL 15.0 Use conditions from the Kubernetes API instead of relying on our own implementation for backup and WAL archiving Fixes: Fix the initialization order inside the WithActiveInstance function that starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in the cluster initialization phase - this is especially useful in bootstrap operations like recovery from a backup are failing (before this patch, such logs were not sent to the standard output channel and were permanently lost) Avoid an unnecessary switchover when a hot standby sensitive parameter is decreased, and the primary has already restarted Properly quote role names in ALTER ROLE statements Backup and recovery: Fix the algorithm detecting the closest Barman backup for PITR, which was comparing the requested recovery timestamp with the backup start instead of the end Fix Point in Time Recovery based on a transaction ID, a named restore point, or the \u201cimmediate\u201d target by providing a new field called backupID in the recoveryTarget section Fix encryption parameters invoking barman-cloud-wal-archive and barman-cloud-backup commands Stop ignoring barmanObjectStore.serverName option when recovering from a backup object store using a server name that doesn\u2019t match the current cluster name cnpg plug-in: Make sure that the plug-in complies with the -n parameter when specified by the user Fix the status command to sort results and remove variability in the output","title":"Version 1.16.0"},{"location":"release_notes/old/v1.17/","text":"Release notes for CloudNativePG 1.17 History of user-visible changes in the 1.17 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.17.5 Release date: March 20, 2023 Warning This is expected to be the last release in the 1.17.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Fixes: Prevent panic with error handling in the probes (#1716) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Version 1.17.4 Release date: Feb 14, 2023 Features: Support for Kubernetes' projected volumes (#1269) Support custom environment variables for finer control of the PostgreSQL server process (#1275) Enhancements: Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213) Version 1.17.3 Release date: Dec 21, 2022 Important announcements: Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Improve compatibility with Istio: add support for Istio's quit endpoint so that jobs with Istio sidecars do not run indefinitely (#967) Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure the PVC containing WALs is deleted when scaling down the cluster (#1135) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166) Version 1.17.2 Release date: Nov 10, 2022 Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: status command for the cnpg plugin: Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Set PostgreSQL 15.0 as the new default version (#821) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866) Version 1.17.1 Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765) Ensure that timestamps that are specified with microsecond precision using the PostgreSQL format are correctly parsed (#741) Version 1.17.0 Release date: Sep 6, 2022 (minor release) Features: Separate volume for WAL files: Support for separating Write Ahead Log (WAL) and database data files onto different disks, potentially leading to better performance on high write systems by easing I/O load on the data directory. This option is controlled with the introduction of the optional walStorage section to separate WAL files ( pg_wal ) in a dedicated volume, separate from the PGDATA defined in the main and mandatory storage section (#513). Current limitations: walStorage can only be set at cluster creation and cannot be added or removed when the cluster is up and running. Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Introduce the kubectl cnpg destroy command to help remove an instance and all the associated PVCs (#643) Fixes: Use shared_preload_libraries when bootstrapping the new cluster's primary (#642) Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641)","title":"Release notes for CloudNativePG 1.17"},{"location":"release_notes/old/v1.17/#release-notes-for-cloudnativepg-117","text":"History of user-visible changes in the 1.17 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.17"},{"location":"release_notes/old/v1.17/#version-1175","text":"Release date: March 20, 2023 Warning This is expected to be the last release in the 1.17.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Fixes: Prevent panic with error handling in the probes (#1716) Properly show WAL archiving information with status command of the cnpg plugin (#1666)","title":"Version 1.17.5"},{"location":"release_notes/old/v1.17/#version-1174","text":"Release date: Feb 14, 2023 Features: Support for Kubernetes' projected volumes (#1269) Support custom environment variables for finer control of the PostgreSQL server process (#1275) Enhancements: Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213)","title":"Version 1.17.4"},{"location":"release_notes/old/v1.17/#version-1173","text":"Release date: Dec 21, 2022 Important announcements: Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Improve compatibility with Istio: add support for Istio's quit endpoint so that jobs with Istio sidecars do not run indefinitely (#967) Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure the PVC containing WALs is deleted when scaling down the cluster (#1135) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166)","title":"Version 1.17.3"},{"location":"release_notes/old/v1.17/#version-1172","text":"Release date: Nov 10, 2022 Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: status command for the cnpg plugin: Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Set PostgreSQL 15.0 as the new default version (#821) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866)","title":"Version 1.17.2"},{"location":"release_notes/old/v1.17/#version-1171","text":"Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765) Ensure that timestamps that are specified with microsecond precision using the PostgreSQL format are correctly parsed (#741)","title":"Version 1.17.1"},{"location":"release_notes/old/v1.17/#version-1170","text":"Release date: Sep 6, 2022 (minor release) Features: Separate volume for WAL files: Support for separating Write Ahead Log (WAL) and database data files onto different disks, potentially leading to better performance on high write systems by easing I/O load on the data directory. This option is controlled with the introduction of the optional walStorage section to separate WAL files ( pg_wal ) in a dedicated volume, separate from the PGDATA defined in the main and mandatory storage section (#513). Current limitations: walStorage can only be set at cluster creation and cannot be added or removed when the cluster is up and running. Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Introduce the kubectl cnpg destroy command to help remove an instance and all the associated PVCs (#643) Fixes: Use shared_preload_libraries when bootstrapping the new cluster's primary (#642) Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641)","title":"Version 1.17.0"},{"location":"release_notes/old/v1.18/","text":"Release notes for CloudNativePG 1.18 History of user-visible changes in the 1.18 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.18.5 Release date: June 12, 2023 Warning This is expected to be the last release in the 1.18.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3s engine which could prevent setup on K3\u2019s (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242) Version 1.18.4 Release date: April 27, 2023 Important CloudNativePG is dropping support for PostgreSQL 10, as PostgreSQL 10 reached End-of-Life (EOL) in November 2022. Versions 11 and newer are supported. Please plan your migration to PostgreSQL 15 as soon as possible. Refer to \"Importing Postgres databases\" for more information on PostgreSQL major offline upgrades. Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858) Version 1.18.3 Release date: March 20, 2023 Enhancements: Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Enhance observability of backups with two new metrics and additional information in the status (#1428) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Inject binaries for all supported architectures in the operator image (#1513) Use the backup name to match resources in the backup object store (#1650) Leverages the --name option introduced with Barman 3.3 to make the association between backups and the object store more robust. Fixes: Prevent panic with error handling in the probes (#1716) Ensure that the HTTP package and controller runtime logs are in JSON format (#1442) Adds WAL storage to a cluster in a single instance Cluster (#1570) Various improvements to make backup code more robust (#1536, #1564, #1588, #1466, #1647) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Ensure nodeAffinity is applied even if AdditionalPodAffinity and AdditionalPodAntiAffinity are not set (#1663) Version 1.18.2 Release date: Feb 14, 2023 Enhancements: Introduce support for Kubernetes' projected volumes (#1269) Introduce support custom environment variables for finer control of the PostgreSQL server process (#1275) Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Improve support for the separate WAL volume feature by enabling users to move WAL files to a dedicated volume on an existing Postgres cluster (#1066) Enhance WAL observability with additional metrics for the Prometheus exporter, including values equivalent to the min_wal_size , max_wal_size , keep_wal_size , wal_keep_segments , as well as the maximum number of WALs that can be stored in the dedicated volume (#1382) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Skip executing a CHECKPOINT as the streaming_replica user (#1408) Make waitForWalArchiveWorking resilient to connection errors (#1399) Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Ensure ExecCommand obeys timeout (#1242) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213) Version 1.18.1 Release date: Dec 21, 2022 Important announcements: Alert on the impending deprecation of postgresql as a label to identify the CNPG cluster. In the remote case you have used this label, please start using the cnpg.io/cluster label instead (#1130) Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Customize labels and annotations for the service account: add a service account template that can be used, for example, to make authentication easier via identity management on GKE or EKS via IRSA (#1105) Add nodeAffinity support (#1182) - allows for richer scheduling options Improve compatibility with Istio: add support for Istio's quit endpoint so that jobs with Istio sidecars do not run indefinitely (#967) Allow fields remapping in JSON logs: helpful for use cases where the level and ts fields might interfere with the existing logging (#843) Add fio command to the kubectl-cnpg plugin (#1097) Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure the PVC containing WALs is deleted when scaling down the cluster (#1135) Fix missing ApiVersion and Kind in the pgbench manifest when using --dry-run (#1088) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166) Version 1.18.0 Release date: Nov 10, 2022 Features: Cluster-managed physical replication slots for High Availability : automatically manages physical replication slots for each hot standby replica in the High Availability cluster, both in the primary and the standby (#740) Postgres cluster hibernation : introduces cluster hibernation via the plugin, with a new subcommand kubectl cnpg hibernate on/off/status <cluster-name> . Hibernation destroys all the resources generated by the cluster, except the PVCs that belong to the PostgreSQL primary instance (#782) Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: Allow omitting the storage size in the cluster spec if there is a size request in the pvcTemplate (#914) status command for the cnpg plugin: Add replication slots information (#873) Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Updates to the End-to-End Test Suite page (#945) New subcommands in the cnpg plugin: pgbench generates a job definition executing pgbench against a cluster (#958) install generates an installation manifest for the operator (#944) Set PostgreSQL 15.0 as the new default version (#821) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866)","title":"Release notes for CloudNativePG 1.18"},{"location":"release_notes/old/v1.18/#release-notes-for-cloudnativepg-118","text":"History of user-visible changes in the 1.18 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.18"},{"location":"release_notes/old/v1.18/#version-1185","text":"Release date: June 12, 2023 Warning This is expected to be the last release in the 1.18.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3s engine which could prevent setup on K3\u2019s (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242)","title":"Version 1.18.5"},{"location":"release_notes/old/v1.18/#version-1184","text":"Release date: April 27, 2023 Important CloudNativePG is dropping support for PostgreSQL 10, as PostgreSQL 10 reached End-of-Life (EOL) in November 2022. Versions 11 and newer are supported. Please plan your migration to PostgreSQL 15 as soon as possible. Refer to \"Importing Postgres databases\" for more information on PostgreSQL major offline upgrades. Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858)","title":"Version 1.18.4"},{"location":"release_notes/old/v1.18/#version-1183","text":"Release date: March 20, 2023 Enhancements: Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Enhance observability of backups with two new metrics and additional information in the status (#1428) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Inject binaries for all supported architectures in the operator image (#1513) Use the backup name to match resources in the backup object store (#1650) Leverages the --name option introduced with Barman 3.3 to make the association between backups and the object store more robust. Fixes: Prevent panic with error handling in the probes (#1716) Ensure that the HTTP package and controller runtime logs are in JSON format (#1442) Adds WAL storage to a cluster in a single instance Cluster (#1570) Various improvements to make backup code more robust (#1536, #1564, #1588, #1466, #1647) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Ensure nodeAffinity is applied even if AdditionalPodAffinity and AdditionalPodAntiAffinity are not set (#1663)","title":"Version 1.18.3"},{"location":"release_notes/old/v1.18/#version-1182","text":"Release date: Feb 14, 2023 Enhancements: Introduce support for Kubernetes' projected volumes (#1269) Introduce support custom environment variables for finer control of the PostgreSQL server process (#1275) Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Improve support for the separate WAL volume feature by enabling users to move WAL files to a dedicated volume on an existing Postgres cluster (#1066) Enhance WAL observability with additional metrics for the Prometheus exporter, including values equivalent to the min_wal_size , max_wal_size , keep_wal_size , wal_keep_segments , as well as the maximum number of WALs that can be stored in the dedicated volume (#1382) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Skip executing a CHECKPOINT as the streaming_replica user (#1408) Make waitForWalArchiveWorking resilient to connection errors (#1399) Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Ensure ExecCommand obeys timeout (#1242) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213)","title":"Version 1.18.2"},{"location":"release_notes/old/v1.18/#version-1181","text":"Release date: Dec 21, 2022 Important announcements: Alert on the impending deprecation of postgresql as a label to identify the CNPG cluster. In the remote case you have used this label, please start using the cnpg.io/cluster label instead (#1130) Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Customize labels and annotations for the service account: add a service account template that can be used, for example, to make authentication easier via identity management on GKE or EKS via IRSA (#1105) Add nodeAffinity support (#1182) - allows for richer scheduling options Improve compatibility with Istio: add support for Istio's quit endpoint so that jobs with Istio sidecars do not run indefinitely (#967) Allow fields remapping in JSON logs: helpful for use cases where the level and ts fields might interfere with the existing logging (#843) Add fio command to the kubectl-cnpg plugin (#1097) Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure the PVC containing WALs is deleted when scaling down the cluster (#1135) Fix missing ApiVersion and Kind in the pgbench manifest when using --dry-run (#1088) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166)","title":"Version 1.18.1"},{"location":"release_notes/old/v1.18/#version-1180","text":"Release date: Nov 10, 2022 Features: Cluster-managed physical replication slots for High Availability : automatically manages physical replication slots for each hot standby replica in the High Availability cluster, both in the primary and the standby (#740) Postgres cluster hibernation : introduces cluster hibernation via the plugin, with a new subcommand kubectl cnpg hibernate on/off/status <cluster-name> . Hibernation destroys all the resources generated by the cluster, except the PVCs that belong to the PostgreSQL primary instance (#782) Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: Allow omitting the storage size in the cluster spec if there is a size request in the pvcTemplate (#914) status command for the cnpg plugin: Add replication slots information (#873) Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Updates to the End-to-End Test Suite page (#945) New subcommands in the cnpg plugin: pgbench generates a job definition executing pgbench against a cluster (#958) install generates an installation manifest for the operator (#944) Set PostgreSQL 15.0 as the new default version (#821) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866)","title":"Version 1.18.0"},{"location":"release_notes/old/v1.19/","text":"Release notes for CloudNativePG 1.19 History of user-visible changes in the 1.19 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.19.6 Release date: Nov 3, 2023 Warning This is expected to be the last release in the 1.19.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Changes: Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152) Version 1.19.5 Release date: Oct 11, 2023 Warning Version 1.19 will reach its End-of-Life (EOL) on November 9, 2023. If you haven't done it yet, please start planning an upgrade as soon as possible. Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin's status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606) Version 1.19.4 Release date: July 27, 2023 Enhancements: New logs command in the kubectl plugin, to retrieve or follow the logs of all pods in a cluster (#2375) Add support for specifying priorityClassName in pods, helping Kubernetes make scheduling decisions (#2043) Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257) Various enhancements to the documentation: Add troubleshooting instructions relating to hugepages (#1390) Extend the FAQs page (#2344) Technical enhancements: Add a check at the start of the restore process to ensure it can proceed; give improved error diagnostics if it cannot (#2419) Fixes: Ensure the logic of setting the recovery target matches that of Postgres (#2460) Prevent taking over service accounts not owned by the cluster, by setting ownerMetadata only during service account creation (#2462) Ensure correct permissions of the PGDATA directory for initdb and restore (#2384) Prevent a possible crash of the instance manager during the configuration reload (#2393) Prevent the LastFailedArchiveTime alert from triggering if a new backup has been successful after the failed ones (#1751) Prevent services from targeting non-instance pods (#2336) Security: Updated all project dependencies to the latest versions Version 1.19.3 Release date: June 12, 2023 Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3d engine which could prevent setup on k3d (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242) Version 1.19.2 Release date: April 27, 2023 Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858) Version 1.19.1 Release date: March 20, 2023 Enhancements: Allow overriding the default backup target policy (#1602): previously, all backups and scheduled backups would use the cluster-level target policy Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Enhance observability of backups with two new metrics and additional information in the status (#1428) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Inject binaries for all supported architectures in the operator image (#1513) Use the backup name to match resources in the backup object store (#1650) Leverages the --name option introduced with Barman 3.3 to make the association between backups and the object store more robust. Fixes: Prevent panic with error handling in the probes (#1716) Ensure that the HTTP package and controller runtime logs are in JSON format (#1442) Adds WAL storage to a cluster in a single instance Cluster (#1570) Various improvements to make backup code more robust (#1536, #1564, #1588, #1466, #1647) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Ensure nodeAffinity is applied even if AdditionalPodAffinity and AdditionalPodAntiAffinity are not set (#1663) Introduce failover delay during OnlineUpgrading phase (#1728) Previously, the online upgrade process could trigger failover logic unnecessarily. Version 1.19.0 Release date: Feb 14, 2023 Important announcements: PostgreSQL version 10 is no longer supported as it has reached its EOL. Versions 11 and newer are supported. Please plan your migration to PostgreSQL 15 as soon as possible. Refer to \"Importing Postgres databases\" for more information on PostgreSQL major offline upgrades. Features: Backup from a standby: introduce the .spec.backup.target option accepting that when set to prefer-standby will run take the physical base backup from the most aligned replica (#1162) Delayed failover: introduce the failoverDelay parameter to delay the failover process once the primary has been detected unhealthy (#1366) Enhancements: Introduce support for Kubernetes' projected volumes (#1269) Introduce support custom environment variables for finer control of the PostgreSQL server process (#1275) Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Improve support for the separate WAL volume feature by enabling users to move WAL files to a dedicated volume on an existing Postgres cluster (#1066) Enhance WAL observability with additional metrics for the Prometheus exporter, including values equivalent to the min_wal_size , max_wal_size , keep_wal_size , wal_keep_segments , as well as the maximum number of WALs that can be stored in the dedicated volume (#1382) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Update default PostgreSQL version for new cluster definitions to 15.2 (#1430) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Skip executing a CHECKPOINT as the streaming_replica user (#1408) Make waitForWalArchiveWorking resilient to connection errors (#1399) Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Ensure ExecCommand obeys timeout (#1242) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213)","title":"Release notes for CloudNativePG 1.19"},{"location":"release_notes/old/v1.19/#release-notes-for-cloudnativepg-119","text":"History of user-visible changes in the 1.19 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.19"},{"location":"release_notes/old/v1.19/#version-1196","text":"Release date: Nov 3, 2023 Warning This is expected to be the last release in the 1.19.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Changes: Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152)","title":"Version 1.19.6"},{"location":"release_notes/old/v1.19/#version-1195","text":"Release date: Oct 11, 2023 Warning Version 1.19 will reach its End-of-Life (EOL) on November 9, 2023. If you haven't done it yet, please start planning an upgrade as soon as possible. Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin's status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606)","title":"Version 1.19.5"},{"location":"release_notes/old/v1.19/#version-1194","text":"Release date: July 27, 2023 Enhancements: New logs command in the kubectl plugin, to retrieve or follow the logs of all pods in a cluster (#2375) Add support for specifying priorityClassName in pods, helping Kubernetes make scheduling decisions (#2043) Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257) Various enhancements to the documentation: Add troubleshooting instructions relating to hugepages (#1390) Extend the FAQs page (#2344) Technical enhancements: Add a check at the start of the restore process to ensure it can proceed; give improved error diagnostics if it cannot (#2419) Fixes: Ensure the logic of setting the recovery target matches that of Postgres (#2460) Prevent taking over service accounts not owned by the cluster, by setting ownerMetadata only during service account creation (#2462) Ensure correct permissions of the PGDATA directory for initdb and restore (#2384) Prevent a possible crash of the instance manager during the configuration reload (#2393) Prevent the LastFailedArchiveTime alert from triggering if a new backup has been successful after the failed ones (#1751) Prevent services from targeting non-instance pods (#2336) Security: Updated all project dependencies to the latest versions","title":"Version 1.19.4"},{"location":"release_notes/old/v1.19/#version-1193","text":"Release date: June 12, 2023 Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3d engine which could prevent setup on k3d (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242)","title":"Version 1.19.3"},{"location":"release_notes/old/v1.19/#version-1192","text":"Release date: April 27, 2023 Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858)","title":"Version 1.19.2"},{"location":"release_notes/old/v1.19/#version-1191","text":"Release date: March 20, 2023 Enhancements: Allow overriding the default backup target policy (#1602): previously, all backups and scheduled backups would use the cluster-level target policy Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Enhance observability of backups with two new metrics and additional information in the status (#1428) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Inject binaries for all supported architectures in the operator image (#1513) Use the backup name to match resources in the backup object store (#1650) Leverages the --name option introduced with Barman 3.3 to make the association between backups and the object store more robust. Fixes: Prevent panic with error handling in the probes (#1716) Ensure that the HTTP package and controller runtime logs are in JSON format (#1442) Adds WAL storage to a cluster in a single instance Cluster (#1570) Various improvements to make backup code more robust (#1536, #1564, #1588, #1466, #1647) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Ensure nodeAffinity is applied even if AdditionalPodAffinity and AdditionalPodAntiAffinity are not set (#1663) Introduce failover delay during OnlineUpgrading phase (#1728) Previously, the online upgrade process could trigger failover logic unnecessarily.","title":"Version 1.19.1"},{"location":"release_notes/old/v1.19/#version-1190","text":"Release date: Feb 14, 2023 Important announcements: PostgreSQL version 10 is no longer supported as it has reached its EOL. Versions 11 and newer are supported. Please plan your migration to PostgreSQL 15 as soon as possible. Refer to \"Importing Postgres databases\" for more information on PostgreSQL major offline upgrades. Features: Backup from a standby: introduce the .spec.backup.target option accepting that when set to prefer-standby will run take the physical base backup from the most aligned replica (#1162) Delayed failover: introduce the failoverDelay parameter to delay the failover process once the primary has been detected unhealthy (#1366) Enhancements: Introduce support for Kubernetes' projected volumes (#1269) Introduce support custom environment variables for finer control of the PostgreSQL server process (#1275) Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Improve support for the separate WAL volume feature by enabling users to move WAL files to a dedicated volume on an existing Postgres cluster (#1066) Enhance WAL observability with additional metrics for the Prometheus exporter, including values equivalent to the min_wal_size , max_wal_size , keep_wal_size , wal_keep_segments , as well as the maximum number of WALs that can be stored in the dedicated volume (#1382) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Update default PostgreSQL version for new cluster definitions to 15.2 (#1430) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Skip executing a CHECKPOINT as the streaming_replica user (#1408) Make waitForWalArchiveWorking resilient to connection errors (#1399) Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Ensure ExecCommand obeys timeout (#1242) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213)","title":"Version 1.19.0"},{"location":"release_notes/old/v1.20/","text":"Release notes for CloudNativePG 1.20 History of user-visible changes in the 1.20 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.20.6 Release date: Feb 2, 2024 Warning This is expected to be the last release in the 1.20.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Version 1.20.5 Release date: Dec 21, 2023 Security: By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300). Enhancements: Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270). Version 1.20.4 Release date: Nov 3, 2023 Enhancements: Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Changes: Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152) Version 1.20.3 Release date: Oct 11, 2023 Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin\u2019s status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL\u2019s fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Replace the cnpg snapshot command with cnpg backup -m volumeSnapshot for the kubectl plugin Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606) Version 1.20.2 Release date: July 27, 2023 Enhancements: New logs command in the kubectl plugin, to retrieve or follow the logs of all pods in a cluster (#2375) Add support for specifying priorityClassName in pods, helping Kubernetes make scheduling decisions (#2043) Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257) Various enhancements to the documentation: Add troubleshooting instructions relating to hugepages (#1390) Extend the FAQs page (#2344) Technical enhancements: Add a check at the start of the restore process to ensure it can proceed; give improved error diagnostics if it cannot (#2419) Improve handling of non-expiring passwords in managed roles (#2334) Fixes: Ensure the logic of setting the recovery target matches that of Postgres (#2460) Prevent taking over service accounts not owned by the cluster, by setting ownerMetadata only during service account creation (#2462) Ensure correct permissions of the PGDATA directory for initdb and restore (#2384) Prevent a possible crash of the instance manager during the configuration reload (#2393) Prevent the LastFailedArchiveTime alert from triggering if a new backup has been successful after the failed ones (#1751) Prevent services from targeting non-instance pods (#2336) Security: Updated all project dependencies to the latest versions Version 1.20.1 Release date: June 12, 2023 Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Declarative roles should ignore passwords if not set, easing management of previously existing roles (#2029) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3s engine which could prevent setup on K3\u2019s (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242) Version 1.20.0 Release date: April 27, 2023 Important changes from previous versions CloudNativePG 1.20 introduces some changes to the default behavior of a few features for newly created Cluster resources, compared to previous versions of the operator. The goal of these changes is to improve the resilience of a Postgres cluster out of the box through convention over configuration. For clusters with one or more replicas: Backup from standby is now enabled by default, unless target is explicitly set to primary Restart of the primary is now the default method to complete the unsupervised rolling update procedure ( primaryUpdateMethod defaults to restart , unless explicitly set to switchover ) For further information, please refer to the \"Installation and upgrades\" section. Features: Declarative role management: introduce the managed.roles stanza in the Cluster spec to provide full lifecycle management of database roles, by providing an abstraction to the related DDL commands in PostgreSQL, such as CREATE ROLE and ALTER ROLE (#1524, #1793 and #1815) Declarative hibernation of a PostgreSQL cluster: introduce a new annotation called cnpg.io/hibernation to declaratively hibernate a PostgreSQL cluster by deleting all pods and keeping the PVCs only; the feature also implements the inverse procedure (#1657) Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858)","title":"Release notes for CloudNativePG 1.20"},{"location":"release_notes/old/v1.20/#release-notes-for-cloudnativepg-120","text":"History of user-visible changes in the 1.20 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.20"},{"location":"release_notes/old/v1.20/#version-1206","text":"Release date: Feb 2, 2024 Warning This is expected to be the last release in the 1.20.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647)","title":"Version 1.20.6"},{"location":"release_notes/old/v1.20/#version-1205","text":"Release date: Dec 21, 2023 Security: By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300). Enhancements: Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270).","title":"Version 1.20.5"},{"location":"release_notes/old/v1.20/#version-1204","text":"Release date: Nov 3, 2023 Enhancements: Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Changes: Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152)","title":"Version 1.20.4"},{"location":"release_notes/old/v1.20/#version-1203","text":"Release date: Oct 11, 2023 Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin\u2019s status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL\u2019s fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Replace the cnpg snapshot command with cnpg backup -m volumeSnapshot for the kubectl plugin Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606)","title":"Version 1.20.3"},{"location":"release_notes/old/v1.20/#version-1202","text":"Release date: July 27, 2023 Enhancements: New logs command in the kubectl plugin, to retrieve or follow the logs of all pods in a cluster (#2375) Add support for specifying priorityClassName in pods, helping Kubernetes make scheduling decisions (#2043) Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257) Various enhancements to the documentation: Add troubleshooting instructions relating to hugepages (#1390) Extend the FAQs page (#2344) Technical enhancements: Add a check at the start of the restore process to ensure it can proceed; give improved error diagnostics if it cannot (#2419) Improve handling of non-expiring passwords in managed roles (#2334) Fixes: Ensure the logic of setting the recovery target matches that of Postgres (#2460) Prevent taking over service accounts not owned by the cluster, by setting ownerMetadata only during service account creation (#2462) Ensure correct permissions of the PGDATA directory for initdb and restore (#2384) Prevent a possible crash of the instance manager during the configuration reload (#2393) Prevent the LastFailedArchiveTime alert from triggering if a new backup has been successful after the failed ones (#1751) Prevent services from targeting non-instance pods (#2336) Security: Updated all project dependencies to the latest versions","title":"Version 1.20.2"},{"location":"release_notes/old/v1.20/#version-1201","text":"Release date: June 12, 2023 Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Declarative roles should ignore passwords if not set, easing management of previously existing roles (#2029) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3s engine which could prevent setup on K3\u2019s (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242)","title":"Version 1.20.1"},{"location":"release_notes/old/v1.20/#version-1200","text":"Release date: April 27, 2023 Important changes from previous versions CloudNativePG 1.20 introduces some changes to the default behavior of a few features for newly created Cluster resources, compared to previous versions of the operator. The goal of these changes is to improve the resilience of a Postgres cluster out of the box through convention over configuration. For clusters with one or more replicas: Backup from standby is now enabled by default, unless target is explicitly set to primary Restart of the primary is now the default method to complete the unsupervised rolling update procedure ( primaryUpdateMethod defaults to restart , unless explicitly set to switchover ) For further information, please refer to the \"Installation and upgrades\" section. Features: Declarative role management: introduce the managed.roles stanza in the Cluster spec to provide full lifecycle management of database roles, by providing an abstraction to the related DDL commands in PostgreSQL, such as CREATE ROLE and ALTER ROLE (#1524, #1793 and #1815) Declarative hibernation of a PostgreSQL cluster: introduce a new annotation called cnpg.io/hibernation to declaratively hibernate a PostgreSQL cluster by deleting all pods and keeping the PVCs only; the feature also implements the inverse procedure (#1657) Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858)","title":"Version 1.20.0"},{"location":"release_notes/old/v1.21/","text":"Release notes for CloudNativePG 1.21 History of user-visible changes in the 1.21 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.21.6 Release date: Jun 12, 2024 Warning This is expected to be the last release in the 1.21.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602) Fixes: Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530) Changes Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753) Version 1.21.5 Release date: Apr 24, 2024 Enhancements: Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101) Fixes: Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346) Changes: The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154) Version 1.21.4 Release date: Mar 14, 2024 Enhancements Allow customization of the wal_level GUC in PostgreSQL (#4020) Add the cnpg.io/skipWalArchiving annotation to disable WAL archiving when set to enabled (#4055) Enrich the cnpg plugin for kubectl with the publication and subscription command groups to imperatively set up PostgreSQL native logical replication (#4052) Allow customization of CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD for automated management of TLS certificates handled by the operator (#3686) Introduce initial support for tab-completion with the cnpg plugin for kubectl (#3875) Retrieve the correct architecture's binary from the corresponding catalog in the running operator image during in-place updates, enabling the operator to inject the correct binary into any Pod with a supported architecture (#3840) Fixes Properly synchronize PVC group labels with those on the pods, a critical aspect when all pods are deleted and the operator needs to decide which Pod to recreate first (#3930) Disable wal_sender_timeout when cloning a replica to prevent timeout errors due to slow connections (#4080) Ensure that volume snapshots are ready before initiating recovery bootstrap procedures, preventing an error condition where recovery with incomplete backups could enter an error loop (#3663) Prevent an error loop when unsetting connection limits in managed roles (#3832) Resolve a corner case in hibernation where the instance pod has been deleted, but the cluster status still has the hibernation condition set to false (#3970) Correctly detect Google Cloud capabilities for Barman Cloud (#3931) Security Use Role instead of ClusterRole for operator permissions in OLM, requiring fewer privileges when installed on a per-namespace basis (#3855, #3990) Enforce fully-qualified object names in SQL queries for the PgBouncer pooler (#4080) Changes Follow Kubernetes recommendations to switch from client-side to server-side application of manifests, requiring the --server-side option by default when installing the operator (#3729). Set the default operand image to PostgreSQL 16.2 (#3823). Version 1.21.3 Release date: Feb 2, 2024 Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Ensure configuration coherence by pruning from postgresql.auto.conf any options now incorporated into override.conf (#3773) Version 1.21.2 Release date: Dec 21, 2023 Security: By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300). Enhancements: Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Enhanced computation of the first recoverability point and last successful backup by considering volume snapshots alongside object-store backups (#2940). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Introduction of Red Hat UBI 8 container images for the operator, suitable for OLM deployments. Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270). Version 1.21.1 Release date: Nov 3, 2023 Enhancements: Introduce support for online/hot backups with volume snapshots by using the PostgreSQL API for physical online base backups. Default configuration for hot/cold backups on a given Postgres cluster can be controlled through the online option and the onlineConfiguration stanza in .spec.backup.volumeSnapshot . Unless explicitly set, backups on volume snapshots are now taken online by default (#3102) Introduce the possibility to override the above default settings on volume snapshot backup using the ScheduledBackup and Backup resources (#3208, #3226) Enhance cold backup on volume snapshots by reducing the time window in which the target instance (standby or primary) is fenced, by lifting it as soon as the volume snapshot have been cut and provisioned (#3210) During a recovery from volume snapshots, ensure that the provided volume snapshots are coherent by validating the existing labels and annotations The backup command of the cnpg plugin for kubectl improves the volume snapshot backup experience through the --online , --immediate-checkpoint , and --wait-for-archive runtime options Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Reduce the number of labels in VolumeSnapshots resources and render them into more appropriate annotations (#3151) Changes: Volume snapshot backups, introduced in 1.21.0, are now online/hot by default; in order to restore offline/cold backups set .spec.backup.volumeSnapshot to false Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152) Version 1.21.0 Release date: Oct 12, 2023 Important changes from previous versions This release contains a few changes to the default settings of CloudNativePG with the goal to improve general stability and security through predefined values. If you are upgrading from a previous version, please carefully read the \"Important Changes\" section below, as well as the upgrade documentation. Features: Volume Snapshot support for backup and recovery: leverage the standard Kubernetes API on Volume Snapshots to take advantage of capabilities like incremental and differential copy for both backup and recovery operations. This first step, covering cold backups from a standby, will continue in 1.22 with support for hot backups using the PostgreSQL API and tablespaces. OLM installation method : introduce support for Operator Lifecycle Manager via OperatorHub.io for the latest patch version of the latest minor release through the stable channel. Many thanks to EDB for donating the bundle of their \"EDB Postgres for Kubernetes\" operator and adapting it for CloudNativePG. Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Disable superuser access by default for security (#2905) Enable replication slots for HA by default (#2903) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Enable bootstrap of a replica cluster from a consistent set of volume snapshots (#2647) Enable full and Point In Time recovery from a consistent set of volume snapshots (#2390) Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin's status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Replace the cnpg snapshot command with cnpg backup -m volumeSnapshot for the kubectl plugin Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606)","title":"Release notes for CloudNativePG 1.21"},{"location":"release_notes/old/v1.21/#release-notes-for-cloudnativepg-121","text":"History of user-visible changes in the 1.21 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.21"},{"location":"release_notes/old/v1.21/#version-1216","text":"Release date: Jun 12, 2024 Warning This is expected to be the last release in the 1.21.X series. Users are encouraged to update to a newer minor version soon.","title":"Version 1.21.6"},{"location":"release_notes/old/v1.21/#enhancements","text":"Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes","text":"Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes","text":"Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753)","title":"Changes"},{"location":"release_notes/old/v1.21/#version-1215","text":"Release date: Apr 24, 2024","title":"Version 1.21.5"},{"location":"release_notes/old/v1.21/#enhancements_1","text":"Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_1","text":"Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes_1","text":"The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154)","title":"Changes:"},{"location":"release_notes/old/v1.21/#version-1214","text":"Release date: Mar 14, 2024","title":"Version 1.21.4"},{"location":"release_notes/old/v1.21/#enhancements_2","text":"Allow customization of the wal_level GUC in PostgreSQL (#4020) Add the cnpg.io/skipWalArchiving annotation to disable WAL archiving when set to enabled (#4055) Enrich the cnpg plugin for kubectl with the publication and subscription command groups to imperatively set up PostgreSQL native logical replication (#4052) Allow customization of CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD for automated management of TLS certificates handled by the operator (#3686) Introduce initial support for tab-completion with the cnpg plugin for kubectl (#3875) Retrieve the correct architecture's binary from the corresponding catalog in the running operator image during in-place updates, enabling the operator to inject the correct binary into any Pod with a supported architecture (#3840)","title":"Enhancements"},{"location":"release_notes/old/v1.21/#fixes_2","text":"Properly synchronize PVC group labels with those on the pods, a critical aspect when all pods are deleted and the operator needs to decide which Pod to recreate first (#3930) Disable wal_sender_timeout when cloning a replica to prevent timeout errors due to slow connections (#4080) Ensure that volume snapshots are ready before initiating recovery bootstrap procedures, preventing an error condition where recovery with incomplete backups could enter an error loop (#3663) Prevent an error loop when unsetting connection limits in managed roles (#3832) Resolve a corner case in hibernation where the instance pod has been deleted, but the cluster status still has the hibernation condition set to false (#3970) Correctly detect Google Cloud capabilities for Barman Cloud (#3931)","title":"Fixes"},{"location":"release_notes/old/v1.21/#security","text":"Use Role instead of ClusterRole for operator permissions in OLM, requiring fewer privileges when installed on a per-namespace basis (#3855, #3990) Enforce fully-qualified object names in SQL queries for the PgBouncer pooler (#4080)","title":"Security"},{"location":"release_notes/old/v1.21/#changes_2","text":"Follow Kubernetes recommendations to switch from client-side to server-side application of manifests, requiring the --server-side option by default when installing the operator (#3729). Set the default operand image to PostgreSQL 16.2 (#3823).","title":"Changes"},{"location":"release_notes/old/v1.21/#version-1213","text":"Release date: Feb 2, 2024","title":"Version 1.21.3"},{"location":"release_notes/old/v1.21/#enhancements_3","text":"Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_3","text":"Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Ensure configuration coherence by pruning from postgresql.auto.conf any options now incorporated into override.conf (#3773)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#version-1212","text":"Release date: Dec 21, 2023","title":"Version 1.21.2"},{"location":"release_notes/old/v1.21/#security_1","text":"By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300).","title":"Security:"},{"location":"release_notes/old/v1.21/#enhancements_4","text":"Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Enhanced computation of the first recoverability point and last successful backup by considering volume snapshots alongside object-store backups (#2940). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Introduction of Red Hat UBI 8 container images for the operator, suitable for OLM deployments. Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396).","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_4","text":"Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350).","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes_3","text":"Default operand image set to PostgreSQL 16.1 (#3270).","title":"Changes:"},{"location":"release_notes/old/v1.21/#version-1211","text":"Release date: Nov 3, 2023","title":"Version 1.21.1"},{"location":"release_notes/old/v1.21/#enhancements_5","text":"Introduce support for online/hot backups with volume snapshots by using the PostgreSQL API for physical online base backups. Default configuration for hot/cold backups on a given Postgres cluster can be controlled through the online option and the onlineConfiguration stanza in .spec.backup.volumeSnapshot . Unless explicitly set, backups on volume snapshots are now taken online by default (#3102) Introduce the possibility to override the above default settings on volume snapshot backup using the ScheduledBackup and Backup resources (#3208, #3226) Enhance cold backup on volume snapshots by reducing the time window in which the target instance (standby or primary) is fenced, by lifting it as soon as the volume snapshot have been cut and provisioned (#3210) During a recovery from volume snapshots, ensure that the provided volume snapshots are coherent by validating the existing labels and annotations The backup command of the cnpg plugin for kubectl improves the volume snapshot backup experience through the --online , --immediate-checkpoint , and --wait-for-archive runtime options Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_5","text":"Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Reduce the number of labels in VolumeSnapshots resources and render them into more appropriate annotations (#3151)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes_4","text":"Volume snapshot backups, introduced in 1.21.0, are now online/hot by default; in order to restore offline/cold backups set .spec.backup.volumeSnapshot to false Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812)","title":"Changes:"},{"location":"release_notes/old/v1.21/#technical-enhancements","text":"Use extended query protocol for PostgreSQL in the instance manager (#3152)","title":"Technical enhancements:"},{"location":"release_notes/old/v1.21/#version-1210","text":"Release date: Oct 12, 2023 Important changes from previous versions This release contains a few changes to the default settings of CloudNativePG with the goal to improve general stability and security through predefined values. If you are upgrading from a previous version, please carefully read the \"Important Changes\" section below, as well as the upgrade documentation.","title":"Version 1.21.0"},{"location":"release_notes/old/v1.21/#features","text":"Volume Snapshot support for backup and recovery: leverage the standard Kubernetes API on Volume Snapshots to take advantage of capabilities like incremental and differential copy for both backup and recovery operations. This first step, covering cold backups from a standby, will continue in 1.22 with support for hot backups using the PostgreSQL API and tablespaces. OLM installation method : introduce support for Operator Lifecycle Manager via OperatorHub.io for the latest patch version of the latest minor release through the stable channel. Many thanks to EDB for donating the bundle of their \"EDB Postgres for Kubernetes\" operator and adapting it for CloudNativePG.","title":"Features:"},{"location":"release_notes/old/v1.21/#important-changes","text":"Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Disable superuser access by default for security (#2905) Enable replication slots for HA by default (#2903) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744)","title":"Important Changes:"},{"location":"release_notes/old/v1.21/#security_2","text":"Add a default seccompProfile to the operator deployment (#2926)","title":"Security:"},{"location":"release_notes/old/v1.21/#enhancements_6","text":"Enable bootstrap of a replica cluster from a consistent set of volume snapshots (#2647) Enable full and Point In Time recovery from a consistent set of volume snapshots (#2390) Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin's status command (#2953)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_6","text":"Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes_5","text":"Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Replace the cnpg snapshot command with cnpg backup -m volumeSnapshot for the kubectl plugin Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915)","title":"Changes:"},{"location":"release_notes/old/v1.21/#technical-enhancements_1","text":"Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606)","title":"Technical enhancements:"},{"location":"release_notes/old/v1.22/","text":"Release notes for CloudNativePG 1.22 History of user-visible changes in the 1.22 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.22.5 Release date: Jul 29, 2024 Warning This is expected to be the last release in the 1.22.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044). Fixes: Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915). Version 1.22.4 Release date: Jun 12, 2024 Warning Version 1.22 is approaching its End-of-Life (EOL) on Jul 24, 2024. If you haven't already, please begin planning for an upgrade promptly to ensure continued support and security. Enhancements: Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602) Fixes: Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530) Changes Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753) Version 1.22.3 Release date: Apr 24, 2024 Enhancements: Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101) Fixes: Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346) Changes: The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154) Version 1.22.2 Release date: Mar 14, 2024 Enhancements Allow customization of the wal_level GUC in PostgreSQL (#4020) Add the cnpg.io/skipWalArchiving annotation to disable WAL archiving when set to enabled (#4055) Enrich the cnpg plugin for kubectl with the publication and subscription command groups to imperatively set up PostgreSQL native logical replication (#4052) Allow customization of CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD for automated management of TLS certificates handled by the operator (#3686) Retrieve the correct architecture's binary from the corresponding catalog in the running operator image during in-place updates, enabling the operator to inject the correct binary into any Pod with a supported architecture (#3840) Introduce initial support for tab-completion with the cnpg plugin for kubectl (#3875) Fixes Properly synchronize PVC group labels with those on the pods, a critical aspect when all pods are deleted and the operator needs to decide which Pod to recreate first (#3930) Disable wal_sender_timeout when cloning a replica to prevent timeout errors due to slow connections (#4080) Ensure that volume snapshots are ready before initiating recovery bootstrap procedures, preventing an error condition where recovery with incomplete backups could enter an error loop (#3663) Prevent an error loop when unsetting connection limits in managed roles (#3832) Resolve a corner case in hibernation where the instance pod has been deleted, but the cluster status still has the hibernation condition set to false (#3970) Correctly detect Google Cloud capabilities for Barman Cloud (#3931) Security Use Role instead of ClusterRole for operator permissions in OLM, requiring fewer privileges when installed on a per-namespace basis (#3855, #3990) Enforce fully-qualified object names in SQL queries for the PgBouncer pooler (#4080) Changes Follow Kubernetes recommendations to switch from client-side to server-side application of manifests, requiring the --server-side option by default when installing the operator (#3729). Set the default operand image to PostgreSQL 16.2 (#3823). Version 1.22.1 Release date: Feb 2, 2024 Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Proper recovery of tablespaces from volume snapshots (#3682) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Ensure configuration coherence by pruning from postgresql.auto.conf any options now incorporated into override.conf (#3773) Version 1.22.0 Release date: Dec 21, 2023 Important changes from previous versions This release introduces a significant change, disabling the default usage of the ALTER SYSTEM command in PostgreSQL. For users upgrading from a previous version who wish to retain the old behavior: please refer to the upgrade documentation for detailed instructions. Features: Declarative Tablespaces : Introducing the tablespaces stanza in the Cluster spec, enabling comprehensive lifecycle management of PostgreSQL tablespaces for enhanced vertical scalability (#3410). Temporary Tablespaces : Adding the .spec.tablespaces[*].temporary option to facilitate the utilization of a tablespace for temporary database operations, by incorporating the name into the temp_tablespaces PostgreSQL parameter (#3464). Security: By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300). Enhancements: Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Enhanced computation of the first recoverability point and last successful backup by considering volume snapshots alongside object-store backups (#2940). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Introduction of Red Hat UBI 8 container images for the operator, suitable for OLM deployments. Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270). The ALTER SYSTEM command is now disabled by default (#3545).","title":"Release notes for CloudNativePG 1.22"},{"location":"release_notes/old/v1.22/#release-notes-for-cloudnativepg-122","text":"History of user-visible changes in the 1.22 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.22"},{"location":"release_notes/old/v1.22/#version-1225","text":"Release date: Jul 29, 2024 Warning This is expected to be the last release in the 1.22.X series. Users are encouraged to update to a newer minor version soon.","title":"Version 1.22.5"},{"location":"release_notes/old/v1.22/#enhancements","text":"Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044).","title":"Enhancements:"},{"location":"release_notes/old/v1.22/#fixes","text":"Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915).","title":"Fixes:"},{"location":"release_notes/old/v1.22/#version-1224","text":"Release date: Jun 12, 2024 Warning Version 1.22 is approaching its End-of-Life (EOL) on Jul 24, 2024. If you haven't already, please begin planning for an upgrade promptly to ensure continued support and security.","title":"Version 1.22.4"},{"location":"release_notes/old/v1.22/#enhancements_1","text":"Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602)","title":"Enhancements:"},{"location":"release_notes/old/v1.22/#fixes_1","text":"Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530)","title":"Fixes:"},{"location":"release_notes/old/v1.22/#changes","text":"Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753)","title":"Changes"},{"location":"release_notes/old/v1.22/#version-1223","text":"Release date: Apr 24, 2024","title":"Version 1.22.3"},{"location":"release_notes/old/v1.22/#enhancements_2","text":"Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101)","title":"Enhancements:"},{"location":"release_notes/old/v1.22/#fixes_2","text":"Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346)","title":"Fixes:"},{"location":"release_notes/old/v1.22/#changes_1","text":"The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154)","title":"Changes:"},{"location":"release_notes/old/v1.22/#version-1222","text":"Release date: Mar 14, 2024","title":"Version 1.22.2"},{"location":"release_notes/old/v1.22/#enhancements_3","text":"Allow customization of the wal_level GUC in PostgreSQL (#4020) Add the cnpg.io/skipWalArchiving annotation to disable WAL archiving when set to enabled (#4055) Enrich the cnpg plugin for kubectl with the publication and subscription command groups to imperatively set up PostgreSQL native logical replication (#4052) Allow customization of CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD for automated management of TLS certificates handled by the operator (#3686) Retrieve the correct architecture's binary from the corresponding catalog in the running operator image during in-place updates, enabling the operator to inject the correct binary into any Pod with a supported architecture (#3840) Introduce initial support for tab-completion with the cnpg plugin for kubectl (#3875)","title":"Enhancements"},{"location":"release_notes/old/v1.22/#fixes_3","text":"Properly synchronize PVC group labels with those on the pods, a critical aspect when all pods are deleted and the operator needs to decide which Pod to recreate first (#3930) Disable wal_sender_timeout when cloning a replica to prevent timeout errors due to slow connections (#4080) Ensure that volume snapshots are ready before initiating recovery bootstrap procedures, preventing an error condition where recovery with incomplete backups could enter an error loop (#3663) Prevent an error loop when unsetting connection limits in managed roles (#3832) Resolve a corner case in hibernation where the instance pod has been deleted, but the cluster status still has the hibernation condition set to false (#3970) Correctly detect Google Cloud capabilities for Barman Cloud (#3931)","title":"Fixes"},{"location":"release_notes/old/v1.22/#security","text":"Use Role instead of ClusterRole for operator permissions in OLM, requiring fewer privileges when installed on a per-namespace basis (#3855, #3990) Enforce fully-qualified object names in SQL queries for the PgBouncer pooler (#4080)","title":"Security"},{"location":"release_notes/old/v1.22/#changes_2","text":"Follow Kubernetes recommendations to switch from client-side to server-side application of manifests, requiring the --server-side option by default when installing the operator (#3729). Set the default operand image to PostgreSQL 16.2 (#3823).","title":"Changes"},{"location":"release_notes/old/v1.22/#version-1221","text":"Release date: Feb 2, 2024 Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Proper recovery of tablespaces from volume snapshots (#3682) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Ensure configuration coherence by pruning from postgresql.auto.conf any options now incorporated into override.conf (#3773)","title":"Version 1.22.1"},{"location":"release_notes/old/v1.22/#version-1220","text":"Release date: Dec 21, 2023 Important changes from previous versions This release introduces a significant change, disabling the default usage of the ALTER SYSTEM command in PostgreSQL. For users upgrading from a previous version who wish to retain the old behavior: please refer to the upgrade documentation for detailed instructions.","title":"Version 1.22.0"},{"location":"release_notes/old/v1.22/#features","text":"Declarative Tablespaces : Introducing the tablespaces stanza in the Cluster spec, enabling comprehensive lifecycle management of PostgreSQL tablespaces for enhanced vertical scalability (#3410). Temporary Tablespaces : Adding the .spec.tablespaces[*].temporary option to facilitate the utilization of a tablespace for temporary database operations, by incorporating the name into the temp_tablespaces PostgreSQL parameter (#3464).","title":"Features:"},{"location":"release_notes/old/v1.22/#security_1","text":"By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300).","title":"Security:"},{"location":"release_notes/old/v1.22/#enhancements_4","text":"Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Enhanced computation of the first recoverability point and last successful backup by considering volume snapshots alongside object-store backups (#2940). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Introduction of Red Hat UBI 8 container images for the operator, suitable for OLM deployments. Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270). The ALTER SYSTEM command is now disabled by default (#3545).","title":"Enhancements:"},{"location":"release_notes/old/v1.23/","text":"Release notes for CloudNativePG 1.23 History of user-visible changes in the 1.23 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.23.6 Release Date: December 23, 2024 Warning This is the final release in the 1.23.x series. Users are strongly encouraged to upgrade to a newer minor version, as 1.23 is no longer supported. Enhancements Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Honor the User-Agent header in HTTP requests with the API server. (#6153) Bug Fixes Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998) Version 1.23.5 Release date: Oct 16, 2024 Enhancements: Remove the use of pg_database_size from the status probe, as it caused high resource utilization by scanning the entire PGDATA directory to compute database sizes. The kubectl status plugin will now rely on du to provide detailed size information retrieval (#5689). Add the ability to configure the full_page_writes parameter in PostgreSQL. This setting defaults to on , in line with PostgreSQL's recommendations (#5516). Plugin: Add the logs pretty command in the cnpg plugin to read a log stream from standard input and output a human-readable format, with options to filter log entries (#5770) Enhance the status command by allowing multiple -v options to increase verbosity for more detailed output (#5765). Add support for specifying a custom Docker image using the --image flag in the pgadmin4 plugin command, giving users control over the Docker image used for pgAdmin4 deployments (#5515). Fixes: Resolve an issue with concurrent status updates when demoting a primary to a designated primary, ensuring smoother transitions during cluster role changes (#5755). Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down to two instances, enabling easier maintenance on the node hosting the replica (#5487). Prioritize full rollout over inplace restarts (#5407). Fix an issue that could lead to double failover in cases of lost connectivity (#5788). Correctly set the TMPDIR and PSQL_HISTORY environment variables for pods and jobs, improving temporary file and history management (#5503). Plugin: Resolve a race condition in the logs cluster command (#5775). Display the potential sync status in the status plugin (#5533). Fix the issue where pods deployed by the pgadmin4 command didn\u2019t have a writable home directory (#5800). Supported versions PostgreSQL 17 (PostgreSQL 17.0 is the default image) Version 1.23.4 Release date: Aug 22, 2024 Enhancements: cnpg plugin updates: Enhance the install generate command by adding a --control-plane option, allowing deployment of the operator on control-plane nodes by setting node affinity and tolerations (#5271). Enhance the destroy command to delete also any job related to the target instance (#5298). Fixes: Synchronous replication self-healing checks now exclude terminated pods, focusing only on active and functional pods (#5210). The instance manager will now terminate all existing operator-related replication connections following a role change in a replica cluster (#5209). Allow setting smartShutdownTimeout to zero, enabling immediate fast shutdown and bypassing the smart shutdown process when required (#5347). Version 1.23.3 Release date: Jul 29, 2024 Enhancements: Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044). Fixes: Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Ensure that the Pooler service template can override the default service (#4846). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Fix cluster role permissions for ClusterImageCatalogs (#5034). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915). Version 1.23.2 Release date: Jun 12, 2024 Enhancements: Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602) Fixes: Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530) Changes Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753) Version 1.23.1 Release date: Apr 29, 2024 Fixes: Corrects the reconciliation of PodMonitor resources, which was failing due to a regression (#4286) Version 1.23.0 Release date: Apr 24, 2024 Important changes to Community Supported Versions We've updated our support policy to streamline our focus on one supported minor release at a time, rather than two. Additionally, we've extended the supplementary support period for the previous minor release to 3 months. Features: PostgreSQL Image Catalogs: Introduced ClusterImageCatalog and ImageCatalog CRDs to manage operand container images based on PostgreSQL major version. This is facilitated through the Cluster 's .spec.imageCatalogRef stanza . This feature provides an alternative to the imageName option and will eventually replace it as the default method to define operand container images. User-Defined Replication Slots: Enhanced the synchronization of physical replication slots to cover user-defined replication slots on the primary, via the newly introduced stanza replicationSlots.synchronizeReplicas . Configuration of Pod Disruption Budgets (PDB) : Introduced the .spec.enablePDB field to disable PDBs on the primary instance, allowing proper eviction of the pod during maintenance operations. This is particularly useful for single-instance deployments. This feature is intended to replace the node maintenance window feature. Enhancements: Users now have the capability to transition an existing cluster into replica mode, simplifying cross-datacenter switchover operations (#4261) Users can now customize the connection pooler service, including its type, labels, and annotations (#3384) Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Command output of the plugin\u2019s status command to show the status of PDBs (#4319) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101) Fixes: Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346) Changes: Operator images are now based on gcr.io/distroless/static-debian12:nonroot (#4201) The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154)","title":"Release notes for CloudNativePG 1.23"},{"location":"release_notes/old/v1.23/#release-notes-for-cloudnativepg-123","text":"History of user-visible changes in the 1.23 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.23"},{"location":"release_notes/old/v1.23/#version-1236","text":"Release Date: December 23, 2024 Warning This is the final release in the 1.23.x series. Users are strongly encouraged to upgrade to a newer minor version, as 1.23 is no longer supported.","title":"Version 1.23.6"},{"location":"release_notes/old/v1.23/#enhancements","text":"Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Honor the User-Agent header in HTTP requests with the API server. (#6153)","title":"Enhancements"},{"location":"release_notes/old/v1.23/#bug-fixes","text":"Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998)","title":"Bug Fixes"},{"location":"release_notes/old/v1.23/#version-1235","text":"Release date: Oct 16, 2024","title":"Version 1.23.5"},{"location":"release_notes/old/v1.23/#enhancements_1","text":"Remove the use of pg_database_size from the status probe, as it caused high resource utilization by scanning the entire PGDATA directory to compute database sizes. The kubectl status plugin will now rely on du to provide detailed size information retrieval (#5689). Add the ability to configure the full_page_writes parameter in PostgreSQL. This setting defaults to on , in line with PostgreSQL's recommendations (#5516). Plugin: Add the logs pretty command in the cnpg plugin to read a log stream from standard input and output a human-readable format, with options to filter log entries (#5770) Enhance the status command by allowing multiple -v options to increase verbosity for more detailed output (#5765). Add support for specifying a custom Docker image using the --image flag in the pgadmin4 plugin command, giving users control over the Docker image used for pgAdmin4 deployments (#5515).","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes","text":"Resolve an issue with concurrent status updates when demoting a primary to a designated primary, ensuring smoother transitions during cluster role changes (#5755). Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down to two instances, enabling easier maintenance on the node hosting the replica (#5487). Prioritize full rollout over inplace restarts (#5407). Fix an issue that could lead to double failover in cases of lost connectivity (#5788). Correctly set the TMPDIR and PSQL_HISTORY environment variables for pods and jobs, improving temporary file and history management (#5503). Plugin: Resolve a race condition in the logs cluster command (#5775). Display the potential sync status in the status plugin (#5533). Fix the issue where pods deployed by the pgadmin4 command didn\u2019t have a writable home directory (#5800).","title":"Fixes:"},{"location":"release_notes/old/v1.23/#supported-versions","text":"PostgreSQL 17 (PostgreSQL 17.0 is the default image)","title":"Supported versions"},{"location":"release_notes/old/v1.23/#version-1234","text":"Release date: Aug 22, 2024","title":"Version 1.23.4"},{"location":"release_notes/old/v1.23/#enhancements_2","text":"cnpg plugin updates: Enhance the install generate command by adding a --control-plane option, allowing deployment of the operator on control-plane nodes by setting node affinity and tolerations (#5271). Enhance the destroy command to delete also any job related to the target instance (#5298).","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes_1","text":"Synchronous replication self-healing checks now exclude terminated pods, focusing only on active and functional pods (#5210). The instance manager will now terminate all existing operator-related replication connections following a role change in a replica cluster (#5209). Allow setting smartShutdownTimeout to zero, enabling immediate fast shutdown and bypassing the smart shutdown process when required (#5347).","title":"Fixes:"},{"location":"release_notes/old/v1.23/#version-1233","text":"Release date: Jul 29, 2024","title":"Version 1.23.3"},{"location":"release_notes/old/v1.23/#enhancements_3","text":"Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044).","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes_2","text":"Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Ensure that the Pooler service template can override the default service (#4846). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Fix cluster role permissions for ClusterImageCatalogs (#5034). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915).","title":"Fixes:"},{"location":"release_notes/old/v1.23/#version-1232","text":"Release date: Jun 12, 2024","title":"Version 1.23.2"},{"location":"release_notes/old/v1.23/#enhancements_4","text":"Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602)","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes_3","text":"Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530)","title":"Fixes:"},{"location":"release_notes/old/v1.23/#changes","text":"Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753)","title":"Changes"},{"location":"release_notes/old/v1.23/#version-1231","text":"Release date: Apr 29, 2024","title":"Version 1.23.1"},{"location":"release_notes/old/v1.23/#fixes_4","text":"Corrects the reconciliation of PodMonitor resources, which was failing due to a regression (#4286)","title":"Fixes:"},{"location":"release_notes/old/v1.23/#version-1230","text":"Release date: Apr 24, 2024 Important changes to Community Supported Versions We've updated our support policy to streamline our focus on one supported minor release at a time, rather than two. Additionally, we've extended the supplementary support period for the previous minor release to 3 months.","title":"Version 1.23.0"},{"location":"release_notes/old/v1.23/#features","text":"PostgreSQL Image Catalogs: Introduced ClusterImageCatalog and ImageCatalog CRDs to manage operand container images based on PostgreSQL major version. This is facilitated through the Cluster 's .spec.imageCatalogRef stanza . This feature provides an alternative to the imageName option and will eventually replace it as the default method to define operand container images. User-Defined Replication Slots: Enhanced the synchronization of physical replication slots to cover user-defined replication slots on the primary, via the newly introduced stanza replicationSlots.synchronizeReplicas . Configuration of Pod Disruption Budgets (PDB) : Introduced the .spec.enablePDB field to disable PDBs on the primary instance, allowing proper eviction of the pod during maintenance operations. This is particularly useful for single-instance deployments. This feature is intended to replace the node maintenance window feature.","title":"Features:"},{"location":"release_notes/old/v1.23/#enhancements_5","text":"Users now have the capability to transition an existing cluster into replica mode, simplifying cross-datacenter switchover operations (#4261) Users can now customize the connection pooler service, including its type, labels, and annotations (#3384) Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Command output of the plugin\u2019s status command to show the status of PDBs (#4319) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101)","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes_5","text":"Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346)","title":"Fixes:"},{"location":"release_notes/old/v1.23/#changes_1","text":"Operator images are now based on gcr.io/distroless/static-debian12:nonroot (#4201) The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154)","title":"Changes:"},{"location":"release_notes/old/v1.24/","text":"Release notes for CloudNativePG 1.24 History of user-visible changes in the 1.24 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.24.4 Release date: May 23, 2025 Warning This is the final release in the 1.24.x series. Users are strongly encouraged to upgrade to a newer minor version, as 1.24 is no longer supported. Important Changes CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203) Enhancements Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151) Security Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250) Fixes Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). cnpg plugin: Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122) Changes Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556) Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399). Version 1.24.3 Release Date: February 28, 2025 Enhancements Introduced a startup probe for the operator to enhance reliability and prevent premature liveness probe failures during initialization. (#7008) Added support for using the -r service with the Pooler. (#6868) Introduced an optional --ttl flag for the pgbench plugin, enabling automatic deletion of completed jobs after a user-defined duration. (#6701) Marked known error messages from the Azure CSI Driver for volume snapshots as retryable, improving resilience. (#6906) Updated the default PostgreSQL version to 17.4 for new cluster definitions. (#6960) Security The operator image build process has been enhanced to strengthen security and transparency. Images are now signed with cosign , and OCI attestations are generated, incorporating the Software Bill of Materials (SBOM) and provenance data. Additionally, OCI annotations have been added to improve traceability and ensure the integrity of the images. Bug Fixes Fixed inconsistent behavior in default probe knob values when .spec.probes is defined, ensuring users can override all settings, including failureThreshold . If unspecified in the startup probe, failureThreshold is now correctly derived from .spec.startupDelay / periodSeconds (default: 10 , now overridable). The same logic applies to liveness probes via .spec.livenessProbeTimeout . (#6656) Managed service ports now take precedence over default operator-defined ports. (#6474) Fixed an issue where WAL metrics were unavailable after an instance restart until a configuration change was applied. (#6816) Fixed an issue in monolithic database import where role import was skipped if no roles were specified. (#6646) Added support for new metrics introduced in PgBouncer 1.24. (#6630) Improved handling of replication-sensitive parameter reductions by ensuring timely reconciliation after primary server restarts. (#6440) Introduced a new isWALArchiver flag in the CNPG-I plugin configuration, allowing users to designate a plugin as a WAL archiver. This enables seamless migration from in-tree Barman Cloud support to the plugin while maintaining WAL archive consistency. (#6593) Ensured override.conf is consistently included in postgresql.conf during replica cluster bootstrapping, preventing replication failures due to missing configuration settings. (#6808) Ensured override.conf is correctly initialized before invoking pg_rewind to prevent failures during primary role changes. (#6670) Enhanced webhook responses to return both warnings and errors when applicable, improving diagnostic accuracy. (#6579) Ensured the operator version is correctly reconciled. (#6496) Improved PostgreSQL version detection by using a more precise check of the data directory. (#6659) Volume Snapshot Backups: Fixed an issue where unused backup connections were not properly cleaned up. (#6882) Ensured the instance manager closes stale PostgreSQL connections left by failed volume snapshot backups. (#6879) Prevented the operator from starting a new volume snapshot backup while another is already in progress. (#6890) cnpg plugin: Restored functionality of the promote plugin command. (#6476) Enhanced kubectl cnpg report --logs <cluster> to collect logs from all containers, including sidecars. (#6636) Ensured pgbench jobs can run when a Cluster uses an ImageCatalog . (#6868) Technical Enhancements Added support for Kubernetes client-gen , enabling automated generation of Go clients for all CloudNativePG CRDs. (#6695) Version 1.24.2 Release Date: December 23, 2024 Enhancements Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Honor the User-Agent header in HTTP requests with the API server. (#6153) Bug Fixes Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998) Version 1.24.1 Release date: Oct 16, 2024 Enhancements: Remove the use of pg_database_size from the status probe, as it caused high resource utilization by scanning the entire PGDATA directory to compute database sizes. The kubectl status plugin will now rely on du to provide detailed size information retrieval (#5689). Add the ability to configure the full_page_writes parameter in PostgreSQL. This setting defaults to on , in line with PostgreSQL's recommendations (#5516). Plugin: Add the logs pretty command in the cnpg plugin to read a log stream from standard input and output a human-readable format, with options to filter log entries (#5770) Enhance the status command by allowing multiple -v options to increase verbosity for more detailed output (#5765). Add support for specifying a custom Docker image using the --image flag in the pgadmin4 plugin command, giving users control over the Docker image used for pgAdmin4 deployments (#5515). Fixes: Resolve an issue with concurrent status updates when demoting a primary to a designated primary, ensuring smoother transitions during cluster role changes (#5755). Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down to two instances, enabling easier maintenance on the node hosting the replica (#5487). Prioritize full rollout over inplace restarts (#5407). When using .spec.postgresql.synchronous , ensure that the synchronous_standby_names parameter is correctly set, even when no replicas are reachable (#5831). Fix an issue that could lead to double failover in cases of lost connectivity (#5788). Correctly set the TMPDIR and PSQL_HISTORY environment variables for pods and jobs, improving temporary file and history management (#5503). Plugin: Resolve a race condition in the logs cluster command (#5775). Display the potential sync status in the status plugin (#5533). Fix the issue where pods deployed by the pgadmin4 command didn\u2019t have a writable home directory (#5800). Supported versions PostgreSQL 17 (PostgreSQL 17.0 is the default image) Version 1.24.0 Release date: Aug 22, 2024 Important changes: Deprecate the role label in the selectors of Service and PodDisruptionBudget resources in favor of cnpg.io/instanceRole (#4897). Fix the default PodAntiAffinity configuration for PostgreSQL Pods, allowing a PostgreSQL and a Pooler Instance to coexist on the same node when the anti-affinity configuration is set to required (#5156). Warning The PodAntiAffinity change will trigger a rollout of all the instances when the operator is upgraded, even when online upgrades are enabled. Features: Distributed PostgreSQL Topologies : Enhance the replica cluster feature to create distributed database topologies for PostgreSQL that span multiple Kubernetes clusters, enabling hybrid and multi-cloud deployments. This feature supports: Declarative Primary Control : Easily specify which PostgreSQL cluster acts as the primary in a distributed setup (#4388). Seamless Switchover : Effortlessly demote the current primary and promote a selected replica cluster, typically in a different region, without needing to rebuild the former primary. This ensures high availability and resilience in diverse environments (#4411). Managed Services : Introduce managed services via the managed.services stanza (#4769 and #4952), allowing you to: Disable the read-only and read services via configuration. Leverage the service template capability to create custom service resources, including load balancers, to access PostgreSQL outside Kubernetes (particularly useful for DBaaS purposes). Enhanced API for Synchronous Replication : Introducing an improved API for explicit configuration of synchronous replication, supporting both quorum-based and priority list strategies. This update allows full customization of the synchronous_standby_names option, providing greater control and flexibility (#5148). WAL Disk Space Exhaustion : Safely stop the cluster when PostgreSQL runs out of disk space to store WAL files, making recovery easier by increasing the size of the related volume (#4404). Enhancements: Add support for delayed replicas by introducing the .spec.replica.minApplyDelay option, leveraging PostgreSQL's recovery_min_apply_delay capability (#5181). Introduce postInitSQLRefs and postInitTemplateSQLRefs to allow users to define postInit and postInitTemplate instructions as one or more config maps or secrets (#5074). Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Allow overriding the query metric name and the names of the columns using a name key/value pair, which can replace the name automatically inherited from the parent key (#4779). Enhanced control over exported metrics by making them subject to the value returned by a custom query, which is run within the same transaction and defined in the predicate_query field (#4503). Allow additional arguments to be passed to barman-cloud-wal-archive and barman-cloud-wal-restore (#5099). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). The readiness probe now fails for streaming replicas that were never connected to the primary instance, allowing incoherent replicas to be discovered promptly (#5206). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044). cnpg plugin updates: Enhance the install generate command by adding a --control-plane option, allowing deployment of the operator on control-plane nodes by setting node affinity and tolerations (#5271). Enhance the destroy command to delete also any job related to the target instance (#5298). Enhanced the status command to display demotionToken and promotionToken when available, providing more detailed operational insights with distributed topologies (#5149). Added support for customizing the remote database name in the publication and subscription subcommands. This enhancement offers greater flexibility for synchronizing data from an external cluster with multiple databases (#5113). Security: Add TLS communication between the operator and instance manager (#4442). Add optional TLS communication for the instance metrics exporter (#4927). Fixes: Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Ensure that the Pooler service template can override the default service (#4846). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Fix cluster role permissions for ClusterImageCatalogs (#5034). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). Synchronous replication self-healing checks now exclude terminated pods, focusing only on active and functional pods (#5210). The instance manager will now terminate all existing operator-related replication connections following a role change in a replica cluster (#5209). Allow setting smartShutdownTimeout to zero, enabling immediate fast shutdown and bypassing the smart shutdown process when required (#5347). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915). Supported versions Kubernetes 1.31, 1.30, 1.29, and 1.28 PostgreSQL 16, 15, 14, 13, and 12 PostgreSQL 16.4 is the default image PostgreSQL 12 support ends on November 12, 2024","title":"Release notes for CloudNativePG 1.24"},{"location":"release_notes/old/v1.24/#release-notes-for-cloudnativepg-124","text":"History of user-visible changes in the 1.24 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.24"},{"location":"release_notes/old/v1.24/#version-1244","text":"Release date: May 23, 2025 Warning This is the final release in the 1.24.x series. Users are strongly encouraged to upgrade to a newer minor version, as 1.24 is no longer supported.","title":"Version 1.24.4"},{"location":"release_notes/old/v1.24/#important-changes","text":"CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203)","title":"Important Changes"},{"location":"release_notes/old/v1.24/#enhancements","text":"Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151)","title":"Enhancements"},{"location":"release_notes/old/v1.24/#security","text":"Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250)","title":"Security"},{"location":"release_notes/old/v1.24/#fixes","text":"Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). cnpg plugin: Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122)","title":"Fixes"},{"location":"release_notes/old/v1.24/#changes","text":"Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556) Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399).","title":"Changes"},{"location":"release_notes/old/v1.24/#version-1243","text":"Release Date: February 28, 2025","title":"Version 1.24.3"},{"location":"release_notes/old/v1.24/#enhancements_1","text":"Introduced a startup probe for the operator to enhance reliability and prevent premature liveness probe failures during initialization. (#7008) Added support for using the -r service with the Pooler. (#6868) Introduced an optional --ttl flag for the pgbench plugin, enabling automatic deletion of completed jobs after a user-defined duration. (#6701) Marked known error messages from the Azure CSI Driver for volume snapshots as retryable, improving resilience. (#6906) Updated the default PostgreSQL version to 17.4 for new cluster definitions. (#6960)","title":"Enhancements"},{"location":"release_notes/old/v1.24/#security_1","text":"The operator image build process has been enhanced to strengthen security and transparency. Images are now signed with cosign , and OCI attestations are generated, incorporating the Software Bill of Materials (SBOM) and provenance data. Additionally, OCI annotations have been added to improve traceability and ensure the integrity of the images.","title":"Security"},{"location":"release_notes/old/v1.24/#bug-fixes","text":"Fixed inconsistent behavior in default probe knob values when .spec.probes is defined, ensuring users can override all settings, including failureThreshold . If unspecified in the startup probe, failureThreshold is now correctly derived from .spec.startupDelay / periodSeconds (default: 10 , now overridable). The same logic applies to liveness probes via .spec.livenessProbeTimeout . (#6656) Managed service ports now take precedence over default operator-defined ports. (#6474) Fixed an issue where WAL metrics were unavailable after an instance restart until a configuration change was applied. (#6816) Fixed an issue in monolithic database import where role import was skipped if no roles were specified. (#6646) Added support for new metrics introduced in PgBouncer 1.24. (#6630) Improved handling of replication-sensitive parameter reductions by ensuring timely reconciliation after primary server restarts. (#6440) Introduced a new isWALArchiver flag in the CNPG-I plugin configuration, allowing users to designate a plugin as a WAL archiver. This enables seamless migration from in-tree Barman Cloud support to the plugin while maintaining WAL archive consistency. (#6593) Ensured override.conf is consistently included in postgresql.conf during replica cluster bootstrapping, preventing replication failures due to missing configuration settings. (#6808) Ensured override.conf is correctly initialized before invoking pg_rewind to prevent failures during primary role changes. (#6670) Enhanced webhook responses to return both warnings and errors when applicable, improving diagnostic accuracy. (#6579) Ensured the operator version is correctly reconciled. (#6496) Improved PostgreSQL version detection by using a more precise check of the data directory. (#6659) Volume Snapshot Backups: Fixed an issue where unused backup connections were not properly cleaned up. (#6882) Ensured the instance manager closes stale PostgreSQL connections left by failed volume snapshot backups. (#6879) Prevented the operator from starting a new volume snapshot backup while another is already in progress. (#6890) cnpg plugin: Restored functionality of the promote plugin command. (#6476) Enhanced kubectl cnpg report --logs <cluster> to collect logs from all containers, including sidecars. (#6636) Ensured pgbench jobs can run when a Cluster uses an ImageCatalog . (#6868)","title":"Bug Fixes"},{"location":"release_notes/old/v1.24/#technical-enhancements","text":"Added support for Kubernetes client-gen , enabling automated generation of Go clients for all CloudNativePG CRDs. (#6695)","title":"Technical Enhancements"},{"location":"release_notes/old/v1.24/#version-1242","text":"Release Date: December 23, 2024","title":"Version 1.24.2"},{"location":"release_notes/old/v1.24/#enhancements_2","text":"Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Honor the User-Agent header in HTTP requests with the API server. (#6153)","title":"Enhancements"},{"location":"release_notes/old/v1.24/#bug-fixes_1","text":"Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998)","title":"Bug Fixes"},{"location":"release_notes/old/v1.24/#version-1241","text":"Release date: Oct 16, 2024","title":"Version 1.24.1"},{"location":"release_notes/old/v1.24/#enhancements_3","text":"Remove the use of pg_database_size from the status probe, as it caused high resource utilization by scanning the entire PGDATA directory to compute database sizes. The kubectl status plugin will now rely on du to provide detailed size information retrieval (#5689). Add the ability to configure the full_page_writes parameter in PostgreSQL. This setting defaults to on , in line with PostgreSQL's recommendations (#5516). Plugin: Add the logs pretty command in the cnpg plugin to read a log stream from standard input and output a human-readable format, with options to filter log entries (#5770) Enhance the status command by allowing multiple -v options to increase verbosity for more detailed output (#5765). Add support for specifying a custom Docker image using the --image flag in the pgadmin4 plugin command, giving users control over the Docker image used for pgAdmin4 deployments (#5515).","title":"Enhancements:"},{"location":"release_notes/old/v1.24/#fixes_1","text":"Resolve an issue with concurrent status updates when demoting a primary to a designated primary, ensuring smoother transitions during cluster role changes (#5755). Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down to two instances, enabling easier maintenance on the node hosting the replica (#5487). Prioritize full rollout over inplace restarts (#5407). When using .spec.postgresql.synchronous , ensure that the synchronous_standby_names parameter is correctly set, even when no replicas are reachable (#5831). Fix an issue that could lead to double failover in cases of lost connectivity (#5788). Correctly set the TMPDIR and PSQL_HISTORY environment variables for pods and jobs, improving temporary file and history management (#5503). Plugin: Resolve a race condition in the logs cluster command (#5775). Display the potential sync status in the status plugin (#5533). Fix the issue where pods deployed by the pgadmin4 command didn\u2019t have a writable home directory (#5800).","title":"Fixes:"},{"location":"release_notes/old/v1.24/#supported-versions","text":"PostgreSQL 17 (PostgreSQL 17.0 is the default image)","title":"Supported versions"},{"location":"release_notes/old/v1.24/#version-1240","text":"Release date: Aug 22, 2024","title":"Version 1.24.0"},{"location":"release_notes/old/v1.24/#important-changes_1","text":"Deprecate the role label in the selectors of Service and PodDisruptionBudget resources in favor of cnpg.io/instanceRole (#4897). Fix the default PodAntiAffinity configuration for PostgreSQL Pods, allowing a PostgreSQL and a Pooler Instance to coexist on the same node when the anti-affinity configuration is set to required (#5156). Warning The PodAntiAffinity change will trigger a rollout of all the instances when the operator is upgraded, even when online upgrades are enabled.","title":"Important changes:"},{"location":"release_notes/old/v1.24/#features","text":"Distributed PostgreSQL Topologies : Enhance the replica cluster feature to create distributed database topologies for PostgreSQL that span multiple Kubernetes clusters, enabling hybrid and multi-cloud deployments. This feature supports: Declarative Primary Control : Easily specify which PostgreSQL cluster acts as the primary in a distributed setup (#4388). Seamless Switchover : Effortlessly demote the current primary and promote a selected replica cluster, typically in a different region, without needing to rebuild the former primary. This ensures high availability and resilience in diverse environments (#4411). Managed Services : Introduce managed services via the managed.services stanza (#4769 and #4952), allowing you to: Disable the read-only and read services via configuration. Leverage the service template capability to create custom service resources, including load balancers, to access PostgreSQL outside Kubernetes (particularly useful for DBaaS purposes). Enhanced API for Synchronous Replication : Introducing an improved API for explicit configuration of synchronous replication, supporting both quorum-based and priority list strategies. This update allows full customization of the synchronous_standby_names option, providing greater control and flexibility (#5148). WAL Disk Space Exhaustion : Safely stop the cluster when PostgreSQL runs out of disk space to store WAL files, making recovery easier by increasing the size of the related volume (#4404).","title":"Features:"},{"location":"release_notes/old/v1.24/#enhancements_4","text":"Add support for delayed replicas by introducing the .spec.replica.minApplyDelay option, leveraging PostgreSQL's recovery_min_apply_delay capability (#5181). Introduce postInitSQLRefs and postInitTemplateSQLRefs to allow users to define postInit and postInitTemplate instructions as one or more config maps or secrets (#5074). Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Allow overriding the query metric name and the names of the columns using a name key/value pair, which can replace the name automatically inherited from the parent key (#4779). Enhanced control over exported metrics by making them subject to the value returned by a custom query, which is run within the same transaction and defined in the predicate_query field (#4503). Allow additional arguments to be passed to barman-cloud-wal-archive and barman-cloud-wal-restore (#5099). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). The readiness probe now fails for streaming replicas that were never connected to the primary instance, allowing incoherent replicas to be discovered promptly (#5206). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044). cnpg plugin updates: Enhance the install generate command by adding a --control-plane option, allowing deployment of the operator on control-plane nodes by setting node affinity and tolerations (#5271). Enhance the destroy command to delete also any job related to the target instance (#5298). Enhanced the status command to display demotionToken and promotionToken when available, providing more detailed operational insights with distributed topologies (#5149). Added support for customizing the remote database name in the publication and subscription subcommands. This enhancement offers greater flexibility for synchronizing data from an external cluster with multiple databases (#5113).","title":"Enhancements:"},{"location":"release_notes/old/v1.24/#security_2","text":"Add TLS communication between the operator and instance manager (#4442). Add optional TLS communication for the instance metrics exporter (#4927).","title":"Security:"},{"location":"release_notes/old/v1.24/#fixes_2","text":"Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Ensure that the Pooler service template can override the default service (#4846). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Fix cluster role permissions for ClusterImageCatalogs (#5034). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). Synchronous replication self-healing checks now exclude terminated pods, focusing only on active and functional pods (#5210). The instance manager will now terminate all existing operator-related replication connections following a role change in a replica cluster (#5209). Allow setting smartShutdownTimeout to zero, enabling immediate fast shutdown and bypassing the smart shutdown process when required (#5347). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915).","title":"Fixes:"},{"location":"release_notes/old/v1.24/#supported-versions_1","text":"Kubernetes 1.31, 1.30, 1.29, and 1.28 PostgreSQL 16, 15, 14, 13, and 12 PostgreSQL 16.4 is the default image PostgreSQL 12 support ends on November 12, 2024","title":"Supported versions"}]}
\ No newline at end of file
diff --git a/assets/documentation/1.27.0-rc1/search/worker.js b/assets/documentation/1.27.0-rc1/search/worker.js
new file mode 100644
index 000000000..8628dbce9
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/search/worker.js
@@ -0,0 +1,133 @@
+var base_path = 'function' === typeof importScripts ? '.' : '/search/';
+var allowSearch = false;
+var index;
+var documents = {};
+var lang = ['en'];
+var data;
+
+function getScript(script, callback) {
+  console.log('Loading script: ' + script);
+  $.getScript(base_path + script).done(function () {
+    callback();
+  }).fail(function (jqxhr, settings, exception) {
+    console.log('Error: ' + exception);
+  });
+}
+
+function getScriptsInOrder(scripts, callback) {
+  if (scripts.length === 0) {
+    callback();
+    return;
+  }
+  getScript(scripts[0], function() {
+    getScriptsInOrder(scripts.slice(1), callback);
+  });
+}
+
+function loadScripts(urls, callback) {
+  if( 'function' === typeof importScripts ) {
+    importScripts.apply(null, urls);
+    callback();
+  } else {
+    getScriptsInOrder(urls, callback);
+  }
+}
+
+function onJSONLoaded () {
+  data = JSON.parse(this.responseText);
+  var scriptsToLoad = ['lunr.js'];
+  if (data.config && data.config.lang && data.config.lang.length) {
+    lang = data.config.lang;
+  }
+  if (lang.length > 1 || lang[0] !== "en") {
+    scriptsToLoad.push('lunr.stemmer.support.js');
+    if (lang.length > 1) {
+      scriptsToLoad.push('lunr.multi.js');
+    }
+    if (lang.includes("ja") || lang.includes("jp")) {
+      scriptsToLoad.push('tinyseg.js');
+    }
+    for (var i=0; i < lang.length; i++) {
+      if (lang[i] != 'en') {
+        scriptsToLoad.push(['lunr', lang[i], 'js'].join('.'));
+      }
+    }
+  }
+  loadScripts(scriptsToLoad, onScriptsLoaded);
+}
+
+function onScriptsLoaded () {
+  console.log('All search scripts loaded, building Lunr index...');
+  if (data.config && data.config.separator && data.config.separator.length) {
+    lunr.tokenizer.separator = new RegExp(data.config.separator);
+  }
+
+  if (data.index) {
+    index = lunr.Index.load(data.index);
+    data.docs.forEach(function (doc) {
+      documents[doc.location] = doc;
+    });
+    console.log('Lunr pre-built index loaded, search ready');
+  } else {
+    index = lunr(function () {
+      if (lang.length === 1 && lang[0] !== "en" && lunr[lang[0]]) {
+        this.use(lunr[lang[0]]);
+      } else if (lang.length > 1) {
+        this.use(lunr.multiLanguage.apply(null, lang));  // spread operator not supported in all browsers: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Operators/Spread_operator#Browser_compatibility
+      }
+      this.field('title');
+      this.field('text');
+      this.ref('location');
+
+      for (var i=0; i < data.docs.length; i++) {
+        var doc = data.docs[i];
+        this.add(doc);
+        documents[doc.location] = doc;
+      }
+    });
+    console.log('Lunr index built, search ready');
+  }
+  allowSearch = true;
+  postMessage({config: data.config});
+  postMessage({allowSearch: allowSearch});
+}
+
+function init () {
+  var oReq = new XMLHttpRequest();
+  oReq.addEventListener("load", onJSONLoaded);
+  var index_path = base_path + '/search_index.json';
+  if( 'function' === typeof importScripts ){
+      index_path = 'search_index.json';
+  }
+  oReq.open("GET", index_path);
+  oReq.send();
+}
+
+function search (query) {
+  if (!allowSearch) {
+    console.error('Assets for search still loading');
+    return;
+  }
+
+  var resultDocuments = [];
+  var results = index.search(query);
+  for (var i=0; i < results.length; i++){
+    var result = results[i];
+    doc = documents[result.ref];
+    doc.summary = doc.text.substring(0, 200);
+    resultDocuments.push(doc);
+  }
+  return resultDocuments;
+}
+
+if( 'function' === typeof importScripts ) {
+  onmessage = function (e) {
+    if (e.data.init) {
+      init();
+    } else if (e.data.query) {
+      postMessage({ results: search(e.data.query) });
+    } else {
+      console.error("Worker - Unrecognized message: " + e);
+    }
+  };
+}
diff --git a/assets/documentation/1.27.0-rc1/security/index.html b/assets/documentation/1.27.0-rc1/security/index.html
new file mode 100644
index 000000000..7d7738693
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/security/index.html
@@ -0,0 +1,904 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Security - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Security";
+        var mkdocs_page_input_path = "security.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Security</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#code">Code</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#container">Container</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#image-signatures">Image Signatures</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#attestations">Attestations</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#guidelines-and-frameworks-for-container-security">Guidelines and Frameworks for Container Security</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#cluster">Cluster</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#role-based-access-control-rbac">Role Based Access Control (RBAC)</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#deployments-and-clusterrole-resources">Deployments and ClusterRole Resources</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#why-are-clusterrole-permissions-needed">Why Are ClusterRole Permissions Needed?</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#calls-to-the-api-server-made-by-the-instance-manager">Calls to the API server made by the instance manager</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#pod-and-container-security-contexts">Pod and Container Security Contexts</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#security-context-constraints">Security Context Constraints</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#restricting-pod-access-using-apparmor">Restricting Pod access using AppArmor</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#network-policies">Network Policies</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#exposed-ports">Exposed Ports</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#postgresql">PostgreSQL</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#storage">Storage</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Security</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="security">Security</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>This section contains information about security for CloudNativePG,
+that are analyzed at 3 different layers: Code, Container and Cluster.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>The information contained in this page must not exonerate you from
+performing regular InfoSec duties on your Kubernetes cluster. Please
+familiarize yourself with the <a href="https://kubernetes.io/docs/concepts/security/overview/">"Overview of Cloud Native Security"</a>
+page from the Kubernetes documentation.</p>
+</div>
+<div class="admonition seealso">
+<p class="admonition-title">About the 4C's Security Model</p>
+<p>Please refer to <a href="https://www.enterprisedb.com/blog/4cs-security-model-kubernetes">"The 4C’s Security Model in Kubernetes"</a>
+blog article to get a better understanding and context of the approach EDB
+has taken with security in CloudNativePG.</p>
+</div>
+<h2 id="code">Code</h2>
+<p>CloudNativePG's source code undergoes systematic static analysis, including
+checks for security vulnerabilities, using the popular open-source linter for
+Go, <a href="https://github.com/golangci/golangci-lint">GolangCI-Lint</a>, directly
+integrated into the CI/CD pipeline. GolangCI-Lint can run multiple linters on
+the same source code.</p>
+<p>The following tools are used to identify security issues:</p>
+<ul>
+<li>
+<p><strong><a href="https://github.com/securego/gosec">Golang Security Checker</a> (<code>gosec</code>):</strong> A
+  linter that scans the abstract syntax tree of the source code against a set
+  of rules designed to detect known vulnerabilities, threats, and weaknesses,
+  such as hard-coded credentials, integer overflows, and SQL injections.
+  GolangCI-Lint runs <code>gosec</code> as part of its suite.</p>
+</li>
+<li>
+<p><strong><a href="https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck">govulncheck</a>:</strong> This
+  tool runs in the CI/CD pipeline and reports known vulnerabilities affecting
+  Go code or the compiler. If the operator is built with a version of the Go
+  compiler containing a known vulnerability, <code>govulncheck</code> will detect it.</p>
+</li>
+<li>
+<p><strong><a href="https://codeql.github.com/">CodeQL</a>:</strong> Provided by GitHub, this tool scans
+  for security issues and blocks any pull request with detected
+  vulnerabilities. CodeQL is configured to review only Go code, excluding other
+  languages in the repository such as Python or Bash.</p>
+</li>
+<li>
+<p><strong><a href="https://snyk.io/">Snyk</a>:</strong> Conducts nightly code scans in a scheduled job
+  and generates weekly reports highlighting any new findings related to code
+  security and licensing issues.</p>
+</li>
+</ul>
+<p>The CloudNativePG repository has the <em>"Private vulnerability reporting"</em> option
+enabled in the <a href="https://github.com/cloudnative-pg/cloudnative-pg/security">Security section</a>.
+This feature allows users to safely report security issues that require careful
+handling before being publicly disclosed. If you discover any security bug,
+please use this medium to report it.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>A failure in the static code analysis phase of the CI/CD pipeline will
+block the entire delivery process of CloudNativePG. Every commit must pass all
+the linters defined by GolangCI-Lint.</p>
+</div>
+<h2 id="container">Container</h2>
+<p>Every container image in CloudNativePG is automatically built via CI/CD
+pipelines after every commit. These images include not only the operator's
+image but also the operands' images, specifically for every supported
+PostgreSQL version.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>All operand images are automatically and regularly rebuilt by our pipelines
+to incorporate the latest security updates at both the base image and package
+levels. This ensures that container images distributed to the community receive
+<strong>patch-level updates</strong> regularly.</p>
+</div>
+<p>During the CI/CD process, images are scanned using the following tools:</p>
+<ul>
+<li><strong><a href="https://github.com/goodwithtech/dockle">Dockle</a>:</strong> Ensures best practices
+  in the container build process.</li>
+<li><strong><a href="https://snyk.io/">Snyk</a>:</strong> Detects security issues within the container
+  and reports findings via the GitHub interface.</li>
+</ul>
+<h3 id="image-signatures">Image Signatures</h3>
+<p>The operator and <a href="https://github.com/cloudnative-pg/postgres-containers">operand
+images</a> are
+cryptographically signed using <a href="https://github.com/sigstore/cosign">cosign</a>, a
+signature tool from <a href="https://www.sigstore.dev/">sigstore</a>.
+This process is automated via GitHub Actions and leverages
+<a href="https://docs.github.com/en/actions/security-for-github-actions/security-hardening-your-deployments/about-security-hardening-with-openid-connect">short-lived tokens issued through OpenID Connect</a>.</p>
+<p>The token issuer is <code>https://token.actions.githubusercontent.com</code>, and the
+signing identity corresponds to a GitHub workflow executed under the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/">cloudnative-pg</a> repository.
+This workflow uses the <a href="https://github.com/marketplace/actions/cosign-installer">cosign-installer action</a>
+to streamline the signing process.</p>
+<p>To verify the authenticity of an operator image, use the following <code>cosign</code>
+command with the image digest:</p>
+<pre><code class="language-shell">cosign verify ghcr.io/cloudnative-pg/cloudnative-pg@sha256:&lt;DIGEST&gt; \
+  --certificate-identity-regexp=&quot;^https://github.com/cloudnative-pg/cloudnative-pg/&quot; \
+  --certificate-oidc-issuer=&quot;https://token.actions.githubusercontent.com&quot;
+</code></pre>
+<h3 id="attestations">Attestations</h3>
+<p>Container images include the following attestations for transparency and
+traceability:</p>
+<ul>
+<li><strong><a href="https://docs.docker.com/build/metadata/attestations/sbom/">Software Bill of Materials
+  (SBOM)</a>:</strong> A
+  comprehensive list of software artifacts included in the image or used during
+  its build process, formatted using the
+  <a href="https://github.com/in-toto/attestation/blob/main/spec/predicates/spdx.md">in-toto SPDX predicate standard</a>.</li>
+<li><strong><a href="https://docs.docker.com/build/metadata/attestations/slsa-provenance/">Provenance</a>:</strong>
+  Metadata detailing how the image was built, following the <a href="https://slsa.dev">SLSA Provenance</a>
+  framework.</li>
+</ul>
+<p>You can retrieve the SBOM for a specific image and platform using the following
+command:</p>
+<pre><code class="language-shell">docker buildx imagetools inspect &lt;IMAGE&gt; \
+  --format '{{ json (index .SBOM &quot;&lt;PLATFORM&gt;&quot;).SPDX }}'
+</code></pre>
+<p>This command outputs the SBOM in JSON format, providing a detailed view of the
+software components and build dependencies.</p>
+<p>For the provenance, use:</p>
+<pre><code class="language-shell">docker buildx imagetools inspect &lt;IMAGE&gt; \
+  --format '{{ json (index .Provenance &quot;&lt;PLATFORM&gt;&quot;).SLSA }}'
+</code></pre>
+<h3 id="guidelines-and-frameworks-for-container-security">Guidelines and Frameworks for Container Security</h3>
+<p>The following guidelines and frameworks have been considered for ensuring
+container-level security:</p>
+<ul>
+<li><strong><a href="https://dl.dod.cyber.mil/wp-content/uploads/devsecops/pdf/DevSecOps_Enterprise_Container_Image_Creation_and_Deployment_Guide_2.6-Public-Release.pdf">"Container Image Creation and Deployment Guide"</a>:</strong>
+  Developed by the Defense Information Systems Agency (DISA) of the United States
+  Department of Defense (DoD).</li>
+<li><strong><a href="https://www.cisecurity.org/benchmark/docker/">"CIS Benchmark for Docker"</a>:</strong>
+  Developed by the Center for Internet Security (CIS).</li>
+</ul>
+<div class="admonition seealso">
+<p class="admonition-title">About Container-Level Security</p>
+<p>For more information on the approach that EDB has taken regarding security
+at the container level in CloudNativePG, please refer to the blog article
+<a href="https://www.enterprisedb.com/blog/security-and-containers-cloud-native-postgresql">"Security and Containers in CloudNativePG"</a>.</p>
+</div>
+<h2 id="cluster">Cluster</h2>
+<p>Security at the cluster level takes into account all Kubernetes components that
+form both the control plane and the nodes, as well as the applications that run in
+the cluster (PostgreSQL included).</p>
+<h3 id="role-based-access-control-rbac">Role Based Access Control (RBAC)</h3>
+<p>The operator interacts with the Kubernetes API server using a dedicated service
+account named <code>cnpg-manager</code>. This service account is typically installed in
+the operator namespace, commonly <code>cnpg-system</code>. However, the namespace may vary
+based on the deployment method (see the subsection below).</p>
+<p>In the same namespace, there is a binding between the <code>cnpg-manager</code> service
+account and a role. The specific name and type of this role (either <code>Role</code> or
+<code>ClusterRole</code>) also depend on the deployment method. This role defines the
+necessary permissions required by the operator to function correctly. To learn
+more about these roles, you can use the <code>kubectl describe clusterrole</code> or
+<code>kubectl describe role</code> commands, depending on the deployment method.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The above permissions are exclusively reserved for the operator's service
+account to interact with the Kubernetes API server.  They are not directly
+accessible by the users of the operator that interact only with <code>Cluster</code>,
+<code>Pooler</code>, <code>Backup</code>, <code>ScheduledBackup</code>, <code>Database</code>, <code>Publication</code>,
+<code>Subscription</code>, <code>ImageCatalog</code> and <code>ClusterImageCatalog</code> resources.</p>
+</div>
+<p>Below we provide some examples and, most importantly, the reasons why
+CloudNativePG requires full or partial management of standard Kubernetes
+namespaced or non-namespaced resources.</p>
+<dl>
+<dt><code>configmaps</code></dt>
+<dd>The operator needs to create and manage default config maps for
+  the Prometheus exporter monitoring metrics.</dd>
+<dt><code>deployments</code></dt>
+<dd>The operator needs to manage a PgBouncer connection pooler
+  using a standard Kubernetes <code>Deployment</code> resource.</dd>
+<dt><code>jobs</code></dt>
+<dd>The operator needs to handle jobs to manage different <code>Cluster</code>'s phases.</dd>
+<dt><code>persistentvolumeclaims</code></dt>
+<dd>The volume where the <code>PGDATA</code> resides is the
+  central element of a PostgreSQL <code>Cluster</code> resource; the operator needs
+  to interact with the selected storage class to dynamically provision
+  the requested volumes, based on the defined scheduling policies.</dd>
+<dt><code>pods</code></dt>
+<dd>The operator needs to manage <code>Cluster</code>'s instances.</dd>
+<dt><code>secrets</code></dt>
+<dd>Unless you provide certificates and passwords to your <code>Cluster</code>
+  objects, the operator adopts the "convention over configuration" paradigm by
+  self-provisioning random generated passwords and TLS certificates, and by
+  storing them in secrets.</dd>
+<dt><code>serviceaccounts</code></dt>
+<dd>The operator needs to create a service account that
+  enables the instance manager (which is the <em>PID 1</em> process of the container
+  that controls the PostgreSQL server) to safely communicate with the
+  Kubernetes API server to coordinate actions and continuously provide
+  a reliable status of the <code>Cluster</code>.</dd>
+<dt><code>services</code></dt>
+<dd>The operator needs to control network access to the PostgreSQL cluster
+  (or the connection pooler) from applications, and properly manage
+  failover/switchover operations in an automated way (by assigning, for example,
+  the correct end-point of a service to the proper primary PostgreSQL instance).</dd>
+<dt><code>validatingwebhookconfigurations</code> and <code>mutatingwebhookconfigurations</code></dt>
+<dd>The operator injects its self-signed webhook CA into both webhook
+  configurations, which are needed to validate and mutate all the resources it
+  manages. For more details, please see the
+  <a href="https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/">Kubernetes documentation</a>.</dd>
+<dt><code>volumesnapshots</code></dt>
+<dd>The operator needs to generate <code>VolumeSnapshots</code> objects in order to take
+  backups of a PostgreSQL server. VolumeSnapshots are read too in order to
+  validate them before starting the restore process.</dd>
+<dt><code>nodes</code></dt>
+<dd>The operator needs to get the labels for Affinity and AntiAffinity so it can
+  decide in which nodes a pod can be scheduled. This is useful, for example, to
+  prevent the replicas from being scheduled in the same node - especially
+  important if nodes are in different availability zones. This
+  permission is also used to determine whether a node is scheduled, preventing
+  the creation of pods on unscheduled nodes, or triggering a switchover if
+  the primary lives in an unscheduled node.</dd>
+</dl>
+<h4 id="deployments-and-clusterrole-resources">Deployments and <code>ClusterRole</code> Resources</h4>
+<p>As mentioned above, each deployment method may have variations in the namespace
+location of the service account, as well as the names and types of role
+bindings and respective roles.</p>
+<h5 id="via-kubernetes-manifest">Via Kubernetes Manifest</h5>
+<p>When installing CloudNativePG using the Kubernetes manifest, permissions are
+set to <code>ClusterRoleBinding</code> by default. You can inspect the permissions
+required by the operator by running:</p>
+<pre><code class="language-sh">kubectl describe clusterrole cnpg-manager
+</code></pre>
+<h5 id="via-olm">Via OLM</h5>
+<p>From a security perspective, the Operator Lifecycle Manager (OLM) provides a
+more flexible deployment method. It allows you to configure the operator to
+watch either all namespaces or specific namespaces, enabling more granular
+permission management.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+</div>
+<p>OLM allows you to deploy the operator in its own namespace and configure it
+   to watch specific namespaces used for CloudNativePG clusters. This setup helps
+   to contain permissions and restrict access more effectively.</p>
+<h4 id="why-are-clusterrole-permissions-needed">Why Are ClusterRole Permissions Needed?</h4>
+<p>The operator currently requires <code>ClusterRole</code> permissions to read <code>nodes</code> and
+<code>ClusterImageCatalog</code> objects. All other permissions can be namespace-scoped (i.e., <code>Role</code>) or
+cluster-wide (i.e., <code>ClusterRole</code>).</p>
+<p>Even with these permissions, if someone gains access to the <code>ServiceAccount</code>,
+they will only have <code>get</code>, <code>list</code>, and <code>watch</code> permissions, which are limited
+to viewing resources. However, if an unauthorized user gains access to the
+<code>ServiceAccount</code>, it indicates a more significant security issue.</p>
+<p>Therefore, it's crucial to prevent users from accessing the operator's
+<code>ServiceAccount</code> and any other <code>ServiceAccount</code> with elevated permissions.</p>
+<h3 id="calls-to-the-api-server-made-by-the-instance-manager">Calls to the API server made by the instance manager</h3>
+<p>The instance manager, which is the entry point of the operand container, needs
+to make some calls to the Kubernetes API server to ensure that the status of
+some resources is correctly updated and to access the config maps and secrets
+that are associated with that Postgres cluster. Such calls are performed through
+a dedicated <code>ServiceAccount</code> created by the operator that shares the same
+PostgreSQL <code>Cluster</code> resource name.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The operand can only access a specific and limited subset of resources
+through the API server. A service account is the
+<a href="https://kubernetes.io/docs/tasks/run-application/access-api-from-pod/">recommended way to access the API server from within a Pod</a>.</p>
+</div>
+<p>For transparency, the permissions associated with the service account are defined in the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/blob/main/pkg/specs/roles.go">roles.go</a>
+file. For example, to retrieve the permissions of a generic <code>mypg</code> cluster in the
+<code>myns</code> namespace, you can type the following command:</p>
+<pre><code class="language-bash">kubectl get role -n myns mypg -o yaml
+</code></pre>
+<p>Then verify that the role is bound to the service account:</p>
+<pre><code class="language-bash">kubectl get rolebinding -n myns mypg -o yaml
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Remember that <strong>roles are limited to a given namespace</strong>.</p>
+</div>
+<p>Below we provide a quick summary of the permissions associated with the service
+account for generic Kubernetes resources.</p>
+<dl>
+<dt><code>configmaps</code></dt>
+<dd>The instance manager can only read config maps that are related to the same
+  cluster, such as custom monitoring queries</dd>
+<dt><code>secrets</code></dt>
+<dd>The instance manager can only read secrets that are related to the same
+  cluster, namely: streaming replication user, application user, super user,
+  LDAP authentication user, client CA, server CA, server certificate, backup
+  credentials, custom monitoring queries</dd>
+<dt><code>events</code></dt>
+<dd>The instance manager can create an event for the cluster, informing the
+  API server about a particular aspect of the PostgreSQL instance lifecycle</dd>
+</dl>
+<p>Here instead, we provide the same summary for resources specific to
+CloudNativePG.</p>
+<dl>
+<dt><code>clusters</code></dt>
+<dd>The instance manager requires read-only permissions, namely <code>get</code>, <code>list</code> and
+  <code>watch</code>, just for its own <code>Cluster</code> resource</dd>
+<dt><code>clusters/status</code></dt>
+<dd>The instance manager requires to <code>update</code> and <code>patch</code> the status of just its
+  own <code>Cluster</code> resource</dd>
+<dt><code>backups</code></dt>
+<dd>The instance manager requires <code>get</code> and <code>list</code> permissions to read any
+  <code>Backup</code> resource in the namespace. Additionally, it requires the <code>delete</code>
+  permission to clean up the Kubernetes cluster by removing the <code>Backup</code> objects
+  that do not have a counterpart in the object store - typically because of
+  retention policies</dd>
+<dt><code>backups/status</code></dt>
+<dd>The instance manager requires to <code>update</code> and <code>patch</code> the status of any
+  <code>Backup</code> resource in the namespace</dd>
+</dl>
+<h3 id="pod-and-container-security-contexts">Pod and Container Security Contexts</h3>
+<p>A <a href="https://kubernetes.io/docs/tasks/configure-pod-container/security-context/">Security Context</a>
+defines privilege and access control settings for a pod or container.</p>
+<p>CloudNativePG does not require <em>privileged</em> mode for container execution.
+The PostgreSQL containers run as the <code>postgres</code> system user. No component
+whatsoever requires running as <code>root</code>.</p>
+<p>Likewise, Volume access does not require <em>privileged</em> mode nor <code>root</code>
+privileges. Proper permissions must be assigned by the Kubernetes platform
+and/or administrators. The PostgreSQL containers run with a read-only root
+filesystem (i.e. no writable layer).</p>
+<p>The operator manages the setting of security contexts for all pods and 
+containers of a PostgreSQL cluster. The <a href="https://kubernetes.io/docs/tutorials/security/seccomp/">Seccomp Profile</a> 
+to be used for the PostgreSQL containers can be configured with the 
+<code>spec.seccompProfile</code> section of the <code>Cluster</code> resource. If this section is left
+blank, the containers will use a seccompProfile <code>Type</code> of <code>RuntimeDefault</code>, that
+is, the container runtime default.</p>
+<p>The security context of PostgreSQL containers using the default <code>seccompProfile</code>
+will look like this:</p>
+<pre><code>securityContext:
+  allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+    - ALL
+  privileged: false
+  readOnlyRootFilesystem: true
+  runAsNonRoot: true
+  seccompProfile:
+    type: RuntimeDefault
+</code></pre>
+<h4 id="security-context-constraints">Security Context Constraints</h4>
+<p>When running in an environment that is utilizing
+<a href="https://docs.openshift.com/container-platform/4.17/authentication/managing-security-context-constraints.html">Security Context Constraints (SCC)</a>
+the operator does not explicitly set the security context of the PostgreSQL
+cluster pods, but rather allows the pods to inherit the restricted Security
+Context Constraints that are already defined.</p>
+<h3 id="restricting-pod-access-using-apparmor">Restricting Pod access using AppArmor</h3>
+<p>You can assign an
+<a href="https://kubernetes.io/docs/tutorials/security/apparmor/">AppArmor</a> profile to
+the <code>postgres</code>, <code>initdb</code>, <code>join</code>, <code>full-recovery</code> and <code>bootstrap-controller</code> containers inside every <code>Cluster</code> pod through the
+<code>container.apparmor.security.beta.kubernetes.io</code> annotation.</p>
+<div class="admonition seealso">
+<p class="admonition-title">Example of cluster annotations</p>
+</div>
+<pre><code>    kind: Cluster
+    metadata:
+        name: cluster-apparmor
+        annotations:
+            container.apparmor.security.beta.kubernetes.io/postgres: runtime/default
+            container.apparmor.security.beta.kubernetes.io/initdb: runtime/default
+            container.apparmor.security.beta.kubernetes.io/join: runtime/default
+</code></pre>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Using this kind of annotations can result in your cluster to stop working.
+If this is the case, the annotation can be safely removed from the <code>Cluster</code>.</p>
+</div>
+<p>The AppArmor configuration must be at Kubernetes node level, meaning that the
+underlying operating system must have this option enable and properly
+configured.</p>
+<p>In case this is not the situation, and the annotations were added at the
+<code>Cluster</code> creation time, pods will not be created. On the other hand, if you
+add the annotations after the <code>Cluster</code> was created the pods in the cluster will
+be unable to start and you will get an error like this:</p>
+<pre><code>metadata.annotations[container.apparmor.security.beta.kubernetes.io/postgres]: Forbidden: may not add AppArmor annotations]
+</code></pre>
+<p>In such cases, please refer to your Kubernetes administrators and ask for the
+proper AppArmor profile to use.</p>
+<h3 id="network-policies">Network Policies</h3>
+<p>The pods created by the <code>Cluster</code> resource can be controlled by Kubernetes
+<a href="https://kubernetes.io/docs/concepts/services-networking/network-policies/">network policies</a>
+to enable/disable inbound and outbound network access at IP and TCP level.
+You can find more information in the <a href="../networking/">networking document</a>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The operator needs to communicate to each instance on TCP port 8000
+to get information about the status of the PostgreSQL server. Please
+make sure you keep this in mind in case you add any network policy,
+and refer to the "Exposed Ports" section below for a list of ports used by
+CloudNativePG for finer control.</p>
+</div>
+<p>Network policies are beyond the scope of this document.
+Please refer to the <a href="https://kubernetes.io/docs/concepts/services-networking/network-policies/">"Network policies"</a>
+section of the Kubernetes documentation for further information.</p>
+<h4 id="exposed-ports">Exposed Ports</h4>
+<p>CloudNativePG exposes ports at operator, instance manager and operand
+levels, as listed in the table below:</p>
+<table>
+<thead>
+<tr>
+<th style="text-align: left;">System</th>
+<th style="text-align: left;">Port number</th>
+<th style="text-align: left;">Exposing</th>
+<th style="text-align: left;">Name</th>
+<th style="text-align: left;">TLS</th>
+<th style="text-align: left;">Authentication</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: left;">operator</td>
+<td style="text-align: left;">9443</td>
+<td style="text-align: left;">webhook server</td>
+<td style="text-align: left;"><code>webhook-server</code></td>
+<td style="text-align: left;">Yes</td>
+<td style="text-align: left;">Yes</td>
+</tr>
+<tr>
+<td style="text-align: left;">operator</td>
+<td style="text-align: left;">8080</td>
+<td style="text-align: left;">metrics</td>
+<td style="text-align: left;"><code>metrics</code></td>
+<td style="text-align: left;">No</td>
+<td style="text-align: left;">No</td>
+</tr>
+<tr>
+<td style="text-align: left;">instance manager</td>
+<td style="text-align: left;">9187</td>
+<td style="text-align: left;">metrics</td>
+<td style="text-align: left;"><code>metrics</code></td>
+<td style="text-align: left;">Optional</td>
+<td style="text-align: left;">No</td>
+</tr>
+<tr>
+<td style="text-align: left;">instance manager</td>
+<td style="text-align: left;">8000</td>
+<td style="text-align: left;">status</td>
+<td style="text-align: left;"><code>status</code></td>
+<td style="text-align: left;">Yes</td>
+<td style="text-align: left;">No</td>
+</tr>
+<tr>
+<td style="text-align: left;">operand</td>
+<td style="text-align: left;">5432</td>
+<td style="text-align: left;">PostgreSQL instance</td>
+<td style="text-align: left;"><code>postgresql</code></td>
+<td style="text-align: left;">Optional</td>
+<td style="text-align: left;">Yes</td>
+</tr>
+</tbody>
+</table>
+<h3 id="postgresql">PostgreSQL</h3>
+<p>The current implementation of CloudNativePG automatically creates
+passwords and <code>.pgpass</code> files for the database owner and, only
+if requested by setting <code>enableSuperuserAccess</code> to <code>true</code>, for the
+<code>postgres</code> superuser.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p><code>enableSuperuserAccess</code> is set to <code>false</code> by default to improve the
+security-by-default posture of the operator, fostering a microservice approach
+where changes to PostgreSQL are performed in a declarative way through the
+<code>spec</code> of the <code>Cluster</code> resource, while providing developers with full powers
+inside the database through the database owner user.</p>
+</div>
+<p>As far as password encryption is concerned, CloudNativePG follows
+the default behavior of PostgreSQL: starting from PostgreSQL 14,
+<code>password_encryption</code> is by default set to <code>scram-sha-256</code>, while on earlier
+versions it is set to <code>md5</code>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Please refer to the <a href="https://www.postgresql.org/docs/current/auth-password.html">"Password authentication"</a>
+section in the PostgreSQL documentation for details.</p>
+</div>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The operator supports toggling the <code>enableSuperuserAccess</code> option. When you
+disable it on a running cluster, the operator will ignore the content of the secret,
+remove it (if previously generated by the operator) and set the password of the
+<code>postgres</code> user to <code>NULL</code> (de facto disabling remote access through password authentication).</p>
+</div>
+<p>See the <a href="../applications/#secrets">"Secrets" section in the "Connecting from an application" page</a> for more information.</p>
+<p>You can use those files to configure application access to the database.</p>
+<p>By default, every replica is automatically configured to connect in <strong>physical
+async streaming replication</strong> with the current primary instance, with a special
+user called <code>streaming_replica</code>. The connection between nodes is <strong>encrypted</strong>
+and authentication is via <strong>TLS client certificates</strong> (please refer to the
+<a href="../ssl_connections/" title="Client TLS/SSL Connections">"Client TLS/SSL Connections"</a> page
+for details). By default, the operator requires TLS v1.3 connections.</p>
+<p>Currently, the operator allows administrators to add <code>pg_hba.conf</code> lines directly in the manifest
+as part of the <code>pg_hba</code> section of the <code>postgresql</code> configuration. The lines defined in the
+manifest are added to a default <code>pg_hba.conf</code>.</p>
+<p>For further detail on how <code>pg_hba.conf</code> is managed by the operator, see the
+<a href="../postgresql_conf/#the-pg_hba-section">"PostgreSQL Configuration" page</a> of the documentation.</p>
+<p>The administrator can also customize the content of the <code>pg_ident.conf</code> file that by default
+only maps the local postgres user to the postgres user in the database.</p>
+<p>For further detail on how <code>pg_ident.conf</code> is managed by the operator, see the
+<a href="../postgresql_conf/#the-pg_ident-section">"PostgreSQL Configuration" page</a> of the documentation.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Examples assume that the Kubernetes cluster runs in a private and secure network.</p>
+</div>
+<h3 id="storage">Storage</h3>
+<p>CloudNativePG delegates encryption at rest to the underlying storage class. For
+data protection in production environments, we highly recommend that you choose
+a storage class that supports encryption at rest.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../database_import/" class="btn btn-neutral float-left" title="Importing Postgres databases"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../instance_manager/" class="btn btn-neutral float-right" title="Postgres instance manager">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../database_import/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../instance_manager/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/service_management/index.html b/assets/documentation/1.27.0-rc1/service_management/index.html
new file mode 100644
index 000000000..2d85b3024
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/service_management/index.html
@@ -0,0 +1,489 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Service Management - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Service Management";
+        var mkdocs_page_input_path = "service_management.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Service Management</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#disabling-default-services">Disabling Default Services</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#adding-your-own-services">Adding Your Own Services</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#about-exposing-postgres-services">About Exposing Postgres Services</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Service Management</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="service-management">Service Management</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>A PostgreSQL cluster should only be accessed via standard Kubernetes network
+services directly managed by CloudNativePG. For more details, refer to the
+<a href="https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies">"Service" page of the Kubernetes Documentation</a>.</p>
+<p>CloudNativePG defines three types of services for each <code>Cluster</code> resource:</p>
+<ul>
+<li><code>rw</code>: Points to the primary instance of the cluster (read/write).</li>
+<li><code>ro</code>: Points to the replicas, where available (read-only).</li>
+<li><code>r</code>: Points to any PostgreSQL instance in the cluster (read).</li>
+</ul>
+<p>By default, CloudNativePG creates all the above services for a <code>Cluster</code>
+resource, with the following conventions:</p>
+<ul>
+<li>The name of the service follows this format: <code>&lt;CLUSTER_NAME&gt;-&lt;SERVICE_NAME&gt;</code>.</li>
+<li>All services are of type <code>ClusterIP</code>.</li>
+</ul>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Default service names are reserved for CloudNativePG usage.</p>
+</div>
+<p>While this setup covers most use cases for accessing PostgreSQL within the same
+Kubernetes cluster, CloudNativePG offers flexibility to:</p>
+<ul>
+<li>Disable the creation of the <code>ro</code> and/or <code>r</code> default services.</li>
+<li>Define your own services using the standard <code>Service</code> API provided by
+  Kubernetes.</li>
+</ul>
+<p>You can mix these two options.</p>
+<p>A common scenario arises when using CloudNativePG in database-as-a-service
+(DBaaS) contexts, where access to the database from outside the Kubernetes
+cluster is required. In such cases, you can create your own service of type
+<code>LoadBalancer</code>, if available in your Kubernetes environment.</p>
+<h2 id="disabling-default-services">Disabling Default Services</h2>
+<p>You can disable any or all of the <code>ro</code> and <code>r</code> default services through the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedServices"><code>managed.services.disabledDefaultServices</code> option</a>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The <code>rw</code> service is essential and cannot be disabled because CloudNativePG
+relies on it to ensure PostgreSQL replication.</p>
+</div>
+<p>For example, if you want to remove both the <code>ro</code> (read-only) and <code>r</code> (read)
+services, you can use this configuration:</p>
+<pre><code class="language-yaml"># &lt;snip&gt;
+managed:
+  services:
+    disabledDefaultServices: [&quot;ro&quot;, &quot;r&quot;]
+</code></pre>
+<h2 id="adding-your-own-services">Adding Your Own Services</h2>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>When defining your own services, you cannot use any of the default reserved
+service names that follow the convention <code>&lt;CLUSTER_NAME&gt;-&lt;SERVICE_NAME&gt;</code>. It is
+your responsibility to pick a unique name for the service in the Kubernetes
+namespace.</p>
+</div>
+<p>You can define a list of additional services through the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedService"><code>managed.services.additional</code> stanza</a>
+by specifying the service type (e.g., <code>rw</code>) in the <code>selectorType</code> field
+and optionally the <code>updateStrategy</code>.</p>
+<p>The <code>serviceTemplate</code> field gives you access to the standard Kubernetes API for
+the network <code>Service</code> resource, allowing you to define both the <code>metadata</code> and
+the <code>spec</code> sections as you like.</p>
+<p>You must provide a <code>name</code> to the service and avoid defining the <code>selector</code>
+field, as it is managed by the operator.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Service templates give you unlimited possibilities in terms of configuring
+network access to your PostgreSQL database. This translates into greater
+responsibility on your end to ensure that services work as expected.
+CloudNativePG has no control over the service configuration, except honoring
+the selector.</p>
+</div>
+<p>The <code>updateStrategy</code> field allows you to control how the operator
+updates a service definition. By default, the operator uses the <code>patch</code>
+strategy, applying changes directly to the service.
+Alternatively, the <code>replace</code> strategy deletes the existing service and
+recreates it from the template.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>The <code>replace</code> strategy will cause a service disruption with every
+change.  However, it may be necessary for modifying certain
+parameters that can only be set during service creation.</p>
+</div>
+<p>For example, if you want to have a single <code>LoadBalancer</code> service for your
+PostgreSQL database primary, you can use the following excerpt:</p>
+<pre><code class="language-yaml"># &lt;snip&gt;
+managed:
+  services:
+    additional:
+      - selectorType: rw
+        serviceTemplate:
+          metadata:
+            name: &quot;mydb-lb&quot;
+            labels:
+              test-label: &quot;true&quot;
+            annotations:
+              test-annotation: &quot;true&quot;
+          spec:
+            type: LoadBalancer
+</code></pre>
+<p>The above example also shows how to set metadata such as annotations and labels
+for the created service.</p>
+<h3 id="about-exposing-postgres-services">About Exposing Postgres Services</h3>
+<p>There are primarily three use cases for exposing your PostgreSQL service
+outside your Kubernetes cluster:</p>
+<ul>
+<li>Temporarily, for testing.</li>
+<li>Permanently, for <strong>DBaaS purposes</strong>.</li>
+<li>Prolonged period/permanently, for <strong>legacy applications</strong> that cannot be
+  easily or sustainably containerized and need to reside in a virtual machine
+or physical machine outside Kubernetes. This use case is very similar to DBaaS.</li>
+</ul>
+<p>Be aware that allowing access to a database from the public network could
+expose your database to potential attacks from malicious users.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Ensure you secure your database before granting external access, or make
+sure your Kubernetes cluster is only reachable from a private network.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../recovery/" class="btn btn-neutral float-left" title="Recovery"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../postgresql_conf/" class="btn btn-neutral float-right" title="PostgreSQL Configuration">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../recovery/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../postgresql_conf/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/sitemap.xml b/assets/documentation/1.27.0-rc1/sitemap.xml
new file mode 100644
index 000000000..0f8724efd
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/sitemap.xml
@@ -0,0 +1,3 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
+</urlset>
\ No newline at end of file
diff --git a/assets/documentation/1.27.0-rc1/sitemap.xml.gz b/assets/documentation/1.27.0-rc1/sitemap.xml.gz
new file mode 100644
index 0000000000000000000000000000000000000000..d110e53b4f6750c5e56345ee217dbbac9201b79a
GIT binary patch
literal 127
zcmV-_0D%7=iwFn+4~S?2|8r?{Wo=<_E_iKh04<9_3V<LG0Pnp*_MTg}inLoVs0V~e
z38~>)_WXo8&M?ytk3HC}0~zlG)Vu<wo${-3n}B&5%LWEn^jA1YN0wtp0`?fs4l$*~
h$wY0JleiBXlG-y6{t_$RLZ0!v<qJi$pFwQ^001BmHa`FW

literal 0
HcmV?d00001

diff --git a/assets/documentation/1.27.0-rc1/ssl_connections/index.html b/assets/documentation/1.27.0-rc1/ssl_connections/index.html
new file mode 100644
index 000000000..e760d1380
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/ssl_connections/index.html
@@ -0,0 +1,526 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Client TLS/SSL connections - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Client TLS/SSL connections";
+        var mkdocs_page_input_path = "ssl_connections.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Client TLS/SSL connections</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#issuing-a-new-certificate">Issuing a new certificate</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#testing-the-connection-via-a-tls-certificate">Testing the connection via a TLS certificate</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#about-tls-protocol-versions">About TLS protocol versions</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Client TLS/SSL connections</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="client-tlsssl-connections">Client TLS/SSL connections</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<div class="admonition seealso">
+<p class="admonition-title">Certificates</p>
+<p>See <a href="../certificates/">Certificates</a>
+for more details on how CloudNativePG supports TLS certificates.</p>
+</div>
+<p>The CloudNativePG operator was designed to work with TLS/SSL for both
+encryption in transit and authentication on the server and client sides.
+Clusters created using the CNPG operator come with a certification authority
+(CA) to create and sign TLS client certificates. Using the cnpg plugin for
+kubectl, you can issue a new TLS client certificate for authenticating a user
+instead of using passwords.</p>
+<p>These instructions for authenticating using TLS/SSL certificates assume you
+installed a cluster using the
+<a href="../samples/cluster-example-pg-hba.yaml">cluster-example-pg-hba.yaml</a> manifest.
+According to the convention-over-configuration paradigm, that file creates an
+<code>app</code> database that's owned by a user called app. (You can change this
+convention by way of the <code>initdb</code> configuration in the <code>bootstrap</code> section.)</p>
+<h2 id="issuing-a-new-certificate">Issuing a new certificate</h2>
+<div class="admonition seealso">
+<p class="admonition-title">About CNPG plugin for kubectl</p>
+<p>See the <a href="../kubectl-plugin/#certificates">Certificates in the CloudNativePG plugin</a>
+content for details on how to use the plugin for kubectl.</p>
+</div>
+<p>You can create a certificate for the app user in the <code>cluster-example</code>
+PostgreSQL cluster as follows:</p>
+<pre><code class="language-shell">kubectl cnpg certificate cluster-app \
+  --cnpg-cluster cluster-example \
+  --cnpg-user app
+</code></pre>
+<p>You can now verify the certificate:</p>
+<pre><code class="language-shell">kubectl get secret cluster-app \
+  -o jsonpath=&quot;{.data['tls\.crt']}&quot; \
+  | base64 -d | openssl x509 -text -noout \
+  | head -n 11
+</code></pre>
+<p>Output:</p>
+<pre><code class="language-console">
+Certificate:
+  Data:
+    Version: 3 (0x2)
+    Serial Number:
+      5d:e1:72:8a:39:9f:ce:51:19:9d:21:ff:1e:4b:24:5d
+    Signature Algorithm: ecdsa-with-SHA256
+    Issuer: OU = default, CN = cluster-example
+    Validity
+      Not Before: Mar 22 10:22:14 2021 GMT
+      Not After : Mar 22 10:22:14 2022 GMT
+    Subject: CN = app
+</code></pre>
+<p>As you can see, TLS client certificates by default are created with 90 days of
+validity, and with a simple CN that corresponds to the username in PostgreSQL.
+You can specify the validity and threshold values using the
+<code>EXPIRE_CHECK_THRESHOLD</code> and <code>CERTIFICATE_DURATION</code> parameters. This is
+necessary to leverage the <code>cert</code> authentication method for <code>hostssl</code> entries in
+<code>pg_hba.conf</code>.</p>
+<h2 id="testing-the-connection-via-a-tls-certificate">Testing the connection via a TLS certificate</h2>
+<p>Next, test this client certificate by configuring a demo client application
+that connects to your CloudNativePG cluster.</p>
+<p>The following manifest, called <code>cert-test.yaml</code>, creates a demo pod with a test
+application in the same namespace where your database cluster is running:</p>
+<pre><code class="language-yaml">apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cert-test
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: webtest
+  template:
+    metadata:
+      labels:
+        app: webtest
+    spec:
+      containers:
+        - image: ghcr.io/cloudnative-pg/webtest:1.7.0
+          name: cert-test
+          volumeMounts:
+            - name: secret-volume-root-ca
+              mountPath: /etc/secrets/ca
+            - name: secret-volume-app
+              mountPath: /etc/secrets/app
+          ports:
+            - containerPort: 8080
+          env:
+            - name: DATABASE_URL
+              value: &gt;
+                sslkey=/etc/secrets/app/tls.key
+                sslcert=/etc/secrets/app/tls.crt
+                sslrootcert=/etc/secrets/ca/ca.crt
+                host=cluster-example-rw.default.svc
+                dbname=app
+                user=app
+                sslmode=verify-full
+            - name: SQL_QUERY
+              value: SELECT 1
+          readinessProbe:
+            httpGet:
+              port: 8080
+              path: /tx
+      volumes:
+        - name: secret-volume-root-ca
+          secret:
+            secretName: cluster-example-ca
+            defaultMode: 0600
+        - name: secret-volume-app
+          secret:
+            secretName: cluster-app
+            defaultMode: 0600
+</code></pre>
+<p>This pod mounts secrets managed by the CloudNativePG operator, including:</p>
+<ul>
+<li><code>sslcert</code> – The TLS client public certificate.</li>
+<li><code>sslkey</code> – The TLS client certificate private key.</li>
+<li><code>sslrootcert</code> – The TLS CA certificate that signed the certificate on
+  the server to use to verify the identity of the instances.</li>
+</ul>
+<p>They're used to create the default resources that psql (and other libpq-based
+applications, like pgbench) requires to establish a TLS-encrypted connection to
+the Postgres database.</p>
+<p>By default, psql searches for certificates in the <code>~/.postgresql</code> directory of
+the current user, but you can use the <code>sslkey</code>, <code>sslcert</code>, and <code>sslrootcert</code>
+options to point libpq to the actual location of the cryptographic material.
+The content of these files is gathered from the secrets that were previously
+created by using the cnpg plugin for kubectl.</p>
+<p>Deploy the application:</p>
+<pre><code class="language-shell">kubectl create -f cert-test.yaml
+</code></pre>
+<p>Then use the created pod as the PostgreSQL client to validate the SSL
+connection and authentication using the TLS certificates you just created.</p>
+<p>A readiness probe was configured to ensure that the application is ready when
+the database server can be reached.</p>
+<p>You can verify that the connection works. To do so, execute an interactive
+<code>bash</code> inside the pod's container to run psql using the necessary options. The
+PostgreSQL server is exposed through the read-write Kubernetes service. Point
+the psql command to connect to this service:</p>
+<pre><code class="language-shell">kubectl exec -it cert-test -- bash -c &quot;psql
+'sslkey=/etc/secrets/app/tls.key sslcert=/etc/secrets/app/tls.crt
+sslrootcert=/etc/secrets/ca/ca.crt host=cluster-example-rw.default.svc dbname=app
+user=app sslmode=verify-full' -c 'select version();'&quot;
+</code></pre>
+<p>Output:</p>
+<pre><code class="language-console">                                        version
+--------------------------------------------------------------------------------------
+------------------
+PostgreSQL 17.5 on x86_64-pc-linux-gnu, compiled by gcc (GCC) 8.3.1 20191121 (Red Hat
+8.3.1-5), 64-bit
+(1 row)
+</code></pre>
+<h2 id="about-tls-protocol-versions">About TLS protocol versions</h2>
+<p>By default, the operator sets both <a href="https://www.postgresql.org/docs/current/runtime-config-connection.html#GUC-SSL-MIN-PROTOCOL-VERSION"><code>ssl_min_protocol_version</code></a>
+and <a href="https://www.postgresql.org/docs/current/runtime-config-connection.html#GUC-SSL-MAX-PROTOCOL-VERSION"><code>ssl_max_protocol_version</code></a>
+to <code>TLSv1.3</code>.</p>
+<p>This assumes that the PostgreSQL operand images include an OpenSSL library that
+supports the <code>TLSv1.3</code> version. If not, or if your client applications need a
+lower version number, you need to manually configure it in the PostgreSQL
+configuration as any other Postgres GUC.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../certificates/" class="btn btn-neutral float-left" title="Certificates"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../applications/" class="btn btn-neutral float-right" title="Connecting from an application">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../certificates/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../applications/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/storage/index.html b/assets/documentation/1.27.0-rc1/storage/index.html
new file mode 100644
index 000000000..f4ab1faf2
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/storage/index.html
@@ -0,0 +1,743 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Storage - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Storage";
+        var mkdocs_page_input_path = "storage.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Storage</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#backup-and-recovery">Backup and recovery</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#benchmarking-cloudnativepg">Benchmarking CloudNativePG</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#encryption-at-rest">Encryption at rest</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#persistent-volume-claim-pvc">Persistent Volume Claim (PVC)</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#configuration-via-a-storage-class">Configuration via a storage class</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#configuration-via-a-pvc-template">Configuration via a PVC template</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#volume-for-wal">Volume for WAL</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#volumes-for-tablespaces">Volumes for tablespaces</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#volume-expansion">Volume expansion</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#using-the-volume-expansion-kubernetes-feature">Using the volume expansion Kubernetes feature</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#re-creating-storage">Re-creating storage</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#static-provisioning-of-persistent-volumes">Static provisioning of persistent volumes</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#block-storage-considerations-cephlonghorn">Block storage considerations (Ceph/Longhorn)</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Storage</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="storage">Storage</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>Storage is the most critical component in a database workload.
+Storage must always be available, scale, perform well,
+and guarantee consistency and durability. The same expectations and
+requirements that apply to traditional environments, such as virtual machines
+and bare metal, are also valid in container contexts managed by Kubernetes.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>When it comes to dynamically provisioned storage,
+Kubernetes has its own specifics. These include <em>storage classes</em>, <em>persistent
+volumes</em>, and <em>Persistent Volume Claims (PVCs)</em>. You need to own these
+concepts, on top of all the valuable knowledge you've built over
+the years in terms of storage for database workloads on VMs and
+physical servers.</p>
+</div>
+<p>There are two primary methods of access to storage:</p>
+<ul>
+<li><strong>Network</strong> – Either directly or indirectly. (Think of an NFS volume locally
+  mounted on a host running Kubernetes.)</li>
+<li><strong>Local</strong> – Directly attached to the node where a pod is running. This also
+  includes directly attached disks on bare metal installations of Kubernetes.</li>
+</ul>
+<p>Network storage, which is the most common usage pattern in Kubernetes,
+presents the same issues of throughput and latency that you can
+experience in a traditional environment. These issues can be accentuated in
+a shared environment, where I/O contention with several applications
+increases the variability of performance results.</p>
+<p>Local storage enables shared-nothing architectures, which is more suitable
+for high transactional and very large database (VLDB) workloads, as it
+guarantees higher and more predictable performance.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Before you deploy a PostgreSQL cluster with CloudNativePG,
+ensure that the storage you're using is recommended for database
+workloads. We recommend clearly setting performance expectations by
+first benchmarking the storage using tools such as <a href="https://fio.readthedocs.io/en/latest/fio_doc.html">fio</a>
+and then the database using <a href="https://www.postgresql.org/docs/current/pgbench.html">pgbench</a>.</p>
+</div>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>CloudNativePG doesn't use <code>StatefulSet</code> for managing data persistence.
+Rather, it manages PVCs directly. If you want
+to know more, see
+<a href="../controller/">Custom pod controller</a>.</p>
+</div>
+<h2 id="backup-and-recovery">Backup and recovery</h2>
+<p>Since CloudNativePG supports volume snapshots for both backup and recovery,
+we recommend that you also consider this aspect when you choose your storage
+solution, especially if you manage very large databases.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>See the Kubernetes documentation for a list of all
+the supported <a href="https://kubernetes-csi.github.io/docs/drivers.html">container storage interface (CSI) drivers</a>
+that provide snapshot capabilities.</p>
+</div>
+<h2 id="benchmarking-cloudnativepg">Benchmarking CloudNativePG</h2>
+<p>Before deploying the database in production, we recommend that you benchmark
+CloudNativePG in a controlled Kubernetes environment. Follow the guidelines in
+<a href="../benchmarking/">Benchmarking</a>.</p>
+<p>Briefly, we recommend operating at two levels:</p>
+<ul>
+<li>Measuring the performance of the underlying storage using fio, with relevant
+  metrics for database workloads such as throughput for sequential reads, sequential
+  writes, random reads, and random writes</li>
+<li>Measuring the performance of the database using pgbench, the default benchmarking tool
+  distributed with PostgreSQL</li>
+</ul>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>You must measure both the storage and database performance before putting
+the database into production. These results are extremely valuable not just in
+the planning phase (for example, capacity planning). They are also valuable in
+the production lifecycle, particularly in emergency situations when you don't
+have time to run this kind of test. Databases change and evolve over time, and
+so does the distribution of data, potentially affecting performance. Knowing
+the theoretical maximum throughput of sequential reads or writes is extremely
+useful in those situations. This is true especially in shared-nothing contexts,
+where results don't vary due to the influence of external workloads.</p>
+<p>Know your system: benchmark it.</p>
+</div>
+<h2 id="encryption-at-rest">Encryption at rest</h2>
+<p>Encryption at rest is possible with CloudNativePG. The operator delegates that
+to the underlying storage class. See the storage class for
+information about this important security feature.</p>
+<h2 id="persistent-volume-claim-pvc">Persistent Volume Claim (PVC)</h2>
+<p>The operator creates a PVC for each PostgreSQL instance, with the goal of
+storing the <code>PGDATA</code>. It then mounts it into each pod.</p>
+<p>Additionally, it supports creating clusters with:</p>
+<ul>
+<li>A separate PVC on which to store PostgreSQL WAL, as explained in
+  <a href="#volume-for-wal">Volume for WAL</a></li>
+<li>Additional separate volumes reserved for PostgreSQL tablespaces, as explained
+  in <a href="../tablespaces/">Tablespaces</a></li>
+</ul>
+<p>In CloudNativePG, the volumes attached to a single PostgreSQL instance are
+defined as a <em>PVC group</em>.</p>
+<h2 id="configuration-via-a-storage-class">Configuration via a storage class</h2>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>CloudNativePG was designed to work interchangeably with all storage classes.
+As usual, we recommend properly benchmarking the storage class in a
+controlled environment before deploying to production.</p>
+</div>
+<p>The easiest way to configure the storage for a PostgreSQL class is to request
+storage of a certain size, like in the following example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: postgresql-storage-class
+spec:
+  instances: 3
+  storage:
+    size: 1Gi
+</code></pre>
+<p>Using the previous configuration, the generated PVCs are satisfied by the
+default storage class. If the target Kubernetes cluster has no default storage
+class, or even if you need your PVCs to be satisfied by a known storage class,
+you can set it into the custom resource:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: postgresql-storage-class
+spec:
+  instances: 3
+  storage:
+    storageClass: standard
+    size: 1Gi
+</code></pre>
+<h2 id="configuration-via-a-pvc-template">Configuration via a PVC template</h2>
+<p>To further customize the generated PVCs, you can provide a PVC template inside the custom resource,
+like in the following example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: postgresql-pvc-template
+spec:
+  instances: 3
+
+  storage:
+    pvcTemplate:
+      accessModes:
+        - ReadWriteOnce
+      resources:
+        requests:
+          storage: 1Gi
+      storageClassName: standard
+      volumeMode: Filesystem
+</code></pre>
+<h2 id="volume-for-wal">Volume for WAL</h2>
+<p>By default, PostgreSQL stores all its data in the so-called <code>PGDATA</code> (a
+directory). One of the core directories inside <code>PGDATA</code> is <code>pg_wal</code>, which
+contains the log of transactional changes that occurred in the database, in the
+form of segment files. (<code>pg_wal</code> is historically known as <code>pg_xlog</code> in
+PostgreSQL.)</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Normally, each segment is 16MB in size, but you can configure the size
+using the <code>walSegmentSize</code> option. This option is applied at cluster
+initialization time, as described in
+<a href="../bootstrap/#bootstrap-an-empty-cluster-initdb">Bootstrap an empty cluster</a>.</p>
+</div>
+<p>In most cases, having <code>pg_wal</code> on the same volume where <code>PGDATA</code>
+resides is fine. However, having WALs stored in a separate
+volume has a few benefits:</p>
+<ul>
+<li>
+<p><strong>I/O performance</strong> – By storing WAL files on different storage from <code>PGDATA</code>,
+  PostgreSQL can exploit parallel I/O for WAL operations (normally
+  sequential writes) and for data files (tables and indexes for example), thus
+  improving vertical scalability.</p>
+</li>
+<li>
+<p><strong>More reliability</strong> – By reserving dedicated disk space to WAL files, you
+  can be sure that exhausting space on the <code>PGDATA</code> volume
+  never interferes with WAL writing. This behavior ensures that your PostgreSQL primary
+  is correctly shut down.</p>
+</li>
+<li>
+<p><strong>Finer control</strong> – You can define the amount of space dedicated to both
+  <code>PGDATA</code> and <code>pg_wal</code>, fine tune <a href="https://www.postgresql.org/docs/current/wal-configuration.html">WAL
+  configuration</a>
+  and checkpoints, and even use a different storage class for cost optimization.</p>
+</li>
+<li>
+<p><strong>Better I/O monitoring</strong> – You can constantly monitor the load and disk usage
+  on both <code>PGDATA</code> and <code>pg_wal</code>. You can also set alerts that notify you in case,
+  for example, <code>PGDATA</code> requires resizing.</p>
+</li>
+</ul>
+<div class="admonition seealso">
+<p class="admonition-title">Write-Ahead Log (WAL)</p>
+<p>See <a href="https://www.postgresql.org/docs/current/wal.html">Reliability and the Write-Ahead Log</a>
+in the PostgreSQL documentation for more information.</p>
+</div>
+<p>You can add a separate volume for WAL using the <code>.spec.walStorage</code> option.
+It follows the same rules described for the <code>storage</code> field and provisions a
+dedicated PVC. For example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: separate-pgwal-volume
+spec:
+  instances: 3
+  storage:
+    size: 1Gi
+  walStorage:
+    size: 1Gi
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Removing <code>walStorage</code> isn't supported. Once added, a separate volume for
+WALs can't be removed from an existing Postgres cluster.</p>
+</div>
+<h2 id="volumes-for-tablespaces">Volumes for tablespaces</h2>
+<p>CloudNativePG supports declarative tablespaces. You can add one or more
+volumes, each dedicated to a single PostgreSQL tablespace.
+See <a href="../tablespaces/">Tablespaces</a> for details.</p>
+<h2 id="volume-expansion">Volume expansion</h2>
+<p>Kubernetes exposes an API allowing <a href="https://kubernetes.io/docs/concepts/storage/persistent-volumes/#expanding-persistent-volumes-claims">expanding PVCs</a>
+that's enabled by default. However, it needs to be supported by the underlying <code>StorageClass</code>.</p>
+<p>To check if a certain <code>StorageClass</code> supports volume expansion, you can read the <code>allowVolumeExpansion</code>
+field for your storage class:</p>
+<pre><code>$ kubectl get storageclass -o jsonpath='{$.allowVolumeExpansion}' premium-storage
+true
+</code></pre>
+<h3 id="using-the-volume-expansion-kubernetes-feature">Using the volume expansion Kubernetes feature</h3>
+<p>Given the storage class supports volume expansion, you can change the size
+requirement of the <code>Cluster</code>, and the operator applies the change to every PVC.</p>
+<p>If the <code>StorageClass</code> supports <a href="https://kubernetes.io/docs/concepts/storage/persistent-volumes/#resizing-an-in-use-persistentvolumeclaim">online volume resizing</a>,
+the change is immediately applied to the pods. If the underlying storage class
+doesn't support that, you must delete the pod to trigger the resize.</p>
+<p>The best way to proceed is to delete one pod at a time, starting from replicas
+and waiting for each pod to be back up.</p>
+<h3 id="re-creating-storage">Re-creating storage</h3>
+<p>If the storage class doesn't support volume expansion, you can still regenerate
+your cluster on different PVCs. Allocate new PVCs with increased storage and
+then move the database there. This operation is feasible only when the cluster
+contains more than one node.</p>
+<p>While you do that, you need to prevent the operator from changing the existing
+PVC by disabling the <code>resizeInUseVolumes</code> flag, like in the following example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: postgresql-pvc-template
+spec:
+  instances: 3
+
+  storage:
+    storageClass: standard
+    size: 1Gi
+    resizeInUseVolumes: False
+</code></pre>
+<p>To move the entire cluster to a different storage area, you need to re-create
+all the PVCs and all the pods. Suppose you have a cluster with three replicas,
+like in the following example:</p>
+<pre><code>$ kubectl get pods
+NAME                READY   STATUS    RESTARTS   AGE
+cluster-example-1   1/1     Running   0          2m37s
+cluster-example-2   1/1     Running   0          2m22s
+cluster-example-3   1/1     Running   0          2m10s
+</code></pre>
+<p>To re-create the cluster using different PVCs, you can edit the cluster
+definition to disable <code>resizeInUseVolumes</code>. Then re-create every instance in a
+different PVC.</p>
+<p>For example, re-create the storage for <code>cluster-example-3</code>:</p>
+<pre><code>$ kubectl delete pvc/cluster-example-3 pod/cluster-example-3
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>If you created a dedicated WAL volume, both PVCs must be deleted during
+this process. The same procedure applies if you want to regenerate the WAL
+volume PVC. You can do this by also disabling <code>resizeInUseVolumes</code> for the
+<code>.spec.walStorage</code> section.</p>
+</div>
+<p>For example, if a PVC dedicated to WAL storage is present:</p>
+<pre><code>$ kubectl delete pvc/cluster-example-3 pvc/cluster-example-3-wal pod/cluster-example-3
+</code></pre>
+<p>Having done that, the operator orchestrates creating another replica with a
+resized PVC:</p>
+<pre><code>$ kubectl get pods
+NAME                           READY   STATUS      RESTARTS   AGE
+cluster-example-1              1/1     Running     0          5m58s
+cluster-example-2              1/1     Running     0          5m43s
+cluster-example-4-join-v2      0/1     Completed   0          17s
+cluster-example-4              1/1     Running     0          10s
+</code></pre>
+<h2 id="static-provisioning-of-persistent-volumes">Static provisioning of persistent volumes</h2>
+<p>CloudNativePG was designed to work with dynamic volume provisioning. This
+capability allows storage volumes to be created on demand when requested by
+users by way of storage classes and PVC templates.
+See <a href="#re-creating-storage">Re-creating storage</a>.</p>
+<p>However, in some cases, Kubernetes administrators prefer to manually create
+storage volumes and then create the related <code>PersistentVolume</code> objects for
+their representation inside the Kubernetes cluster. This is also known as
+<em>pre-provisioning</em> of volumes.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>We recommend that you avoid pre-provisioning volumes, as it has an effect
+on the high availability and self-healing capabilities of the operator. It
+breaks the fully declarative model on which CloudNativePG was built.</p>
+</div>
+<p>To use a pre-provisioned volume in CloudNativePG:</p>
+<ol>
+<li>Manually create the volume outside Kubernetes.</li>
+<li>Create the <code>PersistentVolume</code> object to match this volume using the
+   correct parameters as required by the actual CSI driver (that is, <code>volumeHandle</code>,
+   <code>fsType</code>, <code>storageClassName</code>, and so on).</li>
+<li>Create the Postgres <code>Cluster</code> using, for each storage section, a coherent
+   <a href="./#configuration-via-a-pvc-template"><code>pvcTemplate</code></a>
+   section that can help Kubernetes match the <code>PersistentVolume</code>
+   and enable CloudNativePG to create the needed <code>PersistentVolumeClaim</code>.</li>
+</ol>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>With static provisioning, it's your responsibility to ensure that Postgres
+pods can be correctly scheduled by Kubernetes where a pre-provisioned volume
+exists. (The scheduling configuration is based on the affinity rules of your
+cluster.) Make sure you check for any pods stuck in <code>Pending</code> after you deploy
+the cluster. If the condition persists, investigate why it's happening.</p>
+</div>
+<h2 id="block-storage-considerations-cephlonghorn">Block storage considerations (Ceph/Longhorn)</h2>
+<p>Most block storage solutions in Kubernetes, such as Longhorn and Ceph,
+recommend having multiple replicas of a volume to enhance resiliency. This
+approach works well for workloads that lack built-in resiliency.</p>
+<p>However, CloudNativePG integrates this resiliency directly into the Postgres
+<code>Cluster</code> through the number of instances and the persistent volumes attached
+to them, as explained in <a href="../architecture/#synchronizing-the-state">"Synchronizing the state"</a>.</p>
+<p>As a result, defining additional replicas at the storage level can lead to
+write amplification, unnecessarily increasing disk I/O and space usage.</p>
+<p>For CloudNativePG usage, consider reducing the number of replicas at the block storage
+level to one, while ensuring that no single point of failure (SPoF) exists at
+the storage level for the entire <code>Cluster</code> resource. This typically means
+ensuring that a single storage host—and ultimately, a physical disk—does not
+host blocks from different instances of the same <code>Cluster</code>, in alignment with
+the broader <em>shared-nothing architecture</em> principle.</p>
+<p>In Longhorn, you can mitigate this risk by enabling strict-local data locality
+when creating a custom storage class. Detailed instructions for creating a
+volume with strict-local data locality are available <a href="https://longhorn.io/docs/1.7.0/high-availability/data-locality/">here</a>.
+This setting ensures that a pod’s data volume resides on the same node as the
+pod itself.</p>
+<p>Additionally, your Postgres <code>Cluster</code> should have <a href="../scheduling/#isolating-postgresql-workloads">pod anti-affinity rules</a>
+in place to ensure that the operator deploys pods across different nodes,
+allowing Longhorn to place the data volumes on the corresponding hosts. If
+needed, you can manually relocate volumes in Longhorn by temporarily setting
+the volume replica count to 2, reducing it afterward, and then removing the old
+replica. If a host becomes corrupted, you can use the <a href="../kubectl-plugin/#destroy"><code>cnpg</code> plugin to destroy</a>
+the affected instance. CloudNativePG will then recreate the instance on another
+host and replicate the data.</p>
+<p>In Ceph, this can be configured through CRUSH rules. The documentation for
+configuring CRUSH rules is available
+<a href="https://rook.io/docs/rook/latest-release/CRDs/Cluster/external-cluster/topology-for-external-mode/?h=topology">here</a>.
+These rules aim to ensure one volume per pod per node. You can also relocate
+volumes by importing them into a different pool.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../cluster_conf/" class="btn btn-neutral float-left" title="Instance pod configuration"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../labels_annotations/" class="btn btn-neutral float-right" title="Labels and annotations">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../cluster_conf/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../labels_annotations/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/supported_releases/index.html b/assets/documentation/1.27.0-rc1/supported_releases/index.html
new file mode 100644
index 000000000..ffbaa402d
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/supported_releases/index.html
@@ -0,0 +1,699 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Supported releases - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Supported releases";
+        var mkdocs_page_input_path = "supported_releases.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Supported releases</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#support-policy">Support Policy</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#naming-scheme">Naming Scheme</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#support-status-of-cloudnativepg-releases">Support status of CloudNativePG releases</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#supported-postgresql-versions">Supported PostgreSQL versions</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#upcoming-releases">Upcoming releases</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#old-releases">Old releases</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#what-we-mean-by-support">What we mean by support</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Supported releases</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="supported-releases">Supported releases</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<!-- Inspired by https://github.com/istio/istio.io/blob/933b896c/content/en/docs/releases/supported-releases/index.md -->
+<!-- Inspired by https://github.com/cert-manager/website/blob/009c5e41/content/docs/installation/supported-releases.md -->
+
+<p><em>This page lists the status, timeline and policy for currently supported
+releases of CloudNativePG</em>.</p>
+<p>We are committed to providing support for the latest minor release, with a
+dedication to launching a new minor release every three months. Each release
+remains fully supported until reaching its designated "End of Life" date, as
+outlined in the <a href="#support-status-of-cloudnativepg-releases">support status table for CloudNativePG releases</a>.
+This includes an additional 3-month assistance window to facilitate seamless
+upgrade planning.</p>
+<p>Supported releases of CloudNativePG include releases that are in the active
+maintenance window and are patched for security and bug fixes.</p>
+<p>Subsequent patch releases on a minor release contain backward-compatible changes only.</p>
+<ul>
+<li><a href="#support-policy">Support policy</a></li>
+<li><a href="#naming-scheme">Naming scheme</a></li>
+<li><a href="#support-status-of-cloudnativepg-releases">Support status of CloudNativePG releases</a></li>
+<li><a href="#what-we-mean-by-support">What we mean by support</a></li>
+</ul>
+<h2 id="support-policy">Support Policy</h2>
+<p>CloudNativePG produces new builds for each commit.</p>
+<p>Approximately every two months, we create a minor release that undergoes
+several additional tests and a thorough release qualification process. We
+release patch versions for issues found in supported minor releases.</p>
+<p>Before an official release, at least one Release Candidate (RC) is built for
+<a href="../preview_version/">preview testing</a>.
+Additional release candidates may be issued if new bugs are discovered.
+The Release Candidates are announced on the Slack channel to encourage
+community testing before the final release.
+The maintainers provide 1-2 weeks for community testing, and if no objections
+are raised, the final release is announced.</p>
+<p>Different types of releases represent varying levels of product quality and
+assistance from the CloudNativePG community. For details on the support
+provided by the community, see <a href="#what-we-mean-by-support">What we mean by support</a>.</p>
+<table>
+<thead>
+<tr>
+<th>Type</th>
+<th>Support level</th>
+<th>Quality and recommended Use</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td>Development Build</td>
+<td>No support</td>
+<td>Dangerous, might not be fully reliable. Useful to experiment with.</td>
+</tr>
+<tr>
+<td>Release Candidate</td>
+<td>No support</td>
+<td><a href="../preview_version/">Preview version: Not production-ready</a>. Released for experimentation and testing.</td>
+</tr>
+<tr>
+<td>Minor Release</td>
+<td>Support provided until 3 months after the N+1 minor release (ex. 1.23 supported until 3 months after 1.24.0 is released)</td>
+<td></td>
+</tr>
+<tr>
+<td>Patch</td>
+<td>Same as the corresponding minor release</td>
+<td>Users are encouraged to adopt patch releases as soon as they are available for a given release.</td>
+</tr>
+<tr>
+<td>Security Patch</td>
+<td>Same as a patch, however, it doesn't contain any additional code other than the security fix from the previous patch</td>
+<td>Given the nature of security fixes, users are <strong>strongly</strong> encouraged to adopt security patches after release.</td>
+</tr>
+</tbody>
+</table>
+<p>You can find available releases on the <a href="https://github.com/cloudnative-pg/cloudnative-pg/releases">releases page</a>.</p>
+<p>You can find high-level more information for each minor and patch release in
+the <a href="../release_notes/">release notes</a>.</p>
+<p>Sure, here’s an improved version of the naming scheme section:</p>
+<h2 id="naming-scheme">Naming Scheme</h2>
+<p>Our naming scheme follows <a href="https://semver.org/">Semantic Versioning 2.0.0</a> and
+is structured as follows:</p>
+<pre><code>&lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;
+</code></pre>
+<ul>
+<li><code>&lt;minor&gt;</code> is incremented for each release.</li>
+<li><code>&lt;patch&gt;</code> counts the number of patches for the current <code>&lt;minor&gt;</code> release,
+  representing small changes relative to the <code>&lt;minor&gt;</code> release.</li>
+</ul>
+<p>Release candidates are indicated by an additional <code>-&lt;pre-release&gt;</code> identifier
+following the patch version, as specified in <a href="https://semver.org/#spec-item-9">Semantic Versioning 2.0.0 - item #9</a>.</p>
+<p>Git tags for versions are prefixed with <code>v</code>.</p>
+<h2 id="support-status-of-cloudnativepg-releases">Support status of CloudNativePG releases</h2>
+<!-- TODO: Complete dates and versions below -->
+<table>
+<thead>
+<tr>
+<th>Version</th>
+<th>Currently supported</th>
+<th>Release date</th>
+<th>End of life</th>
+<th>Supported Kubernetes versions</th>
+<th>Tested, but not supported</th>
+<th>Supported Postgres versions</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td>1.27.x</td>
+<td>No (preview)</td>
+<td>~ Aug 2025</td>
+<td>~ Feb 2026</td>
+<td>1.31, 1.32, 1.33</td>
+<td>1.30, 1.29</td>
+<td>13 - 17</td>
+</tr>
+<tr>
+<td>1.26.x</td>
+<td>Yes</td>
+<td>May 23, 2025</td>
+<td>~ Nov 2025</td>
+<td>1.30, 1.31, 1.32, 1.33</td>
+<td>1.29</td>
+<td>13 - 17</td>
+</tr>
+<tr>
+<td>1.25.x</td>
+<td>Yes</td>
+<td>Dec 23, 2024</td>
+<td>22 Aug 2025</td>
+<td>1.29, 1.30, 1.31, 1.32</td>
+<td>1.33</td>
+<td>13 - 17</td>
+</tr>
+<tr>
+<td>main</td>
+<td>No, development only</td>
+<td></td>
+<td></td>
+<td></td>
+<td></td>
+<td>13 - 17</td>
+</tr>
+</tbody>
+</table>
+<p><sup>1</sup> <em>PostgreSQL 13 will be supported until November 13, 2025.</em></p>
+<p>The list of supported Kubernetes versions in the table depends on what
+the CloudNativePG maintainers think is reasonable to support and to test.</p>
+<p>Currently, the CloudNativePG community does not officially support or test any
+Kubernetes distributions beyond the standard/vanilla one - such as Red Hat
+OpenShift. This may change in the future, and if it does, the CloudNativePG
+maintainers will update the official policy accordingly.</p>
+<p>If you plan to deploy CloudNativePG on Red Hat OpenShift, you can use the
+<a href="https://catalog.redhat.com/software/container-stacks/detail/653fd4035eece8598f66d97b">certified operator provided by EDB</a>,
+which comes with full support from EDB.</p>
+<h3 id="supported-postgresql-versions">Supported PostgreSQL versions</h3>
+<p>The list of supported Postgres versions in the previous table generally depends on
+what PostgreSQL versions were supported by the community at the time the minor
+version of CloudNativePG was released.</p>
+<p>See the PostgreSQL <a href="https://www.postgresql.org/support/versioning/">Versioning Policy</a>
+page for more information about supported versions.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Starting from November 14, 2024, <a href="https://www.postgresql.org/about/news/postgresql-164-158-1413-1316-1220-and-17-beta-3-released-2910/">Postgres 12 is no longer supported</a>.</p>
+</div>
+<p>We also recommend that you regularly update your PostgreSQL operand images and
+use the latest minor release for the major version you have in use, as not upgrading
+is riskier than upgrading. As a result, when opening an issue with an older minor
+version of PostgreSQL, we might not be able to help you.</p>
+<h2 id="upcoming-releases">Upcoming releases</h2>
+<table>
+<thead>
+<tr>
+<th>Version</th>
+<th>Release date</th>
+<th>End of life</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td>1.28.0</td>
+<td>~ Nov, 2025</td>
+<td>~ May, 2026</td>
+</tr>
+<tr>
+<td>1.29.0</td>
+<td>~ Feb, 2026</td>
+<td>~ Aug, 2026</td>
+</tr>
+<tr>
+<td>1.30.0</td>
+<td>~ May, 2026</td>
+<td>~ Nov, 2026</td>
+</tr>
+</tbody>
+</table>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Feature freeze occurs 1-2 weeks before the release, at which point a
+release candidate version is built and distributed for testing, as described
+earlier.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Dates in the future are uncertain and might change. This applies to Kubernetes versions, too.
+Updates and changes on the release schedule will be communicated in the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/discussions/categories/release-updates">Release updates</a>
+discussion in the main GitHub repository.</p>
+</div>
+<h2 id="old-releases">Old releases</h2>
+<table>
+<thead>
+<tr>
+<th>Version</th>
+<th>Release date</th>
+<th>End of life</th>
+<th>Compatible Kubernetes versions</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td>1.24.x</td>
+<td>Aug 22, 2024</td>
+<td>May 23, 2025</td>
+<td>1.28, 1.29, 1.30, 1.31</td>
+</tr>
+<tr>
+<td>1.23.x</td>
+<td>April 24, 2024</td>
+<td>November 24, 2024</td>
+<td>1.27, 1.28, 1.29</td>
+</tr>
+<tr>
+<td>1.22.x</td>
+<td>December 21, 2023</td>
+<td>July 24, 2024</td>
+<td>1.26, 1.27, 1.28</td>
+</tr>
+<tr>
+<td>1.21.x</td>
+<td>October 12, 2023</td>
+<td>Jun 12, 2024</td>
+<td>1.25, 1.26, 1.27, 1.28</td>
+</tr>
+<tr>
+<td>1.20.x</td>
+<td>April 27, 2023</td>
+<td>January 21, 2024</td>
+<td>1.24, 1.25, 1.26, 1.27</td>
+</tr>
+<tr>
+<td>1.19.x</td>
+<td>February 14, 2023</td>
+<td>November 3, 2023</td>
+<td>1.23, 1.24, 1.25, 1.26</td>
+</tr>
+<tr>
+<td>1.18.x</td>
+<td>Nov 10, 2022</td>
+<td>June 12, 2023</td>
+<td>1.23, 1.24, 1.25, 1.26, 1.27</td>
+</tr>
+<tr>
+<td>1.17.x</td>
+<td>September 6, 2022</td>
+<td>March 20, 2023</td>
+<td>1.22, 1.23, 1.24</td>
+</tr>
+<tr>
+<td>1.16.x</td>
+<td>July 7, 2022</td>
+<td>December 21, 2022</td>
+<td>1.22, 1.23, 1.24</td>
+</tr>
+<tr>
+<td>1.15.x</td>
+<td>April 21, 2022</td>
+<td>October 6, 2022</td>
+<td>1.21, 1.22, 1.23</td>
+</tr>
+</tbody>
+</table>
+<h2 id="what-we-mean-by-support">What we mean by support</h2>
+<p>Our support window is roughly five months for each release branch (latest
+minor release, plus 3 additional months), given that we produce a new final
+release every two months.</p>
+<p>In the following diagram, <code>release-1.23</code> is an example of a release branch.</p>
+<p>For example, if the latest release is <code>v1.23.0</code>, you can expect a supplementary
+3-month support period for the preceding release, <code>v1.22.x</code>.</p>
+<p>Only the last patch release of each branch is supported.</p>
+<pre><code class="language-diagram">------+---------------------------------------------&gt; main (trunk development)
+       \             \
+        \             \
+         \             \             v1.23.0
+          \             \            Apr 24, 2024                   ^
+           \             \----------+---------------&gt; release-1.23  |
+            \                                                       | SUPPORTED
+             \                                                      | RELEASES
+              \   v1.22.0                                           | = last minor
+               \  Dec 21, 2023                                      |   release +
+                +-------------------+---------------&gt; release-1.22  |   3 months
+                                                                    v
+</code></pre>
+<p>We offer two types of support:</p>
+<dl>
+<dt>Technical support</dt>
+<dd>Technical assistance is offered on a best-effort basis and is limited to
+supported releases only.  For help, you can reach out to the community via the
+<a href="https://cloud-native.slack.com/archives/C08MAUJ7NPM">#cloudnativepg-users</a>
+channel on the CNCF Slack workspace (if you're not yet a member, you can
+<a href="https://communityinviter.com/apps/cloud-native/cncf">join the workspace</a>).
+Alternatively, you can post your questions in
+the <a href="https://github.com/cloudnative-pg/cloudnative-pg/discussions">GitHub Discussions</a>
+section of the CloudNativePG repository.</dd>
+<dt>Security and bug fixes</dt>
+<dd>We backport important bug fixes — including security fixes - to all
+currently supported releases. Before backporting a patch, we ask ourselves:
+<em>"Does this backport improve <code>CloudNativePG</code>, bearing in mind that we really
+value stability for already-released versions?"</em></dd>
+</dl>
+<p>If you’re looking for professional support, please refer to the
+<a href="https://cloudnative-pg.io/support/">Support page on our website</a>.
+The vendors listed there may offer service level agreements (SLA), including
+extended support periods and additional services.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../cloudnative-pg.v1/" class="btn btn-neutral float-left" title="API Reference"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../preview_version/" class="btn btn-neutral float-right" title="Preview Versions">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../cloudnative-pg.v1/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../preview_version/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/tablespaces/index.html b/assets/documentation/1.27.0-rc1/tablespaces/index.html
new file mode 100644
index 000000000..d950bb53d
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/tablespaces/index.html
@@ -0,0 +1,685 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Tablespaces - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Tablespaces";
+        var mkdocs_page_input_path = "tablespaces.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Tablespaces</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#declarative-tablespaces">Declarative tablespaces</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#using-declarative-tablespaces">Using declarative tablespaces</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#storage-classes-and-tablespaces">Storage classes and tablespaces</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#tablespace-ownership">Tablespace ownership</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#backup-and-recovery">Backup and recovery</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#replica-clusters">Replica clusters</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#temporary-tablespaces">Temporary tablespaces</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#kubectl-plugin-support">kubectl plugin support</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#limitations">Limitations</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Tablespaces</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="tablespaces">Tablespaces</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>A tablespace is a robust and widely embraced feature in database
+management systems. It offers a powerful means to enhance the vertical
+scalability of a database by decoupling the physical and logical modeling of
+data. Essentially, it serves as a technique for physical database modeling,
+enabling the efficient distribution of I/O operations across multiple volumes
+on distinct storage. It thereby optimizes performance through parallel on-disk
+read/write operations.</p>
+<p>In the context of the database industry, tablespaces play a strategic role,
+particularly when paired with table partitioning, a logical database modeling
+technique. They prove instrumental in managing large-scale databases and are
+also used for tasks such as separating tables from indexes or executing
+temporary operations.</p>
+<p>Tablespaces in PostgreSQL have been playing a pivotal role since 2005 (version
+8.0), while declarative partitioning was introduced in 2017 (version 10).
+Consequently, tablespaces are seamlessly integrated into all supported releases
+of PostgreSQL. Quoting from the
+<a href="https://www.postgresql.org/docs/current/manage-ag-tablespaces.html">PostgreSQL documentation on tablespaces</a>:</p>
+<blockquote>
+<p>By using tablespaces, an administrator can control the disk layout of a
+PostgreSQL installation. This is useful in at least two ways.</p>
+<ul>
+<li>First, if the partition or volume on which the cluster was initialized runs
+  out of space and cannot be extended, a tablespace can be created on a
+  different partition and used until the system can be reconfigured.</li>
+<li>Second, tablespaces allow an administrator to use knowledge of the usage
+  pattern of database objects to optimize performance.</li>
+</ul>
+</blockquote>
+<h2 id="declarative-tablespaces">Declarative tablespaces</h2>
+<p>CloudNativePG provides support for PostgreSQL tablespaces through <em>declarative
+tablespaces</em>, operating at two distinct levels:</p>
+<ul>
+<li>Kubernetes, managing persistent volume claims, identically to how PGDATA and
+  WAL volumes are handled</li>
+<li>PostgreSQL, managing the <code>TABLESPACE</code> global objects in the PostgreSQL
+  instance</li>
+</ul>
+<p>Being a part of the Kubernetes ecosystem, CloudNativePG's declarative
+tablespaces are implemented by leveraging persistent volume claims (and persistent
+volumes). Each tablespace defined in the cluster is housed in its own
+persistent volume. CloudNativePG takes care of generating the PVCs. It mounts
+the required volumes in the instance pods in normalized locations and ensures
+replicas are ready to support tablespaces before activating them in the
+primary.</p>
+<p>You can set up tablespaces when creating the cluster or add them later,
+provided the storage is available when requested. Currently, you can't
+remove them. However, this limitation will be addressed in a future minor or patch version
+of CloudNativePG.</p>
+<h2 id="using-declarative-tablespaces">Using declarative tablespaces</h2>
+<p>Using declarative tablespaces is straightforward. You can find a full example in
+<a href="../samples/cluster-example-with-tablespaces.yaml"><code>cluster-example-with-tablespaces.yaml</code></a>.</p>
+<p>To use them, use the new <code>tablespaces</code> stanza on a new or existing <code>Cluster</code> resource:</p>
+<pre><code class="language-yaml">spec:
+  instances: 3
+
+  # ...
+
+  tablespaces:
+    - name: tbs1
+      storage:
+        size: 1Gi
+    - name: tbs2
+      storage:
+        size: 2Gi
+    - name: tbs3
+      storage:
+        size: 2Gi
+</code></pre>
+<p>Each tablespace has its own storage section where you can configure the size and the
+storage class of the generated PVC. The administrator can thus
+plan to use different storage classes for different kinds of workloads, as
+explained in <a href="#storage-classes-and-tablespaces">Storage classes and tablespaces</a>.</p>
+<p>CloudNativePG creates the persistent volume claims for each instance
+in the high-availability Postgres cluster. It mounts them in each pod when they
+have been provisioned. Then, it ensures that the <code>tbs1</code>, <code>tbs2</code>, and <code>tbs3</code>
+tablespaces are created on the primary PostgreSQL instance using the <code>CREATE
+TABLESPACE</code> command. This process is quick, and you see this reflected in
+Postgres:</p>
+<pre><code class="language-txt">app=# SELECT oid, spcname FROM pg_tablespace;
+  oid  |      spcname       
+-------+--------------------
+  1663 | pg_default
+  1664 | pg_global
+ 16387 | tbs1
+ 16388 | tbs2
+ 16389 | tbs3
+(5 rows)
+</code></pre>
+<p>You can start using them right away:</p>
+<pre><code class="language-txt">app=# CREATE TABLE fibonacci(num INTEGER) TABLESPACE tbs1;
+CREATE TABLE
+</code></pre>
+<p>The cluster status has a section for tablespaces:</p>
+<pre><code class="language-yaml">status:
+
+  &lt;- snipped -&gt;
+  tablespacesStatus:
+  - name: atablespace
+    state: reconciled
+  - name: another_tablespace
+    state: reconciled
+  - name: tablespacea1
+    state: reconciled
+</code></pre>
+<h2 id="storage-classes-and-tablespaces">Storage classes and tablespaces</h2>
+<p>You can use different storage classes for your tablespaces, just as you can for PGDATA and
+WAL volumes. This is a convenient way of optimizing your resources,
+balancing performance and costs of your storage based on data access usage and
+expectations.</p>
+<p>This example helps to explain the feature:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: yardbirds
+spec:
+  instances: 3
+
+  storage:
+    size: 10Gi
+  walStorage:
+    size: 10Gi
+  tablespaces:
+    - name: current
+      storage:        
+        size: 100Gi
+        storageClass: fastest
+    - name: this_year
+      storage:
+        size: 500Gi
+        storageClass: balanced
+</code></pre>
+<p>The <code>yardbirds</code> cluster example requests 4 persistent volume claims using
+3 different storage classes:</p>
+<ul>
+<li>Default storage class – Used by the <code>PGDATA</code> and WAL volumes.</li>
+<li><code>fastest</code> – Used by the <code>current</code> tablespace to store the most active and
+  demanding set of data in the database.</li>
+<li><code>balanced</code> – Used by the <code>this_year</code> tablespace to store older partitions of
+  data that are rarely accessed by users and where performance expectations
+  aren't the highest.</li>
+</ul>
+<p>You can then take advantage of horizontal table partitioning and create
+the current month's table (for example, facts for December 2023) in the <code>current</code>
+tablespace:</p>
+<pre><code class="language-sql">CREATE TABLE facts_202312 PARTITION OF facts
+    FOR VALUES FROM ('2023-12-01') TO ('2024-01-01')
+    TABLESPACE current;
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>This example assumes you're familiar with
+<a href="https://www.postgresql.org/docs/current/ddl-partitioning.html">PostgreSQL declarative partitioning</a>.</p>
+</div>
+<h2 id="tablespace-ownership">Tablespace ownership</h2>
+<p>By default, unless otherwise specified, tablespaces are owned by the <code>app</code>
+application user, as defined in <code>.spec.bootstrap.initdb.owner</code>. See
+<a href="../bootstrap/#bootstrap-an-empty-cluster-initdb">Bootstrap a new cluster</a> for
+details.
+This default behavior works in most microservice database use cases.</p>
+<p>You can set the owner of a tablespace in the <code>owner</code> stanza, for example
+the <code>postgres</code> user, like in the following excerpt:</p>
+<pre><code class="language-yaml">  # ...
+  tablespaces:
+    - name: clapton
+      owner:
+        name: postgres
+      storage:
+        size: 1Gi
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>If you change the ownership of a tablespace, make sure that you're using
+an existing role. Otherwise, the status of the cluster reports the
+issue and stops reconciling tablespaces until fixed. It's your responsibility
+to monitor the status and the log and to promptly intervene by fixing the issue.</p>
+</div>
+<p>If you define a tablespace with an owner that doesn't exist, CloudNativePG can't
+create the tablespace and reflects this in the cluster status:</p>
+<pre><code class="language-yaml">spec:
+  instances: 3
+
+  # ...
+
+  tablespaces:
+    - name: tbs1
+      storage:
+        size: 1Gi
+    - name: tbs2
+      storage:
+        size: 2Gi
+    - name: tbs3
+      owner:
+        name: badhombre
+      storage:
+        size: 2Gi
+        status:
+
+  &lt;- snipped -&gt;
+  tablespacesStatus:
+  - name: tbs1
+    status: reconciled
+  - name: tbs2
+    status: reconciled
+  - error: 'while creating tablespace tbs3: ERROR: role &quot;badhombre&quot; does
+      not exist (SQLSTATE 42704)'
+    name: tbs3
+    status: pending
+</code></pre>
+<h2 id="backup-and-recovery">Backup and recovery</h2>
+<p>CloudNativePG handles backup of tablespaces (and the relative
+tablespace map) both on object stores and volume snapshots.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>By default, backups are taken from replica nodes. A backup taken immediately
+after creating tablespaces in a cluster can result in an
+incomplete view of the tablespaces from the replica and thus an incomplete
+backup. The lag will be resolved in a maximum of 5 minutes, with the next
+reconciliation.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>When you add or remove a tablespace in an existing cluster, recovery
+from WAL will fail until you take a new base backup.</p>
+</div>
+<p>Once a cluster with tablespaces has a base backup, you can restore a
+new cluster from it. When it comes to the recovery side, it's your
+responsibility to ensure that the <code>Cluster</code> definition of the recovered
+database contains the exact list of tablespaces.</p>
+<h2 id="replica-clusters">Replica clusters</h2>
+<p>Replica clusters must have the same tablespace definition as their origin.
+The reason is that tablespace management commands like <code>CREATE TABLESPACE</code>
+are WAL logged and are replayed by any physical replication client (streaming or by way of WAL shipping).</p>
+<p>It's your responsibility to ensure that replica clusters have the same list of
+tablespaces, with the same name. Storage class and size might vary.</p>
+<p>For example:</p>
+<pre><code class="language-yaml">spec:
+
+  # ...
+  bootstrap:
+    recovery:
+      # ... your selected recovery method
+
+  tablespaces:
+    - name: tbs1
+      storage:
+        size: 1Gi
+    - name: tbs2
+      storage:
+        size: 2Gi
+    - name: tbs3
+      storage:
+        size: 2Gi
+</code></pre>
+<h2 id="temporary-tablespaces">Temporary tablespaces</h2>
+<p>PostgreSQL allows you to define one or more temporary tablespaces to create
+temporary objects (temporary tables and indexes on temporary tables) when a
+<code>CREATE</code> command doesn't explicitly specify a tablespace, and to create temporary
+files for purposes such as sorting large data sets. When no temporary
+tablespace is specified, PostgreSQL uses the default tablespace of a database, which is
+currently the main <code>PGDATA</code> volume.</p>
+<p>When you specify more than one temporary tablespace, PostgreSQL randomly picks
+one the first time a temporary object needs to be created in a transaction.
+Then it sequentially iterates through the list.</p>
+<p>Temporary tablespaces also work like regular tablespaces with regard to backups.</p>
+<p>CloudNativePG provides the <code>.spec.tablespaces[*].temporary</code> option to
+determine whether to add a tablespace to the <code>temp_tablespaces</code>
+PostgreSQL parameter and thus become eligible to store temporary data that
+doesn't have an explicit tablespace assignment.</p>
+<pre><code class="language-yaml">spec:
+  [...]
+  tablespaces:
+    - name: atablespace
+      storage:
+        size: 1Gi
+      temporary: true
+</code></pre>
+<p>They can be created at initialization time or added later, requiring a
+rolling update. The <code>temporary: true/false</code> option adds or removes the
+tablespace name to or from the list of tablespaces in the <code>temp_tablespaces</code>
+option. This change doesn't require a restart of PostgreSQL.</p>
+<p>Although temporary tablespaces can also work as regular tablespaces (meaning
+that users can also host regular data on them while using them for
+temporary operations), we recommend that you don't mix the two workloads.</p>
+<p>See the <a href="https://www.postgresql.org/docs/current/runtime-config-client.html#GUC-TEMP-TABLESPACES">PostgreSQL documentation on <code>temp_tablespaces</code></a>
+for details.</p>
+<h2 id="kubectl-plugin-support">kubectl plugin support</h2>
+<p>The <a href="../kubectl-plugin/#status">kubectl status</a> plugin includes a section
+dedicated to tablespaces that offers a convenient overview, including
+tablespace status, owner, temporary flag, and any errors:</p>
+<pre><code class="language-yaml">[...]
+
+Tablespaces status
+Tablespace          Owner  Status      Temporary  Error
+----------          -----  ------      ---------  -----
+atablespace         app    reconciled  true       
+another_tablespace  app    reconciled  true       
+tablespacea1        app    reconciled  false 
+
+Instances status
+[...]
+</code></pre>
+<h2 id="limitations">Limitations</h2>
+<p>Currently, you can't remove tablespaces from an existing CloudNativePG
+cluster.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../declarative_database_management/" class="btn btn-neutral float-left" title="PostgreSQL Database Management"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../operator_conf/" class="btn btn-neutral float-right" title="Operator configuration">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../declarative_database_management/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../operator_conf/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/troubleshooting/index.html b/assets/documentation/1.27.0-rc1/troubleshooting/index.html
new file mode 100644
index 000000000..b13864aac
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/troubleshooting/index.html
@@ -0,0 +1,1026 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Troubleshooting - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Troubleshooting";
+        var mkdocs_page_input_path = "troubleshooting.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Troubleshooting</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#before-you-start">Before you start</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#kubernetes-environment">Kubernetes environment</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#useful-utilities">Useful utilities</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#first-steps">First steps</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#are-there-backups">Are there backups?</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#emergency-backup">Emergency backup</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#logs">Logs</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#operator-information">Operator information</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#gather-more-information-about-the-operator">Gather more information about the operator</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#cluster-information">Cluster information</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#pod-information">Pod information</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#gather-and-filter-extra-information-about-postgresql-pods">Gather and filter extra information about PostgreSQL pods</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#backup-information">Backup information</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#storage-information">Storage information</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#node-information">Node information</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#conditions">Conditions</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#how-to-wait-for-a-particular-condition">How to wait for a particular condition</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#networking">Networking</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-core-dumps">PostgreSQL core dumps</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#some-known-issues">Some known issues</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#storage-is-full">Storage is full</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#pods-are-stuck-in-pending-state">Pods are stuck in Pending state</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#replicas-out-of-sync-when-no-backup-is-configured">Replicas out of sync when no backup is configured</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#cluster-stuck-in-creating-new-replica">Cluster stuck in Creating new replica</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#networking-is-impaired-by-installed-network-policies">Networking is impaired by installed Network Policies</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#error-while-bootstrapping-the-data-directory">Error while bootstrapping the data directory</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#bootstrap-job-hangs-in-running-status">Bootstrap job hangs in running status</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#replicas-take-over-two-minutes-to-reconnect-after-a-failover">Replicas take over two minutes to reconnect after a failover</a>
+    </li>
+        </ul>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Troubleshooting</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="troubleshooting">Troubleshooting</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>In this page, you can find some basic information on how to troubleshoot
+CloudNativePG in your Kubernetes cluster deployment.</p>
+<div class="admonition hint">
+<p class="admonition-title">Hint</p>
+<p>As a Kubernetes administrator, you should have the
+<a href="https://kubernetes.io/docs/reference/kubectl/cheatsheet/"><code>kubectl</code> Cheat Sheet</a> page
+bookmarked!</p>
+</div>
+<h2 id="before-you-start">Before you start</h2>
+<h3 id="kubernetes-environment">Kubernetes environment</h3>
+<p>What can make a difference in a troubleshooting activity is to provide
+clear information about the underlying Kubernetes system.</p>
+<p>Make sure you know:</p>
+<ul>
+<li>the Kubernetes distribution and version you are using</li>
+<li>the specifications of the nodes where PostgreSQL is running</li>
+<li>as much as you can about the actual <a href="../storage/">storage</a>, including storage
+  class and benchmarks you have done before going into production.</li>
+<li>which relevant Kubernetes applications you are using in your cluster (i.e.
+  Prometheus, Grafana, Istio, Certmanager, ...)</li>
+<li>the situation of continuous backup, in particular if it's in place and working
+  correctly: in case it is not, make sure you take an <a href="#emergency-backup">emergency backup</a>
+  before performing any potential disrupting operation</li>
+</ul>
+<h3 id="useful-utilities">Useful utilities</h3>
+<p>On top of the mandatory <code>kubectl</code> utility, for troubleshooting, we recommend the
+following plugins/utilities to be available in your system:</p>
+<ul>
+<li><a href="../kubectl-plugin/"><code>cnpg</code> plugin</a> for <code>kubectl</code></li>
+<li><a href="https://stedolan.github.io/jq/"><code>jq</code></a>, a lightweight and flexible command-line JSON processor</li>
+<li><a href="https://www.gnu.org/software/grep/"><code>grep</code></a>, searches one or more input files
+  for lines containing a match to a specified pattern. It is already available in most *nix distros.
+  If you are on Windows OS, you can use <a href="https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/findstr"><code>findstr</code></a> as an alternative to <code>grep</code> or directly use <a href="https://docs.microsoft.com/en-us/windows/wsl/"><code>wsl</code></a>
+  and install your preferred *nix distro and use the tools mentioned above.</li>
+</ul>
+<h2 id="first-steps">First steps</h2>
+<p>To quickly get an overview of the cluster or installation, the <code>kubectl</code> plugin
+is the primary tool to use:</p>
+<ol>
+<li>the <a href="../kubectl-plugin/#status">status subcommand</a> provides an overview of a
+  cluster</li>
+<li>the <a href="../kubectl-plugin/#report">report subcommand</a> provides the manifests
+  for clusters and the operator deployment. It can also include logs using
+  the <code>--logs</code> option.
+  The report generated via the plugin will include the full cluster manifest.</li>
+</ol>
+<p>The plugin can be installed on air-gapped systems via packages.
+Please refer to the <a href="../kubectl-plugin/">plugin document</a> for complete instructions.</p>
+<h2 id="are-there-backups">Are there backups?</h2>
+<p>After getting the cluster manifest with the plugin, you should verify if backups
+are set up and working.</p>
+<p>Before proceeding with troubleshooting operations, it may be advisable
+to perform an emergency backup depending on your findings regarding backups.
+Refer to the following section for instructions.</p>
+<p>It is <strong>extremely risky</strong> to operate a production database without keeping
+regular backups.</p>
+<h2 id="emergency-backup">Emergency backup</h2>
+<p>In some emergency situations, you might need to take an emergency logical
+backup of the main <code>app</code> database.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The instructions you find below must be executed only in emergency situations
+and the temporary backup files kept under the data protection policies
+that are effective in your organization. The dump file is indeed stored
+in the client machine that runs the <code>kubectl</code> command, so make sure that
+all protections are in place and you have enough space to store the
+backup file.</p>
+</div>
+<p>The following example shows how to take a logical backup of the <code>app</code> database
+in the <code>cluster-example</code> Postgres cluster, from the <code>cluster-example-1</code> pod:</p>
+<pre><code class="language-sh">kubectl exec cluster-example-1 -c postgres \
+  -- pg_dump -Fc -d app &gt; app.dump
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>You can easily adapt the above command to backup your cluster, by providing
+the names of the objects you have used in your environment.</p>
+</div>
+<p>The above command issues a <code>pg_dump</code> command in custom format, which is the most
+versatile way to take <a href="https://www.postgresql.org/docs/current/app-pgdump.html">logical backups in PostgreSQL</a>.</p>
+<p>The next step is to restore the database. We assume that you are operating
+on a new PostgreSQL cluster that's been just initialized (so the <code>app</code> database
+is empty).</p>
+<p>The following example shows how to restore the above logical backup in the
+<code>app</code> database of the <code>new-cluster-example</code> Postgres cluster, by connecting to
+the primary (<code>new-cluster-example-1</code> pod):</p>
+<pre><code class="language-sh">kubectl exec -i new-cluster-example-1 -c postgres \
+  -- pg_restore --no-owner --role=app -d app --verbose &lt; app.dump
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The example in this section assumes that you have no other global objects
+(databases and roles) to dump and restore, as per our recommendation. In case
+you have multiple roles, make sure you have taken a backup using <code>pg_dumpall -g</code>
+and you manually restore them in the new cluster. In case you have multiple
+databases, you need to repeat the above operation one database at a time, making
+sure you assign the right ownership. If you are not familiar with PostgreSQL,
+we advise that you do these critical operations under the guidance of
+a professional support company.</p>
+</div>
+<p>The above steps might be integrated into the <code>cnpg</code> plugin at some stage in the future.</p>
+<h2 id="logs">Logs</h2>
+<p>All resources created and managed by CloudNativePG log to standard output in
+accordance with Kubernetes conventions, using <a href="../logging/">JSON format</a>.</p>
+<p>While logs are typically processed at the infrastructure level and include
+those from CloudNativePG, accessing logs directly from the command line
+interface is critical during troubleshooting. You have three primary options
+for doing so:</p>
+<ul>
+<li>Use the <code>kubectl logs</code> command to retrieve logs from a specific resource, and
+  apply <code>jq</code> for better readability.</li>
+<li>Use the <a href="../kubectl-plugin/#logs"><code>kubectl cnpg logs</code> command</a> for
+  CloudNativePG-specific logging.</li>
+<li>Leverage specialized open-source tools like
+  <a href="https://github.com/stern/stern">stern</a>, which can aggregate logs from
+  multiple resources (e.g., all pods in a PostgreSQL cluster by selecting the
+  <code>cnpg.io/clusterName</code> label), filter log entries, customize output formats,
+  and more.</li>
+</ul>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The following sections provide examples of how to retrieve logs for various
+resources when troubleshooting CloudNativePG.</p>
+</div>
+<h2 id="operator-information">Operator information</h2>
+<p>By default, the CloudNativePG operator is installed in the
+<code>cnpg-system</code> namespace in Kubernetes as a <code>Deployment</code>
+(see the <a href="../installation_upgrade/#details-about-the-deployment">"Details about the deployment" section</a>
+for details).</p>
+<p>You can get a list of the operator pods by running:</p>
+<pre><code class="language-shell">kubectl get pods -n cnpg-system
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Under normal circumstances, you should have one pod where the operator is
+running, identified by a name starting with <code>cnpg-controller-manager-</code>.
+In case you have set up your operator for high availability, you should have more entries.
+Those pods are managed by a deployment named <code>cnpg-controller-manager</code>.</p>
+</div>
+<p>Collect the relevant information about the operator that is running in pod
+<code>&lt;POD&gt;</code> with:</p>
+<pre><code class="language-shell">kubectl describe pod -n cnpg-system &lt;POD&gt;
+</code></pre>
+<p>Then get the logs from the same pod by running:</p>
+<pre><code class="language-shell">kubectl logs -n cnpg-system &lt;POD&gt;
+</code></pre>
+<h3 id="gather-more-information-about-the-operator">Gather more information about the operator</h3>
+<p>Get logs from all pods in CloudNativePG operator Deployment
+(in case you have a multi operator deployment) by running:</p>
+<pre><code class="language-shell">kubectl logs -n cnpg-system \
+  deployment/cnpg-controller-manager --all-containers=true
+</code></pre>
+<div class="admonition tip">
+<p class="admonition-title">Tip</p>
+<p>You can add <code>-f</code> flag to above command to follow logs in real time.</p>
+</div>
+<p>Save logs to a JSON file by running:</p>
+<pre><code class="language-shell">kubectl logs -n cnpg-system \
+  deployment/cnpg-controller-manager --all-containers=true | \
+  jq -r . &gt; cnpg_logs.json
+</code></pre>
+<p>Get CloudNativePG operator version by using <code>kubectl-cnpg</code> plugin:</p>
+<pre><code class="language-shell">kubectl-cnpg status &lt;CLUSTER&gt;
+</code></pre>
+<p>Output:</p>
+<pre><code class="language-shell">Cluster in healthy state
+Name:               cluster-example
+Namespace:          default
+System ID:          7044925089871458324
+PostgreSQL Image:   ghcr.io/cloudnative-pg/postgresql:17.5-3
+Primary instance:   cluster-example-1
+Instances:          3
+Ready instances:    3
+Current Write LSN:  0/5000000 (Timeline: 1 - WAL File: 000000010000000000000004)
+
+Continuous Backup status
+Not configured
+
+Streaming Replication status
+Name               Sent LSN   Write LSN  Flush LSN  Replay LSN  Write Lag       Flush Lag       Replay Lag      State      Sync State  Sync Priority
+----               --------   ---------  ---------  ----------  ---------       ---------       ----------      -----      ----------  -------------
+cluster-example-2  0/5000000  0/5000000  0/5000000  0/5000000   00:00:00        00:00:00        00:00:00        streaming  async       0
+cluster-example-3  0/5000000  0/5000000  0/5000000  0/5000000   00:00:00.10033  00:00:00.10033  00:00:00.10033  streaming  async       0
+
+Instances status
+Name               Database Size  Current LSN  Replication role  Status  QoS         Manager Version
+----               -------------  -----------  ----------------  ------  ---         ---------------
+cluster-example-1  33 MB          0/5000000    Primary           OK      BestEffort  1.12.0
+cluster-example-2  33 MB          0/5000000    Standby (async)   OK      BestEffort  1.12.0
+cluster-example-3  33 MB          0/5000060    Standby (async)   OK      BestEffort  1.12.0
+</code></pre>
+<h2 id="cluster-information">Cluster information</h2>
+<p>You can check the status of the <code>&lt;CLUSTER&gt;</code> cluster in the <code>NAMESPACE</code>
+namespace with:</p>
+<pre><code class="language-shell">kubectl get cluster -n &lt;NAMESPACE&gt; &lt;CLUSTER&gt;
+</code></pre>
+<p>Output:</p>
+<pre><code class="language-shell">NAME        AGE        INSTANCES   READY   STATUS                     PRIMARY
+&lt;CLUSTER&gt;   10d4h3m    3           3       Cluster in healthy state   &lt;CLUSTER&gt;-1
+</code></pre>
+<p>The above example reports a healthy PostgreSQL cluster of 3 instances, all in
+<em>ready</em> state, and with <code>&lt;CLUSTER&gt;-1</code> being the primary.</p>
+<p>In case of unhealthy conditions, you can discover more by getting the manifest
+of the <code>Cluster</code> resource:</p>
+<pre><code class="language-shell">kubectl get cluster -o yaml -n &lt;NAMESPACE&gt; &lt;CLUSTER&gt;
+</code></pre>
+<p>Another important command to gather is the <code>status</code> one, as provided by the
+<code>cnpg</code> plugin:</p>
+<pre><code class="language-shell">kubectl cnpg status -n &lt;NAMESPACE&gt; &lt;CLUSTER&gt;
+</code></pre>
+<div class="admonition tip">
+<p class="admonition-title">Tip</p>
+<p>You can print more information by adding the <code>--verbose</code> option.</p>
+</div>
+<p>Get PostgreSQL container image version:</p>
+<pre><code class="language-shell">kubectl describe cluster &lt;CLUSTER_NAME&gt; -n &lt;NAMESPACE&gt; | grep &quot;Image Name&quot;
+</code></pre>
+<p>Output:</p>
+<pre><code class="language-shell">  Image Name:    ghcr.io/cloudnative-pg/postgresql:17.5-3
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Also you can use <code>kubectl-cnpg status -n &lt;NAMESPACE&gt; &lt;CLUSTER_NAME&gt;</code>
+to get the same information.</p>
+</div>
+<h2 id="pod-information">Pod information</h2>
+<p>You can retrieve the list of instances that belong to a given PostgreSQL
+cluster with:</p>
+<pre><code class="language-shell">kubectl get pod -l cnpg.io/cluster=&lt;CLUSTER&gt; -L role -n &lt;NAMESPACE&gt;
+</code></pre>
+<p>Output:</p>
+<pre><code class="language-shell">NAME          READY   STATUS    RESTARTS   AGE       ROLE
+&lt;CLUSTER&gt;-1   1/1     Running   0          10d4h5m   primary
+&lt;CLUSTER&gt;-2   1/1     Running   0          10d4h4m   replica
+&lt;CLUSTER&gt;-3   1/1     Running   0          10d4h4m   replica
+</code></pre>
+<p>You can check if/how a pod is failing by running:</p>
+<pre><code class="language-shell">kubectl get pod -n &lt;NAMESPACE&gt; -o yaml &lt;CLUSTER&gt;-&lt;N&gt;
+</code></pre>
+<p>You can get all the logs for a given PostgreSQL instance with:</p>
+<pre><code class="language-shell">kubectl logs -n &lt;NAMESPACE&gt; &lt;CLUSTER&gt;-&lt;N&gt;
+</code></pre>
+<p>If you want to limit the search to the PostgreSQL process only, you can run:</p>
+<pre><code class="language-shell">kubectl logs -n &lt;NAMESPACE&gt; &lt;CLUSTER&gt;-&lt;N&gt; | \
+  jq 'select(.logger==&quot;postgres&quot;) | .record.message'
+</code></pre>
+<p>The following example also adds the timestamp:</p>
+<pre><code class="language-shell">kubectl logs -n &lt;NAMESPACE&gt; &lt;CLUSTER&gt;-&lt;N&gt; | \
+  jq -r 'select(.logger==&quot;postgres&quot;) | [.ts, .record.message] | @csv'
+</code></pre>
+<p>If the timestamp is displayed in Unix Epoch time, you can convert it to a user-friendly format:</p>
+<pre><code class="language-shell">kubectl logs -n &lt;NAMESPACE&gt; &lt;CLUSTER&gt;-&lt;N&gt; | \
+  jq -r 'select(.logger==&quot;postgres&quot;) | [(.ts|strflocaltime(&quot;%Y-%m-%dT%H:%M:%S %Z&quot;)), .record.message] | @csv'
+</code></pre>
+<h3 id="gather-and-filter-extra-information-about-postgresql-pods">Gather and filter extra information about PostgreSQL pods</h3>
+<p>Check logs from a specific pod that has crashed:</p>
+<pre><code class="language-shell">kubectl logs -n &lt;NAMESPACE&gt; --previous &lt;CLUSTER&gt;-&lt;N&gt;
+</code></pre>
+<p>Get FATAL errors from a specific PostgreSQL pod:</p>
+<pre><code class="language-shell">kubectl logs -n &lt;NAMESPACE&gt; &lt;CLUSTER&gt;-&lt;N&gt; | \
+  jq -r '.record | select(.error_severity == &quot;FATAL&quot;)'
+</code></pre>
+<p>Output:</p>
+<pre><code class="language-json">{
+  &quot;log_time&quot;: &quot;2021-11-08 14:07:44.520 UTC&quot;,
+  &quot;user_name&quot;: &quot;streaming_replica&quot;,
+  &quot;process_id&quot;: &quot;68&quot;,
+  &quot;connection_from&quot;: &quot;10.244.0.10:60616&quot;,
+  &quot;session_id&quot;: &quot;61892f30.44&quot;,
+  &quot;session_line_num&quot;: &quot;1&quot;,
+  &quot;command_tag&quot;: &quot;startup&quot;,
+  &quot;session_start_time&quot;: &quot;2021-11-08 14:07:44 UTC&quot;,
+  &quot;virtual_transaction_id&quot;: &quot;3/75&quot;,
+  &quot;transaction_id&quot;: &quot;0&quot;,
+  &quot;error_severity&quot;: &quot;FATAL&quot;,
+  &quot;sql_state_code&quot;: &quot;28000&quot;,
+  &quot;message&quot;: &quot;role \&quot;streaming_replica\&quot; does not exist&quot;,
+  &quot;backend_type&quot;: &quot;walsender&quot;
+}
+</code></pre>
+<p>Filter PostgreSQL DB error messages in logs for a specific pod:</p>
+<pre><code class="language-shell">kubectl logs -n &lt;NAMESPACE&gt; &lt;CLUSTER&gt;-&lt;N&gt; | jq -r '.err | select(. != null)'
+</code></pre>
+<p>Output:</p>
+<pre><code class="language-shell">dial unix /controller/run/.s.PGSQL.5432: connect: no such file or directory
+</code></pre>
+<p>Get messages matching <code>err</code> word from a specific pod:</p>
+<pre><code class="language-shell">kubectl logs -n &lt;NAMESPACE&gt; &lt;CLUSTER&gt;-&lt;N&gt; | jq -r '.msg' | grep &quot;err&quot;
+</code></pre>
+<p>Output:</p>
+<pre><code class="language-shell">2021-11-08 14:07:39.610 UTC [15] LOG:  ending log output to stderr
+</code></pre>
+<p>Get all logs from PostgreSQL process from a specific pod:</p>
+<pre><code class="language-shell">kubectl logs -n &lt;NAMESPACE&gt; &lt;CLUSTER&gt;-&lt;N&gt; | \
+  jq -r '. | select(.logger == &quot;postgres&quot;) | select(.msg != &quot;record&quot;) | .msg'
+</code></pre>
+<p>Output:</p>
+<pre><code class="language-shell">2021-11-08 14:07:52.591 UTC [16] LOG:  redirecting log output to logging collector process
+2021-11-08 14:07:52.591 UTC [16] HINT:  Future log output will appear in directory &quot;/controller/log&quot;.
+2021-11-08 14:07:52.591 UTC [16] LOG:  ending log output to stderr
+2021-11-08 14:07:52.591 UTC [16] HINT:  Future log output will go to log destination &quot;csvlog&quot;.
+</code></pre>
+<p>Get pod logs filtered by fields with values and join them separated by <code>|</code> running:</p>
+<pre><code class="language-shell">kubectl logs -n &lt;NAMESPACE&gt; &lt;CLUSTER&gt;-&lt;N&gt; | \
+  jq -r '[.level, .ts, .logger, .msg] | join(&quot; | &quot;)'
+</code></pre>
+<p>Output:</p>
+<pre><code class="language-shell">info | 1636380469.5728037 | wal-archive | Backup not configured, skip WAL archiving
+info | 1636383566.0664876 | postgres | record
+</code></pre>
+<h2 id="backup-information">Backup information</h2>
+<p>You can list the backups that have been created for a named cluster with:</p>
+<pre><code class="language-shell">kubectl get backup -l cnpg.io/cluster=&lt;CLUSTER&gt;
+</code></pre>
+<h2 id="storage-information">Storage information</h2>
+<p>Sometimes is useful to double-check the StorageClass used by the cluster to have
+some more context during investigations or troubleshooting, like this:</p>
+<pre><code class="language-shell">STORAGECLASS=$(kubectl get pvc &lt;POD&gt; -o jsonpath='{.spec.storageClassName}')
+kubectl get storageclasses $STORAGECLASS -o yaml
+</code></pre>
+<p>We are taking the StorageClass from one of the cluster pod here since often
+clusters are created using the default StorageClass.</p>
+<h2 id="node-information">Node information</h2>
+<p>Kubernetes nodes is where ultimately PostgreSQL pods will be running. It's
+strategically important to know as much as we can about them.</p>
+<p>You can get the list of nodes in your Kubernetes cluster with:</p>
+<pre><code class="language-shell"># look at the worker nodes and their status
+kubectl get nodes -o wide
+</code></pre>
+<p>Additionally, you can gather the list of nodes where the pods of a given
+cluster are running with:</p>
+<pre><code class="language-shell">kubectl get pod -l cnpg.io/cluster=&lt;CLUSTER&gt; \
+  -L role -n &lt;NAMESPACE&gt; -o wide
+</code></pre>
+<p>The latter is important to understand where your pods are distributed - very
+useful if you are using <a href="../scheduling/">affinity/anti-affinity rules and/or tolerations</a>.</p>
+<h2 id="conditions">Conditions</h2>
+<p>Like many native kubernetes
+objects <a href="https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#pod-conditions">like here</a>, 
+Cluster exposes <code>status.conditions</code> as well. This allows one to 'wait' for a particular 
+event to occur instead of relying on the overall cluster health state. Available conditions as of now are:</p>
+<ul>
+<li>LastBackupSucceeded</li>
+<li>ContinuousArchiving</li>
+<li>Ready</li>
+</ul>
+<p><code>LastBackupSucceeded</code> is reporting the status of the latest backup. If set to <code>True</code> the
+last backup has been taken correctly, it is set to <code>False</code> otherwise.</p>
+<p><code>ContinuousArchiving</code> is reporting the status of the WAL archiving. If set to <code>True</code> the
+last WAL archival process has been terminated correctly, it is set to <code>False</code> otherwise.</p>
+<p><code>Ready</code> is <code>True</code> when the cluster has the number of instances specified by the user
+and the primary instance is ready. This condition can be used in scripts to wait for
+the cluster to be created.</p>
+<h3 id="how-to-wait-for-a-particular-condition">How to wait for a particular condition</h3>
+<ul>
+<li>Backup:</li>
+</ul>
+<pre><code class="language-bash">$ kubectl wait --for=condition=LastBackupSucceeded cluster/&lt;CLUSTER-NAME&gt; -n &lt;NAMESPACE&gt;
+</code></pre>
+<ul>
+<li>ContinuousArchiving:</li>
+</ul>
+<pre><code class="language-bash">$ kubectl wait --for=condition=ContinuousArchiving cluster/&lt;CLUSTER-NAME&gt; -n &lt;NAMESPACE&gt;
+</code></pre>
+<ul>
+<li>Ready (Cluster is ready or not):</li>
+</ul>
+<pre><code class="language-bash">$ kubectl wait --for=condition=Ready cluster/&lt;CLUSTER-NAME&gt; -n &lt;NAMESPACE&gt;
+</code></pre>
+<p>Below is a snippet of a <code>cluster.status</code> that contains a failing condition.</p>
+<pre><code class="language-bash">$ kubectl get cluster/&lt;cluster-name&gt; -o yaml
+.
+.
+.
+  status:
+    conditions:
+    - message: 'unexpected failure invoking barman-cloud-wal-archive: exit status
+        2'
+      reason: ContinuousArchivingFailing
+      status: &quot;False&quot;
+      type: ContinuousArchiving
+
+    - message: exit status 2
+      reason: LastBackupFailed
+      status: &quot;False&quot;
+      type: LastBackupSucceeded
+
+    - message: Cluster Is Not Ready
+      reason: ClusterIsNotReady
+      status: &quot;False&quot;
+      type: Ready
+
+
+</code></pre>
+<h2 id="networking">Networking</h2>
+<p>CloudNativePG requires basic networking and connectivity in place.
+You can find more information in the <a href="../networking/">networking</a> section.</p>
+<p>If installing CloudNativePG in an existing environment, there might be
+network policies in place, or other network configuration made specifically
+for the cluster, which could have an impact on the required connectivity
+between the operator and the cluster pods and/or the between the pods.</p>
+<p>You can look for existing network policies with the following command:</p>
+<pre><code class="language-sh">kubectl get networkpolicies
+</code></pre>
+<p>There might be several network policies set up by the Kubernetes network
+administrator.</p>
+<pre><code class="language-sh">$ kubectl get networkpolicies                       
+NAME                   POD-SELECTOR                      AGE
+allow-prometheus       cnpg.io/cluster=cluster-example   47m
+default-deny-ingress   &lt;none&gt;                            57m
+</code></pre>
+<h2 id="postgresql-core-dumps">PostgreSQL core dumps</h2>
+<p>Although rare, PostgreSQL can sometimes crash and generate a core dump
+in the <code>PGDATA</code> folder. When that happens, normally it is a bug in PostgreSQL
+(and most likely it has already been solved - this is why it is important
+to always run the latest minor version of PostgreSQL).</p>
+<p>CloudNativePG allows you to control what to include in the core dump through
+the <code>cnpg.io/coredumpFilter</code> annotation.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Please refer to <a href="../labels_annotations/">"Labels and annotations"</a>
+for more details on the standard annotations that CloudNativePG provides.</p>
+</div>
+<p>By default, the <code>cnpg.io/coredumpFilter</code> is set to <code>0x31</code> in order to
+exclude shared memory segments from the dump, as this is the safest
+approach in most cases.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Please refer to
+<a href="https://docs.kernel.org/filesystems/proc.html#proc-pid-coredump-filter-core-dump-filtering-settings">"Core dump filtering settings" section of "The <code>/proc</code> Filesystem" page of the Linux Kernel documentation</a>.
+for more details on how to set the bitmask that controls the core dump filter.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Beware that this setting only takes effect during Pod startup and that changing
+the annotation doesn't trigger an automated rollout of the instances.</p>
+</div>
+<p>Although you might not personally be involved in inspecting core dumps,
+you might be asked to provide them so that a Postgres expert can look
+into them. First, verify that you have a core dump in the <code>PGDATA</code>
+directory with the following command (please run it against the
+correct pod where the Postgres instance is running):</p>
+<pre><code class="language-sh">kubectl exec -ti POD -c postgres \
+  -- find /var/lib/postgresql/data/pgdata -name 'core.*'
+</code></pre>
+<p>Under normal circumstances, this should return an empty set. Suppose, for
+example, that we have a core dump file:</p>
+<pre><code>/var/lib/postgresql/data/pgdata/core.14177
+</code></pre>
+<p>Once you have verified the space on disk is sufficient, you can collect the
+core dump on your machine through <code>kubectl cp</code> as follows:</p>
+<pre><code class="language-sh">kubectl cp POD:/var/lib/postgresql/data/pgdata/core.14177 core.14177
+</code></pre>
+<p>You now have the file. Make sure you free the space on the server by
+removing the core dumps.</p>
+<h2 id="some-known-issues">Some known issues</h2>
+<h3 id="storage-is-full">Storage is full</h3>
+<p>In case the storage is full, the PostgreSQL pods will not be able to write new
+data, or, in case of the disk containing the WAL segments being full, PostgreSQL
+will shut down.</p>
+<p>If you see messages in the logs about the disk being full, you should increase
+the size of the affected PVC. You can do this by editing the PVC and changing
+the <code>spec.resources.requests.storage</code> field. After that, you should also update
+the Cluster resource with the new size to apply the same change to all the pods.
+Please look at the <a href="../storage/#volume-expansion">"Volume expansion" section</a> in the documentation.</p>
+<p>If the space for WAL segments is exhausted, the pod will be crash-looping and
+the cluster status will report <code>Not enough disk space</code>. Increasing the size in
+the PVC and then in the Cluster resource will solve the issue. See also
+the <a href="../instance_manager/#disk-full-failure">"Disk Full Failure" section</a></p>
+<h3 id="pods-are-stuck-in-pending-state">Pods are stuck in <code>Pending</code> state</h3>
+<p>In case a Cluster's instance is stuck in the <code>Pending</code> phase, you should check
+the pod's <code>Events</code> section to get an idea of the reasons behind this:</p>
+<pre><code class="language-shell">kubectl describe pod -n &lt;NAMESPACE&gt; &lt;POD&gt;
+</code></pre>
+<p>Some of the possible causes for this are:</p>
+<ul>
+<li>No nodes are matching the <code>nodeSelector</code></li>
+<li>Tolerations are not correctly configured to match the nodes' taints</li>
+<li>No nodes are available at all: this could also be related to
+  <code>cluster-autoscaler</code> hitting some limits, or having some temporary issues</li>
+</ul>
+<p>In this case, it could also be useful to check events in the namespace:</p>
+<pre><code class="language-shell">kubectl get events -n &lt;NAMESPACE&gt;
+# list events in chronological order
+kubectl get events -n &lt;NAMESPACE&gt; --sort-by=.metadata.creationTimestamp
+</code></pre>
+<h3 id="replicas-out-of-sync-when-no-backup-is-configured">Replicas out of sync when no backup is configured</h3>
+<p>Sometimes replicas might be switched off for a bit of time due to maintenance
+reasons (think of when a Kubernetes nodes is drained). In case your cluster
+does not have backup configured, when replicas come back up, they might
+require a WAL file that is not present anymore on the primary (having been
+already recycled according to the WAL management policies as mentioned in
+<a href="../postgresql_conf/#the-postgresql-section">"The <code>postgresql</code> section"</a>), and
+fall out of synchronization.</p>
+<p>Similarly, when <code>pg_rewind</code> might require a WAL file that is not present
+anymore in the former primary, reporting <code>pg_rewind: error: could not open file</code>.</p>
+<p>In these cases, pods cannot become ready anymore, and you are required to delete
+the PVC and let the operator rebuild the replica.</p>
+<p>If you rely on dynamically provisioned Persistent Volumes, and you are confident
+in deleting the PV itself, you can do so with:</p>
+<pre><code class="language-shell">PODNAME=&lt;POD&gt;
+VOLNAME=$(kubectl get pv -o json | \
+  jq -r '.items[]|select(.spec.claimRef.name=='\&quot;$PODNAME\&quot;')|.metadata.name')
+
+kubectl delete pod/$PODNAME pvc/$PODNAME pvc/$PODNAME-wal pv/$VOLNAME
+</code></pre>
+<h3 id="cluster-stuck-in-creating-new-replica">Cluster stuck in <code>Creating new replica</code></h3>
+<p>Cluster is stuck in "Creating a new replica", while pod logs don't show
+relevant problems.
+This has been found to be related to the next issue
+<a href="#networking-is-impaired-by-installed-network-policies">on connectivity</a>.
+Networking issues are reflected in the status column as follows:</p>
+<pre><code class="language-text">Instance Status Extraction Error: HTTP communication issue
+</code></pre>
+<h3 id="networking-is-impaired-by-installed-network-policies">Networking is impaired by installed Network Policies</h3>
+<p>As pointed out in the <a href="#networking">networking section</a>, local network policies
+could prevent some of the required connectivity.</p>
+<p>A tell-tale sign that connectivity is impaired is the presence in the operator
+logs of messages like:</p>
+<pre><code class="language-text">&quot;Cannot extract Pod status&quot;, […snipped…] &quot;Get \&quot;http://&lt;pod IP&gt;:8000/pg/status\&quot;: dial tcp &lt;pod IP&gt;:8000: i/o timeout&quot;
+</code></pre>
+<p>You should list the network policies, and look for any policies restricting
+connectivity.</p>
+<pre><code class="language-sh">$ kubectl get networkpolicies                       
+NAME                   POD-SELECTOR                      AGE
+allow-prometheus       cnpg.io/cluster=cluster-example   47m
+default-deny-ingress   &lt;none&gt;                            57m
+</code></pre>
+<p>For example, in the listing above, <code>default-deny-ingress</code> seems a likely culprit.
+You can drill into it:</p>
+<pre><code class="language-sh">$ kubectl get networkpolicies default-deny-ingress -o yaml
+&lt;…snipped…&gt;
+spec:
+  podSelector: {}
+  policyTypes:
+  - Ingress
+</code></pre>
+<p>In the <a href="../networking/">networking page</a> you can find a network policy file
+that you can customize to create a <code>NetworkPolicy</code> explicitly allowing the
+operator to connect cross-namespace to cluster pods.</p>
+<h3 id="error-while-bootstrapping-the-data-directory">Error while bootstrapping the data directory</h3>
+<p>If your Cluster's initialization job crashes with a "Bus error (core dumped)
+child process exited with exit code 135", you likely need to fix the Cluster
+hugepages settings.</p>
+<p>The reason is the incomplete support of hugepages in the cgroup v1 that should
+be fixed in v2. For more information, check the PostgreSQL <a href="https://www.postgresql.org/message-id/17757-dbdfc1f1c954a6db%40postgresql.org">BUG #17757: Not
+honoring huge_pages setting during initdb causes DB crash in
+Kubernetes</a>.</p>
+<p>To check whether hugepages are enabled, run <code>grep HugePages /proc/meminfo</code> on
+the Kubernetes node and check if hugepages are present, their size, and how many
+are free.</p>
+<p>If the hugepages are present, you need to configure how much hugepages memory
+every PostgreSQL pod should have available.</p>
+<p>For example:</p>
+<pre><code class="language-yaml">  postgresql:
+    parameters:
+      shared_buffers: &quot;128MB&quot;
+
+  resources:
+    requests:
+      memory: &quot;512Mi&quot;
+    limits:
+      hugepages-2Mi: &quot;512Mi&quot;
+</code></pre>
+<p>Please remember that you must have enough hugepages memory available to schedule
+every Pod in the Cluster (in the example above, at least 512MiB per Pod must be
+free).</p>
+<h3 id="bootstrap-job-hangs-in-running-status">Bootstrap job hangs in running status</h3>
+<p>If your Cluster's initialization job hangs while in <code>Running</code> status with the
+message:
+"error while waiting for the API server to be reachable", you probably have
+a network issue preventing communication with the Kubernetes API server.
+Initialization jobs (like most of jobs) need to access the Kubernetes
+API. Please check your networking.</p>
+<p>Another possible cause is when you have sidecar injection configured. Sidecars
+such as Istio may make the network temporarily unavailable during startup. If
+you have sidecar injection enabled, retry with injection disabled.</p>
+<h3 id="replicas-take-over-two-minutes-to-reconnect-after-a-failover">Replicas take over two minutes to reconnect after a failover</h3>
+<p>When the primary instance fails, the operator promotes the most advanced standby
+to the primary role. Other standby instances then attempt to reconnect to the
+<code>-rw</code> service for replication. However, during this reconnection process,
+<code>kube-proxy</code> may not have updated its routing information yet. As a result, the
+initial <code>SYN</code> packet sent by the standby instances might fail to reach its
+intended destination.</p>
+<p>If the network is configured to silently drop packets instead of rejecting them,
+standby instances will not receive a response and will retry the connection
+after an exponential backoff period. On Linux systems, the default value for the
+<code>tcp_syn_retries</code> kernel parameter is 6, meaning the system will attempt to
+establish the connection for approximately 127 seconds before giving up. This
+prolonged retry period can significantly delay the reconnection process.
+For more details, consult the
+<a href="https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt">tcp_syn_retries documentation</a>.</p>
+<p>You can work around this issue by setting <code>STANDBY_TCP_USER_TIMEOUT</code> in the
+<a href="../operator_conf/#available-options">operator configuration</a>. This will cause
+the standby instances to close the TCP connection if the initial <code>SYN</code> packet
+is not acknowledged within the specified timeout, allowing them to retry the
+connection more quickly.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../failover/" class="btn btn-neutral float-left" title="Automated failover"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../fencing/" class="btn btn-neutral float-right" title="Fencing">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../failover/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../fencing/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/use_cases/index.html b/assets/documentation/1.27.0-rc1/use_cases/index.html
new file mode 100644
index 000000000..545e1c747
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/use_cases/index.html
@@ -0,0 +1,400 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Use cases - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Use cases";
+        var mkdocs_page_input_path = "use_cases.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Use cases</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#case-1-applications-inside-kubernetes">Case 1: Applications inside Kubernetes</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#case-2-applications-outside-kubernetes">Case 2: Applications outside Kubernetes</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Use cases</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="use-cases">Use cases</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG has been designed to work with applications
+that reside in the same Kubernetes cluster, for a full cloud native
+experience.</p>
+<p>However, it might happen that, while the database can be hosted
+inside a Kubernetes cluster, applications cannot be containerized
+at the same time and need to run in a <em>traditional environment</em> such 
+as a VM.</p>
+<h2 id="case-1-applications-inside-kubernetes">Case 1: Applications inside Kubernetes</h2>
+<p>In a typical situation, the application and the database run in the same
+namespace inside a Kubernetes cluster.</p>
+<p><img alt="Application and Database inside Kubernetes" src="../images/apps-in-k8s.png" /></p>
+<p>The application, normally stateless, is managed as a standard <code>Deployment</code>,
+with multiple replicas spread over different Kubernetes node, and internally
+exposed through a <code>ClusterIP</code> service.</p>
+<p>The service is exposed externally to the end user through an <code>Ingress</code> and the
+provider's load balancer facility, via HTTPS.</p>
+<p>The application uses the backend PostgreSQL database to keep track of the state
+in a reliable and persistent way. The application refers to the read-write
+service exposed by the <code>Cluster</code> resource defined by CloudNativePG,
+which points to the current primary instance, through a TLS connection.  The
+<code>Cluster</code> resource embeds the logic of single primary and multiple standby
+architecture, hiding the complexity of managing a high availability cluster in
+Postgres.</p>
+<p><img alt="Close-up view of application and database inside Kubernetes" src="../images/architecture-in-k8s.png" /></p>
+<h2 id="case-2-applications-outside-kubernetes">Case 2: Applications outside Kubernetes</h2>
+<p>Another possible use case is to manage your PostgreSQL database inside
+Kubernetes, while having your applications outside of it (for example in a
+virtualized environment). In this case, PostgreSQL is represented by an IP
+address (or host name) and a TCP port, corresponding to the defined Ingress
+resource in Kubernetes (normally a <code>LoadBalancer</code> service type as explained
+in the <a href="../service_management/">"Service Management"</a> page).</p>
+<p>The application can still benefit from a TLS connection to PostgreSQL.</p>
+<p><img alt="Application outside Kubernetes" src="../images/apps-outside-k8s.png" /></p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../before_you_start/" class="btn btn-neutral float-left" title="Before You Start"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../architecture/" class="btn btn-neutral float-right" title="Architecture">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../before_you_start/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../architecture/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/1.27.0-rc1/wal_archiving/index.html b/assets/documentation/1.27.0-rc1/wal_archiving/index.html
new file mode 100644
index 000000000..cdf5cda25
--- /dev/null
+++ b/assets/documentation/1.27.0-rc1/wal_archiving/index.html
@@ -0,0 +1,409 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>WAL archiving - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "WAL archiving";
+        var mkdocs_page_input_path = "wal_archiving.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">WAL archiving</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#plugin-based-architecture">Plugin-Based Architecture</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#supported-plugins">Supported Plugins</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#deprecation-notice-native-barman-cloud">Deprecation Notice: Native Barman Cloud</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#about-the-archive-timeout">About the archive timeout</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">WAL archiving</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="wal-archiving">WAL archiving</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>Write-Ahead Log (WAL) archiving in CloudNativePG is the process of continuously
+shipping WAL files to a designated object store from the PostgreSQL primary.
+These archives are essential for enabling Point-In-Time Recovery (PITR) and are
+a foundational component for both object store and volume snapshot-based backup
+strategies.</p>
+<h2 id="plugin-based-architecture">Plugin-Based Architecture</h2>
+<p>CloudNativePG supports WAL archiving through a <strong>plugin-based mechanism</strong>,
+defined via the <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterSpec"><code>spec.pluginConfiguration</code></a>
+section of the <code>Cluster</code> resource.</p>
+<p>Only <strong>one plugin at a time</strong> can be responsible for WAL archiving. This is
+configured by setting the <code>isWALArchiver</code> field to <code>true</code> within the plugin
+configuration.</p>
+<h2 id="supported-plugins">Supported Plugins</h2>
+<p>Currently, the <strong>Barman Cloud Plugin</strong> is the only officially supported WAL
+archiving plugin maintained by the CloudNativePG Community.
+For full documentation, configuration options, and best practices, see the
+<a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/intro/">Barman Cloud Plugin documentation</a>.</p>
+<h2 id="deprecation-notice-native-barman-cloud">Deprecation Notice: Native Barman Cloud</h2>
+<p>CloudNativePG still supports WAL archiving natively through the
+<code>.spec.backup.barmanObjectStore</code> field. While still functional, <strong>this
+interface is deprecated</strong> and will be removed in a future release.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>All new deployments are strongly encouraged to adopt the plugin-based
+architecture, which offers a more flexible and maintainable approach.</p>
+</div>
+<p>If you are currently using the native <code>.spec.backup.barmanObjectStore</code>
+approach, refer to the official guide for a smooth transition:
+<a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/migration/">Migrating from Built-in CloudNativePG Backup</a>.</p>
+<h2 id="about-the-archive-timeout">About the archive timeout</h2>
+<p>By default, CloudNativePG sets <code>archive_timeout</code> to <code>5min</code>, ensuring
+that WAL files, even in case of low workloads, are closed and archived
+at least every 5 minutes, providing a deterministic time-based value for
+your Recovery Point Objective (<a href="../before_you_start/#rpo">RPO</a>).</p>
+<p>Even though you change the value of the
+<a href="https://www.postgresql.org/docs/current/runtime-config-wal.html#GUC-ARCHIVE-TIMEOUT"><code>archive_timeout</code> setting in the PostgreSQL configuration</a>,
+our experience suggests that the default value set by the operator is suitable
+for most use cases.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../backup/" class="btn btn-neutral float-left" title="Backup"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../recovery/" class="btn btn-neutral float-right" title="Recovery">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../backup/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../recovery/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/preview/404.html b/assets/documentation/preview/404.html
index f9f50128b..a10e10bf7 100644
--- a/assets/documentation/preview/404.html
+++ b/assets/documentation/preview/404.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="/img/favicon.ico" />
-    <title>CloudNativePG v1.26.0-rc3</title>
+    <title>CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="/css/theme.css" />
     <link rel="stylesheet" href="/css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -24,7 +24,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="/." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="/." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="//search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -105,18 +105,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="/backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="/backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="/wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="/backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="/recovery/">Recovery</a>
                 </li>
@@ -225,6 +217,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="/container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="/imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="/operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -269,10 +265,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="/cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="/cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="/appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="/appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="/appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="/appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -282,7 +284,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="/.">CloudNativePG v1.26.0-rc3</a>
+          <a href="/.">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/appendixes/backup_barmanobjectstore/index.html b/assets/documentation/preview/appendixes/backup_barmanobjectstore/index.html
new file mode 100644
index 000000000..65058d5b1
--- /dev/null
+++ b/assets/documentation/preview/appendixes/backup_barmanobjectstore/index.html
@@ -0,0 +1,708 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../img/favicon.ico" />
+    <title>Appendix B - Backup on object stores - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../css/theme.css" />
+    <link rel="stylesheet" href="../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Appendix B - Backup on object stores";
+        var mkdocs_page_input_path = "appendixes/backup_barmanobjectstore.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul class="current">
+                  <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1 current"><a class="reference internal current" href="#">Appendix B - Backup on object stores</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#common-object-stores">Common object stores</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#wal-archiving">WAL archiving</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#retention-policies">Retention policies</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#compression-algorithms">Compression algorithms</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#tagging-of-backup-objects">Tagging of backup objects</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#extra-options-for-the-backup-and-wal-commands">Extra options for the backup and WAL commands</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#recovery-from-an-object-store">Recovery from an object store</a>
+    </li>
+    </ul>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+          <li class="breadcrumb-item">Appendixes</li>
+      <li class="breadcrumb-item active">Appendix B - Backup on object stores</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="appendix-b-backup-on-object-stores">Appendix B - Backup on object stores</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>As of CloudNativePG 1.26, <strong>native Barman Cloud support is deprecated</strong> in
+favor of the <strong>Barman Cloud Plugin</strong>. This page has been moved to the appendix
+for reference purposes. While the native integration remains functional for
+now, we strongly recommend beginning a gradual migration to the plugin-based
+interface after appropriate testing.  For guidance, see
+<a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/migration/">Migrating from Built-in CloudNativePG Backup</a>.</p>
+</div>
+<p>CloudNativePG natively supports <strong>online/hot backup</strong> of PostgreSQL
+clusters through continuous physical backup and WAL archiving on an object
+store. This means that the database is always up (no downtime required)
+and that Point In Time Recovery is available.</p>
+<p>The operator can orchestrate a continuous backup infrastructure
+that is based on the <a href="https://pgbarman.org">Barman Cloud</a> tool. Instead
+of using the classical architecture with a Barman server, which
+backs up many PostgreSQL instances, the operator relies on the
+<code>barman-cloud-wal-archive</code>, <code>barman-cloud-check-wal-archive</code>,
+<code>barman-cloud-backup</code>, <code>barman-cloud-backup-list</code>, and
+<code>barman-cloud-backup-delete</code> tools. As a result, base backups will
+be <em>tarballs</em>. Both base backups and WAL files can be compressed
+and encrypted.</p>
+<p>For this, it is required to use an image with <code>barman-cli-cloud</code> included.
+You can use the image <code>ghcr.io/cloudnative-pg/postgresql</code> for this scope,
+as it is composed of a community PostgreSQL image and the latest
+<code>barman-cli-cloud</code> package.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Always ensure that you are running the latest version of the operands
+in your system to take advantage of the improvements introduced in
+Barman cloud (as well as improve the security aspects of your cluster).</p>
+</div>
+<p>A backup is performed from a primary or a designated primary instance in a
+<code>Cluster</code> (please refer to
+<a href="../../replica_cluster/">replica clusters</a>
+for more information about designated primary instances), or alternatively
+on a <a href="../../backup/#backup-from-a-standby">standby</a>.</p>
+<h2 id="common-object-stores">Common object stores</h2>
+<p>If you are looking for a specific object store such as
+<a href="../object_stores/#aws-s3">AWS S3</a>,
+<a href="../object_stores/#azure-blob-storage">Microsoft Azure Blob Storage</a>,
+<a href="../object_stores/#google-cloud-storage">Google Cloud Storage</a>, or a compatible
+provider, please refer to <a href="../object_stores/">Appendix C - Common object stores for backups</a>.</p>
+<h2 id="wal-archiving">WAL archiving</h2>
+<p>WAL archiving is the process that feeds a <a href="../../backup/#wal-archive">WAL archive</a>
+in CloudNativePG.</p>
+<p>The WAL archive is defined in the <code>.spec.backup.barmanObjectStore</code> stanza of
+a <code>Cluster</code> resource.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Please refer to <a href="https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#BarmanObjectStoreConfiguration"><code>BarmanObjectStoreConfiguration</code></a>
+in the barman-cloud API for a full list of options.</p>
+</div>
+<p>If required, you can choose to compress WAL files as soon as they
+are uploaded and/or encrypt them:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      [...]
+      wal:
+        compression: gzip
+        encryption: AES256
+</code></pre>
+<p>You can configure the encryption directly in your bucket, and the operator
+will use it unless you override it in the cluster configuration.</p>
+<p>PostgreSQL implements a sequential archiving scheme, where the
+<code>archive_command</code> will be executed sequentially for every WAL
+segment to be archived.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>By default, CloudNativePG sets <code>archive_timeout</code> to <code>5min</code>, ensuring
+that WAL files, even in case of low workloads, are closed and archived
+at least every 5 minutes, providing a deterministic time-based value for
+your Recovery Point Objective (<a href="../../before_you_start/#rpo">RPO</a>). Even though you change the value
+of the <a href="https://www.postgresql.org/docs/current/runtime-config-wal.html#GUC-ARCHIVE-TIMEOUT"><code>archive_timeout</code> setting in the PostgreSQL configuration</a>,
+our experience suggests that the default value set by the operator is
+suitable for most use cases.</p>
+</div>
+<p>When the bandwidth between the PostgreSQL instance and the object
+store allows archiving more than one WAL file in parallel, you
+can use the parallel WAL archiving feature of the instance manager
+like in the following example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      [...]
+      wal:
+        compression: gzip
+        maxParallel: 8
+        encryption: AES256
+</code></pre>
+<p>In the previous example, the instance manager optimizes the WAL
+archiving process by archiving in parallel at most eight ready
+WALs, including the one requested by PostgreSQL.</p>
+<p>When PostgreSQL will request the archiving of a WAL that has
+already been archived by the instance manager as an optimization,
+that archival request will be just dismissed with a positive status.</p>
+<h2 id="retention-policies">Retention policies</h2>
+<p>CloudNativePG can manage the automated deletion of backup files from
+the backup object store, using <strong>retention policies</strong> based on the recovery
+window.</p>
+<p>Internally, the retention policy feature uses <code>barman-cloud-backup-delete</code>
+with <code>--retention-policy “RECOVERY WINDOW OF {{ retention policy value }} {{ retention policy unit }}”</code>.</p>
+<p>For example, you can define your backups with a retention policy of 30 days as
+follows:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      destinationPath: &quot;&lt;destination path here&gt;&quot;
+      s3Credentials:
+        accessKeyId:
+          name: aws-creds
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: aws-creds
+          key: ACCESS_SECRET_KEY
+    retentionPolicy: &quot;30d&quot;
+</code></pre>
+<div class="admonition note">
+<p class="admonition-title">There's more ...</p>
+<p>The <strong>recovery window retention policy</strong> is focused on the concept of
+<em>Point of Recoverability</em> (<code>PoR</code>), a moving point in time determined by
+<code>current time - recovery window</code>. The <em>first valid backup</em> is the first
+available backup before <code>PoR</code> (in reverse chronological order).
+CloudNativePG must ensure that we can recover the cluster at
+any point in time between <code>PoR</code> and the latest successfully archived WAL
+file, starting from the first valid backup. Base backups that are older
+than the first valid backup will be marked as <em>obsolete</em> and permanently
+removed after the next backup is completed.</p>
+</div>
+<h2 id="compression-algorithms">Compression algorithms</h2>
+<p>CloudNativePG by default archives backups and WAL files in an
+uncompressed fashion. However, it also supports the following compression
+algorithms via <code>barman-cloud-backup</code> (for backups) and
+<code>barman-cloud-wal-archive</code> (for WAL files):</p>
+<ul>
+<li>bzip2</li>
+<li>gzip</li>
+<li>lz4</li>
+<li>snappy</li>
+<li>xz</li>
+<li>zstd</li>
+</ul>
+<p>The compression settings for backups and WALs are independent. See the
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#DataBackupConfiguration">DataBackupConfiguration</a> and
+<a href="https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#WalBackupConfiguration">WALBackupConfiguration</a> sections in
+the barman-cloud API reference.</p>
+<p>It is important to note that archival time, restore time, and size change
+between the algorithms, so the compression algorithm should be chosen according
+to your use case.</p>
+<p>The Barman team has performed an evaluation of the performance of the supported
+algorithms for Barman Cloud. The following table summarizes a scenario where a
+backup is taken on a local MinIO deployment. The Barman GitHub project includes
+a <a href="https://github.com/EnterpriseDB/barman/issues/344#issuecomment-992547396">deeper analysis</a>.</p>
+<table>
+<thead>
+<tr>
+<th>Compression</th>
+<th>Backup Time (ms)</th>
+<th>Restore Time (ms)</th>
+<th>Uncompressed size (MB)</th>
+<th>Compressed size (MB)</th>
+<th>Approx ratio</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td>None</td>
+<td>10927</td>
+<td>7553</td>
+<td>395</td>
+<td>395</td>
+<td>1:1</td>
+</tr>
+<tr>
+<td>bzip2</td>
+<td>25404</td>
+<td>13886</td>
+<td>395</td>
+<td>67</td>
+<td>5.9:1</td>
+</tr>
+<tr>
+<td>gzip</td>
+<td>116281</td>
+<td>3077</td>
+<td>395</td>
+<td>91</td>
+<td>4.3:1</td>
+</tr>
+<tr>
+<td>snappy</td>
+<td>8134</td>
+<td>8341</td>
+<td>395</td>
+<td>166</td>
+<td>2.4:1</td>
+</tr>
+</tbody>
+</table>
+<h2 id="tagging-of-backup-objects">Tagging of backup objects</h2>
+<p>Barman 2.18 introduces support for tagging backup resources when saving them in
+object stores via <code>barman-cloud-backup</code> and <code>barman-cloud-wal-archive</code>. As a
+result, if your PostgreSQL container image includes Barman with version 2.18 or
+higher, CloudNativePG enables you to specify tags as key-value pairs
+for backup objects, namely base backups, WAL files and history files.</p>
+<p>You can use two properties in the <code>.spec.backup.barmanObjectStore</code> definition:</p>
+<ul>
+<li><code>tags</code>: key-value pair tags to be added to backup objects and archived WAL
+  file in the backup object store</li>
+<li><code>historyTags</code>: key-value pair tags to be added to archived history files in
+  the backup object store</li>
+</ul>
+<p>The excerpt of a YAML manifest below provides an example of usage of this
+feature:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      [...]
+      tags:
+        backupRetentionPolicy: &quot;expire&quot;
+      historyTags:
+        backupRetentionPolicy: &quot;keep&quot;
+</code></pre>
+<h2 id="extra-options-for-the-backup-and-wal-commands">Extra options for the backup and WAL commands</h2>
+<p>You can append additional options to the <code>barman-cloud-backup</code> and <code>barman-cloud-wal-archive</code> commands by using
+the <code>additionalCommandArgs</code> property in the
+<code>.spec.backup.barmanObjectStore.data</code> and <code>.spec.backup.barmanObjectStore.wal</code> sections respectively.
+These properties are lists of strings that will be appended to the
+<code>barman-cloud-backup</code> and <code>barman-cloud-wal-archive</code> commands.</p>
+<p>For example, you can use the <code>--read-timeout=60</code> to customize the connection
+reading timeout.</p>
+<p>For additional options supported by <code>barman-cloud-backup</code> and <code>barman-cloud-wal-archive</code> commands you can refer to the
+official barman documentation <a href="https://www.pgbarman.org/documentation/">here</a>.</p>
+<p>If an option provided in <code>additionalCommandArgs</code> is already present in the
+declared options in its section (<code>.spec.backup.barmanObjectStore.data</code> or <code>.spec.backup.barmanObjectStore.wal</code>), the extra option will be
+ignored.</p>
+<p>The following is an example of how to use this property:</p>
+<p>For backups:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      [...]
+      data:
+        additionalCommandArgs:
+        - &quot;--min-chunk-size=5MB&quot;
+        - &quot;--read-timeout=60&quot;
+</code></pre>
+<p>For WAL files:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+[...]
+spec:
+  backup:
+    barmanObjectStore:
+      [...]
+      wal:
+        additionalCommandArgs:
+        - &quot;--max-concurrency=1&quot;
+        - &quot;--read-timeout=60&quot;
+</code></pre>
+<h2 id="recovery-from-an-object-store">Recovery from an object store</h2>
+<p>You can recover from a backup created by Barman Cloud and stored on a supported
+object store. After you define the external cluster, including all the required
+configuration in the <code>barmanObjectStore</code> section, you need to reference it in
+the <code>.spec.recovery.source</code> option.</p>
+<p>This example defines a recovery object store in a blob container in Azure:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-restore
+spec:
+  [...]
+
+  superuserSecret:
+    name: superuser-secret
+
+  bootstrap:
+    recovery:
+      source: clusterBackup
+
+  externalClusters:
+    - name: clusterBackup
+      barmanObjectStore:
+        destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/
+        azureCredentials:
+          storageAccount:
+            name: recovery-object-store-secret
+            key: storage_account_name
+          storageKey:
+            name: recovery-object-store-secret
+            key: storage_account_key
+        wal:
+          maxParallel: 8
+</code></pre>
+<p>The previous example assumes that the application database and its owning user
+are named <code>app</code> by default. If the PostgreSQL cluster being restored uses
+different names, you must specify these names before exiting the recovery phase,
+as documented in <a href="../../recovery/#configure-the-application-database">"Configure the application database"</a>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>By default, the <code>recovery</code> method strictly uses the <code>name</code> of the
+cluster in the <code>externalClusters</code> section as the name of the main folder
+of the backup data within the object store. This name is normally reserved
+for the name of the server. You can specify a different folder name
+using the <code>barmanObjectStore.serverName</code> property.</p>
+</div>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>This example takes advantage of the parallel WAL restore feature,
+dedicating up to 8 jobs to concurrently fetch the required WAL files from the
+archive. This feature can appreciably reduce the recovery time. Make sure that
+you plan ahead for this scenario and correctly tune the value of this parameter
+for your environment. It will make a difference when you need it, and you will.</p>
+</div>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../backup_volumesnapshot/" class="btn btn-neutral float-left" title="Appendix A - Backup on volume snapshots"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../object_stores/" class="btn btn-neutral float-right" title="Appendix C - Common object stores for backups">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../backup_volumesnapshot/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../object_stores/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../..";</script>
+    <script src="../../js/theme_extra.js"></script>
+    <script src="../../js/theme.js"></script>
+      <script src="../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/preview/appendixes/backup_volumesnapshot/index.html b/assets/documentation/preview/appendixes/backup_volumesnapshot/index.html
new file mode 100644
index 000000000..0a83ac16f
--- /dev/null
+++ b/assets/documentation/preview/appendixes/backup_volumesnapshot/index.html
@@ -0,0 +1,740 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../img/favicon.ico" />
+    <title>Appendix A - Backup on volume snapshots - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../css/theme.css" />
+    <link rel="stylesheet" href="../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Appendix A - Backup on volume snapshots";
+        var mkdocs_page_input_path = "appendixes/backup_volumesnapshot.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul class="current">
+                  <li class="toctree-l1 current"><a class="reference internal current" href="#">Appendix A - Backup on volume snapshots</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#about-standard-volume-snapshots">About standard Volume Snapshots</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#requirements">Requirements</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#how-to-configure-volume-snapshot-backups">How to configure Volume Snapshot backups</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#hot-and-cold-backups">Hot and cold backups</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#overriding-the-default-behavior">Overriding the default behavior</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#persistence-of-volume-snapshot-objects">Persistence of volume snapshot objects</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#backup-volume-snapshot-deadlines">Backup Volume Snapshot Deadlines</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#error-handling">Error Handling</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#retryable-errors">Retryable Errors</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#examples">Examples</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#example-of-volume-snapshot-backup">Example of Volume Snapshot Backup</a>
+    </li>
+    </ul>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+          <li class="breadcrumb-item">Appendixes</li>
+      <li class="breadcrumb-item active">Appendix A - Backup on volume snapshots</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="appendix-a-backup-on-volume-snapshots">Appendix A - Backup on volume snapshots</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Please refer to the official Kubernetes documentation for a list of all
+the supported <a href="https://kubernetes-csi.github.io/docs/drivers.html">Container Storage Interface (CSI) drivers</a>
+that provide snapshotting capabilities.</p>
+</div>
+<p>CloudNativePG is one of the first known cases of database operators that
+directly leverages the Kubernetes native Volume Snapshot API for both
+backup and recovery operations, in an entirely declarative way.</p>
+<h2 id="about-standard-volume-snapshots">About standard Volume Snapshots</h2>
+<p>Volume snapshotting was first introduced in
+<a href="https://kubernetes.io/blog/2018/10/09/introducing-volume-snapshot-alpha-for-kubernetes/">Kubernetes 1.12 (2018) as alpha</a>,
+promoted to <a href="https://kubernetes.io/blog/2019/12/09/kubernetes-1-17-feature-cis-volume-snapshot-beta/">beta in 1.17 (2019)</a>,
+and <a href="https://kubernetes.io/blog/2020/12/10/kubernetes-1.20-volume-snapshot-moves-to-ga/">moved to GA in 1.20 (2020)</a>.
+It’s now stable, widely available, and standard, providing 3 custom resource
+definitions: <code>VolumeSnapshot</code>, <code>VolumeSnapshotContent</code> and
+<code>VolumeSnapshotClass</code>.</p>
+<p>This Kubernetes feature defines a generic interface for:</p>
+<ul>
+<li>the creation of a new volume snapshot, starting from a PVC</li>
+<li>the deletion of an existing snapshot</li>
+<li>the creation of a new volume from a snapshot</li>
+</ul>
+<p>Kubernetes delegates the actual implementation to the underlying CSI drivers
+(not all of them support volume snapshots). Normally, storage classes that
+provide volume snapshotting support <strong>incremental and differential block level
+backup in a transparent way for the application</strong>, which can delegate the
+complexity and the independent management down the stack, including
+cross-cluster availability of the snapshots.</p>
+<h2 id="requirements">Requirements</h2>
+<p>For Volume Snapshots to work with a CloudNativePG cluster, you need to ensure
+that each storage class used to dynamically provision the PostgreSQL volumes
+(namely, <code>storage</code> and <code>walStorage</code> sections) support volume snapshots.</p>
+<p>Given that instructions vary from storage class to storage class, please
+refer to the documentation of the specific storage class and related CSI
+drivers you have deployed in your Kubernetes system.</p>
+<p>Normally, it is the <a href="https://kubernetes.io/docs/concepts/storage/volume-snapshot-classes/"><code>VolumeSnapshotClass</code></a>
+that is responsible to ensure that snapshots can be taken from persistent
+volumes of a given storage class, and managed as <code>VolumeSnapshot</code> and
+<code>VolumeSnapshotContent</code> resources.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>It is your responsibility to verify with the third party vendor
+that volume snapshots are supported. CloudNativePG only interacts
+with the Kubernetes API on this matter, and we cannot support issues
+at the storage level for each specific CSI driver.</p>
+</div>
+<h2 id="how-to-configure-volume-snapshot-backups">How to configure Volume Snapshot backups</h2>
+<p>CloudNativePG allows you to configure a given Postgres cluster for Volume
+Snapshot backups through the <code>backup.volumeSnapshot</code> stanza.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Please refer to <a href="../../cloudnative-pg.v1/#postgresql-cnpg-io-v1-VolumeSnapshotConfiguration"><code>VolumeSnapshotConfiguration</code></a>
+in the API reference for a full list of options.</p>
+</div>
+<p>A generic example with volume snapshots (assuming that PGDATA and WALs share
+the same storage class) is the following:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: snapshot-cluster
+spec:
+  instances: 3
+
+  storage:
+    storageClass: @STORAGE_CLASS@
+    size: 10Gi
+  walStorage:
+    storageClass: @STORAGE_CLASS@
+    size: 10Gi
+
+  backup:
+    # Volume snapshot backups
+    volumeSnapshot:
+       className: @VOLUME_SNAPSHOT_CLASS_NAME@
+
+  plugins:
+  - name: barman-cloud.cloudnative-pg.io
+    isWALArchiver: true
+    parameters:
+      barmanObjectName: @OBJECTSTORE_NAME@
+</code></pre>
+<p>As you can see, the <code>backup</code> section contains both the <code>volumeSnapshot</code> stanza
+(controlling physical base backups on volume snapshots) and the
+<code>plugins</code> one (controlling the <a href="../../wal_archiving/">WAL archive</a>).</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Once you have defined the <code>plugin</code>, you can decide to use
+both volume snapshot and plugin backup strategies simultaneously
+to take physical backups.</p>
+</div>
+<p>The <code>volumeSnapshot.className</code> option allows you to reference the default
+<code>VolumeSnapshotClass</code> object used for all the storage volumes you have
+defined in your PostgreSQL cluster.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>In case you are using a different storage class for <code>PGDATA</code> and
+WAL files, you can specify a separate <code>VolumeSnapshotClass</code> for
+that volume through the <code>walClassName</code> option (which defaults to
+the same value as <code>className</code>).</p>
+</div>
+<p>Once a cluster is defined for volume snapshot backups, you need to define
+a <code>ScheduledBackup</code> resource that requests such backups on a periodic basis.</p>
+<h2 id="hot-and-cold-backups">Hot and cold backups</h2>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>As noted in the <a href="../../backup/">backup document</a>, a cold snapshot explicitly
+set to target the primary will result in the primary being fenced for
+the duration of the backup, making the cluster read-only during this
+period. For safety, in a cluster already containing fenced instances, a cold
+snapshot is rejected.</p>
+</div>
+<p>By default, CloudNativePG requests an online/hot backup on volume snapshots, using the
+<a href="https://www.postgresql.org/docs/current/continuous-archiving.html#BACKUP-LOWLEVEL-BASE-BACKUP">PostgreSQL defaults of the low-level API for base backups</a>:</p>
+<ul>
+<li>it doesn't request an immediate checkpoint when starting the backup procedure</li>
+<li>it waits for the WAL archiver to archive the last segment of the backup when
+  terminating the backup procedure</li>
+</ul>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The default values are suitable for most production environments. Hot
+backups are consistent and can be used to perform snapshot recovery, as we
+ensure WAL retention from the start of the backup through a temporary
+replication slot. However, our recommendation is to rely on cold backups for
+that purpose.</p>
+</div>
+<p>You can explicitly change the default behavior through the following options in
+the <code>.spec.backup.volumeSnapshot</code> stanza of the <code>Cluster</code> resource:</p>
+<ul>
+<li><code>online</code>: accepting <code>true</code> (default) or <code>false</code> as a value</li>
+<li><code>onlineConfiguration.immediateCheckpoint</code>: whether you want to request an
+  immediate checkpoint before you start the backup procedure or not;
+  technically, it corresponds to the <code>fast</code> argument you pass to the
+  <code>pg_backup_start</code>/<code>pg_start_backup()</code> function in PostgreSQL, accepting
+  <code>true</code> (default) or <code>false</code></li>
+<li><code>onlineConfiguration.waitForArchive</code>: whether you want to wait for the
+  archiver to process the last segment of the backup or not; technically, it
+  corresponds to the <code>wait_for_archive</code> argument you pass to the
+  <code>pg_backup_stop</code>/<code>pg_stop_backup()</code> function in PostgreSQL, accepting <code>true</code>
+  (default) or <code>false</code></li>
+</ul>
+<p>If you want to change the default behavior of your Postgres cluster to take
+cold backups by default, all you need to do is add the <code>online: false</code> option
+to your manifest, as follows:</p>
+<pre><code class="language-yaml">  # ...
+  backup:
+    volumeSnapshot:
+       online: false
+       # ...
+</code></pre>
+<p>If you are instead requesting an immediate checkpoint as the default behavior,
+you can add this section:</p>
+<pre><code class="language-yaml">  # ...
+  backup:
+    volumeSnapshot:
+       online: true
+       onlineConfiguration:
+         immediateCheckpoint: true
+       # ...
+</code></pre>
+<h3 id="overriding-the-default-behavior">Overriding the default behavior</h3>
+<p>You can change the default behavior defined in the cluster resource by setting
+different values for <code>online</code> and, if needed, <code>onlineConfiguration</code> in the <code>Backup</code> or <code>ScheduledBackup</code> objects.</p>
+<p>For example, in case you want to issue an on-demand cold backup, you can
+create a <code>Backup</code> object with <code>.spec.online: false</code>:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Backup
+metadata:
+  name: snapshot-cluster-cold-backup-example
+spec:
+  cluster:
+    name: snapshot-cluster
+  method: volumeSnapshot
+  online: false
+</code></pre>
+<p>Similarly, for the ScheduledBackup:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: ScheduledBackup
+metadata:
+  name: snapshot-cluster-cold-backup-example
+spec:
+  schedule: &quot;0 0 0 * * *&quot;
+  backupOwnerReference: self
+  cluster:
+    name: snapshot-cluster
+  method: volumeSnapshot
+  online: false
+</code></pre>
+<h2 id="persistence-of-volume-snapshot-objects">Persistence of volume snapshot objects</h2>
+<p>By default, <code>VolumeSnapshot</code> objects created by CloudNativePG are retained after
+deleting the <code>Backup</code> object that originated them, or the <code>Cluster</code> they refer to.
+Such behavior is controlled by the <code>.spec.backup.volumeSnapshot.snapshotOwnerReference</code>
+option which accepts the following values:</p>
+<ul>
+<li><code>none</code>: no ownership is set, meaning that <code>VolumeSnapshot</code> objects persist
+   after the <code>Backup</code> and/or the <code>Cluster</code> resources are removed</li>
+<li><code>backup</code>: the <code>VolumeSnapshot</code> object is owned by the <code>Backup</code> resource that
+   originated it, and when the backup object is removed, the volume snapshot is
+   also removed</li>
+<li><code>cluster</code>: the <code>VolumeSnapshot</code> object is owned by the <code>Cluster</code> resource that
+   is backed up, and when the Postgres cluster is removed, the volume snapshot is
+   also removed</li>
+</ul>
+<p>In case a <code>VolumeSnapshot</code> is deleted, the <code>deletionPolicy</code> specified in the
+<code>VolumeSnapshotContent</code> is evaluated:</p>
+<ul>
+<li>if set to <code>Retain</code>, the <code>VolumeSnapshotContent</code> object is kept</li>
+<li>if set to <code>Delete</code>, the <code>VolumeSnapshotContent</code> object is removed as well</li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p><code>VolumeSnapshotContent</code> objects do not keep all the information regarding the
+backup and the cluster they refer to (like the annotations and labels that
+are contained in the <code>VolumeSnapshot</code> object). Although possible, restoring
+from just this kind of object might not be straightforward. For this reason,
+our recommendation is to always backup the <code>VolumeSnapshot</code> definitions,
+even using a Kubernetes level data protection solution.</p>
+</div>
+<p>The value in <code>VolumeSnapshotContent</code> is determined by the <code>deletionPolicy</code> set
+in the corresponding <code>VolumeSnapshotClass</code> definition, which is
+referenced in the <code>.spec.backup.volumeSnapshot.className</code> option.</p>
+<p>Please refer to the <a href="https://kubernetes.io/docs/concepts/storage/volume-snapshot-classes/">Kubernetes documentation on Volume Snapshot Classes</a>
+for details on this standard behavior.</p>
+<h2 id="backup-volume-snapshot-deadlines">Backup Volume Snapshot Deadlines</h2>
+<p>CloudNativePG supports backups using the volume snapshot method. In some
+environments, volume snapshots may encounter temporary issues that can be
+retried.</p>
+<p>The <code>backup.cnpg.io/volumeSnapshotDeadline</code> annotation defines how long
+CloudNativePG should continue retrying recoverable errors before marking the
+backup as failed.</p>
+<p>You can add the <code>backup.cnpg.io/volumeSnapshotDeadline</code> annotation to both
+<code>Backup</code> and <code>ScheduledBackup</code> resources. For <code>ScheduledBackup</code> resources, this
+annotation is automatically inherited by any <code>Backup</code> resources created from
+the schedule.</p>
+<p>If not specified, the default retry deadline is <strong>10 minutes</strong>.</p>
+<h3 id="error-handling">Error Handling</h3>
+<p>When a retryable error occurs during a volume snapshot operation:</p>
+<ol>
+<li>CloudNativePG records the time of the first error.</li>
+<li>The system retries the operation every <strong>10 seconds</strong>.</li>
+<li>If the error persists beyond the specified deadline (or the default 10
+   minutes), the backup is marked as <strong>failed</strong>.</li>
+</ol>
+<h3 id="retryable-errors">Retryable Errors</h3>
+<p>CloudNativePG treats the following types of errors as retryable:</p>
+<ul>
+<li><strong>Server timeout errors</strong> (HTTP 408, 429, 500, 502, 503, 504)</li>
+<li><strong>Conflicts</strong> (optimistic locking errors)</li>
+<li><strong>Internal errors</strong></li>
+<li><strong>Context deadline exceeded errors</strong></li>
+<li><strong>Timeout errors from the CSI snapshot controller</strong></li>
+</ul>
+<h3 id="examples">Examples</h3>
+<p>You can add the annotation to a <code>ScheduledBackup</code> resource as follows:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: ScheduledBackup
+metadata:
+  name: daily-backup-schedule
+  annotations:
+    backup.cnpg.io/volumeSnapshotDeadline: &quot;20&quot;
+spec:
+  schedule: &quot;0 0 * * *&quot;
+  backupOwnerReference: self
+  method: volumeSnapshot
+  # other configuration...
+</code></pre>
+<p>When you define a <code>ScheduledBackup</code> with the annotation, any <code>Backup</code> resources
+created from this schedule automatically inherit the specified timeout value.</p>
+<p>In the following example, all backups created from the schedule will have a
+30-minute timeout for retrying recoverable snapshot errors.</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: ScheduledBackup
+metadata:
+  name: weekly-backup
+  annotations:
+    backup.cnpg.io/volumeSnapshotDeadline: &quot;30&quot;
+spec:
+  schedule: &quot;0 0 * * 0&quot;  # Weekly backup on Sunday
+  method: volumeSnapshot
+  cluster:
+    name: my-postgresql-cluster
+</code></pre>
+<p>Alternatively, you can add the annotation directly to a <code>Backup</code> Resource:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Backup
+metadata:
+  name: my-backup
+  annotations:
+    backup.cnpg.io/volumeSnapshotDeadline: &quot;15&quot;
+spec:
+  method: volumeSnapshot
+  # other backup configuration...
+</code></pre>
+<h2 id="example-of-volume-snapshot-backup">Example of Volume Snapshot Backup</h2>
+<p>The following example shows how to configure volume snapshot base backups on an
+EKS cluster on AWS using the <code>ebs-sc</code> storage class and the <code>csi-aws-vsc</code>
+volume snapshot class.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>If you are interested in testing the example, please read
+<a href="https://github.com/kubernetes-sigs/aws-ebs-csi-driver/tree/master/examples/kubernetes/snapshot">"Volume Snapshots" for the Amazon Elastic Block Store (EBS) CSI driver</a> <!-- wokeignore:rule=master -->
+for detailed instructions on the installation process for the storage class and the snapshot class.</p>
+</div>
+<p>The following manifest creates a <code>Cluster</code> that is ready to be used for volume
+snapshots and that stores the WAL archive in a S3 bucket via IAM role for the
+Service Account (IRSA, see <a href="../object_stores/#aws-s3">AWS S3</a>):</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: hendrix
+spec:
+  instances: 3
+
+  storage:
+    storageClass: ebs-sc
+    size: 10Gi
+  walStorage:
+    storageClass: ebs-sc
+    size: 10Gi
+
+  backup:
+    volumeSnapshot:
+       className: csi-aws-vsc
+
+  plugins:
+  - name: barman-cloud.cloudnative-pg.io
+    isWALArchiver: true
+    parameters:
+      barmanObjectName: @OBJECTSTORE_NAME@
+
+  serviceAccountTemplate:
+    metadata:
+      annotations:
+        eks.amazonaws.com/role-arn: &quot;@ARN@&quot;
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: ScheduledBackup
+metadata:
+  name: hendrix-vs-backup
+spec:
+  cluster:
+    name: hendrix
+  method: volumeSnapshot
+  schedule: '0 0 0 * * *'
+  backupOwnerReference: cluster
+  immediate: true
+</code></pre>
+<p>The last resource defines daily volume snapshot backups at midnight, requesting
+one immediately after the cluster is created.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../../cncf-projects/cilium/" class="btn btn-neutral float-left" title="Cilium"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../backup_barmanobjectstore/" class="btn btn-neutral float-right" title="Appendix B - Backup on object stores">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../../cncf-projects/cilium/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../backup_barmanobjectstore/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../..";</script>
+    <script src="../../js/theme_extra.js"></script>
+    <script src="../../js/theme.js"></script>
+      <script src="../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/preview/appendixes/object_stores/index.html b/assets/documentation/preview/appendixes/object_stores/index.html
index 9e31628f7..fabd751f3 100644
--- a/assets/documentation/preview/appendixes/object_stores/index.html
+++ b/assets/documentation/preview/appendixes/object_stores/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../img/favicon.ico" />
-    <title>Appendix A - Common object stores for backups - CloudNativePG v1.26.0-rc3</title>
+    <title>Appendix C - Common object stores for backups - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../css/theme.css" />
     <link rel="stylesheet" href="../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -13,7 +13,7 @@
     
       <script>
         // Current page data
-        var mkdocs_page_name = "Appendix A - Common object stores for backups";
+        var mkdocs_page_name = "Appendix C - Common object stores for backups";
         var mkdocs_page_input_path = "appendixes/object_stores.md";
         var mkdocs_page_url = null;
       </script>
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul class="current">
-                  <li class="toctree-l1 current"><a class="reference internal current" href="#">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1 current"><a class="reference internal current" href="#">Appendix C - Common object stores for backups</a>
     <ul class="current">
     <li class="toctree-l2"><a class="reference internal" href="#aws-s3">AWS S3</a>
         <ul>
@@ -309,8 +311,6 @@
     </li>
         </ul>
     </li>
-    <li class="toctree-l2"><a class="reference internal" href="#minio-gateway">MinIO Gateway</a>
-    </li>
     </ul>
                   </li>
               </ul>
@@ -321,7 +321,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -329,7 +329,7 @@
   <ul class="wy-breadcrumbs">
     <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
           <li class="breadcrumb-item">Appendixes</li>
-      <li class="breadcrumb-item active">Appendix A - Common object stores for backups</li>
+      <li class="breadcrumb-item active">Appendix C - Common object stores for backups</li>
     <li class="wy-breadcrumbs-aside">
     </li>
   </ul>
@@ -338,15 +338,17 @@
           <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
             <div class="section" itemprop="articleBody">
               
-                <h1 id="appendix-a-common-object-stores-for-backups">Appendix A - Common object stores for backups</h1>
+                <h1 id="appendix-c-common-object-stores-for-backups">Appendix C - Common object stores for backups</h1>
 <!-- SPDX-License-Identifier: CC-BY-4.0 -->
 
 <div class="admonition warning">
 <p class="admonition-title">Warning</p>
-<p>With the deprecation of native Barman Cloud support in CloudNativePG in
-favor of the Barman Cloud Plugin, this page—and the backup and recovery
-documentation—may undergo changes before the official release of version
-1.26.0.</p>
+<p>As of CloudNativePG 1.26, <strong>native Barman Cloud support is deprecated</strong> in
+favor of the <strong>Barman Cloud Plugin</strong>. While the native integration remains
+functional for now, we strongly recommend beginning a gradual migration to
+the plugin-based interface after appropriate testing. The Barman Cloud
+Plugin documentation describes
+<a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/object_stores/">how to use common object stores</a>.</p>
 </div>
 <p>You can store the <a href="../../backup/">backup</a> files in any service that is supported
 by the Barman Cloud infrastructure. That is:</p>
@@ -628,119 +630,11 @@ <h3 id="using-authentication">Using authentication</h3>
 information to access your Google Cloud Storage bucket, meaning that if someone gets access to the pod
 will also have write permissions to the bucket.</p>
 </div>
-<h2 id="minio-gateway">MinIO Gateway</h2>
-<p>Optionally, you can use MinIO Gateway as a common interface which
-relays backup objects to other cloud storage solutions, like S3 or GCS.
-For more information, please refer to <a href="https://docs.min.io/">MinIO official documentation</a>.</p>
-<p>Specifically, the CloudNativePG cluster can directly point to a local
-MinIO Gateway as an endpoint, using previously created credentials and service.</p>
-<p>MinIO secrets will be used by both the PostgreSQL cluster and the MinIO instance.
-Therefore, you must create them in the same namespace:</p>
-<pre><code class="language-sh">kubectl create secret generic minio-creds \
-  --from-literal=MINIO_ACCESS_KEY=&lt;minio access key here&gt; \
-  --from-literal=MINIO_SECRET_KEY=&lt;minio secret key here&gt;
-</code></pre>
-<div class="admonition note">
-<p class="admonition-title">Note</p>
-<p>Cloud Object Storage credentials will be used only by MinIO Gateway in this case.</p>
-</div>
-<div class="admonition important">
-<p class="admonition-title">Important</p>
-<p>In order to allow PostgreSQL to reach MinIO Gateway, it is necessary to create a
-<code>ClusterIP</code> service on port <code>9000</code> bound to the MinIO Gateway instance.</p>
-</div>
-<p>For example:</p>
-<pre><code class="language-yaml">apiVersion: v1
-kind: Service
-metadata:
-  name: minio-gateway-service
-spec:
-  type: ClusterIP
-  ports:
-    - port: 9000
-      targetPort: 9000
-      protocol: TCP
-  selector:
-    app: minio
-</code></pre>
-<div class="admonition warning">
-<p class="admonition-title">Warning</p>
-<p>At the time of writing this documentation, the official
-<a href="https://github.com/minio/minio-operator/issues/71">MinIO Operator</a>
-for Kubernetes does not support the gateway feature. As such, we will use a
-<code>deployment</code> instead.</p>
-</div>
-<p>The MinIO deployment will use cloud storage credentials to upload objects to the
-remote bucket and relay backup files to different locations.</p>
-<p>Here is an example using AWS S3 as Cloud Object Storage:</p>
-<pre><code class="language-yaml">apiVersion: apps/v1
-kind: Deployment
-[...]
-spec:
-  containers:
-  - name: minio
-    image: minio/minio:RELEASE.2020-06-03T22-13-49Z
-    args:
-    - gateway
-    - s3
-    env:
-    # MinIO access key and secret key
-    - name: MINIO_ACCESS_KEY
-      valueFrom:
-        secretKeyRef:
-          name: minio-creds
-          key: MINIO_ACCESS_KEY
-    - name: MINIO_SECRET_KEY
-      valueFrom:
-        secretKeyRef:
-          name: minio-creds
-          key: MINIO_SECRET_KEY
-    # AWS credentials
-    - name: AWS_ACCESS_KEY_ID
-      valueFrom:
-        secretKeyRef:
-          name: aws-creds
-          key: ACCESS_KEY_ID
-    - name: AWS_SECRET_ACCESS_KEY
-      valueFrom:
-        secretKeyRef:
-          name: aws-creds
-          key: ACCESS_SECRET_KEY
-# Uncomment the below section if session token is required
-#   - name: AWS_SESSION_TOKEN
-#     valueFrom:
-#       secretKeyRef:
-#         name: aws-creds
-#         key: ACCESS_SESSION_TOKEN
-        ports:
-        - containerPort: 9000
-</code></pre>
-<p>Proceed by configuring MinIO Gateway service as the <code>endpointURL</code> in the <code>Cluster</code>
-definition, then choose a bucket name to replace <code>BUCKET_NAME</code>:</p>
-<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-[...]
-spec:
-  backup:
-    barmanObjectStore:
-      destinationPath: s3://BUCKET_NAME/
-      endpointURL: http://minio-gateway-service:9000
-      s3Credentials:
-        accessKeyId:
-          name: minio-creds
-          key: MINIO_ACCESS_KEY
-        secretAccessKey:
-          name: minio-creds
-          key: MINIO_SECRET_KEY
-    [...]
-</code></pre>
-<p>Verify on <code>s3://BUCKET_NAME/</code> the presence of archived WAL files before
-proceeding with a backup.</p>
               
             </div>
           </div><footer>
     <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
-        <a href="../../cncf-projects/external-secrets/" class="btn btn-neutral float-left" title="External Secrets"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../backup_barmanobjectstore/" class="btn btn-neutral float-left" title="Appendix B - Backup on object stores"><span class="icon icon-circle-arrow-left"></span> Previous</a>
     </div>
 
   <hr/>
@@ -764,7 +658,7 @@ <h2 id="minio-gateway">MinIO Gateway</h2>
   <span class="rst-current-version" data-toggle="rst-current-version">
     
     
-      <span><a href="../../cncf-projects/external-secrets/" style="color: #fcfcfc">&laquo; Previous</a></span>
+      <span><a href="../backup_barmanobjectstore/" style="color: #fcfcfc">&laquo; Previous</a></span>
     
     
   </span>
diff --git a/assets/documentation/preview/applications/index.html b/assets/documentation/preview/applications/index.html
index 118e3aae1..e62d89a1e 100644
--- a/assets/documentation/preview/applications/index.html
+++ b/assets/documentation/preview/applications/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Connecting from an application - CloudNativePG v1.26.0-rc3</title>
+    <title>Connecting from an application - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -240,6 +232,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -284,10 +280,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -297,7 +299,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -384,7 +386,13 @@ <h3 id="secrets">Secrets</h3>
 <li>a working <a href="https://www.postgresql.org/docs/current/libpq-pgpass.html"><code>.pgpass file</code></a></li>
 <li><a href="https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING">uri</a></li>
 <li><a href="https://jdbc.postgresql.org/documentation/use/#connecting-to-the-database">jdbc-uri</a></li>
+<li><a href="https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING">fqdn-uri</a></li>
+<li><a href="https://jdbc.postgresql.org/documentation/use/#connecting-to-the-database">fqdn-jdbc-uri</a></li>
 </ul>
+<p>The FQDN to be used in the URIs is calculated using the Kubernetes cluster
+domain specified in the <code>KUBERNETES_CLUSTER_DOMAIN</code> configuration parameter.
+See <a href="../operator_conf/">the operator configuration documentation</a> for more information
+about that.</p>
 <p>The <code>-app</code> credentials are the ones that should be used by applications
 connecting to the PostgreSQL cluster, and correspond to the user <em>owning</em> the
 database.</p>
diff --git a/assets/documentation/preview/architecture/index.html b/assets/documentation/preview/architecture/index.html
index d21793a2f..4bba4b196 100644
--- a/assets/documentation/preview/architecture/index.html
+++ b/assets/documentation/preview/architecture/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Architecture - CloudNativePG v1.26.0-rc3</title>
+    <title>Architecture - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -142,18 +142,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -262,6 +254,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -306,10 +302,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -319,7 +321,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/backup/index.html b/assets/documentation/preview/backup/index.html
index 9c0b25f03..03b20676f 100644
--- a/assets/documentation/preview/backup/index.html
+++ b/assets/documentation/preview/backup/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Backup - CloudNativePG v1.26.0-rc3</title>
+    <title>Backup - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -111,33 +111,69 @@
               <ul class="current">
                 <li class="toctree-l1 current"><a class="reference internal current" href="#">Backup</a>
     <ul class="current">
-    <li class="toctree-l2"><a class="reference internal" href="#wal-archive">WAL archive</a>
+    <li class="toctree-l2"><a class="reference internal" href="#main-concepts">Main Concepts</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#wal-archive">WAL archive</a>
     </li>
-    <li class="toctree-l2"><a class="reference internal" href="#cold-and-hot-backups">Cold and Hot backups</a>
+    <li class="toctree-l3"><a class="reference internal" href="#cold-and-hot-backups">Cold and Hot backups</a>
     </li>
-    <li class="toctree-l2"><a class="reference internal" href="#object-stores-or-volume-snapshots-which-one-to-use">Object stores or volume snapshots: which one to use?</a>
+        </ul>
     </li>
-    <li class="toctree-l2"><a class="reference internal" href="#scheduled-backups">Scheduled backups</a>
+    <li class="toctree-l2"><a class="reference internal" href="#comparing-available-backup-options-object-stores-vs-volume-snapshots">Comparing Available Backup Options: Object Stores vs Volume Snapshots</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#object-storebased-backups">Object Store–Based Backups</a>
     </li>
-    <li class="toctree-l2"><a class="reference internal" href="#on-demand-backups">On-demand backups</a>
+    <li class="toctree-l3"><a class="reference internal" href="#volume-snapshots">Volume Snapshots</a>
     </li>
-    <li class="toctree-l2"><a class="reference internal" href="#backup-from-a-standby">Backup from a standby</a>
+    <li class="toctree-l3"><a class="reference internal" href="#choosing-between-the-two">Choosing Between the Two</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#comparison-summary">Comparison Summary</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#scheduled-backups">Scheduled Backups</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#cron-schedule">Cron Schedule</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#backup-frequency-and-rto">Backup Frequency and RTO</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#immediate-backup">Immediate Backup</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#pause-scheduled-backups">Pause Scheduled Backups</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#backup-owner-reference-specbackupownerreference">Backup Owner Reference (.spec.backupOwnerReference)</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#on-demand-backups">On-Demand Backups</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#example-requesting-an-on-demand-backup">Example: Requesting an On-Demand Backup</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#monitoring-backup-progress">Monitoring Backup Progress</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#backup-methods">Backup Methods</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#backup-from-a-standby">Backup from a Standby</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#how-it-works">How It Works</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#forcing-backup-on-the-primary">Forcing Backup on the Primary</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#overriding-the-cluster-wide-target">Overriding the Cluster-Wide Target</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#retention-policies">Retention Policies</a>
     </li>
     </ul>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -246,6 +282,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -290,10 +330,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -303,7 +349,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -322,27 +368,52 @@
                 <h1 id="backup">Backup</h1>
 <!-- SPDX-License-Identifier: CC-BY-4.0 -->
 
-<div class="admonition warning">
-<p class="admonition-title">Warning</p>
-<p>With the deprecation of native Barman Cloud support in CloudNativePG in
-favor of the Barman Cloud Plugin, this page—and the backup and recovery
-documentation—may undergo changes before the official release of version
-1.26.0.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>This section covers <strong>physical backups</strong> in PostgreSQL.
+While PostgreSQL also supports logical backups using the <code>pg_dump</code> utility,
+these are <strong>not suitable for business continuity</strong> and are <strong>not managed</strong> by
+CloudNativePG. If you still wish to use <code>pg_dump</code>, refer to the
+<a href="../troubleshooting/#emergency-backup"><em>Troubleshooting / Emergency backup</em> section</a>
+for guidance.</p>
 </div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Starting with version 1.26, native backup and recovery capabilities are
+being <strong>progressively phased out</strong> of the core operator and moved to official
+CNPG-I plugins. This transition aligns with CloudNativePG's shift towards a
+<strong>backup-agnostic architecture</strong>, enabled by its extensible
+interface—<strong>CNPG-I</strong>—which standardizes the management of <strong>WAL archiving</strong>,
+<strong>physical base backups</strong>, and corresponding <strong>recovery processes</strong>.</p>
+</div>
+<p>CloudNativePG currently supports <strong>physical backups of PostgreSQL clusters</strong> in
+two main ways:</p>
+<ul>
+<li>
+<p><strong>Via <a href="https://github.com/cloudnative-pg/cnpg-i/">CNPG-I</a> plugins</strong>: the
+  CloudNativePG Community officially supports the <a href="https://cloudnative-pg.io/plugin-barman-cloud/"><strong>Barman Cloud Plugin</strong></a>
+  for integration with object storage services.</p>
+</li>
+<li>
+<p><strong>Natively</strong>, with support for:</p>
+<ul>
+<li><a href="../appendixes/backup_barmanobjectstore/">Object storage via Barman Cloud</a>
+  <em>(although deprecated from 1.26 in favor of the Barman Cloud Plugin)</em></li>
+<li><a href="../appendixes/backup_volumesnapshot/">Kubernetes Volume Snapshots</a>, if
+  supported by the underlying storage class</li>
+</ul>
+</li>
+</ul>
+<p>Before selecting a backup strategy with CloudNativePG, it's important to
+familiarize yourself with the foundational concepts covered in the <a href="#main-concepts">"Main Concepts"</a>
+section. These include WAL archiving, hot and cold backups, performing backups
+from a standby, and more.</p>
+<h2 id="main-concepts">Main Concepts</h2>
 <p>PostgreSQL natively provides first class backup and recovery capabilities based
 on file system level (physical) copy. These have been successfully used for
 more than 15 years in mission critical production databases, helping
 organizations all over the world achieve their disaster recovery goals with
 Postgres.</p>
-<div class="admonition note">
-<p class="admonition-title">Note</p>
-<p>There's another way to backup databases in PostgreSQL, through the
-<code>pg_dump</code> utility - which relies on logical backups instead of physical ones.
-However, logical backups are not suitable for business continuity use cases
-and as such are not covered by CloudNativePG (yet, at least).
-If you want to use the <code>pg_dump</code> utility, let yourself be inspired by the
-<a href="../troubleshooting/#emergency-backup">"Troubleshooting / Emergency backup" section</a>.</p>
-</div>
 <p>In CloudNativePG, the backup infrastructure for each PostgreSQL cluster is made
 up of the following resources:</p>
 <ul>
@@ -351,38 +422,17 @@ <h1 id="backup">Backup</h1>
 <li><strong>Physical base backups</strong>: a copy of all the files that PostgreSQL uses to
   store the data in the database (primarily the <code>PGDATA</code> and any tablespace)</li>
 </ul>
-<p>The WAL archive can only be stored on object stores at the moment.</p>
-<p>On the other hand, CloudNativePG supports two ways to store physical base backups:</p>
-<ul>
-<li>on <a href="../backup_barmanobjectstore/">object stores</a>, as tarballs - optionally
-  compressed:<ul>
-<li>Using the Barman Cloud plugin</li>
-<li>Natively via <code>.spec.backup.barmanObjectStore</code> (<em>deprecated, to be removed in CloudNativePG 1.28</em>)</li>
-</ul>
-</li>
-<li>on <a href="../backup_volumesnapshot/">Kubernetes Volume Snapshots</a>, if supported by
-  the underlying storage class</li>
-</ul>
-<div class="admonition important">
-<p class="admonition-title">Important</p>
-<p>Before choosing your backup strategy with CloudNativePG, it is important that
-you take some time to familiarize with some basic concepts, like WAL archive,
-hot and cold backups.</p>
-</div>
-<div class="admonition important">
-<p class="admonition-title">Important</p>
-<p>Please refer to the official Kubernetes documentation for a list of all
-the supported <a href="https://kubernetes-csi.github.io/docs/drivers.html">Container Storage Interface (CSI) drivers</a>
-that provide snapshotting capabilities.</p>
-</div>
-<h2 id="wal-archive">WAL archive</h2>
+<p>CNPG-I provides a generic and extensible interface for managing WAL archiving
+(both archive and restore operations), as well as the base backup and
+corresponding restore processes.</p>
+<h3 id="wal-archive">WAL archive</h3>
 <p>The WAL archive in PostgreSQL is at the heart of <strong>continuous backup</strong>, and it
 is fundamental for the following reasons:</p>
 <ul>
 <li><strong>Hot backups</strong>: the possibility to take physical base backups from any
   instance in the Postgres cluster (either primary or standby) without shutting
   down the server; they are also known as online backups</li>
-<li><strong>Point in Time recovery</strong> (PITR): to possibility to recover at any point in
+<li><strong>Point in Time recovery</strong> (PITR): the possibility to recover at any point in
   time from the first available base backup in your system</li>
 </ul>
 <div class="admonition warning">
@@ -403,18 +453,18 @@ <h2 id="wal-archive">WAL archive</h2>
 <div class="admonition important">
 <p class="admonition-title">Important</p>
 <p>Our recommendation is to always setup the WAL archive in production.
-There are known use cases - normally involving staging and development
-environments - where none of the above benefits are needed and the WAL
+There are known use cases — normally involving staging and development
+environments — where none of the above benefits are needed and the WAL
 archive is not necessary. RPO in this case can be any value, such as
 24 hours (daily backups) or infinite (no backup at all).</p>
 </div>
-<h2 id="cold-and-hot-backups">Cold and Hot backups</h2>
+<h3 id="cold-and-hot-backups">Cold and Hot backups</h3>
 <p>Hot backups have already been defined in the previous section. They require the
-presence of a WAL archive and they are the norm in any modern database management
-system.</p>
+presence of a WAL archive, and they are the norm in any modern database
+management system.</p>
 <p><strong>Cold backups</strong>, also known as offline backups, are instead physical base backups
 taken when the PostgreSQL instance (standby or primary) is shut down. They are
-consistent per definition and they represent a snapshot of the database at the
+consistent per definition, and they represent a snapshot of the database at the
 time it was shut down.</p>
 <p>As a result, PostgreSQL instances can be restarted from a cold backup without
 the need of a WAL archive, even though they can take advantage of it, if
@@ -423,43 +473,62 @@ <h2 id="cold-and-hot-backups">Cold and Hot backups</h2>
 <p>In those situations with a higher RPO (for example, 1 hour or 24 hours), and
 shorter retention periods, cold backups represent a viable option to be considered
 for your disaster recovery plans.</p>
-<h2 id="object-stores-or-volume-snapshots-which-one-to-use">Object stores or volume snapshots: which one to use?</h2>
-<p>In CloudNativePG, object store based backups:</p>
+<h2 id="comparing-available-backup-options-object-stores-vs-volume-snapshots">Comparing Available Backup Options: Object Stores vs Volume Snapshots</h2>
+<p>CloudNativePG currently supports two main approaches for physical backups:</p>
 <ul>
-<li>always require the WAL archive</li>
-<li>support hot backup only</li>
-<li>don't support incremental copy</li>
-<li>don't support differential copy</li>
+<li><strong>Object store–based backups</strong>, via the <a href="https://cloudnative-pg.io/plugin-barman-cloud/"><strong>Barman Cloud
+  Plugin</strong></a> or the
+  <a href="../appendixes/backup_barmanobjectstore/"><strong>deprecated native integration</strong></a></li>
+<li><a href="../appendixes/backup_volumesnapshot/"><strong>Volume Snapshots</strong></a>, using the
+  Kubernetes CSI interface and supported storage classes</li>
 </ul>
-<p>VolumeSnapshots instead:</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>CNPG-I is designed to enable third parties to build and integrate their own
+backup plugins. Over time, we expect the ecosystem of supported backup
+solutions to grow.</p>
+</div>
+<h3 id="object-storebased-backups">Object Store–Based Backups</h3>
+<p>Backups to an object store (e.g. AWS S3, Azure Blob, GCS):</p>
 <ul>
-<li>don't require the WAL archive, although in production it is always recommended</li>
-<li>support incremental copy, depending on the underlying storage classes</li>
-<li>support differential copy, depending on the underlying storage classes</li>
-<li>also support cold backup</li>
+<li>Always require WAL archiving</li>
+<li>Support hot backups only</li>
+<li>Do not support incremental or differential copies</li>
+<li>Support retention policies</li>
 </ul>
-<p>Which one to use depends on your specific requirements and environment,
-including:</p>
+<h3 id="volume-snapshots">Volume Snapshots</h3>
+<p>Native volume snapshots:</p>
 <ul>
-<li>availability of a viable object store solution in your Kubernetes cluster</li>
-<li>availability of a trusted storage class that supports volume snapshots</li>
-<li>size of the database: with object stores, the larger your database, the
-  longer backup and, most importantly, recovery procedures take (the latter
-  impacts <a href="../before_you_start/#rto">RTO</a>); in presence of Very Large Databases
-  (VLDB), the general advice is to rely on Volume Snapshots as, thanks to
-  copy-on-write, they provide faster recovery</li>
-<li>data mobility and possibility to store or relay backup files on a
-  secondary location in a different region, or any subsequent one</li>
-<li>other factors, mostly based on the confidence and familiarity with the
-  underlying storage solutions</li>
+<li>Do not require WAL archiving, though its use is still strongly
+  recommended in production</li>
+<li>Support incremental and differential copies, depending on the
+  capabilities of the underlying storage class</li>
+<li>Support both hot and cold backups</li>
+<li>Do not support retention policies</li>
 </ul>
-<p>The summary table below highlights some of the main differences between the two
-available methods for storing physical base backups.</p>
+<h3 id="choosing-between-the-two">Choosing Between the Two</h3>
+<p>The best approach depends on your environment and operational requirements.
+Consider the following factors:</p>
+<ul>
+<li><strong>Object store availability</strong>: Ensure your Kubernetes cluster can access a
+  reliable object storage solution, including a stable networking layer.</li>
+<li><strong>Storage class capabilities</strong>: Confirm that your storage class supports CSI
+  volume snapshots with incremental/differential features.</li>
+<li><strong>Database size</strong>: For very large databases (VLDBs), <strong>volume snapshots are
+  generally preferred</strong> as they enable faster recovery due to copy-on-write
+  technology—this significantly improves your
+  <a href="../before_you_start/#rto">Recovery Time Objective (RTO)</a>.</li>
+<li><strong>Data mobility</strong>: Object store–based backups may offer greater flexibility
+  for replicating or storing backups across regions or environments.</li>
+<li><strong>Operational familiarity</strong>: Choose the method that aligns best with your
+  team's experience and confidence in managing storage.</li>
+</ul>
+<h3 id="comparison-summary">Comparison Summary</h3>
 <table>
 <thead>
 <tr>
-<th></th>
-<th style="text-align: center;">Object store</th>
+<th>Feature</th>
+<th style="text-align: center;">Object Store</th>
 <th style="text-align: center;">Volume Snapshots</th>
 </tr>
 </thead>
@@ -467,41 +536,46 @@ <h2 id="object-stores-or-volume-snapshots-which-one-to-use">Object stores or vol
 <tr>
 <td><strong>WAL archiving</strong></td>
 <td style="text-align: center;">Required</td>
-<td style="text-align: center;">Recommended (1)</td>
+<td style="text-align: center;">Recommended<sup>1</sup></td>
 </tr>
 <tr>
 <td><strong>Cold backup</strong></td>
-<td style="text-align: center;">✗</td>
-<td style="text-align: center;">✓</td>
+<td style="text-align: center;">❌</td>
+<td style="text-align: center;">✅</td>
 </tr>
 <tr>
 <td><strong>Hot backup</strong></td>
-<td style="text-align: center;">✓</td>
-<td style="text-align: center;">✓</td>
+<td style="text-align: center;">✅</td>
+<td style="text-align: center;">✅</td>
 </tr>
 <tr>
 <td><strong>Incremental copy</strong></td>
-<td style="text-align: center;">✗</td>
-<td style="text-align: center;">✓  (2)</td>
+<td style="text-align: center;">❌</td>
+<td style="text-align: center;">✅<sup>2</sup></td>
 </tr>
 <tr>
 <td><strong>Differential copy</strong></td>
-<td style="text-align: center;">✗</td>
-<td style="text-align: center;">✓  (2)</td>
+<td style="text-align: center;">❌</td>
+<td style="text-align: center;">✅<sup>2</sup></td>
 </tr>
 <tr>
 <td><strong>Backup from a standby</strong></td>
-<td style="text-align: center;">✓</td>
-<td style="text-align: center;">✓</td>
+<td style="text-align: center;">✅</td>
+<td style="text-align: center;">✅</td>
 </tr>
 <tr>
 <td><strong>Snapshot recovery</strong></td>
-<td style="text-align: center;">✗ (3)</td>
-<td style="text-align: center;">✓</td>
+<td style="text-align: center;">❌<sup>3</sup></td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td><strong>Retention policies</strong></td>
+<td style="text-align: center;">✅</td>
+<td style="text-align: center;">❌</td>
 </tr>
 <tr>
-<td><strong>Point In Time Recovery (PITR)</strong></td>
-<td style="text-align: center;">✓</td>
+<td><strong>Point-in-Time Recovery (PITR)</strong></td>
+<td style="text-align: center;">✅</td>
 <td style="text-align: center;">Requires WAL archive</td>
 </tr>
 <tr>
@@ -511,90 +585,96 @@ <h2 id="object-stores-or-volume-snapshots-which-one-to-use">Object stores or vol
 </tr>
 </tbody>
 </table>
+<hr />
 <blockquote>
-<p>See the explanation below for the notes in the above table:</p>
+<p><strong>Notes:</strong></p>
 <ol>
-<li>WAL archive must be on an object store at the moment</li>
-<li>If supported by the underlying storage classes of the PostgreSQL volumes</li>
-<li>Snapshot recovery can be emulated using the
-   <code>bootstrap.recovery.recoveryTarget.targetImmediate</code> option</li>
+<li>WAL archiving must currently use an object store through a plugin (or the
+   deprecated native one).</li>
+<li>Availability of incremental and differential copies depends on the
+   capabilities of the storage class used for PostgreSQL volumes.</li>
+<li>Snapshot recovery can be emulated by using the
+   <code>bootstrap.recovery.recoveryTarget.targetImmediate</code> option.</li>
 </ol>
 </blockquote>
-<h2 id="scheduled-backups">Scheduled backups</h2>
-<p>Scheduled backups are the recommended way to configure your backup strategy in
-CloudNativePG. They are managed by the <code>ScheduledBackup</code> resource.</p>
+<h2 id="scheduled-backups">Scheduled Backups</h2>
+<p>Scheduled backups are the recommended way to implement a reliable backup
+strategy in CloudNativePG. They are defined using the <code>ScheduledBackup</code> custom
+resource.</p>
 <div class="admonition info">
 <p class="admonition-title">Info</p>
-<p>Please refer to <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ScheduledBackupSpec"><code>ScheduledBackupSpec</code></a>
-in the API reference for a full list of options.</p>
+<p>For a complete list of configuration options, refer to the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ScheduledBackupSpec"><code>ScheduledBackupSpec</code></a>
+in the API reference.</p>
 </div>
-<p>The <code>schedule</code> field allows you to define a <em>six-term cron schedule</em> specification,
-which includes seconds, as expressed in
-the <a href="https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format">Go <code>cron</code> package format</a>.</p>
+<h3 id="cron-schedule">Cron Schedule</h3>
+<p>The <code>schedule</code> field defines <strong>when</strong> the backup should occur, using a
+<em>six-field cron expression</em> that includes seconds. This format follows the
+<a href="https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format">Go <code>cron</code> package specification</a>.</p>
 <div class="admonition warning">
 <p class="admonition-title">Warning</p>
-<p>Beware that this format accepts also the <code>seconds</code> field, and it is
-different from the <code>crontab</code> format in Unix/Linux systems.</p>
+<p>This format differs from the traditional Unix/Linux <code>crontab</code>—it includes a
+<strong>seconds</strong> field as the first entry.</p>
 </div>
-<p>This is an example of a scheduled backup:</p>
+<p>Example of a daily scheduled backup:</p>
 <pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
   name: backup-example
 spec:
-  schedule: &quot;0 0 0 * * *&quot;
+  schedule: &quot;0 0 0 * * *&quot;  # At midnight every day
   backupOwnerReference: self
   cluster:
     name: pg-backup
+  # method: plugin, volumeSnapshot, or barmanObjectStore (default)
 </code></pre>
-<p>The above example will schedule a backup every day at midnight because the schedule
-specifies zero for the second, minute, and hour, while specifying wildcard, meaning all,
-for day of the month, month, and day of the week.</p>
-<p>In Kubernetes CronJobs, the equivalent expression is <code>0 0 * * *</code> because seconds
-are not included.</p>
+<p>The schedule <code>"0 0 0 * * *"</code> triggers a backup every day at midnight
+(00:00:00). In Kubernetes CronJobs, the equivalent expression would be <code>0 0 * * *</code>,
+since seconds are not supported.</p>
+<h3 id="backup-frequency-and-rto">Backup Frequency and RTO</h3>
 <div class="admonition hint">
 <p class="admonition-title">Hint</p>
-<p>Backup frequency might impact your recovery time objective (<a href="../before_you_start/#rto">RTO</a>) after a
-disaster which requires a full or Point-In-Time recovery operation. Our
-advice is that you regularly test your backups by recovering them, and then
-measuring the time it takes to recover from scratch so that you can refine
-your RTO predictability. Recovery time is influenced by the size of the
-base backup and the amount of WAL files that need to be fetched from the archive
-and replayed during recovery (remember that WAL archiving is what enables
-continuous backup in PostgreSQL!).
-Based on our experience, a weekly base backup is more than enough for most
-cases - while it is extremely rare to schedule backups more frequently than once
-a day.</p>
+<p>The frequency of your backups directly impacts your <strong>Recovery Time Objective</strong>
+(<a href="../before_you_start/#rto">RTO</a>).</p>
 </div>
-<p>You can choose whether to schedule a backup on a defined object store or a
-volume snapshot via the <code>.spec.method</code> attribute, by default set to
-<code>barmanObjectStore</code>. If you have properly defined
-<a href="../backup_volumesnapshot/#how-to-configure-volume-snapshot-backups">volume snapshots</a>
-in the <code>backup</code> stanza of the cluster, you can set <code>method: volumeSnapshot</code>
-to start scheduling base backups on volume snapshots.</p>
-<p>ScheduledBackups can be suspended, if needed, by setting <code>.spec.suspend: true</code>.
-This will stop any new backup from being scheduled until the option is removed
-or set back to <code>false</code>.</p>
-<p>In case you want to issue a backup as soon as the ScheduledBackup resource is created
-you can set <code>.spec.immediate: true</code>.</p>
-<div class="admonition note">
-<p class="admonition-title">Note</p>
-<p><code>.spec.backupOwnerReference</code> indicates which ownerReference should be put inside
-the created backup resources.</p>
+<p>To optimize your disaster recovery strategy based on continuous backup:</p>
 <ul>
-<li><em>none:</em> no owner reference for created backup objects (same behavior as before the field was introduced)</li>
-<li><em>self:</em> sets the Scheduled backup object as owner of the backup</li>
-<li><em>cluster:</em> set the cluster as owner of the backup</li>
+<li>Regularly test restoring from your backups.</li>
+<li>Measure the time required for a full recovery.</li>
+<li>Account for the size of base backups and the number of WAL files that must be
+  retrieved and replayed.</li>
 </ul>
-</div>
-<h2 id="on-demand-backups">On-demand backups</h2>
+<p>In most cases, a <strong>weekly base backup</strong> is sufficient. It is rare to schedule
+full backups more frequently than once per day.</p>
+<h3 id="immediate-backup">Immediate Backup</h3>
+<p>To trigger a backup immediately when the <code>ScheduledBackup</code> is created:</p>
+<pre><code class="language-yaml">spec:
+  immediate: true
+</code></pre>
+<h3 id="pause-scheduled-backups">Pause Scheduled Backups</h3>
+<p>To temporarily stop scheduled backups from running:</p>
+<pre><code class="language-yaml">spec:
+  suspend: true
+</code></pre>
+<h3 id="backup-owner-reference-specbackupownerreference">Backup Owner Reference (<code>.spec.backupOwnerReference</code>)</h3>
+<p>Controls which Kubernetes object is set as the owner of the backup resource:</p>
+<ul>
+<li><code>none</code>: No owner reference (legacy behavior)</li>
+<li><code>self</code>: The <code>ScheduledBackup</code> object becomes the owner</li>
+<li><code>cluster</code>: The PostgreSQL cluster becomes the owner</li>
+</ul>
+<h2 id="on-demand-backups">On-Demand Backups</h2>
+<p>On-demand backups allow you to manually trigger a backup operation at any time
+by creating a <code>Backup</code> resource.</p>
 <div class="admonition info">
 <p class="admonition-title">Info</p>
-<p>Please refer to <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSpec"><code>BackupSpec</code></a>
-in the API reference for a full list of options.</p>
+<p>For a full list of available options, see the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSpec"><code>BackupSpec</code></a> in the
+API reference.</p>
 </div>
-<p>To request a new backup, you need to create a new <code>Backup</code> resource
-like the following one:</p>
+<h3 id="example-requesting-an-on-demand-backup">Example: Requesting an On-Demand Backup</h3>
+<p>To start an on-demand backup, apply a <code>Backup</code> request custom resource like the
+following:</p>
 <pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
 kind: Backup
 metadata:
@@ -604,18 +684,16 @@ <h2 id="on-demand-backups">On-demand backups</h2>
   cluster:
     name: pg-backup
 </code></pre>
-<p>In this case, the operator will start to orchestrate the cluster to take the
-required backup on an object store, using <code>barman-cloud-backup</code>. You can check
-the backup status using the plain <code>kubectl describe backup &lt;name&gt;</code> command:</p>
+<p>In this example, the operator will orchestrate the backup process using the
+<code>barman-cloud-backup</code> tool and store the backup in the configured object store.</p>
+<h3 id="monitoring-backup-progress">Monitoring Backup Progress</h3>
+<p>You can check the status of the backup using:</p>
+<pre><code class="language-bash">kubectl describe backup backup-example
+</code></pre>
+<p>While the backup is in progress, you'll see output similar to:</p>
 <pre><code class="language-text">Name:         backup-example
 Namespace:    default
-Labels:       &lt;none&gt;
-Annotations:  API Version:  postgresql.cnpg.io/v1
-Kind:         Backup
-Metadata:
-  Creation Timestamp:  2020-10-26T13:57:40Z
-  Self Link:         /apis/postgresql.cnpg.io/v1/namespaces/default/backups/backup-example
-  UID:               ad5f855c-2ffd-454a-a157-900d5f1f6584
+...
 Spec:
   Cluster:
     Name:  pg-backup
@@ -624,54 +702,82 @@ <h2 id="on-demand-backups">On-demand backups</h2>
   Started At:  2020-10-26T13:57:40Z
 Events:        &lt;none&gt;
 </code></pre>
-<p>When the backup has been completed, the phase will be <code>completed</code>
-like in the following example:</p>
+<p>Once the backup has successfully completed, the <code>phase</code> will be set to
+<code>completed</code>, and the output will include additional metadata:</p>
 <pre><code class="language-text">Name:         backup-example
 Namespace:    default
-Labels:       &lt;none&gt;
-Annotations:  API Version:  postgresql.cnpg.io/v1
-Kind:         Backup
-Metadata:
-  Creation Timestamp:  2020-10-26T13:57:40Z
-  Self Link:         /apis/postgresql.cnpg.io/v1/namespaces/default/backups/backup-example
-  UID:               ad5f855c-2ffd-454a-a157-900d5f1f6584
-Spec:
-  Cluster:
-    Name:  pg-backup
+...
 Status:
   Backup Id:         20201026T135740
   Destination Path:  s3://backups/
   Endpoint URL:      http://minio:9000
   Phase:             completed
-  s3Credentials:
+  S3 Credentials:
     Access Key Id:
-      Key:   ACCESS_KEY_ID
       Name:  minio
+      Key:   ACCESS_KEY_ID
     Secret Access Key:
-      Key:      ACCESS_SECRET_KEY
-      Name:     minio
-  Server Name:  pg-backup
-  Started At:   2020-10-26T13:57:40Z
-  Stopped At:   2020-10-26T13:57:44Z
-Events:         &lt;none&gt;
+      Name:  minio
+      Key:   ACCESS_SECRET_KEY
+  Server Name:       pg-backup
+  Started At:        2020-10-26T13:57:40Z
+  Stopped At:        2020-10-26T13:57:44Z
 </code></pre>
+<hr />
 <div class="admonition important">
 <p class="admonition-title">Important</p>
-<p>This feature will not backup the secrets for the superuser and the
-application user. The secrets are supposed to be backed up as part of
-the standard backup procedures for the Kubernetes cluster.</p>
+<p>On-demand backups do <strong>not</strong> include Kubernetes secrets for the PostgreSQL
+superuser or application user. You should ensure these secrets are included in
+your broader Kubernetes cluster backup strategy.</p>
 </div>
-<h2 id="backup-from-a-standby">Backup from a standby</h2>
-<!-- TODO: Adapt for Volume Snapshots -->
-<p>Taking a base backup requires to scrape the whole data content of the
-PostgreSQL instance on disk, possibly resulting in I/O contention with the
-actual workload of the database.</p>
-<p>For this reason, CloudNativePG allows you to take advantage of a
-feature which is directly available in PostgreSQL: <strong>backup from a standby</strong>.</p>
-<p>By default, backups will run on the most aligned replica of a <code>Cluster</code>. If
-no replicas are available, backups will run on the primary instance.</p>
-<div class="admonition info">
-<p class="admonition-title">Info</p>
+<h2 id="backup-methods">Backup Methods</h2>
+<p>CloudNativePG currently supports the following backup methods for scheduled
+and on-demand backups:</p>
+<ul>
+<li><code>plugin</code> – Uses a CNPG-I plugin (requires <code>.spec.pluginConfiguration</code>)</li>
+<li><code>volumeSnapshot</code> – Uses native <a href="../appendixes/backup_volumesnapshot/#how-to-configure-volume-snapshot-backups">Kubernetes volume snapshots</a></li>
+<li><code>barmanObjectStore</code> – Uses <a href="../appendixes/backup_barmanobjectstore/">Barman Cloud for object storage</a>
+  <em>(deprecated starting with v1.26 in favor of the
+  <a href="https://cloudnative-pg.io/plugin-barman-cloud/">Barman Cloud Plugin</a>,
+  but still the default for backward compatibility)</em></li>
+</ul>
+<p>Specify the method using the <code>.spec.method</code> field (defaults to
+<code>barmanObjectStore</code>).</p>
+<p>If your cluster is configured to support volume snapshots, you can enable
+scheduled snapshot backups like this:</p>
+<pre><code class="language-yaml">spec:
+  method: volumeSnapshot
+</code></pre>
+<p>To use the Barman Cloud Plugin as the backup method, set <code>method: plugin</code> and
+configure the plugin accordingly. You can find an example in the
+<a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/usage/#performing-a-base-backup">"Performing a Base Backup" section of the plugin documentation</a></p>
+<h2 id="backup-from-a-standby">Backup from a Standby</h2>
+<p>Taking a base backup involves reading the entire on-disk data set of a
+PostgreSQL instance, which can introduce I/O contention and impact the
+performance of the active workload.</p>
+<p>To reduce this impact, <strong>CloudNativePG supports taking backups from a standby
+instance</strong>, leveraging PostgreSQL’s built-in capability to perform backups from
+read-only replicas.</p>
+<p>By default, backups are performed on the <strong>most up-to-date replica</strong> in the
+cluster. If no replicas are available, the backup will fall back to the
+<strong>primary instance</strong>.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>The examples in this section are focused on backup target selection and do not
+take the backup method (<code>spec.method</code>) into account, as it is not relevant to
+the scope being discussed.</p>
+</div>
+<h3 id="how-it-works">How It Works</h3>
+<p>When <code>prefer-standby</code> is the target (the default behavior), CloudNativePG will
+attempt to:</p>
+<ol>
+<li>Identify the most synchronized standby node.</li>
+<li>Run the backup process on that standby.</li>
+<li>Fall back to the primary if no standbys are available.</li>
+</ol>
+<p>This strategy minimizes interference with the primary’s workload.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
 <p>Although the standby might not always be up to date with the primary,
 in the time continuum from the first available backup to the last
 archived WAL this is normally irrelevant. The base backup indeed
@@ -682,8 +788,9 @@ <h2 id="backup-from-a-standby">Backup from a standby</h2>
 primary. This might produce unexpected results in the short term (before
 <code>archive_timeout</code> kicks in) in deployments with low write activity.</p>
 </div>
-<p>If you prefer to always run backups on the primary, you can set the backup
-target to <code>primary</code> as outlined in the example below:</p>
+<h3 id="forcing-backup-on-the-primary">Forcing Backup on the Primary</h3>
+<p>To always run backups on the primary instance, explicitly set the backup target
+to <code>primary</code> in the cluster configuration:</p>
 <pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
@@ -694,19 +801,15 @@ <h2 id="backup-from-a-standby">Backup from a standby</h2>
 </code></pre>
 <div class="admonition warning">
 <p class="admonition-title">Warning</p>
-<p>Beware of setting the target to primary when performing a cold backup
-with volume snapshots, as this will shut down the primary for
-the time needed to take the snapshot, impacting write operations.
-This also applies to taking a cold backup in a single-instance cluster, even
-if you did not explicitly set the primary as the target.</p>
+<p>Be cautious when using <code>primary</code> as the target for <strong>cold backups using
+volume snapshots</strong>, as this will require shutting down the primary instance
+temporarily—interrupting all write operations. The same caution applies to
+single-instance clusters, even if you haven't explicitly set the target.</p>
 </div>
-<p>When the backup target is set to <code>prefer-standby</code>, such policy will ensure
-backups are run on the most up-to-date available secondary instance, or if no
-other instance is available, on the primary instance.</p>
-<p>By default, when not otherwise specified, target is automatically set to take
-backups from a standby.</p>
-<p>The backup target specified in the <code>Cluster</code> can be overridden in the <code>Backup</code>
-and <code>ScheduledBackup</code> types, like in the following example:</p>
+<h3 id="overriding-the-cluster-wide-target">Overriding the Cluster-Wide Target</h3>
+<p>You can override the cluster-level target on a per-backup basis, using either
+<code>Backup</code> or <code>ScheduledBackup</code> resources. Here's an example of an on-demand
+backup:</p>
 <pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
 kind: Backup
 metadata:
@@ -716,14 +819,30 @@ <h2 id="backup-from-a-standby">Backup from a standby</h2>
     name: [...]
   target: &quot;primary&quot;
 </code></pre>
-<p>In the previous example, CloudNativePG will invariably choose the primary
-instance even if the <code>Cluster</code> is set to prefer replicas.</p>
+<p>In this example, even if the cluster’s default target is <code>prefer-standby</code>, the
+backup will be taken from the primary instance.</p>
+<h2 id="retention-policies">Retention Policies</h2>
+<p>CloudNativePG is evolving toward a <strong>backup-agnostic architecture</strong>, where
+backup responsibilities are delegated to external <strong>CNPG-I plugins</strong>. These
+plugins are expected to offer advanced and customizable data protection
+features, including sophisticated retention management, that go beyond the
+built-in capabilities and scope of CloudNativePG.</p>
+<p>As part of this transition, the <code>spec.backup.retentionPolicy</code> field in the
+<code>Cluster</code> resource is <strong>deprecated</strong> and will be removed in a future release.</p>
+<p>For more details on available retention features, refer to your chosen plugin’s documentation.
+For example: <a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/retention/">"Retention Policies" with Barman Cloud Plugin</a>.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Users are encouraged to rely on the retention mechanisms provided by the
+backup plugin they are using. This ensures better flexibility and consistency
+with the backup method in use.</p>
+</div>
               
             </div>
           </div><footer>
     <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
         <a href="../logical_replication/" class="btn btn-neutral float-left" title="Logical Replication"><span class="icon icon-circle-arrow-left"></span> Previous</a>
-        <a href="../backup_barmanobjectstore/" class="btn btn-neutral float-right" title="Backup on object stores">Next <span class="icon icon-circle-arrow-right"></span></a>
+        <a href="../wal_archiving/" class="btn btn-neutral float-right" title="WAL archiving">Next <span class="icon icon-circle-arrow-right"></span></a>
     </div>
 
   <hr/>
@@ -750,7 +869,7 @@ <h2 id="backup-from-a-standby">Backup from a standby</h2>
       <span><a href="../logical_replication/" style="color: #fcfcfc">&laquo; Previous</a></span>
     
     
-      <span><a href="../backup_barmanobjectstore/" style="color: #fcfcfc">Next &raquo;</a></span>
+      <span><a href="../wal_archiving/" style="color: #fcfcfc">Next &raquo;</a></span>
     
   </span>
 </div>
diff --git a/assets/documentation/preview/backup_recovery/index.html b/assets/documentation/preview/backup_recovery/index.html
index 5cad2d713..eb5de25b4 100644
--- a/assets/documentation/preview/backup_recovery/index.html
+++ b/assets/documentation/preview/backup_recovery/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Backup and Recovery - CloudNativePG v1.26.0-rc3</title>
+    <title>Backup and Recovery - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,7 +291,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/before_you_start/index.html b/assets/documentation/preview/before_you_start/index.html
index 36c9cf720..c08b46497 100644
--- a/assets/documentation/preview/before_you_start/index.html
+++ b/assets/documentation/preview/before_you_start/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Before You Start - CloudNativePG v1.26.0-rc3</title>
+    <title>Before You Start - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -122,18 +122,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -242,6 +234,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -286,10 +282,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -299,7 +301,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/benchmarking/index.html b/assets/documentation/preview/benchmarking/index.html
index bcecaf19b..d2bbea237 100644
--- a/assets/documentation/preview/benchmarking/index.html
+++ b/assets/documentation/preview/benchmarking/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Benchmarking - CloudNativePG v1.26.0-rc3</title>
+    <title>Benchmarking - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -282,10 +278,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -295,7 +297,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/bootstrap/index.html b/assets/documentation/preview/bootstrap/index.html
index fb7a95ae5..f81ee2af4 100644
--- a/assets/documentation/preview/bootstrap/index.html
+++ b/assets/documentation/preview/bootstrap/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Bootstrap - CloudNativePG v1.26.0-rc3</title>
+    <title>Bootstrap - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -152,18 +152,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -272,6 +264,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -316,10 +312,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -329,7 +331,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -402,6 +404,8 @@ <h2 id="the-bootstrap-section">The <code>bootstrap</code> section</h2>
   <a href="#bootstrap-from-a-live-cluster-pg_basebackup"><code>pg_basebackup</code> subsection</a>
   carefully.</li>
 </ul>
+<p>Only one bootstrap method can be specified in the manifest.
+Attempting to define multiple bootstrap methods will result in validation errors.</p>
 <p>In contrast to the <code>initdb</code> method, both <code>recovery</code> and <code>pg_basebackup</code>
 create a new cluster based on another one (either offline or online) and can be
 used to spin up replica clusters. They both rely on the definition of external
@@ -778,9 +782,9 @@ <h2 id="bootstrap-from-another-cluster">Bootstrap from another cluster</h2>
 <p>By default the <code>recovery</code> method strictly uses the <code>name</code> of the
 cluster in the <code>externalClusters</code> section to locate the main folder
 of the backup data within the object store, which is normally reserved
-for the name of the server. You can specify a different one with the
-<code>barmanObjectStore.serverName</code> property (by default assigned to the
-value of <code>name</code> in the external cluster definition).</p>
+for the name of the server. Backup plugins provide ways to specify a
+different one. For example, the Barman Cloud Plugin provides the <a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/parameters/"><code>serverName</code> parameter</a>
+(by default assigned to the value of <code>name</code> in the external cluster definition).</p>
 </div>
 <h3 id="bootstrap-from-a-backup-recovery">Bootstrap from a backup (<code>recovery</code>)</h3>
 <p>Given the variety of backup methods and combinations of backup storage
diff --git a/assets/documentation/preview/certificates/index.html b/assets/documentation/preview/certificates/index.html
index a63da8e9c..cfee58d39 100644
--- a/assets/documentation/preview/certificates/index.html
+++ b/assets/documentation/preview/certificates/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Certificates - CloudNativePG v1.26.0-rc3</title>
+    <title>Certificates - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -209,6 +201,8 @@
     </li>
     <li class="toctree-l3"><a class="reference internal" href="#client-certificate">Client certificate</a>
         <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#customizing-the-streaming_replica-client-certificate">Customizing the streaming_replica client certificate</a>
+    </li>
     <li class="toctree-l4"><a class="reference internal" href="#cert-manager-example_1">Cert-manager example</a>
     </li>
         </ul>
@@ -274,6 +268,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -318,10 +316,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -331,7 +335,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -585,6 +589,29 @@ <h3 id="client-certificate">Client certificate</h3>
 instances, you can add a label with the key <code>cnpg.io/reload</code> to it. Otherwise,
 you must reload the instances using the <code>kubectl cnpg reload</code> subcommand.</p>
 </div>
+<h4 id="customizing-the-streaming_replica-client-certificate">Customizing the <code>streaming_replica</code> client certificate</h4>
+<p>In some environments, it may not be possible to generate a certificate with the
+common name <code>streaming_replica</code> due to company policies or other security
+concerns, such as a CA shared across multiple clusters. In such cases, the user
+mapping feature can be used to allow authentication as the <code>streaming_replica</code>
+user with certificates containing different common names.</p>
+<p>To configure this setup, add a <code>pg_ident.conf</code> entry for the predefined map
+named <code>cnpg_streaming_replica</code>.</p>
+<p>For example, to enable <code>streaming_replica</code> authentication using a certificate
+with the common name <code>streaming-replica.cnpg.svc.cluster.local</code>, add the
+following to your cluster definition:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  postgresql:
+    pg_ident:
+    - cnpg_streaming_replica streaming-replica.cnpg.svc.cluster.local streaming_replica
+</code></pre>
+<p>For further details on how <code>pg_ident.conf</code> is managed by the operator, see the
+<a href="../postgresql_conf/#the-pg_ident-section">"PostgreSQL Configuration" page</a> in
+the documentation.</p>
 <h4 id="cert-manager-example_1">Cert-manager example</h4>
 <p>This simple example shows how to use <a href="https://cert-manager.io/">cert-manager</a>
 to set up a self-signed CA and generate the needed TLS server certificate:</p>
diff --git a/assets/documentation/preview/cloudnative-pg.v1/index.html b/assets/documentation/preview/cloudnative-pg.v1/index.html
index f45e25b49..c602e0ede 100644
--- a/assets/documentation/preview/cloudnative-pg.v1/index.html
+++ b/assets/documentation/preview/cloudnative-pg.v1/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>API Reference - CloudNativePG v1.26.0-rc3</title>
+    <title>API Reference - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -269,6 +265,8 @@
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-Database">Database</a>
     </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-FailoverQuorum">FailoverQuorum</a>
+    </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ImageCatalog">ImageCatalog</a>
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-Pooler">Pooler</a>
@@ -347,10 +345,14 @@
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-EphemeralVolumesSizeLimitConfiguration">EphemeralVolumesSizeLimitConfiguration</a>
     </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ExtensionConfiguration">ExtensionConfiguration</a>
+    </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ExtensionSpec">ExtensionSpec</a>
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ExternalCluster">ExternalCluster</a>
     </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-FailoverQuorumStatus">FailoverQuorumStatus</a>
+    </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ImageCatalogRef">ImageCatalogRef</a>
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ImageCatalogSpec">ImageCatalogSpec</a>
@@ -365,6 +367,8 @@
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-InstanceReportedState">InstanceReportedState</a>
     </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-IsolationCheckConfiguration">IsolationCheckConfiguration</a>
+    </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-LDAPBindAsAuth">LDAPBindAsAuth</a>
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-LDAPBindSearchAuth">LDAPBindSearchAuth</a>
@@ -373,6 +377,8 @@
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-LDAPScheme">LDAPScheme</a>
     </li>
+    <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-LivenessProbe">LivenessProbe</a>
+    </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ManagedConfiguration">ManagedConfiguration</a>
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#postgresql-cnpg-io-v1-ManagedRoles">ManagedRoles</a>
@@ -526,10 +532,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -539,7 +551,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -566,6 +578,7 @@ <h2 id="resource-types">Resource Types</h2>
 <li><a href="#postgresql-cnpg-io-v1-Cluster">Cluster</a></li>
 <li><a href="#postgresql-cnpg-io-v1-ClusterImageCatalog">ClusterImageCatalog</a></li>
 <li><a href="#postgresql-cnpg-io-v1-Database">Database</a></li>
+<li><a href="#postgresql-cnpg-io-v1-FailoverQuorum">FailoverQuorum</a></li>
 <li><a href="#postgresql-cnpg-io-v1-ImageCatalog">ImageCatalog</a></li>
 <li><a href="#postgresql-cnpg-io-v1-Pooler">Pooler</a></li>
 <li><a href="#postgresql-cnpg-io-v1-Publication">Publication</a></li>
@@ -699,6 +712,34 @@ <h2 id="postgresql-cnpg-io-v1-Database">Database</h2>
 </tbody>
 </table>
 
+<h2 id="postgresql-cnpg-io-v1-FailoverQuorum">FailoverQuorum</h2>
+<p><strong>Appears in:</strong></p>
+<p>FailoverQuorum contains the information about the current failover
+quorum status of a PG cluster. It is updated by the instance manager
+of the primary node and reset to zero by the operator to trigger
+an update.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>apiVersion</code> <B>[Required]</B><br/>string</td><td><code>postgresql.cnpg.io/v1</code></td></tr>
+<tr><td><code>kind</code> <B>[Required]</B><br/>string</td><td><code>FailoverQuorum</code></td></tr>
+<tr><td><code>metadata</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#objectmeta-v1-meta"><i>meta/v1.ObjectMeta</i></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>Refer to the Kubernetes API documentation for the fields of the <code>metadata</code> field.</td>
+</tr>
+<tr><td><code>status</code><br/>
+<a href="#postgresql-cnpg-io-v1-FailoverQuorumStatus"><i>FailoverQuorumStatus</i></a>
+</td>
+<td>
+   <p>Most recently observed status of the failover quorum.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
 <h2 id="postgresql-cnpg-io-v1-ImageCatalog">ImageCatalog</h2>
 <p>ImageCatalog is the Schema for the imagecatalogs API</p>
 
@@ -2587,36 +2628,41 @@ <h2 id="postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</h2>
 </td>
 <td>
    <p>The first recoverability point, stored as a date in RFC3339 format.
-This field is calculated from the content of FirstRecoverabilityPointByMethod</p>
+This field is calculated from the content of FirstRecoverabilityPointByMethod.</p>
+<p>Deprecated: the field is not set for backup plugins.</p>
 </td>
 </tr>
 <tr><td><code>firstRecoverabilityPointByMethod</code><br/>
 <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#time-v1-meta"><i>map[BackupMethod]meta/v1.Time</i></a>
 </td>
 <td>
-   <p>The first recoverability point, stored as a date in RFC3339 format, per backup method type</p>
+   <p>The first recoverability point, stored as a date in RFC3339 format, per backup method type.</p>
+<p>Deprecated: the field is not set for backup plugins.</p>
 </td>
 </tr>
 <tr><td><code>lastSuccessfulBackup</code><br/>
 <i>string</i>
 </td>
 <td>
-   <p>Last successful backup, stored as a date in RFC3339 format
-This field is calculated from the content of LastSuccessfulBackupByMethod</p>
+   <p>Last successful backup, stored as a date in RFC3339 format.
+This field is calculated from the content of LastSuccessfulBackupByMethod.</p>
+<p>Deprecated: the field is not set for backup plugins.</p>
 </td>
 </tr>
 <tr><td><code>lastSuccessfulBackupByMethod</code><br/>
 <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#time-v1-meta"><i>map[BackupMethod]meta/v1.Time</i></a>
 </td>
 <td>
-   <p>Last successful backup, stored as a date in RFC3339 format, per backup method type</p>
+   <p>Last successful backup, stored as a date in RFC3339 format, per backup method type.</p>
+<p>Deprecated: the field is not set for backup plugins.</p>
 </td>
 </tr>
 <tr><td><code>lastFailedBackup</code><br/>
 <i>string</i>
 </td>
 <td>
-   <p>Stored as a date in RFC3339 format</p>
+   <p>Last failed backup, stored as a date in RFC3339 format.</p>
+<p>Deprecated: the field is not set for backup plugins.</p>
 </td>
 </tr>
 <tr><td><code>cloudNativePGCommitHash</code><br/>
@@ -2728,6 +2774,13 @@ <h2 id="postgresql-cnpg-io-v1-ClusterStatus">ClusterStatus</h2>
 WAL file, and Time of latest checkpoint</p>
 </td>
 </tr>
+<tr><td><code>systemID</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>SystemID is the latest detected PostgreSQL SystemID</p>
+</td>
+</tr>
 </tbody>
 </table>
 
@@ -3205,6 +3258,57 @@ <h2 id="postgresql-cnpg-io-v1-EphemeralVolumesSizeLimitConfiguration">EphemeralV
 </tbody>
 </table>
 
+<h2 id="postgresql-cnpg-io-v1-ExtensionConfiguration">ExtensionConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-PostgresConfiguration">PostgresConfiguration</a></li>
+</ul>
+<p>ExtensionConfiguration is the configuration used to add
+PostgreSQL extensions to the Cluster.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<i>string</i>
+</td>
+<td>
+   <p>The name of the extension, required</p>
+</td>
+</tr>
+<tr><td><code>image</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#imagevolumesource-v1-core"><i>core/v1.ImageVolumeSource</i></a>
+</td>
+<td>
+   <p>The image containing the extension, required</p>
+</td>
+</tr>
+<tr><td><code>extension_control_path</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>The list of directories inside the image which should be added to extension_control_path.
+If not defined, defaults to &quot;/share&quot;.</p>
+</td>
+</tr>
+<tr><td><code>dynamic_library_path</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>The list of directories inside the image which should be added to dynamic_library_path.
+If not defined, defaults to &quot;/lib&quot;.</p>
+</td>
+</tr>
+<tr><td><code>ld_library_path</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>The list of directories inside the image which should be added to ld_library_path.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
 <h2 id="postgresql-cnpg-io-v1-ExtensionSpec">ExtensionSpec</h2>
 <p><strong>Appears in:</strong></p>
 <ul>
@@ -3325,6 +3429,51 @@ <h2 id="postgresql-cnpg-io-v1-ExternalCluster">ExternalCluster</h2>
 </tbody>
 </table>
 
+<h2 id="postgresql-cnpg-io-v1-FailoverQuorumStatus">FailoverQuorumStatus</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-FailoverQuorum">FailoverQuorum</a></li>
+</ul>
+<p>FailoverQuorumStatus is the latest observed status of the failover
+quorum of the PG cluster.</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>method</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Contains the latest reported Method value.</p>
+</td>
+</tr>
+<tr><td><code>standbyNames</code><br/>
+<i>[]string</i>
+</td>
+<td>
+   <p>StandbyNames is the list of potentially synchronous
+instance names.</p>
+</td>
+</tr>
+<tr><td><code>standbyNumber</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>StandbyNumber is the number of synchronous standbys that transactions
+need to wait for replies from.</p>
+</td>
+</tr>
+<tr><td><code>primary</code><br/>
+<i>string</i>
+</td>
+<td>
+   <p>Primary is the name of the primary instance that updated
+this object the latest time.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
 <h2 id="postgresql-cnpg-io-v1-ImageCatalogRef">ImageCatalogRef</h2>
 <p><strong>Appears in:</strong></p>
 <ul>
@@ -3562,6 +3711,41 @@ <h2 id="postgresql-cnpg-io-v1-InstanceReportedState">InstanceReportedState</h2>
 </tbody>
 </table>
 
+<h2 id="postgresql-cnpg-io-v1-IsolationCheckConfiguration">IsolationCheckConfiguration</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-LivenessProbe">LivenessProbe</a></li>
+</ul>
+<p>IsolationCheckConfiguration contains the configuration for the isolation check
+functionality in the liveness probe</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>enabled</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>Whether primary isolation checking is enabled for the liveness probe</p>
+</td>
+</tr>
+<tr><td><code>requestTimeout</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>Timeout in milliseconds for requests during the primary isolation check</p>
+</td>
+</tr>
+<tr><td><code>connectionTimeout</code><br/>
+<i>int</i>
+</td>
+<td>
+   <p>Timeout in milliseconds for connections during the primary isolation check</p>
+</td>
+</tr>
+</tbody>
+</table>
+
 <h2 id="postgresql-cnpg-io-v1-LDAPBindAsAuth">LDAPBindAsAuth</h2>
 <p><strong>Appears in:</strong></p>
 <ul>
@@ -3702,6 +3886,37 @@ <h2 id="postgresql-cnpg-io-v1-LDAPScheme">LDAPScheme</h2>
 </ul>
 <p>LDAPScheme defines the possible schemes for LDAP</p>
 
+<h2 id="postgresql-cnpg-io-v1-LivenessProbe">LivenessProbe</h2>
+<p><strong>Appears in:</strong></p>
+<ul>
+<li><a href="#postgresql-cnpg-io-v1-ProbesConfiguration">ProbesConfiguration</a></li>
+</ul>
+<p>LivenessProbe is the configuration of the liveness probe</p>
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><code>Probe</code><br/>
+<a href="#postgresql-cnpg-io-v1-Probe"><i>Probe</i></a>
+</td>
+<td>(Members of <code>Probe</code> are embedded into this type.)
+   <p>Probe is the standard probe configuration</p>
+</td>
+</tr>
+<tr><td><code>isolationCheck</code><br/>
+<a href="#postgresql-cnpg-io-v1-IsolationCheckConfiguration"><i>IsolationCheckConfiguration</i></a>
+</td>
+<td>
+   <p>Configure the feature that extends the liveness probe for a primary
+instance. In addition to the basic checks, this verifies whether the
+primary is isolated from the Kubernetes API server and from its
+replicas, ensuring that it can be safely shut down if network
+partition or API unavailability is detected. Enabled by default.</p>
+</td>
+</tr>
+</tbody>
+</table>
+
 <h2 id="postgresql-cnpg-io-v1-ManagedConfiguration">ManagedConfiguration</h2>
 <p><strong>Appears in:</strong></p>
 <ul>
@@ -4617,6 +4832,13 @@ <h2 id="postgresql-cnpg-io-v1-PostgresConfiguration">PostgresConfiguration</h2>
 Defaults to false.</p>
 </td>
 </tr>
+<tr><td><code>extensions</code><br/>
+<a href="#postgresql-cnpg-io-v1-ExtensionConfiguration"><i>[]ExtensionConfiguration</i></a>
+</td>
+<td>
+   <p>The configuration of the extensions to be added</p>
+</td>
+</tr>
 </tbody>
 </table>
 
@@ -4642,10 +4864,10 @@ <h2 id="postgresql-cnpg-io-v1-Probe">Probe</h2>
 <p><strong>Appears in:</strong></p>
 <ul>
 <li>
-<p><a href="#postgresql-cnpg-io-v1-ProbeWithStrategy">ProbeWithStrategy</a></p>
+<p><a href="#postgresql-cnpg-io-v1-LivenessProbe">LivenessProbe</a></p>
 </li>
 <li>
-<p><a href="#postgresql-cnpg-io-v1-ProbesConfiguration">ProbesConfiguration</a></p>
+<p><a href="#postgresql-cnpg-io-v1-ProbeWithStrategy">ProbeWithStrategy</a></p>
 </li>
 </ul>
 <p>Probe describes a health check to be performed against a container to determine whether it is
@@ -4776,7 +4998,7 @@ <h2 id="postgresql-cnpg-io-v1-ProbesConfiguration">ProbesConfiguration</h2>
 </td>
 </tr>
 <tr><td><code>liveness</code> <B>[Required]</B><br/>
-<a href="#postgresql-cnpg-io-v1-Probe"><i>Probe</i></a>
+<a href="#postgresql-cnpg-io-v1-LivenessProbe"><i>LivenessProbe</i></a>
 </td>
 <td>
    <p>The liveness probe configuration</p>
@@ -5208,6 +5430,19 @@ <h2 id="postgresql-cnpg-io-v1-ReplicationSlotsHAConfiguration">ReplicationSlotsH
 This can only be set at creation time. By default set to <code>_cnpg_</code>.</p>
 </td>
 </tr>
+<tr><td><code>synchronizeLogicalDecoding</code><br/>
+<i>bool</i>
+</td>
+<td>
+   <p>When enabled, the operator automatically manages synchronization of logical
+decoding (replication) slots across high-availability clusters.</p>
+<p>Requires one of the following conditions:</p>
+<ul>
+<li>PostgreSQL version 17 or later</li>
+<li>PostgreSQL version &lt; 17 with pg_failover_slots extension enabled</li>
+</ul>
+</td>
+</tr>
 </tbody>
 </table>
 
@@ -5863,8 +6098,11 @@ <h2 id="postgresql-cnpg-io-v1-SubscriptionSpec">SubscriptionSpec</h2>
 <i>map[string]string</i>
 </td>
 <td>
-   <p>Subscription parameters part of the <code>WITH</code> clause as expected by
-PostgreSQL <code>CREATE SUBSCRIPTION</code> command</p>
+   <p>Subscription parameters included in the <code>WITH</code> clause of the PostgreSQL
+<code>CREATE SUBSCRIPTION</code> command. Most parameters cannot be changed
+after the subscription is created and will be ignored if modified
+later, except for a limited set documented at:
+https://www.postgresql.org/docs/current/sql-altersubscription.html#SQL-ALTERSUBSCRIPTION-PARAMS-SET</p>
 </td>
 </tr>
 <tr><td><code>publicationName</code> <B>[Required]</B><br/>
diff --git a/assets/documentation/preview/cluster_conf/index.html b/assets/documentation/preview/cluster_conf/index.html
index 561eb9af9..1058ab494 100644
--- a/assets/documentation/preview/cluster_conf/index.html
+++ b/assets/documentation/preview/cluster_conf/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Instance pod configuration - CloudNativePG v1.26.0-rc3</title>
+    <title>Instance pod configuration - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -246,6 +238,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -290,10 +286,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -303,7 +305,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/cncf-projects/cilium/index.html b/assets/documentation/preview/cncf-projects/cilium/index.html
new file mode 100644
index 000000000..7b97689e6
--- /dev/null
+++ b/assets/documentation/preview/cncf-projects/cilium/index.html
@@ -0,0 +1,597 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../img/favicon.ico" />
+    <title>Cilium - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../css/theme.css" />
+    <link rel="stylesheet" href="../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Cilium";
+        var mkdocs_page_input_path = "cncf-projects/cilium.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul class="current">
+                  <li class="toctree-l1"><a class="reference internal" href="../external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1 current"><a class="reference internal current" href="#">Cilium</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#about">About</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#pod-to-pod-network-security-with-cloudnativepg-and-cilium">Pod-to-Pod Network Security with CloudNativePG and Cilium</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#default-deny-behavior-in-cilium">Default Deny Behavior in Cilium</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#making-cilium-network-policies-work-with-cloudnativepg-operator">Making Cilium Network Policies work with CloudNativePG Operator</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#allowing-access-between-cluster-pods">Allowing access between cluster Pods</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#restricting-access-to-postgresql-with-cilium">Restricting Access to PostgreSQL with Cilium</a>
+    </li>
+    </ul>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+          <li class="breadcrumb-item">CNCF Projects Integrations</li>
+      <li class="breadcrumb-item active">Cilium</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="cilium">Cilium</h1>
+<h2 id="about">About</h2>
+<p><a href="https://cilium.io/">Cilium</a> is a CNCF Graduated project that was accepted as
+an Incubating project in 2021 and graduated in 2023. It was originally created
+by Isovalent. It is an advanced networking, security, and observability
+solution for cloud native environments, built on top of
+<a href="https://ebpf.io/">eBPF</a> technology. Cilium manages network traffic in
+Kubernetes clusters by dynamically injecting eBPF programs into the Linux
+Kernel, enabling low-latency, high-performance communication, and enforcing
+fine-grained security policies.</p>
+<p>Key features of Cilium:</p>
+<ul>
+<li>Advanced L3-L7 security policies for fine-grained network traffic control</li>
+<li>Efficient, kernel-level traffic management via eBPF</li>
+<li>Service Mesh integration (Cilium Service Mesh)</li>
+<li>Support for both Kubernetes NetworkPolicy and CiliumNetworkPolicy</li>
+<li>Built-in observability and monitoring with Hubble</li>
+</ul>
+<p>To install Cilium in your environment, follow the instructions in the documentation:
+<a href="https://docs.cilium.io/en/stable/gettingstarted/k8s-install-default/">https://docs.cilium.io/en/stable/gettingstarted/k8s-install-default/</a></p>
+<h2 id="pod-to-pod-network-security-with-cloudnativepg-and-cilium">Pod-to-Pod Network Security with CloudNativePG and Cilium</h2>
+<p>Kubernetes’ default behavior is to allow traffic between any two Pods in the cluster network.
+Cilium provides advanced L3/L4 network security using the <code>CiliumNetworkPolicy</code> resource. This
+enables fine-grained control over network traffic between Pods within a Kubernetes cluster. It is
+especially useful for securing communication between application workloads and backend
+services.</p>
+<p>In the following examples, we demonstrate how Cilium can be used to secure a
+CloudNativePG PostgreSQL instance by restricting ingress traffic to only
+authorized Pods.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Before proceeding, ensure that the <code>cluster-example</code> Postgres cluster is up
+and running in your environment.</p>
+</div>
+<h2 id="default-deny-behavior-in-cilium">Default Deny Behavior in Cilium</h2>
+<p>By default, Cilium does <strong>not</strong> deny all traffic unless explicitly configured
+to do so. In contrast to Kubernetes NetworkPolicy, which uses a deny-by-default
+model once a policy is present in a namespace, Cilium provides more flexible
+control over default deny behavior.</p>
+<p>To enforce a default deny posture with Cilium, you need to explicitly create a
+policy that denies all traffic to a set of Pods unless otherwise allowed. This
+is commonly achieved by using an <strong>empty <code>ingress</code> section</strong> in combination
+with <code>endpointSelector</code>, or by enabling <strong><code>--enable-default-deny</code></strong> at the
+Cilium agent level for broader enforcement.</p>
+<p>A minimal example of a default deny policy:</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: default-deny
+  namespace: default
+spec:
+  description: &quot;Default deny all ingress traffic to all Pods in this namespace&quot;
+  endpointSelector: {}
+  ingress: []
+</code></pre>
+<h2 id="making-cilium-network-policies-work-with-cloudnativepg-operator">Making Cilium Network Policies work with CloudNativePG Operator</h2>
+<p>When working with a network policy, Cilium or not, the first step is to make
+sure that the operator can reach the Pods in the target namespace. This is
+important because the operator needs to be able to perform checks and actions
+on the Pods, and one of those actions requires access to the port <code>8000</code> on the
+Pods to get the current status of the PostgreSQL instance running inside.</p>
+<p>The following <code>CiliumNetworkPolicy</code> allows the operator to access the Pods in
+the target <code>default</code> namespace:</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: cnpg-operator-access
+  namespace: default
+spec:
+  description: &quot;Allow CloudNativePG operator access to any pod in the target namespace&quot;
+  endpointSelector: {}
+  ingress:
+    - fromEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: cnpg-system
+      toPorts:
+        - ports:
+            - port: &quot;8000&quot;
+              protocol: TCP
+</code></pre>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The <code>cnpg-system</code> namespace is the default namespace for the operator when
+using the YAML manifests. If the operator was installed using a different
+process (Helm, OLM, etc.), the namespace may be different. Make sure to adjust
+the namespace properly.</p>
+</div>
+<h2 id="allowing-access-between-cluster-pods">Allowing access between cluster Pods</h2>
+<p>Since the default policy is "deny all", we need to explicitly allow access
+between the cluster Pods in the same namespace. We will improve our previous
+policy by adding the required ingress rule:</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: cnpg-cluster-internal-access
+  namespace: default
+spec:
+  description: &quot;Allow CloudNativePG operator access and connection between pods in the same namespace&quot;
+  endpointSelector: {}
+  ingress:
+    - fromEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: cnpg-system
+        - matchLabels:
+            io.kubernetes.pod.namespace: default
+            cnpg.io/cluster: cluster-example
+      toPorts:
+        - ports:
+            - port: &quot;8000&quot;
+              protocol: TCP
+            - port: &quot;5432&quot;
+              protocol: TCP
+</code></pre>
+<p>The policy allows access from <code>cnpg-system</code> Pods and from <code>default</code> namespace
+Pods that also belong to <code>cluster-example</code>. The <code>matchLabels</code> selector requires
+Pods to have the complete set of listed labels. Missing even one label means
+the Pod will not match.</p>
+<h2 id="restricting-access-to-postgresql-with-cilium">Restricting Access to PostgreSQL with Cilium</h2>
+<p>In this example, we define a <code>CiliumNetworkPolicy</code> that allows only Pods
+labeled <code>role=backend</code> in the <code>default</code> namespace to connect to a PostgreSQL
+cluster named <code>cluster-example</code>. All other ingress traffic is blocked by
+default.</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: postgres-access-backend-label
+  namespace: default
+spec:
+  description: &quot;Allow PostgreSQL access on port 5432 from Pods with role=backend&quot;
+  endpointSelector:
+    matchLabels:
+      cnpg.io/cluster: cluster-example
+  ingress:
+    - fromEndpoints:
+       - matchLabels:
+            role: backend
+      toPorts:
+        - ports:
+          - port: &quot;5432&quot;
+            protocol: TCP
+</code></pre>
+<p>This <code>CiliumNetworkPolicy</code> ensures that only Pods labeled with <code>role=backend</code>
+can access the PostgreSQL instance managed by CloudNativePG via port 5432 in
+the <code>default</code> namespace.</p>
+<p>In the following policy, we demonstrate how to allow ingress traffic to port
+5432 of a PostgreSQL cluster named <code>cluster-example</code>, only from Pods with the
+label <code>role=backend</code> in any namespace.</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: postgres-access-backend-any-ns
+  namespace: default
+spec:
+  description: &quot;Allow PostgreSQL access on port 5432 from Pods with role=backend in any namespace&quot;
+  endpointSelector:
+    matchLabels:
+      cnpg.io/cluster: cluster-example
+  ingress:
+    - fromEndpoints:
+        - labelSelector:
+            matchLabels:
+              role: backend
+            matchExpressions:
+              - key: io.kubernetes.pod.namespace
+                operator: Exists
+      toPorts:
+        - ports:
+          - port: &quot;5432&quot;
+            protocol: TCP
+</code></pre>
+<p>The following example allows ingress traffic to port 5432 of the
+<code>cluster-example</code> cluster (located in the <code>default</code> namespace) from any Pods in
+the <code>backend</code> namespace.</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: postgres-access-backend-namespace
+  namespace: default
+spec:
+  description: &quot;Allow PostgreSQL access on port 5432 from any Pods in the backend namespace&quot;
+  endpointSelector:
+    matchLabels:
+      cnpg.io/cluster: cluster-example
+  ingress:
+    - fromEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: backend
+      toPorts:
+        - ports:
+            - port: &quot;5432&quot;
+              protocol: TCP
+</code></pre>
+<p>Using Cilium’s L3/L4 policy model, we define a <code>CiliumNetworkPolicy</code> that
+explicitly allows ingress traffic to cluster Pods only from application Pods in
+the <code>backend</code> namespace. All other traffic is implicitly denied unless
+explicitly permitted by additional policies.</p>
+<p>The following example allows ingress traffic to port 5432 of the
+<code>cluster-example</code> cluster (located in the <code>default</code> namespace) from any source
+within the Kubernetes cluster.</p>
+<pre><code class="language-yaml">apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: postgres-access-cluster-wide
+  namespace: default
+spec:
+  description: &quot;Allow ingress traffic to port 5432 of the cluster-example from any pods within the Kubernetes cluster&quot;
+  endpointSelector:
+    matchLabels:
+      cnpg.io/cluster: cluster-example
+  ingress:
+    - fromEntities:
+        - cluster
+      toPorts:
+        - ports:
+            - port: &quot;5432&quot;
+              protocol: TCP
+</code></pre>
+<p>You may consider using <a href="https://editor.networkpolicy.io/">editor.networkpolicy.io</a>,
+a visual and interactive tool that simplifies the creation and validation of
+Cilium Network Policies. It’s especially helpful for avoiding misconfigurations
+and understanding traffic rules more clearly by presenting in a visual way.</p>
+<p>With these policies, you've established baseline access controls for
+PostgreSQL. You can layer additional egress or audit rules using Cilium's
+policy language or extend to L7 enforcement with Envoy.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../external-secrets/" class="btn btn-neutral float-left" title="External Secrets"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../../appendixes/backup_volumesnapshot/" class="btn btn-neutral float-right" title="Appendix A - Backup on volume snapshots">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../external-secrets/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../../appendixes/backup_volumesnapshot/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../..";</script>
+    <script src="../../js/theme_extra.js"></script>
+    <script src="../../js/theme.js"></script>
+      <script src="../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/preview/cncf-projects/external-secrets/index.html b/assets/documentation/preview/cncf-projects/external-secrets/index.html
index a6b08a921..794105eb2 100644
--- a/assets/documentation/preview/cncf-projects/external-secrets/index.html
+++ b/assets/documentation/preview/cncf-projects/external-secrets/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../img/favicon.ico" />
-    <title>External Secrets - CloudNativePG v1.26.0-rc3</title>
+    <title>External Secrets - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../css/theme.css" />
     <link rel="stylesheet" href="../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -304,10 +300,16 @@
     </li>
     </ul>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -317,7 +319,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -458,8 +460,12 @@ <h3 id="theres-more">There's More</h3>
 custom secrets or PostgreSQL users you create to regularly rotate their
 password.</p>
 <h2 id="example-integration-with-an-external-kms">Example: Integration with an External KMS</h2>
-<p>A widely used Key Management Service (KMS) provider in the CNCF ecosystem is
-<a href="https://www.vaultproject.io/">HashiCorp Vault</a>.</p>
+<p>One of the most widely used Key Management Service (KMS) providers in the CNCF
+ecosystem is <a href="https://www.vaultproject.io/">HashiCorp Vault</a>. Although Vault is
+licensed under the Business Source License (BUSL), a fully compatible and
+actively maintained open source alternative is available: <a href="https://openbao.org/">OpenBao</a>.
+OpenBao supports all the same interfaces as HashiCorp Vault, making it a true
+drop-in replacement.</p>
 <p>In this example, we'll demonstrate how to integrate CloudNativePG,
 External Secrets Operator, and HashiCorp Vault to automatically rotate
 a PostgreSQL password and securely store it in Vault.</p>
@@ -561,7 +567,7 @@ <h3 id="verifying-the-configuration_1">Verifying the Configuration</h3>
           </div><footer>
     <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
         <a href="../../release_notes/" class="btn btn-neutral float-left" title="Release notes"><span class="icon icon-circle-arrow-left"></span> Previous</a>
-        <a href="../../appendixes/object_stores/" class="btn btn-neutral float-right" title="Appendix A - Common object stores for backups">Next <span class="icon icon-circle-arrow-right"></span></a>
+        <a href="../cilium/" class="btn btn-neutral float-right" title="Cilium">Next <span class="icon icon-circle-arrow-right"></span></a>
     </div>
 
   <hr/>
@@ -588,7 +594,7 @@ <h3 id="verifying-the-configuration_1">Verifying the Configuration</h3>
       <span><a href="../../release_notes/" style="color: #fcfcfc">&laquo; Previous</a></span>
     
     
-      <span><a href="../../appendixes/object_stores/" style="color: #fcfcfc">Next &raquo;</a></span>
+      <span><a href="../cilium/" style="color: #fcfcfc">Next &raquo;</a></span>
     
   </span>
 </div>
diff --git a/assets/documentation/preview/connection_pooling/index.html b/assets/documentation/preview/connection_pooling/index.html
index 6b8340ad4..a01442086 100644
--- a/assets/documentation/preview/connection_pooling/index.html
+++ b/assets/documentation/preview/connection_pooling/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Connection pooling - CloudNativePG v1.26.0-rc3</title>
+    <title>Connection pooling - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -270,6 +262,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -314,10 +310,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -327,7 +329,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/container_images/index.html b/assets/documentation/preview/container_images/index.html
index e8648584c..e586fd80f 100644
--- a/assets/documentation/preview/container_images/index.html
+++ b/assets/documentation/preview/container_images/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Container Image Requirements - CloudNativePG v1.26.0-rc3</title>
+    <title>Container Image Requirements - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -236,6 +228,10 @@
     </ul>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -280,10 +276,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -293,7 +295,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -384,7 +386,7 @@ <h2 id="image-tag-requirements">Image Tag Requirements</h2>
           </div><footer>
     <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
         <a href="../e2e/" class="btn btn-neutral float-left" title="End-to-End Tests"><span class="icon icon-circle-arrow-left"></span> Previous</a>
-        <a href="../operator_capability_levels/" class="btn btn-neutral float-right" title="Operator capability levels">Next <span class="icon icon-circle-arrow-right"></span></a>
+        <a href="../imagevolume_extensions/" class="btn btn-neutral float-right" title="Image Volume Extensions">Next <span class="icon icon-circle-arrow-right"></span></a>
     </div>
 
   <hr/>
@@ -411,7 +413,7 @@ <h2 id="image-tag-requirements">Image Tag Requirements</h2>
       <span><a href="../e2e/" style="color: #fcfcfc">&laquo; Previous</a></span>
     
     
-      <span><a href="../operator_capability_levels/" style="color: #fcfcfc">Next &raquo;</a></span>
+      <span><a href="../imagevolume_extensions/" style="color: #fcfcfc">Next &raquo;</a></span>
     
   </span>
 </div>
diff --git a/assets/documentation/preview/controller/index.html b/assets/documentation/preview/controller/index.html
index 994e49b27..9cb71696f 100644
--- a/assets/documentation/preview/controller/index.html
+++ b/assets/documentation/preview/controller/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Custom Pod Controller - CloudNativePG v1.26.0-rc3</title>
+    <title>Custom Pod Controller - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -286,10 +282,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -299,7 +301,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/database_import/index.html b/assets/documentation/preview/database_import/index.html
index 527bc58a5..46a5d80bf 100644
--- a/assets/documentation/preview/database_import/index.html
+++ b/assets/documentation/preview/database_import/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Importing Postgres databases - CloudNativePG v1.26.0-rc3</title>
+    <title>Importing Postgres databases - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -81,6 +81,8 @@
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#the-monolith-type">The monolith type</a>
     </li>
+    <li class="toctree-l2"><a class="reference internal" href="#a-practical-example">A practical example</a>
+    </li>
     <li class="toctree-l2"><a class="reference internal" href="#import-optimizations">Import optimizations</a>
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#customizing-pg_dump-and-pg_restore-behavior">Customizing pg_dump and pg_restore Behavior</a>
@@ -126,18 +128,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -246,6 +240,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -290,10 +288,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -303,7 +307,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -376,14 +380,14 @@ <h2 id="how-it-works">How it works</h2>
   databases and different users, imported from the source cluster</p>
 </li>
 </ul>
-<p>The first import method is available via the <code>microservice</code> type, while the
-latter by the <code>monolith</code> type.</p>
+<p>The first import method is available via the <code>microservice</code> type, the
+second via the <code>monolith</code> type.</p>
 <div class="admonition warning">
 <p class="admonition-title">Warning</p>
 <p>It is your responsibility to ensure that the destination cluster can
 access the source cluster with a superuser or a user having enough
 privileges to take a logical backup with <code>pg_dump</code>. Please refer to the
-<a href="https://www.postgresql.org/docs/current/app-pgdump.html">PostgreSQL documentation on "SQL Dump"</a>
+<a href="https://www.postgresql.org/docs/current/app-pgdump.html">PostgreSQL documentation on <code>pg_dump</code></a>
 for further information.</p>
 </div>
 <h2 id="the-microservice-type">The <code>microservice</code> type</h2>
@@ -401,6 +405,9 @@ <h2 id="the-microservice-type">The <code>microservice</code> type</h2>
   database via the <code>postImportApplicationSQL</code> parameter</li>
 <li>execution of <code>ANALYZE VERBOSE</code> on the imported database</li>
 </ul>
+<p>In the figure below, a single PostgreSQL cluster containing <em>N</em> databases is
+imported into separate CloudNativePG clusters, with each cluster using a
+microservice import for one of the <em>N</em> source databases.</p>
 <p><img alt="Example of microservice import type" src="../images/microservice-import.png" /></p>
 <p>For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest
 available major version at the time the operator was released) called
@@ -451,7 +458,7 @@ <h2 id="the-microservice-type">The <code>microservice</code> type</h2>
 and unsupported versions of Postgres too, giving you the chance to move your
 legacy data to a better system, inside Kubernetes.
 This is the main reason why we used 9.6 in the examples of this section.
-We'd be interested to hear from you should you experience any issues in this area.</p>
+We'd be interested to hear from you, should you experience any issues in this area.</p>
 </div>
 <p>There are a few things you need to be aware of when using the <code>microservice</code> type:</p>
 <ul>
@@ -470,6 +477,13 @@ <h2 id="the-microservice-type">The <code>microservice</code> type</h2>
 <li>Only one database can be specified inside the <code>initdb.import.databases</code> array</li>
 <li>Roles are not imported - and as such they cannot be specified inside <code>initdb.import.roles</code></li>
 </ul>
+<div class="admonition hint">
+<p class="admonition-title">Hint</p>
+<p>The microservice approach adheres to CloudNativePG conventions and defaults
+for the destination cluster. If you do not set <code>initdb.database</code> or
+<code>initdb.owner</code> for the destination cluster, both parameters will default to
+<code>app</code>.</p>
+</div>
 <h2 id="the-monolith-type">The <code>monolith</code> type</h2>
 <p>With the monolith approach, you can specify a set of roles and databases you
 want to import from the source cluster into the destination cluster.
@@ -535,7 +549,8 @@ <h2 id="the-monolith-type">The <code>monolith</code> type</h2>
   that needs to run <code>pg_dump</code> and retrieve roles information (<em>superuser</em> is
   OK)</li>
 <li>Currently, the <code>pg_dump -Fd</code> result is stored temporarily inside the <code>dumps</code>
-  folder in the <code>PGDATA</code> volume, so there should be enough available space to
+  folder in the <code>PGDATA</code> volume of the destination cluster's instances, so
+  there should be enough available space to
   temporarily contain the dump result on the assigned node, as well as the
   restored data and indexes. Once the import operation is completed, this
   folder is automatically deleted by the operator.</li>
@@ -553,7 +568,107 @@ <h2 id="the-monolith-type">The <code>monolith</code> type</h2>
   and those databases not allowing connections</li>
 <li>After the clone procedure is done, <code>ANALYZE VERBOSE</code> is executed for every
   database.</li>
-<li><code>postImportApplicationSQL</code> field is not supported</li>
+<li>The <code>postImportApplicationSQL</code> field is not supported</li>
+</ul>
+<div class="admonition hint">
+<p class="admonition-title">Hint</p>
+<p>The databases and their owners are preserved exactly as they exist in the
+source cluster—no <code>app</code> database or user will be created during import. If your
+<code>bootstrap.initdb</code> stanza specifies custom <code>database</code> and <code>owner</code> values that
+do not match any of the databases or users being imported, the instance
+manager will create a new, empty application database and owner role with those
+specified names, while leaving the imported databases and owners unchanged.</p>
+</div>
+<h2 id="a-practical-example">A practical example</h2>
+<p>There is nothing to stop you from using the <code>monolith</code> approach to import a
+single database. It is interesting to see how the results of doing so would
+differ from using the <code>microservice</code> approach.</p>
+<p>Given a source cluster, for example the following, with a database named
+<code>mydb</code> owned by role <code>me</code>:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+spec:
+  instances: 1
+
+  postgresql:
+    pg_hba:
+      - host all all all trust
+
+  storage:
+    size: 1Gi
+
+  bootstrap:
+    initdb:
+      database: mydb
+      owner: me
+</code></pre>
+<p>We can import it via <code>microservice</code>:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-microservice
+spec:
+  instances: 1
+
+  storage:
+    size: 1Gi
+
+  bootstrap:
+    initdb:
+      import:
+        type: microservice
+        databases:
+          - mydb
+        source:
+          externalCluster: cluster-example
+
+  externalClusters:
+    - name: cluster-example
+      connectionParameters:
+        host: cluster-example-rw
+        dbname: postgres
+</code></pre>
+<p>as well as via monolith:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example-monolith
+spec:
+  instances: 1
+
+  storage:
+    size: 1Gi
+
+  bootstrap:
+    initdb:
+      import:
+        type: monolith
+        databases:
+          - mydb
+        roles:
+          - me
+        source:
+          externalCluster: cluster-example
+
+  externalClusters:
+    - name: cluster-example
+      connectionParameters:
+        host: cluster-example-rw
+        dbname: postgres
+</code></pre>
+<p>In both cases, the database's contents will be imported, but:</p>
+<ul>
+<li>In the microservice case, the imported database's name and owner both become
+  <code>app</code>, or whichever configuration for the fields <code>database</code> and <code>owner</code> are
+  set in the <code>bootstrap.initdb</code> stanza.</li>
+<li>In the monolith case, the database and owner are kept exactly as in the source
+  cluster, i.e. <code>mydb</code> and <code>me</code> respectively. No <code>app</code> database nor user will be
+  created. If there are custom settings for <code>database</code> and <code>owner</code> in the
+  <code>bootstrap.initdb</code> stanza that don't match the source databases/owners to
+  import, the instance manager will create a new empty application database and
+  owner role, but will leave the imported databases/owners intact.</li>
 </ul>
 <h2 id="import-optimizations">Import optimizations</h2>
 <p>During the logical import of a database, CloudNativePG optimizes the
diff --git a/assets/documentation/preview/declarative_database_management/index.html b/assets/documentation/preview/declarative_database_management/index.html
index 3c1eb174c..2e6b68df9 100644
--- a/assets/documentation/preview/declarative_database_management/index.html
+++ b/assets/documentation/preview/declarative_database_management/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>PostgreSQL Database Management - CloudNativePG v1.26.0-rc3</title>
+    <title>PostgreSQL Database Management - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -276,6 +268,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -320,10 +316,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -333,7 +335,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/declarative_hibernation/index.html b/assets/documentation/preview/declarative_hibernation/index.html
index f90c6ace6..d9562681e 100644
--- a/assets/documentation/preview/declarative_hibernation/index.html
+++ b/assets/documentation/preview/declarative_hibernation/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Declarative hibernation - CloudNativePG v1.26.0-rc3</title>
+    <title>Declarative hibernation - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -238,6 +230,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -282,10 +278,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -295,7 +297,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/declarative_role_management/index.html b/assets/documentation/preview/declarative_role_management/index.html
index a86a2b2c1..ea881d237 100644
--- a/assets/documentation/preview/declarative_role_management/index.html
+++ b/assets/documentation/preview/declarative_role_management/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>PostgreSQL Role Management - CloudNativePG v1.26.0-rc3</title>
+    <title>PostgreSQL Role Management - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -246,6 +238,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -290,10 +286,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -303,7 +305,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/e2e/index.html b/assets/documentation/preview/e2e/index.html
index 2edaa1155..ad34373c5 100644
--- a/assets/documentation/preview/e2e/index.html
+++ b/assets/documentation/preview/e2e/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>End-to-End Tests - CloudNativePG v1.26.0-rc3</title>
+    <title>End-to-End Tests - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -234,6 +226,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -278,10 +274,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -291,7 +293,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/failover/index.html b/assets/documentation/preview/failover/index.html
index 783fa0589..1521ea044 100644
--- a/assets/documentation/preview/failover/index.html
+++ b/assets/documentation/preview/failover/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Automated failover - CloudNativePG v1.26.0-rc3</title>
+    <title>Automated failover - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -211,6 +203,26 @@
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#delayed-failover">Delayed failover</a>
     </li>
+    <li class="toctree-l2"><a class="reference internal" href="#failover-quorum-quorum-based-failover">Failover Quorum (Quorum-based Failover)</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#how-it-works">How it works</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#quorum-failover-example-scenarios">Quorum Failover Example Scenarios</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#scenario-1-three-node-cluster-failing-pods">Scenario 1: Three-node cluster, failing pod(s)</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#scenario-2-three-node-cluster-network-partition">Scenario 2: Three-node cluster, network partition</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#scenario-3-five-node-cluster-network-partition">Scenario 3: Five-node cluster, network partition</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#scenario-4-three-node-cluster-with-remote-synchronous-replicas">Scenario 4: Three-node cluster with remote synchronous replicas</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#scenario-5-three-node-cluster-preferred-data-durability-network-partition">Scenario 5: Three-node cluster, preferred data durability, network partition</a>
+    </li>
+        </ul>
+    </li>
+        </ul>
+    </li>
     </ul>
                 </li>
               </ul>
@@ -238,6 +250,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -282,10 +298,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -295,7 +317,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -404,6 +426,368 @@ <h2 id="delayed-failover">Delayed failover</h2>
 expected outage.</p>
 <p>Enabling a new configuration option to delay failover provides a mechanism to
 prevent premature failover for short-lived network or node instability.</p>
+<h2 id="failover-quorum-quorum-based-failover">Failover Quorum (Quorum-based Failover)</h2>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p><em>Failover quorum</em> is an experimental feature introduced in version 1.27.0.
+Use with caution in production environments.</p>
+</div>
+<p>Failover quorum is a mechanism that enhances data durability and safety during
+failover events in CloudNativePG-managed PostgreSQL clusters.</p>
+<p>Quorum-based failover allows the controller to determine whether to promote a replica
+to primary based on the state of a quorum of replicas.
+This is useful when stronger data durability is required than the one offered
+by <a href="../replication/#synchronous-replication">synchronous replication</a> and
+default automated failover procedures.</p>
+<p>When synchronous replication is not enabled, some data loss is expected and
+accepted during failover, as a replica may lag behind the primary when
+promoted.</p>
+<p>With synchronous replication enabled, the guarantee is that the application
+will not receive explicit acknowledgment of the successful commit of a
+transaction until the WAL data is known to be safely received by all required
+synchronous standbys.
+This is not enough to guarantee that the operator is able to promote the most
+advanced replica.</p>
+<p>For example, in a three-node cluster with synchronous replication set to <code>ANY 1
+(...)</code>, data is written to the primary and one standby before a commit is
+acknowledged. If both the primary and the aligned standby become unavailable
+(such as during a network partition), the remaining replica may not have the
+latest data. Promoting it could lose some data that the application considered
+committed.</p>
+<p>Quorum-based failover addresses this risk by ensuring that failover only occurs
+if the operator can confirm the presence of all synchronously committed data in
+the instance to promote, and it does not occur otherwise.</p>
+<p>This feature allows users to choose their preferred trade-off between data
+durability and data availability.</p>
+<p>Failover quorum can be enabled by setting the annotation
+<code>alpha.cnpg.io/failoverQuorum="true"</code> in the <code>Cluster</code> resource.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>When this feature is out of the experimental phase, the annotation
+<code>alpha.cnpg.io/failoverQuorum</code> will be replaced by a configuration option in
+the <code>Cluster</code> resource.</p>
+</div>
+<h3 id="how-it-works">How it works</h3>
+<p>Before promoting a replica to primary, the operator performs a quorum check,
+following the principles of the Dynamo <code>R + W &gt; N</code> consistency model<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>.</p>
+<p>In the quorum failover, these values assume the following meaning:</p>
+<ul>
+<li><code>R</code> is the number of <em>promotable replicas</em> (read quorum);</li>
+<li><code>W</code> is the number of replicas that must acknowledge the write before the
+  <code>COMMIT</code> is returned to the client (write quorum);</li>
+<li><code>N</code> is the total number of potentially synchronous replicas;</li>
+</ul>
+<p><em>Promotable replicas</em> are replicas that have these properties:</p>
+<ul>
+<li>are part of the cluster;</li>
+<li>are able to report their state to the operator;</li>
+<li>are potentially synchronous;</li>
+</ul>
+<p>If <code>R + W &gt; N</code>, then we can be sure that among the promotable replicas there is
+at least one that has confirmed all the synchronous commits, and we can safely
+promote it to primary. If this is not the case, the controller will not promote
+any replica to primary, and will wait for the situation to change.</p>
+<p>Users can force a promotion of a replica to primary through the
+<code>kubectl cnpg promote</code> command even if the quorum check is failing.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Manual promotion should only be used as a last resort. Before proceeding,
+make sure you fully understand the risk of data loss and carefully consider the
+consequences of prioritizing the resumption of write workloads for your
+applications.</p>
+</div>
+<p>An additional CRD is used to track the quorum state of the cluster. A <code>Cluster</code>
+with the quorum failover enabled will have a <code>FailoverQuorum</code> resource with the same
+name as the <code>Cluster</code> resource. The <code>FailoverQuorum</code> CR is created by the
+controller when the quorum failover is enabled, and it is updated by the primary
+instance during its reconciliation loop, and read by the operator during quorum
+checks. It is used to track the latest known configuration of the synchronous
+replication.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Users should not modify the <code>FailoverQuorum</code> resource directly. During
+PostgreSQL configuration changes, when it is not possible to determine the
+configuration, the <code>FailoverQuorum</code> resource will be reset, preventing any
+failover until the new configuration is applied.</p>
+</div>
+<p>The <code>FailoverQuorum</code> resource works in conjunction with PostgreSQL synchronous
+replication.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>There is no guarantee that <code>COMMIT</code> operations returned to the
+client but that have not been performed synchronously, such as those made
+explicitly disabling synchronous replication with
+<code>SET synchronous_commit TO local</code>, will be present on a promoted replica.</p>
+</div>
+<h3 id="quorum-failover-example-scenarios">Quorum Failover Example Scenarios</h3>
+<p>In the following scenarios, <code>R</code> is the number of promotable replicas, <code>W</code> is
+the number of replicas that must acknowledge a write before commit, and <code>N</code> is
+the total number of potentially synchronous replicas. The "Failover" column
+indicates whether failover is allowed under quorum failover rules.</p>
+<h4 id="scenario-1-three-node-cluster-failing-pods">Scenario 1: Three-node cluster, failing pod(s)</h4>
+<p>A cluster with <code>instances: 3</code>, <code>synchronous.number=1</code>, and
+<code>dataDurability=required</code>.</p>
+<ul>
+<li>If only the primary fails, two promotable replicas remain (R=2).
+  Since <code>R + W &gt; N</code> (2 + 1 &gt; 2), failover is allowed and safe.</li>
+<li>If both the primary and one replica fail, only one promotable replica
+  remains (R=1). Since <code>R + W = N</code> (1 + 1 = 2), failover is not allowed to
+  prevent possible data loss.</li>
+</ul>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<h4 id="scenario-2-three-node-cluster-network-partition">Scenario 2: Three-node cluster, network partition</h4>
+<p>A cluster with <code>instances: 3</code>, <code>synchronous.number: 1</code>, and
+<code>dataDurability: required</code> experiences a network partition.</p>
+<ul>
+<li>If the operator can communicate with the primary, no failover occurs. The
+  cluster can be impacted if the primary cannot reach any standby, since it
+  won't commit transactions due to synchronous replication requirements.</li>
+<li>If the operator cannot reach the primary but can reach both replicas (R=2),
+  failover is allowed. If the operator can reach only one replica (R=1),
+  failover is not allowed, as the synchronous one may be the other one.</li>
+</ul>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<h4 id="scenario-3-five-node-cluster-network-partition">Scenario 3: Five-node cluster, network partition</h4>
+<p>A cluster with <code>instances: 5</code>, <code>synchronous.number=2</code>, and
+<code>dataDurability=required</code> experiences a network partition.</p>
+<ul>
+<li>If the operator can communicate with the primary, no failover occurs. The
+  cluster can be impacted if the primary cannot reach at least two standbys,
+  as since it won't commit transactions due to synchronous replication
+  requirements.</li>
+<li>If the operator cannot reach the primary but can reach at least three
+  replicas (R=3), failover is allowed. If the operator can reach only two
+  replicas (R=2), failover is not allowed, as the synchronous one may be the
+  other one.</li>
+</ul>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">3</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">4</td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">4</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<h4 id="scenario-4-three-node-cluster-with-remote-synchronous-replicas">Scenario 4: Three-node cluster with remote synchronous replicas</h4>
+<p>A cluster with <code>instances: 3</code> and remote synchronous replicas defined in
+<code>standbyNamesPre</code> or <code>standbyNamesPost</code>. We assume that the primary is failing.</p>
+<p>This scenario requires an important consideration. Replicas listed in
+<code>standbyNamesPre</code> or <code>standbyNamesPost</code> are not counted in
+<code>R</code> (they cannot be promoted), but are included in <code>N</code> (they may have received
+synchronous writes). So, if
+<code>synchronous.number &lt;= len(standbyNamesPre) + len(standbyNamesPost)</code>, failover
+is not possible, as no local replica can be guaranteed to have the required
+data. The operator prevents such configurations during validation, but some
+invalid configurations are shown below for clarity.</p>
+<p><strong>Example configurations:</strong></p>
+<p>Configuration #1 (valid):</p>
+<pre><code class="language-yaml">instances: 3
+postgresql:
+  synchronous:
+    method: any
+    number: 2
+    standbyNamesPre:
+      - angus
+</code></pre>
+<p>In this configuration, when the primary fails, <code>R = 2</code> (the local replicas),
+<code>W = 2</code>, and <code>N = 3</code> (2 local replicas + 1 remote), allowing failover.
+In case of an additional replica failing (<code>R = 1</code>) failover is not allowed.</p>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">3</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">4</td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">4</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<p>Configuration #2 (invalid):</p>
+<pre><code class="language-yaml">instances: 3
+postgresql:
+  synchronous:
+    method: any
+    number: 1
+    maxStandbyNamesFromCluster: 1
+    standbyNamesPre:
+      - angus
+</code></pre>
+<p>In this configuration, <code>R = 2</code> (the local replicas), <code>W = 1</code>, and <code>N = 3</code>
+(2 local replicas + 1 remote).
+Failover is not possible in this setup, so quorum failover can not be
+enabled with this configuration.</p>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<p>Configuration #3 (invalid):</p>
+<pre><code class="language-yaml">instances: 3
+postgresql:
+  synchronous:
+    method: any
+    number: 1
+    maxStandbyNamesFromCluster: 0
+    standbyNamesPre:
+      - angus
+      - malcolm
+</code></pre>
+<p>In this configuration, <code>R = 0</code> (the local replicas), <code>W = 1</code>, and <code>N = 2</code>
+(0 local replicas + 2 remote).
+Failover is not possible in this setup, so quorum failover can not be
+enabled with this configuration.</p>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">0</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<h4 id="scenario-5-three-node-cluster-preferred-data-durability-network-partition">Scenario 5: Three-node cluster, preferred data durability, network partition</h4>
+<p>Consider a cluster with <code>instances: 3</code>, <code>synchronous.number=1</code>, and
+<code>dataDurability=preferred</code> that experiences a network partition.</p>
+<ul>
+<li>If the operator can communicate with both the primary and the API server,
+  the primary continues to operate, removing unreachable standbys from the
+  <code>synchronous_standby_names</code> set.</li>
+<li>If the primary cannot reach the operator or API server, a quorum check is
+  performed. The <code>FailoverQuorum</code> status cannot have changed, as the primary cannot
+  have received new configuration. If the operator can reach both replicas,
+  failover is allowed (<code>R=2</code>). If only one replica is reachable (<code>R=1</code>),
+  failover is not allowed.</li>
+</ul>
+<table>
+<thead>
+<tr>
+<th style="text-align: center;">R</th>
+<th style="text-align: center;">W</th>
+<th style="text-align: center;">N</th>
+<th style="text-align: center;">Failover</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">✅</td>
+</tr>
+<tr>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">1</td>
+<td style="text-align: center;">2</td>
+<td style="text-align: center;">❌</td>
+</tr>
+</tbody>
+</table>
+<div class="footnote">
+<hr />
+<ol>
+<li id="fn:1">
+<p><a href="https://www.amazon.science/publications/dynamo-amazons-highly-available-key-value-store">Dynamo: Amazon’s highly available key-value store</a>&#160;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&#8617;</a></p>
+</li>
+</ol>
+</div>
               
             </div>
           </div><footer>
diff --git a/assets/documentation/preview/failure_modes/index.html b/assets/documentation/preview/failure_modes/index.html
index 6671b9589..e8a81ec97 100644
--- a/assets/documentation/preview/failure_modes/index.html
+++ b/assets/documentation/preview/failure_modes/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Failure Modes - CloudNativePG v1.26.0-rc3</title>
+    <title>Failure Modes - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -128,18 +128,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -248,6 +240,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -292,10 +288,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -305,7 +307,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/faq/index.html b/assets/documentation/preview/faq/index.html
index ddeb615f9..45ef58d19 100644
--- a/assets/documentation/preview/faq/index.html
+++ b/assets/documentation/preview/faq/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Frequently Asked Questions (FAQ) - CloudNativePG v1.26.0-rc3</title>
+    <title>Frequently Asked Questions (FAQ) - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -284,10 +280,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -297,7 +299,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/fencing/index.html b/assets/documentation/preview/fencing/index.html
index da4ca4439..1299faec4 100644
--- a/assets/documentation/preview/fencing/index.html
+++ b/assets/documentation/preview/fencing/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Fencing - CloudNativePG v1.26.0-rc3</title>
+    <title>Fencing - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -240,6 +232,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -284,10 +280,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -297,7 +299,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/image_catalog/index.html b/assets/documentation/preview/image_catalog/index.html
index 7a74e434b..ed709a6c7 100644
--- a/assets/documentation/preview/image_catalog/index.html
+++ b/assets/documentation/preview/image_catalog/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Image Catalog - CloudNativePG v1.26.0-rc3</title>
+    <title>Image Catalog - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -122,18 +122,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -242,6 +234,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -286,10 +282,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -299,7 +301,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/imagevolume_extensions/index.html b/assets/documentation/preview/imagevolume_extensions/index.html
new file mode 100644
index 000000000..d21fbe1fe
--- /dev/null
+++ b/assets/documentation/preview/imagevolume_extensions/index.html
@@ -0,0 +1,699 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../img/favicon.ico" />
+    <title>Image Volume Extensions - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../css/theme.css" />
+    <link rel="stylesheet" href="../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Image Volume Extensions";
+        var mkdocs_page_input_path = "imagevolume_extensions.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul class="current">
+                <li class="toctree-l1 current"><a class="reference internal current" href="#">Image Volume Extensions</a>
+    <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#benefits">Benefits</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#requirements">Requirements</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#how-it-works">How it works</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#how-to-add-a-new-extension">How to add a new extension</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#adding-a-new-extension-to-a-cluster-resource">Adding a new extension to a Cluster resource</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#adding-a-new-extension-to-a-database-resource">Adding a new extension to a Database resource</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#advanced-topics">Advanced Topics</a>
+        <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#setting-custom-paths">Setting Custom Paths</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#multi-extension-images">Multi-extension Images</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#including-system-libraries">Including System Libraries</a>
+    </li>
+        </ul>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#image-specifications">Image Specifications</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#caveats">Caveats</a>
+    </li>
+    </ul>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../release_notes/">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href=".." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Image Volume Extensions</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="image-volume-extensions">Image Volume Extensions</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>CloudNativePG supports the <strong>dynamic loading of PostgreSQL extensions</strong> into a
+<code>Cluster</code> at Pod startup using the <a href="https://kubernetes.io/docs/tasks/configure-pod-container/image-volumes/">Kubernetes <code>ImageVolume</code> feature</a>
+and the <code>extension_control_path</code> GUC introduced in PostgreSQL 18, to which this
+project contributed.</p>
+<p>This feature allows you to mount a <a href="https://www.postgresql.org/docs/current/extend-extensions.html">PostgreSQL extension</a>,
+packaged as an OCI-compliant container image, as a read-only and immutable
+volume inside a running pod at a known filesystem path.</p>
+<p>You can make the extension available either globally, using the
+<a href="../postgresql_conf/#shared-preload-libraries"><code>shared_preload_libraries</code> option</a>,
+or at the database level through the <code>CREATE EXTENSION</code> command. For the
+latter, you can use the <a href="../declarative_database_management/#managing-extensions-in-a-database"><code>Database</code> resource’s declarative extension management</a>
+to ensure consistent, automated extension setup within your PostgreSQL
+databases.</p>
+<h2 id="benefits">Benefits</h2>
+<p>Image volume extensions decouple the distribution of PostgreSQL operand
+container images from the distribution of extensions. This eliminates the
+need to define and embed extensions at build time within your PostgreSQL
+images—a major adoption blocker for PostgreSQL as a containerized workload,
+including from a security and supply chain perspective.</p>
+<p>As a result, you can:</p>
+<ul>
+<li>Use the <a href="https://github.com/cloudnative-pg/postgres-containers?tab=readme-ov-file#minimal-images">official PostgreSQL <code>minimal</code> operand images</a>
+  provided by CloudNativePG.</li>
+<li>Dynamically add the extensions you need to your <code>Cluster</code> definitions,
+  without rebuilding or maintaining custom PostgreSQL images.</li>
+<li>Reduce your operational surface by using immutable, minimal, and secure base
+  images while adding only the extensions required for each workload.</li>
+</ul>
+<p>Extension images must be built according to the
+<a href="#image-specifications">documented specifications</a>.</p>
+<h2 id="requirements">Requirements</h2>
+<p>To use image volume extensions with CloudNativePG, you need:</p>
+<ul>
+<li><strong>PostgreSQL 18 or later</strong>, with support for <code>extension_control_path</code>.</li>
+<li><strong>Kubernetes 1.33</strong>, with the <code>ImageVolume</code> feature gate enabled.</li>
+<li><strong>CloudNativePG-compatible extension container images</strong>, ensuring:<ul>
+<li>Matching PostgreSQL major version of the <code>Cluster</code> resource.</li>
+<li>Compatible operating system distribution of the <code>Cluster</code> resource.</li>
+<li>Matching CPU architecture of the <code>Cluster</code> resource.</li>
+</ul>
+</li>
+</ul>
+<h2 id="how-it-works">How it works</h2>
+<p>Extension images are defined in the <code>.spec.postgresql.extensions</code> stanza of a
+<code>Cluster</code> resource, which accepts an ordered list of extensions to be added to
+the PostgreSQL cluster.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For field-level details, see the
+<a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ExtensionConfiguration">API reference for <code>ExtensionConfiguration</code></a>.</p>
+</div>
+<p>Each image volume is mounted at <code>/extensions/&lt;EXTENSION_NAME&gt;</code>.</p>
+<p>By default, CloudNativePG automatically manages the relevant GUCs, setting:</p>
+<ul>
+<li><code>extension_control_path</code> to <code>/extensions/&lt;EXTENSION_NAME&gt;/share</code>, allowing
+  PostgreSQL to locate any extension control file within <code>/extensions/&lt;EXTENSION_NAME&gt;/share/extension</code></li>
+<li><code>dynamic_library_path</code> to <code>/extensions/&lt;EXTENSION_NAME&gt;/lib</code></li>
+</ul>
+<p>These values are appended in the order in which the extensions are defined in
+the <code>extensions</code> list, ensuring deterministic path resolution within
+PostgreSQL. This allows PostgreSQL to discover and load the extension without
+requiring manual configuration inside the pod.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>Depending on how your extension container images are built and their layout,
+you may need to adjust the default <code>extension_control_path</code> and
+<code>dynamic_library_path</code> values to match the image structure.</p>
+</div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>If the extension image includes shared libraries, they must be compiled
+with the same PostgreSQL major version, operating system distribution, and CPU
+architecture as the PostgreSQL container image used by your cluster, to ensure
+compatibility and prevent runtime issues.</p>
+</div>
+<h2 id="how-to-add-a-new-extension">How to add a new extension</h2>
+<p>Adding an extension to a database in CloudNativePG involves a few steps:</p>
+<ol>
+<li>Define the extension image in the <code>Cluster</code> resource so that PostgreSQL can
+   discover and load it.</li>
+<li>Add the library to <a href="../postgresql_conf/#shared-preload-libraries"><code>shared_preload_libraries</code></a>
+   if the extension requires it.</li>
+<li>Declare the extension in the <code>Database</code> resource where you want it
+   installed, if the extension supports <code>CREATE EXTENSION</code>.</li>
+</ol>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Avoid making changes to extension images and PostgreSQL configuration
+settings (such as <code>shared_preload_libraries</code>) simultaneously.
+First, allow the pod to roll out with the new extension image, then update
+the PostgreSQL configuration.
+This limitation will be addressed in a future release of CloudNativePG.</p>
+</div>
+<p>For illustration purposes, this guide uses a simple, fictitious extension named
+<code>foo</code> that supports <code>CREATE EXTENSION</code>.</p>
+<h3 id="adding-a-new-extension-to-a-cluster-resource">Adding a new extension to a <code>Cluster</code> resource</h3>
+<p>You can add an <code>ImageVolume</code>-based extension to a <code>Cluster</code> using the
+<code>.spec.postgresql.extensions</code> stanza. For example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: foo-18
+spec:
+  # ...
+  postgresql:
+    extensions:
+      - name: foo
+        image:
+          reference: # registry path for your extension image
+  # ...
+</code></pre>
+<p>The <code>name</code> field is <strong>mandatory</strong> and <strong>must be unique within the cluster</strong>, as
+it determines the mount path (<code>/extensions/foo</code> in this example). It must
+consist of <em>lowercase alphanumeric characters or hyphens (<code>-</code>)</em> and must start
+and end with an alphanumeric character.</p>
+<p>The <code>image</code> stanza follows the <a href="https://kubernetes.io/docs/tasks/configure-pod-container/image-volumes/">Kubernetes <code>ImageVolume</code> API</a>.
+The <code>reference</code> must point to a valid container registry path for the extension
+image.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>When a new extension is added to a running <code>Cluster</code>, CloudNativePG will
+automatically trigger a <a href="../rolling_update/">rolling update</a> to attach the new
+image volume to each pod. Before adding a new extension in production,
+ensure you have thoroughly tested it in a staging environment to prevent
+configuration issues that could leave your PostgreSQL cluster in an unhealthy
+state.</p>
+</div>
+<p>Once mounted, CloudNativePG will automatically configure PostgreSQL by appending:</p>
+<ul>
+<li><code>/extensions/foo/share</code> to <code>extension_control_path</code></li>
+<li><code>/extensions/foo/lib</code> to <code>dynamic_library_path</code></li>
+</ul>
+<p>This ensures that the PostgreSQL container is ready to serve the <code>foo</code>
+extension when requested by a database, as described in the next section. The
+<code>CREATE EXTENSION foo</code> command, triggered automatically during the
+<a href="../declarative_database_management/#managing-extensions-in-a-database">reconciliation of the <code>Database</code> resource</a>,
+will work without additional configuration, as PostgreSQL will locate:</p>
+<ul>
+<li>the extension control file at <code>/extensions/foo/share/extension/foo.control</code></li>
+<li>the shared library at <code>/extensions/foo/lib/foo.so</code></li>
+</ul>
+<h3 id="adding-a-new-extension-to-a-database-resource">Adding a new extension to a <code>Database</code> resource</h3>
+<p>Once the extension is available in the PostgreSQL instance, you can leverage
+declarative databases to <a href="../declarative_database_management/#managing-extensions-in-a-database">manage the lifecycle of your extensions</a>
+within the target database.</p>
+<p>Continuing with the <code>foo</code> example, you can request the installation of the
+<code>foo</code> extension in the <code>app</code> database of the <code>foo-18</code> cluster using the
+following resource definition:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: foo-app
+spec:
+  name: app
+  owner: app
+  cluster:
+    name: foo-18
+  extensions:
+    - name: foo
+      version: 1.0
+</code></pre>
+<p>CloudNativePG will automatically reconcile this resource, executing the
+<code>CREATE EXTENSION foo</code> command inside the <code>app</code> database if it is not
+already installed, ensuring your desired state is maintained without manual
+intervention.</p>
+<h2 id="advanced-topics">Advanced Topics</h2>
+<p>In some cases, the default expected structure may be insufficient for your
+extension image, particularly when:</p>
+<ul>
+<li>The extension requires additional system libraries.</li>
+<li>Multiple extensions are bundled in the same image.</li>
+<li>The image uses a custom directory structure.</li>
+</ul>
+<p>Following the <em>"convention over configuration"</em> paradigm, CloudNativePG allows
+you to finely control the configuration of each extension image through the
+following fields:</p>
+<ul>
+<li><code>extension_control_path</code>: A list of relative paths within the container image
+  to be appended to PostgreSQL’s <code>extension_control_path</code>, allowing it to
+  locate extension control files.</li>
+<li><code>dynamic_library_path</code>: A list of relative paths within the container image
+  to be appended to PostgreSQL’s <code>dynamic_library_path</code>, enabling it to locate
+  shared library files for extensions.</li>
+<li><code>ld_library_path</code>: A list of relative paths within the container image to be
+  appended to the <code>LD_LIBRARY_PATH</code> environment variable of the instance
+  manager process, allowing PostgreSQL to locate required system libraries at
+  runtime.</li>
+</ul>
+<p>This flexibility enables you to support complex or non-standard extension
+images while maintaining clarity and predictability.</p>
+<h3 id="setting-custom-paths">Setting Custom Paths</h3>
+<p>If your extension image does not use the default <code>lib</code> and <code>share</code> directories
+for its libraries and control files, you can override the defaults by
+explicitly setting <code>extension_control_path</code> and <code>dynamic_library_path</code>.</p>
+<p>For example:</p>
+<pre><code class="language-yaml">spec:
+  postgresql:
+    extensions:
+      - name: my-extension
+        extension_control_path:
+          - my/share/path
+        dynamic_library_path:
+          - my/lib/path
+        image:
+          reference: # registry path for your extension image
+</code></pre>
+<p>CloudNativePG will configure PostgreSQL with:</p>
+<ul>
+<li><code>/extensions/my-extension/my/share/path</code> appended to <code>extension_control_path</code></li>
+<li><code>/extensions/my-extension/my/lib/path</code> appended to <code>dynamic_library_path</code></li>
+</ul>
+<p>This allows PostgreSQL to discover your extension’s control files and shared
+libraries correctly, even with a non-standard layout.</p>
+<h3 id="multi-extension-images">Multi-extension Images</h3>
+<p>You may need to include multiple extensions within the same container image,
+adopting a structure where each extension’s files reside in their own
+subdirectory.</p>
+<p>For example, to package PostGIS and pgRouting together in a single image, each
+in its own subdirectory:</p>
+<pre><code class="language-yaml"># ...
+spec:
+  # ...
+  postgresql:
+    extensions:
+      - name: geospatial
+        extension_control_path:
+          - postgis/share
+          - pgrouting/share
+        dynamic_library_path:
+          - postgis/lib
+          - pgrouting/lib
+        # ...
+        image:
+          reference: # registry path for your geospatial image
+      # ...
+    # ...
+  # ...
+</code></pre>
+<h3 id="including-system-libraries">Including System Libraries</h3>
+<p>Some extensions, such as PostGIS, require system libraries that may not be
+present in the base PostgreSQL image. To support these requirements, you can
+package the necessary libraries within your extension container image and make
+them available to PostgreSQL using the <code>ld_library_path</code> field.</p>
+<p>For example, if your extension image includes a <code>system</code> directory with the
+required libraries:</p>
+<pre><code class="language-yaml"># ...
+spec:
+  # ...
+  postgresql:
+    extensions:
+      - name: postgis
+        # ...
+        ld_library_path:
+          - syslib
+        image:
+          reference: # registry path for your PostGIS image
+      # ...
+    # ...
+  # ...
+</code></pre>
+<p>CloudNativePG will set the <code>LD_LIBRARY_PATH</code> environment variable to include
+<code>/extensions/postgis/system</code>, allowing PostgreSQL to locate and load these
+system libraries at runtime.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Since <code>ld_library_path</code> must be set when the PostgreSQL process starts,
+changing this value requires a <strong>cluster restart</strong> for the new value to take effect.
+CloudNativePG does not currently trigger this restart automatically; you will need to
+manually restart the cluster (e.g., using <code>cnpg restart</code>) after modifying <code>ld_library_path</code>.</p>
+</div>
+<h2 id="image-specifications">Image Specifications</h2>
+<p>A standard extension container image for CloudNativePG includes two
+required directories at its root:</p>
+<ul>
+<li><code>share</code>: contains the extension control file (e.g., <code>&lt;EXTENSION&gt;.control</code>)
+  and any SQL files.</li>
+<li><code>lib</code>: contains the extension's shared library (e.g., <code>&lt;EXTENSION&gt;.so</code>) and
+  any additional required libraries.</li>
+</ul>
+<p>Following this structure ensures that the extension will be automatically
+discoverable and usable by PostgreSQL within CloudNativePG without requiring
+manual configuration.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>We encourage PostgreSQL extension developers to publish OCI-compliant extension
+images following this layout as part of their artifact distribution, making
+their extensions easily consumable within Kubernetes environments.
+Ideally, extension images should target a specific operating system
+distribution and architecture, be tied to a particular PostgreSQL version, and
+be built using the distribution’s native packaging system (for example, using
+Debian or RPM packages). This approach ensures consistency, security, and
+compatibility with the PostgreSQL images used in your clusters.</p>
+</div>
+<h2 id="caveats">Caveats</h2>
+<p>Currently, adding, removing, or updating an extension image triggers a
+restart of the PostgreSQL pods. This behavior is inherited from how
+<a href="https://kubernetes.io/docs/tasks/configure-pod-container/image-volumes/">image volumes</a>
+work in Kubernetes.</p>
+<p>Before performing an extension update, ensure you have:</p>
+<ul>
+<li>Thoroughly tested the update process in a staging environment.</li>
+<li>Verified that the extension image contains the required upgrade path between
+  the currently installed version and the target version.</li>
+<li>Updated the <code>version</code> field for the extension in the relevant <code>Database</code>
+  resource definition to align with the new version in the image.</li>
+</ul>
+<p>These steps help prevent downtime or data inconsistencies in your PostgreSQL
+clusters during extension updates.</p>
+              
+            </div>
+          </div><footer>
+    <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
+        <a href="../container_images/" class="btn btn-neutral float-left" title="Container Image Requirements"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../operator_capability_levels/" class="btn btn-neutral float-right" title="Operator capability levels">Next <span class="icon icon-circle-arrow-right"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+      <span><a href="../container_images/" style="color: #fcfcfc">&laquo; Previous</a></span>
+    
+    
+      <span><a href="../operator_capability_levels/" style="color: #fcfcfc">Next &raquo;</a></span>
+    
+  </span>
+</div>
+    <script src="../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "..";</script>
+    <script src="../js/theme_extra.js"></script>
+    <script src="../js/theme.js"></script>
+      <script src="../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/preview/index.html b/assets/documentation/preview/index.html
index 4f9e050ff..be517bbf3 100644
--- a/assets/documentation/preview/index.html
+++ b/assets/documentation/preview/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="description" content="None" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="img/favicon.ico" />
-    <title>CloudNativePG v1.26.0-rc3</title>
+    <title>CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="css/theme.css" />
     <link rel="stylesheet" href="css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="./search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -128,18 +128,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="recovery/">Recovery</a>
                 </li>
@@ -248,6 +240,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -292,10 +288,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -305,7 +307,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href=".">CloudNativePG v1.26.0-rc3</a>
+          <a href=".">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -383,7 +385,9 @@ <h3 id="operands">Operands</h3>
 <a href="https://www.postgresql.org/">PGDG supported versions of PostgreSQL</a>,
 across multiple architectures, directly from the
 <a href="https://github.com/cloudnative-pg/postgres-containers/pkgs/container/postgresql"><code>postgres-containers</code> project's GitHub Container Registry</a>.</p>
-<p>All container images are signed and include SBOM and provenance attestations,
+<p>The <a href="https://github.com/cloudnative-pg/postgres-containers#minimal-images"><code>minimal</code></a>
+and <a href="https://github.com/cloudnative-pg/postgres-containers#standard-images"><code>standard</code></a>
+container images are signed and include SBOM and provenance attestations,
 provided separately for each architecture.</p>
 <p>Weekly jobs ensure that critical vulnerabilities (CVEs) in the entire stack are
 promptly addressed.</p>
@@ -424,14 +428,26 @@ <h2 id="main-features">Main features</h2>
 <li>Separate volumes for WAL files and tablespaces.</li>
 </ul>
 </li>
-<li>Backup and recovery options, including:<ul>
-<li>Integration with the <a href="https://github.com/cloudnative-pg/plugin-barman-cloud">Barman Cloud plugin</a>
-  for continuous online backup via WAL archiving to AWS S3, S3-compatible
-  services, Azure Blob Storage, and Google Cloud Storage, with support for
-  retention policies based on a configurable recovery window.</li>
-<li>Backups using volume snapshots (where supported by storage classes).</li>
-<li>Full and Point-In-Time recovery from volume snapshots or object stores (via Barman Cloud plugin).</li>
-<li>Backup from standby replicas to reduce primary workload impact.</li>
+<li>Backup and Recovery via CNPG-I Plugins:<ul>
+<li>Pluggable architecture for continuous physical backup and recovery.</li>
+<li>Hot and cold base backups.</li>
+<li>WAL archiving.</li>
+<li>Full and Point-In-Time Recovery (PITR).</li>
+<li>Scheduled and on-demand backups.</li>
+<li>Backup from standbys to reduce primary load.</li>
+</ul>
+</li>
+<li>Community-Supported Barman Cloud Plugin:<ul>
+<li>WAL archiving to object stores with support for full/PITR recovery.</li>
+<li>Retention policies based on configurable recovery windows.</li>
+<li>Supported as a CNPG-I plugin (recommended approach).</li>
+</ul>
+</li>
+<li>Native Backup Methods:<ul>
+<li>Continuous backup and full/PITR recovery via volume snapshots (if
+  supported by the storage class).</li>
+<li>Native integration with Barman Cloud for object store backups via
+  <code>.spec.backup.barmanObjectStore</code> (<em>deprecated since v1.26</em>).</li>
 </ul>
 </li>
 <li>Offline in-place major upgrades of PostgreSQL</li>
@@ -441,7 +457,7 @@ <h2 id="main-features">Main features</h2>
 </ul>
 </li>
 <li>High Availability physical replication slots, including synchronization of
-  user-defined replication slots.</li>
+  user-defined replication slots and logical decoding failover.</li>
 <li>Parallel WAL archiving and restore, ensuring high-performance data
   synchronization in high-write environments.</li>
 <li>TLS support, including:<ul>
@@ -540,5 +556,5 @@ <h2 id="about-this-guide">About this guide</h2>
 
 <!--
 MkDocs version : 1.6.1
-Build Date UTC : 2025-05-14 15:09:49.872285+00:00
+Build Date UTC : 2025-07-29 15:03:02.937770+00:00
 -->
diff --git a/assets/documentation/preview/installation_upgrade/index.html b/assets/documentation/preview/installation_upgrade/index.html
index 6f6459d47..4e7db3f34 100644
--- a/assets/documentation/preview/installation_upgrade/index.html
+++ b/assets/documentation/preview/installation_upgrade/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Installation and upgrades - CloudNativePG v1.26.0-rc3</title>
+    <title>Installation and upgrades - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -83,6 +83,14 @@
     </li>
     <li class="toctree-l3"><a class="reference internal" href="#compatibility-among-versions">Compatibility among versions</a>
     </li>
+    <li class="toctree-l3"><a class="reference internal" href="#upgrading-to-126-from-a-previous-minor-version">Upgrading to 1.26 from a previous minor version</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#deprecation-of-backup-metrics-and-fields-in-the-cluster-status">Deprecation of backup metrics and fields in the Cluster .status</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#declarative-hibernation-in-the-cnpg-plugin">Declarative Hibernation in the cnpg plugin</a>
+    </li>
+        </ul>
+    </li>
     <li class="toctree-l3"><a class="reference internal" href="#upgrading-to-125-from-a-previous-minor-version">Upgrading to 1.25 from a previous minor version</a>
     </li>
     <li class="toctree-l3"><a class="reference internal" href="#upgrading-to-124-from-a-previous-minor-version">Upgrading to 1.24 from a previous minor version</a>
@@ -148,18 +156,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -268,6 +268,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -312,10 +316,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -325,7 +335,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -348,10 +358,10 @@ <h2 id="installation-on-kubernetes">Installation on Kubernetes</h2>
 <h3 id="directly-using-the-operator-manifest">Directly using the operator manifest</h3>
 <p>The operator can be installed like any other resource in Kubernetes,
 through a YAML manifest applied via <code>kubectl</code>.</p>
-<p>You can install the <a href="https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/releases/cnpg-1.26.0-rc3.yaml">latest operator manifest</a>
+<p>You can install the <a href="https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/releases/cnpg-1.27.0-rc1.yaml">latest operator manifest</a>
 for this minor release as follows:</p>
 <pre><code class="language-sh">kubectl apply --server-side -f \
-  https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/releases/cnpg-1.26.0-rc3.yaml
+  https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/releases/cnpg-1.27.0-rc1.yaml
 </code></pre>
 <p>You can verify that with:</p>
 <pre><code class="language-sh">kubectl rollout status deployment \
@@ -396,7 +406,7 @@ <h3 id="testing-the-latest-development-snapshot">Testing the latest development
 <p>If you are instead looking for the latest snapshot of the operator for this
 specific minor release, you can just run:</p>
 <pre><code class="language-sh">curl -sSfL \
-  https://raw.githubusercontent.com/cloudnative-pg/artifacts/release-1.26/manifests/operator-manifest.yaml | \
+  https://raw.githubusercontent.com/cloudnative-pg/artifacts/release-1.27/manifests/operator-manifest.yaml | \
   kubectl apply --server-side -f -
 </code></pre>
 <div class="admonition important">
@@ -547,18 +557,96 @@ <h3 id="compatibility-among-versions">Compatibility among versions</h3>
 removed before installing the new one. This won't affect user data but
 only the operator itself.</p>
 <!--
-### Upgrading to 1.26.0 or 1.25.2
+### Upgrading to 1.28.0 or 1.27.x
+
+!!! Important
+    We strongly recommend that all CloudNativePG users upgrade to version
+    1.28.0, or at least to the latest stable version of your current minor release
+    (e.g., 1.27.x).
+
+### Upgrading to 1.27.0 or 1.26.2
 
 !!! Important
     We strongly recommend that all CloudNativePG users upgrade to version
-    1.26.0 or at least to the latest stable version of the minor release you are
-    currently using (namely 1.25.x).
+    1.27.0, or at least to the latest stable version of your current minor release
+    (e.g., 1.26.2).
+
+Version 1.27 introduces a change in the default behavior of the
+[liveness probe](instance_manager.md#liveness-probe): it now enforces the
+[shutdown of an isolated primary](instance_manager.md#primary-isolation)
+within the `livenessProbeTimeout` (30 seconds).
+
+If this behavior is not suitable for your environment, you can disable the
+*isolation check* in the liveness probe with the following configuration:
+
 
-- TOD: Mention hibernate command
-- TOD: Mention Barman Cloud
+<pre><code class="language-yaml">spec:
+  probes:
+    liveness:
+      isolationCheck:
+        enabled: false
+</code></pre>
 
 -->
 
+<h3 id="upgrading-to-126-from-a-previous-minor-version">Upgrading to 1.26 from a previous minor version</h3>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>We strongly recommend that all CloudNativePG users upgrade to version
+1.26.1, or at a minimum, to the latest stable version of your current minor
+release (for example, 1.25.x).</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>Due to changes in the startup probe for the manager component
+(<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/6623">#6623</a>),
+upgrading the operator will trigger a restart of your PostgreSQL clusters,
+even if in-place updates are enabled (<code>ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES=true</code>).
+Your applications will need to reconnect to PostgreSQL after the upgrade.</p>
+</div>
+<h4 id="deprecation-of-backup-metrics-and-fields-in-the-cluster-status">Deprecation of backup metrics and fields in the <code>Cluster</code> <code>.status</code></h4>
+<p>With the transition to a backup and recovery agnostic approach based on CNPG-I
+plugins in CloudNativePG, which began with version 1.26.0 for Barman Cloud, we
+are starting the deprecation period for the following fields in the <code>.status</code>
+section of the <code>Cluster</code> resource:</p>
+<ul>
+<li><code>firstRecoverabilityPoint</code></li>
+<li><code>firstRecoverabilityPointByMethod</code></li>
+<li><code>lastSuccessfulBackup</code></li>
+<li><code>lastSuccessfulBackupByMethod</code></li>
+<li><code>lastFailedBackup</code></li>
+</ul>
+<p>The following Prometheus metrics are also deprecated:</p>
+<ul>
+<li><code>cnpg_collector_first_recoverability_point</code></li>
+<li><code>cnpg_collector_last_failed_backup_timestamp</code></li>
+<li><code>cnpg_collector_last_available_backup_timestamp</code></li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>If you have migrated to a plugin-based backup and recovery solution such as
+Barman Cloud, these fields and metrics are no longer synchronized and will
+not be updated. Users still relying on the in-core support for Barman Cloud
+and volume snapshots can continue to use these fields for the time being.</p>
+</div>
+<p>Under the new plugin-based approach, multiple backup methods can operate
+simultaneously, each with its own timeline for backup and recovery. For
+example, some plugins may provide snapshots without WAL archiving, while others
+support continuous archiving.</p>
+<p>Because of this flexibility, maintaining centralized status fields in the
+<code>Cluster</code> resource could be misleading or confusing, as they would not
+accurately represent the state across all configured backup methods.
+For this reason, these fields are being deprecated.</p>
+<p>Instead, each plugin is responsible for exposing its own backup status
+information and providing metrics back to the instance manager for monitoring
+and operational awareness.</p>
+<h4 id="declarative-hibernation-in-the-cnpg-plugin">Declarative Hibernation in the <code>cnpg</code> plugin</h4>
+<p>In this release, the <code>cnpg</code> plugin for <code>kubectl</code> transitions from an imperative
+to a <a href="../declarative_hibernation/">declarative approach for cluster hibernation</a>.
+The <code>hibernate on</code> and <code>hibernate off</code> commands are now convenient shortcuts
+that apply declarative changes to enable or disable hibernation.
+The <code>hibernate status</code> command has been removed, as its purpose is now
+fulfilled by the standard <code>status</code> command.</p>
 <h3 id="upgrading-to-125-from-a-previous-minor-version">Upgrading to 1.25 from a previous minor version</h3>
 <div class="admonition warning">
 <p class="admonition-title">Warning</p>
diff --git a/assets/documentation/preview/instance_manager/index.html b/assets/documentation/preview/instance_manager/index.html
index 965becd99..3041fabb4 100644
--- a/assets/documentation/preview/instance_manager/index.html
+++ b/assets/documentation/preview/instance_manager/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Postgres instance manager - CloudNativePG v1.26.0-rc3</title>
+    <title>Postgres instance manager - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -91,7 +91,7 @@
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#liveness-probe">Liveness Probe</a>
         <ul>
-    <li class="toctree-l3"><a class="reference internal" href="#primary-isolation-alpha">Primary Isolation (alpha)</a>
+    <li class="toctree-l3"><a class="reference internal" href="#primary-isolation">Primary Isolation</a>
     </li>
         </ul>
     </li>
@@ -142,18 +142,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -262,6 +254,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -306,10 +302,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -319,7 +321,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -500,8 +502,8 @@ <h2 id="liveness-probe">Liveness Probe</h2>
       timeoutSeconds: 3
       failureThreshold: 10
 </code></pre>
-<h3 id="primary-isolation-alpha">Primary Isolation (alpha)</h3>
-<p>CloudNativePG 1.26 introduces an opt-in experimental behavior for the liveness
+<h3 id="primary-isolation">Primary Isolation</h3>
+<p>CloudNativePG 1.27 introduces an additional behavior for the liveness
 probe of a PostgreSQL primary, which will report a failure if <strong>both</strong> of the
 following conditions are met:</p>
 <ol>
@@ -509,32 +511,30 @@ <h3 id="primary-isolation-alpha">Primary Isolation (alpha)</h3>
 <li>The instance manager cannot reach <strong>any</strong> other instance via the instance manager’s REST API</li>
 </ol>
 <p>The effect of this behavior is to consider an isolated primary to be not alive and subsequently <strong>shut it down</strong> when the liveness probe fails.</p>
-<p>It is <strong>disabled by default</strong> and can be enabled by adding the following
-annotation to the <code>Cluster</code> resource:</p>
-<pre><code class="language-yaml">metadata:
-  annotations:
-    alpha.cnpg.io/livenessPinger: '{&quot;enabled&quot;: true}'
+<p>It is <strong>enabled by default</strong> and can be disabled by adding the following:</p>
+<pre><code class="language-yaml">spec:
+  probes:
+    liveness:
+      isolationCheck:
+        enabled: false
 </code></pre>
-<div class="admonition warning">
-<p class="admonition-title">Warning</p>
-<p>This feature is experimental and will be introduced in a future CloudNativePG
-release with a new API. If you decide to use it now, note that the API <strong>will
-change</strong>.</p>
-</div>
 <div class="admonition important">
 <p class="admonition-title">Important</p>
-<p>If you plan to enable this experimental feature, be aware that the default
-liveness probe settings—automatically derived from <code>livenessProbeTimeout</code>—might
+<p>Be aware that the default liveness probe settings—automatically derived from <code>livenessProbeTimeout</code>—might
 be aggressive (30 seconds). As such, we recommend explicitly setting the
 liveness probe configuration to suit your environment.</p>
 </div>
-<p>The annotation also accepts two optional network settings: <code>requestTimeout</code>
-and <code>connectionTimeout</code>, both defaulting to <code>500</code> (in milliseconds).
+<p>The spec also accepts two optional network settings: <code>requestTimeout</code>
+and <code>connectionTimeout</code>, both defaulting to <code>1000</code> (in milliseconds).
 In cloud environments, you may need to increase these values.
 For example:</p>
-<pre><code class="language-yaml">metadata:
-  annotations:
-    alpha.cnpg.io/livenessPinger: '{&quot;enabled&quot;: true,&quot;requestTimeout&quot;:1000,&quot;connectionTimeout&quot;:1000}'
+<pre><code class="language-yaml">spec:
+  probes:
+    liveness:
+      isolationCheck:
+        enabled: true
+        requestTimeout: &quot;2000&quot;
+        connectionTimeout: &quot;2000&quot;
 </code></pre>
 <h2 id="readiness-probe">Readiness Probe</h2>
 <p>The readiness probe starts once the startup probe has successfully completed.
diff --git a/assets/documentation/preview/kubectl-plugin/index.html b/assets/documentation/preview/kubectl-plugin/index.html
index 648358f1d..dd4f538b4 100644
--- a/assets/documentation/preview/kubectl-plugin/index.html
+++ b/assets/documentation/preview/kubectl-plugin/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Kubectl Plugin - CloudNativePG v1.26.0-rc3</title>
+    <title>Kubectl Plugin - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -334,6 +326,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -378,10 +374,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -391,7 +393,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -432,9 +434,9 @@ <h3 id="using-the-debian-or-redhat-packages">Using the Debian or RedHat packages
 As a result, you can follow standard practices and instructions to install
 them in your systems.</p>
 <h4 id="debian-packages">Debian packages</h4>
-<p>For example, let's install the 1.26.0-rc3 release of the plugin, for an Intel based
+<p>For example, let's install the 1.27.0-rc1 release of the plugin, for an Intel based
 64 bit server. First, we download the right <code>.deb</code> file.</p>
-<pre><code class="language-sh">wget https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.26.0-rc3/kubectl-cnpg_1.26.0-rc3_linux_x86_64.deb \
+<pre><code class="language-sh">wget https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.27.0-rc1/kubectl-cnpg_1.27.0-rc1_linux_x86_64.deb \
   --output-document kube-plugin.deb
 </code></pre>
 <p>Then, with superuser privileges, install from the local file using <code>dpkg</code>:</p>
@@ -442,13 +444,13 @@ <h4 id="debian-packages">Debian packages</h4>
 Selecting previously unselected package cnpg.
 (Reading database ... 6688 files and directories currently installed.)
 Preparing to unpack kube-plugin.deb ...
-Unpacking cnpg (1.26.0-rc3) ...
-Setting up cnpg (1.26.0-rc3) ...
+Unpacking cnpg (1.27.0-rc1) ...
+Setting up cnpg (1.27.0-rc1) ...
 </code></pre>
 <h4 id="rpm-packages">RPM packages</h4>
-<p>As in the example for <code>.rpm</code> packages, let's install the 1.26.0-rc3 release for an
+<p>As in the example for <code>.rpm</code> packages, let's install the 1.27.0-rc1 release for an
 Intel 64 bit machine. Note the <code>--output</code> flag to provide a file name.</p>
-<pre><code class="language-sh">curl -L https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.26.0-rc3/kubectl-cnpg_1.26.0-rc3_linux_x86_64.rpm \
+<pre><code class="language-sh">curl -L https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.27.0-rc1/kubectl-cnpg_1.27.0-rc1_linux_x86_64.rpm \
   --output kube-plugin.rpm
 </code></pre>
 <p>Then, with superuser privileges, install with <code>yum</code>, and you're ready to use:</p>
@@ -459,7 +461,7 @@ <h4 id="rpm-packages">RPM packages</h4>
  Package            Architecture         Version                   Repository                  Size
 ====================================================================================================
 Installing:
- cnpg               x86_64               1.26.0-rc3                  @commandline                20 M
+ cnpg               x86_64               1.27.0-rc1                  @commandline                20 M
 
 Transaction Summary
 ====================================================================================================
@@ -650,9 +652,9 @@ <h3 id="status">Status</h3>
 Instances status
 Name       Current LSN  Replication role  Status  QoS         Manager Version  Node
 ----       -----------  ----------------  ------  ---         ---------------  ----
-sandbox-1  0/604DE38    Primary           OK      BestEffort  1.26.0-rc3           k8s-eu-worker
-sandbox-2  0/604DE38    Standby (async)   OK      BestEffort  1.26.0-rc3           k8s-eu-worker2
-sandbox-3  0/604DE38    Standby (async)   OK      BestEffort  1.26.0-rc3           k8s-eu-worker
+sandbox-1  0/604DE38    Primary           OK      BestEffort  1.27.0-rc1           k8s-eu-worker
+sandbox-2  0/604DE38    Standby (async)   OK      BestEffort  1.27.0-rc1           k8s-eu-worker2
+sandbox-3  0/604DE38    Standby (async)   OK      BestEffort  1.27.0-rc1           k8s-eu-worker
 </code></pre>
 <p>If you require more detailed status information, use the <code>--verbose</code> option (or
 <code>-v</code> for short). The level of detail increases each time the flag is repeated:</p>
@@ -701,9 +703,9 @@ <h3 id="status">Status</h3>
 Instances status
 Name       Current LSN  Replication role  Status  QoS         Manager Version  Node
 ----       -----------  ----------------  ------  ---         ---------------  ----
-sandbox-1  0/6053720    Primary           OK      BestEffort  1.26.0-rc3           k8s-eu-worker
-sandbox-2  0/6053720    Standby (async)   OK      BestEffort  1.26.0-rc3           k8s-eu-worker2
-sandbox-3  0/6053720    Standby (async)   OK      BestEffort  1.26.0-rc3           k8s-eu-worker
+sandbox-1  0/6053720    Primary           OK      BestEffort  1.27.0-rc1           k8s-eu-worker
+sandbox-2  0/6053720    Standby (async)   OK      BestEffort  1.27.0-rc1           k8s-eu-worker2
+sandbox-3  0/6053720    Standby (async)   OK      BestEffort  1.27.0-rc1           k8s-eu-worker
 </code></pre>
 <p>With an additional <code>-v</code> (e.g. <code>kubectl cnpg status sandbox -v -v</code>), you can
 also view PostgreSQL configuration, HBA settings, and certificates.</p>
@@ -871,12 +873,12 @@ <h4 id="report-operator">report Operator</h4>
 and previous logs are available, it will show them both.</p>
 </div>
 <pre><code class="language-output">====== Beginning of Previous Log =====
-2023-03-28T12:56:41.251711811Z {&quot;level&quot;:&quot;info&quot;,&quot;ts&quot;:&quot;2023-03-28T12:56:41Z&quot;,&quot;logger&quot;:&quot;setup&quot;,&quot;msg&quot;:&quot;Starting CloudNativePG Operator&quot;,&quot;version&quot;:&quot;1.26.0-rc3&quot;,&quot;build&quot;:{&quot;Version&quot;:&quot;1.26.0-rc3+dev107&quot;,&quot;Commit&quot;:&quot;cc9bab17&quot;,&quot;Date&quot;:&quot;2023-03-28&quot;}}
+2023-03-28T12:56:41.251711811Z {&quot;level&quot;:&quot;info&quot;,&quot;ts&quot;:&quot;2023-03-28T12:56:41Z&quot;,&quot;logger&quot;:&quot;setup&quot;,&quot;msg&quot;:&quot;Starting CloudNativePG Operator&quot;,&quot;version&quot;:&quot;1.27.0-rc1&quot;,&quot;build&quot;:{&quot;Version&quot;:&quot;1.27.0-rc1+dev107&quot;,&quot;Commit&quot;:&quot;cc9bab17&quot;,&quot;Date&quot;:&quot;2023-03-28&quot;}}
 2023-03-28T12:56:41.251851909Z {&quot;level&quot;:&quot;info&quot;,&quot;ts&quot;:&quot;2023-03-28T12:56:41Z&quot;,&quot;logger&quot;:&quot;setup&quot;,&quot;msg&quot;:&quot;Starting pprof HTTP server&quot;,&quot;addr&quot;:&quot;0.0.0.0:6060&quot;}
   &lt;snipped …&gt;
 
 ====== End of Previous Log =====
-2023-03-28T12:57:09.854306024Z {&quot;level&quot;:&quot;info&quot;,&quot;ts&quot;:&quot;2023-03-28T12:57:09Z&quot;,&quot;logger&quot;:&quot;setup&quot;,&quot;msg&quot;:&quot;Starting CloudNativePG Operator&quot;,&quot;version&quot;:&quot;1.26.0-rc3&quot;,&quot;build&quot;:{&quot;Version&quot;:&quot;1.26.0-rc3+dev107&quot;,&quot;Commit&quot;:&quot;cc9bab17&quot;,&quot;Date&quot;:&quot;2023-03-28&quot;}}
+2023-03-28T12:57:09.854306024Z {&quot;level&quot;:&quot;info&quot;,&quot;ts&quot;:&quot;2023-03-28T12:57:09Z&quot;,&quot;logger&quot;:&quot;setup&quot;,&quot;msg&quot;:&quot;Starting CloudNativePG Operator&quot;,&quot;version&quot;:&quot;1.27.0-rc1&quot;,&quot;build&quot;:{&quot;Version&quot;:&quot;1.27.0-rc1+dev107&quot;,&quot;Commit&quot;:&quot;cc9bab17&quot;,&quot;Date&quot;:&quot;2023-03-28&quot;}}
 2023-03-28T12:57:09.854363943Z {&quot;level&quot;:&quot;info&quot;,&quot;ts&quot;:&quot;2023-03-28T12:57:09Z&quot;,&quot;logger&quot;:&quot;setup&quot;,&quot;msg&quot;:&quot;Starting pprof HTTP server&quot;,&quot;addr&quot;:&quot;0.0.0.0:6060&quot;}
 </code></pre>
 <p>If the operator hasn't been restarted, you'll still see the <code>====== Begin …</code>
diff --git a/assets/documentation/preview/kubernetes_upgrade/index.html b/assets/documentation/preview/kubernetes_upgrade/index.html
index 2c636c870..c39c39f50 100644
--- a/assets/documentation/preview/kubernetes_upgrade/index.html
+++ b/assets/documentation/preview/kubernetes_upgrade/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Kubernetes Upgrade and Maintenance - CloudNativePG v1.26.0-rc3</title>
+    <title>Kubernetes Upgrade and Maintenance - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -250,6 +242,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -294,10 +290,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -307,7 +309,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/labels_annotations/index.html b/assets/documentation/preview/labels_annotations/index.html
index 8ab4d98cf..00bc5c36c 100644
--- a/assets/documentation/preview/labels_annotations/index.html
+++ b/assets/documentation/preview/labels_annotations/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Labels and annotations - CloudNativePG v1.26.0-rc3</title>
+    <title>Labels and annotations - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -244,6 +236,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -288,10 +284,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -301,7 +303,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/logging/index.html b/assets/documentation/preview/logging/index.html
index 405ac3190..482a258bb 100644
--- a/assets/documentation/preview/logging/index.html
+++ b/assets/documentation/preview/logging/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Logging - CloudNativePG v1.26.0-rc3</title>
+    <title>Logging - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -244,6 +236,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -288,10 +284,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -301,7 +303,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/logical_replication/index.html b/assets/documentation/preview/logical_replication/index.html
index 8811539e4..88f820ef5 100644
--- a/assets/documentation/preview/logical_replication/index.html
+++ b/assets/documentation/preview/logical_replication/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Logical Replication - CloudNativePG v1.26.0-rc3</title>
+    <title>Logical Replication - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -123,7 +123,9 @@
     </li>
     <li class="toctree-l3"><a class="reference internal" href="#reconciliation-and-status_1">Reconciliation and Status</a>
     </li>
-    <li class="toctree-l3"><a class="reference internal" href="#removing-a-subscription">Removing a subscription</a>
+    <li class="toctree-l3"><a class="reference internal" href="#removing-a-subscription">Removing a Subscription</a>
+    </li>
+    <li class="toctree-l3"><a class="reference internal" href="#resilience-to-failovers">Resilience to Failovers</a>
     </li>
         </ul>
     </li>
@@ -150,18 +152,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -270,6 +264,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -314,10 +312,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -327,7 +331,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -355,6 +359,15 @@ <h1 id="logical-replication">Logical Replication</h1>
 connect to publications on a publisher node. Subscribers pull data changes from
 these publications and can re-publish them, enabling cascading replication and
 complex topologies.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>To protect your logical replication subscribers after a failover of the
+publisher cluster in CloudNativePG, ensure that replication slot
+synchronization for logical decoding is enabled. Without this, your logical
+replication clients may lose data and fail to continue seamlessly after a
+failover. For configuration details, see
+<a href="../replication/#logical-decoding-slot-synchronization">"Replication: Logical Decoding Slot Synchronization"</a>.</p>
+</div>
 <p>This flexible model is particularly useful for:</p>
 <ul>
 <li>Online data migrations</li>
@@ -564,7 +577,7 @@ <h3 id="reconciliation-and-status_1">Reconciliation and Status</h3>
 </ul>
 <p>If an error occurs during reconciliation, <code>status.applied</code> will be <code>false</code>, and
 an error message will be included in the <code>status.message</code> field.</p>
-<h3 id="removing-a-subscription">Removing a subscription</h3>
+<h3 id="removing-a-subscription">Removing a Subscription</h3>
 <p>The <code>subscriptionReclaimPolicy</code> field controls the behavior when deleting a
 <code>Subscription</code> object:</p>
 <ul>
@@ -588,6 +601,11 @@ <h3 id="removing-a-subscription">Removing a subscription</h3>
 </code></pre>
 <p>In this case, deleting the <code>Subscription</code> object also removes the <code>subscriber</code>
 subscription from the <code>app</code> database of the <code>king</code> cluster.</p>
+<h3 id="resilience-to-failovers">Resilience to Failovers</h3>
+<p>To ensure that your logical replication subscriptions remain operational after
+a failover of the publisher, configure CloudNativePG to synchronize logical
+decoding slots across the cluster. For detailed instructions, see
+<a href="../replication/#logical-decoding-slot-synchronization">Logical Decoding Slot Synchronization</a>.</p>
 <h2 id="limitations">Limitations</h2>
 <p>Logical replication in PostgreSQL has some inherent limitations, as outlined in
 the <a href="https://www.postgresql.org/docs/current/logical-replication-restrictions.html">official documentation</a>.
diff --git a/assets/documentation/preview/monitoring/index.html b/assets/documentation/preview/monitoring/index.html
index 336641961..15913eb5d 100644
--- a/assets/documentation/preview/monitoring/index.html
+++ b/assets/documentation/preview/monitoring/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Monitoring - CloudNativePG v1.26.0-rc3</title>
+    <title>Monitoring - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -278,6 +270,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -322,10 +318,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -335,7 +337,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -568,15 +570,15 @@ <h3 id="predefined-set-of-metrics">Predefined set of metrics</h3>
 # TYPE cnpg_collector_postgres_version gauge
 cnpg_collector_postgres_version{cluster=&quot;cluster-example&quot;,full=&quot;17.5&quot;} 17.5
 
-# HELP cnpg_collector_last_failed_backup_timestamp The last failed backup as a unix timestamp
+# HELP cnpg_collector_last_failed_backup_timestamp The last failed backup as a unix timestamp (Deprecated)
 # TYPE cnpg_collector_last_failed_backup_timestamp gauge
 cnpg_collector_last_failed_backup_timestamp 0
 
-# HELP cnpg_collector_last_available_backup_timestamp The last available backup as a unix timestamp
+# HELP cnpg_collector_last_available_backup_timestamp The last available backup as a unix timestamp (Deprecated)
 # TYPE cnpg_collector_last_available_backup_timestamp gauge
 cnpg_collector_last_available_backup_timestamp 1.63238406e+09
 
-# HELP cnpg_collector_first_recoverability_point The first point of recoverability for the cluster as a unix timestamp
+# HELP cnpg_collector_first_recoverability_point The first point of recoverability for the cluster as a unix timestamp (Deprecated)
 # TYPE cnpg_collector_first_recoverability_point gauge
 cnpg_collector_first_recoverability_point 1.63238406e+09
 
@@ -746,10 +748,17 @@ <h3 id="predefined-set-of-metrics">Predefined set of metrics</h3>
 <code>Major.Minor.Patch</code> can be found inside one of its label field
 named <code>full</code>.</p>
 </div>
-<div class="admonition note">
-<p class="admonition-title">Note</p>
-<p><code>cnpg_collector_first_recoverability_point</code> and <code>cnpg_collector_last_available_backup_timestamp</code>
-will be zero until your first backup to the object store. This is separate from the WAL archival.</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>The metrics <code>cnpg_collector_last_failed_backup_timestamp</code>,
+<code>cnpg_collector_last_available_backup_timestamp</code>, and
+<code>cnpg_collector_first_recoverability_point</code> have been deprecated starting
+from version 1.26. These metrics will continue to function with native backup
+solutions such as in-core Barman Cloud (deprecated) and volume snapshots. Note
+that for these cases, <code>cnpg_collector_first_recoverability_point</code> and
+<code>cnpg_collector_last_available_backup_timestamp</code> will remain zero until the
+first backup is completed to the object store. This is separate from WAL
+archiving.</p>
 </div>
 <h3 id="user-defined-metrics">User defined metrics</h3>
 <p>This feature is currently in <em>beta</em> state and the format is inspired by the
diff --git a/assets/documentation/preview/networking/index.html b/assets/documentation/preview/networking/index.html
index ffa8dc87a..b5709a932 100644
--- a/assets/documentation/preview/networking/index.html
+++ b/assets/documentation/preview/networking/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Networking - CloudNativePG v1.26.0-rc3</title>
+    <title>Networking - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -282,10 +278,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -295,7 +297,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/operator_capability_levels/index.html b/assets/documentation/preview/operator_capability_levels/index.html
index eb8b622f5..c35bc3756 100644
--- a/assets/documentation/preview/operator_capability_levels/index.html
+++ b/assets/documentation/preview/operator_capability_levels/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Operator capability levels - CloudNativePG v1.26.0-rc3</title>
+    <title>Operator capability levels - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul class="current">
                 <li class="toctree-l1 current"><a class="reference internal current" href="#">Operator capability levels</a>
     <ul class="current">
@@ -305,7 +301,7 @@
         <ul>
     <li class="toctree-l3"><a class="reference internal" href="#postgresql-wal-archive">PostgreSQL WAL archive</a>
     </li>
-    <li class="toctree-l3"><a class="reference internal" href="#postgresql-backups">PostgreSQL backups</a>
+    <li class="toctree-l3"><a class="reference internal" href="#postgresql-backups">PostgreSQL Backups</a>
     </li>
     <li class="toctree-l3"><a class="reference internal" href="#backups-from-a-standby">Backups from a standby</a>
     </li>
@@ -321,7 +317,7 @@
     </li>
     <li class="toctree-l3"><a class="reference internal" href="#tablespace-support">Tablespace support</a>
     </li>
-    <li class="toctree-l3"><a class="reference internal" href="#startup-liveness-and-readiness-probes">Startup, Liveness, and Readiness Probes</a>
+    <li class="toctree-l3"><a class="reference internal" href="#customizable-startup-liveness-and-readiness-probes">Customizable Startup, Liveness, and Readiness Probes</a>
     </li>
     <li class="toctree-l3"><a class="reference internal" href="#rolling-deployments">Rolling deployments</a>
     </li>
@@ -331,9 +327,7 @@
     </li>
     <li class="toctree-l3"><a class="reference internal" href="#fencing">Fencing</a>
     </li>
-    <li class="toctree-l3"><a class="reference internal" href="#hibernation-declarative">Hibernation (declarative)</a>
-    </li>
-    <li class="toctree-l3"><a class="reference internal" href="#hibernation-imperative">Hibernation (imperative)</a>
+    <li class="toctree-l3"><a class="reference internal" href="#hibernation">Hibernation</a>
     </li>
     <li class="toctree-l3"><a class="reference internal" href="#reuse-of-persistent-volumes-storage-in-pods">Reuse of persistent volumes storage in pods</a>
     </li>
@@ -412,10 +406,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -425,7 +425,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -542,11 +542,11 @@ <h3 id="replica-configuration">Replica configuration</h3>
 than <code>1</code>, the operator manages <code>instances -1</code> replicas, including high
 availability (HA) through automated failover and rolling updates through
 switchover operations.</p>
-<p>CloudNativePG manages replication slots for all the replicas
-in the HA cluster. The implementation is inspired by the previously
-proposed patch for PostgreSQL, called
-<a href="https://wiki.postgresql.org/wiki/Failover_slots">failover slots</a>, and
-also supports user defined physical replication slots on the primary.</p>
+<p>CloudNativePG manages replication slots for all replicas in the
+high-availability cluster. It also supports user-defined physical replication
+slots on the primary and enables logical decoding failover—natively for
+PostgreSQL 17 and later using <code>sync_replication_slots</code>, and through the
+<code>pg_failover_slots</code> extension for earlier versions.</p>
 <h3 id="service-configuration">Service Configuration</h3>
 <p>By default, CloudNativePG creates three Kubernetes <a href="../service_management/">services</a>
 for applications to access the cluster via the network:</p>
@@ -751,34 +751,33 @@ <h3 id="postgresql-wal-archive">PostgreSQL WAL archive</h3>
 in the archive. In addition, <code>Instance Manager</code> checks
 the correctness of the archive destination by performing the <code>barman-cloud-check-wal-archive</code>
 command before beginning to ship the first set of WAL files.</p>
-<h3 id="postgresql-backups">PostgreSQL backups</h3>
-<p>The operator was designed to provide application-level backups using
-PostgreSQL’s native continuous hot backup technology based on
-physical base backups and continuous WAL archiving.
-Base backups can be saved on:</p>
+<h3 id="postgresql-backups">PostgreSQL Backups</h3>
+<p>CloudNativePG provides a pluggable interface (CNPG-I) for managing
+application-level backups using PostgreSQL’s native physical backup
+mechanisms—namely base backups and continuous WAL archiving. This
+design enables flexibility and extensibility while ensuring consistency and
+performance.</p>
+<p>The CloudNativePG Community officially supports the <a href="https://cloudnative-pg.io/plugin-barman-cloud/">Barman Cloud Plugin</a>,
+which enables continuous physical backups to object stores, along with full and
+Point-In-Time Recovery (PITR) capabilities.</p>
+<p>In addition to CNPG-I plugins, CloudNativePG also natively supports backups
+using Kubernetes volume snapshots, when supported by the underlying storage
+class and CSI driver.</p>
+<p>You can initiate base backups in two ways:</p>
 <ul>
-<li>Kubernetes volume snapshots</li>
-<li>Object stores (AWS S3 and S3-compatible, Azure Blob Storage, Google Cloud
-  Storage, and gateways like MinIO)</li>
+<li>On-demand, using the <code>Backup</code> custom resource</li>
+<li>Scheduled, using the <code>ScheduledBackup</code> custom resource, with a cron-like
+  schedule format</li>
 </ul>
-<p>Base backups are defined at the cluster level, declaratively,
-through the <code>backup</code> parameter in the cluster definition.</p>
-<p>You can define base backups in two ways:</p>
+<p>Volume snapshots leverage the Kubernetes API and are particularly effective for
+very large databases (VLDBs) due to their speed and storage efficiency.</p>
+<p>Both volume snapshots and CNPG-I-based backups support:</p>
 <ul>
-<li>On-demand, through the <code>Backup</code> custom resource definition</li>
-<li>Scheduled, through the <code>ScheduledBackup</code>custom resource definition, using a cron-like syntax</li>
+<li>Hot backups: Taken while PostgreSQL is running, ensuring minimal
+  disruption.</li>
+<li>Cold backups: Performed by temporarily stopping PostgreSQL to ensure a
+  fully consistent snapshot, when required.</li>
 </ul>
-<p>Volume snapshots rely directly on the Kubernetes API, which delegates this
-capability to the underlying storage classes and CSI drivers. Volume snapshot
-backups are suitable for very large database (VLDB) contexts.</p>
-<p>Object store backups rely on <code>barman-cloud-backup</code> for the job (distributed as
-part of the application container image) to relay backups in the same endpoint,
-alongside WAL files.</p>
-<p>Both <code>barman-cloud-wal-restore</code> and <code>barman-cloud-backup</code> are distributed in
-the application container image under GNU GPL 3 terms.</p>
-<p>Object store backups and volume snapshot backups are taken while PostgreSQL is
-up and running (hot backups). Volume snapshots also support taking consistent
-database snapshots with cold backups.</p>
 <h3 id="backups-from-a-standby">Backups from a standby</h3>
 <p>The operator supports offloading base backups onto a standby without impacting
 the <a href="../before_you_start/#rpo">RPO</a> of the database. This allows resources to
@@ -786,8 +785,8 @@ <h3 id="backups-from-a-standby">Backups from a standby</h3>
 operations.</p>
 <h3 id="full-restore-from-a-backup">Full restore from a backup</h3>
 <p>The operator enables you to bootstrap a new cluster (with its settings)
-starting from an existing and accessible backup, either on a volume snapshot
-or in an object store.</p>
+starting from an existing and accessible backup, either on a volume snapshot,
+or in an object store, or via a plugin.</p>
 <p>Once the bootstrap process is completed, the operator initiates the instance in
 recovery mode. It replays all available WAL files from the specified archive,
 exiting recovery and starting as a primary.
@@ -855,20 +854,16 @@ <h3 id="tablespace-support">Tablespace support</h3>
 scalability of PostgreSQL databases, ensuring a streamlined and optimized
 experience for managing large scale data storage in cloud-native environments.
 Support for temporary tablespaces is also included.</p>
-<h3 id="startup-liveness-and-readiness-probes">Startup, Liveness, and Readiness Probes</h3>
+<h3 id="customizable-startup-liveness-and-readiness-probes">Customizable Startup, Liveness, and Readiness Probes</h3>
 <p>CloudNativePG configures startup, liveness, and readiness probes for PostgreSQL
 containers, which are managed by the Kubernetes kubelet. These probes interact
-with the <code>/healthz</code> and <code>/readyz</code> endpoints exposed by the instance manager's
-web server to monitor the Pod's health and readiness.</p>
-<p>The startup and liveness probes use the <code>pg_isready</code> utility. A Pod is
-considered healthy if <code>pg_isready</code> returns an exit code of 0 (indicating the
-server is accepting connections) or 1 (indicating the server is rejecting
-connections, such as during startup).</p>
-<p>The readiness probe executes a simple SQL query (<code>;</code>) to verify that the
-PostgreSQL server is ready to accept client connections.</p>
+with the <code>/startupz</code>, <code>/healthz</code>, and <code>/readyz</code> endpoints exposed by
+the instance manager's web server to monitor the Pod's health and readiness.</p>
 <p>All probes are configured with default settings but can be fully customized to
 meet specific needs, allowing for fine-tuning to align with your environment
 and workloads.</p>
+<p>For detailed configuration options and advanced usage,
+refer to the <a href="../instance_manager/">Postgres instance manager</a> documentation.</p>
 <h3 id="rolling-deployments">Rolling deployments</h3>
 <p>The operator supports rolling deployments to minimize the downtime. If a
 PostgreSQL cluster is exposed publicly, the service load-balances the
@@ -903,18 +898,11 @@ <h3 id="fencing">Fencing</h3>
 that, until the fence is lifted, data on the pod isn't modified by PostgreSQL
 and that you can investigate file system for debugging and troubleshooting
 purposes.</p>
-<h3 id="hibernation-declarative">Hibernation (declarative)</h3>
+<h3 id="hibernation">Hibernation</h3>
 <p>CloudNativePG supports <a href="../declarative_hibernation/">hibernation of a running PostgreSQL cluster</a>
 in a declarative manner, through the <code>cnpg.io/hibernation</code> annotation.
 Hibernation enables saving CPU power by removing the database pods while
 keeping the database PVCs. This feature simulates scaling to 0 instances.</p>
-<h3 id="hibernation-imperative">Hibernation (imperative)</h3>
-<p>CloudNativePG supports <a href="../kubectl-plugin/#cluster-hibernation">hibernation of a running PostgreSQL cluster</a>
-by way of the <code>cnpg</code> plugin. Hibernation shuts down all Postgres instances in the
-high-availability cluster and keeps a static copy of the PVC group of the
-primary. The copy contains <code>PGDATA</code> and WALs. The plugin enables you to exit the
-hibernation phase by resuming the primary and then recreating all the
-replicas, if they exist.</p>
 <h3 id="reuse-of-persistent-volumes-storage-in-pods">Reuse of persistent volumes storage in pods</h3>
 <p>When the operator needs to create a pod that was deleted by the user or
 was evicted by a Kubernetes maintenance operation, it reuses the
@@ -1011,7 +999,7 @@ <h3 id="automated-recreation-of-a-standby">Automated recreation of a standby</h3
             </div>
           </div><footer>
     <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
-        <a href="../container_images/" class="btn btn-neutral float-left" title="Container Image Requirements"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../imagevolume_extensions/" class="btn btn-neutral float-left" title="Image Volume Extensions"><span class="icon icon-circle-arrow-left"></span> Previous</a>
         <a href="../controller/" class="btn btn-neutral float-right" title="Custom Pod Controller">Next <span class="icon icon-circle-arrow-right"></span></a>
     </div>
 
@@ -1036,7 +1024,7 @@ <h3 id="automated-recreation-of-a-standby">Automated recreation of a standby</h3
   <span class="rst-current-version" data-toggle="rst-current-version">
     
     
-      <span><a href="../container_images/" style="color: #fcfcfc">&laquo; Previous</a></span>
+      <span><a href="../imagevolume_extensions/" style="color: #fcfcfc">&laquo; Previous</a></span>
     
     
       <span><a href="../controller/" style="color: #fcfcfc">Next &raquo;</a></span>
diff --git a/assets/documentation/preview/operator_conf/index.html b/assets/documentation/preview/operator_conf/index.html
index cc2365c65..646fef33b 100644
--- a/assets/documentation/preview/operator_conf/index.html
+++ b/assets/documentation/preview/operator_conf/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Operator configuration - CloudNativePG v1.26.0-rc3</title>
+    <title>Operator configuration - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -244,6 +236,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -288,10 +284,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -301,7 +303,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/postgis/index.html b/assets/documentation/preview/postgis/index.html
index a2b259c25..0823053e7 100644
--- a/assets/documentation/preview/postgis/index.html
+++ b/assets/documentation/preview/postgis/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>PostGIS - CloudNativePG v1.26.0-rc3</title>
+    <title>PostGIS - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -238,6 +230,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -282,10 +278,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -295,7 +297,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/postgres_upgrades/index.html b/assets/documentation/preview/postgres_upgrades/index.html
index 90efa8c86..6a0a2f9fc 100644
--- a/assets/documentation/preview/postgres_upgrades/index.html
+++ b/assets/documentation/preview/postgres_upgrades/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>PostgreSQL Upgrades - CloudNativePG v1.26.0-rc3</title>
+    <title>PostgreSQL Upgrades - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -254,6 +246,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -298,10 +294,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -311,7 +313,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -375,6 +377,22 @@ <h2 id="offline-in-place-major-upgrades">Offline In-Place Major Upgrades</h2>
 <p>CloudNativePG performs an <strong>offline in-place major upgrade</strong> when a new operand
 container image with a higher PostgreSQL major version is declaratively
 requested for a cluster.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>Major upgrades are only supported between images based on the same
+operating system distribution. For example, if your previous version uses a
+<code>bullseye</code> image, you cannot upgrade to a <code>bookworm</code> image.</p>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>There is a bug in PostgreSQL 17.0 through 17.5 that prevents successful upgrades
+if the <code>max_slot_wal_keep_size</code> parameter is set to any value other than <code>-1</code>.
+The upgrade process will fail with an error related to replication slot configuration.
+This issue has been <a href="https://github.com/postgres/postgres/commit/f36e5774">fixed in PostgreSQL 17.6 and 18beta2 or later versions</a>.
+If you are using PostgreSQL 17.0 through 17.5, ensure that you upgrade to at least
+PostgreSQL 17.6 before attempting a major upgrade, or make sure to temporarily set
+the <code>max_slot_wal_keep_size</code> parameter to <code>-1</code> in your cluster configuration.</p>
+</div>
 <p>You can trigger the upgrade in one of two ways:</p>
 <ul>
 <li>By updating the major version in the image tag via the <code>.spec.imageName</code>
diff --git a/assets/documentation/preview/postgresql_conf/index.html b/assets/documentation/preview/postgresql_conf/index.html
index 2d87a05ca..12ac9101f 100644
--- a/assets/documentation/preview/postgresql_conf/index.html
+++ b/assets/documentation/preview/postgresql_conf/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>PostgreSQL Configuration - CloudNativePG v1.26.0-rc3</title>
+    <title>PostgreSQL Configuration - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -137,6 +129,8 @@
     <ul class="current">
     <li class="toctree-l2"><a class="reference internal" href="#the-postgresql-section">The postgresql section</a>
         <ul>
+    <li class="toctree-l3"><a class="reference internal" href="#write-ahead-log-level">Write-Ahead Log Level</a>
+    </li>
     <li class="toctree-l3"><a class="reference internal" href="#replication-settings">Replication Settings</a>
     </li>
     <li class="toctree-l3"><a class="reference internal" href="#log-control-settings">Log control settings</a>
@@ -278,6 +272,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -322,10 +320,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -335,7 +339,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -467,6 +471,26 @@ <h2 id="the-postgresql-section">The <code>postgresql</code> section</h2>
 <p>Since the fixed parameters are added at the end, they can't be overridden by the
 user via the YAML configuration. Those parameters are required for correct WAL
 archiving and replication.</p>
+<h3 id="write-ahead-log-level">Write-Ahead Log Level</h3>
+<p>The <a href="https://www.postgresql.org/docs/current/runtime-config-wal.html"><code>wal_level</code></a>
+parameter in PostgreSQL determines the amount of information written to the
+Write-Ahead Log (WAL). It accepts the following values:</p>
+<ul>
+<li><code>minimal</code>: Writes only the information required for crash recovery.</li>
+<li><code>replica</code>: Adds sufficient information to support WAL archiving and streaming
+  replication, including the ability to run read-only queries on standby
+  instances.</li>
+<li><code>logical</code>: Includes all information from <code>replica</code>, plus additional information
+  required for logical decoding and replication.</li>
+</ul>
+<p>By default, upstream PostgreSQL sets <code>wal_level</code> to <code>replica</code>. CloudNativePG,
+instead, sets <code>wal_level</code> to <code>logical</code> by default to enable logical replication
+out of the box. This makes it easier to support use cases such as migrations
+from external PostgreSQL servers.</p>
+<p>If your cluster does not require logical replication, it is recommended to set
+<code>wal_level</code> to <code>replica</code> to reduce WAL volume and overhead.</p>
+<p>Finally, CloudNativePG allows <code>wal_level</code> to be set to <code>minimal</code> only for
+single-instance clusters with WAL archiving disabled.</p>
 <h3 id="replication-settings">Replication Settings</h3>
 <p>The <code>primary_conninfo</code>, <code>restore_command</code>, and <code>recovery_target_timeline</code>
 parameters are automatically managed by the operator based on the instance's
@@ -643,9 +667,9 @@ <h2 id="the-pg_hba-section">The <code>pg_hba</code> section</h2>
 <p>Fixed rules:</p>
 <pre><code class="language-text">local all all peer
 
-hostssl postgres streaming_replica all cert
-hostssl replication streaming_replica all cert
-hostssl all cnpg_pooler_pgbouncer all cert
+hostssl postgres streaming_replica all cert map=cnpg_streaming_replica
+hostssl replication streaming_replica all cert map=cnpg_streaming_replica
+hostssl all cnpg_pooler_pgbouncer all cert map=cnpg_pooler_pgbouncer
 </code></pre>
 <p>Default rules:</p>
 <pre><code class="language-text">host all all all &lt;default-authentication-method&gt;
@@ -659,8 +683,9 @@ <h2 id="the-pg_hba-section">The <code>pg_hba</code> section</h2>
 <p>The resulting <code>pg_hba.conf</code> will look like this:</p>
 <pre><code class="language-text">local all all peer
 
-hostssl postgres streaming_replica all cert
-hostssl replication streaming_replica all cert
+hostssl postgres streaming_replica all cert map=cnpg_streaming_replica
+hostssl replication streaming_replica all cert map=cnpg_streaming_replica
+hostssl all cnpg_pooler_pgbouncer all cert map=cnpg_pooler_pgbouncer
 
 &lt;user defined rules&gt;
 &lt;user defined LDAP&gt;
diff --git a/assets/documentation/preview/preview_version/index.html b/assets/documentation/preview/preview_version/index.html
index 9060fcb1d..a771b50f8 100644
--- a/assets/documentation/preview/preview_version/index.html
+++ b/assets/documentation/preview/preview_version/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Preview Versions - CloudNativePG v1.26.0-rc3</title>
+    <title>Preview Versions - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -286,10 +282,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -299,7 +301,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -348,10 +350,10 @@ <h2 id="current-preview-version">Current Preview Version</h2>
 There are currently no preview versions available.
 -->
 
-<p>The current preview version is <strong>1.26.0-rc3</strong>.</p>
+<p>The current preview version is <strong>1.27.0-rc1</strong>.</p>
 <p>For more information on the current preview version and how to test, please view the links below:</p>
 <ul>
-<li><a href="https://cloudnative-pg.io/releases/cloudnative-pg-1-26.0-rc3-released/">Announcement</a></li>
+<li><a href="https://cloudnative-pg.io/releases/cloudnative-pg-1-27.0-rc1-released/">Announcement</a></li>
 <li><a href="https://cloudnative-pg.io/documentation/preview/">Documentation</a></li>
 </ul>
               
diff --git a/assets/documentation/preview/quickstart/index.html b/assets/documentation/preview/quickstart/index.html
index 4909cbfae..f2ead3355 100644
--- a/assets/documentation/preview/quickstart/index.html
+++ b/assets/documentation/preview/quickstart/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Quickstart - CloudNativePG v1.26.0-rc3</title>
+    <title>Quickstart - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -136,18 +136,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -256,6 +248,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -300,10 +296,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -313,7 +315,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/recovery/index.html b/assets/documentation/preview/recovery/index.html
index 2c26bcbc3..c414a2526 100644
--- a/assets/documentation/preview/recovery/index.html
+++ b/assets/documentation/preview/recovery/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Recovery - CloudNativePG v1.26.0-rc3</title>
+    <title>Recovery - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,24 +112,16 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul class="current">
                 <li class="toctree-l1 current"><a class="reference internal current" href="#">Recovery</a>
     <ul class="current">
-    <li class="toctree-l2"><a class="reference internal" href="#recovery-from-an-object-store">Recovery from an object store</a>
+    <li class="toctree-l2"><a class="reference internal" href="#recovery-from-an-object-store-with-the-barman-cloud-plugin">Recovery from an Object Store with the Barman Cloud Plugin</a>
     </li>
-    <li class="toctree-l2"><a class="reference internal" href="#recovery-from-volumesnapshot-objects">Recovery from VolumeSnapshot objects</a>
+    <li class="toctree-l2"><a class="reference internal" href="#recovery-from-volumesnapshot-objects">Recovery from VolumeSnapshot Objects</a>
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#recovery-from-a-backup-object">Recovery from a Backup object</a>
     </li>
@@ -139,7 +131,7 @@
         <ul>
     <li class="toctree-l3"><a class="reference internal" href="#pitr-from-an-object-store">PITR from an object store</a>
     </li>
-    <li class="toctree-l3"><a class="reference internal" href="#pitr-from-volumesnapshot-objects">PITR from VolumeSnapshot objects</a>
+    <li class="toctree-l3"><a class="reference internal" href="#point-in-time-recovery-pitr-from-volumesnapshot-objects">Point-in-Time Recovery (PITR) from VolumeSnapshot Objects</a>
     </li>
     <li class="toctree-l3"><a class="reference internal" href="#recovery-targets">Recovery targets</a>
     </li>
@@ -149,7 +141,7 @@
     </li>
     <li class="toctree-l2"><a class="reference internal" href="#how-recovery-works-under-the-hood">How recovery works under the hood</a>
     </li>
-    <li class="toctree-l2"><a class="reference internal" href="#restoring-into-a-cluster-with-a-backup-section">Restoring into a cluster with a backup section</a>
+    <li class="toctree-l2"><a class="reference internal" href="#restoring-into-a-cluster-with-a-backup-section">Restoring into a Cluster with a Backup Section</a>
     </li>
     </ul>
                 </li>
@@ -258,6 +250,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -302,10 +298,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -315,7 +317,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -334,69 +336,82 @@
                 <h1 id="recovery">Recovery</h1>
 <!-- SPDX-License-Identifier: CC-BY-4.0 -->
 
-<div class="admonition warning">
-<p class="admonition-title">Warning</p>
-<p>With the deprecation of native Barman Cloud support in CloudNativePG in
-favor of the Barman Cloud Plugin, this page—and the backup and recovery
-documentation—may undergo changes before the official release of version
-1.26.0.</p>
+<p>In PostgreSQL, <strong>recovery</strong> refers to the process of starting an instance from
+an existing physical backup. PostgreSQL's recovery system is robust and
+feature-rich, supporting <strong>Point-In-Time Recovery (PITR)</strong>—the ability to
+restore a cluster to any specific moment, from the earliest available backup to
+the latest archived WAL file.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>A valid WAL archive is required to perform PITR.</p>
 </div>
-<p>In PostgreSQL terminology, recovery is the process of starting a PostgreSQL
-instance using an existing backup. The PostgreSQL recovery mechanism
-is very solid and rich. It also supports point-in-time recovery (PITR), which allows
-you to restore a given cluster up to any point in time, from the first available
-backup in your catalog to the last archived WAL. (The WAL
-archive is mandatory in this case.)</p>
-<p>In CloudNativePG, you can't perform recovery in place on an existing
-cluster. Recovery is instead a way to bootstrap a new Postgres cluster
-starting from an available physical backup.</p>
+<p>In CloudNativePG, recovery is <strong>not performed in-place</strong> on an existing
+cluster. Instead, it is used to <strong>bootstrap a new cluster</strong> from a physical
+backup.</p>
 <div class="admonition note">
 <p class="admonition-title">Note</p>
-<p>For details on the <code>bootstrap</code> stanza, see
+<p>For more details on configuring the <code>bootstrap</code> stanza, refer to
 <a href="../bootstrap/">Bootstrap</a>.</p>
 </div>
-<p>The <code>recovery</code> bootstrap mode lets you create a cluster from an existing
-physical base backup. You then reapply the WAL files containing the REDO log
-from the archive.</p>
-<p>WAL files are pulled from the defined <em>recovery object store</em>.</p>
-<p>Base backups can be taken either on object stores or using volume snapshots.</p>
-<div class="admonition info">
-<p class="admonition-title">Info</p>
-<p>Starting with version 1.25, CloudNativePG includes experimental support for
-backup and recovery using plugins, such as the
-<a href="https://github.com/cloudnative-pg/plugin-barman-cloud">Barman Cloud plugin</a>.</p>
-</div>
-<p>You can achieve recovery from a <em>recovery object store</em> in two ways:</p>
+<p>The <code>recovery</code> bootstrap mode allows you to initialize a cluster from a
+physical base backup and replay the associated WAL files to bring the system to
+a consistent and optionally point-in-time state.</p>
+<p>CloudNativePG supports recovery via:</p>
 <ul>
-<li>We recommend using a recovery object store, that is, a backup of another cluster
-  created by Barman Cloud and defined by way of the <code>barmanObjectStore</code> option
-  in the <code>externalClusters</code> section.</li>
-<li>Alternatively, you can use an existing <code>Backup</code> object in the same namespace.</li>
+<li>A <strong>pluggable backup and recovery interface (CNPG-I)</strong>, enabling integration
+  with external tools such as the <a href="https://cloudnative-pg.io/plugin-barman-cloud/">Barman Cloud Plugin</a>.</li>
+<li><strong>Native recovery from volume snapshots</strong>, where supported by the underlying
+  Kubernetes storage infrastructure.</li>
+<li><strong>Native recovery from object stores via Barman Cloud</strong>, which is
+  <strong>deprecated</strong> as of version 1.26 in favor of the plugin-based approach.</li>
 </ul>
-<p>Both recovery methods enable either full recovery (up to the last
-available WAL) or up to a <a href="#point-in-time-recovery-pitr">point in time</a>.
-When performing a full recovery, you can also start the cluster
-in replica mode (see <a href="../replica_cluster/">replica clusters</a> for reference).</p>
+<p>With the deprecation of native Barman Cloud support in version 1.26, this
+section now focuses on two supported recovery methods: using the <strong>Barman Cloud
+Plugin</strong> for recovery from object stores, and the <strong>native interface</strong> for
+recovery from volume snapshots.</p>
 <div class="admonition important">
 <p class="admonition-title">Important</p>
-<p>If using replica mode, make sure that the PostgreSQL configuration
-(<code>.spec.postgresql.parameters</code>) of the recovered cluster is compatible with
-the original one from a physical replication standpoint.</p>
+<p>For legacy documentation, see
+<a href="../appendixes/backup_barmanobjectstore/#recovery-from-an-object-store">Appendix B – Recovery from an Object Store</a>.</p>
 </div>
-<p>For recovery using <em>volume snapshots</em>:</p>
-<ul>
-<li>Use a consistent set of <code>VolumeSnapshot</code> objects that all belong to the
-  same backup and are identified by the same <code>cnpg.io/cluster</code> and
-  <code>cnpg.io/backupName</code> labels. Then, recover through the <code>volumeSnapshots</code>
-  option in the <code>.spec.bootstrap.recovery</code> stanza, as described in
-  <a href="#recovery-from-volumesnapshot-objects">Recovery from <code>VolumeSnapshot</code> objects</a>.</li>
-</ul>
-<h2 id="recovery-from-an-object-store">Recovery from an object store</h2>
-<p>You can recover from a backup created by Barman Cloud and stored on a supported
-object store. After you define the external cluster, including all the required
-configuration in the <code>barmanObjectStore</code> section, you need to reference it in
-the <code>.spec.recovery.source</code> option.</p>
-<p>This example defines a recovery object store in a blob container in Azure:</p>
+<h2 id="recovery-from-an-object-store-with-the-barman-cloud-plugin">Recovery from an Object Store with the Barman Cloud Plugin</h2>
+<p>This section outlines how to recover a PostgreSQL cluster from an object store
+using the recommended Barman Cloud Plugin.</p>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The object store must contain backup data produced by a CloudNativePG
+<code>Cluster</code>—either using the <strong>deprecated native Barman Cloud integration</strong> or
+the <strong>Barman Cloud Plugin</strong>.</p>
+</div>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>For full details, refer to the
+<a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/concepts/#recovery-of-a-postgres-cluster">“Recovery of a Postgres Cluster” section in the Barman Cloud Plugin documentation</a>.</p>
+</div>
+<p>Begin by defining the object store that holds both your base backups and WAL
+files. The Barman Cloud Plugin uses a custom <code>ObjectStore</code> resource for this
+purpose. The following example shows how to configure one for Azure Blob
+Storage:</p>
+<pre><code class="language-yaml">apiVersion: barmancloud.cnpg.io/v1
+kind: ObjectStore
+metadata:
+  name: cluster-example-backup
+spec:
+  configuration:
+    destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/
+    azureCredentials:
+      storageAccount:
+        name: recovery-object-store-secret
+        key: storage_account_name
+      storageKey:
+        name: recovery-object-store-secret
+        key: storage_account_key
+    wal:
+      maxParallel: 8
+</code></pre>
+<p>Next, configure the <code>Cluster</code> resource to use the <code>ObjectStore</code> you defined. In
+the <code>bootstrap</code> section, specify the recovery source, and define an
+<code>externalCluster</code> entry that references the plugin:</p>
 <pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
@@ -409,55 +424,36 @@ <h2 id="recovery-from-an-object-store">Recovery from an object store</h2>
 
   bootstrap:
     recovery:
-      source: clusterBackup
+      source: origin
 
   externalClusters:
-    - name: clusterBackup
-      barmanObjectStore:
-        destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/
-        azureCredentials:
-          storageAccount:
-            name: recovery-object-store-secret
-            key: storage_account_name
-          storageKey:
-            name: recovery-object-store-secret
-            key: storage_account_key
-        wal:
-          maxParallel: 8
+    - name: origin
+      plugin:
+        name: barman-cloud.cloudnative-pg.io
+        parameters:
+          barmanObjectName: cluster-example-backup
+          serverName: cluster-example
 </code></pre>
-<p>The previous example assumes that the application database and its owning user
-are named <code>app</code> by default. If the PostgreSQL cluster being restored uses
-different names, you must specify these names before exiting the recovery phase,
-as documented in <a href="#configure-the-application-database">"Configure the application database"</a>.</p>
-<div class="admonition important">
-<p class="admonition-title">Important</p>
-<p>By default, the <code>recovery</code> method strictly uses the <code>name</code> of the
-cluster in the <code>externalClusters</code> section as the name of the main folder
-of the backup data within the object store. This name is normally reserved
-for the name of the server. You can specify a different folder name
-using the <code>barmanObjectStore.serverName</code> property.</p>
-</div>
-<div class="admonition note">
-<p class="admonition-title">Note</p>
-<p>This example takes advantage of the parallel WAL restore feature,
-dedicating up to 8 jobs to concurrently fetch the required WAL files from the
-archive. This feature can appreciably reduce the recovery time. Make sure that
-you plan ahead for this scenario and correctly tune the value of this parameter
-for your environment. It will make a difference when you need it, and you will.</p>
-</div>
-<h2 id="recovery-from-volumesnapshot-objects">Recovery from <code>VolumeSnapshot</code> objects</h2>
+<h2 id="recovery-from-volumesnapshot-objects">Recovery from <code>VolumeSnapshot</code> Objects</h2>
 <div class="admonition warning">
 <p class="admonition-title">Warning</p>
-<p>When creating replicas after recovering the primary instance from
-the volume snapshot, the operator might end up using <code>pg_basebackup</code>
-to synchronize them. This behavior results in a slower process, depending
-on the size of the database. This limitation will be lifted in the future when
-support for online backups and PVC cloning are introduced.</p>
+<p>When creating replicas after recovering a primary instance from a
+<code>VolumeSnapshot</code>, the operator may fall back to using <code>pg_basebackup</code> to
+synchronize them. This process can be significantly slower—especially for large
+databases—because it involves a full base backup. This limitation will be
+addressed in the future with support for online backups and PVC cloning in
+the scale-up process.</p>
 </div>
-<p>CloudNativePG can create a new cluster from a <code>VolumeSnapshot</code> of a PVC of an
-existing <code>Cluster</code> that's been taken using the declarative API for <a href="../backup_volumesnapshot/">volume
-snapshot backups</a>. You must specify the name of the
-snapshot, as in the following example:</p>
+<p>CloudNativePG allows you to create a new cluster from a <code>VolumeSnapshot</code> of a
+<code>PersistentVolumeClaim</code> (PVC) that belongs to an existing <code>Cluster</code>.
+These snapshots are created using the declarative API for
+<a href="../appendixes/backup_volumesnapshot/">volume snapshot backups</a>.</p>
+<p>To complete the recovery process, the new cluster must also reference an
+external cluster that provides access to the WAL archive needed to reapply
+changes and finalize the recovery.</p>
+<p>The following example shows a cluster being recovered using both a
+<code>VolumeSnapshot</code> for the base backup and a WAL archive accessed through the
+Barman Cloud Plugin:</p>
 <pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
@@ -467,11 +463,20 @@ <h2 id="recovery-from-volumesnapshot-objects">Recovery from <code>VolumeSnapshot
 
   bootstrap:
     recovery:
+      source: origin
       volumeSnapshots:
         storage:
           name: &lt;snapshot name&gt;
           kind: VolumeSnapshot
           apiGroup: snapshot.storage.k8s.io
+
+  externalClusters:
+    - name: origin
+      plugin:
+        name: barman-cloud.cloudnative-pg.io
+        parameters:
+          barmanObjectName: cluster-example-backup
+          serverName: cluster-example
 </code></pre>
 <p>In case the backed-up cluster was using a separate PVC to store the WAL files,
 the recovery must include that too:</p>
@@ -572,9 +577,9 @@ <h2 id="point-in-time-recovery-pitr">Point in time recovery (PITR)</h2>
 <p>The operator generates the configuration parameters required for this
 feature to work if you specify a recovery target.</p>
 <h3 id="pitr-from-an-object-store">PITR from an object store</h3>
-<p>This example uses a recovery object store in Azure that contains both
-the base backups and the WAL archive. The recovery target is based on a
-requested timestamp.</p>
+<p>This example uses the same recovery object store in Azure defined earlier for
+the Barman Cloud plugin, containing both the base backups and the WAL archive.
+The recovery target is based on a requested timestamp.</p>
 <pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
@@ -588,24 +593,18 @@ <h3 id="pitr-from-an-object-store">PITR from an object store</h3>
   bootstrap:
     recovery:
       # Recovery object store containing WAL archive and base backups
-      source: clusterBackup
+      source: origin
       recoveryTarget:
         # Time base target for the recovery
         targetTime: &quot;2023-08-11 11:14:21.00000+02&quot;
 
   externalClusters:
-    - name: clusterBackup
-      barmanObjectStore:
-        destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/
-        azureCredentials:
-          storageAccount:
-            name: recovery-object-store-secret
-            key: storage_account_name
-          storageKey:
-            name: recovery-object-store-secret
-            key: storage_account_key
-        wal:
-          maxParallel: 8
+    - name: origin
+      plugin:
+        name: barman-cloud.cloudnative-pg.io
+        parameters:
+          barmanObjectName: cluster-example-backup
+          serverName: cluster-example
 </code></pre>
 <p>In this example, you had to specify only the <code>targetTime</code> in the form of a
 timestamp. You didn't have to specify the base backup from which to start the
@@ -627,16 +626,19 @@ <h3 id="pitr-from-an-object-store">PITR from an object store</h3>
 <li>Otherwise, the operator selects the last available backup, in chronological
   order.</li>
 </ul>
-<h3 id="pitr-from-volumesnapshot-objects">PITR from <code>VolumeSnapshot</code> objects</h3>
-<p>The example that follows uses:</p>
+<h3 id="point-in-time-recovery-pitr-from-volumesnapshot-objects">Point-in-Time Recovery (PITR) from <code>VolumeSnapshot</code> Objects</h3>
+<p>The following example demonstrates how to perform a <strong>Point-in-Time Recovery (PITR)</strong> using:</p>
 <ul>
-<li>A Kubernetes volume snapshot for the <code>PGDATA</code> containing the base backup from
-  which to start the recovery process. This snapshot is identified in the
-  <code>recovery.volumeSnapshots</code> section and called <code>test-snapshot-1</code>.</li>
-<li>A recovery object store in MinIO containing the WAL archive. The object store is identified by
-  the <code>recovery.source</code> option in the form of an external cluster definition.</li>
+<li>A Kubernetes <code>VolumeSnapshot</code> of the <code>PGDATA</code> directory, which provides the
+  base backup. This snapshot is specified in the <code>recovery.volumeSnapshots</code>
+  section and is named <code>test-snapshot-1</code>.</li>
+<li>A recovery object store (in this case, MinIO) containing the archived WAL
+  files. The object store is defined via a Barman Cloud Plugin <code>ObjectStore</code>
+  resource (not shown here), and referenced using the <code>recovery.source</code> field,
+  which points to an external cluster configuration.</li>
 </ul>
-<p>The recovery target is based on a requested timestamp.</p>
+<p>The cluster will be restored to a specific point in time using the
+<code>recoveryTarget.targetTime</code> option.</p>
 <pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
@@ -645,7 +647,7 @@ <h3 id="pitr-from-volumesnapshot-objects">PITR from <code>VolumeSnapshot</code>
   # ...
   bootstrap:
     recovery:
-      source: cluster-example-with-backup
+      source: origin
       volumeSnapshots:
         storage:
           name: test-snapshot-1
@@ -654,18 +656,16 @@ <h3 id="pitr-from-volumesnapshot-objects">PITR from <code>VolumeSnapshot</code>
       recoveryTarget:
         targetTime: &quot;2023-07-06T08:00:39&quot;
   externalClusters:
-    - name: cluster-example-with-backup
-      barmanObjectStore:
-        destinationPath: s3://backups/
-        endpointURL: http://minio:9000
-        s3Credentials:
-          accessKeyId:
-            name: minio
-            key: ACCESS_KEY_ID
-          secretAccessKey:
-            name: minio
-            key: ACCESS_SECRET_KEY
+    - name: origin
+      plugin:
+        name: barman-cloud.cloudnative-pg.io
+        parameters:
+          barmanObjectName: minio-backup
+          serverName: cluster-example
 </code></pre>
+<p>This setup enables CloudNativePG to restore the base data from a volume
+snapshot and apply WAL segments from the object store to reach the desired
+recovery target.</p>
 <div class="admonition note">
 <p class="admonition-title">Note</p>
 <p>If the backed-up cluster had <code>walStorage</code> enabled, you also must specify
@@ -677,6 +677,13 @@ <h3 id="pitr-from-volumesnapshot-objects">PITR from <code>VolumeSnapshot</code>
 <p>It's your responsibility to ensure that the end time of the base backup in
 the volume snapshot is before the recovery target timestamp.</p>
 </div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>If you added or removed a <a href="../tablespaces/">tablespace</a> in your cluster
+since the last base backup, replaying the WAL will fail. You need a base
+backup between the time of the tablespace change and the recovery target
+timestamp.</p>
+</div>
 <h3 id="recovery-targets">Recovery targets</h3>
 <p>Here are the recovery target criteria you can use:</p>
 <dl>
@@ -684,6 +691,14 @@ <h3 id="recovery-targets">Recovery targets</h3>
 <dd>Time stamp up to which recovery proceeds, expressed in
    <a href="https://datatracker.ietf.org/doc/html/rfc3339">RFC 3339</a> format.
    (The precise stopping point is also influenced by the <code>exclusive</code> option.)</dd>
+</dl>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>PostgreSQL recovery will stop when it encounters the first transaction that
+occurs after the specified time. If no such transaction exists after the
+target time, the recovery process will fail.</p>
+</div>
+<dl>
 <dt>targetXID</dt>
 <dd>Transaction ID up to which recovery proceeds.
    (The precise stopping point is also influenced by the <code>exclusive</code> option.)
@@ -715,7 +730,7 @@ <h3 id="recovery-targets">Recovery targets</h3>
 [...]
   bootstrap:
     recovery:
-      source: clusterBackup
+      source: origin
       recoveryTarget:
         backupID: 20220616T142236
         targetName: 'restore_point_1'
@@ -744,25 +759,19 @@ <h3 id="recovery-targets">Recovery targets</h3>
 
   bootstrap:
     recovery:
-      source: clusterBackup
+      source: origin
       recoveryTarget:
         backupID: 20220616T142236
         targetName: &quot;maintenance-activity&quot;
         exclusive: true
 
   externalClusters:
-    - name: clusterBackup
-      barmanObjectStore:
-        destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/
-        azureCredentials:
-          storageAccount:
-            name: recovery-object-store-secret
-            key: storage_account_name
-          storageKey:
-            name: recovery-object-store-secret
-            key: storage_account_key
-        wal:
-          maxParallel: 8
+    - name: origin
+      plugin:
+        name: barman-cloud.cloudnative-pg.io
+        parameters:
+          barmanObjectName: cluster-example-backup
+          serverName: cluster-example
 </code></pre>
 <h2 id="configure-the-application-database">Configure the application database</h2>
 <p>For the recovered cluster, you can configure the application database name and
@@ -837,9 +846,9 @@ <h2 id="how-recovery-works-under-the-hood">How recovery works under the hood</h2
 Postgres instance in recovery mode. In this phase, PostgreSQL is up, though not
 able to accept connections, and the pod is healthy according to the
 liveness probe. By way of the <code>restore_command</code>, PostgreSQL starts fetching WAL
-files from the archive. (You can speed up this phase by setting the
-<code>maxParallel</code> option and enabling the parallel WAL restore capability.)</p>
-<p>This phase terminates when PostgreSQL reaches the target (either the end of the
+files from the archive. You can speed up this phase by setting the
+<code>maxParallel</code> option and enabling the parallel WAL restore capability.</p>
+<p>This phase terminates when PostgreSQL reaches the target, either the end of the
 WAL or the required target in case of PITR. You can optionally specify a
 <code>recoveryTarget</code> to perform a PITR. If left unspecified, the recovery continues
 up to the latest available WAL on the default target timeline (<code>latest</code>).</p>
@@ -848,61 +857,36 @@ <h2 id="how-recovery-works-under-the-hood">How recovery works under the hood</h2
 remaining instances join the cluster as replicas.</p>
 <p>The process is transparent for the user and is managed by the instance manager
 running in the pods.</p>
-<h2 id="restoring-into-a-cluster-with-a-backup-section">Restoring into a cluster with a backup section</h2>
-<!-- TODO: do we need this section? -->
-
-<p>A manifest for a cluster restore might include a <code>backup</code> section. This means
-that,after recovery, the new cluster starts archiving WALs and taking backups
-if configured to do so.</p>
-<p>For example, this section is part of a manifest for a cluster bootstrapping
-from the cluster <code>cluster-example-backup</code>. In the storage bucket, it creates a
-folder named <code>recoveredCluster</code>, where the base backups and WALs of the
-recovered cluster are stored.</p>
-<pre><code class="language-yaml">  backup:
-    barmanObjectStore:
-      destinationPath: s3://backups/
-      endpointURL: http://minio:9000
-      serverName: &quot;recoveredCluster&quot;
-      s3Credentials:
-        accessKeyId:
-          name: minio
-          key: ACCESS_KEY_ID
-        secretAccessKey:
-          name: minio
-          key: ACCESS_SECRET_KEY
-    retentionPolicy: &quot;30d&quot;
-
-  externalClusters:
-  - name: cluster-example-backup
-    barmanObjectStore:
-      destinationPath: s3://backups/
-      endpointURL: http://minio:9000
-      s3Credentials:
-</code></pre>
-<p>Don't reuse the same <code>barmanObjectStore</code> configuration for different clusters.
-There might be cases where the existing information in the storage buckets
-could be overwritten by the new cluster.</p>
+<h2 id="restoring-into-a-cluster-with-a-backup-section">Restoring into a Cluster with a Backup Section</h2>
+<p>When restoring a cluster, the manifest may include a <code>plugins</code> section with
+Barman Cloud plugin pointing to a <em>backup</em> object store resource. This enables
+the newly created cluster to begin archiving WAL files and taking backups
+immediately after recovery—provided backup policies are configured.</p>
+<p>Avoid reusing the same <code>ObjectStore</code> configuration for both <em>backup</em> and
+<em>recovery</em> in the same cluster. If you must, ensure that each cluster uses a
+unique <code>serverName</code> to prevent accidental overwrites of backup or WAL archive
+data.</p>
 <div class="admonition warning">
 <p class="admonition-title">Warning</p>
-<p>The operator includes a safety check to ensure a cluster doesn't overwrite
-a storage bucket that contained information. A cluster that would overwrite
-existing storage remains in the state <code>Setting up primary</code> with pods in an
-error state. The pod logs show: <code>ERROR: WAL archive check failed for server
-recoveredCluster: Expected empty archive</code>.</p>
+<p>CloudNativePG includes a safety check to prevent a cluster from overwriting
+existing data in a shared storage bucket. If a conflict is detected, the
+cluster remains in the <code>Setting up primary</code> state, and the associated pods will
+fail with an error. The pod logs will display:
+<code>ERROR: WAL archive check failed for server recoveredCluster: Expected empty archive</code>.</p>
 </div>
 <div class="admonition important">
 <p class="admonition-title">Important</p>
-<p>If you set the <code>cnpg.io/skipEmptyWalArchiveCheck</code> annotation to <code>enabled</code>
-in the recovered cluster, you can skip the safety check. We don't recommend
-skipping the check because, for the general use case, the check works fine.
-Skip this check only if you're familiar with the PostgreSQL recovery system, as
-severe data loss can occur.</p>
+<p>You can bypass this safety check by setting the
+<code>cnpg.io/skipEmptyWalArchiveCheck</code> annotation to <code>enabled</code> on the recovered
+cluster. However, this is strongly discouraged unless you are highly
+familiar with PostgreSQL's recovery process. Skipping the check incorrectly can
+lead to severe data loss. Use with caution and only in expert scenarios.</p>
 </div>
               
             </div>
           </div><footer>
     <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
-        <a href="../backup_volumesnapshot/" class="btn btn-neutral float-left" title="Backup on volume snapshots"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../wal_archiving/" class="btn btn-neutral float-left" title="WAL archiving"><span class="icon icon-circle-arrow-left"></span> Previous</a>
         <a href="../service_management/" class="btn btn-neutral float-right" title="Service Management">Next <span class="icon icon-circle-arrow-right"></span></a>
     </div>
 
@@ -927,7 +911,7 @@ <h2 id="restoring-into-a-cluster-with-a-backup-section">Restoring into a cluster
   <span class="rst-current-version" data-toggle="rst-current-version">
     
     
-      <span><a href="../backup_volumesnapshot/" style="color: #fcfcfc">&laquo; Previous</a></span>
+      <span><a href="../wal_archiving/" style="color: #fcfcfc">&laquo; Previous</a></span>
     
     
       <span><a href="../service_management/" style="color: #fcfcfc">Next &raquo;</a></span>
diff --git a/assets/documentation/preview/release_notes/edb-cloud-native-postgresql/index.html b/assets/documentation/preview/release_notes/edb-cloud-native-postgresql/index.html
index f43adaeda..9f230189f 100644
--- a/assets/documentation/preview/release_notes/edb-cloud-native-postgresql/index.html
+++ b/assets/documentation/preview/release_notes/edb-cloud-native-postgresql/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../img/favicon.ico" />
-    <title>Release notes for 1.14.0 and earlier - CloudNativePG v1.26.0-rc3</title>
+    <title>Release notes for 1.14.0 and earlier - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../css/theme.css" />
     <link rel="stylesheet" href="../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,7 +291,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/release_notes/index.html b/assets/documentation/preview/release_notes/index.html
index 6795fd1f6..c4e6c56d6 100644
--- a/assets/documentation/preview/release_notes/index.html
+++ b/assets/documentation/preview/release_notes/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Release notes - CloudNativePG v1.26.0-rc3</title>
+    <title>Release notes - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -278,10 +274,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -291,7 +293,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -311,16 +313,17 @@ <h1 id="release-notes">Release notes</h1>
 <!-- SPDX-License-Identifier: CC-BY-4.0 -->
 
 <p>History of user-visible changes for CloudNativePG, classified for each minor release.</p>
-<!-- - [CloudNativePG 1.27 - Release Candidate](release_notes/v1.27.md) -->
+<!-- - [CloudNativePG 1.28 - Release Candidate](release_notes/v1.28.md) -->
 <ul>
-<li><a href="v1.26/">CloudNativePG 1.26 - Release Candidate</a></li>
+<li><a href="v1.27/">CloudNativePG 1.27 - Release Candidate</a></li>
+<li><a href="v1.26/">CloudNativePG 1.26</a></li>
 <li><a href="v1.25/">CloudNativePG 1.25</a></li>
-<li><a href="v1.24/">CloudNativePG 1.24</a></li>
 </ul>
 <p>For information on the community support policy for CloudNativePG, please
 refer to <a href="../supported_releases/">"Supported releases"</a>.</p>
 <p>Older releases:</p>
 <ul>
+<li><a href="old/v1.24/">CloudNativePG 1.24</a></li>
 <li><a href="old/v1.23/">CloudNativePG 1.23</a></li>
 <li><a href="old/v1.22/">CloudNativePG 1.22</a></li>
 <li><a href="old/v1.21/">CloudNativePG 1.21</a></li>
diff --git a/assets/documentation/preview/release_notes/old/v1.15/index.html b/assets/documentation/preview/release_notes/old/v1.15/index.html
index 068617110..ec5bbab38 100644
--- a/assets/documentation/preview/release_notes/old/v1.15/index.html
+++ b/assets/documentation/preview/release_notes/old/v1.15/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../../img/favicon.ico" />
-    <title>Release notes for CloudNativePG 1.15 - CloudNativePG v1.26.0-rc3</title>
+    <title>Release notes for CloudNativePG 1.15 - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../../css/theme.css" />
     <link rel="stylesheet" href="../../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,7 +291,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/release_notes/old/v1.16/index.html b/assets/documentation/preview/release_notes/old/v1.16/index.html
index efca1991e..f675b00d8 100644
--- a/assets/documentation/preview/release_notes/old/v1.16/index.html
+++ b/assets/documentation/preview/release_notes/old/v1.16/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../../img/favicon.ico" />
-    <title>Release notes for CloudNativePG 1.16 - CloudNativePG v1.26.0-rc3</title>
+    <title>Release notes for CloudNativePG 1.16 - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../../css/theme.css" />
     <link rel="stylesheet" href="../../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,7 +291,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/release_notes/old/v1.17/index.html b/assets/documentation/preview/release_notes/old/v1.17/index.html
index eb1f18db9..0a30376c6 100644
--- a/assets/documentation/preview/release_notes/old/v1.17/index.html
+++ b/assets/documentation/preview/release_notes/old/v1.17/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../../img/favicon.ico" />
-    <title>Release notes for CloudNativePG 1.17 - CloudNativePG v1.26.0-rc3</title>
+    <title>Release notes for CloudNativePG 1.17 - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../../css/theme.css" />
     <link rel="stylesheet" href="../../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,7 +291,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/release_notes/old/v1.18/index.html b/assets/documentation/preview/release_notes/old/v1.18/index.html
index 1a5a6dbfe..f63bf825d 100644
--- a/assets/documentation/preview/release_notes/old/v1.18/index.html
+++ b/assets/documentation/preview/release_notes/old/v1.18/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../../img/favicon.ico" />
-    <title>Release notes for CloudNativePG 1.18 - CloudNativePG v1.26.0-rc3</title>
+    <title>Release notes for CloudNativePG 1.18 - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../../css/theme.css" />
     <link rel="stylesheet" href="../../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,7 +291,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/release_notes/old/v1.19/index.html b/assets/documentation/preview/release_notes/old/v1.19/index.html
index c5714a51f..252593b16 100644
--- a/assets/documentation/preview/release_notes/old/v1.19/index.html
+++ b/assets/documentation/preview/release_notes/old/v1.19/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../../img/favicon.ico" />
-    <title>Release notes for CloudNativePG 1.19 - CloudNativePG v1.26.0-rc3</title>
+    <title>Release notes for CloudNativePG 1.19 - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../../css/theme.css" />
     <link rel="stylesheet" href="../../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,7 +291,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/release_notes/old/v1.20/index.html b/assets/documentation/preview/release_notes/old/v1.20/index.html
index 2b25e0847..19e7ab50f 100644
--- a/assets/documentation/preview/release_notes/old/v1.20/index.html
+++ b/assets/documentation/preview/release_notes/old/v1.20/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../../img/favicon.ico" />
-    <title>Release notes for CloudNativePG 1.20 - CloudNativePG v1.26.0-rc3</title>
+    <title>Release notes for CloudNativePG 1.20 - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../../css/theme.css" />
     <link rel="stylesheet" href="../../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,7 +291,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/release_notes/old/v1.21/index.html b/assets/documentation/preview/release_notes/old/v1.21/index.html
index 639756558..04b4d1e7a 100644
--- a/assets/documentation/preview/release_notes/old/v1.21/index.html
+++ b/assets/documentation/preview/release_notes/old/v1.21/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../../img/favicon.ico" />
-    <title>Release notes for CloudNativePG 1.21 - CloudNativePG v1.26.0-rc3</title>
+    <title>Release notes for CloudNativePG 1.21 - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../../css/theme.css" />
     <link rel="stylesheet" href="../../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,7 +291,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/release_notes/old/v1.22/index.html b/assets/documentation/preview/release_notes/old/v1.22/index.html
index eab841b69..9122981fb 100644
--- a/assets/documentation/preview/release_notes/old/v1.22/index.html
+++ b/assets/documentation/preview/release_notes/old/v1.22/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../../img/favicon.ico" />
-    <title>Release notes for CloudNativePG 1.22 - CloudNativePG v1.26.0-rc3</title>
+    <title>Release notes for CloudNativePG 1.22 - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../../css/theme.css" />
     <link rel="stylesheet" href="../../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,7 +291,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/release_notes/old/v1.23/index.html b/assets/documentation/preview/release_notes/old/v1.23/index.html
index a0fd768e4..57d239dfc 100644
--- a/assets/documentation/preview/release_notes/old/v1.23/index.html
+++ b/assets/documentation/preview/release_notes/old/v1.23/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../../img/favicon.ico" />
-    <title>Release notes for CloudNativePG 1.23 - CloudNativePG v1.26.0-rc3</title>
+    <title>Release notes for CloudNativePG 1.23 - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../../css/theme.css" />
     <link rel="stylesheet" href="../../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,7 +291,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/release_notes/old/v1.24/index.html b/assets/documentation/preview/release_notes/old/v1.24/index.html
new file mode 100644
index 000000000..dd09bf024
--- /dev/null
+++ b/assets/documentation/preview/release_notes/old/v1.24/index.html
@@ -0,0 +1,792 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.24 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../../css/theme.css" />
+    <link rel="stylesheet" href="../../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.24";
+        var mkdocs_page_input_path = "release_notes/old/v1.24.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.24</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-124">Release notes for CloudNativePG 1.24</h1>
+<!-- SPDX-License-Identifier: CC-BY-4.0 -->
+
+<p>History of user-visible changes in the 1.24 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.24">commits</a>
+on the release branch in GitHub.</p>
+<h2 id="version-1244">Version 1.24.4</h2>
+<p><strong>Release date:</strong> May 23, 2025</p>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>This is the final release in the 1.24.x series.
+Users are strongly encouraged to upgrade to a newer minor version, as 1.24
+is no longer supported.</p>
+</div>
+<h3 id="important-changes">Important Changes</h3>
+<ul>
+<li><strong>CloudNativePG is now officially a CNCF project</strong>: CloudNativePG has been
+  accepted into the Cloud Native Computing Foundation (CNCF), marking a
+  significant milestone in its evolution. As part of this transition, the project
+  is now governed under <strong>CloudNativePG, a Series of LF Projects, LLC</strong>, ensuring
+  long-term sustainability and community-driven innovation. (#7203)</li>
+</ul>
+<h3 id="enhancements">Enhancements</h3>
+<ul>
+<li>
+<p>Added the <code>KUBERNETES_CLUSTER_DOMAIN</code> configuration option to the operator,
+  allowing users to specify the domain suffix for fully qualified domain names
+  (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to
+  <code>cluster.local</code>. (#6989) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Implemented the <code>cnpg.io/validation</code> annotation, enabling users to disable
+  the validation webhook on CloudNativePG-managed resources. Use with caution,
+  as this allows unrestricted changes. (#7196)</p>
+</li>
+<li>
+<p>Added support for collecting <code>pg_stat_wal</code> metrics in PostgreSQL 18. (#7005)</p>
+</li>
+<li>
+<p>Added support for LZ4, XZ, and Zstandard compression methods when archiving
+  WAL files via Barman Cloud (<em>deprecated</em>). (#7151)</p>
+</li>
+</ul>
+<h3 id="security">Security</h3>
+<ul>
+<li>Set <code>imagePullPolicy</code> to <code>Always</code> for the operator deployment to ensure that
+  images are always pulled from the registry, reducing the risk of using
+  outdated or potentially unsafe local images. (#7250)</li>
+</ul>
+<h3 id="fixes">Fixes</h3>
+<ul>
+<li>
+<p>Fixed native replication slot synchronization and logical replication
+  failover for PostgreSQL 17 by appending the <code>dbname</code> parameter to
+  <code>primary_conninfo</code> in replica configurations (#7298).</p>
+</li>
+<li>
+<p>Improved backup efficiency by introducing a fail-fast mechanism in WAL
+  archiving, allowing quicker detection of unexpected primary demotion and
+  avoiding unnecessary retries (#7483).</p>
+</li>
+<li>
+<p>Fixed an off-by-one error in parallel WAL archiving that could cause one
+  extra worker process to be spawned beyond the requested number (#7389).</p>
+</li>
+<li>
+<p>Resolved a race condition that caused the operator to perform two switchovers
+  when updating the PostgreSQL configuration. (#6991)</p>
+</li>
+<li>
+<p>Corrected the <code>PodMonitor</code> configuration by adjusting the <code>matchLabels</code> scope
+  for the targeted pooler and cluster pods. Previously, the <code>matchLabels</code> were
+  too broad, inadvertently inheriting labels from the cluster and leading to data
+  collection from unintended targets. (#7063)</p>
+</li>
+<li>
+<p>Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in
+  the <code>shared_buffers</code> configuration. This will become an error in future
+  releases. Users should update their configurations to include explicit units
+  (e.g., <code>512MB</code> instead of <code>512</code>). (#7160)</p>
+</li>
+<li>
+<p>CloudNativePG Interface (CNPG-I):</p>
+</li>
+<li>
+<p>Implemented automatic reloading of TLS certificates for plugins when they
+    change. (#7029) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Ensured the operator properly closes the plugin connection when
+    performing a backup using the plugin. (#7095, #7096) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Improved performance and resilience of CNPG-I by removing timeouts for local
+    plugin operations, avoiding failures during longer backup or WAL archiving
+    executions (#7496). <!-- no 1.22 --></p>
+</li>
+<li>
+<p><code>cnpg</code> plugin:</p>
+</li>
+<li>
+<p>Ensured that the primary Pod is recreated during an imperative restart when
+    <code>primaryUpdateMethod</code> is set to <code>restart</code>, aligning its definition with the
+    replicas. (#7122)</p>
+</li>
+</ul>
+<h3 id="changes">Changes</h3>
+<ul>
+<li>
+<p>Updated the default PostgreSQL version to 17.5 for new cluster
+  definitions. (#7556)</p>
+</li>
+<li>
+<p>Updated the default PgBouncer version to <strong>1.24.1</strong> for new <code>Pooler</code>
+  deployments (#7399).</p>
+</li>
+</ul>
+<h2 id="version-1243">Version 1.24.3</h2>
+<p><strong>Release Date:</strong> February 28, 2025</p>
+<h3 id="enhancements_1">Enhancements</h3>
+<ul>
+<li>Introduced a startup probe for the operator to enhance reliability and
+  prevent premature liveness probe failures during initialization. (#7008)</li>
+<li>Added support for using the <code>-r</code> service with the Pooler. (#6868)</li>
+<li>Introduced an optional <code>--ttl</code> flag for the <code>pgbench</code> plugin, enabling
+  automatic deletion of completed jobs after a user-defined duration. (#6701)</li>
+<li>Marked known error messages from the Azure CSI Driver for volume snapshots as
+  retryable, improving resilience. (#6906)</li>
+<li>Updated the default PostgreSQL version to 17.4 for new cluster
+  definitions. (#6960)</li>
+</ul>
+<h3 id="security_1">Security</h3>
+<ul>
+<li>The operator image build process has been enhanced to strengthen
+  security and transparency. Images are now signed with <code>cosign</code>, and
+  OCI attestations are generated, incorporating the Software Bill of
+  Materials (SBOM) and provenance data. Additionally, OCI annotations
+  have been added to improve traceability and ensure the integrity of
+  the images.</li>
+</ul>
+<h3 id="bug-fixes">Bug Fixes</h3>
+<ul>
+<li>Fixed inconsistent behavior in default probe knob values when <code>.spec.probes</code>
+  is defined, ensuring users can override all settings, including
+  <code>failureThreshold</code>. If unspecified in the startup probe, <code>failureThreshold</code> is
+  now correctly derived from <code>.spec.startupDelay / periodSeconds</code> (default: <code>10</code>,
+  now overridable). The same logic applies to liveness probes via
+  <code>.spec.livenessProbeTimeout</code>. (#6656)</li>
+<li>Managed service ports now take precedence over default operator-defined
+  ports. (#6474)</li>
+<li>Fixed an issue where WAL metrics were unavailable after an instance restart
+  until a configuration change was applied. (#6816)</li>
+<li>Fixed an issue in monolithic database import where role import was skipped if
+  no roles were specified. (#6646)</li>
+<li>Added support for new metrics introduced in PgBouncer 1.24. (#6630)</li>
+<li>Improved handling of replication-sensitive parameter reductions by ensuring
+  timely reconciliation after primary server restarts. (#6440)</li>
+<li>Introduced a new <code>isWALArchiver</code> flag in the CNPG-I plugin configuration,
+  allowing users to designate a plugin as a WAL archiver. This enables seamless
+  migration from in-tree Barman Cloud support to the plugin while maintaining WAL
+  archive consistency. (#6593)</li>
+<li>Ensured <code>override.conf</code> is consistently included in <code>postgresql.conf</code> during
+  replica cluster bootstrapping, preventing replication failures due to missing
+  configuration settings. (#6808)</li>
+<li>Ensured <code>override.conf</code> is correctly initialized before invoking <code>pg_rewind</code>
+  to prevent failures during primary role changes. (#6670)</li>
+<li>Enhanced webhook responses to return both warnings and errors when
+  applicable, improving diagnostic accuracy. (#6579)</li>
+<li>Ensured the operator version is correctly reconciled. (#6496)</li>
+<li>Improved PostgreSQL version detection by using a more precise check of the
+  data directory. (#6659)</li>
+<li>Volume Snapshot Backups:<ul>
+<li>Fixed an issue where unused backup connections were not properly cleaned
+  up. (#6882)</li>
+<li>Ensured the instance manager closes stale PostgreSQL connections left by
+  failed volume snapshot backups. (#6879)</li>
+<li>Prevented the operator from starting a new volume snapshot backup while
+  another is already in progress. (#6890)</li>
+</ul>
+</li>
+<li><code>cnpg</code> plugin:<ul>
+<li>Restored functionality of the <code>promote</code> plugin command. (#6476)</li>
+<li>Enhanced <code>kubectl cnpg report --logs &lt;cluster&gt;</code> to collect logs from all
+  containers, including sidecars. (#6636)</li>
+<li>Ensured <code>pgbench</code> jobs can run when a <code>Cluster</code> uses an <code>ImageCatalog</code>.
+  (#6868)</li>
+</ul>
+</li>
+</ul>
+<h3 id="technical-enhancements">Technical Enhancements</h3>
+<ul>
+<li>Added support for Kubernetes <code>client-gen</code>, enabling automated generation of
+  Go clients for all CloudNativePG CRDs. (#6695)</li>
+</ul>
+<h2 id="version-1242">Version 1.24.2</h2>
+<p><strong>Release Date:</strong> December 23, 2024</p>
+<h3 id="enhancements_2">Enhancements</h3>
+<ul>
+<li>Enable customization of startup, liveness, and readiness probes through the
+  <code>.spec.probes</code> stanza. (#6266)</li>
+<li>Add the <code>cnpg.io/userType</code> label to secrets generated for predefined users,
+  specifically <code>superuser</code> and <code>app</code>. (#4392)</li>
+<li>Improved validation for the <code>spec.schedule</code> field in ScheduledBackups,
+  raising warnings for potential misconfigurations. (#5396)</li>
+<li><code>cnpg</code> plugin:<ul>
+<li>Honor the <code>User-Agent</code> header in HTTP requests with the API server. (#6153)</li>
+</ul>
+</li>
+</ul>
+<h3 id="bug-fixes_1">Bug Fixes</h3>
+<ul>
+<li>Ensure the former primary flushes its WAL file queue to the archive before
+  re-synchronizing as a replica, reducing recovery times and enhancing data
+  consistency during failovers. (#6141)</li>
+<li>Clean the WAL volume along with the <code>PGDATA</code> volume during bootstrap. (#6265)</li>
+<li>Update the operator to set the cluster phase to <code>Unrecoverable</code> when
+  all previously generated <code>PersistentVolumeClaims</code> are missing. (#6170)</li>
+<li>Fix the parsing of the <code>synchronous_standby_names</code> GUC when
+  <code>.spec.postgresql.synchronous.method</code> is set to <code>first</code>. (#5955)</li>
+<li>Resolved a potential race condition when patching certain conditions
+  in CRD statuses, improving reliability in concurrent updates. (#6328)</li>
+<li>Correct role changes to apply at the transaction level instead of the
+  database context. (#6064)</li>
+<li>Remove the <code>primary_slot_name</code> definition from the <code>override.conf</code> file on
+  the primary to ensure it is always empty. (#6219)</li>
+<li>Configure libpq environment variables, including <code>PGHOST</code>, in PgBouncer pods
+  to enable seamless access to the <code>pgbouncer</code> virtual database using <code>psql</code>
+  from within the container. (#6247)</li>
+<li>Remove unnecessary updates to the Cluster status when verifying changes in
+  the image catalog. (#6277)</li>
+<li>Prevent panic during recovery from an external server without proper backup
+  configuration. (#6300)</li>
+<li>Resolved a key collision issue in structured logs, where the name field was
+  inconsistently used to log two distinct values. (#6324)</li>
+<li>Ensure proper quoting of the inRoles field in SQL statements to prevent
+  syntax errors in generated SQL during role management. (#6346)</li>
+<li><code>cnpg</code> plugin:<ul>
+<li>Ensure the <code>kubectl</code> context is properly passed in the <code>psql</code> command. (#6257)</li>
+<li>Avoid displaying physical backups block when empty with <code>status</code> command. (#5998)</li>
+</ul>
+</li>
+</ul>
+<h2 id="version-1241">Version 1.24.1</h2>
+<p><strong>Release date:</strong> Oct 16, 2024</p>
+<h3 id="enhancements_3">Enhancements:</h3>
+<ul>
+<li>Remove the use of <code>pg_database_size</code> from the status probe, as it caused
+  high resource utilization by scanning the entire <code>PGDATA</code> directory to
+  compute database sizes. The <code>kubectl status</code> plugin will now rely on <code>du</code>
+  to provide detailed size information retrieval (#5689).</li>
+<li>Add the ability to configure the <code>full_page_writes</code> parameter in
+  PostgreSQL. This setting defaults to <code>on</code>, in line with PostgreSQL's
+  recommendations (#5516).</li>
+<li>Plugin:<ul>
+<li>Add the <code>logs pretty</code> command in the <code>cnpg</code> plugin to read a log stream
+  from standard input and output a human-readable format, with options to
+  filter log entries (#5770)</li>
+<li>Enhance the <code>status</code> command by allowing multiple <code>-v</code> options to
+  increase verbosity for more detailed output (#5765).</li>
+<li>Add support for specifying a custom Docker image using the <code>--image</code>
+  flag in the <code>pgadmin4</code> plugin command, giving users control over the
+  Docker image used for pgAdmin4 deployments (#5515).</li>
+</ul>
+</li>
+</ul>
+<h3 id="fixes_1">Fixes:</h3>
+<ul>
+<li>Resolve an issue with concurrent status updates when demoting a primary to a
+  designated primary, ensuring smoother transitions during cluster role changes
+  (#5755).</li>
+<li>Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down
+  to two instances, enabling easier maintenance on the node hosting the replica
+  (#5487).</li>
+<li>Prioritize full rollout over inplace restarts (#5407).</li>
+<li>When using <code>.spec.postgresql.synchronous</code>, ensure that the
+  <code>synchronous_standby_names</code> parameter is correctly set, even when no replicas
+  are reachable (#5831).</li>
+<li>Fix an issue that could lead to double failover in cases of lost
+  connectivity (#5788).</li>
+<li>Correctly set the <code>TMPDIR</code> and <code>PSQL_HISTORY</code> environment variables for pods
+  and jobs, improving temporary file and history management (#5503).</li>
+<li>Plugin:<ul>
+<li>Resolve a race condition in the <code>logs cluster</code> command (#5775).</li>
+<li>Display the <code>potential</code> sync status in the <code>status</code> plugin (#5533).</li>
+<li>Fix the issue where pods deployed by the <code>pgadmin4</code> command didn’t have
+  a writable home directory (#5800).</li>
+</ul>
+</li>
+</ul>
+<h3 id="supported-versions">Supported versions</h3>
+<ul>
+<li>PostgreSQL 17 (PostgreSQL 17.0 is the default image)</li>
+</ul>
+<h2 id="version-1240">Version 1.24.0</h2>
+<p><strong>Release date:</strong> Aug 22, 2024</p>
+<h3 id="important-changes_1">Important changes:</h3>
+<ul>
+<li>Deprecate the <code>role</code> label in the selectors of <code>Service</code> and
+  <code>PodDisruptionBudget</code> resources in favor of <code>cnpg.io/instanceRole</code> (#4897).</li>
+<li>Fix the default PodAntiAffinity configuration for PostgreSQL Pods,
+  allowing a PostgreSQL and a Pooler Instance to coexist on the same node when
+  the anti-affinity configuration is set to <code>required</code> (#5156).</li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>The PodAntiAffinity change will trigger a rollout of all the instances when
+the operator is upgraded, even when online upgrades are enabled.</p>
+</div>
+<h3 id="features">Features:</h3>
+<ul>
+<li><strong>Distributed PostgreSQL Topologies</strong>: Enhance the replica cluster feature to
+  create distributed database topologies for PostgreSQL that span multiple
+  Kubernetes clusters, enabling hybrid and multi-cloud deployments. This feature
+  supports:<ul>
+<li><strong>Declarative Primary Control</strong>: Easily specify which PostgreSQL cluster
+  acts as the primary in a distributed setup (#4388).</li>
+<li><strong>Seamless Switchover</strong>: Effortlessly demote the current primary and
+  promote a selected replica cluster, typically in a different region,
+  without needing to rebuild the former primary. This ensures high availability
+  and resilience in diverse environments (#4411).</li>
+</ul>
+</li>
+<li><strong>Managed Services</strong>: Introduce managed services via the <code>managed.services</code>
+  stanza (#4769 and #4952), allowing you to:<ul>
+<li>Disable the read-only and read services via configuration.</li>
+<li>Leverage the service template capability to create custom service
+  resources, including load balancers, to access PostgreSQL outside
+  Kubernetes (particularly useful for DBaaS purposes).</li>
+</ul>
+</li>
+<li><strong>Enhanced API for Synchronous Replication</strong>: Introducing an improved API for
+  explicit configuration of synchronous replication, supporting both
+  quorum-based and priority list strategies. This update allows full
+  customization of the <code>synchronous_standby_names</code> option, providing greater
+  control and flexibility (#5148).</li>
+<li><strong>WAL Disk Space Exhaustion</strong>: Safely stop the cluster when PostgreSQL runs
+  out of disk space to store WAL files, making recovery easier by increasing
+  the size of the related volume (#4404).</li>
+</ul>
+<h3 id="enhancements_4">Enhancements:</h3>
+<ul>
+<li>Add support for delayed replicas by introducing the
+  <code>.spec.replica.minApplyDelay</code> option, leveraging PostgreSQL's
+  <code>recovery_min_apply_delay</code> capability (#5181).</li>
+<li>Introduce <code>postInitSQLRefs</code> and <code>postInitTemplateSQLRefs</code> to allow users to
+  define <code>postInit</code> and <code>postInitTemplate</code> instructions as one or more config
+  maps or secrets (#5074).</li>
+<li>Add transparent support for PostgreSQL 17's <code>allow_alter_system</code> parameter,
+  enabling or disabling the <code>ALTER SYSTEM</code> command through the
+<code>.spec.postgresql.enableAlterSystem</code> option (#4921).</li>
+<li>Allow overriding the query metric name and the names of the columns using a
+  <code>name</code> key/value pair, which can replace the name automatically inherited
+  from the parent key (#4779).</li>
+<li>Enhanced control over exported metrics by making them subject to the value
+  returned by a custom query, which is run within the same transaction and
+  defined in the <code>predicate_query</code> field (#4503).</li>
+<li>Allow additional arguments to be passed to <code>barman-cloud-wal-archive</code> and
+  <code>barman-cloud-wal-restore</code> (#5099).</li>
+<li>Introduce the <code>reconcilePodSpec</code> annotation on the <code>Cluster</code> and <code>Pooler</code>
+  resources to control the restart of pods following a change in the Pod
+  specification (#5069).</li>
+<li>The readiness probe now fails for streaming replicas that were
+  never connected to the primary instance, allowing incoherent replicas
+  to be discovered promptly (#5206).</li>
+<li>Support the new metrics introduced in PgBouncer 1.23 in the <code>Pooler</code> metrics
+  collector (#5044).</li>
+<li><code>cnpg</code> plugin updates:<ul>
+<li>Enhance the <code>install generate</code> command by adding a <code>--control-plane</code> option,
+  allowing deployment of the operator on control-plane nodes by setting
+  node affinity and tolerations (#5271).</li>
+<li>Enhance the <code>destroy</code> command to delete also any job related to the target
+  instance (#5298).</li>
+<li>Enhanced the <code>status</code> command to display <code>demotionToken</code> and
+  <code>promotionToken</code> when available, providing more detailed operational
+  insights with distributed topologies (#5149).</li>
+<li>Added support for customizing the remote database name in the <code>publication</code>
+  and <code>subscription</code> subcommands. This enhancement offers greater flexibility
+  for synchronizing data from an external cluster with multiple databases (#5113).</li>
+</ul>
+</li>
+</ul>
+<h3 id="security_2">Security:</h3>
+<ul>
+<li>Add TLS communication between the operator and instance manager (#4442).</li>
+<li>Add optional TLS communication for the instance metrics exporter (#4927).</li>
+</ul>
+<h3 id="fixes_2">Fixes:</h3>
+<ul>
+<li>Enhance the mechanism for detecting Pods that have been terminated but not
+  deleted during an eviction process, and extend the cleanup process during
+  maintenance windows to include unschedulable Pods when the <code>reusePVC</code> flag is
+  set to false (#2056).</li>
+<li>Disable <code>pg_rewind</code> execution for newly created replicas that employ
+  VolumeSnapshot during bootstrapping to avoid introducing a new shutdown
+  checkpoint entry in the WAL files. This ensures that replicas can reconnect to
+  the primary without issues, which would otherwise be hindered by the additional
+  checkpoint entry (#5081).</li>
+<li>Gracefully handle failures during the initialization of a new instance.
+  Any remaining data from the failed initialization is now either removed or,
+  if it's a valid PostgreSQL data directory, moved to a backup location to avoid
+  possible data loss (#5112).</li>
+<li>Enhance the robustness of the immediate backups reconciler by implementing
+  retry logic upon initial backup failure (#4982).</li>
+<li>Wait for the <code>postmaster</code> to shut down before starting it again (#4938).</li>
+<li>Ensure that the <code>Pooler</code> service template can override the default service
+  (#4846).</li>
+<li>Exclude immutable databases from <code>pg_database</code> metric monitoring and alerting
+  processes (#4980).</li>
+<li>Removed unnecessary permissions from the operator service account (#4911).</li>
+<li>Fix cluster role permissions for <code>ClusterImageCatalogs</code> (#5034).</li>
+<li>Ensure the operator initiates a rollout of the <code>Pooler</code> instance when
+  the operator image is upgraded (#5006)</li>
+<li>Address race condition causing the readiness probe to incorrectly
+  show "not ready" after a PostgreSQL restart, even when the
+  <code>postmaster</code> was accessible (#4920).</li>
+<li>Prevent reconciliation of resources that aren't owned by a <code>Pooler</code> (#4967).</li>
+<li>Renew the certificates managed by the operator when the DNS Subject
+  Alternative Names (SANs) are updated (#3269, #3319).</li>
+<li>Set PVC default <code>AccessModes</code> in the template only when unspecified (#4845).</li>
+<li>Gracefully handle unsatisfiable backup schedule (#5109).</li>
+<li>Synchronous replication self-healing checks now exclude terminated pods,
+  focusing only on active and functional pods (#5210).</li>
+<li>The instance manager will now terminate all existing operator-related replication
+  connections following a role change in a replica cluster (#5209).</li>
+<li>Allow setting <code>smartShutdownTimeout</code> to zero, enabling immediate fast
+  shutdown and bypassing the smart shutdown process when required (#5347).</li>
+<li><code>cnpg</code> plugin:<ul>
+<li>Properly handle errors during the <code>status</code> command execution.</li>
+<li>Support TLS in the <code>status</code> command (#4915).</li>
+</ul>
+</li>
+</ul>
+<h3 id="supported-versions_1">Supported versions</h3>
+<ul>
+<li>Kubernetes 1.31, 1.30, 1.29, and 1.28</li>
+<li>PostgreSQL 16, 15, 14, 13, and 12<ul>
+<li>PostgreSQL 16.4 is the default image</li>
+<li>PostgreSQL 12 support ends on November 12, 2024</li>
+</ul>
+</li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../../..";</script>
+    <script src="../../../js/theme_extra.js"></script>
+    <script src="../../../js/theme.js"></script>
+      <script src="../../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/preview/release_notes/v1.25/index.html b/assets/documentation/preview/release_notes/v1.25/index.html
index 4c82ae107..eeb9289d1 100644
--- a/assets/documentation/preview/release_notes/v1.25/index.html
+++ b/assets/documentation/preview/release_notes/v1.25/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../img/favicon.ico" />
-    <title>Release notes for CloudNativePG 1.25 - CloudNativePG v1.26.0-rc3</title>
+    <title>Release notes for CloudNativePG 1.25 - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../css/theme.css" />
     <link rel="stylesheet" href="../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,7 +291,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -312,9 +314,226 @@ <h1 id="release-notes-for-cloudnativepg-125">Release notes for CloudNativePG 1.2
 <p>For a complete list of changes, please refer to the
 <a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.25">commits</a>
 on the release branch in GitHub.</p>
+<h2 id="version-1253">Version 1.25.3</h2>
+<p><strong>Release date:</strong> Jul 25, 2025</p>
+<p><em>In memory of <a href="https://www.linkedin.com/in/codepope/">DJ Walker-Morgan</a>.</em></p>
+<h3 id="changes">Changes</h3>
+<ul>
+<li>Removed <code>386</code> and ARM (v5/v6/v7) architectures from the <code>cnpg</code> plugin build
+  matrix, reducing the number of published binaries
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7648">#7648</a>).</li>
+</ul>
+<h3 id="enhancements">Enhancements</h3>
+<ul>
+<li>
+<p>Improved validation of <code>shared_buffers</code> by correctly considering <code>HugePages</code>
+  settings, ensuring accurate memory configuration checks
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7864">#7864</a>).</p>
+</li>
+<li>
+<p>Set <code>oom_score_adj</code> for PostgreSQL worker processes to improve prioritization
+  during out-of-memory situations
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7891">#7891</a>).</p>
+</li>
+<li>
+<p>Added <code>fqdn-uri</code> and <code>fqdn-jdbc-uri</code> fields in user secrets to simplify
+  application connection string management and align with DNS-based connection
+  best practices (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7852">#7852</a>).</p>
+</li>
+<li>
+<p>Added the <code>systemID</code> field and related condition in the <code>Cluster</code> status to track
+  the PostgreSQL system identifier.
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7717">#7717</a>).</p>
+</li>
+</ul>
+<h3 id="fixes">Fixes</h3>
+<ul>
+<li>
+<p>Added a mutex in the connection pooler to protect concurrent access to the
+  connections map, improving stability in high-concurrency environments
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7804">#7804</a>).</p>
+</li>
+<li>
+<p>Fixed replica cluster instance ordering by correctly detecting the designated
+  primary, improving replica cluster stability and switchover operations
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8108">#8108</a>).</p>
+</li>
+<li>
+<p>Added support for reconciling <code>VolumeAttributesClass</code> for PVCs, enhancing
+  storage compatibility and lifecycle management
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7885">#7885</a>).</p>
+</li>
+<li>
+<p>Made the internal webserver routines non-blocking to improve responsiveness
+  under load (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8071">#8071</a>).</p>
+</li>
+<li>
+<p>Fixed an issue where the <code>ensureReplicationClientLeafCertificate</code> error did
+  not display the correct <code>secretName</code> in the not found message
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8086">#8086</a>).</p>
+</li>
+<li>
+<p>Prevented invalid <code>ALTER SUBSCRIPTION</code> statements by updating only
+  PostgreSQL‑supported parameters; unsupported options like <code>copy_data</code> are
+  ignored to avoid reconciliation failures
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7844">7844</a>).</p>
+</li>
+<li>
+<p>Fixed an issue where the <code>bootstrap-controller</code> in the connection pooler did
+  not apply <code>resources</code> settings correctly
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7922">#7922</a>).</p>
+</li>
+<li>
+<p>Ensured online backups fail cleanly if the <code>targetPod</code> becomes unhealthy
+  during backup, preventing partial or misleading backups
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7944">#7944</a>).</p>
+</li>
+<li>
+<p>Ensured the Backup resource status is set properly after a failure, improving
+  observability and scripting reliability
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7898">#7898</a>).</p>
+</li>
+</ul>
+<h2 id="version-1252">Version 1.25.2</h2>
+<p><strong>Release date:</strong> May 23, 2025</p>
+<h3 id="important-changes">Important Changes</h3>
+<ul>
+<li><strong>CloudNativePG is now officially a CNCF project</strong>: CloudNativePG has been
+  accepted into the Cloud Native Computing Foundation (CNCF), marking a
+  significant milestone in its evolution. As part of this transition, the project
+  is now governed under <strong>CloudNativePG, a Series of LF Projects, LLC</strong>, ensuring
+  long-term sustainability and community-driven innovation. (#7203)</li>
+</ul>
+<h3 id="enhancements_1">Enhancements</h3>
+<ul>
+<li>
+<p>Added the <code>KUBERNETES_CLUSTER_DOMAIN</code> configuration option to the operator,
+  allowing users to specify the domain suffix for fully qualified domain names
+  (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to
+  <code>cluster.local</code>. (#6989) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Implemented the <code>cnpg.io/validation</code> annotation, enabling users to disable
+  the validation webhook on CloudNativePG-managed resources. Use with caution,
+  as this allows unrestricted changes. (#7196)</p>
+</li>
+<li>
+<p>Added support for collecting <code>pg_stat_wal</code> metrics in PostgreSQL 18. (#7005)</p>
+</li>
+<li>
+<p>Added support for LZ4, XZ, and Zstandard compression methods when archiving
+  WAL files via Barman Cloud (<em>deprecated</em>). (#7151)</p>
+</li>
+<li>
+<p>CloudNativePG Interface (CNPG-I):</p>
+</li>
+<li>
+<p>A plugin can now trigger instance rollouts by implementing the <code>EVALUATE</code>
+    verb, ensuring that plugin-induced changes are properly reconciled. (#7126) <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Introduced support for WAL recovery via CNPG-I plugins during snapshot
+    restore. (#7284) <!-- no 1.24 and 1.22 --></p>
+</li>
+</ul>
+<h3 id="security">Security</h3>
+<ul>
+<li>Set <code>imagePullPolicy</code> to <code>Always</code> for the operator deployment to ensure that
+  images are always pulled from the registry, reducing the risk of using
+  outdated or potentially unsafe local images. (#7250)</li>
+</ul>
+<h3 id="fixes_1">Fixes</h3>
+<ul>
+<li>
+<p>Fixed native replication slot synchronization and logical replication
+  failover for PostgreSQL 17 by appending the <code>dbname</code> parameter to
+  <code>primary_conninfo</code> in replica configurations (#7298).</p>
+</li>
+<li>
+<p>Fixed a regression in WAL restore operations that prevented fallback to the
+  in-tree <code>barmanObjectStore</code> configuration defined in the <code>externalCluster</code>
+  source when a plugin failed to locate a WAL file (#7507). <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Improved backup efficiency by introducing a fail-fast mechanism in WAL
+  archiving, allowing quicker detection of unexpected primary demotion and
+  avoiding unnecessary retries (#7483).</p>
+</li>
+<li>
+<p>Fixed an off-by-one error in parallel WAL archiving that could cause one
+  extra worker process to be spawned beyond the requested number (#7389).</p>
+</li>
+<li>
+<p>Resolved a race condition that caused the operator to perform two switchovers
+  when updating the PostgreSQL configuration. (#6991)</p>
+</li>
+<li>
+<p>Corrected the <code>PodMonitor</code> configuration by adjusting the <code>matchLabels</code> scope
+  for the targeted pooler and cluster pods. Previously, the <code>matchLabels</code> were
+  too broad, inadvertently inheriting labels from the cluster and leading to data
+  collection from unintended targets. (#7063)</p>
+</li>
+<li>
+<p>Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in
+  the <code>shared_buffers</code> configuration. This will become an error in future
+  releases. Users should update their configurations to include explicit units
+  (e.g., <code>512MB</code> instead of <code>512</code>). (#7160)</p>
+</li>
+<li>
+<p>Treated timeout errors during volume snapshot creation as retryable to
+  prevent unnecessary backup failures. (#7010) <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Moved the defaulting logic for <code>.spec.postgresql.synchronous.dataDurability</code>
+  from the CRD to the webhook to avoid UI issues with OLM. (#7600) <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>CloudNativePG Interface (CNPG-I):</p>
+</li>
+<li>
+<p>Implemented automatic reloading of TLS certificates for plugins when they
+    change. (#7029) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Ensured the operator properly closes the plugin connection when
+    performing a backup using the plugin. (#7095, #7096) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Improved performance and resilience of CNPG-I by removing timeouts for local
+    plugin operations, avoiding failures during longer backup or WAL archiving
+    executions (#7496). <!-- no 1.22 --></p>
+</li>
+<li>
+<p><code>cnpg</code> plugin:</p>
+</li>
+<li>
+<p>Increased the buffer size in the <code>logs pretty</code> command to better handle
+    larger log output (#7281). <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Ensured the <code>plugin-name</code> parameter is required for plugin-based backups
+    and disallowed for non-plugin backup methods (#7506). <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Ensured that the primary Pod is recreated during an imperative restart when
+    <code>primaryUpdateMethod</code> is set to <code>restart</code>, aligning its definition with the
+    replicas. (#7122)</p>
+</li>
+</ul>
+<h3 id="changes_1">Changes</h3>
+<ul>
+<li>
+<p>Updated the default PostgreSQL version to 17.5 for new cluster
+  definitions. (#7556)</p>
+</li>
+<li>
+<p>Updated the default PgBouncer version to <strong>1.24.1</strong> for new <code>Pooler</code>
+  deployments (#7399).</p>
+</li>
+</ul>
 <h2 id="version-1251">Version 1.25.1</h2>
 <p><strong>Release Date:</strong> February 28, 2025</p>
-<h3 id="enhancements">Enhancements</h3>
+<h3 id="enhancements_2">Enhancements</h3>
 <ul>
 <li>Introduced a startup probe for the operator to enhance reliability and
   prevent premature liveness probe failures during initialization. (#7008)</li>
@@ -326,7 +545,7 @@ <h3 id="enhancements">Enhancements</h3>
 <li>Updated the default PostgreSQL version to 17.4 for new cluster
   definitions. (#6960)</li>
 </ul>
-<h3 id="security">Security</h3>
+<h3 id="security_1">Security</h3>
 <ul>
 <li>The operator image build process has been enhanced to strengthen
   security and transparency. Images are now signed with <code>cosign</code>, and
@@ -420,7 +639,7 @@ <h3 id="features">Features</h3>
   feedback and contributions to shape this exciting new capability.</p>
 </li>
 </ul>
-<h3 id="enhancements_1">Enhancements</h3>
+<h3 id="enhancements_3">Enhancements</h3>
 <ul>
 <li>Add the <code>dataDurability</code> option to the <code>.spec.postgresql.synchronous</code> stanza,
   allowing users to choose between <code>required</code> (default) or <code>preferred</code>
diff --git a/assets/documentation/preview/release_notes/v1.26/index.html b/assets/documentation/preview/release_notes/v1.26/index.html
index 7e001db20..0e1e60837 100644
--- a/assets/documentation/preview/release_notes/v1.26/index.html
+++ b/assets/documentation/preview/release_notes/v1.26/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../../img/favicon.ico" />
-    <title>Release notes for CloudNativePG 1.26 - CloudNativePG v1.26.0-rc3</title>
+    <title>Release notes for CloudNativePG 1.26 - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../../css/theme.css" />
     <link rel="stylesheet" href="../../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="../.." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -276,10 +272,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -289,7 +291,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="../..">CloudNativePG v1.26.0-rc3</a>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -312,107 +314,123 @@ <h1 id="release-notes-for-cloudnativepg-126">Release notes for CloudNativePG 1.2
 <p>For a complete list of changes, please refer to the
 <a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.26">commits</a>
 on the release branch in GitHub.</p>
-<h2 id="version-1260-rc3">Version 1.26.0-rc3</h2>
-<p><strong>Release date:</strong> May 13, 2025</p>
-<h3 id="enhancements">Enhancements</h3>
+<h2 id="version-1261">Version 1.26.1</h2>
+<p><strong>Release date:</strong> Jul 25, 2025</p>
+<p><em>In memory of <a href="https://www.linkedin.com/in/codepope/">DJ Walker-Morgan</a>.</em></p>
+<h3 id="important-changes">Important Changes</h3>
+<p>CloudNativePG is moving toward a plugin-based, backup and recovery agnostic
+architecture (initiated in 1.26.0 with Barman Cloud). As part of this
+transition, the following fields in the <code>.status</code> section of the <code>Cluster</code>
+resource are now deprecated:</p>
 <ul>
-<li>Added a new field in the <code>status</code> of the <code>Cluster</code> resource to track the
-  latest known Pod IP (#7546). <!-- no 1.25 1.24 1.22 --></li>
-<li>Introduced an opt-in experimental feature to enhance the liveness probe with
-  network isolation detection for primary instances. This feature can be
-  activated via the <code>alpha.cnpg.io/livenessPinger</code> annotation (#7466). <!-- no 1.25 1.24 1.22 --></li>
-<li>Updated the default PostgreSQL version to 17.5 for new cluster
-  definitions. (#7556)</li>
+<li><code>firstRecoverabilityPoint</code></li>
+<li><code>firstRecoverabilityPointByMethod</code></li>
+<li><code>lastSuccessfulBackup</code></li>
+<li><code>lastSuccessfulBackupByMethod</code></li>
+<li><code>lastFailedBackup</code></li>
 </ul>
-<h3 id="fixes-since-rc2">Fixes (since RC2)</h3>
+<p>Additionally, the following Prometheus metrics are deprecated:</p>
 <ul>
-<li>Corrected replication lag comparison logic in custom health probes to accept
-  equality, enabling probes to succeed when lag is exactly zero (#7442). <!-- no 1.25 1.24 1.22 --></li>
-<li>Fixed native replication slot synchronization and logical replication
-  failover for PostgreSQL 17 by appending the <code>dbname</code> parameter to
-  <code>primary_conninfo</code> in replica configurations (#7298).</li>
-<li>Improved performance and resilience of CNPG-I by removing timeouts for local
-  plugin operations, avoiding failures during longer backup or WAL archiving
-  executions (#7496). <!-- no 1.22 --></li>
-<li>Fixed a regression in WAL restore operations that prevented fallback to the
-  in-tree <code>barmanObjectStore</code> configuration defined in the <code>externalCluster</code>
-  source when a plugin failed to locate a WAL file (#7507). <!-- no 1.24 1.22 --></li>
-<li>Improved backup efficiency by introducing a fail-fast mechanism in WAL
-  archiving, allowing quicker detection of unexpected primary demotion and
-  avoiding unnecessary retries (#7483).</li>
-<li>Fixed an off-by-one error in parallel WAL archiving that could cause one
-  extra worker process to be spawned beyond the requested number (#7389).</li>
-<li>Enhanced declarative major version upgrade logic by prioritizing the declared
-  PostgreSQL version when using image catalogs. This change also replaces the
-  <code>majorVersionUpgradeFromImage</code> field with the new <code>pgDataImageInfo</code> object in
-  cluster status (#7387, #7403). <!-- no 1.25 1.24 1.22 --></li>
-<li>
-<p><code>cnpg</code> plugin:</p>
+<li><code>cnpg_collector_first_recoverability_point</code></li>
+<li><code>cnpg_collector_last_available_backup_timestamp</code></li>
+<li><code>cnpg_collector_last_failed_backup_timestamp</code></li>
+</ul>
+<p>These fields and metrics will no longer update when using plugin-based backups
+(e.g., Barman Cloud via CNPG-I). They remain functional for users still using
+in-core Barman Cloud and volume snapshot backups.</p>
+<blockquote>
+<p><strong>Note:</strong> We, as maintainers, are sorry for any inconvenience caused by not
+highlighting this change during the 1.26.0 release. As we transition to a
+plugin-based backup and recovery architecture, we encourage you to <strong>test
+your chosen plugin thoroughly in a staging environment before moving to
+production</strong> to ensure your workflows and observability integration continue
+to meet your needs. Thank you for your understanding and for working with us
+as CloudNativePG evolves to provide a more modular and robust experience.</p>
+</blockquote>
+<h3 id="changes">Changes</h3>
 <ul>
-<li>Increased the buffer size in the <code>logs pretty</code> command to better handle
-  larger log output (#7281). <!-- no 1.24 1.22 --></li>
-<li>Ensured the <code>plugin-name</code> parameter is required for plugin-based backups
-  and disallowed for non-plugin backup methods (#7506). <!-- no 1.24 1.22 --></li>
+<li>Removed <code>386</code> and ARM (v5/v6/v7) architectures from the <code>cnpg</code> plugin build
+  matrix, reducing the number of published binaries
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7648">#7648</a>).</li>
 </ul>
+<h3 id="enhancements">Enhancements</h3>
+<ul>
+<li>
+<p>Improved validation of <code>shared_buffers</code> by correctly considering <code>HugePages</code>
+  settings, ensuring accurate memory configuration checks
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7864">#7864</a>).</p>
+</li>
+<li>
+<p>Set <code>oom_score_adj</code> for PostgreSQL worker processes to improve prioritization
+  during out-of-memory situations
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7891">#7891</a>).</p>
+</li>
+<li>
+<p>Added <code>fqdn-uri</code> and <code>fqdn-jdbc-uri</code> fields in user secrets to simplify
+  application connection string management and align with DNS-based connection
+  best practices (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7852">#7852</a>).</p>
+</li>
+<li>
+<p>Added the <code>systemID</code> field and related condition in the <code>Cluster</code> status to track
+  the PostgreSQL system identifier.
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7717">#7717</a>).</p>
 </li>
 </ul>
-<h3 id="changes">Changes</h3>
+<h3 id="fixes">Fixes</h3>
 <ul>
 <li>
-<p>Initiated deprecation of in-tree Barman Cloud support:</p>
-<ul>
+<p>Added a mutex in the connection pooler to protect concurrent access to the
+  connections map, improving stability in high-concurrency environments
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7804">#7804</a>).</p>
+</li>
 <li>
-<p>The <code>.spec.backup.barmanObjectStore</code> and <code>.spec.backup.retentionPolicy</code>
-  fields are now deprecated in favor of the external Barman Cloud Plugin, and a
-  warning is now emitted by the admission webhook when these fields are used in
-  the <code>Cluster</code> specification (#7500). <!-- no 1.25 1.24 1.22 --></p>
+<p>Fixed replica cluster instance ordering by correctly detecting the designated
+  primary, improving replica cluster stability and switchover operations
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8108">#8108</a>).</p>
 </li>
 <li>
-<p>While support for in-tree object store backup and recovery remains
-  available in this release, it is planned for removal in version 1.28.0.</p>
+<p>Added support for reconciling <code>VolumeAttributesClass</code> for PVCs, enhancing
+  storage compatibility and lifecycle management
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7885">#7885</a>).</p>
 </li>
 <li>
-<p><em>We strongly encourage users to begin planning the migration of their
-  fleet to the new plugin-based approach. This release candidate provides
-  an opportunity to test the new plugin workflow ahead of the final 1.26.0
-  release. Feedback is welcome</em>.</p>
+<p>Made the internal webserver routines non-blocking to improve responsiveness
+  under load (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8071">#8071</a>).</p>
 </li>
-</ul>
+<li>
+<p>Fixed an issue where the <code>ensureReplicationClientLeafCertificate</code> error did
+  not display the correct <code>secretName</code> in the not found message
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8086">#8086</a>).</p>
 </li>
 <li>
-<p>Updated the default PgBouncer version to <strong>1.24.1</strong> for new <code>Pooler</code>
-  deployments (#7399).</p>
+<p>Prevented invalid <code>ALTER SUBSCRIPTION</code> statements by updating only
+  PostgreSQL‑supported parameters; unsupported options like <code>copy_data</code> are
+  ignored to avoid reconciliation failures
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7844">7844</a>).</p>
 </li>
-</ul>
-<h2 id="version-1260-rc2">Version 1.26.0-rc2</h2>
-<p><strong>Release date:</strong> April 16, 2025</p>
-<h3 id="enhancements_1">Enhancements</h3>
-<ul>
 <li>
-<p>Introduced support for WAL recovery via CNPG-I plugins during snapshot
-  restore. (#7284) <!-- no 1.24 and 1.22 --></p>
+<p>Fixed an issue where the <code>bootstrap-controller</code> in the connection pooler did
+  not apply <code>resources</code> settings correctly
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7922">#7922</a>).</p>
 </li>
 <li>
-<p>Removed the <code>ENABLE_AZURE_PVC_UPDATES</code> configuration, as it is no longer
-  required to resize Azure volumes correctly. The Azure CSI driver includes the
-  necessary fix as of version <a href="https://github.com/kubernetes-sigs/azuredisk-csi-driver/releases/tag/v1.11.0">1.11.0</a>. (#7297)</p>
+<p>Ensured online backups fail cleanly if the <code>targetPod</code> becomes unhealthy
+  during backup, preventing partial or misleading backups
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7944">#7944</a>).</p>
+</li>
+<li>
+<p>Ensured the Backup resource status is set properly after a failure, improving
+  observability and scripting reliability
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7898">#7898</a>).</p>
+</li>
+<li>
+<p>Improved liveness probe handling to avoid unnecessary timeouts when they are
+  not required (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7902">#7902</a>).</p>
 </li>
 </ul>
-<h3 id="security">Security</h3>
-<ul>
-<li>Set <code>imagePullPolicy</code> to <code>Always</code> for the operator deployment to ensure that
-  images are always pulled from the registry, reducing the risk of using
-  outdated or potentially unsafe local images. (#7250)</li>
-</ul>
-<h3 id="fixes-since-rc1">Fixes (since RC1)</h3>
-<ul>
-<li>Improved declarative major version upgrades by incorporating <code>pg_controldata</code>
-  information when creating the new data directory, ensuring a more reliable
-  and seamless upgrade process. (#7274)</li>
-</ul>
-<h2 id="version-1260-rc1">Version 1.26.0-rc1</h2>
-<p><strong>Release date:</strong> March 28, 2025</p>
-<h3 id="important-changes">Important Changes</h3>
+<h2 id="version-1260">Version 1.26.0</h2>
+<p><strong>Release date:</strong> May 23, 2025</p>
+<h3 id="important-changes_1">Important Changes</h3>
 <ul>
 <li>
 <p><strong>CloudNativePG is now officially a CNCF project</strong>: CloudNativePG has been
@@ -424,9 +442,13 @@ <h3 id="important-changes">Important Changes</h3>
 <li>
 <p><strong>Deprecation of Native Barman Cloud Support</strong>: Native support for Barman
   Cloud backups and recovery is now deprecated and will be fully removed in
-  CloudNativePG 1.28.0. Users must begin migrating their existing clusters to the
-  new <a href="https://github.com/cloudnative-pg/plugin-barman-cloud">Barman Cloud Plugin</a>
-  to ensure a smooth transition. (#6876)</p>
+  CloudNativePG version 1.28.0. Although still available in the current release,
+  users are strongly encouraged to begin migrating their existing clusters to the
+  new <a href="https://cloudnative-pg.io/plugin-barman-cloud/">Barman Cloud Plugin</a> to
+  ensure a smooth and seamless transition. The plugin should also be used for all
+  new deployments. This change marks the first step toward making CloudNativePG a
+  backup-agnostic solution, a goal that will be fully realized when volume
+  snapshot support is also moved to a plugin-based architecture. (#6876)</p>
 </li>
 <li>
 <p><strong>End of Support for Barman 3.4 and Earlier</strong>: CloudNativePG no longer
@@ -446,7 +468,7 @@ <h3 id="important-changes">Important Changes</h3>
   hibernation method. (#7155)</p>
 </li>
 </ul>
-<h3 id="features">Features:</h3>
+<h3 id="features">Features</h3>
 <ul>
 <li>
 <p><strong>Declarative Offline In-Place Major Upgrades of PostgreSQL</strong>: Introduced
@@ -469,22 +491,31 @@ <h3 id="features">Features:</h3>
   create, modify, and drop PostgreSQL extensions and schemas within a database. (#7062)</p>
 </li>
 </ul>
-<h3 id="enhancements_2">Enhancements</h3>
+<h3 id="enhancements_1">Enhancements</h3>
 <ul>
 <li>
+<p>Introduced an opt-in experimental feature to enhance the liveness probe with
+  network isolation detection for primary instances. This feature can be
+  activated via the <code>alpha.cnpg.io/livenessPinger</code> annotation (#7466). <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
 <p>Introduced the <code>STANDBY_TCP_USER_TIMEOUT</code> operator configuration setting,
   allowing users to specify the <code>tcp_user_timeout</code> parameter on all standby
   instances managed by the operator. (#7036) <!-- no 1.25 1.24 1.22 --></p>
 </li>
 <li>
-<p>Added the <code>pg_extensions</code> metric, providing information about installed
-  PostgreSQL extensions and their latest available versions. (#7195) <!-- no 1.25 1.24 1.22 --></p>
-</li>
-<li>
 <p>Introduced the <code>DRAIN_TAINTS</code> operator configuration option, enabling users
   to customize which node taints indicate a node is being drained. This
   replaces the previous fixed behavior of only recognizing
-  <code>node.kubernetes.io/unschedulable</code> as a drain signal.</p>
+  <code>node.kubernetes.io/unschedulable</code> as a drain signal. (#6928) <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>Added a new field in the <code>status</code> of the <code>Cluster</code> resource to track the
+  latest known Pod IP (#7546).  <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>Added the <code>pg_extensions</code> metric, providing information about installed
+  PostgreSQL extensions and their latest available versions. (#7195) <!-- no 1.25 1.24 1.22 --></p>
 </li>
 <li>
 <p>Added the <code>KUBERNETES_CLUSTER_DOMAIN</code> configuration option to the operator,
@@ -493,10 +524,6 @@ <h3 id="enhancements_2">Enhancements</h3>
   <code>cluster.local</code>. (#6989) <!-- no 1.22 --></p>
 </li>
 <li>
-<p>Added support for LZ4, XZ, and Zstandard compression methods when archiving
-  WAL files via Barman Cloud (<em>deprecated</em>). (#7151)</p>
-</li>
-<li>
 <p>Implemented the <code>cnpg.io/validation</code> annotation, enabling users to disable
   the validation webhook on CloudNativePG-managed resources. Use with caution,
   as this allows unrestricted changes. (#7196)</p>
@@ -511,16 +538,62 @@ <h3 id="enhancements_2">Enhancements</h3>
 <p>Added support for collecting <code>pg_stat_wal</code> metrics in PostgreSQL 18. (#7005)</p>
 </li>
 <li>
+<p>Removed the <code>ENABLE_AZURE_PVC_UPDATES</code> configuration, as it is no longer
+  required to resize Azure volumes correctly. The Azure CSI driver includes the
+  necessary fix as of version <a href="https://github.com/kubernetes-sigs/azuredisk-csi-driver/releases/tag/v1.11.0">1.11.0</a>. (#7297) <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>The <code>.spec.backup.barmanObjectStore</code> and <code>.spec.backup.retentionPolicy</code>
+  fields are now deprecated in favor of the external Barman Cloud Plugin, and a
+  warning is now emitted by the admission webhook when these fields are used in
+  the <code>Cluster</code> specification (#7500).  <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>Added support for LZ4, XZ, and Zstandard compression methods when archiving
+  WAL files via Barman Cloud (<em>deprecated</em>). (#7151)</p>
+</li>
+<li>
 <p>CloudNativePG Interface (CNPG-I):</p>
 <ul>
-<li>A plugin can now trigger instance rollouts by implementing the <code>EVALUATE</code>
-  verb, ensuring that plugin-induced changes are properly reconciled. (#7126) <!-- no 1.24 1.22 --></li>
+<li>
+<p>A plugin can now trigger instance rollouts by implementing the <code>EVALUATE</code>
+  verb, ensuring that plugin-induced changes are properly reconciled. (#7126) <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Introduced support for WAL recovery via CNPG-I plugins during snapshot
+  restore. (#7284) <!-- no 1.24 and 1.22 --></p>
+</li>
 </ul>
 </li>
 </ul>
-<h3 id="fixes">Fixes</h3>
+<h3 id="security">Security</h3>
+<ul>
+<li>Set <code>imagePullPolicy</code> to <code>Always</code> for the operator deployment to ensure that
+  images are always pulled from the registry, reducing the risk of using
+  outdated or potentially unsafe local images. (#7250)</li>
+</ul>
+<h3 id="fixes_1">Fixes</h3>
 <ul>
 <li>
+<p>Fixed native replication slot synchronization and logical replication
+  failover for PostgreSQL 17 by appending the <code>dbname</code> parameter to
+  <code>primary_conninfo</code> in replica configurations (#7298).</p>
+</li>
+<li>
+<p>Fixed a regression in WAL restore operations that prevented fallback to the
+  in-tree <code>barmanObjectStore</code> configuration defined in the <code>externalCluster</code>
+  source when a plugin failed to locate a WAL file (#7507). <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Improved backup efficiency by introducing a fail-fast mechanism in WAL
+  archiving, allowing quicker detection of unexpected primary demotion and
+  avoiding unnecessary retries (#7483).</p>
+</li>
+<li>
+<p>Fixed an off-by-one error in parallel WAL archiving that could cause one
+  extra worker process to be spawned beyond the requested number (#7389).</p>
+</li>
+<li>
 <p>Resolved a race condition that caused the operator to perform two switchovers
   when updating the PostgreSQL configuration. (#6991)</p>
 </li>
@@ -541,30 +614,66 @@ <h3 id="fixes">Fixes</h3>
   prevent unnecessary backup failures. (#7010) <!-- no 1.24 1.22 --></p>
 </li>
 <li>
-<p><code>cnpg</code> plugin:</p>
+<p>Moved the defaulting logic for <code>.spec.postgresql.synchronous.dataDurability</code>
+  from the CRD to the webhook to avoid UI issues with OLM. (#7600) <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>CloudNativePG Interface (CNPG-I):</p>
 <ul>
-<li>Ensured that the primary Pod is recreated during an imperative restart when
-  <code>primaryUpdateMethod</code> is set to <code>restart</code>, aligning its definition with the
-  replicas. (#7122)</li>
+<li>
+<p>Implemented automatic reloading of TLS certificates for plugins when they
+  change. (#7029) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Ensured the operator properly closes the plugin connection when
+  performing a backup using the plugin. (#7095, #7096) <!-- no 1.22 --></p>
+</li>
+<li>
+<p>Fixed an issue that prevented WALs from being archived on a former
+  primary node when using a plugin. (#6964) <!-- no 1.25 1.24 1.22 --></p>
+</li>
+<li>
+<p>Improved performance and resilience of CNPG-I by removing timeouts for local
+  plugin operations, avoiding failures during longer backup or WAL archiving
+  executions (#7496). <!-- no 1.22 --></p>
+</li>
 </ul>
 </li>
 <li>
-<p>CloudNativePG Interface (CNPG-I):</p>
+<p><code>cnpg</code> plugin:</p>
 <ul>
-<li>Implemented automatic reloading of TLS certificates for plugins when they
-  change. (#7029) <!-- no 1.22 --></li>
-<li>Ensured the operator properly closes the plugin connection when
-  performing a backup using the plugin. (#7095, #7096) <!-- no 1.22 --></li>
-<li>Fixed an issue that prevented WALs from being archived on a former
-  primary node when using a plugin. (#6964) <!-- no 1.25 1.24 1.22 --></li>
+<li>
+<p>Increased the buffer size in the <code>logs pretty</code> command to better handle
+  larger log output (#7281). <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Ensured the <code>plugin-name</code> parameter is required for plugin-based backups
+  and disallowed for non-plugin backup methods (#7506). <!-- no 1.24 1.22 --></p>
+</li>
+<li>
+<p>Ensured that the primary Pod is recreated during an imperative restart when
+  <code>primaryUpdateMethod</code> is set to <code>restart</code>, aligning its definition with the
+  replicas. (#7122)</p>
+</li>
+</ul>
+</li>
 </ul>
+<h3 id="changes_1">Changes</h3>
+<ul>
+<li>
+<p>Updated the default PostgreSQL version to 17.5 for new cluster
+  definitions. (#7556)</p>
+</li>
+<li>
+<p>Updated the default PgBouncer version to <strong>1.24.1</strong> for new <code>Pooler</code>
+  deployments (#7399).</p>
 </li>
 </ul>
 <h3 id="supported-versions">Supported versions</h3>
 <ul>
-<li>Kubernetes 1.32, 1.31, and 1.30 <!-- 1.33? --></li>
+<li>Kubernetes 1.33, 1.32, 1.31, and 1.30</li>
 <li>PostgreSQL 17, 16, 15, 14, and 13<ul>
-<li>PostgreSQL 17.X is the default image</li>
+<li>PostgreSQL 17.5 is the default image</li>
 <li>PostgreSQL 13 support ends on November 12, 2025</li>
 </ul>
 </li>
diff --git a/assets/documentation/preview/release_notes/v1.27/index.html b/assets/documentation/preview/release_notes/v1.27/index.html
new file mode 100644
index 000000000..4c23784a8
--- /dev/null
+++ b/assets/documentation/preview/release_notes/v1.27/index.html
@@ -0,0 +1,454 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+    <meta charset="utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
+      <link rel="shortcut icon" href="../../img/favicon.ico" />
+    <title>Release notes for CloudNativePG 1.27 - CloudNativePG v1.27.0-rc1</title>
+    <link rel="stylesheet" href="../../css/theme.css" />
+    <link rel="stylesheet" href="../../css/theme_extra.css" />
+        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
+        <link href="../../css/override.css" rel="stylesheet" />
+    
+      <script>
+        // Current page data
+        var mkdocs_page_name = "Release notes for CloudNativePG 1.27";
+        var mkdocs_page_input_path = "release_notes/v1.27.md";
+        var mkdocs_page_url = null;
+      </script>
+    
+    <!--[if lt IE 9]>
+      <script src="../../js/html5shiv.min.js"></script>
+    <![endif]-->
+      <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/highlight.min.js"></script>
+      <script>hljs.highlightAll();</script> 
+</head>
+
+<body class="wy-body-for-nav" role="document">
+
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
+    <div class="wy-side-scroll">
+      <div class="wy-side-nav-search">
+          <a href="../.." class="icon icon-home"> CloudNativePG v1.27.0-rc1
+        </a><div role="search">
+  <form id ="rtd-search-form" class="wy-form" action="../../search.html" method="get">
+      <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
+  </form>
+</div>
+      </div>
+
+      <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../..">CloudNativePG</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../before_you_start/">Before You Start</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../use_cases/">Use cases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../architecture/">Architecture</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../installation_upgrade/">Installation and upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../quickstart/">Quickstart</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../image_catalog/">Image Catalog</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../bootstrap/">Bootstrap</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../database_import/">Importing Postgres databases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../security/">Security</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../instance_manager/">Postgres instance manager</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../scheduling/">Scheduling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../resource_management/">Resource management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failure_modes/">Failure Modes</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../rolling_update/">Rolling Updates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replication/">Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logical_replication/">Logical Replication</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../backup/">Backup</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../wal_archiving/">WAL archiving</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../recovery/">Recovery</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../service_management/">Service Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgresql_conf/">PostgreSQL Configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_role_management/">PostgreSQL Role Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_database_management/">PostgreSQL Database Management</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../tablespaces/">Tablespaces</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_conf/">Operator configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cluster_conf/">Instance pod configuration</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../storage/">Storage</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../labels_annotations/">Labels and annotations</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../monitoring/">Monitoring</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../logging/">Logging</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../certificates/">Certificates</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../ssl_connections/">Client TLS/SSL connections</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../applications/">Connecting from an application</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../connection_pooling/">Connection pooling</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../replica_cluster/">Replica clusters</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubernetes_upgrade/">Kubernetes Upgrade and Maintenance</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgres_upgrades/">PostgreSQL Upgrades</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../kubectl-plugin/">Kubectl Plugin</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../failover/">Automated failover</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../troubleshooting/">Troubleshooting</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../fencing/">Fencing</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../declarative_hibernation/">Declarative hibernation</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../postgis/">PostGIS</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../e2e/">End-to-End Tests</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../container_images/">Container Image Requirements</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../operator_capability_levels/">Operator capability levels</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../controller/">Custom Pod Controller</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../samples/">Examples</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../networking/">Networking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../benchmarking/">Benchmarking</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../faq/">Frequently Asked Questions (FAQ)</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../cloudnative-pg.v1/">API Reference</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../supported_releases/">Supported releases</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../../preview_version/">Preview Versions</a>
+                </li>
+              </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../">Release notes</a>
+                </li>
+              </ul>
+              <p class="caption"><span class="caption-text">CNCF Projects Integrations</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/external-secrets/">External Secrets</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../cncf-projects/cilium/">Cilium</a>
+                  </li>
+              </ul>
+              <p class="caption"><span class="caption-text">Appendixes</span></p>
+              <ul>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
+                  </li>
+              </ul>
+      </div>
+    </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
+      <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../..">CloudNativePG v1.27.0-rc1</a>
+        
+      </nav>
+      <div class="wy-nav-content">
+        <div class="rst-content"><div role="navigation" aria-label="breadcrumbs navigation">
+  <ul class="wy-breadcrumbs">
+    <li><a href="../.." class="icon icon-home" aria-label="Docs"></a></li>
+      <li class="breadcrumb-item active">Release notes for CloudNativePG 1.27</li>
+    <li class="wy-breadcrumbs-aside">
+    </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+            <div class="section" itemprop="articleBody">
+              
+                <h1 id="release-notes-for-cloudnativepg-127">Release notes for CloudNativePG 1.27</h1>
+<p>History of user-visible changes in the 1.27 minor release of CloudNativePG.</p>
+<p>For a complete list of changes, please refer to the
+<a href="https://github.com/cloudnative-pg/cloudnative-pg/commits/release-1.27">commits</a>
+on the release branch in GitHub.</p>
+<h2 id="version-1270-rc1">Version 1.27.0-rc1</h2>
+<p><strong>Release date:</strong> Jul 29, 2025</p>
+<h3 id="important-changes">Important changes:</h3>
+<ul>
+<li>A change in the default behavior of the <a href="instance_manager.md#liveness-probe">liveness probe</a>,
+  now enforcing the <a href="instance_manager.md#primary-isolation">shutdown of an isolated primary</a>
+  within the <code>livenessProbeTimeout</code> (30 seconds), will require a restart of your pods.</li>
+</ul>
+<h3 id="features">Features:</h3>
+<ul>
+<li>
+<p><strong>Dynamic loading of PostgreSQL extensions</strong>: Introduced the
+  <code>.spec.postgresql.extensions</code> stanza for mounting PostgreSQL extensions,
+  packaged as OCI-compliant container images, as read-only and immutable volumes
+  inside instance pods. This allows dynamic extension management without
+  rebuilding base images.
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7991">#7991</a>).</p>
+</li>
+<li>
+<p><strong>Logical decoding slot synchronization in HA clusters</strong>: Added the
+  <code>synchronizeLogicalDecoding</code> field under
+  <code>spec.replicationSlots.highAvailability</code> to enable automatic synchronization of
+  logical decoding slots across high-availability clusters, ensuring logical
+  replication subscribers continue seamlessly after a publisher failover
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7931">#7931</a>).</p>
+</li>
+<li>
+<p><strong>Primary Isolation Check</strong>: Promoted to stable the liveness pinger
+  experimental feature introduced in 1.26, adding the
+  <code>.spec.probes.liveness.isolationCheck</code> section to enable primary isolation
+  checks in the liveness probe by default. This improves the detection and
+  handling of primary connectivity issues in Kubernetes environments
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7845">#7845</a>).</p>
+</li>
+</ul>
+<h3 id="enhancements">Enhancements:</h3>
+<!-- TODO: add to 1.27.0 when the fix is available
+- Enabled simultaneous image and configuration changes, allowing you to update
+  the container image (including PostgreSQL version or extensions) and
+  PostgreSQL configuration settings in the same operation. The operator first
+  applies the image change, followed by the configuration changes in a subsequent
+  rollout, ensuring safe and consistent cluster updates
+  ([#8115](https://github.com/cloudnative-pg/cloudnative-pg/pull/8115)).
+-->
+<ul>
+<li>
+<p>Introduced an opt-in experimental feature that enables quorum-based failover
+  to improve safety and data durability during failover events. This feature,
+  also called failover quorum, can be activated via the
+  <code>alpha.cnpg.io/failoverQuorum</code> annotation.
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7572">#7572</a>).</p>
+</li>
+<li>
+<p>Added support for user maps for predefined users such as <code>streaming_replica</code>,
+  allowing the use of self-managed client certificates with different Common
+  Names in environments with strict policies or shared CAs, while still enabling
+  replicas to join clusters using the <code>streaming_replica</code> role
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7725">#7725</a>).</p>
+</li>
+<li>
+<p>Added a new <code>PhaseFailurePlugin</code> phase in the <code>Cluster</code> status to improve
+  observability of plugin-related failures
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7988">#7988</a>).</p>
+</li>
+<li>
+<p>Made the <code>Backup.spec</code> field immutable after creation, ensuring consistency
+  and predictability in backup operations
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7904">#7904</a>).</p>
+</li>
+<li>
+<p>Added <code>fqdn-uri</code> and <code>fqdn-jdbc-uri</code> fields in the user secret to simplify
+  the retrieval of fully qualified domain name-based connection strings
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7852">#7852</a>).</p>
+</li>
+<li>
+<p>CNPG-I:</p>
+<ul>
+<li>
+<p>Added <code>Postgres</code> interface support to the CNPG-I operator, continuing the
+  transition toward a plugin-based architecture
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/7179">#7179</a>).</p>
+</li>
+<li>
+<p>Added <code>metrics</code> capabilities to the CNPG-I instance webserver, enabling
+  metrics exposure directly from the instance for better observability
+  (<a href="https://github.com/cloudnative-pg/cloudnative-pg/pull/8033">#8033</a>).</p>
+</li>
+</ul>
+</li>
+</ul>
+<h3 id="supported-versions">Supported versions</h3>
+<ul>
+<li>Kubernetes 1.33, 1.32, and 1.31</li>
+<li>PostgreSQL 17, 16, 15, 14, and 13<ul>
+<li>PostgreSQL 17.5 is the default image</li>
+<li>PostgreSQL 13 support ends on November 12, 2025</li>
+</ul>
+</li>
+</ul>
+              
+            </div>
+          </div><footer>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <!-- Copyright etc -->
+      <p>Copyright © CloudNativePG a Series of LF Projects, LLC</p>
+  </div>
+
+  Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>.
+</footer>
+          
+        </div>
+      </div>
+
+    </section>
+
+  </div>
+
+  <div class="rst-versions" role="note" aria-label="Versions">
+  <span class="rst-current-version" data-toggle="rst-current-version">
+    
+    
+    
+  </span>
+</div>
+    <script src="../../js/jquery-3.6.0.min.js"></script>
+    <script>var base_url = "../..";</script>
+    <script src="../../js/theme_extra.js"></script>
+    <script src="../../js/theme.js"></script>
+      <script src="../../search/main.js"></script>
+    <script>
+        jQuery(function () {
+            SphinxRtdTheme.Navigation.enable(true);
+        });
+    </script>
+
+</body>
+</html>
diff --git a/assets/documentation/preview/replica_cluster/index.html b/assets/documentation/preview/replica_cluster/index.html
index 1e783a93c..f99440bec 100644
--- a/assets/documentation/preview/replica_cluster/index.html
+++ b/assets/documentation/preview/replica_cluster/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Replica clusters - CloudNativePG v1.26.0-rc3</title>
+    <title>Replica clusters - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -276,6 +268,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -320,10 +316,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -333,7 +335,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -352,13 +354,6 @@
                 <h1 id="replica-clusters">Replica clusters</h1>
 <!-- SPDX-License-Identifier: CC-BY-4.0 -->
 
-<div class="admonition warning">
-<p class="admonition-title">Warning</p>
-<p>With the deprecation of native Barman Cloud support in CloudNativePG in
-favor of the Barman Cloud Plugin, this page—and the backup and recovery
-documentation—may undergo changes before the official release of version
-1.26.0.</p>
-</div>
 <p>A replica cluster is a CloudNativePG <code>Cluster</code> resource designed to
 replicate data from another PostgreSQL instance, ideally also managed by
 CloudNativePG.</p>
@@ -436,25 +431,29 @@ <h3 id="configuring-replication">Configuring Replication</h3>
    seamless data transfer.</li>
 <li><strong>WAL Archive</strong>: Use the WAL (Write-Ahead Logging) archive stored in an
    object store. WAL files are regularly transferred from the source cluster to
-   the object store, from where the <code>barman-cloud-wal-restore</code> utility retrieves
-   them for the replica cluster.</li>
+   the object store, from where a CNPG-I plugin like <a href="https://cloudnative-pg.io/plugin-barman-cloud/">Barman Cloud</a>
+   retrieves them for the replica cluster via the <code>restore_command</code>.</li>
 <li><strong>Hybrid Approach</strong>: Combine both streaming replication and WAL archive
    methods. PostgreSQL can manage and switch between these two approaches as
    needed to ensure data consistency and availability.</li>
 </ol>
 <h3 id="defining-an-external-cluster">Defining an External Cluster</h3>
 <p>When configuring the external cluster, you have the following options:</p>
-<!-- TODO: Change before 1.26.0 -->
-
 <ul>
-<li><strong><code>barmanObjectStore</code> section</strong>:<ul>
-<li>Enables use of the WAL archive, with CloudNativePG automatically setting
-  the <code>restore_command</code> in the designated primary instance.</li>
-<li>Allows bootstrapping the replica cluster from an object store using the
-  <code>recovery</code> section if volume snapshots are not feasible.</li>
+<li>
+<p><strong><code>plugin</code> section</strong>:</p>
+<ul>
+<li>Enables bootstrapping the replica cluster using a <a href="https://github.com/cloudnative-pg/cnpg-i">CNPG-I</a>
+  plugin that support the
+  <a href="https://github.com/cloudnative-pg/cnpg-i/blob/main/docs/protocol.md#restore_job-proto"><code>restore_job</code></a>
+  and the <a href="https://github.com/cloudnative-pg/cnpg-i/blob/main/docs/protocol.md#wal-proto"><code>wal</code></a> protocols.</li>
+<li>CloudNativePG supports the <a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/usage/#restoring-a-cluster">Barman Cloud Plugin</a>
+  to allow bootstrapping the replica cluster from an object store.</li>
 </ul>
 </li>
-<li><strong><code>connectionParameters</code> section</strong>:<ul>
+<li>
+<p><strong><code>connectionParameters</code> section</strong>:</p>
+<ul>
 <li>Enables bootstrapping the replica cluster via streaming replication using
   the <code>pg_basebackup</code> section.</li>
 <li>CloudNativePG automatically sets the <code>primary_conninfo</code> option in the
@@ -463,6 +462,13 @@ <h3 id="defining-an-external-cluster">Defining an External Cluster</h3>
 </ul>
 </li>
 </ul>
+<p>You still have access to the <strong><code>barmanObjectStore</code> section</strong>, although deprecated:</p>
+<ul>
+<li>Enables use of the WAL archive, with CloudNativePG automatically setting
+  the <code>restore_command</code> in the designated primary instance.</li>
+<li>Allows bootstrapping the replica cluster from an object store using the
+ <code>recovery</code> section if volume snapshots are not feasible.</li>
+</ul>
 <h3 id="backup-and-symmetric-architectures">Backup and Symmetric Architectures</h3>
 <p>The replica cluster can perform backups to a reserved object store from the
 designated primary, supporting symmetric architectures in a distributed
@@ -518,10 +524,6 @@ <h2 id="setting-up-a-replica-cluster">Setting Up a Replica Cluster</h2>
 <p>Both the Distributed Topology and the Standalone Replica Cluster strategies for
 continuous recovery are thoroughly explained below.</p>
 <h2 id="distributed-topology">Distributed Topology</h2>
-<div class="admonition important">
-<p class="admonition-title">Important</p>
-<p>The Distributed Topology strategy was introduced in CloudNativePG 1.24.</p>
-</div>
 <h3 id="planning-for-a-distributed-postgresql-database">Planning for a Distributed PostgreSQL Database</h3>
 <p>As Dwight Eisenhower famously said, "Planning is everything", and this holds
 true for designing PostgreSQL architectures in Kubernetes.</p>
@@ -542,21 +544,29 @@ <h3 id="planning-for-a-distributed-postgresql-database">Planning for a Distribut
 <code>Cluster</code> named <code>cluster-eu-central</code>, installed in the Central European
 Kubernetes cluster. Initially, <code>cluster-eu-central</code> functions as a replica
 cluster. Following a symmetric approach, it also has a local object store for
-continuous backup, which needs to be read by <code>cluster-eu-south</code>. The recovery
-in this setup relies solely on WAL shipping, with no streaming connection
-between the two clusters.</p>
+continuous backup, which needs to be read by <code>cluster-eu-south</code>.</p>
+<p>In this example, recovery is performed solely through WAL shipping, without any
+streaming replication between the two clusters. However, you can configure the
+setup to use streaming replication alone or adopt a hybrid approach—streaming
+replication with WAL shipping as a fallback—as described in the
+<a href="./#defining-an-external-cluster">“Configuring replication”</a>
+section.</p>
 <p>Here’s how you would configure the <code>externalClusters</code> section for both
-<code>Cluster</code> resources:</p>
+<code>Cluster</code> resources, relying on Barman Cloud Plugin for the object store:</p>
 <pre><code class="language-yaml"># Distributed topology configuration
 externalClusters:
   - name: cluster-eu-south
-    barmanObjectStore:
-      destinationPath: s3://cluster-eu-south/
-      # Additional configuration
+    plugin:
+      name: barman-cloud.cloudnative-pg.io
+      parameters:
+        barmanObjectName: cluster-eu-south
+        serverName: cluster-eu-south
   - name: cluster-eu-central
-    barmanObjectStore:
-      destinationPath: s3://cluster-eu-central/
-      # Additional configuration
+    plugin:
+      name: barman-cloud.cloudnative-pg.io
+      parameters:
+        barmanObjectName: cluster-eu-central
+        serverName: cluster-eu-central
 </code></pre>
 <p>The <code>.spec.replica</code> stanza for the <code>cluster-eu-south</code> PostgreSQL primary
 <code>Cluster</code> should be configured as follows:</p>
@@ -799,10 +809,12 @@ <h3 id="example-of-standalone-replica-cluster-from-an-object-store">Example of S
 a backup of the source cluster has been created already.</p>
 <pre><code class="language-yaml">  externalClusters:
   - name: &lt;MAIN-CLUSTER&gt;
-    barmanObjectStore:
-      destinationPath: s3://backups/
-      endpointURL: http://minio:9000
-      s3Credentials:
+    # Example with Barman Cloud Plugin
+    plugin:
+      name: barman-cloud.cloudnative-pg.io
+      parameters:
+        barmanObjectName: &lt;MAIN-CLUSTER&gt;
+        serverName: &lt;MAIN-CLUSTER&gt;
         …
     connectionParameters:
       host: &lt;MAIN-CLUSTER&gt;-rw.default.svc
diff --git a/assets/documentation/preview/replication/index.html b/assets/documentation/preview/replication/index.html
index 9b69cff0c..7d9965318 100644
--- a/assets/documentation/preview/replication/index.html
+++ b/assets/documentation/preview/replication/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Replication - CloudNativePG v1.26.0-rc3</title>
+    <title>Replication - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -155,6 +155,14 @@
     </li>
     <li class="toctree-l3"><a class="reference internal" href="#synchronization-frequency">Synchronization frequency</a>
     </li>
+    <li class="toctree-l3"><a class="reference internal" href="#logical-decoding-slot-synchronization">Logical Decoding Slot Synchronization</a>
+        <ul>
+    <li class="toctree-l4"><a class="reference internal" href="#behavior-on-postgresql-17-and-later">Behavior on PostgreSQL 17 and later</a>
+    </li>
+    <li class="toctree-l4"><a class="reference internal" href="#behavior-on-postgresql-16-and-earlier">Behavior on PostgreSQL 16 and earlier</a>
+    </li>
+        </ul>
+    </li>
     <li class="toctree-l3"><a class="reference internal" href="#capping-the-wal-size-retained-for-replication-slots">Capping the WAL size retained for replication slots</a>
     </li>
     <li class="toctree-l3"><a class="reference internal" href="#monitoring-replication-slots">Monitoring replication slots</a>
@@ -172,18 +180,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -292,6 +292,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -336,10 +340,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -349,7 +359,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -463,8 +473,8 @@ <h2 id="streaming-replication-support">Streaming replication support</h2>
 authentication for the <code>streaming_replica</code> user - as highlighted by the
 following excerpt taken from <code>pg_hba.conf</code>:</p>
 <pre><code># Require client certificate authentication for the streaming_replica user
-hostssl postgres streaming_replica all cert
-hostssl replication streaming_replica all cert
+hostssl postgres streaming_replica all cert map=cnpg_streaming_replica
+hostssl replication streaming_replica all cert map=cnpg_streaming_replica
 </code></pre>
 <div class="admonition seealso">
 <p class="admonition-title">Certificates</p>
@@ -500,6 +510,12 @@ <h2 id="synchronous-replication">Synchronous Replication</h2>
 details on managing this behavior, refer to the <a href="#data-durability-and-synchronous-replication">Data Durability and Synchronous Replication</a>
 section.</p>
 </div>
+<div class="admonition important">
+<p class="admonition-title">Important</p>
+<p>The <a href="../failover/#failover-quorum-quorum-based-failover"><em>failover quorum</em> feature</a> (experimental)
+can be used alongside synchronous replication to improve data durability
+and safety during failover events.</p>
+</div>
 <p>Direct configuration of the <code>synchronous_standby_names</code> option is not
 permitted. However, CloudNativePG automatically populates this option with the
 names of local pods, while also allowing customization to extend synchronous
@@ -1024,6 +1040,60 @@ <h3 id="synchronization-frequency">Synchronization frequency</h3>
   storage:
     size: 1Gi
 </code></pre>
+<h3 id="logical-decoding-slot-synchronization">Logical Decoding Slot Synchronization</h3>
+<p>CloudNativePG can synchronize logical decoding (replication) slots across all
+nodes in a high-availability cluster, ensuring seamless continuation of logical
+replication after a failover or switchover. This feature is disabled by
+default, and enabling it requires two steps.</p>
+<p>The first step is to enable logical decoding slot synchronization:</p>
+<pre><code class="language-yaml">  # ...
+  replicationSlots:
+    highAvailability:
+      synchronizeLogicalDecoding: true
+</code></pre>
+<p>The second step involves configuring PostgreSQL parameters: the required
+configuration depends on your PostgreSQL version, as explained below.</p>
+<p>When enabled, the operator automatically manages logical decoding slot states
+during failover and switchover, preventing slot invalidation and avoiding data
+loss for logical replication clients.</p>
+<h4 id="behavior-on-postgresql-17-and-later">Behavior on PostgreSQL 17 and later</h4>
+<p>For PostgreSQL 17 and newer, CloudNativePG transparently manages the
+<a href="https://www.postgresql.org/docs/current/runtime-config-replication.html#GUC-SYNCHRONIZED-STANDBY-SLOTS"><code>synchronized_standby_slots</code> parameter</a>.</p>
+<p>You must enable both <code>sync_replication_slots</code> and <code>hot_standby_feedback</code> in
+your PostgreSQL configuration:</p>
+<pre><code class="language-yaml"># ...
+postgresql:
+  parameters:
+    # ...
+    hot_standby_feedback: 'on'
+    sync_replication_slots: 'on'
+</code></pre>
+<p>Additionally, you must create the logical replication <code>Subscription</code> with the
+<code>failover</code> option enabled, for example:</p>
+<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
+kind: Subscription
+# ...
+spec:
+# ...
+  parameters:
+    failover: 'true'
+# ...
+</code></pre>
+<p>When configured, logical WAL sender processes send decoded changes to plugins
+only after the specified replication slots confirm receiving and flushing the
+relevant WAL, ensuring that:</p>
+<ul>
+<li>logical replication slots do not consume changes until they are safely
+  received by the replicas of the publisher, and</li>
+<li>logical replication clients can seamlessly reconnect to a promoted standby
+  without missing data after failover.</li>
+</ul>
+<p>For more details on logical replication slot synchronization, see the
+PostgreSQL documentation on <a href="https://www.postgresql.org/docs/current/logical-replication-failover.html">Logical Replication Failover</a>.</p>
+<h4 id="behavior-on-postgresql-16-and-earlier">Behavior on PostgreSQL 16 and earlier</h4>
+<p>For PostgreSQL 16 and older versions, CloudNativePG uses the
+<a href="https://github.com/EnterpriseDB/pg_failover_slots"><code>pg_failover_slots</code> extension</a>
+to maintain synchronization of logical replication slots across failovers.</p>
 <h3 id="capping-the-wal-size-retained-for-replication-slots">Capping the WAL size retained for replication slots</h3>
 <p>When replication slots is enabled, you might end up running out of disk space
 due to PostgreSQL trying to retain WAL files requested by a replication slot.
diff --git a/assets/documentation/preview/resource_management/index.html b/assets/documentation/preview/resource_management/index.html
index 2f3554ede..3a40f65ad 100644
--- a/assets/documentation/preview/resource_management/index.html
+++ b/assets/documentation/preview/resource_management/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Resource management - CloudNativePG v1.26.0-rc3</title>
+    <title>Resource management - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -114,18 +114,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -234,6 +226,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -278,10 +274,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -291,7 +293,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -341,13 +343,26 @@ <h1 id="resource-management">Resource management</h1>
 <p>For more details, please refer to the <a href="https://kubernetes.io/docs/tasks/configure-pod-container/quality-service-pod/#qos-classes">"Configure Quality of Service for Pods"</a>
 section in the Kubernetes documentation.</p>
 <p>For a PostgreSQL workload it is recommended to set a "Guaranteed" QoS.</p>
+<div class="admonition info">
+<p class="admonition-title">Info</p>
+<p>When the quality of service is set to "Guaranteed", CloudNativePG sets the
+<code>PG_OOM_ADJUST_VALUE</code> for the <code>postmaster</code> process to <code>0</code>, in line with the
+<a href="https://www.postgresql.org/docs/current/kernel-resources.html#LINUX-MEMORY-OVERCOMMIT">PostgreSQL documentation</a>.
+This allows the <code>postmaster</code> to retain its low Out-Of-Memory (OOM) score of
+<code>-997</code>, while its child processes run with an OOM score adjustment of <code>0</code>. As a
+result, if the OOM killer is triggered, it will terminate the child processes
+before the <code>postmaster</code>. This behavior helps keep the PostgreSQL instance
+alive for as long as possible and enables a clean shutdown procedure in the
+event of an eviction.</p>
+</div>
 <p>To avoid resources related issues in Kubernetes, we can refer to the best practices for "out of resource" handling
 while creating a cluster:</p>
 <ul>
 <li>Specify your required values for memory and CPU in the resources section of the manifest file.
-   This way, you can avoid the <code>OOM Killed</code> (where "OOM" stands for Out Of Memory) and <code>CPU throttle</code> or any other
+   This way, you can avoid the <code>OOM Killed</code> and <code>CPU throttle</code> or any other
    resource-related issues on running instances.</li>
-<li>For your cluster's pods to get assigned to the "Guaranteed" QoS class, you must set limits and requests
+<li>For your cluster's pods to get assigned to the "Guaranteed" QoS class, you
+   must set limits and requests
    for both memory and CPU to the same value.</li>
 <li>Specify your required PostgreSQL memory parameters consistently with the pod resources (as you would do
    in a VM or physical machine scenario - see below).</li>
diff --git a/assets/documentation/preview/rolling_update/index.html b/assets/documentation/preview/rolling_update/index.html
index 8993d3d9e..9112fb7ca 100644
--- a/assets/documentation/preview/rolling_update/index.html
+++ b/assets/documentation/preview/rolling_update/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Rolling Updates - CloudNativePG v1.26.0-rc3</title>
+    <title>Rolling Updates - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -118,18 +118,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -238,6 +230,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -282,10 +278,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -295,7 +297,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/samples/cluster-example-logical-destination.yaml b/assets/documentation/preview/samples/cluster-example-logical-destination.yaml
index e8a2f574f..abaf006ec 100644
--- a/assets/documentation/preview/samples/cluster-example-logical-destination.yaml
+++ b/assets/documentation/preview/samples/cluster-example-logical-destination.yaml
@@ -39,3 +39,5 @@ spec:
   dbname: app
   publicationName: pub
   externalClusterName: cluster-example
+  parameters:
+    failover: 'true'
diff --git a/assets/documentation/preview/samples/cluster-example-logical-source.yaml b/assets/documentation/preview/samples/cluster-example-logical-source.yaml
index 95bac8cd8..39eb64bdb 100644
--- a/assets/documentation/preview/samples/cluster-example-logical-source.yaml
+++ b/assets/documentation/preview/samples/cluster-example-logical-source.yaml
@@ -3,9 +3,9 @@ kind: Cluster
 metadata:
   name: cluster-example
 spec:
-  instances: 1
+  instances: 3
 
-  imageName: ghcr.io/cloudnative-pg/postgresql:16
+  imageName: ghcr.io/cloudnative-pg/postgresql:17
 
   storage:
     size: 1Gi
@@ -25,11 +25,21 @@ spec:
         - INSERT INTO another_schema.numbers_three (m) (SELECT generate_series(1,10000))
         - ALTER TABLE another_schema.numbers_three OWNER TO app
 
+  replicationSlots:
+    highAvailability:
+      synchronizeLogicalDecoding: true
+
   managed:
     roles:
       - name: app
         login: true
         replication: true
+
+  postgresql:
+    parameters:
+      hot_standby_feedback: 'on'
+      sync_replication_slots: 'on'
+
 ---
 apiVersion: postgresql.cnpg.io/v1
 kind: Publication
diff --git a/assets/documentation/preview/samples/cluster-example-syncreplicas-quorum.yaml b/assets/documentation/preview/samples/cluster-example-syncreplicas-quorum.yaml
new file mode 100644
index 000000000..ba3b6e922
--- /dev/null
+++ b/assets/documentation/preview/samples/cluster-example-syncreplicas-quorum.yaml
@@ -0,0 +1,16 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: cluster-example
+  annotations:
+    alpha.cnpg.io/failoverQuorum: "true"
+spec:
+  instances: 3
+
+  postgresql:
+    synchronous:
+      method: any
+      number: 1
+
+  storage:
+    size: 1G
diff --git a/assets/documentation/preview/samples/cluster-example.yaml b/assets/documentation/preview/samples/cluster-example.yaml
index 924f62bf2..2ca0d8d71 100644
--- a/assets/documentation/preview/samples/cluster-example.yaml
+++ b/assets/documentation/preview/samples/cluster-example.yaml
@@ -4,7 +4,6 @@ metadata:
   name: cluster-example
 spec:
   instances: 3
-  imageName: ghcr.io/cloudnative-pg/postgresql:13
   
   storage:
     size: 1Gi
diff --git a/assets/documentation/preview/samples/index.html b/assets/documentation/preview/samples/index.html
index e2c858e39..ef2b2a180 100644
--- a/assets/documentation/preview/samples/index.html
+++ b/assets/documentation/preview/samples/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Examples - CloudNativePG v1.26.0-rc3</title>
+    <title>Examples - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -298,10 +294,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -311,7 +313,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/scheduling/index.html b/assets/documentation/preview/scheduling/index.html
index 8cbdc32ce..5d0818ccf 100644
--- a/assets/documentation/preview/scheduling/index.html
+++ b/assets/documentation/preview/scheduling/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Scheduling - CloudNativePG v1.26.0-rc3</title>
+    <title>Scheduling - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -132,18 +132,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -252,6 +244,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -296,10 +292,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -309,7 +311,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/search.html b/assets/documentation/preview/search.html
index 8efb6ae69..8c45ccd9e 100644
--- a/assets/documentation/preview/search.html
+++ b/assets/documentation/preview/search.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="./img/favicon.ico" />
-    <title>CloudNativePG v1.26.0-rc3</title>
+    <title>CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="./css/theme.css" />
     <link rel="stylesheet" href="./css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -24,7 +24,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href="./." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href="./." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="./search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -105,18 +105,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="./backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="./backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="./wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="./backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="./recovery/">Recovery</a>
                 </li>
@@ -225,6 +217,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="./container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="./imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="./operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -269,10 +265,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="./cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="./cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="./appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="./appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="./appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="./appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -282,7 +284,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="./.">CloudNativePG v1.26.0-rc3</a>
+          <a href="./.">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/search/search_index.json b/assets/documentation/preview/search/search_index.json
index b6f57c521..9c42ee35b 100644
--- a/assets/documentation/preview/search/search_index.json
+++ b/assets/documentation/preview/search/search_index.json
@@ -1 +1 @@
-{"config":{"indexing":"full","lang":["en"],"min_search_length":3,"prebuild_index":false,"separator":"[\\s\\-]+"},"docs":[{"location":"","text":"CloudNativePG CloudNativePG (CNPG) is an open-source operator designed to manage PostgreSQL workloads on any supported Kubernetes cluster. It fosters cloud-neutrality through seamless deployment in private, public, hybrid, and multi-cloud environments via its distributed topology feature. Built around DevOps principles, CloudNativePG embraces declarative configuration and immutable infrastructure, ensuring reliability and automation in database management. At its core, CloudNativePG introduces a custom Kubernetes resource called Cluster , representing a PostgreSQL cluster with: A single primary instance for write operations. Optional replicas for High Availability and read scaling. These instances reside within a Kubernetes namespace, allowing applications to connect seamlessly using operator-managed services. Failovers and switchovers occur transparently, eliminating the need for manual intervention. For applications inside the Kubernetes cluster, CNPG provides a microservice database approach, enabling co-location of PostgreSQL clusters and applications in the same namespace for optimized access. For applications outside the cluster, CNPG offers flexible connectivity through service templates and LoadBalancer services for direct TCP exposure. Additionally, web applications can take advantage of the native connection pooler based on PgBouncer. CloudNativePG was originally built by EDB , then released open source under Apache License 2.0. The source code repository is in GitHub . Note Based on the Operator Capability Levels model , users can expect a \"Level V - Auto Pilot\" subset of capabilities from the CloudNativePG Operator. Supported Kubernetes distributions Each minor release of CloudNativePG is designed to work with a range of Kubernetes versions, usually the ones supported by the CNCF at the time the minor version was first released. Please refer to the \"Supported releases\" page for details. Container images The CloudNativePG community maintains container images for both the operator and PostgreSQL (the operand). Operator The CloudNativePG operator container images are available on the cloudnative-pg project's GitHub Container Registry in three different flavors: Debian 12 distroless Red Hat UBI 9 micro (suffix -ubi9 ) Red Hat UBI images are primarily intended for OLM consumption. All container images are signed and include SBOM and provenance attestations, provided separately for each architecture. Operands The PostgreSQL operand container images are available for all PGDG supported versions of PostgreSQL , across multiple architectures, directly from the postgres-containers project's GitHub Container Registry . All container images are signed and include SBOM and provenance attestations, provided separately for each architecture. Weekly jobs ensure that critical vulnerabilities (CVEs) in the entire stack are promptly addressed. Additionally, the community provides images for the PostGIS extension . Main features Direct integration with the Kubernetes API server for High Availability, eliminating the need for external tools. Self-healing capabilities, including: Automated failover by promoting the most aligned replica. Automatic recreation of failed replicas. Planned switchover of the primary instance by promoting a selected replica. Declarative management of key PostgreSQL configurations, including: PostgreSQL settings. Roles, users, and groups. Databases, extensions, and schemas. Tablespaces (including temporary tablespaces). Flexible instance definition, supporting any number of instances (minimum 1 primary server). Scale-up/down capabilities to dynamically adjust cluster size. Read-Write and Read-Only Services, ensuring applications connect correctly: Read-Write Service : Routes connections to the primary server. Read-Only Service : Distributes connections among replicas for read workloads. Support for quorum-based and priority-based PostgreSQL Synchronous Replication. Replica clusters enabling PostgreSQL distributed topologies across multiple Kubernetes clusters (private, public, hybrid, and multi-cloud). Delayed Replica clusters for point-in-time access to historical data. Persistent volume management, including: Support for Local Persistent Volumes with PVC templates. Reuse of Persistent Volumes storage in Pods. Separate volumes for WAL files and tablespaces. Backup and recovery options, including: Integration with the Barman Cloud plugin for continuous online backup via WAL archiving to AWS S3, S3-compatible services, Azure Blob Storage, and Google Cloud Storage, with support for retention policies based on a configurable recovery window. Backups using volume snapshots (where supported by storage classes). Full and Point-In-Time recovery from volume snapshots or object stores (via Barman Cloud plugin). Backup from standby replicas to reduce primary workload impact. Offline in-place major upgrades of PostgreSQL Offline and online import of PostgreSQL databases, including major upgrades: Offline Import : Direct restore from existing databases. Online Import : PostgreSQL native logical replication via the Subscription resource. High Availability physical replication slots, including synchronization of user-defined replication slots. Parallel WAL archiving and restore, ensuring high-performance data synchronization in high-write environments. TLS support, including: Secure connections and client certificate authentication. Custom TLS certificates (integrated with cert-manager ). Startup and readiness probes, including replica probes based on desired lag from the primary. Declarative rolling updates for: PostgreSQL minor versions. Operator upgrades (in-place or rolling updates). Standard output logging of PostgreSQL error messages in JSON format for easier integration with log aggregation tools. Prometheus-compatible metrics exporter ( metrics port 9187) for custom monitoring. cnpg plugin for kubectl to simplify cluster operations. Cluster hibernation for resource efficiency in inactive states. Fencing of PostgreSQL clusters (full cluster or subset) to isolate instances when needed. Connection pooling with PgBouncer for improved database efficiency. OLM (Operator Lifecycle Manager) installation support for streamlined deployments. Multi-arch container images, including Software Bill of Materials (SBOM) and provenance attestations for security compliance. Info CloudNativePG does not use StatefulSet s for managing data persistence. Instead, it directly manages Persistent Volume Claims (PVCs). See \"Custom Pod Controller\" for more details. About this guide Follow the instructions in the \"Quickstart\" to test CloudNativePG on a local Kubernetes cluster using Kind, or Minikube. In case you are not familiar with some basic terminology on Kubernetes and PostgreSQL, please consult the \"Before you start\" section . The CloudNativePG documentation is licensed under a Creative Commons Attribution 4.0 International License. Postgres, PostgreSQL, and the Slonik Logo are trademarks or registered trademarks of the PostgreSQL Community Association of Canada, and used with their permission. CloudNativePG is a Cloud Native Computing Foundation Sandbox project .","title":"CloudNativePG"},{"location":"#cloudnativepg","text":"CloudNativePG (CNPG) is an open-source operator designed to manage PostgreSQL workloads on any supported Kubernetes cluster. It fosters cloud-neutrality through seamless deployment in private, public, hybrid, and multi-cloud environments via its distributed topology feature. Built around DevOps principles, CloudNativePG embraces declarative configuration and immutable infrastructure, ensuring reliability and automation in database management. At its core, CloudNativePG introduces a custom Kubernetes resource called Cluster , representing a PostgreSQL cluster with: A single primary instance for write operations. Optional replicas for High Availability and read scaling. These instances reside within a Kubernetes namespace, allowing applications to connect seamlessly using operator-managed services. Failovers and switchovers occur transparently, eliminating the need for manual intervention. For applications inside the Kubernetes cluster, CNPG provides a microservice database approach, enabling co-location of PostgreSQL clusters and applications in the same namespace for optimized access. For applications outside the cluster, CNPG offers flexible connectivity through service templates and LoadBalancer services for direct TCP exposure. Additionally, web applications can take advantage of the native connection pooler based on PgBouncer. CloudNativePG was originally built by EDB , then released open source under Apache License 2.0. The source code repository is in GitHub . Note Based on the Operator Capability Levels model , users can expect a \"Level V - Auto Pilot\" subset of capabilities from the CloudNativePG Operator.","title":"CloudNativePG"},{"location":"#supported-kubernetes-distributions","text":"Each minor release of CloudNativePG is designed to work with a range of Kubernetes versions, usually the ones supported by the CNCF at the time the minor version was first released. Please refer to the \"Supported releases\" page for details.","title":"Supported Kubernetes distributions"},{"location":"#container-images","text":"The CloudNativePG community maintains container images for both the operator and PostgreSQL (the operand).","title":"Container images"},{"location":"#operator","text":"The CloudNativePG operator container images are available on the cloudnative-pg project's GitHub Container Registry in three different flavors: Debian 12 distroless Red Hat UBI 9 micro (suffix -ubi9 ) Red Hat UBI images are primarily intended for OLM consumption. All container images are signed and include SBOM and provenance attestations, provided separately for each architecture.","title":"Operator"},{"location":"#operands","text":"The PostgreSQL operand container images are available for all PGDG supported versions of PostgreSQL , across multiple architectures, directly from the postgres-containers project's GitHub Container Registry . All container images are signed and include SBOM and provenance attestations, provided separately for each architecture. Weekly jobs ensure that critical vulnerabilities (CVEs) in the entire stack are promptly addressed. Additionally, the community provides images for the PostGIS extension .","title":"Operands"},{"location":"#main-features","text":"Direct integration with the Kubernetes API server for High Availability, eliminating the need for external tools. Self-healing capabilities, including: Automated failover by promoting the most aligned replica. Automatic recreation of failed replicas. Planned switchover of the primary instance by promoting a selected replica. Declarative management of key PostgreSQL configurations, including: PostgreSQL settings. Roles, users, and groups. Databases, extensions, and schemas. Tablespaces (including temporary tablespaces). Flexible instance definition, supporting any number of instances (minimum 1 primary server). Scale-up/down capabilities to dynamically adjust cluster size. Read-Write and Read-Only Services, ensuring applications connect correctly: Read-Write Service : Routes connections to the primary server. Read-Only Service : Distributes connections among replicas for read workloads. Support for quorum-based and priority-based PostgreSQL Synchronous Replication. Replica clusters enabling PostgreSQL distributed topologies across multiple Kubernetes clusters (private, public, hybrid, and multi-cloud). Delayed Replica clusters for point-in-time access to historical data. Persistent volume management, including: Support for Local Persistent Volumes with PVC templates. Reuse of Persistent Volumes storage in Pods. Separate volumes for WAL files and tablespaces. Backup and recovery options, including: Integration with the Barman Cloud plugin for continuous online backup via WAL archiving to AWS S3, S3-compatible services, Azure Blob Storage, and Google Cloud Storage, with support for retention policies based on a configurable recovery window. Backups using volume snapshots (where supported by storage classes). Full and Point-In-Time recovery from volume snapshots or object stores (via Barman Cloud plugin). Backup from standby replicas to reduce primary workload impact. Offline in-place major upgrades of PostgreSQL Offline and online import of PostgreSQL databases, including major upgrades: Offline Import : Direct restore from existing databases. Online Import : PostgreSQL native logical replication via the Subscription resource. High Availability physical replication slots, including synchronization of user-defined replication slots. Parallel WAL archiving and restore, ensuring high-performance data synchronization in high-write environments. TLS support, including: Secure connections and client certificate authentication. Custom TLS certificates (integrated with cert-manager ). Startup and readiness probes, including replica probes based on desired lag from the primary. Declarative rolling updates for: PostgreSQL minor versions. Operator upgrades (in-place or rolling updates). Standard output logging of PostgreSQL error messages in JSON format for easier integration with log aggregation tools. Prometheus-compatible metrics exporter ( metrics port 9187) for custom monitoring. cnpg plugin for kubectl to simplify cluster operations. Cluster hibernation for resource efficiency in inactive states. Fencing of PostgreSQL clusters (full cluster or subset) to isolate instances when needed. Connection pooling with PgBouncer for improved database efficiency. OLM (Operator Lifecycle Manager) installation support for streamlined deployments. Multi-arch container images, including Software Bill of Materials (SBOM) and provenance attestations for security compliance. Info CloudNativePG does not use StatefulSet s for managing data persistence. Instead, it directly manages Persistent Volume Claims (PVCs). See \"Custom Pod Controller\" for more details.","title":"Main features"},{"location":"#about-this-guide","text":"Follow the instructions in the \"Quickstart\" to test CloudNativePG on a local Kubernetes cluster using Kind, or Minikube. In case you are not familiar with some basic terminology on Kubernetes and PostgreSQL, please consult the \"Before you start\" section . The CloudNativePG documentation is licensed under a Creative Commons Attribution 4.0 International License. Postgres, PostgreSQL, and the Slonik Logo are trademarks or registered trademarks of the PostgreSQL Community Association of Canada, and used with their permission. CloudNativePG is a Cloud Native Computing Foundation Sandbox project .","title":"About this guide"},{"location":"applications/","text":"Connecting from an application Applications are supposed to work with the services created by CloudNativePG in the same Kubernetes cluster. For more information on services and how to manage them, please refer to the \"Service management\" section. Hint It is highly recommended using those services in your applications, and avoiding connecting directly to a specific PostgreSQL instance, as the latter can change during the cluster lifetime. You can use these services in your applications through: DNS resolution environment variables For the credentials to connect to PostgreSQL, you can use the secrets generated by the operator. Connection Pooling Please refer to the \"Connection Pooling\" section for information about how to take advantage of PgBouncer as a connection pooler, and create an access layer between your applications and the PostgreSQL clusters. DNS resolution You can use the Kubernetes DNS service to point to a given server. The Kubernetes DNS service is required by the operator. You can do that by using the name of the service if the application is deployed in the same namespace as the PostgreSQL cluster. In case the PostgreSQL cluster resides in a different namespace, you can use the full qualifier: service-name.namespace-name . DNS is the preferred and recommended discovery method. Environment variables If you deploy your application in the same namespace that contains the PostgreSQL cluster, you can also use environment variables to connect to the database. For example, suppose that your PostgreSQL cluster is called pg-database , you can use the following environment variables in your applications: PG_DATABASE_R_SERVICE_HOST : the IP address of the service pointing to all the PostgreSQL instances for read-only workloads PG_DATABASE_RO_SERVICE_HOST : the IP address of the service pointing to all hot-standby replicas of the cluster PG_DATABASE_RW_SERVICE_HOST : the IP address of the service pointing to the primary instance of the cluster Secrets The PostgreSQL operator will generate up to two basic-auth type secrets for every PostgreSQL cluster it deploys: [cluster name]-app (unless you have provided an existing secret through .spec.bootstrap.initdb.secret.name ) [cluster name]-superuser (if .spec.enableSuperuserAccess is set to true and you have not specified a different secret using .spec.superuserSecret ) Each secret contain the following: username password hostname to the RW service port number database name a working .pgpass file uri jdbc-uri The -app credentials are the ones that should be used by applications connecting to the PostgreSQL cluster, and correspond to the user owning the database. The -superuser ones are supposed to be used only for administrative purposes, and correspond to the postgres user. Important Superuser access over the network is disabled by default.","title":"Connecting from an application"},{"location":"applications/#connecting-from-an-application","text":"Applications are supposed to work with the services created by CloudNativePG in the same Kubernetes cluster. For more information on services and how to manage them, please refer to the \"Service management\" section. Hint It is highly recommended using those services in your applications, and avoiding connecting directly to a specific PostgreSQL instance, as the latter can change during the cluster lifetime. You can use these services in your applications through: DNS resolution environment variables For the credentials to connect to PostgreSQL, you can use the secrets generated by the operator. Connection Pooling Please refer to the \"Connection Pooling\" section for information about how to take advantage of PgBouncer as a connection pooler, and create an access layer between your applications and the PostgreSQL clusters.","title":"Connecting from an application"},{"location":"applications/#dns-resolution","text":"You can use the Kubernetes DNS service to point to a given server. The Kubernetes DNS service is required by the operator. You can do that by using the name of the service if the application is deployed in the same namespace as the PostgreSQL cluster. In case the PostgreSQL cluster resides in a different namespace, you can use the full qualifier: service-name.namespace-name . DNS is the preferred and recommended discovery method.","title":"DNS resolution"},{"location":"applications/#environment-variables","text":"If you deploy your application in the same namespace that contains the PostgreSQL cluster, you can also use environment variables to connect to the database. For example, suppose that your PostgreSQL cluster is called pg-database , you can use the following environment variables in your applications: PG_DATABASE_R_SERVICE_HOST : the IP address of the service pointing to all the PostgreSQL instances for read-only workloads PG_DATABASE_RO_SERVICE_HOST : the IP address of the service pointing to all hot-standby replicas of the cluster PG_DATABASE_RW_SERVICE_HOST : the IP address of the service pointing to the primary instance of the cluster","title":"Environment variables"},{"location":"applications/#secrets","text":"The PostgreSQL operator will generate up to two basic-auth type secrets for every PostgreSQL cluster it deploys: [cluster name]-app (unless you have provided an existing secret through .spec.bootstrap.initdb.secret.name ) [cluster name]-superuser (if .spec.enableSuperuserAccess is set to true and you have not specified a different secret using .spec.superuserSecret ) Each secret contain the following: username password hostname to the RW service port number database name a working .pgpass file uri jdbc-uri The -app credentials are the ones that should be used by applications connecting to the PostgreSQL cluster, and correspond to the user owning the database. The -superuser ones are supposed to be used only for administrative purposes, and correspond to the postgres user. Important Superuser access over the network is disabled by default.","title":"Secrets"},{"location":"architecture/","text":"Architecture Hint For a deeper understanding, we recommend reading our article on the CNCF blog post titled \"Recommended Architectures for PostgreSQL in Kubernetes\" , which provides valuable insights into best practices and design considerations for PostgreSQL deployments in Kubernetes. This documentation page provides an overview of the key architectural considerations for implementing a robust business continuity strategy when deploying PostgreSQL in Kubernetes. These considerations include: Deployments in stretched vs. non-stretched clusters : Evaluating the differences between deploying in stretched clusters (across 3 or more availability zones) versus non-stretched clusters (within a single availability zone). Reservation of postgres worker nodes : Isolating PostgreSQL workloads by dedicating specific worker nodes to postgres tasks, ensuring optimal performance and minimizing interference from other workloads. PostgreSQL architectures within a single Kubernetes cluster : Designing effective PostgreSQL deployments within a single Kubernetes cluster to meet high availability and performance requirements. PostgreSQL architectures across Kubernetes clusters for disaster recovery : Planning and implementing PostgreSQL architectures that span multiple Kubernetes clusters to provide comprehensive disaster recovery capabilities. Synchronizing the state PostgreSQL is a database management system and, as such, it needs to be treated as a stateful workload in Kubernetes. While stateless applications mainly use traffic redirection to achieve High Availability (HA) and Disaster Recovery (DR), in the case of a database, state must be replicated in multiple locations, preferably in a continuous and instantaneous way, by adopting either of the following two strategies: storage-level replication , normally persistent volumes application-level replication , in this specific case PostgreSQL CloudNativePG relies on application-level replication, for a simple reason: the PostgreSQL database management system comes with robust and reliable built-in physical replication capabilities based on Write Ahead Log (WAL) shipping , which have been used in production by millions of users all over the world for over a decade. PostgreSQL supports both asynchronous and synchronous streaming replication over the network, as well as asynchronous file-based log shipping (normally used as a fallback option, for example, to store WAL files in an object store). Replicas are usually called standby servers and can also be used for read-only workloads, thanks to the Hot Standby feature. Important We recommend against storage-level replication with PostgreSQL , although CloudNativePG allows you to adopt that strategy. For more information, please refer to the talk given by Chris Milsted and Gabriele Bartolini at KubeCon NA 2022 entitled \"Data On Kubernetes, Deploying And Running PostgreSQL And Patterns For Databases In a Kubernetes Cluster\" where this topic was covered in detail. Kubernetes architecture Kubernetes natively provides the possibility to span separate physical locations - also known as data centers, failure zones, or more frequently availability zones - connected to each other via redundant, low-latency, private network connectivity. Being a distributed system, the recommended minimum number of availability zones for a Kubernetes cluster is three (3), in order to make the control plane resilient to the failure of a single zone. For details, please refer to \"Running in multiple zones\" . This means that each data center is active at any time and can run workloads simultaneously. Note Most of the public Cloud Providers' managed Kubernetes services already provide 3 or more availability zones in each region. Multi-availability zone Kubernetes clusters The multi-availability zone Kubernetes architecture with three (3) or more zones is the one that we recommend for PostgreSQL usage. This scenario is typical of Kubernetes services managed by Cloud Providers. Such an architecture enables the CloudNativePG operator to control the full lifecycle of a Cluster resource across the zones within a single Kubernetes cluster, by treating all the availability zones as active: this includes, among other operations, scheduling the workloads in a declarative manner (based on affinity rules, tolerations and node selectors), automated failover, self-healing, and updates. All will work seamlessly across the zones in a single Kubernetes cluster. Please refer to the \"PostgreSQL architecture\" section below for details on how you can design your PostgreSQL clusters within the same Kubernetes cluster through shared-nothing deployments at the storage, worker node, and availability zone levels. Additionally, you can leverage Kubernetes clusters to deploy distributed PostgreSQL topologies hosting \"passive\" PostgreSQL replica clusters in different regions and managing them via declarative configuration. This setup is ideal for disaster recovery (DR), read-only operations, or cross-region availability. Important Each operator deployment can only manage operations within its local Kubernetes cluster. For operations across Kubernetes clusters, such as controlled switchover or unexpected failover, coordination must be handled manually (through GitOps, for example) or by using a higher-level cluster management tool. Single availability zone Kubernetes clusters If your Kubernetes cluster has only one availability zone, CloudNativePG still provides you with a lot of features to improve HA and DR outcomes for your PostgreSQL databases, pushing the single point of failure (SPoF) to the level of the zone as much as possible - i.e. the zone must have an outage before your CloudNativePG clusters suffer a failure. This scenario is typical of self-managed on-premise Kubernetes clusters, where only one data center is available. Single availability zone Kubernetes clusters are the only viable option when only two data centers are available within reach of a low-latency connection (typically in the same metropolitan area). Having only two zones prevents the creation of a multi-availability zone Kubernetes cluster, which requires a minimum of three zones. As a result, users must create two separate Kubernetes clusters in an active/passive configuration, with the second cluster primarily used for Disaster Recovery (see the replica cluster feature ). Hint If you are at an early stage of your Kubernetes journey, please share this document with your infrastructure team. The two data centers setup might be simply the result of a \"lift-and-shift\" transition to Kubernetes from a traditional bare-metal or VM based infrastructure, and the benefits that Kubernetes offers in a 3+ zone scenario might not have been known, or addressed at the time the infrastructure architecture was designed. Ultimately, a third physical location connected to the other two might represent a valid option to consider for organization, as it reduces the overall costs of the infrastructure by moving the day-to-day complexity from the application level down to the physical infrastructure level. Please refer to the \"PostgreSQL architecture\" section below for details on how you can design your PostgreSQL clusters within your single availability zone Kubernetes cluster through shared-nothing deployments at the storage and worker node levels only. For HA, in such a scenario it becomes even more important that the PostgreSQL instances be located on different worker nodes and do not share the same storage. For DR, you can push the SPoF above the single zone, by using additional Kubernetes clusters to define a distributed topology hosting \"passive\" PostgreSQL replica clusters . As with other Kubernetes workloads in this scenario, promotion of a Kubernetes cluster as primary must be done manually. Through the replica cluster feature , you can define a distributed PostgreSQL topology and coordinate a controlled switchover between data centers by first demoting the primary cluster and then promoting the replica cluster, without the need to re-clone the former primary. While failover is now fully declarative, automated failover across Kubernetes clusters is not within CloudNativePG's scope, as the operator can only function within a single Kubernetes cluster. Important CloudNativePG provides all the necessary primitives and probes to coordinate PostgreSQL active/passive topologies across different Kubernetes clusters through a higher-level operator or management tool. Reserving nodes for PostgreSQL workloads Whether you're operating in a multi-availability zone environment or, more critically, within a single availability zone, we strongly recommend isolating PostgreSQL workloads by dedicating specific worker nodes exclusively to postgres in production. A Kubernetes worker node dedicated to running PostgreSQL workloads is referred to as a Postgres node or postgres node. This approach ensures optimal performance and resource allocation for your database operations. Hint As a general rule of thumb, deploy Postgres nodes in multiples of three\u2014ideally with one node per availability zone. Three nodes is an optimal number because it ensures that a PostgreSQL cluster with three instances (one primary and two standby replicas) is distributed across different nodes, enhancing fault tolerance and availability. In Kubernetes, this can be achieved using node labels and taints in a declarative manner, aligning with Infrastructure as Code (IaC) practices: labels ensure that a node is capable of running postgres workloads, while taints help prevent any non- postgres workloads from being scheduled on that node. Important This methodology is the most straightforward way to ensure that PostgreSQL workloads are isolated from other workloads in terms of both computing resources and, when using locally attached disks, storage. While different PostgreSQL clusters may share the same node, you can take this a step further by using labels and taints to ensure that a node is dedicated to a single instance of a specific Cluster . Proposed node label CloudNativePG recommends using the node-role.kubernetes.io/postgres label. Since this is a reserved label ( *.kubernetes.io ), it can only be applied after a worker node is created. To assign the postgres label to a node, use the following command: kubectl label node <NODE-NAME> node-role.kubernetes.io/postgres= To ensure that a Cluster resource is scheduled on a postgres node, you must correctly configure the .spec.affinity.nodeSelector stanza in your manifests. Here\u2019s an example: spec: # <snip> affinity: # <snip> nodeSelector: node-role.kubernetes.io/postgres: \"\" Proposed node taint CloudNativePG recommends using the node-role.kubernetes.io/postgres taint. To assign the postgres taint to a node, use the following command: kubectl taint node <NODE-NAME> node-role.kubernetes.io/postgres=:NoSchedule To ensure that a Cluster resource is scheduled on a node with a postgres taint, you must correctly configure the .spec.affinity.tolerations stanza in your manifests. Here\u2019s an example: spec: # <snip> affinity: # <snip> tolerations: - key: node-role.kubernetes.io/postgres operator: Exists effect: NoSchedule PostgreSQL architecture CloudNativePG supports clusters based on asynchronous and synchronous streaming replication to manage multiple hot standby replicas within the same Kubernetes cluster, with the following specifications: One primary, with optional multiple hot standby replicas for HA Available services for applications: -rw : applications connect only to the primary instance of the cluster -ro : applications connect only to hot standby replicas for read-only-workloads (optional) -r : applications connect to any of the instances for read-only workloads (optional) Shared-nothing architecture recommended for better resilience of the PostgreSQL cluster: PostgreSQL instances should reside on different Kubernetes worker nodes and share only the network - as a result, instances should not share the storage and preferably use local volumes attached to the node they run on PostgreSQL instances should reside in different availability zones within the same Kubernetes cluster / region Important You can configure the above services through the managed.services section in the Cluster configuration. This can be done by reducing the number of services and selecting the type (default is ClusterIP ). For more details, please refer to the \"Service Management\" section below. The below diagram provides a simplistic view of the recommended shared-nothing architecture for a PostgreSQL cluster spanning across 3 different availability zones, running on separate nodes, each with dedicated local storage for PostgreSQL data. CloudNativePG automatically takes care of updating the above services if the topology of the cluster changes. For example, in case of failover, it automatically updates the -rw service to point to the promoted primary, making sure that traffic from the applications is seamlessly redirected. Replication Please refer to the \"Replication\" section for more information about how CloudNativePG relies on PostgreSQL replication, including synchronous settings. Connecting from an application Please refer to the \"Connecting from an application\" section for information about how to connect to CloudNativePG from a stateless application within the same Kubernetes cluster. Connection Pooling Please refer to the \"Connection Pooling\" section for information about how to take advantage of PgBouncer as a connection pooler, and create an access layer between your applications and the PostgreSQL clusters. Read-write workloads Applications can decide to connect to the PostgreSQL instance elected as current primary by the Kubernetes operator, as depicted in the following diagram: Applications can use the -rw suffix service. In case of temporary or permanent unavailability of the primary, for High Availability purposes CloudNativePG will trigger a failover, pointing the -rw service to another instance of the cluster. Read-only workloads Important Applications must be aware of the limitations that Hot Standby presents and familiar with the way PostgreSQL operates when dealing with these workloads. Applications can access hot standby replicas through the -ro service made available by the operator. This service enables the application to offload read-only queries from the primary node. The following diagram shows the architecture: Applications can also access any PostgreSQL instance through the -r service. Deployments across Kubernetes clusters Info CloudNativePG supports deploying PostgreSQL across multiple Kubernetes clusters through a feature that allows you to define a distributed PostgreSQL topology using replica clusters, as described in this section. In a distributed PostgreSQL cluster there can only be a single PostgreSQL instance acting as a primary at all times. This means that applications can only write inside a single Kubernetes cluster, at any time. However, for business continuity objectives it is fundamental to: reduce global recovery point objectives ( RPO ) by storing PostgreSQL backup data in multiple locations, regions and possibly using different providers (Disaster Recovery) reduce global recovery time objectives ( RTO ) by taking advantage of PostgreSQL replication beyond the primary Kubernetes cluster (High Availability) In order to address the above concerns, CloudNativePG introduces the concept of a PostgreSQL Topology that is distributed across different Kubernetes clusters and is made up of a primary PostgreSQL cluster and one or more PostgreSQL replica clusters. This feature is called distributed PostgreSQL topology with replica clusters , and it enables multi-cluster deployments in private, public, hybrid, and multi-cloud contexts. A replica cluster is a separate Cluster resource that is in continuous recovery, replicating from another source, either via WAL shipping from a WAL archive or via streaming replication from a primary or a standby (cascading). The diagram below depicts a PostgreSQL cluster spanning over two different Kubernetes clusters, where the primary cluster is in the first Kubernetes cluster and the replica cluster is in the second. The second Kubernetes cluster acts as the company's disaster recovery cluster, ready to be activated in case of disaster and unavailability of the first one. A replica cluster can have the same architecture as the primary cluster. Instead of a primary instance, a replica cluster has a designated primary instance, which is a standby server with an arbitrary number of cascading standby servers in streaming replication (symmetric architecture). The designated primary can be promoted at any time, transforming the replica cluster into a primary cluster capable of accepting write connections. This is typically triggered by: Human decision: You choose to make the other PostgreSQL cluster (or the entire Kubernetes cluster) the primary. To avoid data loss and ensure that the former primary can follow without being re-cloned (especially with large data sets), you first demote the current primary, then promote the designated primary using the API provided by CloudNativePG. Unexpected failure: If the entire Kubernetes cluster fails, you might experience data loss, but you need to fail over to the other Kubernetes cluster by promoting the PostgreSQL replica cluster. Warning CloudNativePG cannot perform any cross-cluster automated failover, as it does not have authority beyond a single Kubernetes cluster. Such operations must be performed manually or delegated to a multi-cluster/federated cluster-aware authority. Important CloudNativePG allows you to control the distributed topology via declarative configuration, enabling you to automate these procedures as part of your Infrastructure as Code (IaC) process, including GitOps. In the example above, the designated primary receives WAL updates via streaming replication ( primary_conninfo ). As a fallback, it can retrieve WAL segments from an object store using file-based WAL shipping\u2014for instance, with the Barman Cloud plugin through restore_command and barman-cloud-wal-restore . CloudNativePG allows you to define topologies with multiple replica clusters. You can also define replica clusters with a lower number of replicas, and then increase this number when the cluster is promoted to primary. Replica clusters Please refer to the \"Replica Clusters\" section for more detailed information on how physical replica clusters operate and how to define a distributed topology with read-only clusters across different Kubernetes clusters. This approach can significantly enhance your global disaster recovery and high availability (HA) strategy.","title":"Architecture"},{"location":"architecture/#architecture","text":"Hint For a deeper understanding, we recommend reading our article on the CNCF blog post titled \"Recommended Architectures for PostgreSQL in Kubernetes\" , which provides valuable insights into best practices and design considerations for PostgreSQL deployments in Kubernetes. This documentation page provides an overview of the key architectural considerations for implementing a robust business continuity strategy when deploying PostgreSQL in Kubernetes. These considerations include: Deployments in stretched vs. non-stretched clusters : Evaluating the differences between deploying in stretched clusters (across 3 or more availability zones) versus non-stretched clusters (within a single availability zone). Reservation of postgres worker nodes : Isolating PostgreSQL workloads by dedicating specific worker nodes to postgres tasks, ensuring optimal performance and minimizing interference from other workloads. PostgreSQL architectures within a single Kubernetes cluster : Designing effective PostgreSQL deployments within a single Kubernetes cluster to meet high availability and performance requirements. PostgreSQL architectures across Kubernetes clusters for disaster recovery : Planning and implementing PostgreSQL architectures that span multiple Kubernetes clusters to provide comprehensive disaster recovery capabilities.","title":"Architecture"},{"location":"architecture/#synchronizing-the-state","text":"PostgreSQL is a database management system and, as such, it needs to be treated as a stateful workload in Kubernetes. While stateless applications mainly use traffic redirection to achieve High Availability (HA) and Disaster Recovery (DR), in the case of a database, state must be replicated in multiple locations, preferably in a continuous and instantaneous way, by adopting either of the following two strategies: storage-level replication , normally persistent volumes application-level replication , in this specific case PostgreSQL CloudNativePG relies on application-level replication, for a simple reason: the PostgreSQL database management system comes with robust and reliable built-in physical replication capabilities based on Write Ahead Log (WAL) shipping , which have been used in production by millions of users all over the world for over a decade. PostgreSQL supports both asynchronous and synchronous streaming replication over the network, as well as asynchronous file-based log shipping (normally used as a fallback option, for example, to store WAL files in an object store). Replicas are usually called standby servers and can also be used for read-only workloads, thanks to the Hot Standby feature. Important We recommend against storage-level replication with PostgreSQL , although CloudNativePG allows you to adopt that strategy. For more information, please refer to the talk given by Chris Milsted and Gabriele Bartolini at KubeCon NA 2022 entitled \"Data On Kubernetes, Deploying And Running PostgreSQL And Patterns For Databases In a Kubernetes Cluster\" where this topic was covered in detail.","title":"Synchronizing the state"},{"location":"architecture/#kubernetes-architecture","text":"Kubernetes natively provides the possibility to span separate physical locations - also known as data centers, failure zones, or more frequently availability zones - connected to each other via redundant, low-latency, private network connectivity. Being a distributed system, the recommended minimum number of availability zones for a Kubernetes cluster is three (3), in order to make the control plane resilient to the failure of a single zone. For details, please refer to \"Running in multiple zones\" . This means that each data center is active at any time and can run workloads simultaneously. Note Most of the public Cloud Providers' managed Kubernetes services already provide 3 or more availability zones in each region.","title":"Kubernetes architecture"},{"location":"architecture/#multi-availability-zone-kubernetes-clusters","text":"The multi-availability zone Kubernetes architecture with three (3) or more zones is the one that we recommend for PostgreSQL usage. This scenario is typical of Kubernetes services managed by Cloud Providers. Such an architecture enables the CloudNativePG operator to control the full lifecycle of a Cluster resource across the zones within a single Kubernetes cluster, by treating all the availability zones as active: this includes, among other operations, scheduling the workloads in a declarative manner (based on affinity rules, tolerations and node selectors), automated failover, self-healing, and updates. All will work seamlessly across the zones in a single Kubernetes cluster. Please refer to the \"PostgreSQL architecture\" section below for details on how you can design your PostgreSQL clusters within the same Kubernetes cluster through shared-nothing deployments at the storage, worker node, and availability zone levels. Additionally, you can leverage Kubernetes clusters to deploy distributed PostgreSQL topologies hosting \"passive\" PostgreSQL replica clusters in different regions and managing them via declarative configuration. This setup is ideal for disaster recovery (DR), read-only operations, or cross-region availability. Important Each operator deployment can only manage operations within its local Kubernetes cluster. For operations across Kubernetes clusters, such as controlled switchover or unexpected failover, coordination must be handled manually (through GitOps, for example) or by using a higher-level cluster management tool.","title":"Multi-availability zone Kubernetes clusters"},{"location":"architecture/#single-availability-zone-kubernetes-clusters","text":"If your Kubernetes cluster has only one availability zone, CloudNativePG still provides you with a lot of features to improve HA and DR outcomes for your PostgreSQL databases, pushing the single point of failure (SPoF) to the level of the zone as much as possible - i.e. the zone must have an outage before your CloudNativePG clusters suffer a failure. This scenario is typical of self-managed on-premise Kubernetes clusters, where only one data center is available. Single availability zone Kubernetes clusters are the only viable option when only two data centers are available within reach of a low-latency connection (typically in the same metropolitan area). Having only two zones prevents the creation of a multi-availability zone Kubernetes cluster, which requires a minimum of three zones. As a result, users must create two separate Kubernetes clusters in an active/passive configuration, with the second cluster primarily used for Disaster Recovery (see the replica cluster feature ). Hint If you are at an early stage of your Kubernetes journey, please share this document with your infrastructure team. The two data centers setup might be simply the result of a \"lift-and-shift\" transition to Kubernetes from a traditional bare-metal or VM based infrastructure, and the benefits that Kubernetes offers in a 3+ zone scenario might not have been known, or addressed at the time the infrastructure architecture was designed. Ultimately, a third physical location connected to the other two might represent a valid option to consider for organization, as it reduces the overall costs of the infrastructure by moving the day-to-day complexity from the application level down to the physical infrastructure level. Please refer to the \"PostgreSQL architecture\" section below for details on how you can design your PostgreSQL clusters within your single availability zone Kubernetes cluster through shared-nothing deployments at the storage and worker node levels only. For HA, in such a scenario it becomes even more important that the PostgreSQL instances be located on different worker nodes and do not share the same storage. For DR, you can push the SPoF above the single zone, by using additional Kubernetes clusters to define a distributed topology hosting \"passive\" PostgreSQL replica clusters . As with other Kubernetes workloads in this scenario, promotion of a Kubernetes cluster as primary must be done manually. Through the replica cluster feature , you can define a distributed PostgreSQL topology and coordinate a controlled switchover between data centers by first demoting the primary cluster and then promoting the replica cluster, without the need to re-clone the former primary. While failover is now fully declarative, automated failover across Kubernetes clusters is not within CloudNativePG's scope, as the operator can only function within a single Kubernetes cluster. Important CloudNativePG provides all the necessary primitives and probes to coordinate PostgreSQL active/passive topologies across different Kubernetes clusters through a higher-level operator or management tool.","title":"Single availability zone Kubernetes clusters"},{"location":"architecture/#reserving-nodes-for-postgresql-workloads","text":"Whether you're operating in a multi-availability zone environment or, more critically, within a single availability zone, we strongly recommend isolating PostgreSQL workloads by dedicating specific worker nodes exclusively to postgres in production. A Kubernetes worker node dedicated to running PostgreSQL workloads is referred to as a Postgres node or postgres node. This approach ensures optimal performance and resource allocation for your database operations. Hint As a general rule of thumb, deploy Postgres nodes in multiples of three\u2014ideally with one node per availability zone. Three nodes is an optimal number because it ensures that a PostgreSQL cluster with three instances (one primary and two standby replicas) is distributed across different nodes, enhancing fault tolerance and availability. In Kubernetes, this can be achieved using node labels and taints in a declarative manner, aligning with Infrastructure as Code (IaC) practices: labels ensure that a node is capable of running postgres workloads, while taints help prevent any non- postgres workloads from being scheduled on that node. Important This methodology is the most straightforward way to ensure that PostgreSQL workloads are isolated from other workloads in terms of both computing resources and, when using locally attached disks, storage. While different PostgreSQL clusters may share the same node, you can take this a step further by using labels and taints to ensure that a node is dedicated to a single instance of a specific Cluster .","title":"Reserving nodes for PostgreSQL workloads"},{"location":"architecture/#proposed-node-label","text":"CloudNativePG recommends using the node-role.kubernetes.io/postgres label. Since this is a reserved label ( *.kubernetes.io ), it can only be applied after a worker node is created. To assign the postgres label to a node, use the following command: kubectl label node <NODE-NAME> node-role.kubernetes.io/postgres= To ensure that a Cluster resource is scheduled on a postgres node, you must correctly configure the .spec.affinity.nodeSelector stanza in your manifests. Here\u2019s an example: spec: # <snip> affinity: # <snip> nodeSelector: node-role.kubernetes.io/postgres: \"\"","title":"Proposed node label"},{"location":"architecture/#proposed-node-taint","text":"CloudNativePG recommends using the node-role.kubernetes.io/postgres taint. To assign the postgres taint to a node, use the following command: kubectl taint node <NODE-NAME> node-role.kubernetes.io/postgres=:NoSchedule To ensure that a Cluster resource is scheduled on a node with a postgres taint, you must correctly configure the .spec.affinity.tolerations stanza in your manifests. Here\u2019s an example: spec: # <snip> affinity: # <snip> tolerations: - key: node-role.kubernetes.io/postgres operator: Exists effect: NoSchedule","title":"Proposed node taint"},{"location":"architecture/#postgresql-architecture","text":"CloudNativePG supports clusters based on asynchronous and synchronous streaming replication to manage multiple hot standby replicas within the same Kubernetes cluster, with the following specifications: One primary, with optional multiple hot standby replicas for HA Available services for applications: -rw : applications connect only to the primary instance of the cluster -ro : applications connect only to hot standby replicas for read-only-workloads (optional) -r : applications connect to any of the instances for read-only workloads (optional) Shared-nothing architecture recommended for better resilience of the PostgreSQL cluster: PostgreSQL instances should reside on different Kubernetes worker nodes and share only the network - as a result, instances should not share the storage and preferably use local volumes attached to the node they run on PostgreSQL instances should reside in different availability zones within the same Kubernetes cluster / region Important You can configure the above services through the managed.services section in the Cluster configuration. This can be done by reducing the number of services and selecting the type (default is ClusterIP ). For more details, please refer to the \"Service Management\" section below. The below diagram provides a simplistic view of the recommended shared-nothing architecture for a PostgreSQL cluster spanning across 3 different availability zones, running on separate nodes, each with dedicated local storage for PostgreSQL data. CloudNativePG automatically takes care of updating the above services if the topology of the cluster changes. For example, in case of failover, it automatically updates the -rw service to point to the promoted primary, making sure that traffic from the applications is seamlessly redirected. Replication Please refer to the \"Replication\" section for more information about how CloudNativePG relies on PostgreSQL replication, including synchronous settings. Connecting from an application Please refer to the \"Connecting from an application\" section for information about how to connect to CloudNativePG from a stateless application within the same Kubernetes cluster. Connection Pooling Please refer to the \"Connection Pooling\" section for information about how to take advantage of PgBouncer as a connection pooler, and create an access layer between your applications and the PostgreSQL clusters.","title":"PostgreSQL architecture"},{"location":"architecture/#read-write-workloads","text":"Applications can decide to connect to the PostgreSQL instance elected as current primary by the Kubernetes operator, as depicted in the following diagram: Applications can use the -rw suffix service. In case of temporary or permanent unavailability of the primary, for High Availability purposes CloudNativePG will trigger a failover, pointing the -rw service to another instance of the cluster.","title":"Read-write workloads"},{"location":"architecture/#read-only-workloads","text":"Important Applications must be aware of the limitations that Hot Standby presents and familiar with the way PostgreSQL operates when dealing with these workloads. Applications can access hot standby replicas through the -ro service made available by the operator. This service enables the application to offload read-only queries from the primary node. The following diagram shows the architecture: Applications can also access any PostgreSQL instance through the -r service.","title":"Read-only workloads"},{"location":"architecture/#deployments-across-kubernetes-clusters","text":"Info CloudNativePG supports deploying PostgreSQL across multiple Kubernetes clusters through a feature that allows you to define a distributed PostgreSQL topology using replica clusters, as described in this section. In a distributed PostgreSQL cluster there can only be a single PostgreSQL instance acting as a primary at all times. This means that applications can only write inside a single Kubernetes cluster, at any time. However, for business continuity objectives it is fundamental to: reduce global recovery point objectives ( RPO ) by storing PostgreSQL backup data in multiple locations, regions and possibly using different providers (Disaster Recovery) reduce global recovery time objectives ( RTO ) by taking advantage of PostgreSQL replication beyond the primary Kubernetes cluster (High Availability) In order to address the above concerns, CloudNativePG introduces the concept of a PostgreSQL Topology that is distributed across different Kubernetes clusters and is made up of a primary PostgreSQL cluster and one or more PostgreSQL replica clusters. This feature is called distributed PostgreSQL topology with replica clusters , and it enables multi-cluster deployments in private, public, hybrid, and multi-cloud contexts. A replica cluster is a separate Cluster resource that is in continuous recovery, replicating from another source, either via WAL shipping from a WAL archive or via streaming replication from a primary or a standby (cascading). The diagram below depicts a PostgreSQL cluster spanning over two different Kubernetes clusters, where the primary cluster is in the first Kubernetes cluster and the replica cluster is in the second. The second Kubernetes cluster acts as the company's disaster recovery cluster, ready to be activated in case of disaster and unavailability of the first one. A replica cluster can have the same architecture as the primary cluster. Instead of a primary instance, a replica cluster has a designated primary instance, which is a standby server with an arbitrary number of cascading standby servers in streaming replication (symmetric architecture). The designated primary can be promoted at any time, transforming the replica cluster into a primary cluster capable of accepting write connections. This is typically triggered by: Human decision: You choose to make the other PostgreSQL cluster (or the entire Kubernetes cluster) the primary. To avoid data loss and ensure that the former primary can follow without being re-cloned (especially with large data sets), you first demote the current primary, then promote the designated primary using the API provided by CloudNativePG. Unexpected failure: If the entire Kubernetes cluster fails, you might experience data loss, but you need to fail over to the other Kubernetes cluster by promoting the PostgreSQL replica cluster. Warning CloudNativePG cannot perform any cross-cluster automated failover, as it does not have authority beyond a single Kubernetes cluster. Such operations must be performed manually or delegated to a multi-cluster/federated cluster-aware authority. Important CloudNativePG allows you to control the distributed topology via declarative configuration, enabling you to automate these procedures as part of your Infrastructure as Code (IaC) process, including GitOps. In the example above, the designated primary receives WAL updates via streaming replication ( primary_conninfo ). As a fallback, it can retrieve WAL segments from an object store using file-based WAL shipping\u2014for instance, with the Barman Cloud plugin through restore_command and barman-cloud-wal-restore . CloudNativePG allows you to define topologies with multiple replica clusters. You can also define replica clusters with a lower number of replicas, and then increase this number when the cluster is promoted to primary. Replica clusters Please refer to the \"Replica Clusters\" section for more detailed information on how physical replica clusters operate and how to define a distributed topology with read-only clusters across different Kubernetes clusters. This approach can significantly enhance your global disaster recovery and high availability (HA) strategy.","title":"Deployments across Kubernetes clusters"},{"location":"backup/","text":"Backup Warning With the deprecation of native Barman Cloud support in CloudNativePG in favor of the Barman Cloud Plugin, this page\u2014and the backup and recovery documentation\u2014may undergo changes before the official release of version 1.26.0. PostgreSQL natively provides first class backup and recovery capabilities based on file system level (physical) copy. These have been successfully used for more than 15 years in mission critical production databases, helping organizations all over the world achieve their disaster recovery goals with Postgres. Note There's another way to backup databases in PostgreSQL, through the pg_dump utility - which relies on logical backups instead of physical ones. However, logical backups are not suitable for business continuity use cases and as such are not covered by CloudNativePG (yet, at least). If you want to use the pg_dump utility, let yourself be inspired by the \"Troubleshooting / Emergency backup\" section . In CloudNativePG, the backup infrastructure for each PostgreSQL cluster is made up of the following resources: WAL archive : a location containing the WAL files (transactional logs) that are continuously written by Postgres and archived for data durability Physical base backups : a copy of all the files that PostgreSQL uses to store the data in the database (primarily the PGDATA and any tablespace) The WAL archive can only be stored on object stores at the moment. On the other hand, CloudNativePG supports two ways to store physical base backups: on object stores , as tarballs - optionally compressed: Using the Barman Cloud plugin Natively via .spec.backup.barmanObjectStore ( deprecated, to be removed in CloudNativePG 1.28 ) on Kubernetes Volume Snapshots , if supported by the underlying storage class Important Before choosing your backup strategy with CloudNativePG, it is important that you take some time to familiarize with some basic concepts, like WAL archive, hot and cold backups. Important Please refer to the official Kubernetes documentation for a list of all the supported Container Storage Interface (CSI) drivers that provide snapshotting capabilities. WAL archive The WAL archive in PostgreSQL is at the heart of continuous backup , and it is fundamental for the following reasons: Hot backups : the possibility to take physical base backups from any instance in the Postgres cluster (either primary or standby) without shutting down the server; they are also known as online backups Point in Time recovery (PITR): to possibility to recover at any point in time from the first available base backup in your system Warning WAL archive alone is useless. Without a physical base backup, you cannot restore a PostgreSQL cluster. In general, the presence of a WAL archive enhances the resilience of a PostgreSQL cluster, allowing each instance to fetch any required WAL file from the archive if needed (normally the WAL archive has higher retention periods than any Postgres instance that normally recycles those files). This use case can also be extended to replica clusters , as they can simply rely on the WAL archive to synchronize across long distances, extending disaster recovery goals across different regions. When you configure a WAL archive , CloudNativePG provides out-of-the-box an RPO <= 5 minutes for disaster recovery, even across regions. Important Our recommendation is to always setup the WAL archive in production. There are known use cases - normally involving staging and development environments - where none of the above benefits are needed and the WAL archive is not necessary. RPO in this case can be any value, such as 24 hours (daily backups) or infinite (no backup at all). Cold and Hot backups Hot backups have already been defined in the previous section. They require the presence of a WAL archive and they are the norm in any modern database management system. Cold backups , also known as offline backups, are instead physical base backups taken when the PostgreSQL instance (standby or primary) is shut down. They are consistent per definition and they represent a snapshot of the database at the time it was shut down. As a result, PostgreSQL instances can be restarted from a cold backup without the need of a WAL archive, even though they can take advantage of it, if available (with all the benefits on the recovery side highlighted in the previous section). In those situations with a higher RPO (for example, 1 hour or 24 hours), and shorter retention periods, cold backups represent a viable option to be considered for your disaster recovery plans. Object stores or volume snapshots: which one to use? In CloudNativePG, object store based backups: always require the WAL archive support hot backup only don't support incremental copy don't support differential copy VolumeSnapshots instead: don't require the WAL archive, although in production it is always recommended support incremental copy, depending on the underlying storage classes support differential copy, depending on the underlying storage classes also support cold backup Which one to use depends on your specific requirements and environment, including: availability of a viable object store solution in your Kubernetes cluster availability of a trusted storage class that supports volume snapshots size of the database: with object stores, the larger your database, the longer backup and, most importantly, recovery procedures take (the latter impacts RTO ); in presence of Very Large Databases (VLDB), the general advice is to rely on Volume Snapshots as, thanks to copy-on-write, they provide faster recovery data mobility and possibility to store or relay backup files on a secondary location in a different region, or any subsequent one other factors, mostly based on the confidence and familiarity with the underlying storage solutions The summary table below highlights some of the main differences between the two available methods for storing physical base backups. Object store Volume Snapshots WAL archiving Required Recommended (1) Cold backup \u2717 \u2713 Hot backup \u2713 \u2713 Incremental copy \u2717 \u2713 (2) Differential copy \u2717 \u2713 (2) Backup from a standby \u2713 \u2713 Snapshot recovery \u2717 (3) \u2713 Point In Time Recovery (PITR) \u2713 Requires WAL archive Underlying technology Barman Cloud Kubernetes API See the explanation below for the notes in the above table: WAL archive must be on an object store at the moment If supported by the underlying storage classes of the PostgreSQL volumes Snapshot recovery can be emulated using the bootstrap.recovery.recoveryTarget.targetImmediate option Scheduled backups Scheduled backups are the recommended way to configure your backup strategy in CloudNativePG. They are managed by the ScheduledBackup resource. Info Please refer to ScheduledBackupSpec in the API reference for a full list of options. The schedule field allows you to define a six-term cron schedule specification, which includes seconds, as expressed in the Go cron package format . Warning Beware that this format accepts also the seconds field, and it is different from the crontab format in Unix/Linux systems. This is an example of a scheduled backup: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: backup-example spec: schedule: \"0 0 0 * * *\" backupOwnerReference: self cluster: name: pg-backup The above example will schedule a backup every day at midnight because the schedule specifies zero for the second, minute, and hour, while specifying wildcard, meaning all, for day of the month, month, and day of the week. In Kubernetes CronJobs, the equivalent expression is 0 0 * * * because seconds are not included. Hint Backup frequency might impact your recovery time objective ( RTO ) after a disaster which requires a full or Point-In-Time recovery operation. Our advice is that you regularly test your backups by recovering them, and then measuring the time it takes to recover from scratch so that you can refine your RTO predictability. Recovery time is influenced by the size of the base backup and the amount of WAL files that need to be fetched from the archive and replayed during recovery (remember that WAL archiving is what enables continuous backup in PostgreSQL!). Based on our experience, a weekly base backup is more than enough for most cases - while it is extremely rare to schedule backups more frequently than once a day. You can choose whether to schedule a backup on a defined object store or a volume snapshot via the .spec.method attribute, by default set to barmanObjectStore . If you have properly defined volume snapshots in the backup stanza of the cluster, you can set method: volumeSnapshot to start scheduling base backups on volume snapshots. ScheduledBackups can be suspended, if needed, by setting .spec.suspend: true . This will stop any new backup from being scheduled until the option is removed or set back to false . In case you want to issue a backup as soon as the ScheduledBackup resource is created you can set .spec.immediate: true . Note .spec.backupOwnerReference indicates which ownerReference should be put inside the created backup resources. none: no owner reference for created backup objects (same behavior as before the field was introduced) self: sets the Scheduled backup object as owner of the backup cluster: set the cluster as owner of the backup On-demand backups Info Please refer to BackupSpec in the API reference for a full list of options. To request a new backup, you need to create a new Backup resource like the following one: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: backup-example spec: method: barmanObjectStore cluster: name: pg-backup In this case, the operator will start to orchestrate the cluster to take the required backup on an object store, using barman-cloud-backup . You can check the backup status using the plain kubectl describe backup <name> command: Name: backup-example Namespace: default Labels: <none> Annotations: API Version: postgresql.cnpg.io/v1 Kind: Backup Metadata: Creation Timestamp: 2020-10-26T13:57:40Z Self Link: /apis/postgresql.cnpg.io/v1/namespaces/default/backups/backup-example UID: ad5f855c-2ffd-454a-a157-900d5f1f6584 Spec: Cluster: Name: pg-backup Status: Phase: running Started At: 2020-10-26T13:57:40Z Events: <none> When the backup has been completed, the phase will be completed like in the following example: Name: backup-example Namespace: default Labels: <none> Annotations: API Version: postgresql.cnpg.io/v1 Kind: Backup Metadata: Creation Timestamp: 2020-10-26T13:57:40Z Self Link: /apis/postgresql.cnpg.io/v1/namespaces/default/backups/backup-example UID: ad5f855c-2ffd-454a-a157-900d5f1f6584 Spec: Cluster: Name: pg-backup Status: Backup Id: 20201026T135740 Destination Path: s3://backups/ Endpoint URL: http://minio:9000 Phase: completed s3Credentials: Access Key Id: Key: ACCESS_KEY_ID Name: minio Secret Access Key: Key: ACCESS_SECRET_KEY Name: minio Server Name: pg-backup Started At: 2020-10-26T13:57:40Z Stopped At: 2020-10-26T13:57:44Z Events: <none> Important This feature will not backup the secrets for the superuser and the application user. The secrets are supposed to be backed up as part of the standard backup procedures for the Kubernetes cluster. Backup from a standby Taking a base backup requires to scrape the whole data content of the PostgreSQL instance on disk, possibly resulting in I/O contention with the actual workload of the database. For this reason, CloudNativePG allows you to take advantage of a feature which is directly available in PostgreSQL: backup from a standby . By default, backups will run on the most aligned replica of a Cluster . If no replicas are available, backups will run on the primary instance. Info Although the standby might not always be up to date with the primary, in the time continuum from the first available backup to the last archived WAL this is normally irrelevant. The base backup indeed represents the starting point from which to begin a recovery operation, including PITR. Similarly to what happens with pg_basebackup , when backing up from an online standby we do not force a switch of the WAL on the primary. This might produce unexpected results in the short term (before archive_timeout kicks in) in deployments with low write activity. If you prefer to always run backups on the primary, you can set the backup target to primary as outlined in the example below: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: [...] spec: backup: target: \"primary\" Warning Beware of setting the target to primary when performing a cold backup with volume snapshots, as this will shut down the primary for the time needed to take the snapshot, impacting write operations. This also applies to taking a cold backup in a single-instance cluster, even if you did not explicitly set the primary as the target. When the backup target is set to prefer-standby , such policy will ensure backups are run on the most up-to-date available secondary instance, or if no other instance is available, on the primary instance. By default, when not otherwise specified, target is automatically set to take backups from a standby. The backup target specified in the Cluster can be overridden in the Backup and ScheduledBackup types, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: [...] spec: cluster: name: [...] target: \"primary\" In the previous example, CloudNativePG will invariably choose the primary instance even if the Cluster is set to prefer replicas.","title":"Backup"},{"location":"backup/#backup","text":"Warning With the deprecation of native Barman Cloud support in CloudNativePG in favor of the Barman Cloud Plugin, this page\u2014and the backup and recovery documentation\u2014may undergo changes before the official release of version 1.26.0. PostgreSQL natively provides first class backup and recovery capabilities based on file system level (physical) copy. These have been successfully used for more than 15 years in mission critical production databases, helping organizations all over the world achieve their disaster recovery goals with Postgres. Note There's another way to backup databases in PostgreSQL, through the pg_dump utility - which relies on logical backups instead of physical ones. However, logical backups are not suitable for business continuity use cases and as such are not covered by CloudNativePG (yet, at least). If you want to use the pg_dump utility, let yourself be inspired by the \"Troubleshooting / Emergency backup\" section . In CloudNativePG, the backup infrastructure for each PostgreSQL cluster is made up of the following resources: WAL archive : a location containing the WAL files (transactional logs) that are continuously written by Postgres and archived for data durability Physical base backups : a copy of all the files that PostgreSQL uses to store the data in the database (primarily the PGDATA and any tablespace) The WAL archive can only be stored on object stores at the moment. On the other hand, CloudNativePG supports two ways to store physical base backups: on object stores , as tarballs - optionally compressed: Using the Barman Cloud plugin Natively via .spec.backup.barmanObjectStore ( deprecated, to be removed in CloudNativePG 1.28 ) on Kubernetes Volume Snapshots , if supported by the underlying storage class Important Before choosing your backup strategy with CloudNativePG, it is important that you take some time to familiarize with some basic concepts, like WAL archive, hot and cold backups. Important Please refer to the official Kubernetes documentation for a list of all the supported Container Storage Interface (CSI) drivers that provide snapshotting capabilities.","title":"Backup"},{"location":"backup/#wal-archive","text":"The WAL archive in PostgreSQL is at the heart of continuous backup , and it is fundamental for the following reasons: Hot backups : the possibility to take physical base backups from any instance in the Postgres cluster (either primary or standby) without shutting down the server; they are also known as online backups Point in Time recovery (PITR): to possibility to recover at any point in time from the first available base backup in your system Warning WAL archive alone is useless. Without a physical base backup, you cannot restore a PostgreSQL cluster. In general, the presence of a WAL archive enhances the resilience of a PostgreSQL cluster, allowing each instance to fetch any required WAL file from the archive if needed (normally the WAL archive has higher retention periods than any Postgres instance that normally recycles those files). This use case can also be extended to replica clusters , as they can simply rely on the WAL archive to synchronize across long distances, extending disaster recovery goals across different regions. When you configure a WAL archive , CloudNativePG provides out-of-the-box an RPO <= 5 minutes for disaster recovery, even across regions. Important Our recommendation is to always setup the WAL archive in production. There are known use cases - normally involving staging and development environments - where none of the above benefits are needed and the WAL archive is not necessary. RPO in this case can be any value, such as 24 hours (daily backups) or infinite (no backup at all).","title":"WAL archive"},{"location":"backup/#cold-and-hot-backups","text":"Hot backups have already been defined in the previous section. They require the presence of a WAL archive and they are the norm in any modern database management system. Cold backups , also known as offline backups, are instead physical base backups taken when the PostgreSQL instance (standby or primary) is shut down. They are consistent per definition and they represent a snapshot of the database at the time it was shut down. As a result, PostgreSQL instances can be restarted from a cold backup without the need of a WAL archive, even though they can take advantage of it, if available (with all the benefits on the recovery side highlighted in the previous section). In those situations with a higher RPO (for example, 1 hour or 24 hours), and shorter retention periods, cold backups represent a viable option to be considered for your disaster recovery plans.","title":"Cold and Hot backups"},{"location":"backup/#object-stores-or-volume-snapshots-which-one-to-use","text":"In CloudNativePG, object store based backups: always require the WAL archive support hot backup only don't support incremental copy don't support differential copy VolumeSnapshots instead: don't require the WAL archive, although in production it is always recommended support incremental copy, depending on the underlying storage classes support differential copy, depending on the underlying storage classes also support cold backup Which one to use depends on your specific requirements and environment, including: availability of a viable object store solution in your Kubernetes cluster availability of a trusted storage class that supports volume snapshots size of the database: with object stores, the larger your database, the longer backup and, most importantly, recovery procedures take (the latter impacts RTO ); in presence of Very Large Databases (VLDB), the general advice is to rely on Volume Snapshots as, thanks to copy-on-write, they provide faster recovery data mobility and possibility to store or relay backup files on a secondary location in a different region, or any subsequent one other factors, mostly based on the confidence and familiarity with the underlying storage solutions The summary table below highlights some of the main differences between the two available methods for storing physical base backups. Object store Volume Snapshots WAL archiving Required Recommended (1) Cold backup \u2717 \u2713 Hot backup \u2713 \u2713 Incremental copy \u2717 \u2713 (2) Differential copy \u2717 \u2713 (2) Backup from a standby \u2713 \u2713 Snapshot recovery \u2717 (3) \u2713 Point In Time Recovery (PITR) \u2713 Requires WAL archive Underlying technology Barman Cloud Kubernetes API See the explanation below for the notes in the above table: WAL archive must be on an object store at the moment If supported by the underlying storage classes of the PostgreSQL volumes Snapshot recovery can be emulated using the bootstrap.recovery.recoveryTarget.targetImmediate option","title":"Object stores or volume snapshots: which one to use?"},{"location":"backup/#scheduled-backups","text":"Scheduled backups are the recommended way to configure your backup strategy in CloudNativePG. They are managed by the ScheduledBackup resource. Info Please refer to ScheduledBackupSpec in the API reference for a full list of options. The schedule field allows you to define a six-term cron schedule specification, which includes seconds, as expressed in the Go cron package format . Warning Beware that this format accepts also the seconds field, and it is different from the crontab format in Unix/Linux systems. This is an example of a scheduled backup: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: backup-example spec: schedule: \"0 0 0 * * *\" backupOwnerReference: self cluster: name: pg-backup The above example will schedule a backup every day at midnight because the schedule specifies zero for the second, minute, and hour, while specifying wildcard, meaning all, for day of the month, month, and day of the week. In Kubernetes CronJobs, the equivalent expression is 0 0 * * * because seconds are not included. Hint Backup frequency might impact your recovery time objective ( RTO ) after a disaster which requires a full or Point-In-Time recovery operation. Our advice is that you regularly test your backups by recovering them, and then measuring the time it takes to recover from scratch so that you can refine your RTO predictability. Recovery time is influenced by the size of the base backup and the amount of WAL files that need to be fetched from the archive and replayed during recovery (remember that WAL archiving is what enables continuous backup in PostgreSQL!). Based on our experience, a weekly base backup is more than enough for most cases - while it is extremely rare to schedule backups more frequently than once a day. You can choose whether to schedule a backup on a defined object store or a volume snapshot via the .spec.method attribute, by default set to barmanObjectStore . If you have properly defined volume snapshots in the backup stanza of the cluster, you can set method: volumeSnapshot to start scheduling base backups on volume snapshots. ScheduledBackups can be suspended, if needed, by setting .spec.suspend: true . This will stop any new backup from being scheduled until the option is removed or set back to false . In case you want to issue a backup as soon as the ScheduledBackup resource is created you can set .spec.immediate: true . Note .spec.backupOwnerReference indicates which ownerReference should be put inside the created backup resources. none: no owner reference for created backup objects (same behavior as before the field was introduced) self: sets the Scheduled backup object as owner of the backup cluster: set the cluster as owner of the backup","title":"Scheduled backups"},{"location":"backup/#on-demand-backups","text":"Info Please refer to BackupSpec in the API reference for a full list of options. To request a new backup, you need to create a new Backup resource like the following one: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: backup-example spec: method: barmanObjectStore cluster: name: pg-backup In this case, the operator will start to orchestrate the cluster to take the required backup on an object store, using barman-cloud-backup . You can check the backup status using the plain kubectl describe backup <name> command: Name: backup-example Namespace: default Labels: <none> Annotations: API Version: postgresql.cnpg.io/v1 Kind: Backup Metadata: Creation Timestamp: 2020-10-26T13:57:40Z Self Link: /apis/postgresql.cnpg.io/v1/namespaces/default/backups/backup-example UID: ad5f855c-2ffd-454a-a157-900d5f1f6584 Spec: Cluster: Name: pg-backup Status: Phase: running Started At: 2020-10-26T13:57:40Z Events: <none> When the backup has been completed, the phase will be completed like in the following example: Name: backup-example Namespace: default Labels: <none> Annotations: API Version: postgresql.cnpg.io/v1 Kind: Backup Metadata: Creation Timestamp: 2020-10-26T13:57:40Z Self Link: /apis/postgresql.cnpg.io/v1/namespaces/default/backups/backup-example UID: ad5f855c-2ffd-454a-a157-900d5f1f6584 Spec: Cluster: Name: pg-backup Status: Backup Id: 20201026T135740 Destination Path: s3://backups/ Endpoint URL: http://minio:9000 Phase: completed s3Credentials: Access Key Id: Key: ACCESS_KEY_ID Name: minio Secret Access Key: Key: ACCESS_SECRET_KEY Name: minio Server Name: pg-backup Started At: 2020-10-26T13:57:40Z Stopped At: 2020-10-26T13:57:44Z Events: <none> Important This feature will not backup the secrets for the superuser and the application user. The secrets are supposed to be backed up as part of the standard backup procedures for the Kubernetes cluster.","title":"On-demand backups"},{"location":"backup/#backup-from-a-standby","text":"Taking a base backup requires to scrape the whole data content of the PostgreSQL instance on disk, possibly resulting in I/O contention with the actual workload of the database. For this reason, CloudNativePG allows you to take advantage of a feature which is directly available in PostgreSQL: backup from a standby . By default, backups will run on the most aligned replica of a Cluster . If no replicas are available, backups will run on the primary instance. Info Although the standby might not always be up to date with the primary, in the time continuum from the first available backup to the last archived WAL this is normally irrelevant. The base backup indeed represents the starting point from which to begin a recovery operation, including PITR. Similarly to what happens with pg_basebackup , when backing up from an online standby we do not force a switch of the WAL on the primary. This might produce unexpected results in the short term (before archive_timeout kicks in) in deployments with low write activity. If you prefer to always run backups on the primary, you can set the backup target to primary as outlined in the example below: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: [...] spec: backup: target: \"primary\" Warning Beware of setting the target to primary when performing a cold backup with volume snapshots, as this will shut down the primary for the time needed to take the snapshot, impacting write operations. This also applies to taking a cold backup in a single-instance cluster, even if you did not explicitly set the primary as the target. When the backup target is set to prefer-standby , such policy will ensure backups are run on the most up-to-date available secondary instance, or if no other instance is available, on the primary instance. By default, when not otherwise specified, target is automatically set to take backups from a standby. The backup target specified in the Cluster can be overridden in the Backup and ScheduledBackup types, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: [...] spec: cluster: name: [...] target: \"primary\" In the previous example, CloudNativePG will invariably choose the primary instance even if the Cluster is set to prefer replicas.","title":"Backup from a standby"},{"location":"backup_barmanobjectstore/","text":"Backup on object stores Warning With the deprecation of native Barman Cloud support in CloudNativePG in favor of the Barman Cloud Plugin, this page\u2014and the backup and recovery documentation\u2014may undergo changes before the official release of version 1.26.0. CloudNativePG natively supports online/hot backup of PostgreSQL clusters through continuous physical backup and WAL archiving on an object store. This means that the database is always up (no downtime required) and that Point In Time Recovery is available. The operator can orchestrate a continuous backup infrastructure that is based on the Barman Cloud tool. Instead of using the classical architecture with a Barman server, which backs up many PostgreSQL instances, the operator relies on the barman-cloud-wal-archive , barman-cloud-check-wal-archive , barman-cloud-backup , barman-cloud-backup-list , and barman-cloud-backup-delete tools. As a result, base backups will be tarballs . Both base backups and WAL files can be compressed and encrypted. For this, it is required to use an image with barman-cli-cloud included. You can use the image ghcr.io/cloudnative-pg/postgresql for this scope, as it is composed of a community PostgreSQL image and the latest barman-cli-cloud package. Important Always ensure that you are running the latest version of the operands in your system to take advantage of the improvements introduced in Barman cloud (as well as improve the security aspects of your cluster). A backup is performed from a primary or a designated primary instance in a Cluster (please refer to replica clusters for more information about designated primary instances), or alternatively on a standby . Common object stores If you are looking for a specific object store such as AWS S3 , Microsoft Azure Blob Storage , Google Cloud Storage , or MinIO Gateway , or a compatible provider, please refer to Appendix A - Common object stores . Retention policies Important Retention policies are not currently available on volume snapshots. CloudNativePG can manage the automated deletion of backup files from the backup object store, using retention policies based on the recovery window. Internally, the retention policy feature uses barman-cloud-backup-delete with --retention-policy \u201cRECOVERY WINDOW OF {{ retention policy value }} {{ retention policy unit }}\u201d . For example, you can define your backups with a retention policy of 30 days as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" s3Credentials: accessKeyId: name: aws-creds key: ACCESS_KEY_ID secretAccessKey: name: aws-creds key: ACCESS_SECRET_KEY retentionPolicy: \"30d\" There's more ... The recovery window retention policy is focused on the concept of Point of Recoverability ( PoR ), a moving point in time determined by current time - recovery window . The first valid backup is the first available backup before PoR (in reverse chronological order). CloudNativePG must ensure that we can recover the cluster at any point in time between PoR and the latest successfully archived WAL file, starting from the first valid backup. Base backups that are older than the first valid backup will be marked as obsolete and permanently removed after the next backup is completed. Compression algorithms CloudNativePG by default archives backups and WAL files in an uncompressed fashion. However, it also supports the following compression algorithms via barman-cloud-backup (for backups) and barman-cloud-wal-archive (for WAL files): bzip2 gzip lz4 snappy xz zstd The compression settings for backups and WALs are independent. See the DataBackupConfiguration and WALBackupConfiguration sections in the barman-cloud API reference. It is important to note that archival time, restore time, and size change between the algorithms, so the compression algorithm should be chosen according to your use case. The Barman team has performed an evaluation of the performance of the supported algorithms for Barman Cloud. The following table summarizes a scenario where a backup is taken on a local MinIO deployment. The Barman GitHub project includes a deeper analysis . Compression Backup Time (ms) Restore Time (ms) Uncompressed size (MB) Compressed size (MB) Approx ratio None 10927 7553 395 395 1:1 bzip2 25404 13886 395 67 5.9:1 gzip 116281 3077 395 91 4.3:1 snappy 8134 8341 395 166 2.4:1 Tagging of backup objects Barman 2.18 introduces support for tagging backup resources when saving them in object stores via barman-cloud-backup and barman-cloud-wal-archive . As a result, if your PostgreSQL container image includes Barman with version 2.18 or higher, CloudNativePG enables you to specify tags as key-value pairs for backup objects, namely base backups, WAL files and history files. You can use two properties in the .spec.backup.barmanObjectStore definition: tags : key-value pair tags to be added to backup objects and archived WAL file in the backup object store historyTags : key-value pair tags to be added to archived history files in the backup object store The excerpt of a YAML manifest below provides an example of usage of this feature: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] tags: backupRetentionPolicy: \"expire\" historyTags: backupRetentionPolicy: \"keep\" Extra options for the backup and WAL commands You can append additional options to the barman-cloud-backup and barman-cloud-wal-archive commands by using the additionalCommandArgs property in the .spec.backup.barmanObjectStore.data and .spec.backup.barmanObjectStore.wal sections respectively. This properties are lists of strings that will be appended to the barman-cloud-backup and barman-cloud-wal-archive commands. For example, you can use the --read-timeout=60 to customize the connection reading timeout. For additional options supported by barman-cloud-backup and barman-cloud-wal-archive commands you can refer to the official barman documentation here . If an option provided in additionalCommandArgs is already present in the declared options in its section ( .spec.backup.barmanObjectStore.data or .spec.backup.barmanObjectStore.wal ), the extra option will be ignored. The following is an example of how to use this property: For backups: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] data: additionalCommandArgs: - \"--min-chunk-size=5MB\" - \"--read-timeout=60\" For WAL files: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: additionalCommandArgs: - \"--max-concurrency=1\" - \"--read-timeout=60\"","title":"Backup on object stores"},{"location":"backup_barmanobjectstore/#backup-on-object-stores","text":"Warning With the deprecation of native Barman Cloud support in CloudNativePG in favor of the Barman Cloud Plugin, this page\u2014and the backup and recovery documentation\u2014may undergo changes before the official release of version 1.26.0. CloudNativePG natively supports online/hot backup of PostgreSQL clusters through continuous physical backup and WAL archiving on an object store. This means that the database is always up (no downtime required) and that Point In Time Recovery is available. The operator can orchestrate a continuous backup infrastructure that is based on the Barman Cloud tool. Instead of using the classical architecture with a Barman server, which backs up many PostgreSQL instances, the operator relies on the barman-cloud-wal-archive , barman-cloud-check-wal-archive , barman-cloud-backup , barman-cloud-backup-list , and barman-cloud-backup-delete tools. As a result, base backups will be tarballs . Both base backups and WAL files can be compressed and encrypted. For this, it is required to use an image with barman-cli-cloud included. You can use the image ghcr.io/cloudnative-pg/postgresql for this scope, as it is composed of a community PostgreSQL image and the latest barman-cli-cloud package. Important Always ensure that you are running the latest version of the operands in your system to take advantage of the improvements introduced in Barman cloud (as well as improve the security aspects of your cluster). A backup is performed from a primary or a designated primary instance in a Cluster (please refer to replica clusters for more information about designated primary instances), or alternatively on a standby .","title":"Backup on object stores"},{"location":"backup_barmanobjectstore/#common-object-stores","text":"If you are looking for a specific object store such as AWS S3 , Microsoft Azure Blob Storage , Google Cloud Storage , or MinIO Gateway , or a compatible provider, please refer to Appendix A - Common object stores .","title":"Common object stores"},{"location":"backup_barmanobjectstore/#retention-policies","text":"Important Retention policies are not currently available on volume snapshots. CloudNativePG can manage the automated deletion of backup files from the backup object store, using retention policies based on the recovery window. Internally, the retention policy feature uses barman-cloud-backup-delete with --retention-policy \u201cRECOVERY WINDOW OF {{ retention policy value }} {{ retention policy unit }}\u201d . For example, you can define your backups with a retention policy of 30 days as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" s3Credentials: accessKeyId: name: aws-creds key: ACCESS_KEY_ID secretAccessKey: name: aws-creds key: ACCESS_SECRET_KEY retentionPolicy: \"30d\" There's more ... The recovery window retention policy is focused on the concept of Point of Recoverability ( PoR ), a moving point in time determined by current time - recovery window . The first valid backup is the first available backup before PoR (in reverse chronological order). CloudNativePG must ensure that we can recover the cluster at any point in time between PoR and the latest successfully archived WAL file, starting from the first valid backup. Base backups that are older than the first valid backup will be marked as obsolete and permanently removed after the next backup is completed.","title":"Retention policies"},{"location":"backup_barmanobjectstore/#compression-algorithms","text":"CloudNativePG by default archives backups and WAL files in an uncompressed fashion. However, it also supports the following compression algorithms via barman-cloud-backup (for backups) and barman-cloud-wal-archive (for WAL files): bzip2 gzip lz4 snappy xz zstd The compression settings for backups and WALs are independent. See the DataBackupConfiguration and WALBackupConfiguration sections in the barman-cloud API reference. It is important to note that archival time, restore time, and size change between the algorithms, so the compression algorithm should be chosen according to your use case. The Barman team has performed an evaluation of the performance of the supported algorithms for Barman Cloud. The following table summarizes a scenario where a backup is taken on a local MinIO deployment. The Barman GitHub project includes a deeper analysis . Compression Backup Time (ms) Restore Time (ms) Uncompressed size (MB) Compressed size (MB) Approx ratio None 10927 7553 395 395 1:1 bzip2 25404 13886 395 67 5.9:1 gzip 116281 3077 395 91 4.3:1 snappy 8134 8341 395 166 2.4:1","title":"Compression algorithms"},{"location":"backup_barmanobjectstore/#tagging-of-backup-objects","text":"Barman 2.18 introduces support for tagging backup resources when saving them in object stores via barman-cloud-backup and barman-cloud-wal-archive . As a result, if your PostgreSQL container image includes Barman with version 2.18 or higher, CloudNativePG enables you to specify tags as key-value pairs for backup objects, namely base backups, WAL files and history files. You can use two properties in the .spec.backup.barmanObjectStore definition: tags : key-value pair tags to be added to backup objects and archived WAL file in the backup object store historyTags : key-value pair tags to be added to archived history files in the backup object store The excerpt of a YAML manifest below provides an example of usage of this feature: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] tags: backupRetentionPolicy: \"expire\" historyTags: backupRetentionPolicy: \"keep\"","title":"Tagging of backup objects"},{"location":"backup_barmanobjectstore/#extra-options-for-the-backup-and-wal-commands","text":"You can append additional options to the barman-cloud-backup and barman-cloud-wal-archive commands by using the additionalCommandArgs property in the .spec.backup.barmanObjectStore.data and .spec.backup.barmanObjectStore.wal sections respectively. This properties are lists of strings that will be appended to the barman-cloud-backup and barman-cloud-wal-archive commands. For example, you can use the --read-timeout=60 to customize the connection reading timeout. For additional options supported by barman-cloud-backup and barman-cloud-wal-archive commands you can refer to the official barman documentation here . If an option provided in additionalCommandArgs is already present in the declared options in its section ( .spec.backup.barmanObjectStore.data or .spec.backup.barmanObjectStore.wal ), the extra option will be ignored. The following is an example of how to use this property: For backups: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] data: additionalCommandArgs: - \"--min-chunk-size=5MB\" - \"--read-timeout=60\" For WAL files: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: additionalCommandArgs: - \"--max-concurrency=1\" - \"--read-timeout=60\"","title":"Extra options for the backup and WAL commands"},{"location":"backup_recovery/","text":"Backup and Recovery Backup and recovery are in two separate sections.","title":"Backup and Recovery"},{"location":"backup_recovery/#backup-and-recovery","text":"Backup and recovery are in two separate sections.","title":"Backup and Recovery"},{"location":"backup_volumesnapshot/","text":"Backup on volume snapshots Warning As noted in the backup document , a cold snapshot explicitly set to target the primary will result in the primary being fenced for the duration of the backup, rendering the cluster read-only during that For safety, in a cluster already containing fenced instances, a cold snapshot is rejected. CloudNativePG is one of the first known cases of database operators that directly leverages the Kubernetes native Volume Snapshot API for both backup and recovery operations, in an entirely declarative way. About standard Volume Snapshots Volume snapshotting was first introduced in Kubernetes 1.12 (2018) as alpha , promoted to beta in 1.17 (2019) , and moved to GA in 1.20 (2020) . It\u2019s now stable, widely available, and standard, providing 3 custom resource definitions: VolumeSnapshot , VolumeSnapshotContent and VolumeSnapshotClass . This Kubernetes feature defines a generic interface for: the creation of a new volume snapshot, starting from a PVC the deletion of an existing snapshot the creation of a new volume from a snapshot Kubernetes delegates the actual implementation to the underlying CSI drivers (not all of them support volume snapshots). Normally, storage classes that provide volume snapshotting support incremental and differential block level backup in a transparent way for the application , which can delegate the complexity and the independent management down the stack, including cross-cluster availability of the snapshots. Requirements For Volume Snapshots to work with a CloudNativePG cluster, you need to ensure that each storage class used to dynamically provision the PostgreSQL volumes (namely, storage and walStorage sections) support volume snapshots. Given that instructions vary from storage class to storage class, please refer to the documentation of the specific storage class and related CSI drivers you have deployed in your Kubernetes system. Normally, it is the VolumeSnapshotClass that is responsible to ensure that snapshots can be taken from persistent volumes of a given storage class, and managed as VolumeSnapshot and VolumeSnapshotContent resources. Important It is your responsibility to verify with the third party vendor that volume snapshots are supported. CloudNativePG only interacts with the Kubernetes API on this matter and we cannot support issues at the storage level for each specific CSI driver. How to configure Volume Snapshot backups CloudNativePG allows you to configure a given Postgres cluster for Volume Snapshot backups through the backup.volumeSnapshot stanza. Info Please refer to VolumeSnapshotConfiguration in the API reference for a full list of options. A generic example with volume snapshots (assuming that PGDATA and WALs share the same storage class) is the following: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: snapshot-cluster spec: instances: 3 storage: storageClass: @STORAGE_CLASS@ size: 10Gi walStorage: storageClass: @STORAGE_CLASS@ size: 10Gi backup: # Volume snapshot backups volumeSnapshot: className: @VOLUME_SNAPSHOT_CLASS_NAME@ # WAL archive barmanObjectStore: # ... As you can see, the backup section contains both the volumeSnapshot stanza (controlling physical base backups on volume snapshots) and the barmanObjectStore one (controlling the WAL archive ). Info Once you have defined the barmanObjectStore , you can decide to use both volume snapshot and object store backup strategies simultaneously to take physical backups. The volumeSnapshot.className option allows you to reference the default VolumeSnapshotClass object used for all the storage volumes you have defined in your PostgreSQL cluster. Info In case you are using a different storage class for PGDATA and WAL files, you can specify a separate VolumeSnapshotClass for that volume through the walClassName option (which defaults to the same value as className ). Once a cluster is defined for volume snapshot backups, you need to define a ScheduledBackup resource that requests such backups on a periodic basis. Hot and cold backups By default, CloudNativePG requests an online/hot backup on volume snapshots, using the PostgreSQL defaults of the low-level API for base backups : it doesn't request an immediate checkpoint when starting the backup procedure it waits for the WAL archiver to archive the last segment of the backup when terminating the backup procedure Important The default values are suitable for most production environments. Hot backups are consistent and can be used to perform snapshot recovery, as we ensure WAL retention from the start of the backup through a temporary replication slot. However, our recommendation is to rely on cold backups for that purpose. You can explicitly change the default behavior through the following options in the .spec.backup.volumeSnapshot stanza of the Cluster resource: online : accepting true (default) or false as a value onlineConfiguration.immediateCheckpoint : whether you want to request an immediate checkpoint before you start the backup procedure or not; technically, it corresponds to the fast argument you pass to the pg_backup_start / pg_start_backup() function in PostgreSQL, accepting true (default) or false onlineConfiguration.waitForArchive : whether you want to wait for the archiver to process the last segment of the backup or not; technically, it corresponds to the wait_for_archive argument you pass to the pg_backup_stop / pg_stop_backup() function in PostgreSQL, accepting true (default) or false If you want to change the default behavior of your Postgres cluster to take cold backups by default, all you need to do is add the online: false option to your manifest, as follows: # ... backup: volumeSnapshot: online: false # ... If you are instead requesting an immediate checkpoint as the default behavior, you can add this section: # ... backup: volumeSnapshot: online: true onlineConfiguration: immediateCheckpoint: true # ... Overriding the default behavior You can change the default behavior defined in the cluster resource by setting different values for online and, if needed, onlineConfiguration in the Backup or ScheduledBackup objects. For example, in case you want to issue an on-demand cold backup, you can create a Backup object with .spec.online: false : apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: snapshot-cluster-cold-backup-example spec: cluster: name: snapshot-cluster method: volumeSnapshot online: false Similarly, for the ScheduledBackup: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: snapshot-cluster-cold-backup-example spec: schedule: \"0 0 0 * * *\" backupOwnerReference: self cluster: name: snapshot-cluster method: volumeSnapshot online: false Persistence of volume snapshot objects By default, VolumeSnapshot objects created by CloudNativePG are retained after deleting the Backup object that originated them, or the Cluster they refer to. Such behavior is controlled by the .spec.backup.volumeSnapshot.snapshotOwnerReference option which accepts the following values: none : no ownership is set, meaning that VolumeSnapshot objects persist after the Backup and/or the Cluster resources are removed backup : the VolumeSnapshot object is owned by the Backup resource that originated it, and when the backup object is removed, the volume snapshot is also removed cluster : the VolumeSnapshot object is owned by the Cluster resource that is backed up, and when the Postgres cluster is removed, the volume snapshot is also removed In case a VolumeSnapshot is deleted, the deletionPolicy specified in the VolumeSnapshotContent is evaluated: if set to Retain , the VolumeSnapshotContent object is kept if set to Delete , the VolumeSnapshotContent object is removed as well Warning VolumeSnapshotContent objects do not keep all the information regarding the backup and the cluster they refer to (like the annotations and labels that are contained in the VolumeSnapshot object). Although possible, restoring from just this kind of object might not be straightforward. For this reason, our recommendation is to always backup the VolumeSnapshot definitions, even using a Kubernetes level data protection solution. The value in VolumeSnapshotContent is determined by the deletionPolicy set in the corresponding VolumeSnapshotClass definition, which is referenced in the .spec.backup.volumeSnapshot.className option. Please refer to the Kubernetes documentation on Volume Snapshot Classes for details on this standard behavior. Backup Volume Snapshot Deadlines CloudNativePG supports backups using the volume snapshot method. In some environments, volume snapshots may encounter temporary issues that can be retried. The backup.cnpg.io/volumeSnapshotDeadline annotation defines how long CloudNativePG should continue retrying recoverable errors before marking the backup as failed. You can add the backup.cnpg.io/volumeSnapshotDeadline annotation to both Backup and ScheduledBackup resources. For ScheduledBackup resources, this annotation is automatically inherited by any Backup resources created from the schedule. If not specified, the default retry deadline is 10 minutes . Error Handling When a retryable error occurs during a volume snapshot operation: CloudNativePG records the time of the first error. The system retries the operation every 10 seconds . If the error persists beyond the specified deadline (or the default 10 minutes), the backup is marked as failed . Retryable Errors CloudNativePG treats the following types of errors as retryable: Server timeout errors (HTTP 408, 429, 500, 502, 503, 504) Conflicts (optimistic locking errors) Internal errors Context deadline exceeded errors Timeout errors from the CSI snapshot controller Examples You can add the annotation to a ScheduledBackup resource as follows: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: daily-backup-schedule annotations: backup.cnpg.io/volumeSnapshotDeadline: \"20\" spec: schedule: \"0 0 * * *\" backupOwnerReference: self method: volumeSnapshot # other configuration... When you define a ScheduledBackup with the annotation, any Backup resources created from this schedule automatically inherit the specified timeout value. In the following example, all backups created from the schedule will have a 30-minute timeout for retrying recoverable snapshot errors. apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: weekly-backup annotations: backup.cnpg.io/volumeSnapshotDeadline: \"30\" spec: schedule: \"0 0 * * 0\" # Weekly backup on Sunday method: volumeSnapshot cluster: name: my-postgresql-cluster Alternatively, you can add the annotation directly to a Backup Resource: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: my-backup annotations: backup.cnpg.io/volumeSnapshotDeadline: \"15\" spec: method: volumeSnapshot # other backup configuration... Example of Volume Snapshot Backup The following example shows how to configure volume snapshot base backups on an EKS cluster on AWS using the ebs-sc storage class and the csi-aws-vsc volume snapshot class. Important If you are interested in testing the example, please read \"Volume Snapshots\" for the Amazon Elastic Block Store (EBS) CSI driver for detailed instructions on the installation process for the storage class and the snapshot class. The following manifest creates a Cluster that is ready to be used for volume snapshots and that stores the WAL archive in a S3 bucket via IAM role for the Service Account (IRSA, see AWS S3 ): apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: hendrix spec: instances: 3 storage: storageClass: ebs-sc size: 10Gi walStorage: storageClass: ebs-sc size: 10Gi backup: volumeSnapshot: className: csi-aws-vsc barmanObjectStore: destinationPath: s3://@BUCKET_NAME@/ s3Credentials: inheritFromIAMRole: true wal: compression: gzip maxParallel: 2 serviceAccountTemplate: metadata: annotations: eks.amazonaws.com/role-arn: \"@ARN@\" --- apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: hendrix-vs-backup spec: cluster: name: hendrix method: volumeSnapshot schedule: '0 0 0 * * *' backupOwnerReference: cluster immediate: true The last resource defines daily volume snapshot backups at midnight, requesting one immediately after the cluster is created.","title":"Backup on volume snapshots"},{"location":"backup_volumesnapshot/#backup-on-volume-snapshots","text":"Warning As noted in the backup document , a cold snapshot explicitly set to target the primary will result in the primary being fenced for the duration of the backup, rendering the cluster read-only during that For safety, in a cluster already containing fenced instances, a cold snapshot is rejected. CloudNativePG is one of the first known cases of database operators that directly leverages the Kubernetes native Volume Snapshot API for both backup and recovery operations, in an entirely declarative way.","title":"Backup on volume snapshots"},{"location":"backup_volumesnapshot/#about-standard-volume-snapshots","text":"Volume snapshotting was first introduced in Kubernetes 1.12 (2018) as alpha , promoted to beta in 1.17 (2019) , and moved to GA in 1.20 (2020) . It\u2019s now stable, widely available, and standard, providing 3 custom resource definitions: VolumeSnapshot , VolumeSnapshotContent and VolumeSnapshotClass . This Kubernetes feature defines a generic interface for: the creation of a new volume snapshot, starting from a PVC the deletion of an existing snapshot the creation of a new volume from a snapshot Kubernetes delegates the actual implementation to the underlying CSI drivers (not all of them support volume snapshots). Normally, storage classes that provide volume snapshotting support incremental and differential block level backup in a transparent way for the application , which can delegate the complexity and the independent management down the stack, including cross-cluster availability of the snapshots.","title":"About standard Volume Snapshots"},{"location":"backup_volumesnapshot/#requirements","text":"For Volume Snapshots to work with a CloudNativePG cluster, you need to ensure that each storage class used to dynamically provision the PostgreSQL volumes (namely, storage and walStorage sections) support volume snapshots. Given that instructions vary from storage class to storage class, please refer to the documentation of the specific storage class and related CSI drivers you have deployed in your Kubernetes system. Normally, it is the VolumeSnapshotClass that is responsible to ensure that snapshots can be taken from persistent volumes of a given storage class, and managed as VolumeSnapshot and VolumeSnapshotContent resources. Important It is your responsibility to verify with the third party vendor that volume snapshots are supported. CloudNativePG only interacts with the Kubernetes API on this matter and we cannot support issues at the storage level for each specific CSI driver.","title":"Requirements"},{"location":"backup_volumesnapshot/#how-to-configure-volume-snapshot-backups","text":"CloudNativePG allows you to configure a given Postgres cluster for Volume Snapshot backups through the backup.volumeSnapshot stanza. Info Please refer to VolumeSnapshotConfiguration in the API reference for a full list of options. A generic example with volume snapshots (assuming that PGDATA and WALs share the same storage class) is the following: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: snapshot-cluster spec: instances: 3 storage: storageClass: @STORAGE_CLASS@ size: 10Gi walStorage: storageClass: @STORAGE_CLASS@ size: 10Gi backup: # Volume snapshot backups volumeSnapshot: className: @VOLUME_SNAPSHOT_CLASS_NAME@ # WAL archive barmanObjectStore: # ... As you can see, the backup section contains both the volumeSnapshot stanza (controlling physical base backups on volume snapshots) and the barmanObjectStore one (controlling the WAL archive ). Info Once you have defined the barmanObjectStore , you can decide to use both volume snapshot and object store backup strategies simultaneously to take physical backups. The volumeSnapshot.className option allows you to reference the default VolumeSnapshotClass object used for all the storage volumes you have defined in your PostgreSQL cluster. Info In case you are using a different storage class for PGDATA and WAL files, you can specify a separate VolumeSnapshotClass for that volume through the walClassName option (which defaults to the same value as className ). Once a cluster is defined for volume snapshot backups, you need to define a ScheduledBackup resource that requests such backups on a periodic basis.","title":"How to configure Volume Snapshot backups"},{"location":"backup_volumesnapshot/#hot-and-cold-backups","text":"By default, CloudNativePG requests an online/hot backup on volume snapshots, using the PostgreSQL defaults of the low-level API for base backups : it doesn't request an immediate checkpoint when starting the backup procedure it waits for the WAL archiver to archive the last segment of the backup when terminating the backup procedure Important The default values are suitable for most production environments. Hot backups are consistent and can be used to perform snapshot recovery, as we ensure WAL retention from the start of the backup through a temporary replication slot. However, our recommendation is to rely on cold backups for that purpose. You can explicitly change the default behavior through the following options in the .spec.backup.volumeSnapshot stanza of the Cluster resource: online : accepting true (default) or false as a value onlineConfiguration.immediateCheckpoint : whether you want to request an immediate checkpoint before you start the backup procedure or not; technically, it corresponds to the fast argument you pass to the pg_backup_start / pg_start_backup() function in PostgreSQL, accepting true (default) or false onlineConfiguration.waitForArchive : whether you want to wait for the archiver to process the last segment of the backup or not; technically, it corresponds to the wait_for_archive argument you pass to the pg_backup_stop / pg_stop_backup() function in PostgreSQL, accepting true (default) or false If you want to change the default behavior of your Postgres cluster to take cold backups by default, all you need to do is add the online: false option to your manifest, as follows: # ... backup: volumeSnapshot: online: false # ... If you are instead requesting an immediate checkpoint as the default behavior, you can add this section: # ... backup: volumeSnapshot: online: true onlineConfiguration: immediateCheckpoint: true # ...","title":"Hot and cold backups"},{"location":"backup_volumesnapshot/#overriding-the-default-behavior","text":"You can change the default behavior defined in the cluster resource by setting different values for online and, if needed, onlineConfiguration in the Backup or ScheduledBackup objects. For example, in case you want to issue an on-demand cold backup, you can create a Backup object with .spec.online: false : apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: snapshot-cluster-cold-backup-example spec: cluster: name: snapshot-cluster method: volumeSnapshot online: false Similarly, for the ScheduledBackup: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: snapshot-cluster-cold-backup-example spec: schedule: \"0 0 0 * * *\" backupOwnerReference: self cluster: name: snapshot-cluster method: volumeSnapshot online: false","title":"Overriding the default behavior"},{"location":"backup_volumesnapshot/#persistence-of-volume-snapshot-objects","text":"By default, VolumeSnapshot objects created by CloudNativePG are retained after deleting the Backup object that originated them, or the Cluster they refer to. Such behavior is controlled by the .spec.backup.volumeSnapshot.snapshotOwnerReference option which accepts the following values: none : no ownership is set, meaning that VolumeSnapshot objects persist after the Backup and/or the Cluster resources are removed backup : the VolumeSnapshot object is owned by the Backup resource that originated it, and when the backup object is removed, the volume snapshot is also removed cluster : the VolumeSnapshot object is owned by the Cluster resource that is backed up, and when the Postgres cluster is removed, the volume snapshot is also removed In case a VolumeSnapshot is deleted, the deletionPolicy specified in the VolumeSnapshotContent is evaluated: if set to Retain , the VolumeSnapshotContent object is kept if set to Delete , the VolumeSnapshotContent object is removed as well Warning VolumeSnapshotContent objects do not keep all the information regarding the backup and the cluster they refer to (like the annotations and labels that are contained in the VolumeSnapshot object). Although possible, restoring from just this kind of object might not be straightforward. For this reason, our recommendation is to always backup the VolumeSnapshot definitions, even using a Kubernetes level data protection solution. The value in VolumeSnapshotContent is determined by the deletionPolicy set in the corresponding VolumeSnapshotClass definition, which is referenced in the .spec.backup.volumeSnapshot.className option. Please refer to the Kubernetes documentation on Volume Snapshot Classes for details on this standard behavior.","title":"Persistence of volume snapshot objects"},{"location":"backup_volumesnapshot/#backup-volume-snapshot-deadlines","text":"CloudNativePG supports backups using the volume snapshot method. In some environments, volume snapshots may encounter temporary issues that can be retried. The backup.cnpg.io/volumeSnapshotDeadline annotation defines how long CloudNativePG should continue retrying recoverable errors before marking the backup as failed. You can add the backup.cnpg.io/volumeSnapshotDeadline annotation to both Backup and ScheduledBackup resources. For ScheduledBackup resources, this annotation is automatically inherited by any Backup resources created from the schedule. If not specified, the default retry deadline is 10 minutes .","title":"Backup Volume Snapshot Deadlines"},{"location":"backup_volumesnapshot/#error-handling","text":"When a retryable error occurs during a volume snapshot operation: CloudNativePG records the time of the first error. The system retries the operation every 10 seconds . If the error persists beyond the specified deadline (or the default 10 minutes), the backup is marked as failed .","title":"Error Handling"},{"location":"backup_volumesnapshot/#retryable-errors","text":"CloudNativePG treats the following types of errors as retryable: Server timeout errors (HTTP 408, 429, 500, 502, 503, 504) Conflicts (optimistic locking errors) Internal errors Context deadline exceeded errors Timeout errors from the CSI snapshot controller","title":"Retryable Errors"},{"location":"backup_volumesnapshot/#examples","text":"You can add the annotation to a ScheduledBackup resource as follows: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: daily-backup-schedule annotations: backup.cnpg.io/volumeSnapshotDeadline: \"20\" spec: schedule: \"0 0 * * *\" backupOwnerReference: self method: volumeSnapshot # other configuration... When you define a ScheduledBackup with the annotation, any Backup resources created from this schedule automatically inherit the specified timeout value. In the following example, all backups created from the schedule will have a 30-minute timeout for retrying recoverable snapshot errors. apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: weekly-backup annotations: backup.cnpg.io/volumeSnapshotDeadline: \"30\" spec: schedule: \"0 0 * * 0\" # Weekly backup on Sunday method: volumeSnapshot cluster: name: my-postgresql-cluster Alternatively, you can add the annotation directly to a Backup Resource: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: my-backup annotations: backup.cnpg.io/volumeSnapshotDeadline: \"15\" spec: method: volumeSnapshot # other backup configuration...","title":"Examples"},{"location":"backup_volumesnapshot/#example-of-volume-snapshot-backup","text":"The following example shows how to configure volume snapshot base backups on an EKS cluster on AWS using the ebs-sc storage class and the csi-aws-vsc volume snapshot class. Important If you are interested in testing the example, please read \"Volume Snapshots\" for the Amazon Elastic Block Store (EBS) CSI driver for detailed instructions on the installation process for the storage class and the snapshot class. The following manifest creates a Cluster that is ready to be used for volume snapshots and that stores the WAL archive in a S3 bucket via IAM role for the Service Account (IRSA, see AWS S3 ): apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: hendrix spec: instances: 3 storage: storageClass: ebs-sc size: 10Gi walStorage: storageClass: ebs-sc size: 10Gi backup: volumeSnapshot: className: csi-aws-vsc barmanObjectStore: destinationPath: s3://@BUCKET_NAME@/ s3Credentials: inheritFromIAMRole: true wal: compression: gzip maxParallel: 2 serviceAccountTemplate: metadata: annotations: eks.amazonaws.com/role-arn: \"@ARN@\" --- apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: hendrix-vs-backup spec: cluster: name: hendrix method: volumeSnapshot schedule: '0 0 0 * * *' backupOwnerReference: cluster immediate: true The last resource defines daily volume snapshot backups at midnight, requesting one immediately after the cluster is created.","title":"Example of Volume Snapshot Backup"},{"location":"before_you_start/","text":"Before You Start Before we get started, it is essential to go over some terminology that is specific to Kubernetes and PostgreSQL. Kubernetes terminology Node A node is a worker machine in Kubernetes, either virtual or physical, where all services necessary to run pods are managed by the control plane node(s). Postgres Node A Postgres node is a Kubernetes worker node dedicated to running PostgreSQL workloads. This is achieved by applying the node-role.kubernetes.io label and taint, as proposed by CloudNativePG . It is also referred to as a postgres node. Pod A pod is the smallest computing unit that can be deployed in a Kubernetes cluster and is composed of one or more containers that share network and storage. Service A service is an abstraction that exposes as a network service an application that runs on a group of pods and standardizes important features such as service discovery across applications, load balancing, failover, and so on. Secret A secret is an object that is designed to store small amounts of sensitive data such as passwords, access keys, or tokens, and use them in pods. Storage Class A storage class allows an administrator to define the classes of storage in a cluster, including provisioner (such as AWS EBS), reclaim policies, mount options, volume expansion, and so on. Persistent Volume A persistent volume (PV) is a resource in a Kubernetes cluster that represents storage that has been either manually provisioned by an administrator or dynamically provisioned by a storage class controller. A PV is associated with a pod using a persistent volume claim and its lifecycle is independent of any pod that uses it. Normally, a PV is a network volume, especially in the public cloud. A local persistent volume (LPV) is a persistent volume that exists only on the particular node where the pod that uses it is running. Persistent Volume Claim A persistent volume claim (PVC) represents a request for storage, which might include size, access mode, or a particular storage class. Similar to how a pod consumes node resources, a PVC consumes the resources of a PV. Namespace A namespace is a logical and isolated subset of a Kubernetes cluster and can be seen as a virtual cluster within the wider physical cluster. Namespaces allow administrators to create separated environments based on projects, departments, teams, and so on. RBAC Role Based Access Control (RBAC), also known as role-based security , is a method used in computer systems security to restrict access to the network and resources of a system to authorized users only. Kubernetes has a native API to control roles at the namespace and cluster level and associate them with specific resources and individuals. CRD A custom resource definition (CRD) is an extension of the Kubernetes API and allows developers to create new data types and objects, called custom resources . Operator An operator is a custom resource that automates those steps that are normally performed by a human operator when managing one or more applications or given services. An operator assists Kubernetes in making sure that the resource's defined state always matches the observed one. kubectl kubectl is the command-line tool used to manage a Kubernetes cluster. CloudNativePG requires a Kubernetes version supported by the community. Please refer to the \"Supported releases\" page for details. PostgreSQL terminology Instance A Postgres server process running and listening on a pair \"IP address(es)\" and \"TCP port\" (usually 5432). Primary A PostgreSQL instance that can accept both read and write operations. Replica A PostgreSQL instance replicating from the only primary instance in a cluster and is kept updated by reading a stream of Write-Ahead Log (WAL) records. A replica is also known as standby or secondary server. PostgreSQL relies on physical streaming replication (async/sync) and file-based log shipping (async). Hot Standby PostgreSQL feature that allows a replica to accept read-only workloads. Cluster To be intended as High Availability (HA) Cluster: a set of PostgreSQL instances made up by a single primary and an optional arbitrary number of replicas. Replica Cluster A CloudNativePG Cluster that is in continuous recovery mode from a selected PostgreSQL cluster, normally residing outside the Kubernetes cluster. It is a feature that enables multi-cluster deployments in private, public, hybrid, and multi-cloud contexts. Designated Primary A PostgreSQL standby instance in a replica cluster that is in continuous recovery from another PostgreSQL cluster and that is designated to become primary in case the replica cluster becomes primary. Superuser In PostgreSQL a superuser is any role with both LOGIN and SUPERUSER privileges. For security reasons, CloudNativePG performs administrative tasks by connecting to the postgres database as the postgres user via peer authentication over the local Unix Domain Socket. WAL Write-Ahead Logging (WAL) is a standard method for ensuring data integrity in database management systems. PVC group A PVC group in CloudNativePG's terminology is a group of related PVCs belonging to the same PostgreSQL instance, namely the main volume containing the PGDATA ( storage ) and the volume for WALs ( walStorage ). RTO Acronym for \"recovery time objective\", the amount of time a system can be unavailable without adversely impacting the application. RPO Acronym for \"recovery point objective\", a calculation of the level of acceptable data loss following a disaster recovery scenario. Cloud terminology Region A region in the Cloud is an isolated and independent geographic area organized in availability zones . Zones within a region have very little round-trip network latency. Zone An availability zone in the Cloud (also known as zone ) is an area in a region where resources can be deployed. Usually, an availability zone corresponds to a data center or an isolated building of the same data center. What to do next Now that you have familiarized with the terminology, you can decide to test CloudNativePG on your laptop using a local cluster before deploying the operator in your selected cloud environment.","title":"Before You Start"},{"location":"before_you_start/#before-you-start","text":"Before we get started, it is essential to go over some terminology that is specific to Kubernetes and PostgreSQL.","title":"Before You Start"},{"location":"before_you_start/#kubernetes-terminology","text":"Node A node is a worker machine in Kubernetes, either virtual or physical, where all services necessary to run pods are managed by the control plane node(s). Postgres Node A Postgres node is a Kubernetes worker node dedicated to running PostgreSQL workloads. This is achieved by applying the node-role.kubernetes.io label and taint, as proposed by CloudNativePG . It is also referred to as a postgres node. Pod A pod is the smallest computing unit that can be deployed in a Kubernetes cluster and is composed of one or more containers that share network and storage. Service A service is an abstraction that exposes as a network service an application that runs on a group of pods and standardizes important features such as service discovery across applications, load balancing, failover, and so on. Secret A secret is an object that is designed to store small amounts of sensitive data such as passwords, access keys, or tokens, and use them in pods. Storage Class A storage class allows an administrator to define the classes of storage in a cluster, including provisioner (such as AWS EBS), reclaim policies, mount options, volume expansion, and so on. Persistent Volume A persistent volume (PV) is a resource in a Kubernetes cluster that represents storage that has been either manually provisioned by an administrator or dynamically provisioned by a storage class controller. A PV is associated with a pod using a persistent volume claim and its lifecycle is independent of any pod that uses it. Normally, a PV is a network volume, especially in the public cloud. A local persistent volume (LPV) is a persistent volume that exists only on the particular node where the pod that uses it is running. Persistent Volume Claim A persistent volume claim (PVC) represents a request for storage, which might include size, access mode, or a particular storage class. Similar to how a pod consumes node resources, a PVC consumes the resources of a PV. Namespace A namespace is a logical and isolated subset of a Kubernetes cluster and can be seen as a virtual cluster within the wider physical cluster. Namespaces allow administrators to create separated environments based on projects, departments, teams, and so on. RBAC Role Based Access Control (RBAC), also known as role-based security , is a method used in computer systems security to restrict access to the network and resources of a system to authorized users only. Kubernetes has a native API to control roles at the namespace and cluster level and associate them with specific resources and individuals. CRD A custom resource definition (CRD) is an extension of the Kubernetes API and allows developers to create new data types and objects, called custom resources . Operator An operator is a custom resource that automates those steps that are normally performed by a human operator when managing one or more applications or given services. An operator assists Kubernetes in making sure that the resource's defined state always matches the observed one. kubectl kubectl is the command-line tool used to manage a Kubernetes cluster. CloudNativePG requires a Kubernetes version supported by the community. Please refer to the \"Supported releases\" page for details.","title":"Kubernetes terminology"},{"location":"before_you_start/#postgresql-terminology","text":"Instance A Postgres server process running and listening on a pair \"IP address(es)\" and \"TCP port\" (usually 5432). Primary A PostgreSQL instance that can accept both read and write operations. Replica A PostgreSQL instance replicating from the only primary instance in a cluster and is kept updated by reading a stream of Write-Ahead Log (WAL) records. A replica is also known as standby or secondary server. PostgreSQL relies on physical streaming replication (async/sync) and file-based log shipping (async). Hot Standby PostgreSQL feature that allows a replica to accept read-only workloads. Cluster To be intended as High Availability (HA) Cluster: a set of PostgreSQL instances made up by a single primary and an optional arbitrary number of replicas. Replica Cluster A CloudNativePG Cluster that is in continuous recovery mode from a selected PostgreSQL cluster, normally residing outside the Kubernetes cluster. It is a feature that enables multi-cluster deployments in private, public, hybrid, and multi-cloud contexts. Designated Primary A PostgreSQL standby instance in a replica cluster that is in continuous recovery from another PostgreSQL cluster and that is designated to become primary in case the replica cluster becomes primary. Superuser In PostgreSQL a superuser is any role with both LOGIN and SUPERUSER privileges. For security reasons, CloudNativePG performs administrative tasks by connecting to the postgres database as the postgres user via peer authentication over the local Unix Domain Socket. WAL Write-Ahead Logging (WAL) is a standard method for ensuring data integrity in database management systems. PVC group A PVC group in CloudNativePG's terminology is a group of related PVCs belonging to the same PostgreSQL instance, namely the main volume containing the PGDATA ( storage ) and the volume for WALs ( walStorage ). RTO Acronym for \"recovery time objective\", the amount of time a system can be unavailable without adversely impacting the application. RPO Acronym for \"recovery point objective\", a calculation of the level of acceptable data loss following a disaster recovery scenario.","title":"PostgreSQL terminology"},{"location":"before_you_start/#cloud-terminology","text":"Region A region in the Cloud is an isolated and independent geographic area organized in availability zones . Zones within a region have very little round-trip network latency. Zone An availability zone in the Cloud (also known as zone ) is an area in a region where resources can be deployed. Usually, an availability zone corresponds to a data center or an isolated building of the same data center.","title":"Cloud terminology"},{"location":"before_you_start/#what-to-do-next","text":"Now that you have familiarized with the terminology, you can decide to test CloudNativePG on your laptop using a local cluster before deploying the operator in your selected cloud environment.","title":"What to do next"},{"location":"benchmarking/","text":"Benchmarking The CNPG kubectl plugin provides an easy way for benchmarking a PostgreSQL deployment in Kubernetes using CloudNativePG. Benchmarking is focused on two aspects: the database , by relying on pgbench the storage , by relying on fio Important pgbench and fio must be run in a staging or pre-production environment. Do not use these plugins in a production environment, as it might have catastrophic consequences on your databases and the other workloads/applications that run in the same shared environment. pgbench The kubectl CNPG plugin command pgbench executes a user-defined pgbench job against an existing Postgres Cluster. Through the --dry-run flag you can generate the manifest of the job for later modification/execution. A common command structure with pgbench is the following: kubectl cnpg pgbench \\ -n <namespace> <cluster-name> \\ --job-name <pgbench-job> \\ --db-name <db-name> \\ -- <pgbench options> Important Please refer to the pgbench documentation for information about the specific options to be used in your jobs. This example creates a job called pgbench-init that initializes for pgbench OLTP-like purposes the app database in a Cluster named cluster-example , using a scale factor of 1000: kubectl cnpg pgbench \\ --job-name pgbench-init \\ cluster-example \\ -- --initialize --scale 1000 Note This will generate a database with 100000000 records, taking approximately 13GB of space on disk. You can see the progress of the job with: kubectl logs jobs/pgbench-run The following example creates a job called pgbench-run executing pgbench against the previously initialized database for 30 seconds, using a single connection: kubectl cnpg pgbench \\ --job-name pgbench-run \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 The next example runs pgbench against an existing database by using the --db-name flag and the pgbench namespace: kubectl cnpg pgbench \\ --db-name pgbench \\ --job-name pgbench-job \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 By default, jobs do not expire. You can enable automatic deletion with the --ttl flag. The job will be deleted after the specified duration (in seconds). kubectl cnpg pgbench \\ --job-name pgbench-run \\ --ttl 600 \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 If you want to run a pgbench job on a specific worker node, you can use the --node-selector option. Suppose you want to run the previous initialization job on a node having the workload=pgbench label, you can run: kubectl cnpg pgbench \\ --db-name pgbench \\ --job-name pgbench-init \\ --node-selector workload=pgbench \\ cluster-example \\ -- --initialize --scale 1000 The job status can be fetched by running: kubectl get job/pgbench-job -n <namespace> NAME COMPLETIONS DURATION AGE job-name 1/1 15s 41s Once the job is completed the results can be gathered by executing: kubectl logs job/pgbench-job -n <namespace> fio The kubectl CNPG plugin command fio executes a fio job with default values and read operations. Through the --dry-run flag you can generate the manifest of the job for later modification/execution. Note The kubectl plugin command fio will create a deployment with predefined fio job values using a ConfigMap. If you want to provide custom job values, we recommend generating a manifest using the --dry-run flag and providing your custom job values in the generated ConfigMap. Example of default usage: kubectl cnpg fio <fio-name> Example with custom values: kubectl cnpg fio <fio-name> \\ -n <namespace> \\ --storageClass <name> \\ --pvcSize <size> Example of how to run the fio command against a StorageClass named standard and pvcSize: 2Gi in the fio namespace: kubectl cnpg fio fio-job \\ -n fio \\ --storageClass standard \\ --pvcSize 2Gi The deployment status can be fetched by running: kubectl get deployment/fio-job -n fio NAME READY UP-TO-DATE AVAILABLE AGE fio-job 1/1 1 1 14s After running kubectl plugin command fio . It will: Create a PVC Create a ConfigMap representing the configuration of a fio job Create a fio deployment composed by a single Pod, which will run fio on the PVC, create graphs after completing the benchmark and start serving the generated files with a webserver. We use the fio-tools image for that. The Pod created by the deployment will be ready when it starts serving the results. You can forward the port of the pod created by the deployment kubectl port-forward -n <namespace> deployment/<fio-name> 8000 and then use a browser and connect to http://localhost:8000/ to get the data. The default 8k block size has been chosen to emulate a PostgreSQL workload. Disks that cap the amount of available IOPS can show very different throughput values when changing this parameter. Below is an example diagram of sequential writes on a local disk mounted on a dedicated Kubernetes node (1 hour benchmark): After all testing is done, fio deployment and resources can be deleted by: kubectl cnpg fio <fio-job-name> --dry-run | kubectl delete -f - make sure use the same name which was used to create the fio deployment and add namespace if applicable.","title":"Benchmarking"},{"location":"benchmarking/#benchmarking","text":"The CNPG kubectl plugin provides an easy way for benchmarking a PostgreSQL deployment in Kubernetes using CloudNativePG. Benchmarking is focused on two aspects: the database , by relying on pgbench the storage , by relying on fio Important pgbench and fio must be run in a staging or pre-production environment. Do not use these plugins in a production environment, as it might have catastrophic consequences on your databases and the other workloads/applications that run in the same shared environment.","title":"Benchmarking"},{"location":"benchmarking/#pgbench","text":"The kubectl CNPG plugin command pgbench executes a user-defined pgbench job against an existing Postgres Cluster. Through the --dry-run flag you can generate the manifest of the job for later modification/execution. A common command structure with pgbench is the following: kubectl cnpg pgbench \\ -n <namespace> <cluster-name> \\ --job-name <pgbench-job> \\ --db-name <db-name> \\ -- <pgbench options> Important Please refer to the pgbench documentation for information about the specific options to be used in your jobs. This example creates a job called pgbench-init that initializes for pgbench OLTP-like purposes the app database in a Cluster named cluster-example , using a scale factor of 1000: kubectl cnpg pgbench \\ --job-name pgbench-init \\ cluster-example \\ -- --initialize --scale 1000 Note This will generate a database with 100000000 records, taking approximately 13GB of space on disk. You can see the progress of the job with: kubectl logs jobs/pgbench-run The following example creates a job called pgbench-run executing pgbench against the previously initialized database for 30 seconds, using a single connection: kubectl cnpg pgbench \\ --job-name pgbench-run \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 The next example runs pgbench against an existing database by using the --db-name flag and the pgbench namespace: kubectl cnpg pgbench \\ --db-name pgbench \\ --job-name pgbench-job \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 By default, jobs do not expire. You can enable automatic deletion with the --ttl flag. The job will be deleted after the specified duration (in seconds). kubectl cnpg pgbench \\ --job-name pgbench-run \\ --ttl 600 \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 If you want to run a pgbench job on a specific worker node, you can use the --node-selector option. Suppose you want to run the previous initialization job on a node having the workload=pgbench label, you can run: kubectl cnpg pgbench \\ --db-name pgbench \\ --job-name pgbench-init \\ --node-selector workload=pgbench \\ cluster-example \\ -- --initialize --scale 1000 The job status can be fetched by running: kubectl get job/pgbench-job -n <namespace> NAME COMPLETIONS DURATION AGE job-name 1/1 15s 41s Once the job is completed the results can be gathered by executing: kubectl logs job/pgbench-job -n <namespace>","title":"pgbench"},{"location":"benchmarking/#fio","text":"The kubectl CNPG plugin command fio executes a fio job with default values and read operations. Through the --dry-run flag you can generate the manifest of the job for later modification/execution. Note The kubectl plugin command fio will create a deployment with predefined fio job values using a ConfigMap. If you want to provide custom job values, we recommend generating a manifest using the --dry-run flag and providing your custom job values in the generated ConfigMap. Example of default usage: kubectl cnpg fio <fio-name> Example with custom values: kubectl cnpg fio <fio-name> \\ -n <namespace> \\ --storageClass <name> \\ --pvcSize <size> Example of how to run the fio command against a StorageClass named standard and pvcSize: 2Gi in the fio namespace: kubectl cnpg fio fio-job \\ -n fio \\ --storageClass standard \\ --pvcSize 2Gi The deployment status can be fetched by running: kubectl get deployment/fio-job -n fio NAME READY UP-TO-DATE AVAILABLE AGE fio-job 1/1 1 1 14s After running kubectl plugin command fio . It will: Create a PVC Create a ConfigMap representing the configuration of a fio job Create a fio deployment composed by a single Pod, which will run fio on the PVC, create graphs after completing the benchmark and start serving the generated files with a webserver. We use the fio-tools image for that. The Pod created by the deployment will be ready when it starts serving the results. You can forward the port of the pod created by the deployment kubectl port-forward -n <namespace> deployment/<fio-name> 8000 and then use a browser and connect to http://localhost:8000/ to get the data. The default 8k block size has been chosen to emulate a PostgreSQL workload. Disks that cap the amount of available IOPS can show very different throughput values when changing this parameter. Below is an example diagram of sequential writes on a local disk mounted on a dedicated Kubernetes node (1 hour benchmark): After all testing is done, fio deployment and resources can be deleted by: kubectl cnpg fio <fio-job-name> --dry-run | kubectl delete -f - make sure use the same name which was used to create the fio deployment and add namespace if applicable.","title":"fio"},{"location":"bootstrap/","text":"Bootstrap This section describes the options available to create a new PostgreSQL cluster and the design rationale behind them. There are primarily two ways to bootstrap a new cluster: from scratch ( initdb ) from an existing PostgreSQL cluster, either directly ( pg_basebackup ) or indirectly through a physical base backup ( recovery ) The initdb bootstrap also provides the option to import one or more databases from an existing PostgreSQL cluster, even if it's outside Kubernetes or running a different major version of PostgreSQL. For more detailed information about this feature, please refer to the \"Importing Postgres databases\" section. Important Bootstrapping from an existing cluster enables the creation of a replica cluster \u2014an independent PostgreSQL cluster that remains in continuous recovery, stays synchronized with the source cluster, and accepts read-only connections. For more details, refer to the Replica Cluster section . Warning CloudNativePG requires both the postgres user and database to always exist. Using the local Unix Domain Socket, it needs to connect as the postgres user to the postgres database via peer authentication in order to perform administrative tasks on the cluster. DO NOT DELETE the postgres user or the postgres database!!! Info CloudNativePG is gradually introducing support for Kubernetes' native VolumeSnapshot API for both incremental and differential copy in backup and recovery operations - if supported by the underlying storage classes. Please see \"Recovery from Volume Snapshot objects\" for details. The bootstrap section The bootstrap method can be defined in the bootstrap section of the cluster specification. CloudNativePG currently supports the following bootstrap methods: initdb : initialize a new PostgreSQL cluster (default) recovery : create a PostgreSQL cluster by restoring from a base backup of an existing cluster and, if needed, replaying all the available WAL files or up to a given point in time pg_basebackup : create a PostgreSQL cluster by cloning an existing one of the same major version using pg_basebackup through the streaming replication protocol. This method is particularly useful for migrating databases to CloudNativePG, although meeting all requirements can be challenging. Be sure to review the warnings in the pg_basebackup subsection carefully. In contrast to the initdb method, both recovery and pg_basebackup create a new cluster based on another one (either offline or online) and can be used to spin up replica clusters. They both rely on the definition of external clusters. Refer to the replica cluster section for more information. Given the amount of possible backup methods and combinations of backup storage that the CloudNativePG operator provides for recovery , please refer to the dedicated \"Recovery\" section for guidance on each method. API reference Please refer to the \"API reference for the bootstrap section for more information. The externalClusters section The externalClusters section of the cluster manifest can be used to configure access to one or more PostgreSQL clusters as sources . The primary use cases include: Importing Databases: Specify an external source to be utilized during the importation of databases via logical backup and restore, as part of the initdb bootstrap method. Cross-Region Replication: Define a cross-region PostgreSQL cluster employing physical replication, capable of extending across distinct Kubernetes clusters or traditional VM/bare-metal environments. Recovery from Physical Base Backup: Recover, fully or at a given Point-In-Time, a PostgreSQL cluster by referencing a physical base backup. Info Ongoing development will extend the functionality of externalClusters to accommodate additional use cases, such as logical replication and foreign servers in future releases. As far as bootstrapping is concerned, externalClusters can be used to define the source PostgreSQL cluster for either the pg_basebackup method or the recovery one. An external cluster needs to have: a name that identifies the external cluster, to be used as a reference via the source option at least one of the following: information about streaming connection information about the recovery object store , which is a Barman Cloud compatible object store that contains: the WAL archive (required for Point In Time Recovery) the catalog of physical base backups for the Postgres cluster Note A recovery object store is normally an AWS S3, Azure Blob Storage, or Google Cloud Storage source that is managed by Barman Cloud. When only the streaming connection is defined, the source can be used for the pg_basebackup method. When only the recovery object store is defined, the source can be used for the recovery method. When both are defined, any of the two bootstrap methods can be chosen. The following table summarizes your options: Content of externalClusters pg_basebackup recovery Only streaming \u2713 Only object store \u2713 Streaming and object store \u2713 \u2713 Furthermore, in case of pg_basebackup or full recovery point in time, the cluster is eligible for replica cluster mode. This means that the cluster is continuously fed from the source, either via streaming, via WAL shipping through the PostgreSQL's restore_command , or any of the two. API reference Please refer to the \"API reference for the externalClusters section for more information. Password files Whenever a password is supplied within an externalClusters entry, CloudNativePG autonomously manages a PostgreSQL password file for it, residing at /controller/external/NAME/pgpass in each instance. This approach enables CloudNativePG to securely establish connections with an external server without exposing any passwords in the connection string. Instead, the connection safely references the aforementioned file through the passfile connection parameter. Bootstrap an empty cluster ( initdb ) The initdb bootstrap method is used to create a new PostgreSQL cluster from scratch. It is the default one unless specified differently. The following example contains the full structure of the initdb configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app secret: name: app-secret storage: size: 1Gi The above example of bootstrap will: create a new PGDATA folder using PostgreSQL's native initdb command create an unprivileged user named app set the password of the latter ( app ) using the one in the app-secret secret (make sure that username matches the same name of the owner ) create a database called app owned by the app user. Thanks to the convention over configuration paradigm , you can let the operator choose a default database name ( app ) and a default application user name (same as the database name), as well as randomly generate a secure password for both the superuser and the application user in PostgreSQL. Alternatively, you can generate your password, store it as a secret, and use it in the PostgreSQL cluster - as described in the above example. The supplied secret must comply with the specifications of the kubernetes.io/basic-auth type . As a result, the username in the secret must match the one of the owner (for the application secret) and postgres for the superuser one. The following is an example of a basic-auth secret: apiVersion: v1 data: username: YXBw password: cGFzc3dvcmQ= kind: Secret metadata: name: app-secret type: kubernetes.io/basic-auth The application database is the one that should be used to store application data. Applications should connect to the cluster with the user that owns the application database. Important If you need to create additional users, please refer to \"Declarative database role management\" . In case you don't supply any database name, the operator will proceed by convention and create the app database, and adds it to the cluster definition using a defaulting webhook . The user that owns the database defaults to the database name instead. The application user is not used internally by the operator, which instead relies on the superuser to reconcile the cluster with the desired status. Passing Options to initdb The PostgreSQL data directory is initialized using the initdb PostgreSQL command . CloudNativePG enables you to customize the behavior of initdb to modify settings such as default locale configurations and data checksums. Warning CloudNativePG acts only as a direct proxy to initdb for locale-related options, due to the ongoing and significant enhancements in PostgreSQL's locale support. It is your responsibility to ensure that the correct options are provided, following the PostgreSQL documentation, and to verify that the bootstrap process completes successfully. To include custom options in the initdb command, you can use the following parameters: builtinLocale When builtinLocale is set to a value, CloudNativePG passes it to the --builtin-locale option in initdb . This option controls the builtin locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to builtin . Available from PostgreSQL 17. dataChecksums When dataChecksums is set to true , CloudNativePG invokes the -k option in initdb to enable checksums on data pages and help detect corruption by the I/O system - that would otherwise be silent (default: false ). encoding When encoding set to a value, CloudNativePG passes it to the --encoding option in initdb , which selects the encoding of the template database (default: UTF8 ). icuLocale When icuLocale is set to a value, CloudNativePG passes it to the --icu-locale option in initdb . This option controls the ICU locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules When icuRules is set to a value, CloudNativePG passes it to the --icu-rules option in initdb . This option controls the ICU locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to icu . Available from PostgreSQL 16. locale When locale is set to a value, CloudNativePG passes it to the --locale option in initdb . This option controls the locale, as defined in \"Locale Support\" from the PostgreSQL documentation. By default, the locale parameter is empty. In this case, environment variables such as LANG are used to determine the locale. Be aware that these variables can vary between container images, potentially leading to inconsistent behavior. localeCollate When localeCollate is set to a value, CloudNativePG passes it to the --lc-collate option in initdb . This option controls the collation order ( LC_COLLATE subcategory), as defined in \"Locale Support\" from the PostgreSQL documentation (default: C ). localeCType When localeCType is set to a value, CloudNativePG passes it to the --lc-ctype option in initdb . This option controls the collation order ( LC_CTYPE subcategory), as defined in \"Locale Support\" from the PostgreSQL documentation (default: C ). localeProvider When localeProvider is set to a value, CloudNativePG passes it to the --locale-provider option in initdb . This option controls the locale provider, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty, which means libc for PostgreSQL). Available from PostgreSQL 15. walSegmentSize When walSegmentSize is set to a value, CloudNativePG passes it to the --wal-segsize option in initdb (default: not set - defined by PostgreSQL as 16 megabytes). Note The only two locale options that CloudNativePG implements during the initdb bootstrap refer to the LC_COLLATE and LC_TYPE subcategories. The remaining locale subcategories can be configured directly in the PostgreSQL configuration, using the lc_messages , lc_monetary , lc_numeric , and lc_time parameters. The following example enables data checksums and sets the default encoding to LATIN1 : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app dataChecksums: true encoding: 'LATIN1' storage: size: 1Gi Warning CloudNativePG supports another way to customize the behavior of the initdb invocation, using the options subsection. However, given that there are options that can break the behavior of the operator (such as --auth or -d ), this technique is deprecated and will be removed from future versions of the API. Executing Queries After Initialization You can specify a custom list of queries that will be executed once, immediately after the cluster is created and configured. These queries will be executed as the superuser ( postgres ) against three different databases, in this specific order: The postgres database ( postInit section) The template1 database ( postInitTemplate section) The application database ( postInitApplication section) For each of these sections, CloudNativePG provides two ways to specify custom queries, executed in the following order: As a list of SQL queries in the cluster's definition ( postInitSQL , postInitTemplateSQL , and postInitApplicationSQL stanzas) As a list of Secrets and/or ConfigMaps, each containing a SQL script to be executed ( postInitSQLRefs , postInitTemplateSQLRefs , and postInitApplicationSQLRefs stanzas). Secrets are processed before ConfigMaps. Objects in each list will be processed sequentially. Warning Use the postInit , postInitTemplate , and postInitApplication options with extreme care, as queries are run as a superuser and can disrupt the entire cluster. An error in any of those queries will interrupt the bootstrap phase, leaving the cluster incomplete and requiring manual intervention. Important Ensure the existence of entries inside the ConfigMaps or Secrets specified in postInitSQLRefs , postInitTemplateSQLRefs , and postInitApplicationSQLRefs , otherwise the bootstrap will fail. Errors in any of those SQL files will prevent the bootstrap phase from completing successfully. The following example runs a single SQL query as part of the postInitSQL stanza: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app dataChecksums: true localeCollate: 'en_US' localeCType: 'en_US' postInitSQL: - CREATE DATABASE angus storage: size: 1Gi The example below relies on postInitApplicationSQLRefs to specify a secret and a ConfigMap containing the queries to run after the initialization on the application database: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app postInitApplicationSQLRefs: secretRefs: - name: my-secret key: secret.sql configMapRefs: - name: my-configmap key: configmap.sql storage: size: 1Gi Note Within SQL scripts, each SQL statement is executed in a single exec on the server according to the PostgreSQL semantics . Comments can be included, but internal commands like psql cannot. Bootstrap from another cluster CloudNativePG enables bootstrapping a cluster starting from another one of the same major version. This operation can be carried out either connecting directly to the source cluster via streaming replication ( pg_basebackup ), or indirectly via an existing physical base backup ( recovery ). The source cluster must be defined in the externalClusters section, identified by name (our recommendation is to use the same name of the origin cluster). Important By default the recovery method strictly uses the name of the cluster in the externalClusters section to locate the main folder of the backup data within the object store, which is normally reserved for the name of the server. You can specify a different one with the barmanObjectStore.serverName property (by default assigned to the value of name in the external cluster definition). Bootstrap from a backup ( recovery ) Given the variety of backup methods and combinations of backup storage options provided by the CloudNativePG operator for recovery , please refer to the dedicated \"Recovery\" section for detailed guidance on each method. Bootstrap from a live cluster ( pg_basebackup ) The pg_basebackup bootstrap mode allows you to create a new cluster ( target ) as an exact physical copy of an existing and binary-compatible PostgreSQL instance ( source ) managed by CloudNativePG, using a valid streaming replication connection. The source instance can either be a primary or a standby PostgreSQL server. It\u2019s crucial to thoroughly review the requirements section below, as the pros and cons of PostgreSQL physical replication fully apply. The primary use cases for this method include: Reporting and business intelligence clusters that need to be regenerated periodically (daily, weekly) Test databases containing live data that require periodic regeneration (daily, weekly, monthly) and anonymization Rapid spin-up of a standalone replica cluster Physical migrations of CloudNativePG clusters to different namespaces or Kubernetes clusters Important Avoid using this method, based on physical replication, to migrate an existing PostgreSQL cluster outside of Kubernetes into CloudNativePG, unless you are completely certain that all requirements are met and the operation has been thoroughly tested. The CloudNativePG community does not endorse this approach for such use cases, and recommends using logical import instead. It is exceedingly rare that all requirements for physical replication are met in a way that seamlessly works with CloudNativePG. Warning In its current implementation, this method clones the source PostgreSQL instance, thereby creating a snapshot . Once the cloning process has finished, the new cluster is immediately started. Refer to \"Current limitations\" for more details. Similar to the recovery bootstrap method, once the cloning operation is complete, the operator takes full ownership of the target cluster, starting from the first instance. This includes overriding certain configuration parameters as required by CloudNativePG, resetting the superuser password, creating the streaming_replica user, managing replicas, and more. The resulting cluster operates independently from the source instance. Important Configuring the network connection between the target and source instances lies outside the scope of CloudNativePG documentation, as it depends heavily on the specific context and environment. The streaming replication client on the target instance, managed transparently by pg_basebackup , can authenticate on the source instance using one of the following methods: Username/password TLS client certificate Both authentication methods are detailed below. Requirements The following requirements apply to the pg_basebackup bootstrap method: target and source must have the same hardware architecture target and source must have the same major PostgreSQL version target and source must have the same tablespaces source must be configured with enough max_wal_senders to grant access from the target for this one-off operation by providing at least one walsender for the backup plus one for WAL streaming the network between source and target must be configured to enable the target instance to connect to the PostgreSQL port on the source instance source must have a role with REPLICATION LOGIN privileges and must accept connections from the target instance for this role in pg_hba.conf , preferably via TLS (see \"About the replication user\" below) target must be able to successfully connect to the source PostgreSQL instance using a role with REPLICATION LOGIN privileges Seealso For further information, please refer to the \"Planning\" section for Warm Standby , the pg_basebackup page and the \"High Availability, Load Balancing, and Replication\" chapter in the PostgreSQL documentation. About the replication user As explained in the requirements section, you need to have a user with either the SUPERUSER or, preferably, just the REPLICATION privilege in the source instance. If the source database is created with CloudNativePG, you can reuse the streaming_replica user and take advantage of client TLS certificates authentication (which, by default, is the only allowed connection method for streaming_replica ). For all other cases, including outside Kubernetes, please verify that you already have a user with the REPLICATION privilege, or create a new one by following the instructions below. As postgres user on the source system, please run: createuser -P --replication streaming_replica Enter the password at the prompt and save it for later, as you will need to add it to a secret in the target instance. Note Although the name is not important, we will use streaming_replica for the sake of simplicity. Feel free to change it as you like, provided you adapt the instructions in the following sections. Username/Password authentication The first authentication method supported by CloudNativePG with the pg_basebackup bootstrap is based on username and password matching. Make sure you have the following information before you start the procedure: location of the source instance, identified by a hostname or an IP address and a TCP port replication username ( streaming_replica for simplicity) password You might need to add a line similar to the following to the pg_hba.conf file on the source PostgreSQL instance: # A more restrictive rule for TLS and IP of origin is recommended host replication streaming_replica all md5 The following manifest creates a new PostgreSQL 17.5 cluster, called target-db , using the pg_basebackup bootstrap method to clone an external PostgreSQL cluster defined as source-db (in the externalClusters array). As you can see, the source-db definition points to the source-db.foo.com host and connects as the streaming_replica user, whose password is stored in the password key of the source-db-replica-user secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: target-db spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 bootstrap: pg_basebackup: source: source-db storage: size: 1Gi externalClusters: - name: source-db connectionParameters: host: source-db.foo.com user: streaming_replica password: name: source-db-replica-user key: password All the requirements must be met for the clone operation to work, including the same PostgreSQL version (in our case 17.5). TLS certificate authentication The second authentication method supported by CloudNativePG with the pg_basebackup bootstrap is based on TLS client certificates. This is the recommended approach from a security standpoint. The following example clones an existing PostgreSQL cluster ( cluster-example ) in the same Kubernetes cluster. Note This example can be easily adapted to cover an instance that resides outside the Kubernetes cluster. The manifest defines a new PostgreSQL 17.5 cluster called cluster-clone-tls , which is bootstrapped using the pg_basebackup method from the cluster-example external cluster. The host is identified by the read/write service in the same cluster, while the streaming_replica user is authenticated thanks to the provided keys, certificate, and certification authority information (respectively in the cluster-example-replication and cluster-example-ca secrets). apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-clone-tls spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 bootstrap: pg_basebackup: source: cluster-example storage: size: 1Gi externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw.default.svc user: streaming_replica sslmode: verify-full sslKey: name: cluster-example-replication key: tls.key sslCert: name: cluster-example-replication key: tls.crt sslRootCert: name: cluster-example-ca key: ca.crt Configure the application database We also support to configure the application database for cluster which bootstrap from a live cluster, just like the case of initdb and recovery bootstrap method. If the new cluster is created as a replica cluster (with replica mode enabled), application database configuration will be skipped. Important While the Cluster is in recovery mode, no changes to the database, including the catalog, are permitted. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. During the recovery phase, roles remain as defined in the source cluster. The example below configures the app database with the owner app and the password stored in the provided secret app-secret , following the bootstrap from a live cluster. apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: bootstrap: pg_basebackup: database: app owner: app secret: name: app-secret source: cluster-example With the above configuration, the following will happen only after recovery is completed : If the app database does not exist, it will be created. If the app user does not exist, it will be created. If the app user is not the owner of the app database, ownership will be granted to the app user. If the username value matches the owner value in the secret, the password for the application user (the app user in this case) will be updated to the password value in the secret. Current limitations Snapshot copy The pg_basebackup method takes a snapshot of the source instance in the form of a PostgreSQL base backup. All transactions written from the start of the backup to the correct termination of the backup will be streamed to the target instance using a second connection (see the --wal-method=stream option for pg_basebackup ). Once the backup is completed, the new instance will be started on a new timeline and diverge from the source. For this reason, it is advised to stop all write operations to the source database before migrating to the target database. Note that this limitation applies only if the target cluster is not defined as a replica cluster. Important Before you attempt a migration, you must test both the procedure and the applications. In particular, it is fundamental that you run the migration procedure as many times as needed to systematically measure the downtime of your applications in production.","title":"Bootstrap"},{"location":"bootstrap/#bootstrap","text":"This section describes the options available to create a new PostgreSQL cluster and the design rationale behind them. There are primarily two ways to bootstrap a new cluster: from scratch ( initdb ) from an existing PostgreSQL cluster, either directly ( pg_basebackup ) or indirectly through a physical base backup ( recovery ) The initdb bootstrap also provides the option to import one or more databases from an existing PostgreSQL cluster, even if it's outside Kubernetes or running a different major version of PostgreSQL. For more detailed information about this feature, please refer to the \"Importing Postgres databases\" section. Important Bootstrapping from an existing cluster enables the creation of a replica cluster \u2014an independent PostgreSQL cluster that remains in continuous recovery, stays synchronized with the source cluster, and accepts read-only connections. For more details, refer to the Replica Cluster section . Warning CloudNativePG requires both the postgres user and database to always exist. Using the local Unix Domain Socket, it needs to connect as the postgres user to the postgres database via peer authentication in order to perform administrative tasks on the cluster. DO NOT DELETE the postgres user or the postgres database!!! Info CloudNativePG is gradually introducing support for Kubernetes' native VolumeSnapshot API for both incremental and differential copy in backup and recovery operations - if supported by the underlying storage classes. Please see \"Recovery from Volume Snapshot objects\" for details.","title":"Bootstrap"},{"location":"bootstrap/#the-bootstrap-section","text":"The bootstrap method can be defined in the bootstrap section of the cluster specification. CloudNativePG currently supports the following bootstrap methods: initdb : initialize a new PostgreSQL cluster (default) recovery : create a PostgreSQL cluster by restoring from a base backup of an existing cluster and, if needed, replaying all the available WAL files or up to a given point in time pg_basebackup : create a PostgreSQL cluster by cloning an existing one of the same major version using pg_basebackup through the streaming replication protocol. This method is particularly useful for migrating databases to CloudNativePG, although meeting all requirements can be challenging. Be sure to review the warnings in the pg_basebackup subsection carefully. In contrast to the initdb method, both recovery and pg_basebackup create a new cluster based on another one (either offline or online) and can be used to spin up replica clusters. They both rely on the definition of external clusters. Refer to the replica cluster section for more information. Given the amount of possible backup methods and combinations of backup storage that the CloudNativePG operator provides for recovery , please refer to the dedicated \"Recovery\" section for guidance on each method. API reference Please refer to the \"API reference for the bootstrap section for more information.","title":"The bootstrap section"},{"location":"bootstrap/#the-externalclusters-section","text":"The externalClusters section of the cluster manifest can be used to configure access to one or more PostgreSQL clusters as sources . The primary use cases include: Importing Databases: Specify an external source to be utilized during the importation of databases via logical backup and restore, as part of the initdb bootstrap method. Cross-Region Replication: Define a cross-region PostgreSQL cluster employing physical replication, capable of extending across distinct Kubernetes clusters or traditional VM/bare-metal environments. Recovery from Physical Base Backup: Recover, fully or at a given Point-In-Time, a PostgreSQL cluster by referencing a physical base backup. Info Ongoing development will extend the functionality of externalClusters to accommodate additional use cases, such as logical replication and foreign servers in future releases. As far as bootstrapping is concerned, externalClusters can be used to define the source PostgreSQL cluster for either the pg_basebackup method or the recovery one. An external cluster needs to have: a name that identifies the external cluster, to be used as a reference via the source option at least one of the following: information about streaming connection information about the recovery object store , which is a Barman Cloud compatible object store that contains: the WAL archive (required for Point In Time Recovery) the catalog of physical base backups for the Postgres cluster Note A recovery object store is normally an AWS S3, Azure Blob Storage, or Google Cloud Storage source that is managed by Barman Cloud. When only the streaming connection is defined, the source can be used for the pg_basebackup method. When only the recovery object store is defined, the source can be used for the recovery method. When both are defined, any of the two bootstrap methods can be chosen. The following table summarizes your options: Content of externalClusters pg_basebackup recovery Only streaming \u2713 Only object store \u2713 Streaming and object store \u2713 \u2713 Furthermore, in case of pg_basebackup or full recovery point in time, the cluster is eligible for replica cluster mode. This means that the cluster is continuously fed from the source, either via streaming, via WAL shipping through the PostgreSQL's restore_command , or any of the two. API reference Please refer to the \"API reference for the externalClusters section for more information.","title":"The externalClusters section"},{"location":"bootstrap/#password-files","text":"Whenever a password is supplied within an externalClusters entry, CloudNativePG autonomously manages a PostgreSQL password file for it, residing at /controller/external/NAME/pgpass in each instance. This approach enables CloudNativePG to securely establish connections with an external server without exposing any passwords in the connection string. Instead, the connection safely references the aforementioned file through the passfile connection parameter.","title":"Password files"},{"location":"bootstrap/#bootstrap-an-empty-cluster-initdb","text":"The initdb bootstrap method is used to create a new PostgreSQL cluster from scratch. It is the default one unless specified differently. The following example contains the full structure of the initdb configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app secret: name: app-secret storage: size: 1Gi The above example of bootstrap will: create a new PGDATA folder using PostgreSQL's native initdb command create an unprivileged user named app set the password of the latter ( app ) using the one in the app-secret secret (make sure that username matches the same name of the owner ) create a database called app owned by the app user. Thanks to the convention over configuration paradigm , you can let the operator choose a default database name ( app ) and a default application user name (same as the database name), as well as randomly generate a secure password for both the superuser and the application user in PostgreSQL. Alternatively, you can generate your password, store it as a secret, and use it in the PostgreSQL cluster - as described in the above example. The supplied secret must comply with the specifications of the kubernetes.io/basic-auth type . As a result, the username in the secret must match the one of the owner (for the application secret) and postgres for the superuser one. The following is an example of a basic-auth secret: apiVersion: v1 data: username: YXBw password: cGFzc3dvcmQ= kind: Secret metadata: name: app-secret type: kubernetes.io/basic-auth The application database is the one that should be used to store application data. Applications should connect to the cluster with the user that owns the application database. Important If you need to create additional users, please refer to \"Declarative database role management\" . In case you don't supply any database name, the operator will proceed by convention and create the app database, and adds it to the cluster definition using a defaulting webhook . The user that owns the database defaults to the database name instead. The application user is not used internally by the operator, which instead relies on the superuser to reconcile the cluster with the desired status.","title":"Bootstrap an empty cluster (initdb)"},{"location":"bootstrap/#passing-options-to-initdb","text":"The PostgreSQL data directory is initialized using the initdb PostgreSQL command . CloudNativePG enables you to customize the behavior of initdb to modify settings such as default locale configurations and data checksums. Warning CloudNativePG acts only as a direct proxy to initdb for locale-related options, due to the ongoing and significant enhancements in PostgreSQL's locale support. It is your responsibility to ensure that the correct options are provided, following the PostgreSQL documentation, and to verify that the bootstrap process completes successfully. To include custom options in the initdb command, you can use the following parameters: builtinLocale When builtinLocale is set to a value, CloudNativePG passes it to the --builtin-locale option in initdb . This option controls the builtin locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to builtin . Available from PostgreSQL 17. dataChecksums When dataChecksums is set to true , CloudNativePG invokes the -k option in initdb to enable checksums on data pages and help detect corruption by the I/O system - that would otherwise be silent (default: false ). encoding When encoding set to a value, CloudNativePG passes it to the --encoding option in initdb , which selects the encoding of the template database (default: UTF8 ). icuLocale When icuLocale is set to a value, CloudNativePG passes it to the --icu-locale option in initdb . This option controls the ICU locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules When icuRules is set to a value, CloudNativePG passes it to the --icu-rules option in initdb . This option controls the ICU locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to icu . Available from PostgreSQL 16. locale When locale is set to a value, CloudNativePG passes it to the --locale option in initdb . This option controls the locale, as defined in \"Locale Support\" from the PostgreSQL documentation. By default, the locale parameter is empty. In this case, environment variables such as LANG are used to determine the locale. Be aware that these variables can vary between container images, potentially leading to inconsistent behavior. localeCollate When localeCollate is set to a value, CloudNativePG passes it to the --lc-collate option in initdb . This option controls the collation order ( LC_COLLATE subcategory), as defined in \"Locale Support\" from the PostgreSQL documentation (default: C ). localeCType When localeCType is set to a value, CloudNativePG passes it to the --lc-ctype option in initdb . This option controls the collation order ( LC_CTYPE subcategory), as defined in \"Locale Support\" from the PostgreSQL documentation (default: C ). localeProvider When localeProvider is set to a value, CloudNativePG passes it to the --locale-provider option in initdb . This option controls the locale provider, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty, which means libc for PostgreSQL). Available from PostgreSQL 15. walSegmentSize When walSegmentSize is set to a value, CloudNativePG passes it to the --wal-segsize option in initdb (default: not set - defined by PostgreSQL as 16 megabytes). Note The only two locale options that CloudNativePG implements during the initdb bootstrap refer to the LC_COLLATE and LC_TYPE subcategories. The remaining locale subcategories can be configured directly in the PostgreSQL configuration, using the lc_messages , lc_monetary , lc_numeric , and lc_time parameters. The following example enables data checksums and sets the default encoding to LATIN1 : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app dataChecksums: true encoding: 'LATIN1' storage: size: 1Gi Warning CloudNativePG supports another way to customize the behavior of the initdb invocation, using the options subsection. However, given that there are options that can break the behavior of the operator (such as --auth or -d ), this technique is deprecated and will be removed from future versions of the API.","title":"Passing Options to initdb"},{"location":"bootstrap/#executing-queries-after-initialization","text":"You can specify a custom list of queries that will be executed once, immediately after the cluster is created and configured. These queries will be executed as the superuser ( postgres ) against three different databases, in this specific order: The postgres database ( postInit section) The template1 database ( postInitTemplate section) The application database ( postInitApplication section) For each of these sections, CloudNativePG provides two ways to specify custom queries, executed in the following order: As a list of SQL queries in the cluster's definition ( postInitSQL , postInitTemplateSQL , and postInitApplicationSQL stanzas) As a list of Secrets and/or ConfigMaps, each containing a SQL script to be executed ( postInitSQLRefs , postInitTemplateSQLRefs , and postInitApplicationSQLRefs stanzas). Secrets are processed before ConfigMaps. Objects in each list will be processed sequentially. Warning Use the postInit , postInitTemplate , and postInitApplication options with extreme care, as queries are run as a superuser and can disrupt the entire cluster. An error in any of those queries will interrupt the bootstrap phase, leaving the cluster incomplete and requiring manual intervention. Important Ensure the existence of entries inside the ConfigMaps or Secrets specified in postInitSQLRefs , postInitTemplateSQLRefs , and postInitApplicationSQLRefs , otherwise the bootstrap will fail. Errors in any of those SQL files will prevent the bootstrap phase from completing successfully. The following example runs a single SQL query as part of the postInitSQL stanza: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app dataChecksums: true localeCollate: 'en_US' localeCType: 'en_US' postInitSQL: - CREATE DATABASE angus storage: size: 1Gi The example below relies on postInitApplicationSQLRefs to specify a secret and a ConfigMap containing the queries to run after the initialization on the application database: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app postInitApplicationSQLRefs: secretRefs: - name: my-secret key: secret.sql configMapRefs: - name: my-configmap key: configmap.sql storage: size: 1Gi Note Within SQL scripts, each SQL statement is executed in a single exec on the server according to the PostgreSQL semantics . Comments can be included, but internal commands like psql cannot.","title":"Executing Queries After Initialization"},{"location":"bootstrap/#bootstrap-from-another-cluster","text":"CloudNativePG enables bootstrapping a cluster starting from another one of the same major version. This operation can be carried out either connecting directly to the source cluster via streaming replication ( pg_basebackup ), or indirectly via an existing physical base backup ( recovery ). The source cluster must be defined in the externalClusters section, identified by name (our recommendation is to use the same name of the origin cluster). Important By default the recovery method strictly uses the name of the cluster in the externalClusters section to locate the main folder of the backup data within the object store, which is normally reserved for the name of the server. You can specify a different one with the barmanObjectStore.serverName property (by default assigned to the value of name in the external cluster definition).","title":"Bootstrap from another cluster"},{"location":"bootstrap/#bootstrap-from-a-backup-recovery","text":"Given the variety of backup methods and combinations of backup storage options provided by the CloudNativePG operator for recovery , please refer to the dedicated \"Recovery\" section for detailed guidance on each method.","title":"Bootstrap from a backup (recovery)"},{"location":"bootstrap/#bootstrap-from-a-live-cluster-pg_basebackup","text":"The pg_basebackup bootstrap mode allows you to create a new cluster ( target ) as an exact physical copy of an existing and binary-compatible PostgreSQL instance ( source ) managed by CloudNativePG, using a valid streaming replication connection. The source instance can either be a primary or a standby PostgreSQL server. It\u2019s crucial to thoroughly review the requirements section below, as the pros and cons of PostgreSQL physical replication fully apply. The primary use cases for this method include: Reporting and business intelligence clusters that need to be regenerated periodically (daily, weekly) Test databases containing live data that require periodic regeneration (daily, weekly, monthly) and anonymization Rapid spin-up of a standalone replica cluster Physical migrations of CloudNativePG clusters to different namespaces or Kubernetes clusters Important Avoid using this method, based on physical replication, to migrate an existing PostgreSQL cluster outside of Kubernetes into CloudNativePG, unless you are completely certain that all requirements are met and the operation has been thoroughly tested. The CloudNativePG community does not endorse this approach for such use cases, and recommends using logical import instead. It is exceedingly rare that all requirements for physical replication are met in a way that seamlessly works with CloudNativePG. Warning In its current implementation, this method clones the source PostgreSQL instance, thereby creating a snapshot . Once the cloning process has finished, the new cluster is immediately started. Refer to \"Current limitations\" for more details. Similar to the recovery bootstrap method, once the cloning operation is complete, the operator takes full ownership of the target cluster, starting from the first instance. This includes overriding certain configuration parameters as required by CloudNativePG, resetting the superuser password, creating the streaming_replica user, managing replicas, and more. The resulting cluster operates independently from the source instance. Important Configuring the network connection between the target and source instances lies outside the scope of CloudNativePG documentation, as it depends heavily on the specific context and environment. The streaming replication client on the target instance, managed transparently by pg_basebackup , can authenticate on the source instance using one of the following methods: Username/password TLS client certificate Both authentication methods are detailed below.","title":"Bootstrap from a live cluster (pg_basebackup)"},{"location":"bootstrap/#requirements","text":"The following requirements apply to the pg_basebackup bootstrap method: target and source must have the same hardware architecture target and source must have the same major PostgreSQL version target and source must have the same tablespaces source must be configured with enough max_wal_senders to grant access from the target for this one-off operation by providing at least one walsender for the backup plus one for WAL streaming the network between source and target must be configured to enable the target instance to connect to the PostgreSQL port on the source instance source must have a role with REPLICATION LOGIN privileges and must accept connections from the target instance for this role in pg_hba.conf , preferably via TLS (see \"About the replication user\" below) target must be able to successfully connect to the source PostgreSQL instance using a role with REPLICATION LOGIN privileges Seealso For further information, please refer to the \"Planning\" section for Warm Standby , the pg_basebackup page and the \"High Availability, Load Balancing, and Replication\" chapter in the PostgreSQL documentation.","title":"Requirements"},{"location":"bootstrap/#about-the-replication-user","text":"As explained in the requirements section, you need to have a user with either the SUPERUSER or, preferably, just the REPLICATION privilege in the source instance. If the source database is created with CloudNativePG, you can reuse the streaming_replica user and take advantage of client TLS certificates authentication (which, by default, is the only allowed connection method for streaming_replica ). For all other cases, including outside Kubernetes, please verify that you already have a user with the REPLICATION privilege, or create a new one by following the instructions below. As postgres user on the source system, please run: createuser -P --replication streaming_replica Enter the password at the prompt and save it for later, as you will need to add it to a secret in the target instance. Note Although the name is not important, we will use streaming_replica for the sake of simplicity. Feel free to change it as you like, provided you adapt the instructions in the following sections.","title":"About the replication user"},{"location":"bootstrap/#usernamepassword-authentication","text":"The first authentication method supported by CloudNativePG with the pg_basebackup bootstrap is based on username and password matching. Make sure you have the following information before you start the procedure: location of the source instance, identified by a hostname or an IP address and a TCP port replication username ( streaming_replica for simplicity) password You might need to add a line similar to the following to the pg_hba.conf file on the source PostgreSQL instance: # A more restrictive rule for TLS and IP of origin is recommended host replication streaming_replica all md5 The following manifest creates a new PostgreSQL 17.5 cluster, called target-db , using the pg_basebackup bootstrap method to clone an external PostgreSQL cluster defined as source-db (in the externalClusters array). As you can see, the source-db definition points to the source-db.foo.com host and connects as the streaming_replica user, whose password is stored in the password key of the source-db-replica-user secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: target-db spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 bootstrap: pg_basebackup: source: source-db storage: size: 1Gi externalClusters: - name: source-db connectionParameters: host: source-db.foo.com user: streaming_replica password: name: source-db-replica-user key: password All the requirements must be met for the clone operation to work, including the same PostgreSQL version (in our case 17.5).","title":"Username/Password authentication"},{"location":"bootstrap/#tls-certificate-authentication","text":"The second authentication method supported by CloudNativePG with the pg_basebackup bootstrap is based on TLS client certificates. This is the recommended approach from a security standpoint. The following example clones an existing PostgreSQL cluster ( cluster-example ) in the same Kubernetes cluster. Note This example can be easily adapted to cover an instance that resides outside the Kubernetes cluster. The manifest defines a new PostgreSQL 17.5 cluster called cluster-clone-tls , which is bootstrapped using the pg_basebackup method from the cluster-example external cluster. The host is identified by the read/write service in the same cluster, while the streaming_replica user is authenticated thanks to the provided keys, certificate, and certification authority information (respectively in the cluster-example-replication and cluster-example-ca secrets). apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-clone-tls spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 bootstrap: pg_basebackup: source: cluster-example storage: size: 1Gi externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw.default.svc user: streaming_replica sslmode: verify-full sslKey: name: cluster-example-replication key: tls.key sslCert: name: cluster-example-replication key: tls.crt sslRootCert: name: cluster-example-ca key: ca.crt","title":"TLS certificate authentication"},{"location":"bootstrap/#configure-the-application-database","text":"We also support to configure the application database for cluster which bootstrap from a live cluster, just like the case of initdb and recovery bootstrap method. If the new cluster is created as a replica cluster (with replica mode enabled), application database configuration will be skipped. Important While the Cluster is in recovery mode, no changes to the database, including the catalog, are permitted. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. During the recovery phase, roles remain as defined in the source cluster. The example below configures the app database with the owner app and the password stored in the provided secret app-secret , following the bootstrap from a live cluster. apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: bootstrap: pg_basebackup: database: app owner: app secret: name: app-secret source: cluster-example With the above configuration, the following will happen only after recovery is completed : If the app database does not exist, it will be created. If the app user does not exist, it will be created. If the app user is not the owner of the app database, ownership will be granted to the app user. If the username value matches the owner value in the secret, the password for the application user (the app user in this case) will be updated to the password value in the secret.","title":"Configure the application database"},{"location":"bootstrap/#current-limitations","text":"","title":"Current limitations"},{"location":"bootstrap/#snapshot-copy","text":"The pg_basebackup method takes a snapshot of the source instance in the form of a PostgreSQL base backup. All transactions written from the start of the backup to the correct termination of the backup will be streamed to the target instance using a second connection (see the --wal-method=stream option for pg_basebackup ). Once the backup is completed, the new instance will be started on a new timeline and diverge from the source. For this reason, it is advised to stop all write operations to the source database before migrating to the target database. Note that this limitation applies only if the target cluster is not defined as a replica cluster. Important Before you attempt a migration, you must test both the procedure and the applications. In particular, it is fundamental that you run the migration procedure as many times as needed to systematically measure the downtime of your applications in production.","title":"Snapshot copy"},{"location":"certificates/","text":"Certificates CloudNativePG was designed to natively support TLS certificates. To set up a cluster, the operator requires: A server certification authority (CA) certificate A server TLS certificate signed by the server CA A client CA certificate A streaming replication client certificate generated by the client CA Note You can find all the secrets used by the cluster and their expiration dates in the cluster's status. CloudNativePG is very flexible when it comes to TLS certificates. It primarily operates in two modes: Operator managed \u2013 Certificates are internally managed by the operator in a fully automated way and signed using a CA created by CloudNativePG. User provided \u2013 Certificates are generated outside the operator and imported in the cluster definition as secrets. CloudNativePG integrates itself with cert-manager (See Cert-manager example .) You can also choose a hybrid approach, where only part of the certificates is generated outside CNPG. Note The operator and instances verify server certificates against the CA only, disregarding the DNS name. This approach is due to the typical absence of DNS names in user-provided certificates for the <cluster>-rw service used for communication within the cluster. Operator-Managed Mode By default, the operator automatically generates a single Certificate Authority (CA) to issue both client and server certificates. These certificates are managed continuously by the operator, with automatic renewal 7 days before expiration (within a 90-day validity period). Info You can adjust this default behavior by configuring the CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD environment variables. For detailed guidance, refer to the Operator Configuration . Important Certificate renewal does not cause any downtime for the PostgreSQL server, as a simple reload operation is sufficient. However, any user-managed certificates not controlled by CloudNativePG must be re-issued following the renewal process. When generating certificates, the operator assumes that the Kubernetes cluster's DNS zone is set to cluster.local by default. This behavior can be customized by setting the KUBERNETES_CLUSTER_DOMAIN environment variable. A convenient alternative is to use the operator's configuration capability . Server certificates Server CA secret The operator generates a self-signed CA and stores it in a generic secret containing the following keys: ca.crt \u2013 CA certificate used to validate the server certificate, used as sslrootcert in clients' connection strings. ca.key \u2013 The key used to sign the server SSL certificate automatically. Server TLS secret The operator uses the generated self-signed CA to sign a server TLS certificate. It's stored in a secret of type kubernetes.io/tls and configured to be used as ssl_cert_file and ssl_key_file by the instances. This approach enables clients to verify their identity and connect securely. Server alternative DNS names In addition to the default ones, you can specify DNS server alternative names as part of the generated server TLS secret. Client certificates Client CA secret By default, the same self-signed CA as the server CA is used. The public part is passed as ssl_ca_file to all the instances so it can verify client certificates it signed. The private key is stored in the same secret and used to sign client certificates generated by the kubectl cnpg plugin. Client streaming_replica certificate The operator uses the generated self-signed CA to sign a client certificate for the user streaming_replica , storing it in a secret of type kubernetes.io/tls . To allow secure connection to the primary instance, this certificate is passed as sslcert and sslkey in the replicas' connection strings. User-provided certificates mode Server certificates If required, you can also provide the two server certificates, generating them using a separate component such as cert-manager . To use a custom server TLS certificate for a cluster, you must specify the following parameters: serverTLSSecret \u2013 The name of a secret of type kubernetes.io/tls containing the server TLS certificate. It must contain both the standard tls.crt and tls.key keys. serverCASecret \u2013 The name of a secret containing the ca.crt key. Note The operator still creates and manages the two secrets related to client certificates. Note The operator and instances verify server certificates against the CA only, disregarding the DNS name. This approach is due to the typical absence of DNS names in user-provided certificates for the <cluster>-rw service used for communication within the cluster. Note If you want ConfigMaps and secrets to be reloaded by instances, you can add a label with the key cnpg.io/reload to it. Otherwise you must reload the instances using the kubectl cnpg reload subcommand. Example Given the following files: server-ca.crt \u2013 The certificate of the CA that signed the server TLS certificate. server.crt \u2013 The certificate of the server TLS certificate. server.key \u2013 The private key of the server TLS certificate. Create a secret containing the CA certificate: kubectl create secret generic my-postgresql-server-ca \\ --from-file=ca.crt=./server-ca.crt Create a secret with the TLS certificate: kubectl create secret tls my-postgresql-server \\ --cert=./server.crt --key=./server.key Create a PostgreSQL cluster referencing those secrets: kubectl apply -f - <<EOF apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: serverCASecret: my-postgresql-server-ca serverTLSSecret: my-postgresql-server storage: storageClass: standard size: 1Gi EOF The new cluster uses the provided server certificates for TLS connections. Cert-manager example This simple example shows how to use cert-manager to set up a self-signed CA and generate the needed TLS server certificate: --- apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: selfsigned-issuer spec: selfSigned: {} --- apiVersion: v1 kind: Secret metadata: name: my-postgres-server-cert labels: cnpg.io/reload: \"\" --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-postgres-server-cert spec: secretName: my-postgres-server-cert usages: - server auth dnsNames: - cluster-example-lb.internal.mydomain.net - cluster-example-rw - cluster-example-rw.default - cluster-example-rw.default.svc - cluster-example-r - cluster-example-r.default - cluster-example-r.default.svc - cluster-example-ro - cluster-example-ro.default - cluster-example-ro.default.svc issuerRef: name: selfsigned-issuer kind: Issuer group: cert-manager.io Cert-manager creates a secret named my-postgres-server-cert . It contains all the needed files and can be referenced from a cluster as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: serverTLSSecret: my-postgres-server-cert serverCASecret: my-postgres-server-cert storage: size: 1Gi You can find a complete example using cert-manager to manage both server and client CA and certificates in the cluster-example-cert-manager.yaml deployment manifest. Client certificate If required, you can also provide the two client certificates, generating them using a separate component such as cert-manager or HashiCorp vault . To use a custom CA to verify client certificates for a cluster, you must specify the following parameters: replicationTLSSecret \u2013 The name of a secret of type kubernetes.io/tls containing the client certificate for user streaming_replica . It must contain both the standard tls.crt and tls.key keys. clientCASecret \u2013 The name of a secret containing the ca.crt key of the CA to use to verify client certificate. Note The operator still creates and manages the two secrets related to server certificates. Note As the cluster isn't in control of the client CA secret key, you can no longer generate client certificates using kubectl cnpg certificate . Note If you want ConfigMaps and secrets to be automatically reloaded by instances, you can add a label with the key cnpg.io/reload to it. Otherwise, you must reload the instances using the kubectl cnpg reload subcommand. Cert-manager example This simple example shows how to use cert-manager to set up a self-signed CA and generate the needed TLS server certificate: --- apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: selfsigned-issuer spec: selfSigned: {} --- apiVersion: v1 kind: Secret metadata: name: my-postgres-client-cert labels: cnpg.io/reload: \"\" --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-postgres-client-cert spec: secretName: my-postgres-client-cert usages: - client auth commonName: streaming_replica issuerRef: name: selfsigned-issuer kind: Issuer group: cert-manager.io Cert-manager creates a secret named my-postgres-client-cert that contains all the needed files. You can reference it from a cluster as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: clientCASecret: my-postgres-client-cert replicationTLSSecret: my-postgres-client-cert storage: size: 1Gi You can find a complete example using cert-manager to manage both server and client CA and certificates in the cluster-example-cert-manager.yaml deployment manifest.","title":"Certificates"},{"location":"certificates/#certificates","text":"CloudNativePG was designed to natively support TLS certificates. To set up a cluster, the operator requires: A server certification authority (CA) certificate A server TLS certificate signed by the server CA A client CA certificate A streaming replication client certificate generated by the client CA Note You can find all the secrets used by the cluster and their expiration dates in the cluster's status. CloudNativePG is very flexible when it comes to TLS certificates. It primarily operates in two modes: Operator managed \u2013 Certificates are internally managed by the operator in a fully automated way and signed using a CA created by CloudNativePG. User provided \u2013 Certificates are generated outside the operator and imported in the cluster definition as secrets. CloudNativePG integrates itself with cert-manager (See Cert-manager example .) You can also choose a hybrid approach, where only part of the certificates is generated outside CNPG. Note The operator and instances verify server certificates against the CA only, disregarding the DNS name. This approach is due to the typical absence of DNS names in user-provided certificates for the <cluster>-rw service used for communication within the cluster.","title":"Certificates"},{"location":"certificates/#operator-managed-mode","text":"By default, the operator automatically generates a single Certificate Authority (CA) to issue both client and server certificates. These certificates are managed continuously by the operator, with automatic renewal 7 days before expiration (within a 90-day validity period). Info You can adjust this default behavior by configuring the CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD environment variables. For detailed guidance, refer to the Operator Configuration . Important Certificate renewal does not cause any downtime for the PostgreSQL server, as a simple reload operation is sufficient. However, any user-managed certificates not controlled by CloudNativePG must be re-issued following the renewal process. When generating certificates, the operator assumes that the Kubernetes cluster's DNS zone is set to cluster.local by default. This behavior can be customized by setting the KUBERNETES_CLUSTER_DOMAIN environment variable. A convenient alternative is to use the operator's configuration capability .","title":"Operator-Managed Mode"},{"location":"certificates/#server-certificates","text":"","title":"Server certificates"},{"location":"certificates/#server-ca-secret","text":"The operator generates a self-signed CA and stores it in a generic secret containing the following keys: ca.crt \u2013 CA certificate used to validate the server certificate, used as sslrootcert in clients' connection strings. ca.key \u2013 The key used to sign the server SSL certificate automatically.","title":"Server CA secret"},{"location":"certificates/#server-tls-secret","text":"The operator uses the generated self-signed CA to sign a server TLS certificate. It's stored in a secret of type kubernetes.io/tls and configured to be used as ssl_cert_file and ssl_key_file by the instances. This approach enables clients to verify their identity and connect securely.","title":"Server TLS secret"},{"location":"certificates/#server-alternative-dns-names","text":"In addition to the default ones, you can specify DNS server alternative names as part of the generated server TLS secret.","title":"Server alternative DNS names"},{"location":"certificates/#client-certificates","text":"","title":"Client certificates"},{"location":"certificates/#client-ca-secret","text":"By default, the same self-signed CA as the server CA is used. The public part is passed as ssl_ca_file to all the instances so it can verify client certificates it signed. The private key is stored in the same secret and used to sign client certificates generated by the kubectl cnpg plugin.","title":"Client CA secret"},{"location":"certificates/#client-streaming_replica-certificate","text":"The operator uses the generated self-signed CA to sign a client certificate for the user streaming_replica , storing it in a secret of type kubernetes.io/tls . To allow secure connection to the primary instance, this certificate is passed as sslcert and sslkey in the replicas' connection strings.","title":"Client streaming_replica certificate"},{"location":"certificates/#user-provided-certificates-mode","text":"","title":"User-provided certificates mode"},{"location":"certificates/#server-certificates_1","text":"If required, you can also provide the two server certificates, generating them using a separate component such as cert-manager . To use a custom server TLS certificate for a cluster, you must specify the following parameters: serverTLSSecret \u2013 The name of a secret of type kubernetes.io/tls containing the server TLS certificate. It must contain both the standard tls.crt and tls.key keys. serverCASecret \u2013 The name of a secret containing the ca.crt key. Note The operator still creates and manages the two secrets related to client certificates. Note The operator and instances verify server certificates against the CA only, disregarding the DNS name. This approach is due to the typical absence of DNS names in user-provided certificates for the <cluster>-rw service used for communication within the cluster. Note If you want ConfigMaps and secrets to be reloaded by instances, you can add a label with the key cnpg.io/reload to it. Otherwise you must reload the instances using the kubectl cnpg reload subcommand.","title":"Server certificates"},{"location":"certificates/#example","text":"Given the following files: server-ca.crt \u2013 The certificate of the CA that signed the server TLS certificate. server.crt \u2013 The certificate of the server TLS certificate. server.key \u2013 The private key of the server TLS certificate. Create a secret containing the CA certificate: kubectl create secret generic my-postgresql-server-ca \\ --from-file=ca.crt=./server-ca.crt Create a secret with the TLS certificate: kubectl create secret tls my-postgresql-server \\ --cert=./server.crt --key=./server.key Create a PostgreSQL cluster referencing those secrets: kubectl apply -f - <<EOF apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: serverCASecret: my-postgresql-server-ca serverTLSSecret: my-postgresql-server storage: storageClass: standard size: 1Gi EOF The new cluster uses the provided server certificates for TLS connections.","title":"Example"},{"location":"certificates/#cert-manager-example","text":"This simple example shows how to use cert-manager to set up a self-signed CA and generate the needed TLS server certificate: --- apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: selfsigned-issuer spec: selfSigned: {} --- apiVersion: v1 kind: Secret metadata: name: my-postgres-server-cert labels: cnpg.io/reload: \"\" --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-postgres-server-cert spec: secretName: my-postgres-server-cert usages: - server auth dnsNames: - cluster-example-lb.internal.mydomain.net - cluster-example-rw - cluster-example-rw.default - cluster-example-rw.default.svc - cluster-example-r - cluster-example-r.default - cluster-example-r.default.svc - cluster-example-ro - cluster-example-ro.default - cluster-example-ro.default.svc issuerRef: name: selfsigned-issuer kind: Issuer group: cert-manager.io Cert-manager creates a secret named my-postgres-server-cert . It contains all the needed files and can be referenced from a cluster as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: serverTLSSecret: my-postgres-server-cert serverCASecret: my-postgres-server-cert storage: size: 1Gi You can find a complete example using cert-manager to manage both server and client CA and certificates in the cluster-example-cert-manager.yaml deployment manifest.","title":"Cert-manager example"},{"location":"certificates/#client-certificate","text":"If required, you can also provide the two client certificates, generating them using a separate component such as cert-manager or HashiCorp vault . To use a custom CA to verify client certificates for a cluster, you must specify the following parameters: replicationTLSSecret \u2013 The name of a secret of type kubernetes.io/tls containing the client certificate for user streaming_replica . It must contain both the standard tls.crt and tls.key keys. clientCASecret \u2013 The name of a secret containing the ca.crt key of the CA to use to verify client certificate. Note The operator still creates and manages the two secrets related to server certificates. Note As the cluster isn't in control of the client CA secret key, you can no longer generate client certificates using kubectl cnpg certificate . Note If you want ConfigMaps and secrets to be automatically reloaded by instances, you can add a label with the key cnpg.io/reload to it. Otherwise, you must reload the instances using the kubectl cnpg reload subcommand.","title":"Client certificate"},{"location":"certificates/#cert-manager-example_1","text":"This simple example shows how to use cert-manager to set up a self-signed CA and generate the needed TLS server certificate: --- apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: selfsigned-issuer spec: selfSigned: {} --- apiVersion: v1 kind: Secret metadata: name: my-postgres-client-cert labels: cnpg.io/reload: \"\" --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-postgres-client-cert spec: secretName: my-postgres-client-cert usages: - client auth commonName: streaming_replica issuerRef: name: selfsigned-issuer kind: Issuer group: cert-manager.io Cert-manager creates a secret named my-postgres-client-cert that contains all the needed files. You can reference it from a cluster as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: clientCASecret: my-postgres-client-cert replicationTLSSecret: my-postgres-client-cert storage: size: 1Gi You can find a complete example using cert-manager to manage both server and client CA and certificates in the cluster-example-cert-manager.yaml deployment manifest.","title":"Cert-manager example"},{"location":"cloudnative-pg.v1/","text":"API Reference Package v1 contains API Schema definitions for the postgresql v1 API group Resource Types Backup Cluster ClusterImageCatalog Database ImageCatalog Pooler Publication ScheduledBackup Subscription Backup A Backup resource is a request for a PostgreSQL backup by the user. Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Backup metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] BackupSpec Specification of the desired behavior of the backup. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status BackupStatus Most recently observed status of the backup. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Cluster Cluster is the Schema for the PostgreSQL API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Cluster metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ClusterSpec Specification of the desired behavior of the cluster. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status ClusterStatus Most recently observed status of the cluster. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status ClusterImageCatalog ClusterImageCatalog is the Schema for the clusterimagecatalogs API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ClusterImageCatalog metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ImageCatalogSpec Specification of the desired behavior of the ClusterImageCatalog. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Database Database is the Schema for the databases API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Database metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] DatabaseSpec Specification of the desired Database. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status DatabaseStatus Most recently observed status of the Database. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status ImageCatalog ImageCatalog is the Schema for the imagecatalogs API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ImageCatalog metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ImageCatalogSpec Specification of the desired behavior of the ImageCatalog. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Pooler Pooler is the Schema for the poolers API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Pooler metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] PoolerSpec Specification of the desired behavior of the Pooler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status PoolerStatus Most recently observed status of the Pooler. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Publication Publication is the Schema for the publications API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Publication metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] PublicationSpec No description provided. status [Required] PublicationStatus No description provided. ScheduledBackup ScheduledBackup is the Schema for the scheduledbackups API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ScheduledBackup metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ScheduledBackupSpec Specification of the desired behavior of the ScheduledBackup. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status ScheduledBackupStatus Most recently observed status of the ScheduledBackup. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Subscription Subscription is the Schema for the subscriptions API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Subscription metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] SubscriptionSpec No description provided. status [Required] SubscriptionStatus No description provided. AffinityConfiguration Appears in: ClusterSpec AffinityConfiguration contains the info we need to create the affinity rules for Pods Field Description enablePodAntiAffinity bool Activates anti-affinity for the pods. The operator will define pods anti-affinity unless this field is explicitly set to false topologyKey string TopologyKey to use for anti-affinity configuration. See k8s documentation for more info on that nodeSelector map[string]string NodeSelector is map of key-value pairs used to define the nodes on which the pods can run. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ nodeAffinity core/v1.NodeAffinity NodeAffinity describes node affinity scheduling rules for the pod. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity tolerations []core/v1.Toleration Tolerations is a list of Tolerations that should be set for all the pods, in order to allow them to run on tainted nodes. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ podAntiAffinityType string PodAntiAffinityType allows the user to decide whether pod anti-affinity between cluster instance has to be considered a strong requirement during scheduling or not. Allowed values are: \"preferred\" (default if empty) or \"required\". Setting it to \"required\", could lead to instances remaining pending until new kubernetes nodes are added if all the existing nodes don't match the required pod anti-affinity rule. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity additionalPodAntiAffinity core/v1.PodAntiAffinity AdditionalPodAntiAffinity allows to specify pod anti-affinity terms to be added to the ones generated by the operator if EnablePodAntiAffinity is set to true (default) or to be used exclusively if set to false. additionalPodAffinity core/v1.PodAffinity AdditionalPodAffinity allows to specify pod affinity terms to be passed to all the cluster's pods. AvailableArchitecture Appears in: ClusterStatus AvailableArchitecture represents the state of a cluster's architecture Field Description goArch [Required] string GoArch is the name of the executable architecture hash [Required] string Hash is the hash of the executable BackupConfiguration Appears in: ClusterSpec BackupConfiguration defines how the backup of the cluster are taken. The supported backup methods are BarmanObjectStore and VolumeSnapshot. For details and examples refer to the Backup and Recovery section of the documentation Field Description volumeSnapshot VolumeSnapshotConfiguration VolumeSnapshot provides the configuration for the execution of volume snapshot backups. barmanObjectStore github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration The configuration for the barman-cloud tool suite retentionPolicy string RetentionPolicy is the retention policy to be used for backups and WALs (i.e. '60d'). The retention policy is expressed in the form of XXu where XX is a positive integer and u is in [dwm] - days, weeks, months. It's currently only applicable when using the BarmanObjectStore method. target BackupTarget The policy to decide which instance should perform backups. Available options are empty string, which will default to prefer-standby policy, primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. BackupMethod (Alias of string ) Appears in: BackupSpec BackupStatus ScheduledBackupSpec BackupMethod defines the way of executing the physical base backups of the selected PostgreSQL instance BackupPhase (Alias of string ) Appears in: BackupStatus BackupPhase is the phase of the backup BackupPluginConfiguration Appears in: BackupSpec ScheduledBackupSpec BackupPluginConfiguration contains the backup configuration used by the backup plugin Field Description name [Required] string Name is the name of the plugin managing this backup parameters map[string]string Parameters are the configuration parameters passed to the backup plugin for this backup BackupSnapshotElementStatus Appears in: BackupSnapshotStatus BackupSnapshotElementStatus is a volume snapshot that is part of a volume snapshot method backup Field Description name [Required] string Name is the snapshot resource name type [Required] string Type is tho role of the snapshot in the cluster, such as PG_DATA, PG_WAL and PG_TABLESPACE tablespaceName string TablespaceName is the name of the snapshotted tablespace. Only set when type is PG_TABLESPACE BackupSnapshotStatus Appears in: BackupStatus BackupSnapshotStatus the fields exclusive to the volumeSnapshot method backup Field Description elements []BackupSnapshotElementStatus The elements list, populated with the gathered volume snapshots BackupSource Appears in: BootstrapRecovery BackupSource contains the backup we need to restore from, plus some information that could be needed to correctly restore it. Field Description LocalObjectReference github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference (Members of LocalObjectReference are embedded into this type.) No description provided. endpointCA github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector EndpointCA store the CA bundle of the barman endpoint. Useful when using self-signed certificates to avoid errors with certificate issuer and barman-cloud-wal-archive. BackupSpec Appears in: Backup BackupSpec defines the desired state of Backup Field Description cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The cluster to backup target BackupTarget The policy to decide which instance should perform this backup. If empty, it defaults to cluster.spec.backup.target . Available options are empty string, primary and prefer-standby . primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. method BackupMethod The backup method to be used, possible options are barmanObjectStore , volumeSnapshot or plugin . Defaults to: barmanObjectStore . pluginConfiguration BackupPluginConfiguration Configuration parameters passed to the plugin managing this backup online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online' onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza BackupStatus Appears in: Backup BackupStatus defines the observed state of Backup Field Description BarmanCredentials github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanCredentials (Members of BarmanCredentials are embedded into this type.) The potential credentials for each cloud provider endpointCA github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector EndpointCA store the CA bundle of the barman endpoint. Useful when using self-signed certificates to avoid errors with certificate issuer and barman-cloud-wal-archive. endpointURL string Endpoint to be used to upload data to the cloud, overriding the automatic endpoint discovery destinationPath string The path where to store the backup (i.e. s3://bucket/path/to/folder) this path, with different destination folders, will be used for WALs and for data. This may not be populated in case of errors. serverName string The server name on S3, the cluster name is used if this parameter is omitted encryption string Encryption method required to S3 API backupId string The ID of the Barman backup backupName string The Name of the Barman backup phase BackupPhase The last backup status startedAt meta/v1.Time When the backup was started stoppedAt meta/v1.Time When the backup was terminated beginWal string The starting WAL endWal string The ending WAL beginLSN string The starting xlog endLSN string The ending xlog error string The detected error commandOutput string Unused. Retained for compatibility with old versions. commandError string The backup command output in case of error backupLabelFile []byte Backup label file content as returned by Postgres in case of online (hot) backups tablespaceMapFile []byte Tablespace map file content as returned by Postgres in case of online (hot) backups instanceID InstanceID Information to identify the instance where the backup has been taken from snapshotBackupStatus BackupSnapshotStatus Status of the volumeSnapshot backup method BackupMethod The backup method being used online bool Whether the backup was online/hot ( true ) or offline/cold ( false ) pluginMetadata map[string]string A map containing the plugin metadata BackupTarget (Alias of string ) Appears in: BackupConfiguration BackupSpec ScheduledBackupSpec BackupTarget describes the preferred targets for a backup BootstrapConfiguration Appears in: ClusterSpec BootstrapConfiguration contains information about how to create the PostgreSQL cluster. Only a single bootstrap method can be defined among the supported ones. initdb will be used as the bootstrap method if left unspecified. Refer to the Bootstrap page of the documentation for more information. Field Description initdb BootstrapInitDB Bootstrap the cluster via initdb recovery BootstrapRecovery Bootstrap the cluster from a backup pg_basebackup BootstrapPgBaseBackup Bootstrap the cluster taking a physical backup of another compatible PostgreSQL instance BootstrapInitDB Appears in: BootstrapConfiguration BootstrapInitDB is the configuration of the bootstrap process when initdb is used Refer to the Bootstrap page of the documentation for more information. Field Description database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch options []string The list of options that must be passed to initdb when creating the cluster. Deprecated: This could lead to inconsistent configurations, please use the explicit provided parameters instead. If defined, explicit values will be ignored. dataChecksums bool Whether the -k option should be passed to initdb, enabling checksums on data pages (default: false ) encoding string The value to be passed as option --encoding for initdb (default: UTF8 ) localeCollate string The value to be passed as option --lc-collate for initdb (default: C ) localeCType string The value to be passed as option --lc-ctype for initdb (default: C ) locale string Sets the default collation order and character classification in the new database. localeProvider string This option sets the locale provider for databases created in the new cluster. Available from PostgreSQL 16. icuLocale string Specifies the ICU locale when the ICU provider is used. This option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules string Specifies additional collation rules to customize the behavior of the default collation. This option requires localeProvider to be set to icu . Available from PostgreSQL 16. builtinLocale string Specifies the locale name when the builtin provider is used. This option requires localeProvider to be set to builtin . Available from PostgreSQL 17. walSegmentSize int The value in megabytes (1 to 1024) to be passed to the --wal-segsize option for initdb (default: empty, resulting in PostgreSQL default: 16MB) postInitSQL []string List of SQL queries to be executed as a superuser in the postgres database right after the cluster has been created - to be used with extreme care (by default empty) postInitApplicationSQL []string List of SQL queries to be executed as a superuser in the application database right after the cluster has been created - to be used with extreme care (by default empty) postInitTemplateSQL []string List of SQL queries to be executed as a superuser in the template1 database right after the cluster has been created - to be used with extreme care (by default empty) import Import Bootstraps the new cluster by importing data from an existing PostgreSQL instance using logical backup ( pg_dump and pg_restore ) postInitApplicationSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the application database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) postInitTemplateSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the template1 database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) postInitSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the postgres database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) BootstrapPgBaseBackup Appears in: BootstrapConfiguration BootstrapPgBaseBackup contains the configuration required to take a physical backup of an existing PostgreSQL cluster Field Description source [Required] string The name of the server of which we need to take a physical backup database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch BootstrapRecovery Appears in: BootstrapConfiguration BootstrapRecovery contains the configuration required to restore from an existing cluster using 3 methodologies: external cluster, volume snapshots or backup objects. Full recovery and Point-In-Time Recovery are supported. The method can be also be used to create clusters in continuous recovery (replica clusters), also supporting cascading replication when instances > Once the cluster exits recovery, the password for the superuser will be changed through the provided secret. Refer to the Bootstrap page of the documentation for more information. Field Description backup BackupSource The backup object containing the physical base backup from which to initiate the recovery procedure. Mutually exclusive with source and volumeSnapshots . source string The external cluster whose backup we will restore. This is also used as the name of the folder under which the backup is stored, so it must be set to the name of the source cluster Mutually exclusive with backup . volumeSnapshots DataSource The static PVC data source(s) from which to initiate the recovery procedure. Currently supporting VolumeSnapshot and PersistentVolumeClaim resources that map an existing PVC group, compatible with CloudNativePG, and taken with a cold backup copy on a fenced Postgres instance (limitation which will be removed in the future when online backup will be implemented). Mutually exclusive with backup . recoveryTarget RecoveryTarget By default, the recovery process applies all the available WAL files in the archive (full recovery). However, you can also end the recovery as soon as a consistent state is reached or recover to a point-in-time (PITR) by specifying a RecoveryTarget object, as expected by PostgreSQL (i.e., timestamp, transaction Id, LSN, ...). More info: https://www.postgresql.org/docs/current/runtime-config-wal.html#RUNTIME-CONFIG-WAL-RECOVERY-TARGET database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch CatalogImage Appears in: ImageCatalogSpec CatalogImage defines the image and major version Field Description image [Required] string The image reference major [Required] int The PostgreSQL major version of the image. Must be unique within the catalog. CertificatesConfiguration Appears in: CertificatesStatus ClusterSpec CertificatesConfiguration contains the needed configurations to handle server certificates. Field Description serverCASecret string The secret containing the Server CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate the TLS certificate ServerTLSSecret. Contains: ca.crt : CA that should be used to validate the server certificate, used as sslrootcert in client connection strings. ca.key : key used to generate Server SSL certs, if ServerTLSSecret is provided, this can be omitted. serverTLSSecret string The secret of type kubernetes.io/tls containing the server TLS certificate and key that will be set as ssl_cert_file and ssl_key_file so that clients can connect to postgres securely. If not defined, ServerCASecret must provide also ca.key and a new secret will be created using the provided CA. replicationTLSSecret string The secret of type kubernetes.io/tls containing the client certificate to authenticate as the streaming_replica user. If not defined, ClientCASecret must provide also ca.key , and a new secret will be created using the provided CA. clientCASecret string The secret containing the Client CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate all the client certificates. Contains: ca.crt : CA that should be used to validate the client certificates, used as ssl_ca_file of all the instances. ca.key : key used to generate client certificates, if ReplicationTLSSecret is provided, this can be omitted. serverAltDNSNames []string The list of the server alternative DNS names to be added to the generated server TLS certificates, when required. CertificatesStatus Appears in: ClusterStatus CertificatesStatus contains configuration certificates and related expiration dates. Field Description CertificatesConfiguration CertificatesConfiguration (Members of CertificatesConfiguration are embedded into this type.) Needed configurations to handle server certificates, initialized with default values, if needed. expirations map[string]string Expiration dates for all certificates. ClusterMonitoringTLSConfiguration Appears in: MonitoringConfiguration ClusterMonitoringTLSConfiguration is the type containing the TLS configuration for the cluster's monitoring Field Description enabled bool Enable TLS for the monitoring endpoint. Changing this option will force a rollout of all instances. ClusterSpec Appears in: Cluster ClusterSpec defines the desired state of Cluster Field Description description string Description of this PostgreSQL cluster inheritedMetadata EmbeddedObjectMetadata Metadata that will be inherited by all objects related to the Cluster imageName string Name of the container image, supporting both tags ( <image>:<tag> ) and digests for deterministic and repeatable deployments ( <image>:<tag>@sha256:<digestValue> ) imageCatalogRef ImageCatalogRef Defines the major PostgreSQL version we want to use within an ImageCatalog imagePullPolicy core/v1.PullPolicy Image pull policy. One of Always , Never or IfNotPresent . If not defined, it defaults to IfNotPresent . Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images schedulerName string If specified, the pod will be dispatched by specified Kubernetes scheduler. If not specified, the pod will be dispatched by the default scheduler. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/kube-scheduler/ postgresUID int64 The UID of the postgres user inside the image, defaults to 26 postgresGID int64 The GID of the postgres user inside the image, defaults to 26 instances [Required] int Number of instances required in the cluster minSyncReplicas int Minimum number of instances required in synchronous replication with the primary. Undefined or 0 allow writes to complete when no standby is available. maxSyncReplicas int The target value for the synchronous replication quorum, that can be decreased if the number of ready standbys is lower than this. Undefined or 0 disable synchronous replication. postgresql PostgresConfiguration Configuration of the PostgreSQL server replicationSlots ReplicationSlotsConfiguration Replication slots management configuration bootstrap BootstrapConfiguration Instructions to bootstrap this cluster replica ReplicaClusterConfiguration Replica cluster configuration superuserSecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The secret containing the superuser password. If not defined a new secret will be created with a randomly generated password enableSuperuserAccess bool When this option is enabled, the operator will use the SuperuserSecret to update the postgres user password (if the secret is not present, the operator will automatically create one). When this option is disabled, the operator will ignore the SuperuserSecret content, delete it when automatically created, and then blank the password of the postgres user by setting it to NULL . Disabled by default. certificates CertificatesConfiguration The configuration for the CA and related certificates imagePullSecrets []github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The list of pull secrets to be used to pull the images storage StorageConfiguration Configuration of the storage of the instances serviceAccountTemplate ServiceAccountTemplate Configure the generation of the service account walStorage StorageConfiguration Configuration of the storage for PostgreSQL WAL (Write-Ahead Log) ephemeralVolumeSource core/v1.EphemeralVolumeSource EphemeralVolumeSource allows the user to configure the source of ephemeral volumes. startDelay int32 The time in seconds that is allowed for a PostgreSQL instance to successfully start up (default 3600). The startup probe failure threshold is derived from this value using the formula: ceiling(startDelay / 10). stopDelay int32 The time in seconds that is allowed for a PostgreSQL instance to gracefully shutdown (default 1800) smartShutdownTimeout int32 The time in seconds that controls the window of time reserved for the smart shutdown of Postgres to complete. Make sure you reserve enough time for the operator to request a fast shutdown of Postgres (that is: stopDelay - smartShutdownTimeout ). switchoverDelay int32 The time in seconds that is allowed for a primary PostgreSQL instance to gracefully shutdown during a switchover. Default value is 3600 seconds (1 hour). failoverDelay int32 The amount of time (in seconds) to wait before triggering a failover after the primary PostgreSQL instance in the cluster was detected to be unhealthy livenessProbeTimeout int32 LivenessProbeTimeout is the time (in seconds) that is allowed for a PostgreSQL instance to successfully respond to the liveness probe (default 30). The Liveness probe failure threshold is derived from this value using the formula: ceiling(livenessProbe / 10). affinity AffinityConfiguration Affinity/Anti-affinity rules for Pods topologySpreadConstraints []core/v1.TopologySpreadConstraint TopologySpreadConstraints specifies how to spread matching pods among the given topology. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/ resources core/v1.ResourceRequirements Resources requirements of every generated Pod. Please refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ for more information. ephemeralVolumesSizeLimit EphemeralVolumesSizeLimitConfiguration EphemeralVolumesSizeLimit allows the user to set the limits for the ephemeral volumes priorityClassName string Name of the priority class which will be used in every generated Pod, if the PriorityClass specified does not exist, the pod will not be able to schedule. Please refer to https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass for more information primaryUpdateStrategy PrimaryUpdateStrategy Deployment strategy to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be automated ( unsupervised - default) or manual ( supervised ) primaryUpdateMethod PrimaryUpdateMethod Method to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be with a switchover ( switchover ) or in-place ( restart - default) backup BackupConfiguration The configuration to be used for backups nodeMaintenanceWindow NodeMaintenanceWindow Define a maintenance window for the Kubernetes nodes monitoring MonitoringConfiguration The configuration of the monitoring infrastructure of this cluster externalClusters []ExternalCluster The list of external clusters which are used in the configuration logLevel string The instances' log level, one of the following values: error, warning, info (default), debug, trace projectedVolumeTemplate core/v1.ProjectedVolumeSource Template to be used to define projected volumes, projected volumes will be mounted under /projected base folder env []core/v1.EnvVar Env follows the Env format to pass environment variables to the pods created in the cluster envFrom []core/v1.EnvFromSource EnvFrom follows the EnvFrom format to pass environment variables sources to the pods to be used by Env managed ManagedConfiguration The configuration that is used by the portions of PostgreSQL that are managed by the instance manager seccompProfile core/v1.SeccompProfile The SeccompProfile applied to every Pod and Container. Defaults to: RuntimeDefault tablespaces []TablespaceConfiguration The tablespaces configuration enablePDB bool Manage the PodDisruptionBudget resources within the cluster. When configured as true (default setting), the pod disruption budgets will safeguard the primary node from being terminated. Conversely, setting it to false will result in the absence of any PodDisruptionBudget resource, permitting the shutdown of all nodes hosting the PostgreSQL cluster. This latter configuration is advisable for any PostgreSQL cluster employed for development/staging purposes. plugins []PluginConfiguration The plugins configuration, containing any plugin to be loaded with the corresponding configuration probes ProbesConfiguration The configuration of the probes to be injected in the PostgreSQL Pods. ClusterStatus Appears in: Cluster ClusterStatus defines the observed state of Cluster Field Description instances int The total number of PVC Groups detected in the cluster. It may differ from the number of existing instance pods. readyInstances int The total number of ready instances in the cluster. It is equal to the number of ready instance pods. instancesStatus map[PodStatus][]string InstancesStatus indicates in which status the instances are instancesReportedState map[PodName]InstanceReportedState The reported state of the instances during the last reconciliation loop managedRolesStatus ManagedRoles ManagedRolesStatus reports the state of the managed roles in the cluster tablespacesStatus []TablespaceState TablespacesStatus reports the state of the declarative tablespaces in the cluster timelineID int The timeline of the Postgres cluster topology Topology Instances topology. latestGeneratedNode int ID of the latest generated node (used to avoid node name clashing) currentPrimary string Current primary instance targetPrimary string Target primary instance, this is different from the previous one during a switchover or a failover lastPromotionToken string LastPromotionToken is the last verified promotion token that was used to promote a replica cluster pvcCount int32 How many PVCs have been created by this cluster jobCount int32 How many Jobs have been created by this cluster danglingPVC []string List of all the PVCs created by this cluster and still available which are not attached to a Pod resizingPVC []string List of all the PVCs that have ResizingPVC condition. initializingPVC []string List of all the PVCs that are being initialized by this cluster healthyPVC []string List of all the PVCs not dangling nor initializing unusablePVC []string List of all the PVCs that are unusable because another PVC is missing writeService string Current write pod readService string Current list of read pods phase string Current phase of the cluster phaseReason string Reason for the current phase secretsResourceVersion SecretsResourceVersion The list of resource versions of the secrets managed by the operator. Every change here is done in the interest of the instance manager, which will refresh the secret data configMapResourceVersion ConfigMapResourceVersion The list of resource versions of the configmaps, managed by the operator. Every change here is done in the interest of the instance manager, which will refresh the configmap data certificates CertificatesStatus The configuration for the CA and related certificates, initialized with defaults. firstRecoverabilityPoint string The first recoverability point, stored as a date in RFC3339 format. This field is calculated from the content of FirstRecoverabilityPointByMethod firstRecoverabilityPointByMethod map[BackupMethod]meta/v1.Time The first recoverability point, stored as a date in RFC3339 format, per backup method type lastSuccessfulBackup string Last successful backup, stored as a date in RFC3339 format This field is calculated from the content of LastSuccessfulBackupByMethod lastSuccessfulBackupByMethod map[BackupMethod]meta/v1.Time Last successful backup, stored as a date in RFC3339 format, per backup method type lastFailedBackup string Stored as a date in RFC3339 format cloudNativePGCommitHash string The commit hash number of which this operator running currentPrimaryTimestamp string The timestamp when the last actual promotion to primary has occurred currentPrimaryFailingSinceTimestamp string The timestamp when the primary was detected to be unhealthy This field is reported when .spec.failoverDelay is populated or during online upgrades targetPrimaryTimestamp string The timestamp when the last request for a new primary has occurred poolerIntegrations PoolerIntegrations The integration needed by poolers referencing the cluster cloudNativePGOperatorHash string The hash of the binary of the operator availableArchitectures []AvailableArchitecture AvailableArchitectures reports the available architectures of a cluster conditions []meta/v1.Condition Conditions for cluster object instanceNames []string List of instance names in the cluster onlineUpdateEnabled bool OnlineUpdateEnabled shows if the online upgrade is enabled inside the cluster image string Image contains the image name used by the pods pgDataImageInfo ImageInfo PGDataImageInfo contains the details of the latest image that has run on the current data directory. pluginStatus []PluginStatus PluginStatus is the status of the loaded plugins switchReplicaClusterStatus SwitchReplicaClusterStatus SwitchReplicaClusterStatus is the status of the switch to replica cluster demotionToken string DemotionToken is a JSON token containing the information from pg_controldata such as Database system identifier, Latest checkpoint's TimeLineID, Latest checkpoint's REDO location, Latest checkpoint's REDO WAL file, and Time of latest checkpoint ConfigMapResourceVersion Appears in: ClusterStatus ConfigMapResourceVersion is the resource versions of the secrets managed by the operator Field Description metrics map[string]string A map with the versions of all the config maps used to pass metrics. Map keys are the config map names, map values are the versions DataDurabilityLevel (Alias of string ) Appears in: SynchronousReplicaConfiguration DataDurabilityLevel specifies how strictly to enforce synchronous replication when cluster instances are unavailable. Options are required or preferred . DataSource Appears in: BootstrapRecovery DataSource contains the configuration required to bootstrap a PostgreSQL cluster from an existing storage Field Description storage [Required] core/v1.TypedLocalObjectReference Configuration of the storage of the instances walStorage core/v1.TypedLocalObjectReference Configuration of the storage for PostgreSQL WAL (Write-Ahead Log) tablespaceStorage map[string]core/v1.TypedLocalObjectReference Configuration of the storage for PostgreSQL tablespaces DatabaseObjectSpec Appears in: ExtensionSpec SchemaSpec DatabaseObjectSpec contains the fields which are common to every database object Field Description name [Required] string Name of the extension/schema ensure EnsureOption Specifies whether an extension/schema should be present or absent in the database. If set to present , the extension/schema will be created if it does not exist. If set to absent , the extension/schema will be removed if it exists. DatabaseObjectStatus Appears in: DatabaseStatus DatabaseObjectStatus is the status of the managed database objects Field Description name [Required] string The name of the object applied [Required] bool True of the object has been installed successfully in the database message string Message is the object reconciliation message DatabaseReclaimPolicy (Alias of string ) Appears in: DatabaseSpec DatabaseReclaimPolicy describes a policy for end-of-life maintenance of databases. DatabaseRoleRef Appears in: TablespaceConfiguration DatabaseRoleRef is a reference an a role available inside PostgreSQL Field Description name string No description provided. DatabaseSpec Appears in: Database DatabaseSpec is the specification of a Postgresql Database, built around the CREATE DATABASE , ALTER DATABASE , and DROP DATABASE SQL commands of PostgreSQL. Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster hosting the database. ensure EnsureOption Ensure the PostgreSQL database is present or absent - defaults to \"present\". name [Required] string The name of the database to create inside PostgreSQL. This setting cannot be changed. owner [Required] string Maps to the OWNER parameter of CREATE DATABASE . Maps to the OWNER TO command of ALTER DATABASE . The role name of the user who owns the database inside PostgreSQL. template string Maps to the TEMPLATE parameter of CREATE DATABASE . This setting cannot be changed. The name of the template from which to create this database. encoding string Maps to the ENCODING parameter of CREATE DATABASE . This setting cannot be changed. Character set encoding to use in the database. locale string Maps to the LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Sets the default collation order and character classification in the new database. localeProvider string Maps to the LOCALE_PROVIDER parameter of CREATE DATABASE . This setting cannot be changed. This option sets the locale provider for databases created in the new cluster. Available from PostgreSQL 16. localeCollate string Maps to the LC_COLLATE parameter of CREATE DATABASE . This setting cannot be changed. localeCType string Maps to the LC_CTYPE parameter of CREATE DATABASE . This setting cannot be changed. icuLocale string Maps to the ICU_LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Specifies the ICU locale when the ICU provider is used. This option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules string Maps to the ICU_RULES parameter of CREATE DATABASE . This setting cannot be changed. Specifies additional collation rules to customize the behavior of the default collation. This option requires localeProvider to be set to icu . Available from PostgreSQL 16. builtinLocale string Maps to the BUILTIN_LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Specifies the locale name when the builtin provider is used. This option requires localeProvider to be set to builtin . Available from PostgreSQL 17. collationVersion string Maps to the COLLATION_VERSION parameter of CREATE DATABASE . This setting cannot be changed. isTemplate bool Maps to the IS_TEMPLATE parameter of CREATE DATABASE and ALTER DATABASE . If true, this database is considered a template and can be cloned by any user with CREATEDB privileges. allowConnections bool Maps to the ALLOW_CONNECTIONS parameter of CREATE DATABASE and ALTER DATABASE . If false then no one can connect to this database. connectionLimit int Maps to the CONNECTION LIMIT clause of CREATE DATABASE and ALTER DATABASE . How many concurrent connections can be made to this database. -1 (the default) means no limit. tablespace string Maps to the TABLESPACE parameter of CREATE DATABASE . Maps to the SET TABLESPACE command of ALTER DATABASE . The name of the tablespace (in PostgreSQL) that will be associated with the new database. This tablespace will be the default tablespace used for objects created in this database. databaseReclaimPolicy DatabaseReclaimPolicy The policy for end-of-life maintenance of this database. schemas []SchemaSpec The list of schemas to be managed in the database extensions []ExtensionSpec The list of extensions to be managed in the database DatabaseStatus Appears in: Database DatabaseStatus defines the observed state of Database Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the database was reconciled correctly message string Message is the reconciliation output message schemas []DatabaseObjectStatus Schemas is the status of the managed schemas extensions []DatabaseObjectStatus Extensions is the status of the managed extensions EmbeddedObjectMetadata Appears in: ClusterSpec EmbeddedObjectMetadata contains metadata to be inherited by all resources related to a Cluster Field Description labels map[string]string No description provided. annotations map[string]string No description provided. EnsureOption (Alias of string ) Appears in: DatabaseObjectSpec DatabaseSpec RoleConfiguration EnsureOption represents whether we should enforce the presence or absence of a Role in a PostgreSQL instance EphemeralVolumesSizeLimitConfiguration Appears in: ClusterSpec EphemeralVolumesSizeLimitConfiguration contains the configuration of the ephemeral storage Field Description shm k8s.io/apimachinery/pkg/api/resource.Quantity Shm is the size limit of the shared memory volume temporaryData k8s.io/apimachinery/pkg/api/resource.Quantity TemporaryData is the size limit of the temporary data volume ExtensionSpec Appears in: DatabaseSpec ExtensionSpec configures an extension in a database Field Description DatabaseObjectSpec DatabaseObjectSpec (Members of DatabaseObjectSpec are embedded into this type.) Common fields version [Required] string The version of the extension to install. If empty, the operator will install the default version (whatever is specified in the extension's control file) schema [Required] string The name of the schema in which to install the extension's objects, in case the extension allows its contents to be relocated. If not specified (default), and the extension's control file does not specify a schema either, the current default object creation schema is used. ExternalCluster Appears in: ClusterSpec ExternalCluster represents the connection parameters to an external cluster which is used in the other sections of the configuration Field Description name [Required] string The server name, required connectionParameters map[string]string The list of connection parameters, such as dbname, host, username, etc sslCert core/v1.SecretKeySelector The reference to an SSL certificate to be used to connect to this instance sslKey core/v1.SecretKeySelector The reference to an SSL private key to be used to connect to this instance sslRootCert core/v1.SecretKeySelector The reference to an SSL CA public key to be used to connect to this instance password core/v1.SecretKeySelector The reference to the password to be used to connect to the server. If a password is provided, CloudNativePG creates a PostgreSQL passfile at /controller/external/NAME/pass (where \"NAME\" is the cluster's name). This passfile is automatically referenced in the connection string when establishing a connection to the remote PostgreSQL server from the current PostgreSQL Cluster . This ensures secure and efficient password management for external clusters. barmanObjectStore github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration The configuration for the barman-cloud tool suite plugin [Required] PluginConfiguration The configuration of the plugin that is taking care of WAL archiving and backups for this external cluster ImageCatalogRef Appears in: ClusterSpec ImageCatalogRef defines the reference to a major version in an ImageCatalog Field Description TypedLocalObjectReference core/v1.TypedLocalObjectReference (Members of TypedLocalObjectReference are embedded into this type.) No description provided. major [Required] int The major version of PostgreSQL we want to use from the ImageCatalog ImageCatalogSpec Appears in: ClusterImageCatalog ImageCatalog ImageCatalogSpec defines the desired ImageCatalog Field Description images [Required] []CatalogImage List of CatalogImages available in the catalog ImageInfo Appears in: ClusterStatus ImageInfo contains the information about a PostgreSQL image Field Description image [Required] string Image is the image name majorVersion [Required] int MajorVersion is the major version of the image Import Appears in: BootstrapInitDB Import contains the configuration to init a database from a logic snapshot of an externalCluster Field Description source [Required] ImportSource The source of the import type [Required] SnapshotType The import type. Can be microservice or monolith . databases [Required] []string The databases to import roles []string The roles to import postImportApplicationSQL []string List of SQL queries to be executed as a superuser in the application database right after is imported - to be used with extreme care (by default empty). Only available in microservice type. schemaOnly bool When set to true, only the pre-data and post-data sections of pg_restore are invoked, avoiding data import. Default: false . pgDumpExtraOptions []string List of custom options to pass to the pg_dump command. IMPORTANT: Use these options with caution and at your own risk, as the operator does not validate their content. Be aware that certain options may conflict with the operator's intended functionality or design. pgRestoreExtraOptions []string List of custom options to pass to the pg_restore command. IMPORTANT: Use these options with caution and at your own risk, as the operator does not validate their content. Be aware that certain options may conflict with the operator's intended functionality or design. ImportSource Appears in: Import ImportSource describes the source for the logical snapshot Field Description externalCluster [Required] string The name of the externalCluster used for import InstanceID Appears in: BackupStatus InstanceID contains the information to identify an instance Field Description podName string The pod name ContainerID string The container ID InstanceReportedState Appears in: ClusterStatus InstanceReportedState describes the last reported state of an instance during a reconciliation loop Field Description isPrimary [Required] bool indicates if an instance is the primary one timeLineID int indicates on which TimelineId the instance is ip [Required] string IP address of the instance LDAPBindAsAuth Appears in: LDAPConfig LDAPBindAsAuth provides the required fields to use the bind authentication for LDAP Field Description prefix string Prefix for the bind authentication option suffix string Suffix for the bind authentication option LDAPBindSearchAuth Appears in: LDAPConfig LDAPBindSearchAuth provides the required fields to use the bind+search LDAP authentication process Field Description baseDN string Root DN to begin the user search bindDN string DN of the user to bind to the directory bindPassword core/v1.SecretKeySelector Secret with the password for the user to bind to the directory searchAttribute string Attribute to match against the username searchFilter string Search filter to use when doing the search+bind authentication LDAPConfig Appears in: PostgresConfiguration LDAPConfig contains the parameters needed for LDAP authentication Field Description server string LDAP hostname or IP address port int LDAP server port scheme LDAPScheme LDAP schema to be used, possible options are ldap and ldaps bindAsAuth LDAPBindAsAuth Bind as authentication configuration bindSearchAuth LDAPBindSearchAuth Bind+Search authentication configuration tls bool Set to 'true' to enable LDAP over TLS. 'false' is default LDAPScheme (Alias of string ) Appears in: LDAPConfig LDAPScheme defines the possible schemes for LDAP ManagedConfiguration Appears in: ClusterSpec ManagedConfiguration represents the portions of PostgreSQL that are managed by the instance manager Field Description roles []RoleConfiguration Database roles managed by the Cluster services ManagedServices Services roles managed by the Cluster ManagedRoles Appears in: ClusterStatus ManagedRoles tracks the status of a cluster's managed roles Field Description byStatus map[RoleStatus][]string ByStatus gives the list of roles in each state cannotReconcile map[string][]string CannotReconcile lists roles that cannot be reconciled in PostgreSQL, with an explanation of the cause passwordStatus map[string]PasswordState PasswordStatus gives the last transaction id and password secret version for each managed role ManagedService Appears in: ManagedServices ManagedService represents a specific service managed by the cluster. It includes the type of service and its associated template specification. Field Description selectorType [Required] ServiceSelectorType SelectorType specifies the type of selectors that the service will have. Valid values are \"rw\", \"r\", and \"ro\", representing read-write, read, and read-only services. updateStrategy ServiceUpdateStrategy UpdateStrategy describes how the service differences should be reconciled serviceTemplate [Required] ServiceTemplateSpec ServiceTemplate is the template specification for the service. ManagedServices Appears in: ManagedConfiguration ManagedServices represents the services managed by the cluster. Field Description disabledDefaultServices []ServiceSelectorType DisabledDefaultServices is a list of service types that are disabled by default. Valid values are \"r\", and \"ro\", representing read, and read-only services. additional []ManagedService Additional is a list of additional managed services specified by the user. Metadata Appears in: PodTemplateSpec ServiceAccountTemplate ServiceTemplateSpec Metadata is a structure similar to the metav1.ObjectMeta, but still parseable by controller-gen to create a suitable CRD for the user. The comment of PodTemplateSpec has an explanation of why we are not using the core data types. Field Description name string The name of the resource. Only supported for certain types labels map[string]string Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels annotations map[string]string Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations MonitoringConfiguration Appears in: ClusterSpec MonitoringConfiguration is the type containing all the monitoring configuration for a certain cluster Field Description disableDefaultQueries bool Whether the default queries should be injected. Set it to true if you don't want to inject default queries into the cluster. Default: false. customQueriesConfigMap []github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector The list of config maps containing the custom queries customQueriesSecret []github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector The list of secrets containing the custom queries enablePodMonitor bool Enable or disable the PodMonitor tls ClusterMonitoringTLSConfiguration Configure TLS communication for the metrics endpoint. Changing tls.enabled option will force a rollout of all instances. podMonitorMetricRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of metric relabelings for the PodMonitor . Applied to samples before ingestion. podMonitorRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of relabelings for the PodMonitor . Applied to samples before scraping. NodeMaintenanceWindow Appears in: ClusterSpec NodeMaintenanceWindow contains information that the operator will use while upgrading the underlying node. This option is only useful when the chosen storage prevents the Pods from being freely moved across nodes. Field Description reusePVC bool Reuse the existing PVC (wait for the node to come up again) or not (recreate it elsewhere - when instances >1) inProgress bool Is there a node maintenance activity in progress? OnlineConfiguration Appears in: BackupSpec ScheduledBackupSpec VolumeSnapshotConfiguration OnlineConfiguration contains the configuration parameters for the online volume snapshot Field Description waitForArchive bool If false, the function will return immediately after the backup is completed, without waiting for WAL to be archived. This behavior is only useful with backup software that independently monitors WAL archiving. Otherwise, WAL required to make the backup consistent might be missing and make the backup useless. By default, or when this parameter is true, pg_backup_stop will wait for WAL to be archived when archiving is enabled. On a standby, this means that it will wait only when archive_mode = always. If write activity on the primary is low, it may be useful to run pg_switch_wal on the primary in order to trigger an immediate segment switch. immediateCheckpoint bool Control whether the I/O workload for the backup initial checkpoint will be limited, according to the checkpoint_completion_target setting on the PostgreSQL server. If set to true, an immediate checkpoint will be used, meaning PostgreSQL will complete the checkpoint as soon as possible. false by default. PasswordState Appears in: ManagedRoles PasswordState represents the state of the password of a managed RoleConfiguration Field Description transactionID int64 the last transaction ID to affect the role definition in PostgreSQL resourceVersion string the resource version of the password secret PgBouncerIntegrationStatus Appears in: PoolerIntegrations PgBouncerIntegrationStatus encapsulates the needed integration for the pgbouncer poolers referencing the cluster Field Description secrets []string No description provided. PgBouncerPoolMode (Alias of string ) Appears in: PgBouncerSpec PgBouncerPoolMode is the mode of PgBouncer PgBouncerSecrets Appears in: PoolerSecrets PgBouncerSecrets contains the versions of the secrets used by pgbouncer Field Description authQuery SecretVersion The auth query secret version PgBouncerSpec Appears in: PoolerSpec PgBouncerSpec defines how to configure PgBouncer Field Description poolMode PgBouncerPoolMode The pool mode. Default: session . authQuerySecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The credentials of the user that need to be used for the authentication query. In case it is specified, also an AuthQuery (e.g. \"SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1\") has to be specified and no automatic CNPG Cluster integration will be triggered. authQuery string The query that will be used to download the hash of the password of a certain user. Default: \"SELECT usename, passwd FROM public.user_search($1)\". In case it is specified, also an AuthQuerySecret has to be specified and no automatic CNPG Cluster integration will be triggered. parameters map[string]string Additional parameters to be passed to PgBouncer - please check the CNPG documentation for a list of options you can configure pg_hba []string PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) paused bool When set to true , PgBouncer will disconnect from the PostgreSQL server, first waiting for all queries to complete, and pause all new client connections until this value is set to false (default). Internally, the operator calls PgBouncer's PAUSE and RESUME commands. PluginConfiguration Appears in: ClusterSpec ExternalCluster PluginConfiguration specifies a plugin that need to be loaded for this cluster to be reconciled Field Description name [Required] string Name is the plugin name enabled bool Enabled is true if this plugin will be used isWALArchiver bool Only one plugin can be declared as WALArchiver. Cannot be active if \".spec.backup.barmanObjectStore\" configuration is present. parameters map[string]string Parameters is the configuration of the plugin PluginStatus Appears in: ClusterStatus PluginStatus is the status of a loaded plugin Field Description name [Required] string Name is the name of the plugin version [Required] string Version is the version of the plugin loaded by the latest reconciliation loop capabilities []string Capabilities are the list of capabilities of the plugin operatorCapabilities []string OperatorCapabilities are the list of capabilities of the plugin regarding the reconciler walCapabilities []string WALCapabilities are the list of capabilities of the plugin regarding the WAL management backupCapabilities []string BackupCapabilities are the list of capabilities of the plugin regarding the Backup management restoreJobHookCapabilities []string RestoreJobHookCapabilities are the list of capabilities of the plugin regarding the RestoreJobHook management status string Status contain the status reported by the plugin through the SetStatusInCluster interface PodTemplateSpec Appears in: PoolerSpec PodTemplateSpec is a structure allowing the user to set a template for Pod generation. Unfortunately we can't use the corev1.PodTemplateSpec type because the generated CRD won't have the field for the metadata section. References: https://github.com/kubernetes-sigs/controller-tools/issues/385 https://github.com/kubernetes-sigs/controller-tools/issues/448 https://github.com/prometheus-operator/prometheus-operator/issues/3041 Field Description metadata Metadata Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata spec core/v1.PodSpec Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status PodTopologyLabels (Alias of map[string]string ) Appears in: Topology PodTopologyLabels represent the topology of a Pod. map[labelName]labelValue PoolerIntegrations Appears in: ClusterStatus PoolerIntegrations encapsulates the needed integration for the poolers referencing the cluster Field Description pgBouncerIntegration PgBouncerIntegrationStatus No description provided. PoolerMonitoringConfiguration Appears in: PoolerSpec PoolerMonitoringConfiguration is the type containing all the monitoring configuration for a certain Pooler. Mirrors the Cluster's MonitoringConfiguration but without the custom queries part for now. Field Description enablePodMonitor bool Enable or disable the PodMonitor podMonitorMetricRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of metric relabelings for the PodMonitor . Applied to samples before ingestion. podMonitorRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of relabelings for the PodMonitor . Applied to samples before scraping. PoolerSecrets Appears in: PoolerStatus PoolerSecrets contains the versions of all the secrets used Field Description serverTLS SecretVersion The server TLS secret version serverCA SecretVersion The server CA secret version clientCA SecretVersion The client CA secret version pgBouncerSecrets PgBouncerSecrets The version of the secrets used by PgBouncer PoolerSpec Appears in: Pooler PoolerSpec defines the desired state of Pooler Field Description cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference This is the cluster reference on which the Pooler will work. Pooler name should never match with any cluster name within the same namespace. type PoolerType Type of service to forward traffic to. Default: rw . instances int32 The number of replicas we want. Default: 1. template PodTemplateSpec The template of the Pod to be created pgbouncer [Required] PgBouncerSpec The PgBouncer configuration deploymentStrategy apps/v1.DeploymentStrategy The deployment strategy to use for pgbouncer to replace existing pods with new ones monitoring PoolerMonitoringConfiguration The configuration of the monitoring infrastructure of this pooler. serviceTemplate ServiceTemplateSpec Template for the Service to be created PoolerStatus Appears in: Pooler PoolerStatus defines the observed state of Pooler Field Description secrets PoolerSecrets The resource version of the config object instances int32 The number of pods trying to be scheduled PoolerType (Alias of string ) Appears in: PoolerSpec PoolerType is the type of the connection pool, meaning the service we are targeting. Allowed values are rw and ro . PostgresConfiguration Appears in: ClusterSpec PostgresConfiguration defines the PostgreSQL configuration Field Description parameters map[string]string PostgreSQL configuration options (postgresql.conf) synchronous SynchronousReplicaConfiguration Configuration of the PostgreSQL synchronous replication feature pg_hba []string PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) pg_ident []string PostgreSQL User Name Maps rules (lines to be appended to the pg_ident.conf file) syncReplicaElectionConstraint SyncReplicaElectionConstraints Requirements to be met by sync replicas. This will affect how the \"synchronous_standby_names\" parameter will be set up. shared_preload_libraries []string Lists of shared preload libraries to add to the default ones ldap LDAPConfig Options to specify LDAP configuration promotionTimeout int32 Specifies the maximum number of seconds to wait when promoting an instance to primary. Default value is 40000000, greater than one year in seconds, big enough to simulate an infinite timeout enableAlterSystem bool If this parameter is true, the user will be able to invoke ALTER SYSTEM on this CloudNativePG Cluster. This should only be used for debugging and troubleshooting. Defaults to false. PrimaryUpdateMethod (Alias of string ) Appears in: ClusterSpec PrimaryUpdateMethod contains the method to use when upgrading the primary server of the cluster as part of rolling updates PrimaryUpdateStrategy (Alias of string ) Appears in: ClusterSpec PrimaryUpdateStrategy contains the strategy to follow when upgrading the primary server of the cluster as part of rolling updates Probe Appears in: ProbeWithStrategy ProbesConfiguration Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic. Field Description initialDelaySeconds int32 Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes timeoutSeconds int32 Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes periodSeconds int32 How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. successThreshold int32 Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1. failureThreshold int32 Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. terminationGracePeriodSeconds int64 Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset. ProbeStrategyType (Alias of string ) Appears in: ProbeWithStrategy ProbeStrategyType is the type of the strategy used to declare a PostgreSQL instance ready ProbeWithStrategy Appears in: ProbesConfiguration ProbeWithStrategy is the configuration of the startup probe Field Description Probe Probe (Members of Probe are embedded into this type.) Probe is the standard probe configuration type ProbeStrategyType The probe strategy maximumLag k8s.io/apimachinery/pkg/api/resource.Quantity Lag limit. Used only for streaming strategy ProbesConfiguration Appears in: ClusterSpec ProbesConfiguration represent the configuration for the probes to be injected in the PostgreSQL Pods Field Description startup [Required] ProbeWithStrategy The startup probe configuration liveness [Required] Probe The liveness probe configuration readiness [Required] ProbeWithStrategy The readiness probe configuration PublicationReclaimPolicy (Alias of string ) Appears in: PublicationSpec PublicationReclaimPolicy defines a policy for end-of-life maintenance of Publications. PublicationSpec Appears in: Publication PublicationSpec defines the desired state of Publication Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster that identifies the \"publisher\" name [Required] string The name of the publication inside PostgreSQL dbname [Required] string The name of the database where the publication will be installed in the \"publisher\" cluster parameters map[string]string Publication parameters part of the WITH clause as expected by PostgreSQL CREATE PUBLICATION command target [Required] PublicationTarget Target of the publication as expected by PostgreSQL CREATE PUBLICATION command publicationReclaimPolicy PublicationReclaimPolicy The policy for end-of-life maintenance of this publication PublicationStatus Appears in: Publication PublicationStatus defines the observed state of Publication Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the publication was reconciled correctly message string Message is the reconciliation output message PublicationTarget Appears in: PublicationSpec PublicationTarget is what this publication should publish Field Description allTables bool Marks the publication as one that replicates changes for all tables in the database, including tables created in the future. Corresponding to FOR ALL TABLES in PostgreSQL. objects []PublicationTargetObject Just the following schema objects PublicationTargetObject Appears in: PublicationTarget PublicationTargetObject is an object to publish Field Description tablesInSchema string Marks the publication as one that replicates changes for all tables in the specified list of schemas, including tables created in the future. Corresponding to FOR TABLES IN SCHEMA in PostgreSQL. table PublicationTargetTable Specifies a list of tables to add to the publication. Corresponding to FOR TABLE in PostgreSQL. PublicationTargetTable Appears in: PublicationTargetObject PublicationTargetTable is a table to publish Field Description only bool Whether to limit to the table only or include all its descendants name [Required] string The table name schema string The schema name columns []string The columns to publish RecoveryTarget Appears in: BootstrapRecovery RecoveryTarget allows to configure the moment where the recovery process will stop. All the target options except TargetTLI are mutually exclusive. Field Description backupID string The ID of the backup from which to start the recovery process. If empty (default) the operator will automatically detect the backup based on targetTime or targetLSN if specified. Otherwise use the latest available backup in chronological order. targetTLI string The target timeline (\"latest\" or a positive integer) targetXID string The target transaction ID targetName string The target name (to be previously created with pg_create_restore_point ) targetLSN string The target LSN (Log Sequence Number) targetTime string The target time as a timestamp in the RFC3339 standard targetImmediate bool End recovery as soon as a consistent state is reached exclusive bool Set the target to be exclusive. If omitted, defaults to false, so that in Postgres, recovery_target_inclusive will be true ReplicaClusterConfiguration Appears in: ClusterSpec ReplicaClusterConfiguration encapsulates the configuration of a replica cluster Field Description self string Self defines the name of this cluster. It is used to determine if this is a primary or a replica cluster, comparing it with primary primary string Primary defines which Cluster is defined to be the primary in the distributed PostgreSQL cluster, based on the topology specified in externalClusters source [Required] string The name of the external cluster which is the replication origin enabled bool If replica mode is enabled, this cluster will be a replica of an existing cluster. Replica cluster can be created from a recovery object store or via streaming through pg_basebackup. Refer to the Replica clusters page of the documentation for more information. promotionToken string A demotion token generated by an external cluster used to check if the promotion requirements are met. minApplyDelay meta/v1.Duration When replica mode is enabled, this parameter allows you to replay transactions only when the system time is at least the configured time past the commit time. This provides an opportunity to correct data loss errors. Note that when this parameter is set, a promotion token cannot be used. ReplicationSlotsConfiguration Appears in: ClusterSpec ReplicationSlotsConfiguration encapsulates the configuration of replication slots Field Description highAvailability ReplicationSlotsHAConfiguration Replication slots for high availability configuration updateInterval int Standby will update the status of the local replication slots every updateInterval seconds (default 30). synchronizeReplicas SynchronizeReplicasConfiguration Configures the synchronization of the user defined physical replication slots ReplicationSlotsHAConfiguration Appears in: ReplicationSlotsConfiguration ReplicationSlotsHAConfiguration encapsulates the configuration of the replication slots that are automatically managed by the operator to control the streaming replication connections with the standby instances for high availability (HA) purposes. Replication slots are a PostgreSQL feature that makes sure that PostgreSQL automatically keeps WAL files in the primary when a streaming client (in this specific case a replica that is part of the HA cluster) gets disconnected. Field Description enabled bool If enabled (default), the operator will automatically manage replication slots on the primary instance and use them in streaming replication connections with all the standby instances that are part of the HA cluster. If disabled, the operator will not take advantage of replication slots in streaming connections with the replicas. This feature also controls replication slots in replica cluster, from the designated primary to its cascading replicas. slotPrefix string Prefix for replication slots managed by the operator for HA. It may only contain lower case letters, numbers, and the underscore character. This can only be set at creation time. By default set to _cnpg_ . RoleConfiguration Appears in: ManagedConfiguration RoleConfiguration is the representation, in Kubernetes, of a PostgreSQL role with the additional field Ensure specifying whether to ensure the presence or absence of the role in the database The defaults of the CREATE ROLE command are applied Reference: https://www.postgresql.org/docs/current/sql-createrole.html Field Description name [Required] string Name of the role comment string Description of the role ensure EnsureOption Ensure the role is present or absent - defaults to \"present\" passwordSecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Secret containing the password of the role (if present) If null, the password will be ignored unless DisablePassword is set connectionLimit int64 If the role can log in, this specifies how many concurrent connections the role can make. -1 (the default) means no limit. validUntil meta/v1.Time Date and time after which the role's password is no longer valid. When omitted, the password will never expire (default). inRoles []string List of one or more existing roles to which this role will be immediately added as a new member. Default empty. inherit bool Whether a role \"inherits\" the privileges of roles it is a member of. Defaults is true . disablePassword bool DisablePassword indicates that a role's password should be set to NULL in Postgres superuser bool Whether the role is a superuser who can override all access restrictions within the database - superuser status is dangerous and should be used only when really needed. You must yourself be a superuser to create a new superuser. Defaults is false . createdb bool When set to true , the role being defined will be allowed to create new databases. Specifying false (default) will deny a role the ability to create databases. createrole bool Whether the role will be permitted to create, alter, drop, comment on, change the security label for, and grant or revoke membership in other roles. Default is false . login bool Whether the role is allowed to log in. A role having the login attribute can be thought of as a user. Roles without this attribute are useful for managing database privileges, but are not users in the usual sense of the word. Default is false . replication bool Whether a role is a replication role. A role must have this attribute (or be a superuser) in order to be able to connect to the server in replication mode (physical or logical replication) and in order to be able to create or drop replication slots. A role having the replication attribute is a very highly privileged role, and should only be used on roles actually used for replication. Default is false . bypassrls bool Whether a role bypasses every row-level security (RLS) policy. Default is false . SQLRefs Appears in: BootstrapInitDB SQLRefs holds references to ConfigMaps or Secrets containing SQL files. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. Field Description secretRefs []github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector SecretRefs holds a list of references to Secrets configMapRefs []github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector ConfigMapRefs holds a list of references to ConfigMaps ScheduledBackupSpec Appears in: ScheduledBackup ScheduledBackupSpec defines the desired state of ScheduledBackup Field Description suspend bool If this backup is suspended or not immediate bool If the first backup has to be immediately start after creation or not schedule [Required] string The schedule does not follow the same format used in Kubernetes CronJobs as it includes an additional seconds specifier, see https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The cluster to backup backupOwnerReference string Indicates which ownerReference should be put inside the created backup resources. none: no owner reference for created backup objects (same behavior as before the field was introduced) self: sets the Scheduled backup object as owner of the backup cluster: set the cluster as owner of the backup target BackupTarget The policy to decide which instance should perform this backup. If empty, it defaults to cluster.spec.backup.target . Available options are empty string, primary and prefer-standby . primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. method BackupMethod The backup method to be used, possible options are barmanObjectStore , volumeSnapshot or plugin . Defaults to: barmanObjectStore . pluginConfiguration BackupPluginConfiguration Configuration parameters passed to the plugin managing this backup online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online' onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza ScheduledBackupStatus Appears in: ScheduledBackup ScheduledBackupStatus defines the observed state of ScheduledBackup Field Description lastCheckTime meta/v1.Time The latest time the schedule lastScheduleTime meta/v1.Time Information when was the last time that backup was successfully scheduled. nextScheduleTime meta/v1.Time Next time we will run a backup SchemaSpec Appears in: DatabaseSpec SchemaSpec configures a schema in a database Field Description DatabaseObjectSpec DatabaseObjectSpec (Members of DatabaseObjectSpec are embedded into this type.) Common fields owner [Required] string The role name of the user who owns the schema inside PostgreSQL. It maps to the AUTHORIZATION parameter of CREATE SCHEMA and the OWNER TO command of ALTER SCHEMA . SecretVersion Appears in: PgBouncerSecrets PoolerSecrets SecretVersion contains a secret name and its ResourceVersion Field Description name string The name of the secret version string The ResourceVersion of the secret SecretsResourceVersion Appears in: ClusterStatus SecretsResourceVersion is the resource versions of the secrets managed by the operator Field Description superuserSecretVersion string The resource version of the \"postgres\" user secret replicationSecretVersion string The resource version of the \"streaming_replica\" user secret applicationSecretVersion string The resource version of the \"app\" user secret managedRoleSecretVersion map[string]string The resource versions of the managed roles secrets caSecretVersion string Unused. Retained for compatibility with old versions. clientCaSecretVersion string The resource version of the PostgreSQL client-side CA secret version serverCaSecretVersion string The resource version of the PostgreSQL server-side CA secret version serverSecretVersion string The resource version of the PostgreSQL server-side secret version barmanEndpointCA string The resource version of the Barman Endpoint CA if provided externalClusterSecretVersion map[string]string The resource versions of the external cluster secrets metrics map[string]string A map with the versions of all the secrets used to pass metrics. Map keys are the secret names, map values are the versions ServiceAccountTemplate Appears in: ClusterSpec ServiceAccountTemplate contains the template needed to generate the service accounts Field Description metadata [Required] Metadata Metadata are the metadata to be used for the generated service account ServiceSelectorType (Alias of string ) Appears in: ManagedService ManagedServices ServiceSelectorType describes a valid value for generating the service selectors. It indicates which type of service the selector applies to, such as read-write, read, or read-only ServiceTemplateSpec Appears in: ManagedService PoolerSpec ServiceTemplateSpec is a structure allowing the user to set a template for Service generation. Field Description metadata Metadata Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata spec core/v1.ServiceSpec Specification of the desired behavior of the service. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status ServiceUpdateStrategy (Alias of string ) Appears in: ManagedService ServiceUpdateStrategy describes how the changes to the managed service should be handled SnapshotOwnerReference (Alias of string ) Appears in: VolumeSnapshotConfiguration SnapshotOwnerReference defines the reference type for the owner of the snapshot. This specifies which owner the processed resources should relate to. SnapshotType (Alias of string ) Appears in: Import SnapshotType is a type of allowed import StorageConfiguration Appears in: ClusterSpec TablespaceConfiguration StorageConfiguration is the configuration used to create and reconcile PVCs, usable for WAL volumes, PGDATA volumes, or tablespaces Field Description storageClass string StorageClass to use for PVCs. Applied after evaluating the PVC template, if available. If not specified, the generated PVCs will use the default storage class size string Size of the storage. Required if not already specified in the PVC template. Changes to this field are automatically reapplied to the created PVCs. Size cannot be decreased. resizeInUseVolumes bool Resize existent PVCs, defaults to true pvcTemplate core/v1.PersistentVolumeClaimSpec Template to be used to generate the Persistent Volume Claim SubscriptionReclaimPolicy (Alias of string ) Appears in: SubscriptionSpec SubscriptionReclaimPolicy describes a policy for end-of-life maintenance of Subscriptions. SubscriptionSpec Appears in: Subscription SubscriptionSpec defines the desired state of Subscription Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster that identifies the \"subscriber\" name [Required] string The name of the subscription inside PostgreSQL dbname [Required] string The name of the database where the publication will be installed in the \"subscriber\" cluster parameters map[string]string Subscription parameters part of the WITH clause as expected by PostgreSQL CREATE SUBSCRIPTION command publicationName [Required] string The name of the publication inside the PostgreSQL database in the \"publisher\" publicationDBName string The name of the database containing the publication on the external cluster. Defaults to the one in the external cluster definition. externalClusterName [Required] string The name of the external cluster with the publication (\"publisher\") subscriptionReclaimPolicy SubscriptionReclaimPolicy The policy for end-of-life maintenance of this subscription SubscriptionStatus Appears in: Subscription SubscriptionStatus defines the observed state of Subscription Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the subscription was reconciled correctly message string Message is the reconciliation output message SwitchReplicaClusterStatus Appears in: ClusterStatus SwitchReplicaClusterStatus contains all the statuses regarding the switch of a cluster to a replica cluster Field Description inProgress bool InProgress indicates if there is an ongoing procedure of switching a cluster to a replica cluster. SyncReplicaElectionConstraints Appears in: PostgresConfiguration SyncReplicaElectionConstraints contains the constraints for sync replicas election. For anti-affinity parameters two instances are considered in the same location if all the labels values match. In future synchronous replica election restriction by name will be supported. Field Description nodeLabelsAntiAffinity []string A list of node labels values to extract and compare to evaluate if the pods reside in the same topology or not enabled [Required] bool This flag enables the constraints for sync replicas SynchronizeReplicasConfiguration Appears in: ReplicationSlotsConfiguration SynchronizeReplicasConfiguration contains the configuration for the synchronization of user defined physical replication slots Field Description enabled [Required] bool When set to true, every replication slot that is on the primary is synchronized on each standby excludePatterns []string List of regular expression patterns to match the names of replication slots to be excluded (by default empty) SynchronousReplicaConfiguration Appears in: PostgresConfiguration SynchronousReplicaConfiguration contains the configuration of the PostgreSQL synchronous replication feature. Important: at this moment, also .spec.minSyncReplicas and .spec.maxSyncReplicas need to be considered. Field Description method [Required] SynchronousReplicaConfigurationMethod Method to select synchronous replication standbys from the listed servers, accepting 'any' (quorum-based synchronous replication) or 'first' (priority-based synchronous replication) as values. number [Required] int Specifies the number of synchronous standby servers that transactions must wait for responses from. maxStandbyNamesFromCluster int Specifies the maximum number of local cluster pods that can be automatically included in the synchronous_standby_names option in PostgreSQL. standbyNamesPre []string A user-defined list of application names to be added to synchronous_standby_names before local cluster pods (the order is only useful for priority-based synchronous replication). standbyNamesPost []string A user-defined list of application names to be added to synchronous_standby_names after local cluster pods (the order is only useful for priority-based synchronous replication). dataDurability DataDurabilityLevel If set to \"required\", data durability is strictly enforced. Write operations with synchronous commit settings ( on , remote_write , or remote_apply ) will block if there are insufficient healthy replicas, ensuring data persistence. If set to \"preferred\", data durability is maintained when healthy replicas are available, but the required number of instances will adjust dynamically if replicas become unavailable. This setting relaxes strict durability enforcement to allow for operational continuity. This setting is only applicable if both standbyNamesPre and standbyNamesPost are unset (empty). SynchronousReplicaConfigurationMethod (Alias of string ) Appears in: SynchronousReplicaConfiguration SynchronousReplicaConfigurationMethod configures whether to use quorum based replication or a priority list TablespaceConfiguration Appears in: ClusterSpec TablespaceConfiguration is the configuration of a tablespace, and includes the storage specification for the tablespace Field Description name [Required] string The name of the tablespace storage [Required] StorageConfiguration The storage configuration for the tablespace owner DatabaseRoleRef Owner is the PostgreSQL user owning the tablespace temporary bool When set to true, the tablespace will be added as a temp_tablespaces entry in PostgreSQL, and will be available to automatically house temp database objects, or other temporary files. Please refer to PostgreSQL documentation for more information on the temp_tablespaces GUC. TablespaceState Appears in: ClusterStatus TablespaceState represents the state of a tablespace in a cluster Field Description name [Required] string Name is the name of the tablespace owner string Owner is the PostgreSQL user owning the tablespace state [Required] TablespaceStatus State is the latest reconciliation state error string Error is the reconciliation error, if any TablespaceStatus (Alias of string ) Appears in: TablespaceState TablespaceStatus represents the status of a tablespace in the cluster Topology Appears in: ClusterStatus Topology contains the cluster topology Field Description instances map[PodName]PodTopologyLabels Instances contains the pod topology of the instances nodesUsed int32 NodesUsed represents the count of distinct nodes accommodating the instances. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally, this value should be the same as the number of instances in the Postgres HA cluster, implying shared nothing architecture on the compute side. successfullyExtracted bool SuccessfullyExtracted indicates if the topology data was extract. It is useful to enact fallback behaviors in synchronous replica election in case of failures VolumeSnapshotConfiguration Appears in: BackupConfiguration VolumeSnapshotConfiguration represents the configuration for the execution of snapshot backups. Field Description labels map[string]string Labels are key-value pairs that will be added to .metadata.labels snapshot resources. annotations map[string]string Annotations key-value pairs that will be added to .metadata.annotations snapshot resources. className string ClassName specifies the Snapshot Class to be used for PG_DATA PersistentVolumeClaim. It is the default class for the other types if no specific class is present walClassName string WalClassName specifies the Snapshot Class to be used for the PG_WAL PersistentVolumeClaim. tablespaceClassName map[string]string TablespaceClassName specifies the Snapshot Class to be used for the tablespaces. defaults to the PGDATA Snapshot Class, if set snapshotOwnerReference SnapshotOwnerReference SnapshotOwnerReference indicates the type of owner reference the snapshot should have online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots","title":"API Reference"},{"location":"cloudnative-pg.v1/#api-reference","text":"Package v1 contains API Schema definitions for the postgresql v1 API group","title":"API Reference"},{"location":"cloudnative-pg.v1/#resource-types","text":"Backup Cluster ClusterImageCatalog Database ImageCatalog Pooler Publication ScheduledBackup Subscription","title":"Resource Types"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Backup","text":"A Backup resource is a request for a PostgreSQL backup by the user. Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Backup metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] BackupSpec Specification of the desired behavior of the backup. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status BackupStatus Most recently observed status of the backup. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"Backup"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Cluster","text":"Cluster is the Schema for the PostgreSQL API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Cluster metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ClusterSpec Specification of the desired behavior of the cluster. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status ClusterStatus Most recently observed status of the cluster. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"Cluster"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterImageCatalog","text":"ClusterImageCatalog is the Schema for the clusterimagecatalogs API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ClusterImageCatalog metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ImageCatalogSpec Specification of the desired behavior of the ClusterImageCatalog. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"ClusterImageCatalog"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Database","text":"Database is the Schema for the databases API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Database metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] DatabaseSpec Specification of the desired Database. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status DatabaseStatus Most recently observed status of the Database. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"Database"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImageCatalog","text":"ImageCatalog is the Schema for the imagecatalogs API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ImageCatalog metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ImageCatalogSpec Specification of the desired behavior of the ImageCatalog. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"ImageCatalog"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Pooler","text":"Pooler is the Schema for the poolers API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Pooler metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] PoolerSpec Specification of the desired behavior of the Pooler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status PoolerStatus Most recently observed status of the Pooler. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"Pooler"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Publication","text":"Publication is the Schema for the publications API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Publication metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] PublicationSpec No description provided. status [Required] PublicationStatus No description provided.","title":"Publication"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ScheduledBackup","text":"ScheduledBackup is the Schema for the scheduledbackups API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ScheduledBackup metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ScheduledBackupSpec Specification of the desired behavior of the ScheduledBackup. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status ScheduledBackupStatus Most recently observed status of the ScheduledBackup. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"ScheduledBackup"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Subscription","text":"Subscription is the Schema for the subscriptions API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Subscription metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] SubscriptionSpec No description provided. status [Required] SubscriptionStatus No description provided.","title":"Subscription"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-AffinityConfiguration","text":"Appears in: ClusterSpec AffinityConfiguration contains the info we need to create the affinity rules for Pods Field Description enablePodAntiAffinity bool Activates anti-affinity for the pods. The operator will define pods anti-affinity unless this field is explicitly set to false topologyKey string TopologyKey to use for anti-affinity configuration. See k8s documentation for more info on that nodeSelector map[string]string NodeSelector is map of key-value pairs used to define the nodes on which the pods can run. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ nodeAffinity core/v1.NodeAffinity NodeAffinity describes node affinity scheduling rules for the pod. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity tolerations []core/v1.Toleration Tolerations is a list of Tolerations that should be set for all the pods, in order to allow them to run on tainted nodes. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ podAntiAffinityType string PodAntiAffinityType allows the user to decide whether pod anti-affinity between cluster instance has to be considered a strong requirement during scheduling or not. Allowed values are: \"preferred\" (default if empty) or \"required\". Setting it to \"required\", could lead to instances remaining pending until new kubernetes nodes are added if all the existing nodes don't match the required pod anti-affinity rule. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity additionalPodAntiAffinity core/v1.PodAntiAffinity AdditionalPodAntiAffinity allows to specify pod anti-affinity terms to be added to the ones generated by the operator if EnablePodAntiAffinity is set to true (default) or to be used exclusively if set to false. additionalPodAffinity core/v1.PodAffinity AdditionalPodAffinity allows to specify pod affinity terms to be passed to all the cluster's pods.","title":"AffinityConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-AvailableArchitecture","text":"Appears in: ClusterStatus AvailableArchitecture represents the state of a cluster's architecture Field Description goArch [Required] string GoArch is the name of the executable architecture hash [Required] string Hash is the hash of the executable","title":"AvailableArchitecture"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupConfiguration","text":"Appears in: ClusterSpec BackupConfiguration defines how the backup of the cluster are taken. The supported backup methods are BarmanObjectStore and VolumeSnapshot. For details and examples refer to the Backup and Recovery section of the documentation Field Description volumeSnapshot VolumeSnapshotConfiguration VolumeSnapshot provides the configuration for the execution of volume snapshot backups. barmanObjectStore github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration The configuration for the barman-cloud tool suite retentionPolicy string RetentionPolicy is the retention policy to be used for backups and WALs (i.e. '60d'). The retention policy is expressed in the form of XXu where XX is a positive integer and u is in [dwm] - days, weeks, months. It's currently only applicable when using the BarmanObjectStore method. target BackupTarget The policy to decide which instance should perform backups. Available options are empty string, which will default to prefer-standby policy, primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available.","title":"BackupConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupMethod","text":"(Alias of string ) Appears in: BackupSpec BackupStatus ScheduledBackupSpec BackupMethod defines the way of executing the physical base backups of the selected PostgreSQL instance","title":"BackupMethod"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupPhase","text":"(Alias of string ) Appears in: BackupStatus BackupPhase is the phase of the backup","title":"BackupPhase"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupPluginConfiguration","text":"Appears in: BackupSpec ScheduledBackupSpec BackupPluginConfiguration contains the backup configuration used by the backup plugin Field Description name [Required] string Name is the name of the plugin managing this backup parameters map[string]string Parameters are the configuration parameters passed to the backup plugin for this backup","title":"BackupPluginConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSnapshotElementStatus","text":"Appears in: BackupSnapshotStatus BackupSnapshotElementStatus is a volume snapshot that is part of a volume snapshot method backup Field Description name [Required] string Name is the snapshot resource name type [Required] string Type is tho role of the snapshot in the cluster, such as PG_DATA, PG_WAL and PG_TABLESPACE tablespaceName string TablespaceName is the name of the snapshotted tablespace. Only set when type is PG_TABLESPACE","title":"BackupSnapshotElementStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSnapshotStatus","text":"Appears in: BackupStatus BackupSnapshotStatus the fields exclusive to the volumeSnapshot method backup Field Description elements []BackupSnapshotElementStatus The elements list, populated with the gathered volume snapshots","title":"BackupSnapshotStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSource","text":"Appears in: BootstrapRecovery BackupSource contains the backup we need to restore from, plus some information that could be needed to correctly restore it. Field Description LocalObjectReference github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference (Members of LocalObjectReference are embedded into this type.) No description provided. endpointCA github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector EndpointCA store the CA bundle of the barman endpoint. Useful when using self-signed certificates to avoid errors with certificate issuer and barman-cloud-wal-archive.","title":"BackupSource"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSpec","text":"Appears in: Backup BackupSpec defines the desired state of Backup Field Description cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The cluster to backup target BackupTarget The policy to decide which instance should perform this backup. If empty, it defaults to cluster.spec.backup.target . Available options are empty string, primary and prefer-standby . primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. method BackupMethod The backup method to be used, possible options are barmanObjectStore , volumeSnapshot or plugin . Defaults to: barmanObjectStore . pluginConfiguration BackupPluginConfiguration Configuration parameters passed to the plugin managing this backup online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online' onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza","title":"BackupSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupStatus","text":"Appears in: Backup BackupStatus defines the observed state of Backup Field Description BarmanCredentials github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanCredentials (Members of BarmanCredentials are embedded into this type.) The potential credentials for each cloud provider endpointCA github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector EndpointCA store the CA bundle of the barman endpoint. Useful when using self-signed certificates to avoid errors with certificate issuer and barman-cloud-wal-archive. endpointURL string Endpoint to be used to upload data to the cloud, overriding the automatic endpoint discovery destinationPath string The path where to store the backup (i.e. s3://bucket/path/to/folder) this path, with different destination folders, will be used for WALs and for data. This may not be populated in case of errors. serverName string The server name on S3, the cluster name is used if this parameter is omitted encryption string Encryption method required to S3 API backupId string The ID of the Barman backup backupName string The Name of the Barman backup phase BackupPhase The last backup status startedAt meta/v1.Time When the backup was started stoppedAt meta/v1.Time When the backup was terminated beginWal string The starting WAL endWal string The ending WAL beginLSN string The starting xlog endLSN string The ending xlog error string The detected error commandOutput string Unused. Retained for compatibility with old versions. commandError string The backup command output in case of error backupLabelFile []byte Backup label file content as returned by Postgres in case of online (hot) backups tablespaceMapFile []byte Tablespace map file content as returned by Postgres in case of online (hot) backups instanceID InstanceID Information to identify the instance where the backup has been taken from snapshotBackupStatus BackupSnapshotStatus Status of the volumeSnapshot backup method BackupMethod The backup method being used online bool Whether the backup was online/hot ( true ) or offline/cold ( false ) pluginMetadata map[string]string A map containing the plugin metadata","title":"BackupStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupTarget","text":"(Alias of string ) Appears in: BackupConfiguration BackupSpec ScheduledBackupSpec BackupTarget describes the preferred targets for a backup","title":"BackupTarget"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BootstrapConfiguration","text":"Appears in: ClusterSpec BootstrapConfiguration contains information about how to create the PostgreSQL cluster. Only a single bootstrap method can be defined among the supported ones. initdb will be used as the bootstrap method if left unspecified. Refer to the Bootstrap page of the documentation for more information. Field Description initdb BootstrapInitDB Bootstrap the cluster via initdb recovery BootstrapRecovery Bootstrap the cluster from a backup pg_basebackup BootstrapPgBaseBackup Bootstrap the cluster taking a physical backup of another compatible PostgreSQL instance","title":"BootstrapConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BootstrapInitDB","text":"Appears in: BootstrapConfiguration BootstrapInitDB is the configuration of the bootstrap process when initdb is used Refer to the Bootstrap page of the documentation for more information. Field Description database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch options []string The list of options that must be passed to initdb when creating the cluster. Deprecated: This could lead to inconsistent configurations, please use the explicit provided parameters instead. If defined, explicit values will be ignored. dataChecksums bool Whether the -k option should be passed to initdb, enabling checksums on data pages (default: false ) encoding string The value to be passed as option --encoding for initdb (default: UTF8 ) localeCollate string The value to be passed as option --lc-collate for initdb (default: C ) localeCType string The value to be passed as option --lc-ctype for initdb (default: C ) locale string Sets the default collation order and character classification in the new database. localeProvider string This option sets the locale provider for databases created in the new cluster. Available from PostgreSQL 16. icuLocale string Specifies the ICU locale when the ICU provider is used. This option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules string Specifies additional collation rules to customize the behavior of the default collation. This option requires localeProvider to be set to icu . Available from PostgreSQL 16. builtinLocale string Specifies the locale name when the builtin provider is used. This option requires localeProvider to be set to builtin . Available from PostgreSQL 17. walSegmentSize int The value in megabytes (1 to 1024) to be passed to the --wal-segsize option for initdb (default: empty, resulting in PostgreSQL default: 16MB) postInitSQL []string List of SQL queries to be executed as a superuser in the postgres database right after the cluster has been created - to be used with extreme care (by default empty) postInitApplicationSQL []string List of SQL queries to be executed as a superuser in the application database right after the cluster has been created - to be used with extreme care (by default empty) postInitTemplateSQL []string List of SQL queries to be executed as a superuser in the template1 database right after the cluster has been created - to be used with extreme care (by default empty) import Import Bootstraps the new cluster by importing data from an existing PostgreSQL instance using logical backup ( pg_dump and pg_restore ) postInitApplicationSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the application database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) postInitTemplateSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the template1 database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) postInitSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the postgres database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty)","title":"BootstrapInitDB"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BootstrapPgBaseBackup","text":"Appears in: BootstrapConfiguration BootstrapPgBaseBackup contains the configuration required to take a physical backup of an existing PostgreSQL cluster Field Description source [Required] string The name of the server of which we need to take a physical backup database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch","title":"BootstrapPgBaseBackup"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BootstrapRecovery","text":"Appears in: BootstrapConfiguration BootstrapRecovery contains the configuration required to restore from an existing cluster using 3 methodologies: external cluster, volume snapshots or backup objects. Full recovery and Point-In-Time Recovery are supported. The method can be also be used to create clusters in continuous recovery (replica clusters), also supporting cascading replication when instances > Once the cluster exits recovery, the password for the superuser will be changed through the provided secret. Refer to the Bootstrap page of the documentation for more information. Field Description backup BackupSource The backup object containing the physical base backup from which to initiate the recovery procedure. Mutually exclusive with source and volumeSnapshots . source string The external cluster whose backup we will restore. This is also used as the name of the folder under which the backup is stored, so it must be set to the name of the source cluster Mutually exclusive with backup . volumeSnapshots DataSource The static PVC data source(s) from which to initiate the recovery procedure. Currently supporting VolumeSnapshot and PersistentVolumeClaim resources that map an existing PVC group, compatible with CloudNativePG, and taken with a cold backup copy on a fenced Postgres instance (limitation which will be removed in the future when online backup will be implemented). Mutually exclusive with backup . recoveryTarget RecoveryTarget By default, the recovery process applies all the available WAL files in the archive (full recovery). However, you can also end the recovery as soon as a consistent state is reached or recover to a point-in-time (PITR) by specifying a RecoveryTarget object, as expected by PostgreSQL (i.e., timestamp, transaction Id, LSN, ...). More info: https://www.postgresql.org/docs/current/runtime-config-wal.html#RUNTIME-CONFIG-WAL-RECOVERY-TARGET database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch","title":"BootstrapRecovery"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-CatalogImage","text":"Appears in: ImageCatalogSpec CatalogImage defines the image and major version Field Description image [Required] string The image reference major [Required] int The PostgreSQL major version of the image. Must be unique within the catalog.","title":"CatalogImage"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-CertificatesConfiguration","text":"Appears in: CertificatesStatus ClusterSpec CertificatesConfiguration contains the needed configurations to handle server certificates. Field Description serverCASecret string The secret containing the Server CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate the TLS certificate ServerTLSSecret. Contains: ca.crt : CA that should be used to validate the server certificate, used as sslrootcert in client connection strings. ca.key : key used to generate Server SSL certs, if ServerTLSSecret is provided, this can be omitted. serverTLSSecret string The secret of type kubernetes.io/tls containing the server TLS certificate and key that will be set as ssl_cert_file and ssl_key_file so that clients can connect to postgres securely. If not defined, ServerCASecret must provide also ca.key and a new secret will be created using the provided CA. replicationTLSSecret string The secret of type kubernetes.io/tls containing the client certificate to authenticate as the streaming_replica user. If not defined, ClientCASecret must provide also ca.key , and a new secret will be created using the provided CA. clientCASecret string The secret containing the Client CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate all the client certificates. Contains: ca.crt : CA that should be used to validate the client certificates, used as ssl_ca_file of all the instances. ca.key : key used to generate client certificates, if ReplicationTLSSecret is provided, this can be omitted. serverAltDNSNames []string The list of the server alternative DNS names to be added to the generated server TLS certificates, when required.","title":"CertificatesConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-CertificatesStatus","text":"Appears in: ClusterStatus CertificatesStatus contains configuration certificates and related expiration dates. Field Description CertificatesConfiguration CertificatesConfiguration (Members of CertificatesConfiguration are embedded into this type.) Needed configurations to handle server certificates, initialized with default values, if needed. expirations map[string]string Expiration dates for all certificates.","title":"CertificatesStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterMonitoringTLSConfiguration","text":"Appears in: MonitoringConfiguration ClusterMonitoringTLSConfiguration is the type containing the TLS configuration for the cluster's monitoring Field Description enabled bool Enable TLS for the monitoring endpoint. Changing this option will force a rollout of all instances.","title":"ClusterMonitoringTLSConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterSpec","text":"Appears in: Cluster ClusterSpec defines the desired state of Cluster Field Description description string Description of this PostgreSQL cluster inheritedMetadata EmbeddedObjectMetadata Metadata that will be inherited by all objects related to the Cluster imageName string Name of the container image, supporting both tags ( <image>:<tag> ) and digests for deterministic and repeatable deployments ( <image>:<tag>@sha256:<digestValue> ) imageCatalogRef ImageCatalogRef Defines the major PostgreSQL version we want to use within an ImageCatalog imagePullPolicy core/v1.PullPolicy Image pull policy. One of Always , Never or IfNotPresent . If not defined, it defaults to IfNotPresent . Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images schedulerName string If specified, the pod will be dispatched by specified Kubernetes scheduler. If not specified, the pod will be dispatched by the default scheduler. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/kube-scheduler/ postgresUID int64 The UID of the postgres user inside the image, defaults to 26 postgresGID int64 The GID of the postgres user inside the image, defaults to 26 instances [Required] int Number of instances required in the cluster minSyncReplicas int Minimum number of instances required in synchronous replication with the primary. Undefined or 0 allow writes to complete when no standby is available. maxSyncReplicas int The target value for the synchronous replication quorum, that can be decreased if the number of ready standbys is lower than this. Undefined or 0 disable synchronous replication. postgresql PostgresConfiguration Configuration of the PostgreSQL server replicationSlots ReplicationSlotsConfiguration Replication slots management configuration bootstrap BootstrapConfiguration Instructions to bootstrap this cluster replica ReplicaClusterConfiguration Replica cluster configuration superuserSecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The secret containing the superuser password. If not defined a new secret will be created with a randomly generated password enableSuperuserAccess bool When this option is enabled, the operator will use the SuperuserSecret to update the postgres user password (if the secret is not present, the operator will automatically create one). When this option is disabled, the operator will ignore the SuperuserSecret content, delete it when automatically created, and then blank the password of the postgres user by setting it to NULL . Disabled by default. certificates CertificatesConfiguration The configuration for the CA and related certificates imagePullSecrets []github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The list of pull secrets to be used to pull the images storage StorageConfiguration Configuration of the storage of the instances serviceAccountTemplate ServiceAccountTemplate Configure the generation of the service account walStorage StorageConfiguration Configuration of the storage for PostgreSQL WAL (Write-Ahead Log) ephemeralVolumeSource core/v1.EphemeralVolumeSource EphemeralVolumeSource allows the user to configure the source of ephemeral volumes. startDelay int32 The time in seconds that is allowed for a PostgreSQL instance to successfully start up (default 3600). The startup probe failure threshold is derived from this value using the formula: ceiling(startDelay / 10). stopDelay int32 The time in seconds that is allowed for a PostgreSQL instance to gracefully shutdown (default 1800) smartShutdownTimeout int32 The time in seconds that controls the window of time reserved for the smart shutdown of Postgres to complete. Make sure you reserve enough time for the operator to request a fast shutdown of Postgres (that is: stopDelay - smartShutdownTimeout ). switchoverDelay int32 The time in seconds that is allowed for a primary PostgreSQL instance to gracefully shutdown during a switchover. Default value is 3600 seconds (1 hour). failoverDelay int32 The amount of time (in seconds) to wait before triggering a failover after the primary PostgreSQL instance in the cluster was detected to be unhealthy livenessProbeTimeout int32 LivenessProbeTimeout is the time (in seconds) that is allowed for a PostgreSQL instance to successfully respond to the liveness probe (default 30). The Liveness probe failure threshold is derived from this value using the formula: ceiling(livenessProbe / 10). affinity AffinityConfiguration Affinity/Anti-affinity rules for Pods topologySpreadConstraints []core/v1.TopologySpreadConstraint TopologySpreadConstraints specifies how to spread matching pods among the given topology. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/ resources core/v1.ResourceRequirements Resources requirements of every generated Pod. Please refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ for more information. ephemeralVolumesSizeLimit EphemeralVolumesSizeLimitConfiguration EphemeralVolumesSizeLimit allows the user to set the limits for the ephemeral volumes priorityClassName string Name of the priority class which will be used in every generated Pod, if the PriorityClass specified does not exist, the pod will not be able to schedule. Please refer to https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass for more information primaryUpdateStrategy PrimaryUpdateStrategy Deployment strategy to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be automated ( unsupervised - default) or manual ( supervised ) primaryUpdateMethod PrimaryUpdateMethod Method to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be with a switchover ( switchover ) or in-place ( restart - default) backup BackupConfiguration The configuration to be used for backups nodeMaintenanceWindow NodeMaintenanceWindow Define a maintenance window for the Kubernetes nodes monitoring MonitoringConfiguration The configuration of the monitoring infrastructure of this cluster externalClusters []ExternalCluster The list of external clusters which are used in the configuration logLevel string The instances' log level, one of the following values: error, warning, info (default), debug, trace projectedVolumeTemplate core/v1.ProjectedVolumeSource Template to be used to define projected volumes, projected volumes will be mounted under /projected base folder env []core/v1.EnvVar Env follows the Env format to pass environment variables to the pods created in the cluster envFrom []core/v1.EnvFromSource EnvFrom follows the EnvFrom format to pass environment variables sources to the pods to be used by Env managed ManagedConfiguration The configuration that is used by the portions of PostgreSQL that are managed by the instance manager seccompProfile core/v1.SeccompProfile The SeccompProfile applied to every Pod and Container. Defaults to: RuntimeDefault tablespaces []TablespaceConfiguration The tablespaces configuration enablePDB bool Manage the PodDisruptionBudget resources within the cluster. When configured as true (default setting), the pod disruption budgets will safeguard the primary node from being terminated. Conversely, setting it to false will result in the absence of any PodDisruptionBudget resource, permitting the shutdown of all nodes hosting the PostgreSQL cluster. This latter configuration is advisable for any PostgreSQL cluster employed for development/staging purposes. plugins []PluginConfiguration The plugins configuration, containing any plugin to be loaded with the corresponding configuration probes ProbesConfiguration The configuration of the probes to be injected in the PostgreSQL Pods.","title":"ClusterSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterStatus","text":"Appears in: Cluster ClusterStatus defines the observed state of Cluster Field Description instances int The total number of PVC Groups detected in the cluster. It may differ from the number of existing instance pods. readyInstances int The total number of ready instances in the cluster. It is equal to the number of ready instance pods. instancesStatus map[PodStatus][]string InstancesStatus indicates in which status the instances are instancesReportedState map[PodName]InstanceReportedState The reported state of the instances during the last reconciliation loop managedRolesStatus ManagedRoles ManagedRolesStatus reports the state of the managed roles in the cluster tablespacesStatus []TablespaceState TablespacesStatus reports the state of the declarative tablespaces in the cluster timelineID int The timeline of the Postgres cluster topology Topology Instances topology. latestGeneratedNode int ID of the latest generated node (used to avoid node name clashing) currentPrimary string Current primary instance targetPrimary string Target primary instance, this is different from the previous one during a switchover or a failover lastPromotionToken string LastPromotionToken is the last verified promotion token that was used to promote a replica cluster pvcCount int32 How many PVCs have been created by this cluster jobCount int32 How many Jobs have been created by this cluster danglingPVC []string List of all the PVCs created by this cluster and still available which are not attached to a Pod resizingPVC []string List of all the PVCs that have ResizingPVC condition. initializingPVC []string List of all the PVCs that are being initialized by this cluster healthyPVC []string List of all the PVCs not dangling nor initializing unusablePVC []string List of all the PVCs that are unusable because another PVC is missing writeService string Current write pod readService string Current list of read pods phase string Current phase of the cluster phaseReason string Reason for the current phase secretsResourceVersion SecretsResourceVersion The list of resource versions of the secrets managed by the operator. Every change here is done in the interest of the instance manager, which will refresh the secret data configMapResourceVersion ConfigMapResourceVersion The list of resource versions of the configmaps, managed by the operator. Every change here is done in the interest of the instance manager, which will refresh the configmap data certificates CertificatesStatus The configuration for the CA and related certificates, initialized with defaults. firstRecoverabilityPoint string The first recoverability point, stored as a date in RFC3339 format. This field is calculated from the content of FirstRecoverabilityPointByMethod firstRecoverabilityPointByMethod map[BackupMethod]meta/v1.Time The first recoverability point, stored as a date in RFC3339 format, per backup method type lastSuccessfulBackup string Last successful backup, stored as a date in RFC3339 format This field is calculated from the content of LastSuccessfulBackupByMethod lastSuccessfulBackupByMethod map[BackupMethod]meta/v1.Time Last successful backup, stored as a date in RFC3339 format, per backup method type lastFailedBackup string Stored as a date in RFC3339 format cloudNativePGCommitHash string The commit hash number of which this operator running currentPrimaryTimestamp string The timestamp when the last actual promotion to primary has occurred currentPrimaryFailingSinceTimestamp string The timestamp when the primary was detected to be unhealthy This field is reported when .spec.failoverDelay is populated or during online upgrades targetPrimaryTimestamp string The timestamp when the last request for a new primary has occurred poolerIntegrations PoolerIntegrations The integration needed by poolers referencing the cluster cloudNativePGOperatorHash string The hash of the binary of the operator availableArchitectures []AvailableArchitecture AvailableArchitectures reports the available architectures of a cluster conditions []meta/v1.Condition Conditions for cluster object instanceNames []string List of instance names in the cluster onlineUpdateEnabled bool OnlineUpdateEnabled shows if the online upgrade is enabled inside the cluster image string Image contains the image name used by the pods pgDataImageInfo ImageInfo PGDataImageInfo contains the details of the latest image that has run on the current data directory. pluginStatus []PluginStatus PluginStatus is the status of the loaded plugins switchReplicaClusterStatus SwitchReplicaClusterStatus SwitchReplicaClusterStatus is the status of the switch to replica cluster demotionToken string DemotionToken is a JSON token containing the information from pg_controldata such as Database system identifier, Latest checkpoint's TimeLineID, Latest checkpoint's REDO location, Latest checkpoint's REDO WAL file, and Time of latest checkpoint","title":"ClusterStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ConfigMapResourceVersion","text":"Appears in: ClusterStatus ConfigMapResourceVersion is the resource versions of the secrets managed by the operator Field Description metrics map[string]string A map with the versions of all the config maps used to pass metrics. Map keys are the config map names, map values are the versions","title":"ConfigMapResourceVersion"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DataDurabilityLevel","text":"(Alias of string ) Appears in: SynchronousReplicaConfiguration DataDurabilityLevel specifies how strictly to enforce synchronous replication when cluster instances are unavailable. Options are required or preferred .","title":"DataDurabilityLevel"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DataSource","text":"Appears in: BootstrapRecovery DataSource contains the configuration required to bootstrap a PostgreSQL cluster from an existing storage Field Description storage [Required] core/v1.TypedLocalObjectReference Configuration of the storage of the instances walStorage core/v1.TypedLocalObjectReference Configuration of the storage for PostgreSQL WAL (Write-Ahead Log) tablespaceStorage map[string]core/v1.TypedLocalObjectReference Configuration of the storage for PostgreSQL tablespaces","title":"DataSource"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseObjectSpec","text":"Appears in: ExtensionSpec SchemaSpec DatabaseObjectSpec contains the fields which are common to every database object Field Description name [Required] string Name of the extension/schema ensure EnsureOption Specifies whether an extension/schema should be present or absent in the database. If set to present , the extension/schema will be created if it does not exist. If set to absent , the extension/schema will be removed if it exists.","title":"DatabaseObjectSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseObjectStatus","text":"Appears in: DatabaseStatus DatabaseObjectStatus is the status of the managed database objects Field Description name [Required] string The name of the object applied [Required] bool True of the object has been installed successfully in the database message string Message is the object reconciliation message","title":"DatabaseObjectStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseReclaimPolicy","text":"(Alias of string ) Appears in: DatabaseSpec DatabaseReclaimPolicy describes a policy for end-of-life maintenance of databases.","title":"DatabaseReclaimPolicy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseRoleRef","text":"Appears in: TablespaceConfiguration DatabaseRoleRef is a reference an a role available inside PostgreSQL Field Description name string No description provided.","title":"DatabaseRoleRef"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseSpec","text":"Appears in: Database DatabaseSpec is the specification of a Postgresql Database, built around the CREATE DATABASE , ALTER DATABASE , and DROP DATABASE SQL commands of PostgreSQL. Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster hosting the database. ensure EnsureOption Ensure the PostgreSQL database is present or absent - defaults to \"present\". name [Required] string The name of the database to create inside PostgreSQL. This setting cannot be changed. owner [Required] string Maps to the OWNER parameter of CREATE DATABASE . Maps to the OWNER TO command of ALTER DATABASE . The role name of the user who owns the database inside PostgreSQL. template string Maps to the TEMPLATE parameter of CREATE DATABASE . This setting cannot be changed. The name of the template from which to create this database. encoding string Maps to the ENCODING parameter of CREATE DATABASE . This setting cannot be changed. Character set encoding to use in the database. locale string Maps to the LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Sets the default collation order and character classification in the new database. localeProvider string Maps to the LOCALE_PROVIDER parameter of CREATE DATABASE . This setting cannot be changed. This option sets the locale provider for databases created in the new cluster. Available from PostgreSQL 16. localeCollate string Maps to the LC_COLLATE parameter of CREATE DATABASE . This setting cannot be changed. localeCType string Maps to the LC_CTYPE parameter of CREATE DATABASE . This setting cannot be changed. icuLocale string Maps to the ICU_LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Specifies the ICU locale when the ICU provider is used. This option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules string Maps to the ICU_RULES parameter of CREATE DATABASE . This setting cannot be changed. Specifies additional collation rules to customize the behavior of the default collation. This option requires localeProvider to be set to icu . Available from PostgreSQL 16. builtinLocale string Maps to the BUILTIN_LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Specifies the locale name when the builtin provider is used. This option requires localeProvider to be set to builtin . Available from PostgreSQL 17. collationVersion string Maps to the COLLATION_VERSION parameter of CREATE DATABASE . This setting cannot be changed. isTemplate bool Maps to the IS_TEMPLATE parameter of CREATE DATABASE and ALTER DATABASE . If true, this database is considered a template and can be cloned by any user with CREATEDB privileges. allowConnections bool Maps to the ALLOW_CONNECTIONS parameter of CREATE DATABASE and ALTER DATABASE . If false then no one can connect to this database. connectionLimit int Maps to the CONNECTION LIMIT clause of CREATE DATABASE and ALTER DATABASE . How many concurrent connections can be made to this database. -1 (the default) means no limit. tablespace string Maps to the TABLESPACE parameter of CREATE DATABASE . Maps to the SET TABLESPACE command of ALTER DATABASE . The name of the tablespace (in PostgreSQL) that will be associated with the new database. This tablespace will be the default tablespace used for objects created in this database. databaseReclaimPolicy DatabaseReclaimPolicy The policy for end-of-life maintenance of this database. schemas []SchemaSpec The list of schemas to be managed in the database extensions []ExtensionSpec The list of extensions to be managed in the database","title":"DatabaseSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseStatus","text":"Appears in: Database DatabaseStatus defines the observed state of Database Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the database was reconciled correctly message string Message is the reconciliation output message schemas []DatabaseObjectStatus Schemas is the status of the managed schemas extensions []DatabaseObjectStatus Extensions is the status of the managed extensions","title":"DatabaseStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-EmbeddedObjectMetadata","text":"Appears in: ClusterSpec EmbeddedObjectMetadata contains metadata to be inherited by all resources related to a Cluster Field Description labels map[string]string No description provided. annotations map[string]string No description provided.","title":"EmbeddedObjectMetadata"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-EnsureOption","text":"(Alias of string ) Appears in: DatabaseObjectSpec DatabaseSpec RoleConfiguration EnsureOption represents whether we should enforce the presence or absence of a Role in a PostgreSQL instance","title":"EnsureOption"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-EphemeralVolumesSizeLimitConfiguration","text":"Appears in: ClusterSpec EphemeralVolumesSizeLimitConfiguration contains the configuration of the ephemeral storage Field Description shm k8s.io/apimachinery/pkg/api/resource.Quantity Shm is the size limit of the shared memory volume temporaryData k8s.io/apimachinery/pkg/api/resource.Quantity TemporaryData is the size limit of the temporary data volume","title":"EphemeralVolumesSizeLimitConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ExtensionSpec","text":"Appears in: DatabaseSpec ExtensionSpec configures an extension in a database Field Description DatabaseObjectSpec DatabaseObjectSpec (Members of DatabaseObjectSpec are embedded into this type.) Common fields version [Required] string The version of the extension to install. If empty, the operator will install the default version (whatever is specified in the extension's control file) schema [Required] string The name of the schema in which to install the extension's objects, in case the extension allows its contents to be relocated. If not specified (default), and the extension's control file does not specify a schema either, the current default object creation schema is used.","title":"ExtensionSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ExternalCluster","text":"Appears in: ClusterSpec ExternalCluster represents the connection parameters to an external cluster which is used in the other sections of the configuration Field Description name [Required] string The server name, required connectionParameters map[string]string The list of connection parameters, such as dbname, host, username, etc sslCert core/v1.SecretKeySelector The reference to an SSL certificate to be used to connect to this instance sslKey core/v1.SecretKeySelector The reference to an SSL private key to be used to connect to this instance sslRootCert core/v1.SecretKeySelector The reference to an SSL CA public key to be used to connect to this instance password core/v1.SecretKeySelector The reference to the password to be used to connect to the server. If a password is provided, CloudNativePG creates a PostgreSQL passfile at /controller/external/NAME/pass (where \"NAME\" is the cluster's name). This passfile is automatically referenced in the connection string when establishing a connection to the remote PostgreSQL server from the current PostgreSQL Cluster . This ensures secure and efficient password management for external clusters. barmanObjectStore github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration The configuration for the barman-cloud tool suite plugin [Required] PluginConfiguration The configuration of the plugin that is taking care of WAL archiving and backups for this external cluster","title":"ExternalCluster"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImageCatalogRef","text":"Appears in: ClusterSpec ImageCatalogRef defines the reference to a major version in an ImageCatalog Field Description TypedLocalObjectReference core/v1.TypedLocalObjectReference (Members of TypedLocalObjectReference are embedded into this type.) No description provided. major [Required] int The major version of PostgreSQL we want to use from the ImageCatalog","title":"ImageCatalogRef"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImageCatalogSpec","text":"Appears in: ClusterImageCatalog ImageCatalog ImageCatalogSpec defines the desired ImageCatalog Field Description images [Required] []CatalogImage List of CatalogImages available in the catalog","title":"ImageCatalogSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImageInfo","text":"Appears in: ClusterStatus ImageInfo contains the information about a PostgreSQL image Field Description image [Required] string Image is the image name majorVersion [Required] int MajorVersion is the major version of the image","title":"ImageInfo"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Import","text":"Appears in: BootstrapInitDB Import contains the configuration to init a database from a logic snapshot of an externalCluster Field Description source [Required] ImportSource The source of the import type [Required] SnapshotType The import type. Can be microservice or monolith . databases [Required] []string The databases to import roles []string The roles to import postImportApplicationSQL []string List of SQL queries to be executed as a superuser in the application database right after is imported - to be used with extreme care (by default empty). Only available in microservice type. schemaOnly bool When set to true, only the pre-data and post-data sections of pg_restore are invoked, avoiding data import. Default: false . pgDumpExtraOptions []string List of custom options to pass to the pg_dump command. IMPORTANT: Use these options with caution and at your own risk, as the operator does not validate their content. Be aware that certain options may conflict with the operator's intended functionality or design. pgRestoreExtraOptions []string List of custom options to pass to the pg_restore command. IMPORTANT: Use these options with caution and at your own risk, as the operator does not validate their content. Be aware that certain options may conflict with the operator's intended functionality or design.","title":"Import"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImportSource","text":"Appears in: Import ImportSource describes the source for the logical snapshot Field Description externalCluster [Required] string The name of the externalCluster used for import","title":"ImportSource"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-InstanceID","text":"Appears in: BackupStatus InstanceID contains the information to identify an instance Field Description podName string The pod name ContainerID string The container ID","title":"InstanceID"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-InstanceReportedState","text":"Appears in: ClusterStatus InstanceReportedState describes the last reported state of an instance during a reconciliation loop Field Description isPrimary [Required] bool indicates if an instance is the primary one timeLineID int indicates on which TimelineId the instance is ip [Required] string IP address of the instance","title":"InstanceReportedState"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LDAPBindAsAuth","text":"Appears in: LDAPConfig LDAPBindAsAuth provides the required fields to use the bind authentication for LDAP Field Description prefix string Prefix for the bind authentication option suffix string Suffix for the bind authentication option","title":"LDAPBindAsAuth"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LDAPBindSearchAuth","text":"Appears in: LDAPConfig LDAPBindSearchAuth provides the required fields to use the bind+search LDAP authentication process Field Description baseDN string Root DN to begin the user search bindDN string DN of the user to bind to the directory bindPassword core/v1.SecretKeySelector Secret with the password for the user to bind to the directory searchAttribute string Attribute to match against the username searchFilter string Search filter to use when doing the search+bind authentication","title":"LDAPBindSearchAuth"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LDAPConfig","text":"Appears in: PostgresConfiguration LDAPConfig contains the parameters needed for LDAP authentication Field Description server string LDAP hostname or IP address port int LDAP server port scheme LDAPScheme LDAP schema to be used, possible options are ldap and ldaps bindAsAuth LDAPBindAsAuth Bind as authentication configuration bindSearchAuth LDAPBindSearchAuth Bind+Search authentication configuration tls bool Set to 'true' to enable LDAP over TLS. 'false' is default","title":"LDAPConfig"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LDAPScheme","text":"(Alias of string ) Appears in: LDAPConfig LDAPScheme defines the possible schemes for LDAP","title":"LDAPScheme"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedConfiguration","text":"Appears in: ClusterSpec ManagedConfiguration represents the portions of PostgreSQL that are managed by the instance manager Field Description roles []RoleConfiguration Database roles managed by the Cluster services ManagedServices Services roles managed by the Cluster","title":"ManagedConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedRoles","text":"Appears in: ClusterStatus ManagedRoles tracks the status of a cluster's managed roles Field Description byStatus map[RoleStatus][]string ByStatus gives the list of roles in each state cannotReconcile map[string][]string CannotReconcile lists roles that cannot be reconciled in PostgreSQL, with an explanation of the cause passwordStatus map[string]PasswordState PasswordStatus gives the last transaction id and password secret version for each managed role","title":"ManagedRoles"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedService","text":"Appears in: ManagedServices ManagedService represents a specific service managed by the cluster. It includes the type of service and its associated template specification. Field Description selectorType [Required] ServiceSelectorType SelectorType specifies the type of selectors that the service will have. Valid values are \"rw\", \"r\", and \"ro\", representing read-write, read, and read-only services. updateStrategy ServiceUpdateStrategy UpdateStrategy describes how the service differences should be reconciled serviceTemplate [Required] ServiceTemplateSpec ServiceTemplate is the template specification for the service.","title":"ManagedService"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedServices","text":"Appears in: ManagedConfiguration ManagedServices represents the services managed by the cluster. Field Description disabledDefaultServices []ServiceSelectorType DisabledDefaultServices is a list of service types that are disabled by default. Valid values are \"r\", and \"ro\", representing read, and read-only services. additional []ManagedService Additional is a list of additional managed services specified by the user.","title":"ManagedServices"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Metadata","text":"Appears in: PodTemplateSpec ServiceAccountTemplate ServiceTemplateSpec Metadata is a structure similar to the metav1.ObjectMeta, but still parseable by controller-gen to create a suitable CRD for the user. The comment of PodTemplateSpec has an explanation of why we are not using the core data types. Field Description name string The name of the resource. Only supported for certain types labels map[string]string Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels annotations map[string]string Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations","title":"Metadata"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-MonitoringConfiguration","text":"Appears in: ClusterSpec MonitoringConfiguration is the type containing all the monitoring configuration for a certain cluster Field Description disableDefaultQueries bool Whether the default queries should be injected. Set it to true if you don't want to inject default queries into the cluster. Default: false. customQueriesConfigMap []github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector The list of config maps containing the custom queries customQueriesSecret []github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector The list of secrets containing the custom queries enablePodMonitor bool Enable or disable the PodMonitor tls ClusterMonitoringTLSConfiguration Configure TLS communication for the metrics endpoint. Changing tls.enabled option will force a rollout of all instances. podMonitorMetricRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of metric relabelings for the PodMonitor . Applied to samples before ingestion. podMonitorRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of relabelings for the PodMonitor . Applied to samples before scraping.","title":"MonitoringConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-NodeMaintenanceWindow","text":"Appears in: ClusterSpec NodeMaintenanceWindow contains information that the operator will use while upgrading the underlying node. This option is only useful when the chosen storage prevents the Pods from being freely moved across nodes. Field Description reusePVC bool Reuse the existing PVC (wait for the node to come up again) or not (recreate it elsewhere - when instances >1) inProgress bool Is there a node maintenance activity in progress?","title":"NodeMaintenanceWindow"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-OnlineConfiguration","text":"Appears in: BackupSpec ScheduledBackupSpec VolumeSnapshotConfiguration OnlineConfiguration contains the configuration parameters for the online volume snapshot Field Description waitForArchive bool If false, the function will return immediately after the backup is completed, without waiting for WAL to be archived. This behavior is only useful with backup software that independently monitors WAL archiving. Otherwise, WAL required to make the backup consistent might be missing and make the backup useless. By default, or when this parameter is true, pg_backup_stop will wait for WAL to be archived when archiving is enabled. On a standby, this means that it will wait only when archive_mode = always. If write activity on the primary is low, it may be useful to run pg_switch_wal on the primary in order to trigger an immediate segment switch. immediateCheckpoint bool Control whether the I/O workload for the backup initial checkpoint will be limited, according to the checkpoint_completion_target setting on the PostgreSQL server. If set to true, an immediate checkpoint will be used, meaning PostgreSQL will complete the checkpoint as soon as possible. false by default.","title":"OnlineConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PasswordState","text":"Appears in: ManagedRoles PasswordState represents the state of the password of a managed RoleConfiguration Field Description transactionID int64 the last transaction ID to affect the role definition in PostgreSQL resourceVersion string the resource version of the password secret","title":"PasswordState"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PgBouncerIntegrationStatus","text":"Appears in: PoolerIntegrations PgBouncerIntegrationStatus encapsulates the needed integration for the pgbouncer poolers referencing the cluster Field Description secrets []string No description provided.","title":"PgBouncerIntegrationStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PgBouncerPoolMode","text":"(Alias of string ) Appears in: PgBouncerSpec PgBouncerPoolMode is the mode of PgBouncer","title":"PgBouncerPoolMode"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PgBouncerSecrets","text":"Appears in: PoolerSecrets PgBouncerSecrets contains the versions of the secrets used by pgbouncer Field Description authQuery SecretVersion The auth query secret version","title":"PgBouncerSecrets"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PgBouncerSpec","text":"Appears in: PoolerSpec PgBouncerSpec defines how to configure PgBouncer Field Description poolMode PgBouncerPoolMode The pool mode. Default: session . authQuerySecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The credentials of the user that need to be used for the authentication query. In case it is specified, also an AuthQuery (e.g. \"SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1\") has to be specified and no automatic CNPG Cluster integration will be triggered. authQuery string The query that will be used to download the hash of the password of a certain user. Default: \"SELECT usename, passwd FROM public.user_search($1)\". In case it is specified, also an AuthQuerySecret has to be specified and no automatic CNPG Cluster integration will be triggered. parameters map[string]string Additional parameters to be passed to PgBouncer - please check the CNPG documentation for a list of options you can configure pg_hba []string PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) paused bool When set to true , PgBouncer will disconnect from the PostgreSQL server, first waiting for all queries to complete, and pause all new client connections until this value is set to false (default). Internally, the operator calls PgBouncer's PAUSE and RESUME commands.","title":"PgBouncerSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PluginConfiguration","text":"Appears in: ClusterSpec ExternalCluster PluginConfiguration specifies a plugin that need to be loaded for this cluster to be reconciled Field Description name [Required] string Name is the plugin name enabled bool Enabled is true if this plugin will be used isWALArchiver bool Only one plugin can be declared as WALArchiver. Cannot be active if \".spec.backup.barmanObjectStore\" configuration is present. parameters map[string]string Parameters is the configuration of the plugin","title":"PluginConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PluginStatus","text":"Appears in: ClusterStatus PluginStatus is the status of a loaded plugin Field Description name [Required] string Name is the name of the plugin version [Required] string Version is the version of the plugin loaded by the latest reconciliation loop capabilities []string Capabilities are the list of capabilities of the plugin operatorCapabilities []string OperatorCapabilities are the list of capabilities of the plugin regarding the reconciler walCapabilities []string WALCapabilities are the list of capabilities of the plugin regarding the WAL management backupCapabilities []string BackupCapabilities are the list of capabilities of the plugin regarding the Backup management restoreJobHookCapabilities []string RestoreJobHookCapabilities are the list of capabilities of the plugin regarding the RestoreJobHook management status string Status contain the status reported by the plugin through the SetStatusInCluster interface","title":"PluginStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PodTemplateSpec","text":"Appears in: PoolerSpec PodTemplateSpec is a structure allowing the user to set a template for Pod generation. Unfortunately we can't use the corev1.PodTemplateSpec type because the generated CRD won't have the field for the metadata section. References: https://github.com/kubernetes-sigs/controller-tools/issues/385 https://github.com/kubernetes-sigs/controller-tools/issues/448 https://github.com/prometheus-operator/prometheus-operator/issues/3041 Field Description metadata Metadata Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata spec core/v1.PodSpec Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"PodTemplateSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PodTopologyLabels","text":"(Alias of map[string]string ) Appears in: Topology PodTopologyLabels represent the topology of a Pod. map[labelName]labelValue","title":"PodTopologyLabels"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerIntegrations","text":"Appears in: ClusterStatus PoolerIntegrations encapsulates the needed integration for the poolers referencing the cluster Field Description pgBouncerIntegration PgBouncerIntegrationStatus No description provided.","title":"PoolerIntegrations"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerMonitoringConfiguration","text":"Appears in: PoolerSpec PoolerMonitoringConfiguration is the type containing all the monitoring configuration for a certain Pooler. Mirrors the Cluster's MonitoringConfiguration but without the custom queries part for now. Field Description enablePodMonitor bool Enable or disable the PodMonitor podMonitorMetricRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of metric relabelings for the PodMonitor . Applied to samples before ingestion. podMonitorRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of relabelings for the PodMonitor . Applied to samples before scraping.","title":"PoolerMonitoringConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerSecrets","text":"Appears in: PoolerStatus PoolerSecrets contains the versions of all the secrets used Field Description serverTLS SecretVersion The server TLS secret version serverCA SecretVersion The server CA secret version clientCA SecretVersion The client CA secret version pgBouncerSecrets PgBouncerSecrets The version of the secrets used by PgBouncer","title":"PoolerSecrets"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerSpec","text":"Appears in: Pooler PoolerSpec defines the desired state of Pooler Field Description cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference This is the cluster reference on which the Pooler will work. Pooler name should never match with any cluster name within the same namespace. type PoolerType Type of service to forward traffic to. Default: rw . instances int32 The number of replicas we want. Default: 1. template PodTemplateSpec The template of the Pod to be created pgbouncer [Required] PgBouncerSpec The PgBouncer configuration deploymentStrategy apps/v1.DeploymentStrategy The deployment strategy to use for pgbouncer to replace existing pods with new ones monitoring PoolerMonitoringConfiguration The configuration of the monitoring infrastructure of this pooler. serviceTemplate ServiceTemplateSpec Template for the Service to be created","title":"PoolerSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerStatus","text":"Appears in: Pooler PoolerStatus defines the observed state of Pooler Field Description secrets PoolerSecrets The resource version of the config object instances int32 The number of pods trying to be scheduled","title":"PoolerStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerType","text":"(Alias of string ) Appears in: PoolerSpec PoolerType is the type of the connection pool, meaning the service we are targeting. Allowed values are rw and ro .","title":"PoolerType"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PostgresConfiguration","text":"Appears in: ClusterSpec PostgresConfiguration defines the PostgreSQL configuration Field Description parameters map[string]string PostgreSQL configuration options (postgresql.conf) synchronous SynchronousReplicaConfiguration Configuration of the PostgreSQL synchronous replication feature pg_hba []string PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) pg_ident []string PostgreSQL User Name Maps rules (lines to be appended to the pg_ident.conf file) syncReplicaElectionConstraint SyncReplicaElectionConstraints Requirements to be met by sync replicas. This will affect how the \"synchronous_standby_names\" parameter will be set up. shared_preload_libraries []string Lists of shared preload libraries to add to the default ones ldap LDAPConfig Options to specify LDAP configuration promotionTimeout int32 Specifies the maximum number of seconds to wait when promoting an instance to primary. Default value is 40000000, greater than one year in seconds, big enough to simulate an infinite timeout enableAlterSystem bool If this parameter is true, the user will be able to invoke ALTER SYSTEM on this CloudNativePG Cluster. This should only be used for debugging and troubleshooting. Defaults to false.","title":"PostgresConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PrimaryUpdateMethod","text":"(Alias of string ) Appears in: ClusterSpec PrimaryUpdateMethod contains the method to use when upgrading the primary server of the cluster as part of rolling updates","title":"PrimaryUpdateMethod"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PrimaryUpdateStrategy","text":"(Alias of string ) Appears in: ClusterSpec PrimaryUpdateStrategy contains the strategy to follow when upgrading the primary server of the cluster as part of rolling updates","title":"PrimaryUpdateStrategy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Probe","text":"Appears in: ProbeWithStrategy ProbesConfiguration Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic. Field Description initialDelaySeconds int32 Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes timeoutSeconds int32 Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes periodSeconds int32 How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. successThreshold int32 Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1. failureThreshold int32 Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. terminationGracePeriodSeconds int64 Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.","title":"Probe"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ProbeStrategyType","text":"(Alias of string ) Appears in: ProbeWithStrategy ProbeStrategyType is the type of the strategy used to declare a PostgreSQL instance ready","title":"ProbeStrategyType"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ProbeWithStrategy","text":"Appears in: ProbesConfiguration ProbeWithStrategy is the configuration of the startup probe Field Description Probe Probe (Members of Probe are embedded into this type.) Probe is the standard probe configuration type ProbeStrategyType The probe strategy maximumLag k8s.io/apimachinery/pkg/api/resource.Quantity Lag limit. Used only for streaming strategy","title":"ProbeWithStrategy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ProbesConfiguration","text":"Appears in: ClusterSpec ProbesConfiguration represent the configuration for the probes to be injected in the PostgreSQL Pods Field Description startup [Required] ProbeWithStrategy The startup probe configuration liveness [Required] Probe The liveness probe configuration readiness [Required] ProbeWithStrategy The readiness probe configuration","title":"ProbesConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationReclaimPolicy","text":"(Alias of string ) Appears in: PublicationSpec PublicationReclaimPolicy defines a policy for end-of-life maintenance of Publications.","title":"PublicationReclaimPolicy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationSpec","text":"Appears in: Publication PublicationSpec defines the desired state of Publication Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster that identifies the \"publisher\" name [Required] string The name of the publication inside PostgreSQL dbname [Required] string The name of the database where the publication will be installed in the \"publisher\" cluster parameters map[string]string Publication parameters part of the WITH clause as expected by PostgreSQL CREATE PUBLICATION command target [Required] PublicationTarget Target of the publication as expected by PostgreSQL CREATE PUBLICATION command publicationReclaimPolicy PublicationReclaimPolicy The policy for end-of-life maintenance of this publication","title":"PublicationSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationStatus","text":"Appears in: Publication PublicationStatus defines the observed state of Publication Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the publication was reconciled correctly message string Message is the reconciliation output message","title":"PublicationStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationTarget","text":"Appears in: PublicationSpec PublicationTarget is what this publication should publish Field Description allTables bool Marks the publication as one that replicates changes for all tables in the database, including tables created in the future. Corresponding to FOR ALL TABLES in PostgreSQL. objects []PublicationTargetObject Just the following schema objects","title":"PublicationTarget"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationTargetObject","text":"Appears in: PublicationTarget PublicationTargetObject is an object to publish Field Description tablesInSchema string Marks the publication as one that replicates changes for all tables in the specified list of schemas, including tables created in the future. Corresponding to FOR TABLES IN SCHEMA in PostgreSQL. table PublicationTargetTable Specifies a list of tables to add to the publication. Corresponding to FOR TABLE in PostgreSQL.","title":"PublicationTargetObject"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationTargetTable","text":"Appears in: PublicationTargetObject PublicationTargetTable is a table to publish Field Description only bool Whether to limit to the table only or include all its descendants name [Required] string The table name schema string The schema name columns []string The columns to publish","title":"PublicationTargetTable"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-RecoveryTarget","text":"Appears in: BootstrapRecovery RecoveryTarget allows to configure the moment where the recovery process will stop. All the target options except TargetTLI are mutually exclusive. Field Description backupID string The ID of the backup from which to start the recovery process. If empty (default) the operator will automatically detect the backup based on targetTime or targetLSN if specified. Otherwise use the latest available backup in chronological order. targetTLI string The target timeline (\"latest\" or a positive integer) targetXID string The target transaction ID targetName string The target name (to be previously created with pg_create_restore_point ) targetLSN string The target LSN (Log Sequence Number) targetTime string The target time as a timestamp in the RFC3339 standard targetImmediate bool End recovery as soon as a consistent state is reached exclusive bool Set the target to be exclusive. If omitted, defaults to false, so that in Postgres, recovery_target_inclusive will be true","title":"RecoveryTarget"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ReplicaClusterConfiguration","text":"Appears in: ClusterSpec ReplicaClusterConfiguration encapsulates the configuration of a replica cluster Field Description self string Self defines the name of this cluster. It is used to determine if this is a primary or a replica cluster, comparing it with primary primary string Primary defines which Cluster is defined to be the primary in the distributed PostgreSQL cluster, based on the topology specified in externalClusters source [Required] string The name of the external cluster which is the replication origin enabled bool If replica mode is enabled, this cluster will be a replica of an existing cluster. Replica cluster can be created from a recovery object store or via streaming through pg_basebackup. Refer to the Replica clusters page of the documentation for more information. promotionToken string A demotion token generated by an external cluster used to check if the promotion requirements are met. minApplyDelay meta/v1.Duration When replica mode is enabled, this parameter allows you to replay transactions only when the system time is at least the configured time past the commit time. This provides an opportunity to correct data loss errors. Note that when this parameter is set, a promotion token cannot be used.","title":"ReplicaClusterConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ReplicationSlotsConfiguration","text":"Appears in: ClusterSpec ReplicationSlotsConfiguration encapsulates the configuration of replication slots Field Description highAvailability ReplicationSlotsHAConfiguration Replication slots for high availability configuration updateInterval int Standby will update the status of the local replication slots every updateInterval seconds (default 30). synchronizeReplicas SynchronizeReplicasConfiguration Configures the synchronization of the user defined physical replication slots","title":"ReplicationSlotsConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ReplicationSlotsHAConfiguration","text":"Appears in: ReplicationSlotsConfiguration ReplicationSlotsHAConfiguration encapsulates the configuration of the replication slots that are automatically managed by the operator to control the streaming replication connections with the standby instances for high availability (HA) purposes. Replication slots are a PostgreSQL feature that makes sure that PostgreSQL automatically keeps WAL files in the primary when a streaming client (in this specific case a replica that is part of the HA cluster) gets disconnected. Field Description enabled bool If enabled (default), the operator will automatically manage replication slots on the primary instance and use them in streaming replication connections with all the standby instances that are part of the HA cluster. If disabled, the operator will not take advantage of replication slots in streaming connections with the replicas. This feature also controls replication slots in replica cluster, from the designated primary to its cascading replicas. slotPrefix string Prefix for replication slots managed by the operator for HA. It may only contain lower case letters, numbers, and the underscore character. This can only be set at creation time. By default set to _cnpg_ .","title":"ReplicationSlotsHAConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-RoleConfiguration","text":"Appears in: ManagedConfiguration RoleConfiguration is the representation, in Kubernetes, of a PostgreSQL role with the additional field Ensure specifying whether to ensure the presence or absence of the role in the database The defaults of the CREATE ROLE command are applied Reference: https://www.postgresql.org/docs/current/sql-createrole.html Field Description name [Required] string Name of the role comment string Description of the role ensure EnsureOption Ensure the role is present or absent - defaults to \"present\" passwordSecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Secret containing the password of the role (if present) If null, the password will be ignored unless DisablePassword is set connectionLimit int64 If the role can log in, this specifies how many concurrent connections the role can make. -1 (the default) means no limit. validUntil meta/v1.Time Date and time after which the role's password is no longer valid. When omitted, the password will never expire (default). inRoles []string List of one or more existing roles to which this role will be immediately added as a new member. Default empty. inherit bool Whether a role \"inherits\" the privileges of roles it is a member of. Defaults is true . disablePassword bool DisablePassword indicates that a role's password should be set to NULL in Postgres superuser bool Whether the role is a superuser who can override all access restrictions within the database - superuser status is dangerous and should be used only when really needed. You must yourself be a superuser to create a new superuser. Defaults is false . createdb bool When set to true , the role being defined will be allowed to create new databases. Specifying false (default) will deny a role the ability to create databases. createrole bool Whether the role will be permitted to create, alter, drop, comment on, change the security label for, and grant or revoke membership in other roles. Default is false . login bool Whether the role is allowed to log in. A role having the login attribute can be thought of as a user. Roles without this attribute are useful for managing database privileges, but are not users in the usual sense of the word. Default is false . replication bool Whether a role is a replication role. A role must have this attribute (or be a superuser) in order to be able to connect to the server in replication mode (physical or logical replication) and in order to be able to create or drop replication slots. A role having the replication attribute is a very highly privileged role, and should only be used on roles actually used for replication. Default is false . bypassrls bool Whether a role bypasses every row-level security (RLS) policy. Default is false .","title":"RoleConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SQLRefs","text":"Appears in: BootstrapInitDB SQLRefs holds references to ConfigMaps or Secrets containing SQL files. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. Field Description secretRefs []github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector SecretRefs holds a list of references to Secrets configMapRefs []github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector ConfigMapRefs holds a list of references to ConfigMaps","title":"SQLRefs"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ScheduledBackupSpec","text":"Appears in: ScheduledBackup ScheduledBackupSpec defines the desired state of ScheduledBackup Field Description suspend bool If this backup is suspended or not immediate bool If the first backup has to be immediately start after creation or not schedule [Required] string The schedule does not follow the same format used in Kubernetes CronJobs as it includes an additional seconds specifier, see https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The cluster to backup backupOwnerReference string Indicates which ownerReference should be put inside the created backup resources. none: no owner reference for created backup objects (same behavior as before the field was introduced) self: sets the Scheduled backup object as owner of the backup cluster: set the cluster as owner of the backup target BackupTarget The policy to decide which instance should perform this backup. If empty, it defaults to cluster.spec.backup.target . Available options are empty string, primary and prefer-standby . primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. method BackupMethod The backup method to be used, possible options are barmanObjectStore , volumeSnapshot or plugin . Defaults to: barmanObjectStore . pluginConfiguration BackupPluginConfiguration Configuration parameters passed to the plugin managing this backup online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online' onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza","title":"ScheduledBackupSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ScheduledBackupStatus","text":"Appears in: ScheduledBackup ScheduledBackupStatus defines the observed state of ScheduledBackup Field Description lastCheckTime meta/v1.Time The latest time the schedule lastScheduleTime meta/v1.Time Information when was the last time that backup was successfully scheduled. nextScheduleTime meta/v1.Time Next time we will run a backup","title":"ScheduledBackupStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SchemaSpec","text":"Appears in: DatabaseSpec SchemaSpec configures a schema in a database Field Description DatabaseObjectSpec DatabaseObjectSpec (Members of DatabaseObjectSpec are embedded into this type.) Common fields owner [Required] string The role name of the user who owns the schema inside PostgreSQL. It maps to the AUTHORIZATION parameter of CREATE SCHEMA and the OWNER TO command of ALTER SCHEMA .","title":"SchemaSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SecretVersion","text":"Appears in: PgBouncerSecrets PoolerSecrets SecretVersion contains a secret name and its ResourceVersion Field Description name string The name of the secret version string The ResourceVersion of the secret","title":"SecretVersion"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SecretsResourceVersion","text":"Appears in: ClusterStatus SecretsResourceVersion is the resource versions of the secrets managed by the operator Field Description superuserSecretVersion string The resource version of the \"postgres\" user secret replicationSecretVersion string The resource version of the \"streaming_replica\" user secret applicationSecretVersion string The resource version of the \"app\" user secret managedRoleSecretVersion map[string]string The resource versions of the managed roles secrets caSecretVersion string Unused. Retained for compatibility with old versions. clientCaSecretVersion string The resource version of the PostgreSQL client-side CA secret version serverCaSecretVersion string The resource version of the PostgreSQL server-side CA secret version serverSecretVersion string The resource version of the PostgreSQL server-side secret version barmanEndpointCA string The resource version of the Barman Endpoint CA if provided externalClusterSecretVersion map[string]string The resource versions of the external cluster secrets metrics map[string]string A map with the versions of all the secrets used to pass metrics. Map keys are the secret names, map values are the versions","title":"SecretsResourceVersion"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ServiceAccountTemplate","text":"Appears in: ClusterSpec ServiceAccountTemplate contains the template needed to generate the service accounts Field Description metadata [Required] Metadata Metadata are the metadata to be used for the generated service account","title":"ServiceAccountTemplate"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ServiceSelectorType","text":"(Alias of string ) Appears in: ManagedService ManagedServices ServiceSelectorType describes a valid value for generating the service selectors. It indicates which type of service the selector applies to, such as read-write, read, or read-only","title":"ServiceSelectorType"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ServiceTemplateSpec","text":"Appears in: ManagedService PoolerSpec ServiceTemplateSpec is a structure allowing the user to set a template for Service generation. Field Description metadata Metadata Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata spec core/v1.ServiceSpec Specification of the desired behavior of the service. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"ServiceTemplateSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ServiceUpdateStrategy","text":"(Alias of string ) Appears in: ManagedService ServiceUpdateStrategy describes how the changes to the managed service should be handled","title":"ServiceUpdateStrategy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SnapshotOwnerReference","text":"(Alias of string ) Appears in: VolumeSnapshotConfiguration SnapshotOwnerReference defines the reference type for the owner of the snapshot. This specifies which owner the processed resources should relate to.","title":"SnapshotOwnerReference"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SnapshotType","text":"(Alias of string ) Appears in: Import SnapshotType is a type of allowed import","title":"SnapshotType"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-StorageConfiguration","text":"Appears in: ClusterSpec TablespaceConfiguration StorageConfiguration is the configuration used to create and reconcile PVCs, usable for WAL volumes, PGDATA volumes, or tablespaces Field Description storageClass string StorageClass to use for PVCs. Applied after evaluating the PVC template, if available. If not specified, the generated PVCs will use the default storage class size string Size of the storage. Required if not already specified in the PVC template. Changes to this field are automatically reapplied to the created PVCs. Size cannot be decreased. resizeInUseVolumes bool Resize existent PVCs, defaults to true pvcTemplate core/v1.PersistentVolumeClaimSpec Template to be used to generate the Persistent Volume Claim","title":"StorageConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SubscriptionReclaimPolicy","text":"(Alias of string ) Appears in: SubscriptionSpec SubscriptionReclaimPolicy describes a policy for end-of-life maintenance of Subscriptions.","title":"SubscriptionReclaimPolicy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SubscriptionSpec","text":"Appears in: Subscription SubscriptionSpec defines the desired state of Subscription Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster that identifies the \"subscriber\" name [Required] string The name of the subscription inside PostgreSQL dbname [Required] string The name of the database where the publication will be installed in the \"subscriber\" cluster parameters map[string]string Subscription parameters part of the WITH clause as expected by PostgreSQL CREATE SUBSCRIPTION command publicationName [Required] string The name of the publication inside the PostgreSQL database in the \"publisher\" publicationDBName string The name of the database containing the publication on the external cluster. Defaults to the one in the external cluster definition. externalClusterName [Required] string The name of the external cluster with the publication (\"publisher\") subscriptionReclaimPolicy SubscriptionReclaimPolicy The policy for end-of-life maintenance of this subscription","title":"SubscriptionSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SubscriptionStatus","text":"Appears in: Subscription SubscriptionStatus defines the observed state of Subscription Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the subscription was reconciled correctly message string Message is the reconciliation output message","title":"SubscriptionStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SwitchReplicaClusterStatus","text":"Appears in: ClusterStatus SwitchReplicaClusterStatus contains all the statuses regarding the switch of a cluster to a replica cluster Field Description inProgress bool InProgress indicates if there is an ongoing procedure of switching a cluster to a replica cluster.","title":"SwitchReplicaClusterStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SyncReplicaElectionConstraints","text":"Appears in: PostgresConfiguration SyncReplicaElectionConstraints contains the constraints for sync replicas election. For anti-affinity parameters two instances are considered in the same location if all the labels values match. In future synchronous replica election restriction by name will be supported. Field Description nodeLabelsAntiAffinity []string A list of node labels values to extract and compare to evaluate if the pods reside in the same topology or not enabled [Required] bool This flag enables the constraints for sync replicas","title":"SyncReplicaElectionConstraints"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SynchronizeReplicasConfiguration","text":"Appears in: ReplicationSlotsConfiguration SynchronizeReplicasConfiguration contains the configuration for the synchronization of user defined physical replication slots Field Description enabled [Required] bool When set to true, every replication slot that is on the primary is synchronized on each standby excludePatterns []string List of regular expression patterns to match the names of replication slots to be excluded (by default empty)","title":"SynchronizeReplicasConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SynchronousReplicaConfiguration","text":"Appears in: PostgresConfiguration SynchronousReplicaConfiguration contains the configuration of the PostgreSQL synchronous replication feature. Important: at this moment, also .spec.minSyncReplicas and .spec.maxSyncReplicas need to be considered. Field Description method [Required] SynchronousReplicaConfigurationMethod Method to select synchronous replication standbys from the listed servers, accepting 'any' (quorum-based synchronous replication) or 'first' (priority-based synchronous replication) as values. number [Required] int Specifies the number of synchronous standby servers that transactions must wait for responses from. maxStandbyNamesFromCluster int Specifies the maximum number of local cluster pods that can be automatically included in the synchronous_standby_names option in PostgreSQL. standbyNamesPre []string A user-defined list of application names to be added to synchronous_standby_names before local cluster pods (the order is only useful for priority-based synchronous replication). standbyNamesPost []string A user-defined list of application names to be added to synchronous_standby_names after local cluster pods (the order is only useful for priority-based synchronous replication). dataDurability DataDurabilityLevel If set to \"required\", data durability is strictly enforced. Write operations with synchronous commit settings ( on , remote_write , or remote_apply ) will block if there are insufficient healthy replicas, ensuring data persistence. If set to \"preferred\", data durability is maintained when healthy replicas are available, but the required number of instances will adjust dynamically if replicas become unavailable. This setting relaxes strict durability enforcement to allow for operational continuity. This setting is only applicable if both standbyNamesPre and standbyNamesPost are unset (empty).","title":"SynchronousReplicaConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SynchronousReplicaConfigurationMethod","text":"(Alias of string ) Appears in: SynchronousReplicaConfiguration SynchronousReplicaConfigurationMethod configures whether to use quorum based replication or a priority list","title":"SynchronousReplicaConfigurationMethod"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-TablespaceConfiguration","text":"Appears in: ClusterSpec TablespaceConfiguration is the configuration of a tablespace, and includes the storage specification for the tablespace Field Description name [Required] string The name of the tablespace storage [Required] StorageConfiguration The storage configuration for the tablespace owner DatabaseRoleRef Owner is the PostgreSQL user owning the tablespace temporary bool When set to true, the tablespace will be added as a temp_tablespaces entry in PostgreSQL, and will be available to automatically house temp database objects, or other temporary files. Please refer to PostgreSQL documentation for more information on the temp_tablespaces GUC.","title":"TablespaceConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-TablespaceState","text":"Appears in: ClusterStatus TablespaceState represents the state of a tablespace in a cluster Field Description name [Required] string Name is the name of the tablespace owner string Owner is the PostgreSQL user owning the tablespace state [Required] TablespaceStatus State is the latest reconciliation state error string Error is the reconciliation error, if any","title":"TablespaceState"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-TablespaceStatus","text":"(Alias of string ) Appears in: TablespaceState TablespaceStatus represents the status of a tablespace in the cluster","title":"TablespaceStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Topology","text":"Appears in: ClusterStatus Topology contains the cluster topology Field Description instances map[PodName]PodTopologyLabels Instances contains the pod topology of the instances nodesUsed int32 NodesUsed represents the count of distinct nodes accommodating the instances. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally, this value should be the same as the number of instances in the Postgres HA cluster, implying shared nothing architecture on the compute side. successfullyExtracted bool SuccessfullyExtracted indicates if the topology data was extract. It is useful to enact fallback behaviors in synchronous replica election in case of failures","title":"Topology"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-VolumeSnapshotConfiguration","text":"Appears in: BackupConfiguration VolumeSnapshotConfiguration represents the configuration for the execution of snapshot backups. Field Description labels map[string]string Labels are key-value pairs that will be added to .metadata.labels snapshot resources. annotations map[string]string Annotations key-value pairs that will be added to .metadata.annotations snapshot resources. className string ClassName specifies the Snapshot Class to be used for PG_DATA PersistentVolumeClaim. It is the default class for the other types if no specific class is present walClassName string WalClassName specifies the Snapshot Class to be used for the PG_WAL PersistentVolumeClaim. tablespaceClassName map[string]string TablespaceClassName specifies the Snapshot Class to be used for the tablespaces. defaults to the PGDATA Snapshot Class, if set snapshotOwnerReference SnapshotOwnerReference SnapshotOwnerReference indicates the type of owner reference the snapshot should have online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots","title":"VolumeSnapshotConfiguration"},{"location":"cluster_conf/","text":"Instance pod configuration Projected volumes CloudNativePG supports mounting custom files inside the Postgres pods through .spec.projectedVolumeTemplate . This ability is useful for several Postgres features and extensions that require additional data files. In CloudNativePG, the .spec.projectedVolumeTemplate field is a projected volume template in Kubernetes that allows you to mount arbitrary data under the /projected folder in Postgres pods. This simple example shows how to mount an existing TLS secret (named sample-secret ) as files into Postgres pods. The values for the secret keys tls.crt and tls.key in sample-secret are mounted as files into the paths /projected/certificate/tls.crt and /projected/certificate/tls.key in the Postgres pod. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-projected-volumes spec: instances: 3 projectedVolumeTemplate: sources: - secret: name: sample-secret items: - key: tls.crt path: certificate/tls.crt - key: tls.key path: certificate/tls.key storage: size: 1Gi You can find a complete example that uses a projected volume template to mount the secret and ConfigMap in the cluster-example-projected-volume.yaml deployment manifest. Ephemeral volumes CloudNativePG relies on ephemeral volumes for part of the internal activities. Ephemeral volumes exist for the sole duration of a pod's life, without persisting across pod restarts. Volume Claim Template for Temporary Storage The operator uses by default an emptyDir volume, which can be customized by using the .spec.ephemeralVolumesSizeLimit field . This can be overridden by specifying a volume claim template in the .spec.ephemeralVolumeSource field. In the following example, a 1Gi ephemeral volume is set. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-ephemeral-volume-source spec: instances: 3 ephemeralVolumeSource: volumeClaimTemplate: spec: accessModes: [\"ReadWriteOnce\"] # example storageClassName, replace with one existing in your Kubernetes cluster storageClassName: \"scratch-storage-class\" resources: requests: storage: 1Gi Both .spec.emphemeralVolumeSource and .spec.ephemeralVolumesSizeLimit.temporaryData cannot be specified simultaneously. Volume for shared memory This volume is used as shared memory space for Postgres and as an ephemeral type but stored in memory. You can configure an upper bound on the size using the .spec.ephemeralVolumesSizeLimit.shm field in the cluster spec. Use this field only in case of PostgreSQL running with posix shared memory dynamic allocation . Environment variables You can customize some system behavior using environment variables. One example is the LDAPCONF variable, which can point to a custom LDAP configuration file. Another example is the TZ environment variable, which represents the timezone used by the PostgreSQL container. CloudNativePG allows you to set custom environment variables using the env and the envFrom stanza of the cluster specification. This example defines a PostgreSQL cluster using the Australia/Sydney timezone as the default cluster-level timezone: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 env: - name: TZ value: Australia/Sydney storage: size: 1Gi The envFrom stanza can refer to ConfigMaps or secrets to use their content as environment variables: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 envFrom: - configMapRef: name: config-map-name - secretRef: name: secret-name storage: size: 1Gi The operator doesn't allow setting the following environment variables: POD_NAME NAMESPACE Any environment variable whose name starts with PG . Any change in the env or in the envFrom section triggers a rolling update of the PostgreSQL pods. If the env or the envFrom section refers to a secret or a ConfigMap, the operator doesn't detect any changes in them and doesn't trigger a rollout. The kubelet uses the same behavior with pods, and you must trigger the pod rollout manually.","title":"Instance pod configuration"},{"location":"cluster_conf/#instance-pod-configuration","text":"","title":"Instance pod configuration"},{"location":"cluster_conf/#projected-volumes","text":"CloudNativePG supports mounting custom files inside the Postgres pods through .spec.projectedVolumeTemplate . This ability is useful for several Postgres features and extensions that require additional data files. In CloudNativePG, the .spec.projectedVolumeTemplate field is a projected volume template in Kubernetes that allows you to mount arbitrary data under the /projected folder in Postgres pods. This simple example shows how to mount an existing TLS secret (named sample-secret ) as files into Postgres pods. The values for the secret keys tls.crt and tls.key in sample-secret are mounted as files into the paths /projected/certificate/tls.crt and /projected/certificate/tls.key in the Postgres pod. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-projected-volumes spec: instances: 3 projectedVolumeTemplate: sources: - secret: name: sample-secret items: - key: tls.crt path: certificate/tls.crt - key: tls.key path: certificate/tls.key storage: size: 1Gi You can find a complete example that uses a projected volume template to mount the secret and ConfigMap in the cluster-example-projected-volume.yaml deployment manifest.","title":"Projected volumes"},{"location":"cluster_conf/#ephemeral-volumes","text":"CloudNativePG relies on ephemeral volumes for part of the internal activities. Ephemeral volumes exist for the sole duration of a pod's life, without persisting across pod restarts.","title":"Ephemeral volumes"},{"location":"cluster_conf/#volume-claim-template-for-temporary-storage","text":"The operator uses by default an emptyDir volume, which can be customized by using the .spec.ephemeralVolumesSizeLimit field . This can be overridden by specifying a volume claim template in the .spec.ephemeralVolumeSource field. In the following example, a 1Gi ephemeral volume is set. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-ephemeral-volume-source spec: instances: 3 ephemeralVolumeSource: volumeClaimTemplate: spec: accessModes: [\"ReadWriteOnce\"] # example storageClassName, replace with one existing in your Kubernetes cluster storageClassName: \"scratch-storage-class\" resources: requests: storage: 1Gi Both .spec.emphemeralVolumeSource and .spec.ephemeralVolumesSizeLimit.temporaryData cannot be specified simultaneously.","title":"Volume Claim Template for Temporary Storage"},{"location":"cluster_conf/#volume-for-shared-memory","text":"This volume is used as shared memory space for Postgres and as an ephemeral type but stored in memory. You can configure an upper bound on the size using the .spec.ephemeralVolumesSizeLimit.shm field in the cluster spec. Use this field only in case of PostgreSQL running with posix shared memory dynamic allocation .","title":"Volume for shared memory"},{"location":"cluster_conf/#environment-variables","text":"You can customize some system behavior using environment variables. One example is the LDAPCONF variable, which can point to a custom LDAP configuration file. Another example is the TZ environment variable, which represents the timezone used by the PostgreSQL container. CloudNativePG allows you to set custom environment variables using the env and the envFrom stanza of the cluster specification. This example defines a PostgreSQL cluster using the Australia/Sydney timezone as the default cluster-level timezone: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 env: - name: TZ value: Australia/Sydney storage: size: 1Gi The envFrom stanza can refer to ConfigMaps or secrets to use their content as environment variables: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 envFrom: - configMapRef: name: config-map-name - secretRef: name: secret-name storage: size: 1Gi The operator doesn't allow setting the following environment variables: POD_NAME NAMESPACE Any environment variable whose name starts with PG . Any change in the env or in the envFrom section triggers a rolling update of the PostgreSQL pods. If the env or the envFrom section refers to a secret or a ConfigMap, the operator doesn't detect any changes in them and doesn't trigger a rollout. The kubelet uses the same behavior with pods, and you must trigger the pod rollout manually.","title":"Environment variables"},{"location":"connection_pooling/","text":"Connection pooling CloudNativePG provides native support for connection pooling with PgBouncer , one of the most popular open source connection poolers for PostgreSQL, through the Pooler custom resource definition (CRD). In brief, a pooler in CloudNativePG is a deployment of PgBouncer pods that sits between your applications and a PostgreSQL service, for example, the rw service. It creates a separate, scalable, configurable, and highly available database access layer. Architecture The following diagram highlights how introducing a database access layer based on PgBouncer changes the architecture of CloudNativePG. Instead of directly connecting to the PostgreSQL primary service, applications can connect to the equivalent service for PgBouncer. This ability enables reuse of existing connections for faster performance and better resource management on the PostgreSQL side. Quick start This example helps to show how CloudNativePG implements a PgBouncer pooler: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw pgbouncer: poolMode: session parameters: max_client_conn: \"1000\" default_pool_size: \"10\" Important The pooler name can't be the same as any cluster name in the same namespace. This example creates a Pooler resource called pooler-example-rw that's strictly associated with the Postgres Cluster resource called cluster-example . It points to the primary, identified by the read/write service ( rw , therefore cluster-example-rw ). The Pooler resource must live in the same namespace as the Postgres cluster. It consists of a Kubernetes deployment of 3 pods running the latest stable image of PgBouncer , configured with the session pooling mode and accepting up to 1000 connections each. The default pool size is 10 user/database pairs toward PostgreSQL. Important The Pooler resource sets only the * fallback database in PgBouncer. This setting means that that all parameters in the connection strings passed from the client are relayed to the PostgreSQL server. For details, see \"Section [databases]\" in the PgBouncer documentation . CloudNativePG also creates a secret with the same name as the pooler containing the configuration files used with PgBouncer. API reference For details, see PgBouncerSpec in the API reference. Pooler resource lifecycle Pooler resources aren't cluster-managed resources. You create poolers manually when they're needed. You can also deploy multiple poolers per PostgreSQL cluster. What's important is that the life cycles of the Cluster and the Pooler resources are currently independent. Deleting the cluster doesn't imply the deletion of the pooler, and vice versa. Important Once you know how a pooler works, you have full freedom in terms of possible architectures. You can have clusters without poolers, clusters with a single pooler, or clusters with several poolers, that is, one per application. Important When the operator is upgraded, the pooler pods will undergo a rolling upgrade. This is necessary to ensure that the instance manager within the pooler pods is also upgraded. Security Any PgBouncer pooler is transparently integrated with CloudNativePG support for in-transit encryption by way of TLS connections, both on the client (application) and server (PostgreSQL) side of the pool. Specifically, PgBouncer reuses the certificates of the PostgreSQL server. It also uses TLS client certificate authentication to connect to the PostgreSQL server to run the auth_query for clients' password authentication (see Authentication ). Containers run as the pgbouncer system user, and access to the pgbouncer database is allowed only by way of local connections, through peer authentication. Certificates By default, a PgBouncer pooler uses the same certificates that are used by the cluster. However, if you provide those certificates, the pooler accepts secrets with the following formats: Basic Auth TLS Opaque In the Opaque case, it looks for the following specific keys that need to be used: tls.crt tls.key So you can treat this secret as a TLS secret, and start from there. Authentication Password-based authentication is the only supported method for clients of PgBouncer in CloudNativePG. Internally, the implementation relies on PgBouncer's auth_user and auth_query options. Specifically, the operator: Creates a standard user called cnpg_pooler_pgbouncer in the PostgreSQL server Creates the lookup function in the postgres database and grants execution privileges to the cnpg_pooler_pgbouncer user (PoLA) Issues a TLS certificate for this user Sets cnpg_pooler_pgbouncer as the auth_user Configures PgBouncer to use the TLS certificate to authenticate cnpg_pooler_pgbouncer against the PostgreSQL server Removes all the above when it detects that a cluster doesn't have any pooler associated to it Important If you specify your own secrets, the operator doesn't automatically integrate the pooler. To manually integrate the pooler, if you specified your own secrets, you must run the following queries from inside your cluster. First, you must create the role: CREATE ROLE cnpg_pooler_pgbouncer WITH LOGIN; Then, for each application database, grant the permission for cnpg_pooler_pgbouncer to connect to it: GRANT CONNECT ON DATABASE { database name here } TO cnpg_pooler_pgbouncer; Finally, as a superuser connect in each application database, and then create the authentication function inside each of the application databases: CREATE OR REPLACE FUNCTION public.user_search(uname TEXT) RETURNS TABLE (usename name, passwd text) LANGUAGE sql SECURITY DEFINER AS 'SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1;'; REVOKE ALL ON FUNCTION public.user_search(text) FROM public; GRANT EXECUTE ON FUNCTION public.user_search(text) TO cnpg_pooler_pgbouncer; Important Given that user_search is a SECURITY DEFINER function, you need to create it through a role with SUPERUSER privileges, such as the postgres user. Pod templates You can take advantage of pod templates specification in the template section of a Pooler resource. For details, see PoolerSpec in the API reference. Using templates, you can configure pods as you like, including fine control over affinity and anti-affinity rules for pods and nodes. By default, containers use images from ghcr.io/cloudnative-pg/pgbouncer . This example shows Pooler specifying `PodAntiAffinity``: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw template: metadata: labels: app: pooler spec: containers: [] affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: app operator: In values: - pooler topologyKey: \"kubernetes.io/hostname\" Note Explicitly set .spec.template.spec.containers to [] when not modified, as it's a required field for a PodSpec . If .spec.template.spec.containers isn't set, the Kubernetes api-server returns the following error when trying to apply the manifest: error validating \"pooler.yaml\": error validating data: ValidationError(Pooler.spec.template.spec): missing required field \"containers\" This example sets resources and changes the used image: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw template: metadata: labels: app: pooler spec: containers: - name: pgbouncer image: my-pgbouncer:latest resources: requests: cpu: \"0.1\" memory: 100Mi limits: cpu: \"0.5\" memory: 500Mi Service Template Sometimes, your pooler will require some different labels, annotations, or even change the type of the service, you can achieve that by using the serviceTemplate field: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw serviceTemplate: metadata: labels: app: pooler spec: type: LoadBalancer pgbouncer: poolMode: session parameters: max_client_conn: \"1000\" default_pool_size: \"10\" The operator by default adds a ServicePort with the following data: ports: - name: pgbouncer port: 5432 protocol: TCP targetPort: pgbouncer Warning Specifying a ServicePort with the name pgbouncer or the port 5432 will prevent the default ServicePort from being added. This because ServicePort entries with the same name or port are not allowed on Kubernetes and result in errors. High availability (HA) Because of Kubernetes' deployments, you can configure your pooler to run on a single instance or over multiple pods. The exposed service makes sure that your clients are randomly distributed over the available pods running PgBouncer, which then manages and reuses connections toward the underlying server (if using the rw service) or servers (if using the ro service with multiple replicas). Warning If your infrastructure spans multiple availability zones with high latency across them, be aware of network hops. Consider, for example, the case of your application running in zone 2, connecting to PgBouncer running in zone 3, and pointing to the PostgreSQL primary in zone 1. PgBouncer configuration options The operator manages most of the configuration options for PgBouncer , allowing you to modify only a subset of them. Warning You are responsible for correctly setting the value of each option, as the operator doesn't validate them. These are the PgBouncer options you can customize, with links to the PgBouncer documentation for each parameter. Unless stated otherwise, the default values are the ones directly set by PgBouncer. application_name_add_host autodb_idle_timeout cancel_wait_timeout client_idle_timeout client_login_timeout default_pool_size disable_pqexec dns_max_ttl dns_nxdomain_ttl idle_transaction_timeout ignore_startup_parameters : to be appended to extra_float_digits,options - required by CloudNativePG listen_backlog log_connections log_disconnections log_pooler_errors log_stats : by default disabled ( 0 ), given that statistics are already collected by the Prometheus export as described in the \"Monitoring\" section below max_client_conn max_db_connections max_packet_size max_prepared_statements max_user_connections min_pool_size pkt_buf query_timeout query_wait_timeout reserve_pool_size reserve_pool_timeout sbuf_loopcnt server_check_delay server_check_query server_connect_timeout server_fast_close server_idle_timeout server_lifetime server_login_retry server_reset_query server_reset_query_always server_round_robin server_tls_ciphers server_tls_protocols stats_period suspend_timeout tcp_defer_accept tcp_keepalive tcp_keepcnt tcp_keepidle tcp_keepintvl tcp_user_timeout tcp_socket_buffer track_extra_parameters verbose Customizations of the PgBouncer configuration are written declaratively in the .spec.pgbouncer.parameters map. The operator reacts to the changes in the pooler specification, and every PgBouncer instance reloads the updated configuration without disrupting the service. Warning Every PgBouncer pod has the same configuration, aligned with the parameters in the specification. A mistake in these parameters might disrupt the operability of the whole pooler. The operator doesn't validate the value of any option. Monitoring The PgBouncer implementation of the Pooler comes with a default Prometheus exporter. It makes available several metrics having the cnpg_pgbouncer_ prefix by running: SHOW LISTS (prefix: cnpg_pgbouncer_lists ) SHOW POOLS (prefix: cnpg_pgbouncer_pools ) SHOW STATS (prefix: cnpg_pgbouncer_stats ) Like the CloudNativePG instance, the exporter runs on port 9127 of each pod running PgBouncer and also provides metrics related to the Go runtime (with the prefix go_* ). Info You can inspect the exported metrics on a pod running PgBouncer. For instructions, see How to inspect the exported metrics . Make sure that you use the correct IP and the 9127 port. This example shows the output for cnpg_pgbouncer metrics: # HELP cnpg_pgbouncer_collection_duration_seconds Collection time duration in seconds # TYPE cnpg_pgbouncer_collection_duration_seconds gauge cnpg_pgbouncer_collection_duration_seconds{collector=\"Collect.up\"} 0.002338805 # HELP cnpg_pgbouncer_collection_errors_total Total errors occurred accessing PostgreSQL for metrics. # TYPE cnpg_pgbouncer_collection_errors_total counter cnpg_pgbouncer_collection_errors_total{collector=\"sql: Scan error on column index 16, name \\\"load_balance_hosts\\\": converting NULL to int is unsupported\"} 5 # HELP cnpg_pgbouncer_collections_total Total number of times PostgreSQL was accessed for metrics. # TYPE cnpg_pgbouncer_collections_total counter cnpg_pgbouncer_collections_total 5 # HELP cnpg_pgbouncer_last_collection_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_pgbouncer_last_collection_error gauge cnpg_pgbouncer_last_collection_error 0 # HELP cnpg_pgbouncer_lists_databases Count of databases. # TYPE cnpg_pgbouncer_lists_databases gauge cnpg_pgbouncer_lists_databases 1 # HELP cnpg_pgbouncer_lists_dns_names Count of DNS names in the cache. # TYPE cnpg_pgbouncer_lists_dns_names gauge cnpg_pgbouncer_lists_dns_names 0 # HELP cnpg_pgbouncer_lists_dns_pending Not used. # TYPE cnpg_pgbouncer_lists_dns_pending gauge cnpg_pgbouncer_lists_dns_pending 0 # HELP cnpg_pgbouncer_lists_dns_queries Count of in-flight DNS queries. # TYPE cnpg_pgbouncer_lists_dns_queries gauge cnpg_pgbouncer_lists_dns_queries 0 # HELP cnpg_pgbouncer_lists_dns_zones Count of DNS zones in the cache. # TYPE cnpg_pgbouncer_lists_dns_zones gauge cnpg_pgbouncer_lists_dns_zones 0 # HELP cnpg_pgbouncer_lists_free_clients Count of free clients. # TYPE cnpg_pgbouncer_lists_free_clients gauge cnpg_pgbouncer_lists_free_clients 49 # HELP cnpg_pgbouncer_lists_free_servers Count of free servers. # TYPE cnpg_pgbouncer_lists_free_servers gauge cnpg_pgbouncer_lists_free_servers 0 # HELP cnpg_pgbouncer_lists_login_clients Count of clients in login state. # TYPE cnpg_pgbouncer_lists_login_clients gauge cnpg_pgbouncer_lists_login_clients 0 # HELP cnpg_pgbouncer_lists_pools Count of pools. # TYPE cnpg_pgbouncer_lists_pools gauge cnpg_pgbouncer_lists_pools 1 # HELP cnpg_pgbouncer_lists_used_clients Count of used clients. # TYPE cnpg_pgbouncer_lists_used_clients gauge cnpg_pgbouncer_lists_used_clients 1 # HELP cnpg_pgbouncer_lists_used_servers Count of used servers. # TYPE cnpg_pgbouncer_lists_used_servers gauge cnpg_pgbouncer_lists_used_servers 0 # HELP cnpg_pgbouncer_lists_users Count of users. # TYPE cnpg_pgbouncer_lists_users gauge cnpg_pgbouncer_lists_users 2 # HELP cnpg_pgbouncer_pools_cl_active Client connections that are linked to server connection and can process queries. # TYPE cnpg_pgbouncer_pools_cl_active gauge cnpg_pgbouncer_pools_cl_active{database=\"pgbouncer\",user=\"pgbouncer\"} 1 # HELP cnpg_pgbouncer_pools_cl_active_cancel_req Client connections that have forwarded query cancellations to the server and are waiting for the server response. # TYPE cnpg_pgbouncer_pools_cl_active_cancel_req gauge cnpg_pgbouncer_pools_cl_active_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_cancel_req Client connections that have not forwarded query cancellations to the server yet. # TYPE cnpg_pgbouncer_pools_cl_cancel_req gauge cnpg_pgbouncer_pools_cl_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_waiting Client connections that have sent queries but have not yet got a server connection. # TYPE cnpg_pgbouncer_pools_cl_waiting gauge cnpg_pgbouncer_pools_cl_waiting{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_waiting_cancel_req Client connections that have not forwarded query cancellations to the server yet. # TYPE cnpg_pgbouncer_pools_cl_waiting_cancel_req gauge cnpg_pgbouncer_pools_cl_waiting_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_load_balance_hosts Number of hosts not load balancing between hosts # TYPE cnpg_pgbouncer_pools_load_balance_hosts gauge cnpg_pgbouncer_pools_load_balance_hosts{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_maxwait How long the first (oldest) client in the queue has waited, in seconds. If this starts increasing, then the current pool of servers does not handle requests quickly enough. The reason may be either an overloaded server or just too small of a pool_size setting. # TYPE cnpg_pgbouncer_pools_maxwait gauge cnpg_pgbouncer_pools_maxwait{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_maxwait_us Microsecond part of the maximum waiting time. # TYPE cnpg_pgbouncer_pools_maxwait_us gauge cnpg_pgbouncer_pools_maxwait_us{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_pool_mode The pooling mode in use. 1 for session, 2 for transaction, 3 for statement, -1 if unknown # TYPE cnpg_pgbouncer_pools_pool_mode gauge cnpg_pgbouncer_pools_pool_mode{database=\"pgbouncer\",user=\"pgbouncer\"} 3 # HELP cnpg_pgbouncer_pools_sv_active Server connections that are linked to a client. # TYPE cnpg_pgbouncer_pools_sv_active gauge cnpg_pgbouncer_pools_sv_active{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_active_cancel Server connections that are currently forwarding a cancel request # TYPE cnpg_pgbouncer_pools_sv_active_cancel gauge cnpg_pgbouncer_pools_sv_active_cancel{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_idle Server connections that are unused and immediately usable for client queries. # TYPE cnpg_pgbouncer_pools_sv_idle gauge cnpg_pgbouncer_pools_sv_idle{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_login Server connections currently in the process of logging in. # TYPE cnpg_pgbouncer_pools_sv_login gauge cnpg_pgbouncer_pools_sv_login{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_tested Server connections that are currently running either server_reset_query or server_check_query. # TYPE cnpg_pgbouncer_pools_sv_tested gauge cnpg_pgbouncer_pools_sv_tested{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_used Server connections that have been idle for more than server_check_delay, so they need server_check_query to run on them before they can be used again. # TYPE cnpg_pgbouncer_pools_sv_used gauge cnpg_pgbouncer_pools_sv_used{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_wait_cancels Servers that normally could become idle, but are waiting to do so until all in-flight cancel requests have completed that were sent to cancel a query on this server. # TYPE cnpg_pgbouncer_pools_sv_wait_cancels gauge cnpg_pgbouncer_pools_sv_wait_cancels{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_bind_count Average number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer. # TYPE cnpg_pgbouncer_stats_avg_bind_count gauge cnpg_pgbouncer_stats_avg_bind_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_client_parse_count Average number of prepared statements created by clients. # TYPE cnpg_pgbouncer_stats_avg_client_parse_count gauge cnpg_pgbouncer_stats_avg_client_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_query_count Average queries per second in last stat period. # TYPE cnpg_pgbouncer_stats_avg_query_count gauge cnpg_pgbouncer_stats_avg_query_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_query_time Average query duration, in microseconds. # TYPE cnpg_pgbouncer_stats_avg_query_time gauge cnpg_pgbouncer_stats_avg_query_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_recv Average received (from clients) bytes per second. # TYPE cnpg_pgbouncer_stats_avg_recv gauge cnpg_pgbouncer_stats_avg_recv{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_sent Average sent (to clients) bytes per second. # TYPE cnpg_pgbouncer_stats_avg_sent gauge cnpg_pgbouncer_stats_avg_sent{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_server_parse_count Average number of prepared statements created by pgbouncer on a server. # TYPE cnpg_pgbouncer_stats_avg_server_parse_count gauge cnpg_pgbouncer_stats_avg_server_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_wait_time Time spent by clients waiting for a server, in microseconds (average per second). # TYPE cnpg_pgbouncer_stats_avg_wait_time gauge cnpg_pgbouncer_stats_avg_wait_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_xact_count Average transactions per second in last stat period. # TYPE cnpg_pgbouncer_stats_avg_xact_count gauge cnpg_pgbouncer_stats_avg_xact_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_xact_time Average transaction duration, in microseconds. # TYPE cnpg_pgbouncer_stats_avg_xact_time gauge cnpg_pgbouncer_stats_avg_xact_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_bind_count Total number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer # TYPE cnpg_pgbouncer_stats_total_bind_count gauge cnpg_pgbouncer_stats_total_bind_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_client_parse_count Total number of prepared statements created by clients. # TYPE cnpg_pgbouncer_stats_total_client_parse_count gauge cnpg_pgbouncer_stats_total_client_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_query_count Total number of SQL queries pooled by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_query_count gauge cnpg_pgbouncer_stats_total_query_count{database=\"pgbouncer\"} 15 # HELP cnpg_pgbouncer_stats_total_query_time Total number of microseconds spent by pgbouncer when actively connected to PostgreSQL, executing queries. # TYPE cnpg_pgbouncer_stats_total_query_time gauge cnpg_pgbouncer_stats_total_query_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_received Total volume in bytes of network traffic received by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_received gauge cnpg_pgbouncer_stats_total_received{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_sent Total volume in bytes of network traffic sent by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_sent gauge cnpg_pgbouncer_stats_total_sent{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_server_parse_count Total number of prepared statements created by pgbouncer on a server. # TYPE cnpg_pgbouncer_stats_total_server_parse_count gauge cnpg_pgbouncer_stats_total_server_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_wait_time Time spent by clients waiting for a server, in microseconds. # TYPE cnpg_pgbouncer_stats_total_wait_time gauge cnpg_pgbouncer_stats_total_wait_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_xact_count Total number of SQL transactions pooled by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_xact_count gauge cnpg_pgbouncer_stats_total_xact_count{database=\"pgbouncer\"} 15 # HELP cnpg_pgbouncer_stats_total_xact_time Total number of microseconds spent by pgbouncer when connected to PostgreSQL in a transaction, either idle in transaction or executing queries. # TYPE cnpg_pgbouncer_stats_total_xact_time gauge cnpg_pgbouncer_stats_total_xact_time{database=\"pgbouncer\"} 0 Info For a better understanding of the metrics please refer to the PgBouncer documentation. As for clusters, a specific pooler can be monitored using the Prometheus operator's resource PodMonitor . A PodMonitor correctly pointing to a pooler can be created by the operator by setting .spec.monitoring.enablePodMonitor to true in the Pooler resource. The default is false . Important Any change to PodMonitor created automatically is overridden by the operator at the next reconciliation cycle. If you need to customize it, you can do so as shown in the following example. To deploy a PodMonitor for a specific pooler manually, you can define it as follows and change it as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: <POOLER_NAME> spec: selector: matchLabels: cnpg.io/poolerName: <POOLER_NAME> podMetricsEndpoints: - port: metrics Logging Logs are directly sent to standard output, in JSON format, like in the following example: { \"level\": \"info\", \"ts\": SECONDS.MICROSECONDS, \"msg\": \"record\", \"pipe\": \"stderr\", \"record\": { \"timestamp\": \"YYYY-MM-DD HH:MM:SS.MS UTC\", \"pid\": \"<PID>\", \"level\": \"LOG\", \"msg\": \"kernel file descriptor limit: 1048576 (hard: 1048576); max_client_conn: 100, max expected fd use: 112\" } } Pausing connections The Pooler specification allows you to take advantage of PgBouncer's PAUSE and RESUME commands, using only declarative configuration. You can ado this using the paused option, which by default is set to false . When set to true , the operator internally invokes the PAUSE command in PgBouncer, which: Closes all active connections toward the PostgreSQL server, after waiting for the queries to complete Pauses any new connection coming from the client When the paused option is reset to false , the operator invokes the RESUME command in PgBouncer, reopening the taps toward the PostgreSQL service defined in the Pooler resource. PAUSE For more information, see PAUSE in the PgBouncer documentation . Important In future versions, the switchover operation will be fully integrated with the PgBouncer pooler and take advantage of the PAUSE / RESUME features to reduce the perceived downtime by client applications. Currently, you can achieve the same results by setting the paused attribute to true , issuing the switchover command through the cnpg plugin , and then restoring the paused attribute to false . Limitations Single PostgreSQL cluster The current implementation of the pooler is designed to work as part of a specific CloudNativePG cluster (a service). It isn't currently possible to create a pooler that spans multiple clusters. Controlled configurability CloudNativePG transparently manages several configuration options that are used for the PgBouncer layer to communicate with PostgreSQL. Such options aren't configurable from outside and include TLS certificates, authentication settings, the databases section, and the users section. Also, considering the specific use case for the single PostgreSQL cluster, the adopted criteria is to explicitly list the options that can be configured by users. Note The adopted solution likely addresses the majority of use cases. It leaves room for the future implementation of a separate operator for PgBouncer to complete the gamma with more advanced and customized scenarios.","title":"Connection pooling"},{"location":"connection_pooling/#connection-pooling","text":"CloudNativePG provides native support for connection pooling with PgBouncer , one of the most popular open source connection poolers for PostgreSQL, through the Pooler custom resource definition (CRD). In brief, a pooler in CloudNativePG is a deployment of PgBouncer pods that sits between your applications and a PostgreSQL service, for example, the rw service. It creates a separate, scalable, configurable, and highly available database access layer.","title":"Connection pooling"},{"location":"connection_pooling/#architecture","text":"The following diagram highlights how introducing a database access layer based on PgBouncer changes the architecture of CloudNativePG. Instead of directly connecting to the PostgreSQL primary service, applications can connect to the equivalent service for PgBouncer. This ability enables reuse of existing connections for faster performance and better resource management on the PostgreSQL side.","title":"Architecture"},{"location":"connection_pooling/#quick-start","text":"This example helps to show how CloudNativePG implements a PgBouncer pooler: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw pgbouncer: poolMode: session parameters: max_client_conn: \"1000\" default_pool_size: \"10\" Important The pooler name can't be the same as any cluster name in the same namespace. This example creates a Pooler resource called pooler-example-rw that's strictly associated with the Postgres Cluster resource called cluster-example . It points to the primary, identified by the read/write service ( rw , therefore cluster-example-rw ). The Pooler resource must live in the same namespace as the Postgres cluster. It consists of a Kubernetes deployment of 3 pods running the latest stable image of PgBouncer , configured with the session pooling mode and accepting up to 1000 connections each. The default pool size is 10 user/database pairs toward PostgreSQL. Important The Pooler resource sets only the * fallback database in PgBouncer. This setting means that that all parameters in the connection strings passed from the client are relayed to the PostgreSQL server. For details, see \"Section [databases]\" in the PgBouncer documentation . CloudNativePG also creates a secret with the same name as the pooler containing the configuration files used with PgBouncer. API reference For details, see PgBouncerSpec in the API reference.","title":"Quick start"},{"location":"connection_pooling/#pooler-resource-lifecycle","text":"Pooler resources aren't cluster-managed resources. You create poolers manually when they're needed. You can also deploy multiple poolers per PostgreSQL cluster. What's important is that the life cycles of the Cluster and the Pooler resources are currently independent. Deleting the cluster doesn't imply the deletion of the pooler, and vice versa. Important Once you know how a pooler works, you have full freedom in terms of possible architectures. You can have clusters without poolers, clusters with a single pooler, or clusters with several poolers, that is, one per application. Important When the operator is upgraded, the pooler pods will undergo a rolling upgrade. This is necessary to ensure that the instance manager within the pooler pods is also upgraded.","title":"Pooler resource lifecycle"},{"location":"connection_pooling/#security","text":"Any PgBouncer pooler is transparently integrated with CloudNativePG support for in-transit encryption by way of TLS connections, both on the client (application) and server (PostgreSQL) side of the pool. Specifically, PgBouncer reuses the certificates of the PostgreSQL server. It also uses TLS client certificate authentication to connect to the PostgreSQL server to run the auth_query for clients' password authentication (see Authentication ). Containers run as the pgbouncer system user, and access to the pgbouncer database is allowed only by way of local connections, through peer authentication.","title":"Security"},{"location":"connection_pooling/#certificates","text":"By default, a PgBouncer pooler uses the same certificates that are used by the cluster. However, if you provide those certificates, the pooler accepts secrets with the following formats: Basic Auth TLS Opaque In the Opaque case, it looks for the following specific keys that need to be used: tls.crt tls.key So you can treat this secret as a TLS secret, and start from there.","title":"Certificates"},{"location":"connection_pooling/#authentication","text":"Password-based authentication is the only supported method for clients of PgBouncer in CloudNativePG. Internally, the implementation relies on PgBouncer's auth_user and auth_query options. Specifically, the operator: Creates a standard user called cnpg_pooler_pgbouncer in the PostgreSQL server Creates the lookup function in the postgres database and grants execution privileges to the cnpg_pooler_pgbouncer user (PoLA) Issues a TLS certificate for this user Sets cnpg_pooler_pgbouncer as the auth_user Configures PgBouncer to use the TLS certificate to authenticate cnpg_pooler_pgbouncer against the PostgreSQL server Removes all the above when it detects that a cluster doesn't have any pooler associated to it Important If you specify your own secrets, the operator doesn't automatically integrate the pooler. To manually integrate the pooler, if you specified your own secrets, you must run the following queries from inside your cluster. First, you must create the role: CREATE ROLE cnpg_pooler_pgbouncer WITH LOGIN; Then, for each application database, grant the permission for cnpg_pooler_pgbouncer to connect to it: GRANT CONNECT ON DATABASE { database name here } TO cnpg_pooler_pgbouncer; Finally, as a superuser connect in each application database, and then create the authentication function inside each of the application databases: CREATE OR REPLACE FUNCTION public.user_search(uname TEXT) RETURNS TABLE (usename name, passwd text) LANGUAGE sql SECURITY DEFINER AS 'SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1;'; REVOKE ALL ON FUNCTION public.user_search(text) FROM public; GRANT EXECUTE ON FUNCTION public.user_search(text) TO cnpg_pooler_pgbouncer; Important Given that user_search is a SECURITY DEFINER function, you need to create it through a role with SUPERUSER privileges, such as the postgres user.","title":"Authentication"},{"location":"connection_pooling/#pod-templates","text":"You can take advantage of pod templates specification in the template section of a Pooler resource. For details, see PoolerSpec in the API reference. Using templates, you can configure pods as you like, including fine control over affinity and anti-affinity rules for pods and nodes. By default, containers use images from ghcr.io/cloudnative-pg/pgbouncer . This example shows Pooler specifying `PodAntiAffinity``: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw template: metadata: labels: app: pooler spec: containers: [] affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: app operator: In values: - pooler topologyKey: \"kubernetes.io/hostname\" Note Explicitly set .spec.template.spec.containers to [] when not modified, as it's a required field for a PodSpec . If .spec.template.spec.containers isn't set, the Kubernetes api-server returns the following error when trying to apply the manifest: error validating \"pooler.yaml\": error validating data: ValidationError(Pooler.spec.template.spec): missing required field \"containers\" This example sets resources and changes the used image: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw template: metadata: labels: app: pooler spec: containers: - name: pgbouncer image: my-pgbouncer:latest resources: requests: cpu: \"0.1\" memory: 100Mi limits: cpu: \"0.5\" memory: 500Mi","title":"Pod templates"},{"location":"connection_pooling/#service-template","text":"Sometimes, your pooler will require some different labels, annotations, or even change the type of the service, you can achieve that by using the serviceTemplate field: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw serviceTemplate: metadata: labels: app: pooler spec: type: LoadBalancer pgbouncer: poolMode: session parameters: max_client_conn: \"1000\" default_pool_size: \"10\" The operator by default adds a ServicePort with the following data: ports: - name: pgbouncer port: 5432 protocol: TCP targetPort: pgbouncer Warning Specifying a ServicePort with the name pgbouncer or the port 5432 will prevent the default ServicePort from being added. This because ServicePort entries with the same name or port are not allowed on Kubernetes and result in errors.","title":"Service Template"},{"location":"connection_pooling/#high-availability-ha","text":"Because of Kubernetes' deployments, you can configure your pooler to run on a single instance or over multiple pods. The exposed service makes sure that your clients are randomly distributed over the available pods running PgBouncer, which then manages and reuses connections toward the underlying server (if using the rw service) or servers (if using the ro service with multiple replicas). Warning If your infrastructure spans multiple availability zones with high latency across them, be aware of network hops. Consider, for example, the case of your application running in zone 2, connecting to PgBouncer running in zone 3, and pointing to the PostgreSQL primary in zone 1.","title":"High availability (HA)"},{"location":"connection_pooling/#pgbouncer-configuration-options","text":"The operator manages most of the configuration options for PgBouncer , allowing you to modify only a subset of them. Warning You are responsible for correctly setting the value of each option, as the operator doesn't validate them. These are the PgBouncer options you can customize, with links to the PgBouncer documentation for each parameter. Unless stated otherwise, the default values are the ones directly set by PgBouncer. application_name_add_host autodb_idle_timeout cancel_wait_timeout client_idle_timeout client_login_timeout default_pool_size disable_pqexec dns_max_ttl dns_nxdomain_ttl idle_transaction_timeout ignore_startup_parameters : to be appended to extra_float_digits,options - required by CloudNativePG listen_backlog log_connections log_disconnections log_pooler_errors log_stats : by default disabled ( 0 ), given that statistics are already collected by the Prometheus export as described in the \"Monitoring\" section below max_client_conn max_db_connections max_packet_size max_prepared_statements max_user_connections min_pool_size pkt_buf query_timeout query_wait_timeout reserve_pool_size reserve_pool_timeout sbuf_loopcnt server_check_delay server_check_query server_connect_timeout server_fast_close server_idle_timeout server_lifetime server_login_retry server_reset_query server_reset_query_always server_round_robin server_tls_ciphers server_tls_protocols stats_period suspend_timeout tcp_defer_accept tcp_keepalive tcp_keepcnt tcp_keepidle tcp_keepintvl tcp_user_timeout tcp_socket_buffer track_extra_parameters verbose Customizations of the PgBouncer configuration are written declaratively in the .spec.pgbouncer.parameters map. The operator reacts to the changes in the pooler specification, and every PgBouncer instance reloads the updated configuration without disrupting the service. Warning Every PgBouncer pod has the same configuration, aligned with the parameters in the specification. A mistake in these parameters might disrupt the operability of the whole pooler. The operator doesn't validate the value of any option.","title":"PgBouncer configuration options"},{"location":"connection_pooling/#monitoring","text":"The PgBouncer implementation of the Pooler comes with a default Prometheus exporter. It makes available several metrics having the cnpg_pgbouncer_ prefix by running: SHOW LISTS (prefix: cnpg_pgbouncer_lists ) SHOW POOLS (prefix: cnpg_pgbouncer_pools ) SHOW STATS (prefix: cnpg_pgbouncer_stats ) Like the CloudNativePG instance, the exporter runs on port 9127 of each pod running PgBouncer and also provides metrics related to the Go runtime (with the prefix go_* ). Info You can inspect the exported metrics on a pod running PgBouncer. For instructions, see How to inspect the exported metrics . Make sure that you use the correct IP and the 9127 port. This example shows the output for cnpg_pgbouncer metrics: # HELP cnpg_pgbouncer_collection_duration_seconds Collection time duration in seconds # TYPE cnpg_pgbouncer_collection_duration_seconds gauge cnpg_pgbouncer_collection_duration_seconds{collector=\"Collect.up\"} 0.002338805 # HELP cnpg_pgbouncer_collection_errors_total Total errors occurred accessing PostgreSQL for metrics. # TYPE cnpg_pgbouncer_collection_errors_total counter cnpg_pgbouncer_collection_errors_total{collector=\"sql: Scan error on column index 16, name \\\"load_balance_hosts\\\": converting NULL to int is unsupported\"} 5 # HELP cnpg_pgbouncer_collections_total Total number of times PostgreSQL was accessed for metrics. # TYPE cnpg_pgbouncer_collections_total counter cnpg_pgbouncer_collections_total 5 # HELP cnpg_pgbouncer_last_collection_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_pgbouncer_last_collection_error gauge cnpg_pgbouncer_last_collection_error 0 # HELP cnpg_pgbouncer_lists_databases Count of databases. # TYPE cnpg_pgbouncer_lists_databases gauge cnpg_pgbouncer_lists_databases 1 # HELP cnpg_pgbouncer_lists_dns_names Count of DNS names in the cache. # TYPE cnpg_pgbouncer_lists_dns_names gauge cnpg_pgbouncer_lists_dns_names 0 # HELP cnpg_pgbouncer_lists_dns_pending Not used. # TYPE cnpg_pgbouncer_lists_dns_pending gauge cnpg_pgbouncer_lists_dns_pending 0 # HELP cnpg_pgbouncer_lists_dns_queries Count of in-flight DNS queries. # TYPE cnpg_pgbouncer_lists_dns_queries gauge cnpg_pgbouncer_lists_dns_queries 0 # HELP cnpg_pgbouncer_lists_dns_zones Count of DNS zones in the cache. # TYPE cnpg_pgbouncer_lists_dns_zones gauge cnpg_pgbouncer_lists_dns_zones 0 # HELP cnpg_pgbouncer_lists_free_clients Count of free clients. # TYPE cnpg_pgbouncer_lists_free_clients gauge cnpg_pgbouncer_lists_free_clients 49 # HELP cnpg_pgbouncer_lists_free_servers Count of free servers. # TYPE cnpg_pgbouncer_lists_free_servers gauge cnpg_pgbouncer_lists_free_servers 0 # HELP cnpg_pgbouncer_lists_login_clients Count of clients in login state. # TYPE cnpg_pgbouncer_lists_login_clients gauge cnpg_pgbouncer_lists_login_clients 0 # HELP cnpg_pgbouncer_lists_pools Count of pools. # TYPE cnpg_pgbouncer_lists_pools gauge cnpg_pgbouncer_lists_pools 1 # HELP cnpg_pgbouncer_lists_used_clients Count of used clients. # TYPE cnpg_pgbouncer_lists_used_clients gauge cnpg_pgbouncer_lists_used_clients 1 # HELP cnpg_pgbouncer_lists_used_servers Count of used servers. # TYPE cnpg_pgbouncer_lists_used_servers gauge cnpg_pgbouncer_lists_used_servers 0 # HELP cnpg_pgbouncer_lists_users Count of users. # TYPE cnpg_pgbouncer_lists_users gauge cnpg_pgbouncer_lists_users 2 # HELP cnpg_pgbouncer_pools_cl_active Client connections that are linked to server connection and can process queries. # TYPE cnpg_pgbouncer_pools_cl_active gauge cnpg_pgbouncer_pools_cl_active{database=\"pgbouncer\",user=\"pgbouncer\"} 1 # HELP cnpg_pgbouncer_pools_cl_active_cancel_req Client connections that have forwarded query cancellations to the server and are waiting for the server response. # TYPE cnpg_pgbouncer_pools_cl_active_cancel_req gauge cnpg_pgbouncer_pools_cl_active_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_cancel_req Client connections that have not forwarded query cancellations to the server yet. # TYPE cnpg_pgbouncer_pools_cl_cancel_req gauge cnpg_pgbouncer_pools_cl_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_waiting Client connections that have sent queries but have not yet got a server connection. # TYPE cnpg_pgbouncer_pools_cl_waiting gauge cnpg_pgbouncer_pools_cl_waiting{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_waiting_cancel_req Client connections that have not forwarded query cancellations to the server yet. # TYPE cnpg_pgbouncer_pools_cl_waiting_cancel_req gauge cnpg_pgbouncer_pools_cl_waiting_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_load_balance_hosts Number of hosts not load balancing between hosts # TYPE cnpg_pgbouncer_pools_load_balance_hosts gauge cnpg_pgbouncer_pools_load_balance_hosts{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_maxwait How long the first (oldest) client in the queue has waited, in seconds. If this starts increasing, then the current pool of servers does not handle requests quickly enough. The reason may be either an overloaded server or just too small of a pool_size setting. # TYPE cnpg_pgbouncer_pools_maxwait gauge cnpg_pgbouncer_pools_maxwait{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_maxwait_us Microsecond part of the maximum waiting time. # TYPE cnpg_pgbouncer_pools_maxwait_us gauge cnpg_pgbouncer_pools_maxwait_us{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_pool_mode The pooling mode in use. 1 for session, 2 for transaction, 3 for statement, -1 if unknown # TYPE cnpg_pgbouncer_pools_pool_mode gauge cnpg_pgbouncer_pools_pool_mode{database=\"pgbouncer\",user=\"pgbouncer\"} 3 # HELP cnpg_pgbouncer_pools_sv_active Server connections that are linked to a client. # TYPE cnpg_pgbouncer_pools_sv_active gauge cnpg_pgbouncer_pools_sv_active{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_active_cancel Server connections that are currently forwarding a cancel request # TYPE cnpg_pgbouncer_pools_sv_active_cancel gauge cnpg_pgbouncer_pools_sv_active_cancel{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_idle Server connections that are unused and immediately usable for client queries. # TYPE cnpg_pgbouncer_pools_sv_idle gauge cnpg_pgbouncer_pools_sv_idle{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_login Server connections currently in the process of logging in. # TYPE cnpg_pgbouncer_pools_sv_login gauge cnpg_pgbouncer_pools_sv_login{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_tested Server connections that are currently running either server_reset_query or server_check_query. # TYPE cnpg_pgbouncer_pools_sv_tested gauge cnpg_pgbouncer_pools_sv_tested{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_used Server connections that have been idle for more than server_check_delay, so they need server_check_query to run on them before they can be used again. # TYPE cnpg_pgbouncer_pools_sv_used gauge cnpg_pgbouncer_pools_sv_used{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_wait_cancels Servers that normally could become idle, but are waiting to do so until all in-flight cancel requests have completed that were sent to cancel a query on this server. # TYPE cnpg_pgbouncer_pools_sv_wait_cancels gauge cnpg_pgbouncer_pools_sv_wait_cancels{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_bind_count Average number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer. # TYPE cnpg_pgbouncer_stats_avg_bind_count gauge cnpg_pgbouncer_stats_avg_bind_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_client_parse_count Average number of prepared statements created by clients. # TYPE cnpg_pgbouncer_stats_avg_client_parse_count gauge cnpg_pgbouncer_stats_avg_client_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_query_count Average queries per second in last stat period. # TYPE cnpg_pgbouncer_stats_avg_query_count gauge cnpg_pgbouncer_stats_avg_query_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_query_time Average query duration, in microseconds. # TYPE cnpg_pgbouncer_stats_avg_query_time gauge cnpg_pgbouncer_stats_avg_query_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_recv Average received (from clients) bytes per second. # TYPE cnpg_pgbouncer_stats_avg_recv gauge cnpg_pgbouncer_stats_avg_recv{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_sent Average sent (to clients) bytes per second. # TYPE cnpg_pgbouncer_stats_avg_sent gauge cnpg_pgbouncer_stats_avg_sent{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_server_parse_count Average number of prepared statements created by pgbouncer on a server. # TYPE cnpg_pgbouncer_stats_avg_server_parse_count gauge cnpg_pgbouncer_stats_avg_server_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_wait_time Time spent by clients waiting for a server, in microseconds (average per second). # TYPE cnpg_pgbouncer_stats_avg_wait_time gauge cnpg_pgbouncer_stats_avg_wait_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_xact_count Average transactions per second in last stat period. # TYPE cnpg_pgbouncer_stats_avg_xact_count gauge cnpg_pgbouncer_stats_avg_xact_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_xact_time Average transaction duration, in microseconds. # TYPE cnpg_pgbouncer_stats_avg_xact_time gauge cnpg_pgbouncer_stats_avg_xact_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_bind_count Total number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer # TYPE cnpg_pgbouncer_stats_total_bind_count gauge cnpg_pgbouncer_stats_total_bind_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_client_parse_count Total number of prepared statements created by clients. # TYPE cnpg_pgbouncer_stats_total_client_parse_count gauge cnpg_pgbouncer_stats_total_client_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_query_count Total number of SQL queries pooled by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_query_count gauge cnpg_pgbouncer_stats_total_query_count{database=\"pgbouncer\"} 15 # HELP cnpg_pgbouncer_stats_total_query_time Total number of microseconds spent by pgbouncer when actively connected to PostgreSQL, executing queries. # TYPE cnpg_pgbouncer_stats_total_query_time gauge cnpg_pgbouncer_stats_total_query_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_received Total volume in bytes of network traffic received by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_received gauge cnpg_pgbouncer_stats_total_received{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_sent Total volume in bytes of network traffic sent by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_sent gauge cnpg_pgbouncer_stats_total_sent{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_server_parse_count Total number of prepared statements created by pgbouncer on a server. # TYPE cnpg_pgbouncer_stats_total_server_parse_count gauge cnpg_pgbouncer_stats_total_server_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_wait_time Time spent by clients waiting for a server, in microseconds. # TYPE cnpg_pgbouncer_stats_total_wait_time gauge cnpg_pgbouncer_stats_total_wait_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_xact_count Total number of SQL transactions pooled by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_xact_count gauge cnpg_pgbouncer_stats_total_xact_count{database=\"pgbouncer\"} 15 # HELP cnpg_pgbouncer_stats_total_xact_time Total number of microseconds spent by pgbouncer when connected to PostgreSQL in a transaction, either idle in transaction or executing queries. # TYPE cnpg_pgbouncer_stats_total_xact_time gauge cnpg_pgbouncer_stats_total_xact_time{database=\"pgbouncer\"} 0 Info For a better understanding of the metrics please refer to the PgBouncer documentation. As for clusters, a specific pooler can be monitored using the Prometheus operator's resource PodMonitor . A PodMonitor correctly pointing to a pooler can be created by the operator by setting .spec.monitoring.enablePodMonitor to true in the Pooler resource. The default is false . Important Any change to PodMonitor created automatically is overridden by the operator at the next reconciliation cycle. If you need to customize it, you can do so as shown in the following example. To deploy a PodMonitor for a specific pooler manually, you can define it as follows and change it as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: <POOLER_NAME> spec: selector: matchLabels: cnpg.io/poolerName: <POOLER_NAME> podMetricsEndpoints: - port: metrics","title":"Monitoring"},{"location":"connection_pooling/#logging","text":"Logs are directly sent to standard output, in JSON format, like in the following example: { \"level\": \"info\", \"ts\": SECONDS.MICROSECONDS, \"msg\": \"record\", \"pipe\": \"stderr\", \"record\": { \"timestamp\": \"YYYY-MM-DD HH:MM:SS.MS UTC\", \"pid\": \"<PID>\", \"level\": \"LOG\", \"msg\": \"kernel file descriptor limit: 1048576 (hard: 1048576); max_client_conn: 100, max expected fd use: 112\" } }","title":"Logging"},{"location":"connection_pooling/#pausing-connections","text":"The Pooler specification allows you to take advantage of PgBouncer's PAUSE and RESUME commands, using only declarative configuration. You can ado this using the paused option, which by default is set to false . When set to true , the operator internally invokes the PAUSE command in PgBouncer, which: Closes all active connections toward the PostgreSQL server, after waiting for the queries to complete Pauses any new connection coming from the client When the paused option is reset to false , the operator invokes the RESUME command in PgBouncer, reopening the taps toward the PostgreSQL service defined in the Pooler resource. PAUSE For more information, see PAUSE in the PgBouncer documentation . Important In future versions, the switchover operation will be fully integrated with the PgBouncer pooler and take advantage of the PAUSE / RESUME features to reduce the perceived downtime by client applications. Currently, you can achieve the same results by setting the paused attribute to true , issuing the switchover command through the cnpg plugin , and then restoring the paused attribute to false .","title":"Pausing connections"},{"location":"connection_pooling/#limitations","text":"","title":"Limitations"},{"location":"connection_pooling/#single-postgresql-cluster","text":"The current implementation of the pooler is designed to work as part of a specific CloudNativePG cluster (a service). It isn't currently possible to create a pooler that spans multiple clusters.","title":"Single PostgreSQL cluster"},{"location":"connection_pooling/#controlled-configurability","text":"CloudNativePG transparently manages several configuration options that are used for the PgBouncer layer to communicate with PostgreSQL. Such options aren't configurable from outside and include TLS certificates, authentication settings, the databases section, and the users section. Also, considering the specific use case for the single PostgreSQL cluster, the adopted criteria is to explicitly list the options that can be configured by users. Note The adopted solution likely addresses the majority of use cases. It leaves room for the future implementation of a separate operator for PgBouncer to complete the gamma with more advanced and customized scenarios.","title":"Controlled configurability"},{"location":"container_images/","text":"Container Image Requirements The CloudNativePG operator for Kubernetes is designed to work with any compatible PostgreSQL container image that meets the following requirements: PostgreSQL executables must be available in the system path: initdb postgres pg_ctl pg_controldata pg_basebackup Proper locale settings configured Optional Components: PGAudit extension (only required if audit logging is needed) du (used for kubectl cnpg status ) Important Only PostgreSQL versions officially supported by PGDG are allowed. Info Barman Cloud executables are no longer required in CloudNativePG. The recommended approach is to use the dedicated Barman Cloud Plugin . No entry point or command is required in the image definition. CloudNativePG automatically overrides it with its instance manager. Warning CloudNativePG only supports Primary with multiple/optional Hot Standby Servers architecture for PostgreSQL application container images. The CloudNativePG community provides and maintains public PostgreSQL container images that are fully compatible with CloudNativePG. These images are published on ghcr.io . Image Tag Requirements To ensure the operator makes informed decisions, it must accurately detect the PostgreSQL major version. This detection can occur in two ways: Utilizing the major field of the imageCatalogRef , if defined. Auto-detecting the major version from the image tag of the imageName if not explicitly specified. For auto-detection to work, the image tag must adhere to a specific format. It should commence with a valid PostgreSQL major version number (e.g., 15.6 or 16), optionally followed by a dot and the patch level. Following this, the tag can include any character combination valid and accepted in a Docker tag, preceded by a dot, an underscore, or a minus sign. Examples of accepted image tags: 12.1 13.3.2.1-1 13.4 14 15.5-10 16.0 Warning latest is not considered a valid tag for the image. Note Image tag requirements do no apply for images defined in a catalog.","title":"Container Image Requirements"},{"location":"container_images/#container-image-requirements","text":"The CloudNativePG operator for Kubernetes is designed to work with any compatible PostgreSQL container image that meets the following requirements: PostgreSQL executables must be available in the system path: initdb postgres pg_ctl pg_controldata pg_basebackup Proper locale settings configured Optional Components: PGAudit extension (only required if audit logging is needed) du (used for kubectl cnpg status ) Important Only PostgreSQL versions officially supported by PGDG are allowed. Info Barman Cloud executables are no longer required in CloudNativePG. The recommended approach is to use the dedicated Barman Cloud Plugin . No entry point or command is required in the image definition. CloudNativePG automatically overrides it with its instance manager. Warning CloudNativePG only supports Primary with multiple/optional Hot Standby Servers architecture for PostgreSQL application container images. The CloudNativePG community provides and maintains public PostgreSQL container images that are fully compatible with CloudNativePG. These images are published on ghcr.io .","title":"Container Image Requirements"},{"location":"container_images/#image-tag-requirements","text":"To ensure the operator makes informed decisions, it must accurately detect the PostgreSQL major version. This detection can occur in two ways: Utilizing the major field of the imageCatalogRef , if defined. Auto-detecting the major version from the image tag of the imageName if not explicitly specified. For auto-detection to work, the image tag must adhere to a specific format. It should commence with a valid PostgreSQL major version number (e.g., 15.6 or 16), optionally followed by a dot and the patch level. Following this, the tag can include any character combination valid and accepted in a Docker tag, preceded by a dot, an underscore, or a minus sign. Examples of accepted image tags: 12.1 13.3.2.1-1 13.4 14 15.5-10 16.0 Warning latest is not considered a valid tag for the image. Note Image tag requirements do no apply for images defined in a catalog.","title":"Image Tag Requirements"},{"location":"controller/","text":"Custom Pod Controller Kubernetes uses the Controller pattern to align the current cluster state with the desired one. Stateful applications are usually managed with the StatefulSet controller, which creates and reconciles a set of Pods built from the same specification, and assigns them a sticky identity. CloudNativePG implements its own custom controller to manage PostgreSQL instances, instead of relying on the StatefulSet controller. While bringing more complexity to the implementation, this design choice provides the operator with more flexibility on how we manage the cluster, while being transparent on the topology of PostgreSQL clusters. Like many choices in the design realm, different ones lead to other compromises. The following sections discuss a few points where we believe this design choice has made the implementation of CloudNativePG more reliable, and easier to understand. PVC resizing This is a well known limitation of StatefulSet : it does not support resizing PVCs. This is inconvenient for a database. Resizing volumes requires convoluted workarounds. In contrast, CloudNativePG leverages the configured storage class to manage the underlying PVCs directly, and can handle PVC resizing if the storage class supports it. Primary Instances versus Replicas The StatefulSet controller is designed to create a set of Pods from just one template. Given that we use one Pod per PostgreSQL instance, we have two kinds of Pods: primary instance (only one) replicas (multiple, optional) This difference is relevant when deciding the correct deployment strategy to execute for a given operation. Some operations should be performed on the replicas first, and then on the primary, but only after an updated replica is promoted as the new primary. For example, when you want to apply a different PostgreSQL image version, or when you increase configuration parameters like max_connections (which are treated specially by PostgreSQL because CloudNativePG uses hot standby replicas ). While doing that, CloudNativePG considers the PostgreSQL instance's role - and not just its serial number. Sometimes the operator needs to follow the opposite process: work on the primary first and then on the replicas. For example, when you lower max_connections . In that case, CloudNativePG will: apply the new setting to the primary instance restart it apply the new setting on the replicas The StatefulSet controller, being application-independent, can't incorporate this behavior, which is specific to PostgreSQL's native replication technology. Coherence of PVCs PostgreSQL instances can be configured to work with multiple PVCs: this is how WAL storage can be separated from PGDATA . The two data stores need to be coherent from the PostgreSQL point of view, as they're used simultaneously. If you delete the PVC corresponding to the WAL storage of an instance, the PVC where PGDATA is stored will not be usable anymore. This behavior is specific to PostgreSQL and is not implemented in the StatefulSet controller - the latter not being application specific. After the user dropped a PVC, a StatefulSet would just recreate it, leading to a corrupted PostgreSQL instance. CloudNativePG would instead classify the remaining PVC as unusable, and start creating a new pair of PVCs for another instance to join the cluster correctly. Local storage, remote storage, and database size Sometimes you need to take down a Kubernetes node to do an upgrade. After the upgrade, depending on your upgrade strategy, the updated node could go up again, or a new node could replace it. Supposing the unavailable node was hosting a PostgreSQL instance, depending on your database size and your cloud infrastructure, you may prefer to choose one of the following actions: drop the PVC and the Pod residing on the downed node; create a new PVC cloning the data from another PVC; after that, schedule a Pod for it drop the Pod, schedule the Pod in a different node, and mount the PVC from there leave the Pod and the PVC as they are, and wait for the node to be back up. The first solution is practical when your database size permits, allowing you to immediately bring back the desired number of replicas. The second solution is only feasible when you're not using the storage of the local node, and re-mounting the PVC in another host is possible in a reasonable amount of time (which only you and your organization know). The third solution is appropriate when the database is big and uses local node storage for maximum performance and data durability. The CloudNativePG controller implements all these strategies so that the user can select the preferred behavior at the cluster level (read the \"Kubernetes upgrade\" section for details). Being generic, the StatefulSet doesn't allow this level of customization.","title":"Custom Pod Controller"},{"location":"controller/#custom-pod-controller","text":"Kubernetes uses the Controller pattern to align the current cluster state with the desired one. Stateful applications are usually managed with the StatefulSet controller, which creates and reconciles a set of Pods built from the same specification, and assigns them a sticky identity. CloudNativePG implements its own custom controller to manage PostgreSQL instances, instead of relying on the StatefulSet controller. While bringing more complexity to the implementation, this design choice provides the operator with more flexibility on how we manage the cluster, while being transparent on the topology of PostgreSQL clusters. Like many choices in the design realm, different ones lead to other compromises. The following sections discuss a few points where we believe this design choice has made the implementation of CloudNativePG more reliable, and easier to understand.","title":"Custom Pod Controller"},{"location":"controller/#pvc-resizing","text":"This is a well known limitation of StatefulSet : it does not support resizing PVCs. This is inconvenient for a database. Resizing volumes requires convoluted workarounds. In contrast, CloudNativePG leverages the configured storage class to manage the underlying PVCs directly, and can handle PVC resizing if the storage class supports it.","title":"PVC resizing"},{"location":"controller/#primary-instances-versus-replicas","text":"The StatefulSet controller is designed to create a set of Pods from just one template. Given that we use one Pod per PostgreSQL instance, we have two kinds of Pods: primary instance (only one) replicas (multiple, optional) This difference is relevant when deciding the correct deployment strategy to execute for a given operation. Some operations should be performed on the replicas first, and then on the primary, but only after an updated replica is promoted as the new primary. For example, when you want to apply a different PostgreSQL image version, or when you increase configuration parameters like max_connections (which are treated specially by PostgreSQL because CloudNativePG uses hot standby replicas ). While doing that, CloudNativePG considers the PostgreSQL instance's role - and not just its serial number. Sometimes the operator needs to follow the opposite process: work on the primary first and then on the replicas. For example, when you lower max_connections . In that case, CloudNativePG will: apply the new setting to the primary instance restart it apply the new setting on the replicas The StatefulSet controller, being application-independent, can't incorporate this behavior, which is specific to PostgreSQL's native replication technology.","title":"Primary Instances versus Replicas"},{"location":"controller/#coherence-of-pvcs","text":"PostgreSQL instances can be configured to work with multiple PVCs: this is how WAL storage can be separated from PGDATA . The two data stores need to be coherent from the PostgreSQL point of view, as they're used simultaneously. If you delete the PVC corresponding to the WAL storage of an instance, the PVC where PGDATA is stored will not be usable anymore. This behavior is specific to PostgreSQL and is not implemented in the StatefulSet controller - the latter not being application specific. After the user dropped a PVC, a StatefulSet would just recreate it, leading to a corrupted PostgreSQL instance. CloudNativePG would instead classify the remaining PVC as unusable, and start creating a new pair of PVCs for another instance to join the cluster correctly.","title":"Coherence of PVCs"},{"location":"controller/#local-storage-remote-storage-and-database-size","text":"Sometimes you need to take down a Kubernetes node to do an upgrade. After the upgrade, depending on your upgrade strategy, the updated node could go up again, or a new node could replace it. Supposing the unavailable node was hosting a PostgreSQL instance, depending on your database size and your cloud infrastructure, you may prefer to choose one of the following actions: drop the PVC and the Pod residing on the downed node; create a new PVC cloning the data from another PVC; after that, schedule a Pod for it drop the Pod, schedule the Pod in a different node, and mount the PVC from there leave the Pod and the PVC as they are, and wait for the node to be back up. The first solution is practical when your database size permits, allowing you to immediately bring back the desired number of replicas. The second solution is only feasible when you're not using the storage of the local node, and re-mounting the PVC in another host is possible in a reasonable amount of time (which only you and your organization know). The third solution is appropriate when the database is big and uses local node storage for maximum performance and data durability. The CloudNativePG controller implements all these strategies so that the user can select the preferred behavior at the cluster level (read the \"Kubernetes upgrade\" section for details). Being generic, the StatefulSet doesn't allow this level of customization.","title":"Local storage, remote storage, and database size"},{"location":"database_import/","text":"Importing Postgres databases This section describes how to import one or more existing PostgreSQL databases inside a brand new CloudNativePG cluster. The import operation is based on the concept of online logical backups in PostgreSQL, and relies on pg_dump via a network connection to the origin host, and pg_restore . Thanks to native Multi-Version Concurrency Control (MVCC) and snapshots, PostgreSQL enables taking consistent backups over the network, in a concurrent manner, without stopping any write activity. Logical backups are also the most common, flexible and reliable technique to perform major upgrades of PostgreSQL versions. As a result, the instructions in this section are suitable for both: importing one or more databases from an existing PostgreSQL instance, even outside Kubernetes importing the database from any PostgreSQL version to one that is either the same or newer, enabling major upgrades of PostgreSQL (e.g. from version 13.x to version 17.x) Warning When performing major upgrades of PostgreSQL you are responsible for making sure that applications are compatible with the new version and that the upgrade path of the objects contained in the database (including extensions) is feasible. In both cases, the operation is performed on a consistent snapshot of the origin database. Important For this reason we suggest to stop write operations on the source before the final import in the Cluster resource, as changes done to the source database after the start of the backup will not be in the destination cluster - hence why this feature is referred to as \"offline import\" or \"offline major upgrade\". How it works Conceptually, the import requires you to create a new cluster from scratch ( destination cluster ), using the initdb bootstrap method , and then complete the initdb.import subsection to import objects from an existing Postgres cluster ( source cluster ). As per PostgreSQL recommendation, we suggest that the PostgreSQL major version of the destination cluster is greater or equal than the one of the source cluster . CloudNativePG provides two main ways to import objects from the source cluster into the destination cluster: microservice approach : the destination cluster is designed to host a single application database owned by the specified application user, as recommended by the CloudNativePG project monolith approach : the destination cluster is designed to host multiple databases and different users, imported from the source cluster The first import method is available via the microservice type, while the latter by the monolith type. Warning It is your responsibility to ensure that the destination cluster can access the source cluster with a superuser or a user having enough privileges to take a logical backup with pg_dump . Please refer to the PostgreSQL documentation on \"SQL Dump\" for further information. The microservice type With the microservice approach, you can specify a single database you want to import from the source cluster into the destination cluster. The operation is performed in 4 steps: initdb bootstrap of the new cluster export of the selected database (in initdb.import.databases ) using pg_dump -Fd import of the database using pg_restore --no-acl --no-owner into the initdb.database (application database) owned by the initdb.owner user cleanup of the database dump file optional execution of the user defined SQL queries in the application database via the postImportApplicationSQL parameter execution of ANALYZE VERBOSE on the imported database For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest available major version at the time the operator was released) called cluster-microservice that imports the angus database from the cluster-pg96 cluster (with the unsupported PostgreSQL 9.6), by connecting to the postgres database using the postgres user, via the password stored in the cluster-pg96-superuser secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-microservice spec: instances: 3 bootstrap: initdb: import: type: microservice databases: - angus source: externalCluster: cluster-pg96 #postImportApplicationSQL: #- | # INSERT YOUR SQL QUERIES HERE storage: size: 1Gi externalClusters: - name: cluster-pg96 connectionParameters: # Use the correct IP or host name for the source database host: pg96.local user: postgres dbname: postgres password: name: cluster-pg96-superuser key: password Warning The example above deliberately uses a source database running a version of PostgreSQL that is not supported anymore by the Community, and consequently by CloudNativePG. Data export from the source instance is performed using the version of pg_dump in the destination cluster, which must be a supported one, and equal or greater than the source one. Based on our experience, this way of exporting data should work on older and unsupported versions of Postgres too, giving you the chance to move your legacy data to a better system, inside Kubernetes. This is the main reason why we used 9.6 in the examples of this section. We'd be interested to hear from you should you experience any issues in this area. There are a few things you need to be aware of when using the microservice type: It requires an externalCluster that points to an existing PostgreSQL instance containing the data to import (for more information, please refer to \"The externalClusters section\" ) Traffic must be allowed between the Kubernetes cluster and the externalCluster during the operation Connection to the source database must be granted with the specified user that needs to run pg_dump and read roles information ( superuser is OK) Currently, the pg_dump -Fd result is stored temporarily inside the dumps folder in the PGDATA volume, so there should be enough available space to temporarily contain the dump result on the assigned node, as well as the restored data and indexes. Once the import operation is completed, this folder is automatically deleted by the operator. Only one database can be specified inside the initdb.import.databases array Roles are not imported - and as such they cannot be specified inside initdb.import.roles The monolith type With the monolith approach, you can specify a set of roles and databases you want to import from the source cluster into the destination cluster. The operation is performed in the following steps: initdb bootstrap of the new cluster export and import of the selected roles export of the selected databases (in initdb.import.databases ), one at a time, using pg_dump -Fd create each of the selected databases and import data using pg_restore run ANALYZE on each imported database cleanup of the database dump files For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest available major version at the time the operator was released) called cluster-monolith that imports the accountant and the bank_user roles, as well as the accounting , banking , resort databases from the cluster-pg96 cluster (with the unsupported PostgreSQL 9.6), by connecting to the postgres database using the postgres user, via the password stored in the cluster-pg96-superuser secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-monolith spec: instances: 3 bootstrap: initdb: import: type: monolith databases: - accounting - banking - resort roles: - accountant - bank_user source: externalCluster: cluster-pg96 storage: size: 1Gi externalClusters: - name: cluster-pg96 connectionParameters: # Use the correct IP or host name for the source database host: pg96.local user: postgres dbname: postgres sslmode: require password: name: cluster-pg96-superuser key: password There are a few things you need to be aware of when using the monolith type: It requires an externalCluster that points to an existing PostgreSQL instance containing the data to import (for more information, please refer to \"The externalClusters section\" ) Traffic must be allowed between the Kubernetes cluster and the externalCluster during the operation Connection to the source database must be granted with the specified user that needs to run pg_dump and retrieve roles information ( superuser is OK) Currently, the pg_dump -Fd result is stored temporarily inside the dumps folder in the PGDATA volume, so there should be enough available space to temporarily contain the dump result on the assigned node, as well as the restored data and indexes. Once the import operation is completed, this folder is automatically deleted by the operator. At least one database to be specified in the initdb.import.databases array Any role that is required by the imported databases must be specified inside initdb.import.roles , with the limitations below: The following roles, if present, are not imported: postgres , streaming_replica , cnpg_pooler_pgbouncer The SUPERUSER option is removed from any imported role Wildcard \"*\" can be used as the only element in the databases and/or roles arrays to import every object of the kind; When matching databases the wildcard will ignore the postgres database, template databases, and those databases not allowing connections After the clone procedure is done, ANALYZE VERBOSE is executed for every database. postImportApplicationSQL field is not supported Import optimizations During the logical import of a database, CloudNativePG optimizes the configuration of PostgreSQL in order to prioritize speed versus data durability, by forcing: archive_mode to off fsync to off full_page_writes to off max_wal_senders to 0 wal_level to minimal Before completing the import job, CloudNativePG restores the expected configuration, then runs initdb --sync-only to ensure that data is permanently written on disk. Important WAL archiving, if requested, and WAL level will be honored after the database import process has completed. Similarly, replicas will be cloned after the bootstrap phase, when the actual cluster resource starts. There are other optimizations you can do during the import phase. Although this topic is beyond the scope of CloudNativePG, we recommend that you reduce unnecessary writes in the checkpoint area by tuning Postgres GUCs like shared_buffers , max_wal_size , checkpoint_timeout directly in the Cluster configuration. Customizing pg_dump and pg_restore Behavior You can customize the behavior of pg_dump and pg_restore by specifying additional options using the pgDumpExtraOptions and pgRestoreExtraOptions parameters. For instance, you can enable parallel jobs to speed up data import/export processes, as shown in the following example: # <snip> bootstrap: initdb: import: type: microservice databases: - app source: externalCluster: cluster-example pgDumpExtraOptions: - '--jobs=2' pgRestoreExtraOptions: - '--jobs=2' # <snip> Warning Use the pgDumpExtraOptions and pgRestoreExtraOptions fields with caution and at your own risk. These options are not validated or verified by the operator, and some configurations may conflict with its intended functionality or behavior. Always test thoroughly in a safe and controlled environment before applying them in production. Online Import and Upgrades Logical replication offers a powerful way to import any PostgreSQL database accessible over the network using the following approach: Import Bootstrap with Schema-Only Option : Initialize the schema in the target database before replication begins. Subscription Resource : Set up continuous replication to synchronize data changes. This technique can also be leveraged for performing major PostgreSQL upgrades with minimal downtime, making it ideal for seamless migrations and system upgrades. For more details, including limitations and best practices, refer to the Logical Replication section in the documentation.","title":"Importing Postgres databases"},{"location":"database_import/#importing-postgres-databases","text":"This section describes how to import one or more existing PostgreSQL databases inside a brand new CloudNativePG cluster. The import operation is based on the concept of online logical backups in PostgreSQL, and relies on pg_dump via a network connection to the origin host, and pg_restore . Thanks to native Multi-Version Concurrency Control (MVCC) and snapshots, PostgreSQL enables taking consistent backups over the network, in a concurrent manner, without stopping any write activity. Logical backups are also the most common, flexible and reliable technique to perform major upgrades of PostgreSQL versions. As a result, the instructions in this section are suitable for both: importing one or more databases from an existing PostgreSQL instance, even outside Kubernetes importing the database from any PostgreSQL version to one that is either the same or newer, enabling major upgrades of PostgreSQL (e.g. from version 13.x to version 17.x) Warning When performing major upgrades of PostgreSQL you are responsible for making sure that applications are compatible with the new version and that the upgrade path of the objects contained in the database (including extensions) is feasible. In both cases, the operation is performed on a consistent snapshot of the origin database. Important For this reason we suggest to stop write operations on the source before the final import in the Cluster resource, as changes done to the source database after the start of the backup will not be in the destination cluster - hence why this feature is referred to as \"offline import\" or \"offline major upgrade\".","title":"Importing Postgres databases"},{"location":"database_import/#how-it-works","text":"Conceptually, the import requires you to create a new cluster from scratch ( destination cluster ), using the initdb bootstrap method , and then complete the initdb.import subsection to import objects from an existing Postgres cluster ( source cluster ). As per PostgreSQL recommendation, we suggest that the PostgreSQL major version of the destination cluster is greater or equal than the one of the source cluster . CloudNativePG provides two main ways to import objects from the source cluster into the destination cluster: microservice approach : the destination cluster is designed to host a single application database owned by the specified application user, as recommended by the CloudNativePG project monolith approach : the destination cluster is designed to host multiple databases and different users, imported from the source cluster The first import method is available via the microservice type, while the latter by the monolith type. Warning It is your responsibility to ensure that the destination cluster can access the source cluster with a superuser or a user having enough privileges to take a logical backup with pg_dump . Please refer to the PostgreSQL documentation on \"SQL Dump\" for further information.","title":"How it works"},{"location":"database_import/#the-microservice-type","text":"With the microservice approach, you can specify a single database you want to import from the source cluster into the destination cluster. The operation is performed in 4 steps: initdb bootstrap of the new cluster export of the selected database (in initdb.import.databases ) using pg_dump -Fd import of the database using pg_restore --no-acl --no-owner into the initdb.database (application database) owned by the initdb.owner user cleanup of the database dump file optional execution of the user defined SQL queries in the application database via the postImportApplicationSQL parameter execution of ANALYZE VERBOSE on the imported database For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest available major version at the time the operator was released) called cluster-microservice that imports the angus database from the cluster-pg96 cluster (with the unsupported PostgreSQL 9.6), by connecting to the postgres database using the postgres user, via the password stored in the cluster-pg96-superuser secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-microservice spec: instances: 3 bootstrap: initdb: import: type: microservice databases: - angus source: externalCluster: cluster-pg96 #postImportApplicationSQL: #- | # INSERT YOUR SQL QUERIES HERE storage: size: 1Gi externalClusters: - name: cluster-pg96 connectionParameters: # Use the correct IP or host name for the source database host: pg96.local user: postgres dbname: postgres password: name: cluster-pg96-superuser key: password Warning The example above deliberately uses a source database running a version of PostgreSQL that is not supported anymore by the Community, and consequently by CloudNativePG. Data export from the source instance is performed using the version of pg_dump in the destination cluster, which must be a supported one, and equal or greater than the source one. Based on our experience, this way of exporting data should work on older and unsupported versions of Postgres too, giving you the chance to move your legacy data to a better system, inside Kubernetes. This is the main reason why we used 9.6 in the examples of this section. We'd be interested to hear from you should you experience any issues in this area. There are a few things you need to be aware of when using the microservice type: It requires an externalCluster that points to an existing PostgreSQL instance containing the data to import (for more information, please refer to \"The externalClusters section\" ) Traffic must be allowed between the Kubernetes cluster and the externalCluster during the operation Connection to the source database must be granted with the specified user that needs to run pg_dump and read roles information ( superuser is OK) Currently, the pg_dump -Fd result is stored temporarily inside the dumps folder in the PGDATA volume, so there should be enough available space to temporarily contain the dump result on the assigned node, as well as the restored data and indexes. Once the import operation is completed, this folder is automatically deleted by the operator. Only one database can be specified inside the initdb.import.databases array Roles are not imported - and as such they cannot be specified inside initdb.import.roles","title":"The microservice type"},{"location":"database_import/#the-monolith-type","text":"With the monolith approach, you can specify a set of roles and databases you want to import from the source cluster into the destination cluster. The operation is performed in the following steps: initdb bootstrap of the new cluster export and import of the selected roles export of the selected databases (in initdb.import.databases ), one at a time, using pg_dump -Fd create each of the selected databases and import data using pg_restore run ANALYZE on each imported database cleanup of the database dump files For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest available major version at the time the operator was released) called cluster-monolith that imports the accountant and the bank_user roles, as well as the accounting , banking , resort databases from the cluster-pg96 cluster (with the unsupported PostgreSQL 9.6), by connecting to the postgres database using the postgres user, via the password stored in the cluster-pg96-superuser secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-monolith spec: instances: 3 bootstrap: initdb: import: type: monolith databases: - accounting - banking - resort roles: - accountant - bank_user source: externalCluster: cluster-pg96 storage: size: 1Gi externalClusters: - name: cluster-pg96 connectionParameters: # Use the correct IP or host name for the source database host: pg96.local user: postgres dbname: postgres sslmode: require password: name: cluster-pg96-superuser key: password There are a few things you need to be aware of when using the monolith type: It requires an externalCluster that points to an existing PostgreSQL instance containing the data to import (for more information, please refer to \"The externalClusters section\" ) Traffic must be allowed between the Kubernetes cluster and the externalCluster during the operation Connection to the source database must be granted with the specified user that needs to run pg_dump and retrieve roles information ( superuser is OK) Currently, the pg_dump -Fd result is stored temporarily inside the dumps folder in the PGDATA volume, so there should be enough available space to temporarily contain the dump result on the assigned node, as well as the restored data and indexes. Once the import operation is completed, this folder is automatically deleted by the operator. At least one database to be specified in the initdb.import.databases array Any role that is required by the imported databases must be specified inside initdb.import.roles , with the limitations below: The following roles, if present, are not imported: postgres , streaming_replica , cnpg_pooler_pgbouncer The SUPERUSER option is removed from any imported role Wildcard \"*\" can be used as the only element in the databases and/or roles arrays to import every object of the kind; When matching databases the wildcard will ignore the postgres database, template databases, and those databases not allowing connections After the clone procedure is done, ANALYZE VERBOSE is executed for every database. postImportApplicationSQL field is not supported","title":"The monolith type"},{"location":"database_import/#import-optimizations","text":"During the logical import of a database, CloudNativePG optimizes the configuration of PostgreSQL in order to prioritize speed versus data durability, by forcing: archive_mode to off fsync to off full_page_writes to off max_wal_senders to 0 wal_level to minimal Before completing the import job, CloudNativePG restores the expected configuration, then runs initdb --sync-only to ensure that data is permanently written on disk. Important WAL archiving, if requested, and WAL level will be honored after the database import process has completed. Similarly, replicas will be cloned after the bootstrap phase, when the actual cluster resource starts. There are other optimizations you can do during the import phase. Although this topic is beyond the scope of CloudNativePG, we recommend that you reduce unnecessary writes in the checkpoint area by tuning Postgres GUCs like shared_buffers , max_wal_size , checkpoint_timeout directly in the Cluster configuration.","title":"Import optimizations"},{"location":"database_import/#customizing-pg_dump-and-pg_restore-behavior","text":"You can customize the behavior of pg_dump and pg_restore by specifying additional options using the pgDumpExtraOptions and pgRestoreExtraOptions parameters. For instance, you can enable parallel jobs to speed up data import/export processes, as shown in the following example: # <snip> bootstrap: initdb: import: type: microservice databases: - app source: externalCluster: cluster-example pgDumpExtraOptions: - '--jobs=2' pgRestoreExtraOptions: - '--jobs=2' # <snip> Warning Use the pgDumpExtraOptions and pgRestoreExtraOptions fields with caution and at your own risk. These options are not validated or verified by the operator, and some configurations may conflict with its intended functionality or behavior. Always test thoroughly in a safe and controlled environment before applying them in production.","title":"Customizing pg_dump and pg_restore Behavior"},{"location":"database_import/#online-import-and-upgrades","text":"Logical replication offers a powerful way to import any PostgreSQL database accessible over the network using the following approach: Import Bootstrap with Schema-Only Option : Initialize the schema in the target database before replication begins. Subscription Resource : Set up continuous replication to synchronize data changes. This technique can also be leveraged for performing major PostgreSQL upgrades with minimal downtime, making it ideal for seamless migrations and system upgrades. For more details, including limitations and best practices, refer to the Logical Replication section in the documentation.","title":"Online Import and Upgrades"},{"location":"declarative_database_management/","text":"PostgreSQL Database Management CloudNativePG simplifies PostgreSQL database provisioning by automatically creating an application database named app by default. This default behavior is explained in the \"Bootstrap an Empty Cluster\" section. For more advanced use cases, CloudNativePG introduces declarative database management , which empowers users to define and control the lifecycle of PostgreSQL databases using the Database Custom Resource Definition (CRD). This method seamlessly integrates with Kubernetes, providing a scalable, automated, and consistent approach to managing PostgreSQL databases. Key Concepts Scope of Management Important CloudNativePG manages global objects in PostgreSQL clusters, including databases, roles, and tablespaces. However, it does not manage database content beyond extensions and schemas (e.g., tables). To manage database content, use specialized tools or rely on the applications themselves. Declarative Database Manifest The following example demonstrates how a Database resource interacts with a Cluster : apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-one spec: name: one owner: app cluster: name: cluster-example extensions: - name: bloom ensure: present When applied, this manifest creates a Database object called cluster-example-one requesting a database named one , owned by the app role, in the cluster-example PostgreSQL cluster. Info Please refer to the API reference the full list of attributes you can define for each Database object. Required Fields in the Database Manifest metadata.name : Unique name of the Kubernetes object within its namespace. spec.name : Name of the database as it will appear in PostgreSQL. spec.owner : PostgreSQL role that owns the database. spec.cluster.name : Name of the target PostgreSQL cluster. The Database object must reference a specific Cluster , determining where the database will be created. It is managed by the cluster's primary instance, ensuring the database is created or updated as needed. Info The distinction between metadata.name and spec.name allows multiple Database resources to reference databases with the same name across different CloudNativePG clusters in the same Kubernetes namespace. Reserved Database Names PostgreSQL automatically creates databases such as postgres , template0 , and template1 . These names are reserved and cannot be used for new Database objects in CloudNativePG. Important Creating a Database with spec.name set to postgres , template0 , or template1 is not allowed. Reconciliation and Status Once a Database object is reconciled successfully: status.applied will be set to true . status.observedGeneration will match the metadata.generation of the last applied configuration. Example of a reconciled Database object: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: generation: 1 name: cluster-example-one spec: cluster: name: cluster-example name: one owner: app status: observedGeneration: 1 applied: true If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field. Deleting a Database CloudNativePG supports two methods for database deletion: Using the delete reclaim policy Declaratively setting the database's ensure field to absent Deleting via delete Reclaim Policy The databaseReclaimPolicy field determines the behavior when a Database object is deleted: retain (default): The database remains in PostgreSQL for manual management. delete : The database is automatically removed from PostgreSQL. Example: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-two spec: databaseReclaimPolicy: delete name: two owner: app cluster: name: cluster-example Deleting this Database object will automatically remove the two database from the cluster-example cluster. Declaratively Setting ensure: absent To remove a database, set the ensure field to absent like in the following example:. apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-database-to-drop spec: cluster: name: cluster-example name: database-to-drop owner: app ensure: absent This manifest ensures that the database-to-drop database is removed from the cluster-example cluster. Managing Extensions in a Database Info While extensions are database-scoped rather than global objects, CloudNativePG provides a declarative interface for managing them. This approach is necessary because installing certain extensions may require superuser privileges, which CloudNativePG recommends disabling by default. By leveraging this API, users can efficiently manage extensions in a scalable and controlled manner without requiring elevated privileges. CloudNativePG simplifies and automates the management of PostgreSQL extensions within the target database. To enable this feature, define the spec.extensions field with a list of extension specifications, as shown in the following example: # ... spec: extensions: - name: bloom ensure: present # ... Each extension entry supports the following properties: name (mandatory) : The name of the extension. ensure : Specifies whether the extension should be present or absent in the database: present : Ensures that the extension is installed (default). absent : Ensures that the extension is removed. version : The specific version of the extension to install or upgrade to. schema : The schema in which the extension should be installed. Info CloudNativePG manages extensions using the following PostgreSQL\u2019s SQL commands: CREATE EXTENSION , DROP EXTENSION , ALTER EXTENSION (limited to UPDATE TO and SET SCHEMA ). The operator reconciles only the extensions explicitly listed in spec.extensions . Any existing extensions not specified in this list remain unchanged. Warning Before the introduction of declarative extension management, CloudNativePG did not offer a straightforward way to create extensions through configuration. To address this, the \"managed extensions\" feature was introduced, enabling the automated and transparent management of key extensions like pg_stat_statements . Currently, it is your responsibility to ensure there are no conflicts between extension support in the Database CRD and the managed extensions feature. Managing Schemas in a Database Info Schema management in PostgreSQL is an exception to CloudNativePG's primary focus on managing global objects. Since schemas exist within a database, they are typically managed as part of the application development process. However, CloudNativePG provides a declarative interface for schema management, primarily to complete the support of extensions deployment within schemas. CloudNativePG simplifies and automates the management of PostgreSQL schemas within the target database. To enable this feature, define the spec.schemas field with a list of schema specifications, as shown in the following example: # ... spec: schemas: - name: app owner: app # ... Each schema entry supports the following properties: name (mandatory) : The name of the schema. owner : The owner of the schema. ensure : Specifies whether the schema should be present or absent in the database: present : Ensures that the schema is installed (default). absent : Ensures that the schema is removed. Info CloudNativePG manages schemas using the following PostgreSQL\u2019s SQL commands: CREATE SCHEMA , DROP SCHEMA , ALTER SCHEMA . Limitations and Caveats Renaming a database While CloudNativePG adheres to PostgreSQL\u2019s CREATE DATABASE and ALTER DATABASE commands, renaming databases is not supported . Attempting to modify spec.name in an existing Database object will result in rejection by Kubernetes. Creating vs. Altering a Database For new databases, CloudNativePG uses the CREATE DATABASE statement. For existing databases, ALTER DATABASE is used to apply changes. It is important to note that there are some differences between these two Postgres commands: in particular, the options accepted by ALTER are a subset of those accepted by CREATE . Warning Some fields, such as encoding and collation settings, are immutable in PostgreSQL. Attempts to modify these fields on existing databases will be ignored. Replica Clusters Database objects declared on replica clusters cannot be enforced, as replicas lack write privileges. These objects will remain in a pending state until the replica is promoted. Conflict Resolution If two Database objects in the same namespace manage the same PostgreSQL database (i.e., identical spec.name and spec.cluster.name ), the second object will be rejected. Example status message: status: applied: false message: 'reconciliation error: database \"one\" is already managed by Database object \"cluster-example-one\"' Postgres Version Differences CloudNativePG adheres to PostgreSQL's capabilities. For example, features like ICU_RULES introduced in PostgreSQL 16 are unavailable in earlier versions. Errors from PostgreSQL will be reflected in the Database object's status . Manual Changes CloudNativePG does not overwrite manual changes to databases. Once reconciled, a Database object will not be reapplied unless its metadata.generation changes, giving flexibility for direct PostgreSQL modifications.","title":"PostgreSQL Database Management"},{"location":"declarative_database_management/#postgresql-database-management","text":"CloudNativePG simplifies PostgreSQL database provisioning by automatically creating an application database named app by default. This default behavior is explained in the \"Bootstrap an Empty Cluster\" section. For more advanced use cases, CloudNativePG introduces declarative database management , which empowers users to define and control the lifecycle of PostgreSQL databases using the Database Custom Resource Definition (CRD). This method seamlessly integrates with Kubernetes, providing a scalable, automated, and consistent approach to managing PostgreSQL databases.","title":"PostgreSQL Database Management"},{"location":"declarative_database_management/#key-concepts","text":"","title":"Key Concepts"},{"location":"declarative_database_management/#scope-of-management","text":"Important CloudNativePG manages global objects in PostgreSQL clusters, including databases, roles, and tablespaces. However, it does not manage database content beyond extensions and schemas (e.g., tables). To manage database content, use specialized tools or rely on the applications themselves.","title":"Scope of Management"},{"location":"declarative_database_management/#declarative-database-manifest","text":"The following example demonstrates how a Database resource interacts with a Cluster : apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-one spec: name: one owner: app cluster: name: cluster-example extensions: - name: bloom ensure: present When applied, this manifest creates a Database object called cluster-example-one requesting a database named one , owned by the app role, in the cluster-example PostgreSQL cluster. Info Please refer to the API reference the full list of attributes you can define for each Database object.","title":"Declarative Database Manifest"},{"location":"declarative_database_management/#required-fields-in-the-database-manifest","text":"metadata.name : Unique name of the Kubernetes object within its namespace. spec.name : Name of the database as it will appear in PostgreSQL. spec.owner : PostgreSQL role that owns the database. spec.cluster.name : Name of the target PostgreSQL cluster. The Database object must reference a specific Cluster , determining where the database will be created. It is managed by the cluster's primary instance, ensuring the database is created or updated as needed. Info The distinction between metadata.name and spec.name allows multiple Database resources to reference databases with the same name across different CloudNativePG clusters in the same Kubernetes namespace.","title":"Required Fields in the Database Manifest"},{"location":"declarative_database_management/#reserved-database-names","text":"PostgreSQL automatically creates databases such as postgres , template0 , and template1 . These names are reserved and cannot be used for new Database objects in CloudNativePG. Important Creating a Database with spec.name set to postgres , template0 , or template1 is not allowed.","title":"Reserved Database Names"},{"location":"declarative_database_management/#reconciliation-and-status","text":"Once a Database object is reconciled successfully: status.applied will be set to true . status.observedGeneration will match the metadata.generation of the last applied configuration. Example of a reconciled Database object: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: generation: 1 name: cluster-example-one spec: cluster: name: cluster-example name: one owner: app status: observedGeneration: 1 applied: true If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field.","title":"Reconciliation and Status"},{"location":"declarative_database_management/#deleting-a-database","text":"CloudNativePG supports two methods for database deletion: Using the delete reclaim policy Declaratively setting the database's ensure field to absent","title":"Deleting a Database"},{"location":"declarative_database_management/#deleting-via-delete-reclaim-policy","text":"The databaseReclaimPolicy field determines the behavior when a Database object is deleted: retain (default): The database remains in PostgreSQL for manual management. delete : The database is automatically removed from PostgreSQL. Example: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-two spec: databaseReclaimPolicy: delete name: two owner: app cluster: name: cluster-example Deleting this Database object will automatically remove the two database from the cluster-example cluster.","title":"Deleting via delete Reclaim Policy"},{"location":"declarative_database_management/#declaratively-setting-ensure-absent","text":"To remove a database, set the ensure field to absent like in the following example:. apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-database-to-drop spec: cluster: name: cluster-example name: database-to-drop owner: app ensure: absent This manifest ensures that the database-to-drop database is removed from the cluster-example cluster.","title":"Declaratively Setting ensure: absent"},{"location":"declarative_database_management/#managing-extensions-in-a-database","text":"Info While extensions are database-scoped rather than global objects, CloudNativePG provides a declarative interface for managing them. This approach is necessary because installing certain extensions may require superuser privileges, which CloudNativePG recommends disabling by default. By leveraging this API, users can efficiently manage extensions in a scalable and controlled manner without requiring elevated privileges. CloudNativePG simplifies and automates the management of PostgreSQL extensions within the target database. To enable this feature, define the spec.extensions field with a list of extension specifications, as shown in the following example: # ... spec: extensions: - name: bloom ensure: present # ... Each extension entry supports the following properties: name (mandatory) : The name of the extension. ensure : Specifies whether the extension should be present or absent in the database: present : Ensures that the extension is installed (default). absent : Ensures that the extension is removed. version : The specific version of the extension to install or upgrade to. schema : The schema in which the extension should be installed. Info CloudNativePG manages extensions using the following PostgreSQL\u2019s SQL commands: CREATE EXTENSION , DROP EXTENSION , ALTER EXTENSION (limited to UPDATE TO and SET SCHEMA ). The operator reconciles only the extensions explicitly listed in spec.extensions . Any existing extensions not specified in this list remain unchanged. Warning Before the introduction of declarative extension management, CloudNativePG did not offer a straightforward way to create extensions through configuration. To address this, the \"managed extensions\" feature was introduced, enabling the automated and transparent management of key extensions like pg_stat_statements . Currently, it is your responsibility to ensure there are no conflicts between extension support in the Database CRD and the managed extensions feature.","title":"Managing Extensions in a Database"},{"location":"declarative_database_management/#managing-schemas-in-a-database","text":"Info Schema management in PostgreSQL is an exception to CloudNativePG's primary focus on managing global objects. Since schemas exist within a database, they are typically managed as part of the application development process. However, CloudNativePG provides a declarative interface for schema management, primarily to complete the support of extensions deployment within schemas. CloudNativePG simplifies and automates the management of PostgreSQL schemas within the target database. To enable this feature, define the spec.schemas field with a list of schema specifications, as shown in the following example: # ... spec: schemas: - name: app owner: app # ... Each schema entry supports the following properties: name (mandatory) : The name of the schema. owner : The owner of the schema. ensure : Specifies whether the schema should be present or absent in the database: present : Ensures that the schema is installed (default). absent : Ensures that the schema is removed. Info CloudNativePG manages schemas using the following PostgreSQL\u2019s SQL commands: CREATE SCHEMA , DROP SCHEMA , ALTER SCHEMA .","title":"Managing Schemas in a Database"},{"location":"declarative_database_management/#limitations-and-caveats","text":"","title":"Limitations and Caveats"},{"location":"declarative_database_management/#renaming-a-database","text":"While CloudNativePG adheres to PostgreSQL\u2019s CREATE DATABASE and ALTER DATABASE commands, renaming databases is not supported . Attempting to modify spec.name in an existing Database object will result in rejection by Kubernetes.","title":"Renaming a database"},{"location":"declarative_database_management/#creating-vs-altering-a-database","text":"For new databases, CloudNativePG uses the CREATE DATABASE statement. For existing databases, ALTER DATABASE is used to apply changes. It is important to note that there are some differences between these two Postgres commands: in particular, the options accepted by ALTER are a subset of those accepted by CREATE . Warning Some fields, such as encoding and collation settings, are immutable in PostgreSQL. Attempts to modify these fields on existing databases will be ignored.","title":"Creating vs. Altering a Database"},{"location":"declarative_database_management/#replica-clusters","text":"Database objects declared on replica clusters cannot be enforced, as replicas lack write privileges. These objects will remain in a pending state until the replica is promoted.","title":"Replica Clusters"},{"location":"declarative_database_management/#conflict-resolution","text":"If two Database objects in the same namespace manage the same PostgreSQL database (i.e., identical spec.name and spec.cluster.name ), the second object will be rejected. Example status message: status: applied: false message: 'reconciliation error: database \"one\" is already managed by Database object \"cluster-example-one\"'","title":"Conflict Resolution"},{"location":"declarative_database_management/#postgres-version-differences","text":"CloudNativePG adheres to PostgreSQL's capabilities. For example, features like ICU_RULES introduced in PostgreSQL 16 are unavailable in earlier versions. Errors from PostgreSQL will be reflected in the Database object's status .","title":"Postgres Version Differences"},{"location":"declarative_database_management/#manual-changes","text":"CloudNativePG does not overwrite manual changes to databases. Once reconciled, a Database object will not be reapplied unless its metadata.generation changes, giving flexibility for direct PostgreSQL modifications.","title":"Manual Changes"},{"location":"declarative_hibernation/","text":"Declarative hibernation CloudNativePG is designed to keep PostgreSQL clusters up, running and available anytime. There are some kinds of workloads that require the database to be up only when the workload is active. Batch-driven solutions are one such case. In batch-driven solutions, the database needs to be up only when the batch process is running. The declarative hibernation feature enables saving CPU power by removing the database Pods, while keeping the database PVCs. Hibernation To hibernate a cluster, set the cnpg.io/hibernation=on annotation: $ kubectl annotate cluster <cluster-name> --overwrite cnpg.io/hibernation=on A hibernated cluster won't have any running Pods, while the PVCs are retained so that the cluster can be rehydrated at a later time. Replica PVCs will be kept in addition to the primary's PVC. The hibernation procedure will delete the primary Pod and then the replica Pods, avoiding switchover, to ensure the replicas are kept in sync. The hibernation status can be monitored by looking for the cnpg.io/hibernation condition: $ kubectl get cluster <cluster-name> -o \"jsonpath={.status.conditions[?(.type==\\\"cnpg.io/hibernation\\\")]}\" { \"lastTransitionTime\":\"2023-03-05T16:43:35Z\", \"message\":\"Cluster has been hibernated\", \"reason\":\"Hibernated\", \"status\":\"True\", \"type\":\"cnpg.io/hibernation\" } The hibernation status can also be read with the status sub-command of the cnpg plugin for kubectl : $ kubectl cnpg status <cluster-name> Cluster Summary Name: cluster-example Namespace: default PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:17.5 Primary instance: cluster-example-2 Status: Cluster in healthy state Instances: 3 Ready instances: 0 Hibernation Status Hibernated Message Cluster has been hibernated Time 2023-03-05 16:43:35 +0000 UTC [..] Rehydration To rehydrate a cluster, either set the cnpg.io/hibernation annotation to off : $ kubectl annotate cluster <cluster-name> --overwrite cnpg.io/hibernation=off Or, just unset it altogether: $ kubectl annotate cluster <cluster-name> cnpg.io/hibernation- The Pods will be recreated and the cluster will resume operation.","title":"Declarative hibernation"},{"location":"declarative_hibernation/#declarative-hibernation","text":"CloudNativePG is designed to keep PostgreSQL clusters up, running and available anytime. There are some kinds of workloads that require the database to be up only when the workload is active. Batch-driven solutions are one such case. In batch-driven solutions, the database needs to be up only when the batch process is running. The declarative hibernation feature enables saving CPU power by removing the database Pods, while keeping the database PVCs.","title":"Declarative hibernation"},{"location":"declarative_hibernation/#hibernation","text":"To hibernate a cluster, set the cnpg.io/hibernation=on annotation: $ kubectl annotate cluster <cluster-name> --overwrite cnpg.io/hibernation=on A hibernated cluster won't have any running Pods, while the PVCs are retained so that the cluster can be rehydrated at a later time. Replica PVCs will be kept in addition to the primary's PVC. The hibernation procedure will delete the primary Pod and then the replica Pods, avoiding switchover, to ensure the replicas are kept in sync. The hibernation status can be monitored by looking for the cnpg.io/hibernation condition: $ kubectl get cluster <cluster-name> -o \"jsonpath={.status.conditions[?(.type==\\\"cnpg.io/hibernation\\\")]}\" { \"lastTransitionTime\":\"2023-03-05T16:43:35Z\", \"message\":\"Cluster has been hibernated\", \"reason\":\"Hibernated\", \"status\":\"True\", \"type\":\"cnpg.io/hibernation\" } The hibernation status can also be read with the status sub-command of the cnpg plugin for kubectl : $ kubectl cnpg status <cluster-name> Cluster Summary Name: cluster-example Namespace: default PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:17.5 Primary instance: cluster-example-2 Status: Cluster in healthy state Instances: 3 Ready instances: 0 Hibernation Status Hibernated Message Cluster has been hibernated Time 2023-03-05 16:43:35 +0000 UTC [..]","title":"Hibernation"},{"location":"declarative_hibernation/#rehydration","text":"To rehydrate a cluster, either set the cnpg.io/hibernation annotation to off : $ kubectl annotate cluster <cluster-name> --overwrite cnpg.io/hibernation=off Or, just unset it altogether: $ kubectl annotate cluster <cluster-name> cnpg.io/hibernation- The Pods will be recreated and the cluster will resume operation.","title":"Rehydration"},{"location":"declarative_role_management/","text":"PostgreSQL Role Management From its inception, CloudNativePG has managed the creation of specific roles required in PostgreSQL instances: some reserved users, such as the postgres superuser, streaming_replica and cnpg_pooler_pgbouncer (when the PgBouncer Pooler is used) The application user, set as the low-privilege owner of the application database This process is described in the \"Bootstrap\" section. With the managed stanza in the cluster spec, CloudNativePG now provides full lifecycle management for roles specified in .spec.managed.roles . This feature enables declarative management of existing roles, as well as the creation of new roles if they are not already present in the database. Role creation will occur after the database bootstrapping is complete. An example manifest for a cluster with declarative role management can be found in the file cluster-example-with-roles.yaml . Here is an excerpt from that file: apiVersion: postgresql.cnpg.io/v1 kind: Cluster spec: managed: roles: - name: dante ensure: present comment: Dante Alighieri login: true superuser: false inRoles: - pg_monitor - pg_signal_backend The role specification in .spec.managed.roles adheres to the PostgreSQL structure and naming conventions . Please refer to the API reference for the full list of attributes you can define for each role. A few points are worth noting: The ensure attribute is not part of PostgreSQL. It enables declarative role management to create and remove roles. The two possible values are present (the default) and absent . The inherit attribute is true by default, following PostgreSQL conventions. The connectionLimit attribute defaults to -1, in line with PostgreSQL conventions. Role membership with inRoles defaults to no memberships. Declarative role management ensures that PostgreSQL instances align with the spec. If a user modifies role attributes directly in the database, the CloudNativePG operator will revert those changes during the next reconciliation cycle. Password management The declarative role management feature includes reconciling of role passwords. Passwords are managed in fundamentally different ways in the Kubernetes world and in PostgreSQL, and as a result there are a few things to note. Managed role configurations may optionally specify the name of a Secret where the username and password are stored (encoded in Base64 as is usual in Kubernetes). For example: managed: roles: - name: dante ensure: present [\u2026 snipped \u2026] passwordSecret: name: cluster-example-dante This would assume the existence of a Secret called cluster-example-dante , containing a username and password. The username should match the role we are setting the password for. For example, : apiVersion: v1 data: username: ZGFudGU= password: ZGFudGU= kind: Secret metadata: name: cluster-example-dante labels: cnpg.io/reload: \"true\" type: kubernetes.io/basic-auth If there is no passwordSecret specified for a role, the instance manager will not try to CREATE / ALTER the role with a password. This keeps with PostgreSQL conventions, where ALTER will not update passwords unless directed to with WITH PASSWORD . If a role was initially created with a password, and we would like to set the password to NULL in PostgreSQL, this necessitates being explicit on the part of the user of CloudNativePG. To distinguish \"no password provided in spec\" from \"set the password to NULL\", the field DisablePassword should be used. Imagine we decided we would like to have no password on the dante role in the database. In such case we would specify the following: managed: roles: - name: dante ensure: present [\u2026 snipped \u2026] disablePassword: true NOTE: it is considered an error to set both passwordSecret and disablePassword on a given role. This configuration will be rejected by the validation webhook. Password expiry, VALID UNTIL The VALID UNTIL role attribute in PostgreSQL controls password expiry. Roles created without VALID UNTIL specified get NULL by default in PostgreSQL, meaning that their password will never expire. PostgreSQL uses a timestamp type for VALID UNTIL , which includes support for the value 'infinity' indicating that the password never expires. Please see the PostgreSQL documentation for reference. With declarative role management, the validUntil attribute for managed roles controls password expiry. validUntil can only take: a Kubernetes timestamp, or be omitted (defaulting to null ) In the first case, the given validUntil timestamp will be set in the database as the VALID UNTIL attribute of the role. In the second case (omitted validUntil ) the operator will ensure password never expires, mirroring the behavior of PostgreSQL. Specifically: in case of new role, it will omit the VALID UNTIL clause in the role creation statement in case of existing role, it will set VALID UNTIL to infinity if VALID UNTIL was not set to NULL in the database (this is due to PostgreSQL not allowing VALID UNTIL NULL in the ALTER ROLE SQL statement) Warning New roles created without passwordSecret will have a NULL password inside PostgreSQL. Password hashed You can also provide pre-encrypted passwords by specifying the password in MD5/SCRAM-SHA-256 hash format: kind: Secret type: kubernetes.io/basic-auth metadata: name: cluster-example-cavalcanti labels: cnpg.io/reload: \"true\" apiVersion: v1 stringData: username: cavalcanti password: SCRAM-SHA-256$<iteration count>:<salt>$<StoredKey>:<ServerKey> Unrealizable role configurations In PostgreSQL, in some cases, commands cannot be honored by the database and will be rejected. Please refer to the PostgreSQL documentation on error codes for details. Role operations can produce such fundamental errors. Two examples: We ask PostgreSQL to create the role petrarca as a member of the role (group) poets , but poets does not exist. We ask PostgreSQL to drop the role dante , but the role dante is the owner of the database inferno . These fundamental errors cannot be fixed by the database, nor the CloudNativePG operator, without clarification from the human administrator. The two examples above could be fixed by creating the role poets or dropping the database inferno respectively, but they might have originated due to human error, and in such case, the \"fix\" proposed might be the wrong thing to do. CloudNativePG will record when such fundamental errors occur, and will display them in the cluster Status. Which segues into\u2026 Status of managed roles The Cluster status includes a section for the managed roles' status, as shown below: status: [\u2026snipped\u2026] managedRolesStatus: byStatus: not-managed: - app pending-reconciliation: - dante - petrarca reconciled: - ariosto reserved: - postgres - streaming_replica cannotReconcile: dante: - 'could not perform DELETE on role dante: owner of database inferno' petrarca: - 'could not perform UPDATE_MEMBERSHIPS on role petrarca: role \"poets\" does not exist' Note the special sub-section cannotReconcile for operations the database (and CloudNativePG) cannot honor, and which require human intervention. This section covers roles reserved for operator use and those that are not under declarative management, providing a comprehensive view of the roles in the database instances. The kubectl plugin also shows the status of managed roles in its status sub-command: Managed roles status Status Roles ------ ----- pending-reconciliation petrarca reconciled app,dante reserved postgres,streaming_replica Irreconcilable roles Role Errors ---- ------ petrarca could not perform UPDATE_MEMBERSHIPS on role petrarca: role \"poets\" does not exist Important In terms of backward compatibility, declarative role management is designed to ignore roles that exist in the database but are not included in the spec. The lifecycle of these roles will continue to be managed within PostgreSQL, allowing CloudNativePG users to adopt this feature at their convenience.","title":"PostgreSQL Role Management"},{"location":"declarative_role_management/#postgresql-role-management","text":"From its inception, CloudNativePG has managed the creation of specific roles required in PostgreSQL instances: some reserved users, such as the postgres superuser, streaming_replica and cnpg_pooler_pgbouncer (when the PgBouncer Pooler is used) The application user, set as the low-privilege owner of the application database This process is described in the \"Bootstrap\" section. With the managed stanza in the cluster spec, CloudNativePG now provides full lifecycle management for roles specified in .spec.managed.roles . This feature enables declarative management of existing roles, as well as the creation of new roles if they are not already present in the database. Role creation will occur after the database bootstrapping is complete. An example manifest for a cluster with declarative role management can be found in the file cluster-example-with-roles.yaml . Here is an excerpt from that file: apiVersion: postgresql.cnpg.io/v1 kind: Cluster spec: managed: roles: - name: dante ensure: present comment: Dante Alighieri login: true superuser: false inRoles: - pg_monitor - pg_signal_backend The role specification in .spec.managed.roles adheres to the PostgreSQL structure and naming conventions . Please refer to the API reference for the full list of attributes you can define for each role. A few points are worth noting: The ensure attribute is not part of PostgreSQL. It enables declarative role management to create and remove roles. The two possible values are present (the default) and absent . The inherit attribute is true by default, following PostgreSQL conventions. The connectionLimit attribute defaults to -1, in line with PostgreSQL conventions. Role membership with inRoles defaults to no memberships. Declarative role management ensures that PostgreSQL instances align with the spec. If a user modifies role attributes directly in the database, the CloudNativePG operator will revert those changes during the next reconciliation cycle.","title":"PostgreSQL Role Management"},{"location":"declarative_role_management/#password-management","text":"The declarative role management feature includes reconciling of role passwords. Passwords are managed in fundamentally different ways in the Kubernetes world and in PostgreSQL, and as a result there are a few things to note. Managed role configurations may optionally specify the name of a Secret where the username and password are stored (encoded in Base64 as is usual in Kubernetes). For example: managed: roles: - name: dante ensure: present [\u2026 snipped \u2026] passwordSecret: name: cluster-example-dante This would assume the existence of a Secret called cluster-example-dante , containing a username and password. The username should match the role we are setting the password for. For example, : apiVersion: v1 data: username: ZGFudGU= password: ZGFudGU= kind: Secret metadata: name: cluster-example-dante labels: cnpg.io/reload: \"true\" type: kubernetes.io/basic-auth If there is no passwordSecret specified for a role, the instance manager will not try to CREATE / ALTER the role with a password. This keeps with PostgreSQL conventions, where ALTER will not update passwords unless directed to with WITH PASSWORD . If a role was initially created with a password, and we would like to set the password to NULL in PostgreSQL, this necessitates being explicit on the part of the user of CloudNativePG. To distinguish \"no password provided in spec\" from \"set the password to NULL\", the field DisablePassword should be used. Imagine we decided we would like to have no password on the dante role in the database. In such case we would specify the following: managed: roles: - name: dante ensure: present [\u2026 snipped \u2026] disablePassword: true NOTE: it is considered an error to set both passwordSecret and disablePassword on a given role. This configuration will be rejected by the validation webhook.","title":"Password management"},{"location":"declarative_role_management/#password-expiry-valid-until","text":"The VALID UNTIL role attribute in PostgreSQL controls password expiry. Roles created without VALID UNTIL specified get NULL by default in PostgreSQL, meaning that their password will never expire. PostgreSQL uses a timestamp type for VALID UNTIL , which includes support for the value 'infinity' indicating that the password never expires. Please see the PostgreSQL documentation for reference. With declarative role management, the validUntil attribute for managed roles controls password expiry. validUntil can only take: a Kubernetes timestamp, or be omitted (defaulting to null ) In the first case, the given validUntil timestamp will be set in the database as the VALID UNTIL attribute of the role. In the second case (omitted validUntil ) the operator will ensure password never expires, mirroring the behavior of PostgreSQL. Specifically: in case of new role, it will omit the VALID UNTIL clause in the role creation statement in case of existing role, it will set VALID UNTIL to infinity if VALID UNTIL was not set to NULL in the database (this is due to PostgreSQL not allowing VALID UNTIL NULL in the ALTER ROLE SQL statement) Warning New roles created without passwordSecret will have a NULL password inside PostgreSQL.","title":"Password expiry, VALID UNTIL"},{"location":"declarative_role_management/#password-hashed","text":"You can also provide pre-encrypted passwords by specifying the password in MD5/SCRAM-SHA-256 hash format: kind: Secret type: kubernetes.io/basic-auth metadata: name: cluster-example-cavalcanti labels: cnpg.io/reload: \"true\" apiVersion: v1 stringData: username: cavalcanti password: SCRAM-SHA-256$<iteration count>:<salt>$<StoredKey>:<ServerKey>","title":"Password hashed"},{"location":"declarative_role_management/#unrealizable-role-configurations","text":"In PostgreSQL, in some cases, commands cannot be honored by the database and will be rejected. Please refer to the PostgreSQL documentation on error codes for details. Role operations can produce such fundamental errors. Two examples: We ask PostgreSQL to create the role petrarca as a member of the role (group) poets , but poets does not exist. We ask PostgreSQL to drop the role dante , but the role dante is the owner of the database inferno . These fundamental errors cannot be fixed by the database, nor the CloudNativePG operator, without clarification from the human administrator. The two examples above could be fixed by creating the role poets or dropping the database inferno respectively, but they might have originated due to human error, and in such case, the \"fix\" proposed might be the wrong thing to do. CloudNativePG will record when such fundamental errors occur, and will display them in the cluster Status. Which segues into\u2026","title":"Unrealizable role configurations"},{"location":"declarative_role_management/#status-of-managed-roles","text":"The Cluster status includes a section for the managed roles' status, as shown below: status: [\u2026snipped\u2026] managedRolesStatus: byStatus: not-managed: - app pending-reconciliation: - dante - petrarca reconciled: - ariosto reserved: - postgres - streaming_replica cannotReconcile: dante: - 'could not perform DELETE on role dante: owner of database inferno' petrarca: - 'could not perform UPDATE_MEMBERSHIPS on role petrarca: role \"poets\" does not exist' Note the special sub-section cannotReconcile for operations the database (and CloudNativePG) cannot honor, and which require human intervention. This section covers roles reserved for operator use and those that are not under declarative management, providing a comprehensive view of the roles in the database instances. The kubectl plugin also shows the status of managed roles in its status sub-command: Managed roles status Status Roles ------ ----- pending-reconciliation petrarca reconciled app,dante reserved postgres,streaming_replica Irreconcilable roles Role Errors ---- ------ petrarca could not perform UPDATE_MEMBERSHIPS on role petrarca: role \"poets\" does not exist Important In terms of backward compatibility, declarative role management is designed to ignore roles that exist in the database but are not included in the spec. The lifecycle of these roles will continue to be managed within PostgreSQL, allowing CloudNativePG users to adopt this feature at their convenience.","title":"Status of managed roles"},{"location":"e2e/","text":"End-to-End Tests CloudNativePG is automatically tested after each commit via a suite of End-to-end (E2E) tests (or integration tests) which ensure that the operator correctly deploys and manages PostgreSQL clusters. Kubernetes versions 1.27 through 1.32, and PostgreSQL versions 13 through 17, are tested for each commit, helping detect bugs at an early stage of the development process. For each tested version of Kubernetes and PostgreSQL, a Kubernetes cluster is created using kind , run on the GitHub Actions platform, and the following suite of E2E tests are performed on that cluster: Basic: Installation of the operator Creation of a Cluster Usage of a persistent volume for data storage Service connectivity: Connection via services, including read-only Connection via user-provided server and/or client certificates PgBouncer Self-healing: Failover Switchover Primary endpoint switch in case of failover in less than 10 seconds Primary endpoint switch in case of switchover in less than 20 seconds Recover from a degraded state in less than 60 seconds PVC Deletion Corrupted PVC Backup and Restore: Backup and restore from Volume Snapshots Backup and ScheduledBackups execution using Barman Cloud on S3 Backup and ScheduledBackups execution using Barman Cloud on Azure blob storage Restore from backup using Barman Cloud on S3 Restore from backup using Barman Cloud on Azure blob storage Point-in-time recovery (PITR) on Azure, S3 storage Wal-Restore (sequential / parallel) Operator: Operator Deployment Operator configuration via ConfigMap Operator pod deletion Operator pod eviction Operator upgrade Operator High Availability Observability: Metrics collection PgBouncer Metrics JSON log format Replication: Replication Slots Synchronous replication Scale-up and scale-down of a Cluster Logical replication via declarative Publication / Subscription Replica clusters Bootstrapping a replica cluster from backup Bootstrapping a replica cluster via streaming Bootstrapping via volume snapshots Detaching a replica cluster Plugin: Cluster Hibernation using CNPG plugin Fencing Creation of a connection certificate Postgres Configuration: Manage PostgreSQL configuration changes Rolling updates when changing PostgreSQL images Rolling updates when changing ImageCatalog/ClusterImageCatalog images Rolling updates on hot standby sensitive parameter changes Database initialization via InitDB Pod Scheduling: Tolerations and taints Pod affinity using NodeSelector Rolling updates on PodSpec drift detection In-place upgrades Multi-Arch availability Cluster Metadata: ConfigMap for Cluster Labels and Annotations Object metadata Recovery: Data corruption pg_basebackup Importing Databases: Microservice approach Monolith approach Storage: Storage expansion Dedicated PG_WAL persistent volume Security: AppArmor annotation propagation. Executed only on Azure environment Maintenance: Node Drain with maintenance window Node Drain with single-instance cluster with/without Pod Disruption Budgets Hibernation Declarative hibernation / rehydration Volume snapshots Backup/restore for cold and online snapshots Point-in-time recovery (PITR) for cold and online snapshots Backups via plugin for cold and online snapshots Declarative backups for cold and online snapshots Managed Roles Creation and update of managed roles Password maintenance using Kubernetes secrets Tablespaces Declarative creation of tablespaces Declarative creation of temporary tablespaces Backup / recovery from object storage Backup / recovery from volume snapshots Declarative databases Declarative creation of databases with default (retain) reclaim policy Declarative creation of databases with delete reclaim policy Major version upgrade Upgrade to the latest major version","title":"End-to-End Tests"},{"location":"e2e/#end-to-end-tests","text":"CloudNativePG is automatically tested after each commit via a suite of End-to-end (E2E) tests (or integration tests) which ensure that the operator correctly deploys and manages PostgreSQL clusters. Kubernetes versions 1.27 through 1.32, and PostgreSQL versions 13 through 17, are tested for each commit, helping detect bugs at an early stage of the development process. For each tested version of Kubernetes and PostgreSQL, a Kubernetes cluster is created using kind , run on the GitHub Actions platform, and the following suite of E2E tests are performed on that cluster: Basic: Installation of the operator Creation of a Cluster Usage of a persistent volume for data storage Service connectivity: Connection via services, including read-only Connection via user-provided server and/or client certificates PgBouncer Self-healing: Failover Switchover Primary endpoint switch in case of failover in less than 10 seconds Primary endpoint switch in case of switchover in less than 20 seconds Recover from a degraded state in less than 60 seconds PVC Deletion Corrupted PVC Backup and Restore: Backup and restore from Volume Snapshots Backup and ScheduledBackups execution using Barman Cloud on S3 Backup and ScheduledBackups execution using Barman Cloud on Azure blob storage Restore from backup using Barman Cloud on S3 Restore from backup using Barman Cloud on Azure blob storage Point-in-time recovery (PITR) on Azure, S3 storage Wal-Restore (sequential / parallel) Operator: Operator Deployment Operator configuration via ConfigMap Operator pod deletion Operator pod eviction Operator upgrade Operator High Availability Observability: Metrics collection PgBouncer Metrics JSON log format Replication: Replication Slots Synchronous replication Scale-up and scale-down of a Cluster Logical replication via declarative Publication / Subscription Replica clusters Bootstrapping a replica cluster from backup Bootstrapping a replica cluster via streaming Bootstrapping via volume snapshots Detaching a replica cluster Plugin: Cluster Hibernation using CNPG plugin Fencing Creation of a connection certificate Postgres Configuration: Manage PostgreSQL configuration changes Rolling updates when changing PostgreSQL images Rolling updates when changing ImageCatalog/ClusterImageCatalog images Rolling updates on hot standby sensitive parameter changes Database initialization via InitDB Pod Scheduling: Tolerations and taints Pod affinity using NodeSelector Rolling updates on PodSpec drift detection In-place upgrades Multi-Arch availability Cluster Metadata: ConfigMap for Cluster Labels and Annotations Object metadata Recovery: Data corruption pg_basebackup Importing Databases: Microservice approach Monolith approach Storage: Storage expansion Dedicated PG_WAL persistent volume Security: AppArmor annotation propagation. Executed only on Azure environment Maintenance: Node Drain with maintenance window Node Drain with single-instance cluster with/without Pod Disruption Budgets Hibernation Declarative hibernation / rehydration Volume snapshots Backup/restore for cold and online snapshots Point-in-time recovery (PITR) for cold and online snapshots Backups via plugin for cold and online snapshots Declarative backups for cold and online snapshots Managed Roles Creation and update of managed roles Password maintenance using Kubernetes secrets Tablespaces Declarative creation of tablespaces Declarative creation of temporary tablespaces Backup / recovery from object storage Backup / recovery from volume snapshots Declarative databases Declarative creation of databases with default (retain) reclaim policy Declarative creation of databases with delete reclaim policy Major version upgrade Upgrade to the latest major version","title":"End-to-End Tests"},{"location":"failover/","text":"Automated failover In the case of unexpected errors on the primary for longer than the .spec.failoverDelay (by default 0 seconds), the cluster will go into failover mode . This may happen, for example, when: The primary pod has a disk failure The primary pod is deleted The postgres container on the primary has any kind of sustained failure In the failover scenario, the primary cannot be assumed to be working properly. After cases like the ones above, the readiness probe for the primary pod will start failing. This will be picked up in the controller's reconciliation loop. The controller will initiate the failover process, in two steps: First, it will mark the TargetPrimary as pending . This change of state will force the primary pod to shutdown, to ensure the WAL receivers on the replicas will stop. The cluster will be marked in failover phase (\"Failing over\"). Once all WAL receivers are stopped, there will be a leader election, and a new primary will be named. The chosen instance will initiate promotion to primary, and, after this is completed, the cluster will resume normal operations. Meanwhile, the former primary pod will restart, detect that it is no longer the primary, and become a replica node. Important The two-phase procedure helps ensure the WAL receivers can stop in an orderly fashion, and that the failing primary will not start streaming WALs again upon restart. These safeguards prevent timeline discrepancies between the new primary and the replicas. During the time the failing primary is being shut down: It will first try a PostgreSQL's fast shutdown with .spec.switchoverDelay seconds as timeout. This graceful shutdown will attempt to archive pending WALs. If the fast shutdown fails, or its timeout is exceeded, a PostgreSQL's immediate shutdown is initiated. Info \"Fast\" mode does not wait for PostgreSQL clients to disconnect and will terminate an online backup in progress. All active transactions are rolled back and clients are forcibly disconnected, then the server is shut down. \"Immediate\" mode will abort all PostgreSQL server processes immediately, without a clean shutdown. RTO and RPO impact Failover may result in the service being impacted ( RTO ) and/or data being lost ( RPO ): During the time when the primary has started to fail, and before the controller starts failover procedures, queries in transit, WAL writes, checkpoints and similar operations, may fail. Once the fast shutdown command has been issued, the cluster will no longer accept connections, so service will be impacted but no data will be lost. If the fast shutdown fails, the immediate shutdown will stop any pending processes, including WAL writing. Data may be lost. During the time the primary is shutting down and a new primary hasn't yet started, the cluster will operate without a primary and thus be impaired - but with no data loss. Note The timeout that controls fast shutdown is set by .spec.switchoverDelay , as in the case of a switchover. Increasing the time for fast shutdown is safer from an RPO point of view, but possibly delays the return to normal operation - negatively affecting RTO. Warning As already mentioned in the \"Instance Manager\" section when explaining the switchover process, the .spec.switchoverDelay option affects the RPO and RTO of your PostgreSQL database. Setting it to a low value, might favor RTO over RPO but lead to data loss at cluster level and/or backup level. On the contrary, setting it to a high value, might remove the risk of data loss while leaving the cluster without an active primary for a longer time during the switchover. Delayed failover As anticipated above, the .spec.failoverDelay option allows you to delay the start of the failover procedure by a number of seconds after the primary has been detected to be unhealthy. By default, this setting is set to 0 , triggering the failover procedure immediately. Sometimes failing over to a new primary can be more disruptive than waiting for the primary to come back online. This is especially true of network disruptions where multiple tiers are affected (i.e., downstream logical subscribers) or when the time to perform the failover is longer than the expected outage. Enabling a new configuration option to delay failover provides a mechanism to prevent premature failover for short-lived network or node instability.","title":"Automated failover"},{"location":"failover/#automated-failover","text":"In the case of unexpected errors on the primary for longer than the .spec.failoverDelay (by default 0 seconds), the cluster will go into failover mode . This may happen, for example, when: The primary pod has a disk failure The primary pod is deleted The postgres container on the primary has any kind of sustained failure In the failover scenario, the primary cannot be assumed to be working properly. After cases like the ones above, the readiness probe for the primary pod will start failing. This will be picked up in the controller's reconciliation loop. The controller will initiate the failover process, in two steps: First, it will mark the TargetPrimary as pending . This change of state will force the primary pod to shutdown, to ensure the WAL receivers on the replicas will stop. The cluster will be marked in failover phase (\"Failing over\"). Once all WAL receivers are stopped, there will be a leader election, and a new primary will be named. The chosen instance will initiate promotion to primary, and, after this is completed, the cluster will resume normal operations. Meanwhile, the former primary pod will restart, detect that it is no longer the primary, and become a replica node. Important The two-phase procedure helps ensure the WAL receivers can stop in an orderly fashion, and that the failing primary will not start streaming WALs again upon restart. These safeguards prevent timeline discrepancies between the new primary and the replicas. During the time the failing primary is being shut down: It will first try a PostgreSQL's fast shutdown with .spec.switchoverDelay seconds as timeout. This graceful shutdown will attempt to archive pending WALs. If the fast shutdown fails, or its timeout is exceeded, a PostgreSQL's immediate shutdown is initiated. Info \"Fast\" mode does not wait for PostgreSQL clients to disconnect and will terminate an online backup in progress. All active transactions are rolled back and clients are forcibly disconnected, then the server is shut down. \"Immediate\" mode will abort all PostgreSQL server processes immediately, without a clean shutdown.","title":"Automated failover"},{"location":"failover/#rto-and-rpo-impact","text":"Failover may result in the service being impacted ( RTO ) and/or data being lost ( RPO ): During the time when the primary has started to fail, and before the controller starts failover procedures, queries in transit, WAL writes, checkpoints and similar operations, may fail. Once the fast shutdown command has been issued, the cluster will no longer accept connections, so service will be impacted but no data will be lost. If the fast shutdown fails, the immediate shutdown will stop any pending processes, including WAL writing. Data may be lost. During the time the primary is shutting down and a new primary hasn't yet started, the cluster will operate without a primary and thus be impaired - but with no data loss. Note The timeout that controls fast shutdown is set by .spec.switchoverDelay , as in the case of a switchover. Increasing the time for fast shutdown is safer from an RPO point of view, but possibly delays the return to normal operation - negatively affecting RTO. Warning As already mentioned in the \"Instance Manager\" section when explaining the switchover process, the .spec.switchoverDelay option affects the RPO and RTO of your PostgreSQL database. Setting it to a low value, might favor RTO over RPO but lead to data loss at cluster level and/or backup level. On the contrary, setting it to a high value, might remove the risk of data loss while leaving the cluster without an active primary for a longer time during the switchover.","title":"RTO and RPO impact"},{"location":"failover/#delayed-failover","text":"As anticipated above, the .spec.failoverDelay option allows you to delay the start of the failover procedure by a number of seconds after the primary has been detected to be unhealthy. By default, this setting is set to 0 , triggering the failover procedure immediately. Sometimes failing over to a new primary can be more disruptive than waiting for the primary to come back online. This is especially true of network disruptions where multiple tiers are affected (i.e., downstream logical subscribers) or when the time to perform the failover is longer than the expected outage. Enabling a new configuration option to delay failover provides a mechanism to prevent premature failover for short-lived network or node instability.","title":"Delayed failover"},{"location":"failure_modes/","text":"Failure Modes Note In previous versions of CloudNativePG, this page included specific failure scenarios. Since these largely follow standard Kubernetes behavior, we have streamlined the content to avoid duplication of information that belongs to the underlying Kubernetes stack and is not specific to CloudNativePG. CloudNativePG adheres to standard Kubernetes principles for self-healing and high availability. We assume familiarity with core Kubernetes concepts such as storage classes, PVCs, nodes, and Pods. For CloudNativePG-specific details, refer to the \"Postgres Instance Manager\" section , which covers startup, liveness, and readiness probes, as well as the self-healing section below. Important If you are running CloudNativePG in production, we strongly recommend seeking professional support . Self-Healing Primary Failure If the primary Pod fails: The operator promotes the most up-to-date standby with the lowest replication lag. The -rw service is updated to point to the new primary. The failed Pod is removed from the -r and -rw services. Standby Pods begin replicating from the new primary. The former primary uses pg_rewind to re-synchronize if its PVC is available; otherwise, a new standby is created from a backup of the new primary. Standby Failure If a standby Pod fails: It is removed from the -r and -ro services. The Pod is restarted using its PVC if available; otherwise, a new Pod is created from a backup of the current primary. Once ready, the Pod is re-added to the -r and -ro services. Manual Intervention For failure scenarios not covered by automated recovery, manual intervention may be required. Important Do not perform manual operations without professional support . Disabling Reconciliation To temporarily disable the reconciliation loop for a PostgreSQL cluster, use the cnpg.io/reconciliationLoop annotation: metadata: name: cluster-example-no-reconcile annotations: cnpg.io/reconciliationLoop: \"disabled\" spec: # ... Use this annotation with extreme caution and only during emergency operations. Warning This annotation should be removed as soon as the issue is resolved. Leaving it in place prevents the operator from executing self-healing actions, including failover.","title":"Failure Modes"},{"location":"failure_modes/#failure-modes","text":"Note In previous versions of CloudNativePG, this page included specific failure scenarios. Since these largely follow standard Kubernetes behavior, we have streamlined the content to avoid duplication of information that belongs to the underlying Kubernetes stack and is not specific to CloudNativePG. CloudNativePG adheres to standard Kubernetes principles for self-healing and high availability. We assume familiarity with core Kubernetes concepts such as storage classes, PVCs, nodes, and Pods. For CloudNativePG-specific details, refer to the \"Postgres Instance Manager\" section , which covers startup, liveness, and readiness probes, as well as the self-healing section below. Important If you are running CloudNativePG in production, we strongly recommend seeking professional support .","title":"Failure Modes"},{"location":"failure_modes/#self-healing","text":"","title":"Self-Healing"},{"location":"failure_modes/#primary-failure","text":"If the primary Pod fails: The operator promotes the most up-to-date standby with the lowest replication lag. The -rw service is updated to point to the new primary. The failed Pod is removed from the -r and -rw services. Standby Pods begin replicating from the new primary. The former primary uses pg_rewind to re-synchronize if its PVC is available; otherwise, a new standby is created from a backup of the new primary.","title":"Primary Failure"},{"location":"failure_modes/#standby-failure","text":"If a standby Pod fails: It is removed from the -r and -ro services. The Pod is restarted using its PVC if available; otherwise, a new Pod is created from a backup of the current primary. Once ready, the Pod is re-added to the -r and -ro services.","title":"Standby Failure"},{"location":"failure_modes/#manual-intervention","text":"For failure scenarios not covered by automated recovery, manual intervention may be required. Important Do not perform manual operations without professional support .","title":"Manual Intervention"},{"location":"failure_modes/#disabling-reconciliation","text":"To temporarily disable the reconciliation loop for a PostgreSQL cluster, use the cnpg.io/reconciliationLoop annotation: metadata: name: cluster-example-no-reconcile annotations: cnpg.io/reconciliationLoop: \"disabled\" spec: # ... Use this annotation with extreme caution and only during emergency operations. Warning This annotation should be removed as soon as the issue is resolved. Leaving it in place prevents the operator from executing self-healing actions, including failover.","title":"Disabling Reconciliation"},{"location":"faq/","text":"Frequently Asked Questions (FAQ) Running PostgreSQL in Kubernetes Everyone knows that stateful workloads like PostgreSQL cannot run in Kubernetes. Why do you say the contrary? An independent research survey commissioned by the Data on Kubernetes Community in September 2021 revealed that half of the respondents run most of their production workloads on Kubernetes. 90% of them believe that Kubernetes is ready for stateful workloads, and 70% of them run databases in production. Databases like Postgres. However, according to them, significant challenges remain, such as the knowledge gap (Kubernetes and Cloud Native, in general, have a steep learning curve) and the quality of Kubernetes operators. The latter is the reason why we believe that an operator like CloudNativePG highly contributes to the success of your project. For database fanatics like us, a real game-changer has been the introduction of the support for local persistent volumes in Kubernetes 1.14 in April 2019 . CloudNativePG is built on immutable application containers. What does it mean? According to the microservice architectural pattern, a container is designed to run a single application or process. As a result, such container images are built to run the main application as the single entry point (the so-called PID 1 process). In Kubernetes terms, the application is referred to as workload. Workloads can be stateless like a web application server or stateful like a database. Mapping this concept to PostgreSQL, an immutable application container is a single \"postgres\" process that is running and tied to a single and specific version - the one in the immutable container image. No other processes such as SSH or systemd, or syslog are allowed. Immutable Application Containers are in contrast with Mutable System Containers, which are still a very common way to interpret and use containers. Immutable means that a container won't be modified during its life: no updates, no patches, no configuration changes. If you must update the application code or apply a patch, you build a new image and redeploy it. Immutability makes deployments safer and more repeatable. For more information, please refer to \"Why EDB chose immutable application containers\" . What does Cloud Native mean? The Cloud Native Computing Foundation defines the term \" Cloud Native \". However, since the start of the Cloud Native PostgreSQL/CloudNativePG operator at 2ndQuadrant, the development team has been interpreting Cloud Native as three main concepts: An existing, healthy, genuine, and prosperous DevOps culture, founded on people, as well as principles and processes, which enables teams and organizations (as teams of teams) to continuously change so to innovate and accelerate the delivery of outcomes and produce value for the business in safer, more efficient, and more engaging ways A microservice architecture that is based on Immutable Application Containers A way to manage and orchestrate these containers, such as Kubernetes Currently, the standard de facto for container orchestration is Kubernetes, which automates the deployment, administration and scalability of Cloud Native Applications. Another definition of Cloud Native that resonates with us is the one defined by Ibryam and Hu\u00df in \"Kubernetes Patterns\", published by O'Reilly : Principles, Patterns, Tools to automate containerized microservices at scale Can I run CloudNativePG on bare metal Kubernetes? Yes, definitely. You can run Kubernetes on bare metal. And you can dedicate one or more physical worker nodes with locally attached storage to PostgreSQL workloads for maximum and predictable I/O performance. The actual Cloud Native PostgreSQL project, from which CloudNativePG originated, was born after a pilot project in 2019 that benchmarked storage and PostgreSQL on the same bare metal server, first directly in Linux, and then inside Kubernetes. As expected, the experiment showed only negligible performance impact introduced by the container running in Kubernetes through local persistent volumes, allowing the Cloud Native initiative to continue. Why should I use PostgreSQL replication instead of file system replication? Please read the \"Architecture: Synchronizing the state\" section. Why should I use an operator instead of running PostgreSQL as a container? The most basic approach to running PostgreSQL in Kubernetes is to have a pod, which is the smallest unit of deployment in Kubernetes, running a Postgres container with no replica. The volume hosting the Postgres data directory is mounted on the pod, and it usually resides on network storage. In this case, Kubernetes restarts the pod in case of a problem or moves it to another Kubernetes node. The most sophisticated approach is to run PostgreSQL using an operator. An operator is an extension of the Kubernetes controller and defines how a complex application works in business continuity contexts. The operator pattern is currently state of the art in Kubernetes for this purpose. An operator simulates the work of a human operator in an automated and programmatic way. Postgres is a complex application, and an operator not only needs to deploy a cluster (the first step), but also properly react after unexpected events. The typical example is that of a failover. An operator relies on Kubernetes for capabilities like self-healing, scalability, replication, high availability, backup, recovery, updates, access, resource control, storage management, and so on. It also facilitates the integration of a PostgreSQL cluster in the log management and monitoring infrastructure. CloudNativePG enables the definition of the desired state of a PostgreSQL cluster via declarative configuration. Kubernetes continuously makes sure that the current state of the infrastructure matches the desired one through reconciliation loops initiated by the Kubernetes controller. If the desired state and the actual state don't match, reconciliation loops trigger self-healing procedures. That's where an operator like CloudNativePG comes into play. Are there any other operators for Postgres out there? Yes, of course. And our advice is that you look at all of them and compare them with CloudNativePG before making your decision. You will see that most of these operators use an external failover management tool (Patroni or similar) and rely on StatefulSets. Here is a non exhaustive list, in chronological order from their publication on GitHub: Crunchy Data Postgres Operator (2017) Zalando Postgres Operator (2017) Stackgres (2020) Percona Operator for PostgreSQL (2021) Kubegres (2021) Feel free to report any relevant missing entry as a PR. Info The Data on Kubernetes Community (which includes some of our maintainers) is working on an independent and vendor neutral project to list the operators called Operator Feature Matrix . You say that CloudNativePG is a fully declarative operator. What do you mean by that? The easiest way is to explain declarative configuration through an example that highlights the differences with imperative configuration. In an imperative context, the state is defined as a series of tasks to be executed in sequence. So, we can get a three-node PostgreSQL cluster by creating the first instance, configuring the replication, cloning a second instance, and the third one. In a declarative approach, the state of a system is defined using configuration, namely: there's a PostgreSQL 13 cluster with two replicas. This approach highly simplifies change management operations, and when these are stored in source control systems like Git, it enables the Infrastructure as Code capability. And Kubernetes takes it farther than deployment, as it makes sure that our request is fulfilled at any time. What are the required skills to run PostgreSQL on Kubernetes? Running PostgreSQL on Kubernetes requires both PostgreSQL and Kubernetes skills in your DevOps team. The best experience is when database administrators familiarize themselves with Kubernetes core concepts and are able to interact with Kubernetes administrators. Our advice is for everyone that wants to fully exploit Cloud Native PostgreSQL to acquire the \"Certified Kubernetes Administrator (CKA)\" status from the CNCF certification program. Why isn't CloudNativePG using StatefulSets? CloudNativePG does not rely on StatefulSet resources, and instead manages the underlying PVCs directly by leveraging the selected storage class for dynamic provisioning. Please refer to the \"Custom Pod Controller\" section for details and reasons behind this decision. High availability What happens to the PostgreSQL clusters when the operator pod dies or it is not available for a certain amount of time? The CloudNativePG operator, among other things, is responsible for self-healing capabilities. As such, they might not be available during an outage of the operator. However, assuming that the outage does not affect the nodes where PostgreSQL clusters are running, the database will continue to serve normal operations, through the relevant Kubernetes services. Moreover, the instance manager , which runs inside each PostgreSQL pod will still work, making sure that the database server is up, including accessory services like logging, export of metrics, continuous archiving of WAL files, etc. To summarize: an outage of the operator does not necessarily imply a PostgreSQL database outage; it's like running a database without a DBA or system administrator. What are the reasons behind CloudNativePG not relying on a failover management tool like Patroni, repmgr, or Stolon? Although part of the team that develops CloudNativePG has been heavily involved in repmgr in the past, we decided to take a different approach and directly extend the Kubernetes controller and rely on the Kubernetes API server to hold the status of a Postgres cluster, and use it as the only source of truth to: control High Availability of a Postgres cluster primarily via automated failover and switchover, coordinating itself with the instance manager control the Kubernetes services, that is the entry points for your applications Should I manually resync a former primary with the new one following a failover? No. The operator does that automatically for you, and relies on pg_rewind to synchronize the former primary with the new one. Database management Why should I use PostgreSQL? We believe that PostgreSQL is the equivalent in the database area of what Linux represents in the operating system space. The current latest major version of Postgres is version 16, which ships out of the box: native streaming replication, both physical and logical continuous hot backup and point in time recovery declarative partitioning for horizontal table partitioning, which is a very well-known technique in the database area to improve vertical scalability on a single instance extensibility, with extensions like PostGIS for geographical databases parallel queries for vertical scalability JSON support, unleashing the multi-model hybrid database for both structured and unstructured data queried via standard SQL And so on ... How many databases should be hosted in a single PostgreSQL instance? Our recommendation is to dedicate a single PostgreSQL cluster (intended as primary and multiple standby servers) to a single database, entirely managed by a single microservice application. However, by leveraging the \"postgres\" superuser, it is possible to create as many users and databases as desired (subject to the available resources). The reason for this recommendation lies in the Cloud Native concept, based on microservices. In a pure microservice architecture, the microservice itself should own the data it manages exclusively. These could be flat files, queues, key-value stores, or, in our case, a PostgreSQL relational database containing both structured and unstructured data. The general idea is that only the microservice can access the database, including schema management and migrations. CloudNativePG has been designed to work this way out of the box, by default creating an application user and an application database owned by the aforementioned application user. Reserving a PostgreSQL instance to a single microservice owned database, enhances: resource management: in PostgreSQL, CPU, and memory constrained resources are generally handled at the instance level, not the database level, making it easier to integrate it with Kubernetes resource management policies at the pod level physical continuous backup and Point-In-Time-Recovery (PITR): given that PostgreSQL handles continuous backup and recovery at the instance level, having one database per instance simplifies PITR operations, differentiates retention policy management, and increases data protection of backups application updates: enable each application to decide their update policies without impacting other databases owned by different applications database updates: each application can decide which PostgreSQL version to use, and independently, when to upgrade to a different major version of PostgreSQL and at what conditions (e.g., cutover time) Is there an upper limit in database size for not considering Kubernetes? No, as Kubernetes is no different from virtual machines and bare metal as far as this is regarded. Practically, however, it depends on the available resources of your Kubernetes cluster. Our advice with very large databases (VLDB) is to consider a shared nothing architecture, where a Kubernetes worker node is dedicated to a single Postgres instance, with dedicated storage. We proved that this extreme architectural pattern works when we benchmarked running PostgreSQL on bare metal Kubernetes with local persistent volumes . Tablespaces and horizontal partitioning are data modeling techniques that you can use to improve the vertical scalability of you databases. How can I specify a time zone in the PostgreSQL cluster? PostgreSQL has an extensive support for time zones, as explained in the official documentation: Date time data types Client connections config options Although time zones can even be used at session, transaction and even as part of a query in PostgreSQL, a very common way is to set them up globally. With CloudNativePG you can configure the cluster level time zone in the .spec.postgresql.parameters section as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: pg-italy spec: instances: 1 postgresql: parameters: timezone: \"Europe/Rome\" storage: size: 1Gi The time zone can be verified with: $ kubectl exec -ti pg-italy-1 -c postgres -- psql -x -c \"SHOW timezone\" -[ RECORD 1 ]--------- TimeZone | Europe/Rome What is the recommended architecture for best business continuity outcomes? As covered in the \"Architecture\" section, the main recommendation is to adopt shared nothing architectures as much as possible, by leveraging the native capabilities and resources that Kubernetes provides in a single cluster, namely: availability zones: spread your instances across different availability zones in the same Kubernetes cluster worker nodes: as a consequence, make sure that your Postgres instances reside on different Kubernetes worker nodes storage: use dedicated storage for each worker node running Postgres Use at least one standby, preferably at least two, so that you can configure synchronous replication in the cluster, introducing RPO =0 for high availability. If you do not have availability zones - normally the case of on-premise installations - separate on worker nodes and storage. Properly setup continuous backup on a local/regional object store. The same architecture that is in a single Kubernetes cluster can be replicated in another Kubernetes cluster (normally in another geographical area or region) through the replica cluster feature, providing disaster recovery and high availability at global scale. You can use the WAL archive in the primary object store to feed the replica in the other region, without having to provide a streaming connection, if the default maximum RPO of 5 minutes is enough for you. How can instances be stopped or started? Please look at \"Fencing\" or \"Hibernation\" . What are the global objects such as roles and databases that are automatically created by CloudNativePG? The operator automatically creates a user for the application (by default called app ) and a database for the application (by default called app ) which is owned by the aforementioned user. This way, the database is ready for a microservice adoption, as developers can control migrations using the app user, without requiring superuser access. Teams can then create another user for read-write operations through the \"Declarative role management\" feature and assign the required GRANT to the tables.","title":"Frequently Asked Questions (FAQ)"},{"location":"faq/#frequently-asked-questions-faq","text":"","title":"Frequently Asked Questions (FAQ)"},{"location":"faq/#running-postgresql-in-kubernetes","text":"Everyone knows that stateful workloads like PostgreSQL cannot run in Kubernetes. Why do you say the contrary? An independent research survey commissioned by the Data on Kubernetes Community in September 2021 revealed that half of the respondents run most of their production workloads on Kubernetes. 90% of them believe that Kubernetes is ready for stateful workloads, and 70% of them run databases in production. Databases like Postgres. However, according to them, significant challenges remain, such as the knowledge gap (Kubernetes and Cloud Native, in general, have a steep learning curve) and the quality of Kubernetes operators. The latter is the reason why we believe that an operator like CloudNativePG highly contributes to the success of your project. For database fanatics like us, a real game-changer has been the introduction of the support for local persistent volumes in Kubernetes 1.14 in April 2019 . CloudNativePG is built on immutable application containers. What does it mean? According to the microservice architectural pattern, a container is designed to run a single application or process. As a result, such container images are built to run the main application as the single entry point (the so-called PID 1 process). In Kubernetes terms, the application is referred to as workload. Workloads can be stateless like a web application server or stateful like a database. Mapping this concept to PostgreSQL, an immutable application container is a single \"postgres\" process that is running and tied to a single and specific version - the one in the immutable container image. No other processes such as SSH or systemd, or syslog are allowed. Immutable Application Containers are in contrast with Mutable System Containers, which are still a very common way to interpret and use containers. Immutable means that a container won't be modified during its life: no updates, no patches, no configuration changes. If you must update the application code or apply a patch, you build a new image and redeploy it. Immutability makes deployments safer and more repeatable. For more information, please refer to \"Why EDB chose immutable application containers\" . What does Cloud Native mean? The Cloud Native Computing Foundation defines the term \" Cloud Native \". However, since the start of the Cloud Native PostgreSQL/CloudNativePG operator at 2ndQuadrant, the development team has been interpreting Cloud Native as three main concepts: An existing, healthy, genuine, and prosperous DevOps culture, founded on people, as well as principles and processes, which enables teams and organizations (as teams of teams) to continuously change so to innovate and accelerate the delivery of outcomes and produce value for the business in safer, more efficient, and more engaging ways A microservice architecture that is based on Immutable Application Containers A way to manage and orchestrate these containers, such as Kubernetes Currently, the standard de facto for container orchestration is Kubernetes, which automates the deployment, administration and scalability of Cloud Native Applications. Another definition of Cloud Native that resonates with us is the one defined by Ibryam and Hu\u00df in \"Kubernetes Patterns\", published by O'Reilly : Principles, Patterns, Tools to automate containerized microservices at scale Can I run CloudNativePG on bare metal Kubernetes? Yes, definitely. You can run Kubernetes on bare metal. And you can dedicate one or more physical worker nodes with locally attached storage to PostgreSQL workloads for maximum and predictable I/O performance. The actual Cloud Native PostgreSQL project, from which CloudNativePG originated, was born after a pilot project in 2019 that benchmarked storage and PostgreSQL on the same bare metal server, first directly in Linux, and then inside Kubernetes. As expected, the experiment showed only negligible performance impact introduced by the container running in Kubernetes through local persistent volumes, allowing the Cloud Native initiative to continue. Why should I use PostgreSQL replication instead of file system replication? Please read the \"Architecture: Synchronizing the state\" section. Why should I use an operator instead of running PostgreSQL as a container? The most basic approach to running PostgreSQL in Kubernetes is to have a pod, which is the smallest unit of deployment in Kubernetes, running a Postgres container with no replica. The volume hosting the Postgres data directory is mounted on the pod, and it usually resides on network storage. In this case, Kubernetes restarts the pod in case of a problem or moves it to another Kubernetes node. The most sophisticated approach is to run PostgreSQL using an operator. An operator is an extension of the Kubernetes controller and defines how a complex application works in business continuity contexts. The operator pattern is currently state of the art in Kubernetes for this purpose. An operator simulates the work of a human operator in an automated and programmatic way. Postgres is a complex application, and an operator not only needs to deploy a cluster (the first step), but also properly react after unexpected events. The typical example is that of a failover. An operator relies on Kubernetes for capabilities like self-healing, scalability, replication, high availability, backup, recovery, updates, access, resource control, storage management, and so on. It also facilitates the integration of a PostgreSQL cluster in the log management and monitoring infrastructure. CloudNativePG enables the definition of the desired state of a PostgreSQL cluster via declarative configuration. Kubernetes continuously makes sure that the current state of the infrastructure matches the desired one through reconciliation loops initiated by the Kubernetes controller. If the desired state and the actual state don't match, reconciliation loops trigger self-healing procedures. That's where an operator like CloudNativePG comes into play. Are there any other operators for Postgres out there? Yes, of course. And our advice is that you look at all of them and compare them with CloudNativePG before making your decision. You will see that most of these operators use an external failover management tool (Patroni or similar) and rely on StatefulSets. Here is a non exhaustive list, in chronological order from their publication on GitHub: Crunchy Data Postgres Operator (2017) Zalando Postgres Operator (2017) Stackgres (2020) Percona Operator for PostgreSQL (2021) Kubegres (2021) Feel free to report any relevant missing entry as a PR. Info The Data on Kubernetes Community (which includes some of our maintainers) is working on an independent and vendor neutral project to list the operators called Operator Feature Matrix . You say that CloudNativePG is a fully declarative operator. What do you mean by that? The easiest way is to explain declarative configuration through an example that highlights the differences with imperative configuration. In an imperative context, the state is defined as a series of tasks to be executed in sequence. So, we can get a three-node PostgreSQL cluster by creating the first instance, configuring the replication, cloning a second instance, and the third one. In a declarative approach, the state of a system is defined using configuration, namely: there's a PostgreSQL 13 cluster with two replicas. This approach highly simplifies change management operations, and when these are stored in source control systems like Git, it enables the Infrastructure as Code capability. And Kubernetes takes it farther than deployment, as it makes sure that our request is fulfilled at any time. What are the required skills to run PostgreSQL on Kubernetes? Running PostgreSQL on Kubernetes requires both PostgreSQL and Kubernetes skills in your DevOps team. The best experience is when database administrators familiarize themselves with Kubernetes core concepts and are able to interact with Kubernetes administrators. Our advice is for everyone that wants to fully exploit Cloud Native PostgreSQL to acquire the \"Certified Kubernetes Administrator (CKA)\" status from the CNCF certification program. Why isn't CloudNativePG using StatefulSets? CloudNativePG does not rely on StatefulSet resources, and instead manages the underlying PVCs directly by leveraging the selected storage class for dynamic provisioning. Please refer to the \"Custom Pod Controller\" section for details and reasons behind this decision.","title":"Running PostgreSQL in Kubernetes"},{"location":"faq/#high-availability","text":"What happens to the PostgreSQL clusters when the operator pod dies or it is not available for a certain amount of time? The CloudNativePG operator, among other things, is responsible for self-healing capabilities. As such, they might not be available during an outage of the operator. However, assuming that the outage does not affect the nodes where PostgreSQL clusters are running, the database will continue to serve normal operations, through the relevant Kubernetes services. Moreover, the instance manager , which runs inside each PostgreSQL pod will still work, making sure that the database server is up, including accessory services like logging, export of metrics, continuous archiving of WAL files, etc. To summarize: an outage of the operator does not necessarily imply a PostgreSQL database outage; it's like running a database without a DBA or system administrator. What are the reasons behind CloudNativePG not relying on a failover management tool like Patroni, repmgr, or Stolon? Although part of the team that develops CloudNativePG has been heavily involved in repmgr in the past, we decided to take a different approach and directly extend the Kubernetes controller and rely on the Kubernetes API server to hold the status of a Postgres cluster, and use it as the only source of truth to: control High Availability of a Postgres cluster primarily via automated failover and switchover, coordinating itself with the instance manager control the Kubernetes services, that is the entry points for your applications Should I manually resync a former primary with the new one following a failover? No. The operator does that automatically for you, and relies on pg_rewind to synchronize the former primary with the new one.","title":"High availability"},{"location":"faq/#database-management","text":"Why should I use PostgreSQL? We believe that PostgreSQL is the equivalent in the database area of what Linux represents in the operating system space. The current latest major version of Postgres is version 16, which ships out of the box: native streaming replication, both physical and logical continuous hot backup and point in time recovery declarative partitioning for horizontal table partitioning, which is a very well-known technique in the database area to improve vertical scalability on a single instance extensibility, with extensions like PostGIS for geographical databases parallel queries for vertical scalability JSON support, unleashing the multi-model hybrid database for both structured and unstructured data queried via standard SQL And so on ... How many databases should be hosted in a single PostgreSQL instance? Our recommendation is to dedicate a single PostgreSQL cluster (intended as primary and multiple standby servers) to a single database, entirely managed by a single microservice application. However, by leveraging the \"postgres\" superuser, it is possible to create as many users and databases as desired (subject to the available resources). The reason for this recommendation lies in the Cloud Native concept, based on microservices. In a pure microservice architecture, the microservice itself should own the data it manages exclusively. These could be flat files, queues, key-value stores, or, in our case, a PostgreSQL relational database containing both structured and unstructured data. The general idea is that only the microservice can access the database, including schema management and migrations. CloudNativePG has been designed to work this way out of the box, by default creating an application user and an application database owned by the aforementioned application user. Reserving a PostgreSQL instance to a single microservice owned database, enhances: resource management: in PostgreSQL, CPU, and memory constrained resources are generally handled at the instance level, not the database level, making it easier to integrate it with Kubernetes resource management policies at the pod level physical continuous backup and Point-In-Time-Recovery (PITR): given that PostgreSQL handles continuous backup and recovery at the instance level, having one database per instance simplifies PITR operations, differentiates retention policy management, and increases data protection of backups application updates: enable each application to decide their update policies without impacting other databases owned by different applications database updates: each application can decide which PostgreSQL version to use, and independently, when to upgrade to a different major version of PostgreSQL and at what conditions (e.g., cutover time) Is there an upper limit in database size for not considering Kubernetes? No, as Kubernetes is no different from virtual machines and bare metal as far as this is regarded. Practically, however, it depends on the available resources of your Kubernetes cluster. Our advice with very large databases (VLDB) is to consider a shared nothing architecture, where a Kubernetes worker node is dedicated to a single Postgres instance, with dedicated storage. We proved that this extreme architectural pattern works when we benchmarked running PostgreSQL on bare metal Kubernetes with local persistent volumes . Tablespaces and horizontal partitioning are data modeling techniques that you can use to improve the vertical scalability of you databases. How can I specify a time zone in the PostgreSQL cluster? PostgreSQL has an extensive support for time zones, as explained in the official documentation: Date time data types Client connections config options Although time zones can even be used at session, transaction and even as part of a query in PostgreSQL, a very common way is to set them up globally. With CloudNativePG you can configure the cluster level time zone in the .spec.postgresql.parameters section as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: pg-italy spec: instances: 1 postgresql: parameters: timezone: \"Europe/Rome\" storage: size: 1Gi The time zone can be verified with: $ kubectl exec -ti pg-italy-1 -c postgres -- psql -x -c \"SHOW timezone\" -[ RECORD 1 ]--------- TimeZone | Europe/Rome What is the recommended architecture for best business continuity outcomes? As covered in the \"Architecture\" section, the main recommendation is to adopt shared nothing architectures as much as possible, by leveraging the native capabilities and resources that Kubernetes provides in a single cluster, namely: availability zones: spread your instances across different availability zones in the same Kubernetes cluster worker nodes: as a consequence, make sure that your Postgres instances reside on different Kubernetes worker nodes storage: use dedicated storage for each worker node running Postgres Use at least one standby, preferably at least two, so that you can configure synchronous replication in the cluster, introducing RPO =0 for high availability. If you do not have availability zones - normally the case of on-premise installations - separate on worker nodes and storage. Properly setup continuous backup on a local/regional object store. The same architecture that is in a single Kubernetes cluster can be replicated in another Kubernetes cluster (normally in another geographical area or region) through the replica cluster feature, providing disaster recovery and high availability at global scale. You can use the WAL archive in the primary object store to feed the replica in the other region, without having to provide a streaming connection, if the default maximum RPO of 5 minutes is enough for you. How can instances be stopped or started? Please look at \"Fencing\" or \"Hibernation\" . What are the global objects such as roles and databases that are automatically created by CloudNativePG? The operator automatically creates a user for the application (by default called app ) and a database for the application (by default called app ) which is owned by the aforementioned user. This way, the database is ready for a microservice adoption, as developers can control migrations using the app user, without requiring superuser access. Teams can then create another user for read-write operations through the \"Declarative role management\" feature and assign the required GRANT to the tables.","title":"Database management"},{"location":"fencing/","text":"Fencing Fencing in CloudNativePG is the ultimate process of protecting the data in one, more, or even all instances of a PostgreSQL cluster when they appear to be malfunctioning. When an instance is fenced, the PostgreSQL server process ( postmaster ) is guaranteed to be shut down, while the pod is kept running. This makes sure that, until the fence is lifted, data on the pod is not modified by PostgreSQL and that the file system can be investigated for debugging and troubleshooting purposes. How to fence instances In CloudNativePG you can fence: a specific instance a list of instances an entire Postgres Cluster Fencing is controlled through the content of the cnpg.io/fencedInstances annotation, which expects a JSON formatted list of instance names. If the annotation is set to '[\"*\"]' , a singleton list with a wildcard, the whole cluster is fenced. If the annotation is set to an empty JSON list, the operator behaves as if the annotation was not set. For example: cnpg.io/fencedInstances: '[\"cluster-example-1\"]' will fence just the cluster-example-1 instance cnpg.io/fencedInstances: '[\"cluster-example-1\",\"cluster-example-2\"]' will fence the cluster-example-1 and cluster-example-2 instances cnpg.io/fencedInstances: '[\"*\"]' will fence every instance in the cluster. The annotation can be manually set on the Kubernetes object, for example via the kubectl annotate command, or in a transparent way using the kubectl cnpg fencing on subcommand: # to fence only one instance kubectl cnpg fencing on cluster-example 1 # to fence all the instances in a Cluster kubectl cnpg fencing on cluster-example \"*\" Here is an example of a Cluster with an instance that was previously fenced: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: annotations: cnpg.io/fencedInstances: '[\"cluster-example-1\"]' [...] How to lift fencing Fencing can be lifted by clearing the annotation, or set it to a different value. As for fencing, this can be done either manually with kubectl annotate , or using the kubectl cnpg fencing subcommand as follows: # to lift the fencing only for one instance # N.B.: at the moment this won't work if the whole cluster was fenced previously, # in that case you will have to manually set the annotation as explained above kubectl cnpg fencing off cluster-example 1 # to lift the fencing for all the instances in a Cluster kubectl cnpg fencing off cluster-example \"*\" How fencing works Once an instance is set for fencing, the procedure to shut down the postmaster process is initiated, identical to the one of the switchover. This consists of an initial fast shutdown with a timeout set to .spec.switchoverDelay , followed by an immediate shutdown. Then: the Pod will be kept alive the Pod won't be marked as Ready all the changes that don't require the Postgres instance to be up will be reconciled, including: configuration files certificates and all the cryptographic material metrics will not be collected, except cnpg_collector_fencing_on which will be set to 1 Warning If a primary instance is fenced, its postmaster process is shut down but no failover is performed, interrupting the operativity of the applications. When the fence will be lifted, the primary instance will be started up again without performing a failover. Given that, we advise users to fence primary instances only if strictly required. If a fenced instance is deleted, the pod will be recreated normally, but the postmaster won't be started. This can be extremely helpful when instances are Crashlooping .","title":"Fencing"},{"location":"fencing/#fencing","text":"Fencing in CloudNativePG is the ultimate process of protecting the data in one, more, or even all instances of a PostgreSQL cluster when they appear to be malfunctioning. When an instance is fenced, the PostgreSQL server process ( postmaster ) is guaranteed to be shut down, while the pod is kept running. This makes sure that, until the fence is lifted, data on the pod is not modified by PostgreSQL and that the file system can be investigated for debugging and troubleshooting purposes.","title":"Fencing"},{"location":"fencing/#how-to-fence-instances","text":"In CloudNativePG you can fence: a specific instance a list of instances an entire Postgres Cluster Fencing is controlled through the content of the cnpg.io/fencedInstances annotation, which expects a JSON formatted list of instance names. If the annotation is set to '[\"*\"]' , a singleton list with a wildcard, the whole cluster is fenced. If the annotation is set to an empty JSON list, the operator behaves as if the annotation was not set. For example: cnpg.io/fencedInstances: '[\"cluster-example-1\"]' will fence just the cluster-example-1 instance cnpg.io/fencedInstances: '[\"cluster-example-1\",\"cluster-example-2\"]' will fence the cluster-example-1 and cluster-example-2 instances cnpg.io/fencedInstances: '[\"*\"]' will fence every instance in the cluster. The annotation can be manually set on the Kubernetes object, for example via the kubectl annotate command, or in a transparent way using the kubectl cnpg fencing on subcommand: # to fence only one instance kubectl cnpg fencing on cluster-example 1 # to fence all the instances in a Cluster kubectl cnpg fencing on cluster-example \"*\" Here is an example of a Cluster with an instance that was previously fenced: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: annotations: cnpg.io/fencedInstances: '[\"cluster-example-1\"]' [...]","title":"How to fence instances"},{"location":"fencing/#how-to-lift-fencing","text":"Fencing can be lifted by clearing the annotation, or set it to a different value. As for fencing, this can be done either manually with kubectl annotate , or using the kubectl cnpg fencing subcommand as follows: # to lift the fencing only for one instance # N.B.: at the moment this won't work if the whole cluster was fenced previously, # in that case you will have to manually set the annotation as explained above kubectl cnpg fencing off cluster-example 1 # to lift the fencing for all the instances in a Cluster kubectl cnpg fencing off cluster-example \"*\"","title":"How to lift fencing"},{"location":"fencing/#how-fencing-works","text":"Once an instance is set for fencing, the procedure to shut down the postmaster process is initiated, identical to the one of the switchover. This consists of an initial fast shutdown with a timeout set to .spec.switchoverDelay , followed by an immediate shutdown. Then: the Pod will be kept alive the Pod won't be marked as Ready all the changes that don't require the Postgres instance to be up will be reconciled, including: configuration files certificates and all the cryptographic material metrics will not be collected, except cnpg_collector_fencing_on which will be set to 1 Warning If a primary instance is fenced, its postmaster process is shut down but no failover is performed, interrupting the operativity of the applications. When the fence will be lifted, the primary instance will be started up again without performing a failover. Given that, we advise users to fence primary instances only if strictly required. If a fenced instance is deleted, the pod will be recreated normally, but the postmaster won't be started. This can be extremely helpful when instances are Crashlooping .","title":"How fencing works"},{"location":"image_catalog/","text":"Image Catalog ImageCatalog and ClusterImageCatalog are essential resources that empower you to define images for creating a Cluster . The key distinction lies in their scope: an ImageCatalog is namespaced, while a ClusterImageCatalog is cluster-scoped. Both share a common structure, comprising a list of images, each equipped with a major field indicating the major version of the image. Warning The operator places trust in the user-defined major version and refrains from conducting any PostgreSQL version detection. It is the user's responsibility to ensure alignment between the declared major version in the catalog and the PostgreSQL image. The major field's value must remain unique within a catalog, preventing duplication across images. Distinct catalogs, however, may expose different images under the same major value. Example of a Namespaced ImageCatalog : apiVersion: postgresql.cnpg.io/v1 kind: ImageCatalog metadata: name: postgresql namespace: default spec: images: - major: 15 image: ghcr.io/cloudnative-pg/postgresql:15.6 - major: 16 image: ghcr.io/cloudnative-pg/postgresql:16.8 - major: 17 image: ghcr.io/cloudnative-pg/postgresql:17.5 Example of a Cluster-Wide Catalog using ClusterImageCatalog Resource: apiVersion: postgresql.cnpg.io/v1 kind: ClusterImageCatalog metadata: name: postgresql spec: images: - major: 15 image: ghcr.io/cloudnative-pg/postgresql:15.6 - major: 16 image: ghcr.io/cloudnative-pg/postgresql:16.8 - major: 17 image: ghcr.io/cloudnative-pg/postgresql:17.5 A Cluster resource has the flexibility to reference either an ImageCatalog or a ClusterImageCatalog to precisely specify the desired image. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 imageCatalogRef: apiGroup: postgresql.cnpg.io kind: ImageCatalog name: postgresql major: 16 storage: size: 1Gi Clusters utilizing these catalogs maintain continuous monitoring. Any alterations to the images within a catalog trigger automatic updates for all associated clusters referencing that specific entry. CloudNativePG Catalogs The CloudNativePG project maintains ClusterImageCatalogs for the images it provides. These catalogs are regularly updated with the latest images for each major version. By applying the ClusterImageCatalog.yaml file from the CloudNativePG project's GitHub repositories, cluster administrators can ensure that their clusters are automatically updated to the latest version within the specified major release. PostgreSQL Container Images You can install the latest version of the cluster catalog for the PostgreSQL Container Images ( cloudnative-pg/postgres-containers repository) with: kubectl apply \\ -f https://raw.githubusercontent.com/cloudnative-pg/postgres-containers/main/Debian/ClusterImageCatalog-bookworm.yaml PostGIS Container Images You can install the latest version of the cluster catalog for the PostGIS Container Images ( cloudnative-pg/postgis-containers repository) with: kubectl apply \\ -f https://raw.githubusercontent.com/cloudnative-pg/postgis-containers/main/PostGIS/ClusterImageCatalog.yaml","title":"Image Catalog"},{"location":"image_catalog/#image-catalog","text":"ImageCatalog and ClusterImageCatalog are essential resources that empower you to define images for creating a Cluster . The key distinction lies in their scope: an ImageCatalog is namespaced, while a ClusterImageCatalog is cluster-scoped. Both share a common structure, comprising a list of images, each equipped with a major field indicating the major version of the image. Warning The operator places trust in the user-defined major version and refrains from conducting any PostgreSQL version detection. It is the user's responsibility to ensure alignment between the declared major version in the catalog and the PostgreSQL image. The major field's value must remain unique within a catalog, preventing duplication across images. Distinct catalogs, however, may expose different images under the same major value. Example of a Namespaced ImageCatalog : apiVersion: postgresql.cnpg.io/v1 kind: ImageCatalog metadata: name: postgresql namespace: default spec: images: - major: 15 image: ghcr.io/cloudnative-pg/postgresql:15.6 - major: 16 image: ghcr.io/cloudnative-pg/postgresql:16.8 - major: 17 image: ghcr.io/cloudnative-pg/postgresql:17.5 Example of a Cluster-Wide Catalog using ClusterImageCatalog Resource: apiVersion: postgresql.cnpg.io/v1 kind: ClusterImageCatalog metadata: name: postgresql spec: images: - major: 15 image: ghcr.io/cloudnative-pg/postgresql:15.6 - major: 16 image: ghcr.io/cloudnative-pg/postgresql:16.8 - major: 17 image: ghcr.io/cloudnative-pg/postgresql:17.5 A Cluster resource has the flexibility to reference either an ImageCatalog or a ClusterImageCatalog to precisely specify the desired image. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 imageCatalogRef: apiGroup: postgresql.cnpg.io kind: ImageCatalog name: postgresql major: 16 storage: size: 1Gi Clusters utilizing these catalogs maintain continuous monitoring. Any alterations to the images within a catalog trigger automatic updates for all associated clusters referencing that specific entry.","title":"Image Catalog"},{"location":"image_catalog/#cloudnativepg-catalogs","text":"The CloudNativePG project maintains ClusterImageCatalogs for the images it provides. These catalogs are regularly updated with the latest images for each major version. By applying the ClusterImageCatalog.yaml file from the CloudNativePG project's GitHub repositories, cluster administrators can ensure that their clusters are automatically updated to the latest version within the specified major release.","title":"CloudNativePG Catalogs"},{"location":"image_catalog/#postgresql-container-images","text":"You can install the latest version of the cluster catalog for the PostgreSQL Container Images ( cloudnative-pg/postgres-containers repository) with: kubectl apply \\ -f https://raw.githubusercontent.com/cloudnative-pg/postgres-containers/main/Debian/ClusterImageCatalog-bookworm.yaml","title":"PostgreSQL Container Images"},{"location":"image_catalog/#postgis-container-images","text":"You can install the latest version of the cluster catalog for the PostGIS Container Images ( cloudnative-pg/postgis-containers repository) with: kubectl apply \\ -f https://raw.githubusercontent.com/cloudnative-pg/postgis-containers/main/PostGIS/ClusterImageCatalog.yaml","title":"PostGIS Container Images"},{"location":"installation_upgrade/","text":"Installation and upgrades Installation on Kubernetes Directly using the operator manifest The operator can be installed like any other resource in Kubernetes, through a YAML manifest applied via kubectl . You can install the latest operator manifest for this minor release as follows: kubectl apply --server-side -f \\ https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/releases/cnpg-1.26.0-rc3.yaml You can verify that with: kubectl rollout status deployment \\ -n cnpg-system cnpg-controller-manager Using the cnpg plugin for kubectl You can use the cnpg plugin to override the default configuration options that are in the static manifests. For example, to generate the default latest manifest but change the watch namespaces to only be a specific namespace, you could run: kubectl cnpg install generate \\ --watch-namespace \"specific-namespace\" \\ > cnpg_for_specific_namespace.yaml Please refer to \" cnpg plugin\" documentation for a more comprehensive example. Warning If you are deploying CloudNativePG on GKE and get an error ( ... failed to call webhook... ), be aware that by default traffic between worker nodes and control plane is blocked by the firewall except for a few specific ports, as explained in the official docs and by this issue . You'll need to either change the targetPort in the webhook service, to be one of the allowed ones, or open the webhooks' port ( 9443 ) on the firewall. Testing the latest development snapshot If you want to test or evaluate the latest development snapshot of CloudNativePG before the next official patch release, you can download the manifests from the cloudnative-pg/artifacts which provides easy access to the current trunk (main) as well as to each supported release. For example, you can install the latest snapshot of the operator with: curl -sSfL \\ https://raw.githubusercontent.com/cloudnative-pg/artifacts/main/manifests/operator-manifest.yaml | \\ kubectl apply --server-side -f - If you are instead looking for the latest snapshot of the operator for this specific minor release, you can just run: curl -sSfL \\ https://raw.githubusercontent.com/cloudnative-pg/artifacts/release-1.26/manifests/operator-manifest.yaml | \\ kubectl apply --server-side -f - Important Snapshots are not supported by the CloudNativePG Community, and are not intended for use in production. Using the Helm Chart The operator can be installed using the provided Helm chart . Using OLM CloudNativePG can also be installed via the Operator Lifecycle Manager (OLM) directly from OperatorHub.io . For deployments on Red Hat OpenShift, EDB offers and fully supports a certified version of CloudNativePG, available through the Red Hat OpenShift Container Platform . Details about the deployment In Kubernetes, the operator is by default installed in the cnpg-system namespace as a Kubernetes Deployment . The name of this deployment depends on the installation method. When installed through the manifest or the cnpg plugin, it is called cnpg-controller-manager by default. When installed via Helm, the default name is cnpg-cloudnative-pg . Note With Helm you can customize the name of the deployment via the fullnameOverride field in the \"values.yaml\" file . You can get more information using the describe command in kubectl : $ kubectl get deployments -n cnpg-system NAME READY UP-TO-DATE AVAILABLE AGE <deployment-name> 1/1 1 1 18m kubectl describe deploy \\ -n cnpg-system \\ <deployment-name> As with any Deployment, it sits on top of a ReplicaSet and supports rolling upgrades. The default configuration of the CloudNativePG operator comes with a Deployment of a single replica, which is suitable for most installations. In case the node where the pod is running is not reachable anymore, the pod will be rescheduled on another node. If you require high availability at the operator level, it is possible to specify multiple replicas in the Deployment configuration - given that the operator supports leader election. Also, you can take advantage of taints and tolerations to make sure that the operator does not run on the same nodes where the actual PostgreSQL clusters are running (this might even include the control plane for self-managed Kubernetes installations). Operator configuration You can change the default behavior of the operator by overriding some default options. For more information, please refer to the \"Operator configuration\" section. Upgrades Important Please carefully read the release notes before performing an upgrade as some versions might require extra steps. Upgrading CloudNativePG operator is a two-step process: upgrade the controller and the related Kubernetes resources upgrade the instance manager running in every PostgreSQL pod Unless differently stated in the release notes, the first step is normally done by applying the manifest of the newer version for plain Kubernetes installations, or using the native package manager of the used distribution (please follow the instructions in the above sections). The second step is automatically triggered after updating the controller. By default, this initiates a rolling update of every deployed PostgreSQL cluster, upgrading one instance at a time to use the new instance manager. The rolling update concludes with a switchover, which is governed by the primaryUpdateStrategy option. The default value, unsupervised , completes the switchover automatically. If set to supervised , the user must manually promote the new primary instance using the cnpg plugin for kubectl . Rolling updates This process is discussed in-depth on the Rolling Updates page. Important In case primaryUpdateStrategy is set to the default value of unsupervised , an upgrade of the operator will trigger a switchover on your PostgreSQL cluster, causing a (normally negligible) downtime. If your PostgreSQL Cluster has only one instance, the instance will be automatically restarted as supervised value is not supported for primaryUpdateStrategy . In either case, your applications will have to reconnect to PostgreSQL. The default rolling update behavior can be replaced with in-place updates of the instance manager. This approach does not require a restart of the PostgreSQL instance, thereby avoiding a switchover within the cluster. This feature, which is disabled by default, is described in detail below. Spread Upgrades By default, all PostgreSQL clusters are rolled out simultaneously, which may lead to a spike in resource usage, especially when managing multiple clusters. CloudNativePG provides two configuration options at the operator level that allow you to introduce delays between cluster roll-outs or even between instances within the same cluster, helping to distribute resource usage over time: CLUSTERS_ROLLOUT_DELAY : Defines the number of seconds to wait between roll-outs of different PostgreSQL clusters (default: 0 ). INSTANCES_ROLLOUT_DELAY : Defines the number of seconds to wait between roll-outs of individual instances within the same PostgreSQL cluster (default: 0 ). In-place updates of the instance manager By default, CloudNativePG issues a rolling update of the cluster every time the operator is updated. The new instance manager shipped with the operator is added to each PostgreSQL pod via an init container. However, this behavior can be changed via configuration to enable in-place updates of the instance manager, which is the PID 1 process that keeps the container alive. Internally, each instance manager in CloudNativePG supports the injection of a new executable that replaces the existing one after successfully completing an integrity verification phase and gracefully terminating all internal processes. Upon restarting with the new binary, the instance manager seamlessly adopts the already running postmaster . As a result, the PostgreSQL process is unaffected by the update, refraining from the need to perform a switchover. The other side of the coin, is that the Pod is changed after the start, breaking the pure concept of immutability. You can enable this feature by setting the ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES environment variable to 'true' in the operator configuration . The in-place upgrade process will not change the init container image inside the Pods. Therefore, the Pod definition will not reflect the current version of the operator. Compatibility among versions CloudNativePG follows semantic versioning. Every release of the operator within the same API version is compatible with the previous one. The current API version is v1, corresponding to versions 1.x.y of the operator. In addition to new features, new versions of the operator contain bug fixes and stability enhancements. Because of this, we strongly encourage users to upgrade to the latest version of the operator , as each version is released in order to maintain the most secure and stable Postgres environment. CloudNativePG currently releases new versions of the operator at least monthly. If you are unable to apply updates as each version becomes available, we recommend upgrading through each version in sequential order to come current periodically and not skipping versions. The release notes page contains a detailed list of the changes introduced in every released version of CloudNativePG, and it must be read before upgrading to a newer version of the software. Most versions are directly upgradable and in that case, applying the newer manifest for plain Kubernetes installations or using the native package manager of the chosen distribution is enough. When versions are not directly upgradable, the old version needs to be removed before installing the new one. This won't affect user data but only the operator itself. Upgrading to 1.25 from a previous minor version Warning Every time you are upgrading to a higher minor release, make sure you go through the release notes and upgrade instructions of all the intermediate minor releases. For example, if you want to move from 1.23.x to 1.25, make sure you go through the release notes and upgrade instructions for 1.24 and 1.25. No changes to existing 1.24 cluster configurations are required when upgrading to 1.25. Upgrading to 1.24 from a previous minor version From Replica Clusters to Distributed Topology One of the key enhancements in CloudNativePG 1.24.0 is the upgrade of the replica cluster feature. The former replica cluster feature, now referred to as the \"Standalone Replica Cluster,\" is no longer recommended for Disaster Recovery (DR) and High Availability (HA) scenarios that span multiple Kubernetes clusters. Standalone replica clusters are best suited for read-only workloads, such as reporting, OLAP, or creating development environments with test data. For DR and HA purposes, CloudNativePG now introduces the Distributed Topology strategy for replica clusters. This new strategy allows you to build PostgreSQL clusters across private, public, hybrid, and multi-cloud environments, spanning multiple regions and potentially different cloud providers. It also provides an API to control the switchover operation, ensuring that only one cluster acts as the primary at any given time. This Distributed Topology strategy enhances resilience and scalability, making it a robust solution for modern, distributed applications that require high availability and disaster recovery capabilities across diverse infrastructure setups. You can seamlessly transition from a previous replica cluster configuration to a distributed topology by modifying all the Cluster resources involved in the distributed PostgreSQL setup. Ensure the following steps are taken: Configure the externalClusters section to include all the clusters involved in the distributed topology. We strongly suggest using the same configuration across all Cluster resources for maintainability and consistency. Configure the primary and source fields in the .spec.replica stanza to reflect the distributed topology. The primary field should contain the name of the current primary cluster in the distributed topology, while the source field should contain the name of the cluster each Cluster resource is replicating from. It is important to note that the enabled field, which was previously set to true or false , should now be unset (default). For more information, please refer to the \"Distributed Topology\" section for replica clusters .","title":"Installation and upgrades"},{"location":"installation_upgrade/#installation-and-upgrades","text":"","title":"Installation and upgrades"},{"location":"installation_upgrade/#installation-on-kubernetes","text":"","title":"Installation on Kubernetes"},{"location":"installation_upgrade/#directly-using-the-operator-manifest","text":"The operator can be installed like any other resource in Kubernetes, through a YAML manifest applied via kubectl . You can install the latest operator manifest for this minor release as follows: kubectl apply --server-side -f \\ https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/releases/cnpg-1.26.0-rc3.yaml You can verify that with: kubectl rollout status deployment \\ -n cnpg-system cnpg-controller-manager","title":"Directly using the operator manifest"},{"location":"installation_upgrade/#using-the-cnpg-plugin-for-kubectl","text":"You can use the cnpg plugin to override the default configuration options that are in the static manifests. For example, to generate the default latest manifest but change the watch namespaces to only be a specific namespace, you could run: kubectl cnpg install generate \\ --watch-namespace \"specific-namespace\" \\ > cnpg_for_specific_namespace.yaml Please refer to \" cnpg plugin\" documentation for a more comprehensive example. Warning If you are deploying CloudNativePG on GKE and get an error ( ... failed to call webhook... ), be aware that by default traffic between worker nodes and control plane is blocked by the firewall except for a few specific ports, as explained in the official docs and by this issue . You'll need to either change the targetPort in the webhook service, to be one of the allowed ones, or open the webhooks' port ( 9443 ) on the firewall.","title":"Using the cnpg plugin for kubectl"},{"location":"installation_upgrade/#testing-the-latest-development-snapshot","text":"If you want to test or evaluate the latest development snapshot of CloudNativePG before the next official patch release, you can download the manifests from the cloudnative-pg/artifacts which provides easy access to the current trunk (main) as well as to each supported release. For example, you can install the latest snapshot of the operator with: curl -sSfL \\ https://raw.githubusercontent.com/cloudnative-pg/artifacts/main/manifests/operator-manifest.yaml | \\ kubectl apply --server-side -f - If you are instead looking for the latest snapshot of the operator for this specific minor release, you can just run: curl -sSfL \\ https://raw.githubusercontent.com/cloudnative-pg/artifacts/release-1.26/manifests/operator-manifest.yaml | \\ kubectl apply --server-side -f - Important Snapshots are not supported by the CloudNativePG Community, and are not intended for use in production.","title":"Testing the latest development snapshot"},{"location":"installation_upgrade/#using-the-helm-chart","text":"The operator can be installed using the provided Helm chart .","title":"Using the Helm Chart"},{"location":"installation_upgrade/#using-olm","text":"CloudNativePG can also be installed via the Operator Lifecycle Manager (OLM) directly from OperatorHub.io . For deployments on Red Hat OpenShift, EDB offers and fully supports a certified version of CloudNativePG, available through the Red Hat OpenShift Container Platform .","title":"Using OLM"},{"location":"installation_upgrade/#details-about-the-deployment","text":"In Kubernetes, the operator is by default installed in the cnpg-system namespace as a Kubernetes Deployment . The name of this deployment depends on the installation method. When installed through the manifest or the cnpg plugin, it is called cnpg-controller-manager by default. When installed via Helm, the default name is cnpg-cloudnative-pg . Note With Helm you can customize the name of the deployment via the fullnameOverride field in the \"values.yaml\" file . You can get more information using the describe command in kubectl : $ kubectl get deployments -n cnpg-system NAME READY UP-TO-DATE AVAILABLE AGE <deployment-name> 1/1 1 1 18m kubectl describe deploy \\ -n cnpg-system \\ <deployment-name> As with any Deployment, it sits on top of a ReplicaSet and supports rolling upgrades. The default configuration of the CloudNativePG operator comes with a Deployment of a single replica, which is suitable for most installations. In case the node where the pod is running is not reachable anymore, the pod will be rescheduled on another node. If you require high availability at the operator level, it is possible to specify multiple replicas in the Deployment configuration - given that the operator supports leader election. Also, you can take advantage of taints and tolerations to make sure that the operator does not run on the same nodes where the actual PostgreSQL clusters are running (this might even include the control plane for self-managed Kubernetes installations). Operator configuration You can change the default behavior of the operator by overriding some default options. For more information, please refer to the \"Operator configuration\" section.","title":"Details about the deployment"},{"location":"installation_upgrade/#upgrades","text":"Important Please carefully read the release notes before performing an upgrade as some versions might require extra steps. Upgrading CloudNativePG operator is a two-step process: upgrade the controller and the related Kubernetes resources upgrade the instance manager running in every PostgreSQL pod Unless differently stated in the release notes, the first step is normally done by applying the manifest of the newer version for plain Kubernetes installations, or using the native package manager of the used distribution (please follow the instructions in the above sections). The second step is automatically triggered after updating the controller. By default, this initiates a rolling update of every deployed PostgreSQL cluster, upgrading one instance at a time to use the new instance manager. The rolling update concludes with a switchover, which is governed by the primaryUpdateStrategy option. The default value, unsupervised , completes the switchover automatically. If set to supervised , the user must manually promote the new primary instance using the cnpg plugin for kubectl . Rolling updates This process is discussed in-depth on the Rolling Updates page. Important In case primaryUpdateStrategy is set to the default value of unsupervised , an upgrade of the operator will trigger a switchover on your PostgreSQL cluster, causing a (normally negligible) downtime. If your PostgreSQL Cluster has only one instance, the instance will be automatically restarted as supervised value is not supported for primaryUpdateStrategy . In either case, your applications will have to reconnect to PostgreSQL. The default rolling update behavior can be replaced with in-place updates of the instance manager. This approach does not require a restart of the PostgreSQL instance, thereby avoiding a switchover within the cluster. This feature, which is disabled by default, is described in detail below.","title":"Upgrades"},{"location":"installation_upgrade/#spread-upgrades","text":"By default, all PostgreSQL clusters are rolled out simultaneously, which may lead to a spike in resource usage, especially when managing multiple clusters. CloudNativePG provides two configuration options at the operator level that allow you to introduce delays between cluster roll-outs or even between instances within the same cluster, helping to distribute resource usage over time: CLUSTERS_ROLLOUT_DELAY : Defines the number of seconds to wait between roll-outs of different PostgreSQL clusters (default: 0 ). INSTANCES_ROLLOUT_DELAY : Defines the number of seconds to wait between roll-outs of individual instances within the same PostgreSQL cluster (default: 0 ).","title":"Spread Upgrades"},{"location":"installation_upgrade/#in-place-updates-of-the-instance-manager","text":"By default, CloudNativePG issues a rolling update of the cluster every time the operator is updated. The new instance manager shipped with the operator is added to each PostgreSQL pod via an init container. However, this behavior can be changed via configuration to enable in-place updates of the instance manager, which is the PID 1 process that keeps the container alive. Internally, each instance manager in CloudNativePG supports the injection of a new executable that replaces the existing one after successfully completing an integrity verification phase and gracefully terminating all internal processes. Upon restarting with the new binary, the instance manager seamlessly adopts the already running postmaster . As a result, the PostgreSQL process is unaffected by the update, refraining from the need to perform a switchover. The other side of the coin, is that the Pod is changed after the start, breaking the pure concept of immutability. You can enable this feature by setting the ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES environment variable to 'true' in the operator configuration . The in-place upgrade process will not change the init container image inside the Pods. Therefore, the Pod definition will not reflect the current version of the operator.","title":"In-place updates of the instance manager"},{"location":"installation_upgrade/#compatibility-among-versions","text":"CloudNativePG follows semantic versioning. Every release of the operator within the same API version is compatible with the previous one. The current API version is v1, corresponding to versions 1.x.y of the operator. In addition to new features, new versions of the operator contain bug fixes and stability enhancements. Because of this, we strongly encourage users to upgrade to the latest version of the operator , as each version is released in order to maintain the most secure and stable Postgres environment. CloudNativePG currently releases new versions of the operator at least monthly. If you are unable to apply updates as each version becomes available, we recommend upgrading through each version in sequential order to come current periodically and not skipping versions. The release notes page contains a detailed list of the changes introduced in every released version of CloudNativePG, and it must be read before upgrading to a newer version of the software. Most versions are directly upgradable and in that case, applying the newer manifest for plain Kubernetes installations or using the native package manager of the chosen distribution is enough. When versions are not directly upgradable, the old version needs to be removed before installing the new one. This won't affect user data but only the operator itself.","title":"Compatibility among versions"},{"location":"installation_upgrade/#upgrading-to-125-from-a-previous-minor-version","text":"Warning Every time you are upgrading to a higher minor release, make sure you go through the release notes and upgrade instructions of all the intermediate minor releases. For example, if you want to move from 1.23.x to 1.25, make sure you go through the release notes and upgrade instructions for 1.24 and 1.25. No changes to existing 1.24 cluster configurations are required when upgrading to 1.25.","title":"Upgrading to 1.25 from a previous minor version"},{"location":"installation_upgrade/#upgrading-to-124-from-a-previous-minor-version","text":"","title":"Upgrading to 1.24 from a previous minor version"},{"location":"installation_upgrade/#from-replica-clusters-to-distributed-topology","text":"One of the key enhancements in CloudNativePG 1.24.0 is the upgrade of the replica cluster feature. The former replica cluster feature, now referred to as the \"Standalone Replica Cluster,\" is no longer recommended for Disaster Recovery (DR) and High Availability (HA) scenarios that span multiple Kubernetes clusters. Standalone replica clusters are best suited for read-only workloads, such as reporting, OLAP, or creating development environments with test data. For DR and HA purposes, CloudNativePG now introduces the Distributed Topology strategy for replica clusters. This new strategy allows you to build PostgreSQL clusters across private, public, hybrid, and multi-cloud environments, spanning multiple regions and potentially different cloud providers. It also provides an API to control the switchover operation, ensuring that only one cluster acts as the primary at any given time. This Distributed Topology strategy enhances resilience and scalability, making it a robust solution for modern, distributed applications that require high availability and disaster recovery capabilities across diverse infrastructure setups. You can seamlessly transition from a previous replica cluster configuration to a distributed topology by modifying all the Cluster resources involved in the distributed PostgreSQL setup. Ensure the following steps are taken: Configure the externalClusters section to include all the clusters involved in the distributed topology. We strongly suggest using the same configuration across all Cluster resources for maintainability and consistency. Configure the primary and source fields in the .spec.replica stanza to reflect the distributed topology. The primary field should contain the name of the current primary cluster in the distributed topology, while the source field should contain the name of the cluster each Cluster resource is replicating from. It is important to note that the enabled field, which was previously set to true or false , should now be unset (default). For more information, please refer to the \"Distributed Topology\" section for replica clusters .","title":"From Replica Clusters to Distributed Topology"},{"location":"instance_manager/","text":"Postgres instance manager CloudNativePG does not rely on an external tool for failover management. It simply relies on the Kubernetes API server and a native key component called: the Postgres instance manager . The instance manager takes care of the entire lifecycle of the PostgreSQL server process (also known as postmaster ). When you create a new cluster, the operator makes a Pod per instance. The field .spec.instances specifies how many instances to create. Each Pod will start the instance manager as the parent process (PID 1) for the main container, which in turn runs the PostgreSQL instance. During the lifetime of the Pod, the instance manager acts as a backend to handle the startup, liveness and readiness probes . Startup Probe The startup probe ensures that a PostgreSQL instance, whether a primary or standby, has fully started. Info By default, the startup probe uses pg_isready . However, the behavior can be customized by specifying a different startup strategy. While the startup probe is running, the liveness and readiness probes remain disabled. Following Kubernetes standards, if the startup probe fails, the kubelet will terminate the container, which will then be restarted. The .spec.startDelay parameter specifies the maximum time, in seconds, allowed for the startup probe to succeed. By default, the startDelay is set to 3600 seconds. It is recommended to adjust this setting based on the time PostgreSQL needs to fully initialize in your specific environment. Warning Setting .spec.startDelay too low can cause the liveness probe to activate prematurely, potentially resulting in unnecessary Pod restarts if PostgreSQL hasn\u2019t fully initialized. CloudNativePG configures the startup probe with the following default parameters: failureThreshold: FAILURE_THRESHOLD periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 The failureThreshold value is automatically calculated by dividing startDelay by periodSeconds . You can customize any of the probe settings in the .spec.probes.startup section of your configuration. Warning Be sure that any custom probe settings are tailored to your cluster's operational requirements to avoid unintended disruptions. Info For more details on probe configuration, refer to the probe API documentation . If you manually specify .spec.probes.startup.failureThreshold , it will override the default behavior and disable the automatic use of startDelay . For example, the following configuration explicitly sets custom probe parameters, bypassing startDelay : # ... snip spec: probes: startup: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10 Startup Probe Strategy In certain scenarios, you may need to customize the startup strategy for your PostgreSQL cluster. For example, you might delay marking a replica as started until it begins streaming from the primary or define a replication lag threshold that must be met before considering the replica ready. To accommodate these requirements, CloudNativePG extends the .spec.probes.startup stanza with two optional parameters: type : specifies the criteria for considering the probe successful. Accepted values, in increasing order of complexity/depth, include: pg_isready : marks the probe as successful when the pg_isready command exits with 0 . This is the default for primary instances and replicas. query : marks the probe as successful when a basic query is executed on the postgres database locally. streaming : marks the probe as successful when the replica begins streaming from its source and meets the specified lag requirements (details below). maximumLag : defines the maximum acceptable replication lag, measured in bytes (expressed as Kubernetes quantities). This parameter is only applicable when type is set to streaming . If maximumLag is not specified, the replica is considered successfully started as soon as it begins streaming. Important The .spec.probes.startup.maximumLag option is validated and enforced only during the startup phase of the pod, meaning it applies exclusively when the replica is starting. Warning Incorrect configuration of the maximumLag option can cause continuous failures of the startup probe, leading to repeated replica restarts. Ensure you understand how this option works and configure appropriate values for failureThreshold and periodSeconds to give the replica enough time to catch up with its source. The following example requires a replica to have a maximum lag of 16Mi from the source to be considered started: # <snip> probes: startup: type: streaming maximumLag: 16Mi Liveness Probe The liveness probe begins after the startup probe successfully completes. Its primary role is to ensure the PostgreSQL instance manager is operating correctly. Following Kubernetes standards, if the liveness probe fails, the kubelet will terminate the container, which will then be restarted. The amount of time before a Pod is classified as not alive is configurable via the .spec.livenessProbeTimeout parameter. CloudNativePG configures the liveness probe with the following default parameters: failureThreshold: FAILURE_THRESHOLD periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 The failureThreshold value is automatically calculated by dividing livenessProbeTimeout by periodSeconds . By default, .spec.livenessProbeTimeout is set to 30 seconds. This means the liveness probe will report a failure if it detects three consecutive probe failures, with a 10-second interval between each check. You can customize any of the probe settings in the .spec.probes.liveness section of your configuration. Warning Be sure that any custom probe settings are tailored to your cluster's operational requirements to avoid unintended disruptions. Info For more details on probe configuration, refer to the probe API documentation . If you manually specify .spec.probes.liveness.failureThreshold , it will override the default behavior and disable the automatic use of livenessProbeTimeout . For example, the following configuration explicitly sets custom probe parameters, bypassing livenessProbeTimeout : # ... snip spec: probes: liveness: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10 Primary Isolation (alpha) CloudNativePG 1.26 introduces an opt-in experimental behavior for the liveness probe of a PostgreSQL primary, which will report a failure if both of the following conditions are met: The instance manager cannot reach the Kubernetes API server The instance manager cannot reach any other instance via the instance manager\u2019s REST API The effect of this behavior is to consider an isolated primary to be not alive and subsequently shut it down when the liveness probe fails. It is disabled by default and can be enabled by adding the following annotation to the Cluster resource: metadata: annotations: alpha.cnpg.io/livenessPinger: '{\"enabled\": true}' Warning This feature is experimental and will be introduced in a future CloudNativePG release with a new API. If you decide to use it now, note that the API will change . Important If you plan to enable this experimental feature, be aware that the default liveness probe settings\u2014automatically derived from livenessProbeTimeout \u2014might be aggressive (30 seconds). As such, we recommend explicitly setting the liveness probe configuration to suit your environment. The annotation also accepts two optional network settings: requestTimeout and connectionTimeout , both defaulting to 500 (in milliseconds). In cloud environments, you may need to increase these values. For example: metadata: annotations: alpha.cnpg.io/livenessPinger: '{\"enabled\": true,\"requestTimeout\":1000,\"connectionTimeout\":1000}' Readiness Probe The readiness probe starts once the startup probe has successfully completed. Its primary purpose is to check whether the PostgreSQL instance is ready to accept traffic and serve requests at any point during the pod's lifecycle. Info By default, the readiness probe uses pg_isready . However, the behavior can be customized by specifying a different readiness strategy. Following Kubernetes standards, if the readiness probe fails, the pod will be marked unready and will not receive traffic from any services. An unready pod is also ineligible for promotion during automated failover scenarios. CloudNativePG uses the following default configuration for the readiness probe: failureThreshold: 3 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 If the default settings do not suit your requirements, you can fully customize the readiness probe by specifying parameters in the .spec.probes.readiness stanza. For example: # ... snip spec: probes: readiness: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10 Warning Ensure that any custom probe settings are aligned with your cluster\u2019s operational requirements to prevent unintended disruptions. Info For more information on configuring probes, see the probe API . Readiness Probe Strategy In certain scenarios, you may need to customize the readiness strategy for your cluster. For example, you might delay marking a replica as ready until it begins streaming from the primary or define a maximum replication lag threshold before considering the replica ready. To accommodate these requirements, CloudNativePG extends the .spec.probes.readiness stanza with two optional parameters: type and maximumLag . Please refer to the Startup Probe Strategy section for detailed information on these options. Important Unlike the startup probe, the .spec.probes.readiness.maximumLag option is continuously monitored. A lagging replica may become unready if this setting is not appropriately tuned. Warning Incorrect configuration of the maximumLag option can lead to repeated readiness probe failures, causing serious consequences, such as: Exclusion of the replica from key operator features, such as promotion during failover or participation in synchronous replication quorum. Disruptions in read/read-only services. In longer failover times scenarios, replicas might be declared unready, leading to a cluster stall requiring manual intervention. Recommendation Use the streaming and maximumLag options with extreme caution. If you're unfamiliar with PostgreSQL replication, rely on the default strategy. Seek professional advice if unsure. The following example requires a replica to have a maximum lag of 64Mi from the source to be considered ready. It also provides approximately 300 seconds (30 failures \u00d7 10 seconds) for the startup probe to succeed: # <snip> probes: readiness: type: streaming maximumLag: 64Mi failureThreshold: 30 periodSeconds: 10 Shutdown control When a Pod running Postgres is deleted, either manually or by Kubernetes following a node drain operation, the kubelet will send a termination signal to the instance manager, and the instance manager will take care of shutting down PostgreSQL in an appropriate way. The .spec.smartShutdownTimeout and .spec.stopDelay options, expressed in seconds, control the amount of time given to PostgreSQL to shut down. The values default to 180 and 1800 seconds, respectively. The shutdown procedure is composed of two steps: The instance manager requests a smart shut down, disallowing any new connection to PostgreSQL. This step will last for up to .spec.smartShutdownTimeout seconds. If PostgreSQL is still up, the instance manager requests a fast shut down, terminating any existing connection and exiting promptly. If the instance is archiving and/or streaming WAL files, the process will wait for up to the remaining time set in .spec.stopDelay to complete the operation and then forcibly shut down. Such a timeout needs to be at least 15 seconds. Important In order to avoid any data loss in the Postgres cluster, which impacts the database RPO , don't delete the Pod where the primary instance is running. In this case, perform a switchover to another instance first. Shutdown of the primary during a switchover During a switchover, the shutdown procedure is slightly different from the general case. Indeed, the operator requires the former primary to issue a fast shut down before the selected new primary can be promoted, in order to ensure that all the data are available on the new primary. For this reason, the .spec.switchoverDelay , expressed in seconds, controls the time given to the former primary to shut down gracefully and archive all the WAL files. By default it is set to 3600 (1 hour). Warning The .spec.switchoverDelay option affects the RPO and RTO of your PostgreSQL database. Setting it to a low value, might favor RTO over RPO but lead to data loss at cluster level and/or backup level. On the contrary, setting it to a high value, might remove the risk of data loss while leaving the cluster without an active primary for a longer time during the switchover. Failover In case of primary pod failure, the cluster will go into failover mode. Please refer to the \"Failover\" section for details. Disk Full Failure Storage exhaustion is a well known issue for PostgreSQL clusters. The PostgreSQL documentation highlights the possible failure scenarios and the importance of monitoring disk usage to prevent it from becoming full. The same applies to CloudNativePG and Kubernetes as well: the \"Monitoring\" section provides details on checking the disk space used by WAL segments and standard metrics on disk usage exported to Prometheus. Important In a production system, it is critical to monitor the database continuously. Exhausted disk storage can lead to a database server shutdown. Note The detection of exhausted storage relies on a storage class that accurately reports disk size and usage. This may not be the case in simulated Kubernetes environments like Kind or with test storage class implementations such as csi-driver-host-path . If the disk containing the WALs becomes full and no more WAL segments can be stored, PostgreSQL will stop working. CloudNativePG correctly detects this issue by verifying that there is enough space to store the next WAL segment, and avoids triggering a failover, which could complicate recovery. That allows a human administrator to address the root cause. In such a case, if supported by the storage class, the quickest course of action is currently to: Expand the storage size of the full PVC Increase the size in the Cluster resource to the same value Once the issue is resolved and there is sufficient free space for WAL segments, the Pod will restart and the cluster will become healthy. See also the \"Volume expansion\" section of the documentation.","title":"Postgres instance manager"},{"location":"instance_manager/#postgres-instance-manager","text":"CloudNativePG does not rely on an external tool for failover management. It simply relies on the Kubernetes API server and a native key component called: the Postgres instance manager . The instance manager takes care of the entire lifecycle of the PostgreSQL server process (also known as postmaster ). When you create a new cluster, the operator makes a Pod per instance. The field .spec.instances specifies how many instances to create. Each Pod will start the instance manager as the parent process (PID 1) for the main container, which in turn runs the PostgreSQL instance. During the lifetime of the Pod, the instance manager acts as a backend to handle the startup, liveness and readiness probes .","title":"Postgres instance manager"},{"location":"instance_manager/#startup-probe","text":"The startup probe ensures that a PostgreSQL instance, whether a primary or standby, has fully started. Info By default, the startup probe uses pg_isready . However, the behavior can be customized by specifying a different startup strategy. While the startup probe is running, the liveness and readiness probes remain disabled. Following Kubernetes standards, if the startup probe fails, the kubelet will terminate the container, which will then be restarted. The .spec.startDelay parameter specifies the maximum time, in seconds, allowed for the startup probe to succeed. By default, the startDelay is set to 3600 seconds. It is recommended to adjust this setting based on the time PostgreSQL needs to fully initialize in your specific environment. Warning Setting .spec.startDelay too low can cause the liveness probe to activate prematurely, potentially resulting in unnecessary Pod restarts if PostgreSQL hasn\u2019t fully initialized. CloudNativePG configures the startup probe with the following default parameters: failureThreshold: FAILURE_THRESHOLD periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 The failureThreshold value is automatically calculated by dividing startDelay by periodSeconds . You can customize any of the probe settings in the .spec.probes.startup section of your configuration. Warning Be sure that any custom probe settings are tailored to your cluster's operational requirements to avoid unintended disruptions. Info For more details on probe configuration, refer to the probe API documentation . If you manually specify .spec.probes.startup.failureThreshold , it will override the default behavior and disable the automatic use of startDelay . For example, the following configuration explicitly sets custom probe parameters, bypassing startDelay : # ... snip spec: probes: startup: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10","title":"Startup Probe"},{"location":"instance_manager/#startup-probe-strategy","text":"In certain scenarios, you may need to customize the startup strategy for your PostgreSQL cluster. For example, you might delay marking a replica as started until it begins streaming from the primary or define a replication lag threshold that must be met before considering the replica ready. To accommodate these requirements, CloudNativePG extends the .spec.probes.startup stanza with two optional parameters: type : specifies the criteria for considering the probe successful. Accepted values, in increasing order of complexity/depth, include: pg_isready : marks the probe as successful when the pg_isready command exits with 0 . This is the default for primary instances and replicas. query : marks the probe as successful when a basic query is executed on the postgres database locally. streaming : marks the probe as successful when the replica begins streaming from its source and meets the specified lag requirements (details below). maximumLag : defines the maximum acceptable replication lag, measured in bytes (expressed as Kubernetes quantities). This parameter is only applicable when type is set to streaming . If maximumLag is not specified, the replica is considered successfully started as soon as it begins streaming. Important The .spec.probes.startup.maximumLag option is validated and enforced only during the startup phase of the pod, meaning it applies exclusively when the replica is starting. Warning Incorrect configuration of the maximumLag option can cause continuous failures of the startup probe, leading to repeated replica restarts. Ensure you understand how this option works and configure appropriate values for failureThreshold and periodSeconds to give the replica enough time to catch up with its source. The following example requires a replica to have a maximum lag of 16Mi from the source to be considered started: # <snip> probes: startup: type: streaming maximumLag: 16Mi","title":"Startup Probe Strategy"},{"location":"instance_manager/#liveness-probe","text":"The liveness probe begins after the startup probe successfully completes. Its primary role is to ensure the PostgreSQL instance manager is operating correctly. Following Kubernetes standards, if the liveness probe fails, the kubelet will terminate the container, which will then be restarted. The amount of time before a Pod is classified as not alive is configurable via the .spec.livenessProbeTimeout parameter. CloudNativePG configures the liveness probe with the following default parameters: failureThreshold: FAILURE_THRESHOLD periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 The failureThreshold value is automatically calculated by dividing livenessProbeTimeout by periodSeconds . By default, .spec.livenessProbeTimeout is set to 30 seconds. This means the liveness probe will report a failure if it detects three consecutive probe failures, with a 10-second interval between each check. You can customize any of the probe settings in the .spec.probes.liveness section of your configuration. Warning Be sure that any custom probe settings are tailored to your cluster's operational requirements to avoid unintended disruptions. Info For more details on probe configuration, refer to the probe API documentation . If you manually specify .spec.probes.liveness.failureThreshold , it will override the default behavior and disable the automatic use of livenessProbeTimeout . For example, the following configuration explicitly sets custom probe parameters, bypassing livenessProbeTimeout : # ... snip spec: probes: liveness: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10","title":"Liveness Probe"},{"location":"instance_manager/#primary-isolation-alpha","text":"CloudNativePG 1.26 introduces an opt-in experimental behavior for the liveness probe of a PostgreSQL primary, which will report a failure if both of the following conditions are met: The instance manager cannot reach the Kubernetes API server The instance manager cannot reach any other instance via the instance manager\u2019s REST API The effect of this behavior is to consider an isolated primary to be not alive and subsequently shut it down when the liveness probe fails. It is disabled by default and can be enabled by adding the following annotation to the Cluster resource: metadata: annotations: alpha.cnpg.io/livenessPinger: '{\"enabled\": true}' Warning This feature is experimental and will be introduced in a future CloudNativePG release with a new API. If you decide to use it now, note that the API will change . Important If you plan to enable this experimental feature, be aware that the default liveness probe settings\u2014automatically derived from livenessProbeTimeout \u2014might be aggressive (30 seconds). As such, we recommend explicitly setting the liveness probe configuration to suit your environment. The annotation also accepts two optional network settings: requestTimeout and connectionTimeout , both defaulting to 500 (in milliseconds). In cloud environments, you may need to increase these values. For example: metadata: annotations: alpha.cnpg.io/livenessPinger: '{\"enabled\": true,\"requestTimeout\":1000,\"connectionTimeout\":1000}'","title":"Primary Isolation (alpha)"},{"location":"instance_manager/#readiness-probe","text":"The readiness probe starts once the startup probe has successfully completed. Its primary purpose is to check whether the PostgreSQL instance is ready to accept traffic and serve requests at any point during the pod's lifecycle. Info By default, the readiness probe uses pg_isready . However, the behavior can be customized by specifying a different readiness strategy. Following Kubernetes standards, if the readiness probe fails, the pod will be marked unready and will not receive traffic from any services. An unready pod is also ineligible for promotion during automated failover scenarios. CloudNativePG uses the following default configuration for the readiness probe: failureThreshold: 3 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 If the default settings do not suit your requirements, you can fully customize the readiness probe by specifying parameters in the .spec.probes.readiness stanza. For example: # ... snip spec: probes: readiness: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10 Warning Ensure that any custom probe settings are aligned with your cluster\u2019s operational requirements to prevent unintended disruptions. Info For more information on configuring probes, see the probe API .","title":"Readiness Probe"},{"location":"instance_manager/#readiness-probe-strategy","text":"In certain scenarios, you may need to customize the readiness strategy for your cluster. For example, you might delay marking a replica as ready until it begins streaming from the primary or define a maximum replication lag threshold before considering the replica ready. To accommodate these requirements, CloudNativePG extends the .spec.probes.readiness stanza with two optional parameters: type and maximumLag . Please refer to the Startup Probe Strategy section for detailed information on these options. Important Unlike the startup probe, the .spec.probes.readiness.maximumLag option is continuously monitored. A lagging replica may become unready if this setting is not appropriately tuned. Warning Incorrect configuration of the maximumLag option can lead to repeated readiness probe failures, causing serious consequences, such as: Exclusion of the replica from key operator features, such as promotion during failover or participation in synchronous replication quorum. Disruptions in read/read-only services. In longer failover times scenarios, replicas might be declared unready, leading to a cluster stall requiring manual intervention. Recommendation Use the streaming and maximumLag options with extreme caution. If you're unfamiliar with PostgreSQL replication, rely on the default strategy. Seek professional advice if unsure. The following example requires a replica to have a maximum lag of 64Mi from the source to be considered ready. It also provides approximately 300 seconds (30 failures \u00d7 10 seconds) for the startup probe to succeed: # <snip> probes: readiness: type: streaming maximumLag: 64Mi failureThreshold: 30 periodSeconds: 10","title":"Readiness Probe Strategy"},{"location":"instance_manager/#shutdown-control","text":"When a Pod running Postgres is deleted, either manually or by Kubernetes following a node drain operation, the kubelet will send a termination signal to the instance manager, and the instance manager will take care of shutting down PostgreSQL in an appropriate way. The .spec.smartShutdownTimeout and .spec.stopDelay options, expressed in seconds, control the amount of time given to PostgreSQL to shut down. The values default to 180 and 1800 seconds, respectively. The shutdown procedure is composed of two steps: The instance manager requests a smart shut down, disallowing any new connection to PostgreSQL. This step will last for up to .spec.smartShutdownTimeout seconds. If PostgreSQL is still up, the instance manager requests a fast shut down, terminating any existing connection and exiting promptly. If the instance is archiving and/or streaming WAL files, the process will wait for up to the remaining time set in .spec.stopDelay to complete the operation and then forcibly shut down. Such a timeout needs to be at least 15 seconds. Important In order to avoid any data loss in the Postgres cluster, which impacts the database RPO , don't delete the Pod where the primary instance is running. In this case, perform a switchover to another instance first.","title":"Shutdown control"},{"location":"instance_manager/#shutdown-of-the-primary-during-a-switchover","text":"During a switchover, the shutdown procedure is slightly different from the general case. Indeed, the operator requires the former primary to issue a fast shut down before the selected new primary can be promoted, in order to ensure that all the data are available on the new primary. For this reason, the .spec.switchoverDelay , expressed in seconds, controls the time given to the former primary to shut down gracefully and archive all the WAL files. By default it is set to 3600 (1 hour). Warning The .spec.switchoverDelay option affects the RPO and RTO of your PostgreSQL database. Setting it to a low value, might favor RTO over RPO but lead to data loss at cluster level and/or backup level. On the contrary, setting it to a high value, might remove the risk of data loss while leaving the cluster without an active primary for a longer time during the switchover.","title":"Shutdown of the primary during a switchover"},{"location":"instance_manager/#failover","text":"In case of primary pod failure, the cluster will go into failover mode. Please refer to the \"Failover\" section for details.","title":"Failover"},{"location":"instance_manager/#disk-full-failure","text":"Storage exhaustion is a well known issue for PostgreSQL clusters. The PostgreSQL documentation highlights the possible failure scenarios and the importance of monitoring disk usage to prevent it from becoming full. The same applies to CloudNativePG and Kubernetes as well: the \"Monitoring\" section provides details on checking the disk space used by WAL segments and standard metrics on disk usage exported to Prometheus. Important In a production system, it is critical to monitor the database continuously. Exhausted disk storage can lead to a database server shutdown. Note The detection of exhausted storage relies on a storage class that accurately reports disk size and usage. This may not be the case in simulated Kubernetes environments like Kind or with test storage class implementations such as csi-driver-host-path . If the disk containing the WALs becomes full and no more WAL segments can be stored, PostgreSQL will stop working. CloudNativePG correctly detects this issue by verifying that there is enough space to store the next WAL segment, and avoids triggering a failover, which could complicate recovery. That allows a human administrator to address the root cause. In such a case, if supported by the storage class, the quickest course of action is currently to: Expand the storage size of the full PVC Increase the size in the Cluster resource to the same value Once the issue is resolved and there is sufficient free space for WAL segments, the Pod will restart and the cluster will become healthy. See also the \"Volume expansion\" section of the documentation.","title":"Disk Full Failure"},{"location":"kubectl-plugin/","text":"Kubectl Plugin CloudNativePG provides a plugin for kubectl to manage a cluster in Kubernetes. Install You can install the cnpg plugin using a variety of methods. Note For air-gapped systems, installation via package managers, using previously downloaded files, may be a good option. Via the installation script curl -sSfL \\ https://github.com/cloudnative-pg/cloudnative-pg/raw/main/hack/install-cnpg-plugin.sh | \\ sudo sh -s -- -b /usr/local/bin Using the Debian or RedHat packages In the releases section of the GitHub repository , you can navigate to any release of interest (pick the same or newer release than your CloudNativePG operator), and in it you will find an Assets section. In that section are pre-built packages for a variety of systems. As a result, you can follow standard practices and instructions to install them in your systems. Debian packages For example, let's install the 1.26.0-rc3 release of the plugin, for an Intel based 64 bit server. First, we download the right .deb file. wget https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.26.0-rc3/kubectl-cnpg_1.26.0-rc3_linux_x86_64.deb \\ --output-document kube-plugin.deb Then, with superuser privileges, install from the local file using dpkg : $ sudo dpkg -i kube-plugin.deb Selecting previously unselected package cnpg. (Reading database ... 6688 files and directories currently installed.) Preparing to unpack kube-plugin.deb ... Unpacking cnpg (1.26.0-rc3) ... Setting up cnpg (1.26.0-rc3) ... RPM packages As in the example for .rpm packages, let's install the 1.26.0-rc3 release for an Intel 64 bit machine. Note the --output flag to provide a file name. curl -L https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.26.0-rc3/kubectl-cnpg_1.26.0-rc3_linux_x86_64.rpm \\ --output kube-plugin.rpm Then, with superuser privileges, install with yum , and you're ready to use: $ sudo yum --disablerepo=* localinstall kube-plugin.rpm Failed to set locale, defaulting to C.UTF-8 Dependencies resolved. ==================================================================================================== Package Architecture Version Repository Size ==================================================================================================== Installing: cnpg x86_64 1.26.0-rc3 @commandline 20 M Transaction Summary ==================================================================================================== Install 1 Package Total size: 20 M Installed size: 78 M Is this ok [y/N]: y Using the Arch Linux User Repository (AUR) Package To install the plugin from the AUR , follow these steps: git clone https://aur.archlinux.org/kubectl-cnpg.git cd kubectl-cnpg makepkg -si Or use your favorite AUR-helper, for example paru : paru -S kubectl-cnpg Using Krew If you already have Krew installed, you can simply run: kubectl krew install cnpg When a new version of the plugin is released, you can update the existing installation with: kubectl krew update kubectl krew upgrade cnpg Using Homebrew Note Please note that the Homebrew community manages the availability of the kubectl-cnpg plugin on Homebrew . If you already have Homebrew installed, you can simply run: brew install kubectl-cnpg When a new version of the plugin is released, you can update the existing installation with: brew update brew upgrade kubectl-cnpg Note Auto-completion for the kubectl plugin is already managed by Homebrew. There's no need to create the kubectl_complete-cnpg script mentioned below. Supported Architectures CloudNativePG Plugin is currently built for the following operating system and architectures: Linux amd64 arm 5/6/7 arm64 s390x ppc64le macOS amd64 arm64 Windows 386 amd64 arm 5/6/7 arm64 Configuring auto-completion To configure auto-completion for the plugin, a helper shell script needs to be installed into your current PATH. Assuming the latter contains /usr/local/bin , this can be done with the following commands: cat > kubectl_complete-cnpg <<EOF #!/usr/bin/env sh # Call the __complete command passing it all arguments kubectl cnpg __complete \"\\$@\" EOF chmod +x kubectl_complete-cnpg # Important: the following command may require superuser permission sudo mv kubectl_complete-cnpg /usr/local/bin Important The name of the script needs to be exactly the one provided since it's used by the kubectl auto-complete process Use Once the plugin is installed and deployed, you can start using it like this: kubectl cnpg COMMAND [ARGS...] Note The plugin automatically detects if the standard output channel is connected to a terminal. In such cases, it may add ANSI colors to the command output. To disable colors, use the --color=never option with the command. Generation of installation manifests The cnpg plugin can be used to generate the YAML manifest for the installation of the operator. This option would typically be used if you want to override some default configurations such as number of replicas, installation namespace, namespaces to watch, and so on. For details and available options, run: kubectl cnpg install generate --help The main options are: -n : specifies the namespace in which to install the operator (default: cnpg-system ). --control-plane : if set to true, the operator deployment will include a toleration and affinity for node-role.kubernetes.io/control-plane . --replicas : sets the number of replicas in the deployment. --watch-namespace : specifies a comma-separated list of namespaces to watch (default: all namespaces). --version : defines the minor version of the operator to be installed, such as 1.23 . If a minor version is specified, the plugin installs the latest patch version of that minor version. If no version is supplied, the plugin installs the latest MAJOR.MINOR.PATCH version of the operator. An example of the generate command, which will generate a YAML manifest that will install the operator, is as follows: kubectl cnpg install generate \\ -n king \\ --version 1.23 \\ --replicas 3 \\ --watch-namespace \"albert, bb, freddie\" \\ > operator.yaml The flags in the above command have the following meaning: - -n king install the CNPG operator into the king namespace - --version 1.23 install the latest patch version for minor version 1.23 - --replicas 3 install the operator with 3 replicas - --watch-namespace \"albert, bb, freddie\" have the operator watch for changes in the albert , bb and freddie namespaces only Status The status command provides an overview of the current status of your cluster, including: general information : name of the cluster, PostgreSQL's system ID, number of instances, current timeline and position in the WAL backup : point of recoverability, and WAL archiving status as returned by the pg_stat_archiver view from the primary - or designated primary in the case of a replica cluster streaming replication : information taken directly from the pg_stat_replication view on the primary instance instances : information about each Postgres instance, taken directly by each instance manager; in the case of a standby, the Current LSN field corresponds to the latest write-ahead log location that has been replayed during recovery (replay LSN). Important The status information above is taken at different times and at different locations, resulting in slightly inconsistent returned values. For example, the Current Write LSN location in the main header, might be different from the Current LSN field in the instances status as it is taken at two different time intervals. kubectl cnpg status sandbox Cluster Summary Name: default/sandbox System ID: 7423474350493388827 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:16.4 Primary instance: sandbox-1 Primary start time: 2024-10-08 18:31:57 +0000 UTC (uptime 1m14s) Status: Cluster in healthy state Instances: 3 Ready instances: 3 Size: 126M Current Write LSN: 0/604DE38 (Timeline: 1 - WAL File: 000000010000000000000006) Continuous Backup status Not configured Streaming Replication status Replication Slots Enabled Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority Replication Slot ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- ---------------- sandbox-2 0/604DE38 0/604DE38 0/604DE38 0/604DE38 00:00:00 00:00:00 00:00:00 streaming async 0 active sandbox-3 0/604DE38 0/604DE38 0/604DE38 0/604DE38 00:00:00 00:00:00 00:00:00 streaming async 0 active Instances status Name Current LSN Replication role Status QoS Manager Version Node ---- ----------- ---------------- ------ --- --------------- ---- sandbox-1 0/604DE38 Primary OK BestEffort 1.26.0-rc3 k8s-eu-worker sandbox-2 0/604DE38 Standby (async) OK BestEffort 1.26.0-rc3 k8s-eu-worker2 sandbox-3 0/604DE38 Standby (async) OK BestEffort 1.26.0-rc3 k8s-eu-worker If you require more detailed status information, use the --verbose option (or -v for short). The level of detail increases each time the flag is repeated: kubectl cnpg status sandbox --verbose Cluster Summary Name: default/sandbox System ID: 7423474350493388827 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:16.4 Primary instance: sandbox-1 Primary start time: 2024-10-08 18:31:57 +0000 UTC (uptime 2m4s) Status: Cluster in healthy state Instances: 3 Ready instances: 3 Size: 126M Current Write LSN: 0/6053720 (Timeline: 1 - WAL File: 000000010000000000000006) Continuous Backup status Not configured Physical backups No running physical backups found Streaming Replication status Replication Slots Enabled Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority Replication Slot Slot Restart LSN Slot WAL Status Slot Safe WAL Size ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- ---------------- ---------------- --------------- ------------------ sandbox-2 0/6053720 0/6053720 0/6053720 0/6053720 00:00:00 00:00:00 00:00:00 streaming async 0 active 0/6053720 reserved NULL sandbox-3 0/6053720 0/6053720 0/6053720 0/6053720 00:00:00 00:00:00 00:00:00 streaming async 0 active 0/6053720 reserved NULL Unmanaged Replication Slot Status No unmanaged replication slots found Managed roles status No roles managed Tablespaces status No managed tablespaces Pod Disruption Budgets status Name Role Expected Pods Current Healthy Minimum Desired Healthy Disruptions Allowed ---- ---- ------------- --------------- ----------------------- ------------------- sandbox replica 2 2 1 1 sandbox-primary primary 1 1 1 0 Instances status Name Current LSN Replication role Status QoS Manager Version Node ---- ----------- ---------------- ------ --- --------------- ---- sandbox-1 0/6053720 Primary OK BestEffort 1.26.0-rc3 k8s-eu-worker sandbox-2 0/6053720 Standby (async) OK BestEffort 1.26.0-rc3 k8s-eu-worker2 sandbox-3 0/6053720 Standby (async) OK BestEffort 1.26.0-rc3 k8s-eu-worker With an additional -v (e.g. kubectl cnpg status sandbox -v -v ), you can also view PostgreSQL configuration, HBA settings, and certificates. The command also supports output in yaml and json format. Promote The meaning of this command is to promote a pod in the cluster to primary, so you can start with maintenance work or test a switch-over situation in your cluster: kubectl cnpg promote CLUSTER CLUSTER-INSTANCE Or you can use the instance node number to promote: kubectl cnpg promote CLUSTER INSTANCE Certificates Clusters created using the CloudNativePG operator work with a CA to sign a TLS authentication certificate. To get a certificate, you need to provide a name for the secret to store the credentials, the cluster name, and a user for this certificate: kubectl cnpg certificate cluster-cert --cnpg-cluster CLUSTER --cnpg-user USER After the secret it's created, you can get it using kubectl : kubectl get secret cluster-cert And the content of the same in plain text using the following commands: kubectl get secret cluster-cert -o json | jq -r '.data | map(@base64d) | .[]' Restart The kubectl cnpg restart command can be used in two cases: requesting the operator to orchestrate a rollout restart for a certain cluster. This is useful to apply configuration changes to cluster dependent objects, such as ConfigMaps containing custom monitoring queries. request a single instance restart, either in-place if the instance is the cluster's primary or deleting and recreating the pod if it is a replica. # this command will restart a whole cluster in a rollout fashion kubectl cnpg restart CLUSTER # this command will restart a single instance, according to the policy above kubectl cnpg restart CLUSTER INSTANCE If the in-place restart is requested but the change cannot be applied without a switchover, the switchover will take precedence over the in-place restart. A common case for this will be a minor upgrade of PostgreSQL image. Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to it. Reload The kubectl cnpg reload command requests the operator to trigger a reconciliation loop for a certain cluster. This is useful to apply configuration changes to cluster dependent objects, such as ConfigMaps containing custom monitoring queries. The following command will reload all configurations for a given cluster: kubectl cnpg reload CLUSTER Maintenance The kubectl cnpg maintenance command helps to modify one or more clusters across namespaces and set the maintenance window values, it will change the following fields: .spec.nodeMaintenanceWindow.inProgress .spec.nodeMaintenanceWindow.reusePVC Accepts as argument set and unset using this to set the inProgress to true in case set and to false in case of unset . By default, reusePVC is always set to false unless the --reusePVC flag is passed. The plugin will ask for a confirmation with a list of the cluster to modify and their new values, if this is accepted this action will be applied to all the cluster in the list. If you want to set in maintenance all the PostgreSQL in your Kubernetes cluster, just need to write the following command: kubectl cnpg maintenance set --all-namespaces And you'll have the list of all the cluster to update The following are the new values for the clusters Namespace Cluster Name Maintenance reusePVC --------- ------------ ----------- -------- default cluster-example true false default pg-backup true false test cluster-example true false Do you want to proceed? [y/n]: y Report The kubectl cnpg report command bundles various pieces of information into a ZIP file. It aims to provide the needed context to debug problems with clusters in production. It has two sub-commands: operator and cluster . report Operator The operator sub-command requests the operator to provide information regarding the operator deployment, configuration and events. Important All confidential information in Secrets and ConfigMaps is REDACTED. The Data map will show the keys but the values will be empty. The flag -S / --stopRedaction will defeat the redaction and show the values. Use only at your own risk, this will share private data. Note By default, operator logs are not collected, but you can enable operator log collection with the --logs flag deployment information : the operator Deployment and operator Pod configuration : the Secrets and ConfigMaps in the operator namespace events : the Events in the operator namespace webhook configuration : the mutating and validating webhook configurations webhook service : the webhook service logs : logs for the operator Pod (optional, off by default) in JSON-lines format The command will generate a ZIP file containing various manifest in YAML format (by default, but settable to JSON with the -o flag). Use the -f flag to name a result file explicitly. If the -f flag is not used, a default time-stamped filename is created for the zip file. Note The report plugin obeys kubectl conventions, and will look for objects constrained by namespace. The CNPG Operator will generally not be installed in the same namespace as the clusters. E.g. the default installation namespace is cnpg-system kubectl cnpg report operator -n cnpg-system results in Successfully written report to \"report_operator_<TIMESTAMP>.zip\" (format: \"yaml\") With the -f flag set: kubectl cnpg report operator -n cnpg-system -f reportRedacted.zip Unzipping the file will produce a time-stamped top-level folder to keep the directory tidy: unzip reportRedacted.zip will result in: Archive: reportRedacted.zip creating: report_operator_<TIMESTAMP>/ creating: report_operator_<TIMESTAMP>/manifests/ inflating: report_operator_<TIMESTAMP>/manifests/deployment.yaml inflating: report_operator_<TIMESTAMP>/manifests/operator-pod.yaml inflating: report_operator_<TIMESTAMP>/manifests/events.yaml inflating: report_operator_<TIMESTAMP>/manifests/validating-webhook-configuration.yaml inflating: report_operator_<TIMESTAMP>/manifests/mutating-webhook-configuration.yaml inflating: report_operator_<TIMESTAMP>/manifests/webhook-service.yaml inflating: report_operator_<TIMESTAMP>/manifests/cnpg-ca-secret(secret).yaml inflating: report_operator_<TIMESTAMP>/manifests/cnpg-webhook-cert(secret).yaml If you activated the --logs option, you'd see an extra subdirectory: Archive: report_operator_<TIMESTAMP>.zip <snipped \u2026> creating: report_operator_<TIMESTAMP>/operator-logs/ inflating: report_operator_<TIMESTAMP>/operator-logs/cnpg-controller-manager-66fb98dbc5-pxkmh-logs.jsonl Note The plugin will try to get the PREVIOUS operator's logs, which is helpful when investigating restarted operators. In all cases, it will also try to get the CURRENT operator logs. If current and previous logs are available, it will show them both. ====== Beginning of Previous Log ===== 2023-03-28T12:56:41.251711811Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:56:41Z\",\"logger\":\"setup\",\"msg\":\"Starting CloudNativePG Operator\",\"version\":\"1.26.0-rc3\",\"build\":{\"Version\":\"1.26.0-rc3+dev107\",\"Commit\":\"cc9bab17\",\"Date\":\"2023-03-28\"}} 2023-03-28T12:56:41.251851909Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:56:41Z\",\"logger\":\"setup\",\"msg\":\"Starting pprof HTTP server\",\"addr\":\"0.0.0.0:6060\"} <snipped \u2026> ====== End of Previous Log ===== 2023-03-28T12:57:09.854306024Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:57:09Z\",\"logger\":\"setup\",\"msg\":\"Starting CloudNativePG Operator\",\"version\":\"1.26.0-rc3\",\"build\":{\"Version\":\"1.26.0-rc3+dev107\",\"Commit\":\"cc9bab17\",\"Date\":\"2023-03-28\"}} 2023-03-28T12:57:09.854363943Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:57:09Z\",\"logger\":\"setup\",\"msg\":\"Starting pprof HTTP server\",\"addr\":\"0.0.0.0:6060\"} If the operator hasn't been restarted, you'll still see the ====== Begin \u2026 and ====== End \u2026 guards, with no content inside. You can verify that the confidential information is REDACTED by default: cd report_operator_<TIMESTAMP>/manifests/ head cnpg-ca-secret\\(secret\\).yaml data: ca.crt: \"\" ca.key: \"\" metadata: creationTimestamp: \"2022-03-22T10:42:28Z\" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: With the -S ( --stopRedaction ) option activated, secrets are shown: kubectl cnpg report operator -n cnpg-system -f reportNonRedacted.zip -S You'll get a reminder that you're about to view confidential information: WARNING: secret Redaction is OFF. Use it with caution Successfully written report to \"reportNonRedacted.zip\" (format: \"yaml\") unzip reportNonRedacted.zip head cnpg-ca-secret\\(secret\\).yaml data: ca.crt: LS0tLS1CRUdJTiBD\u2026 ca.key: LS0tLS1CRUdJTiBF\u2026 metadata: creationTimestamp: \"2022-03-22T10:42:28Z\" managedFields: - apiVersion: v1 fieldsType: FieldsV1 report Cluster The cluster sub-command gathers the following: cluster resources : the cluster information, same as kubectl get cluster -o yaml cluster pods : pods in the cluster namespace matching the cluster name cluster jobs : jobs, if any, in the cluster namespace matching the cluster name events : events in the cluster namespace pod logs : logs for the cluster Pods (optional, off by default) in JSON-lines format job logs : logs for the Pods created by jobs (optional, off by default) in JSON-lines format The cluster sub-command accepts the -f and -o flags, as the operator does. If the -f flag is not used, a default timestamped report name will be used. Note that the cluster information does not contain configuration Secrets / ConfigMaps, so the -S is disabled. Note By default, cluster logs are not collected, but you can enable cluster log collection with the --logs flag Usage: kubectl cnpg report cluster CLUSTER [flags] Note that, unlike the operator sub-command, for the cluster sub-command you need to provide the cluster name, and very likely the namespace, unless the cluster is in the default one. kubectl cnpg report cluster CLUSTER -f report.zip [-n NAMESPACE] and then: unzip report.zip Archive: report.zip creating: report_cluster_example_<TIMESTAMP>/ creating: report_cluster_example_<TIMESTAMP>/manifests/ inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-pods.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-jobs.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/events.yaml Remember that you can use the --logs flag to add the pod and job logs to the ZIP. kubectl cnpg report cluster CLUSTER [-n NAMESPACE] --logs will result in: Successfully written report to \"report_cluster_example_<TIMESTAMP>.zip\" (format: \"yaml\") unzip report_cluster_<TIMESTAMP>.zip Archive: report_cluster_example_<TIMESTAMP>.zip creating: report_cluster_example_<TIMESTAMP>/ creating: report_cluster_example_<TIMESTAMP>/manifests/ inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-pods.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-jobs.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/events.yaml creating: report_cluster_example_<TIMESTAMP>/logs/ inflating: report_cluster_example_<TIMESTAMP>/logs/cluster-example-full-1.jsonl creating: report_cluster_example_<TIMESTAMP>/job-logs/ inflating: report_cluster_example_<TIMESTAMP>/job-logs/cluster-example-full-1-initdb-qnnvw.jsonl inflating: report_cluster_example_<TIMESTAMP>/job-logs/cluster-example-full-2-join-tvj8r.jsonl Logs The kubectl cnpg logs command allows to follow the logs of a collection of pods related to CloudNativePG in a single go. It has at the moment one available sub-command: cluster . Cluster logs The cluster sub-command gathers all the pod logs for a cluster in a single stream or file. This means that you can get all the pod logs in a single terminal window, with a single invocation of the command. As in all the cnpg plugin sub-commands, you can get instructions and help with the -h flag: kubectl cnpg logs cluster -h The logs command will display logs in JSON-lines format, unless the --timestamps flag is used, in which case, a human-readable timestamp will be prepended to each line. In this case, lines will no longer be valid JSON, and tools such as jq may not work as desired. If the logs cluster sub-command is given the -f flag (aka --follow ), it will follow the cluster pod logs, and will also watch for any new pods created in the cluster after the command has been invoked. Any new pods found, including pods that have been restarted or re-created, will also have their pods followed. The logs will be displayed in the terminal's standard-out. This command will only exit when the cluster has no more pods left, or when it is interrupted by the user. If logs is called without the -f option, it will read the logs from all cluster pods until the time of invocation and display them in the terminal's standard-out, then exit. The -o or --output flag can be provided, to specify the name of the file where the logs should be saved, instead of displaying over standard-out. The --tail flag can be used to specify how many log lines will be retrieved from each pod in the cluster. By default, the logs cluster sub-command will display all the logs from each pod in the cluster. If combined with the \"follow\" flag -f , the number of logs specified by --tail will be retrieved until the current time, and from then the new logs will be followed. NOTE: unlike other cnpg plugin commands, the -f is used to denote \"follow\" rather than specify a file. This keeps with the convention of kubectl logs , which takes -f to mean the logs should be followed. Usage: kubectl cnpg logs cluster CLUSTER [flags] Using the -f option to follow: kubectl cnpg report cluster CLUSTER -f Using --tail option to display 3 lines from each pod and the -f option to follow: kubectl cnpg report cluster CLUSTER -f --tail 3 {\"level\":\"info\",\"ts\":\"2023-06-30T13:37:33Z\",\"logger\":\"postgres\",\"msg\":\"2023-06-30 13:37:33.142 UTC [26] LOG: ending log output to stderr\",\"source\":\"/controller/log/postgres\",\"logging_pod\":\"cluster-example-3\"} {\"level\":\"info\",\"ts\":\"2023-06-30T13:37:33Z\",\"logger\":\"postgres\",\"msg\":\"2023-06-30 13:37:33.142 UTC [26] HINT: Future log output will go to log destination \\\"csvlog\\\".\",\"source\":\"/controller/log/postgres\",\"logging_pod\":\"cluster-example-3\"} \u2026 \u2026 With the -o option omitted, and with --output specified: $ kubectl cnpg logs cluster CLUSTER --output my-cluster.log Successfully written logs to \"my-cluster.log\" Pretty The pretty sub-command reads a log stream from standard input, formats it into a human-readable output, and attempts to sort the entries by timestamp. It can be used in combination with kubectl cnpg logs cluster , as shown in the following example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting tablespace manager 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting external server manager [...] Alternatively, it can be used in combination with other commands that produce CNPG logs in JSON format, such as stern , or kubectl logs , as in the following example: $ kubectl logs cluster-example-1 | kubectl cnpg logs pretty 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting tablespace manager 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting external server manager [...] The pretty sub-command also supports advanced log filtering, allowing users to display logs for specific pods or loggers, or to filter logs by severity level. Here's an example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --pods cluster-example-1 --loggers postgres --log-level info 2024-10-15T17:35:00.509 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] LOG: redirecting log output to logging collector process 2024-10-15T17:35:00.509 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] HINT: Future log output will appear in directory \"/controller/log\"... 2024-10-15T17:35:00.510 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] LOG: ending log output to stderr 2024-10-15T17:35:00.510 INFO cluster-example-1 postgres ending log output to stderr [...] The pretty sub-command will try to sort the log stream, to make logs easier to reason about. In order to achieve this, it gathers the logs into groups, and within groups it sorts by timestamp. This is the only way to sort interactively, as pretty may be piped from a command in \"follow\" mode. The sub-command will add a group separator line, --- , at the end of each sorted group. The size of the grouping can be configured via the --sorting-group-size flag (default: 1000), as illustrated in the following example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --sorting-group-size=3 2024-10-15T17:35:20.426 INFO cluster-example-2 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:20.426 INFO cluster-example-2 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting tablespace manager --- 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting external server manager 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting controller-runtime manager 2024-10-15T17:35:20.439 INFO cluster-example-2 instance-manager Starting EventSource --- [...] To explore all available options, use the -h flag for detailed explanations of the supported flags and their usage. Info You can also increase the verbosity of the log by adding more -v options. Destroy The kubectl cnpg destroy command helps remove an instance and all the associated PVCs from a Kubernetes cluster. The optional --keep-pvc flag, if specified, allows you to keep the PVCs, while removing all metadata.ownerReferences that were set by the instance. Additionally, the cnpg.io/pvcStatus label on the PVCs will change from ready to detached to signify that they are no longer in use. Running again the command without the --keep-pvc flag will remove the detached PVCs. Usage: kubectl cnpg destroy CLUSTER INSTANCE The following example removes the cluster-example-2 pod and the associated PVCs: kubectl cnpg destroy cluster-example 2 Cluster Hibernation There are times when you may need to temporarily suspend a CloudNativePG Cluster while preserving its data, allowing you to resume operations later. This feature is known as cluster hibernation . Hibernation is managed declaratively using the cnpg.io/hibernation annotation. Info For more details, see the \"Declarative Hibernation\" documentation page. To simplify the process, the cnpg plugin for kubectl provides a hibernate command, which acts as a convenient shortcut for applying the annotation. To hibernate a cluster, run: kubectl cnpg hibernate on CLUSTER This command applies the cnpg.io/hibernation=on annotation to the cluster, suspending its execution. To resume a hibernated cluster, use: kubectl cnpg hibernate off CLUSTER This will remove the hibernation state by setting cnpg.io/hibernation=off . You can check the cluster\u2019s status at any time with: kubectl cnpg status CLUSTER This will display the current state of the cluster, including whether it is hibernated. Benchmarking the database with pgbench Pgbench can be run against an existing PostgreSQL cluster with following command: kubectl cnpg pgbench CLUSTER -- --time 30 --client 1 --jobs 1 Refer to the Benchmarking pgbench section for more details. Benchmarking the storage with fio fio can be run on an existing storage class with following command: kubectl cnpg fio FIO_JOB_NAME [-n NAMESPACE] Refer to the Benchmarking fio section for more details. Requesting a new physical backup The kubectl cnpg backup command requests a new physical backup for an existing Postgres cluster by creating a new Backup resource. The following example requests an on-demand backup for a given cluster: kubectl cnpg backup CLUSTER or, if using volume snapshots: kubectl cnpg backup CLUSTER -m volumeSnapshot The created backup will be named after the request time: $ kubectl cnpg backup cluster-example backup/cluster-example-20230121002300 created By default, a newly created backup will use the backup target policy defined in the cluster to choose which instance to run on. However, you can override this policy with the --backup-target option. In the case of volume snapshot backups, you can also use the --online option to request an online/hot backup or an offline/cold one: additionally, you can also tune online backups by explicitly setting the --immediate-checkpoint and --wait-for-archive options. The \"Backup\" section contains more information about the configuration settings. Launching psql The kubectl cnpg psql CLUSTER command starts a new PostgreSQL interactive front-end process (psql) connected to an existing Postgres cluster, as if you were running it from the actual pod. This means that you will be using the postgres user. Important As you will be connecting as postgres user, in production environments this method should be used with extreme care, by authorized personnel only. $ kubectl cnpg psql cluster-example psql (17.5 (Debian 17.5-1.pgdg110+1)) Type \"help\" for help. postgres=# By default, the command will connect to the primary instance. The user can select to work against a replica by using the --replica option: $ kubectl cnpg psql --replica cluster-example psql (17.5 (Debian 17.5-1.pgdg110+1)) Type \"help\" for help. postgres=# select pg_is_in_recovery(); pg_is_in_recovery ------------------- t (1 row) postgres=# \\q This command will start kubectl exec , and the kubectl executable must be reachable in your PATH variable to correctly work. Snapshotting a Postgres cluster Warning The kubectl cnpg snapshot command has been removed. Please use the backup command to request backups using volume snapshots. Using pgAdmin4 for evaluation/demonstration purposes only pgAdmin stands as the most popular and feature-rich open-source administration and development platform for PostgreSQL. For more information on the project, please refer to the official documentation . Given that the pgAdmin Development Team maintains official Docker container images, you can install pgAdmin in your environment as a standard Kubernetes deployment. Important Deployment of pgAdmin in Kubernetes production environments is beyond the scope of this document and, more broadly, of the CloudNativePG project. However, for the purposes of demonstration and evaluation , CloudNativePG offers a suitable solution. The cnpg plugin implements the pgadmin4 command, providing a straightforward method to connect to a given database Cluster and navigate its content in a local environment such as kind . For example, you can install a demo deployment of pgAdmin4 for the cluster-example cluster as follows: kubectl cnpg pgadmin4 cluster-example This command will produce: ConfigMap/cluster-example-pgadmin4 created Deployment/cluster-example-pgadmin4 created Service/cluster-example-pgadmin4 created Secret/cluster-example-pgadmin4 created [...] After deploying pgAdmin, forward the port using kubectl and connect through your browser by following the on-screen instructions. As usual, you can use the --dry-run option to generate the YAML file: kubectl cnpg pgadmin4 --dry-run cluster-example pgAdmin4 can be installed in either desktop or server mode, with the default being server. In server mode, authentication is required using a randomly generated password, and users must manually specify the database to connect to. On the other hand, desktop mode initiates a pgAdmin web interface without requiring authentication. It automatically connects to the app database as the app user, making it ideal for quick demos, such as on a local deployment using kind : kubectl cnpg pgadmin4 --mode desktop cluster-example After concluding your demo, ensure the termination of the pgAdmin deployment by executing: kubectl cnpg pgadmin4 --dry-run cluster-example | kubectl delete -f - Warning Never deploy pgAdmin in production using the plugin. Logical Replication Publications The cnpg publication command group is designed to streamline the creation and removal of PostgreSQL logical replication publications . Be aware that these commands are primarily intended for assisting in the creation of logical replication publications, particularly on remote PostgreSQL databases. Warning It is crucial to have a solid understanding of both the capabilities and limitations of PostgreSQL's native logical replication system before using these commands. In particular, be mindful of the logical replication restrictions . Creating a new publication To create a logical replication publication, use the cnpg publication create command. The basic structure of this command is as follows: kubectl cnpg publication create \\ --publication PUBLICATION_NAME \\ [--external-cluster EXTERNAL_CLUSTER] LOCAL_CLUSTER [options] There are two primary use cases: With --external-cluster : Use this option to create a publication on an external cluster (i.e. defined in the externalClusters stanza). The commands will be issued from the LOCAL_CLUSTER , but the publication will be for the data in EXTERNAL_CLUSTER . Without --external-cluster : Use this option to create a publication in the LOCAL_CLUSTER PostgreSQL Cluster (by default, the app database). Warning When connecting to an external cluster, ensure that the specified user has sufficient permissions to execute the CREATE PUBLICATION command. You have several options, similar to the CREATE PUBLICATION command, to define the group of tables to replicate. Notable options include: If you specify the --all-tables option, you create a publication FOR ALL TABLES . Alternatively, you can specify multiple occurrences of: --table : Add a specific table (with an expression) to the publication. --schema : Include all tables in the specified database schema (available from PostgreSQL 15). The --dry-run option enables you to preview the SQL commands that the plugin will execute. For additional information and detailed instructions, type the following command: kubectl cnpg publication create --help Example Given a source-cluster and a destination-cluster , we would like to create a publication for the data on source-cluster . The destination-cluster has an entry in the externalClusters stanza pointing to source-cluster . We can run: kubectl cnpg publication create destination-cluster \\ --external-cluster=source-cluster --all-tables which will create a publication for all tables on source-cluster , running the SQL commands on the destination-cluster . Or instead, we can run: kubectl cnpg publication create source-cluster \\ --publication=app --all-tables which will create a publication named app for all the tables in the source-cluster , running the SQL commands on the source cluster. Info There are two sample files that have been provided for illustration and inspiration: logical-source and logical-destination . Dropping a publication The cnpg publication drop command seamlessly complements the create command by offering similar key options, including the publication name, cluster name, and an optional external cluster. You can drop a PUBLICATION with the following command structure: kubectl cnpg publication drop \\ --publication PUBLICATION_NAME \\ [--external-cluster EXTERNAL_CLUSTER] LOCAL_CLUSTER [options] To access further details and precise instructions, use the following command: kubectl cnpg publication drop --help Logical Replication Subscriptions The cnpg subscription command group is a dedicated set of commands designed to simplify the creation and removal of PostgreSQL logical replication subscriptions . These commands are specifically crafted to aid in the establishment of logical replication subscriptions, especially when dealing with remote PostgreSQL databases. Warning Before using these commands, it is essential to have a comprehensive understanding of both the capabilities and limitations of PostgreSQL's native logical replication system. In particular, be mindful of the logical replication restrictions . In addition to subscription management, we provide a helpful command for synchronizing all sequences from the source cluster. While its applicability may vary, this command can be particularly useful in scenarios involving major upgrades or data import from remote servers. Creating a new subscription To create a logical replication subscription, use the cnpg subscription create command. The basic structure of this command is as follows: kubectl cnpg subscription create \\ --subscription SUBSCRIPTION_NAME \\ --publication PUBLICATION_NAME \\ --external-cluster EXTERNAL_CLUSTER \\ LOCAL_CLUSTER [options] This command configures a subscription directed towards the specified publication in the designated external cluster, as defined in the externalClusters stanza of the LOCAL_CLUSTER . For additional information and detailed instructions, type the following command: kubectl cnpg subscription create --help Example As in the section on publications, we have a source-cluster and a destination-cluster , and we have already created a publication called app . The following command: kubectl cnpg subscription create destination-cluster \\ --external-cluster=source-cluster \\ --publication=app --subscription=app will create a subscription for app on the destination cluster. Warning Prioritize testing subscriptions in a non-production environment to ensure their effectiveness and identify any potential issues before implementing them in a production setting. Info There are two sample files that have been provided for illustration and inspiration: logical-source and logical-destination . Dropping a subscription The cnpg subscription drop command seamlessly complements the create command. You can drop a SUBSCRIPTION with the following command structure: kubectl cnpg subcription drop \\ --subscription SUBSCRIPTION_NAME \\ LOCAL_CLUSTER [options] To access further details and precise instructions, use the following command: kubectl cnpg subscription drop --help Synchronizing sequences One notable constraint of PostgreSQL logical replication, implemented through publications and subscriptions, is the lack of sequence synchronization. This becomes particularly relevant when utilizing logical replication for live database migration, especially to a higher version of PostgreSQL. A crucial step in this process involves updating sequences before transitioning applications to the new database ( cutover ). To address this limitation, the cnpg subscription sync-sequences command offers a solution. This command establishes a connection with the source database, retrieves all relevant sequences, and subsequently updates local sequences with matching identities (based on database schema and sequence name). You can use the command as shown below: kubectl cnpg subscription sync-sequences \\ --subscription SUBSCRIPTION_NAME \\ LOCAL_CLUSTER For comprehensive details and specific instructions, utilize the following command: kubectl cnpg subscription sync-sequences --help Example As in the previous sections for publication and subscription, we have a source-cluster and a destination-cluster . The publication and the subscription, both called app , are already present. The following command will synchronize the sequences involved in the app subscription, from the source cluster into the destination cluster. kubectl cnpg subscription sync-sequences destination-cluster \\ --subscription=app Warning Prioritize testing subscriptions in a non-production environment to guarantee their effectiveness and detect any potential issues before deploying them in a production setting. Integration with K9s The cnpg plugin can be easily integrated in K9s , a popular terminal-based UI to interact with Kubernetes clusters. See k9s/plugins.yml for details. Permissions required by the plugin The plugin requires a set of Kubernetes permissions that depends on the command to execute. These permissions may affect resources and sub-resources like Pods, PDBs, PVCs, and enable actions like get , delete , patch . The following table contains the full details: Command Resource Permissions backup clusters: get backups: create certificate clusters: get secrets: get,create destroy pods: get,delete jobs: delete,list PVCs: list,delete,update fencing clusters: get,patch pods: get fio PVCs: create configmaps: create deployment: create hibernate clusters: get,patch,delete pods: list,get,delete pods/exec: create jobs: list PVCs: get,list,update,patch,delete install none logs clusters: get pods: list pods/log: get maintenance clusters: get,patch,list pgadmin4 clusters: get configmaps: create deployments: create services: create secrets: create pgbench clusters: get jobs: create promote clusters: get clusters/status: patch pods: get psql pods: get,list pods/exec: create publication clusters: get pods: get,list pods/exec: create reload clusters: get,patch report cluster clusters: get pods: list pods/log: get jobs: list events: list PVCs: list report operator configmaps: get deployments: get events: list pods: list pods/log: get secrets: get services: get mutatingwebhookconfigurations: list 1 validatingwebhookconfigurations: list 1 If OLM is present on the K8s cluster, also: clusterserviceversions: list installplans: list subscriptions: list restart clusters: get,patch pods: get,delete status clusters: get pods: list pods/exec: create pods/proxy: create PDBs: list subscription clusters: get pods: get,list pods/exec: create version none The permissions are cluster scope ClusterRole resources. \u21a9 \u21a9 Additionally, assigning the list permission on the clusters will enable autocompletion for multiple commands. Role examples It is possible to create roles with restricted permissions. The following example creates a role that only has access to the cluster logs: --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: cnpg-log rules: - verbs: - get apiGroups: - postgresql.cnpg.io resources: - clusters - verbs: - list apiGroups: - '' resources: - pods - verbs: - get apiGroups: - '' resources: - pods/log The next example shows a role with the minimal permissions required to get the cluster status using the plugin's status command: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: cnpg-status rules: - verbs: - get apiGroups: - postgresql.cnpg.io resources: - clusters - verbs: - list apiGroups: - '' resources: - pods - verbs: - create apiGroups: - '' resources: - pods/exec - verbs: - create apiGroups: - '' resources: - pods/proxy - verbs: - list apiGroups: - policy resources: - poddisruptionbudgets Important Keeping the verbs restricted per resources and per apiGroups helps to prevent inadvertently granting more than intended permissions.","title":"Kubectl Plugin"},{"location":"kubectl-plugin/#kubectl-plugin","text":"CloudNativePG provides a plugin for kubectl to manage a cluster in Kubernetes.","title":"Kubectl Plugin"},{"location":"kubectl-plugin/#install","text":"You can install the cnpg plugin using a variety of methods. Note For air-gapped systems, installation via package managers, using previously downloaded files, may be a good option.","title":"Install"},{"location":"kubectl-plugin/#via-the-installation-script","text":"curl -sSfL \\ https://github.com/cloudnative-pg/cloudnative-pg/raw/main/hack/install-cnpg-plugin.sh | \\ sudo sh -s -- -b /usr/local/bin","title":"Via the installation script"},{"location":"kubectl-plugin/#using-the-debian-or-redhat-packages","text":"In the releases section of the GitHub repository , you can navigate to any release of interest (pick the same or newer release than your CloudNativePG operator), and in it you will find an Assets section. In that section are pre-built packages for a variety of systems. As a result, you can follow standard practices and instructions to install them in your systems.","title":"Using the Debian or RedHat packages"},{"location":"kubectl-plugin/#debian-packages","text":"For example, let's install the 1.26.0-rc3 release of the plugin, for an Intel based 64 bit server. First, we download the right .deb file. wget https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.26.0-rc3/kubectl-cnpg_1.26.0-rc3_linux_x86_64.deb \\ --output-document kube-plugin.deb Then, with superuser privileges, install from the local file using dpkg : $ sudo dpkg -i kube-plugin.deb Selecting previously unselected package cnpg. (Reading database ... 6688 files and directories currently installed.) Preparing to unpack kube-plugin.deb ... Unpacking cnpg (1.26.0-rc3) ... Setting up cnpg (1.26.0-rc3) ...","title":"Debian packages"},{"location":"kubectl-plugin/#rpm-packages","text":"As in the example for .rpm packages, let's install the 1.26.0-rc3 release for an Intel 64 bit machine. Note the --output flag to provide a file name. curl -L https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.26.0-rc3/kubectl-cnpg_1.26.0-rc3_linux_x86_64.rpm \\ --output kube-plugin.rpm Then, with superuser privileges, install with yum , and you're ready to use: $ sudo yum --disablerepo=* localinstall kube-plugin.rpm Failed to set locale, defaulting to C.UTF-8 Dependencies resolved. ==================================================================================================== Package Architecture Version Repository Size ==================================================================================================== Installing: cnpg x86_64 1.26.0-rc3 @commandline 20 M Transaction Summary ==================================================================================================== Install 1 Package Total size: 20 M Installed size: 78 M Is this ok [y/N]: y","title":"RPM packages"},{"location":"kubectl-plugin/#using-the-arch-linux-user-repository-aur-package","text":"To install the plugin from the AUR , follow these steps: git clone https://aur.archlinux.org/kubectl-cnpg.git cd kubectl-cnpg makepkg -si Or use your favorite AUR-helper, for example paru : paru -S kubectl-cnpg","title":"Using the Arch Linux User Repository (AUR) Package"},{"location":"kubectl-plugin/#using-krew","text":"If you already have Krew installed, you can simply run: kubectl krew install cnpg When a new version of the plugin is released, you can update the existing installation with: kubectl krew update kubectl krew upgrade cnpg","title":"Using Krew"},{"location":"kubectl-plugin/#using-homebrew","text":"Note Please note that the Homebrew community manages the availability of the kubectl-cnpg plugin on Homebrew . If you already have Homebrew installed, you can simply run: brew install kubectl-cnpg When a new version of the plugin is released, you can update the existing installation with: brew update brew upgrade kubectl-cnpg Note Auto-completion for the kubectl plugin is already managed by Homebrew. There's no need to create the kubectl_complete-cnpg script mentioned below.","title":"Using Homebrew"},{"location":"kubectl-plugin/#supported-architectures","text":"CloudNativePG Plugin is currently built for the following operating system and architectures: Linux amd64 arm 5/6/7 arm64 s390x ppc64le macOS amd64 arm64 Windows 386 amd64 arm 5/6/7 arm64","title":"Supported Architectures"},{"location":"kubectl-plugin/#configuring-auto-completion","text":"To configure auto-completion for the plugin, a helper shell script needs to be installed into your current PATH. Assuming the latter contains /usr/local/bin , this can be done with the following commands: cat > kubectl_complete-cnpg <<EOF #!/usr/bin/env sh # Call the __complete command passing it all arguments kubectl cnpg __complete \"\\$@\" EOF chmod +x kubectl_complete-cnpg # Important: the following command may require superuser permission sudo mv kubectl_complete-cnpg /usr/local/bin Important The name of the script needs to be exactly the one provided since it's used by the kubectl auto-complete process","title":"Configuring auto-completion"},{"location":"kubectl-plugin/#use","text":"Once the plugin is installed and deployed, you can start using it like this: kubectl cnpg COMMAND [ARGS...] Note The plugin automatically detects if the standard output channel is connected to a terminal. In such cases, it may add ANSI colors to the command output. To disable colors, use the --color=never option with the command.","title":"Use"},{"location":"kubectl-plugin/#generation-of-installation-manifests","text":"The cnpg plugin can be used to generate the YAML manifest for the installation of the operator. This option would typically be used if you want to override some default configurations such as number of replicas, installation namespace, namespaces to watch, and so on. For details and available options, run: kubectl cnpg install generate --help The main options are: -n : specifies the namespace in which to install the operator (default: cnpg-system ). --control-plane : if set to true, the operator deployment will include a toleration and affinity for node-role.kubernetes.io/control-plane . --replicas : sets the number of replicas in the deployment. --watch-namespace : specifies a comma-separated list of namespaces to watch (default: all namespaces). --version : defines the minor version of the operator to be installed, such as 1.23 . If a minor version is specified, the plugin installs the latest patch version of that minor version. If no version is supplied, the plugin installs the latest MAJOR.MINOR.PATCH version of the operator. An example of the generate command, which will generate a YAML manifest that will install the operator, is as follows: kubectl cnpg install generate \\ -n king \\ --version 1.23 \\ --replicas 3 \\ --watch-namespace \"albert, bb, freddie\" \\ > operator.yaml The flags in the above command have the following meaning: - -n king install the CNPG operator into the king namespace - --version 1.23 install the latest patch version for minor version 1.23 - --replicas 3 install the operator with 3 replicas - --watch-namespace \"albert, bb, freddie\" have the operator watch for changes in the albert , bb and freddie namespaces only","title":"Generation of installation manifests"},{"location":"kubectl-plugin/#status","text":"The status command provides an overview of the current status of your cluster, including: general information : name of the cluster, PostgreSQL's system ID, number of instances, current timeline and position in the WAL backup : point of recoverability, and WAL archiving status as returned by the pg_stat_archiver view from the primary - or designated primary in the case of a replica cluster streaming replication : information taken directly from the pg_stat_replication view on the primary instance instances : information about each Postgres instance, taken directly by each instance manager; in the case of a standby, the Current LSN field corresponds to the latest write-ahead log location that has been replayed during recovery (replay LSN). Important The status information above is taken at different times and at different locations, resulting in slightly inconsistent returned values. For example, the Current Write LSN location in the main header, might be different from the Current LSN field in the instances status as it is taken at two different time intervals. kubectl cnpg status sandbox Cluster Summary Name: default/sandbox System ID: 7423474350493388827 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:16.4 Primary instance: sandbox-1 Primary start time: 2024-10-08 18:31:57 +0000 UTC (uptime 1m14s) Status: Cluster in healthy state Instances: 3 Ready instances: 3 Size: 126M Current Write LSN: 0/604DE38 (Timeline: 1 - WAL File: 000000010000000000000006) Continuous Backup status Not configured Streaming Replication status Replication Slots Enabled Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority Replication Slot ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- ---------------- sandbox-2 0/604DE38 0/604DE38 0/604DE38 0/604DE38 00:00:00 00:00:00 00:00:00 streaming async 0 active sandbox-3 0/604DE38 0/604DE38 0/604DE38 0/604DE38 00:00:00 00:00:00 00:00:00 streaming async 0 active Instances status Name Current LSN Replication role Status QoS Manager Version Node ---- ----------- ---------------- ------ --- --------------- ---- sandbox-1 0/604DE38 Primary OK BestEffort 1.26.0-rc3 k8s-eu-worker sandbox-2 0/604DE38 Standby (async) OK BestEffort 1.26.0-rc3 k8s-eu-worker2 sandbox-3 0/604DE38 Standby (async) OK BestEffort 1.26.0-rc3 k8s-eu-worker If you require more detailed status information, use the --verbose option (or -v for short). The level of detail increases each time the flag is repeated: kubectl cnpg status sandbox --verbose Cluster Summary Name: default/sandbox System ID: 7423474350493388827 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:16.4 Primary instance: sandbox-1 Primary start time: 2024-10-08 18:31:57 +0000 UTC (uptime 2m4s) Status: Cluster in healthy state Instances: 3 Ready instances: 3 Size: 126M Current Write LSN: 0/6053720 (Timeline: 1 - WAL File: 000000010000000000000006) Continuous Backup status Not configured Physical backups No running physical backups found Streaming Replication status Replication Slots Enabled Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority Replication Slot Slot Restart LSN Slot WAL Status Slot Safe WAL Size ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- ---------------- ---------------- --------------- ------------------ sandbox-2 0/6053720 0/6053720 0/6053720 0/6053720 00:00:00 00:00:00 00:00:00 streaming async 0 active 0/6053720 reserved NULL sandbox-3 0/6053720 0/6053720 0/6053720 0/6053720 00:00:00 00:00:00 00:00:00 streaming async 0 active 0/6053720 reserved NULL Unmanaged Replication Slot Status No unmanaged replication slots found Managed roles status No roles managed Tablespaces status No managed tablespaces Pod Disruption Budgets status Name Role Expected Pods Current Healthy Minimum Desired Healthy Disruptions Allowed ---- ---- ------------- --------------- ----------------------- ------------------- sandbox replica 2 2 1 1 sandbox-primary primary 1 1 1 0 Instances status Name Current LSN Replication role Status QoS Manager Version Node ---- ----------- ---------------- ------ --- --------------- ---- sandbox-1 0/6053720 Primary OK BestEffort 1.26.0-rc3 k8s-eu-worker sandbox-2 0/6053720 Standby (async) OK BestEffort 1.26.0-rc3 k8s-eu-worker2 sandbox-3 0/6053720 Standby (async) OK BestEffort 1.26.0-rc3 k8s-eu-worker With an additional -v (e.g. kubectl cnpg status sandbox -v -v ), you can also view PostgreSQL configuration, HBA settings, and certificates. The command also supports output in yaml and json format.","title":"Status"},{"location":"kubectl-plugin/#promote","text":"The meaning of this command is to promote a pod in the cluster to primary, so you can start with maintenance work or test a switch-over situation in your cluster: kubectl cnpg promote CLUSTER CLUSTER-INSTANCE Or you can use the instance node number to promote: kubectl cnpg promote CLUSTER INSTANCE","title":"Promote"},{"location":"kubectl-plugin/#certificates","text":"Clusters created using the CloudNativePG operator work with a CA to sign a TLS authentication certificate. To get a certificate, you need to provide a name for the secret to store the credentials, the cluster name, and a user for this certificate: kubectl cnpg certificate cluster-cert --cnpg-cluster CLUSTER --cnpg-user USER After the secret it's created, you can get it using kubectl : kubectl get secret cluster-cert And the content of the same in plain text using the following commands: kubectl get secret cluster-cert -o json | jq -r '.data | map(@base64d) | .[]'","title":"Certificates"},{"location":"kubectl-plugin/#restart","text":"The kubectl cnpg restart command can be used in two cases: requesting the operator to orchestrate a rollout restart for a certain cluster. This is useful to apply configuration changes to cluster dependent objects, such as ConfigMaps containing custom monitoring queries. request a single instance restart, either in-place if the instance is the cluster's primary or deleting and recreating the pod if it is a replica. # this command will restart a whole cluster in a rollout fashion kubectl cnpg restart CLUSTER # this command will restart a single instance, according to the policy above kubectl cnpg restart CLUSTER INSTANCE If the in-place restart is requested but the change cannot be applied without a switchover, the switchover will take precedence over the in-place restart. A common case for this will be a minor upgrade of PostgreSQL image. Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to it.","title":"Restart"},{"location":"kubectl-plugin/#reload","text":"The kubectl cnpg reload command requests the operator to trigger a reconciliation loop for a certain cluster. This is useful to apply configuration changes to cluster dependent objects, such as ConfigMaps containing custom monitoring queries. The following command will reload all configurations for a given cluster: kubectl cnpg reload CLUSTER","title":"Reload"},{"location":"kubectl-plugin/#maintenance","text":"The kubectl cnpg maintenance command helps to modify one or more clusters across namespaces and set the maintenance window values, it will change the following fields: .spec.nodeMaintenanceWindow.inProgress .spec.nodeMaintenanceWindow.reusePVC Accepts as argument set and unset using this to set the inProgress to true in case set and to false in case of unset . By default, reusePVC is always set to false unless the --reusePVC flag is passed. The plugin will ask for a confirmation with a list of the cluster to modify and their new values, if this is accepted this action will be applied to all the cluster in the list. If you want to set in maintenance all the PostgreSQL in your Kubernetes cluster, just need to write the following command: kubectl cnpg maintenance set --all-namespaces And you'll have the list of all the cluster to update The following are the new values for the clusters Namespace Cluster Name Maintenance reusePVC --------- ------------ ----------- -------- default cluster-example true false default pg-backup true false test cluster-example true false Do you want to proceed? [y/n]: y","title":"Maintenance"},{"location":"kubectl-plugin/#report","text":"The kubectl cnpg report command bundles various pieces of information into a ZIP file. It aims to provide the needed context to debug problems with clusters in production. It has two sub-commands: operator and cluster .","title":"Report"},{"location":"kubectl-plugin/#report-operator","text":"The operator sub-command requests the operator to provide information regarding the operator deployment, configuration and events. Important All confidential information in Secrets and ConfigMaps is REDACTED. The Data map will show the keys but the values will be empty. The flag -S / --stopRedaction will defeat the redaction and show the values. Use only at your own risk, this will share private data. Note By default, operator logs are not collected, but you can enable operator log collection with the --logs flag deployment information : the operator Deployment and operator Pod configuration : the Secrets and ConfigMaps in the operator namespace events : the Events in the operator namespace webhook configuration : the mutating and validating webhook configurations webhook service : the webhook service logs : logs for the operator Pod (optional, off by default) in JSON-lines format The command will generate a ZIP file containing various manifest in YAML format (by default, but settable to JSON with the -o flag). Use the -f flag to name a result file explicitly. If the -f flag is not used, a default time-stamped filename is created for the zip file. Note The report plugin obeys kubectl conventions, and will look for objects constrained by namespace. The CNPG Operator will generally not be installed in the same namespace as the clusters. E.g. the default installation namespace is cnpg-system kubectl cnpg report operator -n cnpg-system results in Successfully written report to \"report_operator_<TIMESTAMP>.zip\" (format: \"yaml\") With the -f flag set: kubectl cnpg report operator -n cnpg-system -f reportRedacted.zip Unzipping the file will produce a time-stamped top-level folder to keep the directory tidy: unzip reportRedacted.zip will result in: Archive: reportRedacted.zip creating: report_operator_<TIMESTAMP>/ creating: report_operator_<TIMESTAMP>/manifests/ inflating: report_operator_<TIMESTAMP>/manifests/deployment.yaml inflating: report_operator_<TIMESTAMP>/manifests/operator-pod.yaml inflating: report_operator_<TIMESTAMP>/manifests/events.yaml inflating: report_operator_<TIMESTAMP>/manifests/validating-webhook-configuration.yaml inflating: report_operator_<TIMESTAMP>/manifests/mutating-webhook-configuration.yaml inflating: report_operator_<TIMESTAMP>/manifests/webhook-service.yaml inflating: report_operator_<TIMESTAMP>/manifests/cnpg-ca-secret(secret).yaml inflating: report_operator_<TIMESTAMP>/manifests/cnpg-webhook-cert(secret).yaml If you activated the --logs option, you'd see an extra subdirectory: Archive: report_operator_<TIMESTAMP>.zip <snipped \u2026> creating: report_operator_<TIMESTAMP>/operator-logs/ inflating: report_operator_<TIMESTAMP>/operator-logs/cnpg-controller-manager-66fb98dbc5-pxkmh-logs.jsonl Note The plugin will try to get the PREVIOUS operator's logs, which is helpful when investigating restarted operators. In all cases, it will also try to get the CURRENT operator logs. If current and previous logs are available, it will show them both. ====== Beginning of Previous Log ===== 2023-03-28T12:56:41.251711811Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:56:41Z\",\"logger\":\"setup\",\"msg\":\"Starting CloudNativePG Operator\",\"version\":\"1.26.0-rc3\",\"build\":{\"Version\":\"1.26.0-rc3+dev107\",\"Commit\":\"cc9bab17\",\"Date\":\"2023-03-28\"}} 2023-03-28T12:56:41.251851909Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:56:41Z\",\"logger\":\"setup\",\"msg\":\"Starting pprof HTTP server\",\"addr\":\"0.0.0.0:6060\"} <snipped \u2026> ====== End of Previous Log ===== 2023-03-28T12:57:09.854306024Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:57:09Z\",\"logger\":\"setup\",\"msg\":\"Starting CloudNativePG Operator\",\"version\":\"1.26.0-rc3\",\"build\":{\"Version\":\"1.26.0-rc3+dev107\",\"Commit\":\"cc9bab17\",\"Date\":\"2023-03-28\"}} 2023-03-28T12:57:09.854363943Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:57:09Z\",\"logger\":\"setup\",\"msg\":\"Starting pprof HTTP server\",\"addr\":\"0.0.0.0:6060\"} If the operator hasn't been restarted, you'll still see the ====== Begin \u2026 and ====== End \u2026 guards, with no content inside. You can verify that the confidential information is REDACTED by default: cd report_operator_<TIMESTAMP>/manifests/ head cnpg-ca-secret\\(secret\\).yaml data: ca.crt: \"\" ca.key: \"\" metadata: creationTimestamp: \"2022-03-22T10:42:28Z\" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: With the -S ( --stopRedaction ) option activated, secrets are shown: kubectl cnpg report operator -n cnpg-system -f reportNonRedacted.zip -S You'll get a reminder that you're about to view confidential information: WARNING: secret Redaction is OFF. Use it with caution Successfully written report to \"reportNonRedacted.zip\" (format: \"yaml\") unzip reportNonRedacted.zip head cnpg-ca-secret\\(secret\\).yaml data: ca.crt: LS0tLS1CRUdJTiBD\u2026 ca.key: LS0tLS1CRUdJTiBF\u2026 metadata: creationTimestamp: \"2022-03-22T10:42:28Z\" managedFields: - apiVersion: v1 fieldsType: FieldsV1","title":"report Operator"},{"location":"kubectl-plugin/#report-cluster","text":"The cluster sub-command gathers the following: cluster resources : the cluster information, same as kubectl get cluster -o yaml cluster pods : pods in the cluster namespace matching the cluster name cluster jobs : jobs, if any, in the cluster namespace matching the cluster name events : events in the cluster namespace pod logs : logs for the cluster Pods (optional, off by default) in JSON-lines format job logs : logs for the Pods created by jobs (optional, off by default) in JSON-lines format The cluster sub-command accepts the -f and -o flags, as the operator does. If the -f flag is not used, a default timestamped report name will be used. Note that the cluster information does not contain configuration Secrets / ConfigMaps, so the -S is disabled. Note By default, cluster logs are not collected, but you can enable cluster log collection with the --logs flag Usage: kubectl cnpg report cluster CLUSTER [flags] Note that, unlike the operator sub-command, for the cluster sub-command you need to provide the cluster name, and very likely the namespace, unless the cluster is in the default one. kubectl cnpg report cluster CLUSTER -f report.zip [-n NAMESPACE] and then: unzip report.zip Archive: report.zip creating: report_cluster_example_<TIMESTAMP>/ creating: report_cluster_example_<TIMESTAMP>/manifests/ inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-pods.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-jobs.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/events.yaml Remember that you can use the --logs flag to add the pod and job logs to the ZIP. kubectl cnpg report cluster CLUSTER [-n NAMESPACE] --logs will result in: Successfully written report to \"report_cluster_example_<TIMESTAMP>.zip\" (format: \"yaml\") unzip report_cluster_<TIMESTAMP>.zip Archive: report_cluster_example_<TIMESTAMP>.zip creating: report_cluster_example_<TIMESTAMP>/ creating: report_cluster_example_<TIMESTAMP>/manifests/ inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-pods.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-jobs.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/events.yaml creating: report_cluster_example_<TIMESTAMP>/logs/ inflating: report_cluster_example_<TIMESTAMP>/logs/cluster-example-full-1.jsonl creating: report_cluster_example_<TIMESTAMP>/job-logs/ inflating: report_cluster_example_<TIMESTAMP>/job-logs/cluster-example-full-1-initdb-qnnvw.jsonl inflating: report_cluster_example_<TIMESTAMP>/job-logs/cluster-example-full-2-join-tvj8r.jsonl","title":"report Cluster"},{"location":"kubectl-plugin/#logs","text":"The kubectl cnpg logs command allows to follow the logs of a collection of pods related to CloudNativePG in a single go. It has at the moment one available sub-command: cluster .","title":"Logs"},{"location":"kubectl-plugin/#cluster-logs","text":"The cluster sub-command gathers all the pod logs for a cluster in a single stream or file. This means that you can get all the pod logs in a single terminal window, with a single invocation of the command. As in all the cnpg plugin sub-commands, you can get instructions and help with the -h flag: kubectl cnpg logs cluster -h The logs command will display logs in JSON-lines format, unless the --timestamps flag is used, in which case, a human-readable timestamp will be prepended to each line. In this case, lines will no longer be valid JSON, and tools such as jq may not work as desired. If the logs cluster sub-command is given the -f flag (aka --follow ), it will follow the cluster pod logs, and will also watch for any new pods created in the cluster after the command has been invoked. Any new pods found, including pods that have been restarted or re-created, will also have their pods followed. The logs will be displayed in the terminal's standard-out. This command will only exit when the cluster has no more pods left, or when it is interrupted by the user. If logs is called without the -f option, it will read the logs from all cluster pods until the time of invocation and display them in the terminal's standard-out, then exit. The -o or --output flag can be provided, to specify the name of the file where the logs should be saved, instead of displaying over standard-out. The --tail flag can be used to specify how many log lines will be retrieved from each pod in the cluster. By default, the logs cluster sub-command will display all the logs from each pod in the cluster. If combined with the \"follow\" flag -f , the number of logs specified by --tail will be retrieved until the current time, and from then the new logs will be followed. NOTE: unlike other cnpg plugin commands, the -f is used to denote \"follow\" rather than specify a file. This keeps with the convention of kubectl logs , which takes -f to mean the logs should be followed. Usage: kubectl cnpg logs cluster CLUSTER [flags] Using the -f option to follow: kubectl cnpg report cluster CLUSTER -f Using --tail option to display 3 lines from each pod and the -f option to follow: kubectl cnpg report cluster CLUSTER -f --tail 3 {\"level\":\"info\",\"ts\":\"2023-06-30T13:37:33Z\",\"logger\":\"postgres\",\"msg\":\"2023-06-30 13:37:33.142 UTC [26] LOG: ending log output to stderr\",\"source\":\"/controller/log/postgres\",\"logging_pod\":\"cluster-example-3\"} {\"level\":\"info\",\"ts\":\"2023-06-30T13:37:33Z\",\"logger\":\"postgres\",\"msg\":\"2023-06-30 13:37:33.142 UTC [26] HINT: Future log output will go to log destination \\\"csvlog\\\".\",\"source\":\"/controller/log/postgres\",\"logging_pod\":\"cluster-example-3\"} \u2026 \u2026 With the -o option omitted, and with --output specified: $ kubectl cnpg logs cluster CLUSTER --output my-cluster.log Successfully written logs to \"my-cluster.log\"","title":"Cluster logs"},{"location":"kubectl-plugin/#pretty","text":"The pretty sub-command reads a log stream from standard input, formats it into a human-readable output, and attempts to sort the entries by timestamp. It can be used in combination with kubectl cnpg logs cluster , as shown in the following example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting tablespace manager 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting external server manager [...] Alternatively, it can be used in combination with other commands that produce CNPG logs in JSON format, such as stern , or kubectl logs , as in the following example: $ kubectl logs cluster-example-1 | kubectl cnpg logs pretty 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting tablespace manager 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting external server manager [...] The pretty sub-command also supports advanced log filtering, allowing users to display logs for specific pods or loggers, or to filter logs by severity level. Here's an example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --pods cluster-example-1 --loggers postgres --log-level info 2024-10-15T17:35:00.509 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] LOG: redirecting log output to logging collector process 2024-10-15T17:35:00.509 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] HINT: Future log output will appear in directory \"/controller/log\"... 2024-10-15T17:35:00.510 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] LOG: ending log output to stderr 2024-10-15T17:35:00.510 INFO cluster-example-1 postgres ending log output to stderr [...] The pretty sub-command will try to sort the log stream, to make logs easier to reason about. In order to achieve this, it gathers the logs into groups, and within groups it sorts by timestamp. This is the only way to sort interactively, as pretty may be piped from a command in \"follow\" mode. The sub-command will add a group separator line, --- , at the end of each sorted group. The size of the grouping can be configured via the --sorting-group-size flag (default: 1000), as illustrated in the following example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --sorting-group-size=3 2024-10-15T17:35:20.426 INFO cluster-example-2 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:20.426 INFO cluster-example-2 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting tablespace manager --- 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting external server manager 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting controller-runtime manager 2024-10-15T17:35:20.439 INFO cluster-example-2 instance-manager Starting EventSource --- [...] To explore all available options, use the -h flag for detailed explanations of the supported flags and their usage. Info You can also increase the verbosity of the log by adding more -v options.","title":"Pretty"},{"location":"kubectl-plugin/#destroy","text":"The kubectl cnpg destroy command helps remove an instance and all the associated PVCs from a Kubernetes cluster. The optional --keep-pvc flag, if specified, allows you to keep the PVCs, while removing all metadata.ownerReferences that were set by the instance. Additionally, the cnpg.io/pvcStatus label on the PVCs will change from ready to detached to signify that they are no longer in use. Running again the command without the --keep-pvc flag will remove the detached PVCs. Usage: kubectl cnpg destroy CLUSTER INSTANCE The following example removes the cluster-example-2 pod and the associated PVCs: kubectl cnpg destroy cluster-example 2","title":"Destroy"},{"location":"kubectl-plugin/#cluster-hibernation","text":"There are times when you may need to temporarily suspend a CloudNativePG Cluster while preserving its data, allowing you to resume operations later. This feature is known as cluster hibernation . Hibernation is managed declaratively using the cnpg.io/hibernation annotation. Info For more details, see the \"Declarative Hibernation\" documentation page. To simplify the process, the cnpg plugin for kubectl provides a hibernate command, which acts as a convenient shortcut for applying the annotation. To hibernate a cluster, run: kubectl cnpg hibernate on CLUSTER This command applies the cnpg.io/hibernation=on annotation to the cluster, suspending its execution. To resume a hibernated cluster, use: kubectl cnpg hibernate off CLUSTER This will remove the hibernation state by setting cnpg.io/hibernation=off . You can check the cluster\u2019s status at any time with: kubectl cnpg status CLUSTER This will display the current state of the cluster, including whether it is hibernated.","title":"Cluster Hibernation"},{"location":"kubectl-plugin/#benchmarking-the-database-with-pgbench","text":"Pgbench can be run against an existing PostgreSQL cluster with following command: kubectl cnpg pgbench CLUSTER -- --time 30 --client 1 --jobs 1 Refer to the Benchmarking pgbench section for more details.","title":"Benchmarking the database with pgbench"},{"location":"kubectl-plugin/#benchmarking-the-storage-with-fio","text":"fio can be run on an existing storage class with following command: kubectl cnpg fio FIO_JOB_NAME [-n NAMESPACE] Refer to the Benchmarking fio section for more details.","title":"Benchmarking the storage with fio"},{"location":"kubectl-plugin/#requesting-a-new-physical-backup","text":"The kubectl cnpg backup command requests a new physical backup for an existing Postgres cluster by creating a new Backup resource. The following example requests an on-demand backup for a given cluster: kubectl cnpg backup CLUSTER or, if using volume snapshots: kubectl cnpg backup CLUSTER -m volumeSnapshot The created backup will be named after the request time: $ kubectl cnpg backup cluster-example backup/cluster-example-20230121002300 created By default, a newly created backup will use the backup target policy defined in the cluster to choose which instance to run on. However, you can override this policy with the --backup-target option. In the case of volume snapshot backups, you can also use the --online option to request an online/hot backup or an offline/cold one: additionally, you can also tune online backups by explicitly setting the --immediate-checkpoint and --wait-for-archive options. The \"Backup\" section contains more information about the configuration settings.","title":"Requesting a new physical backup"},{"location":"kubectl-plugin/#launching-psql","text":"The kubectl cnpg psql CLUSTER command starts a new PostgreSQL interactive front-end process (psql) connected to an existing Postgres cluster, as if you were running it from the actual pod. This means that you will be using the postgres user. Important As you will be connecting as postgres user, in production environments this method should be used with extreme care, by authorized personnel only. $ kubectl cnpg psql cluster-example psql (17.5 (Debian 17.5-1.pgdg110+1)) Type \"help\" for help. postgres=# By default, the command will connect to the primary instance. The user can select to work against a replica by using the --replica option: $ kubectl cnpg psql --replica cluster-example psql (17.5 (Debian 17.5-1.pgdg110+1)) Type \"help\" for help. postgres=# select pg_is_in_recovery(); pg_is_in_recovery ------------------- t (1 row) postgres=# \\q This command will start kubectl exec , and the kubectl executable must be reachable in your PATH variable to correctly work.","title":"Launching psql"},{"location":"kubectl-plugin/#snapshotting-a-postgres-cluster","text":"Warning The kubectl cnpg snapshot command has been removed. Please use the backup command to request backups using volume snapshots.","title":"Snapshotting a Postgres cluster"},{"location":"kubectl-plugin/#using-pgadmin4-for-evaluationdemonstration-purposes-only","text":"pgAdmin stands as the most popular and feature-rich open-source administration and development platform for PostgreSQL. For more information on the project, please refer to the official documentation . Given that the pgAdmin Development Team maintains official Docker container images, you can install pgAdmin in your environment as a standard Kubernetes deployment. Important Deployment of pgAdmin in Kubernetes production environments is beyond the scope of this document and, more broadly, of the CloudNativePG project. However, for the purposes of demonstration and evaluation , CloudNativePG offers a suitable solution. The cnpg plugin implements the pgadmin4 command, providing a straightforward method to connect to a given database Cluster and navigate its content in a local environment such as kind . For example, you can install a demo deployment of pgAdmin4 for the cluster-example cluster as follows: kubectl cnpg pgadmin4 cluster-example This command will produce: ConfigMap/cluster-example-pgadmin4 created Deployment/cluster-example-pgadmin4 created Service/cluster-example-pgadmin4 created Secret/cluster-example-pgadmin4 created [...] After deploying pgAdmin, forward the port using kubectl and connect through your browser by following the on-screen instructions. As usual, you can use the --dry-run option to generate the YAML file: kubectl cnpg pgadmin4 --dry-run cluster-example pgAdmin4 can be installed in either desktop or server mode, with the default being server. In server mode, authentication is required using a randomly generated password, and users must manually specify the database to connect to. On the other hand, desktop mode initiates a pgAdmin web interface without requiring authentication. It automatically connects to the app database as the app user, making it ideal for quick demos, such as on a local deployment using kind : kubectl cnpg pgadmin4 --mode desktop cluster-example After concluding your demo, ensure the termination of the pgAdmin deployment by executing: kubectl cnpg pgadmin4 --dry-run cluster-example | kubectl delete -f - Warning Never deploy pgAdmin in production using the plugin.","title":"Using pgAdmin4 for evaluation/demonstration purposes only"},{"location":"kubectl-plugin/#logical-replication-publications","text":"The cnpg publication command group is designed to streamline the creation and removal of PostgreSQL logical replication publications . Be aware that these commands are primarily intended for assisting in the creation of logical replication publications, particularly on remote PostgreSQL databases. Warning It is crucial to have a solid understanding of both the capabilities and limitations of PostgreSQL's native logical replication system before using these commands. In particular, be mindful of the logical replication restrictions .","title":"Logical Replication Publications"},{"location":"kubectl-plugin/#creating-a-new-publication","text":"To create a logical replication publication, use the cnpg publication create command. The basic structure of this command is as follows: kubectl cnpg publication create \\ --publication PUBLICATION_NAME \\ [--external-cluster EXTERNAL_CLUSTER] LOCAL_CLUSTER [options] There are two primary use cases: With --external-cluster : Use this option to create a publication on an external cluster (i.e. defined in the externalClusters stanza). The commands will be issued from the LOCAL_CLUSTER , but the publication will be for the data in EXTERNAL_CLUSTER . Without --external-cluster : Use this option to create a publication in the LOCAL_CLUSTER PostgreSQL Cluster (by default, the app database). Warning When connecting to an external cluster, ensure that the specified user has sufficient permissions to execute the CREATE PUBLICATION command. You have several options, similar to the CREATE PUBLICATION command, to define the group of tables to replicate. Notable options include: If you specify the --all-tables option, you create a publication FOR ALL TABLES . Alternatively, you can specify multiple occurrences of: --table : Add a specific table (with an expression) to the publication. --schema : Include all tables in the specified database schema (available from PostgreSQL 15). The --dry-run option enables you to preview the SQL commands that the plugin will execute. For additional information and detailed instructions, type the following command: kubectl cnpg publication create --help","title":"Creating a new publication"},{"location":"kubectl-plugin/#example","text":"Given a source-cluster and a destination-cluster , we would like to create a publication for the data on source-cluster . The destination-cluster has an entry in the externalClusters stanza pointing to source-cluster . We can run: kubectl cnpg publication create destination-cluster \\ --external-cluster=source-cluster --all-tables which will create a publication for all tables on source-cluster , running the SQL commands on the destination-cluster . Or instead, we can run: kubectl cnpg publication create source-cluster \\ --publication=app --all-tables which will create a publication named app for all the tables in the source-cluster , running the SQL commands on the source cluster. Info There are two sample files that have been provided for illustration and inspiration: logical-source and logical-destination .","title":"Example"},{"location":"kubectl-plugin/#dropping-a-publication","text":"The cnpg publication drop command seamlessly complements the create command by offering similar key options, including the publication name, cluster name, and an optional external cluster. You can drop a PUBLICATION with the following command structure: kubectl cnpg publication drop \\ --publication PUBLICATION_NAME \\ [--external-cluster EXTERNAL_CLUSTER] LOCAL_CLUSTER [options] To access further details and precise instructions, use the following command: kubectl cnpg publication drop --help","title":"Dropping a publication"},{"location":"kubectl-plugin/#logical-replication-subscriptions","text":"The cnpg subscription command group is a dedicated set of commands designed to simplify the creation and removal of PostgreSQL logical replication subscriptions . These commands are specifically crafted to aid in the establishment of logical replication subscriptions, especially when dealing with remote PostgreSQL databases. Warning Before using these commands, it is essential to have a comprehensive understanding of both the capabilities and limitations of PostgreSQL's native logical replication system. In particular, be mindful of the logical replication restrictions . In addition to subscription management, we provide a helpful command for synchronizing all sequences from the source cluster. While its applicability may vary, this command can be particularly useful in scenarios involving major upgrades or data import from remote servers.","title":"Logical Replication Subscriptions"},{"location":"kubectl-plugin/#creating-a-new-subscription","text":"To create a logical replication subscription, use the cnpg subscription create command. The basic structure of this command is as follows: kubectl cnpg subscription create \\ --subscription SUBSCRIPTION_NAME \\ --publication PUBLICATION_NAME \\ --external-cluster EXTERNAL_CLUSTER \\ LOCAL_CLUSTER [options] This command configures a subscription directed towards the specified publication in the designated external cluster, as defined in the externalClusters stanza of the LOCAL_CLUSTER . For additional information and detailed instructions, type the following command: kubectl cnpg subscription create --help","title":"Creating a new subscription"},{"location":"kubectl-plugin/#example_1","text":"As in the section on publications, we have a source-cluster and a destination-cluster , and we have already created a publication called app . The following command: kubectl cnpg subscription create destination-cluster \\ --external-cluster=source-cluster \\ --publication=app --subscription=app will create a subscription for app on the destination cluster. Warning Prioritize testing subscriptions in a non-production environment to ensure their effectiveness and identify any potential issues before implementing them in a production setting. Info There are two sample files that have been provided for illustration and inspiration: logical-source and logical-destination .","title":"Example"},{"location":"kubectl-plugin/#dropping-a-subscription","text":"The cnpg subscription drop command seamlessly complements the create command. You can drop a SUBSCRIPTION with the following command structure: kubectl cnpg subcription drop \\ --subscription SUBSCRIPTION_NAME \\ LOCAL_CLUSTER [options] To access further details and precise instructions, use the following command: kubectl cnpg subscription drop --help","title":"Dropping a subscription"},{"location":"kubectl-plugin/#synchronizing-sequences","text":"One notable constraint of PostgreSQL logical replication, implemented through publications and subscriptions, is the lack of sequence synchronization. This becomes particularly relevant when utilizing logical replication for live database migration, especially to a higher version of PostgreSQL. A crucial step in this process involves updating sequences before transitioning applications to the new database ( cutover ). To address this limitation, the cnpg subscription sync-sequences command offers a solution. This command establishes a connection with the source database, retrieves all relevant sequences, and subsequently updates local sequences with matching identities (based on database schema and sequence name). You can use the command as shown below: kubectl cnpg subscription sync-sequences \\ --subscription SUBSCRIPTION_NAME \\ LOCAL_CLUSTER For comprehensive details and specific instructions, utilize the following command: kubectl cnpg subscription sync-sequences --help","title":"Synchronizing sequences"},{"location":"kubectl-plugin/#example_2","text":"As in the previous sections for publication and subscription, we have a source-cluster and a destination-cluster . The publication and the subscription, both called app , are already present. The following command will synchronize the sequences involved in the app subscription, from the source cluster into the destination cluster. kubectl cnpg subscription sync-sequences destination-cluster \\ --subscription=app Warning Prioritize testing subscriptions in a non-production environment to guarantee their effectiveness and detect any potential issues before deploying them in a production setting.","title":"Example"},{"location":"kubectl-plugin/#integration-with-k9s","text":"The cnpg plugin can be easily integrated in K9s , a popular terminal-based UI to interact with Kubernetes clusters. See k9s/plugins.yml for details.","title":"Integration with K9s"},{"location":"kubectl-plugin/#permissions-required-by-the-plugin","text":"The plugin requires a set of Kubernetes permissions that depends on the command to execute. These permissions may affect resources and sub-resources like Pods, PDBs, PVCs, and enable actions like get , delete , patch . The following table contains the full details: Command Resource Permissions backup clusters: get backups: create certificate clusters: get secrets: get,create destroy pods: get,delete jobs: delete,list PVCs: list,delete,update fencing clusters: get,patch pods: get fio PVCs: create configmaps: create deployment: create hibernate clusters: get,patch,delete pods: list,get,delete pods/exec: create jobs: list PVCs: get,list,update,patch,delete install none logs clusters: get pods: list pods/log: get maintenance clusters: get,patch,list pgadmin4 clusters: get configmaps: create deployments: create services: create secrets: create pgbench clusters: get jobs: create promote clusters: get clusters/status: patch pods: get psql pods: get,list pods/exec: create publication clusters: get pods: get,list pods/exec: create reload clusters: get,patch report cluster clusters: get pods: list pods/log: get jobs: list events: list PVCs: list report operator configmaps: get deployments: get events: list pods: list pods/log: get secrets: get services: get mutatingwebhookconfigurations: list 1 validatingwebhookconfigurations: list 1 If OLM is present on the K8s cluster, also: clusterserviceversions: list installplans: list subscriptions: list restart clusters: get,patch pods: get,delete status clusters: get pods: list pods/exec: create pods/proxy: create PDBs: list subscription clusters: get pods: get,list pods/exec: create version none The permissions are cluster scope ClusterRole resources. \u21a9 \u21a9 Additionally, assigning the list permission on the clusters will enable autocompletion for multiple commands.","title":"Permissions required by the plugin"},{"location":"kubectl-plugin/#role-examples","text":"It is possible to create roles with restricted permissions. The following example creates a role that only has access to the cluster logs: --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: cnpg-log rules: - verbs: - get apiGroups: - postgresql.cnpg.io resources: - clusters - verbs: - list apiGroups: - '' resources: - pods - verbs: - get apiGroups: - '' resources: - pods/log The next example shows a role with the minimal permissions required to get the cluster status using the plugin's status command: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: cnpg-status rules: - verbs: - get apiGroups: - postgresql.cnpg.io resources: - clusters - verbs: - list apiGroups: - '' resources: - pods - verbs: - create apiGroups: - '' resources: - pods/exec - verbs: - create apiGroups: - '' resources: - pods/proxy - verbs: - list apiGroups: - policy resources: - poddisruptionbudgets Important Keeping the verbs restricted per resources and per apiGroups helps to prevent inadvertently granting more than intended permissions.","title":"Role examples"},{"location":"kubernetes_upgrade/","text":"Kubernetes Upgrade and Maintenance Maintaining an up-to-date Kubernetes cluster is crucial for ensuring optimal performance and security, particularly for self-managed clusters, especially those running on bare metal infrastructure. Regular updates help address technical debt and mitigate business risks, despite the controlled downtimes associated with temporarily removing a node from the cluster for maintenance purposes. For further insights on embracing risk in operations, refer to the \"Embracing Risk\" chapter from the Site Reliability Engineering book. Importance of Regular Updates Updating Kubernetes involves planning and executing maintenance tasks, such as applying security updates to underlying Linux servers, replacing malfunctioning hardware components, or upgrading the cluster to the latest Kubernetes version. These activities are essential for maintaining a robust and secure infrastructure. Maintenance Operations in a Cluster Typically, maintenance operations are carried out on one node at a time, following a structured process : eviction of workloads ( drain ): workloads are gracefully moved away from the node to be updated, ensuring a smooth transition. performing the operation: the actual maintenance operation, such as a system update or hardware replacement, is executed. rejoining the node to the cluster ( uncordon ): the updated node is reintegrated into the cluster, ready to resume its responsibilities. This process requires either stopping workloads for the entire upgrade duration or migrating them to other nodes in the cluster. Temporary PostgreSQL Cluster Degradation While the standard approach ensures service reliability and leverages Kubernetes' self-healing capabilities, there are scenarios where operating with a temporarily degraded cluster may be acceptable. This is particularly relevant for PostgreSQL clusters relying on node-local storage , where the storage is local to the Kubernetes worker node running the PostgreSQL database. Node-local storage, or simply local storage , is employed to enhance performance. Note If your database files reside on shared storage accessible over the network, the default self-healing behavior of the operator can efficiently handle scenarios where volumes are reused by pods on different nodes after a drain operation. In such cases, you can skip the remaining sections of this document. Pod Disruption Budgets By default, CloudNativePG safeguards Postgres cluster operations. If a node is to be drained and contains a cluster's primary instance, a switchover happens ahead of the drain. Once the instance in the node is downgraded to replica, the draining can resume. For single-instance clusters, a switchover is not possible, so CloudNativePG will prevent draining the node where the instance is housed. Additionally, in clusters with 3 or more instances, CloudNativePG guarantees that only one replica at a time is gracefully shut down during a drain operation. Each PostgreSQL Cluster is equipped with two associated PodDisruptionBudget resources - you can easily confirm it with the kubectl get pdb command. Our recommendation is to leave pod disruption budgets enabled for every production Postgres cluster. This can be effortlessly managed by toggling the .spec.enablePDB option, as detailed in the API reference . PostgreSQL Clusters used for Development or Testing For PostgreSQL clusters used for development purposes, often consisting of a single instance, it is essential to disable pod disruption budgets. Failure to do so will prevent the node hosting that cluster from being drained. The following example illustrates how to disable pod disruption budgets for a 1-instance development cluster: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: dev spec: instances: 1 enablePDB: false storage: size: 1Gi This configuration ensures smoother maintenance procedures without restrictions on draining the node during development activities. Node Maintenance Window Important While CloudNativePG will continue supporting the node maintenance window, it is currently recommended to transition to direct control of pod disruption budgets, as explained in the previous section. This section is retained mainly for backward compatibility. Prior to release 1.23, CloudNativePG had just one declarative mechanism to manage Kubernetes upgrades when dealing with local storage: you had to temporarily put the cluster in maintenance mode through the nodeMaintenanceWindow option to avoid standard self-healing procedures to kick in, while, for example, enlarging the partition on the physical node or updating the node itself. Warning Limit the duration of the maintenance window to the shortest amount of time possible. In this phase, some of the expected behaviors of Kubernetes are either disabled or running with some limitations, including self-healing, rolling updates, and Pod disruption budget. The nodeMaintenanceWindow option of the cluster has two further settings: inProgress : Boolean value that states if the maintenance window for the nodes is currently in progress or not. By default, it is set to off . During the maintenance window, the reusePVC option below is evaluated by the operator. reusePVC : Boolean value that defines if an existing PVC is reused or not during the maintenance operation. By default, it is set to on . When enabled , Kubernetes waits for the node to come up again and then reuses the existing PVC; the PodDisruptionBudget policy is temporarily removed. When disabled , Kubernetes forces the recreation of the Pod on a different node with a new PVC by relying on PostgreSQL's physical streaming replication, then destroys the old PVC together with the Pod. This scenario is generally not recommended unless the database's size is small, and re-cloning the new PostgreSQL instance takes shorter than waiting. This behavior does not apply to clusters with only one instance and reusePVC disabled: see section below. Note When performing the kubectl drain command, you will need to add the --delete-emptydir-data option. Don't be afraid: it refers to another volume internally used by the operator - not the PostgreSQL data directory. Important PodDisruptionBudget management can be disabled by setting the .spec.enablePDB field to false . In that case, the operator won't create PodDisruptionBudgets and will delete them if they were previously created. Single instance clusters with reusePVC set to false Important We recommend to always create clusters with more than one instance in order to guarantee high availability. Deleting the only PostgreSQL instance in a single instance cluster with reusePVC set to false would imply all data being lost, therefore we prevent users from draining nodes such instances might be running on, even in maintenance mode. However, in case maintenance is required for such a node you have two options: Enable reusePVC , accepting the downtime Replicate the instance on a different node and switch over the primary As long as a database service downtime is acceptable for your environment, draining the node is as simple as setting the nodeMaintenanceWindow to inProgress: true and reusePVC: true . This will allow the instance to be deleted and recreated as soon as the original PVC is available (e.g. with node local storage, as soon as the node is back up). Otherwise you will have to scale up the cluster, creating a new instance on a different node and promoting the new instance to primary in order to shut down the original one on the node undergoing maintenance. The only downtime in this case will be the duration of the switchover. A possible approach could be: Cordon the node on which the current instance is running. Scale up the cluster to 2 instances, could take some time depending on the database size. As soon as the new instance is running, the operator will automatically perform a switchover given that the current primary is running on a cordoned node. Scale back down the cluster to a single instance, this will delete the old instance The old primary's node can now be drained successfully, while leaving the new primary running on a new node.","title":"Kubernetes Upgrade and Maintenance"},{"location":"kubernetes_upgrade/#kubernetes-upgrade-and-maintenance","text":"Maintaining an up-to-date Kubernetes cluster is crucial for ensuring optimal performance and security, particularly for self-managed clusters, especially those running on bare metal infrastructure. Regular updates help address technical debt and mitigate business risks, despite the controlled downtimes associated with temporarily removing a node from the cluster for maintenance purposes. For further insights on embracing risk in operations, refer to the \"Embracing Risk\" chapter from the Site Reliability Engineering book.","title":"Kubernetes Upgrade and Maintenance"},{"location":"kubernetes_upgrade/#importance-of-regular-updates","text":"Updating Kubernetes involves planning and executing maintenance tasks, such as applying security updates to underlying Linux servers, replacing malfunctioning hardware components, or upgrading the cluster to the latest Kubernetes version. These activities are essential for maintaining a robust and secure infrastructure.","title":"Importance of Regular Updates"},{"location":"kubernetes_upgrade/#maintenance-operations-in-a-cluster","text":"Typically, maintenance operations are carried out on one node at a time, following a structured process : eviction of workloads ( drain ): workloads are gracefully moved away from the node to be updated, ensuring a smooth transition. performing the operation: the actual maintenance operation, such as a system update or hardware replacement, is executed. rejoining the node to the cluster ( uncordon ): the updated node is reintegrated into the cluster, ready to resume its responsibilities. This process requires either stopping workloads for the entire upgrade duration or migrating them to other nodes in the cluster.","title":"Maintenance Operations in a Cluster"},{"location":"kubernetes_upgrade/#temporary-postgresql-cluster-degradation","text":"While the standard approach ensures service reliability and leverages Kubernetes' self-healing capabilities, there are scenarios where operating with a temporarily degraded cluster may be acceptable. This is particularly relevant for PostgreSQL clusters relying on node-local storage , where the storage is local to the Kubernetes worker node running the PostgreSQL database. Node-local storage, or simply local storage , is employed to enhance performance. Note If your database files reside on shared storage accessible over the network, the default self-healing behavior of the operator can efficiently handle scenarios where volumes are reused by pods on different nodes after a drain operation. In such cases, you can skip the remaining sections of this document.","title":"Temporary PostgreSQL Cluster Degradation"},{"location":"kubernetes_upgrade/#pod-disruption-budgets","text":"By default, CloudNativePG safeguards Postgres cluster operations. If a node is to be drained and contains a cluster's primary instance, a switchover happens ahead of the drain. Once the instance in the node is downgraded to replica, the draining can resume. For single-instance clusters, a switchover is not possible, so CloudNativePG will prevent draining the node where the instance is housed. Additionally, in clusters with 3 or more instances, CloudNativePG guarantees that only one replica at a time is gracefully shut down during a drain operation. Each PostgreSQL Cluster is equipped with two associated PodDisruptionBudget resources - you can easily confirm it with the kubectl get pdb command. Our recommendation is to leave pod disruption budgets enabled for every production Postgres cluster. This can be effortlessly managed by toggling the .spec.enablePDB option, as detailed in the API reference .","title":"Pod Disruption Budgets"},{"location":"kubernetes_upgrade/#postgresql-clusters-used-for-development-or-testing","text":"For PostgreSQL clusters used for development purposes, often consisting of a single instance, it is essential to disable pod disruption budgets. Failure to do so will prevent the node hosting that cluster from being drained. The following example illustrates how to disable pod disruption budgets for a 1-instance development cluster: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: dev spec: instances: 1 enablePDB: false storage: size: 1Gi This configuration ensures smoother maintenance procedures without restrictions on draining the node during development activities.","title":"PostgreSQL Clusters used for Development or Testing"},{"location":"kubernetes_upgrade/#node-maintenance-window","text":"Important While CloudNativePG will continue supporting the node maintenance window, it is currently recommended to transition to direct control of pod disruption budgets, as explained in the previous section. This section is retained mainly for backward compatibility. Prior to release 1.23, CloudNativePG had just one declarative mechanism to manage Kubernetes upgrades when dealing with local storage: you had to temporarily put the cluster in maintenance mode through the nodeMaintenanceWindow option to avoid standard self-healing procedures to kick in, while, for example, enlarging the partition on the physical node or updating the node itself. Warning Limit the duration of the maintenance window to the shortest amount of time possible. In this phase, some of the expected behaviors of Kubernetes are either disabled or running with some limitations, including self-healing, rolling updates, and Pod disruption budget. The nodeMaintenanceWindow option of the cluster has two further settings: inProgress : Boolean value that states if the maintenance window for the nodes is currently in progress or not. By default, it is set to off . During the maintenance window, the reusePVC option below is evaluated by the operator. reusePVC : Boolean value that defines if an existing PVC is reused or not during the maintenance operation. By default, it is set to on . When enabled , Kubernetes waits for the node to come up again and then reuses the existing PVC; the PodDisruptionBudget policy is temporarily removed. When disabled , Kubernetes forces the recreation of the Pod on a different node with a new PVC by relying on PostgreSQL's physical streaming replication, then destroys the old PVC together with the Pod. This scenario is generally not recommended unless the database's size is small, and re-cloning the new PostgreSQL instance takes shorter than waiting. This behavior does not apply to clusters with only one instance and reusePVC disabled: see section below. Note When performing the kubectl drain command, you will need to add the --delete-emptydir-data option. Don't be afraid: it refers to another volume internally used by the operator - not the PostgreSQL data directory. Important PodDisruptionBudget management can be disabled by setting the .spec.enablePDB field to false . In that case, the operator won't create PodDisruptionBudgets and will delete them if they were previously created.","title":"Node Maintenance Window"},{"location":"kubernetes_upgrade/#single-instance-clusters-with-reusepvc-set-to-false","text":"Important We recommend to always create clusters with more than one instance in order to guarantee high availability. Deleting the only PostgreSQL instance in a single instance cluster with reusePVC set to false would imply all data being lost, therefore we prevent users from draining nodes such instances might be running on, even in maintenance mode. However, in case maintenance is required for such a node you have two options: Enable reusePVC , accepting the downtime Replicate the instance on a different node and switch over the primary As long as a database service downtime is acceptable for your environment, draining the node is as simple as setting the nodeMaintenanceWindow to inProgress: true and reusePVC: true . This will allow the instance to be deleted and recreated as soon as the original PVC is available (e.g. with node local storage, as soon as the node is back up). Otherwise you will have to scale up the cluster, creating a new instance on a different node and promoting the new instance to primary in order to shut down the original one on the node undergoing maintenance. The only downtime in this case will be the duration of the switchover. A possible approach could be: Cordon the node on which the current instance is running. Scale up the cluster to 2 instances, could take some time depending on the database size. As soon as the new instance is running, the operator will automatically perform a switchover given that the current primary is running on a cordoned node. Scale back down the cluster to a single instance, this will delete the old instance The old primary's node can now be drained successfully, while leaving the new primary running on a new node.","title":"Single instance clusters with reusePVC set to false"},{"location":"labels_annotations/","text":"Labels and annotations Resources in Kubernetes are organized in a flat structure, with no hierarchical information or relationship between them. However, such resources and objects can be linked together and put in relationship through labels and annotations . Info For more information, see the Kubernetes documentation on annotations and labels . In brief: An annotation is used to assign additional non-identifying information to resources with the goal of facilitating integration with external tools. A label is used to group objects and query them through the Kubernetes native selector capability. You can select one or more labels or annotations to use in your CloudNativePG deployments. Then you need to configure the operator so that when you define these labels or annotations in a cluster's metadata, they're inherited by all resources created by it (including pods). Note Label and annotation inheritance is the technique adopted by CloudNativePG instead of alternative approaches such as pod templates. Predefined labels CloudNativePG manages the following predefined labels: cnpg.io/backupDate The date of the backup in ISO 8601 format ( YYYYMMDD ). This label is available only on VolumeSnapshot resources. cnpg.io/backupName Backup identifier. This label is available only on VolumeSnapshot resources. cnpg.io/backupMonth The year/month when a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/backupTimeline The timeline of the instance when a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/backupYear The year a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/cluster Name of the cluster. cnpg.io/immediateBackup Applied to a Backup resource if the backup is the first one created from a ScheduledBackup object having immediate set to true . cnpg.io/instanceName Name of the PostgreSQL instance (replaces the old and deprecated postgresql label). cnpg.io/jobRole Role of the job (that is, import , initdb , join , ...) cnpg.io/onlineBackup Whether the backup is online (hot) or taken when Postgres is down (cold). This label is available only on VolumeSnapshot resources. cnpg.io/podRole Distinguishes pods dedicated to pooler deployment from those used for database instances. cnpg.io/poolerName Name of the PgBouncer pooler. cnpg.io/pvcRole Purpose of the PVC, such as PG_DATA or PG_WAL . cnpg.io/reload Available on ConfigMap and Secret resources. When set to true , a change in the resource is automatically reloaded by the operator. cnpg.io/userType Specifies the type of PostgreSQL user associated with the Secret , either superuser (Postgres superuser access) or app (application-level user in CloudNativePG terminology), and is limited to the default users created by CloudNativePG (typically postgres and app ). role - deprecated Whether the instance running in a pod is a primary or a replica . This label is deprecated, you should use cnpg.io/instanceRole instead. cnpg.io/scheduled-backup When available, name of the ScheduledBackup resource that created a given Backup object. cnpg.io/instanceRole Whether the instance running in a pod is a primary or a replica . Predefined annotations CloudNativePG manages the following predefined annotations: container.apparmor.security.beta.kubernetes.io/* Name of the AppArmor profile to apply to the named container. See AppArmor for details. cnpg.io/backupEndTime The time a backup ended. This annotation is available only on VolumeSnapshot resources. cnpg.io/backupEndWAL The WAL at the conclusion of a backup. This annotation is available only on VolumeSnapshot resources. cnpg.io/backupStartTime The time a backup started. cnpg.io/backupStartWAL The WAL at the start of a backup. This annotation is available only on VolumeSnapshot resources. cnpg.io/coredumpFilter Filter to control the coredump of Postgres processes, expressed with a bitmask. By default it's set to 0x31 to exclude shared memory segments from the dump. See PostgreSQL core dumps for more information. cnpg.io/clusterManifest Manifest of the Cluster owning this resource (such as a PVC). This label replaces the old, deprecated cnpg.io/hibernateClusterManifest label. cnpg.io/fencedInstances List of the instances that need to be fenced, expressed in JSON format. The whole cluster is fenced if the list contains the * element. cnpg.io/forceLegacyBackup Applied to a Cluster resource for testing purposes only, to simulate the behavior of barman-cloud-backup prior to version 3.4 (Jan 2023) when the --name option wasn't available. cnpg.io/hash The hash value of the resource. cnpg.io/hibernation Applied to a Cluster resource to control the declarative hibernation feature . Allowed values are on and off . cnpg.io/managedSecrets Pull secrets managed by the operator and automatically set in the ServiceAccount resources for each Postgres cluster. cnpg.io/nodeSerial On a pod resource, identifies the serial number of the instance within the Postgres cluster. cnpg.io/operatorVersion Version of the operator. cnpg.io/pgControldata Output of the pg_controldata command. This annotation replaces the old, deprecated cnpg.io/hibernatePgControlData annotation. cnpg.io/podEnvHash Deprecated, as the cnpg.io/podSpec annotation now also contains the pod environment. cnpg.io/podPatch Annotation can be applied on a Cluster resource. When set to JSON-patch formatted patch, the patch will be applied on the instance Pods. \u26a0\ufe0f WARNING: This feature may introduce discrepancies between the operator\u2019s expectations and Kubernetes behavior. Use with caution and only as a last resort. IMPORTANT : adding or changing this annotation won't trigger a rolling deployment of the generated Pods. The latter can be triggered manually by the user with kubectl cnpg restart . cnpg.io/podSpec Snapshot of the spec of the pod generated by the operator. This annotation replaces the old, deprecated cnpg.io/podEnvHash annotation. cnpg.io/poolerSpecHash Hash of the pooler resource. cnpg.io/pvcStatus Current status of the PVC: initializing , ready , or detached . cnpg.io/reconcilePodSpec Annotation can be applied to a Cluster or Pooler to prevent restarts. When set to disabled on a Cluster , the operator prevents instances from restarting due to changes in the PodSpec. This includes changes to: Topology or affinity Scheduler Volumes or containers When set to disabled on a Pooler , the operator restricts any modifications to the deployment specification, except for changes to spec.instances . cnpg.io/reconciliationLoop When set to disabled on a Cluster , the operator prevents the reconciliation loop from running. cnpg.io/reloadedAt Contains the latest cluster reload time. reload is triggered by the user through a plugin. cnpg.io/skipEmptyWalArchiveCheck When set to enabled on a Cluster resource, the operator disables the check that ensures that the WAL archive is empty before writing data. Use at your own risk. cnpg.io/skipWalArchiving When set to enabled on a Cluster resource, the operator disables WAL archiving. This will set archive_mode to off and require a restart of all PostgreSQL instances. Use at your own risk. cnpg.io/snapshotStartTime The time a snapshot started. cnpg.io/snapshotEndTime The time a snapshot was marked as ready to use. cnpg.io/validation When set to disabled on a CloudNativePG-managed custom resource, the validation webhook allows all changes without restriction. \u26a0\ufe0f WARNING: Disabling validation may permit unsafe or destructive operations. Use this setting with caution and at your own risk. cnpg.io/volumeSnapshotDeadline Applied to Backup and ScheduledBackup resources, allows you to control how long the operator should retry recoverable errors before considering the volume snapshot backup failed. In minutes, defaulting to 10. kubectl.kubernetes.io/restartedAt When available, the time of last requested restart of a Postgres cluster. Prerequisites By default, no label or annotation defined in the cluster's metadata is inherited by the associated resources. To enable label/annotation inheritance, follow the instructions provided in Operator configuration . The following continues from that example and limits it to the following: Annotations: categories Labels: app , environment , and workload Note Feel free to select the names that most suit your context for both annotations and labels. You can also use wildcards in naming and adopt strategies like using mycompany/* for all labels or setting annotations starting with mycompany/ to be inherited. Defining cluster's metadata When defining the cluster, before any resource is deployed, you can set the metadata as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example annotations: categories: database labels: environment: production workload: database app: sso spec: # ... <snip> Once the cluster is deployed, you can verify, for example, that the labels were correctly set in the pods: kubectl get pods --show-labels Current limitations Currently, CloudNativePG doesn't automatically propagate labels or annotations deletions. Therefore, when an annotation or label is removed from a cluster that was previously propagated to the underlying pods, the operator doesn't remove it on the associated resources.","title":"Labels and annotations"},{"location":"labels_annotations/#labels-and-annotations","text":"Resources in Kubernetes are organized in a flat structure, with no hierarchical information or relationship between them. However, such resources and objects can be linked together and put in relationship through labels and annotations . Info For more information, see the Kubernetes documentation on annotations and labels . In brief: An annotation is used to assign additional non-identifying information to resources with the goal of facilitating integration with external tools. A label is used to group objects and query them through the Kubernetes native selector capability. You can select one or more labels or annotations to use in your CloudNativePG deployments. Then you need to configure the operator so that when you define these labels or annotations in a cluster's metadata, they're inherited by all resources created by it (including pods). Note Label and annotation inheritance is the technique adopted by CloudNativePG instead of alternative approaches such as pod templates.","title":"Labels and annotations"},{"location":"labels_annotations/#predefined-labels","text":"CloudNativePG manages the following predefined labels: cnpg.io/backupDate The date of the backup in ISO 8601 format ( YYYYMMDD ). This label is available only on VolumeSnapshot resources. cnpg.io/backupName Backup identifier. This label is available only on VolumeSnapshot resources. cnpg.io/backupMonth The year/month when a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/backupTimeline The timeline of the instance when a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/backupYear The year a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/cluster Name of the cluster. cnpg.io/immediateBackup Applied to a Backup resource if the backup is the first one created from a ScheduledBackup object having immediate set to true . cnpg.io/instanceName Name of the PostgreSQL instance (replaces the old and deprecated postgresql label). cnpg.io/jobRole Role of the job (that is, import , initdb , join , ...) cnpg.io/onlineBackup Whether the backup is online (hot) or taken when Postgres is down (cold). This label is available only on VolumeSnapshot resources. cnpg.io/podRole Distinguishes pods dedicated to pooler deployment from those used for database instances. cnpg.io/poolerName Name of the PgBouncer pooler. cnpg.io/pvcRole Purpose of the PVC, such as PG_DATA or PG_WAL . cnpg.io/reload Available on ConfigMap and Secret resources. When set to true , a change in the resource is automatically reloaded by the operator. cnpg.io/userType Specifies the type of PostgreSQL user associated with the Secret , either superuser (Postgres superuser access) or app (application-level user in CloudNativePG terminology), and is limited to the default users created by CloudNativePG (typically postgres and app ). role - deprecated Whether the instance running in a pod is a primary or a replica . This label is deprecated, you should use cnpg.io/instanceRole instead. cnpg.io/scheduled-backup When available, name of the ScheduledBackup resource that created a given Backup object. cnpg.io/instanceRole Whether the instance running in a pod is a primary or a replica .","title":"Predefined labels"},{"location":"labels_annotations/#predefined-annotations","text":"CloudNativePG manages the following predefined annotations: container.apparmor.security.beta.kubernetes.io/* Name of the AppArmor profile to apply to the named container. See AppArmor for details. cnpg.io/backupEndTime The time a backup ended. This annotation is available only on VolumeSnapshot resources. cnpg.io/backupEndWAL The WAL at the conclusion of a backup. This annotation is available only on VolumeSnapshot resources. cnpg.io/backupStartTime The time a backup started. cnpg.io/backupStartWAL The WAL at the start of a backup. This annotation is available only on VolumeSnapshot resources. cnpg.io/coredumpFilter Filter to control the coredump of Postgres processes, expressed with a bitmask. By default it's set to 0x31 to exclude shared memory segments from the dump. See PostgreSQL core dumps for more information. cnpg.io/clusterManifest Manifest of the Cluster owning this resource (such as a PVC). This label replaces the old, deprecated cnpg.io/hibernateClusterManifest label. cnpg.io/fencedInstances List of the instances that need to be fenced, expressed in JSON format. The whole cluster is fenced if the list contains the * element. cnpg.io/forceLegacyBackup Applied to a Cluster resource for testing purposes only, to simulate the behavior of barman-cloud-backup prior to version 3.4 (Jan 2023) when the --name option wasn't available. cnpg.io/hash The hash value of the resource. cnpg.io/hibernation Applied to a Cluster resource to control the declarative hibernation feature . Allowed values are on and off . cnpg.io/managedSecrets Pull secrets managed by the operator and automatically set in the ServiceAccount resources for each Postgres cluster. cnpg.io/nodeSerial On a pod resource, identifies the serial number of the instance within the Postgres cluster. cnpg.io/operatorVersion Version of the operator. cnpg.io/pgControldata Output of the pg_controldata command. This annotation replaces the old, deprecated cnpg.io/hibernatePgControlData annotation. cnpg.io/podEnvHash Deprecated, as the cnpg.io/podSpec annotation now also contains the pod environment. cnpg.io/podPatch Annotation can be applied on a Cluster resource. When set to JSON-patch formatted patch, the patch will be applied on the instance Pods. \u26a0\ufe0f WARNING: This feature may introduce discrepancies between the operator\u2019s expectations and Kubernetes behavior. Use with caution and only as a last resort. IMPORTANT : adding or changing this annotation won't trigger a rolling deployment of the generated Pods. The latter can be triggered manually by the user with kubectl cnpg restart . cnpg.io/podSpec Snapshot of the spec of the pod generated by the operator. This annotation replaces the old, deprecated cnpg.io/podEnvHash annotation. cnpg.io/poolerSpecHash Hash of the pooler resource. cnpg.io/pvcStatus Current status of the PVC: initializing , ready , or detached . cnpg.io/reconcilePodSpec Annotation can be applied to a Cluster or Pooler to prevent restarts. When set to disabled on a Cluster , the operator prevents instances from restarting due to changes in the PodSpec. This includes changes to: Topology or affinity Scheduler Volumes or containers When set to disabled on a Pooler , the operator restricts any modifications to the deployment specification, except for changes to spec.instances . cnpg.io/reconciliationLoop When set to disabled on a Cluster , the operator prevents the reconciliation loop from running. cnpg.io/reloadedAt Contains the latest cluster reload time. reload is triggered by the user through a plugin. cnpg.io/skipEmptyWalArchiveCheck When set to enabled on a Cluster resource, the operator disables the check that ensures that the WAL archive is empty before writing data. Use at your own risk. cnpg.io/skipWalArchiving When set to enabled on a Cluster resource, the operator disables WAL archiving. This will set archive_mode to off and require a restart of all PostgreSQL instances. Use at your own risk. cnpg.io/snapshotStartTime The time a snapshot started. cnpg.io/snapshotEndTime The time a snapshot was marked as ready to use. cnpg.io/validation When set to disabled on a CloudNativePG-managed custom resource, the validation webhook allows all changes without restriction. \u26a0\ufe0f WARNING: Disabling validation may permit unsafe or destructive operations. Use this setting with caution and at your own risk. cnpg.io/volumeSnapshotDeadline Applied to Backup and ScheduledBackup resources, allows you to control how long the operator should retry recoverable errors before considering the volume snapshot backup failed. In minutes, defaulting to 10. kubectl.kubernetes.io/restartedAt When available, the time of last requested restart of a Postgres cluster.","title":"Predefined annotations"},{"location":"labels_annotations/#prerequisites","text":"By default, no label or annotation defined in the cluster's metadata is inherited by the associated resources. To enable label/annotation inheritance, follow the instructions provided in Operator configuration . The following continues from that example and limits it to the following: Annotations: categories Labels: app , environment , and workload Note Feel free to select the names that most suit your context for both annotations and labels. You can also use wildcards in naming and adopt strategies like using mycompany/* for all labels or setting annotations starting with mycompany/ to be inherited.","title":"Prerequisites"},{"location":"labels_annotations/#defining-clusters-metadata","text":"When defining the cluster, before any resource is deployed, you can set the metadata as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example annotations: categories: database labels: environment: production workload: database app: sso spec: # ... <snip> Once the cluster is deployed, you can verify, for example, that the labels were correctly set in the pods: kubectl get pods --show-labels","title":"Defining cluster's metadata"},{"location":"labels_annotations/#current-limitations","text":"Currently, CloudNativePG doesn't automatically propagate labels or annotations deletions. Therefore, when an annotation or label is removed from a cluster that was previously propagated to the underlying pods, the operator doesn't remove it on the associated resources.","title":"Current limitations"},{"location":"logging/","text":"Logging CloudNativePG outputs logs in JSON format directly to standard output, including PostgreSQL logs, without persisting them to storage for security reasons. This design facilitates seamless integration with most Kubernetes-compatible log management tools, including command line ones like stern . Important Long-term storage and management of logs are outside the scope of the operator and should be handled at the Kubernetes infrastructure level. For more information, see the Kubernetes Logging Architecture documentation. Each log entry includes the following fields: level \u2013 The log level (e.g., info , notice ). ts \u2013 The timestamp. logger \u2013 The type of log (e.g., postgres , pg_controldata ). msg \u2013 The log message, or the keyword record if the message is in JSON format. record \u2013 The actual record, with a structure that varies depending on the logger type. logging_pod \u2013 The name of the pod where the log was generated. Info If your log ingestion system requires custom field names, you can rename the level and ts fields using the log-field-level and log-field-timestamp flags in the operator controller. This can be configured by editing the Deployment definition of the cloudnative-pg operator. Cluster Logs You can configure the log level for the instance pods in the cluster specification using the logLevel option. Available log levels are: error , warning , info (default), debug , and trace . Important Currently, the log level can only be set at the time the instance starts. Changes to the log level in the cluster specification after the cluster has started will only apply to new pods, not existing ones. Operator Logs The logs produced by the operator pod can be configured with log levels, same as instance pods: error , warning , info (default), debug , and trace . The log level for the operator can be configured by editing the Deployment definition of the operator and setting the --log-level command line argument to the desired value. PostgreSQL Logs Each PostgreSQL log entry is a JSON object with the logger key set to postgres . The structure of the log entries is as follows: { \"level\": \"info\", \"ts\": 1619781249.7188137, \"logger\": \"postgres\", \"msg\": \"record\", \"record\": { \"log_time\": \"2021-04-30 11:14:09.718 UTC\", \"user_name\": \"\", \"database_name\": \"\", \"process_id\": \"25\", \"connection_from\": \"\", \"session_id\": \"608be681.19\", \"session_line_num\": \"1\", \"command_tag\": \"\", \"session_start_time\": \"2021-04-30 11:14:09 UTC\", \"virtual_transaction_id\": \"\", \"transaction_id\": \"0\", \"error_severity\": \"LOG\", \"sql_state_code\": \"00000\", \"message\": \"database system was interrupted; last known up at 2021-04-30 11:14:07 UTC\", \"detail\": \"\", \"hint\": \"\", \"internal_query\": \"\", \"internal_query_pos\": \"\", \"context\": \"\", \"query\": \"\", \"query_pos\": \"\", \"location\": \"\", \"application_name\": \"\", \"backend_type\": \"startup\" }, \"logging_pod\": \"cluster-example-1\", } Info Internally, the operator uses PostgreSQL's CSV log format. For more details, refer to the PostgreSQL documentation on CSV log format . PGAudit Logs CloudNativePG offers seamless and native support for PGAudit on PostgreSQL clusters. To enable PGAudit, add the necessary pgaudit parameters in the postgresql section of the cluster configuration. Important The PGAudit library must be added to shared_preload_libraries . CloudNativePG automatically manages this based on the presence of pgaudit.* parameters in the PostgreSQL configuration. The operator handles both the addition and removal of the library from shared_preload_libraries . Additionally, the operator manages the creation and removal of the PGAudit extension across all databases within the cluster. Important CloudNativePG executes the CREATE EXTENSION and DROP EXTENSION commands in all databases within the cluster that accept connections. The following example demonstrates a PostgreSQL Cluster deployment with PGAudit enabled and configured: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 postgresql: parameters: \"pgaudit.log\": \"all, -misc\" \"pgaudit.log_catalog\": \"off\" \"pgaudit.log_parameter\": \"on\" \"pgaudit.log_relation\": \"on\" storage: size: 1Gi The audit CSV log entries generated by PGAudit are parsed and routed to standard output in JSON format, similar to all other logs: .logger is set to pgaudit . .msg is set to record . .record contains the entire parsed record as a JSON object. This structure resembles that of logging_collector logs, with the exception of .record.audit , which contains the PGAudit CSV message formatted as a JSON object. This example shows sample log entries: { \"level\": \"info\", \"ts\": 1627394507.8814096, \"logger\": \"pgaudit\", \"msg\": \"record\", \"record\": { \"log_time\": \"2021-07-27 14:01:47.881 UTC\", \"user_name\": \"postgres\", \"database_name\": \"postgres\", \"process_id\": \"203\", \"connection_from\": \"[local]\", \"session_id\": \"610011cb.cb\", \"session_line_num\": \"1\", \"command_tag\": \"SELECT\", \"session_start_time\": \"2021-07-27 14:01:47 UTC\", \"virtual_transaction_id\": \"3/336\", \"transaction_id\": \"0\", \"error_severity\": \"LOG\", \"sql_state_code\": \"00000\", \"backend_type\": \"client backend\", \"audit\": { \"audit_type\": \"SESSION\", \"statement_id\": \"1\", \"substatement_id\": \"1\", \"class\": \"READ\", \"command\": \"SELECT FOR KEY SHARE\", \"statement\": \"SELECT pg_current_wal_lsn()\", \"parameter\": \"<none>\" } }, \"logging_pod\": \"cluster-example-1\", } See the PGAudit documentation for more details about each field in a record. Other Logs All logs generated by the operator and its instances are in JSON format, with the logger field indicating the process that produced them. The possible logger values are as follows: barman-cloud-wal-archive : logs from barman-cloud-wal-archive barman-cloud-wal-restore : logs from barman-cloud-wal-restore initdb : logs from running initdb pg_basebackup : logs from running pg_basebackup pg_controldata : logs from running pg_controldata pg_ctl : logs from running any pg_ctl subcommand pg_rewind : logs from running pg_rewind pgaudit : logs from the PGAudit extension postgres : logs from the postgres instance (with msg distinct from record ) wal-archive : logs from the wal-archive subcommand of the instance manager wal-restore : logs from the wal-restore subcommand of the instance manager instance-manager : from the PostgreSQL instance manager With the exception of postgres , which follows a specific structure, all other logger values contain the msg field with the escaped message that is logged.","title":"Logging"},{"location":"logging/#logging","text":"CloudNativePG outputs logs in JSON format directly to standard output, including PostgreSQL logs, without persisting them to storage for security reasons. This design facilitates seamless integration with most Kubernetes-compatible log management tools, including command line ones like stern . Important Long-term storage and management of logs are outside the scope of the operator and should be handled at the Kubernetes infrastructure level. For more information, see the Kubernetes Logging Architecture documentation. Each log entry includes the following fields: level \u2013 The log level (e.g., info , notice ). ts \u2013 The timestamp. logger \u2013 The type of log (e.g., postgres , pg_controldata ). msg \u2013 The log message, or the keyword record if the message is in JSON format. record \u2013 The actual record, with a structure that varies depending on the logger type. logging_pod \u2013 The name of the pod where the log was generated. Info If your log ingestion system requires custom field names, you can rename the level and ts fields using the log-field-level and log-field-timestamp flags in the operator controller. This can be configured by editing the Deployment definition of the cloudnative-pg operator.","title":"Logging"},{"location":"logging/#cluster-logs","text":"You can configure the log level for the instance pods in the cluster specification using the logLevel option. Available log levels are: error , warning , info (default), debug , and trace . Important Currently, the log level can only be set at the time the instance starts. Changes to the log level in the cluster specification after the cluster has started will only apply to new pods, not existing ones.","title":"Cluster Logs"},{"location":"logging/#operator-logs","text":"The logs produced by the operator pod can be configured with log levels, same as instance pods: error , warning , info (default), debug , and trace . The log level for the operator can be configured by editing the Deployment definition of the operator and setting the --log-level command line argument to the desired value.","title":"Operator Logs"},{"location":"logging/#postgresql-logs","text":"Each PostgreSQL log entry is a JSON object with the logger key set to postgres . The structure of the log entries is as follows: { \"level\": \"info\", \"ts\": 1619781249.7188137, \"logger\": \"postgres\", \"msg\": \"record\", \"record\": { \"log_time\": \"2021-04-30 11:14:09.718 UTC\", \"user_name\": \"\", \"database_name\": \"\", \"process_id\": \"25\", \"connection_from\": \"\", \"session_id\": \"608be681.19\", \"session_line_num\": \"1\", \"command_tag\": \"\", \"session_start_time\": \"2021-04-30 11:14:09 UTC\", \"virtual_transaction_id\": \"\", \"transaction_id\": \"0\", \"error_severity\": \"LOG\", \"sql_state_code\": \"00000\", \"message\": \"database system was interrupted; last known up at 2021-04-30 11:14:07 UTC\", \"detail\": \"\", \"hint\": \"\", \"internal_query\": \"\", \"internal_query_pos\": \"\", \"context\": \"\", \"query\": \"\", \"query_pos\": \"\", \"location\": \"\", \"application_name\": \"\", \"backend_type\": \"startup\" }, \"logging_pod\": \"cluster-example-1\", } Info Internally, the operator uses PostgreSQL's CSV log format. For more details, refer to the PostgreSQL documentation on CSV log format .","title":"PostgreSQL Logs"},{"location":"logging/#pgaudit-logs","text":"CloudNativePG offers seamless and native support for PGAudit on PostgreSQL clusters. To enable PGAudit, add the necessary pgaudit parameters in the postgresql section of the cluster configuration. Important The PGAudit library must be added to shared_preload_libraries . CloudNativePG automatically manages this based on the presence of pgaudit.* parameters in the PostgreSQL configuration. The operator handles both the addition and removal of the library from shared_preload_libraries . Additionally, the operator manages the creation and removal of the PGAudit extension across all databases within the cluster. Important CloudNativePG executes the CREATE EXTENSION and DROP EXTENSION commands in all databases within the cluster that accept connections. The following example demonstrates a PostgreSQL Cluster deployment with PGAudit enabled and configured: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 postgresql: parameters: \"pgaudit.log\": \"all, -misc\" \"pgaudit.log_catalog\": \"off\" \"pgaudit.log_parameter\": \"on\" \"pgaudit.log_relation\": \"on\" storage: size: 1Gi The audit CSV log entries generated by PGAudit are parsed and routed to standard output in JSON format, similar to all other logs: .logger is set to pgaudit . .msg is set to record . .record contains the entire parsed record as a JSON object. This structure resembles that of logging_collector logs, with the exception of .record.audit , which contains the PGAudit CSV message formatted as a JSON object. This example shows sample log entries: { \"level\": \"info\", \"ts\": 1627394507.8814096, \"logger\": \"pgaudit\", \"msg\": \"record\", \"record\": { \"log_time\": \"2021-07-27 14:01:47.881 UTC\", \"user_name\": \"postgres\", \"database_name\": \"postgres\", \"process_id\": \"203\", \"connection_from\": \"[local]\", \"session_id\": \"610011cb.cb\", \"session_line_num\": \"1\", \"command_tag\": \"SELECT\", \"session_start_time\": \"2021-07-27 14:01:47 UTC\", \"virtual_transaction_id\": \"3/336\", \"transaction_id\": \"0\", \"error_severity\": \"LOG\", \"sql_state_code\": \"00000\", \"backend_type\": \"client backend\", \"audit\": { \"audit_type\": \"SESSION\", \"statement_id\": \"1\", \"substatement_id\": \"1\", \"class\": \"READ\", \"command\": \"SELECT FOR KEY SHARE\", \"statement\": \"SELECT pg_current_wal_lsn()\", \"parameter\": \"<none>\" } }, \"logging_pod\": \"cluster-example-1\", } See the PGAudit documentation for more details about each field in a record.","title":"PGAudit Logs"},{"location":"logging/#other-logs","text":"All logs generated by the operator and its instances are in JSON format, with the logger field indicating the process that produced them. The possible logger values are as follows: barman-cloud-wal-archive : logs from barman-cloud-wal-archive barman-cloud-wal-restore : logs from barman-cloud-wal-restore initdb : logs from running initdb pg_basebackup : logs from running pg_basebackup pg_controldata : logs from running pg_controldata pg_ctl : logs from running any pg_ctl subcommand pg_rewind : logs from running pg_rewind pgaudit : logs from the PGAudit extension postgres : logs from the postgres instance (with msg distinct from record ) wal-archive : logs from the wal-archive subcommand of the instance manager wal-restore : logs from the wal-restore subcommand of the instance manager instance-manager : from the PostgreSQL instance manager With the exception of postgres , which follows a specific structure, all other logger values contain the msg field with the escaped message that is logged.","title":"Other Logs"},{"location":"logical_replication/","text":"Logical Replication PostgreSQL extends its replication capabilities beyond physical replication, which operates at the level of exact block addresses and byte-by-byte copying, by offering logical replication . Logical replication replicates data objects and their changes based on a defined replication identity, typically the primary key. Logical replication uses a publish-and-subscribe model, where subscribers connect to publications on a publisher node. Subscribers pull data changes from these publications and can re-publish them, enabling cascading replication and complex topologies. This flexible model is particularly useful for: Online data migrations Live PostgreSQL version upgrades Data distribution across systems Real-time analytics Integration with external applications Info For more details, examples, and limitations, please refer to the official PostgreSQL documentation on Logical Replication . CloudNativePG enhances this capability by providing declarative support for key PostgreSQL logical replication objects: Publications via the Publication resource Subscriptions via the Subscription resource Publications In PostgreSQL's publish-and-subscribe replication model, a publication is the source of data changes. It acts as a logical container for the change sets (also known as replication sets ) generated from one or more tables within a database. Publications can be defined on any PostgreSQL 10+ instance acting as the publisher , including instances managed by popular DBaaS solutions in the public cloud. Each publication is tied to a single database and provides fine-grained control over which tables and changes are replicated. For publishers outside Kubernetes, you can create publications using SQL or leverage the cnpg publication create plugin command . When managing Cluster objects with CloudNativePG , PostgreSQL publications can be defined declaratively through the Publication resource. Info Please refer to the API reference for the full list of attributes you can define for each Publication object. Suppose you have a cluster named freddie and want to replicate all tables in the app database. Here's a Publication manifest: apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true In the above example: The publication object is named freddie-publisher ( metadata.name ). The publication is created via the primary of the freddie cluster ( spec.cluster.name ) with name publisher ( spec.name ). It includes all tables ( spec.target.allTables: true ) from the app database ( spec.dbname ). Important While allTables simplifies configuration, PostgreSQL offers fine-grained control for replicating specific tables or targeted data changes. For advanced configurations, consult the PostgreSQL documentation . Additionally, refer to the CloudNativePG API reference for details on declaratively customizing replication targets. Required Fields in the Publication Manifest The following fields are required for a Publication object: metadata.name : Unique name for the Kubernetes Publication object. spec.cluster.name : Name of the PostgreSQL cluster. spec.dbname : Database name where the publication is created. spec.name : Publication name in PostgreSQL. spec.target : Specifies the tables or changes to include in the publication. The Publication object must reference a specific Cluster , determining where the publication will be created. It is managed by the cluster's primary instance, ensuring the publication is created or updated as needed. Reconciliation and Status After creating a Publication , CloudNativePG manages it on the primary instance of the specified cluster. Following a successful reconciliation cycle, the Publication status will reflect the following: applied: true , indicates the configuration has been successfully applied. observedGeneration matches metadata.generation , confirming the applied configuration corresponds to the most recent changes. If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field. Removing a publication The publicationReclaimPolicy field controls the behavior when deleting a Publication object: retain (default): Leaves the publication in PostgreSQL for manual management. delete : Automatically removes the publication from PostgreSQL. Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true publicationReclaimPolicy: delete In this case, deleting the Publication object also removes the publisher publication from the app database of the freddie cluster. Subscriptions In PostgreSQL's publish-and-subscribe replication model, a subscription represents the downstream component that consumes data changes. A subscription establishes the connection to a publisher's database and specifies the set of publications (one or more) it subscribes to. Subscriptions can be created on any supported PostgreSQL instance acting as the subscriber . Important Since schema definitions are not replicated, the subscriber must have the corresponding tables already defined before data replication begins. CloudNativePG simplifies subscription management by enabling you to define them declaratively using the Subscription resource. Info Please refer to the API reference for the full list of attributes you can define for each Subscription object. Suppose you want to replicate changes from the publisher publication on the app database of the freddie cluster ( publisher ) to the app database of the king cluster ( subscriber ). Here's an example of a Subscription manifest: apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher In the above example: The subscription object is named freddie-to-king-subscriber ( metadata.name ). The subscription is created in the app database ( spec.dbname ) of the king cluster ( spec.cluster.name ), with name subscriber ( spec.name ). It connects to the publisher publication in the external freddie cluster, referenced by spec.externalClusterName . To facilitate this setup, the freddie external cluster must be defined in the king cluster's configuration. Below is an example excerpt showing how to define the external cluster in the king manifest: externalClusters: - name: freddie connectionParameters: host: freddie-rw.default.svc user: postgres dbname: app Info For more details on configuring the externalClusters section, see the \"Bootstrap\" section of the documentation. As you can see, a subscription can connect to any PostgreSQL database accessible over the network. This flexibility allows you to seamlessly migrate your data into Kubernetes with nearly zero downtime. It\u2019s an excellent option for transitioning from various environments, including popular cloud-based Database-as-a-Service (DBaaS) platforms. Required Fields in the Subscription Manifest The following fields are mandatory for defining a Subscription object: metadata.name : A unique name for the Kubernetes Subscription object within its namespace. spec.cluster.name : The name of the PostgreSQL cluster where the subscription will be created. spec.dbname : The name of the database in which the subscription will be created. spec.name : The name of the subscription as it will appear in PostgreSQL. spec.externalClusterName : The name of the external cluster, as defined in the spec.cluster.name cluster's configuration. This references the publisher database. spec.publicationName : The name of the publication in the publisher database to which the subscription will connect. The Subscription object must reference a specific Cluster , determining where the subscription will be managed. CloudNativePG ensures that the subscription is created or updated on the primary instance of the specified cluster. Reconciliation and Status After creating a Subscription , CloudNativePG manages it on the primary instance of the specified cluster. Following a successful reconciliation cycle, the Subscription status will reflect the following: applied: true , indicates the configuration has been successfully applied. observedGeneration matches metadata.generation , confirming the applied configuration corresponds to the most recent changes. If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field. Removing a subscription The subscriptionReclaimPolicy field controls the behavior when deleting a Subscription object: retain (default): Leaves the subscription in PostgreSQL for manual management. delete : Automatically removes the subscription from PostgreSQL. Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher subscriptionReclaimPolicy: delete In this case, deleting the Subscription object also removes the subscriber subscription from the app database of the king cluster. Limitations Logical replication in PostgreSQL has some inherent limitations, as outlined in the official documentation . Notably, the following objects are not replicated: Database schema and DDL commands Sequence data Large objects Addressing Schema Replication The first limitation, related to schema replication, can be easily addressed using CloudNativePG's capabilities. For instance, you can leverage the import bootstrap feature to copy the schema of the tables you need to replicate. Alternatively, you can manually create the schema as you would for any PostgreSQL database. Handling Sequences While sequences are not automatically kept in sync through logical replication, CloudNativePG provides a solution to be used in live migrations. You can use the cnpg plugin to synchronize sequence values, ensuring consistency between the publisher and subscriber databases. Example of live migration and major Postgres upgrade with logical replication To highlight the powerful capabilities of logical replication, this example demonstrates how to replicate data from a publisher database ( freddie ) running PostgreSQL 16 to a subscriber database ( king ) running the latest PostgreSQL version. This setup can be deployed in your Kubernetes cluster for evaluation and hands-on learning. This example illustrates how logical replication facilitates live migrations and upgrades between PostgreSQL versions while ensuring data consistency. By combining logical replication with CloudNativePG, you can easily set up, manage, and evaluate such scenarios in a Kubernetes environment. Step 1: Setting Up the Publisher ( freddie ) The first step involves creating a freddie PostgreSQL cluster with version 16. The cluster contains a single instance and includes an app database initialized with a table, n , storing 10,000 numbers. A logical replication publication named publisher is also configured to include all tables in the database. Here\u2019s the manifest for setting up the freddie cluster and its publication resource: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: freddie spec: instances: 1 imageName: ghcr.io/cloudnative-pg/postgresql:16 storage: size: 1Gi bootstrap: initdb: postInitApplicationSQL: - CREATE TABLE n (i SERIAL PRIMARY KEY, m INTEGER) - INSERT INTO n (m) (SELECT generate_series(1, 10000)) - ALTER TABLE n OWNER TO app managed: roles: - name: app login: true replication: true --- apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true Step 2: Setting Up the Subscriber ( king ) Next, create the king PostgreSQL cluster, running the latest version of PostgreSQL. This cluster initializes by importing the schema from the app database on the freddie cluster using the external cluster configuration. A Subscription resource, freddie-to-king-subscription , is then configured to consume changes published by the publisher on freddie . Below is the manifest for setting up the king cluster and its subscription: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: king spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: microservice schemaOnly: true databases: - app source: externalCluster: freddie externalClusters: - name: freddie connectionParameters: host: freddie-rw.default.svc user: app dbname: app password: name: freddie-app key: password --- apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher Once the king cluster is running, you can verify that the replication is working by connecting to the app database and counting the records in the n table. The following example uses the psql command provided by the cnpg plugin for simplicity: kubectl cnpg psql king -- app -qAt -c 'SELECT count(*) FROM n' 10000 This command should return 10000 , confirming that the data from the freddie cluster has been successfully replicated to the king cluster. Using the cnpg plugin, you can also synchronize existing sequences to ensure consistency between the publisher and subscriber. The example below demonstrates how to synchronize a sequence for the king cluster: kubectl cnpg subscription sync-sequences king --subscription=subscriber SELECT setval('\"public\".\"n_i_seq\"', 10000); 10000 This command updates the sequence n_i_seq in the king cluster to match the current value, ensuring it is in sync with the source database.","title":"Logical Replication"},{"location":"logical_replication/#logical-replication","text":"PostgreSQL extends its replication capabilities beyond physical replication, which operates at the level of exact block addresses and byte-by-byte copying, by offering logical replication . Logical replication replicates data objects and their changes based on a defined replication identity, typically the primary key. Logical replication uses a publish-and-subscribe model, where subscribers connect to publications on a publisher node. Subscribers pull data changes from these publications and can re-publish them, enabling cascading replication and complex topologies. This flexible model is particularly useful for: Online data migrations Live PostgreSQL version upgrades Data distribution across systems Real-time analytics Integration with external applications Info For more details, examples, and limitations, please refer to the official PostgreSQL documentation on Logical Replication . CloudNativePG enhances this capability by providing declarative support for key PostgreSQL logical replication objects: Publications via the Publication resource Subscriptions via the Subscription resource","title":"Logical Replication"},{"location":"logical_replication/#publications","text":"In PostgreSQL's publish-and-subscribe replication model, a publication is the source of data changes. It acts as a logical container for the change sets (also known as replication sets ) generated from one or more tables within a database. Publications can be defined on any PostgreSQL 10+ instance acting as the publisher , including instances managed by popular DBaaS solutions in the public cloud. Each publication is tied to a single database and provides fine-grained control over which tables and changes are replicated. For publishers outside Kubernetes, you can create publications using SQL or leverage the cnpg publication create plugin command . When managing Cluster objects with CloudNativePG , PostgreSQL publications can be defined declaratively through the Publication resource. Info Please refer to the API reference for the full list of attributes you can define for each Publication object. Suppose you have a cluster named freddie and want to replicate all tables in the app database. Here's a Publication manifest: apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true In the above example: The publication object is named freddie-publisher ( metadata.name ). The publication is created via the primary of the freddie cluster ( spec.cluster.name ) with name publisher ( spec.name ). It includes all tables ( spec.target.allTables: true ) from the app database ( spec.dbname ). Important While allTables simplifies configuration, PostgreSQL offers fine-grained control for replicating specific tables or targeted data changes. For advanced configurations, consult the PostgreSQL documentation . Additionally, refer to the CloudNativePG API reference for details on declaratively customizing replication targets.","title":"Publications"},{"location":"logical_replication/#required-fields-in-the-publication-manifest","text":"The following fields are required for a Publication object: metadata.name : Unique name for the Kubernetes Publication object. spec.cluster.name : Name of the PostgreSQL cluster. spec.dbname : Database name where the publication is created. spec.name : Publication name in PostgreSQL. spec.target : Specifies the tables or changes to include in the publication. The Publication object must reference a specific Cluster , determining where the publication will be created. It is managed by the cluster's primary instance, ensuring the publication is created or updated as needed.","title":"Required Fields in the Publication Manifest"},{"location":"logical_replication/#reconciliation-and-status","text":"After creating a Publication , CloudNativePG manages it on the primary instance of the specified cluster. Following a successful reconciliation cycle, the Publication status will reflect the following: applied: true , indicates the configuration has been successfully applied. observedGeneration matches metadata.generation , confirming the applied configuration corresponds to the most recent changes. If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field.","title":"Reconciliation and Status"},{"location":"logical_replication/#removing-a-publication","text":"The publicationReclaimPolicy field controls the behavior when deleting a Publication object: retain (default): Leaves the publication in PostgreSQL for manual management. delete : Automatically removes the publication from PostgreSQL. Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true publicationReclaimPolicy: delete In this case, deleting the Publication object also removes the publisher publication from the app database of the freddie cluster.","title":"Removing a publication"},{"location":"logical_replication/#subscriptions","text":"In PostgreSQL's publish-and-subscribe replication model, a subscription represents the downstream component that consumes data changes. A subscription establishes the connection to a publisher's database and specifies the set of publications (one or more) it subscribes to. Subscriptions can be created on any supported PostgreSQL instance acting as the subscriber . Important Since schema definitions are not replicated, the subscriber must have the corresponding tables already defined before data replication begins. CloudNativePG simplifies subscription management by enabling you to define them declaratively using the Subscription resource. Info Please refer to the API reference for the full list of attributes you can define for each Subscription object. Suppose you want to replicate changes from the publisher publication on the app database of the freddie cluster ( publisher ) to the app database of the king cluster ( subscriber ). Here's an example of a Subscription manifest: apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher In the above example: The subscription object is named freddie-to-king-subscriber ( metadata.name ). The subscription is created in the app database ( spec.dbname ) of the king cluster ( spec.cluster.name ), with name subscriber ( spec.name ). It connects to the publisher publication in the external freddie cluster, referenced by spec.externalClusterName . To facilitate this setup, the freddie external cluster must be defined in the king cluster's configuration. Below is an example excerpt showing how to define the external cluster in the king manifest: externalClusters: - name: freddie connectionParameters: host: freddie-rw.default.svc user: postgres dbname: app Info For more details on configuring the externalClusters section, see the \"Bootstrap\" section of the documentation. As you can see, a subscription can connect to any PostgreSQL database accessible over the network. This flexibility allows you to seamlessly migrate your data into Kubernetes with nearly zero downtime. It\u2019s an excellent option for transitioning from various environments, including popular cloud-based Database-as-a-Service (DBaaS) platforms.","title":"Subscriptions"},{"location":"logical_replication/#required-fields-in-the-subscription-manifest","text":"The following fields are mandatory for defining a Subscription object: metadata.name : A unique name for the Kubernetes Subscription object within its namespace. spec.cluster.name : The name of the PostgreSQL cluster where the subscription will be created. spec.dbname : The name of the database in which the subscription will be created. spec.name : The name of the subscription as it will appear in PostgreSQL. spec.externalClusterName : The name of the external cluster, as defined in the spec.cluster.name cluster's configuration. This references the publisher database. spec.publicationName : The name of the publication in the publisher database to which the subscription will connect. The Subscription object must reference a specific Cluster , determining where the subscription will be managed. CloudNativePG ensures that the subscription is created or updated on the primary instance of the specified cluster.","title":"Required Fields in the Subscription Manifest"},{"location":"logical_replication/#reconciliation-and-status_1","text":"After creating a Subscription , CloudNativePG manages it on the primary instance of the specified cluster. Following a successful reconciliation cycle, the Subscription status will reflect the following: applied: true , indicates the configuration has been successfully applied. observedGeneration matches metadata.generation , confirming the applied configuration corresponds to the most recent changes. If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field.","title":"Reconciliation and Status"},{"location":"logical_replication/#removing-a-subscription","text":"The subscriptionReclaimPolicy field controls the behavior when deleting a Subscription object: retain (default): Leaves the subscription in PostgreSQL for manual management. delete : Automatically removes the subscription from PostgreSQL. Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher subscriptionReclaimPolicy: delete In this case, deleting the Subscription object also removes the subscriber subscription from the app database of the king cluster.","title":"Removing a subscription"},{"location":"logical_replication/#limitations","text":"Logical replication in PostgreSQL has some inherent limitations, as outlined in the official documentation . Notably, the following objects are not replicated: Database schema and DDL commands Sequence data Large objects","title":"Limitations"},{"location":"logical_replication/#addressing-schema-replication","text":"The first limitation, related to schema replication, can be easily addressed using CloudNativePG's capabilities. For instance, you can leverage the import bootstrap feature to copy the schema of the tables you need to replicate. Alternatively, you can manually create the schema as you would for any PostgreSQL database.","title":"Addressing Schema Replication"},{"location":"logical_replication/#handling-sequences","text":"While sequences are not automatically kept in sync through logical replication, CloudNativePG provides a solution to be used in live migrations. You can use the cnpg plugin to synchronize sequence values, ensuring consistency between the publisher and subscriber databases.","title":"Handling Sequences"},{"location":"logical_replication/#example-of-live-migration-and-major-postgres-upgrade-with-logical-replication","text":"To highlight the powerful capabilities of logical replication, this example demonstrates how to replicate data from a publisher database ( freddie ) running PostgreSQL 16 to a subscriber database ( king ) running the latest PostgreSQL version. This setup can be deployed in your Kubernetes cluster for evaluation and hands-on learning. This example illustrates how logical replication facilitates live migrations and upgrades between PostgreSQL versions while ensuring data consistency. By combining logical replication with CloudNativePG, you can easily set up, manage, and evaluate such scenarios in a Kubernetes environment.","title":"Example of live migration and major Postgres upgrade with logical replication"},{"location":"logical_replication/#step-1-setting-up-the-publisher-freddie","text":"The first step involves creating a freddie PostgreSQL cluster with version 16. The cluster contains a single instance and includes an app database initialized with a table, n , storing 10,000 numbers. A logical replication publication named publisher is also configured to include all tables in the database. Here\u2019s the manifest for setting up the freddie cluster and its publication resource: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: freddie spec: instances: 1 imageName: ghcr.io/cloudnative-pg/postgresql:16 storage: size: 1Gi bootstrap: initdb: postInitApplicationSQL: - CREATE TABLE n (i SERIAL PRIMARY KEY, m INTEGER) - INSERT INTO n (m) (SELECT generate_series(1, 10000)) - ALTER TABLE n OWNER TO app managed: roles: - name: app login: true replication: true --- apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true","title":"Step 1: Setting Up the Publisher (freddie)"},{"location":"logical_replication/#step-2-setting-up-the-subscriber-king","text":"Next, create the king PostgreSQL cluster, running the latest version of PostgreSQL. This cluster initializes by importing the schema from the app database on the freddie cluster using the external cluster configuration. A Subscription resource, freddie-to-king-subscription , is then configured to consume changes published by the publisher on freddie . Below is the manifest for setting up the king cluster and its subscription: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: king spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: microservice schemaOnly: true databases: - app source: externalCluster: freddie externalClusters: - name: freddie connectionParameters: host: freddie-rw.default.svc user: app dbname: app password: name: freddie-app key: password --- apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher Once the king cluster is running, you can verify that the replication is working by connecting to the app database and counting the records in the n table. The following example uses the psql command provided by the cnpg plugin for simplicity: kubectl cnpg psql king -- app -qAt -c 'SELECT count(*) FROM n' 10000 This command should return 10000 , confirming that the data from the freddie cluster has been successfully replicated to the king cluster. Using the cnpg plugin, you can also synchronize existing sequences to ensure consistency between the publisher and subscriber. The example below demonstrates how to synchronize a sequence for the king cluster: kubectl cnpg subscription sync-sequences king --subscription=subscriber SELECT setval('\"public\".\"n_i_seq\"', 10000); 10000 This command updates the sequence n_i_seq in the king cluster to match the current value, ensuring it is in sync with the source database.","title":"Step 2: Setting Up the Subscriber (king)"},{"location":"monitoring/","text":"Monitoring Important Installing Prometheus and Grafana is beyond the scope of this project. We assume they are correctly installed in your system. However, for experimentation we provide instructions in Part 4 of the Quickstart . Monitoring Instances For each PostgreSQL instance, the operator provides an exporter of metrics for Prometheus via HTTP or HTTPS, on port 9187, named metrics . The operator comes with a predefined set of metrics , as well as a highly configurable and customizable system to define additional queries via one or more ConfigMap or Secret resources (see the \"User defined metrics\" section below for details). Important CloudNativePG, by default, installs a set of predefined metrics in a ConfigMap named default-monitoring . Info You can inspect the exported metrics by following the instructions in the \"How to inspect the exported metrics\" section below. All monitoring queries that are performed on PostgreSQL are: atomic (one transaction per query) executed with the pg_monitor role executed with application_name set to cnpg_metrics_exporter executed as user postgres Please refer to the \"Predefined Roles\" section in PostgreSQL documentation for details on the pg_monitor role. Queries, by default, are run against the main database , as defined by the specified bootstrap method of the Cluster resource, according to the following logic: using initdb : queries will be run by default against the specified database in initdb.database , or app if not specified using recovery : queries will be run by default against the specified database in recovery.database , or postgres if not specified using pg_basebackup : queries will be run by default against the specified database in pg_basebackup.database , or postgres if not specified The default database can always be overridden for a given user-defined metric, by specifying a list of one or more databases in the target_databases option. Prometheus/Grafana If you are interested in evaluating the integration of CloudNativePG with Prometheus and Grafana, you can find a quick setup guide in Part 4 of the quickstart Monitoring with the Prometheus operator A specific PostgreSQL cluster can be monitored using the Prometheus Operator's resource PodMonitor . A PodMonitor that correctly points to the Cluster can be automatically created by the operator by setting .spec.monitoring.enablePodMonitor to true in the Cluster resource itself (default: false ). Important Any change to the PodMonitor created automatically will be overridden by the Operator at the next reconciliation cycle, in case you need to customize it, you can do so as described below. To deploy a PodMonitor for a specific Cluster manually, define it as follows and adjust as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cluster-example spec: selector: matchLabels: \"cnpg.io/cluster\": cluster-example podMetricsEndpoints: - port: metrics Important Ensure you modify the example above with a unique name, as well as the correct cluster's namespace and labels (e.g., cluster-example ). Important The postgresql label, used in previous versions of this document, is deprecated and will be removed in the future. Please use the cnpg.io/cluster label instead to select the instances. Enabling TLS on the Metrics Port To enable TLS communication on the metrics port, configure the .spec.monitoring.tls.enabled setting to true . This setup ensures that the metrics exporter uses the same server certificate used by PostgreSQL to secure communication on port 5432. Important Changing the .spec.monitoring.tls.enabled setting will trigger a rolling restart of the Cluster. If the PodMonitor is managed by the operator ( .spec.monitoring.enablePodMonitor set to true ), it will automatically contain the necessary configurations to access the metrics via TLS. To manually deploy a PodMonitor suitable for reading metrics via TLS, define it as follows and adjust as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cluster-example spec: selector: matchLabels: \"cnpg.io/cluster\": cluster-example podMetricsEndpoints: - port: metrics scheme: https tlsConfig: ca: secret: name: cluster-example-ca key: ca.crt serverName: cluster-example-rw Important Ensure you modify the example above with a unique name, as well as the correct Cluster's namespace and labels (e.g., cluster-example ). Important The serverName field in the metrics endpoint must match one of the names defined in the server certificate. If the default certificate is in use, the serverName value should be in the format <cluster-name>-rw . Predefined set of metrics Every PostgreSQL instance exporter automatically exposes a set of predefined metrics, which can be classified in two major categories: PostgreSQL related metrics, starting with cnpg_collector_* , including: number of WAL files and total size on disk number of .ready and .done files in the archive status folder requested minimum and maximum number of synchronous replicas, as well as the expected and actually observed values number of distinct nodes accommodating the instances timestamps indicating last failed and last available backup, as well as the first point of recoverability for the cluster flag indicating if replica cluster mode is enabled or disabled flag indicating if a manual switchover is required flag indicating if fencing is enabled or disabled Go runtime related metrics, starting with go_* Below is a sample of the metrics returned by the localhost:9187/metrics endpoint of an instance. As you can see, the Prometheus format is self-documenting: # HELP cnpg_collector_collection_duration_seconds Collection time duration in seconds # TYPE cnpg_collector_collection_duration_seconds gauge cnpg_collector_collection_duration_seconds{collector=\"Collect.up\"} 0.0031393 # HELP cnpg_collector_collections_total Total number of times PostgreSQL was accessed for metrics. # TYPE cnpg_collector_collections_total counter cnpg_collector_collections_total 2 # HELP cnpg_collector_fencing_on 1 if the instance is fenced, 0 otherwise # TYPE cnpg_collector_fencing_on gauge cnpg_collector_fencing_on 0 # HELP cnpg_collector_nodes_used NodesUsed represents the count of distinct nodes accommodating the instances. A value of '-1' suggests that the metric is not available. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally this value should match the number of instances in the cluster. # TYPE cnpg_collector_nodes_used gauge cnpg_collector_nodes_used 3 # HELP cnpg_collector_last_collection_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_collector_last_collection_error gauge cnpg_collector_last_collection_error 0 # HELP cnpg_collector_manual_switchover_required 1 if a manual switchover is required, 0 otherwise # TYPE cnpg_collector_manual_switchover_required gauge cnpg_collector_manual_switchover_required 0 # HELP cnpg_collector_pg_wal Total size in bytes of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal' directory computed as (wal_segment_size * count) # TYPE cnpg_collector_pg_wal gauge cnpg_collector_pg_wal{value=\"count\"} 9 cnpg_collector_pg_wal{value=\"slots_max\"} NaN cnpg_collector_pg_wal{value=\"keep\"} 32 cnpg_collector_pg_wal{value=\"max\"} 64 cnpg_collector_pg_wal{value=\"min\"} 5 cnpg_collector_pg_wal{value=\"size\"} 1.50994944e+08 cnpg_collector_pg_wal{value=\"volume_max\"} 128 cnpg_collector_pg_wal{value=\"volume_size\"} 2.147483648e+09 # HELP cnpg_collector_pg_wal_archive_status Number of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal/archive_status' directory (ready, done) # TYPE cnpg_collector_pg_wal_archive_status gauge cnpg_collector_pg_wal_archive_status{value=\"done\"} 6 cnpg_collector_pg_wal_archive_status{value=\"ready\"} 0 # HELP cnpg_collector_replica_mode 1 if the cluster is in replica mode, 0 otherwise # TYPE cnpg_collector_replica_mode gauge cnpg_collector_replica_mode 0 # HELP cnpg_collector_sync_replicas Number of requested synchronous replicas (synchronous_standby_names) # TYPE cnpg_collector_sync_replicas gauge cnpg_collector_sync_replicas{value=\"expected\"} 0 cnpg_collector_sync_replicas{value=\"max\"} 0 cnpg_collector_sync_replicas{value=\"min\"} 0 cnpg_collector_sync_replicas{value=\"observed\"} 0 # HELP cnpg_collector_up 1 if PostgreSQL is up, 0 otherwise. # TYPE cnpg_collector_up gauge cnpg_collector_up{cluster=\"cluster-example\"} 1 # HELP cnpg_collector_postgres_version Postgres version # TYPE cnpg_collector_postgres_version gauge cnpg_collector_postgres_version{cluster=\"cluster-example\",full=\"17.5\"} 17.5 # HELP cnpg_collector_last_failed_backup_timestamp The last failed backup as a unix timestamp # TYPE cnpg_collector_last_failed_backup_timestamp gauge cnpg_collector_last_failed_backup_timestamp 0 # HELP cnpg_collector_last_available_backup_timestamp The last available backup as a unix timestamp # TYPE cnpg_collector_last_available_backup_timestamp gauge cnpg_collector_last_available_backup_timestamp 1.63238406e+09 # HELP cnpg_collector_first_recoverability_point The first point of recoverability for the cluster as a unix timestamp # TYPE cnpg_collector_first_recoverability_point gauge cnpg_collector_first_recoverability_point 1.63238406e+09 # HELP cnpg_collector_lo_pages Estimated number of pages in the pg_largeobject table # TYPE cnpg_collector_lo_pages gauge cnpg_collector_lo_pages{datname=\"app\"} 0 cnpg_collector_lo_pages{datname=\"postgres\"} 78 # HELP cnpg_collector_wal_buffers_full Number of times WAL data was written to disk because WAL buffers became full. Only available on PG 14+ # TYPE cnpg_collector_wal_buffers_full gauge cnpg_collector_wal_buffers_full{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 6472 # HELP cnpg_collector_wal_bytes Total amount of WAL generated in bytes. Only available on PG 14+ # TYPE cnpg_collector_wal_bytes gauge cnpg_collector_wal_bytes{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 1.0035147e+07 # HELP cnpg_collector_wal_fpi Total number of WAL full page images generated. Only available on PG 14+ # TYPE cnpg_collector_wal_fpi gauge cnpg_collector_wal_fpi{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 1474 # HELP cnpg_collector_wal_records Total number of WAL records generated. Only available on PG 14+ # TYPE cnpg_collector_wal_records gauge cnpg_collector_wal_records{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 26178 # HELP cnpg_collector_wal_sync Number of times WAL files were synced to disk via issue_xlog_fsync request (if fsync is on and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+ # TYPE cnpg_collector_wal_sync gauge cnpg_collector_wal_sync{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 37 # HELP cnpg_collector_wal_sync_time Total amount of time spent syncing WAL files to disk via issue_xlog_fsync request, in milliseconds (if track_wal_io_timing is enabled, fsync is on, and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+ # TYPE cnpg_collector_wal_sync_time gauge cnpg_collector_wal_sync_time{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 0 # HELP cnpg_collector_wal_write Number of times WAL buffers were written out to disk via XLogWrite request. Only available on PG 14+ # TYPE cnpg_collector_wal_write gauge cnpg_collector_wal_write{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 7243 # HELP cnpg_collector_wal_write_time Total amount of time spent writing WAL buffers to disk via XLogWrite request, in milliseconds (if track_wal_io_timing is enabled, otherwise zero). This includes the sync time when wal_sync_method is either open_datasync or open_sync. Only available on PG 14+ # TYPE cnpg_collector_wal_write_time gauge cnpg_collector_wal_write_time{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 0 # HELP cnpg_last_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_last_error gauge cnpg_last_error 0 # HELP go_gc_duration_seconds A summary of the pause duration of garbage collection cycles. # TYPE go_gc_duration_seconds summary go_gc_duration_seconds{quantile=\"0\"} 5.01e-05 go_gc_duration_seconds{quantile=\"0.25\"} 7.27e-05 go_gc_duration_seconds{quantile=\"0.5\"} 0.0001748 go_gc_duration_seconds{quantile=\"0.75\"} 0.0002959 go_gc_duration_seconds{quantile=\"1\"} 0.0012776 go_gc_duration_seconds_sum 0.0035741 go_gc_duration_seconds_count 13 # HELP go_goroutines Number of goroutines that currently exist. # TYPE go_goroutines gauge go_goroutines 25 # HELP go_info Information about the Go environment. # TYPE go_info gauge go_info{version=\"go1.20.5\"} 1 # HELP go_memstats_alloc_bytes Number of bytes allocated and still in use. # TYPE go_memstats_alloc_bytes gauge go_memstats_alloc_bytes 4.493744e+06 # HELP go_memstats_alloc_bytes_total Total number of bytes allocated, even if freed. # TYPE go_memstats_alloc_bytes_total counter go_memstats_alloc_bytes_total 2.1698216e+07 # HELP go_memstats_buck_hash_sys_bytes Number of bytes used by the profiling bucket hash table. # TYPE go_memstats_buck_hash_sys_bytes gauge go_memstats_buck_hash_sys_bytes 1.456234e+06 # HELP go_memstats_frees_total Total number of frees. # TYPE go_memstats_frees_total counter go_memstats_frees_total 172118 # HELP go_memstats_gc_cpu_fraction The fraction of this program's available CPU time used by the GC since the program started. # TYPE go_memstats_gc_cpu_fraction gauge go_memstats_gc_cpu_fraction 1.0749468700447189e-05 # HELP go_memstats_gc_sys_bytes Number of bytes used for garbage collection system metadata. # TYPE go_memstats_gc_sys_bytes gauge go_memstats_gc_sys_bytes 5.530048e+06 # HELP go_memstats_heap_alloc_bytes Number of heap bytes allocated and still in use. # TYPE go_memstats_heap_alloc_bytes gauge go_memstats_heap_alloc_bytes 4.493744e+06 # HELP go_memstats_heap_idle_bytes Number of heap bytes waiting to be used. # TYPE go_memstats_heap_idle_bytes gauge go_memstats_heap_idle_bytes 5.8236928e+07 # HELP go_memstats_heap_inuse_bytes Number of heap bytes that are in use. # TYPE go_memstats_heap_inuse_bytes gauge go_memstats_heap_inuse_bytes 7.528448e+06 # HELP go_memstats_heap_objects Number of allocated objects. # TYPE go_memstats_heap_objects gauge go_memstats_heap_objects 26306 # HELP go_memstats_heap_released_bytes Number of heap bytes released to OS. # TYPE go_memstats_heap_released_bytes gauge go_memstats_heap_released_bytes 5.7401344e+07 # HELP go_memstats_heap_sys_bytes Number of heap bytes obtained from system. # TYPE go_memstats_heap_sys_bytes gauge go_memstats_heap_sys_bytes 6.5765376e+07 # HELP go_memstats_last_gc_time_seconds Number of seconds since 1970 of last garbage collection. # TYPE go_memstats_last_gc_time_seconds gauge go_memstats_last_gc_time_seconds 1.6311727586032727e+09 # HELP go_memstats_lookups_total Total number of pointer lookups. # TYPE go_memstats_lookups_total counter go_memstats_lookups_total 0 # HELP go_memstats_mallocs_total Total number of mallocs. # TYPE go_memstats_mallocs_total counter go_memstats_mallocs_total 198424 # HELP go_memstats_mcache_inuse_bytes Number of bytes in use by mcache structures. # TYPE go_memstats_mcache_inuse_bytes gauge go_memstats_mcache_inuse_bytes 14400 # HELP go_memstats_mcache_sys_bytes Number of bytes used for mcache structures obtained from system. # TYPE go_memstats_mcache_sys_bytes gauge go_memstats_mcache_sys_bytes 16384 # HELP go_memstats_mspan_inuse_bytes Number of bytes in use by mspan structures. # TYPE go_memstats_mspan_inuse_bytes gauge go_memstats_mspan_inuse_bytes 191896 # HELP go_memstats_mspan_sys_bytes Number of bytes used for mspan structures obtained from system. # TYPE go_memstats_mspan_sys_bytes gauge go_memstats_mspan_sys_bytes 212992 # HELP go_memstats_next_gc_bytes Number of heap bytes when next garbage collection will take place. # TYPE go_memstats_next_gc_bytes gauge go_memstats_next_gc_bytes 8.689632e+06 # HELP go_memstats_other_sys_bytes Number of bytes used for other system allocations. # TYPE go_memstats_other_sys_bytes gauge go_memstats_other_sys_bytes 2.566622e+06 # HELP go_memstats_stack_inuse_bytes Number of bytes in use by the stack allocator. # TYPE go_memstats_stack_inuse_bytes gauge go_memstats_stack_inuse_bytes 1.343488e+06 # HELP go_memstats_stack_sys_bytes Number of bytes obtained from system for stack allocator. # TYPE go_memstats_stack_sys_bytes gauge go_memstats_stack_sys_bytes 1.343488e+06 # HELP go_memstats_sys_bytes Number of bytes obtained from system. # TYPE go_memstats_sys_bytes gauge go_memstats_sys_bytes 7.6891144e+07 # HELP go_threads Number of OS threads created. # TYPE go_threads gauge go_threads 18 Note cnpg_collector_postgres_version is a GaugeVec metric containing the Major.Minor version of PostgreSQL. The full semantic version Major.Minor.Patch can be found inside one of its label field named full . Note cnpg_collector_first_recoverability_point and cnpg_collector_last_available_backup_timestamp will be zero until your first backup to the object store. This is separate from the WAL archival. User defined metrics This feature is currently in beta state and the format is inspired by the queries.yaml file (release 0.12) of the PostgreSQL Prometheus Exporter. Custom metrics can be defined by users by referring to the created Configmap / Secret in a Cluster definition under the .spec.monitoring.customQueriesConfigMap or customQueriesSecret section as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example namespace: test spec: instances: 3 storage: size: 1Gi monitoring: customQueriesConfigMap: - name: example-monitoring key: custom-queries The customQueriesConfigMap / customQueriesSecret sections contain a list of ConfigMap / Secret references specifying the key in which the custom queries are defined. Take care that the referred resources have to be created in the same namespace as the Cluster resource. Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to it, otherwise you will have to reload the instances using the kubectl cnpg reload subcommand. Important When a user defined metric overwrites an already existing metric the instance manager prints a json warning log, containing the message: Query with the same name already found. Overwriting the existing one. and a key queryName containing the overwritten query name. Example of a user defined metric Here you can see an example of a ConfigMap containing a single custom query, referenced by the Cluster example above: apiVersion: v1 kind: ConfigMap metadata: name: example-monitoring namespace: test labels: cnpg.io/reload: \"\" data: custom-queries: | pg_replication: query: \"SELECT CASE WHEN NOT pg_is_in_recovery() THEN 0 ELSE GREATEST (0, EXTRACT(EPOCH FROM (now() - pg_last_xact_replay_timestamp()))) END AS lag, pg_is_in_recovery() AS in_recovery, EXISTS (TABLE pg_stat_wal_receiver) AS is_wal_receiver_up, (SELECT count(*) FROM pg_stat_replication) AS streaming_replicas\" metrics: - lag: usage: \"GAUGE\" description: \"Replication lag behind primary in seconds\" - in_recovery: usage: \"GAUGE\" description: \"Whether the instance is in recovery\" - is_wal_receiver_up: usage: \"GAUGE\" description: \"Whether the instance wal_receiver is up\" - streaming_replicas: usage: \"GAUGE\" description: \"Number of streaming replicas connected to the instance\" A list of basic monitoring queries can be found in the default-monitoring.yaml file that is already installed in your CloudNativePG deployment (see \"Default set of metrics\" ). Example of a user defined metric with predicate query The predicate_query option allows the user to execute the query to collect the metrics only under the specified conditions. To do so the user needs to provide a predicate query that returns at most one row with a single boolean column. The predicate query is executed in the same transaction as the main query and against the same databases. some_query: | predicate_query: | SELECT some_bool as predicate FROM some_table query: | SELECT count(*) as rows FROM some_table metrics: - rows: usage: \"GAUGE\" description: \"number of rows\" Example of a user defined metric running on multiple databases If the target_databases option lists more than one database the metric is collected from each of them. Database auto-discovery can be enabled for a specific query by specifying a shell-like pattern (i.e., containing * , ? or [] ) in the list of target_databases . If provided, the operator will expand the list of target databases by adding all the databases returned by the execution of SELECT datname FROM pg_database WHERE datallowconn AND NOT datistemplate and matching the pattern according to path.Match() rules. Note The * character has a special meaning in yaml, so you need to quote ( \"*\" ) the target_databases value when it includes such a pattern. It is recommended that you always include the name of the database in the returned labels, for example using the current_database() function as in the following example: some_query: | query: | SELECT current_database() as datname, count(*) as rows FROM some_table metrics: - datname: usage: \"LABEL\" description: \"Name of current database\" - rows: usage: \"GAUGE\" description: \"number of rows\" target_databases: - albert - bb - freddie This will produce in the following metric being exposed: cnpg_some_query_rows{datname=\"albert\"} 2 cnpg_some_query_rows{datname=\"bb\"} 5 cnpg_some_query_rows{datname=\"freddie\"} 10 Here is an example of a query with auto-discovery enabled which also runs on the template1 database (otherwise not returned by the aforementioned query): some_query: | query: | SELECT current_database() as datname, count(*) as rows FROM some_table metrics: - datname: usage: \"LABEL\" description: \"Name of current database\" - rows: usage: \"GAUGE\" description: \"number of rows\" target_databases: - \"*\" - \"template1\" The above example will produce the following metrics (provided the databases exist): cnpg_some_query_rows{datname=\"albert\"} 2 cnpg_some_query_rows{datname=\"bb\"} 5 cnpg_some_query_rows{datname=\"freddie\"} 10 cnpg_some_query_rows{datname=\"template1\"} 7 cnpg_some_query_rows{datname=\"postgres\"} 42 Structure of a user defined metric Every custom query has the following basic structure: <MetricName>: query: \"<SQLQuery>\" metrics: - <ColumnName>: usage: \"<MetricType>\" description: \"<MetricDescription>\" Here is a short description of all the available fields: <MetricName> : the name of the Prometheus metric name : override <MetricName> , if defined query : the SQL query to run on the target database to generate the metrics primary : whether to run the query only on the primary instance master : same as primary (for compatibility with the Prometheus PostgreSQL exporter's syntax - deprecated) runonserver : a semantic version range to limit the versions of PostgreSQL the query should run on (e.g. \">=11.0.0\" or \">=12.0.0 <=15.0.0\" ) target_databases : a list of databases to run the query against, or a shell-like pattern to enable auto discovery. Overwrites the default database if provided. predicate_query : a SQL query that returns at most one row and one boolean column to run on the target database. The system evaluates the predicate and if true executes the query . metrics : section containing a list of all exported columns, defined as follows: <ColumnName> : the name of the column returned by the query name : override the ColumnName of the column in the metric, if defined usage : one of the values described below description : the metric's description metrics_mapping : the optional column mapping when usage is set to MAPPEDMETRIC The possible values for usage are: Column Usage Label Description DISCARD this column should be ignored LABEL use this column as a label COUNTER use this column as a counter GAUGE use this column as a gauge MAPPEDMETRIC use this column with the supplied mapping of text values DURATION use this column as a text duration (in milliseconds) HISTOGRAM use this column as a histogram Please visit the \"Metric Types\" page from the Prometheus documentation for more information. Output of a user defined metric Custom defined metrics are returned by the Prometheus exporter endpoint ( :9187/metrics ) with the following format: cnpg_<MetricName>_<ColumnName>{<LabelColumnName>=<LabelColumnValue> ... } <ColumnValue> Note LabelColumnName are metrics with usage set to LABEL and their Value Considering the pg_replication example above, the exporter's endpoint would return the following output when invoked: # HELP cnpg_pg_replication_in_recovery Whether the instance is in recovery # TYPE cnpg_pg_replication_in_recovery gauge cnpg_pg_replication_in_recovery 0 # HELP cnpg_pg_replication_lag Replication lag behind primary in seconds # TYPE cnpg_pg_replication_lag gauge cnpg_pg_replication_lag 0 # HELP cnpg_pg_replication_streaming_replicas Number of streaming replicas connected to the instance # TYPE cnpg_pg_replication_streaming_replicas gauge cnpg_pg_replication_streaming_replicas 2 # HELP cnpg_pg_replication_is_wal_receiver_up Whether the instance wal_receiver is up # TYPE cnpg_pg_replication_is_wal_receiver_up gauge cnpg_pg_replication_is_wal_receiver_up 0 Default set of metrics The operator can be configured to automatically inject in a Cluster a set of monitoring queries defined in a ConfigMap or a Secret, inside the operator's namespace. You have to set the MONITORING_QUERIES_CONFIGMAP or MONITORING_QUERIES_SECRET key in the \"operator configuration\" , respectively to the name of the ConfigMap or the Secret; the operator will then use the content of the queries key. Any change to the queries content will be immediately reflected on all the deployed Clusters using it. The operator installation manifests come with a predefined ConfigMap, called cnpg-default-monitoring , to be used by all Clusters. MONITORING_QUERIES_CONFIGMAP is by default set to cnpg-default-monitoring in the operator configuration. If you want to disable the default set of metrics, you can: disable it at operator level: set the MONITORING_QUERIES_CONFIGMAP / MONITORING_QUERIES_SECRET key to \"\" (empty string), in the operator ConfigMap. Changes to operator ConfigMap require an operator restart. disable it for a specific Cluster: set .spec.monitoring.disableDefaultQueries to true in the Cluster. Important The ConfigMap or Secret specified via MONITORING_QUERIES_CONFIGMAP / MONITORING_QUERIES_SECRET will always be copied to the Cluster's namespace with a fixed name: cnpg-default-monitoring . So that, if you intend to have default metrics, you should not create a ConfigMap with this name in the cluster's namespace. Differences with the Prometheus Postgres exporter CloudNativePG is inspired by the PostgreSQL Prometheus Exporter, but presents some differences. In particular, the cache_seconds field is not implemented in CloudNativePG's exporter. Monitoring the CloudNativePG operator The operator internally exposes Prometheus metrics via HTTP on port 8080, named metrics . Info You can inspect the exported metrics by following the instructions in the \"How to inspect the exported metrics\" section below. Currently, the operator exposes default kubebuilder metrics. See kubebuilder documentation for more details. Monitoring the operator with Prometheus The operator can be monitored using the Prometheus Operator by defining a PodMonitor pointing to the operator pod(s), as follows (note it's applied in the same namespace as the operator): kubectl -n cnpg-system apply -f - <<EOF --- apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cnpg-controller-manager spec: selector: matchLabels: app.kubernetes.io/name: cloudnative-pg podMetricsEndpoints: - port: metrics EOF How to inspect the exported metrics In this section we provide basic instructions on how to inspect the metrics exported by a specific PostgreSQL instance manager (primary or replica) or the operator. Note In the examples below we assume we are working in the default namespace, and with the operator installed in the cnpg-system namespace. Please adapt to your use case. Using port forwarding The simplest way to inspect the metrics is to port-forward the metrics ports of the pods involved. For example, to inspect the metrics on the -1 instance of cluster-example , we port-forward the 9187 port: kubectl port-forward cluster-example-1 9187:9187 With port-forwarding active, the metrics can be inspected easily, for example on a web browser, using HTTP or HTTPS depending on the configuration, with address: localhost:9187/metrics . The operator pod also exports metrics, on port 8080. Similarly to instances, we port-forward the operator pod, which is located in the operator namespace: kubectl -n cnpg-system port-forward pod/<CONTROLLER-MANAGER-POD> 8080:8080 With port forwarding active, the metrics are easily viewable on a browser at localhost:8080/metrics . Using curl Create the curl pod with the following command: kubectl apply -f - <<EOF --- apiVersion: v1 kind: Pod metadata: name: curl spec: containers: - name: curl image: curlimages/curl:8.2.1 command: ['sleep', '3600'] EOF To inspect the metrics exported by an instance, you need to connect to port 9187 of the target pod. You will need to know the pod's IP address, which you can find easily by running kubectl get pod -o wide . The following generic command will run curl on the desired pod: kubectl exec -ti curl -- curl -s <pod_ip>:9187/metrics For example, if your PostgreSQL cluster is called cluster-example and you want to retrieve the exported metrics of the first pod in the cluster, you can run the following command to programmatically get the IP of that pod: POD_IP=$(kubectl get pod cluster-example-1 --template '{{.status.podIP}}') And then run: kubectl exec -ti curl -- curl -s ${POD_IP}:9187/metrics If you enabled TLS metrics, run instead: kubectl exec -ti curl -- curl -sk https://${POD_IP}:9187/metrics To access the metrics of the operator, you need to point to the pod where the operator is running, and use TCP port 8080 as target. When you're done inspecting metrics, please remember to delete the curl pod: kubectl delete -f curl.yaml Auxiliary resources Important These resources are provided for illustration and experimentation, and do not represent any kind of recommendation for your production system In the doc/src/samples/monitoring/ directory you will find a series of sample files for observability. Please refer to Part 4 of the quickstart section for context: kube-stack-config.yaml : a configuration file for the kube-stack helm chart installation. It ensures that Prometheus listens for all PodMonitor resources. prometheusrule.yaml : a PrometheusRule with alerts for CloudNativePG. NOTE: this does not include inter-operation with notification services. Please refer to the Prometheus documentation . podmonitor.yaml : a PodMonitor for the CloudNativePG Operator deployment. In addition, we provide the \"raw\" sources for the Prometheus alert rules in the alerts.yaml file. A Grafana dashboard for CloudNativePG clusters and operator, is kept in the dedicated repository cloudnative-pg/grafana-dashboards as a dashboard JSON configuration: grafana-dashboard.json . The file can be downloaded, and imported into Grafana (menus: Dashboard > New > Import). For a general reference on the settings available on kube-prometheus-stack , you can execute helm show values prometheus-community/kube-prometheus-stack . Please refer to the kube-prometheus-stack page for more detail.","title":"Monitoring"},{"location":"monitoring/#monitoring","text":"Important Installing Prometheus and Grafana is beyond the scope of this project. We assume they are correctly installed in your system. However, for experimentation we provide instructions in Part 4 of the Quickstart .","title":"Monitoring"},{"location":"monitoring/#monitoring-instances","text":"For each PostgreSQL instance, the operator provides an exporter of metrics for Prometheus via HTTP or HTTPS, on port 9187, named metrics . The operator comes with a predefined set of metrics , as well as a highly configurable and customizable system to define additional queries via one or more ConfigMap or Secret resources (see the \"User defined metrics\" section below for details). Important CloudNativePG, by default, installs a set of predefined metrics in a ConfigMap named default-monitoring . Info You can inspect the exported metrics by following the instructions in the \"How to inspect the exported metrics\" section below. All monitoring queries that are performed on PostgreSQL are: atomic (one transaction per query) executed with the pg_monitor role executed with application_name set to cnpg_metrics_exporter executed as user postgres Please refer to the \"Predefined Roles\" section in PostgreSQL documentation for details on the pg_monitor role. Queries, by default, are run against the main database , as defined by the specified bootstrap method of the Cluster resource, according to the following logic: using initdb : queries will be run by default against the specified database in initdb.database , or app if not specified using recovery : queries will be run by default against the specified database in recovery.database , or postgres if not specified using pg_basebackup : queries will be run by default against the specified database in pg_basebackup.database , or postgres if not specified The default database can always be overridden for a given user-defined metric, by specifying a list of one or more databases in the target_databases option. Prometheus/Grafana If you are interested in evaluating the integration of CloudNativePG with Prometheus and Grafana, you can find a quick setup guide in Part 4 of the quickstart","title":"Monitoring Instances"},{"location":"monitoring/#monitoring-with-the-prometheus-operator","text":"A specific PostgreSQL cluster can be monitored using the Prometheus Operator's resource PodMonitor . A PodMonitor that correctly points to the Cluster can be automatically created by the operator by setting .spec.monitoring.enablePodMonitor to true in the Cluster resource itself (default: false ). Important Any change to the PodMonitor created automatically will be overridden by the Operator at the next reconciliation cycle, in case you need to customize it, you can do so as described below. To deploy a PodMonitor for a specific Cluster manually, define it as follows and adjust as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cluster-example spec: selector: matchLabels: \"cnpg.io/cluster\": cluster-example podMetricsEndpoints: - port: metrics Important Ensure you modify the example above with a unique name, as well as the correct cluster's namespace and labels (e.g., cluster-example ). Important The postgresql label, used in previous versions of this document, is deprecated and will be removed in the future. Please use the cnpg.io/cluster label instead to select the instances.","title":"Monitoring with the Prometheus operator"},{"location":"monitoring/#enabling-tls-on-the-metrics-port","text":"To enable TLS communication on the metrics port, configure the .spec.monitoring.tls.enabled setting to true . This setup ensures that the metrics exporter uses the same server certificate used by PostgreSQL to secure communication on port 5432. Important Changing the .spec.monitoring.tls.enabled setting will trigger a rolling restart of the Cluster. If the PodMonitor is managed by the operator ( .spec.monitoring.enablePodMonitor set to true ), it will automatically contain the necessary configurations to access the metrics via TLS. To manually deploy a PodMonitor suitable for reading metrics via TLS, define it as follows and adjust as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cluster-example spec: selector: matchLabels: \"cnpg.io/cluster\": cluster-example podMetricsEndpoints: - port: metrics scheme: https tlsConfig: ca: secret: name: cluster-example-ca key: ca.crt serverName: cluster-example-rw Important Ensure you modify the example above with a unique name, as well as the correct Cluster's namespace and labels (e.g., cluster-example ). Important The serverName field in the metrics endpoint must match one of the names defined in the server certificate. If the default certificate is in use, the serverName value should be in the format <cluster-name>-rw .","title":"Enabling TLS on the Metrics Port"},{"location":"monitoring/#predefined-set-of-metrics","text":"Every PostgreSQL instance exporter automatically exposes a set of predefined metrics, which can be classified in two major categories: PostgreSQL related metrics, starting with cnpg_collector_* , including: number of WAL files and total size on disk number of .ready and .done files in the archive status folder requested minimum and maximum number of synchronous replicas, as well as the expected and actually observed values number of distinct nodes accommodating the instances timestamps indicating last failed and last available backup, as well as the first point of recoverability for the cluster flag indicating if replica cluster mode is enabled or disabled flag indicating if a manual switchover is required flag indicating if fencing is enabled or disabled Go runtime related metrics, starting with go_* Below is a sample of the metrics returned by the localhost:9187/metrics endpoint of an instance. As you can see, the Prometheus format is self-documenting: # HELP cnpg_collector_collection_duration_seconds Collection time duration in seconds # TYPE cnpg_collector_collection_duration_seconds gauge cnpg_collector_collection_duration_seconds{collector=\"Collect.up\"} 0.0031393 # HELP cnpg_collector_collections_total Total number of times PostgreSQL was accessed for metrics. # TYPE cnpg_collector_collections_total counter cnpg_collector_collections_total 2 # HELP cnpg_collector_fencing_on 1 if the instance is fenced, 0 otherwise # TYPE cnpg_collector_fencing_on gauge cnpg_collector_fencing_on 0 # HELP cnpg_collector_nodes_used NodesUsed represents the count of distinct nodes accommodating the instances. A value of '-1' suggests that the metric is not available. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally this value should match the number of instances in the cluster. # TYPE cnpg_collector_nodes_used gauge cnpg_collector_nodes_used 3 # HELP cnpg_collector_last_collection_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_collector_last_collection_error gauge cnpg_collector_last_collection_error 0 # HELP cnpg_collector_manual_switchover_required 1 if a manual switchover is required, 0 otherwise # TYPE cnpg_collector_manual_switchover_required gauge cnpg_collector_manual_switchover_required 0 # HELP cnpg_collector_pg_wal Total size in bytes of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal' directory computed as (wal_segment_size * count) # TYPE cnpg_collector_pg_wal gauge cnpg_collector_pg_wal{value=\"count\"} 9 cnpg_collector_pg_wal{value=\"slots_max\"} NaN cnpg_collector_pg_wal{value=\"keep\"} 32 cnpg_collector_pg_wal{value=\"max\"} 64 cnpg_collector_pg_wal{value=\"min\"} 5 cnpg_collector_pg_wal{value=\"size\"} 1.50994944e+08 cnpg_collector_pg_wal{value=\"volume_max\"} 128 cnpg_collector_pg_wal{value=\"volume_size\"} 2.147483648e+09 # HELP cnpg_collector_pg_wal_archive_status Number of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal/archive_status' directory (ready, done) # TYPE cnpg_collector_pg_wal_archive_status gauge cnpg_collector_pg_wal_archive_status{value=\"done\"} 6 cnpg_collector_pg_wal_archive_status{value=\"ready\"} 0 # HELP cnpg_collector_replica_mode 1 if the cluster is in replica mode, 0 otherwise # TYPE cnpg_collector_replica_mode gauge cnpg_collector_replica_mode 0 # HELP cnpg_collector_sync_replicas Number of requested synchronous replicas (synchronous_standby_names) # TYPE cnpg_collector_sync_replicas gauge cnpg_collector_sync_replicas{value=\"expected\"} 0 cnpg_collector_sync_replicas{value=\"max\"} 0 cnpg_collector_sync_replicas{value=\"min\"} 0 cnpg_collector_sync_replicas{value=\"observed\"} 0 # HELP cnpg_collector_up 1 if PostgreSQL is up, 0 otherwise. # TYPE cnpg_collector_up gauge cnpg_collector_up{cluster=\"cluster-example\"} 1 # HELP cnpg_collector_postgres_version Postgres version # TYPE cnpg_collector_postgres_version gauge cnpg_collector_postgres_version{cluster=\"cluster-example\",full=\"17.5\"} 17.5 # HELP cnpg_collector_last_failed_backup_timestamp The last failed backup as a unix timestamp # TYPE cnpg_collector_last_failed_backup_timestamp gauge cnpg_collector_last_failed_backup_timestamp 0 # HELP cnpg_collector_last_available_backup_timestamp The last available backup as a unix timestamp # TYPE cnpg_collector_last_available_backup_timestamp gauge cnpg_collector_last_available_backup_timestamp 1.63238406e+09 # HELP cnpg_collector_first_recoverability_point The first point of recoverability for the cluster as a unix timestamp # TYPE cnpg_collector_first_recoverability_point gauge cnpg_collector_first_recoverability_point 1.63238406e+09 # HELP cnpg_collector_lo_pages Estimated number of pages in the pg_largeobject table # TYPE cnpg_collector_lo_pages gauge cnpg_collector_lo_pages{datname=\"app\"} 0 cnpg_collector_lo_pages{datname=\"postgres\"} 78 # HELP cnpg_collector_wal_buffers_full Number of times WAL data was written to disk because WAL buffers became full. Only available on PG 14+ # TYPE cnpg_collector_wal_buffers_full gauge cnpg_collector_wal_buffers_full{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 6472 # HELP cnpg_collector_wal_bytes Total amount of WAL generated in bytes. Only available on PG 14+ # TYPE cnpg_collector_wal_bytes gauge cnpg_collector_wal_bytes{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 1.0035147e+07 # HELP cnpg_collector_wal_fpi Total number of WAL full page images generated. Only available on PG 14+ # TYPE cnpg_collector_wal_fpi gauge cnpg_collector_wal_fpi{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 1474 # HELP cnpg_collector_wal_records Total number of WAL records generated. Only available on PG 14+ # TYPE cnpg_collector_wal_records gauge cnpg_collector_wal_records{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 26178 # HELP cnpg_collector_wal_sync Number of times WAL files were synced to disk via issue_xlog_fsync request (if fsync is on and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+ # TYPE cnpg_collector_wal_sync gauge cnpg_collector_wal_sync{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 37 # HELP cnpg_collector_wal_sync_time Total amount of time spent syncing WAL files to disk via issue_xlog_fsync request, in milliseconds (if track_wal_io_timing is enabled, fsync is on, and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+ # TYPE cnpg_collector_wal_sync_time gauge cnpg_collector_wal_sync_time{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 0 # HELP cnpg_collector_wal_write Number of times WAL buffers were written out to disk via XLogWrite request. Only available on PG 14+ # TYPE cnpg_collector_wal_write gauge cnpg_collector_wal_write{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 7243 # HELP cnpg_collector_wal_write_time Total amount of time spent writing WAL buffers to disk via XLogWrite request, in milliseconds (if track_wal_io_timing is enabled, otherwise zero). This includes the sync time when wal_sync_method is either open_datasync or open_sync. Only available on PG 14+ # TYPE cnpg_collector_wal_write_time gauge cnpg_collector_wal_write_time{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 0 # HELP cnpg_last_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_last_error gauge cnpg_last_error 0 # HELP go_gc_duration_seconds A summary of the pause duration of garbage collection cycles. # TYPE go_gc_duration_seconds summary go_gc_duration_seconds{quantile=\"0\"} 5.01e-05 go_gc_duration_seconds{quantile=\"0.25\"} 7.27e-05 go_gc_duration_seconds{quantile=\"0.5\"} 0.0001748 go_gc_duration_seconds{quantile=\"0.75\"} 0.0002959 go_gc_duration_seconds{quantile=\"1\"} 0.0012776 go_gc_duration_seconds_sum 0.0035741 go_gc_duration_seconds_count 13 # HELP go_goroutines Number of goroutines that currently exist. # TYPE go_goroutines gauge go_goroutines 25 # HELP go_info Information about the Go environment. # TYPE go_info gauge go_info{version=\"go1.20.5\"} 1 # HELP go_memstats_alloc_bytes Number of bytes allocated and still in use. # TYPE go_memstats_alloc_bytes gauge go_memstats_alloc_bytes 4.493744e+06 # HELP go_memstats_alloc_bytes_total Total number of bytes allocated, even if freed. # TYPE go_memstats_alloc_bytes_total counter go_memstats_alloc_bytes_total 2.1698216e+07 # HELP go_memstats_buck_hash_sys_bytes Number of bytes used by the profiling bucket hash table. # TYPE go_memstats_buck_hash_sys_bytes gauge go_memstats_buck_hash_sys_bytes 1.456234e+06 # HELP go_memstats_frees_total Total number of frees. # TYPE go_memstats_frees_total counter go_memstats_frees_total 172118 # HELP go_memstats_gc_cpu_fraction The fraction of this program's available CPU time used by the GC since the program started. # TYPE go_memstats_gc_cpu_fraction gauge go_memstats_gc_cpu_fraction 1.0749468700447189e-05 # HELP go_memstats_gc_sys_bytes Number of bytes used for garbage collection system metadata. # TYPE go_memstats_gc_sys_bytes gauge go_memstats_gc_sys_bytes 5.530048e+06 # HELP go_memstats_heap_alloc_bytes Number of heap bytes allocated and still in use. # TYPE go_memstats_heap_alloc_bytes gauge go_memstats_heap_alloc_bytes 4.493744e+06 # HELP go_memstats_heap_idle_bytes Number of heap bytes waiting to be used. # TYPE go_memstats_heap_idle_bytes gauge go_memstats_heap_idle_bytes 5.8236928e+07 # HELP go_memstats_heap_inuse_bytes Number of heap bytes that are in use. # TYPE go_memstats_heap_inuse_bytes gauge go_memstats_heap_inuse_bytes 7.528448e+06 # HELP go_memstats_heap_objects Number of allocated objects. # TYPE go_memstats_heap_objects gauge go_memstats_heap_objects 26306 # HELP go_memstats_heap_released_bytes Number of heap bytes released to OS. # TYPE go_memstats_heap_released_bytes gauge go_memstats_heap_released_bytes 5.7401344e+07 # HELP go_memstats_heap_sys_bytes Number of heap bytes obtained from system. # TYPE go_memstats_heap_sys_bytes gauge go_memstats_heap_sys_bytes 6.5765376e+07 # HELP go_memstats_last_gc_time_seconds Number of seconds since 1970 of last garbage collection. # TYPE go_memstats_last_gc_time_seconds gauge go_memstats_last_gc_time_seconds 1.6311727586032727e+09 # HELP go_memstats_lookups_total Total number of pointer lookups. # TYPE go_memstats_lookups_total counter go_memstats_lookups_total 0 # HELP go_memstats_mallocs_total Total number of mallocs. # TYPE go_memstats_mallocs_total counter go_memstats_mallocs_total 198424 # HELP go_memstats_mcache_inuse_bytes Number of bytes in use by mcache structures. # TYPE go_memstats_mcache_inuse_bytes gauge go_memstats_mcache_inuse_bytes 14400 # HELP go_memstats_mcache_sys_bytes Number of bytes used for mcache structures obtained from system. # TYPE go_memstats_mcache_sys_bytes gauge go_memstats_mcache_sys_bytes 16384 # HELP go_memstats_mspan_inuse_bytes Number of bytes in use by mspan structures. # TYPE go_memstats_mspan_inuse_bytes gauge go_memstats_mspan_inuse_bytes 191896 # HELP go_memstats_mspan_sys_bytes Number of bytes used for mspan structures obtained from system. # TYPE go_memstats_mspan_sys_bytes gauge go_memstats_mspan_sys_bytes 212992 # HELP go_memstats_next_gc_bytes Number of heap bytes when next garbage collection will take place. # TYPE go_memstats_next_gc_bytes gauge go_memstats_next_gc_bytes 8.689632e+06 # HELP go_memstats_other_sys_bytes Number of bytes used for other system allocations. # TYPE go_memstats_other_sys_bytes gauge go_memstats_other_sys_bytes 2.566622e+06 # HELP go_memstats_stack_inuse_bytes Number of bytes in use by the stack allocator. # TYPE go_memstats_stack_inuse_bytes gauge go_memstats_stack_inuse_bytes 1.343488e+06 # HELP go_memstats_stack_sys_bytes Number of bytes obtained from system for stack allocator. # TYPE go_memstats_stack_sys_bytes gauge go_memstats_stack_sys_bytes 1.343488e+06 # HELP go_memstats_sys_bytes Number of bytes obtained from system. # TYPE go_memstats_sys_bytes gauge go_memstats_sys_bytes 7.6891144e+07 # HELP go_threads Number of OS threads created. # TYPE go_threads gauge go_threads 18 Note cnpg_collector_postgres_version is a GaugeVec metric containing the Major.Minor version of PostgreSQL. The full semantic version Major.Minor.Patch can be found inside one of its label field named full . Note cnpg_collector_first_recoverability_point and cnpg_collector_last_available_backup_timestamp will be zero until your first backup to the object store. This is separate from the WAL archival.","title":"Predefined set of metrics"},{"location":"monitoring/#user-defined-metrics","text":"This feature is currently in beta state and the format is inspired by the queries.yaml file (release 0.12) of the PostgreSQL Prometheus Exporter. Custom metrics can be defined by users by referring to the created Configmap / Secret in a Cluster definition under the .spec.monitoring.customQueriesConfigMap or customQueriesSecret section as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example namespace: test spec: instances: 3 storage: size: 1Gi monitoring: customQueriesConfigMap: - name: example-monitoring key: custom-queries The customQueriesConfigMap / customQueriesSecret sections contain a list of ConfigMap / Secret references specifying the key in which the custom queries are defined. Take care that the referred resources have to be created in the same namespace as the Cluster resource. Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to it, otherwise you will have to reload the instances using the kubectl cnpg reload subcommand. Important When a user defined metric overwrites an already existing metric the instance manager prints a json warning log, containing the message: Query with the same name already found. Overwriting the existing one. and a key queryName containing the overwritten query name.","title":"User defined metrics"},{"location":"monitoring/#example-of-a-user-defined-metric","text":"Here you can see an example of a ConfigMap containing a single custom query, referenced by the Cluster example above: apiVersion: v1 kind: ConfigMap metadata: name: example-monitoring namespace: test labels: cnpg.io/reload: \"\" data: custom-queries: | pg_replication: query: \"SELECT CASE WHEN NOT pg_is_in_recovery() THEN 0 ELSE GREATEST (0, EXTRACT(EPOCH FROM (now() - pg_last_xact_replay_timestamp()))) END AS lag, pg_is_in_recovery() AS in_recovery, EXISTS (TABLE pg_stat_wal_receiver) AS is_wal_receiver_up, (SELECT count(*) FROM pg_stat_replication) AS streaming_replicas\" metrics: - lag: usage: \"GAUGE\" description: \"Replication lag behind primary in seconds\" - in_recovery: usage: \"GAUGE\" description: \"Whether the instance is in recovery\" - is_wal_receiver_up: usage: \"GAUGE\" description: \"Whether the instance wal_receiver is up\" - streaming_replicas: usage: \"GAUGE\" description: \"Number of streaming replicas connected to the instance\" A list of basic monitoring queries can be found in the default-monitoring.yaml file that is already installed in your CloudNativePG deployment (see \"Default set of metrics\" ).","title":"Example of a user defined metric"},{"location":"monitoring/#example-of-a-user-defined-metric-with-predicate-query","text":"The predicate_query option allows the user to execute the query to collect the metrics only under the specified conditions. To do so the user needs to provide a predicate query that returns at most one row with a single boolean column. The predicate query is executed in the same transaction as the main query and against the same databases. some_query: | predicate_query: | SELECT some_bool as predicate FROM some_table query: | SELECT count(*) as rows FROM some_table metrics: - rows: usage: \"GAUGE\" description: \"number of rows\"","title":"Example of a user defined metric with predicate query"},{"location":"monitoring/#example-of-a-user-defined-metric-running-on-multiple-databases","text":"If the target_databases option lists more than one database the metric is collected from each of them. Database auto-discovery can be enabled for a specific query by specifying a shell-like pattern (i.e., containing * , ? or [] ) in the list of target_databases . If provided, the operator will expand the list of target databases by adding all the databases returned by the execution of SELECT datname FROM pg_database WHERE datallowconn AND NOT datistemplate and matching the pattern according to path.Match() rules. Note The * character has a special meaning in yaml, so you need to quote ( \"*\" ) the target_databases value when it includes such a pattern. It is recommended that you always include the name of the database in the returned labels, for example using the current_database() function as in the following example: some_query: | query: | SELECT current_database() as datname, count(*) as rows FROM some_table metrics: - datname: usage: \"LABEL\" description: \"Name of current database\" - rows: usage: \"GAUGE\" description: \"number of rows\" target_databases: - albert - bb - freddie This will produce in the following metric being exposed: cnpg_some_query_rows{datname=\"albert\"} 2 cnpg_some_query_rows{datname=\"bb\"} 5 cnpg_some_query_rows{datname=\"freddie\"} 10 Here is an example of a query with auto-discovery enabled which also runs on the template1 database (otherwise not returned by the aforementioned query): some_query: | query: | SELECT current_database() as datname, count(*) as rows FROM some_table metrics: - datname: usage: \"LABEL\" description: \"Name of current database\" - rows: usage: \"GAUGE\" description: \"number of rows\" target_databases: - \"*\" - \"template1\" The above example will produce the following metrics (provided the databases exist): cnpg_some_query_rows{datname=\"albert\"} 2 cnpg_some_query_rows{datname=\"bb\"} 5 cnpg_some_query_rows{datname=\"freddie\"} 10 cnpg_some_query_rows{datname=\"template1\"} 7 cnpg_some_query_rows{datname=\"postgres\"} 42","title":"Example of a user defined metric running on multiple databases"},{"location":"monitoring/#structure-of-a-user-defined-metric","text":"Every custom query has the following basic structure: <MetricName>: query: \"<SQLQuery>\" metrics: - <ColumnName>: usage: \"<MetricType>\" description: \"<MetricDescription>\" Here is a short description of all the available fields: <MetricName> : the name of the Prometheus metric name : override <MetricName> , if defined query : the SQL query to run on the target database to generate the metrics primary : whether to run the query only on the primary instance master : same as primary (for compatibility with the Prometheus PostgreSQL exporter's syntax - deprecated) runonserver : a semantic version range to limit the versions of PostgreSQL the query should run on (e.g. \">=11.0.0\" or \">=12.0.0 <=15.0.0\" ) target_databases : a list of databases to run the query against, or a shell-like pattern to enable auto discovery. Overwrites the default database if provided. predicate_query : a SQL query that returns at most one row and one boolean column to run on the target database. The system evaluates the predicate and if true executes the query . metrics : section containing a list of all exported columns, defined as follows: <ColumnName> : the name of the column returned by the query name : override the ColumnName of the column in the metric, if defined usage : one of the values described below description : the metric's description metrics_mapping : the optional column mapping when usage is set to MAPPEDMETRIC The possible values for usage are: Column Usage Label Description DISCARD this column should be ignored LABEL use this column as a label COUNTER use this column as a counter GAUGE use this column as a gauge MAPPEDMETRIC use this column with the supplied mapping of text values DURATION use this column as a text duration (in milliseconds) HISTOGRAM use this column as a histogram Please visit the \"Metric Types\" page from the Prometheus documentation for more information.","title":"Structure of a user defined metric"},{"location":"monitoring/#output-of-a-user-defined-metric","text":"Custom defined metrics are returned by the Prometheus exporter endpoint ( :9187/metrics ) with the following format: cnpg_<MetricName>_<ColumnName>{<LabelColumnName>=<LabelColumnValue> ... } <ColumnValue> Note LabelColumnName are metrics with usage set to LABEL and their Value Considering the pg_replication example above, the exporter's endpoint would return the following output when invoked: # HELP cnpg_pg_replication_in_recovery Whether the instance is in recovery # TYPE cnpg_pg_replication_in_recovery gauge cnpg_pg_replication_in_recovery 0 # HELP cnpg_pg_replication_lag Replication lag behind primary in seconds # TYPE cnpg_pg_replication_lag gauge cnpg_pg_replication_lag 0 # HELP cnpg_pg_replication_streaming_replicas Number of streaming replicas connected to the instance # TYPE cnpg_pg_replication_streaming_replicas gauge cnpg_pg_replication_streaming_replicas 2 # HELP cnpg_pg_replication_is_wal_receiver_up Whether the instance wal_receiver is up # TYPE cnpg_pg_replication_is_wal_receiver_up gauge cnpg_pg_replication_is_wal_receiver_up 0","title":"Output of a user defined metric"},{"location":"monitoring/#default-set-of-metrics","text":"The operator can be configured to automatically inject in a Cluster a set of monitoring queries defined in a ConfigMap or a Secret, inside the operator's namespace. You have to set the MONITORING_QUERIES_CONFIGMAP or MONITORING_QUERIES_SECRET key in the \"operator configuration\" , respectively to the name of the ConfigMap or the Secret; the operator will then use the content of the queries key. Any change to the queries content will be immediately reflected on all the deployed Clusters using it. The operator installation manifests come with a predefined ConfigMap, called cnpg-default-monitoring , to be used by all Clusters. MONITORING_QUERIES_CONFIGMAP is by default set to cnpg-default-monitoring in the operator configuration. If you want to disable the default set of metrics, you can: disable it at operator level: set the MONITORING_QUERIES_CONFIGMAP / MONITORING_QUERIES_SECRET key to \"\" (empty string), in the operator ConfigMap. Changes to operator ConfigMap require an operator restart. disable it for a specific Cluster: set .spec.monitoring.disableDefaultQueries to true in the Cluster. Important The ConfigMap or Secret specified via MONITORING_QUERIES_CONFIGMAP / MONITORING_QUERIES_SECRET will always be copied to the Cluster's namespace with a fixed name: cnpg-default-monitoring . So that, if you intend to have default metrics, you should not create a ConfigMap with this name in the cluster's namespace.","title":"Default set of metrics"},{"location":"monitoring/#differences-with-the-prometheus-postgres-exporter","text":"CloudNativePG is inspired by the PostgreSQL Prometheus Exporter, but presents some differences. In particular, the cache_seconds field is not implemented in CloudNativePG's exporter.","title":"Differences with the Prometheus Postgres exporter"},{"location":"monitoring/#monitoring-the-cloudnativepg-operator","text":"The operator internally exposes Prometheus metrics via HTTP on port 8080, named metrics . Info You can inspect the exported metrics by following the instructions in the \"How to inspect the exported metrics\" section below. Currently, the operator exposes default kubebuilder metrics. See kubebuilder documentation for more details.","title":"Monitoring the CloudNativePG operator"},{"location":"monitoring/#monitoring-the-operator-with-prometheus","text":"The operator can be monitored using the Prometheus Operator by defining a PodMonitor pointing to the operator pod(s), as follows (note it's applied in the same namespace as the operator): kubectl -n cnpg-system apply -f - <<EOF --- apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cnpg-controller-manager spec: selector: matchLabels: app.kubernetes.io/name: cloudnative-pg podMetricsEndpoints: - port: metrics EOF","title":"Monitoring the operator with Prometheus"},{"location":"monitoring/#how-to-inspect-the-exported-metrics","text":"In this section we provide basic instructions on how to inspect the metrics exported by a specific PostgreSQL instance manager (primary or replica) or the operator. Note In the examples below we assume we are working in the default namespace, and with the operator installed in the cnpg-system namespace. Please adapt to your use case.","title":"How to inspect the exported metrics"},{"location":"monitoring/#using-port-forwarding","text":"The simplest way to inspect the metrics is to port-forward the metrics ports of the pods involved. For example, to inspect the metrics on the -1 instance of cluster-example , we port-forward the 9187 port: kubectl port-forward cluster-example-1 9187:9187 With port-forwarding active, the metrics can be inspected easily, for example on a web browser, using HTTP or HTTPS depending on the configuration, with address: localhost:9187/metrics . The operator pod also exports metrics, on port 8080. Similarly to instances, we port-forward the operator pod, which is located in the operator namespace: kubectl -n cnpg-system port-forward pod/<CONTROLLER-MANAGER-POD> 8080:8080 With port forwarding active, the metrics are easily viewable on a browser at localhost:8080/metrics .","title":"Using port forwarding"},{"location":"monitoring/#using-curl","text":"Create the curl pod with the following command: kubectl apply -f - <<EOF --- apiVersion: v1 kind: Pod metadata: name: curl spec: containers: - name: curl image: curlimages/curl:8.2.1 command: ['sleep', '3600'] EOF To inspect the metrics exported by an instance, you need to connect to port 9187 of the target pod. You will need to know the pod's IP address, which you can find easily by running kubectl get pod -o wide . The following generic command will run curl on the desired pod: kubectl exec -ti curl -- curl -s <pod_ip>:9187/metrics For example, if your PostgreSQL cluster is called cluster-example and you want to retrieve the exported metrics of the first pod in the cluster, you can run the following command to programmatically get the IP of that pod: POD_IP=$(kubectl get pod cluster-example-1 --template '{{.status.podIP}}') And then run: kubectl exec -ti curl -- curl -s ${POD_IP}:9187/metrics If you enabled TLS metrics, run instead: kubectl exec -ti curl -- curl -sk https://${POD_IP}:9187/metrics To access the metrics of the operator, you need to point to the pod where the operator is running, and use TCP port 8080 as target. When you're done inspecting metrics, please remember to delete the curl pod: kubectl delete -f curl.yaml","title":"Using curl"},{"location":"monitoring/#auxiliary-resources","text":"Important These resources are provided for illustration and experimentation, and do not represent any kind of recommendation for your production system In the doc/src/samples/monitoring/ directory you will find a series of sample files for observability. Please refer to Part 4 of the quickstart section for context: kube-stack-config.yaml : a configuration file for the kube-stack helm chart installation. It ensures that Prometheus listens for all PodMonitor resources. prometheusrule.yaml : a PrometheusRule with alerts for CloudNativePG. NOTE: this does not include inter-operation with notification services. Please refer to the Prometheus documentation . podmonitor.yaml : a PodMonitor for the CloudNativePG Operator deployment. In addition, we provide the \"raw\" sources for the Prometheus alert rules in the alerts.yaml file. A Grafana dashboard for CloudNativePG clusters and operator, is kept in the dedicated repository cloudnative-pg/grafana-dashboards as a dashboard JSON configuration: grafana-dashboard.json . The file can be downloaded, and imported into Grafana (menus: Dashboard > New > Import). For a general reference on the settings available on kube-prometheus-stack , you can execute helm show values prometheus-community/kube-prometheus-stack . Please refer to the kube-prometheus-stack page for more detail.","title":"Auxiliary resources"},{"location":"networking/","text":"Networking CloudNativePG assumes the underlying Kubernetes cluster has the required connectivity already set up. Networking on Kubernetes is an important and extended topic; please refer to the Kubernetes documentation for further information. If you're following the quickstart guide to install CloudNativePG on a local KinD or K3d cluster, you should not encounter any networking issues as neither platform will add any networking restrictions by default. However, when deploying CloudNativePG on existing infrastructure, networking restrictions might be in place that could impair the communication of the operator with PostgreSQL clusters. Specifically, existing Network Policies might restrict certain types of traffic. Or, you might be interested in adding network policies in your environment for increased security. As mentioned in the security document , please ensure the operator can reach every cluster pod on ports 8000 and 5432, and that pods can connect to each other. Cross-namespace network policy for the operator Following the quickstart guide or using helm chart for deployment will install the operator in a dedicated namespace ( cnpg-system by default). We recommend that you create clusters in a different namespace. The operator must be able to connect to cluster pods. This might be precluded if there is a NetworkPolicy restricting cross-namespace traffic. For example, the kubernetes guide on network policies contains an example policy denying all ingress traffic by default. If your local kubernetes setup has this kind of restrictive network policy, you will need to create a NetworkPolicy to explicitly allow connection from the operator namespace and pod to the cluster namespace and pods. You can find an example in the networkpolicy-example.yaml file in this repository. Please note, you'll need to adjust the cluster name and cluster namespace to match your specific setup, and also the operator namespace if it is not the default namespace. Cross-cluster networking While bootstrapping from another cluster or when using the externalClusters section, ensure connectivity among all clusters, object stores, and namespaces involved. Again, we refer you to the Kubernetes documentation for setup information.","title":"Networking"},{"location":"networking/#networking","text":"CloudNativePG assumes the underlying Kubernetes cluster has the required connectivity already set up. Networking on Kubernetes is an important and extended topic; please refer to the Kubernetes documentation for further information. If you're following the quickstart guide to install CloudNativePG on a local KinD or K3d cluster, you should not encounter any networking issues as neither platform will add any networking restrictions by default. However, when deploying CloudNativePG on existing infrastructure, networking restrictions might be in place that could impair the communication of the operator with PostgreSQL clusters. Specifically, existing Network Policies might restrict certain types of traffic. Or, you might be interested in adding network policies in your environment for increased security. As mentioned in the security document , please ensure the operator can reach every cluster pod on ports 8000 and 5432, and that pods can connect to each other.","title":"Networking"},{"location":"networking/#cross-namespace-network-policy-for-the-operator","text":"Following the quickstart guide or using helm chart for deployment will install the operator in a dedicated namespace ( cnpg-system by default). We recommend that you create clusters in a different namespace. The operator must be able to connect to cluster pods. This might be precluded if there is a NetworkPolicy restricting cross-namespace traffic. For example, the kubernetes guide on network policies contains an example policy denying all ingress traffic by default. If your local kubernetes setup has this kind of restrictive network policy, you will need to create a NetworkPolicy to explicitly allow connection from the operator namespace and pod to the cluster namespace and pods. You can find an example in the networkpolicy-example.yaml file in this repository. Please note, you'll need to adjust the cluster name and cluster namespace to match your specific setup, and also the operator namespace if it is not the default namespace.","title":"Cross-namespace network policy for the operator"},{"location":"networking/#cross-cluster-networking","text":"While bootstrapping from another cluster or when using the externalClusters section, ensure connectivity among all clusters, object stores, and namespaces involved. Again, we refer you to the Kubernetes documentation for setup information.","title":"Cross-cluster networking"},{"location":"operator_capability_levels/","text":"Operator capability levels These capabilities were implemented by CloudNativePG, classified using the Operator SDK definition of Capability Levels framework. Important Based on the Operator Capability Levels model , you can expect a \"Level V - Auto Pilot\" set of capabilities from the CloudNativePG operator. Each capability level is associated with a certain set of management features the operator offers: Basic install Seamless upgrades Full lifecycle Deep insights Auto pilot Note We consider this framework as a guide for future work and implementations in the operator. Level 1: Basic install Capability level 1 involves installing and configuring the operator. This category includes usability and user experience enhancements, such as improvements in how you interact with the operator and a PostgreSQL cluster configuration. Important We consider information security part of this level. Operator deployment via declarative configuration The operator is installed in a declarative way using a Kubernetes manifest that defines four major CustomResourceDefinition objects: Cluster , Pooler , Backup , and ScheduledBackup . PostgreSQL cluster deployment via declarative configuration You define a PostgreSQL cluster (operand) using the Cluster custom resource in a fully declarative way. The PostgreSQL version is determined by the operand container image defined in the CR, which is automatically fetched from the requested registry. When deploying an operand, the operator also creates the following resources: Pod , Service , Secret , ConfigMap , PersistentVolumeClaim , PodDisruptionBudget , ServiceAccount , RoleBinding , and Role . Override of operand images through the CRD The operator is designed to support any operand container image with PostgreSQL inside. By default, the operator uses the latest available minor version of the latest stable major version supported by the PostgreSQL community and published on ghcr.io. You can use any compatible image of PostgreSQL supporting the primary/standby architecture directly by setting the imageName attribute in the CR. The operator also supports imagePullSecrets to access private container registries, and it supports digests and tags for finer control of container image immutability. If you prefer not to specify an image name, you can leverage image catalogs by simply referencing the PostgreSQL major version. Moreover, image catalogs enable you to effortlessly create custom catalogs, directing to images based on your specific requirements. Labels and annotations You can configure the operator to support inheriting labels and annotations that are defined in a cluster's metadata. The goal is to improve the organization of the CloudNativePG deployment in your Kubernetes infrastructure. Self-contained instance manager Instead of relying on an external tool to coordinate PostgreSQL instances in the Kubernetes cluster pods, such as Patroni or Stolon, the operator injects the operator executable inside each pod, in a file named /controller/manager . The application is used to control the underlying PostgreSQL instance and to reconcile the pod status with the instance based on the PostgreSQL cluster topology. The instance manager also starts a web server that's invoked by the kubelet for probes. Unix signals invoked by the kubelet are filtered by the instance manager. Where appropriate, they're forwarded to the postgres process for fast and controlled reactions to external events. The instance manager is written in Go and has no external dependencies. Storage configuration Storage is a critical component in a database workload. Taking advantage of the Kubernetes native capabilities and resources in terms of storage, the operator gives you enough flexibility to choose the right storage for your workload requirements, based on what the underlying Kubernetes environment can offer. This implies choosing a particular storage class in a public cloud environment or fine-tuning the generated PVC through a PVC template in the CR's storage parameter. For better performance and finer control, you can also choose to host your cluster's write-ahead log (WAL, also known as pg_wal ) on a separate volume, preferably on different storage. The \"Benchmarking\" section of the documentation provides detailed instructions on benchmarking both storage and the database before production. It relies on the cnpg plugin to ensure optimal performance and reliability. Replica configuration The operator detects replicas in a cluster through a single parameter, called instances . If set to 1 , the cluster comprises a single primary PostgreSQL instance with no replica. If higher than 1 , the operator manages instances -1 replicas, including high availability (HA) through automated failover and rolling updates through switchover operations. CloudNativePG manages replication slots for all the replicas in the HA cluster. The implementation is inspired by the previously proposed patch for PostgreSQL, called failover slots , and also supports user defined physical replication slots on the primary. Service Configuration By default, CloudNativePG creates three Kubernetes services for applications to access the cluster via the network: One pointing to the primary for read/write operations. One pointing to replicas for read-only queries. A generic one pointing to any instance for read operations. You can disable the read-only and read services via configuration. Additionally, you can leverage the service template capability to create custom service resources, including load balancers, to access PostgreSQL outside Kubernetes. This is particularly useful for DBaaS purposes. Database configuration The operator is designed to bootstrap a PostgreSQL cluster with a single database. The operator transparently manages network access to the cluster through three Kubernetes services provisioned and managed for read-write, read, and read-only workloads. Using the convention-over-configuration approach, the operator creates a database called app , by default owned by a regular Postgres user with the same name. You can specify both the database name and the user name, if required, as part of the bootstrap. Additional databases can be created or managed via declarative database management using the Database CRD, also supporting extensions and schemas. Although no configuration is required to run the cluster, you can customize both PostgreSQL runtime configuration and PostgreSQL host-based authentication rules in the postgresql section of the CR. Configuration of Postgres roles, users, and groups CloudNativePG supports management of PostgreSQL roles, users, and groups through declarative configuration using the .spec.managed.roles stanza. Pod security standards For InfoSec requirements, the operator doesn't require privileged mode for any container. It enforces a read-only root filesystem to guarantee containers immutability for both the operator and the operand pods. It also explicitly sets the required security contexts. Affinity The cluster's affinity section enables fine-tuning of how pods and related resources, such as persistent volumes, are scheduled across the nodes of a Kubernetes cluster. In particular, the operator supports: Pod affinity and anti-affinity Node selector Taints and tolerations Topology spread constraints The cluster's topologySpreadConstraints section enables additional control of scheduling pods across topologies, enhancing what affinity and anti-affinity can offer. Command-line interface CloudNativePG doesn't have its own command-line interface. It relies on the best command-line interface for Kubernetes, kubectl, by providing a plugin called cnpg . This plugin enhances and simplifies your PostgreSQL cluster management experience. Current status of the cluster The operator continuously updates the status section of the CR with the observed status of the cluster. The entire PostgreSQL cluster status is continuously monitored by the instance manager running in each pod. The instance manager is responsible for applying the required changes to the controlled PostgreSQL instance to converge to the required status of the cluster. (For example, if the cluster status reports that pod -1 is the primary, pod -1 needs to promote itself while the other pods need to follow pod -1 .) The same status is used by the cnpg plugin for kubectl to provide details. Operator's certification authority The operator creates a certification authority for itself. It creates and signs with the operator certification authority a leaf certificate for the webhook server to use. This certificate ensures safe communication between the Kubernetes API server and the operator. Cluster's certification authority The operator creates a certification authority for every PostgreSQL cluster. This certification authority is used to issue and renew TLS certificates for clients' authentication, including streaming replication standby servers (instead of passwords). Support for a custom certification authority for client certificates is available through secrets, which also includes integration with cert-manager. Certificates can be issued with the cnpg plugin for kubectl. TLS connections The operator transparently and natively supports TLS/SSL connections to encrypt client/server communications for increased security using the cluster's certification authority. Support for custom server certificates is available through secrets, which also includes integration with cert-manager. Certificate authentication for streaming replication To authorize streaming replication connections from the standby servers, the operator relies on TLS client certificate authentication. This method is used instead of relying on a password (and therefore a secret). Continuous configuration management The operator enables you to apply changes to the Cluster resource YAML section of the PostgreSQL configuration. Depending on the configuration option, it also makes sure that all instances are properly reloaded or restarted. Note Changes with ALTER SYSTEM aren't detected, meaning that the cluster state isn't enforced. Import of existing PostgreSQL databases The operator provides a declarative way to import existing Postgres databases in a new CloudNativePG cluster in Kubernetes, using offline migrations. The same feature also covers offline major upgrades of PostgreSQL databases. Offline means that applications must stop their write operations at the source until the database is imported. The feature extends the initdb bootstrap method to create a new PostgreSQL cluster using a logical snapshot of the data available in another PostgreSQL database. This data can be accessed by way of the network through a superuser connection. Import is from any supported version of Postgres. It relies on pg_dump and pg_restore being executed from the new cluster primary for all databases that are part of the operation and, if requested, for roles. PostGIS clusters CloudNativePG supports the installation of clusters with the PostGIS open source extension for geographical databases. This extension is one of the most popular extensions for PostgreSQL. Basic LDAP authentication for PostgreSQL The operator allows you to configure LDAP authentication for your PostgreSQL clients, using either the simple bind or search+bind mode, as described in the LDAP authentication section of the PostgreSQL documentation . Multiple installation methods The operator can be installed through a Kubernetes manifest by way of kubectl apply , to be used in a traditional Kubernetes installation in public and private cloud environments. CloudNativePG also supports installation by way of a Helm chart or OLM bundle from OperatorHub.io. Convention over configuration The operator supports the convention-over-configuration paradigm, deciding standard default values while allowing you to override them and customize them. You can specify a deployment of a PostgreSQL cluster using the Cluster CRD in a couple of lines of YAML code. Level 2: Seamless upgrades Capability level 2 is about enabling updates of the operator and the actual workload, in this case PostgreSQL servers. This includes PostgreSQL minor release updates (security and bug fixes normally) as well as major online upgrades. Operator Upgrade Upgrading the operator is seamless and can be done as a new deployment. After upgrading the controller, a rolling update of all deployed PostgreSQL clusters is initiated. You can choose to update all clusters simultaneously or distribute their upgrades over time. Thanks to the instance manager's injection, upgrading the operator does not require changes to the operand, allowing the operator to manage older versions of it. Additionally, CloudNativePG supports in-place updates of the instance manager following an operator upgrade. In-place updates do not require a rolling update or a subsequent switchover of the cluster. Upgrade of the managed workload The operand can be upgraded using a declarative configuration approach as part of changing the CR and, in particular, the imageName parameter. This is normally initiated by security updates or Postgres minor version updates. In the presence of standby servers, the operator performs rolling updates starting from the replicas. It does this by dropping the existing pod and creating a new one with the new requested operand image that reuses the underlying storage. Depending on the value of the primaryUpdateStrategy , the operator proceeds with a switchover before updating the former primary ( unsupervised ). Or, it waits for the user to manually issue the switchover procedure ( supervised ) by way of the cnpg plugin for kubectl. The setting to use depends on the business requirements, as the operation might generate some downtime for the applications. This downtime can range from a few seconds to minutes, based on the actual database workload. Offline In-Place Major Upgrades of PostgreSQL CloudNativePG supports declarative offline in-place major upgrades when a new operand container image with a higher PostgreSQL major version is applied to a cluster. The upgrade can be triggered by updating the image tag via the .spec.imageName option or by using an image catalog to manage version changes. During the upgrade, all cluster pods are shut down to ensure data consistency. A new job is then created to validate the upgrade conditions, execute pg_upgrade , and create new directories for PGDATA , WAL files, and tablespaces if needed. Once the upgrade is complete, replicas are re-created. Failed upgrades can be rolled back. Display cluster availability status during upgrade At any time, convey the cluster's high availability status, for example, Setting up primary , Creating a new replica , Cluster in healthy state , Switchover in progress , Failing over , Upgrading cluster , and Upgrading Postgres major version . Level 3: Full lifecycle Capability level 3 requires the operator to manage aspects of business continuity and scalability. Disaster recovery is a business continuity component that requires that both backup and recovery of a database work correctly. While as a starting point, the goal is to achieve RPO < 5 minutes, the long-term goal is to implement RPO=0 backup solutions. High availability is the other important component of business continuity. Through PostgreSQL native physical replication and hot standby replicas, it allows the operator to perform failover and switchover operations. This area includes enhancements in: Control of PostgreSQL physical replication, such as synchronous replication, (cascading) replication clusters, and so on Connection pooling, to improve performance and control through a connection pooling layer with pgBouncer PostgreSQL WAL archive The operator supports PostgreSQL continuous archiving of WAL files to an object store (AWS S3 and S3-compatible, Azure Blob Storage, Google Cloud Storage, and gateways like MinIO). WAL archiving is defined at the cluster level, declaratively, through the backup parameter in the cluster definition. This is done by specifying an S3 protocol destination URL (for example, to point to a specific folder in an AWS S3 bucket) and, optionally, a generic endpoint URL. WAL archiving, a prerequisite for continuous backup, doesn't require any further user action. The operator transparently sets the archive_command to rely on barman-cloud-wal-archive to ship WAL files to the defined endpoint. You can decide the compression algorithm, as well as the number of parallel jobs to concurrently upload WAL files in the archive. In addition, Instance Manager checks the correctness of the archive destination by performing the barman-cloud-check-wal-archive command before beginning to ship the first set of WAL files. PostgreSQL backups The operator was designed to provide application-level backups using PostgreSQL\u2019s native continuous hot backup technology based on physical base backups and continuous WAL archiving. Base backups can be saved on: Kubernetes volume snapshots Object stores (AWS S3 and S3-compatible, Azure Blob Storage, Google Cloud Storage, and gateways like MinIO) Base backups are defined at the cluster level, declaratively, through the backup parameter in the cluster definition. You can define base backups in two ways: On-demand, through the Backup custom resource definition Scheduled, through the ScheduledBackup custom resource definition, using a cron-like syntax Volume snapshots rely directly on the Kubernetes API, which delegates this capability to the underlying storage classes and CSI drivers. Volume snapshot backups are suitable for very large database (VLDB) contexts. Object store backups rely on barman-cloud-backup for the job (distributed as part of the application container image) to relay backups in the same endpoint, alongside WAL files. Both barman-cloud-wal-restore and barman-cloud-backup are distributed in the application container image under GNU GPL 3 terms. Object store backups and volume snapshot backups are taken while PostgreSQL is up and running (hot backups). Volume snapshots also support taking consistent database snapshots with cold backups. Backups from a standby The operator supports offloading base backups onto a standby without impacting the RPO of the database. This allows resources to be preserved on the primary, in particular I/O, for standard database operations. Full restore from a backup The operator enables you to bootstrap a new cluster (with its settings) starting from an existing and accessible backup, either on a volume snapshot or in an object store. Once the bootstrap process is completed, the operator initiates the instance in recovery mode. It replays all available WAL files from the specified archive, exiting recovery and starting as a primary. Subsequently, the operator clones the requested number of standby instances from the primary. CloudNativePG supports parallel WAL fetching from the archive. Point-in-time recovery (PITR) from a backup The operator enables you to create a new PostgreSQL cluster by recovering an existing backup to a specific point in time, defined with a timestamp, a label, or a transaction ID. This capability is built on top of the full restore one and supports all the options available in PostgreSQL for PITR . Zero-Data-Loss Clusters Through Synchronous Replication Achieve zero data loss (RPO=0) in your local high-availability CloudNativePG cluster with support for both quorum-based and priority-based synchronous replication. The operator offers a flexible way to define the number of expected synchronous standby replicas available at any time, and allows customization of the synchronous_standby_names option as needed. Replica clusters Establish a robust cross-Kubernetes cluster topology for PostgreSQL clusters, harnessing the power of native streaming and cascading replication. With the replica option, you can configure an autonomous cluster to consistently replicate data from another PostgreSQL source of the same major version. This source can be located anywhere, provided you have access to a WAL archive for fetching WAL files or a direct streaming connection via TLS between the two endpoints. Notably, the source PostgreSQL instance can exist outside the Kubernetes environment, whether in a physical or virtual setting. Replica clusters can be instantiated through various methods, including volume snapshots, a recovery object store (using the Barman Cloud backup format), or streaming using pg_basebackup . Both WAL file shipping and WAL streaming are supported. The deployment of replica clusters significantly elevates the business continuity posture of PostgreSQL databases within Kubernetes, extending across multiple data centers and facilitating hybrid and multi-cloud setups. (While anticipating Kubernetes federation native capabilities, manual switchover across data centers remains necessary.) Additionally, the flexibility extends to creating delayed replica clusters intentionally lagging behind the primary cluster. This intentional lag aims to minimize the Recovery Time Objective ( RTO ) in the event of unintended errors, such as incorrect DELETE or UPDATE SQL operations. Distributed Database Topologies Leverage replica clusters to define distributed database topologies for PostgreSQL that span across various Kubernetes clusters, facilitating hybrid and multi-cloud deployments. With CloudNativePG, you gain powerful capabilities, including: Declarative Primary Control : Easily specify which PostgreSQL cluster acts as the primary. Seamless Primary Switchover : Effortlessly demote the current primary and promote another PostgreSQL cluster, typically located in a different region, without needing to re-clone the former primary. This setup can efficiently operate across two or more regions, can rely entirely on object stores for replication, and guarantees a maximum RPO (Recovery Point Objective) of 5 minutes. This advanced feature is uniquely provided by CloudNativePG, ensuring robust data integrity and continuity across diverse environments. Tablespace support CloudNativePG seamlessly integrates robust support for PostgreSQL tablespaces by facilitating the declarative definition of individual persistent volumes. This innovative feature empowers you to efficiently distribute I/O operations across a diverse array of storage devices. Through the transparent orchestration of tablespaces, CloudNativePG enhances the performance and scalability of PostgreSQL databases, ensuring a streamlined and optimized experience for managing large scale data storage in cloud-native environments. Support for temporary tablespaces is also included. Startup, Liveness, and Readiness Probes CloudNativePG configures startup, liveness, and readiness probes for PostgreSQL containers, which are managed by the Kubernetes kubelet. These probes interact with the /healthz and /readyz endpoints exposed by the instance manager's web server to monitor the Pod's health and readiness. The startup and liveness probes use the pg_isready utility. A Pod is considered healthy if pg_isready returns an exit code of 0 (indicating the server is accepting connections) or 1 (indicating the server is rejecting connections, such as during startup). The readiness probe executes a simple SQL query ( ; ) to verify that the PostgreSQL server is ready to accept client connections. All probes are configured with default settings but can be fully customized to meet specific needs, allowing for fine-tuning to align with your environment and workloads. Rolling deployments The operator supports rolling deployments to minimize the downtime. If a PostgreSQL cluster is exposed publicly, the service load-balances the read-only traffic only to available pods during the initialization or the update. Scale up and down of replicas The operator allows you to scale up and down the number of instances in a PostgreSQL cluster. New replicas are started up from the primary server and participate in the cluster's HA infrastructure. The CRD declares a \"scale\" subresource that allows you to use the kubectl scale command. Maintenance window and PodDisruptionBudget for Kubernetes nodes The operator creates a PodDisruptionBudget resource to limit the number of concurrent disruptions to one primary instance. This configuration prevents the maintenance operation from deleting all the pods in a cluster, allowing the specified number of instances to be created. The PodDisruptionBudget is applied during the node-draining operation, preventing any disruption of the cluster service. While this strategy is correct for Kubernetes clusters where storage is shared among all the worker nodes, it might not be the best solution for clusters using local storage or for clusters installed in a private cloud. The operator allows you to specify a maintenance window and configure the reaction to any underlying node eviction. The ReusePVC option in the maintenance window section enables to specify the strategy to use. Allocate new storage in a different PVC for the evicted instance, or wait for the underlying node to be available again. Fencing Fencing is the process of protecting the data in one, more, or even all instances of a PostgreSQL cluster when they appear to be malfunctioning. When an instance is fenced, the PostgreSQL server process is guaranteed to be shut down, while the pod is kept running. This ensures that, until the fence is lifted, data on the pod isn't modified by PostgreSQL and that you can investigate file system for debugging and troubleshooting purposes. Hibernation (declarative) CloudNativePG supports hibernation of a running PostgreSQL cluster in a declarative manner, through the cnpg.io/hibernation annotation. Hibernation enables saving CPU power by removing the database pods while keeping the database PVCs. This feature simulates scaling to 0 instances. Hibernation (imperative) CloudNativePG supports hibernation of a running PostgreSQL cluster by way of the cnpg plugin. Hibernation shuts down all Postgres instances in the high-availability cluster and keeps a static copy of the PVC group of the primary. The copy contains PGDATA and WALs. The plugin enables you to exit the hibernation phase by resuming the primary and then recreating all the replicas, if they exist. Reuse of persistent volumes storage in pods When the operator needs to create a pod that was deleted by the user or was evicted by a Kubernetes maintenance operation, it reuses the PersistentVolumeClaim , if available. This ability avoids the need to clone the data from the primary again. CPU and memory requests and limits The operator allows administrators to control and manage resource usage by the cluster's pods in the resources section of the manifest. In particular, you can set requests and limits values for both CPU and RAM. Connection pooling with PgBouncer CloudNativePG provides native support for connection pooling with PgBouncer , one of the most popular open source connection poolers for PostgreSQL. From an architectural point of view, the native implementation of a PgBouncer connection pooler introduces a new layer to access the database. This optimizes the query flow toward the instances and makes the use of the underlying PostgreSQL resources more efficient. Instead of connecting directly to a PostgreSQL service, applications can now connect to the PgBouncer service and start reusing any existing connection. Logical Replication CloudNativePG supports PostgreSQL's logical replication in a declarative manner using Publication and Subscription custom resource definitions. Logical replication is particularly useful together with the import facility for online data migrations (even from public DBaaS solutions) and major PostgreSQL upgrades. Level 4: Deep insights Capability level 4 is about observability : monitoring, alerting, trending, and log processing. This might involve the use of external tools, such as Prometheus, Grafana, and Fluent Bit, as well as extensions in the PostgreSQL engine for the output of error logs directly in JSON format. CloudNativePG was designed to provide everything needed to easily integrate with industry-standard and community-accepted tools for flexible monitoring and logging. Prometheus exporter with configurable queries The instance manager provides a pluggable framework. By way of its own web server listening on the metrics port (9187), it exposes an endpoint to export metrics for the Prometheus monitoring and alerting tool. The operator supports custom monitoring queries defined as ConfigMap or Secret objects using a syntax that's compatible with postgres_exporter for Prometheus . CloudNativePG provides a set of basic monitoring queries for PostgreSQL that can be integrated and adapted to your context. Grafana dashboard CloudNativePG comes with a Grafana dashboard that you can use as a base to monitor all critical aspects of a PostgreSQL cluster, and customize. Standard output logging of PostgreSQL error messages in JSON format Every log message is delivered to standard output in JSON format. The first level is the definition of the timestamp, the log level, and the type of log entry, such as postgres for the canonical PostgreSQL error message channel. As a result, every pod managed by CloudNativePG can be easily and directly integrated with any downstream log processing stack that supports JSON as source data type. Real-time query monitoring CloudNativePG transparently and natively supports: The essential pg_stat_statements extension , which enables tracking of planning and execution statistics of all SQL statements executed by a PostgreSQL server The auto_explain extension , which provides a means for logging execution plans of slow statements automatically, without having to manually run EXPLAIN (helpful for tracking down un-optimized queries) The pg_failover_slots extension , which makes logical replication slots usable across a physical failover, ensuring resilience in change data capture (CDC) contexts based on PostgreSQL's native logical replication Audit CloudNativePG allows database and security administrators, auditors, and operators to track and analyze database activities using PGAudit for PostgreSQL. Such activities flow directly in the JSON log and can be properly routed to the correct downstream target using common log brokers like Fluentd. Kubernetes events Record major events as expected by the Kubernetes API, such as creating resources, removing nodes, and upgrading. Events can be displayed by using the kubectl describe and kubectl get events commands. Level 5: Auto pilot Capability level 5 is focused on automated scaling, healing, and tuning through the discovery of anomalies and insights that emerged from the observability layer. Automated failover for self-healing In case of detected failure on the primary, the operator changes the status of the cluster by setting the most aligned replica as the new target primary. As a consequence, the instance manager in each alive pod initiates the required procedures to align itself with the requested status of the cluster. It does this by either becoming the new primary or by following it. In case the former primary comes back up, the same mechanism avoids a split-brain by preventing applications from reaching it, running pg_rewind on the server and restarting it as a standby. Automated recreation of a standby If the pod hosting a standby is removed, the operator initiates the procedure to re-create a standby server.","title":"Operator capability levels"},{"location":"operator_capability_levels/#operator-capability-levels","text":"These capabilities were implemented by CloudNativePG, classified using the Operator SDK definition of Capability Levels framework. Important Based on the Operator Capability Levels model , you can expect a \"Level V - Auto Pilot\" set of capabilities from the CloudNativePG operator. Each capability level is associated with a certain set of management features the operator offers: Basic install Seamless upgrades Full lifecycle Deep insights Auto pilot Note We consider this framework as a guide for future work and implementations in the operator.","title":"Operator capability levels"},{"location":"operator_capability_levels/#level-1-basic-install","text":"Capability level 1 involves installing and configuring the operator. This category includes usability and user experience enhancements, such as improvements in how you interact with the operator and a PostgreSQL cluster configuration. Important We consider information security part of this level.","title":"Level 1: Basic install"},{"location":"operator_capability_levels/#operator-deployment-via-declarative-configuration","text":"The operator is installed in a declarative way using a Kubernetes manifest that defines four major CustomResourceDefinition objects: Cluster , Pooler , Backup , and ScheduledBackup .","title":"Operator deployment via declarative configuration"},{"location":"operator_capability_levels/#postgresql-cluster-deployment-via-declarative-configuration","text":"You define a PostgreSQL cluster (operand) using the Cluster custom resource in a fully declarative way. The PostgreSQL version is determined by the operand container image defined in the CR, which is automatically fetched from the requested registry. When deploying an operand, the operator also creates the following resources: Pod , Service , Secret , ConfigMap , PersistentVolumeClaim , PodDisruptionBudget , ServiceAccount , RoleBinding , and Role .","title":"PostgreSQL cluster deployment via declarative configuration"},{"location":"operator_capability_levels/#override-of-operand-images-through-the-crd","text":"The operator is designed to support any operand container image with PostgreSQL inside. By default, the operator uses the latest available minor version of the latest stable major version supported by the PostgreSQL community and published on ghcr.io. You can use any compatible image of PostgreSQL supporting the primary/standby architecture directly by setting the imageName attribute in the CR. The operator also supports imagePullSecrets to access private container registries, and it supports digests and tags for finer control of container image immutability. If you prefer not to specify an image name, you can leverage image catalogs by simply referencing the PostgreSQL major version. Moreover, image catalogs enable you to effortlessly create custom catalogs, directing to images based on your specific requirements.","title":"Override of operand images through the CRD"},{"location":"operator_capability_levels/#labels-and-annotations","text":"You can configure the operator to support inheriting labels and annotations that are defined in a cluster's metadata. The goal is to improve the organization of the CloudNativePG deployment in your Kubernetes infrastructure.","title":"Labels and annotations"},{"location":"operator_capability_levels/#self-contained-instance-manager","text":"Instead of relying on an external tool to coordinate PostgreSQL instances in the Kubernetes cluster pods, such as Patroni or Stolon, the operator injects the operator executable inside each pod, in a file named /controller/manager . The application is used to control the underlying PostgreSQL instance and to reconcile the pod status with the instance based on the PostgreSQL cluster topology. The instance manager also starts a web server that's invoked by the kubelet for probes. Unix signals invoked by the kubelet are filtered by the instance manager. Where appropriate, they're forwarded to the postgres process for fast and controlled reactions to external events. The instance manager is written in Go and has no external dependencies.","title":"Self-contained instance manager"},{"location":"operator_capability_levels/#storage-configuration","text":"Storage is a critical component in a database workload. Taking advantage of the Kubernetes native capabilities and resources in terms of storage, the operator gives you enough flexibility to choose the right storage for your workload requirements, based on what the underlying Kubernetes environment can offer. This implies choosing a particular storage class in a public cloud environment or fine-tuning the generated PVC through a PVC template in the CR's storage parameter. For better performance and finer control, you can also choose to host your cluster's write-ahead log (WAL, also known as pg_wal ) on a separate volume, preferably on different storage. The \"Benchmarking\" section of the documentation provides detailed instructions on benchmarking both storage and the database before production. It relies on the cnpg plugin to ensure optimal performance and reliability.","title":"Storage configuration"},{"location":"operator_capability_levels/#replica-configuration","text":"The operator detects replicas in a cluster through a single parameter, called instances . If set to 1 , the cluster comprises a single primary PostgreSQL instance with no replica. If higher than 1 , the operator manages instances -1 replicas, including high availability (HA) through automated failover and rolling updates through switchover operations. CloudNativePG manages replication slots for all the replicas in the HA cluster. The implementation is inspired by the previously proposed patch for PostgreSQL, called failover slots , and also supports user defined physical replication slots on the primary.","title":"Replica configuration"},{"location":"operator_capability_levels/#service-configuration","text":"By default, CloudNativePG creates three Kubernetes services for applications to access the cluster via the network: One pointing to the primary for read/write operations. One pointing to replicas for read-only queries. A generic one pointing to any instance for read operations. You can disable the read-only and read services via configuration. Additionally, you can leverage the service template capability to create custom service resources, including load balancers, to access PostgreSQL outside Kubernetes. This is particularly useful for DBaaS purposes.","title":"Service Configuration"},{"location":"operator_capability_levels/#database-configuration","text":"The operator is designed to bootstrap a PostgreSQL cluster with a single database. The operator transparently manages network access to the cluster through three Kubernetes services provisioned and managed for read-write, read, and read-only workloads. Using the convention-over-configuration approach, the operator creates a database called app , by default owned by a regular Postgres user with the same name. You can specify both the database name and the user name, if required, as part of the bootstrap. Additional databases can be created or managed via declarative database management using the Database CRD, also supporting extensions and schemas. Although no configuration is required to run the cluster, you can customize both PostgreSQL runtime configuration and PostgreSQL host-based authentication rules in the postgresql section of the CR.","title":"Database configuration"},{"location":"operator_capability_levels/#configuration-of-postgres-roles-users-and-groups","text":"CloudNativePG supports management of PostgreSQL roles, users, and groups through declarative configuration using the .spec.managed.roles stanza.","title":"Configuration of Postgres roles, users, and groups"},{"location":"operator_capability_levels/#pod-security-standards","text":"For InfoSec requirements, the operator doesn't require privileged mode for any container. It enforces a read-only root filesystem to guarantee containers immutability for both the operator and the operand pods. It also explicitly sets the required security contexts.","title":"Pod security standards"},{"location":"operator_capability_levels/#affinity","text":"The cluster's affinity section enables fine-tuning of how pods and related resources, such as persistent volumes, are scheduled across the nodes of a Kubernetes cluster. In particular, the operator supports: Pod affinity and anti-affinity Node selector Taints and tolerations","title":"Affinity"},{"location":"operator_capability_levels/#topology-spread-constraints","text":"The cluster's topologySpreadConstraints section enables additional control of scheduling pods across topologies, enhancing what affinity and anti-affinity can offer.","title":"Topology spread constraints"},{"location":"operator_capability_levels/#command-line-interface","text":"CloudNativePG doesn't have its own command-line interface. It relies on the best command-line interface for Kubernetes, kubectl, by providing a plugin called cnpg . This plugin enhances and simplifies your PostgreSQL cluster management experience.","title":"Command-line interface"},{"location":"operator_capability_levels/#current-status-of-the-cluster","text":"The operator continuously updates the status section of the CR with the observed status of the cluster. The entire PostgreSQL cluster status is continuously monitored by the instance manager running in each pod. The instance manager is responsible for applying the required changes to the controlled PostgreSQL instance to converge to the required status of the cluster. (For example, if the cluster status reports that pod -1 is the primary, pod -1 needs to promote itself while the other pods need to follow pod -1 .) The same status is used by the cnpg plugin for kubectl to provide details.","title":"Current status of the cluster"},{"location":"operator_capability_levels/#operators-certification-authority","text":"The operator creates a certification authority for itself. It creates and signs with the operator certification authority a leaf certificate for the webhook server to use. This certificate ensures safe communication between the Kubernetes API server and the operator.","title":"Operator's certification authority"},{"location":"operator_capability_levels/#clusters-certification-authority","text":"The operator creates a certification authority for every PostgreSQL cluster. This certification authority is used to issue and renew TLS certificates for clients' authentication, including streaming replication standby servers (instead of passwords). Support for a custom certification authority for client certificates is available through secrets, which also includes integration with cert-manager. Certificates can be issued with the cnpg plugin for kubectl.","title":"Cluster's certification authority"},{"location":"operator_capability_levels/#tls-connections","text":"The operator transparently and natively supports TLS/SSL connections to encrypt client/server communications for increased security using the cluster's certification authority. Support for custom server certificates is available through secrets, which also includes integration with cert-manager.","title":"TLS connections"},{"location":"operator_capability_levels/#certificate-authentication-for-streaming-replication","text":"To authorize streaming replication connections from the standby servers, the operator relies on TLS client certificate authentication. This method is used instead of relying on a password (and therefore a secret).","title":"Certificate authentication for streaming replication"},{"location":"operator_capability_levels/#continuous-configuration-management","text":"The operator enables you to apply changes to the Cluster resource YAML section of the PostgreSQL configuration. Depending on the configuration option, it also makes sure that all instances are properly reloaded or restarted. Note Changes with ALTER SYSTEM aren't detected, meaning that the cluster state isn't enforced.","title":"Continuous configuration management"},{"location":"operator_capability_levels/#import-of-existing-postgresql-databases","text":"The operator provides a declarative way to import existing Postgres databases in a new CloudNativePG cluster in Kubernetes, using offline migrations. The same feature also covers offline major upgrades of PostgreSQL databases. Offline means that applications must stop their write operations at the source until the database is imported. The feature extends the initdb bootstrap method to create a new PostgreSQL cluster using a logical snapshot of the data available in another PostgreSQL database. This data can be accessed by way of the network through a superuser connection. Import is from any supported version of Postgres. It relies on pg_dump and pg_restore being executed from the new cluster primary for all databases that are part of the operation and, if requested, for roles.","title":"Import of existing PostgreSQL databases"},{"location":"operator_capability_levels/#postgis-clusters","text":"CloudNativePG supports the installation of clusters with the PostGIS open source extension for geographical databases. This extension is one of the most popular extensions for PostgreSQL.","title":"PostGIS clusters"},{"location":"operator_capability_levels/#basic-ldap-authentication-for-postgresql","text":"The operator allows you to configure LDAP authentication for your PostgreSQL clients, using either the simple bind or search+bind mode, as described in the LDAP authentication section of the PostgreSQL documentation .","title":"Basic LDAP authentication for PostgreSQL"},{"location":"operator_capability_levels/#multiple-installation-methods","text":"The operator can be installed through a Kubernetes manifest by way of kubectl apply , to be used in a traditional Kubernetes installation in public and private cloud environments. CloudNativePG also supports installation by way of a Helm chart or OLM bundle from OperatorHub.io.","title":"Multiple installation methods"},{"location":"operator_capability_levels/#convention-over-configuration","text":"The operator supports the convention-over-configuration paradigm, deciding standard default values while allowing you to override them and customize them. You can specify a deployment of a PostgreSQL cluster using the Cluster CRD in a couple of lines of YAML code.","title":"Convention over configuration"},{"location":"operator_capability_levels/#level-2-seamless-upgrades","text":"Capability level 2 is about enabling updates of the operator and the actual workload, in this case PostgreSQL servers. This includes PostgreSQL minor release updates (security and bug fixes normally) as well as major online upgrades.","title":"Level 2: Seamless upgrades"},{"location":"operator_capability_levels/#operator-upgrade","text":"Upgrading the operator is seamless and can be done as a new deployment. After upgrading the controller, a rolling update of all deployed PostgreSQL clusters is initiated. You can choose to update all clusters simultaneously or distribute their upgrades over time. Thanks to the instance manager's injection, upgrading the operator does not require changes to the operand, allowing the operator to manage older versions of it. Additionally, CloudNativePG supports in-place updates of the instance manager following an operator upgrade. In-place updates do not require a rolling update or a subsequent switchover of the cluster.","title":"Operator Upgrade"},{"location":"operator_capability_levels/#upgrade-of-the-managed-workload","text":"The operand can be upgraded using a declarative configuration approach as part of changing the CR and, in particular, the imageName parameter. This is normally initiated by security updates or Postgres minor version updates. In the presence of standby servers, the operator performs rolling updates starting from the replicas. It does this by dropping the existing pod and creating a new one with the new requested operand image that reuses the underlying storage. Depending on the value of the primaryUpdateStrategy , the operator proceeds with a switchover before updating the former primary ( unsupervised ). Or, it waits for the user to manually issue the switchover procedure ( supervised ) by way of the cnpg plugin for kubectl. The setting to use depends on the business requirements, as the operation might generate some downtime for the applications. This downtime can range from a few seconds to minutes, based on the actual database workload.","title":"Upgrade of the managed workload"},{"location":"operator_capability_levels/#offline-in-place-major-upgrades-of-postgresql","text":"CloudNativePG supports declarative offline in-place major upgrades when a new operand container image with a higher PostgreSQL major version is applied to a cluster. The upgrade can be triggered by updating the image tag via the .spec.imageName option or by using an image catalog to manage version changes. During the upgrade, all cluster pods are shut down to ensure data consistency. A new job is then created to validate the upgrade conditions, execute pg_upgrade , and create new directories for PGDATA , WAL files, and tablespaces if needed. Once the upgrade is complete, replicas are re-created. Failed upgrades can be rolled back.","title":"Offline In-Place Major Upgrades of PostgreSQL"},{"location":"operator_capability_levels/#display-cluster-availability-status-during-upgrade","text":"At any time, convey the cluster's high availability status, for example, Setting up primary , Creating a new replica , Cluster in healthy state , Switchover in progress , Failing over , Upgrading cluster , and Upgrading Postgres major version .","title":"Display cluster availability status during upgrade"},{"location":"operator_capability_levels/#level-3-full-lifecycle","text":"Capability level 3 requires the operator to manage aspects of business continuity and scalability. Disaster recovery is a business continuity component that requires that both backup and recovery of a database work correctly. While as a starting point, the goal is to achieve RPO < 5 minutes, the long-term goal is to implement RPO=0 backup solutions. High availability is the other important component of business continuity. Through PostgreSQL native physical replication and hot standby replicas, it allows the operator to perform failover and switchover operations. This area includes enhancements in: Control of PostgreSQL physical replication, such as synchronous replication, (cascading) replication clusters, and so on Connection pooling, to improve performance and control through a connection pooling layer with pgBouncer","title":"Level 3: Full lifecycle"},{"location":"operator_capability_levels/#postgresql-wal-archive","text":"The operator supports PostgreSQL continuous archiving of WAL files to an object store (AWS S3 and S3-compatible, Azure Blob Storage, Google Cloud Storage, and gateways like MinIO). WAL archiving is defined at the cluster level, declaratively, through the backup parameter in the cluster definition. This is done by specifying an S3 protocol destination URL (for example, to point to a specific folder in an AWS S3 bucket) and, optionally, a generic endpoint URL. WAL archiving, a prerequisite for continuous backup, doesn't require any further user action. The operator transparently sets the archive_command to rely on barman-cloud-wal-archive to ship WAL files to the defined endpoint. You can decide the compression algorithm, as well as the number of parallel jobs to concurrently upload WAL files in the archive. In addition, Instance Manager checks the correctness of the archive destination by performing the barman-cloud-check-wal-archive command before beginning to ship the first set of WAL files.","title":"PostgreSQL WAL archive"},{"location":"operator_capability_levels/#postgresql-backups","text":"The operator was designed to provide application-level backups using PostgreSQL\u2019s native continuous hot backup technology based on physical base backups and continuous WAL archiving. Base backups can be saved on: Kubernetes volume snapshots Object stores (AWS S3 and S3-compatible, Azure Blob Storage, Google Cloud Storage, and gateways like MinIO) Base backups are defined at the cluster level, declaratively, through the backup parameter in the cluster definition. You can define base backups in two ways: On-demand, through the Backup custom resource definition Scheduled, through the ScheduledBackup custom resource definition, using a cron-like syntax Volume snapshots rely directly on the Kubernetes API, which delegates this capability to the underlying storage classes and CSI drivers. Volume snapshot backups are suitable for very large database (VLDB) contexts. Object store backups rely on barman-cloud-backup for the job (distributed as part of the application container image) to relay backups in the same endpoint, alongside WAL files. Both barman-cloud-wal-restore and barman-cloud-backup are distributed in the application container image under GNU GPL 3 terms. Object store backups and volume snapshot backups are taken while PostgreSQL is up and running (hot backups). Volume snapshots also support taking consistent database snapshots with cold backups.","title":"PostgreSQL backups"},{"location":"operator_capability_levels/#backups-from-a-standby","text":"The operator supports offloading base backups onto a standby without impacting the RPO of the database. This allows resources to be preserved on the primary, in particular I/O, for standard database operations.","title":"Backups from a standby"},{"location":"operator_capability_levels/#full-restore-from-a-backup","text":"The operator enables you to bootstrap a new cluster (with its settings) starting from an existing and accessible backup, either on a volume snapshot or in an object store. Once the bootstrap process is completed, the operator initiates the instance in recovery mode. It replays all available WAL files from the specified archive, exiting recovery and starting as a primary. Subsequently, the operator clones the requested number of standby instances from the primary. CloudNativePG supports parallel WAL fetching from the archive.","title":"Full restore from a backup"},{"location":"operator_capability_levels/#point-in-time-recovery-pitr-from-a-backup","text":"The operator enables you to create a new PostgreSQL cluster by recovering an existing backup to a specific point in time, defined with a timestamp, a label, or a transaction ID. This capability is built on top of the full restore one and supports all the options available in PostgreSQL for PITR .","title":"Point-in-time recovery (PITR) from a backup"},{"location":"operator_capability_levels/#zero-data-loss-clusters-through-synchronous-replication","text":"Achieve zero data loss (RPO=0) in your local high-availability CloudNativePG cluster with support for both quorum-based and priority-based synchronous replication. The operator offers a flexible way to define the number of expected synchronous standby replicas available at any time, and allows customization of the synchronous_standby_names option as needed.","title":"Zero-Data-Loss Clusters Through Synchronous Replication"},{"location":"operator_capability_levels/#replica-clusters","text":"Establish a robust cross-Kubernetes cluster topology for PostgreSQL clusters, harnessing the power of native streaming and cascading replication. With the replica option, you can configure an autonomous cluster to consistently replicate data from another PostgreSQL source of the same major version. This source can be located anywhere, provided you have access to a WAL archive for fetching WAL files or a direct streaming connection via TLS between the two endpoints. Notably, the source PostgreSQL instance can exist outside the Kubernetes environment, whether in a physical or virtual setting. Replica clusters can be instantiated through various methods, including volume snapshots, a recovery object store (using the Barman Cloud backup format), or streaming using pg_basebackup . Both WAL file shipping and WAL streaming are supported. The deployment of replica clusters significantly elevates the business continuity posture of PostgreSQL databases within Kubernetes, extending across multiple data centers and facilitating hybrid and multi-cloud setups. (While anticipating Kubernetes federation native capabilities, manual switchover across data centers remains necessary.) Additionally, the flexibility extends to creating delayed replica clusters intentionally lagging behind the primary cluster. This intentional lag aims to minimize the Recovery Time Objective ( RTO ) in the event of unintended errors, such as incorrect DELETE or UPDATE SQL operations.","title":"Replica clusters"},{"location":"operator_capability_levels/#distributed-database-topologies","text":"Leverage replica clusters to define distributed database topologies for PostgreSQL that span across various Kubernetes clusters, facilitating hybrid and multi-cloud deployments. With CloudNativePG, you gain powerful capabilities, including: Declarative Primary Control : Easily specify which PostgreSQL cluster acts as the primary. Seamless Primary Switchover : Effortlessly demote the current primary and promote another PostgreSQL cluster, typically located in a different region, without needing to re-clone the former primary. This setup can efficiently operate across two or more regions, can rely entirely on object stores for replication, and guarantees a maximum RPO (Recovery Point Objective) of 5 minutes. This advanced feature is uniquely provided by CloudNativePG, ensuring robust data integrity and continuity across diverse environments.","title":"Distributed Database Topologies"},{"location":"operator_capability_levels/#tablespace-support","text":"CloudNativePG seamlessly integrates robust support for PostgreSQL tablespaces by facilitating the declarative definition of individual persistent volumes. This innovative feature empowers you to efficiently distribute I/O operations across a diverse array of storage devices. Through the transparent orchestration of tablespaces, CloudNativePG enhances the performance and scalability of PostgreSQL databases, ensuring a streamlined and optimized experience for managing large scale data storage in cloud-native environments. Support for temporary tablespaces is also included.","title":"Tablespace support"},{"location":"operator_capability_levels/#startup-liveness-and-readiness-probes","text":"CloudNativePG configures startup, liveness, and readiness probes for PostgreSQL containers, which are managed by the Kubernetes kubelet. These probes interact with the /healthz and /readyz endpoints exposed by the instance manager's web server to monitor the Pod's health and readiness. The startup and liveness probes use the pg_isready utility. A Pod is considered healthy if pg_isready returns an exit code of 0 (indicating the server is accepting connections) or 1 (indicating the server is rejecting connections, such as during startup). The readiness probe executes a simple SQL query ( ; ) to verify that the PostgreSQL server is ready to accept client connections. All probes are configured with default settings but can be fully customized to meet specific needs, allowing for fine-tuning to align with your environment and workloads.","title":"Startup, Liveness, and Readiness Probes"},{"location":"operator_capability_levels/#rolling-deployments","text":"The operator supports rolling deployments to minimize the downtime. If a PostgreSQL cluster is exposed publicly, the service load-balances the read-only traffic only to available pods during the initialization or the update.","title":"Rolling deployments"},{"location":"operator_capability_levels/#scale-up-and-down-of-replicas","text":"The operator allows you to scale up and down the number of instances in a PostgreSQL cluster. New replicas are started up from the primary server and participate in the cluster's HA infrastructure. The CRD declares a \"scale\" subresource that allows you to use the kubectl scale command.","title":"Scale up and down of replicas"},{"location":"operator_capability_levels/#maintenance-window-and-poddisruptionbudget-for-kubernetes-nodes","text":"The operator creates a PodDisruptionBudget resource to limit the number of concurrent disruptions to one primary instance. This configuration prevents the maintenance operation from deleting all the pods in a cluster, allowing the specified number of instances to be created. The PodDisruptionBudget is applied during the node-draining operation, preventing any disruption of the cluster service. While this strategy is correct for Kubernetes clusters where storage is shared among all the worker nodes, it might not be the best solution for clusters using local storage or for clusters installed in a private cloud. The operator allows you to specify a maintenance window and configure the reaction to any underlying node eviction. The ReusePVC option in the maintenance window section enables to specify the strategy to use. Allocate new storage in a different PVC for the evicted instance, or wait for the underlying node to be available again.","title":"Maintenance window and PodDisruptionBudget for Kubernetes nodes"},{"location":"operator_capability_levels/#fencing","text":"Fencing is the process of protecting the data in one, more, or even all instances of a PostgreSQL cluster when they appear to be malfunctioning. When an instance is fenced, the PostgreSQL server process is guaranteed to be shut down, while the pod is kept running. This ensures that, until the fence is lifted, data on the pod isn't modified by PostgreSQL and that you can investigate file system for debugging and troubleshooting purposes.","title":"Fencing"},{"location":"operator_capability_levels/#hibernation-declarative","text":"CloudNativePG supports hibernation of a running PostgreSQL cluster in a declarative manner, through the cnpg.io/hibernation annotation. Hibernation enables saving CPU power by removing the database pods while keeping the database PVCs. This feature simulates scaling to 0 instances.","title":"Hibernation (declarative)"},{"location":"operator_capability_levels/#hibernation-imperative","text":"CloudNativePG supports hibernation of a running PostgreSQL cluster by way of the cnpg plugin. Hibernation shuts down all Postgres instances in the high-availability cluster and keeps a static copy of the PVC group of the primary. The copy contains PGDATA and WALs. The plugin enables you to exit the hibernation phase by resuming the primary and then recreating all the replicas, if they exist.","title":"Hibernation (imperative)"},{"location":"operator_capability_levels/#reuse-of-persistent-volumes-storage-in-pods","text":"When the operator needs to create a pod that was deleted by the user or was evicted by a Kubernetes maintenance operation, it reuses the PersistentVolumeClaim , if available. This ability avoids the need to clone the data from the primary again.","title":"Reuse of persistent volumes storage in pods"},{"location":"operator_capability_levels/#cpu-and-memory-requests-and-limits","text":"The operator allows administrators to control and manage resource usage by the cluster's pods in the resources section of the manifest. In particular, you can set requests and limits values for both CPU and RAM.","title":"CPU and memory requests and limits"},{"location":"operator_capability_levels/#connection-pooling-with-pgbouncer","text":"CloudNativePG provides native support for connection pooling with PgBouncer , one of the most popular open source connection poolers for PostgreSQL. From an architectural point of view, the native implementation of a PgBouncer connection pooler introduces a new layer to access the database. This optimizes the query flow toward the instances and makes the use of the underlying PostgreSQL resources more efficient. Instead of connecting directly to a PostgreSQL service, applications can now connect to the PgBouncer service and start reusing any existing connection.","title":"Connection pooling with PgBouncer"},{"location":"operator_capability_levels/#logical-replication","text":"CloudNativePG supports PostgreSQL's logical replication in a declarative manner using Publication and Subscription custom resource definitions. Logical replication is particularly useful together with the import facility for online data migrations (even from public DBaaS solutions) and major PostgreSQL upgrades.","title":"Logical Replication"},{"location":"operator_capability_levels/#level-4-deep-insights","text":"Capability level 4 is about observability : monitoring, alerting, trending, and log processing. This might involve the use of external tools, such as Prometheus, Grafana, and Fluent Bit, as well as extensions in the PostgreSQL engine for the output of error logs directly in JSON format. CloudNativePG was designed to provide everything needed to easily integrate with industry-standard and community-accepted tools for flexible monitoring and logging.","title":"Level 4: Deep insights"},{"location":"operator_capability_levels/#prometheus-exporter-with-configurable-queries","text":"The instance manager provides a pluggable framework. By way of its own web server listening on the metrics port (9187), it exposes an endpoint to export metrics for the Prometheus monitoring and alerting tool. The operator supports custom monitoring queries defined as ConfigMap or Secret objects using a syntax that's compatible with postgres_exporter for Prometheus . CloudNativePG provides a set of basic monitoring queries for PostgreSQL that can be integrated and adapted to your context.","title":"Prometheus exporter with configurable queries"},{"location":"operator_capability_levels/#grafana-dashboard","text":"CloudNativePG comes with a Grafana dashboard that you can use as a base to monitor all critical aspects of a PostgreSQL cluster, and customize.","title":"Grafana dashboard"},{"location":"operator_capability_levels/#standard-output-logging-of-postgresql-error-messages-in-json-format","text":"Every log message is delivered to standard output in JSON format. The first level is the definition of the timestamp, the log level, and the type of log entry, such as postgres for the canonical PostgreSQL error message channel. As a result, every pod managed by CloudNativePG can be easily and directly integrated with any downstream log processing stack that supports JSON as source data type.","title":"Standard output logging of PostgreSQL error messages in JSON format"},{"location":"operator_capability_levels/#real-time-query-monitoring","text":"CloudNativePG transparently and natively supports: The essential pg_stat_statements extension , which enables tracking of planning and execution statistics of all SQL statements executed by a PostgreSQL server The auto_explain extension , which provides a means for logging execution plans of slow statements automatically, without having to manually run EXPLAIN (helpful for tracking down un-optimized queries) The pg_failover_slots extension , which makes logical replication slots usable across a physical failover, ensuring resilience in change data capture (CDC) contexts based on PostgreSQL's native logical replication","title":"Real-time query monitoring"},{"location":"operator_capability_levels/#audit","text":"CloudNativePG allows database and security administrators, auditors, and operators to track and analyze database activities using PGAudit for PostgreSQL. Such activities flow directly in the JSON log and can be properly routed to the correct downstream target using common log brokers like Fluentd.","title":"Audit"},{"location":"operator_capability_levels/#kubernetes-events","text":"Record major events as expected by the Kubernetes API, such as creating resources, removing nodes, and upgrading. Events can be displayed by using the kubectl describe and kubectl get events commands.","title":"Kubernetes events"},{"location":"operator_capability_levels/#level-5-auto-pilot","text":"Capability level 5 is focused on automated scaling, healing, and tuning through the discovery of anomalies and insights that emerged from the observability layer.","title":"Level 5: Auto pilot"},{"location":"operator_capability_levels/#automated-failover-for-self-healing","text":"In case of detected failure on the primary, the operator changes the status of the cluster by setting the most aligned replica as the new target primary. As a consequence, the instance manager in each alive pod initiates the required procedures to align itself with the requested status of the cluster. It does this by either becoming the new primary or by following it. In case the former primary comes back up, the same mechanism avoids a split-brain by preventing applications from reaching it, running pg_rewind on the server and restarting it as a standby.","title":"Automated failover for self-healing"},{"location":"operator_capability_levels/#automated-recreation-of-a-standby","text":"If the pod hosting a standby is removed, the operator initiates the procedure to re-create a standby server.","title":"Automated recreation of a standby"},{"location":"operator_conf/","text":"Operator configuration The operator for CloudNativePG is installed from a standard deployment manifest and follows the convention over configuration paradigm. While this is fine in most cases, there are some scenarios where you want to change the default behavior, such as: defining annotations and labels to be inherited by all resources created by the operator and that are set in the cluster resource defining a different default image for PostgreSQL or an additional pull secret By default, the operator is installed in the cnpg-system namespace as a Kubernetes Deployment called cnpg-controller-manager . Note In the examples below we assume the default name and namespace for the operator deployment. The behavior of the operator can be customized through a ConfigMap / Secret that is located in the same namespace of the operator deployment and with cnpg-controller-manager-config as the name. Important Any change to the config's ConfigMap / Secret will not be automatically detected by the operator, - and as such, it needs to be reloaded (see below). Moreover, changes only apply to the resources created after the configuration is reloaded. Important The operator first processes the ConfigMap values and then the Secret\u2019s, in this order. As a result, if a parameter is defined in both places, the one in the Secret will be used. Available options The operator looks for the following environment variables to be defined in the ConfigMap / Secret : Name Description CERTIFICATE_DURATION Determines the lifetime of the generated certificates in days. Default is 90. CLUSTERS_ROLLOUT_DELAY The duration (in seconds) to wait between the roll-outs of different clusters during an operator upgrade. This setting controls the timing of upgrades across clusters, spreading them out to reduce system impact. The default value is 0 which means no delay between PostgreSQL cluster upgrades. CREATE_ANY_SERVICE When set to true , will create -any service for the cluster. Default is false ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES When set to true , enables in-place updates of the instance manager after an update of the operator, avoiding rolling updates of the cluster (default false ) EXPIRING_CHECK_THRESHOLD Determines the threshold, in days, for identifying a certificate as expiring. Default is 7. INCLUDE_PLUGINS A comma-separated list of plugins to be always included in the Cluster's reconciliation. INHERITED_ANNOTATIONS List of annotation names that, when defined in a Cluster metadata, will be inherited by all the generated resources, including pods INHERITED_LABELS List of label names that, when defined in a Cluster metadata, will be inherited by all the generated resources, including pods INSTANCES_ROLLOUT_DELAY The duration (in seconds) to wait between roll-outs of individual PostgreSQL instances within the same cluster during an operator upgrade. The default value is 0 , meaning no delay between upgrades of instances in the same PostgreSQL cluster. KUBERNETES_CLUSTER_DOMAIN Defines the domain suffix for service FQDNs within the Kubernetes cluster. If left unset, it defaults to \"cluster.local\". MONITORING_QUERIES_CONFIGMAP The name of a ConfigMap in the operator's namespace with a set of default queries (to be specified under the key queries ) to be applied to all created Clusters MONITORING_QUERIES_SECRET The name of a Secret in the operator's namespace with a set of default queries (to be specified under the key queries ) to be applied to all created Clusters OPERATOR_IMAGE_NAME The name of the operator image used to bootstrap Pods. Defaults to the image specified during installation. POSTGRES_IMAGE_NAME The name of the PostgreSQL image used by default for new clusters. Defaults to the version specified in the operator. PULL_SECRET_NAME Name of an additional pull secret to be defined in the operator's namespace and to be used to download images STANDBY_TCP_USER_TIMEOUT Defines the TCP_USER_TIMEOUT socket option for replication connections from standby instances to the primary. Default is 0 (system's default). DRAIN_TAINTS Specifies the taint keys that should be interpreted as indicators of node drain. By default, it includes the taints commonly applied by kubectl , Cluster Autoscaler , and Karpenter : node.kubernetes.io/unschedulable , ToBeDeletedByClusterAutoscaler , karpenter.sh/disrupted , karpenter.sh/disruption . Values in INHERITED_ANNOTATIONS and INHERITED_LABELS support path-like wildcards. For example, the value example.com/* will match both the value example.com/one and example.com/two . When you specify an additional pull secret name using the PULL_SECRET_NAME parameter, the operator will use that secret to create a pull secret for every created PostgreSQL cluster. That secret will be named <cluster-name>-pull . The namespace where the operator looks for the PULL_SECRET_NAME secret is where you installed the operator. If the operator is not able to find that secret, it will ignore the configuration parameter. Defining an operator config map The example below customizes the behavior of the operator, by defining the label/annotation names to be inherited by the resources created by any Cluster object that is deployed at a later time, by enabling in-place updates for the instance manager , and by spreading upgrades. apiVersion: v1 kind: ConfigMap metadata: name: cnpg-controller-manager-config namespace: cnpg-system data: CLUSTERS_ROLLOUT_DELAY: '60' ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true' INHERITED_ANNOTATIONS: categories INHERITED_LABELS: environment, workload, app INSTANCES_ROLLOUT_DELAY: '10' Defining an operator secret The example below customizes the behavior of the operator, by defining the label/annotation names to be inherited by the resources created by any Cluster object that is deployed at a later time, and by enabling in-place updates for the instance manager , and by spreading upgrades. apiVersion: v1 kind: Secret metadata: name: cnpg-controller-manager-config namespace: cnpg-system type: Opaque stringData: CLUSTERS_ROLLOUT_DELAY: '60' ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true' INHERITED_ANNOTATIONS: categories INHERITED_LABELS: environment, workload, app INSTANCES_ROLLOUT_DELAY: '10' Restarting the operator to reload configs For the change to be effective, you need to recreate the operator pods to reload the config map. If you have installed the operator on Kubernetes using the manifest you can do that by issuing: kubectl rollout restart deployment \\ -n cnpg-system \\ cnpg-controller-manager In general, given a specific namespace, you can delete the operator pods with the following command: kubectl delete pods -n [NAMESPACE_NAME_HERE] \\ -l app.kubernetes.io/name=cloudnative-pg Warning Customizations will be applied only to Cluster resources created after the reload of the operator deployment. Following the above example, if the Cluster definition contains a categories annotation and any of the environment , workload , or app labels, these will be inherited by all the resources generated by the deployment. pprof HTTP Server The operator can expose a PPROF HTTP server with the following endpoints on localhost:6060 : /debug/pprof/ . Responds to a request for \"/debug/pprof/\" with an HTML page listing the available profiles /debug/pprof/cmdline . Responds with the running program's command line, with arguments separated by NULL bytes. /debug/pprof/profile . Responds with the pprof-formatted cpu profile. Profiling lasts for duration specified in seconds GET parameter, or for 30 seconds if not specified. /debug/pprof/symbol . Looks up the program counters listed in the request, responding with a table mapping program counters to function names. /debug/pprof/trace . Responds with the execution trace in binary form. Tracing lasts for duration specified in seconds GET parameter, or for 1 second if not specified. To enable the operator you need to edit the operator deployment add the flag --pprof-server=true . You can do this by executing these commands: kubectl edit deployment -n cnpg-system cnpg-controller-manager Then on the edit page scroll down the container args and add --pprof-server=true , as in this example: containers: - args: - controller - --enable-leader-election - --config-map-name=cnpg-controller-manager-config - --secret-name=cnpg-controller-manager-config - --log-level=info - --pprof-server=true # relevant line command: - /manager Save the changes; the deployment now will execute a roll-out, and the new pod will have the PPROF server enabled. Once the pod is running you can exec inside the container by doing: kubectl exec -ti -n cnpg-system <pod name> -- bash Once inside execute: curl localhost:6060/debug/pprof/","title":"Operator configuration"},{"location":"operator_conf/#operator-configuration","text":"The operator for CloudNativePG is installed from a standard deployment manifest and follows the convention over configuration paradigm. While this is fine in most cases, there are some scenarios where you want to change the default behavior, such as: defining annotations and labels to be inherited by all resources created by the operator and that are set in the cluster resource defining a different default image for PostgreSQL or an additional pull secret By default, the operator is installed in the cnpg-system namespace as a Kubernetes Deployment called cnpg-controller-manager . Note In the examples below we assume the default name and namespace for the operator deployment. The behavior of the operator can be customized through a ConfigMap / Secret that is located in the same namespace of the operator deployment and with cnpg-controller-manager-config as the name. Important Any change to the config's ConfigMap / Secret will not be automatically detected by the operator, - and as such, it needs to be reloaded (see below). Moreover, changes only apply to the resources created after the configuration is reloaded. Important The operator first processes the ConfigMap values and then the Secret\u2019s, in this order. As a result, if a parameter is defined in both places, the one in the Secret will be used.","title":"Operator configuration"},{"location":"operator_conf/#available-options","text":"The operator looks for the following environment variables to be defined in the ConfigMap / Secret : Name Description CERTIFICATE_DURATION Determines the lifetime of the generated certificates in days. Default is 90. CLUSTERS_ROLLOUT_DELAY The duration (in seconds) to wait between the roll-outs of different clusters during an operator upgrade. This setting controls the timing of upgrades across clusters, spreading them out to reduce system impact. The default value is 0 which means no delay between PostgreSQL cluster upgrades. CREATE_ANY_SERVICE When set to true , will create -any service for the cluster. Default is false ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES When set to true , enables in-place updates of the instance manager after an update of the operator, avoiding rolling updates of the cluster (default false ) EXPIRING_CHECK_THRESHOLD Determines the threshold, in days, for identifying a certificate as expiring. Default is 7. INCLUDE_PLUGINS A comma-separated list of plugins to be always included in the Cluster's reconciliation. INHERITED_ANNOTATIONS List of annotation names that, when defined in a Cluster metadata, will be inherited by all the generated resources, including pods INHERITED_LABELS List of label names that, when defined in a Cluster metadata, will be inherited by all the generated resources, including pods INSTANCES_ROLLOUT_DELAY The duration (in seconds) to wait between roll-outs of individual PostgreSQL instances within the same cluster during an operator upgrade. The default value is 0 , meaning no delay between upgrades of instances in the same PostgreSQL cluster. KUBERNETES_CLUSTER_DOMAIN Defines the domain suffix for service FQDNs within the Kubernetes cluster. If left unset, it defaults to \"cluster.local\". MONITORING_QUERIES_CONFIGMAP The name of a ConfigMap in the operator's namespace with a set of default queries (to be specified under the key queries ) to be applied to all created Clusters MONITORING_QUERIES_SECRET The name of a Secret in the operator's namespace with a set of default queries (to be specified under the key queries ) to be applied to all created Clusters OPERATOR_IMAGE_NAME The name of the operator image used to bootstrap Pods. Defaults to the image specified during installation. POSTGRES_IMAGE_NAME The name of the PostgreSQL image used by default for new clusters. Defaults to the version specified in the operator. PULL_SECRET_NAME Name of an additional pull secret to be defined in the operator's namespace and to be used to download images STANDBY_TCP_USER_TIMEOUT Defines the TCP_USER_TIMEOUT socket option for replication connections from standby instances to the primary. Default is 0 (system's default). DRAIN_TAINTS Specifies the taint keys that should be interpreted as indicators of node drain. By default, it includes the taints commonly applied by kubectl , Cluster Autoscaler , and Karpenter : node.kubernetes.io/unschedulable , ToBeDeletedByClusterAutoscaler , karpenter.sh/disrupted , karpenter.sh/disruption . Values in INHERITED_ANNOTATIONS and INHERITED_LABELS support path-like wildcards. For example, the value example.com/* will match both the value example.com/one and example.com/two . When you specify an additional pull secret name using the PULL_SECRET_NAME parameter, the operator will use that secret to create a pull secret for every created PostgreSQL cluster. That secret will be named <cluster-name>-pull . The namespace where the operator looks for the PULL_SECRET_NAME secret is where you installed the operator. If the operator is not able to find that secret, it will ignore the configuration parameter.","title":"Available options"},{"location":"operator_conf/#defining-an-operator-config-map","text":"The example below customizes the behavior of the operator, by defining the label/annotation names to be inherited by the resources created by any Cluster object that is deployed at a later time, by enabling in-place updates for the instance manager , and by spreading upgrades. apiVersion: v1 kind: ConfigMap metadata: name: cnpg-controller-manager-config namespace: cnpg-system data: CLUSTERS_ROLLOUT_DELAY: '60' ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true' INHERITED_ANNOTATIONS: categories INHERITED_LABELS: environment, workload, app INSTANCES_ROLLOUT_DELAY: '10'","title":"Defining an operator config map"},{"location":"operator_conf/#defining-an-operator-secret","text":"The example below customizes the behavior of the operator, by defining the label/annotation names to be inherited by the resources created by any Cluster object that is deployed at a later time, and by enabling in-place updates for the instance manager , and by spreading upgrades. apiVersion: v1 kind: Secret metadata: name: cnpg-controller-manager-config namespace: cnpg-system type: Opaque stringData: CLUSTERS_ROLLOUT_DELAY: '60' ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true' INHERITED_ANNOTATIONS: categories INHERITED_LABELS: environment, workload, app INSTANCES_ROLLOUT_DELAY: '10'","title":"Defining an operator secret"},{"location":"operator_conf/#restarting-the-operator-to-reload-configs","text":"For the change to be effective, you need to recreate the operator pods to reload the config map. If you have installed the operator on Kubernetes using the manifest you can do that by issuing: kubectl rollout restart deployment \\ -n cnpg-system \\ cnpg-controller-manager In general, given a specific namespace, you can delete the operator pods with the following command: kubectl delete pods -n [NAMESPACE_NAME_HERE] \\ -l app.kubernetes.io/name=cloudnative-pg Warning Customizations will be applied only to Cluster resources created after the reload of the operator deployment. Following the above example, if the Cluster definition contains a categories annotation and any of the environment , workload , or app labels, these will be inherited by all the resources generated by the deployment.","title":"Restarting the operator to reload configs"},{"location":"operator_conf/#pprof-http-server","text":"The operator can expose a PPROF HTTP server with the following endpoints on localhost:6060 : /debug/pprof/ . Responds to a request for \"/debug/pprof/\" with an HTML page listing the available profiles /debug/pprof/cmdline . Responds with the running program's command line, with arguments separated by NULL bytes. /debug/pprof/profile . Responds with the pprof-formatted cpu profile. Profiling lasts for duration specified in seconds GET parameter, or for 30 seconds if not specified. /debug/pprof/symbol . Looks up the program counters listed in the request, responding with a table mapping program counters to function names. /debug/pprof/trace . Responds with the execution trace in binary form. Tracing lasts for duration specified in seconds GET parameter, or for 1 second if not specified. To enable the operator you need to edit the operator deployment add the flag --pprof-server=true . You can do this by executing these commands: kubectl edit deployment -n cnpg-system cnpg-controller-manager Then on the edit page scroll down the container args and add --pprof-server=true , as in this example: containers: - args: - controller - --enable-leader-election - --config-map-name=cnpg-controller-manager-config - --secret-name=cnpg-controller-manager-config - --log-level=info - --pprof-server=true # relevant line command: - /manager Save the changes; the deployment now will execute a roll-out, and the new pod will have the PPROF server enabled. Once the pod is running you can exec inside the container by doing: kubectl exec -ti -n cnpg-system <pod name> -- bash Once inside execute: curl localhost:6060/debug/pprof/","title":"pprof HTTP Server"},{"location":"postgis/","text":"PostGIS PostGIS is a very popular open source extension for PostgreSQL that introduces support for storing GIS (Geographic Information Systems) objects in the database and be queried via SQL. Important This section assumes you are familiar with PostGIS and provides some basic information about how to create a new PostgreSQL cluster with a PostGIS database in Kubernetes via CloudNativePG. The CloudNativePG Community maintains container images that are built on top of the official PostGIS images hosted on DockerHub . For more information please visit: The postgis-containers project in GitHub The postgis-containers Container Registry in GitHub Basic concepts about a PostGIS cluster Conceptually, a PostGIS-based PostgreSQL cluster (or simply a PostGIS cluster) is like any other PostgreSQL cluster. The only differences are: the presence in the system of PostGIS and related libraries the presence in the database(s) of the PostGIS extension Since CloudNativePG is based on Immutable Application Containers, the only way to provision PostGIS is to add it to the container image that you use for the operand. The \"Container Image Requirements\" section provides detailed instructions on how this is achieved. More simply, you can just use the PostGIS container images from the Community, as in the examples below. The second step is to install the extension in the PostgreSQL database. You can do this in two ways: install it in the application database, which is the main and supposedly only database you host in the cluster according to the microservice architecture, or install it in the template1 database so as to make it available for all the databases you end up creating in the cluster, in case you adopt the monolith architecture where the instance is shared by multiple databases Info For more information on the microservice vs monolith architecture in the database please refer to the \"How many databases should be hosted in a single PostgreSQL instance?\" FAQ or the \"Database import\" section . Create a new PostgreSQL cluster with PostGIS Let's suppose you want to create a new PostgreSQL 17 cluster with PostGIS 3.2. The first step is to ensure you use the right PostGIS container image for the operand, and properly set the .spec.imageName option in the Cluster resource. The postgis-example.yaml manifest below provides some guidance on how the creation of a PostGIS cluster can be done. Warning Please consider that, although convention over configuration applies in CloudNativePG, you should spend time configuring and tuning your system for production. Also the imageName in the example below deliberately points to the latest available image for PostgreSQL 17 - you should use a specific image name or, preferably, the SHA256 digest for true immutability. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgis-example spec: instances: 1 imageName: ghcr.io/cloudnative-pg/postgis:17 storage: size: 1Gi postgresql: parameters: log_statement: ddl --- apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: postgis-example-app spec: name: app owner: app cluster: name: postgis-example extensions: - name: postgis - name: postgis_topology - name: fuzzystrmatch - name: postgis_tiger_geocoder The example leverages the Database resource's declarative extension management to add the specified extensions to the app database. Info For more details, see the \"Managing Extensions in a Database\" section . You can easily verify the available version of PostGIS that is in the container, by connecting to the app database (you might obtain different values from the ones in this document): $ kubectl cnpg psql postgis-example -- app psql (17.5 (Debian 17.5-1.pgdg110+2)) Type \"help\" for help. app=# SELECT * FROM pg_available_extensions WHERE name ~ '^postgis' ORDER BY 1; name | default_version | installed_version | comment --------------------------+-----------------+-------------------+------------------------------------------------------------ postgis | 3.5.2 | 3.5.2 | PostGIS geometry and geography spatial types and functions postgis-3 | 3.5.2 | | PostGIS geometry and geography spatial types and functions postgis_raster | 3.5.2 | | PostGIS raster types and functions postgis_raster-3 | 3.5.2 | | PostGIS raster types and functions postgis_sfcgal | 3.5.2 | | PostGIS SFCGAL functions postgis_sfcgal-3 | 3.5.2 | | PostGIS SFCGAL functions postgis_tiger_geocoder | 3.5.2 | 3.5.2 | PostGIS tiger geocoder and reverse geocoder postgis_tiger_geocoder-3 | 3.5.2 | | PostGIS tiger geocoder and reverse geocoder postgis_topology | 3.5.2 | 3.5.2 | PostGIS topology spatial types and functions postgis_topology-3 | 3.5.2 | | PostGIS topology spatial types and functions (10 rows) The next step is to verify that the extensions listed in the Database resource have been correctly installed in the app database. app=# \\dx List of installed extensions Name | Version | Schema | Description ------------------------+---------+------------+------------------------------------------------------------ fuzzystrmatch | 1.2 | public | determine similarities and distance between strings plpgsql | 1.0 | pg_catalog | PL/pgSQL procedural language postgis | 3.5.2 | public | PostGIS geometry and geography spatial types and functions postgis_tiger_geocoder | 3.5.2 | tiger | PostGIS tiger geocoder and reverse geocoder postgis_topology | 3.5.2 | topology | PostGIS topology spatial types and functions (5 rows) Finally: app=# SELECT postgis_full_version(); postgis_full_version ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- POSTGIS=\"3.5.2 dea6d0a\" [EXTENSION] PGSQL=\"170\" GEOS=\"3.9.0-CAPI-1.16.2\" PROJ=\"7.2.1 NETWORK_ENABLED=OFF URL_ENDPOINT=https://cdn.proj.org USER_WRITABLE_DIRECTORY=/tmp/proj DATABASE_PATH=/usr/share/proj/proj.db\" (compiled against PROJ 7.2.1) LIBXML=\"2.9.10\" LIBJSON=\"0.15\" LIBPROTOBUF=\"1.3.3\" WAGYU=\"0.5.0 (Internal)\" TOPOLOGY (1 row)","title":"PostGIS"},{"location":"postgis/#postgis","text":"PostGIS is a very popular open source extension for PostgreSQL that introduces support for storing GIS (Geographic Information Systems) objects in the database and be queried via SQL. Important This section assumes you are familiar with PostGIS and provides some basic information about how to create a new PostgreSQL cluster with a PostGIS database in Kubernetes via CloudNativePG. The CloudNativePG Community maintains container images that are built on top of the official PostGIS images hosted on DockerHub . For more information please visit: The postgis-containers project in GitHub The postgis-containers Container Registry in GitHub","title":"PostGIS"},{"location":"postgis/#basic-concepts-about-a-postgis-cluster","text":"Conceptually, a PostGIS-based PostgreSQL cluster (or simply a PostGIS cluster) is like any other PostgreSQL cluster. The only differences are: the presence in the system of PostGIS and related libraries the presence in the database(s) of the PostGIS extension Since CloudNativePG is based on Immutable Application Containers, the only way to provision PostGIS is to add it to the container image that you use for the operand. The \"Container Image Requirements\" section provides detailed instructions on how this is achieved. More simply, you can just use the PostGIS container images from the Community, as in the examples below. The second step is to install the extension in the PostgreSQL database. You can do this in two ways: install it in the application database, which is the main and supposedly only database you host in the cluster according to the microservice architecture, or install it in the template1 database so as to make it available for all the databases you end up creating in the cluster, in case you adopt the monolith architecture where the instance is shared by multiple databases Info For more information on the microservice vs monolith architecture in the database please refer to the \"How many databases should be hosted in a single PostgreSQL instance?\" FAQ or the \"Database import\" section .","title":"Basic concepts about a PostGIS cluster"},{"location":"postgis/#create-a-new-postgresql-cluster-with-postgis","text":"Let's suppose you want to create a new PostgreSQL 17 cluster with PostGIS 3.2. The first step is to ensure you use the right PostGIS container image for the operand, and properly set the .spec.imageName option in the Cluster resource. The postgis-example.yaml manifest below provides some guidance on how the creation of a PostGIS cluster can be done. Warning Please consider that, although convention over configuration applies in CloudNativePG, you should spend time configuring and tuning your system for production. Also the imageName in the example below deliberately points to the latest available image for PostgreSQL 17 - you should use a specific image name or, preferably, the SHA256 digest for true immutability. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgis-example spec: instances: 1 imageName: ghcr.io/cloudnative-pg/postgis:17 storage: size: 1Gi postgresql: parameters: log_statement: ddl --- apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: postgis-example-app spec: name: app owner: app cluster: name: postgis-example extensions: - name: postgis - name: postgis_topology - name: fuzzystrmatch - name: postgis_tiger_geocoder The example leverages the Database resource's declarative extension management to add the specified extensions to the app database. Info For more details, see the \"Managing Extensions in a Database\" section . You can easily verify the available version of PostGIS that is in the container, by connecting to the app database (you might obtain different values from the ones in this document): $ kubectl cnpg psql postgis-example -- app psql (17.5 (Debian 17.5-1.pgdg110+2)) Type \"help\" for help. app=# SELECT * FROM pg_available_extensions WHERE name ~ '^postgis' ORDER BY 1; name | default_version | installed_version | comment --------------------------+-----------------+-------------------+------------------------------------------------------------ postgis | 3.5.2 | 3.5.2 | PostGIS geometry and geography spatial types and functions postgis-3 | 3.5.2 | | PostGIS geometry and geography spatial types and functions postgis_raster | 3.5.2 | | PostGIS raster types and functions postgis_raster-3 | 3.5.2 | | PostGIS raster types and functions postgis_sfcgal | 3.5.2 | | PostGIS SFCGAL functions postgis_sfcgal-3 | 3.5.2 | | PostGIS SFCGAL functions postgis_tiger_geocoder | 3.5.2 | 3.5.2 | PostGIS tiger geocoder and reverse geocoder postgis_tiger_geocoder-3 | 3.5.2 | | PostGIS tiger geocoder and reverse geocoder postgis_topology | 3.5.2 | 3.5.2 | PostGIS topology spatial types and functions postgis_topology-3 | 3.5.2 | | PostGIS topology spatial types and functions (10 rows) The next step is to verify that the extensions listed in the Database resource have been correctly installed in the app database. app=# \\dx List of installed extensions Name | Version | Schema | Description ------------------------+---------+------------+------------------------------------------------------------ fuzzystrmatch | 1.2 | public | determine similarities and distance between strings plpgsql | 1.0 | pg_catalog | PL/pgSQL procedural language postgis | 3.5.2 | public | PostGIS geometry and geography spatial types and functions postgis_tiger_geocoder | 3.5.2 | tiger | PostGIS tiger geocoder and reverse geocoder postgis_topology | 3.5.2 | topology | PostGIS topology spatial types and functions (5 rows) Finally: app=# SELECT postgis_full_version(); postgis_full_version ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- POSTGIS=\"3.5.2 dea6d0a\" [EXTENSION] PGSQL=\"170\" GEOS=\"3.9.0-CAPI-1.16.2\" PROJ=\"7.2.1 NETWORK_ENABLED=OFF URL_ENDPOINT=https://cdn.proj.org USER_WRITABLE_DIRECTORY=/tmp/proj DATABASE_PATH=/usr/share/proj/proj.db\" (compiled against PROJ 7.2.1) LIBXML=\"2.9.10\" LIBJSON=\"0.15\" LIBPROTOBUF=\"1.3.3\" WAGYU=\"0.5.0 (Internal)\" TOPOLOGY (1 row)","title":"Create a new PostgreSQL cluster with PostGIS"},{"location":"postgres_upgrades/","text":"PostgreSQL Upgrades PostgreSQL upgrades fall into two categories: Minor version upgrades (e.g., from 17.0 to 17.1) Major version upgrades (e.g., from 16.x to 17.0) Minor Version Upgrades PostgreSQL version numbers follow a major.minor format. For instance, in version 17.1: 17 is the major version 1 is the minor version Minor releases are fully compatible with earlier and later minor releases of the same major version. They include bug fixes and security updates but do not introduce changes to the internal storage format. For example, PostgreSQL 17.1 is compatible with 17.0 and 17.5. Upgrading a Minor Version in CloudNativePG To upgrade to a newer minor version, simply update the PostgreSQL container image reference in your cluster definition, either directly or via image catalogs. CloudNativePG will trigger a rolling update of the cluster , replacing each instance one by one, starting with the replicas. Once all replicas have been updated, it will perform either a switchover or a restart of the primary to complete the process. Major Version Upgrades Major PostgreSQL releases introduce changes to the internal data storage format, requiring a more structured upgrade process. CloudNativePG supports three methods for performing major upgrades: Logical dump/restore \u2013 Blue/green deployment, offline. Native logical replication \u2013 Blue/green deployment, online. Physical with pg_upgrade \u2013 In-place upgrade, offline (covered in the \"Offline In-Place Major Upgrades\" section below). Each method has trade-offs in terms of downtime, complexity, and data volume handling. The best approach depends on your upgrade strategy and operational constraints. Important We strongly recommend testing all methods in a controlled environment before proceeding with a production upgrade. Offline In-Place Major Upgrades CloudNativePG performs an offline in-place major upgrade when a new operand container image with a higher PostgreSQL major version is declaratively requested for a cluster. You can trigger the upgrade in one of two ways: By updating the major version in the image tag via the .spec.imageName option. Using an image catalog to manage version changes. For details on supported image tags, see \"Image Tag Requirements\" . Warning CloudNativePG is not responsible for PostgreSQL extensions. You must ensure that extensions in the source PostgreSQL image are compatible with those in the target image and that upgrade paths are supported. Thoroughly test the upgrade process in advance to avoid unexpected issues. The extensions management feature can help manage extension upgrades declaratively. Upgrade Process Shuts down all cluster pods to ensure data consistency. Records the previous PostgreSQL version and image in the cluster\u2019s status under .status.pgDataImageInfo . Initiates a new upgrade job, which: Verifies that the binaries in the image and the data files align with a major upgrade request. Creates new directories for PGDATA , and where applicable, WAL files and tablespaces. Performs the upgrade using pg_upgrade with the --link option. Upon successful completion, replaces the original directories with their upgraded counterparts. Warning During the upgrade process, the entire PostgreSQL cluster, including replicas, is unavailable to applications. Ensure that your system can tolerate this downtime before proceeding. Warning Performing an in-place upgrade is an exceptional operation that carries inherent risks. It is strongly recommended to take a full backup of the cluster before initiating the upgrade process. Info For detailed guidance on pg_upgrade , refer to the official PostgreSQL documentation . Post-Upgrade Actions If the upgrade is successful, CloudNativePG: Destroys the PVCs of replicas (if available). Scales up replicas as required. Warning Re-cloning replicas can be time-consuming, especially for very large databases. Plan accordingly to accommodate potential delays. After completing the upgrade, it is strongly recommended to take a full backup. Existing backup data (namely base backups and WAL files) is only available for the previous minor PostgreSQL release. Warning pg_upgrade doesn't transfer optimizer statistics. After the upgrade, you may want to run ANALYZE on your databases to update them. If the upgrade fails, you must manually revert the major version change in the cluster's configuration and delete the upgrade job, as CloudNativePG cannot automatically decide the rollback. Important This process protects your existing database from data loss , as no data is modified during the upgrade. If the upgrade fails, a rollback is usually possible, without having to perform a full recovery from a backup. Ensure you monitor the process closely and take corrective action if needed. Example: Performing a Major Upgrade Consider the following PostgreSQL cluster running version 16: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: imageName: ghcr.io/cloudnative-pg/postgresql:16-minimal-bookworm instances: 3 storage: size: 1Gi You can check the current PostgreSQL version using the following command: kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()' This will return output similar to: PostgreSQL 16.x ... To upgrade the cluster to version 17, update the imageName field by changing the major version tag from 16 to 17 : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: imageName: ghcr.io/cloudnative-pg/postgresql:17-minimal-bookworm instances: 3 storage: size: 1Gi Upgrade Process Cluster shutdown \u2013 All cluster pods are terminated to ensure a consistent upgrade. Upgrade job execution \u2013 A new job is created with the name of the primary pod, appended with the suffix -major-upgrade . This job runs pg_upgrade on the primary\u2019s persistent volume group. Post-upgrade steps: The PVC groups of the replicas ( cluster-example-2 and cluster-example-3 ) are removed. The primary pod is restarted. Two new replicas ( cluster-example-4 and cluster-example-5 ) are re-cloned from the upgraded primary. Once the upgrade is complete, you can verify the new major version by running the same command: kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()' This should now return output similar to: PostgreSQL 17.x ... You can now update the statistics by running ANALYZE on the app database: kubectl cnpg psql cluster-example -- app -c 'ANALYZE'","title":"PostgreSQL Upgrades"},{"location":"postgres_upgrades/#postgresql-upgrades","text":"PostgreSQL upgrades fall into two categories: Minor version upgrades (e.g., from 17.0 to 17.1) Major version upgrades (e.g., from 16.x to 17.0)","title":"PostgreSQL Upgrades"},{"location":"postgres_upgrades/#minor-version-upgrades","text":"PostgreSQL version numbers follow a major.minor format. For instance, in version 17.1: 17 is the major version 1 is the minor version Minor releases are fully compatible with earlier and later minor releases of the same major version. They include bug fixes and security updates but do not introduce changes to the internal storage format. For example, PostgreSQL 17.1 is compatible with 17.0 and 17.5.","title":"Minor Version Upgrades"},{"location":"postgres_upgrades/#upgrading-a-minor-version-in-cloudnativepg","text":"To upgrade to a newer minor version, simply update the PostgreSQL container image reference in your cluster definition, either directly or via image catalogs. CloudNativePG will trigger a rolling update of the cluster , replacing each instance one by one, starting with the replicas. Once all replicas have been updated, it will perform either a switchover or a restart of the primary to complete the process.","title":"Upgrading a Minor Version in CloudNativePG"},{"location":"postgres_upgrades/#major-version-upgrades","text":"Major PostgreSQL releases introduce changes to the internal data storage format, requiring a more structured upgrade process. CloudNativePG supports three methods for performing major upgrades: Logical dump/restore \u2013 Blue/green deployment, offline. Native logical replication \u2013 Blue/green deployment, online. Physical with pg_upgrade \u2013 In-place upgrade, offline (covered in the \"Offline In-Place Major Upgrades\" section below). Each method has trade-offs in terms of downtime, complexity, and data volume handling. The best approach depends on your upgrade strategy and operational constraints. Important We strongly recommend testing all methods in a controlled environment before proceeding with a production upgrade.","title":"Major Version Upgrades"},{"location":"postgres_upgrades/#offline-in-place-major-upgrades","text":"CloudNativePG performs an offline in-place major upgrade when a new operand container image with a higher PostgreSQL major version is declaratively requested for a cluster. You can trigger the upgrade in one of two ways: By updating the major version in the image tag via the .spec.imageName option. Using an image catalog to manage version changes. For details on supported image tags, see \"Image Tag Requirements\" . Warning CloudNativePG is not responsible for PostgreSQL extensions. You must ensure that extensions in the source PostgreSQL image are compatible with those in the target image and that upgrade paths are supported. Thoroughly test the upgrade process in advance to avoid unexpected issues. The extensions management feature can help manage extension upgrades declaratively.","title":"Offline In-Place Major Upgrades"},{"location":"postgres_upgrades/#upgrade-process","text":"Shuts down all cluster pods to ensure data consistency. Records the previous PostgreSQL version and image in the cluster\u2019s status under .status.pgDataImageInfo . Initiates a new upgrade job, which: Verifies that the binaries in the image and the data files align with a major upgrade request. Creates new directories for PGDATA , and where applicable, WAL files and tablespaces. Performs the upgrade using pg_upgrade with the --link option. Upon successful completion, replaces the original directories with their upgraded counterparts. Warning During the upgrade process, the entire PostgreSQL cluster, including replicas, is unavailable to applications. Ensure that your system can tolerate this downtime before proceeding. Warning Performing an in-place upgrade is an exceptional operation that carries inherent risks. It is strongly recommended to take a full backup of the cluster before initiating the upgrade process. Info For detailed guidance on pg_upgrade , refer to the official PostgreSQL documentation .","title":"Upgrade Process"},{"location":"postgres_upgrades/#post-upgrade-actions","text":"If the upgrade is successful, CloudNativePG: Destroys the PVCs of replicas (if available). Scales up replicas as required. Warning Re-cloning replicas can be time-consuming, especially for very large databases. Plan accordingly to accommodate potential delays. After completing the upgrade, it is strongly recommended to take a full backup. Existing backup data (namely base backups and WAL files) is only available for the previous minor PostgreSQL release. Warning pg_upgrade doesn't transfer optimizer statistics. After the upgrade, you may want to run ANALYZE on your databases to update them. If the upgrade fails, you must manually revert the major version change in the cluster's configuration and delete the upgrade job, as CloudNativePG cannot automatically decide the rollback. Important This process protects your existing database from data loss , as no data is modified during the upgrade. If the upgrade fails, a rollback is usually possible, without having to perform a full recovery from a backup. Ensure you monitor the process closely and take corrective action if needed.","title":"Post-Upgrade Actions"},{"location":"postgres_upgrades/#example-performing-a-major-upgrade","text":"Consider the following PostgreSQL cluster running version 16: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: imageName: ghcr.io/cloudnative-pg/postgresql:16-minimal-bookworm instances: 3 storage: size: 1Gi You can check the current PostgreSQL version using the following command: kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()' This will return output similar to: PostgreSQL 16.x ... To upgrade the cluster to version 17, update the imageName field by changing the major version tag from 16 to 17 : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: imageName: ghcr.io/cloudnative-pg/postgresql:17-minimal-bookworm instances: 3 storage: size: 1Gi","title":"Example: Performing a Major Upgrade"},{"location":"postgres_upgrades/#upgrade-process_1","text":"Cluster shutdown \u2013 All cluster pods are terminated to ensure a consistent upgrade. Upgrade job execution \u2013 A new job is created with the name of the primary pod, appended with the suffix -major-upgrade . This job runs pg_upgrade on the primary\u2019s persistent volume group. Post-upgrade steps: The PVC groups of the replicas ( cluster-example-2 and cluster-example-3 ) are removed. The primary pod is restarted. Two new replicas ( cluster-example-4 and cluster-example-5 ) are re-cloned from the upgraded primary. Once the upgrade is complete, you can verify the new major version by running the same command: kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()' This should now return output similar to: PostgreSQL 17.x ... You can now update the statistics by running ANALYZE on the app database: kubectl cnpg psql cluster-example -- app -c 'ANALYZE'","title":"Upgrade Process"},{"location":"postgresql_conf/","text":"PostgreSQL Configuration Users that are familiar with PostgreSQL are aware of the existence of the following three files to configure an instance: postgresql.conf : main run-time configuration file of PostgreSQL pg_hba.conf : clients authentication file pg_ident.conf : map external users to internal users Due to the concepts of declarative configuration and immutability of the PostgreSQL containers, users are not allowed to directly touch those files. Configuration is possible through the postgresql section of the Cluster resource definition by defining custom postgresql.conf , pg_hba.conf , and pg_ident.conf settings via the parameters , the pg_hba , and the pg_ident keys. These settings are the same across all instances. Warning Please don't use the ALTER SYSTEM query to change the configuration of the PostgreSQL instances in an imperative way. Changing some of the options that are normally controlled by the operator might indeed lead to an unpredictable/unrecoverable state of the cluster. Moreover, ALTER SYSTEM changes are not replicated across the cluster. See \"Enabling ALTER SYSTEM\" below for details. A reference for custom settings usage is included in the samples, see cluster-example-custom.yaml . The postgresql section The PostgreSQL instance in the pod starts with a default postgresql.conf file, to which these settings are automatically added: listen_addresses = '*' include custom.conf The custom.conf file will contain the user-defined settings in the postgresql section, as in the following example: # ... postgresql: parameters: shared_buffers: \"1GB\" # ... PostgreSQL GUCs: Grand Unified Configuration Refer to the PostgreSQL documentation for more information on the available parameters , also known as GUC (Grand Unified Configuration). Please note that CloudNativePG accepts only strings for the PostgreSQL parameters. The content of custom.conf is automatically generated and maintained by the operator by applying the following sections in this order: Global default parameters Default parameters that depend on the PostgreSQL major version User-provided parameters Fixed parameters The global default parameters are: archive_timeout = '5min' dynamic_shared_memory_type = 'posix' full_page_writes = 'on' logging_collector = 'on' log_destination = 'csvlog' log_directory = '/controller/log' log_filename = 'postgres' log_rotation_age = '0' log_rotation_size = '0' log_truncate_on_rotation = 'false' max_parallel_workers = '32' max_replication_slots = '32' max_worker_processes = '32' shared_memory_type = 'mmap' shared_preload_libraries = '' ssl_max_protocol_version = 'TLSv1.3' ssl_min_protocol_version = 'TLSv1.3' wal_keep_size = '512MB' wal_level = 'logical' wal_log_hints = 'on' wal_sender_timeout = '5s' wal_receiver_timeout = '5s' Warning It is your duty to plan for WAL segments retention in your PostgreSQL cluster and properly configure either wal_keep_size or wal_keep_segments , depending on the server version, based on the expected and observed workloads. Alternatively, if the only streaming replication clients are the replica instances running in the High Availability cluster, you can take advantage of the replication slots feature, which adds support for replication slots at the cluster level. You can enable the feature with the replicationSlots.highAvailability option (for more information, please refer to the \"Replication\" section .) Without replication slots nor continuous backups in place, configuring wal_keep_size or wal_keep_segments is the only way to protect standbys from falling out of sync. If a standby did fall out of sync it would produce error messages like: \"could not receive data from WAL stream: ERROR: requested WAL segment ************************ has already been removed\" . This will require you to dedicate a part of your PGDATA , or the volume dedicated to storing WAL files, to keep older WAL segments for streaming replication purposes. The following parameters are fixed and exclusively controlled by the operator: archive_command = '/controller/manager wal-archive %p' hot_standby = 'true' listen_addresses = '*' port = '5432' restart_after_crash = 'false' ssl = 'on' ssl_ca_file = '/controller/certificates/client-ca.crt' ssl_cert_file = '/controller/certificates/server.crt' ssl_key_file = '/controller/certificates/server.key' unix_socket_directories = '/controller/run' Since the fixed parameters are added at the end, they can't be overridden by the user via the YAML configuration. Those parameters are required for correct WAL archiving and replication. Replication Settings The primary_conninfo , restore_command , and recovery_target_timeline parameters are automatically managed by the operator based on the instance's role within the cluster. These parameters are effectively applied only when the instance is operating as a replica. primary_conninfo = 'host=<PRIMARY> user=postgres dbname=postgres' recovery_target_timeline = 'latest' The STANDBY_TCP_USER_TIMEOUT operator configuration setting , if specified, sets the tcp_user_timeout parameter on all standby instances managed by the operator. The tcp_user_timeout parameter determines how long transmitted data can remain unacknowledged before the TCP connection is forcibly closed. Adjusting this value allows you to fine-tune the responsiveness of standby instances to network disruptions. For more details, refer to the PostgreSQL documentation . Log control settings The operator requires PostgreSQL to output its log in CSV format, and the instance manager automatically parses it and outputs it in JSON format. For this reason, all log settings in PostgreSQL are fixed and cannot be changed. For further information, please refer to the \"Logging\" section . Shared Preload Libraries The shared_preload_libraries option in PostgreSQL exists to specify one or more shared libraries to be pre-loaded at server start, in the form of a comma-separated list. Typically, it is used in PostgreSQL to load those extensions that need to be available to most database sessions in the whole system (e.g. pg_stat_statements ). In CloudNativePG the shared_preload_libraries option is empty by default. Although you can override the content of shared_preload_libraries , we recommend that only expert Postgres users take advantage of this option. Important In case a specified library is not found, the server fails to start, preventing CloudNativePG from any self-healing attempt and requiring manual intervention. Please make sure you always test both the extensions and the settings of shared_preload_libraries if you plan to directly manage its content. CloudNativePG is able to automatically manage the content of the shared_preload_libraries option for some of the most used PostgreSQL extensions (see the \"Managed extensions\" section below for details). Specifically, as soon as the operator notices that a configuration parameter requires one of the managed libraries, it will automatically add the needed library. The operator will also remove the library as soon as no actual parameter requires it. Important Please always keep in mind that removing libraries from shared_preload_libraries requires a restart of all instances in the cluster in order to be effective. You can provide additional shared_preload_libraries via .spec.postgresql.shared_preload_libraries as a list of strings: the operator will merge them with the ones that it automatically manages. Managed extensions As anticipated in the previous section, CloudNativePG automatically manages the content in shared_preload_libraries for some well-known and supported extensions. The current list includes: auto_explain pg_stat_statements pgaudit pg_failover_slots Some of these libraries also require additional objects in a database before using them, normally views and/or functions managed via the CREATE EXTENSION command to be run in a database (the DROP EXTENSION command typically removes those objects). For such libraries, CloudNativePG automatically handles the creation and removal of the extension in all databases that accept a connection in the cluster, identified by the following query: SELECT datname FROM pg_database WHERE datallowconn Note The above query also includes template databases like template1 . Important With the introduction of declarative extensions in the Database CRD, you can now manage extensions directly. As a result, the managed extensions feature may undergo significant changes in future versions of CloudNativePG, and some functionalities might be deprecated. Enabling auto_explain The auto_explain extension provides a means for logging execution plans of slow statements automatically, without having to manually run EXPLAIN (helpful for tracking down un-optimized queries). You can enable auto_explain by adding to the configuration a parameter that starts with auto_explain. as in the following example excerpt (which automatically logs execution plans of queries that take longer than 10 seconds to complete): # ... postgresql: parameters: auto_explain.log_min_duration: \"10s\" # ... Note Enabling auto_explain can lead to performance issues. Please refer to the auto explain documentation Enabling pg_stat_statements The pg_stat_statements extension is one of the most important capabilities available in PostgreSQL for real-time monitoring of queries. You can enable pg_stat_statements by adding to the configuration a parameter that starts with pg_stat_statements. as in the following example excerpt: # ... postgresql: parameters: pg_stat_statements.max: \"10000\" pg_stat_statements.track: all # ... As explained previously, the operator will automatically add pg_stat_statements to shared_preload_libraries and run CREATE EXTENSION IF NOT EXISTS pg_stat_statements on each database, enabling you to run queries against the pg_stat_statements view. Enabling pgaudit The pgaudit extension provides detailed session and/or object audit logging via the standard PostgreSQL logging facility. CloudNativePG has transparent and native support for PGAudit on PostgreSQL clusters. For further information, please refer to the \"PGAudit\" logs section. You can enable pgaudit by adding to the configuration a parameter that starts with pgaudit. as in the following example excerpt: # postgresql: parameters: pgaudit.log: \"all, -misc\" pgaudit.log_catalog: \"off\" pgaudit.log_parameter: \"on\" pgaudit.log_relation: \"on\" # Enabling pg_failover_slots The pg_failover_slots extension by EDB ensures that logical replication slots can survive a failover scenario. Failovers are normally implemented using physical streaming replication, like in the case of CloudNativePG. You can enable pg_failover_slots by adding to the configuration a parameter that starts with pg_failover_slots. : as explained above, the operator will transparently manage the pg_failover_slots entry in the shared_preload_libraries option depending on this. Please refer to the pg_failover_slots documentation for details on this extension. Additionally, for each database that you intend to you use with pg_failover_slots you need to add an entry in the pg_hba section that enables each replica to connect to the primary. For example, suppose that you want to use the app database with pg_failover_slots , you need to add this entry in the pg_hba section: postgresql: pg_hba: - hostssl app streaming_replica all cert The pg_hba section pg_hba is a list of PostgreSQL Host Based Authentication rules used to create the pg_hba.conf used by the pods. Important See the PostgreSQL documentation for more information on pg_hba.conf . Since the first matching rule is used for authentication, the pg_hba.conf file generated by the operator can be seen as composed of four sections: Fixed rules User-defined rules Optional LDAP section Default rules Fixed rules: local all all peer hostssl postgres streaming_replica all cert hostssl replication streaming_replica all cert hostssl all cnpg_pooler_pgbouncer all cert Default rules: host all all all <default-authentication-method> From PostgreSQL 14 the default value of the password_encryption database parameter is set to scram-sha-256 . Because of that, the default authentication method is scram-sha-256 from this PostgreSQL version. PostgreSQL 13 and older will use md5 as the default authentication method. The resulting pg_hba.conf will look like this: local all all peer hostssl postgres streaming_replica all cert hostssl replication streaming_replica all cert <user defined rules> <user defined LDAP> host all all all scram-sha-256 # (or md5 for PostgreSQL version <= 13) Inside the cluster manifest, pg_hba lines are added as list items in .spec.postgresql.pg_hba , as in the following excerpt: postgresql: pg_hba: - hostssl app app 10.244.0.0/16 md5 In the above example we are enabling access for the app user to the app database using MD5 password authentication (you can use scram-sha-256 if you prefer) via a secure channel ( hostssl ). LDAP Configuration Under the postgres section of the cluster spec there is an optional ldap section available to define an LDAP configuration to be converted into a rule added into the pg_hba.conf file. This will support two modes: simple bind mode which requires specifying a server , prefix and suffix in the LDAP section and the search+bind mode which requires specifying server , baseDN , binDN , and a bindPassword which is a secret containing the ldap password. Additionally, in search+bind mode you have the option to specify a searchFilter or searchAttribute . If no searchAttribute is specified the default one of uid will be used. Additionally, both modes allow the specification of a scheme for ldapscheme and a port . Neither scheme nor port are required, however. This section filled out for search+bind could look as follows: postgresql: ldap: server: 'openldap.default.svc.cluster.local' bindSearchAuth: baseDN: 'ou=org,dc=example,dc=com' bindDN: 'cn=admin,dc=example,dc=com' bindPassword: name: 'ldapBindPassword' key: 'data' searchAttribute: 'uid' The pg_ident section pg_ident is a list of PostgreSQL User Name Maps that CloudNativePG uses to generate and maintain the ident map file (known as pg_ident.conf ) inside the data directory. Important See the PostgreSQL documentation for more information on pg_ident.conf . The pg_ident.conf file written by the operator is made up of the following two sections: Fixed rules User-defined rules Currently the only fixed rule, automatically generated by the operator, is: local <postgres system user> postgres The instance manager detects the user running the PostgreSQL instance and automatically adds a rule to map it to the postgres user in the database. If the postgres user is not properly configured inside the container, the instance manager will allow any local user to connect and then log a warning message like the following: Unable to identify the current user. Falling back to insecure mapping. The resulting pg_ident.conf will look like this: local <postgres system user> postgres <user defined lines> Inside the cluster manifest, pg_ident lines are added as list items in .spec.postgresql.pg_ident . For example: postgresql: pg_ident: - \"mymap /^(.*)@mydomain\\\\.com$ \\\\1\" Changing configuration You can apply configuration changes by editing the postgresql section of the Cluster resource. After the change, the cluster instances will immediately reload the configuration to apply the changes. If the change involves a parameter requiring a restart, the operator will perform a rolling upgrade. Enabling ALTER SYSTEM CloudNativePG strongly advocates employing the Cluster manifest as the exclusive method for altering the configuration of a PostgreSQL cluster. This approach guarantees coherence across the entire high-availability cluster and aligns with best practices for Infrastructure-as-Code. In CloudNativePG the default configuration disables the use of ALTER SYSTEM on new Postgres clusters. This decision is rooted in the recognition of potential risks associated with this command. To enable the use of ALTER SYSTEM , you can explicitly set .spec.postgresql.enableAlterSystem to true . Warning Proceed with caution when utilizing ALTER SYSTEM . This command operates directly on the connected instance and does not undergo replication. CloudNativePG assumes responsibility for certain fixed parameters and complete control over others, emphasizing the need for careful consideration. Starting from PostgreSQL 17, the .spec.postgresql.enableAlterSystem setting directly controls the allow_alter_system GUC in PostgreSQL \u2014 a feature directly contributed by CloudNativePG to PostgreSQL. Prior to PostgreSQL 17, when .spec.postgresql.enableAlterSystem is set to false , the postgresql.auto.conf file is made read-only. Consequently, any attempt to execute the ALTER SYSTEM command will result in an error. The error message might look like this: ERROR: could not open file \"postgresql.auto.conf\": Permission denied Dynamic Shared Memory settings PostgreSQL supports a few implementations for dynamic shared memory management through the dynamic_shared_memory_type configuration option. In CloudNativePG we recommend to limit ourselves to any of the following two values: posix : which relies on POSIX shared memory allocated using shm_open (default setting) sysv : which is based on System V shared memory allocated via shmget In PostgreSQL, this setting is particularly important for memory allocation in parallel queries. For details, please refer to this thread from the pgsql-general mailing list . POSIX shared memory The default setting of posix should be enough in most cases, considering that the operator automatically mounts a memory-bound EmptyDir volume called shm under /dev/shm . You can verify the size of such volume inside the running Postgres container with: mount | grep shm You should get something similar to the following output: shm on /dev/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=******) If you would like to set a maximum size for the shm volume, you can do so by setting the .spec.ephemeralVolumesSizeLimit.shm field in the Cluster resource. For example: spec: ephemeralVolumesSizeLimit: shm: 1Gi System V shared memory In case your Kubernetes cluster has a high enough value for the SHMMAX and SHMALL parameters, you can also set: dynamic_shared_memory_type: \"sysv\" You can check the SHMMAX / SHMALL from inside a PostgreSQL container, by running: ipcs -lm For example: ------ Shared Memory Limits -------- max number of segments = 4096 max seg size (kbytes) = 18014398509465599 max total shared memory (kbytes) = 18014398509481980 min seg size (bytes) = 1 As you can see, the very high number of max total shared memory recommends setting dynamic_shared_memory_type to sysv . An alternate method is to run: cat /proc/sys/kernel/shmall cat /proc/sys/kernel/shmmax Fixed parameters Some PostgreSQL configuration parameters should be managed exclusively by the operator. The operator prevents the user from setting them using a webhook. Users are not allowed to set the following configuration parameters in the postgresql section: allow_alter_system allow_system_table_mods archive_cleanup_command archive_command archive_mode bonjour bonjour_name cluster_name config_file data_directory data_sync_retry event_source external_pid_file hba_file hot_standby ident_file jit_provider listen_addresses log_destination log_directory log_file_mode log_filename log_rotation_age log_rotation_size log_truncate_on_rotation logging_collector port primary_conninfo primary_slot_name promote_trigger_file recovery_end_command recovery_min_apply_delay recovery_target recovery_target_action recovery_target_inclusive recovery_target_lsn recovery_target_name recovery_target_time recovery_target_timeline recovery_target_xid restart_after_crash restore_command shared_preload_libraries ssl ssl_ca_file ssl_cert_file ssl_crl_file ssl_dh_params_file ssl_ecdh_curve ssl_key_file ssl_passphrase_command ssl_passphrase_command_supports_reload ssl_prefer_server_ciphers stats_temp_directory synchronous_standby_names syslog_facility syslog_ident syslog_sequence_numbers syslog_split_messages unix_socket_directories unix_socket_group unix_socket_permissions","title":"PostgreSQL Configuration"},{"location":"postgresql_conf/#postgresql-configuration","text":"Users that are familiar with PostgreSQL are aware of the existence of the following three files to configure an instance: postgresql.conf : main run-time configuration file of PostgreSQL pg_hba.conf : clients authentication file pg_ident.conf : map external users to internal users Due to the concepts of declarative configuration and immutability of the PostgreSQL containers, users are not allowed to directly touch those files. Configuration is possible through the postgresql section of the Cluster resource definition by defining custom postgresql.conf , pg_hba.conf , and pg_ident.conf settings via the parameters , the pg_hba , and the pg_ident keys. These settings are the same across all instances. Warning Please don't use the ALTER SYSTEM query to change the configuration of the PostgreSQL instances in an imperative way. Changing some of the options that are normally controlled by the operator might indeed lead to an unpredictable/unrecoverable state of the cluster. Moreover, ALTER SYSTEM changes are not replicated across the cluster. See \"Enabling ALTER SYSTEM\" below for details. A reference for custom settings usage is included in the samples, see cluster-example-custom.yaml .","title":"PostgreSQL Configuration"},{"location":"postgresql_conf/#the-postgresql-section","text":"The PostgreSQL instance in the pod starts with a default postgresql.conf file, to which these settings are automatically added: listen_addresses = '*' include custom.conf The custom.conf file will contain the user-defined settings in the postgresql section, as in the following example: # ... postgresql: parameters: shared_buffers: \"1GB\" # ... PostgreSQL GUCs: Grand Unified Configuration Refer to the PostgreSQL documentation for more information on the available parameters , also known as GUC (Grand Unified Configuration). Please note that CloudNativePG accepts only strings for the PostgreSQL parameters. The content of custom.conf is automatically generated and maintained by the operator by applying the following sections in this order: Global default parameters Default parameters that depend on the PostgreSQL major version User-provided parameters Fixed parameters The global default parameters are: archive_timeout = '5min' dynamic_shared_memory_type = 'posix' full_page_writes = 'on' logging_collector = 'on' log_destination = 'csvlog' log_directory = '/controller/log' log_filename = 'postgres' log_rotation_age = '0' log_rotation_size = '0' log_truncate_on_rotation = 'false' max_parallel_workers = '32' max_replication_slots = '32' max_worker_processes = '32' shared_memory_type = 'mmap' shared_preload_libraries = '' ssl_max_protocol_version = 'TLSv1.3' ssl_min_protocol_version = 'TLSv1.3' wal_keep_size = '512MB' wal_level = 'logical' wal_log_hints = 'on' wal_sender_timeout = '5s' wal_receiver_timeout = '5s' Warning It is your duty to plan for WAL segments retention in your PostgreSQL cluster and properly configure either wal_keep_size or wal_keep_segments , depending on the server version, based on the expected and observed workloads. Alternatively, if the only streaming replication clients are the replica instances running in the High Availability cluster, you can take advantage of the replication slots feature, which adds support for replication slots at the cluster level. You can enable the feature with the replicationSlots.highAvailability option (for more information, please refer to the \"Replication\" section .) Without replication slots nor continuous backups in place, configuring wal_keep_size or wal_keep_segments is the only way to protect standbys from falling out of sync. If a standby did fall out of sync it would produce error messages like: \"could not receive data from WAL stream: ERROR: requested WAL segment ************************ has already been removed\" . This will require you to dedicate a part of your PGDATA , or the volume dedicated to storing WAL files, to keep older WAL segments for streaming replication purposes. The following parameters are fixed and exclusively controlled by the operator: archive_command = '/controller/manager wal-archive %p' hot_standby = 'true' listen_addresses = '*' port = '5432' restart_after_crash = 'false' ssl = 'on' ssl_ca_file = '/controller/certificates/client-ca.crt' ssl_cert_file = '/controller/certificates/server.crt' ssl_key_file = '/controller/certificates/server.key' unix_socket_directories = '/controller/run' Since the fixed parameters are added at the end, they can't be overridden by the user via the YAML configuration. Those parameters are required for correct WAL archiving and replication.","title":"The postgresql section"},{"location":"postgresql_conf/#replication-settings","text":"The primary_conninfo , restore_command , and recovery_target_timeline parameters are automatically managed by the operator based on the instance's role within the cluster. These parameters are effectively applied only when the instance is operating as a replica. primary_conninfo = 'host=<PRIMARY> user=postgres dbname=postgres' recovery_target_timeline = 'latest' The STANDBY_TCP_USER_TIMEOUT operator configuration setting , if specified, sets the tcp_user_timeout parameter on all standby instances managed by the operator. The tcp_user_timeout parameter determines how long transmitted data can remain unacknowledged before the TCP connection is forcibly closed. Adjusting this value allows you to fine-tune the responsiveness of standby instances to network disruptions. For more details, refer to the PostgreSQL documentation .","title":"Replication Settings"},{"location":"postgresql_conf/#log-control-settings","text":"The operator requires PostgreSQL to output its log in CSV format, and the instance manager automatically parses it and outputs it in JSON format. For this reason, all log settings in PostgreSQL are fixed and cannot be changed. For further information, please refer to the \"Logging\" section .","title":"Log control settings"},{"location":"postgresql_conf/#shared-preload-libraries","text":"The shared_preload_libraries option in PostgreSQL exists to specify one or more shared libraries to be pre-loaded at server start, in the form of a comma-separated list. Typically, it is used in PostgreSQL to load those extensions that need to be available to most database sessions in the whole system (e.g. pg_stat_statements ). In CloudNativePG the shared_preload_libraries option is empty by default. Although you can override the content of shared_preload_libraries , we recommend that only expert Postgres users take advantage of this option. Important In case a specified library is not found, the server fails to start, preventing CloudNativePG from any self-healing attempt and requiring manual intervention. Please make sure you always test both the extensions and the settings of shared_preload_libraries if you plan to directly manage its content. CloudNativePG is able to automatically manage the content of the shared_preload_libraries option for some of the most used PostgreSQL extensions (see the \"Managed extensions\" section below for details). Specifically, as soon as the operator notices that a configuration parameter requires one of the managed libraries, it will automatically add the needed library. The operator will also remove the library as soon as no actual parameter requires it. Important Please always keep in mind that removing libraries from shared_preload_libraries requires a restart of all instances in the cluster in order to be effective. You can provide additional shared_preload_libraries via .spec.postgresql.shared_preload_libraries as a list of strings: the operator will merge them with the ones that it automatically manages.","title":"Shared Preload Libraries"},{"location":"postgresql_conf/#managed-extensions","text":"As anticipated in the previous section, CloudNativePG automatically manages the content in shared_preload_libraries for some well-known and supported extensions. The current list includes: auto_explain pg_stat_statements pgaudit pg_failover_slots Some of these libraries also require additional objects in a database before using them, normally views and/or functions managed via the CREATE EXTENSION command to be run in a database (the DROP EXTENSION command typically removes those objects). For such libraries, CloudNativePG automatically handles the creation and removal of the extension in all databases that accept a connection in the cluster, identified by the following query: SELECT datname FROM pg_database WHERE datallowconn Note The above query also includes template databases like template1 . Important With the introduction of declarative extensions in the Database CRD, you can now manage extensions directly. As a result, the managed extensions feature may undergo significant changes in future versions of CloudNativePG, and some functionalities might be deprecated.","title":"Managed extensions"},{"location":"postgresql_conf/#enabling-auto_explain","text":"The auto_explain extension provides a means for logging execution plans of slow statements automatically, without having to manually run EXPLAIN (helpful for tracking down un-optimized queries). You can enable auto_explain by adding to the configuration a parameter that starts with auto_explain. as in the following example excerpt (which automatically logs execution plans of queries that take longer than 10 seconds to complete): # ... postgresql: parameters: auto_explain.log_min_duration: \"10s\" # ... Note Enabling auto_explain can lead to performance issues. Please refer to the auto explain documentation","title":"Enabling auto_explain"},{"location":"postgresql_conf/#enabling-pg_stat_statements","text":"The pg_stat_statements extension is one of the most important capabilities available in PostgreSQL for real-time monitoring of queries. You can enable pg_stat_statements by adding to the configuration a parameter that starts with pg_stat_statements. as in the following example excerpt: # ... postgresql: parameters: pg_stat_statements.max: \"10000\" pg_stat_statements.track: all # ... As explained previously, the operator will automatically add pg_stat_statements to shared_preload_libraries and run CREATE EXTENSION IF NOT EXISTS pg_stat_statements on each database, enabling you to run queries against the pg_stat_statements view.","title":"Enabling pg_stat_statements"},{"location":"postgresql_conf/#enabling-pgaudit","text":"The pgaudit extension provides detailed session and/or object audit logging via the standard PostgreSQL logging facility. CloudNativePG has transparent and native support for PGAudit on PostgreSQL clusters. For further information, please refer to the \"PGAudit\" logs section. You can enable pgaudit by adding to the configuration a parameter that starts with pgaudit. as in the following example excerpt: # postgresql: parameters: pgaudit.log: \"all, -misc\" pgaudit.log_catalog: \"off\" pgaudit.log_parameter: \"on\" pgaudit.log_relation: \"on\" #","title":"Enabling pgaudit"},{"location":"postgresql_conf/#enabling-pg_failover_slots","text":"The pg_failover_slots extension by EDB ensures that logical replication slots can survive a failover scenario. Failovers are normally implemented using physical streaming replication, like in the case of CloudNativePG. You can enable pg_failover_slots by adding to the configuration a parameter that starts with pg_failover_slots. : as explained above, the operator will transparently manage the pg_failover_slots entry in the shared_preload_libraries option depending on this. Please refer to the pg_failover_slots documentation for details on this extension. Additionally, for each database that you intend to you use with pg_failover_slots you need to add an entry in the pg_hba section that enables each replica to connect to the primary. For example, suppose that you want to use the app database with pg_failover_slots , you need to add this entry in the pg_hba section: postgresql: pg_hba: - hostssl app streaming_replica all cert","title":"Enabling pg_failover_slots"},{"location":"postgresql_conf/#the-pg_hba-section","text":"pg_hba is a list of PostgreSQL Host Based Authentication rules used to create the pg_hba.conf used by the pods. Important See the PostgreSQL documentation for more information on pg_hba.conf . Since the first matching rule is used for authentication, the pg_hba.conf file generated by the operator can be seen as composed of four sections: Fixed rules User-defined rules Optional LDAP section Default rules Fixed rules: local all all peer hostssl postgres streaming_replica all cert hostssl replication streaming_replica all cert hostssl all cnpg_pooler_pgbouncer all cert Default rules: host all all all <default-authentication-method> From PostgreSQL 14 the default value of the password_encryption database parameter is set to scram-sha-256 . Because of that, the default authentication method is scram-sha-256 from this PostgreSQL version. PostgreSQL 13 and older will use md5 as the default authentication method. The resulting pg_hba.conf will look like this: local all all peer hostssl postgres streaming_replica all cert hostssl replication streaming_replica all cert <user defined rules> <user defined LDAP> host all all all scram-sha-256 # (or md5 for PostgreSQL version <= 13) Inside the cluster manifest, pg_hba lines are added as list items in .spec.postgresql.pg_hba , as in the following excerpt: postgresql: pg_hba: - hostssl app app 10.244.0.0/16 md5 In the above example we are enabling access for the app user to the app database using MD5 password authentication (you can use scram-sha-256 if you prefer) via a secure channel ( hostssl ).","title":"The pg_hba section"},{"location":"postgresql_conf/#ldap-configuration","text":"Under the postgres section of the cluster spec there is an optional ldap section available to define an LDAP configuration to be converted into a rule added into the pg_hba.conf file. This will support two modes: simple bind mode which requires specifying a server , prefix and suffix in the LDAP section and the search+bind mode which requires specifying server , baseDN , binDN , and a bindPassword which is a secret containing the ldap password. Additionally, in search+bind mode you have the option to specify a searchFilter or searchAttribute . If no searchAttribute is specified the default one of uid will be used. Additionally, both modes allow the specification of a scheme for ldapscheme and a port . Neither scheme nor port are required, however. This section filled out for search+bind could look as follows: postgresql: ldap: server: 'openldap.default.svc.cluster.local' bindSearchAuth: baseDN: 'ou=org,dc=example,dc=com' bindDN: 'cn=admin,dc=example,dc=com' bindPassword: name: 'ldapBindPassword' key: 'data' searchAttribute: 'uid'","title":"LDAP Configuration"},{"location":"postgresql_conf/#the-pg_ident-section","text":"pg_ident is a list of PostgreSQL User Name Maps that CloudNativePG uses to generate and maintain the ident map file (known as pg_ident.conf ) inside the data directory. Important See the PostgreSQL documentation for more information on pg_ident.conf . The pg_ident.conf file written by the operator is made up of the following two sections: Fixed rules User-defined rules Currently the only fixed rule, automatically generated by the operator, is: local <postgres system user> postgres The instance manager detects the user running the PostgreSQL instance and automatically adds a rule to map it to the postgres user in the database. If the postgres user is not properly configured inside the container, the instance manager will allow any local user to connect and then log a warning message like the following: Unable to identify the current user. Falling back to insecure mapping. The resulting pg_ident.conf will look like this: local <postgres system user> postgres <user defined lines> Inside the cluster manifest, pg_ident lines are added as list items in .spec.postgresql.pg_ident . For example: postgresql: pg_ident: - \"mymap /^(.*)@mydomain\\\\.com$ \\\\1\"","title":"The pg_ident section"},{"location":"postgresql_conf/#changing-configuration","text":"You can apply configuration changes by editing the postgresql section of the Cluster resource. After the change, the cluster instances will immediately reload the configuration to apply the changes. If the change involves a parameter requiring a restart, the operator will perform a rolling upgrade.","title":"Changing configuration"},{"location":"postgresql_conf/#enabling-alter-system","text":"CloudNativePG strongly advocates employing the Cluster manifest as the exclusive method for altering the configuration of a PostgreSQL cluster. This approach guarantees coherence across the entire high-availability cluster and aligns with best practices for Infrastructure-as-Code. In CloudNativePG the default configuration disables the use of ALTER SYSTEM on new Postgres clusters. This decision is rooted in the recognition of potential risks associated with this command. To enable the use of ALTER SYSTEM , you can explicitly set .spec.postgresql.enableAlterSystem to true . Warning Proceed with caution when utilizing ALTER SYSTEM . This command operates directly on the connected instance and does not undergo replication. CloudNativePG assumes responsibility for certain fixed parameters and complete control over others, emphasizing the need for careful consideration. Starting from PostgreSQL 17, the .spec.postgresql.enableAlterSystem setting directly controls the allow_alter_system GUC in PostgreSQL \u2014 a feature directly contributed by CloudNativePG to PostgreSQL. Prior to PostgreSQL 17, when .spec.postgresql.enableAlterSystem is set to false , the postgresql.auto.conf file is made read-only. Consequently, any attempt to execute the ALTER SYSTEM command will result in an error. The error message might look like this: ERROR: could not open file \"postgresql.auto.conf\": Permission denied","title":"Enabling ALTER SYSTEM"},{"location":"postgresql_conf/#dynamic-shared-memory-settings","text":"PostgreSQL supports a few implementations for dynamic shared memory management through the dynamic_shared_memory_type configuration option. In CloudNativePG we recommend to limit ourselves to any of the following two values: posix : which relies on POSIX shared memory allocated using shm_open (default setting) sysv : which is based on System V shared memory allocated via shmget In PostgreSQL, this setting is particularly important for memory allocation in parallel queries. For details, please refer to this thread from the pgsql-general mailing list .","title":"Dynamic Shared Memory settings"},{"location":"postgresql_conf/#posix-shared-memory","text":"The default setting of posix should be enough in most cases, considering that the operator automatically mounts a memory-bound EmptyDir volume called shm under /dev/shm . You can verify the size of such volume inside the running Postgres container with: mount | grep shm You should get something similar to the following output: shm on /dev/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=******) If you would like to set a maximum size for the shm volume, you can do so by setting the .spec.ephemeralVolumesSizeLimit.shm field in the Cluster resource. For example: spec: ephemeralVolumesSizeLimit: shm: 1Gi","title":"POSIX shared memory"},{"location":"postgresql_conf/#system-v-shared-memory","text":"In case your Kubernetes cluster has a high enough value for the SHMMAX and SHMALL parameters, you can also set: dynamic_shared_memory_type: \"sysv\" You can check the SHMMAX / SHMALL from inside a PostgreSQL container, by running: ipcs -lm For example: ------ Shared Memory Limits -------- max number of segments = 4096 max seg size (kbytes) = 18014398509465599 max total shared memory (kbytes) = 18014398509481980 min seg size (bytes) = 1 As you can see, the very high number of max total shared memory recommends setting dynamic_shared_memory_type to sysv . An alternate method is to run: cat /proc/sys/kernel/shmall cat /proc/sys/kernel/shmmax","title":"System V shared memory"},{"location":"postgresql_conf/#fixed-parameters","text":"Some PostgreSQL configuration parameters should be managed exclusively by the operator. The operator prevents the user from setting them using a webhook. Users are not allowed to set the following configuration parameters in the postgresql section: allow_alter_system allow_system_table_mods archive_cleanup_command archive_command archive_mode bonjour bonjour_name cluster_name config_file data_directory data_sync_retry event_source external_pid_file hba_file hot_standby ident_file jit_provider listen_addresses log_destination log_directory log_file_mode log_filename log_rotation_age log_rotation_size log_truncate_on_rotation logging_collector port primary_conninfo primary_slot_name promote_trigger_file recovery_end_command recovery_min_apply_delay recovery_target recovery_target_action recovery_target_inclusive recovery_target_lsn recovery_target_name recovery_target_time recovery_target_timeline recovery_target_xid restart_after_crash restore_command shared_preload_libraries ssl ssl_ca_file ssl_cert_file ssl_crl_file ssl_dh_params_file ssl_ecdh_curve ssl_key_file ssl_passphrase_command ssl_passphrase_command_supports_reload ssl_prefer_server_ciphers stats_temp_directory synchronous_standby_names syslog_facility syslog_ident syslog_sequence_numbers syslog_split_messages unix_socket_directories unix_socket_group unix_socket_permissions","title":"Fixed parameters"},{"location":"preview_version/","text":"Preview Versions CloudNativePG candidate releases are pre-release versions made available for testing before the community issues a new generally available (GA) release. These versions are feature-frozen, meaning no new features are added, and are intended for public testing prior to the final release. Important CloudNativePG release candidates are not intended for use in production systems. Purpose of Release Candidates Release candidates are provided to the community for extensive testing before the official release. While a release candidate aims to be identical to the initial release of a new minor version of CloudNativePG, additional changes may be implemented before the GA release. Community Involvement The stability of each CloudNativePG minor release significantly depends on the community's efforts to test the upcoming version with their workloads and tools. Identifying bugs and regressions through user testing is crucial in determining when we can finalize the release. Usage Advisory The CloudNativePG Community strongly advises against using preview versions of CloudNativePG in production environments or active development projects. Although CloudNativePG undergoes extensive automated and manual testing, beta releases may contain serious bugs. Features in preview versions may change in ways that are not backwards compatible and could be removed entirely. Current Preview Version The current preview version is 1.26.0-rc3 . For more information on the current preview version and how to test, please view the links below: Announcement Documentation","title":"Preview Versions"},{"location":"preview_version/#preview-versions","text":"CloudNativePG candidate releases are pre-release versions made available for testing before the community issues a new generally available (GA) release. These versions are feature-frozen, meaning no new features are added, and are intended for public testing prior to the final release. Important CloudNativePG release candidates are not intended for use in production systems.","title":"Preview Versions"},{"location":"preview_version/#purpose-of-release-candidates","text":"Release candidates are provided to the community for extensive testing before the official release. While a release candidate aims to be identical to the initial release of a new minor version of CloudNativePG, additional changes may be implemented before the GA release.","title":"Purpose of Release Candidates"},{"location":"preview_version/#community-involvement","text":"The stability of each CloudNativePG minor release significantly depends on the community's efforts to test the upcoming version with their workloads and tools. Identifying bugs and regressions through user testing is crucial in determining when we can finalize the release.","title":"Community Involvement"},{"location":"preview_version/#usage-advisory","text":"The CloudNativePG Community strongly advises against using preview versions of CloudNativePG in production environments or active development projects. Although CloudNativePG undergoes extensive automated and manual testing, beta releases may contain serious bugs. Features in preview versions may change in ways that are not backwards compatible and could be removed entirely.","title":"Usage Advisory"},{"location":"preview_version/#current-preview-version","text":"The current preview version is 1.26.0-rc3 . For more information on the current preview version and how to test, please view the links below: Announcement Documentation","title":"Current Preview Version"},{"location":"quickstart/","text":"Quickstart This section guides you through testing a PostgreSQL cluster on your local machine by deploying CloudNativePG on a local Kubernetes cluster using either Kind or Minikube . Warning The instructions contained in this section are for demonstration, testing, and practice purposes only and must not be used in production. Like any other Kubernetes application, CloudNativePG is deployed using regular manifests written in YAML. By following the instructions on this page you should be able to start a PostgreSQL cluster on your local Kubernetes installation and experiment with it. Important Make sure that you have kubectl installed on your machine in order to connect to the Kubernetes cluster. Please follow the Kubernetes documentation on how to install kubectl . Part 1: Setup the local Kubernetes playground The first part is about installing Minikube or Kind. Please spend some time reading about the systems and decide which one to proceed with. After setting up one of them, please proceed with part 2. We also provide instructions for setting up monitoring with Prometheus and Grafana for local testing/evaluation, in part 4 Minikube Minikube is a tool that makes it easy to run Kubernetes locally. Minikube runs a single-node Kubernetes cluster inside a Virtual Machine (VM) on your laptop for users looking to try out Kubernetes or develop with it day-to-day. Normally, it is used in conjunction with VirtualBox. You can find more information in the official Kubernetes documentation on how to install Minikube in your local personal environment. When you installed it, run the following command to create a minikube cluster: minikube start This will create the Kubernetes cluster, and you will be ready to use it. Verify that it works with the following command: kubectl get nodes You will see one node called minikube . Kind If you do not want to use a virtual machine hypervisor, then Kind is a tool for running local Kubernetes clusters using Docker container \"nodes\" (Kind stands for \"Kubernetes IN Docker\" indeed). Install kind on your environment following the instructions in the Quickstart , then create a Kubernetes cluster with: kind create cluster --name pg Part 2: Install CloudNativePG Now that you have a Kubernetes installation up and running on your laptop, you can proceed with CloudNativePG installation. Please refer to the \"Installation\" section and then proceed with the deployment of a PostgreSQL cluster. Part 3: Deploy a PostgreSQL cluster As with any other deployment in Kubernetes, to deploy a PostgreSQL cluster you need to apply a configuration file that defines your desired Cluster . The cluster-example.yaml sample file defines a simple Cluster using the default storage class to allocate disk space: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 storage: size: 1Gi There's more For more detailed information about the available options, please refer to the \"API Reference\" section . In order to create the 3-node PostgreSQL cluster, you need to run the following command: kubectl apply -f cluster-example.yaml You can check that the pods are being created with the get pods command: kubectl get pods That will look for pods in the default namespace. To separate your cluster from other workloads on your Kubernetes installation, you could always create a new namespace to deploy clusters on. Alternatively, you can use labels. The operator will apply the cnpg.io/cluster label on all objects relevant to a particular cluster. For example: kubectl get pods -l cnpg.io/cluster=<CLUSTER> Important Note that we are using cnpg.io/cluster as the label. In the past you may have seen or used postgresql . This label is being deprecated, and will be dropped in the future. Please use cnpg.io/cluster . By default, the operator will install the latest available minor version of the latest major version of PostgreSQL when the operator was released. You can override this by setting the imageName key in the spec section of the Cluster definition. For example, to install PostgreSQL 13.6: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: # [...] spec: # [...] imageName: ghcr.io/cloudnative-pg/postgresql:13.6 #[...] Important The immutable infrastructure paradigm requires that you always point to a specific version of the container image. Never use tags like latest or 13 in a production environment as it might lead to unpredictable scenarios in terms of update policies and version consistency in the cluster. For strict deterministic and repeatable deployments, you can add the digests to the image name, through the <image>:<tag>@sha256:<digestValue> format. There's more There are some examples cluster configurations bundled with the operator. Please refer to the \"Examples\" section . Part 4: Monitor clusters with Prometheus and Grafana Important Installing Prometheus and Grafana is beyond the scope of this project. The instructions in this section are provided for experimentation and illustration only. In this section we show how to deploy Prometheus and Grafana for observability, and how to create a Grafana Dashboard to monitor CloudNativePG clusters, and a set of Prometheus Rules defining alert conditions. We leverage the Kube-Prometheus stack Helm chart, which is maintained by the Prometheus Community . Please refer to the project website for additional documentation and background. The Kube-Prometheus-stack Helm chart installs the Prometheus Operator , including the Alert Manager , and a Grafana deployment. We include a configuration file for the deployment of this Helm chart that will provide useful initial settings for observability of CloudNativePG clusters. Installation If you don't have Helm installed yet, please follow the instructions to install it in your system. We need to add the prometheus-community helm chart repository, and then install the Kube Prometheus stack with our sample configuration kube-stack-config.yaml . We can accomplish this with the following commands: helm repo add prometheus-community \\ https://prometheus-community.github.io/helm-charts helm upgrade --install \\ -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/kube-stack-config.yaml \\ prometheus-community \\ prometheus-community/kube-prometheus-stack After completion, you will have Prometheus, Grafana, and Alert Manager, configured with the kube-stack-config.yaml file: From the Prometheus installation, you will have the Prometheus Operator watching for any PodMonitor (see monitoring ). Alert Manager and Grafana are both enabled. Seealso For further information about the above helm commands, refer to the helm install documentation. You can see several Custom Resources have been created: % kubectl get crds NAME CREATED AT \u2026 alertmanagers.monitoring.coreos.com <timestamp> \u2026 prometheuses.monitoring.coreos.com <timestamp> prometheusrules.monitoring.coreos.com <timestamp> \u2026 as well as a series of Services: % kubectl get svc NAME TYPE PORT(S) \u2026 \u2026 \u2026 prometheus-community-grafana ClusterIP 80/TCP prometheus-community-kube-alertmanager ClusterIP 9093/TCP prometheus-community-kube-operator ClusterIP 443/TCP prometheus-community-kube-prometheus ClusterIP 9090/TCP Viewing with Prometheus At this point, a CloudNativePG cluster deployed with monitoring activated would be observable via Prometheus. For example, you could deploy a simple cluster with PodMonitor enabled: kubectl apply -f - <<EOF --- apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-with-metrics spec: instances: 3 storage: size: 1Gi monitoring: enablePodMonitor: true EOF To access Prometheus, port-forward the Prometheus service: kubectl port-forward svc/prometheus-community-kube-prometheus 9090 Then access the Prometheus console locally at: http://localhost:9090/ You should find a series of metrics relating to CloudNativePG clusters. Please refer to the monitoring section for more information. You can also monitor the CloudNativePG operator by creating a PodMonitor to target it. See the relevant section in the monitoring page . You can define some alerts by creating a prometheusRule : kubectl apply -f \\ https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/prometheusrule.yaml You should see the default alerts now: % kubectl get prometheusrules NAME AGE cnpg-default-alerts 3m27s In the Prometheus console, you can click on the Alerts menu to see the alerts we just installed. Grafana Dashboard In our installation so far, Grafana is deployed with no predefined dashboards. To open Grafana, you can port-forward the grafana service: kubectl port-forward svc/prometheus-community-grafana 3000:80 and access Grafana locally at http://localhost:3000/ providing the credentials admin as username, prom-operator as password (defined in kube-stack-config.yaml ). CloudNativePG provides a default dashboard for Grafana in the dedicated grafana-dashboards repository . You can download the file grafana-dashboard.json and manually import it via the GUI (menu: Dashboards > New > Import). You can now click on the CloudNativePG dashboard just created: Warning Some graphs in the previous dashboard make use of metrics that are in alpha stage by the time this was created, like kubelet_volume_stats_available_bytes and kubelet_volume_stats_capacity_bytes producing some graphs to show No data . Note that in our local setup, Prometheus and Grafana are configured to automatically discover and monitor any CloudNativePG clusters deployed with the Monitoring feature enabled.","title":"Quickstart"},{"location":"quickstart/#quickstart","text":"This section guides you through testing a PostgreSQL cluster on your local machine by deploying CloudNativePG on a local Kubernetes cluster using either Kind or Minikube . Warning The instructions contained in this section are for demonstration, testing, and practice purposes only and must not be used in production. Like any other Kubernetes application, CloudNativePG is deployed using regular manifests written in YAML. By following the instructions on this page you should be able to start a PostgreSQL cluster on your local Kubernetes installation and experiment with it. Important Make sure that you have kubectl installed on your machine in order to connect to the Kubernetes cluster. Please follow the Kubernetes documentation on how to install kubectl .","title":"Quickstart"},{"location":"quickstart/#part-1-setup-the-local-kubernetes-playground","text":"The first part is about installing Minikube or Kind. Please spend some time reading about the systems and decide which one to proceed with. After setting up one of them, please proceed with part 2. We also provide instructions for setting up monitoring with Prometheus and Grafana for local testing/evaluation, in part 4","title":"Part 1: Setup the local Kubernetes playground"},{"location":"quickstart/#minikube","text":"Minikube is a tool that makes it easy to run Kubernetes locally. Minikube runs a single-node Kubernetes cluster inside a Virtual Machine (VM) on your laptop for users looking to try out Kubernetes or develop with it day-to-day. Normally, it is used in conjunction with VirtualBox. You can find more information in the official Kubernetes documentation on how to install Minikube in your local personal environment. When you installed it, run the following command to create a minikube cluster: minikube start This will create the Kubernetes cluster, and you will be ready to use it. Verify that it works with the following command: kubectl get nodes You will see one node called minikube .","title":"Minikube"},{"location":"quickstart/#kind","text":"If you do not want to use a virtual machine hypervisor, then Kind is a tool for running local Kubernetes clusters using Docker container \"nodes\" (Kind stands for \"Kubernetes IN Docker\" indeed). Install kind on your environment following the instructions in the Quickstart , then create a Kubernetes cluster with: kind create cluster --name pg","title":"Kind"},{"location":"quickstart/#part-2-install-cloudnativepg","text":"Now that you have a Kubernetes installation up and running on your laptop, you can proceed with CloudNativePG installation. Please refer to the \"Installation\" section and then proceed with the deployment of a PostgreSQL cluster.","title":"Part 2: Install CloudNativePG"},{"location":"quickstart/#part-3-deploy-a-postgresql-cluster","text":"As with any other deployment in Kubernetes, to deploy a PostgreSQL cluster you need to apply a configuration file that defines your desired Cluster . The cluster-example.yaml sample file defines a simple Cluster using the default storage class to allocate disk space: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 storage: size: 1Gi There's more For more detailed information about the available options, please refer to the \"API Reference\" section . In order to create the 3-node PostgreSQL cluster, you need to run the following command: kubectl apply -f cluster-example.yaml You can check that the pods are being created with the get pods command: kubectl get pods That will look for pods in the default namespace. To separate your cluster from other workloads on your Kubernetes installation, you could always create a new namespace to deploy clusters on. Alternatively, you can use labels. The operator will apply the cnpg.io/cluster label on all objects relevant to a particular cluster. For example: kubectl get pods -l cnpg.io/cluster=<CLUSTER> Important Note that we are using cnpg.io/cluster as the label. In the past you may have seen or used postgresql . This label is being deprecated, and will be dropped in the future. Please use cnpg.io/cluster . By default, the operator will install the latest available minor version of the latest major version of PostgreSQL when the operator was released. You can override this by setting the imageName key in the spec section of the Cluster definition. For example, to install PostgreSQL 13.6: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: # [...] spec: # [...] imageName: ghcr.io/cloudnative-pg/postgresql:13.6 #[...] Important The immutable infrastructure paradigm requires that you always point to a specific version of the container image. Never use tags like latest or 13 in a production environment as it might lead to unpredictable scenarios in terms of update policies and version consistency in the cluster. For strict deterministic and repeatable deployments, you can add the digests to the image name, through the <image>:<tag>@sha256:<digestValue> format. There's more There are some examples cluster configurations bundled with the operator. Please refer to the \"Examples\" section .","title":"Part 3: Deploy a PostgreSQL cluster"},{"location":"quickstart/#part-4-monitor-clusters-with-prometheus-and-grafana","text":"Important Installing Prometheus and Grafana is beyond the scope of this project. The instructions in this section are provided for experimentation and illustration only. In this section we show how to deploy Prometheus and Grafana for observability, and how to create a Grafana Dashboard to monitor CloudNativePG clusters, and a set of Prometheus Rules defining alert conditions. We leverage the Kube-Prometheus stack Helm chart, which is maintained by the Prometheus Community . Please refer to the project website for additional documentation and background. The Kube-Prometheus-stack Helm chart installs the Prometheus Operator , including the Alert Manager , and a Grafana deployment. We include a configuration file for the deployment of this Helm chart that will provide useful initial settings for observability of CloudNativePG clusters.","title":"Part 4: Monitor clusters with Prometheus and Grafana"},{"location":"quickstart/#installation","text":"If you don't have Helm installed yet, please follow the instructions to install it in your system. We need to add the prometheus-community helm chart repository, and then install the Kube Prometheus stack with our sample configuration kube-stack-config.yaml . We can accomplish this with the following commands: helm repo add prometheus-community \\ https://prometheus-community.github.io/helm-charts helm upgrade --install \\ -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/kube-stack-config.yaml \\ prometheus-community \\ prometheus-community/kube-prometheus-stack After completion, you will have Prometheus, Grafana, and Alert Manager, configured with the kube-stack-config.yaml file: From the Prometheus installation, you will have the Prometheus Operator watching for any PodMonitor (see monitoring ). Alert Manager and Grafana are both enabled. Seealso For further information about the above helm commands, refer to the helm install documentation. You can see several Custom Resources have been created: % kubectl get crds NAME CREATED AT \u2026 alertmanagers.monitoring.coreos.com <timestamp> \u2026 prometheuses.monitoring.coreos.com <timestamp> prometheusrules.monitoring.coreos.com <timestamp> \u2026 as well as a series of Services: % kubectl get svc NAME TYPE PORT(S) \u2026 \u2026 \u2026 prometheus-community-grafana ClusterIP 80/TCP prometheus-community-kube-alertmanager ClusterIP 9093/TCP prometheus-community-kube-operator ClusterIP 443/TCP prometheus-community-kube-prometheus ClusterIP 9090/TCP","title":"Installation"},{"location":"quickstart/#viewing-with-prometheus","text":"At this point, a CloudNativePG cluster deployed with monitoring activated would be observable via Prometheus. For example, you could deploy a simple cluster with PodMonitor enabled: kubectl apply -f - <<EOF --- apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-with-metrics spec: instances: 3 storage: size: 1Gi monitoring: enablePodMonitor: true EOF To access Prometheus, port-forward the Prometheus service: kubectl port-forward svc/prometheus-community-kube-prometheus 9090 Then access the Prometheus console locally at: http://localhost:9090/ You should find a series of metrics relating to CloudNativePG clusters. Please refer to the monitoring section for more information. You can also monitor the CloudNativePG operator by creating a PodMonitor to target it. See the relevant section in the monitoring page . You can define some alerts by creating a prometheusRule : kubectl apply -f \\ https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/prometheusrule.yaml You should see the default alerts now: % kubectl get prometheusrules NAME AGE cnpg-default-alerts 3m27s In the Prometheus console, you can click on the Alerts menu to see the alerts we just installed.","title":"Viewing with Prometheus"},{"location":"quickstart/#grafana-dashboard","text":"In our installation so far, Grafana is deployed with no predefined dashboards. To open Grafana, you can port-forward the grafana service: kubectl port-forward svc/prometheus-community-grafana 3000:80 and access Grafana locally at http://localhost:3000/ providing the credentials admin as username, prom-operator as password (defined in kube-stack-config.yaml ). CloudNativePG provides a default dashboard for Grafana in the dedicated grafana-dashboards repository . You can download the file grafana-dashboard.json and manually import it via the GUI (menu: Dashboards > New > Import). You can now click on the CloudNativePG dashboard just created: Warning Some graphs in the previous dashboard make use of metrics that are in alpha stage by the time this was created, like kubelet_volume_stats_available_bytes and kubelet_volume_stats_capacity_bytes producing some graphs to show No data . Note that in our local setup, Prometheus and Grafana are configured to automatically discover and monitor any CloudNativePG clusters deployed with the Monitoring feature enabled.","title":"Grafana Dashboard"},{"location":"recovery/","text":"Recovery Warning With the deprecation of native Barman Cloud support in CloudNativePG in favor of the Barman Cloud Plugin, this page\u2014and the backup and recovery documentation\u2014may undergo changes before the official release of version 1.26.0. In PostgreSQL terminology, recovery is the process of starting a PostgreSQL instance using an existing backup. The PostgreSQL recovery mechanism is very solid and rich. It also supports point-in-time recovery (PITR), which allows you to restore a given cluster up to any point in time, from the first available backup in your catalog to the last archived WAL. (The WAL archive is mandatory in this case.) In CloudNativePG, you can't perform recovery in place on an existing cluster. Recovery is instead a way to bootstrap a new Postgres cluster starting from an available physical backup. Note For details on the bootstrap stanza, see Bootstrap . The recovery bootstrap mode lets you create a cluster from an existing physical base backup. You then reapply the WAL files containing the REDO log from the archive. WAL files are pulled from the defined recovery object store . Base backups can be taken either on object stores or using volume snapshots. Info Starting with version 1.25, CloudNativePG includes experimental support for backup and recovery using plugins, such as the Barman Cloud plugin . You can achieve recovery from a recovery object store in two ways: We recommend using a recovery object store, that is, a backup of another cluster created by Barman Cloud and defined by way of the barmanObjectStore option in the externalClusters section. Alternatively, you can use an existing Backup object in the same namespace. Both recovery methods enable either full recovery (up to the last available WAL) or up to a point in time . When performing a full recovery, you can also start the cluster in replica mode (see replica clusters for reference). Important If using replica mode, make sure that the PostgreSQL configuration ( .spec.postgresql.parameters ) of the recovered cluster is compatible with the original one from a physical replication standpoint. For recovery using volume snapshots : Use a consistent set of VolumeSnapshot objects that all belong to the same backup and are identified by the same cnpg.io/cluster and cnpg.io/backupName labels. Then, recover through the volumeSnapshots option in the .spec.bootstrap.recovery stanza, as described in Recovery from VolumeSnapshot objects . Recovery from an object store You can recover from a backup created by Barman Cloud and stored on a supported object store. After you define the external cluster, including all the required configuration in the barmanObjectStore section, you need to reference it in the .spec.recovery.source option. This example defines a recovery object store in a blob container in Azure: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] superuserSecret: name: superuser-secret bootstrap: recovery: source: clusterBackup externalClusters: - name: clusterBackup barmanObjectStore: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8 The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Important By default, the recovery method strictly uses the name of the cluster in the externalClusters section as the name of the main folder of the backup data within the object store. This name is normally reserved for the name of the server. You can specify a different folder name using the barmanObjectStore.serverName property. Note This example takes advantage of the parallel WAL restore feature, dedicating up to 8 jobs to concurrently fetch the required WAL files from the archive. This feature can appreciably reduce the recovery time. Make sure that you plan ahead for this scenario and correctly tune the value of this parameter for your environment. It will make a difference when you need it, and you will. Recovery from VolumeSnapshot objects Warning When creating replicas after recovering the primary instance from the volume snapshot, the operator might end up using pg_basebackup to synchronize them. This behavior results in a slower process, depending on the size of the database. This limitation will be lifted in the future when support for online backups and PVC cloning are introduced. CloudNativePG can create a new cluster from a VolumeSnapshot of a PVC of an existing Cluster that's been taken using the declarative API for volume snapshot backups . You must specify the name of the snapshot, as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] bootstrap: recovery: volumeSnapshots: storage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io In case the backed-up cluster was using a separate PVC to store the WAL files, the recovery must include that too: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] bootstrap: recovery: volumeSnapshots: storage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io walStorage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Warning If bootstrapping a replica-mode cluster from snapshots, to leverage snapshots for the standby instances and not just the primary, we recommend that you: Start with a single instance replica cluster. The primary instance will be recovered using the snapshot, and available WALs from the source cluster. Take a snapshot of the primary in the replica cluster. Increase the number of instances in the replica cluster as desired. Recovery from a Backup object If a Backup resource is already available in the namespace in which you need to create the cluster, you can specify the name using .spec.bootstrap.recovery.backup.name , as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: recovery: backup: name: backup-example storage: size: 1Gi This bootstrap method allows you to specify just a reference to the backup that needs to be restored. The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Additional Considerations Whether you recover from an object store, a volume snapshot, or an existing Backup resource, no changes to the database, including the catalog, are permitted until the Cluster is fully promoted to primary and accepts write operations. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. As a result, the following considerations apply: The application database name and user are copied from the backup being restored. The operator does not currently back up the underlying secrets, as this is part of the usual maintenance activity of the Kubernetes cluster. To preserve the original postgres user password, configure enableSuperuserAccess and supply a superuserSecret . By default, recovery continues up to the latest available WAL on the default target timeline ( latest ). You can optionally specify a recoveryTarget to perform a point-in-time recovery (see Point in Time Recovery (PITR) ). Important Consider using the barmanObjectStore.wal.maxParallel option to speed up WAL fetching from the archive by concurrently downloading the transaction logs from the recovery object store. Point in time recovery (PITR) Instead of replaying all the WALs up to the latest one, after extracting a base backup, you can ask PostgreSQL to stop replaying WALs at any given point in time. PostgreSQL uses this technique to achieve PITR. The presence of a WAL archive is mandatory. Important PITR requires you to specify a recovery target by using the options described in Recovery targets . The operator generates the configuration parameters required for this feature to work if you specify a recovery target. PITR from an object store This example uses a recovery object store in Azure that contains both the base backups and the WAL archive. The recovery target is based on a requested timestamp. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore-pitr spec: instances: 3 storage: size: 5Gi bootstrap: recovery: # Recovery object store containing WAL archive and base backups source: clusterBackup recoveryTarget: # Time base target for the recovery targetTime: \"2023-08-11 11:14:21.00000+02\" externalClusters: - name: clusterBackup barmanObjectStore: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8 In this example, you had to specify only the targetTime in the form of a timestamp. You didn't have to specify the base backup from which to start the recovery. The backupID option is the one that allows you to specify the base backup from which to initiate the recovery process. By default, this value is empty. If you assign a value to it (in the form of a Barman backup ID), the operator uses that backup as the base for the recovery. Important You need to make sure that such a backup exists and is accessible. If you don't specify the backup ID, the operator detects the base backup for the recovery as follows: When you use targetTime or targetLSN , the operator selects the closest backup that was completed before that target. Otherwise, the operator selects the last available backup, in chronological order. PITR from VolumeSnapshot objects The example that follows uses: A Kubernetes volume snapshot for the PGDATA containing the base backup from which to start the recovery process. This snapshot is identified in the recovery.volumeSnapshots section and called test-snapshot-1 . A recovery object store in MinIO containing the WAL archive. The object store is identified by the recovery.source option in the form of an external cluster definition. The recovery target is based on a requested timestamp. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-snapshot spec: # ... bootstrap: recovery: source: cluster-example-with-backup volumeSnapshots: storage: name: test-snapshot-1 kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io recoveryTarget: targetTime: \"2023-07-06T08:00:39\" externalClusters: - name: cluster-example-with-backup barmanObjectStore: destinationPath: s3://backups/ endpointURL: http://minio:9000 s3Credentials: accessKeyId: name: minio key: ACCESS_KEY_ID secretAccessKey: name: minio key: ACCESS_SECRET_KEY Note If the backed-up cluster had walStorage enabled, you also must specify the volume snapshot containing the PGWAL directory, as mentioned in Recovery from VolumeSnapshot objects . Warning It's your responsibility to ensure that the end time of the base backup in the volume snapshot is before the recovery target timestamp. Recovery targets Here are the recovery target criteria you can use: targetTime Time stamp up to which recovery proceeds, expressed in RFC 3339 format. (The precise stopping point is also influenced by the exclusive option.) targetXID Transaction ID up to which recovery proceeds. (The precise stopping point is also influenced by the exclusive option.) Keep in mind that while transaction IDs are assigned sequentially at transaction start, transactions can complete in a different numeric order. The transactions that are recovered are those that committed before (and optionally including) the specified one. targetName Named restore point (created with pg_create_restore_point() ) to which recovery proceeds. targetLSN LSN of the write-ahead log location up to which recovery proceeds. (The precise stopping point is also influenced by the exclusive option.) targetImmediate Recovery ends as soon as a consistent state is reached, that is, as early as possible. When restoring from an online backup, this means the point where taking the backup ended. Important The operator can retrieve the closest backup when you specify either targetTime or targetLSN . However, this isn't possible for the remaining targets: targetName , targetXID , and targetImmediate . In such cases, it's mandatory to specify backupID . This example uses a targetName -based recovery target: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] bootstrap: recovery: source: clusterBackup recoveryTarget: backupID: 20220616T142236 targetName: 'restore_point_1' [...] You can choose only a single one among the targets in each recoveryTarget configuration. Additionally, you can specify targetTLI to force recovery to a specific timeline. By default, the previous parameters are considered to be inclusive, stopping just after the recovery target, matching the behavior in PostgreSQL . You can request exclusive behavior, stopping right before the recovery target, by setting the exclusive parameter to true . The following example shows this behavior, relying on a blob container in Azure for both base backups and the WAL archive: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore-pitr spec: instances: 3 storage: size: 5Gi bootstrap: recovery: source: clusterBackup recoveryTarget: backupID: 20220616T142236 targetName: \"maintenance-activity\" exclusive: true externalClusters: - name: clusterBackup barmanObjectStore: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8 Configure the application database For the recovered cluster, you can configure the application database name and credentials with additional configuration. To update application database credentials, you can generate your own passwords, store them as secrets, and update the database to use the secrets. Or you can also let the operator generate a secret with a randomly secure password for use. See Bootstrap an empty cluster for more information about secrets. Important While the Cluster is in recovery mode, no changes to the database, including the catalog, are permitted. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. During this phase, users remain as defined in the source cluster. The following example configures the app database with the owner app and the password stored in the provided secret app-secret , following the bootstrap from a live cluster. apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: bootstrap: recovery: database: app owner: app secret: name: app-secret [...] With the above configuration, the following will happen only after recovery is completed : If the app database does not exist, it will be created. If the app user does not exist, it will be created. If the app user is not the owner of the app database, ownership will be granted to the app user. If the username value matches the owner value in the secret, the password for the application user (the app user in this case) will be updated to the password value in the secret. How recovery works under the hood You can use the data uploaded to the object storage to bootstrap a new cluster from an existing backup. The operator orchestrates the recovery process using the barman-cloud-restore tool (for the base backup) and the barman-cloud-wal-restore tool (for WAL files, including parallel support, if requested). For details and instructions on the recovery bootstrap method, see Bootstrap from a backup . Important If you're not familiar with how PostgreSQL PITR works, we suggest that you configure the recovery cluster as the original one when it comes to .spec.postgresql.parameters . Once the new cluster is restored, you can then change the settings as desired. The way it works is that the operator injects an init container in the first instance of the new cluster, and the init container starts recovering the backup from the object storage. Important The duration of the base backup copy in the new PVC depends on the size of the backup, as well as the speed of both the network and the storage. When the base backup recovery process is complete, the operator starts the Postgres instance in recovery mode. In this phase, PostgreSQL is up, though not able to accept connections, and the pod is healthy according to the liveness probe. By way of the restore_command , PostgreSQL starts fetching WAL files from the archive. (You can speed up this phase by setting the maxParallel option and enabling the parallel WAL restore capability.) This phase terminates when PostgreSQL reaches the target (either the end of the WAL or the required target in case of PITR. You can optionally specify a recoveryTarget to perform a PITR. If left unspecified, the recovery continues up to the latest available WAL on the default target timeline ( latest ). Once the recovery is complete, the operator sets the required superuser password into the instance. The new primary instance starts as usual, and the remaining instances join the cluster as replicas. The process is transparent for the user and is managed by the instance manager running in the pods. Restoring into a cluster with a backup section A manifest for a cluster restore might include a backup section. This means that,after recovery, the new cluster starts archiving WALs and taking backups if configured to do so. For example, this section is part of a manifest for a cluster bootstrapping from the cluster cluster-example-backup . In the storage bucket, it creates a folder named recoveredCluster , where the base backups and WALs of the recovered cluster are stored. backup: barmanObjectStore: destinationPath: s3://backups/ endpointURL: http://minio:9000 serverName: \"recoveredCluster\" s3Credentials: accessKeyId: name: minio key: ACCESS_KEY_ID secretAccessKey: name: minio key: ACCESS_SECRET_KEY retentionPolicy: \"30d\" externalClusters: - name: cluster-example-backup barmanObjectStore: destinationPath: s3://backups/ endpointURL: http://minio:9000 s3Credentials: Don't reuse the same barmanObjectStore configuration for different clusters. There might be cases where the existing information in the storage buckets could be overwritten by the new cluster. Warning The operator includes a safety check to ensure a cluster doesn't overwrite a storage bucket that contained information. A cluster that would overwrite existing storage remains in the state Setting up primary with pods in an error state. The pod logs show: ERROR: WAL archive check failed for server recoveredCluster: Expected empty archive . Important If you set the cnpg.io/skipEmptyWalArchiveCheck annotation to enabled in the recovered cluster, you can skip the safety check. We don't recommend skipping the check because, for the general use case, the check works fine. Skip this check only if you're familiar with the PostgreSQL recovery system, as severe data loss can occur.","title":"Recovery"},{"location":"recovery/#recovery","text":"Warning With the deprecation of native Barman Cloud support in CloudNativePG in favor of the Barman Cloud Plugin, this page\u2014and the backup and recovery documentation\u2014may undergo changes before the official release of version 1.26.0. In PostgreSQL terminology, recovery is the process of starting a PostgreSQL instance using an existing backup. The PostgreSQL recovery mechanism is very solid and rich. It also supports point-in-time recovery (PITR), which allows you to restore a given cluster up to any point in time, from the first available backup in your catalog to the last archived WAL. (The WAL archive is mandatory in this case.) In CloudNativePG, you can't perform recovery in place on an existing cluster. Recovery is instead a way to bootstrap a new Postgres cluster starting from an available physical backup. Note For details on the bootstrap stanza, see Bootstrap . The recovery bootstrap mode lets you create a cluster from an existing physical base backup. You then reapply the WAL files containing the REDO log from the archive. WAL files are pulled from the defined recovery object store . Base backups can be taken either on object stores or using volume snapshots. Info Starting with version 1.25, CloudNativePG includes experimental support for backup and recovery using plugins, such as the Barman Cloud plugin . You can achieve recovery from a recovery object store in two ways: We recommend using a recovery object store, that is, a backup of another cluster created by Barman Cloud and defined by way of the barmanObjectStore option in the externalClusters section. Alternatively, you can use an existing Backup object in the same namespace. Both recovery methods enable either full recovery (up to the last available WAL) or up to a point in time . When performing a full recovery, you can also start the cluster in replica mode (see replica clusters for reference). Important If using replica mode, make sure that the PostgreSQL configuration ( .spec.postgresql.parameters ) of the recovered cluster is compatible with the original one from a physical replication standpoint. For recovery using volume snapshots : Use a consistent set of VolumeSnapshot objects that all belong to the same backup and are identified by the same cnpg.io/cluster and cnpg.io/backupName labels. Then, recover through the volumeSnapshots option in the .spec.bootstrap.recovery stanza, as described in Recovery from VolumeSnapshot objects .","title":"Recovery"},{"location":"recovery/#recovery-from-an-object-store","text":"You can recover from a backup created by Barman Cloud and stored on a supported object store. After you define the external cluster, including all the required configuration in the barmanObjectStore section, you need to reference it in the .spec.recovery.source option. This example defines a recovery object store in a blob container in Azure: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] superuserSecret: name: superuser-secret bootstrap: recovery: source: clusterBackup externalClusters: - name: clusterBackup barmanObjectStore: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8 The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Important By default, the recovery method strictly uses the name of the cluster in the externalClusters section as the name of the main folder of the backup data within the object store. This name is normally reserved for the name of the server. You can specify a different folder name using the barmanObjectStore.serverName property. Note This example takes advantage of the parallel WAL restore feature, dedicating up to 8 jobs to concurrently fetch the required WAL files from the archive. This feature can appreciably reduce the recovery time. Make sure that you plan ahead for this scenario and correctly tune the value of this parameter for your environment. It will make a difference when you need it, and you will.","title":"Recovery from an object store"},{"location":"recovery/#recovery-from-volumesnapshot-objects","text":"Warning When creating replicas after recovering the primary instance from the volume snapshot, the operator might end up using pg_basebackup to synchronize them. This behavior results in a slower process, depending on the size of the database. This limitation will be lifted in the future when support for online backups and PVC cloning are introduced. CloudNativePG can create a new cluster from a VolumeSnapshot of a PVC of an existing Cluster that's been taken using the declarative API for volume snapshot backups . You must specify the name of the snapshot, as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] bootstrap: recovery: volumeSnapshots: storage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io In case the backed-up cluster was using a separate PVC to store the WAL files, the recovery must include that too: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] bootstrap: recovery: volumeSnapshots: storage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io walStorage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Warning If bootstrapping a replica-mode cluster from snapshots, to leverage snapshots for the standby instances and not just the primary, we recommend that you: Start with a single instance replica cluster. The primary instance will be recovered using the snapshot, and available WALs from the source cluster. Take a snapshot of the primary in the replica cluster. Increase the number of instances in the replica cluster as desired.","title":"Recovery from VolumeSnapshot objects"},{"location":"recovery/#recovery-from-a-backup-object","text":"If a Backup resource is already available in the namespace in which you need to create the cluster, you can specify the name using .spec.bootstrap.recovery.backup.name , as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: recovery: backup: name: backup-example storage: size: 1Gi This bootstrap method allows you to specify just a reference to the backup that needs to be restored. The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" .","title":"Recovery from a Backup object"},{"location":"recovery/#additional-considerations","text":"Whether you recover from an object store, a volume snapshot, or an existing Backup resource, no changes to the database, including the catalog, are permitted until the Cluster is fully promoted to primary and accepts write operations. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. As a result, the following considerations apply: The application database name and user are copied from the backup being restored. The operator does not currently back up the underlying secrets, as this is part of the usual maintenance activity of the Kubernetes cluster. To preserve the original postgres user password, configure enableSuperuserAccess and supply a superuserSecret . By default, recovery continues up to the latest available WAL on the default target timeline ( latest ). You can optionally specify a recoveryTarget to perform a point-in-time recovery (see Point in Time Recovery (PITR) ). Important Consider using the barmanObjectStore.wal.maxParallel option to speed up WAL fetching from the archive by concurrently downloading the transaction logs from the recovery object store.","title":"Additional Considerations"},{"location":"recovery/#point-in-time-recovery-pitr","text":"Instead of replaying all the WALs up to the latest one, after extracting a base backup, you can ask PostgreSQL to stop replaying WALs at any given point in time. PostgreSQL uses this technique to achieve PITR. The presence of a WAL archive is mandatory. Important PITR requires you to specify a recovery target by using the options described in Recovery targets . The operator generates the configuration parameters required for this feature to work if you specify a recovery target.","title":"Point in time recovery (PITR)"},{"location":"recovery/#pitr-from-an-object-store","text":"This example uses a recovery object store in Azure that contains both the base backups and the WAL archive. The recovery target is based on a requested timestamp. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore-pitr spec: instances: 3 storage: size: 5Gi bootstrap: recovery: # Recovery object store containing WAL archive and base backups source: clusterBackup recoveryTarget: # Time base target for the recovery targetTime: \"2023-08-11 11:14:21.00000+02\" externalClusters: - name: clusterBackup barmanObjectStore: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8 In this example, you had to specify only the targetTime in the form of a timestamp. You didn't have to specify the base backup from which to start the recovery. The backupID option is the one that allows you to specify the base backup from which to initiate the recovery process. By default, this value is empty. If you assign a value to it (in the form of a Barman backup ID), the operator uses that backup as the base for the recovery. Important You need to make sure that such a backup exists and is accessible. If you don't specify the backup ID, the operator detects the base backup for the recovery as follows: When you use targetTime or targetLSN , the operator selects the closest backup that was completed before that target. Otherwise, the operator selects the last available backup, in chronological order.","title":"PITR from an object store"},{"location":"recovery/#pitr-from-volumesnapshot-objects","text":"The example that follows uses: A Kubernetes volume snapshot for the PGDATA containing the base backup from which to start the recovery process. This snapshot is identified in the recovery.volumeSnapshots section and called test-snapshot-1 . A recovery object store in MinIO containing the WAL archive. The object store is identified by the recovery.source option in the form of an external cluster definition. The recovery target is based on a requested timestamp. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-snapshot spec: # ... bootstrap: recovery: source: cluster-example-with-backup volumeSnapshots: storage: name: test-snapshot-1 kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io recoveryTarget: targetTime: \"2023-07-06T08:00:39\" externalClusters: - name: cluster-example-with-backup barmanObjectStore: destinationPath: s3://backups/ endpointURL: http://minio:9000 s3Credentials: accessKeyId: name: minio key: ACCESS_KEY_ID secretAccessKey: name: minio key: ACCESS_SECRET_KEY Note If the backed-up cluster had walStorage enabled, you also must specify the volume snapshot containing the PGWAL directory, as mentioned in Recovery from VolumeSnapshot objects . Warning It's your responsibility to ensure that the end time of the base backup in the volume snapshot is before the recovery target timestamp.","title":"PITR from VolumeSnapshot objects"},{"location":"recovery/#recovery-targets","text":"Here are the recovery target criteria you can use: targetTime Time stamp up to which recovery proceeds, expressed in RFC 3339 format. (The precise stopping point is also influenced by the exclusive option.) targetXID Transaction ID up to which recovery proceeds. (The precise stopping point is also influenced by the exclusive option.) Keep in mind that while transaction IDs are assigned sequentially at transaction start, transactions can complete in a different numeric order. The transactions that are recovered are those that committed before (and optionally including) the specified one. targetName Named restore point (created with pg_create_restore_point() ) to which recovery proceeds. targetLSN LSN of the write-ahead log location up to which recovery proceeds. (The precise stopping point is also influenced by the exclusive option.) targetImmediate Recovery ends as soon as a consistent state is reached, that is, as early as possible. When restoring from an online backup, this means the point where taking the backup ended. Important The operator can retrieve the closest backup when you specify either targetTime or targetLSN . However, this isn't possible for the remaining targets: targetName , targetXID , and targetImmediate . In such cases, it's mandatory to specify backupID . This example uses a targetName -based recovery target: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] bootstrap: recovery: source: clusterBackup recoveryTarget: backupID: 20220616T142236 targetName: 'restore_point_1' [...] You can choose only a single one among the targets in each recoveryTarget configuration. Additionally, you can specify targetTLI to force recovery to a specific timeline. By default, the previous parameters are considered to be inclusive, stopping just after the recovery target, matching the behavior in PostgreSQL . You can request exclusive behavior, stopping right before the recovery target, by setting the exclusive parameter to true . The following example shows this behavior, relying on a blob container in Azure for both base backups and the WAL archive: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore-pitr spec: instances: 3 storage: size: 5Gi bootstrap: recovery: source: clusterBackup recoveryTarget: backupID: 20220616T142236 targetName: \"maintenance-activity\" exclusive: true externalClusters: - name: clusterBackup barmanObjectStore: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8","title":"Recovery targets"},{"location":"recovery/#configure-the-application-database","text":"For the recovered cluster, you can configure the application database name and credentials with additional configuration. To update application database credentials, you can generate your own passwords, store them as secrets, and update the database to use the secrets. Or you can also let the operator generate a secret with a randomly secure password for use. See Bootstrap an empty cluster for more information about secrets. Important While the Cluster is in recovery mode, no changes to the database, including the catalog, are permitted. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. During this phase, users remain as defined in the source cluster. The following example configures the app database with the owner app and the password stored in the provided secret app-secret , following the bootstrap from a live cluster. apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: bootstrap: recovery: database: app owner: app secret: name: app-secret [...] With the above configuration, the following will happen only after recovery is completed : If the app database does not exist, it will be created. If the app user does not exist, it will be created. If the app user is not the owner of the app database, ownership will be granted to the app user. If the username value matches the owner value in the secret, the password for the application user (the app user in this case) will be updated to the password value in the secret.","title":"Configure the application database"},{"location":"recovery/#how-recovery-works-under-the-hood","text":"You can use the data uploaded to the object storage to bootstrap a new cluster from an existing backup. The operator orchestrates the recovery process using the barman-cloud-restore tool (for the base backup) and the barman-cloud-wal-restore tool (for WAL files, including parallel support, if requested). For details and instructions on the recovery bootstrap method, see Bootstrap from a backup . Important If you're not familiar with how PostgreSQL PITR works, we suggest that you configure the recovery cluster as the original one when it comes to .spec.postgresql.parameters . Once the new cluster is restored, you can then change the settings as desired. The way it works is that the operator injects an init container in the first instance of the new cluster, and the init container starts recovering the backup from the object storage. Important The duration of the base backup copy in the new PVC depends on the size of the backup, as well as the speed of both the network and the storage. When the base backup recovery process is complete, the operator starts the Postgres instance in recovery mode. In this phase, PostgreSQL is up, though not able to accept connections, and the pod is healthy according to the liveness probe. By way of the restore_command , PostgreSQL starts fetching WAL files from the archive. (You can speed up this phase by setting the maxParallel option and enabling the parallel WAL restore capability.) This phase terminates when PostgreSQL reaches the target (either the end of the WAL or the required target in case of PITR. You can optionally specify a recoveryTarget to perform a PITR. If left unspecified, the recovery continues up to the latest available WAL on the default target timeline ( latest ). Once the recovery is complete, the operator sets the required superuser password into the instance. The new primary instance starts as usual, and the remaining instances join the cluster as replicas. The process is transparent for the user and is managed by the instance manager running in the pods.","title":"How recovery works under the hood"},{"location":"recovery/#restoring-into-a-cluster-with-a-backup-section","text":"A manifest for a cluster restore might include a backup section. This means that,after recovery, the new cluster starts archiving WALs and taking backups if configured to do so. For example, this section is part of a manifest for a cluster bootstrapping from the cluster cluster-example-backup . In the storage bucket, it creates a folder named recoveredCluster , where the base backups and WALs of the recovered cluster are stored. backup: barmanObjectStore: destinationPath: s3://backups/ endpointURL: http://minio:9000 serverName: \"recoveredCluster\" s3Credentials: accessKeyId: name: minio key: ACCESS_KEY_ID secretAccessKey: name: minio key: ACCESS_SECRET_KEY retentionPolicy: \"30d\" externalClusters: - name: cluster-example-backup barmanObjectStore: destinationPath: s3://backups/ endpointURL: http://minio:9000 s3Credentials: Don't reuse the same barmanObjectStore configuration for different clusters. There might be cases where the existing information in the storage buckets could be overwritten by the new cluster. Warning The operator includes a safety check to ensure a cluster doesn't overwrite a storage bucket that contained information. A cluster that would overwrite existing storage remains in the state Setting up primary with pods in an error state. The pod logs show: ERROR: WAL archive check failed for server recoveredCluster: Expected empty archive . Important If you set the cnpg.io/skipEmptyWalArchiveCheck annotation to enabled in the recovered cluster, you can skip the safety check. We don't recommend skipping the check because, for the general use case, the check works fine. Skip this check only if you're familiar with the PostgreSQL recovery system, as severe data loss can occur.","title":"Restoring into a cluster with a backup section"},{"location":"release_notes/","text":"Release notes History of user-visible changes for CloudNativePG, classified for each minor release. CloudNativePG 1.26 - Release Candidate CloudNativePG 1.25 CloudNativePG 1.24 For information on the community support policy for CloudNativePG, please refer to \"Supported releases\" . Older releases: CloudNativePG 1.23 CloudNativePG 1.22 CloudNativePG 1.21 CloudNativePG 1.20 CloudNativePG 1.19 CloudNativePG 1.18 CloudNativePG 1.17 CloudNativePG 1.16 CloudNativePG 1.15 We also keep record of all the release notes from 1.0.0 to 1.14.0 of Cloud Native PostgreSQL by EDB , the predecessor of CloudNativePG.","title":"Release notes"},{"location":"release_notes/#release-notes","text":"History of user-visible changes for CloudNativePG, classified for each minor release. CloudNativePG 1.26 - Release Candidate CloudNativePG 1.25 CloudNativePG 1.24 For information on the community support policy for CloudNativePG, please refer to \"Supported releases\" . Older releases: CloudNativePG 1.23 CloudNativePG 1.22 CloudNativePG 1.21 CloudNativePG 1.20 CloudNativePG 1.19 CloudNativePG 1.18 CloudNativePG 1.17 CloudNativePG 1.16 CloudNativePG 1.15 We also keep record of all the release notes from 1.0.0 to 1.14.0 of Cloud Native PostgreSQL by EDB , the predecessor of CloudNativePG.","title":"Release notes"},{"location":"replica_cluster/","text":"Replica clusters Warning With the deprecation of native Barman Cloud support in CloudNativePG in favor of the Barman Cloud Plugin, this page\u2014and the backup and recovery documentation\u2014may undergo changes before the official release of version 1.26.0. A replica cluster is a CloudNativePG Cluster resource designed to replicate data from another PostgreSQL instance, ideally also managed by CloudNativePG. Typically, a replica cluster is deployed in a different Kubernetes cluster in another region. These clusters can be configured to perform cascading replication and can rely on object stores for data replication from the source, as detailed further down. There are primarily two use cases for replica clusters: Disaster Recovery and High Availability : Enhance disaster recovery and, to some extent, high availability of a CloudNativePG cluster across different Kubernetes clusters, typically located in different regions. In CloudNativePG terms, this is known as a \"Distributed Topology\" . Read-Only Workloads : Create standalone replicas of a PostgreSQL cluster for purposes such as reporting or Online Analytical Processing (OLAP). These replicas are primarily for read-only workloads. In CloudNativePG terms, this is referred to as a \"Standalone Replica Cluster\" . For example, the diagram below \u2014 taken from the \"Architecture\" section \u2014 illustrates a distributed PostgreSQL topology spanning two Kubernetes clusters, with a symmetric replica cluster primarily serving disaster recovery purposes. Basic Concepts CloudNativePG builds on the PostgreSQL replication framework, allowing you to create and synchronize a PostgreSQL cluster from an existing source cluster using the replica cluster feature \u2014 described in this section. The source can be a primary cluster or another replica cluster (cascading replication). About PostgreSQL Roles A replica cluster operates in continuous recovery mode, meaning no changes to the database, including the catalog and global objects like roles or databases, are permitted. These changes are deferred until the Cluster transitions to primary. During this phase, global objects such as roles remain as defined in the source cluster. CloudNativePG applies any local redefinitions once the cluster is promoted. If you are not planning to promote the cluster (e.g., for read-only workloads) or if you intend to detach completely from the source cluster once the replica cluster is promoted, you don't need to take any action. This is normally the case of the \"Standalone Replica Cluster\" . If you are planning to promote the cluster at some point, CloudNativePG will manage the following roles and passwords when transitioning from replica cluster to primary: the application user the superuser (if you are using it) any role defined using the declarative interface If your intention is to seamlessly ensure that the above roles and passwords don't change, you need to define the necessary secrets for the above in each Cluster . This is normally the case of the \"Distributed Topology\" . Bootstrapping a Replica Cluster The first step is to bootstrap the replica cluster using one of the following methods: Streaming replication via pg_basebackup Recovery from a volume snapshot Recovery from a Barman Cloud backup in an object store For detailed instructions on cloning a PostgreSQL server using pg_basebackup (streaming) or recovery (volume snapshot or object store), refer to the \"Bootstrap\" section . Configuring Replication Once the base backup for the replica cluster is available, you need to define how changes will be replicated from the origin using PostgreSQL continuous recovery. There are three main options: Streaming Replication : Set up streaming replication between the replica cluster and the source. This method requires configuring network connections and implementing appropriate administrative and security measures to ensure seamless data transfer. WAL Archive : Use the WAL (Write-Ahead Logging) archive stored in an object store. WAL files are regularly transferred from the source cluster to the object store, from where the barman-cloud-wal-restore utility retrieves them for the replica cluster. Hybrid Approach : Combine both streaming replication and WAL archive methods. PostgreSQL can manage and switch between these two approaches as needed to ensure data consistency and availability. Defining an External Cluster When configuring the external cluster, you have the following options: barmanObjectStore section : Enables use of the WAL archive, with CloudNativePG automatically setting the restore_command in the designated primary instance. Allows bootstrapping the replica cluster from an object store using the recovery section if volume snapshots are not feasible. connectionParameters section : Enables bootstrapping the replica cluster via streaming replication using the pg_basebackup section. CloudNativePG automatically sets the primary_conninfo option in the designated primary instance, initiating a WAL receiver process to connect to the source cluster and receive data. Backup and Symmetric Architectures The replica cluster can perform backups to a reserved object store from the designated primary, supporting symmetric architectures in a distributed environment. This architectural choice is crucial as it ensures the cluster is prepared for promotion during a controlled data center switchover or a failover following an unexpected event. Distributed Architecture Flexibility You have the flexibility to design your preferred distributed architecture for a PostgreSQL database, choosing from: Private Cloud : Spanning multiple Kubernetes clusters in different data centers. Public Cloud : Spanning multiple Kubernetes clusters in different regions. Hybrid Cloud : Combining private and public clouds. Multi-Cloud : Spanning multiple Kubernetes clusters across different regions and Cloud Service Providers. Setting Up a Replica Cluster To set up a replica cluster from a source cluster, follow these steps to create a cluster YAML file and configure it accordingly: Define External Clusters : In the externalClusters section, specify the replica cluster. For a distributed PostgreSQL topology aimed at disaster recovery (DR) and high availability (HA), this section should be defined for every PostgreSQL cluster in the distributed database. Bootstrap the Replica Cluster : Streaming Bootstrap : Use the pg_basebackup section for bootstrapping via streaming replication. Snapshot/Object Store Bootstrap : Use the recovery section to bootstrap from a volume snapshot or an object store. Continuous Recovery Strategy : Define this in the .spec.replica stanza: Distributed Topology : Configure using the primary , source , and self fields along with the distributed topology defined in externalClusters . This allows CloudNativePG to declaratively control the demotion of a primary cluster and the subsequent promotion of a replica cluster using a promotion token. Standalone Replica Cluster : Enable continuous recovery using the enabled option and set the source field to point to an externalClusters name. This configuration is suitable for creating replicas primarily intended for read-only workloads. Both the Distributed Topology and the Standalone Replica Cluster strategies for continuous recovery are thoroughly explained below. Distributed Topology Important The Distributed Topology strategy was introduced in CloudNativePG 1.24. Planning for a Distributed PostgreSQL Database As Dwight Eisenhower famously said, \"Planning is everything\", and this holds true for designing PostgreSQL architectures in Kubernetes. First, conceptualize your distributed topology on paper, and then translate it into a CloudNativePG API configuration. This configuration primarily involves: The externalClusters section, which must be included in every Cluster definition within your distributed PostgreSQL setup. The .spec.replica stanza, specifically the primary , source , and (optionally) self fields. For example, suppose you want to deploy a PostgreSQL cluster distributed across two Kubernetes clusters located in Southern Europe and Central Europe. In this scenario, assume you have CloudNativePG installed in the Southern Europe Kubernetes cluster, with a PostgreSQL Cluster named cluster-eu-south acting as the primary. This cluster has continuous backup configured with a local object store. This object store is also accessible by the PostgreSQL Cluster named cluster-eu-central , installed in the Central European Kubernetes cluster. Initially, cluster-eu-central functions as a replica cluster. Following a symmetric approach, it also has a local object store for continuous backup, which needs to be read by cluster-eu-south . The recovery in this setup relies solely on WAL shipping, with no streaming connection between the two clusters. Here\u2019s how you would configure the externalClusters section for both Cluster resources: # Distributed topology configuration externalClusters: - name: cluster-eu-south barmanObjectStore: destinationPath: s3://cluster-eu-south/ # Additional configuration - name: cluster-eu-central barmanObjectStore: destinationPath: s3://cluster-eu-central/ # Additional configuration The .spec.replica stanza for the cluster-eu-south PostgreSQL primary Cluster should be configured as follows: replica: primary: cluster-eu-south source: cluster-eu-central Meanwhile, the .spec.replica stanza for the cluster-eu-central PostgreSQL replica Cluster should be configured as: replica: primary: cluster-eu-south source: cluster-eu-south In this configuration, when the primary field matches the name of the Cluster resource (or .spec.replica.self if a different one is used), the current cluster is considered the primary in the distributed topology. Otherwise, it is set as a replica from the source (in this case, using the Barman object store). This setup allows you to efficiently manage a distributed PostgreSQL architecture across multiple Kubernetes clusters, ensuring both high availability and disaster recovery through controlled switchover of a primary PostgreSQL cluster using declarative configuration. Controlled switchover in a distributed topology is a two-step process involving: Demotion of a primary cluster to a replica cluster Promotion of a replica cluster to a primary cluster These processes are described in the next sections. Important Before you proceed, ensure you review the \"About PostgreSQL Roles\" section above and use identical role definitions, including secrets, in all Cluster objects participating in the distributed topology. Demoting a Primary to a Replica Cluster CloudNativePG provides the functionality to demote a primary cluster to a replica cluster. This action is typically planned when transitioning the primary role from one data center to another. The process involves demoting the current primary cluster (e.g., cluster-eu-south ) to a replica cluster and subsequently promoting the designated replica cluster (e.g., cluster-eu-central ) to primary when fully synchronized. Provided you have defined an external cluster in the current primary Cluster resource that points to the replica cluster that's been selected to become the new primary, all you need to do is change the primary field as follows: replica: primary: cluster-eu-central source: cluster-eu-central When the primary PostgreSQL cluster is demoted, write operations are no longer possible. CloudNativePG then: Archives the WAL file containing the shutdown checkpoint as a .partial file in the WAL archive. Generates a demotionToken in the status, a base64-encoded JSON structure containing relevant information from pg_controldata such as the system identifier, the timestamp, timeline ID, REDO location, and REDO WAL file of the latest checkpoint. The first step is necessary to demote/promote using solely the WAL archive to feed the continuous recovery process (without streaming replication). The second step, generation of the .status.demotionToken , will ensure a smooth demotion/promotion process, without any data loss and without rebuilding the former primary. At this stage, the former primary has transitioned to a replica cluster, awaiting WAL data from the new global primary: cluster-eu-central . To proceed with promoting the other cluster, you need to retrieve the demotionToken from cluster-eu-south using the following command: kubectl get cluster cluster-eu-south \\ -o jsonpath='{.status.demotionToken}' You can obtain the demotionToken using the cnpg plugin by checking the cluster's status. The token is listed under the Demotion token section. Note The demotionToken obtained from cluster-eu-south will serve as the promotionToken for cluster-eu-central . You can verify the role change using the cnpg plugin, checking the status of the cluster: kubectl cnpg status cluster-eu-south Promoting a Replica to a Primary Cluster To promote a PostgreSQL replica cluster (e.g., cluster-eu-central ) to a primary cluster and make the designated primary an actual primary instance, you need to perform the following steps simultaneously: Set the .spec.replica.primary to the name of the current replica cluster to be promoted (e.g., cluster-eu-central ). Set the .spec.replica.promotionToken with the value obtained from the former primary cluster (refer to \"Demoting a Primary to a Replica Cluster\" ). The updated replica section in cluster-eu-central 's spec should look like this: replica: primary: cluster-eu-central promotionToken: <PROMOTION_TOKEN> source: cluster-eu-south Warning It is crucial to apply the changes to the primary and promotionToken fields simultaneously. If the promotion token is omitted, a failover will be triggered, necessitating a rebuild of the former primary. After making these adjustments, CloudNativePG will initiate the promotion of the replica cluster to a primary cluster. Initially, CloudNativePG will wait for the designated primary cluster to replicate all Write-Ahead Logging (WAL) information up to the specified Log Sequence Number (LSN) contained in the token. Once this target is achieved, the promotion process will commence. The new primary cluster will switch timelines, archive the history file and new WAL, thereby unblocking the replication process in the cluster-eu-south cluster, which will then operate as a replica. To verify the role change, use the cnpg plugin to check the status of the cluster: kubectl cnpg status cluster-eu-central This command will provide you with the current status of cluster-eu-central , confirming its promotion to primary. By following these steps, you ensure a smooth and controlled promotion process, minimizing disruption and maintaining data integrity across your PostgreSQL clusters. Standalone Replica Clusters Important Standalone Replica Clusters were previously known as Replica Clusters before the introduction of the Distributed Topology strategy in CloudNativePG 1.24. In CloudNativePG, a Standalone Replica Cluster is a PostgreSQL cluster in continuous recovery with the following configurations: .spec.replica.enabled set to true A physical replication source defined via the .spec.replica.source field, pointing to an externalClusters name When .spec.replica.enabled is set to false , the replica cluster exits continuous recovery mode and becomes a primary cluster, completely detached from the original source. Warning Disabling replication is an irreversible operation. Once replication is disabled and the designated primary is promoted to primary, the replica cluster and the source cluster become two independent clusters definitively. Important Standalone replica clusters are suitable for several use cases, primarily involving read-only workloads. If you are planning to setup a disaster recovery solution, look into \"Distributed Topology\" above. Main Differences with Distributed Topology Although Standalone Replica Clusters can be used for disaster recovery purposes, they differ from the \"Distributed Topology\" strategy in several key ways: Lack of Distributed Database Concept : Standalone Replica Clusters do not support the concept of a distributed database, whether in simple forms (two clusters) or more complex configurations (e.g., three clusters in a circular topology). No Global Primary Cluster : There is no notion of a global primary cluster in Standalone Replica Clusters. No Controlled Switchover : A Standalone Replica Cluster can only be promoted to primary. The former primary cluster must be re-cloned, as controlled switchover is not possible. Failover is identical in both strategies, requiring the former primary to be re-cloned if it ever comes back up. Example of Standalone Replica Cluster using pg_basebackup This first example defines a standalone replica cluster using streaming replication in both bootstrap and continuous recovery. The replica cluster connects to the source cluster using TLS authentication. You can check the sample YAML in the samples/ subdirectory. Note the bootstrap and replica sections pointing to the source cluster. bootstrap: pg_basebackup: source: cluster-example replica: enabled: true source: cluster-example The previous configuration assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. In the externalClusters section, remember to use the right namespace for the host in the connectionParameters sub-section. The -replication and -ca secrets should have been copied over if necessary, in case the replica cluster is in a separate namespace. externalClusters: - name: <MAIN-CLUSTER> connectionParameters: host: <MAIN-CLUSTER>-rw.<NAMESPACE>.svc user: streaming_replica sslmode: verify-full dbname: postgres sslKey: name: <MAIN-CLUSTER>-replication key: tls.key sslCert: name: <MAIN-CLUSTER>-replication key: tls.crt sslRootCert: name: <MAIN-CLUSTER>-ca key: ca.crt Example of Standalone Replica Cluster from an object store The second example defines a replica cluster that bootstraps from an object store using the recovery section and continuous recovery using both streaming replication and the given object store. For streaming replication, the replica cluster connects to the source cluster using basic authentication. You can check the sample YAML for it in the samples/ subdirectory. Note the bootstrap and replica sections pointing to the source cluster. bootstrap: recovery: source: cluster-example replica: enabled: true source: cluster-example The previous configuration assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. In the externalClusters section, take care to use the right namespace in the endpointURL and the connectionParameters.host . And do ensure that the necessary secrets have been copied if necessary, and that a backup of the source cluster has been created already. externalClusters: - name: <MAIN-CLUSTER> barmanObjectStore: destinationPath: s3://backups/ endpointURL: http://minio:9000 s3Credentials: \u2026 connectionParameters: host: <MAIN-CLUSTER>-rw.default.svc user: postgres dbname: postgres password: name: <MAIN-CLUSTER>-superuser key: password Note To use streaming replication between the source cluster and the replica cluster, we need to make sure there is network connectivity between the two clusters, and that all the necessary secrets which hold passwords or certificates are properly created in advance. Example using a Volume Snapshot If you use volume snapshots and your storage class provides snapshots cross-cluster availability, you can leverage that to bootstrap a replica cluster through a volume snapshot of the source cluster. The third example defines a replica cluster that bootstraps from a volume snapshot using the recovery section. It uses streaming replication (via basic authentication) and the object store to fetch the WAL files. You can check the sample YAML for it in the samples/ subdirectory. The example assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. Delayed replicas CloudNativePG supports the creation of delayed replicas through the .spec.replica.minApplyDelay option , leveraging PostgreSQL's recovery_min_apply_delay . Delayed replicas are designed to intentionally lag behind the primary database by a specified amount of time. This delay is configurable using the .spec.replica.minApplyDelay option, which maps to the underlying recovery_min_apply_delay parameter in PostgreSQL. The primary objective of delayed replicas is to mitigate the impact of unintended SQL statement executions on the primary database. This is especially useful in scenarios where operations such as UPDATE or DELETE are performed without a proper WHERE clause. To configure a delay in a replica cluster, adjust the .spec.replica.minApplyDelay option. This parameter determines how much time the replicas will lag behind the primary. For example: # ... replica: enabled: true source: cluster-example # Enforce a delay of 8 hours minApplyDelay: '8h' # ... The above example helps safeguard against accidental data modifications by providing a buffer period of 8 hours to detect and correct issues before they propagate to the replicas. Monitor and adjust the delay as needed based on your recovery time objectives and the potential impact of unintended primary database operations. The main use cases of delayed replicas can be summarized into: mitigating human errors: reduce the risk of data corruption or loss resulting from unintentional SQL operations on the primary database recovery time optimization: facilitate quicker recovery from unintended changes by having a delayed replica that allows you to identify and rectify issues before changes are applied to other replicas. enhanced data protection: safeguard critical data by introducing a time buffer that provides an opportunity to intervene and prevent the propagation of undesirable changes. Warning The minApplyDelay option of delayed replicas cannot be used in conjunction with promotionToken . By integrating delayed replicas into your replication strategy, you can enhance the resilience and data protection capabilities of your PostgreSQL environment. Adjust the delay duration based on your specific needs and the criticality of your data. Important Always measure your goals. Depending on your environment, it might be more efficient to rely on volume snapshot-based recovery for faster outcomes. Evaluate and choose the approach that best aligns with your unique requirements and infrastructure.","title":"Replica clusters"},{"location":"replica_cluster/#replica-clusters","text":"Warning With the deprecation of native Barman Cloud support in CloudNativePG in favor of the Barman Cloud Plugin, this page\u2014and the backup and recovery documentation\u2014may undergo changes before the official release of version 1.26.0. A replica cluster is a CloudNativePG Cluster resource designed to replicate data from another PostgreSQL instance, ideally also managed by CloudNativePG. Typically, a replica cluster is deployed in a different Kubernetes cluster in another region. These clusters can be configured to perform cascading replication and can rely on object stores for data replication from the source, as detailed further down. There are primarily two use cases for replica clusters: Disaster Recovery and High Availability : Enhance disaster recovery and, to some extent, high availability of a CloudNativePG cluster across different Kubernetes clusters, typically located in different regions. In CloudNativePG terms, this is known as a \"Distributed Topology\" . Read-Only Workloads : Create standalone replicas of a PostgreSQL cluster for purposes such as reporting or Online Analytical Processing (OLAP). These replicas are primarily for read-only workloads. In CloudNativePG terms, this is referred to as a \"Standalone Replica Cluster\" . For example, the diagram below \u2014 taken from the \"Architecture\" section \u2014 illustrates a distributed PostgreSQL topology spanning two Kubernetes clusters, with a symmetric replica cluster primarily serving disaster recovery purposes.","title":"Replica clusters"},{"location":"replica_cluster/#basic-concepts","text":"CloudNativePG builds on the PostgreSQL replication framework, allowing you to create and synchronize a PostgreSQL cluster from an existing source cluster using the replica cluster feature \u2014 described in this section. The source can be a primary cluster or another replica cluster (cascading replication).","title":"Basic Concepts"},{"location":"replica_cluster/#about-postgresql-roles","text":"A replica cluster operates in continuous recovery mode, meaning no changes to the database, including the catalog and global objects like roles or databases, are permitted. These changes are deferred until the Cluster transitions to primary. During this phase, global objects such as roles remain as defined in the source cluster. CloudNativePG applies any local redefinitions once the cluster is promoted. If you are not planning to promote the cluster (e.g., for read-only workloads) or if you intend to detach completely from the source cluster once the replica cluster is promoted, you don't need to take any action. This is normally the case of the \"Standalone Replica Cluster\" . If you are planning to promote the cluster at some point, CloudNativePG will manage the following roles and passwords when transitioning from replica cluster to primary: the application user the superuser (if you are using it) any role defined using the declarative interface If your intention is to seamlessly ensure that the above roles and passwords don't change, you need to define the necessary secrets for the above in each Cluster . This is normally the case of the \"Distributed Topology\" .","title":"About PostgreSQL Roles"},{"location":"replica_cluster/#bootstrapping-a-replica-cluster","text":"The first step is to bootstrap the replica cluster using one of the following methods: Streaming replication via pg_basebackup Recovery from a volume snapshot Recovery from a Barman Cloud backup in an object store For detailed instructions on cloning a PostgreSQL server using pg_basebackup (streaming) or recovery (volume snapshot or object store), refer to the \"Bootstrap\" section .","title":"Bootstrapping a Replica Cluster"},{"location":"replica_cluster/#configuring-replication","text":"Once the base backup for the replica cluster is available, you need to define how changes will be replicated from the origin using PostgreSQL continuous recovery. There are three main options: Streaming Replication : Set up streaming replication between the replica cluster and the source. This method requires configuring network connections and implementing appropriate administrative and security measures to ensure seamless data transfer. WAL Archive : Use the WAL (Write-Ahead Logging) archive stored in an object store. WAL files are regularly transferred from the source cluster to the object store, from where the barman-cloud-wal-restore utility retrieves them for the replica cluster. Hybrid Approach : Combine both streaming replication and WAL archive methods. PostgreSQL can manage and switch between these two approaches as needed to ensure data consistency and availability.","title":"Configuring Replication"},{"location":"replica_cluster/#defining-an-external-cluster","text":"When configuring the external cluster, you have the following options: barmanObjectStore section : Enables use of the WAL archive, with CloudNativePG automatically setting the restore_command in the designated primary instance. Allows bootstrapping the replica cluster from an object store using the recovery section if volume snapshots are not feasible. connectionParameters section : Enables bootstrapping the replica cluster via streaming replication using the pg_basebackup section. CloudNativePG automatically sets the primary_conninfo option in the designated primary instance, initiating a WAL receiver process to connect to the source cluster and receive data.","title":"Defining an External Cluster"},{"location":"replica_cluster/#backup-and-symmetric-architectures","text":"The replica cluster can perform backups to a reserved object store from the designated primary, supporting symmetric architectures in a distributed environment. This architectural choice is crucial as it ensures the cluster is prepared for promotion during a controlled data center switchover or a failover following an unexpected event.","title":"Backup and Symmetric Architectures"},{"location":"replica_cluster/#distributed-architecture-flexibility","text":"You have the flexibility to design your preferred distributed architecture for a PostgreSQL database, choosing from: Private Cloud : Spanning multiple Kubernetes clusters in different data centers. Public Cloud : Spanning multiple Kubernetes clusters in different regions. Hybrid Cloud : Combining private and public clouds. Multi-Cloud : Spanning multiple Kubernetes clusters across different regions and Cloud Service Providers.","title":"Distributed Architecture Flexibility"},{"location":"replica_cluster/#setting-up-a-replica-cluster","text":"To set up a replica cluster from a source cluster, follow these steps to create a cluster YAML file and configure it accordingly: Define External Clusters : In the externalClusters section, specify the replica cluster. For a distributed PostgreSQL topology aimed at disaster recovery (DR) and high availability (HA), this section should be defined for every PostgreSQL cluster in the distributed database. Bootstrap the Replica Cluster : Streaming Bootstrap : Use the pg_basebackup section for bootstrapping via streaming replication. Snapshot/Object Store Bootstrap : Use the recovery section to bootstrap from a volume snapshot or an object store. Continuous Recovery Strategy : Define this in the .spec.replica stanza: Distributed Topology : Configure using the primary , source , and self fields along with the distributed topology defined in externalClusters . This allows CloudNativePG to declaratively control the demotion of a primary cluster and the subsequent promotion of a replica cluster using a promotion token. Standalone Replica Cluster : Enable continuous recovery using the enabled option and set the source field to point to an externalClusters name. This configuration is suitable for creating replicas primarily intended for read-only workloads. Both the Distributed Topology and the Standalone Replica Cluster strategies for continuous recovery are thoroughly explained below.","title":"Setting Up a Replica Cluster"},{"location":"replica_cluster/#distributed-topology","text":"Important The Distributed Topology strategy was introduced in CloudNativePG 1.24.","title":"Distributed Topology"},{"location":"replica_cluster/#planning-for-a-distributed-postgresql-database","text":"As Dwight Eisenhower famously said, \"Planning is everything\", and this holds true for designing PostgreSQL architectures in Kubernetes. First, conceptualize your distributed topology on paper, and then translate it into a CloudNativePG API configuration. This configuration primarily involves: The externalClusters section, which must be included in every Cluster definition within your distributed PostgreSQL setup. The .spec.replica stanza, specifically the primary , source , and (optionally) self fields. For example, suppose you want to deploy a PostgreSQL cluster distributed across two Kubernetes clusters located in Southern Europe and Central Europe. In this scenario, assume you have CloudNativePG installed in the Southern Europe Kubernetes cluster, with a PostgreSQL Cluster named cluster-eu-south acting as the primary. This cluster has continuous backup configured with a local object store. This object store is also accessible by the PostgreSQL Cluster named cluster-eu-central , installed in the Central European Kubernetes cluster. Initially, cluster-eu-central functions as a replica cluster. Following a symmetric approach, it also has a local object store for continuous backup, which needs to be read by cluster-eu-south . The recovery in this setup relies solely on WAL shipping, with no streaming connection between the two clusters. Here\u2019s how you would configure the externalClusters section for both Cluster resources: # Distributed topology configuration externalClusters: - name: cluster-eu-south barmanObjectStore: destinationPath: s3://cluster-eu-south/ # Additional configuration - name: cluster-eu-central barmanObjectStore: destinationPath: s3://cluster-eu-central/ # Additional configuration The .spec.replica stanza for the cluster-eu-south PostgreSQL primary Cluster should be configured as follows: replica: primary: cluster-eu-south source: cluster-eu-central Meanwhile, the .spec.replica stanza for the cluster-eu-central PostgreSQL replica Cluster should be configured as: replica: primary: cluster-eu-south source: cluster-eu-south In this configuration, when the primary field matches the name of the Cluster resource (or .spec.replica.self if a different one is used), the current cluster is considered the primary in the distributed topology. Otherwise, it is set as a replica from the source (in this case, using the Barman object store). This setup allows you to efficiently manage a distributed PostgreSQL architecture across multiple Kubernetes clusters, ensuring both high availability and disaster recovery through controlled switchover of a primary PostgreSQL cluster using declarative configuration. Controlled switchover in a distributed topology is a two-step process involving: Demotion of a primary cluster to a replica cluster Promotion of a replica cluster to a primary cluster These processes are described in the next sections. Important Before you proceed, ensure you review the \"About PostgreSQL Roles\" section above and use identical role definitions, including secrets, in all Cluster objects participating in the distributed topology.","title":"Planning for a Distributed PostgreSQL Database"},{"location":"replica_cluster/#demoting-a-primary-to-a-replica-cluster","text":"CloudNativePG provides the functionality to demote a primary cluster to a replica cluster. This action is typically planned when transitioning the primary role from one data center to another. The process involves demoting the current primary cluster (e.g., cluster-eu-south ) to a replica cluster and subsequently promoting the designated replica cluster (e.g., cluster-eu-central ) to primary when fully synchronized. Provided you have defined an external cluster in the current primary Cluster resource that points to the replica cluster that's been selected to become the new primary, all you need to do is change the primary field as follows: replica: primary: cluster-eu-central source: cluster-eu-central When the primary PostgreSQL cluster is demoted, write operations are no longer possible. CloudNativePG then: Archives the WAL file containing the shutdown checkpoint as a .partial file in the WAL archive. Generates a demotionToken in the status, a base64-encoded JSON structure containing relevant information from pg_controldata such as the system identifier, the timestamp, timeline ID, REDO location, and REDO WAL file of the latest checkpoint. The first step is necessary to demote/promote using solely the WAL archive to feed the continuous recovery process (without streaming replication). The second step, generation of the .status.demotionToken , will ensure a smooth demotion/promotion process, without any data loss and without rebuilding the former primary. At this stage, the former primary has transitioned to a replica cluster, awaiting WAL data from the new global primary: cluster-eu-central . To proceed with promoting the other cluster, you need to retrieve the demotionToken from cluster-eu-south using the following command: kubectl get cluster cluster-eu-south \\ -o jsonpath='{.status.demotionToken}' You can obtain the demotionToken using the cnpg plugin by checking the cluster's status. The token is listed under the Demotion token section. Note The demotionToken obtained from cluster-eu-south will serve as the promotionToken for cluster-eu-central . You can verify the role change using the cnpg plugin, checking the status of the cluster: kubectl cnpg status cluster-eu-south","title":"Demoting a Primary to a Replica Cluster"},{"location":"replica_cluster/#promoting-a-replica-to-a-primary-cluster","text":"To promote a PostgreSQL replica cluster (e.g., cluster-eu-central ) to a primary cluster and make the designated primary an actual primary instance, you need to perform the following steps simultaneously: Set the .spec.replica.primary to the name of the current replica cluster to be promoted (e.g., cluster-eu-central ). Set the .spec.replica.promotionToken with the value obtained from the former primary cluster (refer to \"Demoting a Primary to a Replica Cluster\" ). The updated replica section in cluster-eu-central 's spec should look like this: replica: primary: cluster-eu-central promotionToken: <PROMOTION_TOKEN> source: cluster-eu-south Warning It is crucial to apply the changes to the primary and promotionToken fields simultaneously. If the promotion token is omitted, a failover will be triggered, necessitating a rebuild of the former primary. After making these adjustments, CloudNativePG will initiate the promotion of the replica cluster to a primary cluster. Initially, CloudNativePG will wait for the designated primary cluster to replicate all Write-Ahead Logging (WAL) information up to the specified Log Sequence Number (LSN) contained in the token. Once this target is achieved, the promotion process will commence. The new primary cluster will switch timelines, archive the history file and new WAL, thereby unblocking the replication process in the cluster-eu-south cluster, which will then operate as a replica. To verify the role change, use the cnpg plugin to check the status of the cluster: kubectl cnpg status cluster-eu-central This command will provide you with the current status of cluster-eu-central , confirming its promotion to primary. By following these steps, you ensure a smooth and controlled promotion process, minimizing disruption and maintaining data integrity across your PostgreSQL clusters.","title":"Promoting a Replica to a Primary Cluster"},{"location":"replica_cluster/#standalone-replica-clusters","text":"Important Standalone Replica Clusters were previously known as Replica Clusters before the introduction of the Distributed Topology strategy in CloudNativePG 1.24. In CloudNativePG, a Standalone Replica Cluster is a PostgreSQL cluster in continuous recovery with the following configurations: .spec.replica.enabled set to true A physical replication source defined via the .spec.replica.source field, pointing to an externalClusters name When .spec.replica.enabled is set to false , the replica cluster exits continuous recovery mode and becomes a primary cluster, completely detached from the original source. Warning Disabling replication is an irreversible operation. Once replication is disabled and the designated primary is promoted to primary, the replica cluster and the source cluster become two independent clusters definitively. Important Standalone replica clusters are suitable for several use cases, primarily involving read-only workloads. If you are planning to setup a disaster recovery solution, look into \"Distributed Topology\" above.","title":"Standalone Replica Clusters"},{"location":"replica_cluster/#main-differences-with-distributed-topology","text":"Although Standalone Replica Clusters can be used for disaster recovery purposes, they differ from the \"Distributed Topology\" strategy in several key ways: Lack of Distributed Database Concept : Standalone Replica Clusters do not support the concept of a distributed database, whether in simple forms (two clusters) or more complex configurations (e.g., three clusters in a circular topology). No Global Primary Cluster : There is no notion of a global primary cluster in Standalone Replica Clusters. No Controlled Switchover : A Standalone Replica Cluster can only be promoted to primary. The former primary cluster must be re-cloned, as controlled switchover is not possible. Failover is identical in both strategies, requiring the former primary to be re-cloned if it ever comes back up.","title":"Main Differences with Distributed Topology"},{"location":"replica_cluster/#example-of-standalone-replica-cluster-using-pg_basebackup","text":"This first example defines a standalone replica cluster using streaming replication in both bootstrap and continuous recovery. The replica cluster connects to the source cluster using TLS authentication. You can check the sample YAML in the samples/ subdirectory. Note the bootstrap and replica sections pointing to the source cluster. bootstrap: pg_basebackup: source: cluster-example replica: enabled: true source: cluster-example The previous configuration assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. In the externalClusters section, remember to use the right namespace for the host in the connectionParameters sub-section. The -replication and -ca secrets should have been copied over if necessary, in case the replica cluster is in a separate namespace. externalClusters: - name: <MAIN-CLUSTER> connectionParameters: host: <MAIN-CLUSTER>-rw.<NAMESPACE>.svc user: streaming_replica sslmode: verify-full dbname: postgres sslKey: name: <MAIN-CLUSTER>-replication key: tls.key sslCert: name: <MAIN-CLUSTER>-replication key: tls.crt sslRootCert: name: <MAIN-CLUSTER>-ca key: ca.crt","title":"Example of Standalone Replica Cluster using pg_basebackup"},{"location":"replica_cluster/#example-of-standalone-replica-cluster-from-an-object-store","text":"The second example defines a replica cluster that bootstraps from an object store using the recovery section and continuous recovery using both streaming replication and the given object store. For streaming replication, the replica cluster connects to the source cluster using basic authentication. You can check the sample YAML for it in the samples/ subdirectory. Note the bootstrap and replica sections pointing to the source cluster. bootstrap: recovery: source: cluster-example replica: enabled: true source: cluster-example The previous configuration assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. In the externalClusters section, take care to use the right namespace in the endpointURL and the connectionParameters.host . And do ensure that the necessary secrets have been copied if necessary, and that a backup of the source cluster has been created already. externalClusters: - name: <MAIN-CLUSTER> barmanObjectStore: destinationPath: s3://backups/ endpointURL: http://minio:9000 s3Credentials: \u2026 connectionParameters: host: <MAIN-CLUSTER>-rw.default.svc user: postgres dbname: postgres password: name: <MAIN-CLUSTER>-superuser key: password Note To use streaming replication between the source cluster and the replica cluster, we need to make sure there is network connectivity between the two clusters, and that all the necessary secrets which hold passwords or certificates are properly created in advance.","title":"Example of Standalone Replica Cluster from an object store"},{"location":"replica_cluster/#example-using-a-volume-snapshot","text":"If you use volume snapshots and your storage class provides snapshots cross-cluster availability, you can leverage that to bootstrap a replica cluster through a volume snapshot of the source cluster. The third example defines a replica cluster that bootstraps from a volume snapshot using the recovery section. It uses streaming replication (via basic authentication) and the object store to fetch the WAL files. You can check the sample YAML for it in the samples/ subdirectory. The example assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details.","title":"Example using a Volume Snapshot"},{"location":"replica_cluster/#delayed-replicas","text":"CloudNativePG supports the creation of delayed replicas through the .spec.replica.minApplyDelay option , leveraging PostgreSQL's recovery_min_apply_delay . Delayed replicas are designed to intentionally lag behind the primary database by a specified amount of time. This delay is configurable using the .spec.replica.minApplyDelay option, which maps to the underlying recovery_min_apply_delay parameter in PostgreSQL. The primary objective of delayed replicas is to mitigate the impact of unintended SQL statement executions on the primary database. This is especially useful in scenarios where operations such as UPDATE or DELETE are performed without a proper WHERE clause. To configure a delay in a replica cluster, adjust the .spec.replica.minApplyDelay option. This parameter determines how much time the replicas will lag behind the primary. For example: # ... replica: enabled: true source: cluster-example # Enforce a delay of 8 hours minApplyDelay: '8h' # ... The above example helps safeguard against accidental data modifications by providing a buffer period of 8 hours to detect and correct issues before they propagate to the replicas. Monitor and adjust the delay as needed based on your recovery time objectives and the potential impact of unintended primary database operations. The main use cases of delayed replicas can be summarized into: mitigating human errors: reduce the risk of data corruption or loss resulting from unintentional SQL operations on the primary database recovery time optimization: facilitate quicker recovery from unintended changes by having a delayed replica that allows you to identify and rectify issues before changes are applied to other replicas. enhanced data protection: safeguard critical data by introducing a time buffer that provides an opportunity to intervene and prevent the propagation of undesirable changes. Warning The minApplyDelay option of delayed replicas cannot be used in conjunction with promotionToken . By integrating delayed replicas into your replication strategy, you can enhance the resilience and data protection capabilities of your PostgreSQL environment. Adjust the delay duration based on your specific needs and the criticality of your data. Important Always measure your goals. Depending on your environment, it might be more efficient to rely on volume snapshot-based recovery for faster outcomes. Evaluate and choose the approach that best aligns with your unique requirements and infrastructure.","title":"Delayed replicas"},{"location":"replication/","text":"Replication Physical replication is one of the strengths of PostgreSQL and one of the reasons why some of the largest organizations in the world have chosen it for the management of their data in business continuity contexts. Primarily used to achieve high availability, physical replication also allows scale-out of read-only workloads and offloading of some work from the primary. Important This section is about replication within the same Cluster resource managed in the same Kubernetes cluster. For information about how to replicate with another Postgres Cluster resource, even across different Kubernetes clusters, please refer to the \"Replica clusters\" section. Application-level replication Having contributed throughout the years to the replication feature in PostgreSQL, we have decided to build high availability in CloudNativePG on top of the native physical replication technology, and integrate it directly in the Kubernetes API. In Kubernetes terms, this is referred to as application-level replication , in contrast with storage-level replication . A very mature technology PostgreSQL has a very robust and mature native framework for replicating data from the primary instance to one or more replicas, built around the concept of transactional changes continuously stored in the WAL (Write Ahead Log). Started as the evolution of crash recovery and point in time recovery technologies, physical replication was first introduced in PostgreSQL 8.2 (2006) through WAL shipping from the primary to a warm standby in continuous recovery. PostgreSQL 9.0 (2010) introduced WAL streaming and read-only replicas through hot standby . In 2011, PostgreSQL 9.1 brought synchronous replication at the transaction level, supporting RPO =0 clusters. Cascading replication was added in PostgreSQL 9.2 (2012). The foundations for logical replication were established in PostgreSQL 9.4 (2014), and version 10 (2017) introduced native support for the publisher/subscriber pattern to replicate data from an origin to a destination. The table below summarizes these milestones. Version Year Feature 8.2 2006 Warm Standby with WAL shipping 9.0 2010 Hot Standby and physical streaming replication 9.1 2011 Synchronous replication (priority-based) 9.2 2012 Cascading replication 9.4 2014 Foundations of logical replication 10 2017 Logical publisher/subscriber and quorum-based synchronous replication This table highlights key PostgreSQL replication features and their respective versions. Streaming replication support At the moment, CloudNativePG natively and transparently manages physical streaming replicas within a cluster in a declarative way, based on the number of provided instances in the spec : replicas = instances - 1 (where instances > 0) Immediately after the initialization of a cluster, the operator creates a user called streaming_replica as follows: CREATE USER streaming_replica WITH REPLICATION; -- NOSUPERUSER INHERIT NOCREATEROLE NOCREATEDB NOBYPASSRLS Out of the box, the operator automatically sets up streaming replication within the cluster over an encrypted channel and enforces TLS client certificate authentication for the streaming_replica user - as highlighted by the following excerpt taken from pg_hba.conf : # Require client certificate authentication for the streaming_replica user hostssl postgres streaming_replica all cert hostssl replication streaming_replica all cert Certificates For details on how CloudNativePG manages certificates, please refer to the \"Certificates\" section in the documentation. If configured, the operator manages replication slots for all the replicas in the HA cluster, ensuring that WAL files required by each standby are retained on the primary's storage, even after a failover or switchover. Replication slots for High Availability For details on how CloudNativePG automatically manages replication slots for the High Availability replicas, please refer to the \"Replication slots for High Availability\" section below. Continuous backup integration In case continuous backup is configured in the cluster, CloudNativePG transparently configures replicas to take advantage of restore_command when in continuous recovery. As a result, PostgreSQL can use the WAL archive as a fallback option whenever pulling WALs via streaming replication fails. Synchronous Replication CloudNativePG supports both quorum-based and priority-based synchronous replication for PostgreSQL . Warning By default, synchronous replication pauses write operations if the required number of standby nodes for WAL replication during transaction commits is unavailable. This behavior prioritizes data durability and aligns with PostgreSQL DBA best practices. However, if self-healing is a higher priority than strict data durability in your setup, this setting can be adjusted. For details on managing this behavior, refer to the Data Durability and Synchronous Replication section. Direct configuration of the synchronous_standby_names option is not permitted. However, CloudNativePG automatically populates this option with the names of local pods, while also allowing customization to extend synchronous replication beyond the Cluster resource. This can be achieved through the .spec.postgresql.synchronous stanza . Synchronous replication is disabled by default (the synchronous stanza is not defined). When defined, two options are mandatory: method : either any (quorum) or first (priority) number : the number of synchronous standby servers that transactions must wait for responses from Quorum-based Synchronous Replication In PostgreSQL, quorum-based synchronous replication ensures that transaction commits wait until their WAL records are replicated to a specified number of standbys. To enable this, set the method to any . This replication method is the most common setup for a CloudNativePG cluster. Example The example below, based on a typical cluster-example configuration with three instances, sets up quorum-based synchronous replication with at least one instance: postgresql: synchronous: method: any number: 1 With this configuration, CloudNativePG automatically sets the content of synchronous_standby_names as follows: ANY 1 (cluster-example-2, cluster-example-3, cluster-example-1) Migrating from Deprecated Synchronous Replication Implementation This section outlines how to migrate from the deprecated quorum-based synchronous replication format to the newer, more robust implementation in CloudNativePG. Given the following manifest: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: angus spec: instances: 3 minSyncReplicas: 1 maxSyncReplicas: 1 storage: size: 1G You can update it to the new format as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: angus spec: instances: 3 storage: size: 1G postgresql: synchronous: method: any number: 1 dataDurability: required To prioritize self-healing over strict data durability, set dataDurability to preferred instead. Priority-based Synchronous Replication PostgreSQL's priority-based synchronous replication makes transaction commits wait until their WAL records are replicated to the requested number of synchronous standbys chosen based on their priorities. Standbys listed earlier in the synchronous_standby_names option are given higher priority and considered synchronous. If a current synchronous standby disconnects, it is immediately replaced by the next-highest-priority standby. To use this method, set method to first . Important Currently, this method is most useful when extending synchronous replication beyond the current cluster using the maxStandbyNamesFromCluster , standbyNamesPre , and standbyNamesPost options explained below. Controlling synchronous_standby_names Content By default, CloudNativePG populates synchronous_standby_names with the names of local pods in a Cluster resource, ensuring synchronous replication within the PostgreSQL cluster. You can customize the content of synchronous_standby_names based on your requirements and replication method (quorum or priority) using the following optional parameters in the .spec.postgresql.synchronous stanza: maxStandbyNamesFromCluster : the maximum number of pod names from the local Cluster object that can be automatically included in the synchronous_standby_names option in PostgreSQL. standbyNamesPre : a list of standby names (specifically application_name ) to be prepended to the list of local pod names automatically listed by the operator. standbyNamesPost : a list of standby names (specifically application_name ) to be appended to the list of local pod names automatically listed by the operator. Warning You are responsible for ensuring the correct names in standbyNamesPre and standbyNamesPost . CloudNativePG expects that you manage any standby with an application_name listed here, ensuring their high availability. Incorrect entries can jeopardize your PostgreSQL database uptime. Examples Here are some examples, all based on a cluster-example with three instances: If you set: postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus The content of synchronous_standby_names will be: ANY 1 (angus, cluster-example-2) If you set: postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 0 standbyNamesPre: - angus - malcolm The content of synchronous_standby_names will be: ANY 1 (angus, malcolm) If you set: postgresql: synchronous: method: first number: 2 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus standbyNamesPost: - malcolm The synchronous_standby_names option will look like: FIRST 2 (angus, cluster-example-2, malcolm) Data Durability and Synchronous Replication The dataDurability option in the .spec.postgresql.synchronous stanza controls the trade-off between data safety and availability for synchronous replication. It can be set to required or preferred , with the default being required if not specified. Important preferred can only be used when standbyNamesPre and standbyNamesPost are unset. Required Data Durability When dataDurability is set to required , PostgreSQL only considers transactions committed once WAL (Write-Ahead Log) records have been replicated to the specified number of synchronous standbys. This setting prioritizes data safety over availability, meaning write operations will pause if the required number of synchronous standbys is unavailable. This ensures zero data loss (RPO=0) but may reduce database availability during network disruptions or standby failures. Synchronous standbys are selected in this priority order: Healthy instances Unhealthy instances Primary The list is then truncated based on maxStandbyNamesFromCluster if this value is set, prioritizing healthy instances and ensuring synchronous_standby_names is populated. Example Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: foo spec: instances: 3 postgresql: synchronous: method: any number: 1 dataDurability: required Initial state. The content of synchronous_standby_names is: ANY 1 (\"foo-2\",\"foo-3\",\"foo-1\") foo-2 becomes unavailable. It gets pushed back in priority: ANY 1 (\"foo-3\",\"foo-2\",\"foo-1\") foo-3 also becomes unavailable. The list contains no healthy standbys: ANY 1 (\"foo-2\",\"foo-3\",\"foo-1\") At this point no write operations will be allowed until at least one of the standbys is available again. When the standbys are available again, synchronous_standby_names will be back to the initial state. Preferred Data Durability When dataDurability is set to preferred , the required number of synchronous instances adjusts based on the number of available standbys. PostgreSQL will attempt to replicate WAL records to the designated number of synchronous standbys, but write operations will continue even if fewer than the requested number of standbys are available. Important Make sure you have a clear understanding of what ready/available means for a replica and set your expectations accordingly. By default, a replica is considered ready when it has successfully connected to the source at least once. However, CloudNativePG allows you to configure startup and readiness probes for replicas based on maximum lag. For more details, please refer to the \"Postgres instance manager\" section . This setting balances data safety with availability, enabling applications to continue writing during temporary standby unavailability\u2014hence, it\u2019s also known as self-healing mode . Warning This mode may result in data loss if all standbys become unavailable. With preferred data durability, only healthy replicas are included in synchronous_standby_names . Example Consider the following example. For demonstration, we\u2019ll use a cluster named bar with 5 instances and 2 synchronous standbys: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: bar spec: instances: 5 postgresql: synchronous: method: any number: 2 dataDurability: preferred Initial state. The content of synchronous_standby_names is: ANY 2 (\"bar-2\",\"bar-3\", \"bar-4\", \"bar-5\") bar-2 and bar-3 become unavailable. They are removed from the list: ANY 2 (\"bar-4\", \"bar-5\") bar-4 also becomes unavailable. It gets removed from the list. Since the number of available standbys is less than the requested number, the requested amount gets reduced: ANY 1 (\"bar-5\") bar-5 also becomes unavailable. synchronous_standby_names becomes empty, disabling synchronous replication completely. Write operations will continue, but with the risk of potential data loss in case of a primary failure. When the replicas are back, synchronous_standby_names will be back to the initial state. Synchronous Replication (Deprecated) Warning Prior to CloudNativePG 1.24, only the quorum-based synchronous replication implementation was supported. Although this method is now deprecated, it will not be removed anytime soon. The new method prioritizes data durability over self-healing and offers more robust features, including priority-based synchronous replication and full control over the synchronous_standby_names option. It is recommended to gradually migrate to the new configuration method for synchronous replication, as explained in the previous paragraph. Important The deprecated method and the new method are mutually exclusive. CloudNativePG supports the configuration of quorum-based synchronous streaming replication via two configuration options called minSyncReplicas and maxSyncReplicas , which are the minimum and the maximum number of expected synchronous standby replicas available at any time. For self-healing purposes, the operator always compares these two values with the number of available replicas to determine the quorum. Important By default, synchronous replication selects among all the available replicas indistinctively. You can limit on which nodes your synchronous replicas can be scheduled, by working on node labels through the syncReplicaElectionConstraint option as described in the next section. Synchronous replication is disabled by default ( minSyncReplicas and maxSyncReplicas are not defined). In case both minSyncReplicas and maxSyncReplicas are set, CloudNativePG automatically updates the synchronous_standby_names option in PostgreSQL to the following value: ANY q (pod1, pod2, ...) Where: q is an integer automatically calculated by the operator to be: 1 <= minSyncReplicas <= q <= maxSyncReplicas <= readyReplicas pod1, pod2, ... is the list of all PostgreSQL pods in the cluster Warning To provide self-healing capabilities, the operator can ignore minSyncReplicas if such value is higher than the currently available number of replicas. Synchronous replication is automatically disabled when readyReplicas is 0 . As stated in the PostgreSQL documentation , the method ANY specifies a quorum-based synchronous replication and makes transaction commits wait until their WAL records are replicated to at least the requested number of synchronous standbys in the list . Important Even though the operator chooses self-healing over enforcement of synchronous replication settings, our recommendation is to plan for synchronous replication only in clusters with 3+ instances or, more generally, when maxSyncReplicas < (instances - 1) . Select nodes for synchronous replication CloudNativePG enables you to select which PostgreSQL instances are eligible to participate in a quorum-based synchronous replication set through anti-affinity rules based on the node labels where the PVC holding the PGDATA and the Postgres pod are. Scheduling For more information on the general pod affinity and anti-affinity rules, please check the \"Scheduling\" section . Warning The .spec.postgresql.syncReplicaElectionConstraint option only applies to the legacy implementation of synchronous replication (see \"Synchronous Replication (Deprecated)\" ). As an example use-case for this feature: in a cluster with a single sync replica, we would be able to ensure the sync replica will be in a different availability zone from the primary instance, usually identified by the topology.kubernetes.io/zone label on a node . This would increase the robustness of the cluster in case of an outage in a single availability zone, especially in terms of recovery point objective ( RPO ). The idea of anti-affinity is to ensure that sync replicas that participate in the quorum are chosen from pods running on nodes that have different values for the selected labels (in this case, the availability zone label) then the node where the primary is currently in execution. If no node matches such criteria, the replicas are eligible for synchronous replication. Important The self-healing enforcement still applies while defining additional constraints for synchronous replica election (see \"Synchronous replication\" ). The example below shows how this can be done through the syncReplicaElectionConstraint section within .spec.postgresql . nodeLabelsAntiAffinity allows you to specify those node labels that need to be evaluated to make sure that synchronous replication will be dynamically configured by the operator between the current primary and the replicas which are located on nodes having a value of the availability zone label different from that of the node where the primary is: spec: instances: 3 postgresql: syncReplicaElectionConstraint: enabled: true nodeLabelsAntiAffinity: - topology.kubernetes.io/zone As you can imagine, the availability zone is just an example, but you could customize this behavior based on other labels that describe the node, such as storage, CPU, or memory. Replication slots Replication slots are a native PostgreSQL feature introduced in 9.4 that provides an automated way to ensure that the primary does not remove WAL segments until all the attached streaming replication clients have received them, and that the primary does not remove rows which could cause a recovery conflict even when the standby is ( temporarily) disconnected. A replication slot exists solely on the instance that created it, and PostgreSQL does not replicate it on the standby servers. As a result, after a failover or a switchover, the new primary does not contain the replication slot from the old primary. This can create problems for the streaming replication clients that were connected to the old primary and have lost their slot. CloudNativePG provides a turn-key solution to synchronize the content of physical replication slots from the primary to each standby, addressing two use cases: the replication slots automatically created for the High Availability of the Postgres cluster ( see \"Replication slots for High Availability\" below for details) user-defined replication slots created on the primary Replication slots for High Availability CloudNativePG fills this gap by introducing the concept of cluster-managed replication slots, starting with high availability clusters. This feature automatically manages physical replication slots for each hot standby replica in the High Availability cluster, both in the primary and the standby. In CloudNativePG, we use the terms: Primary HA slot : a physical replication slot whose lifecycle is entirely managed by the current primary of the cluster and whose purpose is to map to a specific standby in streaming replication. Such a slot lives on the primary only. Standby HA slot : a physical replication slot for a standby whose lifecycle is entirely managed by another standby in the cluster, based on the content of the pg_replication_slots view in the primary, and updated at regular intervals using pg_replication_slot_advance() . This feature is enabled by default and can be disabled via configuration. For details, please refer to the \"replicationSlots\" section in the API reference . Here follows a brief description of the main options: .spec.replicationSlots.highAvailability.enabled if true , the feature is enabled ( true is the default) .spec.replicationSlots.highAvailability.slotPrefix the prefix that identifies replication slots managed by the operator for this feature (default: _cnpg_ ) .spec.replicationSlots.updateInterval how often the standby synchronizes the position of the local copy of the replication slots with the position on the current primary, expressed in seconds (default: 30) Although it is not recommended, if you desire a different behavior, you can customize the above options. For example, the following manifest will create a cluster with replication slots disabled. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 # Disable replication slots for HA in the cluster replicationSlots: highAvailability: enabled: false storage: size: 1Gi User-Defined Replication slots Although CloudNativePG doesn't support a way to declaratively define physical replication slots, you can still create your own slots via SQL . Information At the moment, we don't have any plans to manage replication slots in a declarative way, but it might change depending on the feedback we receive from users. The reason is that replication slots exist for a specific purpose and each should be managed by a specific application the oversees the entire lifecycle of the slot on the primary. CloudNativePG can manage the synchronization of any user managed physical replication slots between the primary and standbys, similarly to what it does for the HA replication slots explained above (the only difference is that you need to create the replication slot). This feature is enabled by default (meaning that any replication slot is synchronized), but you can disable it or further customize its behavior (for example by excluding some slots using regular expressions) through the synchronizeReplicas stanza. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 replicationSlots: synchronizeReplicas: enabled: true excludePatterns: - \"^foo\" For details, please refer to the \"replicationSlots\" section in the API reference . Here follows a brief description of the main options: .spec.replicationSlots.synchronizeReplicas.enabled When true or not specified, every user-defined replication slot on the primary is synchronized on each standby. If changed to false, the operator will remove any replication slot previously created by itself on each standby. .spec.replicationSlots.synchronizeReplicas.excludePatterns A list of regular expression patterns to match the names of user-defined replication slots to be excluded from synchronization. This can be useful to exclude specific slots based on naming conventions. Warning Users utilizing this feature should carefully monitor user-defined replication slots to ensure they align with their operational requirements and do not interfere with the failover process. Synchronization frequency You can also control the frequency with which a standby queries the pg_replication_slots view on the primary, and updates its local copy of the replication slots, like in this example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 # Reduce the frequency of standby HA slots updates to once every 5 minutes replicationSlots: updateInterval: 300 storage: size: 1Gi Capping the WAL size retained for replication slots When replication slots is enabled, you might end up running out of disk space due to PostgreSQL trying to retain WAL files requested by a replication slot. This might happen due to a standby that is (temporarily?) down, or lagging, or simply an orphan replication slot. Starting with PostgreSQL 13, you can take advantage of the max_slot_wal_keep_size configuration option controlling the maximum size of WAL files that replication slots are allowed to retain in the pg_wal directory at checkpoint time. By default, in PostgreSQL max_slot_wal_keep_size is set to -1 , meaning that replication slots may retain an unlimited amount of WAL files. As a result, our recommendation is to explicitly set max_slot_wal_keep_size when replication slots support is enabled. For example: # ... postgresql: parameters: max_slot_wal_keep_size: \"10GB\" # ... Monitoring replication slots Replication slots must be carefully monitored in your infrastructure. By default, we provide the pg_replication_slots metric in our Prometheus exporter with key information such as the name of the slot, the type, whether it is active, the lag from the primary. Monitoring Please refer to the \"Monitoring\" section for details on how to monitor a CloudNativePG deployment.","title":"Replication"},{"location":"replication/#replication","text":"Physical replication is one of the strengths of PostgreSQL and one of the reasons why some of the largest organizations in the world have chosen it for the management of their data in business continuity contexts. Primarily used to achieve high availability, physical replication also allows scale-out of read-only workloads and offloading of some work from the primary. Important This section is about replication within the same Cluster resource managed in the same Kubernetes cluster. For information about how to replicate with another Postgres Cluster resource, even across different Kubernetes clusters, please refer to the \"Replica clusters\" section.","title":"Replication"},{"location":"replication/#application-level-replication","text":"Having contributed throughout the years to the replication feature in PostgreSQL, we have decided to build high availability in CloudNativePG on top of the native physical replication technology, and integrate it directly in the Kubernetes API. In Kubernetes terms, this is referred to as application-level replication , in contrast with storage-level replication .","title":"Application-level replication"},{"location":"replication/#a-very-mature-technology","text":"PostgreSQL has a very robust and mature native framework for replicating data from the primary instance to one or more replicas, built around the concept of transactional changes continuously stored in the WAL (Write Ahead Log). Started as the evolution of crash recovery and point in time recovery technologies, physical replication was first introduced in PostgreSQL 8.2 (2006) through WAL shipping from the primary to a warm standby in continuous recovery. PostgreSQL 9.0 (2010) introduced WAL streaming and read-only replicas through hot standby . In 2011, PostgreSQL 9.1 brought synchronous replication at the transaction level, supporting RPO =0 clusters. Cascading replication was added in PostgreSQL 9.2 (2012). The foundations for logical replication were established in PostgreSQL 9.4 (2014), and version 10 (2017) introduced native support for the publisher/subscriber pattern to replicate data from an origin to a destination. The table below summarizes these milestones. Version Year Feature 8.2 2006 Warm Standby with WAL shipping 9.0 2010 Hot Standby and physical streaming replication 9.1 2011 Synchronous replication (priority-based) 9.2 2012 Cascading replication 9.4 2014 Foundations of logical replication 10 2017 Logical publisher/subscriber and quorum-based synchronous replication This table highlights key PostgreSQL replication features and their respective versions.","title":"A very mature technology"},{"location":"replication/#streaming-replication-support","text":"At the moment, CloudNativePG natively and transparently manages physical streaming replicas within a cluster in a declarative way, based on the number of provided instances in the spec : replicas = instances - 1 (where instances > 0) Immediately after the initialization of a cluster, the operator creates a user called streaming_replica as follows: CREATE USER streaming_replica WITH REPLICATION; -- NOSUPERUSER INHERIT NOCREATEROLE NOCREATEDB NOBYPASSRLS Out of the box, the operator automatically sets up streaming replication within the cluster over an encrypted channel and enforces TLS client certificate authentication for the streaming_replica user - as highlighted by the following excerpt taken from pg_hba.conf : # Require client certificate authentication for the streaming_replica user hostssl postgres streaming_replica all cert hostssl replication streaming_replica all cert Certificates For details on how CloudNativePG manages certificates, please refer to the \"Certificates\" section in the documentation. If configured, the operator manages replication slots for all the replicas in the HA cluster, ensuring that WAL files required by each standby are retained on the primary's storage, even after a failover or switchover. Replication slots for High Availability For details on how CloudNativePG automatically manages replication slots for the High Availability replicas, please refer to the \"Replication slots for High Availability\" section below.","title":"Streaming replication support"},{"location":"replication/#continuous-backup-integration","text":"In case continuous backup is configured in the cluster, CloudNativePG transparently configures replicas to take advantage of restore_command when in continuous recovery. As a result, PostgreSQL can use the WAL archive as a fallback option whenever pulling WALs via streaming replication fails.","title":"Continuous backup integration"},{"location":"replication/#synchronous-replication","text":"CloudNativePG supports both quorum-based and priority-based synchronous replication for PostgreSQL . Warning By default, synchronous replication pauses write operations if the required number of standby nodes for WAL replication during transaction commits is unavailable. This behavior prioritizes data durability and aligns with PostgreSQL DBA best practices. However, if self-healing is a higher priority than strict data durability in your setup, this setting can be adjusted. For details on managing this behavior, refer to the Data Durability and Synchronous Replication section. Direct configuration of the synchronous_standby_names option is not permitted. However, CloudNativePG automatically populates this option with the names of local pods, while also allowing customization to extend synchronous replication beyond the Cluster resource. This can be achieved through the .spec.postgresql.synchronous stanza . Synchronous replication is disabled by default (the synchronous stanza is not defined). When defined, two options are mandatory: method : either any (quorum) or first (priority) number : the number of synchronous standby servers that transactions must wait for responses from","title":"Synchronous Replication"},{"location":"replication/#quorum-based-synchronous-replication","text":"In PostgreSQL, quorum-based synchronous replication ensures that transaction commits wait until their WAL records are replicated to a specified number of standbys. To enable this, set the method to any . This replication method is the most common setup for a CloudNativePG cluster.","title":"Quorum-based Synchronous Replication"},{"location":"replication/#example","text":"The example below, based on a typical cluster-example configuration with three instances, sets up quorum-based synchronous replication with at least one instance: postgresql: synchronous: method: any number: 1 With this configuration, CloudNativePG automatically sets the content of synchronous_standby_names as follows: ANY 1 (cluster-example-2, cluster-example-3, cluster-example-1)","title":"Example"},{"location":"replication/#migrating-from-deprecated-synchronous-replication-implementation","text":"This section outlines how to migrate from the deprecated quorum-based synchronous replication format to the newer, more robust implementation in CloudNativePG. Given the following manifest: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: angus spec: instances: 3 minSyncReplicas: 1 maxSyncReplicas: 1 storage: size: 1G You can update it to the new format as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: angus spec: instances: 3 storage: size: 1G postgresql: synchronous: method: any number: 1 dataDurability: required To prioritize self-healing over strict data durability, set dataDurability to preferred instead.","title":"Migrating from Deprecated Synchronous Replication Implementation"},{"location":"replication/#priority-based-synchronous-replication","text":"PostgreSQL's priority-based synchronous replication makes transaction commits wait until their WAL records are replicated to the requested number of synchronous standbys chosen based on their priorities. Standbys listed earlier in the synchronous_standby_names option are given higher priority and considered synchronous. If a current synchronous standby disconnects, it is immediately replaced by the next-highest-priority standby. To use this method, set method to first . Important Currently, this method is most useful when extending synchronous replication beyond the current cluster using the maxStandbyNamesFromCluster , standbyNamesPre , and standbyNamesPost options explained below.","title":"Priority-based Synchronous Replication"},{"location":"replication/#controlling-synchronous_standby_names-content","text":"By default, CloudNativePG populates synchronous_standby_names with the names of local pods in a Cluster resource, ensuring synchronous replication within the PostgreSQL cluster. You can customize the content of synchronous_standby_names based on your requirements and replication method (quorum or priority) using the following optional parameters in the .spec.postgresql.synchronous stanza: maxStandbyNamesFromCluster : the maximum number of pod names from the local Cluster object that can be automatically included in the synchronous_standby_names option in PostgreSQL. standbyNamesPre : a list of standby names (specifically application_name ) to be prepended to the list of local pod names automatically listed by the operator. standbyNamesPost : a list of standby names (specifically application_name ) to be appended to the list of local pod names automatically listed by the operator. Warning You are responsible for ensuring the correct names in standbyNamesPre and standbyNamesPost . CloudNativePG expects that you manage any standby with an application_name listed here, ensuring their high availability. Incorrect entries can jeopardize your PostgreSQL database uptime.","title":"Controlling synchronous_standby_names Content"},{"location":"replication/#examples","text":"Here are some examples, all based on a cluster-example with three instances: If you set: postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus The content of synchronous_standby_names will be: ANY 1 (angus, cluster-example-2) If you set: postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 0 standbyNamesPre: - angus - malcolm The content of synchronous_standby_names will be: ANY 1 (angus, malcolm) If you set: postgresql: synchronous: method: first number: 2 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus standbyNamesPost: - malcolm The synchronous_standby_names option will look like: FIRST 2 (angus, cluster-example-2, malcolm)","title":"Examples"},{"location":"replication/#data-durability-and-synchronous-replication","text":"The dataDurability option in the .spec.postgresql.synchronous stanza controls the trade-off between data safety and availability for synchronous replication. It can be set to required or preferred , with the default being required if not specified. Important preferred can only be used when standbyNamesPre and standbyNamesPost are unset.","title":"Data Durability and Synchronous Replication"},{"location":"replication/#required-data-durability","text":"When dataDurability is set to required , PostgreSQL only considers transactions committed once WAL (Write-Ahead Log) records have been replicated to the specified number of synchronous standbys. This setting prioritizes data safety over availability, meaning write operations will pause if the required number of synchronous standbys is unavailable. This ensures zero data loss (RPO=0) but may reduce database availability during network disruptions or standby failures. Synchronous standbys are selected in this priority order: Healthy instances Unhealthy instances Primary The list is then truncated based on maxStandbyNamesFromCluster if this value is set, prioritizing healthy instances and ensuring synchronous_standby_names is populated.","title":"Required Data Durability"},{"location":"replication/#example_1","text":"Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: foo spec: instances: 3 postgresql: synchronous: method: any number: 1 dataDurability: required Initial state. The content of synchronous_standby_names is: ANY 1 (\"foo-2\",\"foo-3\",\"foo-1\") foo-2 becomes unavailable. It gets pushed back in priority: ANY 1 (\"foo-3\",\"foo-2\",\"foo-1\") foo-3 also becomes unavailable. The list contains no healthy standbys: ANY 1 (\"foo-2\",\"foo-3\",\"foo-1\") At this point no write operations will be allowed until at least one of the standbys is available again. When the standbys are available again, synchronous_standby_names will be back to the initial state.","title":"Example"},{"location":"replication/#preferred-data-durability","text":"When dataDurability is set to preferred , the required number of synchronous instances adjusts based on the number of available standbys. PostgreSQL will attempt to replicate WAL records to the designated number of synchronous standbys, but write operations will continue even if fewer than the requested number of standbys are available. Important Make sure you have a clear understanding of what ready/available means for a replica and set your expectations accordingly. By default, a replica is considered ready when it has successfully connected to the source at least once. However, CloudNativePG allows you to configure startup and readiness probes for replicas based on maximum lag. For more details, please refer to the \"Postgres instance manager\" section . This setting balances data safety with availability, enabling applications to continue writing during temporary standby unavailability\u2014hence, it\u2019s also known as self-healing mode . Warning This mode may result in data loss if all standbys become unavailable. With preferred data durability, only healthy replicas are included in synchronous_standby_names .","title":"Preferred Data Durability"},{"location":"replication/#example_2","text":"Consider the following example. For demonstration, we\u2019ll use a cluster named bar with 5 instances and 2 synchronous standbys: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: bar spec: instances: 5 postgresql: synchronous: method: any number: 2 dataDurability: preferred Initial state. The content of synchronous_standby_names is: ANY 2 (\"bar-2\",\"bar-3\", \"bar-4\", \"bar-5\") bar-2 and bar-3 become unavailable. They are removed from the list: ANY 2 (\"bar-4\", \"bar-5\") bar-4 also becomes unavailable. It gets removed from the list. Since the number of available standbys is less than the requested number, the requested amount gets reduced: ANY 1 (\"bar-5\") bar-5 also becomes unavailable. synchronous_standby_names becomes empty, disabling synchronous replication completely. Write operations will continue, but with the risk of potential data loss in case of a primary failure. When the replicas are back, synchronous_standby_names will be back to the initial state.","title":"Example"},{"location":"replication/#synchronous-replication-deprecated","text":"Warning Prior to CloudNativePG 1.24, only the quorum-based synchronous replication implementation was supported. Although this method is now deprecated, it will not be removed anytime soon. The new method prioritizes data durability over self-healing and offers more robust features, including priority-based synchronous replication and full control over the synchronous_standby_names option. It is recommended to gradually migrate to the new configuration method for synchronous replication, as explained in the previous paragraph. Important The deprecated method and the new method are mutually exclusive. CloudNativePG supports the configuration of quorum-based synchronous streaming replication via two configuration options called minSyncReplicas and maxSyncReplicas , which are the minimum and the maximum number of expected synchronous standby replicas available at any time. For self-healing purposes, the operator always compares these two values with the number of available replicas to determine the quorum. Important By default, synchronous replication selects among all the available replicas indistinctively. You can limit on which nodes your synchronous replicas can be scheduled, by working on node labels through the syncReplicaElectionConstraint option as described in the next section. Synchronous replication is disabled by default ( minSyncReplicas and maxSyncReplicas are not defined). In case both minSyncReplicas and maxSyncReplicas are set, CloudNativePG automatically updates the synchronous_standby_names option in PostgreSQL to the following value: ANY q (pod1, pod2, ...) Where: q is an integer automatically calculated by the operator to be: 1 <= minSyncReplicas <= q <= maxSyncReplicas <= readyReplicas pod1, pod2, ... is the list of all PostgreSQL pods in the cluster Warning To provide self-healing capabilities, the operator can ignore minSyncReplicas if such value is higher than the currently available number of replicas. Synchronous replication is automatically disabled when readyReplicas is 0 . As stated in the PostgreSQL documentation , the method ANY specifies a quorum-based synchronous replication and makes transaction commits wait until their WAL records are replicated to at least the requested number of synchronous standbys in the list . Important Even though the operator chooses self-healing over enforcement of synchronous replication settings, our recommendation is to plan for synchronous replication only in clusters with 3+ instances or, more generally, when maxSyncReplicas < (instances - 1) .","title":"Synchronous Replication (Deprecated)"},{"location":"replication/#select-nodes-for-synchronous-replication","text":"CloudNativePG enables you to select which PostgreSQL instances are eligible to participate in a quorum-based synchronous replication set through anti-affinity rules based on the node labels where the PVC holding the PGDATA and the Postgres pod are. Scheduling For more information on the general pod affinity and anti-affinity rules, please check the \"Scheduling\" section . Warning The .spec.postgresql.syncReplicaElectionConstraint option only applies to the legacy implementation of synchronous replication (see \"Synchronous Replication (Deprecated)\" ). As an example use-case for this feature: in a cluster with a single sync replica, we would be able to ensure the sync replica will be in a different availability zone from the primary instance, usually identified by the topology.kubernetes.io/zone label on a node . This would increase the robustness of the cluster in case of an outage in a single availability zone, especially in terms of recovery point objective ( RPO ). The idea of anti-affinity is to ensure that sync replicas that participate in the quorum are chosen from pods running on nodes that have different values for the selected labels (in this case, the availability zone label) then the node where the primary is currently in execution. If no node matches such criteria, the replicas are eligible for synchronous replication. Important The self-healing enforcement still applies while defining additional constraints for synchronous replica election (see \"Synchronous replication\" ). The example below shows how this can be done through the syncReplicaElectionConstraint section within .spec.postgresql . nodeLabelsAntiAffinity allows you to specify those node labels that need to be evaluated to make sure that synchronous replication will be dynamically configured by the operator between the current primary and the replicas which are located on nodes having a value of the availability zone label different from that of the node where the primary is: spec: instances: 3 postgresql: syncReplicaElectionConstraint: enabled: true nodeLabelsAntiAffinity: - topology.kubernetes.io/zone As you can imagine, the availability zone is just an example, but you could customize this behavior based on other labels that describe the node, such as storage, CPU, or memory.","title":"Select nodes for synchronous replication"},{"location":"replication/#replication-slots","text":"Replication slots are a native PostgreSQL feature introduced in 9.4 that provides an automated way to ensure that the primary does not remove WAL segments until all the attached streaming replication clients have received them, and that the primary does not remove rows which could cause a recovery conflict even when the standby is ( temporarily) disconnected. A replication slot exists solely on the instance that created it, and PostgreSQL does not replicate it on the standby servers. As a result, after a failover or a switchover, the new primary does not contain the replication slot from the old primary. This can create problems for the streaming replication clients that were connected to the old primary and have lost their slot. CloudNativePG provides a turn-key solution to synchronize the content of physical replication slots from the primary to each standby, addressing two use cases: the replication slots automatically created for the High Availability of the Postgres cluster ( see \"Replication slots for High Availability\" below for details) user-defined replication slots created on the primary","title":"Replication slots"},{"location":"replication/#replication-slots-for-high-availability","text":"CloudNativePG fills this gap by introducing the concept of cluster-managed replication slots, starting with high availability clusters. This feature automatically manages physical replication slots for each hot standby replica in the High Availability cluster, both in the primary and the standby. In CloudNativePG, we use the terms: Primary HA slot : a physical replication slot whose lifecycle is entirely managed by the current primary of the cluster and whose purpose is to map to a specific standby in streaming replication. Such a slot lives on the primary only. Standby HA slot : a physical replication slot for a standby whose lifecycle is entirely managed by another standby in the cluster, based on the content of the pg_replication_slots view in the primary, and updated at regular intervals using pg_replication_slot_advance() . This feature is enabled by default and can be disabled via configuration. For details, please refer to the \"replicationSlots\" section in the API reference . Here follows a brief description of the main options: .spec.replicationSlots.highAvailability.enabled if true , the feature is enabled ( true is the default) .spec.replicationSlots.highAvailability.slotPrefix the prefix that identifies replication slots managed by the operator for this feature (default: _cnpg_ ) .spec.replicationSlots.updateInterval how often the standby synchronizes the position of the local copy of the replication slots with the position on the current primary, expressed in seconds (default: 30) Although it is not recommended, if you desire a different behavior, you can customize the above options. For example, the following manifest will create a cluster with replication slots disabled. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 # Disable replication slots for HA in the cluster replicationSlots: highAvailability: enabled: false storage: size: 1Gi","title":"Replication slots for High Availability"},{"location":"replication/#user-defined-replication-slots","text":"Although CloudNativePG doesn't support a way to declaratively define physical replication slots, you can still create your own slots via SQL . Information At the moment, we don't have any plans to manage replication slots in a declarative way, but it might change depending on the feedback we receive from users. The reason is that replication slots exist for a specific purpose and each should be managed by a specific application the oversees the entire lifecycle of the slot on the primary. CloudNativePG can manage the synchronization of any user managed physical replication slots between the primary and standbys, similarly to what it does for the HA replication slots explained above (the only difference is that you need to create the replication slot). This feature is enabled by default (meaning that any replication slot is synchronized), but you can disable it or further customize its behavior (for example by excluding some slots using regular expressions) through the synchronizeReplicas stanza. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 replicationSlots: synchronizeReplicas: enabled: true excludePatterns: - \"^foo\" For details, please refer to the \"replicationSlots\" section in the API reference . Here follows a brief description of the main options: .spec.replicationSlots.synchronizeReplicas.enabled When true or not specified, every user-defined replication slot on the primary is synchronized on each standby. If changed to false, the operator will remove any replication slot previously created by itself on each standby. .spec.replicationSlots.synchronizeReplicas.excludePatterns A list of regular expression patterns to match the names of user-defined replication slots to be excluded from synchronization. This can be useful to exclude specific slots based on naming conventions. Warning Users utilizing this feature should carefully monitor user-defined replication slots to ensure they align with their operational requirements and do not interfere with the failover process.","title":"User-Defined Replication slots"},{"location":"replication/#synchronization-frequency","text":"You can also control the frequency with which a standby queries the pg_replication_slots view on the primary, and updates its local copy of the replication slots, like in this example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 # Reduce the frequency of standby HA slots updates to once every 5 minutes replicationSlots: updateInterval: 300 storage: size: 1Gi","title":"Synchronization frequency"},{"location":"replication/#capping-the-wal-size-retained-for-replication-slots","text":"When replication slots is enabled, you might end up running out of disk space due to PostgreSQL trying to retain WAL files requested by a replication slot. This might happen due to a standby that is (temporarily?) down, or lagging, or simply an orphan replication slot. Starting with PostgreSQL 13, you can take advantage of the max_slot_wal_keep_size configuration option controlling the maximum size of WAL files that replication slots are allowed to retain in the pg_wal directory at checkpoint time. By default, in PostgreSQL max_slot_wal_keep_size is set to -1 , meaning that replication slots may retain an unlimited amount of WAL files. As a result, our recommendation is to explicitly set max_slot_wal_keep_size when replication slots support is enabled. For example: # ... postgresql: parameters: max_slot_wal_keep_size: \"10GB\" # ...","title":"Capping the WAL size retained for replication slots"},{"location":"replication/#monitoring-replication-slots","text":"Replication slots must be carefully monitored in your infrastructure. By default, we provide the pg_replication_slots metric in our Prometheus exporter with key information such as the name of the slot, the type, whether it is active, the lag from the primary. Monitoring Please refer to the \"Monitoring\" section for details on how to monitor a CloudNativePG deployment.","title":"Monitoring replication slots"},{"location":"resource_management/","text":"Resource management In a typical Kubernetes cluster, pods run with unlimited resources. By default, they might be allowed to use as much CPU and RAM as needed. CloudNativePG allows administrators to control and manage resource usage by the pods of the cluster, through the resources section of the manifest, with two knobs: requests : initial requirement limits : maximum usage, in case of dynamic increase of resource needs For example, you can request an initial amount of RAM of 32MiB (scalable to 128MiB) and 50m of CPU (scalable to 100m) as follows: resources: requests: memory: \"32Mi\" cpu: \"50m\" limits: memory: \"128Mi\" cpu: \"100m\" Memory requests and limits are associated with containers, but it is useful to think of a pod as having a memory request and limit. The pod's memory request is the sum of the memory requests for all the containers in the pod. Pod scheduling is based on requests and not on limits. A pod is scheduled to run on a Node only if the Node has enough available memory to satisfy the pod's memory request. For each resource, we divide containers into 3 Quality of Service (QoS) classes, in decreasing order of priority: Guaranteed Burstable Best-Effort For more details, please refer to the \"Configure Quality of Service for Pods\" section in the Kubernetes documentation. For a PostgreSQL workload it is recommended to set a \"Guaranteed\" QoS. To avoid resources related issues in Kubernetes, we can refer to the best practices for \"out of resource\" handling while creating a cluster: Specify your required values for memory and CPU in the resources section of the manifest file. This way, you can avoid the OOM Killed (where \"OOM\" stands for Out Of Memory) and CPU throttle or any other resource-related issues on running instances. For your cluster's pods to get assigned to the \"Guaranteed\" QoS class, you must set limits and requests for both memory and CPU to the same value. Specify your required PostgreSQL memory parameters consistently with the pod resources (as you would do in a VM or physical machine scenario - see below). Set up database server pods on a dedicated node using nodeSelector. See the \"nodeSelector\" and \"tolerations\" fields of the \u201caffinityconfiguration\" resource on the API reference page. You can refer to the following example manifest: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-resources spec: instances: 3 postgresql: parameters: shared_buffers: \"256MB\" resources: requests: memory: \"1024Mi\" cpu: 1 limits: memory: \"1024Mi\" cpu: 1 storage: size: 1Gi In the above example, we have specified shared_buffers parameter with a value of 256MB - i.e., how much memory is dedicated to the PostgreSQL server for caching data (the default value for this parameter is 128MB in case it's not defined). A reasonable starting value for shared_buffers is 25% of the memory in your system. For example: if your shared_buffers is 256 MB, then the recommended value for your container memory size is 1 GB, which means that within a pod all the containers will have a total of 1 GB memory that Kubernetes will always preserve, enabling our containers to work as expected. For more details, please refer to the \"Resource Consumption\" section in the PostgreSQL documentation. Managing Compute Resources for Containers For more details on resource management, please refer to the \"Managing Compute Resources for Containers\" page from the Kubernetes documentation.","title":"Resource management"},{"location":"resource_management/#resource-management","text":"In a typical Kubernetes cluster, pods run with unlimited resources. By default, they might be allowed to use as much CPU and RAM as needed. CloudNativePG allows administrators to control and manage resource usage by the pods of the cluster, through the resources section of the manifest, with two knobs: requests : initial requirement limits : maximum usage, in case of dynamic increase of resource needs For example, you can request an initial amount of RAM of 32MiB (scalable to 128MiB) and 50m of CPU (scalable to 100m) as follows: resources: requests: memory: \"32Mi\" cpu: \"50m\" limits: memory: \"128Mi\" cpu: \"100m\" Memory requests and limits are associated with containers, but it is useful to think of a pod as having a memory request and limit. The pod's memory request is the sum of the memory requests for all the containers in the pod. Pod scheduling is based on requests and not on limits. A pod is scheduled to run on a Node only if the Node has enough available memory to satisfy the pod's memory request. For each resource, we divide containers into 3 Quality of Service (QoS) classes, in decreasing order of priority: Guaranteed Burstable Best-Effort For more details, please refer to the \"Configure Quality of Service for Pods\" section in the Kubernetes documentation. For a PostgreSQL workload it is recommended to set a \"Guaranteed\" QoS. To avoid resources related issues in Kubernetes, we can refer to the best practices for \"out of resource\" handling while creating a cluster: Specify your required values for memory and CPU in the resources section of the manifest file. This way, you can avoid the OOM Killed (where \"OOM\" stands for Out Of Memory) and CPU throttle or any other resource-related issues on running instances. For your cluster's pods to get assigned to the \"Guaranteed\" QoS class, you must set limits and requests for both memory and CPU to the same value. Specify your required PostgreSQL memory parameters consistently with the pod resources (as you would do in a VM or physical machine scenario - see below). Set up database server pods on a dedicated node using nodeSelector. See the \"nodeSelector\" and \"tolerations\" fields of the \u201caffinityconfiguration\" resource on the API reference page. You can refer to the following example manifest: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-resources spec: instances: 3 postgresql: parameters: shared_buffers: \"256MB\" resources: requests: memory: \"1024Mi\" cpu: 1 limits: memory: \"1024Mi\" cpu: 1 storage: size: 1Gi In the above example, we have specified shared_buffers parameter with a value of 256MB - i.e., how much memory is dedicated to the PostgreSQL server for caching data (the default value for this parameter is 128MB in case it's not defined). A reasonable starting value for shared_buffers is 25% of the memory in your system. For example: if your shared_buffers is 256 MB, then the recommended value for your container memory size is 1 GB, which means that within a pod all the containers will have a total of 1 GB memory that Kubernetes will always preserve, enabling our containers to work as expected. For more details, please refer to the \"Resource Consumption\" section in the PostgreSQL documentation. Managing Compute Resources for Containers For more details on resource management, please refer to the \"Managing Compute Resources for Containers\" page from the Kubernetes documentation.","title":"Resource management"},{"location":"rolling_update/","text":"Rolling Updates The operator allows changing the PostgreSQL version used in a cluster while applications are running against it. Important Only upgrades for PostgreSQL minor releases are supported. Rolling upgrades are started when: the user changes the imageName attribute of the cluster specification; the image catalog is updated with a new image for the major used by the cluster; a change in the PostgreSQL configuration requires a restart to be applied; a change on the Cluster .spec.resources values a change in size of the persistent volume claim on AKS after the operator is updated, to ensure the Pods run the latest instance manager (unless in-place updates are enabled ). The operator starts upgrading all the replicas, one Pod at a time, and begins from the one with the highest serial. The primary is the last node to be upgraded. Rolling updates are configurable and can be either entirely automated ( unsupervised ) or requiring human intervention ( supervised ). The upgrade keeps the CloudNativePG identity, without re-cloning the data. Pods will be deleted and created again with the same PVCs and a new image, if required. During the rolling update procedure, each service endpoints move to reflect the cluster's status, so that applications can ignore the node that is being updated. Automated updates ( unsupervised ) When primaryUpdateStrategy is set to unsupervised , the rolling update process is managed by Kubernetes and is entirely automated. Once the replicas have been upgraded, the selected primaryUpdateMethod operation will initiate on the primary. This is the default behavior. The primaryUpdateMethod option accepts one of the following values: restart : if possible, perform an automated restart of the pod where the primary instance is running. Otherwise, the restart request is ignored and a switchover issued. This is the default behavior. switchover : a switchover operation is automatically performed, setting the most aligned replica as the new target primary, and shutting down the former primary pod. There's no one-size-fits-all configuration for the update method, as that depends on several factors like the actual workload of your database, the requirements in terms of RPO and RTO , whether your PostgreSQL architecture is shared or shared nothing, and so on. Indeed, being PostgreSQL a primary/standby architecture database management system, the update process inevitably generates a downtime for your applications. One important aspect to consider for your context is the time it takes for your pod to download the new PostgreSQL container image, as that depends on your Kubernetes cluster settings and specifications. The switchover method makes sure that the promoted instance already runs the target image version of the container. The restart method instead might require to download the image from the origin registry after the primary pod has been shut down. It is up to you to determine whether, for your database, it is best to use restart or switchover as part of the rolling update procedure. Manual updates ( supervised ) When primaryUpdateStrategy is set to supervised , the rolling update process is suspended immediately after all replicas have been upgraded. This phase can only be completed with either a manual switchover or an in-place restart. Keep in mind that image upgrades can not be applied with an in-place restart, so a switchover is required in such cases. You can trigger a switchover with: kubectl cnpg promote [cluster] [new_primary] You can trigger a restart with: kubectl cnpg restart [cluster] [current_primary] You can find more information in the cnpg plugin page .","title":"Rolling Updates"},{"location":"rolling_update/#rolling-updates","text":"The operator allows changing the PostgreSQL version used in a cluster while applications are running against it. Important Only upgrades for PostgreSQL minor releases are supported. Rolling upgrades are started when: the user changes the imageName attribute of the cluster specification; the image catalog is updated with a new image for the major used by the cluster; a change in the PostgreSQL configuration requires a restart to be applied; a change on the Cluster .spec.resources values a change in size of the persistent volume claim on AKS after the operator is updated, to ensure the Pods run the latest instance manager (unless in-place updates are enabled ). The operator starts upgrading all the replicas, one Pod at a time, and begins from the one with the highest serial. The primary is the last node to be upgraded. Rolling updates are configurable and can be either entirely automated ( unsupervised ) or requiring human intervention ( supervised ). The upgrade keeps the CloudNativePG identity, without re-cloning the data. Pods will be deleted and created again with the same PVCs and a new image, if required. During the rolling update procedure, each service endpoints move to reflect the cluster's status, so that applications can ignore the node that is being updated.","title":"Rolling Updates"},{"location":"rolling_update/#automated-updates-unsupervised","text":"When primaryUpdateStrategy is set to unsupervised , the rolling update process is managed by Kubernetes and is entirely automated. Once the replicas have been upgraded, the selected primaryUpdateMethod operation will initiate on the primary. This is the default behavior. The primaryUpdateMethod option accepts one of the following values: restart : if possible, perform an automated restart of the pod where the primary instance is running. Otherwise, the restart request is ignored and a switchover issued. This is the default behavior. switchover : a switchover operation is automatically performed, setting the most aligned replica as the new target primary, and shutting down the former primary pod. There's no one-size-fits-all configuration for the update method, as that depends on several factors like the actual workload of your database, the requirements in terms of RPO and RTO , whether your PostgreSQL architecture is shared or shared nothing, and so on. Indeed, being PostgreSQL a primary/standby architecture database management system, the update process inevitably generates a downtime for your applications. One important aspect to consider for your context is the time it takes for your pod to download the new PostgreSQL container image, as that depends on your Kubernetes cluster settings and specifications. The switchover method makes sure that the promoted instance already runs the target image version of the container. The restart method instead might require to download the image from the origin registry after the primary pod has been shut down. It is up to you to determine whether, for your database, it is best to use restart or switchover as part of the rolling update procedure.","title":"Automated updates (unsupervised)"},{"location":"rolling_update/#manual-updates-supervised","text":"When primaryUpdateStrategy is set to supervised , the rolling update process is suspended immediately after all replicas have been upgraded. This phase can only be completed with either a manual switchover or an in-place restart. Keep in mind that image upgrades can not be applied with an in-place restart, so a switchover is required in such cases. You can trigger a switchover with: kubectl cnpg promote [cluster] [new_primary] You can trigger a restart with: kubectl cnpg restart [cluster] [current_primary] You can find more information in the cnpg plugin page .","title":"Manual updates (supervised)"},{"location":"samples/","text":"Examples The examples show configuration files for setting up your PostgreSQL cluster. Important These examples are for demonstration and experimentation purposes. You can execute them on a personal Kubernetes cluster with Minikube or Kind, as described in Quick start . Reference For a list of available options, see API reference . Basics Basic cluster cluster-example.yaml A basic example of a cluster. Custom cluster cluster-example-custom.yaml A basic cluster that uses the default storage class and custom parameters for the postgresql.conf and pg_hba.conf files. Cluster with customized storage class cluster-storage-class.yaml : A basic cluster that uses a specified storage class of standard . Cluster with persistent volume claim (PVC) template configured cluster-pvc-template.yaml : A basic cluster with an explicit persistent volume claim template. Extended configuration example cluster-example-full.yaml : A cluster that sets most of the available options. Bootstrap cluster with SQL files cluster-example-initdb-sql-refs.yaml : A cluster example that executes a set of queries defined in a secret and a ConfigMap right after the database is created. Sample cluster with customized pg_hba configuration cluster-example-pg-hba.yaml : A basic cluster that enables the user app to authenticate using certificates. Sample cluster with Secret and ConfigMap mounted using projected volume template cluster-example-projected-volume.yaml A basic cluster with the existing Secret and ConfigMap mounted into Postgres pod using projected volume mount. Backups Customized storage class and backups Prerequisites : Bucket storage must be available. The sample config is for AWS. Change it to suit your setup. cluster-storage-class-with-backup.yaml A cluster with backups configured. Backup Prerequisites : cluster-storage-class-with-backup.yaml applied and healthy. backup-example.yaml : An example of a backup that runs against the previous sample. Simple cluster with backup configured for minio Prerequisites : The configuration assumes minio is running and working. Update backup.barmanObjectStore with your minio parameters or your cloud solution. cluster-example-with-backup.yaml A basic cluster with backups configured. Simple cluster with backup configured for Scaleway Object Storage Prerequisites : The configuration assumes a Scaleway Object Storage bucket exists. Update backup.barmanObjectStore with your Scaleway parameters. cluster-example-with-backup-scaleway.yaml A basic cluster with backups configured to work with Scaleway Object Storage.. Replica clusters Replica cluster by way of backup from an object store Prerequisites : cluster-storage-class-with-backup.yaml applied and healthy, and a backup cluster-example-trigger-backup.yaml applied and completed. cluster-example-replica-from-backup-simple.yaml : A replica cluster following a cluster with backup configured. Replica cluster by way of volume snapshot Prerequisites : cluster-example-with-volume-snapshot.yaml applied and healthy, and a volume snapshot backup-with-volume-snapshot.yaml applied and completed. cluster-example-replica-from-volume-snapshot.yaml : A replica cluster following a cluster with volume snapshot configured. Replica cluster by way of streaming (pg_basebackup) Prerequisites : cluster-example.yaml applied and healthy. cluster-example-replica-streaming.yaml : A replica cluster following cluster-example with streaming replication. PostGIS PostGIS example postgis-example.yaml : An example of a PostGIS cluster. See PostGIS for details. Managed roles Cluster with declarative role management cluster-example-with-roles.yaml : Declares a role with the managed stanza. Includes password management with Kubernetes secrets. Managed services Cluster with managed services cluster-example-managed-services.yaml : Declares a service with the managed stanza. Includes default service disabled and new rw service template of LoadBalancer type defined. Declarative tablespaces Cluster with declarative tablespaces cluster-example-with-tablespaces.yaml Cluster with declarative tablespaces and backup Prerequisites : The configuration assumes minio is running and working. Update backup.barmanObjectStore with your minio parameters or your cloud solution. cluster-example-with-tablespaces-backup.yaml Restored cluster with tablespaces from object store Prerequisites : The previous cluster applied and a base backup completed. Remember to update bootstrap.recovery.backup.name with the backup name. cluster-restore-with-tablespaces.yaml For a list of available options, see API reference . Pooler configuration Pooler with custom service config pooler-external.yaml Logical replication via declarative Publication and Subscription objects Two test manifests contain everything needed to set up logical replication: Source cluster with a publication cluster-example-logical-source.yaml Sets up a cluster, cluster-example with some tables created in the app database, and, importantly, adds replication to the app user . A publication is created for the cluster on the app database: note that the publication will be reconciled only after the cluster's primary is up and running. Destination cluster with a subscription Prerequisites : The source cluster with publication, defined as above. cluster-example-logical-destination.yaml Sets up a cluster cluster-example-dest with: the source cluster defined in the externalClusters stanza. Note that it uses the app role to connect, which assumes the source cluster grants it replication privilege. a bootstrap import of microservice type, with schemaOnly enabled A subscription is created on the destination cluster: note that the subscription will be reconciled only after the destination cluster's primary is up and running. After both clusters have been reconciled, together with the publication and subscription objects, you can verify that that tables in the source cluster, and the data in them, have been replicated in the destination cluster In addition, there are some standalone example manifests: A plain Publication targeting All Tables Prerequisites : an existing cluster cluster-example . publication-example.yaml A Publication with a constrained publication target Prerequisites : an existing cluster cluster-example . publication-example-objects.yaml A plain Subscription Prerequisites: an existing cluster cluster-example set up as source, with a publication pub-all . A cluster cluster-example-dest set up as a destination cluster, including the externalClusters stanza with connection parameters to the source cluster, including a role with replication privilege. subscription-example.yaml All the above manifests create publications or subscriptions on the app database. The Database CRD offers a convenient way to create databases declaratively. With it, logical replication could be set up for arbitrary databases. Which brings us to the next section. Declarative management of Postgres databases A plain Database Prerequisites : an existing cluster cluster-example . database-example.yaml A Database with ICU local specifications Prerequisites : an existing cluster cluster-example running Postgres 16 or more advanced. database-example-icu.yaml","title":"Examples"},{"location":"samples/#examples","text":"The examples show configuration files for setting up your PostgreSQL cluster. Important These examples are for demonstration and experimentation purposes. You can execute them on a personal Kubernetes cluster with Minikube or Kind, as described in Quick start . Reference For a list of available options, see API reference .","title":"Examples"},{"location":"samples/#basics","text":"Basic cluster cluster-example.yaml A basic example of a cluster. Custom cluster cluster-example-custom.yaml A basic cluster that uses the default storage class and custom parameters for the postgresql.conf and pg_hba.conf files. Cluster with customized storage class cluster-storage-class.yaml : A basic cluster that uses a specified storage class of standard . Cluster with persistent volume claim (PVC) template configured cluster-pvc-template.yaml : A basic cluster with an explicit persistent volume claim template. Extended configuration example cluster-example-full.yaml : A cluster that sets most of the available options. Bootstrap cluster with SQL files cluster-example-initdb-sql-refs.yaml : A cluster example that executes a set of queries defined in a secret and a ConfigMap right after the database is created. Sample cluster with customized pg_hba configuration cluster-example-pg-hba.yaml : A basic cluster that enables the user app to authenticate using certificates. Sample cluster with Secret and ConfigMap mounted using projected volume template cluster-example-projected-volume.yaml A basic cluster with the existing Secret and ConfigMap mounted into Postgres pod using projected volume mount.","title":"Basics"},{"location":"samples/#backups","text":"Customized storage class and backups Prerequisites : Bucket storage must be available. The sample config is for AWS. Change it to suit your setup. cluster-storage-class-with-backup.yaml A cluster with backups configured. Backup Prerequisites : cluster-storage-class-with-backup.yaml applied and healthy. backup-example.yaml : An example of a backup that runs against the previous sample. Simple cluster with backup configured for minio Prerequisites : The configuration assumes minio is running and working. Update backup.barmanObjectStore with your minio parameters or your cloud solution. cluster-example-with-backup.yaml A basic cluster with backups configured. Simple cluster with backup configured for Scaleway Object Storage Prerequisites : The configuration assumes a Scaleway Object Storage bucket exists. Update backup.barmanObjectStore with your Scaleway parameters. cluster-example-with-backup-scaleway.yaml A basic cluster with backups configured to work with Scaleway Object Storage..","title":"Backups"},{"location":"samples/#replica-clusters","text":"Replica cluster by way of backup from an object store Prerequisites : cluster-storage-class-with-backup.yaml applied and healthy, and a backup cluster-example-trigger-backup.yaml applied and completed. cluster-example-replica-from-backup-simple.yaml : A replica cluster following a cluster with backup configured. Replica cluster by way of volume snapshot Prerequisites : cluster-example-with-volume-snapshot.yaml applied and healthy, and a volume snapshot backup-with-volume-snapshot.yaml applied and completed. cluster-example-replica-from-volume-snapshot.yaml : A replica cluster following a cluster with volume snapshot configured. Replica cluster by way of streaming (pg_basebackup) Prerequisites : cluster-example.yaml applied and healthy. cluster-example-replica-streaming.yaml : A replica cluster following cluster-example with streaming replication.","title":"Replica clusters"},{"location":"samples/#postgis","text":"PostGIS example postgis-example.yaml : An example of a PostGIS cluster. See PostGIS for details.","title":"PostGIS"},{"location":"samples/#managed-roles","text":"Cluster with declarative role management cluster-example-with-roles.yaml : Declares a role with the managed stanza. Includes password management with Kubernetes secrets.","title":"Managed roles"},{"location":"samples/#managed-services","text":"Cluster with managed services cluster-example-managed-services.yaml : Declares a service with the managed stanza. Includes default service disabled and new rw service template of LoadBalancer type defined.","title":"Managed services"},{"location":"samples/#declarative-tablespaces","text":"Cluster with declarative tablespaces cluster-example-with-tablespaces.yaml Cluster with declarative tablespaces and backup Prerequisites : The configuration assumes minio is running and working. Update backup.barmanObjectStore with your minio parameters or your cloud solution. cluster-example-with-tablespaces-backup.yaml Restored cluster with tablespaces from object store Prerequisites : The previous cluster applied and a base backup completed. Remember to update bootstrap.recovery.backup.name with the backup name. cluster-restore-with-tablespaces.yaml For a list of available options, see API reference .","title":"Declarative tablespaces"},{"location":"samples/#pooler-configuration","text":"Pooler with custom service config pooler-external.yaml","title":"Pooler configuration"},{"location":"samples/#logical-replication-via-declarative-publication-and-subscription-objects","text":"Two test manifests contain everything needed to set up logical replication: Source cluster with a publication cluster-example-logical-source.yaml Sets up a cluster, cluster-example with some tables created in the app database, and, importantly, adds replication to the app user . A publication is created for the cluster on the app database: note that the publication will be reconciled only after the cluster's primary is up and running. Destination cluster with a subscription Prerequisites : The source cluster with publication, defined as above. cluster-example-logical-destination.yaml Sets up a cluster cluster-example-dest with: the source cluster defined in the externalClusters stanza. Note that it uses the app role to connect, which assumes the source cluster grants it replication privilege. a bootstrap import of microservice type, with schemaOnly enabled A subscription is created on the destination cluster: note that the subscription will be reconciled only after the destination cluster's primary is up and running. After both clusters have been reconciled, together with the publication and subscription objects, you can verify that that tables in the source cluster, and the data in them, have been replicated in the destination cluster In addition, there are some standalone example manifests: A plain Publication targeting All Tables Prerequisites : an existing cluster cluster-example . publication-example.yaml A Publication with a constrained publication target Prerequisites : an existing cluster cluster-example . publication-example-objects.yaml A plain Subscription Prerequisites: an existing cluster cluster-example set up as source, with a publication pub-all . A cluster cluster-example-dest set up as a destination cluster, including the externalClusters stanza with connection parameters to the source cluster, including a role with replication privilege. subscription-example.yaml All the above manifests create publications or subscriptions on the app database. The Database CRD offers a convenient way to create databases declaratively. With it, logical replication could be set up for arbitrary databases. Which brings us to the next section.","title":"Logical replication via declarative Publication and Subscription objects"},{"location":"samples/#declarative-management-of-postgres-databases","text":"A plain Database Prerequisites : an existing cluster cluster-example . database-example.yaml A Database with ICU local specifications Prerequisites : an existing cluster cluster-example running Postgres 16 or more advanced. database-example-icu.yaml","title":"Declarative management of Postgres databases"},{"location":"scheduling/","text":"Scheduling Scheduling, in Kubernetes, is the process responsible for placing a new pod on the best node possible, based on several criteria. Kubernetes documentation Please refer to the Kubernetes documentation for more information on scheduling, including all the available policies. On this page we assume you are familiar with concepts like affinity, anti-affinity, node selectors, and so on. You can control how the CloudNativePG cluster's instances should be scheduled through the affinity section in the definition of the cluster, which supports: pod affinity/anti-affinity node selectors tolerations Pod Affinity and Anti-Affinity Kubernetes provides mechanisms to control where pods are scheduled using affinity and anti-affinity rules. These rules allow you to specify whether a pod should be scheduled on particular nodes ( affinity ) or avoided on specific nodes ( anti-affinity ) based on the workloads already running there. This capability is technically referred to as inter-pod affinity/anti-affinity . By default, CloudNativePG configures cluster instances to preferably be scheduled on different nodes, while pgBouncer instances might still run on the same nodes. For example, given the following Cluster specification: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 affinity: enablePodAntiAffinity: true # Default value topologyKey: kubernetes.io/hostname # Default value podAntiAffinityType: preferred # Default value storage: size: 1Gi The affinity configuration applied in the instance pods will be: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: cnpg.io/cluster operator: In values: - cluster-example - key: cnpg.io/podRole operator: In values: - instance topologyKey: kubernetes.io/hostname weight: 100 With this setup, Kubernetes will prefer to schedule a 3-node PostgreSQL cluster across three different nodes, assuming sufficient resources are available. Requiring Pod Anti-Affinity You can modify the default behavior by adjusting the settings mentioned above. For example, setting podAntiAffinityType to required will enforce requiredDuringSchedulingIgnoredDuringExecution instead of preferredDuringSchedulingIgnoredDuringExecution . However, be aware that this strict requirement may cause pods to remain pending if resources are insufficient\u2014this is particularly relevant when using Cluster Autoscaler for automated horizontal scaling in a Kubernetes cluster. Inter-pod Affinity and Anti-Affinity For more details, refer to the Kubernetes documentation . Topology Considerations In cloud environments, you might consider using topology.kubernetes.io/zone as the topologyKey to ensure pods are distributed across different availability zones rather than just nodes. For more options, see Well-Known Labels, Annotations, and Taints . Disabling Anti-Affinity Policies If needed, you can disable the operator-generated anti-affinity policies by setting enablePodAntiAffinity to false . Fine-Grained Control with Custom Rules For scenarios requiring more precise control, you can specify custom pod affinity or anti-affinity rules using the additionalPodAffinity and additionalPodAntiAffinity configuration attributes. These custom rules will be added to those generated by the operator, if enabled, or used directly if the operator-generated rules are disabled. Note When using additionalPodAntiAffinity or additionalPodAffinity , you must provide the full podAntiAffinity or podAffinity structure expected by the Pod specification. The following YAML example demonstrates how to configure only one instance of PostgreSQL per worker node, regardless of which PostgreSQL cluster it belongs to: additionalPodAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: postgresql operator: Exists values: [] topologyKey: \"kubernetes.io/hostname\" Node selection through nodeSelector Kubernetes allows nodeSelector to provide a list of labels (defined as key-value pairs) to select the nodes on which a pod can run. Specifically, the node must have each indicated key-value pair as labels for the pod to be scheduled and run. Similarly, CloudNativePG consents you to define a nodeSelector in the affinity section, so that you can request a PostgreSQL cluster to run only on nodes that have those labels. Tolerations Kubernetes allows you to specify (through taints ) whether a node should repel all pods not explicitly tolerating (through tolerations ) their taints . So, by setting a proper set of tolerations for a workload matching a specific node's taints , Kubernetes scheduler will now take into consideration the tainted node, while deciding on which node to schedule the workload. Tolerations can be configured for all the pods of a Cluster through the .spec.affinity.tolerations section, which accepts the usual Kubernetes syntax for tolerations. Taints and Tolerations More information on taints and tolerations can be found in the Kubernetes documentation . Isolating PostgreSQL workloads Important Before proceeding, please ensure you have read the \"Architecture\" section of the documentation. While you can deploy PostgreSQL on Kubernetes in various ways, we recommend following these essential principles for production environments: Exploit Availability Zones: If possible, take advantage of availability zones (AZs) within the same Kubernetes cluster by distributing PostgreSQL instances across different AZs. Dedicate Worker Nodes: Allocate specific worker nodes for PostgreSQL workloads through the node-role.kubernetes.io/postgres label and taint, as detailed in the Reserving Nodes for PostgreSQL Workloads section. Avoid Node Overlap: Ensure that no instances from the same PostgreSQL cluster are running on the same node. As explained in greater detail in the previous sections, CloudNativePG provides the flexibility to configure pod anti-affinity, node selectors, and tolerations. Below is a sample configuration to ensure that a PostgreSQL Cluster is deployed on postgres nodes, with its instances distributed across different nodes: # <snip> affinity: enablePodAntiAffinity: true topologyKey: kubernetes.io/hostname podAntiAffinityType: required nodeSelector: node-role.kubernetes.io/postgres: \"\" tolerations: - key: node-role.kubernetes.io/postgres operator: Exists effect: NoSchedule # <snip> Despite its simplicity, this setup ensures optimal distribution and isolation of PostgreSQL workloads, leading to enhanced performance and reliability in your production environment.","title":"Scheduling"},{"location":"scheduling/#scheduling","text":"Scheduling, in Kubernetes, is the process responsible for placing a new pod on the best node possible, based on several criteria. Kubernetes documentation Please refer to the Kubernetes documentation for more information on scheduling, including all the available policies. On this page we assume you are familiar with concepts like affinity, anti-affinity, node selectors, and so on. You can control how the CloudNativePG cluster's instances should be scheduled through the affinity section in the definition of the cluster, which supports: pod affinity/anti-affinity node selectors tolerations","title":"Scheduling"},{"location":"scheduling/#pod-affinity-and-anti-affinity","text":"Kubernetes provides mechanisms to control where pods are scheduled using affinity and anti-affinity rules. These rules allow you to specify whether a pod should be scheduled on particular nodes ( affinity ) or avoided on specific nodes ( anti-affinity ) based on the workloads already running there. This capability is technically referred to as inter-pod affinity/anti-affinity . By default, CloudNativePG configures cluster instances to preferably be scheduled on different nodes, while pgBouncer instances might still run on the same nodes. For example, given the following Cluster specification: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 affinity: enablePodAntiAffinity: true # Default value topologyKey: kubernetes.io/hostname # Default value podAntiAffinityType: preferred # Default value storage: size: 1Gi The affinity configuration applied in the instance pods will be: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: cnpg.io/cluster operator: In values: - cluster-example - key: cnpg.io/podRole operator: In values: - instance topologyKey: kubernetes.io/hostname weight: 100 With this setup, Kubernetes will prefer to schedule a 3-node PostgreSQL cluster across three different nodes, assuming sufficient resources are available.","title":"Pod Affinity and Anti-Affinity"},{"location":"scheduling/#requiring-pod-anti-affinity","text":"You can modify the default behavior by adjusting the settings mentioned above. For example, setting podAntiAffinityType to required will enforce requiredDuringSchedulingIgnoredDuringExecution instead of preferredDuringSchedulingIgnoredDuringExecution . However, be aware that this strict requirement may cause pods to remain pending if resources are insufficient\u2014this is particularly relevant when using Cluster Autoscaler for automated horizontal scaling in a Kubernetes cluster. Inter-pod Affinity and Anti-Affinity For more details, refer to the Kubernetes documentation .","title":"Requiring Pod Anti-Affinity"},{"location":"scheduling/#topology-considerations","text":"In cloud environments, you might consider using topology.kubernetes.io/zone as the topologyKey to ensure pods are distributed across different availability zones rather than just nodes. For more options, see Well-Known Labels, Annotations, and Taints .","title":"Topology Considerations"},{"location":"scheduling/#disabling-anti-affinity-policies","text":"If needed, you can disable the operator-generated anti-affinity policies by setting enablePodAntiAffinity to false .","title":"Disabling Anti-Affinity Policies"},{"location":"scheduling/#fine-grained-control-with-custom-rules","text":"For scenarios requiring more precise control, you can specify custom pod affinity or anti-affinity rules using the additionalPodAffinity and additionalPodAntiAffinity configuration attributes. These custom rules will be added to those generated by the operator, if enabled, or used directly if the operator-generated rules are disabled. Note When using additionalPodAntiAffinity or additionalPodAffinity , you must provide the full podAntiAffinity or podAffinity structure expected by the Pod specification. The following YAML example demonstrates how to configure only one instance of PostgreSQL per worker node, regardless of which PostgreSQL cluster it belongs to: additionalPodAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: postgresql operator: Exists values: [] topologyKey: \"kubernetes.io/hostname\"","title":"Fine-Grained Control with Custom Rules"},{"location":"scheduling/#node-selection-through-nodeselector","text":"Kubernetes allows nodeSelector to provide a list of labels (defined as key-value pairs) to select the nodes on which a pod can run. Specifically, the node must have each indicated key-value pair as labels for the pod to be scheduled and run. Similarly, CloudNativePG consents you to define a nodeSelector in the affinity section, so that you can request a PostgreSQL cluster to run only on nodes that have those labels.","title":"Node selection through nodeSelector"},{"location":"scheduling/#tolerations","text":"Kubernetes allows you to specify (through taints ) whether a node should repel all pods not explicitly tolerating (through tolerations ) their taints . So, by setting a proper set of tolerations for a workload matching a specific node's taints , Kubernetes scheduler will now take into consideration the tainted node, while deciding on which node to schedule the workload. Tolerations can be configured for all the pods of a Cluster through the .spec.affinity.tolerations section, which accepts the usual Kubernetes syntax for tolerations. Taints and Tolerations More information on taints and tolerations can be found in the Kubernetes documentation .","title":"Tolerations"},{"location":"scheduling/#isolating-postgresql-workloads","text":"Important Before proceeding, please ensure you have read the \"Architecture\" section of the documentation. While you can deploy PostgreSQL on Kubernetes in various ways, we recommend following these essential principles for production environments: Exploit Availability Zones: If possible, take advantage of availability zones (AZs) within the same Kubernetes cluster by distributing PostgreSQL instances across different AZs. Dedicate Worker Nodes: Allocate specific worker nodes for PostgreSQL workloads through the node-role.kubernetes.io/postgres label and taint, as detailed in the Reserving Nodes for PostgreSQL Workloads section. Avoid Node Overlap: Ensure that no instances from the same PostgreSQL cluster are running on the same node. As explained in greater detail in the previous sections, CloudNativePG provides the flexibility to configure pod anti-affinity, node selectors, and tolerations. Below is a sample configuration to ensure that a PostgreSQL Cluster is deployed on postgres nodes, with its instances distributed across different nodes: # <snip> affinity: enablePodAntiAffinity: true topologyKey: kubernetes.io/hostname podAntiAffinityType: required nodeSelector: node-role.kubernetes.io/postgres: \"\" tolerations: - key: node-role.kubernetes.io/postgres operator: Exists effect: NoSchedule # <snip> Despite its simplicity, this setup ensures optimal distribution and isolation of PostgreSQL workloads, leading to enhanced performance and reliability in your production environment.","title":"Isolating PostgreSQL workloads"},{"location":"security/","text":"Security This section contains information about security for CloudNativePG, that are analyzed at 3 different layers: Code, Container and Cluster. Warning The information contained in this page must not exonerate you from performing regular InfoSec duties on your Kubernetes cluster. Please familiarize yourself with the \"Overview of Cloud Native Security\" page from the Kubernetes documentation. About the 4C's Security Model Please refer to \"The 4C\u2019s Security Model in Kubernetes\" blog article to get a better understanding and context of the approach EDB has taken with security in CloudNativePG. Code CloudNativePG's source code undergoes systematic static analysis, including checks for security vulnerabilities, using the popular open-source linter for Go, GolangCI-Lint , directly integrated into the CI/CD pipeline. GolangCI-Lint can run multiple linters on the same source code. The following tools are used to identify security issues: Golang Security Checker ( gosec ): A linter that scans the abstract syntax tree of the source code against a set of rules designed to detect known vulnerabilities, threats, and weaknesses, such as hard-coded credentials, integer overflows, and SQL injections. GolangCI-Lint runs gosec as part of its suite. govulncheck : This tool runs in the CI/CD pipeline and reports known vulnerabilities affecting Go code or the compiler. If the operator is built with a version of the Go compiler containing a known vulnerability, govulncheck will detect it. CodeQL : Provided by GitHub, this tool scans for security issues and blocks any pull request with detected vulnerabilities. CodeQL is configured to review only Go code, excluding other languages in the repository such as Python or Bash. Snyk : Conducts nightly code scans in a scheduled job and generates weekly reports highlighting any new findings related to code security and licensing issues. The CloudNativePG repository has the \"Private vulnerability reporting\" option enabled in the Security section . This feature allows users to safely report security issues that require careful handling before being publicly disclosed. If you discover any security bug, please use this medium to report it. Important A failure in the static code analysis phase of the CI/CD pipeline will block the entire delivery process of CloudNativePG. Every commit must pass all the linters defined by GolangCI-Lint. Container Every container image in CloudNativePG is automatically built via CI/CD pipelines after every commit. These images include not only the operator's image but also the operands' images, specifically for every supported PostgreSQL version. Important All operand images are automatically and regularly rebuilt by our pipelines to incorporate the latest security updates at both the base image and package levels. This ensures that container images distributed to the community receive patch-level updates regularly. During the CI/CD process, images are scanned using the following tools: Dockle : Ensures best practices in the container build process. Snyk : Detects security issues within the container and reports findings via the GitHub interface. Image Signatures The operator and operand images are cryptographically signed using cosign , a signature tool from sigstore . This process is automated via GitHub Actions and leverages short-lived tokens issued through OpenID Connect . The token issuer is https://token.actions.githubusercontent.com , and the signing identity corresponds to a GitHub workflow executed under the cloudnative-pg repository. This workflow uses the cosign-installer action to streamline the signing process. To verify the authenticity of an operator image, use the following cosign command with the image digest: cosign verify ghcr.io/cloudnative-pg/cloudnative-pg@sha256:<DIGEST> \\ --certificate-identity-regexp=\"^https://github.com/cloudnative-pg/cloudnative-pg/\" \\ --certificate-oidc-issuer=\"https://token.actions.githubusercontent.com\" Attestations Container images include the following attestations for transparency and traceability: Software Bill of Materials (SBOM) : A comprehensive list of software artifacts included in the image or used during its build process, formatted using the in-toto SPDX predicate standard . Provenance : Metadata detailing how the image was built, following the SLSA Provenance framework. You can retrieve the SBOM for a specific image and platform using the following command: docker buildx imagetools inspect <IMAGE> \\ --format '{{ json (index .SBOM \"<PLATFORM>\").SPDX }}' This command outputs the SBOM in JSON format, providing a detailed view of the software components and build dependencies. For the provenance, use: docker buildx imagetools inspect <IMAGE> \\ --format '{{ json (index .Provenance \"<PLATFORM>\").SLSA }}' Guidelines and Frameworks for Container Security The following guidelines and frameworks have been considered for ensuring container-level security: \"Container Image Creation and Deployment Guide\" : Developed by the Defense Information Systems Agency (DISA) of the United States Department of Defense (DoD). \"CIS Benchmark for Docker\" : Developed by the Center for Internet Security (CIS). About Container-Level Security For more information on the approach that EDB has taken regarding security at the container level in CloudNativePG, please refer to the blog article \"Security and Containers in CloudNativePG\" . Cluster Security at the cluster level takes into account all Kubernetes components that form both the control plane and the nodes, as well as the applications that run in the cluster (PostgreSQL included). Role Based Access Control (RBAC) The operator interacts with the Kubernetes API server using a dedicated service account named cnpg-manager . This service account is typically installed in the operator namespace, commonly cnpg-system . However, the namespace may vary based on the deployment method (see the subsection below). In the same namespace, there is a binding between the cnpg-manager service account and a role. The specific name and type of this role (either Role or ClusterRole ) also depend on the deployment method. This role defines the necessary permissions required by the operator to function correctly. To learn more about these roles, you can use the kubectl describe clusterrole or kubectl describe role commands, depending on the deployment method. Important The above permissions are exclusively reserved for the operator's service account to interact with the Kubernetes API server. They are not directly accessible by the users of the operator that interact only with Cluster , Pooler , Backup , ScheduledBackup , Database , Publication , Subscription , ImageCatalog and ClusterImageCatalog resources. Below we provide some examples and, most importantly, the reasons why CloudNativePG requires full or partial management of standard Kubernetes namespaced or non-namespaced resources. configmaps The operator needs to create and manage default config maps for the Prometheus exporter monitoring metrics. deployments The operator needs to manage a PgBouncer connection pooler using a standard Kubernetes Deployment resource. jobs The operator needs to handle jobs to manage different Cluster 's phases. persistentvolumeclaims The volume where the PGDATA resides is the central element of a PostgreSQL Cluster resource; the operator needs to interact with the selected storage class to dynamically provision the requested volumes, based on the defined scheduling policies. pods The operator needs to manage Cluster 's instances. secrets Unless you provide certificates and passwords to your Cluster objects, the operator adopts the \"convention over configuration\" paradigm by self-provisioning random generated passwords and TLS certificates, and by storing them in secrets. serviceaccounts The operator needs to create a service account that enables the instance manager (which is the PID 1 process of the container that controls the PostgreSQL server) to safely communicate with the Kubernetes API server to coordinate actions and continuously provide a reliable status of the Cluster . services The operator needs to control network access to the PostgreSQL cluster (or the connection pooler) from applications, and properly manage failover/switchover operations in an automated way (by assigning, for example, the correct end-point of a service to the proper primary PostgreSQL instance). validatingwebhookconfigurations and mutatingwebhookconfigurations The operator injects its self-signed webhook CA into both webhook configurations, which are needed to validate and mutate all the resources it manages. For more details, please see the Kubernetes documentation . volumesnapshots The operator needs to generate VolumeSnapshots objects in order to take backups of a PostgreSQL server. VolumeSnapshots are read too in order to validate them before starting the restore process. nodes The operator needs to get the labels for Affinity and AntiAffinity so it can decide in which nodes a pod can be scheduled. This is useful, for example, to prevent the replicas from being scheduled in the same node - especially important if nodes are in different availability zones. This permission is also used to determine whether a node is scheduled, preventing the creation of pods on unscheduled nodes, or triggering a switchover if the primary lives in an unscheduled node. Deployments and ClusterRole Resources As mentioned above, each deployment method may have variations in the namespace location of the service account, as well as the names and types of role bindings and respective roles. Via Kubernetes Manifest When installing CloudNativePG using the Kubernetes manifest, permissions are set to ClusterRoleBinding by default. You can inspect the permissions required by the operator by running: kubectl describe clusterrole cnpg-manager Via OLM From a security perspective, the Operator Lifecycle Manager (OLM) provides a more flexible deployment method. It allows you to configure the operator to watch either all namespaces or specific namespaces, enabling more granular permission management. Info OLM allows you to deploy the operator in its own namespace and configure it to watch specific namespaces used for CloudNativePG clusters. This setup helps to contain permissions and restrict access more effectively. Why Are ClusterRole Permissions Needed? The operator currently requires ClusterRole permissions to read nodes and ClusterImageCatalog objects. All other permissions can be namespace-scoped (i.e., Role ) or cluster-wide (i.e., ClusterRole ). Even with these permissions, if someone gains access to the ServiceAccount , they will only have get , list , and watch permissions, which are limited to viewing resources. However, if an unauthorized user gains access to the ServiceAccount , it indicates a more significant security issue. Therefore, it's crucial to prevent users from accessing the operator's ServiceAccount and any other ServiceAccount with elevated permissions. Calls to the API server made by the instance manager The instance manager, which is the entry point of the operand container, needs to make some calls to the Kubernetes API server to ensure that the status of some resources is correctly updated and to access the config maps and secrets that are associated with that Postgres cluster. Such calls are performed through a dedicated ServiceAccount created by the operator that shares the same PostgreSQL Cluster resource name. Important The operand can only access a specific and limited subset of resources through the API server. A service account is the recommended way to access the API server from within a Pod . For transparency, the permissions associated with the service account are defined in the roles.go file. For example, to retrieve the permissions of a generic mypg cluster in the myns namespace, you can type the following command: kubectl get role -n myns mypg -o yaml Then verify that the role is bound to the service account: kubectl get rolebinding -n myns mypg -o yaml Important Remember that roles are limited to a given namespace . Below we provide a quick summary of the permissions associated with the service account for generic Kubernetes resources. configmaps The instance manager can only read config maps that are related to the same cluster, such as custom monitoring queries secrets The instance manager can only read secrets that are related to the same cluster, namely: streaming replication user, application user, super user, LDAP authentication user, client CA, server CA, server certificate, backup credentials, custom monitoring queries events The instance manager can create an event for the cluster, informing the API server about a particular aspect of the PostgreSQL instance lifecycle Here instead, we provide the same summary for resources specific to CloudNativePG. clusters The instance manager requires read-only permissions, namely get , list and watch , just for its own Cluster resource clusters/status The instance manager requires to update and patch the status of just its own Cluster resource backups The instance manager requires get and list permissions to read any Backup resource in the namespace. Additionally, it requires the delete permission to clean up the Kubernetes cluster by removing the Backup objects that do not have a counterpart in the object store - typically because of retention policies backups/status The instance manager requires to update and patch the status of any Backup resource in the namespace Pod and Container Security Contexts A Security Context defines privilege and access control settings for a pod or container. CloudNativePG does not require privileged mode for container execution. The PostgreSQL containers run as the postgres system user. No component whatsoever requires running as root . Likewise, Volume access does not require privileged mode nor root privileges. Proper permissions must be assigned by the Kubernetes platform and/or administrators. The PostgreSQL containers run with a read-only root filesystem (i.e. no writable layer). The operator manages the setting of security contexts for all pods and containers of a PostgreSQL cluster. The Seccomp Profile to be used for the PostgreSQL containers can be configured with the spec.seccompProfile section of the Cluster resource. If this section is left blank, the containers will use a seccompProfile Type of RuntimeDefault , that is, the container runtime default. The security context of PostgreSQL containers using the default seccompProfile will look like this: securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsNonRoot: true seccompProfile: type: RuntimeDefault Security Context Constraints When running in an environment that is utilizing Security Context Constraints (SCC) the operator does not explicitly set the security context of the PostgreSQL cluster pods, but rather allows the pods to inherit the restricted Security Context Constraints that are already defined. Restricting Pod access using AppArmor You can assign an AppArmor profile to the postgres , initdb , join , full-recovery and bootstrap-controller containers inside every Cluster pod through the container.apparmor.security.beta.kubernetes.io annotation. Example of cluster annotations kind: Cluster metadata: name: cluster-apparmor annotations: container.apparmor.security.beta.kubernetes.io/postgres: runtime/default container.apparmor.security.beta.kubernetes.io/initdb: runtime/default container.apparmor.security.beta.kubernetes.io/join: runtime/default Warning Using this kind of annotations can result in your cluster to stop working. If this is the case, the annotation can be safely removed from the Cluster . The AppArmor configuration must be at Kubernetes node level, meaning that the underlying operating system must have this option enable and properly configured. In case this is not the situation, and the annotations were added at the Cluster creation time, pods will not be created. On the other hand, if you add the annotations after the Cluster was created the pods in the cluster will be unable to start and you will get an error like this: metadata.annotations[container.apparmor.security.beta.kubernetes.io/postgres]: Forbidden: may not add AppArmor annotations] In such cases, please refer to your Kubernetes administrators and ask for the proper AppArmor profile to use. Network Policies The pods created by the Cluster resource can be controlled by Kubernetes network policies to enable/disable inbound and outbound network access at IP and TCP level. You can find more information in the networking document . Important The operator needs to communicate to each instance on TCP port 8000 to get information about the status of the PostgreSQL server. Please make sure you keep this in mind in case you add any network policy, and refer to the \"Exposed Ports\" section below for a list of ports used by CloudNativePG for finer control. Network policies are beyond the scope of this document. Please refer to the \"Network policies\" section of the Kubernetes documentation for further information. Exposed Ports CloudNativePG exposes ports at operator, instance manager and operand levels, as listed in the table below: System Port number Exposing Name TLS Authentication operator 9443 webhook server webhook-server Yes Yes operator 8080 metrics metrics No No instance manager 9187 metrics metrics Optional No instance manager 8000 status status Yes No operand 5432 PostgreSQL instance postgresql Optional Yes PostgreSQL The current implementation of CloudNativePG automatically creates passwords and .pgpass files for the database owner and, only if requested by setting enableSuperuserAccess to true , for the postgres superuser. Warning enableSuperuserAccess is set to false by default to improve the security-by-default posture of the operator, fostering a microservice approach where changes to PostgreSQL are performed in a declarative way through the spec of the Cluster resource, while providing developers with full powers inside the database through the database owner user. As far as password encryption is concerned, CloudNativePG follows the default behavior of PostgreSQL: starting from PostgreSQL 14, password_encryption is by default set to scram-sha-256 , while on earlier versions it is set to md5 . Important Please refer to the \"Password authentication\" section in the PostgreSQL documentation for details. Note The operator supports toggling the enableSuperuserAccess option. When you disable it on a running cluster, the operator will ignore the content of the secret, remove it (if previously generated by the operator) and set the password of the postgres user to NULL (de facto disabling remote access through password authentication). See the \"Secrets\" section in the \"Connecting from an application\" page for more information. You can use those files to configure application access to the database. By default, every replica is automatically configured to connect in physical async streaming replication with the current primary instance, with a special user called streaming_replica . The connection between nodes is encrypted and authentication is via TLS client certificates (please refer to the \"Client TLS/SSL Connections\" page for details). By default, the operator requires TLS v1.3 connections. Currently, the operator allows administrators to add pg_hba.conf lines directly in the manifest as part of the pg_hba section of the postgresql configuration. The lines defined in the manifest are added to a default pg_hba.conf . For further detail on how pg_hba.conf is managed by the operator, see the \"PostgreSQL Configuration\" page of the documentation. The administrator can also customize the content of the pg_ident.conf file that by default only maps the local postgres user to the postgres user in the database. For further detail on how pg_ident.conf is managed by the operator, see the \"PostgreSQL Configuration\" page of the documentation. Important Examples assume that the Kubernetes cluster runs in a private and secure network. Storage CloudNativePG delegates encryption at rest to the underlying storage class. For data protection in production environments, we highly recommend that you choose a storage class that supports encryption at rest.","title":"Security"},{"location":"security/#security","text":"This section contains information about security for CloudNativePG, that are analyzed at 3 different layers: Code, Container and Cluster. Warning The information contained in this page must not exonerate you from performing regular InfoSec duties on your Kubernetes cluster. Please familiarize yourself with the \"Overview of Cloud Native Security\" page from the Kubernetes documentation. About the 4C's Security Model Please refer to \"The 4C\u2019s Security Model in Kubernetes\" blog article to get a better understanding and context of the approach EDB has taken with security in CloudNativePG.","title":"Security"},{"location":"security/#code","text":"CloudNativePG's source code undergoes systematic static analysis, including checks for security vulnerabilities, using the popular open-source linter for Go, GolangCI-Lint , directly integrated into the CI/CD pipeline. GolangCI-Lint can run multiple linters on the same source code. The following tools are used to identify security issues: Golang Security Checker ( gosec ): A linter that scans the abstract syntax tree of the source code against a set of rules designed to detect known vulnerabilities, threats, and weaknesses, such as hard-coded credentials, integer overflows, and SQL injections. GolangCI-Lint runs gosec as part of its suite. govulncheck : This tool runs in the CI/CD pipeline and reports known vulnerabilities affecting Go code or the compiler. If the operator is built with a version of the Go compiler containing a known vulnerability, govulncheck will detect it. CodeQL : Provided by GitHub, this tool scans for security issues and blocks any pull request with detected vulnerabilities. CodeQL is configured to review only Go code, excluding other languages in the repository such as Python or Bash. Snyk : Conducts nightly code scans in a scheduled job and generates weekly reports highlighting any new findings related to code security and licensing issues. The CloudNativePG repository has the \"Private vulnerability reporting\" option enabled in the Security section . This feature allows users to safely report security issues that require careful handling before being publicly disclosed. If you discover any security bug, please use this medium to report it. Important A failure in the static code analysis phase of the CI/CD pipeline will block the entire delivery process of CloudNativePG. Every commit must pass all the linters defined by GolangCI-Lint.","title":"Code"},{"location":"security/#container","text":"Every container image in CloudNativePG is automatically built via CI/CD pipelines after every commit. These images include not only the operator's image but also the operands' images, specifically for every supported PostgreSQL version. Important All operand images are automatically and regularly rebuilt by our pipelines to incorporate the latest security updates at both the base image and package levels. This ensures that container images distributed to the community receive patch-level updates regularly. During the CI/CD process, images are scanned using the following tools: Dockle : Ensures best practices in the container build process. Snyk : Detects security issues within the container and reports findings via the GitHub interface.","title":"Container"},{"location":"security/#image-signatures","text":"The operator and operand images are cryptographically signed using cosign , a signature tool from sigstore . This process is automated via GitHub Actions and leverages short-lived tokens issued through OpenID Connect . The token issuer is https://token.actions.githubusercontent.com , and the signing identity corresponds to a GitHub workflow executed under the cloudnative-pg repository. This workflow uses the cosign-installer action to streamline the signing process. To verify the authenticity of an operator image, use the following cosign command with the image digest: cosign verify ghcr.io/cloudnative-pg/cloudnative-pg@sha256:<DIGEST> \\ --certificate-identity-regexp=\"^https://github.com/cloudnative-pg/cloudnative-pg/\" \\ --certificate-oidc-issuer=\"https://token.actions.githubusercontent.com\"","title":"Image Signatures"},{"location":"security/#attestations","text":"Container images include the following attestations for transparency and traceability: Software Bill of Materials (SBOM) : A comprehensive list of software artifacts included in the image or used during its build process, formatted using the in-toto SPDX predicate standard . Provenance : Metadata detailing how the image was built, following the SLSA Provenance framework. You can retrieve the SBOM for a specific image and platform using the following command: docker buildx imagetools inspect <IMAGE> \\ --format '{{ json (index .SBOM \"<PLATFORM>\").SPDX }}' This command outputs the SBOM in JSON format, providing a detailed view of the software components and build dependencies. For the provenance, use: docker buildx imagetools inspect <IMAGE> \\ --format '{{ json (index .Provenance \"<PLATFORM>\").SLSA }}'","title":"Attestations"},{"location":"security/#guidelines-and-frameworks-for-container-security","text":"The following guidelines and frameworks have been considered for ensuring container-level security: \"Container Image Creation and Deployment Guide\" : Developed by the Defense Information Systems Agency (DISA) of the United States Department of Defense (DoD). \"CIS Benchmark for Docker\" : Developed by the Center for Internet Security (CIS). About Container-Level Security For more information on the approach that EDB has taken regarding security at the container level in CloudNativePG, please refer to the blog article \"Security and Containers in CloudNativePG\" .","title":"Guidelines and Frameworks for Container Security"},{"location":"security/#cluster","text":"Security at the cluster level takes into account all Kubernetes components that form both the control plane and the nodes, as well as the applications that run in the cluster (PostgreSQL included).","title":"Cluster"},{"location":"security/#role-based-access-control-rbac","text":"The operator interacts with the Kubernetes API server using a dedicated service account named cnpg-manager . This service account is typically installed in the operator namespace, commonly cnpg-system . However, the namespace may vary based on the deployment method (see the subsection below). In the same namespace, there is a binding between the cnpg-manager service account and a role. The specific name and type of this role (either Role or ClusterRole ) also depend on the deployment method. This role defines the necessary permissions required by the operator to function correctly. To learn more about these roles, you can use the kubectl describe clusterrole or kubectl describe role commands, depending on the deployment method. Important The above permissions are exclusively reserved for the operator's service account to interact with the Kubernetes API server. They are not directly accessible by the users of the operator that interact only with Cluster , Pooler , Backup , ScheduledBackup , Database , Publication , Subscription , ImageCatalog and ClusterImageCatalog resources. Below we provide some examples and, most importantly, the reasons why CloudNativePG requires full or partial management of standard Kubernetes namespaced or non-namespaced resources. configmaps The operator needs to create and manage default config maps for the Prometheus exporter monitoring metrics. deployments The operator needs to manage a PgBouncer connection pooler using a standard Kubernetes Deployment resource. jobs The operator needs to handle jobs to manage different Cluster 's phases. persistentvolumeclaims The volume where the PGDATA resides is the central element of a PostgreSQL Cluster resource; the operator needs to interact with the selected storage class to dynamically provision the requested volumes, based on the defined scheduling policies. pods The operator needs to manage Cluster 's instances. secrets Unless you provide certificates and passwords to your Cluster objects, the operator adopts the \"convention over configuration\" paradigm by self-provisioning random generated passwords and TLS certificates, and by storing them in secrets. serviceaccounts The operator needs to create a service account that enables the instance manager (which is the PID 1 process of the container that controls the PostgreSQL server) to safely communicate with the Kubernetes API server to coordinate actions and continuously provide a reliable status of the Cluster . services The operator needs to control network access to the PostgreSQL cluster (or the connection pooler) from applications, and properly manage failover/switchover operations in an automated way (by assigning, for example, the correct end-point of a service to the proper primary PostgreSQL instance). validatingwebhookconfigurations and mutatingwebhookconfigurations The operator injects its self-signed webhook CA into both webhook configurations, which are needed to validate and mutate all the resources it manages. For more details, please see the Kubernetes documentation . volumesnapshots The operator needs to generate VolumeSnapshots objects in order to take backups of a PostgreSQL server. VolumeSnapshots are read too in order to validate them before starting the restore process. nodes The operator needs to get the labels for Affinity and AntiAffinity so it can decide in which nodes a pod can be scheduled. This is useful, for example, to prevent the replicas from being scheduled in the same node - especially important if nodes are in different availability zones. This permission is also used to determine whether a node is scheduled, preventing the creation of pods on unscheduled nodes, or triggering a switchover if the primary lives in an unscheduled node.","title":"Role Based Access Control (RBAC)"},{"location":"security/#deployments-and-clusterrole-resources","text":"As mentioned above, each deployment method may have variations in the namespace location of the service account, as well as the names and types of role bindings and respective roles.","title":"Deployments and ClusterRole Resources"},{"location":"security/#via-kubernetes-manifest","text":"When installing CloudNativePG using the Kubernetes manifest, permissions are set to ClusterRoleBinding by default. You can inspect the permissions required by the operator by running: kubectl describe clusterrole cnpg-manager","title":"Via Kubernetes Manifest"},{"location":"security/#via-olm","text":"From a security perspective, the Operator Lifecycle Manager (OLM) provides a more flexible deployment method. It allows you to configure the operator to watch either all namespaces or specific namespaces, enabling more granular permission management. Info OLM allows you to deploy the operator in its own namespace and configure it to watch specific namespaces used for CloudNativePG clusters. This setup helps to contain permissions and restrict access more effectively.","title":"Via OLM"},{"location":"security/#why-are-clusterrole-permissions-needed","text":"The operator currently requires ClusterRole permissions to read nodes and ClusterImageCatalog objects. All other permissions can be namespace-scoped (i.e., Role ) or cluster-wide (i.e., ClusterRole ). Even with these permissions, if someone gains access to the ServiceAccount , they will only have get , list , and watch permissions, which are limited to viewing resources. However, if an unauthorized user gains access to the ServiceAccount , it indicates a more significant security issue. Therefore, it's crucial to prevent users from accessing the operator's ServiceAccount and any other ServiceAccount with elevated permissions.","title":"Why Are ClusterRole Permissions Needed?"},{"location":"security/#calls-to-the-api-server-made-by-the-instance-manager","text":"The instance manager, which is the entry point of the operand container, needs to make some calls to the Kubernetes API server to ensure that the status of some resources is correctly updated and to access the config maps and secrets that are associated with that Postgres cluster. Such calls are performed through a dedicated ServiceAccount created by the operator that shares the same PostgreSQL Cluster resource name. Important The operand can only access a specific and limited subset of resources through the API server. A service account is the recommended way to access the API server from within a Pod . For transparency, the permissions associated with the service account are defined in the roles.go file. For example, to retrieve the permissions of a generic mypg cluster in the myns namespace, you can type the following command: kubectl get role -n myns mypg -o yaml Then verify that the role is bound to the service account: kubectl get rolebinding -n myns mypg -o yaml Important Remember that roles are limited to a given namespace . Below we provide a quick summary of the permissions associated with the service account for generic Kubernetes resources. configmaps The instance manager can only read config maps that are related to the same cluster, such as custom monitoring queries secrets The instance manager can only read secrets that are related to the same cluster, namely: streaming replication user, application user, super user, LDAP authentication user, client CA, server CA, server certificate, backup credentials, custom monitoring queries events The instance manager can create an event for the cluster, informing the API server about a particular aspect of the PostgreSQL instance lifecycle Here instead, we provide the same summary for resources specific to CloudNativePG. clusters The instance manager requires read-only permissions, namely get , list and watch , just for its own Cluster resource clusters/status The instance manager requires to update and patch the status of just its own Cluster resource backups The instance manager requires get and list permissions to read any Backup resource in the namespace. Additionally, it requires the delete permission to clean up the Kubernetes cluster by removing the Backup objects that do not have a counterpart in the object store - typically because of retention policies backups/status The instance manager requires to update and patch the status of any Backup resource in the namespace","title":"Calls to the API server made by the instance manager"},{"location":"security/#pod-and-container-security-contexts","text":"A Security Context defines privilege and access control settings for a pod or container. CloudNativePG does not require privileged mode for container execution. The PostgreSQL containers run as the postgres system user. No component whatsoever requires running as root . Likewise, Volume access does not require privileged mode nor root privileges. Proper permissions must be assigned by the Kubernetes platform and/or administrators. The PostgreSQL containers run with a read-only root filesystem (i.e. no writable layer). The operator manages the setting of security contexts for all pods and containers of a PostgreSQL cluster. The Seccomp Profile to be used for the PostgreSQL containers can be configured with the spec.seccompProfile section of the Cluster resource. If this section is left blank, the containers will use a seccompProfile Type of RuntimeDefault , that is, the container runtime default. The security context of PostgreSQL containers using the default seccompProfile will look like this: securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsNonRoot: true seccompProfile: type: RuntimeDefault","title":"Pod and Container Security Contexts"},{"location":"security/#security-context-constraints","text":"When running in an environment that is utilizing Security Context Constraints (SCC) the operator does not explicitly set the security context of the PostgreSQL cluster pods, but rather allows the pods to inherit the restricted Security Context Constraints that are already defined.","title":"Security Context Constraints"},{"location":"security/#restricting-pod-access-using-apparmor","text":"You can assign an AppArmor profile to the postgres , initdb , join , full-recovery and bootstrap-controller containers inside every Cluster pod through the container.apparmor.security.beta.kubernetes.io annotation. Example of cluster annotations kind: Cluster metadata: name: cluster-apparmor annotations: container.apparmor.security.beta.kubernetes.io/postgres: runtime/default container.apparmor.security.beta.kubernetes.io/initdb: runtime/default container.apparmor.security.beta.kubernetes.io/join: runtime/default Warning Using this kind of annotations can result in your cluster to stop working. If this is the case, the annotation can be safely removed from the Cluster . The AppArmor configuration must be at Kubernetes node level, meaning that the underlying operating system must have this option enable and properly configured. In case this is not the situation, and the annotations were added at the Cluster creation time, pods will not be created. On the other hand, if you add the annotations after the Cluster was created the pods in the cluster will be unable to start and you will get an error like this: metadata.annotations[container.apparmor.security.beta.kubernetes.io/postgres]: Forbidden: may not add AppArmor annotations] In such cases, please refer to your Kubernetes administrators and ask for the proper AppArmor profile to use.","title":"Restricting Pod access using AppArmor"},{"location":"security/#network-policies","text":"The pods created by the Cluster resource can be controlled by Kubernetes network policies to enable/disable inbound and outbound network access at IP and TCP level. You can find more information in the networking document . Important The operator needs to communicate to each instance on TCP port 8000 to get information about the status of the PostgreSQL server. Please make sure you keep this in mind in case you add any network policy, and refer to the \"Exposed Ports\" section below for a list of ports used by CloudNativePG for finer control. Network policies are beyond the scope of this document. Please refer to the \"Network policies\" section of the Kubernetes documentation for further information.","title":"Network Policies"},{"location":"security/#exposed-ports","text":"CloudNativePG exposes ports at operator, instance manager and operand levels, as listed in the table below: System Port number Exposing Name TLS Authentication operator 9443 webhook server webhook-server Yes Yes operator 8080 metrics metrics No No instance manager 9187 metrics metrics Optional No instance manager 8000 status status Yes No operand 5432 PostgreSQL instance postgresql Optional Yes","title":"Exposed Ports"},{"location":"security/#postgresql","text":"The current implementation of CloudNativePG automatically creates passwords and .pgpass files for the database owner and, only if requested by setting enableSuperuserAccess to true , for the postgres superuser. Warning enableSuperuserAccess is set to false by default to improve the security-by-default posture of the operator, fostering a microservice approach where changes to PostgreSQL are performed in a declarative way through the spec of the Cluster resource, while providing developers with full powers inside the database through the database owner user. As far as password encryption is concerned, CloudNativePG follows the default behavior of PostgreSQL: starting from PostgreSQL 14, password_encryption is by default set to scram-sha-256 , while on earlier versions it is set to md5 . Important Please refer to the \"Password authentication\" section in the PostgreSQL documentation for details. Note The operator supports toggling the enableSuperuserAccess option. When you disable it on a running cluster, the operator will ignore the content of the secret, remove it (if previously generated by the operator) and set the password of the postgres user to NULL (de facto disabling remote access through password authentication). See the \"Secrets\" section in the \"Connecting from an application\" page for more information. You can use those files to configure application access to the database. By default, every replica is automatically configured to connect in physical async streaming replication with the current primary instance, with a special user called streaming_replica . The connection between nodes is encrypted and authentication is via TLS client certificates (please refer to the \"Client TLS/SSL Connections\" page for details). By default, the operator requires TLS v1.3 connections. Currently, the operator allows administrators to add pg_hba.conf lines directly in the manifest as part of the pg_hba section of the postgresql configuration. The lines defined in the manifest are added to a default pg_hba.conf . For further detail on how pg_hba.conf is managed by the operator, see the \"PostgreSQL Configuration\" page of the documentation. The administrator can also customize the content of the pg_ident.conf file that by default only maps the local postgres user to the postgres user in the database. For further detail on how pg_ident.conf is managed by the operator, see the \"PostgreSQL Configuration\" page of the documentation. Important Examples assume that the Kubernetes cluster runs in a private and secure network.","title":"PostgreSQL"},{"location":"security/#storage","text":"CloudNativePG delegates encryption at rest to the underlying storage class. For data protection in production environments, we highly recommend that you choose a storage class that supports encryption at rest.","title":"Storage"},{"location":"service_management/","text":"Service Management A PostgreSQL cluster should only be accessed via standard Kubernetes network services directly managed by CloudNativePG. For more details, refer to the \"Service\" page of the Kubernetes Documentation . CloudNativePG defines three types of services for each Cluster resource: rw : Points to the primary instance of the cluster (read/write). ro : Points to the replicas, where available (read-only). r : Points to any PostgreSQL instance in the cluster (read). By default, CloudNativePG creates all the above services for a Cluster resource, with the following conventions: The name of the service follows this format: <CLUSTER_NAME>-<SERVICE_NAME> . All services are of type ClusterIP . Important Default service names are reserved for CloudNativePG usage. While this setup covers most use cases for accessing PostgreSQL within the same Kubernetes cluster, CloudNativePG offers flexibility to: Disable the creation of the ro and/or r default services. Define your own services using the standard Service API provided by Kubernetes. You can mix these two options. A common scenario arises when using CloudNativePG in database-as-a-service (DBaaS) contexts, where access to the database from outside the Kubernetes cluster is required. In such cases, you can create your own service of type LoadBalancer , if available in your Kubernetes environment. Disabling Default Services You can disable any or all of the ro and r default services through the managed.services.disabledDefaultServices option . Important The rw service is essential and cannot be disabled because CloudNativePG relies on it to ensure PostgreSQL replication. For example, if you want to remove both the ro (read-only) and r (read) services, you can use this configuration: # <snip> managed: services: disabledDefaultServices: [\"ro\", \"r\"] Adding Your Own Services Important When defining your own services, you cannot use any of the default reserved service names that follow the convention <CLUSTER_NAME>-<SERVICE_NAME> . It is your responsibility to pick a unique name for the service in the Kubernetes namespace. You can define a list of additional services through the managed.services.additional stanza by specifying the service type (e.g., rw ) in the selectorType field and optionally the updateStrategy . The serviceTemplate field gives you access to the standard Kubernetes API for the network Service resource, allowing you to define both the metadata and the spec sections as you like. You must provide a name to the service and avoid defining the selector field, as it is managed by the operator. Warning Service templates give you unlimited possibilities in terms of configuring network access to your PostgreSQL database. This translates into greater responsibility on your end to ensure that services work as expected. CloudNativePG has no control over the service configuration, except honoring the selector. The updateStrategy field allows you to control how the operator updates a service definition. By default, the operator uses the patch strategy, applying changes directly to the service. Alternatively, the replace strategy deletes the existing service and recreates it from the template. Warning The replace strategy will cause a service disruption with every change. However, it may be necessary for modifying certain parameters that can only be set during service creation. For example, if you want to have a single LoadBalancer service for your PostgreSQL database primary, you can use the following excerpt: # <snip> managed: services: additional: - selectorType: rw serviceTemplate: metadata: name: \"mydb-lb\" labels: test-label: \"true\" annotations: test-annotation: \"true\" spec: type: LoadBalancer The above example also shows how to set metadata such as annotations and labels for the created service. About Exposing Postgres Services There are primarily three use cases for exposing your PostgreSQL service outside your Kubernetes cluster: Temporarily, for testing. Permanently, for DBaaS purposes . Prolonged period/permanently, for legacy applications that cannot be easily or sustainably containerized and need to reside in a virtual machine or physical machine outside Kubernetes. This use case is very similar to DBaaS. Be aware that allowing access to a database from the public network could expose your database to potential attacks from malicious users. Warning Ensure you secure your database before granting external access, or make sure your Kubernetes cluster is only reachable from a private network.","title":"Service Management"},{"location":"service_management/#service-management","text":"A PostgreSQL cluster should only be accessed via standard Kubernetes network services directly managed by CloudNativePG. For more details, refer to the \"Service\" page of the Kubernetes Documentation . CloudNativePG defines three types of services for each Cluster resource: rw : Points to the primary instance of the cluster (read/write). ro : Points to the replicas, where available (read-only). r : Points to any PostgreSQL instance in the cluster (read). By default, CloudNativePG creates all the above services for a Cluster resource, with the following conventions: The name of the service follows this format: <CLUSTER_NAME>-<SERVICE_NAME> . All services are of type ClusterIP . Important Default service names are reserved for CloudNativePG usage. While this setup covers most use cases for accessing PostgreSQL within the same Kubernetes cluster, CloudNativePG offers flexibility to: Disable the creation of the ro and/or r default services. Define your own services using the standard Service API provided by Kubernetes. You can mix these two options. A common scenario arises when using CloudNativePG in database-as-a-service (DBaaS) contexts, where access to the database from outside the Kubernetes cluster is required. In such cases, you can create your own service of type LoadBalancer , if available in your Kubernetes environment.","title":"Service Management"},{"location":"service_management/#disabling-default-services","text":"You can disable any or all of the ro and r default services through the managed.services.disabledDefaultServices option . Important The rw service is essential and cannot be disabled because CloudNativePG relies on it to ensure PostgreSQL replication. For example, if you want to remove both the ro (read-only) and r (read) services, you can use this configuration: # <snip> managed: services: disabledDefaultServices: [\"ro\", \"r\"]","title":"Disabling Default Services"},{"location":"service_management/#adding-your-own-services","text":"Important When defining your own services, you cannot use any of the default reserved service names that follow the convention <CLUSTER_NAME>-<SERVICE_NAME> . It is your responsibility to pick a unique name for the service in the Kubernetes namespace. You can define a list of additional services through the managed.services.additional stanza by specifying the service type (e.g., rw ) in the selectorType field and optionally the updateStrategy . The serviceTemplate field gives you access to the standard Kubernetes API for the network Service resource, allowing you to define both the metadata and the spec sections as you like. You must provide a name to the service and avoid defining the selector field, as it is managed by the operator. Warning Service templates give you unlimited possibilities in terms of configuring network access to your PostgreSQL database. This translates into greater responsibility on your end to ensure that services work as expected. CloudNativePG has no control over the service configuration, except honoring the selector. The updateStrategy field allows you to control how the operator updates a service definition. By default, the operator uses the patch strategy, applying changes directly to the service. Alternatively, the replace strategy deletes the existing service and recreates it from the template. Warning The replace strategy will cause a service disruption with every change. However, it may be necessary for modifying certain parameters that can only be set during service creation. For example, if you want to have a single LoadBalancer service for your PostgreSQL database primary, you can use the following excerpt: # <snip> managed: services: additional: - selectorType: rw serviceTemplate: metadata: name: \"mydb-lb\" labels: test-label: \"true\" annotations: test-annotation: \"true\" spec: type: LoadBalancer The above example also shows how to set metadata such as annotations and labels for the created service.","title":"Adding Your Own Services"},{"location":"service_management/#about-exposing-postgres-services","text":"There are primarily three use cases for exposing your PostgreSQL service outside your Kubernetes cluster: Temporarily, for testing. Permanently, for DBaaS purposes . Prolonged period/permanently, for legacy applications that cannot be easily or sustainably containerized and need to reside in a virtual machine or physical machine outside Kubernetes. This use case is very similar to DBaaS. Be aware that allowing access to a database from the public network could expose your database to potential attacks from malicious users. Warning Ensure you secure your database before granting external access, or make sure your Kubernetes cluster is only reachable from a private network.","title":"About Exposing Postgres Services"},{"location":"ssl_connections/","text":"Client TLS/SSL connections Certificates See Certificates for more details on how CloudNativePG supports TLS certificates. The CloudNativePG operator was designed to work with TLS/SSL for both encryption in transit and authentication on the server and client sides. Clusters created using the CNPG operator come with a certification authority (CA) to create and sign TLS client certificates. Using the cnpg plugin for kubectl, you can issue a new TLS client certificate for authenticating a user instead of using passwords. These instructions for authenticating using TLS/SSL certificates assume you installed a cluster using the cluster-example-pg-hba.yaml manifest. According to the convention-over-configuration paradigm, that file creates an app database that's owned by a user called app. (You can change this convention by way of the initdb configuration in the bootstrap section.) Issuing a new certificate About CNPG plugin for kubectl See the Certificates in the CloudNativePG plugin content for details on how to use the plugin for kubectl. You can create a certificate for the app user in the cluster-example PostgreSQL cluster as follows: kubectl cnpg certificate cluster-app \\ --cnpg-cluster cluster-example \\ --cnpg-user app You can now verify the certificate: kubectl get secret cluster-app \\ -o jsonpath=\"{.data['tls\\.crt']}\" \\ | base64 -d | openssl x509 -text -noout \\ | head -n 11 Output: Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e1:72:8a:39:9f:ce:51:19:9d:21:ff:1e:4b:24:5d Signature Algorithm: ecdsa-with-SHA256 Issuer: OU = default, CN = cluster-example Validity Not Before: Mar 22 10:22:14 2021 GMT Not After : Mar 22 10:22:14 2022 GMT Subject: CN = app As you can see, TLS client certificates by default are created with 90 days of validity, and with a simple CN that corresponds to the username in PostgreSQL. You can specify the validity and threshold values using the EXPIRE_CHECK_THRESHOLD and CERTIFICATE_DURATION parameters. This is necessary to leverage the cert authentication method for hostssl entries in pg_hba.conf . Testing the connection via a TLS certificate Next, test this client certificate by configuring a demo client application that connects to your CloudNativePG cluster. The following manifest, called cert-test.yaml , creates a demo pod with a test application in the same namespace where your database cluster is running: apiVersion: apps/v1 kind: Deployment metadata: name: cert-test spec: replicas: 1 selector: matchLabels: app: webtest template: metadata: labels: app: webtest spec: containers: - image: ghcr.io/cloudnative-pg/webtest:1.7.0 name: cert-test volumeMounts: - name: secret-volume-root-ca mountPath: /etc/secrets/ca - name: secret-volume-app mountPath: /etc/secrets/app ports: - containerPort: 8080 env: - name: DATABASE_URL value: > sslkey=/etc/secrets/app/tls.key sslcert=/etc/secrets/app/tls.crt sslrootcert=/etc/secrets/ca/ca.crt host=cluster-example-rw.default.svc dbname=app user=app sslmode=verify-full - name: SQL_QUERY value: SELECT 1 readinessProbe: httpGet: port: 8080 path: /tx volumes: - name: secret-volume-root-ca secret: secretName: cluster-example-ca defaultMode: 0600 - name: secret-volume-app secret: secretName: cluster-app defaultMode: 0600 This pod mounts secrets managed by the CloudNativePG operator, including: sslcert \u2013 The TLS client public certificate. sslkey \u2013 The TLS client certificate private key. sslrootcert \u2013 The TLS CA certificate that signed the certificate on the server to use to verify the identity of the instances. They're used to create the default resources that psql (and other libpq-based applications, like pgbench) requires to establish a TLS-encrypted connection to the Postgres database. By default, psql searches for certificates in the ~/.postgresql directory of the current user, but you can use the sslkey , sslcert , and sslrootcert options to point libpq to the actual location of the cryptographic material. The content of these files is gathered from the secrets that were previously created by using the cnpg plugin for kubectl. Deploy the application: kubectl create -f cert-test.yaml Then use the created pod as the PostgreSQL client to validate the SSL connection and authentication using the TLS certificates you just created. A readiness probe was configured to ensure that the application is ready when the database server can be reached. You can verify that the connection works. To do so, execute an interactive bash inside the pod's container to run psql using the necessary options. The PostgreSQL server is exposed through the read-write Kubernetes service. Point the psql command to connect to this service: kubectl exec -it cert-test -- bash -c \"psql 'sslkey=/etc/secrets/app/tls.key sslcert=/etc/secrets/app/tls.crt sslrootcert=/etc/secrets/ca/ca.crt host=cluster-example-rw.default.svc dbname=app user=app sslmode=verify-full' -c 'select version();'\" Output: version -------------------------------------------------------------------------------------- ------------------ PostgreSQL 17.5 on x86_64-pc-linux-gnu, compiled by gcc (GCC) 8.3.1 20191121 (Red Hat 8.3.1-5), 64-bit (1 row) About TLS protocol versions By default, the operator sets both ssl_min_protocol_version and ssl_max_protocol_version to TLSv1.3 . This assumes that the PostgreSQL operand images include an OpenSSL library that supports the TLSv1.3 version. If not, or if your client applications need a lower version number, you need to manually configure it in the PostgreSQL configuration as any other Postgres GUC.","title":"Client TLS/SSL connections"},{"location":"ssl_connections/#client-tlsssl-connections","text":"Certificates See Certificates for more details on how CloudNativePG supports TLS certificates. The CloudNativePG operator was designed to work with TLS/SSL for both encryption in transit and authentication on the server and client sides. Clusters created using the CNPG operator come with a certification authority (CA) to create and sign TLS client certificates. Using the cnpg plugin for kubectl, you can issue a new TLS client certificate for authenticating a user instead of using passwords. These instructions for authenticating using TLS/SSL certificates assume you installed a cluster using the cluster-example-pg-hba.yaml manifest. According to the convention-over-configuration paradigm, that file creates an app database that's owned by a user called app. (You can change this convention by way of the initdb configuration in the bootstrap section.)","title":"Client TLS/SSL connections"},{"location":"ssl_connections/#issuing-a-new-certificate","text":"About CNPG plugin for kubectl See the Certificates in the CloudNativePG plugin content for details on how to use the plugin for kubectl. You can create a certificate for the app user in the cluster-example PostgreSQL cluster as follows: kubectl cnpg certificate cluster-app \\ --cnpg-cluster cluster-example \\ --cnpg-user app You can now verify the certificate: kubectl get secret cluster-app \\ -o jsonpath=\"{.data['tls\\.crt']}\" \\ | base64 -d | openssl x509 -text -noout \\ | head -n 11 Output: Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e1:72:8a:39:9f:ce:51:19:9d:21:ff:1e:4b:24:5d Signature Algorithm: ecdsa-with-SHA256 Issuer: OU = default, CN = cluster-example Validity Not Before: Mar 22 10:22:14 2021 GMT Not After : Mar 22 10:22:14 2022 GMT Subject: CN = app As you can see, TLS client certificates by default are created with 90 days of validity, and with a simple CN that corresponds to the username in PostgreSQL. You can specify the validity and threshold values using the EXPIRE_CHECK_THRESHOLD and CERTIFICATE_DURATION parameters. This is necessary to leverage the cert authentication method for hostssl entries in pg_hba.conf .","title":"Issuing a new certificate"},{"location":"ssl_connections/#testing-the-connection-via-a-tls-certificate","text":"Next, test this client certificate by configuring a demo client application that connects to your CloudNativePG cluster. The following manifest, called cert-test.yaml , creates a demo pod with a test application in the same namespace where your database cluster is running: apiVersion: apps/v1 kind: Deployment metadata: name: cert-test spec: replicas: 1 selector: matchLabels: app: webtest template: metadata: labels: app: webtest spec: containers: - image: ghcr.io/cloudnative-pg/webtest:1.7.0 name: cert-test volumeMounts: - name: secret-volume-root-ca mountPath: /etc/secrets/ca - name: secret-volume-app mountPath: /etc/secrets/app ports: - containerPort: 8080 env: - name: DATABASE_URL value: > sslkey=/etc/secrets/app/tls.key sslcert=/etc/secrets/app/tls.crt sslrootcert=/etc/secrets/ca/ca.crt host=cluster-example-rw.default.svc dbname=app user=app sslmode=verify-full - name: SQL_QUERY value: SELECT 1 readinessProbe: httpGet: port: 8080 path: /tx volumes: - name: secret-volume-root-ca secret: secretName: cluster-example-ca defaultMode: 0600 - name: secret-volume-app secret: secretName: cluster-app defaultMode: 0600 This pod mounts secrets managed by the CloudNativePG operator, including: sslcert \u2013 The TLS client public certificate. sslkey \u2013 The TLS client certificate private key. sslrootcert \u2013 The TLS CA certificate that signed the certificate on the server to use to verify the identity of the instances. They're used to create the default resources that psql (and other libpq-based applications, like pgbench) requires to establish a TLS-encrypted connection to the Postgres database. By default, psql searches for certificates in the ~/.postgresql directory of the current user, but you can use the sslkey , sslcert , and sslrootcert options to point libpq to the actual location of the cryptographic material. The content of these files is gathered from the secrets that were previously created by using the cnpg plugin for kubectl. Deploy the application: kubectl create -f cert-test.yaml Then use the created pod as the PostgreSQL client to validate the SSL connection and authentication using the TLS certificates you just created. A readiness probe was configured to ensure that the application is ready when the database server can be reached. You can verify that the connection works. To do so, execute an interactive bash inside the pod's container to run psql using the necessary options. The PostgreSQL server is exposed through the read-write Kubernetes service. Point the psql command to connect to this service: kubectl exec -it cert-test -- bash -c \"psql 'sslkey=/etc/secrets/app/tls.key sslcert=/etc/secrets/app/tls.crt sslrootcert=/etc/secrets/ca/ca.crt host=cluster-example-rw.default.svc dbname=app user=app sslmode=verify-full' -c 'select version();'\" Output: version -------------------------------------------------------------------------------------- ------------------ PostgreSQL 17.5 on x86_64-pc-linux-gnu, compiled by gcc (GCC) 8.3.1 20191121 (Red Hat 8.3.1-5), 64-bit (1 row)","title":"Testing the connection via a TLS certificate"},{"location":"ssl_connections/#about-tls-protocol-versions","text":"By default, the operator sets both ssl_min_protocol_version and ssl_max_protocol_version to TLSv1.3 . This assumes that the PostgreSQL operand images include an OpenSSL library that supports the TLSv1.3 version. If not, or if your client applications need a lower version number, you need to manually configure it in the PostgreSQL configuration as any other Postgres GUC.","title":"About TLS protocol versions"},{"location":"storage/","text":"Storage Storage is the most critical component in a database workload. Storage must always be available, scale, perform well, and guarantee consistency and durability. The same expectations and requirements that apply to traditional environments, such as virtual machines and bare metal, are also valid in container contexts managed by Kubernetes. Important When it comes to dynamically provisioned storage, Kubernetes has its own specifics. These include storage classes , persistent volumes , and Persistent Volume Claims (PVCs) . You need to own these concepts, on top of all the valuable knowledge you've built over the years in terms of storage for database workloads on VMs and physical servers. There are two primary methods of access to storage: Network \u2013 Either directly or indirectly. (Think of an NFS volume locally mounted on a host running Kubernetes.) Local \u2013 Directly attached to the node where a pod is running. This also includes directly attached disks on bare metal installations of Kubernetes. Network storage, which is the most common usage pattern in Kubernetes, presents the same issues of throughput and latency that you can experience in a traditional environment. These issues can be accentuated in a shared environment, where I/O contention with several applications increases the variability of performance results. Local storage enables shared-nothing architectures, which is more suitable for high transactional and very large database (VLDB) workloads, as it guarantees higher and more predictable performance. Warning Before you deploy a PostgreSQL cluster with CloudNativePG, ensure that the storage you're using is recommended for database workloads. We recommend clearly setting performance expectations by first benchmarking the storage using tools such as fio and then the database using pgbench . Info CloudNativePG doesn't use StatefulSet for managing data persistence. Rather, it manages PVCs directly. If you want to know more, see Custom pod controller . Backup and recovery Since CloudNativePG supports volume snapshots for both backup and recovery, we recommend that you also consider this aspect when you choose your storage solution, especially if you manage very large databases. Important See the Kubernetes documentation for a list of all the supported container storage interface (CSI) drivers that provide snapshot capabilities. Benchmarking CloudNativePG Before deploying the database in production, we recommend that you benchmark CloudNativePG in a controlled Kubernetes environment. Follow the guidelines in Benchmarking . Briefly, we recommend operating at two levels: Measuring the performance of the underlying storage using fio, with relevant metrics for database workloads such as throughput for sequential reads, sequential writes, random reads, and random writes Measuring the performance of the database using pgbench, the default benchmarking tool distributed with PostgreSQL Important You must measure both the storage and database performance before putting the database into production. These results are extremely valuable not just in the planning phase (for example, capacity planning). They are also valuable in the production lifecycle, particularly in emergency situations when you don't have time to run this kind of test. Databases change and evolve over time, and so does the distribution of data, potentially affecting performance. Knowing the theoretical maximum throughput of sequential reads or writes is extremely useful in those situations. This is true especially in shared-nothing contexts, where results don't vary due to the influence of external workloads. Know your system: benchmark it. Encryption at rest Encryption at rest is possible with CloudNativePG. The operator delegates that to the underlying storage class. See the storage class for information about this important security feature. Persistent Volume Claim (PVC) The operator creates a PVC for each PostgreSQL instance, with the goal of storing the PGDATA . It then mounts it into each pod. Additionally, it supports creating clusters with: A separate PVC on which to store PostgreSQL WAL, as explained in Volume for WAL Additional separate volumes reserved for PostgreSQL tablespaces, as explained in Tablespaces In CloudNativePG, the volumes attached to a single PostgreSQL instance are defined as a PVC group . Configuration via a storage class Important CloudNativePG was designed to work interchangeably with all storage classes. As usual, we recommend properly benchmarking the storage class in a controlled environment before deploying to production. The easiest way to configure the storage for a PostgreSQL class is to request storage of a certain size, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-storage-class spec: instances: 3 storage: size: 1Gi Using the previous configuration, the generated PVCs are satisfied by the default storage class. If the target Kubernetes cluster has no default storage class, or even if you need your PVCs to be satisfied by a known storage class, you can set it into the custom resource: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-storage-class spec: instances: 3 storage: storageClass: standard size: 1Gi Configuration via a PVC template To further customize the generated PVCs, you can provide a PVC template inside the custom resource, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-pvc-template spec: instances: 3 storage: pvcTemplate: accessModes: - ReadWriteOnce resources: requests: storage: 1Gi storageClassName: standard volumeMode: Filesystem Volume for WAL By default, PostgreSQL stores all its data in the so-called PGDATA (a directory). One of the core directories inside PGDATA is pg_wal , which contains the log of transactional changes that occurred in the database, in the form of segment files. ( pg_wal is historically known as pg_xlog in PostgreSQL.) Info Normally, each segment is 16MB in size, but you can configure the size using the walSegmentSize option. This option is applied at cluster initialization time, as described in Bootstrap an empty cluster . In most cases, having pg_wal on the same volume where PGDATA resides is fine. However, having WALs stored in a separate volume has a few benefits: I/O performance \u2013 By storing WAL files on different storage from PGDATA , PostgreSQL can exploit parallel I/O for WAL operations (normally sequential writes) and for data files (tables and indexes for example), thus improving vertical scalability. More reliability \u2013 By reserving dedicated disk space to WAL files, you can be sure that exhausting space on the PGDATA volume never interferes with WAL writing. This behavior ensures that your PostgreSQL primary is correctly shut down. Finer control \u2013 You can define the amount of space dedicated to both PGDATA and pg_wal , fine tune WAL configuration and checkpoints, and even use a different storage class for cost optimization. Better I/O monitoring \u2013 You can constantly monitor the load and disk usage on both PGDATA and pg_wal . You can also set alerts that notify you in case, for example, PGDATA requires resizing. Write-Ahead Log (WAL) See Reliability and the Write-Ahead Log in the PostgreSQL documentation for more information. You can add a separate volume for WAL using the .spec.walStorage option. It follows the same rules described for the storage field and provisions a dedicated PVC. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: separate-pgwal-volume spec: instances: 3 storage: size: 1Gi walStorage: size: 1Gi Important Removing walStorage isn't supported. Once added, a separate volume for WALs can't be removed from an existing Postgres cluster. Volumes for tablespaces CloudNativePG supports declarative tablespaces. You can add one or more volumes, each dedicated to a single PostgreSQL tablespace. See Tablespaces for details. Volume expansion Kubernetes exposes an API allowing expanding PVCs that's enabled by default. However, it needs to be supported by the underlying StorageClass . To check if a certain StorageClass supports volume expansion, you can read the allowVolumeExpansion field for your storage class: $ kubectl get storageclass -o jsonpath='{$.allowVolumeExpansion}' premium-storage true Using the volume expansion Kubernetes feature Given the storage class supports volume expansion, you can change the size requirement of the Cluster , and the operator applies the change to every PVC. If the StorageClass supports online volume resizing , the change is immediately applied to the pods. If the underlying storage class doesn't support that, you must delete the pod to trigger the resize. The best way to proceed is to delete one pod at a time, starting from replicas and waiting for each pod to be back up. Re-creating storage If the storage class doesn't support volume expansion, you can still regenerate your cluster on different PVCs. Allocate new PVCs with increased storage and then move the database there. This operation is feasible only when the cluster contains more than one node. While you do that, you need to prevent the operator from changing the existing PVC by disabling the resizeInUseVolumes flag, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-pvc-template spec: instances: 3 storage: storageClass: standard size: 1Gi resizeInUseVolumes: False To move the entire cluster to a different storage area, you need to re-create all the PVCs and all the pods. Suppose you have a cluster with three replicas, like in the following example: $ kubectl get pods NAME READY STATUS RESTARTS AGE cluster-example-1 1/1 Running 0 2m37s cluster-example-2 1/1 Running 0 2m22s cluster-example-3 1/1 Running 0 2m10s To re-create the cluster using different PVCs, you can edit the cluster definition to disable resizeInUseVolumes . Then re-create every instance in a different PVC. For example, re-create the storage for cluster-example-3 : $ kubectl delete pvc/cluster-example-3 pod/cluster-example-3 Important If you created a dedicated WAL volume, both PVCs must be deleted during this process. The same procedure applies if you want to regenerate the WAL volume PVC. You can do this by also disabling resizeInUseVolumes for the .spec.walStorage section. For example, if a PVC dedicated to WAL storage is present: $ kubectl delete pvc/cluster-example-3 pvc/cluster-example-3-wal pod/cluster-example-3 Having done that, the operator orchestrates creating another replica with a resized PVC: $ kubectl get pods NAME READY STATUS RESTARTS AGE cluster-example-1 1/1 Running 0 5m58s cluster-example-2 1/1 Running 0 5m43s cluster-example-4-join-v2 0/1 Completed 0 17s cluster-example-4 1/1 Running 0 10s Static provisioning of persistent volumes CloudNativePG was designed to work with dynamic volume provisioning. This capability allows storage volumes to be created on demand when requested by users by way of storage classes and PVC templates. See Re-creating storage . However, in some cases, Kubernetes administrators prefer to manually create storage volumes and then create the related PersistentVolume objects for their representation inside the Kubernetes cluster. This is also known as pre-provisioning of volumes. Important We recommend that you avoid pre-provisioning volumes, as it has an effect on the high availability and self-healing capabilities of the operator. It breaks the fully declarative model on which CloudNativePG was built. To use a pre-provisioned volume in CloudNativePG: Manually create the volume outside Kubernetes. Create the PersistentVolume object to match this volume using the correct parameters as required by the actual CSI driver (that is, volumeHandle , fsType , storageClassName , and so on). Create the Postgres Cluster using, for each storage section, a coherent pvcTemplate section that can help Kubernetes match the PersistentVolume and enable CloudNativePG to create the needed PersistentVolumeClaim . Warning With static provisioning, it's your responsibility to ensure that Postgres pods can be correctly scheduled by Kubernetes where a pre-provisioned volume exists. (The scheduling configuration is based on the affinity rules of your cluster.) Make sure you check for any pods stuck in Pending after you deploy the cluster. If the condition persists, investigate why it's happening. Block storage considerations (Ceph/Longhorn) Most block storage solutions in Kubernetes, such as Longhorn and Ceph, recommend having multiple replicas of a volume to enhance resiliency. This approach works well for workloads that lack built-in resiliency. However, CloudNativePG integrates this resiliency directly into the Postgres Cluster through the number of instances and the persistent volumes attached to them, as explained in \"Synchronizing the state\" . As a result, defining additional replicas at the storage level can lead to write amplification, unnecessarily increasing disk I/O and space usage. For CloudNativePG usage, consider reducing the number of replicas at the block storage level to one, while ensuring that no single point of failure (SPoF) exists at the storage level for the entire Cluster resource. This typically means ensuring that a single storage host\u2014and ultimately, a physical disk\u2014does not host blocks from different instances of the same Cluster , in alignment with the broader shared-nothing architecture principle. In Longhorn, you can mitigate this risk by enabling strict-local data locality when creating a custom storage class. Detailed instructions for creating a volume with strict-local data locality are available here . This setting ensures that a pod\u2019s data volume resides on the same node as the pod itself. Additionally, your Postgres Cluster should have pod anti-affinity rules in place to ensure that the operator deploys pods across different nodes, allowing Longhorn to place the data volumes on the corresponding hosts. If needed, you can manually relocate volumes in Longhorn by temporarily setting the volume replica count to 2, reducing it afterward, and then removing the old replica. If a host becomes corrupted, you can use the cnpg plugin to destroy the affected instance. CloudNativePG will then recreate the instance on another host and replicate the data. In Ceph, this can be configured through CRUSH rules. The documentation for configuring CRUSH rules is available here . These rules aim to ensure one volume per pod per node. You can also relocate volumes by importing them into a different pool.","title":"Storage"},{"location":"storage/#storage","text":"Storage is the most critical component in a database workload. Storage must always be available, scale, perform well, and guarantee consistency and durability. The same expectations and requirements that apply to traditional environments, such as virtual machines and bare metal, are also valid in container contexts managed by Kubernetes. Important When it comes to dynamically provisioned storage, Kubernetes has its own specifics. These include storage classes , persistent volumes , and Persistent Volume Claims (PVCs) . You need to own these concepts, on top of all the valuable knowledge you've built over the years in terms of storage for database workloads on VMs and physical servers. There are two primary methods of access to storage: Network \u2013 Either directly or indirectly. (Think of an NFS volume locally mounted on a host running Kubernetes.) Local \u2013 Directly attached to the node where a pod is running. This also includes directly attached disks on bare metal installations of Kubernetes. Network storage, which is the most common usage pattern in Kubernetes, presents the same issues of throughput and latency that you can experience in a traditional environment. These issues can be accentuated in a shared environment, where I/O contention with several applications increases the variability of performance results. Local storage enables shared-nothing architectures, which is more suitable for high transactional and very large database (VLDB) workloads, as it guarantees higher and more predictable performance. Warning Before you deploy a PostgreSQL cluster with CloudNativePG, ensure that the storage you're using is recommended for database workloads. We recommend clearly setting performance expectations by first benchmarking the storage using tools such as fio and then the database using pgbench . Info CloudNativePG doesn't use StatefulSet for managing data persistence. Rather, it manages PVCs directly. If you want to know more, see Custom pod controller .","title":"Storage"},{"location":"storage/#backup-and-recovery","text":"Since CloudNativePG supports volume snapshots for both backup and recovery, we recommend that you also consider this aspect when you choose your storage solution, especially if you manage very large databases. Important See the Kubernetes documentation for a list of all the supported container storage interface (CSI) drivers that provide snapshot capabilities.","title":"Backup and recovery"},{"location":"storage/#benchmarking-cloudnativepg","text":"Before deploying the database in production, we recommend that you benchmark CloudNativePG in a controlled Kubernetes environment. Follow the guidelines in Benchmarking . Briefly, we recommend operating at two levels: Measuring the performance of the underlying storage using fio, with relevant metrics for database workloads such as throughput for sequential reads, sequential writes, random reads, and random writes Measuring the performance of the database using pgbench, the default benchmarking tool distributed with PostgreSQL Important You must measure both the storage and database performance before putting the database into production. These results are extremely valuable not just in the planning phase (for example, capacity planning). They are also valuable in the production lifecycle, particularly in emergency situations when you don't have time to run this kind of test. Databases change and evolve over time, and so does the distribution of data, potentially affecting performance. Knowing the theoretical maximum throughput of sequential reads or writes is extremely useful in those situations. This is true especially in shared-nothing contexts, where results don't vary due to the influence of external workloads. Know your system: benchmark it.","title":"Benchmarking CloudNativePG"},{"location":"storage/#encryption-at-rest","text":"Encryption at rest is possible with CloudNativePG. The operator delegates that to the underlying storage class. See the storage class for information about this important security feature.","title":"Encryption at rest"},{"location":"storage/#persistent-volume-claim-pvc","text":"The operator creates a PVC for each PostgreSQL instance, with the goal of storing the PGDATA . It then mounts it into each pod. Additionally, it supports creating clusters with: A separate PVC on which to store PostgreSQL WAL, as explained in Volume for WAL Additional separate volumes reserved for PostgreSQL tablespaces, as explained in Tablespaces In CloudNativePG, the volumes attached to a single PostgreSQL instance are defined as a PVC group .","title":"Persistent Volume Claim (PVC)"},{"location":"storage/#configuration-via-a-storage-class","text":"Important CloudNativePG was designed to work interchangeably with all storage classes. As usual, we recommend properly benchmarking the storage class in a controlled environment before deploying to production. The easiest way to configure the storage for a PostgreSQL class is to request storage of a certain size, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-storage-class spec: instances: 3 storage: size: 1Gi Using the previous configuration, the generated PVCs are satisfied by the default storage class. If the target Kubernetes cluster has no default storage class, or even if you need your PVCs to be satisfied by a known storage class, you can set it into the custom resource: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-storage-class spec: instances: 3 storage: storageClass: standard size: 1Gi","title":"Configuration via a storage class"},{"location":"storage/#configuration-via-a-pvc-template","text":"To further customize the generated PVCs, you can provide a PVC template inside the custom resource, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-pvc-template spec: instances: 3 storage: pvcTemplate: accessModes: - ReadWriteOnce resources: requests: storage: 1Gi storageClassName: standard volumeMode: Filesystem","title":"Configuration via a PVC template"},{"location":"storage/#volume-for-wal","text":"By default, PostgreSQL stores all its data in the so-called PGDATA (a directory). One of the core directories inside PGDATA is pg_wal , which contains the log of transactional changes that occurred in the database, in the form of segment files. ( pg_wal is historically known as pg_xlog in PostgreSQL.) Info Normally, each segment is 16MB in size, but you can configure the size using the walSegmentSize option. This option is applied at cluster initialization time, as described in Bootstrap an empty cluster . In most cases, having pg_wal on the same volume where PGDATA resides is fine. However, having WALs stored in a separate volume has a few benefits: I/O performance \u2013 By storing WAL files on different storage from PGDATA , PostgreSQL can exploit parallel I/O for WAL operations (normally sequential writes) and for data files (tables and indexes for example), thus improving vertical scalability. More reliability \u2013 By reserving dedicated disk space to WAL files, you can be sure that exhausting space on the PGDATA volume never interferes with WAL writing. This behavior ensures that your PostgreSQL primary is correctly shut down. Finer control \u2013 You can define the amount of space dedicated to both PGDATA and pg_wal , fine tune WAL configuration and checkpoints, and even use a different storage class for cost optimization. Better I/O monitoring \u2013 You can constantly monitor the load and disk usage on both PGDATA and pg_wal . You can also set alerts that notify you in case, for example, PGDATA requires resizing. Write-Ahead Log (WAL) See Reliability and the Write-Ahead Log in the PostgreSQL documentation for more information. You can add a separate volume for WAL using the .spec.walStorage option. It follows the same rules described for the storage field and provisions a dedicated PVC. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: separate-pgwal-volume spec: instances: 3 storage: size: 1Gi walStorage: size: 1Gi Important Removing walStorage isn't supported. Once added, a separate volume for WALs can't be removed from an existing Postgres cluster.","title":"Volume for WAL"},{"location":"storage/#volumes-for-tablespaces","text":"CloudNativePG supports declarative tablespaces. You can add one or more volumes, each dedicated to a single PostgreSQL tablespace. See Tablespaces for details.","title":"Volumes for tablespaces"},{"location":"storage/#volume-expansion","text":"Kubernetes exposes an API allowing expanding PVCs that's enabled by default. However, it needs to be supported by the underlying StorageClass . To check if a certain StorageClass supports volume expansion, you can read the allowVolumeExpansion field for your storage class: $ kubectl get storageclass -o jsonpath='{$.allowVolumeExpansion}' premium-storage true","title":"Volume expansion"},{"location":"storage/#using-the-volume-expansion-kubernetes-feature","text":"Given the storage class supports volume expansion, you can change the size requirement of the Cluster , and the operator applies the change to every PVC. If the StorageClass supports online volume resizing , the change is immediately applied to the pods. If the underlying storage class doesn't support that, you must delete the pod to trigger the resize. The best way to proceed is to delete one pod at a time, starting from replicas and waiting for each pod to be back up.","title":"Using the volume expansion Kubernetes feature"},{"location":"storage/#re-creating-storage","text":"If the storage class doesn't support volume expansion, you can still regenerate your cluster on different PVCs. Allocate new PVCs with increased storage and then move the database there. This operation is feasible only when the cluster contains more than one node. While you do that, you need to prevent the operator from changing the existing PVC by disabling the resizeInUseVolumes flag, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-pvc-template spec: instances: 3 storage: storageClass: standard size: 1Gi resizeInUseVolumes: False To move the entire cluster to a different storage area, you need to re-create all the PVCs and all the pods. Suppose you have a cluster with three replicas, like in the following example: $ kubectl get pods NAME READY STATUS RESTARTS AGE cluster-example-1 1/1 Running 0 2m37s cluster-example-2 1/1 Running 0 2m22s cluster-example-3 1/1 Running 0 2m10s To re-create the cluster using different PVCs, you can edit the cluster definition to disable resizeInUseVolumes . Then re-create every instance in a different PVC. For example, re-create the storage for cluster-example-3 : $ kubectl delete pvc/cluster-example-3 pod/cluster-example-3 Important If you created a dedicated WAL volume, both PVCs must be deleted during this process. The same procedure applies if you want to regenerate the WAL volume PVC. You can do this by also disabling resizeInUseVolumes for the .spec.walStorage section. For example, if a PVC dedicated to WAL storage is present: $ kubectl delete pvc/cluster-example-3 pvc/cluster-example-3-wal pod/cluster-example-3 Having done that, the operator orchestrates creating another replica with a resized PVC: $ kubectl get pods NAME READY STATUS RESTARTS AGE cluster-example-1 1/1 Running 0 5m58s cluster-example-2 1/1 Running 0 5m43s cluster-example-4-join-v2 0/1 Completed 0 17s cluster-example-4 1/1 Running 0 10s","title":"Re-creating storage"},{"location":"storage/#static-provisioning-of-persistent-volumes","text":"CloudNativePG was designed to work with dynamic volume provisioning. This capability allows storage volumes to be created on demand when requested by users by way of storage classes and PVC templates. See Re-creating storage . However, in some cases, Kubernetes administrators prefer to manually create storage volumes and then create the related PersistentVolume objects for their representation inside the Kubernetes cluster. This is also known as pre-provisioning of volumes. Important We recommend that you avoid pre-provisioning volumes, as it has an effect on the high availability and self-healing capabilities of the operator. It breaks the fully declarative model on which CloudNativePG was built. To use a pre-provisioned volume in CloudNativePG: Manually create the volume outside Kubernetes. Create the PersistentVolume object to match this volume using the correct parameters as required by the actual CSI driver (that is, volumeHandle , fsType , storageClassName , and so on). Create the Postgres Cluster using, for each storage section, a coherent pvcTemplate section that can help Kubernetes match the PersistentVolume and enable CloudNativePG to create the needed PersistentVolumeClaim . Warning With static provisioning, it's your responsibility to ensure that Postgres pods can be correctly scheduled by Kubernetes where a pre-provisioned volume exists. (The scheduling configuration is based on the affinity rules of your cluster.) Make sure you check for any pods stuck in Pending after you deploy the cluster. If the condition persists, investigate why it's happening.","title":"Static provisioning of persistent volumes"},{"location":"storage/#block-storage-considerations-cephlonghorn","text":"Most block storage solutions in Kubernetes, such as Longhorn and Ceph, recommend having multiple replicas of a volume to enhance resiliency. This approach works well for workloads that lack built-in resiliency. However, CloudNativePG integrates this resiliency directly into the Postgres Cluster through the number of instances and the persistent volumes attached to them, as explained in \"Synchronizing the state\" . As a result, defining additional replicas at the storage level can lead to write amplification, unnecessarily increasing disk I/O and space usage. For CloudNativePG usage, consider reducing the number of replicas at the block storage level to one, while ensuring that no single point of failure (SPoF) exists at the storage level for the entire Cluster resource. This typically means ensuring that a single storage host\u2014and ultimately, a physical disk\u2014does not host blocks from different instances of the same Cluster , in alignment with the broader shared-nothing architecture principle. In Longhorn, you can mitigate this risk by enabling strict-local data locality when creating a custom storage class. Detailed instructions for creating a volume with strict-local data locality are available here . This setting ensures that a pod\u2019s data volume resides on the same node as the pod itself. Additionally, your Postgres Cluster should have pod anti-affinity rules in place to ensure that the operator deploys pods across different nodes, allowing Longhorn to place the data volumes on the corresponding hosts. If needed, you can manually relocate volumes in Longhorn by temporarily setting the volume replica count to 2, reducing it afterward, and then removing the old replica. If a host becomes corrupted, you can use the cnpg plugin to destroy the affected instance. CloudNativePG will then recreate the instance on another host and replicate the data. In Ceph, this can be configured through CRUSH rules. The documentation for configuring CRUSH rules is available here . These rules aim to ensure one volume per pod per node. You can also relocate volumes by importing them into a different pool.","title":"Block storage considerations (Ceph/Longhorn)"},{"location":"supported_releases/","text":"Supported releases This page lists the status, timeline and policy for currently supported releases of CloudNativePG . We are committed to providing support for the latest minor release, with a dedication to launching a new minor release every three months. Each release remains fully supported until reaching its designated \"End of Life\" date, as outlined in the support status table for CloudNativePG releases . This includes an additional 3-month assistance window to facilitate seamless upgrade planning. Supported releases of CloudNativePG include releases that are in the active maintenance window and are patched for security and bug fixes. Subsequent patch releases on a minor release contain backward-compatible changes only. Support policy Naming scheme Support status of CloudNativePG releases What we mean by support Support Policy CloudNativePG produces new builds for each commit. Approximately every two months, we create a minor release that undergoes several additional tests and a thorough release qualification process. We release patch versions for issues found in supported minor releases. Before an official release, at least one Release Candidate (RC) is built for preview testing . Additional release candidates may be issued if new bugs are discovered. The Release Candidates are announced on the Slack channel to encourage community testing before the final release. The maintainers provide 1-2 weeks for community testing, and if no objections are raised, the final release is announced. Different types of releases represent varying levels of product quality and assistance from the CloudNativePG community. For details on the support provided by the community, see What we mean by support . Type Support level Quality and recommended Use Development Build No support Dangerous, might not be fully reliable. Useful to experiment with. Release Candidate No support Preview version: Not production-ready . Released for experimentation and testing. Minor Release Support provided until 3 months after the N+1 minor release (ex. 1.23 supported until 3 months after 1.24.0 is released) Patch Same as the corresponding minor release Users are encouraged to adopt patch releases as soon as they are available for a given release. Security Patch Same as a patch, however, it doesn't contain any additional code other than the security fix from the previous patch Given the nature of security fixes, users are strongly encouraged to adopt security patches after release. You can find available releases on the releases page . You can find high-level more information for each minor and patch release in the release notes . Sure, here\u2019s an improved version of the naming scheme section: Naming Scheme Our naming scheme follows Semantic Versioning 2.0.0 and is structured as follows: <major>.<minor>.<patch> <minor> is incremented for each release. <patch> counts the number of patches for the current <minor> release, representing small changes relative to the <minor> release. Release candidates are indicated by an additional -<pre-release> identifier following the patch version, as specified in Semantic Versioning 2.0.0 - item #9 . Git tags for versions are prefixed with v . Support status of CloudNativePG releases Version Currently supported Release date End of life Supported Kubernetes versions Tested, but not supported Supported Postgres versions 1.25.x Yes Dec 23, 2024 ~ Aug/Sep 2025 1.29, 1.30, 1.31, 1.32 1.27, 1.28 13 - 17 1.24.x Yes Aug 22, 2024 Mar 23, 2025 1.28, 1.29, 1.30, 1.31 1.27 13 - 17 main No, development only 13 - 17 The list of supported Kubernetes versions in the table depends on what the CloudNativePG maintainers think is reasonable to support and to test. Currently, the CloudNativePG community does not officially support or test any Kubernetes distributions beyond the standard/vanilla one - such as Red Hat OpenShift. This may change in the future, and if it does, the CloudNativePG maintainers will update the official policy accordingly. If you plan to deploy CloudNativePG on Red Hat OpenShift, you can use the certified operator provided by EDB , which comes with full support from EDB. Supported PostgreSQL versions The list of supported Postgres versions in the previous table generally depends on what PostgreSQL versions were supported by the community at the time the minor version of CloudNativePG was released. See the PostgreSQL Versioning Policy page for more information about supported versions. Info Starting from November 14, 2024, Postgres 12 is no longer supported . We also recommend that you regularly update your PostgreSQL operand images and use the latest minor release for the major version you have in use, as not upgrading is riskier than upgrading. As a result, when opening an issue with an older minor version of PostgreSQL, we might not be able to help you. Upcoming releases Version Release date End of life 1.26.0 ~ May, 2025 ~ Nov, 2025 1.27.0 ~ Aug, 2025 ~ Feb, 2026 1.28.0 ~ Nov, 2025 ~ May, 2026 1.29.0 ~ Feb, 2025 ~ Aug, 2026 Note Feature freeze occurs 1-2 weeks before the release, at which point a release candidate version is built and distributed for testing, as described earlier. Important Dates in the future are uncertain and might change. This applies to Kubernetes versions, too. Updates and changes on the release schedule will be communicated in the Release updates discussion in the main GitHub repository. Old releases Version Release date End of life Compatible Kubernetes versions 1.23.x April 24, 2024 November 24, 2024 1.27, 1.28, 1.29 1.22.x December 21, 2023 July 24, 2024 1.26, 1.27, 1.28 1.21.x October 12, 2023 Jun 12, 2024 1.25, 1.26, 1.27, 1.28 1.20.x April 27, 2023 January 21, 2024 1.24, 1.25, 1.26, 1.27 1.19.x February 14, 2023 November 3, 2023 1.23, 1.24, 1.25, 1.26 1.18.x Nov 10, 2022 June 12, 2023 1.23, 1.24, 1.25, 1.26, 1.27 1.17.x September 6, 2022 March 20, 2023 1.22, 1.23, 1.24 1.16.x July 7, 2022 December 21, 2022 1.22, 1.23, 1.24 1.15.x April 21, 2022 October 6, 2022 1.21, 1.22, 1.23 What we mean by support Our support window is roughly five months for each release branch (latest minor release, plus 3 additional months), given that we produce a new final release every two months. In the following diagram, release-1.23 is an example of a release branch. For example, if the latest release is v1.23.0 , you can expect a supplementary 3-month support period for the preceding release, v1.22.x . Only the last patch release of each branch is supported. ------+---------------------------------------------> main (trunk development) \\ \\ \\ \\ \\ \\ v1.23.0 \\ \\ Apr 24, 2024 ^ \\ \\----------+---------------> release-1.23 | \\ | SUPPORTED \\ | RELEASES \\ v1.22.0 | = last minor \\ Dec 21, 2023 | release + +-------------------+---------------> release-1.22 | 3 months v We offer two types of support: Technical support Technical assistance is offered on a best-effort basis and is limited to supported releases only. For help, you can reach out to the community via the #cloudnativepg-users channel on the CNCF Slack workspace (if you're not yet a member, you can join the workspace ). Alternatively, you can post your questions in the GitHub Discussions section of the CloudNativePG repository. Security and bug fixes We backport important bug fixes \u2014 including security fixes - to all currently supported releases. Before backporting a patch, we ask ourselves: \"Does this backport improve CloudNativePG , bearing in mind that we really value stability for already-released versions?\" If you\u2019re looking for professional support, please refer to the Support page on our website . The vendors listed there may offer service level agreements (SLA), including extended support periods and additional services.","title":"Supported releases"},{"location":"supported_releases/#supported-releases","text":"This page lists the status, timeline and policy for currently supported releases of CloudNativePG . We are committed to providing support for the latest minor release, with a dedication to launching a new minor release every three months. Each release remains fully supported until reaching its designated \"End of Life\" date, as outlined in the support status table for CloudNativePG releases . This includes an additional 3-month assistance window to facilitate seamless upgrade planning. Supported releases of CloudNativePG include releases that are in the active maintenance window and are patched for security and bug fixes. Subsequent patch releases on a minor release contain backward-compatible changes only. Support policy Naming scheme Support status of CloudNativePG releases What we mean by support","title":"Supported releases"},{"location":"supported_releases/#support-policy","text":"CloudNativePG produces new builds for each commit. Approximately every two months, we create a minor release that undergoes several additional tests and a thorough release qualification process. We release patch versions for issues found in supported minor releases. Before an official release, at least one Release Candidate (RC) is built for preview testing . Additional release candidates may be issued if new bugs are discovered. The Release Candidates are announced on the Slack channel to encourage community testing before the final release. The maintainers provide 1-2 weeks for community testing, and if no objections are raised, the final release is announced. Different types of releases represent varying levels of product quality and assistance from the CloudNativePG community. For details on the support provided by the community, see What we mean by support . Type Support level Quality and recommended Use Development Build No support Dangerous, might not be fully reliable. Useful to experiment with. Release Candidate No support Preview version: Not production-ready . Released for experimentation and testing. Minor Release Support provided until 3 months after the N+1 minor release (ex. 1.23 supported until 3 months after 1.24.0 is released) Patch Same as the corresponding minor release Users are encouraged to adopt patch releases as soon as they are available for a given release. Security Patch Same as a patch, however, it doesn't contain any additional code other than the security fix from the previous patch Given the nature of security fixes, users are strongly encouraged to adopt security patches after release. You can find available releases on the releases page . You can find high-level more information for each minor and patch release in the release notes . Sure, here\u2019s an improved version of the naming scheme section:","title":"Support Policy"},{"location":"supported_releases/#naming-scheme","text":"Our naming scheme follows Semantic Versioning 2.0.0 and is structured as follows: <major>.<minor>.<patch> <minor> is incremented for each release. <patch> counts the number of patches for the current <minor> release, representing small changes relative to the <minor> release. Release candidates are indicated by an additional -<pre-release> identifier following the patch version, as specified in Semantic Versioning 2.0.0 - item #9 . Git tags for versions are prefixed with v .","title":"Naming Scheme"},{"location":"supported_releases/#support-status-of-cloudnativepg-releases","text":"Version Currently supported Release date End of life Supported Kubernetes versions Tested, but not supported Supported Postgres versions 1.25.x Yes Dec 23, 2024 ~ Aug/Sep 2025 1.29, 1.30, 1.31, 1.32 1.27, 1.28 13 - 17 1.24.x Yes Aug 22, 2024 Mar 23, 2025 1.28, 1.29, 1.30, 1.31 1.27 13 - 17 main No, development only 13 - 17 The list of supported Kubernetes versions in the table depends on what the CloudNativePG maintainers think is reasonable to support and to test. Currently, the CloudNativePG community does not officially support or test any Kubernetes distributions beyond the standard/vanilla one - such as Red Hat OpenShift. This may change in the future, and if it does, the CloudNativePG maintainers will update the official policy accordingly. If you plan to deploy CloudNativePG on Red Hat OpenShift, you can use the certified operator provided by EDB , which comes with full support from EDB.","title":"Support status of CloudNativePG releases"},{"location":"supported_releases/#supported-postgresql-versions","text":"The list of supported Postgres versions in the previous table generally depends on what PostgreSQL versions were supported by the community at the time the minor version of CloudNativePG was released. See the PostgreSQL Versioning Policy page for more information about supported versions. Info Starting from November 14, 2024, Postgres 12 is no longer supported . We also recommend that you regularly update your PostgreSQL operand images and use the latest minor release for the major version you have in use, as not upgrading is riskier than upgrading. As a result, when opening an issue with an older minor version of PostgreSQL, we might not be able to help you.","title":"Supported PostgreSQL versions"},{"location":"supported_releases/#upcoming-releases","text":"Version Release date End of life 1.26.0 ~ May, 2025 ~ Nov, 2025 1.27.0 ~ Aug, 2025 ~ Feb, 2026 1.28.0 ~ Nov, 2025 ~ May, 2026 1.29.0 ~ Feb, 2025 ~ Aug, 2026 Note Feature freeze occurs 1-2 weeks before the release, at which point a release candidate version is built and distributed for testing, as described earlier. Important Dates in the future are uncertain and might change. This applies to Kubernetes versions, too. Updates and changes on the release schedule will be communicated in the Release updates discussion in the main GitHub repository.","title":"Upcoming releases"},{"location":"supported_releases/#old-releases","text":"Version Release date End of life Compatible Kubernetes versions 1.23.x April 24, 2024 November 24, 2024 1.27, 1.28, 1.29 1.22.x December 21, 2023 July 24, 2024 1.26, 1.27, 1.28 1.21.x October 12, 2023 Jun 12, 2024 1.25, 1.26, 1.27, 1.28 1.20.x April 27, 2023 January 21, 2024 1.24, 1.25, 1.26, 1.27 1.19.x February 14, 2023 November 3, 2023 1.23, 1.24, 1.25, 1.26 1.18.x Nov 10, 2022 June 12, 2023 1.23, 1.24, 1.25, 1.26, 1.27 1.17.x September 6, 2022 March 20, 2023 1.22, 1.23, 1.24 1.16.x July 7, 2022 December 21, 2022 1.22, 1.23, 1.24 1.15.x April 21, 2022 October 6, 2022 1.21, 1.22, 1.23","title":"Old releases"},{"location":"supported_releases/#what-we-mean-by-support","text":"Our support window is roughly five months for each release branch (latest minor release, plus 3 additional months), given that we produce a new final release every two months. In the following diagram, release-1.23 is an example of a release branch. For example, if the latest release is v1.23.0 , you can expect a supplementary 3-month support period for the preceding release, v1.22.x . Only the last patch release of each branch is supported. ------+---------------------------------------------> main (trunk development) \\ \\ \\ \\ \\ \\ v1.23.0 \\ \\ Apr 24, 2024 ^ \\ \\----------+---------------> release-1.23 | \\ | SUPPORTED \\ | RELEASES \\ v1.22.0 | = last minor \\ Dec 21, 2023 | release + +-------------------+---------------> release-1.22 | 3 months v We offer two types of support: Technical support Technical assistance is offered on a best-effort basis and is limited to supported releases only. For help, you can reach out to the community via the #cloudnativepg-users channel on the CNCF Slack workspace (if you're not yet a member, you can join the workspace ). Alternatively, you can post your questions in the GitHub Discussions section of the CloudNativePG repository. Security and bug fixes We backport important bug fixes \u2014 including security fixes - to all currently supported releases. Before backporting a patch, we ask ourselves: \"Does this backport improve CloudNativePG , bearing in mind that we really value stability for already-released versions?\" If you\u2019re looking for professional support, please refer to the Support page on our website . The vendors listed there may offer service level agreements (SLA), including extended support periods and additional services.","title":"What we mean by support"},{"location":"tablespaces/","text":"Tablespaces A tablespace is a robust and widely embraced feature in database management systems. It offers a powerful means to enhance the vertical scalability of a database by decoupling the physical and logical modeling of data. Essentially, it serves as a technique for physical database modeling, enabling the efficient distribution of I/O operations across multiple volumes on distinct storage. It thereby optimizes performance through parallel on-disk read/write operations. In the context of the database industry, tablespaces play a strategic role, particularly when paired with table partitioning, a logical database modeling technique. They prove instrumental in managing large-scale databases and are also used for tasks such as separating tables from indexes or executing temporary operations. Tablespaces in PostgreSQL have been playing a pivotal role since 2005 (version 8.0), while declarative partitioning was introduced in 2017 (version 10). Consequently, tablespaces are seamlessly integrated into all supported releases of PostgreSQL. Quoting from the PostgreSQL documentation on tablespaces : By using tablespaces, an administrator can control the disk layout of a PostgreSQL installation. This is useful in at least two ways. First, if the partition or volume on which the cluster was initialized runs out of space and cannot be extended, a tablespace can be created on a different partition and used until the system can be reconfigured. Second, tablespaces allow an administrator to use knowledge of the usage pattern of database objects to optimize performance. Declarative tablespaces CloudNativePG provides support for PostgreSQL tablespaces through declarative tablespaces , operating at two distinct levels: Kubernetes, managing persistent volume claims, identically to how PGDATA and WAL volumes are handled PostgreSQL, managing the TABLESPACE global objects in the PostgreSQL instance Being a part of the Kubernetes ecosystem, CloudNativePG's declarative tablespaces are implemented by leveraging persistent volume claims (and persistent volumes). Each tablespace defined in the cluster is housed in its own persistent volume. CloudNativePG takes care of generating the PVCs. It mounts the required volumes in the instance pods in normalized locations and ensures replicas are ready to support tablespaces before activating them in the primary. You can set up tablespaces when creating the cluster or add them later, provided the storage is available when requested. Currently, you can't remove them. However, this limitation will be addressed in a future minor or patch version of CloudNativePG. Using declarative tablespaces Using declarative tablespaces is straightforward. You can find a full example in cluster-example-with-tablespaces.yaml . To use them, use the new tablespaces stanza on a new or existing Cluster resource: spec: instances: 3 # ... tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 storage: size: 2Gi Each tablespace has its own storage section where you can configure the size and the storage class of the generated PVC. The administrator can thus plan to use different storage classes for different kinds of workloads, as explained in Storage classes and tablespaces . CloudNativePG creates the persistent volume claims for each instance in the high-availability Postgres cluster. It mounts them in each pod when they have been provisioned. Then, it ensures that the tbs1 , tbs2 , and tbs3 tablespaces are created on the primary PostgreSQL instance using the CREATE TABLESPACE command. This process is quick, and you see this reflected in Postgres: app=# SELECT oid, spcname FROM pg_tablespace; oid | spcname -------+-------------------- 1663 | pg_default 1664 | pg_global 16387 | tbs1 16388 | tbs2 16389 | tbs3 (5 rows) You can start using them right away: app=# CREATE TABLE fibonacci(num INTEGER) TABLESPACE tbs1; CREATE TABLE The cluster status has a section for tablespaces: status: <- snipped -> tablespacesStatus: - name: atablespace state: reconciled - name: another_tablespace state: reconciled - name: tablespacea1 state: reconciled Storage classes and tablespaces You can use different storage classes for your tablespaces, just as you can for PGDATA and WAL volumes. This is a convenient way of optimizing your resources, balancing performance and costs of your storage based on data access usage and expectations. This example helps to explain the feature: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: yardbirds spec: instances: 3 storage: size: 10Gi walStorage: size: 10Gi tablespaces: - name: current storage: size: 100Gi storageClass: fastest - name: this_year storage: size: 500Gi storageClass: balanced The yardbirds cluster example requests 4 persistent volume claims using 3 different storage classes: Default storage class \u2013 Used by the PGDATA and WAL volumes. fastest \u2013 Used by the current tablespace to store the most active and demanding set of data in the database. balanced \u2013 Used by the this_year tablespace to store older partitions of data that are rarely accessed by users and where performance expectations aren't the highest. You can then take advantage of horizontal table partitioning and create the current month's table (for example, facts for December 2023) in the current tablespace: CREATE TABLE facts_202312 PARTITION OF facts FOR VALUES FROM ('2023-12-01') TO ('2024-01-01') TABLESPACE current; Important This example assumes you're familiar with PostgreSQL declarative partitioning . Tablespace ownership By default, unless otherwise specified, tablespaces are owned by the app application user, as defined in .spec.bootstrap.initdb.owner . See Bootstrap a new cluster for details. This default behavior works in most microservice database use cases. You can set the owner of a tablespace in the owner stanza, for example the postgres user, like in the following excerpt: # ... tablespaces: - name: clapton owner: name: postgres storage: size: 1Gi Important If you change the ownership of a tablespace, make sure that you're using an existing role. Otherwise, the status of the cluster reports the issue and stops reconciling tablespaces until fixed. It's your responsibility to monitor the status and the log and to promptly intervene by fixing the issue. If you define a tablespace with an owner that doesn't exist, CloudNativePG can't create the tablespace and reflects this in the cluster status: spec: instances: 3 # ... tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 owner: name: badhombre storage: size: 2Gi status: <- snipped -> tablespacesStatus: - name: tbs1 status: reconciled - name: tbs2 status: reconciled - error: 'while creating tablespace tbs3: ERROR: role \"badhombre\" does not exist (SQLSTATE 42704)' name: tbs3 status: pending Backup and recovery CloudNativePG handles backup of tablespaces (and the relative tablespace map) both on object stores and volume snapshots. Warning By default, backups are taken from replica nodes. A backup taken immediately after creating tablespaces in a cluster can result in an incomplete view of the tablespaces from the replica and thus an incomplete backup. The lag will be resolved in a maximum of 5 minutes, with the next reconciliation. Once a cluster with tablespaces has a base backup, you can restore a new cluster from it. When it comes to the recovery side, it's your responsibility to ensure that the Cluster definition of the recovered database contains the exact list of tablespaces. Replica clusters Replica clusters must have the same tablespace definition as their origin. The reason is that tablespace management commands like CREATE TABLESPACE are WAL logged and are replayed by any physical replication client (streaming or by way of WAL shipping). It's your responsibility to ensure that replica clusters have the same list of tablespaces, with the same name. Storage class and size might vary. For example: spec: # ... bootstrap: recovery: # ... your selected recovery method tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 storage: size: 2Gi Temporary tablespaces PostgreSQL allows you to define one or more temporary tablespaces to create temporary objects (temporary tables and indexes on temporary tables) when a CREATE command doesn't explicitly specify a tablespace, and to create temporary files for purposes such as sorting large data sets. When no temporary tablespace is specified, PostgreSQL uses the default tablespace of a database, which is currently the main PGDATA volume. When you specify more than one temporary tablespace, PostgreSQL randomly picks one the first time a temporary object needs to be created in a transaction. Then it sequentially iterates through the list. Temporary tablespaces also work like regular tablespaces with regard to backups. CloudNativePG provides the .spec.tablespaces[*].temporary option to determine whether to add a tablespace to the temp_tablespaces PostgreSQL parameter and thus become eligible to store temporary data that doesn't have an explicit tablespace assignment. spec: [...] tablespaces: - name: atablespace storage: size: 1Gi temporary: true They can be created at initialization time or added later, requiring a rolling update. The temporary: true/false option adds or removes the tablespace name to or from the list of tablespaces in the temp_tablespaces option. This change doesn't require a restart of PostgreSQL. Although temporary tablespaces can also work as regular tablespaces (meaning that users can also host regular data on them while using them for temporary operations), we recommend that you don't mix the two workloads. See the PostgreSQL documentation on temp_tablespaces for details. kubectl plugin support The kubectl status plugin includes a section dedicated to tablespaces that offers a convenient overview, including tablespace status, owner, temporary flag, and any errors: [...] Tablespaces status Tablespace Owner Status Temporary Error ---------- ----- ------ --------- ----- atablespace app reconciled true another_tablespace app reconciled true tablespacea1 app reconciled false Instances status [...] Limitations Currently, you can't remove tablespaces from an existing CloudNativePG cluster.","title":"Tablespaces"},{"location":"tablespaces/#tablespaces","text":"A tablespace is a robust and widely embraced feature in database management systems. It offers a powerful means to enhance the vertical scalability of a database by decoupling the physical and logical modeling of data. Essentially, it serves as a technique for physical database modeling, enabling the efficient distribution of I/O operations across multiple volumes on distinct storage. It thereby optimizes performance through parallel on-disk read/write operations. In the context of the database industry, tablespaces play a strategic role, particularly when paired with table partitioning, a logical database modeling technique. They prove instrumental in managing large-scale databases and are also used for tasks such as separating tables from indexes or executing temporary operations. Tablespaces in PostgreSQL have been playing a pivotal role since 2005 (version 8.0), while declarative partitioning was introduced in 2017 (version 10). Consequently, tablespaces are seamlessly integrated into all supported releases of PostgreSQL. Quoting from the PostgreSQL documentation on tablespaces : By using tablespaces, an administrator can control the disk layout of a PostgreSQL installation. This is useful in at least two ways. First, if the partition or volume on which the cluster was initialized runs out of space and cannot be extended, a tablespace can be created on a different partition and used until the system can be reconfigured. Second, tablespaces allow an administrator to use knowledge of the usage pattern of database objects to optimize performance.","title":"Tablespaces"},{"location":"tablespaces/#declarative-tablespaces","text":"CloudNativePG provides support for PostgreSQL tablespaces through declarative tablespaces , operating at two distinct levels: Kubernetes, managing persistent volume claims, identically to how PGDATA and WAL volumes are handled PostgreSQL, managing the TABLESPACE global objects in the PostgreSQL instance Being a part of the Kubernetes ecosystem, CloudNativePG's declarative tablespaces are implemented by leveraging persistent volume claims (and persistent volumes). Each tablespace defined in the cluster is housed in its own persistent volume. CloudNativePG takes care of generating the PVCs. It mounts the required volumes in the instance pods in normalized locations and ensures replicas are ready to support tablespaces before activating them in the primary. You can set up tablespaces when creating the cluster or add them later, provided the storage is available when requested. Currently, you can't remove them. However, this limitation will be addressed in a future minor or patch version of CloudNativePG.","title":"Declarative tablespaces"},{"location":"tablespaces/#using-declarative-tablespaces","text":"Using declarative tablespaces is straightforward. You can find a full example in cluster-example-with-tablespaces.yaml . To use them, use the new tablespaces stanza on a new or existing Cluster resource: spec: instances: 3 # ... tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 storage: size: 2Gi Each tablespace has its own storage section where you can configure the size and the storage class of the generated PVC. The administrator can thus plan to use different storage classes for different kinds of workloads, as explained in Storage classes and tablespaces . CloudNativePG creates the persistent volume claims for each instance in the high-availability Postgres cluster. It mounts them in each pod when they have been provisioned. Then, it ensures that the tbs1 , tbs2 , and tbs3 tablespaces are created on the primary PostgreSQL instance using the CREATE TABLESPACE command. This process is quick, and you see this reflected in Postgres: app=# SELECT oid, spcname FROM pg_tablespace; oid | spcname -------+-------------------- 1663 | pg_default 1664 | pg_global 16387 | tbs1 16388 | tbs2 16389 | tbs3 (5 rows) You can start using them right away: app=# CREATE TABLE fibonacci(num INTEGER) TABLESPACE tbs1; CREATE TABLE The cluster status has a section for tablespaces: status: <- snipped -> tablespacesStatus: - name: atablespace state: reconciled - name: another_tablespace state: reconciled - name: tablespacea1 state: reconciled","title":"Using declarative tablespaces"},{"location":"tablespaces/#storage-classes-and-tablespaces","text":"You can use different storage classes for your tablespaces, just as you can for PGDATA and WAL volumes. This is a convenient way of optimizing your resources, balancing performance and costs of your storage based on data access usage and expectations. This example helps to explain the feature: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: yardbirds spec: instances: 3 storage: size: 10Gi walStorage: size: 10Gi tablespaces: - name: current storage: size: 100Gi storageClass: fastest - name: this_year storage: size: 500Gi storageClass: balanced The yardbirds cluster example requests 4 persistent volume claims using 3 different storage classes: Default storage class \u2013 Used by the PGDATA and WAL volumes. fastest \u2013 Used by the current tablespace to store the most active and demanding set of data in the database. balanced \u2013 Used by the this_year tablespace to store older partitions of data that are rarely accessed by users and where performance expectations aren't the highest. You can then take advantage of horizontal table partitioning and create the current month's table (for example, facts for December 2023) in the current tablespace: CREATE TABLE facts_202312 PARTITION OF facts FOR VALUES FROM ('2023-12-01') TO ('2024-01-01') TABLESPACE current; Important This example assumes you're familiar with PostgreSQL declarative partitioning .","title":"Storage classes and tablespaces"},{"location":"tablespaces/#tablespace-ownership","text":"By default, unless otherwise specified, tablespaces are owned by the app application user, as defined in .spec.bootstrap.initdb.owner . See Bootstrap a new cluster for details. This default behavior works in most microservice database use cases. You can set the owner of a tablespace in the owner stanza, for example the postgres user, like in the following excerpt: # ... tablespaces: - name: clapton owner: name: postgres storage: size: 1Gi Important If you change the ownership of a tablespace, make sure that you're using an existing role. Otherwise, the status of the cluster reports the issue and stops reconciling tablespaces until fixed. It's your responsibility to monitor the status and the log and to promptly intervene by fixing the issue. If you define a tablespace with an owner that doesn't exist, CloudNativePG can't create the tablespace and reflects this in the cluster status: spec: instances: 3 # ... tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 owner: name: badhombre storage: size: 2Gi status: <- snipped -> tablespacesStatus: - name: tbs1 status: reconciled - name: tbs2 status: reconciled - error: 'while creating tablespace tbs3: ERROR: role \"badhombre\" does not exist (SQLSTATE 42704)' name: tbs3 status: pending","title":"Tablespace ownership"},{"location":"tablespaces/#backup-and-recovery","text":"CloudNativePG handles backup of tablespaces (and the relative tablespace map) both on object stores and volume snapshots. Warning By default, backups are taken from replica nodes. A backup taken immediately after creating tablespaces in a cluster can result in an incomplete view of the tablespaces from the replica and thus an incomplete backup. The lag will be resolved in a maximum of 5 minutes, with the next reconciliation. Once a cluster with tablespaces has a base backup, you can restore a new cluster from it. When it comes to the recovery side, it's your responsibility to ensure that the Cluster definition of the recovered database contains the exact list of tablespaces.","title":"Backup and recovery"},{"location":"tablespaces/#replica-clusters","text":"Replica clusters must have the same tablespace definition as their origin. The reason is that tablespace management commands like CREATE TABLESPACE are WAL logged and are replayed by any physical replication client (streaming or by way of WAL shipping). It's your responsibility to ensure that replica clusters have the same list of tablespaces, with the same name. Storage class and size might vary. For example: spec: # ... bootstrap: recovery: # ... your selected recovery method tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 storage: size: 2Gi","title":"Replica clusters"},{"location":"tablespaces/#temporary-tablespaces","text":"PostgreSQL allows you to define one or more temporary tablespaces to create temporary objects (temporary tables and indexes on temporary tables) when a CREATE command doesn't explicitly specify a tablespace, and to create temporary files for purposes such as sorting large data sets. When no temporary tablespace is specified, PostgreSQL uses the default tablespace of a database, which is currently the main PGDATA volume. When you specify more than one temporary tablespace, PostgreSQL randomly picks one the first time a temporary object needs to be created in a transaction. Then it sequentially iterates through the list. Temporary tablespaces also work like regular tablespaces with regard to backups. CloudNativePG provides the .spec.tablespaces[*].temporary option to determine whether to add a tablespace to the temp_tablespaces PostgreSQL parameter and thus become eligible to store temporary data that doesn't have an explicit tablespace assignment. spec: [...] tablespaces: - name: atablespace storage: size: 1Gi temporary: true They can be created at initialization time or added later, requiring a rolling update. The temporary: true/false option adds or removes the tablespace name to or from the list of tablespaces in the temp_tablespaces option. This change doesn't require a restart of PostgreSQL. Although temporary tablespaces can also work as regular tablespaces (meaning that users can also host regular data on them while using them for temporary operations), we recommend that you don't mix the two workloads. See the PostgreSQL documentation on temp_tablespaces for details.","title":"Temporary tablespaces"},{"location":"tablespaces/#kubectl-plugin-support","text":"The kubectl status plugin includes a section dedicated to tablespaces that offers a convenient overview, including tablespace status, owner, temporary flag, and any errors: [...] Tablespaces status Tablespace Owner Status Temporary Error ---------- ----- ------ --------- ----- atablespace app reconciled true another_tablespace app reconciled true tablespacea1 app reconciled false Instances status [...]","title":"kubectl plugin support"},{"location":"tablespaces/#limitations","text":"Currently, you can't remove tablespaces from an existing CloudNativePG cluster.","title":"Limitations"},{"location":"troubleshooting/","text":"Troubleshooting In this page, you can find some basic information on how to troubleshoot CloudNativePG in your Kubernetes cluster deployment. Hint As a Kubernetes administrator, you should have the kubectl Cheat Sheet page bookmarked! Before you start Kubernetes environment What can make a difference in a troubleshooting activity is to provide clear information about the underlying Kubernetes system. Make sure you know: the Kubernetes distribution and version you are using the specifications of the nodes where PostgreSQL is running as much as you can about the actual storage , including storage class and benchmarks you have done before going into production. which relevant Kubernetes applications you are using in your cluster (i.e. Prometheus, Grafana, Istio, Certmanager, ...) the situation of continuous backup, in particular if it's in place and working correctly: in case it is not, make sure you take an emergency backup before performing any potential disrupting operation Useful utilities On top of the mandatory kubectl utility, for troubleshooting, we recommend the following plugins/utilities to be available in your system: cnpg plugin for kubectl jq , a lightweight and flexible command-line JSON processor grep , searches one or more input files for lines containing a match to a specified pattern. It is already available in most *nix distros. If you are on Windows OS, you can use findstr as an alternative to grep or directly use wsl and install your preferred *nix distro and use the tools mentioned above. First steps To quickly get an overview of the cluster or installation, the kubectl plugin is the primary tool to use: the status subcommand provides an overview of a cluster the report subcommand provides the manifests for clusters and the operator deployment. It can also include logs using the --logs option. The report generated via the plugin will include the full cluster manifest. The plugin can be installed on air-gapped systems via packages. Please refer to the plugin document for complete instructions. Are there backups? After getting the cluster manifest with the plugin, you should verify if backups are set up and working. In a cluster with backups set up, you will find, in the cluster Status, the fields lastSuccessfulBackup and firstRecoverabilityPoint . You should make sure there is a recent lastSuccessfulBackup . A cluster lacking the .spec.backup stanza won't have backups. An insistent message will appear in the PostgreSQL logs: Backup not configured, skip WAL archiving. Before proceeding with troubleshooting operations, it may be advisable to perform an emergency backup depending on your findings regarding backups. Refer to the following section for instructions. It is extremely risky to operate a production database without keeping regular backups. Emergency backup In some emergency situations, you might need to take an emergency logical backup of the main app database. Important The instructions you find below must be executed only in emergency situations and the temporary backup files kept under the data protection policies that are effective in your organization. The dump file is indeed stored in the client machine that runs the kubectl command, so make sure that all protections are in place and you have enough space to store the backup file. The following example shows how to take a logical backup of the app database in the cluster-example Postgres cluster, from the cluster-example-1 pod: kubectl exec cluster-example-1 -c postgres \\ -- pg_dump -Fc -d app > app.dump Note You can easily adapt the above command to backup your cluster, by providing the names of the objects you have used in your environment. The above command issues a pg_dump command in custom format, which is the most versatile way to take logical backups in PostgreSQL . The next step is to restore the database. We assume that you are operating on a new PostgreSQL cluster that's been just initialized (so the app database is empty). The following example shows how to restore the above logical backup in the app database of the new-cluster-example Postgres cluster, by connecting to the primary ( new-cluster-example-1 pod): kubectl exec -i new-cluster-example-1 -c postgres \\ -- pg_restore --no-owner --role=app -d app --verbose < app.dump Important The example in this section assumes that you have no other global objects (databases and roles) to dump and restore, as per our recommendation. In case you have multiple roles, make sure you have taken a backup using pg_dumpall -g and you manually restore them in the new cluster. In case you have multiple databases, you need to repeat the above operation one database at a time, making sure you assign the right ownership. If you are not familiar with PostgreSQL, we advise that you do these critical operations under the guidance of a professional support company. The above steps might be integrated into the cnpg plugin at some stage in the future. Logs All resources created and managed by CloudNativePG log to standard output in accordance with Kubernetes conventions, using JSON format . While logs are typically processed at the infrastructure level and include those from CloudNativePG, accessing logs directly from the command line interface is critical during troubleshooting. You have three primary options for doing so: Use the kubectl logs command to retrieve logs from a specific resource, and apply jq for better readability. Use the kubectl cnpg logs command for CloudNativePG-specific logging. Leverage specialized open-source tools like stern , which can aggregate logs from multiple resources (e.g., all pods in a PostgreSQL cluster by selecting the cnpg.io/clusterName label), filter log entries, customize output formats, and more. Note The following sections provide examples of how to retrieve logs for various resources when troubleshooting CloudNativePG. Operator information By default, the CloudNativePG operator is installed in the cnpg-system namespace in Kubernetes as a Deployment (see the \"Details about the deployment\" section for details). You can get a list of the operator pods by running: kubectl get pods -n cnpg-system Note Under normal circumstances, you should have one pod where the operator is running, identified by a name starting with cnpg-controller-manager- . In case you have set up your operator for high availability, you should have more entries. Those pods are managed by a deployment named cnpg-controller-manager . Collect the relevant information about the operator that is running in pod <POD> with: kubectl describe pod -n cnpg-system <POD> Then get the logs from the same pod by running: kubectl logs -n cnpg-system <POD> Gather more information about the operator Get logs from all pods in CloudNativePG operator Deployment (in case you have a multi operator deployment) by running: kubectl logs -n cnpg-system \\ deployment/cnpg-controller-manager --all-containers=true Tip You can add -f flag to above command to follow logs in real time. Save logs to a JSON file by running: kubectl logs -n cnpg-system \\ deployment/cnpg-controller-manager --all-containers=true | \\ jq -r . > cnpg_logs.json Get CloudNativePG operator version by using kubectl-cnpg plugin: kubectl-cnpg status <CLUSTER> Output: Cluster in healthy state Name: cluster-example Namespace: default System ID: 7044925089871458324 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:17.5-3 Primary instance: cluster-example-1 Instances: 3 Ready instances: 3 Current Write LSN: 0/5000000 (Timeline: 1 - WAL File: 000000010000000000000004) Continuous Backup status Not configured Streaming Replication status Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- cluster-example-2 0/5000000 0/5000000 0/5000000 0/5000000 00:00:00 00:00:00 00:00:00 streaming async 0 cluster-example-3 0/5000000 0/5000000 0/5000000 0/5000000 00:00:00.10033 00:00:00.10033 00:00:00.10033 streaming async 0 Instances status Name Database Size Current LSN Replication role Status QoS Manager Version ---- ------------- ----------- ---------------- ------ --- --------------- cluster-example-1 33 MB 0/5000000 Primary OK BestEffort 1.12.0 cluster-example-2 33 MB 0/5000000 Standby (async) OK BestEffort 1.12.0 cluster-example-3 33 MB 0/5000060 Standby (async) OK BestEffort 1.12.0 Cluster information You can check the status of the <CLUSTER> cluster in the NAMESPACE namespace with: kubectl get cluster -n <NAMESPACE> <CLUSTER> Output: NAME AGE INSTANCES READY STATUS PRIMARY <CLUSTER> 10d4h3m 3 3 Cluster in healthy state <CLUSTER>-1 The above example reports a healthy PostgreSQL cluster of 3 instances, all in ready state, and with <CLUSTER>-1 being the primary. In case of unhealthy conditions, you can discover more by getting the manifest of the Cluster resource: kubectl get cluster -o yaml -n <NAMESPACE> <CLUSTER> Another important command to gather is the status one, as provided by the cnpg plugin: kubectl cnpg status -n <NAMESPACE> <CLUSTER> Tip You can print more information by adding the --verbose option. Get PostgreSQL container image version: kubectl describe cluster <CLUSTER_NAME> -n <NAMESPACE> | grep \"Image Name\" Output: Image Name: ghcr.io/cloudnative-pg/postgresql:17.5-3 Note Also you can use kubectl-cnpg status -n <NAMESPACE> <CLUSTER_NAME> to get the same information. Pod information You can retrieve the list of instances that belong to a given PostgreSQL cluster with: kubectl get pod -l cnpg.io/cluster=<CLUSTER> -L role -n <NAMESPACE> Output: NAME READY STATUS RESTARTS AGE ROLE <CLUSTER>-1 1/1 Running 0 10d4h5m primary <CLUSTER>-2 1/1 Running 0 10d4h4m replica <CLUSTER>-3 1/1 Running 0 10d4h4m replica You can check if/how a pod is failing by running: kubectl get pod -n <NAMESPACE> -o yaml <CLUSTER>-<N> You can get all the logs for a given PostgreSQL instance with: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> If you want to limit the search to the PostgreSQL process only, you can run: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq 'select(.logger==\"postgres\") | .record.message' The following example also adds the timestamp: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r 'select(.logger==\"postgres\") | [.ts, .record.message] | @csv' If the timestamp is displayed in Unix Epoch time, you can convert it to a user-friendly format: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r 'select(.logger==\"postgres\") | [(.ts|strflocaltime(\"%Y-%m-%dT%H:%M:%S %Z\")), .record.message] | @csv' Gather and filter extra information about PostgreSQL pods Check logs from a specific pod that has crashed: kubectl logs -n <NAMESPACE> --previous <CLUSTER>-<N> Get FATAL errors from a specific PostgreSQL pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '.record | select(.error_severity == \"FATAL\")' Output: { \"log_time\": \"2021-11-08 14:07:44.520 UTC\", \"user_name\": \"streaming_replica\", \"process_id\": \"68\", \"connection_from\": \"10.244.0.10:60616\", \"session_id\": \"61892f30.44\", \"session_line_num\": \"1\", \"command_tag\": \"startup\", \"session_start_time\": \"2021-11-08 14:07:44 UTC\", \"virtual_transaction_id\": \"3/75\", \"transaction_id\": \"0\", \"error_severity\": \"FATAL\", \"sql_state_code\": \"28000\", \"message\": \"role \\\"streaming_replica\\\" does not exist\", \"backend_type\": \"walsender\" } Filter PostgreSQL DB error messages in logs for a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | jq -r '.err | select(. != null)' Output: dial unix /controller/run/.s.PGSQL.5432: connect: no such file or directory Get messages matching err word from a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | jq -r '.msg' | grep \"err\" Output: 2021-11-08 14:07:39.610 UTC [15] LOG: ending log output to stderr Get all logs from PostgreSQL process from a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '. | select(.logger == \"postgres\") | select(.msg != \"record\") | .msg' Output: 2021-11-08 14:07:52.591 UTC [16] LOG: redirecting log output to logging collector process 2021-11-08 14:07:52.591 UTC [16] HINT: Future log output will appear in directory \"/controller/log\". 2021-11-08 14:07:52.591 UTC [16] LOG: ending log output to stderr 2021-11-08 14:07:52.591 UTC [16] HINT: Future log output will go to log destination \"csvlog\". Get pod logs filtered by fields with values and join them separated by | running: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '[.level, .ts, .logger, .msg] | join(\" | \")' Output: info | 1636380469.5728037 | wal-archive | Backup not configured, skip WAL archiving info | 1636383566.0664876 | postgres | record Backup information You can list the backups that have been created for a named cluster with: kubectl get backup -l cnpg.io/cluster=<CLUSTER> Storage information Sometimes is useful to double-check the StorageClass used by the cluster to have some more context during investigations or troubleshooting, like this: STORAGECLASS=$(kubectl get pvc <POD> -o jsonpath='{.spec.storageClassName}') kubectl get storageclasses $STORAGECLASS -o yaml We are taking the StorageClass from one of the cluster pod here since often clusters are created using the default StorageClass. Node information Kubernetes nodes is where ultimately PostgreSQL pods will be running. It's strategically important to know as much as we can about them. You can get the list of nodes in your Kubernetes cluster with: # look at the worker nodes and their status kubectl get nodes -o wide Additionally, you can gather the list of nodes where the pods of a given cluster are running with: kubectl get pod -l cnpg.io/cluster=<CLUSTER> \\ -L role -n <NAMESPACE> -o wide The latter is important to understand where your pods are distributed - very useful if you are using affinity/anti-affinity rules and/or tolerations . Conditions Like many native kubernetes objects like here , Cluster exposes status.conditions as well. This allows one to 'wait' for a particular event to occur instead of relying on the overall cluster health state. Available conditions as of now are: LastBackupSucceeded ContinuousArchiving Ready LastBackupSucceeded is reporting the status of the latest backup. If set to True the last backup has been taken correctly, it is set to False otherwise. ContinuousArchiving is reporting the status of the WAL archiving. If set to True the last WAL archival process has been terminated correctly, it is set to False otherwise. Ready is True when the cluster has the number of instances specified by the user and the primary instance is ready. This condition can be used in scripts to wait for the cluster to be created. How to wait for a particular condition Backup: $ kubectl wait --for=condition=LastBackupSucceeded cluster/<CLUSTER-NAME> -n <NAMESPACE> ContinuousArchiving: $ kubectl wait --for=condition=ContinuousArchiving cluster/<CLUSTER-NAME> -n <NAMESPACE> Ready (Cluster is ready or not): $ kubectl wait --for=condition=Ready cluster/<CLUSTER-NAME> -n <NAMESPACE> Below is a snippet of a cluster.status that contains a failing condition. $ kubectl get cluster/<cluster-name> -o yaml . . . status: conditions: - message: 'unexpected failure invoking barman-cloud-wal-archive: exit status 2' reason: ContinuousArchivingFailing status: \"False\" type: ContinuousArchiving - message: exit status 2 reason: LastBackupFailed status: \"False\" type: LastBackupSucceeded - message: Cluster Is Not Ready reason: ClusterIsNotReady status: \"False\" type: Ready Networking CloudNativePG requires basic networking and connectivity in place. You can find more information in the networking section. If installing CloudNativePG in an existing environment, there might be network policies in place, or other network configuration made specifically for the cluster, which could have an impact on the required connectivity between the operator and the cluster pods and/or the between the pods. You can look for existing network policies with the following command: kubectl get networkpolicies There might be several network policies set up by the Kubernetes network administrator. $ kubectl get networkpolicies NAME POD-SELECTOR AGE allow-prometheus cnpg.io/cluster=cluster-example 47m default-deny-ingress <none> 57m PostgreSQL core dumps Although rare, PostgreSQL can sometimes crash and generate a core dump in the PGDATA folder. When that happens, normally it is a bug in PostgreSQL (and most likely it has already been solved - this is why it is important to always run the latest minor version of PostgreSQL). CloudNativePG allows you to control what to include in the core dump through the cnpg.io/coredumpFilter annotation. Info Please refer to \"Labels and annotations\" for more details on the standard annotations that CloudNativePG provides. By default, the cnpg.io/coredumpFilter is set to 0x31 in order to exclude shared memory segments from the dump, as this is the safest approach in most cases. Info Please refer to \"Core dump filtering settings\" section of \"The /proc Filesystem\" page of the Linux Kernel documentation . for more details on how to set the bitmask that controls the core dump filter. Important Beware that this setting only takes effect during Pod startup and that changing the annotation doesn't trigger an automated rollout of the instances. Although you might not personally be involved in inspecting core dumps, you might be asked to provide them so that a Postgres expert can look into them. First, verify that you have a core dump in the PGDATA directory with the following command (please run it against the correct pod where the Postgres instance is running): kubectl exec -ti POD -c postgres \\ -- find /var/lib/postgresql/data/pgdata -name 'core.*' Under normal circumstances, this should return an empty set. Suppose, for example, that we have a core dump file: /var/lib/postgresql/data/pgdata/core.14177 Once you have verified the space on disk is sufficient, you can collect the core dump on your machine through kubectl cp as follows: kubectl cp POD:/var/lib/postgresql/data/pgdata/core.14177 core.14177 You now have the file. Make sure you free the space on the server by removing the core dumps. Some known issues Storage is full In case the storage is full, the PostgreSQL pods will not be able to write new data, or, in case of the disk containing the WAL segments being full, PostgreSQL will shut down. If you see messages in the logs about the disk being full, you should increase the size of the affected PVC. You can do this by editing the PVC and changing the spec.resources.requests.storage field. After that, you should also update the Cluster resource with the new size to apply the same change to all the pods. Please look at the \"Volume expansion\" section in the documentation. If the space for WAL segments is exhausted, the pod will be crash-looping and the cluster status will report Not enough disk space . Increasing the size in the PVC and then in the Cluster resource will solve the issue. See also the \"Disk Full Failure\" section Pods are stuck in Pending state In case a Cluster's instance is stuck in the Pending phase, you should check the pod's Events section to get an idea of the reasons behind this: kubectl describe pod -n <NAMESPACE> <POD> Some of the possible causes for this are: No nodes are matching the nodeSelector Tolerations are not correctly configured to match the nodes' taints No nodes are available at all: this could also be related to cluster-autoscaler hitting some limits, or having some temporary issues In this case, it could also be useful to check events in the namespace: kubectl get events -n <NAMESPACE> # list events in chronological order kubectl get events -n <NAMESPACE> --sort-by=.metadata.creationTimestamp Replicas out of sync when no backup is configured Sometimes replicas might be switched off for a bit of time due to maintenance reasons (think of when a Kubernetes nodes is drained). In case your cluster does not have backup configured, when replicas come back up, they might require a WAL file that is not present anymore on the primary (having been already recycled according to the WAL management policies as mentioned in \"The postgresql section\" ), and fall out of synchronization. Similarly, when pg_rewind might require a WAL file that is not present anymore in the former primary, reporting pg_rewind: error: could not open file . In these cases, pods cannot become ready anymore, and you are required to delete the PVC and let the operator rebuild the replica. If you rely on dynamically provisioned Persistent Volumes, and you are confident in deleting the PV itself, you can do so with: PODNAME=<POD> VOLNAME=$(kubectl get pv -o json | \\ jq -r '.items[]|select(.spec.claimRef.name=='\\\"$PODNAME\\\"')|.metadata.name') kubectl delete pod/$PODNAME pvc/$PODNAME pvc/$PODNAME-wal pv/$VOLNAME Cluster stuck in Creating new replica Cluster is stuck in \"Creating a new replica\", while pod logs don't show relevant problems. This has been found to be related to the next issue on connectivity . Networking issues are reflected in the status column as follows: Instance Status Extraction Error: HTTP communication issue Networking is impaired by installed Network Policies As pointed out in the networking section , local network policies could prevent some of the required connectivity. A tell-tale sign that connectivity is impaired is the presence in the operator logs of messages like: \"Cannot extract Pod status\", [\u2026snipped\u2026] \"Get \\\"http://<pod IP>:8000/pg/status\\\": dial tcp <pod IP>:8000: i/o timeout\" You should list the network policies, and look for any policies restricting connectivity. $ kubectl get networkpolicies NAME POD-SELECTOR AGE allow-prometheus cnpg.io/cluster=cluster-example 47m default-deny-ingress <none> 57m For example, in the listing above, default-deny-ingress seems a likely culprit. You can drill into it: $ kubectl get networkpolicies default-deny-ingress -o yaml <\u2026snipped\u2026> spec: podSelector: {} policyTypes: - Ingress In the networking page you can find a network policy file that you can customize to create a NetworkPolicy explicitly allowing the operator to connect cross-namespace to cluster pods. Error while bootstrapping the data directory If your Cluster's initialization job crashes with a \"Bus error (core dumped) child process exited with exit code 135\", you likely need to fix the Cluster hugepages settings. The reason is the incomplete support of hugepages in the cgroup v1 that should be fixed in v2. For more information, check the PostgreSQL BUG #17757: Not honoring huge_pages setting during initdb causes DB crash in Kubernetes . To check whether hugepages are enabled, run grep HugePages /proc/meminfo on the Kubernetes node and check if hugepages are present, their size, and how many are free. If the hugepages are present, you need to configure how much hugepages memory every PostgreSQL pod should have available. For example: postgresql: parameters: shared_buffers: \"128MB\" resources: requests: memory: \"512Mi\" limits: hugepages-2Mi: \"512Mi\" Please remember that you must have enough hugepages memory available to schedule every Pod in the Cluster (in the example above, at least 512MiB per Pod must be free). Bootstrap job hangs in running status If your Cluster's initialization job hangs while in Running status with the message: \"error while waiting for the API server to be reachable\", you probably have a network issue preventing communication with the Kubernetes API server. Initialization jobs (like most of jobs) need to access the Kubernetes API. Please check your networking. Another possible cause is when you have sidecar injection configured. Sidecars such as Istio may make the network temporarily unavailable during startup. If you have sidecar injection enabled, retry with injection disabled. Replicas take over two minutes to reconnect after a failover When the primary instance fails, the operator promotes the most advanced standby to the primary role. Other standby instances then attempt to reconnect to the -rw service for replication. However, during this reconnection process, kube-proxy may not have updated its routing information yet. As a result, the initial SYN packet sent by the standby instances might fail to reach its intended destination. If the network is configured to silently drop packets instead of rejecting them, standby instances will not receive a response and will retry the connection after an exponential backoff period. On Linux systems, the default value for the tcp_syn_retries kernel parameter is 6, meaning the system will attempt to establish the connection for approximately 127 seconds before giving up. This prolonged retry period can significantly delay the reconnection process. For more details, consult the tcp_syn_retries documentation . You can work around this issue by setting STANDBY_TCP_USER_TIMEOUT in the operator configuration . This will cause the standby instances to close the TCP connection if the initial SYN packet is not acknowledged within the specified timeout, allowing them to retry the connection more quickly.","title":"Troubleshooting"},{"location":"troubleshooting/#troubleshooting","text":"In this page, you can find some basic information on how to troubleshoot CloudNativePG in your Kubernetes cluster deployment. Hint As a Kubernetes administrator, you should have the kubectl Cheat Sheet page bookmarked!","title":"Troubleshooting"},{"location":"troubleshooting/#before-you-start","text":"","title":"Before you start"},{"location":"troubleshooting/#kubernetes-environment","text":"What can make a difference in a troubleshooting activity is to provide clear information about the underlying Kubernetes system. Make sure you know: the Kubernetes distribution and version you are using the specifications of the nodes where PostgreSQL is running as much as you can about the actual storage , including storage class and benchmarks you have done before going into production. which relevant Kubernetes applications you are using in your cluster (i.e. Prometheus, Grafana, Istio, Certmanager, ...) the situation of continuous backup, in particular if it's in place and working correctly: in case it is not, make sure you take an emergency backup before performing any potential disrupting operation","title":"Kubernetes environment"},{"location":"troubleshooting/#useful-utilities","text":"On top of the mandatory kubectl utility, for troubleshooting, we recommend the following plugins/utilities to be available in your system: cnpg plugin for kubectl jq , a lightweight and flexible command-line JSON processor grep , searches one or more input files for lines containing a match to a specified pattern. It is already available in most *nix distros. If you are on Windows OS, you can use findstr as an alternative to grep or directly use wsl and install your preferred *nix distro and use the tools mentioned above.","title":"Useful utilities"},{"location":"troubleshooting/#first-steps","text":"To quickly get an overview of the cluster or installation, the kubectl plugin is the primary tool to use: the status subcommand provides an overview of a cluster the report subcommand provides the manifests for clusters and the operator deployment. It can also include logs using the --logs option. The report generated via the plugin will include the full cluster manifest. The plugin can be installed on air-gapped systems via packages. Please refer to the plugin document for complete instructions.","title":"First steps"},{"location":"troubleshooting/#are-there-backups","text":"After getting the cluster manifest with the plugin, you should verify if backups are set up and working. In a cluster with backups set up, you will find, in the cluster Status, the fields lastSuccessfulBackup and firstRecoverabilityPoint . You should make sure there is a recent lastSuccessfulBackup . A cluster lacking the .spec.backup stanza won't have backups. An insistent message will appear in the PostgreSQL logs: Backup not configured, skip WAL archiving. Before proceeding with troubleshooting operations, it may be advisable to perform an emergency backup depending on your findings regarding backups. Refer to the following section for instructions. It is extremely risky to operate a production database without keeping regular backups.","title":"Are there backups?"},{"location":"troubleshooting/#emergency-backup","text":"In some emergency situations, you might need to take an emergency logical backup of the main app database. Important The instructions you find below must be executed only in emergency situations and the temporary backup files kept under the data protection policies that are effective in your organization. The dump file is indeed stored in the client machine that runs the kubectl command, so make sure that all protections are in place and you have enough space to store the backup file. The following example shows how to take a logical backup of the app database in the cluster-example Postgres cluster, from the cluster-example-1 pod: kubectl exec cluster-example-1 -c postgres \\ -- pg_dump -Fc -d app > app.dump Note You can easily adapt the above command to backup your cluster, by providing the names of the objects you have used in your environment. The above command issues a pg_dump command in custom format, which is the most versatile way to take logical backups in PostgreSQL . The next step is to restore the database. We assume that you are operating on a new PostgreSQL cluster that's been just initialized (so the app database is empty). The following example shows how to restore the above logical backup in the app database of the new-cluster-example Postgres cluster, by connecting to the primary ( new-cluster-example-1 pod): kubectl exec -i new-cluster-example-1 -c postgres \\ -- pg_restore --no-owner --role=app -d app --verbose < app.dump Important The example in this section assumes that you have no other global objects (databases and roles) to dump and restore, as per our recommendation. In case you have multiple roles, make sure you have taken a backup using pg_dumpall -g and you manually restore them in the new cluster. In case you have multiple databases, you need to repeat the above operation one database at a time, making sure you assign the right ownership. If you are not familiar with PostgreSQL, we advise that you do these critical operations under the guidance of a professional support company. The above steps might be integrated into the cnpg plugin at some stage in the future.","title":"Emergency backup"},{"location":"troubleshooting/#logs","text":"All resources created and managed by CloudNativePG log to standard output in accordance with Kubernetes conventions, using JSON format . While logs are typically processed at the infrastructure level and include those from CloudNativePG, accessing logs directly from the command line interface is critical during troubleshooting. You have three primary options for doing so: Use the kubectl logs command to retrieve logs from a specific resource, and apply jq for better readability. Use the kubectl cnpg logs command for CloudNativePG-specific logging. Leverage specialized open-source tools like stern , which can aggregate logs from multiple resources (e.g., all pods in a PostgreSQL cluster by selecting the cnpg.io/clusterName label), filter log entries, customize output formats, and more. Note The following sections provide examples of how to retrieve logs for various resources when troubleshooting CloudNativePG.","title":"Logs"},{"location":"troubleshooting/#operator-information","text":"By default, the CloudNativePG operator is installed in the cnpg-system namespace in Kubernetes as a Deployment (see the \"Details about the deployment\" section for details). You can get a list of the operator pods by running: kubectl get pods -n cnpg-system Note Under normal circumstances, you should have one pod where the operator is running, identified by a name starting with cnpg-controller-manager- . In case you have set up your operator for high availability, you should have more entries. Those pods are managed by a deployment named cnpg-controller-manager . Collect the relevant information about the operator that is running in pod <POD> with: kubectl describe pod -n cnpg-system <POD> Then get the logs from the same pod by running: kubectl logs -n cnpg-system <POD>","title":"Operator information"},{"location":"troubleshooting/#gather-more-information-about-the-operator","text":"Get logs from all pods in CloudNativePG operator Deployment (in case you have a multi operator deployment) by running: kubectl logs -n cnpg-system \\ deployment/cnpg-controller-manager --all-containers=true Tip You can add -f flag to above command to follow logs in real time. Save logs to a JSON file by running: kubectl logs -n cnpg-system \\ deployment/cnpg-controller-manager --all-containers=true | \\ jq -r . > cnpg_logs.json Get CloudNativePG operator version by using kubectl-cnpg plugin: kubectl-cnpg status <CLUSTER> Output: Cluster in healthy state Name: cluster-example Namespace: default System ID: 7044925089871458324 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:17.5-3 Primary instance: cluster-example-1 Instances: 3 Ready instances: 3 Current Write LSN: 0/5000000 (Timeline: 1 - WAL File: 000000010000000000000004) Continuous Backup status Not configured Streaming Replication status Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- cluster-example-2 0/5000000 0/5000000 0/5000000 0/5000000 00:00:00 00:00:00 00:00:00 streaming async 0 cluster-example-3 0/5000000 0/5000000 0/5000000 0/5000000 00:00:00.10033 00:00:00.10033 00:00:00.10033 streaming async 0 Instances status Name Database Size Current LSN Replication role Status QoS Manager Version ---- ------------- ----------- ---------------- ------ --- --------------- cluster-example-1 33 MB 0/5000000 Primary OK BestEffort 1.12.0 cluster-example-2 33 MB 0/5000000 Standby (async) OK BestEffort 1.12.0 cluster-example-3 33 MB 0/5000060 Standby (async) OK BestEffort 1.12.0","title":"Gather more information about the operator"},{"location":"troubleshooting/#cluster-information","text":"You can check the status of the <CLUSTER> cluster in the NAMESPACE namespace with: kubectl get cluster -n <NAMESPACE> <CLUSTER> Output: NAME AGE INSTANCES READY STATUS PRIMARY <CLUSTER> 10d4h3m 3 3 Cluster in healthy state <CLUSTER>-1 The above example reports a healthy PostgreSQL cluster of 3 instances, all in ready state, and with <CLUSTER>-1 being the primary. In case of unhealthy conditions, you can discover more by getting the manifest of the Cluster resource: kubectl get cluster -o yaml -n <NAMESPACE> <CLUSTER> Another important command to gather is the status one, as provided by the cnpg plugin: kubectl cnpg status -n <NAMESPACE> <CLUSTER> Tip You can print more information by adding the --verbose option. Get PostgreSQL container image version: kubectl describe cluster <CLUSTER_NAME> -n <NAMESPACE> | grep \"Image Name\" Output: Image Name: ghcr.io/cloudnative-pg/postgresql:17.5-3 Note Also you can use kubectl-cnpg status -n <NAMESPACE> <CLUSTER_NAME> to get the same information.","title":"Cluster information"},{"location":"troubleshooting/#pod-information","text":"You can retrieve the list of instances that belong to a given PostgreSQL cluster with: kubectl get pod -l cnpg.io/cluster=<CLUSTER> -L role -n <NAMESPACE> Output: NAME READY STATUS RESTARTS AGE ROLE <CLUSTER>-1 1/1 Running 0 10d4h5m primary <CLUSTER>-2 1/1 Running 0 10d4h4m replica <CLUSTER>-3 1/1 Running 0 10d4h4m replica You can check if/how a pod is failing by running: kubectl get pod -n <NAMESPACE> -o yaml <CLUSTER>-<N> You can get all the logs for a given PostgreSQL instance with: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> If you want to limit the search to the PostgreSQL process only, you can run: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq 'select(.logger==\"postgres\") | .record.message' The following example also adds the timestamp: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r 'select(.logger==\"postgres\") | [.ts, .record.message] | @csv' If the timestamp is displayed in Unix Epoch time, you can convert it to a user-friendly format: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r 'select(.logger==\"postgres\") | [(.ts|strflocaltime(\"%Y-%m-%dT%H:%M:%S %Z\")), .record.message] | @csv'","title":"Pod information"},{"location":"troubleshooting/#gather-and-filter-extra-information-about-postgresql-pods","text":"Check logs from a specific pod that has crashed: kubectl logs -n <NAMESPACE> --previous <CLUSTER>-<N> Get FATAL errors from a specific PostgreSQL pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '.record | select(.error_severity == \"FATAL\")' Output: { \"log_time\": \"2021-11-08 14:07:44.520 UTC\", \"user_name\": \"streaming_replica\", \"process_id\": \"68\", \"connection_from\": \"10.244.0.10:60616\", \"session_id\": \"61892f30.44\", \"session_line_num\": \"1\", \"command_tag\": \"startup\", \"session_start_time\": \"2021-11-08 14:07:44 UTC\", \"virtual_transaction_id\": \"3/75\", \"transaction_id\": \"0\", \"error_severity\": \"FATAL\", \"sql_state_code\": \"28000\", \"message\": \"role \\\"streaming_replica\\\" does not exist\", \"backend_type\": \"walsender\" } Filter PostgreSQL DB error messages in logs for a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | jq -r '.err | select(. != null)' Output: dial unix /controller/run/.s.PGSQL.5432: connect: no such file or directory Get messages matching err word from a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | jq -r '.msg' | grep \"err\" Output: 2021-11-08 14:07:39.610 UTC [15] LOG: ending log output to stderr Get all logs from PostgreSQL process from a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '. | select(.logger == \"postgres\") | select(.msg != \"record\") | .msg' Output: 2021-11-08 14:07:52.591 UTC [16] LOG: redirecting log output to logging collector process 2021-11-08 14:07:52.591 UTC [16] HINT: Future log output will appear in directory \"/controller/log\". 2021-11-08 14:07:52.591 UTC [16] LOG: ending log output to stderr 2021-11-08 14:07:52.591 UTC [16] HINT: Future log output will go to log destination \"csvlog\". Get pod logs filtered by fields with values and join them separated by | running: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '[.level, .ts, .logger, .msg] | join(\" | \")' Output: info | 1636380469.5728037 | wal-archive | Backup not configured, skip WAL archiving info | 1636383566.0664876 | postgres | record","title":"Gather and filter extra information about PostgreSQL pods"},{"location":"troubleshooting/#backup-information","text":"You can list the backups that have been created for a named cluster with: kubectl get backup -l cnpg.io/cluster=<CLUSTER>","title":"Backup information"},{"location":"troubleshooting/#storage-information","text":"Sometimes is useful to double-check the StorageClass used by the cluster to have some more context during investigations or troubleshooting, like this: STORAGECLASS=$(kubectl get pvc <POD> -o jsonpath='{.spec.storageClassName}') kubectl get storageclasses $STORAGECLASS -o yaml We are taking the StorageClass from one of the cluster pod here since often clusters are created using the default StorageClass.","title":"Storage information"},{"location":"troubleshooting/#node-information","text":"Kubernetes nodes is where ultimately PostgreSQL pods will be running. It's strategically important to know as much as we can about them. You can get the list of nodes in your Kubernetes cluster with: # look at the worker nodes and their status kubectl get nodes -o wide Additionally, you can gather the list of nodes where the pods of a given cluster are running with: kubectl get pod -l cnpg.io/cluster=<CLUSTER> \\ -L role -n <NAMESPACE> -o wide The latter is important to understand where your pods are distributed - very useful if you are using affinity/anti-affinity rules and/or tolerations .","title":"Node information"},{"location":"troubleshooting/#conditions","text":"Like many native kubernetes objects like here , Cluster exposes status.conditions as well. This allows one to 'wait' for a particular event to occur instead of relying on the overall cluster health state. Available conditions as of now are: LastBackupSucceeded ContinuousArchiving Ready LastBackupSucceeded is reporting the status of the latest backup. If set to True the last backup has been taken correctly, it is set to False otherwise. ContinuousArchiving is reporting the status of the WAL archiving. If set to True the last WAL archival process has been terminated correctly, it is set to False otherwise. Ready is True when the cluster has the number of instances specified by the user and the primary instance is ready. This condition can be used in scripts to wait for the cluster to be created.","title":"Conditions"},{"location":"troubleshooting/#how-to-wait-for-a-particular-condition","text":"Backup: $ kubectl wait --for=condition=LastBackupSucceeded cluster/<CLUSTER-NAME> -n <NAMESPACE> ContinuousArchiving: $ kubectl wait --for=condition=ContinuousArchiving cluster/<CLUSTER-NAME> -n <NAMESPACE> Ready (Cluster is ready or not): $ kubectl wait --for=condition=Ready cluster/<CLUSTER-NAME> -n <NAMESPACE> Below is a snippet of a cluster.status that contains a failing condition. $ kubectl get cluster/<cluster-name> -o yaml . . . status: conditions: - message: 'unexpected failure invoking barman-cloud-wal-archive: exit status 2' reason: ContinuousArchivingFailing status: \"False\" type: ContinuousArchiving - message: exit status 2 reason: LastBackupFailed status: \"False\" type: LastBackupSucceeded - message: Cluster Is Not Ready reason: ClusterIsNotReady status: \"False\" type: Ready","title":"How to wait for a particular condition"},{"location":"troubleshooting/#networking","text":"CloudNativePG requires basic networking and connectivity in place. You can find more information in the networking section. If installing CloudNativePG in an existing environment, there might be network policies in place, or other network configuration made specifically for the cluster, which could have an impact on the required connectivity between the operator and the cluster pods and/or the between the pods. You can look for existing network policies with the following command: kubectl get networkpolicies There might be several network policies set up by the Kubernetes network administrator. $ kubectl get networkpolicies NAME POD-SELECTOR AGE allow-prometheus cnpg.io/cluster=cluster-example 47m default-deny-ingress <none> 57m","title":"Networking"},{"location":"troubleshooting/#postgresql-core-dumps","text":"Although rare, PostgreSQL can sometimes crash and generate a core dump in the PGDATA folder. When that happens, normally it is a bug in PostgreSQL (and most likely it has already been solved - this is why it is important to always run the latest minor version of PostgreSQL). CloudNativePG allows you to control what to include in the core dump through the cnpg.io/coredumpFilter annotation. Info Please refer to \"Labels and annotations\" for more details on the standard annotations that CloudNativePG provides. By default, the cnpg.io/coredumpFilter is set to 0x31 in order to exclude shared memory segments from the dump, as this is the safest approach in most cases. Info Please refer to \"Core dump filtering settings\" section of \"The /proc Filesystem\" page of the Linux Kernel documentation . for more details on how to set the bitmask that controls the core dump filter. Important Beware that this setting only takes effect during Pod startup and that changing the annotation doesn't trigger an automated rollout of the instances. Although you might not personally be involved in inspecting core dumps, you might be asked to provide them so that a Postgres expert can look into them. First, verify that you have a core dump in the PGDATA directory with the following command (please run it against the correct pod where the Postgres instance is running): kubectl exec -ti POD -c postgres \\ -- find /var/lib/postgresql/data/pgdata -name 'core.*' Under normal circumstances, this should return an empty set. Suppose, for example, that we have a core dump file: /var/lib/postgresql/data/pgdata/core.14177 Once you have verified the space on disk is sufficient, you can collect the core dump on your machine through kubectl cp as follows: kubectl cp POD:/var/lib/postgresql/data/pgdata/core.14177 core.14177 You now have the file. Make sure you free the space on the server by removing the core dumps.","title":"PostgreSQL core dumps"},{"location":"troubleshooting/#some-known-issues","text":"","title":"Some known issues"},{"location":"troubleshooting/#storage-is-full","text":"In case the storage is full, the PostgreSQL pods will not be able to write new data, or, in case of the disk containing the WAL segments being full, PostgreSQL will shut down. If you see messages in the logs about the disk being full, you should increase the size of the affected PVC. You can do this by editing the PVC and changing the spec.resources.requests.storage field. After that, you should also update the Cluster resource with the new size to apply the same change to all the pods. Please look at the \"Volume expansion\" section in the documentation. If the space for WAL segments is exhausted, the pod will be crash-looping and the cluster status will report Not enough disk space . Increasing the size in the PVC and then in the Cluster resource will solve the issue. See also the \"Disk Full Failure\" section","title":"Storage is full"},{"location":"troubleshooting/#pods-are-stuck-in-pending-state","text":"In case a Cluster's instance is stuck in the Pending phase, you should check the pod's Events section to get an idea of the reasons behind this: kubectl describe pod -n <NAMESPACE> <POD> Some of the possible causes for this are: No nodes are matching the nodeSelector Tolerations are not correctly configured to match the nodes' taints No nodes are available at all: this could also be related to cluster-autoscaler hitting some limits, or having some temporary issues In this case, it could also be useful to check events in the namespace: kubectl get events -n <NAMESPACE> # list events in chronological order kubectl get events -n <NAMESPACE> --sort-by=.metadata.creationTimestamp","title":"Pods are stuck in Pending state"},{"location":"troubleshooting/#replicas-out-of-sync-when-no-backup-is-configured","text":"Sometimes replicas might be switched off for a bit of time due to maintenance reasons (think of when a Kubernetes nodes is drained). In case your cluster does not have backup configured, when replicas come back up, they might require a WAL file that is not present anymore on the primary (having been already recycled according to the WAL management policies as mentioned in \"The postgresql section\" ), and fall out of synchronization. Similarly, when pg_rewind might require a WAL file that is not present anymore in the former primary, reporting pg_rewind: error: could not open file . In these cases, pods cannot become ready anymore, and you are required to delete the PVC and let the operator rebuild the replica. If you rely on dynamically provisioned Persistent Volumes, and you are confident in deleting the PV itself, you can do so with: PODNAME=<POD> VOLNAME=$(kubectl get pv -o json | \\ jq -r '.items[]|select(.spec.claimRef.name=='\\\"$PODNAME\\\"')|.metadata.name') kubectl delete pod/$PODNAME pvc/$PODNAME pvc/$PODNAME-wal pv/$VOLNAME","title":"Replicas out of sync when no backup is configured"},{"location":"troubleshooting/#cluster-stuck-in-creating-new-replica","text":"Cluster is stuck in \"Creating a new replica\", while pod logs don't show relevant problems. This has been found to be related to the next issue on connectivity . Networking issues are reflected in the status column as follows: Instance Status Extraction Error: HTTP communication issue","title":"Cluster stuck in Creating new replica"},{"location":"troubleshooting/#networking-is-impaired-by-installed-network-policies","text":"As pointed out in the networking section , local network policies could prevent some of the required connectivity. A tell-tale sign that connectivity is impaired is the presence in the operator logs of messages like: \"Cannot extract Pod status\", [\u2026snipped\u2026] \"Get \\\"http://<pod IP>:8000/pg/status\\\": dial tcp <pod IP>:8000: i/o timeout\" You should list the network policies, and look for any policies restricting connectivity. $ kubectl get networkpolicies NAME POD-SELECTOR AGE allow-prometheus cnpg.io/cluster=cluster-example 47m default-deny-ingress <none> 57m For example, in the listing above, default-deny-ingress seems a likely culprit. You can drill into it: $ kubectl get networkpolicies default-deny-ingress -o yaml <\u2026snipped\u2026> spec: podSelector: {} policyTypes: - Ingress In the networking page you can find a network policy file that you can customize to create a NetworkPolicy explicitly allowing the operator to connect cross-namespace to cluster pods.","title":"Networking is impaired by installed Network Policies"},{"location":"troubleshooting/#error-while-bootstrapping-the-data-directory","text":"If your Cluster's initialization job crashes with a \"Bus error (core dumped) child process exited with exit code 135\", you likely need to fix the Cluster hugepages settings. The reason is the incomplete support of hugepages in the cgroup v1 that should be fixed in v2. For more information, check the PostgreSQL BUG #17757: Not honoring huge_pages setting during initdb causes DB crash in Kubernetes . To check whether hugepages are enabled, run grep HugePages /proc/meminfo on the Kubernetes node and check if hugepages are present, their size, and how many are free. If the hugepages are present, you need to configure how much hugepages memory every PostgreSQL pod should have available. For example: postgresql: parameters: shared_buffers: \"128MB\" resources: requests: memory: \"512Mi\" limits: hugepages-2Mi: \"512Mi\" Please remember that you must have enough hugepages memory available to schedule every Pod in the Cluster (in the example above, at least 512MiB per Pod must be free).","title":"Error while bootstrapping the data directory"},{"location":"troubleshooting/#bootstrap-job-hangs-in-running-status","text":"If your Cluster's initialization job hangs while in Running status with the message: \"error while waiting for the API server to be reachable\", you probably have a network issue preventing communication with the Kubernetes API server. Initialization jobs (like most of jobs) need to access the Kubernetes API. Please check your networking. Another possible cause is when you have sidecar injection configured. Sidecars such as Istio may make the network temporarily unavailable during startup. If you have sidecar injection enabled, retry with injection disabled.","title":"Bootstrap job hangs in running status"},{"location":"troubleshooting/#replicas-take-over-two-minutes-to-reconnect-after-a-failover","text":"When the primary instance fails, the operator promotes the most advanced standby to the primary role. Other standby instances then attempt to reconnect to the -rw service for replication. However, during this reconnection process, kube-proxy may not have updated its routing information yet. As a result, the initial SYN packet sent by the standby instances might fail to reach its intended destination. If the network is configured to silently drop packets instead of rejecting them, standby instances will not receive a response and will retry the connection after an exponential backoff period. On Linux systems, the default value for the tcp_syn_retries kernel parameter is 6, meaning the system will attempt to establish the connection for approximately 127 seconds before giving up. This prolonged retry period can significantly delay the reconnection process. For more details, consult the tcp_syn_retries documentation . You can work around this issue by setting STANDBY_TCP_USER_TIMEOUT in the operator configuration . This will cause the standby instances to close the TCP connection if the initial SYN packet is not acknowledged within the specified timeout, allowing them to retry the connection more quickly.","title":"Replicas take over two minutes to reconnect after a failover"},{"location":"use_cases/","text":"Use cases CloudNativePG has been designed to work with applications that reside in the same Kubernetes cluster, for a full cloud native experience. However, it might happen that, while the database can be hosted inside a Kubernetes cluster, applications cannot be containerized at the same time and need to run in a traditional environment such as a VM. Case 1: Applications inside Kubernetes In a typical situation, the application and the database run in the same namespace inside a Kubernetes cluster. The application, normally stateless, is managed as a standard Deployment , with multiple replicas spread over different Kubernetes node, and internally exposed through a ClusterIP service. The service is exposed externally to the end user through an Ingress and the provider's load balancer facility, via HTTPS. The application uses the backend PostgreSQL database to keep track of the state in a reliable and persistent way. The application refers to the read-write service exposed by the Cluster resource defined by CloudNativePG, which points to the current primary instance, through a TLS connection. The Cluster resource embeds the logic of single primary and multiple standby architecture, hiding the complexity of managing a high availability cluster in Postgres. Case 2: Applications outside Kubernetes Another possible use case is to manage your PostgreSQL database inside Kubernetes, while having your applications outside of it (for example in a virtualized environment). In this case, PostgreSQL is represented by an IP address (or host name) and a TCP port, corresponding to the defined Ingress resource in Kubernetes (normally a LoadBalancer service type as explained in the \"Service Management\" page). The application can still benefit from a TLS connection to PostgreSQL.","title":"Use cases"},{"location":"use_cases/#use-cases","text":"CloudNativePG has been designed to work with applications that reside in the same Kubernetes cluster, for a full cloud native experience. However, it might happen that, while the database can be hosted inside a Kubernetes cluster, applications cannot be containerized at the same time and need to run in a traditional environment such as a VM.","title":"Use cases"},{"location":"use_cases/#case-1-applications-inside-kubernetes","text":"In a typical situation, the application and the database run in the same namespace inside a Kubernetes cluster. The application, normally stateless, is managed as a standard Deployment , with multiple replicas spread over different Kubernetes node, and internally exposed through a ClusterIP service. The service is exposed externally to the end user through an Ingress and the provider's load balancer facility, via HTTPS. The application uses the backend PostgreSQL database to keep track of the state in a reliable and persistent way. The application refers to the read-write service exposed by the Cluster resource defined by CloudNativePG, which points to the current primary instance, through a TLS connection. The Cluster resource embeds the logic of single primary and multiple standby architecture, hiding the complexity of managing a high availability cluster in Postgres.","title":"Case 1: Applications inside Kubernetes"},{"location":"use_cases/#case-2-applications-outside-kubernetes","text":"Another possible use case is to manage your PostgreSQL database inside Kubernetes, while having your applications outside of it (for example in a virtualized environment). In this case, PostgreSQL is represented by an IP address (or host name) and a TCP port, corresponding to the defined Ingress resource in Kubernetes (normally a LoadBalancer service type as explained in the \"Service Management\" page). The application can still benefit from a TLS connection to PostgreSQL.","title":"Case 2: Applications outside Kubernetes"},{"location":"wal_archiving/","text":"WAL archiving Warning With the deprecation of native Barman Cloud support in CloudNativePG in favor of the Barman Cloud Plugin, this page\u2014and the backup and recovery documentation\u2014may undergo changes before the official release of version 1.26.0. WAL archiving is the process that feeds a WAL archive in CloudNativePG. Important CloudNativePG currently only supports WAL archives on object stores. Such WAL archives serve for both object store backups and volume snapshot backups. The WAL archive is defined in the .spec.backup.barmanObjectStore stanza of a Cluster resource. Please proceed with the same instructions you find in the \"Backup on object stores\" section to set up the WAL archive. Info Please refer to BarmanObjectStoreConfiguration in the barman-cloud API for a full list of options. If required, you can choose to compress WAL files as soon as they are uploaded and/or encrypt them: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: compression: gzip encryption: AES256 You can configure the encryption directly in your bucket, and the operator will use it unless you override it in the cluster configuration. PostgreSQL implements a sequential archiving scheme, where the archive_command will be executed sequentially for every WAL segment to be archived. Important By default, CloudNativePG sets archive_timeout to 5min , ensuring that WAL files, even in case of low workloads, are closed and archived at least every 5 minutes, providing a deterministic time-based value for your Recovery Point Objective ( RPO ). Even though you change the value of the archive_timeout setting in the PostgreSQL configuration , our experience suggests that the default value set by the operator is suitable for most use cases. When the bandwidth between the PostgreSQL instance and the object store allows archiving more than one WAL file in parallel, you can use the parallel WAL archiving feature of the instance manager like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: compression: gzip maxParallel: 8 encryption: AES256 In the previous example, the instance manager optimizes the WAL archiving process by archiving in parallel at most eight ready WALs, including the one requested by PostgreSQL. When PostgreSQL will request the archiving of a WAL that has already been archived by the instance manager as an optimization, that archival request will be just dismissed with a positive status.","title":"WAL archiving"},{"location":"wal_archiving/#wal-archiving","text":"Warning With the deprecation of native Barman Cloud support in CloudNativePG in favor of the Barman Cloud Plugin, this page\u2014and the backup and recovery documentation\u2014may undergo changes before the official release of version 1.26.0. WAL archiving is the process that feeds a WAL archive in CloudNativePG. Important CloudNativePG currently only supports WAL archives on object stores. Such WAL archives serve for both object store backups and volume snapshot backups. The WAL archive is defined in the .spec.backup.barmanObjectStore stanza of a Cluster resource. Please proceed with the same instructions you find in the \"Backup on object stores\" section to set up the WAL archive. Info Please refer to BarmanObjectStoreConfiguration in the barman-cloud API for a full list of options. If required, you can choose to compress WAL files as soon as they are uploaded and/or encrypt them: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: compression: gzip encryption: AES256 You can configure the encryption directly in your bucket, and the operator will use it unless you override it in the cluster configuration. PostgreSQL implements a sequential archiving scheme, where the archive_command will be executed sequentially for every WAL segment to be archived. Important By default, CloudNativePG sets archive_timeout to 5min , ensuring that WAL files, even in case of low workloads, are closed and archived at least every 5 minutes, providing a deterministic time-based value for your Recovery Point Objective ( RPO ). Even though you change the value of the archive_timeout setting in the PostgreSQL configuration , our experience suggests that the default value set by the operator is suitable for most use cases. When the bandwidth between the PostgreSQL instance and the object store allows archiving more than one WAL file in parallel, you can use the parallel WAL archiving feature of the instance manager like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: compression: gzip maxParallel: 8 encryption: AES256 In the previous example, the instance manager optimizes the WAL archiving process by archiving in parallel at most eight ready WALs, including the one requested by PostgreSQL. When PostgreSQL will request the archiving of a WAL that has already been archived by the instance manager as an optimization, that archival request will be just dismissed with a positive status.","title":"WAL archiving"},{"location":"appendixes/object_stores/","text":"Appendix A - Common object stores for backups Warning With the deprecation of native Barman Cloud support in CloudNativePG in favor of the Barman Cloud Plugin, this page\u2014and the backup and recovery documentation\u2014may undergo changes before the official release of version 1.26.0. You can store the backup files in any service that is supported by the Barman Cloud infrastructure. That is: Amazon S3 Microsoft Azure Blob Storage Google Cloud Storage You can also use any compatible implementation of the supported services. The required setup depends on the chosen storage provider and is discussed in the following sections. AWS S3 AWS Simple Storage Service (S3) is a very popular object storage service offered by Amazon. As far as CloudNativePG backup is concerned, you can define the permissions to store backups in S3 buckets in two ways: If CloudNativePG is running in EKS. you may want to use the IRSA authentication method Alternatively, you can use the ACCESS_KEY_ID and ACCESS_SECRET_KEY credentials AWS Access key You will need the following information about your environment: ACCESS_KEY_ID : the ID of the access key that will be used to upload files into S3 ACCESS_SECRET_KEY : the secret part of the access key mentioned above ACCESS_SESSION_TOKEN : the optional session token, in case it is required The access key used must have permission to upload files into the bucket. Given that, you must create a Kubernetes secret with the credentials, and you can do that with the following command: kubectl create secret generic aws-creds \\ --from-literal=ACCESS_KEY_ID=<access key here> \\ --from-literal=ACCESS_SECRET_KEY=<secret key here> # --from-literal=ACCESS_SESSION_TOKEN=<session token here> # if required The credentials will be stored inside Kubernetes and will be encrypted if encryption at rest is configured in your installation. Once that secret has been created, you can configure your cluster like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" s3Credentials: accessKeyId: name: aws-creds key: ACCESS_KEY_ID secretAccessKey: name: aws-creds key: ACCESS_SECRET_KEY The destination path can be any URL pointing to a folder where the instance can upload the WAL files, e.g. s3://BUCKET_NAME/path/to/folder . IAM Role for Service Account (IRSA) In order to use IRSA you need to set an annotation in the ServiceAccount of the Postgres cluster. We can configure CloudNativePG to inject them using the serviceAccountTemplate stanza: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: [...] spec: serviceAccountTemplate: metadata: annotations: eks.amazonaws.com/role-arn: arn:[...] [...] S3 lifecycle policy Barman Cloud writes objects to S3, then does not update them until they are deleted by the Barman Cloud retention policy. A recommended approach for an S3 lifecycle policy is to expire the current version of objects a few days longer than the Barman retention policy, enable object versioning, and expire non-current versions after a number of days. Such a policy protects against accidental deletion, and also allows for restricting permissions to the CloudNativePG workload so that it may delete objects from S3 without granting permissions to permanently delete objects. Other S3-compatible Object Storages providers In case you're using S3-compatible object storage, like MinIO or Linode Object Storage , you can specify an endpoint instead of using the default S3 one. In this example, it will use the bucket of Linode in the region us-east1 . apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"s3://bucket/\" endpointURL: \"https://us-east1.linodeobjects.com\" s3Credentials: [...] In case you're using Digital Ocean Spaces , you will have to use the Path-style syntax. In this example, it will use the bucket from Digital Ocean Spaces in the region SFO3 . apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"s3://[your-bucket-name]/[your-backup-folder]/\" endpointURL: \"https://sfo3.digitaloceanspaces.com\" s3Credentials: [...] Using Object Storage with a private CA Suppose you configure an Object Storage provider which uses a certificate signed with a private CA, for example when using MinIO via HTTPS. In that case, you need to set the option endpointCA inside barmanObjectStore referring to a secret containing the CA bundle, so that Barman can verify the certificate correctly. You can find instructions on creating a secret using your cert files in the certificates document. Once you have created the secret, you can populate the endpointCA as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: [...] backup: barmanObjectStore: endpointURL: <myEndpointURL> endpointCA: name: my-ca-secret key: ca.crt Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to the Secrets/ConfigMaps. Otherwise, you will have to reload the instances using the kubectl cnpg reload subcommand. Azure Blob Storage Azure Blob Storage is the object storage service provided by Microsoft. In order to access your storage account for backup and recovery of CloudNativePG managed databases, you will need one of the following combinations of credentials: Connection String Storage account name and Storage account access key Storage account name and Storage account SAS Token Storage account name and Azure AD Workload Identity properly configured. Using Azure AD Workload Identity , you can avoid saving the credentials into a Kubernetes Secret, and have a Cluster configuration adding the inheritFromAzureAD as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" azureCredentials: inheritFromAzureAD: true On the other side, using both Storage account access key or Storage account SAS Token , the credentials need to be stored inside a Kubernetes Secret, adding data entries only when needed. The following command performs that: kubectl create secret generic azure-creds \\ --from-literal=AZURE_STORAGE_ACCOUNT=<storage account name> \\ --from-literal=AZURE_STORAGE_KEY=<storage account key> \\ --from-literal=AZURE_STORAGE_SAS_TOKEN=<SAS token> \\ --from-literal=AZURE_STORAGE_CONNECTION_STRING=<connection string> The credentials will be encrypted at rest, if this feature is enabled in the used Kubernetes cluster. Given the previous secret, the provided credentials can be injected inside the cluster configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" azureCredentials: connectionString: name: azure-creds key: AZURE_CONNECTION_STRING storageAccount: name: azure-creds key: AZURE_STORAGE_ACCOUNT storageKey: name: azure-creds key: AZURE_STORAGE_KEY storageSasToken: name: azure-creds key: AZURE_STORAGE_SAS_TOKEN When using the Azure Blob Storage, the destinationPath fulfills the following structure: <http|https>://<account-name>.<service-name>.core.windows.net/<resource-path> where <resource-path> is <container>/<blob> . The account name , which is also called storage account name , is included in the used host name. Other Azure Blob Storage compatible providers If you are using a different implementation of the Azure Blob Storage APIs, the destinationPath will have the following structure: <http|https>://<local-machine-address>:<port>/<account-name>/<resource-path> In that case, <account-name> is the first component of the path. This is required if you are testing the Azure support via the Azure Storage Emulator or Azurite . Google Cloud Storage Currently, the CloudNativePG operator supports two authentication methods for Google Cloud Storage : the first one assumes that the pod is running inside a Google Kubernetes Engine cluster the second one leverages the environment variable GOOGLE_APPLICATION_CREDENTIALS Running inside Google Kubernetes Engine When running inside Google Kubernetes Engine you can configure your backups to simply rely on Workload Identity , without having to set any credentials. In particular, you need to: set .spec.backup.barmanObjectStore.googleCredentials.gkeEnvironment to true set the iam.gke.io/gcp-service-account annotation in the serviceAccountTemplate stanza Please use the following example as a reference: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: [...] backup: barmanObjectStore: destinationPath: \"gs://<destination path here>\" googleCredentials: gkeEnvironment: true serviceAccountTemplate: metadata: annotations: iam.gke.io/gcp-service-account: [...].iam.gserviceaccount.com [...] Using authentication Following the instruction from Google you will get a JSON file that contains all the required information to authenticate. The content of the JSON file must be provided using a Secret that can be created with the following command: kubectl create secret generic backup-creds --from-file=gcsCredentials=gcs_credentials_file.json This will create the Secret with the name backup-creds to be used in the yaml file like this: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"gs://<destination path here>\" googleCredentials: applicationCredentials: name: backup-creds key: gcsCredentials Now the operator will use the credentials to authenticate against Google Cloud Storage. Important This way of authentication will create a JSON file inside the container with all the needed information to access your Google Cloud Storage bucket, meaning that if someone gets access to the pod will also have write permissions to the bucket. MinIO Gateway Optionally, you can use MinIO Gateway as a common interface which relays backup objects to other cloud storage solutions, like S3 or GCS. For more information, please refer to MinIO official documentation . Specifically, the CloudNativePG cluster can directly point to a local MinIO Gateway as an endpoint, using previously created credentials and service. MinIO secrets will be used by both the PostgreSQL cluster and the MinIO instance. Therefore, you must create them in the same namespace: kubectl create secret generic minio-creds \\ --from-literal=MINIO_ACCESS_KEY=<minio access key here> \\ --from-literal=MINIO_SECRET_KEY=<minio secret key here> Note Cloud Object Storage credentials will be used only by MinIO Gateway in this case. Important In order to allow PostgreSQL to reach MinIO Gateway, it is necessary to create a ClusterIP service on port 9000 bound to the MinIO Gateway instance. For example: apiVersion: v1 kind: Service metadata: name: minio-gateway-service spec: type: ClusterIP ports: - port: 9000 targetPort: 9000 protocol: TCP selector: app: minio Warning At the time of writing this documentation, the official MinIO Operator for Kubernetes does not support the gateway feature. As such, we will use a deployment instead. The MinIO deployment will use cloud storage credentials to upload objects to the remote bucket and relay backup files to different locations. Here is an example using AWS S3 as Cloud Object Storage: apiVersion: apps/v1 kind: Deployment [...] spec: containers: - name: minio image: minio/minio:RELEASE.2020-06-03T22-13-49Z args: - gateway - s3 env: # MinIO access key and secret key - name: MINIO_ACCESS_KEY valueFrom: secretKeyRef: name: minio-creds key: MINIO_ACCESS_KEY - name: MINIO_SECRET_KEY valueFrom: secretKeyRef: name: minio-creds key: MINIO_SECRET_KEY # AWS credentials - name: AWS_ACCESS_KEY_ID valueFrom: secretKeyRef: name: aws-creds key: ACCESS_KEY_ID - name: AWS_SECRET_ACCESS_KEY valueFrom: secretKeyRef: name: aws-creds key: ACCESS_SECRET_KEY # Uncomment the below section if session token is required # - name: AWS_SESSION_TOKEN # valueFrom: # secretKeyRef: # name: aws-creds # key: ACCESS_SESSION_TOKEN ports: - containerPort: 9000 Proceed by configuring MinIO Gateway service as the endpointURL in the Cluster definition, then choose a bucket name to replace BUCKET_NAME : apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: s3://BUCKET_NAME/ endpointURL: http://minio-gateway-service:9000 s3Credentials: accessKeyId: name: minio-creds key: MINIO_ACCESS_KEY secretAccessKey: name: minio-creds key: MINIO_SECRET_KEY [...] Verify on s3://BUCKET_NAME/ the presence of archived WAL files before proceeding with a backup.","title":"Appendix A - Common object stores for backups"},{"location":"appendixes/object_stores/#appendix-a-common-object-stores-for-backups","text":"Warning With the deprecation of native Barman Cloud support in CloudNativePG in favor of the Barman Cloud Plugin, this page\u2014and the backup and recovery documentation\u2014may undergo changes before the official release of version 1.26.0. You can store the backup files in any service that is supported by the Barman Cloud infrastructure. That is: Amazon S3 Microsoft Azure Blob Storage Google Cloud Storage You can also use any compatible implementation of the supported services. The required setup depends on the chosen storage provider and is discussed in the following sections.","title":"Appendix A - Common object stores for backups"},{"location":"appendixes/object_stores/#aws-s3","text":"AWS Simple Storage Service (S3) is a very popular object storage service offered by Amazon. As far as CloudNativePG backup is concerned, you can define the permissions to store backups in S3 buckets in two ways: If CloudNativePG is running in EKS. you may want to use the IRSA authentication method Alternatively, you can use the ACCESS_KEY_ID and ACCESS_SECRET_KEY credentials","title":"AWS S3"},{"location":"appendixes/object_stores/#aws-access-key","text":"You will need the following information about your environment: ACCESS_KEY_ID : the ID of the access key that will be used to upload files into S3 ACCESS_SECRET_KEY : the secret part of the access key mentioned above ACCESS_SESSION_TOKEN : the optional session token, in case it is required The access key used must have permission to upload files into the bucket. Given that, you must create a Kubernetes secret with the credentials, and you can do that with the following command: kubectl create secret generic aws-creds \\ --from-literal=ACCESS_KEY_ID=<access key here> \\ --from-literal=ACCESS_SECRET_KEY=<secret key here> # --from-literal=ACCESS_SESSION_TOKEN=<session token here> # if required The credentials will be stored inside Kubernetes and will be encrypted if encryption at rest is configured in your installation. Once that secret has been created, you can configure your cluster like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" s3Credentials: accessKeyId: name: aws-creds key: ACCESS_KEY_ID secretAccessKey: name: aws-creds key: ACCESS_SECRET_KEY The destination path can be any URL pointing to a folder where the instance can upload the WAL files, e.g. s3://BUCKET_NAME/path/to/folder .","title":"AWS Access key"},{"location":"appendixes/object_stores/#iam-role-for-service-account-irsa","text":"In order to use IRSA you need to set an annotation in the ServiceAccount of the Postgres cluster. We can configure CloudNativePG to inject them using the serviceAccountTemplate stanza: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: [...] spec: serviceAccountTemplate: metadata: annotations: eks.amazonaws.com/role-arn: arn:[...] [...]","title":"IAM Role for Service Account (IRSA)"},{"location":"appendixes/object_stores/#s3-lifecycle-policy","text":"Barman Cloud writes objects to S3, then does not update them until they are deleted by the Barman Cloud retention policy. A recommended approach for an S3 lifecycle policy is to expire the current version of objects a few days longer than the Barman retention policy, enable object versioning, and expire non-current versions after a number of days. Such a policy protects against accidental deletion, and also allows for restricting permissions to the CloudNativePG workload so that it may delete objects from S3 without granting permissions to permanently delete objects.","title":"S3 lifecycle policy"},{"location":"appendixes/object_stores/#other-s3-compatible-object-storages-providers","text":"In case you're using S3-compatible object storage, like MinIO or Linode Object Storage , you can specify an endpoint instead of using the default S3 one. In this example, it will use the bucket of Linode in the region us-east1 . apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"s3://bucket/\" endpointURL: \"https://us-east1.linodeobjects.com\" s3Credentials: [...] In case you're using Digital Ocean Spaces , you will have to use the Path-style syntax. In this example, it will use the bucket from Digital Ocean Spaces in the region SFO3 . apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"s3://[your-bucket-name]/[your-backup-folder]/\" endpointURL: \"https://sfo3.digitaloceanspaces.com\" s3Credentials: [...]","title":"Other S3-compatible Object Storages providers"},{"location":"appendixes/object_stores/#using-object-storage-with-a-private-ca","text":"Suppose you configure an Object Storage provider which uses a certificate signed with a private CA, for example when using MinIO via HTTPS. In that case, you need to set the option endpointCA inside barmanObjectStore referring to a secret containing the CA bundle, so that Barman can verify the certificate correctly. You can find instructions on creating a secret using your cert files in the certificates document. Once you have created the secret, you can populate the endpointCA as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: [...] backup: barmanObjectStore: endpointURL: <myEndpointURL> endpointCA: name: my-ca-secret key: ca.crt Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to the Secrets/ConfigMaps. Otherwise, you will have to reload the instances using the kubectl cnpg reload subcommand.","title":"Using Object Storage with a private CA"},{"location":"appendixes/object_stores/#azure-blob-storage","text":"Azure Blob Storage is the object storage service provided by Microsoft. In order to access your storage account for backup and recovery of CloudNativePG managed databases, you will need one of the following combinations of credentials: Connection String Storage account name and Storage account access key Storage account name and Storage account SAS Token Storage account name and Azure AD Workload Identity properly configured. Using Azure AD Workload Identity , you can avoid saving the credentials into a Kubernetes Secret, and have a Cluster configuration adding the inheritFromAzureAD as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" azureCredentials: inheritFromAzureAD: true On the other side, using both Storage account access key or Storage account SAS Token , the credentials need to be stored inside a Kubernetes Secret, adding data entries only when needed. The following command performs that: kubectl create secret generic azure-creds \\ --from-literal=AZURE_STORAGE_ACCOUNT=<storage account name> \\ --from-literal=AZURE_STORAGE_KEY=<storage account key> \\ --from-literal=AZURE_STORAGE_SAS_TOKEN=<SAS token> \\ --from-literal=AZURE_STORAGE_CONNECTION_STRING=<connection string> The credentials will be encrypted at rest, if this feature is enabled in the used Kubernetes cluster. Given the previous secret, the provided credentials can be injected inside the cluster configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" azureCredentials: connectionString: name: azure-creds key: AZURE_CONNECTION_STRING storageAccount: name: azure-creds key: AZURE_STORAGE_ACCOUNT storageKey: name: azure-creds key: AZURE_STORAGE_KEY storageSasToken: name: azure-creds key: AZURE_STORAGE_SAS_TOKEN When using the Azure Blob Storage, the destinationPath fulfills the following structure: <http|https>://<account-name>.<service-name>.core.windows.net/<resource-path> where <resource-path> is <container>/<blob> . The account name , which is also called storage account name , is included in the used host name.","title":"Azure Blob Storage"},{"location":"appendixes/object_stores/#other-azure-blob-storage-compatible-providers","text":"If you are using a different implementation of the Azure Blob Storage APIs, the destinationPath will have the following structure: <http|https>://<local-machine-address>:<port>/<account-name>/<resource-path> In that case, <account-name> is the first component of the path. This is required if you are testing the Azure support via the Azure Storage Emulator or Azurite .","title":"Other Azure Blob Storage compatible providers"},{"location":"appendixes/object_stores/#google-cloud-storage","text":"Currently, the CloudNativePG operator supports two authentication methods for Google Cloud Storage : the first one assumes that the pod is running inside a Google Kubernetes Engine cluster the second one leverages the environment variable GOOGLE_APPLICATION_CREDENTIALS","title":"Google Cloud Storage"},{"location":"appendixes/object_stores/#running-inside-google-kubernetes-engine","text":"When running inside Google Kubernetes Engine you can configure your backups to simply rely on Workload Identity , without having to set any credentials. In particular, you need to: set .spec.backup.barmanObjectStore.googleCredentials.gkeEnvironment to true set the iam.gke.io/gcp-service-account annotation in the serviceAccountTemplate stanza Please use the following example as a reference: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: [...] backup: barmanObjectStore: destinationPath: \"gs://<destination path here>\" googleCredentials: gkeEnvironment: true serviceAccountTemplate: metadata: annotations: iam.gke.io/gcp-service-account: [...].iam.gserviceaccount.com [...]","title":"Running inside Google Kubernetes Engine"},{"location":"appendixes/object_stores/#using-authentication","text":"Following the instruction from Google you will get a JSON file that contains all the required information to authenticate. The content of the JSON file must be provided using a Secret that can be created with the following command: kubectl create secret generic backup-creds --from-file=gcsCredentials=gcs_credentials_file.json This will create the Secret with the name backup-creds to be used in the yaml file like this: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"gs://<destination path here>\" googleCredentials: applicationCredentials: name: backup-creds key: gcsCredentials Now the operator will use the credentials to authenticate against Google Cloud Storage. Important This way of authentication will create a JSON file inside the container with all the needed information to access your Google Cloud Storage bucket, meaning that if someone gets access to the pod will also have write permissions to the bucket.","title":"Using authentication"},{"location":"appendixes/object_stores/#minio-gateway","text":"Optionally, you can use MinIO Gateway as a common interface which relays backup objects to other cloud storage solutions, like S3 or GCS. For more information, please refer to MinIO official documentation . Specifically, the CloudNativePG cluster can directly point to a local MinIO Gateway as an endpoint, using previously created credentials and service. MinIO secrets will be used by both the PostgreSQL cluster and the MinIO instance. Therefore, you must create them in the same namespace: kubectl create secret generic minio-creds \\ --from-literal=MINIO_ACCESS_KEY=<minio access key here> \\ --from-literal=MINIO_SECRET_KEY=<minio secret key here> Note Cloud Object Storage credentials will be used only by MinIO Gateway in this case. Important In order to allow PostgreSQL to reach MinIO Gateway, it is necessary to create a ClusterIP service on port 9000 bound to the MinIO Gateway instance. For example: apiVersion: v1 kind: Service metadata: name: minio-gateway-service spec: type: ClusterIP ports: - port: 9000 targetPort: 9000 protocol: TCP selector: app: minio Warning At the time of writing this documentation, the official MinIO Operator for Kubernetes does not support the gateway feature. As such, we will use a deployment instead. The MinIO deployment will use cloud storage credentials to upload objects to the remote bucket and relay backup files to different locations. Here is an example using AWS S3 as Cloud Object Storage: apiVersion: apps/v1 kind: Deployment [...] spec: containers: - name: minio image: minio/minio:RELEASE.2020-06-03T22-13-49Z args: - gateway - s3 env: # MinIO access key and secret key - name: MINIO_ACCESS_KEY valueFrom: secretKeyRef: name: minio-creds key: MINIO_ACCESS_KEY - name: MINIO_SECRET_KEY valueFrom: secretKeyRef: name: minio-creds key: MINIO_SECRET_KEY # AWS credentials - name: AWS_ACCESS_KEY_ID valueFrom: secretKeyRef: name: aws-creds key: ACCESS_KEY_ID - name: AWS_SECRET_ACCESS_KEY valueFrom: secretKeyRef: name: aws-creds key: ACCESS_SECRET_KEY # Uncomment the below section if session token is required # - name: AWS_SESSION_TOKEN # valueFrom: # secretKeyRef: # name: aws-creds # key: ACCESS_SESSION_TOKEN ports: - containerPort: 9000 Proceed by configuring MinIO Gateway service as the endpointURL in the Cluster definition, then choose a bucket name to replace BUCKET_NAME : apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: s3://BUCKET_NAME/ endpointURL: http://minio-gateway-service:9000 s3Credentials: accessKeyId: name: minio-creds key: MINIO_ACCESS_KEY secretAccessKey: name: minio-creds key: MINIO_SECRET_KEY [...] Verify on s3://BUCKET_NAME/ the presence of archived WAL files before proceeding with a backup.","title":"MinIO Gateway"},{"location":"cncf-projects/external-secrets/","text":"External Secrets External Secrets is a CNCF Sandbox project, accepted in 2022 under the sponsorship of TAG Security. About The External Secrets Operator (ESO) is a Kubernetes operator that enhances secret management by decoupling the storage of secrets from Kubernetes itself. It enables seamless synchronization between external secret management systems and native Kubernetes Secret resources. ESO supports a wide range of backends, including: HashiCorp Vault AWS Secrets Manager Google Secret Manager Azure Key Vault IBM Cloud Secrets Manager \u2026and many more. For a full and up-to-date list of supported providers, refer to the official External Secrets documentation . Integration with PostgreSQL and CloudNativePG When it comes to PostgreSQL databases, External Secrets integrates seamlessly with CloudNativePG in two major use cases: Automated password management: ESO can handle the automatic generation and rotation of database user passwords stored in Kubernetes Secret resources, ensuring that applications running inside the cluster always have access to up-to-date credentials. Cross-platform secret access: It enables transparent synchronization of those passwords with an external Key Management Service (KMS) via a SecretStore resources. This allows applications and developers outside the Kubernetes cluster\u2014who may not have access to Kubernetes secrets\u2014to retrieve the database credentials directly from the external KMS. Example: Automated Password Management with External Secrets Let\u2019s walk through how to automatically rotate the password of the app user every 24 hours in the cluster-example Postgres cluster from the quickstart guide . Important Before proceeding, ensure that the cluster-example Postgres cluster is up and running in your environment. By default, CloudNativePG generates and manages a Kubernetes Secret named cluster-example-app , which contains the credentials for the app user in the cluster-example cluster. You can read more about this in the \u201cConnecting from an application\u201d section . With External Secrets, the goal is to: Define a Password generator that specifies how to generate the password. Create an ExternalSecret resource that keeps the cluster-example-app secret in sync by updating only the password and pgpass fields. Creating the Password Generator The following example creates a Password generator resource named pg-password-generator in the default namespace. You can customize the name and properties to suit your needs: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password metadata: name: pg-password-generator spec: length: 42 digits: 5 symbols: 5 symbolCharacters: \"-_$@\" noUpper: false allowRepeat: true This specification defines the characteristics of the generated password, including its length and the inclusion of digits, symbols, and uppercase letters. Creating the External Secret The example below creates an ExternalSecret resource named cluster-example-app-secret , which refreshes the password every 24 hours. It uses a Merge policy to update only the specified fields ( password , pgpass , jdbc-uri and uri ) in the cluster-example-app secret. apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: cluster-example-app-secret spec: refreshInterval: \"24h\" target: name: cluster-example-app creationPolicy: Merge template: metadata: labels: cnpg.io/reload: \"true\" data: password: \"{{ .password }}\" pgpass: \"cluster-example-rw:5432:app:app:{{ .password }}\" jdbc-uri: \"jdbc:postgresql://cluster-example-rw.default:5432/app?password={{ .password }}&user=app\" uri: \"postgresql://app:{{ .password }}@cluster-example-rw.default:5432/app\" dataFrom: - sourceRef: generatorRef: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password name: pg-password-generator The label cnpg.io/reload: \"true\" ensures that CloudNativePG triggers a reload of the user password in the database when the secret changes. Verifying the Configuration To check that the ExternalSecret is correctly synchronizing: kubectl get es cluster-example-app-secret To observe the password being refreshed in real time, temporarily reduce the refreshInterval to 30s and run the following command repeatedly: kubectl get secret cluster-example-app \\ -o jsonpath=\"{.data.password}\" | base64 -d You should see the password change every 30 seconds, confirming that the rotation is working correctly. There's More While the example above focuses on the default cluster-example-app secret created by CloudNativePG, the same approach can be extended to manage any custom secrets or PostgreSQL users you create to regularly rotate their password. Example: Integration with an External KMS A widely used Key Management Service (KMS) provider in the CNCF ecosystem is HashiCorp Vault . In this example, we'll demonstrate how to integrate CloudNativePG, External Secrets Operator, and HashiCorp Vault to automatically rotate a PostgreSQL password and securely store it in Vault. Important This example assumes that HashiCorp Vault is already installed and properly configured in your environment, and that your team has the necessary expertise to operate it. There are various ways to deploy Vault, and detailing them is outside the scope of CloudNativePG. While it's possible to run Vault inside Kubernetes, it is more commonly deployed externally. For detailed instructions, consult the HashiCorp Vault documentation . Continuing from the previous example, we will now create the necessary SecretStore and PushSecret resources to complete the integration with Vault. Creating the SecretStore In this example, we assume that HashiCorp Vault is accessible from within the namespace at http://vault.vault.svc:8200 , and that a Kubernetes Secret named vault-token exists in the same namespace, containing the token used to authenticate with Vault. apiVersion: external-secrets.io/v1beta1 kind: SecretStore metadata: name: vault-backend spec: provider: vault: server: \"http://vault.vault.svc:8200\" path: \"secrets\" # Specifies the Vault KV secret engine version (\"v1\" or \"v2\"). # Defaults to \"v2\" if not set. version: \"v2\" auth: # References a Kubernetes Secret that contains the Vault token. # See: https://www.vaultproject.io/docs/auth/token tokenSecretRef: name: \"vault-token\" key: \"token\" --- apiVersion: v1 kind: Secret metadata: name: vault-token data: token: aHZzLioqKioqKio= # hvs.******* This configuration creates a SecretStore resource named vault-backend . Important This example uses basic token-based authentication, which is suitable for testing API, and CLI use cases. While it is the default method enabled in Vault, it is not recommended for production environments. For production, consider using more secure authentication methods. Refer to the External Secrets Operator documentation for a full list of supported authentication mechanisms. Info HashiCorp Vault must have a KV secrets engine enabled at the secrets path with version v2 . If your Vault instance uses a different path or version, be sure to update the path and version fields accordingly. Creating the PushSecret The PushSecret resource is used to push a Kubernetes Secret to HashiCorp Vault. In this simplified example, we'll push the credentials for the app user of the sample cluster cluster-example . For more details on configuring PushSecret , refer to the External Secrets Operator documentation . apiVersion: external-secrets.io/v1alpha1 kind: PushSecret metadata: name: pushsecret-example spec: deletionPolicy: Delete refreshInterval: 24h secretStoreRefs: - name: vault-backend kind: SecretStore selector: secret: name: cluster-example-app data: - match: remoteRef: remoteKey: cluster-example-app In this example, the PushSecret resource instructs the External Secrets Operator to push the Kubernetes Secret named cluster-example-app to HashiCorp Vault (from the previous example). The remoteKey defines the name under which the secret will be stored in Vault, using the SecretStore named vault-backend . Verifying the Configuration To verify that the PushSecret is functioning correctly, navigate to the HashiCorp Vault UI. In the kv secrets engine at the path secrets , you should find a secret named cluster-example-app , corresponding to the remoteKey defined above.","title":"External Secrets"},{"location":"cncf-projects/external-secrets/#external-secrets","text":"External Secrets is a CNCF Sandbox project, accepted in 2022 under the sponsorship of TAG Security.","title":"External Secrets"},{"location":"cncf-projects/external-secrets/#about","text":"The External Secrets Operator (ESO) is a Kubernetes operator that enhances secret management by decoupling the storage of secrets from Kubernetes itself. It enables seamless synchronization between external secret management systems and native Kubernetes Secret resources. ESO supports a wide range of backends, including: HashiCorp Vault AWS Secrets Manager Google Secret Manager Azure Key Vault IBM Cloud Secrets Manager \u2026and many more. For a full and up-to-date list of supported providers, refer to the official External Secrets documentation .","title":"About"},{"location":"cncf-projects/external-secrets/#integration-with-postgresql-and-cloudnativepg","text":"When it comes to PostgreSQL databases, External Secrets integrates seamlessly with CloudNativePG in two major use cases: Automated password management: ESO can handle the automatic generation and rotation of database user passwords stored in Kubernetes Secret resources, ensuring that applications running inside the cluster always have access to up-to-date credentials. Cross-platform secret access: It enables transparent synchronization of those passwords with an external Key Management Service (KMS) via a SecretStore resources. This allows applications and developers outside the Kubernetes cluster\u2014who may not have access to Kubernetes secrets\u2014to retrieve the database credentials directly from the external KMS.","title":"Integration with PostgreSQL and CloudNativePG"},{"location":"cncf-projects/external-secrets/#example-automated-password-management-with-external-secrets","text":"Let\u2019s walk through how to automatically rotate the password of the app user every 24 hours in the cluster-example Postgres cluster from the quickstart guide . Important Before proceeding, ensure that the cluster-example Postgres cluster is up and running in your environment. By default, CloudNativePG generates and manages a Kubernetes Secret named cluster-example-app , which contains the credentials for the app user in the cluster-example cluster. You can read more about this in the \u201cConnecting from an application\u201d section . With External Secrets, the goal is to: Define a Password generator that specifies how to generate the password. Create an ExternalSecret resource that keeps the cluster-example-app secret in sync by updating only the password and pgpass fields.","title":"Example: Automated Password Management with External Secrets"},{"location":"cncf-projects/external-secrets/#creating-the-password-generator","text":"The following example creates a Password generator resource named pg-password-generator in the default namespace. You can customize the name and properties to suit your needs: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password metadata: name: pg-password-generator spec: length: 42 digits: 5 symbols: 5 symbolCharacters: \"-_$@\" noUpper: false allowRepeat: true This specification defines the characteristics of the generated password, including its length and the inclusion of digits, symbols, and uppercase letters.","title":"Creating the Password Generator"},{"location":"cncf-projects/external-secrets/#creating-the-external-secret","text":"The example below creates an ExternalSecret resource named cluster-example-app-secret , which refreshes the password every 24 hours. It uses a Merge policy to update only the specified fields ( password , pgpass , jdbc-uri and uri ) in the cluster-example-app secret. apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: cluster-example-app-secret spec: refreshInterval: \"24h\" target: name: cluster-example-app creationPolicy: Merge template: metadata: labels: cnpg.io/reload: \"true\" data: password: \"{{ .password }}\" pgpass: \"cluster-example-rw:5432:app:app:{{ .password }}\" jdbc-uri: \"jdbc:postgresql://cluster-example-rw.default:5432/app?password={{ .password }}&user=app\" uri: \"postgresql://app:{{ .password }}@cluster-example-rw.default:5432/app\" dataFrom: - sourceRef: generatorRef: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password name: pg-password-generator The label cnpg.io/reload: \"true\" ensures that CloudNativePG triggers a reload of the user password in the database when the secret changes.","title":"Creating the External Secret"},{"location":"cncf-projects/external-secrets/#verifying-the-configuration","text":"To check that the ExternalSecret is correctly synchronizing: kubectl get es cluster-example-app-secret To observe the password being refreshed in real time, temporarily reduce the refreshInterval to 30s and run the following command repeatedly: kubectl get secret cluster-example-app \\ -o jsonpath=\"{.data.password}\" | base64 -d You should see the password change every 30 seconds, confirming that the rotation is working correctly.","title":"Verifying the Configuration"},{"location":"cncf-projects/external-secrets/#theres-more","text":"While the example above focuses on the default cluster-example-app secret created by CloudNativePG, the same approach can be extended to manage any custom secrets or PostgreSQL users you create to regularly rotate their password.","title":"There's More"},{"location":"cncf-projects/external-secrets/#example-integration-with-an-external-kms","text":"A widely used Key Management Service (KMS) provider in the CNCF ecosystem is HashiCorp Vault . In this example, we'll demonstrate how to integrate CloudNativePG, External Secrets Operator, and HashiCorp Vault to automatically rotate a PostgreSQL password and securely store it in Vault. Important This example assumes that HashiCorp Vault is already installed and properly configured in your environment, and that your team has the necessary expertise to operate it. There are various ways to deploy Vault, and detailing them is outside the scope of CloudNativePG. While it's possible to run Vault inside Kubernetes, it is more commonly deployed externally. For detailed instructions, consult the HashiCorp Vault documentation . Continuing from the previous example, we will now create the necessary SecretStore and PushSecret resources to complete the integration with Vault.","title":"Example: Integration with an External KMS"},{"location":"cncf-projects/external-secrets/#creating-the-secretstore","text":"In this example, we assume that HashiCorp Vault is accessible from within the namespace at http://vault.vault.svc:8200 , and that a Kubernetes Secret named vault-token exists in the same namespace, containing the token used to authenticate with Vault. apiVersion: external-secrets.io/v1beta1 kind: SecretStore metadata: name: vault-backend spec: provider: vault: server: \"http://vault.vault.svc:8200\" path: \"secrets\" # Specifies the Vault KV secret engine version (\"v1\" or \"v2\"). # Defaults to \"v2\" if not set. version: \"v2\" auth: # References a Kubernetes Secret that contains the Vault token. # See: https://www.vaultproject.io/docs/auth/token tokenSecretRef: name: \"vault-token\" key: \"token\" --- apiVersion: v1 kind: Secret metadata: name: vault-token data: token: aHZzLioqKioqKio= # hvs.******* This configuration creates a SecretStore resource named vault-backend . Important This example uses basic token-based authentication, which is suitable for testing API, and CLI use cases. While it is the default method enabled in Vault, it is not recommended for production environments. For production, consider using more secure authentication methods. Refer to the External Secrets Operator documentation for a full list of supported authentication mechanisms. Info HashiCorp Vault must have a KV secrets engine enabled at the secrets path with version v2 . If your Vault instance uses a different path or version, be sure to update the path and version fields accordingly.","title":"Creating the SecretStore"},{"location":"cncf-projects/external-secrets/#creating-the-pushsecret","text":"The PushSecret resource is used to push a Kubernetes Secret to HashiCorp Vault. In this simplified example, we'll push the credentials for the app user of the sample cluster cluster-example . For more details on configuring PushSecret , refer to the External Secrets Operator documentation . apiVersion: external-secrets.io/v1alpha1 kind: PushSecret metadata: name: pushsecret-example spec: deletionPolicy: Delete refreshInterval: 24h secretStoreRefs: - name: vault-backend kind: SecretStore selector: secret: name: cluster-example-app data: - match: remoteRef: remoteKey: cluster-example-app In this example, the PushSecret resource instructs the External Secrets Operator to push the Kubernetes Secret named cluster-example-app to HashiCorp Vault (from the previous example). The remoteKey defines the name under which the secret will be stored in Vault, using the SecretStore named vault-backend .","title":"Creating the PushSecret"},{"location":"cncf-projects/external-secrets/#verifying-the-configuration_1","text":"To verify that the PushSecret is functioning correctly, navigate to the HashiCorp Vault UI. In the kv secrets engine at the path secrets , you should find a secret named cluster-example-app , corresponding to the remoteKey defined above.","title":"Verifying the Configuration"},{"location":"release_notes/edb-cloud-native-postgresql/","text":"Release notes for 1.14.0 and earlier The first public release of CloudNativePG is version 1.15.0. Before that, the product was entirely owned by EDB and distributed under the name of \"Cloud Native PostgreSQL\" . The list of changes in this page is only for informative purposes, to demonstrate the history of the product on top of commits. None of the versions listed here exists for CloudNativePG. Version 1.14.0 Release date: 25 March 2022 Features: Natively support Google Cloud Storage for backup and recovery, by taking advantage of the features introduced in Barman Cloud 2.19 Improved observability of backups through the introduction of the LastBackupSucceeded condition for the Cluster object Support update of Hot Standby sensitive parameters: max_connections , max_prepared_transactions , max_locks_per_transaction , max_wal_senders , max_worker_processes Add the Online upgrade in progress phase in the Cluster object to show when an online upgrade of the operator is in progress Ability to inherit an AWS IAM Role as an alternative way to provide credentials for the S3 object storage Support for Opaque secrets for Pooler\u2019s authQuerySecret and certificates Updated default PostgreSQL version to 14.2 Add a new command to kubectl cnp plugin named maintenance to set maintenance window to cluster(s) in one or all namespaces across the Kubernetes cluster Container Images: Latest PostgreSQL containers include Barman Cloud 2.19 Security Enhancements: Stronger RBAC enforcement for namespaced operator installations with Operator Lifecycle Manager, including OpenShift. OpenShift users are recommended to update to this version. Fixes: Allow the instance manager to retry an interrupted pg_rewind by preserving a copy of the original pg_control file Clean up stale PID files before running pg_rewind Force sorting by key in primary_conninfo to avoid random restarts with PostgreSQL versions prior to 13 Preserve ServiceAccount changes (e.g., labels, annotations) upon reconciliation Disable enforcement of the imagePullPolicy default value Improve initDB validation for WAL segment size Properly handle the targetLSN option when recovering a cluster with the LSN specified Fix custom TLS certificates validation by allowing a certificates chain both in the server and CA certificates Version 1.13.0 Release date: 17 February 2022 Features: Support for Snappy compression. Snappy is a fast compression option for backups that increase the speed of uploads to the object store using a lower compression ratio Support for tagging files uploaded to the Barman object store. This feature requires Barman 2.18 in the operand image. of backups after Cluster deletion Extension of the status of a Cluster with status.conditions . The condition ContinuousArchiving indicates that the Cluster has started to archive WAL files Improve the status command of the cnp plugin for kubectl with additional information: add a Cluster Summary section showing the status of the Cluster and a Certificates Status section including the status of the certificates used in the Cluster along with the time left to expire Support the new barman-cloud-check-wal-archive command to detect a non-empty backup destination when creating a new cluster Add support for using a Secret to add default monitoring queries through MONITORING_QUERIES_SECRET configuration variable. Allow the user to restrict container\u2019s permissions using AppArmor (on Kubernetes clusters deployed with AppArmor support) Add Windows platform support to cnp plugin for kubectl , now the plugin is available on Windows x86 and ARM Drop support for Kubernetes 1.18 and deprecated API versions Container Images: PostgreSQL containers include Barman 2.18 Security Fix: Add coherence check of username field inside owner and superuser secrets; previously, a malicious user could have used the secrets to change the password of any PostgreSQL user Fixes: Fix a memory leak in code fetching status from Postgres pods Disable PostgreSQL self-restart after a crash. The instance controller handles the lifecycle of the PostgreSQL instance Prevent modification of .spec.postgresUID and .spec.postgresGID fields in validation webhook. Changing these fields after Cluster creation makes PostgreSQL unable to start Reduce the log verbosity from the backup and WAL archiving handling code Correct a bug resulting in a Cluster being marked as Healthy when not initialized yet Allows standby servers in clusters with a very high WAL production rate to switch to streaming once they are aligned Fix a race condition during the startup of a PostgreSQL pod that could seldom lead to a crash Fix a race condition that could lead to a failure initializing the first PVC in a Cluster Remove an extra restart of a just demoted primary Pod before joining the Cluster as a replica Correctly handle replication-sensitive PostgreSQL configuration parameters when recovering from a backup Fix missing validation of PostgreSQL configurations during Cluster creation Version 1.12.0 Release date: 11 January 2022 Features: Add Kubernetes 1.23 to the list of supported Kubernetes distributions and remove end-to-end tests for 1.17, which ended support by the Kubernetes project in Dec 2020 Improve the responsiveness of pod status checks in case of network issues by adding a connection timeout of 2 seconds and a communication timeout of 30 seconds. This change sets a limit on the time the operator waits for a pod to report its status before declaring it as failed, enhancing the robustness and predictability of a failover operation Introduce the .spec.inheritedMetadata field to the Cluster allowing the user to specify labels and annotations that will apply to all objects generated by the Cluster Reduce the number of queries executed when calculating the status of an instance Add a readiness probe for PgBouncer Add support for custom Certification Authority of the endpoint of Barman\u2019s backup object store when using Azure protocol Fixes: During a failover, wait to select a new primary until all the WAL streaming connections are closed. The operator now sets by default wal_sender_timeout and wal_receiver_timeout to 5 seconds to make sure standby nodes will quickly notice if the primary has network issues Change WAL archiving strategy in replica clusters to fix rolling updates by setting \"archive_mode\" to \"always\" for any PostgreSQL instance in a replica cluster. We then restrict the upload of the WAL only from the current and target designated primary. A WAL may be uploaded twice during switchovers, which is not an issue Fix support for custom Certification Authority of the endpoint of Barman\u2019s backup object store in replica clusters source Use a fixed name for default monitoring config map in the cluster namespace If the defaulting webhook is not working for any reason, the operator now updates the Cluster with the defaults also during the reconciliation cycle Fix the comparison of resource requests and limits to fix a rare issue leading to an update of all the pods on every reconciliation cycle Improve log messages from webhooks to also include the object namespace Stop logging a \u201cdefault\u201d message at the start of every reconciliation loop Stop logging a PodMonitor deletion on every reconciliation cycle if enablePodMonitor is false Do not complain about possible architecture mismatch if a pod is not reachable Version 1.11.0 Release date: 15 December 2021 Features: Parallel WAL archiving and restore: allow the database to keep up with WAL generation on high write systems by introducing the backupObjectStore.maxParallel option to set the maximum number of parallel jobs to be executed during both WAL archiving (by PostgreSQL\u2019s archive_command ) and WAL restore (by restore_command ). Using parallel restore option can allow newly promoted Standbys to get to a ready state faster by fetching needed WAL files to replay in parallel rather than sequentially Default set of metrics for monitoring: a new ConfigMap called default-monitoring is automatically deployed in the same namespace of the operator and, by default, added to any existing Postgres cluster. Such behavior can be changed globally by setting the MONITORING_QUERIES_CONFIGMAP parameter in the operator\u2019s configuration, or at cluster level through the .spec.monitoring.disableDefaultQueries option (by default set to false ) Introduce the enablePodMonitor option in the monitoring section of a cluster to automatically manage a PodMonitor resource and seamlessly integrate with Prometheus Improve the PostgreSQL shutdown procedure by trying to execute a smart shutdown for the first half of the desired stopDelay time, and a fast shutdown for the remaining half, before the pod is killed by Kubernetes Add the switchoverDelay option to control the time given to the former primary to shut down gracefully and archive all the WAL files before promoting the new primary (by default, CloudNativePG waits indefinitely to privilege data durability) Handle changes to resource requests and limits for a PostgreSQL Cluster by issuing a rolling update Improve the status command of the cnp plugin for kubectl with additional information: streaming replication status, total size of the database, role of an instance in the cluster Enhance support of workloads with many parallel workers by enabling configuration of the dynamic_shared_memory_type and shared_memory_type parameters for PostgreSQL\u2019s management of shared memory Propagate labels and annotations defined at cluster level to the associated resources, including pods (deletions are not supported) Automatically remove pods that have been evicted by the Kubelet Manage automated resizing of persistent volumes in Azure through the ENABLE_AZURE_PVC_UPDATES operator configuration option, by issuing a rolling update of the cluster if needed (disabled by default) Introduce the cnpg.io/reconciliationLoop annotation that, when set to disabled on a given Postgres cluster, prevents the reconciliation loop from running Introduce the postInitApplicationSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed on the main application database as a superuser immediately after the cluster has been created Fixes: Liveness probe now correctly handles the startup process of a PostgreSQL server. This fixes an issue reported by a few customers and affects a restarted standby server that needs to recover WAL files to reach a consistent state, but it was not able to do it before the timeout of liveness probe would kick in, leaving the pods in CrashLoopBackOff status. Liveness probe now correctly handles the case of a former primary that needs to use pg_rewind to re-align with the current primary after a timeline diversion. This fixes the pod of the new standby from repeatedly being killed by Kubernetes. Reduce client-side throttling from Postgres pods (e.g. Waited for 1.182388649s due to client-side throttling, not priority and fairness, request: GET ) Disable Public Key Infrastructure (PKI) initialization on OpenShift and OLM installations, by using the provided one When changing configuration parameters that require a restart, always leave the primary as last Mark a PVC to be ready only after a job has been completed successfully, preventing a race condition in PVC initialization Use the correct public key when renewing the expired webhook TLS secret. Fix an overflow when parsing an LSN Remove stale PID files at startup Let the Pooler resource inherit the imagePullSecret defined in the operator, if exists Version 1.10.0 Release date: 11 November 2021 Features: Connection Pooling with PgBouncer : introduce the Pooler resource and controller to automatically manage a PgBouncer deployment to be used as a connection pooler for a local PostgreSQL Cluster . The feature includes TLS client/server connections, password authentication, High Availability, pod templates support, configuration of key PgBouncer parameters, PAUSE / RESUME , logging in JSON format, Prometheus exporter for stats, pools, and lists Backup Retention Policies : support definition of recovery window retention policies for backups (e.g. \u201830d\u2019 to ensure a recovery window of 30 days) In-Place updates of the operator : introduce an in-place online update of the instance manager, which removes the need to perform a rolling update of the entire cluster following an update of the operator. By default this option is disabled (please refer to the documentation for more detailed information ) Limit the list of options that can be customized in the initdb bootstrap method to dataChecksums , encoding , localeCollate , localeCType , walSegmentSize . This makes the options array obsolete and planned to be removed in the v2 API Introduce the postInitTemplateSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed on the template1 database as a superuser immediately after the cluster has been created. This feature allows you to include default objects in all application databases created in the cluster New default metrics added to the instance Prometheus exporter: Postgres version, cluster name, and first point of recoverability according to the backup catalog Retry taking a backup after a failure Build awareness about Barman Cloud capabilities in order to prevent the operator from invoking recently introduced features (such as retention policies, or Azure Blob Container storage) that are not present in operand images that are not frequently updated Integrate the output of the status command of the cnp plugin with information about the backup Introduce a new annotation that reports the status of a PVC (being initialized or ready) Set the cluster name in the k8s.enterprisedb.io/cluster label for every object generated in a Cluster , including Backup objects Drop support for deprecated API version postgresql.cnpg.io/v1alpha1 on the Cluster , Backup , and ScheduledBackup kinds Set default operand image to PostgreSQL 14.2 Security: Set allowPrivilegeEscalation to false for the operator containers securityContext Fixes: Disable primary PodDisruptionBudget during maintenance in single-instance clusters Use the correct certificate certification authority (CA) during recovery operations Prevent Postgres connection leaking when checking WAL archiving status before taking a backup Let WAL archive/restore sleep for 100ms following transient errors that would flood logs otherwise Version 1.9.2 Release date: 15 October 2021 Features: Enhance JSON log with two new loggers: wal-archive for PostgreSQL's archive_command , and wal-restore for restore_command in a standby Fixes: Enable WAL archiving during the standby promotion (prevented .history files from being archived) Pass the --cloud-provider option to Barman Cloud tools only when using Barman 2.13 or higher to avoid errors with older operands Wait for the pod of the primary to be ready before triggering a backup Version 1.9.1 Release date: 30 September 2021 This release is to celebrate the launch of PostgreSQL 14 by making it the default major version when a new Cluster is created without defining a specific image name. Fixes: Fix issue causing Error while getting barman endpoint CA secret message to appear in the logs of the primary pod, which prevented the backup to work correctly Properly retry requesting a new backup in case of temporary communication issues with the instance manager Version 1.9.0 Release date: 28 September 2021 Version 1.9.0 is not available on OpenShift due to delays with the release process and the subsequent release of version 1.9.1. Features: Add Kubernetes 1.22 to the list of supported Kubernetes distributions, and remove 1.16 Introduce support for the --restore-target-wal option in pg_rewind , in order to fetch WAL files from the backup archive, if necessary (available only with PostgreSQL 13+) Expose a default metric for the Prometheus exporter that estimates the number of pages in the pg_catalog.pg_largeobject table in each database Enhance the performance of WAL archiving and fetching, through local in-memory cache Fixes: Explicitly set the postgres user when invoking pg_isready - required by restricted SCC in OpenShift Properly update the FirstRecoverabilityPoint in the status Set archive_mode = always on the designated primary if backup is requested Minor bug fixes Version 1.8.0 Release date: 13 September 2021 Features: Bootstrap a new cluster via full or Point-In-Time Recovery directly from an object store defined in the external cluster section, eliminating the previous requirement to have a Backup CR defined Introduce the immediate option in scheduled backups to request a backup immediately after the first Postgres instance running, adding the capability to rewind to the very beginning of a cluster when Point-In-Time Recovery is configured Add the firstRecoverabilityPoint in the cluster status to report the oldest consistent point in time to request a recovery based on the backup object store\u2019s content Enhance the default Prometheus exporter for a PostgreSQL instance by exposing the following new metrics: number of WAL files and computed total size on disk number of .ready and .done files in the archive status folder flag for replica mode number of requested minimum/maximum synchronous replicas, as well as the expected and actually observed ones Add support for the runonserver option when defining custom metrics in the Prometheus exporter to limit the collection of a metric to a range of PostgreSQL versions Natively support Azure Blob Storage for backup and recovery, by taking advantage of the feature introduced in Barman 2.13 for Barman Cloud Rely on pg_isready for the liveness probe Support RFC3339 format for timestamp specification in recovery target times Introduce .spec.imagePullPolicy to control the pull policy of image containers for all pods and jobs created for a cluster Add support for OpenShift 4.8, which replaces OpenShift 4.5 Support PostgreSQL 14 (beta) Enhance the replica cluster feature with cross-cluster replication from an object store defined in an external cluster section, without requiring a streaming connection (experimental) Introduce logLevel option to the cluster's spec to specify one of the following levels: error, info, debug or trace Security Enhancements: Introduce .spec.enableSuperuserAccess to enable/disable network access with the postgres user through password authentication Fixes: Properly inform users when a cluster enters an unrecoverable state and requires human intervention Version 1.7.1 Release date: 11 August 2021 Features: Prefer self-healing over configuration with regards to synchronous replication, empowering the operator to temporarily override minSyncReplicas and maxSyncReplicas settings in case the cluster is not able to meet the requirements during self-healing operations Introduce the postInitSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed as a superuser immediately after the cluster has been created Fixes: Allow the operator to failover when the primary is not ready (bug introduced in 1.7.0) Execute administrative queries using the LOCAL synchronous commit level Correctly parse multi-line log entries in PGAudit Version 1.7.0 Release date: 28 July 2021 Features: Add native support to PGAudit with a new type of logger called pgaudit directly available in the JSON output Enhance monitoring and observability capabilities through: Native support for the pg_stat_statements and auto_explain extensions The target_databases option in the Prometheus exporter to run a user-defined metric query on one or more databases (including auto-discovery of databases through shell-like pattern matching) Exposure of the manual_switchover_required metric to promptly report whether a cluster with primaryUpdateStrategy set to supervised requires a manual switchover Transparently handle shared_preload_libraries for pg_audit , auto_explain and pg_stat_statements Automatic configuration of shared_preload_libraries for PostgreSQL when pg_stat_statements , pgaudit or auto_explain options are added to the postgresql parameters section Support the cnpg.io/reload label to finely control the automated reload of config maps and secrets, including those used for custom monitoring/alerting metrics in the Prometheus exporter or to store certificates Add the reload command to the cnp plugin for kubectl to trigger a reconciliation loop on the instances Improve control of pod affinity and anti-affinity configurations through additionalPodAffinity and additionalPodAntiAffinity Introduce a separate PodDisruptionBudget for primary instances, by requiring at least a primary instance to run at any time Security Enhancements: Add the .spec.certificates.clientCASecret and .spec.certificates.replicationTLSSecret options to define custom client Certification Authority and certificate for the PostgreSQL server, to be used to authenticate client certificates and secure communication between PostgreSQL nodes Add the .spec.backup.barmanObjectStore.endpointCA option to define the custom Certification Authority bundle of the endpoint of Barman\u2019s backup object store Fixes: Correctly parse histograms in the Prometheus exporter Reconcile services created by the operator for a cluster Version 1.6.0 Release date: 12 July 2021 Features: Replica mode ( EXPERIMENTAL ): allow a cluster to be created as a replica of a source cluster. A replica cluster has a designated primary and any number of standbys. Add the .spec.postgresql.promotionTimeout parameter to specify the maximum amount of seconds to wait when promoting an instance to primary, defaulting to 40000000 seconds. Add the .spec.affinity.podAntiAffinityType parameter. It can be set to preferred (default), resulting in preferredDuringSchedulingIgnoredDuringExecution being used, or to required , resulting in requiredDuringSchedulingIgnoredDuringExecution . Changes: Fixed a race condition when deleting a PVC and a pod which prevented the operator from creating a new pod. Fixed a race condition preventing the manager from detecting the need for a PostgreSQL restart on a configuration change. Fixed a panic in kubectl-cnp on clusters without annotations. Lowered the level of some log messages to debug . E2E tests for server CA and TLS injection. Version 1.5.1 Release date: 17 June 2021 Change: Fix a bug with CRD validation preventing auto-update with Operator Deployments on Red Hat OpenShift Allow passing operator's configuration using a Secret. Version 1.5.0 Release date: 11 June 2021 Features: Introduce the pg_basebackup bootstrap method to create a new PostgreSQL cluster as a copy of an existing PostgreSQL instance of the same major version, even outside Kubernetes Add support for Kubernetes\u2019 tolerations in the Affinity section of the Cluster resource, allowing users to distribute PostgreSQL instances on Kubernetes nodes with the required taint Enable specification of a digest to an image name, through the <image>:<tag>@sha256:<digestValue> format, for more deterministic and repeatable deployments Security Enhancements: Customize TLS certificates to authenticate the PostgreSQL server by defining secrets for the server certificate and the related Certification Authority that signed it Raise the sslmode for the WAL receiver process of internal and automatically managed streaming replicas from require to verify-ca Changes: Enhance the promote subcommand of the cnp plugin for kubectl to accept just the node number rather than the whole name of the pod Adopt DNS-1035 validation scheme for cluster names (from which service names are inherited) Enforce streaming replication connection when cloning a standby instance or when bootstrapping using the pg_basebackup method Integrate the Backup resource with beginWal , endWal , beginLSN , endLSN , startedAt and stoppedAt regarding the physical base backup Documentation improvements: Provide a list of ports exposed by the operator and the operand container Introduce the cnp-bench helm charts and guidelines for benchmarking the storage and PostgreSQL for database workloads E2E tests enhancements: Test Kubernetes 1.21 Add test for High Availability of the operator Add test for node draining Minor bug fixes, including: Timeout to pg_ctl start during recovery operations too short Operator not watching over direct events on PVCs Fix handling of immediateCheckpoint and jobs parameter in barmanObjectStore backups Empty logs when recovering from a backup Version 1.4.0 Release date: 18 May 2021 Features: Standard output logging of PostgreSQL error messages in JSON format Provide a basic set of PostgreSQL metrics for the Prometheus exporter Add the restart command to the cnp plugin for kubectl to restart the pods of a given PostgreSQL cluster in a rollout fashion Security Enhancements: Set readOnlyRootFilesystem security context for pods Changes: IMPORTANT: If you have previously deployed the CloudNativePG operator using the YAML manifest, you must delete the existing operator deployment before installing the new version. This is required to avoid conflicts with other Kubernetes API's due to a change in labels and label selectors being directly managed by the operator. Please refer to the CloudNativePG documentation for additional detail on upgrading to 1.4.0 Fix the labels that are automatically defined by the operator, renaming them from control-plane: controller-manager to app.kubernetes.io/name: cloudnative-pg Assign the metrics name to the TCP port for the Prometheus exporter Set cnp_metrics_exporter as the application_name to the metrics exporter connection in PostgreSQL When available, use the application database for monitoring queries of the Prometheus exporter instead of the postgres database Documentation improvements: Customization of monitoring queries Operator upgrade instructions E2E tests enhancements Minor bug fixes, including: Avoid using -R when calling pg_basebackup Remove stack trace from error log when getting the status Version 1.3.0 Release date: 23 Apr 2021 Features: Inheritance of labels and annotations Set resource limits for every container Security Enhancements: Support for restricted security context constraint on Red Hat OpenShift to limit pod execution to a namespace allocated UID and SELinux context Pod security contexts explicitly defined by the operator to run as non-root, non-privileged and without privilege escalation Changes: Prometheus exporter endpoint listening on port 9187 (port 8000 is now reserved to instance coordination with API server) Documentation improvements E2E tests enhancements, including GKE environment Minor bug fixes Version 1.2.1 Release date: 6 Apr 2021 ScheduledBackup are no longer owners of the Backups, meaning that backups are not removed when ScheduledBackup objects are deleted Update on ubi8-minimal image to solve RHSA-2021:1024 (Security Advisory: Important) Version 1.2.0 Release date: 31 Mar 2021 Introduce experimental support for custom monitoring queries as ConfigMap and Secret objects using a compatible syntax with postgres_exporter for Prometheus Support Operator Lifecycle Manager (OLM) deployments, with the subsequent presence on OperatorHub.io Enhance container security by applying guidelines from the US Department of Defense (DoD)'s Defense Information Systems Agency (DISA) and the Center for Internet Security (CIS) and verifying them directly in the pipeline with Dockle Improve E2E tests on AKS Minor bug fixes Version 1.1.0 Release date: 3 Mar 2021 Add kubectl cnp status to pretty-print the status of a cluster, including JSON and YAML output Add kubectl cnp certificate to enable TLS authentication for client applications Add the -ro service to route connections to the available hot standby replicas only, enabling offload of read-only queries from the cluster's primary instance Rollback scaling down a cluster to a value lower than maxSyncReplicas Request a checkpoint before demoting a former primary Send SIGINT signal (fast shutdown) to PostgreSQL process on SIGTERM Minor bug fixes Version 1.0.0 Release date: 4 Feb 2021 The first major stable release of CloudNativePG implements Cluster , Backup and ScheduledBackup in the API group postgresql.cnpg.io/v1 . It uses these resources to create and manage PostgreSQL clusters inside Kubernetes with the following main capabilities: Direct integration with Kubernetes API server for High Availability, without requiring an external tool Self-Healing capability, through: failover of the primary instance by promoting the most aligned replica automated recreation of a replica Planned switchover of the primary instance by promoting a selected replica Scale up/down capabilities Definition of an arbitrary number of instances (minimum 1 - one primary server) Definition of the read-write service to connect your applications to the only primary server of the cluster Definition of the read service to connect your applications to any of the instances for reading workloads Support for Local Persistent Volumes with PVC templates Reuse of Persistent Volumes storage in Pods Rolling updates for PostgreSQL minor versions and operator upgrades TLS connections and client certificate authentication Continuous backup to an S3 compatible object store Full recovery and point-in-time recovery from an S3 compatible object store backup Support for synchronous replicas Support for node affinity via nodeSelector property Standard output logging of PostgreSQL error messages","title":"Release notes for 1.14.0 and earlier"},{"location":"release_notes/edb-cloud-native-postgresql/#release-notes-for-1140-and-earlier","text":"The first public release of CloudNativePG is version 1.15.0. Before that, the product was entirely owned by EDB and distributed under the name of \"Cloud Native PostgreSQL\" . The list of changes in this page is only for informative purposes, to demonstrate the history of the product on top of commits. None of the versions listed here exists for CloudNativePG.","title":"Release notes for 1.14.0 and earlier"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1140","text":"Release date: 25 March 2022 Features: Natively support Google Cloud Storage for backup and recovery, by taking advantage of the features introduced in Barman Cloud 2.19 Improved observability of backups through the introduction of the LastBackupSucceeded condition for the Cluster object Support update of Hot Standby sensitive parameters: max_connections , max_prepared_transactions , max_locks_per_transaction , max_wal_senders , max_worker_processes Add the Online upgrade in progress phase in the Cluster object to show when an online upgrade of the operator is in progress Ability to inherit an AWS IAM Role as an alternative way to provide credentials for the S3 object storage Support for Opaque secrets for Pooler\u2019s authQuerySecret and certificates Updated default PostgreSQL version to 14.2 Add a new command to kubectl cnp plugin named maintenance to set maintenance window to cluster(s) in one or all namespaces across the Kubernetes cluster Container Images: Latest PostgreSQL containers include Barman Cloud 2.19 Security Enhancements: Stronger RBAC enforcement for namespaced operator installations with Operator Lifecycle Manager, including OpenShift. OpenShift users are recommended to update to this version. Fixes: Allow the instance manager to retry an interrupted pg_rewind by preserving a copy of the original pg_control file Clean up stale PID files before running pg_rewind Force sorting by key in primary_conninfo to avoid random restarts with PostgreSQL versions prior to 13 Preserve ServiceAccount changes (e.g., labels, annotations) upon reconciliation Disable enforcement of the imagePullPolicy default value Improve initDB validation for WAL segment size Properly handle the targetLSN option when recovering a cluster with the LSN specified Fix custom TLS certificates validation by allowing a certificates chain both in the server and CA certificates","title":"Version 1.14.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1130","text":"Release date: 17 February 2022 Features: Support for Snappy compression. Snappy is a fast compression option for backups that increase the speed of uploads to the object store using a lower compression ratio Support for tagging files uploaded to the Barman object store. This feature requires Barman 2.18 in the operand image. of backups after Cluster deletion Extension of the status of a Cluster with status.conditions . The condition ContinuousArchiving indicates that the Cluster has started to archive WAL files Improve the status command of the cnp plugin for kubectl with additional information: add a Cluster Summary section showing the status of the Cluster and a Certificates Status section including the status of the certificates used in the Cluster along with the time left to expire Support the new barman-cloud-check-wal-archive command to detect a non-empty backup destination when creating a new cluster Add support for using a Secret to add default monitoring queries through MONITORING_QUERIES_SECRET configuration variable. Allow the user to restrict container\u2019s permissions using AppArmor (on Kubernetes clusters deployed with AppArmor support) Add Windows platform support to cnp plugin for kubectl , now the plugin is available on Windows x86 and ARM Drop support for Kubernetes 1.18 and deprecated API versions Container Images: PostgreSQL containers include Barman 2.18 Security Fix: Add coherence check of username field inside owner and superuser secrets; previously, a malicious user could have used the secrets to change the password of any PostgreSQL user Fixes: Fix a memory leak in code fetching status from Postgres pods Disable PostgreSQL self-restart after a crash. The instance controller handles the lifecycle of the PostgreSQL instance Prevent modification of .spec.postgresUID and .spec.postgresGID fields in validation webhook. Changing these fields after Cluster creation makes PostgreSQL unable to start Reduce the log verbosity from the backup and WAL archiving handling code Correct a bug resulting in a Cluster being marked as Healthy when not initialized yet Allows standby servers in clusters with a very high WAL production rate to switch to streaming once they are aligned Fix a race condition during the startup of a PostgreSQL pod that could seldom lead to a crash Fix a race condition that could lead to a failure initializing the first PVC in a Cluster Remove an extra restart of a just demoted primary Pod before joining the Cluster as a replica Correctly handle replication-sensitive PostgreSQL configuration parameters when recovering from a backup Fix missing validation of PostgreSQL configurations during Cluster creation","title":"Version 1.13.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1120","text":"Release date: 11 January 2022 Features: Add Kubernetes 1.23 to the list of supported Kubernetes distributions and remove end-to-end tests for 1.17, which ended support by the Kubernetes project in Dec 2020 Improve the responsiveness of pod status checks in case of network issues by adding a connection timeout of 2 seconds and a communication timeout of 30 seconds. This change sets a limit on the time the operator waits for a pod to report its status before declaring it as failed, enhancing the robustness and predictability of a failover operation Introduce the .spec.inheritedMetadata field to the Cluster allowing the user to specify labels and annotations that will apply to all objects generated by the Cluster Reduce the number of queries executed when calculating the status of an instance Add a readiness probe for PgBouncer Add support for custom Certification Authority of the endpoint of Barman\u2019s backup object store when using Azure protocol Fixes: During a failover, wait to select a new primary until all the WAL streaming connections are closed. The operator now sets by default wal_sender_timeout and wal_receiver_timeout to 5 seconds to make sure standby nodes will quickly notice if the primary has network issues Change WAL archiving strategy in replica clusters to fix rolling updates by setting \"archive_mode\" to \"always\" for any PostgreSQL instance in a replica cluster. We then restrict the upload of the WAL only from the current and target designated primary. A WAL may be uploaded twice during switchovers, which is not an issue Fix support for custom Certification Authority of the endpoint of Barman\u2019s backup object store in replica clusters source Use a fixed name for default monitoring config map in the cluster namespace If the defaulting webhook is not working for any reason, the operator now updates the Cluster with the defaults also during the reconciliation cycle Fix the comparison of resource requests and limits to fix a rare issue leading to an update of all the pods on every reconciliation cycle Improve log messages from webhooks to also include the object namespace Stop logging a \u201cdefault\u201d message at the start of every reconciliation loop Stop logging a PodMonitor deletion on every reconciliation cycle if enablePodMonitor is false Do not complain about possible architecture mismatch if a pod is not reachable","title":"Version 1.12.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1110","text":"Release date: 15 December 2021 Features: Parallel WAL archiving and restore: allow the database to keep up with WAL generation on high write systems by introducing the backupObjectStore.maxParallel option to set the maximum number of parallel jobs to be executed during both WAL archiving (by PostgreSQL\u2019s archive_command ) and WAL restore (by restore_command ). Using parallel restore option can allow newly promoted Standbys to get to a ready state faster by fetching needed WAL files to replay in parallel rather than sequentially Default set of metrics for monitoring: a new ConfigMap called default-monitoring is automatically deployed in the same namespace of the operator and, by default, added to any existing Postgres cluster. Such behavior can be changed globally by setting the MONITORING_QUERIES_CONFIGMAP parameter in the operator\u2019s configuration, or at cluster level through the .spec.monitoring.disableDefaultQueries option (by default set to false ) Introduce the enablePodMonitor option in the monitoring section of a cluster to automatically manage a PodMonitor resource and seamlessly integrate with Prometheus Improve the PostgreSQL shutdown procedure by trying to execute a smart shutdown for the first half of the desired stopDelay time, and a fast shutdown for the remaining half, before the pod is killed by Kubernetes Add the switchoverDelay option to control the time given to the former primary to shut down gracefully and archive all the WAL files before promoting the new primary (by default, CloudNativePG waits indefinitely to privilege data durability) Handle changes to resource requests and limits for a PostgreSQL Cluster by issuing a rolling update Improve the status command of the cnp plugin for kubectl with additional information: streaming replication status, total size of the database, role of an instance in the cluster Enhance support of workloads with many parallel workers by enabling configuration of the dynamic_shared_memory_type and shared_memory_type parameters for PostgreSQL\u2019s management of shared memory Propagate labels and annotations defined at cluster level to the associated resources, including pods (deletions are not supported) Automatically remove pods that have been evicted by the Kubelet Manage automated resizing of persistent volumes in Azure through the ENABLE_AZURE_PVC_UPDATES operator configuration option, by issuing a rolling update of the cluster if needed (disabled by default) Introduce the cnpg.io/reconciliationLoop annotation that, when set to disabled on a given Postgres cluster, prevents the reconciliation loop from running Introduce the postInitApplicationSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed on the main application database as a superuser immediately after the cluster has been created Fixes: Liveness probe now correctly handles the startup process of a PostgreSQL server. This fixes an issue reported by a few customers and affects a restarted standby server that needs to recover WAL files to reach a consistent state, but it was not able to do it before the timeout of liveness probe would kick in, leaving the pods in CrashLoopBackOff status. Liveness probe now correctly handles the case of a former primary that needs to use pg_rewind to re-align with the current primary after a timeline diversion. This fixes the pod of the new standby from repeatedly being killed by Kubernetes. Reduce client-side throttling from Postgres pods (e.g. Waited for 1.182388649s due to client-side throttling, not priority and fairness, request: GET ) Disable Public Key Infrastructure (PKI) initialization on OpenShift and OLM installations, by using the provided one When changing configuration parameters that require a restart, always leave the primary as last Mark a PVC to be ready only after a job has been completed successfully, preventing a race condition in PVC initialization Use the correct public key when renewing the expired webhook TLS secret. Fix an overflow when parsing an LSN Remove stale PID files at startup Let the Pooler resource inherit the imagePullSecret defined in the operator, if exists","title":"Version 1.11.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1100","text":"Release date: 11 November 2021 Features: Connection Pooling with PgBouncer : introduce the Pooler resource and controller to automatically manage a PgBouncer deployment to be used as a connection pooler for a local PostgreSQL Cluster . The feature includes TLS client/server connections, password authentication, High Availability, pod templates support, configuration of key PgBouncer parameters, PAUSE / RESUME , logging in JSON format, Prometheus exporter for stats, pools, and lists Backup Retention Policies : support definition of recovery window retention policies for backups (e.g. \u201830d\u2019 to ensure a recovery window of 30 days) In-Place updates of the operator : introduce an in-place online update of the instance manager, which removes the need to perform a rolling update of the entire cluster following an update of the operator. By default this option is disabled (please refer to the documentation for more detailed information ) Limit the list of options that can be customized in the initdb bootstrap method to dataChecksums , encoding , localeCollate , localeCType , walSegmentSize . This makes the options array obsolete and planned to be removed in the v2 API Introduce the postInitTemplateSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed on the template1 database as a superuser immediately after the cluster has been created. This feature allows you to include default objects in all application databases created in the cluster New default metrics added to the instance Prometheus exporter: Postgres version, cluster name, and first point of recoverability according to the backup catalog Retry taking a backup after a failure Build awareness about Barman Cloud capabilities in order to prevent the operator from invoking recently introduced features (such as retention policies, or Azure Blob Container storage) that are not present in operand images that are not frequently updated Integrate the output of the status command of the cnp plugin with information about the backup Introduce a new annotation that reports the status of a PVC (being initialized or ready) Set the cluster name in the k8s.enterprisedb.io/cluster label for every object generated in a Cluster , including Backup objects Drop support for deprecated API version postgresql.cnpg.io/v1alpha1 on the Cluster , Backup , and ScheduledBackup kinds Set default operand image to PostgreSQL 14.2 Security: Set allowPrivilegeEscalation to false for the operator containers securityContext Fixes: Disable primary PodDisruptionBudget during maintenance in single-instance clusters Use the correct certificate certification authority (CA) during recovery operations Prevent Postgres connection leaking when checking WAL archiving status before taking a backup Let WAL archive/restore sleep for 100ms following transient errors that would flood logs otherwise","title":"Version 1.10.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-192","text":"Release date: 15 October 2021 Features: Enhance JSON log with two new loggers: wal-archive for PostgreSQL's archive_command , and wal-restore for restore_command in a standby Fixes: Enable WAL archiving during the standby promotion (prevented .history files from being archived) Pass the --cloud-provider option to Barman Cloud tools only when using Barman 2.13 or higher to avoid errors with older operands Wait for the pod of the primary to be ready before triggering a backup","title":"Version 1.9.2"},{"location":"release_notes/edb-cloud-native-postgresql/#version-191","text":"Release date: 30 September 2021 This release is to celebrate the launch of PostgreSQL 14 by making it the default major version when a new Cluster is created without defining a specific image name. Fixes: Fix issue causing Error while getting barman endpoint CA secret message to appear in the logs of the primary pod, which prevented the backup to work correctly Properly retry requesting a new backup in case of temporary communication issues with the instance manager","title":"Version 1.9.1"},{"location":"release_notes/edb-cloud-native-postgresql/#version-190","text":"Release date: 28 September 2021 Version 1.9.0 is not available on OpenShift due to delays with the release process and the subsequent release of version 1.9.1. Features: Add Kubernetes 1.22 to the list of supported Kubernetes distributions, and remove 1.16 Introduce support for the --restore-target-wal option in pg_rewind , in order to fetch WAL files from the backup archive, if necessary (available only with PostgreSQL 13+) Expose a default metric for the Prometheus exporter that estimates the number of pages in the pg_catalog.pg_largeobject table in each database Enhance the performance of WAL archiving and fetching, through local in-memory cache Fixes: Explicitly set the postgres user when invoking pg_isready - required by restricted SCC in OpenShift Properly update the FirstRecoverabilityPoint in the status Set archive_mode = always on the designated primary if backup is requested Minor bug fixes","title":"Version 1.9.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-180","text":"Release date: 13 September 2021 Features: Bootstrap a new cluster via full or Point-In-Time Recovery directly from an object store defined in the external cluster section, eliminating the previous requirement to have a Backup CR defined Introduce the immediate option in scheduled backups to request a backup immediately after the first Postgres instance running, adding the capability to rewind to the very beginning of a cluster when Point-In-Time Recovery is configured Add the firstRecoverabilityPoint in the cluster status to report the oldest consistent point in time to request a recovery based on the backup object store\u2019s content Enhance the default Prometheus exporter for a PostgreSQL instance by exposing the following new metrics: number of WAL files and computed total size on disk number of .ready and .done files in the archive status folder flag for replica mode number of requested minimum/maximum synchronous replicas, as well as the expected and actually observed ones Add support for the runonserver option when defining custom metrics in the Prometheus exporter to limit the collection of a metric to a range of PostgreSQL versions Natively support Azure Blob Storage for backup and recovery, by taking advantage of the feature introduced in Barman 2.13 for Barman Cloud Rely on pg_isready for the liveness probe Support RFC3339 format for timestamp specification in recovery target times Introduce .spec.imagePullPolicy to control the pull policy of image containers for all pods and jobs created for a cluster Add support for OpenShift 4.8, which replaces OpenShift 4.5 Support PostgreSQL 14 (beta) Enhance the replica cluster feature with cross-cluster replication from an object store defined in an external cluster section, without requiring a streaming connection (experimental) Introduce logLevel option to the cluster's spec to specify one of the following levels: error, info, debug or trace Security Enhancements: Introduce .spec.enableSuperuserAccess to enable/disable network access with the postgres user through password authentication Fixes: Properly inform users when a cluster enters an unrecoverable state and requires human intervention","title":"Version 1.8.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-171","text":"Release date: 11 August 2021 Features: Prefer self-healing over configuration with regards to synchronous replication, empowering the operator to temporarily override minSyncReplicas and maxSyncReplicas settings in case the cluster is not able to meet the requirements during self-healing operations Introduce the postInitSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed as a superuser immediately after the cluster has been created Fixes: Allow the operator to failover when the primary is not ready (bug introduced in 1.7.0) Execute administrative queries using the LOCAL synchronous commit level Correctly parse multi-line log entries in PGAudit","title":"Version 1.7.1"},{"location":"release_notes/edb-cloud-native-postgresql/#version-170","text":"Release date: 28 July 2021 Features: Add native support to PGAudit with a new type of logger called pgaudit directly available in the JSON output Enhance monitoring and observability capabilities through: Native support for the pg_stat_statements and auto_explain extensions The target_databases option in the Prometheus exporter to run a user-defined metric query on one or more databases (including auto-discovery of databases through shell-like pattern matching) Exposure of the manual_switchover_required metric to promptly report whether a cluster with primaryUpdateStrategy set to supervised requires a manual switchover Transparently handle shared_preload_libraries for pg_audit , auto_explain and pg_stat_statements Automatic configuration of shared_preload_libraries for PostgreSQL when pg_stat_statements , pgaudit or auto_explain options are added to the postgresql parameters section Support the cnpg.io/reload label to finely control the automated reload of config maps and secrets, including those used for custom monitoring/alerting metrics in the Prometheus exporter or to store certificates Add the reload command to the cnp plugin for kubectl to trigger a reconciliation loop on the instances Improve control of pod affinity and anti-affinity configurations through additionalPodAffinity and additionalPodAntiAffinity Introduce a separate PodDisruptionBudget for primary instances, by requiring at least a primary instance to run at any time Security Enhancements: Add the .spec.certificates.clientCASecret and .spec.certificates.replicationTLSSecret options to define custom client Certification Authority and certificate for the PostgreSQL server, to be used to authenticate client certificates and secure communication between PostgreSQL nodes Add the .spec.backup.barmanObjectStore.endpointCA option to define the custom Certification Authority bundle of the endpoint of Barman\u2019s backup object store Fixes: Correctly parse histograms in the Prometheus exporter Reconcile services created by the operator for a cluster","title":"Version 1.7.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-160","text":"Release date: 12 July 2021 Features: Replica mode ( EXPERIMENTAL ): allow a cluster to be created as a replica of a source cluster. A replica cluster has a designated primary and any number of standbys. Add the .spec.postgresql.promotionTimeout parameter to specify the maximum amount of seconds to wait when promoting an instance to primary, defaulting to 40000000 seconds. Add the .spec.affinity.podAntiAffinityType parameter. It can be set to preferred (default), resulting in preferredDuringSchedulingIgnoredDuringExecution being used, or to required , resulting in requiredDuringSchedulingIgnoredDuringExecution . Changes: Fixed a race condition when deleting a PVC and a pod which prevented the operator from creating a new pod. Fixed a race condition preventing the manager from detecting the need for a PostgreSQL restart on a configuration change. Fixed a panic in kubectl-cnp on clusters without annotations. Lowered the level of some log messages to debug . E2E tests for server CA and TLS injection.","title":"Version 1.6.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-151","text":"Release date: 17 June 2021 Change: Fix a bug with CRD validation preventing auto-update with Operator Deployments on Red Hat OpenShift Allow passing operator's configuration using a Secret.","title":"Version 1.5.1"},{"location":"release_notes/edb-cloud-native-postgresql/#version-150","text":"Release date: 11 June 2021 Features: Introduce the pg_basebackup bootstrap method to create a new PostgreSQL cluster as a copy of an existing PostgreSQL instance of the same major version, even outside Kubernetes Add support for Kubernetes\u2019 tolerations in the Affinity section of the Cluster resource, allowing users to distribute PostgreSQL instances on Kubernetes nodes with the required taint Enable specification of a digest to an image name, through the <image>:<tag>@sha256:<digestValue> format, for more deterministic and repeatable deployments Security Enhancements: Customize TLS certificates to authenticate the PostgreSQL server by defining secrets for the server certificate and the related Certification Authority that signed it Raise the sslmode for the WAL receiver process of internal and automatically managed streaming replicas from require to verify-ca Changes: Enhance the promote subcommand of the cnp plugin for kubectl to accept just the node number rather than the whole name of the pod Adopt DNS-1035 validation scheme for cluster names (from which service names are inherited) Enforce streaming replication connection when cloning a standby instance or when bootstrapping using the pg_basebackup method Integrate the Backup resource with beginWal , endWal , beginLSN , endLSN , startedAt and stoppedAt regarding the physical base backup Documentation improvements: Provide a list of ports exposed by the operator and the operand container Introduce the cnp-bench helm charts and guidelines for benchmarking the storage and PostgreSQL for database workloads E2E tests enhancements: Test Kubernetes 1.21 Add test for High Availability of the operator Add test for node draining Minor bug fixes, including: Timeout to pg_ctl start during recovery operations too short Operator not watching over direct events on PVCs Fix handling of immediateCheckpoint and jobs parameter in barmanObjectStore backups Empty logs when recovering from a backup","title":"Version 1.5.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-140","text":"Release date: 18 May 2021 Features: Standard output logging of PostgreSQL error messages in JSON format Provide a basic set of PostgreSQL metrics for the Prometheus exporter Add the restart command to the cnp plugin for kubectl to restart the pods of a given PostgreSQL cluster in a rollout fashion Security Enhancements: Set readOnlyRootFilesystem security context for pods Changes: IMPORTANT: If you have previously deployed the CloudNativePG operator using the YAML manifest, you must delete the existing operator deployment before installing the new version. This is required to avoid conflicts with other Kubernetes API's due to a change in labels and label selectors being directly managed by the operator. Please refer to the CloudNativePG documentation for additional detail on upgrading to 1.4.0 Fix the labels that are automatically defined by the operator, renaming them from control-plane: controller-manager to app.kubernetes.io/name: cloudnative-pg Assign the metrics name to the TCP port for the Prometheus exporter Set cnp_metrics_exporter as the application_name to the metrics exporter connection in PostgreSQL When available, use the application database for monitoring queries of the Prometheus exporter instead of the postgres database Documentation improvements: Customization of monitoring queries Operator upgrade instructions E2E tests enhancements Minor bug fixes, including: Avoid using -R when calling pg_basebackup Remove stack trace from error log when getting the status","title":"Version 1.4.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-130","text":"Release date: 23 Apr 2021 Features: Inheritance of labels and annotations Set resource limits for every container Security Enhancements: Support for restricted security context constraint on Red Hat OpenShift to limit pod execution to a namespace allocated UID and SELinux context Pod security contexts explicitly defined by the operator to run as non-root, non-privileged and without privilege escalation Changes: Prometheus exporter endpoint listening on port 9187 (port 8000 is now reserved to instance coordination with API server) Documentation improvements E2E tests enhancements, including GKE environment Minor bug fixes","title":"Version 1.3.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-121","text":"Release date: 6 Apr 2021 ScheduledBackup are no longer owners of the Backups, meaning that backups are not removed when ScheduledBackup objects are deleted Update on ubi8-minimal image to solve RHSA-2021:1024 (Security Advisory: Important)","title":"Version 1.2.1"},{"location":"release_notes/edb-cloud-native-postgresql/#version-120","text":"Release date: 31 Mar 2021 Introduce experimental support for custom monitoring queries as ConfigMap and Secret objects using a compatible syntax with postgres_exporter for Prometheus Support Operator Lifecycle Manager (OLM) deployments, with the subsequent presence on OperatorHub.io Enhance container security by applying guidelines from the US Department of Defense (DoD)'s Defense Information Systems Agency (DISA) and the Center for Internet Security (CIS) and verifying them directly in the pipeline with Dockle Improve E2E tests on AKS Minor bug fixes","title":"Version 1.2.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-110","text":"Release date: 3 Mar 2021 Add kubectl cnp status to pretty-print the status of a cluster, including JSON and YAML output Add kubectl cnp certificate to enable TLS authentication for client applications Add the -ro service to route connections to the available hot standby replicas only, enabling offload of read-only queries from the cluster's primary instance Rollback scaling down a cluster to a value lower than maxSyncReplicas Request a checkpoint before demoting a former primary Send SIGINT signal (fast shutdown) to PostgreSQL process on SIGTERM Minor bug fixes","title":"Version 1.1.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-100","text":"Release date: 4 Feb 2021 The first major stable release of CloudNativePG implements Cluster , Backup and ScheduledBackup in the API group postgresql.cnpg.io/v1 . It uses these resources to create and manage PostgreSQL clusters inside Kubernetes with the following main capabilities: Direct integration with Kubernetes API server for High Availability, without requiring an external tool Self-Healing capability, through: failover of the primary instance by promoting the most aligned replica automated recreation of a replica Planned switchover of the primary instance by promoting a selected replica Scale up/down capabilities Definition of an arbitrary number of instances (minimum 1 - one primary server) Definition of the read-write service to connect your applications to the only primary server of the cluster Definition of the read service to connect your applications to any of the instances for reading workloads Support for Local Persistent Volumes with PVC templates Reuse of Persistent Volumes storage in Pods Rolling updates for PostgreSQL minor versions and operator upgrades TLS connections and client certificate authentication Continuous backup to an S3 compatible object store Full recovery and point-in-time recovery from an S3 compatible object store backup Support for synchronous replicas Support for node affinity via nodeSelector property Standard output logging of PostgreSQL error messages","title":"Version 1.0.0"},{"location":"release_notes/v1.24/","text":"Release notes for CloudNativePG 1.24 History of user-visible changes in the 1.24 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.24.3 Release Date: February 28, 2025 Enhancements Introduced a startup probe for the operator to enhance reliability and prevent premature liveness probe failures during initialization. (#7008) Added support for using the -r service with the Pooler. (#6868) Introduced an optional --ttl flag for the pgbench plugin, enabling automatic deletion of completed jobs after a user-defined duration. (#6701) Marked known error messages from the Azure CSI Driver for volume snapshots as retryable, improving resilience. (#6906) Updated the default PostgreSQL version to 17.4 for new cluster definitions. (#6960) Security The operator image build process has been enhanced to strengthen security and transparency. Images are now signed with cosign , and OCI attestations are generated, incorporating the Software Bill of Materials (SBOM) and provenance data. Additionally, OCI annotations have been added to improve traceability and ensure the integrity of the images. Bug Fixes Fixed inconsistent behavior in default probe knob values when .spec.probes is defined, ensuring users can override all settings, including failureThreshold . If unspecified in the startup probe, failureThreshold is now correctly derived from .spec.startupDelay / periodSeconds (default: 10 , now overridable). The same logic applies to liveness probes via .spec.livenessProbeTimeout . (#6656) Managed service ports now take precedence over default operator-defined ports. (#6474) Fixed an issue where WAL metrics were unavailable after an instance restart until a configuration change was applied. (#6816) Fixed an issue in monolithic database import where role import was skipped if no roles were specified. (#6646) Added support for new metrics introduced in PgBouncer 1.24. (#6630) Improved handling of replication-sensitive parameter reductions by ensuring timely reconciliation after primary server restarts. (#6440) Introduced a new isWALArchiver flag in the CNPG-I plugin configuration, allowing users to designate a plugin as a WAL archiver. This enables seamless migration from in-tree Barman Cloud support to the plugin while maintaining WAL archive consistency. (#6593) Ensured override.conf is consistently included in postgresql.conf during replica cluster bootstrapping, preventing replication failures due to missing configuration settings. (#6808) Ensured override.conf is correctly initialized before invoking pg_rewind to prevent failures during primary role changes. (#6670) Enhanced webhook responses to return both warnings and errors when applicable, improving diagnostic accuracy. (#6579) Ensured the operator version is correctly reconciled. (#6496) Improved PostgreSQL version detection by using a more precise check of the data directory. (#6659) Volume Snapshot Backups: Fixed an issue where unused backup connections were not properly cleaned up. (#6882) Ensured the instance manager closes stale PostgreSQL connections left by failed volume snapshot backups. (#6879) Prevented the operator from starting a new volume snapshot backup while another is already in progress. (#6890) cnpg plugin: Restored functionality of the promote plugin command. (#6476) Enhanced kubectl cnpg report --logs <cluster> to collect logs from all containers, including sidecars. (#6636) Ensured pgbench jobs can run when a Cluster uses an ImageCatalog . (#6868) Technical Enhancements Added support for Kubernetes client-gen , enabling automated generation of Go clients for all CloudNativePG CRDs. (#6695) Version 1.24.2 Release Date: December 23, 2024 Enhancements Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Honor the User-Agent header in HTTP requests with the API server. (#6153) Bug Fixes Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998) Version 1.24.1 Release date: Oct 16, 2024 Enhancements: Remove the use of pg_database_size from the status probe, as it caused high resource utilization by scanning the entire PGDATA directory to compute database sizes. The kubectl status plugin will now rely on du to provide detailed size information retrieval (#5689). Add the ability to configure the full_page_writes parameter in PostgreSQL. This setting defaults to on , in line with PostgreSQL's recommendations (#5516). Plugin: Add the logs pretty command in the cnpg plugin to read a log stream from standard input and output a human-readable format, with options to filter log entries (#5770) Enhance the status command by allowing multiple -v options to increase verbosity for more detailed output (#5765). Add support for specifying a custom Docker image using the --image flag in the pgadmin4 plugin command, giving users control over the Docker image used for pgAdmin4 deployments (#5515). Fixes: Resolve an issue with concurrent status updates when demoting a primary to a designated primary, ensuring smoother transitions during cluster role changes (#5755). Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down to two instances, enabling easier maintenance on the node hosting the replica (#5487). Prioritize full rollout over inplace restarts (#5407). When using .spec.postgresql.synchronous , ensure that the synchronous_standby_names parameter is correctly set, even when no replicas are reachable (#5831). Fix an issue that could lead to double failover in cases of lost connectivity (#5788). Correctly set the TMPDIR and PSQL_HISTORY environment variables for pods and jobs, improving temporary file and history management (#5503). Plugin: Resolve a race condition in the logs cluster command (#5775). Display the potential sync status in the status plugin (#5533). Fix the issue where pods deployed by the pgadmin4 command didn\u2019t have a writable home directory (#5800). Supported versions PostgreSQL 17 (PostgreSQL 17.0 is the default image) Version 1.24.0 Release date: Aug 22, 2024 Important changes: Deprecate the role label in the selectors of Service and PodDisruptionBudget resources in favor of cnpg.io/instanceRole (#4897). Fix the default PodAntiAffinity configuration for PostgreSQL Pods, allowing a PostgreSQL and a Pooler Instance to coexist on the same node when the anti-affinity configuration is set to required (#5156). Warning The PodAntiAffinity change will trigger a rollout of all the instances when the operator is upgraded, even when online upgrades are enabled. Features: Distributed PostgreSQL Topologies : Enhance the replica cluster feature to create distributed database topologies for PostgreSQL that span multiple Kubernetes clusters, enabling hybrid and multi-cloud deployments. This feature supports: Declarative Primary Control : Easily specify which PostgreSQL cluster acts as the primary in a distributed setup (#4388). Seamless Switchover : Effortlessly demote the current primary and promote a selected replica cluster, typically in a different region, without needing to rebuild the former primary. This ensures high availability and resilience in diverse environments (#4411). Managed Services : Introduce managed services via the managed.services stanza (#4769 and #4952), allowing you to: Disable the read-only and read services via configuration. Leverage the service template capability to create custom service resources, including load balancers, to access PostgreSQL outside Kubernetes (particularly useful for DBaaS purposes). Enhanced API for Synchronous Replication : Introducing an improved API for explicit configuration of synchronous replication, supporting both quorum-based and priority list strategies. This update allows full customization of the synchronous_standby_names option, providing greater control and flexibility (#5148). WAL Disk Space Exhaustion : Safely stop the cluster when PostgreSQL runs out of disk space to store WAL files, making recovery easier by increasing the size of the related volume (#4404). Enhancements: Add support for delayed replicas by introducing the .spec.replica.minApplyDelay option, leveraging PostgreSQL's recovery_min_apply_delay capability (#5181). Introduce postInitSQLRefs and postInitTemplateSQLRefs to allow users to define postInit and postInitTemplate instructions as one or more config maps or secrets (#5074). Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Allow overriding the query metric name and the names of the columns using a name key/value pair, which can replace the name automatically inherited from the parent key (#4779). Enhanced control over exported metrics by making them subject to the value returned by a custom query, which is run within the same transaction and defined in the predicate_query field (#4503). Allow additional arguments to be passed to barman-cloud-wal-archive and barman-cloud-wal-restore (#5099). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). The readiness probe now fails for streaming replicas that were never connected to the primary instance, allowing incoherent replicas to be discovered promptly (#5206). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044). cnpg plugin updates: Enhance the install generate command by adding a --control-plane option, allowing deployment of the operator on control-plane nodes by setting node affinity and tolerations (#5271). Enhance the destroy command to delete also any job related to the target instance (#5298). Enhanced the status command to display demotionToken and promotionToken when available, providing more detailed operational insights with distributed topologies (#5149). Added support for customizing the remote database name in the publication and subscription subcommands. This enhancement offers greater flexibility for synchronizing data from an external cluster with multiple databases (#5113). Security: Add TLS communication between the operator and instance manager (#4442). Add optional TLS communication for the instance metrics exporter (#4927). Fixes: Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Ensure that the Pooler service template can override the default service (#4846). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Fix cluster role permissions for ClusterImageCatalogs (#5034). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). Synchronous replication self-healing checks now exclude terminated pods, focusing only on active and functional pods (#5210). The instance manager will now terminate all existing operator-related replication connections following a role change in a replica cluster (#5209). Allow setting smartShutdownTimeout to zero, enabling immediate fast shutdown and bypassing the smart shutdown process when required (#5347). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915). Supported versions Kubernetes 1.31, 1.30, 1.29, and 1.28 PostgreSQL 16, 15, 14, 13, and 12 PostgreSQL 16.4 is the default image PostgreSQL 12 support ends on November 12, 2024","title":"Release notes for CloudNativePG 1.24"},{"location":"release_notes/v1.24/#release-notes-for-cloudnativepg-124","text":"History of user-visible changes in the 1.24 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.24"},{"location":"release_notes/v1.24/#version-1243","text":"Release Date: February 28, 2025","title":"Version 1.24.3"},{"location":"release_notes/v1.24/#enhancements","text":"Introduced a startup probe for the operator to enhance reliability and prevent premature liveness probe failures during initialization. (#7008) Added support for using the -r service with the Pooler. (#6868) Introduced an optional --ttl flag for the pgbench plugin, enabling automatic deletion of completed jobs after a user-defined duration. (#6701) Marked known error messages from the Azure CSI Driver for volume snapshots as retryable, improving resilience. (#6906) Updated the default PostgreSQL version to 17.4 for new cluster definitions. (#6960)","title":"Enhancements"},{"location":"release_notes/v1.24/#security","text":"The operator image build process has been enhanced to strengthen security and transparency. Images are now signed with cosign , and OCI attestations are generated, incorporating the Software Bill of Materials (SBOM) and provenance data. Additionally, OCI annotations have been added to improve traceability and ensure the integrity of the images.","title":"Security"},{"location":"release_notes/v1.24/#bug-fixes","text":"Fixed inconsistent behavior in default probe knob values when .spec.probes is defined, ensuring users can override all settings, including failureThreshold . If unspecified in the startup probe, failureThreshold is now correctly derived from .spec.startupDelay / periodSeconds (default: 10 , now overridable). The same logic applies to liveness probes via .spec.livenessProbeTimeout . (#6656) Managed service ports now take precedence over default operator-defined ports. (#6474) Fixed an issue where WAL metrics were unavailable after an instance restart until a configuration change was applied. (#6816) Fixed an issue in monolithic database import where role import was skipped if no roles were specified. (#6646) Added support for new metrics introduced in PgBouncer 1.24. (#6630) Improved handling of replication-sensitive parameter reductions by ensuring timely reconciliation after primary server restarts. (#6440) Introduced a new isWALArchiver flag in the CNPG-I plugin configuration, allowing users to designate a plugin as a WAL archiver. This enables seamless migration from in-tree Barman Cloud support to the plugin while maintaining WAL archive consistency. (#6593) Ensured override.conf is consistently included in postgresql.conf during replica cluster bootstrapping, preventing replication failures due to missing configuration settings. (#6808) Ensured override.conf is correctly initialized before invoking pg_rewind to prevent failures during primary role changes. (#6670) Enhanced webhook responses to return both warnings and errors when applicable, improving diagnostic accuracy. (#6579) Ensured the operator version is correctly reconciled. (#6496) Improved PostgreSQL version detection by using a more precise check of the data directory. (#6659) Volume Snapshot Backups: Fixed an issue where unused backup connections were not properly cleaned up. (#6882) Ensured the instance manager closes stale PostgreSQL connections left by failed volume snapshot backups. (#6879) Prevented the operator from starting a new volume snapshot backup while another is already in progress. (#6890) cnpg plugin: Restored functionality of the promote plugin command. (#6476) Enhanced kubectl cnpg report --logs <cluster> to collect logs from all containers, including sidecars. (#6636) Ensured pgbench jobs can run when a Cluster uses an ImageCatalog . (#6868)","title":"Bug Fixes"},{"location":"release_notes/v1.24/#technical-enhancements","text":"Added support for Kubernetes client-gen , enabling automated generation of Go clients for all CloudNativePG CRDs. (#6695)","title":"Technical Enhancements"},{"location":"release_notes/v1.24/#version-1242","text":"Release Date: December 23, 2024","title":"Version 1.24.2"},{"location":"release_notes/v1.24/#enhancements_1","text":"Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Honor the User-Agent header in HTTP requests with the API server. (#6153)","title":"Enhancements"},{"location":"release_notes/v1.24/#bug-fixes_1","text":"Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998)","title":"Bug Fixes"},{"location":"release_notes/v1.24/#version-1241","text":"Release date: Oct 16, 2024","title":"Version 1.24.1"},{"location":"release_notes/v1.24/#enhancements_2","text":"Remove the use of pg_database_size from the status probe, as it caused high resource utilization by scanning the entire PGDATA directory to compute database sizes. The kubectl status plugin will now rely on du to provide detailed size information retrieval (#5689). Add the ability to configure the full_page_writes parameter in PostgreSQL. This setting defaults to on , in line with PostgreSQL's recommendations (#5516). Plugin: Add the logs pretty command in the cnpg plugin to read a log stream from standard input and output a human-readable format, with options to filter log entries (#5770) Enhance the status command by allowing multiple -v options to increase verbosity for more detailed output (#5765). Add support for specifying a custom Docker image using the --image flag in the pgadmin4 plugin command, giving users control over the Docker image used for pgAdmin4 deployments (#5515).","title":"Enhancements:"},{"location":"release_notes/v1.24/#fixes","text":"Resolve an issue with concurrent status updates when demoting a primary to a designated primary, ensuring smoother transitions during cluster role changes (#5755). Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down to two instances, enabling easier maintenance on the node hosting the replica (#5487). Prioritize full rollout over inplace restarts (#5407). When using .spec.postgresql.synchronous , ensure that the synchronous_standby_names parameter is correctly set, even when no replicas are reachable (#5831). Fix an issue that could lead to double failover in cases of lost connectivity (#5788). Correctly set the TMPDIR and PSQL_HISTORY environment variables for pods and jobs, improving temporary file and history management (#5503). Plugin: Resolve a race condition in the logs cluster command (#5775). Display the potential sync status in the status plugin (#5533). Fix the issue where pods deployed by the pgadmin4 command didn\u2019t have a writable home directory (#5800).","title":"Fixes:"},{"location":"release_notes/v1.24/#supported-versions","text":"PostgreSQL 17 (PostgreSQL 17.0 is the default image)","title":"Supported versions"},{"location":"release_notes/v1.24/#version-1240","text":"Release date: Aug 22, 2024","title":"Version 1.24.0"},{"location":"release_notes/v1.24/#important-changes","text":"Deprecate the role label in the selectors of Service and PodDisruptionBudget resources in favor of cnpg.io/instanceRole (#4897). Fix the default PodAntiAffinity configuration for PostgreSQL Pods, allowing a PostgreSQL and a Pooler Instance to coexist on the same node when the anti-affinity configuration is set to required (#5156). Warning The PodAntiAffinity change will trigger a rollout of all the instances when the operator is upgraded, even when online upgrades are enabled.","title":"Important changes:"},{"location":"release_notes/v1.24/#features","text":"Distributed PostgreSQL Topologies : Enhance the replica cluster feature to create distributed database topologies for PostgreSQL that span multiple Kubernetes clusters, enabling hybrid and multi-cloud deployments. This feature supports: Declarative Primary Control : Easily specify which PostgreSQL cluster acts as the primary in a distributed setup (#4388). Seamless Switchover : Effortlessly demote the current primary and promote a selected replica cluster, typically in a different region, without needing to rebuild the former primary. This ensures high availability and resilience in diverse environments (#4411). Managed Services : Introduce managed services via the managed.services stanza (#4769 and #4952), allowing you to: Disable the read-only and read services via configuration. Leverage the service template capability to create custom service resources, including load balancers, to access PostgreSQL outside Kubernetes (particularly useful for DBaaS purposes). Enhanced API for Synchronous Replication : Introducing an improved API for explicit configuration of synchronous replication, supporting both quorum-based and priority list strategies. This update allows full customization of the synchronous_standby_names option, providing greater control and flexibility (#5148). WAL Disk Space Exhaustion : Safely stop the cluster when PostgreSQL runs out of disk space to store WAL files, making recovery easier by increasing the size of the related volume (#4404).","title":"Features:"},{"location":"release_notes/v1.24/#enhancements_3","text":"Add support for delayed replicas by introducing the .spec.replica.minApplyDelay option, leveraging PostgreSQL's recovery_min_apply_delay capability (#5181). Introduce postInitSQLRefs and postInitTemplateSQLRefs to allow users to define postInit and postInitTemplate instructions as one or more config maps or secrets (#5074). Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Allow overriding the query metric name and the names of the columns using a name key/value pair, which can replace the name automatically inherited from the parent key (#4779). Enhanced control over exported metrics by making them subject to the value returned by a custom query, which is run within the same transaction and defined in the predicate_query field (#4503). Allow additional arguments to be passed to barman-cloud-wal-archive and barman-cloud-wal-restore (#5099). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). The readiness probe now fails for streaming replicas that were never connected to the primary instance, allowing incoherent replicas to be discovered promptly (#5206). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044). cnpg plugin updates: Enhance the install generate command by adding a --control-plane option, allowing deployment of the operator on control-plane nodes by setting node affinity and tolerations (#5271). Enhance the destroy command to delete also any job related to the target instance (#5298). Enhanced the status command to display demotionToken and promotionToken when available, providing more detailed operational insights with distributed topologies (#5149). Added support for customizing the remote database name in the publication and subscription subcommands. This enhancement offers greater flexibility for synchronizing data from an external cluster with multiple databases (#5113).","title":"Enhancements:"},{"location":"release_notes/v1.24/#security_1","text":"Add TLS communication between the operator and instance manager (#4442). Add optional TLS communication for the instance metrics exporter (#4927).","title":"Security:"},{"location":"release_notes/v1.24/#fixes_1","text":"Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Ensure that the Pooler service template can override the default service (#4846). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Fix cluster role permissions for ClusterImageCatalogs (#5034). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). Synchronous replication self-healing checks now exclude terminated pods, focusing only on active and functional pods (#5210). The instance manager will now terminate all existing operator-related replication connections following a role change in a replica cluster (#5209). Allow setting smartShutdownTimeout to zero, enabling immediate fast shutdown and bypassing the smart shutdown process when required (#5347). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915).","title":"Fixes:"},{"location":"release_notes/v1.24/#supported-versions_1","text":"Kubernetes 1.31, 1.30, 1.29, and 1.28 PostgreSQL 16, 15, 14, 13, and 12 PostgreSQL 16.4 is the default image PostgreSQL 12 support ends on November 12, 2024","title":"Supported versions"},{"location":"release_notes/v1.25/","text":"Release notes for CloudNativePG 1.25 History of user-visible changes in the 1.25 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.25.1 Release Date: February 28, 2025 Enhancements Introduced a startup probe for the operator to enhance reliability and prevent premature liveness probe failures during initialization. (#7008) Added support for using the -r service with the Pooler. (#6868) Introduced an optional --ttl flag for the pgbench plugin, enabling automatic deletion of completed jobs after a user-defined duration. (#6701) Marked known error messages from the Azure CSI Driver for volume snapshots as retryable, improving resilience. (#6906) Updated the default PostgreSQL version to 17.4 for new cluster definitions. (#6960) Security The operator image build process has been enhanced to strengthen security and transparency. Images are now signed with cosign , and OCI attestations are generated, incorporating the Software Bill of Materials (SBOM) and provenance data. Additionally, OCI annotations have been added to improve traceability and ensure the integrity of the images. Bug Fixes Fixed inconsistent behavior in default probe knob values when .spec.probes is defined, ensuring users can override all settings, including failureThreshold . If unspecified in the startup probe, failureThreshold is now correctly derived from .spec.startupDelay / periodSeconds (default: 10 , now overridable). The same logic applies to liveness probes via .spec.livenessProbeTimeout . (#6656) Managed service ports now take precedence over default operator-defined ports. (#6474) Fixed an issue where WAL metrics were unavailable after an instance restart until a configuration change was applied. (#6816) Fixed an issue in monolithic database import where role import was skipped if no roles were specified. (#6646) Added support for new metrics introduced in PgBouncer 1.24. (#6630) Resolved an issue where Database , Publication , and Subscription CRDs became stuck in cluster resource has been deleted, skipping reconciliation after cluster rehydration. This patch forces status.observedGeneration to zero, ensuring proper reconciliation. (#6607) Improved handling of replication-sensitive parameter reductions by ensuring timely reconciliation after primary server restarts. (#6440) Introduced a new isWALArchiver flag in the CNPG-I plugin configuration, allowing users to designate a plugin as a WAL archiver. This enables seamless migration from in-tree Barman Cloud support to the plugin while maintaining WAL archive consistency. (#6593) Ensured override.conf is consistently included in postgresql.conf during replica cluster bootstrapping, preventing replication failures due to missing configuration settings. (#6808) Ensured override.conf is correctly initialized before invoking pg_rewind to prevent failures during primary role changes. (#6670) Enhanced webhook responses to return both warnings and errors when applicable, improving diagnostic accuracy. (#6579) Ensured the operator version is correctly reconciled. (#6496) Improved PostgreSQL version detection by using a more precise check of the data directory. (#6659) Volume Snapshot Backups: Fixed an issue where unused backup connections were not properly cleaned up. (#6882) Ensured the instance manager closes stale PostgreSQL connections left by failed volume snapshot backups. (#6879) Prevented the operator from starting a new volume snapshot backup while another is already in progress. (#6890) cnpg plugin: Restored functionality of the promote plugin command. (#6476) Enhanced kubectl cnpg report --logs <cluster> to collect logs from all containers, including sidecars. (#6636) Ensured pgbench jobs can run when a Cluster uses an ImageCatalog . (#6868) Technical Enhancements Added support for Kubernetes client-gen , enabling automated generation of Go clients for all CloudNativePG CRDs. (#6695) Version 1.25.0 Release Date: December 23, 2024 Features Declarative Database Management : Introduce the Database Custom Resource Definition (CRD), enabling users to create and manage PostgreSQL databases declaratively within a cluster. (#5325) Logical Replication Management : Add Publication and Subscription CRDs for declarative management of PostgreSQL logical replication. These simplify replication setup and facilitate online migrations to CloudNativePG. (#5329) Experimental Support for CNPG-I : Introducing CNPG-I (CloudNativePG Interface), a standardized framework designed to extend CloudNativePG functionality through third-party plugins and foster the growth of the CNPG ecosystem. The Barman Cloud Plugin serves as a live example, illustrating how plugins can be developed to enhance backup and recovery workflows. Although CNPG-I support is currently experimental, it offers a powerful approach to extending CloudNativePG without modifying the operator\u2019s core code\u2014akin to PostgreSQL extensions. We welcome community feedback and contributions to shape this exciting new capability. Enhancements Add the dataDurability option to the .spec.postgresql.synchronous stanza, allowing users to choose between required (default) or preferred durability in synchronous replication. (#5878) Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Support additional pg_dump and pg_restore options to enhance database import flexibility. (#6214) Add support for maxConcurrentReconciles in the CloudNativePG controller and set the default to 10, improving the operator's ability to efficiently manage larger deployments out of the box. (#5678) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Enhance the backup command to support plugins. (#6045) Honor the User-Agent header in HTTP requests with the API server. (#6153) Bug Fixes Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998) Supported Versions Kubernetes : 1.32, 1.31, 1.30, and 1.29 PostgreSQL : 17, 16, 15, 14, and 13 Default image: PostgreSQL 17.2 Officially dropped support for PostgreSQL 12 PostgreSQL 13 support ends on November 12, 2025","title":"Release notes for CloudNativePG 1.25"},{"location":"release_notes/v1.25/#release-notes-for-cloudnativepg-125","text":"History of user-visible changes in the 1.25 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.25"},{"location":"release_notes/v1.25/#version-1251","text":"Release Date: February 28, 2025","title":"Version 1.25.1"},{"location":"release_notes/v1.25/#enhancements","text":"Introduced a startup probe for the operator to enhance reliability and prevent premature liveness probe failures during initialization. (#7008) Added support for using the -r service with the Pooler. (#6868) Introduced an optional --ttl flag for the pgbench plugin, enabling automatic deletion of completed jobs after a user-defined duration. (#6701) Marked known error messages from the Azure CSI Driver for volume snapshots as retryable, improving resilience. (#6906) Updated the default PostgreSQL version to 17.4 for new cluster definitions. (#6960)","title":"Enhancements"},{"location":"release_notes/v1.25/#security","text":"The operator image build process has been enhanced to strengthen security and transparency. Images are now signed with cosign , and OCI attestations are generated, incorporating the Software Bill of Materials (SBOM) and provenance data. Additionally, OCI annotations have been added to improve traceability and ensure the integrity of the images.","title":"Security"},{"location":"release_notes/v1.25/#bug-fixes","text":"Fixed inconsistent behavior in default probe knob values when .spec.probes is defined, ensuring users can override all settings, including failureThreshold . If unspecified in the startup probe, failureThreshold is now correctly derived from .spec.startupDelay / periodSeconds (default: 10 , now overridable). The same logic applies to liveness probes via .spec.livenessProbeTimeout . (#6656) Managed service ports now take precedence over default operator-defined ports. (#6474) Fixed an issue where WAL metrics were unavailable after an instance restart until a configuration change was applied. (#6816) Fixed an issue in monolithic database import where role import was skipped if no roles were specified. (#6646) Added support for new metrics introduced in PgBouncer 1.24. (#6630) Resolved an issue where Database , Publication , and Subscription CRDs became stuck in cluster resource has been deleted, skipping reconciliation after cluster rehydration. This patch forces status.observedGeneration to zero, ensuring proper reconciliation. (#6607) Improved handling of replication-sensitive parameter reductions by ensuring timely reconciliation after primary server restarts. (#6440) Introduced a new isWALArchiver flag in the CNPG-I plugin configuration, allowing users to designate a plugin as a WAL archiver. This enables seamless migration from in-tree Barman Cloud support to the plugin while maintaining WAL archive consistency. (#6593) Ensured override.conf is consistently included in postgresql.conf during replica cluster bootstrapping, preventing replication failures due to missing configuration settings. (#6808) Ensured override.conf is correctly initialized before invoking pg_rewind to prevent failures during primary role changes. (#6670) Enhanced webhook responses to return both warnings and errors when applicable, improving diagnostic accuracy. (#6579) Ensured the operator version is correctly reconciled. (#6496) Improved PostgreSQL version detection by using a more precise check of the data directory. (#6659) Volume Snapshot Backups: Fixed an issue where unused backup connections were not properly cleaned up. (#6882) Ensured the instance manager closes stale PostgreSQL connections left by failed volume snapshot backups. (#6879) Prevented the operator from starting a new volume snapshot backup while another is already in progress. (#6890) cnpg plugin: Restored functionality of the promote plugin command. (#6476) Enhanced kubectl cnpg report --logs <cluster> to collect logs from all containers, including sidecars. (#6636) Ensured pgbench jobs can run when a Cluster uses an ImageCatalog . (#6868)","title":"Bug Fixes"},{"location":"release_notes/v1.25/#technical-enhancements","text":"Added support for Kubernetes client-gen , enabling automated generation of Go clients for all CloudNativePG CRDs. (#6695)","title":"Technical Enhancements"},{"location":"release_notes/v1.25/#version-1250","text":"Release Date: December 23, 2024","title":"Version 1.25.0"},{"location":"release_notes/v1.25/#features","text":"Declarative Database Management : Introduce the Database Custom Resource Definition (CRD), enabling users to create and manage PostgreSQL databases declaratively within a cluster. (#5325) Logical Replication Management : Add Publication and Subscription CRDs for declarative management of PostgreSQL logical replication. These simplify replication setup and facilitate online migrations to CloudNativePG. (#5329) Experimental Support for CNPG-I : Introducing CNPG-I (CloudNativePG Interface), a standardized framework designed to extend CloudNativePG functionality through third-party plugins and foster the growth of the CNPG ecosystem. The Barman Cloud Plugin serves as a live example, illustrating how plugins can be developed to enhance backup and recovery workflows. Although CNPG-I support is currently experimental, it offers a powerful approach to extending CloudNativePG without modifying the operator\u2019s core code\u2014akin to PostgreSQL extensions. We welcome community feedback and contributions to shape this exciting new capability.","title":"Features"},{"location":"release_notes/v1.25/#enhancements_1","text":"Add the dataDurability option to the .spec.postgresql.synchronous stanza, allowing users to choose between required (default) or preferred durability in synchronous replication. (#5878) Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Support additional pg_dump and pg_restore options to enhance database import flexibility. (#6214) Add support for maxConcurrentReconciles in the CloudNativePG controller and set the default to 10, improving the operator's ability to efficiently manage larger deployments out of the box. (#5678) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Enhance the backup command to support plugins. (#6045) Honor the User-Agent header in HTTP requests with the API server. (#6153)","title":"Enhancements"},{"location":"release_notes/v1.25/#bug-fixes_1","text":"Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998)","title":"Bug Fixes"},{"location":"release_notes/v1.25/#supported-versions","text":"Kubernetes : 1.32, 1.31, 1.30, and 1.29 PostgreSQL : 17, 16, 15, 14, and 13 Default image: PostgreSQL 17.2 Officially dropped support for PostgreSQL 12 PostgreSQL 13 support ends on November 12, 2025","title":"Supported Versions"},{"location":"release_notes/v1.26/","text":"Release notes for CloudNativePG 1.26 History of user-visible changes in the 1.26 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.26.0-rc3 Release date: May 13, 2025 Enhancements Added a new field in the status of the Cluster resource to track the latest known Pod IP (#7546). Introduced an opt-in experimental feature to enhance the liveness probe with network isolation detection for primary instances. This feature can be activated via the alpha.cnpg.io/livenessPinger annotation (#7466). Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556) Fixes (since RC2) Corrected replication lag comparison logic in custom health probes to accept equality, enabling probes to succeed when lag is exactly zero (#7442). Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). Fixed a regression in WAL restore operations that prevented fallback to the in-tree barmanObjectStore configuration defined in the externalCluster source when a plugin failed to locate a WAL file (#7507). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Enhanced declarative major version upgrade logic by prioritizing the declared PostgreSQL version when using image catalogs. This change also replaces the majorVersionUpgradeFromImage field with the new pgDataImageInfo object in cluster status (#7387, #7403). cnpg plugin: Increased the buffer size in the logs pretty command to better handle larger log output (#7281). Ensured the plugin-name parameter is required for plugin-based backups and disallowed for non-plugin backup methods (#7506). Changes Initiated deprecation of in-tree Barman Cloud support: The .spec.backup.barmanObjectStore and .spec.backup.retentionPolicy fields are now deprecated in favor of the external Barman Cloud Plugin, and a warning is now emitted by the admission webhook when these fields are used in the Cluster specification (#7500). While support for in-tree object store backup and recovery remains available in this release, it is planned for removal in version 1.28.0. We strongly encourage users to begin planning the migration of their fleet to the new plugin-based approach. This release candidate provides an opportunity to test the new plugin workflow ahead of the final 1.26.0 release. Feedback is welcome . Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399). Version 1.26.0-rc2 Release date: April 16, 2025 Enhancements Introduced support for WAL recovery via CNPG-I plugins during snapshot restore. (#7284) Removed the ENABLE_AZURE_PVC_UPDATES configuration, as it is no longer required to resize Azure volumes correctly. The Azure CSI driver includes the necessary fix as of version 1.11.0 . (#7297) Security Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250) Fixes (since RC1) Improved declarative major version upgrades by incorporating pg_controldata information when creating the new data directory, ensuring a more reliable and seamless upgrade process. (#7274) Version 1.26.0-rc1 Release date: March 28, 2025 Important Changes CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203) Deprecation of Native Barman Cloud Support : Native support for Barman Cloud backups and recovery is now deprecated and will be fully removed in CloudNativePG 1.28.0. Users must begin migrating their existing clusters to the new Barman Cloud Plugin to ensure a smooth transition. (#6876) End of Support for Barman 3.4 and Earlier : CloudNativePG no longer supports Barman versions 3.4 and earlier, including the capability detection framework. Users running older operand versions (from before April 2023) must update their operand before upgrading the operator to avoid compatibility issues. (#7220) Hibernation Command Changes : The hibernate on and hibernate off commands in the cnpg plugin for kubectl now serve as shortcuts for declarative hibernation. The previous imperative approach has been removed in favor of this method. Additionally, the hibernate status command has been removed, as its functionality is now covered by the standard status command. Warning: Do not upgrade to version 1.26 of both the plugin and the operator unless you are prepared to migrate to the declarative hibernation method. (#7155) Features: Declarative Offline In-Place Major Upgrades of PostgreSQL : Introduced support for offline in-place major upgrades when a new operand container image with a higher PostgreSQL major version is applied to a cluster. During the upgrade, all cluster pods are shut down to ensure data consistency. A new job is created to validate upgrade conditions, run pg_upgrade , and set up new directories for PGDATA , WAL files, and tablespaces as needed. Once the upgrade is complete, replicas are re-created. Failed upgrades can be rolled back declaratively. (#6664) Improved Startup and Readiness Probes for Replicas : Enhanced support for Kubernetes startup and readiness probes in PostgreSQL instances, providing greater control over replicas based on the streaming lag. (#6623) Declarative management of extensions and schemas : Introduced the extensions and schemas stanzas in the Database resource to declaratively create, modify, and drop PostgreSQL extensions and schemas within a database. (#7062) Enhancements Introduced the STANDBY_TCP_USER_TIMEOUT operator configuration setting, allowing users to specify the tcp_user_timeout parameter on all standby instances managed by the operator. (#7036) Added the pg_extensions metric, providing information about installed PostgreSQL extensions and their latest available versions. (#7195) Introduced the DRAIN_TAINTS operator configuration option, enabling users to customize which node taints indicate a node is being drained. This replaces the previous fixed behavior of only recognizing node.kubernetes.io/unschedulable as a drain signal. Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for patching PostgreSQL instance pods using the cnpg.io/podPatch annotation with a JSON Patch. This may introduce discrepancies between the operator\u2019s expectations and Kubernetes behavior, so it should be used with caution. (#6323) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) CloudNativePG Interface (CNPG-I): A plugin can now trigger instance rollouts by implementing the EVALUATE verb, ensuring that plugin-induced changes are properly reconciled. (#7126) Fixes Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) Treated timeout errors during volume snapshot creation as retryable to prevent unnecessary backup failures. (#7010) cnpg plugin: Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Fixed an issue that prevented WALs from being archived on a former primary node when using a plugin. (#6964) Supported versions Kubernetes 1.32, 1.31, and 1.30 PostgreSQL 17, 16, 15, 14, and 13 PostgreSQL 17.X is the default image PostgreSQL 13 support ends on November 12, 2025","title":"Release notes for CloudNativePG 1.26"},{"location":"release_notes/v1.26/#release-notes-for-cloudnativepg-126","text":"History of user-visible changes in the 1.26 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.26"},{"location":"release_notes/v1.26/#version-1260-rc3","text":"Release date: May 13, 2025","title":"Version 1.26.0-rc3"},{"location":"release_notes/v1.26/#enhancements","text":"Added a new field in the status of the Cluster resource to track the latest known Pod IP (#7546). Introduced an opt-in experimental feature to enhance the liveness probe with network isolation detection for primary instances. This feature can be activated via the alpha.cnpg.io/livenessPinger annotation (#7466). Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556)","title":"Enhancements"},{"location":"release_notes/v1.26/#fixes-since-rc2","text":"Corrected replication lag comparison logic in custom health probes to accept equality, enabling probes to succeed when lag is exactly zero (#7442). Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). Fixed a regression in WAL restore operations that prevented fallback to the in-tree barmanObjectStore configuration defined in the externalCluster source when a plugin failed to locate a WAL file (#7507). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Enhanced declarative major version upgrade logic by prioritizing the declared PostgreSQL version when using image catalogs. This change also replaces the majorVersionUpgradeFromImage field with the new pgDataImageInfo object in cluster status (#7387, #7403). cnpg plugin: Increased the buffer size in the logs pretty command to better handle larger log output (#7281). Ensured the plugin-name parameter is required for plugin-based backups and disallowed for non-plugin backup methods (#7506).","title":"Fixes (since RC2)"},{"location":"release_notes/v1.26/#changes","text":"Initiated deprecation of in-tree Barman Cloud support: The .spec.backup.barmanObjectStore and .spec.backup.retentionPolicy fields are now deprecated in favor of the external Barman Cloud Plugin, and a warning is now emitted by the admission webhook when these fields are used in the Cluster specification (#7500). While support for in-tree object store backup and recovery remains available in this release, it is planned for removal in version 1.28.0. We strongly encourage users to begin planning the migration of their fleet to the new plugin-based approach. This release candidate provides an opportunity to test the new plugin workflow ahead of the final 1.26.0 release. Feedback is welcome . Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399).","title":"Changes"},{"location":"release_notes/v1.26/#version-1260-rc2","text":"Release date: April 16, 2025","title":"Version 1.26.0-rc2"},{"location":"release_notes/v1.26/#enhancements_1","text":"Introduced support for WAL recovery via CNPG-I plugins during snapshot restore. (#7284) Removed the ENABLE_AZURE_PVC_UPDATES configuration, as it is no longer required to resize Azure volumes correctly. The Azure CSI driver includes the necessary fix as of version 1.11.0 . (#7297)","title":"Enhancements"},{"location":"release_notes/v1.26/#security","text":"Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250)","title":"Security"},{"location":"release_notes/v1.26/#fixes-since-rc1","text":"Improved declarative major version upgrades by incorporating pg_controldata information when creating the new data directory, ensuring a more reliable and seamless upgrade process. (#7274)","title":"Fixes (since RC1)"},{"location":"release_notes/v1.26/#version-1260-rc1","text":"Release date: March 28, 2025","title":"Version 1.26.0-rc1"},{"location":"release_notes/v1.26/#important-changes","text":"CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203) Deprecation of Native Barman Cloud Support : Native support for Barman Cloud backups and recovery is now deprecated and will be fully removed in CloudNativePG 1.28.0. Users must begin migrating their existing clusters to the new Barman Cloud Plugin to ensure a smooth transition. (#6876) End of Support for Barman 3.4 and Earlier : CloudNativePG no longer supports Barman versions 3.4 and earlier, including the capability detection framework. Users running older operand versions (from before April 2023) must update their operand before upgrading the operator to avoid compatibility issues. (#7220) Hibernation Command Changes : The hibernate on and hibernate off commands in the cnpg plugin for kubectl now serve as shortcuts for declarative hibernation. The previous imperative approach has been removed in favor of this method. Additionally, the hibernate status command has been removed, as its functionality is now covered by the standard status command. Warning: Do not upgrade to version 1.26 of both the plugin and the operator unless you are prepared to migrate to the declarative hibernation method. (#7155)","title":"Important Changes"},{"location":"release_notes/v1.26/#features","text":"Declarative Offline In-Place Major Upgrades of PostgreSQL : Introduced support for offline in-place major upgrades when a new operand container image with a higher PostgreSQL major version is applied to a cluster. During the upgrade, all cluster pods are shut down to ensure data consistency. A new job is created to validate upgrade conditions, run pg_upgrade , and set up new directories for PGDATA , WAL files, and tablespaces as needed. Once the upgrade is complete, replicas are re-created. Failed upgrades can be rolled back declaratively. (#6664) Improved Startup and Readiness Probes for Replicas : Enhanced support for Kubernetes startup and readiness probes in PostgreSQL instances, providing greater control over replicas based on the streaming lag. (#6623) Declarative management of extensions and schemas : Introduced the extensions and schemas stanzas in the Database resource to declaratively create, modify, and drop PostgreSQL extensions and schemas within a database. (#7062)","title":"Features:"},{"location":"release_notes/v1.26/#enhancements_2","text":"Introduced the STANDBY_TCP_USER_TIMEOUT operator configuration setting, allowing users to specify the tcp_user_timeout parameter on all standby instances managed by the operator. (#7036) Added the pg_extensions metric, providing information about installed PostgreSQL extensions and their latest available versions. (#7195) Introduced the DRAIN_TAINTS operator configuration option, enabling users to customize which node taints indicate a node is being drained. This replaces the previous fixed behavior of only recognizing node.kubernetes.io/unschedulable as a drain signal. Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for patching PostgreSQL instance pods using the cnpg.io/podPatch annotation with a JSON Patch. This may introduce discrepancies between the operator\u2019s expectations and Kubernetes behavior, so it should be used with caution. (#6323) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) CloudNativePG Interface (CNPG-I): A plugin can now trigger instance rollouts by implementing the EVALUATE verb, ensuring that plugin-induced changes are properly reconciled. (#7126)","title":"Enhancements"},{"location":"release_notes/v1.26/#fixes","text":"Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) Treated timeout errors during volume snapshot creation as retryable to prevent unnecessary backup failures. (#7010) cnpg plugin: Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Fixed an issue that prevented WALs from being archived on a former primary node when using a plugin. (#6964)","title":"Fixes"},{"location":"release_notes/v1.26/#supported-versions","text":"Kubernetes 1.32, 1.31, and 1.30 PostgreSQL 17, 16, 15, 14, and 13 PostgreSQL 17.X is the default image PostgreSQL 13 support ends on November 12, 2025","title":"Supported versions"},{"location":"release_notes/old/v1.15/","text":"Release notes for CloudNativePG 1.15 History of user-visible changes in the 1.15 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Warning This is expected to be the last release in the 1.15.X series. Users are encouraged to update to a newer minor version soon. Version 1.15.5 Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Make the cluster's conditions compatible with metav1.Conditions struct (#720) Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765) Version 1.15.4 Release date: Sep 6, 2022 Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Fixes: Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641) Version 1.15.3 Release date: Aug 12, 2022 Enhancements: Enable the configuration of the huge_pages option for PostgreSQL (#456) Enhance log during promotion and demotion, after a failover or a switchover, by printing the time elapsed between the request of promotion and the actual availability for writes (#371) Add the instanceName and clusterName labels on jobs, pods, and PVCs to improve interaction with these resources (#534) Add instructions on how to create PostGIS clusters (#570) Security: Explicitly assign securityContext to the Pooler deployment (#485) Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437) Fixes: Use the correct delays for restarts ( stopDelay ) and for switchover ( switchoverDelay ), as they were erroneously swapped before. This is an important fix, as it might block indefinitely restarts if switchoverDelay is not set and uses the default value of 40000000 seconds (#531) Prevent the metrics collector from causing panic when the query returns an error (#396) Removing an unsafe debug message that was referencing an unchecked pointer, leading in some cases to segmentation faults regardless of the log level (#491) Prevent panic when fencing in case the cluster had no annotation (#512) Avoid updating the CRD if a TLS certificate is not changed (#501) Handle conflicts while injecting a certificate in the CRD (#547) Backup and recovery: Correctly pass object store credentials in Google Cloud (#454) Minor changes: Set the default operand image to PostgreSQL 15.0 Version 1.15.2 Release date: Jul 7, 2022 (patch release) Enhancements: Improve logging of the instance manager during switchover and failover Require Barman >= 3.0.0 for future support of PostgreSQL 15 in backup and recovery Changes: Set the default operand image to PostgreSQL 15.0 Fixes: Fix the initialization order inside the WithActiveInstance function that starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in the cluster initialization phase - this is especially useful in bootstrap operations like recovery from a backup are failing (before this patch, such logs were not sent to the standard output channel and were permanently lost) Avoid an unnecessary switchover when a hot standby sensitive parameter is decreased, and the primary has already restarted Properly quote role names in ALTER ROLE statements Backup and recovery: Fix the algorithm detecting the closest Barman backup for PITR, which was comparing the requested recovery timestamp with the backup start instead of the end Fix Point in Time Recovery based on a transaction ID, a named restore point, or the \u201cimmediate\u201d target by providing a new field called backupID in the recoveryTarget section Fix encryption parameters invoking barman-cloud-wal-archive and barman-cloud-backup commands Stop ignoring barmanObjectStore.serverName option when recovering from a backup object store using a server name that doesn\u2019t match the current cluster name cnpg plug-in: Make sure that the plug-in complies with the -n parameter when specified by the user Fix the status command to sort results and remove variability in the output Version 1.15.1 Release date: May 27, 2022 (patch release) Minor changes: Enable configuration of the archive_timeout setting for PostgreSQL, which was previously a fixed parameter (by default set to 5 minutes) Introduce a new field called backupOwnerReference in the scheduledBackup resource to set the ownership reference on the created backup resources, with possible values being none (default), self (objects owned by the scheduled backup object), and cluster (owned by the Postgres cluster object) Introduce automated collection of pg_stat_wal metrics for PostgreSQL 14 or higher in the native Prometheus exporter Set the default operand image to PostgreSQL 15.0 Fixes: Fix fencing by killing orphaned processes related to postgres Enable the CSV log pipe inside the WithActiveInstance function to collect logs from recovery bootstrap jobs and help in the troubleshooting phase Prevent bootstrapping a new cluster with a non-empty backup object store, removing the risk of overwriting existing backups With the recovery bootstrap method, make sure that the recovery object store and the backup object store are different to avoid overwriting existing backups Re-queue the reconciliation loop if the RBAC for backups is not yet created Fix an issue with backups and the wrong specification of the cluster name property Ensures that operator pods always have the latest certificates in the case of a deployment of the operator in high availability, with more than one replica Fix the cnpg report operator command to correctly handle the case of a deployment of the operator in high availability, with more than one replica Properly propagate changes in the cluster\u2019s inheritedMetadata set of labels and annotations to the related resources of the cluster without requiring a restart Fix the cnpg plugin to correctly parse any custom configmap and secret name defined in the operator deployment, instead of relying just on the default values Fix the local building of the documentation by using the minidocks/mkdocs image for mkdocs Version 1.15.0 Release date: 21 April 2022 Features: Fencing: Introduction of the fencing capability for a cluster or a given set of PostgreSQL instances through the cnpg.io/fencedInstances annotation, which, if not empty, disables switchover/failovers in the cluster; fenced instances are shut down and the pod is kept running (while considered not ready) for inspection and emergencies LDAP authentication: Allow LDAP Simple Bind and Search+Bind configuration options in the pg_hba.conf to be defined in the Postgres cluster spec declaratively, enabling the optional use of Kubernetes secrets for sensitive options such as ldapbindpasswd Introduction of the primaryUpdateMethod option, accepting the values of switchover (default) and restart , to be used in case of unsupervised primaryUpdateStrategy ; this method controls what happens to the primary instance during the rolling update procedure New report command in the kubectl cnp plugin for better diagnosis and more effective troubleshooting of both the operator and a specific Postgres cluster Prune those Backup objects that are no longer in the backup object store Specification of target timeline and LSN in Point-In-Time Recovery bootstrap method Support for the AWS_SESSION_TOKEN authentication token in AWS S3 through the sessionToken option Default image name for PgBouncer in Pooler pods set to quay.io/enterprisedb/pgbouncer:1.17.0 Fixes: Base backup detection for Point-In-Time Recovery via targetTime correctly works now, as previously a target prior to the latest available backup was not possible (the detection algorithm was always wrong by selecting the last backup as a starting point) Improved resilience of hot standby sensitive parameters by relying on the values the operator collects from pg_controldata Intermediate certificates handling has been improved by properly discarding invalid entries, instead of throwing an invalid certificate error Prometheus exporter metric collection queries in the databases are now committed instead of rolled back (this might result in a change in the number of rolled back transactions that are visible from downstream dashboards, where applicable) Version 1.15.0 is the first release of CloudNativePG. Previously, this software was called EDB Cloud Native PostgreSQL (now EDB Postgres for Kubernetes). If you are looking for information about a previous release, please refer to the EDB documentation .","title":"Release notes for CloudNativePG 1.15"},{"location":"release_notes/old/v1.15/#release-notes-for-cloudnativepg-115","text":"History of user-visible changes in the 1.15 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Warning This is expected to be the last release in the 1.15.X series. Users are encouraged to update to a newer minor version soon.","title":"Release notes for CloudNativePG 1.15"},{"location":"release_notes/old/v1.15/#version-1155","text":"Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Make the cluster's conditions compatible with metav1.Conditions struct (#720) Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765)","title":"Version 1.15.5"},{"location":"release_notes/old/v1.15/#version-1154","text":"Release date: Sep 6, 2022 Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Fixes: Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641)","title":"Version 1.15.4"},{"location":"release_notes/old/v1.15/#version-1153","text":"Release date: Aug 12, 2022 Enhancements: Enable the configuration of the huge_pages option for PostgreSQL (#456) Enhance log during promotion and demotion, after a failover or a switchover, by printing the time elapsed between the request of promotion and the actual availability for writes (#371) Add the instanceName and clusterName labels on jobs, pods, and PVCs to improve interaction with these resources (#534) Add instructions on how to create PostGIS clusters (#570) Security: Explicitly assign securityContext to the Pooler deployment (#485) Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437) Fixes: Use the correct delays for restarts ( stopDelay ) and for switchover ( switchoverDelay ), as they were erroneously swapped before. This is an important fix, as it might block indefinitely restarts if switchoverDelay is not set and uses the default value of 40000000 seconds (#531) Prevent the metrics collector from causing panic when the query returns an error (#396) Removing an unsafe debug message that was referencing an unchecked pointer, leading in some cases to segmentation faults regardless of the log level (#491) Prevent panic when fencing in case the cluster had no annotation (#512) Avoid updating the CRD if a TLS certificate is not changed (#501) Handle conflicts while injecting a certificate in the CRD (#547) Backup and recovery: Correctly pass object store credentials in Google Cloud (#454) Minor changes: Set the default operand image to PostgreSQL 15.0","title":"Version 1.15.3"},{"location":"release_notes/old/v1.15/#version-1152","text":"Release date: Jul 7, 2022 (patch release) Enhancements: Improve logging of the instance manager during switchover and failover Require Barman >= 3.0.0 for future support of PostgreSQL 15 in backup and recovery Changes: Set the default operand image to PostgreSQL 15.0 Fixes: Fix the initialization order inside the WithActiveInstance function that starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in the cluster initialization phase - this is especially useful in bootstrap operations like recovery from a backup are failing (before this patch, such logs were not sent to the standard output channel and were permanently lost) Avoid an unnecessary switchover when a hot standby sensitive parameter is decreased, and the primary has already restarted Properly quote role names in ALTER ROLE statements Backup and recovery: Fix the algorithm detecting the closest Barman backup for PITR, which was comparing the requested recovery timestamp with the backup start instead of the end Fix Point in Time Recovery based on a transaction ID, a named restore point, or the \u201cimmediate\u201d target by providing a new field called backupID in the recoveryTarget section Fix encryption parameters invoking barman-cloud-wal-archive and barman-cloud-backup commands Stop ignoring barmanObjectStore.serverName option when recovering from a backup object store using a server name that doesn\u2019t match the current cluster name cnpg plug-in: Make sure that the plug-in complies with the -n parameter when specified by the user Fix the status command to sort results and remove variability in the output","title":"Version 1.15.2"},{"location":"release_notes/old/v1.15/#version-1151","text":"Release date: May 27, 2022 (patch release) Minor changes: Enable configuration of the archive_timeout setting for PostgreSQL, which was previously a fixed parameter (by default set to 5 minutes) Introduce a new field called backupOwnerReference in the scheduledBackup resource to set the ownership reference on the created backup resources, with possible values being none (default), self (objects owned by the scheduled backup object), and cluster (owned by the Postgres cluster object) Introduce automated collection of pg_stat_wal metrics for PostgreSQL 14 or higher in the native Prometheus exporter Set the default operand image to PostgreSQL 15.0 Fixes: Fix fencing by killing orphaned processes related to postgres Enable the CSV log pipe inside the WithActiveInstance function to collect logs from recovery bootstrap jobs and help in the troubleshooting phase Prevent bootstrapping a new cluster with a non-empty backup object store, removing the risk of overwriting existing backups With the recovery bootstrap method, make sure that the recovery object store and the backup object store are different to avoid overwriting existing backups Re-queue the reconciliation loop if the RBAC for backups is not yet created Fix an issue with backups and the wrong specification of the cluster name property Ensures that operator pods always have the latest certificates in the case of a deployment of the operator in high availability, with more than one replica Fix the cnpg report operator command to correctly handle the case of a deployment of the operator in high availability, with more than one replica Properly propagate changes in the cluster\u2019s inheritedMetadata set of labels and annotations to the related resources of the cluster without requiring a restart Fix the cnpg plugin to correctly parse any custom configmap and secret name defined in the operator deployment, instead of relying just on the default values Fix the local building of the documentation by using the minidocks/mkdocs image for mkdocs","title":"Version 1.15.1"},{"location":"release_notes/old/v1.15/#version-1150","text":"Release date: 21 April 2022 Features: Fencing: Introduction of the fencing capability for a cluster or a given set of PostgreSQL instances through the cnpg.io/fencedInstances annotation, which, if not empty, disables switchover/failovers in the cluster; fenced instances are shut down and the pod is kept running (while considered not ready) for inspection and emergencies LDAP authentication: Allow LDAP Simple Bind and Search+Bind configuration options in the pg_hba.conf to be defined in the Postgres cluster spec declaratively, enabling the optional use of Kubernetes secrets for sensitive options such as ldapbindpasswd Introduction of the primaryUpdateMethod option, accepting the values of switchover (default) and restart , to be used in case of unsupervised primaryUpdateStrategy ; this method controls what happens to the primary instance during the rolling update procedure New report command in the kubectl cnp plugin for better diagnosis and more effective troubleshooting of both the operator and a specific Postgres cluster Prune those Backup objects that are no longer in the backup object store Specification of target timeline and LSN in Point-In-Time Recovery bootstrap method Support for the AWS_SESSION_TOKEN authentication token in AWS S3 through the sessionToken option Default image name for PgBouncer in Pooler pods set to quay.io/enterprisedb/pgbouncer:1.17.0 Fixes: Base backup detection for Point-In-Time Recovery via targetTime correctly works now, as previously a target prior to the latest available backup was not possible (the detection algorithm was always wrong by selecting the last backup as a starting point) Improved resilience of hot standby sensitive parameters by relying on the values the operator collects from pg_controldata Intermediate certificates handling has been improved by properly discarding invalid entries, instead of throwing an invalid certificate error Prometheus exporter metric collection queries in the databases are now committed instead of rolled back (this might result in a change in the number of rolled back transactions that are visible from downstream dashboards, where applicable) Version 1.15.0 is the first release of CloudNativePG. Previously, this software was called EDB Cloud Native PostgreSQL (now EDB Postgres for Kubernetes). If you are looking for information about a previous release, please refer to the EDB documentation .","title":"Version 1.15.0"},{"location":"release_notes/old/v1.16/","text":"Release notes for CloudNativePG 1.16 History of user-visible changes in the 1.16 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.16.5 Release date: Dec 21, 2022 Warning This is expected to be the last release in the 1.16.X series. Users are encouraged to update to a newer minor version soon. Important announcements: Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166) Version 1.16.4 Release date: Nov 10, 2022 Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: status command for the cnpg plugin: Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866) Version 1.16.3 Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765) Version 1.16.2 Release date: Sep 6, 2022 Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Fixes: Use shared_preload_libraries when bootstrapping the new cluster's primary (#642) Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641) Version 1.16.1 Release date: Aug 12, 2022 Enhancements: Enable the configuration of the huge_pages option for PostgreSQL (#456) Enhance log during promotion and demotion, after a failover or a switchover, by printing the time elapsed between the request of promotion and the actual availability for writes (#371) Introduce the PostgreSQL cluster\u2019s timeline in the cluster status (#462) Add the instanceName and clusterName labels on jobs, pods, and PVCs to improve interaction with these resources (#534) Add instructions on how to create PostGIS clusters (#570) Security: Explicitly assign securityContext to the Pooler deployment (#485) Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437) Fixes: Use the correct delays for restarts ( stopDelay ) and for switchover ( switchoverDelay ), as they were erroneously swapped before. This is an important fix, as it might block indefinitely restarts if switchoverDelay is not set and uses the default value of 40000000 seconds (#531) Prevent the metrics collector from causing panic when the query returns an error (#396) Removing an unsafe debug message that was referencing an unchecked pointer, leading in some cases to segmentation faults regardless of the log level (#491) Prevent panic when fencing in case the cluster had no annotation (#512) Avoid updating the CRD if a TLS certificate is not changed (#501) Handle conflicts while injecting a certificate in the CRD (#547) Database import: Use the postgres user while running pg_restore in database import (#411) Document the requirement to explicitly set sslmode in the monolith import case to control SSL connections with the origin external server (#572) Fix bug that prevented import from working when dbname was specified in connectionParameters (#569) Backup and recovery: Correctly pass object store credentials in Google Cloud (#454) Minor changes: Set the default operand image to PostgreSQL 15.0 Version 1.16.0 Release date: Jul 7, 2022 (minor release) Features: Offline data import and major upgrades for PostgreSQL: introduce the bootstrap.initdb.import section to provide a way to import objects via the network from an existing PostgreSQL instance (even outside Kubernetes) inside a brand new CloudNativePG cluster using the PostgreSQL logical backup concept ( pg_dump / pg_restore ). The same method can be used to perform major PostgreSQL upgrades on a new cluster. The feature introduces two types of import: microservice (import one database only in the new cluster) and monolith (import the selected databases and roles from the existing instance). Anti-affinity rules for synchronous replication based on labels: make sure that synchronous replicas are running on nodes with different characteristics than the node where the primary is running, for example, availability zone Enhancements: Improve fencing by removing the existing limitation that disables failover when one or more instances are fenced Enhance the automated extension management framework by checking whether an extension exists in the catalog instead of running DROP EXTENSION IF EXISTS unnecessarily Improve logging of the instance manager during switchover and failover Enable redefining the name of the database of the application, its owner, and the related secret when recovering from an object store or cloning an instance via pg_basebackup (this was only possible in the initdb bootstrap so far) Backup and recovery: Require Barman >= 3.0.0 for future support of PostgreSQL 15 Enable Azure AD Workload Identity for Barman Cloud backups through the inheritFromAzureAD option Introduce barmanObjectStore.s3Credentials.region to define the region in AWS ( AWS_DEFAULT_REGION ) for both backup and recovery object stores Support for Kubernetes 1.24 Changes: Set the default operand image to PostgreSQL 15.0 Use conditions from the Kubernetes API instead of relying on our own implementation for backup and WAL archiving Fixes: Fix the initialization order inside the WithActiveInstance function that starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in the cluster initialization phase - this is especially useful in bootstrap operations like recovery from a backup are failing (before this patch, such logs were not sent to the standard output channel and were permanently lost) Avoid an unnecessary switchover when a hot standby sensitive parameter is decreased, and the primary has already restarted Properly quote role names in ALTER ROLE statements Backup and recovery: Fix the algorithm detecting the closest Barman backup for PITR, which was comparing the requested recovery timestamp with the backup start instead of the end Fix Point in Time Recovery based on a transaction ID, a named restore point, or the \u201cimmediate\u201d target by providing a new field called backupID in the recoveryTarget section Fix encryption parameters invoking barman-cloud-wal-archive and barman-cloud-backup commands Stop ignoring barmanObjectStore.serverName option when recovering from a backup object store using a server name that doesn\u2019t match the current cluster name cnpg plug-in: Make sure that the plug-in complies with the -n parameter when specified by the user Fix the status command to sort results and remove variability in the output","title":"Release notes for CloudNativePG 1.16"},{"location":"release_notes/old/v1.16/#release-notes-for-cloudnativepg-116","text":"History of user-visible changes in the 1.16 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.16"},{"location":"release_notes/old/v1.16/#version-1165","text":"Release date: Dec 21, 2022 Warning This is expected to be the last release in the 1.16.X series. Users are encouraged to update to a newer minor version soon. Important announcements: Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166)","title":"Version 1.16.5"},{"location":"release_notes/old/v1.16/#version-1164","text":"Release date: Nov 10, 2022 Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: status command for the cnpg plugin: Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866)","title":"Version 1.16.4"},{"location":"release_notes/old/v1.16/#version-1163","text":"Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765)","title":"Version 1.16.3"},{"location":"release_notes/old/v1.16/#version-1162","text":"Release date: Sep 6, 2022 Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Fixes: Use shared_preload_libraries when bootstrapping the new cluster's primary (#642) Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641)","title":"Version 1.16.2"},{"location":"release_notes/old/v1.16/#version-1161","text":"Release date: Aug 12, 2022 Enhancements: Enable the configuration of the huge_pages option for PostgreSQL (#456) Enhance log during promotion and demotion, after a failover or a switchover, by printing the time elapsed between the request of promotion and the actual availability for writes (#371) Introduce the PostgreSQL cluster\u2019s timeline in the cluster status (#462) Add the instanceName and clusterName labels on jobs, pods, and PVCs to improve interaction with these resources (#534) Add instructions on how to create PostGIS clusters (#570) Security: Explicitly assign securityContext to the Pooler deployment (#485) Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437) Fixes: Use the correct delays for restarts ( stopDelay ) and for switchover ( switchoverDelay ), as they were erroneously swapped before. This is an important fix, as it might block indefinitely restarts if switchoverDelay is not set and uses the default value of 40000000 seconds (#531) Prevent the metrics collector from causing panic when the query returns an error (#396) Removing an unsafe debug message that was referencing an unchecked pointer, leading in some cases to segmentation faults regardless of the log level (#491) Prevent panic when fencing in case the cluster had no annotation (#512) Avoid updating the CRD if a TLS certificate is not changed (#501) Handle conflicts while injecting a certificate in the CRD (#547) Database import: Use the postgres user while running pg_restore in database import (#411) Document the requirement to explicitly set sslmode in the monolith import case to control SSL connections with the origin external server (#572) Fix bug that prevented import from working when dbname was specified in connectionParameters (#569) Backup and recovery: Correctly pass object store credentials in Google Cloud (#454) Minor changes: Set the default operand image to PostgreSQL 15.0","title":"Version 1.16.1"},{"location":"release_notes/old/v1.16/#version-1160","text":"Release date: Jul 7, 2022 (minor release) Features: Offline data import and major upgrades for PostgreSQL: introduce the bootstrap.initdb.import section to provide a way to import objects via the network from an existing PostgreSQL instance (even outside Kubernetes) inside a brand new CloudNativePG cluster using the PostgreSQL logical backup concept ( pg_dump / pg_restore ). The same method can be used to perform major PostgreSQL upgrades on a new cluster. The feature introduces two types of import: microservice (import one database only in the new cluster) and monolith (import the selected databases and roles from the existing instance). Anti-affinity rules for synchronous replication based on labels: make sure that synchronous replicas are running on nodes with different characteristics than the node where the primary is running, for example, availability zone Enhancements: Improve fencing by removing the existing limitation that disables failover when one or more instances are fenced Enhance the automated extension management framework by checking whether an extension exists in the catalog instead of running DROP EXTENSION IF EXISTS unnecessarily Improve logging of the instance manager during switchover and failover Enable redefining the name of the database of the application, its owner, and the related secret when recovering from an object store or cloning an instance via pg_basebackup (this was only possible in the initdb bootstrap so far) Backup and recovery: Require Barman >= 3.0.0 for future support of PostgreSQL 15 Enable Azure AD Workload Identity for Barman Cloud backups through the inheritFromAzureAD option Introduce barmanObjectStore.s3Credentials.region to define the region in AWS ( AWS_DEFAULT_REGION ) for both backup and recovery object stores Support for Kubernetes 1.24 Changes: Set the default operand image to PostgreSQL 15.0 Use conditions from the Kubernetes API instead of relying on our own implementation for backup and WAL archiving Fixes: Fix the initialization order inside the WithActiveInstance function that starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in the cluster initialization phase - this is especially useful in bootstrap operations like recovery from a backup are failing (before this patch, such logs were not sent to the standard output channel and were permanently lost) Avoid an unnecessary switchover when a hot standby sensitive parameter is decreased, and the primary has already restarted Properly quote role names in ALTER ROLE statements Backup and recovery: Fix the algorithm detecting the closest Barman backup for PITR, which was comparing the requested recovery timestamp with the backup start instead of the end Fix Point in Time Recovery based on a transaction ID, a named restore point, or the \u201cimmediate\u201d target by providing a new field called backupID in the recoveryTarget section Fix encryption parameters invoking barman-cloud-wal-archive and barman-cloud-backup commands Stop ignoring barmanObjectStore.serverName option when recovering from a backup object store using a server name that doesn\u2019t match the current cluster name cnpg plug-in: Make sure that the plug-in complies with the -n parameter when specified by the user Fix the status command to sort results and remove variability in the output","title":"Version 1.16.0"},{"location":"release_notes/old/v1.17/","text":"Release notes for CloudNativePG 1.17 History of user-visible changes in the 1.17 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.17.5 Release date: March 20, 2023 Warning This is expected to be the last release in the 1.17.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Fixes: Prevent panic with error handling in the probes (#1716) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Version 1.17.4 Release date: Feb 14, 2023 Features: Support for Kubernetes' projected volumes (#1269) Support custom environment variables for finer control of the PostgreSQL server process (#1275) Enhancements: Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213) Version 1.17.3 Release date: Dec 21, 2022 Important announcements: Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Improve compatibility with Istio: add support for Istio's quit endpoint so that jobs with Istio sidecars do not run indefinitely (#967) Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure the PVC containing WALs is deleted when scaling down the cluster (#1135) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166) Version 1.17.2 Release date: Nov 10, 2022 Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: status command for the cnpg plugin: Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Set PostgreSQL 15.0 as the new default version (#821) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866) Version 1.17.1 Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765) Ensure that timestamps that are specified with microsecond precision using the PostgreSQL format are correctly parsed (#741) Version 1.17.0 Release date: Sep 6, 2022 (minor release) Features: Separate volume for WAL files: Support for separating Write Ahead Log (WAL) and database data files onto different disks, potentially leading to better performance on high write systems by easing I/O load on the data directory. This option is controlled with the introduction of the optional walStorage section to separate WAL files ( pg_wal ) in a dedicated volume, separate from the PGDATA defined in the main and mandatory storage section (#513). Current limitations: walStorage can only be set at cluster creation and cannot be added or removed when the cluster is up and running. Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Introduce the kubectl cnpg destroy command to help remove an instance and all the associated PVCs (#643) Fixes: Use shared_preload_libraries when bootstrapping the new cluster's primary (#642) Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641)","title":"Release notes for CloudNativePG 1.17"},{"location":"release_notes/old/v1.17/#release-notes-for-cloudnativepg-117","text":"History of user-visible changes in the 1.17 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.17"},{"location":"release_notes/old/v1.17/#version-1175","text":"Release date: March 20, 2023 Warning This is expected to be the last release in the 1.17.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Fixes: Prevent panic with error handling in the probes (#1716) Properly show WAL archiving information with status command of the cnpg plugin (#1666)","title":"Version 1.17.5"},{"location":"release_notes/old/v1.17/#version-1174","text":"Release date: Feb 14, 2023 Features: Support for Kubernetes' projected volumes (#1269) Support custom environment variables for finer control of the PostgreSQL server process (#1275) Enhancements: Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213)","title":"Version 1.17.4"},{"location":"release_notes/old/v1.17/#version-1173","text":"Release date: Dec 21, 2022 Important announcements: Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Improve compatibility with Istio: add support for Istio's quit endpoint so that jobs with Istio sidecars do not run indefinitely (#967) Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure the PVC containing WALs is deleted when scaling down the cluster (#1135) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166)","title":"Version 1.17.3"},{"location":"release_notes/old/v1.17/#version-1172","text":"Release date: Nov 10, 2022 Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: status command for the cnpg plugin: Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Set PostgreSQL 15.0 as the new default version (#821) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866)","title":"Version 1.17.2"},{"location":"release_notes/old/v1.17/#version-1171","text":"Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765) Ensure that timestamps that are specified with microsecond precision using the PostgreSQL format are correctly parsed (#741)","title":"Version 1.17.1"},{"location":"release_notes/old/v1.17/#version-1170","text":"Release date: Sep 6, 2022 (minor release) Features: Separate volume for WAL files: Support for separating Write Ahead Log (WAL) and database data files onto different disks, potentially leading to better performance on high write systems by easing I/O load on the data directory. This option is controlled with the introduction of the optional walStorage section to separate WAL files ( pg_wal ) in a dedicated volume, separate from the PGDATA defined in the main and mandatory storage section (#513). Current limitations: walStorage can only be set at cluster creation and cannot be added or removed when the cluster is up and running. Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Introduce the kubectl cnpg destroy command to help remove an instance and all the associated PVCs (#643) Fixes: Use shared_preload_libraries when bootstrapping the new cluster's primary (#642) Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641)","title":"Version 1.17.0"},{"location":"release_notes/old/v1.18/","text":"Release notes for CloudNativePG 1.18 History of user-visible changes in the 1.18 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.18.5 Release date: June 12, 2023 Warning This is expected to be the last release in the 1.18.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3s engine which could prevent setup on K3\u2019s (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242) Version 1.18.4 Release date: April 27, 2023 Important CloudNativePG is dropping support for PostgreSQL 10, as PostgreSQL 10 reached End-of-Life (EOL) in November 2022. Versions 11 and newer are supported. Please plan your migration to PostgreSQL 15 as soon as possible. Refer to \"Importing Postgres databases\" for more information on PostgreSQL major offline upgrades. Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858) Version 1.18.3 Release date: March 20, 2023 Enhancements: Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Enhance observability of backups with two new metrics and additional information in the status (#1428) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Inject binaries for all supported architectures in the operator image (#1513) Use the backup name to match resources in the backup object store (#1650) Leverages the --name option introduced with Barman 3.3 to make the association between backups and the object store more robust. Fixes: Prevent panic with error handling in the probes (#1716) Ensure that the HTTP package and controller runtime logs are in JSON format (#1442) Adds WAL storage to a cluster in a single instance Cluster (#1570) Various improvements to make backup code more robust (#1536, #1564, #1588, #1466, #1647) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Ensure nodeAffinity is applied even if AdditionalPodAffinity and AdditionalPodAntiAffinity are not set (#1663) Version 1.18.2 Release date: Feb 14, 2023 Enhancements: Introduce support for Kubernetes' projected volumes (#1269) Introduce support custom environment variables for finer control of the PostgreSQL server process (#1275) Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Improve support for the separate WAL volume feature by enabling users to move WAL files to a dedicated volume on an existing Postgres cluster (#1066) Enhance WAL observability with additional metrics for the Prometheus exporter, including values equivalent to the min_wal_size , max_wal_size , keep_wal_size , wal_keep_segments , as well as the maximum number of WALs that can be stored in the dedicated volume (#1382) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Skip executing a CHECKPOINT as the streaming_replica user (#1408) Make waitForWalArchiveWorking resilient to connection errors (#1399) Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Ensure ExecCommand obeys timeout (#1242) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213) Version 1.18.1 Release date: Dec 21, 2022 Important announcements: Alert on the impending deprecation of postgresql as a label to identify the CNPG cluster. In the remote case you have used this label, please start using the cnpg.io/cluster label instead (#1130) Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Customize labels and annotations for the service account: add a service account template that can be used, for example, to make authentication easier via identity management on GKE or EKS via IRSA (#1105) Add nodeAffinity support (#1182) - allows for richer scheduling options Improve compatibility with Istio: add support for Istio's quit endpoint so that jobs with Istio sidecars do not run indefinitely (#967) Allow fields remapping in JSON logs: helpful for use cases where the level and ts fields might interfere with the existing logging (#843) Add fio command to the kubectl-cnpg plugin (#1097) Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure the PVC containing WALs is deleted when scaling down the cluster (#1135) Fix missing ApiVersion and Kind in the pgbench manifest when using --dry-run (#1088) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166) Version 1.18.0 Release date: Nov 10, 2022 Features: Cluster-managed physical replication slots for High Availability : automatically manages physical replication slots for each hot standby replica in the High Availability cluster, both in the primary and the standby (#740) Postgres cluster hibernation : introduces cluster hibernation via the plugin, with a new subcommand kubectl cnpg hibernate on/off/status <cluster-name> . Hibernation destroys all the resources generated by the cluster, except the PVCs that belong to the PostgreSQL primary instance (#782) Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: Allow omitting the storage size in the cluster spec if there is a size request in the pvcTemplate (#914) status command for the cnpg plugin: Add replication slots information (#873) Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Updates to the End-to-End Test Suite page (#945) New subcommands in the cnpg plugin: pgbench generates a job definition executing pgbench against a cluster (#958) install generates an installation manifest for the operator (#944) Set PostgreSQL 15.0 as the new default version (#821) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866)","title":"Release notes for CloudNativePG 1.18"},{"location":"release_notes/old/v1.18/#release-notes-for-cloudnativepg-118","text":"History of user-visible changes in the 1.18 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.18"},{"location":"release_notes/old/v1.18/#version-1185","text":"Release date: June 12, 2023 Warning This is expected to be the last release in the 1.18.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3s engine which could prevent setup on K3\u2019s (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242)","title":"Version 1.18.5"},{"location":"release_notes/old/v1.18/#version-1184","text":"Release date: April 27, 2023 Important CloudNativePG is dropping support for PostgreSQL 10, as PostgreSQL 10 reached End-of-Life (EOL) in November 2022. Versions 11 and newer are supported. Please plan your migration to PostgreSQL 15 as soon as possible. Refer to \"Importing Postgres databases\" for more information on PostgreSQL major offline upgrades. Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858)","title":"Version 1.18.4"},{"location":"release_notes/old/v1.18/#version-1183","text":"Release date: March 20, 2023 Enhancements: Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Enhance observability of backups with two new metrics and additional information in the status (#1428) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Inject binaries for all supported architectures in the operator image (#1513) Use the backup name to match resources in the backup object store (#1650) Leverages the --name option introduced with Barman 3.3 to make the association between backups and the object store more robust. Fixes: Prevent panic with error handling in the probes (#1716) Ensure that the HTTP package and controller runtime logs are in JSON format (#1442) Adds WAL storage to a cluster in a single instance Cluster (#1570) Various improvements to make backup code more robust (#1536, #1564, #1588, #1466, #1647) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Ensure nodeAffinity is applied even if AdditionalPodAffinity and AdditionalPodAntiAffinity are not set (#1663)","title":"Version 1.18.3"},{"location":"release_notes/old/v1.18/#version-1182","text":"Release date: Feb 14, 2023 Enhancements: Introduce support for Kubernetes' projected volumes (#1269) Introduce support custom environment variables for finer control of the PostgreSQL server process (#1275) Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Improve support for the separate WAL volume feature by enabling users to move WAL files to a dedicated volume on an existing Postgres cluster (#1066) Enhance WAL observability with additional metrics for the Prometheus exporter, including values equivalent to the min_wal_size , max_wal_size , keep_wal_size , wal_keep_segments , as well as the maximum number of WALs that can be stored in the dedicated volume (#1382) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Skip executing a CHECKPOINT as the streaming_replica user (#1408) Make waitForWalArchiveWorking resilient to connection errors (#1399) Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Ensure ExecCommand obeys timeout (#1242) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213)","title":"Version 1.18.2"},{"location":"release_notes/old/v1.18/#version-1181","text":"Release date: Dec 21, 2022 Important announcements: Alert on the impending deprecation of postgresql as a label to identify the CNPG cluster. In the remote case you have used this label, please start using the cnpg.io/cluster label instead (#1130) Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Customize labels and annotations for the service account: add a service account template that can be used, for example, to make authentication easier via identity management on GKE or EKS via IRSA (#1105) Add nodeAffinity support (#1182) - allows for richer scheduling options Improve compatibility with Istio: add support for Istio's quit endpoint so that jobs with Istio sidecars do not run indefinitely (#967) Allow fields remapping in JSON logs: helpful for use cases where the level and ts fields might interfere with the existing logging (#843) Add fio command to the kubectl-cnpg plugin (#1097) Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure the PVC containing WALs is deleted when scaling down the cluster (#1135) Fix missing ApiVersion and Kind in the pgbench manifest when using --dry-run (#1088) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166)","title":"Version 1.18.1"},{"location":"release_notes/old/v1.18/#version-1180","text":"Release date: Nov 10, 2022 Features: Cluster-managed physical replication slots for High Availability : automatically manages physical replication slots for each hot standby replica in the High Availability cluster, both in the primary and the standby (#740) Postgres cluster hibernation : introduces cluster hibernation via the plugin, with a new subcommand kubectl cnpg hibernate on/off/status <cluster-name> . Hibernation destroys all the resources generated by the cluster, except the PVCs that belong to the PostgreSQL primary instance (#782) Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: Allow omitting the storage size in the cluster spec if there is a size request in the pvcTemplate (#914) status command for the cnpg plugin: Add replication slots information (#873) Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Updates to the End-to-End Test Suite page (#945) New subcommands in the cnpg plugin: pgbench generates a job definition executing pgbench against a cluster (#958) install generates an installation manifest for the operator (#944) Set PostgreSQL 15.0 as the new default version (#821) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866)","title":"Version 1.18.0"},{"location":"release_notes/old/v1.19/","text":"Release notes for CloudNativePG 1.19 History of user-visible changes in the 1.19 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.19.6 Release date: Nov 3, 2023 Warning This is expected to be the last release in the 1.19.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Changes: Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152) Version 1.19.5 Release date: Oct 11, 2023 Warning Version 1.19 will reach its End-of-Life (EOL) on November 9, 2023. If you haven't done it yet, please start planning an upgrade as soon as possible. Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin's status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606) Version 1.19.4 Release date: July 27, 2023 Enhancements: New logs command in the kubectl plugin, to retrieve or follow the logs of all pods in a cluster (#2375) Add support for specifying priorityClassName in pods, helping Kubernetes make scheduling decisions (#2043) Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257) Various enhancements to the documentation: Add troubleshooting instructions relating to hugepages (#1390) Extend the FAQs page (#2344) Technical enhancements: Add a check at the start of the restore process to ensure it can proceed; give improved error diagnostics if it cannot (#2419) Fixes: Ensure the logic of setting the recovery target matches that of Postgres (#2460) Prevent taking over service accounts not owned by the cluster, by setting ownerMetadata only during service account creation (#2462) Ensure correct permissions of the PGDATA directory for initdb and restore (#2384) Prevent a possible crash of the instance manager during the configuration reload (#2393) Prevent the LastFailedArchiveTime alert from triggering if a new backup has been successful after the failed ones (#1751) Prevent services from targeting non-instance pods (#2336) Security: Updated all project dependencies to the latest versions Version 1.19.3 Release date: June 12, 2023 Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3d engine which could prevent setup on k3d (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242) Version 1.19.2 Release date: April 27, 2023 Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858) Version 1.19.1 Release date: March 20, 2023 Enhancements: Allow overriding the default backup target policy (#1602): previously, all backups and scheduled backups would use the cluster-level target policy Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Enhance observability of backups with two new metrics and additional information in the status (#1428) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Inject binaries for all supported architectures in the operator image (#1513) Use the backup name to match resources in the backup object store (#1650) Leverages the --name option introduced with Barman 3.3 to make the association between backups and the object store more robust. Fixes: Prevent panic with error handling in the probes (#1716) Ensure that the HTTP package and controller runtime logs are in JSON format (#1442) Adds WAL storage to a cluster in a single instance Cluster (#1570) Various improvements to make backup code more robust (#1536, #1564, #1588, #1466, #1647) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Ensure nodeAffinity is applied even if AdditionalPodAffinity and AdditionalPodAntiAffinity are not set (#1663) Introduce failover delay during OnlineUpgrading phase (#1728) Previously, the online upgrade process could trigger failover logic unnecessarily. Version 1.19.0 Release date: Feb 14, 2023 Important announcements: PostgreSQL version 10 is no longer supported as it has reached its EOL. Versions 11 and newer are supported. Please plan your migration to PostgreSQL 15 as soon as possible. Refer to \"Importing Postgres databases\" for more information on PostgreSQL major offline upgrades. Features: Backup from a standby: introduce the .spec.backup.target option accepting that when set to prefer-standby will run take the physical base backup from the most aligned replica (#1162) Delayed failover: introduce the failoverDelay parameter to delay the failover process once the primary has been detected unhealthy (#1366) Enhancements: Introduce support for Kubernetes' projected volumes (#1269) Introduce support custom environment variables for finer control of the PostgreSQL server process (#1275) Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Improve support for the separate WAL volume feature by enabling users to move WAL files to a dedicated volume on an existing Postgres cluster (#1066) Enhance WAL observability with additional metrics for the Prometheus exporter, including values equivalent to the min_wal_size , max_wal_size , keep_wal_size , wal_keep_segments , as well as the maximum number of WALs that can be stored in the dedicated volume (#1382) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Update default PostgreSQL version for new cluster definitions to 15.2 (#1430) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Skip executing a CHECKPOINT as the streaming_replica user (#1408) Make waitForWalArchiveWorking resilient to connection errors (#1399) Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Ensure ExecCommand obeys timeout (#1242) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213)","title":"Release notes for CloudNativePG 1.19"},{"location":"release_notes/old/v1.19/#release-notes-for-cloudnativepg-119","text":"History of user-visible changes in the 1.19 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.19"},{"location":"release_notes/old/v1.19/#version-1196","text":"Release date: Nov 3, 2023 Warning This is expected to be the last release in the 1.19.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Changes: Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152)","title":"Version 1.19.6"},{"location":"release_notes/old/v1.19/#version-1195","text":"Release date: Oct 11, 2023 Warning Version 1.19 will reach its End-of-Life (EOL) on November 9, 2023. If you haven't done it yet, please start planning an upgrade as soon as possible. Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin's status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606)","title":"Version 1.19.5"},{"location":"release_notes/old/v1.19/#version-1194","text":"Release date: July 27, 2023 Enhancements: New logs command in the kubectl plugin, to retrieve or follow the logs of all pods in a cluster (#2375) Add support for specifying priorityClassName in pods, helping Kubernetes make scheduling decisions (#2043) Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257) Various enhancements to the documentation: Add troubleshooting instructions relating to hugepages (#1390) Extend the FAQs page (#2344) Technical enhancements: Add a check at the start of the restore process to ensure it can proceed; give improved error diagnostics if it cannot (#2419) Fixes: Ensure the logic of setting the recovery target matches that of Postgres (#2460) Prevent taking over service accounts not owned by the cluster, by setting ownerMetadata only during service account creation (#2462) Ensure correct permissions of the PGDATA directory for initdb and restore (#2384) Prevent a possible crash of the instance manager during the configuration reload (#2393) Prevent the LastFailedArchiveTime alert from triggering if a new backup has been successful after the failed ones (#1751) Prevent services from targeting non-instance pods (#2336) Security: Updated all project dependencies to the latest versions","title":"Version 1.19.4"},{"location":"release_notes/old/v1.19/#version-1193","text":"Release date: June 12, 2023 Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3d engine which could prevent setup on k3d (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242)","title":"Version 1.19.3"},{"location":"release_notes/old/v1.19/#version-1192","text":"Release date: April 27, 2023 Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858)","title":"Version 1.19.2"},{"location":"release_notes/old/v1.19/#version-1191","text":"Release date: March 20, 2023 Enhancements: Allow overriding the default backup target policy (#1602): previously, all backups and scheduled backups would use the cluster-level target policy Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Enhance observability of backups with two new metrics and additional information in the status (#1428) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Inject binaries for all supported architectures in the operator image (#1513) Use the backup name to match resources in the backup object store (#1650) Leverages the --name option introduced with Barman 3.3 to make the association between backups and the object store more robust. Fixes: Prevent panic with error handling in the probes (#1716) Ensure that the HTTP package and controller runtime logs are in JSON format (#1442) Adds WAL storage to a cluster in a single instance Cluster (#1570) Various improvements to make backup code more robust (#1536, #1564, #1588, #1466, #1647) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Ensure nodeAffinity is applied even if AdditionalPodAffinity and AdditionalPodAntiAffinity are not set (#1663) Introduce failover delay during OnlineUpgrading phase (#1728) Previously, the online upgrade process could trigger failover logic unnecessarily.","title":"Version 1.19.1"},{"location":"release_notes/old/v1.19/#version-1190","text":"Release date: Feb 14, 2023 Important announcements: PostgreSQL version 10 is no longer supported as it has reached its EOL. Versions 11 and newer are supported. Please plan your migration to PostgreSQL 15 as soon as possible. Refer to \"Importing Postgres databases\" for more information on PostgreSQL major offline upgrades. Features: Backup from a standby: introduce the .spec.backup.target option accepting that when set to prefer-standby will run take the physical base backup from the most aligned replica (#1162) Delayed failover: introduce the failoverDelay parameter to delay the failover process once the primary has been detected unhealthy (#1366) Enhancements: Introduce support for Kubernetes' projected volumes (#1269) Introduce support custom environment variables for finer control of the PostgreSQL server process (#1275) Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Improve support for the separate WAL volume feature by enabling users to move WAL files to a dedicated volume on an existing Postgres cluster (#1066) Enhance WAL observability with additional metrics for the Prometheus exporter, including values equivalent to the min_wal_size , max_wal_size , keep_wal_size , wal_keep_segments , as well as the maximum number of WALs that can be stored in the dedicated volume (#1382) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Update default PostgreSQL version for new cluster definitions to 15.2 (#1430) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Skip executing a CHECKPOINT as the streaming_replica user (#1408) Make waitForWalArchiveWorking resilient to connection errors (#1399) Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Ensure ExecCommand obeys timeout (#1242) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213)","title":"Version 1.19.0"},{"location":"release_notes/old/v1.20/","text":"Release notes for CloudNativePG 1.20 History of user-visible changes in the 1.20 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.20.6 Release date: Feb 2, 2024 Warning This is expected to be the last release in the 1.20.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Version 1.20.5 Release date: Dec 21, 2023 Security: By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300). Enhancements: Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270). Version 1.20.4 Release date: Nov 3, 2023 Enhancements: Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Changes: Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152) Version 1.20.3 Release date: Oct 11, 2023 Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin\u2019s status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL\u2019s fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Replace the cnpg snapshot command with cnpg backup -m volumeSnapshot for the kubectl plugin Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606) Version 1.20.2 Release date: July 27, 2023 Enhancements: New logs command in the kubectl plugin, to retrieve or follow the logs of all pods in a cluster (#2375) Add support for specifying priorityClassName in pods, helping Kubernetes make scheduling decisions (#2043) Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257) Various enhancements to the documentation: Add troubleshooting instructions relating to hugepages (#1390) Extend the FAQs page (#2344) Technical enhancements: Add a check at the start of the restore process to ensure it can proceed; give improved error diagnostics if it cannot (#2419) Improve handling of non-expiring passwords in managed roles (#2334) Fixes: Ensure the logic of setting the recovery target matches that of Postgres (#2460) Prevent taking over service accounts not owned by the cluster, by setting ownerMetadata only during service account creation (#2462) Ensure correct permissions of the PGDATA directory for initdb and restore (#2384) Prevent a possible crash of the instance manager during the configuration reload (#2393) Prevent the LastFailedArchiveTime alert from triggering if a new backup has been successful after the failed ones (#1751) Prevent services from targeting non-instance pods (#2336) Security: Updated all project dependencies to the latest versions Version 1.20.1 Release date: June 12, 2023 Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Declarative roles should ignore passwords if not set, easing management of previously existing roles (#2029) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3s engine which could prevent setup on K3\u2019s (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242) Version 1.20.0 Release date: April 27, 2023 Important changes from previous versions CloudNativePG 1.20 introduces some changes to the default behavior of a few features for newly created Cluster resources, compared to previous versions of the operator. The goal of these changes is to improve the resilience of a Postgres cluster out of the box through convention over configuration. For clusters with one or more replicas: Backup from standby is now enabled by default, unless target is explicitly set to primary Restart of the primary is now the default method to complete the unsupervised rolling update procedure ( primaryUpdateMethod defaults to restart , unless explicitly set to switchover ) For further information, please refer to the \"Installation and upgrades\" section. Features: Declarative role management: introduce the managed.roles stanza in the Cluster spec to provide full lifecycle management of database roles, by providing an abstraction to the related DDL commands in PostgreSQL, such as CREATE ROLE and ALTER ROLE (#1524, #1793 and #1815) Declarative hibernation of a PostgreSQL cluster: introduce a new annotation called cnpg.io/hibernation to declaratively hibernate a PostgreSQL cluster by deleting all pods and keeping the PVCs only; the feature also implements the inverse procedure (#1657) Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858)","title":"Release notes for CloudNativePG 1.20"},{"location":"release_notes/old/v1.20/#release-notes-for-cloudnativepg-120","text":"History of user-visible changes in the 1.20 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.20"},{"location":"release_notes/old/v1.20/#version-1206","text":"Release date: Feb 2, 2024 Warning This is expected to be the last release in the 1.20.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647)","title":"Version 1.20.6"},{"location":"release_notes/old/v1.20/#version-1205","text":"Release date: Dec 21, 2023 Security: By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300). Enhancements: Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270).","title":"Version 1.20.5"},{"location":"release_notes/old/v1.20/#version-1204","text":"Release date: Nov 3, 2023 Enhancements: Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Changes: Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152)","title":"Version 1.20.4"},{"location":"release_notes/old/v1.20/#version-1203","text":"Release date: Oct 11, 2023 Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin\u2019s status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL\u2019s fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Replace the cnpg snapshot command with cnpg backup -m volumeSnapshot for the kubectl plugin Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606)","title":"Version 1.20.3"},{"location":"release_notes/old/v1.20/#version-1202","text":"Release date: July 27, 2023 Enhancements: New logs command in the kubectl plugin, to retrieve or follow the logs of all pods in a cluster (#2375) Add support for specifying priorityClassName in pods, helping Kubernetes make scheduling decisions (#2043) Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257) Various enhancements to the documentation: Add troubleshooting instructions relating to hugepages (#1390) Extend the FAQs page (#2344) Technical enhancements: Add a check at the start of the restore process to ensure it can proceed; give improved error diagnostics if it cannot (#2419) Improve handling of non-expiring passwords in managed roles (#2334) Fixes: Ensure the logic of setting the recovery target matches that of Postgres (#2460) Prevent taking over service accounts not owned by the cluster, by setting ownerMetadata only during service account creation (#2462) Ensure correct permissions of the PGDATA directory for initdb and restore (#2384) Prevent a possible crash of the instance manager during the configuration reload (#2393) Prevent the LastFailedArchiveTime alert from triggering if a new backup has been successful after the failed ones (#1751) Prevent services from targeting non-instance pods (#2336) Security: Updated all project dependencies to the latest versions","title":"Version 1.20.2"},{"location":"release_notes/old/v1.20/#version-1201","text":"Release date: June 12, 2023 Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Declarative roles should ignore passwords if not set, easing management of previously existing roles (#2029) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3s engine which could prevent setup on K3\u2019s (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242)","title":"Version 1.20.1"},{"location":"release_notes/old/v1.20/#version-1200","text":"Release date: April 27, 2023 Important changes from previous versions CloudNativePG 1.20 introduces some changes to the default behavior of a few features for newly created Cluster resources, compared to previous versions of the operator. The goal of these changes is to improve the resilience of a Postgres cluster out of the box through convention over configuration. For clusters with one or more replicas: Backup from standby is now enabled by default, unless target is explicitly set to primary Restart of the primary is now the default method to complete the unsupervised rolling update procedure ( primaryUpdateMethod defaults to restart , unless explicitly set to switchover ) For further information, please refer to the \"Installation and upgrades\" section. Features: Declarative role management: introduce the managed.roles stanza in the Cluster spec to provide full lifecycle management of database roles, by providing an abstraction to the related DDL commands in PostgreSQL, such as CREATE ROLE and ALTER ROLE (#1524, #1793 and #1815) Declarative hibernation of a PostgreSQL cluster: introduce a new annotation called cnpg.io/hibernation to declaratively hibernate a PostgreSQL cluster by deleting all pods and keeping the PVCs only; the feature also implements the inverse procedure (#1657) Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858)","title":"Version 1.20.0"},{"location":"release_notes/old/v1.21/","text":"Release notes for CloudNativePG 1.21 History of user-visible changes in the 1.21 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.21.6 Release date: Jun 12, 2024 Warning This is expected to be the last release in the 1.21.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602) Fixes: Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530) Changes Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753) Version 1.21.5 Release date: Apr 24, 2024 Enhancements: Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101) Fixes: Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346) Changes: The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154) Version 1.21.4 Release date: Mar 14, 2024 Enhancements Allow customization of the wal_level GUC in PostgreSQL (#4020) Add the cnpg.io/skipWalArchiving annotation to disable WAL archiving when set to enabled (#4055) Enrich the cnpg plugin for kubectl with the publication and subscription command groups to imperatively set up PostgreSQL native logical replication (#4052) Allow customization of CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD for automated management of TLS certificates handled by the operator (#3686) Introduce initial support for tab-completion with the cnpg plugin for kubectl (#3875) Retrieve the correct architecture's binary from the corresponding catalog in the running operator image during in-place updates, enabling the operator to inject the correct binary into any Pod with a supported architecture (#3840) Fixes Properly synchronize PVC group labels with those on the pods, a critical aspect when all pods are deleted and the operator needs to decide which Pod to recreate first (#3930) Disable wal_sender_timeout when cloning a replica to prevent timeout errors due to slow connections (#4080) Ensure that volume snapshots are ready before initiating recovery bootstrap procedures, preventing an error condition where recovery with incomplete backups could enter an error loop (#3663) Prevent an error loop when unsetting connection limits in managed roles (#3832) Resolve a corner case in hibernation where the instance pod has been deleted, but the cluster status still has the hibernation condition set to false (#3970) Correctly detect Google Cloud capabilities for Barman Cloud (#3931) Security Use Role instead of ClusterRole for operator permissions in OLM, requiring fewer privileges when installed on a per-namespace basis (#3855, #3990) Enforce fully-qualified object names in SQL queries for the PgBouncer pooler (#4080) Changes Follow Kubernetes recommendations to switch from client-side to server-side application of manifests, requiring the --server-side option by default when installing the operator (#3729). Set the default operand image to PostgreSQL 16.2 (#3823). Version 1.21.3 Release date: Feb 2, 2024 Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Ensure configuration coherence by pruning from postgresql.auto.conf any options now incorporated into override.conf (#3773) Version 1.21.2 Release date: Dec 21, 2023 Security: By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300). Enhancements: Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Enhanced computation of the first recoverability point and last successful backup by considering volume snapshots alongside object-store backups (#2940). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Introduction of Red Hat UBI 8 container images for the operator, suitable for OLM deployments. Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270). Version 1.21.1 Release date: Nov 3, 2023 Enhancements: Introduce support for online/hot backups with volume snapshots by using the PostgreSQL API for physical online base backups. Default configuration for hot/cold backups on a given Postgres cluster can be controlled through the online option and the onlineConfiguration stanza in .spec.backup.volumeSnapshot . Unless explicitly set, backups on volume snapshots are now taken online by default (#3102) Introduce the possibility to override the above default settings on volume snapshot backup using the ScheduledBackup and Backup resources (#3208, #3226) Enhance cold backup on volume snapshots by reducing the time window in which the target instance (standby or primary) is fenced, by lifting it as soon as the volume snapshot have been cut and provisioned (#3210) During a recovery from volume snapshots, ensure that the provided volume snapshots are coherent by validating the existing labels and annotations The backup command of the cnpg plugin for kubectl improves the volume snapshot backup experience through the --online , --immediate-checkpoint , and --wait-for-archive runtime options Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Reduce the number of labels in VolumeSnapshots resources and render them into more appropriate annotations (#3151) Changes: Volume snapshot backups, introduced in 1.21.0, are now online/hot by default; in order to restore offline/cold backups set .spec.backup.volumeSnapshot to false Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152) Version 1.21.0 Release date: Oct 12, 2023 Important changes from previous versions This release contains a few changes to the default settings of CloudNativePG with the goal to improve general stability and security through predefined values. If you are upgrading from a previous version, please carefully read the \"Important Changes\" section below, as well as the upgrade documentation. Features: Volume Snapshot support for backup and recovery: leverage the standard Kubernetes API on Volume Snapshots to take advantage of capabilities like incremental and differential copy for both backup and recovery operations. This first step, covering cold backups from a standby, will continue in 1.22 with support for hot backups using the PostgreSQL API and tablespaces. OLM installation method : introduce support for Operator Lifecycle Manager via OperatorHub.io for the latest patch version of the latest minor release through the stable channel. Many thanks to EDB for donating the bundle of their \"EDB Postgres for Kubernetes\" operator and adapting it for CloudNativePG. Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Disable superuser access by default for security (#2905) Enable replication slots for HA by default (#2903) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Enable bootstrap of a replica cluster from a consistent set of volume snapshots (#2647) Enable full and Point In Time recovery from a consistent set of volume snapshots (#2390) Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin's status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Replace the cnpg snapshot command with cnpg backup -m volumeSnapshot for the kubectl plugin Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606)","title":"Release notes for CloudNativePG 1.21"},{"location":"release_notes/old/v1.21/#release-notes-for-cloudnativepg-121","text":"History of user-visible changes in the 1.21 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.21"},{"location":"release_notes/old/v1.21/#version-1216","text":"Release date: Jun 12, 2024 Warning This is expected to be the last release in the 1.21.X series. Users are encouraged to update to a newer minor version soon.","title":"Version 1.21.6"},{"location":"release_notes/old/v1.21/#enhancements","text":"Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes","text":"Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes","text":"Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753)","title":"Changes"},{"location":"release_notes/old/v1.21/#version-1215","text":"Release date: Apr 24, 2024","title":"Version 1.21.5"},{"location":"release_notes/old/v1.21/#enhancements_1","text":"Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_1","text":"Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes_1","text":"The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154)","title":"Changes:"},{"location":"release_notes/old/v1.21/#version-1214","text":"Release date: Mar 14, 2024","title":"Version 1.21.4"},{"location":"release_notes/old/v1.21/#enhancements_2","text":"Allow customization of the wal_level GUC in PostgreSQL (#4020) Add the cnpg.io/skipWalArchiving annotation to disable WAL archiving when set to enabled (#4055) Enrich the cnpg plugin for kubectl with the publication and subscription command groups to imperatively set up PostgreSQL native logical replication (#4052) Allow customization of CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD for automated management of TLS certificates handled by the operator (#3686) Introduce initial support for tab-completion with the cnpg plugin for kubectl (#3875) Retrieve the correct architecture's binary from the corresponding catalog in the running operator image during in-place updates, enabling the operator to inject the correct binary into any Pod with a supported architecture (#3840)","title":"Enhancements"},{"location":"release_notes/old/v1.21/#fixes_2","text":"Properly synchronize PVC group labels with those on the pods, a critical aspect when all pods are deleted and the operator needs to decide which Pod to recreate first (#3930) Disable wal_sender_timeout when cloning a replica to prevent timeout errors due to slow connections (#4080) Ensure that volume snapshots are ready before initiating recovery bootstrap procedures, preventing an error condition where recovery with incomplete backups could enter an error loop (#3663) Prevent an error loop when unsetting connection limits in managed roles (#3832) Resolve a corner case in hibernation where the instance pod has been deleted, but the cluster status still has the hibernation condition set to false (#3970) Correctly detect Google Cloud capabilities for Barman Cloud (#3931)","title":"Fixes"},{"location":"release_notes/old/v1.21/#security","text":"Use Role instead of ClusterRole for operator permissions in OLM, requiring fewer privileges when installed on a per-namespace basis (#3855, #3990) Enforce fully-qualified object names in SQL queries for the PgBouncer pooler (#4080)","title":"Security"},{"location":"release_notes/old/v1.21/#changes_2","text":"Follow Kubernetes recommendations to switch from client-side to server-side application of manifests, requiring the --server-side option by default when installing the operator (#3729). Set the default operand image to PostgreSQL 16.2 (#3823).","title":"Changes"},{"location":"release_notes/old/v1.21/#version-1213","text":"Release date: Feb 2, 2024","title":"Version 1.21.3"},{"location":"release_notes/old/v1.21/#enhancements_3","text":"Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_3","text":"Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Ensure configuration coherence by pruning from postgresql.auto.conf any options now incorporated into override.conf (#3773)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#version-1212","text":"Release date: Dec 21, 2023","title":"Version 1.21.2"},{"location":"release_notes/old/v1.21/#security_1","text":"By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300).","title":"Security:"},{"location":"release_notes/old/v1.21/#enhancements_4","text":"Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Enhanced computation of the first recoverability point and last successful backup by considering volume snapshots alongside object-store backups (#2940). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Introduction of Red Hat UBI 8 container images for the operator, suitable for OLM deployments. Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396).","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_4","text":"Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350).","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes_3","text":"Default operand image set to PostgreSQL 16.1 (#3270).","title":"Changes:"},{"location":"release_notes/old/v1.21/#version-1211","text":"Release date: Nov 3, 2023","title":"Version 1.21.1"},{"location":"release_notes/old/v1.21/#enhancements_5","text":"Introduce support for online/hot backups with volume snapshots by using the PostgreSQL API for physical online base backups. Default configuration for hot/cold backups on a given Postgres cluster can be controlled through the online option and the onlineConfiguration stanza in .spec.backup.volumeSnapshot . Unless explicitly set, backups on volume snapshots are now taken online by default (#3102) Introduce the possibility to override the above default settings on volume snapshot backup using the ScheduledBackup and Backup resources (#3208, #3226) Enhance cold backup on volume snapshots by reducing the time window in which the target instance (standby or primary) is fenced, by lifting it as soon as the volume snapshot have been cut and provisioned (#3210) During a recovery from volume snapshots, ensure that the provided volume snapshots are coherent by validating the existing labels and annotations The backup command of the cnpg plugin for kubectl improves the volume snapshot backup experience through the --online , --immediate-checkpoint , and --wait-for-archive runtime options Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_5","text":"Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Reduce the number of labels in VolumeSnapshots resources and render them into more appropriate annotations (#3151)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes_4","text":"Volume snapshot backups, introduced in 1.21.0, are now online/hot by default; in order to restore offline/cold backups set .spec.backup.volumeSnapshot to false Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812)","title":"Changes:"},{"location":"release_notes/old/v1.21/#technical-enhancements","text":"Use extended query protocol for PostgreSQL in the instance manager (#3152)","title":"Technical enhancements:"},{"location":"release_notes/old/v1.21/#version-1210","text":"Release date: Oct 12, 2023 Important changes from previous versions This release contains a few changes to the default settings of CloudNativePG with the goal to improve general stability and security through predefined values. If you are upgrading from a previous version, please carefully read the \"Important Changes\" section below, as well as the upgrade documentation.","title":"Version 1.21.0"},{"location":"release_notes/old/v1.21/#features","text":"Volume Snapshot support for backup and recovery: leverage the standard Kubernetes API on Volume Snapshots to take advantage of capabilities like incremental and differential copy for both backup and recovery operations. This first step, covering cold backups from a standby, will continue in 1.22 with support for hot backups using the PostgreSQL API and tablespaces. OLM installation method : introduce support for Operator Lifecycle Manager via OperatorHub.io for the latest patch version of the latest minor release through the stable channel. Many thanks to EDB for donating the bundle of their \"EDB Postgres for Kubernetes\" operator and adapting it for CloudNativePG.","title":"Features:"},{"location":"release_notes/old/v1.21/#important-changes","text":"Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Disable superuser access by default for security (#2905) Enable replication slots for HA by default (#2903) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744)","title":"Important Changes:"},{"location":"release_notes/old/v1.21/#security_2","text":"Add a default seccompProfile to the operator deployment (#2926)","title":"Security:"},{"location":"release_notes/old/v1.21/#enhancements_6","text":"Enable bootstrap of a replica cluster from a consistent set of volume snapshots (#2647) Enable full and Point In Time recovery from a consistent set of volume snapshots (#2390) Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin's status command (#2953)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_6","text":"Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes_5","text":"Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Replace the cnpg snapshot command with cnpg backup -m volumeSnapshot for the kubectl plugin Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915)","title":"Changes:"},{"location":"release_notes/old/v1.21/#technical-enhancements_1","text":"Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606)","title":"Technical enhancements:"},{"location":"release_notes/old/v1.22/","text":"Release notes for CloudNativePG 1.22 History of user-visible changes in the 1.22 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.22.5 Release date: Jul 29, 2024 Warning This is expected to be the last release in the 1.22.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044). Fixes: Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915). Version 1.22.4 Release date: Jun 12, 2024 Warning Version 1.22 is approaching its End-of-Life (EOL) on Jul 24, 2024. If you haven't already, please begin planning for an upgrade promptly to ensure continued support and security. Enhancements: Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602) Fixes: Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530) Changes Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753) Version 1.22.3 Release date: Apr 24, 2024 Enhancements: Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101) Fixes: Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346) Changes: The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154) Version 1.22.2 Release date: Mar 14, 2024 Enhancements Allow customization of the wal_level GUC in PostgreSQL (#4020) Add the cnpg.io/skipWalArchiving annotation to disable WAL archiving when set to enabled (#4055) Enrich the cnpg plugin for kubectl with the publication and subscription command groups to imperatively set up PostgreSQL native logical replication (#4052) Allow customization of CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD for automated management of TLS certificates handled by the operator (#3686) Retrieve the correct architecture's binary from the corresponding catalog in the running operator image during in-place updates, enabling the operator to inject the correct binary into any Pod with a supported architecture (#3840) Introduce initial support for tab-completion with the cnpg plugin for kubectl (#3875) Fixes Properly synchronize PVC group labels with those on the pods, a critical aspect when all pods are deleted and the operator needs to decide which Pod to recreate first (#3930) Disable wal_sender_timeout when cloning a replica to prevent timeout errors due to slow connections (#4080) Ensure that volume snapshots are ready before initiating recovery bootstrap procedures, preventing an error condition where recovery with incomplete backups could enter an error loop (#3663) Prevent an error loop when unsetting connection limits in managed roles (#3832) Resolve a corner case in hibernation where the instance pod has been deleted, but the cluster status still has the hibernation condition set to false (#3970) Correctly detect Google Cloud capabilities for Barman Cloud (#3931) Security Use Role instead of ClusterRole for operator permissions in OLM, requiring fewer privileges when installed on a per-namespace basis (#3855, #3990) Enforce fully-qualified object names in SQL queries for the PgBouncer pooler (#4080) Changes Follow Kubernetes recommendations to switch from client-side to server-side application of manifests, requiring the --server-side option by default when installing the operator (#3729). Set the default operand image to PostgreSQL 16.2 (#3823). Version 1.22.1 Release date: Feb 2, 2024 Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Proper recovery of tablespaces from volume snapshots (#3682) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Ensure configuration coherence by pruning from postgresql.auto.conf any options now incorporated into override.conf (#3773) Version 1.22.0 Release date: Dec 21, 2023 Important changes from previous versions This release introduces a significant change, disabling the default usage of the ALTER SYSTEM command in PostgreSQL. For users upgrading from a previous version who wish to retain the old behavior: please refer to the upgrade documentation for detailed instructions. Features: Declarative Tablespaces : Introducing the tablespaces stanza in the Cluster spec, enabling comprehensive lifecycle management of PostgreSQL tablespaces for enhanced vertical scalability (#3410). Temporary Tablespaces : Adding the .spec.tablespaces[*].temporary option to facilitate the utilization of a tablespace for temporary database operations, by incorporating the name into the temp_tablespaces PostgreSQL parameter (#3464). Security: By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300). Enhancements: Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Enhanced computation of the first recoverability point and last successful backup by considering volume snapshots alongside object-store backups (#2940). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Introduction of Red Hat UBI 8 container images for the operator, suitable for OLM deployments. Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270). The ALTER SYSTEM command is now disabled by default (#3545).","title":"Release notes for CloudNativePG 1.22"},{"location":"release_notes/old/v1.22/#release-notes-for-cloudnativepg-122","text":"History of user-visible changes in the 1.22 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.22"},{"location":"release_notes/old/v1.22/#version-1225","text":"Release date: Jul 29, 2024 Warning This is expected to be the last release in the 1.22.X series. Users are encouraged to update to a newer minor version soon.","title":"Version 1.22.5"},{"location":"release_notes/old/v1.22/#enhancements","text":"Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044).","title":"Enhancements:"},{"location":"release_notes/old/v1.22/#fixes","text":"Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915).","title":"Fixes:"},{"location":"release_notes/old/v1.22/#version-1224","text":"Release date: Jun 12, 2024 Warning Version 1.22 is approaching its End-of-Life (EOL) on Jul 24, 2024. If you haven't already, please begin planning for an upgrade promptly to ensure continued support and security.","title":"Version 1.22.4"},{"location":"release_notes/old/v1.22/#enhancements_1","text":"Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602)","title":"Enhancements:"},{"location":"release_notes/old/v1.22/#fixes_1","text":"Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530)","title":"Fixes:"},{"location":"release_notes/old/v1.22/#changes","text":"Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753)","title":"Changes"},{"location":"release_notes/old/v1.22/#version-1223","text":"Release date: Apr 24, 2024","title":"Version 1.22.3"},{"location":"release_notes/old/v1.22/#enhancements_2","text":"Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101)","title":"Enhancements:"},{"location":"release_notes/old/v1.22/#fixes_2","text":"Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346)","title":"Fixes:"},{"location":"release_notes/old/v1.22/#changes_1","text":"The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154)","title":"Changes:"},{"location":"release_notes/old/v1.22/#version-1222","text":"Release date: Mar 14, 2024","title":"Version 1.22.2"},{"location":"release_notes/old/v1.22/#enhancements_3","text":"Allow customization of the wal_level GUC in PostgreSQL (#4020) Add the cnpg.io/skipWalArchiving annotation to disable WAL archiving when set to enabled (#4055) Enrich the cnpg plugin for kubectl with the publication and subscription command groups to imperatively set up PostgreSQL native logical replication (#4052) Allow customization of CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD for automated management of TLS certificates handled by the operator (#3686) Retrieve the correct architecture's binary from the corresponding catalog in the running operator image during in-place updates, enabling the operator to inject the correct binary into any Pod with a supported architecture (#3840) Introduce initial support for tab-completion with the cnpg plugin for kubectl (#3875)","title":"Enhancements"},{"location":"release_notes/old/v1.22/#fixes_3","text":"Properly synchronize PVC group labels with those on the pods, a critical aspect when all pods are deleted and the operator needs to decide which Pod to recreate first (#3930) Disable wal_sender_timeout when cloning a replica to prevent timeout errors due to slow connections (#4080) Ensure that volume snapshots are ready before initiating recovery bootstrap procedures, preventing an error condition where recovery with incomplete backups could enter an error loop (#3663) Prevent an error loop when unsetting connection limits in managed roles (#3832) Resolve a corner case in hibernation where the instance pod has been deleted, but the cluster status still has the hibernation condition set to false (#3970) Correctly detect Google Cloud capabilities for Barman Cloud (#3931)","title":"Fixes"},{"location":"release_notes/old/v1.22/#security","text":"Use Role instead of ClusterRole for operator permissions in OLM, requiring fewer privileges when installed on a per-namespace basis (#3855, #3990) Enforce fully-qualified object names in SQL queries for the PgBouncer pooler (#4080)","title":"Security"},{"location":"release_notes/old/v1.22/#changes_2","text":"Follow Kubernetes recommendations to switch from client-side to server-side application of manifests, requiring the --server-side option by default when installing the operator (#3729). Set the default operand image to PostgreSQL 16.2 (#3823).","title":"Changes"},{"location":"release_notes/old/v1.22/#version-1221","text":"Release date: Feb 2, 2024 Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Proper recovery of tablespaces from volume snapshots (#3682) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Ensure configuration coherence by pruning from postgresql.auto.conf any options now incorporated into override.conf (#3773)","title":"Version 1.22.1"},{"location":"release_notes/old/v1.22/#version-1220","text":"Release date: Dec 21, 2023 Important changes from previous versions This release introduces a significant change, disabling the default usage of the ALTER SYSTEM command in PostgreSQL. For users upgrading from a previous version who wish to retain the old behavior: please refer to the upgrade documentation for detailed instructions.","title":"Version 1.22.0"},{"location":"release_notes/old/v1.22/#features","text":"Declarative Tablespaces : Introducing the tablespaces stanza in the Cluster spec, enabling comprehensive lifecycle management of PostgreSQL tablespaces for enhanced vertical scalability (#3410). Temporary Tablespaces : Adding the .spec.tablespaces[*].temporary option to facilitate the utilization of a tablespace for temporary database operations, by incorporating the name into the temp_tablespaces PostgreSQL parameter (#3464).","title":"Features:"},{"location":"release_notes/old/v1.22/#security_1","text":"By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300).","title":"Security:"},{"location":"release_notes/old/v1.22/#enhancements_4","text":"Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Enhanced computation of the first recoverability point and last successful backup by considering volume snapshots alongside object-store backups (#2940). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Introduction of Red Hat UBI 8 container images for the operator, suitable for OLM deployments. Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270). The ALTER SYSTEM command is now disabled by default (#3545).","title":"Enhancements:"},{"location":"release_notes/old/v1.23/","text":"Release notes for CloudNativePG 1.23 History of user-visible changes in the 1.23 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.23.6 Release Date: December 23, 2024 Warning This is the final release in the 1.23.x series. Users are strongly encouraged to upgrade to a newer minor version, as 1.23 is no longer supported. Enhancements Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Honor the User-Agent header in HTTP requests with the API server. (#6153) Bug Fixes Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998) Version 1.23.5 Release date: Oct 16, 2024 Enhancements: Remove the use of pg_database_size from the status probe, as it caused high resource utilization by scanning the entire PGDATA directory to compute database sizes. The kubectl status plugin will now rely on du to provide detailed size information retrieval (#5689). Add the ability to configure the full_page_writes parameter in PostgreSQL. This setting defaults to on , in line with PostgreSQL's recommendations (#5516). Plugin: Add the logs pretty command in the cnpg plugin to read a log stream from standard input and output a human-readable format, with options to filter log entries (#5770) Enhance the status command by allowing multiple -v options to increase verbosity for more detailed output (#5765). Add support for specifying a custom Docker image using the --image flag in the pgadmin4 plugin command, giving users control over the Docker image used for pgAdmin4 deployments (#5515). Fixes: Resolve an issue with concurrent status updates when demoting a primary to a designated primary, ensuring smoother transitions during cluster role changes (#5755). Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down to two instances, enabling easier maintenance on the node hosting the replica (#5487). Prioritize full rollout over inplace restarts (#5407). Fix an issue that could lead to double failover in cases of lost connectivity (#5788). Correctly set the TMPDIR and PSQL_HISTORY environment variables for pods and jobs, improving temporary file and history management (#5503). Plugin: Resolve a race condition in the logs cluster command (#5775). Display the potential sync status in the status plugin (#5533). Fix the issue where pods deployed by the pgadmin4 command didn\u2019t have a writable home directory (#5800). Supported versions PostgreSQL 17 (PostgreSQL 17.0 is the default image) Version 1.23.4 Release date: Aug 22, 2024 Enhancements: cnpg plugin updates: Enhance the install generate command by adding a --control-plane option, allowing deployment of the operator on control-plane nodes by setting node affinity and tolerations (#5271). Enhance the destroy command to delete also any job related to the target instance (#5298). Fixes: Synchronous replication self-healing checks now exclude terminated pods, focusing only on active and functional pods (#5210). The instance manager will now terminate all existing operator-related replication connections following a role change in a replica cluster (#5209). Allow setting smartShutdownTimeout to zero, enabling immediate fast shutdown and bypassing the smart shutdown process when required (#5347). Version 1.23.3 Release date: Jul 29, 2024 Enhancements: Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044). Fixes: Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Ensure that the Pooler service template can override the default service (#4846). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Fix cluster role permissions for ClusterImageCatalogs (#5034). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915). Version 1.23.2 Release date: Jun 12, 2024 Enhancements: Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602) Fixes: Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530) Changes Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753) Version 1.23.1 Release date: Apr 29, 2024 Fixes: Corrects the reconciliation of PodMonitor resources, which was failing due to a regression (#4286) Version 1.23.0 Release date: Apr 24, 2024 Important changes to Community Supported Versions We've updated our support policy to streamline our focus on one supported minor release at a time, rather than two. Additionally, we've extended the supplementary support period for the previous minor release to 3 months. Features: PostgreSQL Image Catalogs: Introduced ClusterImageCatalog and ImageCatalog CRDs to manage operand container images based on PostgreSQL major version. This is facilitated through the Cluster 's .spec.imageCatalogRef stanza . This feature provides an alternative to the imageName option and will eventually replace it as the default method to define operand container images. User-Defined Replication Slots: Enhanced the synchronization of physical replication slots to cover user-defined replication slots on the primary, via the newly introduced stanza replicationSlots.synchronizeReplicas . Configuration of Pod Disruption Budgets (PDB) : Introduced the .spec.enablePDB field to disable PDBs on the primary instance, allowing proper eviction of the pod during maintenance operations. This is particularly useful for single-instance deployments. This feature is intended to replace the node maintenance window feature. Enhancements: Users now have the capability to transition an existing cluster into replica mode, simplifying cross-datacenter switchover operations (#4261) Users can now customize the connection pooler service, including its type, labels, and annotations (#3384) Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Command output of the plugin\u2019s status command to show the status of PDBs (#4319) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101) Fixes: Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346) Changes: Operator images are now based on gcr.io/distroless/static-debian12:nonroot (#4201) The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154)","title":"Release notes for CloudNativePG 1.23"},{"location":"release_notes/old/v1.23/#release-notes-for-cloudnativepg-123","text":"History of user-visible changes in the 1.23 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.23"},{"location":"release_notes/old/v1.23/#version-1236","text":"Release Date: December 23, 2024 Warning This is the final release in the 1.23.x series. Users are strongly encouraged to upgrade to a newer minor version, as 1.23 is no longer supported.","title":"Version 1.23.6"},{"location":"release_notes/old/v1.23/#enhancements","text":"Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Honor the User-Agent header in HTTP requests with the API server. (#6153)","title":"Enhancements"},{"location":"release_notes/old/v1.23/#bug-fixes","text":"Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998)","title":"Bug Fixes"},{"location":"release_notes/old/v1.23/#version-1235","text":"Release date: Oct 16, 2024","title":"Version 1.23.5"},{"location":"release_notes/old/v1.23/#enhancements_1","text":"Remove the use of pg_database_size from the status probe, as it caused high resource utilization by scanning the entire PGDATA directory to compute database sizes. The kubectl status plugin will now rely on du to provide detailed size information retrieval (#5689). Add the ability to configure the full_page_writes parameter in PostgreSQL. This setting defaults to on , in line with PostgreSQL's recommendations (#5516). Plugin: Add the logs pretty command in the cnpg plugin to read a log stream from standard input and output a human-readable format, with options to filter log entries (#5770) Enhance the status command by allowing multiple -v options to increase verbosity for more detailed output (#5765). Add support for specifying a custom Docker image using the --image flag in the pgadmin4 plugin command, giving users control over the Docker image used for pgAdmin4 deployments (#5515).","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes","text":"Resolve an issue with concurrent status updates when demoting a primary to a designated primary, ensuring smoother transitions during cluster role changes (#5755). Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down to two instances, enabling easier maintenance on the node hosting the replica (#5487). Prioritize full rollout over inplace restarts (#5407). Fix an issue that could lead to double failover in cases of lost connectivity (#5788). Correctly set the TMPDIR and PSQL_HISTORY environment variables for pods and jobs, improving temporary file and history management (#5503). Plugin: Resolve a race condition in the logs cluster command (#5775). Display the potential sync status in the status plugin (#5533). Fix the issue where pods deployed by the pgadmin4 command didn\u2019t have a writable home directory (#5800).","title":"Fixes:"},{"location":"release_notes/old/v1.23/#supported-versions","text":"PostgreSQL 17 (PostgreSQL 17.0 is the default image)","title":"Supported versions"},{"location":"release_notes/old/v1.23/#version-1234","text":"Release date: Aug 22, 2024","title":"Version 1.23.4"},{"location":"release_notes/old/v1.23/#enhancements_2","text":"cnpg plugin updates: Enhance the install generate command by adding a --control-plane option, allowing deployment of the operator on control-plane nodes by setting node affinity and tolerations (#5271). Enhance the destroy command to delete also any job related to the target instance (#5298).","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes_1","text":"Synchronous replication self-healing checks now exclude terminated pods, focusing only on active and functional pods (#5210). The instance manager will now terminate all existing operator-related replication connections following a role change in a replica cluster (#5209). Allow setting smartShutdownTimeout to zero, enabling immediate fast shutdown and bypassing the smart shutdown process when required (#5347).","title":"Fixes:"},{"location":"release_notes/old/v1.23/#version-1233","text":"Release date: Jul 29, 2024","title":"Version 1.23.3"},{"location":"release_notes/old/v1.23/#enhancements_3","text":"Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044).","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes_2","text":"Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Ensure that the Pooler service template can override the default service (#4846). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Fix cluster role permissions for ClusterImageCatalogs (#5034). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915).","title":"Fixes:"},{"location":"release_notes/old/v1.23/#version-1232","text":"Release date: Jun 12, 2024","title":"Version 1.23.2"},{"location":"release_notes/old/v1.23/#enhancements_4","text":"Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602)","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes_3","text":"Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530)","title":"Fixes:"},{"location":"release_notes/old/v1.23/#changes","text":"Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753)","title":"Changes"},{"location":"release_notes/old/v1.23/#version-1231","text":"Release date: Apr 29, 2024","title":"Version 1.23.1"},{"location":"release_notes/old/v1.23/#fixes_4","text":"Corrects the reconciliation of PodMonitor resources, which was failing due to a regression (#4286)","title":"Fixes:"},{"location":"release_notes/old/v1.23/#version-1230","text":"Release date: Apr 24, 2024 Important changes to Community Supported Versions We've updated our support policy to streamline our focus on one supported minor release at a time, rather than two. Additionally, we've extended the supplementary support period for the previous minor release to 3 months.","title":"Version 1.23.0"},{"location":"release_notes/old/v1.23/#features","text":"PostgreSQL Image Catalogs: Introduced ClusterImageCatalog and ImageCatalog CRDs to manage operand container images based on PostgreSQL major version. This is facilitated through the Cluster 's .spec.imageCatalogRef stanza . This feature provides an alternative to the imageName option and will eventually replace it as the default method to define operand container images. User-Defined Replication Slots: Enhanced the synchronization of physical replication slots to cover user-defined replication slots on the primary, via the newly introduced stanza replicationSlots.synchronizeReplicas . Configuration of Pod Disruption Budgets (PDB) : Introduced the .spec.enablePDB field to disable PDBs on the primary instance, allowing proper eviction of the pod during maintenance operations. This is particularly useful for single-instance deployments. This feature is intended to replace the node maintenance window feature.","title":"Features:"},{"location":"release_notes/old/v1.23/#enhancements_5","text":"Users now have the capability to transition an existing cluster into replica mode, simplifying cross-datacenter switchover operations (#4261) Users can now customize the connection pooler service, including its type, labels, and annotations (#3384) Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Command output of the plugin\u2019s status command to show the status of PDBs (#4319) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101)","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes_5","text":"Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346)","title":"Fixes:"},{"location":"release_notes/old/v1.23/#changes_1","text":"Operator images are now based on gcr.io/distroless/static-debian12:nonroot (#4201) The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154)","title":"Changes:"}]}
\ No newline at end of file
+{"config":{"indexing":"full","lang":["en"],"min_search_length":3,"prebuild_index":false,"separator":"[\\s\\-]+"},"docs":[{"location":"","text":"CloudNativePG CloudNativePG (CNPG) is an open-source operator designed to manage PostgreSQL workloads on any supported Kubernetes cluster. It fosters cloud-neutrality through seamless deployment in private, public, hybrid, and multi-cloud environments via its distributed topology feature. Built around DevOps principles, CloudNativePG embraces declarative configuration and immutable infrastructure, ensuring reliability and automation in database management. At its core, CloudNativePG introduces a custom Kubernetes resource called Cluster , representing a PostgreSQL cluster with: A single primary instance for write operations. Optional replicas for High Availability and read scaling. These instances reside within a Kubernetes namespace, allowing applications to connect seamlessly using operator-managed services. Failovers and switchovers occur transparently, eliminating the need for manual intervention. For applications inside the Kubernetes cluster, CNPG provides a microservice database approach, enabling co-location of PostgreSQL clusters and applications in the same namespace for optimized access. For applications outside the cluster, CNPG offers flexible connectivity through service templates and LoadBalancer services for direct TCP exposure. Additionally, web applications can take advantage of the native connection pooler based on PgBouncer. CloudNativePG was originally built by EDB , then released open source under Apache License 2.0. The source code repository is in GitHub . Note Based on the Operator Capability Levels model , users can expect a \"Level V - Auto Pilot\" subset of capabilities from the CloudNativePG Operator. Supported Kubernetes distributions Each minor release of CloudNativePG is designed to work with a range of Kubernetes versions, usually the ones supported by the CNCF at the time the minor version was first released. Please refer to the \"Supported releases\" page for details. Container images The CloudNativePG community maintains container images for both the operator and PostgreSQL (the operand). Operator The CloudNativePG operator container images are available on the cloudnative-pg project's GitHub Container Registry in three different flavors: Debian 12 distroless Red Hat UBI 9 micro (suffix -ubi9 ) Red Hat UBI images are primarily intended for OLM consumption. All container images are signed and include SBOM and provenance attestations, provided separately for each architecture. Operands The PostgreSQL operand container images are available for all PGDG supported versions of PostgreSQL , across multiple architectures, directly from the postgres-containers project's GitHub Container Registry . The minimal and standard container images are signed and include SBOM and provenance attestations, provided separately for each architecture. Weekly jobs ensure that critical vulnerabilities (CVEs) in the entire stack are promptly addressed. Additionally, the community provides images for the PostGIS extension . Main features Direct integration with the Kubernetes API server for High Availability, eliminating the need for external tools. Self-healing capabilities, including: Automated failover by promoting the most aligned replica. Automatic recreation of failed replicas. Planned switchover of the primary instance by promoting a selected replica. Declarative management of key PostgreSQL configurations, including: PostgreSQL settings. Roles, users, and groups. Databases, extensions, and schemas. Tablespaces (including temporary tablespaces). Flexible instance definition, supporting any number of instances (minimum 1 primary server). Scale-up/down capabilities to dynamically adjust cluster size. Read-Write and Read-Only Services, ensuring applications connect correctly: Read-Write Service : Routes connections to the primary server. Read-Only Service : Distributes connections among replicas for read workloads. Support for quorum-based and priority-based PostgreSQL Synchronous Replication. Replica clusters enabling PostgreSQL distributed topologies across multiple Kubernetes clusters (private, public, hybrid, and multi-cloud). Delayed Replica clusters for point-in-time access to historical data. Persistent volume management, including: Support for Local Persistent Volumes with PVC templates. Reuse of Persistent Volumes storage in Pods. Separate volumes for WAL files and tablespaces. Backup and Recovery via CNPG-I Plugins: Pluggable architecture for continuous physical backup and recovery. Hot and cold base backups. WAL archiving. Full and Point-In-Time Recovery (PITR). Scheduled and on-demand backups. Backup from standbys to reduce primary load. Community-Supported Barman Cloud Plugin: WAL archiving to object stores with support for full/PITR recovery. Retention policies based on configurable recovery windows. Supported as a CNPG-I plugin (recommended approach). Native Backup Methods: Continuous backup and full/PITR recovery via volume snapshots (if supported by the storage class). Native integration with Barman Cloud for object store backups via .spec.backup.barmanObjectStore ( deprecated since v1.26 ). Offline in-place major upgrades of PostgreSQL Offline and online import of PostgreSQL databases, including major upgrades: Offline Import : Direct restore from existing databases. Online Import : PostgreSQL native logical replication via the Subscription resource. High Availability physical replication slots, including synchronization of user-defined replication slots and logical decoding failover. Parallel WAL archiving and restore, ensuring high-performance data synchronization in high-write environments. TLS support, including: Secure connections and client certificate authentication. Custom TLS certificates (integrated with cert-manager ). Startup and readiness probes, including replica probes based on desired lag from the primary. Declarative rolling updates for: PostgreSQL minor versions. Operator upgrades (in-place or rolling updates). Standard output logging of PostgreSQL error messages in JSON format for easier integration with log aggregation tools. Prometheus-compatible metrics exporter ( metrics port 9187) for custom monitoring. cnpg plugin for kubectl to simplify cluster operations. Cluster hibernation for resource efficiency in inactive states. Fencing of PostgreSQL clusters (full cluster or subset) to isolate instances when needed. Connection pooling with PgBouncer for improved database efficiency. OLM (Operator Lifecycle Manager) installation support for streamlined deployments. Multi-arch container images, including Software Bill of Materials (SBOM) and provenance attestations for security compliance. Info CloudNativePG does not use StatefulSet s for managing data persistence. Instead, it directly manages Persistent Volume Claims (PVCs). See \"Custom Pod Controller\" for more details. About this guide Follow the instructions in the \"Quickstart\" to test CloudNativePG on a local Kubernetes cluster using Kind, or Minikube. In case you are not familiar with some basic terminology on Kubernetes and PostgreSQL, please consult the \"Before you start\" section . The CloudNativePG documentation is licensed under a Creative Commons Attribution 4.0 International License. Postgres, PostgreSQL, and the Slonik Logo are trademarks or registered trademarks of the PostgreSQL Community Association of Canada, and used with their permission. CloudNativePG is a Cloud Native Computing Foundation Sandbox project .","title":"CloudNativePG"},{"location":"#cloudnativepg","text":"CloudNativePG (CNPG) is an open-source operator designed to manage PostgreSQL workloads on any supported Kubernetes cluster. It fosters cloud-neutrality through seamless deployment in private, public, hybrid, and multi-cloud environments via its distributed topology feature. Built around DevOps principles, CloudNativePG embraces declarative configuration and immutable infrastructure, ensuring reliability and automation in database management. At its core, CloudNativePG introduces a custom Kubernetes resource called Cluster , representing a PostgreSQL cluster with: A single primary instance for write operations. Optional replicas for High Availability and read scaling. These instances reside within a Kubernetes namespace, allowing applications to connect seamlessly using operator-managed services. Failovers and switchovers occur transparently, eliminating the need for manual intervention. For applications inside the Kubernetes cluster, CNPG provides a microservice database approach, enabling co-location of PostgreSQL clusters and applications in the same namespace for optimized access. For applications outside the cluster, CNPG offers flexible connectivity through service templates and LoadBalancer services for direct TCP exposure. Additionally, web applications can take advantage of the native connection pooler based on PgBouncer. CloudNativePG was originally built by EDB , then released open source under Apache License 2.0. The source code repository is in GitHub . Note Based on the Operator Capability Levels model , users can expect a \"Level V - Auto Pilot\" subset of capabilities from the CloudNativePG Operator.","title":"CloudNativePG"},{"location":"#supported-kubernetes-distributions","text":"Each minor release of CloudNativePG is designed to work with a range of Kubernetes versions, usually the ones supported by the CNCF at the time the minor version was first released. Please refer to the \"Supported releases\" page for details.","title":"Supported Kubernetes distributions"},{"location":"#container-images","text":"The CloudNativePG community maintains container images for both the operator and PostgreSQL (the operand).","title":"Container images"},{"location":"#operator","text":"The CloudNativePG operator container images are available on the cloudnative-pg project's GitHub Container Registry in three different flavors: Debian 12 distroless Red Hat UBI 9 micro (suffix -ubi9 ) Red Hat UBI images are primarily intended for OLM consumption. All container images are signed and include SBOM and provenance attestations, provided separately for each architecture.","title":"Operator"},{"location":"#operands","text":"The PostgreSQL operand container images are available for all PGDG supported versions of PostgreSQL , across multiple architectures, directly from the postgres-containers project's GitHub Container Registry . The minimal and standard container images are signed and include SBOM and provenance attestations, provided separately for each architecture. Weekly jobs ensure that critical vulnerabilities (CVEs) in the entire stack are promptly addressed. Additionally, the community provides images for the PostGIS extension .","title":"Operands"},{"location":"#main-features","text":"Direct integration with the Kubernetes API server for High Availability, eliminating the need for external tools. Self-healing capabilities, including: Automated failover by promoting the most aligned replica. Automatic recreation of failed replicas. Planned switchover of the primary instance by promoting a selected replica. Declarative management of key PostgreSQL configurations, including: PostgreSQL settings. Roles, users, and groups. Databases, extensions, and schemas. Tablespaces (including temporary tablespaces). Flexible instance definition, supporting any number of instances (minimum 1 primary server). Scale-up/down capabilities to dynamically adjust cluster size. Read-Write and Read-Only Services, ensuring applications connect correctly: Read-Write Service : Routes connections to the primary server. Read-Only Service : Distributes connections among replicas for read workloads. Support for quorum-based and priority-based PostgreSQL Synchronous Replication. Replica clusters enabling PostgreSQL distributed topologies across multiple Kubernetes clusters (private, public, hybrid, and multi-cloud). Delayed Replica clusters for point-in-time access to historical data. Persistent volume management, including: Support for Local Persistent Volumes with PVC templates. Reuse of Persistent Volumes storage in Pods. Separate volumes for WAL files and tablespaces. Backup and Recovery via CNPG-I Plugins: Pluggable architecture for continuous physical backup and recovery. Hot and cold base backups. WAL archiving. Full and Point-In-Time Recovery (PITR). Scheduled and on-demand backups. Backup from standbys to reduce primary load. Community-Supported Barman Cloud Plugin: WAL archiving to object stores with support for full/PITR recovery. Retention policies based on configurable recovery windows. Supported as a CNPG-I plugin (recommended approach). Native Backup Methods: Continuous backup and full/PITR recovery via volume snapshots (if supported by the storage class). Native integration with Barman Cloud for object store backups via .spec.backup.barmanObjectStore ( deprecated since v1.26 ). Offline in-place major upgrades of PostgreSQL Offline and online import of PostgreSQL databases, including major upgrades: Offline Import : Direct restore from existing databases. Online Import : PostgreSQL native logical replication via the Subscription resource. High Availability physical replication slots, including synchronization of user-defined replication slots and logical decoding failover. Parallel WAL archiving and restore, ensuring high-performance data synchronization in high-write environments. TLS support, including: Secure connections and client certificate authentication. Custom TLS certificates (integrated with cert-manager ). Startup and readiness probes, including replica probes based on desired lag from the primary. Declarative rolling updates for: PostgreSQL minor versions. Operator upgrades (in-place or rolling updates). Standard output logging of PostgreSQL error messages in JSON format for easier integration with log aggregation tools. Prometheus-compatible metrics exporter ( metrics port 9187) for custom monitoring. cnpg plugin for kubectl to simplify cluster operations. Cluster hibernation for resource efficiency in inactive states. Fencing of PostgreSQL clusters (full cluster or subset) to isolate instances when needed. Connection pooling with PgBouncer for improved database efficiency. OLM (Operator Lifecycle Manager) installation support for streamlined deployments. Multi-arch container images, including Software Bill of Materials (SBOM) and provenance attestations for security compliance. Info CloudNativePG does not use StatefulSet s for managing data persistence. Instead, it directly manages Persistent Volume Claims (PVCs). See \"Custom Pod Controller\" for more details.","title":"Main features"},{"location":"#about-this-guide","text":"Follow the instructions in the \"Quickstart\" to test CloudNativePG on a local Kubernetes cluster using Kind, or Minikube. In case you are not familiar with some basic terminology on Kubernetes and PostgreSQL, please consult the \"Before you start\" section . The CloudNativePG documentation is licensed under a Creative Commons Attribution 4.0 International License. Postgres, PostgreSQL, and the Slonik Logo are trademarks or registered trademarks of the PostgreSQL Community Association of Canada, and used with their permission. CloudNativePG is a Cloud Native Computing Foundation Sandbox project .","title":"About this guide"},{"location":"applications/","text":"Connecting from an application Applications are supposed to work with the services created by CloudNativePG in the same Kubernetes cluster. For more information on services and how to manage them, please refer to the \"Service management\" section. Hint It is highly recommended using those services in your applications, and avoiding connecting directly to a specific PostgreSQL instance, as the latter can change during the cluster lifetime. You can use these services in your applications through: DNS resolution environment variables For the credentials to connect to PostgreSQL, you can use the secrets generated by the operator. Connection Pooling Please refer to the \"Connection Pooling\" section for information about how to take advantage of PgBouncer as a connection pooler, and create an access layer between your applications and the PostgreSQL clusters. DNS resolution You can use the Kubernetes DNS service to point to a given server. The Kubernetes DNS service is required by the operator. You can do that by using the name of the service if the application is deployed in the same namespace as the PostgreSQL cluster. In case the PostgreSQL cluster resides in a different namespace, you can use the full qualifier: service-name.namespace-name . DNS is the preferred and recommended discovery method. Environment variables If you deploy your application in the same namespace that contains the PostgreSQL cluster, you can also use environment variables to connect to the database. For example, suppose that your PostgreSQL cluster is called pg-database , you can use the following environment variables in your applications: PG_DATABASE_R_SERVICE_HOST : the IP address of the service pointing to all the PostgreSQL instances for read-only workloads PG_DATABASE_RO_SERVICE_HOST : the IP address of the service pointing to all hot-standby replicas of the cluster PG_DATABASE_RW_SERVICE_HOST : the IP address of the service pointing to the primary instance of the cluster Secrets The PostgreSQL operator will generate up to two basic-auth type secrets for every PostgreSQL cluster it deploys: [cluster name]-app (unless you have provided an existing secret through .spec.bootstrap.initdb.secret.name ) [cluster name]-superuser (if .spec.enableSuperuserAccess is set to true and you have not specified a different secret using .spec.superuserSecret ) Each secret contain the following: username password hostname to the RW service port number database name a working .pgpass file uri jdbc-uri fqdn-uri fqdn-jdbc-uri The FQDN to be used in the URIs is calculated using the Kubernetes cluster domain specified in the KUBERNETES_CLUSTER_DOMAIN configuration parameter. See the operator configuration documentation for more information about that. The -app credentials are the ones that should be used by applications connecting to the PostgreSQL cluster, and correspond to the user owning the database. The -superuser ones are supposed to be used only for administrative purposes, and correspond to the postgres user. Important Superuser access over the network is disabled by default.","title":"Connecting from an application"},{"location":"applications/#connecting-from-an-application","text":"Applications are supposed to work with the services created by CloudNativePG in the same Kubernetes cluster. For more information on services and how to manage them, please refer to the \"Service management\" section. Hint It is highly recommended using those services in your applications, and avoiding connecting directly to a specific PostgreSQL instance, as the latter can change during the cluster lifetime. You can use these services in your applications through: DNS resolution environment variables For the credentials to connect to PostgreSQL, you can use the secrets generated by the operator. Connection Pooling Please refer to the \"Connection Pooling\" section for information about how to take advantage of PgBouncer as a connection pooler, and create an access layer between your applications and the PostgreSQL clusters.","title":"Connecting from an application"},{"location":"applications/#dns-resolution","text":"You can use the Kubernetes DNS service to point to a given server. The Kubernetes DNS service is required by the operator. You can do that by using the name of the service if the application is deployed in the same namespace as the PostgreSQL cluster. In case the PostgreSQL cluster resides in a different namespace, you can use the full qualifier: service-name.namespace-name . DNS is the preferred and recommended discovery method.","title":"DNS resolution"},{"location":"applications/#environment-variables","text":"If you deploy your application in the same namespace that contains the PostgreSQL cluster, you can also use environment variables to connect to the database. For example, suppose that your PostgreSQL cluster is called pg-database , you can use the following environment variables in your applications: PG_DATABASE_R_SERVICE_HOST : the IP address of the service pointing to all the PostgreSQL instances for read-only workloads PG_DATABASE_RO_SERVICE_HOST : the IP address of the service pointing to all hot-standby replicas of the cluster PG_DATABASE_RW_SERVICE_HOST : the IP address of the service pointing to the primary instance of the cluster","title":"Environment variables"},{"location":"applications/#secrets","text":"The PostgreSQL operator will generate up to two basic-auth type secrets for every PostgreSQL cluster it deploys: [cluster name]-app (unless you have provided an existing secret through .spec.bootstrap.initdb.secret.name ) [cluster name]-superuser (if .spec.enableSuperuserAccess is set to true and you have not specified a different secret using .spec.superuserSecret ) Each secret contain the following: username password hostname to the RW service port number database name a working .pgpass file uri jdbc-uri fqdn-uri fqdn-jdbc-uri The FQDN to be used in the URIs is calculated using the Kubernetes cluster domain specified in the KUBERNETES_CLUSTER_DOMAIN configuration parameter. See the operator configuration documentation for more information about that. The -app credentials are the ones that should be used by applications connecting to the PostgreSQL cluster, and correspond to the user owning the database. The -superuser ones are supposed to be used only for administrative purposes, and correspond to the postgres user. Important Superuser access over the network is disabled by default.","title":"Secrets"},{"location":"architecture/","text":"Architecture Hint For a deeper understanding, we recommend reading our article on the CNCF blog post titled \"Recommended Architectures for PostgreSQL in Kubernetes\" , which provides valuable insights into best practices and design considerations for PostgreSQL deployments in Kubernetes. This documentation page provides an overview of the key architectural considerations for implementing a robust business continuity strategy when deploying PostgreSQL in Kubernetes. These considerations include: Deployments in stretched vs. non-stretched clusters : Evaluating the differences between deploying in stretched clusters (across 3 or more availability zones) versus non-stretched clusters (within a single availability zone). Reservation of postgres worker nodes : Isolating PostgreSQL workloads by dedicating specific worker nodes to postgres tasks, ensuring optimal performance and minimizing interference from other workloads. PostgreSQL architectures within a single Kubernetes cluster : Designing effective PostgreSQL deployments within a single Kubernetes cluster to meet high availability and performance requirements. PostgreSQL architectures across Kubernetes clusters for disaster recovery : Planning and implementing PostgreSQL architectures that span multiple Kubernetes clusters to provide comprehensive disaster recovery capabilities. Synchronizing the state PostgreSQL is a database management system and, as such, it needs to be treated as a stateful workload in Kubernetes. While stateless applications mainly use traffic redirection to achieve High Availability (HA) and Disaster Recovery (DR), in the case of a database, state must be replicated in multiple locations, preferably in a continuous and instantaneous way, by adopting either of the following two strategies: storage-level replication , normally persistent volumes application-level replication , in this specific case PostgreSQL CloudNativePG relies on application-level replication, for a simple reason: the PostgreSQL database management system comes with robust and reliable built-in physical replication capabilities based on Write Ahead Log (WAL) shipping , which have been used in production by millions of users all over the world for over a decade. PostgreSQL supports both asynchronous and synchronous streaming replication over the network, as well as asynchronous file-based log shipping (normally used as a fallback option, for example, to store WAL files in an object store). Replicas are usually called standby servers and can also be used for read-only workloads, thanks to the Hot Standby feature. Important We recommend against storage-level replication with PostgreSQL , although CloudNativePG allows you to adopt that strategy. For more information, please refer to the talk given by Chris Milsted and Gabriele Bartolini at KubeCon NA 2022 entitled \"Data On Kubernetes, Deploying And Running PostgreSQL And Patterns For Databases In a Kubernetes Cluster\" where this topic was covered in detail. Kubernetes architecture Kubernetes natively provides the possibility to span separate physical locations - also known as data centers, failure zones, or more frequently availability zones - connected to each other via redundant, low-latency, private network connectivity. Being a distributed system, the recommended minimum number of availability zones for a Kubernetes cluster is three (3), in order to make the control plane resilient to the failure of a single zone. For details, please refer to \"Running in multiple zones\" . This means that each data center is active at any time and can run workloads simultaneously. Note Most of the public Cloud Providers' managed Kubernetes services already provide 3 or more availability zones in each region. Multi-availability zone Kubernetes clusters The multi-availability zone Kubernetes architecture with three (3) or more zones is the one that we recommend for PostgreSQL usage. This scenario is typical of Kubernetes services managed by Cloud Providers. Such an architecture enables the CloudNativePG operator to control the full lifecycle of a Cluster resource across the zones within a single Kubernetes cluster, by treating all the availability zones as active: this includes, among other operations, scheduling the workloads in a declarative manner (based on affinity rules, tolerations and node selectors), automated failover, self-healing, and updates. All will work seamlessly across the zones in a single Kubernetes cluster. Please refer to the \"PostgreSQL architecture\" section below for details on how you can design your PostgreSQL clusters within the same Kubernetes cluster through shared-nothing deployments at the storage, worker node, and availability zone levels. Additionally, you can leverage Kubernetes clusters to deploy distributed PostgreSQL topologies hosting \"passive\" PostgreSQL replica clusters in different regions and managing them via declarative configuration. This setup is ideal for disaster recovery (DR), read-only operations, or cross-region availability. Important Each operator deployment can only manage operations within its local Kubernetes cluster. For operations across Kubernetes clusters, such as controlled switchover or unexpected failover, coordination must be handled manually (through GitOps, for example) or by using a higher-level cluster management tool. Single availability zone Kubernetes clusters If your Kubernetes cluster has only one availability zone, CloudNativePG still provides you with a lot of features to improve HA and DR outcomes for your PostgreSQL databases, pushing the single point of failure (SPoF) to the level of the zone as much as possible - i.e. the zone must have an outage before your CloudNativePG clusters suffer a failure. This scenario is typical of self-managed on-premise Kubernetes clusters, where only one data center is available. Single availability zone Kubernetes clusters are the only viable option when only two data centers are available within reach of a low-latency connection (typically in the same metropolitan area). Having only two zones prevents the creation of a multi-availability zone Kubernetes cluster, which requires a minimum of three zones. As a result, users must create two separate Kubernetes clusters in an active/passive configuration, with the second cluster primarily used for Disaster Recovery (see the replica cluster feature ). Hint If you are at an early stage of your Kubernetes journey, please share this document with your infrastructure team. The two data centers setup might be simply the result of a \"lift-and-shift\" transition to Kubernetes from a traditional bare-metal or VM based infrastructure, and the benefits that Kubernetes offers in a 3+ zone scenario might not have been known, or addressed at the time the infrastructure architecture was designed. Ultimately, a third physical location connected to the other two might represent a valid option to consider for organization, as it reduces the overall costs of the infrastructure by moving the day-to-day complexity from the application level down to the physical infrastructure level. Please refer to the \"PostgreSQL architecture\" section below for details on how you can design your PostgreSQL clusters within your single availability zone Kubernetes cluster through shared-nothing deployments at the storage and worker node levels only. For HA, in such a scenario it becomes even more important that the PostgreSQL instances be located on different worker nodes and do not share the same storage. For DR, you can push the SPoF above the single zone, by using additional Kubernetes clusters to define a distributed topology hosting \"passive\" PostgreSQL replica clusters . As with other Kubernetes workloads in this scenario, promotion of a Kubernetes cluster as primary must be done manually. Through the replica cluster feature , you can define a distributed PostgreSQL topology and coordinate a controlled switchover between data centers by first demoting the primary cluster and then promoting the replica cluster, without the need to re-clone the former primary. While failover is now fully declarative, automated failover across Kubernetes clusters is not within CloudNativePG's scope, as the operator can only function within a single Kubernetes cluster. Important CloudNativePG provides all the necessary primitives and probes to coordinate PostgreSQL active/passive topologies across different Kubernetes clusters through a higher-level operator or management tool. Reserving nodes for PostgreSQL workloads Whether you're operating in a multi-availability zone environment or, more critically, within a single availability zone, we strongly recommend isolating PostgreSQL workloads by dedicating specific worker nodes exclusively to postgres in production. A Kubernetes worker node dedicated to running PostgreSQL workloads is referred to as a Postgres node or postgres node. This approach ensures optimal performance and resource allocation for your database operations. Hint As a general rule of thumb, deploy Postgres nodes in multiples of three\u2014ideally with one node per availability zone. Three nodes is an optimal number because it ensures that a PostgreSQL cluster with three instances (one primary and two standby replicas) is distributed across different nodes, enhancing fault tolerance and availability. In Kubernetes, this can be achieved using node labels and taints in a declarative manner, aligning with Infrastructure as Code (IaC) practices: labels ensure that a node is capable of running postgres workloads, while taints help prevent any non- postgres workloads from being scheduled on that node. Important This methodology is the most straightforward way to ensure that PostgreSQL workloads are isolated from other workloads in terms of both computing resources and, when using locally attached disks, storage. While different PostgreSQL clusters may share the same node, you can take this a step further by using labels and taints to ensure that a node is dedicated to a single instance of a specific Cluster . Proposed node label CloudNativePG recommends using the node-role.kubernetes.io/postgres label. Since this is a reserved label ( *.kubernetes.io ), it can only be applied after a worker node is created. To assign the postgres label to a node, use the following command: kubectl label node <NODE-NAME> node-role.kubernetes.io/postgres= To ensure that a Cluster resource is scheduled on a postgres node, you must correctly configure the .spec.affinity.nodeSelector stanza in your manifests. Here\u2019s an example: spec: # <snip> affinity: # <snip> nodeSelector: node-role.kubernetes.io/postgres: \"\" Proposed node taint CloudNativePG recommends using the node-role.kubernetes.io/postgres taint. To assign the postgres taint to a node, use the following command: kubectl taint node <NODE-NAME> node-role.kubernetes.io/postgres=:NoSchedule To ensure that a Cluster resource is scheduled on a node with a postgres taint, you must correctly configure the .spec.affinity.tolerations stanza in your manifests. Here\u2019s an example: spec: # <snip> affinity: # <snip> tolerations: - key: node-role.kubernetes.io/postgres operator: Exists effect: NoSchedule PostgreSQL architecture CloudNativePG supports clusters based on asynchronous and synchronous streaming replication to manage multiple hot standby replicas within the same Kubernetes cluster, with the following specifications: One primary, with optional multiple hot standby replicas for HA Available services for applications: -rw : applications connect only to the primary instance of the cluster -ro : applications connect only to hot standby replicas for read-only-workloads (optional) -r : applications connect to any of the instances for read-only workloads (optional) Shared-nothing architecture recommended for better resilience of the PostgreSQL cluster: PostgreSQL instances should reside on different Kubernetes worker nodes and share only the network - as a result, instances should not share the storage and preferably use local volumes attached to the node they run on PostgreSQL instances should reside in different availability zones within the same Kubernetes cluster / region Important You can configure the above services through the managed.services section in the Cluster configuration. This can be done by reducing the number of services and selecting the type (default is ClusterIP ). For more details, please refer to the \"Service Management\" section below. The below diagram provides a simplistic view of the recommended shared-nothing architecture for a PostgreSQL cluster spanning across 3 different availability zones, running on separate nodes, each with dedicated local storage for PostgreSQL data. CloudNativePG automatically takes care of updating the above services if the topology of the cluster changes. For example, in case of failover, it automatically updates the -rw service to point to the promoted primary, making sure that traffic from the applications is seamlessly redirected. Replication Please refer to the \"Replication\" section for more information about how CloudNativePG relies on PostgreSQL replication, including synchronous settings. Connecting from an application Please refer to the \"Connecting from an application\" section for information about how to connect to CloudNativePG from a stateless application within the same Kubernetes cluster. Connection Pooling Please refer to the \"Connection Pooling\" section for information about how to take advantage of PgBouncer as a connection pooler, and create an access layer between your applications and the PostgreSQL clusters. Read-write workloads Applications can decide to connect to the PostgreSQL instance elected as current primary by the Kubernetes operator, as depicted in the following diagram: Applications can use the -rw suffix service. In case of temporary or permanent unavailability of the primary, for High Availability purposes CloudNativePG will trigger a failover, pointing the -rw service to another instance of the cluster. Read-only workloads Important Applications must be aware of the limitations that Hot Standby presents and familiar with the way PostgreSQL operates when dealing with these workloads. Applications can access hot standby replicas through the -ro service made available by the operator. This service enables the application to offload read-only queries from the primary node. The following diagram shows the architecture: Applications can also access any PostgreSQL instance through the -r service. Deployments across Kubernetes clusters Info CloudNativePG supports deploying PostgreSQL across multiple Kubernetes clusters through a feature that allows you to define a distributed PostgreSQL topology using replica clusters, as described in this section. In a distributed PostgreSQL cluster there can only be a single PostgreSQL instance acting as a primary at all times. This means that applications can only write inside a single Kubernetes cluster, at any time. However, for business continuity objectives it is fundamental to: reduce global recovery point objectives ( RPO ) by storing PostgreSQL backup data in multiple locations, regions and possibly using different providers (Disaster Recovery) reduce global recovery time objectives ( RTO ) by taking advantage of PostgreSQL replication beyond the primary Kubernetes cluster (High Availability) In order to address the above concerns, CloudNativePG introduces the concept of a PostgreSQL Topology that is distributed across different Kubernetes clusters and is made up of a primary PostgreSQL cluster and one or more PostgreSQL replica clusters. This feature is called distributed PostgreSQL topology with replica clusters , and it enables multi-cluster deployments in private, public, hybrid, and multi-cloud contexts. A replica cluster is a separate Cluster resource that is in continuous recovery, replicating from another source, either via WAL shipping from a WAL archive or via streaming replication from a primary or a standby (cascading). The diagram below depicts a PostgreSQL cluster spanning over two different Kubernetes clusters, where the primary cluster is in the first Kubernetes cluster and the replica cluster is in the second. The second Kubernetes cluster acts as the company's disaster recovery cluster, ready to be activated in case of disaster and unavailability of the first one. A replica cluster can have the same architecture as the primary cluster. Instead of a primary instance, a replica cluster has a designated primary instance, which is a standby server with an arbitrary number of cascading standby servers in streaming replication (symmetric architecture). The designated primary can be promoted at any time, transforming the replica cluster into a primary cluster capable of accepting write connections. This is typically triggered by: Human decision: You choose to make the other PostgreSQL cluster (or the entire Kubernetes cluster) the primary. To avoid data loss and ensure that the former primary can follow without being re-cloned (especially with large data sets), you first demote the current primary, then promote the designated primary using the API provided by CloudNativePG. Unexpected failure: If the entire Kubernetes cluster fails, you might experience data loss, but you need to fail over to the other Kubernetes cluster by promoting the PostgreSQL replica cluster. Warning CloudNativePG cannot perform any cross-cluster automated failover, as it does not have authority beyond a single Kubernetes cluster. Such operations must be performed manually or delegated to a multi-cluster/federated cluster-aware authority. Important CloudNativePG allows you to control the distributed topology via declarative configuration, enabling you to automate these procedures as part of your Infrastructure as Code (IaC) process, including GitOps. In the example above, the designated primary receives WAL updates via streaming replication ( primary_conninfo ). As a fallback, it can retrieve WAL segments from an object store using file-based WAL shipping\u2014for instance, with the Barman Cloud plugin through restore_command and barman-cloud-wal-restore . CloudNativePG allows you to define topologies with multiple replica clusters. You can also define replica clusters with a lower number of replicas, and then increase this number when the cluster is promoted to primary. Replica clusters Please refer to the \"Replica Clusters\" section for more detailed information on how physical replica clusters operate and how to define a distributed topology with read-only clusters across different Kubernetes clusters. This approach can significantly enhance your global disaster recovery and high availability (HA) strategy.","title":"Architecture"},{"location":"architecture/#architecture","text":"Hint For a deeper understanding, we recommend reading our article on the CNCF blog post titled \"Recommended Architectures for PostgreSQL in Kubernetes\" , which provides valuable insights into best practices and design considerations for PostgreSQL deployments in Kubernetes. This documentation page provides an overview of the key architectural considerations for implementing a robust business continuity strategy when deploying PostgreSQL in Kubernetes. These considerations include: Deployments in stretched vs. non-stretched clusters : Evaluating the differences between deploying in stretched clusters (across 3 or more availability zones) versus non-stretched clusters (within a single availability zone). Reservation of postgres worker nodes : Isolating PostgreSQL workloads by dedicating specific worker nodes to postgres tasks, ensuring optimal performance and minimizing interference from other workloads. PostgreSQL architectures within a single Kubernetes cluster : Designing effective PostgreSQL deployments within a single Kubernetes cluster to meet high availability and performance requirements. PostgreSQL architectures across Kubernetes clusters for disaster recovery : Planning and implementing PostgreSQL architectures that span multiple Kubernetes clusters to provide comprehensive disaster recovery capabilities.","title":"Architecture"},{"location":"architecture/#synchronizing-the-state","text":"PostgreSQL is a database management system and, as such, it needs to be treated as a stateful workload in Kubernetes. While stateless applications mainly use traffic redirection to achieve High Availability (HA) and Disaster Recovery (DR), in the case of a database, state must be replicated in multiple locations, preferably in a continuous and instantaneous way, by adopting either of the following two strategies: storage-level replication , normally persistent volumes application-level replication , in this specific case PostgreSQL CloudNativePG relies on application-level replication, for a simple reason: the PostgreSQL database management system comes with robust and reliable built-in physical replication capabilities based on Write Ahead Log (WAL) shipping , which have been used in production by millions of users all over the world for over a decade. PostgreSQL supports both asynchronous and synchronous streaming replication over the network, as well as asynchronous file-based log shipping (normally used as a fallback option, for example, to store WAL files in an object store). Replicas are usually called standby servers and can also be used for read-only workloads, thanks to the Hot Standby feature. Important We recommend against storage-level replication with PostgreSQL , although CloudNativePG allows you to adopt that strategy. For more information, please refer to the talk given by Chris Milsted and Gabriele Bartolini at KubeCon NA 2022 entitled \"Data On Kubernetes, Deploying And Running PostgreSQL And Patterns For Databases In a Kubernetes Cluster\" where this topic was covered in detail.","title":"Synchronizing the state"},{"location":"architecture/#kubernetes-architecture","text":"Kubernetes natively provides the possibility to span separate physical locations - also known as data centers, failure zones, or more frequently availability zones - connected to each other via redundant, low-latency, private network connectivity. Being a distributed system, the recommended minimum number of availability zones for a Kubernetes cluster is three (3), in order to make the control plane resilient to the failure of a single zone. For details, please refer to \"Running in multiple zones\" . This means that each data center is active at any time and can run workloads simultaneously. Note Most of the public Cloud Providers' managed Kubernetes services already provide 3 or more availability zones in each region.","title":"Kubernetes architecture"},{"location":"architecture/#multi-availability-zone-kubernetes-clusters","text":"The multi-availability zone Kubernetes architecture with three (3) or more zones is the one that we recommend for PostgreSQL usage. This scenario is typical of Kubernetes services managed by Cloud Providers. Such an architecture enables the CloudNativePG operator to control the full lifecycle of a Cluster resource across the zones within a single Kubernetes cluster, by treating all the availability zones as active: this includes, among other operations, scheduling the workloads in a declarative manner (based on affinity rules, tolerations and node selectors), automated failover, self-healing, and updates. All will work seamlessly across the zones in a single Kubernetes cluster. Please refer to the \"PostgreSQL architecture\" section below for details on how you can design your PostgreSQL clusters within the same Kubernetes cluster through shared-nothing deployments at the storage, worker node, and availability zone levels. Additionally, you can leverage Kubernetes clusters to deploy distributed PostgreSQL topologies hosting \"passive\" PostgreSQL replica clusters in different regions and managing them via declarative configuration. This setup is ideal for disaster recovery (DR), read-only operations, or cross-region availability. Important Each operator deployment can only manage operations within its local Kubernetes cluster. For operations across Kubernetes clusters, such as controlled switchover or unexpected failover, coordination must be handled manually (through GitOps, for example) or by using a higher-level cluster management tool.","title":"Multi-availability zone Kubernetes clusters"},{"location":"architecture/#single-availability-zone-kubernetes-clusters","text":"If your Kubernetes cluster has only one availability zone, CloudNativePG still provides you with a lot of features to improve HA and DR outcomes for your PostgreSQL databases, pushing the single point of failure (SPoF) to the level of the zone as much as possible - i.e. the zone must have an outage before your CloudNativePG clusters suffer a failure. This scenario is typical of self-managed on-premise Kubernetes clusters, where only one data center is available. Single availability zone Kubernetes clusters are the only viable option when only two data centers are available within reach of a low-latency connection (typically in the same metropolitan area). Having only two zones prevents the creation of a multi-availability zone Kubernetes cluster, which requires a minimum of three zones. As a result, users must create two separate Kubernetes clusters in an active/passive configuration, with the second cluster primarily used for Disaster Recovery (see the replica cluster feature ). Hint If you are at an early stage of your Kubernetes journey, please share this document with your infrastructure team. The two data centers setup might be simply the result of a \"lift-and-shift\" transition to Kubernetes from a traditional bare-metal or VM based infrastructure, and the benefits that Kubernetes offers in a 3+ zone scenario might not have been known, or addressed at the time the infrastructure architecture was designed. Ultimately, a third physical location connected to the other two might represent a valid option to consider for organization, as it reduces the overall costs of the infrastructure by moving the day-to-day complexity from the application level down to the physical infrastructure level. Please refer to the \"PostgreSQL architecture\" section below for details on how you can design your PostgreSQL clusters within your single availability zone Kubernetes cluster through shared-nothing deployments at the storage and worker node levels only. For HA, in such a scenario it becomes even more important that the PostgreSQL instances be located on different worker nodes and do not share the same storage. For DR, you can push the SPoF above the single zone, by using additional Kubernetes clusters to define a distributed topology hosting \"passive\" PostgreSQL replica clusters . As with other Kubernetes workloads in this scenario, promotion of a Kubernetes cluster as primary must be done manually. Through the replica cluster feature , you can define a distributed PostgreSQL topology and coordinate a controlled switchover between data centers by first demoting the primary cluster and then promoting the replica cluster, without the need to re-clone the former primary. While failover is now fully declarative, automated failover across Kubernetes clusters is not within CloudNativePG's scope, as the operator can only function within a single Kubernetes cluster. Important CloudNativePG provides all the necessary primitives and probes to coordinate PostgreSQL active/passive topologies across different Kubernetes clusters through a higher-level operator or management tool.","title":"Single availability zone Kubernetes clusters"},{"location":"architecture/#reserving-nodes-for-postgresql-workloads","text":"Whether you're operating in a multi-availability zone environment or, more critically, within a single availability zone, we strongly recommend isolating PostgreSQL workloads by dedicating specific worker nodes exclusively to postgres in production. A Kubernetes worker node dedicated to running PostgreSQL workloads is referred to as a Postgres node or postgres node. This approach ensures optimal performance and resource allocation for your database operations. Hint As a general rule of thumb, deploy Postgres nodes in multiples of three\u2014ideally with one node per availability zone. Three nodes is an optimal number because it ensures that a PostgreSQL cluster with three instances (one primary and two standby replicas) is distributed across different nodes, enhancing fault tolerance and availability. In Kubernetes, this can be achieved using node labels and taints in a declarative manner, aligning with Infrastructure as Code (IaC) practices: labels ensure that a node is capable of running postgres workloads, while taints help prevent any non- postgres workloads from being scheduled on that node. Important This methodology is the most straightforward way to ensure that PostgreSQL workloads are isolated from other workloads in terms of both computing resources and, when using locally attached disks, storage. While different PostgreSQL clusters may share the same node, you can take this a step further by using labels and taints to ensure that a node is dedicated to a single instance of a specific Cluster .","title":"Reserving nodes for PostgreSQL workloads"},{"location":"architecture/#proposed-node-label","text":"CloudNativePG recommends using the node-role.kubernetes.io/postgres label. Since this is a reserved label ( *.kubernetes.io ), it can only be applied after a worker node is created. To assign the postgres label to a node, use the following command: kubectl label node <NODE-NAME> node-role.kubernetes.io/postgres= To ensure that a Cluster resource is scheduled on a postgres node, you must correctly configure the .spec.affinity.nodeSelector stanza in your manifests. Here\u2019s an example: spec: # <snip> affinity: # <snip> nodeSelector: node-role.kubernetes.io/postgres: \"\"","title":"Proposed node label"},{"location":"architecture/#proposed-node-taint","text":"CloudNativePG recommends using the node-role.kubernetes.io/postgres taint. To assign the postgres taint to a node, use the following command: kubectl taint node <NODE-NAME> node-role.kubernetes.io/postgres=:NoSchedule To ensure that a Cluster resource is scheduled on a node with a postgres taint, you must correctly configure the .spec.affinity.tolerations stanza in your manifests. Here\u2019s an example: spec: # <snip> affinity: # <snip> tolerations: - key: node-role.kubernetes.io/postgres operator: Exists effect: NoSchedule","title":"Proposed node taint"},{"location":"architecture/#postgresql-architecture","text":"CloudNativePG supports clusters based on asynchronous and synchronous streaming replication to manage multiple hot standby replicas within the same Kubernetes cluster, with the following specifications: One primary, with optional multiple hot standby replicas for HA Available services for applications: -rw : applications connect only to the primary instance of the cluster -ro : applications connect only to hot standby replicas for read-only-workloads (optional) -r : applications connect to any of the instances for read-only workloads (optional) Shared-nothing architecture recommended for better resilience of the PostgreSQL cluster: PostgreSQL instances should reside on different Kubernetes worker nodes and share only the network - as a result, instances should not share the storage and preferably use local volumes attached to the node they run on PostgreSQL instances should reside in different availability zones within the same Kubernetes cluster / region Important You can configure the above services through the managed.services section in the Cluster configuration. This can be done by reducing the number of services and selecting the type (default is ClusterIP ). For more details, please refer to the \"Service Management\" section below. The below diagram provides a simplistic view of the recommended shared-nothing architecture for a PostgreSQL cluster spanning across 3 different availability zones, running on separate nodes, each with dedicated local storage for PostgreSQL data. CloudNativePG automatically takes care of updating the above services if the topology of the cluster changes. For example, in case of failover, it automatically updates the -rw service to point to the promoted primary, making sure that traffic from the applications is seamlessly redirected. Replication Please refer to the \"Replication\" section for more information about how CloudNativePG relies on PostgreSQL replication, including synchronous settings. Connecting from an application Please refer to the \"Connecting from an application\" section for information about how to connect to CloudNativePG from a stateless application within the same Kubernetes cluster. Connection Pooling Please refer to the \"Connection Pooling\" section for information about how to take advantage of PgBouncer as a connection pooler, and create an access layer between your applications and the PostgreSQL clusters.","title":"PostgreSQL architecture"},{"location":"architecture/#read-write-workloads","text":"Applications can decide to connect to the PostgreSQL instance elected as current primary by the Kubernetes operator, as depicted in the following diagram: Applications can use the -rw suffix service. In case of temporary or permanent unavailability of the primary, for High Availability purposes CloudNativePG will trigger a failover, pointing the -rw service to another instance of the cluster.","title":"Read-write workloads"},{"location":"architecture/#read-only-workloads","text":"Important Applications must be aware of the limitations that Hot Standby presents and familiar with the way PostgreSQL operates when dealing with these workloads. Applications can access hot standby replicas through the -ro service made available by the operator. This service enables the application to offload read-only queries from the primary node. The following diagram shows the architecture: Applications can also access any PostgreSQL instance through the -r service.","title":"Read-only workloads"},{"location":"architecture/#deployments-across-kubernetes-clusters","text":"Info CloudNativePG supports deploying PostgreSQL across multiple Kubernetes clusters through a feature that allows you to define a distributed PostgreSQL topology using replica clusters, as described in this section. In a distributed PostgreSQL cluster there can only be a single PostgreSQL instance acting as a primary at all times. This means that applications can only write inside a single Kubernetes cluster, at any time. However, for business continuity objectives it is fundamental to: reduce global recovery point objectives ( RPO ) by storing PostgreSQL backup data in multiple locations, regions and possibly using different providers (Disaster Recovery) reduce global recovery time objectives ( RTO ) by taking advantage of PostgreSQL replication beyond the primary Kubernetes cluster (High Availability) In order to address the above concerns, CloudNativePG introduces the concept of a PostgreSQL Topology that is distributed across different Kubernetes clusters and is made up of a primary PostgreSQL cluster and one or more PostgreSQL replica clusters. This feature is called distributed PostgreSQL topology with replica clusters , and it enables multi-cluster deployments in private, public, hybrid, and multi-cloud contexts. A replica cluster is a separate Cluster resource that is in continuous recovery, replicating from another source, either via WAL shipping from a WAL archive or via streaming replication from a primary or a standby (cascading). The diagram below depicts a PostgreSQL cluster spanning over two different Kubernetes clusters, where the primary cluster is in the first Kubernetes cluster and the replica cluster is in the second. The second Kubernetes cluster acts as the company's disaster recovery cluster, ready to be activated in case of disaster and unavailability of the first one. A replica cluster can have the same architecture as the primary cluster. Instead of a primary instance, a replica cluster has a designated primary instance, which is a standby server with an arbitrary number of cascading standby servers in streaming replication (symmetric architecture). The designated primary can be promoted at any time, transforming the replica cluster into a primary cluster capable of accepting write connections. This is typically triggered by: Human decision: You choose to make the other PostgreSQL cluster (or the entire Kubernetes cluster) the primary. To avoid data loss and ensure that the former primary can follow without being re-cloned (especially with large data sets), you first demote the current primary, then promote the designated primary using the API provided by CloudNativePG. Unexpected failure: If the entire Kubernetes cluster fails, you might experience data loss, but you need to fail over to the other Kubernetes cluster by promoting the PostgreSQL replica cluster. Warning CloudNativePG cannot perform any cross-cluster automated failover, as it does not have authority beyond a single Kubernetes cluster. Such operations must be performed manually or delegated to a multi-cluster/federated cluster-aware authority. Important CloudNativePG allows you to control the distributed topology via declarative configuration, enabling you to automate these procedures as part of your Infrastructure as Code (IaC) process, including GitOps. In the example above, the designated primary receives WAL updates via streaming replication ( primary_conninfo ). As a fallback, it can retrieve WAL segments from an object store using file-based WAL shipping\u2014for instance, with the Barman Cloud plugin through restore_command and barman-cloud-wal-restore . CloudNativePG allows you to define topologies with multiple replica clusters. You can also define replica clusters with a lower number of replicas, and then increase this number when the cluster is promoted to primary. Replica clusters Please refer to the \"Replica Clusters\" section for more detailed information on how physical replica clusters operate and how to define a distributed topology with read-only clusters across different Kubernetes clusters. This approach can significantly enhance your global disaster recovery and high availability (HA) strategy.","title":"Deployments across Kubernetes clusters"},{"location":"backup/","text":"Backup Info This section covers physical backups in PostgreSQL. While PostgreSQL also supports logical backups using the pg_dump utility, these are not suitable for business continuity and are not managed by CloudNativePG. If you still wish to use pg_dump , refer to the Troubleshooting / Emergency backup section for guidance. Important Starting with version 1.26, native backup and recovery capabilities are being progressively phased out of the core operator and moved to official CNPG-I plugins. This transition aligns with CloudNativePG's shift towards a backup-agnostic architecture , enabled by its extensible interface\u2014 CNPG-I \u2014which standardizes the management of WAL archiving , physical base backups , and corresponding recovery processes . CloudNativePG currently supports physical backups of PostgreSQL clusters in two main ways: Via CNPG-I plugins : the CloudNativePG Community officially supports the Barman Cloud Plugin for integration with object storage services. Natively , with support for: Object storage via Barman Cloud (although deprecated from 1.26 in favor of the Barman Cloud Plugin) Kubernetes Volume Snapshots , if supported by the underlying storage class Before selecting a backup strategy with CloudNativePG, it's important to familiarize yourself with the foundational concepts covered in the \"Main Concepts\" section. These include WAL archiving, hot and cold backups, performing backups from a standby, and more. Main Concepts PostgreSQL natively provides first class backup and recovery capabilities based on file system level (physical) copy. These have been successfully used for more than 15 years in mission critical production databases, helping organizations all over the world achieve their disaster recovery goals with Postgres. In CloudNativePG, the backup infrastructure for each PostgreSQL cluster is made up of the following resources: WAL archive : a location containing the WAL files (transactional logs) that are continuously written by Postgres and archived for data durability Physical base backups : a copy of all the files that PostgreSQL uses to store the data in the database (primarily the PGDATA and any tablespace) CNPG-I provides a generic and extensible interface for managing WAL archiving (both archive and restore operations), as well as the base backup and corresponding restore processes. WAL archive The WAL archive in PostgreSQL is at the heart of continuous backup , and it is fundamental for the following reasons: Hot backups : the possibility to take physical base backups from any instance in the Postgres cluster (either primary or standby) without shutting down the server; they are also known as online backups Point in Time recovery (PITR): the possibility to recover at any point in time from the first available base backup in your system Warning WAL archive alone is useless. Without a physical base backup, you cannot restore a PostgreSQL cluster. In general, the presence of a WAL archive enhances the resilience of a PostgreSQL cluster, allowing each instance to fetch any required WAL file from the archive if needed (normally the WAL archive has higher retention periods than any Postgres instance that normally recycles those files). This use case can also be extended to replica clusters , as they can simply rely on the WAL archive to synchronize across long distances, extending disaster recovery goals across different regions. When you configure a WAL archive , CloudNativePG provides out-of-the-box an RPO <= 5 minutes for disaster recovery, even across regions. Important Our recommendation is to always setup the WAL archive in production. There are known use cases \u2014 normally involving staging and development environments \u2014 where none of the above benefits are needed and the WAL archive is not necessary. RPO in this case can be any value, such as 24 hours (daily backups) or infinite (no backup at all). Cold and Hot backups Hot backups have already been defined in the previous section. They require the presence of a WAL archive, and they are the norm in any modern database management system. Cold backups , also known as offline backups, are instead physical base backups taken when the PostgreSQL instance (standby or primary) is shut down. They are consistent per definition, and they represent a snapshot of the database at the time it was shut down. As a result, PostgreSQL instances can be restarted from a cold backup without the need of a WAL archive, even though they can take advantage of it, if available (with all the benefits on the recovery side highlighted in the previous section). In those situations with a higher RPO (for example, 1 hour or 24 hours), and shorter retention periods, cold backups represent a viable option to be considered for your disaster recovery plans. Comparing Available Backup Options: Object Stores vs Volume Snapshots CloudNativePG currently supports two main approaches for physical backups: Object store\u2013based backups , via the Barman Cloud Plugin or the deprecated native integration Volume Snapshots , using the Kubernetes CSI interface and supported storage classes Important CNPG-I is designed to enable third parties to build and integrate their own backup plugins. Over time, we expect the ecosystem of supported backup solutions to grow. Object Store\u2013Based Backups Backups to an object store (e.g. AWS S3, Azure Blob, GCS): Always require WAL archiving Support hot backups only Do not support incremental or differential copies Support retention policies Volume Snapshots Native volume snapshots: Do not require WAL archiving, though its use is still strongly recommended in production Support incremental and differential copies, depending on the capabilities of the underlying storage class Support both hot and cold backups Do not support retention policies Choosing Between the Two The best approach depends on your environment and operational requirements. Consider the following factors: Object store availability : Ensure your Kubernetes cluster can access a reliable object storage solution, including a stable networking layer. Storage class capabilities : Confirm that your storage class supports CSI volume snapshots with incremental/differential features. Database size : For very large databases (VLDBs), volume snapshots are generally preferred as they enable faster recovery due to copy-on-write technology\u2014this significantly improves your Recovery Time Objective (RTO) . Data mobility : Object store\u2013based backups may offer greater flexibility for replicating or storing backups across regions or environments. Operational familiarity : Choose the method that aligns best with your team's experience and confidence in managing storage. Comparison Summary Feature Object Store Volume Snapshots WAL archiving Required Recommended 1 Cold backup \u274c \u2705 Hot backup \u2705 \u2705 Incremental copy \u274c \u2705 2 Differential copy \u274c \u2705 2 Backup from a standby \u2705 \u2705 Snapshot recovery \u274c 3 \u2705 Retention policies \u2705 \u274c Point-in-Time Recovery (PITR) \u2705 Requires WAL archive Underlying technology Barman Cloud Kubernetes API Notes: WAL archiving must currently use an object store through a plugin (or the deprecated native one). Availability of incremental and differential copies depends on the capabilities of the storage class used for PostgreSQL volumes. Snapshot recovery can be emulated by using the bootstrap.recovery.recoveryTarget.targetImmediate option. Scheduled Backups Scheduled backups are the recommended way to implement a reliable backup strategy in CloudNativePG. They are defined using the ScheduledBackup custom resource. Info For a complete list of configuration options, refer to the ScheduledBackupSpec in the API reference. Cron Schedule The schedule field defines when the backup should occur, using a six-field cron expression that includes seconds. This format follows the Go cron package specification . Warning This format differs from the traditional Unix/Linux crontab \u2014it includes a seconds field as the first entry. Example of a daily scheduled backup: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: backup-example spec: schedule: \"0 0 0 * * *\" # At midnight every day backupOwnerReference: self cluster: name: pg-backup # method: plugin, volumeSnapshot, or barmanObjectStore (default) The schedule \"0 0 0 * * *\" triggers a backup every day at midnight (00:00:00). In Kubernetes CronJobs, the equivalent expression would be 0 0 * * * , since seconds are not supported. Backup Frequency and RTO Hint The frequency of your backups directly impacts your Recovery Time Objective ( RTO ). To optimize your disaster recovery strategy based on continuous backup: Regularly test restoring from your backups. Measure the time required for a full recovery. Account for the size of base backups and the number of WAL files that must be retrieved and replayed. In most cases, a weekly base backup is sufficient. It is rare to schedule full backups more frequently than once per day. Immediate Backup To trigger a backup immediately when the ScheduledBackup is created: spec: immediate: true Pause Scheduled Backups To temporarily stop scheduled backups from running: spec: suspend: true Backup Owner Reference ( .spec.backupOwnerReference ) Controls which Kubernetes object is set as the owner of the backup resource: none : No owner reference (legacy behavior) self : The ScheduledBackup object becomes the owner cluster : The PostgreSQL cluster becomes the owner On-Demand Backups On-demand backups allow you to manually trigger a backup operation at any time by creating a Backup resource. Info For a full list of available options, see the BackupSpec in the API reference. Example: Requesting an On-Demand Backup To start an on-demand backup, apply a Backup request custom resource like the following: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: backup-example spec: method: barmanObjectStore cluster: name: pg-backup In this example, the operator will orchestrate the backup process using the barman-cloud-backup tool and store the backup in the configured object store. Monitoring Backup Progress You can check the status of the backup using: kubectl describe backup backup-example While the backup is in progress, you'll see output similar to: Name: backup-example Namespace: default ... Spec: Cluster: Name: pg-backup Status: Phase: running Started At: 2020-10-26T13:57:40Z Events: <none> Once the backup has successfully completed, the phase will be set to completed , and the output will include additional metadata: Name: backup-example Namespace: default ... Status: Backup Id: 20201026T135740 Destination Path: s3://backups/ Endpoint URL: http://minio:9000 Phase: completed S3 Credentials: Access Key Id: Name: minio Key: ACCESS_KEY_ID Secret Access Key: Name: minio Key: ACCESS_SECRET_KEY Server Name: pg-backup Started At: 2020-10-26T13:57:40Z Stopped At: 2020-10-26T13:57:44Z Important On-demand backups do not include Kubernetes secrets for the PostgreSQL superuser or application user. You should ensure these secrets are included in your broader Kubernetes cluster backup strategy. Backup Methods CloudNativePG currently supports the following backup methods for scheduled and on-demand backups: plugin \u2013 Uses a CNPG-I plugin (requires .spec.pluginConfiguration ) volumeSnapshot \u2013 Uses native Kubernetes volume snapshots barmanObjectStore \u2013 Uses Barman Cloud for object storage (deprecated starting with v1.26 in favor of the Barman Cloud Plugin , but still the default for backward compatibility) Specify the method using the .spec.method field (defaults to barmanObjectStore ). If your cluster is configured to support volume snapshots, you can enable scheduled snapshot backups like this: spec: method: volumeSnapshot To use the Barman Cloud Plugin as the backup method, set method: plugin and configure the plugin accordingly. You can find an example in the \"Performing a Base Backup\" section of the plugin documentation Backup from a Standby Taking a base backup involves reading the entire on-disk data set of a PostgreSQL instance, which can introduce I/O contention and impact the performance of the active workload. To reduce this impact, CloudNativePG supports taking backups from a standby instance , leveraging PostgreSQL\u2019s built-in capability to perform backups from read-only replicas. By default, backups are performed on the most up-to-date replica in the cluster. If no replicas are available, the backup will fall back to the primary instance . Note The examples in this section are focused on backup target selection and do not take the backup method ( spec.method ) into account, as it is not relevant to the scope being discussed. How It Works When prefer-standby is the target (the default behavior), CloudNativePG will attempt to: Identify the most synchronized standby node. Run the backup process on that standby. Fall back to the primary if no standbys are available. This strategy minimizes interference with the primary\u2019s workload. Warning Although the standby might not always be up to date with the primary, in the time continuum from the first available backup to the last archived WAL this is normally irrelevant. The base backup indeed represents the starting point from which to begin a recovery operation, including PITR. Similarly to what happens with pg_basebackup , when backing up from an online standby we do not force a switch of the WAL on the primary. This might produce unexpected results in the short term (before archive_timeout kicks in) in deployments with low write activity. Forcing Backup on the Primary To always run backups on the primary instance, explicitly set the backup target to primary in the cluster configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: [...] spec: backup: target: \"primary\" Warning Be cautious when using primary as the target for cold backups using volume snapshots , as this will require shutting down the primary instance temporarily\u2014interrupting all write operations. The same caution applies to single-instance clusters, even if you haven't explicitly set the target. Overriding the Cluster-Wide Target You can override the cluster-level target on a per-backup basis, using either Backup or ScheduledBackup resources. Here's an example of an on-demand backup: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: [...] spec: cluster: name: [...] target: \"primary\" In this example, even if the cluster\u2019s default target is prefer-standby , the backup will be taken from the primary instance. Retention Policies CloudNativePG is evolving toward a backup-agnostic architecture , where backup responsibilities are delegated to external CNPG-I plugins . These plugins are expected to offer advanced and customizable data protection features, including sophisticated retention management, that go beyond the built-in capabilities and scope of CloudNativePG. As part of this transition, the spec.backup.retentionPolicy field in the Cluster resource is deprecated and will be removed in a future release. For more details on available retention features, refer to your chosen plugin\u2019s documentation. For example: \"Retention Policies\" with Barman Cloud Plugin . Important Users are encouraged to rely on the retention mechanisms provided by the backup plugin they are using. This ensures better flexibility and consistency with the backup method in use.","title":"Backup"},{"location":"backup/#backup","text":"Info This section covers physical backups in PostgreSQL. While PostgreSQL also supports logical backups using the pg_dump utility, these are not suitable for business continuity and are not managed by CloudNativePG. If you still wish to use pg_dump , refer to the Troubleshooting / Emergency backup section for guidance. Important Starting with version 1.26, native backup and recovery capabilities are being progressively phased out of the core operator and moved to official CNPG-I plugins. This transition aligns with CloudNativePG's shift towards a backup-agnostic architecture , enabled by its extensible interface\u2014 CNPG-I \u2014which standardizes the management of WAL archiving , physical base backups , and corresponding recovery processes . CloudNativePG currently supports physical backups of PostgreSQL clusters in two main ways: Via CNPG-I plugins : the CloudNativePG Community officially supports the Barman Cloud Plugin for integration with object storage services. Natively , with support for: Object storage via Barman Cloud (although deprecated from 1.26 in favor of the Barman Cloud Plugin) Kubernetes Volume Snapshots , if supported by the underlying storage class Before selecting a backup strategy with CloudNativePG, it's important to familiarize yourself with the foundational concepts covered in the \"Main Concepts\" section. These include WAL archiving, hot and cold backups, performing backups from a standby, and more.","title":"Backup"},{"location":"backup/#main-concepts","text":"PostgreSQL natively provides first class backup and recovery capabilities based on file system level (physical) copy. These have been successfully used for more than 15 years in mission critical production databases, helping organizations all over the world achieve their disaster recovery goals with Postgres. In CloudNativePG, the backup infrastructure for each PostgreSQL cluster is made up of the following resources: WAL archive : a location containing the WAL files (transactional logs) that are continuously written by Postgres and archived for data durability Physical base backups : a copy of all the files that PostgreSQL uses to store the data in the database (primarily the PGDATA and any tablespace) CNPG-I provides a generic and extensible interface for managing WAL archiving (both archive and restore operations), as well as the base backup and corresponding restore processes.","title":"Main Concepts"},{"location":"backup/#wal-archive","text":"The WAL archive in PostgreSQL is at the heart of continuous backup , and it is fundamental for the following reasons: Hot backups : the possibility to take physical base backups from any instance in the Postgres cluster (either primary or standby) without shutting down the server; they are also known as online backups Point in Time recovery (PITR): the possibility to recover at any point in time from the first available base backup in your system Warning WAL archive alone is useless. Without a physical base backup, you cannot restore a PostgreSQL cluster. In general, the presence of a WAL archive enhances the resilience of a PostgreSQL cluster, allowing each instance to fetch any required WAL file from the archive if needed (normally the WAL archive has higher retention periods than any Postgres instance that normally recycles those files). This use case can also be extended to replica clusters , as they can simply rely on the WAL archive to synchronize across long distances, extending disaster recovery goals across different regions. When you configure a WAL archive , CloudNativePG provides out-of-the-box an RPO <= 5 minutes for disaster recovery, even across regions. Important Our recommendation is to always setup the WAL archive in production. There are known use cases \u2014 normally involving staging and development environments \u2014 where none of the above benefits are needed and the WAL archive is not necessary. RPO in this case can be any value, such as 24 hours (daily backups) or infinite (no backup at all).","title":"WAL archive"},{"location":"backup/#cold-and-hot-backups","text":"Hot backups have already been defined in the previous section. They require the presence of a WAL archive, and they are the norm in any modern database management system. Cold backups , also known as offline backups, are instead physical base backups taken when the PostgreSQL instance (standby or primary) is shut down. They are consistent per definition, and they represent a snapshot of the database at the time it was shut down. As a result, PostgreSQL instances can be restarted from a cold backup without the need of a WAL archive, even though they can take advantage of it, if available (with all the benefits on the recovery side highlighted in the previous section). In those situations with a higher RPO (for example, 1 hour or 24 hours), and shorter retention periods, cold backups represent a viable option to be considered for your disaster recovery plans.","title":"Cold and Hot backups"},{"location":"backup/#comparing-available-backup-options-object-stores-vs-volume-snapshots","text":"CloudNativePG currently supports two main approaches for physical backups: Object store\u2013based backups , via the Barman Cloud Plugin or the deprecated native integration Volume Snapshots , using the Kubernetes CSI interface and supported storage classes Important CNPG-I is designed to enable third parties to build and integrate their own backup plugins. Over time, we expect the ecosystem of supported backup solutions to grow.","title":"Comparing Available Backup Options: Object Stores vs Volume Snapshots"},{"location":"backup/#object-storebased-backups","text":"Backups to an object store (e.g. AWS S3, Azure Blob, GCS): Always require WAL archiving Support hot backups only Do not support incremental or differential copies Support retention policies","title":"Object Store\u2013Based Backups"},{"location":"backup/#volume-snapshots","text":"Native volume snapshots: Do not require WAL archiving, though its use is still strongly recommended in production Support incremental and differential copies, depending on the capabilities of the underlying storage class Support both hot and cold backups Do not support retention policies","title":"Volume Snapshots"},{"location":"backup/#choosing-between-the-two","text":"The best approach depends on your environment and operational requirements. Consider the following factors: Object store availability : Ensure your Kubernetes cluster can access a reliable object storage solution, including a stable networking layer. Storage class capabilities : Confirm that your storage class supports CSI volume snapshots with incremental/differential features. Database size : For very large databases (VLDBs), volume snapshots are generally preferred as they enable faster recovery due to copy-on-write technology\u2014this significantly improves your Recovery Time Objective (RTO) . Data mobility : Object store\u2013based backups may offer greater flexibility for replicating or storing backups across regions or environments. Operational familiarity : Choose the method that aligns best with your team's experience and confidence in managing storage.","title":"Choosing Between the Two"},{"location":"backup/#comparison-summary","text":"Feature Object Store Volume Snapshots WAL archiving Required Recommended 1 Cold backup \u274c \u2705 Hot backup \u2705 \u2705 Incremental copy \u274c \u2705 2 Differential copy \u274c \u2705 2 Backup from a standby \u2705 \u2705 Snapshot recovery \u274c 3 \u2705 Retention policies \u2705 \u274c Point-in-Time Recovery (PITR) \u2705 Requires WAL archive Underlying technology Barman Cloud Kubernetes API Notes: WAL archiving must currently use an object store through a plugin (or the deprecated native one). Availability of incremental and differential copies depends on the capabilities of the storage class used for PostgreSQL volumes. Snapshot recovery can be emulated by using the bootstrap.recovery.recoveryTarget.targetImmediate option.","title":"Comparison Summary"},{"location":"backup/#scheduled-backups","text":"Scheduled backups are the recommended way to implement a reliable backup strategy in CloudNativePG. They are defined using the ScheduledBackup custom resource. Info For a complete list of configuration options, refer to the ScheduledBackupSpec in the API reference.","title":"Scheduled Backups"},{"location":"backup/#cron-schedule","text":"The schedule field defines when the backup should occur, using a six-field cron expression that includes seconds. This format follows the Go cron package specification . Warning This format differs from the traditional Unix/Linux crontab \u2014it includes a seconds field as the first entry. Example of a daily scheduled backup: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: backup-example spec: schedule: \"0 0 0 * * *\" # At midnight every day backupOwnerReference: self cluster: name: pg-backup # method: plugin, volumeSnapshot, or barmanObjectStore (default) The schedule \"0 0 0 * * *\" triggers a backup every day at midnight (00:00:00). In Kubernetes CronJobs, the equivalent expression would be 0 0 * * * , since seconds are not supported.","title":"Cron Schedule"},{"location":"backup/#backup-frequency-and-rto","text":"Hint The frequency of your backups directly impacts your Recovery Time Objective ( RTO ). To optimize your disaster recovery strategy based on continuous backup: Regularly test restoring from your backups. Measure the time required for a full recovery. Account for the size of base backups and the number of WAL files that must be retrieved and replayed. In most cases, a weekly base backup is sufficient. It is rare to schedule full backups more frequently than once per day.","title":"Backup Frequency and RTO"},{"location":"backup/#immediate-backup","text":"To trigger a backup immediately when the ScheduledBackup is created: spec: immediate: true","title":"Immediate Backup"},{"location":"backup/#pause-scheduled-backups","text":"To temporarily stop scheduled backups from running: spec: suspend: true","title":"Pause Scheduled Backups"},{"location":"backup/#backup-owner-reference-specbackupownerreference","text":"Controls which Kubernetes object is set as the owner of the backup resource: none : No owner reference (legacy behavior) self : The ScheduledBackup object becomes the owner cluster : The PostgreSQL cluster becomes the owner","title":"Backup Owner Reference (.spec.backupOwnerReference)"},{"location":"backup/#on-demand-backups","text":"On-demand backups allow you to manually trigger a backup operation at any time by creating a Backup resource. Info For a full list of available options, see the BackupSpec in the API reference.","title":"On-Demand Backups"},{"location":"backup/#example-requesting-an-on-demand-backup","text":"To start an on-demand backup, apply a Backup request custom resource like the following: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: backup-example spec: method: barmanObjectStore cluster: name: pg-backup In this example, the operator will orchestrate the backup process using the barman-cloud-backup tool and store the backup in the configured object store.","title":"Example: Requesting an On-Demand Backup"},{"location":"backup/#monitoring-backup-progress","text":"You can check the status of the backup using: kubectl describe backup backup-example While the backup is in progress, you'll see output similar to: Name: backup-example Namespace: default ... Spec: Cluster: Name: pg-backup Status: Phase: running Started At: 2020-10-26T13:57:40Z Events: <none> Once the backup has successfully completed, the phase will be set to completed , and the output will include additional metadata: Name: backup-example Namespace: default ... Status: Backup Id: 20201026T135740 Destination Path: s3://backups/ Endpoint URL: http://minio:9000 Phase: completed S3 Credentials: Access Key Id: Name: minio Key: ACCESS_KEY_ID Secret Access Key: Name: minio Key: ACCESS_SECRET_KEY Server Name: pg-backup Started At: 2020-10-26T13:57:40Z Stopped At: 2020-10-26T13:57:44Z Important On-demand backups do not include Kubernetes secrets for the PostgreSQL superuser or application user. You should ensure these secrets are included in your broader Kubernetes cluster backup strategy.","title":"Monitoring Backup Progress"},{"location":"backup/#backup-methods","text":"CloudNativePG currently supports the following backup methods for scheduled and on-demand backups: plugin \u2013 Uses a CNPG-I plugin (requires .spec.pluginConfiguration ) volumeSnapshot \u2013 Uses native Kubernetes volume snapshots barmanObjectStore \u2013 Uses Barman Cloud for object storage (deprecated starting with v1.26 in favor of the Barman Cloud Plugin , but still the default for backward compatibility) Specify the method using the .spec.method field (defaults to barmanObjectStore ). If your cluster is configured to support volume snapshots, you can enable scheduled snapshot backups like this: spec: method: volumeSnapshot To use the Barman Cloud Plugin as the backup method, set method: plugin and configure the plugin accordingly. You can find an example in the \"Performing a Base Backup\" section of the plugin documentation","title":"Backup Methods"},{"location":"backup/#backup-from-a-standby","text":"Taking a base backup involves reading the entire on-disk data set of a PostgreSQL instance, which can introduce I/O contention and impact the performance of the active workload. To reduce this impact, CloudNativePG supports taking backups from a standby instance , leveraging PostgreSQL\u2019s built-in capability to perform backups from read-only replicas. By default, backups are performed on the most up-to-date replica in the cluster. If no replicas are available, the backup will fall back to the primary instance . Note The examples in this section are focused on backup target selection and do not take the backup method ( spec.method ) into account, as it is not relevant to the scope being discussed.","title":"Backup from a Standby"},{"location":"backup/#how-it-works","text":"When prefer-standby is the target (the default behavior), CloudNativePG will attempt to: Identify the most synchronized standby node. Run the backup process on that standby. Fall back to the primary if no standbys are available. This strategy minimizes interference with the primary\u2019s workload. Warning Although the standby might not always be up to date with the primary, in the time continuum from the first available backup to the last archived WAL this is normally irrelevant. The base backup indeed represents the starting point from which to begin a recovery operation, including PITR. Similarly to what happens with pg_basebackup , when backing up from an online standby we do not force a switch of the WAL on the primary. This might produce unexpected results in the short term (before archive_timeout kicks in) in deployments with low write activity.","title":"How It Works"},{"location":"backup/#forcing-backup-on-the-primary","text":"To always run backups on the primary instance, explicitly set the backup target to primary in the cluster configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: [...] spec: backup: target: \"primary\" Warning Be cautious when using primary as the target for cold backups using volume snapshots , as this will require shutting down the primary instance temporarily\u2014interrupting all write operations. The same caution applies to single-instance clusters, even if you haven't explicitly set the target.","title":"Forcing Backup on the Primary"},{"location":"backup/#overriding-the-cluster-wide-target","text":"You can override the cluster-level target on a per-backup basis, using either Backup or ScheduledBackup resources. Here's an example of an on-demand backup: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: [...] spec: cluster: name: [...] target: \"primary\" In this example, even if the cluster\u2019s default target is prefer-standby , the backup will be taken from the primary instance.","title":"Overriding the Cluster-Wide Target"},{"location":"backup/#retention-policies","text":"CloudNativePG is evolving toward a backup-agnostic architecture , where backup responsibilities are delegated to external CNPG-I plugins . These plugins are expected to offer advanced and customizable data protection features, including sophisticated retention management, that go beyond the built-in capabilities and scope of CloudNativePG. As part of this transition, the spec.backup.retentionPolicy field in the Cluster resource is deprecated and will be removed in a future release. For more details on available retention features, refer to your chosen plugin\u2019s documentation. For example: \"Retention Policies\" with Barman Cloud Plugin . Important Users are encouraged to rely on the retention mechanisms provided by the backup plugin they are using. This ensures better flexibility and consistency with the backup method in use.","title":"Retention Policies"},{"location":"backup_recovery/","text":"Backup and Recovery Backup and recovery are in two separate sections.","title":"Backup and Recovery"},{"location":"backup_recovery/#backup-and-recovery","text":"Backup and recovery are in two separate sections.","title":"Backup and Recovery"},{"location":"before_you_start/","text":"Before You Start Before we get started, it is essential to go over some terminology that is specific to Kubernetes and PostgreSQL. Kubernetes terminology Node A node is a worker machine in Kubernetes, either virtual or physical, where all services necessary to run pods are managed by the control plane node(s). Postgres Node A Postgres node is a Kubernetes worker node dedicated to running PostgreSQL workloads. This is achieved by applying the node-role.kubernetes.io label and taint, as proposed by CloudNativePG . It is also referred to as a postgres node. Pod A pod is the smallest computing unit that can be deployed in a Kubernetes cluster and is composed of one or more containers that share network and storage. Service A service is an abstraction that exposes as a network service an application that runs on a group of pods and standardizes important features such as service discovery across applications, load balancing, failover, and so on. Secret A secret is an object that is designed to store small amounts of sensitive data such as passwords, access keys, or tokens, and use them in pods. Storage Class A storage class allows an administrator to define the classes of storage in a cluster, including provisioner (such as AWS EBS), reclaim policies, mount options, volume expansion, and so on. Persistent Volume A persistent volume (PV) is a resource in a Kubernetes cluster that represents storage that has been either manually provisioned by an administrator or dynamically provisioned by a storage class controller. A PV is associated with a pod using a persistent volume claim and its lifecycle is independent of any pod that uses it. Normally, a PV is a network volume, especially in the public cloud. A local persistent volume (LPV) is a persistent volume that exists only on the particular node where the pod that uses it is running. Persistent Volume Claim A persistent volume claim (PVC) represents a request for storage, which might include size, access mode, or a particular storage class. Similar to how a pod consumes node resources, a PVC consumes the resources of a PV. Namespace A namespace is a logical and isolated subset of a Kubernetes cluster and can be seen as a virtual cluster within the wider physical cluster. Namespaces allow administrators to create separated environments based on projects, departments, teams, and so on. RBAC Role Based Access Control (RBAC), also known as role-based security , is a method used in computer systems security to restrict access to the network and resources of a system to authorized users only. Kubernetes has a native API to control roles at the namespace and cluster level and associate them with specific resources and individuals. CRD A custom resource definition (CRD) is an extension of the Kubernetes API and allows developers to create new data types and objects, called custom resources . Operator An operator is a custom resource that automates those steps that are normally performed by a human operator when managing one or more applications or given services. An operator assists Kubernetes in making sure that the resource's defined state always matches the observed one. kubectl kubectl is the command-line tool used to manage a Kubernetes cluster. CloudNativePG requires a Kubernetes version supported by the community. Please refer to the \"Supported releases\" page for details. PostgreSQL terminology Instance A Postgres server process running and listening on a pair \"IP address(es)\" and \"TCP port\" (usually 5432). Primary A PostgreSQL instance that can accept both read and write operations. Replica A PostgreSQL instance replicating from the only primary instance in a cluster and is kept updated by reading a stream of Write-Ahead Log (WAL) records. A replica is also known as standby or secondary server. PostgreSQL relies on physical streaming replication (async/sync) and file-based log shipping (async). Hot Standby PostgreSQL feature that allows a replica to accept read-only workloads. Cluster To be intended as High Availability (HA) Cluster: a set of PostgreSQL instances made up by a single primary and an optional arbitrary number of replicas. Replica Cluster A CloudNativePG Cluster that is in continuous recovery mode from a selected PostgreSQL cluster, normally residing outside the Kubernetes cluster. It is a feature that enables multi-cluster deployments in private, public, hybrid, and multi-cloud contexts. Designated Primary A PostgreSQL standby instance in a replica cluster that is in continuous recovery from another PostgreSQL cluster and that is designated to become primary in case the replica cluster becomes primary. Superuser In PostgreSQL a superuser is any role with both LOGIN and SUPERUSER privileges. For security reasons, CloudNativePG performs administrative tasks by connecting to the postgres database as the postgres user via peer authentication over the local Unix Domain Socket. WAL Write-Ahead Logging (WAL) is a standard method for ensuring data integrity in database management systems. PVC group A PVC group in CloudNativePG's terminology is a group of related PVCs belonging to the same PostgreSQL instance, namely the main volume containing the PGDATA ( storage ) and the volume for WALs ( walStorage ). RTO Acronym for \"recovery time objective\", the amount of time a system can be unavailable without adversely impacting the application. RPO Acronym for \"recovery point objective\", a calculation of the level of acceptable data loss following a disaster recovery scenario. Cloud terminology Region A region in the Cloud is an isolated and independent geographic area organized in availability zones . Zones within a region have very little round-trip network latency. Zone An availability zone in the Cloud (also known as zone ) is an area in a region where resources can be deployed. Usually, an availability zone corresponds to a data center or an isolated building of the same data center. What to do next Now that you have familiarized with the terminology, you can decide to test CloudNativePG on your laptop using a local cluster before deploying the operator in your selected cloud environment.","title":"Before You Start"},{"location":"before_you_start/#before-you-start","text":"Before we get started, it is essential to go over some terminology that is specific to Kubernetes and PostgreSQL.","title":"Before You Start"},{"location":"before_you_start/#kubernetes-terminology","text":"Node A node is a worker machine in Kubernetes, either virtual or physical, where all services necessary to run pods are managed by the control plane node(s). Postgres Node A Postgres node is a Kubernetes worker node dedicated to running PostgreSQL workloads. This is achieved by applying the node-role.kubernetes.io label and taint, as proposed by CloudNativePG . It is also referred to as a postgres node. Pod A pod is the smallest computing unit that can be deployed in a Kubernetes cluster and is composed of one or more containers that share network and storage. Service A service is an abstraction that exposes as a network service an application that runs on a group of pods and standardizes important features such as service discovery across applications, load balancing, failover, and so on. Secret A secret is an object that is designed to store small amounts of sensitive data such as passwords, access keys, or tokens, and use them in pods. Storage Class A storage class allows an administrator to define the classes of storage in a cluster, including provisioner (such as AWS EBS), reclaim policies, mount options, volume expansion, and so on. Persistent Volume A persistent volume (PV) is a resource in a Kubernetes cluster that represents storage that has been either manually provisioned by an administrator or dynamically provisioned by a storage class controller. A PV is associated with a pod using a persistent volume claim and its lifecycle is independent of any pod that uses it. Normally, a PV is a network volume, especially in the public cloud. A local persistent volume (LPV) is a persistent volume that exists only on the particular node where the pod that uses it is running. Persistent Volume Claim A persistent volume claim (PVC) represents a request for storage, which might include size, access mode, or a particular storage class. Similar to how a pod consumes node resources, a PVC consumes the resources of a PV. Namespace A namespace is a logical and isolated subset of a Kubernetes cluster and can be seen as a virtual cluster within the wider physical cluster. Namespaces allow administrators to create separated environments based on projects, departments, teams, and so on. RBAC Role Based Access Control (RBAC), also known as role-based security , is a method used in computer systems security to restrict access to the network and resources of a system to authorized users only. Kubernetes has a native API to control roles at the namespace and cluster level and associate them with specific resources and individuals. CRD A custom resource definition (CRD) is an extension of the Kubernetes API and allows developers to create new data types and objects, called custom resources . Operator An operator is a custom resource that automates those steps that are normally performed by a human operator when managing one or more applications or given services. An operator assists Kubernetes in making sure that the resource's defined state always matches the observed one. kubectl kubectl is the command-line tool used to manage a Kubernetes cluster. CloudNativePG requires a Kubernetes version supported by the community. Please refer to the \"Supported releases\" page for details.","title":"Kubernetes terminology"},{"location":"before_you_start/#postgresql-terminology","text":"Instance A Postgres server process running and listening on a pair \"IP address(es)\" and \"TCP port\" (usually 5432). Primary A PostgreSQL instance that can accept both read and write operations. Replica A PostgreSQL instance replicating from the only primary instance in a cluster and is kept updated by reading a stream of Write-Ahead Log (WAL) records. A replica is also known as standby or secondary server. PostgreSQL relies on physical streaming replication (async/sync) and file-based log shipping (async). Hot Standby PostgreSQL feature that allows a replica to accept read-only workloads. Cluster To be intended as High Availability (HA) Cluster: a set of PostgreSQL instances made up by a single primary and an optional arbitrary number of replicas. Replica Cluster A CloudNativePG Cluster that is in continuous recovery mode from a selected PostgreSQL cluster, normally residing outside the Kubernetes cluster. It is a feature that enables multi-cluster deployments in private, public, hybrid, and multi-cloud contexts. Designated Primary A PostgreSQL standby instance in a replica cluster that is in continuous recovery from another PostgreSQL cluster and that is designated to become primary in case the replica cluster becomes primary. Superuser In PostgreSQL a superuser is any role with both LOGIN and SUPERUSER privileges. For security reasons, CloudNativePG performs administrative tasks by connecting to the postgres database as the postgres user via peer authentication over the local Unix Domain Socket. WAL Write-Ahead Logging (WAL) is a standard method for ensuring data integrity in database management systems. PVC group A PVC group in CloudNativePG's terminology is a group of related PVCs belonging to the same PostgreSQL instance, namely the main volume containing the PGDATA ( storage ) and the volume for WALs ( walStorage ). RTO Acronym for \"recovery time objective\", the amount of time a system can be unavailable without adversely impacting the application. RPO Acronym for \"recovery point objective\", a calculation of the level of acceptable data loss following a disaster recovery scenario.","title":"PostgreSQL terminology"},{"location":"before_you_start/#cloud-terminology","text":"Region A region in the Cloud is an isolated and independent geographic area organized in availability zones . Zones within a region have very little round-trip network latency. Zone An availability zone in the Cloud (also known as zone ) is an area in a region where resources can be deployed. Usually, an availability zone corresponds to a data center or an isolated building of the same data center.","title":"Cloud terminology"},{"location":"before_you_start/#what-to-do-next","text":"Now that you have familiarized with the terminology, you can decide to test CloudNativePG on your laptop using a local cluster before deploying the operator in your selected cloud environment.","title":"What to do next"},{"location":"benchmarking/","text":"Benchmarking The CNPG kubectl plugin provides an easy way for benchmarking a PostgreSQL deployment in Kubernetes using CloudNativePG. Benchmarking is focused on two aspects: the database , by relying on pgbench the storage , by relying on fio Important pgbench and fio must be run in a staging or pre-production environment. Do not use these plugins in a production environment, as it might have catastrophic consequences on your databases and the other workloads/applications that run in the same shared environment. pgbench The kubectl CNPG plugin command pgbench executes a user-defined pgbench job against an existing Postgres Cluster. Through the --dry-run flag you can generate the manifest of the job for later modification/execution. A common command structure with pgbench is the following: kubectl cnpg pgbench \\ -n <namespace> <cluster-name> \\ --job-name <pgbench-job> \\ --db-name <db-name> \\ -- <pgbench options> Important Please refer to the pgbench documentation for information about the specific options to be used in your jobs. This example creates a job called pgbench-init that initializes for pgbench OLTP-like purposes the app database in a Cluster named cluster-example , using a scale factor of 1000: kubectl cnpg pgbench \\ --job-name pgbench-init \\ cluster-example \\ -- --initialize --scale 1000 Note This will generate a database with 100000000 records, taking approximately 13GB of space on disk. You can see the progress of the job with: kubectl logs jobs/pgbench-run The following example creates a job called pgbench-run executing pgbench against the previously initialized database for 30 seconds, using a single connection: kubectl cnpg pgbench \\ --job-name pgbench-run \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 The next example runs pgbench against an existing database by using the --db-name flag and the pgbench namespace: kubectl cnpg pgbench \\ --db-name pgbench \\ --job-name pgbench-job \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 By default, jobs do not expire. You can enable automatic deletion with the --ttl flag. The job will be deleted after the specified duration (in seconds). kubectl cnpg pgbench \\ --job-name pgbench-run \\ --ttl 600 \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 If you want to run a pgbench job on a specific worker node, you can use the --node-selector option. Suppose you want to run the previous initialization job on a node having the workload=pgbench label, you can run: kubectl cnpg pgbench \\ --db-name pgbench \\ --job-name pgbench-init \\ --node-selector workload=pgbench \\ cluster-example \\ -- --initialize --scale 1000 The job status can be fetched by running: kubectl get job/pgbench-job -n <namespace> NAME COMPLETIONS DURATION AGE job-name 1/1 15s 41s Once the job is completed the results can be gathered by executing: kubectl logs job/pgbench-job -n <namespace> fio The kubectl CNPG plugin command fio executes a fio job with default values and read operations. Through the --dry-run flag you can generate the manifest of the job for later modification/execution. Note The kubectl plugin command fio will create a deployment with predefined fio job values using a ConfigMap. If you want to provide custom job values, we recommend generating a manifest using the --dry-run flag and providing your custom job values in the generated ConfigMap. Example of default usage: kubectl cnpg fio <fio-name> Example with custom values: kubectl cnpg fio <fio-name> \\ -n <namespace> \\ --storageClass <name> \\ --pvcSize <size> Example of how to run the fio command against a StorageClass named standard and pvcSize: 2Gi in the fio namespace: kubectl cnpg fio fio-job \\ -n fio \\ --storageClass standard \\ --pvcSize 2Gi The deployment status can be fetched by running: kubectl get deployment/fio-job -n fio NAME READY UP-TO-DATE AVAILABLE AGE fio-job 1/1 1 1 14s After running kubectl plugin command fio . It will: Create a PVC Create a ConfigMap representing the configuration of a fio job Create a fio deployment composed by a single Pod, which will run fio on the PVC, create graphs after completing the benchmark and start serving the generated files with a webserver. We use the fio-tools image for that. The Pod created by the deployment will be ready when it starts serving the results. You can forward the port of the pod created by the deployment kubectl port-forward -n <namespace> deployment/<fio-name> 8000 and then use a browser and connect to http://localhost:8000/ to get the data. The default 8k block size has been chosen to emulate a PostgreSQL workload. Disks that cap the amount of available IOPS can show very different throughput values when changing this parameter. Below is an example diagram of sequential writes on a local disk mounted on a dedicated Kubernetes node (1 hour benchmark): After all testing is done, fio deployment and resources can be deleted by: kubectl cnpg fio <fio-job-name> --dry-run | kubectl delete -f - make sure use the same name which was used to create the fio deployment and add namespace if applicable.","title":"Benchmarking"},{"location":"benchmarking/#benchmarking","text":"The CNPG kubectl plugin provides an easy way for benchmarking a PostgreSQL deployment in Kubernetes using CloudNativePG. Benchmarking is focused on two aspects: the database , by relying on pgbench the storage , by relying on fio Important pgbench and fio must be run in a staging or pre-production environment. Do not use these plugins in a production environment, as it might have catastrophic consequences on your databases and the other workloads/applications that run in the same shared environment.","title":"Benchmarking"},{"location":"benchmarking/#pgbench","text":"The kubectl CNPG plugin command pgbench executes a user-defined pgbench job against an existing Postgres Cluster. Through the --dry-run flag you can generate the manifest of the job for later modification/execution. A common command structure with pgbench is the following: kubectl cnpg pgbench \\ -n <namespace> <cluster-name> \\ --job-name <pgbench-job> \\ --db-name <db-name> \\ -- <pgbench options> Important Please refer to the pgbench documentation for information about the specific options to be used in your jobs. This example creates a job called pgbench-init that initializes for pgbench OLTP-like purposes the app database in a Cluster named cluster-example , using a scale factor of 1000: kubectl cnpg pgbench \\ --job-name pgbench-init \\ cluster-example \\ -- --initialize --scale 1000 Note This will generate a database with 100000000 records, taking approximately 13GB of space on disk. You can see the progress of the job with: kubectl logs jobs/pgbench-run The following example creates a job called pgbench-run executing pgbench against the previously initialized database for 30 seconds, using a single connection: kubectl cnpg pgbench \\ --job-name pgbench-run \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 The next example runs pgbench against an existing database by using the --db-name flag and the pgbench namespace: kubectl cnpg pgbench \\ --db-name pgbench \\ --job-name pgbench-job \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 By default, jobs do not expire. You can enable automatic deletion with the --ttl flag. The job will be deleted after the specified duration (in seconds). kubectl cnpg pgbench \\ --job-name pgbench-run \\ --ttl 600 \\ cluster-example \\ -- --time 30 --client 1 --jobs 1 If you want to run a pgbench job on a specific worker node, you can use the --node-selector option. Suppose you want to run the previous initialization job on a node having the workload=pgbench label, you can run: kubectl cnpg pgbench \\ --db-name pgbench \\ --job-name pgbench-init \\ --node-selector workload=pgbench \\ cluster-example \\ -- --initialize --scale 1000 The job status can be fetched by running: kubectl get job/pgbench-job -n <namespace> NAME COMPLETIONS DURATION AGE job-name 1/1 15s 41s Once the job is completed the results can be gathered by executing: kubectl logs job/pgbench-job -n <namespace>","title":"pgbench"},{"location":"benchmarking/#fio","text":"The kubectl CNPG plugin command fio executes a fio job with default values and read operations. Through the --dry-run flag you can generate the manifest of the job for later modification/execution. Note The kubectl plugin command fio will create a deployment with predefined fio job values using a ConfigMap. If you want to provide custom job values, we recommend generating a manifest using the --dry-run flag and providing your custom job values in the generated ConfigMap. Example of default usage: kubectl cnpg fio <fio-name> Example with custom values: kubectl cnpg fio <fio-name> \\ -n <namespace> \\ --storageClass <name> \\ --pvcSize <size> Example of how to run the fio command against a StorageClass named standard and pvcSize: 2Gi in the fio namespace: kubectl cnpg fio fio-job \\ -n fio \\ --storageClass standard \\ --pvcSize 2Gi The deployment status can be fetched by running: kubectl get deployment/fio-job -n fio NAME READY UP-TO-DATE AVAILABLE AGE fio-job 1/1 1 1 14s After running kubectl plugin command fio . It will: Create a PVC Create a ConfigMap representing the configuration of a fio job Create a fio deployment composed by a single Pod, which will run fio on the PVC, create graphs after completing the benchmark and start serving the generated files with a webserver. We use the fio-tools image for that. The Pod created by the deployment will be ready when it starts serving the results. You can forward the port of the pod created by the deployment kubectl port-forward -n <namespace> deployment/<fio-name> 8000 and then use a browser and connect to http://localhost:8000/ to get the data. The default 8k block size has been chosen to emulate a PostgreSQL workload. Disks that cap the amount of available IOPS can show very different throughput values when changing this parameter. Below is an example diagram of sequential writes on a local disk mounted on a dedicated Kubernetes node (1 hour benchmark): After all testing is done, fio deployment and resources can be deleted by: kubectl cnpg fio <fio-job-name> --dry-run | kubectl delete -f - make sure use the same name which was used to create the fio deployment and add namespace if applicable.","title":"fio"},{"location":"bootstrap/","text":"Bootstrap This section describes the options available to create a new PostgreSQL cluster and the design rationale behind them. There are primarily two ways to bootstrap a new cluster: from scratch ( initdb ) from an existing PostgreSQL cluster, either directly ( pg_basebackup ) or indirectly through a physical base backup ( recovery ) The initdb bootstrap also provides the option to import one or more databases from an existing PostgreSQL cluster, even if it's outside Kubernetes or running a different major version of PostgreSQL. For more detailed information about this feature, please refer to the \"Importing Postgres databases\" section. Important Bootstrapping from an existing cluster enables the creation of a replica cluster \u2014an independent PostgreSQL cluster that remains in continuous recovery, stays synchronized with the source cluster, and accepts read-only connections. For more details, refer to the Replica Cluster section . Warning CloudNativePG requires both the postgres user and database to always exist. Using the local Unix Domain Socket, it needs to connect as the postgres user to the postgres database via peer authentication in order to perform administrative tasks on the cluster. DO NOT DELETE the postgres user or the postgres database!!! Info CloudNativePG is gradually introducing support for Kubernetes' native VolumeSnapshot API for both incremental and differential copy in backup and recovery operations - if supported by the underlying storage classes. Please see \"Recovery from Volume Snapshot objects\" for details. The bootstrap section The bootstrap method can be defined in the bootstrap section of the cluster specification. CloudNativePG currently supports the following bootstrap methods: initdb : initialize a new PostgreSQL cluster (default) recovery : create a PostgreSQL cluster by restoring from a base backup of an existing cluster and, if needed, replaying all the available WAL files or up to a given point in time pg_basebackup : create a PostgreSQL cluster by cloning an existing one of the same major version using pg_basebackup through the streaming replication protocol. This method is particularly useful for migrating databases to CloudNativePG, although meeting all requirements can be challenging. Be sure to review the warnings in the pg_basebackup subsection carefully. Only one bootstrap method can be specified in the manifest. Attempting to define multiple bootstrap methods will result in validation errors. In contrast to the initdb method, both recovery and pg_basebackup create a new cluster based on another one (either offline or online) and can be used to spin up replica clusters. They both rely on the definition of external clusters. Refer to the replica cluster section for more information. Given the amount of possible backup methods and combinations of backup storage that the CloudNativePG operator provides for recovery , please refer to the dedicated \"Recovery\" section for guidance on each method. API reference Please refer to the \"API reference for the bootstrap section for more information. The externalClusters section The externalClusters section of the cluster manifest can be used to configure access to one or more PostgreSQL clusters as sources . The primary use cases include: Importing Databases: Specify an external source to be utilized during the importation of databases via logical backup and restore, as part of the initdb bootstrap method. Cross-Region Replication: Define a cross-region PostgreSQL cluster employing physical replication, capable of extending across distinct Kubernetes clusters or traditional VM/bare-metal environments. Recovery from Physical Base Backup: Recover, fully or at a given Point-In-Time, a PostgreSQL cluster by referencing a physical base backup. Info Ongoing development will extend the functionality of externalClusters to accommodate additional use cases, such as logical replication and foreign servers in future releases. As far as bootstrapping is concerned, externalClusters can be used to define the source PostgreSQL cluster for either the pg_basebackup method or the recovery one. An external cluster needs to have: a name that identifies the external cluster, to be used as a reference via the source option at least one of the following: information about streaming connection information about the recovery object store , which is a Barman Cloud compatible object store that contains: the WAL archive (required for Point In Time Recovery) the catalog of physical base backups for the Postgres cluster Note A recovery object store is normally an AWS S3, Azure Blob Storage, or Google Cloud Storage source that is managed by Barman Cloud. When only the streaming connection is defined, the source can be used for the pg_basebackup method. When only the recovery object store is defined, the source can be used for the recovery method. When both are defined, any of the two bootstrap methods can be chosen. The following table summarizes your options: Content of externalClusters pg_basebackup recovery Only streaming \u2713 Only object store \u2713 Streaming and object store \u2713 \u2713 Furthermore, in case of pg_basebackup or full recovery point in time, the cluster is eligible for replica cluster mode. This means that the cluster is continuously fed from the source, either via streaming, via WAL shipping through the PostgreSQL's restore_command , or any of the two. API reference Please refer to the \"API reference for the externalClusters section for more information. Password files Whenever a password is supplied within an externalClusters entry, CloudNativePG autonomously manages a PostgreSQL password file for it, residing at /controller/external/NAME/pgpass in each instance. This approach enables CloudNativePG to securely establish connections with an external server without exposing any passwords in the connection string. Instead, the connection safely references the aforementioned file through the passfile connection parameter. Bootstrap an empty cluster ( initdb ) The initdb bootstrap method is used to create a new PostgreSQL cluster from scratch. It is the default one unless specified differently. The following example contains the full structure of the initdb configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app secret: name: app-secret storage: size: 1Gi The above example of bootstrap will: create a new PGDATA folder using PostgreSQL's native initdb command create an unprivileged user named app set the password of the latter ( app ) using the one in the app-secret secret (make sure that username matches the same name of the owner ) create a database called app owned by the app user. Thanks to the convention over configuration paradigm , you can let the operator choose a default database name ( app ) and a default application user name (same as the database name), as well as randomly generate a secure password for both the superuser and the application user in PostgreSQL. Alternatively, you can generate your password, store it as a secret, and use it in the PostgreSQL cluster - as described in the above example. The supplied secret must comply with the specifications of the kubernetes.io/basic-auth type . As a result, the username in the secret must match the one of the owner (for the application secret) and postgres for the superuser one. The following is an example of a basic-auth secret: apiVersion: v1 data: username: YXBw password: cGFzc3dvcmQ= kind: Secret metadata: name: app-secret type: kubernetes.io/basic-auth The application database is the one that should be used to store application data. Applications should connect to the cluster with the user that owns the application database. Important If you need to create additional users, please refer to \"Declarative database role management\" . In case you don't supply any database name, the operator will proceed by convention and create the app database, and adds it to the cluster definition using a defaulting webhook . The user that owns the database defaults to the database name instead. The application user is not used internally by the operator, which instead relies on the superuser to reconcile the cluster with the desired status. Passing Options to initdb The PostgreSQL data directory is initialized using the initdb PostgreSQL command . CloudNativePG enables you to customize the behavior of initdb to modify settings such as default locale configurations and data checksums. Warning CloudNativePG acts only as a direct proxy to initdb for locale-related options, due to the ongoing and significant enhancements in PostgreSQL's locale support. It is your responsibility to ensure that the correct options are provided, following the PostgreSQL documentation, and to verify that the bootstrap process completes successfully. To include custom options in the initdb command, you can use the following parameters: builtinLocale When builtinLocale is set to a value, CloudNativePG passes it to the --builtin-locale option in initdb . This option controls the builtin locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to builtin . Available from PostgreSQL 17. dataChecksums When dataChecksums is set to true , CloudNativePG invokes the -k option in initdb to enable checksums on data pages and help detect corruption by the I/O system - that would otherwise be silent (default: false ). encoding When encoding set to a value, CloudNativePG passes it to the --encoding option in initdb , which selects the encoding of the template database (default: UTF8 ). icuLocale When icuLocale is set to a value, CloudNativePG passes it to the --icu-locale option in initdb . This option controls the ICU locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules When icuRules is set to a value, CloudNativePG passes it to the --icu-rules option in initdb . This option controls the ICU locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to icu . Available from PostgreSQL 16. locale When locale is set to a value, CloudNativePG passes it to the --locale option in initdb . This option controls the locale, as defined in \"Locale Support\" from the PostgreSQL documentation. By default, the locale parameter is empty. In this case, environment variables such as LANG are used to determine the locale. Be aware that these variables can vary between container images, potentially leading to inconsistent behavior. localeCollate When localeCollate is set to a value, CloudNativePG passes it to the --lc-collate option in initdb . This option controls the collation order ( LC_COLLATE subcategory), as defined in \"Locale Support\" from the PostgreSQL documentation (default: C ). localeCType When localeCType is set to a value, CloudNativePG passes it to the --lc-ctype option in initdb . This option controls the collation order ( LC_CTYPE subcategory), as defined in \"Locale Support\" from the PostgreSQL documentation (default: C ). localeProvider When localeProvider is set to a value, CloudNativePG passes it to the --locale-provider option in initdb . This option controls the locale provider, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty, which means libc for PostgreSQL). Available from PostgreSQL 15. walSegmentSize When walSegmentSize is set to a value, CloudNativePG passes it to the --wal-segsize option in initdb (default: not set - defined by PostgreSQL as 16 megabytes). Note The only two locale options that CloudNativePG implements during the initdb bootstrap refer to the LC_COLLATE and LC_TYPE subcategories. The remaining locale subcategories can be configured directly in the PostgreSQL configuration, using the lc_messages , lc_monetary , lc_numeric , and lc_time parameters. The following example enables data checksums and sets the default encoding to LATIN1 : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app dataChecksums: true encoding: 'LATIN1' storage: size: 1Gi Warning CloudNativePG supports another way to customize the behavior of the initdb invocation, using the options subsection. However, given that there are options that can break the behavior of the operator (such as --auth or -d ), this technique is deprecated and will be removed from future versions of the API. Executing Queries After Initialization You can specify a custom list of queries that will be executed once, immediately after the cluster is created and configured. These queries will be executed as the superuser ( postgres ) against three different databases, in this specific order: The postgres database ( postInit section) The template1 database ( postInitTemplate section) The application database ( postInitApplication section) For each of these sections, CloudNativePG provides two ways to specify custom queries, executed in the following order: As a list of SQL queries in the cluster's definition ( postInitSQL , postInitTemplateSQL , and postInitApplicationSQL stanzas) As a list of Secrets and/or ConfigMaps, each containing a SQL script to be executed ( postInitSQLRefs , postInitTemplateSQLRefs , and postInitApplicationSQLRefs stanzas). Secrets are processed before ConfigMaps. Objects in each list will be processed sequentially. Warning Use the postInit , postInitTemplate , and postInitApplication options with extreme care, as queries are run as a superuser and can disrupt the entire cluster. An error in any of those queries will interrupt the bootstrap phase, leaving the cluster incomplete and requiring manual intervention. Important Ensure the existence of entries inside the ConfigMaps or Secrets specified in postInitSQLRefs , postInitTemplateSQLRefs , and postInitApplicationSQLRefs , otherwise the bootstrap will fail. Errors in any of those SQL files will prevent the bootstrap phase from completing successfully. The following example runs a single SQL query as part of the postInitSQL stanza: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app dataChecksums: true localeCollate: 'en_US' localeCType: 'en_US' postInitSQL: - CREATE DATABASE angus storage: size: 1Gi The example below relies on postInitApplicationSQLRefs to specify a secret and a ConfigMap containing the queries to run after the initialization on the application database: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app postInitApplicationSQLRefs: secretRefs: - name: my-secret key: secret.sql configMapRefs: - name: my-configmap key: configmap.sql storage: size: 1Gi Note Within SQL scripts, each SQL statement is executed in a single exec on the server according to the PostgreSQL semantics . Comments can be included, but internal commands like psql cannot. Bootstrap from another cluster CloudNativePG enables bootstrapping a cluster starting from another one of the same major version. This operation can be carried out either connecting directly to the source cluster via streaming replication ( pg_basebackup ), or indirectly via an existing physical base backup ( recovery ). The source cluster must be defined in the externalClusters section, identified by name (our recommendation is to use the same name of the origin cluster). Important By default the recovery method strictly uses the name of the cluster in the externalClusters section to locate the main folder of the backup data within the object store, which is normally reserved for the name of the server. Backup plugins provide ways to specify a different one. For example, the Barman Cloud Plugin provides the serverName parameter (by default assigned to the value of name in the external cluster definition). Bootstrap from a backup ( recovery ) Given the variety of backup methods and combinations of backup storage options provided by the CloudNativePG operator for recovery , please refer to the dedicated \"Recovery\" section for detailed guidance on each method. Bootstrap from a live cluster ( pg_basebackup ) The pg_basebackup bootstrap mode allows you to create a new cluster ( target ) as an exact physical copy of an existing and binary-compatible PostgreSQL instance ( source ) managed by CloudNativePG, using a valid streaming replication connection. The source instance can either be a primary or a standby PostgreSQL server. It\u2019s crucial to thoroughly review the requirements section below, as the pros and cons of PostgreSQL physical replication fully apply. The primary use cases for this method include: Reporting and business intelligence clusters that need to be regenerated periodically (daily, weekly) Test databases containing live data that require periodic regeneration (daily, weekly, monthly) and anonymization Rapid spin-up of a standalone replica cluster Physical migrations of CloudNativePG clusters to different namespaces or Kubernetes clusters Important Avoid using this method, based on physical replication, to migrate an existing PostgreSQL cluster outside of Kubernetes into CloudNativePG, unless you are completely certain that all requirements are met and the operation has been thoroughly tested. The CloudNativePG community does not endorse this approach for such use cases, and recommends using logical import instead. It is exceedingly rare that all requirements for physical replication are met in a way that seamlessly works with CloudNativePG. Warning In its current implementation, this method clones the source PostgreSQL instance, thereby creating a snapshot . Once the cloning process has finished, the new cluster is immediately started. Refer to \"Current limitations\" for more details. Similar to the recovery bootstrap method, once the cloning operation is complete, the operator takes full ownership of the target cluster, starting from the first instance. This includes overriding certain configuration parameters as required by CloudNativePG, resetting the superuser password, creating the streaming_replica user, managing replicas, and more. The resulting cluster operates independently from the source instance. Important Configuring the network connection between the target and source instances lies outside the scope of CloudNativePG documentation, as it depends heavily on the specific context and environment. The streaming replication client on the target instance, managed transparently by pg_basebackup , can authenticate on the source instance using one of the following methods: Username/password TLS client certificate Both authentication methods are detailed below. Requirements The following requirements apply to the pg_basebackup bootstrap method: target and source must have the same hardware architecture target and source must have the same major PostgreSQL version target and source must have the same tablespaces source must be configured with enough max_wal_senders to grant access from the target for this one-off operation by providing at least one walsender for the backup plus one for WAL streaming the network between source and target must be configured to enable the target instance to connect to the PostgreSQL port on the source instance source must have a role with REPLICATION LOGIN privileges and must accept connections from the target instance for this role in pg_hba.conf , preferably via TLS (see \"About the replication user\" below) target must be able to successfully connect to the source PostgreSQL instance using a role with REPLICATION LOGIN privileges Seealso For further information, please refer to the \"Planning\" section for Warm Standby , the pg_basebackup page and the \"High Availability, Load Balancing, and Replication\" chapter in the PostgreSQL documentation. About the replication user As explained in the requirements section, you need to have a user with either the SUPERUSER or, preferably, just the REPLICATION privilege in the source instance. If the source database is created with CloudNativePG, you can reuse the streaming_replica user and take advantage of client TLS certificates authentication (which, by default, is the only allowed connection method for streaming_replica ). For all other cases, including outside Kubernetes, please verify that you already have a user with the REPLICATION privilege, or create a new one by following the instructions below. As postgres user on the source system, please run: createuser -P --replication streaming_replica Enter the password at the prompt and save it for later, as you will need to add it to a secret in the target instance. Note Although the name is not important, we will use streaming_replica for the sake of simplicity. Feel free to change it as you like, provided you adapt the instructions in the following sections. Username/Password authentication The first authentication method supported by CloudNativePG with the pg_basebackup bootstrap is based on username and password matching. Make sure you have the following information before you start the procedure: location of the source instance, identified by a hostname or an IP address and a TCP port replication username ( streaming_replica for simplicity) password You might need to add a line similar to the following to the pg_hba.conf file on the source PostgreSQL instance: # A more restrictive rule for TLS and IP of origin is recommended host replication streaming_replica all md5 The following manifest creates a new PostgreSQL 17.5 cluster, called target-db , using the pg_basebackup bootstrap method to clone an external PostgreSQL cluster defined as source-db (in the externalClusters array). As you can see, the source-db definition points to the source-db.foo.com host and connects as the streaming_replica user, whose password is stored in the password key of the source-db-replica-user secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: target-db spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 bootstrap: pg_basebackup: source: source-db storage: size: 1Gi externalClusters: - name: source-db connectionParameters: host: source-db.foo.com user: streaming_replica password: name: source-db-replica-user key: password All the requirements must be met for the clone operation to work, including the same PostgreSQL version (in our case 17.5). TLS certificate authentication The second authentication method supported by CloudNativePG with the pg_basebackup bootstrap is based on TLS client certificates. This is the recommended approach from a security standpoint. The following example clones an existing PostgreSQL cluster ( cluster-example ) in the same Kubernetes cluster. Note This example can be easily adapted to cover an instance that resides outside the Kubernetes cluster. The manifest defines a new PostgreSQL 17.5 cluster called cluster-clone-tls , which is bootstrapped using the pg_basebackup method from the cluster-example external cluster. The host is identified by the read/write service in the same cluster, while the streaming_replica user is authenticated thanks to the provided keys, certificate, and certification authority information (respectively in the cluster-example-replication and cluster-example-ca secrets). apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-clone-tls spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 bootstrap: pg_basebackup: source: cluster-example storage: size: 1Gi externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw.default.svc user: streaming_replica sslmode: verify-full sslKey: name: cluster-example-replication key: tls.key sslCert: name: cluster-example-replication key: tls.crt sslRootCert: name: cluster-example-ca key: ca.crt Configure the application database We also support to configure the application database for cluster which bootstrap from a live cluster, just like the case of initdb and recovery bootstrap method. If the new cluster is created as a replica cluster (with replica mode enabled), application database configuration will be skipped. Important While the Cluster is in recovery mode, no changes to the database, including the catalog, are permitted. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. During the recovery phase, roles remain as defined in the source cluster. The example below configures the app database with the owner app and the password stored in the provided secret app-secret , following the bootstrap from a live cluster. apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: bootstrap: pg_basebackup: database: app owner: app secret: name: app-secret source: cluster-example With the above configuration, the following will happen only after recovery is completed : If the app database does not exist, it will be created. If the app user does not exist, it will be created. If the app user is not the owner of the app database, ownership will be granted to the app user. If the username value matches the owner value in the secret, the password for the application user (the app user in this case) will be updated to the password value in the secret. Current limitations Snapshot copy The pg_basebackup method takes a snapshot of the source instance in the form of a PostgreSQL base backup. All transactions written from the start of the backup to the correct termination of the backup will be streamed to the target instance using a second connection (see the --wal-method=stream option for pg_basebackup ). Once the backup is completed, the new instance will be started on a new timeline and diverge from the source. For this reason, it is advised to stop all write operations to the source database before migrating to the target database. Note that this limitation applies only if the target cluster is not defined as a replica cluster. Important Before you attempt a migration, you must test both the procedure and the applications. In particular, it is fundamental that you run the migration procedure as many times as needed to systematically measure the downtime of your applications in production.","title":"Bootstrap"},{"location":"bootstrap/#bootstrap","text":"This section describes the options available to create a new PostgreSQL cluster and the design rationale behind them. There are primarily two ways to bootstrap a new cluster: from scratch ( initdb ) from an existing PostgreSQL cluster, either directly ( pg_basebackup ) or indirectly through a physical base backup ( recovery ) The initdb bootstrap also provides the option to import one or more databases from an existing PostgreSQL cluster, even if it's outside Kubernetes or running a different major version of PostgreSQL. For more detailed information about this feature, please refer to the \"Importing Postgres databases\" section. Important Bootstrapping from an existing cluster enables the creation of a replica cluster \u2014an independent PostgreSQL cluster that remains in continuous recovery, stays synchronized with the source cluster, and accepts read-only connections. For more details, refer to the Replica Cluster section . Warning CloudNativePG requires both the postgres user and database to always exist. Using the local Unix Domain Socket, it needs to connect as the postgres user to the postgres database via peer authentication in order to perform administrative tasks on the cluster. DO NOT DELETE the postgres user or the postgres database!!! Info CloudNativePG is gradually introducing support for Kubernetes' native VolumeSnapshot API for both incremental and differential copy in backup and recovery operations - if supported by the underlying storage classes. Please see \"Recovery from Volume Snapshot objects\" for details.","title":"Bootstrap"},{"location":"bootstrap/#the-bootstrap-section","text":"The bootstrap method can be defined in the bootstrap section of the cluster specification. CloudNativePG currently supports the following bootstrap methods: initdb : initialize a new PostgreSQL cluster (default) recovery : create a PostgreSQL cluster by restoring from a base backup of an existing cluster and, if needed, replaying all the available WAL files or up to a given point in time pg_basebackup : create a PostgreSQL cluster by cloning an existing one of the same major version using pg_basebackup through the streaming replication protocol. This method is particularly useful for migrating databases to CloudNativePG, although meeting all requirements can be challenging. Be sure to review the warnings in the pg_basebackup subsection carefully. Only one bootstrap method can be specified in the manifest. Attempting to define multiple bootstrap methods will result in validation errors. In contrast to the initdb method, both recovery and pg_basebackup create a new cluster based on another one (either offline or online) and can be used to spin up replica clusters. They both rely on the definition of external clusters. Refer to the replica cluster section for more information. Given the amount of possible backup methods and combinations of backup storage that the CloudNativePG operator provides for recovery , please refer to the dedicated \"Recovery\" section for guidance on each method. API reference Please refer to the \"API reference for the bootstrap section for more information.","title":"The bootstrap section"},{"location":"bootstrap/#the-externalclusters-section","text":"The externalClusters section of the cluster manifest can be used to configure access to one or more PostgreSQL clusters as sources . The primary use cases include: Importing Databases: Specify an external source to be utilized during the importation of databases via logical backup and restore, as part of the initdb bootstrap method. Cross-Region Replication: Define a cross-region PostgreSQL cluster employing physical replication, capable of extending across distinct Kubernetes clusters or traditional VM/bare-metal environments. Recovery from Physical Base Backup: Recover, fully or at a given Point-In-Time, a PostgreSQL cluster by referencing a physical base backup. Info Ongoing development will extend the functionality of externalClusters to accommodate additional use cases, such as logical replication and foreign servers in future releases. As far as bootstrapping is concerned, externalClusters can be used to define the source PostgreSQL cluster for either the pg_basebackup method or the recovery one. An external cluster needs to have: a name that identifies the external cluster, to be used as a reference via the source option at least one of the following: information about streaming connection information about the recovery object store , which is a Barman Cloud compatible object store that contains: the WAL archive (required for Point In Time Recovery) the catalog of physical base backups for the Postgres cluster Note A recovery object store is normally an AWS S3, Azure Blob Storage, or Google Cloud Storage source that is managed by Barman Cloud. When only the streaming connection is defined, the source can be used for the pg_basebackup method. When only the recovery object store is defined, the source can be used for the recovery method. When both are defined, any of the two bootstrap methods can be chosen. The following table summarizes your options: Content of externalClusters pg_basebackup recovery Only streaming \u2713 Only object store \u2713 Streaming and object store \u2713 \u2713 Furthermore, in case of pg_basebackup or full recovery point in time, the cluster is eligible for replica cluster mode. This means that the cluster is continuously fed from the source, either via streaming, via WAL shipping through the PostgreSQL's restore_command , or any of the two. API reference Please refer to the \"API reference for the externalClusters section for more information.","title":"The externalClusters section"},{"location":"bootstrap/#password-files","text":"Whenever a password is supplied within an externalClusters entry, CloudNativePG autonomously manages a PostgreSQL password file for it, residing at /controller/external/NAME/pgpass in each instance. This approach enables CloudNativePG to securely establish connections with an external server without exposing any passwords in the connection string. Instead, the connection safely references the aforementioned file through the passfile connection parameter.","title":"Password files"},{"location":"bootstrap/#bootstrap-an-empty-cluster-initdb","text":"The initdb bootstrap method is used to create a new PostgreSQL cluster from scratch. It is the default one unless specified differently. The following example contains the full structure of the initdb configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app secret: name: app-secret storage: size: 1Gi The above example of bootstrap will: create a new PGDATA folder using PostgreSQL's native initdb command create an unprivileged user named app set the password of the latter ( app ) using the one in the app-secret secret (make sure that username matches the same name of the owner ) create a database called app owned by the app user. Thanks to the convention over configuration paradigm , you can let the operator choose a default database name ( app ) and a default application user name (same as the database name), as well as randomly generate a secure password for both the superuser and the application user in PostgreSQL. Alternatively, you can generate your password, store it as a secret, and use it in the PostgreSQL cluster - as described in the above example. The supplied secret must comply with the specifications of the kubernetes.io/basic-auth type . As a result, the username in the secret must match the one of the owner (for the application secret) and postgres for the superuser one. The following is an example of a basic-auth secret: apiVersion: v1 data: username: YXBw password: cGFzc3dvcmQ= kind: Secret metadata: name: app-secret type: kubernetes.io/basic-auth The application database is the one that should be used to store application data. Applications should connect to the cluster with the user that owns the application database. Important If you need to create additional users, please refer to \"Declarative database role management\" . In case you don't supply any database name, the operator will proceed by convention and create the app database, and adds it to the cluster definition using a defaulting webhook . The user that owns the database defaults to the database name instead. The application user is not used internally by the operator, which instead relies on the superuser to reconcile the cluster with the desired status.","title":"Bootstrap an empty cluster (initdb)"},{"location":"bootstrap/#passing-options-to-initdb","text":"The PostgreSQL data directory is initialized using the initdb PostgreSQL command . CloudNativePG enables you to customize the behavior of initdb to modify settings such as default locale configurations and data checksums. Warning CloudNativePG acts only as a direct proxy to initdb for locale-related options, due to the ongoing and significant enhancements in PostgreSQL's locale support. It is your responsibility to ensure that the correct options are provided, following the PostgreSQL documentation, and to verify that the bootstrap process completes successfully. To include custom options in the initdb command, you can use the following parameters: builtinLocale When builtinLocale is set to a value, CloudNativePG passes it to the --builtin-locale option in initdb . This option controls the builtin locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to builtin . Available from PostgreSQL 17. dataChecksums When dataChecksums is set to true , CloudNativePG invokes the -k option in initdb to enable checksums on data pages and help detect corruption by the I/O system - that would otherwise be silent (default: false ). encoding When encoding set to a value, CloudNativePG passes it to the --encoding option in initdb , which selects the encoding of the template database (default: UTF8 ). icuLocale When icuLocale is set to a value, CloudNativePG passes it to the --icu-locale option in initdb . This option controls the ICU locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules When icuRules is set to a value, CloudNativePG passes it to the --icu-rules option in initdb . This option controls the ICU locale, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty). Note that this option requires localeProvider to be set to icu . Available from PostgreSQL 16. locale When locale is set to a value, CloudNativePG passes it to the --locale option in initdb . This option controls the locale, as defined in \"Locale Support\" from the PostgreSQL documentation. By default, the locale parameter is empty. In this case, environment variables such as LANG are used to determine the locale. Be aware that these variables can vary between container images, potentially leading to inconsistent behavior. localeCollate When localeCollate is set to a value, CloudNativePG passes it to the --lc-collate option in initdb . This option controls the collation order ( LC_COLLATE subcategory), as defined in \"Locale Support\" from the PostgreSQL documentation (default: C ). localeCType When localeCType is set to a value, CloudNativePG passes it to the --lc-ctype option in initdb . This option controls the collation order ( LC_CTYPE subcategory), as defined in \"Locale Support\" from the PostgreSQL documentation (default: C ). localeProvider When localeProvider is set to a value, CloudNativePG passes it to the --locale-provider option in initdb . This option controls the locale provider, as defined in \"Locale Support\" from the PostgreSQL documentation (default: empty, which means libc for PostgreSQL). Available from PostgreSQL 15. walSegmentSize When walSegmentSize is set to a value, CloudNativePG passes it to the --wal-segsize option in initdb (default: not set - defined by PostgreSQL as 16 megabytes). Note The only two locale options that CloudNativePG implements during the initdb bootstrap refer to the LC_COLLATE and LC_TYPE subcategories. The remaining locale subcategories can be configured directly in the PostgreSQL configuration, using the lc_messages , lc_monetary , lc_numeric , and lc_time parameters. The following example enables data checksums and sets the default encoding to LATIN1 : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app dataChecksums: true encoding: 'LATIN1' storage: size: 1Gi Warning CloudNativePG supports another way to customize the behavior of the initdb invocation, using the options subsection. However, given that there are options that can break the behavior of the operator (such as --auth or -d ), this technique is deprecated and will be removed from future versions of the API.","title":"Passing Options to initdb"},{"location":"bootstrap/#executing-queries-after-initialization","text":"You can specify a custom list of queries that will be executed once, immediately after the cluster is created and configured. These queries will be executed as the superuser ( postgres ) against three different databases, in this specific order: The postgres database ( postInit section) The template1 database ( postInitTemplate section) The application database ( postInitApplication section) For each of these sections, CloudNativePG provides two ways to specify custom queries, executed in the following order: As a list of SQL queries in the cluster's definition ( postInitSQL , postInitTemplateSQL , and postInitApplicationSQL stanzas) As a list of Secrets and/or ConfigMaps, each containing a SQL script to be executed ( postInitSQLRefs , postInitTemplateSQLRefs , and postInitApplicationSQLRefs stanzas). Secrets are processed before ConfigMaps. Objects in each list will be processed sequentially. Warning Use the postInit , postInitTemplate , and postInitApplication options with extreme care, as queries are run as a superuser and can disrupt the entire cluster. An error in any of those queries will interrupt the bootstrap phase, leaving the cluster incomplete and requiring manual intervention. Important Ensure the existence of entries inside the ConfigMaps or Secrets specified in postInitSQLRefs , postInitTemplateSQLRefs , and postInitApplicationSQLRefs , otherwise the bootstrap will fail. Errors in any of those SQL files will prevent the bootstrap phase from completing successfully. The following example runs a single SQL query as part of the postInitSQL stanza: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app dataChecksums: true localeCollate: 'en_US' localeCType: 'en_US' postInitSQL: - CREATE DATABASE angus storage: size: 1Gi The example below relies on postInitApplicationSQLRefs to specify a secret and a ConfigMap containing the queries to run after the initialization on the application database: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: initdb: database: app owner: app postInitApplicationSQLRefs: secretRefs: - name: my-secret key: secret.sql configMapRefs: - name: my-configmap key: configmap.sql storage: size: 1Gi Note Within SQL scripts, each SQL statement is executed in a single exec on the server according to the PostgreSQL semantics . Comments can be included, but internal commands like psql cannot.","title":"Executing Queries After Initialization"},{"location":"bootstrap/#bootstrap-from-another-cluster","text":"CloudNativePG enables bootstrapping a cluster starting from another one of the same major version. This operation can be carried out either connecting directly to the source cluster via streaming replication ( pg_basebackup ), or indirectly via an existing physical base backup ( recovery ). The source cluster must be defined in the externalClusters section, identified by name (our recommendation is to use the same name of the origin cluster). Important By default the recovery method strictly uses the name of the cluster in the externalClusters section to locate the main folder of the backup data within the object store, which is normally reserved for the name of the server. Backup plugins provide ways to specify a different one. For example, the Barman Cloud Plugin provides the serverName parameter (by default assigned to the value of name in the external cluster definition).","title":"Bootstrap from another cluster"},{"location":"bootstrap/#bootstrap-from-a-backup-recovery","text":"Given the variety of backup methods and combinations of backup storage options provided by the CloudNativePG operator for recovery , please refer to the dedicated \"Recovery\" section for detailed guidance on each method.","title":"Bootstrap from a backup (recovery)"},{"location":"bootstrap/#bootstrap-from-a-live-cluster-pg_basebackup","text":"The pg_basebackup bootstrap mode allows you to create a new cluster ( target ) as an exact physical copy of an existing and binary-compatible PostgreSQL instance ( source ) managed by CloudNativePG, using a valid streaming replication connection. The source instance can either be a primary or a standby PostgreSQL server. It\u2019s crucial to thoroughly review the requirements section below, as the pros and cons of PostgreSQL physical replication fully apply. The primary use cases for this method include: Reporting and business intelligence clusters that need to be regenerated periodically (daily, weekly) Test databases containing live data that require periodic regeneration (daily, weekly, monthly) and anonymization Rapid spin-up of a standalone replica cluster Physical migrations of CloudNativePG clusters to different namespaces or Kubernetes clusters Important Avoid using this method, based on physical replication, to migrate an existing PostgreSQL cluster outside of Kubernetes into CloudNativePG, unless you are completely certain that all requirements are met and the operation has been thoroughly tested. The CloudNativePG community does not endorse this approach for such use cases, and recommends using logical import instead. It is exceedingly rare that all requirements for physical replication are met in a way that seamlessly works with CloudNativePG. Warning In its current implementation, this method clones the source PostgreSQL instance, thereby creating a snapshot . Once the cloning process has finished, the new cluster is immediately started. Refer to \"Current limitations\" for more details. Similar to the recovery bootstrap method, once the cloning operation is complete, the operator takes full ownership of the target cluster, starting from the first instance. This includes overriding certain configuration parameters as required by CloudNativePG, resetting the superuser password, creating the streaming_replica user, managing replicas, and more. The resulting cluster operates independently from the source instance. Important Configuring the network connection between the target and source instances lies outside the scope of CloudNativePG documentation, as it depends heavily on the specific context and environment. The streaming replication client on the target instance, managed transparently by pg_basebackup , can authenticate on the source instance using one of the following methods: Username/password TLS client certificate Both authentication methods are detailed below.","title":"Bootstrap from a live cluster (pg_basebackup)"},{"location":"bootstrap/#requirements","text":"The following requirements apply to the pg_basebackup bootstrap method: target and source must have the same hardware architecture target and source must have the same major PostgreSQL version target and source must have the same tablespaces source must be configured with enough max_wal_senders to grant access from the target for this one-off operation by providing at least one walsender for the backup plus one for WAL streaming the network between source and target must be configured to enable the target instance to connect to the PostgreSQL port on the source instance source must have a role with REPLICATION LOGIN privileges and must accept connections from the target instance for this role in pg_hba.conf , preferably via TLS (see \"About the replication user\" below) target must be able to successfully connect to the source PostgreSQL instance using a role with REPLICATION LOGIN privileges Seealso For further information, please refer to the \"Planning\" section for Warm Standby , the pg_basebackup page and the \"High Availability, Load Balancing, and Replication\" chapter in the PostgreSQL documentation.","title":"Requirements"},{"location":"bootstrap/#about-the-replication-user","text":"As explained in the requirements section, you need to have a user with either the SUPERUSER or, preferably, just the REPLICATION privilege in the source instance. If the source database is created with CloudNativePG, you can reuse the streaming_replica user and take advantage of client TLS certificates authentication (which, by default, is the only allowed connection method for streaming_replica ). For all other cases, including outside Kubernetes, please verify that you already have a user with the REPLICATION privilege, or create a new one by following the instructions below. As postgres user on the source system, please run: createuser -P --replication streaming_replica Enter the password at the prompt and save it for later, as you will need to add it to a secret in the target instance. Note Although the name is not important, we will use streaming_replica for the sake of simplicity. Feel free to change it as you like, provided you adapt the instructions in the following sections.","title":"About the replication user"},{"location":"bootstrap/#usernamepassword-authentication","text":"The first authentication method supported by CloudNativePG with the pg_basebackup bootstrap is based on username and password matching. Make sure you have the following information before you start the procedure: location of the source instance, identified by a hostname or an IP address and a TCP port replication username ( streaming_replica for simplicity) password You might need to add a line similar to the following to the pg_hba.conf file on the source PostgreSQL instance: # A more restrictive rule for TLS and IP of origin is recommended host replication streaming_replica all md5 The following manifest creates a new PostgreSQL 17.5 cluster, called target-db , using the pg_basebackup bootstrap method to clone an external PostgreSQL cluster defined as source-db (in the externalClusters array). As you can see, the source-db definition points to the source-db.foo.com host and connects as the streaming_replica user, whose password is stored in the password key of the source-db-replica-user secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: target-db spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 bootstrap: pg_basebackup: source: source-db storage: size: 1Gi externalClusters: - name: source-db connectionParameters: host: source-db.foo.com user: streaming_replica password: name: source-db-replica-user key: password All the requirements must be met for the clone operation to work, including the same PostgreSQL version (in our case 17.5).","title":"Username/Password authentication"},{"location":"bootstrap/#tls-certificate-authentication","text":"The second authentication method supported by CloudNativePG with the pg_basebackup bootstrap is based on TLS client certificates. This is the recommended approach from a security standpoint. The following example clones an existing PostgreSQL cluster ( cluster-example ) in the same Kubernetes cluster. Note This example can be easily adapted to cover an instance that resides outside the Kubernetes cluster. The manifest defines a new PostgreSQL 17.5 cluster called cluster-clone-tls , which is bootstrapped using the pg_basebackup method from the cluster-example external cluster. The host is identified by the read/write service in the same cluster, while the streaming_replica user is authenticated thanks to the provided keys, certificate, and certification authority information (respectively in the cluster-example-replication and cluster-example-ca secrets). apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-clone-tls spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 bootstrap: pg_basebackup: source: cluster-example storage: size: 1Gi externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw.default.svc user: streaming_replica sslmode: verify-full sslKey: name: cluster-example-replication key: tls.key sslCert: name: cluster-example-replication key: tls.crt sslRootCert: name: cluster-example-ca key: ca.crt","title":"TLS certificate authentication"},{"location":"bootstrap/#configure-the-application-database","text":"We also support to configure the application database for cluster which bootstrap from a live cluster, just like the case of initdb and recovery bootstrap method. If the new cluster is created as a replica cluster (with replica mode enabled), application database configuration will be skipped. Important While the Cluster is in recovery mode, no changes to the database, including the catalog, are permitted. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. During the recovery phase, roles remain as defined in the source cluster. The example below configures the app database with the owner app and the password stored in the provided secret app-secret , following the bootstrap from a live cluster. apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: bootstrap: pg_basebackup: database: app owner: app secret: name: app-secret source: cluster-example With the above configuration, the following will happen only after recovery is completed : If the app database does not exist, it will be created. If the app user does not exist, it will be created. If the app user is not the owner of the app database, ownership will be granted to the app user. If the username value matches the owner value in the secret, the password for the application user (the app user in this case) will be updated to the password value in the secret.","title":"Configure the application database"},{"location":"bootstrap/#current-limitations","text":"","title":"Current limitations"},{"location":"bootstrap/#snapshot-copy","text":"The pg_basebackup method takes a snapshot of the source instance in the form of a PostgreSQL base backup. All transactions written from the start of the backup to the correct termination of the backup will be streamed to the target instance using a second connection (see the --wal-method=stream option for pg_basebackup ). Once the backup is completed, the new instance will be started on a new timeline and diverge from the source. For this reason, it is advised to stop all write operations to the source database before migrating to the target database. Note that this limitation applies only if the target cluster is not defined as a replica cluster. Important Before you attempt a migration, you must test both the procedure and the applications. In particular, it is fundamental that you run the migration procedure as many times as needed to systematically measure the downtime of your applications in production.","title":"Snapshot copy"},{"location":"certificates/","text":"Certificates CloudNativePG was designed to natively support TLS certificates. To set up a cluster, the operator requires: A server certification authority (CA) certificate A server TLS certificate signed by the server CA A client CA certificate A streaming replication client certificate generated by the client CA Note You can find all the secrets used by the cluster and their expiration dates in the cluster's status. CloudNativePG is very flexible when it comes to TLS certificates. It primarily operates in two modes: Operator managed \u2013 Certificates are internally managed by the operator in a fully automated way and signed using a CA created by CloudNativePG. User provided \u2013 Certificates are generated outside the operator and imported in the cluster definition as secrets. CloudNativePG integrates itself with cert-manager (See Cert-manager example .) You can also choose a hybrid approach, where only part of the certificates is generated outside CNPG. Note The operator and instances verify server certificates against the CA only, disregarding the DNS name. This approach is due to the typical absence of DNS names in user-provided certificates for the <cluster>-rw service used for communication within the cluster. Operator-Managed Mode By default, the operator automatically generates a single Certificate Authority (CA) to issue both client and server certificates. These certificates are managed continuously by the operator, with automatic renewal 7 days before expiration (within a 90-day validity period). Info You can adjust this default behavior by configuring the CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD environment variables. For detailed guidance, refer to the Operator Configuration . Important Certificate renewal does not cause any downtime for the PostgreSQL server, as a simple reload operation is sufficient. However, any user-managed certificates not controlled by CloudNativePG must be re-issued following the renewal process. When generating certificates, the operator assumes that the Kubernetes cluster's DNS zone is set to cluster.local by default. This behavior can be customized by setting the KUBERNETES_CLUSTER_DOMAIN environment variable. A convenient alternative is to use the operator's configuration capability . Server certificates Server CA secret The operator generates a self-signed CA and stores it in a generic secret containing the following keys: ca.crt \u2013 CA certificate used to validate the server certificate, used as sslrootcert in clients' connection strings. ca.key \u2013 The key used to sign the server SSL certificate automatically. Server TLS secret The operator uses the generated self-signed CA to sign a server TLS certificate. It's stored in a secret of type kubernetes.io/tls and configured to be used as ssl_cert_file and ssl_key_file by the instances. This approach enables clients to verify their identity and connect securely. Server alternative DNS names In addition to the default ones, you can specify DNS server alternative names as part of the generated server TLS secret. Client certificates Client CA secret By default, the same self-signed CA as the server CA is used. The public part is passed as ssl_ca_file to all the instances so it can verify client certificates it signed. The private key is stored in the same secret and used to sign client certificates generated by the kubectl cnpg plugin. Client streaming_replica certificate The operator uses the generated self-signed CA to sign a client certificate for the user streaming_replica , storing it in a secret of type kubernetes.io/tls . To allow secure connection to the primary instance, this certificate is passed as sslcert and sslkey in the replicas' connection strings. User-provided certificates mode Server certificates If required, you can also provide the two server certificates, generating them using a separate component such as cert-manager . To use a custom server TLS certificate for a cluster, you must specify the following parameters: serverTLSSecret \u2013 The name of a secret of type kubernetes.io/tls containing the server TLS certificate. It must contain both the standard tls.crt and tls.key keys. serverCASecret \u2013 The name of a secret containing the ca.crt key. Note The operator still creates and manages the two secrets related to client certificates. Note The operator and instances verify server certificates against the CA only, disregarding the DNS name. This approach is due to the typical absence of DNS names in user-provided certificates for the <cluster>-rw service used for communication within the cluster. Note If you want ConfigMaps and secrets to be reloaded by instances, you can add a label with the key cnpg.io/reload to it. Otherwise you must reload the instances using the kubectl cnpg reload subcommand. Example Given the following files: server-ca.crt \u2013 The certificate of the CA that signed the server TLS certificate. server.crt \u2013 The certificate of the server TLS certificate. server.key \u2013 The private key of the server TLS certificate. Create a secret containing the CA certificate: kubectl create secret generic my-postgresql-server-ca \\ --from-file=ca.crt=./server-ca.crt Create a secret with the TLS certificate: kubectl create secret tls my-postgresql-server \\ --cert=./server.crt --key=./server.key Create a PostgreSQL cluster referencing those secrets: kubectl apply -f - <<EOF apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: serverCASecret: my-postgresql-server-ca serverTLSSecret: my-postgresql-server storage: storageClass: standard size: 1Gi EOF The new cluster uses the provided server certificates for TLS connections. Cert-manager example This simple example shows how to use cert-manager to set up a self-signed CA and generate the needed TLS server certificate: --- apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: selfsigned-issuer spec: selfSigned: {} --- apiVersion: v1 kind: Secret metadata: name: my-postgres-server-cert labels: cnpg.io/reload: \"\" --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-postgres-server-cert spec: secretName: my-postgres-server-cert usages: - server auth dnsNames: - cluster-example-lb.internal.mydomain.net - cluster-example-rw - cluster-example-rw.default - cluster-example-rw.default.svc - cluster-example-r - cluster-example-r.default - cluster-example-r.default.svc - cluster-example-ro - cluster-example-ro.default - cluster-example-ro.default.svc issuerRef: name: selfsigned-issuer kind: Issuer group: cert-manager.io Cert-manager creates a secret named my-postgres-server-cert . It contains all the needed files and can be referenced from a cluster as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: serverTLSSecret: my-postgres-server-cert serverCASecret: my-postgres-server-cert storage: size: 1Gi You can find a complete example using cert-manager to manage both server and client CA and certificates in the cluster-example-cert-manager.yaml deployment manifest. Client certificate If required, you can also provide the two client certificates, generating them using a separate component such as cert-manager or HashiCorp vault . To use a custom CA to verify client certificates for a cluster, you must specify the following parameters: replicationTLSSecret \u2013 The name of a secret of type kubernetes.io/tls containing the client certificate for user streaming_replica . It must contain both the standard tls.crt and tls.key keys. clientCASecret \u2013 The name of a secret containing the ca.crt key of the CA to use to verify client certificate. Note The operator still creates and manages the two secrets related to server certificates. Note As the cluster isn't in control of the client CA secret key, you can no longer generate client certificates using kubectl cnpg certificate . Note If you want ConfigMaps and secrets to be automatically reloaded by instances, you can add a label with the key cnpg.io/reload to it. Otherwise, you must reload the instances using the kubectl cnpg reload subcommand. Customizing the streaming_replica client certificate In some environments, it may not be possible to generate a certificate with the common name streaming_replica due to company policies or other security concerns, such as a CA shared across multiple clusters. In such cases, the user mapping feature can be used to allow authentication as the streaming_replica user with certificates containing different common names. To configure this setup, add a pg_ident.conf entry for the predefined map named cnpg_streaming_replica . For example, to enable streaming_replica authentication using a certificate with the common name streaming-replica.cnpg.svc.cluster.local , add the following to your cluster definition: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: postgresql: pg_ident: - cnpg_streaming_replica streaming-replica.cnpg.svc.cluster.local streaming_replica For further details on how pg_ident.conf is managed by the operator, see the \"PostgreSQL Configuration\" page in the documentation. Cert-manager example This simple example shows how to use cert-manager to set up a self-signed CA and generate the needed TLS server certificate: --- apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: selfsigned-issuer spec: selfSigned: {} --- apiVersion: v1 kind: Secret metadata: name: my-postgres-client-cert labels: cnpg.io/reload: \"\" --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-postgres-client-cert spec: secretName: my-postgres-client-cert usages: - client auth commonName: streaming_replica issuerRef: name: selfsigned-issuer kind: Issuer group: cert-manager.io Cert-manager creates a secret named my-postgres-client-cert that contains all the needed files. You can reference it from a cluster as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: clientCASecret: my-postgres-client-cert replicationTLSSecret: my-postgres-client-cert storage: size: 1Gi You can find a complete example using cert-manager to manage both server and client CA and certificates in the cluster-example-cert-manager.yaml deployment manifest.","title":"Certificates"},{"location":"certificates/#certificates","text":"CloudNativePG was designed to natively support TLS certificates. To set up a cluster, the operator requires: A server certification authority (CA) certificate A server TLS certificate signed by the server CA A client CA certificate A streaming replication client certificate generated by the client CA Note You can find all the secrets used by the cluster and their expiration dates in the cluster's status. CloudNativePG is very flexible when it comes to TLS certificates. It primarily operates in two modes: Operator managed \u2013 Certificates are internally managed by the operator in a fully automated way and signed using a CA created by CloudNativePG. User provided \u2013 Certificates are generated outside the operator and imported in the cluster definition as secrets. CloudNativePG integrates itself with cert-manager (See Cert-manager example .) You can also choose a hybrid approach, where only part of the certificates is generated outside CNPG. Note The operator and instances verify server certificates against the CA only, disregarding the DNS name. This approach is due to the typical absence of DNS names in user-provided certificates for the <cluster>-rw service used for communication within the cluster.","title":"Certificates"},{"location":"certificates/#operator-managed-mode","text":"By default, the operator automatically generates a single Certificate Authority (CA) to issue both client and server certificates. These certificates are managed continuously by the operator, with automatic renewal 7 days before expiration (within a 90-day validity period). Info You can adjust this default behavior by configuring the CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD environment variables. For detailed guidance, refer to the Operator Configuration . Important Certificate renewal does not cause any downtime for the PostgreSQL server, as a simple reload operation is sufficient. However, any user-managed certificates not controlled by CloudNativePG must be re-issued following the renewal process. When generating certificates, the operator assumes that the Kubernetes cluster's DNS zone is set to cluster.local by default. This behavior can be customized by setting the KUBERNETES_CLUSTER_DOMAIN environment variable. A convenient alternative is to use the operator's configuration capability .","title":"Operator-Managed Mode"},{"location":"certificates/#server-certificates","text":"","title":"Server certificates"},{"location":"certificates/#server-ca-secret","text":"The operator generates a self-signed CA and stores it in a generic secret containing the following keys: ca.crt \u2013 CA certificate used to validate the server certificate, used as sslrootcert in clients' connection strings. ca.key \u2013 The key used to sign the server SSL certificate automatically.","title":"Server CA secret"},{"location":"certificates/#server-tls-secret","text":"The operator uses the generated self-signed CA to sign a server TLS certificate. It's stored in a secret of type kubernetes.io/tls and configured to be used as ssl_cert_file and ssl_key_file by the instances. This approach enables clients to verify their identity and connect securely.","title":"Server TLS secret"},{"location":"certificates/#server-alternative-dns-names","text":"In addition to the default ones, you can specify DNS server alternative names as part of the generated server TLS secret.","title":"Server alternative DNS names"},{"location":"certificates/#client-certificates","text":"","title":"Client certificates"},{"location":"certificates/#client-ca-secret","text":"By default, the same self-signed CA as the server CA is used. The public part is passed as ssl_ca_file to all the instances so it can verify client certificates it signed. The private key is stored in the same secret and used to sign client certificates generated by the kubectl cnpg plugin.","title":"Client CA secret"},{"location":"certificates/#client-streaming_replica-certificate","text":"The operator uses the generated self-signed CA to sign a client certificate for the user streaming_replica , storing it in a secret of type kubernetes.io/tls . To allow secure connection to the primary instance, this certificate is passed as sslcert and sslkey in the replicas' connection strings.","title":"Client streaming_replica certificate"},{"location":"certificates/#user-provided-certificates-mode","text":"","title":"User-provided certificates mode"},{"location":"certificates/#server-certificates_1","text":"If required, you can also provide the two server certificates, generating them using a separate component such as cert-manager . To use a custom server TLS certificate for a cluster, you must specify the following parameters: serverTLSSecret \u2013 The name of a secret of type kubernetes.io/tls containing the server TLS certificate. It must contain both the standard tls.crt and tls.key keys. serverCASecret \u2013 The name of a secret containing the ca.crt key. Note The operator still creates and manages the two secrets related to client certificates. Note The operator and instances verify server certificates against the CA only, disregarding the DNS name. This approach is due to the typical absence of DNS names in user-provided certificates for the <cluster>-rw service used for communication within the cluster. Note If you want ConfigMaps and secrets to be reloaded by instances, you can add a label with the key cnpg.io/reload to it. Otherwise you must reload the instances using the kubectl cnpg reload subcommand.","title":"Server certificates"},{"location":"certificates/#example","text":"Given the following files: server-ca.crt \u2013 The certificate of the CA that signed the server TLS certificate. server.crt \u2013 The certificate of the server TLS certificate. server.key \u2013 The private key of the server TLS certificate. Create a secret containing the CA certificate: kubectl create secret generic my-postgresql-server-ca \\ --from-file=ca.crt=./server-ca.crt Create a secret with the TLS certificate: kubectl create secret tls my-postgresql-server \\ --cert=./server.crt --key=./server.key Create a PostgreSQL cluster referencing those secrets: kubectl apply -f - <<EOF apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: serverCASecret: my-postgresql-server-ca serverTLSSecret: my-postgresql-server storage: storageClass: standard size: 1Gi EOF The new cluster uses the provided server certificates for TLS connections.","title":"Example"},{"location":"certificates/#cert-manager-example","text":"This simple example shows how to use cert-manager to set up a self-signed CA and generate the needed TLS server certificate: --- apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: selfsigned-issuer spec: selfSigned: {} --- apiVersion: v1 kind: Secret metadata: name: my-postgres-server-cert labels: cnpg.io/reload: \"\" --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-postgres-server-cert spec: secretName: my-postgres-server-cert usages: - server auth dnsNames: - cluster-example-lb.internal.mydomain.net - cluster-example-rw - cluster-example-rw.default - cluster-example-rw.default.svc - cluster-example-r - cluster-example-r.default - cluster-example-r.default.svc - cluster-example-ro - cluster-example-ro.default - cluster-example-ro.default.svc issuerRef: name: selfsigned-issuer kind: Issuer group: cert-manager.io Cert-manager creates a secret named my-postgres-server-cert . It contains all the needed files and can be referenced from a cluster as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: serverTLSSecret: my-postgres-server-cert serverCASecret: my-postgres-server-cert storage: size: 1Gi You can find a complete example using cert-manager to manage both server and client CA and certificates in the cluster-example-cert-manager.yaml deployment manifest.","title":"Cert-manager example"},{"location":"certificates/#client-certificate","text":"If required, you can also provide the two client certificates, generating them using a separate component such as cert-manager or HashiCorp vault . To use a custom CA to verify client certificates for a cluster, you must specify the following parameters: replicationTLSSecret \u2013 The name of a secret of type kubernetes.io/tls containing the client certificate for user streaming_replica . It must contain both the standard tls.crt and tls.key keys. clientCASecret \u2013 The name of a secret containing the ca.crt key of the CA to use to verify client certificate. Note The operator still creates and manages the two secrets related to server certificates. Note As the cluster isn't in control of the client CA secret key, you can no longer generate client certificates using kubectl cnpg certificate . Note If you want ConfigMaps and secrets to be automatically reloaded by instances, you can add a label with the key cnpg.io/reload to it. Otherwise, you must reload the instances using the kubectl cnpg reload subcommand.","title":"Client certificate"},{"location":"certificates/#customizing-the-streaming_replica-client-certificate","text":"In some environments, it may not be possible to generate a certificate with the common name streaming_replica due to company policies or other security concerns, such as a CA shared across multiple clusters. In such cases, the user mapping feature can be used to allow authentication as the streaming_replica user with certificates containing different common names. To configure this setup, add a pg_ident.conf entry for the predefined map named cnpg_streaming_replica . For example, to enable streaming_replica authentication using a certificate with the common name streaming-replica.cnpg.svc.cluster.local , add the following to your cluster definition: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: postgresql: pg_ident: - cnpg_streaming_replica streaming-replica.cnpg.svc.cluster.local streaming_replica For further details on how pg_ident.conf is managed by the operator, see the \"PostgreSQL Configuration\" page in the documentation.","title":"Customizing the streaming_replica client certificate"},{"location":"certificates/#cert-manager-example_1","text":"This simple example shows how to use cert-manager to set up a self-signed CA and generate the needed TLS server certificate: --- apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: selfsigned-issuer spec: selfSigned: {} --- apiVersion: v1 kind: Secret metadata: name: my-postgres-client-cert labels: cnpg.io/reload: \"\" --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-postgres-client-cert spec: secretName: my-postgres-client-cert usages: - client auth commonName: streaming_replica issuerRef: name: selfsigned-issuer kind: Issuer group: cert-manager.io Cert-manager creates a secret named my-postgres-client-cert that contains all the needed files. You can reference it from a cluster as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 certificates: clientCASecret: my-postgres-client-cert replicationTLSSecret: my-postgres-client-cert storage: size: 1Gi You can find a complete example using cert-manager to manage both server and client CA and certificates in the cluster-example-cert-manager.yaml deployment manifest.","title":"Cert-manager example"},{"location":"cloudnative-pg.v1/","text":"API Reference Package v1 contains API Schema definitions for the postgresql v1 API group Resource Types Backup Cluster ClusterImageCatalog Database FailoverQuorum ImageCatalog Pooler Publication ScheduledBackup Subscription Backup A Backup resource is a request for a PostgreSQL backup by the user. Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Backup metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] BackupSpec Specification of the desired behavior of the backup. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status BackupStatus Most recently observed status of the backup. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Cluster Cluster is the Schema for the PostgreSQL API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Cluster metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ClusterSpec Specification of the desired behavior of the cluster. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status ClusterStatus Most recently observed status of the cluster. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status ClusterImageCatalog ClusterImageCatalog is the Schema for the clusterimagecatalogs API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ClusterImageCatalog metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ImageCatalogSpec Specification of the desired behavior of the ClusterImageCatalog. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Database Database is the Schema for the databases API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Database metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] DatabaseSpec Specification of the desired Database. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status DatabaseStatus Most recently observed status of the Database. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status FailoverQuorum Appears in: FailoverQuorum contains the information about the current failover quorum status of a PG cluster. It is updated by the instance manager of the primary node and reset to zero by the operator to trigger an update. Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string FailoverQuorum metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. status FailoverQuorumStatus Most recently observed status of the failover quorum. ImageCatalog ImageCatalog is the Schema for the imagecatalogs API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ImageCatalog metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ImageCatalogSpec Specification of the desired behavior of the ImageCatalog. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Pooler Pooler is the Schema for the poolers API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Pooler metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] PoolerSpec Specification of the desired behavior of the Pooler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status PoolerStatus Most recently observed status of the Pooler. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Publication Publication is the Schema for the publications API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Publication metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] PublicationSpec No description provided. status [Required] PublicationStatus No description provided. ScheduledBackup ScheduledBackup is the Schema for the scheduledbackups API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ScheduledBackup metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ScheduledBackupSpec Specification of the desired behavior of the ScheduledBackup. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status ScheduledBackupStatus Most recently observed status of the ScheduledBackup. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status Subscription Subscription is the Schema for the subscriptions API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Subscription metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] SubscriptionSpec No description provided. status [Required] SubscriptionStatus No description provided. AffinityConfiguration Appears in: ClusterSpec AffinityConfiguration contains the info we need to create the affinity rules for Pods Field Description enablePodAntiAffinity bool Activates anti-affinity for the pods. The operator will define pods anti-affinity unless this field is explicitly set to false topologyKey string TopologyKey to use for anti-affinity configuration. See k8s documentation for more info on that nodeSelector map[string]string NodeSelector is map of key-value pairs used to define the nodes on which the pods can run. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ nodeAffinity core/v1.NodeAffinity NodeAffinity describes node affinity scheduling rules for the pod. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity tolerations []core/v1.Toleration Tolerations is a list of Tolerations that should be set for all the pods, in order to allow them to run on tainted nodes. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ podAntiAffinityType string PodAntiAffinityType allows the user to decide whether pod anti-affinity between cluster instance has to be considered a strong requirement during scheduling or not. Allowed values are: \"preferred\" (default if empty) or \"required\". Setting it to \"required\", could lead to instances remaining pending until new kubernetes nodes are added if all the existing nodes don't match the required pod anti-affinity rule. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity additionalPodAntiAffinity core/v1.PodAntiAffinity AdditionalPodAntiAffinity allows to specify pod anti-affinity terms to be added to the ones generated by the operator if EnablePodAntiAffinity is set to true (default) or to be used exclusively if set to false. additionalPodAffinity core/v1.PodAffinity AdditionalPodAffinity allows to specify pod affinity terms to be passed to all the cluster's pods. AvailableArchitecture Appears in: ClusterStatus AvailableArchitecture represents the state of a cluster's architecture Field Description goArch [Required] string GoArch is the name of the executable architecture hash [Required] string Hash is the hash of the executable BackupConfiguration Appears in: ClusterSpec BackupConfiguration defines how the backup of the cluster are taken. The supported backup methods are BarmanObjectStore and VolumeSnapshot. For details and examples refer to the Backup and Recovery section of the documentation Field Description volumeSnapshot VolumeSnapshotConfiguration VolumeSnapshot provides the configuration for the execution of volume snapshot backups. barmanObjectStore github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration The configuration for the barman-cloud tool suite retentionPolicy string RetentionPolicy is the retention policy to be used for backups and WALs (i.e. '60d'). The retention policy is expressed in the form of XXu where XX is a positive integer and u is in [dwm] - days, weeks, months. It's currently only applicable when using the BarmanObjectStore method. target BackupTarget The policy to decide which instance should perform backups. Available options are empty string, which will default to prefer-standby policy, primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. BackupMethod (Alias of string ) Appears in: BackupSpec BackupStatus ScheduledBackupSpec BackupMethod defines the way of executing the physical base backups of the selected PostgreSQL instance BackupPhase (Alias of string ) Appears in: BackupStatus BackupPhase is the phase of the backup BackupPluginConfiguration Appears in: BackupSpec ScheduledBackupSpec BackupPluginConfiguration contains the backup configuration used by the backup plugin Field Description name [Required] string Name is the name of the plugin managing this backup parameters map[string]string Parameters are the configuration parameters passed to the backup plugin for this backup BackupSnapshotElementStatus Appears in: BackupSnapshotStatus BackupSnapshotElementStatus is a volume snapshot that is part of a volume snapshot method backup Field Description name [Required] string Name is the snapshot resource name type [Required] string Type is tho role of the snapshot in the cluster, such as PG_DATA, PG_WAL and PG_TABLESPACE tablespaceName string TablespaceName is the name of the snapshotted tablespace. Only set when type is PG_TABLESPACE BackupSnapshotStatus Appears in: BackupStatus BackupSnapshotStatus the fields exclusive to the volumeSnapshot method backup Field Description elements []BackupSnapshotElementStatus The elements list, populated with the gathered volume snapshots BackupSource Appears in: BootstrapRecovery BackupSource contains the backup we need to restore from, plus some information that could be needed to correctly restore it. Field Description LocalObjectReference github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference (Members of LocalObjectReference are embedded into this type.) No description provided. endpointCA github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector EndpointCA store the CA bundle of the barman endpoint. Useful when using self-signed certificates to avoid errors with certificate issuer and barman-cloud-wal-archive. BackupSpec Appears in: Backup BackupSpec defines the desired state of Backup Field Description cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The cluster to backup target BackupTarget The policy to decide which instance should perform this backup. If empty, it defaults to cluster.spec.backup.target . Available options are empty string, primary and prefer-standby . primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. method BackupMethod The backup method to be used, possible options are barmanObjectStore , volumeSnapshot or plugin . Defaults to: barmanObjectStore . pluginConfiguration BackupPluginConfiguration Configuration parameters passed to the plugin managing this backup online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online' onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza BackupStatus Appears in: Backup BackupStatus defines the observed state of Backup Field Description BarmanCredentials github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanCredentials (Members of BarmanCredentials are embedded into this type.) The potential credentials for each cloud provider endpointCA github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector EndpointCA store the CA bundle of the barman endpoint. Useful when using self-signed certificates to avoid errors with certificate issuer and barman-cloud-wal-archive. endpointURL string Endpoint to be used to upload data to the cloud, overriding the automatic endpoint discovery destinationPath string The path where to store the backup (i.e. s3://bucket/path/to/folder) this path, with different destination folders, will be used for WALs and for data. This may not be populated in case of errors. serverName string The server name on S3, the cluster name is used if this parameter is omitted encryption string Encryption method required to S3 API backupId string The ID of the Barman backup backupName string The Name of the Barman backup phase BackupPhase The last backup status startedAt meta/v1.Time When the backup was started stoppedAt meta/v1.Time When the backup was terminated beginWal string The starting WAL endWal string The ending WAL beginLSN string The starting xlog endLSN string The ending xlog error string The detected error commandOutput string Unused. Retained for compatibility with old versions. commandError string The backup command output in case of error backupLabelFile []byte Backup label file content as returned by Postgres in case of online (hot) backups tablespaceMapFile []byte Tablespace map file content as returned by Postgres in case of online (hot) backups instanceID InstanceID Information to identify the instance where the backup has been taken from snapshotBackupStatus BackupSnapshotStatus Status of the volumeSnapshot backup method BackupMethod The backup method being used online bool Whether the backup was online/hot ( true ) or offline/cold ( false ) pluginMetadata map[string]string A map containing the plugin metadata BackupTarget (Alias of string ) Appears in: BackupConfiguration BackupSpec ScheduledBackupSpec BackupTarget describes the preferred targets for a backup BootstrapConfiguration Appears in: ClusterSpec BootstrapConfiguration contains information about how to create the PostgreSQL cluster. Only a single bootstrap method can be defined among the supported ones. initdb will be used as the bootstrap method if left unspecified. Refer to the Bootstrap page of the documentation for more information. Field Description initdb BootstrapInitDB Bootstrap the cluster via initdb recovery BootstrapRecovery Bootstrap the cluster from a backup pg_basebackup BootstrapPgBaseBackup Bootstrap the cluster taking a physical backup of another compatible PostgreSQL instance BootstrapInitDB Appears in: BootstrapConfiguration BootstrapInitDB is the configuration of the bootstrap process when initdb is used Refer to the Bootstrap page of the documentation for more information. Field Description database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch options []string The list of options that must be passed to initdb when creating the cluster. Deprecated: This could lead to inconsistent configurations, please use the explicit provided parameters instead. If defined, explicit values will be ignored. dataChecksums bool Whether the -k option should be passed to initdb, enabling checksums on data pages (default: false ) encoding string The value to be passed as option --encoding for initdb (default: UTF8 ) localeCollate string The value to be passed as option --lc-collate for initdb (default: C ) localeCType string The value to be passed as option --lc-ctype for initdb (default: C ) locale string Sets the default collation order and character classification in the new database. localeProvider string This option sets the locale provider for databases created in the new cluster. Available from PostgreSQL 16. icuLocale string Specifies the ICU locale when the ICU provider is used. This option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules string Specifies additional collation rules to customize the behavior of the default collation. This option requires localeProvider to be set to icu . Available from PostgreSQL 16. builtinLocale string Specifies the locale name when the builtin provider is used. This option requires localeProvider to be set to builtin . Available from PostgreSQL 17. walSegmentSize int The value in megabytes (1 to 1024) to be passed to the --wal-segsize option for initdb (default: empty, resulting in PostgreSQL default: 16MB) postInitSQL []string List of SQL queries to be executed as a superuser in the postgres database right after the cluster has been created - to be used with extreme care (by default empty) postInitApplicationSQL []string List of SQL queries to be executed as a superuser in the application database right after the cluster has been created - to be used with extreme care (by default empty) postInitTemplateSQL []string List of SQL queries to be executed as a superuser in the template1 database right after the cluster has been created - to be used with extreme care (by default empty) import Import Bootstraps the new cluster by importing data from an existing PostgreSQL instance using logical backup ( pg_dump and pg_restore ) postInitApplicationSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the application database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) postInitTemplateSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the template1 database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) postInitSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the postgres database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) BootstrapPgBaseBackup Appears in: BootstrapConfiguration BootstrapPgBaseBackup contains the configuration required to take a physical backup of an existing PostgreSQL cluster Field Description source [Required] string The name of the server of which we need to take a physical backup database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch BootstrapRecovery Appears in: BootstrapConfiguration BootstrapRecovery contains the configuration required to restore from an existing cluster using 3 methodologies: external cluster, volume snapshots or backup objects. Full recovery and Point-In-Time Recovery are supported. The method can be also be used to create clusters in continuous recovery (replica clusters), also supporting cascading replication when instances > Once the cluster exits recovery, the password for the superuser will be changed through the provided secret. Refer to the Bootstrap page of the documentation for more information. Field Description backup BackupSource The backup object containing the physical base backup from which to initiate the recovery procedure. Mutually exclusive with source and volumeSnapshots . source string The external cluster whose backup we will restore. This is also used as the name of the folder under which the backup is stored, so it must be set to the name of the source cluster Mutually exclusive with backup . volumeSnapshots DataSource The static PVC data source(s) from which to initiate the recovery procedure. Currently supporting VolumeSnapshot and PersistentVolumeClaim resources that map an existing PVC group, compatible with CloudNativePG, and taken with a cold backup copy on a fenced Postgres instance (limitation which will be removed in the future when online backup will be implemented). Mutually exclusive with backup . recoveryTarget RecoveryTarget By default, the recovery process applies all the available WAL files in the archive (full recovery). However, you can also end the recovery as soon as a consistent state is reached or recover to a point-in-time (PITR) by specifying a RecoveryTarget object, as expected by PostgreSQL (i.e., timestamp, transaction Id, LSN, ...). More info: https://www.postgresql.org/docs/current/runtime-config-wal.html#RUNTIME-CONFIG-WAL-RECOVERY-TARGET database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch CatalogImage Appears in: ImageCatalogSpec CatalogImage defines the image and major version Field Description image [Required] string The image reference major [Required] int The PostgreSQL major version of the image. Must be unique within the catalog. CertificatesConfiguration Appears in: CertificatesStatus ClusterSpec CertificatesConfiguration contains the needed configurations to handle server certificates. Field Description serverCASecret string The secret containing the Server CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate the TLS certificate ServerTLSSecret. Contains: ca.crt : CA that should be used to validate the server certificate, used as sslrootcert in client connection strings. ca.key : key used to generate Server SSL certs, if ServerTLSSecret is provided, this can be omitted. serverTLSSecret string The secret of type kubernetes.io/tls containing the server TLS certificate and key that will be set as ssl_cert_file and ssl_key_file so that clients can connect to postgres securely. If not defined, ServerCASecret must provide also ca.key and a new secret will be created using the provided CA. replicationTLSSecret string The secret of type kubernetes.io/tls containing the client certificate to authenticate as the streaming_replica user. If not defined, ClientCASecret must provide also ca.key , and a new secret will be created using the provided CA. clientCASecret string The secret containing the Client CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate all the client certificates. Contains: ca.crt : CA that should be used to validate the client certificates, used as ssl_ca_file of all the instances. ca.key : key used to generate client certificates, if ReplicationTLSSecret is provided, this can be omitted. serverAltDNSNames []string The list of the server alternative DNS names to be added to the generated server TLS certificates, when required. CertificatesStatus Appears in: ClusterStatus CertificatesStatus contains configuration certificates and related expiration dates. Field Description CertificatesConfiguration CertificatesConfiguration (Members of CertificatesConfiguration are embedded into this type.) Needed configurations to handle server certificates, initialized with default values, if needed. expirations map[string]string Expiration dates for all certificates. ClusterMonitoringTLSConfiguration Appears in: MonitoringConfiguration ClusterMonitoringTLSConfiguration is the type containing the TLS configuration for the cluster's monitoring Field Description enabled bool Enable TLS for the monitoring endpoint. Changing this option will force a rollout of all instances. ClusterSpec Appears in: Cluster ClusterSpec defines the desired state of Cluster Field Description description string Description of this PostgreSQL cluster inheritedMetadata EmbeddedObjectMetadata Metadata that will be inherited by all objects related to the Cluster imageName string Name of the container image, supporting both tags ( <image>:<tag> ) and digests for deterministic and repeatable deployments ( <image>:<tag>@sha256:<digestValue> ) imageCatalogRef ImageCatalogRef Defines the major PostgreSQL version we want to use within an ImageCatalog imagePullPolicy core/v1.PullPolicy Image pull policy. One of Always , Never or IfNotPresent . If not defined, it defaults to IfNotPresent . Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images schedulerName string If specified, the pod will be dispatched by specified Kubernetes scheduler. If not specified, the pod will be dispatched by the default scheduler. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/kube-scheduler/ postgresUID int64 The UID of the postgres user inside the image, defaults to 26 postgresGID int64 The GID of the postgres user inside the image, defaults to 26 instances [Required] int Number of instances required in the cluster minSyncReplicas int Minimum number of instances required in synchronous replication with the primary. Undefined or 0 allow writes to complete when no standby is available. maxSyncReplicas int The target value for the synchronous replication quorum, that can be decreased if the number of ready standbys is lower than this. Undefined or 0 disable synchronous replication. postgresql PostgresConfiguration Configuration of the PostgreSQL server replicationSlots ReplicationSlotsConfiguration Replication slots management configuration bootstrap BootstrapConfiguration Instructions to bootstrap this cluster replica ReplicaClusterConfiguration Replica cluster configuration superuserSecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The secret containing the superuser password. If not defined a new secret will be created with a randomly generated password enableSuperuserAccess bool When this option is enabled, the operator will use the SuperuserSecret to update the postgres user password (if the secret is not present, the operator will automatically create one). When this option is disabled, the operator will ignore the SuperuserSecret content, delete it when automatically created, and then blank the password of the postgres user by setting it to NULL . Disabled by default. certificates CertificatesConfiguration The configuration for the CA and related certificates imagePullSecrets []github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The list of pull secrets to be used to pull the images storage StorageConfiguration Configuration of the storage of the instances serviceAccountTemplate ServiceAccountTemplate Configure the generation of the service account walStorage StorageConfiguration Configuration of the storage for PostgreSQL WAL (Write-Ahead Log) ephemeralVolumeSource core/v1.EphemeralVolumeSource EphemeralVolumeSource allows the user to configure the source of ephemeral volumes. startDelay int32 The time in seconds that is allowed for a PostgreSQL instance to successfully start up (default 3600). The startup probe failure threshold is derived from this value using the formula: ceiling(startDelay / 10). stopDelay int32 The time in seconds that is allowed for a PostgreSQL instance to gracefully shutdown (default 1800) smartShutdownTimeout int32 The time in seconds that controls the window of time reserved for the smart shutdown of Postgres to complete. Make sure you reserve enough time for the operator to request a fast shutdown of Postgres (that is: stopDelay - smartShutdownTimeout ). switchoverDelay int32 The time in seconds that is allowed for a primary PostgreSQL instance to gracefully shutdown during a switchover. Default value is 3600 seconds (1 hour). failoverDelay int32 The amount of time (in seconds) to wait before triggering a failover after the primary PostgreSQL instance in the cluster was detected to be unhealthy livenessProbeTimeout int32 LivenessProbeTimeout is the time (in seconds) that is allowed for a PostgreSQL instance to successfully respond to the liveness probe (default 30). The Liveness probe failure threshold is derived from this value using the formula: ceiling(livenessProbe / 10). affinity AffinityConfiguration Affinity/Anti-affinity rules for Pods topologySpreadConstraints []core/v1.TopologySpreadConstraint TopologySpreadConstraints specifies how to spread matching pods among the given topology. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/ resources core/v1.ResourceRequirements Resources requirements of every generated Pod. Please refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ for more information. ephemeralVolumesSizeLimit EphemeralVolumesSizeLimitConfiguration EphemeralVolumesSizeLimit allows the user to set the limits for the ephemeral volumes priorityClassName string Name of the priority class which will be used in every generated Pod, if the PriorityClass specified does not exist, the pod will not be able to schedule. Please refer to https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass for more information primaryUpdateStrategy PrimaryUpdateStrategy Deployment strategy to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be automated ( unsupervised - default) or manual ( supervised ) primaryUpdateMethod PrimaryUpdateMethod Method to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be with a switchover ( switchover ) or in-place ( restart - default) backup BackupConfiguration The configuration to be used for backups nodeMaintenanceWindow NodeMaintenanceWindow Define a maintenance window for the Kubernetes nodes monitoring MonitoringConfiguration The configuration of the monitoring infrastructure of this cluster externalClusters []ExternalCluster The list of external clusters which are used in the configuration logLevel string The instances' log level, one of the following values: error, warning, info (default), debug, trace projectedVolumeTemplate core/v1.ProjectedVolumeSource Template to be used to define projected volumes, projected volumes will be mounted under /projected base folder env []core/v1.EnvVar Env follows the Env format to pass environment variables to the pods created in the cluster envFrom []core/v1.EnvFromSource EnvFrom follows the EnvFrom format to pass environment variables sources to the pods to be used by Env managed ManagedConfiguration The configuration that is used by the portions of PostgreSQL that are managed by the instance manager seccompProfile core/v1.SeccompProfile The SeccompProfile applied to every Pod and Container. Defaults to: RuntimeDefault tablespaces []TablespaceConfiguration The tablespaces configuration enablePDB bool Manage the PodDisruptionBudget resources within the cluster. When configured as true (default setting), the pod disruption budgets will safeguard the primary node from being terminated. Conversely, setting it to false will result in the absence of any PodDisruptionBudget resource, permitting the shutdown of all nodes hosting the PostgreSQL cluster. This latter configuration is advisable for any PostgreSQL cluster employed for development/staging purposes. plugins []PluginConfiguration The plugins configuration, containing any plugin to be loaded with the corresponding configuration probes ProbesConfiguration The configuration of the probes to be injected in the PostgreSQL Pods. ClusterStatus Appears in: Cluster ClusterStatus defines the observed state of Cluster Field Description instances int The total number of PVC Groups detected in the cluster. It may differ from the number of existing instance pods. readyInstances int The total number of ready instances in the cluster. It is equal to the number of ready instance pods. instancesStatus map[PodStatus][]string InstancesStatus indicates in which status the instances are instancesReportedState map[PodName]InstanceReportedState The reported state of the instances during the last reconciliation loop managedRolesStatus ManagedRoles ManagedRolesStatus reports the state of the managed roles in the cluster tablespacesStatus []TablespaceState TablespacesStatus reports the state of the declarative tablespaces in the cluster timelineID int The timeline of the Postgres cluster topology Topology Instances topology. latestGeneratedNode int ID of the latest generated node (used to avoid node name clashing) currentPrimary string Current primary instance targetPrimary string Target primary instance, this is different from the previous one during a switchover or a failover lastPromotionToken string LastPromotionToken is the last verified promotion token that was used to promote a replica cluster pvcCount int32 How many PVCs have been created by this cluster jobCount int32 How many Jobs have been created by this cluster danglingPVC []string List of all the PVCs created by this cluster and still available which are not attached to a Pod resizingPVC []string List of all the PVCs that have ResizingPVC condition. initializingPVC []string List of all the PVCs that are being initialized by this cluster healthyPVC []string List of all the PVCs not dangling nor initializing unusablePVC []string List of all the PVCs that are unusable because another PVC is missing writeService string Current write pod readService string Current list of read pods phase string Current phase of the cluster phaseReason string Reason for the current phase secretsResourceVersion SecretsResourceVersion The list of resource versions of the secrets managed by the operator. Every change here is done in the interest of the instance manager, which will refresh the secret data configMapResourceVersion ConfigMapResourceVersion The list of resource versions of the configmaps, managed by the operator. Every change here is done in the interest of the instance manager, which will refresh the configmap data certificates CertificatesStatus The configuration for the CA and related certificates, initialized with defaults. firstRecoverabilityPoint string The first recoverability point, stored as a date in RFC3339 format. This field is calculated from the content of FirstRecoverabilityPointByMethod. Deprecated: the field is not set for backup plugins. firstRecoverabilityPointByMethod map[BackupMethod]meta/v1.Time The first recoverability point, stored as a date in RFC3339 format, per backup method type. Deprecated: the field is not set for backup plugins. lastSuccessfulBackup string Last successful backup, stored as a date in RFC3339 format. This field is calculated from the content of LastSuccessfulBackupByMethod. Deprecated: the field is not set for backup plugins. lastSuccessfulBackupByMethod map[BackupMethod]meta/v1.Time Last successful backup, stored as a date in RFC3339 format, per backup method type. Deprecated: the field is not set for backup plugins. lastFailedBackup string Last failed backup, stored as a date in RFC3339 format. Deprecated: the field is not set for backup plugins. cloudNativePGCommitHash string The commit hash number of which this operator running currentPrimaryTimestamp string The timestamp when the last actual promotion to primary has occurred currentPrimaryFailingSinceTimestamp string The timestamp when the primary was detected to be unhealthy This field is reported when .spec.failoverDelay is populated or during online upgrades targetPrimaryTimestamp string The timestamp when the last request for a new primary has occurred poolerIntegrations PoolerIntegrations The integration needed by poolers referencing the cluster cloudNativePGOperatorHash string The hash of the binary of the operator availableArchitectures []AvailableArchitecture AvailableArchitectures reports the available architectures of a cluster conditions []meta/v1.Condition Conditions for cluster object instanceNames []string List of instance names in the cluster onlineUpdateEnabled bool OnlineUpdateEnabled shows if the online upgrade is enabled inside the cluster image string Image contains the image name used by the pods pgDataImageInfo ImageInfo PGDataImageInfo contains the details of the latest image that has run on the current data directory. pluginStatus []PluginStatus PluginStatus is the status of the loaded plugins switchReplicaClusterStatus SwitchReplicaClusterStatus SwitchReplicaClusterStatus is the status of the switch to replica cluster demotionToken string DemotionToken is a JSON token containing the information from pg_controldata such as Database system identifier, Latest checkpoint's TimeLineID, Latest checkpoint's REDO location, Latest checkpoint's REDO WAL file, and Time of latest checkpoint systemID string SystemID is the latest detected PostgreSQL SystemID ConfigMapResourceVersion Appears in: ClusterStatus ConfigMapResourceVersion is the resource versions of the secrets managed by the operator Field Description metrics map[string]string A map with the versions of all the config maps used to pass metrics. Map keys are the config map names, map values are the versions DataDurabilityLevel (Alias of string ) Appears in: SynchronousReplicaConfiguration DataDurabilityLevel specifies how strictly to enforce synchronous replication when cluster instances are unavailable. Options are required or preferred . DataSource Appears in: BootstrapRecovery DataSource contains the configuration required to bootstrap a PostgreSQL cluster from an existing storage Field Description storage [Required] core/v1.TypedLocalObjectReference Configuration of the storage of the instances walStorage core/v1.TypedLocalObjectReference Configuration of the storage for PostgreSQL WAL (Write-Ahead Log) tablespaceStorage map[string]core/v1.TypedLocalObjectReference Configuration of the storage for PostgreSQL tablespaces DatabaseObjectSpec Appears in: ExtensionSpec SchemaSpec DatabaseObjectSpec contains the fields which are common to every database object Field Description name [Required] string Name of the extension/schema ensure EnsureOption Specifies whether an extension/schema should be present or absent in the database. If set to present , the extension/schema will be created if it does not exist. If set to absent , the extension/schema will be removed if it exists. DatabaseObjectStatus Appears in: DatabaseStatus DatabaseObjectStatus is the status of the managed database objects Field Description name [Required] string The name of the object applied [Required] bool True of the object has been installed successfully in the database message string Message is the object reconciliation message DatabaseReclaimPolicy (Alias of string ) Appears in: DatabaseSpec DatabaseReclaimPolicy describes a policy for end-of-life maintenance of databases. DatabaseRoleRef Appears in: TablespaceConfiguration DatabaseRoleRef is a reference an a role available inside PostgreSQL Field Description name string No description provided. DatabaseSpec Appears in: Database DatabaseSpec is the specification of a Postgresql Database, built around the CREATE DATABASE , ALTER DATABASE , and DROP DATABASE SQL commands of PostgreSQL. Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster hosting the database. ensure EnsureOption Ensure the PostgreSQL database is present or absent - defaults to \"present\". name [Required] string The name of the database to create inside PostgreSQL. This setting cannot be changed. owner [Required] string Maps to the OWNER parameter of CREATE DATABASE . Maps to the OWNER TO command of ALTER DATABASE . The role name of the user who owns the database inside PostgreSQL. template string Maps to the TEMPLATE parameter of CREATE DATABASE . This setting cannot be changed. The name of the template from which to create this database. encoding string Maps to the ENCODING parameter of CREATE DATABASE . This setting cannot be changed. Character set encoding to use in the database. locale string Maps to the LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Sets the default collation order and character classification in the new database. localeProvider string Maps to the LOCALE_PROVIDER parameter of CREATE DATABASE . This setting cannot be changed. This option sets the locale provider for databases created in the new cluster. Available from PostgreSQL 16. localeCollate string Maps to the LC_COLLATE parameter of CREATE DATABASE . This setting cannot be changed. localeCType string Maps to the LC_CTYPE parameter of CREATE DATABASE . This setting cannot be changed. icuLocale string Maps to the ICU_LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Specifies the ICU locale when the ICU provider is used. This option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules string Maps to the ICU_RULES parameter of CREATE DATABASE . This setting cannot be changed. Specifies additional collation rules to customize the behavior of the default collation. This option requires localeProvider to be set to icu . Available from PostgreSQL 16. builtinLocale string Maps to the BUILTIN_LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Specifies the locale name when the builtin provider is used. This option requires localeProvider to be set to builtin . Available from PostgreSQL 17. collationVersion string Maps to the COLLATION_VERSION parameter of CREATE DATABASE . This setting cannot be changed. isTemplate bool Maps to the IS_TEMPLATE parameter of CREATE DATABASE and ALTER DATABASE . If true, this database is considered a template and can be cloned by any user with CREATEDB privileges. allowConnections bool Maps to the ALLOW_CONNECTIONS parameter of CREATE DATABASE and ALTER DATABASE . If false then no one can connect to this database. connectionLimit int Maps to the CONNECTION LIMIT clause of CREATE DATABASE and ALTER DATABASE . How many concurrent connections can be made to this database. -1 (the default) means no limit. tablespace string Maps to the TABLESPACE parameter of CREATE DATABASE . Maps to the SET TABLESPACE command of ALTER DATABASE . The name of the tablespace (in PostgreSQL) that will be associated with the new database. This tablespace will be the default tablespace used for objects created in this database. databaseReclaimPolicy DatabaseReclaimPolicy The policy for end-of-life maintenance of this database. schemas []SchemaSpec The list of schemas to be managed in the database extensions []ExtensionSpec The list of extensions to be managed in the database DatabaseStatus Appears in: Database DatabaseStatus defines the observed state of Database Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the database was reconciled correctly message string Message is the reconciliation output message schemas []DatabaseObjectStatus Schemas is the status of the managed schemas extensions []DatabaseObjectStatus Extensions is the status of the managed extensions EmbeddedObjectMetadata Appears in: ClusterSpec EmbeddedObjectMetadata contains metadata to be inherited by all resources related to a Cluster Field Description labels map[string]string No description provided. annotations map[string]string No description provided. EnsureOption (Alias of string ) Appears in: DatabaseObjectSpec DatabaseSpec RoleConfiguration EnsureOption represents whether we should enforce the presence or absence of a Role in a PostgreSQL instance EphemeralVolumesSizeLimitConfiguration Appears in: ClusterSpec EphemeralVolumesSizeLimitConfiguration contains the configuration of the ephemeral storage Field Description shm k8s.io/apimachinery/pkg/api/resource.Quantity Shm is the size limit of the shared memory volume temporaryData k8s.io/apimachinery/pkg/api/resource.Quantity TemporaryData is the size limit of the temporary data volume ExtensionConfiguration Appears in: PostgresConfiguration ExtensionConfiguration is the configuration used to add PostgreSQL extensions to the Cluster. Field Description name [Required] string The name of the extension, required image [Required] core/v1.ImageVolumeSource The image containing the extension, required extension_control_path []string The list of directories inside the image which should be added to extension_control_path. If not defined, defaults to \"/share\". dynamic_library_path []string The list of directories inside the image which should be added to dynamic_library_path. If not defined, defaults to \"/lib\". ld_library_path []string The list of directories inside the image which should be added to ld_library_path. ExtensionSpec Appears in: DatabaseSpec ExtensionSpec configures an extension in a database Field Description DatabaseObjectSpec DatabaseObjectSpec (Members of DatabaseObjectSpec are embedded into this type.) Common fields version [Required] string The version of the extension to install. If empty, the operator will install the default version (whatever is specified in the extension's control file) schema [Required] string The name of the schema in which to install the extension's objects, in case the extension allows its contents to be relocated. If not specified (default), and the extension's control file does not specify a schema either, the current default object creation schema is used. ExternalCluster Appears in: ClusterSpec ExternalCluster represents the connection parameters to an external cluster which is used in the other sections of the configuration Field Description name [Required] string The server name, required connectionParameters map[string]string The list of connection parameters, such as dbname, host, username, etc sslCert core/v1.SecretKeySelector The reference to an SSL certificate to be used to connect to this instance sslKey core/v1.SecretKeySelector The reference to an SSL private key to be used to connect to this instance sslRootCert core/v1.SecretKeySelector The reference to an SSL CA public key to be used to connect to this instance password core/v1.SecretKeySelector The reference to the password to be used to connect to the server. If a password is provided, CloudNativePG creates a PostgreSQL passfile at /controller/external/NAME/pass (where \"NAME\" is the cluster's name). This passfile is automatically referenced in the connection string when establishing a connection to the remote PostgreSQL server from the current PostgreSQL Cluster . This ensures secure and efficient password management for external clusters. barmanObjectStore github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration The configuration for the barman-cloud tool suite plugin [Required] PluginConfiguration The configuration of the plugin that is taking care of WAL archiving and backups for this external cluster FailoverQuorumStatus Appears in: FailoverQuorum FailoverQuorumStatus is the latest observed status of the failover quorum of the PG cluster. Field Description method string Contains the latest reported Method value. standbyNames []string StandbyNames is the list of potentially synchronous instance names. standbyNumber int StandbyNumber is the number of synchronous standbys that transactions need to wait for replies from. primary string Primary is the name of the primary instance that updated this object the latest time. ImageCatalogRef Appears in: ClusterSpec ImageCatalogRef defines the reference to a major version in an ImageCatalog Field Description TypedLocalObjectReference core/v1.TypedLocalObjectReference (Members of TypedLocalObjectReference are embedded into this type.) No description provided. major [Required] int The major version of PostgreSQL we want to use from the ImageCatalog ImageCatalogSpec Appears in: ClusterImageCatalog ImageCatalog ImageCatalogSpec defines the desired ImageCatalog Field Description images [Required] []CatalogImage List of CatalogImages available in the catalog ImageInfo Appears in: ClusterStatus ImageInfo contains the information about a PostgreSQL image Field Description image [Required] string Image is the image name majorVersion [Required] int MajorVersion is the major version of the image Import Appears in: BootstrapInitDB Import contains the configuration to init a database from a logic snapshot of an externalCluster Field Description source [Required] ImportSource The source of the import type [Required] SnapshotType The import type. Can be microservice or monolith . databases [Required] []string The databases to import roles []string The roles to import postImportApplicationSQL []string List of SQL queries to be executed as a superuser in the application database right after is imported - to be used with extreme care (by default empty). Only available in microservice type. schemaOnly bool When set to true, only the pre-data and post-data sections of pg_restore are invoked, avoiding data import. Default: false . pgDumpExtraOptions []string List of custom options to pass to the pg_dump command. IMPORTANT: Use these options with caution and at your own risk, as the operator does not validate their content. Be aware that certain options may conflict with the operator's intended functionality or design. pgRestoreExtraOptions []string List of custom options to pass to the pg_restore command. IMPORTANT: Use these options with caution and at your own risk, as the operator does not validate their content. Be aware that certain options may conflict with the operator's intended functionality or design. ImportSource Appears in: Import ImportSource describes the source for the logical snapshot Field Description externalCluster [Required] string The name of the externalCluster used for import InstanceID Appears in: BackupStatus InstanceID contains the information to identify an instance Field Description podName string The pod name ContainerID string The container ID InstanceReportedState Appears in: ClusterStatus InstanceReportedState describes the last reported state of an instance during a reconciliation loop Field Description isPrimary [Required] bool indicates if an instance is the primary one timeLineID int indicates on which TimelineId the instance is ip [Required] string IP address of the instance IsolationCheckConfiguration Appears in: LivenessProbe IsolationCheckConfiguration contains the configuration for the isolation check functionality in the liveness probe Field Description enabled bool Whether primary isolation checking is enabled for the liveness probe requestTimeout int Timeout in milliseconds for requests during the primary isolation check connectionTimeout int Timeout in milliseconds for connections during the primary isolation check LDAPBindAsAuth Appears in: LDAPConfig LDAPBindAsAuth provides the required fields to use the bind authentication for LDAP Field Description prefix string Prefix for the bind authentication option suffix string Suffix for the bind authentication option LDAPBindSearchAuth Appears in: LDAPConfig LDAPBindSearchAuth provides the required fields to use the bind+search LDAP authentication process Field Description baseDN string Root DN to begin the user search bindDN string DN of the user to bind to the directory bindPassword core/v1.SecretKeySelector Secret with the password for the user to bind to the directory searchAttribute string Attribute to match against the username searchFilter string Search filter to use when doing the search+bind authentication LDAPConfig Appears in: PostgresConfiguration LDAPConfig contains the parameters needed for LDAP authentication Field Description server string LDAP hostname or IP address port int LDAP server port scheme LDAPScheme LDAP schema to be used, possible options are ldap and ldaps bindAsAuth LDAPBindAsAuth Bind as authentication configuration bindSearchAuth LDAPBindSearchAuth Bind+Search authentication configuration tls bool Set to 'true' to enable LDAP over TLS. 'false' is default LDAPScheme (Alias of string ) Appears in: LDAPConfig LDAPScheme defines the possible schemes for LDAP LivenessProbe Appears in: ProbesConfiguration LivenessProbe is the configuration of the liveness probe Field Description Probe Probe (Members of Probe are embedded into this type.) Probe is the standard probe configuration isolationCheck IsolationCheckConfiguration Configure the feature that extends the liveness probe for a primary instance. In addition to the basic checks, this verifies whether the primary is isolated from the Kubernetes API server and from its replicas, ensuring that it can be safely shut down if network partition or API unavailability is detected. Enabled by default. ManagedConfiguration Appears in: ClusterSpec ManagedConfiguration represents the portions of PostgreSQL that are managed by the instance manager Field Description roles []RoleConfiguration Database roles managed by the Cluster services ManagedServices Services roles managed by the Cluster ManagedRoles Appears in: ClusterStatus ManagedRoles tracks the status of a cluster's managed roles Field Description byStatus map[RoleStatus][]string ByStatus gives the list of roles in each state cannotReconcile map[string][]string CannotReconcile lists roles that cannot be reconciled in PostgreSQL, with an explanation of the cause passwordStatus map[string]PasswordState PasswordStatus gives the last transaction id and password secret version for each managed role ManagedService Appears in: ManagedServices ManagedService represents a specific service managed by the cluster. It includes the type of service and its associated template specification. Field Description selectorType [Required] ServiceSelectorType SelectorType specifies the type of selectors that the service will have. Valid values are \"rw\", \"r\", and \"ro\", representing read-write, read, and read-only services. updateStrategy ServiceUpdateStrategy UpdateStrategy describes how the service differences should be reconciled serviceTemplate [Required] ServiceTemplateSpec ServiceTemplate is the template specification for the service. ManagedServices Appears in: ManagedConfiguration ManagedServices represents the services managed by the cluster. Field Description disabledDefaultServices []ServiceSelectorType DisabledDefaultServices is a list of service types that are disabled by default. Valid values are \"r\", and \"ro\", representing read, and read-only services. additional []ManagedService Additional is a list of additional managed services specified by the user. Metadata Appears in: PodTemplateSpec ServiceAccountTemplate ServiceTemplateSpec Metadata is a structure similar to the metav1.ObjectMeta, but still parseable by controller-gen to create a suitable CRD for the user. The comment of PodTemplateSpec has an explanation of why we are not using the core data types. Field Description name string The name of the resource. Only supported for certain types labels map[string]string Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels annotations map[string]string Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations MonitoringConfiguration Appears in: ClusterSpec MonitoringConfiguration is the type containing all the monitoring configuration for a certain cluster Field Description disableDefaultQueries bool Whether the default queries should be injected. Set it to true if you don't want to inject default queries into the cluster. Default: false. customQueriesConfigMap []github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector The list of config maps containing the custom queries customQueriesSecret []github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector The list of secrets containing the custom queries enablePodMonitor bool Enable or disable the PodMonitor tls ClusterMonitoringTLSConfiguration Configure TLS communication for the metrics endpoint. Changing tls.enabled option will force a rollout of all instances. podMonitorMetricRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of metric relabelings for the PodMonitor . Applied to samples before ingestion. podMonitorRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of relabelings for the PodMonitor . Applied to samples before scraping. NodeMaintenanceWindow Appears in: ClusterSpec NodeMaintenanceWindow contains information that the operator will use while upgrading the underlying node. This option is only useful when the chosen storage prevents the Pods from being freely moved across nodes. Field Description reusePVC bool Reuse the existing PVC (wait for the node to come up again) or not (recreate it elsewhere - when instances >1) inProgress bool Is there a node maintenance activity in progress? OnlineConfiguration Appears in: BackupSpec ScheduledBackupSpec VolumeSnapshotConfiguration OnlineConfiguration contains the configuration parameters for the online volume snapshot Field Description waitForArchive bool If false, the function will return immediately after the backup is completed, without waiting for WAL to be archived. This behavior is only useful with backup software that independently monitors WAL archiving. Otherwise, WAL required to make the backup consistent might be missing and make the backup useless. By default, or when this parameter is true, pg_backup_stop will wait for WAL to be archived when archiving is enabled. On a standby, this means that it will wait only when archive_mode = always. If write activity on the primary is low, it may be useful to run pg_switch_wal on the primary in order to trigger an immediate segment switch. immediateCheckpoint bool Control whether the I/O workload for the backup initial checkpoint will be limited, according to the checkpoint_completion_target setting on the PostgreSQL server. If set to true, an immediate checkpoint will be used, meaning PostgreSQL will complete the checkpoint as soon as possible. false by default. PasswordState Appears in: ManagedRoles PasswordState represents the state of the password of a managed RoleConfiguration Field Description transactionID int64 the last transaction ID to affect the role definition in PostgreSQL resourceVersion string the resource version of the password secret PgBouncerIntegrationStatus Appears in: PoolerIntegrations PgBouncerIntegrationStatus encapsulates the needed integration for the pgbouncer poolers referencing the cluster Field Description secrets []string No description provided. PgBouncerPoolMode (Alias of string ) Appears in: PgBouncerSpec PgBouncerPoolMode is the mode of PgBouncer PgBouncerSecrets Appears in: PoolerSecrets PgBouncerSecrets contains the versions of the secrets used by pgbouncer Field Description authQuery SecretVersion The auth query secret version PgBouncerSpec Appears in: PoolerSpec PgBouncerSpec defines how to configure PgBouncer Field Description poolMode PgBouncerPoolMode The pool mode. Default: session . authQuerySecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The credentials of the user that need to be used for the authentication query. In case it is specified, also an AuthQuery (e.g. \"SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1\") has to be specified and no automatic CNPG Cluster integration will be triggered. authQuery string The query that will be used to download the hash of the password of a certain user. Default: \"SELECT usename, passwd FROM public.user_search($1)\". In case it is specified, also an AuthQuerySecret has to be specified and no automatic CNPG Cluster integration will be triggered. parameters map[string]string Additional parameters to be passed to PgBouncer - please check the CNPG documentation for a list of options you can configure pg_hba []string PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) paused bool When set to true , PgBouncer will disconnect from the PostgreSQL server, first waiting for all queries to complete, and pause all new client connections until this value is set to false (default). Internally, the operator calls PgBouncer's PAUSE and RESUME commands. PluginConfiguration Appears in: ClusterSpec ExternalCluster PluginConfiguration specifies a plugin that need to be loaded for this cluster to be reconciled Field Description name [Required] string Name is the plugin name enabled bool Enabled is true if this plugin will be used isWALArchiver bool Only one plugin can be declared as WALArchiver. Cannot be active if \".spec.backup.barmanObjectStore\" configuration is present. parameters map[string]string Parameters is the configuration of the plugin PluginStatus Appears in: ClusterStatus PluginStatus is the status of a loaded plugin Field Description name [Required] string Name is the name of the plugin version [Required] string Version is the version of the plugin loaded by the latest reconciliation loop capabilities []string Capabilities are the list of capabilities of the plugin operatorCapabilities []string OperatorCapabilities are the list of capabilities of the plugin regarding the reconciler walCapabilities []string WALCapabilities are the list of capabilities of the plugin regarding the WAL management backupCapabilities []string BackupCapabilities are the list of capabilities of the plugin regarding the Backup management restoreJobHookCapabilities []string RestoreJobHookCapabilities are the list of capabilities of the plugin regarding the RestoreJobHook management status string Status contain the status reported by the plugin through the SetStatusInCluster interface PodTemplateSpec Appears in: PoolerSpec PodTemplateSpec is a structure allowing the user to set a template for Pod generation. Unfortunately we can't use the corev1.PodTemplateSpec type because the generated CRD won't have the field for the metadata section. References: https://github.com/kubernetes-sigs/controller-tools/issues/385 https://github.com/kubernetes-sigs/controller-tools/issues/448 https://github.com/prometheus-operator/prometheus-operator/issues/3041 Field Description metadata Metadata Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata spec core/v1.PodSpec Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status PodTopologyLabels (Alias of map[string]string ) Appears in: Topology PodTopologyLabels represent the topology of a Pod. map[labelName]labelValue PoolerIntegrations Appears in: ClusterStatus PoolerIntegrations encapsulates the needed integration for the poolers referencing the cluster Field Description pgBouncerIntegration PgBouncerIntegrationStatus No description provided. PoolerMonitoringConfiguration Appears in: PoolerSpec PoolerMonitoringConfiguration is the type containing all the monitoring configuration for a certain Pooler. Mirrors the Cluster's MonitoringConfiguration but without the custom queries part for now. Field Description enablePodMonitor bool Enable or disable the PodMonitor podMonitorMetricRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of metric relabelings for the PodMonitor . Applied to samples before ingestion. podMonitorRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of relabelings for the PodMonitor . Applied to samples before scraping. PoolerSecrets Appears in: PoolerStatus PoolerSecrets contains the versions of all the secrets used Field Description serverTLS SecretVersion The server TLS secret version serverCA SecretVersion The server CA secret version clientCA SecretVersion The client CA secret version pgBouncerSecrets PgBouncerSecrets The version of the secrets used by PgBouncer PoolerSpec Appears in: Pooler PoolerSpec defines the desired state of Pooler Field Description cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference This is the cluster reference on which the Pooler will work. Pooler name should never match with any cluster name within the same namespace. type PoolerType Type of service to forward traffic to. Default: rw . instances int32 The number of replicas we want. Default: 1. template PodTemplateSpec The template of the Pod to be created pgbouncer [Required] PgBouncerSpec The PgBouncer configuration deploymentStrategy apps/v1.DeploymentStrategy The deployment strategy to use for pgbouncer to replace existing pods with new ones monitoring PoolerMonitoringConfiguration The configuration of the monitoring infrastructure of this pooler. serviceTemplate ServiceTemplateSpec Template for the Service to be created PoolerStatus Appears in: Pooler PoolerStatus defines the observed state of Pooler Field Description secrets PoolerSecrets The resource version of the config object instances int32 The number of pods trying to be scheduled PoolerType (Alias of string ) Appears in: PoolerSpec PoolerType is the type of the connection pool, meaning the service we are targeting. Allowed values are rw and ro . PostgresConfiguration Appears in: ClusterSpec PostgresConfiguration defines the PostgreSQL configuration Field Description parameters map[string]string PostgreSQL configuration options (postgresql.conf) synchronous SynchronousReplicaConfiguration Configuration of the PostgreSQL synchronous replication feature pg_hba []string PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) pg_ident []string PostgreSQL User Name Maps rules (lines to be appended to the pg_ident.conf file) syncReplicaElectionConstraint SyncReplicaElectionConstraints Requirements to be met by sync replicas. This will affect how the \"synchronous_standby_names\" parameter will be set up. shared_preload_libraries []string Lists of shared preload libraries to add to the default ones ldap LDAPConfig Options to specify LDAP configuration promotionTimeout int32 Specifies the maximum number of seconds to wait when promoting an instance to primary. Default value is 40000000, greater than one year in seconds, big enough to simulate an infinite timeout enableAlterSystem bool If this parameter is true, the user will be able to invoke ALTER SYSTEM on this CloudNativePG Cluster. This should only be used for debugging and troubleshooting. Defaults to false. extensions []ExtensionConfiguration The configuration of the extensions to be added PrimaryUpdateMethod (Alias of string ) Appears in: ClusterSpec PrimaryUpdateMethod contains the method to use when upgrading the primary server of the cluster as part of rolling updates PrimaryUpdateStrategy (Alias of string ) Appears in: ClusterSpec PrimaryUpdateStrategy contains the strategy to follow when upgrading the primary server of the cluster as part of rolling updates Probe Appears in: LivenessProbe ProbeWithStrategy Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic. Field Description initialDelaySeconds int32 Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes timeoutSeconds int32 Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes periodSeconds int32 How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. successThreshold int32 Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1. failureThreshold int32 Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. terminationGracePeriodSeconds int64 Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset. ProbeStrategyType (Alias of string ) Appears in: ProbeWithStrategy ProbeStrategyType is the type of the strategy used to declare a PostgreSQL instance ready ProbeWithStrategy Appears in: ProbesConfiguration ProbeWithStrategy is the configuration of the startup probe Field Description Probe Probe (Members of Probe are embedded into this type.) Probe is the standard probe configuration type ProbeStrategyType The probe strategy maximumLag k8s.io/apimachinery/pkg/api/resource.Quantity Lag limit. Used only for streaming strategy ProbesConfiguration Appears in: ClusterSpec ProbesConfiguration represent the configuration for the probes to be injected in the PostgreSQL Pods Field Description startup [Required] ProbeWithStrategy The startup probe configuration liveness [Required] LivenessProbe The liveness probe configuration readiness [Required] ProbeWithStrategy The readiness probe configuration PublicationReclaimPolicy (Alias of string ) Appears in: PublicationSpec PublicationReclaimPolicy defines a policy for end-of-life maintenance of Publications. PublicationSpec Appears in: Publication PublicationSpec defines the desired state of Publication Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster that identifies the \"publisher\" name [Required] string The name of the publication inside PostgreSQL dbname [Required] string The name of the database where the publication will be installed in the \"publisher\" cluster parameters map[string]string Publication parameters part of the WITH clause as expected by PostgreSQL CREATE PUBLICATION command target [Required] PublicationTarget Target of the publication as expected by PostgreSQL CREATE PUBLICATION command publicationReclaimPolicy PublicationReclaimPolicy The policy for end-of-life maintenance of this publication PublicationStatus Appears in: Publication PublicationStatus defines the observed state of Publication Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the publication was reconciled correctly message string Message is the reconciliation output message PublicationTarget Appears in: PublicationSpec PublicationTarget is what this publication should publish Field Description allTables bool Marks the publication as one that replicates changes for all tables in the database, including tables created in the future. Corresponding to FOR ALL TABLES in PostgreSQL. objects []PublicationTargetObject Just the following schema objects PublicationTargetObject Appears in: PublicationTarget PublicationTargetObject is an object to publish Field Description tablesInSchema string Marks the publication as one that replicates changes for all tables in the specified list of schemas, including tables created in the future. Corresponding to FOR TABLES IN SCHEMA in PostgreSQL. table PublicationTargetTable Specifies a list of tables to add to the publication. Corresponding to FOR TABLE in PostgreSQL. PublicationTargetTable Appears in: PublicationTargetObject PublicationTargetTable is a table to publish Field Description only bool Whether to limit to the table only or include all its descendants name [Required] string The table name schema string The schema name columns []string The columns to publish RecoveryTarget Appears in: BootstrapRecovery RecoveryTarget allows to configure the moment where the recovery process will stop. All the target options except TargetTLI are mutually exclusive. Field Description backupID string The ID of the backup from which to start the recovery process. If empty (default) the operator will automatically detect the backup based on targetTime or targetLSN if specified. Otherwise use the latest available backup in chronological order. targetTLI string The target timeline (\"latest\" or a positive integer) targetXID string The target transaction ID targetName string The target name (to be previously created with pg_create_restore_point ) targetLSN string The target LSN (Log Sequence Number) targetTime string The target time as a timestamp in the RFC3339 standard targetImmediate bool End recovery as soon as a consistent state is reached exclusive bool Set the target to be exclusive. If omitted, defaults to false, so that in Postgres, recovery_target_inclusive will be true ReplicaClusterConfiguration Appears in: ClusterSpec ReplicaClusterConfiguration encapsulates the configuration of a replica cluster Field Description self string Self defines the name of this cluster. It is used to determine if this is a primary or a replica cluster, comparing it with primary primary string Primary defines which Cluster is defined to be the primary in the distributed PostgreSQL cluster, based on the topology specified in externalClusters source [Required] string The name of the external cluster which is the replication origin enabled bool If replica mode is enabled, this cluster will be a replica of an existing cluster. Replica cluster can be created from a recovery object store or via streaming through pg_basebackup. Refer to the Replica clusters page of the documentation for more information. promotionToken string A demotion token generated by an external cluster used to check if the promotion requirements are met. minApplyDelay meta/v1.Duration When replica mode is enabled, this parameter allows you to replay transactions only when the system time is at least the configured time past the commit time. This provides an opportunity to correct data loss errors. Note that when this parameter is set, a promotion token cannot be used. ReplicationSlotsConfiguration Appears in: ClusterSpec ReplicationSlotsConfiguration encapsulates the configuration of replication slots Field Description highAvailability ReplicationSlotsHAConfiguration Replication slots for high availability configuration updateInterval int Standby will update the status of the local replication slots every updateInterval seconds (default 30). synchronizeReplicas SynchronizeReplicasConfiguration Configures the synchronization of the user defined physical replication slots ReplicationSlotsHAConfiguration Appears in: ReplicationSlotsConfiguration ReplicationSlotsHAConfiguration encapsulates the configuration of the replication slots that are automatically managed by the operator to control the streaming replication connections with the standby instances for high availability (HA) purposes. Replication slots are a PostgreSQL feature that makes sure that PostgreSQL automatically keeps WAL files in the primary when a streaming client (in this specific case a replica that is part of the HA cluster) gets disconnected. Field Description enabled bool If enabled (default), the operator will automatically manage replication slots on the primary instance and use them in streaming replication connections with all the standby instances that are part of the HA cluster. If disabled, the operator will not take advantage of replication slots in streaming connections with the replicas. This feature also controls replication slots in replica cluster, from the designated primary to its cascading replicas. slotPrefix string Prefix for replication slots managed by the operator for HA. It may only contain lower case letters, numbers, and the underscore character. This can only be set at creation time. By default set to _cnpg_ . synchronizeLogicalDecoding bool When enabled, the operator automatically manages synchronization of logical decoding (replication) slots across high-availability clusters. Requires one of the following conditions: PostgreSQL version 17 or later PostgreSQL version < 17 with pg_failover_slots extension enabled RoleConfiguration Appears in: ManagedConfiguration RoleConfiguration is the representation, in Kubernetes, of a PostgreSQL role with the additional field Ensure specifying whether to ensure the presence or absence of the role in the database The defaults of the CREATE ROLE command are applied Reference: https://www.postgresql.org/docs/current/sql-createrole.html Field Description name [Required] string Name of the role comment string Description of the role ensure EnsureOption Ensure the role is present or absent - defaults to \"present\" passwordSecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Secret containing the password of the role (if present) If null, the password will be ignored unless DisablePassword is set connectionLimit int64 If the role can log in, this specifies how many concurrent connections the role can make. -1 (the default) means no limit. validUntil meta/v1.Time Date and time after which the role's password is no longer valid. When omitted, the password will never expire (default). inRoles []string List of one or more existing roles to which this role will be immediately added as a new member. Default empty. inherit bool Whether a role \"inherits\" the privileges of roles it is a member of. Defaults is true . disablePassword bool DisablePassword indicates that a role's password should be set to NULL in Postgres superuser bool Whether the role is a superuser who can override all access restrictions within the database - superuser status is dangerous and should be used only when really needed. You must yourself be a superuser to create a new superuser. Defaults is false . createdb bool When set to true , the role being defined will be allowed to create new databases. Specifying false (default) will deny a role the ability to create databases. createrole bool Whether the role will be permitted to create, alter, drop, comment on, change the security label for, and grant or revoke membership in other roles. Default is false . login bool Whether the role is allowed to log in. A role having the login attribute can be thought of as a user. Roles without this attribute are useful for managing database privileges, but are not users in the usual sense of the word. Default is false . replication bool Whether a role is a replication role. A role must have this attribute (or be a superuser) in order to be able to connect to the server in replication mode (physical or logical replication) and in order to be able to create or drop replication slots. A role having the replication attribute is a very highly privileged role, and should only be used on roles actually used for replication. Default is false . bypassrls bool Whether a role bypasses every row-level security (RLS) policy. Default is false . SQLRefs Appears in: BootstrapInitDB SQLRefs holds references to ConfigMaps or Secrets containing SQL files. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. Field Description secretRefs []github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector SecretRefs holds a list of references to Secrets configMapRefs []github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector ConfigMapRefs holds a list of references to ConfigMaps ScheduledBackupSpec Appears in: ScheduledBackup ScheduledBackupSpec defines the desired state of ScheduledBackup Field Description suspend bool If this backup is suspended or not immediate bool If the first backup has to be immediately start after creation or not schedule [Required] string The schedule does not follow the same format used in Kubernetes CronJobs as it includes an additional seconds specifier, see https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The cluster to backup backupOwnerReference string Indicates which ownerReference should be put inside the created backup resources. none: no owner reference for created backup objects (same behavior as before the field was introduced) self: sets the Scheduled backup object as owner of the backup cluster: set the cluster as owner of the backup target BackupTarget The policy to decide which instance should perform this backup. If empty, it defaults to cluster.spec.backup.target . Available options are empty string, primary and prefer-standby . primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. method BackupMethod The backup method to be used, possible options are barmanObjectStore , volumeSnapshot or plugin . Defaults to: barmanObjectStore . pluginConfiguration BackupPluginConfiguration Configuration parameters passed to the plugin managing this backup online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online' onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza ScheduledBackupStatus Appears in: ScheduledBackup ScheduledBackupStatus defines the observed state of ScheduledBackup Field Description lastCheckTime meta/v1.Time The latest time the schedule lastScheduleTime meta/v1.Time Information when was the last time that backup was successfully scheduled. nextScheduleTime meta/v1.Time Next time we will run a backup SchemaSpec Appears in: DatabaseSpec SchemaSpec configures a schema in a database Field Description DatabaseObjectSpec DatabaseObjectSpec (Members of DatabaseObjectSpec are embedded into this type.) Common fields owner [Required] string The role name of the user who owns the schema inside PostgreSQL. It maps to the AUTHORIZATION parameter of CREATE SCHEMA and the OWNER TO command of ALTER SCHEMA . SecretVersion Appears in: PgBouncerSecrets PoolerSecrets SecretVersion contains a secret name and its ResourceVersion Field Description name string The name of the secret version string The ResourceVersion of the secret SecretsResourceVersion Appears in: ClusterStatus SecretsResourceVersion is the resource versions of the secrets managed by the operator Field Description superuserSecretVersion string The resource version of the \"postgres\" user secret replicationSecretVersion string The resource version of the \"streaming_replica\" user secret applicationSecretVersion string The resource version of the \"app\" user secret managedRoleSecretVersion map[string]string The resource versions of the managed roles secrets caSecretVersion string Unused. Retained for compatibility with old versions. clientCaSecretVersion string The resource version of the PostgreSQL client-side CA secret version serverCaSecretVersion string The resource version of the PostgreSQL server-side CA secret version serverSecretVersion string The resource version of the PostgreSQL server-side secret version barmanEndpointCA string The resource version of the Barman Endpoint CA if provided externalClusterSecretVersion map[string]string The resource versions of the external cluster secrets metrics map[string]string A map with the versions of all the secrets used to pass metrics. Map keys are the secret names, map values are the versions ServiceAccountTemplate Appears in: ClusterSpec ServiceAccountTemplate contains the template needed to generate the service accounts Field Description metadata [Required] Metadata Metadata are the metadata to be used for the generated service account ServiceSelectorType (Alias of string ) Appears in: ManagedService ManagedServices ServiceSelectorType describes a valid value for generating the service selectors. It indicates which type of service the selector applies to, such as read-write, read, or read-only ServiceTemplateSpec Appears in: ManagedService PoolerSpec ServiceTemplateSpec is a structure allowing the user to set a template for Service generation. Field Description metadata Metadata Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata spec core/v1.ServiceSpec Specification of the desired behavior of the service. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status ServiceUpdateStrategy (Alias of string ) Appears in: ManagedService ServiceUpdateStrategy describes how the changes to the managed service should be handled SnapshotOwnerReference (Alias of string ) Appears in: VolumeSnapshotConfiguration SnapshotOwnerReference defines the reference type for the owner of the snapshot. This specifies which owner the processed resources should relate to. SnapshotType (Alias of string ) Appears in: Import SnapshotType is a type of allowed import StorageConfiguration Appears in: ClusterSpec TablespaceConfiguration StorageConfiguration is the configuration used to create and reconcile PVCs, usable for WAL volumes, PGDATA volumes, or tablespaces Field Description storageClass string StorageClass to use for PVCs. Applied after evaluating the PVC template, if available. If not specified, the generated PVCs will use the default storage class size string Size of the storage. Required if not already specified in the PVC template. Changes to this field are automatically reapplied to the created PVCs. Size cannot be decreased. resizeInUseVolumes bool Resize existent PVCs, defaults to true pvcTemplate core/v1.PersistentVolumeClaimSpec Template to be used to generate the Persistent Volume Claim SubscriptionReclaimPolicy (Alias of string ) Appears in: SubscriptionSpec SubscriptionReclaimPolicy describes a policy for end-of-life maintenance of Subscriptions. SubscriptionSpec Appears in: Subscription SubscriptionSpec defines the desired state of Subscription Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster that identifies the \"subscriber\" name [Required] string The name of the subscription inside PostgreSQL dbname [Required] string The name of the database where the publication will be installed in the \"subscriber\" cluster parameters map[string]string Subscription parameters included in the WITH clause of the PostgreSQL CREATE SUBSCRIPTION command. Most parameters cannot be changed after the subscription is created and will be ignored if modified later, except for a limited set documented at: https://www.postgresql.org/docs/current/sql-altersubscription.html#SQL-ALTERSUBSCRIPTION-PARAMS-SET publicationName [Required] string The name of the publication inside the PostgreSQL database in the \"publisher\" publicationDBName string The name of the database containing the publication on the external cluster. Defaults to the one in the external cluster definition. externalClusterName [Required] string The name of the external cluster with the publication (\"publisher\") subscriptionReclaimPolicy SubscriptionReclaimPolicy The policy for end-of-life maintenance of this subscription SubscriptionStatus Appears in: Subscription SubscriptionStatus defines the observed state of Subscription Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the subscription was reconciled correctly message string Message is the reconciliation output message SwitchReplicaClusterStatus Appears in: ClusterStatus SwitchReplicaClusterStatus contains all the statuses regarding the switch of a cluster to a replica cluster Field Description inProgress bool InProgress indicates if there is an ongoing procedure of switching a cluster to a replica cluster. SyncReplicaElectionConstraints Appears in: PostgresConfiguration SyncReplicaElectionConstraints contains the constraints for sync replicas election. For anti-affinity parameters two instances are considered in the same location if all the labels values match. In future synchronous replica election restriction by name will be supported. Field Description nodeLabelsAntiAffinity []string A list of node labels values to extract and compare to evaluate if the pods reside in the same topology or not enabled [Required] bool This flag enables the constraints for sync replicas SynchronizeReplicasConfiguration Appears in: ReplicationSlotsConfiguration SynchronizeReplicasConfiguration contains the configuration for the synchronization of user defined physical replication slots Field Description enabled [Required] bool When set to true, every replication slot that is on the primary is synchronized on each standby excludePatterns []string List of regular expression patterns to match the names of replication slots to be excluded (by default empty) SynchronousReplicaConfiguration Appears in: PostgresConfiguration SynchronousReplicaConfiguration contains the configuration of the PostgreSQL synchronous replication feature. Important: at this moment, also .spec.minSyncReplicas and .spec.maxSyncReplicas need to be considered. Field Description method [Required] SynchronousReplicaConfigurationMethod Method to select synchronous replication standbys from the listed servers, accepting 'any' (quorum-based synchronous replication) or 'first' (priority-based synchronous replication) as values. number [Required] int Specifies the number of synchronous standby servers that transactions must wait for responses from. maxStandbyNamesFromCluster int Specifies the maximum number of local cluster pods that can be automatically included in the synchronous_standby_names option in PostgreSQL. standbyNamesPre []string A user-defined list of application names to be added to synchronous_standby_names before local cluster pods (the order is only useful for priority-based synchronous replication). standbyNamesPost []string A user-defined list of application names to be added to synchronous_standby_names after local cluster pods (the order is only useful for priority-based synchronous replication). dataDurability DataDurabilityLevel If set to \"required\", data durability is strictly enforced. Write operations with synchronous commit settings ( on , remote_write , or remote_apply ) will block if there are insufficient healthy replicas, ensuring data persistence. If set to \"preferred\", data durability is maintained when healthy replicas are available, but the required number of instances will adjust dynamically if replicas become unavailable. This setting relaxes strict durability enforcement to allow for operational continuity. This setting is only applicable if both standbyNamesPre and standbyNamesPost are unset (empty). SynchronousReplicaConfigurationMethod (Alias of string ) Appears in: SynchronousReplicaConfiguration SynchronousReplicaConfigurationMethod configures whether to use quorum based replication or a priority list TablespaceConfiguration Appears in: ClusterSpec TablespaceConfiguration is the configuration of a tablespace, and includes the storage specification for the tablespace Field Description name [Required] string The name of the tablespace storage [Required] StorageConfiguration The storage configuration for the tablespace owner DatabaseRoleRef Owner is the PostgreSQL user owning the tablespace temporary bool When set to true, the tablespace will be added as a temp_tablespaces entry in PostgreSQL, and will be available to automatically house temp database objects, or other temporary files. Please refer to PostgreSQL documentation for more information on the temp_tablespaces GUC. TablespaceState Appears in: ClusterStatus TablespaceState represents the state of a tablespace in a cluster Field Description name [Required] string Name is the name of the tablespace owner string Owner is the PostgreSQL user owning the tablespace state [Required] TablespaceStatus State is the latest reconciliation state error string Error is the reconciliation error, if any TablespaceStatus (Alias of string ) Appears in: TablespaceState TablespaceStatus represents the status of a tablespace in the cluster Topology Appears in: ClusterStatus Topology contains the cluster topology Field Description instances map[PodName]PodTopologyLabels Instances contains the pod topology of the instances nodesUsed int32 NodesUsed represents the count of distinct nodes accommodating the instances. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally, this value should be the same as the number of instances in the Postgres HA cluster, implying shared nothing architecture on the compute side. successfullyExtracted bool SuccessfullyExtracted indicates if the topology data was extract. It is useful to enact fallback behaviors in synchronous replica election in case of failures VolumeSnapshotConfiguration Appears in: BackupConfiguration VolumeSnapshotConfiguration represents the configuration for the execution of snapshot backups. Field Description labels map[string]string Labels are key-value pairs that will be added to .metadata.labels snapshot resources. annotations map[string]string Annotations key-value pairs that will be added to .metadata.annotations snapshot resources. className string ClassName specifies the Snapshot Class to be used for PG_DATA PersistentVolumeClaim. It is the default class for the other types if no specific class is present walClassName string WalClassName specifies the Snapshot Class to be used for the PG_WAL PersistentVolumeClaim. tablespaceClassName map[string]string TablespaceClassName specifies the Snapshot Class to be used for the tablespaces. defaults to the PGDATA Snapshot Class, if set snapshotOwnerReference SnapshotOwnerReference SnapshotOwnerReference indicates the type of owner reference the snapshot should have online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots","title":"API Reference"},{"location":"cloudnative-pg.v1/#api-reference","text":"Package v1 contains API Schema definitions for the postgresql v1 API group","title":"API Reference"},{"location":"cloudnative-pg.v1/#resource-types","text":"Backup Cluster ClusterImageCatalog Database FailoverQuorum ImageCatalog Pooler Publication ScheduledBackup Subscription","title":"Resource Types"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Backup","text":"A Backup resource is a request for a PostgreSQL backup by the user. Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Backup metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] BackupSpec Specification of the desired behavior of the backup. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status BackupStatus Most recently observed status of the backup. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"Backup"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Cluster","text":"Cluster is the Schema for the PostgreSQL API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Cluster metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ClusterSpec Specification of the desired behavior of the cluster. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status ClusterStatus Most recently observed status of the cluster. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"Cluster"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterImageCatalog","text":"ClusterImageCatalog is the Schema for the clusterimagecatalogs API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ClusterImageCatalog metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ImageCatalogSpec Specification of the desired behavior of the ClusterImageCatalog. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"ClusterImageCatalog"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Database","text":"Database is the Schema for the databases API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Database metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] DatabaseSpec Specification of the desired Database. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status DatabaseStatus Most recently observed status of the Database. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"Database"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-FailoverQuorum","text":"Appears in: FailoverQuorum contains the information about the current failover quorum status of a PG cluster. It is updated by the instance manager of the primary node and reset to zero by the operator to trigger an update. Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string FailoverQuorum metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. status FailoverQuorumStatus Most recently observed status of the failover quorum.","title":"FailoverQuorum"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImageCatalog","text":"ImageCatalog is the Schema for the imagecatalogs API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ImageCatalog metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ImageCatalogSpec Specification of the desired behavior of the ImageCatalog. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"ImageCatalog"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Pooler","text":"Pooler is the Schema for the poolers API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Pooler metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] PoolerSpec Specification of the desired behavior of the Pooler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status PoolerStatus Most recently observed status of the Pooler. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"Pooler"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Publication","text":"Publication is the Schema for the publications API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Publication metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] PublicationSpec No description provided. status [Required] PublicationStatus No description provided.","title":"Publication"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ScheduledBackup","text":"ScheduledBackup is the Schema for the scheduledbackups API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string ScheduledBackup metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] ScheduledBackupSpec Specification of the desired behavior of the ScheduledBackup. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status status ScheduledBackupStatus Most recently observed status of the ScheduledBackup. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"ScheduledBackup"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Subscription","text":"Subscription is the Schema for the subscriptions API Field Description apiVersion [Required] string postgresql.cnpg.io/v1 kind [Required] string Subscription metadata [Required] meta/v1.ObjectMeta No description provided. Refer to the Kubernetes API documentation for the fields of the metadata field. spec [Required] SubscriptionSpec No description provided. status [Required] SubscriptionStatus No description provided.","title":"Subscription"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-AffinityConfiguration","text":"Appears in: ClusterSpec AffinityConfiguration contains the info we need to create the affinity rules for Pods Field Description enablePodAntiAffinity bool Activates anti-affinity for the pods. The operator will define pods anti-affinity unless this field is explicitly set to false topologyKey string TopologyKey to use for anti-affinity configuration. See k8s documentation for more info on that nodeSelector map[string]string NodeSelector is map of key-value pairs used to define the nodes on which the pods can run. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ nodeAffinity core/v1.NodeAffinity NodeAffinity describes node affinity scheduling rules for the pod. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity tolerations []core/v1.Toleration Tolerations is a list of Tolerations that should be set for all the pods, in order to allow them to run on tainted nodes. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ podAntiAffinityType string PodAntiAffinityType allows the user to decide whether pod anti-affinity between cluster instance has to be considered a strong requirement during scheduling or not. Allowed values are: \"preferred\" (default if empty) or \"required\". Setting it to \"required\", could lead to instances remaining pending until new kubernetes nodes are added if all the existing nodes don't match the required pod anti-affinity rule. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity additionalPodAntiAffinity core/v1.PodAntiAffinity AdditionalPodAntiAffinity allows to specify pod anti-affinity terms to be added to the ones generated by the operator if EnablePodAntiAffinity is set to true (default) or to be used exclusively if set to false. additionalPodAffinity core/v1.PodAffinity AdditionalPodAffinity allows to specify pod affinity terms to be passed to all the cluster's pods.","title":"AffinityConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-AvailableArchitecture","text":"Appears in: ClusterStatus AvailableArchitecture represents the state of a cluster's architecture Field Description goArch [Required] string GoArch is the name of the executable architecture hash [Required] string Hash is the hash of the executable","title":"AvailableArchitecture"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupConfiguration","text":"Appears in: ClusterSpec BackupConfiguration defines how the backup of the cluster are taken. The supported backup methods are BarmanObjectStore and VolumeSnapshot. For details and examples refer to the Backup and Recovery section of the documentation Field Description volumeSnapshot VolumeSnapshotConfiguration VolumeSnapshot provides the configuration for the execution of volume snapshot backups. barmanObjectStore github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration The configuration for the barman-cloud tool suite retentionPolicy string RetentionPolicy is the retention policy to be used for backups and WALs (i.e. '60d'). The retention policy is expressed in the form of XXu where XX is a positive integer and u is in [dwm] - days, weeks, months. It's currently only applicable when using the BarmanObjectStore method. target BackupTarget The policy to decide which instance should perform backups. Available options are empty string, which will default to prefer-standby policy, primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available.","title":"BackupConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupMethod","text":"(Alias of string ) Appears in: BackupSpec BackupStatus ScheduledBackupSpec BackupMethod defines the way of executing the physical base backups of the selected PostgreSQL instance","title":"BackupMethod"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupPhase","text":"(Alias of string ) Appears in: BackupStatus BackupPhase is the phase of the backup","title":"BackupPhase"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupPluginConfiguration","text":"Appears in: BackupSpec ScheduledBackupSpec BackupPluginConfiguration contains the backup configuration used by the backup plugin Field Description name [Required] string Name is the name of the plugin managing this backup parameters map[string]string Parameters are the configuration parameters passed to the backup plugin for this backup","title":"BackupPluginConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSnapshotElementStatus","text":"Appears in: BackupSnapshotStatus BackupSnapshotElementStatus is a volume snapshot that is part of a volume snapshot method backup Field Description name [Required] string Name is the snapshot resource name type [Required] string Type is tho role of the snapshot in the cluster, such as PG_DATA, PG_WAL and PG_TABLESPACE tablespaceName string TablespaceName is the name of the snapshotted tablespace. Only set when type is PG_TABLESPACE","title":"BackupSnapshotElementStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSnapshotStatus","text":"Appears in: BackupStatus BackupSnapshotStatus the fields exclusive to the volumeSnapshot method backup Field Description elements []BackupSnapshotElementStatus The elements list, populated with the gathered volume snapshots","title":"BackupSnapshotStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSource","text":"Appears in: BootstrapRecovery BackupSource contains the backup we need to restore from, plus some information that could be needed to correctly restore it. Field Description LocalObjectReference github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference (Members of LocalObjectReference are embedded into this type.) No description provided. endpointCA github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector EndpointCA store the CA bundle of the barman endpoint. Useful when using self-signed certificates to avoid errors with certificate issuer and barman-cloud-wal-archive.","title":"BackupSource"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupSpec","text":"Appears in: Backup BackupSpec defines the desired state of Backup Field Description cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The cluster to backup target BackupTarget The policy to decide which instance should perform this backup. If empty, it defaults to cluster.spec.backup.target . Available options are empty string, primary and prefer-standby . primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. method BackupMethod The backup method to be used, possible options are barmanObjectStore , volumeSnapshot or plugin . Defaults to: barmanObjectStore . pluginConfiguration BackupPluginConfiguration Configuration parameters passed to the plugin managing this backup online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online' onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza","title":"BackupSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupStatus","text":"Appears in: Backup BackupStatus defines the observed state of Backup Field Description BarmanCredentials github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanCredentials (Members of BarmanCredentials are embedded into this type.) The potential credentials for each cloud provider endpointCA github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector EndpointCA store the CA bundle of the barman endpoint. Useful when using self-signed certificates to avoid errors with certificate issuer and barman-cloud-wal-archive. endpointURL string Endpoint to be used to upload data to the cloud, overriding the automatic endpoint discovery destinationPath string The path where to store the backup (i.e. s3://bucket/path/to/folder) this path, with different destination folders, will be used for WALs and for data. This may not be populated in case of errors. serverName string The server name on S3, the cluster name is used if this parameter is omitted encryption string Encryption method required to S3 API backupId string The ID of the Barman backup backupName string The Name of the Barman backup phase BackupPhase The last backup status startedAt meta/v1.Time When the backup was started stoppedAt meta/v1.Time When the backup was terminated beginWal string The starting WAL endWal string The ending WAL beginLSN string The starting xlog endLSN string The ending xlog error string The detected error commandOutput string Unused. Retained for compatibility with old versions. commandError string The backup command output in case of error backupLabelFile []byte Backup label file content as returned by Postgres in case of online (hot) backups tablespaceMapFile []byte Tablespace map file content as returned by Postgres in case of online (hot) backups instanceID InstanceID Information to identify the instance where the backup has been taken from snapshotBackupStatus BackupSnapshotStatus Status of the volumeSnapshot backup method BackupMethod The backup method being used online bool Whether the backup was online/hot ( true ) or offline/cold ( false ) pluginMetadata map[string]string A map containing the plugin metadata","title":"BackupStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BackupTarget","text":"(Alias of string ) Appears in: BackupConfiguration BackupSpec ScheduledBackupSpec BackupTarget describes the preferred targets for a backup","title":"BackupTarget"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BootstrapConfiguration","text":"Appears in: ClusterSpec BootstrapConfiguration contains information about how to create the PostgreSQL cluster. Only a single bootstrap method can be defined among the supported ones. initdb will be used as the bootstrap method if left unspecified. Refer to the Bootstrap page of the documentation for more information. Field Description initdb BootstrapInitDB Bootstrap the cluster via initdb recovery BootstrapRecovery Bootstrap the cluster from a backup pg_basebackup BootstrapPgBaseBackup Bootstrap the cluster taking a physical backup of another compatible PostgreSQL instance","title":"BootstrapConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BootstrapInitDB","text":"Appears in: BootstrapConfiguration BootstrapInitDB is the configuration of the bootstrap process when initdb is used Refer to the Bootstrap page of the documentation for more information. Field Description database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch options []string The list of options that must be passed to initdb when creating the cluster. Deprecated: This could lead to inconsistent configurations, please use the explicit provided parameters instead. If defined, explicit values will be ignored. dataChecksums bool Whether the -k option should be passed to initdb, enabling checksums on data pages (default: false ) encoding string The value to be passed as option --encoding for initdb (default: UTF8 ) localeCollate string The value to be passed as option --lc-collate for initdb (default: C ) localeCType string The value to be passed as option --lc-ctype for initdb (default: C ) locale string Sets the default collation order and character classification in the new database. localeProvider string This option sets the locale provider for databases created in the new cluster. Available from PostgreSQL 16. icuLocale string Specifies the ICU locale when the ICU provider is used. This option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules string Specifies additional collation rules to customize the behavior of the default collation. This option requires localeProvider to be set to icu . Available from PostgreSQL 16. builtinLocale string Specifies the locale name when the builtin provider is used. This option requires localeProvider to be set to builtin . Available from PostgreSQL 17. walSegmentSize int The value in megabytes (1 to 1024) to be passed to the --wal-segsize option for initdb (default: empty, resulting in PostgreSQL default: 16MB) postInitSQL []string List of SQL queries to be executed as a superuser in the postgres database right after the cluster has been created - to be used with extreme care (by default empty) postInitApplicationSQL []string List of SQL queries to be executed as a superuser in the application database right after the cluster has been created - to be used with extreme care (by default empty) postInitTemplateSQL []string List of SQL queries to be executed as a superuser in the template1 database right after the cluster has been created - to be used with extreme care (by default empty) import Import Bootstraps the new cluster by importing data from an existing PostgreSQL instance using logical backup ( pg_dump and pg_restore ) postInitApplicationSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the application database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) postInitTemplateSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the template1 database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty) postInitSQLRefs SQLRefs List of references to ConfigMaps or Secrets containing SQL files to be executed as a superuser in the postgres database right after the cluster has been created. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. (by default empty)","title":"BootstrapInitDB"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BootstrapPgBaseBackup","text":"Appears in: BootstrapConfiguration BootstrapPgBaseBackup contains the configuration required to take a physical backup of an existing PostgreSQL cluster Field Description source [Required] string The name of the server of which we need to take a physical backup database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch","title":"BootstrapPgBaseBackup"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-BootstrapRecovery","text":"Appears in: BootstrapConfiguration BootstrapRecovery contains the configuration required to restore from an existing cluster using 3 methodologies: external cluster, volume snapshots or backup objects. Full recovery and Point-In-Time Recovery are supported. The method can be also be used to create clusters in continuous recovery (replica clusters), also supporting cascading replication when instances > Once the cluster exits recovery, the password for the superuser will be changed through the provided secret. Refer to the Bootstrap page of the documentation for more information. Field Description backup BackupSource The backup object containing the physical base backup from which to initiate the recovery procedure. Mutually exclusive with source and volumeSnapshots . source string The external cluster whose backup we will restore. This is also used as the name of the folder under which the backup is stored, so it must be set to the name of the source cluster Mutually exclusive with backup . volumeSnapshots DataSource The static PVC data source(s) from which to initiate the recovery procedure. Currently supporting VolumeSnapshot and PersistentVolumeClaim resources that map an existing PVC group, compatible with CloudNativePG, and taken with a cold backup copy on a fenced Postgres instance (limitation which will be removed in the future when online backup will be implemented). Mutually exclusive with backup . recoveryTarget RecoveryTarget By default, the recovery process applies all the available WAL files in the archive (full recovery). However, you can also end the recovery as soon as a consistent state is reached or recover to a point-in-time (PITR) by specifying a RecoveryTarget object, as expected by PostgreSQL (i.e., timestamp, transaction Id, LSN, ...). More info: https://www.postgresql.org/docs/current/runtime-config-wal.html#RUNTIME-CONFIG-WAL-RECOVERY-TARGET database string Name of the database used by the application. Default: app . owner string Name of the owner of the database in the instance to be used by applications. Defaults to the value of the database key. secret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch","title":"BootstrapRecovery"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-CatalogImage","text":"Appears in: ImageCatalogSpec CatalogImage defines the image and major version Field Description image [Required] string The image reference major [Required] int The PostgreSQL major version of the image. Must be unique within the catalog.","title":"CatalogImage"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-CertificatesConfiguration","text":"Appears in: CertificatesStatus ClusterSpec CertificatesConfiguration contains the needed configurations to handle server certificates. Field Description serverCASecret string The secret containing the Server CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate the TLS certificate ServerTLSSecret. Contains: ca.crt : CA that should be used to validate the server certificate, used as sslrootcert in client connection strings. ca.key : key used to generate Server SSL certs, if ServerTLSSecret is provided, this can be omitted. serverTLSSecret string The secret of type kubernetes.io/tls containing the server TLS certificate and key that will be set as ssl_cert_file and ssl_key_file so that clients can connect to postgres securely. If not defined, ServerCASecret must provide also ca.key and a new secret will be created using the provided CA. replicationTLSSecret string The secret of type kubernetes.io/tls containing the client certificate to authenticate as the streaming_replica user. If not defined, ClientCASecret must provide also ca.key , and a new secret will be created using the provided CA. clientCASecret string The secret containing the Client CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate all the client certificates. Contains: ca.crt : CA that should be used to validate the client certificates, used as ssl_ca_file of all the instances. ca.key : key used to generate client certificates, if ReplicationTLSSecret is provided, this can be omitted. serverAltDNSNames []string The list of the server alternative DNS names to be added to the generated server TLS certificates, when required.","title":"CertificatesConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-CertificatesStatus","text":"Appears in: ClusterStatus CertificatesStatus contains configuration certificates and related expiration dates. Field Description CertificatesConfiguration CertificatesConfiguration (Members of CertificatesConfiguration are embedded into this type.) Needed configurations to handle server certificates, initialized with default values, if needed. expirations map[string]string Expiration dates for all certificates.","title":"CertificatesStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterMonitoringTLSConfiguration","text":"Appears in: MonitoringConfiguration ClusterMonitoringTLSConfiguration is the type containing the TLS configuration for the cluster's monitoring Field Description enabled bool Enable TLS for the monitoring endpoint. Changing this option will force a rollout of all instances.","title":"ClusterMonitoringTLSConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterSpec","text":"Appears in: Cluster ClusterSpec defines the desired state of Cluster Field Description description string Description of this PostgreSQL cluster inheritedMetadata EmbeddedObjectMetadata Metadata that will be inherited by all objects related to the Cluster imageName string Name of the container image, supporting both tags ( <image>:<tag> ) and digests for deterministic and repeatable deployments ( <image>:<tag>@sha256:<digestValue> ) imageCatalogRef ImageCatalogRef Defines the major PostgreSQL version we want to use within an ImageCatalog imagePullPolicy core/v1.PullPolicy Image pull policy. One of Always , Never or IfNotPresent . If not defined, it defaults to IfNotPresent . Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images schedulerName string If specified, the pod will be dispatched by specified Kubernetes scheduler. If not specified, the pod will be dispatched by the default scheduler. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/kube-scheduler/ postgresUID int64 The UID of the postgres user inside the image, defaults to 26 postgresGID int64 The GID of the postgres user inside the image, defaults to 26 instances [Required] int Number of instances required in the cluster minSyncReplicas int Minimum number of instances required in synchronous replication with the primary. Undefined or 0 allow writes to complete when no standby is available. maxSyncReplicas int The target value for the synchronous replication quorum, that can be decreased if the number of ready standbys is lower than this. Undefined or 0 disable synchronous replication. postgresql PostgresConfiguration Configuration of the PostgreSQL server replicationSlots ReplicationSlotsConfiguration Replication slots management configuration bootstrap BootstrapConfiguration Instructions to bootstrap this cluster replica ReplicaClusterConfiguration Replica cluster configuration superuserSecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The secret containing the superuser password. If not defined a new secret will be created with a randomly generated password enableSuperuserAccess bool When this option is enabled, the operator will use the SuperuserSecret to update the postgres user password (if the secret is not present, the operator will automatically create one). When this option is disabled, the operator will ignore the SuperuserSecret content, delete it when automatically created, and then blank the password of the postgres user by setting it to NULL . Disabled by default. certificates CertificatesConfiguration The configuration for the CA and related certificates imagePullSecrets []github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The list of pull secrets to be used to pull the images storage StorageConfiguration Configuration of the storage of the instances serviceAccountTemplate ServiceAccountTemplate Configure the generation of the service account walStorage StorageConfiguration Configuration of the storage for PostgreSQL WAL (Write-Ahead Log) ephemeralVolumeSource core/v1.EphemeralVolumeSource EphemeralVolumeSource allows the user to configure the source of ephemeral volumes. startDelay int32 The time in seconds that is allowed for a PostgreSQL instance to successfully start up (default 3600). The startup probe failure threshold is derived from this value using the formula: ceiling(startDelay / 10). stopDelay int32 The time in seconds that is allowed for a PostgreSQL instance to gracefully shutdown (default 1800) smartShutdownTimeout int32 The time in seconds that controls the window of time reserved for the smart shutdown of Postgres to complete. Make sure you reserve enough time for the operator to request a fast shutdown of Postgres (that is: stopDelay - smartShutdownTimeout ). switchoverDelay int32 The time in seconds that is allowed for a primary PostgreSQL instance to gracefully shutdown during a switchover. Default value is 3600 seconds (1 hour). failoverDelay int32 The amount of time (in seconds) to wait before triggering a failover after the primary PostgreSQL instance in the cluster was detected to be unhealthy livenessProbeTimeout int32 LivenessProbeTimeout is the time (in seconds) that is allowed for a PostgreSQL instance to successfully respond to the liveness probe (default 30). The Liveness probe failure threshold is derived from this value using the formula: ceiling(livenessProbe / 10). affinity AffinityConfiguration Affinity/Anti-affinity rules for Pods topologySpreadConstraints []core/v1.TopologySpreadConstraint TopologySpreadConstraints specifies how to spread matching pods among the given topology. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/ resources core/v1.ResourceRequirements Resources requirements of every generated Pod. Please refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ for more information. ephemeralVolumesSizeLimit EphemeralVolumesSizeLimitConfiguration EphemeralVolumesSizeLimit allows the user to set the limits for the ephemeral volumes priorityClassName string Name of the priority class which will be used in every generated Pod, if the PriorityClass specified does not exist, the pod will not be able to schedule. Please refer to https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass for more information primaryUpdateStrategy PrimaryUpdateStrategy Deployment strategy to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be automated ( unsupervised - default) or manual ( supervised ) primaryUpdateMethod PrimaryUpdateMethod Method to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be with a switchover ( switchover ) or in-place ( restart - default) backup BackupConfiguration The configuration to be used for backups nodeMaintenanceWindow NodeMaintenanceWindow Define a maintenance window for the Kubernetes nodes monitoring MonitoringConfiguration The configuration of the monitoring infrastructure of this cluster externalClusters []ExternalCluster The list of external clusters which are used in the configuration logLevel string The instances' log level, one of the following values: error, warning, info (default), debug, trace projectedVolumeTemplate core/v1.ProjectedVolumeSource Template to be used to define projected volumes, projected volumes will be mounted under /projected base folder env []core/v1.EnvVar Env follows the Env format to pass environment variables to the pods created in the cluster envFrom []core/v1.EnvFromSource EnvFrom follows the EnvFrom format to pass environment variables sources to the pods to be used by Env managed ManagedConfiguration The configuration that is used by the portions of PostgreSQL that are managed by the instance manager seccompProfile core/v1.SeccompProfile The SeccompProfile applied to every Pod and Container. Defaults to: RuntimeDefault tablespaces []TablespaceConfiguration The tablespaces configuration enablePDB bool Manage the PodDisruptionBudget resources within the cluster. When configured as true (default setting), the pod disruption budgets will safeguard the primary node from being terminated. Conversely, setting it to false will result in the absence of any PodDisruptionBudget resource, permitting the shutdown of all nodes hosting the PostgreSQL cluster. This latter configuration is advisable for any PostgreSQL cluster employed for development/staging purposes. plugins []PluginConfiguration The plugins configuration, containing any plugin to be loaded with the corresponding configuration probes ProbesConfiguration The configuration of the probes to be injected in the PostgreSQL Pods.","title":"ClusterSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterStatus","text":"Appears in: Cluster ClusterStatus defines the observed state of Cluster Field Description instances int The total number of PVC Groups detected in the cluster. It may differ from the number of existing instance pods. readyInstances int The total number of ready instances in the cluster. It is equal to the number of ready instance pods. instancesStatus map[PodStatus][]string InstancesStatus indicates in which status the instances are instancesReportedState map[PodName]InstanceReportedState The reported state of the instances during the last reconciliation loop managedRolesStatus ManagedRoles ManagedRolesStatus reports the state of the managed roles in the cluster tablespacesStatus []TablespaceState TablespacesStatus reports the state of the declarative tablespaces in the cluster timelineID int The timeline of the Postgres cluster topology Topology Instances topology. latestGeneratedNode int ID of the latest generated node (used to avoid node name clashing) currentPrimary string Current primary instance targetPrimary string Target primary instance, this is different from the previous one during a switchover or a failover lastPromotionToken string LastPromotionToken is the last verified promotion token that was used to promote a replica cluster pvcCount int32 How many PVCs have been created by this cluster jobCount int32 How many Jobs have been created by this cluster danglingPVC []string List of all the PVCs created by this cluster and still available which are not attached to a Pod resizingPVC []string List of all the PVCs that have ResizingPVC condition. initializingPVC []string List of all the PVCs that are being initialized by this cluster healthyPVC []string List of all the PVCs not dangling nor initializing unusablePVC []string List of all the PVCs that are unusable because another PVC is missing writeService string Current write pod readService string Current list of read pods phase string Current phase of the cluster phaseReason string Reason for the current phase secretsResourceVersion SecretsResourceVersion The list of resource versions of the secrets managed by the operator. Every change here is done in the interest of the instance manager, which will refresh the secret data configMapResourceVersion ConfigMapResourceVersion The list of resource versions of the configmaps, managed by the operator. Every change here is done in the interest of the instance manager, which will refresh the configmap data certificates CertificatesStatus The configuration for the CA and related certificates, initialized with defaults. firstRecoverabilityPoint string The first recoverability point, stored as a date in RFC3339 format. This field is calculated from the content of FirstRecoverabilityPointByMethod. Deprecated: the field is not set for backup plugins. firstRecoverabilityPointByMethod map[BackupMethod]meta/v1.Time The first recoverability point, stored as a date in RFC3339 format, per backup method type. Deprecated: the field is not set for backup plugins. lastSuccessfulBackup string Last successful backup, stored as a date in RFC3339 format. This field is calculated from the content of LastSuccessfulBackupByMethod. Deprecated: the field is not set for backup plugins. lastSuccessfulBackupByMethod map[BackupMethod]meta/v1.Time Last successful backup, stored as a date in RFC3339 format, per backup method type. Deprecated: the field is not set for backup plugins. lastFailedBackup string Last failed backup, stored as a date in RFC3339 format. Deprecated: the field is not set for backup plugins. cloudNativePGCommitHash string The commit hash number of which this operator running currentPrimaryTimestamp string The timestamp when the last actual promotion to primary has occurred currentPrimaryFailingSinceTimestamp string The timestamp when the primary was detected to be unhealthy This field is reported when .spec.failoverDelay is populated or during online upgrades targetPrimaryTimestamp string The timestamp when the last request for a new primary has occurred poolerIntegrations PoolerIntegrations The integration needed by poolers referencing the cluster cloudNativePGOperatorHash string The hash of the binary of the operator availableArchitectures []AvailableArchitecture AvailableArchitectures reports the available architectures of a cluster conditions []meta/v1.Condition Conditions for cluster object instanceNames []string List of instance names in the cluster onlineUpdateEnabled bool OnlineUpdateEnabled shows if the online upgrade is enabled inside the cluster image string Image contains the image name used by the pods pgDataImageInfo ImageInfo PGDataImageInfo contains the details of the latest image that has run on the current data directory. pluginStatus []PluginStatus PluginStatus is the status of the loaded plugins switchReplicaClusterStatus SwitchReplicaClusterStatus SwitchReplicaClusterStatus is the status of the switch to replica cluster demotionToken string DemotionToken is a JSON token containing the information from pg_controldata such as Database system identifier, Latest checkpoint's TimeLineID, Latest checkpoint's REDO location, Latest checkpoint's REDO WAL file, and Time of latest checkpoint systemID string SystemID is the latest detected PostgreSQL SystemID","title":"ClusterStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ConfigMapResourceVersion","text":"Appears in: ClusterStatus ConfigMapResourceVersion is the resource versions of the secrets managed by the operator Field Description metrics map[string]string A map with the versions of all the config maps used to pass metrics. Map keys are the config map names, map values are the versions","title":"ConfigMapResourceVersion"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DataDurabilityLevel","text":"(Alias of string ) Appears in: SynchronousReplicaConfiguration DataDurabilityLevel specifies how strictly to enforce synchronous replication when cluster instances are unavailable. Options are required or preferred .","title":"DataDurabilityLevel"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DataSource","text":"Appears in: BootstrapRecovery DataSource contains the configuration required to bootstrap a PostgreSQL cluster from an existing storage Field Description storage [Required] core/v1.TypedLocalObjectReference Configuration of the storage of the instances walStorage core/v1.TypedLocalObjectReference Configuration of the storage for PostgreSQL WAL (Write-Ahead Log) tablespaceStorage map[string]core/v1.TypedLocalObjectReference Configuration of the storage for PostgreSQL tablespaces","title":"DataSource"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseObjectSpec","text":"Appears in: ExtensionSpec SchemaSpec DatabaseObjectSpec contains the fields which are common to every database object Field Description name [Required] string Name of the extension/schema ensure EnsureOption Specifies whether an extension/schema should be present or absent in the database. If set to present , the extension/schema will be created if it does not exist. If set to absent , the extension/schema will be removed if it exists.","title":"DatabaseObjectSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseObjectStatus","text":"Appears in: DatabaseStatus DatabaseObjectStatus is the status of the managed database objects Field Description name [Required] string The name of the object applied [Required] bool True of the object has been installed successfully in the database message string Message is the object reconciliation message","title":"DatabaseObjectStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseReclaimPolicy","text":"(Alias of string ) Appears in: DatabaseSpec DatabaseReclaimPolicy describes a policy for end-of-life maintenance of databases.","title":"DatabaseReclaimPolicy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseRoleRef","text":"Appears in: TablespaceConfiguration DatabaseRoleRef is a reference an a role available inside PostgreSQL Field Description name string No description provided.","title":"DatabaseRoleRef"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseSpec","text":"Appears in: Database DatabaseSpec is the specification of a Postgresql Database, built around the CREATE DATABASE , ALTER DATABASE , and DROP DATABASE SQL commands of PostgreSQL. Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster hosting the database. ensure EnsureOption Ensure the PostgreSQL database is present or absent - defaults to \"present\". name [Required] string The name of the database to create inside PostgreSQL. This setting cannot be changed. owner [Required] string Maps to the OWNER parameter of CREATE DATABASE . Maps to the OWNER TO command of ALTER DATABASE . The role name of the user who owns the database inside PostgreSQL. template string Maps to the TEMPLATE parameter of CREATE DATABASE . This setting cannot be changed. The name of the template from which to create this database. encoding string Maps to the ENCODING parameter of CREATE DATABASE . This setting cannot be changed. Character set encoding to use in the database. locale string Maps to the LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Sets the default collation order and character classification in the new database. localeProvider string Maps to the LOCALE_PROVIDER parameter of CREATE DATABASE . This setting cannot be changed. This option sets the locale provider for databases created in the new cluster. Available from PostgreSQL 16. localeCollate string Maps to the LC_COLLATE parameter of CREATE DATABASE . This setting cannot be changed. localeCType string Maps to the LC_CTYPE parameter of CREATE DATABASE . This setting cannot be changed. icuLocale string Maps to the ICU_LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Specifies the ICU locale when the ICU provider is used. This option requires localeProvider to be set to icu . Available from PostgreSQL 15. icuRules string Maps to the ICU_RULES parameter of CREATE DATABASE . This setting cannot be changed. Specifies additional collation rules to customize the behavior of the default collation. This option requires localeProvider to be set to icu . Available from PostgreSQL 16. builtinLocale string Maps to the BUILTIN_LOCALE parameter of CREATE DATABASE . This setting cannot be changed. Specifies the locale name when the builtin provider is used. This option requires localeProvider to be set to builtin . Available from PostgreSQL 17. collationVersion string Maps to the COLLATION_VERSION parameter of CREATE DATABASE . This setting cannot be changed. isTemplate bool Maps to the IS_TEMPLATE parameter of CREATE DATABASE and ALTER DATABASE . If true, this database is considered a template and can be cloned by any user with CREATEDB privileges. allowConnections bool Maps to the ALLOW_CONNECTIONS parameter of CREATE DATABASE and ALTER DATABASE . If false then no one can connect to this database. connectionLimit int Maps to the CONNECTION LIMIT clause of CREATE DATABASE and ALTER DATABASE . How many concurrent connections can be made to this database. -1 (the default) means no limit. tablespace string Maps to the TABLESPACE parameter of CREATE DATABASE . Maps to the SET TABLESPACE command of ALTER DATABASE . The name of the tablespace (in PostgreSQL) that will be associated with the new database. This tablespace will be the default tablespace used for objects created in this database. databaseReclaimPolicy DatabaseReclaimPolicy The policy for end-of-life maintenance of this database. schemas []SchemaSpec The list of schemas to be managed in the database extensions []ExtensionSpec The list of extensions to be managed in the database","title":"DatabaseSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-DatabaseStatus","text":"Appears in: Database DatabaseStatus defines the observed state of Database Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the database was reconciled correctly message string Message is the reconciliation output message schemas []DatabaseObjectStatus Schemas is the status of the managed schemas extensions []DatabaseObjectStatus Extensions is the status of the managed extensions","title":"DatabaseStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-EmbeddedObjectMetadata","text":"Appears in: ClusterSpec EmbeddedObjectMetadata contains metadata to be inherited by all resources related to a Cluster Field Description labels map[string]string No description provided. annotations map[string]string No description provided.","title":"EmbeddedObjectMetadata"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-EnsureOption","text":"(Alias of string ) Appears in: DatabaseObjectSpec DatabaseSpec RoleConfiguration EnsureOption represents whether we should enforce the presence or absence of a Role in a PostgreSQL instance","title":"EnsureOption"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-EphemeralVolumesSizeLimitConfiguration","text":"Appears in: ClusterSpec EphemeralVolumesSizeLimitConfiguration contains the configuration of the ephemeral storage Field Description shm k8s.io/apimachinery/pkg/api/resource.Quantity Shm is the size limit of the shared memory volume temporaryData k8s.io/apimachinery/pkg/api/resource.Quantity TemporaryData is the size limit of the temporary data volume","title":"EphemeralVolumesSizeLimitConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ExtensionConfiguration","text":"Appears in: PostgresConfiguration ExtensionConfiguration is the configuration used to add PostgreSQL extensions to the Cluster. Field Description name [Required] string The name of the extension, required image [Required] core/v1.ImageVolumeSource The image containing the extension, required extension_control_path []string The list of directories inside the image which should be added to extension_control_path. If not defined, defaults to \"/share\". dynamic_library_path []string The list of directories inside the image which should be added to dynamic_library_path. If not defined, defaults to \"/lib\". ld_library_path []string The list of directories inside the image which should be added to ld_library_path.","title":"ExtensionConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ExtensionSpec","text":"Appears in: DatabaseSpec ExtensionSpec configures an extension in a database Field Description DatabaseObjectSpec DatabaseObjectSpec (Members of DatabaseObjectSpec are embedded into this type.) Common fields version [Required] string The version of the extension to install. If empty, the operator will install the default version (whatever is specified in the extension's control file) schema [Required] string The name of the schema in which to install the extension's objects, in case the extension allows its contents to be relocated. If not specified (default), and the extension's control file does not specify a schema either, the current default object creation schema is used.","title":"ExtensionSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ExternalCluster","text":"Appears in: ClusterSpec ExternalCluster represents the connection parameters to an external cluster which is used in the other sections of the configuration Field Description name [Required] string The server name, required connectionParameters map[string]string The list of connection parameters, such as dbname, host, username, etc sslCert core/v1.SecretKeySelector The reference to an SSL certificate to be used to connect to this instance sslKey core/v1.SecretKeySelector The reference to an SSL private key to be used to connect to this instance sslRootCert core/v1.SecretKeySelector The reference to an SSL CA public key to be used to connect to this instance password core/v1.SecretKeySelector The reference to the password to be used to connect to the server. If a password is provided, CloudNativePG creates a PostgreSQL passfile at /controller/external/NAME/pass (where \"NAME\" is the cluster's name). This passfile is automatically referenced in the connection string when establishing a connection to the remote PostgreSQL server from the current PostgreSQL Cluster . This ensures secure and efficient password management for external clusters. barmanObjectStore github.com/cloudnative-pg/barman-cloud/pkg/api.BarmanObjectStoreConfiguration The configuration for the barman-cloud tool suite plugin [Required] PluginConfiguration The configuration of the plugin that is taking care of WAL archiving and backups for this external cluster","title":"ExternalCluster"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-FailoverQuorumStatus","text":"Appears in: FailoverQuorum FailoverQuorumStatus is the latest observed status of the failover quorum of the PG cluster. Field Description method string Contains the latest reported Method value. standbyNames []string StandbyNames is the list of potentially synchronous instance names. standbyNumber int StandbyNumber is the number of synchronous standbys that transactions need to wait for replies from. primary string Primary is the name of the primary instance that updated this object the latest time.","title":"FailoverQuorumStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImageCatalogRef","text":"Appears in: ClusterSpec ImageCatalogRef defines the reference to a major version in an ImageCatalog Field Description TypedLocalObjectReference core/v1.TypedLocalObjectReference (Members of TypedLocalObjectReference are embedded into this type.) No description provided. major [Required] int The major version of PostgreSQL we want to use from the ImageCatalog","title":"ImageCatalogRef"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImageCatalogSpec","text":"Appears in: ClusterImageCatalog ImageCatalog ImageCatalogSpec defines the desired ImageCatalog Field Description images [Required] []CatalogImage List of CatalogImages available in the catalog","title":"ImageCatalogSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImageInfo","text":"Appears in: ClusterStatus ImageInfo contains the information about a PostgreSQL image Field Description image [Required] string Image is the image name majorVersion [Required] int MajorVersion is the major version of the image","title":"ImageInfo"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Import","text":"Appears in: BootstrapInitDB Import contains the configuration to init a database from a logic snapshot of an externalCluster Field Description source [Required] ImportSource The source of the import type [Required] SnapshotType The import type. Can be microservice or monolith . databases [Required] []string The databases to import roles []string The roles to import postImportApplicationSQL []string List of SQL queries to be executed as a superuser in the application database right after is imported - to be used with extreme care (by default empty). Only available in microservice type. schemaOnly bool When set to true, only the pre-data and post-data sections of pg_restore are invoked, avoiding data import. Default: false . pgDumpExtraOptions []string List of custom options to pass to the pg_dump command. IMPORTANT: Use these options with caution and at your own risk, as the operator does not validate their content. Be aware that certain options may conflict with the operator's intended functionality or design. pgRestoreExtraOptions []string List of custom options to pass to the pg_restore command. IMPORTANT: Use these options with caution and at your own risk, as the operator does not validate their content. Be aware that certain options may conflict with the operator's intended functionality or design.","title":"Import"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ImportSource","text":"Appears in: Import ImportSource describes the source for the logical snapshot Field Description externalCluster [Required] string The name of the externalCluster used for import","title":"ImportSource"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-InstanceID","text":"Appears in: BackupStatus InstanceID contains the information to identify an instance Field Description podName string The pod name ContainerID string The container ID","title":"InstanceID"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-InstanceReportedState","text":"Appears in: ClusterStatus InstanceReportedState describes the last reported state of an instance during a reconciliation loop Field Description isPrimary [Required] bool indicates if an instance is the primary one timeLineID int indicates on which TimelineId the instance is ip [Required] string IP address of the instance","title":"InstanceReportedState"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-IsolationCheckConfiguration","text":"Appears in: LivenessProbe IsolationCheckConfiguration contains the configuration for the isolation check functionality in the liveness probe Field Description enabled bool Whether primary isolation checking is enabled for the liveness probe requestTimeout int Timeout in milliseconds for requests during the primary isolation check connectionTimeout int Timeout in milliseconds for connections during the primary isolation check","title":"IsolationCheckConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LDAPBindAsAuth","text":"Appears in: LDAPConfig LDAPBindAsAuth provides the required fields to use the bind authentication for LDAP Field Description prefix string Prefix for the bind authentication option suffix string Suffix for the bind authentication option","title":"LDAPBindAsAuth"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LDAPBindSearchAuth","text":"Appears in: LDAPConfig LDAPBindSearchAuth provides the required fields to use the bind+search LDAP authentication process Field Description baseDN string Root DN to begin the user search bindDN string DN of the user to bind to the directory bindPassword core/v1.SecretKeySelector Secret with the password for the user to bind to the directory searchAttribute string Attribute to match against the username searchFilter string Search filter to use when doing the search+bind authentication","title":"LDAPBindSearchAuth"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LDAPConfig","text":"Appears in: PostgresConfiguration LDAPConfig contains the parameters needed for LDAP authentication Field Description server string LDAP hostname or IP address port int LDAP server port scheme LDAPScheme LDAP schema to be used, possible options are ldap and ldaps bindAsAuth LDAPBindAsAuth Bind as authentication configuration bindSearchAuth LDAPBindSearchAuth Bind+Search authentication configuration tls bool Set to 'true' to enable LDAP over TLS. 'false' is default","title":"LDAPConfig"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LDAPScheme","text":"(Alias of string ) Appears in: LDAPConfig LDAPScheme defines the possible schemes for LDAP","title":"LDAPScheme"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-LivenessProbe","text":"Appears in: ProbesConfiguration LivenessProbe is the configuration of the liveness probe Field Description Probe Probe (Members of Probe are embedded into this type.) Probe is the standard probe configuration isolationCheck IsolationCheckConfiguration Configure the feature that extends the liveness probe for a primary instance. In addition to the basic checks, this verifies whether the primary is isolated from the Kubernetes API server and from its replicas, ensuring that it can be safely shut down if network partition or API unavailability is detected. Enabled by default.","title":"LivenessProbe"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedConfiguration","text":"Appears in: ClusterSpec ManagedConfiguration represents the portions of PostgreSQL that are managed by the instance manager Field Description roles []RoleConfiguration Database roles managed by the Cluster services ManagedServices Services roles managed by the Cluster","title":"ManagedConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedRoles","text":"Appears in: ClusterStatus ManagedRoles tracks the status of a cluster's managed roles Field Description byStatus map[RoleStatus][]string ByStatus gives the list of roles in each state cannotReconcile map[string][]string CannotReconcile lists roles that cannot be reconciled in PostgreSQL, with an explanation of the cause passwordStatus map[string]PasswordState PasswordStatus gives the last transaction id and password secret version for each managed role","title":"ManagedRoles"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedService","text":"Appears in: ManagedServices ManagedService represents a specific service managed by the cluster. It includes the type of service and its associated template specification. Field Description selectorType [Required] ServiceSelectorType SelectorType specifies the type of selectors that the service will have. Valid values are \"rw\", \"r\", and \"ro\", representing read-write, read, and read-only services. updateStrategy ServiceUpdateStrategy UpdateStrategy describes how the service differences should be reconciled serviceTemplate [Required] ServiceTemplateSpec ServiceTemplate is the template specification for the service.","title":"ManagedService"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ManagedServices","text":"Appears in: ManagedConfiguration ManagedServices represents the services managed by the cluster. Field Description disabledDefaultServices []ServiceSelectorType DisabledDefaultServices is a list of service types that are disabled by default. Valid values are \"r\", and \"ro\", representing read, and read-only services. additional []ManagedService Additional is a list of additional managed services specified by the user.","title":"ManagedServices"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Metadata","text":"Appears in: PodTemplateSpec ServiceAccountTemplate ServiceTemplateSpec Metadata is a structure similar to the metav1.ObjectMeta, but still parseable by controller-gen to create a suitable CRD for the user. The comment of PodTemplateSpec has an explanation of why we are not using the core data types. Field Description name string The name of the resource. Only supported for certain types labels map[string]string Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels annotations map[string]string Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations","title":"Metadata"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-MonitoringConfiguration","text":"Appears in: ClusterSpec MonitoringConfiguration is the type containing all the monitoring configuration for a certain cluster Field Description disableDefaultQueries bool Whether the default queries should be injected. Set it to true if you don't want to inject default queries into the cluster. Default: false. customQueriesConfigMap []github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector The list of config maps containing the custom queries customQueriesSecret []github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector The list of secrets containing the custom queries enablePodMonitor bool Enable or disable the PodMonitor tls ClusterMonitoringTLSConfiguration Configure TLS communication for the metrics endpoint. Changing tls.enabled option will force a rollout of all instances. podMonitorMetricRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of metric relabelings for the PodMonitor . Applied to samples before ingestion. podMonitorRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of relabelings for the PodMonitor . Applied to samples before scraping.","title":"MonitoringConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-NodeMaintenanceWindow","text":"Appears in: ClusterSpec NodeMaintenanceWindow contains information that the operator will use while upgrading the underlying node. This option is only useful when the chosen storage prevents the Pods from being freely moved across nodes. Field Description reusePVC bool Reuse the existing PVC (wait for the node to come up again) or not (recreate it elsewhere - when instances >1) inProgress bool Is there a node maintenance activity in progress?","title":"NodeMaintenanceWindow"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-OnlineConfiguration","text":"Appears in: BackupSpec ScheduledBackupSpec VolumeSnapshotConfiguration OnlineConfiguration contains the configuration parameters for the online volume snapshot Field Description waitForArchive bool If false, the function will return immediately after the backup is completed, without waiting for WAL to be archived. This behavior is only useful with backup software that independently monitors WAL archiving. Otherwise, WAL required to make the backup consistent might be missing and make the backup useless. By default, or when this parameter is true, pg_backup_stop will wait for WAL to be archived when archiving is enabled. On a standby, this means that it will wait only when archive_mode = always. If write activity on the primary is low, it may be useful to run pg_switch_wal on the primary in order to trigger an immediate segment switch. immediateCheckpoint bool Control whether the I/O workload for the backup initial checkpoint will be limited, according to the checkpoint_completion_target setting on the PostgreSQL server. If set to true, an immediate checkpoint will be used, meaning PostgreSQL will complete the checkpoint as soon as possible. false by default.","title":"OnlineConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PasswordState","text":"Appears in: ManagedRoles PasswordState represents the state of the password of a managed RoleConfiguration Field Description transactionID int64 the last transaction ID to affect the role definition in PostgreSQL resourceVersion string the resource version of the password secret","title":"PasswordState"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PgBouncerIntegrationStatus","text":"Appears in: PoolerIntegrations PgBouncerIntegrationStatus encapsulates the needed integration for the pgbouncer poolers referencing the cluster Field Description secrets []string No description provided.","title":"PgBouncerIntegrationStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PgBouncerPoolMode","text":"(Alias of string ) Appears in: PgBouncerSpec PgBouncerPoolMode is the mode of PgBouncer","title":"PgBouncerPoolMode"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PgBouncerSecrets","text":"Appears in: PoolerSecrets PgBouncerSecrets contains the versions of the secrets used by pgbouncer Field Description authQuery SecretVersion The auth query secret version","title":"PgBouncerSecrets"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PgBouncerSpec","text":"Appears in: PoolerSpec PgBouncerSpec defines how to configure PgBouncer Field Description poolMode PgBouncerPoolMode The pool mode. Default: session . authQuerySecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The credentials of the user that need to be used for the authentication query. In case it is specified, also an AuthQuery (e.g. \"SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1\") has to be specified and no automatic CNPG Cluster integration will be triggered. authQuery string The query that will be used to download the hash of the password of a certain user. Default: \"SELECT usename, passwd FROM public.user_search($1)\". In case it is specified, also an AuthQuerySecret has to be specified and no automatic CNPG Cluster integration will be triggered. parameters map[string]string Additional parameters to be passed to PgBouncer - please check the CNPG documentation for a list of options you can configure pg_hba []string PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) paused bool When set to true , PgBouncer will disconnect from the PostgreSQL server, first waiting for all queries to complete, and pause all new client connections until this value is set to false (default). Internally, the operator calls PgBouncer's PAUSE and RESUME commands.","title":"PgBouncerSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PluginConfiguration","text":"Appears in: ClusterSpec ExternalCluster PluginConfiguration specifies a plugin that need to be loaded for this cluster to be reconciled Field Description name [Required] string Name is the plugin name enabled bool Enabled is true if this plugin will be used isWALArchiver bool Only one plugin can be declared as WALArchiver. Cannot be active if \".spec.backup.barmanObjectStore\" configuration is present. parameters map[string]string Parameters is the configuration of the plugin","title":"PluginConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PluginStatus","text":"Appears in: ClusterStatus PluginStatus is the status of a loaded plugin Field Description name [Required] string Name is the name of the plugin version [Required] string Version is the version of the plugin loaded by the latest reconciliation loop capabilities []string Capabilities are the list of capabilities of the plugin operatorCapabilities []string OperatorCapabilities are the list of capabilities of the plugin regarding the reconciler walCapabilities []string WALCapabilities are the list of capabilities of the plugin regarding the WAL management backupCapabilities []string BackupCapabilities are the list of capabilities of the plugin regarding the Backup management restoreJobHookCapabilities []string RestoreJobHookCapabilities are the list of capabilities of the plugin regarding the RestoreJobHook management status string Status contain the status reported by the plugin through the SetStatusInCluster interface","title":"PluginStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PodTemplateSpec","text":"Appears in: PoolerSpec PodTemplateSpec is a structure allowing the user to set a template for Pod generation. Unfortunately we can't use the corev1.PodTemplateSpec type because the generated CRD won't have the field for the metadata section. References: https://github.com/kubernetes-sigs/controller-tools/issues/385 https://github.com/kubernetes-sigs/controller-tools/issues/448 https://github.com/prometheus-operator/prometheus-operator/issues/3041 Field Description metadata Metadata Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata spec core/v1.PodSpec Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"PodTemplateSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PodTopologyLabels","text":"(Alias of map[string]string ) Appears in: Topology PodTopologyLabels represent the topology of a Pod. map[labelName]labelValue","title":"PodTopologyLabels"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerIntegrations","text":"Appears in: ClusterStatus PoolerIntegrations encapsulates the needed integration for the poolers referencing the cluster Field Description pgBouncerIntegration PgBouncerIntegrationStatus No description provided.","title":"PoolerIntegrations"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerMonitoringConfiguration","text":"Appears in: PoolerSpec PoolerMonitoringConfiguration is the type containing all the monitoring configuration for a certain Pooler. Mirrors the Cluster's MonitoringConfiguration but without the custom queries part for now. Field Description enablePodMonitor bool Enable or disable the PodMonitor podMonitorMetricRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of metric relabelings for the PodMonitor . Applied to samples before ingestion. podMonitorRelabelings []github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1.RelabelConfig The list of relabelings for the PodMonitor . Applied to samples before scraping.","title":"PoolerMonitoringConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerSecrets","text":"Appears in: PoolerStatus PoolerSecrets contains the versions of all the secrets used Field Description serverTLS SecretVersion The server TLS secret version serverCA SecretVersion The server CA secret version clientCA SecretVersion The client CA secret version pgBouncerSecrets PgBouncerSecrets The version of the secrets used by PgBouncer","title":"PoolerSecrets"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerSpec","text":"Appears in: Pooler PoolerSpec defines the desired state of Pooler Field Description cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference This is the cluster reference on which the Pooler will work. Pooler name should never match with any cluster name within the same namespace. type PoolerType Type of service to forward traffic to. Default: rw . instances int32 The number of replicas we want. Default: 1. template PodTemplateSpec The template of the Pod to be created pgbouncer [Required] PgBouncerSpec The PgBouncer configuration deploymentStrategy apps/v1.DeploymentStrategy The deployment strategy to use for pgbouncer to replace existing pods with new ones monitoring PoolerMonitoringConfiguration The configuration of the monitoring infrastructure of this pooler. serviceTemplate ServiceTemplateSpec Template for the Service to be created","title":"PoolerSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerStatus","text":"Appears in: Pooler PoolerStatus defines the observed state of Pooler Field Description secrets PoolerSecrets The resource version of the config object instances int32 The number of pods trying to be scheduled","title":"PoolerStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PoolerType","text":"(Alias of string ) Appears in: PoolerSpec PoolerType is the type of the connection pool, meaning the service we are targeting. Allowed values are rw and ro .","title":"PoolerType"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PostgresConfiguration","text":"Appears in: ClusterSpec PostgresConfiguration defines the PostgreSQL configuration Field Description parameters map[string]string PostgreSQL configuration options (postgresql.conf) synchronous SynchronousReplicaConfiguration Configuration of the PostgreSQL synchronous replication feature pg_hba []string PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) pg_ident []string PostgreSQL User Name Maps rules (lines to be appended to the pg_ident.conf file) syncReplicaElectionConstraint SyncReplicaElectionConstraints Requirements to be met by sync replicas. This will affect how the \"synchronous_standby_names\" parameter will be set up. shared_preload_libraries []string Lists of shared preload libraries to add to the default ones ldap LDAPConfig Options to specify LDAP configuration promotionTimeout int32 Specifies the maximum number of seconds to wait when promoting an instance to primary. Default value is 40000000, greater than one year in seconds, big enough to simulate an infinite timeout enableAlterSystem bool If this parameter is true, the user will be able to invoke ALTER SYSTEM on this CloudNativePG Cluster. This should only be used for debugging and troubleshooting. Defaults to false. extensions []ExtensionConfiguration The configuration of the extensions to be added","title":"PostgresConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PrimaryUpdateMethod","text":"(Alias of string ) Appears in: ClusterSpec PrimaryUpdateMethod contains the method to use when upgrading the primary server of the cluster as part of rolling updates","title":"PrimaryUpdateMethod"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PrimaryUpdateStrategy","text":"(Alias of string ) Appears in: ClusterSpec PrimaryUpdateStrategy contains the strategy to follow when upgrading the primary server of the cluster as part of rolling updates","title":"PrimaryUpdateStrategy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Probe","text":"Appears in: LivenessProbe ProbeWithStrategy Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic. Field Description initialDelaySeconds int32 Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes timeoutSeconds int32 Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes periodSeconds int32 How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. successThreshold int32 Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1. failureThreshold int32 Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. terminationGracePeriodSeconds int64 Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.","title":"Probe"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ProbeStrategyType","text":"(Alias of string ) Appears in: ProbeWithStrategy ProbeStrategyType is the type of the strategy used to declare a PostgreSQL instance ready","title":"ProbeStrategyType"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ProbeWithStrategy","text":"Appears in: ProbesConfiguration ProbeWithStrategy is the configuration of the startup probe Field Description Probe Probe (Members of Probe are embedded into this type.) Probe is the standard probe configuration type ProbeStrategyType The probe strategy maximumLag k8s.io/apimachinery/pkg/api/resource.Quantity Lag limit. Used only for streaming strategy","title":"ProbeWithStrategy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ProbesConfiguration","text":"Appears in: ClusterSpec ProbesConfiguration represent the configuration for the probes to be injected in the PostgreSQL Pods Field Description startup [Required] ProbeWithStrategy The startup probe configuration liveness [Required] LivenessProbe The liveness probe configuration readiness [Required] ProbeWithStrategy The readiness probe configuration","title":"ProbesConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationReclaimPolicy","text":"(Alias of string ) Appears in: PublicationSpec PublicationReclaimPolicy defines a policy for end-of-life maintenance of Publications.","title":"PublicationReclaimPolicy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationSpec","text":"Appears in: Publication PublicationSpec defines the desired state of Publication Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster that identifies the \"publisher\" name [Required] string The name of the publication inside PostgreSQL dbname [Required] string The name of the database where the publication will be installed in the \"publisher\" cluster parameters map[string]string Publication parameters part of the WITH clause as expected by PostgreSQL CREATE PUBLICATION command target [Required] PublicationTarget Target of the publication as expected by PostgreSQL CREATE PUBLICATION command publicationReclaimPolicy PublicationReclaimPolicy The policy for end-of-life maintenance of this publication","title":"PublicationSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationStatus","text":"Appears in: Publication PublicationStatus defines the observed state of Publication Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the publication was reconciled correctly message string Message is the reconciliation output message","title":"PublicationStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationTarget","text":"Appears in: PublicationSpec PublicationTarget is what this publication should publish Field Description allTables bool Marks the publication as one that replicates changes for all tables in the database, including tables created in the future. Corresponding to FOR ALL TABLES in PostgreSQL. objects []PublicationTargetObject Just the following schema objects","title":"PublicationTarget"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationTargetObject","text":"Appears in: PublicationTarget PublicationTargetObject is an object to publish Field Description tablesInSchema string Marks the publication as one that replicates changes for all tables in the specified list of schemas, including tables created in the future. Corresponding to FOR TABLES IN SCHEMA in PostgreSQL. table PublicationTargetTable Specifies a list of tables to add to the publication. Corresponding to FOR TABLE in PostgreSQL.","title":"PublicationTargetObject"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-PublicationTargetTable","text":"Appears in: PublicationTargetObject PublicationTargetTable is a table to publish Field Description only bool Whether to limit to the table only or include all its descendants name [Required] string The table name schema string The schema name columns []string The columns to publish","title":"PublicationTargetTable"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-RecoveryTarget","text":"Appears in: BootstrapRecovery RecoveryTarget allows to configure the moment where the recovery process will stop. All the target options except TargetTLI are mutually exclusive. Field Description backupID string The ID of the backup from which to start the recovery process. If empty (default) the operator will automatically detect the backup based on targetTime or targetLSN if specified. Otherwise use the latest available backup in chronological order. targetTLI string The target timeline (\"latest\" or a positive integer) targetXID string The target transaction ID targetName string The target name (to be previously created with pg_create_restore_point ) targetLSN string The target LSN (Log Sequence Number) targetTime string The target time as a timestamp in the RFC3339 standard targetImmediate bool End recovery as soon as a consistent state is reached exclusive bool Set the target to be exclusive. If omitted, defaults to false, so that in Postgres, recovery_target_inclusive will be true","title":"RecoveryTarget"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ReplicaClusterConfiguration","text":"Appears in: ClusterSpec ReplicaClusterConfiguration encapsulates the configuration of a replica cluster Field Description self string Self defines the name of this cluster. It is used to determine if this is a primary or a replica cluster, comparing it with primary primary string Primary defines which Cluster is defined to be the primary in the distributed PostgreSQL cluster, based on the topology specified in externalClusters source [Required] string The name of the external cluster which is the replication origin enabled bool If replica mode is enabled, this cluster will be a replica of an existing cluster. Replica cluster can be created from a recovery object store or via streaming through pg_basebackup. Refer to the Replica clusters page of the documentation for more information. promotionToken string A demotion token generated by an external cluster used to check if the promotion requirements are met. minApplyDelay meta/v1.Duration When replica mode is enabled, this parameter allows you to replay transactions only when the system time is at least the configured time past the commit time. This provides an opportunity to correct data loss errors. Note that when this parameter is set, a promotion token cannot be used.","title":"ReplicaClusterConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ReplicationSlotsConfiguration","text":"Appears in: ClusterSpec ReplicationSlotsConfiguration encapsulates the configuration of replication slots Field Description highAvailability ReplicationSlotsHAConfiguration Replication slots for high availability configuration updateInterval int Standby will update the status of the local replication slots every updateInterval seconds (default 30). synchronizeReplicas SynchronizeReplicasConfiguration Configures the synchronization of the user defined physical replication slots","title":"ReplicationSlotsConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ReplicationSlotsHAConfiguration","text":"Appears in: ReplicationSlotsConfiguration ReplicationSlotsHAConfiguration encapsulates the configuration of the replication slots that are automatically managed by the operator to control the streaming replication connections with the standby instances for high availability (HA) purposes. Replication slots are a PostgreSQL feature that makes sure that PostgreSQL automatically keeps WAL files in the primary when a streaming client (in this specific case a replica that is part of the HA cluster) gets disconnected. Field Description enabled bool If enabled (default), the operator will automatically manage replication slots on the primary instance and use them in streaming replication connections with all the standby instances that are part of the HA cluster. If disabled, the operator will not take advantage of replication slots in streaming connections with the replicas. This feature also controls replication slots in replica cluster, from the designated primary to its cascading replicas. slotPrefix string Prefix for replication slots managed by the operator for HA. It may only contain lower case letters, numbers, and the underscore character. This can only be set at creation time. By default set to _cnpg_ . synchronizeLogicalDecoding bool When enabled, the operator automatically manages synchronization of logical decoding (replication) slots across high-availability clusters. Requires one of the following conditions: PostgreSQL version 17 or later PostgreSQL version < 17 with pg_failover_slots extension enabled","title":"ReplicationSlotsHAConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-RoleConfiguration","text":"Appears in: ManagedConfiguration RoleConfiguration is the representation, in Kubernetes, of a PostgreSQL role with the additional field Ensure specifying whether to ensure the presence or absence of the role in the database The defaults of the CREATE ROLE command are applied Reference: https://www.postgresql.org/docs/current/sql-createrole.html Field Description name [Required] string Name of the role comment string Description of the role ensure EnsureOption Ensure the role is present or absent - defaults to \"present\" passwordSecret github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference Secret containing the password of the role (if present) If null, the password will be ignored unless DisablePassword is set connectionLimit int64 If the role can log in, this specifies how many concurrent connections the role can make. -1 (the default) means no limit. validUntil meta/v1.Time Date and time after which the role's password is no longer valid. When omitted, the password will never expire (default). inRoles []string List of one or more existing roles to which this role will be immediately added as a new member. Default empty. inherit bool Whether a role \"inherits\" the privileges of roles it is a member of. Defaults is true . disablePassword bool DisablePassword indicates that a role's password should be set to NULL in Postgres superuser bool Whether the role is a superuser who can override all access restrictions within the database - superuser status is dangerous and should be used only when really needed. You must yourself be a superuser to create a new superuser. Defaults is false . createdb bool When set to true , the role being defined will be allowed to create new databases. Specifying false (default) will deny a role the ability to create databases. createrole bool Whether the role will be permitted to create, alter, drop, comment on, change the security label for, and grant or revoke membership in other roles. Default is false . login bool Whether the role is allowed to log in. A role having the login attribute can be thought of as a user. Roles without this attribute are useful for managing database privileges, but are not users in the usual sense of the word. Default is false . replication bool Whether a role is a replication role. A role must have this attribute (or be a superuser) in order to be able to connect to the server in replication mode (physical or logical replication) and in order to be able to create or drop replication slots. A role having the replication attribute is a very highly privileged role, and should only be used on roles actually used for replication. Default is false . bypassrls bool Whether a role bypasses every row-level security (RLS) policy. Default is false .","title":"RoleConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SQLRefs","text":"Appears in: BootstrapInitDB SQLRefs holds references to ConfigMaps or Secrets containing SQL files. The references are processed in a specific order: first, all Secrets are processed, followed by all ConfigMaps. Within each group, the processing order follows the sequence specified in their respective arrays. Field Description secretRefs []github.com/cloudnative-pg/machinery/pkg/api.SecretKeySelector SecretRefs holds a list of references to Secrets configMapRefs []github.com/cloudnative-pg/machinery/pkg/api.ConfigMapKeySelector ConfigMapRefs holds a list of references to ConfigMaps","title":"SQLRefs"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ScheduledBackupSpec","text":"Appears in: ScheduledBackup ScheduledBackupSpec defines the desired state of ScheduledBackup Field Description suspend bool If this backup is suspended or not immediate bool If the first backup has to be immediately start after creation or not schedule [Required] string The schedule does not follow the same format used in Kubernetes CronJobs as it includes an additional seconds specifier, see https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format cluster [Required] github.com/cloudnative-pg/machinery/pkg/api.LocalObjectReference The cluster to backup backupOwnerReference string Indicates which ownerReference should be put inside the created backup resources. none: no owner reference for created backup objects (same behavior as before the field was introduced) self: sets the Scheduled backup object as owner of the backup cluster: set the cluster as owner of the backup target BackupTarget The policy to decide which instance should perform this backup. If empty, it defaults to cluster.spec.backup.target . Available options are empty string, primary and prefer-standby . primary to have backups run always on primary instances, prefer-standby to have backups run preferably on the most updated standby, if available. method BackupMethod The backup method to be used, possible options are barmanObjectStore , volumeSnapshot or plugin . Defaults to: barmanObjectStore . pluginConfiguration BackupPluginConfiguration Configuration parameters passed to the plugin managing this backup online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) Overrides the default setting specified in the cluster field '.spec.backup.volumeSnapshot.online' onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots Overrides the default settings specified in the cluster '.backup.volumeSnapshot.onlineConfiguration' stanza","title":"ScheduledBackupSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ScheduledBackupStatus","text":"Appears in: ScheduledBackup ScheduledBackupStatus defines the observed state of ScheduledBackup Field Description lastCheckTime meta/v1.Time The latest time the schedule lastScheduleTime meta/v1.Time Information when was the last time that backup was successfully scheduled. nextScheduleTime meta/v1.Time Next time we will run a backup","title":"ScheduledBackupStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SchemaSpec","text":"Appears in: DatabaseSpec SchemaSpec configures a schema in a database Field Description DatabaseObjectSpec DatabaseObjectSpec (Members of DatabaseObjectSpec are embedded into this type.) Common fields owner [Required] string The role name of the user who owns the schema inside PostgreSQL. It maps to the AUTHORIZATION parameter of CREATE SCHEMA and the OWNER TO command of ALTER SCHEMA .","title":"SchemaSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SecretVersion","text":"Appears in: PgBouncerSecrets PoolerSecrets SecretVersion contains a secret name and its ResourceVersion Field Description name string The name of the secret version string The ResourceVersion of the secret","title":"SecretVersion"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SecretsResourceVersion","text":"Appears in: ClusterStatus SecretsResourceVersion is the resource versions of the secrets managed by the operator Field Description superuserSecretVersion string The resource version of the \"postgres\" user secret replicationSecretVersion string The resource version of the \"streaming_replica\" user secret applicationSecretVersion string The resource version of the \"app\" user secret managedRoleSecretVersion map[string]string The resource versions of the managed roles secrets caSecretVersion string Unused. Retained for compatibility with old versions. clientCaSecretVersion string The resource version of the PostgreSQL client-side CA secret version serverCaSecretVersion string The resource version of the PostgreSQL server-side CA secret version serverSecretVersion string The resource version of the PostgreSQL server-side secret version barmanEndpointCA string The resource version of the Barman Endpoint CA if provided externalClusterSecretVersion map[string]string The resource versions of the external cluster secrets metrics map[string]string A map with the versions of all the secrets used to pass metrics. Map keys are the secret names, map values are the versions","title":"SecretsResourceVersion"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ServiceAccountTemplate","text":"Appears in: ClusterSpec ServiceAccountTemplate contains the template needed to generate the service accounts Field Description metadata [Required] Metadata Metadata are the metadata to be used for the generated service account","title":"ServiceAccountTemplate"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ServiceSelectorType","text":"(Alias of string ) Appears in: ManagedService ManagedServices ServiceSelectorType describes a valid value for generating the service selectors. It indicates which type of service the selector applies to, such as read-write, read, or read-only","title":"ServiceSelectorType"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ServiceTemplateSpec","text":"Appears in: ManagedService PoolerSpec ServiceTemplateSpec is a structure allowing the user to set a template for Service generation. Field Description metadata Metadata Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata spec core/v1.ServiceSpec Specification of the desired behavior of the service. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status","title":"ServiceTemplateSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-ServiceUpdateStrategy","text":"(Alias of string ) Appears in: ManagedService ServiceUpdateStrategy describes how the changes to the managed service should be handled","title":"ServiceUpdateStrategy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SnapshotOwnerReference","text":"(Alias of string ) Appears in: VolumeSnapshotConfiguration SnapshotOwnerReference defines the reference type for the owner of the snapshot. This specifies which owner the processed resources should relate to.","title":"SnapshotOwnerReference"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SnapshotType","text":"(Alias of string ) Appears in: Import SnapshotType is a type of allowed import","title":"SnapshotType"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-StorageConfiguration","text":"Appears in: ClusterSpec TablespaceConfiguration StorageConfiguration is the configuration used to create and reconcile PVCs, usable for WAL volumes, PGDATA volumes, or tablespaces Field Description storageClass string StorageClass to use for PVCs. Applied after evaluating the PVC template, if available. If not specified, the generated PVCs will use the default storage class size string Size of the storage. Required if not already specified in the PVC template. Changes to this field are automatically reapplied to the created PVCs. Size cannot be decreased. resizeInUseVolumes bool Resize existent PVCs, defaults to true pvcTemplate core/v1.PersistentVolumeClaimSpec Template to be used to generate the Persistent Volume Claim","title":"StorageConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SubscriptionReclaimPolicy","text":"(Alias of string ) Appears in: SubscriptionSpec SubscriptionReclaimPolicy describes a policy for end-of-life maintenance of Subscriptions.","title":"SubscriptionReclaimPolicy"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SubscriptionSpec","text":"Appears in: Subscription SubscriptionSpec defines the desired state of Subscription Field Description cluster [Required] core/v1.LocalObjectReference The name of the PostgreSQL cluster that identifies the \"subscriber\" name [Required] string The name of the subscription inside PostgreSQL dbname [Required] string The name of the database where the publication will be installed in the \"subscriber\" cluster parameters map[string]string Subscription parameters included in the WITH clause of the PostgreSQL CREATE SUBSCRIPTION command. Most parameters cannot be changed after the subscription is created and will be ignored if modified later, except for a limited set documented at: https://www.postgresql.org/docs/current/sql-altersubscription.html#SQL-ALTERSUBSCRIPTION-PARAMS-SET publicationName [Required] string The name of the publication inside the PostgreSQL database in the \"publisher\" publicationDBName string The name of the database containing the publication on the external cluster. Defaults to the one in the external cluster definition. externalClusterName [Required] string The name of the external cluster with the publication (\"publisher\") subscriptionReclaimPolicy SubscriptionReclaimPolicy The policy for end-of-life maintenance of this subscription","title":"SubscriptionSpec"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SubscriptionStatus","text":"Appears in: Subscription SubscriptionStatus defines the observed state of Subscription Field Description observedGeneration int64 A sequence number representing the latest desired state that was synchronized applied bool Applied is true if the subscription was reconciled correctly message string Message is the reconciliation output message","title":"SubscriptionStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SwitchReplicaClusterStatus","text":"Appears in: ClusterStatus SwitchReplicaClusterStatus contains all the statuses regarding the switch of a cluster to a replica cluster Field Description inProgress bool InProgress indicates if there is an ongoing procedure of switching a cluster to a replica cluster.","title":"SwitchReplicaClusterStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SyncReplicaElectionConstraints","text":"Appears in: PostgresConfiguration SyncReplicaElectionConstraints contains the constraints for sync replicas election. For anti-affinity parameters two instances are considered in the same location if all the labels values match. In future synchronous replica election restriction by name will be supported. Field Description nodeLabelsAntiAffinity []string A list of node labels values to extract and compare to evaluate if the pods reside in the same topology or not enabled [Required] bool This flag enables the constraints for sync replicas","title":"SyncReplicaElectionConstraints"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SynchronizeReplicasConfiguration","text":"Appears in: ReplicationSlotsConfiguration SynchronizeReplicasConfiguration contains the configuration for the synchronization of user defined physical replication slots Field Description enabled [Required] bool When set to true, every replication slot that is on the primary is synchronized on each standby excludePatterns []string List of regular expression patterns to match the names of replication slots to be excluded (by default empty)","title":"SynchronizeReplicasConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SynchronousReplicaConfiguration","text":"Appears in: PostgresConfiguration SynchronousReplicaConfiguration contains the configuration of the PostgreSQL synchronous replication feature. Important: at this moment, also .spec.minSyncReplicas and .spec.maxSyncReplicas need to be considered. Field Description method [Required] SynchronousReplicaConfigurationMethod Method to select synchronous replication standbys from the listed servers, accepting 'any' (quorum-based synchronous replication) or 'first' (priority-based synchronous replication) as values. number [Required] int Specifies the number of synchronous standby servers that transactions must wait for responses from. maxStandbyNamesFromCluster int Specifies the maximum number of local cluster pods that can be automatically included in the synchronous_standby_names option in PostgreSQL. standbyNamesPre []string A user-defined list of application names to be added to synchronous_standby_names before local cluster pods (the order is only useful for priority-based synchronous replication). standbyNamesPost []string A user-defined list of application names to be added to synchronous_standby_names after local cluster pods (the order is only useful for priority-based synchronous replication). dataDurability DataDurabilityLevel If set to \"required\", data durability is strictly enforced. Write operations with synchronous commit settings ( on , remote_write , or remote_apply ) will block if there are insufficient healthy replicas, ensuring data persistence. If set to \"preferred\", data durability is maintained when healthy replicas are available, but the required number of instances will adjust dynamically if replicas become unavailable. This setting relaxes strict durability enforcement to allow for operational continuity. This setting is only applicable if both standbyNamesPre and standbyNamesPost are unset (empty).","title":"SynchronousReplicaConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-SynchronousReplicaConfigurationMethod","text":"(Alias of string ) Appears in: SynchronousReplicaConfiguration SynchronousReplicaConfigurationMethod configures whether to use quorum based replication or a priority list","title":"SynchronousReplicaConfigurationMethod"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-TablespaceConfiguration","text":"Appears in: ClusterSpec TablespaceConfiguration is the configuration of a tablespace, and includes the storage specification for the tablespace Field Description name [Required] string The name of the tablespace storage [Required] StorageConfiguration The storage configuration for the tablespace owner DatabaseRoleRef Owner is the PostgreSQL user owning the tablespace temporary bool When set to true, the tablespace will be added as a temp_tablespaces entry in PostgreSQL, and will be available to automatically house temp database objects, or other temporary files. Please refer to PostgreSQL documentation for more information on the temp_tablespaces GUC.","title":"TablespaceConfiguration"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-TablespaceState","text":"Appears in: ClusterStatus TablespaceState represents the state of a tablespace in a cluster Field Description name [Required] string Name is the name of the tablespace owner string Owner is the PostgreSQL user owning the tablespace state [Required] TablespaceStatus State is the latest reconciliation state error string Error is the reconciliation error, if any","title":"TablespaceState"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-TablespaceStatus","text":"(Alias of string ) Appears in: TablespaceState TablespaceStatus represents the status of a tablespace in the cluster","title":"TablespaceStatus"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-Topology","text":"Appears in: ClusterStatus Topology contains the cluster topology Field Description instances map[PodName]PodTopologyLabels Instances contains the pod topology of the instances nodesUsed int32 NodesUsed represents the count of distinct nodes accommodating the instances. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally, this value should be the same as the number of instances in the Postgres HA cluster, implying shared nothing architecture on the compute side. successfullyExtracted bool SuccessfullyExtracted indicates if the topology data was extract. It is useful to enact fallback behaviors in synchronous replica election in case of failures","title":"Topology"},{"location":"cloudnative-pg.v1/#postgresql-cnpg-io-v1-VolumeSnapshotConfiguration","text":"Appears in: BackupConfiguration VolumeSnapshotConfiguration represents the configuration for the execution of snapshot backups. Field Description labels map[string]string Labels are key-value pairs that will be added to .metadata.labels snapshot resources. annotations map[string]string Annotations key-value pairs that will be added to .metadata.annotations snapshot resources. className string ClassName specifies the Snapshot Class to be used for PG_DATA PersistentVolumeClaim. It is the default class for the other types if no specific class is present walClassName string WalClassName specifies the Snapshot Class to be used for the PG_WAL PersistentVolumeClaim. tablespaceClassName map[string]string TablespaceClassName specifies the Snapshot Class to be used for the tablespaces. defaults to the PGDATA Snapshot Class, if set snapshotOwnerReference SnapshotOwnerReference SnapshotOwnerReference indicates the type of owner reference the snapshot should have online bool Whether the default type of backup with volume snapshots is online/hot ( true , default) or offline/cold ( false ) onlineConfiguration OnlineConfiguration Configuration parameters to control the online/hot backup with volume snapshots","title":"VolumeSnapshotConfiguration"},{"location":"cluster_conf/","text":"Instance pod configuration Projected volumes CloudNativePG supports mounting custom files inside the Postgres pods through .spec.projectedVolumeTemplate . This ability is useful for several Postgres features and extensions that require additional data files. In CloudNativePG, the .spec.projectedVolumeTemplate field is a projected volume template in Kubernetes that allows you to mount arbitrary data under the /projected folder in Postgres pods. This simple example shows how to mount an existing TLS secret (named sample-secret ) as files into Postgres pods. The values for the secret keys tls.crt and tls.key in sample-secret are mounted as files into the paths /projected/certificate/tls.crt and /projected/certificate/tls.key in the Postgres pod. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-projected-volumes spec: instances: 3 projectedVolumeTemplate: sources: - secret: name: sample-secret items: - key: tls.crt path: certificate/tls.crt - key: tls.key path: certificate/tls.key storage: size: 1Gi You can find a complete example that uses a projected volume template to mount the secret and ConfigMap in the cluster-example-projected-volume.yaml deployment manifest. Ephemeral volumes CloudNativePG relies on ephemeral volumes for part of the internal activities. Ephemeral volumes exist for the sole duration of a pod's life, without persisting across pod restarts. Volume Claim Template for Temporary Storage The operator uses by default an emptyDir volume, which can be customized by using the .spec.ephemeralVolumesSizeLimit field . This can be overridden by specifying a volume claim template in the .spec.ephemeralVolumeSource field. In the following example, a 1Gi ephemeral volume is set. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-ephemeral-volume-source spec: instances: 3 ephemeralVolumeSource: volumeClaimTemplate: spec: accessModes: [\"ReadWriteOnce\"] # example storageClassName, replace with one existing in your Kubernetes cluster storageClassName: \"scratch-storage-class\" resources: requests: storage: 1Gi Both .spec.emphemeralVolumeSource and .spec.ephemeralVolumesSizeLimit.temporaryData cannot be specified simultaneously. Volume for shared memory This volume is used as shared memory space for Postgres and as an ephemeral type but stored in memory. You can configure an upper bound on the size using the .spec.ephemeralVolumesSizeLimit.shm field in the cluster spec. Use this field only in case of PostgreSQL running with posix shared memory dynamic allocation . Environment variables You can customize some system behavior using environment variables. One example is the LDAPCONF variable, which can point to a custom LDAP configuration file. Another example is the TZ environment variable, which represents the timezone used by the PostgreSQL container. CloudNativePG allows you to set custom environment variables using the env and the envFrom stanza of the cluster specification. This example defines a PostgreSQL cluster using the Australia/Sydney timezone as the default cluster-level timezone: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 env: - name: TZ value: Australia/Sydney storage: size: 1Gi The envFrom stanza can refer to ConfigMaps or secrets to use their content as environment variables: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 envFrom: - configMapRef: name: config-map-name - secretRef: name: secret-name storage: size: 1Gi The operator doesn't allow setting the following environment variables: POD_NAME NAMESPACE Any environment variable whose name starts with PG . Any change in the env or in the envFrom section triggers a rolling update of the PostgreSQL pods. If the env or the envFrom section refers to a secret or a ConfigMap, the operator doesn't detect any changes in them and doesn't trigger a rollout. The kubelet uses the same behavior with pods, and you must trigger the pod rollout manually.","title":"Instance pod configuration"},{"location":"cluster_conf/#instance-pod-configuration","text":"","title":"Instance pod configuration"},{"location":"cluster_conf/#projected-volumes","text":"CloudNativePG supports mounting custom files inside the Postgres pods through .spec.projectedVolumeTemplate . This ability is useful for several Postgres features and extensions that require additional data files. In CloudNativePG, the .spec.projectedVolumeTemplate field is a projected volume template in Kubernetes that allows you to mount arbitrary data under the /projected folder in Postgres pods. This simple example shows how to mount an existing TLS secret (named sample-secret ) as files into Postgres pods. The values for the secret keys tls.crt and tls.key in sample-secret are mounted as files into the paths /projected/certificate/tls.crt and /projected/certificate/tls.key in the Postgres pod. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-projected-volumes spec: instances: 3 projectedVolumeTemplate: sources: - secret: name: sample-secret items: - key: tls.crt path: certificate/tls.crt - key: tls.key path: certificate/tls.key storage: size: 1Gi You can find a complete example that uses a projected volume template to mount the secret and ConfigMap in the cluster-example-projected-volume.yaml deployment manifest.","title":"Projected volumes"},{"location":"cluster_conf/#ephemeral-volumes","text":"CloudNativePG relies on ephemeral volumes for part of the internal activities. Ephemeral volumes exist for the sole duration of a pod's life, without persisting across pod restarts.","title":"Ephemeral volumes"},{"location":"cluster_conf/#volume-claim-template-for-temporary-storage","text":"The operator uses by default an emptyDir volume, which can be customized by using the .spec.ephemeralVolumesSizeLimit field . This can be overridden by specifying a volume claim template in the .spec.ephemeralVolumeSource field. In the following example, a 1Gi ephemeral volume is set. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-ephemeral-volume-source spec: instances: 3 ephemeralVolumeSource: volumeClaimTemplate: spec: accessModes: [\"ReadWriteOnce\"] # example storageClassName, replace with one existing in your Kubernetes cluster storageClassName: \"scratch-storage-class\" resources: requests: storage: 1Gi Both .spec.emphemeralVolumeSource and .spec.ephemeralVolumesSizeLimit.temporaryData cannot be specified simultaneously.","title":"Volume Claim Template for Temporary Storage"},{"location":"cluster_conf/#volume-for-shared-memory","text":"This volume is used as shared memory space for Postgres and as an ephemeral type but stored in memory. You can configure an upper bound on the size using the .spec.ephemeralVolumesSizeLimit.shm field in the cluster spec. Use this field only in case of PostgreSQL running with posix shared memory dynamic allocation .","title":"Volume for shared memory"},{"location":"cluster_conf/#environment-variables","text":"You can customize some system behavior using environment variables. One example is the LDAPCONF variable, which can point to a custom LDAP configuration file. Another example is the TZ environment variable, which represents the timezone used by the PostgreSQL container. CloudNativePG allows you to set custom environment variables using the env and the envFrom stanza of the cluster specification. This example defines a PostgreSQL cluster using the Australia/Sydney timezone as the default cluster-level timezone: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 env: - name: TZ value: Australia/Sydney storage: size: 1Gi The envFrom stanza can refer to ConfigMaps or secrets to use their content as environment variables: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 envFrom: - configMapRef: name: config-map-name - secretRef: name: secret-name storage: size: 1Gi The operator doesn't allow setting the following environment variables: POD_NAME NAMESPACE Any environment variable whose name starts with PG . Any change in the env or in the envFrom section triggers a rolling update of the PostgreSQL pods. If the env or the envFrom section refers to a secret or a ConfigMap, the operator doesn't detect any changes in them and doesn't trigger a rollout. The kubelet uses the same behavior with pods, and you must trigger the pod rollout manually.","title":"Environment variables"},{"location":"connection_pooling/","text":"Connection pooling CloudNativePG provides native support for connection pooling with PgBouncer , one of the most popular open source connection poolers for PostgreSQL, through the Pooler custom resource definition (CRD). In brief, a pooler in CloudNativePG is a deployment of PgBouncer pods that sits between your applications and a PostgreSQL service, for example, the rw service. It creates a separate, scalable, configurable, and highly available database access layer. Architecture The following diagram highlights how introducing a database access layer based on PgBouncer changes the architecture of CloudNativePG. Instead of directly connecting to the PostgreSQL primary service, applications can connect to the equivalent service for PgBouncer. This ability enables reuse of existing connections for faster performance and better resource management on the PostgreSQL side. Quick start This example helps to show how CloudNativePG implements a PgBouncer pooler: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw pgbouncer: poolMode: session parameters: max_client_conn: \"1000\" default_pool_size: \"10\" Important The pooler name can't be the same as any cluster name in the same namespace. This example creates a Pooler resource called pooler-example-rw that's strictly associated with the Postgres Cluster resource called cluster-example . It points to the primary, identified by the read/write service ( rw , therefore cluster-example-rw ). The Pooler resource must live in the same namespace as the Postgres cluster. It consists of a Kubernetes deployment of 3 pods running the latest stable image of PgBouncer , configured with the session pooling mode and accepting up to 1000 connections each. The default pool size is 10 user/database pairs toward PostgreSQL. Important The Pooler resource sets only the * fallback database in PgBouncer. This setting means that that all parameters in the connection strings passed from the client are relayed to the PostgreSQL server. For details, see \"Section [databases]\" in the PgBouncer documentation . CloudNativePG also creates a secret with the same name as the pooler containing the configuration files used with PgBouncer. API reference For details, see PgBouncerSpec in the API reference. Pooler resource lifecycle Pooler resources aren't cluster-managed resources. You create poolers manually when they're needed. You can also deploy multiple poolers per PostgreSQL cluster. What's important is that the life cycles of the Cluster and the Pooler resources are currently independent. Deleting the cluster doesn't imply the deletion of the pooler, and vice versa. Important Once you know how a pooler works, you have full freedom in terms of possible architectures. You can have clusters without poolers, clusters with a single pooler, or clusters with several poolers, that is, one per application. Important When the operator is upgraded, the pooler pods will undergo a rolling upgrade. This is necessary to ensure that the instance manager within the pooler pods is also upgraded. Security Any PgBouncer pooler is transparently integrated with CloudNativePG support for in-transit encryption by way of TLS connections, both on the client (application) and server (PostgreSQL) side of the pool. Specifically, PgBouncer reuses the certificates of the PostgreSQL server. It also uses TLS client certificate authentication to connect to the PostgreSQL server to run the auth_query for clients' password authentication (see Authentication ). Containers run as the pgbouncer system user, and access to the pgbouncer database is allowed only by way of local connections, through peer authentication. Certificates By default, a PgBouncer pooler uses the same certificates that are used by the cluster. However, if you provide those certificates, the pooler accepts secrets with the following formats: Basic Auth TLS Opaque In the Opaque case, it looks for the following specific keys that need to be used: tls.crt tls.key So you can treat this secret as a TLS secret, and start from there. Authentication Password-based authentication is the only supported method for clients of PgBouncer in CloudNativePG. Internally, the implementation relies on PgBouncer's auth_user and auth_query options. Specifically, the operator: Creates a standard user called cnpg_pooler_pgbouncer in the PostgreSQL server Creates the lookup function in the postgres database and grants execution privileges to the cnpg_pooler_pgbouncer user (PoLA) Issues a TLS certificate for this user Sets cnpg_pooler_pgbouncer as the auth_user Configures PgBouncer to use the TLS certificate to authenticate cnpg_pooler_pgbouncer against the PostgreSQL server Removes all the above when it detects that a cluster doesn't have any pooler associated to it Important If you specify your own secrets, the operator doesn't automatically integrate the pooler. To manually integrate the pooler, if you specified your own secrets, you must run the following queries from inside your cluster. First, you must create the role: CREATE ROLE cnpg_pooler_pgbouncer WITH LOGIN; Then, for each application database, grant the permission for cnpg_pooler_pgbouncer to connect to it: GRANT CONNECT ON DATABASE { database name here } TO cnpg_pooler_pgbouncer; Finally, as a superuser connect in each application database, and then create the authentication function inside each of the application databases: CREATE OR REPLACE FUNCTION public.user_search(uname TEXT) RETURNS TABLE (usename name, passwd text) LANGUAGE sql SECURITY DEFINER AS 'SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1;'; REVOKE ALL ON FUNCTION public.user_search(text) FROM public; GRANT EXECUTE ON FUNCTION public.user_search(text) TO cnpg_pooler_pgbouncer; Important Given that user_search is a SECURITY DEFINER function, you need to create it through a role with SUPERUSER privileges, such as the postgres user. Pod templates You can take advantage of pod templates specification in the template section of a Pooler resource. For details, see PoolerSpec in the API reference. Using templates, you can configure pods as you like, including fine control over affinity and anti-affinity rules for pods and nodes. By default, containers use images from ghcr.io/cloudnative-pg/pgbouncer . This example shows Pooler specifying `PodAntiAffinity``: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw template: metadata: labels: app: pooler spec: containers: [] affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: app operator: In values: - pooler topologyKey: \"kubernetes.io/hostname\" Note Explicitly set .spec.template.spec.containers to [] when not modified, as it's a required field for a PodSpec . If .spec.template.spec.containers isn't set, the Kubernetes api-server returns the following error when trying to apply the manifest: error validating \"pooler.yaml\": error validating data: ValidationError(Pooler.spec.template.spec): missing required field \"containers\" This example sets resources and changes the used image: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw template: metadata: labels: app: pooler spec: containers: - name: pgbouncer image: my-pgbouncer:latest resources: requests: cpu: \"0.1\" memory: 100Mi limits: cpu: \"0.5\" memory: 500Mi Service Template Sometimes, your pooler will require some different labels, annotations, or even change the type of the service, you can achieve that by using the serviceTemplate field: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw serviceTemplate: metadata: labels: app: pooler spec: type: LoadBalancer pgbouncer: poolMode: session parameters: max_client_conn: \"1000\" default_pool_size: \"10\" The operator by default adds a ServicePort with the following data: ports: - name: pgbouncer port: 5432 protocol: TCP targetPort: pgbouncer Warning Specifying a ServicePort with the name pgbouncer or the port 5432 will prevent the default ServicePort from being added. This because ServicePort entries with the same name or port are not allowed on Kubernetes and result in errors. High availability (HA) Because of Kubernetes' deployments, you can configure your pooler to run on a single instance or over multiple pods. The exposed service makes sure that your clients are randomly distributed over the available pods running PgBouncer, which then manages and reuses connections toward the underlying server (if using the rw service) or servers (if using the ro service with multiple replicas). Warning If your infrastructure spans multiple availability zones with high latency across them, be aware of network hops. Consider, for example, the case of your application running in zone 2, connecting to PgBouncer running in zone 3, and pointing to the PostgreSQL primary in zone 1. PgBouncer configuration options The operator manages most of the configuration options for PgBouncer , allowing you to modify only a subset of them. Warning You are responsible for correctly setting the value of each option, as the operator doesn't validate them. These are the PgBouncer options you can customize, with links to the PgBouncer documentation for each parameter. Unless stated otherwise, the default values are the ones directly set by PgBouncer. application_name_add_host autodb_idle_timeout cancel_wait_timeout client_idle_timeout client_login_timeout default_pool_size disable_pqexec dns_max_ttl dns_nxdomain_ttl idle_transaction_timeout ignore_startup_parameters : to be appended to extra_float_digits,options - required by CloudNativePG listen_backlog log_connections log_disconnections log_pooler_errors log_stats : by default disabled ( 0 ), given that statistics are already collected by the Prometheus export as described in the \"Monitoring\" section below max_client_conn max_db_connections max_packet_size max_prepared_statements max_user_connections min_pool_size pkt_buf query_timeout query_wait_timeout reserve_pool_size reserve_pool_timeout sbuf_loopcnt server_check_delay server_check_query server_connect_timeout server_fast_close server_idle_timeout server_lifetime server_login_retry server_reset_query server_reset_query_always server_round_robin server_tls_ciphers server_tls_protocols stats_period suspend_timeout tcp_defer_accept tcp_keepalive tcp_keepcnt tcp_keepidle tcp_keepintvl tcp_user_timeout tcp_socket_buffer track_extra_parameters verbose Customizations of the PgBouncer configuration are written declaratively in the .spec.pgbouncer.parameters map. The operator reacts to the changes in the pooler specification, and every PgBouncer instance reloads the updated configuration without disrupting the service. Warning Every PgBouncer pod has the same configuration, aligned with the parameters in the specification. A mistake in these parameters might disrupt the operability of the whole pooler. The operator doesn't validate the value of any option. Monitoring The PgBouncer implementation of the Pooler comes with a default Prometheus exporter. It makes available several metrics having the cnpg_pgbouncer_ prefix by running: SHOW LISTS (prefix: cnpg_pgbouncer_lists ) SHOW POOLS (prefix: cnpg_pgbouncer_pools ) SHOW STATS (prefix: cnpg_pgbouncer_stats ) Like the CloudNativePG instance, the exporter runs on port 9127 of each pod running PgBouncer and also provides metrics related to the Go runtime (with the prefix go_* ). Info You can inspect the exported metrics on a pod running PgBouncer. For instructions, see How to inspect the exported metrics . Make sure that you use the correct IP and the 9127 port. This example shows the output for cnpg_pgbouncer metrics: # HELP cnpg_pgbouncer_collection_duration_seconds Collection time duration in seconds # TYPE cnpg_pgbouncer_collection_duration_seconds gauge cnpg_pgbouncer_collection_duration_seconds{collector=\"Collect.up\"} 0.002338805 # HELP cnpg_pgbouncer_collection_errors_total Total errors occurred accessing PostgreSQL for metrics. # TYPE cnpg_pgbouncer_collection_errors_total counter cnpg_pgbouncer_collection_errors_total{collector=\"sql: Scan error on column index 16, name \\\"load_balance_hosts\\\": converting NULL to int is unsupported\"} 5 # HELP cnpg_pgbouncer_collections_total Total number of times PostgreSQL was accessed for metrics. # TYPE cnpg_pgbouncer_collections_total counter cnpg_pgbouncer_collections_total 5 # HELP cnpg_pgbouncer_last_collection_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_pgbouncer_last_collection_error gauge cnpg_pgbouncer_last_collection_error 0 # HELP cnpg_pgbouncer_lists_databases Count of databases. # TYPE cnpg_pgbouncer_lists_databases gauge cnpg_pgbouncer_lists_databases 1 # HELP cnpg_pgbouncer_lists_dns_names Count of DNS names in the cache. # TYPE cnpg_pgbouncer_lists_dns_names gauge cnpg_pgbouncer_lists_dns_names 0 # HELP cnpg_pgbouncer_lists_dns_pending Not used. # TYPE cnpg_pgbouncer_lists_dns_pending gauge cnpg_pgbouncer_lists_dns_pending 0 # HELP cnpg_pgbouncer_lists_dns_queries Count of in-flight DNS queries. # TYPE cnpg_pgbouncer_lists_dns_queries gauge cnpg_pgbouncer_lists_dns_queries 0 # HELP cnpg_pgbouncer_lists_dns_zones Count of DNS zones in the cache. # TYPE cnpg_pgbouncer_lists_dns_zones gauge cnpg_pgbouncer_lists_dns_zones 0 # HELP cnpg_pgbouncer_lists_free_clients Count of free clients. # TYPE cnpg_pgbouncer_lists_free_clients gauge cnpg_pgbouncer_lists_free_clients 49 # HELP cnpg_pgbouncer_lists_free_servers Count of free servers. # TYPE cnpg_pgbouncer_lists_free_servers gauge cnpg_pgbouncer_lists_free_servers 0 # HELP cnpg_pgbouncer_lists_login_clients Count of clients in login state. # TYPE cnpg_pgbouncer_lists_login_clients gauge cnpg_pgbouncer_lists_login_clients 0 # HELP cnpg_pgbouncer_lists_pools Count of pools. # TYPE cnpg_pgbouncer_lists_pools gauge cnpg_pgbouncer_lists_pools 1 # HELP cnpg_pgbouncer_lists_used_clients Count of used clients. # TYPE cnpg_pgbouncer_lists_used_clients gauge cnpg_pgbouncer_lists_used_clients 1 # HELP cnpg_pgbouncer_lists_used_servers Count of used servers. # TYPE cnpg_pgbouncer_lists_used_servers gauge cnpg_pgbouncer_lists_used_servers 0 # HELP cnpg_pgbouncer_lists_users Count of users. # TYPE cnpg_pgbouncer_lists_users gauge cnpg_pgbouncer_lists_users 2 # HELP cnpg_pgbouncer_pools_cl_active Client connections that are linked to server connection and can process queries. # TYPE cnpg_pgbouncer_pools_cl_active gauge cnpg_pgbouncer_pools_cl_active{database=\"pgbouncer\",user=\"pgbouncer\"} 1 # HELP cnpg_pgbouncer_pools_cl_active_cancel_req Client connections that have forwarded query cancellations to the server and are waiting for the server response. # TYPE cnpg_pgbouncer_pools_cl_active_cancel_req gauge cnpg_pgbouncer_pools_cl_active_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_cancel_req Client connections that have not forwarded query cancellations to the server yet. # TYPE cnpg_pgbouncer_pools_cl_cancel_req gauge cnpg_pgbouncer_pools_cl_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_waiting Client connections that have sent queries but have not yet got a server connection. # TYPE cnpg_pgbouncer_pools_cl_waiting gauge cnpg_pgbouncer_pools_cl_waiting{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_waiting_cancel_req Client connections that have not forwarded query cancellations to the server yet. # TYPE cnpg_pgbouncer_pools_cl_waiting_cancel_req gauge cnpg_pgbouncer_pools_cl_waiting_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_load_balance_hosts Number of hosts not load balancing between hosts # TYPE cnpg_pgbouncer_pools_load_balance_hosts gauge cnpg_pgbouncer_pools_load_balance_hosts{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_maxwait How long the first (oldest) client in the queue has waited, in seconds. If this starts increasing, then the current pool of servers does not handle requests quickly enough. The reason may be either an overloaded server or just too small of a pool_size setting. # TYPE cnpg_pgbouncer_pools_maxwait gauge cnpg_pgbouncer_pools_maxwait{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_maxwait_us Microsecond part of the maximum waiting time. # TYPE cnpg_pgbouncer_pools_maxwait_us gauge cnpg_pgbouncer_pools_maxwait_us{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_pool_mode The pooling mode in use. 1 for session, 2 for transaction, 3 for statement, -1 if unknown # TYPE cnpg_pgbouncer_pools_pool_mode gauge cnpg_pgbouncer_pools_pool_mode{database=\"pgbouncer\",user=\"pgbouncer\"} 3 # HELP cnpg_pgbouncer_pools_sv_active Server connections that are linked to a client. # TYPE cnpg_pgbouncer_pools_sv_active gauge cnpg_pgbouncer_pools_sv_active{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_active_cancel Server connections that are currently forwarding a cancel request # TYPE cnpg_pgbouncer_pools_sv_active_cancel gauge cnpg_pgbouncer_pools_sv_active_cancel{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_idle Server connections that are unused and immediately usable for client queries. # TYPE cnpg_pgbouncer_pools_sv_idle gauge cnpg_pgbouncer_pools_sv_idle{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_login Server connections currently in the process of logging in. # TYPE cnpg_pgbouncer_pools_sv_login gauge cnpg_pgbouncer_pools_sv_login{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_tested Server connections that are currently running either server_reset_query or server_check_query. # TYPE cnpg_pgbouncer_pools_sv_tested gauge cnpg_pgbouncer_pools_sv_tested{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_used Server connections that have been idle for more than server_check_delay, so they need server_check_query to run on them before they can be used again. # TYPE cnpg_pgbouncer_pools_sv_used gauge cnpg_pgbouncer_pools_sv_used{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_wait_cancels Servers that normally could become idle, but are waiting to do so until all in-flight cancel requests have completed that were sent to cancel a query on this server. # TYPE cnpg_pgbouncer_pools_sv_wait_cancels gauge cnpg_pgbouncer_pools_sv_wait_cancels{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_bind_count Average number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer. # TYPE cnpg_pgbouncer_stats_avg_bind_count gauge cnpg_pgbouncer_stats_avg_bind_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_client_parse_count Average number of prepared statements created by clients. # TYPE cnpg_pgbouncer_stats_avg_client_parse_count gauge cnpg_pgbouncer_stats_avg_client_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_query_count Average queries per second in last stat period. # TYPE cnpg_pgbouncer_stats_avg_query_count gauge cnpg_pgbouncer_stats_avg_query_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_query_time Average query duration, in microseconds. # TYPE cnpg_pgbouncer_stats_avg_query_time gauge cnpg_pgbouncer_stats_avg_query_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_recv Average received (from clients) bytes per second. # TYPE cnpg_pgbouncer_stats_avg_recv gauge cnpg_pgbouncer_stats_avg_recv{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_sent Average sent (to clients) bytes per second. # TYPE cnpg_pgbouncer_stats_avg_sent gauge cnpg_pgbouncer_stats_avg_sent{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_server_parse_count Average number of prepared statements created by pgbouncer on a server. # TYPE cnpg_pgbouncer_stats_avg_server_parse_count gauge cnpg_pgbouncer_stats_avg_server_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_wait_time Time spent by clients waiting for a server, in microseconds (average per second). # TYPE cnpg_pgbouncer_stats_avg_wait_time gauge cnpg_pgbouncer_stats_avg_wait_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_xact_count Average transactions per second in last stat period. # TYPE cnpg_pgbouncer_stats_avg_xact_count gauge cnpg_pgbouncer_stats_avg_xact_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_xact_time Average transaction duration, in microseconds. # TYPE cnpg_pgbouncer_stats_avg_xact_time gauge cnpg_pgbouncer_stats_avg_xact_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_bind_count Total number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer # TYPE cnpg_pgbouncer_stats_total_bind_count gauge cnpg_pgbouncer_stats_total_bind_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_client_parse_count Total number of prepared statements created by clients. # TYPE cnpg_pgbouncer_stats_total_client_parse_count gauge cnpg_pgbouncer_stats_total_client_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_query_count Total number of SQL queries pooled by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_query_count gauge cnpg_pgbouncer_stats_total_query_count{database=\"pgbouncer\"} 15 # HELP cnpg_pgbouncer_stats_total_query_time Total number of microseconds spent by pgbouncer when actively connected to PostgreSQL, executing queries. # TYPE cnpg_pgbouncer_stats_total_query_time gauge cnpg_pgbouncer_stats_total_query_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_received Total volume in bytes of network traffic received by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_received gauge cnpg_pgbouncer_stats_total_received{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_sent Total volume in bytes of network traffic sent by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_sent gauge cnpg_pgbouncer_stats_total_sent{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_server_parse_count Total number of prepared statements created by pgbouncer on a server. # TYPE cnpg_pgbouncer_stats_total_server_parse_count gauge cnpg_pgbouncer_stats_total_server_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_wait_time Time spent by clients waiting for a server, in microseconds. # TYPE cnpg_pgbouncer_stats_total_wait_time gauge cnpg_pgbouncer_stats_total_wait_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_xact_count Total number of SQL transactions pooled by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_xact_count gauge cnpg_pgbouncer_stats_total_xact_count{database=\"pgbouncer\"} 15 # HELP cnpg_pgbouncer_stats_total_xact_time Total number of microseconds spent by pgbouncer when connected to PostgreSQL in a transaction, either idle in transaction or executing queries. # TYPE cnpg_pgbouncer_stats_total_xact_time gauge cnpg_pgbouncer_stats_total_xact_time{database=\"pgbouncer\"} 0 Info For a better understanding of the metrics please refer to the PgBouncer documentation. As for clusters, a specific pooler can be monitored using the Prometheus operator's resource PodMonitor . A PodMonitor correctly pointing to a pooler can be created by the operator by setting .spec.monitoring.enablePodMonitor to true in the Pooler resource. The default is false . Important Any change to PodMonitor created automatically is overridden by the operator at the next reconciliation cycle. If you need to customize it, you can do so as shown in the following example. To deploy a PodMonitor for a specific pooler manually, you can define it as follows and change it as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: <POOLER_NAME> spec: selector: matchLabels: cnpg.io/poolerName: <POOLER_NAME> podMetricsEndpoints: - port: metrics Logging Logs are directly sent to standard output, in JSON format, like in the following example: { \"level\": \"info\", \"ts\": SECONDS.MICROSECONDS, \"msg\": \"record\", \"pipe\": \"stderr\", \"record\": { \"timestamp\": \"YYYY-MM-DD HH:MM:SS.MS UTC\", \"pid\": \"<PID>\", \"level\": \"LOG\", \"msg\": \"kernel file descriptor limit: 1048576 (hard: 1048576); max_client_conn: 100, max expected fd use: 112\" } } Pausing connections The Pooler specification allows you to take advantage of PgBouncer's PAUSE and RESUME commands, using only declarative configuration. You can ado this using the paused option, which by default is set to false . When set to true , the operator internally invokes the PAUSE command in PgBouncer, which: Closes all active connections toward the PostgreSQL server, after waiting for the queries to complete Pauses any new connection coming from the client When the paused option is reset to false , the operator invokes the RESUME command in PgBouncer, reopening the taps toward the PostgreSQL service defined in the Pooler resource. PAUSE For more information, see PAUSE in the PgBouncer documentation . Important In future versions, the switchover operation will be fully integrated with the PgBouncer pooler and take advantage of the PAUSE / RESUME features to reduce the perceived downtime by client applications. Currently, you can achieve the same results by setting the paused attribute to true , issuing the switchover command through the cnpg plugin , and then restoring the paused attribute to false . Limitations Single PostgreSQL cluster The current implementation of the pooler is designed to work as part of a specific CloudNativePG cluster (a service). It isn't currently possible to create a pooler that spans multiple clusters. Controlled configurability CloudNativePG transparently manages several configuration options that are used for the PgBouncer layer to communicate with PostgreSQL. Such options aren't configurable from outside and include TLS certificates, authentication settings, the databases section, and the users section. Also, considering the specific use case for the single PostgreSQL cluster, the adopted criteria is to explicitly list the options that can be configured by users. Note The adopted solution likely addresses the majority of use cases. It leaves room for the future implementation of a separate operator for PgBouncer to complete the gamma with more advanced and customized scenarios.","title":"Connection pooling"},{"location":"connection_pooling/#connection-pooling","text":"CloudNativePG provides native support for connection pooling with PgBouncer , one of the most popular open source connection poolers for PostgreSQL, through the Pooler custom resource definition (CRD). In brief, a pooler in CloudNativePG is a deployment of PgBouncer pods that sits between your applications and a PostgreSQL service, for example, the rw service. It creates a separate, scalable, configurable, and highly available database access layer.","title":"Connection pooling"},{"location":"connection_pooling/#architecture","text":"The following diagram highlights how introducing a database access layer based on PgBouncer changes the architecture of CloudNativePG. Instead of directly connecting to the PostgreSQL primary service, applications can connect to the equivalent service for PgBouncer. This ability enables reuse of existing connections for faster performance and better resource management on the PostgreSQL side.","title":"Architecture"},{"location":"connection_pooling/#quick-start","text":"This example helps to show how CloudNativePG implements a PgBouncer pooler: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw pgbouncer: poolMode: session parameters: max_client_conn: \"1000\" default_pool_size: \"10\" Important The pooler name can't be the same as any cluster name in the same namespace. This example creates a Pooler resource called pooler-example-rw that's strictly associated with the Postgres Cluster resource called cluster-example . It points to the primary, identified by the read/write service ( rw , therefore cluster-example-rw ). The Pooler resource must live in the same namespace as the Postgres cluster. It consists of a Kubernetes deployment of 3 pods running the latest stable image of PgBouncer , configured with the session pooling mode and accepting up to 1000 connections each. The default pool size is 10 user/database pairs toward PostgreSQL. Important The Pooler resource sets only the * fallback database in PgBouncer. This setting means that that all parameters in the connection strings passed from the client are relayed to the PostgreSQL server. For details, see \"Section [databases]\" in the PgBouncer documentation . CloudNativePG also creates a secret with the same name as the pooler containing the configuration files used with PgBouncer. API reference For details, see PgBouncerSpec in the API reference.","title":"Quick start"},{"location":"connection_pooling/#pooler-resource-lifecycle","text":"Pooler resources aren't cluster-managed resources. You create poolers manually when they're needed. You can also deploy multiple poolers per PostgreSQL cluster. What's important is that the life cycles of the Cluster and the Pooler resources are currently independent. Deleting the cluster doesn't imply the deletion of the pooler, and vice versa. Important Once you know how a pooler works, you have full freedom in terms of possible architectures. You can have clusters without poolers, clusters with a single pooler, or clusters with several poolers, that is, one per application. Important When the operator is upgraded, the pooler pods will undergo a rolling upgrade. This is necessary to ensure that the instance manager within the pooler pods is also upgraded.","title":"Pooler resource lifecycle"},{"location":"connection_pooling/#security","text":"Any PgBouncer pooler is transparently integrated with CloudNativePG support for in-transit encryption by way of TLS connections, both on the client (application) and server (PostgreSQL) side of the pool. Specifically, PgBouncer reuses the certificates of the PostgreSQL server. It also uses TLS client certificate authentication to connect to the PostgreSQL server to run the auth_query for clients' password authentication (see Authentication ). Containers run as the pgbouncer system user, and access to the pgbouncer database is allowed only by way of local connections, through peer authentication.","title":"Security"},{"location":"connection_pooling/#certificates","text":"By default, a PgBouncer pooler uses the same certificates that are used by the cluster. However, if you provide those certificates, the pooler accepts secrets with the following formats: Basic Auth TLS Opaque In the Opaque case, it looks for the following specific keys that need to be used: tls.crt tls.key So you can treat this secret as a TLS secret, and start from there.","title":"Certificates"},{"location":"connection_pooling/#authentication","text":"Password-based authentication is the only supported method for clients of PgBouncer in CloudNativePG. Internally, the implementation relies on PgBouncer's auth_user and auth_query options. Specifically, the operator: Creates a standard user called cnpg_pooler_pgbouncer in the PostgreSQL server Creates the lookup function in the postgres database and grants execution privileges to the cnpg_pooler_pgbouncer user (PoLA) Issues a TLS certificate for this user Sets cnpg_pooler_pgbouncer as the auth_user Configures PgBouncer to use the TLS certificate to authenticate cnpg_pooler_pgbouncer against the PostgreSQL server Removes all the above when it detects that a cluster doesn't have any pooler associated to it Important If you specify your own secrets, the operator doesn't automatically integrate the pooler. To manually integrate the pooler, if you specified your own secrets, you must run the following queries from inside your cluster. First, you must create the role: CREATE ROLE cnpg_pooler_pgbouncer WITH LOGIN; Then, for each application database, grant the permission for cnpg_pooler_pgbouncer to connect to it: GRANT CONNECT ON DATABASE { database name here } TO cnpg_pooler_pgbouncer; Finally, as a superuser connect in each application database, and then create the authentication function inside each of the application databases: CREATE OR REPLACE FUNCTION public.user_search(uname TEXT) RETURNS TABLE (usename name, passwd text) LANGUAGE sql SECURITY DEFINER AS 'SELECT usename, passwd FROM pg_catalog.pg_shadow WHERE usename=$1;'; REVOKE ALL ON FUNCTION public.user_search(text) FROM public; GRANT EXECUTE ON FUNCTION public.user_search(text) TO cnpg_pooler_pgbouncer; Important Given that user_search is a SECURITY DEFINER function, you need to create it through a role with SUPERUSER privileges, such as the postgres user.","title":"Authentication"},{"location":"connection_pooling/#pod-templates","text":"You can take advantage of pod templates specification in the template section of a Pooler resource. For details, see PoolerSpec in the API reference. Using templates, you can configure pods as you like, including fine control over affinity and anti-affinity rules for pods and nodes. By default, containers use images from ghcr.io/cloudnative-pg/pgbouncer . This example shows Pooler specifying `PodAntiAffinity``: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw template: metadata: labels: app: pooler spec: containers: [] affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: app operator: In values: - pooler topologyKey: \"kubernetes.io/hostname\" Note Explicitly set .spec.template.spec.containers to [] when not modified, as it's a required field for a PodSpec . If .spec.template.spec.containers isn't set, the Kubernetes api-server returns the following error when trying to apply the manifest: error validating \"pooler.yaml\": error validating data: ValidationError(Pooler.spec.template.spec): missing required field \"containers\" This example sets resources and changes the used image: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw template: metadata: labels: app: pooler spec: containers: - name: pgbouncer image: my-pgbouncer:latest resources: requests: cpu: \"0.1\" memory: 100Mi limits: cpu: \"0.5\" memory: 500Mi","title":"Pod templates"},{"location":"connection_pooling/#service-template","text":"Sometimes, your pooler will require some different labels, annotations, or even change the type of the service, you can achieve that by using the serviceTemplate field: apiVersion: postgresql.cnpg.io/v1 kind: Pooler metadata: name: pooler-example-rw spec: cluster: name: cluster-example instances: 3 type: rw serviceTemplate: metadata: labels: app: pooler spec: type: LoadBalancer pgbouncer: poolMode: session parameters: max_client_conn: \"1000\" default_pool_size: \"10\" The operator by default adds a ServicePort with the following data: ports: - name: pgbouncer port: 5432 protocol: TCP targetPort: pgbouncer Warning Specifying a ServicePort with the name pgbouncer or the port 5432 will prevent the default ServicePort from being added. This because ServicePort entries with the same name or port are not allowed on Kubernetes and result in errors.","title":"Service Template"},{"location":"connection_pooling/#high-availability-ha","text":"Because of Kubernetes' deployments, you can configure your pooler to run on a single instance or over multiple pods. The exposed service makes sure that your clients are randomly distributed over the available pods running PgBouncer, which then manages and reuses connections toward the underlying server (if using the rw service) or servers (if using the ro service with multiple replicas). Warning If your infrastructure spans multiple availability zones with high latency across them, be aware of network hops. Consider, for example, the case of your application running in zone 2, connecting to PgBouncer running in zone 3, and pointing to the PostgreSQL primary in zone 1.","title":"High availability (HA)"},{"location":"connection_pooling/#pgbouncer-configuration-options","text":"The operator manages most of the configuration options for PgBouncer , allowing you to modify only a subset of them. Warning You are responsible for correctly setting the value of each option, as the operator doesn't validate them. These are the PgBouncer options you can customize, with links to the PgBouncer documentation for each parameter. Unless stated otherwise, the default values are the ones directly set by PgBouncer. application_name_add_host autodb_idle_timeout cancel_wait_timeout client_idle_timeout client_login_timeout default_pool_size disable_pqexec dns_max_ttl dns_nxdomain_ttl idle_transaction_timeout ignore_startup_parameters : to be appended to extra_float_digits,options - required by CloudNativePG listen_backlog log_connections log_disconnections log_pooler_errors log_stats : by default disabled ( 0 ), given that statistics are already collected by the Prometheus export as described in the \"Monitoring\" section below max_client_conn max_db_connections max_packet_size max_prepared_statements max_user_connections min_pool_size pkt_buf query_timeout query_wait_timeout reserve_pool_size reserve_pool_timeout sbuf_loopcnt server_check_delay server_check_query server_connect_timeout server_fast_close server_idle_timeout server_lifetime server_login_retry server_reset_query server_reset_query_always server_round_robin server_tls_ciphers server_tls_protocols stats_period suspend_timeout tcp_defer_accept tcp_keepalive tcp_keepcnt tcp_keepidle tcp_keepintvl tcp_user_timeout tcp_socket_buffer track_extra_parameters verbose Customizations of the PgBouncer configuration are written declaratively in the .spec.pgbouncer.parameters map. The operator reacts to the changes in the pooler specification, and every PgBouncer instance reloads the updated configuration without disrupting the service. Warning Every PgBouncer pod has the same configuration, aligned with the parameters in the specification. A mistake in these parameters might disrupt the operability of the whole pooler. The operator doesn't validate the value of any option.","title":"PgBouncer configuration options"},{"location":"connection_pooling/#monitoring","text":"The PgBouncer implementation of the Pooler comes with a default Prometheus exporter. It makes available several metrics having the cnpg_pgbouncer_ prefix by running: SHOW LISTS (prefix: cnpg_pgbouncer_lists ) SHOW POOLS (prefix: cnpg_pgbouncer_pools ) SHOW STATS (prefix: cnpg_pgbouncer_stats ) Like the CloudNativePG instance, the exporter runs on port 9127 of each pod running PgBouncer and also provides metrics related to the Go runtime (with the prefix go_* ). Info You can inspect the exported metrics on a pod running PgBouncer. For instructions, see How to inspect the exported metrics . Make sure that you use the correct IP and the 9127 port. This example shows the output for cnpg_pgbouncer metrics: # HELP cnpg_pgbouncer_collection_duration_seconds Collection time duration in seconds # TYPE cnpg_pgbouncer_collection_duration_seconds gauge cnpg_pgbouncer_collection_duration_seconds{collector=\"Collect.up\"} 0.002338805 # HELP cnpg_pgbouncer_collection_errors_total Total errors occurred accessing PostgreSQL for metrics. # TYPE cnpg_pgbouncer_collection_errors_total counter cnpg_pgbouncer_collection_errors_total{collector=\"sql: Scan error on column index 16, name \\\"load_balance_hosts\\\": converting NULL to int is unsupported\"} 5 # HELP cnpg_pgbouncer_collections_total Total number of times PostgreSQL was accessed for metrics. # TYPE cnpg_pgbouncer_collections_total counter cnpg_pgbouncer_collections_total 5 # HELP cnpg_pgbouncer_last_collection_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_pgbouncer_last_collection_error gauge cnpg_pgbouncer_last_collection_error 0 # HELP cnpg_pgbouncer_lists_databases Count of databases. # TYPE cnpg_pgbouncer_lists_databases gauge cnpg_pgbouncer_lists_databases 1 # HELP cnpg_pgbouncer_lists_dns_names Count of DNS names in the cache. # TYPE cnpg_pgbouncer_lists_dns_names gauge cnpg_pgbouncer_lists_dns_names 0 # HELP cnpg_pgbouncer_lists_dns_pending Not used. # TYPE cnpg_pgbouncer_lists_dns_pending gauge cnpg_pgbouncer_lists_dns_pending 0 # HELP cnpg_pgbouncer_lists_dns_queries Count of in-flight DNS queries. # TYPE cnpg_pgbouncer_lists_dns_queries gauge cnpg_pgbouncer_lists_dns_queries 0 # HELP cnpg_pgbouncer_lists_dns_zones Count of DNS zones in the cache. # TYPE cnpg_pgbouncer_lists_dns_zones gauge cnpg_pgbouncer_lists_dns_zones 0 # HELP cnpg_pgbouncer_lists_free_clients Count of free clients. # TYPE cnpg_pgbouncer_lists_free_clients gauge cnpg_pgbouncer_lists_free_clients 49 # HELP cnpg_pgbouncer_lists_free_servers Count of free servers. # TYPE cnpg_pgbouncer_lists_free_servers gauge cnpg_pgbouncer_lists_free_servers 0 # HELP cnpg_pgbouncer_lists_login_clients Count of clients in login state. # TYPE cnpg_pgbouncer_lists_login_clients gauge cnpg_pgbouncer_lists_login_clients 0 # HELP cnpg_pgbouncer_lists_pools Count of pools. # TYPE cnpg_pgbouncer_lists_pools gauge cnpg_pgbouncer_lists_pools 1 # HELP cnpg_pgbouncer_lists_used_clients Count of used clients. # TYPE cnpg_pgbouncer_lists_used_clients gauge cnpg_pgbouncer_lists_used_clients 1 # HELP cnpg_pgbouncer_lists_used_servers Count of used servers. # TYPE cnpg_pgbouncer_lists_used_servers gauge cnpg_pgbouncer_lists_used_servers 0 # HELP cnpg_pgbouncer_lists_users Count of users. # TYPE cnpg_pgbouncer_lists_users gauge cnpg_pgbouncer_lists_users 2 # HELP cnpg_pgbouncer_pools_cl_active Client connections that are linked to server connection and can process queries. # TYPE cnpg_pgbouncer_pools_cl_active gauge cnpg_pgbouncer_pools_cl_active{database=\"pgbouncer\",user=\"pgbouncer\"} 1 # HELP cnpg_pgbouncer_pools_cl_active_cancel_req Client connections that have forwarded query cancellations to the server and are waiting for the server response. # TYPE cnpg_pgbouncer_pools_cl_active_cancel_req gauge cnpg_pgbouncer_pools_cl_active_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_cancel_req Client connections that have not forwarded query cancellations to the server yet. # TYPE cnpg_pgbouncer_pools_cl_cancel_req gauge cnpg_pgbouncer_pools_cl_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_waiting Client connections that have sent queries but have not yet got a server connection. # TYPE cnpg_pgbouncer_pools_cl_waiting gauge cnpg_pgbouncer_pools_cl_waiting{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_cl_waiting_cancel_req Client connections that have not forwarded query cancellations to the server yet. # TYPE cnpg_pgbouncer_pools_cl_waiting_cancel_req gauge cnpg_pgbouncer_pools_cl_waiting_cancel_req{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_load_balance_hosts Number of hosts not load balancing between hosts # TYPE cnpg_pgbouncer_pools_load_balance_hosts gauge cnpg_pgbouncer_pools_load_balance_hosts{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_maxwait How long the first (oldest) client in the queue has waited, in seconds. If this starts increasing, then the current pool of servers does not handle requests quickly enough. The reason may be either an overloaded server or just too small of a pool_size setting. # TYPE cnpg_pgbouncer_pools_maxwait gauge cnpg_pgbouncer_pools_maxwait{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_maxwait_us Microsecond part of the maximum waiting time. # TYPE cnpg_pgbouncer_pools_maxwait_us gauge cnpg_pgbouncer_pools_maxwait_us{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_pool_mode The pooling mode in use. 1 for session, 2 for transaction, 3 for statement, -1 if unknown # TYPE cnpg_pgbouncer_pools_pool_mode gauge cnpg_pgbouncer_pools_pool_mode{database=\"pgbouncer\",user=\"pgbouncer\"} 3 # HELP cnpg_pgbouncer_pools_sv_active Server connections that are linked to a client. # TYPE cnpg_pgbouncer_pools_sv_active gauge cnpg_pgbouncer_pools_sv_active{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_active_cancel Server connections that are currently forwarding a cancel request # TYPE cnpg_pgbouncer_pools_sv_active_cancel gauge cnpg_pgbouncer_pools_sv_active_cancel{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_idle Server connections that are unused and immediately usable for client queries. # TYPE cnpg_pgbouncer_pools_sv_idle gauge cnpg_pgbouncer_pools_sv_idle{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_login Server connections currently in the process of logging in. # TYPE cnpg_pgbouncer_pools_sv_login gauge cnpg_pgbouncer_pools_sv_login{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_tested Server connections that are currently running either server_reset_query or server_check_query. # TYPE cnpg_pgbouncer_pools_sv_tested gauge cnpg_pgbouncer_pools_sv_tested{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_used Server connections that have been idle for more than server_check_delay, so they need server_check_query to run on them before they can be used again. # TYPE cnpg_pgbouncer_pools_sv_used gauge cnpg_pgbouncer_pools_sv_used{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_pools_sv_wait_cancels Servers that normally could become idle, but are waiting to do so until all in-flight cancel requests have completed that were sent to cancel a query on this server. # TYPE cnpg_pgbouncer_pools_sv_wait_cancels gauge cnpg_pgbouncer_pools_sv_wait_cancels{database=\"pgbouncer\",user=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_bind_count Average number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer. # TYPE cnpg_pgbouncer_stats_avg_bind_count gauge cnpg_pgbouncer_stats_avg_bind_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_client_parse_count Average number of prepared statements created by clients. # TYPE cnpg_pgbouncer_stats_avg_client_parse_count gauge cnpg_pgbouncer_stats_avg_client_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_query_count Average queries per second in last stat period. # TYPE cnpg_pgbouncer_stats_avg_query_count gauge cnpg_pgbouncer_stats_avg_query_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_query_time Average query duration, in microseconds. # TYPE cnpg_pgbouncer_stats_avg_query_time gauge cnpg_pgbouncer_stats_avg_query_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_recv Average received (from clients) bytes per second. # TYPE cnpg_pgbouncer_stats_avg_recv gauge cnpg_pgbouncer_stats_avg_recv{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_sent Average sent (to clients) bytes per second. # TYPE cnpg_pgbouncer_stats_avg_sent gauge cnpg_pgbouncer_stats_avg_sent{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_server_parse_count Average number of prepared statements created by pgbouncer on a server. # TYPE cnpg_pgbouncer_stats_avg_server_parse_count gauge cnpg_pgbouncer_stats_avg_server_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_wait_time Time spent by clients waiting for a server, in microseconds (average per second). # TYPE cnpg_pgbouncer_stats_avg_wait_time gauge cnpg_pgbouncer_stats_avg_wait_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_xact_count Average transactions per second in last stat period. # TYPE cnpg_pgbouncer_stats_avg_xact_count gauge cnpg_pgbouncer_stats_avg_xact_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_avg_xact_time Average transaction duration, in microseconds. # TYPE cnpg_pgbouncer_stats_avg_xact_time gauge cnpg_pgbouncer_stats_avg_xact_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_bind_count Total number of prepared statements readied for execution by clients and forwarded to PostgreSQL by pgbouncer # TYPE cnpg_pgbouncer_stats_total_bind_count gauge cnpg_pgbouncer_stats_total_bind_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_client_parse_count Total number of prepared statements created by clients. # TYPE cnpg_pgbouncer_stats_total_client_parse_count gauge cnpg_pgbouncer_stats_total_client_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_query_count Total number of SQL queries pooled by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_query_count gauge cnpg_pgbouncer_stats_total_query_count{database=\"pgbouncer\"} 15 # HELP cnpg_pgbouncer_stats_total_query_time Total number of microseconds spent by pgbouncer when actively connected to PostgreSQL, executing queries. # TYPE cnpg_pgbouncer_stats_total_query_time gauge cnpg_pgbouncer_stats_total_query_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_received Total volume in bytes of network traffic received by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_received gauge cnpg_pgbouncer_stats_total_received{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_sent Total volume in bytes of network traffic sent by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_sent gauge cnpg_pgbouncer_stats_total_sent{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_server_parse_count Total number of prepared statements created by pgbouncer on a server. # TYPE cnpg_pgbouncer_stats_total_server_parse_count gauge cnpg_pgbouncer_stats_total_server_parse_count{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_wait_time Time spent by clients waiting for a server, in microseconds. # TYPE cnpg_pgbouncer_stats_total_wait_time gauge cnpg_pgbouncer_stats_total_wait_time{database=\"pgbouncer\"} 0 # HELP cnpg_pgbouncer_stats_total_xact_count Total number of SQL transactions pooled by pgbouncer. # TYPE cnpg_pgbouncer_stats_total_xact_count gauge cnpg_pgbouncer_stats_total_xact_count{database=\"pgbouncer\"} 15 # HELP cnpg_pgbouncer_stats_total_xact_time Total number of microseconds spent by pgbouncer when connected to PostgreSQL in a transaction, either idle in transaction or executing queries. # TYPE cnpg_pgbouncer_stats_total_xact_time gauge cnpg_pgbouncer_stats_total_xact_time{database=\"pgbouncer\"} 0 Info For a better understanding of the metrics please refer to the PgBouncer documentation. As for clusters, a specific pooler can be monitored using the Prometheus operator's resource PodMonitor . A PodMonitor correctly pointing to a pooler can be created by the operator by setting .spec.monitoring.enablePodMonitor to true in the Pooler resource. The default is false . Important Any change to PodMonitor created automatically is overridden by the operator at the next reconciliation cycle. If you need to customize it, you can do so as shown in the following example. To deploy a PodMonitor for a specific pooler manually, you can define it as follows and change it as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: <POOLER_NAME> spec: selector: matchLabels: cnpg.io/poolerName: <POOLER_NAME> podMetricsEndpoints: - port: metrics","title":"Monitoring"},{"location":"connection_pooling/#logging","text":"Logs are directly sent to standard output, in JSON format, like in the following example: { \"level\": \"info\", \"ts\": SECONDS.MICROSECONDS, \"msg\": \"record\", \"pipe\": \"stderr\", \"record\": { \"timestamp\": \"YYYY-MM-DD HH:MM:SS.MS UTC\", \"pid\": \"<PID>\", \"level\": \"LOG\", \"msg\": \"kernel file descriptor limit: 1048576 (hard: 1048576); max_client_conn: 100, max expected fd use: 112\" } }","title":"Logging"},{"location":"connection_pooling/#pausing-connections","text":"The Pooler specification allows you to take advantage of PgBouncer's PAUSE and RESUME commands, using only declarative configuration. You can ado this using the paused option, which by default is set to false . When set to true , the operator internally invokes the PAUSE command in PgBouncer, which: Closes all active connections toward the PostgreSQL server, after waiting for the queries to complete Pauses any new connection coming from the client When the paused option is reset to false , the operator invokes the RESUME command in PgBouncer, reopening the taps toward the PostgreSQL service defined in the Pooler resource. PAUSE For more information, see PAUSE in the PgBouncer documentation . Important In future versions, the switchover operation will be fully integrated with the PgBouncer pooler and take advantage of the PAUSE / RESUME features to reduce the perceived downtime by client applications. Currently, you can achieve the same results by setting the paused attribute to true , issuing the switchover command through the cnpg plugin , and then restoring the paused attribute to false .","title":"Pausing connections"},{"location":"connection_pooling/#limitations","text":"","title":"Limitations"},{"location":"connection_pooling/#single-postgresql-cluster","text":"The current implementation of the pooler is designed to work as part of a specific CloudNativePG cluster (a service). It isn't currently possible to create a pooler that spans multiple clusters.","title":"Single PostgreSQL cluster"},{"location":"connection_pooling/#controlled-configurability","text":"CloudNativePG transparently manages several configuration options that are used for the PgBouncer layer to communicate with PostgreSQL. Such options aren't configurable from outside and include TLS certificates, authentication settings, the databases section, and the users section. Also, considering the specific use case for the single PostgreSQL cluster, the adopted criteria is to explicitly list the options that can be configured by users. Note The adopted solution likely addresses the majority of use cases. It leaves room for the future implementation of a separate operator for PgBouncer to complete the gamma with more advanced and customized scenarios.","title":"Controlled configurability"},{"location":"container_images/","text":"Container Image Requirements The CloudNativePG operator for Kubernetes is designed to work with any compatible PostgreSQL container image that meets the following requirements: PostgreSQL executables must be available in the system path: initdb postgres pg_ctl pg_controldata pg_basebackup Proper locale settings configured Optional Components: PGAudit extension (only required if audit logging is needed) du (used for kubectl cnpg status ) Important Only PostgreSQL versions officially supported by PGDG are allowed. Info Barman Cloud executables are no longer required in CloudNativePG. The recommended approach is to use the dedicated Barman Cloud Plugin . No entry point or command is required in the image definition. CloudNativePG automatically overrides it with its instance manager. Warning CloudNativePG only supports Primary with multiple/optional Hot Standby Servers architecture for PostgreSQL application container images. The CloudNativePG community provides and maintains public PostgreSQL container images that are fully compatible with CloudNativePG. These images are published on ghcr.io . Image Tag Requirements To ensure the operator makes informed decisions, it must accurately detect the PostgreSQL major version. This detection can occur in two ways: Utilizing the major field of the imageCatalogRef , if defined. Auto-detecting the major version from the image tag of the imageName if not explicitly specified. For auto-detection to work, the image tag must adhere to a specific format. It should commence with a valid PostgreSQL major version number (e.g., 15.6 or 16), optionally followed by a dot and the patch level. Following this, the tag can include any character combination valid and accepted in a Docker tag, preceded by a dot, an underscore, or a minus sign. Examples of accepted image tags: 12.1 13.3.2.1-1 13.4 14 15.5-10 16.0 Warning latest is not considered a valid tag for the image. Note Image tag requirements do no apply for images defined in a catalog.","title":"Container Image Requirements"},{"location":"container_images/#container-image-requirements","text":"The CloudNativePG operator for Kubernetes is designed to work with any compatible PostgreSQL container image that meets the following requirements: PostgreSQL executables must be available in the system path: initdb postgres pg_ctl pg_controldata pg_basebackup Proper locale settings configured Optional Components: PGAudit extension (only required if audit logging is needed) du (used for kubectl cnpg status ) Important Only PostgreSQL versions officially supported by PGDG are allowed. Info Barman Cloud executables are no longer required in CloudNativePG. The recommended approach is to use the dedicated Barman Cloud Plugin . No entry point or command is required in the image definition. CloudNativePG automatically overrides it with its instance manager. Warning CloudNativePG only supports Primary with multiple/optional Hot Standby Servers architecture for PostgreSQL application container images. The CloudNativePG community provides and maintains public PostgreSQL container images that are fully compatible with CloudNativePG. These images are published on ghcr.io .","title":"Container Image Requirements"},{"location":"container_images/#image-tag-requirements","text":"To ensure the operator makes informed decisions, it must accurately detect the PostgreSQL major version. This detection can occur in two ways: Utilizing the major field of the imageCatalogRef , if defined. Auto-detecting the major version from the image tag of the imageName if not explicitly specified. For auto-detection to work, the image tag must adhere to a specific format. It should commence with a valid PostgreSQL major version number (e.g., 15.6 or 16), optionally followed by a dot and the patch level. Following this, the tag can include any character combination valid and accepted in a Docker tag, preceded by a dot, an underscore, or a minus sign. Examples of accepted image tags: 12.1 13.3.2.1-1 13.4 14 15.5-10 16.0 Warning latest is not considered a valid tag for the image. Note Image tag requirements do no apply for images defined in a catalog.","title":"Image Tag Requirements"},{"location":"controller/","text":"Custom Pod Controller Kubernetes uses the Controller pattern to align the current cluster state with the desired one. Stateful applications are usually managed with the StatefulSet controller, which creates and reconciles a set of Pods built from the same specification, and assigns them a sticky identity. CloudNativePG implements its own custom controller to manage PostgreSQL instances, instead of relying on the StatefulSet controller. While bringing more complexity to the implementation, this design choice provides the operator with more flexibility on how we manage the cluster, while being transparent on the topology of PostgreSQL clusters. Like many choices in the design realm, different ones lead to other compromises. The following sections discuss a few points where we believe this design choice has made the implementation of CloudNativePG more reliable, and easier to understand. PVC resizing This is a well known limitation of StatefulSet : it does not support resizing PVCs. This is inconvenient for a database. Resizing volumes requires convoluted workarounds. In contrast, CloudNativePG leverages the configured storage class to manage the underlying PVCs directly, and can handle PVC resizing if the storage class supports it. Primary Instances versus Replicas The StatefulSet controller is designed to create a set of Pods from just one template. Given that we use one Pod per PostgreSQL instance, we have two kinds of Pods: primary instance (only one) replicas (multiple, optional) This difference is relevant when deciding the correct deployment strategy to execute for a given operation. Some operations should be performed on the replicas first, and then on the primary, but only after an updated replica is promoted as the new primary. For example, when you want to apply a different PostgreSQL image version, or when you increase configuration parameters like max_connections (which are treated specially by PostgreSQL because CloudNativePG uses hot standby replicas ). While doing that, CloudNativePG considers the PostgreSQL instance's role - and not just its serial number. Sometimes the operator needs to follow the opposite process: work on the primary first and then on the replicas. For example, when you lower max_connections . In that case, CloudNativePG will: apply the new setting to the primary instance restart it apply the new setting on the replicas The StatefulSet controller, being application-independent, can't incorporate this behavior, which is specific to PostgreSQL's native replication technology. Coherence of PVCs PostgreSQL instances can be configured to work with multiple PVCs: this is how WAL storage can be separated from PGDATA . The two data stores need to be coherent from the PostgreSQL point of view, as they're used simultaneously. If you delete the PVC corresponding to the WAL storage of an instance, the PVC where PGDATA is stored will not be usable anymore. This behavior is specific to PostgreSQL and is not implemented in the StatefulSet controller - the latter not being application specific. After the user dropped a PVC, a StatefulSet would just recreate it, leading to a corrupted PostgreSQL instance. CloudNativePG would instead classify the remaining PVC as unusable, and start creating a new pair of PVCs for another instance to join the cluster correctly. Local storage, remote storage, and database size Sometimes you need to take down a Kubernetes node to do an upgrade. After the upgrade, depending on your upgrade strategy, the updated node could go up again, or a new node could replace it. Supposing the unavailable node was hosting a PostgreSQL instance, depending on your database size and your cloud infrastructure, you may prefer to choose one of the following actions: drop the PVC and the Pod residing on the downed node; create a new PVC cloning the data from another PVC; after that, schedule a Pod for it drop the Pod, schedule the Pod in a different node, and mount the PVC from there leave the Pod and the PVC as they are, and wait for the node to be back up. The first solution is practical when your database size permits, allowing you to immediately bring back the desired number of replicas. The second solution is only feasible when you're not using the storage of the local node, and re-mounting the PVC in another host is possible in a reasonable amount of time (which only you and your organization know). The third solution is appropriate when the database is big and uses local node storage for maximum performance and data durability. The CloudNativePG controller implements all these strategies so that the user can select the preferred behavior at the cluster level (read the \"Kubernetes upgrade\" section for details). Being generic, the StatefulSet doesn't allow this level of customization.","title":"Custom Pod Controller"},{"location":"controller/#custom-pod-controller","text":"Kubernetes uses the Controller pattern to align the current cluster state with the desired one. Stateful applications are usually managed with the StatefulSet controller, which creates and reconciles a set of Pods built from the same specification, and assigns them a sticky identity. CloudNativePG implements its own custom controller to manage PostgreSQL instances, instead of relying on the StatefulSet controller. While bringing more complexity to the implementation, this design choice provides the operator with more flexibility on how we manage the cluster, while being transparent on the topology of PostgreSQL clusters. Like many choices in the design realm, different ones lead to other compromises. The following sections discuss a few points where we believe this design choice has made the implementation of CloudNativePG more reliable, and easier to understand.","title":"Custom Pod Controller"},{"location":"controller/#pvc-resizing","text":"This is a well known limitation of StatefulSet : it does not support resizing PVCs. This is inconvenient for a database. Resizing volumes requires convoluted workarounds. In contrast, CloudNativePG leverages the configured storage class to manage the underlying PVCs directly, and can handle PVC resizing if the storage class supports it.","title":"PVC resizing"},{"location":"controller/#primary-instances-versus-replicas","text":"The StatefulSet controller is designed to create a set of Pods from just one template. Given that we use one Pod per PostgreSQL instance, we have two kinds of Pods: primary instance (only one) replicas (multiple, optional) This difference is relevant when deciding the correct deployment strategy to execute for a given operation. Some operations should be performed on the replicas first, and then on the primary, but only after an updated replica is promoted as the new primary. For example, when you want to apply a different PostgreSQL image version, or when you increase configuration parameters like max_connections (which are treated specially by PostgreSQL because CloudNativePG uses hot standby replicas ). While doing that, CloudNativePG considers the PostgreSQL instance's role - and not just its serial number. Sometimes the operator needs to follow the opposite process: work on the primary first and then on the replicas. For example, when you lower max_connections . In that case, CloudNativePG will: apply the new setting to the primary instance restart it apply the new setting on the replicas The StatefulSet controller, being application-independent, can't incorporate this behavior, which is specific to PostgreSQL's native replication technology.","title":"Primary Instances versus Replicas"},{"location":"controller/#coherence-of-pvcs","text":"PostgreSQL instances can be configured to work with multiple PVCs: this is how WAL storage can be separated from PGDATA . The two data stores need to be coherent from the PostgreSQL point of view, as they're used simultaneously. If you delete the PVC corresponding to the WAL storage of an instance, the PVC where PGDATA is stored will not be usable anymore. This behavior is specific to PostgreSQL and is not implemented in the StatefulSet controller - the latter not being application specific. After the user dropped a PVC, a StatefulSet would just recreate it, leading to a corrupted PostgreSQL instance. CloudNativePG would instead classify the remaining PVC as unusable, and start creating a new pair of PVCs for another instance to join the cluster correctly.","title":"Coherence of PVCs"},{"location":"controller/#local-storage-remote-storage-and-database-size","text":"Sometimes you need to take down a Kubernetes node to do an upgrade. After the upgrade, depending on your upgrade strategy, the updated node could go up again, or a new node could replace it. Supposing the unavailable node was hosting a PostgreSQL instance, depending on your database size and your cloud infrastructure, you may prefer to choose one of the following actions: drop the PVC and the Pod residing on the downed node; create a new PVC cloning the data from another PVC; after that, schedule a Pod for it drop the Pod, schedule the Pod in a different node, and mount the PVC from there leave the Pod and the PVC as they are, and wait for the node to be back up. The first solution is practical when your database size permits, allowing you to immediately bring back the desired number of replicas. The second solution is only feasible when you're not using the storage of the local node, and re-mounting the PVC in another host is possible in a reasonable amount of time (which only you and your organization know). The third solution is appropriate when the database is big and uses local node storage for maximum performance and data durability. The CloudNativePG controller implements all these strategies so that the user can select the preferred behavior at the cluster level (read the \"Kubernetes upgrade\" section for details). Being generic, the StatefulSet doesn't allow this level of customization.","title":"Local storage, remote storage, and database size"},{"location":"database_import/","text":"Importing Postgres databases This section describes how to import one or more existing PostgreSQL databases inside a brand new CloudNativePG cluster. The import operation is based on the concept of online logical backups in PostgreSQL, and relies on pg_dump via a network connection to the origin host, and pg_restore . Thanks to native Multi-Version Concurrency Control (MVCC) and snapshots, PostgreSQL enables taking consistent backups over the network, in a concurrent manner, without stopping any write activity. Logical backups are also the most common, flexible and reliable technique to perform major upgrades of PostgreSQL versions. As a result, the instructions in this section are suitable for both: importing one or more databases from an existing PostgreSQL instance, even outside Kubernetes importing the database from any PostgreSQL version to one that is either the same or newer, enabling major upgrades of PostgreSQL (e.g. from version 13.x to version 17.x) Warning When performing major upgrades of PostgreSQL you are responsible for making sure that applications are compatible with the new version and that the upgrade path of the objects contained in the database (including extensions) is feasible. In both cases, the operation is performed on a consistent snapshot of the origin database. Important For this reason we suggest to stop write operations on the source before the final import in the Cluster resource, as changes done to the source database after the start of the backup will not be in the destination cluster - hence why this feature is referred to as \"offline import\" or \"offline major upgrade\". How it works Conceptually, the import requires you to create a new cluster from scratch ( destination cluster ), using the initdb bootstrap method , and then complete the initdb.import subsection to import objects from an existing Postgres cluster ( source cluster ). As per PostgreSQL recommendation, we suggest that the PostgreSQL major version of the destination cluster is greater or equal than the one of the source cluster . CloudNativePG provides two main ways to import objects from the source cluster into the destination cluster: microservice approach : the destination cluster is designed to host a single application database owned by the specified application user, as recommended by the CloudNativePG project monolith approach : the destination cluster is designed to host multiple databases and different users, imported from the source cluster The first import method is available via the microservice type, the second via the monolith type. Warning It is your responsibility to ensure that the destination cluster can access the source cluster with a superuser or a user having enough privileges to take a logical backup with pg_dump . Please refer to the PostgreSQL documentation on pg_dump for further information. The microservice type With the microservice approach, you can specify a single database you want to import from the source cluster into the destination cluster. The operation is performed in 4 steps: initdb bootstrap of the new cluster export of the selected database (in initdb.import.databases ) using pg_dump -Fd import of the database using pg_restore --no-acl --no-owner into the initdb.database (application database) owned by the initdb.owner user cleanup of the database dump file optional execution of the user defined SQL queries in the application database via the postImportApplicationSQL parameter execution of ANALYZE VERBOSE on the imported database In the figure below, a single PostgreSQL cluster containing N databases is imported into separate CloudNativePG clusters, with each cluster using a microservice import for one of the N source databases. For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest available major version at the time the operator was released) called cluster-microservice that imports the angus database from the cluster-pg96 cluster (with the unsupported PostgreSQL 9.6), by connecting to the postgres database using the postgres user, via the password stored in the cluster-pg96-superuser secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-microservice spec: instances: 3 bootstrap: initdb: import: type: microservice databases: - angus source: externalCluster: cluster-pg96 #postImportApplicationSQL: #- | # INSERT YOUR SQL QUERIES HERE storage: size: 1Gi externalClusters: - name: cluster-pg96 connectionParameters: # Use the correct IP or host name for the source database host: pg96.local user: postgres dbname: postgres password: name: cluster-pg96-superuser key: password Warning The example above deliberately uses a source database running a version of PostgreSQL that is not supported anymore by the Community, and consequently by CloudNativePG. Data export from the source instance is performed using the version of pg_dump in the destination cluster, which must be a supported one, and equal or greater than the source one. Based on our experience, this way of exporting data should work on older and unsupported versions of Postgres too, giving you the chance to move your legacy data to a better system, inside Kubernetes. This is the main reason why we used 9.6 in the examples of this section. We'd be interested to hear from you, should you experience any issues in this area. There are a few things you need to be aware of when using the microservice type: It requires an externalCluster that points to an existing PostgreSQL instance containing the data to import (for more information, please refer to \"The externalClusters section\" ) Traffic must be allowed between the Kubernetes cluster and the externalCluster during the operation Connection to the source database must be granted with the specified user that needs to run pg_dump and read roles information ( superuser is OK) Currently, the pg_dump -Fd result is stored temporarily inside the dumps folder in the PGDATA volume, so there should be enough available space to temporarily contain the dump result on the assigned node, as well as the restored data and indexes. Once the import operation is completed, this folder is automatically deleted by the operator. Only one database can be specified inside the initdb.import.databases array Roles are not imported - and as such they cannot be specified inside initdb.import.roles Hint The microservice approach adheres to CloudNativePG conventions and defaults for the destination cluster. If you do not set initdb.database or initdb.owner for the destination cluster, both parameters will default to app . The monolith type With the monolith approach, you can specify a set of roles and databases you want to import from the source cluster into the destination cluster. The operation is performed in the following steps: initdb bootstrap of the new cluster export and import of the selected roles export of the selected databases (in initdb.import.databases ), one at a time, using pg_dump -Fd create each of the selected databases and import data using pg_restore run ANALYZE on each imported database cleanup of the database dump files For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest available major version at the time the operator was released) called cluster-monolith that imports the accountant and the bank_user roles, as well as the accounting , banking , resort databases from the cluster-pg96 cluster (with the unsupported PostgreSQL 9.6), by connecting to the postgres database using the postgres user, via the password stored in the cluster-pg96-superuser secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-monolith spec: instances: 3 bootstrap: initdb: import: type: monolith databases: - accounting - banking - resort roles: - accountant - bank_user source: externalCluster: cluster-pg96 storage: size: 1Gi externalClusters: - name: cluster-pg96 connectionParameters: # Use the correct IP or host name for the source database host: pg96.local user: postgres dbname: postgres sslmode: require password: name: cluster-pg96-superuser key: password There are a few things you need to be aware of when using the monolith type: It requires an externalCluster that points to an existing PostgreSQL instance containing the data to import (for more information, please refer to \"The externalClusters section\" ) Traffic must be allowed between the Kubernetes cluster and the externalCluster during the operation Connection to the source database must be granted with the specified user that needs to run pg_dump and retrieve roles information ( superuser is OK) Currently, the pg_dump -Fd result is stored temporarily inside the dumps folder in the PGDATA volume of the destination cluster's instances, so there should be enough available space to temporarily contain the dump result on the assigned node, as well as the restored data and indexes. Once the import operation is completed, this folder is automatically deleted by the operator. At least one database to be specified in the initdb.import.databases array Any role that is required by the imported databases must be specified inside initdb.import.roles , with the limitations below: The following roles, if present, are not imported: postgres , streaming_replica , cnpg_pooler_pgbouncer The SUPERUSER option is removed from any imported role Wildcard \"*\" can be used as the only element in the databases and/or roles arrays to import every object of the kind; When matching databases the wildcard will ignore the postgres database, template databases, and those databases not allowing connections After the clone procedure is done, ANALYZE VERBOSE is executed for every database. The postImportApplicationSQL field is not supported Hint The databases and their owners are preserved exactly as they exist in the source cluster\u2014no app database or user will be created during import. If your bootstrap.initdb stanza specifies custom database and owner values that do not match any of the databases or users being imported, the instance manager will create a new, empty application database and owner role with those specified names, while leaving the imported databases and owners unchanged. A practical example There is nothing to stop you from using the monolith approach to import a single database. It is interesting to see how the results of doing so would differ from using the microservice approach. Given a source cluster, for example the following, with a database named mydb owned by role me : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 1 postgresql: pg_hba: - host all all all trust storage: size: 1Gi bootstrap: initdb: database: mydb owner: me We can import it via microservice : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-microservice spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: microservice databases: - mydb source: externalCluster: cluster-example externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw dbname: postgres as well as via monolith: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-monolith spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: monolith databases: - mydb roles: - me source: externalCluster: cluster-example externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw dbname: postgres In both cases, the database's contents will be imported, but: In the microservice case, the imported database's name and owner both become app , or whichever configuration for the fields database and owner are set in the bootstrap.initdb stanza. In the monolith case, the database and owner are kept exactly as in the source cluster, i.e. mydb and me respectively. No app database nor user will be created. If there are custom settings for database and owner in the bootstrap.initdb stanza that don't match the source databases/owners to import, the instance manager will create a new empty application database and owner role, but will leave the imported databases/owners intact. Import optimizations During the logical import of a database, CloudNativePG optimizes the configuration of PostgreSQL in order to prioritize speed versus data durability, by forcing: archive_mode to off fsync to off full_page_writes to off max_wal_senders to 0 wal_level to minimal Before completing the import job, CloudNativePG restores the expected configuration, then runs initdb --sync-only to ensure that data is permanently written on disk. Important WAL archiving, if requested, and WAL level will be honored after the database import process has completed. Similarly, replicas will be cloned after the bootstrap phase, when the actual cluster resource starts. There are other optimizations you can do during the import phase. Although this topic is beyond the scope of CloudNativePG, we recommend that you reduce unnecessary writes in the checkpoint area by tuning Postgres GUCs like shared_buffers , max_wal_size , checkpoint_timeout directly in the Cluster configuration. Customizing pg_dump and pg_restore Behavior You can customize the behavior of pg_dump and pg_restore by specifying additional options using the pgDumpExtraOptions and pgRestoreExtraOptions parameters. For instance, you can enable parallel jobs to speed up data import/export processes, as shown in the following example: # <snip> bootstrap: initdb: import: type: microservice databases: - app source: externalCluster: cluster-example pgDumpExtraOptions: - '--jobs=2' pgRestoreExtraOptions: - '--jobs=2' # <snip> Warning Use the pgDumpExtraOptions and pgRestoreExtraOptions fields with caution and at your own risk. These options are not validated or verified by the operator, and some configurations may conflict with its intended functionality or behavior. Always test thoroughly in a safe and controlled environment before applying them in production. Online Import and Upgrades Logical replication offers a powerful way to import any PostgreSQL database accessible over the network using the following approach: Import Bootstrap with Schema-Only Option : Initialize the schema in the target database before replication begins. Subscription Resource : Set up continuous replication to synchronize data changes. This technique can also be leveraged for performing major PostgreSQL upgrades with minimal downtime, making it ideal for seamless migrations and system upgrades. For more details, including limitations and best practices, refer to the Logical Replication section in the documentation.","title":"Importing Postgres databases"},{"location":"database_import/#importing-postgres-databases","text":"This section describes how to import one or more existing PostgreSQL databases inside a brand new CloudNativePG cluster. The import operation is based on the concept of online logical backups in PostgreSQL, and relies on pg_dump via a network connection to the origin host, and pg_restore . Thanks to native Multi-Version Concurrency Control (MVCC) and snapshots, PostgreSQL enables taking consistent backups over the network, in a concurrent manner, without stopping any write activity. Logical backups are also the most common, flexible and reliable technique to perform major upgrades of PostgreSQL versions. As a result, the instructions in this section are suitable for both: importing one or more databases from an existing PostgreSQL instance, even outside Kubernetes importing the database from any PostgreSQL version to one that is either the same or newer, enabling major upgrades of PostgreSQL (e.g. from version 13.x to version 17.x) Warning When performing major upgrades of PostgreSQL you are responsible for making sure that applications are compatible with the new version and that the upgrade path of the objects contained in the database (including extensions) is feasible. In both cases, the operation is performed on a consistent snapshot of the origin database. Important For this reason we suggest to stop write operations on the source before the final import in the Cluster resource, as changes done to the source database after the start of the backup will not be in the destination cluster - hence why this feature is referred to as \"offline import\" or \"offline major upgrade\".","title":"Importing Postgres databases"},{"location":"database_import/#how-it-works","text":"Conceptually, the import requires you to create a new cluster from scratch ( destination cluster ), using the initdb bootstrap method , and then complete the initdb.import subsection to import objects from an existing Postgres cluster ( source cluster ). As per PostgreSQL recommendation, we suggest that the PostgreSQL major version of the destination cluster is greater or equal than the one of the source cluster . CloudNativePG provides two main ways to import objects from the source cluster into the destination cluster: microservice approach : the destination cluster is designed to host a single application database owned by the specified application user, as recommended by the CloudNativePG project monolith approach : the destination cluster is designed to host multiple databases and different users, imported from the source cluster The first import method is available via the microservice type, the second via the monolith type. Warning It is your responsibility to ensure that the destination cluster can access the source cluster with a superuser or a user having enough privileges to take a logical backup with pg_dump . Please refer to the PostgreSQL documentation on pg_dump for further information.","title":"How it works"},{"location":"database_import/#the-microservice-type","text":"With the microservice approach, you can specify a single database you want to import from the source cluster into the destination cluster. The operation is performed in 4 steps: initdb bootstrap of the new cluster export of the selected database (in initdb.import.databases ) using pg_dump -Fd import of the database using pg_restore --no-acl --no-owner into the initdb.database (application database) owned by the initdb.owner user cleanup of the database dump file optional execution of the user defined SQL queries in the application database via the postImportApplicationSQL parameter execution of ANALYZE VERBOSE on the imported database In the figure below, a single PostgreSQL cluster containing N databases is imported into separate CloudNativePG clusters, with each cluster using a microservice import for one of the N source databases. For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest available major version at the time the operator was released) called cluster-microservice that imports the angus database from the cluster-pg96 cluster (with the unsupported PostgreSQL 9.6), by connecting to the postgres database using the postgres user, via the password stored in the cluster-pg96-superuser secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-microservice spec: instances: 3 bootstrap: initdb: import: type: microservice databases: - angus source: externalCluster: cluster-pg96 #postImportApplicationSQL: #- | # INSERT YOUR SQL QUERIES HERE storage: size: 1Gi externalClusters: - name: cluster-pg96 connectionParameters: # Use the correct IP or host name for the source database host: pg96.local user: postgres dbname: postgres password: name: cluster-pg96-superuser key: password Warning The example above deliberately uses a source database running a version of PostgreSQL that is not supported anymore by the Community, and consequently by CloudNativePG. Data export from the source instance is performed using the version of pg_dump in the destination cluster, which must be a supported one, and equal or greater than the source one. Based on our experience, this way of exporting data should work on older and unsupported versions of Postgres too, giving you the chance to move your legacy data to a better system, inside Kubernetes. This is the main reason why we used 9.6 in the examples of this section. We'd be interested to hear from you, should you experience any issues in this area. There are a few things you need to be aware of when using the microservice type: It requires an externalCluster that points to an existing PostgreSQL instance containing the data to import (for more information, please refer to \"The externalClusters section\" ) Traffic must be allowed between the Kubernetes cluster and the externalCluster during the operation Connection to the source database must be granted with the specified user that needs to run pg_dump and read roles information ( superuser is OK) Currently, the pg_dump -Fd result is stored temporarily inside the dumps folder in the PGDATA volume, so there should be enough available space to temporarily contain the dump result on the assigned node, as well as the restored data and indexes. Once the import operation is completed, this folder is automatically deleted by the operator. Only one database can be specified inside the initdb.import.databases array Roles are not imported - and as such they cannot be specified inside initdb.import.roles Hint The microservice approach adheres to CloudNativePG conventions and defaults for the destination cluster. If you do not set initdb.database or initdb.owner for the destination cluster, both parameters will default to app .","title":"The microservice type"},{"location":"database_import/#the-monolith-type","text":"With the monolith approach, you can specify a set of roles and databases you want to import from the source cluster into the destination cluster. The operation is performed in the following steps: initdb bootstrap of the new cluster export and import of the selected roles export of the selected databases (in initdb.import.databases ), one at a time, using pg_dump -Fd create each of the selected databases and import data using pg_restore run ANALYZE on each imported database cleanup of the database dump files For example, the YAML below creates a new 3 instance PostgreSQL cluster (latest available major version at the time the operator was released) called cluster-monolith that imports the accountant and the bank_user roles, as well as the accounting , banking , resort databases from the cluster-pg96 cluster (with the unsupported PostgreSQL 9.6), by connecting to the postgres database using the postgres user, via the password stored in the cluster-pg96-superuser secret. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-monolith spec: instances: 3 bootstrap: initdb: import: type: monolith databases: - accounting - banking - resort roles: - accountant - bank_user source: externalCluster: cluster-pg96 storage: size: 1Gi externalClusters: - name: cluster-pg96 connectionParameters: # Use the correct IP or host name for the source database host: pg96.local user: postgres dbname: postgres sslmode: require password: name: cluster-pg96-superuser key: password There are a few things you need to be aware of when using the monolith type: It requires an externalCluster that points to an existing PostgreSQL instance containing the data to import (for more information, please refer to \"The externalClusters section\" ) Traffic must be allowed between the Kubernetes cluster and the externalCluster during the operation Connection to the source database must be granted with the specified user that needs to run pg_dump and retrieve roles information ( superuser is OK) Currently, the pg_dump -Fd result is stored temporarily inside the dumps folder in the PGDATA volume of the destination cluster's instances, so there should be enough available space to temporarily contain the dump result on the assigned node, as well as the restored data and indexes. Once the import operation is completed, this folder is automatically deleted by the operator. At least one database to be specified in the initdb.import.databases array Any role that is required by the imported databases must be specified inside initdb.import.roles , with the limitations below: The following roles, if present, are not imported: postgres , streaming_replica , cnpg_pooler_pgbouncer The SUPERUSER option is removed from any imported role Wildcard \"*\" can be used as the only element in the databases and/or roles arrays to import every object of the kind; When matching databases the wildcard will ignore the postgres database, template databases, and those databases not allowing connections After the clone procedure is done, ANALYZE VERBOSE is executed for every database. The postImportApplicationSQL field is not supported Hint The databases and their owners are preserved exactly as they exist in the source cluster\u2014no app database or user will be created during import. If your bootstrap.initdb stanza specifies custom database and owner values that do not match any of the databases or users being imported, the instance manager will create a new, empty application database and owner role with those specified names, while leaving the imported databases and owners unchanged.","title":"The monolith type"},{"location":"database_import/#a-practical-example","text":"There is nothing to stop you from using the monolith approach to import a single database. It is interesting to see how the results of doing so would differ from using the microservice approach. Given a source cluster, for example the following, with a database named mydb owned by role me : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 1 postgresql: pg_hba: - host all all all trust storage: size: 1Gi bootstrap: initdb: database: mydb owner: me We can import it via microservice : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-microservice spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: microservice databases: - mydb source: externalCluster: cluster-example externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw dbname: postgres as well as via monolith: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-monolith spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: monolith databases: - mydb roles: - me source: externalCluster: cluster-example externalClusters: - name: cluster-example connectionParameters: host: cluster-example-rw dbname: postgres In both cases, the database's contents will be imported, but: In the microservice case, the imported database's name and owner both become app , or whichever configuration for the fields database and owner are set in the bootstrap.initdb stanza. In the monolith case, the database and owner are kept exactly as in the source cluster, i.e. mydb and me respectively. No app database nor user will be created. If there are custom settings for database and owner in the bootstrap.initdb stanza that don't match the source databases/owners to import, the instance manager will create a new empty application database and owner role, but will leave the imported databases/owners intact.","title":"A practical example"},{"location":"database_import/#import-optimizations","text":"During the logical import of a database, CloudNativePG optimizes the configuration of PostgreSQL in order to prioritize speed versus data durability, by forcing: archive_mode to off fsync to off full_page_writes to off max_wal_senders to 0 wal_level to minimal Before completing the import job, CloudNativePG restores the expected configuration, then runs initdb --sync-only to ensure that data is permanently written on disk. Important WAL archiving, if requested, and WAL level will be honored after the database import process has completed. Similarly, replicas will be cloned after the bootstrap phase, when the actual cluster resource starts. There are other optimizations you can do during the import phase. Although this topic is beyond the scope of CloudNativePG, we recommend that you reduce unnecessary writes in the checkpoint area by tuning Postgres GUCs like shared_buffers , max_wal_size , checkpoint_timeout directly in the Cluster configuration.","title":"Import optimizations"},{"location":"database_import/#customizing-pg_dump-and-pg_restore-behavior","text":"You can customize the behavior of pg_dump and pg_restore by specifying additional options using the pgDumpExtraOptions and pgRestoreExtraOptions parameters. For instance, you can enable parallel jobs to speed up data import/export processes, as shown in the following example: # <snip> bootstrap: initdb: import: type: microservice databases: - app source: externalCluster: cluster-example pgDumpExtraOptions: - '--jobs=2' pgRestoreExtraOptions: - '--jobs=2' # <snip> Warning Use the pgDumpExtraOptions and pgRestoreExtraOptions fields with caution and at your own risk. These options are not validated or verified by the operator, and some configurations may conflict with its intended functionality or behavior. Always test thoroughly in a safe and controlled environment before applying them in production.","title":"Customizing pg_dump and pg_restore Behavior"},{"location":"database_import/#online-import-and-upgrades","text":"Logical replication offers a powerful way to import any PostgreSQL database accessible over the network using the following approach: Import Bootstrap with Schema-Only Option : Initialize the schema in the target database before replication begins. Subscription Resource : Set up continuous replication to synchronize data changes. This technique can also be leveraged for performing major PostgreSQL upgrades with minimal downtime, making it ideal for seamless migrations and system upgrades. For more details, including limitations and best practices, refer to the Logical Replication section in the documentation.","title":"Online Import and Upgrades"},{"location":"declarative_database_management/","text":"PostgreSQL Database Management CloudNativePG simplifies PostgreSQL database provisioning by automatically creating an application database named app by default. This default behavior is explained in the \"Bootstrap an Empty Cluster\" section. For more advanced use cases, CloudNativePG introduces declarative database management , which empowers users to define and control the lifecycle of PostgreSQL databases using the Database Custom Resource Definition (CRD). This method seamlessly integrates with Kubernetes, providing a scalable, automated, and consistent approach to managing PostgreSQL databases. Key Concepts Scope of Management Important CloudNativePG manages global objects in PostgreSQL clusters, including databases, roles, and tablespaces. However, it does not manage database content beyond extensions and schemas (e.g., tables). To manage database content, use specialized tools or rely on the applications themselves. Declarative Database Manifest The following example demonstrates how a Database resource interacts with a Cluster : apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-one spec: name: one owner: app cluster: name: cluster-example extensions: - name: bloom ensure: present When applied, this manifest creates a Database object called cluster-example-one requesting a database named one , owned by the app role, in the cluster-example PostgreSQL cluster. Info Please refer to the API reference the full list of attributes you can define for each Database object. Required Fields in the Database Manifest metadata.name : Unique name of the Kubernetes object within its namespace. spec.name : Name of the database as it will appear in PostgreSQL. spec.owner : PostgreSQL role that owns the database. spec.cluster.name : Name of the target PostgreSQL cluster. The Database object must reference a specific Cluster , determining where the database will be created. It is managed by the cluster's primary instance, ensuring the database is created or updated as needed. Info The distinction between metadata.name and spec.name allows multiple Database resources to reference databases with the same name across different CloudNativePG clusters in the same Kubernetes namespace. Reserved Database Names PostgreSQL automatically creates databases such as postgres , template0 , and template1 . These names are reserved and cannot be used for new Database objects in CloudNativePG. Important Creating a Database with spec.name set to postgres , template0 , or template1 is not allowed. Reconciliation and Status Once a Database object is reconciled successfully: status.applied will be set to true . status.observedGeneration will match the metadata.generation of the last applied configuration. Example of a reconciled Database object: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: generation: 1 name: cluster-example-one spec: cluster: name: cluster-example name: one owner: app status: observedGeneration: 1 applied: true If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field. Deleting a Database CloudNativePG supports two methods for database deletion: Using the delete reclaim policy Declaratively setting the database's ensure field to absent Deleting via delete Reclaim Policy The databaseReclaimPolicy field determines the behavior when a Database object is deleted: retain (default): The database remains in PostgreSQL for manual management. delete : The database is automatically removed from PostgreSQL. Example: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-two spec: databaseReclaimPolicy: delete name: two owner: app cluster: name: cluster-example Deleting this Database object will automatically remove the two database from the cluster-example cluster. Declaratively Setting ensure: absent To remove a database, set the ensure field to absent like in the following example:. apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-database-to-drop spec: cluster: name: cluster-example name: database-to-drop owner: app ensure: absent This manifest ensures that the database-to-drop database is removed from the cluster-example cluster. Managing Extensions in a Database Info While extensions are database-scoped rather than global objects, CloudNativePG provides a declarative interface for managing them. This approach is necessary because installing certain extensions may require superuser privileges, which CloudNativePG recommends disabling by default. By leveraging this API, users can efficiently manage extensions in a scalable and controlled manner without requiring elevated privileges. CloudNativePG simplifies and automates the management of PostgreSQL extensions within the target database. To enable this feature, define the spec.extensions field with a list of extension specifications, as shown in the following example: # ... spec: extensions: - name: bloom ensure: present # ... Each extension entry supports the following properties: name (mandatory) : The name of the extension. ensure : Specifies whether the extension should be present or absent in the database: present : Ensures that the extension is installed (default). absent : Ensures that the extension is removed. version : The specific version of the extension to install or upgrade to. schema : The schema in which the extension should be installed. Info CloudNativePG manages extensions using the following PostgreSQL\u2019s SQL commands: CREATE EXTENSION , DROP EXTENSION , ALTER EXTENSION (limited to UPDATE TO and SET SCHEMA ). The operator reconciles only the extensions explicitly listed in spec.extensions . Any existing extensions not specified in this list remain unchanged. Warning Before the introduction of declarative extension management, CloudNativePG did not offer a straightforward way to create extensions through configuration. To address this, the \"managed extensions\" feature was introduced, enabling the automated and transparent management of key extensions like pg_stat_statements . Currently, it is your responsibility to ensure there are no conflicts between extension support in the Database CRD and the managed extensions feature. Managing Schemas in a Database Info Schema management in PostgreSQL is an exception to CloudNativePG's primary focus on managing global objects. Since schemas exist within a database, they are typically managed as part of the application development process. However, CloudNativePG provides a declarative interface for schema management, primarily to complete the support of extensions deployment within schemas. CloudNativePG simplifies and automates the management of PostgreSQL schemas within the target database. To enable this feature, define the spec.schemas field with a list of schema specifications, as shown in the following example: # ... spec: schemas: - name: app owner: app # ... Each schema entry supports the following properties: name (mandatory) : The name of the schema. owner : The owner of the schema. ensure : Specifies whether the schema should be present or absent in the database: present : Ensures that the schema is installed (default). absent : Ensures that the schema is removed. Info CloudNativePG manages schemas using the following PostgreSQL\u2019s SQL commands: CREATE SCHEMA , DROP SCHEMA , ALTER SCHEMA . Limitations and Caveats Renaming a database While CloudNativePG adheres to PostgreSQL\u2019s CREATE DATABASE and ALTER DATABASE commands, renaming databases is not supported . Attempting to modify spec.name in an existing Database object will result in rejection by Kubernetes. Creating vs. Altering a Database For new databases, CloudNativePG uses the CREATE DATABASE statement. For existing databases, ALTER DATABASE is used to apply changes. It is important to note that there are some differences between these two Postgres commands: in particular, the options accepted by ALTER are a subset of those accepted by CREATE . Warning Some fields, such as encoding and collation settings, are immutable in PostgreSQL. Attempts to modify these fields on existing databases will be ignored. Replica Clusters Database objects declared on replica clusters cannot be enforced, as replicas lack write privileges. These objects will remain in a pending state until the replica is promoted. Conflict Resolution If two Database objects in the same namespace manage the same PostgreSQL database (i.e., identical spec.name and spec.cluster.name ), the second object will be rejected. Example status message: status: applied: false message: 'reconciliation error: database \"one\" is already managed by Database object \"cluster-example-one\"' Postgres Version Differences CloudNativePG adheres to PostgreSQL's capabilities. For example, features like ICU_RULES introduced in PostgreSQL 16 are unavailable in earlier versions. Errors from PostgreSQL will be reflected in the Database object's status . Manual Changes CloudNativePG does not overwrite manual changes to databases. Once reconciled, a Database object will not be reapplied unless its metadata.generation changes, giving flexibility for direct PostgreSQL modifications.","title":"PostgreSQL Database Management"},{"location":"declarative_database_management/#postgresql-database-management","text":"CloudNativePG simplifies PostgreSQL database provisioning by automatically creating an application database named app by default. This default behavior is explained in the \"Bootstrap an Empty Cluster\" section. For more advanced use cases, CloudNativePG introduces declarative database management , which empowers users to define and control the lifecycle of PostgreSQL databases using the Database Custom Resource Definition (CRD). This method seamlessly integrates with Kubernetes, providing a scalable, automated, and consistent approach to managing PostgreSQL databases.","title":"PostgreSQL Database Management"},{"location":"declarative_database_management/#key-concepts","text":"","title":"Key Concepts"},{"location":"declarative_database_management/#scope-of-management","text":"Important CloudNativePG manages global objects in PostgreSQL clusters, including databases, roles, and tablespaces. However, it does not manage database content beyond extensions and schemas (e.g., tables). To manage database content, use specialized tools or rely on the applications themselves.","title":"Scope of Management"},{"location":"declarative_database_management/#declarative-database-manifest","text":"The following example demonstrates how a Database resource interacts with a Cluster : apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-one spec: name: one owner: app cluster: name: cluster-example extensions: - name: bloom ensure: present When applied, this manifest creates a Database object called cluster-example-one requesting a database named one , owned by the app role, in the cluster-example PostgreSQL cluster. Info Please refer to the API reference the full list of attributes you can define for each Database object.","title":"Declarative Database Manifest"},{"location":"declarative_database_management/#required-fields-in-the-database-manifest","text":"metadata.name : Unique name of the Kubernetes object within its namespace. spec.name : Name of the database as it will appear in PostgreSQL. spec.owner : PostgreSQL role that owns the database. spec.cluster.name : Name of the target PostgreSQL cluster. The Database object must reference a specific Cluster , determining where the database will be created. It is managed by the cluster's primary instance, ensuring the database is created or updated as needed. Info The distinction between metadata.name and spec.name allows multiple Database resources to reference databases with the same name across different CloudNativePG clusters in the same Kubernetes namespace.","title":"Required Fields in the Database Manifest"},{"location":"declarative_database_management/#reserved-database-names","text":"PostgreSQL automatically creates databases such as postgres , template0 , and template1 . These names are reserved and cannot be used for new Database objects in CloudNativePG. Important Creating a Database with spec.name set to postgres , template0 , or template1 is not allowed.","title":"Reserved Database Names"},{"location":"declarative_database_management/#reconciliation-and-status","text":"Once a Database object is reconciled successfully: status.applied will be set to true . status.observedGeneration will match the metadata.generation of the last applied configuration. Example of a reconciled Database object: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: generation: 1 name: cluster-example-one spec: cluster: name: cluster-example name: one owner: app status: observedGeneration: 1 applied: true If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field.","title":"Reconciliation and Status"},{"location":"declarative_database_management/#deleting-a-database","text":"CloudNativePG supports two methods for database deletion: Using the delete reclaim policy Declaratively setting the database's ensure field to absent","title":"Deleting a Database"},{"location":"declarative_database_management/#deleting-via-delete-reclaim-policy","text":"The databaseReclaimPolicy field determines the behavior when a Database object is deleted: retain (default): The database remains in PostgreSQL for manual management. delete : The database is automatically removed from PostgreSQL. Example: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-two spec: databaseReclaimPolicy: delete name: two owner: app cluster: name: cluster-example Deleting this Database object will automatically remove the two database from the cluster-example cluster.","title":"Deleting via delete Reclaim Policy"},{"location":"declarative_database_management/#declaratively-setting-ensure-absent","text":"To remove a database, set the ensure field to absent like in the following example:. apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: cluster-example-database-to-drop spec: cluster: name: cluster-example name: database-to-drop owner: app ensure: absent This manifest ensures that the database-to-drop database is removed from the cluster-example cluster.","title":"Declaratively Setting ensure: absent"},{"location":"declarative_database_management/#managing-extensions-in-a-database","text":"Info While extensions are database-scoped rather than global objects, CloudNativePG provides a declarative interface for managing them. This approach is necessary because installing certain extensions may require superuser privileges, which CloudNativePG recommends disabling by default. By leveraging this API, users can efficiently manage extensions in a scalable and controlled manner without requiring elevated privileges. CloudNativePG simplifies and automates the management of PostgreSQL extensions within the target database. To enable this feature, define the spec.extensions field with a list of extension specifications, as shown in the following example: # ... spec: extensions: - name: bloom ensure: present # ... Each extension entry supports the following properties: name (mandatory) : The name of the extension. ensure : Specifies whether the extension should be present or absent in the database: present : Ensures that the extension is installed (default). absent : Ensures that the extension is removed. version : The specific version of the extension to install or upgrade to. schema : The schema in which the extension should be installed. Info CloudNativePG manages extensions using the following PostgreSQL\u2019s SQL commands: CREATE EXTENSION , DROP EXTENSION , ALTER EXTENSION (limited to UPDATE TO and SET SCHEMA ). The operator reconciles only the extensions explicitly listed in spec.extensions . Any existing extensions not specified in this list remain unchanged. Warning Before the introduction of declarative extension management, CloudNativePG did not offer a straightforward way to create extensions through configuration. To address this, the \"managed extensions\" feature was introduced, enabling the automated and transparent management of key extensions like pg_stat_statements . Currently, it is your responsibility to ensure there are no conflicts between extension support in the Database CRD and the managed extensions feature.","title":"Managing Extensions in a Database"},{"location":"declarative_database_management/#managing-schemas-in-a-database","text":"Info Schema management in PostgreSQL is an exception to CloudNativePG's primary focus on managing global objects. Since schemas exist within a database, they are typically managed as part of the application development process. However, CloudNativePG provides a declarative interface for schema management, primarily to complete the support of extensions deployment within schemas. CloudNativePG simplifies and automates the management of PostgreSQL schemas within the target database. To enable this feature, define the spec.schemas field with a list of schema specifications, as shown in the following example: # ... spec: schemas: - name: app owner: app # ... Each schema entry supports the following properties: name (mandatory) : The name of the schema. owner : The owner of the schema. ensure : Specifies whether the schema should be present or absent in the database: present : Ensures that the schema is installed (default). absent : Ensures that the schema is removed. Info CloudNativePG manages schemas using the following PostgreSQL\u2019s SQL commands: CREATE SCHEMA , DROP SCHEMA , ALTER SCHEMA .","title":"Managing Schemas in a Database"},{"location":"declarative_database_management/#limitations-and-caveats","text":"","title":"Limitations and Caveats"},{"location":"declarative_database_management/#renaming-a-database","text":"While CloudNativePG adheres to PostgreSQL\u2019s CREATE DATABASE and ALTER DATABASE commands, renaming databases is not supported . Attempting to modify spec.name in an existing Database object will result in rejection by Kubernetes.","title":"Renaming a database"},{"location":"declarative_database_management/#creating-vs-altering-a-database","text":"For new databases, CloudNativePG uses the CREATE DATABASE statement. For existing databases, ALTER DATABASE is used to apply changes. It is important to note that there are some differences between these two Postgres commands: in particular, the options accepted by ALTER are a subset of those accepted by CREATE . Warning Some fields, such as encoding and collation settings, are immutable in PostgreSQL. Attempts to modify these fields on existing databases will be ignored.","title":"Creating vs. Altering a Database"},{"location":"declarative_database_management/#replica-clusters","text":"Database objects declared on replica clusters cannot be enforced, as replicas lack write privileges. These objects will remain in a pending state until the replica is promoted.","title":"Replica Clusters"},{"location":"declarative_database_management/#conflict-resolution","text":"If two Database objects in the same namespace manage the same PostgreSQL database (i.e., identical spec.name and spec.cluster.name ), the second object will be rejected. Example status message: status: applied: false message: 'reconciliation error: database \"one\" is already managed by Database object \"cluster-example-one\"'","title":"Conflict Resolution"},{"location":"declarative_database_management/#postgres-version-differences","text":"CloudNativePG adheres to PostgreSQL's capabilities. For example, features like ICU_RULES introduced in PostgreSQL 16 are unavailable in earlier versions. Errors from PostgreSQL will be reflected in the Database object's status .","title":"Postgres Version Differences"},{"location":"declarative_database_management/#manual-changes","text":"CloudNativePG does not overwrite manual changes to databases. Once reconciled, a Database object will not be reapplied unless its metadata.generation changes, giving flexibility for direct PostgreSQL modifications.","title":"Manual Changes"},{"location":"declarative_hibernation/","text":"Declarative hibernation CloudNativePG is designed to keep PostgreSQL clusters up, running and available anytime. There are some kinds of workloads that require the database to be up only when the workload is active. Batch-driven solutions are one such case. In batch-driven solutions, the database needs to be up only when the batch process is running. The declarative hibernation feature enables saving CPU power by removing the database Pods, while keeping the database PVCs. Hibernation To hibernate a cluster, set the cnpg.io/hibernation=on annotation: $ kubectl annotate cluster <cluster-name> --overwrite cnpg.io/hibernation=on A hibernated cluster won't have any running Pods, while the PVCs are retained so that the cluster can be rehydrated at a later time. Replica PVCs will be kept in addition to the primary's PVC. The hibernation procedure will delete the primary Pod and then the replica Pods, avoiding switchover, to ensure the replicas are kept in sync. The hibernation status can be monitored by looking for the cnpg.io/hibernation condition: $ kubectl get cluster <cluster-name> -o \"jsonpath={.status.conditions[?(.type==\\\"cnpg.io/hibernation\\\")]}\" { \"lastTransitionTime\":\"2023-03-05T16:43:35Z\", \"message\":\"Cluster has been hibernated\", \"reason\":\"Hibernated\", \"status\":\"True\", \"type\":\"cnpg.io/hibernation\" } The hibernation status can also be read with the status sub-command of the cnpg plugin for kubectl : $ kubectl cnpg status <cluster-name> Cluster Summary Name: cluster-example Namespace: default PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:17.5 Primary instance: cluster-example-2 Status: Cluster in healthy state Instances: 3 Ready instances: 0 Hibernation Status Hibernated Message Cluster has been hibernated Time 2023-03-05 16:43:35 +0000 UTC [..] Rehydration To rehydrate a cluster, either set the cnpg.io/hibernation annotation to off : $ kubectl annotate cluster <cluster-name> --overwrite cnpg.io/hibernation=off Or, just unset it altogether: $ kubectl annotate cluster <cluster-name> cnpg.io/hibernation- The Pods will be recreated and the cluster will resume operation.","title":"Declarative hibernation"},{"location":"declarative_hibernation/#declarative-hibernation","text":"CloudNativePG is designed to keep PostgreSQL clusters up, running and available anytime. There are some kinds of workloads that require the database to be up only when the workload is active. Batch-driven solutions are one such case. In batch-driven solutions, the database needs to be up only when the batch process is running. The declarative hibernation feature enables saving CPU power by removing the database Pods, while keeping the database PVCs.","title":"Declarative hibernation"},{"location":"declarative_hibernation/#hibernation","text":"To hibernate a cluster, set the cnpg.io/hibernation=on annotation: $ kubectl annotate cluster <cluster-name> --overwrite cnpg.io/hibernation=on A hibernated cluster won't have any running Pods, while the PVCs are retained so that the cluster can be rehydrated at a later time. Replica PVCs will be kept in addition to the primary's PVC. The hibernation procedure will delete the primary Pod and then the replica Pods, avoiding switchover, to ensure the replicas are kept in sync. The hibernation status can be monitored by looking for the cnpg.io/hibernation condition: $ kubectl get cluster <cluster-name> -o \"jsonpath={.status.conditions[?(.type==\\\"cnpg.io/hibernation\\\")]}\" { \"lastTransitionTime\":\"2023-03-05T16:43:35Z\", \"message\":\"Cluster has been hibernated\", \"reason\":\"Hibernated\", \"status\":\"True\", \"type\":\"cnpg.io/hibernation\" } The hibernation status can also be read with the status sub-command of the cnpg plugin for kubectl : $ kubectl cnpg status <cluster-name> Cluster Summary Name: cluster-example Namespace: default PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:17.5 Primary instance: cluster-example-2 Status: Cluster in healthy state Instances: 3 Ready instances: 0 Hibernation Status Hibernated Message Cluster has been hibernated Time 2023-03-05 16:43:35 +0000 UTC [..]","title":"Hibernation"},{"location":"declarative_hibernation/#rehydration","text":"To rehydrate a cluster, either set the cnpg.io/hibernation annotation to off : $ kubectl annotate cluster <cluster-name> --overwrite cnpg.io/hibernation=off Or, just unset it altogether: $ kubectl annotate cluster <cluster-name> cnpg.io/hibernation- The Pods will be recreated and the cluster will resume operation.","title":"Rehydration"},{"location":"declarative_role_management/","text":"PostgreSQL Role Management From its inception, CloudNativePG has managed the creation of specific roles required in PostgreSQL instances: some reserved users, such as the postgres superuser, streaming_replica and cnpg_pooler_pgbouncer (when the PgBouncer Pooler is used) The application user, set as the low-privilege owner of the application database This process is described in the \"Bootstrap\" section. With the managed stanza in the cluster spec, CloudNativePG now provides full lifecycle management for roles specified in .spec.managed.roles . This feature enables declarative management of existing roles, as well as the creation of new roles if they are not already present in the database. Role creation will occur after the database bootstrapping is complete. An example manifest for a cluster with declarative role management can be found in the file cluster-example-with-roles.yaml . Here is an excerpt from that file: apiVersion: postgresql.cnpg.io/v1 kind: Cluster spec: managed: roles: - name: dante ensure: present comment: Dante Alighieri login: true superuser: false inRoles: - pg_monitor - pg_signal_backend The role specification in .spec.managed.roles adheres to the PostgreSQL structure and naming conventions . Please refer to the API reference for the full list of attributes you can define for each role. A few points are worth noting: The ensure attribute is not part of PostgreSQL. It enables declarative role management to create and remove roles. The two possible values are present (the default) and absent . The inherit attribute is true by default, following PostgreSQL conventions. The connectionLimit attribute defaults to -1, in line with PostgreSQL conventions. Role membership with inRoles defaults to no memberships. Declarative role management ensures that PostgreSQL instances align with the spec. If a user modifies role attributes directly in the database, the CloudNativePG operator will revert those changes during the next reconciliation cycle. Password management The declarative role management feature includes reconciling of role passwords. Passwords are managed in fundamentally different ways in the Kubernetes world and in PostgreSQL, and as a result there are a few things to note. Managed role configurations may optionally specify the name of a Secret where the username and password are stored (encoded in Base64 as is usual in Kubernetes). For example: managed: roles: - name: dante ensure: present [\u2026 snipped \u2026] passwordSecret: name: cluster-example-dante This would assume the existence of a Secret called cluster-example-dante , containing a username and password. The username should match the role we are setting the password for. For example, : apiVersion: v1 data: username: ZGFudGU= password: ZGFudGU= kind: Secret metadata: name: cluster-example-dante labels: cnpg.io/reload: \"true\" type: kubernetes.io/basic-auth If there is no passwordSecret specified for a role, the instance manager will not try to CREATE / ALTER the role with a password. This keeps with PostgreSQL conventions, where ALTER will not update passwords unless directed to with WITH PASSWORD . If a role was initially created with a password, and we would like to set the password to NULL in PostgreSQL, this necessitates being explicit on the part of the user of CloudNativePG. To distinguish \"no password provided in spec\" from \"set the password to NULL\", the field DisablePassword should be used. Imagine we decided we would like to have no password on the dante role in the database. In such case we would specify the following: managed: roles: - name: dante ensure: present [\u2026 snipped \u2026] disablePassword: true NOTE: it is considered an error to set both passwordSecret and disablePassword on a given role. This configuration will be rejected by the validation webhook. Password expiry, VALID UNTIL The VALID UNTIL role attribute in PostgreSQL controls password expiry. Roles created without VALID UNTIL specified get NULL by default in PostgreSQL, meaning that their password will never expire. PostgreSQL uses a timestamp type for VALID UNTIL , which includes support for the value 'infinity' indicating that the password never expires. Please see the PostgreSQL documentation for reference. With declarative role management, the validUntil attribute for managed roles controls password expiry. validUntil can only take: a Kubernetes timestamp, or be omitted (defaulting to null ) In the first case, the given validUntil timestamp will be set in the database as the VALID UNTIL attribute of the role. In the second case (omitted validUntil ) the operator will ensure password never expires, mirroring the behavior of PostgreSQL. Specifically: in case of new role, it will omit the VALID UNTIL clause in the role creation statement in case of existing role, it will set VALID UNTIL to infinity if VALID UNTIL was not set to NULL in the database (this is due to PostgreSQL not allowing VALID UNTIL NULL in the ALTER ROLE SQL statement) Warning New roles created without passwordSecret will have a NULL password inside PostgreSQL. Password hashed You can also provide pre-encrypted passwords by specifying the password in MD5/SCRAM-SHA-256 hash format: kind: Secret type: kubernetes.io/basic-auth metadata: name: cluster-example-cavalcanti labels: cnpg.io/reload: \"true\" apiVersion: v1 stringData: username: cavalcanti password: SCRAM-SHA-256$<iteration count>:<salt>$<StoredKey>:<ServerKey> Unrealizable role configurations In PostgreSQL, in some cases, commands cannot be honored by the database and will be rejected. Please refer to the PostgreSQL documentation on error codes for details. Role operations can produce such fundamental errors. Two examples: We ask PostgreSQL to create the role petrarca as a member of the role (group) poets , but poets does not exist. We ask PostgreSQL to drop the role dante , but the role dante is the owner of the database inferno . These fundamental errors cannot be fixed by the database, nor the CloudNativePG operator, without clarification from the human administrator. The two examples above could be fixed by creating the role poets or dropping the database inferno respectively, but they might have originated due to human error, and in such case, the \"fix\" proposed might be the wrong thing to do. CloudNativePG will record when such fundamental errors occur, and will display them in the cluster Status. Which segues into\u2026 Status of managed roles The Cluster status includes a section for the managed roles' status, as shown below: status: [\u2026snipped\u2026] managedRolesStatus: byStatus: not-managed: - app pending-reconciliation: - dante - petrarca reconciled: - ariosto reserved: - postgres - streaming_replica cannotReconcile: dante: - 'could not perform DELETE on role dante: owner of database inferno' petrarca: - 'could not perform UPDATE_MEMBERSHIPS on role petrarca: role \"poets\" does not exist' Note the special sub-section cannotReconcile for operations the database (and CloudNativePG) cannot honor, and which require human intervention. This section covers roles reserved for operator use and those that are not under declarative management, providing a comprehensive view of the roles in the database instances. The kubectl plugin also shows the status of managed roles in its status sub-command: Managed roles status Status Roles ------ ----- pending-reconciliation petrarca reconciled app,dante reserved postgres,streaming_replica Irreconcilable roles Role Errors ---- ------ petrarca could not perform UPDATE_MEMBERSHIPS on role petrarca: role \"poets\" does not exist Important In terms of backward compatibility, declarative role management is designed to ignore roles that exist in the database but are not included in the spec. The lifecycle of these roles will continue to be managed within PostgreSQL, allowing CloudNativePG users to adopt this feature at their convenience.","title":"PostgreSQL Role Management"},{"location":"declarative_role_management/#postgresql-role-management","text":"From its inception, CloudNativePG has managed the creation of specific roles required in PostgreSQL instances: some reserved users, such as the postgres superuser, streaming_replica and cnpg_pooler_pgbouncer (when the PgBouncer Pooler is used) The application user, set as the low-privilege owner of the application database This process is described in the \"Bootstrap\" section. With the managed stanza in the cluster spec, CloudNativePG now provides full lifecycle management for roles specified in .spec.managed.roles . This feature enables declarative management of existing roles, as well as the creation of new roles if they are not already present in the database. Role creation will occur after the database bootstrapping is complete. An example manifest for a cluster with declarative role management can be found in the file cluster-example-with-roles.yaml . Here is an excerpt from that file: apiVersion: postgresql.cnpg.io/v1 kind: Cluster spec: managed: roles: - name: dante ensure: present comment: Dante Alighieri login: true superuser: false inRoles: - pg_monitor - pg_signal_backend The role specification in .spec.managed.roles adheres to the PostgreSQL structure and naming conventions . Please refer to the API reference for the full list of attributes you can define for each role. A few points are worth noting: The ensure attribute is not part of PostgreSQL. It enables declarative role management to create and remove roles. The two possible values are present (the default) and absent . The inherit attribute is true by default, following PostgreSQL conventions. The connectionLimit attribute defaults to -1, in line with PostgreSQL conventions. Role membership with inRoles defaults to no memberships. Declarative role management ensures that PostgreSQL instances align with the spec. If a user modifies role attributes directly in the database, the CloudNativePG operator will revert those changes during the next reconciliation cycle.","title":"PostgreSQL Role Management"},{"location":"declarative_role_management/#password-management","text":"The declarative role management feature includes reconciling of role passwords. Passwords are managed in fundamentally different ways in the Kubernetes world and in PostgreSQL, and as a result there are a few things to note. Managed role configurations may optionally specify the name of a Secret where the username and password are stored (encoded in Base64 as is usual in Kubernetes). For example: managed: roles: - name: dante ensure: present [\u2026 snipped \u2026] passwordSecret: name: cluster-example-dante This would assume the existence of a Secret called cluster-example-dante , containing a username and password. The username should match the role we are setting the password for. For example, : apiVersion: v1 data: username: ZGFudGU= password: ZGFudGU= kind: Secret metadata: name: cluster-example-dante labels: cnpg.io/reload: \"true\" type: kubernetes.io/basic-auth If there is no passwordSecret specified for a role, the instance manager will not try to CREATE / ALTER the role with a password. This keeps with PostgreSQL conventions, where ALTER will not update passwords unless directed to with WITH PASSWORD . If a role was initially created with a password, and we would like to set the password to NULL in PostgreSQL, this necessitates being explicit on the part of the user of CloudNativePG. To distinguish \"no password provided in spec\" from \"set the password to NULL\", the field DisablePassword should be used. Imagine we decided we would like to have no password on the dante role in the database. In such case we would specify the following: managed: roles: - name: dante ensure: present [\u2026 snipped \u2026] disablePassword: true NOTE: it is considered an error to set both passwordSecret and disablePassword on a given role. This configuration will be rejected by the validation webhook.","title":"Password management"},{"location":"declarative_role_management/#password-expiry-valid-until","text":"The VALID UNTIL role attribute in PostgreSQL controls password expiry. Roles created without VALID UNTIL specified get NULL by default in PostgreSQL, meaning that their password will never expire. PostgreSQL uses a timestamp type for VALID UNTIL , which includes support for the value 'infinity' indicating that the password never expires. Please see the PostgreSQL documentation for reference. With declarative role management, the validUntil attribute for managed roles controls password expiry. validUntil can only take: a Kubernetes timestamp, or be omitted (defaulting to null ) In the first case, the given validUntil timestamp will be set in the database as the VALID UNTIL attribute of the role. In the second case (omitted validUntil ) the operator will ensure password never expires, mirroring the behavior of PostgreSQL. Specifically: in case of new role, it will omit the VALID UNTIL clause in the role creation statement in case of existing role, it will set VALID UNTIL to infinity if VALID UNTIL was not set to NULL in the database (this is due to PostgreSQL not allowing VALID UNTIL NULL in the ALTER ROLE SQL statement) Warning New roles created without passwordSecret will have a NULL password inside PostgreSQL.","title":"Password expiry, VALID UNTIL"},{"location":"declarative_role_management/#password-hashed","text":"You can also provide pre-encrypted passwords by specifying the password in MD5/SCRAM-SHA-256 hash format: kind: Secret type: kubernetes.io/basic-auth metadata: name: cluster-example-cavalcanti labels: cnpg.io/reload: \"true\" apiVersion: v1 stringData: username: cavalcanti password: SCRAM-SHA-256$<iteration count>:<salt>$<StoredKey>:<ServerKey>","title":"Password hashed"},{"location":"declarative_role_management/#unrealizable-role-configurations","text":"In PostgreSQL, in some cases, commands cannot be honored by the database and will be rejected. Please refer to the PostgreSQL documentation on error codes for details. Role operations can produce such fundamental errors. Two examples: We ask PostgreSQL to create the role petrarca as a member of the role (group) poets , but poets does not exist. We ask PostgreSQL to drop the role dante , but the role dante is the owner of the database inferno . These fundamental errors cannot be fixed by the database, nor the CloudNativePG operator, without clarification from the human administrator. The two examples above could be fixed by creating the role poets or dropping the database inferno respectively, but they might have originated due to human error, and in such case, the \"fix\" proposed might be the wrong thing to do. CloudNativePG will record when such fundamental errors occur, and will display them in the cluster Status. Which segues into\u2026","title":"Unrealizable role configurations"},{"location":"declarative_role_management/#status-of-managed-roles","text":"The Cluster status includes a section for the managed roles' status, as shown below: status: [\u2026snipped\u2026] managedRolesStatus: byStatus: not-managed: - app pending-reconciliation: - dante - petrarca reconciled: - ariosto reserved: - postgres - streaming_replica cannotReconcile: dante: - 'could not perform DELETE on role dante: owner of database inferno' petrarca: - 'could not perform UPDATE_MEMBERSHIPS on role petrarca: role \"poets\" does not exist' Note the special sub-section cannotReconcile for operations the database (and CloudNativePG) cannot honor, and which require human intervention. This section covers roles reserved for operator use and those that are not under declarative management, providing a comprehensive view of the roles in the database instances. The kubectl plugin also shows the status of managed roles in its status sub-command: Managed roles status Status Roles ------ ----- pending-reconciliation petrarca reconciled app,dante reserved postgres,streaming_replica Irreconcilable roles Role Errors ---- ------ petrarca could not perform UPDATE_MEMBERSHIPS on role petrarca: role \"poets\" does not exist Important In terms of backward compatibility, declarative role management is designed to ignore roles that exist in the database but are not included in the spec. The lifecycle of these roles will continue to be managed within PostgreSQL, allowing CloudNativePG users to adopt this feature at their convenience.","title":"Status of managed roles"},{"location":"e2e/","text":"End-to-End Tests CloudNativePG is automatically tested after each commit via a suite of End-to-end (E2E) tests (or integration tests) which ensure that the operator correctly deploys and manages PostgreSQL clusters. Kubernetes versions 1.27 through 1.32, and PostgreSQL versions 13 through 17, are tested for each commit, helping detect bugs at an early stage of the development process. For each tested version of Kubernetes and PostgreSQL, a Kubernetes cluster is created using kind , run on the GitHub Actions platform, and the following suite of E2E tests are performed on that cluster: Basic: Installation of the operator Creation of a Cluster Usage of a persistent volume for data storage Service connectivity: Connection via services, including read-only Connection via user-provided server and/or client certificates PgBouncer Self-healing: Failover Switchover Primary endpoint switch in case of failover in less than 10 seconds Primary endpoint switch in case of switchover in less than 20 seconds Recover from a degraded state in less than 60 seconds PVC Deletion Corrupted PVC Backup and Restore: Backup and restore from Volume Snapshots Backup and ScheduledBackups execution using Barman Cloud on S3 Backup and ScheduledBackups execution using Barman Cloud on Azure blob storage Restore from backup using Barman Cloud on S3 Restore from backup using Barman Cloud on Azure blob storage Point-in-time recovery (PITR) on Azure, S3 storage Wal-Restore (sequential / parallel) Operator: Operator Deployment Operator configuration via ConfigMap Operator pod deletion Operator pod eviction Operator upgrade Operator High Availability Observability: Metrics collection PgBouncer Metrics JSON log format Replication: Replication Slots Synchronous replication Scale-up and scale-down of a Cluster Logical replication via declarative Publication / Subscription Replica clusters Bootstrapping a replica cluster from backup Bootstrapping a replica cluster via streaming Bootstrapping via volume snapshots Detaching a replica cluster Plugin: Cluster Hibernation using CNPG plugin Fencing Creation of a connection certificate Postgres Configuration: Manage PostgreSQL configuration changes Rolling updates when changing PostgreSQL images Rolling updates when changing ImageCatalog/ClusterImageCatalog images Rolling updates on hot standby sensitive parameter changes Database initialization via InitDB Pod Scheduling: Tolerations and taints Pod affinity using NodeSelector Rolling updates on PodSpec drift detection In-place upgrades Multi-Arch availability Cluster Metadata: ConfigMap for Cluster Labels and Annotations Object metadata Recovery: Data corruption pg_basebackup Importing Databases: Microservice approach Monolith approach Storage: Storage expansion Dedicated PG_WAL persistent volume Security: AppArmor annotation propagation. Executed only on Azure environment Maintenance: Node Drain with maintenance window Node Drain with single-instance cluster with/without Pod Disruption Budgets Hibernation Declarative hibernation / rehydration Volume snapshots Backup/restore for cold and online snapshots Point-in-time recovery (PITR) for cold and online snapshots Backups via plugin for cold and online snapshots Declarative backups for cold and online snapshots Managed Roles Creation and update of managed roles Password maintenance using Kubernetes secrets Tablespaces Declarative creation of tablespaces Declarative creation of temporary tablespaces Backup / recovery from object storage Backup / recovery from volume snapshots Declarative databases Declarative creation of databases with default (retain) reclaim policy Declarative creation of databases with delete reclaim policy Major version upgrade Upgrade to the latest major version","title":"End-to-End Tests"},{"location":"e2e/#end-to-end-tests","text":"CloudNativePG is automatically tested after each commit via a suite of End-to-end (E2E) tests (or integration tests) which ensure that the operator correctly deploys and manages PostgreSQL clusters. Kubernetes versions 1.27 through 1.32, and PostgreSQL versions 13 through 17, are tested for each commit, helping detect bugs at an early stage of the development process. For each tested version of Kubernetes and PostgreSQL, a Kubernetes cluster is created using kind , run on the GitHub Actions platform, and the following suite of E2E tests are performed on that cluster: Basic: Installation of the operator Creation of a Cluster Usage of a persistent volume for data storage Service connectivity: Connection via services, including read-only Connection via user-provided server and/or client certificates PgBouncer Self-healing: Failover Switchover Primary endpoint switch in case of failover in less than 10 seconds Primary endpoint switch in case of switchover in less than 20 seconds Recover from a degraded state in less than 60 seconds PVC Deletion Corrupted PVC Backup and Restore: Backup and restore from Volume Snapshots Backup and ScheduledBackups execution using Barman Cloud on S3 Backup and ScheduledBackups execution using Barman Cloud on Azure blob storage Restore from backup using Barman Cloud on S3 Restore from backup using Barman Cloud on Azure blob storage Point-in-time recovery (PITR) on Azure, S3 storage Wal-Restore (sequential / parallel) Operator: Operator Deployment Operator configuration via ConfigMap Operator pod deletion Operator pod eviction Operator upgrade Operator High Availability Observability: Metrics collection PgBouncer Metrics JSON log format Replication: Replication Slots Synchronous replication Scale-up and scale-down of a Cluster Logical replication via declarative Publication / Subscription Replica clusters Bootstrapping a replica cluster from backup Bootstrapping a replica cluster via streaming Bootstrapping via volume snapshots Detaching a replica cluster Plugin: Cluster Hibernation using CNPG plugin Fencing Creation of a connection certificate Postgres Configuration: Manage PostgreSQL configuration changes Rolling updates when changing PostgreSQL images Rolling updates when changing ImageCatalog/ClusterImageCatalog images Rolling updates on hot standby sensitive parameter changes Database initialization via InitDB Pod Scheduling: Tolerations and taints Pod affinity using NodeSelector Rolling updates on PodSpec drift detection In-place upgrades Multi-Arch availability Cluster Metadata: ConfigMap for Cluster Labels and Annotations Object metadata Recovery: Data corruption pg_basebackup Importing Databases: Microservice approach Monolith approach Storage: Storage expansion Dedicated PG_WAL persistent volume Security: AppArmor annotation propagation. Executed only on Azure environment Maintenance: Node Drain with maintenance window Node Drain with single-instance cluster with/without Pod Disruption Budgets Hibernation Declarative hibernation / rehydration Volume snapshots Backup/restore for cold and online snapshots Point-in-time recovery (PITR) for cold and online snapshots Backups via plugin for cold and online snapshots Declarative backups for cold and online snapshots Managed Roles Creation and update of managed roles Password maintenance using Kubernetes secrets Tablespaces Declarative creation of tablespaces Declarative creation of temporary tablespaces Backup / recovery from object storage Backup / recovery from volume snapshots Declarative databases Declarative creation of databases with default (retain) reclaim policy Declarative creation of databases with delete reclaim policy Major version upgrade Upgrade to the latest major version","title":"End-to-End Tests"},{"location":"failover/","text":"Automated failover In the case of unexpected errors on the primary for longer than the .spec.failoverDelay (by default 0 seconds), the cluster will go into failover mode . This may happen, for example, when: The primary pod has a disk failure The primary pod is deleted The postgres container on the primary has any kind of sustained failure In the failover scenario, the primary cannot be assumed to be working properly. After cases like the ones above, the readiness probe for the primary pod will start failing. This will be picked up in the controller's reconciliation loop. The controller will initiate the failover process, in two steps: First, it will mark the TargetPrimary as pending . This change of state will force the primary pod to shutdown, to ensure the WAL receivers on the replicas will stop. The cluster will be marked in failover phase (\"Failing over\"). Once all WAL receivers are stopped, there will be a leader election, and a new primary will be named. The chosen instance will initiate promotion to primary, and, after this is completed, the cluster will resume normal operations. Meanwhile, the former primary pod will restart, detect that it is no longer the primary, and become a replica node. Important The two-phase procedure helps ensure the WAL receivers can stop in an orderly fashion, and that the failing primary will not start streaming WALs again upon restart. These safeguards prevent timeline discrepancies between the new primary and the replicas. During the time the failing primary is being shut down: It will first try a PostgreSQL's fast shutdown with .spec.switchoverDelay seconds as timeout. This graceful shutdown will attempt to archive pending WALs. If the fast shutdown fails, or its timeout is exceeded, a PostgreSQL's immediate shutdown is initiated. Info \"Fast\" mode does not wait for PostgreSQL clients to disconnect and will terminate an online backup in progress. All active transactions are rolled back and clients are forcibly disconnected, then the server is shut down. \"Immediate\" mode will abort all PostgreSQL server processes immediately, without a clean shutdown. RTO and RPO impact Failover may result in the service being impacted ( RTO ) and/or data being lost ( RPO ): During the time when the primary has started to fail, and before the controller starts failover procedures, queries in transit, WAL writes, checkpoints and similar operations, may fail. Once the fast shutdown command has been issued, the cluster will no longer accept connections, so service will be impacted but no data will be lost. If the fast shutdown fails, the immediate shutdown will stop any pending processes, including WAL writing. Data may be lost. During the time the primary is shutting down and a new primary hasn't yet started, the cluster will operate without a primary and thus be impaired - but with no data loss. Note The timeout that controls fast shutdown is set by .spec.switchoverDelay , as in the case of a switchover. Increasing the time for fast shutdown is safer from an RPO point of view, but possibly delays the return to normal operation - negatively affecting RTO. Warning As already mentioned in the \"Instance Manager\" section when explaining the switchover process, the .spec.switchoverDelay option affects the RPO and RTO of your PostgreSQL database. Setting it to a low value, might favor RTO over RPO but lead to data loss at cluster level and/or backup level. On the contrary, setting it to a high value, might remove the risk of data loss while leaving the cluster without an active primary for a longer time during the switchover. Delayed failover As anticipated above, the .spec.failoverDelay option allows you to delay the start of the failover procedure by a number of seconds after the primary has been detected to be unhealthy. By default, this setting is set to 0 , triggering the failover procedure immediately. Sometimes failing over to a new primary can be more disruptive than waiting for the primary to come back online. This is especially true of network disruptions where multiple tiers are affected (i.e., downstream logical subscribers) or when the time to perform the failover is longer than the expected outage. Enabling a new configuration option to delay failover provides a mechanism to prevent premature failover for short-lived network or node instability. Failover Quorum (Quorum-based Failover) Warning Failover quorum is an experimental feature introduced in version 1.27.0. Use with caution in production environments. Failover quorum is a mechanism that enhances data durability and safety during failover events in CloudNativePG-managed PostgreSQL clusters. Quorum-based failover allows the controller to determine whether to promote a replica to primary based on the state of a quorum of replicas. This is useful when stronger data durability is required than the one offered by synchronous replication and default automated failover procedures. When synchronous replication is not enabled, some data loss is expected and accepted during failover, as a replica may lag behind the primary when promoted. With synchronous replication enabled, the guarantee is that the application will not receive explicit acknowledgment of the successful commit of a transaction until the WAL data is known to be safely received by all required synchronous standbys. This is not enough to guarantee that the operator is able to promote the most advanced replica. For example, in a three-node cluster with synchronous replication set to ANY 1 (...) , data is written to the primary and one standby before a commit is acknowledged. If both the primary and the aligned standby become unavailable (such as during a network partition), the remaining replica may not have the latest data. Promoting it could lose some data that the application considered committed. Quorum-based failover addresses this risk by ensuring that failover only occurs if the operator can confirm the presence of all synchronously committed data in the instance to promote, and it does not occur otherwise. This feature allows users to choose their preferred trade-off between data durability and data availability. Failover quorum can be enabled by setting the annotation alpha.cnpg.io/failoverQuorum=\"true\" in the Cluster resource. Info When this feature is out of the experimental phase, the annotation alpha.cnpg.io/failoverQuorum will be replaced by a configuration option in the Cluster resource. How it works Before promoting a replica to primary, the operator performs a quorum check, following the principles of the Dynamo R + W > N consistency model 1 . In the quorum failover, these values assume the following meaning: R is the number of promotable replicas (read quorum); W is the number of replicas that must acknowledge the write before the COMMIT is returned to the client (write quorum); N is the total number of potentially synchronous replicas; Promotable replicas are replicas that have these properties: are part of the cluster; are able to report their state to the operator; are potentially synchronous; If R + W > N , then we can be sure that among the promotable replicas there is at least one that has confirmed all the synchronous commits, and we can safely promote it to primary. If this is not the case, the controller will not promote any replica to primary, and will wait for the situation to change. Users can force a promotion of a replica to primary through the kubectl cnpg promote command even if the quorum check is failing. Warning Manual promotion should only be used as a last resort. Before proceeding, make sure you fully understand the risk of data loss and carefully consider the consequences of prioritizing the resumption of write workloads for your applications. An additional CRD is used to track the quorum state of the cluster. A Cluster with the quorum failover enabled will have a FailoverQuorum resource with the same name as the Cluster resource. The FailoverQuorum CR is created by the controller when the quorum failover is enabled, and it is updated by the primary instance during its reconciliation loop, and read by the operator during quorum checks. It is used to track the latest known configuration of the synchronous replication. Important Users should not modify the FailoverQuorum resource directly. During PostgreSQL configuration changes, when it is not possible to determine the configuration, the FailoverQuorum resource will be reset, preventing any failover until the new configuration is applied. The FailoverQuorum resource works in conjunction with PostgreSQL synchronous replication. Warning There is no guarantee that COMMIT operations returned to the client but that have not been performed synchronously, such as those made explicitly disabling synchronous replication with SET synchronous_commit TO local , will be present on a promoted replica. Quorum Failover Example Scenarios In the following scenarios, R is the number of promotable replicas, W is the number of replicas that must acknowledge a write before commit, and N is the total number of potentially synchronous replicas. The \"Failover\" column indicates whether failover is allowed under quorum failover rules. Scenario 1: Three-node cluster, failing pod(s) A cluster with instances: 3 , synchronous.number=1 , and dataDurability=required . If only the primary fails, two promotable replicas remain (R=2). Since R + W > N (2 + 1 > 2), failover is allowed and safe. If both the primary and one replica fail, only one promotable replica remains (R=1). Since R + W = N (1 + 1 = 2), failover is not allowed to prevent possible data loss. R W N Failover 2 1 2 \u2705 1 1 2 \u274c Scenario 2: Three-node cluster, network partition A cluster with instances: 3 , synchronous.number: 1 , and dataDurability: required experiences a network partition. If the operator can communicate with the primary, no failover occurs. The cluster can be impacted if the primary cannot reach any standby, since it won't commit transactions due to synchronous replication requirements. If the operator cannot reach the primary but can reach both replicas (R=2), failover is allowed. If the operator can reach only one replica (R=1), failover is not allowed, as the synchronous one may be the other one. R W N Failover 2 1 2 \u2705 1 1 2 \u274c Scenario 3: Five-node cluster, network partition A cluster with instances: 5 , synchronous.number=2 , and dataDurability=required experiences a network partition. If the operator can communicate with the primary, no failover occurs. The cluster can be impacted if the primary cannot reach at least two standbys, as since it won't commit transactions due to synchronous replication requirements. If the operator cannot reach the primary but can reach at least three replicas (R=3), failover is allowed. If the operator can reach only two replicas (R=2), failover is not allowed, as the synchronous one may be the other one. R W N Failover 3 2 4 \u2705 2 2 4 \u274c Scenario 4: Three-node cluster with remote synchronous replicas A cluster with instances: 3 and remote synchronous replicas defined in standbyNamesPre or standbyNamesPost . We assume that the primary is failing. This scenario requires an important consideration. Replicas listed in standbyNamesPre or standbyNamesPost are not counted in R (they cannot be promoted), but are included in N (they may have received synchronous writes). So, if synchronous.number <= len(standbyNamesPre) + len(standbyNamesPost) , failover is not possible, as no local replica can be guaranteed to have the required data. The operator prevents such configurations during validation, but some invalid configurations are shown below for clarity. Example configurations: Configuration #1 (valid): instances: 3 postgresql: synchronous: method: any number: 2 standbyNamesPre: - angus In this configuration, when the primary fails, R = 2 (the local replicas), W = 2 , and N = 3 (2 local replicas + 1 remote), allowing failover. In case of an additional replica failing ( R = 1 ) failover is not allowed. R W N Failover 3 2 4 \u2705 2 2 4 \u274c Configuration #2 (invalid): instances: 3 postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus In this configuration, R = 2 (the local replicas), W = 1 , and N = 3 (2 local replicas + 1 remote). Failover is not possible in this setup, so quorum failover can not be enabled with this configuration. R W N Failover 1 1 2 \u274c Configuration #3 (invalid): instances: 3 postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 0 standbyNamesPre: - angus - malcolm In this configuration, R = 0 (the local replicas), W = 1 , and N = 2 (0 local replicas + 2 remote). Failover is not possible in this setup, so quorum failover can not be enabled with this configuration. R W N Failover 0 1 2 \u274c Scenario 5: Three-node cluster, preferred data durability, network partition Consider a cluster with instances: 3 , synchronous.number=1 , and dataDurability=preferred that experiences a network partition. If the operator can communicate with both the primary and the API server, the primary continues to operate, removing unreachable standbys from the synchronous_standby_names set. If the primary cannot reach the operator or API server, a quorum check is performed. The FailoverQuorum status cannot have changed, as the primary cannot have received new configuration. If the operator can reach both replicas, failover is allowed ( R=2 ). If only one replica is reachable ( R=1 ), failover is not allowed. R W N Failover 2 1 2 \u2705 1 1 2 \u274c Dynamo: Amazon\u2019s highly available key-value store \u21a9","title":"Automated failover"},{"location":"failover/#automated-failover","text":"In the case of unexpected errors on the primary for longer than the .spec.failoverDelay (by default 0 seconds), the cluster will go into failover mode . This may happen, for example, when: The primary pod has a disk failure The primary pod is deleted The postgres container on the primary has any kind of sustained failure In the failover scenario, the primary cannot be assumed to be working properly. After cases like the ones above, the readiness probe for the primary pod will start failing. This will be picked up in the controller's reconciliation loop. The controller will initiate the failover process, in two steps: First, it will mark the TargetPrimary as pending . This change of state will force the primary pod to shutdown, to ensure the WAL receivers on the replicas will stop. The cluster will be marked in failover phase (\"Failing over\"). Once all WAL receivers are stopped, there will be a leader election, and a new primary will be named. The chosen instance will initiate promotion to primary, and, after this is completed, the cluster will resume normal operations. Meanwhile, the former primary pod will restart, detect that it is no longer the primary, and become a replica node. Important The two-phase procedure helps ensure the WAL receivers can stop in an orderly fashion, and that the failing primary will not start streaming WALs again upon restart. These safeguards prevent timeline discrepancies between the new primary and the replicas. During the time the failing primary is being shut down: It will first try a PostgreSQL's fast shutdown with .spec.switchoverDelay seconds as timeout. This graceful shutdown will attempt to archive pending WALs. If the fast shutdown fails, or its timeout is exceeded, a PostgreSQL's immediate shutdown is initiated. Info \"Fast\" mode does not wait for PostgreSQL clients to disconnect and will terminate an online backup in progress. All active transactions are rolled back and clients are forcibly disconnected, then the server is shut down. \"Immediate\" mode will abort all PostgreSQL server processes immediately, without a clean shutdown.","title":"Automated failover"},{"location":"failover/#rto-and-rpo-impact","text":"Failover may result in the service being impacted ( RTO ) and/or data being lost ( RPO ): During the time when the primary has started to fail, and before the controller starts failover procedures, queries in transit, WAL writes, checkpoints and similar operations, may fail. Once the fast shutdown command has been issued, the cluster will no longer accept connections, so service will be impacted but no data will be lost. If the fast shutdown fails, the immediate shutdown will stop any pending processes, including WAL writing. Data may be lost. During the time the primary is shutting down and a new primary hasn't yet started, the cluster will operate without a primary and thus be impaired - but with no data loss. Note The timeout that controls fast shutdown is set by .spec.switchoverDelay , as in the case of a switchover. Increasing the time for fast shutdown is safer from an RPO point of view, but possibly delays the return to normal operation - negatively affecting RTO. Warning As already mentioned in the \"Instance Manager\" section when explaining the switchover process, the .spec.switchoverDelay option affects the RPO and RTO of your PostgreSQL database. Setting it to a low value, might favor RTO over RPO but lead to data loss at cluster level and/or backup level. On the contrary, setting it to a high value, might remove the risk of data loss while leaving the cluster without an active primary for a longer time during the switchover.","title":"RTO and RPO impact"},{"location":"failover/#delayed-failover","text":"As anticipated above, the .spec.failoverDelay option allows you to delay the start of the failover procedure by a number of seconds after the primary has been detected to be unhealthy. By default, this setting is set to 0 , triggering the failover procedure immediately. Sometimes failing over to a new primary can be more disruptive than waiting for the primary to come back online. This is especially true of network disruptions where multiple tiers are affected (i.e., downstream logical subscribers) or when the time to perform the failover is longer than the expected outage. Enabling a new configuration option to delay failover provides a mechanism to prevent premature failover for short-lived network or node instability.","title":"Delayed failover"},{"location":"failover/#failover-quorum-quorum-based-failover","text":"Warning Failover quorum is an experimental feature introduced in version 1.27.0. Use with caution in production environments. Failover quorum is a mechanism that enhances data durability and safety during failover events in CloudNativePG-managed PostgreSQL clusters. Quorum-based failover allows the controller to determine whether to promote a replica to primary based on the state of a quorum of replicas. This is useful when stronger data durability is required than the one offered by synchronous replication and default automated failover procedures. When synchronous replication is not enabled, some data loss is expected and accepted during failover, as a replica may lag behind the primary when promoted. With synchronous replication enabled, the guarantee is that the application will not receive explicit acknowledgment of the successful commit of a transaction until the WAL data is known to be safely received by all required synchronous standbys. This is not enough to guarantee that the operator is able to promote the most advanced replica. For example, in a three-node cluster with synchronous replication set to ANY 1 (...) , data is written to the primary and one standby before a commit is acknowledged. If both the primary and the aligned standby become unavailable (such as during a network partition), the remaining replica may not have the latest data. Promoting it could lose some data that the application considered committed. Quorum-based failover addresses this risk by ensuring that failover only occurs if the operator can confirm the presence of all synchronously committed data in the instance to promote, and it does not occur otherwise. This feature allows users to choose their preferred trade-off between data durability and data availability. Failover quorum can be enabled by setting the annotation alpha.cnpg.io/failoverQuorum=\"true\" in the Cluster resource. Info When this feature is out of the experimental phase, the annotation alpha.cnpg.io/failoverQuorum will be replaced by a configuration option in the Cluster resource.","title":"Failover Quorum (Quorum-based Failover)"},{"location":"failover/#how-it-works","text":"Before promoting a replica to primary, the operator performs a quorum check, following the principles of the Dynamo R + W > N consistency model 1 . In the quorum failover, these values assume the following meaning: R is the number of promotable replicas (read quorum); W is the number of replicas that must acknowledge the write before the COMMIT is returned to the client (write quorum); N is the total number of potentially synchronous replicas; Promotable replicas are replicas that have these properties: are part of the cluster; are able to report their state to the operator; are potentially synchronous; If R + W > N , then we can be sure that among the promotable replicas there is at least one that has confirmed all the synchronous commits, and we can safely promote it to primary. If this is not the case, the controller will not promote any replica to primary, and will wait for the situation to change. Users can force a promotion of a replica to primary through the kubectl cnpg promote command even if the quorum check is failing. Warning Manual promotion should only be used as a last resort. Before proceeding, make sure you fully understand the risk of data loss and carefully consider the consequences of prioritizing the resumption of write workloads for your applications. An additional CRD is used to track the quorum state of the cluster. A Cluster with the quorum failover enabled will have a FailoverQuorum resource with the same name as the Cluster resource. The FailoverQuorum CR is created by the controller when the quorum failover is enabled, and it is updated by the primary instance during its reconciliation loop, and read by the operator during quorum checks. It is used to track the latest known configuration of the synchronous replication. Important Users should not modify the FailoverQuorum resource directly. During PostgreSQL configuration changes, when it is not possible to determine the configuration, the FailoverQuorum resource will be reset, preventing any failover until the new configuration is applied. The FailoverQuorum resource works in conjunction with PostgreSQL synchronous replication. Warning There is no guarantee that COMMIT operations returned to the client but that have not been performed synchronously, such as those made explicitly disabling synchronous replication with SET synchronous_commit TO local , will be present on a promoted replica.","title":"How it works"},{"location":"failover/#quorum-failover-example-scenarios","text":"In the following scenarios, R is the number of promotable replicas, W is the number of replicas that must acknowledge a write before commit, and N is the total number of potentially synchronous replicas. The \"Failover\" column indicates whether failover is allowed under quorum failover rules.","title":"Quorum Failover Example Scenarios"},{"location":"failover/#scenario-1-three-node-cluster-failing-pods","text":"A cluster with instances: 3 , synchronous.number=1 , and dataDurability=required . If only the primary fails, two promotable replicas remain (R=2). Since R + W > N (2 + 1 > 2), failover is allowed and safe. If both the primary and one replica fail, only one promotable replica remains (R=1). Since R + W = N (1 + 1 = 2), failover is not allowed to prevent possible data loss. R W N Failover 2 1 2 \u2705 1 1 2 \u274c","title":"Scenario 1: Three-node cluster, failing pod(s)"},{"location":"failover/#scenario-2-three-node-cluster-network-partition","text":"A cluster with instances: 3 , synchronous.number: 1 , and dataDurability: required experiences a network partition. If the operator can communicate with the primary, no failover occurs. The cluster can be impacted if the primary cannot reach any standby, since it won't commit transactions due to synchronous replication requirements. If the operator cannot reach the primary but can reach both replicas (R=2), failover is allowed. If the operator can reach only one replica (R=1), failover is not allowed, as the synchronous one may be the other one. R W N Failover 2 1 2 \u2705 1 1 2 \u274c","title":"Scenario 2: Three-node cluster, network partition"},{"location":"failover/#scenario-3-five-node-cluster-network-partition","text":"A cluster with instances: 5 , synchronous.number=2 , and dataDurability=required experiences a network partition. If the operator can communicate with the primary, no failover occurs. The cluster can be impacted if the primary cannot reach at least two standbys, as since it won't commit transactions due to synchronous replication requirements. If the operator cannot reach the primary but can reach at least three replicas (R=3), failover is allowed. If the operator can reach only two replicas (R=2), failover is not allowed, as the synchronous one may be the other one. R W N Failover 3 2 4 \u2705 2 2 4 \u274c","title":"Scenario 3: Five-node cluster, network partition"},{"location":"failover/#scenario-4-three-node-cluster-with-remote-synchronous-replicas","text":"A cluster with instances: 3 and remote synchronous replicas defined in standbyNamesPre or standbyNamesPost . We assume that the primary is failing. This scenario requires an important consideration. Replicas listed in standbyNamesPre or standbyNamesPost are not counted in R (they cannot be promoted), but are included in N (they may have received synchronous writes). So, if synchronous.number <= len(standbyNamesPre) + len(standbyNamesPost) , failover is not possible, as no local replica can be guaranteed to have the required data. The operator prevents such configurations during validation, but some invalid configurations are shown below for clarity. Example configurations: Configuration #1 (valid): instances: 3 postgresql: synchronous: method: any number: 2 standbyNamesPre: - angus In this configuration, when the primary fails, R = 2 (the local replicas), W = 2 , and N = 3 (2 local replicas + 1 remote), allowing failover. In case of an additional replica failing ( R = 1 ) failover is not allowed. R W N Failover 3 2 4 \u2705 2 2 4 \u274c Configuration #2 (invalid): instances: 3 postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus In this configuration, R = 2 (the local replicas), W = 1 , and N = 3 (2 local replicas + 1 remote). Failover is not possible in this setup, so quorum failover can not be enabled with this configuration. R W N Failover 1 1 2 \u274c Configuration #3 (invalid): instances: 3 postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 0 standbyNamesPre: - angus - malcolm In this configuration, R = 0 (the local replicas), W = 1 , and N = 2 (0 local replicas + 2 remote). Failover is not possible in this setup, so quorum failover can not be enabled with this configuration. R W N Failover 0 1 2 \u274c","title":"Scenario 4: Three-node cluster with remote synchronous replicas"},{"location":"failover/#scenario-5-three-node-cluster-preferred-data-durability-network-partition","text":"Consider a cluster with instances: 3 , synchronous.number=1 , and dataDurability=preferred that experiences a network partition. If the operator can communicate with both the primary and the API server, the primary continues to operate, removing unreachable standbys from the synchronous_standby_names set. If the primary cannot reach the operator or API server, a quorum check is performed. The FailoverQuorum status cannot have changed, as the primary cannot have received new configuration. If the operator can reach both replicas, failover is allowed ( R=2 ). If only one replica is reachable ( R=1 ), failover is not allowed. R W N Failover 2 1 2 \u2705 1 1 2 \u274c Dynamo: Amazon\u2019s highly available key-value store \u21a9","title":"Scenario 5: Three-node cluster, preferred data durability, network partition"},{"location":"failure_modes/","text":"Failure Modes Note In previous versions of CloudNativePG, this page included specific failure scenarios. Since these largely follow standard Kubernetes behavior, we have streamlined the content to avoid duplication of information that belongs to the underlying Kubernetes stack and is not specific to CloudNativePG. CloudNativePG adheres to standard Kubernetes principles for self-healing and high availability. We assume familiarity with core Kubernetes concepts such as storage classes, PVCs, nodes, and Pods. For CloudNativePG-specific details, refer to the \"Postgres Instance Manager\" section , which covers startup, liveness, and readiness probes, as well as the self-healing section below. Important If you are running CloudNativePG in production, we strongly recommend seeking professional support . Self-Healing Primary Failure If the primary Pod fails: The operator promotes the most up-to-date standby with the lowest replication lag. The -rw service is updated to point to the new primary. The failed Pod is removed from the -r and -rw services. Standby Pods begin replicating from the new primary. The former primary uses pg_rewind to re-synchronize if its PVC is available; otherwise, a new standby is created from a backup of the new primary. Standby Failure If a standby Pod fails: It is removed from the -r and -ro services. The Pod is restarted using its PVC if available; otherwise, a new Pod is created from a backup of the current primary. Once ready, the Pod is re-added to the -r and -ro services. Manual Intervention For failure scenarios not covered by automated recovery, manual intervention may be required. Important Do not perform manual operations without professional support . Disabling Reconciliation To temporarily disable the reconciliation loop for a PostgreSQL cluster, use the cnpg.io/reconciliationLoop annotation: metadata: name: cluster-example-no-reconcile annotations: cnpg.io/reconciliationLoop: \"disabled\" spec: # ... Use this annotation with extreme caution and only during emergency operations. Warning This annotation should be removed as soon as the issue is resolved. Leaving it in place prevents the operator from executing self-healing actions, including failover.","title":"Failure Modes"},{"location":"failure_modes/#failure-modes","text":"Note In previous versions of CloudNativePG, this page included specific failure scenarios. Since these largely follow standard Kubernetes behavior, we have streamlined the content to avoid duplication of information that belongs to the underlying Kubernetes stack and is not specific to CloudNativePG. CloudNativePG adheres to standard Kubernetes principles for self-healing and high availability. We assume familiarity with core Kubernetes concepts such as storage classes, PVCs, nodes, and Pods. For CloudNativePG-specific details, refer to the \"Postgres Instance Manager\" section , which covers startup, liveness, and readiness probes, as well as the self-healing section below. Important If you are running CloudNativePG in production, we strongly recommend seeking professional support .","title":"Failure Modes"},{"location":"failure_modes/#self-healing","text":"","title":"Self-Healing"},{"location":"failure_modes/#primary-failure","text":"If the primary Pod fails: The operator promotes the most up-to-date standby with the lowest replication lag. The -rw service is updated to point to the new primary. The failed Pod is removed from the -r and -rw services. Standby Pods begin replicating from the new primary. The former primary uses pg_rewind to re-synchronize if its PVC is available; otherwise, a new standby is created from a backup of the new primary.","title":"Primary Failure"},{"location":"failure_modes/#standby-failure","text":"If a standby Pod fails: It is removed from the -r and -ro services. The Pod is restarted using its PVC if available; otherwise, a new Pod is created from a backup of the current primary. Once ready, the Pod is re-added to the -r and -ro services.","title":"Standby Failure"},{"location":"failure_modes/#manual-intervention","text":"For failure scenarios not covered by automated recovery, manual intervention may be required. Important Do not perform manual operations without professional support .","title":"Manual Intervention"},{"location":"failure_modes/#disabling-reconciliation","text":"To temporarily disable the reconciliation loop for a PostgreSQL cluster, use the cnpg.io/reconciliationLoop annotation: metadata: name: cluster-example-no-reconcile annotations: cnpg.io/reconciliationLoop: \"disabled\" spec: # ... Use this annotation with extreme caution and only during emergency operations. Warning This annotation should be removed as soon as the issue is resolved. Leaving it in place prevents the operator from executing self-healing actions, including failover.","title":"Disabling Reconciliation"},{"location":"faq/","text":"Frequently Asked Questions (FAQ) Running PostgreSQL in Kubernetes Everyone knows that stateful workloads like PostgreSQL cannot run in Kubernetes. Why do you say the contrary? An independent research survey commissioned by the Data on Kubernetes Community in September 2021 revealed that half of the respondents run most of their production workloads on Kubernetes. 90% of them believe that Kubernetes is ready for stateful workloads, and 70% of them run databases in production. Databases like Postgres. However, according to them, significant challenges remain, such as the knowledge gap (Kubernetes and Cloud Native, in general, have a steep learning curve) and the quality of Kubernetes operators. The latter is the reason why we believe that an operator like CloudNativePG highly contributes to the success of your project. For database fanatics like us, a real game-changer has been the introduction of the support for local persistent volumes in Kubernetes 1.14 in April 2019 . CloudNativePG is built on immutable application containers. What does it mean? According to the microservice architectural pattern, a container is designed to run a single application or process. As a result, such container images are built to run the main application as the single entry point (the so-called PID 1 process). In Kubernetes terms, the application is referred to as workload. Workloads can be stateless like a web application server or stateful like a database. Mapping this concept to PostgreSQL, an immutable application container is a single \"postgres\" process that is running and tied to a single and specific version - the one in the immutable container image. No other processes such as SSH or systemd, or syslog are allowed. Immutable Application Containers are in contrast with Mutable System Containers, which are still a very common way to interpret and use containers. Immutable means that a container won't be modified during its life: no updates, no patches, no configuration changes. If you must update the application code or apply a patch, you build a new image and redeploy it. Immutability makes deployments safer and more repeatable. For more information, please refer to \"Why EDB chose immutable application containers\" . What does Cloud Native mean? The Cloud Native Computing Foundation defines the term \" Cloud Native \". However, since the start of the Cloud Native PostgreSQL/CloudNativePG operator at 2ndQuadrant, the development team has been interpreting Cloud Native as three main concepts: An existing, healthy, genuine, and prosperous DevOps culture, founded on people, as well as principles and processes, which enables teams and organizations (as teams of teams) to continuously change so to innovate and accelerate the delivery of outcomes and produce value for the business in safer, more efficient, and more engaging ways A microservice architecture that is based on Immutable Application Containers A way to manage and orchestrate these containers, such as Kubernetes Currently, the standard de facto for container orchestration is Kubernetes, which automates the deployment, administration and scalability of Cloud Native Applications. Another definition of Cloud Native that resonates with us is the one defined by Ibryam and Hu\u00df in \"Kubernetes Patterns\", published by O'Reilly : Principles, Patterns, Tools to automate containerized microservices at scale Can I run CloudNativePG on bare metal Kubernetes? Yes, definitely. You can run Kubernetes on bare metal. And you can dedicate one or more physical worker nodes with locally attached storage to PostgreSQL workloads for maximum and predictable I/O performance. The actual Cloud Native PostgreSQL project, from which CloudNativePG originated, was born after a pilot project in 2019 that benchmarked storage and PostgreSQL on the same bare metal server, first directly in Linux, and then inside Kubernetes. As expected, the experiment showed only negligible performance impact introduced by the container running in Kubernetes through local persistent volumes, allowing the Cloud Native initiative to continue. Why should I use PostgreSQL replication instead of file system replication? Please read the \"Architecture: Synchronizing the state\" section. Why should I use an operator instead of running PostgreSQL as a container? The most basic approach to running PostgreSQL in Kubernetes is to have a pod, which is the smallest unit of deployment in Kubernetes, running a Postgres container with no replica. The volume hosting the Postgres data directory is mounted on the pod, and it usually resides on network storage. In this case, Kubernetes restarts the pod in case of a problem or moves it to another Kubernetes node. The most sophisticated approach is to run PostgreSQL using an operator. An operator is an extension of the Kubernetes controller and defines how a complex application works in business continuity contexts. The operator pattern is currently state of the art in Kubernetes for this purpose. An operator simulates the work of a human operator in an automated and programmatic way. Postgres is a complex application, and an operator not only needs to deploy a cluster (the first step), but also properly react after unexpected events. The typical example is that of a failover. An operator relies on Kubernetes for capabilities like self-healing, scalability, replication, high availability, backup, recovery, updates, access, resource control, storage management, and so on. It also facilitates the integration of a PostgreSQL cluster in the log management and monitoring infrastructure. CloudNativePG enables the definition of the desired state of a PostgreSQL cluster via declarative configuration. Kubernetes continuously makes sure that the current state of the infrastructure matches the desired one through reconciliation loops initiated by the Kubernetes controller. If the desired state and the actual state don't match, reconciliation loops trigger self-healing procedures. That's where an operator like CloudNativePG comes into play. Are there any other operators for Postgres out there? Yes, of course. And our advice is that you look at all of them and compare them with CloudNativePG before making your decision. You will see that most of these operators use an external failover management tool (Patroni or similar) and rely on StatefulSets. Here is a non exhaustive list, in chronological order from their publication on GitHub: Crunchy Data Postgres Operator (2017) Zalando Postgres Operator (2017) Stackgres (2020) Percona Operator for PostgreSQL (2021) Kubegres (2021) Feel free to report any relevant missing entry as a PR. Info The Data on Kubernetes Community (which includes some of our maintainers) is working on an independent and vendor neutral project to list the operators called Operator Feature Matrix . You say that CloudNativePG is a fully declarative operator. What do you mean by that? The easiest way is to explain declarative configuration through an example that highlights the differences with imperative configuration. In an imperative context, the state is defined as a series of tasks to be executed in sequence. So, we can get a three-node PostgreSQL cluster by creating the first instance, configuring the replication, cloning a second instance, and the third one. In a declarative approach, the state of a system is defined using configuration, namely: there's a PostgreSQL 13 cluster with two replicas. This approach highly simplifies change management operations, and when these are stored in source control systems like Git, it enables the Infrastructure as Code capability. And Kubernetes takes it farther than deployment, as it makes sure that our request is fulfilled at any time. What are the required skills to run PostgreSQL on Kubernetes? Running PostgreSQL on Kubernetes requires both PostgreSQL and Kubernetes skills in your DevOps team. The best experience is when database administrators familiarize themselves with Kubernetes core concepts and are able to interact with Kubernetes administrators. Our advice is for everyone that wants to fully exploit Cloud Native PostgreSQL to acquire the \"Certified Kubernetes Administrator (CKA)\" status from the CNCF certification program. Why isn't CloudNativePG using StatefulSets? CloudNativePG does not rely on StatefulSet resources, and instead manages the underlying PVCs directly by leveraging the selected storage class for dynamic provisioning. Please refer to the \"Custom Pod Controller\" section for details and reasons behind this decision. High availability What happens to the PostgreSQL clusters when the operator pod dies or it is not available for a certain amount of time? The CloudNativePG operator, among other things, is responsible for self-healing capabilities. As such, they might not be available during an outage of the operator. However, assuming that the outage does not affect the nodes where PostgreSQL clusters are running, the database will continue to serve normal operations, through the relevant Kubernetes services. Moreover, the instance manager , which runs inside each PostgreSQL pod will still work, making sure that the database server is up, including accessory services like logging, export of metrics, continuous archiving of WAL files, etc. To summarize: an outage of the operator does not necessarily imply a PostgreSQL database outage; it's like running a database without a DBA or system administrator. What are the reasons behind CloudNativePG not relying on a failover management tool like Patroni, repmgr, or Stolon? Although part of the team that develops CloudNativePG has been heavily involved in repmgr in the past, we decided to take a different approach and directly extend the Kubernetes controller and rely on the Kubernetes API server to hold the status of a Postgres cluster, and use it as the only source of truth to: control High Availability of a Postgres cluster primarily via automated failover and switchover, coordinating itself with the instance manager control the Kubernetes services, that is the entry points for your applications Should I manually resync a former primary with the new one following a failover? No. The operator does that automatically for you, and relies on pg_rewind to synchronize the former primary with the new one. Database management Why should I use PostgreSQL? We believe that PostgreSQL is the equivalent in the database area of what Linux represents in the operating system space. The current latest major version of Postgres is version 16, which ships out of the box: native streaming replication, both physical and logical continuous hot backup and point in time recovery declarative partitioning for horizontal table partitioning, which is a very well-known technique in the database area to improve vertical scalability on a single instance extensibility, with extensions like PostGIS for geographical databases parallel queries for vertical scalability JSON support, unleashing the multi-model hybrid database for both structured and unstructured data queried via standard SQL And so on ... How many databases should be hosted in a single PostgreSQL instance? Our recommendation is to dedicate a single PostgreSQL cluster (intended as primary and multiple standby servers) to a single database, entirely managed by a single microservice application. However, by leveraging the \"postgres\" superuser, it is possible to create as many users and databases as desired (subject to the available resources). The reason for this recommendation lies in the Cloud Native concept, based on microservices. In a pure microservice architecture, the microservice itself should own the data it manages exclusively. These could be flat files, queues, key-value stores, or, in our case, a PostgreSQL relational database containing both structured and unstructured data. The general idea is that only the microservice can access the database, including schema management and migrations. CloudNativePG has been designed to work this way out of the box, by default creating an application user and an application database owned by the aforementioned application user. Reserving a PostgreSQL instance to a single microservice owned database, enhances: resource management: in PostgreSQL, CPU, and memory constrained resources are generally handled at the instance level, not the database level, making it easier to integrate it with Kubernetes resource management policies at the pod level physical continuous backup and Point-In-Time-Recovery (PITR): given that PostgreSQL handles continuous backup and recovery at the instance level, having one database per instance simplifies PITR operations, differentiates retention policy management, and increases data protection of backups application updates: enable each application to decide their update policies without impacting other databases owned by different applications database updates: each application can decide which PostgreSQL version to use, and independently, when to upgrade to a different major version of PostgreSQL and at what conditions (e.g., cutover time) Is there an upper limit in database size for not considering Kubernetes? No, as Kubernetes is no different from virtual machines and bare metal as far as this is regarded. Practically, however, it depends on the available resources of your Kubernetes cluster. Our advice with very large databases (VLDB) is to consider a shared nothing architecture, where a Kubernetes worker node is dedicated to a single Postgres instance, with dedicated storage. We proved that this extreme architectural pattern works when we benchmarked running PostgreSQL on bare metal Kubernetes with local persistent volumes . Tablespaces and horizontal partitioning are data modeling techniques that you can use to improve the vertical scalability of you databases. How can I specify a time zone in the PostgreSQL cluster? PostgreSQL has an extensive support for time zones, as explained in the official documentation: Date time data types Client connections config options Although time zones can even be used at session, transaction and even as part of a query in PostgreSQL, a very common way is to set them up globally. With CloudNativePG you can configure the cluster level time zone in the .spec.postgresql.parameters section as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: pg-italy spec: instances: 1 postgresql: parameters: timezone: \"Europe/Rome\" storage: size: 1Gi The time zone can be verified with: $ kubectl exec -ti pg-italy-1 -c postgres -- psql -x -c \"SHOW timezone\" -[ RECORD 1 ]--------- TimeZone | Europe/Rome What is the recommended architecture for best business continuity outcomes? As covered in the \"Architecture\" section, the main recommendation is to adopt shared nothing architectures as much as possible, by leveraging the native capabilities and resources that Kubernetes provides in a single cluster, namely: availability zones: spread your instances across different availability zones in the same Kubernetes cluster worker nodes: as a consequence, make sure that your Postgres instances reside on different Kubernetes worker nodes storage: use dedicated storage for each worker node running Postgres Use at least one standby, preferably at least two, so that you can configure synchronous replication in the cluster, introducing RPO =0 for high availability. If you do not have availability zones - normally the case of on-premise installations - separate on worker nodes and storage. Properly setup continuous backup on a local/regional object store. The same architecture that is in a single Kubernetes cluster can be replicated in another Kubernetes cluster (normally in another geographical area or region) through the replica cluster feature, providing disaster recovery and high availability at global scale. You can use the WAL archive in the primary object store to feed the replica in the other region, without having to provide a streaming connection, if the default maximum RPO of 5 minutes is enough for you. How can instances be stopped or started? Please look at \"Fencing\" or \"Hibernation\" . What are the global objects such as roles and databases that are automatically created by CloudNativePG? The operator automatically creates a user for the application (by default called app ) and a database for the application (by default called app ) which is owned by the aforementioned user. This way, the database is ready for a microservice adoption, as developers can control migrations using the app user, without requiring superuser access. Teams can then create another user for read-write operations through the \"Declarative role management\" feature and assign the required GRANT to the tables.","title":"Frequently Asked Questions (FAQ)"},{"location":"faq/#frequently-asked-questions-faq","text":"","title":"Frequently Asked Questions (FAQ)"},{"location":"faq/#running-postgresql-in-kubernetes","text":"Everyone knows that stateful workloads like PostgreSQL cannot run in Kubernetes. Why do you say the contrary? An independent research survey commissioned by the Data on Kubernetes Community in September 2021 revealed that half of the respondents run most of their production workloads on Kubernetes. 90% of them believe that Kubernetes is ready for stateful workloads, and 70% of them run databases in production. Databases like Postgres. However, according to them, significant challenges remain, such as the knowledge gap (Kubernetes and Cloud Native, in general, have a steep learning curve) and the quality of Kubernetes operators. The latter is the reason why we believe that an operator like CloudNativePG highly contributes to the success of your project. For database fanatics like us, a real game-changer has been the introduction of the support for local persistent volumes in Kubernetes 1.14 in April 2019 . CloudNativePG is built on immutable application containers. What does it mean? According to the microservice architectural pattern, a container is designed to run a single application or process. As a result, such container images are built to run the main application as the single entry point (the so-called PID 1 process). In Kubernetes terms, the application is referred to as workload. Workloads can be stateless like a web application server or stateful like a database. Mapping this concept to PostgreSQL, an immutable application container is a single \"postgres\" process that is running and tied to a single and specific version - the one in the immutable container image. No other processes such as SSH or systemd, or syslog are allowed. Immutable Application Containers are in contrast with Mutable System Containers, which are still a very common way to interpret and use containers. Immutable means that a container won't be modified during its life: no updates, no patches, no configuration changes. If you must update the application code or apply a patch, you build a new image and redeploy it. Immutability makes deployments safer and more repeatable. For more information, please refer to \"Why EDB chose immutable application containers\" . What does Cloud Native mean? The Cloud Native Computing Foundation defines the term \" Cloud Native \". However, since the start of the Cloud Native PostgreSQL/CloudNativePG operator at 2ndQuadrant, the development team has been interpreting Cloud Native as three main concepts: An existing, healthy, genuine, and prosperous DevOps culture, founded on people, as well as principles and processes, which enables teams and organizations (as teams of teams) to continuously change so to innovate and accelerate the delivery of outcomes and produce value for the business in safer, more efficient, and more engaging ways A microservice architecture that is based on Immutable Application Containers A way to manage and orchestrate these containers, such as Kubernetes Currently, the standard de facto for container orchestration is Kubernetes, which automates the deployment, administration and scalability of Cloud Native Applications. Another definition of Cloud Native that resonates with us is the one defined by Ibryam and Hu\u00df in \"Kubernetes Patterns\", published by O'Reilly : Principles, Patterns, Tools to automate containerized microservices at scale Can I run CloudNativePG on bare metal Kubernetes? Yes, definitely. You can run Kubernetes on bare metal. And you can dedicate one or more physical worker nodes with locally attached storage to PostgreSQL workloads for maximum and predictable I/O performance. The actual Cloud Native PostgreSQL project, from which CloudNativePG originated, was born after a pilot project in 2019 that benchmarked storage and PostgreSQL on the same bare metal server, first directly in Linux, and then inside Kubernetes. As expected, the experiment showed only negligible performance impact introduced by the container running in Kubernetes through local persistent volumes, allowing the Cloud Native initiative to continue. Why should I use PostgreSQL replication instead of file system replication? Please read the \"Architecture: Synchronizing the state\" section. Why should I use an operator instead of running PostgreSQL as a container? The most basic approach to running PostgreSQL in Kubernetes is to have a pod, which is the smallest unit of deployment in Kubernetes, running a Postgres container with no replica. The volume hosting the Postgres data directory is mounted on the pod, and it usually resides on network storage. In this case, Kubernetes restarts the pod in case of a problem or moves it to another Kubernetes node. The most sophisticated approach is to run PostgreSQL using an operator. An operator is an extension of the Kubernetes controller and defines how a complex application works in business continuity contexts. The operator pattern is currently state of the art in Kubernetes for this purpose. An operator simulates the work of a human operator in an automated and programmatic way. Postgres is a complex application, and an operator not only needs to deploy a cluster (the first step), but also properly react after unexpected events. The typical example is that of a failover. An operator relies on Kubernetes for capabilities like self-healing, scalability, replication, high availability, backup, recovery, updates, access, resource control, storage management, and so on. It also facilitates the integration of a PostgreSQL cluster in the log management and monitoring infrastructure. CloudNativePG enables the definition of the desired state of a PostgreSQL cluster via declarative configuration. Kubernetes continuously makes sure that the current state of the infrastructure matches the desired one through reconciliation loops initiated by the Kubernetes controller. If the desired state and the actual state don't match, reconciliation loops trigger self-healing procedures. That's where an operator like CloudNativePG comes into play. Are there any other operators for Postgres out there? Yes, of course. And our advice is that you look at all of them and compare them with CloudNativePG before making your decision. You will see that most of these operators use an external failover management tool (Patroni or similar) and rely on StatefulSets. Here is a non exhaustive list, in chronological order from their publication on GitHub: Crunchy Data Postgres Operator (2017) Zalando Postgres Operator (2017) Stackgres (2020) Percona Operator for PostgreSQL (2021) Kubegres (2021) Feel free to report any relevant missing entry as a PR. Info The Data on Kubernetes Community (which includes some of our maintainers) is working on an independent and vendor neutral project to list the operators called Operator Feature Matrix . You say that CloudNativePG is a fully declarative operator. What do you mean by that? The easiest way is to explain declarative configuration through an example that highlights the differences with imperative configuration. In an imperative context, the state is defined as a series of tasks to be executed in sequence. So, we can get a three-node PostgreSQL cluster by creating the first instance, configuring the replication, cloning a second instance, and the third one. In a declarative approach, the state of a system is defined using configuration, namely: there's a PostgreSQL 13 cluster with two replicas. This approach highly simplifies change management operations, and when these are stored in source control systems like Git, it enables the Infrastructure as Code capability. And Kubernetes takes it farther than deployment, as it makes sure that our request is fulfilled at any time. What are the required skills to run PostgreSQL on Kubernetes? Running PostgreSQL on Kubernetes requires both PostgreSQL and Kubernetes skills in your DevOps team. The best experience is when database administrators familiarize themselves with Kubernetes core concepts and are able to interact with Kubernetes administrators. Our advice is for everyone that wants to fully exploit Cloud Native PostgreSQL to acquire the \"Certified Kubernetes Administrator (CKA)\" status from the CNCF certification program. Why isn't CloudNativePG using StatefulSets? CloudNativePG does not rely on StatefulSet resources, and instead manages the underlying PVCs directly by leveraging the selected storage class for dynamic provisioning. Please refer to the \"Custom Pod Controller\" section for details and reasons behind this decision.","title":"Running PostgreSQL in Kubernetes"},{"location":"faq/#high-availability","text":"What happens to the PostgreSQL clusters when the operator pod dies or it is not available for a certain amount of time? The CloudNativePG operator, among other things, is responsible for self-healing capabilities. As such, they might not be available during an outage of the operator. However, assuming that the outage does not affect the nodes where PostgreSQL clusters are running, the database will continue to serve normal operations, through the relevant Kubernetes services. Moreover, the instance manager , which runs inside each PostgreSQL pod will still work, making sure that the database server is up, including accessory services like logging, export of metrics, continuous archiving of WAL files, etc. To summarize: an outage of the operator does not necessarily imply a PostgreSQL database outage; it's like running a database without a DBA or system administrator. What are the reasons behind CloudNativePG not relying on a failover management tool like Patroni, repmgr, or Stolon? Although part of the team that develops CloudNativePG has been heavily involved in repmgr in the past, we decided to take a different approach and directly extend the Kubernetes controller and rely on the Kubernetes API server to hold the status of a Postgres cluster, and use it as the only source of truth to: control High Availability of a Postgres cluster primarily via automated failover and switchover, coordinating itself with the instance manager control the Kubernetes services, that is the entry points for your applications Should I manually resync a former primary with the new one following a failover? No. The operator does that automatically for you, and relies on pg_rewind to synchronize the former primary with the new one.","title":"High availability"},{"location":"faq/#database-management","text":"Why should I use PostgreSQL? We believe that PostgreSQL is the equivalent in the database area of what Linux represents in the operating system space. The current latest major version of Postgres is version 16, which ships out of the box: native streaming replication, both physical and logical continuous hot backup and point in time recovery declarative partitioning for horizontal table partitioning, which is a very well-known technique in the database area to improve vertical scalability on a single instance extensibility, with extensions like PostGIS for geographical databases parallel queries for vertical scalability JSON support, unleashing the multi-model hybrid database for both structured and unstructured data queried via standard SQL And so on ... How many databases should be hosted in a single PostgreSQL instance? Our recommendation is to dedicate a single PostgreSQL cluster (intended as primary and multiple standby servers) to a single database, entirely managed by a single microservice application. However, by leveraging the \"postgres\" superuser, it is possible to create as many users and databases as desired (subject to the available resources). The reason for this recommendation lies in the Cloud Native concept, based on microservices. In a pure microservice architecture, the microservice itself should own the data it manages exclusively. These could be flat files, queues, key-value stores, or, in our case, a PostgreSQL relational database containing both structured and unstructured data. The general idea is that only the microservice can access the database, including schema management and migrations. CloudNativePG has been designed to work this way out of the box, by default creating an application user and an application database owned by the aforementioned application user. Reserving a PostgreSQL instance to a single microservice owned database, enhances: resource management: in PostgreSQL, CPU, and memory constrained resources are generally handled at the instance level, not the database level, making it easier to integrate it with Kubernetes resource management policies at the pod level physical continuous backup and Point-In-Time-Recovery (PITR): given that PostgreSQL handles continuous backup and recovery at the instance level, having one database per instance simplifies PITR operations, differentiates retention policy management, and increases data protection of backups application updates: enable each application to decide their update policies without impacting other databases owned by different applications database updates: each application can decide which PostgreSQL version to use, and independently, when to upgrade to a different major version of PostgreSQL and at what conditions (e.g., cutover time) Is there an upper limit in database size for not considering Kubernetes? No, as Kubernetes is no different from virtual machines and bare metal as far as this is regarded. Practically, however, it depends on the available resources of your Kubernetes cluster. Our advice with very large databases (VLDB) is to consider a shared nothing architecture, where a Kubernetes worker node is dedicated to a single Postgres instance, with dedicated storage. We proved that this extreme architectural pattern works when we benchmarked running PostgreSQL on bare metal Kubernetes with local persistent volumes . Tablespaces and horizontal partitioning are data modeling techniques that you can use to improve the vertical scalability of you databases. How can I specify a time zone in the PostgreSQL cluster? PostgreSQL has an extensive support for time zones, as explained in the official documentation: Date time data types Client connections config options Although time zones can even be used at session, transaction and even as part of a query in PostgreSQL, a very common way is to set them up globally. With CloudNativePG you can configure the cluster level time zone in the .spec.postgresql.parameters section as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: pg-italy spec: instances: 1 postgresql: parameters: timezone: \"Europe/Rome\" storage: size: 1Gi The time zone can be verified with: $ kubectl exec -ti pg-italy-1 -c postgres -- psql -x -c \"SHOW timezone\" -[ RECORD 1 ]--------- TimeZone | Europe/Rome What is the recommended architecture for best business continuity outcomes? As covered in the \"Architecture\" section, the main recommendation is to adopt shared nothing architectures as much as possible, by leveraging the native capabilities and resources that Kubernetes provides in a single cluster, namely: availability zones: spread your instances across different availability zones in the same Kubernetes cluster worker nodes: as a consequence, make sure that your Postgres instances reside on different Kubernetes worker nodes storage: use dedicated storage for each worker node running Postgres Use at least one standby, preferably at least two, so that you can configure synchronous replication in the cluster, introducing RPO =0 for high availability. If you do not have availability zones - normally the case of on-premise installations - separate on worker nodes and storage. Properly setup continuous backup on a local/regional object store. The same architecture that is in a single Kubernetes cluster can be replicated in another Kubernetes cluster (normally in another geographical area or region) through the replica cluster feature, providing disaster recovery and high availability at global scale. You can use the WAL archive in the primary object store to feed the replica in the other region, without having to provide a streaming connection, if the default maximum RPO of 5 minutes is enough for you. How can instances be stopped or started? Please look at \"Fencing\" or \"Hibernation\" . What are the global objects such as roles and databases that are automatically created by CloudNativePG? The operator automatically creates a user for the application (by default called app ) and a database for the application (by default called app ) which is owned by the aforementioned user. This way, the database is ready for a microservice adoption, as developers can control migrations using the app user, without requiring superuser access. Teams can then create another user for read-write operations through the \"Declarative role management\" feature and assign the required GRANT to the tables.","title":"Database management"},{"location":"fencing/","text":"Fencing Fencing in CloudNativePG is the ultimate process of protecting the data in one, more, or even all instances of a PostgreSQL cluster when they appear to be malfunctioning. When an instance is fenced, the PostgreSQL server process ( postmaster ) is guaranteed to be shut down, while the pod is kept running. This makes sure that, until the fence is lifted, data on the pod is not modified by PostgreSQL and that the file system can be investigated for debugging and troubleshooting purposes. How to fence instances In CloudNativePG you can fence: a specific instance a list of instances an entire Postgres Cluster Fencing is controlled through the content of the cnpg.io/fencedInstances annotation, which expects a JSON formatted list of instance names. If the annotation is set to '[\"*\"]' , a singleton list with a wildcard, the whole cluster is fenced. If the annotation is set to an empty JSON list, the operator behaves as if the annotation was not set. For example: cnpg.io/fencedInstances: '[\"cluster-example-1\"]' will fence just the cluster-example-1 instance cnpg.io/fencedInstances: '[\"cluster-example-1\",\"cluster-example-2\"]' will fence the cluster-example-1 and cluster-example-2 instances cnpg.io/fencedInstances: '[\"*\"]' will fence every instance in the cluster. The annotation can be manually set on the Kubernetes object, for example via the kubectl annotate command, or in a transparent way using the kubectl cnpg fencing on subcommand: # to fence only one instance kubectl cnpg fencing on cluster-example 1 # to fence all the instances in a Cluster kubectl cnpg fencing on cluster-example \"*\" Here is an example of a Cluster with an instance that was previously fenced: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: annotations: cnpg.io/fencedInstances: '[\"cluster-example-1\"]' [...] How to lift fencing Fencing can be lifted by clearing the annotation, or set it to a different value. As for fencing, this can be done either manually with kubectl annotate , or using the kubectl cnpg fencing subcommand as follows: # to lift the fencing only for one instance # N.B.: at the moment this won't work if the whole cluster was fenced previously, # in that case you will have to manually set the annotation as explained above kubectl cnpg fencing off cluster-example 1 # to lift the fencing for all the instances in a Cluster kubectl cnpg fencing off cluster-example \"*\" How fencing works Once an instance is set for fencing, the procedure to shut down the postmaster process is initiated, identical to the one of the switchover. This consists of an initial fast shutdown with a timeout set to .spec.switchoverDelay , followed by an immediate shutdown. Then: the Pod will be kept alive the Pod won't be marked as Ready all the changes that don't require the Postgres instance to be up will be reconciled, including: configuration files certificates and all the cryptographic material metrics will not be collected, except cnpg_collector_fencing_on which will be set to 1 Warning If a primary instance is fenced, its postmaster process is shut down but no failover is performed, interrupting the operativity of the applications. When the fence will be lifted, the primary instance will be started up again without performing a failover. Given that, we advise users to fence primary instances only if strictly required. If a fenced instance is deleted, the pod will be recreated normally, but the postmaster won't be started. This can be extremely helpful when instances are Crashlooping .","title":"Fencing"},{"location":"fencing/#fencing","text":"Fencing in CloudNativePG is the ultimate process of protecting the data in one, more, or even all instances of a PostgreSQL cluster when they appear to be malfunctioning. When an instance is fenced, the PostgreSQL server process ( postmaster ) is guaranteed to be shut down, while the pod is kept running. This makes sure that, until the fence is lifted, data on the pod is not modified by PostgreSQL and that the file system can be investigated for debugging and troubleshooting purposes.","title":"Fencing"},{"location":"fencing/#how-to-fence-instances","text":"In CloudNativePG you can fence: a specific instance a list of instances an entire Postgres Cluster Fencing is controlled through the content of the cnpg.io/fencedInstances annotation, which expects a JSON formatted list of instance names. If the annotation is set to '[\"*\"]' , a singleton list with a wildcard, the whole cluster is fenced. If the annotation is set to an empty JSON list, the operator behaves as if the annotation was not set. For example: cnpg.io/fencedInstances: '[\"cluster-example-1\"]' will fence just the cluster-example-1 instance cnpg.io/fencedInstances: '[\"cluster-example-1\",\"cluster-example-2\"]' will fence the cluster-example-1 and cluster-example-2 instances cnpg.io/fencedInstances: '[\"*\"]' will fence every instance in the cluster. The annotation can be manually set on the Kubernetes object, for example via the kubectl annotate command, or in a transparent way using the kubectl cnpg fencing on subcommand: # to fence only one instance kubectl cnpg fencing on cluster-example 1 # to fence all the instances in a Cluster kubectl cnpg fencing on cluster-example \"*\" Here is an example of a Cluster with an instance that was previously fenced: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: annotations: cnpg.io/fencedInstances: '[\"cluster-example-1\"]' [...]","title":"How to fence instances"},{"location":"fencing/#how-to-lift-fencing","text":"Fencing can be lifted by clearing the annotation, or set it to a different value. As for fencing, this can be done either manually with kubectl annotate , or using the kubectl cnpg fencing subcommand as follows: # to lift the fencing only for one instance # N.B.: at the moment this won't work if the whole cluster was fenced previously, # in that case you will have to manually set the annotation as explained above kubectl cnpg fencing off cluster-example 1 # to lift the fencing for all the instances in a Cluster kubectl cnpg fencing off cluster-example \"*\"","title":"How to lift fencing"},{"location":"fencing/#how-fencing-works","text":"Once an instance is set for fencing, the procedure to shut down the postmaster process is initiated, identical to the one of the switchover. This consists of an initial fast shutdown with a timeout set to .spec.switchoverDelay , followed by an immediate shutdown. Then: the Pod will be kept alive the Pod won't be marked as Ready all the changes that don't require the Postgres instance to be up will be reconciled, including: configuration files certificates and all the cryptographic material metrics will not be collected, except cnpg_collector_fencing_on which will be set to 1 Warning If a primary instance is fenced, its postmaster process is shut down but no failover is performed, interrupting the operativity of the applications. When the fence will be lifted, the primary instance will be started up again without performing a failover. Given that, we advise users to fence primary instances only if strictly required. If a fenced instance is deleted, the pod will be recreated normally, but the postmaster won't be started. This can be extremely helpful when instances are Crashlooping .","title":"How fencing works"},{"location":"image_catalog/","text":"Image Catalog ImageCatalog and ClusterImageCatalog are essential resources that empower you to define images for creating a Cluster . The key distinction lies in their scope: an ImageCatalog is namespaced, while a ClusterImageCatalog is cluster-scoped. Both share a common structure, comprising a list of images, each equipped with a major field indicating the major version of the image. Warning The operator places trust in the user-defined major version and refrains from conducting any PostgreSQL version detection. It is the user's responsibility to ensure alignment between the declared major version in the catalog and the PostgreSQL image. The major field's value must remain unique within a catalog, preventing duplication across images. Distinct catalogs, however, may expose different images under the same major value. Example of a Namespaced ImageCatalog : apiVersion: postgresql.cnpg.io/v1 kind: ImageCatalog metadata: name: postgresql namespace: default spec: images: - major: 15 image: ghcr.io/cloudnative-pg/postgresql:15.6 - major: 16 image: ghcr.io/cloudnative-pg/postgresql:16.8 - major: 17 image: ghcr.io/cloudnative-pg/postgresql:17.5 Example of a Cluster-Wide Catalog using ClusterImageCatalog Resource: apiVersion: postgresql.cnpg.io/v1 kind: ClusterImageCatalog metadata: name: postgresql spec: images: - major: 15 image: ghcr.io/cloudnative-pg/postgresql:15.6 - major: 16 image: ghcr.io/cloudnative-pg/postgresql:16.8 - major: 17 image: ghcr.io/cloudnative-pg/postgresql:17.5 A Cluster resource has the flexibility to reference either an ImageCatalog or a ClusterImageCatalog to precisely specify the desired image. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 imageCatalogRef: apiGroup: postgresql.cnpg.io kind: ImageCatalog name: postgresql major: 16 storage: size: 1Gi Clusters utilizing these catalogs maintain continuous monitoring. Any alterations to the images within a catalog trigger automatic updates for all associated clusters referencing that specific entry. CloudNativePG Catalogs The CloudNativePG project maintains ClusterImageCatalogs for the images it provides. These catalogs are regularly updated with the latest images for each major version. By applying the ClusterImageCatalog.yaml file from the CloudNativePG project's GitHub repositories, cluster administrators can ensure that their clusters are automatically updated to the latest version within the specified major release. PostgreSQL Container Images You can install the latest version of the cluster catalog for the PostgreSQL Container Images ( cloudnative-pg/postgres-containers repository) with: kubectl apply \\ -f https://raw.githubusercontent.com/cloudnative-pg/postgres-containers/main/Debian/ClusterImageCatalog-bookworm.yaml PostGIS Container Images You can install the latest version of the cluster catalog for the PostGIS Container Images ( cloudnative-pg/postgis-containers repository) with: kubectl apply \\ -f https://raw.githubusercontent.com/cloudnative-pg/postgis-containers/main/PostGIS/ClusterImageCatalog.yaml","title":"Image Catalog"},{"location":"image_catalog/#image-catalog","text":"ImageCatalog and ClusterImageCatalog are essential resources that empower you to define images for creating a Cluster . The key distinction lies in their scope: an ImageCatalog is namespaced, while a ClusterImageCatalog is cluster-scoped. Both share a common structure, comprising a list of images, each equipped with a major field indicating the major version of the image. Warning The operator places trust in the user-defined major version and refrains from conducting any PostgreSQL version detection. It is the user's responsibility to ensure alignment between the declared major version in the catalog and the PostgreSQL image. The major field's value must remain unique within a catalog, preventing duplication across images. Distinct catalogs, however, may expose different images under the same major value. Example of a Namespaced ImageCatalog : apiVersion: postgresql.cnpg.io/v1 kind: ImageCatalog metadata: name: postgresql namespace: default spec: images: - major: 15 image: ghcr.io/cloudnative-pg/postgresql:15.6 - major: 16 image: ghcr.io/cloudnative-pg/postgresql:16.8 - major: 17 image: ghcr.io/cloudnative-pg/postgresql:17.5 Example of a Cluster-Wide Catalog using ClusterImageCatalog Resource: apiVersion: postgresql.cnpg.io/v1 kind: ClusterImageCatalog metadata: name: postgresql spec: images: - major: 15 image: ghcr.io/cloudnative-pg/postgresql:15.6 - major: 16 image: ghcr.io/cloudnative-pg/postgresql:16.8 - major: 17 image: ghcr.io/cloudnative-pg/postgresql:17.5 A Cluster resource has the flexibility to reference either an ImageCatalog or a ClusterImageCatalog to precisely specify the desired image. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 imageCatalogRef: apiGroup: postgresql.cnpg.io kind: ImageCatalog name: postgresql major: 16 storage: size: 1Gi Clusters utilizing these catalogs maintain continuous monitoring. Any alterations to the images within a catalog trigger automatic updates for all associated clusters referencing that specific entry.","title":"Image Catalog"},{"location":"image_catalog/#cloudnativepg-catalogs","text":"The CloudNativePG project maintains ClusterImageCatalogs for the images it provides. These catalogs are regularly updated with the latest images for each major version. By applying the ClusterImageCatalog.yaml file from the CloudNativePG project's GitHub repositories, cluster administrators can ensure that their clusters are automatically updated to the latest version within the specified major release.","title":"CloudNativePG Catalogs"},{"location":"image_catalog/#postgresql-container-images","text":"You can install the latest version of the cluster catalog for the PostgreSQL Container Images ( cloudnative-pg/postgres-containers repository) with: kubectl apply \\ -f https://raw.githubusercontent.com/cloudnative-pg/postgres-containers/main/Debian/ClusterImageCatalog-bookworm.yaml","title":"PostgreSQL Container Images"},{"location":"image_catalog/#postgis-container-images","text":"You can install the latest version of the cluster catalog for the PostGIS Container Images ( cloudnative-pg/postgis-containers repository) with: kubectl apply \\ -f https://raw.githubusercontent.com/cloudnative-pg/postgis-containers/main/PostGIS/ClusterImageCatalog.yaml","title":"PostGIS Container Images"},{"location":"imagevolume_extensions/","text":"Image Volume Extensions CloudNativePG supports the dynamic loading of PostgreSQL extensions into a Cluster at Pod startup using the Kubernetes ImageVolume feature and the extension_control_path GUC introduced in PostgreSQL 18, to which this project contributed. This feature allows you to mount a PostgreSQL extension , packaged as an OCI-compliant container image, as a read-only and immutable volume inside a running pod at a known filesystem path. You can make the extension available either globally, using the shared_preload_libraries option , or at the database level through the CREATE EXTENSION command. For the latter, you can use the Database resource\u2019s declarative extension management to ensure consistent, automated extension setup within your PostgreSQL databases. Benefits Image volume extensions decouple the distribution of PostgreSQL operand container images from the distribution of extensions. This eliminates the need to define and embed extensions at build time within your PostgreSQL images\u2014a major adoption blocker for PostgreSQL as a containerized workload, including from a security and supply chain perspective. As a result, you can: Use the official PostgreSQL minimal operand images provided by CloudNativePG. Dynamically add the extensions you need to your Cluster definitions, without rebuilding or maintaining custom PostgreSQL images. Reduce your operational surface by using immutable, minimal, and secure base images while adding only the extensions required for each workload. Extension images must be built according to the documented specifications . Requirements To use image volume extensions with CloudNativePG, you need: PostgreSQL 18 or later , with support for extension_control_path . Kubernetes 1.33 , with the ImageVolume feature gate enabled. CloudNativePG-compatible extension container images , ensuring: Matching PostgreSQL major version of the Cluster resource. Compatible operating system distribution of the Cluster resource. Matching CPU architecture of the Cluster resource. How it works Extension images are defined in the .spec.postgresql.extensions stanza of a Cluster resource, which accepts an ordered list of extensions to be added to the PostgreSQL cluster. Info For field-level details, see the API reference for ExtensionConfiguration . Each image volume is mounted at /extensions/<EXTENSION_NAME> . By default, CloudNativePG automatically manages the relevant GUCs, setting: extension_control_path to /extensions/<EXTENSION_NAME>/share , allowing PostgreSQL to locate any extension control file within /extensions/<EXTENSION_NAME>/share/extension dynamic_library_path to /extensions/<EXTENSION_NAME>/lib These values are appended in the order in which the extensions are defined in the extensions list, ensuring deterministic path resolution within PostgreSQL. This allows PostgreSQL to discover and load the extension without requiring manual configuration inside the pod. Info Depending on how your extension container images are built and their layout, you may need to adjust the default extension_control_path and dynamic_library_path values to match the image structure. Important If the extension image includes shared libraries, they must be compiled with the same PostgreSQL major version, operating system distribution, and CPU architecture as the PostgreSQL container image used by your cluster, to ensure compatibility and prevent runtime issues. How to add a new extension Adding an extension to a database in CloudNativePG involves a few steps: Define the extension image in the Cluster resource so that PostgreSQL can discover and load it. Add the library to shared_preload_libraries if the extension requires it. Declare the extension in the Database resource where you want it installed, if the extension supports CREATE EXTENSION . Warning Avoid making changes to extension images and PostgreSQL configuration settings (such as shared_preload_libraries ) simultaneously. First, allow the pod to roll out with the new extension image, then update the PostgreSQL configuration. This limitation will be addressed in a future release of CloudNativePG. For illustration purposes, this guide uses a simple, fictitious extension named foo that supports CREATE EXTENSION . Adding a new extension to a Cluster resource You can add an ImageVolume -based extension to a Cluster using the .spec.postgresql.extensions stanza. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: foo-18 spec: # ... postgresql: extensions: - name: foo image: reference: # registry path for your extension image # ... The name field is mandatory and must be unique within the cluster , as it determines the mount path ( /extensions/foo in this example). It must consist of lowercase alphanumeric characters or hyphens ( - ) and must start and end with an alphanumeric character. The image stanza follows the Kubernetes ImageVolume API . The reference must point to a valid container registry path for the extension image. Important When a new extension is added to a running Cluster , CloudNativePG will automatically trigger a rolling update to attach the new image volume to each pod. Before adding a new extension in production, ensure you have thoroughly tested it in a staging environment to prevent configuration issues that could leave your PostgreSQL cluster in an unhealthy state. Once mounted, CloudNativePG will automatically configure PostgreSQL by appending: /extensions/foo/share to extension_control_path /extensions/foo/lib to dynamic_library_path This ensures that the PostgreSQL container is ready to serve the foo extension when requested by a database, as described in the next section. The CREATE EXTENSION foo command, triggered automatically during the reconciliation of the Database resource , will work without additional configuration, as PostgreSQL will locate: the extension control file at /extensions/foo/share/extension/foo.control the shared library at /extensions/foo/lib/foo.so Adding a new extension to a Database resource Once the extension is available in the PostgreSQL instance, you can leverage declarative databases to manage the lifecycle of your extensions within the target database. Continuing with the foo example, you can request the installation of the foo extension in the app database of the foo-18 cluster using the following resource definition: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: foo-app spec: name: app owner: app cluster: name: foo-18 extensions: - name: foo version: 1.0 CloudNativePG will automatically reconcile this resource, executing the CREATE EXTENSION foo command inside the app database if it is not already installed, ensuring your desired state is maintained without manual intervention. Advanced Topics In some cases, the default expected structure may be insufficient for your extension image, particularly when: The extension requires additional system libraries. Multiple extensions are bundled in the same image. The image uses a custom directory structure. Following the \"convention over configuration\" paradigm, CloudNativePG allows you to finely control the configuration of each extension image through the following fields: extension_control_path : A list of relative paths within the container image to be appended to PostgreSQL\u2019s extension_control_path , allowing it to locate extension control files. dynamic_library_path : A list of relative paths within the container image to be appended to PostgreSQL\u2019s dynamic_library_path , enabling it to locate shared library files for extensions. ld_library_path : A list of relative paths within the container image to be appended to the LD_LIBRARY_PATH environment variable of the instance manager process, allowing PostgreSQL to locate required system libraries at runtime. This flexibility enables you to support complex or non-standard extension images while maintaining clarity and predictability. Setting Custom Paths If your extension image does not use the default lib and share directories for its libraries and control files, you can override the defaults by explicitly setting extension_control_path and dynamic_library_path . For example: spec: postgresql: extensions: - name: my-extension extension_control_path: - my/share/path dynamic_library_path: - my/lib/path image: reference: # registry path for your extension image CloudNativePG will configure PostgreSQL with: /extensions/my-extension/my/share/path appended to extension_control_path /extensions/my-extension/my/lib/path appended to dynamic_library_path This allows PostgreSQL to discover your extension\u2019s control files and shared libraries correctly, even with a non-standard layout. Multi-extension Images You may need to include multiple extensions within the same container image, adopting a structure where each extension\u2019s files reside in their own subdirectory. For example, to package PostGIS and pgRouting together in a single image, each in its own subdirectory: # ... spec: # ... postgresql: extensions: - name: geospatial extension_control_path: - postgis/share - pgrouting/share dynamic_library_path: - postgis/lib - pgrouting/lib # ... image: reference: # registry path for your geospatial image # ... # ... # ... Including System Libraries Some extensions, such as PostGIS, require system libraries that may not be present in the base PostgreSQL image. To support these requirements, you can package the necessary libraries within your extension container image and make them available to PostgreSQL using the ld_library_path field. For example, if your extension image includes a system directory with the required libraries: # ... spec: # ... postgresql: extensions: - name: postgis # ... ld_library_path: - syslib image: reference: # registry path for your PostGIS image # ... # ... # ... CloudNativePG will set the LD_LIBRARY_PATH environment variable to include /extensions/postgis/system , allowing PostgreSQL to locate and load these system libraries at runtime. Important Since ld_library_path must be set when the PostgreSQL process starts, changing this value requires a cluster restart for the new value to take effect. CloudNativePG does not currently trigger this restart automatically; you will need to manually restart the cluster (e.g., using cnpg restart ) after modifying ld_library_path . Image Specifications A standard extension container image for CloudNativePG includes two required directories at its root: share : contains the extension control file (e.g., <EXTENSION>.control ) and any SQL files. lib : contains the extension's shared library (e.g., <EXTENSION>.so ) and any additional required libraries. Following this structure ensures that the extension will be automatically discoverable and usable by PostgreSQL within CloudNativePG without requiring manual configuration. Important We encourage PostgreSQL extension developers to publish OCI-compliant extension images following this layout as part of their artifact distribution, making their extensions easily consumable within Kubernetes environments. Ideally, extension images should target a specific operating system distribution and architecture, be tied to a particular PostgreSQL version, and be built using the distribution\u2019s native packaging system (for example, using Debian or RPM packages). This approach ensures consistency, security, and compatibility with the PostgreSQL images used in your clusters. Caveats Currently, adding, removing, or updating an extension image triggers a restart of the PostgreSQL pods. This behavior is inherited from how image volumes work in Kubernetes. Before performing an extension update, ensure you have: Thoroughly tested the update process in a staging environment. Verified that the extension image contains the required upgrade path between the currently installed version and the target version. Updated the version field for the extension in the relevant Database resource definition to align with the new version in the image. These steps help prevent downtime or data inconsistencies in your PostgreSQL clusters during extension updates.","title":"Image Volume Extensions"},{"location":"imagevolume_extensions/#image-volume-extensions","text":"CloudNativePG supports the dynamic loading of PostgreSQL extensions into a Cluster at Pod startup using the Kubernetes ImageVolume feature and the extension_control_path GUC introduced in PostgreSQL 18, to which this project contributed. This feature allows you to mount a PostgreSQL extension , packaged as an OCI-compliant container image, as a read-only and immutable volume inside a running pod at a known filesystem path. You can make the extension available either globally, using the shared_preload_libraries option , or at the database level through the CREATE EXTENSION command. For the latter, you can use the Database resource\u2019s declarative extension management to ensure consistent, automated extension setup within your PostgreSQL databases.","title":"Image Volume Extensions"},{"location":"imagevolume_extensions/#benefits","text":"Image volume extensions decouple the distribution of PostgreSQL operand container images from the distribution of extensions. This eliminates the need to define and embed extensions at build time within your PostgreSQL images\u2014a major adoption blocker for PostgreSQL as a containerized workload, including from a security and supply chain perspective. As a result, you can: Use the official PostgreSQL minimal operand images provided by CloudNativePG. Dynamically add the extensions you need to your Cluster definitions, without rebuilding or maintaining custom PostgreSQL images. Reduce your operational surface by using immutable, minimal, and secure base images while adding only the extensions required for each workload. Extension images must be built according to the documented specifications .","title":"Benefits"},{"location":"imagevolume_extensions/#requirements","text":"To use image volume extensions with CloudNativePG, you need: PostgreSQL 18 or later , with support for extension_control_path . Kubernetes 1.33 , with the ImageVolume feature gate enabled. CloudNativePG-compatible extension container images , ensuring: Matching PostgreSQL major version of the Cluster resource. Compatible operating system distribution of the Cluster resource. Matching CPU architecture of the Cluster resource.","title":"Requirements"},{"location":"imagevolume_extensions/#how-it-works","text":"Extension images are defined in the .spec.postgresql.extensions stanza of a Cluster resource, which accepts an ordered list of extensions to be added to the PostgreSQL cluster. Info For field-level details, see the API reference for ExtensionConfiguration . Each image volume is mounted at /extensions/<EXTENSION_NAME> . By default, CloudNativePG automatically manages the relevant GUCs, setting: extension_control_path to /extensions/<EXTENSION_NAME>/share , allowing PostgreSQL to locate any extension control file within /extensions/<EXTENSION_NAME>/share/extension dynamic_library_path to /extensions/<EXTENSION_NAME>/lib These values are appended in the order in which the extensions are defined in the extensions list, ensuring deterministic path resolution within PostgreSQL. This allows PostgreSQL to discover and load the extension without requiring manual configuration inside the pod. Info Depending on how your extension container images are built and their layout, you may need to adjust the default extension_control_path and dynamic_library_path values to match the image structure. Important If the extension image includes shared libraries, they must be compiled with the same PostgreSQL major version, operating system distribution, and CPU architecture as the PostgreSQL container image used by your cluster, to ensure compatibility and prevent runtime issues.","title":"How it works"},{"location":"imagevolume_extensions/#how-to-add-a-new-extension","text":"Adding an extension to a database in CloudNativePG involves a few steps: Define the extension image in the Cluster resource so that PostgreSQL can discover and load it. Add the library to shared_preload_libraries if the extension requires it. Declare the extension in the Database resource where you want it installed, if the extension supports CREATE EXTENSION . Warning Avoid making changes to extension images and PostgreSQL configuration settings (such as shared_preload_libraries ) simultaneously. First, allow the pod to roll out with the new extension image, then update the PostgreSQL configuration. This limitation will be addressed in a future release of CloudNativePG. For illustration purposes, this guide uses a simple, fictitious extension named foo that supports CREATE EXTENSION .","title":"How to add a new extension"},{"location":"imagevolume_extensions/#adding-a-new-extension-to-a-cluster-resource","text":"You can add an ImageVolume -based extension to a Cluster using the .spec.postgresql.extensions stanza. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: foo-18 spec: # ... postgresql: extensions: - name: foo image: reference: # registry path for your extension image # ... The name field is mandatory and must be unique within the cluster , as it determines the mount path ( /extensions/foo in this example). It must consist of lowercase alphanumeric characters or hyphens ( - ) and must start and end with an alphanumeric character. The image stanza follows the Kubernetes ImageVolume API . The reference must point to a valid container registry path for the extension image. Important When a new extension is added to a running Cluster , CloudNativePG will automatically trigger a rolling update to attach the new image volume to each pod. Before adding a new extension in production, ensure you have thoroughly tested it in a staging environment to prevent configuration issues that could leave your PostgreSQL cluster in an unhealthy state. Once mounted, CloudNativePG will automatically configure PostgreSQL by appending: /extensions/foo/share to extension_control_path /extensions/foo/lib to dynamic_library_path This ensures that the PostgreSQL container is ready to serve the foo extension when requested by a database, as described in the next section. The CREATE EXTENSION foo command, triggered automatically during the reconciliation of the Database resource , will work without additional configuration, as PostgreSQL will locate: the extension control file at /extensions/foo/share/extension/foo.control the shared library at /extensions/foo/lib/foo.so","title":"Adding a new extension to a Cluster resource"},{"location":"imagevolume_extensions/#adding-a-new-extension-to-a-database-resource","text":"Once the extension is available in the PostgreSQL instance, you can leverage declarative databases to manage the lifecycle of your extensions within the target database. Continuing with the foo example, you can request the installation of the foo extension in the app database of the foo-18 cluster using the following resource definition: apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: foo-app spec: name: app owner: app cluster: name: foo-18 extensions: - name: foo version: 1.0 CloudNativePG will automatically reconcile this resource, executing the CREATE EXTENSION foo command inside the app database if it is not already installed, ensuring your desired state is maintained without manual intervention.","title":"Adding a new extension to a Database resource"},{"location":"imagevolume_extensions/#advanced-topics","text":"In some cases, the default expected structure may be insufficient for your extension image, particularly when: The extension requires additional system libraries. Multiple extensions are bundled in the same image. The image uses a custom directory structure. Following the \"convention over configuration\" paradigm, CloudNativePG allows you to finely control the configuration of each extension image through the following fields: extension_control_path : A list of relative paths within the container image to be appended to PostgreSQL\u2019s extension_control_path , allowing it to locate extension control files. dynamic_library_path : A list of relative paths within the container image to be appended to PostgreSQL\u2019s dynamic_library_path , enabling it to locate shared library files for extensions. ld_library_path : A list of relative paths within the container image to be appended to the LD_LIBRARY_PATH environment variable of the instance manager process, allowing PostgreSQL to locate required system libraries at runtime. This flexibility enables you to support complex or non-standard extension images while maintaining clarity and predictability.","title":"Advanced Topics"},{"location":"imagevolume_extensions/#setting-custom-paths","text":"If your extension image does not use the default lib and share directories for its libraries and control files, you can override the defaults by explicitly setting extension_control_path and dynamic_library_path . For example: spec: postgresql: extensions: - name: my-extension extension_control_path: - my/share/path dynamic_library_path: - my/lib/path image: reference: # registry path for your extension image CloudNativePG will configure PostgreSQL with: /extensions/my-extension/my/share/path appended to extension_control_path /extensions/my-extension/my/lib/path appended to dynamic_library_path This allows PostgreSQL to discover your extension\u2019s control files and shared libraries correctly, even with a non-standard layout.","title":"Setting Custom Paths"},{"location":"imagevolume_extensions/#multi-extension-images","text":"You may need to include multiple extensions within the same container image, adopting a structure where each extension\u2019s files reside in their own subdirectory. For example, to package PostGIS and pgRouting together in a single image, each in its own subdirectory: # ... spec: # ... postgresql: extensions: - name: geospatial extension_control_path: - postgis/share - pgrouting/share dynamic_library_path: - postgis/lib - pgrouting/lib # ... image: reference: # registry path for your geospatial image # ... # ... # ...","title":"Multi-extension Images"},{"location":"imagevolume_extensions/#including-system-libraries","text":"Some extensions, such as PostGIS, require system libraries that may not be present in the base PostgreSQL image. To support these requirements, you can package the necessary libraries within your extension container image and make them available to PostgreSQL using the ld_library_path field. For example, if your extension image includes a system directory with the required libraries: # ... spec: # ... postgresql: extensions: - name: postgis # ... ld_library_path: - syslib image: reference: # registry path for your PostGIS image # ... # ... # ... CloudNativePG will set the LD_LIBRARY_PATH environment variable to include /extensions/postgis/system , allowing PostgreSQL to locate and load these system libraries at runtime. Important Since ld_library_path must be set when the PostgreSQL process starts, changing this value requires a cluster restart for the new value to take effect. CloudNativePG does not currently trigger this restart automatically; you will need to manually restart the cluster (e.g., using cnpg restart ) after modifying ld_library_path .","title":"Including System Libraries"},{"location":"imagevolume_extensions/#image-specifications","text":"A standard extension container image for CloudNativePG includes two required directories at its root: share : contains the extension control file (e.g., <EXTENSION>.control ) and any SQL files. lib : contains the extension's shared library (e.g., <EXTENSION>.so ) and any additional required libraries. Following this structure ensures that the extension will be automatically discoverable and usable by PostgreSQL within CloudNativePG without requiring manual configuration. Important We encourage PostgreSQL extension developers to publish OCI-compliant extension images following this layout as part of their artifact distribution, making their extensions easily consumable within Kubernetes environments. Ideally, extension images should target a specific operating system distribution and architecture, be tied to a particular PostgreSQL version, and be built using the distribution\u2019s native packaging system (for example, using Debian or RPM packages). This approach ensures consistency, security, and compatibility with the PostgreSQL images used in your clusters.","title":"Image Specifications"},{"location":"imagevolume_extensions/#caveats","text":"Currently, adding, removing, or updating an extension image triggers a restart of the PostgreSQL pods. This behavior is inherited from how image volumes work in Kubernetes. Before performing an extension update, ensure you have: Thoroughly tested the update process in a staging environment. Verified that the extension image contains the required upgrade path between the currently installed version and the target version. Updated the version field for the extension in the relevant Database resource definition to align with the new version in the image. These steps help prevent downtime or data inconsistencies in your PostgreSQL clusters during extension updates.","title":"Caveats"},{"location":"installation_upgrade/","text":"Installation and upgrades Installation on Kubernetes Directly using the operator manifest The operator can be installed like any other resource in Kubernetes, through a YAML manifest applied via kubectl . You can install the latest operator manifest for this minor release as follows: kubectl apply --server-side -f \\ https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/releases/cnpg-1.27.0-rc1.yaml You can verify that with: kubectl rollout status deployment \\ -n cnpg-system cnpg-controller-manager Using the cnpg plugin for kubectl You can use the cnpg plugin to override the default configuration options that are in the static manifests. For example, to generate the default latest manifest but change the watch namespaces to only be a specific namespace, you could run: kubectl cnpg install generate \\ --watch-namespace \"specific-namespace\" \\ > cnpg_for_specific_namespace.yaml Please refer to \" cnpg plugin\" documentation for a more comprehensive example. Warning If you are deploying CloudNativePG on GKE and get an error ( ... failed to call webhook... ), be aware that by default traffic between worker nodes and control plane is blocked by the firewall except for a few specific ports, as explained in the official docs and by this issue . You'll need to either change the targetPort in the webhook service, to be one of the allowed ones, or open the webhooks' port ( 9443 ) on the firewall. Testing the latest development snapshot If you want to test or evaluate the latest development snapshot of CloudNativePG before the next official patch release, you can download the manifests from the cloudnative-pg/artifacts which provides easy access to the current trunk (main) as well as to each supported release. For example, you can install the latest snapshot of the operator with: curl -sSfL \\ https://raw.githubusercontent.com/cloudnative-pg/artifacts/main/manifests/operator-manifest.yaml | \\ kubectl apply --server-side -f - If you are instead looking for the latest snapshot of the operator for this specific minor release, you can just run: curl -sSfL \\ https://raw.githubusercontent.com/cloudnative-pg/artifacts/release-1.27/manifests/operator-manifest.yaml | \\ kubectl apply --server-side -f - Important Snapshots are not supported by the CloudNativePG Community, and are not intended for use in production. Using the Helm Chart The operator can be installed using the provided Helm chart . Using OLM CloudNativePG can also be installed via the Operator Lifecycle Manager (OLM) directly from OperatorHub.io . For deployments on Red Hat OpenShift, EDB offers and fully supports a certified version of CloudNativePG, available through the Red Hat OpenShift Container Platform . Details about the deployment In Kubernetes, the operator is by default installed in the cnpg-system namespace as a Kubernetes Deployment . The name of this deployment depends on the installation method. When installed through the manifest or the cnpg plugin, it is called cnpg-controller-manager by default. When installed via Helm, the default name is cnpg-cloudnative-pg . Note With Helm you can customize the name of the deployment via the fullnameOverride field in the \"values.yaml\" file . You can get more information using the describe command in kubectl : $ kubectl get deployments -n cnpg-system NAME READY UP-TO-DATE AVAILABLE AGE <deployment-name> 1/1 1 1 18m kubectl describe deploy \\ -n cnpg-system \\ <deployment-name> As with any Deployment, it sits on top of a ReplicaSet and supports rolling upgrades. The default configuration of the CloudNativePG operator comes with a Deployment of a single replica, which is suitable for most installations. In case the node where the pod is running is not reachable anymore, the pod will be rescheduled on another node. If you require high availability at the operator level, it is possible to specify multiple replicas in the Deployment configuration - given that the operator supports leader election. Also, you can take advantage of taints and tolerations to make sure that the operator does not run on the same nodes where the actual PostgreSQL clusters are running (this might even include the control plane for self-managed Kubernetes installations). Operator configuration You can change the default behavior of the operator by overriding some default options. For more information, please refer to the \"Operator configuration\" section. Upgrades Important Please carefully read the release notes before performing an upgrade as some versions might require extra steps. Upgrading CloudNativePG operator is a two-step process: upgrade the controller and the related Kubernetes resources upgrade the instance manager running in every PostgreSQL pod Unless differently stated in the release notes, the first step is normally done by applying the manifest of the newer version for plain Kubernetes installations, or using the native package manager of the used distribution (please follow the instructions in the above sections). The second step is automatically triggered after updating the controller. By default, this initiates a rolling update of every deployed PostgreSQL cluster, upgrading one instance at a time to use the new instance manager. The rolling update concludes with a switchover, which is governed by the primaryUpdateStrategy option. The default value, unsupervised , completes the switchover automatically. If set to supervised , the user must manually promote the new primary instance using the cnpg plugin for kubectl . Rolling updates This process is discussed in-depth on the Rolling Updates page. Important In case primaryUpdateStrategy is set to the default value of unsupervised , an upgrade of the operator will trigger a switchover on your PostgreSQL cluster, causing a (normally negligible) downtime. If your PostgreSQL Cluster has only one instance, the instance will be automatically restarted as supervised value is not supported for primaryUpdateStrategy . In either case, your applications will have to reconnect to PostgreSQL. The default rolling update behavior can be replaced with in-place updates of the instance manager. This approach does not require a restart of the PostgreSQL instance, thereby avoiding a switchover within the cluster. This feature, which is disabled by default, is described in detail below. Spread Upgrades By default, all PostgreSQL clusters are rolled out simultaneously, which may lead to a spike in resource usage, especially when managing multiple clusters. CloudNativePG provides two configuration options at the operator level that allow you to introduce delays between cluster roll-outs or even between instances within the same cluster, helping to distribute resource usage over time: CLUSTERS_ROLLOUT_DELAY : Defines the number of seconds to wait between roll-outs of different PostgreSQL clusters (default: 0 ). INSTANCES_ROLLOUT_DELAY : Defines the number of seconds to wait between roll-outs of individual instances within the same PostgreSQL cluster (default: 0 ). In-place updates of the instance manager By default, CloudNativePG issues a rolling update of the cluster every time the operator is updated. The new instance manager shipped with the operator is added to each PostgreSQL pod via an init container. However, this behavior can be changed via configuration to enable in-place updates of the instance manager, which is the PID 1 process that keeps the container alive. Internally, each instance manager in CloudNativePG supports the injection of a new executable that replaces the existing one after successfully completing an integrity verification phase and gracefully terminating all internal processes. Upon restarting with the new binary, the instance manager seamlessly adopts the already running postmaster . As a result, the PostgreSQL process is unaffected by the update, refraining from the need to perform a switchover. The other side of the coin, is that the Pod is changed after the start, breaking the pure concept of immutability. You can enable this feature by setting the ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES environment variable to 'true' in the operator configuration . The in-place upgrade process will not change the init container image inside the Pods. Therefore, the Pod definition will not reflect the current version of the operator. Compatibility among versions CloudNativePG follows semantic versioning. Every release of the operator within the same API version is compatible with the previous one. The current API version is v1, corresponding to versions 1.x.y of the operator. In addition to new features, new versions of the operator contain bug fixes and stability enhancements. Because of this, we strongly encourage users to upgrade to the latest version of the operator , as each version is released in order to maintain the most secure and stable Postgres environment. CloudNativePG currently releases new versions of the operator at least monthly. If you are unable to apply updates as each version becomes available, we recommend upgrading through each version in sequential order to come current periodically and not skipping versions. The release notes page contains a detailed list of the changes introduced in every released version of CloudNativePG, and it must be read before upgrading to a newer version of the software. Most versions are directly upgradable and in that case, applying the newer manifest for plain Kubernetes installations or using the native package manager of the chosen distribution is enough. When versions are not directly upgradable, the old version needs to be removed before installing the new one. This won't affect user data but only the operator itself. Upgrading to 1.26 from a previous minor version Important We strongly recommend that all CloudNativePG users upgrade to version 1.26.1, or at a minimum, to the latest stable version of your current minor release (for example, 1.25.x). Warning Due to changes in the startup probe for the manager component ( #6623 ), upgrading the operator will trigger a restart of your PostgreSQL clusters, even if in-place updates are enabled ( ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES=true ). Your applications will need to reconnect to PostgreSQL after the upgrade. Deprecation of backup metrics and fields in the Cluster .status With the transition to a backup and recovery agnostic approach based on CNPG-I plugins in CloudNativePG, which began with version 1.26.0 for Barman Cloud, we are starting the deprecation period for the following fields in the .status section of the Cluster resource: firstRecoverabilityPoint firstRecoverabilityPointByMethod lastSuccessfulBackup lastSuccessfulBackupByMethod lastFailedBackup The following Prometheus metrics are also deprecated: cnpg_collector_first_recoverability_point cnpg_collector_last_failed_backup_timestamp cnpg_collector_last_available_backup_timestamp Warning If you have migrated to a plugin-based backup and recovery solution such as Barman Cloud, these fields and metrics are no longer synchronized and will not be updated. Users still relying on the in-core support for Barman Cloud and volume snapshots can continue to use these fields for the time being. Under the new plugin-based approach, multiple backup methods can operate simultaneously, each with its own timeline for backup and recovery. For example, some plugins may provide snapshots without WAL archiving, while others support continuous archiving. Because of this flexibility, maintaining centralized status fields in the Cluster resource could be misleading or confusing, as they would not accurately represent the state across all configured backup methods. For this reason, these fields are being deprecated. Instead, each plugin is responsible for exposing its own backup status information and providing metrics back to the instance manager for monitoring and operational awareness. Declarative Hibernation in the cnpg plugin In this release, the cnpg plugin for kubectl transitions from an imperative to a declarative approach for cluster hibernation . The hibernate on and hibernate off commands are now convenient shortcuts that apply declarative changes to enable or disable hibernation. The hibernate status command has been removed, as its purpose is now fulfilled by the standard status command. Upgrading to 1.25 from a previous minor version Warning Every time you are upgrading to a higher minor release, make sure you go through the release notes and upgrade instructions of all the intermediate minor releases. For example, if you want to move from 1.23.x to 1.25, make sure you go through the release notes and upgrade instructions for 1.24 and 1.25. No changes to existing 1.24 cluster configurations are required when upgrading to 1.25. Upgrading to 1.24 from a previous minor version From Replica Clusters to Distributed Topology One of the key enhancements in CloudNativePG 1.24.0 is the upgrade of the replica cluster feature. The former replica cluster feature, now referred to as the \"Standalone Replica Cluster,\" is no longer recommended for Disaster Recovery (DR) and High Availability (HA) scenarios that span multiple Kubernetes clusters. Standalone replica clusters are best suited for read-only workloads, such as reporting, OLAP, or creating development environments with test data. For DR and HA purposes, CloudNativePG now introduces the Distributed Topology strategy for replica clusters. This new strategy allows you to build PostgreSQL clusters across private, public, hybrid, and multi-cloud environments, spanning multiple regions and potentially different cloud providers. It also provides an API to control the switchover operation, ensuring that only one cluster acts as the primary at any given time. This Distributed Topology strategy enhances resilience and scalability, making it a robust solution for modern, distributed applications that require high availability and disaster recovery capabilities across diverse infrastructure setups. You can seamlessly transition from a previous replica cluster configuration to a distributed topology by modifying all the Cluster resources involved in the distributed PostgreSQL setup. Ensure the following steps are taken: Configure the externalClusters section to include all the clusters involved in the distributed topology. We strongly suggest using the same configuration across all Cluster resources for maintainability and consistency. Configure the primary and source fields in the .spec.replica stanza to reflect the distributed topology. The primary field should contain the name of the current primary cluster in the distributed topology, while the source field should contain the name of the cluster each Cluster resource is replicating from. It is important to note that the enabled field, which was previously set to true or false , should now be unset (default). For more information, please refer to the \"Distributed Topology\" section for replica clusters .","title":"Installation and upgrades"},{"location":"installation_upgrade/#installation-and-upgrades","text":"","title":"Installation and upgrades"},{"location":"installation_upgrade/#installation-on-kubernetes","text":"","title":"Installation on Kubernetes"},{"location":"installation_upgrade/#directly-using-the-operator-manifest","text":"The operator can be installed like any other resource in Kubernetes, through a YAML manifest applied via kubectl . You can install the latest operator manifest for this minor release as follows: kubectl apply --server-side -f \\ https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/releases/cnpg-1.27.0-rc1.yaml You can verify that with: kubectl rollout status deployment \\ -n cnpg-system cnpg-controller-manager","title":"Directly using the operator manifest"},{"location":"installation_upgrade/#using-the-cnpg-plugin-for-kubectl","text":"You can use the cnpg plugin to override the default configuration options that are in the static manifests. For example, to generate the default latest manifest but change the watch namespaces to only be a specific namespace, you could run: kubectl cnpg install generate \\ --watch-namespace \"specific-namespace\" \\ > cnpg_for_specific_namespace.yaml Please refer to \" cnpg plugin\" documentation for a more comprehensive example. Warning If you are deploying CloudNativePG on GKE and get an error ( ... failed to call webhook... ), be aware that by default traffic between worker nodes and control plane is blocked by the firewall except for a few specific ports, as explained in the official docs and by this issue . You'll need to either change the targetPort in the webhook service, to be one of the allowed ones, or open the webhooks' port ( 9443 ) on the firewall.","title":"Using the cnpg plugin for kubectl"},{"location":"installation_upgrade/#testing-the-latest-development-snapshot","text":"If you want to test or evaluate the latest development snapshot of CloudNativePG before the next official patch release, you can download the manifests from the cloudnative-pg/artifacts which provides easy access to the current trunk (main) as well as to each supported release. For example, you can install the latest snapshot of the operator with: curl -sSfL \\ https://raw.githubusercontent.com/cloudnative-pg/artifacts/main/manifests/operator-manifest.yaml | \\ kubectl apply --server-side -f - If you are instead looking for the latest snapshot of the operator for this specific minor release, you can just run: curl -sSfL \\ https://raw.githubusercontent.com/cloudnative-pg/artifacts/release-1.27/manifests/operator-manifest.yaml | \\ kubectl apply --server-side -f - Important Snapshots are not supported by the CloudNativePG Community, and are not intended for use in production.","title":"Testing the latest development snapshot"},{"location":"installation_upgrade/#using-the-helm-chart","text":"The operator can be installed using the provided Helm chart .","title":"Using the Helm Chart"},{"location":"installation_upgrade/#using-olm","text":"CloudNativePG can also be installed via the Operator Lifecycle Manager (OLM) directly from OperatorHub.io . For deployments on Red Hat OpenShift, EDB offers and fully supports a certified version of CloudNativePG, available through the Red Hat OpenShift Container Platform .","title":"Using OLM"},{"location":"installation_upgrade/#details-about-the-deployment","text":"In Kubernetes, the operator is by default installed in the cnpg-system namespace as a Kubernetes Deployment . The name of this deployment depends on the installation method. When installed through the manifest or the cnpg plugin, it is called cnpg-controller-manager by default. When installed via Helm, the default name is cnpg-cloudnative-pg . Note With Helm you can customize the name of the deployment via the fullnameOverride field in the \"values.yaml\" file . You can get more information using the describe command in kubectl : $ kubectl get deployments -n cnpg-system NAME READY UP-TO-DATE AVAILABLE AGE <deployment-name> 1/1 1 1 18m kubectl describe deploy \\ -n cnpg-system \\ <deployment-name> As with any Deployment, it sits on top of a ReplicaSet and supports rolling upgrades. The default configuration of the CloudNativePG operator comes with a Deployment of a single replica, which is suitable for most installations. In case the node where the pod is running is not reachable anymore, the pod will be rescheduled on another node. If you require high availability at the operator level, it is possible to specify multiple replicas in the Deployment configuration - given that the operator supports leader election. Also, you can take advantage of taints and tolerations to make sure that the operator does not run on the same nodes where the actual PostgreSQL clusters are running (this might even include the control plane for self-managed Kubernetes installations). Operator configuration You can change the default behavior of the operator by overriding some default options. For more information, please refer to the \"Operator configuration\" section.","title":"Details about the deployment"},{"location":"installation_upgrade/#upgrades","text":"Important Please carefully read the release notes before performing an upgrade as some versions might require extra steps. Upgrading CloudNativePG operator is a two-step process: upgrade the controller and the related Kubernetes resources upgrade the instance manager running in every PostgreSQL pod Unless differently stated in the release notes, the first step is normally done by applying the manifest of the newer version for plain Kubernetes installations, or using the native package manager of the used distribution (please follow the instructions in the above sections). The second step is automatically triggered after updating the controller. By default, this initiates a rolling update of every deployed PostgreSQL cluster, upgrading one instance at a time to use the new instance manager. The rolling update concludes with a switchover, which is governed by the primaryUpdateStrategy option. The default value, unsupervised , completes the switchover automatically. If set to supervised , the user must manually promote the new primary instance using the cnpg plugin for kubectl . Rolling updates This process is discussed in-depth on the Rolling Updates page. Important In case primaryUpdateStrategy is set to the default value of unsupervised , an upgrade of the operator will trigger a switchover on your PostgreSQL cluster, causing a (normally negligible) downtime. If your PostgreSQL Cluster has only one instance, the instance will be automatically restarted as supervised value is not supported for primaryUpdateStrategy . In either case, your applications will have to reconnect to PostgreSQL. The default rolling update behavior can be replaced with in-place updates of the instance manager. This approach does not require a restart of the PostgreSQL instance, thereby avoiding a switchover within the cluster. This feature, which is disabled by default, is described in detail below.","title":"Upgrades"},{"location":"installation_upgrade/#spread-upgrades","text":"By default, all PostgreSQL clusters are rolled out simultaneously, which may lead to a spike in resource usage, especially when managing multiple clusters. CloudNativePG provides two configuration options at the operator level that allow you to introduce delays between cluster roll-outs or even between instances within the same cluster, helping to distribute resource usage over time: CLUSTERS_ROLLOUT_DELAY : Defines the number of seconds to wait between roll-outs of different PostgreSQL clusters (default: 0 ). INSTANCES_ROLLOUT_DELAY : Defines the number of seconds to wait between roll-outs of individual instances within the same PostgreSQL cluster (default: 0 ).","title":"Spread Upgrades"},{"location":"installation_upgrade/#in-place-updates-of-the-instance-manager","text":"By default, CloudNativePG issues a rolling update of the cluster every time the operator is updated. The new instance manager shipped with the operator is added to each PostgreSQL pod via an init container. However, this behavior can be changed via configuration to enable in-place updates of the instance manager, which is the PID 1 process that keeps the container alive. Internally, each instance manager in CloudNativePG supports the injection of a new executable that replaces the existing one after successfully completing an integrity verification phase and gracefully terminating all internal processes. Upon restarting with the new binary, the instance manager seamlessly adopts the already running postmaster . As a result, the PostgreSQL process is unaffected by the update, refraining from the need to perform a switchover. The other side of the coin, is that the Pod is changed after the start, breaking the pure concept of immutability. You can enable this feature by setting the ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES environment variable to 'true' in the operator configuration . The in-place upgrade process will not change the init container image inside the Pods. Therefore, the Pod definition will not reflect the current version of the operator.","title":"In-place updates of the instance manager"},{"location":"installation_upgrade/#compatibility-among-versions","text":"CloudNativePG follows semantic versioning. Every release of the operator within the same API version is compatible with the previous one. The current API version is v1, corresponding to versions 1.x.y of the operator. In addition to new features, new versions of the operator contain bug fixes and stability enhancements. Because of this, we strongly encourage users to upgrade to the latest version of the operator , as each version is released in order to maintain the most secure and stable Postgres environment. CloudNativePG currently releases new versions of the operator at least monthly. If you are unable to apply updates as each version becomes available, we recommend upgrading through each version in sequential order to come current periodically and not skipping versions. The release notes page contains a detailed list of the changes introduced in every released version of CloudNativePG, and it must be read before upgrading to a newer version of the software. Most versions are directly upgradable and in that case, applying the newer manifest for plain Kubernetes installations or using the native package manager of the chosen distribution is enough. When versions are not directly upgradable, the old version needs to be removed before installing the new one. This won't affect user data but only the operator itself.","title":"Compatibility among versions"},{"location":"installation_upgrade/#upgrading-to-126-from-a-previous-minor-version","text":"Important We strongly recommend that all CloudNativePG users upgrade to version 1.26.1, or at a minimum, to the latest stable version of your current minor release (for example, 1.25.x). Warning Due to changes in the startup probe for the manager component ( #6623 ), upgrading the operator will trigger a restart of your PostgreSQL clusters, even if in-place updates are enabled ( ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES=true ). Your applications will need to reconnect to PostgreSQL after the upgrade.","title":"Upgrading to 1.26 from a previous minor version"},{"location":"installation_upgrade/#deprecation-of-backup-metrics-and-fields-in-the-cluster-status","text":"With the transition to a backup and recovery agnostic approach based on CNPG-I plugins in CloudNativePG, which began with version 1.26.0 for Barman Cloud, we are starting the deprecation period for the following fields in the .status section of the Cluster resource: firstRecoverabilityPoint firstRecoverabilityPointByMethod lastSuccessfulBackup lastSuccessfulBackupByMethod lastFailedBackup The following Prometheus metrics are also deprecated: cnpg_collector_first_recoverability_point cnpg_collector_last_failed_backup_timestamp cnpg_collector_last_available_backup_timestamp Warning If you have migrated to a plugin-based backup and recovery solution such as Barman Cloud, these fields and metrics are no longer synchronized and will not be updated. Users still relying on the in-core support for Barman Cloud and volume snapshots can continue to use these fields for the time being. Under the new plugin-based approach, multiple backup methods can operate simultaneously, each with its own timeline for backup and recovery. For example, some plugins may provide snapshots without WAL archiving, while others support continuous archiving. Because of this flexibility, maintaining centralized status fields in the Cluster resource could be misleading or confusing, as they would not accurately represent the state across all configured backup methods. For this reason, these fields are being deprecated. Instead, each plugin is responsible for exposing its own backup status information and providing metrics back to the instance manager for monitoring and operational awareness.","title":"Deprecation of backup metrics and fields in the Cluster .status"},{"location":"installation_upgrade/#declarative-hibernation-in-the-cnpg-plugin","text":"In this release, the cnpg plugin for kubectl transitions from an imperative to a declarative approach for cluster hibernation . The hibernate on and hibernate off commands are now convenient shortcuts that apply declarative changes to enable or disable hibernation. The hibernate status command has been removed, as its purpose is now fulfilled by the standard status command.","title":"Declarative Hibernation in the cnpg plugin"},{"location":"installation_upgrade/#upgrading-to-125-from-a-previous-minor-version","text":"Warning Every time you are upgrading to a higher minor release, make sure you go through the release notes and upgrade instructions of all the intermediate minor releases. For example, if you want to move from 1.23.x to 1.25, make sure you go through the release notes and upgrade instructions for 1.24 and 1.25. No changes to existing 1.24 cluster configurations are required when upgrading to 1.25.","title":"Upgrading to 1.25 from a previous minor version"},{"location":"installation_upgrade/#upgrading-to-124-from-a-previous-minor-version","text":"","title":"Upgrading to 1.24 from a previous minor version"},{"location":"installation_upgrade/#from-replica-clusters-to-distributed-topology","text":"One of the key enhancements in CloudNativePG 1.24.0 is the upgrade of the replica cluster feature. The former replica cluster feature, now referred to as the \"Standalone Replica Cluster,\" is no longer recommended for Disaster Recovery (DR) and High Availability (HA) scenarios that span multiple Kubernetes clusters. Standalone replica clusters are best suited for read-only workloads, such as reporting, OLAP, or creating development environments with test data. For DR and HA purposes, CloudNativePG now introduces the Distributed Topology strategy for replica clusters. This new strategy allows you to build PostgreSQL clusters across private, public, hybrid, and multi-cloud environments, spanning multiple regions and potentially different cloud providers. It also provides an API to control the switchover operation, ensuring that only one cluster acts as the primary at any given time. This Distributed Topology strategy enhances resilience and scalability, making it a robust solution for modern, distributed applications that require high availability and disaster recovery capabilities across diverse infrastructure setups. You can seamlessly transition from a previous replica cluster configuration to a distributed topology by modifying all the Cluster resources involved in the distributed PostgreSQL setup. Ensure the following steps are taken: Configure the externalClusters section to include all the clusters involved in the distributed topology. We strongly suggest using the same configuration across all Cluster resources for maintainability and consistency. Configure the primary and source fields in the .spec.replica stanza to reflect the distributed topology. The primary field should contain the name of the current primary cluster in the distributed topology, while the source field should contain the name of the cluster each Cluster resource is replicating from. It is important to note that the enabled field, which was previously set to true or false , should now be unset (default). For more information, please refer to the \"Distributed Topology\" section for replica clusters .","title":"From Replica Clusters to Distributed Topology"},{"location":"instance_manager/","text":"Postgres instance manager CloudNativePG does not rely on an external tool for failover management. It simply relies on the Kubernetes API server and a native key component called: the Postgres instance manager . The instance manager takes care of the entire lifecycle of the PostgreSQL server process (also known as postmaster ). When you create a new cluster, the operator makes a Pod per instance. The field .spec.instances specifies how many instances to create. Each Pod will start the instance manager as the parent process (PID 1) for the main container, which in turn runs the PostgreSQL instance. During the lifetime of the Pod, the instance manager acts as a backend to handle the startup, liveness and readiness probes . Startup Probe The startup probe ensures that a PostgreSQL instance, whether a primary or standby, has fully started. Info By default, the startup probe uses pg_isready . However, the behavior can be customized by specifying a different startup strategy. While the startup probe is running, the liveness and readiness probes remain disabled. Following Kubernetes standards, if the startup probe fails, the kubelet will terminate the container, which will then be restarted. The .spec.startDelay parameter specifies the maximum time, in seconds, allowed for the startup probe to succeed. By default, the startDelay is set to 3600 seconds. It is recommended to adjust this setting based on the time PostgreSQL needs to fully initialize in your specific environment. Warning Setting .spec.startDelay too low can cause the liveness probe to activate prematurely, potentially resulting in unnecessary Pod restarts if PostgreSQL hasn\u2019t fully initialized. CloudNativePG configures the startup probe with the following default parameters: failureThreshold: FAILURE_THRESHOLD periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 The failureThreshold value is automatically calculated by dividing startDelay by periodSeconds . You can customize any of the probe settings in the .spec.probes.startup section of your configuration. Warning Be sure that any custom probe settings are tailored to your cluster's operational requirements to avoid unintended disruptions. Info For more details on probe configuration, refer to the probe API documentation . If you manually specify .spec.probes.startup.failureThreshold , it will override the default behavior and disable the automatic use of startDelay . For example, the following configuration explicitly sets custom probe parameters, bypassing startDelay : # ... snip spec: probes: startup: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10 Startup Probe Strategy In certain scenarios, you may need to customize the startup strategy for your PostgreSQL cluster. For example, you might delay marking a replica as started until it begins streaming from the primary or define a replication lag threshold that must be met before considering the replica ready. To accommodate these requirements, CloudNativePG extends the .spec.probes.startup stanza with two optional parameters: type : specifies the criteria for considering the probe successful. Accepted values, in increasing order of complexity/depth, include: pg_isready : marks the probe as successful when the pg_isready command exits with 0 . This is the default for primary instances and replicas. query : marks the probe as successful when a basic query is executed on the postgres database locally. streaming : marks the probe as successful when the replica begins streaming from its source and meets the specified lag requirements (details below). maximumLag : defines the maximum acceptable replication lag, measured in bytes (expressed as Kubernetes quantities). This parameter is only applicable when type is set to streaming . If maximumLag is not specified, the replica is considered successfully started as soon as it begins streaming. Important The .spec.probes.startup.maximumLag option is validated and enforced only during the startup phase of the pod, meaning it applies exclusively when the replica is starting. Warning Incorrect configuration of the maximumLag option can cause continuous failures of the startup probe, leading to repeated replica restarts. Ensure you understand how this option works and configure appropriate values for failureThreshold and periodSeconds to give the replica enough time to catch up with its source. The following example requires a replica to have a maximum lag of 16Mi from the source to be considered started: # <snip> probes: startup: type: streaming maximumLag: 16Mi Liveness Probe The liveness probe begins after the startup probe successfully completes. Its primary role is to ensure the PostgreSQL instance manager is operating correctly. Following Kubernetes standards, if the liveness probe fails, the kubelet will terminate the container, which will then be restarted. The amount of time before a Pod is classified as not alive is configurable via the .spec.livenessProbeTimeout parameter. CloudNativePG configures the liveness probe with the following default parameters: failureThreshold: FAILURE_THRESHOLD periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 The failureThreshold value is automatically calculated by dividing livenessProbeTimeout by periodSeconds . By default, .spec.livenessProbeTimeout is set to 30 seconds. This means the liveness probe will report a failure if it detects three consecutive probe failures, with a 10-second interval between each check. You can customize any of the probe settings in the .spec.probes.liveness section of your configuration. Warning Be sure that any custom probe settings are tailored to your cluster's operational requirements to avoid unintended disruptions. Info For more details on probe configuration, refer to the probe API documentation . If you manually specify .spec.probes.liveness.failureThreshold , it will override the default behavior and disable the automatic use of livenessProbeTimeout . For example, the following configuration explicitly sets custom probe parameters, bypassing livenessProbeTimeout : # ... snip spec: probes: liveness: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10 Primary Isolation CloudNativePG 1.27 introduces an additional behavior for the liveness probe of a PostgreSQL primary, which will report a failure if both of the following conditions are met: The instance manager cannot reach the Kubernetes API server The instance manager cannot reach any other instance via the instance manager\u2019s REST API The effect of this behavior is to consider an isolated primary to be not alive and subsequently shut it down when the liveness probe fails. It is enabled by default and can be disabled by adding the following: spec: probes: liveness: isolationCheck: enabled: false Important Be aware that the default liveness probe settings\u2014automatically derived from livenessProbeTimeout \u2014might be aggressive (30 seconds). As such, we recommend explicitly setting the liveness probe configuration to suit your environment. The spec also accepts two optional network settings: requestTimeout and connectionTimeout , both defaulting to 1000 (in milliseconds). In cloud environments, you may need to increase these values. For example: spec: probes: liveness: isolationCheck: enabled: true requestTimeout: \"2000\" connectionTimeout: \"2000\" Readiness Probe The readiness probe starts once the startup probe has successfully completed. Its primary purpose is to check whether the PostgreSQL instance is ready to accept traffic and serve requests at any point during the pod's lifecycle. Info By default, the readiness probe uses pg_isready . However, the behavior can be customized by specifying a different readiness strategy. Following Kubernetes standards, if the readiness probe fails, the pod will be marked unready and will not receive traffic from any services. An unready pod is also ineligible for promotion during automated failover scenarios. CloudNativePG uses the following default configuration for the readiness probe: failureThreshold: 3 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 If the default settings do not suit your requirements, you can fully customize the readiness probe by specifying parameters in the .spec.probes.readiness stanza. For example: # ... snip spec: probes: readiness: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10 Warning Ensure that any custom probe settings are aligned with your cluster\u2019s operational requirements to prevent unintended disruptions. Info For more information on configuring probes, see the probe API . Readiness Probe Strategy In certain scenarios, you may need to customize the readiness strategy for your cluster. For example, you might delay marking a replica as ready until it begins streaming from the primary or define a maximum replication lag threshold before considering the replica ready. To accommodate these requirements, CloudNativePG extends the .spec.probes.readiness stanza with two optional parameters: type and maximumLag . Please refer to the Startup Probe Strategy section for detailed information on these options. Important Unlike the startup probe, the .spec.probes.readiness.maximumLag option is continuously monitored. A lagging replica may become unready if this setting is not appropriately tuned. Warning Incorrect configuration of the maximumLag option can lead to repeated readiness probe failures, causing serious consequences, such as: Exclusion of the replica from key operator features, such as promotion during failover or participation in synchronous replication quorum. Disruptions in read/read-only services. In longer failover times scenarios, replicas might be declared unready, leading to a cluster stall requiring manual intervention. Recommendation Use the streaming and maximumLag options with extreme caution. If you're unfamiliar with PostgreSQL replication, rely on the default strategy. Seek professional advice if unsure. The following example requires a replica to have a maximum lag of 64Mi from the source to be considered ready. It also provides approximately 300 seconds (30 failures \u00d7 10 seconds) for the startup probe to succeed: # <snip> probes: readiness: type: streaming maximumLag: 64Mi failureThreshold: 30 periodSeconds: 10 Shutdown control When a Pod running Postgres is deleted, either manually or by Kubernetes following a node drain operation, the kubelet will send a termination signal to the instance manager, and the instance manager will take care of shutting down PostgreSQL in an appropriate way. The .spec.smartShutdownTimeout and .spec.stopDelay options, expressed in seconds, control the amount of time given to PostgreSQL to shut down. The values default to 180 and 1800 seconds, respectively. The shutdown procedure is composed of two steps: The instance manager requests a smart shut down, disallowing any new connection to PostgreSQL. This step will last for up to .spec.smartShutdownTimeout seconds. If PostgreSQL is still up, the instance manager requests a fast shut down, terminating any existing connection and exiting promptly. If the instance is archiving and/or streaming WAL files, the process will wait for up to the remaining time set in .spec.stopDelay to complete the operation and then forcibly shut down. Such a timeout needs to be at least 15 seconds. Important In order to avoid any data loss in the Postgres cluster, which impacts the database RPO , don't delete the Pod where the primary instance is running. In this case, perform a switchover to another instance first. Shutdown of the primary during a switchover During a switchover, the shutdown procedure is slightly different from the general case. Indeed, the operator requires the former primary to issue a fast shut down before the selected new primary can be promoted, in order to ensure that all the data are available on the new primary. For this reason, the .spec.switchoverDelay , expressed in seconds, controls the time given to the former primary to shut down gracefully and archive all the WAL files. By default it is set to 3600 (1 hour). Warning The .spec.switchoverDelay option affects the RPO and RTO of your PostgreSQL database. Setting it to a low value, might favor RTO over RPO but lead to data loss at cluster level and/or backup level. On the contrary, setting it to a high value, might remove the risk of data loss while leaving the cluster without an active primary for a longer time during the switchover. Failover In case of primary pod failure, the cluster will go into failover mode. Please refer to the \"Failover\" section for details. Disk Full Failure Storage exhaustion is a well known issue for PostgreSQL clusters. The PostgreSQL documentation highlights the possible failure scenarios and the importance of monitoring disk usage to prevent it from becoming full. The same applies to CloudNativePG and Kubernetes as well: the \"Monitoring\" section provides details on checking the disk space used by WAL segments and standard metrics on disk usage exported to Prometheus. Important In a production system, it is critical to monitor the database continuously. Exhausted disk storage can lead to a database server shutdown. Note The detection of exhausted storage relies on a storage class that accurately reports disk size and usage. This may not be the case in simulated Kubernetes environments like Kind or with test storage class implementations such as csi-driver-host-path . If the disk containing the WALs becomes full and no more WAL segments can be stored, PostgreSQL will stop working. CloudNativePG correctly detects this issue by verifying that there is enough space to store the next WAL segment, and avoids triggering a failover, which could complicate recovery. That allows a human administrator to address the root cause. In such a case, if supported by the storage class, the quickest course of action is currently to: Expand the storage size of the full PVC Increase the size in the Cluster resource to the same value Once the issue is resolved and there is sufficient free space for WAL segments, the Pod will restart and the cluster will become healthy. See also the \"Volume expansion\" section of the documentation.","title":"Postgres instance manager"},{"location":"instance_manager/#postgres-instance-manager","text":"CloudNativePG does not rely on an external tool for failover management. It simply relies on the Kubernetes API server and a native key component called: the Postgres instance manager . The instance manager takes care of the entire lifecycle of the PostgreSQL server process (also known as postmaster ). When you create a new cluster, the operator makes a Pod per instance. The field .spec.instances specifies how many instances to create. Each Pod will start the instance manager as the parent process (PID 1) for the main container, which in turn runs the PostgreSQL instance. During the lifetime of the Pod, the instance manager acts as a backend to handle the startup, liveness and readiness probes .","title":"Postgres instance manager"},{"location":"instance_manager/#startup-probe","text":"The startup probe ensures that a PostgreSQL instance, whether a primary or standby, has fully started. Info By default, the startup probe uses pg_isready . However, the behavior can be customized by specifying a different startup strategy. While the startup probe is running, the liveness and readiness probes remain disabled. Following Kubernetes standards, if the startup probe fails, the kubelet will terminate the container, which will then be restarted. The .spec.startDelay parameter specifies the maximum time, in seconds, allowed for the startup probe to succeed. By default, the startDelay is set to 3600 seconds. It is recommended to adjust this setting based on the time PostgreSQL needs to fully initialize in your specific environment. Warning Setting .spec.startDelay too low can cause the liveness probe to activate prematurely, potentially resulting in unnecessary Pod restarts if PostgreSQL hasn\u2019t fully initialized. CloudNativePG configures the startup probe with the following default parameters: failureThreshold: FAILURE_THRESHOLD periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 The failureThreshold value is automatically calculated by dividing startDelay by periodSeconds . You can customize any of the probe settings in the .spec.probes.startup section of your configuration. Warning Be sure that any custom probe settings are tailored to your cluster's operational requirements to avoid unintended disruptions. Info For more details on probe configuration, refer to the probe API documentation . If you manually specify .spec.probes.startup.failureThreshold , it will override the default behavior and disable the automatic use of startDelay . For example, the following configuration explicitly sets custom probe parameters, bypassing startDelay : # ... snip spec: probes: startup: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10","title":"Startup Probe"},{"location":"instance_manager/#startup-probe-strategy","text":"In certain scenarios, you may need to customize the startup strategy for your PostgreSQL cluster. For example, you might delay marking a replica as started until it begins streaming from the primary or define a replication lag threshold that must be met before considering the replica ready. To accommodate these requirements, CloudNativePG extends the .spec.probes.startup stanza with two optional parameters: type : specifies the criteria for considering the probe successful. Accepted values, in increasing order of complexity/depth, include: pg_isready : marks the probe as successful when the pg_isready command exits with 0 . This is the default for primary instances and replicas. query : marks the probe as successful when a basic query is executed on the postgres database locally. streaming : marks the probe as successful when the replica begins streaming from its source and meets the specified lag requirements (details below). maximumLag : defines the maximum acceptable replication lag, measured in bytes (expressed as Kubernetes quantities). This parameter is only applicable when type is set to streaming . If maximumLag is not specified, the replica is considered successfully started as soon as it begins streaming. Important The .spec.probes.startup.maximumLag option is validated and enforced only during the startup phase of the pod, meaning it applies exclusively when the replica is starting. Warning Incorrect configuration of the maximumLag option can cause continuous failures of the startup probe, leading to repeated replica restarts. Ensure you understand how this option works and configure appropriate values for failureThreshold and periodSeconds to give the replica enough time to catch up with its source. The following example requires a replica to have a maximum lag of 16Mi from the source to be considered started: # <snip> probes: startup: type: streaming maximumLag: 16Mi","title":"Startup Probe Strategy"},{"location":"instance_manager/#liveness-probe","text":"The liveness probe begins after the startup probe successfully completes. Its primary role is to ensure the PostgreSQL instance manager is operating correctly. Following Kubernetes standards, if the liveness probe fails, the kubelet will terminate the container, which will then be restarted. The amount of time before a Pod is classified as not alive is configurable via the .spec.livenessProbeTimeout parameter. CloudNativePG configures the liveness probe with the following default parameters: failureThreshold: FAILURE_THRESHOLD periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 The failureThreshold value is automatically calculated by dividing livenessProbeTimeout by periodSeconds . By default, .spec.livenessProbeTimeout is set to 30 seconds. This means the liveness probe will report a failure if it detects three consecutive probe failures, with a 10-second interval between each check. You can customize any of the probe settings in the .spec.probes.liveness section of your configuration. Warning Be sure that any custom probe settings are tailored to your cluster's operational requirements to avoid unintended disruptions. Info For more details on probe configuration, refer to the probe API documentation . If you manually specify .spec.probes.liveness.failureThreshold , it will override the default behavior and disable the automatic use of livenessProbeTimeout . For example, the following configuration explicitly sets custom probe parameters, bypassing livenessProbeTimeout : # ... snip spec: probes: liveness: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10","title":"Liveness Probe"},{"location":"instance_manager/#primary-isolation","text":"CloudNativePG 1.27 introduces an additional behavior for the liveness probe of a PostgreSQL primary, which will report a failure if both of the following conditions are met: The instance manager cannot reach the Kubernetes API server The instance manager cannot reach any other instance via the instance manager\u2019s REST API The effect of this behavior is to consider an isolated primary to be not alive and subsequently shut it down when the liveness probe fails. It is enabled by default and can be disabled by adding the following: spec: probes: liveness: isolationCheck: enabled: false Important Be aware that the default liveness probe settings\u2014automatically derived from livenessProbeTimeout \u2014might be aggressive (30 seconds). As such, we recommend explicitly setting the liveness probe configuration to suit your environment. The spec also accepts two optional network settings: requestTimeout and connectionTimeout , both defaulting to 1000 (in milliseconds). In cloud environments, you may need to increase these values. For example: spec: probes: liveness: isolationCheck: enabled: true requestTimeout: \"2000\" connectionTimeout: \"2000\"","title":"Primary Isolation"},{"location":"instance_manager/#readiness-probe","text":"The readiness probe starts once the startup probe has successfully completed. Its primary purpose is to check whether the PostgreSQL instance is ready to accept traffic and serve requests at any point during the pod's lifecycle. Info By default, the readiness probe uses pg_isready . However, the behavior can be customized by specifying a different readiness strategy. Following Kubernetes standards, if the readiness probe fails, the pod will be marked unready and will not receive traffic from any services. An unready pod is also ineligible for promotion during automated failover scenarios. CloudNativePG uses the following default configuration for the readiness probe: failureThreshold: 3 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 If the default settings do not suit your requirements, you can fully customize the readiness probe by specifying parameters in the .spec.probes.readiness stanza. For example: # ... snip spec: probes: readiness: periodSeconds: 3 timeoutSeconds: 3 failureThreshold: 10 Warning Ensure that any custom probe settings are aligned with your cluster\u2019s operational requirements to prevent unintended disruptions. Info For more information on configuring probes, see the probe API .","title":"Readiness Probe"},{"location":"instance_manager/#readiness-probe-strategy","text":"In certain scenarios, you may need to customize the readiness strategy for your cluster. For example, you might delay marking a replica as ready until it begins streaming from the primary or define a maximum replication lag threshold before considering the replica ready. To accommodate these requirements, CloudNativePG extends the .spec.probes.readiness stanza with two optional parameters: type and maximumLag . Please refer to the Startup Probe Strategy section for detailed information on these options. Important Unlike the startup probe, the .spec.probes.readiness.maximumLag option is continuously monitored. A lagging replica may become unready if this setting is not appropriately tuned. Warning Incorrect configuration of the maximumLag option can lead to repeated readiness probe failures, causing serious consequences, such as: Exclusion of the replica from key operator features, such as promotion during failover or participation in synchronous replication quorum. Disruptions in read/read-only services. In longer failover times scenarios, replicas might be declared unready, leading to a cluster stall requiring manual intervention. Recommendation Use the streaming and maximumLag options with extreme caution. If you're unfamiliar with PostgreSQL replication, rely on the default strategy. Seek professional advice if unsure. The following example requires a replica to have a maximum lag of 64Mi from the source to be considered ready. It also provides approximately 300 seconds (30 failures \u00d7 10 seconds) for the startup probe to succeed: # <snip> probes: readiness: type: streaming maximumLag: 64Mi failureThreshold: 30 periodSeconds: 10","title":"Readiness Probe Strategy"},{"location":"instance_manager/#shutdown-control","text":"When a Pod running Postgres is deleted, either manually or by Kubernetes following a node drain operation, the kubelet will send a termination signal to the instance manager, and the instance manager will take care of shutting down PostgreSQL in an appropriate way. The .spec.smartShutdownTimeout and .spec.stopDelay options, expressed in seconds, control the amount of time given to PostgreSQL to shut down. The values default to 180 and 1800 seconds, respectively. The shutdown procedure is composed of two steps: The instance manager requests a smart shut down, disallowing any new connection to PostgreSQL. This step will last for up to .spec.smartShutdownTimeout seconds. If PostgreSQL is still up, the instance manager requests a fast shut down, terminating any existing connection and exiting promptly. If the instance is archiving and/or streaming WAL files, the process will wait for up to the remaining time set in .spec.stopDelay to complete the operation and then forcibly shut down. Such a timeout needs to be at least 15 seconds. Important In order to avoid any data loss in the Postgres cluster, which impacts the database RPO , don't delete the Pod where the primary instance is running. In this case, perform a switchover to another instance first.","title":"Shutdown control"},{"location":"instance_manager/#shutdown-of-the-primary-during-a-switchover","text":"During a switchover, the shutdown procedure is slightly different from the general case. Indeed, the operator requires the former primary to issue a fast shut down before the selected new primary can be promoted, in order to ensure that all the data are available on the new primary. For this reason, the .spec.switchoverDelay , expressed in seconds, controls the time given to the former primary to shut down gracefully and archive all the WAL files. By default it is set to 3600 (1 hour). Warning The .spec.switchoverDelay option affects the RPO and RTO of your PostgreSQL database. Setting it to a low value, might favor RTO over RPO but lead to data loss at cluster level and/or backup level. On the contrary, setting it to a high value, might remove the risk of data loss while leaving the cluster without an active primary for a longer time during the switchover.","title":"Shutdown of the primary during a switchover"},{"location":"instance_manager/#failover","text":"In case of primary pod failure, the cluster will go into failover mode. Please refer to the \"Failover\" section for details.","title":"Failover"},{"location":"instance_manager/#disk-full-failure","text":"Storage exhaustion is a well known issue for PostgreSQL clusters. The PostgreSQL documentation highlights the possible failure scenarios and the importance of monitoring disk usage to prevent it from becoming full. The same applies to CloudNativePG and Kubernetes as well: the \"Monitoring\" section provides details on checking the disk space used by WAL segments and standard metrics on disk usage exported to Prometheus. Important In a production system, it is critical to monitor the database continuously. Exhausted disk storage can lead to a database server shutdown. Note The detection of exhausted storage relies on a storage class that accurately reports disk size and usage. This may not be the case in simulated Kubernetes environments like Kind or with test storage class implementations such as csi-driver-host-path . If the disk containing the WALs becomes full and no more WAL segments can be stored, PostgreSQL will stop working. CloudNativePG correctly detects this issue by verifying that there is enough space to store the next WAL segment, and avoids triggering a failover, which could complicate recovery. That allows a human administrator to address the root cause. In such a case, if supported by the storage class, the quickest course of action is currently to: Expand the storage size of the full PVC Increase the size in the Cluster resource to the same value Once the issue is resolved and there is sufficient free space for WAL segments, the Pod will restart and the cluster will become healthy. See also the \"Volume expansion\" section of the documentation.","title":"Disk Full Failure"},{"location":"kubectl-plugin/","text":"Kubectl Plugin CloudNativePG provides a plugin for kubectl to manage a cluster in Kubernetes. Install You can install the cnpg plugin using a variety of methods. Note For air-gapped systems, installation via package managers, using previously downloaded files, may be a good option. Via the installation script curl -sSfL \\ https://github.com/cloudnative-pg/cloudnative-pg/raw/main/hack/install-cnpg-plugin.sh | \\ sudo sh -s -- -b /usr/local/bin Using the Debian or RedHat packages In the releases section of the GitHub repository , you can navigate to any release of interest (pick the same or newer release than your CloudNativePG operator), and in it you will find an Assets section. In that section are pre-built packages for a variety of systems. As a result, you can follow standard practices and instructions to install them in your systems. Debian packages For example, let's install the 1.27.0-rc1 release of the plugin, for an Intel based 64 bit server. First, we download the right .deb file. wget https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.27.0-rc1/kubectl-cnpg_1.27.0-rc1_linux_x86_64.deb \\ --output-document kube-plugin.deb Then, with superuser privileges, install from the local file using dpkg : $ sudo dpkg -i kube-plugin.deb Selecting previously unselected package cnpg. (Reading database ... 6688 files and directories currently installed.) Preparing to unpack kube-plugin.deb ... Unpacking cnpg (1.27.0-rc1) ... Setting up cnpg (1.27.0-rc1) ... RPM packages As in the example for .rpm packages, let's install the 1.27.0-rc1 release for an Intel 64 bit machine. Note the --output flag to provide a file name. curl -L https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.27.0-rc1/kubectl-cnpg_1.27.0-rc1_linux_x86_64.rpm \\ --output kube-plugin.rpm Then, with superuser privileges, install with yum , and you're ready to use: $ sudo yum --disablerepo=* localinstall kube-plugin.rpm Failed to set locale, defaulting to C.UTF-8 Dependencies resolved. ==================================================================================================== Package Architecture Version Repository Size ==================================================================================================== Installing: cnpg x86_64 1.27.0-rc1 @commandline 20 M Transaction Summary ==================================================================================================== Install 1 Package Total size: 20 M Installed size: 78 M Is this ok [y/N]: y Using the Arch Linux User Repository (AUR) Package To install the plugin from the AUR , follow these steps: git clone https://aur.archlinux.org/kubectl-cnpg.git cd kubectl-cnpg makepkg -si Or use your favorite AUR-helper, for example paru : paru -S kubectl-cnpg Using Krew If you already have Krew installed, you can simply run: kubectl krew install cnpg When a new version of the plugin is released, you can update the existing installation with: kubectl krew update kubectl krew upgrade cnpg Using Homebrew Note Please note that the Homebrew community manages the availability of the kubectl-cnpg plugin on Homebrew . If you already have Homebrew installed, you can simply run: brew install kubectl-cnpg When a new version of the plugin is released, you can update the existing installation with: brew update brew upgrade kubectl-cnpg Note Auto-completion for the kubectl plugin is already managed by Homebrew. There's no need to create the kubectl_complete-cnpg script mentioned below. Supported Architectures CloudNativePG Plugin is currently built for the following operating system and architectures: Linux amd64 arm 5/6/7 arm64 s390x ppc64le macOS amd64 arm64 Windows 386 amd64 arm 5/6/7 arm64 Configuring auto-completion To configure auto-completion for the plugin, a helper shell script needs to be installed into your current PATH. Assuming the latter contains /usr/local/bin , this can be done with the following commands: cat > kubectl_complete-cnpg <<EOF #!/usr/bin/env sh # Call the __complete command passing it all arguments kubectl cnpg __complete \"\\$@\" EOF chmod +x kubectl_complete-cnpg # Important: the following command may require superuser permission sudo mv kubectl_complete-cnpg /usr/local/bin Important The name of the script needs to be exactly the one provided since it's used by the kubectl auto-complete process Use Once the plugin is installed and deployed, you can start using it like this: kubectl cnpg COMMAND [ARGS...] Note The plugin automatically detects if the standard output channel is connected to a terminal. In such cases, it may add ANSI colors to the command output. To disable colors, use the --color=never option with the command. Generation of installation manifests The cnpg plugin can be used to generate the YAML manifest for the installation of the operator. This option would typically be used if you want to override some default configurations such as number of replicas, installation namespace, namespaces to watch, and so on. For details and available options, run: kubectl cnpg install generate --help The main options are: -n : specifies the namespace in which to install the operator (default: cnpg-system ). --control-plane : if set to true, the operator deployment will include a toleration and affinity for node-role.kubernetes.io/control-plane . --replicas : sets the number of replicas in the deployment. --watch-namespace : specifies a comma-separated list of namespaces to watch (default: all namespaces). --version : defines the minor version of the operator to be installed, such as 1.23 . If a minor version is specified, the plugin installs the latest patch version of that minor version. If no version is supplied, the plugin installs the latest MAJOR.MINOR.PATCH version of the operator. An example of the generate command, which will generate a YAML manifest that will install the operator, is as follows: kubectl cnpg install generate \\ -n king \\ --version 1.23 \\ --replicas 3 \\ --watch-namespace \"albert, bb, freddie\" \\ > operator.yaml The flags in the above command have the following meaning: - -n king install the CNPG operator into the king namespace - --version 1.23 install the latest patch version for minor version 1.23 - --replicas 3 install the operator with 3 replicas - --watch-namespace \"albert, bb, freddie\" have the operator watch for changes in the albert , bb and freddie namespaces only Status The status command provides an overview of the current status of your cluster, including: general information : name of the cluster, PostgreSQL's system ID, number of instances, current timeline and position in the WAL backup : point of recoverability, and WAL archiving status as returned by the pg_stat_archiver view from the primary - or designated primary in the case of a replica cluster streaming replication : information taken directly from the pg_stat_replication view on the primary instance instances : information about each Postgres instance, taken directly by each instance manager; in the case of a standby, the Current LSN field corresponds to the latest write-ahead log location that has been replayed during recovery (replay LSN). Important The status information above is taken at different times and at different locations, resulting in slightly inconsistent returned values. For example, the Current Write LSN location in the main header, might be different from the Current LSN field in the instances status as it is taken at two different time intervals. kubectl cnpg status sandbox Cluster Summary Name: default/sandbox System ID: 7423474350493388827 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:16.4 Primary instance: sandbox-1 Primary start time: 2024-10-08 18:31:57 +0000 UTC (uptime 1m14s) Status: Cluster in healthy state Instances: 3 Ready instances: 3 Size: 126M Current Write LSN: 0/604DE38 (Timeline: 1 - WAL File: 000000010000000000000006) Continuous Backup status Not configured Streaming Replication status Replication Slots Enabled Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority Replication Slot ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- ---------------- sandbox-2 0/604DE38 0/604DE38 0/604DE38 0/604DE38 00:00:00 00:00:00 00:00:00 streaming async 0 active sandbox-3 0/604DE38 0/604DE38 0/604DE38 0/604DE38 00:00:00 00:00:00 00:00:00 streaming async 0 active Instances status Name Current LSN Replication role Status QoS Manager Version Node ---- ----------- ---------------- ------ --- --------------- ---- sandbox-1 0/604DE38 Primary OK BestEffort 1.27.0-rc1 k8s-eu-worker sandbox-2 0/604DE38 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker2 sandbox-3 0/604DE38 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker If you require more detailed status information, use the --verbose option (or -v for short). The level of detail increases each time the flag is repeated: kubectl cnpg status sandbox --verbose Cluster Summary Name: default/sandbox System ID: 7423474350493388827 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:16.4 Primary instance: sandbox-1 Primary start time: 2024-10-08 18:31:57 +0000 UTC (uptime 2m4s) Status: Cluster in healthy state Instances: 3 Ready instances: 3 Size: 126M Current Write LSN: 0/6053720 (Timeline: 1 - WAL File: 000000010000000000000006) Continuous Backup status Not configured Physical backups No running physical backups found Streaming Replication status Replication Slots Enabled Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority Replication Slot Slot Restart LSN Slot WAL Status Slot Safe WAL Size ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- ---------------- ---------------- --------------- ------------------ sandbox-2 0/6053720 0/6053720 0/6053720 0/6053720 00:00:00 00:00:00 00:00:00 streaming async 0 active 0/6053720 reserved NULL sandbox-3 0/6053720 0/6053720 0/6053720 0/6053720 00:00:00 00:00:00 00:00:00 streaming async 0 active 0/6053720 reserved NULL Unmanaged Replication Slot Status No unmanaged replication slots found Managed roles status No roles managed Tablespaces status No managed tablespaces Pod Disruption Budgets status Name Role Expected Pods Current Healthy Minimum Desired Healthy Disruptions Allowed ---- ---- ------------- --------------- ----------------------- ------------------- sandbox replica 2 2 1 1 sandbox-primary primary 1 1 1 0 Instances status Name Current LSN Replication role Status QoS Manager Version Node ---- ----------- ---------------- ------ --- --------------- ---- sandbox-1 0/6053720 Primary OK BestEffort 1.27.0-rc1 k8s-eu-worker sandbox-2 0/6053720 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker2 sandbox-3 0/6053720 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker With an additional -v (e.g. kubectl cnpg status sandbox -v -v ), you can also view PostgreSQL configuration, HBA settings, and certificates. The command also supports output in yaml and json format. Promote The meaning of this command is to promote a pod in the cluster to primary, so you can start with maintenance work or test a switch-over situation in your cluster: kubectl cnpg promote CLUSTER CLUSTER-INSTANCE Or you can use the instance node number to promote: kubectl cnpg promote CLUSTER INSTANCE Certificates Clusters created using the CloudNativePG operator work with a CA to sign a TLS authentication certificate. To get a certificate, you need to provide a name for the secret to store the credentials, the cluster name, and a user for this certificate: kubectl cnpg certificate cluster-cert --cnpg-cluster CLUSTER --cnpg-user USER After the secret it's created, you can get it using kubectl : kubectl get secret cluster-cert And the content of the same in plain text using the following commands: kubectl get secret cluster-cert -o json | jq -r '.data | map(@base64d) | .[]' Restart The kubectl cnpg restart command can be used in two cases: requesting the operator to orchestrate a rollout restart for a certain cluster. This is useful to apply configuration changes to cluster dependent objects, such as ConfigMaps containing custom monitoring queries. request a single instance restart, either in-place if the instance is the cluster's primary or deleting and recreating the pod if it is a replica. # this command will restart a whole cluster in a rollout fashion kubectl cnpg restart CLUSTER # this command will restart a single instance, according to the policy above kubectl cnpg restart CLUSTER INSTANCE If the in-place restart is requested but the change cannot be applied without a switchover, the switchover will take precedence over the in-place restart. A common case for this will be a minor upgrade of PostgreSQL image. Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to it. Reload The kubectl cnpg reload command requests the operator to trigger a reconciliation loop for a certain cluster. This is useful to apply configuration changes to cluster dependent objects, such as ConfigMaps containing custom monitoring queries. The following command will reload all configurations for a given cluster: kubectl cnpg reload CLUSTER Maintenance The kubectl cnpg maintenance command helps to modify one or more clusters across namespaces and set the maintenance window values, it will change the following fields: .spec.nodeMaintenanceWindow.inProgress .spec.nodeMaintenanceWindow.reusePVC Accepts as argument set and unset using this to set the inProgress to true in case set and to false in case of unset . By default, reusePVC is always set to false unless the --reusePVC flag is passed. The plugin will ask for a confirmation with a list of the cluster to modify and their new values, if this is accepted this action will be applied to all the cluster in the list. If you want to set in maintenance all the PostgreSQL in your Kubernetes cluster, just need to write the following command: kubectl cnpg maintenance set --all-namespaces And you'll have the list of all the cluster to update The following are the new values for the clusters Namespace Cluster Name Maintenance reusePVC --------- ------------ ----------- -------- default cluster-example true false default pg-backup true false test cluster-example true false Do you want to proceed? [y/n]: y Report The kubectl cnpg report command bundles various pieces of information into a ZIP file. It aims to provide the needed context to debug problems with clusters in production. It has two sub-commands: operator and cluster . report Operator The operator sub-command requests the operator to provide information regarding the operator deployment, configuration and events. Important All confidential information in Secrets and ConfigMaps is REDACTED. The Data map will show the keys but the values will be empty. The flag -S / --stopRedaction will defeat the redaction and show the values. Use only at your own risk, this will share private data. Note By default, operator logs are not collected, but you can enable operator log collection with the --logs flag deployment information : the operator Deployment and operator Pod configuration : the Secrets and ConfigMaps in the operator namespace events : the Events in the operator namespace webhook configuration : the mutating and validating webhook configurations webhook service : the webhook service logs : logs for the operator Pod (optional, off by default) in JSON-lines format The command will generate a ZIP file containing various manifest in YAML format (by default, but settable to JSON with the -o flag). Use the -f flag to name a result file explicitly. If the -f flag is not used, a default time-stamped filename is created for the zip file. Note The report plugin obeys kubectl conventions, and will look for objects constrained by namespace. The CNPG Operator will generally not be installed in the same namespace as the clusters. E.g. the default installation namespace is cnpg-system kubectl cnpg report operator -n cnpg-system results in Successfully written report to \"report_operator_<TIMESTAMP>.zip\" (format: \"yaml\") With the -f flag set: kubectl cnpg report operator -n cnpg-system -f reportRedacted.zip Unzipping the file will produce a time-stamped top-level folder to keep the directory tidy: unzip reportRedacted.zip will result in: Archive: reportRedacted.zip creating: report_operator_<TIMESTAMP>/ creating: report_operator_<TIMESTAMP>/manifests/ inflating: report_operator_<TIMESTAMP>/manifests/deployment.yaml inflating: report_operator_<TIMESTAMP>/manifests/operator-pod.yaml inflating: report_operator_<TIMESTAMP>/manifests/events.yaml inflating: report_operator_<TIMESTAMP>/manifests/validating-webhook-configuration.yaml inflating: report_operator_<TIMESTAMP>/manifests/mutating-webhook-configuration.yaml inflating: report_operator_<TIMESTAMP>/manifests/webhook-service.yaml inflating: report_operator_<TIMESTAMP>/manifests/cnpg-ca-secret(secret).yaml inflating: report_operator_<TIMESTAMP>/manifests/cnpg-webhook-cert(secret).yaml If you activated the --logs option, you'd see an extra subdirectory: Archive: report_operator_<TIMESTAMP>.zip <snipped \u2026> creating: report_operator_<TIMESTAMP>/operator-logs/ inflating: report_operator_<TIMESTAMP>/operator-logs/cnpg-controller-manager-66fb98dbc5-pxkmh-logs.jsonl Note The plugin will try to get the PREVIOUS operator's logs, which is helpful when investigating restarted operators. In all cases, it will also try to get the CURRENT operator logs. If current and previous logs are available, it will show them both. ====== Beginning of Previous Log ===== 2023-03-28T12:56:41.251711811Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:56:41Z\",\"logger\":\"setup\",\"msg\":\"Starting CloudNativePG Operator\",\"version\":\"1.27.0-rc1\",\"build\":{\"Version\":\"1.27.0-rc1+dev107\",\"Commit\":\"cc9bab17\",\"Date\":\"2023-03-28\"}} 2023-03-28T12:56:41.251851909Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:56:41Z\",\"logger\":\"setup\",\"msg\":\"Starting pprof HTTP server\",\"addr\":\"0.0.0.0:6060\"} <snipped \u2026> ====== End of Previous Log ===== 2023-03-28T12:57:09.854306024Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:57:09Z\",\"logger\":\"setup\",\"msg\":\"Starting CloudNativePG Operator\",\"version\":\"1.27.0-rc1\",\"build\":{\"Version\":\"1.27.0-rc1+dev107\",\"Commit\":\"cc9bab17\",\"Date\":\"2023-03-28\"}} 2023-03-28T12:57:09.854363943Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:57:09Z\",\"logger\":\"setup\",\"msg\":\"Starting pprof HTTP server\",\"addr\":\"0.0.0.0:6060\"} If the operator hasn't been restarted, you'll still see the ====== Begin \u2026 and ====== End \u2026 guards, with no content inside. You can verify that the confidential information is REDACTED by default: cd report_operator_<TIMESTAMP>/manifests/ head cnpg-ca-secret\\(secret\\).yaml data: ca.crt: \"\" ca.key: \"\" metadata: creationTimestamp: \"2022-03-22T10:42:28Z\" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: With the -S ( --stopRedaction ) option activated, secrets are shown: kubectl cnpg report operator -n cnpg-system -f reportNonRedacted.zip -S You'll get a reminder that you're about to view confidential information: WARNING: secret Redaction is OFF. Use it with caution Successfully written report to \"reportNonRedacted.zip\" (format: \"yaml\") unzip reportNonRedacted.zip head cnpg-ca-secret\\(secret\\).yaml data: ca.crt: LS0tLS1CRUdJTiBD\u2026 ca.key: LS0tLS1CRUdJTiBF\u2026 metadata: creationTimestamp: \"2022-03-22T10:42:28Z\" managedFields: - apiVersion: v1 fieldsType: FieldsV1 report Cluster The cluster sub-command gathers the following: cluster resources : the cluster information, same as kubectl get cluster -o yaml cluster pods : pods in the cluster namespace matching the cluster name cluster jobs : jobs, if any, in the cluster namespace matching the cluster name events : events in the cluster namespace pod logs : logs for the cluster Pods (optional, off by default) in JSON-lines format job logs : logs for the Pods created by jobs (optional, off by default) in JSON-lines format The cluster sub-command accepts the -f and -o flags, as the operator does. If the -f flag is not used, a default timestamped report name will be used. Note that the cluster information does not contain configuration Secrets / ConfigMaps, so the -S is disabled. Note By default, cluster logs are not collected, but you can enable cluster log collection with the --logs flag Usage: kubectl cnpg report cluster CLUSTER [flags] Note that, unlike the operator sub-command, for the cluster sub-command you need to provide the cluster name, and very likely the namespace, unless the cluster is in the default one. kubectl cnpg report cluster CLUSTER -f report.zip [-n NAMESPACE] and then: unzip report.zip Archive: report.zip creating: report_cluster_example_<TIMESTAMP>/ creating: report_cluster_example_<TIMESTAMP>/manifests/ inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-pods.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-jobs.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/events.yaml Remember that you can use the --logs flag to add the pod and job logs to the ZIP. kubectl cnpg report cluster CLUSTER [-n NAMESPACE] --logs will result in: Successfully written report to \"report_cluster_example_<TIMESTAMP>.zip\" (format: \"yaml\") unzip report_cluster_<TIMESTAMP>.zip Archive: report_cluster_example_<TIMESTAMP>.zip creating: report_cluster_example_<TIMESTAMP>/ creating: report_cluster_example_<TIMESTAMP>/manifests/ inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-pods.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-jobs.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/events.yaml creating: report_cluster_example_<TIMESTAMP>/logs/ inflating: report_cluster_example_<TIMESTAMP>/logs/cluster-example-full-1.jsonl creating: report_cluster_example_<TIMESTAMP>/job-logs/ inflating: report_cluster_example_<TIMESTAMP>/job-logs/cluster-example-full-1-initdb-qnnvw.jsonl inflating: report_cluster_example_<TIMESTAMP>/job-logs/cluster-example-full-2-join-tvj8r.jsonl Logs The kubectl cnpg logs command allows to follow the logs of a collection of pods related to CloudNativePG in a single go. It has at the moment one available sub-command: cluster . Cluster logs The cluster sub-command gathers all the pod logs for a cluster in a single stream or file. This means that you can get all the pod logs in a single terminal window, with a single invocation of the command. As in all the cnpg plugin sub-commands, you can get instructions and help with the -h flag: kubectl cnpg logs cluster -h The logs command will display logs in JSON-lines format, unless the --timestamps flag is used, in which case, a human-readable timestamp will be prepended to each line. In this case, lines will no longer be valid JSON, and tools such as jq may not work as desired. If the logs cluster sub-command is given the -f flag (aka --follow ), it will follow the cluster pod logs, and will also watch for any new pods created in the cluster after the command has been invoked. Any new pods found, including pods that have been restarted or re-created, will also have their pods followed. The logs will be displayed in the terminal's standard-out. This command will only exit when the cluster has no more pods left, or when it is interrupted by the user. If logs is called without the -f option, it will read the logs from all cluster pods until the time of invocation and display them in the terminal's standard-out, then exit. The -o or --output flag can be provided, to specify the name of the file where the logs should be saved, instead of displaying over standard-out. The --tail flag can be used to specify how many log lines will be retrieved from each pod in the cluster. By default, the logs cluster sub-command will display all the logs from each pod in the cluster. If combined with the \"follow\" flag -f , the number of logs specified by --tail will be retrieved until the current time, and from then the new logs will be followed. NOTE: unlike other cnpg plugin commands, the -f is used to denote \"follow\" rather than specify a file. This keeps with the convention of kubectl logs , which takes -f to mean the logs should be followed. Usage: kubectl cnpg logs cluster CLUSTER [flags] Using the -f option to follow: kubectl cnpg report cluster CLUSTER -f Using --tail option to display 3 lines from each pod and the -f option to follow: kubectl cnpg report cluster CLUSTER -f --tail 3 {\"level\":\"info\",\"ts\":\"2023-06-30T13:37:33Z\",\"logger\":\"postgres\",\"msg\":\"2023-06-30 13:37:33.142 UTC [26] LOG: ending log output to stderr\",\"source\":\"/controller/log/postgres\",\"logging_pod\":\"cluster-example-3\"} {\"level\":\"info\",\"ts\":\"2023-06-30T13:37:33Z\",\"logger\":\"postgres\",\"msg\":\"2023-06-30 13:37:33.142 UTC [26] HINT: Future log output will go to log destination \\\"csvlog\\\".\",\"source\":\"/controller/log/postgres\",\"logging_pod\":\"cluster-example-3\"} \u2026 \u2026 With the -o option omitted, and with --output specified: $ kubectl cnpg logs cluster CLUSTER --output my-cluster.log Successfully written logs to \"my-cluster.log\" Pretty The pretty sub-command reads a log stream from standard input, formats it into a human-readable output, and attempts to sort the entries by timestamp. It can be used in combination with kubectl cnpg logs cluster , as shown in the following example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting tablespace manager 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting external server manager [...] Alternatively, it can be used in combination with other commands that produce CNPG logs in JSON format, such as stern , or kubectl logs , as in the following example: $ kubectl logs cluster-example-1 | kubectl cnpg logs pretty 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting tablespace manager 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting external server manager [...] The pretty sub-command also supports advanced log filtering, allowing users to display logs for specific pods or loggers, or to filter logs by severity level. Here's an example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --pods cluster-example-1 --loggers postgres --log-level info 2024-10-15T17:35:00.509 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] LOG: redirecting log output to logging collector process 2024-10-15T17:35:00.509 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] HINT: Future log output will appear in directory \"/controller/log\"... 2024-10-15T17:35:00.510 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] LOG: ending log output to stderr 2024-10-15T17:35:00.510 INFO cluster-example-1 postgres ending log output to stderr [...] The pretty sub-command will try to sort the log stream, to make logs easier to reason about. In order to achieve this, it gathers the logs into groups, and within groups it sorts by timestamp. This is the only way to sort interactively, as pretty may be piped from a command in \"follow\" mode. The sub-command will add a group separator line, --- , at the end of each sorted group. The size of the grouping can be configured via the --sorting-group-size flag (default: 1000), as illustrated in the following example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --sorting-group-size=3 2024-10-15T17:35:20.426 INFO cluster-example-2 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:20.426 INFO cluster-example-2 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting tablespace manager --- 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting external server manager 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting controller-runtime manager 2024-10-15T17:35:20.439 INFO cluster-example-2 instance-manager Starting EventSource --- [...] To explore all available options, use the -h flag for detailed explanations of the supported flags and their usage. Info You can also increase the verbosity of the log by adding more -v options. Destroy The kubectl cnpg destroy command helps remove an instance and all the associated PVCs from a Kubernetes cluster. The optional --keep-pvc flag, if specified, allows you to keep the PVCs, while removing all metadata.ownerReferences that were set by the instance. Additionally, the cnpg.io/pvcStatus label on the PVCs will change from ready to detached to signify that they are no longer in use. Running again the command without the --keep-pvc flag will remove the detached PVCs. Usage: kubectl cnpg destroy CLUSTER INSTANCE The following example removes the cluster-example-2 pod and the associated PVCs: kubectl cnpg destroy cluster-example 2 Cluster Hibernation There are times when you may need to temporarily suspend a CloudNativePG Cluster while preserving its data, allowing you to resume operations later. This feature is known as cluster hibernation . Hibernation is managed declaratively using the cnpg.io/hibernation annotation. Info For more details, see the \"Declarative Hibernation\" documentation page. To simplify the process, the cnpg plugin for kubectl provides a hibernate command, which acts as a convenient shortcut for applying the annotation. To hibernate a cluster, run: kubectl cnpg hibernate on CLUSTER This command applies the cnpg.io/hibernation=on annotation to the cluster, suspending its execution. To resume a hibernated cluster, use: kubectl cnpg hibernate off CLUSTER This will remove the hibernation state by setting cnpg.io/hibernation=off . You can check the cluster\u2019s status at any time with: kubectl cnpg status CLUSTER This will display the current state of the cluster, including whether it is hibernated. Benchmarking the database with pgbench Pgbench can be run against an existing PostgreSQL cluster with following command: kubectl cnpg pgbench CLUSTER -- --time 30 --client 1 --jobs 1 Refer to the Benchmarking pgbench section for more details. Benchmarking the storage with fio fio can be run on an existing storage class with following command: kubectl cnpg fio FIO_JOB_NAME [-n NAMESPACE] Refer to the Benchmarking fio section for more details. Requesting a new physical backup The kubectl cnpg backup command requests a new physical backup for an existing Postgres cluster by creating a new Backup resource. The following example requests an on-demand backup for a given cluster: kubectl cnpg backup CLUSTER or, if using volume snapshots: kubectl cnpg backup CLUSTER -m volumeSnapshot The created backup will be named after the request time: $ kubectl cnpg backup cluster-example backup/cluster-example-20230121002300 created By default, a newly created backup will use the backup target policy defined in the cluster to choose which instance to run on. However, you can override this policy with the --backup-target option. In the case of volume snapshot backups, you can also use the --online option to request an online/hot backup or an offline/cold one: additionally, you can also tune online backups by explicitly setting the --immediate-checkpoint and --wait-for-archive options. The \"Backup\" section contains more information about the configuration settings. Launching psql The kubectl cnpg psql CLUSTER command starts a new PostgreSQL interactive front-end process (psql) connected to an existing Postgres cluster, as if you were running it from the actual pod. This means that you will be using the postgres user. Important As you will be connecting as postgres user, in production environments this method should be used with extreme care, by authorized personnel only. $ kubectl cnpg psql cluster-example psql (17.5 (Debian 17.5-1.pgdg110+1)) Type \"help\" for help. postgres=# By default, the command will connect to the primary instance. The user can select to work against a replica by using the --replica option: $ kubectl cnpg psql --replica cluster-example psql (17.5 (Debian 17.5-1.pgdg110+1)) Type \"help\" for help. postgres=# select pg_is_in_recovery(); pg_is_in_recovery ------------------- t (1 row) postgres=# \\q This command will start kubectl exec , and the kubectl executable must be reachable in your PATH variable to correctly work. Snapshotting a Postgres cluster Warning The kubectl cnpg snapshot command has been removed. Please use the backup command to request backups using volume snapshots. Using pgAdmin4 for evaluation/demonstration purposes only pgAdmin stands as the most popular and feature-rich open-source administration and development platform for PostgreSQL. For more information on the project, please refer to the official documentation . Given that the pgAdmin Development Team maintains official Docker container images, you can install pgAdmin in your environment as a standard Kubernetes deployment. Important Deployment of pgAdmin in Kubernetes production environments is beyond the scope of this document and, more broadly, of the CloudNativePG project. However, for the purposes of demonstration and evaluation , CloudNativePG offers a suitable solution. The cnpg plugin implements the pgadmin4 command, providing a straightforward method to connect to a given database Cluster and navigate its content in a local environment such as kind . For example, you can install a demo deployment of pgAdmin4 for the cluster-example cluster as follows: kubectl cnpg pgadmin4 cluster-example This command will produce: ConfigMap/cluster-example-pgadmin4 created Deployment/cluster-example-pgadmin4 created Service/cluster-example-pgadmin4 created Secret/cluster-example-pgadmin4 created [...] After deploying pgAdmin, forward the port using kubectl and connect through your browser by following the on-screen instructions. As usual, you can use the --dry-run option to generate the YAML file: kubectl cnpg pgadmin4 --dry-run cluster-example pgAdmin4 can be installed in either desktop or server mode, with the default being server. In server mode, authentication is required using a randomly generated password, and users must manually specify the database to connect to. On the other hand, desktop mode initiates a pgAdmin web interface without requiring authentication. It automatically connects to the app database as the app user, making it ideal for quick demos, such as on a local deployment using kind : kubectl cnpg pgadmin4 --mode desktop cluster-example After concluding your demo, ensure the termination of the pgAdmin deployment by executing: kubectl cnpg pgadmin4 --dry-run cluster-example | kubectl delete -f - Warning Never deploy pgAdmin in production using the plugin. Logical Replication Publications The cnpg publication command group is designed to streamline the creation and removal of PostgreSQL logical replication publications . Be aware that these commands are primarily intended for assisting in the creation of logical replication publications, particularly on remote PostgreSQL databases. Warning It is crucial to have a solid understanding of both the capabilities and limitations of PostgreSQL's native logical replication system before using these commands. In particular, be mindful of the logical replication restrictions . Creating a new publication To create a logical replication publication, use the cnpg publication create command. The basic structure of this command is as follows: kubectl cnpg publication create \\ --publication PUBLICATION_NAME \\ [--external-cluster EXTERNAL_CLUSTER] LOCAL_CLUSTER [options] There are two primary use cases: With --external-cluster : Use this option to create a publication on an external cluster (i.e. defined in the externalClusters stanza). The commands will be issued from the LOCAL_CLUSTER , but the publication will be for the data in EXTERNAL_CLUSTER . Without --external-cluster : Use this option to create a publication in the LOCAL_CLUSTER PostgreSQL Cluster (by default, the app database). Warning When connecting to an external cluster, ensure that the specified user has sufficient permissions to execute the CREATE PUBLICATION command. You have several options, similar to the CREATE PUBLICATION command, to define the group of tables to replicate. Notable options include: If you specify the --all-tables option, you create a publication FOR ALL TABLES . Alternatively, you can specify multiple occurrences of: --table : Add a specific table (with an expression) to the publication. --schema : Include all tables in the specified database schema (available from PostgreSQL 15). The --dry-run option enables you to preview the SQL commands that the plugin will execute. For additional information and detailed instructions, type the following command: kubectl cnpg publication create --help Example Given a source-cluster and a destination-cluster , we would like to create a publication for the data on source-cluster . The destination-cluster has an entry in the externalClusters stanza pointing to source-cluster . We can run: kubectl cnpg publication create destination-cluster \\ --external-cluster=source-cluster --all-tables which will create a publication for all tables on source-cluster , running the SQL commands on the destination-cluster . Or instead, we can run: kubectl cnpg publication create source-cluster \\ --publication=app --all-tables which will create a publication named app for all the tables in the source-cluster , running the SQL commands on the source cluster. Info There are two sample files that have been provided for illustration and inspiration: logical-source and logical-destination . Dropping a publication The cnpg publication drop command seamlessly complements the create command by offering similar key options, including the publication name, cluster name, and an optional external cluster. You can drop a PUBLICATION with the following command structure: kubectl cnpg publication drop \\ --publication PUBLICATION_NAME \\ [--external-cluster EXTERNAL_CLUSTER] LOCAL_CLUSTER [options] To access further details and precise instructions, use the following command: kubectl cnpg publication drop --help Logical Replication Subscriptions The cnpg subscription command group is a dedicated set of commands designed to simplify the creation and removal of PostgreSQL logical replication subscriptions . These commands are specifically crafted to aid in the establishment of logical replication subscriptions, especially when dealing with remote PostgreSQL databases. Warning Before using these commands, it is essential to have a comprehensive understanding of both the capabilities and limitations of PostgreSQL's native logical replication system. In particular, be mindful of the logical replication restrictions . In addition to subscription management, we provide a helpful command for synchronizing all sequences from the source cluster. While its applicability may vary, this command can be particularly useful in scenarios involving major upgrades or data import from remote servers. Creating a new subscription To create a logical replication subscription, use the cnpg subscription create command. The basic structure of this command is as follows: kubectl cnpg subscription create \\ --subscription SUBSCRIPTION_NAME \\ --publication PUBLICATION_NAME \\ --external-cluster EXTERNAL_CLUSTER \\ LOCAL_CLUSTER [options] This command configures a subscription directed towards the specified publication in the designated external cluster, as defined in the externalClusters stanza of the LOCAL_CLUSTER . For additional information and detailed instructions, type the following command: kubectl cnpg subscription create --help Example As in the section on publications, we have a source-cluster and a destination-cluster , and we have already created a publication called app . The following command: kubectl cnpg subscription create destination-cluster \\ --external-cluster=source-cluster \\ --publication=app --subscription=app will create a subscription for app on the destination cluster. Warning Prioritize testing subscriptions in a non-production environment to ensure their effectiveness and identify any potential issues before implementing them in a production setting. Info There are two sample files that have been provided for illustration and inspiration: logical-source and logical-destination . Dropping a subscription The cnpg subscription drop command seamlessly complements the create command. You can drop a SUBSCRIPTION with the following command structure: kubectl cnpg subcription drop \\ --subscription SUBSCRIPTION_NAME \\ LOCAL_CLUSTER [options] To access further details and precise instructions, use the following command: kubectl cnpg subscription drop --help Synchronizing sequences One notable constraint of PostgreSQL logical replication, implemented through publications and subscriptions, is the lack of sequence synchronization. This becomes particularly relevant when utilizing logical replication for live database migration, especially to a higher version of PostgreSQL. A crucial step in this process involves updating sequences before transitioning applications to the new database ( cutover ). To address this limitation, the cnpg subscription sync-sequences command offers a solution. This command establishes a connection with the source database, retrieves all relevant sequences, and subsequently updates local sequences with matching identities (based on database schema and sequence name). You can use the command as shown below: kubectl cnpg subscription sync-sequences \\ --subscription SUBSCRIPTION_NAME \\ LOCAL_CLUSTER For comprehensive details and specific instructions, utilize the following command: kubectl cnpg subscription sync-sequences --help Example As in the previous sections for publication and subscription, we have a source-cluster and a destination-cluster . The publication and the subscription, both called app , are already present. The following command will synchronize the sequences involved in the app subscription, from the source cluster into the destination cluster. kubectl cnpg subscription sync-sequences destination-cluster \\ --subscription=app Warning Prioritize testing subscriptions in a non-production environment to guarantee their effectiveness and detect any potential issues before deploying them in a production setting. Integration with K9s The cnpg plugin can be easily integrated in K9s , a popular terminal-based UI to interact with Kubernetes clusters. See k9s/plugins.yml for details. Permissions required by the plugin The plugin requires a set of Kubernetes permissions that depends on the command to execute. These permissions may affect resources and sub-resources like Pods, PDBs, PVCs, and enable actions like get , delete , patch . The following table contains the full details: Command Resource Permissions backup clusters: get backups: create certificate clusters: get secrets: get,create destroy pods: get,delete jobs: delete,list PVCs: list,delete,update fencing clusters: get,patch pods: get fio PVCs: create configmaps: create deployment: create hibernate clusters: get,patch,delete pods: list,get,delete pods/exec: create jobs: list PVCs: get,list,update,patch,delete install none logs clusters: get pods: list pods/log: get maintenance clusters: get,patch,list pgadmin4 clusters: get configmaps: create deployments: create services: create secrets: create pgbench clusters: get jobs: create promote clusters: get clusters/status: patch pods: get psql pods: get,list pods/exec: create publication clusters: get pods: get,list pods/exec: create reload clusters: get,patch report cluster clusters: get pods: list pods/log: get jobs: list events: list PVCs: list report operator configmaps: get deployments: get events: list pods: list pods/log: get secrets: get services: get mutatingwebhookconfigurations: list 1 validatingwebhookconfigurations: list 1 If OLM is present on the K8s cluster, also: clusterserviceversions: list installplans: list subscriptions: list restart clusters: get,patch pods: get,delete status clusters: get pods: list pods/exec: create pods/proxy: create PDBs: list subscription clusters: get pods: get,list pods/exec: create version none The permissions are cluster scope ClusterRole resources. \u21a9 \u21a9 Additionally, assigning the list permission on the clusters will enable autocompletion for multiple commands. Role examples It is possible to create roles with restricted permissions. The following example creates a role that only has access to the cluster logs: --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: cnpg-log rules: - verbs: - get apiGroups: - postgresql.cnpg.io resources: - clusters - verbs: - list apiGroups: - '' resources: - pods - verbs: - get apiGroups: - '' resources: - pods/log The next example shows a role with the minimal permissions required to get the cluster status using the plugin's status command: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: cnpg-status rules: - verbs: - get apiGroups: - postgresql.cnpg.io resources: - clusters - verbs: - list apiGroups: - '' resources: - pods - verbs: - create apiGroups: - '' resources: - pods/exec - verbs: - create apiGroups: - '' resources: - pods/proxy - verbs: - list apiGroups: - policy resources: - poddisruptionbudgets Important Keeping the verbs restricted per resources and per apiGroups helps to prevent inadvertently granting more than intended permissions.","title":"Kubectl Plugin"},{"location":"kubectl-plugin/#kubectl-plugin","text":"CloudNativePG provides a plugin for kubectl to manage a cluster in Kubernetes.","title":"Kubectl Plugin"},{"location":"kubectl-plugin/#install","text":"You can install the cnpg plugin using a variety of methods. Note For air-gapped systems, installation via package managers, using previously downloaded files, may be a good option.","title":"Install"},{"location":"kubectl-plugin/#via-the-installation-script","text":"curl -sSfL \\ https://github.com/cloudnative-pg/cloudnative-pg/raw/main/hack/install-cnpg-plugin.sh | \\ sudo sh -s -- -b /usr/local/bin","title":"Via the installation script"},{"location":"kubectl-plugin/#using-the-debian-or-redhat-packages","text":"In the releases section of the GitHub repository , you can navigate to any release of interest (pick the same or newer release than your CloudNativePG operator), and in it you will find an Assets section. In that section are pre-built packages for a variety of systems. As a result, you can follow standard practices and instructions to install them in your systems.","title":"Using the Debian or RedHat packages"},{"location":"kubectl-plugin/#debian-packages","text":"For example, let's install the 1.27.0-rc1 release of the plugin, for an Intel based 64 bit server. First, we download the right .deb file. wget https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.27.0-rc1/kubectl-cnpg_1.27.0-rc1_linux_x86_64.deb \\ --output-document kube-plugin.deb Then, with superuser privileges, install from the local file using dpkg : $ sudo dpkg -i kube-plugin.deb Selecting previously unselected package cnpg. (Reading database ... 6688 files and directories currently installed.) Preparing to unpack kube-plugin.deb ... Unpacking cnpg (1.27.0-rc1) ... Setting up cnpg (1.27.0-rc1) ...","title":"Debian packages"},{"location":"kubectl-plugin/#rpm-packages","text":"As in the example for .rpm packages, let's install the 1.27.0-rc1 release for an Intel 64 bit machine. Note the --output flag to provide a file name. curl -L https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.27.0-rc1/kubectl-cnpg_1.27.0-rc1_linux_x86_64.rpm \\ --output kube-plugin.rpm Then, with superuser privileges, install with yum , and you're ready to use: $ sudo yum --disablerepo=* localinstall kube-plugin.rpm Failed to set locale, defaulting to C.UTF-8 Dependencies resolved. ==================================================================================================== Package Architecture Version Repository Size ==================================================================================================== Installing: cnpg x86_64 1.27.0-rc1 @commandline 20 M Transaction Summary ==================================================================================================== Install 1 Package Total size: 20 M Installed size: 78 M Is this ok [y/N]: y","title":"RPM packages"},{"location":"kubectl-plugin/#using-the-arch-linux-user-repository-aur-package","text":"To install the plugin from the AUR , follow these steps: git clone https://aur.archlinux.org/kubectl-cnpg.git cd kubectl-cnpg makepkg -si Or use your favorite AUR-helper, for example paru : paru -S kubectl-cnpg","title":"Using the Arch Linux User Repository (AUR) Package"},{"location":"kubectl-plugin/#using-krew","text":"If you already have Krew installed, you can simply run: kubectl krew install cnpg When a new version of the plugin is released, you can update the existing installation with: kubectl krew update kubectl krew upgrade cnpg","title":"Using Krew"},{"location":"kubectl-plugin/#using-homebrew","text":"Note Please note that the Homebrew community manages the availability of the kubectl-cnpg plugin on Homebrew . If you already have Homebrew installed, you can simply run: brew install kubectl-cnpg When a new version of the plugin is released, you can update the existing installation with: brew update brew upgrade kubectl-cnpg Note Auto-completion for the kubectl plugin is already managed by Homebrew. There's no need to create the kubectl_complete-cnpg script mentioned below.","title":"Using Homebrew"},{"location":"kubectl-plugin/#supported-architectures","text":"CloudNativePG Plugin is currently built for the following operating system and architectures: Linux amd64 arm 5/6/7 arm64 s390x ppc64le macOS amd64 arm64 Windows 386 amd64 arm 5/6/7 arm64","title":"Supported Architectures"},{"location":"kubectl-plugin/#configuring-auto-completion","text":"To configure auto-completion for the plugin, a helper shell script needs to be installed into your current PATH. Assuming the latter contains /usr/local/bin , this can be done with the following commands: cat > kubectl_complete-cnpg <<EOF #!/usr/bin/env sh # Call the __complete command passing it all arguments kubectl cnpg __complete \"\\$@\" EOF chmod +x kubectl_complete-cnpg # Important: the following command may require superuser permission sudo mv kubectl_complete-cnpg /usr/local/bin Important The name of the script needs to be exactly the one provided since it's used by the kubectl auto-complete process","title":"Configuring auto-completion"},{"location":"kubectl-plugin/#use","text":"Once the plugin is installed and deployed, you can start using it like this: kubectl cnpg COMMAND [ARGS...] Note The plugin automatically detects if the standard output channel is connected to a terminal. In such cases, it may add ANSI colors to the command output. To disable colors, use the --color=never option with the command.","title":"Use"},{"location":"kubectl-plugin/#generation-of-installation-manifests","text":"The cnpg plugin can be used to generate the YAML manifest for the installation of the operator. This option would typically be used if you want to override some default configurations such as number of replicas, installation namespace, namespaces to watch, and so on. For details and available options, run: kubectl cnpg install generate --help The main options are: -n : specifies the namespace in which to install the operator (default: cnpg-system ). --control-plane : if set to true, the operator deployment will include a toleration and affinity for node-role.kubernetes.io/control-plane . --replicas : sets the number of replicas in the deployment. --watch-namespace : specifies a comma-separated list of namespaces to watch (default: all namespaces). --version : defines the minor version of the operator to be installed, such as 1.23 . If a minor version is specified, the plugin installs the latest patch version of that minor version. If no version is supplied, the plugin installs the latest MAJOR.MINOR.PATCH version of the operator. An example of the generate command, which will generate a YAML manifest that will install the operator, is as follows: kubectl cnpg install generate \\ -n king \\ --version 1.23 \\ --replicas 3 \\ --watch-namespace \"albert, bb, freddie\" \\ > operator.yaml The flags in the above command have the following meaning: - -n king install the CNPG operator into the king namespace - --version 1.23 install the latest patch version for minor version 1.23 - --replicas 3 install the operator with 3 replicas - --watch-namespace \"albert, bb, freddie\" have the operator watch for changes in the albert , bb and freddie namespaces only","title":"Generation of installation manifests"},{"location":"kubectl-plugin/#status","text":"The status command provides an overview of the current status of your cluster, including: general information : name of the cluster, PostgreSQL's system ID, number of instances, current timeline and position in the WAL backup : point of recoverability, and WAL archiving status as returned by the pg_stat_archiver view from the primary - or designated primary in the case of a replica cluster streaming replication : information taken directly from the pg_stat_replication view on the primary instance instances : information about each Postgres instance, taken directly by each instance manager; in the case of a standby, the Current LSN field corresponds to the latest write-ahead log location that has been replayed during recovery (replay LSN). Important The status information above is taken at different times and at different locations, resulting in slightly inconsistent returned values. For example, the Current Write LSN location in the main header, might be different from the Current LSN field in the instances status as it is taken at two different time intervals. kubectl cnpg status sandbox Cluster Summary Name: default/sandbox System ID: 7423474350493388827 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:16.4 Primary instance: sandbox-1 Primary start time: 2024-10-08 18:31:57 +0000 UTC (uptime 1m14s) Status: Cluster in healthy state Instances: 3 Ready instances: 3 Size: 126M Current Write LSN: 0/604DE38 (Timeline: 1 - WAL File: 000000010000000000000006) Continuous Backup status Not configured Streaming Replication status Replication Slots Enabled Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority Replication Slot ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- ---------------- sandbox-2 0/604DE38 0/604DE38 0/604DE38 0/604DE38 00:00:00 00:00:00 00:00:00 streaming async 0 active sandbox-3 0/604DE38 0/604DE38 0/604DE38 0/604DE38 00:00:00 00:00:00 00:00:00 streaming async 0 active Instances status Name Current LSN Replication role Status QoS Manager Version Node ---- ----------- ---------------- ------ --- --------------- ---- sandbox-1 0/604DE38 Primary OK BestEffort 1.27.0-rc1 k8s-eu-worker sandbox-2 0/604DE38 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker2 sandbox-3 0/604DE38 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker If you require more detailed status information, use the --verbose option (or -v for short). The level of detail increases each time the flag is repeated: kubectl cnpg status sandbox --verbose Cluster Summary Name: default/sandbox System ID: 7423474350493388827 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:16.4 Primary instance: sandbox-1 Primary start time: 2024-10-08 18:31:57 +0000 UTC (uptime 2m4s) Status: Cluster in healthy state Instances: 3 Ready instances: 3 Size: 126M Current Write LSN: 0/6053720 (Timeline: 1 - WAL File: 000000010000000000000006) Continuous Backup status Not configured Physical backups No running physical backups found Streaming Replication status Replication Slots Enabled Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority Replication Slot Slot Restart LSN Slot WAL Status Slot Safe WAL Size ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- ---------------- ---------------- --------------- ------------------ sandbox-2 0/6053720 0/6053720 0/6053720 0/6053720 00:00:00 00:00:00 00:00:00 streaming async 0 active 0/6053720 reserved NULL sandbox-3 0/6053720 0/6053720 0/6053720 0/6053720 00:00:00 00:00:00 00:00:00 streaming async 0 active 0/6053720 reserved NULL Unmanaged Replication Slot Status No unmanaged replication slots found Managed roles status No roles managed Tablespaces status No managed tablespaces Pod Disruption Budgets status Name Role Expected Pods Current Healthy Minimum Desired Healthy Disruptions Allowed ---- ---- ------------- --------------- ----------------------- ------------------- sandbox replica 2 2 1 1 sandbox-primary primary 1 1 1 0 Instances status Name Current LSN Replication role Status QoS Manager Version Node ---- ----------- ---------------- ------ --- --------------- ---- sandbox-1 0/6053720 Primary OK BestEffort 1.27.0-rc1 k8s-eu-worker sandbox-2 0/6053720 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker2 sandbox-3 0/6053720 Standby (async) OK BestEffort 1.27.0-rc1 k8s-eu-worker With an additional -v (e.g. kubectl cnpg status sandbox -v -v ), you can also view PostgreSQL configuration, HBA settings, and certificates. The command also supports output in yaml and json format.","title":"Status"},{"location":"kubectl-plugin/#promote","text":"The meaning of this command is to promote a pod in the cluster to primary, so you can start with maintenance work or test a switch-over situation in your cluster: kubectl cnpg promote CLUSTER CLUSTER-INSTANCE Or you can use the instance node number to promote: kubectl cnpg promote CLUSTER INSTANCE","title":"Promote"},{"location":"kubectl-plugin/#certificates","text":"Clusters created using the CloudNativePG operator work with a CA to sign a TLS authentication certificate. To get a certificate, you need to provide a name for the secret to store the credentials, the cluster name, and a user for this certificate: kubectl cnpg certificate cluster-cert --cnpg-cluster CLUSTER --cnpg-user USER After the secret it's created, you can get it using kubectl : kubectl get secret cluster-cert And the content of the same in plain text using the following commands: kubectl get secret cluster-cert -o json | jq -r '.data | map(@base64d) | .[]'","title":"Certificates"},{"location":"kubectl-plugin/#restart","text":"The kubectl cnpg restart command can be used in two cases: requesting the operator to orchestrate a rollout restart for a certain cluster. This is useful to apply configuration changes to cluster dependent objects, such as ConfigMaps containing custom monitoring queries. request a single instance restart, either in-place if the instance is the cluster's primary or deleting and recreating the pod if it is a replica. # this command will restart a whole cluster in a rollout fashion kubectl cnpg restart CLUSTER # this command will restart a single instance, according to the policy above kubectl cnpg restart CLUSTER INSTANCE If the in-place restart is requested but the change cannot be applied without a switchover, the switchover will take precedence over the in-place restart. A common case for this will be a minor upgrade of PostgreSQL image. Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to it.","title":"Restart"},{"location":"kubectl-plugin/#reload","text":"The kubectl cnpg reload command requests the operator to trigger a reconciliation loop for a certain cluster. This is useful to apply configuration changes to cluster dependent objects, such as ConfigMaps containing custom monitoring queries. The following command will reload all configurations for a given cluster: kubectl cnpg reload CLUSTER","title":"Reload"},{"location":"kubectl-plugin/#maintenance","text":"The kubectl cnpg maintenance command helps to modify one or more clusters across namespaces and set the maintenance window values, it will change the following fields: .spec.nodeMaintenanceWindow.inProgress .spec.nodeMaintenanceWindow.reusePVC Accepts as argument set and unset using this to set the inProgress to true in case set and to false in case of unset . By default, reusePVC is always set to false unless the --reusePVC flag is passed. The plugin will ask for a confirmation with a list of the cluster to modify and their new values, if this is accepted this action will be applied to all the cluster in the list. If you want to set in maintenance all the PostgreSQL in your Kubernetes cluster, just need to write the following command: kubectl cnpg maintenance set --all-namespaces And you'll have the list of all the cluster to update The following are the new values for the clusters Namespace Cluster Name Maintenance reusePVC --------- ------------ ----------- -------- default cluster-example true false default pg-backup true false test cluster-example true false Do you want to proceed? [y/n]: y","title":"Maintenance"},{"location":"kubectl-plugin/#report","text":"The kubectl cnpg report command bundles various pieces of information into a ZIP file. It aims to provide the needed context to debug problems with clusters in production. It has two sub-commands: operator and cluster .","title":"Report"},{"location":"kubectl-plugin/#report-operator","text":"The operator sub-command requests the operator to provide information regarding the operator deployment, configuration and events. Important All confidential information in Secrets and ConfigMaps is REDACTED. The Data map will show the keys but the values will be empty. The flag -S / --stopRedaction will defeat the redaction and show the values. Use only at your own risk, this will share private data. Note By default, operator logs are not collected, but you can enable operator log collection with the --logs flag deployment information : the operator Deployment and operator Pod configuration : the Secrets and ConfigMaps in the operator namespace events : the Events in the operator namespace webhook configuration : the mutating and validating webhook configurations webhook service : the webhook service logs : logs for the operator Pod (optional, off by default) in JSON-lines format The command will generate a ZIP file containing various manifest in YAML format (by default, but settable to JSON with the -o flag). Use the -f flag to name a result file explicitly. If the -f flag is not used, a default time-stamped filename is created for the zip file. Note The report plugin obeys kubectl conventions, and will look for objects constrained by namespace. The CNPG Operator will generally not be installed in the same namespace as the clusters. E.g. the default installation namespace is cnpg-system kubectl cnpg report operator -n cnpg-system results in Successfully written report to \"report_operator_<TIMESTAMP>.zip\" (format: \"yaml\") With the -f flag set: kubectl cnpg report operator -n cnpg-system -f reportRedacted.zip Unzipping the file will produce a time-stamped top-level folder to keep the directory tidy: unzip reportRedacted.zip will result in: Archive: reportRedacted.zip creating: report_operator_<TIMESTAMP>/ creating: report_operator_<TIMESTAMP>/manifests/ inflating: report_operator_<TIMESTAMP>/manifests/deployment.yaml inflating: report_operator_<TIMESTAMP>/manifests/operator-pod.yaml inflating: report_operator_<TIMESTAMP>/manifests/events.yaml inflating: report_operator_<TIMESTAMP>/manifests/validating-webhook-configuration.yaml inflating: report_operator_<TIMESTAMP>/manifests/mutating-webhook-configuration.yaml inflating: report_operator_<TIMESTAMP>/manifests/webhook-service.yaml inflating: report_operator_<TIMESTAMP>/manifests/cnpg-ca-secret(secret).yaml inflating: report_operator_<TIMESTAMP>/manifests/cnpg-webhook-cert(secret).yaml If you activated the --logs option, you'd see an extra subdirectory: Archive: report_operator_<TIMESTAMP>.zip <snipped \u2026> creating: report_operator_<TIMESTAMP>/operator-logs/ inflating: report_operator_<TIMESTAMP>/operator-logs/cnpg-controller-manager-66fb98dbc5-pxkmh-logs.jsonl Note The plugin will try to get the PREVIOUS operator's logs, which is helpful when investigating restarted operators. In all cases, it will also try to get the CURRENT operator logs. If current and previous logs are available, it will show them both. ====== Beginning of Previous Log ===== 2023-03-28T12:56:41.251711811Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:56:41Z\",\"logger\":\"setup\",\"msg\":\"Starting CloudNativePG Operator\",\"version\":\"1.27.0-rc1\",\"build\":{\"Version\":\"1.27.0-rc1+dev107\",\"Commit\":\"cc9bab17\",\"Date\":\"2023-03-28\"}} 2023-03-28T12:56:41.251851909Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:56:41Z\",\"logger\":\"setup\",\"msg\":\"Starting pprof HTTP server\",\"addr\":\"0.0.0.0:6060\"} <snipped \u2026> ====== End of Previous Log ===== 2023-03-28T12:57:09.854306024Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:57:09Z\",\"logger\":\"setup\",\"msg\":\"Starting CloudNativePG Operator\",\"version\":\"1.27.0-rc1\",\"build\":{\"Version\":\"1.27.0-rc1+dev107\",\"Commit\":\"cc9bab17\",\"Date\":\"2023-03-28\"}} 2023-03-28T12:57:09.854363943Z {\"level\":\"info\",\"ts\":\"2023-03-28T12:57:09Z\",\"logger\":\"setup\",\"msg\":\"Starting pprof HTTP server\",\"addr\":\"0.0.0.0:6060\"} If the operator hasn't been restarted, you'll still see the ====== Begin \u2026 and ====== End \u2026 guards, with no content inside. You can verify that the confidential information is REDACTED by default: cd report_operator_<TIMESTAMP>/manifests/ head cnpg-ca-secret\\(secret\\).yaml data: ca.crt: \"\" ca.key: \"\" metadata: creationTimestamp: \"2022-03-22T10:42:28Z\" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: With the -S ( --stopRedaction ) option activated, secrets are shown: kubectl cnpg report operator -n cnpg-system -f reportNonRedacted.zip -S You'll get a reminder that you're about to view confidential information: WARNING: secret Redaction is OFF. Use it with caution Successfully written report to \"reportNonRedacted.zip\" (format: \"yaml\") unzip reportNonRedacted.zip head cnpg-ca-secret\\(secret\\).yaml data: ca.crt: LS0tLS1CRUdJTiBD\u2026 ca.key: LS0tLS1CRUdJTiBF\u2026 metadata: creationTimestamp: \"2022-03-22T10:42:28Z\" managedFields: - apiVersion: v1 fieldsType: FieldsV1","title":"report Operator"},{"location":"kubectl-plugin/#report-cluster","text":"The cluster sub-command gathers the following: cluster resources : the cluster information, same as kubectl get cluster -o yaml cluster pods : pods in the cluster namespace matching the cluster name cluster jobs : jobs, if any, in the cluster namespace matching the cluster name events : events in the cluster namespace pod logs : logs for the cluster Pods (optional, off by default) in JSON-lines format job logs : logs for the Pods created by jobs (optional, off by default) in JSON-lines format The cluster sub-command accepts the -f and -o flags, as the operator does. If the -f flag is not used, a default timestamped report name will be used. Note that the cluster information does not contain configuration Secrets / ConfigMaps, so the -S is disabled. Note By default, cluster logs are not collected, but you can enable cluster log collection with the --logs flag Usage: kubectl cnpg report cluster CLUSTER [flags] Note that, unlike the operator sub-command, for the cluster sub-command you need to provide the cluster name, and very likely the namespace, unless the cluster is in the default one. kubectl cnpg report cluster CLUSTER -f report.zip [-n NAMESPACE] and then: unzip report.zip Archive: report.zip creating: report_cluster_example_<TIMESTAMP>/ creating: report_cluster_example_<TIMESTAMP>/manifests/ inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-pods.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-jobs.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/events.yaml Remember that you can use the --logs flag to add the pod and job logs to the ZIP. kubectl cnpg report cluster CLUSTER [-n NAMESPACE] --logs will result in: Successfully written report to \"report_cluster_example_<TIMESTAMP>.zip\" (format: \"yaml\") unzip report_cluster_<TIMESTAMP>.zip Archive: report_cluster_example_<TIMESTAMP>.zip creating: report_cluster_example_<TIMESTAMP>/ creating: report_cluster_example_<TIMESTAMP>/manifests/ inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-pods.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/cluster-jobs.yaml inflating: report_cluster_example_<TIMESTAMP>/manifests/events.yaml creating: report_cluster_example_<TIMESTAMP>/logs/ inflating: report_cluster_example_<TIMESTAMP>/logs/cluster-example-full-1.jsonl creating: report_cluster_example_<TIMESTAMP>/job-logs/ inflating: report_cluster_example_<TIMESTAMP>/job-logs/cluster-example-full-1-initdb-qnnvw.jsonl inflating: report_cluster_example_<TIMESTAMP>/job-logs/cluster-example-full-2-join-tvj8r.jsonl","title":"report Cluster"},{"location":"kubectl-plugin/#logs","text":"The kubectl cnpg logs command allows to follow the logs of a collection of pods related to CloudNativePG in a single go. It has at the moment one available sub-command: cluster .","title":"Logs"},{"location":"kubectl-plugin/#cluster-logs","text":"The cluster sub-command gathers all the pod logs for a cluster in a single stream or file. This means that you can get all the pod logs in a single terminal window, with a single invocation of the command. As in all the cnpg plugin sub-commands, you can get instructions and help with the -h flag: kubectl cnpg logs cluster -h The logs command will display logs in JSON-lines format, unless the --timestamps flag is used, in which case, a human-readable timestamp will be prepended to each line. In this case, lines will no longer be valid JSON, and tools such as jq may not work as desired. If the logs cluster sub-command is given the -f flag (aka --follow ), it will follow the cluster pod logs, and will also watch for any new pods created in the cluster after the command has been invoked. Any new pods found, including pods that have been restarted or re-created, will also have their pods followed. The logs will be displayed in the terminal's standard-out. This command will only exit when the cluster has no more pods left, or when it is interrupted by the user. If logs is called without the -f option, it will read the logs from all cluster pods until the time of invocation and display them in the terminal's standard-out, then exit. The -o or --output flag can be provided, to specify the name of the file where the logs should be saved, instead of displaying over standard-out. The --tail flag can be used to specify how many log lines will be retrieved from each pod in the cluster. By default, the logs cluster sub-command will display all the logs from each pod in the cluster. If combined with the \"follow\" flag -f , the number of logs specified by --tail will be retrieved until the current time, and from then the new logs will be followed. NOTE: unlike other cnpg plugin commands, the -f is used to denote \"follow\" rather than specify a file. This keeps with the convention of kubectl logs , which takes -f to mean the logs should be followed. Usage: kubectl cnpg logs cluster CLUSTER [flags] Using the -f option to follow: kubectl cnpg report cluster CLUSTER -f Using --tail option to display 3 lines from each pod and the -f option to follow: kubectl cnpg report cluster CLUSTER -f --tail 3 {\"level\":\"info\",\"ts\":\"2023-06-30T13:37:33Z\",\"logger\":\"postgres\",\"msg\":\"2023-06-30 13:37:33.142 UTC [26] LOG: ending log output to stderr\",\"source\":\"/controller/log/postgres\",\"logging_pod\":\"cluster-example-3\"} {\"level\":\"info\",\"ts\":\"2023-06-30T13:37:33Z\",\"logger\":\"postgres\",\"msg\":\"2023-06-30 13:37:33.142 UTC [26] HINT: Future log output will go to log destination \\\"csvlog\\\".\",\"source\":\"/controller/log/postgres\",\"logging_pod\":\"cluster-example-3\"} \u2026 \u2026 With the -o option omitted, and with --output specified: $ kubectl cnpg logs cluster CLUSTER --output my-cluster.log Successfully written logs to \"my-cluster.log\"","title":"Cluster logs"},{"location":"kubectl-plugin/#pretty","text":"The pretty sub-command reads a log stream from standard input, formats it into a human-readable output, and attempts to sort the entries by timestamp. It can be used in combination with kubectl cnpg logs cluster , as shown in the following example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting tablespace manager 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting external server manager [...] Alternatively, it can be used in combination with other commands that produce CNPG logs in JSON format, such as stern , or kubectl logs , as in the following example: $ kubectl logs cluster-example-1 | kubectl cnpg logs pretty 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:00.336 INFO cluster-example-1 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting tablespace manager 2024-10-15T17:35:00.347 INFO cluster-example-1 instance-manager starting external server manager [...] The pretty sub-command also supports advanced log filtering, allowing users to display logs for specific pods or loggers, or to filter logs by severity level. Here's an example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --pods cluster-example-1 --loggers postgres --log-level info 2024-10-15T17:35:00.509 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] LOG: redirecting log output to logging collector process 2024-10-15T17:35:00.509 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] HINT: Future log output will appear in directory \"/controller/log\"... 2024-10-15T17:35:00.510 INFO cluster-example-1 postgres 2024-10-15 17:35:00.509 UTC [29] LOG: ending log output to stderr 2024-10-15T17:35:00.510 INFO cluster-example-1 postgres ending log output to stderr [...] The pretty sub-command will try to sort the log stream, to make logs easier to reason about. In order to achieve this, it gathers the logs into groups, and within groups it sorts by timestamp. This is the only way to sort interactively, as pretty may be piped from a command in \"follow\" mode. The sub-command will add a group separator line, --- , at the end of each sorted group. The size of the grouping can be configured via the --sorting-group-size flag (default: 1000), as illustrated in the following example: $ kubectl cnpg logs cluster cluster-example | kubectl cnpg logs pretty --sorting-group-size=3 2024-10-15T17:35:20.426 INFO cluster-example-2 instance-manager Starting CloudNativePG Instance Manager 2024-10-15T17:35:20.426 INFO cluster-example-2 instance-manager Checking for free disk space for WALs before starting PostgreSQL 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting tablespace manager --- 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting external server manager 2024-10-15T17:35:20.438 INFO cluster-example-2 instance-manager starting controller-runtime manager 2024-10-15T17:35:20.439 INFO cluster-example-2 instance-manager Starting EventSource --- [...] To explore all available options, use the -h flag for detailed explanations of the supported flags and their usage. Info You can also increase the verbosity of the log by adding more -v options.","title":"Pretty"},{"location":"kubectl-plugin/#destroy","text":"The kubectl cnpg destroy command helps remove an instance and all the associated PVCs from a Kubernetes cluster. The optional --keep-pvc flag, if specified, allows you to keep the PVCs, while removing all metadata.ownerReferences that were set by the instance. Additionally, the cnpg.io/pvcStatus label on the PVCs will change from ready to detached to signify that they are no longer in use. Running again the command without the --keep-pvc flag will remove the detached PVCs. Usage: kubectl cnpg destroy CLUSTER INSTANCE The following example removes the cluster-example-2 pod and the associated PVCs: kubectl cnpg destroy cluster-example 2","title":"Destroy"},{"location":"kubectl-plugin/#cluster-hibernation","text":"There are times when you may need to temporarily suspend a CloudNativePG Cluster while preserving its data, allowing you to resume operations later. This feature is known as cluster hibernation . Hibernation is managed declaratively using the cnpg.io/hibernation annotation. Info For more details, see the \"Declarative Hibernation\" documentation page. To simplify the process, the cnpg plugin for kubectl provides a hibernate command, which acts as a convenient shortcut for applying the annotation. To hibernate a cluster, run: kubectl cnpg hibernate on CLUSTER This command applies the cnpg.io/hibernation=on annotation to the cluster, suspending its execution. To resume a hibernated cluster, use: kubectl cnpg hibernate off CLUSTER This will remove the hibernation state by setting cnpg.io/hibernation=off . You can check the cluster\u2019s status at any time with: kubectl cnpg status CLUSTER This will display the current state of the cluster, including whether it is hibernated.","title":"Cluster Hibernation"},{"location":"kubectl-plugin/#benchmarking-the-database-with-pgbench","text":"Pgbench can be run against an existing PostgreSQL cluster with following command: kubectl cnpg pgbench CLUSTER -- --time 30 --client 1 --jobs 1 Refer to the Benchmarking pgbench section for more details.","title":"Benchmarking the database with pgbench"},{"location":"kubectl-plugin/#benchmarking-the-storage-with-fio","text":"fio can be run on an existing storage class with following command: kubectl cnpg fio FIO_JOB_NAME [-n NAMESPACE] Refer to the Benchmarking fio section for more details.","title":"Benchmarking the storage with fio"},{"location":"kubectl-plugin/#requesting-a-new-physical-backup","text":"The kubectl cnpg backup command requests a new physical backup for an existing Postgres cluster by creating a new Backup resource. The following example requests an on-demand backup for a given cluster: kubectl cnpg backup CLUSTER or, if using volume snapshots: kubectl cnpg backup CLUSTER -m volumeSnapshot The created backup will be named after the request time: $ kubectl cnpg backup cluster-example backup/cluster-example-20230121002300 created By default, a newly created backup will use the backup target policy defined in the cluster to choose which instance to run on. However, you can override this policy with the --backup-target option. In the case of volume snapshot backups, you can also use the --online option to request an online/hot backup or an offline/cold one: additionally, you can also tune online backups by explicitly setting the --immediate-checkpoint and --wait-for-archive options. The \"Backup\" section contains more information about the configuration settings.","title":"Requesting a new physical backup"},{"location":"kubectl-plugin/#launching-psql","text":"The kubectl cnpg psql CLUSTER command starts a new PostgreSQL interactive front-end process (psql) connected to an existing Postgres cluster, as if you were running it from the actual pod. This means that you will be using the postgres user. Important As you will be connecting as postgres user, in production environments this method should be used with extreme care, by authorized personnel only. $ kubectl cnpg psql cluster-example psql (17.5 (Debian 17.5-1.pgdg110+1)) Type \"help\" for help. postgres=# By default, the command will connect to the primary instance. The user can select to work against a replica by using the --replica option: $ kubectl cnpg psql --replica cluster-example psql (17.5 (Debian 17.5-1.pgdg110+1)) Type \"help\" for help. postgres=# select pg_is_in_recovery(); pg_is_in_recovery ------------------- t (1 row) postgres=# \\q This command will start kubectl exec , and the kubectl executable must be reachable in your PATH variable to correctly work.","title":"Launching psql"},{"location":"kubectl-plugin/#snapshotting-a-postgres-cluster","text":"Warning The kubectl cnpg snapshot command has been removed. Please use the backup command to request backups using volume snapshots.","title":"Snapshotting a Postgres cluster"},{"location":"kubectl-plugin/#using-pgadmin4-for-evaluationdemonstration-purposes-only","text":"pgAdmin stands as the most popular and feature-rich open-source administration and development platform for PostgreSQL. For more information on the project, please refer to the official documentation . Given that the pgAdmin Development Team maintains official Docker container images, you can install pgAdmin in your environment as a standard Kubernetes deployment. Important Deployment of pgAdmin in Kubernetes production environments is beyond the scope of this document and, more broadly, of the CloudNativePG project. However, for the purposes of demonstration and evaluation , CloudNativePG offers a suitable solution. The cnpg plugin implements the pgadmin4 command, providing a straightforward method to connect to a given database Cluster and navigate its content in a local environment such as kind . For example, you can install a demo deployment of pgAdmin4 for the cluster-example cluster as follows: kubectl cnpg pgadmin4 cluster-example This command will produce: ConfigMap/cluster-example-pgadmin4 created Deployment/cluster-example-pgadmin4 created Service/cluster-example-pgadmin4 created Secret/cluster-example-pgadmin4 created [...] After deploying pgAdmin, forward the port using kubectl and connect through your browser by following the on-screen instructions. As usual, you can use the --dry-run option to generate the YAML file: kubectl cnpg pgadmin4 --dry-run cluster-example pgAdmin4 can be installed in either desktop or server mode, with the default being server. In server mode, authentication is required using a randomly generated password, and users must manually specify the database to connect to. On the other hand, desktop mode initiates a pgAdmin web interface without requiring authentication. It automatically connects to the app database as the app user, making it ideal for quick demos, such as on a local deployment using kind : kubectl cnpg pgadmin4 --mode desktop cluster-example After concluding your demo, ensure the termination of the pgAdmin deployment by executing: kubectl cnpg pgadmin4 --dry-run cluster-example | kubectl delete -f - Warning Never deploy pgAdmin in production using the plugin.","title":"Using pgAdmin4 for evaluation/demonstration purposes only"},{"location":"kubectl-plugin/#logical-replication-publications","text":"The cnpg publication command group is designed to streamline the creation and removal of PostgreSQL logical replication publications . Be aware that these commands are primarily intended for assisting in the creation of logical replication publications, particularly on remote PostgreSQL databases. Warning It is crucial to have a solid understanding of both the capabilities and limitations of PostgreSQL's native logical replication system before using these commands. In particular, be mindful of the logical replication restrictions .","title":"Logical Replication Publications"},{"location":"kubectl-plugin/#creating-a-new-publication","text":"To create a logical replication publication, use the cnpg publication create command. The basic structure of this command is as follows: kubectl cnpg publication create \\ --publication PUBLICATION_NAME \\ [--external-cluster EXTERNAL_CLUSTER] LOCAL_CLUSTER [options] There are two primary use cases: With --external-cluster : Use this option to create a publication on an external cluster (i.e. defined in the externalClusters stanza). The commands will be issued from the LOCAL_CLUSTER , but the publication will be for the data in EXTERNAL_CLUSTER . Without --external-cluster : Use this option to create a publication in the LOCAL_CLUSTER PostgreSQL Cluster (by default, the app database). Warning When connecting to an external cluster, ensure that the specified user has sufficient permissions to execute the CREATE PUBLICATION command. You have several options, similar to the CREATE PUBLICATION command, to define the group of tables to replicate. Notable options include: If you specify the --all-tables option, you create a publication FOR ALL TABLES . Alternatively, you can specify multiple occurrences of: --table : Add a specific table (with an expression) to the publication. --schema : Include all tables in the specified database schema (available from PostgreSQL 15). The --dry-run option enables you to preview the SQL commands that the plugin will execute. For additional information and detailed instructions, type the following command: kubectl cnpg publication create --help","title":"Creating a new publication"},{"location":"kubectl-plugin/#example","text":"Given a source-cluster and a destination-cluster , we would like to create a publication for the data on source-cluster . The destination-cluster has an entry in the externalClusters stanza pointing to source-cluster . We can run: kubectl cnpg publication create destination-cluster \\ --external-cluster=source-cluster --all-tables which will create a publication for all tables on source-cluster , running the SQL commands on the destination-cluster . Or instead, we can run: kubectl cnpg publication create source-cluster \\ --publication=app --all-tables which will create a publication named app for all the tables in the source-cluster , running the SQL commands on the source cluster. Info There are two sample files that have been provided for illustration and inspiration: logical-source and logical-destination .","title":"Example"},{"location":"kubectl-plugin/#dropping-a-publication","text":"The cnpg publication drop command seamlessly complements the create command by offering similar key options, including the publication name, cluster name, and an optional external cluster. You can drop a PUBLICATION with the following command structure: kubectl cnpg publication drop \\ --publication PUBLICATION_NAME \\ [--external-cluster EXTERNAL_CLUSTER] LOCAL_CLUSTER [options] To access further details and precise instructions, use the following command: kubectl cnpg publication drop --help","title":"Dropping a publication"},{"location":"kubectl-plugin/#logical-replication-subscriptions","text":"The cnpg subscription command group is a dedicated set of commands designed to simplify the creation and removal of PostgreSQL logical replication subscriptions . These commands are specifically crafted to aid in the establishment of logical replication subscriptions, especially when dealing with remote PostgreSQL databases. Warning Before using these commands, it is essential to have a comprehensive understanding of both the capabilities and limitations of PostgreSQL's native logical replication system. In particular, be mindful of the logical replication restrictions . In addition to subscription management, we provide a helpful command for synchronizing all sequences from the source cluster. While its applicability may vary, this command can be particularly useful in scenarios involving major upgrades or data import from remote servers.","title":"Logical Replication Subscriptions"},{"location":"kubectl-plugin/#creating-a-new-subscription","text":"To create a logical replication subscription, use the cnpg subscription create command. The basic structure of this command is as follows: kubectl cnpg subscription create \\ --subscription SUBSCRIPTION_NAME \\ --publication PUBLICATION_NAME \\ --external-cluster EXTERNAL_CLUSTER \\ LOCAL_CLUSTER [options] This command configures a subscription directed towards the specified publication in the designated external cluster, as defined in the externalClusters stanza of the LOCAL_CLUSTER . For additional information and detailed instructions, type the following command: kubectl cnpg subscription create --help","title":"Creating a new subscription"},{"location":"kubectl-plugin/#example_1","text":"As in the section on publications, we have a source-cluster and a destination-cluster , and we have already created a publication called app . The following command: kubectl cnpg subscription create destination-cluster \\ --external-cluster=source-cluster \\ --publication=app --subscription=app will create a subscription for app on the destination cluster. Warning Prioritize testing subscriptions in a non-production environment to ensure their effectiveness and identify any potential issues before implementing them in a production setting. Info There are two sample files that have been provided for illustration and inspiration: logical-source and logical-destination .","title":"Example"},{"location":"kubectl-plugin/#dropping-a-subscription","text":"The cnpg subscription drop command seamlessly complements the create command. You can drop a SUBSCRIPTION with the following command structure: kubectl cnpg subcription drop \\ --subscription SUBSCRIPTION_NAME \\ LOCAL_CLUSTER [options] To access further details and precise instructions, use the following command: kubectl cnpg subscription drop --help","title":"Dropping a subscription"},{"location":"kubectl-plugin/#synchronizing-sequences","text":"One notable constraint of PostgreSQL logical replication, implemented through publications and subscriptions, is the lack of sequence synchronization. This becomes particularly relevant when utilizing logical replication for live database migration, especially to a higher version of PostgreSQL. A crucial step in this process involves updating sequences before transitioning applications to the new database ( cutover ). To address this limitation, the cnpg subscription sync-sequences command offers a solution. This command establishes a connection with the source database, retrieves all relevant sequences, and subsequently updates local sequences with matching identities (based on database schema and sequence name). You can use the command as shown below: kubectl cnpg subscription sync-sequences \\ --subscription SUBSCRIPTION_NAME \\ LOCAL_CLUSTER For comprehensive details and specific instructions, utilize the following command: kubectl cnpg subscription sync-sequences --help","title":"Synchronizing sequences"},{"location":"kubectl-plugin/#example_2","text":"As in the previous sections for publication and subscription, we have a source-cluster and a destination-cluster . The publication and the subscription, both called app , are already present. The following command will synchronize the sequences involved in the app subscription, from the source cluster into the destination cluster. kubectl cnpg subscription sync-sequences destination-cluster \\ --subscription=app Warning Prioritize testing subscriptions in a non-production environment to guarantee their effectiveness and detect any potential issues before deploying them in a production setting.","title":"Example"},{"location":"kubectl-plugin/#integration-with-k9s","text":"The cnpg plugin can be easily integrated in K9s , a popular terminal-based UI to interact with Kubernetes clusters. See k9s/plugins.yml for details.","title":"Integration with K9s"},{"location":"kubectl-plugin/#permissions-required-by-the-plugin","text":"The plugin requires a set of Kubernetes permissions that depends on the command to execute. These permissions may affect resources and sub-resources like Pods, PDBs, PVCs, and enable actions like get , delete , patch . The following table contains the full details: Command Resource Permissions backup clusters: get backups: create certificate clusters: get secrets: get,create destroy pods: get,delete jobs: delete,list PVCs: list,delete,update fencing clusters: get,patch pods: get fio PVCs: create configmaps: create deployment: create hibernate clusters: get,patch,delete pods: list,get,delete pods/exec: create jobs: list PVCs: get,list,update,patch,delete install none logs clusters: get pods: list pods/log: get maintenance clusters: get,patch,list pgadmin4 clusters: get configmaps: create deployments: create services: create secrets: create pgbench clusters: get jobs: create promote clusters: get clusters/status: patch pods: get psql pods: get,list pods/exec: create publication clusters: get pods: get,list pods/exec: create reload clusters: get,patch report cluster clusters: get pods: list pods/log: get jobs: list events: list PVCs: list report operator configmaps: get deployments: get events: list pods: list pods/log: get secrets: get services: get mutatingwebhookconfigurations: list 1 validatingwebhookconfigurations: list 1 If OLM is present on the K8s cluster, also: clusterserviceversions: list installplans: list subscriptions: list restart clusters: get,patch pods: get,delete status clusters: get pods: list pods/exec: create pods/proxy: create PDBs: list subscription clusters: get pods: get,list pods/exec: create version none The permissions are cluster scope ClusterRole resources. \u21a9 \u21a9 Additionally, assigning the list permission on the clusters will enable autocompletion for multiple commands.","title":"Permissions required by the plugin"},{"location":"kubectl-plugin/#role-examples","text":"It is possible to create roles with restricted permissions. The following example creates a role that only has access to the cluster logs: --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: cnpg-log rules: - verbs: - get apiGroups: - postgresql.cnpg.io resources: - clusters - verbs: - list apiGroups: - '' resources: - pods - verbs: - get apiGroups: - '' resources: - pods/log The next example shows a role with the minimal permissions required to get the cluster status using the plugin's status command: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: cnpg-status rules: - verbs: - get apiGroups: - postgresql.cnpg.io resources: - clusters - verbs: - list apiGroups: - '' resources: - pods - verbs: - create apiGroups: - '' resources: - pods/exec - verbs: - create apiGroups: - '' resources: - pods/proxy - verbs: - list apiGroups: - policy resources: - poddisruptionbudgets Important Keeping the verbs restricted per resources and per apiGroups helps to prevent inadvertently granting more than intended permissions.","title":"Role examples"},{"location":"kubernetes_upgrade/","text":"Kubernetes Upgrade and Maintenance Maintaining an up-to-date Kubernetes cluster is crucial for ensuring optimal performance and security, particularly for self-managed clusters, especially those running on bare metal infrastructure. Regular updates help address technical debt and mitigate business risks, despite the controlled downtimes associated with temporarily removing a node from the cluster for maintenance purposes. For further insights on embracing risk in operations, refer to the \"Embracing Risk\" chapter from the Site Reliability Engineering book. Importance of Regular Updates Updating Kubernetes involves planning and executing maintenance tasks, such as applying security updates to underlying Linux servers, replacing malfunctioning hardware components, or upgrading the cluster to the latest Kubernetes version. These activities are essential for maintaining a robust and secure infrastructure. Maintenance Operations in a Cluster Typically, maintenance operations are carried out on one node at a time, following a structured process : eviction of workloads ( drain ): workloads are gracefully moved away from the node to be updated, ensuring a smooth transition. performing the operation: the actual maintenance operation, such as a system update or hardware replacement, is executed. rejoining the node to the cluster ( uncordon ): the updated node is reintegrated into the cluster, ready to resume its responsibilities. This process requires either stopping workloads for the entire upgrade duration or migrating them to other nodes in the cluster. Temporary PostgreSQL Cluster Degradation While the standard approach ensures service reliability and leverages Kubernetes' self-healing capabilities, there are scenarios where operating with a temporarily degraded cluster may be acceptable. This is particularly relevant for PostgreSQL clusters relying on node-local storage , where the storage is local to the Kubernetes worker node running the PostgreSQL database. Node-local storage, or simply local storage , is employed to enhance performance. Note If your database files reside on shared storage accessible over the network, the default self-healing behavior of the operator can efficiently handle scenarios where volumes are reused by pods on different nodes after a drain operation. In such cases, you can skip the remaining sections of this document. Pod Disruption Budgets By default, CloudNativePG safeguards Postgres cluster operations. If a node is to be drained and contains a cluster's primary instance, a switchover happens ahead of the drain. Once the instance in the node is downgraded to replica, the draining can resume. For single-instance clusters, a switchover is not possible, so CloudNativePG will prevent draining the node where the instance is housed. Additionally, in clusters with 3 or more instances, CloudNativePG guarantees that only one replica at a time is gracefully shut down during a drain operation. Each PostgreSQL Cluster is equipped with two associated PodDisruptionBudget resources - you can easily confirm it with the kubectl get pdb command. Our recommendation is to leave pod disruption budgets enabled for every production Postgres cluster. This can be effortlessly managed by toggling the .spec.enablePDB option, as detailed in the API reference . PostgreSQL Clusters used for Development or Testing For PostgreSQL clusters used for development purposes, often consisting of a single instance, it is essential to disable pod disruption budgets. Failure to do so will prevent the node hosting that cluster from being drained. The following example illustrates how to disable pod disruption budgets for a 1-instance development cluster: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: dev spec: instances: 1 enablePDB: false storage: size: 1Gi This configuration ensures smoother maintenance procedures without restrictions on draining the node during development activities. Node Maintenance Window Important While CloudNativePG will continue supporting the node maintenance window, it is currently recommended to transition to direct control of pod disruption budgets, as explained in the previous section. This section is retained mainly for backward compatibility. Prior to release 1.23, CloudNativePG had just one declarative mechanism to manage Kubernetes upgrades when dealing with local storage: you had to temporarily put the cluster in maintenance mode through the nodeMaintenanceWindow option to avoid standard self-healing procedures to kick in, while, for example, enlarging the partition on the physical node or updating the node itself. Warning Limit the duration of the maintenance window to the shortest amount of time possible. In this phase, some of the expected behaviors of Kubernetes are either disabled or running with some limitations, including self-healing, rolling updates, and Pod disruption budget. The nodeMaintenanceWindow option of the cluster has two further settings: inProgress : Boolean value that states if the maintenance window for the nodes is currently in progress or not. By default, it is set to off . During the maintenance window, the reusePVC option below is evaluated by the operator. reusePVC : Boolean value that defines if an existing PVC is reused or not during the maintenance operation. By default, it is set to on . When enabled , Kubernetes waits for the node to come up again and then reuses the existing PVC; the PodDisruptionBudget policy is temporarily removed. When disabled , Kubernetes forces the recreation of the Pod on a different node with a new PVC by relying on PostgreSQL's physical streaming replication, then destroys the old PVC together with the Pod. This scenario is generally not recommended unless the database's size is small, and re-cloning the new PostgreSQL instance takes shorter than waiting. This behavior does not apply to clusters with only one instance and reusePVC disabled: see section below. Note When performing the kubectl drain command, you will need to add the --delete-emptydir-data option. Don't be afraid: it refers to another volume internally used by the operator - not the PostgreSQL data directory. Important PodDisruptionBudget management can be disabled by setting the .spec.enablePDB field to false . In that case, the operator won't create PodDisruptionBudgets and will delete them if they were previously created. Single instance clusters with reusePVC set to false Important We recommend to always create clusters with more than one instance in order to guarantee high availability. Deleting the only PostgreSQL instance in a single instance cluster with reusePVC set to false would imply all data being lost, therefore we prevent users from draining nodes such instances might be running on, even in maintenance mode. However, in case maintenance is required for such a node you have two options: Enable reusePVC , accepting the downtime Replicate the instance on a different node and switch over the primary As long as a database service downtime is acceptable for your environment, draining the node is as simple as setting the nodeMaintenanceWindow to inProgress: true and reusePVC: true . This will allow the instance to be deleted and recreated as soon as the original PVC is available (e.g. with node local storage, as soon as the node is back up). Otherwise you will have to scale up the cluster, creating a new instance on a different node and promoting the new instance to primary in order to shut down the original one on the node undergoing maintenance. The only downtime in this case will be the duration of the switchover. A possible approach could be: Cordon the node on which the current instance is running. Scale up the cluster to 2 instances, could take some time depending on the database size. As soon as the new instance is running, the operator will automatically perform a switchover given that the current primary is running on a cordoned node. Scale back down the cluster to a single instance, this will delete the old instance The old primary's node can now be drained successfully, while leaving the new primary running on a new node.","title":"Kubernetes Upgrade and Maintenance"},{"location":"kubernetes_upgrade/#kubernetes-upgrade-and-maintenance","text":"Maintaining an up-to-date Kubernetes cluster is crucial for ensuring optimal performance and security, particularly for self-managed clusters, especially those running on bare metal infrastructure. Regular updates help address technical debt and mitigate business risks, despite the controlled downtimes associated with temporarily removing a node from the cluster for maintenance purposes. For further insights on embracing risk in operations, refer to the \"Embracing Risk\" chapter from the Site Reliability Engineering book.","title":"Kubernetes Upgrade and Maintenance"},{"location":"kubernetes_upgrade/#importance-of-regular-updates","text":"Updating Kubernetes involves planning and executing maintenance tasks, such as applying security updates to underlying Linux servers, replacing malfunctioning hardware components, or upgrading the cluster to the latest Kubernetes version. These activities are essential for maintaining a robust and secure infrastructure.","title":"Importance of Regular Updates"},{"location":"kubernetes_upgrade/#maintenance-operations-in-a-cluster","text":"Typically, maintenance operations are carried out on one node at a time, following a structured process : eviction of workloads ( drain ): workloads are gracefully moved away from the node to be updated, ensuring a smooth transition. performing the operation: the actual maintenance operation, such as a system update or hardware replacement, is executed. rejoining the node to the cluster ( uncordon ): the updated node is reintegrated into the cluster, ready to resume its responsibilities. This process requires either stopping workloads for the entire upgrade duration or migrating them to other nodes in the cluster.","title":"Maintenance Operations in a Cluster"},{"location":"kubernetes_upgrade/#temporary-postgresql-cluster-degradation","text":"While the standard approach ensures service reliability and leverages Kubernetes' self-healing capabilities, there are scenarios where operating with a temporarily degraded cluster may be acceptable. This is particularly relevant for PostgreSQL clusters relying on node-local storage , where the storage is local to the Kubernetes worker node running the PostgreSQL database. Node-local storage, or simply local storage , is employed to enhance performance. Note If your database files reside on shared storage accessible over the network, the default self-healing behavior of the operator can efficiently handle scenarios where volumes are reused by pods on different nodes after a drain operation. In such cases, you can skip the remaining sections of this document.","title":"Temporary PostgreSQL Cluster Degradation"},{"location":"kubernetes_upgrade/#pod-disruption-budgets","text":"By default, CloudNativePG safeguards Postgres cluster operations. If a node is to be drained and contains a cluster's primary instance, a switchover happens ahead of the drain. Once the instance in the node is downgraded to replica, the draining can resume. For single-instance clusters, a switchover is not possible, so CloudNativePG will prevent draining the node where the instance is housed. Additionally, in clusters with 3 or more instances, CloudNativePG guarantees that only one replica at a time is gracefully shut down during a drain operation. Each PostgreSQL Cluster is equipped with two associated PodDisruptionBudget resources - you can easily confirm it with the kubectl get pdb command. Our recommendation is to leave pod disruption budgets enabled for every production Postgres cluster. This can be effortlessly managed by toggling the .spec.enablePDB option, as detailed in the API reference .","title":"Pod Disruption Budgets"},{"location":"kubernetes_upgrade/#postgresql-clusters-used-for-development-or-testing","text":"For PostgreSQL clusters used for development purposes, often consisting of a single instance, it is essential to disable pod disruption budgets. Failure to do so will prevent the node hosting that cluster from being drained. The following example illustrates how to disable pod disruption budgets for a 1-instance development cluster: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: dev spec: instances: 1 enablePDB: false storage: size: 1Gi This configuration ensures smoother maintenance procedures without restrictions on draining the node during development activities.","title":"PostgreSQL Clusters used for Development or Testing"},{"location":"kubernetes_upgrade/#node-maintenance-window","text":"Important While CloudNativePG will continue supporting the node maintenance window, it is currently recommended to transition to direct control of pod disruption budgets, as explained in the previous section. This section is retained mainly for backward compatibility. Prior to release 1.23, CloudNativePG had just one declarative mechanism to manage Kubernetes upgrades when dealing with local storage: you had to temporarily put the cluster in maintenance mode through the nodeMaintenanceWindow option to avoid standard self-healing procedures to kick in, while, for example, enlarging the partition on the physical node or updating the node itself. Warning Limit the duration of the maintenance window to the shortest amount of time possible. In this phase, some of the expected behaviors of Kubernetes are either disabled or running with some limitations, including self-healing, rolling updates, and Pod disruption budget. The nodeMaintenanceWindow option of the cluster has two further settings: inProgress : Boolean value that states if the maintenance window for the nodes is currently in progress or not. By default, it is set to off . During the maintenance window, the reusePVC option below is evaluated by the operator. reusePVC : Boolean value that defines if an existing PVC is reused or not during the maintenance operation. By default, it is set to on . When enabled , Kubernetes waits for the node to come up again and then reuses the existing PVC; the PodDisruptionBudget policy is temporarily removed. When disabled , Kubernetes forces the recreation of the Pod on a different node with a new PVC by relying on PostgreSQL's physical streaming replication, then destroys the old PVC together with the Pod. This scenario is generally not recommended unless the database's size is small, and re-cloning the new PostgreSQL instance takes shorter than waiting. This behavior does not apply to clusters with only one instance and reusePVC disabled: see section below. Note When performing the kubectl drain command, you will need to add the --delete-emptydir-data option. Don't be afraid: it refers to another volume internally used by the operator - not the PostgreSQL data directory. Important PodDisruptionBudget management can be disabled by setting the .spec.enablePDB field to false . In that case, the operator won't create PodDisruptionBudgets and will delete them if they were previously created.","title":"Node Maintenance Window"},{"location":"kubernetes_upgrade/#single-instance-clusters-with-reusepvc-set-to-false","text":"Important We recommend to always create clusters with more than one instance in order to guarantee high availability. Deleting the only PostgreSQL instance in a single instance cluster with reusePVC set to false would imply all data being lost, therefore we prevent users from draining nodes such instances might be running on, even in maintenance mode. However, in case maintenance is required for such a node you have two options: Enable reusePVC , accepting the downtime Replicate the instance on a different node and switch over the primary As long as a database service downtime is acceptable for your environment, draining the node is as simple as setting the nodeMaintenanceWindow to inProgress: true and reusePVC: true . This will allow the instance to be deleted and recreated as soon as the original PVC is available (e.g. with node local storage, as soon as the node is back up). Otherwise you will have to scale up the cluster, creating a new instance on a different node and promoting the new instance to primary in order to shut down the original one on the node undergoing maintenance. The only downtime in this case will be the duration of the switchover. A possible approach could be: Cordon the node on which the current instance is running. Scale up the cluster to 2 instances, could take some time depending on the database size. As soon as the new instance is running, the operator will automatically perform a switchover given that the current primary is running on a cordoned node. Scale back down the cluster to a single instance, this will delete the old instance The old primary's node can now be drained successfully, while leaving the new primary running on a new node.","title":"Single instance clusters with reusePVC set to false"},{"location":"labels_annotations/","text":"Labels and annotations Resources in Kubernetes are organized in a flat structure, with no hierarchical information or relationship between them. However, such resources and objects can be linked together and put in relationship through labels and annotations . Info For more information, see the Kubernetes documentation on annotations and labels . In brief: An annotation is used to assign additional non-identifying information to resources with the goal of facilitating integration with external tools. A label is used to group objects and query them through the Kubernetes native selector capability. You can select one or more labels or annotations to use in your CloudNativePG deployments. Then you need to configure the operator so that when you define these labels or annotations in a cluster's metadata, they're inherited by all resources created by it (including pods). Note Label and annotation inheritance is the technique adopted by CloudNativePG instead of alternative approaches such as pod templates. Predefined labels CloudNativePG manages the following predefined labels: cnpg.io/backupDate The date of the backup in ISO 8601 format ( YYYYMMDD ). This label is available only on VolumeSnapshot resources. cnpg.io/backupName Backup identifier. This label is available only on VolumeSnapshot resources. cnpg.io/backupMonth The year/month when a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/backupTimeline The timeline of the instance when a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/backupYear The year a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/cluster Name of the cluster. cnpg.io/immediateBackup Applied to a Backup resource if the backup is the first one created from a ScheduledBackup object having immediate set to true . cnpg.io/instanceName Name of the PostgreSQL instance (replaces the old and deprecated postgresql label). cnpg.io/jobRole Role of the job (that is, import , initdb , join , ...) cnpg.io/onlineBackup Whether the backup is online (hot) or taken when Postgres is down (cold). This label is available only on VolumeSnapshot resources. cnpg.io/podRole Distinguishes pods dedicated to pooler deployment from those used for database instances. cnpg.io/poolerName Name of the PgBouncer pooler. cnpg.io/pvcRole Purpose of the PVC, such as PG_DATA or PG_WAL . cnpg.io/reload Available on ConfigMap and Secret resources. When set to true , a change in the resource is automatically reloaded by the operator. cnpg.io/userType Specifies the type of PostgreSQL user associated with the Secret , either superuser (Postgres superuser access) or app (application-level user in CloudNativePG terminology), and is limited to the default users created by CloudNativePG (typically postgres and app ). role - deprecated Whether the instance running in a pod is a primary or a replica . This label is deprecated, you should use cnpg.io/instanceRole instead. cnpg.io/scheduled-backup When available, name of the ScheduledBackup resource that created a given Backup object. cnpg.io/instanceRole Whether the instance running in a pod is a primary or a replica . Predefined annotations CloudNativePG manages the following predefined annotations: container.apparmor.security.beta.kubernetes.io/* Name of the AppArmor profile to apply to the named container. See AppArmor for details. cnpg.io/backupEndTime The time a backup ended. This annotation is available only on VolumeSnapshot resources. cnpg.io/backupEndWAL The WAL at the conclusion of a backup. This annotation is available only on VolumeSnapshot resources. cnpg.io/backupStartTime The time a backup started. cnpg.io/backupStartWAL The WAL at the start of a backup. This annotation is available only on VolumeSnapshot resources. cnpg.io/coredumpFilter Filter to control the coredump of Postgres processes, expressed with a bitmask. By default it's set to 0x31 to exclude shared memory segments from the dump. See PostgreSQL core dumps for more information. cnpg.io/clusterManifest Manifest of the Cluster owning this resource (such as a PVC). This label replaces the old, deprecated cnpg.io/hibernateClusterManifest label. cnpg.io/fencedInstances List of the instances that need to be fenced, expressed in JSON format. The whole cluster is fenced if the list contains the * element. cnpg.io/forceLegacyBackup Applied to a Cluster resource for testing purposes only, to simulate the behavior of barman-cloud-backup prior to version 3.4 (Jan 2023) when the --name option wasn't available. cnpg.io/hash The hash value of the resource. cnpg.io/hibernation Applied to a Cluster resource to control the declarative hibernation feature . Allowed values are on and off . cnpg.io/managedSecrets Pull secrets managed by the operator and automatically set in the ServiceAccount resources for each Postgres cluster. cnpg.io/nodeSerial On a pod resource, identifies the serial number of the instance within the Postgres cluster. cnpg.io/operatorVersion Version of the operator. cnpg.io/pgControldata Output of the pg_controldata command. This annotation replaces the old, deprecated cnpg.io/hibernatePgControlData annotation. cnpg.io/podEnvHash Deprecated, as the cnpg.io/podSpec annotation now also contains the pod environment. cnpg.io/podPatch Annotation can be applied on a Cluster resource. When set to JSON-patch formatted patch, the patch will be applied on the instance Pods. \u26a0\ufe0f WARNING: This feature may introduce discrepancies between the operator\u2019s expectations and Kubernetes behavior. Use with caution and only as a last resort. IMPORTANT : adding or changing this annotation won't trigger a rolling deployment of the generated Pods. The latter can be triggered manually by the user with kubectl cnpg restart . cnpg.io/podSpec Snapshot of the spec of the pod generated by the operator. This annotation replaces the old, deprecated cnpg.io/podEnvHash annotation. cnpg.io/poolerSpecHash Hash of the pooler resource. cnpg.io/pvcStatus Current status of the PVC: initializing , ready , or detached . cnpg.io/reconcilePodSpec Annotation can be applied to a Cluster or Pooler to prevent restarts. When set to disabled on a Cluster , the operator prevents instances from restarting due to changes in the PodSpec. This includes changes to: Topology or affinity Scheduler Volumes or containers When set to disabled on a Pooler , the operator restricts any modifications to the deployment specification, except for changes to spec.instances . cnpg.io/reconciliationLoop When set to disabled on a Cluster , the operator prevents the reconciliation loop from running. cnpg.io/reloadedAt Contains the latest cluster reload time. reload is triggered by the user through a plugin. cnpg.io/skipEmptyWalArchiveCheck When set to enabled on a Cluster resource, the operator disables the check that ensures that the WAL archive is empty before writing data. Use at your own risk. cnpg.io/skipWalArchiving When set to enabled on a Cluster resource, the operator disables WAL archiving. This will set archive_mode to off and require a restart of all PostgreSQL instances. Use at your own risk. cnpg.io/snapshotStartTime The time a snapshot started. cnpg.io/snapshotEndTime The time a snapshot was marked as ready to use. cnpg.io/validation When set to disabled on a CloudNativePG-managed custom resource, the validation webhook allows all changes without restriction. \u26a0\ufe0f WARNING: Disabling validation may permit unsafe or destructive operations. Use this setting with caution and at your own risk. cnpg.io/volumeSnapshotDeadline Applied to Backup and ScheduledBackup resources, allows you to control how long the operator should retry recoverable errors before considering the volume snapshot backup failed. In minutes, defaulting to 10. kubectl.kubernetes.io/restartedAt When available, the time of last requested restart of a Postgres cluster. Prerequisites By default, no label or annotation defined in the cluster's metadata is inherited by the associated resources. To enable label/annotation inheritance, follow the instructions provided in Operator configuration . The following continues from that example and limits it to the following: Annotations: categories Labels: app , environment , and workload Note Feel free to select the names that most suit your context for both annotations and labels. You can also use wildcards in naming and adopt strategies like using mycompany/* for all labels or setting annotations starting with mycompany/ to be inherited. Defining cluster's metadata When defining the cluster, before any resource is deployed, you can set the metadata as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example annotations: categories: database labels: environment: production workload: database app: sso spec: # ... <snip> Once the cluster is deployed, you can verify, for example, that the labels were correctly set in the pods: kubectl get pods --show-labels Current limitations Currently, CloudNativePG doesn't automatically propagate labels or annotations deletions. Therefore, when an annotation or label is removed from a cluster that was previously propagated to the underlying pods, the operator doesn't remove it on the associated resources.","title":"Labels and annotations"},{"location":"labels_annotations/#labels-and-annotations","text":"Resources in Kubernetes are organized in a flat structure, with no hierarchical information or relationship between them. However, such resources and objects can be linked together and put in relationship through labels and annotations . Info For more information, see the Kubernetes documentation on annotations and labels . In brief: An annotation is used to assign additional non-identifying information to resources with the goal of facilitating integration with external tools. A label is used to group objects and query them through the Kubernetes native selector capability. You can select one or more labels or annotations to use in your CloudNativePG deployments. Then you need to configure the operator so that when you define these labels or annotations in a cluster's metadata, they're inherited by all resources created by it (including pods). Note Label and annotation inheritance is the technique adopted by CloudNativePG instead of alternative approaches such as pod templates.","title":"Labels and annotations"},{"location":"labels_annotations/#predefined-labels","text":"CloudNativePG manages the following predefined labels: cnpg.io/backupDate The date of the backup in ISO 8601 format ( YYYYMMDD ). This label is available only on VolumeSnapshot resources. cnpg.io/backupName Backup identifier. This label is available only on VolumeSnapshot resources. cnpg.io/backupMonth The year/month when a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/backupTimeline The timeline of the instance when a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/backupYear The year a backup was taken. This label is available only on VolumeSnapshot resources. cnpg.io/cluster Name of the cluster. cnpg.io/immediateBackup Applied to a Backup resource if the backup is the first one created from a ScheduledBackup object having immediate set to true . cnpg.io/instanceName Name of the PostgreSQL instance (replaces the old and deprecated postgresql label). cnpg.io/jobRole Role of the job (that is, import , initdb , join , ...) cnpg.io/onlineBackup Whether the backup is online (hot) or taken when Postgres is down (cold). This label is available only on VolumeSnapshot resources. cnpg.io/podRole Distinguishes pods dedicated to pooler deployment from those used for database instances. cnpg.io/poolerName Name of the PgBouncer pooler. cnpg.io/pvcRole Purpose of the PVC, such as PG_DATA or PG_WAL . cnpg.io/reload Available on ConfigMap and Secret resources. When set to true , a change in the resource is automatically reloaded by the operator. cnpg.io/userType Specifies the type of PostgreSQL user associated with the Secret , either superuser (Postgres superuser access) or app (application-level user in CloudNativePG terminology), and is limited to the default users created by CloudNativePG (typically postgres and app ). role - deprecated Whether the instance running in a pod is a primary or a replica . This label is deprecated, you should use cnpg.io/instanceRole instead. cnpg.io/scheduled-backup When available, name of the ScheduledBackup resource that created a given Backup object. cnpg.io/instanceRole Whether the instance running in a pod is a primary or a replica .","title":"Predefined labels"},{"location":"labels_annotations/#predefined-annotations","text":"CloudNativePG manages the following predefined annotations: container.apparmor.security.beta.kubernetes.io/* Name of the AppArmor profile to apply to the named container. See AppArmor for details. cnpg.io/backupEndTime The time a backup ended. This annotation is available only on VolumeSnapshot resources. cnpg.io/backupEndWAL The WAL at the conclusion of a backup. This annotation is available only on VolumeSnapshot resources. cnpg.io/backupStartTime The time a backup started. cnpg.io/backupStartWAL The WAL at the start of a backup. This annotation is available only on VolumeSnapshot resources. cnpg.io/coredumpFilter Filter to control the coredump of Postgres processes, expressed with a bitmask. By default it's set to 0x31 to exclude shared memory segments from the dump. See PostgreSQL core dumps for more information. cnpg.io/clusterManifest Manifest of the Cluster owning this resource (such as a PVC). This label replaces the old, deprecated cnpg.io/hibernateClusterManifest label. cnpg.io/fencedInstances List of the instances that need to be fenced, expressed in JSON format. The whole cluster is fenced if the list contains the * element. cnpg.io/forceLegacyBackup Applied to a Cluster resource for testing purposes only, to simulate the behavior of barman-cloud-backup prior to version 3.4 (Jan 2023) when the --name option wasn't available. cnpg.io/hash The hash value of the resource. cnpg.io/hibernation Applied to a Cluster resource to control the declarative hibernation feature . Allowed values are on and off . cnpg.io/managedSecrets Pull secrets managed by the operator and automatically set in the ServiceAccount resources for each Postgres cluster. cnpg.io/nodeSerial On a pod resource, identifies the serial number of the instance within the Postgres cluster. cnpg.io/operatorVersion Version of the operator. cnpg.io/pgControldata Output of the pg_controldata command. This annotation replaces the old, deprecated cnpg.io/hibernatePgControlData annotation. cnpg.io/podEnvHash Deprecated, as the cnpg.io/podSpec annotation now also contains the pod environment. cnpg.io/podPatch Annotation can be applied on a Cluster resource. When set to JSON-patch formatted patch, the patch will be applied on the instance Pods. \u26a0\ufe0f WARNING: This feature may introduce discrepancies between the operator\u2019s expectations and Kubernetes behavior. Use with caution and only as a last resort. IMPORTANT : adding or changing this annotation won't trigger a rolling deployment of the generated Pods. The latter can be triggered manually by the user with kubectl cnpg restart . cnpg.io/podSpec Snapshot of the spec of the pod generated by the operator. This annotation replaces the old, deprecated cnpg.io/podEnvHash annotation. cnpg.io/poolerSpecHash Hash of the pooler resource. cnpg.io/pvcStatus Current status of the PVC: initializing , ready , or detached . cnpg.io/reconcilePodSpec Annotation can be applied to a Cluster or Pooler to prevent restarts. When set to disabled on a Cluster , the operator prevents instances from restarting due to changes in the PodSpec. This includes changes to: Topology or affinity Scheduler Volumes or containers When set to disabled on a Pooler , the operator restricts any modifications to the deployment specification, except for changes to spec.instances . cnpg.io/reconciliationLoop When set to disabled on a Cluster , the operator prevents the reconciliation loop from running. cnpg.io/reloadedAt Contains the latest cluster reload time. reload is triggered by the user through a plugin. cnpg.io/skipEmptyWalArchiveCheck When set to enabled on a Cluster resource, the operator disables the check that ensures that the WAL archive is empty before writing data. Use at your own risk. cnpg.io/skipWalArchiving When set to enabled on a Cluster resource, the operator disables WAL archiving. This will set archive_mode to off and require a restart of all PostgreSQL instances. Use at your own risk. cnpg.io/snapshotStartTime The time a snapshot started. cnpg.io/snapshotEndTime The time a snapshot was marked as ready to use. cnpg.io/validation When set to disabled on a CloudNativePG-managed custom resource, the validation webhook allows all changes without restriction. \u26a0\ufe0f WARNING: Disabling validation may permit unsafe or destructive operations. Use this setting with caution and at your own risk. cnpg.io/volumeSnapshotDeadline Applied to Backup and ScheduledBackup resources, allows you to control how long the operator should retry recoverable errors before considering the volume snapshot backup failed. In minutes, defaulting to 10. kubectl.kubernetes.io/restartedAt When available, the time of last requested restart of a Postgres cluster.","title":"Predefined annotations"},{"location":"labels_annotations/#prerequisites","text":"By default, no label or annotation defined in the cluster's metadata is inherited by the associated resources. To enable label/annotation inheritance, follow the instructions provided in Operator configuration . The following continues from that example and limits it to the following: Annotations: categories Labels: app , environment , and workload Note Feel free to select the names that most suit your context for both annotations and labels. You can also use wildcards in naming and adopt strategies like using mycompany/* for all labels or setting annotations starting with mycompany/ to be inherited.","title":"Prerequisites"},{"location":"labels_annotations/#defining-clusters-metadata","text":"When defining the cluster, before any resource is deployed, you can set the metadata as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example annotations: categories: database labels: environment: production workload: database app: sso spec: # ... <snip> Once the cluster is deployed, you can verify, for example, that the labels were correctly set in the pods: kubectl get pods --show-labels","title":"Defining cluster's metadata"},{"location":"labels_annotations/#current-limitations","text":"Currently, CloudNativePG doesn't automatically propagate labels or annotations deletions. Therefore, when an annotation or label is removed from a cluster that was previously propagated to the underlying pods, the operator doesn't remove it on the associated resources.","title":"Current limitations"},{"location":"logging/","text":"Logging CloudNativePG outputs logs in JSON format directly to standard output, including PostgreSQL logs, without persisting them to storage for security reasons. This design facilitates seamless integration with most Kubernetes-compatible log management tools, including command line ones like stern . Important Long-term storage and management of logs are outside the scope of the operator and should be handled at the Kubernetes infrastructure level. For more information, see the Kubernetes Logging Architecture documentation. Each log entry includes the following fields: level \u2013 The log level (e.g., info , notice ). ts \u2013 The timestamp. logger \u2013 The type of log (e.g., postgres , pg_controldata ). msg \u2013 The log message, or the keyword record if the message is in JSON format. record \u2013 The actual record, with a structure that varies depending on the logger type. logging_pod \u2013 The name of the pod where the log was generated. Info If your log ingestion system requires custom field names, you can rename the level and ts fields using the log-field-level and log-field-timestamp flags in the operator controller. This can be configured by editing the Deployment definition of the cloudnative-pg operator. Cluster Logs You can configure the log level for the instance pods in the cluster specification using the logLevel option. Available log levels are: error , warning , info (default), debug , and trace . Important Currently, the log level can only be set at the time the instance starts. Changes to the log level in the cluster specification after the cluster has started will only apply to new pods, not existing ones. Operator Logs The logs produced by the operator pod can be configured with log levels, same as instance pods: error , warning , info (default), debug , and trace . The log level for the operator can be configured by editing the Deployment definition of the operator and setting the --log-level command line argument to the desired value. PostgreSQL Logs Each PostgreSQL log entry is a JSON object with the logger key set to postgres . The structure of the log entries is as follows: { \"level\": \"info\", \"ts\": 1619781249.7188137, \"logger\": \"postgres\", \"msg\": \"record\", \"record\": { \"log_time\": \"2021-04-30 11:14:09.718 UTC\", \"user_name\": \"\", \"database_name\": \"\", \"process_id\": \"25\", \"connection_from\": \"\", \"session_id\": \"608be681.19\", \"session_line_num\": \"1\", \"command_tag\": \"\", \"session_start_time\": \"2021-04-30 11:14:09 UTC\", \"virtual_transaction_id\": \"\", \"transaction_id\": \"0\", \"error_severity\": \"LOG\", \"sql_state_code\": \"00000\", \"message\": \"database system was interrupted; last known up at 2021-04-30 11:14:07 UTC\", \"detail\": \"\", \"hint\": \"\", \"internal_query\": \"\", \"internal_query_pos\": \"\", \"context\": \"\", \"query\": \"\", \"query_pos\": \"\", \"location\": \"\", \"application_name\": \"\", \"backend_type\": \"startup\" }, \"logging_pod\": \"cluster-example-1\", } Info Internally, the operator uses PostgreSQL's CSV log format. For more details, refer to the PostgreSQL documentation on CSV log format . PGAudit Logs CloudNativePG offers seamless and native support for PGAudit on PostgreSQL clusters. To enable PGAudit, add the necessary pgaudit parameters in the postgresql section of the cluster configuration. Important The PGAudit library must be added to shared_preload_libraries . CloudNativePG automatically manages this based on the presence of pgaudit.* parameters in the PostgreSQL configuration. The operator handles both the addition and removal of the library from shared_preload_libraries . Additionally, the operator manages the creation and removal of the PGAudit extension across all databases within the cluster. Important CloudNativePG executes the CREATE EXTENSION and DROP EXTENSION commands in all databases within the cluster that accept connections. The following example demonstrates a PostgreSQL Cluster deployment with PGAudit enabled and configured: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 postgresql: parameters: \"pgaudit.log\": \"all, -misc\" \"pgaudit.log_catalog\": \"off\" \"pgaudit.log_parameter\": \"on\" \"pgaudit.log_relation\": \"on\" storage: size: 1Gi The audit CSV log entries generated by PGAudit are parsed and routed to standard output in JSON format, similar to all other logs: .logger is set to pgaudit . .msg is set to record . .record contains the entire parsed record as a JSON object. This structure resembles that of logging_collector logs, with the exception of .record.audit , which contains the PGAudit CSV message formatted as a JSON object. This example shows sample log entries: { \"level\": \"info\", \"ts\": 1627394507.8814096, \"logger\": \"pgaudit\", \"msg\": \"record\", \"record\": { \"log_time\": \"2021-07-27 14:01:47.881 UTC\", \"user_name\": \"postgres\", \"database_name\": \"postgres\", \"process_id\": \"203\", \"connection_from\": \"[local]\", \"session_id\": \"610011cb.cb\", \"session_line_num\": \"1\", \"command_tag\": \"SELECT\", \"session_start_time\": \"2021-07-27 14:01:47 UTC\", \"virtual_transaction_id\": \"3/336\", \"transaction_id\": \"0\", \"error_severity\": \"LOG\", \"sql_state_code\": \"00000\", \"backend_type\": \"client backend\", \"audit\": { \"audit_type\": \"SESSION\", \"statement_id\": \"1\", \"substatement_id\": \"1\", \"class\": \"READ\", \"command\": \"SELECT FOR KEY SHARE\", \"statement\": \"SELECT pg_current_wal_lsn()\", \"parameter\": \"<none>\" } }, \"logging_pod\": \"cluster-example-1\", } See the PGAudit documentation for more details about each field in a record. Other Logs All logs generated by the operator and its instances are in JSON format, with the logger field indicating the process that produced them. The possible logger values are as follows: barman-cloud-wal-archive : logs from barman-cloud-wal-archive barman-cloud-wal-restore : logs from barman-cloud-wal-restore initdb : logs from running initdb pg_basebackup : logs from running pg_basebackup pg_controldata : logs from running pg_controldata pg_ctl : logs from running any pg_ctl subcommand pg_rewind : logs from running pg_rewind pgaudit : logs from the PGAudit extension postgres : logs from the postgres instance (with msg distinct from record ) wal-archive : logs from the wal-archive subcommand of the instance manager wal-restore : logs from the wal-restore subcommand of the instance manager instance-manager : from the PostgreSQL instance manager With the exception of postgres , which follows a specific structure, all other logger values contain the msg field with the escaped message that is logged.","title":"Logging"},{"location":"logging/#logging","text":"CloudNativePG outputs logs in JSON format directly to standard output, including PostgreSQL logs, without persisting them to storage for security reasons. This design facilitates seamless integration with most Kubernetes-compatible log management tools, including command line ones like stern . Important Long-term storage and management of logs are outside the scope of the operator and should be handled at the Kubernetes infrastructure level. For more information, see the Kubernetes Logging Architecture documentation. Each log entry includes the following fields: level \u2013 The log level (e.g., info , notice ). ts \u2013 The timestamp. logger \u2013 The type of log (e.g., postgres , pg_controldata ). msg \u2013 The log message, or the keyword record if the message is in JSON format. record \u2013 The actual record, with a structure that varies depending on the logger type. logging_pod \u2013 The name of the pod where the log was generated. Info If your log ingestion system requires custom field names, you can rename the level and ts fields using the log-field-level and log-field-timestamp flags in the operator controller. This can be configured by editing the Deployment definition of the cloudnative-pg operator.","title":"Logging"},{"location":"logging/#cluster-logs","text":"You can configure the log level for the instance pods in the cluster specification using the logLevel option. Available log levels are: error , warning , info (default), debug , and trace . Important Currently, the log level can only be set at the time the instance starts. Changes to the log level in the cluster specification after the cluster has started will only apply to new pods, not existing ones.","title":"Cluster Logs"},{"location":"logging/#operator-logs","text":"The logs produced by the operator pod can be configured with log levels, same as instance pods: error , warning , info (default), debug , and trace . The log level for the operator can be configured by editing the Deployment definition of the operator and setting the --log-level command line argument to the desired value.","title":"Operator Logs"},{"location":"logging/#postgresql-logs","text":"Each PostgreSQL log entry is a JSON object with the logger key set to postgres . The structure of the log entries is as follows: { \"level\": \"info\", \"ts\": 1619781249.7188137, \"logger\": \"postgres\", \"msg\": \"record\", \"record\": { \"log_time\": \"2021-04-30 11:14:09.718 UTC\", \"user_name\": \"\", \"database_name\": \"\", \"process_id\": \"25\", \"connection_from\": \"\", \"session_id\": \"608be681.19\", \"session_line_num\": \"1\", \"command_tag\": \"\", \"session_start_time\": \"2021-04-30 11:14:09 UTC\", \"virtual_transaction_id\": \"\", \"transaction_id\": \"0\", \"error_severity\": \"LOG\", \"sql_state_code\": \"00000\", \"message\": \"database system was interrupted; last known up at 2021-04-30 11:14:07 UTC\", \"detail\": \"\", \"hint\": \"\", \"internal_query\": \"\", \"internal_query_pos\": \"\", \"context\": \"\", \"query\": \"\", \"query_pos\": \"\", \"location\": \"\", \"application_name\": \"\", \"backend_type\": \"startup\" }, \"logging_pod\": \"cluster-example-1\", } Info Internally, the operator uses PostgreSQL's CSV log format. For more details, refer to the PostgreSQL documentation on CSV log format .","title":"PostgreSQL Logs"},{"location":"logging/#pgaudit-logs","text":"CloudNativePG offers seamless and native support for PGAudit on PostgreSQL clusters. To enable PGAudit, add the necessary pgaudit parameters in the postgresql section of the cluster configuration. Important The PGAudit library must be added to shared_preload_libraries . CloudNativePG automatically manages this based on the presence of pgaudit.* parameters in the PostgreSQL configuration. The operator handles both the addition and removal of the library from shared_preload_libraries . Additionally, the operator manages the creation and removal of the PGAudit extension across all databases within the cluster. Important CloudNativePG executes the CREATE EXTENSION and DROP EXTENSION commands in all databases within the cluster that accept connections. The following example demonstrates a PostgreSQL Cluster deployment with PGAudit enabled and configured: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 postgresql: parameters: \"pgaudit.log\": \"all, -misc\" \"pgaudit.log_catalog\": \"off\" \"pgaudit.log_parameter\": \"on\" \"pgaudit.log_relation\": \"on\" storage: size: 1Gi The audit CSV log entries generated by PGAudit are parsed and routed to standard output in JSON format, similar to all other logs: .logger is set to pgaudit . .msg is set to record . .record contains the entire parsed record as a JSON object. This structure resembles that of logging_collector logs, with the exception of .record.audit , which contains the PGAudit CSV message formatted as a JSON object. This example shows sample log entries: { \"level\": \"info\", \"ts\": 1627394507.8814096, \"logger\": \"pgaudit\", \"msg\": \"record\", \"record\": { \"log_time\": \"2021-07-27 14:01:47.881 UTC\", \"user_name\": \"postgres\", \"database_name\": \"postgres\", \"process_id\": \"203\", \"connection_from\": \"[local]\", \"session_id\": \"610011cb.cb\", \"session_line_num\": \"1\", \"command_tag\": \"SELECT\", \"session_start_time\": \"2021-07-27 14:01:47 UTC\", \"virtual_transaction_id\": \"3/336\", \"transaction_id\": \"0\", \"error_severity\": \"LOG\", \"sql_state_code\": \"00000\", \"backend_type\": \"client backend\", \"audit\": { \"audit_type\": \"SESSION\", \"statement_id\": \"1\", \"substatement_id\": \"1\", \"class\": \"READ\", \"command\": \"SELECT FOR KEY SHARE\", \"statement\": \"SELECT pg_current_wal_lsn()\", \"parameter\": \"<none>\" } }, \"logging_pod\": \"cluster-example-1\", } See the PGAudit documentation for more details about each field in a record.","title":"PGAudit Logs"},{"location":"logging/#other-logs","text":"All logs generated by the operator and its instances are in JSON format, with the logger field indicating the process that produced them. The possible logger values are as follows: barman-cloud-wal-archive : logs from barman-cloud-wal-archive barman-cloud-wal-restore : logs from barman-cloud-wal-restore initdb : logs from running initdb pg_basebackup : logs from running pg_basebackup pg_controldata : logs from running pg_controldata pg_ctl : logs from running any pg_ctl subcommand pg_rewind : logs from running pg_rewind pgaudit : logs from the PGAudit extension postgres : logs from the postgres instance (with msg distinct from record ) wal-archive : logs from the wal-archive subcommand of the instance manager wal-restore : logs from the wal-restore subcommand of the instance manager instance-manager : from the PostgreSQL instance manager With the exception of postgres , which follows a specific structure, all other logger values contain the msg field with the escaped message that is logged.","title":"Other Logs"},{"location":"logical_replication/","text":"Logical Replication PostgreSQL extends its replication capabilities beyond physical replication, which operates at the level of exact block addresses and byte-by-byte copying, by offering logical replication . Logical replication replicates data objects and their changes based on a defined replication identity, typically the primary key. Logical replication uses a publish-and-subscribe model, where subscribers connect to publications on a publisher node. Subscribers pull data changes from these publications and can re-publish them, enabling cascading replication and complex topologies. Important To protect your logical replication subscribers after a failover of the publisher cluster in CloudNativePG, ensure that replication slot synchronization for logical decoding is enabled. Without this, your logical replication clients may lose data and fail to continue seamlessly after a failover. For configuration details, see \"Replication: Logical Decoding Slot Synchronization\" . This flexible model is particularly useful for: Online data migrations Live PostgreSQL version upgrades Data distribution across systems Real-time analytics Integration with external applications Info For more details, examples, and limitations, please refer to the official PostgreSQL documentation on Logical Replication . CloudNativePG enhances this capability by providing declarative support for key PostgreSQL logical replication objects: Publications via the Publication resource Subscriptions via the Subscription resource Publications In PostgreSQL's publish-and-subscribe replication model, a publication is the source of data changes. It acts as a logical container for the change sets (also known as replication sets ) generated from one or more tables within a database. Publications can be defined on any PostgreSQL 10+ instance acting as the publisher , including instances managed by popular DBaaS solutions in the public cloud. Each publication is tied to a single database and provides fine-grained control over which tables and changes are replicated. For publishers outside Kubernetes, you can create publications using SQL or leverage the cnpg publication create plugin command . When managing Cluster objects with CloudNativePG , PostgreSQL publications can be defined declaratively through the Publication resource. Info Please refer to the API reference for the full list of attributes you can define for each Publication object. Suppose you have a cluster named freddie and want to replicate all tables in the app database. Here's a Publication manifest: apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true In the above example: The publication object is named freddie-publisher ( metadata.name ). The publication is created via the primary of the freddie cluster ( spec.cluster.name ) with name publisher ( spec.name ). It includes all tables ( spec.target.allTables: true ) from the app database ( spec.dbname ). Important While allTables simplifies configuration, PostgreSQL offers fine-grained control for replicating specific tables or targeted data changes. For advanced configurations, consult the PostgreSQL documentation . Additionally, refer to the CloudNativePG API reference for details on declaratively customizing replication targets. Required Fields in the Publication Manifest The following fields are required for a Publication object: metadata.name : Unique name for the Kubernetes Publication object. spec.cluster.name : Name of the PostgreSQL cluster. spec.dbname : Database name where the publication is created. spec.name : Publication name in PostgreSQL. spec.target : Specifies the tables or changes to include in the publication. The Publication object must reference a specific Cluster , determining where the publication will be created. It is managed by the cluster's primary instance, ensuring the publication is created or updated as needed. Reconciliation and Status After creating a Publication , CloudNativePG manages it on the primary instance of the specified cluster. Following a successful reconciliation cycle, the Publication status will reflect the following: applied: true , indicates the configuration has been successfully applied. observedGeneration matches metadata.generation , confirming the applied configuration corresponds to the most recent changes. If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field. Removing a publication The publicationReclaimPolicy field controls the behavior when deleting a Publication object: retain (default): Leaves the publication in PostgreSQL for manual management. delete : Automatically removes the publication from PostgreSQL. Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true publicationReclaimPolicy: delete In this case, deleting the Publication object also removes the publisher publication from the app database of the freddie cluster. Subscriptions In PostgreSQL's publish-and-subscribe replication model, a subscription represents the downstream component that consumes data changes. A subscription establishes the connection to a publisher's database and specifies the set of publications (one or more) it subscribes to. Subscriptions can be created on any supported PostgreSQL instance acting as the subscriber . Important Since schema definitions are not replicated, the subscriber must have the corresponding tables already defined before data replication begins. CloudNativePG simplifies subscription management by enabling you to define them declaratively using the Subscription resource. Info Please refer to the API reference for the full list of attributes you can define for each Subscription object. Suppose you want to replicate changes from the publisher publication on the app database of the freddie cluster ( publisher ) to the app database of the king cluster ( subscriber ). Here's an example of a Subscription manifest: apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher In the above example: The subscription object is named freddie-to-king-subscriber ( metadata.name ). The subscription is created in the app database ( spec.dbname ) of the king cluster ( spec.cluster.name ), with name subscriber ( spec.name ). It connects to the publisher publication in the external freddie cluster, referenced by spec.externalClusterName . To facilitate this setup, the freddie external cluster must be defined in the king cluster's configuration. Below is an example excerpt showing how to define the external cluster in the king manifest: externalClusters: - name: freddie connectionParameters: host: freddie-rw.default.svc user: postgres dbname: app Info For more details on configuring the externalClusters section, see the \"Bootstrap\" section of the documentation. As you can see, a subscription can connect to any PostgreSQL database accessible over the network. This flexibility allows you to seamlessly migrate your data into Kubernetes with nearly zero downtime. It\u2019s an excellent option for transitioning from various environments, including popular cloud-based Database-as-a-Service (DBaaS) platforms. Required Fields in the Subscription Manifest The following fields are mandatory for defining a Subscription object: metadata.name : A unique name for the Kubernetes Subscription object within its namespace. spec.cluster.name : The name of the PostgreSQL cluster where the subscription will be created. spec.dbname : The name of the database in which the subscription will be created. spec.name : The name of the subscription as it will appear in PostgreSQL. spec.externalClusterName : The name of the external cluster, as defined in the spec.cluster.name cluster's configuration. This references the publisher database. spec.publicationName : The name of the publication in the publisher database to which the subscription will connect. The Subscription object must reference a specific Cluster , determining where the subscription will be managed. CloudNativePG ensures that the subscription is created or updated on the primary instance of the specified cluster. Reconciliation and Status After creating a Subscription , CloudNativePG manages it on the primary instance of the specified cluster. Following a successful reconciliation cycle, the Subscription status will reflect the following: applied: true , indicates the configuration has been successfully applied. observedGeneration matches metadata.generation , confirming the applied configuration corresponds to the most recent changes. If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field. Removing a Subscription The subscriptionReclaimPolicy field controls the behavior when deleting a Subscription object: retain (default): Leaves the subscription in PostgreSQL for manual management. delete : Automatically removes the subscription from PostgreSQL. Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher subscriptionReclaimPolicy: delete In this case, deleting the Subscription object also removes the subscriber subscription from the app database of the king cluster. Resilience to Failovers To ensure that your logical replication subscriptions remain operational after a failover of the publisher, configure CloudNativePG to synchronize logical decoding slots across the cluster. For detailed instructions, see Logical Decoding Slot Synchronization . Limitations Logical replication in PostgreSQL has some inherent limitations, as outlined in the official documentation . Notably, the following objects are not replicated: Database schema and DDL commands Sequence data Large objects Addressing Schema Replication The first limitation, related to schema replication, can be easily addressed using CloudNativePG's capabilities. For instance, you can leverage the import bootstrap feature to copy the schema of the tables you need to replicate. Alternatively, you can manually create the schema as you would for any PostgreSQL database. Handling Sequences While sequences are not automatically kept in sync through logical replication, CloudNativePG provides a solution to be used in live migrations. You can use the cnpg plugin to synchronize sequence values, ensuring consistency between the publisher and subscriber databases. Example of live migration and major Postgres upgrade with logical replication To highlight the powerful capabilities of logical replication, this example demonstrates how to replicate data from a publisher database ( freddie ) running PostgreSQL 16 to a subscriber database ( king ) running the latest PostgreSQL version. This setup can be deployed in your Kubernetes cluster for evaluation and hands-on learning. This example illustrates how logical replication facilitates live migrations and upgrades between PostgreSQL versions while ensuring data consistency. By combining logical replication with CloudNativePG, you can easily set up, manage, and evaluate such scenarios in a Kubernetes environment. Step 1: Setting Up the Publisher ( freddie ) The first step involves creating a freddie PostgreSQL cluster with version 16. The cluster contains a single instance and includes an app database initialized with a table, n , storing 10,000 numbers. A logical replication publication named publisher is also configured to include all tables in the database. Here\u2019s the manifest for setting up the freddie cluster and its publication resource: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: freddie spec: instances: 1 imageName: ghcr.io/cloudnative-pg/postgresql:16 storage: size: 1Gi bootstrap: initdb: postInitApplicationSQL: - CREATE TABLE n (i SERIAL PRIMARY KEY, m INTEGER) - INSERT INTO n (m) (SELECT generate_series(1, 10000)) - ALTER TABLE n OWNER TO app managed: roles: - name: app login: true replication: true --- apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true Step 2: Setting Up the Subscriber ( king ) Next, create the king PostgreSQL cluster, running the latest version of PostgreSQL. This cluster initializes by importing the schema from the app database on the freddie cluster using the external cluster configuration. A Subscription resource, freddie-to-king-subscription , is then configured to consume changes published by the publisher on freddie . Below is the manifest for setting up the king cluster and its subscription: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: king spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: microservice schemaOnly: true databases: - app source: externalCluster: freddie externalClusters: - name: freddie connectionParameters: host: freddie-rw.default.svc user: app dbname: app password: name: freddie-app key: password --- apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher Once the king cluster is running, you can verify that the replication is working by connecting to the app database and counting the records in the n table. The following example uses the psql command provided by the cnpg plugin for simplicity: kubectl cnpg psql king -- app -qAt -c 'SELECT count(*) FROM n' 10000 This command should return 10000 , confirming that the data from the freddie cluster has been successfully replicated to the king cluster. Using the cnpg plugin, you can also synchronize existing sequences to ensure consistency between the publisher and subscriber. The example below demonstrates how to synchronize a sequence for the king cluster: kubectl cnpg subscription sync-sequences king --subscription=subscriber SELECT setval('\"public\".\"n_i_seq\"', 10000); 10000 This command updates the sequence n_i_seq in the king cluster to match the current value, ensuring it is in sync with the source database.","title":"Logical Replication"},{"location":"logical_replication/#logical-replication","text":"PostgreSQL extends its replication capabilities beyond physical replication, which operates at the level of exact block addresses and byte-by-byte copying, by offering logical replication . Logical replication replicates data objects and their changes based on a defined replication identity, typically the primary key. Logical replication uses a publish-and-subscribe model, where subscribers connect to publications on a publisher node. Subscribers pull data changes from these publications and can re-publish them, enabling cascading replication and complex topologies. Important To protect your logical replication subscribers after a failover of the publisher cluster in CloudNativePG, ensure that replication slot synchronization for logical decoding is enabled. Without this, your logical replication clients may lose data and fail to continue seamlessly after a failover. For configuration details, see \"Replication: Logical Decoding Slot Synchronization\" . This flexible model is particularly useful for: Online data migrations Live PostgreSQL version upgrades Data distribution across systems Real-time analytics Integration with external applications Info For more details, examples, and limitations, please refer to the official PostgreSQL documentation on Logical Replication . CloudNativePG enhances this capability by providing declarative support for key PostgreSQL logical replication objects: Publications via the Publication resource Subscriptions via the Subscription resource","title":"Logical Replication"},{"location":"logical_replication/#publications","text":"In PostgreSQL's publish-and-subscribe replication model, a publication is the source of data changes. It acts as a logical container for the change sets (also known as replication sets ) generated from one or more tables within a database. Publications can be defined on any PostgreSQL 10+ instance acting as the publisher , including instances managed by popular DBaaS solutions in the public cloud. Each publication is tied to a single database and provides fine-grained control over which tables and changes are replicated. For publishers outside Kubernetes, you can create publications using SQL or leverage the cnpg publication create plugin command . When managing Cluster objects with CloudNativePG , PostgreSQL publications can be defined declaratively through the Publication resource. Info Please refer to the API reference for the full list of attributes you can define for each Publication object. Suppose you have a cluster named freddie and want to replicate all tables in the app database. Here's a Publication manifest: apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true In the above example: The publication object is named freddie-publisher ( metadata.name ). The publication is created via the primary of the freddie cluster ( spec.cluster.name ) with name publisher ( spec.name ). It includes all tables ( spec.target.allTables: true ) from the app database ( spec.dbname ). Important While allTables simplifies configuration, PostgreSQL offers fine-grained control for replicating specific tables or targeted data changes. For advanced configurations, consult the PostgreSQL documentation . Additionally, refer to the CloudNativePG API reference for details on declaratively customizing replication targets.","title":"Publications"},{"location":"logical_replication/#required-fields-in-the-publication-manifest","text":"The following fields are required for a Publication object: metadata.name : Unique name for the Kubernetes Publication object. spec.cluster.name : Name of the PostgreSQL cluster. spec.dbname : Database name where the publication is created. spec.name : Publication name in PostgreSQL. spec.target : Specifies the tables or changes to include in the publication. The Publication object must reference a specific Cluster , determining where the publication will be created. It is managed by the cluster's primary instance, ensuring the publication is created or updated as needed.","title":"Required Fields in the Publication Manifest"},{"location":"logical_replication/#reconciliation-and-status","text":"After creating a Publication , CloudNativePG manages it on the primary instance of the specified cluster. Following a successful reconciliation cycle, the Publication status will reflect the following: applied: true , indicates the configuration has been successfully applied. observedGeneration matches metadata.generation , confirming the applied configuration corresponds to the most recent changes. If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field.","title":"Reconciliation and Status"},{"location":"logical_replication/#removing-a-publication","text":"The publicationReclaimPolicy field controls the behavior when deleting a Publication object: retain (default): Leaves the publication in PostgreSQL for manual management. delete : Automatically removes the publication from PostgreSQL. Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true publicationReclaimPolicy: delete In this case, deleting the Publication object also removes the publisher publication from the app database of the freddie cluster.","title":"Removing a publication"},{"location":"logical_replication/#subscriptions","text":"In PostgreSQL's publish-and-subscribe replication model, a subscription represents the downstream component that consumes data changes. A subscription establishes the connection to a publisher's database and specifies the set of publications (one or more) it subscribes to. Subscriptions can be created on any supported PostgreSQL instance acting as the subscriber . Important Since schema definitions are not replicated, the subscriber must have the corresponding tables already defined before data replication begins. CloudNativePG simplifies subscription management by enabling you to define them declaratively using the Subscription resource. Info Please refer to the API reference for the full list of attributes you can define for each Subscription object. Suppose you want to replicate changes from the publisher publication on the app database of the freddie cluster ( publisher ) to the app database of the king cluster ( subscriber ). Here's an example of a Subscription manifest: apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher In the above example: The subscription object is named freddie-to-king-subscriber ( metadata.name ). The subscription is created in the app database ( spec.dbname ) of the king cluster ( spec.cluster.name ), with name subscriber ( spec.name ). It connects to the publisher publication in the external freddie cluster, referenced by spec.externalClusterName . To facilitate this setup, the freddie external cluster must be defined in the king cluster's configuration. Below is an example excerpt showing how to define the external cluster in the king manifest: externalClusters: - name: freddie connectionParameters: host: freddie-rw.default.svc user: postgres dbname: app Info For more details on configuring the externalClusters section, see the \"Bootstrap\" section of the documentation. As you can see, a subscription can connect to any PostgreSQL database accessible over the network. This flexibility allows you to seamlessly migrate your data into Kubernetes with nearly zero downtime. It\u2019s an excellent option for transitioning from various environments, including popular cloud-based Database-as-a-Service (DBaaS) platforms.","title":"Subscriptions"},{"location":"logical_replication/#required-fields-in-the-subscription-manifest","text":"The following fields are mandatory for defining a Subscription object: metadata.name : A unique name for the Kubernetes Subscription object within its namespace. spec.cluster.name : The name of the PostgreSQL cluster where the subscription will be created. spec.dbname : The name of the database in which the subscription will be created. spec.name : The name of the subscription as it will appear in PostgreSQL. spec.externalClusterName : The name of the external cluster, as defined in the spec.cluster.name cluster's configuration. This references the publisher database. spec.publicationName : The name of the publication in the publisher database to which the subscription will connect. The Subscription object must reference a specific Cluster , determining where the subscription will be managed. CloudNativePG ensures that the subscription is created or updated on the primary instance of the specified cluster.","title":"Required Fields in the Subscription Manifest"},{"location":"logical_replication/#reconciliation-and-status_1","text":"After creating a Subscription , CloudNativePG manages it on the primary instance of the specified cluster. Following a successful reconciliation cycle, the Subscription status will reflect the following: applied: true , indicates the configuration has been successfully applied. observedGeneration matches metadata.generation , confirming the applied configuration corresponds to the most recent changes. If an error occurs during reconciliation, status.applied will be false , and an error message will be included in the status.message field.","title":"Reconciliation and Status"},{"location":"logical_replication/#removing-a-subscription","text":"The subscriptionReclaimPolicy field controls the behavior when deleting a Subscription object: retain (default): Leaves the subscription in PostgreSQL for manual management. delete : Automatically removes the subscription from PostgreSQL. Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher subscriptionReclaimPolicy: delete In this case, deleting the Subscription object also removes the subscriber subscription from the app database of the king cluster.","title":"Removing a Subscription"},{"location":"logical_replication/#resilience-to-failovers","text":"To ensure that your logical replication subscriptions remain operational after a failover of the publisher, configure CloudNativePG to synchronize logical decoding slots across the cluster. For detailed instructions, see Logical Decoding Slot Synchronization .","title":"Resilience to Failovers"},{"location":"logical_replication/#limitations","text":"Logical replication in PostgreSQL has some inherent limitations, as outlined in the official documentation . Notably, the following objects are not replicated: Database schema and DDL commands Sequence data Large objects","title":"Limitations"},{"location":"logical_replication/#addressing-schema-replication","text":"The first limitation, related to schema replication, can be easily addressed using CloudNativePG's capabilities. For instance, you can leverage the import bootstrap feature to copy the schema of the tables you need to replicate. Alternatively, you can manually create the schema as you would for any PostgreSQL database.","title":"Addressing Schema Replication"},{"location":"logical_replication/#handling-sequences","text":"While sequences are not automatically kept in sync through logical replication, CloudNativePG provides a solution to be used in live migrations. You can use the cnpg plugin to synchronize sequence values, ensuring consistency between the publisher and subscriber databases.","title":"Handling Sequences"},{"location":"logical_replication/#example-of-live-migration-and-major-postgres-upgrade-with-logical-replication","text":"To highlight the powerful capabilities of logical replication, this example demonstrates how to replicate data from a publisher database ( freddie ) running PostgreSQL 16 to a subscriber database ( king ) running the latest PostgreSQL version. This setup can be deployed in your Kubernetes cluster for evaluation and hands-on learning. This example illustrates how logical replication facilitates live migrations and upgrades between PostgreSQL versions while ensuring data consistency. By combining logical replication with CloudNativePG, you can easily set up, manage, and evaluate such scenarios in a Kubernetes environment.","title":"Example of live migration and major Postgres upgrade with logical replication"},{"location":"logical_replication/#step-1-setting-up-the-publisher-freddie","text":"The first step involves creating a freddie PostgreSQL cluster with version 16. The cluster contains a single instance and includes an app database initialized with a table, n , storing 10,000 numbers. A logical replication publication named publisher is also configured to include all tables in the database. Here\u2019s the manifest for setting up the freddie cluster and its publication resource: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: freddie spec: instances: 1 imageName: ghcr.io/cloudnative-pg/postgresql:16 storage: size: 1Gi bootstrap: initdb: postInitApplicationSQL: - CREATE TABLE n (i SERIAL PRIMARY KEY, m INTEGER) - INSERT INTO n (m) (SELECT generate_series(1, 10000)) - ALTER TABLE n OWNER TO app managed: roles: - name: app login: true replication: true --- apiVersion: postgresql.cnpg.io/v1 kind: Publication metadata: name: freddie-publisher spec: cluster: name: freddie dbname: app name: publisher target: allTables: true","title":"Step 1: Setting Up the Publisher (freddie)"},{"location":"logical_replication/#step-2-setting-up-the-subscriber-king","text":"Next, create the king PostgreSQL cluster, running the latest version of PostgreSQL. This cluster initializes by importing the schema from the app database on the freddie cluster using the external cluster configuration. A Subscription resource, freddie-to-king-subscription , is then configured to consume changes published by the publisher on freddie . Below is the manifest for setting up the king cluster and its subscription: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: king spec: instances: 1 storage: size: 1Gi bootstrap: initdb: import: type: microservice schemaOnly: true databases: - app source: externalCluster: freddie externalClusters: - name: freddie connectionParameters: host: freddie-rw.default.svc user: app dbname: app password: name: freddie-app key: password --- apiVersion: postgresql.cnpg.io/v1 kind: Subscription metadata: name: freddie-to-king-subscription spec: cluster: name: king dbname: app name: subscriber externalClusterName: freddie publicationName: publisher Once the king cluster is running, you can verify that the replication is working by connecting to the app database and counting the records in the n table. The following example uses the psql command provided by the cnpg plugin for simplicity: kubectl cnpg psql king -- app -qAt -c 'SELECT count(*) FROM n' 10000 This command should return 10000 , confirming that the data from the freddie cluster has been successfully replicated to the king cluster. Using the cnpg plugin, you can also synchronize existing sequences to ensure consistency between the publisher and subscriber. The example below demonstrates how to synchronize a sequence for the king cluster: kubectl cnpg subscription sync-sequences king --subscription=subscriber SELECT setval('\"public\".\"n_i_seq\"', 10000); 10000 This command updates the sequence n_i_seq in the king cluster to match the current value, ensuring it is in sync with the source database.","title":"Step 2: Setting Up the Subscriber (king)"},{"location":"monitoring/","text":"Monitoring Important Installing Prometheus and Grafana is beyond the scope of this project. We assume they are correctly installed in your system. However, for experimentation we provide instructions in Part 4 of the Quickstart . Monitoring Instances For each PostgreSQL instance, the operator provides an exporter of metrics for Prometheus via HTTP or HTTPS, on port 9187, named metrics . The operator comes with a predefined set of metrics , as well as a highly configurable and customizable system to define additional queries via one or more ConfigMap or Secret resources (see the \"User defined metrics\" section below for details). Important CloudNativePG, by default, installs a set of predefined metrics in a ConfigMap named default-monitoring . Info You can inspect the exported metrics by following the instructions in the \"How to inspect the exported metrics\" section below. All monitoring queries that are performed on PostgreSQL are: atomic (one transaction per query) executed with the pg_monitor role executed with application_name set to cnpg_metrics_exporter executed as user postgres Please refer to the \"Predefined Roles\" section in PostgreSQL documentation for details on the pg_monitor role. Queries, by default, are run against the main database , as defined by the specified bootstrap method of the Cluster resource, according to the following logic: using initdb : queries will be run by default against the specified database in initdb.database , or app if not specified using recovery : queries will be run by default against the specified database in recovery.database , or postgres if not specified using pg_basebackup : queries will be run by default against the specified database in pg_basebackup.database , or postgres if not specified The default database can always be overridden for a given user-defined metric, by specifying a list of one or more databases in the target_databases option. Prometheus/Grafana If you are interested in evaluating the integration of CloudNativePG with Prometheus and Grafana, you can find a quick setup guide in Part 4 of the quickstart Monitoring with the Prometheus operator A specific PostgreSQL cluster can be monitored using the Prometheus Operator's resource PodMonitor . A PodMonitor that correctly points to the Cluster can be automatically created by the operator by setting .spec.monitoring.enablePodMonitor to true in the Cluster resource itself (default: false ). Important Any change to the PodMonitor created automatically will be overridden by the Operator at the next reconciliation cycle, in case you need to customize it, you can do so as described below. To deploy a PodMonitor for a specific Cluster manually, define it as follows and adjust as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cluster-example spec: selector: matchLabels: \"cnpg.io/cluster\": cluster-example podMetricsEndpoints: - port: metrics Important Ensure you modify the example above with a unique name, as well as the correct cluster's namespace and labels (e.g., cluster-example ). Important The postgresql label, used in previous versions of this document, is deprecated and will be removed in the future. Please use the cnpg.io/cluster label instead to select the instances. Enabling TLS on the Metrics Port To enable TLS communication on the metrics port, configure the .spec.monitoring.tls.enabled setting to true . This setup ensures that the metrics exporter uses the same server certificate used by PostgreSQL to secure communication on port 5432. Important Changing the .spec.monitoring.tls.enabled setting will trigger a rolling restart of the Cluster. If the PodMonitor is managed by the operator ( .spec.monitoring.enablePodMonitor set to true ), it will automatically contain the necessary configurations to access the metrics via TLS. To manually deploy a PodMonitor suitable for reading metrics via TLS, define it as follows and adjust as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cluster-example spec: selector: matchLabels: \"cnpg.io/cluster\": cluster-example podMetricsEndpoints: - port: metrics scheme: https tlsConfig: ca: secret: name: cluster-example-ca key: ca.crt serverName: cluster-example-rw Important Ensure you modify the example above with a unique name, as well as the correct Cluster's namespace and labels (e.g., cluster-example ). Important The serverName field in the metrics endpoint must match one of the names defined in the server certificate. If the default certificate is in use, the serverName value should be in the format <cluster-name>-rw . Predefined set of metrics Every PostgreSQL instance exporter automatically exposes a set of predefined metrics, which can be classified in two major categories: PostgreSQL related metrics, starting with cnpg_collector_* , including: number of WAL files and total size on disk number of .ready and .done files in the archive status folder requested minimum and maximum number of synchronous replicas, as well as the expected and actually observed values number of distinct nodes accommodating the instances timestamps indicating last failed and last available backup, as well as the first point of recoverability for the cluster flag indicating if replica cluster mode is enabled or disabled flag indicating if a manual switchover is required flag indicating if fencing is enabled or disabled Go runtime related metrics, starting with go_* Below is a sample of the metrics returned by the localhost:9187/metrics endpoint of an instance. As you can see, the Prometheus format is self-documenting: # HELP cnpg_collector_collection_duration_seconds Collection time duration in seconds # TYPE cnpg_collector_collection_duration_seconds gauge cnpg_collector_collection_duration_seconds{collector=\"Collect.up\"} 0.0031393 # HELP cnpg_collector_collections_total Total number of times PostgreSQL was accessed for metrics. # TYPE cnpg_collector_collections_total counter cnpg_collector_collections_total 2 # HELP cnpg_collector_fencing_on 1 if the instance is fenced, 0 otherwise # TYPE cnpg_collector_fencing_on gauge cnpg_collector_fencing_on 0 # HELP cnpg_collector_nodes_used NodesUsed represents the count of distinct nodes accommodating the instances. A value of '-1' suggests that the metric is not available. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally this value should match the number of instances in the cluster. # TYPE cnpg_collector_nodes_used gauge cnpg_collector_nodes_used 3 # HELP cnpg_collector_last_collection_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_collector_last_collection_error gauge cnpg_collector_last_collection_error 0 # HELP cnpg_collector_manual_switchover_required 1 if a manual switchover is required, 0 otherwise # TYPE cnpg_collector_manual_switchover_required gauge cnpg_collector_manual_switchover_required 0 # HELP cnpg_collector_pg_wal Total size in bytes of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal' directory computed as (wal_segment_size * count) # TYPE cnpg_collector_pg_wal gauge cnpg_collector_pg_wal{value=\"count\"} 9 cnpg_collector_pg_wal{value=\"slots_max\"} NaN cnpg_collector_pg_wal{value=\"keep\"} 32 cnpg_collector_pg_wal{value=\"max\"} 64 cnpg_collector_pg_wal{value=\"min\"} 5 cnpg_collector_pg_wal{value=\"size\"} 1.50994944e+08 cnpg_collector_pg_wal{value=\"volume_max\"} 128 cnpg_collector_pg_wal{value=\"volume_size\"} 2.147483648e+09 # HELP cnpg_collector_pg_wal_archive_status Number of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal/archive_status' directory (ready, done) # TYPE cnpg_collector_pg_wal_archive_status gauge cnpg_collector_pg_wal_archive_status{value=\"done\"} 6 cnpg_collector_pg_wal_archive_status{value=\"ready\"} 0 # HELP cnpg_collector_replica_mode 1 if the cluster is in replica mode, 0 otherwise # TYPE cnpg_collector_replica_mode gauge cnpg_collector_replica_mode 0 # HELP cnpg_collector_sync_replicas Number of requested synchronous replicas (synchronous_standby_names) # TYPE cnpg_collector_sync_replicas gauge cnpg_collector_sync_replicas{value=\"expected\"} 0 cnpg_collector_sync_replicas{value=\"max\"} 0 cnpg_collector_sync_replicas{value=\"min\"} 0 cnpg_collector_sync_replicas{value=\"observed\"} 0 # HELP cnpg_collector_up 1 if PostgreSQL is up, 0 otherwise. # TYPE cnpg_collector_up gauge cnpg_collector_up{cluster=\"cluster-example\"} 1 # HELP cnpg_collector_postgres_version Postgres version # TYPE cnpg_collector_postgres_version gauge cnpg_collector_postgres_version{cluster=\"cluster-example\",full=\"17.5\"} 17.5 # HELP cnpg_collector_last_failed_backup_timestamp The last failed backup as a unix timestamp (Deprecated) # TYPE cnpg_collector_last_failed_backup_timestamp gauge cnpg_collector_last_failed_backup_timestamp 0 # HELP cnpg_collector_last_available_backup_timestamp The last available backup as a unix timestamp (Deprecated) # TYPE cnpg_collector_last_available_backup_timestamp gauge cnpg_collector_last_available_backup_timestamp 1.63238406e+09 # HELP cnpg_collector_first_recoverability_point The first point of recoverability for the cluster as a unix timestamp (Deprecated) # TYPE cnpg_collector_first_recoverability_point gauge cnpg_collector_first_recoverability_point 1.63238406e+09 # HELP cnpg_collector_lo_pages Estimated number of pages in the pg_largeobject table # TYPE cnpg_collector_lo_pages gauge cnpg_collector_lo_pages{datname=\"app\"} 0 cnpg_collector_lo_pages{datname=\"postgres\"} 78 # HELP cnpg_collector_wal_buffers_full Number of times WAL data was written to disk because WAL buffers became full. Only available on PG 14+ # TYPE cnpg_collector_wal_buffers_full gauge cnpg_collector_wal_buffers_full{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 6472 # HELP cnpg_collector_wal_bytes Total amount of WAL generated in bytes. Only available on PG 14+ # TYPE cnpg_collector_wal_bytes gauge cnpg_collector_wal_bytes{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 1.0035147e+07 # HELP cnpg_collector_wal_fpi Total number of WAL full page images generated. Only available on PG 14+ # TYPE cnpg_collector_wal_fpi gauge cnpg_collector_wal_fpi{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 1474 # HELP cnpg_collector_wal_records Total number of WAL records generated. Only available on PG 14+ # TYPE cnpg_collector_wal_records gauge cnpg_collector_wal_records{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 26178 # HELP cnpg_collector_wal_sync Number of times WAL files were synced to disk via issue_xlog_fsync request (if fsync is on and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+ # TYPE cnpg_collector_wal_sync gauge cnpg_collector_wal_sync{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 37 # HELP cnpg_collector_wal_sync_time Total amount of time spent syncing WAL files to disk via issue_xlog_fsync request, in milliseconds (if track_wal_io_timing is enabled, fsync is on, and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+ # TYPE cnpg_collector_wal_sync_time gauge cnpg_collector_wal_sync_time{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 0 # HELP cnpg_collector_wal_write Number of times WAL buffers were written out to disk via XLogWrite request. Only available on PG 14+ # TYPE cnpg_collector_wal_write gauge cnpg_collector_wal_write{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 7243 # HELP cnpg_collector_wal_write_time Total amount of time spent writing WAL buffers to disk via XLogWrite request, in milliseconds (if track_wal_io_timing is enabled, otherwise zero). This includes the sync time when wal_sync_method is either open_datasync or open_sync. Only available on PG 14+ # TYPE cnpg_collector_wal_write_time gauge cnpg_collector_wal_write_time{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 0 # HELP cnpg_last_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_last_error gauge cnpg_last_error 0 # HELP go_gc_duration_seconds A summary of the pause duration of garbage collection cycles. # TYPE go_gc_duration_seconds summary go_gc_duration_seconds{quantile=\"0\"} 5.01e-05 go_gc_duration_seconds{quantile=\"0.25\"} 7.27e-05 go_gc_duration_seconds{quantile=\"0.5\"} 0.0001748 go_gc_duration_seconds{quantile=\"0.75\"} 0.0002959 go_gc_duration_seconds{quantile=\"1\"} 0.0012776 go_gc_duration_seconds_sum 0.0035741 go_gc_duration_seconds_count 13 # HELP go_goroutines Number of goroutines that currently exist. # TYPE go_goroutines gauge go_goroutines 25 # HELP go_info Information about the Go environment. # TYPE go_info gauge go_info{version=\"go1.20.5\"} 1 # HELP go_memstats_alloc_bytes Number of bytes allocated and still in use. # TYPE go_memstats_alloc_bytes gauge go_memstats_alloc_bytes 4.493744e+06 # HELP go_memstats_alloc_bytes_total Total number of bytes allocated, even if freed. # TYPE go_memstats_alloc_bytes_total counter go_memstats_alloc_bytes_total 2.1698216e+07 # HELP go_memstats_buck_hash_sys_bytes Number of bytes used by the profiling bucket hash table. # TYPE go_memstats_buck_hash_sys_bytes gauge go_memstats_buck_hash_sys_bytes 1.456234e+06 # HELP go_memstats_frees_total Total number of frees. # TYPE go_memstats_frees_total counter go_memstats_frees_total 172118 # HELP go_memstats_gc_cpu_fraction The fraction of this program's available CPU time used by the GC since the program started. # TYPE go_memstats_gc_cpu_fraction gauge go_memstats_gc_cpu_fraction 1.0749468700447189e-05 # HELP go_memstats_gc_sys_bytes Number of bytes used for garbage collection system metadata. # TYPE go_memstats_gc_sys_bytes gauge go_memstats_gc_sys_bytes 5.530048e+06 # HELP go_memstats_heap_alloc_bytes Number of heap bytes allocated and still in use. # TYPE go_memstats_heap_alloc_bytes gauge go_memstats_heap_alloc_bytes 4.493744e+06 # HELP go_memstats_heap_idle_bytes Number of heap bytes waiting to be used. # TYPE go_memstats_heap_idle_bytes gauge go_memstats_heap_idle_bytes 5.8236928e+07 # HELP go_memstats_heap_inuse_bytes Number of heap bytes that are in use. # TYPE go_memstats_heap_inuse_bytes gauge go_memstats_heap_inuse_bytes 7.528448e+06 # HELP go_memstats_heap_objects Number of allocated objects. # TYPE go_memstats_heap_objects gauge go_memstats_heap_objects 26306 # HELP go_memstats_heap_released_bytes Number of heap bytes released to OS. # TYPE go_memstats_heap_released_bytes gauge go_memstats_heap_released_bytes 5.7401344e+07 # HELP go_memstats_heap_sys_bytes Number of heap bytes obtained from system. # TYPE go_memstats_heap_sys_bytes gauge go_memstats_heap_sys_bytes 6.5765376e+07 # HELP go_memstats_last_gc_time_seconds Number of seconds since 1970 of last garbage collection. # TYPE go_memstats_last_gc_time_seconds gauge go_memstats_last_gc_time_seconds 1.6311727586032727e+09 # HELP go_memstats_lookups_total Total number of pointer lookups. # TYPE go_memstats_lookups_total counter go_memstats_lookups_total 0 # HELP go_memstats_mallocs_total Total number of mallocs. # TYPE go_memstats_mallocs_total counter go_memstats_mallocs_total 198424 # HELP go_memstats_mcache_inuse_bytes Number of bytes in use by mcache structures. # TYPE go_memstats_mcache_inuse_bytes gauge go_memstats_mcache_inuse_bytes 14400 # HELP go_memstats_mcache_sys_bytes Number of bytes used for mcache structures obtained from system. # TYPE go_memstats_mcache_sys_bytes gauge go_memstats_mcache_sys_bytes 16384 # HELP go_memstats_mspan_inuse_bytes Number of bytes in use by mspan structures. # TYPE go_memstats_mspan_inuse_bytes gauge go_memstats_mspan_inuse_bytes 191896 # HELP go_memstats_mspan_sys_bytes Number of bytes used for mspan structures obtained from system. # TYPE go_memstats_mspan_sys_bytes gauge go_memstats_mspan_sys_bytes 212992 # HELP go_memstats_next_gc_bytes Number of heap bytes when next garbage collection will take place. # TYPE go_memstats_next_gc_bytes gauge go_memstats_next_gc_bytes 8.689632e+06 # HELP go_memstats_other_sys_bytes Number of bytes used for other system allocations. # TYPE go_memstats_other_sys_bytes gauge go_memstats_other_sys_bytes 2.566622e+06 # HELP go_memstats_stack_inuse_bytes Number of bytes in use by the stack allocator. # TYPE go_memstats_stack_inuse_bytes gauge go_memstats_stack_inuse_bytes 1.343488e+06 # HELP go_memstats_stack_sys_bytes Number of bytes obtained from system for stack allocator. # TYPE go_memstats_stack_sys_bytes gauge go_memstats_stack_sys_bytes 1.343488e+06 # HELP go_memstats_sys_bytes Number of bytes obtained from system. # TYPE go_memstats_sys_bytes gauge go_memstats_sys_bytes 7.6891144e+07 # HELP go_threads Number of OS threads created. # TYPE go_threads gauge go_threads 18 Note cnpg_collector_postgres_version is a GaugeVec metric containing the Major.Minor version of PostgreSQL. The full semantic version Major.Minor.Patch can be found inside one of its label field named full . Warning The metrics cnpg_collector_last_failed_backup_timestamp , cnpg_collector_last_available_backup_timestamp , and cnpg_collector_first_recoverability_point have been deprecated starting from version 1.26. These metrics will continue to function with native backup solutions such as in-core Barman Cloud (deprecated) and volume snapshots. Note that for these cases, cnpg_collector_first_recoverability_point and cnpg_collector_last_available_backup_timestamp will remain zero until the first backup is completed to the object store. This is separate from WAL archiving. User defined metrics This feature is currently in beta state and the format is inspired by the queries.yaml file (release 0.12) of the PostgreSQL Prometheus Exporter. Custom metrics can be defined by users by referring to the created Configmap / Secret in a Cluster definition under the .spec.monitoring.customQueriesConfigMap or customQueriesSecret section as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example namespace: test spec: instances: 3 storage: size: 1Gi monitoring: customQueriesConfigMap: - name: example-monitoring key: custom-queries The customQueriesConfigMap / customQueriesSecret sections contain a list of ConfigMap / Secret references specifying the key in which the custom queries are defined. Take care that the referred resources have to be created in the same namespace as the Cluster resource. Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to it, otherwise you will have to reload the instances using the kubectl cnpg reload subcommand. Important When a user defined metric overwrites an already existing metric the instance manager prints a json warning log, containing the message: Query with the same name already found. Overwriting the existing one. and a key queryName containing the overwritten query name. Example of a user defined metric Here you can see an example of a ConfigMap containing a single custom query, referenced by the Cluster example above: apiVersion: v1 kind: ConfigMap metadata: name: example-monitoring namespace: test labels: cnpg.io/reload: \"\" data: custom-queries: | pg_replication: query: \"SELECT CASE WHEN NOT pg_is_in_recovery() THEN 0 ELSE GREATEST (0, EXTRACT(EPOCH FROM (now() - pg_last_xact_replay_timestamp()))) END AS lag, pg_is_in_recovery() AS in_recovery, EXISTS (TABLE pg_stat_wal_receiver) AS is_wal_receiver_up, (SELECT count(*) FROM pg_stat_replication) AS streaming_replicas\" metrics: - lag: usage: \"GAUGE\" description: \"Replication lag behind primary in seconds\" - in_recovery: usage: \"GAUGE\" description: \"Whether the instance is in recovery\" - is_wal_receiver_up: usage: \"GAUGE\" description: \"Whether the instance wal_receiver is up\" - streaming_replicas: usage: \"GAUGE\" description: \"Number of streaming replicas connected to the instance\" A list of basic monitoring queries can be found in the default-monitoring.yaml file that is already installed in your CloudNativePG deployment (see \"Default set of metrics\" ). Example of a user defined metric with predicate query The predicate_query option allows the user to execute the query to collect the metrics only under the specified conditions. To do so the user needs to provide a predicate query that returns at most one row with a single boolean column. The predicate query is executed in the same transaction as the main query and against the same databases. some_query: | predicate_query: | SELECT some_bool as predicate FROM some_table query: | SELECT count(*) as rows FROM some_table metrics: - rows: usage: \"GAUGE\" description: \"number of rows\" Example of a user defined metric running on multiple databases If the target_databases option lists more than one database the metric is collected from each of them. Database auto-discovery can be enabled for a specific query by specifying a shell-like pattern (i.e., containing * , ? or [] ) in the list of target_databases . If provided, the operator will expand the list of target databases by adding all the databases returned by the execution of SELECT datname FROM pg_database WHERE datallowconn AND NOT datistemplate and matching the pattern according to path.Match() rules. Note The * character has a special meaning in yaml, so you need to quote ( \"*\" ) the target_databases value when it includes such a pattern. It is recommended that you always include the name of the database in the returned labels, for example using the current_database() function as in the following example: some_query: | query: | SELECT current_database() as datname, count(*) as rows FROM some_table metrics: - datname: usage: \"LABEL\" description: \"Name of current database\" - rows: usage: \"GAUGE\" description: \"number of rows\" target_databases: - albert - bb - freddie This will produce in the following metric being exposed: cnpg_some_query_rows{datname=\"albert\"} 2 cnpg_some_query_rows{datname=\"bb\"} 5 cnpg_some_query_rows{datname=\"freddie\"} 10 Here is an example of a query with auto-discovery enabled which also runs on the template1 database (otherwise not returned by the aforementioned query): some_query: | query: | SELECT current_database() as datname, count(*) as rows FROM some_table metrics: - datname: usage: \"LABEL\" description: \"Name of current database\" - rows: usage: \"GAUGE\" description: \"number of rows\" target_databases: - \"*\" - \"template1\" The above example will produce the following metrics (provided the databases exist): cnpg_some_query_rows{datname=\"albert\"} 2 cnpg_some_query_rows{datname=\"bb\"} 5 cnpg_some_query_rows{datname=\"freddie\"} 10 cnpg_some_query_rows{datname=\"template1\"} 7 cnpg_some_query_rows{datname=\"postgres\"} 42 Structure of a user defined metric Every custom query has the following basic structure: <MetricName>: query: \"<SQLQuery>\" metrics: - <ColumnName>: usage: \"<MetricType>\" description: \"<MetricDescription>\" Here is a short description of all the available fields: <MetricName> : the name of the Prometheus metric name : override <MetricName> , if defined query : the SQL query to run on the target database to generate the metrics primary : whether to run the query only on the primary instance master : same as primary (for compatibility with the Prometheus PostgreSQL exporter's syntax - deprecated) runonserver : a semantic version range to limit the versions of PostgreSQL the query should run on (e.g. \">=11.0.0\" or \">=12.0.0 <=15.0.0\" ) target_databases : a list of databases to run the query against, or a shell-like pattern to enable auto discovery. Overwrites the default database if provided. predicate_query : a SQL query that returns at most one row and one boolean column to run on the target database. The system evaluates the predicate and if true executes the query . metrics : section containing a list of all exported columns, defined as follows: <ColumnName> : the name of the column returned by the query name : override the ColumnName of the column in the metric, if defined usage : one of the values described below description : the metric's description metrics_mapping : the optional column mapping when usage is set to MAPPEDMETRIC The possible values for usage are: Column Usage Label Description DISCARD this column should be ignored LABEL use this column as a label COUNTER use this column as a counter GAUGE use this column as a gauge MAPPEDMETRIC use this column with the supplied mapping of text values DURATION use this column as a text duration (in milliseconds) HISTOGRAM use this column as a histogram Please visit the \"Metric Types\" page from the Prometheus documentation for more information. Output of a user defined metric Custom defined metrics are returned by the Prometheus exporter endpoint ( :9187/metrics ) with the following format: cnpg_<MetricName>_<ColumnName>{<LabelColumnName>=<LabelColumnValue> ... } <ColumnValue> Note LabelColumnName are metrics with usage set to LABEL and their Value Considering the pg_replication example above, the exporter's endpoint would return the following output when invoked: # HELP cnpg_pg_replication_in_recovery Whether the instance is in recovery # TYPE cnpg_pg_replication_in_recovery gauge cnpg_pg_replication_in_recovery 0 # HELP cnpg_pg_replication_lag Replication lag behind primary in seconds # TYPE cnpg_pg_replication_lag gauge cnpg_pg_replication_lag 0 # HELP cnpg_pg_replication_streaming_replicas Number of streaming replicas connected to the instance # TYPE cnpg_pg_replication_streaming_replicas gauge cnpg_pg_replication_streaming_replicas 2 # HELP cnpg_pg_replication_is_wal_receiver_up Whether the instance wal_receiver is up # TYPE cnpg_pg_replication_is_wal_receiver_up gauge cnpg_pg_replication_is_wal_receiver_up 0 Default set of metrics The operator can be configured to automatically inject in a Cluster a set of monitoring queries defined in a ConfigMap or a Secret, inside the operator's namespace. You have to set the MONITORING_QUERIES_CONFIGMAP or MONITORING_QUERIES_SECRET key in the \"operator configuration\" , respectively to the name of the ConfigMap or the Secret; the operator will then use the content of the queries key. Any change to the queries content will be immediately reflected on all the deployed Clusters using it. The operator installation manifests come with a predefined ConfigMap, called cnpg-default-monitoring , to be used by all Clusters. MONITORING_QUERIES_CONFIGMAP is by default set to cnpg-default-monitoring in the operator configuration. If you want to disable the default set of metrics, you can: disable it at operator level: set the MONITORING_QUERIES_CONFIGMAP / MONITORING_QUERIES_SECRET key to \"\" (empty string), in the operator ConfigMap. Changes to operator ConfigMap require an operator restart. disable it for a specific Cluster: set .spec.monitoring.disableDefaultQueries to true in the Cluster. Important The ConfigMap or Secret specified via MONITORING_QUERIES_CONFIGMAP / MONITORING_QUERIES_SECRET will always be copied to the Cluster's namespace with a fixed name: cnpg-default-monitoring . So that, if you intend to have default metrics, you should not create a ConfigMap with this name in the cluster's namespace. Differences with the Prometheus Postgres exporter CloudNativePG is inspired by the PostgreSQL Prometheus Exporter, but presents some differences. In particular, the cache_seconds field is not implemented in CloudNativePG's exporter. Monitoring the CloudNativePG operator The operator internally exposes Prometheus metrics via HTTP on port 8080, named metrics . Info You can inspect the exported metrics by following the instructions in the \"How to inspect the exported metrics\" section below. Currently, the operator exposes default kubebuilder metrics. See kubebuilder documentation for more details. Monitoring the operator with Prometheus The operator can be monitored using the Prometheus Operator by defining a PodMonitor pointing to the operator pod(s), as follows (note it's applied in the same namespace as the operator): kubectl -n cnpg-system apply -f - <<EOF --- apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cnpg-controller-manager spec: selector: matchLabels: app.kubernetes.io/name: cloudnative-pg podMetricsEndpoints: - port: metrics EOF How to inspect the exported metrics In this section we provide basic instructions on how to inspect the metrics exported by a specific PostgreSQL instance manager (primary or replica) or the operator. Note In the examples below we assume we are working in the default namespace, and with the operator installed in the cnpg-system namespace. Please adapt to your use case. Using port forwarding The simplest way to inspect the metrics is to port-forward the metrics ports of the pods involved. For example, to inspect the metrics on the -1 instance of cluster-example , we port-forward the 9187 port: kubectl port-forward cluster-example-1 9187:9187 With port-forwarding active, the metrics can be inspected easily, for example on a web browser, using HTTP or HTTPS depending on the configuration, with address: localhost:9187/metrics . The operator pod also exports metrics, on port 8080. Similarly to instances, we port-forward the operator pod, which is located in the operator namespace: kubectl -n cnpg-system port-forward pod/<CONTROLLER-MANAGER-POD> 8080:8080 With port forwarding active, the metrics are easily viewable on a browser at localhost:8080/metrics . Using curl Create the curl pod with the following command: kubectl apply -f - <<EOF --- apiVersion: v1 kind: Pod metadata: name: curl spec: containers: - name: curl image: curlimages/curl:8.2.1 command: ['sleep', '3600'] EOF To inspect the metrics exported by an instance, you need to connect to port 9187 of the target pod. You will need to know the pod's IP address, which you can find easily by running kubectl get pod -o wide . The following generic command will run curl on the desired pod: kubectl exec -ti curl -- curl -s <pod_ip>:9187/metrics For example, if your PostgreSQL cluster is called cluster-example and you want to retrieve the exported metrics of the first pod in the cluster, you can run the following command to programmatically get the IP of that pod: POD_IP=$(kubectl get pod cluster-example-1 --template '{{.status.podIP}}') And then run: kubectl exec -ti curl -- curl -s ${POD_IP}:9187/metrics If you enabled TLS metrics, run instead: kubectl exec -ti curl -- curl -sk https://${POD_IP}:9187/metrics To access the metrics of the operator, you need to point to the pod where the operator is running, and use TCP port 8080 as target. When you're done inspecting metrics, please remember to delete the curl pod: kubectl delete -f curl.yaml Auxiliary resources Important These resources are provided for illustration and experimentation, and do not represent any kind of recommendation for your production system In the doc/src/samples/monitoring/ directory you will find a series of sample files for observability. Please refer to Part 4 of the quickstart section for context: kube-stack-config.yaml : a configuration file for the kube-stack helm chart installation. It ensures that Prometheus listens for all PodMonitor resources. prometheusrule.yaml : a PrometheusRule with alerts for CloudNativePG. NOTE: this does not include inter-operation with notification services. Please refer to the Prometheus documentation . podmonitor.yaml : a PodMonitor for the CloudNativePG Operator deployment. In addition, we provide the \"raw\" sources for the Prometheus alert rules in the alerts.yaml file. A Grafana dashboard for CloudNativePG clusters and operator, is kept in the dedicated repository cloudnative-pg/grafana-dashboards as a dashboard JSON configuration: grafana-dashboard.json . The file can be downloaded, and imported into Grafana (menus: Dashboard > New > Import). For a general reference on the settings available on kube-prometheus-stack , you can execute helm show values prometheus-community/kube-prometheus-stack . Please refer to the kube-prometheus-stack page for more detail.","title":"Monitoring"},{"location":"monitoring/#monitoring","text":"Important Installing Prometheus and Grafana is beyond the scope of this project. We assume they are correctly installed in your system. However, for experimentation we provide instructions in Part 4 of the Quickstart .","title":"Monitoring"},{"location":"monitoring/#monitoring-instances","text":"For each PostgreSQL instance, the operator provides an exporter of metrics for Prometheus via HTTP or HTTPS, on port 9187, named metrics . The operator comes with a predefined set of metrics , as well as a highly configurable and customizable system to define additional queries via one or more ConfigMap or Secret resources (see the \"User defined metrics\" section below for details). Important CloudNativePG, by default, installs a set of predefined metrics in a ConfigMap named default-monitoring . Info You can inspect the exported metrics by following the instructions in the \"How to inspect the exported metrics\" section below. All monitoring queries that are performed on PostgreSQL are: atomic (one transaction per query) executed with the pg_monitor role executed with application_name set to cnpg_metrics_exporter executed as user postgres Please refer to the \"Predefined Roles\" section in PostgreSQL documentation for details on the pg_monitor role. Queries, by default, are run against the main database , as defined by the specified bootstrap method of the Cluster resource, according to the following logic: using initdb : queries will be run by default against the specified database in initdb.database , or app if not specified using recovery : queries will be run by default against the specified database in recovery.database , or postgres if not specified using pg_basebackup : queries will be run by default against the specified database in pg_basebackup.database , or postgres if not specified The default database can always be overridden for a given user-defined metric, by specifying a list of one or more databases in the target_databases option. Prometheus/Grafana If you are interested in evaluating the integration of CloudNativePG with Prometheus and Grafana, you can find a quick setup guide in Part 4 of the quickstart","title":"Monitoring Instances"},{"location":"monitoring/#monitoring-with-the-prometheus-operator","text":"A specific PostgreSQL cluster can be monitored using the Prometheus Operator's resource PodMonitor . A PodMonitor that correctly points to the Cluster can be automatically created by the operator by setting .spec.monitoring.enablePodMonitor to true in the Cluster resource itself (default: false ). Important Any change to the PodMonitor created automatically will be overridden by the Operator at the next reconciliation cycle, in case you need to customize it, you can do so as described below. To deploy a PodMonitor for a specific Cluster manually, define it as follows and adjust as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cluster-example spec: selector: matchLabels: \"cnpg.io/cluster\": cluster-example podMetricsEndpoints: - port: metrics Important Ensure you modify the example above with a unique name, as well as the correct cluster's namespace and labels (e.g., cluster-example ). Important The postgresql label, used in previous versions of this document, is deprecated and will be removed in the future. Please use the cnpg.io/cluster label instead to select the instances.","title":"Monitoring with the Prometheus operator"},{"location":"monitoring/#enabling-tls-on-the-metrics-port","text":"To enable TLS communication on the metrics port, configure the .spec.monitoring.tls.enabled setting to true . This setup ensures that the metrics exporter uses the same server certificate used by PostgreSQL to secure communication on port 5432. Important Changing the .spec.monitoring.tls.enabled setting will trigger a rolling restart of the Cluster. If the PodMonitor is managed by the operator ( .spec.monitoring.enablePodMonitor set to true ), it will automatically contain the necessary configurations to access the metrics via TLS. To manually deploy a PodMonitor suitable for reading metrics via TLS, define it as follows and adjust as needed: apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cluster-example spec: selector: matchLabels: \"cnpg.io/cluster\": cluster-example podMetricsEndpoints: - port: metrics scheme: https tlsConfig: ca: secret: name: cluster-example-ca key: ca.crt serverName: cluster-example-rw Important Ensure you modify the example above with a unique name, as well as the correct Cluster's namespace and labels (e.g., cluster-example ). Important The serverName field in the metrics endpoint must match one of the names defined in the server certificate. If the default certificate is in use, the serverName value should be in the format <cluster-name>-rw .","title":"Enabling TLS on the Metrics Port"},{"location":"monitoring/#predefined-set-of-metrics","text":"Every PostgreSQL instance exporter automatically exposes a set of predefined metrics, which can be classified in two major categories: PostgreSQL related metrics, starting with cnpg_collector_* , including: number of WAL files and total size on disk number of .ready and .done files in the archive status folder requested minimum and maximum number of synchronous replicas, as well as the expected and actually observed values number of distinct nodes accommodating the instances timestamps indicating last failed and last available backup, as well as the first point of recoverability for the cluster flag indicating if replica cluster mode is enabled or disabled flag indicating if a manual switchover is required flag indicating if fencing is enabled or disabled Go runtime related metrics, starting with go_* Below is a sample of the metrics returned by the localhost:9187/metrics endpoint of an instance. As you can see, the Prometheus format is self-documenting: # HELP cnpg_collector_collection_duration_seconds Collection time duration in seconds # TYPE cnpg_collector_collection_duration_seconds gauge cnpg_collector_collection_duration_seconds{collector=\"Collect.up\"} 0.0031393 # HELP cnpg_collector_collections_total Total number of times PostgreSQL was accessed for metrics. # TYPE cnpg_collector_collections_total counter cnpg_collector_collections_total 2 # HELP cnpg_collector_fencing_on 1 if the instance is fenced, 0 otherwise # TYPE cnpg_collector_fencing_on gauge cnpg_collector_fencing_on 0 # HELP cnpg_collector_nodes_used NodesUsed represents the count of distinct nodes accommodating the instances. A value of '-1' suggests that the metric is not available. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally this value should match the number of instances in the cluster. # TYPE cnpg_collector_nodes_used gauge cnpg_collector_nodes_used 3 # HELP cnpg_collector_last_collection_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_collector_last_collection_error gauge cnpg_collector_last_collection_error 0 # HELP cnpg_collector_manual_switchover_required 1 if a manual switchover is required, 0 otherwise # TYPE cnpg_collector_manual_switchover_required gauge cnpg_collector_manual_switchover_required 0 # HELP cnpg_collector_pg_wal Total size in bytes of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal' directory computed as (wal_segment_size * count) # TYPE cnpg_collector_pg_wal gauge cnpg_collector_pg_wal{value=\"count\"} 9 cnpg_collector_pg_wal{value=\"slots_max\"} NaN cnpg_collector_pg_wal{value=\"keep\"} 32 cnpg_collector_pg_wal{value=\"max\"} 64 cnpg_collector_pg_wal{value=\"min\"} 5 cnpg_collector_pg_wal{value=\"size\"} 1.50994944e+08 cnpg_collector_pg_wal{value=\"volume_max\"} 128 cnpg_collector_pg_wal{value=\"volume_size\"} 2.147483648e+09 # HELP cnpg_collector_pg_wal_archive_status Number of WAL segments in the '/var/lib/postgresql/data/pgdata/pg_wal/archive_status' directory (ready, done) # TYPE cnpg_collector_pg_wal_archive_status gauge cnpg_collector_pg_wal_archive_status{value=\"done\"} 6 cnpg_collector_pg_wal_archive_status{value=\"ready\"} 0 # HELP cnpg_collector_replica_mode 1 if the cluster is in replica mode, 0 otherwise # TYPE cnpg_collector_replica_mode gauge cnpg_collector_replica_mode 0 # HELP cnpg_collector_sync_replicas Number of requested synchronous replicas (synchronous_standby_names) # TYPE cnpg_collector_sync_replicas gauge cnpg_collector_sync_replicas{value=\"expected\"} 0 cnpg_collector_sync_replicas{value=\"max\"} 0 cnpg_collector_sync_replicas{value=\"min\"} 0 cnpg_collector_sync_replicas{value=\"observed\"} 0 # HELP cnpg_collector_up 1 if PostgreSQL is up, 0 otherwise. # TYPE cnpg_collector_up gauge cnpg_collector_up{cluster=\"cluster-example\"} 1 # HELP cnpg_collector_postgres_version Postgres version # TYPE cnpg_collector_postgres_version gauge cnpg_collector_postgres_version{cluster=\"cluster-example\",full=\"17.5\"} 17.5 # HELP cnpg_collector_last_failed_backup_timestamp The last failed backup as a unix timestamp (Deprecated) # TYPE cnpg_collector_last_failed_backup_timestamp gauge cnpg_collector_last_failed_backup_timestamp 0 # HELP cnpg_collector_last_available_backup_timestamp The last available backup as a unix timestamp (Deprecated) # TYPE cnpg_collector_last_available_backup_timestamp gauge cnpg_collector_last_available_backup_timestamp 1.63238406e+09 # HELP cnpg_collector_first_recoverability_point The first point of recoverability for the cluster as a unix timestamp (Deprecated) # TYPE cnpg_collector_first_recoverability_point gauge cnpg_collector_first_recoverability_point 1.63238406e+09 # HELP cnpg_collector_lo_pages Estimated number of pages in the pg_largeobject table # TYPE cnpg_collector_lo_pages gauge cnpg_collector_lo_pages{datname=\"app\"} 0 cnpg_collector_lo_pages{datname=\"postgres\"} 78 # HELP cnpg_collector_wal_buffers_full Number of times WAL data was written to disk because WAL buffers became full. Only available on PG 14+ # TYPE cnpg_collector_wal_buffers_full gauge cnpg_collector_wal_buffers_full{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 6472 # HELP cnpg_collector_wal_bytes Total amount of WAL generated in bytes. Only available on PG 14+ # TYPE cnpg_collector_wal_bytes gauge cnpg_collector_wal_bytes{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 1.0035147e+07 # HELP cnpg_collector_wal_fpi Total number of WAL full page images generated. Only available on PG 14+ # TYPE cnpg_collector_wal_fpi gauge cnpg_collector_wal_fpi{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 1474 # HELP cnpg_collector_wal_records Total number of WAL records generated. Only available on PG 14+ # TYPE cnpg_collector_wal_records gauge cnpg_collector_wal_records{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 26178 # HELP cnpg_collector_wal_sync Number of times WAL files were synced to disk via issue_xlog_fsync request (if fsync is on and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+ # TYPE cnpg_collector_wal_sync gauge cnpg_collector_wal_sync{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 37 # HELP cnpg_collector_wal_sync_time Total amount of time spent syncing WAL files to disk via issue_xlog_fsync request, in milliseconds (if track_wal_io_timing is enabled, fsync is on, and wal_sync_method is either fdatasync, fsync or fsync_writethrough, otherwise zero). Only available on PG 14+ # TYPE cnpg_collector_wal_sync_time gauge cnpg_collector_wal_sync_time{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 0 # HELP cnpg_collector_wal_write Number of times WAL buffers were written out to disk via XLogWrite request. Only available on PG 14+ # TYPE cnpg_collector_wal_write gauge cnpg_collector_wal_write{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 7243 # HELP cnpg_collector_wal_write_time Total amount of time spent writing WAL buffers to disk via XLogWrite request, in milliseconds (if track_wal_io_timing is enabled, otherwise zero). This includes the sync time when wal_sync_method is either open_datasync or open_sync. Only available on PG 14+ # TYPE cnpg_collector_wal_write_time gauge cnpg_collector_wal_write_time{stats_reset=\"2023-06-19T10:51:27.473259Z\"} 0 # HELP cnpg_last_error 1 if the last collection ended with error, 0 otherwise. # TYPE cnpg_last_error gauge cnpg_last_error 0 # HELP go_gc_duration_seconds A summary of the pause duration of garbage collection cycles. # TYPE go_gc_duration_seconds summary go_gc_duration_seconds{quantile=\"0\"} 5.01e-05 go_gc_duration_seconds{quantile=\"0.25\"} 7.27e-05 go_gc_duration_seconds{quantile=\"0.5\"} 0.0001748 go_gc_duration_seconds{quantile=\"0.75\"} 0.0002959 go_gc_duration_seconds{quantile=\"1\"} 0.0012776 go_gc_duration_seconds_sum 0.0035741 go_gc_duration_seconds_count 13 # HELP go_goroutines Number of goroutines that currently exist. # TYPE go_goroutines gauge go_goroutines 25 # HELP go_info Information about the Go environment. # TYPE go_info gauge go_info{version=\"go1.20.5\"} 1 # HELP go_memstats_alloc_bytes Number of bytes allocated and still in use. # TYPE go_memstats_alloc_bytes gauge go_memstats_alloc_bytes 4.493744e+06 # HELP go_memstats_alloc_bytes_total Total number of bytes allocated, even if freed. # TYPE go_memstats_alloc_bytes_total counter go_memstats_alloc_bytes_total 2.1698216e+07 # HELP go_memstats_buck_hash_sys_bytes Number of bytes used by the profiling bucket hash table. # TYPE go_memstats_buck_hash_sys_bytes gauge go_memstats_buck_hash_sys_bytes 1.456234e+06 # HELP go_memstats_frees_total Total number of frees. # TYPE go_memstats_frees_total counter go_memstats_frees_total 172118 # HELP go_memstats_gc_cpu_fraction The fraction of this program's available CPU time used by the GC since the program started. # TYPE go_memstats_gc_cpu_fraction gauge go_memstats_gc_cpu_fraction 1.0749468700447189e-05 # HELP go_memstats_gc_sys_bytes Number of bytes used for garbage collection system metadata. # TYPE go_memstats_gc_sys_bytes gauge go_memstats_gc_sys_bytes 5.530048e+06 # HELP go_memstats_heap_alloc_bytes Number of heap bytes allocated and still in use. # TYPE go_memstats_heap_alloc_bytes gauge go_memstats_heap_alloc_bytes 4.493744e+06 # HELP go_memstats_heap_idle_bytes Number of heap bytes waiting to be used. # TYPE go_memstats_heap_idle_bytes gauge go_memstats_heap_idle_bytes 5.8236928e+07 # HELP go_memstats_heap_inuse_bytes Number of heap bytes that are in use. # TYPE go_memstats_heap_inuse_bytes gauge go_memstats_heap_inuse_bytes 7.528448e+06 # HELP go_memstats_heap_objects Number of allocated objects. # TYPE go_memstats_heap_objects gauge go_memstats_heap_objects 26306 # HELP go_memstats_heap_released_bytes Number of heap bytes released to OS. # TYPE go_memstats_heap_released_bytes gauge go_memstats_heap_released_bytes 5.7401344e+07 # HELP go_memstats_heap_sys_bytes Number of heap bytes obtained from system. # TYPE go_memstats_heap_sys_bytes gauge go_memstats_heap_sys_bytes 6.5765376e+07 # HELP go_memstats_last_gc_time_seconds Number of seconds since 1970 of last garbage collection. # TYPE go_memstats_last_gc_time_seconds gauge go_memstats_last_gc_time_seconds 1.6311727586032727e+09 # HELP go_memstats_lookups_total Total number of pointer lookups. # TYPE go_memstats_lookups_total counter go_memstats_lookups_total 0 # HELP go_memstats_mallocs_total Total number of mallocs. # TYPE go_memstats_mallocs_total counter go_memstats_mallocs_total 198424 # HELP go_memstats_mcache_inuse_bytes Number of bytes in use by mcache structures. # TYPE go_memstats_mcache_inuse_bytes gauge go_memstats_mcache_inuse_bytes 14400 # HELP go_memstats_mcache_sys_bytes Number of bytes used for mcache structures obtained from system. # TYPE go_memstats_mcache_sys_bytes gauge go_memstats_mcache_sys_bytes 16384 # HELP go_memstats_mspan_inuse_bytes Number of bytes in use by mspan structures. # TYPE go_memstats_mspan_inuse_bytes gauge go_memstats_mspan_inuse_bytes 191896 # HELP go_memstats_mspan_sys_bytes Number of bytes used for mspan structures obtained from system. # TYPE go_memstats_mspan_sys_bytes gauge go_memstats_mspan_sys_bytes 212992 # HELP go_memstats_next_gc_bytes Number of heap bytes when next garbage collection will take place. # TYPE go_memstats_next_gc_bytes gauge go_memstats_next_gc_bytes 8.689632e+06 # HELP go_memstats_other_sys_bytes Number of bytes used for other system allocations. # TYPE go_memstats_other_sys_bytes gauge go_memstats_other_sys_bytes 2.566622e+06 # HELP go_memstats_stack_inuse_bytes Number of bytes in use by the stack allocator. # TYPE go_memstats_stack_inuse_bytes gauge go_memstats_stack_inuse_bytes 1.343488e+06 # HELP go_memstats_stack_sys_bytes Number of bytes obtained from system for stack allocator. # TYPE go_memstats_stack_sys_bytes gauge go_memstats_stack_sys_bytes 1.343488e+06 # HELP go_memstats_sys_bytes Number of bytes obtained from system. # TYPE go_memstats_sys_bytes gauge go_memstats_sys_bytes 7.6891144e+07 # HELP go_threads Number of OS threads created. # TYPE go_threads gauge go_threads 18 Note cnpg_collector_postgres_version is a GaugeVec metric containing the Major.Minor version of PostgreSQL. The full semantic version Major.Minor.Patch can be found inside one of its label field named full . Warning The metrics cnpg_collector_last_failed_backup_timestamp , cnpg_collector_last_available_backup_timestamp , and cnpg_collector_first_recoverability_point have been deprecated starting from version 1.26. These metrics will continue to function with native backup solutions such as in-core Barman Cloud (deprecated) and volume snapshots. Note that for these cases, cnpg_collector_first_recoverability_point and cnpg_collector_last_available_backup_timestamp will remain zero until the first backup is completed to the object store. This is separate from WAL archiving.","title":"Predefined set of metrics"},{"location":"monitoring/#user-defined-metrics","text":"This feature is currently in beta state and the format is inspired by the queries.yaml file (release 0.12) of the PostgreSQL Prometheus Exporter. Custom metrics can be defined by users by referring to the created Configmap / Secret in a Cluster definition under the .spec.monitoring.customQueriesConfigMap or customQueriesSecret section as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example namespace: test spec: instances: 3 storage: size: 1Gi monitoring: customQueriesConfigMap: - name: example-monitoring key: custom-queries The customQueriesConfigMap / customQueriesSecret sections contain a list of ConfigMap / Secret references specifying the key in which the custom queries are defined. Take care that the referred resources have to be created in the same namespace as the Cluster resource. Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to it, otherwise you will have to reload the instances using the kubectl cnpg reload subcommand. Important When a user defined metric overwrites an already existing metric the instance manager prints a json warning log, containing the message: Query with the same name already found. Overwriting the existing one. and a key queryName containing the overwritten query name.","title":"User defined metrics"},{"location":"monitoring/#example-of-a-user-defined-metric","text":"Here you can see an example of a ConfigMap containing a single custom query, referenced by the Cluster example above: apiVersion: v1 kind: ConfigMap metadata: name: example-monitoring namespace: test labels: cnpg.io/reload: \"\" data: custom-queries: | pg_replication: query: \"SELECT CASE WHEN NOT pg_is_in_recovery() THEN 0 ELSE GREATEST (0, EXTRACT(EPOCH FROM (now() - pg_last_xact_replay_timestamp()))) END AS lag, pg_is_in_recovery() AS in_recovery, EXISTS (TABLE pg_stat_wal_receiver) AS is_wal_receiver_up, (SELECT count(*) FROM pg_stat_replication) AS streaming_replicas\" metrics: - lag: usage: \"GAUGE\" description: \"Replication lag behind primary in seconds\" - in_recovery: usage: \"GAUGE\" description: \"Whether the instance is in recovery\" - is_wal_receiver_up: usage: \"GAUGE\" description: \"Whether the instance wal_receiver is up\" - streaming_replicas: usage: \"GAUGE\" description: \"Number of streaming replicas connected to the instance\" A list of basic monitoring queries can be found in the default-monitoring.yaml file that is already installed in your CloudNativePG deployment (see \"Default set of metrics\" ).","title":"Example of a user defined metric"},{"location":"monitoring/#example-of-a-user-defined-metric-with-predicate-query","text":"The predicate_query option allows the user to execute the query to collect the metrics only under the specified conditions. To do so the user needs to provide a predicate query that returns at most one row with a single boolean column. The predicate query is executed in the same transaction as the main query and against the same databases. some_query: | predicate_query: | SELECT some_bool as predicate FROM some_table query: | SELECT count(*) as rows FROM some_table metrics: - rows: usage: \"GAUGE\" description: \"number of rows\"","title":"Example of a user defined metric with predicate query"},{"location":"monitoring/#example-of-a-user-defined-metric-running-on-multiple-databases","text":"If the target_databases option lists more than one database the metric is collected from each of them. Database auto-discovery can be enabled for a specific query by specifying a shell-like pattern (i.e., containing * , ? or [] ) in the list of target_databases . If provided, the operator will expand the list of target databases by adding all the databases returned by the execution of SELECT datname FROM pg_database WHERE datallowconn AND NOT datistemplate and matching the pattern according to path.Match() rules. Note The * character has a special meaning in yaml, so you need to quote ( \"*\" ) the target_databases value when it includes such a pattern. It is recommended that you always include the name of the database in the returned labels, for example using the current_database() function as in the following example: some_query: | query: | SELECT current_database() as datname, count(*) as rows FROM some_table metrics: - datname: usage: \"LABEL\" description: \"Name of current database\" - rows: usage: \"GAUGE\" description: \"number of rows\" target_databases: - albert - bb - freddie This will produce in the following metric being exposed: cnpg_some_query_rows{datname=\"albert\"} 2 cnpg_some_query_rows{datname=\"bb\"} 5 cnpg_some_query_rows{datname=\"freddie\"} 10 Here is an example of a query with auto-discovery enabled which also runs on the template1 database (otherwise not returned by the aforementioned query): some_query: | query: | SELECT current_database() as datname, count(*) as rows FROM some_table metrics: - datname: usage: \"LABEL\" description: \"Name of current database\" - rows: usage: \"GAUGE\" description: \"number of rows\" target_databases: - \"*\" - \"template1\" The above example will produce the following metrics (provided the databases exist): cnpg_some_query_rows{datname=\"albert\"} 2 cnpg_some_query_rows{datname=\"bb\"} 5 cnpg_some_query_rows{datname=\"freddie\"} 10 cnpg_some_query_rows{datname=\"template1\"} 7 cnpg_some_query_rows{datname=\"postgres\"} 42","title":"Example of a user defined metric running on multiple databases"},{"location":"monitoring/#structure-of-a-user-defined-metric","text":"Every custom query has the following basic structure: <MetricName>: query: \"<SQLQuery>\" metrics: - <ColumnName>: usage: \"<MetricType>\" description: \"<MetricDescription>\" Here is a short description of all the available fields: <MetricName> : the name of the Prometheus metric name : override <MetricName> , if defined query : the SQL query to run on the target database to generate the metrics primary : whether to run the query only on the primary instance master : same as primary (for compatibility with the Prometheus PostgreSQL exporter's syntax - deprecated) runonserver : a semantic version range to limit the versions of PostgreSQL the query should run on (e.g. \">=11.0.0\" or \">=12.0.0 <=15.0.0\" ) target_databases : a list of databases to run the query against, or a shell-like pattern to enable auto discovery. Overwrites the default database if provided. predicate_query : a SQL query that returns at most one row and one boolean column to run on the target database. The system evaluates the predicate and if true executes the query . metrics : section containing a list of all exported columns, defined as follows: <ColumnName> : the name of the column returned by the query name : override the ColumnName of the column in the metric, if defined usage : one of the values described below description : the metric's description metrics_mapping : the optional column mapping when usage is set to MAPPEDMETRIC The possible values for usage are: Column Usage Label Description DISCARD this column should be ignored LABEL use this column as a label COUNTER use this column as a counter GAUGE use this column as a gauge MAPPEDMETRIC use this column with the supplied mapping of text values DURATION use this column as a text duration (in milliseconds) HISTOGRAM use this column as a histogram Please visit the \"Metric Types\" page from the Prometheus documentation for more information.","title":"Structure of a user defined metric"},{"location":"monitoring/#output-of-a-user-defined-metric","text":"Custom defined metrics are returned by the Prometheus exporter endpoint ( :9187/metrics ) with the following format: cnpg_<MetricName>_<ColumnName>{<LabelColumnName>=<LabelColumnValue> ... } <ColumnValue> Note LabelColumnName are metrics with usage set to LABEL and their Value Considering the pg_replication example above, the exporter's endpoint would return the following output when invoked: # HELP cnpg_pg_replication_in_recovery Whether the instance is in recovery # TYPE cnpg_pg_replication_in_recovery gauge cnpg_pg_replication_in_recovery 0 # HELP cnpg_pg_replication_lag Replication lag behind primary in seconds # TYPE cnpg_pg_replication_lag gauge cnpg_pg_replication_lag 0 # HELP cnpg_pg_replication_streaming_replicas Number of streaming replicas connected to the instance # TYPE cnpg_pg_replication_streaming_replicas gauge cnpg_pg_replication_streaming_replicas 2 # HELP cnpg_pg_replication_is_wal_receiver_up Whether the instance wal_receiver is up # TYPE cnpg_pg_replication_is_wal_receiver_up gauge cnpg_pg_replication_is_wal_receiver_up 0","title":"Output of a user defined metric"},{"location":"monitoring/#default-set-of-metrics","text":"The operator can be configured to automatically inject in a Cluster a set of monitoring queries defined in a ConfigMap or a Secret, inside the operator's namespace. You have to set the MONITORING_QUERIES_CONFIGMAP or MONITORING_QUERIES_SECRET key in the \"operator configuration\" , respectively to the name of the ConfigMap or the Secret; the operator will then use the content of the queries key. Any change to the queries content will be immediately reflected on all the deployed Clusters using it. The operator installation manifests come with a predefined ConfigMap, called cnpg-default-monitoring , to be used by all Clusters. MONITORING_QUERIES_CONFIGMAP is by default set to cnpg-default-monitoring in the operator configuration. If you want to disable the default set of metrics, you can: disable it at operator level: set the MONITORING_QUERIES_CONFIGMAP / MONITORING_QUERIES_SECRET key to \"\" (empty string), in the operator ConfigMap. Changes to operator ConfigMap require an operator restart. disable it for a specific Cluster: set .spec.monitoring.disableDefaultQueries to true in the Cluster. Important The ConfigMap or Secret specified via MONITORING_QUERIES_CONFIGMAP / MONITORING_QUERIES_SECRET will always be copied to the Cluster's namespace with a fixed name: cnpg-default-monitoring . So that, if you intend to have default metrics, you should not create a ConfigMap with this name in the cluster's namespace.","title":"Default set of metrics"},{"location":"monitoring/#differences-with-the-prometheus-postgres-exporter","text":"CloudNativePG is inspired by the PostgreSQL Prometheus Exporter, but presents some differences. In particular, the cache_seconds field is not implemented in CloudNativePG's exporter.","title":"Differences with the Prometheus Postgres exporter"},{"location":"monitoring/#monitoring-the-cloudnativepg-operator","text":"The operator internally exposes Prometheus metrics via HTTP on port 8080, named metrics . Info You can inspect the exported metrics by following the instructions in the \"How to inspect the exported metrics\" section below. Currently, the operator exposes default kubebuilder metrics. See kubebuilder documentation for more details.","title":"Monitoring the CloudNativePG operator"},{"location":"monitoring/#monitoring-the-operator-with-prometheus","text":"The operator can be monitored using the Prometheus Operator by defining a PodMonitor pointing to the operator pod(s), as follows (note it's applied in the same namespace as the operator): kubectl -n cnpg-system apply -f - <<EOF --- apiVersion: monitoring.coreos.com/v1 kind: PodMonitor metadata: name: cnpg-controller-manager spec: selector: matchLabels: app.kubernetes.io/name: cloudnative-pg podMetricsEndpoints: - port: metrics EOF","title":"Monitoring the operator with Prometheus"},{"location":"monitoring/#how-to-inspect-the-exported-metrics","text":"In this section we provide basic instructions on how to inspect the metrics exported by a specific PostgreSQL instance manager (primary or replica) or the operator. Note In the examples below we assume we are working in the default namespace, and with the operator installed in the cnpg-system namespace. Please adapt to your use case.","title":"How to inspect the exported metrics"},{"location":"monitoring/#using-port-forwarding","text":"The simplest way to inspect the metrics is to port-forward the metrics ports of the pods involved. For example, to inspect the metrics on the -1 instance of cluster-example , we port-forward the 9187 port: kubectl port-forward cluster-example-1 9187:9187 With port-forwarding active, the metrics can be inspected easily, for example on a web browser, using HTTP or HTTPS depending on the configuration, with address: localhost:9187/metrics . The operator pod also exports metrics, on port 8080. Similarly to instances, we port-forward the operator pod, which is located in the operator namespace: kubectl -n cnpg-system port-forward pod/<CONTROLLER-MANAGER-POD> 8080:8080 With port forwarding active, the metrics are easily viewable on a browser at localhost:8080/metrics .","title":"Using port forwarding"},{"location":"monitoring/#using-curl","text":"Create the curl pod with the following command: kubectl apply -f - <<EOF --- apiVersion: v1 kind: Pod metadata: name: curl spec: containers: - name: curl image: curlimages/curl:8.2.1 command: ['sleep', '3600'] EOF To inspect the metrics exported by an instance, you need to connect to port 9187 of the target pod. You will need to know the pod's IP address, which you can find easily by running kubectl get pod -o wide . The following generic command will run curl on the desired pod: kubectl exec -ti curl -- curl -s <pod_ip>:9187/metrics For example, if your PostgreSQL cluster is called cluster-example and you want to retrieve the exported metrics of the first pod in the cluster, you can run the following command to programmatically get the IP of that pod: POD_IP=$(kubectl get pod cluster-example-1 --template '{{.status.podIP}}') And then run: kubectl exec -ti curl -- curl -s ${POD_IP}:9187/metrics If you enabled TLS metrics, run instead: kubectl exec -ti curl -- curl -sk https://${POD_IP}:9187/metrics To access the metrics of the operator, you need to point to the pod where the operator is running, and use TCP port 8080 as target. When you're done inspecting metrics, please remember to delete the curl pod: kubectl delete -f curl.yaml","title":"Using curl"},{"location":"monitoring/#auxiliary-resources","text":"Important These resources are provided for illustration and experimentation, and do not represent any kind of recommendation for your production system In the doc/src/samples/monitoring/ directory you will find a series of sample files for observability. Please refer to Part 4 of the quickstart section for context: kube-stack-config.yaml : a configuration file for the kube-stack helm chart installation. It ensures that Prometheus listens for all PodMonitor resources. prometheusrule.yaml : a PrometheusRule with alerts for CloudNativePG. NOTE: this does not include inter-operation with notification services. Please refer to the Prometheus documentation . podmonitor.yaml : a PodMonitor for the CloudNativePG Operator deployment. In addition, we provide the \"raw\" sources for the Prometheus alert rules in the alerts.yaml file. A Grafana dashboard for CloudNativePG clusters and operator, is kept in the dedicated repository cloudnative-pg/grafana-dashboards as a dashboard JSON configuration: grafana-dashboard.json . The file can be downloaded, and imported into Grafana (menus: Dashboard > New > Import). For a general reference on the settings available on kube-prometheus-stack , you can execute helm show values prometheus-community/kube-prometheus-stack . Please refer to the kube-prometheus-stack page for more detail.","title":"Auxiliary resources"},{"location":"networking/","text":"Networking CloudNativePG assumes the underlying Kubernetes cluster has the required connectivity already set up. Networking on Kubernetes is an important and extended topic; please refer to the Kubernetes documentation for further information. If you're following the quickstart guide to install CloudNativePG on a local KinD or K3d cluster, you should not encounter any networking issues as neither platform will add any networking restrictions by default. However, when deploying CloudNativePG on existing infrastructure, networking restrictions might be in place that could impair the communication of the operator with PostgreSQL clusters. Specifically, existing Network Policies might restrict certain types of traffic. Or, you might be interested in adding network policies in your environment for increased security. As mentioned in the security document , please ensure the operator can reach every cluster pod on ports 8000 and 5432, and that pods can connect to each other. Cross-namespace network policy for the operator Following the quickstart guide or using helm chart for deployment will install the operator in a dedicated namespace ( cnpg-system by default). We recommend that you create clusters in a different namespace. The operator must be able to connect to cluster pods. This might be precluded if there is a NetworkPolicy restricting cross-namespace traffic. For example, the kubernetes guide on network policies contains an example policy denying all ingress traffic by default. If your local kubernetes setup has this kind of restrictive network policy, you will need to create a NetworkPolicy to explicitly allow connection from the operator namespace and pod to the cluster namespace and pods. You can find an example in the networkpolicy-example.yaml file in this repository. Please note, you'll need to adjust the cluster name and cluster namespace to match your specific setup, and also the operator namespace if it is not the default namespace. Cross-cluster networking While bootstrapping from another cluster or when using the externalClusters section, ensure connectivity among all clusters, object stores, and namespaces involved. Again, we refer you to the Kubernetes documentation for setup information.","title":"Networking"},{"location":"networking/#networking","text":"CloudNativePG assumes the underlying Kubernetes cluster has the required connectivity already set up. Networking on Kubernetes is an important and extended topic; please refer to the Kubernetes documentation for further information. If you're following the quickstart guide to install CloudNativePG on a local KinD or K3d cluster, you should not encounter any networking issues as neither platform will add any networking restrictions by default. However, when deploying CloudNativePG on existing infrastructure, networking restrictions might be in place that could impair the communication of the operator with PostgreSQL clusters. Specifically, existing Network Policies might restrict certain types of traffic. Or, you might be interested in adding network policies in your environment for increased security. As mentioned in the security document , please ensure the operator can reach every cluster pod on ports 8000 and 5432, and that pods can connect to each other.","title":"Networking"},{"location":"networking/#cross-namespace-network-policy-for-the-operator","text":"Following the quickstart guide or using helm chart for deployment will install the operator in a dedicated namespace ( cnpg-system by default). We recommend that you create clusters in a different namespace. The operator must be able to connect to cluster pods. This might be precluded if there is a NetworkPolicy restricting cross-namespace traffic. For example, the kubernetes guide on network policies contains an example policy denying all ingress traffic by default. If your local kubernetes setup has this kind of restrictive network policy, you will need to create a NetworkPolicy to explicitly allow connection from the operator namespace and pod to the cluster namespace and pods. You can find an example in the networkpolicy-example.yaml file in this repository. Please note, you'll need to adjust the cluster name and cluster namespace to match your specific setup, and also the operator namespace if it is not the default namespace.","title":"Cross-namespace network policy for the operator"},{"location":"networking/#cross-cluster-networking","text":"While bootstrapping from another cluster or when using the externalClusters section, ensure connectivity among all clusters, object stores, and namespaces involved. Again, we refer you to the Kubernetes documentation for setup information.","title":"Cross-cluster networking"},{"location":"operator_capability_levels/","text":"Operator capability levels These capabilities were implemented by CloudNativePG, classified using the Operator SDK definition of Capability Levels framework. Important Based on the Operator Capability Levels model , you can expect a \"Level V - Auto Pilot\" set of capabilities from the CloudNativePG operator. Each capability level is associated with a certain set of management features the operator offers: Basic install Seamless upgrades Full lifecycle Deep insights Auto pilot Note We consider this framework as a guide for future work and implementations in the operator. Level 1: Basic install Capability level 1 involves installing and configuring the operator. This category includes usability and user experience enhancements, such as improvements in how you interact with the operator and a PostgreSQL cluster configuration. Important We consider information security part of this level. Operator deployment via declarative configuration The operator is installed in a declarative way using a Kubernetes manifest that defines four major CustomResourceDefinition objects: Cluster , Pooler , Backup , and ScheduledBackup . PostgreSQL cluster deployment via declarative configuration You define a PostgreSQL cluster (operand) using the Cluster custom resource in a fully declarative way. The PostgreSQL version is determined by the operand container image defined in the CR, which is automatically fetched from the requested registry. When deploying an operand, the operator also creates the following resources: Pod , Service , Secret , ConfigMap , PersistentVolumeClaim , PodDisruptionBudget , ServiceAccount , RoleBinding , and Role . Override of operand images through the CRD The operator is designed to support any operand container image with PostgreSQL inside. By default, the operator uses the latest available minor version of the latest stable major version supported by the PostgreSQL community and published on ghcr.io. You can use any compatible image of PostgreSQL supporting the primary/standby architecture directly by setting the imageName attribute in the CR. The operator also supports imagePullSecrets to access private container registries, and it supports digests and tags for finer control of container image immutability. If you prefer not to specify an image name, you can leverage image catalogs by simply referencing the PostgreSQL major version. Moreover, image catalogs enable you to effortlessly create custom catalogs, directing to images based on your specific requirements. Labels and annotations You can configure the operator to support inheriting labels and annotations that are defined in a cluster's metadata. The goal is to improve the organization of the CloudNativePG deployment in your Kubernetes infrastructure. Self-contained instance manager Instead of relying on an external tool to coordinate PostgreSQL instances in the Kubernetes cluster pods, such as Patroni or Stolon, the operator injects the operator executable inside each pod, in a file named /controller/manager . The application is used to control the underlying PostgreSQL instance and to reconcile the pod status with the instance based on the PostgreSQL cluster topology. The instance manager also starts a web server that's invoked by the kubelet for probes. Unix signals invoked by the kubelet are filtered by the instance manager. Where appropriate, they're forwarded to the postgres process for fast and controlled reactions to external events. The instance manager is written in Go and has no external dependencies. Storage configuration Storage is a critical component in a database workload. Taking advantage of the Kubernetes native capabilities and resources in terms of storage, the operator gives you enough flexibility to choose the right storage for your workload requirements, based on what the underlying Kubernetes environment can offer. This implies choosing a particular storage class in a public cloud environment or fine-tuning the generated PVC through a PVC template in the CR's storage parameter. For better performance and finer control, you can also choose to host your cluster's write-ahead log (WAL, also known as pg_wal ) on a separate volume, preferably on different storage. The \"Benchmarking\" section of the documentation provides detailed instructions on benchmarking both storage and the database before production. It relies on the cnpg plugin to ensure optimal performance and reliability. Replica configuration The operator detects replicas in a cluster through a single parameter, called instances . If set to 1 , the cluster comprises a single primary PostgreSQL instance with no replica. If higher than 1 , the operator manages instances -1 replicas, including high availability (HA) through automated failover and rolling updates through switchover operations. CloudNativePG manages replication slots for all replicas in the high-availability cluster. It also supports user-defined physical replication slots on the primary and enables logical decoding failover\u2014natively for PostgreSQL 17 and later using sync_replication_slots , and through the pg_failover_slots extension for earlier versions. Service Configuration By default, CloudNativePG creates three Kubernetes services for applications to access the cluster via the network: One pointing to the primary for read/write operations. One pointing to replicas for read-only queries. A generic one pointing to any instance for read operations. You can disable the read-only and read services via configuration. Additionally, you can leverage the service template capability to create custom service resources, including load balancers, to access PostgreSQL outside Kubernetes. This is particularly useful for DBaaS purposes. Database configuration The operator is designed to bootstrap a PostgreSQL cluster with a single database. The operator transparently manages network access to the cluster through three Kubernetes services provisioned and managed for read-write, read, and read-only workloads. Using the convention-over-configuration approach, the operator creates a database called app , by default owned by a regular Postgres user with the same name. You can specify both the database name and the user name, if required, as part of the bootstrap. Additional databases can be created or managed via declarative database management using the Database CRD, also supporting extensions and schemas. Although no configuration is required to run the cluster, you can customize both PostgreSQL runtime configuration and PostgreSQL host-based authentication rules in the postgresql section of the CR. Configuration of Postgres roles, users, and groups CloudNativePG supports management of PostgreSQL roles, users, and groups through declarative configuration using the .spec.managed.roles stanza. Pod security standards For InfoSec requirements, the operator doesn't require privileged mode for any container. It enforces a read-only root filesystem to guarantee containers immutability for both the operator and the operand pods. It also explicitly sets the required security contexts. Affinity The cluster's affinity section enables fine-tuning of how pods and related resources, such as persistent volumes, are scheduled across the nodes of a Kubernetes cluster. In particular, the operator supports: Pod affinity and anti-affinity Node selector Taints and tolerations Topology spread constraints The cluster's topologySpreadConstraints section enables additional control of scheduling pods across topologies, enhancing what affinity and anti-affinity can offer. Command-line interface CloudNativePG doesn't have its own command-line interface. It relies on the best command-line interface for Kubernetes, kubectl, by providing a plugin called cnpg . This plugin enhances and simplifies your PostgreSQL cluster management experience. Current status of the cluster The operator continuously updates the status section of the CR with the observed status of the cluster. The entire PostgreSQL cluster status is continuously monitored by the instance manager running in each pod. The instance manager is responsible for applying the required changes to the controlled PostgreSQL instance to converge to the required status of the cluster. (For example, if the cluster status reports that pod -1 is the primary, pod -1 needs to promote itself while the other pods need to follow pod -1 .) The same status is used by the cnpg plugin for kubectl to provide details. Operator's certification authority The operator creates a certification authority for itself. It creates and signs with the operator certification authority a leaf certificate for the webhook server to use. This certificate ensures safe communication between the Kubernetes API server and the operator. Cluster's certification authority The operator creates a certification authority for every PostgreSQL cluster. This certification authority is used to issue and renew TLS certificates for clients' authentication, including streaming replication standby servers (instead of passwords). Support for a custom certification authority for client certificates is available through secrets, which also includes integration with cert-manager. Certificates can be issued with the cnpg plugin for kubectl. TLS connections The operator transparently and natively supports TLS/SSL connections to encrypt client/server communications for increased security using the cluster's certification authority. Support for custom server certificates is available through secrets, which also includes integration with cert-manager. Certificate authentication for streaming replication To authorize streaming replication connections from the standby servers, the operator relies on TLS client certificate authentication. This method is used instead of relying on a password (and therefore a secret). Continuous configuration management The operator enables you to apply changes to the Cluster resource YAML section of the PostgreSQL configuration. Depending on the configuration option, it also makes sure that all instances are properly reloaded or restarted. Note Changes with ALTER SYSTEM aren't detected, meaning that the cluster state isn't enforced. Import of existing PostgreSQL databases The operator provides a declarative way to import existing Postgres databases in a new CloudNativePG cluster in Kubernetes, using offline migrations. The same feature also covers offline major upgrades of PostgreSQL databases. Offline means that applications must stop their write operations at the source until the database is imported. The feature extends the initdb bootstrap method to create a new PostgreSQL cluster using a logical snapshot of the data available in another PostgreSQL database. This data can be accessed by way of the network through a superuser connection. Import is from any supported version of Postgres. It relies on pg_dump and pg_restore being executed from the new cluster primary for all databases that are part of the operation and, if requested, for roles. PostGIS clusters CloudNativePG supports the installation of clusters with the PostGIS open source extension for geographical databases. This extension is one of the most popular extensions for PostgreSQL. Basic LDAP authentication for PostgreSQL The operator allows you to configure LDAP authentication for your PostgreSQL clients, using either the simple bind or search+bind mode, as described in the LDAP authentication section of the PostgreSQL documentation . Multiple installation methods The operator can be installed through a Kubernetes manifest by way of kubectl apply , to be used in a traditional Kubernetes installation in public and private cloud environments. CloudNativePG also supports installation by way of a Helm chart or OLM bundle from OperatorHub.io. Convention over configuration The operator supports the convention-over-configuration paradigm, deciding standard default values while allowing you to override them and customize them. You can specify a deployment of a PostgreSQL cluster using the Cluster CRD in a couple of lines of YAML code. Level 2: Seamless upgrades Capability level 2 is about enabling updates of the operator and the actual workload, in this case PostgreSQL servers. This includes PostgreSQL minor release updates (security and bug fixes normally) as well as major online upgrades. Operator Upgrade Upgrading the operator is seamless and can be done as a new deployment. After upgrading the controller, a rolling update of all deployed PostgreSQL clusters is initiated. You can choose to update all clusters simultaneously or distribute their upgrades over time. Thanks to the instance manager's injection, upgrading the operator does not require changes to the operand, allowing the operator to manage older versions of it. Additionally, CloudNativePG supports in-place updates of the instance manager following an operator upgrade. In-place updates do not require a rolling update or a subsequent switchover of the cluster. Upgrade of the managed workload The operand can be upgraded using a declarative configuration approach as part of changing the CR and, in particular, the imageName parameter. This is normally initiated by security updates or Postgres minor version updates. In the presence of standby servers, the operator performs rolling updates starting from the replicas. It does this by dropping the existing pod and creating a new one with the new requested operand image that reuses the underlying storage. Depending on the value of the primaryUpdateStrategy , the operator proceeds with a switchover before updating the former primary ( unsupervised ). Or, it waits for the user to manually issue the switchover procedure ( supervised ) by way of the cnpg plugin for kubectl. The setting to use depends on the business requirements, as the operation might generate some downtime for the applications. This downtime can range from a few seconds to minutes, based on the actual database workload. Offline In-Place Major Upgrades of PostgreSQL CloudNativePG supports declarative offline in-place major upgrades when a new operand container image with a higher PostgreSQL major version is applied to a cluster. The upgrade can be triggered by updating the image tag via the .spec.imageName option or by using an image catalog to manage version changes. During the upgrade, all cluster pods are shut down to ensure data consistency. A new job is then created to validate the upgrade conditions, execute pg_upgrade , and create new directories for PGDATA , WAL files, and tablespaces if needed. Once the upgrade is complete, replicas are re-created. Failed upgrades can be rolled back. Display cluster availability status during upgrade At any time, convey the cluster's high availability status, for example, Setting up primary , Creating a new replica , Cluster in healthy state , Switchover in progress , Failing over , Upgrading cluster , and Upgrading Postgres major version . Level 3: Full lifecycle Capability level 3 requires the operator to manage aspects of business continuity and scalability. Disaster recovery is a business continuity component that requires that both backup and recovery of a database work correctly. While as a starting point, the goal is to achieve RPO < 5 minutes, the long-term goal is to implement RPO=0 backup solutions. High availability is the other important component of business continuity. Through PostgreSQL native physical replication and hot standby replicas, it allows the operator to perform failover and switchover operations. This area includes enhancements in: Control of PostgreSQL physical replication, such as synchronous replication, (cascading) replication clusters, and so on Connection pooling, to improve performance and control through a connection pooling layer with pgBouncer PostgreSQL WAL archive The operator supports PostgreSQL continuous archiving of WAL files to an object store (AWS S3 and S3-compatible, Azure Blob Storage, Google Cloud Storage, and gateways like MinIO). WAL archiving is defined at the cluster level, declaratively, through the backup parameter in the cluster definition. This is done by specifying an S3 protocol destination URL (for example, to point to a specific folder in an AWS S3 bucket) and, optionally, a generic endpoint URL. WAL archiving, a prerequisite for continuous backup, doesn't require any further user action. The operator transparently sets the archive_command to rely on barman-cloud-wal-archive to ship WAL files to the defined endpoint. You can decide the compression algorithm, as well as the number of parallel jobs to concurrently upload WAL files in the archive. In addition, Instance Manager checks the correctness of the archive destination by performing the barman-cloud-check-wal-archive command before beginning to ship the first set of WAL files. PostgreSQL Backups CloudNativePG provides a pluggable interface (CNPG-I) for managing application-level backups using PostgreSQL\u2019s native physical backup mechanisms\u2014namely base backups and continuous WAL archiving. This design enables flexibility and extensibility while ensuring consistency and performance. The CloudNativePG Community officially supports the Barman Cloud Plugin , which enables continuous physical backups to object stores, along with full and Point-In-Time Recovery (PITR) capabilities. In addition to CNPG-I plugins, CloudNativePG also natively supports backups using Kubernetes volume snapshots, when supported by the underlying storage class and CSI driver. You can initiate base backups in two ways: On-demand, using the Backup custom resource Scheduled, using the ScheduledBackup custom resource, with a cron-like schedule format Volume snapshots leverage the Kubernetes API and are particularly effective for very large databases (VLDBs) due to their speed and storage efficiency. Both volume snapshots and CNPG-I-based backups support: Hot backups: Taken while PostgreSQL is running, ensuring minimal disruption. Cold backups: Performed by temporarily stopping PostgreSQL to ensure a fully consistent snapshot, when required. Backups from a standby The operator supports offloading base backups onto a standby without impacting the RPO of the database. This allows resources to be preserved on the primary, in particular I/O, for standard database operations. Full restore from a backup The operator enables you to bootstrap a new cluster (with its settings) starting from an existing and accessible backup, either on a volume snapshot, or in an object store, or via a plugin. Once the bootstrap process is completed, the operator initiates the instance in recovery mode. It replays all available WAL files from the specified archive, exiting recovery and starting as a primary. Subsequently, the operator clones the requested number of standby instances from the primary. CloudNativePG supports parallel WAL fetching from the archive. Point-in-time recovery (PITR) from a backup The operator enables you to create a new PostgreSQL cluster by recovering an existing backup to a specific point in time, defined with a timestamp, a label, or a transaction ID. This capability is built on top of the full restore one and supports all the options available in PostgreSQL for PITR . Zero-Data-Loss Clusters Through Synchronous Replication Achieve zero data loss (RPO=0) in your local high-availability CloudNativePG cluster with support for both quorum-based and priority-based synchronous replication. The operator offers a flexible way to define the number of expected synchronous standby replicas available at any time, and allows customization of the synchronous_standby_names option as needed. Replica clusters Establish a robust cross-Kubernetes cluster topology for PostgreSQL clusters, harnessing the power of native streaming and cascading replication. With the replica option, you can configure an autonomous cluster to consistently replicate data from another PostgreSQL source of the same major version. This source can be located anywhere, provided you have access to a WAL archive for fetching WAL files or a direct streaming connection via TLS between the two endpoints. Notably, the source PostgreSQL instance can exist outside the Kubernetes environment, whether in a physical or virtual setting. Replica clusters can be instantiated through various methods, including volume snapshots, a recovery object store (using the Barman Cloud backup format), or streaming using pg_basebackup . Both WAL file shipping and WAL streaming are supported. The deployment of replica clusters significantly elevates the business continuity posture of PostgreSQL databases within Kubernetes, extending across multiple data centers and facilitating hybrid and multi-cloud setups. (While anticipating Kubernetes federation native capabilities, manual switchover across data centers remains necessary.) Additionally, the flexibility extends to creating delayed replica clusters intentionally lagging behind the primary cluster. This intentional lag aims to minimize the Recovery Time Objective ( RTO ) in the event of unintended errors, such as incorrect DELETE or UPDATE SQL operations. Distributed Database Topologies Leverage replica clusters to define distributed database topologies for PostgreSQL that span across various Kubernetes clusters, facilitating hybrid and multi-cloud deployments. With CloudNativePG, you gain powerful capabilities, including: Declarative Primary Control : Easily specify which PostgreSQL cluster acts as the primary. Seamless Primary Switchover : Effortlessly demote the current primary and promote another PostgreSQL cluster, typically located in a different region, without needing to re-clone the former primary. This setup can efficiently operate across two or more regions, can rely entirely on object stores for replication, and guarantees a maximum RPO (Recovery Point Objective) of 5 minutes. This advanced feature is uniquely provided by CloudNativePG, ensuring robust data integrity and continuity across diverse environments. Tablespace support CloudNativePG seamlessly integrates robust support for PostgreSQL tablespaces by facilitating the declarative definition of individual persistent volumes. This innovative feature empowers you to efficiently distribute I/O operations across a diverse array of storage devices. Through the transparent orchestration of tablespaces, CloudNativePG enhances the performance and scalability of PostgreSQL databases, ensuring a streamlined and optimized experience for managing large scale data storage in cloud-native environments. Support for temporary tablespaces is also included. Customizable Startup, Liveness, and Readiness Probes CloudNativePG configures startup, liveness, and readiness probes for PostgreSQL containers, which are managed by the Kubernetes kubelet. These probes interact with the /startupz , /healthz , and /readyz endpoints exposed by the instance manager's web server to monitor the Pod's health and readiness. All probes are configured with default settings but can be fully customized to meet specific needs, allowing for fine-tuning to align with your environment and workloads. For detailed configuration options and advanced usage, refer to the Postgres instance manager documentation. Rolling deployments The operator supports rolling deployments to minimize the downtime. If a PostgreSQL cluster is exposed publicly, the service load-balances the read-only traffic only to available pods during the initialization or the update. Scale up and down of replicas The operator allows you to scale up and down the number of instances in a PostgreSQL cluster. New replicas are started up from the primary server and participate in the cluster's HA infrastructure. The CRD declares a \"scale\" subresource that allows you to use the kubectl scale command. Maintenance window and PodDisruptionBudget for Kubernetes nodes The operator creates a PodDisruptionBudget resource to limit the number of concurrent disruptions to one primary instance. This configuration prevents the maintenance operation from deleting all the pods in a cluster, allowing the specified number of instances to be created. The PodDisruptionBudget is applied during the node-draining operation, preventing any disruption of the cluster service. While this strategy is correct for Kubernetes clusters where storage is shared among all the worker nodes, it might not be the best solution for clusters using local storage or for clusters installed in a private cloud. The operator allows you to specify a maintenance window and configure the reaction to any underlying node eviction. The ReusePVC option in the maintenance window section enables to specify the strategy to use. Allocate new storage in a different PVC for the evicted instance, or wait for the underlying node to be available again. Fencing Fencing is the process of protecting the data in one, more, or even all instances of a PostgreSQL cluster when they appear to be malfunctioning. When an instance is fenced, the PostgreSQL server process is guaranteed to be shut down, while the pod is kept running. This ensures that, until the fence is lifted, data on the pod isn't modified by PostgreSQL and that you can investigate file system for debugging and troubleshooting purposes. Hibernation CloudNativePG supports hibernation of a running PostgreSQL cluster in a declarative manner, through the cnpg.io/hibernation annotation. Hibernation enables saving CPU power by removing the database pods while keeping the database PVCs. This feature simulates scaling to 0 instances. Reuse of persistent volumes storage in pods When the operator needs to create a pod that was deleted by the user or was evicted by a Kubernetes maintenance operation, it reuses the PersistentVolumeClaim , if available. This ability avoids the need to clone the data from the primary again. CPU and memory requests and limits The operator allows administrators to control and manage resource usage by the cluster's pods in the resources section of the manifest. In particular, you can set requests and limits values for both CPU and RAM. Connection pooling with PgBouncer CloudNativePG provides native support for connection pooling with PgBouncer , one of the most popular open source connection poolers for PostgreSQL. From an architectural point of view, the native implementation of a PgBouncer connection pooler introduces a new layer to access the database. This optimizes the query flow toward the instances and makes the use of the underlying PostgreSQL resources more efficient. Instead of connecting directly to a PostgreSQL service, applications can now connect to the PgBouncer service and start reusing any existing connection. Logical Replication CloudNativePG supports PostgreSQL's logical replication in a declarative manner using Publication and Subscription custom resource definitions. Logical replication is particularly useful together with the import facility for online data migrations (even from public DBaaS solutions) and major PostgreSQL upgrades. Level 4: Deep insights Capability level 4 is about observability : monitoring, alerting, trending, and log processing. This might involve the use of external tools, such as Prometheus, Grafana, and Fluent Bit, as well as extensions in the PostgreSQL engine for the output of error logs directly in JSON format. CloudNativePG was designed to provide everything needed to easily integrate with industry-standard and community-accepted tools for flexible monitoring and logging. Prometheus exporter with configurable queries The instance manager provides a pluggable framework. By way of its own web server listening on the metrics port (9187), it exposes an endpoint to export metrics for the Prometheus monitoring and alerting tool. The operator supports custom monitoring queries defined as ConfigMap or Secret objects using a syntax that's compatible with postgres_exporter for Prometheus . CloudNativePG provides a set of basic monitoring queries for PostgreSQL that can be integrated and adapted to your context. Grafana dashboard CloudNativePG comes with a Grafana dashboard that you can use as a base to monitor all critical aspects of a PostgreSQL cluster, and customize. Standard output logging of PostgreSQL error messages in JSON format Every log message is delivered to standard output in JSON format. The first level is the definition of the timestamp, the log level, and the type of log entry, such as postgres for the canonical PostgreSQL error message channel. As a result, every pod managed by CloudNativePG can be easily and directly integrated with any downstream log processing stack that supports JSON as source data type. Real-time query monitoring CloudNativePG transparently and natively supports: The essential pg_stat_statements extension , which enables tracking of planning and execution statistics of all SQL statements executed by a PostgreSQL server The auto_explain extension , which provides a means for logging execution plans of slow statements automatically, without having to manually run EXPLAIN (helpful for tracking down un-optimized queries) The pg_failover_slots extension , which makes logical replication slots usable across a physical failover, ensuring resilience in change data capture (CDC) contexts based on PostgreSQL's native logical replication Audit CloudNativePG allows database and security administrators, auditors, and operators to track and analyze database activities using PGAudit for PostgreSQL. Such activities flow directly in the JSON log and can be properly routed to the correct downstream target using common log brokers like Fluentd. Kubernetes events Record major events as expected by the Kubernetes API, such as creating resources, removing nodes, and upgrading. Events can be displayed by using the kubectl describe and kubectl get events commands. Level 5: Auto pilot Capability level 5 is focused on automated scaling, healing, and tuning through the discovery of anomalies and insights that emerged from the observability layer. Automated failover for self-healing In case of detected failure on the primary, the operator changes the status of the cluster by setting the most aligned replica as the new target primary. As a consequence, the instance manager in each alive pod initiates the required procedures to align itself with the requested status of the cluster. It does this by either becoming the new primary or by following it. In case the former primary comes back up, the same mechanism avoids a split-brain by preventing applications from reaching it, running pg_rewind on the server and restarting it as a standby. Automated recreation of a standby If the pod hosting a standby is removed, the operator initiates the procedure to re-create a standby server.","title":"Operator capability levels"},{"location":"operator_capability_levels/#operator-capability-levels","text":"These capabilities were implemented by CloudNativePG, classified using the Operator SDK definition of Capability Levels framework. Important Based on the Operator Capability Levels model , you can expect a \"Level V - Auto Pilot\" set of capabilities from the CloudNativePG operator. Each capability level is associated with a certain set of management features the operator offers: Basic install Seamless upgrades Full lifecycle Deep insights Auto pilot Note We consider this framework as a guide for future work and implementations in the operator.","title":"Operator capability levels"},{"location":"operator_capability_levels/#level-1-basic-install","text":"Capability level 1 involves installing and configuring the operator. This category includes usability and user experience enhancements, such as improvements in how you interact with the operator and a PostgreSQL cluster configuration. Important We consider information security part of this level.","title":"Level 1: Basic install"},{"location":"operator_capability_levels/#operator-deployment-via-declarative-configuration","text":"The operator is installed in a declarative way using a Kubernetes manifest that defines four major CustomResourceDefinition objects: Cluster , Pooler , Backup , and ScheduledBackup .","title":"Operator deployment via declarative configuration"},{"location":"operator_capability_levels/#postgresql-cluster-deployment-via-declarative-configuration","text":"You define a PostgreSQL cluster (operand) using the Cluster custom resource in a fully declarative way. The PostgreSQL version is determined by the operand container image defined in the CR, which is automatically fetched from the requested registry. When deploying an operand, the operator also creates the following resources: Pod , Service , Secret , ConfigMap , PersistentVolumeClaim , PodDisruptionBudget , ServiceAccount , RoleBinding , and Role .","title":"PostgreSQL cluster deployment via declarative configuration"},{"location":"operator_capability_levels/#override-of-operand-images-through-the-crd","text":"The operator is designed to support any operand container image with PostgreSQL inside. By default, the operator uses the latest available minor version of the latest stable major version supported by the PostgreSQL community and published on ghcr.io. You can use any compatible image of PostgreSQL supporting the primary/standby architecture directly by setting the imageName attribute in the CR. The operator also supports imagePullSecrets to access private container registries, and it supports digests and tags for finer control of container image immutability. If you prefer not to specify an image name, you can leverage image catalogs by simply referencing the PostgreSQL major version. Moreover, image catalogs enable you to effortlessly create custom catalogs, directing to images based on your specific requirements.","title":"Override of operand images through the CRD"},{"location":"operator_capability_levels/#labels-and-annotations","text":"You can configure the operator to support inheriting labels and annotations that are defined in a cluster's metadata. The goal is to improve the organization of the CloudNativePG deployment in your Kubernetes infrastructure.","title":"Labels and annotations"},{"location":"operator_capability_levels/#self-contained-instance-manager","text":"Instead of relying on an external tool to coordinate PostgreSQL instances in the Kubernetes cluster pods, such as Patroni or Stolon, the operator injects the operator executable inside each pod, in a file named /controller/manager . The application is used to control the underlying PostgreSQL instance and to reconcile the pod status with the instance based on the PostgreSQL cluster topology. The instance manager also starts a web server that's invoked by the kubelet for probes. Unix signals invoked by the kubelet are filtered by the instance manager. Where appropriate, they're forwarded to the postgres process for fast and controlled reactions to external events. The instance manager is written in Go and has no external dependencies.","title":"Self-contained instance manager"},{"location":"operator_capability_levels/#storage-configuration","text":"Storage is a critical component in a database workload. Taking advantage of the Kubernetes native capabilities and resources in terms of storage, the operator gives you enough flexibility to choose the right storage for your workload requirements, based on what the underlying Kubernetes environment can offer. This implies choosing a particular storage class in a public cloud environment or fine-tuning the generated PVC through a PVC template in the CR's storage parameter. For better performance and finer control, you can also choose to host your cluster's write-ahead log (WAL, also known as pg_wal ) on a separate volume, preferably on different storage. The \"Benchmarking\" section of the documentation provides detailed instructions on benchmarking both storage and the database before production. It relies on the cnpg plugin to ensure optimal performance and reliability.","title":"Storage configuration"},{"location":"operator_capability_levels/#replica-configuration","text":"The operator detects replicas in a cluster through a single parameter, called instances . If set to 1 , the cluster comprises a single primary PostgreSQL instance with no replica. If higher than 1 , the operator manages instances -1 replicas, including high availability (HA) through automated failover and rolling updates through switchover operations. CloudNativePG manages replication slots for all replicas in the high-availability cluster. It also supports user-defined physical replication slots on the primary and enables logical decoding failover\u2014natively for PostgreSQL 17 and later using sync_replication_slots , and through the pg_failover_slots extension for earlier versions.","title":"Replica configuration"},{"location":"operator_capability_levels/#service-configuration","text":"By default, CloudNativePG creates three Kubernetes services for applications to access the cluster via the network: One pointing to the primary for read/write operations. One pointing to replicas for read-only queries. A generic one pointing to any instance for read operations. You can disable the read-only and read services via configuration. Additionally, you can leverage the service template capability to create custom service resources, including load balancers, to access PostgreSQL outside Kubernetes. This is particularly useful for DBaaS purposes.","title":"Service Configuration"},{"location":"operator_capability_levels/#database-configuration","text":"The operator is designed to bootstrap a PostgreSQL cluster with a single database. The operator transparently manages network access to the cluster through three Kubernetes services provisioned and managed for read-write, read, and read-only workloads. Using the convention-over-configuration approach, the operator creates a database called app , by default owned by a regular Postgres user with the same name. You can specify both the database name and the user name, if required, as part of the bootstrap. Additional databases can be created or managed via declarative database management using the Database CRD, also supporting extensions and schemas. Although no configuration is required to run the cluster, you can customize both PostgreSQL runtime configuration and PostgreSQL host-based authentication rules in the postgresql section of the CR.","title":"Database configuration"},{"location":"operator_capability_levels/#configuration-of-postgres-roles-users-and-groups","text":"CloudNativePG supports management of PostgreSQL roles, users, and groups through declarative configuration using the .spec.managed.roles stanza.","title":"Configuration of Postgres roles, users, and groups"},{"location":"operator_capability_levels/#pod-security-standards","text":"For InfoSec requirements, the operator doesn't require privileged mode for any container. It enforces a read-only root filesystem to guarantee containers immutability for both the operator and the operand pods. It also explicitly sets the required security contexts.","title":"Pod security standards"},{"location":"operator_capability_levels/#affinity","text":"The cluster's affinity section enables fine-tuning of how pods and related resources, such as persistent volumes, are scheduled across the nodes of a Kubernetes cluster. In particular, the operator supports: Pod affinity and anti-affinity Node selector Taints and tolerations","title":"Affinity"},{"location":"operator_capability_levels/#topology-spread-constraints","text":"The cluster's topologySpreadConstraints section enables additional control of scheduling pods across topologies, enhancing what affinity and anti-affinity can offer.","title":"Topology spread constraints"},{"location":"operator_capability_levels/#command-line-interface","text":"CloudNativePG doesn't have its own command-line interface. It relies on the best command-line interface for Kubernetes, kubectl, by providing a plugin called cnpg . This plugin enhances and simplifies your PostgreSQL cluster management experience.","title":"Command-line interface"},{"location":"operator_capability_levels/#current-status-of-the-cluster","text":"The operator continuously updates the status section of the CR with the observed status of the cluster. The entire PostgreSQL cluster status is continuously monitored by the instance manager running in each pod. The instance manager is responsible for applying the required changes to the controlled PostgreSQL instance to converge to the required status of the cluster. (For example, if the cluster status reports that pod -1 is the primary, pod -1 needs to promote itself while the other pods need to follow pod -1 .) The same status is used by the cnpg plugin for kubectl to provide details.","title":"Current status of the cluster"},{"location":"operator_capability_levels/#operators-certification-authority","text":"The operator creates a certification authority for itself. It creates and signs with the operator certification authority a leaf certificate for the webhook server to use. This certificate ensures safe communication between the Kubernetes API server and the operator.","title":"Operator's certification authority"},{"location":"operator_capability_levels/#clusters-certification-authority","text":"The operator creates a certification authority for every PostgreSQL cluster. This certification authority is used to issue and renew TLS certificates for clients' authentication, including streaming replication standby servers (instead of passwords). Support for a custom certification authority for client certificates is available through secrets, which also includes integration with cert-manager. Certificates can be issued with the cnpg plugin for kubectl.","title":"Cluster's certification authority"},{"location":"operator_capability_levels/#tls-connections","text":"The operator transparently and natively supports TLS/SSL connections to encrypt client/server communications for increased security using the cluster's certification authority. Support for custom server certificates is available through secrets, which also includes integration with cert-manager.","title":"TLS connections"},{"location":"operator_capability_levels/#certificate-authentication-for-streaming-replication","text":"To authorize streaming replication connections from the standby servers, the operator relies on TLS client certificate authentication. This method is used instead of relying on a password (and therefore a secret).","title":"Certificate authentication for streaming replication"},{"location":"operator_capability_levels/#continuous-configuration-management","text":"The operator enables you to apply changes to the Cluster resource YAML section of the PostgreSQL configuration. Depending on the configuration option, it also makes sure that all instances are properly reloaded or restarted. Note Changes with ALTER SYSTEM aren't detected, meaning that the cluster state isn't enforced.","title":"Continuous configuration management"},{"location":"operator_capability_levels/#import-of-existing-postgresql-databases","text":"The operator provides a declarative way to import existing Postgres databases in a new CloudNativePG cluster in Kubernetes, using offline migrations. The same feature also covers offline major upgrades of PostgreSQL databases. Offline means that applications must stop their write operations at the source until the database is imported. The feature extends the initdb bootstrap method to create a new PostgreSQL cluster using a logical snapshot of the data available in another PostgreSQL database. This data can be accessed by way of the network through a superuser connection. Import is from any supported version of Postgres. It relies on pg_dump and pg_restore being executed from the new cluster primary for all databases that are part of the operation and, if requested, for roles.","title":"Import of existing PostgreSQL databases"},{"location":"operator_capability_levels/#postgis-clusters","text":"CloudNativePG supports the installation of clusters with the PostGIS open source extension for geographical databases. This extension is one of the most popular extensions for PostgreSQL.","title":"PostGIS clusters"},{"location":"operator_capability_levels/#basic-ldap-authentication-for-postgresql","text":"The operator allows you to configure LDAP authentication for your PostgreSQL clients, using either the simple bind or search+bind mode, as described in the LDAP authentication section of the PostgreSQL documentation .","title":"Basic LDAP authentication for PostgreSQL"},{"location":"operator_capability_levels/#multiple-installation-methods","text":"The operator can be installed through a Kubernetes manifest by way of kubectl apply , to be used in a traditional Kubernetes installation in public and private cloud environments. CloudNativePG also supports installation by way of a Helm chart or OLM bundle from OperatorHub.io.","title":"Multiple installation methods"},{"location":"operator_capability_levels/#convention-over-configuration","text":"The operator supports the convention-over-configuration paradigm, deciding standard default values while allowing you to override them and customize them. You can specify a deployment of a PostgreSQL cluster using the Cluster CRD in a couple of lines of YAML code.","title":"Convention over configuration"},{"location":"operator_capability_levels/#level-2-seamless-upgrades","text":"Capability level 2 is about enabling updates of the operator and the actual workload, in this case PostgreSQL servers. This includes PostgreSQL minor release updates (security and bug fixes normally) as well as major online upgrades.","title":"Level 2: Seamless upgrades"},{"location":"operator_capability_levels/#operator-upgrade","text":"Upgrading the operator is seamless and can be done as a new deployment. After upgrading the controller, a rolling update of all deployed PostgreSQL clusters is initiated. You can choose to update all clusters simultaneously or distribute their upgrades over time. Thanks to the instance manager's injection, upgrading the operator does not require changes to the operand, allowing the operator to manage older versions of it. Additionally, CloudNativePG supports in-place updates of the instance manager following an operator upgrade. In-place updates do not require a rolling update or a subsequent switchover of the cluster.","title":"Operator Upgrade"},{"location":"operator_capability_levels/#upgrade-of-the-managed-workload","text":"The operand can be upgraded using a declarative configuration approach as part of changing the CR and, in particular, the imageName parameter. This is normally initiated by security updates or Postgres minor version updates. In the presence of standby servers, the operator performs rolling updates starting from the replicas. It does this by dropping the existing pod and creating a new one with the new requested operand image that reuses the underlying storage. Depending on the value of the primaryUpdateStrategy , the operator proceeds with a switchover before updating the former primary ( unsupervised ). Or, it waits for the user to manually issue the switchover procedure ( supervised ) by way of the cnpg plugin for kubectl. The setting to use depends on the business requirements, as the operation might generate some downtime for the applications. This downtime can range from a few seconds to minutes, based on the actual database workload.","title":"Upgrade of the managed workload"},{"location":"operator_capability_levels/#offline-in-place-major-upgrades-of-postgresql","text":"CloudNativePG supports declarative offline in-place major upgrades when a new operand container image with a higher PostgreSQL major version is applied to a cluster. The upgrade can be triggered by updating the image tag via the .spec.imageName option or by using an image catalog to manage version changes. During the upgrade, all cluster pods are shut down to ensure data consistency. A new job is then created to validate the upgrade conditions, execute pg_upgrade , and create new directories for PGDATA , WAL files, and tablespaces if needed. Once the upgrade is complete, replicas are re-created. Failed upgrades can be rolled back.","title":"Offline In-Place Major Upgrades of PostgreSQL"},{"location":"operator_capability_levels/#display-cluster-availability-status-during-upgrade","text":"At any time, convey the cluster's high availability status, for example, Setting up primary , Creating a new replica , Cluster in healthy state , Switchover in progress , Failing over , Upgrading cluster , and Upgrading Postgres major version .","title":"Display cluster availability status during upgrade"},{"location":"operator_capability_levels/#level-3-full-lifecycle","text":"Capability level 3 requires the operator to manage aspects of business continuity and scalability. Disaster recovery is a business continuity component that requires that both backup and recovery of a database work correctly. While as a starting point, the goal is to achieve RPO < 5 minutes, the long-term goal is to implement RPO=0 backup solutions. High availability is the other important component of business continuity. Through PostgreSQL native physical replication and hot standby replicas, it allows the operator to perform failover and switchover operations. This area includes enhancements in: Control of PostgreSQL physical replication, such as synchronous replication, (cascading) replication clusters, and so on Connection pooling, to improve performance and control through a connection pooling layer with pgBouncer","title":"Level 3: Full lifecycle"},{"location":"operator_capability_levels/#postgresql-wal-archive","text":"The operator supports PostgreSQL continuous archiving of WAL files to an object store (AWS S3 and S3-compatible, Azure Blob Storage, Google Cloud Storage, and gateways like MinIO). WAL archiving is defined at the cluster level, declaratively, through the backup parameter in the cluster definition. This is done by specifying an S3 protocol destination URL (for example, to point to a specific folder in an AWS S3 bucket) and, optionally, a generic endpoint URL. WAL archiving, a prerequisite for continuous backup, doesn't require any further user action. The operator transparently sets the archive_command to rely on barman-cloud-wal-archive to ship WAL files to the defined endpoint. You can decide the compression algorithm, as well as the number of parallel jobs to concurrently upload WAL files in the archive. In addition, Instance Manager checks the correctness of the archive destination by performing the barman-cloud-check-wal-archive command before beginning to ship the first set of WAL files.","title":"PostgreSQL WAL archive"},{"location":"operator_capability_levels/#postgresql-backups","text":"CloudNativePG provides a pluggable interface (CNPG-I) for managing application-level backups using PostgreSQL\u2019s native physical backup mechanisms\u2014namely base backups and continuous WAL archiving. This design enables flexibility and extensibility while ensuring consistency and performance. The CloudNativePG Community officially supports the Barman Cloud Plugin , which enables continuous physical backups to object stores, along with full and Point-In-Time Recovery (PITR) capabilities. In addition to CNPG-I plugins, CloudNativePG also natively supports backups using Kubernetes volume snapshots, when supported by the underlying storage class and CSI driver. You can initiate base backups in two ways: On-demand, using the Backup custom resource Scheduled, using the ScheduledBackup custom resource, with a cron-like schedule format Volume snapshots leverage the Kubernetes API and are particularly effective for very large databases (VLDBs) due to their speed and storage efficiency. Both volume snapshots and CNPG-I-based backups support: Hot backups: Taken while PostgreSQL is running, ensuring minimal disruption. Cold backups: Performed by temporarily stopping PostgreSQL to ensure a fully consistent snapshot, when required.","title":"PostgreSQL Backups"},{"location":"operator_capability_levels/#backups-from-a-standby","text":"The operator supports offloading base backups onto a standby without impacting the RPO of the database. This allows resources to be preserved on the primary, in particular I/O, for standard database operations.","title":"Backups from a standby"},{"location":"operator_capability_levels/#full-restore-from-a-backup","text":"The operator enables you to bootstrap a new cluster (with its settings) starting from an existing and accessible backup, either on a volume snapshot, or in an object store, or via a plugin. Once the bootstrap process is completed, the operator initiates the instance in recovery mode. It replays all available WAL files from the specified archive, exiting recovery and starting as a primary. Subsequently, the operator clones the requested number of standby instances from the primary. CloudNativePG supports parallel WAL fetching from the archive.","title":"Full restore from a backup"},{"location":"operator_capability_levels/#point-in-time-recovery-pitr-from-a-backup","text":"The operator enables you to create a new PostgreSQL cluster by recovering an existing backup to a specific point in time, defined with a timestamp, a label, or a transaction ID. This capability is built on top of the full restore one and supports all the options available in PostgreSQL for PITR .","title":"Point-in-time recovery (PITR) from a backup"},{"location":"operator_capability_levels/#zero-data-loss-clusters-through-synchronous-replication","text":"Achieve zero data loss (RPO=0) in your local high-availability CloudNativePG cluster with support for both quorum-based and priority-based synchronous replication. The operator offers a flexible way to define the number of expected synchronous standby replicas available at any time, and allows customization of the synchronous_standby_names option as needed.","title":"Zero-Data-Loss Clusters Through Synchronous Replication"},{"location":"operator_capability_levels/#replica-clusters","text":"Establish a robust cross-Kubernetes cluster topology for PostgreSQL clusters, harnessing the power of native streaming and cascading replication. With the replica option, you can configure an autonomous cluster to consistently replicate data from another PostgreSQL source of the same major version. This source can be located anywhere, provided you have access to a WAL archive for fetching WAL files or a direct streaming connection via TLS between the two endpoints. Notably, the source PostgreSQL instance can exist outside the Kubernetes environment, whether in a physical or virtual setting. Replica clusters can be instantiated through various methods, including volume snapshots, a recovery object store (using the Barman Cloud backup format), or streaming using pg_basebackup . Both WAL file shipping and WAL streaming are supported. The deployment of replica clusters significantly elevates the business continuity posture of PostgreSQL databases within Kubernetes, extending across multiple data centers and facilitating hybrid and multi-cloud setups. (While anticipating Kubernetes federation native capabilities, manual switchover across data centers remains necessary.) Additionally, the flexibility extends to creating delayed replica clusters intentionally lagging behind the primary cluster. This intentional lag aims to minimize the Recovery Time Objective ( RTO ) in the event of unintended errors, such as incorrect DELETE or UPDATE SQL operations.","title":"Replica clusters"},{"location":"operator_capability_levels/#distributed-database-topologies","text":"Leverage replica clusters to define distributed database topologies for PostgreSQL that span across various Kubernetes clusters, facilitating hybrid and multi-cloud deployments. With CloudNativePG, you gain powerful capabilities, including: Declarative Primary Control : Easily specify which PostgreSQL cluster acts as the primary. Seamless Primary Switchover : Effortlessly demote the current primary and promote another PostgreSQL cluster, typically located in a different region, without needing to re-clone the former primary. This setup can efficiently operate across two or more regions, can rely entirely on object stores for replication, and guarantees a maximum RPO (Recovery Point Objective) of 5 minutes. This advanced feature is uniquely provided by CloudNativePG, ensuring robust data integrity and continuity across diverse environments.","title":"Distributed Database Topologies"},{"location":"operator_capability_levels/#tablespace-support","text":"CloudNativePG seamlessly integrates robust support for PostgreSQL tablespaces by facilitating the declarative definition of individual persistent volumes. This innovative feature empowers you to efficiently distribute I/O operations across a diverse array of storage devices. Through the transparent orchestration of tablespaces, CloudNativePG enhances the performance and scalability of PostgreSQL databases, ensuring a streamlined and optimized experience for managing large scale data storage in cloud-native environments. Support for temporary tablespaces is also included.","title":"Tablespace support"},{"location":"operator_capability_levels/#customizable-startup-liveness-and-readiness-probes","text":"CloudNativePG configures startup, liveness, and readiness probes for PostgreSQL containers, which are managed by the Kubernetes kubelet. These probes interact with the /startupz , /healthz , and /readyz endpoints exposed by the instance manager's web server to monitor the Pod's health and readiness. All probes are configured with default settings but can be fully customized to meet specific needs, allowing for fine-tuning to align with your environment and workloads. For detailed configuration options and advanced usage, refer to the Postgres instance manager documentation.","title":"Customizable Startup, Liveness, and Readiness Probes"},{"location":"operator_capability_levels/#rolling-deployments","text":"The operator supports rolling deployments to minimize the downtime. If a PostgreSQL cluster is exposed publicly, the service load-balances the read-only traffic only to available pods during the initialization or the update.","title":"Rolling deployments"},{"location":"operator_capability_levels/#scale-up-and-down-of-replicas","text":"The operator allows you to scale up and down the number of instances in a PostgreSQL cluster. New replicas are started up from the primary server and participate in the cluster's HA infrastructure. The CRD declares a \"scale\" subresource that allows you to use the kubectl scale command.","title":"Scale up and down of replicas"},{"location":"operator_capability_levels/#maintenance-window-and-poddisruptionbudget-for-kubernetes-nodes","text":"The operator creates a PodDisruptionBudget resource to limit the number of concurrent disruptions to one primary instance. This configuration prevents the maintenance operation from deleting all the pods in a cluster, allowing the specified number of instances to be created. The PodDisruptionBudget is applied during the node-draining operation, preventing any disruption of the cluster service. While this strategy is correct for Kubernetes clusters where storage is shared among all the worker nodes, it might not be the best solution for clusters using local storage or for clusters installed in a private cloud. The operator allows you to specify a maintenance window and configure the reaction to any underlying node eviction. The ReusePVC option in the maintenance window section enables to specify the strategy to use. Allocate new storage in a different PVC for the evicted instance, or wait for the underlying node to be available again.","title":"Maintenance window and PodDisruptionBudget for Kubernetes nodes"},{"location":"operator_capability_levels/#fencing","text":"Fencing is the process of protecting the data in one, more, or even all instances of a PostgreSQL cluster when they appear to be malfunctioning. When an instance is fenced, the PostgreSQL server process is guaranteed to be shut down, while the pod is kept running. This ensures that, until the fence is lifted, data on the pod isn't modified by PostgreSQL and that you can investigate file system for debugging and troubleshooting purposes.","title":"Fencing"},{"location":"operator_capability_levels/#hibernation","text":"CloudNativePG supports hibernation of a running PostgreSQL cluster in a declarative manner, through the cnpg.io/hibernation annotation. Hibernation enables saving CPU power by removing the database pods while keeping the database PVCs. This feature simulates scaling to 0 instances.","title":"Hibernation"},{"location":"operator_capability_levels/#reuse-of-persistent-volumes-storage-in-pods","text":"When the operator needs to create a pod that was deleted by the user or was evicted by a Kubernetes maintenance operation, it reuses the PersistentVolumeClaim , if available. This ability avoids the need to clone the data from the primary again.","title":"Reuse of persistent volumes storage in pods"},{"location":"operator_capability_levels/#cpu-and-memory-requests-and-limits","text":"The operator allows administrators to control and manage resource usage by the cluster's pods in the resources section of the manifest. In particular, you can set requests and limits values for both CPU and RAM.","title":"CPU and memory requests and limits"},{"location":"operator_capability_levels/#connection-pooling-with-pgbouncer","text":"CloudNativePG provides native support for connection pooling with PgBouncer , one of the most popular open source connection poolers for PostgreSQL. From an architectural point of view, the native implementation of a PgBouncer connection pooler introduces a new layer to access the database. This optimizes the query flow toward the instances and makes the use of the underlying PostgreSQL resources more efficient. Instead of connecting directly to a PostgreSQL service, applications can now connect to the PgBouncer service and start reusing any existing connection.","title":"Connection pooling with PgBouncer"},{"location":"operator_capability_levels/#logical-replication","text":"CloudNativePG supports PostgreSQL's logical replication in a declarative manner using Publication and Subscription custom resource definitions. Logical replication is particularly useful together with the import facility for online data migrations (even from public DBaaS solutions) and major PostgreSQL upgrades.","title":"Logical Replication"},{"location":"operator_capability_levels/#level-4-deep-insights","text":"Capability level 4 is about observability : monitoring, alerting, trending, and log processing. This might involve the use of external tools, such as Prometheus, Grafana, and Fluent Bit, as well as extensions in the PostgreSQL engine for the output of error logs directly in JSON format. CloudNativePG was designed to provide everything needed to easily integrate with industry-standard and community-accepted tools for flexible monitoring and logging.","title":"Level 4: Deep insights"},{"location":"operator_capability_levels/#prometheus-exporter-with-configurable-queries","text":"The instance manager provides a pluggable framework. By way of its own web server listening on the metrics port (9187), it exposes an endpoint to export metrics for the Prometheus monitoring and alerting tool. The operator supports custom monitoring queries defined as ConfigMap or Secret objects using a syntax that's compatible with postgres_exporter for Prometheus . CloudNativePG provides a set of basic monitoring queries for PostgreSQL that can be integrated and adapted to your context.","title":"Prometheus exporter with configurable queries"},{"location":"operator_capability_levels/#grafana-dashboard","text":"CloudNativePG comes with a Grafana dashboard that you can use as a base to monitor all critical aspects of a PostgreSQL cluster, and customize.","title":"Grafana dashboard"},{"location":"operator_capability_levels/#standard-output-logging-of-postgresql-error-messages-in-json-format","text":"Every log message is delivered to standard output in JSON format. The first level is the definition of the timestamp, the log level, and the type of log entry, such as postgres for the canonical PostgreSQL error message channel. As a result, every pod managed by CloudNativePG can be easily and directly integrated with any downstream log processing stack that supports JSON as source data type.","title":"Standard output logging of PostgreSQL error messages in JSON format"},{"location":"operator_capability_levels/#real-time-query-monitoring","text":"CloudNativePG transparently and natively supports: The essential pg_stat_statements extension , which enables tracking of planning and execution statistics of all SQL statements executed by a PostgreSQL server The auto_explain extension , which provides a means for logging execution plans of slow statements automatically, without having to manually run EXPLAIN (helpful for tracking down un-optimized queries) The pg_failover_slots extension , which makes logical replication slots usable across a physical failover, ensuring resilience in change data capture (CDC) contexts based on PostgreSQL's native logical replication","title":"Real-time query monitoring"},{"location":"operator_capability_levels/#audit","text":"CloudNativePG allows database and security administrators, auditors, and operators to track and analyze database activities using PGAudit for PostgreSQL. Such activities flow directly in the JSON log and can be properly routed to the correct downstream target using common log brokers like Fluentd.","title":"Audit"},{"location":"operator_capability_levels/#kubernetes-events","text":"Record major events as expected by the Kubernetes API, such as creating resources, removing nodes, and upgrading. Events can be displayed by using the kubectl describe and kubectl get events commands.","title":"Kubernetes events"},{"location":"operator_capability_levels/#level-5-auto-pilot","text":"Capability level 5 is focused on automated scaling, healing, and tuning through the discovery of anomalies and insights that emerged from the observability layer.","title":"Level 5: Auto pilot"},{"location":"operator_capability_levels/#automated-failover-for-self-healing","text":"In case of detected failure on the primary, the operator changes the status of the cluster by setting the most aligned replica as the new target primary. As a consequence, the instance manager in each alive pod initiates the required procedures to align itself with the requested status of the cluster. It does this by either becoming the new primary or by following it. In case the former primary comes back up, the same mechanism avoids a split-brain by preventing applications from reaching it, running pg_rewind on the server and restarting it as a standby.","title":"Automated failover for self-healing"},{"location":"operator_capability_levels/#automated-recreation-of-a-standby","text":"If the pod hosting a standby is removed, the operator initiates the procedure to re-create a standby server.","title":"Automated recreation of a standby"},{"location":"operator_conf/","text":"Operator configuration The operator for CloudNativePG is installed from a standard deployment manifest and follows the convention over configuration paradigm. While this is fine in most cases, there are some scenarios where you want to change the default behavior, such as: defining annotations and labels to be inherited by all resources created by the operator and that are set in the cluster resource defining a different default image for PostgreSQL or an additional pull secret By default, the operator is installed in the cnpg-system namespace as a Kubernetes Deployment called cnpg-controller-manager . Note In the examples below we assume the default name and namespace for the operator deployment. The behavior of the operator can be customized through a ConfigMap / Secret that is located in the same namespace of the operator deployment and with cnpg-controller-manager-config as the name. Important Any change to the config's ConfigMap / Secret will not be automatically detected by the operator, - and as such, it needs to be reloaded (see below). Moreover, changes only apply to the resources created after the configuration is reloaded. Important The operator first processes the ConfigMap values and then the Secret\u2019s, in this order. As a result, if a parameter is defined in both places, the one in the Secret will be used. Available options The operator looks for the following environment variables to be defined in the ConfigMap / Secret : Name Description CERTIFICATE_DURATION Determines the lifetime of the generated certificates in days. Default is 90. CLUSTERS_ROLLOUT_DELAY The duration (in seconds) to wait between the roll-outs of different clusters during an operator upgrade. This setting controls the timing of upgrades across clusters, spreading them out to reduce system impact. The default value is 0 which means no delay between PostgreSQL cluster upgrades. CREATE_ANY_SERVICE When set to true , will create -any service for the cluster. Default is false ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES When set to true , enables in-place updates of the instance manager after an update of the operator, avoiding rolling updates of the cluster (default false ) EXPIRING_CHECK_THRESHOLD Determines the threshold, in days, for identifying a certificate as expiring. Default is 7. INCLUDE_PLUGINS A comma-separated list of plugins to be always included in the Cluster's reconciliation. INHERITED_ANNOTATIONS List of annotation names that, when defined in a Cluster metadata, will be inherited by all the generated resources, including pods INHERITED_LABELS List of label names that, when defined in a Cluster metadata, will be inherited by all the generated resources, including pods INSTANCES_ROLLOUT_DELAY The duration (in seconds) to wait between roll-outs of individual PostgreSQL instances within the same cluster during an operator upgrade. The default value is 0 , meaning no delay between upgrades of instances in the same PostgreSQL cluster. KUBERNETES_CLUSTER_DOMAIN Defines the domain suffix for service FQDNs within the Kubernetes cluster. If left unset, it defaults to \"cluster.local\". MONITORING_QUERIES_CONFIGMAP The name of a ConfigMap in the operator's namespace with a set of default queries (to be specified under the key queries ) to be applied to all created Clusters MONITORING_QUERIES_SECRET The name of a Secret in the operator's namespace with a set of default queries (to be specified under the key queries ) to be applied to all created Clusters OPERATOR_IMAGE_NAME The name of the operator image used to bootstrap Pods. Defaults to the image specified during installation. POSTGRES_IMAGE_NAME The name of the PostgreSQL image used by default for new clusters. Defaults to the version specified in the operator. PULL_SECRET_NAME Name of an additional pull secret to be defined in the operator's namespace and to be used to download images STANDBY_TCP_USER_TIMEOUT Defines the TCP_USER_TIMEOUT socket option for replication connections from standby instances to the primary. Default is 0 (system's default). DRAIN_TAINTS Specifies the taint keys that should be interpreted as indicators of node drain. By default, it includes the taints commonly applied by kubectl , Cluster Autoscaler , and Karpenter : node.kubernetes.io/unschedulable , ToBeDeletedByClusterAutoscaler , karpenter.sh/disrupted , karpenter.sh/disruption . Values in INHERITED_ANNOTATIONS and INHERITED_LABELS support path-like wildcards. For example, the value example.com/* will match both the value example.com/one and example.com/two . When you specify an additional pull secret name using the PULL_SECRET_NAME parameter, the operator will use that secret to create a pull secret for every created PostgreSQL cluster. That secret will be named <cluster-name>-pull . The namespace where the operator looks for the PULL_SECRET_NAME secret is where you installed the operator. If the operator is not able to find that secret, it will ignore the configuration parameter. Defining an operator config map The example below customizes the behavior of the operator, by defining the label/annotation names to be inherited by the resources created by any Cluster object that is deployed at a later time, by enabling in-place updates for the instance manager , and by spreading upgrades. apiVersion: v1 kind: ConfigMap metadata: name: cnpg-controller-manager-config namespace: cnpg-system data: CLUSTERS_ROLLOUT_DELAY: '60' ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true' INHERITED_ANNOTATIONS: categories INHERITED_LABELS: environment, workload, app INSTANCES_ROLLOUT_DELAY: '10' Defining an operator secret The example below customizes the behavior of the operator, by defining the label/annotation names to be inherited by the resources created by any Cluster object that is deployed at a later time, and by enabling in-place updates for the instance manager , and by spreading upgrades. apiVersion: v1 kind: Secret metadata: name: cnpg-controller-manager-config namespace: cnpg-system type: Opaque stringData: CLUSTERS_ROLLOUT_DELAY: '60' ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true' INHERITED_ANNOTATIONS: categories INHERITED_LABELS: environment, workload, app INSTANCES_ROLLOUT_DELAY: '10' Restarting the operator to reload configs For the change to be effective, you need to recreate the operator pods to reload the config map. If you have installed the operator on Kubernetes using the manifest you can do that by issuing: kubectl rollout restart deployment \\ -n cnpg-system \\ cnpg-controller-manager In general, given a specific namespace, you can delete the operator pods with the following command: kubectl delete pods -n [NAMESPACE_NAME_HERE] \\ -l app.kubernetes.io/name=cloudnative-pg Warning Customizations will be applied only to Cluster resources created after the reload of the operator deployment. Following the above example, if the Cluster definition contains a categories annotation and any of the environment , workload , or app labels, these will be inherited by all the resources generated by the deployment. pprof HTTP Server The operator can expose a PPROF HTTP server with the following endpoints on localhost:6060 : /debug/pprof/ . Responds to a request for \"/debug/pprof/\" with an HTML page listing the available profiles /debug/pprof/cmdline . Responds with the running program's command line, with arguments separated by NULL bytes. /debug/pprof/profile . Responds with the pprof-formatted cpu profile. Profiling lasts for duration specified in seconds GET parameter, or for 30 seconds if not specified. /debug/pprof/symbol . Looks up the program counters listed in the request, responding with a table mapping program counters to function names. /debug/pprof/trace . Responds with the execution trace in binary form. Tracing lasts for duration specified in seconds GET parameter, or for 1 second if not specified. To enable the operator you need to edit the operator deployment add the flag --pprof-server=true . You can do this by executing these commands: kubectl edit deployment -n cnpg-system cnpg-controller-manager Then on the edit page scroll down the container args and add --pprof-server=true , as in this example: containers: - args: - controller - --enable-leader-election - --config-map-name=cnpg-controller-manager-config - --secret-name=cnpg-controller-manager-config - --log-level=info - --pprof-server=true # relevant line command: - /manager Save the changes; the deployment now will execute a roll-out, and the new pod will have the PPROF server enabled. Once the pod is running you can exec inside the container by doing: kubectl exec -ti -n cnpg-system <pod name> -- bash Once inside execute: curl localhost:6060/debug/pprof/","title":"Operator configuration"},{"location":"operator_conf/#operator-configuration","text":"The operator for CloudNativePG is installed from a standard deployment manifest and follows the convention over configuration paradigm. While this is fine in most cases, there are some scenarios where you want to change the default behavior, such as: defining annotations and labels to be inherited by all resources created by the operator and that are set in the cluster resource defining a different default image for PostgreSQL or an additional pull secret By default, the operator is installed in the cnpg-system namespace as a Kubernetes Deployment called cnpg-controller-manager . Note In the examples below we assume the default name and namespace for the operator deployment. The behavior of the operator can be customized through a ConfigMap / Secret that is located in the same namespace of the operator deployment and with cnpg-controller-manager-config as the name. Important Any change to the config's ConfigMap / Secret will not be automatically detected by the operator, - and as such, it needs to be reloaded (see below). Moreover, changes only apply to the resources created after the configuration is reloaded. Important The operator first processes the ConfigMap values and then the Secret\u2019s, in this order. As a result, if a parameter is defined in both places, the one in the Secret will be used.","title":"Operator configuration"},{"location":"operator_conf/#available-options","text":"The operator looks for the following environment variables to be defined in the ConfigMap / Secret : Name Description CERTIFICATE_DURATION Determines the lifetime of the generated certificates in days. Default is 90. CLUSTERS_ROLLOUT_DELAY The duration (in seconds) to wait between the roll-outs of different clusters during an operator upgrade. This setting controls the timing of upgrades across clusters, spreading them out to reduce system impact. The default value is 0 which means no delay between PostgreSQL cluster upgrades. CREATE_ANY_SERVICE When set to true , will create -any service for the cluster. Default is false ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES When set to true , enables in-place updates of the instance manager after an update of the operator, avoiding rolling updates of the cluster (default false ) EXPIRING_CHECK_THRESHOLD Determines the threshold, in days, for identifying a certificate as expiring. Default is 7. INCLUDE_PLUGINS A comma-separated list of plugins to be always included in the Cluster's reconciliation. INHERITED_ANNOTATIONS List of annotation names that, when defined in a Cluster metadata, will be inherited by all the generated resources, including pods INHERITED_LABELS List of label names that, when defined in a Cluster metadata, will be inherited by all the generated resources, including pods INSTANCES_ROLLOUT_DELAY The duration (in seconds) to wait between roll-outs of individual PostgreSQL instances within the same cluster during an operator upgrade. The default value is 0 , meaning no delay between upgrades of instances in the same PostgreSQL cluster. KUBERNETES_CLUSTER_DOMAIN Defines the domain suffix for service FQDNs within the Kubernetes cluster. If left unset, it defaults to \"cluster.local\". MONITORING_QUERIES_CONFIGMAP The name of a ConfigMap in the operator's namespace with a set of default queries (to be specified under the key queries ) to be applied to all created Clusters MONITORING_QUERIES_SECRET The name of a Secret in the operator's namespace with a set of default queries (to be specified under the key queries ) to be applied to all created Clusters OPERATOR_IMAGE_NAME The name of the operator image used to bootstrap Pods. Defaults to the image specified during installation. POSTGRES_IMAGE_NAME The name of the PostgreSQL image used by default for new clusters. Defaults to the version specified in the operator. PULL_SECRET_NAME Name of an additional pull secret to be defined in the operator's namespace and to be used to download images STANDBY_TCP_USER_TIMEOUT Defines the TCP_USER_TIMEOUT socket option for replication connections from standby instances to the primary. Default is 0 (system's default). DRAIN_TAINTS Specifies the taint keys that should be interpreted as indicators of node drain. By default, it includes the taints commonly applied by kubectl , Cluster Autoscaler , and Karpenter : node.kubernetes.io/unschedulable , ToBeDeletedByClusterAutoscaler , karpenter.sh/disrupted , karpenter.sh/disruption . Values in INHERITED_ANNOTATIONS and INHERITED_LABELS support path-like wildcards. For example, the value example.com/* will match both the value example.com/one and example.com/two . When you specify an additional pull secret name using the PULL_SECRET_NAME parameter, the operator will use that secret to create a pull secret for every created PostgreSQL cluster. That secret will be named <cluster-name>-pull . The namespace where the operator looks for the PULL_SECRET_NAME secret is where you installed the operator. If the operator is not able to find that secret, it will ignore the configuration parameter.","title":"Available options"},{"location":"operator_conf/#defining-an-operator-config-map","text":"The example below customizes the behavior of the operator, by defining the label/annotation names to be inherited by the resources created by any Cluster object that is deployed at a later time, by enabling in-place updates for the instance manager , and by spreading upgrades. apiVersion: v1 kind: ConfigMap metadata: name: cnpg-controller-manager-config namespace: cnpg-system data: CLUSTERS_ROLLOUT_DELAY: '60' ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true' INHERITED_ANNOTATIONS: categories INHERITED_LABELS: environment, workload, app INSTANCES_ROLLOUT_DELAY: '10'","title":"Defining an operator config map"},{"location":"operator_conf/#defining-an-operator-secret","text":"The example below customizes the behavior of the operator, by defining the label/annotation names to be inherited by the resources created by any Cluster object that is deployed at a later time, and by enabling in-place updates for the instance manager , and by spreading upgrades. apiVersion: v1 kind: Secret metadata: name: cnpg-controller-manager-config namespace: cnpg-system type: Opaque stringData: CLUSTERS_ROLLOUT_DELAY: '60' ENABLE_INSTANCE_MANAGER_INPLACE_UPDATES: 'true' INHERITED_ANNOTATIONS: categories INHERITED_LABELS: environment, workload, app INSTANCES_ROLLOUT_DELAY: '10'","title":"Defining an operator secret"},{"location":"operator_conf/#restarting-the-operator-to-reload-configs","text":"For the change to be effective, you need to recreate the operator pods to reload the config map. If you have installed the operator on Kubernetes using the manifest you can do that by issuing: kubectl rollout restart deployment \\ -n cnpg-system \\ cnpg-controller-manager In general, given a specific namespace, you can delete the operator pods with the following command: kubectl delete pods -n [NAMESPACE_NAME_HERE] \\ -l app.kubernetes.io/name=cloudnative-pg Warning Customizations will be applied only to Cluster resources created after the reload of the operator deployment. Following the above example, if the Cluster definition contains a categories annotation and any of the environment , workload , or app labels, these will be inherited by all the resources generated by the deployment.","title":"Restarting the operator to reload configs"},{"location":"operator_conf/#pprof-http-server","text":"The operator can expose a PPROF HTTP server with the following endpoints on localhost:6060 : /debug/pprof/ . Responds to a request for \"/debug/pprof/\" with an HTML page listing the available profiles /debug/pprof/cmdline . Responds with the running program's command line, with arguments separated by NULL bytes. /debug/pprof/profile . Responds with the pprof-formatted cpu profile. Profiling lasts for duration specified in seconds GET parameter, or for 30 seconds if not specified. /debug/pprof/symbol . Looks up the program counters listed in the request, responding with a table mapping program counters to function names. /debug/pprof/trace . Responds with the execution trace in binary form. Tracing lasts for duration specified in seconds GET parameter, or for 1 second if not specified. To enable the operator you need to edit the operator deployment add the flag --pprof-server=true . You can do this by executing these commands: kubectl edit deployment -n cnpg-system cnpg-controller-manager Then on the edit page scroll down the container args and add --pprof-server=true , as in this example: containers: - args: - controller - --enable-leader-election - --config-map-name=cnpg-controller-manager-config - --secret-name=cnpg-controller-manager-config - --log-level=info - --pprof-server=true # relevant line command: - /manager Save the changes; the deployment now will execute a roll-out, and the new pod will have the PPROF server enabled. Once the pod is running you can exec inside the container by doing: kubectl exec -ti -n cnpg-system <pod name> -- bash Once inside execute: curl localhost:6060/debug/pprof/","title":"pprof HTTP Server"},{"location":"postgis/","text":"PostGIS PostGIS is a very popular open source extension for PostgreSQL that introduces support for storing GIS (Geographic Information Systems) objects in the database and be queried via SQL. Important This section assumes you are familiar with PostGIS and provides some basic information about how to create a new PostgreSQL cluster with a PostGIS database in Kubernetes via CloudNativePG. The CloudNativePG Community maintains container images that are built on top of the official PostGIS images hosted on DockerHub . For more information please visit: The postgis-containers project in GitHub The postgis-containers Container Registry in GitHub Basic concepts about a PostGIS cluster Conceptually, a PostGIS-based PostgreSQL cluster (or simply a PostGIS cluster) is like any other PostgreSQL cluster. The only differences are: the presence in the system of PostGIS and related libraries the presence in the database(s) of the PostGIS extension Since CloudNativePG is based on Immutable Application Containers, the only way to provision PostGIS is to add it to the container image that you use for the operand. The \"Container Image Requirements\" section provides detailed instructions on how this is achieved. More simply, you can just use the PostGIS container images from the Community, as in the examples below. The second step is to install the extension in the PostgreSQL database. You can do this in two ways: install it in the application database, which is the main and supposedly only database you host in the cluster according to the microservice architecture, or install it in the template1 database so as to make it available for all the databases you end up creating in the cluster, in case you adopt the monolith architecture where the instance is shared by multiple databases Info For more information on the microservice vs monolith architecture in the database please refer to the \"How many databases should be hosted in a single PostgreSQL instance?\" FAQ or the \"Database import\" section . Create a new PostgreSQL cluster with PostGIS Let's suppose you want to create a new PostgreSQL 17 cluster with PostGIS 3.2. The first step is to ensure you use the right PostGIS container image for the operand, and properly set the .spec.imageName option in the Cluster resource. The postgis-example.yaml manifest below provides some guidance on how the creation of a PostGIS cluster can be done. Warning Please consider that, although convention over configuration applies in CloudNativePG, you should spend time configuring and tuning your system for production. Also the imageName in the example below deliberately points to the latest available image for PostgreSQL 17 - you should use a specific image name or, preferably, the SHA256 digest for true immutability. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgis-example spec: instances: 1 imageName: ghcr.io/cloudnative-pg/postgis:17 storage: size: 1Gi postgresql: parameters: log_statement: ddl --- apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: postgis-example-app spec: name: app owner: app cluster: name: postgis-example extensions: - name: postgis - name: postgis_topology - name: fuzzystrmatch - name: postgis_tiger_geocoder The example leverages the Database resource's declarative extension management to add the specified extensions to the app database. Info For more details, see the \"Managing Extensions in a Database\" section . You can easily verify the available version of PostGIS that is in the container, by connecting to the app database (you might obtain different values from the ones in this document): $ kubectl cnpg psql postgis-example -- app psql (17.5 (Debian 17.5-1.pgdg110+2)) Type \"help\" for help. app=# SELECT * FROM pg_available_extensions WHERE name ~ '^postgis' ORDER BY 1; name | default_version | installed_version | comment --------------------------+-----------------+-------------------+------------------------------------------------------------ postgis | 3.5.2 | 3.5.2 | PostGIS geometry and geography spatial types and functions postgis-3 | 3.5.2 | | PostGIS geometry and geography spatial types and functions postgis_raster | 3.5.2 | | PostGIS raster types and functions postgis_raster-3 | 3.5.2 | | PostGIS raster types and functions postgis_sfcgal | 3.5.2 | | PostGIS SFCGAL functions postgis_sfcgal-3 | 3.5.2 | | PostGIS SFCGAL functions postgis_tiger_geocoder | 3.5.2 | 3.5.2 | PostGIS tiger geocoder and reverse geocoder postgis_tiger_geocoder-3 | 3.5.2 | | PostGIS tiger geocoder and reverse geocoder postgis_topology | 3.5.2 | 3.5.2 | PostGIS topology spatial types and functions postgis_topology-3 | 3.5.2 | | PostGIS topology spatial types and functions (10 rows) The next step is to verify that the extensions listed in the Database resource have been correctly installed in the app database. app=# \\dx List of installed extensions Name | Version | Schema | Description ------------------------+---------+------------+------------------------------------------------------------ fuzzystrmatch | 1.2 | public | determine similarities and distance between strings plpgsql | 1.0 | pg_catalog | PL/pgSQL procedural language postgis | 3.5.2 | public | PostGIS geometry and geography spatial types and functions postgis_tiger_geocoder | 3.5.2 | tiger | PostGIS tiger geocoder and reverse geocoder postgis_topology | 3.5.2 | topology | PostGIS topology spatial types and functions (5 rows) Finally: app=# SELECT postgis_full_version(); postgis_full_version ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- POSTGIS=\"3.5.2 dea6d0a\" [EXTENSION] PGSQL=\"170\" GEOS=\"3.9.0-CAPI-1.16.2\" PROJ=\"7.2.1 NETWORK_ENABLED=OFF URL_ENDPOINT=https://cdn.proj.org USER_WRITABLE_DIRECTORY=/tmp/proj DATABASE_PATH=/usr/share/proj/proj.db\" (compiled against PROJ 7.2.1) LIBXML=\"2.9.10\" LIBJSON=\"0.15\" LIBPROTOBUF=\"1.3.3\" WAGYU=\"0.5.0 (Internal)\" TOPOLOGY (1 row)","title":"PostGIS"},{"location":"postgis/#postgis","text":"PostGIS is a very popular open source extension for PostgreSQL that introduces support for storing GIS (Geographic Information Systems) objects in the database and be queried via SQL. Important This section assumes you are familiar with PostGIS and provides some basic information about how to create a new PostgreSQL cluster with a PostGIS database in Kubernetes via CloudNativePG. The CloudNativePG Community maintains container images that are built on top of the official PostGIS images hosted on DockerHub . For more information please visit: The postgis-containers project in GitHub The postgis-containers Container Registry in GitHub","title":"PostGIS"},{"location":"postgis/#basic-concepts-about-a-postgis-cluster","text":"Conceptually, a PostGIS-based PostgreSQL cluster (or simply a PostGIS cluster) is like any other PostgreSQL cluster. The only differences are: the presence in the system of PostGIS and related libraries the presence in the database(s) of the PostGIS extension Since CloudNativePG is based on Immutable Application Containers, the only way to provision PostGIS is to add it to the container image that you use for the operand. The \"Container Image Requirements\" section provides detailed instructions on how this is achieved. More simply, you can just use the PostGIS container images from the Community, as in the examples below. The second step is to install the extension in the PostgreSQL database. You can do this in two ways: install it in the application database, which is the main and supposedly only database you host in the cluster according to the microservice architecture, or install it in the template1 database so as to make it available for all the databases you end up creating in the cluster, in case you adopt the monolith architecture where the instance is shared by multiple databases Info For more information on the microservice vs monolith architecture in the database please refer to the \"How many databases should be hosted in a single PostgreSQL instance?\" FAQ or the \"Database import\" section .","title":"Basic concepts about a PostGIS cluster"},{"location":"postgis/#create-a-new-postgresql-cluster-with-postgis","text":"Let's suppose you want to create a new PostgreSQL 17 cluster with PostGIS 3.2. The first step is to ensure you use the right PostGIS container image for the operand, and properly set the .spec.imageName option in the Cluster resource. The postgis-example.yaml manifest below provides some guidance on how the creation of a PostGIS cluster can be done. Warning Please consider that, although convention over configuration applies in CloudNativePG, you should spend time configuring and tuning your system for production. Also the imageName in the example below deliberately points to the latest available image for PostgreSQL 17 - you should use a specific image name or, preferably, the SHA256 digest for true immutability. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgis-example spec: instances: 1 imageName: ghcr.io/cloudnative-pg/postgis:17 storage: size: 1Gi postgresql: parameters: log_statement: ddl --- apiVersion: postgresql.cnpg.io/v1 kind: Database metadata: name: postgis-example-app spec: name: app owner: app cluster: name: postgis-example extensions: - name: postgis - name: postgis_topology - name: fuzzystrmatch - name: postgis_tiger_geocoder The example leverages the Database resource's declarative extension management to add the specified extensions to the app database. Info For more details, see the \"Managing Extensions in a Database\" section . You can easily verify the available version of PostGIS that is in the container, by connecting to the app database (you might obtain different values from the ones in this document): $ kubectl cnpg psql postgis-example -- app psql (17.5 (Debian 17.5-1.pgdg110+2)) Type \"help\" for help. app=# SELECT * FROM pg_available_extensions WHERE name ~ '^postgis' ORDER BY 1; name | default_version | installed_version | comment --------------------------+-----------------+-------------------+------------------------------------------------------------ postgis | 3.5.2 | 3.5.2 | PostGIS geometry and geography spatial types and functions postgis-3 | 3.5.2 | | PostGIS geometry and geography spatial types and functions postgis_raster | 3.5.2 | | PostGIS raster types and functions postgis_raster-3 | 3.5.2 | | PostGIS raster types and functions postgis_sfcgal | 3.5.2 | | PostGIS SFCGAL functions postgis_sfcgal-3 | 3.5.2 | | PostGIS SFCGAL functions postgis_tiger_geocoder | 3.5.2 | 3.5.2 | PostGIS tiger geocoder and reverse geocoder postgis_tiger_geocoder-3 | 3.5.2 | | PostGIS tiger geocoder and reverse geocoder postgis_topology | 3.5.2 | 3.5.2 | PostGIS topology spatial types and functions postgis_topology-3 | 3.5.2 | | PostGIS topology spatial types and functions (10 rows) The next step is to verify that the extensions listed in the Database resource have been correctly installed in the app database. app=# \\dx List of installed extensions Name | Version | Schema | Description ------------------------+---------+------------+------------------------------------------------------------ fuzzystrmatch | 1.2 | public | determine similarities and distance between strings plpgsql | 1.0 | pg_catalog | PL/pgSQL procedural language postgis | 3.5.2 | public | PostGIS geometry and geography spatial types and functions postgis_tiger_geocoder | 3.5.2 | tiger | PostGIS tiger geocoder and reverse geocoder postgis_topology | 3.5.2 | topology | PostGIS topology spatial types and functions (5 rows) Finally: app=# SELECT postgis_full_version(); postgis_full_version ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- POSTGIS=\"3.5.2 dea6d0a\" [EXTENSION] PGSQL=\"170\" GEOS=\"3.9.0-CAPI-1.16.2\" PROJ=\"7.2.1 NETWORK_ENABLED=OFF URL_ENDPOINT=https://cdn.proj.org USER_WRITABLE_DIRECTORY=/tmp/proj DATABASE_PATH=/usr/share/proj/proj.db\" (compiled against PROJ 7.2.1) LIBXML=\"2.9.10\" LIBJSON=\"0.15\" LIBPROTOBUF=\"1.3.3\" WAGYU=\"0.5.0 (Internal)\" TOPOLOGY (1 row)","title":"Create a new PostgreSQL cluster with PostGIS"},{"location":"postgres_upgrades/","text":"PostgreSQL Upgrades PostgreSQL upgrades fall into two categories: Minor version upgrades (e.g., from 17.0 to 17.1) Major version upgrades (e.g., from 16.x to 17.0) Minor Version Upgrades PostgreSQL version numbers follow a major.minor format. For instance, in version 17.1: 17 is the major version 1 is the minor version Minor releases are fully compatible with earlier and later minor releases of the same major version. They include bug fixes and security updates but do not introduce changes to the internal storage format. For example, PostgreSQL 17.1 is compatible with 17.0 and 17.5. Upgrading a Minor Version in CloudNativePG To upgrade to a newer minor version, simply update the PostgreSQL container image reference in your cluster definition, either directly or via image catalogs. CloudNativePG will trigger a rolling update of the cluster , replacing each instance one by one, starting with the replicas. Once all replicas have been updated, it will perform either a switchover or a restart of the primary to complete the process. Major Version Upgrades Major PostgreSQL releases introduce changes to the internal data storage format, requiring a more structured upgrade process. CloudNativePG supports three methods for performing major upgrades: Logical dump/restore \u2013 Blue/green deployment, offline. Native logical replication \u2013 Blue/green deployment, online. Physical with pg_upgrade \u2013 In-place upgrade, offline (covered in the \"Offline In-Place Major Upgrades\" section below). Each method has trade-offs in terms of downtime, complexity, and data volume handling. The best approach depends on your upgrade strategy and operational constraints. Important We strongly recommend testing all methods in a controlled environment before proceeding with a production upgrade. Offline In-Place Major Upgrades CloudNativePG performs an offline in-place major upgrade when a new operand container image with a higher PostgreSQL major version is declaratively requested for a cluster. Important Major upgrades are only supported between images based on the same operating system distribution. For example, if your previous version uses a bullseye image, you cannot upgrade to a bookworm image. Warning There is a bug in PostgreSQL 17.0 through 17.5 that prevents successful upgrades if the max_slot_wal_keep_size parameter is set to any value other than -1 . The upgrade process will fail with an error related to replication slot configuration. This issue has been fixed in PostgreSQL 17.6 and 18beta2 or later versions . If you are using PostgreSQL 17.0 through 17.5, ensure that you upgrade to at least PostgreSQL 17.6 before attempting a major upgrade, or make sure to temporarily set the max_slot_wal_keep_size parameter to -1 in your cluster configuration. You can trigger the upgrade in one of two ways: By updating the major version in the image tag via the .spec.imageName option. Using an image catalog to manage version changes. For details on supported image tags, see \"Image Tag Requirements\" . Warning CloudNativePG is not responsible for PostgreSQL extensions. You must ensure that extensions in the source PostgreSQL image are compatible with those in the target image and that upgrade paths are supported. Thoroughly test the upgrade process in advance to avoid unexpected issues. The extensions management feature can help manage extension upgrades declaratively. Upgrade Process Shuts down all cluster pods to ensure data consistency. Records the previous PostgreSQL version and image in the cluster\u2019s status under .status.pgDataImageInfo . Initiates a new upgrade job, which: Verifies that the binaries in the image and the data files align with a major upgrade request. Creates new directories for PGDATA , and where applicable, WAL files and tablespaces. Performs the upgrade using pg_upgrade with the --link option. Upon successful completion, replaces the original directories with their upgraded counterparts. Warning During the upgrade process, the entire PostgreSQL cluster, including replicas, is unavailable to applications. Ensure that your system can tolerate this downtime before proceeding. Warning Performing an in-place upgrade is an exceptional operation that carries inherent risks. It is strongly recommended to take a full backup of the cluster before initiating the upgrade process. Info For detailed guidance on pg_upgrade , refer to the official PostgreSQL documentation . Post-Upgrade Actions If the upgrade is successful, CloudNativePG: Destroys the PVCs of replicas (if available). Scales up replicas as required. Warning Re-cloning replicas can be time-consuming, especially for very large databases. Plan accordingly to accommodate potential delays. After completing the upgrade, it is strongly recommended to take a full backup. Existing backup data (namely base backups and WAL files) is only available for the previous minor PostgreSQL release. Warning pg_upgrade doesn't transfer optimizer statistics. After the upgrade, you may want to run ANALYZE on your databases to update them. If the upgrade fails, you must manually revert the major version change in the cluster's configuration and delete the upgrade job, as CloudNativePG cannot automatically decide the rollback. Important This process protects your existing database from data loss , as no data is modified during the upgrade. If the upgrade fails, a rollback is usually possible, without having to perform a full recovery from a backup. Ensure you monitor the process closely and take corrective action if needed. Example: Performing a Major Upgrade Consider the following PostgreSQL cluster running version 16: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: imageName: ghcr.io/cloudnative-pg/postgresql:16-minimal-bookworm instances: 3 storage: size: 1Gi You can check the current PostgreSQL version using the following command: kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()' This will return output similar to: PostgreSQL 16.x ... To upgrade the cluster to version 17, update the imageName field by changing the major version tag from 16 to 17 : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: imageName: ghcr.io/cloudnative-pg/postgresql:17-minimal-bookworm instances: 3 storage: size: 1Gi Upgrade Process Cluster shutdown \u2013 All cluster pods are terminated to ensure a consistent upgrade. Upgrade job execution \u2013 A new job is created with the name of the primary pod, appended with the suffix -major-upgrade . This job runs pg_upgrade on the primary\u2019s persistent volume group. Post-upgrade steps: The PVC groups of the replicas ( cluster-example-2 and cluster-example-3 ) are removed. The primary pod is restarted. Two new replicas ( cluster-example-4 and cluster-example-5 ) are re-cloned from the upgraded primary. Once the upgrade is complete, you can verify the new major version by running the same command: kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()' This should now return output similar to: PostgreSQL 17.x ... You can now update the statistics by running ANALYZE on the app database: kubectl cnpg psql cluster-example -- app -c 'ANALYZE'","title":"PostgreSQL Upgrades"},{"location":"postgres_upgrades/#postgresql-upgrades","text":"PostgreSQL upgrades fall into two categories: Minor version upgrades (e.g., from 17.0 to 17.1) Major version upgrades (e.g., from 16.x to 17.0)","title":"PostgreSQL Upgrades"},{"location":"postgres_upgrades/#minor-version-upgrades","text":"PostgreSQL version numbers follow a major.minor format. For instance, in version 17.1: 17 is the major version 1 is the minor version Minor releases are fully compatible with earlier and later minor releases of the same major version. They include bug fixes and security updates but do not introduce changes to the internal storage format. For example, PostgreSQL 17.1 is compatible with 17.0 and 17.5.","title":"Minor Version Upgrades"},{"location":"postgres_upgrades/#upgrading-a-minor-version-in-cloudnativepg","text":"To upgrade to a newer minor version, simply update the PostgreSQL container image reference in your cluster definition, either directly or via image catalogs. CloudNativePG will trigger a rolling update of the cluster , replacing each instance one by one, starting with the replicas. Once all replicas have been updated, it will perform either a switchover or a restart of the primary to complete the process.","title":"Upgrading a Minor Version in CloudNativePG"},{"location":"postgres_upgrades/#major-version-upgrades","text":"Major PostgreSQL releases introduce changes to the internal data storage format, requiring a more structured upgrade process. CloudNativePG supports three methods for performing major upgrades: Logical dump/restore \u2013 Blue/green deployment, offline. Native logical replication \u2013 Blue/green deployment, online. Physical with pg_upgrade \u2013 In-place upgrade, offline (covered in the \"Offline In-Place Major Upgrades\" section below). Each method has trade-offs in terms of downtime, complexity, and data volume handling. The best approach depends on your upgrade strategy and operational constraints. Important We strongly recommend testing all methods in a controlled environment before proceeding with a production upgrade.","title":"Major Version Upgrades"},{"location":"postgres_upgrades/#offline-in-place-major-upgrades","text":"CloudNativePG performs an offline in-place major upgrade when a new operand container image with a higher PostgreSQL major version is declaratively requested for a cluster. Important Major upgrades are only supported between images based on the same operating system distribution. For example, if your previous version uses a bullseye image, you cannot upgrade to a bookworm image. Warning There is a bug in PostgreSQL 17.0 through 17.5 that prevents successful upgrades if the max_slot_wal_keep_size parameter is set to any value other than -1 . The upgrade process will fail with an error related to replication slot configuration. This issue has been fixed in PostgreSQL 17.6 and 18beta2 or later versions . If you are using PostgreSQL 17.0 through 17.5, ensure that you upgrade to at least PostgreSQL 17.6 before attempting a major upgrade, or make sure to temporarily set the max_slot_wal_keep_size parameter to -1 in your cluster configuration. You can trigger the upgrade in one of two ways: By updating the major version in the image tag via the .spec.imageName option. Using an image catalog to manage version changes. For details on supported image tags, see \"Image Tag Requirements\" . Warning CloudNativePG is not responsible for PostgreSQL extensions. You must ensure that extensions in the source PostgreSQL image are compatible with those in the target image and that upgrade paths are supported. Thoroughly test the upgrade process in advance to avoid unexpected issues. The extensions management feature can help manage extension upgrades declaratively.","title":"Offline In-Place Major Upgrades"},{"location":"postgres_upgrades/#upgrade-process","text":"Shuts down all cluster pods to ensure data consistency. Records the previous PostgreSQL version and image in the cluster\u2019s status under .status.pgDataImageInfo . Initiates a new upgrade job, which: Verifies that the binaries in the image and the data files align with a major upgrade request. Creates new directories for PGDATA , and where applicable, WAL files and tablespaces. Performs the upgrade using pg_upgrade with the --link option. Upon successful completion, replaces the original directories with their upgraded counterparts. Warning During the upgrade process, the entire PostgreSQL cluster, including replicas, is unavailable to applications. Ensure that your system can tolerate this downtime before proceeding. Warning Performing an in-place upgrade is an exceptional operation that carries inherent risks. It is strongly recommended to take a full backup of the cluster before initiating the upgrade process. Info For detailed guidance on pg_upgrade , refer to the official PostgreSQL documentation .","title":"Upgrade Process"},{"location":"postgres_upgrades/#post-upgrade-actions","text":"If the upgrade is successful, CloudNativePG: Destroys the PVCs of replicas (if available). Scales up replicas as required. Warning Re-cloning replicas can be time-consuming, especially for very large databases. Plan accordingly to accommodate potential delays. After completing the upgrade, it is strongly recommended to take a full backup. Existing backup data (namely base backups and WAL files) is only available for the previous minor PostgreSQL release. Warning pg_upgrade doesn't transfer optimizer statistics. After the upgrade, you may want to run ANALYZE on your databases to update them. If the upgrade fails, you must manually revert the major version change in the cluster's configuration and delete the upgrade job, as CloudNativePG cannot automatically decide the rollback. Important This process protects your existing database from data loss , as no data is modified during the upgrade. If the upgrade fails, a rollback is usually possible, without having to perform a full recovery from a backup. Ensure you monitor the process closely and take corrective action if needed.","title":"Post-Upgrade Actions"},{"location":"postgres_upgrades/#example-performing-a-major-upgrade","text":"Consider the following PostgreSQL cluster running version 16: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: imageName: ghcr.io/cloudnative-pg/postgresql:16-minimal-bookworm instances: 3 storage: size: 1Gi You can check the current PostgreSQL version using the following command: kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()' This will return output similar to: PostgreSQL 16.x ... To upgrade the cluster to version 17, update the imageName field by changing the major version tag from 16 to 17 : apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: imageName: ghcr.io/cloudnative-pg/postgresql:17-minimal-bookworm instances: 3 storage: size: 1Gi","title":"Example: Performing a Major Upgrade"},{"location":"postgres_upgrades/#upgrade-process_1","text":"Cluster shutdown \u2013 All cluster pods are terminated to ensure a consistent upgrade. Upgrade job execution \u2013 A new job is created with the name of the primary pod, appended with the suffix -major-upgrade . This job runs pg_upgrade on the primary\u2019s persistent volume group. Post-upgrade steps: The PVC groups of the replicas ( cluster-example-2 and cluster-example-3 ) are removed. The primary pod is restarted. Two new replicas ( cluster-example-4 and cluster-example-5 ) are re-cloned from the upgraded primary. Once the upgrade is complete, you can verify the new major version by running the same command: kubectl cnpg psql cluster-example -- -qAt -c 'SELECT version()' This should now return output similar to: PostgreSQL 17.x ... You can now update the statistics by running ANALYZE on the app database: kubectl cnpg psql cluster-example -- app -c 'ANALYZE'","title":"Upgrade Process"},{"location":"postgresql_conf/","text":"PostgreSQL Configuration Users that are familiar with PostgreSQL are aware of the existence of the following three files to configure an instance: postgresql.conf : main run-time configuration file of PostgreSQL pg_hba.conf : clients authentication file pg_ident.conf : map external users to internal users Due to the concepts of declarative configuration and immutability of the PostgreSQL containers, users are not allowed to directly touch those files. Configuration is possible through the postgresql section of the Cluster resource definition by defining custom postgresql.conf , pg_hba.conf , and pg_ident.conf settings via the parameters , the pg_hba , and the pg_ident keys. These settings are the same across all instances. Warning Please don't use the ALTER SYSTEM query to change the configuration of the PostgreSQL instances in an imperative way. Changing some of the options that are normally controlled by the operator might indeed lead to an unpredictable/unrecoverable state of the cluster. Moreover, ALTER SYSTEM changes are not replicated across the cluster. See \"Enabling ALTER SYSTEM\" below for details. A reference for custom settings usage is included in the samples, see cluster-example-custom.yaml . The postgresql section The PostgreSQL instance in the pod starts with a default postgresql.conf file, to which these settings are automatically added: listen_addresses = '*' include custom.conf The custom.conf file will contain the user-defined settings in the postgresql section, as in the following example: # ... postgresql: parameters: shared_buffers: \"1GB\" # ... PostgreSQL GUCs: Grand Unified Configuration Refer to the PostgreSQL documentation for more information on the available parameters , also known as GUC (Grand Unified Configuration). Please note that CloudNativePG accepts only strings for the PostgreSQL parameters. The content of custom.conf is automatically generated and maintained by the operator by applying the following sections in this order: Global default parameters Default parameters that depend on the PostgreSQL major version User-provided parameters Fixed parameters The global default parameters are: archive_timeout = '5min' dynamic_shared_memory_type = 'posix' full_page_writes = 'on' logging_collector = 'on' log_destination = 'csvlog' log_directory = '/controller/log' log_filename = 'postgres' log_rotation_age = '0' log_rotation_size = '0' log_truncate_on_rotation = 'false' max_parallel_workers = '32' max_replication_slots = '32' max_worker_processes = '32' shared_memory_type = 'mmap' shared_preload_libraries = '' ssl_max_protocol_version = 'TLSv1.3' ssl_min_protocol_version = 'TLSv1.3' wal_keep_size = '512MB' wal_level = 'logical' wal_log_hints = 'on' wal_sender_timeout = '5s' wal_receiver_timeout = '5s' Warning It is your duty to plan for WAL segments retention in your PostgreSQL cluster and properly configure either wal_keep_size or wal_keep_segments , depending on the server version, based on the expected and observed workloads. Alternatively, if the only streaming replication clients are the replica instances running in the High Availability cluster, you can take advantage of the replication slots feature, which adds support for replication slots at the cluster level. You can enable the feature with the replicationSlots.highAvailability option (for more information, please refer to the \"Replication\" section .) Without replication slots nor continuous backups in place, configuring wal_keep_size or wal_keep_segments is the only way to protect standbys from falling out of sync. If a standby did fall out of sync it would produce error messages like: \"could not receive data from WAL stream: ERROR: requested WAL segment ************************ has already been removed\" . This will require you to dedicate a part of your PGDATA , or the volume dedicated to storing WAL files, to keep older WAL segments for streaming replication purposes. The following parameters are fixed and exclusively controlled by the operator: archive_command = '/controller/manager wal-archive %p' hot_standby = 'true' listen_addresses = '*' port = '5432' restart_after_crash = 'false' ssl = 'on' ssl_ca_file = '/controller/certificates/client-ca.crt' ssl_cert_file = '/controller/certificates/server.crt' ssl_key_file = '/controller/certificates/server.key' unix_socket_directories = '/controller/run' Since the fixed parameters are added at the end, they can't be overridden by the user via the YAML configuration. Those parameters are required for correct WAL archiving and replication. Write-Ahead Log Level The wal_level parameter in PostgreSQL determines the amount of information written to the Write-Ahead Log (WAL). It accepts the following values: minimal : Writes only the information required for crash recovery. replica : Adds sufficient information to support WAL archiving and streaming replication, including the ability to run read-only queries on standby instances. logical : Includes all information from replica , plus additional information required for logical decoding and replication. By default, upstream PostgreSQL sets wal_level to replica . CloudNativePG, instead, sets wal_level to logical by default to enable logical replication out of the box. This makes it easier to support use cases such as migrations from external PostgreSQL servers. If your cluster does not require logical replication, it is recommended to set wal_level to replica to reduce WAL volume and overhead. Finally, CloudNativePG allows wal_level to be set to minimal only for single-instance clusters with WAL archiving disabled. Replication Settings The primary_conninfo , restore_command , and recovery_target_timeline parameters are automatically managed by the operator based on the instance's role within the cluster. These parameters are effectively applied only when the instance is operating as a replica. primary_conninfo = 'host=<PRIMARY> user=postgres dbname=postgres' recovery_target_timeline = 'latest' The STANDBY_TCP_USER_TIMEOUT operator configuration setting , if specified, sets the tcp_user_timeout parameter on all standby instances managed by the operator. The tcp_user_timeout parameter determines how long transmitted data can remain unacknowledged before the TCP connection is forcibly closed. Adjusting this value allows you to fine-tune the responsiveness of standby instances to network disruptions. For more details, refer to the PostgreSQL documentation . Log control settings The operator requires PostgreSQL to output its log in CSV format, and the instance manager automatically parses it and outputs it in JSON format. For this reason, all log settings in PostgreSQL are fixed and cannot be changed. For further information, please refer to the \"Logging\" section . Shared Preload Libraries The shared_preload_libraries option in PostgreSQL exists to specify one or more shared libraries to be pre-loaded at server start, in the form of a comma-separated list. Typically, it is used in PostgreSQL to load those extensions that need to be available to most database sessions in the whole system (e.g. pg_stat_statements ). In CloudNativePG the shared_preload_libraries option is empty by default. Although you can override the content of shared_preload_libraries , we recommend that only expert Postgres users take advantage of this option. Important In case a specified library is not found, the server fails to start, preventing CloudNativePG from any self-healing attempt and requiring manual intervention. Please make sure you always test both the extensions and the settings of shared_preload_libraries if you plan to directly manage its content. CloudNativePG is able to automatically manage the content of the shared_preload_libraries option for some of the most used PostgreSQL extensions (see the \"Managed extensions\" section below for details). Specifically, as soon as the operator notices that a configuration parameter requires one of the managed libraries, it will automatically add the needed library. The operator will also remove the library as soon as no actual parameter requires it. Important Please always keep in mind that removing libraries from shared_preload_libraries requires a restart of all instances in the cluster in order to be effective. You can provide additional shared_preload_libraries via .spec.postgresql.shared_preload_libraries as a list of strings: the operator will merge them with the ones that it automatically manages. Managed extensions As anticipated in the previous section, CloudNativePG automatically manages the content in shared_preload_libraries for some well-known and supported extensions. The current list includes: auto_explain pg_stat_statements pgaudit pg_failover_slots Some of these libraries also require additional objects in a database before using them, normally views and/or functions managed via the CREATE EXTENSION command to be run in a database (the DROP EXTENSION command typically removes those objects). For such libraries, CloudNativePG automatically handles the creation and removal of the extension in all databases that accept a connection in the cluster, identified by the following query: SELECT datname FROM pg_database WHERE datallowconn Note The above query also includes template databases like template1 . Important With the introduction of declarative extensions in the Database CRD, you can now manage extensions directly. As a result, the managed extensions feature may undergo significant changes in future versions of CloudNativePG, and some functionalities might be deprecated. Enabling auto_explain The auto_explain extension provides a means for logging execution plans of slow statements automatically, without having to manually run EXPLAIN (helpful for tracking down un-optimized queries). You can enable auto_explain by adding to the configuration a parameter that starts with auto_explain. as in the following example excerpt (which automatically logs execution plans of queries that take longer than 10 seconds to complete): # ... postgresql: parameters: auto_explain.log_min_duration: \"10s\" # ... Note Enabling auto_explain can lead to performance issues. Please refer to the auto explain documentation Enabling pg_stat_statements The pg_stat_statements extension is one of the most important capabilities available in PostgreSQL for real-time monitoring of queries. You can enable pg_stat_statements by adding to the configuration a parameter that starts with pg_stat_statements. as in the following example excerpt: # ... postgresql: parameters: pg_stat_statements.max: \"10000\" pg_stat_statements.track: all # ... As explained previously, the operator will automatically add pg_stat_statements to shared_preload_libraries and run CREATE EXTENSION IF NOT EXISTS pg_stat_statements on each database, enabling you to run queries against the pg_stat_statements view. Enabling pgaudit The pgaudit extension provides detailed session and/or object audit logging via the standard PostgreSQL logging facility. CloudNativePG has transparent and native support for PGAudit on PostgreSQL clusters. For further information, please refer to the \"PGAudit\" logs section. You can enable pgaudit by adding to the configuration a parameter that starts with pgaudit. as in the following example excerpt: # postgresql: parameters: pgaudit.log: \"all, -misc\" pgaudit.log_catalog: \"off\" pgaudit.log_parameter: \"on\" pgaudit.log_relation: \"on\" # Enabling pg_failover_slots The pg_failover_slots extension by EDB ensures that logical replication slots can survive a failover scenario. Failovers are normally implemented using physical streaming replication, like in the case of CloudNativePG. You can enable pg_failover_slots by adding to the configuration a parameter that starts with pg_failover_slots. : as explained above, the operator will transparently manage the pg_failover_slots entry in the shared_preload_libraries option depending on this. Please refer to the pg_failover_slots documentation for details on this extension. Additionally, for each database that you intend to you use with pg_failover_slots you need to add an entry in the pg_hba section that enables each replica to connect to the primary. For example, suppose that you want to use the app database with pg_failover_slots , you need to add this entry in the pg_hba section: postgresql: pg_hba: - hostssl app streaming_replica all cert The pg_hba section pg_hba is a list of PostgreSQL Host Based Authentication rules used to create the pg_hba.conf used by the pods. Important See the PostgreSQL documentation for more information on pg_hba.conf . Since the first matching rule is used for authentication, the pg_hba.conf file generated by the operator can be seen as composed of four sections: Fixed rules User-defined rules Optional LDAP section Default rules Fixed rules: local all all peer hostssl postgres streaming_replica all cert map=cnpg_streaming_replica hostssl replication streaming_replica all cert map=cnpg_streaming_replica hostssl all cnpg_pooler_pgbouncer all cert map=cnpg_pooler_pgbouncer Default rules: host all all all <default-authentication-method> From PostgreSQL 14 the default value of the password_encryption database parameter is set to scram-sha-256 . Because of that, the default authentication method is scram-sha-256 from this PostgreSQL version. PostgreSQL 13 and older will use md5 as the default authentication method. The resulting pg_hba.conf will look like this: local all all peer hostssl postgres streaming_replica all cert map=cnpg_streaming_replica hostssl replication streaming_replica all cert map=cnpg_streaming_replica hostssl all cnpg_pooler_pgbouncer all cert map=cnpg_pooler_pgbouncer <user defined rules> <user defined LDAP> host all all all scram-sha-256 # (or md5 for PostgreSQL version <= 13) Inside the cluster manifest, pg_hba lines are added as list items in .spec.postgresql.pg_hba , as in the following excerpt: postgresql: pg_hba: - hostssl app app 10.244.0.0/16 md5 In the above example we are enabling access for the app user to the app database using MD5 password authentication (you can use scram-sha-256 if you prefer) via a secure channel ( hostssl ). LDAP Configuration Under the postgres section of the cluster spec there is an optional ldap section available to define an LDAP configuration to be converted into a rule added into the pg_hba.conf file. This will support two modes: simple bind mode which requires specifying a server , prefix and suffix in the LDAP section and the search+bind mode which requires specifying server , baseDN , binDN , and a bindPassword which is a secret containing the ldap password. Additionally, in search+bind mode you have the option to specify a searchFilter or searchAttribute . If no searchAttribute is specified the default one of uid will be used. Additionally, both modes allow the specification of a scheme for ldapscheme and a port . Neither scheme nor port are required, however. This section filled out for search+bind could look as follows: postgresql: ldap: server: 'openldap.default.svc.cluster.local' bindSearchAuth: baseDN: 'ou=org,dc=example,dc=com' bindDN: 'cn=admin,dc=example,dc=com' bindPassword: name: 'ldapBindPassword' key: 'data' searchAttribute: 'uid' The pg_ident section pg_ident is a list of PostgreSQL User Name Maps that CloudNativePG uses to generate and maintain the ident map file (known as pg_ident.conf ) inside the data directory. Important See the PostgreSQL documentation for more information on pg_ident.conf . The pg_ident.conf file written by the operator is made up of the following two sections: Fixed rules User-defined rules Currently the only fixed rule, automatically generated by the operator, is: local <postgres system user> postgres The instance manager detects the user running the PostgreSQL instance and automatically adds a rule to map it to the postgres user in the database. If the postgres user is not properly configured inside the container, the instance manager will allow any local user to connect and then log a warning message like the following: Unable to identify the current user. Falling back to insecure mapping. The resulting pg_ident.conf will look like this: local <postgres system user> postgres <user defined lines> Inside the cluster manifest, pg_ident lines are added as list items in .spec.postgresql.pg_ident . For example: postgresql: pg_ident: - \"mymap /^(.*)@mydomain\\\\.com$ \\\\1\" Changing configuration You can apply configuration changes by editing the postgresql section of the Cluster resource. After the change, the cluster instances will immediately reload the configuration to apply the changes. If the change involves a parameter requiring a restart, the operator will perform a rolling upgrade. Enabling ALTER SYSTEM CloudNativePG strongly advocates employing the Cluster manifest as the exclusive method for altering the configuration of a PostgreSQL cluster. This approach guarantees coherence across the entire high-availability cluster and aligns with best practices for Infrastructure-as-Code. In CloudNativePG the default configuration disables the use of ALTER SYSTEM on new Postgres clusters. This decision is rooted in the recognition of potential risks associated with this command. To enable the use of ALTER SYSTEM , you can explicitly set .spec.postgresql.enableAlterSystem to true . Warning Proceed with caution when utilizing ALTER SYSTEM . This command operates directly on the connected instance and does not undergo replication. CloudNativePG assumes responsibility for certain fixed parameters and complete control over others, emphasizing the need for careful consideration. Starting from PostgreSQL 17, the .spec.postgresql.enableAlterSystem setting directly controls the allow_alter_system GUC in PostgreSQL \u2014 a feature directly contributed by CloudNativePG to PostgreSQL. Prior to PostgreSQL 17, when .spec.postgresql.enableAlterSystem is set to false , the postgresql.auto.conf file is made read-only. Consequently, any attempt to execute the ALTER SYSTEM command will result in an error. The error message might look like this: ERROR: could not open file \"postgresql.auto.conf\": Permission denied Dynamic Shared Memory settings PostgreSQL supports a few implementations for dynamic shared memory management through the dynamic_shared_memory_type configuration option. In CloudNativePG we recommend to limit ourselves to any of the following two values: posix : which relies on POSIX shared memory allocated using shm_open (default setting) sysv : which is based on System V shared memory allocated via shmget In PostgreSQL, this setting is particularly important for memory allocation in parallel queries. For details, please refer to this thread from the pgsql-general mailing list . POSIX shared memory The default setting of posix should be enough in most cases, considering that the operator automatically mounts a memory-bound EmptyDir volume called shm under /dev/shm . You can verify the size of such volume inside the running Postgres container with: mount | grep shm You should get something similar to the following output: shm on /dev/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=******) If you would like to set a maximum size for the shm volume, you can do so by setting the .spec.ephemeralVolumesSizeLimit.shm field in the Cluster resource. For example: spec: ephemeralVolumesSizeLimit: shm: 1Gi System V shared memory In case your Kubernetes cluster has a high enough value for the SHMMAX and SHMALL parameters, you can also set: dynamic_shared_memory_type: \"sysv\" You can check the SHMMAX / SHMALL from inside a PostgreSQL container, by running: ipcs -lm For example: ------ Shared Memory Limits -------- max number of segments = 4096 max seg size (kbytes) = 18014398509465599 max total shared memory (kbytes) = 18014398509481980 min seg size (bytes) = 1 As you can see, the very high number of max total shared memory recommends setting dynamic_shared_memory_type to sysv . An alternate method is to run: cat /proc/sys/kernel/shmall cat /proc/sys/kernel/shmmax Fixed parameters Some PostgreSQL configuration parameters should be managed exclusively by the operator. The operator prevents the user from setting them using a webhook. Users are not allowed to set the following configuration parameters in the postgresql section: allow_alter_system allow_system_table_mods archive_cleanup_command archive_command archive_mode bonjour bonjour_name cluster_name config_file data_directory data_sync_retry event_source external_pid_file hba_file hot_standby ident_file jit_provider listen_addresses log_destination log_directory log_file_mode log_filename log_rotation_age log_rotation_size log_truncate_on_rotation logging_collector port primary_conninfo primary_slot_name promote_trigger_file recovery_end_command recovery_min_apply_delay recovery_target recovery_target_action recovery_target_inclusive recovery_target_lsn recovery_target_name recovery_target_time recovery_target_timeline recovery_target_xid restart_after_crash restore_command shared_preload_libraries ssl ssl_ca_file ssl_cert_file ssl_crl_file ssl_dh_params_file ssl_ecdh_curve ssl_key_file ssl_passphrase_command ssl_passphrase_command_supports_reload ssl_prefer_server_ciphers stats_temp_directory synchronous_standby_names syslog_facility syslog_ident syslog_sequence_numbers syslog_split_messages unix_socket_directories unix_socket_group unix_socket_permissions","title":"PostgreSQL Configuration"},{"location":"postgresql_conf/#postgresql-configuration","text":"Users that are familiar with PostgreSQL are aware of the existence of the following three files to configure an instance: postgresql.conf : main run-time configuration file of PostgreSQL pg_hba.conf : clients authentication file pg_ident.conf : map external users to internal users Due to the concepts of declarative configuration and immutability of the PostgreSQL containers, users are not allowed to directly touch those files. Configuration is possible through the postgresql section of the Cluster resource definition by defining custom postgresql.conf , pg_hba.conf , and pg_ident.conf settings via the parameters , the pg_hba , and the pg_ident keys. These settings are the same across all instances. Warning Please don't use the ALTER SYSTEM query to change the configuration of the PostgreSQL instances in an imperative way. Changing some of the options that are normally controlled by the operator might indeed lead to an unpredictable/unrecoverable state of the cluster. Moreover, ALTER SYSTEM changes are not replicated across the cluster. See \"Enabling ALTER SYSTEM\" below for details. A reference for custom settings usage is included in the samples, see cluster-example-custom.yaml .","title":"PostgreSQL Configuration"},{"location":"postgresql_conf/#the-postgresql-section","text":"The PostgreSQL instance in the pod starts with a default postgresql.conf file, to which these settings are automatically added: listen_addresses = '*' include custom.conf The custom.conf file will contain the user-defined settings in the postgresql section, as in the following example: # ... postgresql: parameters: shared_buffers: \"1GB\" # ... PostgreSQL GUCs: Grand Unified Configuration Refer to the PostgreSQL documentation for more information on the available parameters , also known as GUC (Grand Unified Configuration). Please note that CloudNativePG accepts only strings for the PostgreSQL parameters. The content of custom.conf is automatically generated and maintained by the operator by applying the following sections in this order: Global default parameters Default parameters that depend on the PostgreSQL major version User-provided parameters Fixed parameters The global default parameters are: archive_timeout = '5min' dynamic_shared_memory_type = 'posix' full_page_writes = 'on' logging_collector = 'on' log_destination = 'csvlog' log_directory = '/controller/log' log_filename = 'postgres' log_rotation_age = '0' log_rotation_size = '0' log_truncate_on_rotation = 'false' max_parallel_workers = '32' max_replication_slots = '32' max_worker_processes = '32' shared_memory_type = 'mmap' shared_preload_libraries = '' ssl_max_protocol_version = 'TLSv1.3' ssl_min_protocol_version = 'TLSv1.3' wal_keep_size = '512MB' wal_level = 'logical' wal_log_hints = 'on' wal_sender_timeout = '5s' wal_receiver_timeout = '5s' Warning It is your duty to plan for WAL segments retention in your PostgreSQL cluster and properly configure either wal_keep_size or wal_keep_segments , depending on the server version, based on the expected and observed workloads. Alternatively, if the only streaming replication clients are the replica instances running in the High Availability cluster, you can take advantage of the replication slots feature, which adds support for replication slots at the cluster level. You can enable the feature with the replicationSlots.highAvailability option (for more information, please refer to the \"Replication\" section .) Without replication slots nor continuous backups in place, configuring wal_keep_size or wal_keep_segments is the only way to protect standbys from falling out of sync. If a standby did fall out of sync it would produce error messages like: \"could not receive data from WAL stream: ERROR: requested WAL segment ************************ has already been removed\" . This will require you to dedicate a part of your PGDATA , or the volume dedicated to storing WAL files, to keep older WAL segments for streaming replication purposes. The following parameters are fixed and exclusively controlled by the operator: archive_command = '/controller/manager wal-archive %p' hot_standby = 'true' listen_addresses = '*' port = '5432' restart_after_crash = 'false' ssl = 'on' ssl_ca_file = '/controller/certificates/client-ca.crt' ssl_cert_file = '/controller/certificates/server.crt' ssl_key_file = '/controller/certificates/server.key' unix_socket_directories = '/controller/run' Since the fixed parameters are added at the end, they can't be overridden by the user via the YAML configuration. Those parameters are required for correct WAL archiving and replication.","title":"The postgresql section"},{"location":"postgresql_conf/#write-ahead-log-level","text":"The wal_level parameter in PostgreSQL determines the amount of information written to the Write-Ahead Log (WAL). It accepts the following values: minimal : Writes only the information required for crash recovery. replica : Adds sufficient information to support WAL archiving and streaming replication, including the ability to run read-only queries on standby instances. logical : Includes all information from replica , plus additional information required for logical decoding and replication. By default, upstream PostgreSQL sets wal_level to replica . CloudNativePG, instead, sets wal_level to logical by default to enable logical replication out of the box. This makes it easier to support use cases such as migrations from external PostgreSQL servers. If your cluster does not require logical replication, it is recommended to set wal_level to replica to reduce WAL volume and overhead. Finally, CloudNativePG allows wal_level to be set to minimal only for single-instance clusters with WAL archiving disabled.","title":"Write-Ahead Log Level"},{"location":"postgresql_conf/#replication-settings","text":"The primary_conninfo , restore_command , and recovery_target_timeline parameters are automatically managed by the operator based on the instance's role within the cluster. These parameters are effectively applied only when the instance is operating as a replica. primary_conninfo = 'host=<PRIMARY> user=postgres dbname=postgres' recovery_target_timeline = 'latest' The STANDBY_TCP_USER_TIMEOUT operator configuration setting , if specified, sets the tcp_user_timeout parameter on all standby instances managed by the operator. The tcp_user_timeout parameter determines how long transmitted data can remain unacknowledged before the TCP connection is forcibly closed. Adjusting this value allows you to fine-tune the responsiveness of standby instances to network disruptions. For more details, refer to the PostgreSQL documentation .","title":"Replication Settings"},{"location":"postgresql_conf/#log-control-settings","text":"The operator requires PostgreSQL to output its log in CSV format, and the instance manager automatically parses it and outputs it in JSON format. For this reason, all log settings in PostgreSQL are fixed and cannot be changed. For further information, please refer to the \"Logging\" section .","title":"Log control settings"},{"location":"postgresql_conf/#shared-preload-libraries","text":"The shared_preload_libraries option in PostgreSQL exists to specify one or more shared libraries to be pre-loaded at server start, in the form of a comma-separated list. Typically, it is used in PostgreSQL to load those extensions that need to be available to most database sessions in the whole system (e.g. pg_stat_statements ). In CloudNativePG the shared_preload_libraries option is empty by default. Although you can override the content of shared_preload_libraries , we recommend that only expert Postgres users take advantage of this option. Important In case a specified library is not found, the server fails to start, preventing CloudNativePG from any self-healing attempt and requiring manual intervention. Please make sure you always test both the extensions and the settings of shared_preload_libraries if you plan to directly manage its content. CloudNativePG is able to automatically manage the content of the shared_preload_libraries option for some of the most used PostgreSQL extensions (see the \"Managed extensions\" section below for details). Specifically, as soon as the operator notices that a configuration parameter requires one of the managed libraries, it will automatically add the needed library. The operator will also remove the library as soon as no actual parameter requires it. Important Please always keep in mind that removing libraries from shared_preload_libraries requires a restart of all instances in the cluster in order to be effective. You can provide additional shared_preload_libraries via .spec.postgresql.shared_preload_libraries as a list of strings: the operator will merge them with the ones that it automatically manages.","title":"Shared Preload Libraries"},{"location":"postgresql_conf/#managed-extensions","text":"As anticipated in the previous section, CloudNativePG automatically manages the content in shared_preload_libraries for some well-known and supported extensions. The current list includes: auto_explain pg_stat_statements pgaudit pg_failover_slots Some of these libraries also require additional objects in a database before using them, normally views and/or functions managed via the CREATE EXTENSION command to be run in a database (the DROP EXTENSION command typically removes those objects). For such libraries, CloudNativePG automatically handles the creation and removal of the extension in all databases that accept a connection in the cluster, identified by the following query: SELECT datname FROM pg_database WHERE datallowconn Note The above query also includes template databases like template1 . Important With the introduction of declarative extensions in the Database CRD, you can now manage extensions directly. As a result, the managed extensions feature may undergo significant changes in future versions of CloudNativePG, and some functionalities might be deprecated.","title":"Managed extensions"},{"location":"postgresql_conf/#enabling-auto_explain","text":"The auto_explain extension provides a means for logging execution plans of slow statements automatically, without having to manually run EXPLAIN (helpful for tracking down un-optimized queries). You can enable auto_explain by adding to the configuration a parameter that starts with auto_explain. as in the following example excerpt (which automatically logs execution plans of queries that take longer than 10 seconds to complete): # ... postgresql: parameters: auto_explain.log_min_duration: \"10s\" # ... Note Enabling auto_explain can lead to performance issues. Please refer to the auto explain documentation","title":"Enabling auto_explain"},{"location":"postgresql_conf/#enabling-pg_stat_statements","text":"The pg_stat_statements extension is one of the most important capabilities available in PostgreSQL for real-time monitoring of queries. You can enable pg_stat_statements by adding to the configuration a parameter that starts with pg_stat_statements. as in the following example excerpt: # ... postgresql: parameters: pg_stat_statements.max: \"10000\" pg_stat_statements.track: all # ... As explained previously, the operator will automatically add pg_stat_statements to shared_preload_libraries and run CREATE EXTENSION IF NOT EXISTS pg_stat_statements on each database, enabling you to run queries against the pg_stat_statements view.","title":"Enabling pg_stat_statements"},{"location":"postgresql_conf/#enabling-pgaudit","text":"The pgaudit extension provides detailed session and/or object audit logging via the standard PostgreSQL logging facility. CloudNativePG has transparent and native support for PGAudit on PostgreSQL clusters. For further information, please refer to the \"PGAudit\" logs section. You can enable pgaudit by adding to the configuration a parameter that starts with pgaudit. as in the following example excerpt: # postgresql: parameters: pgaudit.log: \"all, -misc\" pgaudit.log_catalog: \"off\" pgaudit.log_parameter: \"on\" pgaudit.log_relation: \"on\" #","title":"Enabling pgaudit"},{"location":"postgresql_conf/#enabling-pg_failover_slots","text":"The pg_failover_slots extension by EDB ensures that logical replication slots can survive a failover scenario. Failovers are normally implemented using physical streaming replication, like in the case of CloudNativePG. You can enable pg_failover_slots by adding to the configuration a parameter that starts with pg_failover_slots. : as explained above, the operator will transparently manage the pg_failover_slots entry in the shared_preload_libraries option depending on this. Please refer to the pg_failover_slots documentation for details on this extension. Additionally, for each database that you intend to you use with pg_failover_slots you need to add an entry in the pg_hba section that enables each replica to connect to the primary. For example, suppose that you want to use the app database with pg_failover_slots , you need to add this entry in the pg_hba section: postgresql: pg_hba: - hostssl app streaming_replica all cert","title":"Enabling pg_failover_slots"},{"location":"postgresql_conf/#the-pg_hba-section","text":"pg_hba is a list of PostgreSQL Host Based Authentication rules used to create the pg_hba.conf used by the pods. Important See the PostgreSQL documentation for more information on pg_hba.conf . Since the first matching rule is used for authentication, the pg_hba.conf file generated by the operator can be seen as composed of four sections: Fixed rules User-defined rules Optional LDAP section Default rules Fixed rules: local all all peer hostssl postgres streaming_replica all cert map=cnpg_streaming_replica hostssl replication streaming_replica all cert map=cnpg_streaming_replica hostssl all cnpg_pooler_pgbouncer all cert map=cnpg_pooler_pgbouncer Default rules: host all all all <default-authentication-method> From PostgreSQL 14 the default value of the password_encryption database parameter is set to scram-sha-256 . Because of that, the default authentication method is scram-sha-256 from this PostgreSQL version. PostgreSQL 13 and older will use md5 as the default authentication method. The resulting pg_hba.conf will look like this: local all all peer hostssl postgres streaming_replica all cert map=cnpg_streaming_replica hostssl replication streaming_replica all cert map=cnpg_streaming_replica hostssl all cnpg_pooler_pgbouncer all cert map=cnpg_pooler_pgbouncer <user defined rules> <user defined LDAP> host all all all scram-sha-256 # (or md5 for PostgreSQL version <= 13) Inside the cluster manifest, pg_hba lines are added as list items in .spec.postgresql.pg_hba , as in the following excerpt: postgresql: pg_hba: - hostssl app app 10.244.0.0/16 md5 In the above example we are enabling access for the app user to the app database using MD5 password authentication (you can use scram-sha-256 if you prefer) via a secure channel ( hostssl ).","title":"The pg_hba section"},{"location":"postgresql_conf/#ldap-configuration","text":"Under the postgres section of the cluster spec there is an optional ldap section available to define an LDAP configuration to be converted into a rule added into the pg_hba.conf file. This will support two modes: simple bind mode which requires specifying a server , prefix and suffix in the LDAP section and the search+bind mode which requires specifying server , baseDN , binDN , and a bindPassword which is a secret containing the ldap password. Additionally, in search+bind mode you have the option to specify a searchFilter or searchAttribute . If no searchAttribute is specified the default one of uid will be used. Additionally, both modes allow the specification of a scheme for ldapscheme and a port . Neither scheme nor port are required, however. This section filled out for search+bind could look as follows: postgresql: ldap: server: 'openldap.default.svc.cluster.local' bindSearchAuth: baseDN: 'ou=org,dc=example,dc=com' bindDN: 'cn=admin,dc=example,dc=com' bindPassword: name: 'ldapBindPassword' key: 'data' searchAttribute: 'uid'","title":"LDAP Configuration"},{"location":"postgresql_conf/#the-pg_ident-section","text":"pg_ident is a list of PostgreSQL User Name Maps that CloudNativePG uses to generate and maintain the ident map file (known as pg_ident.conf ) inside the data directory. Important See the PostgreSQL documentation for more information on pg_ident.conf . The pg_ident.conf file written by the operator is made up of the following two sections: Fixed rules User-defined rules Currently the only fixed rule, automatically generated by the operator, is: local <postgres system user> postgres The instance manager detects the user running the PostgreSQL instance and automatically adds a rule to map it to the postgres user in the database. If the postgres user is not properly configured inside the container, the instance manager will allow any local user to connect and then log a warning message like the following: Unable to identify the current user. Falling back to insecure mapping. The resulting pg_ident.conf will look like this: local <postgres system user> postgres <user defined lines> Inside the cluster manifest, pg_ident lines are added as list items in .spec.postgresql.pg_ident . For example: postgresql: pg_ident: - \"mymap /^(.*)@mydomain\\\\.com$ \\\\1\"","title":"The pg_ident section"},{"location":"postgresql_conf/#changing-configuration","text":"You can apply configuration changes by editing the postgresql section of the Cluster resource. After the change, the cluster instances will immediately reload the configuration to apply the changes. If the change involves a parameter requiring a restart, the operator will perform a rolling upgrade.","title":"Changing configuration"},{"location":"postgresql_conf/#enabling-alter-system","text":"CloudNativePG strongly advocates employing the Cluster manifest as the exclusive method for altering the configuration of a PostgreSQL cluster. This approach guarantees coherence across the entire high-availability cluster and aligns with best practices for Infrastructure-as-Code. In CloudNativePG the default configuration disables the use of ALTER SYSTEM on new Postgres clusters. This decision is rooted in the recognition of potential risks associated with this command. To enable the use of ALTER SYSTEM , you can explicitly set .spec.postgresql.enableAlterSystem to true . Warning Proceed with caution when utilizing ALTER SYSTEM . This command operates directly on the connected instance and does not undergo replication. CloudNativePG assumes responsibility for certain fixed parameters and complete control over others, emphasizing the need for careful consideration. Starting from PostgreSQL 17, the .spec.postgresql.enableAlterSystem setting directly controls the allow_alter_system GUC in PostgreSQL \u2014 a feature directly contributed by CloudNativePG to PostgreSQL. Prior to PostgreSQL 17, when .spec.postgresql.enableAlterSystem is set to false , the postgresql.auto.conf file is made read-only. Consequently, any attempt to execute the ALTER SYSTEM command will result in an error. The error message might look like this: ERROR: could not open file \"postgresql.auto.conf\": Permission denied","title":"Enabling ALTER SYSTEM"},{"location":"postgresql_conf/#dynamic-shared-memory-settings","text":"PostgreSQL supports a few implementations for dynamic shared memory management through the dynamic_shared_memory_type configuration option. In CloudNativePG we recommend to limit ourselves to any of the following two values: posix : which relies on POSIX shared memory allocated using shm_open (default setting) sysv : which is based on System V shared memory allocated via shmget In PostgreSQL, this setting is particularly important for memory allocation in parallel queries. For details, please refer to this thread from the pgsql-general mailing list .","title":"Dynamic Shared Memory settings"},{"location":"postgresql_conf/#posix-shared-memory","text":"The default setting of posix should be enough in most cases, considering that the operator automatically mounts a memory-bound EmptyDir volume called shm under /dev/shm . You can verify the size of such volume inside the running Postgres container with: mount | grep shm You should get something similar to the following output: shm on /dev/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=******) If you would like to set a maximum size for the shm volume, you can do so by setting the .spec.ephemeralVolumesSizeLimit.shm field in the Cluster resource. For example: spec: ephemeralVolumesSizeLimit: shm: 1Gi","title":"POSIX shared memory"},{"location":"postgresql_conf/#system-v-shared-memory","text":"In case your Kubernetes cluster has a high enough value for the SHMMAX and SHMALL parameters, you can also set: dynamic_shared_memory_type: \"sysv\" You can check the SHMMAX / SHMALL from inside a PostgreSQL container, by running: ipcs -lm For example: ------ Shared Memory Limits -------- max number of segments = 4096 max seg size (kbytes) = 18014398509465599 max total shared memory (kbytes) = 18014398509481980 min seg size (bytes) = 1 As you can see, the very high number of max total shared memory recommends setting dynamic_shared_memory_type to sysv . An alternate method is to run: cat /proc/sys/kernel/shmall cat /proc/sys/kernel/shmmax","title":"System V shared memory"},{"location":"postgresql_conf/#fixed-parameters","text":"Some PostgreSQL configuration parameters should be managed exclusively by the operator. The operator prevents the user from setting them using a webhook. Users are not allowed to set the following configuration parameters in the postgresql section: allow_alter_system allow_system_table_mods archive_cleanup_command archive_command archive_mode bonjour bonjour_name cluster_name config_file data_directory data_sync_retry event_source external_pid_file hba_file hot_standby ident_file jit_provider listen_addresses log_destination log_directory log_file_mode log_filename log_rotation_age log_rotation_size log_truncate_on_rotation logging_collector port primary_conninfo primary_slot_name promote_trigger_file recovery_end_command recovery_min_apply_delay recovery_target recovery_target_action recovery_target_inclusive recovery_target_lsn recovery_target_name recovery_target_time recovery_target_timeline recovery_target_xid restart_after_crash restore_command shared_preload_libraries ssl ssl_ca_file ssl_cert_file ssl_crl_file ssl_dh_params_file ssl_ecdh_curve ssl_key_file ssl_passphrase_command ssl_passphrase_command_supports_reload ssl_prefer_server_ciphers stats_temp_directory synchronous_standby_names syslog_facility syslog_ident syslog_sequence_numbers syslog_split_messages unix_socket_directories unix_socket_group unix_socket_permissions","title":"Fixed parameters"},{"location":"preview_version/","text":"Preview Versions CloudNativePG candidate releases are pre-release versions made available for testing before the community issues a new generally available (GA) release. These versions are feature-frozen, meaning no new features are added, and are intended for public testing prior to the final release. Important CloudNativePG release candidates are not intended for use in production systems. Purpose of Release Candidates Release candidates are provided to the community for extensive testing before the official release. While a release candidate aims to be identical to the initial release of a new minor version of CloudNativePG, additional changes may be implemented before the GA release. Community Involvement The stability of each CloudNativePG minor release significantly depends on the community's efforts to test the upcoming version with their workloads and tools. Identifying bugs and regressions through user testing is crucial in determining when we can finalize the release. Usage Advisory The CloudNativePG Community strongly advises against using preview versions of CloudNativePG in production environments or active development projects. Although CloudNativePG undergoes extensive automated and manual testing, beta releases may contain serious bugs. Features in preview versions may change in ways that are not backwards compatible and could be removed entirely. Current Preview Version The current preview version is 1.27.0-rc1 . For more information on the current preview version and how to test, please view the links below: Announcement Documentation","title":"Preview Versions"},{"location":"preview_version/#preview-versions","text":"CloudNativePG candidate releases are pre-release versions made available for testing before the community issues a new generally available (GA) release. These versions are feature-frozen, meaning no new features are added, and are intended for public testing prior to the final release. Important CloudNativePG release candidates are not intended for use in production systems.","title":"Preview Versions"},{"location":"preview_version/#purpose-of-release-candidates","text":"Release candidates are provided to the community for extensive testing before the official release. While a release candidate aims to be identical to the initial release of a new minor version of CloudNativePG, additional changes may be implemented before the GA release.","title":"Purpose of Release Candidates"},{"location":"preview_version/#community-involvement","text":"The stability of each CloudNativePG minor release significantly depends on the community's efforts to test the upcoming version with their workloads and tools. Identifying bugs and regressions through user testing is crucial in determining when we can finalize the release.","title":"Community Involvement"},{"location":"preview_version/#usage-advisory","text":"The CloudNativePG Community strongly advises against using preview versions of CloudNativePG in production environments or active development projects. Although CloudNativePG undergoes extensive automated and manual testing, beta releases may contain serious bugs. Features in preview versions may change in ways that are not backwards compatible and could be removed entirely.","title":"Usage Advisory"},{"location":"preview_version/#current-preview-version","text":"The current preview version is 1.27.0-rc1 . For more information on the current preview version and how to test, please view the links below: Announcement Documentation","title":"Current Preview Version"},{"location":"quickstart/","text":"Quickstart This section guides you through testing a PostgreSQL cluster on your local machine by deploying CloudNativePG on a local Kubernetes cluster using either Kind or Minikube . Warning The instructions contained in this section are for demonstration, testing, and practice purposes only and must not be used in production. Like any other Kubernetes application, CloudNativePG is deployed using regular manifests written in YAML. By following the instructions on this page you should be able to start a PostgreSQL cluster on your local Kubernetes installation and experiment with it. Important Make sure that you have kubectl installed on your machine in order to connect to the Kubernetes cluster. Please follow the Kubernetes documentation on how to install kubectl . Part 1: Setup the local Kubernetes playground The first part is about installing Minikube or Kind. Please spend some time reading about the systems and decide which one to proceed with. After setting up one of them, please proceed with part 2. We also provide instructions for setting up monitoring with Prometheus and Grafana for local testing/evaluation, in part 4 Minikube Minikube is a tool that makes it easy to run Kubernetes locally. Minikube runs a single-node Kubernetes cluster inside a Virtual Machine (VM) on your laptop for users looking to try out Kubernetes or develop with it day-to-day. Normally, it is used in conjunction with VirtualBox. You can find more information in the official Kubernetes documentation on how to install Minikube in your local personal environment. When you installed it, run the following command to create a minikube cluster: minikube start This will create the Kubernetes cluster, and you will be ready to use it. Verify that it works with the following command: kubectl get nodes You will see one node called minikube . Kind If you do not want to use a virtual machine hypervisor, then Kind is a tool for running local Kubernetes clusters using Docker container \"nodes\" (Kind stands for \"Kubernetes IN Docker\" indeed). Install kind on your environment following the instructions in the Quickstart , then create a Kubernetes cluster with: kind create cluster --name pg Part 2: Install CloudNativePG Now that you have a Kubernetes installation up and running on your laptop, you can proceed with CloudNativePG installation. Please refer to the \"Installation\" section and then proceed with the deployment of a PostgreSQL cluster. Part 3: Deploy a PostgreSQL cluster As with any other deployment in Kubernetes, to deploy a PostgreSQL cluster you need to apply a configuration file that defines your desired Cluster . The cluster-example.yaml sample file defines a simple Cluster using the default storage class to allocate disk space: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 storage: size: 1Gi There's more For more detailed information about the available options, please refer to the \"API Reference\" section . In order to create the 3-node PostgreSQL cluster, you need to run the following command: kubectl apply -f cluster-example.yaml You can check that the pods are being created with the get pods command: kubectl get pods That will look for pods in the default namespace. To separate your cluster from other workloads on your Kubernetes installation, you could always create a new namespace to deploy clusters on. Alternatively, you can use labels. The operator will apply the cnpg.io/cluster label on all objects relevant to a particular cluster. For example: kubectl get pods -l cnpg.io/cluster=<CLUSTER> Important Note that we are using cnpg.io/cluster as the label. In the past you may have seen or used postgresql . This label is being deprecated, and will be dropped in the future. Please use cnpg.io/cluster . By default, the operator will install the latest available minor version of the latest major version of PostgreSQL when the operator was released. You can override this by setting the imageName key in the spec section of the Cluster definition. For example, to install PostgreSQL 13.6: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: # [...] spec: # [...] imageName: ghcr.io/cloudnative-pg/postgresql:13.6 #[...] Important The immutable infrastructure paradigm requires that you always point to a specific version of the container image. Never use tags like latest or 13 in a production environment as it might lead to unpredictable scenarios in terms of update policies and version consistency in the cluster. For strict deterministic and repeatable deployments, you can add the digests to the image name, through the <image>:<tag>@sha256:<digestValue> format. There's more There are some examples cluster configurations bundled with the operator. Please refer to the \"Examples\" section . Part 4: Monitor clusters with Prometheus and Grafana Important Installing Prometheus and Grafana is beyond the scope of this project. The instructions in this section are provided for experimentation and illustration only. In this section we show how to deploy Prometheus and Grafana for observability, and how to create a Grafana Dashboard to monitor CloudNativePG clusters, and a set of Prometheus Rules defining alert conditions. We leverage the Kube-Prometheus stack Helm chart, which is maintained by the Prometheus Community . Please refer to the project website for additional documentation and background. The Kube-Prometheus-stack Helm chart installs the Prometheus Operator , including the Alert Manager , and a Grafana deployment. We include a configuration file for the deployment of this Helm chart that will provide useful initial settings for observability of CloudNativePG clusters. Installation If you don't have Helm installed yet, please follow the instructions to install it in your system. We need to add the prometheus-community helm chart repository, and then install the Kube Prometheus stack with our sample configuration kube-stack-config.yaml . We can accomplish this with the following commands: helm repo add prometheus-community \\ https://prometheus-community.github.io/helm-charts helm upgrade --install \\ -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/kube-stack-config.yaml \\ prometheus-community \\ prometheus-community/kube-prometheus-stack After completion, you will have Prometheus, Grafana, and Alert Manager, configured with the kube-stack-config.yaml file: From the Prometheus installation, you will have the Prometheus Operator watching for any PodMonitor (see monitoring ). Alert Manager and Grafana are both enabled. Seealso For further information about the above helm commands, refer to the helm install documentation. You can see several Custom Resources have been created: % kubectl get crds NAME CREATED AT \u2026 alertmanagers.monitoring.coreos.com <timestamp> \u2026 prometheuses.monitoring.coreos.com <timestamp> prometheusrules.monitoring.coreos.com <timestamp> \u2026 as well as a series of Services: % kubectl get svc NAME TYPE PORT(S) \u2026 \u2026 \u2026 prometheus-community-grafana ClusterIP 80/TCP prometheus-community-kube-alertmanager ClusterIP 9093/TCP prometheus-community-kube-operator ClusterIP 443/TCP prometheus-community-kube-prometheus ClusterIP 9090/TCP Viewing with Prometheus At this point, a CloudNativePG cluster deployed with monitoring activated would be observable via Prometheus. For example, you could deploy a simple cluster with PodMonitor enabled: kubectl apply -f - <<EOF --- apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-with-metrics spec: instances: 3 storage: size: 1Gi monitoring: enablePodMonitor: true EOF To access Prometheus, port-forward the Prometheus service: kubectl port-forward svc/prometheus-community-kube-prometheus 9090 Then access the Prometheus console locally at: http://localhost:9090/ You should find a series of metrics relating to CloudNativePG clusters. Please refer to the monitoring section for more information. You can also monitor the CloudNativePG operator by creating a PodMonitor to target it. See the relevant section in the monitoring page . You can define some alerts by creating a prometheusRule : kubectl apply -f \\ https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/prometheusrule.yaml You should see the default alerts now: % kubectl get prometheusrules NAME AGE cnpg-default-alerts 3m27s In the Prometheus console, you can click on the Alerts menu to see the alerts we just installed. Grafana Dashboard In our installation so far, Grafana is deployed with no predefined dashboards. To open Grafana, you can port-forward the grafana service: kubectl port-forward svc/prometheus-community-grafana 3000:80 and access Grafana locally at http://localhost:3000/ providing the credentials admin as username, prom-operator as password (defined in kube-stack-config.yaml ). CloudNativePG provides a default dashboard for Grafana in the dedicated grafana-dashboards repository . You can download the file grafana-dashboard.json and manually import it via the GUI (menu: Dashboards > New > Import). You can now click on the CloudNativePG dashboard just created: Warning Some graphs in the previous dashboard make use of metrics that are in alpha stage by the time this was created, like kubelet_volume_stats_available_bytes and kubelet_volume_stats_capacity_bytes producing some graphs to show No data . Note that in our local setup, Prometheus and Grafana are configured to automatically discover and monitor any CloudNativePG clusters deployed with the Monitoring feature enabled.","title":"Quickstart"},{"location":"quickstart/#quickstart","text":"This section guides you through testing a PostgreSQL cluster on your local machine by deploying CloudNativePG on a local Kubernetes cluster using either Kind or Minikube . Warning The instructions contained in this section are for demonstration, testing, and practice purposes only and must not be used in production. Like any other Kubernetes application, CloudNativePG is deployed using regular manifests written in YAML. By following the instructions on this page you should be able to start a PostgreSQL cluster on your local Kubernetes installation and experiment with it. Important Make sure that you have kubectl installed on your machine in order to connect to the Kubernetes cluster. Please follow the Kubernetes documentation on how to install kubectl .","title":"Quickstart"},{"location":"quickstart/#part-1-setup-the-local-kubernetes-playground","text":"The first part is about installing Minikube or Kind. Please spend some time reading about the systems and decide which one to proceed with. After setting up one of them, please proceed with part 2. We also provide instructions for setting up monitoring with Prometheus and Grafana for local testing/evaluation, in part 4","title":"Part 1: Setup the local Kubernetes playground"},{"location":"quickstart/#minikube","text":"Minikube is a tool that makes it easy to run Kubernetes locally. Minikube runs a single-node Kubernetes cluster inside a Virtual Machine (VM) on your laptop for users looking to try out Kubernetes or develop with it day-to-day. Normally, it is used in conjunction with VirtualBox. You can find more information in the official Kubernetes documentation on how to install Minikube in your local personal environment. When you installed it, run the following command to create a minikube cluster: minikube start This will create the Kubernetes cluster, and you will be ready to use it. Verify that it works with the following command: kubectl get nodes You will see one node called minikube .","title":"Minikube"},{"location":"quickstart/#kind","text":"If you do not want to use a virtual machine hypervisor, then Kind is a tool for running local Kubernetes clusters using Docker container \"nodes\" (Kind stands for \"Kubernetes IN Docker\" indeed). Install kind on your environment following the instructions in the Quickstart , then create a Kubernetes cluster with: kind create cluster --name pg","title":"Kind"},{"location":"quickstart/#part-2-install-cloudnativepg","text":"Now that you have a Kubernetes installation up and running on your laptop, you can proceed with CloudNativePG installation. Please refer to the \"Installation\" section and then proceed with the deployment of a PostgreSQL cluster.","title":"Part 2: Install CloudNativePG"},{"location":"quickstart/#part-3-deploy-a-postgresql-cluster","text":"As with any other deployment in Kubernetes, to deploy a PostgreSQL cluster you need to apply a configuration file that defines your desired Cluster . The cluster-example.yaml sample file defines a simple Cluster using the default storage class to allocate disk space: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 storage: size: 1Gi There's more For more detailed information about the available options, please refer to the \"API Reference\" section . In order to create the 3-node PostgreSQL cluster, you need to run the following command: kubectl apply -f cluster-example.yaml You can check that the pods are being created with the get pods command: kubectl get pods That will look for pods in the default namespace. To separate your cluster from other workloads on your Kubernetes installation, you could always create a new namespace to deploy clusters on. Alternatively, you can use labels. The operator will apply the cnpg.io/cluster label on all objects relevant to a particular cluster. For example: kubectl get pods -l cnpg.io/cluster=<CLUSTER> Important Note that we are using cnpg.io/cluster as the label. In the past you may have seen or used postgresql . This label is being deprecated, and will be dropped in the future. Please use cnpg.io/cluster . By default, the operator will install the latest available minor version of the latest major version of PostgreSQL when the operator was released. You can override this by setting the imageName key in the spec section of the Cluster definition. For example, to install PostgreSQL 13.6: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: # [...] spec: # [...] imageName: ghcr.io/cloudnative-pg/postgresql:13.6 #[...] Important The immutable infrastructure paradigm requires that you always point to a specific version of the container image. Never use tags like latest or 13 in a production environment as it might lead to unpredictable scenarios in terms of update policies and version consistency in the cluster. For strict deterministic and repeatable deployments, you can add the digests to the image name, through the <image>:<tag>@sha256:<digestValue> format. There's more There are some examples cluster configurations bundled with the operator. Please refer to the \"Examples\" section .","title":"Part 3: Deploy a PostgreSQL cluster"},{"location":"quickstart/#part-4-monitor-clusters-with-prometheus-and-grafana","text":"Important Installing Prometheus and Grafana is beyond the scope of this project. The instructions in this section are provided for experimentation and illustration only. In this section we show how to deploy Prometheus and Grafana for observability, and how to create a Grafana Dashboard to monitor CloudNativePG clusters, and a set of Prometheus Rules defining alert conditions. We leverage the Kube-Prometheus stack Helm chart, which is maintained by the Prometheus Community . Please refer to the project website for additional documentation and background. The Kube-Prometheus-stack Helm chart installs the Prometheus Operator , including the Alert Manager , and a Grafana deployment. We include a configuration file for the deployment of this Helm chart that will provide useful initial settings for observability of CloudNativePG clusters.","title":"Part 4: Monitor clusters with Prometheus and Grafana"},{"location":"quickstart/#installation","text":"If you don't have Helm installed yet, please follow the instructions to install it in your system. We need to add the prometheus-community helm chart repository, and then install the Kube Prometheus stack with our sample configuration kube-stack-config.yaml . We can accomplish this with the following commands: helm repo add prometheus-community \\ https://prometheus-community.github.io/helm-charts helm upgrade --install \\ -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/kube-stack-config.yaml \\ prometheus-community \\ prometheus-community/kube-prometheus-stack After completion, you will have Prometheus, Grafana, and Alert Manager, configured with the kube-stack-config.yaml file: From the Prometheus installation, you will have the Prometheus Operator watching for any PodMonitor (see monitoring ). Alert Manager and Grafana are both enabled. Seealso For further information about the above helm commands, refer to the helm install documentation. You can see several Custom Resources have been created: % kubectl get crds NAME CREATED AT \u2026 alertmanagers.monitoring.coreos.com <timestamp> \u2026 prometheuses.monitoring.coreos.com <timestamp> prometheusrules.monitoring.coreos.com <timestamp> \u2026 as well as a series of Services: % kubectl get svc NAME TYPE PORT(S) \u2026 \u2026 \u2026 prometheus-community-grafana ClusterIP 80/TCP prometheus-community-kube-alertmanager ClusterIP 9093/TCP prometheus-community-kube-operator ClusterIP 443/TCP prometheus-community-kube-prometheus ClusterIP 9090/TCP","title":"Installation"},{"location":"quickstart/#viewing-with-prometheus","text":"At this point, a CloudNativePG cluster deployed with monitoring activated would be observable via Prometheus. For example, you could deploy a simple cluster with PodMonitor enabled: kubectl apply -f - <<EOF --- apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-with-metrics spec: instances: 3 storage: size: 1Gi monitoring: enablePodMonitor: true EOF To access Prometheus, port-forward the Prometheus service: kubectl port-forward svc/prometheus-community-kube-prometheus 9090 Then access the Prometheus console locally at: http://localhost:9090/ You should find a series of metrics relating to CloudNativePG clusters. Please refer to the monitoring section for more information. You can also monitor the CloudNativePG operator by creating a PodMonitor to target it. See the relevant section in the monitoring page . You can define some alerts by creating a prometheusRule : kubectl apply -f \\ https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/main/docs/src/samples/monitoring/prometheusrule.yaml You should see the default alerts now: % kubectl get prometheusrules NAME AGE cnpg-default-alerts 3m27s In the Prometheus console, you can click on the Alerts menu to see the alerts we just installed.","title":"Viewing with Prometheus"},{"location":"quickstart/#grafana-dashboard","text":"In our installation so far, Grafana is deployed with no predefined dashboards. To open Grafana, you can port-forward the grafana service: kubectl port-forward svc/prometheus-community-grafana 3000:80 and access Grafana locally at http://localhost:3000/ providing the credentials admin as username, prom-operator as password (defined in kube-stack-config.yaml ). CloudNativePG provides a default dashboard for Grafana in the dedicated grafana-dashboards repository . You can download the file grafana-dashboard.json and manually import it via the GUI (menu: Dashboards > New > Import). You can now click on the CloudNativePG dashboard just created: Warning Some graphs in the previous dashboard make use of metrics that are in alpha stage by the time this was created, like kubelet_volume_stats_available_bytes and kubelet_volume_stats_capacity_bytes producing some graphs to show No data . Note that in our local setup, Prometheus and Grafana are configured to automatically discover and monitor any CloudNativePG clusters deployed with the Monitoring feature enabled.","title":"Grafana Dashboard"},{"location":"recovery/","text":"Recovery In PostgreSQL, recovery refers to the process of starting an instance from an existing physical backup. PostgreSQL's recovery system is robust and feature-rich, supporting Point-In-Time Recovery (PITR) \u2014the ability to restore a cluster to any specific moment, from the earliest available backup to the latest archived WAL file. Important A valid WAL archive is required to perform PITR. In CloudNativePG, recovery is not performed in-place on an existing cluster. Instead, it is used to bootstrap a new cluster from a physical backup. Note For more details on configuring the bootstrap stanza, refer to Bootstrap . The recovery bootstrap mode allows you to initialize a cluster from a physical base backup and replay the associated WAL files to bring the system to a consistent and optionally point-in-time state. CloudNativePG supports recovery via: A pluggable backup and recovery interface (CNPG-I) , enabling integration with external tools such as the Barman Cloud Plugin . Native recovery from volume snapshots , where supported by the underlying Kubernetes storage infrastructure. Native recovery from object stores via Barman Cloud , which is deprecated as of version 1.26 in favor of the plugin-based approach. With the deprecation of native Barman Cloud support in version 1.26, this section now focuses on two supported recovery methods: using the Barman Cloud Plugin for recovery from object stores, and the native interface for recovery from volume snapshots. Important For legacy documentation, see Appendix B \u2013 Recovery from an Object Store . Recovery from an Object Store with the Barman Cloud Plugin This section outlines how to recover a PostgreSQL cluster from an object store using the recommended Barman Cloud Plugin. Important The object store must contain backup data produced by a CloudNativePG Cluster \u2014either using the deprecated native Barman Cloud integration or the Barman Cloud Plugin . Info For full details, refer to the \u201cRecovery of a Postgres Cluster\u201d section in the Barman Cloud Plugin documentation . Begin by defining the object store that holds both your base backups and WAL files. The Barman Cloud Plugin uses a custom ObjectStore resource for this purpose. The following example shows how to configure one for Azure Blob Storage: apiVersion: barmancloud.cnpg.io/v1 kind: ObjectStore metadata: name: cluster-example-backup spec: configuration: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8 Next, configure the Cluster resource to use the ObjectStore you defined. In the bootstrap section, specify the recovery source, and define an externalCluster entry that references the plugin: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] superuserSecret: name: superuser-secret bootstrap: recovery: source: origin externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example Recovery from VolumeSnapshot Objects Warning When creating replicas after recovering a primary instance from a VolumeSnapshot , the operator may fall back to using pg_basebackup to synchronize them. This process can be significantly slower\u2014especially for large databases\u2014because it involves a full base backup. This limitation will be addressed in the future with support for online backups and PVC cloning in the scale-up process. CloudNativePG allows you to create a new cluster from a VolumeSnapshot of a PersistentVolumeClaim (PVC) that belongs to an existing Cluster . These snapshots are created using the declarative API for volume snapshot backups . To complete the recovery process, the new cluster must also reference an external cluster that provides access to the WAL archive needed to reapply changes and finalize the recovery. The following example shows a cluster being recovered using both a VolumeSnapshot for the base backup and a WAL archive accessed through the Barman Cloud Plugin: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] bootstrap: recovery: source: origin volumeSnapshots: storage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example In case the backed-up cluster was using a separate PVC to store the WAL files, the recovery must include that too: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] bootstrap: recovery: volumeSnapshots: storage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io walStorage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Warning If bootstrapping a replica-mode cluster from snapshots, to leverage snapshots for the standby instances and not just the primary, we recommend that you: Start with a single instance replica cluster. The primary instance will be recovered using the snapshot, and available WALs from the source cluster. Take a snapshot of the primary in the replica cluster. Increase the number of instances in the replica cluster as desired. Recovery from a Backup object If a Backup resource is already available in the namespace in which you need to create the cluster, you can specify the name using .spec.bootstrap.recovery.backup.name , as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: recovery: backup: name: backup-example storage: size: 1Gi This bootstrap method allows you to specify just a reference to the backup that needs to be restored. The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Additional Considerations Whether you recover from an object store, a volume snapshot, or an existing Backup resource, no changes to the database, including the catalog, are permitted until the Cluster is fully promoted to primary and accepts write operations. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. As a result, the following considerations apply: The application database name and user are copied from the backup being restored. The operator does not currently back up the underlying secrets, as this is part of the usual maintenance activity of the Kubernetes cluster. To preserve the original postgres user password, configure enableSuperuserAccess and supply a superuserSecret . By default, recovery continues up to the latest available WAL on the default target timeline ( latest ). You can optionally specify a recoveryTarget to perform a point-in-time recovery (see Point in Time Recovery (PITR) ). Important Consider using the barmanObjectStore.wal.maxParallel option to speed up WAL fetching from the archive by concurrently downloading the transaction logs from the recovery object store. Point in time recovery (PITR) Instead of replaying all the WALs up to the latest one, after extracting a base backup, you can ask PostgreSQL to stop replaying WALs at any given point in time. PostgreSQL uses this technique to achieve PITR. The presence of a WAL archive is mandatory. Important PITR requires you to specify a recovery target by using the options described in Recovery targets . The operator generates the configuration parameters required for this feature to work if you specify a recovery target. PITR from an object store This example uses the same recovery object store in Azure defined earlier for the Barman Cloud plugin, containing both the base backups and the WAL archive. The recovery target is based on a requested timestamp. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore-pitr spec: instances: 3 storage: size: 5Gi bootstrap: recovery: # Recovery object store containing WAL archive and base backups source: origin recoveryTarget: # Time base target for the recovery targetTime: \"2023-08-11 11:14:21.00000+02\" externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example In this example, you had to specify only the targetTime in the form of a timestamp. You didn't have to specify the base backup from which to start the recovery. The backupID option is the one that allows you to specify the base backup from which to initiate the recovery process. By default, this value is empty. If you assign a value to it (in the form of a Barman backup ID), the operator uses that backup as the base for the recovery. Important You need to make sure that such a backup exists and is accessible. If you don't specify the backup ID, the operator detects the base backup for the recovery as follows: When you use targetTime or targetLSN , the operator selects the closest backup that was completed before that target. Otherwise, the operator selects the last available backup, in chronological order. Point-in-Time Recovery (PITR) from VolumeSnapshot Objects The following example demonstrates how to perform a Point-in-Time Recovery (PITR) using: A Kubernetes VolumeSnapshot of the PGDATA directory, which provides the base backup. This snapshot is specified in the recovery.volumeSnapshots section and is named test-snapshot-1 . A recovery object store (in this case, MinIO) containing the archived WAL files. The object store is defined via a Barman Cloud Plugin ObjectStore resource (not shown here), and referenced using the recovery.source field, which points to an external cluster configuration. The cluster will be restored to a specific point in time using the recoveryTarget.targetTime option. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-snapshot spec: # ... bootstrap: recovery: source: origin volumeSnapshots: storage: name: test-snapshot-1 kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io recoveryTarget: targetTime: \"2023-07-06T08:00:39\" externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: minio-backup serverName: cluster-example This setup enables CloudNativePG to restore the base data from a volume snapshot and apply WAL segments from the object store to reach the desired recovery target. Note If the backed-up cluster had walStorage enabled, you also must specify the volume snapshot containing the PGWAL directory, as mentioned in Recovery from VolumeSnapshot objects . Warning It's your responsibility to ensure that the end time of the base backup in the volume snapshot is before the recovery target timestamp. Warning If you added or removed a tablespace in your cluster since the last base backup, replaying the WAL will fail. You need a base backup between the time of the tablespace change and the recovery target timestamp. Recovery targets Here are the recovery target criteria you can use: targetTime Time stamp up to which recovery proceeds, expressed in RFC 3339 format. (The precise stopping point is also influenced by the exclusive option.) Warning PostgreSQL recovery will stop when it encounters the first transaction that occurs after the specified time. If no such transaction exists after the target time, the recovery process will fail. targetXID Transaction ID up to which recovery proceeds. (The precise stopping point is also influenced by the exclusive option.) Keep in mind that while transaction IDs are assigned sequentially at transaction start, transactions can complete in a different numeric order. The transactions that are recovered are those that committed before (and optionally including) the specified one. targetName Named restore point (created with pg_create_restore_point() ) to which recovery proceeds. targetLSN LSN of the write-ahead log location up to which recovery proceeds. (The precise stopping point is also influenced by the exclusive option.) targetImmediate Recovery ends as soon as a consistent state is reached, that is, as early as possible. When restoring from an online backup, this means the point where taking the backup ended. Important The operator can retrieve the closest backup when you specify either targetTime or targetLSN . However, this isn't possible for the remaining targets: targetName , targetXID , and targetImmediate . In such cases, it's mandatory to specify backupID . This example uses a targetName -based recovery target: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] bootstrap: recovery: source: origin recoveryTarget: backupID: 20220616T142236 targetName: 'restore_point_1' [...] You can choose only a single one among the targets in each recoveryTarget configuration. Additionally, you can specify targetTLI to force recovery to a specific timeline. By default, the previous parameters are considered to be inclusive, stopping just after the recovery target, matching the behavior in PostgreSQL . You can request exclusive behavior, stopping right before the recovery target, by setting the exclusive parameter to true . The following example shows this behavior, relying on a blob container in Azure for both base backups and the WAL archive: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore-pitr spec: instances: 3 storage: size: 5Gi bootstrap: recovery: source: origin recoveryTarget: backupID: 20220616T142236 targetName: \"maintenance-activity\" exclusive: true externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example Configure the application database For the recovered cluster, you can configure the application database name and credentials with additional configuration. To update application database credentials, you can generate your own passwords, store them as secrets, and update the database to use the secrets. Or you can also let the operator generate a secret with a randomly secure password for use. See Bootstrap an empty cluster for more information about secrets. Important While the Cluster is in recovery mode, no changes to the database, including the catalog, are permitted. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. During this phase, users remain as defined in the source cluster. The following example configures the app database with the owner app and the password stored in the provided secret app-secret , following the bootstrap from a live cluster. apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: bootstrap: recovery: database: app owner: app secret: name: app-secret [...] With the above configuration, the following will happen only after recovery is completed : If the app database does not exist, it will be created. If the app user does not exist, it will be created. If the app user is not the owner of the app database, ownership will be granted to the app user. If the username value matches the owner value in the secret, the password for the application user (the app user in this case) will be updated to the password value in the secret. How recovery works under the hood You can use the data uploaded to the object storage to bootstrap a new cluster from an existing backup. The operator orchestrates the recovery process using the barman-cloud-restore tool (for the base backup) and the barman-cloud-wal-restore tool (for WAL files, including parallel support, if requested). For details and instructions on the recovery bootstrap method, see Bootstrap from a backup . Important If you're not familiar with how PostgreSQL PITR works, we suggest that you configure the recovery cluster as the original one when it comes to .spec.postgresql.parameters . Once the new cluster is restored, you can then change the settings as desired. The way it works is that the operator injects an init container in the first instance of the new cluster, and the init container starts recovering the backup from the object storage. Important The duration of the base backup copy in the new PVC depends on the size of the backup, as well as the speed of both the network and the storage. When the base backup recovery process is complete, the operator starts the Postgres instance in recovery mode. In this phase, PostgreSQL is up, though not able to accept connections, and the pod is healthy according to the liveness probe. By way of the restore_command , PostgreSQL starts fetching WAL files from the archive. You can speed up this phase by setting the maxParallel option and enabling the parallel WAL restore capability. This phase terminates when PostgreSQL reaches the target, either the end of the WAL or the required target in case of PITR. You can optionally specify a recoveryTarget to perform a PITR. If left unspecified, the recovery continues up to the latest available WAL on the default target timeline ( latest ). Once the recovery is complete, the operator sets the required superuser password into the instance. The new primary instance starts as usual, and the remaining instances join the cluster as replicas. The process is transparent for the user and is managed by the instance manager running in the pods. Restoring into a Cluster with a Backup Section When restoring a cluster, the manifest may include a plugins section with Barman Cloud plugin pointing to a backup object store resource. This enables the newly created cluster to begin archiving WAL files and taking backups immediately after recovery\u2014provided backup policies are configured. Avoid reusing the same ObjectStore configuration for both backup and recovery in the same cluster. If you must, ensure that each cluster uses a unique serverName to prevent accidental overwrites of backup or WAL archive data. Warning CloudNativePG includes a safety check to prevent a cluster from overwriting existing data in a shared storage bucket. If a conflict is detected, the cluster remains in the Setting up primary state, and the associated pods will fail with an error. The pod logs will display: ERROR: WAL archive check failed for server recoveredCluster: Expected empty archive . Important You can bypass this safety check by setting the cnpg.io/skipEmptyWalArchiveCheck annotation to enabled on the recovered cluster. However, this is strongly discouraged unless you are highly familiar with PostgreSQL's recovery process. Skipping the check incorrectly can lead to severe data loss. Use with caution and only in expert scenarios.","title":"Recovery"},{"location":"recovery/#recovery","text":"In PostgreSQL, recovery refers to the process of starting an instance from an existing physical backup. PostgreSQL's recovery system is robust and feature-rich, supporting Point-In-Time Recovery (PITR) \u2014the ability to restore a cluster to any specific moment, from the earliest available backup to the latest archived WAL file. Important A valid WAL archive is required to perform PITR. In CloudNativePG, recovery is not performed in-place on an existing cluster. Instead, it is used to bootstrap a new cluster from a physical backup. Note For more details on configuring the bootstrap stanza, refer to Bootstrap . The recovery bootstrap mode allows you to initialize a cluster from a physical base backup and replay the associated WAL files to bring the system to a consistent and optionally point-in-time state. CloudNativePG supports recovery via: A pluggable backup and recovery interface (CNPG-I) , enabling integration with external tools such as the Barman Cloud Plugin . Native recovery from volume snapshots , where supported by the underlying Kubernetes storage infrastructure. Native recovery from object stores via Barman Cloud , which is deprecated as of version 1.26 in favor of the plugin-based approach. With the deprecation of native Barman Cloud support in version 1.26, this section now focuses on two supported recovery methods: using the Barman Cloud Plugin for recovery from object stores, and the native interface for recovery from volume snapshots. Important For legacy documentation, see Appendix B \u2013 Recovery from an Object Store .","title":"Recovery"},{"location":"recovery/#recovery-from-an-object-store-with-the-barman-cloud-plugin","text":"This section outlines how to recover a PostgreSQL cluster from an object store using the recommended Barman Cloud Plugin. Important The object store must contain backup data produced by a CloudNativePG Cluster \u2014either using the deprecated native Barman Cloud integration or the Barman Cloud Plugin . Info For full details, refer to the \u201cRecovery of a Postgres Cluster\u201d section in the Barman Cloud Plugin documentation . Begin by defining the object store that holds both your base backups and WAL files. The Barman Cloud Plugin uses a custom ObjectStore resource for this purpose. The following example shows how to configure one for Azure Blob Storage: apiVersion: barmancloud.cnpg.io/v1 kind: ObjectStore metadata: name: cluster-example-backup spec: configuration: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8 Next, configure the Cluster resource to use the ObjectStore you defined. In the bootstrap section, specify the recovery source, and define an externalCluster entry that references the plugin: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] superuserSecret: name: superuser-secret bootstrap: recovery: source: origin externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example","title":"Recovery from an Object Store with the Barman Cloud Plugin"},{"location":"recovery/#recovery-from-volumesnapshot-objects","text":"Warning When creating replicas after recovering a primary instance from a VolumeSnapshot , the operator may fall back to using pg_basebackup to synchronize them. This process can be significantly slower\u2014especially for large databases\u2014because it involves a full base backup. This limitation will be addressed in the future with support for online backups and PVC cloning in the scale-up process. CloudNativePG allows you to create a new cluster from a VolumeSnapshot of a PersistentVolumeClaim (PVC) that belongs to an existing Cluster . These snapshots are created using the declarative API for volume snapshot backups . To complete the recovery process, the new cluster must also reference an external cluster that provides access to the WAL archive needed to reapply changes and finalize the recovery. The following example shows a cluster being recovered using both a VolumeSnapshot for the base backup and a WAL archive accessed through the Barman Cloud Plugin: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] bootstrap: recovery: source: origin volumeSnapshots: storage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example In case the backed-up cluster was using a separate PVC to store the WAL files, the recovery must include that too: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] bootstrap: recovery: volumeSnapshots: storage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io walStorage: name: <snapshot name> kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Warning If bootstrapping a replica-mode cluster from snapshots, to leverage snapshots for the standby instances and not just the primary, we recommend that you: Start with a single instance replica cluster. The primary instance will be recovered using the snapshot, and available WALs from the source cluster. Take a snapshot of the primary in the replica cluster. Increase the number of instances in the replica cluster as desired.","title":"Recovery from VolumeSnapshot Objects"},{"location":"recovery/#recovery-from-a-backup-object","text":"If a Backup resource is already available in the namespace in which you need to create the cluster, you can specify the name using .spec.bootstrap.recovery.backup.name , as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-initdb spec: instances: 3 bootstrap: recovery: backup: name: backup-example storage: size: 1Gi This bootstrap method allows you to specify just a reference to the backup that needs to be restored. The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" .","title":"Recovery from a Backup object"},{"location":"recovery/#additional-considerations","text":"Whether you recover from an object store, a volume snapshot, or an existing Backup resource, no changes to the database, including the catalog, are permitted until the Cluster is fully promoted to primary and accepts write operations. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. As a result, the following considerations apply: The application database name and user are copied from the backup being restored. The operator does not currently back up the underlying secrets, as this is part of the usual maintenance activity of the Kubernetes cluster. To preserve the original postgres user password, configure enableSuperuserAccess and supply a superuserSecret . By default, recovery continues up to the latest available WAL on the default target timeline ( latest ). You can optionally specify a recoveryTarget to perform a point-in-time recovery (see Point in Time Recovery (PITR) ). Important Consider using the barmanObjectStore.wal.maxParallel option to speed up WAL fetching from the archive by concurrently downloading the transaction logs from the recovery object store.","title":"Additional Considerations"},{"location":"recovery/#point-in-time-recovery-pitr","text":"Instead of replaying all the WALs up to the latest one, after extracting a base backup, you can ask PostgreSQL to stop replaying WALs at any given point in time. PostgreSQL uses this technique to achieve PITR. The presence of a WAL archive is mandatory. Important PITR requires you to specify a recovery target by using the options described in Recovery targets . The operator generates the configuration parameters required for this feature to work if you specify a recovery target.","title":"Point in time recovery (PITR)"},{"location":"recovery/#pitr-from-an-object-store","text":"This example uses the same recovery object store in Azure defined earlier for the Barman Cloud plugin, containing both the base backups and the WAL archive. The recovery target is based on a requested timestamp. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore-pitr spec: instances: 3 storage: size: 5Gi bootstrap: recovery: # Recovery object store containing WAL archive and base backups source: origin recoveryTarget: # Time base target for the recovery targetTime: \"2023-08-11 11:14:21.00000+02\" externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example In this example, you had to specify only the targetTime in the form of a timestamp. You didn't have to specify the base backup from which to start the recovery. The backupID option is the one that allows you to specify the base backup from which to initiate the recovery process. By default, this value is empty. If you assign a value to it (in the form of a Barman backup ID), the operator uses that backup as the base for the recovery. Important You need to make sure that such a backup exists and is accessible. If you don't specify the backup ID, the operator detects the base backup for the recovery as follows: When you use targetTime or targetLSN , the operator selects the closest backup that was completed before that target. Otherwise, the operator selects the last available backup, in chronological order.","title":"PITR from an object store"},{"location":"recovery/#point-in-time-recovery-pitr-from-volumesnapshot-objects","text":"The following example demonstrates how to perform a Point-in-Time Recovery (PITR) using: A Kubernetes VolumeSnapshot of the PGDATA directory, which provides the base backup. This snapshot is specified in the recovery.volumeSnapshots section and is named test-snapshot-1 . A recovery object store (in this case, MinIO) containing the archived WAL files. The object store is defined via a Barman Cloud Plugin ObjectStore resource (not shown here), and referenced using the recovery.source field, which points to an external cluster configuration. The cluster will be restored to a specific point in time using the recoveryTarget.targetTime option. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example-snapshot spec: # ... bootstrap: recovery: source: origin volumeSnapshots: storage: name: test-snapshot-1 kind: VolumeSnapshot apiGroup: snapshot.storage.k8s.io recoveryTarget: targetTime: \"2023-07-06T08:00:39\" externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: minio-backup serverName: cluster-example This setup enables CloudNativePG to restore the base data from a volume snapshot and apply WAL segments from the object store to reach the desired recovery target. Note If the backed-up cluster had walStorage enabled, you also must specify the volume snapshot containing the PGWAL directory, as mentioned in Recovery from VolumeSnapshot objects . Warning It's your responsibility to ensure that the end time of the base backup in the volume snapshot is before the recovery target timestamp. Warning If you added or removed a tablespace in your cluster since the last base backup, replaying the WAL will fail. You need a base backup between the time of the tablespace change and the recovery target timestamp.","title":"Point-in-Time Recovery (PITR) from VolumeSnapshot Objects"},{"location":"recovery/#recovery-targets","text":"Here are the recovery target criteria you can use: targetTime Time stamp up to which recovery proceeds, expressed in RFC 3339 format. (The precise stopping point is also influenced by the exclusive option.) Warning PostgreSQL recovery will stop when it encounters the first transaction that occurs after the specified time. If no such transaction exists after the target time, the recovery process will fail. targetXID Transaction ID up to which recovery proceeds. (The precise stopping point is also influenced by the exclusive option.) Keep in mind that while transaction IDs are assigned sequentially at transaction start, transactions can complete in a different numeric order. The transactions that are recovered are those that committed before (and optionally including) the specified one. targetName Named restore point (created with pg_create_restore_point() ) to which recovery proceeds. targetLSN LSN of the write-ahead log location up to which recovery proceeds. (The precise stopping point is also influenced by the exclusive option.) targetImmediate Recovery ends as soon as a consistent state is reached, that is, as early as possible. When restoring from an online backup, this means the point where taking the backup ended. Important The operator can retrieve the closest backup when you specify either targetTime or targetLSN . However, this isn't possible for the remaining targets: targetName , targetXID , and targetImmediate . In such cases, it's mandatory to specify backupID . This example uses a targetName -based recovery target: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] bootstrap: recovery: source: origin recoveryTarget: backupID: 20220616T142236 targetName: 'restore_point_1' [...] You can choose only a single one among the targets in each recoveryTarget configuration. Additionally, you can specify targetTLI to force recovery to a specific timeline. By default, the previous parameters are considered to be inclusive, stopping just after the recovery target, matching the behavior in PostgreSQL . You can request exclusive behavior, stopping right before the recovery target, by setting the exclusive parameter to true . The following example shows this behavior, relying on a blob container in Azure for both base backups and the WAL archive: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore-pitr spec: instances: 3 storage: size: 5Gi bootstrap: recovery: source: origin recoveryTarget: backupID: 20220616T142236 targetName: \"maintenance-activity\" exclusive: true externalClusters: - name: origin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-example-backup serverName: cluster-example","title":"Recovery targets"},{"location":"recovery/#configure-the-application-database","text":"For the recovered cluster, you can configure the application database name and credentials with additional configuration. To update application database credentials, you can generate your own passwords, store them as secrets, and update the database to use the secrets. Or you can also let the operator generate a secret with a randomly secure password for use. See Bootstrap an empty cluster for more information about secrets. Important While the Cluster is in recovery mode, no changes to the database, including the catalog, are permitted. This restriction includes any role overrides, which are deferred until the Cluster transitions to primary. During this phase, users remain as defined in the source cluster. The following example configures the app database with the owner app and the password stored in the provided secret app-secret , following the bootstrap from a live cluster. apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: bootstrap: recovery: database: app owner: app secret: name: app-secret [...] With the above configuration, the following will happen only after recovery is completed : If the app database does not exist, it will be created. If the app user does not exist, it will be created. If the app user is not the owner of the app database, ownership will be granted to the app user. If the username value matches the owner value in the secret, the password for the application user (the app user in this case) will be updated to the password value in the secret.","title":"Configure the application database"},{"location":"recovery/#how-recovery-works-under-the-hood","text":"You can use the data uploaded to the object storage to bootstrap a new cluster from an existing backup. The operator orchestrates the recovery process using the barman-cloud-restore tool (for the base backup) and the barman-cloud-wal-restore tool (for WAL files, including parallel support, if requested). For details and instructions on the recovery bootstrap method, see Bootstrap from a backup . Important If you're not familiar with how PostgreSQL PITR works, we suggest that you configure the recovery cluster as the original one when it comes to .spec.postgresql.parameters . Once the new cluster is restored, you can then change the settings as desired. The way it works is that the operator injects an init container in the first instance of the new cluster, and the init container starts recovering the backup from the object storage. Important The duration of the base backup copy in the new PVC depends on the size of the backup, as well as the speed of both the network and the storage. When the base backup recovery process is complete, the operator starts the Postgres instance in recovery mode. In this phase, PostgreSQL is up, though not able to accept connections, and the pod is healthy according to the liveness probe. By way of the restore_command , PostgreSQL starts fetching WAL files from the archive. You can speed up this phase by setting the maxParallel option and enabling the parallel WAL restore capability. This phase terminates when PostgreSQL reaches the target, either the end of the WAL or the required target in case of PITR. You can optionally specify a recoveryTarget to perform a PITR. If left unspecified, the recovery continues up to the latest available WAL on the default target timeline ( latest ). Once the recovery is complete, the operator sets the required superuser password into the instance. The new primary instance starts as usual, and the remaining instances join the cluster as replicas. The process is transparent for the user and is managed by the instance manager running in the pods.","title":"How recovery works under the hood"},{"location":"recovery/#restoring-into-a-cluster-with-a-backup-section","text":"When restoring a cluster, the manifest may include a plugins section with Barman Cloud plugin pointing to a backup object store resource. This enables the newly created cluster to begin archiving WAL files and taking backups immediately after recovery\u2014provided backup policies are configured. Avoid reusing the same ObjectStore configuration for both backup and recovery in the same cluster. If you must, ensure that each cluster uses a unique serverName to prevent accidental overwrites of backup or WAL archive data. Warning CloudNativePG includes a safety check to prevent a cluster from overwriting existing data in a shared storage bucket. If a conflict is detected, the cluster remains in the Setting up primary state, and the associated pods will fail with an error. The pod logs will display: ERROR: WAL archive check failed for server recoveredCluster: Expected empty archive . Important You can bypass this safety check by setting the cnpg.io/skipEmptyWalArchiveCheck annotation to enabled on the recovered cluster. However, this is strongly discouraged unless you are highly familiar with PostgreSQL's recovery process. Skipping the check incorrectly can lead to severe data loss. Use with caution and only in expert scenarios.","title":"Restoring into a Cluster with a Backup Section"},{"location":"release_notes/","text":"Release notes History of user-visible changes for CloudNativePG, classified for each minor release. CloudNativePG 1.27 - Release Candidate CloudNativePG 1.26 CloudNativePG 1.25 For information on the community support policy for CloudNativePG, please refer to \"Supported releases\" . Older releases: CloudNativePG 1.24 CloudNativePG 1.23 CloudNativePG 1.22 CloudNativePG 1.21 CloudNativePG 1.20 CloudNativePG 1.19 CloudNativePG 1.18 CloudNativePG 1.17 CloudNativePG 1.16 CloudNativePG 1.15 We also keep record of all the release notes from 1.0.0 to 1.14.0 of Cloud Native PostgreSQL by EDB , the predecessor of CloudNativePG.","title":"Release notes"},{"location":"release_notes/#release-notes","text":"History of user-visible changes for CloudNativePG, classified for each minor release. CloudNativePG 1.27 - Release Candidate CloudNativePG 1.26 CloudNativePG 1.25 For information on the community support policy for CloudNativePG, please refer to \"Supported releases\" . Older releases: CloudNativePG 1.24 CloudNativePG 1.23 CloudNativePG 1.22 CloudNativePG 1.21 CloudNativePG 1.20 CloudNativePG 1.19 CloudNativePG 1.18 CloudNativePG 1.17 CloudNativePG 1.16 CloudNativePG 1.15 We also keep record of all the release notes from 1.0.0 to 1.14.0 of Cloud Native PostgreSQL by EDB , the predecessor of CloudNativePG.","title":"Release notes"},{"location":"replica_cluster/","text":"Replica clusters A replica cluster is a CloudNativePG Cluster resource designed to replicate data from another PostgreSQL instance, ideally also managed by CloudNativePG. Typically, a replica cluster is deployed in a different Kubernetes cluster in another region. These clusters can be configured to perform cascading replication and can rely on object stores for data replication from the source, as detailed further down. There are primarily two use cases for replica clusters: Disaster Recovery and High Availability : Enhance disaster recovery and, to some extent, high availability of a CloudNativePG cluster across different Kubernetes clusters, typically located in different regions. In CloudNativePG terms, this is known as a \"Distributed Topology\" . Read-Only Workloads : Create standalone replicas of a PostgreSQL cluster for purposes such as reporting or Online Analytical Processing (OLAP). These replicas are primarily for read-only workloads. In CloudNativePG terms, this is referred to as a \"Standalone Replica Cluster\" . For example, the diagram below \u2014 taken from the \"Architecture\" section \u2014 illustrates a distributed PostgreSQL topology spanning two Kubernetes clusters, with a symmetric replica cluster primarily serving disaster recovery purposes. Basic Concepts CloudNativePG builds on the PostgreSQL replication framework, allowing you to create and synchronize a PostgreSQL cluster from an existing source cluster using the replica cluster feature \u2014 described in this section. The source can be a primary cluster or another replica cluster (cascading replication). About PostgreSQL Roles A replica cluster operates in continuous recovery mode, meaning no changes to the database, including the catalog and global objects like roles or databases, are permitted. These changes are deferred until the Cluster transitions to primary. During this phase, global objects such as roles remain as defined in the source cluster. CloudNativePG applies any local redefinitions once the cluster is promoted. If you are not planning to promote the cluster (e.g., for read-only workloads) or if you intend to detach completely from the source cluster once the replica cluster is promoted, you don't need to take any action. This is normally the case of the \"Standalone Replica Cluster\" . If you are planning to promote the cluster at some point, CloudNativePG will manage the following roles and passwords when transitioning from replica cluster to primary: the application user the superuser (if you are using it) any role defined using the declarative interface If your intention is to seamlessly ensure that the above roles and passwords don't change, you need to define the necessary secrets for the above in each Cluster . This is normally the case of the \"Distributed Topology\" . Bootstrapping a Replica Cluster The first step is to bootstrap the replica cluster using one of the following methods: Streaming replication via pg_basebackup Recovery from a volume snapshot Recovery from a Barman Cloud backup in an object store For detailed instructions on cloning a PostgreSQL server using pg_basebackup (streaming) or recovery (volume snapshot or object store), refer to the \"Bootstrap\" section . Configuring Replication Once the base backup for the replica cluster is available, you need to define how changes will be replicated from the origin using PostgreSQL continuous recovery. There are three main options: Streaming Replication : Set up streaming replication between the replica cluster and the source. This method requires configuring network connections and implementing appropriate administrative and security measures to ensure seamless data transfer. WAL Archive : Use the WAL (Write-Ahead Logging) archive stored in an object store. WAL files are regularly transferred from the source cluster to the object store, from where a CNPG-I plugin like Barman Cloud retrieves them for the replica cluster via the restore_command . Hybrid Approach : Combine both streaming replication and WAL archive methods. PostgreSQL can manage and switch between these two approaches as needed to ensure data consistency and availability. Defining an External Cluster When configuring the external cluster, you have the following options: plugin section : Enables bootstrapping the replica cluster using a CNPG-I plugin that support the restore_job and the wal protocols. CloudNativePG supports the Barman Cloud Plugin to allow bootstrapping the replica cluster from an object store. connectionParameters section : Enables bootstrapping the replica cluster via streaming replication using the pg_basebackup section. CloudNativePG automatically sets the primary_conninfo option in the designated primary instance, initiating a WAL receiver process to connect to the source cluster and receive data. You still have access to the barmanObjectStore section , although deprecated: Enables use of the WAL archive, with CloudNativePG automatically setting the restore_command in the designated primary instance. Allows bootstrapping the replica cluster from an object store using the recovery section if volume snapshots are not feasible. Backup and Symmetric Architectures The replica cluster can perform backups to a reserved object store from the designated primary, supporting symmetric architectures in a distributed environment. This architectural choice is crucial as it ensures the cluster is prepared for promotion during a controlled data center switchover or a failover following an unexpected event. Distributed Architecture Flexibility You have the flexibility to design your preferred distributed architecture for a PostgreSQL database, choosing from: Private Cloud : Spanning multiple Kubernetes clusters in different data centers. Public Cloud : Spanning multiple Kubernetes clusters in different regions. Hybrid Cloud : Combining private and public clouds. Multi-Cloud : Spanning multiple Kubernetes clusters across different regions and Cloud Service Providers. Setting Up a Replica Cluster To set up a replica cluster from a source cluster, follow these steps to create a cluster YAML file and configure it accordingly: Define External Clusters : In the externalClusters section, specify the replica cluster. For a distributed PostgreSQL topology aimed at disaster recovery (DR) and high availability (HA), this section should be defined for every PostgreSQL cluster in the distributed database. Bootstrap the Replica Cluster : Streaming Bootstrap : Use the pg_basebackup section for bootstrapping via streaming replication. Snapshot/Object Store Bootstrap : Use the recovery section to bootstrap from a volume snapshot or an object store. Continuous Recovery Strategy : Define this in the .spec.replica stanza: Distributed Topology : Configure using the primary , source , and self fields along with the distributed topology defined in externalClusters . This allows CloudNativePG to declaratively control the demotion of a primary cluster and the subsequent promotion of a replica cluster using a promotion token. Standalone Replica Cluster : Enable continuous recovery using the enabled option and set the source field to point to an externalClusters name. This configuration is suitable for creating replicas primarily intended for read-only workloads. Both the Distributed Topology and the Standalone Replica Cluster strategies for continuous recovery are thoroughly explained below. Distributed Topology Planning for a Distributed PostgreSQL Database As Dwight Eisenhower famously said, \"Planning is everything\", and this holds true for designing PostgreSQL architectures in Kubernetes. First, conceptualize your distributed topology on paper, and then translate it into a CloudNativePG API configuration. This configuration primarily involves: The externalClusters section, which must be included in every Cluster definition within your distributed PostgreSQL setup. The .spec.replica stanza, specifically the primary , source , and (optionally) self fields. For example, suppose you want to deploy a PostgreSQL cluster distributed across two Kubernetes clusters located in Southern Europe and Central Europe. In this scenario, assume you have CloudNativePG installed in the Southern Europe Kubernetes cluster, with a PostgreSQL Cluster named cluster-eu-south acting as the primary. This cluster has continuous backup configured with a local object store. This object store is also accessible by the PostgreSQL Cluster named cluster-eu-central , installed in the Central European Kubernetes cluster. Initially, cluster-eu-central functions as a replica cluster. Following a symmetric approach, it also has a local object store for continuous backup, which needs to be read by cluster-eu-south . In this example, recovery is performed solely through WAL shipping, without any streaming replication between the two clusters. However, you can configure the setup to use streaming replication alone or adopt a hybrid approach\u2014streaming replication with WAL shipping as a fallback\u2014as described in the \u201cConfiguring replication\u201d section. Here\u2019s how you would configure the externalClusters section for both Cluster resources, relying on Barman Cloud Plugin for the object store: # Distributed topology configuration externalClusters: - name: cluster-eu-south plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-eu-south serverName: cluster-eu-south - name: cluster-eu-central plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-eu-central serverName: cluster-eu-central The .spec.replica stanza for the cluster-eu-south PostgreSQL primary Cluster should be configured as follows: replica: primary: cluster-eu-south source: cluster-eu-central Meanwhile, the .spec.replica stanza for the cluster-eu-central PostgreSQL replica Cluster should be configured as: replica: primary: cluster-eu-south source: cluster-eu-south In this configuration, when the primary field matches the name of the Cluster resource (or .spec.replica.self if a different one is used), the current cluster is considered the primary in the distributed topology. Otherwise, it is set as a replica from the source (in this case, using the Barman object store). This setup allows you to efficiently manage a distributed PostgreSQL architecture across multiple Kubernetes clusters, ensuring both high availability and disaster recovery through controlled switchover of a primary PostgreSQL cluster using declarative configuration. Controlled switchover in a distributed topology is a two-step process involving: Demotion of a primary cluster to a replica cluster Promotion of a replica cluster to a primary cluster These processes are described in the next sections. Important Before you proceed, ensure you review the \"About PostgreSQL Roles\" section above and use identical role definitions, including secrets, in all Cluster objects participating in the distributed topology. Demoting a Primary to a Replica Cluster CloudNativePG provides the functionality to demote a primary cluster to a replica cluster. This action is typically planned when transitioning the primary role from one data center to another. The process involves demoting the current primary cluster (e.g., cluster-eu-south ) to a replica cluster and subsequently promoting the designated replica cluster (e.g., cluster-eu-central ) to primary when fully synchronized. Provided you have defined an external cluster in the current primary Cluster resource that points to the replica cluster that's been selected to become the new primary, all you need to do is change the primary field as follows: replica: primary: cluster-eu-central source: cluster-eu-central When the primary PostgreSQL cluster is demoted, write operations are no longer possible. CloudNativePG then: Archives the WAL file containing the shutdown checkpoint as a .partial file in the WAL archive. Generates a demotionToken in the status, a base64-encoded JSON structure containing relevant information from pg_controldata such as the system identifier, the timestamp, timeline ID, REDO location, and REDO WAL file of the latest checkpoint. The first step is necessary to demote/promote using solely the WAL archive to feed the continuous recovery process (without streaming replication). The second step, generation of the .status.demotionToken , will ensure a smooth demotion/promotion process, without any data loss and without rebuilding the former primary. At this stage, the former primary has transitioned to a replica cluster, awaiting WAL data from the new global primary: cluster-eu-central . To proceed with promoting the other cluster, you need to retrieve the demotionToken from cluster-eu-south using the following command: kubectl get cluster cluster-eu-south \\ -o jsonpath='{.status.demotionToken}' You can obtain the demotionToken using the cnpg plugin by checking the cluster's status. The token is listed under the Demotion token section. Note The demotionToken obtained from cluster-eu-south will serve as the promotionToken for cluster-eu-central . You can verify the role change using the cnpg plugin, checking the status of the cluster: kubectl cnpg status cluster-eu-south Promoting a Replica to a Primary Cluster To promote a PostgreSQL replica cluster (e.g., cluster-eu-central ) to a primary cluster and make the designated primary an actual primary instance, you need to perform the following steps simultaneously: Set the .spec.replica.primary to the name of the current replica cluster to be promoted (e.g., cluster-eu-central ). Set the .spec.replica.promotionToken with the value obtained from the former primary cluster (refer to \"Demoting a Primary to a Replica Cluster\" ). The updated replica section in cluster-eu-central 's spec should look like this: replica: primary: cluster-eu-central promotionToken: <PROMOTION_TOKEN> source: cluster-eu-south Warning It is crucial to apply the changes to the primary and promotionToken fields simultaneously. If the promotion token is omitted, a failover will be triggered, necessitating a rebuild of the former primary. After making these adjustments, CloudNativePG will initiate the promotion of the replica cluster to a primary cluster. Initially, CloudNativePG will wait for the designated primary cluster to replicate all Write-Ahead Logging (WAL) information up to the specified Log Sequence Number (LSN) contained in the token. Once this target is achieved, the promotion process will commence. The new primary cluster will switch timelines, archive the history file and new WAL, thereby unblocking the replication process in the cluster-eu-south cluster, which will then operate as a replica. To verify the role change, use the cnpg plugin to check the status of the cluster: kubectl cnpg status cluster-eu-central This command will provide you with the current status of cluster-eu-central , confirming its promotion to primary. By following these steps, you ensure a smooth and controlled promotion process, minimizing disruption and maintaining data integrity across your PostgreSQL clusters. Standalone Replica Clusters Important Standalone Replica Clusters were previously known as Replica Clusters before the introduction of the Distributed Topology strategy in CloudNativePG 1.24. In CloudNativePG, a Standalone Replica Cluster is a PostgreSQL cluster in continuous recovery with the following configurations: .spec.replica.enabled set to true A physical replication source defined via the .spec.replica.source field, pointing to an externalClusters name When .spec.replica.enabled is set to false , the replica cluster exits continuous recovery mode and becomes a primary cluster, completely detached from the original source. Warning Disabling replication is an irreversible operation. Once replication is disabled and the designated primary is promoted to primary, the replica cluster and the source cluster become two independent clusters definitively. Important Standalone replica clusters are suitable for several use cases, primarily involving read-only workloads. If you are planning to setup a disaster recovery solution, look into \"Distributed Topology\" above. Main Differences with Distributed Topology Although Standalone Replica Clusters can be used for disaster recovery purposes, they differ from the \"Distributed Topology\" strategy in several key ways: Lack of Distributed Database Concept : Standalone Replica Clusters do not support the concept of a distributed database, whether in simple forms (two clusters) or more complex configurations (e.g., three clusters in a circular topology). No Global Primary Cluster : There is no notion of a global primary cluster in Standalone Replica Clusters. No Controlled Switchover : A Standalone Replica Cluster can only be promoted to primary. The former primary cluster must be re-cloned, as controlled switchover is not possible. Failover is identical in both strategies, requiring the former primary to be re-cloned if it ever comes back up. Example of Standalone Replica Cluster using pg_basebackup This first example defines a standalone replica cluster using streaming replication in both bootstrap and continuous recovery. The replica cluster connects to the source cluster using TLS authentication. You can check the sample YAML in the samples/ subdirectory. Note the bootstrap and replica sections pointing to the source cluster. bootstrap: pg_basebackup: source: cluster-example replica: enabled: true source: cluster-example The previous configuration assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. In the externalClusters section, remember to use the right namespace for the host in the connectionParameters sub-section. The -replication and -ca secrets should have been copied over if necessary, in case the replica cluster is in a separate namespace. externalClusters: - name: <MAIN-CLUSTER> connectionParameters: host: <MAIN-CLUSTER>-rw.<NAMESPACE>.svc user: streaming_replica sslmode: verify-full dbname: postgres sslKey: name: <MAIN-CLUSTER>-replication key: tls.key sslCert: name: <MAIN-CLUSTER>-replication key: tls.crt sslRootCert: name: <MAIN-CLUSTER>-ca key: ca.crt Example of Standalone Replica Cluster from an object store The second example defines a replica cluster that bootstraps from an object store using the recovery section and continuous recovery using both streaming replication and the given object store. For streaming replication, the replica cluster connects to the source cluster using basic authentication. You can check the sample YAML for it in the samples/ subdirectory. Note the bootstrap and replica sections pointing to the source cluster. bootstrap: recovery: source: cluster-example replica: enabled: true source: cluster-example The previous configuration assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. In the externalClusters section, take care to use the right namespace in the endpointURL and the connectionParameters.host . And do ensure that the necessary secrets have been copied if necessary, and that a backup of the source cluster has been created already. externalClusters: - name: <MAIN-CLUSTER> # Example with Barman Cloud Plugin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: <MAIN-CLUSTER> serverName: <MAIN-CLUSTER> \u2026 connectionParameters: host: <MAIN-CLUSTER>-rw.default.svc user: postgres dbname: postgres password: name: <MAIN-CLUSTER>-superuser key: password Note To use streaming replication between the source cluster and the replica cluster, we need to make sure there is network connectivity between the two clusters, and that all the necessary secrets which hold passwords or certificates are properly created in advance. Example using a Volume Snapshot If you use volume snapshots and your storage class provides snapshots cross-cluster availability, you can leverage that to bootstrap a replica cluster through a volume snapshot of the source cluster. The third example defines a replica cluster that bootstraps from a volume snapshot using the recovery section. It uses streaming replication (via basic authentication) and the object store to fetch the WAL files. You can check the sample YAML for it in the samples/ subdirectory. The example assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. Delayed replicas CloudNativePG supports the creation of delayed replicas through the .spec.replica.minApplyDelay option , leveraging PostgreSQL's recovery_min_apply_delay . Delayed replicas are designed to intentionally lag behind the primary database by a specified amount of time. This delay is configurable using the .spec.replica.minApplyDelay option, which maps to the underlying recovery_min_apply_delay parameter in PostgreSQL. The primary objective of delayed replicas is to mitigate the impact of unintended SQL statement executions on the primary database. This is especially useful in scenarios where operations such as UPDATE or DELETE are performed without a proper WHERE clause. To configure a delay in a replica cluster, adjust the .spec.replica.minApplyDelay option. This parameter determines how much time the replicas will lag behind the primary. For example: # ... replica: enabled: true source: cluster-example # Enforce a delay of 8 hours minApplyDelay: '8h' # ... The above example helps safeguard against accidental data modifications by providing a buffer period of 8 hours to detect and correct issues before they propagate to the replicas. Monitor and adjust the delay as needed based on your recovery time objectives and the potential impact of unintended primary database operations. The main use cases of delayed replicas can be summarized into: mitigating human errors: reduce the risk of data corruption or loss resulting from unintentional SQL operations on the primary database recovery time optimization: facilitate quicker recovery from unintended changes by having a delayed replica that allows you to identify and rectify issues before changes are applied to other replicas. enhanced data protection: safeguard critical data by introducing a time buffer that provides an opportunity to intervene and prevent the propagation of undesirable changes. Warning The minApplyDelay option of delayed replicas cannot be used in conjunction with promotionToken . By integrating delayed replicas into your replication strategy, you can enhance the resilience and data protection capabilities of your PostgreSQL environment. Adjust the delay duration based on your specific needs and the criticality of your data. Important Always measure your goals. Depending on your environment, it might be more efficient to rely on volume snapshot-based recovery for faster outcomes. Evaluate and choose the approach that best aligns with your unique requirements and infrastructure.","title":"Replica clusters"},{"location":"replica_cluster/#replica-clusters","text":"A replica cluster is a CloudNativePG Cluster resource designed to replicate data from another PostgreSQL instance, ideally also managed by CloudNativePG. Typically, a replica cluster is deployed in a different Kubernetes cluster in another region. These clusters can be configured to perform cascading replication and can rely on object stores for data replication from the source, as detailed further down. There are primarily two use cases for replica clusters: Disaster Recovery and High Availability : Enhance disaster recovery and, to some extent, high availability of a CloudNativePG cluster across different Kubernetes clusters, typically located in different regions. In CloudNativePG terms, this is known as a \"Distributed Topology\" . Read-Only Workloads : Create standalone replicas of a PostgreSQL cluster for purposes such as reporting or Online Analytical Processing (OLAP). These replicas are primarily for read-only workloads. In CloudNativePG terms, this is referred to as a \"Standalone Replica Cluster\" . For example, the diagram below \u2014 taken from the \"Architecture\" section \u2014 illustrates a distributed PostgreSQL topology spanning two Kubernetes clusters, with a symmetric replica cluster primarily serving disaster recovery purposes.","title":"Replica clusters"},{"location":"replica_cluster/#basic-concepts","text":"CloudNativePG builds on the PostgreSQL replication framework, allowing you to create and synchronize a PostgreSQL cluster from an existing source cluster using the replica cluster feature \u2014 described in this section. The source can be a primary cluster or another replica cluster (cascading replication).","title":"Basic Concepts"},{"location":"replica_cluster/#about-postgresql-roles","text":"A replica cluster operates in continuous recovery mode, meaning no changes to the database, including the catalog and global objects like roles or databases, are permitted. These changes are deferred until the Cluster transitions to primary. During this phase, global objects such as roles remain as defined in the source cluster. CloudNativePG applies any local redefinitions once the cluster is promoted. If you are not planning to promote the cluster (e.g., for read-only workloads) or if you intend to detach completely from the source cluster once the replica cluster is promoted, you don't need to take any action. This is normally the case of the \"Standalone Replica Cluster\" . If you are planning to promote the cluster at some point, CloudNativePG will manage the following roles and passwords when transitioning from replica cluster to primary: the application user the superuser (if you are using it) any role defined using the declarative interface If your intention is to seamlessly ensure that the above roles and passwords don't change, you need to define the necessary secrets for the above in each Cluster . This is normally the case of the \"Distributed Topology\" .","title":"About PostgreSQL Roles"},{"location":"replica_cluster/#bootstrapping-a-replica-cluster","text":"The first step is to bootstrap the replica cluster using one of the following methods: Streaming replication via pg_basebackup Recovery from a volume snapshot Recovery from a Barman Cloud backup in an object store For detailed instructions on cloning a PostgreSQL server using pg_basebackup (streaming) or recovery (volume snapshot or object store), refer to the \"Bootstrap\" section .","title":"Bootstrapping a Replica Cluster"},{"location":"replica_cluster/#configuring-replication","text":"Once the base backup for the replica cluster is available, you need to define how changes will be replicated from the origin using PostgreSQL continuous recovery. There are three main options: Streaming Replication : Set up streaming replication between the replica cluster and the source. This method requires configuring network connections and implementing appropriate administrative and security measures to ensure seamless data transfer. WAL Archive : Use the WAL (Write-Ahead Logging) archive stored in an object store. WAL files are regularly transferred from the source cluster to the object store, from where a CNPG-I plugin like Barman Cloud retrieves them for the replica cluster via the restore_command . Hybrid Approach : Combine both streaming replication and WAL archive methods. PostgreSQL can manage and switch between these two approaches as needed to ensure data consistency and availability.","title":"Configuring Replication"},{"location":"replica_cluster/#defining-an-external-cluster","text":"When configuring the external cluster, you have the following options: plugin section : Enables bootstrapping the replica cluster using a CNPG-I plugin that support the restore_job and the wal protocols. CloudNativePG supports the Barman Cloud Plugin to allow bootstrapping the replica cluster from an object store. connectionParameters section : Enables bootstrapping the replica cluster via streaming replication using the pg_basebackup section. CloudNativePG automatically sets the primary_conninfo option in the designated primary instance, initiating a WAL receiver process to connect to the source cluster and receive data. You still have access to the barmanObjectStore section , although deprecated: Enables use of the WAL archive, with CloudNativePG automatically setting the restore_command in the designated primary instance. Allows bootstrapping the replica cluster from an object store using the recovery section if volume snapshots are not feasible.","title":"Defining an External Cluster"},{"location":"replica_cluster/#backup-and-symmetric-architectures","text":"The replica cluster can perform backups to a reserved object store from the designated primary, supporting symmetric architectures in a distributed environment. This architectural choice is crucial as it ensures the cluster is prepared for promotion during a controlled data center switchover or a failover following an unexpected event.","title":"Backup and Symmetric Architectures"},{"location":"replica_cluster/#distributed-architecture-flexibility","text":"You have the flexibility to design your preferred distributed architecture for a PostgreSQL database, choosing from: Private Cloud : Spanning multiple Kubernetes clusters in different data centers. Public Cloud : Spanning multiple Kubernetes clusters in different regions. Hybrid Cloud : Combining private and public clouds. Multi-Cloud : Spanning multiple Kubernetes clusters across different regions and Cloud Service Providers.","title":"Distributed Architecture Flexibility"},{"location":"replica_cluster/#setting-up-a-replica-cluster","text":"To set up a replica cluster from a source cluster, follow these steps to create a cluster YAML file and configure it accordingly: Define External Clusters : In the externalClusters section, specify the replica cluster. For a distributed PostgreSQL topology aimed at disaster recovery (DR) and high availability (HA), this section should be defined for every PostgreSQL cluster in the distributed database. Bootstrap the Replica Cluster : Streaming Bootstrap : Use the pg_basebackup section for bootstrapping via streaming replication. Snapshot/Object Store Bootstrap : Use the recovery section to bootstrap from a volume snapshot or an object store. Continuous Recovery Strategy : Define this in the .spec.replica stanza: Distributed Topology : Configure using the primary , source , and self fields along with the distributed topology defined in externalClusters . This allows CloudNativePG to declaratively control the demotion of a primary cluster and the subsequent promotion of a replica cluster using a promotion token. Standalone Replica Cluster : Enable continuous recovery using the enabled option and set the source field to point to an externalClusters name. This configuration is suitable for creating replicas primarily intended for read-only workloads. Both the Distributed Topology and the Standalone Replica Cluster strategies for continuous recovery are thoroughly explained below.","title":"Setting Up a Replica Cluster"},{"location":"replica_cluster/#distributed-topology","text":"","title":"Distributed Topology"},{"location":"replica_cluster/#planning-for-a-distributed-postgresql-database","text":"As Dwight Eisenhower famously said, \"Planning is everything\", and this holds true for designing PostgreSQL architectures in Kubernetes. First, conceptualize your distributed topology on paper, and then translate it into a CloudNativePG API configuration. This configuration primarily involves: The externalClusters section, which must be included in every Cluster definition within your distributed PostgreSQL setup. The .spec.replica stanza, specifically the primary , source , and (optionally) self fields. For example, suppose you want to deploy a PostgreSQL cluster distributed across two Kubernetes clusters located in Southern Europe and Central Europe. In this scenario, assume you have CloudNativePG installed in the Southern Europe Kubernetes cluster, with a PostgreSQL Cluster named cluster-eu-south acting as the primary. This cluster has continuous backup configured with a local object store. This object store is also accessible by the PostgreSQL Cluster named cluster-eu-central , installed in the Central European Kubernetes cluster. Initially, cluster-eu-central functions as a replica cluster. Following a symmetric approach, it also has a local object store for continuous backup, which needs to be read by cluster-eu-south . In this example, recovery is performed solely through WAL shipping, without any streaming replication between the two clusters. However, you can configure the setup to use streaming replication alone or adopt a hybrid approach\u2014streaming replication with WAL shipping as a fallback\u2014as described in the \u201cConfiguring replication\u201d section. Here\u2019s how you would configure the externalClusters section for both Cluster resources, relying on Barman Cloud Plugin for the object store: # Distributed topology configuration externalClusters: - name: cluster-eu-south plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-eu-south serverName: cluster-eu-south - name: cluster-eu-central plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: cluster-eu-central serverName: cluster-eu-central The .spec.replica stanza for the cluster-eu-south PostgreSQL primary Cluster should be configured as follows: replica: primary: cluster-eu-south source: cluster-eu-central Meanwhile, the .spec.replica stanza for the cluster-eu-central PostgreSQL replica Cluster should be configured as: replica: primary: cluster-eu-south source: cluster-eu-south In this configuration, when the primary field matches the name of the Cluster resource (or .spec.replica.self if a different one is used), the current cluster is considered the primary in the distributed topology. Otherwise, it is set as a replica from the source (in this case, using the Barman object store). This setup allows you to efficiently manage a distributed PostgreSQL architecture across multiple Kubernetes clusters, ensuring both high availability and disaster recovery through controlled switchover of a primary PostgreSQL cluster using declarative configuration. Controlled switchover in a distributed topology is a two-step process involving: Demotion of a primary cluster to a replica cluster Promotion of a replica cluster to a primary cluster These processes are described in the next sections. Important Before you proceed, ensure you review the \"About PostgreSQL Roles\" section above and use identical role definitions, including secrets, in all Cluster objects participating in the distributed topology.","title":"Planning for a Distributed PostgreSQL Database"},{"location":"replica_cluster/#demoting-a-primary-to-a-replica-cluster","text":"CloudNativePG provides the functionality to demote a primary cluster to a replica cluster. This action is typically planned when transitioning the primary role from one data center to another. The process involves demoting the current primary cluster (e.g., cluster-eu-south ) to a replica cluster and subsequently promoting the designated replica cluster (e.g., cluster-eu-central ) to primary when fully synchronized. Provided you have defined an external cluster in the current primary Cluster resource that points to the replica cluster that's been selected to become the new primary, all you need to do is change the primary field as follows: replica: primary: cluster-eu-central source: cluster-eu-central When the primary PostgreSQL cluster is demoted, write operations are no longer possible. CloudNativePG then: Archives the WAL file containing the shutdown checkpoint as a .partial file in the WAL archive. Generates a demotionToken in the status, a base64-encoded JSON structure containing relevant information from pg_controldata such as the system identifier, the timestamp, timeline ID, REDO location, and REDO WAL file of the latest checkpoint. The first step is necessary to demote/promote using solely the WAL archive to feed the continuous recovery process (without streaming replication). The second step, generation of the .status.demotionToken , will ensure a smooth demotion/promotion process, without any data loss and without rebuilding the former primary. At this stage, the former primary has transitioned to a replica cluster, awaiting WAL data from the new global primary: cluster-eu-central . To proceed with promoting the other cluster, you need to retrieve the demotionToken from cluster-eu-south using the following command: kubectl get cluster cluster-eu-south \\ -o jsonpath='{.status.demotionToken}' You can obtain the demotionToken using the cnpg plugin by checking the cluster's status. The token is listed under the Demotion token section. Note The demotionToken obtained from cluster-eu-south will serve as the promotionToken for cluster-eu-central . You can verify the role change using the cnpg plugin, checking the status of the cluster: kubectl cnpg status cluster-eu-south","title":"Demoting a Primary to a Replica Cluster"},{"location":"replica_cluster/#promoting-a-replica-to-a-primary-cluster","text":"To promote a PostgreSQL replica cluster (e.g., cluster-eu-central ) to a primary cluster and make the designated primary an actual primary instance, you need to perform the following steps simultaneously: Set the .spec.replica.primary to the name of the current replica cluster to be promoted (e.g., cluster-eu-central ). Set the .spec.replica.promotionToken with the value obtained from the former primary cluster (refer to \"Demoting a Primary to a Replica Cluster\" ). The updated replica section in cluster-eu-central 's spec should look like this: replica: primary: cluster-eu-central promotionToken: <PROMOTION_TOKEN> source: cluster-eu-south Warning It is crucial to apply the changes to the primary and promotionToken fields simultaneously. If the promotion token is omitted, a failover will be triggered, necessitating a rebuild of the former primary. After making these adjustments, CloudNativePG will initiate the promotion of the replica cluster to a primary cluster. Initially, CloudNativePG will wait for the designated primary cluster to replicate all Write-Ahead Logging (WAL) information up to the specified Log Sequence Number (LSN) contained in the token. Once this target is achieved, the promotion process will commence. The new primary cluster will switch timelines, archive the history file and new WAL, thereby unblocking the replication process in the cluster-eu-south cluster, which will then operate as a replica. To verify the role change, use the cnpg plugin to check the status of the cluster: kubectl cnpg status cluster-eu-central This command will provide you with the current status of cluster-eu-central , confirming its promotion to primary. By following these steps, you ensure a smooth and controlled promotion process, minimizing disruption and maintaining data integrity across your PostgreSQL clusters.","title":"Promoting a Replica to a Primary Cluster"},{"location":"replica_cluster/#standalone-replica-clusters","text":"Important Standalone Replica Clusters were previously known as Replica Clusters before the introduction of the Distributed Topology strategy in CloudNativePG 1.24. In CloudNativePG, a Standalone Replica Cluster is a PostgreSQL cluster in continuous recovery with the following configurations: .spec.replica.enabled set to true A physical replication source defined via the .spec.replica.source field, pointing to an externalClusters name When .spec.replica.enabled is set to false , the replica cluster exits continuous recovery mode and becomes a primary cluster, completely detached from the original source. Warning Disabling replication is an irreversible operation. Once replication is disabled and the designated primary is promoted to primary, the replica cluster and the source cluster become two independent clusters definitively. Important Standalone replica clusters are suitable for several use cases, primarily involving read-only workloads. If you are planning to setup a disaster recovery solution, look into \"Distributed Topology\" above.","title":"Standalone Replica Clusters"},{"location":"replica_cluster/#main-differences-with-distributed-topology","text":"Although Standalone Replica Clusters can be used for disaster recovery purposes, they differ from the \"Distributed Topology\" strategy in several key ways: Lack of Distributed Database Concept : Standalone Replica Clusters do not support the concept of a distributed database, whether in simple forms (two clusters) or more complex configurations (e.g., three clusters in a circular topology). No Global Primary Cluster : There is no notion of a global primary cluster in Standalone Replica Clusters. No Controlled Switchover : A Standalone Replica Cluster can only be promoted to primary. The former primary cluster must be re-cloned, as controlled switchover is not possible. Failover is identical in both strategies, requiring the former primary to be re-cloned if it ever comes back up.","title":"Main Differences with Distributed Topology"},{"location":"replica_cluster/#example-of-standalone-replica-cluster-using-pg_basebackup","text":"This first example defines a standalone replica cluster using streaming replication in both bootstrap and continuous recovery. The replica cluster connects to the source cluster using TLS authentication. You can check the sample YAML in the samples/ subdirectory. Note the bootstrap and replica sections pointing to the source cluster. bootstrap: pg_basebackup: source: cluster-example replica: enabled: true source: cluster-example The previous configuration assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. In the externalClusters section, remember to use the right namespace for the host in the connectionParameters sub-section. The -replication and -ca secrets should have been copied over if necessary, in case the replica cluster is in a separate namespace. externalClusters: - name: <MAIN-CLUSTER> connectionParameters: host: <MAIN-CLUSTER>-rw.<NAMESPACE>.svc user: streaming_replica sslmode: verify-full dbname: postgres sslKey: name: <MAIN-CLUSTER>-replication key: tls.key sslCert: name: <MAIN-CLUSTER>-replication key: tls.crt sslRootCert: name: <MAIN-CLUSTER>-ca key: ca.crt","title":"Example of Standalone Replica Cluster using pg_basebackup"},{"location":"replica_cluster/#example-of-standalone-replica-cluster-from-an-object-store","text":"The second example defines a replica cluster that bootstraps from an object store using the recovery section and continuous recovery using both streaming replication and the given object store. For streaming replication, the replica cluster connects to the source cluster using basic authentication. You can check the sample YAML for it in the samples/ subdirectory. Note the bootstrap and replica sections pointing to the source cluster. bootstrap: recovery: source: cluster-example replica: enabled: true source: cluster-example The previous configuration assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details. In the externalClusters section, take care to use the right namespace in the endpointURL and the connectionParameters.host . And do ensure that the necessary secrets have been copied if necessary, and that a backup of the source cluster has been created already. externalClusters: - name: <MAIN-CLUSTER> # Example with Barman Cloud Plugin plugin: name: barman-cloud.cloudnative-pg.io parameters: barmanObjectName: <MAIN-CLUSTER> serverName: <MAIN-CLUSTER> \u2026 connectionParameters: host: <MAIN-CLUSTER>-rw.default.svc user: postgres dbname: postgres password: name: <MAIN-CLUSTER>-superuser key: password Note To use streaming replication between the source cluster and the replica cluster, we need to make sure there is network connectivity between the two clusters, and that all the necessary secrets which hold passwords or certificates are properly created in advance.","title":"Example of Standalone Replica Cluster from an object store"},{"location":"replica_cluster/#example-using-a-volume-snapshot","text":"If you use volume snapshots and your storage class provides snapshots cross-cluster availability, you can leverage that to bootstrap a replica cluster through a volume snapshot of the source cluster. The third example defines a replica cluster that bootstraps from a volume snapshot using the recovery section. It uses streaming replication (via basic authentication) and the object store to fetch the WAL files. You can check the sample YAML for it in the samples/ subdirectory. The example assumes that the application database and its owning user are set to the default, app . If the PostgreSQL cluster being restored uses different names, you must specify them as documented in Configure the application database . You should also consider copying over the application user secret from the original cluster and keep it synchronized with the source. See \"About PostgreSQL Roles\" for more details.","title":"Example using a Volume Snapshot"},{"location":"replica_cluster/#delayed-replicas","text":"CloudNativePG supports the creation of delayed replicas through the .spec.replica.minApplyDelay option , leveraging PostgreSQL's recovery_min_apply_delay . Delayed replicas are designed to intentionally lag behind the primary database by a specified amount of time. This delay is configurable using the .spec.replica.minApplyDelay option, which maps to the underlying recovery_min_apply_delay parameter in PostgreSQL. The primary objective of delayed replicas is to mitigate the impact of unintended SQL statement executions on the primary database. This is especially useful in scenarios where operations such as UPDATE or DELETE are performed without a proper WHERE clause. To configure a delay in a replica cluster, adjust the .spec.replica.minApplyDelay option. This parameter determines how much time the replicas will lag behind the primary. For example: # ... replica: enabled: true source: cluster-example # Enforce a delay of 8 hours minApplyDelay: '8h' # ... The above example helps safeguard against accidental data modifications by providing a buffer period of 8 hours to detect and correct issues before they propagate to the replicas. Monitor and adjust the delay as needed based on your recovery time objectives and the potential impact of unintended primary database operations. The main use cases of delayed replicas can be summarized into: mitigating human errors: reduce the risk of data corruption or loss resulting from unintentional SQL operations on the primary database recovery time optimization: facilitate quicker recovery from unintended changes by having a delayed replica that allows you to identify and rectify issues before changes are applied to other replicas. enhanced data protection: safeguard critical data by introducing a time buffer that provides an opportunity to intervene and prevent the propagation of undesirable changes. Warning The minApplyDelay option of delayed replicas cannot be used in conjunction with promotionToken . By integrating delayed replicas into your replication strategy, you can enhance the resilience and data protection capabilities of your PostgreSQL environment. Adjust the delay duration based on your specific needs and the criticality of your data. Important Always measure your goals. Depending on your environment, it might be more efficient to rely on volume snapshot-based recovery for faster outcomes. Evaluate and choose the approach that best aligns with your unique requirements and infrastructure.","title":"Delayed replicas"},{"location":"replication/","text":"Replication Physical replication is one of the strengths of PostgreSQL and one of the reasons why some of the largest organizations in the world have chosen it for the management of their data in business continuity contexts. Primarily used to achieve high availability, physical replication also allows scale-out of read-only workloads and offloading of some work from the primary. Important This section is about replication within the same Cluster resource managed in the same Kubernetes cluster. For information about how to replicate with another Postgres Cluster resource, even across different Kubernetes clusters, please refer to the \"Replica clusters\" section. Application-level replication Having contributed throughout the years to the replication feature in PostgreSQL, we have decided to build high availability in CloudNativePG on top of the native physical replication technology, and integrate it directly in the Kubernetes API. In Kubernetes terms, this is referred to as application-level replication , in contrast with storage-level replication . A very mature technology PostgreSQL has a very robust and mature native framework for replicating data from the primary instance to one or more replicas, built around the concept of transactional changes continuously stored in the WAL (Write Ahead Log). Started as the evolution of crash recovery and point in time recovery technologies, physical replication was first introduced in PostgreSQL 8.2 (2006) through WAL shipping from the primary to a warm standby in continuous recovery. PostgreSQL 9.0 (2010) introduced WAL streaming and read-only replicas through hot standby . In 2011, PostgreSQL 9.1 brought synchronous replication at the transaction level, supporting RPO =0 clusters. Cascading replication was added in PostgreSQL 9.2 (2012). The foundations for logical replication were established in PostgreSQL 9.4 (2014), and version 10 (2017) introduced native support for the publisher/subscriber pattern to replicate data from an origin to a destination. The table below summarizes these milestones. Version Year Feature 8.2 2006 Warm Standby with WAL shipping 9.0 2010 Hot Standby and physical streaming replication 9.1 2011 Synchronous replication (priority-based) 9.2 2012 Cascading replication 9.4 2014 Foundations of logical replication 10 2017 Logical publisher/subscriber and quorum-based synchronous replication This table highlights key PostgreSQL replication features and their respective versions. Streaming replication support At the moment, CloudNativePG natively and transparently manages physical streaming replicas within a cluster in a declarative way, based on the number of provided instances in the spec : replicas = instances - 1 (where instances > 0) Immediately after the initialization of a cluster, the operator creates a user called streaming_replica as follows: CREATE USER streaming_replica WITH REPLICATION; -- NOSUPERUSER INHERIT NOCREATEROLE NOCREATEDB NOBYPASSRLS Out of the box, the operator automatically sets up streaming replication within the cluster over an encrypted channel and enforces TLS client certificate authentication for the streaming_replica user - as highlighted by the following excerpt taken from pg_hba.conf : # Require client certificate authentication for the streaming_replica user hostssl postgres streaming_replica all cert map=cnpg_streaming_replica hostssl replication streaming_replica all cert map=cnpg_streaming_replica Certificates For details on how CloudNativePG manages certificates, please refer to the \"Certificates\" section in the documentation. If configured, the operator manages replication slots for all the replicas in the HA cluster, ensuring that WAL files required by each standby are retained on the primary's storage, even after a failover or switchover. Replication slots for High Availability For details on how CloudNativePG automatically manages replication slots for the High Availability replicas, please refer to the \"Replication slots for High Availability\" section below. Continuous backup integration In case continuous backup is configured in the cluster, CloudNativePG transparently configures replicas to take advantage of restore_command when in continuous recovery. As a result, PostgreSQL can use the WAL archive as a fallback option whenever pulling WALs via streaming replication fails. Synchronous Replication CloudNativePG supports both quorum-based and priority-based synchronous replication for PostgreSQL . Warning By default, synchronous replication pauses write operations if the required number of standby nodes for WAL replication during transaction commits is unavailable. This behavior prioritizes data durability and aligns with PostgreSQL DBA best practices. However, if self-healing is a higher priority than strict data durability in your setup, this setting can be adjusted. For details on managing this behavior, refer to the Data Durability and Synchronous Replication section. Important The failover quorum feature (experimental) can be used alongside synchronous replication to improve data durability and safety during failover events. Direct configuration of the synchronous_standby_names option is not permitted. However, CloudNativePG automatically populates this option with the names of local pods, while also allowing customization to extend synchronous replication beyond the Cluster resource. This can be achieved through the .spec.postgresql.synchronous stanza . Synchronous replication is disabled by default (the synchronous stanza is not defined). When defined, two options are mandatory: method : either any (quorum) or first (priority) number : the number of synchronous standby servers that transactions must wait for responses from Quorum-based Synchronous Replication In PostgreSQL, quorum-based synchronous replication ensures that transaction commits wait until their WAL records are replicated to a specified number of standbys. To enable this, set the method to any . This replication method is the most common setup for a CloudNativePG cluster. Example The example below, based on a typical cluster-example configuration with three instances, sets up quorum-based synchronous replication with at least one instance: postgresql: synchronous: method: any number: 1 With this configuration, CloudNativePG automatically sets the content of synchronous_standby_names as follows: ANY 1 (cluster-example-2, cluster-example-3, cluster-example-1) Migrating from Deprecated Synchronous Replication Implementation This section outlines how to migrate from the deprecated quorum-based synchronous replication format to the newer, more robust implementation in CloudNativePG. Given the following manifest: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: angus spec: instances: 3 minSyncReplicas: 1 maxSyncReplicas: 1 storage: size: 1G You can update it to the new format as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: angus spec: instances: 3 storage: size: 1G postgresql: synchronous: method: any number: 1 dataDurability: required To prioritize self-healing over strict data durability, set dataDurability to preferred instead. Priority-based Synchronous Replication PostgreSQL's priority-based synchronous replication makes transaction commits wait until their WAL records are replicated to the requested number of synchronous standbys chosen based on their priorities. Standbys listed earlier in the synchronous_standby_names option are given higher priority and considered synchronous. If a current synchronous standby disconnects, it is immediately replaced by the next-highest-priority standby. To use this method, set method to first . Important Currently, this method is most useful when extending synchronous replication beyond the current cluster using the maxStandbyNamesFromCluster , standbyNamesPre , and standbyNamesPost options explained below. Controlling synchronous_standby_names Content By default, CloudNativePG populates synchronous_standby_names with the names of local pods in a Cluster resource, ensuring synchronous replication within the PostgreSQL cluster. You can customize the content of synchronous_standby_names based on your requirements and replication method (quorum or priority) using the following optional parameters in the .spec.postgresql.synchronous stanza: maxStandbyNamesFromCluster : the maximum number of pod names from the local Cluster object that can be automatically included in the synchronous_standby_names option in PostgreSQL. standbyNamesPre : a list of standby names (specifically application_name ) to be prepended to the list of local pod names automatically listed by the operator. standbyNamesPost : a list of standby names (specifically application_name ) to be appended to the list of local pod names automatically listed by the operator. Warning You are responsible for ensuring the correct names in standbyNamesPre and standbyNamesPost . CloudNativePG expects that you manage any standby with an application_name listed here, ensuring their high availability. Incorrect entries can jeopardize your PostgreSQL database uptime. Examples Here are some examples, all based on a cluster-example with three instances: If you set: postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus The content of synchronous_standby_names will be: ANY 1 (angus, cluster-example-2) If you set: postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 0 standbyNamesPre: - angus - malcolm The content of synchronous_standby_names will be: ANY 1 (angus, malcolm) If you set: postgresql: synchronous: method: first number: 2 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus standbyNamesPost: - malcolm The synchronous_standby_names option will look like: FIRST 2 (angus, cluster-example-2, malcolm) Data Durability and Synchronous Replication The dataDurability option in the .spec.postgresql.synchronous stanza controls the trade-off between data safety and availability for synchronous replication. It can be set to required or preferred , with the default being required if not specified. Important preferred can only be used when standbyNamesPre and standbyNamesPost are unset. Required Data Durability When dataDurability is set to required , PostgreSQL only considers transactions committed once WAL (Write-Ahead Log) records have been replicated to the specified number of synchronous standbys. This setting prioritizes data safety over availability, meaning write operations will pause if the required number of synchronous standbys is unavailable. This ensures zero data loss (RPO=0) but may reduce database availability during network disruptions or standby failures. Synchronous standbys are selected in this priority order: Healthy instances Unhealthy instances Primary The list is then truncated based on maxStandbyNamesFromCluster if this value is set, prioritizing healthy instances and ensuring synchronous_standby_names is populated. Example Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: foo spec: instances: 3 postgresql: synchronous: method: any number: 1 dataDurability: required Initial state. The content of synchronous_standby_names is: ANY 1 (\"foo-2\",\"foo-3\",\"foo-1\") foo-2 becomes unavailable. It gets pushed back in priority: ANY 1 (\"foo-3\",\"foo-2\",\"foo-1\") foo-3 also becomes unavailable. The list contains no healthy standbys: ANY 1 (\"foo-2\",\"foo-3\",\"foo-1\") At this point no write operations will be allowed until at least one of the standbys is available again. When the standbys are available again, synchronous_standby_names will be back to the initial state. Preferred Data Durability When dataDurability is set to preferred , the required number of synchronous instances adjusts based on the number of available standbys. PostgreSQL will attempt to replicate WAL records to the designated number of synchronous standbys, but write operations will continue even if fewer than the requested number of standbys are available. Important Make sure you have a clear understanding of what ready/available means for a replica and set your expectations accordingly. By default, a replica is considered ready when it has successfully connected to the source at least once. However, CloudNativePG allows you to configure startup and readiness probes for replicas based on maximum lag. For more details, please refer to the \"Postgres instance manager\" section . This setting balances data safety with availability, enabling applications to continue writing during temporary standby unavailability\u2014hence, it\u2019s also known as self-healing mode . Warning This mode may result in data loss if all standbys become unavailable. With preferred data durability, only healthy replicas are included in synchronous_standby_names . Example Consider the following example. For demonstration, we\u2019ll use a cluster named bar with 5 instances and 2 synchronous standbys: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: bar spec: instances: 5 postgresql: synchronous: method: any number: 2 dataDurability: preferred Initial state. The content of synchronous_standby_names is: ANY 2 (\"bar-2\",\"bar-3\", \"bar-4\", \"bar-5\") bar-2 and bar-3 become unavailable. They are removed from the list: ANY 2 (\"bar-4\", \"bar-5\") bar-4 also becomes unavailable. It gets removed from the list. Since the number of available standbys is less than the requested number, the requested amount gets reduced: ANY 1 (\"bar-5\") bar-5 also becomes unavailable. synchronous_standby_names becomes empty, disabling synchronous replication completely. Write operations will continue, but with the risk of potential data loss in case of a primary failure. When the replicas are back, synchronous_standby_names will be back to the initial state. Synchronous Replication (Deprecated) Warning Prior to CloudNativePG 1.24, only the quorum-based synchronous replication implementation was supported. Although this method is now deprecated, it will not be removed anytime soon. The new method prioritizes data durability over self-healing and offers more robust features, including priority-based synchronous replication and full control over the synchronous_standby_names option. It is recommended to gradually migrate to the new configuration method for synchronous replication, as explained in the previous paragraph. Important The deprecated method and the new method are mutually exclusive. CloudNativePG supports the configuration of quorum-based synchronous streaming replication via two configuration options called minSyncReplicas and maxSyncReplicas , which are the minimum and the maximum number of expected synchronous standby replicas available at any time. For self-healing purposes, the operator always compares these two values with the number of available replicas to determine the quorum. Important By default, synchronous replication selects among all the available replicas indistinctively. You can limit on which nodes your synchronous replicas can be scheduled, by working on node labels through the syncReplicaElectionConstraint option as described in the next section. Synchronous replication is disabled by default ( minSyncReplicas and maxSyncReplicas are not defined). In case both minSyncReplicas and maxSyncReplicas are set, CloudNativePG automatically updates the synchronous_standby_names option in PostgreSQL to the following value: ANY q (pod1, pod2, ...) Where: q is an integer automatically calculated by the operator to be: 1 <= minSyncReplicas <= q <= maxSyncReplicas <= readyReplicas pod1, pod2, ... is the list of all PostgreSQL pods in the cluster Warning To provide self-healing capabilities, the operator can ignore minSyncReplicas if such value is higher than the currently available number of replicas. Synchronous replication is automatically disabled when readyReplicas is 0 . As stated in the PostgreSQL documentation , the method ANY specifies a quorum-based synchronous replication and makes transaction commits wait until their WAL records are replicated to at least the requested number of synchronous standbys in the list . Important Even though the operator chooses self-healing over enforcement of synchronous replication settings, our recommendation is to plan for synchronous replication only in clusters with 3+ instances or, more generally, when maxSyncReplicas < (instances - 1) . Select nodes for synchronous replication CloudNativePG enables you to select which PostgreSQL instances are eligible to participate in a quorum-based synchronous replication set through anti-affinity rules based on the node labels where the PVC holding the PGDATA and the Postgres pod are. Scheduling For more information on the general pod affinity and anti-affinity rules, please check the \"Scheduling\" section . Warning The .spec.postgresql.syncReplicaElectionConstraint option only applies to the legacy implementation of synchronous replication (see \"Synchronous Replication (Deprecated)\" ). As an example use-case for this feature: in a cluster with a single sync replica, we would be able to ensure the sync replica will be in a different availability zone from the primary instance, usually identified by the topology.kubernetes.io/zone label on a node . This would increase the robustness of the cluster in case of an outage in a single availability zone, especially in terms of recovery point objective ( RPO ). The idea of anti-affinity is to ensure that sync replicas that participate in the quorum are chosen from pods running on nodes that have different values for the selected labels (in this case, the availability zone label) then the node where the primary is currently in execution. If no node matches such criteria, the replicas are eligible for synchronous replication. Important The self-healing enforcement still applies while defining additional constraints for synchronous replica election (see \"Synchronous replication\" ). The example below shows how this can be done through the syncReplicaElectionConstraint section within .spec.postgresql . nodeLabelsAntiAffinity allows you to specify those node labels that need to be evaluated to make sure that synchronous replication will be dynamically configured by the operator between the current primary and the replicas which are located on nodes having a value of the availability zone label different from that of the node where the primary is: spec: instances: 3 postgresql: syncReplicaElectionConstraint: enabled: true nodeLabelsAntiAffinity: - topology.kubernetes.io/zone As you can imagine, the availability zone is just an example, but you could customize this behavior based on other labels that describe the node, such as storage, CPU, or memory. Replication slots Replication slots are a native PostgreSQL feature introduced in 9.4 that provides an automated way to ensure that the primary does not remove WAL segments until all the attached streaming replication clients have received them, and that the primary does not remove rows which could cause a recovery conflict even when the standby is ( temporarily) disconnected. A replication slot exists solely on the instance that created it, and PostgreSQL does not replicate it on the standby servers. As a result, after a failover or a switchover, the new primary does not contain the replication slot from the old primary. This can create problems for the streaming replication clients that were connected to the old primary and have lost their slot. CloudNativePG provides a turn-key solution to synchronize the content of physical replication slots from the primary to each standby, addressing two use cases: the replication slots automatically created for the High Availability of the Postgres cluster ( see \"Replication slots for High Availability\" below for details) user-defined replication slots created on the primary Replication slots for High Availability CloudNativePG fills this gap by introducing the concept of cluster-managed replication slots, starting with high availability clusters. This feature automatically manages physical replication slots for each hot standby replica in the High Availability cluster, both in the primary and the standby. In CloudNativePG, we use the terms: Primary HA slot : a physical replication slot whose lifecycle is entirely managed by the current primary of the cluster and whose purpose is to map to a specific standby in streaming replication. Such a slot lives on the primary only. Standby HA slot : a physical replication slot for a standby whose lifecycle is entirely managed by another standby in the cluster, based on the content of the pg_replication_slots view in the primary, and updated at regular intervals using pg_replication_slot_advance() . This feature is enabled by default and can be disabled via configuration. For details, please refer to the \"replicationSlots\" section in the API reference . Here follows a brief description of the main options: .spec.replicationSlots.highAvailability.enabled if true , the feature is enabled ( true is the default) .spec.replicationSlots.highAvailability.slotPrefix the prefix that identifies replication slots managed by the operator for this feature (default: _cnpg_ ) .spec.replicationSlots.updateInterval how often the standby synchronizes the position of the local copy of the replication slots with the position on the current primary, expressed in seconds (default: 30) Although it is not recommended, if you desire a different behavior, you can customize the above options. For example, the following manifest will create a cluster with replication slots disabled. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 # Disable replication slots for HA in the cluster replicationSlots: highAvailability: enabled: false storage: size: 1Gi User-Defined Replication slots Although CloudNativePG doesn't support a way to declaratively define physical replication slots, you can still create your own slots via SQL . Information At the moment, we don't have any plans to manage replication slots in a declarative way, but it might change depending on the feedback we receive from users. The reason is that replication slots exist for a specific purpose and each should be managed by a specific application the oversees the entire lifecycle of the slot on the primary. CloudNativePG can manage the synchronization of any user managed physical replication slots between the primary and standbys, similarly to what it does for the HA replication slots explained above (the only difference is that you need to create the replication slot). This feature is enabled by default (meaning that any replication slot is synchronized), but you can disable it or further customize its behavior (for example by excluding some slots using regular expressions) through the synchronizeReplicas stanza. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 replicationSlots: synchronizeReplicas: enabled: true excludePatterns: - \"^foo\" For details, please refer to the \"replicationSlots\" section in the API reference . Here follows a brief description of the main options: .spec.replicationSlots.synchronizeReplicas.enabled When true or not specified, every user-defined replication slot on the primary is synchronized on each standby. If changed to false, the operator will remove any replication slot previously created by itself on each standby. .spec.replicationSlots.synchronizeReplicas.excludePatterns A list of regular expression patterns to match the names of user-defined replication slots to be excluded from synchronization. This can be useful to exclude specific slots based on naming conventions. Warning Users utilizing this feature should carefully monitor user-defined replication slots to ensure they align with their operational requirements and do not interfere with the failover process. Synchronization frequency You can also control the frequency with which a standby queries the pg_replication_slots view on the primary, and updates its local copy of the replication slots, like in this example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 # Reduce the frequency of standby HA slots updates to once every 5 minutes replicationSlots: updateInterval: 300 storage: size: 1Gi Logical Decoding Slot Synchronization CloudNativePG can synchronize logical decoding (replication) slots across all nodes in a high-availability cluster, ensuring seamless continuation of logical replication after a failover or switchover. This feature is disabled by default, and enabling it requires two steps. The first step is to enable logical decoding slot synchronization: # ... replicationSlots: highAvailability: synchronizeLogicalDecoding: true The second step involves configuring PostgreSQL parameters: the required configuration depends on your PostgreSQL version, as explained below. When enabled, the operator automatically manages logical decoding slot states during failover and switchover, preventing slot invalidation and avoiding data loss for logical replication clients. Behavior on PostgreSQL 17 and later For PostgreSQL 17 and newer, CloudNativePG transparently manages the synchronized_standby_slots parameter . You must enable both sync_replication_slots and hot_standby_feedback in your PostgreSQL configuration: # ... postgresql: parameters: # ... hot_standby_feedback: 'on' sync_replication_slots: 'on' Additionally, you must create the logical replication Subscription with the failover option enabled, for example: apiVersion: postgresql.cnpg.io/v1 kind: Subscription # ... spec: # ... parameters: failover: 'true' # ... When configured, logical WAL sender processes send decoded changes to plugins only after the specified replication slots confirm receiving and flushing the relevant WAL, ensuring that: logical replication slots do not consume changes until they are safely received by the replicas of the publisher, and logical replication clients can seamlessly reconnect to a promoted standby without missing data after failover. For more details on logical replication slot synchronization, see the PostgreSQL documentation on Logical Replication Failover . Behavior on PostgreSQL 16 and earlier For PostgreSQL 16 and older versions, CloudNativePG uses the pg_failover_slots extension to maintain synchronization of logical replication slots across failovers. Capping the WAL size retained for replication slots When replication slots is enabled, you might end up running out of disk space due to PostgreSQL trying to retain WAL files requested by a replication slot. This might happen due to a standby that is (temporarily?) down, or lagging, or simply an orphan replication slot. Starting with PostgreSQL 13, you can take advantage of the max_slot_wal_keep_size configuration option controlling the maximum size of WAL files that replication slots are allowed to retain in the pg_wal directory at checkpoint time. By default, in PostgreSQL max_slot_wal_keep_size is set to -1 , meaning that replication slots may retain an unlimited amount of WAL files. As a result, our recommendation is to explicitly set max_slot_wal_keep_size when replication slots support is enabled. For example: # ... postgresql: parameters: max_slot_wal_keep_size: \"10GB\" # ... Monitoring replication slots Replication slots must be carefully monitored in your infrastructure. By default, we provide the pg_replication_slots metric in our Prometheus exporter with key information such as the name of the slot, the type, whether it is active, the lag from the primary. Monitoring Please refer to the \"Monitoring\" section for details on how to monitor a CloudNativePG deployment.","title":"Replication"},{"location":"replication/#replication","text":"Physical replication is one of the strengths of PostgreSQL and one of the reasons why some of the largest organizations in the world have chosen it for the management of their data in business continuity contexts. Primarily used to achieve high availability, physical replication also allows scale-out of read-only workloads and offloading of some work from the primary. Important This section is about replication within the same Cluster resource managed in the same Kubernetes cluster. For information about how to replicate with another Postgres Cluster resource, even across different Kubernetes clusters, please refer to the \"Replica clusters\" section.","title":"Replication"},{"location":"replication/#application-level-replication","text":"Having contributed throughout the years to the replication feature in PostgreSQL, we have decided to build high availability in CloudNativePG on top of the native physical replication technology, and integrate it directly in the Kubernetes API. In Kubernetes terms, this is referred to as application-level replication , in contrast with storage-level replication .","title":"Application-level replication"},{"location":"replication/#a-very-mature-technology","text":"PostgreSQL has a very robust and mature native framework for replicating data from the primary instance to one or more replicas, built around the concept of transactional changes continuously stored in the WAL (Write Ahead Log). Started as the evolution of crash recovery and point in time recovery technologies, physical replication was first introduced in PostgreSQL 8.2 (2006) through WAL shipping from the primary to a warm standby in continuous recovery. PostgreSQL 9.0 (2010) introduced WAL streaming and read-only replicas through hot standby . In 2011, PostgreSQL 9.1 brought synchronous replication at the transaction level, supporting RPO =0 clusters. Cascading replication was added in PostgreSQL 9.2 (2012). The foundations for logical replication were established in PostgreSQL 9.4 (2014), and version 10 (2017) introduced native support for the publisher/subscriber pattern to replicate data from an origin to a destination. The table below summarizes these milestones. Version Year Feature 8.2 2006 Warm Standby with WAL shipping 9.0 2010 Hot Standby and physical streaming replication 9.1 2011 Synchronous replication (priority-based) 9.2 2012 Cascading replication 9.4 2014 Foundations of logical replication 10 2017 Logical publisher/subscriber and quorum-based synchronous replication This table highlights key PostgreSQL replication features and their respective versions.","title":"A very mature technology"},{"location":"replication/#streaming-replication-support","text":"At the moment, CloudNativePG natively and transparently manages physical streaming replicas within a cluster in a declarative way, based on the number of provided instances in the spec : replicas = instances - 1 (where instances > 0) Immediately after the initialization of a cluster, the operator creates a user called streaming_replica as follows: CREATE USER streaming_replica WITH REPLICATION; -- NOSUPERUSER INHERIT NOCREATEROLE NOCREATEDB NOBYPASSRLS Out of the box, the operator automatically sets up streaming replication within the cluster over an encrypted channel and enforces TLS client certificate authentication for the streaming_replica user - as highlighted by the following excerpt taken from pg_hba.conf : # Require client certificate authentication for the streaming_replica user hostssl postgres streaming_replica all cert map=cnpg_streaming_replica hostssl replication streaming_replica all cert map=cnpg_streaming_replica Certificates For details on how CloudNativePG manages certificates, please refer to the \"Certificates\" section in the documentation. If configured, the operator manages replication slots for all the replicas in the HA cluster, ensuring that WAL files required by each standby are retained on the primary's storage, even after a failover or switchover. Replication slots for High Availability For details on how CloudNativePG automatically manages replication slots for the High Availability replicas, please refer to the \"Replication slots for High Availability\" section below.","title":"Streaming replication support"},{"location":"replication/#continuous-backup-integration","text":"In case continuous backup is configured in the cluster, CloudNativePG transparently configures replicas to take advantage of restore_command when in continuous recovery. As a result, PostgreSQL can use the WAL archive as a fallback option whenever pulling WALs via streaming replication fails.","title":"Continuous backup integration"},{"location":"replication/#synchronous-replication","text":"CloudNativePG supports both quorum-based and priority-based synchronous replication for PostgreSQL . Warning By default, synchronous replication pauses write operations if the required number of standby nodes for WAL replication during transaction commits is unavailable. This behavior prioritizes data durability and aligns with PostgreSQL DBA best practices. However, if self-healing is a higher priority than strict data durability in your setup, this setting can be adjusted. For details on managing this behavior, refer to the Data Durability and Synchronous Replication section. Important The failover quorum feature (experimental) can be used alongside synchronous replication to improve data durability and safety during failover events. Direct configuration of the synchronous_standby_names option is not permitted. However, CloudNativePG automatically populates this option with the names of local pods, while also allowing customization to extend synchronous replication beyond the Cluster resource. This can be achieved through the .spec.postgresql.synchronous stanza . Synchronous replication is disabled by default (the synchronous stanza is not defined). When defined, two options are mandatory: method : either any (quorum) or first (priority) number : the number of synchronous standby servers that transactions must wait for responses from","title":"Synchronous Replication"},{"location":"replication/#quorum-based-synchronous-replication","text":"In PostgreSQL, quorum-based synchronous replication ensures that transaction commits wait until their WAL records are replicated to a specified number of standbys. To enable this, set the method to any . This replication method is the most common setup for a CloudNativePG cluster.","title":"Quorum-based Synchronous Replication"},{"location":"replication/#example","text":"The example below, based on a typical cluster-example configuration with three instances, sets up quorum-based synchronous replication with at least one instance: postgresql: synchronous: method: any number: 1 With this configuration, CloudNativePG automatically sets the content of synchronous_standby_names as follows: ANY 1 (cluster-example-2, cluster-example-3, cluster-example-1)","title":"Example"},{"location":"replication/#migrating-from-deprecated-synchronous-replication-implementation","text":"This section outlines how to migrate from the deprecated quorum-based synchronous replication format to the newer, more robust implementation in CloudNativePG. Given the following manifest: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: angus spec: instances: 3 minSyncReplicas: 1 maxSyncReplicas: 1 storage: size: 1G You can update it to the new format as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: angus spec: instances: 3 storage: size: 1G postgresql: synchronous: method: any number: 1 dataDurability: required To prioritize self-healing over strict data durability, set dataDurability to preferred instead.","title":"Migrating from Deprecated Synchronous Replication Implementation"},{"location":"replication/#priority-based-synchronous-replication","text":"PostgreSQL's priority-based synchronous replication makes transaction commits wait until their WAL records are replicated to the requested number of synchronous standbys chosen based on their priorities. Standbys listed earlier in the synchronous_standby_names option are given higher priority and considered synchronous. If a current synchronous standby disconnects, it is immediately replaced by the next-highest-priority standby. To use this method, set method to first . Important Currently, this method is most useful when extending synchronous replication beyond the current cluster using the maxStandbyNamesFromCluster , standbyNamesPre , and standbyNamesPost options explained below.","title":"Priority-based Synchronous Replication"},{"location":"replication/#controlling-synchronous_standby_names-content","text":"By default, CloudNativePG populates synchronous_standby_names with the names of local pods in a Cluster resource, ensuring synchronous replication within the PostgreSQL cluster. You can customize the content of synchronous_standby_names based on your requirements and replication method (quorum or priority) using the following optional parameters in the .spec.postgresql.synchronous stanza: maxStandbyNamesFromCluster : the maximum number of pod names from the local Cluster object that can be automatically included in the synchronous_standby_names option in PostgreSQL. standbyNamesPre : a list of standby names (specifically application_name ) to be prepended to the list of local pod names automatically listed by the operator. standbyNamesPost : a list of standby names (specifically application_name ) to be appended to the list of local pod names automatically listed by the operator. Warning You are responsible for ensuring the correct names in standbyNamesPre and standbyNamesPost . CloudNativePG expects that you manage any standby with an application_name listed here, ensuring their high availability. Incorrect entries can jeopardize your PostgreSQL database uptime.","title":"Controlling synchronous_standby_names Content"},{"location":"replication/#examples","text":"Here are some examples, all based on a cluster-example with three instances: If you set: postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus The content of synchronous_standby_names will be: ANY 1 (angus, cluster-example-2) If you set: postgresql: synchronous: method: any number: 1 maxStandbyNamesFromCluster: 0 standbyNamesPre: - angus - malcolm The content of synchronous_standby_names will be: ANY 1 (angus, malcolm) If you set: postgresql: synchronous: method: first number: 2 maxStandbyNamesFromCluster: 1 standbyNamesPre: - angus standbyNamesPost: - malcolm The synchronous_standby_names option will look like: FIRST 2 (angus, cluster-example-2, malcolm)","title":"Examples"},{"location":"replication/#data-durability-and-synchronous-replication","text":"The dataDurability option in the .spec.postgresql.synchronous stanza controls the trade-off between data safety and availability for synchronous replication. It can be set to required or preferred , with the default being required if not specified. Important preferred can only be used when standbyNamesPre and standbyNamesPost are unset.","title":"Data Durability and Synchronous Replication"},{"location":"replication/#required-data-durability","text":"When dataDurability is set to required , PostgreSQL only considers transactions committed once WAL (Write-Ahead Log) records have been replicated to the specified number of synchronous standbys. This setting prioritizes data safety over availability, meaning write operations will pause if the required number of synchronous standbys is unavailable. This ensures zero data loss (RPO=0) but may reduce database availability during network disruptions or standby failures. Synchronous standbys are selected in this priority order: Healthy instances Unhealthy instances Primary The list is then truncated based on maxStandbyNamesFromCluster if this value is set, prioritizing healthy instances and ensuring synchronous_standby_names is populated.","title":"Required Data Durability"},{"location":"replication/#example_1","text":"Consider the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: foo spec: instances: 3 postgresql: synchronous: method: any number: 1 dataDurability: required Initial state. The content of synchronous_standby_names is: ANY 1 (\"foo-2\",\"foo-3\",\"foo-1\") foo-2 becomes unavailable. It gets pushed back in priority: ANY 1 (\"foo-3\",\"foo-2\",\"foo-1\") foo-3 also becomes unavailable. The list contains no healthy standbys: ANY 1 (\"foo-2\",\"foo-3\",\"foo-1\") At this point no write operations will be allowed until at least one of the standbys is available again. When the standbys are available again, synchronous_standby_names will be back to the initial state.","title":"Example"},{"location":"replication/#preferred-data-durability","text":"When dataDurability is set to preferred , the required number of synchronous instances adjusts based on the number of available standbys. PostgreSQL will attempt to replicate WAL records to the designated number of synchronous standbys, but write operations will continue even if fewer than the requested number of standbys are available. Important Make sure you have a clear understanding of what ready/available means for a replica and set your expectations accordingly. By default, a replica is considered ready when it has successfully connected to the source at least once. However, CloudNativePG allows you to configure startup and readiness probes for replicas based on maximum lag. For more details, please refer to the \"Postgres instance manager\" section . This setting balances data safety with availability, enabling applications to continue writing during temporary standby unavailability\u2014hence, it\u2019s also known as self-healing mode . Warning This mode may result in data loss if all standbys become unavailable. With preferred data durability, only healthy replicas are included in synchronous_standby_names .","title":"Preferred Data Durability"},{"location":"replication/#example_2","text":"Consider the following example. For demonstration, we\u2019ll use a cluster named bar with 5 instances and 2 synchronous standbys: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: bar spec: instances: 5 postgresql: synchronous: method: any number: 2 dataDurability: preferred Initial state. The content of synchronous_standby_names is: ANY 2 (\"bar-2\",\"bar-3\", \"bar-4\", \"bar-5\") bar-2 and bar-3 become unavailable. They are removed from the list: ANY 2 (\"bar-4\", \"bar-5\") bar-4 also becomes unavailable. It gets removed from the list. Since the number of available standbys is less than the requested number, the requested amount gets reduced: ANY 1 (\"bar-5\") bar-5 also becomes unavailable. synchronous_standby_names becomes empty, disabling synchronous replication completely. Write operations will continue, but with the risk of potential data loss in case of a primary failure. When the replicas are back, synchronous_standby_names will be back to the initial state.","title":"Example"},{"location":"replication/#synchronous-replication-deprecated","text":"Warning Prior to CloudNativePG 1.24, only the quorum-based synchronous replication implementation was supported. Although this method is now deprecated, it will not be removed anytime soon. The new method prioritizes data durability over self-healing and offers more robust features, including priority-based synchronous replication and full control over the synchronous_standby_names option. It is recommended to gradually migrate to the new configuration method for synchronous replication, as explained in the previous paragraph. Important The deprecated method and the new method are mutually exclusive. CloudNativePG supports the configuration of quorum-based synchronous streaming replication via two configuration options called minSyncReplicas and maxSyncReplicas , which are the minimum and the maximum number of expected synchronous standby replicas available at any time. For self-healing purposes, the operator always compares these two values with the number of available replicas to determine the quorum. Important By default, synchronous replication selects among all the available replicas indistinctively. You can limit on which nodes your synchronous replicas can be scheduled, by working on node labels through the syncReplicaElectionConstraint option as described in the next section. Synchronous replication is disabled by default ( minSyncReplicas and maxSyncReplicas are not defined). In case both minSyncReplicas and maxSyncReplicas are set, CloudNativePG automatically updates the synchronous_standby_names option in PostgreSQL to the following value: ANY q (pod1, pod2, ...) Where: q is an integer automatically calculated by the operator to be: 1 <= minSyncReplicas <= q <= maxSyncReplicas <= readyReplicas pod1, pod2, ... is the list of all PostgreSQL pods in the cluster Warning To provide self-healing capabilities, the operator can ignore minSyncReplicas if such value is higher than the currently available number of replicas. Synchronous replication is automatically disabled when readyReplicas is 0 . As stated in the PostgreSQL documentation , the method ANY specifies a quorum-based synchronous replication and makes transaction commits wait until their WAL records are replicated to at least the requested number of synchronous standbys in the list . Important Even though the operator chooses self-healing over enforcement of synchronous replication settings, our recommendation is to plan for synchronous replication only in clusters with 3+ instances or, more generally, when maxSyncReplicas < (instances - 1) .","title":"Synchronous Replication (Deprecated)"},{"location":"replication/#select-nodes-for-synchronous-replication","text":"CloudNativePG enables you to select which PostgreSQL instances are eligible to participate in a quorum-based synchronous replication set through anti-affinity rules based on the node labels where the PVC holding the PGDATA and the Postgres pod are. Scheduling For more information on the general pod affinity and anti-affinity rules, please check the \"Scheduling\" section . Warning The .spec.postgresql.syncReplicaElectionConstraint option only applies to the legacy implementation of synchronous replication (see \"Synchronous Replication (Deprecated)\" ). As an example use-case for this feature: in a cluster with a single sync replica, we would be able to ensure the sync replica will be in a different availability zone from the primary instance, usually identified by the topology.kubernetes.io/zone label on a node . This would increase the robustness of the cluster in case of an outage in a single availability zone, especially in terms of recovery point objective ( RPO ). The idea of anti-affinity is to ensure that sync replicas that participate in the quorum are chosen from pods running on nodes that have different values for the selected labels (in this case, the availability zone label) then the node where the primary is currently in execution. If no node matches such criteria, the replicas are eligible for synchronous replication. Important The self-healing enforcement still applies while defining additional constraints for synchronous replica election (see \"Synchronous replication\" ). The example below shows how this can be done through the syncReplicaElectionConstraint section within .spec.postgresql . nodeLabelsAntiAffinity allows you to specify those node labels that need to be evaluated to make sure that synchronous replication will be dynamically configured by the operator between the current primary and the replicas which are located on nodes having a value of the availability zone label different from that of the node where the primary is: spec: instances: 3 postgresql: syncReplicaElectionConstraint: enabled: true nodeLabelsAntiAffinity: - topology.kubernetes.io/zone As you can imagine, the availability zone is just an example, but you could customize this behavior based on other labels that describe the node, such as storage, CPU, or memory.","title":"Select nodes for synchronous replication"},{"location":"replication/#replication-slots","text":"Replication slots are a native PostgreSQL feature introduced in 9.4 that provides an automated way to ensure that the primary does not remove WAL segments until all the attached streaming replication clients have received them, and that the primary does not remove rows which could cause a recovery conflict even when the standby is ( temporarily) disconnected. A replication slot exists solely on the instance that created it, and PostgreSQL does not replicate it on the standby servers. As a result, after a failover or a switchover, the new primary does not contain the replication slot from the old primary. This can create problems for the streaming replication clients that were connected to the old primary and have lost their slot. CloudNativePG provides a turn-key solution to synchronize the content of physical replication slots from the primary to each standby, addressing two use cases: the replication slots automatically created for the High Availability of the Postgres cluster ( see \"Replication slots for High Availability\" below for details) user-defined replication slots created on the primary","title":"Replication slots"},{"location":"replication/#replication-slots-for-high-availability","text":"CloudNativePG fills this gap by introducing the concept of cluster-managed replication slots, starting with high availability clusters. This feature automatically manages physical replication slots for each hot standby replica in the High Availability cluster, both in the primary and the standby. In CloudNativePG, we use the terms: Primary HA slot : a physical replication slot whose lifecycle is entirely managed by the current primary of the cluster and whose purpose is to map to a specific standby in streaming replication. Such a slot lives on the primary only. Standby HA slot : a physical replication slot for a standby whose lifecycle is entirely managed by another standby in the cluster, based on the content of the pg_replication_slots view in the primary, and updated at regular intervals using pg_replication_slot_advance() . This feature is enabled by default and can be disabled via configuration. For details, please refer to the \"replicationSlots\" section in the API reference . Here follows a brief description of the main options: .spec.replicationSlots.highAvailability.enabled if true , the feature is enabled ( true is the default) .spec.replicationSlots.highAvailability.slotPrefix the prefix that identifies replication slots managed by the operator for this feature (default: _cnpg_ ) .spec.replicationSlots.updateInterval how often the standby synchronizes the position of the local copy of the replication slots with the position on the current primary, expressed in seconds (default: 30) Although it is not recommended, if you desire a different behavior, you can customize the above options. For example, the following manifest will create a cluster with replication slots disabled. apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 # Disable replication slots for HA in the cluster replicationSlots: highAvailability: enabled: false storage: size: 1Gi","title":"Replication slots for High Availability"},{"location":"replication/#user-defined-replication-slots","text":"Although CloudNativePG doesn't support a way to declaratively define physical replication slots, you can still create your own slots via SQL . Information At the moment, we don't have any plans to manage replication slots in a declarative way, but it might change depending on the feedback we receive from users. The reason is that replication slots exist for a specific purpose and each should be managed by a specific application the oversees the entire lifecycle of the slot on the primary. CloudNativePG can manage the synchronization of any user managed physical replication slots between the primary and standbys, similarly to what it does for the HA replication slots explained above (the only difference is that you need to create the replication slot). This feature is enabled by default (meaning that any replication slot is synchronized), but you can disable it or further customize its behavior (for example by excluding some slots using regular expressions) through the synchronizeReplicas stanza. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 replicationSlots: synchronizeReplicas: enabled: true excludePatterns: - \"^foo\" For details, please refer to the \"replicationSlots\" section in the API reference . Here follows a brief description of the main options: .spec.replicationSlots.synchronizeReplicas.enabled When true or not specified, every user-defined replication slot on the primary is synchronized on each standby. If changed to false, the operator will remove any replication slot previously created by itself on each standby. .spec.replicationSlots.synchronizeReplicas.excludePatterns A list of regular expression patterns to match the names of user-defined replication slots to be excluded from synchronization. This can be useful to exclude specific slots based on naming conventions. Warning Users utilizing this feature should carefully monitor user-defined replication slots to ensure they align with their operational requirements and do not interfere with the failover process.","title":"User-Defined Replication slots"},{"location":"replication/#synchronization-frequency","text":"You can also control the frequency with which a standby queries the pg_replication_slots view on the primary, and updates its local copy of the replication slots, like in this example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 # Reduce the frequency of standby HA slots updates to once every 5 minutes replicationSlots: updateInterval: 300 storage: size: 1Gi","title":"Synchronization frequency"},{"location":"replication/#logical-decoding-slot-synchronization","text":"CloudNativePG can synchronize logical decoding (replication) slots across all nodes in a high-availability cluster, ensuring seamless continuation of logical replication after a failover or switchover. This feature is disabled by default, and enabling it requires two steps. The first step is to enable logical decoding slot synchronization: # ... replicationSlots: highAvailability: synchronizeLogicalDecoding: true The second step involves configuring PostgreSQL parameters: the required configuration depends on your PostgreSQL version, as explained below. When enabled, the operator automatically manages logical decoding slot states during failover and switchover, preventing slot invalidation and avoiding data loss for logical replication clients.","title":"Logical Decoding Slot Synchronization"},{"location":"replication/#behavior-on-postgresql-17-and-later","text":"For PostgreSQL 17 and newer, CloudNativePG transparently manages the synchronized_standby_slots parameter . You must enable both sync_replication_slots and hot_standby_feedback in your PostgreSQL configuration: # ... postgresql: parameters: # ... hot_standby_feedback: 'on' sync_replication_slots: 'on' Additionally, you must create the logical replication Subscription with the failover option enabled, for example: apiVersion: postgresql.cnpg.io/v1 kind: Subscription # ... spec: # ... parameters: failover: 'true' # ... When configured, logical WAL sender processes send decoded changes to plugins only after the specified replication slots confirm receiving and flushing the relevant WAL, ensuring that: logical replication slots do not consume changes until they are safely received by the replicas of the publisher, and logical replication clients can seamlessly reconnect to a promoted standby without missing data after failover. For more details on logical replication slot synchronization, see the PostgreSQL documentation on Logical Replication Failover .","title":"Behavior on PostgreSQL 17 and later"},{"location":"replication/#behavior-on-postgresql-16-and-earlier","text":"For PostgreSQL 16 and older versions, CloudNativePG uses the pg_failover_slots extension to maintain synchronization of logical replication slots across failovers.","title":"Behavior on PostgreSQL 16 and earlier"},{"location":"replication/#capping-the-wal-size-retained-for-replication-slots","text":"When replication slots is enabled, you might end up running out of disk space due to PostgreSQL trying to retain WAL files requested by a replication slot. This might happen due to a standby that is (temporarily?) down, or lagging, or simply an orphan replication slot. Starting with PostgreSQL 13, you can take advantage of the max_slot_wal_keep_size configuration option controlling the maximum size of WAL files that replication slots are allowed to retain in the pg_wal directory at checkpoint time. By default, in PostgreSQL max_slot_wal_keep_size is set to -1 , meaning that replication slots may retain an unlimited amount of WAL files. As a result, our recommendation is to explicitly set max_slot_wal_keep_size when replication slots support is enabled. For example: # ... postgresql: parameters: max_slot_wal_keep_size: \"10GB\" # ...","title":"Capping the WAL size retained for replication slots"},{"location":"replication/#monitoring-replication-slots","text":"Replication slots must be carefully monitored in your infrastructure. By default, we provide the pg_replication_slots metric in our Prometheus exporter with key information such as the name of the slot, the type, whether it is active, the lag from the primary. Monitoring Please refer to the \"Monitoring\" section for details on how to monitor a CloudNativePG deployment.","title":"Monitoring replication slots"},{"location":"resource_management/","text":"Resource management In a typical Kubernetes cluster, pods run with unlimited resources. By default, they might be allowed to use as much CPU and RAM as needed. CloudNativePG allows administrators to control and manage resource usage by the pods of the cluster, through the resources section of the manifest, with two knobs: requests : initial requirement limits : maximum usage, in case of dynamic increase of resource needs For example, you can request an initial amount of RAM of 32MiB (scalable to 128MiB) and 50m of CPU (scalable to 100m) as follows: resources: requests: memory: \"32Mi\" cpu: \"50m\" limits: memory: \"128Mi\" cpu: \"100m\" Memory requests and limits are associated with containers, but it is useful to think of a pod as having a memory request and limit. The pod's memory request is the sum of the memory requests for all the containers in the pod. Pod scheduling is based on requests and not on limits. A pod is scheduled to run on a Node only if the Node has enough available memory to satisfy the pod's memory request. For each resource, we divide containers into 3 Quality of Service (QoS) classes, in decreasing order of priority: Guaranteed Burstable Best-Effort For more details, please refer to the \"Configure Quality of Service for Pods\" section in the Kubernetes documentation. For a PostgreSQL workload it is recommended to set a \"Guaranteed\" QoS. Info When the quality of service is set to \"Guaranteed\", CloudNativePG sets the PG_OOM_ADJUST_VALUE for the postmaster process to 0 , in line with the PostgreSQL documentation . This allows the postmaster to retain its low Out-Of-Memory (OOM) score of -997 , while its child processes run with an OOM score adjustment of 0 . As a result, if the OOM killer is triggered, it will terminate the child processes before the postmaster . This behavior helps keep the PostgreSQL instance alive for as long as possible and enables a clean shutdown procedure in the event of an eviction. To avoid resources related issues in Kubernetes, we can refer to the best practices for \"out of resource\" handling while creating a cluster: Specify your required values for memory and CPU in the resources section of the manifest file. This way, you can avoid the OOM Killed and CPU throttle or any other resource-related issues on running instances. For your cluster's pods to get assigned to the \"Guaranteed\" QoS class, you must set limits and requests for both memory and CPU to the same value. Specify your required PostgreSQL memory parameters consistently with the pod resources (as you would do in a VM or physical machine scenario - see below). Set up database server pods on a dedicated node using nodeSelector. See the \"nodeSelector\" and \"tolerations\" fields of the \u201caffinityconfiguration\" resource on the API reference page. You can refer to the following example manifest: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-resources spec: instances: 3 postgresql: parameters: shared_buffers: \"256MB\" resources: requests: memory: \"1024Mi\" cpu: 1 limits: memory: \"1024Mi\" cpu: 1 storage: size: 1Gi In the above example, we have specified shared_buffers parameter with a value of 256MB - i.e., how much memory is dedicated to the PostgreSQL server for caching data (the default value for this parameter is 128MB in case it's not defined). A reasonable starting value for shared_buffers is 25% of the memory in your system. For example: if your shared_buffers is 256 MB, then the recommended value for your container memory size is 1 GB, which means that within a pod all the containers will have a total of 1 GB memory that Kubernetes will always preserve, enabling our containers to work as expected. For more details, please refer to the \"Resource Consumption\" section in the PostgreSQL documentation. Managing Compute Resources for Containers For more details on resource management, please refer to the \"Managing Compute Resources for Containers\" page from the Kubernetes documentation.","title":"Resource management"},{"location":"resource_management/#resource-management","text":"In a typical Kubernetes cluster, pods run with unlimited resources. By default, they might be allowed to use as much CPU and RAM as needed. CloudNativePG allows administrators to control and manage resource usage by the pods of the cluster, through the resources section of the manifest, with two knobs: requests : initial requirement limits : maximum usage, in case of dynamic increase of resource needs For example, you can request an initial amount of RAM of 32MiB (scalable to 128MiB) and 50m of CPU (scalable to 100m) as follows: resources: requests: memory: \"32Mi\" cpu: \"50m\" limits: memory: \"128Mi\" cpu: \"100m\" Memory requests and limits are associated with containers, but it is useful to think of a pod as having a memory request and limit. The pod's memory request is the sum of the memory requests for all the containers in the pod. Pod scheduling is based on requests and not on limits. A pod is scheduled to run on a Node only if the Node has enough available memory to satisfy the pod's memory request. For each resource, we divide containers into 3 Quality of Service (QoS) classes, in decreasing order of priority: Guaranteed Burstable Best-Effort For more details, please refer to the \"Configure Quality of Service for Pods\" section in the Kubernetes documentation. For a PostgreSQL workload it is recommended to set a \"Guaranteed\" QoS. Info When the quality of service is set to \"Guaranteed\", CloudNativePG sets the PG_OOM_ADJUST_VALUE for the postmaster process to 0 , in line with the PostgreSQL documentation . This allows the postmaster to retain its low Out-Of-Memory (OOM) score of -997 , while its child processes run with an OOM score adjustment of 0 . As a result, if the OOM killer is triggered, it will terminate the child processes before the postmaster . This behavior helps keep the PostgreSQL instance alive for as long as possible and enables a clean shutdown procedure in the event of an eviction. To avoid resources related issues in Kubernetes, we can refer to the best practices for \"out of resource\" handling while creating a cluster: Specify your required values for memory and CPU in the resources section of the manifest file. This way, you can avoid the OOM Killed and CPU throttle or any other resource-related issues on running instances. For your cluster's pods to get assigned to the \"Guaranteed\" QoS class, you must set limits and requests for both memory and CPU to the same value. Specify your required PostgreSQL memory parameters consistently with the pod resources (as you would do in a VM or physical machine scenario - see below). Set up database server pods on a dedicated node using nodeSelector. See the \"nodeSelector\" and \"tolerations\" fields of the \u201caffinityconfiguration\" resource on the API reference page. You can refer to the following example manifest: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-resources spec: instances: 3 postgresql: parameters: shared_buffers: \"256MB\" resources: requests: memory: \"1024Mi\" cpu: 1 limits: memory: \"1024Mi\" cpu: 1 storage: size: 1Gi In the above example, we have specified shared_buffers parameter with a value of 256MB - i.e., how much memory is dedicated to the PostgreSQL server for caching data (the default value for this parameter is 128MB in case it's not defined). A reasonable starting value for shared_buffers is 25% of the memory in your system. For example: if your shared_buffers is 256 MB, then the recommended value for your container memory size is 1 GB, which means that within a pod all the containers will have a total of 1 GB memory that Kubernetes will always preserve, enabling our containers to work as expected. For more details, please refer to the \"Resource Consumption\" section in the PostgreSQL documentation. Managing Compute Resources for Containers For more details on resource management, please refer to the \"Managing Compute Resources for Containers\" page from the Kubernetes documentation.","title":"Resource management"},{"location":"rolling_update/","text":"Rolling Updates The operator allows changing the PostgreSQL version used in a cluster while applications are running against it. Important Only upgrades for PostgreSQL minor releases are supported. Rolling upgrades are started when: the user changes the imageName attribute of the cluster specification; the image catalog is updated with a new image for the major used by the cluster; a change in the PostgreSQL configuration requires a restart to be applied; a change on the Cluster .spec.resources values a change in size of the persistent volume claim on AKS after the operator is updated, to ensure the Pods run the latest instance manager (unless in-place updates are enabled ). The operator starts upgrading all the replicas, one Pod at a time, and begins from the one with the highest serial. The primary is the last node to be upgraded. Rolling updates are configurable and can be either entirely automated ( unsupervised ) or requiring human intervention ( supervised ). The upgrade keeps the CloudNativePG identity, without re-cloning the data. Pods will be deleted and created again with the same PVCs and a new image, if required. During the rolling update procedure, each service endpoints move to reflect the cluster's status, so that applications can ignore the node that is being updated. Automated updates ( unsupervised ) When primaryUpdateStrategy is set to unsupervised , the rolling update process is managed by Kubernetes and is entirely automated. Once the replicas have been upgraded, the selected primaryUpdateMethod operation will initiate on the primary. This is the default behavior. The primaryUpdateMethod option accepts one of the following values: restart : if possible, perform an automated restart of the pod where the primary instance is running. Otherwise, the restart request is ignored and a switchover issued. This is the default behavior. switchover : a switchover operation is automatically performed, setting the most aligned replica as the new target primary, and shutting down the former primary pod. There's no one-size-fits-all configuration for the update method, as that depends on several factors like the actual workload of your database, the requirements in terms of RPO and RTO , whether your PostgreSQL architecture is shared or shared nothing, and so on. Indeed, being PostgreSQL a primary/standby architecture database management system, the update process inevitably generates a downtime for your applications. One important aspect to consider for your context is the time it takes for your pod to download the new PostgreSQL container image, as that depends on your Kubernetes cluster settings and specifications. The switchover method makes sure that the promoted instance already runs the target image version of the container. The restart method instead might require to download the image from the origin registry after the primary pod has been shut down. It is up to you to determine whether, for your database, it is best to use restart or switchover as part of the rolling update procedure. Manual updates ( supervised ) When primaryUpdateStrategy is set to supervised , the rolling update process is suspended immediately after all replicas have been upgraded. This phase can only be completed with either a manual switchover or an in-place restart. Keep in mind that image upgrades can not be applied with an in-place restart, so a switchover is required in such cases. You can trigger a switchover with: kubectl cnpg promote [cluster] [new_primary] You can trigger a restart with: kubectl cnpg restart [cluster] [current_primary] You can find more information in the cnpg plugin page .","title":"Rolling Updates"},{"location":"rolling_update/#rolling-updates","text":"The operator allows changing the PostgreSQL version used in a cluster while applications are running against it. Important Only upgrades for PostgreSQL minor releases are supported. Rolling upgrades are started when: the user changes the imageName attribute of the cluster specification; the image catalog is updated with a new image for the major used by the cluster; a change in the PostgreSQL configuration requires a restart to be applied; a change on the Cluster .spec.resources values a change in size of the persistent volume claim on AKS after the operator is updated, to ensure the Pods run the latest instance manager (unless in-place updates are enabled ). The operator starts upgrading all the replicas, one Pod at a time, and begins from the one with the highest serial. The primary is the last node to be upgraded. Rolling updates are configurable and can be either entirely automated ( unsupervised ) or requiring human intervention ( supervised ). The upgrade keeps the CloudNativePG identity, without re-cloning the data. Pods will be deleted and created again with the same PVCs and a new image, if required. During the rolling update procedure, each service endpoints move to reflect the cluster's status, so that applications can ignore the node that is being updated.","title":"Rolling Updates"},{"location":"rolling_update/#automated-updates-unsupervised","text":"When primaryUpdateStrategy is set to unsupervised , the rolling update process is managed by Kubernetes and is entirely automated. Once the replicas have been upgraded, the selected primaryUpdateMethod operation will initiate on the primary. This is the default behavior. The primaryUpdateMethod option accepts one of the following values: restart : if possible, perform an automated restart of the pod where the primary instance is running. Otherwise, the restart request is ignored and a switchover issued. This is the default behavior. switchover : a switchover operation is automatically performed, setting the most aligned replica as the new target primary, and shutting down the former primary pod. There's no one-size-fits-all configuration for the update method, as that depends on several factors like the actual workload of your database, the requirements in terms of RPO and RTO , whether your PostgreSQL architecture is shared or shared nothing, and so on. Indeed, being PostgreSQL a primary/standby architecture database management system, the update process inevitably generates a downtime for your applications. One important aspect to consider for your context is the time it takes for your pod to download the new PostgreSQL container image, as that depends on your Kubernetes cluster settings and specifications. The switchover method makes sure that the promoted instance already runs the target image version of the container. The restart method instead might require to download the image from the origin registry after the primary pod has been shut down. It is up to you to determine whether, for your database, it is best to use restart or switchover as part of the rolling update procedure.","title":"Automated updates (unsupervised)"},{"location":"rolling_update/#manual-updates-supervised","text":"When primaryUpdateStrategy is set to supervised , the rolling update process is suspended immediately after all replicas have been upgraded. This phase can only be completed with either a manual switchover or an in-place restart. Keep in mind that image upgrades can not be applied with an in-place restart, so a switchover is required in such cases. You can trigger a switchover with: kubectl cnpg promote [cluster] [new_primary] You can trigger a restart with: kubectl cnpg restart [cluster] [current_primary] You can find more information in the cnpg plugin page .","title":"Manual updates (supervised)"},{"location":"samples/","text":"Examples The examples show configuration files for setting up your PostgreSQL cluster. Important These examples are for demonstration and experimentation purposes. You can execute them on a personal Kubernetes cluster with Minikube or Kind, as described in Quick start . Reference For a list of available options, see API reference . Basics Basic cluster cluster-example.yaml A basic example of a cluster. Custom cluster cluster-example-custom.yaml A basic cluster that uses the default storage class and custom parameters for the postgresql.conf and pg_hba.conf files. Cluster with customized storage class cluster-storage-class.yaml : A basic cluster that uses a specified storage class of standard . Cluster with persistent volume claim (PVC) template configured cluster-pvc-template.yaml : A basic cluster with an explicit persistent volume claim template. Extended configuration example cluster-example-full.yaml : A cluster that sets most of the available options. Bootstrap cluster with SQL files cluster-example-initdb-sql-refs.yaml : A cluster example that executes a set of queries defined in a secret and a ConfigMap right after the database is created. Sample cluster with customized pg_hba configuration cluster-example-pg-hba.yaml : A basic cluster that enables the user app to authenticate using certificates. Sample cluster with Secret and ConfigMap mounted using projected volume template cluster-example-projected-volume.yaml A basic cluster with the existing Secret and ConfigMap mounted into Postgres pod using projected volume mount. Backups Customized storage class and backups Prerequisites : Bucket storage must be available. The sample config is for AWS. Change it to suit your setup. cluster-storage-class-with-backup.yaml A cluster with backups configured. Backup Prerequisites : cluster-storage-class-with-backup.yaml applied and healthy. backup-example.yaml : An example of a backup that runs against the previous sample. Simple cluster with backup configured for minio Prerequisites : The configuration assumes minio is running and working. Update backup.barmanObjectStore with your minio parameters or your cloud solution. cluster-example-with-backup.yaml A basic cluster with backups configured. Simple cluster with backup configured for Scaleway Object Storage Prerequisites : The configuration assumes a Scaleway Object Storage bucket exists. Update backup.barmanObjectStore with your Scaleway parameters. cluster-example-with-backup-scaleway.yaml A basic cluster with backups configured to work with Scaleway Object Storage.. Replica clusters Replica cluster by way of backup from an object store Prerequisites : cluster-storage-class-with-backup.yaml applied and healthy, and a backup cluster-example-trigger-backup.yaml applied and completed. cluster-example-replica-from-backup-simple.yaml : A replica cluster following a cluster with backup configured. Replica cluster by way of volume snapshot Prerequisites : cluster-example-with-volume-snapshot.yaml applied and healthy, and a volume snapshot backup-with-volume-snapshot.yaml applied and completed. cluster-example-replica-from-volume-snapshot.yaml : A replica cluster following a cluster with volume snapshot configured. Replica cluster by way of streaming (pg_basebackup) Prerequisites : cluster-example.yaml applied and healthy. cluster-example-replica-streaming.yaml : A replica cluster following cluster-example with streaming replication. PostGIS PostGIS example postgis-example.yaml : An example of a PostGIS cluster. See PostGIS for details. Managed roles Cluster with declarative role management cluster-example-with-roles.yaml : Declares a role with the managed stanza. Includes password management with Kubernetes secrets. Managed services Cluster with managed services cluster-example-managed-services.yaml : Declares a service with the managed stanza. Includes default service disabled and new rw service template of LoadBalancer type defined. Declarative tablespaces Cluster with declarative tablespaces cluster-example-with-tablespaces.yaml Cluster with declarative tablespaces and backup Prerequisites : The configuration assumes minio is running and working. Update backup.barmanObjectStore with your minio parameters or your cloud solution. cluster-example-with-tablespaces-backup.yaml Restored cluster with tablespaces from object store Prerequisites : The previous cluster applied and a base backup completed. Remember to update bootstrap.recovery.backup.name with the backup name. cluster-restore-with-tablespaces.yaml For a list of available options, see API reference . Pooler configuration Pooler with custom service config pooler-external.yaml Logical replication via declarative Publication and Subscription objects Two test manifests contain everything needed to set up logical replication: Source cluster with a publication cluster-example-logical-source.yaml Sets up a cluster, cluster-example with some tables created in the app database, and, importantly, adds replication to the app user . A publication is created for the cluster on the app database: note that the publication will be reconciled only after the cluster's primary is up and running. Destination cluster with a subscription Prerequisites : The source cluster with publication, defined as above. cluster-example-logical-destination.yaml Sets up a cluster cluster-example-dest with: the source cluster defined in the externalClusters stanza. Note that it uses the app role to connect, which assumes the source cluster grants it replication privilege. a bootstrap import of microservice type, with schemaOnly enabled A subscription is created on the destination cluster: note that the subscription will be reconciled only after the destination cluster's primary is up and running. After both clusters have been reconciled, together with the publication and subscription objects, you can verify that that tables in the source cluster, and the data in them, have been replicated in the destination cluster In addition, there are some standalone example manifests: A plain Publication targeting All Tables Prerequisites : an existing cluster cluster-example . publication-example.yaml A Publication with a constrained publication target Prerequisites : an existing cluster cluster-example . publication-example-objects.yaml A plain Subscription Prerequisites: an existing cluster cluster-example set up as source, with a publication pub-all . A cluster cluster-example-dest set up as a destination cluster, including the externalClusters stanza with connection parameters to the source cluster, including a role with replication privilege. subscription-example.yaml All the above manifests create publications or subscriptions on the app database. The Database CRD offers a convenient way to create databases declaratively. With it, logical replication could be set up for arbitrary databases. Which brings us to the next section. Declarative management of Postgres databases A plain Database Prerequisites : an existing cluster cluster-example . database-example.yaml A Database with ICU local specifications Prerequisites : an existing cluster cluster-example running Postgres 16 or more advanced. database-example-icu.yaml","title":"Examples"},{"location":"samples/#examples","text":"The examples show configuration files for setting up your PostgreSQL cluster. Important These examples are for demonstration and experimentation purposes. You can execute them on a personal Kubernetes cluster with Minikube or Kind, as described in Quick start . Reference For a list of available options, see API reference .","title":"Examples"},{"location":"samples/#basics","text":"Basic cluster cluster-example.yaml A basic example of a cluster. Custom cluster cluster-example-custom.yaml A basic cluster that uses the default storage class and custom parameters for the postgresql.conf and pg_hba.conf files. Cluster with customized storage class cluster-storage-class.yaml : A basic cluster that uses a specified storage class of standard . Cluster with persistent volume claim (PVC) template configured cluster-pvc-template.yaml : A basic cluster with an explicit persistent volume claim template. Extended configuration example cluster-example-full.yaml : A cluster that sets most of the available options. Bootstrap cluster with SQL files cluster-example-initdb-sql-refs.yaml : A cluster example that executes a set of queries defined in a secret and a ConfigMap right after the database is created. Sample cluster with customized pg_hba configuration cluster-example-pg-hba.yaml : A basic cluster that enables the user app to authenticate using certificates. Sample cluster with Secret and ConfigMap mounted using projected volume template cluster-example-projected-volume.yaml A basic cluster with the existing Secret and ConfigMap mounted into Postgres pod using projected volume mount.","title":"Basics"},{"location":"samples/#backups","text":"Customized storage class and backups Prerequisites : Bucket storage must be available. The sample config is for AWS. Change it to suit your setup. cluster-storage-class-with-backup.yaml A cluster with backups configured. Backup Prerequisites : cluster-storage-class-with-backup.yaml applied and healthy. backup-example.yaml : An example of a backup that runs against the previous sample. Simple cluster with backup configured for minio Prerequisites : The configuration assumes minio is running and working. Update backup.barmanObjectStore with your minio parameters or your cloud solution. cluster-example-with-backup.yaml A basic cluster with backups configured. Simple cluster with backup configured for Scaleway Object Storage Prerequisites : The configuration assumes a Scaleway Object Storage bucket exists. Update backup.barmanObjectStore with your Scaleway parameters. cluster-example-with-backup-scaleway.yaml A basic cluster with backups configured to work with Scaleway Object Storage..","title":"Backups"},{"location":"samples/#replica-clusters","text":"Replica cluster by way of backup from an object store Prerequisites : cluster-storage-class-with-backup.yaml applied and healthy, and a backup cluster-example-trigger-backup.yaml applied and completed. cluster-example-replica-from-backup-simple.yaml : A replica cluster following a cluster with backup configured. Replica cluster by way of volume snapshot Prerequisites : cluster-example-with-volume-snapshot.yaml applied and healthy, and a volume snapshot backup-with-volume-snapshot.yaml applied and completed. cluster-example-replica-from-volume-snapshot.yaml : A replica cluster following a cluster with volume snapshot configured. Replica cluster by way of streaming (pg_basebackup) Prerequisites : cluster-example.yaml applied and healthy. cluster-example-replica-streaming.yaml : A replica cluster following cluster-example with streaming replication.","title":"Replica clusters"},{"location":"samples/#postgis","text":"PostGIS example postgis-example.yaml : An example of a PostGIS cluster. See PostGIS for details.","title":"PostGIS"},{"location":"samples/#managed-roles","text":"Cluster with declarative role management cluster-example-with-roles.yaml : Declares a role with the managed stanza. Includes password management with Kubernetes secrets.","title":"Managed roles"},{"location":"samples/#managed-services","text":"Cluster with managed services cluster-example-managed-services.yaml : Declares a service with the managed stanza. Includes default service disabled and new rw service template of LoadBalancer type defined.","title":"Managed services"},{"location":"samples/#declarative-tablespaces","text":"Cluster with declarative tablespaces cluster-example-with-tablespaces.yaml Cluster with declarative tablespaces and backup Prerequisites : The configuration assumes minio is running and working. Update backup.barmanObjectStore with your minio parameters or your cloud solution. cluster-example-with-tablespaces-backup.yaml Restored cluster with tablespaces from object store Prerequisites : The previous cluster applied and a base backup completed. Remember to update bootstrap.recovery.backup.name with the backup name. cluster-restore-with-tablespaces.yaml For a list of available options, see API reference .","title":"Declarative tablespaces"},{"location":"samples/#pooler-configuration","text":"Pooler with custom service config pooler-external.yaml","title":"Pooler configuration"},{"location":"samples/#logical-replication-via-declarative-publication-and-subscription-objects","text":"Two test manifests contain everything needed to set up logical replication: Source cluster with a publication cluster-example-logical-source.yaml Sets up a cluster, cluster-example with some tables created in the app database, and, importantly, adds replication to the app user . A publication is created for the cluster on the app database: note that the publication will be reconciled only after the cluster's primary is up and running. Destination cluster with a subscription Prerequisites : The source cluster with publication, defined as above. cluster-example-logical-destination.yaml Sets up a cluster cluster-example-dest with: the source cluster defined in the externalClusters stanza. Note that it uses the app role to connect, which assumes the source cluster grants it replication privilege. a bootstrap import of microservice type, with schemaOnly enabled A subscription is created on the destination cluster: note that the subscription will be reconciled only after the destination cluster's primary is up and running. After both clusters have been reconciled, together with the publication and subscription objects, you can verify that that tables in the source cluster, and the data in them, have been replicated in the destination cluster In addition, there are some standalone example manifests: A plain Publication targeting All Tables Prerequisites : an existing cluster cluster-example . publication-example.yaml A Publication with a constrained publication target Prerequisites : an existing cluster cluster-example . publication-example-objects.yaml A plain Subscription Prerequisites: an existing cluster cluster-example set up as source, with a publication pub-all . A cluster cluster-example-dest set up as a destination cluster, including the externalClusters stanza with connection parameters to the source cluster, including a role with replication privilege. subscription-example.yaml All the above manifests create publications or subscriptions on the app database. The Database CRD offers a convenient way to create databases declaratively. With it, logical replication could be set up for arbitrary databases. Which brings us to the next section.","title":"Logical replication via declarative Publication and Subscription objects"},{"location":"samples/#declarative-management-of-postgres-databases","text":"A plain Database Prerequisites : an existing cluster cluster-example . database-example.yaml A Database with ICU local specifications Prerequisites : an existing cluster cluster-example running Postgres 16 or more advanced. database-example-icu.yaml","title":"Declarative management of Postgres databases"},{"location":"scheduling/","text":"Scheduling Scheduling, in Kubernetes, is the process responsible for placing a new pod on the best node possible, based on several criteria. Kubernetes documentation Please refer to the Kubernetes documentation for more information on scheduling, including all the available policies. On this page we assume you are familiar with concepts like affinity, anti-affinity, node selectors, and so on. You can control how the CloudNativePG cluster's instances should be scheduled through the affinity section in the definition of the cluster, which supports: pod affinity/anti-affinity node selectors tolerations Pod Affinity and Anti-Affinity Kubernetes provides mechanisms to control where pods are scheduled using affinity and anti-affinity rules. These rules allow you to specify whether a pod should be scheduled on particular nodes ( affinity ) or avoided on specific nodes ( anti-affinity ) based on the workloads already running there. This capability is technically referred to as inter-pod affinity/anti-affinity . By default, CloudNativePG configures cluster instances to preferably be scheduled on different nodes, while pgBouncer instances might still run on the same nodes. For example, given the following Cluster specification: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 affinity: enablePodAntiAffinity: true # Default value topologyKey: kubernetes.io/hostname # Default value podAntiAffinityType: preferred # Default value storage: size: 1Gi The affinity configuration applied in the instance pods will be: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: cnpg.io/cluster operator: In values: - cluster-example - key: cnpg.io/podRole operator: In values: - instance topologyKey: kubernetes.io/hostname weight: 100 With this setup, Kubernetes will prefer to schedule a 3-node PostgreSQL cluster across three different nodes, assuming sufficient resources are available. Requiring Pod Anti-Affinity You can modify the default behavior by adjusting the settings mentioned above. For example, setting podAntiAffinityType to required will enforce requiredDuringSchedulingIgnoredDuringExecution instead of preferredDuringSchedulingIgnoredDuringExecution . However, be aware that this strict requirement may cause pods to remain pending if resources are insufficient\u2014this is particularly relevant when using Cluster Autoscaler for automated horizontal scaling in a Kubernetes cluster. Inter-pod Affinity and Anti-Affinity For more details, refer to the Kubernetes documentation . Topology Considerations In cloud environments, you might consider using topology.kubernetes.io/zone as the topologyKey to ensure pods are distributed across different availability zones rather than just nodes. For more options, see Well-Known Labels, Annotations, and Taints . Disabling Anti-Affinity Policies If needed, you can disable the operator-generated anti-affinity policies by setting enablePodAntiAffinity to false . Fine-Grained Control with Custom Rules For scenarios requiring more precise control, you can specify custom pod affinity or anti-affinity rules using the additionalPodAffinity and additionalPodAntiAffinity configuration attributes. These custom rules will be added to those generated by the operator, if enabled, or used directly if the operator-generated rules are disabled. Note When using additionalPodAntiAffinity or additionalPodAffinity , you must provide the full podAntiAffinity or podAffinity structure expected by the Pod specification. The following YAML example demonstrates how to configure only one instance of PostgreSQL per worker node, regardless of which PostgreSQL cluster it belongs to: additionalPodAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: postgresql operator: Exists values: [] topologyKey: \"kubernetes.io/hostname\" Node selection through nodeSelector Kubernetes allows nodeSelector to provide a list of labels (defined as key-value pairs) to select the nodes on which a pod can run. Specifically, the node must have each indicated key-value pair as labels for the pod to be scheduled and run. Similarly, CloudNativePG consents you to define a nodeSelector in the affinity section, so that you can request a PostgreSQL cluster to run only on nodes that have those labels. Tolerations Kubernetes allows you to specify (through taints ) whether a node should repel all pods not explicitly tolerating (through tolerations ) their taints . So, by setting a proper set of tolerations for a workload matching a specific node's taints , Kubernetes scheduler will now take into consideration the tainted node, while deciding on which node to schedule the workload. Tolerations can be configured for all the pods of a Cluster through the .spec.affinity.tolerations section, which accepts the usual Kubernetes syntax for tolerations. Taints and Tolerations More information on taints and tolerations can be found in the Kubernetes documentation . Isolating PostgreSQL workloads Important Before proceeding, please ensure you have read the \"Architecture\" section of the documentation. While you can deploy PostgreSQL on Kubernetes in various ways, we recommend following these essential principles for production environments: Exploit Availability Zones: If possible, take advantage of availability zones (AZs) within the same Kubernetes cluster by distributing PostgreSQL instances across different AZs. Dedicate Worker Nodes: Allocate specific worker nodes for PostgreSQL workloads through the node-role.kubernetes.io/postgres label and taint, as detailed in the Reserving Nodes for PostgreSQL Workloads section. Avoid Node Overlap: Ensure that no instances from the same PostgreSQL cluster are running on the same node. As explained in greater detail in the previous sections, CloudNativePG provides the flexibility to configure pod anti-affinity, node selectors, and tolerations. Below is a sample configuration to ensure that a PostgreSQL Cluster is deployed on postgres nodes, with its instances distributed across different nodes: # <snip> affinity: enablePodAntiAffinity: true topologyKey: kubernetes.io/hostname podAntiAffinityType: required nodeSelector: node-role.kubernetes.io/postgres: \"\" tolerations: - key: node-role.kubernetes.io/postgres operator: Exists effect: NoSchedule # <snip> Despite its simplicity, this setup ensures optimal distribution and isolation of PostgreSQL workloads, leading to enhanced performance and reliability in your production environment.","title":"Scheduling"},{"location":"scheduling/#scheduling","text":"Scheduling, in Kubernetes, is the process responsible for placing a new pod on the best node possible, based on several criteria. Kubernetes documentation Please refer to the Kubernetes documentation for more information on scheduling, including all the available policies. On this page we assume you are familiar with concepts like affinity, anti-affinity, node selectors, and so on. You can control how the CloudNativePG cluster's instances should be scheduled through the affinity section in the definition of the cluster, which supports: pod affinity/anti-affinity node selectors tolerations","title":"Scheduling"},{"location":"scheduling/#pod-affinity-and-anti-affinity","text":"Kubernetes provides mechanisms to control where pods are scheduled using affinity and anti-affinity rules. These rules allow you to specify whether a pod should be scheduled on particular nodes ( affinity ) or avoided on specific nodes ( anti-affinity ) based on the workloads already running there. This capability is technically referred to as inter-pod affinity/anti-affinity . By default, CloudNativePG configures cluster instances to preferably be scheduled on different nodes, while pgBouncer instances might still run on the same nodes. For example, given the following Cluster specification: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-example spec: instances: 3 imageName: ghcr.io/cloudnative-pg/postgresql:17.5 affinity: enablePodAntiAffinity: true # Default value topologyKey: kubernetes.io/hostname # Default value podAntiAffinityType: preferred # Default value storage: size: 1Gi The affinity configuration applied in the instance pods will be: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: cnpg.io/cluster operator: In values: - cluster-example - key: cnpg.io/podRole operator: In values: - instance topologyKey: kubernetes.io/hostname weight: 100 With this setup, Kubernetes will prefer to schedule a 3-node PostgreSQL cluster across three different nodes, assuming sufficient resources are available.","title":"Pod Affinity and Anti-Affinity"},{"location":"scheduling/#requiring-pod-anti-affinity","text":"You can modify the default behavior by adjusting the settings mentioned above. For example, setting podAntiAffinityType to required will enforce requiredDuringSchedulingIgnoredDuringExecution instead of preferredDuringSchedulingIgnoredDuringExecution . However, be aware that this strict requirement may cause pods to remain pending if resources are insufficient\u2014this is particularly relevant when using Cluster Autoscaler for automated horizontal scaling in a Kubernetes cluster. Inter-pod Affinity and Anti-Affinity For more details, refer to the Kubernetes documentation .","title":"Requiring Pod Anti-Affinity"},{"location":"scheduling/#topology-considerations","text":"In cloud environments, you might consider using topology.kubernetes.io/zone as the topologyKey to ensure pods are distributed across different availability zones rather than just nodes. For more options, see Well-Known Labels, Annotations, and Taints .","title":"Topology Considerations"},{"location":"scheduling/#disabling-anti-affinity-policies","text":"If needed, you can disable the operator-generated anti-affinity policies by setting enablePodAntiAffinity to false .","title":"Disabling Anti-Affinity Policies"},{"location":"scheduling/#fine-grained-control-with-custom-rules","text":"For scenarios requiring more precise control, you can specify custom pod affinity or anti-affinity rules using the additionalPodAffinity and additionalPodAntiAffinity configuration attributes. These custom rules will be added to those generated by the operator, if enabled, or used directly if the operator-generated rules are disabled. Note When using additionalPodAntiAffinity or additionalPodAffinity , you must provide the full podAntiAffinity or podAffinity structure expected by the Pod specification. The following YAML example demonstrates how to configure only one instance of PostgreSQL per worker node, regardless of which PostgreSQL cluster it belongs to: additionalPodAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: postgresql operator: Exists values: [] topologyKey: \"kubernetes.io/hostname\"","title":"Fine-Grained Control with Custom Rules"},{"location":"scheduling/#node-selection-through-nodeselector","text":"Kubernetes allows nodeSelector to provide a list of labels (defined as key-value pairs) to select the nodes on which a pod can run. Specifically, the node must have each indicated key-value pair as labels for the pod to be scheduled and run. Similarly, CloudNativePG consents you to define a nodeSelector in the affinity section, so that you can request a PostgreSQL cluster to run only on nodes that have those labels.","title":"Node selection through nodeSelector"},{"location":"scheduling/#tolerations","text":"Kubernetes allows you to specify (through taints ) whether a node should repel all pods not explicitly tolerating (through tolerations ) their taints . So, by setting a proper set of tolerations for a workload matching a specific node's taints , Kubernetes scheduler will now take into consideration the tainted node, while deciding on which node to schedule the workload. Tolerations can be configured for all the pods of a Cluster through the .spec.affinity.tolerations section, which accepts the usual Kubernetes syntax for tolerations. Taints and Tolerations More information on taints and tolerations can be found in the Kubernetes documentation .","title":"Tolerations"},{"location":"scheduling/#isolating-postgresql-workloads","text":"Important Before proceeding, please ensure you have read the \"Architecture\" section of the documentation. While you can deploy PostgreSQL on Kubernetes in various ways, we recommend following these essential principles for production environments: Exploit Availability Zones: If possible, take advantage of availability zones (AZs) within the same Kubernetes cluster by distributing PostgreSQL instances across different AZs. Dedicate Worker Nodes: Allocate specific worker nodes for PostgreSQL workloads through the node-role.kubernetes.io/postgres label and taint, as detailed in the Reserving Nodes for PostgreSQL Workloads section. Avoid Node Overlap: Ensure that no instances from the same PostgreSQL cluster are running on the same node. As explained in greater detail in the previous sections, CloudNativePG provides the flexibility to configure pod anti-affinity, node selectors, and tolerations. Below is a sample configuration to ensure that a PostgreSQL Cluster is deployed on postgres nodes, with its instances distributed across different nodes: # <snip> affinity: enablePodAntiAffinity: true topologyKey: kubernetes.io/hostname podAntiAffinityType: required nodeSelector: node-role.kubernetes.io/postgres: \"\" tolerations: - key: node-role.kubernetes.io/postgres operator: Exists effect: NoSchedule # <snip> Despite its simplicity, this setup ensures optimal distribution and isolation of PostgreSQL workloads, leading to enhanced performance and reliability in your production environment.","title":"Isolating PostgreSQL workloads"},{"location":"security/","text":"Security This section contains information about security for CloudNativePG, that are analyzed at 3 different layers: Code, Container and Cluster. Warning The information contained in this page must not exonerate you from performing regular InfoSec duties on your Kubernetes cluster. Please familiarize yourself with the \"Overview of Cloud Native Security\" page from the Kubernetes documentation. About the 4C's Security Model Please refer to \"The 4C\u2019s Security Model in Kubernetes\" blog article to get a better understanding and context of the approach EDB has taken with security in CloudNativePG. Code CloudNativePG's source code undergoes systematic static analysis, including checks for security vulnerabilities, using the popular open-source linter for Go, GolangCI-Lint , directly integrated into the CI/CD pipeline. GolangCI-Lint can run multiple linters on the same source code. The following tools are used to identify security issues: Golang Security Checker ( gosec ): A linter that scans the abstract syntax tree of the source code against a set of rules designed to detect known vulnerabilities, threats, and weaknesses, such as hard-coded credentials, integer overflows, and SQL injections. GolangCI-Lint runs gosec as part of its suite. govulncheck : This tool runs in the CI/CD pipeline and reports known vulnerabilities affecting Go code or the compiler. If the operator is built with a version of the Go compiler containing a known vulnerability, govulncheck will detect it. CodeQL : Provided by GitHub, this tool scans for security issues and blocks any pull request with detected vulnerabilities. CodeQL is configured to review only Go code, excluding other languages in the repository such as Python or Bash. Snyk : Conducts nightly code scans in a scheduled job and generates weekly reports highlighting any new findings related to code security and licensing issues. The CloudNativePG repository has the \"Private vulnerability reporting\" option enabled in the Security section . This feature allows users to safely report security issues that require careful handling before being publicly disclosed. If you discover any security bug, please use this medium to report it. Important A failure in the static code analysis phase of the CI/CD pipeline will block the entire delivery process of CloudNativePG. Every commit must pass all the linters defined by GolangCI-Lint. Container Every container image in CloudNativePG is automatically built via CI/CD pipelines after every commit. These images include not only the operator's image but also the operands' images, specifically for every supported PostgreSQL version. Important All operand images are automatically and regularly rebuilt by our pipelines to incorporate the latest security updates at both the base image and package levels. This ensures that container images distributed to the community receive patch-level updates regularly. During the CI/CD process, images are scanned using the following tools: Dockle : Ensures best practices in the container build process. Snyk : Detects security issues within the container and reports findings via the GitHub interface. Image Signatures The operator and operand images are cryptographically signed using cosign , a signature tool from sigstore . This process is automated via GitHub Actions and leverages short-lived tokens issued through OpenID Connect . The token issuer is https://token.actions.githubusercontent.com , and the signing identity corresponds to a GitHub workflow executed under the cloudnative-pg repository. This workflow uses the cosign-installer action to streamline the signing process. To verify the authenticity of an operator image, use the following cosign command with the image digest: cosign verify ghcr.io/cloudnative-pg/cloudnative-pg@sha256:<DIGEST> \\ --certificate-identity-regexp=\"^https://github.com/cloudnative-pg/cloudnative-pg/\" \\ --certificate-oidc-issuer=\"https://token.actions.githubusercontent.com\" Attestations Container images include the following attestations for transparency and traceability: Software Bill of Materials (SBOM) : A comprehensive list of software artifacts included in the image or used during its build process, formatted using the in-toto SPDX predicate standard . Provenance : Metadata detailing how the image was built, following the SLSA Provenance framework. You can retrieve the SBOM for a specific image and platform using the following command: docker buildx imagetools inspect <IMAGE> \\ --format '{{ json (index .SBOM \"<PLATFORM>\").SPDX }}' This command outputs the SBOM in JSON format, providing a detailed view of the software components and build dependencies. For the provenance, use: docker buildx imagetools inspect <IMAGE> \\ --format '{{ json (index .Provenance \"<PLATFORM>\").SLSA }}' Guidelines and Frameworks for Container Security The following guidelines and frameworks have been considered for ensuring container-level security: \"Container Image Creation and Deployment Guide\" : Developed by the Defense Information Systems Agency (DISA) of the United States Department of Defense (DoD). \"CIS Benchmark for Docker\" : Developed by the Center for Internet Security (CIS). About Container-Level Security For more information on the approach that EDB has taken regarding security at the container level in CloudNativePG, please refer to the blog article \"Security and Containers in CloudNativePG\" . Cluster Security at the cluster level takes into account all Kubernetes components that form both the control plane and the nodes, as well as the applications that run in the cluster (PostgreSQL included). Role Based Access Control (RBAC) The operator interacts with the Kubernetes API server using a dedicated service account named cnpg-manager . This service account is typically installed in the operator namespace, commonly cnpg-system . However, the namespace may vary based on the deployment method (see the subsection below). In the same namespace, there is a binding between the cnpg-manager service account and a role. The specific name and type of this role (either Role or ClusterRole ) also depend on the deployment method. This role defines the necessary permissions required by the operator to function correctly. To learn more about these roles, you can use the kubectl describe clusterrole or kubectl describe role commands, depending on the deployment method. Important The above permissions are exclusively reserved for the operator's service account to interact with the Kubernetes API server. They are not directly accessible by the users of the operator that interact only with Cluster , Pooler , Backup , ScheduledBackup , Database , Publication , Subscription , ImageCatalog and ClusterImageCatalog resources. Below we provide some examples and, most importantly, the reasons why CloudNativePG requires full or partial management of standard Kubernetes namespaced or non-namespaced resources. configmaps The operator needs to create and manage default config maps for the Prometheus exporter monitoring metrics. deployments The operator needs to manage a PgBouncer connection pooler using a standard Kubernetes Deployment resource. jobs The operator needs to handle jobs to manage different Cluster 's phases. persistentvolumeclaims The volume where the PGDATA resides is the central element of a PostgreSQL Cluster resource; the operator needs to interact with the selected storage class to dynamically provision the requested volumes, based on the defined scheduling policies. pods The operator needs to manage Cluster 's instances. secrets Unless you provide certificates and passwords to your Cluster objects, the operator adopts the \"convention over configuration\" paradigm by self-provisioning random generated passwords and TLS certificates, and by storing them in secrets. serviceaccounts The operator needs to create a service account that enables the instance manager (which is the PID 1 process of the container that controls the PostgreSQL server) to safely communicate with the Kubernetes API server to coordinate actions and continuously provide a reliable status of the Cluster . services The operator needs to control network access to the PostgreSQL cluster (or the connection pooler) from applications, and properly manage failover/switchover operations in an automated way (by assigning, for example, the correct end-point of a service to the proper primary PostgreSQL instance). validatingwebhookconfigurations and mutatingwebhookconfigurations The operator injects its self-signed webhook CA into both webhook configurations, which are needed to validate and mutate all the resources it manages. For more details, please see the Kubernetes documentation . volumesnapshots The operator needs to generate VolumeSnapshots objects in order to take backups of a PostgreSQL server. VolumeSnapshots are read too in order to validate them before starting the restore process. nodes The operator needs to get the labels for Affinity and AntiAffinity so it can decide in which nodes a pod can be scheduled. This is useful, for example, to prevent the replicas from being scheduled in the same node - especially important if nodes are in different availability zones. This permission is also used to determine whether a node is scheduled, preventing the creation of pods on unscheduled nodes, or triggering a switchover if the primary lives in an unscheduled node. Deployments and ClusterRole Resources As mentioned above, each deployment method may have variations in the namespace location of the service account, as well as the names and types of role bindings and respective roles. Via Kubernetes Manifest When installing CloudNativePG using the Kubernetes manifest, permissions are set to ClusterRoleBinding by default. You can inspect the permissions required by the operator by running: kubectl describe clusterrole cnpg-manager Via OLM From a security perspective, the Operator Lifecycle Manager (OLM) provides a more flexible deployment method. It allows you to configure the operator to watch either all namespaces or specific namespaces, enabling more granular permission management. Info OLM allows you to deploy the operator in its own namespace and configure it to watch specific namespaces used for CloudNativePG clusters. This setup helps to contain permissions and restrict access more effectively. Why Are ClusterRole Permissions Needed? The operator currently requires ClusterRole permissions to read nodes and ClusterImageCatalog objects. All other permissions can be namespace-scoped (i.e., Role ) or cluster-wide (i.e., ClusterRole ). Even with these permissions, if someone gains access to the ServiceAccount , they will only have get , list , and watch permissions, which are limited to viewing resources. However, if an unauthorized user gains access to the ServiceAccount , it indicates a more significant security issue. Therefore, it's crucial to prevent users from accessing the operator's ServiceAccount and any other ServiceAccount with elevated permissions. Calls to the API server made by the instance manager The instance manager, which is the entry point of the operand container, needs to make some calls to the Kubernetes API server to ensure that the status of some resources is correctly updated and to access the config maps and secrets that are associated with that Postgres cluster. Such calls are performed through a dedicated ServiceAccount created by the operator that shares the same PostgreSQL Cluster resource name. Important The operand can only access a specific and limited subset of resources through the API server. A service account is the recommended way to access the API server from within a Pod . For transparency, the permissions associated with the service account are defined in the roles.go file. For example, to retrieve the permissions of a generic mypg cluster in the myns namespace, you can type the following command: kubectl get role -n myns mypg -o yaml Then verify that the role is bound to the service account: kubectl get rolebinding -n myns mypg -o yaml Important Remember that roles are limited to a given namespace . Below we provide a quick summary of the permissions associated with the service account for generic Kubernetes resources. configmaps The instance manager can only read config maps that are related to the same cluster, such as custom monitoring queries secrets The instance manager can only read secrets that are related to the same cluster, namely: streaming replication user, application user, super user, LDAP authentication user, client CA, server CA, server certificate, backup credentials, custom monitoring queries events The instance manager can create an event for the cluster, informing the API server about a particular aspect of the PostgreSQL instance lifecycle Here instead, we provide the same summary for resources specific to CloudNativePG. clusters The instance manager requires read-only permissions, namely get , list and watch , just for its own Cluster resource clusters/status The instance manager requires to update and patch the status of just its own Cluster resource backups The instance manager requires get and list permissions to read any Backup resource in the namespace. Additionally, it requires the delete permission to clean up the Kubernetes cluster by removing the Backup objects that do not have a counterpart in the object store - typically because of retention policies backups/status The instance manager requires to update and patch the status of any Backup resource in the namespace Pod and Container Security Contexts A Security Context defines privilege and access control settings for a pod or container. CloudNativePG does not require privileged mode for container execution. The PostgreSQL containers run as the postgres system user. No component whatsoever requires running as root . Likewise, Volume access does not require privileged mode nor root privileges. Proper permissions must be assigned by the Kubernetes platform and/or administrators. The PostgreSQL containers run with a read-only root filesystem (i.e. no writable layer). The operator manages the setting of security contexts for all pods and containers of a PostgreSQL cluster. The Seccomp Profile to be used for the PostgreSQL containers can be configured with the spec.seccompProfile section of the Cluster resource. If this section is left blank, the containers will use a seccompProfile Type of RuntimeDefault , that is, the container runtime default. The security context of PostgreSQL containers using the default seccompProfile will look like this: securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsNonRoot: true seccompProfile: type: RuntimeDefault Security Context Constraints When running in an environment that is utilizing Security Context Constraints (SCC) the operator does not explicitly set the security context of the PostgreSQL cluster pods, but rather allows the pods to inherit the restricted Security Context Constraints that are already defined. Restricting Pod access using AppArmor You can assign an AppArmor profile to the postgres , initdb , join , full-recovery and bootstrap-controller containers inside every Cluster pod through the container.apparmor.security.beta.kubernetes.io annotation. Example of cluster annotations kind: Cluster metadata: name: cluster-apparmor annotations: container.apparmor.security.beta.kubernetes.io/postgres: runtime/default container.apparmor.security.beta.kubernetes.io/initdb: runtime/default container.apparmor.security.beta.kubernetes.io/join: runtime/default Warning Using this kind of annotations can result in your cluster to stop working. If this is the case, the annotation can be safely removed from the Cluster . The AppArmor configuration must be at Kubernetes node level, meaning that the underlying operating system must have this option enable and properly configured. In case this is not the situation, and the annotations were added at the Cluster creation time, pods will not be created. On the other hand, if you add the annotations after the Cluster was created the pods in the cluster will be unable to start and you will get an error like this: metadata.annotations[container.apparmor.security.beta.kubernetes.io/postgres]: Forbidden: may not add AppArmor annotations] In such cases, please refer to your Kubernetes administrators and ask for the proper AppArmor profile to use. Network Policies The pods created by the Cluster resource can be controlled by Kubernetes network policies to enable/disable inbound and outbound network access at IP and TCP level. You can find more information in the networking document . Important The operator needs to communicate to each instance on TCP port 8000 to get information about the status of the PostgreSQL server. Please make sure you keep this in mind in case you add any network policy, and refer to the \"Exposed Ports\" section below for a list of ports used by CloudNativePG for finer control. Network policies are beyond the scope of this document. Please refer to the \"Network policies\" section of the Kubernetes documentation for further information. Exposed Ports CloudNativePG exposes ports at operator, instance manager and operand levels, as listed in the table below: System Port number Exposing Name TLS Authentication operator 9443 webhook server webhook-server Yes Yes operator 8080 metrics metrics No No instance manager 9187 metrics metrics Optional No instance manager 8000 status status Yes No operand 5432 PostgreSQL instance postgresql Optional Yes PostgreSQL The current implementation of CloudNativePG automatically creates passwords and .pgpass files for the database owner and, only if requested by setting enableSuperuserAccess to true , for the postgres superuser. Warning enableSuperuserAccess is set to false by default to improve the security-by-default posture of the operator, fostering a microservice approach where changes to PostgreSQL are performed in a declarative way through the spec of the Cluster resource, while providing developers with full powers inside the database through the database owner user. As far as password encryption is concerned, CloudNativePG follows the default behavior of PostgreSQL: starting from PostgreSQL 14, password_encryption is by default set to scram-sha-256 , while on earlier versions it is set to md5 . Important Please refer to the \"Password authentication\" section in the PostgreSQL documentation for details. Note The operator supports toggling the enableSuperuserAccess option. When you disable it on a running cluster, the operator will ignore the content of the secret, remove it (if previously generated by the operator) and set the password of the postgres user to NULL (de facto disabling remote access through password authentication). See the \"Secrets\" section in the \"Connecting from an application\" page for more information. You can use those files to configure application access to the database. By default, every replica is automatically configured to connect in physical async streaming replication with the current primary instance, with a special user called streaming_replica . The connection between nodes is encrypted and authentication is via TLS client certificates (please refer to the \"Client TLS/SSL Connections\" page for details). By default, the operator requires TLS v1.3 connections. Currently, the operator allows administrators to add pg_hba.conf lines directly in the manifest as part of the pg_hba section of the postgresql configuration. The lines defined in the manifest are added to a default pg_hba.conf . For further detail on how pg_hba.conf is managed by the operator, see the \"PostgreSQL Configuration\" page of the documentation. The administrator can also customize the content of the pg_ident.conf file that by default only maps the local postgres user to the postgres user in the database. For further detail on how pg_ident.conf is managed by the operator, see the \"PostgreSQL Configuration\" page of the documentation. Important Examples assume that the Kubernetes cluster runs in a private and secure network. Storage CloudNativePG delegates encryption at rest to the underlying storage class. For data protection in production environments, we highly recommend that you choose a storage class that supports encryption at rest.","title":"Security"},{"location":"security/#security","text":"This section contains information about security for CloudNativePG, that are analyzed at 3 different layers: Code, Container and Cluster. Warning The information contained in this page must not exonerate you from performing regular InfoSec duties on your Kubernetes cluster. Please familiarize yourself with the \"Overview of Cloud Native Security\" page from the Kubernetes documentation. About the 4C's Security Model Please refer to \"The 4C\u2019s Security Model in Kubernetes\" blog article to get a better understanding and context of the approach EDB has taken with security in CloudNativePG.","title":"Security"},{"location":"security/#code","text":"CloudNativePG's source code undergoes systematic static analysis, including checks for security vulnerabilities, using the popular open-source linter for Go, GolangCI-Lint , directly integrated into the CI/CD pipeline. GolangCI-Lint can run multiple linters on the same source code. The following tools are used to identify security issues: Golang Security Checker ( gosec ): A linter that scans the abstract syntax tree of the source code against a set of rules designed to detect known vulnerabilities, threats, and weaknesses, such as hard-coded credentials, integer overflows, and SQL injections. GolangCI-Lint runs gosec as part of its suite. govulncheck : This tool runs in the CI/CD pipeline and reports known vulnerabilities affecting Go code or the compiler. If the operator is built with a version of the Go compiler containing a known vulnerability, govulncheck will detect it. CodeQL : Provided by GitHub, this tool scans for security issues and blocks any pull request with detected vulnerabilities. CodeQL is configured to review only Go code, excluding other languages in the repository such as Python or Bash. Snyk : Conducts nightly code scans in a scheduled job and generates weekly reports highlighting any new findings related to code security and licensing issues. The CloudNativePG repository has the \"Private vulnerability reporting\" option enabled in the Security section . This feature allows users to safely report security issues that require careful handling before being publicly disclosed. If you discover any security bug, please use this medium to report it. Important A failure in the static code analysis phase of the CI/CD pipeline will block the entire delivery process of CloudNativePG. Every commit must pass all the linters defined by GolangCI-Lint.","title":"Code"},{"location":"security/#container","text":"Every container image in CloudNativePG is automatically built via CI/CD pipelines after every commit. These images include not only the operator's image but also the operands' images, specifically for every supported PostgreSQL version. Important All operand images are automatically and regularly rebuilt by our pipelines to incorporate the latest security updates at both the base image and package levels. This ensures that container images distributed to the community receive patch-level updates regularly. During the CI/CD process, images are scanned using the following tools: Dockle : Ensures best practices in the container build process. Snyk : Detects security issues within the container and reports findings via the GitHub interface.","title":"Container"},{"location":"security/#image-signatures","text":"The operator and operand images are cryptographically signed using cosign , a signature tool from sigstore . This process is automated via GitHub Actions and leverages short-lived tokens issued through OpenID Connect . The token issuer is https://token.actions.githubusercontent.com , and the signing identity corresponds to a GitHub workflow executed under the cloudnative-pg repository. This workflow uses the cosign-installer action to streamline the signing process. To verify the authenticity of an operator image, use the following cosign command with the image digest: cosign verify ghcr.io/cloudnative-pg/cloudnative-pg@sha256:<DIGEST> \\ --certificate-identity-regexp=\"^https://github.com/cloudnative-pg/cloudnative-pg/\" \\ --certificate-oidc-issuer=\"https://token.actions.githubusercontent.com\"","title":"Image Signatures"},{"location":"security/#attestations","text":"Container images include the following attestations for transparency and traceability: Software Bill of Materials (SBOM) : A comprehensive list of software artifacts included in the image or used during its build process, formatted using the in-toto SPDX predicate standard . Provenance : Metadata detailing how the image was built, following the SLSA Provenance framework. You can retrieve the SBOM for a specific image and platform using the following command: docker buildx imagetools inspect <IMAGE> \\ --format '{{ json (index .SBOM \"<PLATFORM>\").SPDX }}' This command outputs the SBOM in JSON format, providing a detailed view of the software components and build dependencies. For the provenance, use: docker buildx imagetools inspect <IMAGE> \\ --format '{{ json (index .Provenance \"<PLATFORM>\").SLSA }}'","title":"Attestations"},{"location":"security/#guidelines-and-frameworks-for-container-security","text":"The following guidelines and frameworks have been considered for ensuring container-level security: \"Container Image Creation and Deployment Guide\" : Developed by the Defense Information Systems Agency (DISA) of the United States Department of Defense (DoD). \"CIS Benchmark for Docker\" : Developed by the Center for Internet Security (CIS). About Container-Level Security For more information on the approach that EDB has taken regarding security at the container level in CloudNativePG, please refer to the blog article \"Security and Containers in CloudNativePG\" .","title":"Guidelines and Frameworks for Container Security"},{"location":"security/#cluster","text":"Security at the cluster level takes into account all Kubernetes components that form both the control plane and the nodes, as well as the applications that run in the cluster (PostgreSQL included).","title":"Cluster"},{"location":"security/#role-based-access-control-rbac","text":"The operator interacts with the Kubernetes API server using a dedicated service account named cnpg-manager . This service account is typically installed in the operator namespace, commonly cnpg-system . However, the namespace may vary based on the deployment method (see the subsection below). In the same namespace, there is a binding between the cnpg-manager service account and a role. The specific name and type of this role (either Role or ClusterRole ) also depend on the deployment method. This role defines the necessary permissions required by the operator to function correctly. To learn more about these roles, you can use the kubectl describe clusterrole or kubectl describe role commands, depending on the deployment method. Important The above permissions are exclusively reserved for the operator's service account to interact with the Kubernetes API server. They are not directly accessible by the users of the operator that interact only with Cluster , Pooler , Backup , ScheduledBackup , Database , Publication , Subscription , ImageCatalog and ClusterImageCatalog resources. Below we provide some examples and, most importantly, the reasons why CloudNativePG requires full or partial management of standard Kubernetes namespaced or non-namespaced resources. configmaps The operator needs to create and manage default config maps for the Prometheus exporter monitoring metrics. deployments The operator needs to manage a PgBouncer connection pooler using a standard Kubernetes Deployment resource. jobs The operator needs to handle jobs to manage different Cluster 's phases. persistentvolumeclaims The volume where the PGDATA resides is the central element of a PostgreSQL Cluster resource; the operator needs to interact with the selected storage class to dynamically provision the requested volumes, based on the defined scheduling policies. pods The operator needs to manage Cluster 's instances. secrets Unless you provide certificates and passwords to your Cluster objects, the operator adopts the \"convention over configuration\" paradigm by self-provisioning random generated passwords and TLS certificates, and by storing them in secrets. serviceaccounts The operator needs to create a service account that enables the instance manager (which is the PID 1 process of the container that controls the PostgreSQL server) to safely communicate with the Kubernetes API server to coordinate actions and continuously provide a reliable status of the Cluster . services The operator needs to control network access to the PostgreSQL cluster (or the connection pooler) from applications, and properly manage failover/switchover operations in an automated way (by assigning, for example, the correct end-point of a service to the proper primary PostgreSQL instance). validatingwebhookconfigurations and mutatingwebhookconfigurations The operator injects its self-signed webhook CA into both webhook configurations, which are needed to validate and mutate all the resources it manages. For more details, please see the Kubernetes documentation . volumesnapshots The operator needs to generate VolumeSnapshots objects in order to take backups of a PostgreSQL server. VolumeSnapshots are read too in order to validate them before starting the restore process. nodes The operator needs to get the labels for Affinity and AntiAffinity so it can decide in which nodes a pod can be scheduled. This is useful, for example, to prevent the replicas from being scheduled in the same node - especially important if nodes are in different availability zones. This permission is also used to determine whether a node is scheduled, preventing the creation of pods on unscheduled nodes, or triggering a switchover if the primary lives in an unscheduled node.","title":"Role Based Access Control (RBAC)"},{"location":"security/#deployments-and-clusterrole-resources","text":"As mentioned above, each deployment method may have variations in the namespace location of the service account, as well as the names and types of role bindings and respective roles.","title":"Deployments and ClusterRole Resources"},{"location":"security/#via-kubernetes-manifest","text":"When installing CloudNativePG using the Kubernetes manifest, permissions are set to ClusterRoleBinding by default. You can inspect the permissions required by the operator by running: kubectl describe clusterrole cnpg-manager","title":"Via Kubernetes Manifest"},{"location":"security/#via-olm","text":"From a security perspective, the Operator Lifecycle Manager (OLM) provides a more flexible deployment method. It allows you to configure the operator to watch either all namespaces or specific namespaces, enabling more granular permission management. Info OLM allows you to deploy the operator in its own namespace and configure it to watch specific namespaces used for CloudNativePG clusters. This setup helps to contain permissions and restrict access more effectively.","title":"Via OLM"},{"location":"security/#why-are-clusterrole-permissions-needed","text":"The operator currently requires ClusterRole permissions to read nodes and ClusterImageCatalog objects. All other permissions can be namespace-scoped (i.e., Role ) or cluster-wide (i.e., ClusterRole ). Even with these permissions, if someone gains access to the ServiceAccount , they will only have get , list , and watch permissions, which are limited to viewing resources. However, if an unauthorized user gains access to the ServiceAccount , it indicates a more significant security issue. Therefore, it's crucial to prevent users from accessing the operator's ServiceAccount and any other ServiceAccount with elevated permissions.","title":"Why Are ClusterRole Permissions Needed?"},{"location":"security/#calls-to-the-api-server-made-by-the-instance-manager","text":"The instance manager, which is the entry point of the operand container, needs to make some calls to the Kubernetes API server to ensure that the status of some resources is correctly updated and to access the config maps and secrets that are associated with that Postgres cluster. Such calls are performed through a dedicated ServiceAccount created by the operator that shares the same PostgreSQL Cluster resource name. Important The operand can only access a specific and limited subset of resources through the API server. A service account is the recommended way to access the API server from within a Pod . For transparency, the permissions associated with the service account are defined in the roles.go file. For example, to retrieve the permissions of a generic mypg cluster in the myns namespace, you can type the following command: kubectl get role -n myns mypg -o yaml Then verify that the role is bound to the service account: kubectl get rolebinding -n myns mypg -o yaml Important Remember that roles are limited to a given namespace . Below we provide a quick summary of the permissions associated with the service account for generic Kubernetes resources. configmaps The instance manager can only read config maps that are related to the same cluster, such as custom monitoring queries secrets The instance manager can only read secrets that are related to the same cluster, namely: streaming replication user, application user, super user, LDAP authentication user, client CA, server CA, server certificate, backup credentials, custom monitoring queries events The instance manager can create an event for the cluster, informing the API server about a particular aspect of the PostgreSQL instance lifecycle Here instead, we provide the same summary for resources specific to CloudNativePG. clusters The instance manager requires read-only permissions, namely get , list and watch , just for its own Cluster resource clusters/status The instance manager requires to update and patch the status of just its own Cluster resource backups The instance manager requires get and list permissions to read any Backup resource in the namespace. Additionally, it requires the delete permission to clean up the Kubernetes cluster by removing the Backup objects that do not have a counterpart in the object store - typically because of retention policies backups/status The instance manager requires to update and patch the status of any Backup resource in the namespace","title":"Calls to the API server made by the instance manager"},{"location":"security/#pod-and-container-security-contexts","text":"A Security Context defines privilege and access control settings for a pod or container. CloudNativePG does not require privileged mode for container execution. The PostgreSQL containers run as the postgres system user. No component whatsoever requires running as root . Likewise, Volume access does not require privileged mode nor root privileges. Proper permissions must be assigned by the Kubernetes platform and/or administrators. The PostgreSQL containers run with a read-only root filesystem (i.e. no writable layer). The operator manages the setting of security contexts for all pods and containers of a PostgreSQL cluster. The Seccomp Profile to be used for the PostgreSQL containers can be configured with the spec.seccompProfile section of the Cluster resource. If this section is left blank, the containers will use a seccompProfile Type of RuntimeDefault , that is, the container runtime default. The security context of PostgreSQL containers using the default seccompProfile will look like this: securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsNonRoot: true seccompProfile: type: RuntimeDefault","title":"Pod and Container Security Contexts"},{"location":"security/#security-context-constraints","text":"When running in an environment that is utilizing Security Context Constraints (SCC) the operator does not explicitly set the security context of the PostgreSQL cluster pods, but rather allows the pods to inherit the restricted Security Context Constraints that are already defined.","title":"Security Context Constraints"},{"location":"security/#restricting-pod-access-using-apparmor","text":"You can assign an AppArmor profile to the postgres , initdb , join , full-recovery and bootstrap-controller containers inside every Cluster pod through the container.apparmor.security.beta.kubernetes.io annotation. Example of cluster annotations kind: Cluster metadata: name: cluster-apparmor annotations: container.apparmor.security.beta.kubernetes.io/postgres: runtime/default container.apparmor.security.beta.kubernetes.io/initdb: runtime/default container.apparmor.security.beta.kubernetes.io/join: runtime/default Warning Using this kind of annotations can result in your cluster to stop working. If this is the case, the annotation can be safely removed from the Cluster . The AppArmor configuration must be at Kubernetes node level, meaning that the underlying operating system must have this option enable and properly configured. In case this is not the situation, and the annotations were added at the Cluster creation time, pods will not be created. On the other hand, if you add the annotations after the Cluster was created the pods in the cluster will be unable to start and you will get an error like this: metadata.annotations[container.apparmor.security.beta.kubernetes.io/postgres]: Forbidden: may not add AppArmor annotations] In such cases, please refer to your Kubernetes administrators and ask for the proper AppArmor profile to use.","title":"Restricting Pod access using AppArmor"},{"location":"security/#network-policies","text":"The pods created by the Cluster resource can be controlled by Kubernetes network policies to enable/disable inbound and outbound network access at IP and TCP level. You can find more information in the networking document . Important The operator needs to communicate to each instance on TCP port 8000 to get information about the status of the PostgreSQL server. Please make sure you keep this in mind in case you add any network policy, and refer to the \"Exposed Ports\" section below for a list of ports used by CloudNativePG for finer control. Network policies are beyond the scope of this document. Please refer to the \"Network policies\" section of the Kubernetes documentation for further information.","title":"Network Policies"},{"location":"security/#exposed-ports","text":"CloudNativePG exposes ports at operator, instance manager and operand levels, as listed in the table below: System Port number Exposing Name TLS Authentication operator 9443 webhook server webhook-server Yes Yes operator 8080 metrics metrics No No instance manager 9187 metrics metrics Optional No instance manager 8000 status status Yes No operand 5432 PostgreSQL instance postgresql Optional Yes","title":"Exposed Ports"},{"location":"security/#postgresql","text":"The current implementation of CloudNativePG automatically creates passwords and .pgpass files for the database owner and, only if requested by setting enableSuperuserAccess to true , for the postgres superuser. Warning enableSuperuserAccess is set to false by default to improve the security-by-default posture of the operator, fostering a microservice approach where changes to PostgreSQL are performed in a declarative way through the spec of the Cluster resource, while providing developers with full powers inside the database through the database owner user. As far as password encryption is concerned, CloudNativePG follows the default behavior of PostgreSQL: starting from PostgreSQL 14, password_encryption is by default set to scram-sha-256 , while on earlier versions it is set to md5 . Important Please refer to the \"Password authentication\" section in the PostgreSQL documentation for details. Note The operator supports toggling the enableSuperuserAccess option. When you disable it on a running cluster, the operator will ignore the content of the secret, remove it (if previously generated by the operator) and set the password of the postgres user to NULL (de facto disabling remote access through password authentication). See the \"Secrets\" section in the \"Connecting from an application\" page for more information. You can use those files to configure application access to the database. By default, every replica is automatically configured to connect in physical async streaming replication with the current primary instance, with a special user called streaming_replica . The connection between nodes is encrypted and authentication is via TLS client certificates (please refer to the \"Client TLS/SSL Connections\" page for details). By default, the operator requires TLS v1.3 connections. Currently, the operator allows administrators to add pg_hba.conf lines directly in the manifest as part of the pg_hba section of the postgresql configuration. The lines defined in the manifest are added to a default pg_hba.conf . For further detail on how pg_hba.conf is managed by the operator, see the \"PostgreSQL Configuration\" page of the documentation. The administrator can also customize the content of the pg_ident.conf file that by default only maps the local postgres user to the postgres user in the database. For further detail on how pg_ident.conf is managed by the operator, see the \"PostgreSQL Configuration\" page of the documentation. Important Examples assume that the Kubernetes cluster runs in a private and secure network.","title":"PostgreSQL"},{"location":"security/#storage","text":"CloudNativePG delegates encryption at rest to the underlying storage class. For data protection in production environments, we highly recommend that you choose a storage class that supports encryption at rest.","title":"Storage"},{"location":"service_management/","text":"Service Management A PostgreSQL cluster should only be accessed via standard Kubernetes network services directly managed by CloudNativePG. For more details, refer to the \"Service\" page of the Kubernetes Documentation . CloudNativePG defines three types of services for each Cluster resource: rw : Points to the primary instance of the cluster (read/write). ro : Points to the replicas, where available (read-only). r : Points to any PostgreSQL instance in the cluster (read). By default, CloudNativePG creates all the above services for a Cluster resource, with the following conventions: The name of the service follows this format: <CLUSTER_NAME>-<SERVICE_NAME> . All services are of type ClusterIP . Important Default service names are reserved for CloudNativePG usage. While this setup covers most use cases for accessing PostgreSQL within the same Kubernetes cluster, CloudNativePG offers flexibility to: Disable the creation of the ro and/or r default services. Define your own services using the standard Service API provided by Kubernetes. You can mix these two options. A common scenario arises when using CloudNativePG in database-as-a-service (DBaaS) contexts, where access to the database from outside the Kubernetes cluster is required. In such cases, you can create your own service of type LoadBalancer , if available in your Kubernetes environment. Disabling Default Services You can disable any or all of the ro and r default services through the managed.services.disabledDefaultServices option . Important The rw service is essential and cannot be disabled because CloudNativePG relies on it to ensure PostgreSQL replication. For example, if you want to remove both the ro (read-only) and r (read) services, you can use this configuration: # <snip> managed: services: disabledDefaultServices: [\"ro\", \"r\"] Adding Your Own Services Important When defining your own services, you cannot use any of the default reserved service names that follow the convention <CLUSTER_NAME>-<SERVICE_NAME> . It is your responsibility to pick a unique name for the service in the Kubernetes namespace. You can define a list of additional services through the managed.services.additional stanza by specifying the service type (e.g., rw ) in the selectorType field and optionally the updateStrategy . The serviceTemplate field gives you access to the standard Kubernetes API for the network Service resource, allowing you to define both the metadata and the spec sections as you like. You must provide a name to the service and avoid defining the selector field, as it is managed by the operator. Warning Service templates give you unlimited possibilities in terms of configuring network access to your PostgreSQL database. This translates into greater responsibility on your end to ensure that services work as expected. CloudNativePG has no control over the service configuration, except honoring the selector. The updateStrategy field allows you to control how the operator updates a service definition. By default, the operator uses the patch strategy, applying changes directly to the service. Alternatively, the replace strategy deletes the existing service and recreates it from the template. Warning The replace strategy will cause a service disruption with every change. However, it may be necessary for modifying certain parameters that can only be set during service creation. For example, if you want to have a single LoadBalancer service for your PostgreSQL database primary, you can use the following excerpt: # <snip> managed: services: additional: - selectorType: rw serviceTemplate: metadata: name: \"mydb-lb\" labels: test-label: \"true\" annotations: test-annotation: \"true\" spec: type: LoadBalancer The above example also shows how to set metadata such as annotations and labels for the created service. About Exposing Postgres Services There are primarily three use cases for exposing your PostgreSQL service outside your Kubernetes cluster: Temporarily, for testing. Permanently, for DBaaS purposes . Prolonged period/permanently, for legacy applications that cannot be easily or sustainably containerized and need to reside in a virtual machine or physical machine outside Kubernetes. This use case is very similar to DBaaS. Be aware that allowing access to a database from the public network could expose your database to potential attacks from malicious users. Warning Ensure you secure your database before granting external access, or make sure your Kubernetes cluster is only reachable from a private network.","title":"Service Management"},{"location":"service_management/#service-management","text":"A PostgreSQL cluster should only be accessed via standard Kubernetes network services directly managed by CloudNativePG. For more details, refer to the \"Service\" page of the Kubernetes Documentation . CloudNativePG defines three types of services for each Cluster resource: rw : Points to the primary instance of the cluster (read/write). ro : Points to the replicas, where available (read-only). r : Points to any PostgreSQL instance in the cluster (read). By default, CloudNativePG creates all the above services for a Cluster resource, with the following conventions: The name of the service follows this format: <CLUSTER_NAME>-<SERVICE_NAME> . All services are of type ClusterIP . Important Default service names are reserved for CloudNativePG usage. While this setup covers most use cases for accessing PostgreSQL within the same Kubernetes cluster, CloudNativePG offers flexibility to: Disable the creation of the ro and/or r default services. Define your own services using the standard Service API provided by Kubernetes. You can mix these two options. A common scenario arises when using CloudNativePG in database-as-a-service (DBaaS) contexts, where access to the database from outside the Kubernetes cluster is required. In such cases, you can create your own service of type LoadBalancer , if available in your Kubernetes environment.","title":"Service Management"},{"location":"service_management/#disabling-default-services","text":"You can disable any or all of the ro and r default services through the managed.services.disabledDefaultServices option . Important The rw service is essential and cannot be disabled because CloudNativePG relies on it to ensure PostgreSQL replication. For example, if you want to remove both the ro (read-only) and r (read) services, you can use this configuration: # <snip> managed: services: disabledDefaultServices: [\"ro\", \"r\"]","title":"Disabling Default Services"},{"location":"service_management/#adding-your-own-services","text":"Important When defining your own services, you cannot use any of the default reserved service names that follow the convention <CLUSTER_NAME>-<SERVICE_NAME> . It is your responsibility to pick a unique name for the service in the Kubernetes namespace. You can define a list of additional services through the managed.services.additional stanza by specifying the service type (e.g., rw ) in the selectorType field and optionally the updateStrategy . The serviceTemplate field gives you access to the standard Kubernetes API for the network Service resource, allowing you to define both the metadata and the spec sections as you like. You must provide a name to the service and avoid defining the selector field, as it is managed by the operator. Warning Service templates give you unlimited possibilities in terms of configuring network access to your PostgreSQL database. This translates into greater responsibility on your end to ensure that services work as expected. CloudNativePG has no control over the service configuration, except honoring the selector. The updateStrategy field allows you to control how the operator updates a service definition. By default, the operator uses the patch strategy, applying changes directly to the service. Alternatively, the replace strategy deletes the existing service and recreates it from the template. Warning The replace strategy will cause a service disruption with every change. However, it may be necessary for modifying certain parameters that can only be set during service creation. For example, if you want to have a single LoadBalancer service for your PostgreSQL database primary, you can use the following excerpt: # <snip> managed: services: additional: - selectorType: rw serviceTemplate: metadata: name: \"mydb-lb\" labels: test-label: \"true\" annotations: test-annotation: \"true\" spec: type: LoadBalancer The above example also shows how to set metadata such as annotations and labels for the created service.","title":"Adding Your Own Services"},{"location":"service_management/#about-exposing-postgres-services","text":"There are primarily three use cases for exposing your PostgreSQL service outside your Kubernetes cluster: Temporarily, for testing. Permanently, for DBaaS purposes . Prolonged period/permanently, for legacy applications that cannot be easily or sustainably containerized and need to reside in a virtual machine or physical machine outside Kubernetes. This use case is very similar to DBaaS. Be aware that allowing access to a database from the public network could expose your database to potential attacks from malicious users. Warning Ensure you secure your database before granting external access, or make sure your Kubernetes cluster is only reachable from a private network.","title":"About Exposing Postgres Services"},{"location":"ssl_connections/","text":"Client TLS/SSL connections Certificates See Certificates for more details on how CloudNativePG supports TLS certificates. The CloudNativePG operator was designed to work with TLS/SSL for both encryption in transit and authentication on the server and client sides. Clusters created using the CNPG operator come with a certification authority (CA) to create and sign TLS client certificates. Using the cnpg plugin for kubectl, you can issue a new TLS client certificate for authenticating a user instead of using passwords. These instructions for authenticating using TLS/SSL certificates assume you installed a cluster using the cluster-example-pg-hba.yaml manifest. According to the convention-over-configuration paradigm, that file creates an app database that's owned by a user called app. (You can change this convention by way of the initdb configuration in the bootstrap section.) Issuing a new certificate About CNPG plugin for kubectl See the Certificates in the CloudNativePG plugin content for details on how to use the plugin for kubectl. You can create a certificate for the app user in the cluster-example PostgreSQL cluster as follows: kubectl cnpg certificate cluster-app \\ --cnpg-cluster cluster-example \\ --cnpg-user app You can now verify the certificate: kubectl get secret cluster-app \\ -o jsonpath=\"{.data['tls\\.crt']}\" \\ | base64 -d | openssl x509 -text -noout \\ | head -n 11 Output: Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e1:72:8a:39:9f:ce:51:19:9d:21:ff:1e:4b:24:5d Signature Algorithm: ecdsa-with-SHA256 Issuer: OU = default, CN = cluster-example Validity Not Before: Mar 22 10:22:14 2021 GMT Not After : Mar 22 10:22:14 2022 GMT Subject: CN = app As you can see, TLS client certificates by default are created with 90 days of validity, and with a simple CN that corresponds to the username in PostgreSQL. You can specify the validity and threshold values using the EXPIRE_CHECK_THRESHOLD and CERTIFICATE_DURATION parameters. This is necessary to leverage the cert authentication method for hostssl entries in pg_hba.conf . Testing the connection via a TLS certificate Next, test this client certificate by configuring a demo client application that connects to your CloudNativePG cluster. The following manifest, called cert-test.yaml , creates a demo pod with a test application in the same namespace where your database cluster is running: apiVersion: apps/v1 kind: Deployment metadata: name: cert-test spec: replicas: 1 selector: matchLabels: app: webtest template: metadata: labels: app: webtest spec: containers: - image: ghcr.io/cloudnative-pg/webtest:1.7.0 name: cert-test volumeMounts: - name: secret-volume-root-ca mountPath: /etc/secrets/ca - name: secret-volume-app mountPath: /etc/secrets/app ports: - containerPort: 8080 env: - name: DATABASE_URL value: > sslkey=/etc/secrets/app/tls.key sslcert=/etc/secrets/app/tls.crt sslrootcert=/etc/secrets/ca/ca.crt host=cluster-example-rw.default.svc dbname=app user=app sslmode=verify-full - name: SQL_QUERY value: SELECT 1 readinessProbe: httpGet: port: 8080 path: /tx volumes: - name: secret-volume-root-ca secret: secretName: cluster-example-ca defaultMode: 0600 - name: secret-volume-app secret: secretName: cluster-app defaultMode: 0600 This pod mounts secrets managed by the CloudNativePG operator, including: sslcert \u2013 The TLS client public certificate. sslkey \u2013 The TLS client certificate private key. sslrootcert \u2013 The TLS CA certificate that signed the certificate on the server to use to verify the identity of the instances. They're used to create the default resources that psql (and other libpq-based applications, like pgbench) requires to establish a TLS-encrypted connection to the Postgres database. By default, psql searches for certificates in the ~/.postgresql directory of the current user, but you can use the sslkey , sslcert , and sslrootcert options to point libpq to the actual location of the cryptographic material. The content of these files is gathered from the secrets that were previously created by using the cnpg plugin for kubectl. Deploy the application: kubectl create -f cert-test.yaml Then use the created pod as the PostgreSQL client to validate the SSL connection and authentication using the TLS certificates you just created. A readiness probe was configured to ensure that the application is ready when the database server can be reached. You can verify that the connection works. To do so, execute an interactive bash inside the pod's container to run psql using the necessary options. The PostgreSQL server is exposed through the read-write Kubernetes service. Point the psql command to connect to this service: kubectl exec -it cert-test -- bash -c \"psql 'sslkey=/etc/secrets/app/tls.key sslcert=/etc/secrets/app/tls.crt sslrootcert=/etc/secrets/ca/ca.crt host=cluster-example-rw.default.svc dbname=app user=app sslmode=verify-full' -c 'select version();'\" Output: version -------------------------------------------------------------------------------------- ------------------ PostgreSQL 17.5 on x86_64-pc-linux-gnu, compiled by gcc (GCC) 8.3.1 20191121 (Red Hat 8.3.1-5), 64-bit (1 row) About TLS protocol versions By default, the operator sets both ssl_min_protocol_version and ssl_max_protocol_version to TLSv1.3 . This assumes that the PostgreSQL operand images include an OpenSSL library that supports the TLSv1.3 version. If not, or if your client applications need a lower version number, you need to manually configure it in the PostgreSQL configuration as any other Postgres GUC.","title":"Client TLS/SSL connections"},{"location":"ssl_connections/#client-tlsssl-connections","text":"Certificates See Certificates for more details on how CloudNativePG supports TLS certificates. The CloudNativePG operator was designed to work with TLS/SSL for both encryption in transit and authentication on the server and client sides. Clusters created using the CNPG operator come with a certification authority (CA) to create and sign TLS client certificates. Using the cnpg plugin for kubectl, you can issue a new TLS client certificate for authenticating a user instead of using passwords. These instructions for authenticating using TLS/SSL certificates assume you installed a cluster using the cluster-example-pg-hba.yaml manifest. According to the convention-over-configuration paradigm, that file creates an app database that's owned by a user called app. (You can change this convention by way of the initdb configuration in the bootstrap section.)","title":"Client TLS/SSL connections"},{"location":"ssl_connections/#issuing-a-new-certificate","text":"About CNPG plugin for kubectl See the Certificates in the CloudNativePG plugin content for details on how to use the plugin for kubectl. You can create a certificate for the app user in the cluster-example PostgreSQL cluster as follows: kubectl cnpg certificate cluster-app \\ --cnpg-cluster cluster-example \\ --cnpg-user app You can now verify the certificate: kubectl get secret cluster-app \\ -o jsonpath=\"{.data['tls\\.crt']}\" \\ | base64 -d | openssl x509 -text -noout \\ | head -n 11 Output: Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e1:72:8a:39:9f:ce:51:19:9d:21:ff:1e:4b:24:5d Signature Algorithm: ecdsa-with-SHA256 Issuer: OU = default, CN = cluster-example Validity Not Before: Mar 22 10:22:14 2021 GMT Not After : Mar 22 10:22:14 2022 GMT Subject: CN = app As you can see, TLS client certificates by default are created with 90 days of validity, and with a simple CN that corresponds to the username in PostgreSQL. You can specify the validity and threshold values using the EXPIRE_CHECK_THRESHOLD and CERTIFICATE_DURATION parameters. This is necessary to leverage the cert authentication method for hostssl entries in pg_hba.conf .","title":"Issuing a new certificate"},{"location":"ssl_connections/#testing-the-connection-via-a-tls-certificate","text":"Next, test this client certificate by configuring a demo client application that connects to your CloudNativePG cluster. The following manifest, called cert-test.yaml , creates a demo pod with a test application in the same namespace where your database cluster is running: apiVersion: apps/v1 kind: Deployment metadata: name: cert-test spec: replicas: 1 selector: matchLabels: app: webtest template: metadata: labels: app: webtest spec: containers: - image: ghcr.io/cloudnative-pg/webtest:1.7.0 name: cert-test volumeMounts: - name: secret-volume-root-ca mountPath: /etc/secrets/ca - name: secret-volume-app mountPath: /etc/secrets/app ports: - containerPort: 8080 env: - name: DATABASE_URL value: > sslkey=/etc/secrets/app/tls.key sslcert=/etc/secrets/app/tls.crt sslrootcert=/etc/secrets/ca/ca.crt host=cluster-example-rw.default.svc dbname=app user=app sslmode=verify-full - name: SQL_QUERY value: SELECT 1 readinessProbe: httpGet: port: 8080 path: /tx volumes: - name: secret-volume-root-ca secret: secretName: cluster-example-ca defaultMode: 0600 - name: secret-volume-app secret: secretName: cluster-app defaultMode: 0600 This pod mounts secrets managed by the CloudNativePG operator, including: sslcert \u2013 The TLS client public certificate. sslkey \u2013 The TLS client certificate private key. sslrootcert \u2013 The TLS CA certificate that signed the certificate on the server to use to verify the identity of the instances. They're used to create the default resources that psql (and other libpq-based applications, like pgbench) requires to establish a TLS-encrypted connection to the Postgres database. By default, psql searches for certificates in the ~/.postgresql directory of the current user, but you can use the sslkey , sslcert , and sslrootcert options to point libpq to the actual location of the cryptographic material. The content of these files is gathered from the secrets that were previously created by using the cnpg plugin for kubectl. Deploy the application: kubectl create -f cert-test.yaml Then use the created pod as the PostgreSQL client to validate the SSL connection and authentication using the TLS certificates you just created. A readiness probe was configured to ensure that the application is ready when the database server can be reached. You can verify that the connection works. To do so, execute an interactive bash inside the pod's container to run psql using the necessary options. The PostgreSQL server is exposed through the read-write Kubernetes service. Point the psql command to connect to this service: kubectl exec -it cert-test -- bash -c \"psql 'sslkey=/etc/secrets/app/tls.key sslcert=/etc/secrets/app/tls.crt sslrootcert=/etc/secrets/ca/ca.crt host=cluster-example-rw.default.svc dbname=app user=app sslmode=verify-full' -c 'select version();'\" Output: version -------------------------------------------------------------------------------------- ------------------ PostgreSQL 17.5 on x86_64-pc-linux-gnu, compiled by gcc (GCC) 8.3.1 20191121 (Red Hat 8.3.1-5), 64-bit (1 row)","title":"Testing the connection via a TLS certificate"},{"location":"ssl_connections/#about-tls-protocol-versions","text":"By default, the operator sets both ssl_min_protocol_version and ssl_max_protocol_version to TLSv1.3 . This assumes that the PostgreSQL operand images include an OpenSSL library that supports the TLSv1.3 version. If not, or if your client applications need a lower version number, you need to manually configure it in the PostgreSQL configuration as any other Postgres GUC.","title":"About TLS protocol versions"},{"location":"storage/","text":"Storage Storage is the most critical component in a database workload. Storage must always be available, scale, perform well, and guarantee consistency and durability. The same expectations and requirements that apply to traditional environments, such as virtual machines and bare metal, are also valid in container contexts managed by Kubernetes. Important When it comes to dynamically provisioned storage, Kubernetes has its own specifics. These include storage classes , persistent volumes , and Persistent Volume Claims (PVCs) . You need to own these concepts, on top of all the valuable knowledge you've built over the years in terms of storage for database workloads on VMs and physical servers. There are two primary methods of access to storage: Network \u2013 Either directly or indirectly. (Think of an NFS volume locally mounted on a host running Kubernetes.) Local \u2013 Directly attached to the node where a pod is running. This also includes directly attached disks on bare metal installations of Kubernetes. Network storage, which is the most common usage pattern in Kubernetes, presents the same issues of throughput and latency that you can experience in a traditional environment. These issues can be accentuated in a shared environment, where I/O contention with several applications increases the variability of performance results. Local storage enables shared-nothing architectures, which is more suitable for high transactional and very large database (VLDB) workloads, as it guarantees higher and more predictable performance. Warning Before you deploy a PostgreSQL cluster with CloudNativePG, ensure that the storage you're using is recommended for database workloads. We recommend clearly setting performance expectations by first benchmarking the storage using tools such as fio and then the database using pgbench . Info CloudNativePG doesn't use StatefulSet for managing data persistence. Rather, it manages PVCs directly. If you want to know more, see Custom pod controller . Backup and recovery Since CloudNativePG supports volume snapshots for both backup and recovery, we recommend that you also consider this aspect when you choose your storage solution, especially if you manage very large databases. Important See the Kubernetes documentation for a list of all the supported container storage interface (CSI) drivers that provide snapshot capabilities. Benchmarking CloudNativePG Before deploying the database in production, we recommend that you benchmark CloudNativePG in a controlled Kubernetes environment. Follow the guidelines in Benchmarking . Briefly, we recommend operating at two levels: Measuring the performance of the underlying storage using fio, with relevant metrics for database workloads such as throughput for sequential reads, sequential writes, random reads, and random writes Measuring the performance of the database using pgbench, the default benchmarking tool distributed with PostgreSQL Important You must measure both the storage and database performance before putting the database into production. These results are extremely valuable not just in the planning phase (for example, capacity planning). They are also valuable in the production lifecycle, particularly in emergency situations when you don't have time to run this kind of test. Databases change and evolve over time, and so does the distribution of data, potentially affecting performance. Knowing the theoretical maximum throughput of sequential reads or writes is extremely useful in those situations. This is true especially in shared-nothing contexts, where results don't vary due to the influence of external workloads. Know your system: benchmark it. Encryption at rest Encryption at rest is possible with CloudNativePG. The operator delegates that to the underlying storage class. See the storage class for information about this important security feature. Persistent Volume Claim (PVC) The operator creates a PVC for each PostgreSQL instance, with the goal of storing the PGDATA . It then mounts it into each pod. Additionally, it supports creating clusters with: A separate PVC on which to store PostgreSQL WAL, as explained in Volume for WAL Additional separate volumes reserved for PostgreSQL tablespaces, as explained in Tablespaces In CloudNativePG, the volumes attached to a single PostgreSQL instance are defined as a PVC group . Configuration via a storage class Important CloudNativePG was designed to work interchangeably with all storage classes. As usual, we recommend properly benchmarking the storage class in a controlled environment before deploying to production. The easiest way to configure the storage for a PostgreSQL class is to request storage of a certain size, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-storage-class spec: instances: 3 storage: size: 1Gi Using the previous configuration, the generated PVCs are satisfied by the default storage class. If the target Kubernetes cluster has no default storage class, or even if you need your PVCs to be satisfied by a known storage class, you can set it into the custom resource: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-storage-class spec: instances: 3 storage: storageClass: standard size: 1Gi Configuration via a PVC template To further customize the generated PVCs, you can provide a PVC template inside the custom resource, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-pvc-template spec: instances: 3 storage: pvcTemplate: accessModes: - ReadWriteOnce resources: requests: storage: 1Gi storageClassName: standard volumeMode: Filesystem Volume for WAL By default, PostgreSQL stores all its data in the so-called PGDATA (a directory). One of the core directories inside PGDATA is pg_wal , which contains the log of transactional changes that occurred in the database, in the form of segment files. ( pg_wal is historically known as pg_xlog in PostgreSQL.) Info Normally, each segment is 16MB in size, but you can configure the size using the walSegmentSize option. This option is applied at cluster initialization time, as described in Bootstrap an empty cluster . In most cases, having pg_wal on the same volume where PGDATA resides is fine. However, having WALs stored in a separate volume has a few benefits: I/O performance \u2013 By storing WAL files on different storage from PGDATA , PostgreSQL can exploit parallel I/O for WAL operations (normally sequential writes) and for data files (tables and indexes for example), thus improving vertical scalability. More reliability \u2013 By reserving dedicated disk space to WAL files, you can be sure that exhausting space on the PGDATA volume never interferes with WAL writing. This behavior ensures that your PostgreSQL primary is correctly shut down. Finer control \u2013 You can define the amount of space dedicated to both PGDATA and pg_wal , fine tune WAL configuration and checkpoints, and even use a different storage class for cost optimization. Better I/O monitoring \u2013 You can constantly monitor the load and disk usage on both PGDATA and pg_wal . You can also set alerts that notify you in case, for example, PGDATA requires resizing. Write-Ahead Log (WAL) See Reliability and the Write-Ahead Log in the PostgreSQL documentation for more information. You can add a separate volume for WAL using the .spec.walStorage option. It follows the same rules described for the storage field and provisions a dedicated PVC. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: separate-pgwal-volume spec: instances: 3 storage: size: 1Gi walStorage: size: 1Gi Important Removing walStorage isn't supported. Once added, a separate volume for WALs can't be removed from an existing Postgres cluster. Volumes for tablespaces CloudNativePG supports declarative tablespaces. You can add one or more volumes, each dedicated to a single PostgreSQL tablespace. See Tablespaces for details. Volume expansion Kubernetes exposes an API allowing expanding PVCs that's enabled by default. However, it needs to be supported by the underlying StorageClass . To check if a certain StorageClass supports volume expansion, you can read the allowVolumeExpansion field for your storage class: $ kubectl get storageclass -o jsonpath='{$.allowVolumeExpansion}' premium-storage true Using the volume expansion Kubernetes feature Given the storage class supports volume expansion, you can change the size requirement of the Cluster , and the operator applies the change to every PVC. If the StorageClass supports online volume resizing , the change is immediately applied to the pods. If the underlying storage class doesn't support that, you must delete the pod to trigger the resize. The best way to proceed is to delete one pod at a time, starting from replicas and waiting for each pod to be back up. Re-creating storage If the storage class doesn't support volume expansion, you can still regenerate your cluster on different PVCs. Allocate new PVCs with increased storage and then move the database there. This operation is feasible only when the cluster contains more than one node. While you do that, you need to prevent the operator from changing the existing PVC by disabling the resizeInUseVolumes flag, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-pvc-template spec: instances: 3 storage: storageClass: standard size: 1Gi resizeInUseVolumes: False To move the entire cluster to a different storage area, you need to re-create all the PVCs and all the pods. Suppose you have a cluster with three replicas, like in the following example: $ kubectl get pods NAME READY STATUS RESTARTS AGE cluster-example-1 1/1 Running 0 2m37s cluster-example-2 1/1 Running 0 2m22s cluster-example-3 1/1 Running 0 2m10s To re-create the cluster using different PVCs, you can edit the cluster definition to disable resizeInUseVolumes . Then re-create every instance in a different PVC. For example, re-create the storage for cluster-example-3 : $ kubectl delete pvc/cluster-example-3 pod/cluster-example-3 Important If you created a dedicated WAL volume, both PVCs must be deleted during this process. The same procedure applies if you want to regenerate the WAL volume PVC. You can do this by also disabling resizeInUseVolumes for the .spec.walStorage section. For example, if a PVC dedicated to WAL storage is present: $ kubectl delete pvc/cluster-example-3 pvc/cluster-example-3-wal pod/cluster-example-3 Having done that, the operator orchestrates creating another replica with a resized PVC: $ kubectl get pods NAME READY STATUS RESTARTS AGE cluster-example-1 1/1 Running 0 5m58s cluster-example-2 1/1 Running 0 5m43s cluster-example-4-join-v2 0/1 Completed 0 17s cluster-example-4 1/1 Running 0 10s Static provisioning of persistent volumes CloudNativePG was designed to work with dynamic volume provisioning. This capability allows storage volumes to be created on demand when requested by users by way of storage classes and PVC templates. See Re-creating storage . However, in some cases, Kubernetes administrators prefer to manually create storage volumes and then create the related PersistentVolume objects for their representation inside the Kubernetes cluster. This is also known as pre-provisioning of volumes. Important We recommend that you avoid pre-provisioning volumes, as it has an effect on the high availability and self-healing capabilities of the operator. It breaks the fully declarative model on which CloudNativePG was built. To use a pre-provisioned volume in CloudNativePG: Manually create the volume outside Kubernetes. Create the PersistentVolume object to match this volume using the correct parameters as required by the actual CSI driver (that is, volumeHandle , fsType , storageClassName , and so on). Create the Postgres Cluster using, for each storage section, a coherent pvcTemplate section that can help Kubernetes match the PersistentVolume and enable CloudNativePG to create the needed PersistentVolumeClaim . Warning With static provisioning, it's your responsibility to ensure that Postgres pods can be correctly scheduled by Kubernetes where a pre-provisioned volume exists. (The scheduling configuration is based on the affinity rules of your cluster.) Make sure you check for any pods stuck in Pending after you deploy the cluster. If the condition persists, investigate why it's happening. Block storage considerations (Ceph/Longhorn) Most block storage solutions in Kubernetes, such as Longhorn and Ceph, recommend having multiple replicas of a volume to enhance resiliency. This approach works well for workloads that lack built-in resiliency. However, CloudNativePG integrates this resiliency directly into the Postgres Cluster through the number of instances and the persistent volumes attached to them, as explained in \"Synchronizing the state\" . As a result, defining additional replicas at the storage level can lead to write amplification, unnecessarily increasing disk I/O and space usage. For CloudNativePG usage, consider reducing the number of replicas at the block storage level to one, while ensuring that no single point of failure (SPoF) exists at the storage level for the entire Cluster resource. This typically means ensuring that a single storage host\u2014and ultimately, a physical disk\u2014does not host blocks from different instances of the same Cluster , in alignment with the broader shared-nothing architecture principle. In Longhorn, you can mitigate this risk by enabling strict-local data locality when creating a custom storage class. Detailed instructions for creating a volume with strict-local data locality are available here . This setting ensures that a pod\u2019s data volume resides on the same node as the pod itself. Additionally, your Postgres Cluster should have pod anti-affinity rules in place to ensure that the operator deploys pods across different nodes, allowing Longhorn to place the data volumes on the corresponding hosts. If needed, you can manually relocate volumes in Longhorn by temporarily setting the volume replica count to 2, reducing it afterward, and then removing the old replica. If a host becomes corrupted, you can use the cnpg plugin to destroy the affected instance. CloudNativePG will then recreate the instance on another host and replicate the data. In Ceph, this can be configured through CRUSH rules. The documentation for configuring CRUSH rules is available here . These rules aim to ensure one volume per pod per node. You can also relocate volumes by importing them into a different pool.","title":"Storage"},{"location":"storage/#storage","text":"Storage is the most critical component in a database workload. Storage must always be available, scale, perform well, and guarantee consistency and durability. The same expectations and requirements that apply to traditional environments, such as virtual machines and bare metal, are also valid in container contexts managed by Kubernetes. Important When it comes to dynamically provisioned storage, Kubernetes has its own specifics. These include storage classes , persistent volumes , and Persistent Volume Claims (PVCs) . You need to own these concepts, on top of all the valuable knowledge you've built over the years in terms of storage for database workloads on VMs and physical servers. There are two primary methods of access to storage: Network \u2013 Either directly or indirectly. (Think of an NFS volume locally mounted on a host running Kubernetes.) Local \u2013 Directly attached to the node where a pod is running. This also includes directly attached disks on bare metal installations of Kubernetes. Network storage, which is the most common usage pattern in Kubernetes, presents the same issues of throughput and latency that you can experience in a traditional environment. These issues can be accentuated in a shared environment, where I/O contention with several applications increases the variability of performance results. Local storage enables shared-nothing architectures, which is more suitable for high transactional and very large database (VLDB) workloads, as it guarantees higher and more predictable performance. Warning Before you deploy a PostgreSQL cluster with CloudNativePG, ensure that the storage you're using is recommended for database workloads. We recommend clearly setting performance expectations by first benchmarking the storage using tools such as fio and then the database using pgbench . Info CloudNativePG doesn't use StatefulSet for managing data persistence. Rather, it manages PVCs directly. If you want to know more, see Custom pod controller .","title":"Storage"},{"location":"storage/#backup-and-recovery","text":"Since CloudNativePG supports volume snapshots for both backup and recovery, we recommend that you also consider this aspect when you choose your storage solution, especially if you manage very large databases. Important See the Kubernetes documentation for a list of all the supported container storage interface (CSI) drivers that provide snapshot capabilities.","title":"Backup and recovery"},{"location":"storage/#benchmarking-cloudnativepg","text":"Before deploying the database in production, we recommend that you benchmark CloudNativePG in a controlled Kubernetes environment. Follow the guidelines in Benchmarking . Briefly, we recommend operating at two levels: Measuring the performance of the underlying storage using fio, with relevant metrics for database workloads such as throughput for sequential reads, sequential writes, random reads, and random writes Measuring the performance of the database using pgbench, the default benchmarking tool distributed with PostgreSQL Important You must measure both the storage and database performance before putting the database into production. These results are extremely valuable not just in the planning phase (for example, capacity planning). They are also valuable in the production lifecycle, particularly in emergency situations when you don't have time to run this kind of test. Databases change and evolve over time, and so does the distribution of data, potentially affecting performance. Knowing the theoretical maximum throughput of sequential reads or writes is extremely useful in those situations. This is true especially in shared-nothing contexts, where results don't vary due to the influence of external workloads. Know your system: benchmark it.","title":"Benchmarking CloudNativePG"},{"location":"storage/#encryption-at-rest","text":"Encryption at rest is possible with CloudNativePG. The operator delegates that to the underlying storage class. See the storage class for information about this important security feature.","title":"Encryption at rest"},{"location":"storage/#persistent-volume-claim-pvc","text":"The operator creates a PVC for each PostgreSQL instance, with the goal of storing the PGDATA . It then mounts it into each pod. Additionally, it supports creating clusters with: A separate PVC on which to store PostgreSQL WAL, as explained in Volume for WAL Additional separate volumes reserved for PostgreSQL tablespaces, as explained in Tablespaces In CloudNativePG, the volumes attached to a single PostgreSQL instance are defined as a PVC group .","title":"Persistent Volume Claim (PVC)"},{"location":"storage/#configuration-via-a-storage-class","text":"Important CloudNativePG was designed to work interchangeably with all storage classes. As usual, we recommend properly benchmarking the storage class in a controlled environment before deploying to production. The easiest way to configure the storage for a PostgreSQL class is to request storage of a certain size, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-storage-class spec: instances: 3 storage: size: 1Gi Using the previous configuration, the generated PVCs are satisfied by the default storage class. If the target Kubernetes cluster has no default storage class, or even if you need your PVCs to be satisfied by a known storage class, you can set it into the custom resource: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-storage-class spec: instances: 3 storage: storageClass: standard size: 1Gi","title":"Configuration via a storage class"},{"location":"storage/#configuration-via-a-pvc-template","text":"To further customize the generated PVCs, you can provide a PVC template inside the custom resource, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-pvc-template spec: instances: 3 storage: pvcTemplate: accessModes: - ReadWriteOnce resources: requests: storage: 1Gi storageClassName: standard volumeMode: Filesystem","title":"Configuration via a PVC template"},{"location":"storage/#volume-for-wal","text":"By default, PostgreSQL stores all its data in the so-called PGDATA (a directory). One of the core directories inside PGDATA is pg_wal , which contains the log of transactional changes that occurred in the database, in the form of segment files. ( pg_wal is historically known as pg_xlog in PostgreSQL.) Info Normally, each segment is 16MB in size, but you can configure the size using the walSegmentSize option. This option is applied at cluster initialization time, as described in Bootstrap an empty cluster . In most cases, having pg_wal on the same volume where PGDATA resides is fine. However, having WALs stored in a separate volume has a few benefits: I/O performance \u2013 By storing WAL files on different storage from PGDATA , PostgreSQL can exploit parallel I/O for WAL operations (normally sequential writes) and for data files (tables and indexes for example), thus improving vertical scalability. More reliability \u2013 By reserving dedicated disk space to WAL files, you can be sure that exhausting space on the PGDATA volume never interferes with WAL writing. This behavior ensures that your PostgreSQL primary is correctly shut down. Finer control \u2013 You can define the amount of space dedicated to both PGDATA and pg_wal , fine tune WAL configuration and checkpoints, and even use a different storage class for cost optimization. Better I/O monitoring \u2013 You can constantly monitor the load and disk usage on both PGDATA and pg_wal . You can also set alerts that notify you in case, for example, PGDATA requires resizing. Write-Ahead Log (WAL) See Reliability and the Write-Ahead Log in the PostgreSQL documentation for more information. You can add a separate volume for WAL using the .spec.walStorage option. It follows the same rules described for the storage field and provisions a dedicated PVC. For example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: separate-pgwal-volume spec: instances: 3 storage: size: 1Gi walStorage: size: 1Gi Important Removing walStorage isn't supported. Once added, a separate volume for WALs can't be removed from an existing Postgres cluster.","title":"Volume for WAL"},{"location":"storage/#volumes-for-tablespaces","text":"CloudNativePG supports declarative tablespaces. You can add one or more volumes, each dedicated to a single PostgreSQL tablespace. See Tablespaces for details.","title":"Volumes for tablespaces"},{"location":"storage/#volume-expansion","text":"Kubernetes exposes an API allowing expanding PVCs that's enabled by default. However, it needs to be supported by the underlying StorageClass . To check if a certain StorageClass supports volume expansion, you can read the allowVolumeExpansion field for your storage class: $ kubectl get storageclass -o jsonpath='{$.allowVolumeExpansion}' premium-storage true","title":"Volume expansion"},{"location":"storage/#using-the-volume-expansion-kubernetes-feature","text":"Given the storage class supports volume expansion, you can change the size requirement of the Cluster , and the operator applies the change to every PVC. If the StorageClass supports online volume resizing , the change is immediately applied to the pods. If the underlying storage class doesn't support that, you must delete the pod to trigger the resize. The best way to proceed is to delete one pod at a time, starting from replicas and waiting for each pod to be back up.","title":"Using the volume expansion Kubernetes feature"},{"location":"storage/#re-creating-storage","text":"If the storage class doesn't support volume expansion, you can still regenerate your cluster on different PVCs. Allocate new PVCs with increased storage and then move the database there. This operation is feasible only when the cluster contains more than one node. While you do that, you need to prevent the operator from changing the existing PVC by disabling the resizeInUseVolumes flag, like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: postgresql-pvc-template spec: instances: 3 storage: storageClass: standard size: 1Gi resizeInUseVolumes: False To move the entire cluster to a different storage area, you need to re-create all the PVCs and all the pods. Suppose you have a cluster with three replicas, like in the following example: $ kubectl get pods NAME READY STATUS RESTARTS AGE cluster-example-1 1/1 Running 0 2m37s cluster-example-2 1/1 Running 0 2m22s cluster-example-3 1/1 Running 0 2m10s To re-create the cluster using different PVCs, you can edit the cluster definition to disable resizeInUseVolumes . Then re-create every instance in a different PVC. For example, re-create the storage for cluster-example-3 : $ kubectl delete pvc/cluster-example-3 pod/cluster-example-3 Important If you created a dedicated WAL volume, both PVCs must be deleted during this process. The same procedure applies if you want to regenerate the WAL volume PVC. You can do this by also disabling resizeInUseVolumes for the .spec.walStorage section. For example, if a PVC dedicated to WAL storage is present: $ kubectl delete pvc/cluster-example-3 pvc/cluster-example-3-wal pod/cluster-example-3 Having done that, the operator orchestrates creating another replica with a resized PVC: $ kubectl get pods NAME READY STATUS RESTARTS AGE cluster-example-1 1/1 Running 0 5m58s cluster-example-2 1/1 Running 0 5m43s cluster-example-4-join-v2 0/1 Completed 0 17s cluster-example-4 1/1 Running 0 10s","title":"Re-creating storage"},{"location":"storage/#static-provisioning-of-persistent-volumes","text":"CloudNativePG was designed to work with dynamic volume provisioning. This capability allows storage volumes to be created on demand when requested by users by way of storage classes and PVC templates. See Re-creating storage . However, in some cases, Kubernetes administrators prefer to manually create storage volumes and then create the related PersistentVolume objects for their representation inside the Kubernetes cluster. This is also known as pre-provisioning of volumes. Important We recommend that you avoid pre-provisioning volumes, as it has an effect on the high availability and self-healing capabilities of the operator. It breaks the fully declarative model on which CloudNativePG was built. To use a pre-provisioned volume in CloudNativePG: Manually create the volume outside Kubernetes. Create the PersistentVolume object to match this volume using the correct parameters as required by the actual CSI driver (that is, volumeHandle , fsType , storageClassName , and so on). Create the Postgres Cluster using, for each storage section, a coherent pvcTemplate section that can help Kubernetes match the PersistentVolume and enable CloudNativePG to create the needed PersistentVolumeClaim . Warning With static provisioning, it's your responsibility to ensure that Postgres pods can be correctly scheduled by Kubernetes where a pre-provisioned volume exists. (The scheduling configuration is based on the affinity rules of your cluster.) Make sure you check for any pods stuck in Pending after you deploy the cluster. If the condition persists, investigate why it's happening.","title":"Static provisioning of persistent volumes"},{"location":"storage/#block-storage-considerations-cephlonghorn","text":"Most block storage solutions in Kubernetes, such as Longhorn and Ceph, recommend having multiple replicas of a volume to enhance resiliency. This approach works well for workloads that lack built-in resiliency. However, CloudNativePG integrates this resiliency directly into the Postgres Cluster through the number of instances and the persistent volumes attached to them, as explained in \"Synchronizing the state\" . As a result, defining additional replicas at the storage level can lead to write amplification, unnecessarily increasing disk I/O and space usage. For CloudNativePG usage, consider reducing the number of replicas at the block storage level to one, while ensuring that no single point of failure (SPoF) exists at the storage level for the entire Cluster resource. This typically means ensuring that a single storage host\u2014and ultimately, a physical disk\u2014does not host blocks from different instances of the same Cluster , in alignment with the broader shared-nothing architecture principle. In Longhorn, you can mitigate this risk by enabling strict-local data locality when creating a custom storage class. Detailed instructions for creating a volume with strict-local data locality are available here . This setting ensures that a pod\u2019s data volume resides on the same node as the pod itself. Additionally, your Postgres Cluster should have pod anti-affinity rules in place to ensure that the operator deploys pods across different nodes, allowing Longhorn to place the data volumes on the corresponding hosts. If needed, you can manually relocate volumes in Longhorn by temporarily setting the volume replica count to 2, reducing it afterward, and then removing the old replica. If a host becomes corrupted, you can use the cnpg plugin to destroy the affected instance. CloudNativePG will then recreate the instance on another host and replicate the data. In Ceph, this can be configured through CRUSH rules. The documentation for configuring CRUSH rules is available here . These rules aim to ensure one volume per pod per node. You can also relocate volumes by importing them into a different pool.","title":"Block storage considerations (Ceph/Longhorn)"},{"location":"supported_releases/","text":"Supported releases This page lists the status, timeline and policy for currently supported releases of CloudNativePG . We are committed to providing support for the latest minor release, with a dedication to launching a new minor release every three months. Each release remains fully supported until reaching its designated \"End of Life\" date, as outlined in the support status table for CloudNativePG releases . This includes an additional 3-month assistance window to facilitate seamless upgrade planning. Supported releases of CloudNativePG include releases that are in the active maintenance window and are patched for security and bug fixes. Subsequent patch releases on a minor release contain backward-compatible changes only. Support policy Naming scheme Support status of CloudNativePG releases What we mean by support Support Policy CloudNativePG produces new builds for each commit. Approximately every two months, we create a minor release that undergoes several additional tests and a thorough release qualification process. We release patch versions for issues found in supported minor releases. Before an official release, at least one Release Candidate (RC) is built for preview testing . Additional release candidates may be issued if new bugs are discovered. The Release Candidates are announced on the Slack channel to encourage community testing before the final release. The maintainers provide 1-2 weeks for community testing, and if no objections are raised, the final release is announced. Different types of releases represent varying levels of product quality and assistance from the CloudNativePG community. For details on the support provided by the community, see What we mean by support . Type Support level Quality and recommended Use Development Build No support Dangerous, might not be fully reliable. Useful to experiment with. Release Candidate No support Preview version: Not production-ready . Released for experimentation and testing. Minor Release Support provided until 3 months after the N+1 minor release (ex. 1.23 supported until 3 months after 1.24.0 is released) Patch Same as the corresponding minor release Users are encouraged to adopt patch releases as soon as they are available for a given release. Security Patch Same as a patch, however, it doesn't contain any additional code other than the security fix from the previous patch Given the nature of security fixes, users are strongly encouraged to adopt security patches after release. You can find available releases on the releases page . You can find high-level more information for each minor and patch release in the release notes . Sure, here\u2019s an improved version of the naming scheme section: Naming Scheme Our naming scheme follows Semantic Versioning 2.0.0 and is structured as follows: <major>.<minor>.<patch> <minor> is incremented for each release. <patch> counts the number of patches for the current <minor> release, representing small changes relative to the <minor> release. Release candidates are indicated by an additional -<pre-release> identifier following the patch version, as specified in Semantic Versioning 2.0.0 - item #9 . Git tags for versions are prefixed with v . Support status of CloudNativePG releases Version Currently supported Release date End of life Supported Kubernetes versions Tested, but not supported Supported Postgres versions 1.27.x No (preview) ~ Aug 2025 ~ Feb 2026 1.31, 1.32, 1.33 1.30, 1.29 13 - 17 1.26.x Yes May 23, 2025 ~ Nov 2025 1.30, 1.31, 1.32, 1.33 1.29 13 - 17 1.25.x Yes Dec 23, 2024 22 Aug 2025 1.29, 1.30, 1.31, 1.32 1.33 13 - 17 main No, development only 13 - 17 1 PostgreSQL 13 will be supported until November 13, 2025. The list of supported Kubernetes versions in the table depends on what the CloudNativePG maintainers think is reasonable to support and to test. Currently, the CloudNativePG community does not officially support or test any Kubernetes distributions beyond the standard/vanilla one - such as Red Hat OpenShift. This may change in the future, and if it does, the CloudNativePG maintainers will update the official policy accordingly. If you plan to deploy CloudNativePG on Red Hat OpenShift, you can use the certified operator provided by EDB , which comes with full support from EDB. Supported PostgreSQL versions The list of supported Postgres versions in the previous table generally depends on what PostgreSQL versions were supported by the community at the time the minor version of CloudNativePG was released. See the PostgreSQL Versioning Policy page for more information about supported versions. Info Starting from November 14, 2024, Postgres 12 is no longer supported . We also recommend that you regularly update your PostgreSQL operand images and use the latest minor release for the major version you have in use, as not upgrading is riskier than upgrading. As a result, when opening an issue with an older minor version of PostgreSQL, we might not be able to help you. Upcoming releases Version Release date End of life 1.28.0 ~ Nov, 2025 ~ May, 2026 1.29.0 ~ Feb, 2026 ~ Aug, 2026 1.30.0 ~ May, 2026 ~ Nov, 2026 Note Feature freeze occurs 1-2 weeks before the release, at which point a release candidate version is built and distributed for testing, as described earlier. Important Dates in the future are uncertain and might change. This applies to Kubernetes versions, too. Updates and changes on the release schedule will be communicated in the Release updates discussion in the main GitHub repository. Old releases Version Release date End of life Compatible Kubernetes versions 1.24.x Aug 22, 2024 May 23, 2025 1.28, 1.29, 1.30, 1.31 1.23.x April 24, 2024 November 24, 2024 1.27, 1.28, 1.29 1.22.x December 21, 2023 July 24, 2024 1.26, 1.27, 1.28 1.21.x October 12, 2023 Jun 12, 2024 1.25, 1.26, 1.27, 1.28 1.20.x April 27, 2023 January 21, 2024 1.24, 1.25, 1.26, 1.27 1.19.x February 14, 2023 November 3, 2023 1.23, 1.24, 1.25, 1.26 1.18.x Nov 10, 2022 June 12, 2023 1.23, 1.24, 1.25, 1.26, 1.27 1.17.x September 6, 2022 March 20, 2023 1.22, 1.23, 1.24 1.16.x July 7, 2022 December 21, 2022 1.22, 1.23, 1.24 1.15.x April 21, 2022 October 6, 2022 1.21, 1.22, 1.23 What we mean by support Our support window is roughly five months for each release branch (latest minor release, plus 3 additional months), given that we produce a new final release every two months. In the following diagram, release-1.23 is an example of a release branch. For example, if the latest release is v1.23.0 , you can expect a supplementary 3-month support period for the preceding release, v1.22.x . Only the last patch release of each branch is supported. ------+---------------------------------------------> main (trunk development) \\ \\ \\ \\ \\ \\ v1.23.0 \\ \\ Apr 24, 2024 ^ \\ \\----------+---------------> release-1.23 | \\ | SUPPORTED \\ | RELEASES \\ v1.22.0 | = last minor \\ Dec 21, 2023 | release + +-------------------+---------------> release-1.22 | 3 months v We offer two types of support: Technical support Technical assistance is offered on a best-effort basis and is limited to supported releases only. For help, you can reach out to the community via the #cloudnativepg-users channel on the CNCF Slack workspace (if you're not yet a member, you can join the workspace ). Alternatively, you can post your questions in the GitHub Discussions section of the CloudNativePG repository. Security and bug fixes We backport important bug fixes \u2014 including security fixes - to all currently supported releases. Before backporting a patch, we ask ourselves: \"Does this backport improve CloudNativePG , bearing in mind that we really value stability for already-released versions?\" If you\u2019re looking for professional support, please refer to the Support page on our website . The vendors listed there may offer service level agreements (SLA), including extended support periods and additional services.","title":"Supported releases"},{"location":"supported_releases/#supported-releases","text":"This page lists the status, timeline and policy for currently supported releases of CloudNativePG . We are committed to providing support for the latest minor release, with a dedication to launching a new minor release every three months. Each release remains fully supported until reaching its designated \"End of Life\" date, as outlined in the support status table for CloudNativePG releases . This includes an additional 3-month assistance window to facilitate seamless upgrade planning. Supported releases of CloudNativePG include releases that are in the active maintenance window and are patched for security and bug fixes. Subsequent patch releases on a minor release contain backward-compatible changes only. Support policy Naming scheme Support status of CloudNativePG releases What we mean by support","title":"Supported releases"},{"location":"supported_releases/#support-policy","text":"CloudNativePG produces new builds for each commit. Approximately every two months, we create a minor release that undergoes several additional tests and a thorough release qualification process. We release patch versions for issues found in supported minor releases. Before an official release, at least one Release Candidate (RC) is built for preview testing . Additional release candidates may be issued if new bugs are discovered. The Release Candidates are announced on the Slack channel to encourage community testing before the final release. The maintainers provide 1-2 weeks for community testing, and if no objections are raised, the final release is announced. Different types of releases represent varying levels of product quality and assistance from the CloudNativePG community. For details on the support provided by the community, see What we mean by support . Type Support level Quality and recommended Use Development Build No support Dangerous, might not be fully reliable. Useful to experiment with. Release Candidate No support Preview version: Not production-ready . Released for experimentation and testing. Minor Release Support provided until 3 months after the N+1 minor release (ex. 1.23 supported until 3 months after 1.24.0 is released) Patch Same as the corresponding minor release Users are encouraged to adopt patch releases as soon as they are available for a given release. Security Patch Same as a patch, however, it doesn't contain any additional code other than the security fix from the previous patch Given the nature of security fixes, users are strongly encouraged to adopt security patches after release. You can find available releases on the releases page . You can find high-level more information for each minor and patch release in the release notes . Sure, here\u2019s an improved version of the naming scheme section:","title":"Support Policy"},{"location":"supported_releases/#naming-scheme","text":"Our naming scheme follows Semantic Versioning 2.0.0 and is structured as follows: <major>.<minor>.<patch> <minor> is incremented for each release. <patch> counts the number of patches for the current <minor> release, representing small changes relative to the <minor> release. Release candidates are indicated by an additional -<pre-release> identifier following the patch version, as specified in Semantic Versioning 2.0.0 - item #9 . Git tags for versions are prefixed with v .","title":"Naming Scheme"},{"location":"supported_releases/#support-status-of-cloudnativepg-releases","text":"Version Currently supported Release date End of life Supported Kubernetes versions Tested, but not supported Supported Postgres versions 1.27.x No (preview) ~ Aug 2025 ~ Feb 2026 1.31, 1.32, 1.33 1.30, 1.29 13 - 17 1.26.x Yes May 23, 2025 ~ Nov 2025 1.30, 1.31, 1.32, 1.33 1.29 13 - 17 1.25.x Yes Dec 23, 2024 22 Aug 2025 1.29, 1.30, 1.31, 1.32 1.33 13 - 17 main No, development only 13 - 17 1 PostgreSQL 13 will be supported until November 13, 2025. The list of supported Kubernetes versions in the table depends on what the CloudNativePG maintainers think is reasonable to support and to test. Currently, the CloudNativePG community does not officially support or test any Kubernetes distributions beyond the standard/vanilla one - such as Red Hat OpenShift. This may change in the future, and if it does, the CloudNativePG maintainers will update the official policy accordingly. If you plan to deploy CloudNativePG on Red Hat OpenShift, you can use the certified operator provided by EDB , which comes with full support from EDB.","title":"Support status of CloudNativePG releases"},{"location":"supported_releases/#supported-postgresql-versions","text":"The list of supported Postgres versions in the previous table generally depends on what PostgreSQL versions were supported by the community at the time the minor version of CloudNativePG was released. See the PostgreSQL Versioning Policy page for more information about supported versions. Info Starting from November 14, 2024, Postgres 12 is no longer supported . We also recommend that you regularly update your PostgreSQL operand images and use the latest minor release for the major version you have in use, as not upgrading is riskier than upgrading. As a result, when opening an issue with an older minor version of PostgreSQL, we might not be able to help you.","title":"Supported PostgreSQL versions"},{"location":"supported_releases/#upcoming-releases","text":"Version Release date End of life 1.28.0 ~ Nov, 2025 ~ May, 2026 1.29.0 ~ Feb, 2026 ~ Aug, 2026 1.30.0 ~ May, 2026 ~ Nov, 2026 Note Feature freeze occurs 1-2 weeks before the release, at which point a release candidate version is built and distributed for testing, as described earlier. Important Dates in the future are uncertain and might change. This applies to Kubernetes versions, too. Updates and changes on the release schedule will be communicated in the Release updates discussion in the main GitHub repository.","title":"Upcoming releases"},{"location":"supported_releases/#old-releases","text":"Version Release date End of life Compatible Kubernetes versions 1.24.x Aug 22, 2024 May 23, 2025 1.28, 1.29, 1.30, 1.31 1.23.x April 24, 2024 November 24, 2024 1.27, 1.28, 1.29 1.22.x December 21, 2023 July 24, 2024 1.26, 1.27, 1.28 1.21.x October 12, 2023 Jun 12, 2024 1.25, 1.26, 1.27, 1.28 1.20.x April 27, 2023 January 21, 2024 1.24, 1.25, 1.26, 1.27 1.19.x February 14, 2023 November 3, 2023 1.23, 1.24, 1.25, 1.26 1.18.x Nov 10, 2022 June 12, 2023 1.23, 1.24, 1.25, 1.26, 1.27 1.17.x September 6, 2022 March 20, 2023 1.22, 1.23, 1.24 1.16.x July 7, 2022 December 21, 2022 1.22, 1.23, 1.24 1.15.x April 21, 2022 October 6, 2022 1.21, 1.22, 1.23","title":"Old releases"},{"location":"supported_releases/#what-we-mean-by-support","text":"Our support window is roughly five months for each release branch (latest minor release, plus 3 additional months), given that we produce a new final release every two months. In the following diagram, release-1.23 is an example of a release branch. For example, if the latest release is v1.23.0 , you can expect a supplementary 3-month support period for the preceding release, v1.22.x . Only the last patch release of each branch is supported. ------+---------------------------------------------> main (trunk development) \\ \\ \\ \\ \\ \\ v1.23.0 \\ \\ Apr 24, 2024 ^ \\ \\----------+---------------> release-1.23 | \\ | SUPPORTED \\ | RELEASES \\ v1.22.0 | = last minor \\ Dec 21, 2023 | release + +-------------------+---------------> release-1.22 | 3 months v We offer two types of support: Technical support Technical assistance is offered on a best-effort basis and is limited to supported releases only. For help, you can reach out to the community via the #cloudnativepg-users channel on the CNCF Slack workspace (if you're not yet a member, you can join the workspace ). Alternatively, you can post your questions in the GitHub Discussions section of the CloudNativePG repository. Security and bug fixes We backport important bug fixes \u2014 including security fixes - to all currently supported releases. Before backporting a patch, we ask ourselves: \"Does this backport improve CloudNativePG , bearing in mind that we really value stability for already-released versions?\" If you\u2019re looking for professional support, please refer to the Support page on our website . The vendors listed there may offer service level agreements (SLA), including extended support periods and additional services.","title":"What we mean by support"},{"location":"tablespaces/","text":"Tablespaces A tablespace is a robust and widely embraced feature in database management systems. It offers a powerful means to enhance the vertical scalability of a database by decoupling the physical and logical modeling of data. Essentially, it serves as a technique for physical database modeling, enabling the efficient distribution of I/O operations across multiple volumes on distinct storage. It thereby optimizes performance through parallel on-disk read/write operations. In the context of the database industry, tablespaces play a strategic role, particularly when paired with table partitioning, a logical database modeling technique. They prove instrumental in managing large-scale databases and are also used for tasks such as separating tables from indexes or executing temporary operations. Tablespaces in PostgreSQL have been playing a pivotal role since 2005 (version 8.0), while declarative partitioning was introduced in 2017 (version 10). Consequently, tablespaces are seamlessly integrated into all supported releases of PostgreSQL. Quoting from the PostgreSQL documentation on tablespaces : By using tablespaces, an administrator can control the disk layout of a PostgreSQL installation. This is useful in at least two ways. First, if the partition or volume on which the cluster was initialized runs out of space and cannot be extended, a tablespace can be created on a different partition and used until the system can be reconfigured. Second, tablespaces allow an administrator to use knowledge of the usage pattern of database objects to optimize performance. Declarative tablespaces CloudNativePG provides support for PostgreSQL tablespaces through declarative tablespaces , operating at two distinct levels: Kubernetes, managing persistent volume claims, identically to how PGDATA and WAL volumes are handled PostgreSQL, managing the TABLESPACE global objects in the PostgreSQL instance Being a part of the Kubernetes ecosystem, CloudNativePG's declarative tablespaces are implemented by leveraging persistent volume claims (and persistent volumes). Each tablespace defined in the cluster is housed in its own persistent volume. CloudNativePG takes care of generating the PVCs. It mounts the required volumes in the instance pods in normalized locations and ensures replicas are ready to support tablespaces before activating them in the primary. You can set up tablespaces when creating the cluster or add them later, provided the storage is available when requested. Currently, you can't remove them. However, this limitation will be addressed in a future minor or patch version of CloudNativePG. Using declarative tablespaces Using declarative tablespaces is straightforward. You can find a full example in cluster-example-with-tablespaces.yaml . To use them, use the new tablespaces stanza on a new or existing Cluster resource: spec: instances: 3 # ... tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 storage: size: 2Gi Each tablespace has its own storage section where you can configure the size and the storage class of the generated PVC. The administrator can thus plan to use different storage classes for different kinds of workloads, as explained in Storage classes and tablespaces . CloudNativePG creates the persistent volume claims for each instance in the high-availability Postgres cluster. It mounts them in each pod when they have been provisioned. Then, it ensures that the tbs1 , tbs2 , and tbs3 tablespaces are created on the primary PostgreSQL instance using the CREATE TABLESPACE command. This process is quick, and you see this reflected in Postgres: app=# SELECT oid, spcname FROM pg_tablespace; oid | spcname -------+-------------------- 1663 | pg_default 1664 | pg_global 16387 | tbs1 16388 | tbs2 16389 | tbs3 (5 rows) You can start using them right away: app=# CREATE TABLE fibonacci(num INTEGER) TABLESPACE tbs1; CREATE TABLE The cluster status has a section for tablespaces: status: <- snipped -> tablespacesStatus: - name: atablespace state: reconciled - name: another_tablespace state: reconciled - name: tablespacea1 state: reconciled Storage classes and tablespaces You can use different storage classes for your tablespaces, just as you can for PGDATA and WAL volumes. This is a convenient way of optimizing your resources, balancing performance and costs of your storage based on data access usage and expectations. This example helps to explain the feature: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: yardbirds spec: instances: 3 storage: size: 10Gi walStorage: size: 10Gi tablespaces: - name: current storage: size: 100Gi storageClass: fastest - name: this_year storage: size: 500Gi storageClass: balanced The yardbirds cluster example requests 4 persistent volume claims using 3 different storage classes: Default storage class \u2013 Used by the PGDATA and WAL volumes. fastest \u2013 Used by the current tablespace to store the most active and demanding set of data in the database. balanced \u2013 Used by the this_year tablespace to store older partitions of data that are rarely accessed by users and where performance expectations aren't the highest. You can then take advantage of horizontal table partitioning and create the current month's table (for example, facts for December 2023) in the current tablespace: CREATE TABLE facts_202312 PARTITION OF facts FOR VALUES FROM ('2023-12-01') TO ('2024-01-01') TABLESPACE current; Important This example assumes you're familiar with PostgreSQL declarative partitioning . Tablespace ownership By default, unless otherwise specified, tablespaces are owned by the app application user, as defined in .spec.bootstrap.initdb.owner . See Bootstrap a new cluster for details. This default behavior works in most microservice database use cases. You can set the owner of a tablespace in the owner stanza, for example the postgres user, like in the following excerpt: # ... tablespaces: - name: clapton owner: name: postgres storage: size: 1Gi Important If you change the ownership of a tablespace, make sure that you're using an existing role. Otherwise, the status of the cluster reports the issue and stops reconciling tablespaces until fixed. It's your responsibility to monitor the status and the log and to promptly intervene by fixing the issue. If you define a tablespace with an owner that doesn't exist, CloudNativePG can't create the tablespace and reflects this in the cluster status: spec: instances: 3 # ... tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 owner: name: badhombre storage: size: 2Gi status: <- snipped -> tablespacesStatus: - name: tbs1 status: reconciled - name: tbs2 status: reconciled - error: 'while creating tablespace tbs3: ERROR: role \"badhombre\" does not exist (SQLSTATE 42704)' name: tbs3 status: pending Backup and recovery CloudNativePG handles backup of tablespaces (and the relative tablespace map) both on object stores and volume snapshots. Warning By default, backups are taken from replica nodes. A backup taken immediately after creating tablespaces in a cluster can result in an incomplete view of the tablespaces from the replica and thus an incomplete backup. The lag will be resolved in a maximum of 5 minutes, with the next reconciliation. Warning When you add or remove a tablespace in an existing cluster, recovery from WAL will fail until you take a new base backup. Once a cluster with tablespaces has a base backup, you can restore a new cluster from it. When it comes to the recovery side, it's your responsibility to ensure that the Cluster definition of the recovered database contains the exact list of tablespaces. Replica clusters Replica clusters must have the same tablespace definition as their origin. The reason is that tablespace management commands like CREATE TABLESPACE are WAL logged and are replayed by any physical replication client (streaming or by way of WAL shipping). It's your responsibility to ensure that replica clusters have the same list of tablespaces, with the same name. Storage class and size might vary. For example: spec: # ... bootstrap: recovery: # ... your selected recovery method tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 storage: size: 2Gi Temporary tablespaces PostgreSQL allows you to define one or more temporary tablespaces to create temporary objects (temporary tables and indexes on temporary tables) when a CREATE command doesn't explicitly specify a tablespace, and to create temporary files for purposes such as sorting large data sets. When no temporary tablespace is specified, PostgreSQL uses the default tablespace of a database, which is currently the main PGDATA volume. When you specify more than one temporary tablespace, PostgreSQL randomly picks one the first time a temporary object needs to be created in a transaction. Then it sequentially iterates through the list. Temporary tablespaces also work like regular tablespaces with regard to backups. CloudNativePG provides the .spec.tablespaces[*].temporary option to determine whether to add a tablespace to the temp_tablespaces PostgreSQL parameter and thus become eligible to store temporary data that doesn't have an explicit tablespace assignment. spec: [...] tablespaces: - name: atablespace storage: size: 1Gi temporary: true They can be created at initialization time or added later, requiring a rolling update. The temporary: true/false option adds or removes the tablespace name to or from the list of tablespaces in the temp_tablespaces option. This change doesn't require a restart of PostgreSQL. Although temporary tablespaces can also work as regular tablespaces (meaning that users can also host regular data on them while using them for temporary operations), we recommend that you don't mix the two workloads. See the PostgreSQL documentation on temp_tablespaces for details. kubectl plugin support The kubectl status plugin includes a section dedicated to tablespaces that offers a convenient overview, including tablespace status, owner, temporary flag, and any errors: [...] Tablespaces status Tablespace Owner Status Temporary Error ---------- ----- ------ --------- ----- atablespace app reconciled true another_tablespace app reconciled true tablespacea1 app reconciled false Instances status [...] Limitations Currently, you can't remove tablespaces from an existing CloudNativePG cluster.","title":"Tablespaces"},{"location":"tablespaces/#tablespaces","text":"A tablespace is a robust and widely embraced feature in database management systems. It offers a powerful means to enhance the vertical scalability of a database by decoupling the physical and logical modeling of data. Essentially, it serves as a technique for physical database modeling, enabling the efficient distribution of I/O operations across multiple volumes on distinct storage. It thereby optimizes performance through parallel on-disk read/write operations. In the context of the database industry, tablespaces play a strategic role, particularly when paired with table partitioning, a logical database modeling technique. They prove instrumental in managing large-scale databases and are also used for tasks such as separating tables from indexes or executing temporary operations. Tablespaces in PostgreSQL have been playing a pivotal role since 2005 (version 8.0), while declarative partitioning was introduced in 2017 (version 10). Consequently, tablespaces are seamlessly integrated into all supported releases of PostgreSQL. Quoting from the PostgreSQL documentation on tablespaces : By using tablespaces, an administrator can control the disk layout of a PostgreSQL installation. This is useful in at least two ways. First, if the partition or volume on which the cluster was initialized runs out of space and cannot be extended, a tablespace can be created on a different partition and used until the system can be reconfigured. Second, tablespaces allow an administrator to use knowledge of the usage pattern of database objects to optimize performance.","title":"Tablespaces"},{"location":"tablespaces/#declarative-tablespaces","text":"CloudNativePG provides support for PostgreSQL tablespaces through declarative tablespaces , operating at two distinct levels: Kubernetes, managing persistent volume claims, identically to how PGDATA and WAL volumes are handled PostgreSQL, managing the TABLESPACE global objects in the PostgreSQL instance Being a part of the Kubernetes ecosystem, CloudNativePG's declarative tablespaces are implemented by leveraging persistent volume claims (and persistent volumes). Each tablespace defined in the cluster is housed in its own persistent volume. CloudNativePG takes care of generating the PVCs. It mounts the required volumes in the instance pods in normalized locations and ensures replicas are ready to support tablespaces before activating them in the primary. You can set up tablespaces when creating the cluster or add them later, provided the storage is available when requested. Currently, you can't remove them. However, this limitation will be addressed in a future minor or patch version of CloudNativePG.","title":"Declarative tablespaces"},{"location":"tablespaces/#using-declarative-tablespaces","text":"Using declarative tablespaces is straightforward. You can find a full example in cluster-example-with-tablespaces.yaml . To use them, use the new tablespaces stanza on a new or existing Cluster resource: spec: instances: 3 # ... tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 storage: size: 2Gi Each tablespace has its own storage section where you can configure the size and the storage class of the generated PVC. The administrator can thus plan to use different storage classes for different kinds of workloads, as explained in Storage classes and tablespaces . CloudNativePG creates the persistent volume claims for each instance in the high-availability Postgres cluster. It mounts them in each pod when they have been provisioned. Then, it ensures that the tbs1 , tbs2 , and tbs3 tablespaces are created on the primary PostgreSQL instance using the CREATE TABLESPACE command. This process is quick, and you see this reflected in Postgres: app=# SELECT oid, spcname FROM pg_tablespace; oid | spcname -------+-------------------- 1663 | pg_default 1664 | pg_global 16387 | tbs1 16388 | tbs2 16389 | tbs3 (5 rows) You can start using them right away: app=# CREATE TABLE fibonacci(num INTEGER) TABLESPACE tbs1; CREATE TABLE The cluster status has a section for tablespaces: status: <- snipped -> tablespacesStatus: - name: atablespace state: reconciled - name: another_tablespace state: reconciled - name: tablespacea1 state: reconciled","title":"Using declarative tablespaces"},{"location":"tablespaces/#storage-classes-and-tablespaces","text":"You can use different storage classes for your tablespaces, just as you can for PGDATA and WAL volumes. This is a convenient way of optimizing your resources, balancing performance and costs of your storage based on data access usage and expectations. This example helps to explain the feature: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: yardbirds spec: instances: 3 storage: size: 10Gi walStorage: size: 10Gi tablespaces: - name: current storage: size: 100Gi storageClass: fastest - name: this_year storage: size: 500Gi storageClass: balanced The yardbirds cluster example requests 4 persistent volume claims using 3 different storage classes: Default storage class \u2013 Used by the PGDATA and WAL volumes. fastest \u2013 Used by the current tablespace to store the most active and demanding set of data in the database. balanced \u2013 Used by the this_year tablespace to store older partitions of data that are rarely accessed by users and where performance expectations aren't the highest. You can then take advantage of horizontal table partitioning and create the current month's table (for example, facts for December 2023) in the current tablespace: CREATE TABLE facts_202312 PARTITION OF facts FOR VALUES FROM ('2023-12-01') TO ('2024-01-01') TABLESPACE current; Important This example assumes you're familiar with PostgreSQL declarative partitioning .","title":"Storage classes and tablespaces"},{"location":"tablespaces/#tablespace-ownership","text":"By default, unless otherwise specified, tablespaces are owned by the app application user, as defined in .spec.bootstrap.initdb.owner . See Bootstrap a new cluster for details. This default behavior works in most microservice database use cases. You can set the owner of a tablespace in the owner stanza, for example the postgres user, like in the following excerpt: # ... tablespaces: - name: clapton owner: name: postgres storage: size: 1Gi Important If you change the ownership of a tablespace, make sure that you're using an existing role. Otherwise, the status of the cluster reports the issue and stops reconciling tablespaces until fixed. It's your responsibility to monitor the status and the log and to promptly intervene by fixing the issue. If you define a tablespace with an owner that doesn't exist, CloudNativePG can't create the tablespace and reflects this in the cluster status: spec: instances: 3 # ... tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 owner: name: badhombre storage: size: 2Gi status: <- snipped -> tablespacesStatus: - name: tbs1 status: reconciled - name: tbs2 status: reconciled - error: 'while creating tablespace tbs3: ERROR: role \"badhombre\" does not exist (SQLSTATE 42704)' name: tbs3 status: pending","title":"Tablespace ownership"},{"location":"tablespaces/#backup-and-recovery","text":"CloudNativePG handles backup of tablespaces (and the relative tablespace map) both on object stores and volume snapshots. Warning By default, backups are taken from replica nodes. A backup taken immediately after creating tablespaces in a cluster can result in an incomplete view of the tablespaces from the replica and thus an incomplete backup. The lag will be resolved in a maximum of 5 minutes, with the next reconciliation. Warning When you add or remove a tablespace in an existing cluster, recovery from WAL will fail until you take a new base backup. Once a cluster with tablespaces has a base backup, you can restore a new cluster from it. When it comes to the recovery side, it's your responsibility to ensure that the Cluster definition of the recovered database contains the exact list of tablespaces.","title":"Backup and recovery"},{"location":"tablespaces/#replica-clusters","text":"Replica clusters must have the same tablespace definition as their origin. The reason is that tablespace management commands like CREATE TABLESPACE are WAL logged and are replayed by any physical replication client (streaming or by way of WAL shipping). It's your responsibility to ensure that replica clusters have the same list of tablespaces, with the same name. Storage class and size might vary. For example: spec: # ... bootstrap: recovery: # ... your selected recovery method tablespaces: - name: tbs1 storage: size: 1Gi - name: tbs2 storage: size: 2Gi - name: tbs3 storage: size: 2Gi","title":"Replica clusters"},{"location":"tablespaces/#temporary-tablespaces","text":"PostgreSQL allows you to define one or more temporary tablespaces to create temporary objects (temporary tables and indexes on temporary tables) when a CREATE command doesn't explicitly specify a tablespace, and to create temporary files for purposes such as sorting large data sets. When no temporary tablespace is specified, PostgreSQL uses the default tablespace of a database, which is currently the main PGDATA volume. When you specify more than one temporary tablespace, PostgreSQL randomly picks one the first time a temporary object needs to be created in a transaction. Then it sequentially iterates through the list. Temporary tablespaces also work like regular tablespaces with regard to backups. CloudNativePG provides the .spec.tablespaces[*].temporary option to determine whether to add a tablespace to the temp_tablespaces PostgreSQL parameter and thus become eligible to store temporary data that doesn't have an explicit tablespace assignment. spec: [...] tablespaces: - name: atablespace storage: size: 1Gi temporary: true They can be created at initialization time or added later, requiring a rolling update. The temporary: true/false option adds or removes the tablespace name to or from the list of tablespaces in the temp_tablespaces option. This change doesn't require a restart of PostgreSQL. Although temporary tablespaces can also work as regular tablespaces (meaning that users can also host regular data on them while using them for temporary operations), we recommend that you don't mix the two workloads. See the PostgreSQL documentation on temp_tablespaces for details.","title":"Temporary tablespaces"},{"location":"tablespaces/#kubectl-plugin-support","text":"The kubectl status plugin includes a section dedicated to tablespaces that offers a convenient overview, including tablespace status, owner, temporary flag, and any errors: [...] Tablespaces status Tablespace Owner Status Temporary Error ---------- ----- ------ --------- ----- atablespace app reconciled true another_tablespace app reconciled true tablespacea1 app reconciled false Instances status [...]","title":"kubectl plugin support"},{"location":"tablespaces/#limitations","text":"Currently, you can't remove tablespaces from an existing CloudNativePG cluster.","title":"Limitations"},{"location":"troubleshooting/","text":"Troubleshooting In this page, you can find some basic information on how to troubleshoot CloudNativePG in your Kubernetes cluster deployment. Hint As a Kubernetes administrator, you should have the kubectl Cheat Sheet page bookmarked! Before you start Kubernetes environment What can make a difference in a troubleshooting activity is to provide clear information about the underlying Kubernetes system. Make sure you know: the Kubernetes distribution and version you are using the specifications of the nodes where PostgreSQL is running as much as you can about the actual storage , including storage class and benchmarks you have done before going into production. which relevant Kubernetes applications you are using in your cluster (i.e. Prometheus, Grafana, Istio, Certmanager, ...) the situation of continuous backup, in particular if it's in place and working correctly: in case it is not, make sure you take an emergency backup before performing any potential disrupting operation Useful utilities On top of the mandatory kubectl utility, for troubleshooting, we recommend the following plugins/utilities to be available in your system: cnpg plugin for kubectl jq , a lightweight and flexible command-line JSON processor grep , searches one or more input files for lines containing a match to a specified pattern. It is already available in most *nix distros. If you are on Windows OS, you can use findstr as an alternative to grep or directly use wsl and install your preferred *nix distro and use the tools mentioned above. First steps To quickly get an overview of the cluster or installation, the kubectl plugin is the primary tool to use: the status subcommand provides an overview of a cluster the report subcommand provides the manifests for clusters and the operator deployment. It can also include logs using the --logs option. The report generated via the plugin will include the full cluster manifest. The plugin can be installed on air-gapped systems via packages. Please refer to the plugin document for complete instructions. Are there backups? After getting the cluster manifest with the plugin, you should verify if backups are set up and working. Before proceeding with troubleshooting operations, it may be advisable to perform an emergency backup depending on your findings regarding backups. Refer to the following section for instructions. It is extremely risky to operate a production database without keeping regular backups. Emergency backup In some emergency situations, you might need to take an emergency logical backup of the main app database. Important The instructions you find below must be executed only in emergency situations and the temporary backup files kept under the data protection policies that are effective in your organization. The dump file is indeed stored in the client machine that runs the kubectl command, so make sure that all protections are in place and you have enough space to store the backup file. The following example shows how to take a logical backup of the app database in the cluster-example Postgres cluster, from the cluster-example-1 pod: kubectl exec cluster-example-1 -c postgres \\ -- pg_dump -Fc -d app > app.dump Note You can easily adapt the above command to backup your cluster, by providing the names of the objects you have used in your environment. The above command issues a pg_dump command in custom format, which is the most versatile way to take logical backups in PostgreSQL . The next step is to restore the database. We assume that you are operating on a new PostgreSQL cluster that's been just initialized (so the app database is empty). The following example shows how to restore the above logical backup in the app database of the new-cluster-example Postgres cluster, by connecting to the primary ( new-cluster-example-1 pod): kubectl exec -i new-cluster-example-1 -c postgres \\ -- pg_restore --no-owner --role=app -d app --verbose < app.dump Important The example in this section assumes that you have no other global objects (databases and roles) to dump and restore, as per our recommendation. In case you have multiple roles, make sure you have taken a backup using pg_dumpall -g and you manually restore them in the new cluster. In case you have multiple databases, you need to repeat the above operation one database at a time, making sure you assign the right ownership. If you are not familiar with PostgreSQL, we advise that you do these critical operations under the guidance of a professional support company. The above steps might be integrated into the cnpg plugin at some stage in the future. Logs All resources created and managed by CloudNativePG log to standard output in accordance with Kubernetes conventions, using JSON format . While logs are typically processed at the infrastructure level and include those from CloudNativePG, accessing logs directly from the command line interface is critical during troubleshooting. You have three primary options for doing so: Use the kubectl logs command to retrieve logs from a specific resource, and apply jq for better readability. Use the kubectl cnpg logs command for CloudNativePG-specific logging. Leverage specialized open-source tools like stern , which can aggregate logs from multiple resources (e.g., all pods in a PostgreSQL cluster by selecting the cnpg.io/clusterName label), filter log entries, customize output formats, and more. Note The following sections provide examples of how to retrieve logs for various resources when troubleshooting CloudNativePG. Operator information By default, the CloudNativePG operator is installed in the cnpg-system namespace in Kubernetes as a Deployment (see the \"Details about the deployment\" section for details). You can get a list of the operator pods by running: kubectl get pods -n cnpg-system Note Under normal circumstances, you should have one pod where the operator is running, identified by a name starting with cnpg-controller-manager- . In case you have set up your operator for high availability, you should have more entries. Those pods are managed by a deployment named cnpg-controller-manager . Collect the relevant information about the operator that is running in pod <POD> with: kubectl describe pod -n cnpg-system <POD> Then get the logs from the same pod by running: kubectl logs -n cnpg-system <POD> Gather more information about the operator Get logs from all pods in CloudNativePG operator Deployment (in case you have a multi operator deployment) by running: kubectl logs -n cnpg-system \\ deployment/cnpg-controller-manager --all-containers=true Tip You can add -f flag to above command to follow logs in real time. Save logs to a JSON file by running: kubectl logs -n cnpg-system \\ deployment/cnpg-controller-manager --all-containers=true | \\ jq -r . > cnpg_logs.json Get CloudNativePG operator version by using kubectl-cnpg plugin: kubectl-cnpg status <CLUSTER> Output: Cluster in healthy state Name: cluster-example Namespace: default System ID: 7044925089871458324 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:17.5-3 Primary instance: cluster-example-1 Instances: 3 Ready instances: 3 Current Write LSN: 0/5000000 (Timeline: 1 - WAL File: 000000010000000000000004) Continuous Backup status Not configured Streaming Replication status Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- cluster-example-2 0/5000000 0/5000000 0/5000000 0/5000000 00:00:00 00:00:00 00:00:00 streaming async 0 cluster-example-3 0/5000000 0/5000000 0/5000000 0/5000000 00:00:00.10033 00:00:00.10033 00:00:00.10033 streaming async 0 Instances status Name Database Size Current LSN Replication role Status QoS Manager Version ---- ------------- ----------- ---------------- ------ --- --------------- cluster-example-1 33 MB 0/5000000 Primary OK BestEffort 1.12.0 cluster-example-2 33 MB 0/5000000 Standby (async) OK BestEffort 1.12.0 cluster-example-3 33 MB 0/5000060 Standby (async) OK BestEffort 1.12.0 Cluster information You can check the status of the <CLUSTER> cluster in the NAMESPACE namespace with: kubectl get cluster -n <NAMESPACE> <CLUSTER> Output: NAME AGE INSTANCES READY STATUS PRIMARY <CLUSTER> 10d4h3m 3 3 Cluster in healthy state <CLUSTER>-1 The above example reports a healthy PostgreSQL cluster of 3 instances, all in ready state, and with <CLUSTER>-1 being the primary. In case of unhealthy conditions, you can discover more by getting the manifest of the Cluster resource: kubectl get cluster -o yaml -n <NAMESPACE> <CLUSTER> Another important command to gather is the status one, as provided by the cnpg plugin: kubectl cnpg status -n <NAMESPACE> <CLUSTER> Tip You can print more information by adding the --verbose option. Get PostgreSQL container image version: kubectl describe cluster <CLUSTER_NAME> -n <NAMESPACE> | grep \"Image Name\" Output: Image Name: ghcr.io/cloudnative-pg/postgresql:17.5-3 Note Also you can use kubectl-cnpg status -n <NAMESPACE> <CLUSTER_NAME> to get the same information. Pod information You can retrieve the list of instances that belong to a given PostgreSQL cluster with: kubectl get pod -l cnpg.io/cluster=<CLUSTER> -L role -n <NAMESPACE> Output: NAME READY STATUS RESTARTS AGE ROLE <CLUSTER>-1 1/1 Running 0 10d4h5m primary <CLUSTER>-2 1/1 Running 0 10d4h4m replica <CLUSTER>-3 1/1 Running 0 10d4h4m replica You can check if/how a pod is failing by running: kubectl get pod -n <NAMESPACE> -o yaml <CLUSTER>-<N> You can get all the logs for a given PostgreSQL instance with: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> If you want to limit the search to the PostgreSQL process only, you can run: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq 'select(.logger==\"postgres\") | .record.message' The following example also adds the timestamp: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r 'select(.logger==\"postgres\") | [.ts, .record.message] | @csv' If the timestamp is displayed in Unix Epoch time, you can convert it to a user-friendly format: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r 'select(.logger==\"postgres\") | [(.ts|strflocaltime(\"%Y-%m-%dT%H:%M:%S %Z\")), .record.message] | @csv' Gather and filter extra information about PostgreSQL pods Check logs from a specific pod that has crashed: kubectl logs -n <NAMESPACE> --previous <CLUSTER>-<N> Get FATAL errors from a specific PostgreSQL pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '.record | select(.error_severity == \"FATAL\")' Output: { \"log_time\": \"2021-11-08 14:07:44.520 UTC\", \"user_name\": \"streaming_replica\", \"process_id\": \"68\", \"connection_from\": \"10.244.0.10:60616\", \"session_id\": \"61892f30.44\", \"session_line_num\": \"1\", \"command_tag\": \"startup\", \"session_start_time\": \"2021-11-08 14:07:44 UTC\", \"virtual_transaction_id\": \"3/75\", \"transaction_id\": \"0\", \"error_severity\": \"FATAL\", \"sql_state_code\": \"28000\", \"message\": \"role \\\"streaming_replica\\\" does not exist\", \"backend_type\": \"walsender\" } Filter PostgreSQL DB error messages in logs for a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | jq -r '.err | select(. != null)' Output: dial unix /controller/run/.s.PGSQL.5432: connect: no such file or directory Get messages matching err word from a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | jq -r '.msg' | grep \"err\" Output: 2021-11-08 14:07:39.610 UTC [15] LOG: ending log output to stderr Get all logs from PostgreSQL process from a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '. | select(.logger == \"postgres\") | select(.msg != \"record\") | .msg' Output: 2021-11-08 14:07:52.591 UTC [16] LOG: redirecting log output to logging collector process 2021-11-08 14:07:52.591 UTC [16] HINT: Future log output will appear in directory \"/controller/log\". 2021-11-08 14:07:52.591 UTC [16] LOG: ending log output to stderr 2021-11-08 14:07:52.591 UTC [16] HINT: Future log output will go to log destination \"csvlog\". Get pod logs filtered by fields with values and join them separated by | running: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '[.level, .ts, .logger, .msg] | join(\" | \")' Output: info | 1636380469.5728037 | wal-archive | Backup not configured, skip WAL archiving info | 1636383566.0664876 | postgres | record Backup information You can list the backups that have been created for a named cluster with: kubectl get backup -l cnpg.io/cluster=<CLUSTER> Storage information Sometimes is useful to double-check the StorageClass used by the cluster to have some more context during investigations or troubleshooting, like this: STORAGECLASS=$(kubectl get pvc <POD> -o jsonpath='{.spec.storageClassName}') kubectl get storageclasses $STORAGECLASS -o yaml We are taking the StorageClass from one of the cluster pod here since often clusters are created using the default StorageClass. Node information Kubernetes nodes is where ultimately PostgreSQL pods will be running. It's strategically important to know as much as we can about them. You can get the list of nodes in your Kubernetes cluster with: # look at the worker nodes and their status kubectl get nodes -o wide Additionally, you can gather the list of nodes where the pods of a given cluster are running with: kubectl get pod -l cnpg.io/cluster=<CLUSTER> \\ -L role -n <NAMESPACE> -o wide The latter is important to understand where your pods are distributed - very useful if you are using affinity/anti-affinity rules and/or tolerations . Conditions Like many native kubernetes objects like here , Cluster exposes status.conditions as well. This allows one to 'wait' for a particular event to occur instead of relying on the overall cluster health state. Available conditions as of now are: LastBackupSucceeded ContinuousArchiving Ready LastBackupSucceeded is reporting the status of the latest backup. If set to True the last backup has been taken correctly, it is set to False otherwise. ContinuousArchiving is reporting the status of the WAL archiving. If set to True the last WAL archival process has been terminated correctly, it is set to False otherwise. Ready is True when the cluster has the number of instances specified by the user and the primary instance is ready. This condition can be used in scripts to wait for the cluster to be created. How to wait for a particular condition Backup: $ kubectl wait --for=condition=LastBackupSucceeded cluster/<CLUSTER-NAME> -n <NAMESPACE> ContinuousArchiving: $ kubectl wait --for=condition=ContinuousArchiving cluster/<CLUSTER-NAME> -n <NAMESPACE> Ready (Cluster is ready or not): $ kubectl wait --for=condition=Ready cluster/<CLUSTER-NAME> -n <NAMESPACE> Below is a snippet of a cluster.status that contains a failing condition. $ kubectl get cluster/<cluster-name> -o yaml . . . status: conditions: - message: 'unexpected failure invoking barman-cloud-wal-archive: exit status 2' reason: ContinuousArchivingFailing status: \"False\" type: ContinuousArchiving - message: exit status 2 reason: LastBackupFailed status: \"False\" type: LastBackupSucceeded - message: Cluster Is Not Ready reason: ClusterIsNotReady status: \"False\" type: Ready Networking CloudNativePG requires basic networking and connectivity in place. You can find more information in the networking section. If installing CloudNativePG in an existing environment, there might be network policies in place, or other network configuration made specifically for the cluster, which could have an impact on the required connectivity between the operator and the cluster pods and/or the between the pods. You can look for existing network policies with the following command: kubectl get networkpolicies There might be several network policies set up by the Kubernetes network administrator. $ kubectl get networkpolicies NAME POD-SELECTOR AGE allow-prometheus cnpg.io/cluster=cluster-example 47m default-deny-ingress <none> 57m PostgreSQL core dumps Although rare, PostgreSQL can sometimes crash and generate a core dump in the PGDATA folder. When that happens, normally it is a bug in PostgreSQL (and most likely it has already been solved - this is why it is important to always run the latest minor version of PostgreSQL). CloudNativePG allows you to control what to include in the core dump through the cnpg.io/coredumpFilter annotation. Info Please refer to \"Labels and annotations\" for more details on the standard annotations that CloudNativePG provides. By default, the cnpg.io/coredumpFilter is set to 0x31 in order to exclude shared memory segments from the dump, as this is the safest approach in most cases. Info Please refer to \"Core dump filtering settings\" section of \"The /proc Filesystem\" page of the Linux Kernel documentation . for more details on how to set the bitmask that controls the core dump filter. Important Beware that this setting only takes effect during Pod startup and that changing the annotation doesn't trigger an automated rollout of the instances. Although you might not personally be involved in inspecting core dumps, you might be asked to provide them so that a Postgres expert can look into them. First, verify that you have a core dump in the PGDATA directory with the following command (please run it against the correct pod where the Postgres instance is running): kubectl exec -ti POD -c postgres \\ -- find /var/lib/postgresql/data/pgdata -name 'core.*' Under normal circumstances, this should return an empty set. Suppose, for example, that we have a core dump file: /var/lib/postgresql/data/pgdata/core.14177 Once you have verified the space on disk is sufficient, you can collect the core dump on your machine through kubectl cp as follows: kubectl cp POD:/var/lib/postgresql/data/pgdata/core.14177 core.14177 You now have the file. Make sure you free the space on the server by removing the core dumps. Some known issues Storage is full In case the storage is full, the PostgreSQL pods will not be able to write new data, or, in case of the disk containing the WAL segments being full, PostgreSQL will shut down. If you see messages in the logs about the disk being full, you should increase the size of the affected PVC. You can do this by editing the PVC and changing the spec.resources.requests.storage field. After that, you should also update the Cluster resource with the new size to apply the same change to all the pods. Please look at the \"Volume expansion\" section in the documentation. If the space for WAL segments is exhausted, the pod will be crash-looping and the cluster status will report Not enough disk space . Increasing the size in the PVC and then in the Cluster resource will solve the issue. See also the \"Disk Full Failure\" section Pods are stuck in Pending state In case a Cluster's instance is stuck in the Pending phase, you should check the pod's Events section to get an idea of the reasons behind this: kubectl describe pod -n <NAMESPACE> <POD> Some of the possible causes for this are: No nodes are matching the nodeSelector Tolerations are not correctly configured to match the nodes' taints No nodes are available at all: this could also be related to cluster-autoscaler hitting some limits, or having some temporary issues In this case, it could also be useful to check events in the namespace: kubectl get events -n <NAMESPACE> # list events in chronological order kubectl get events -n <NAMESPACE> --sort-by=.metadata.creationTimestamp Replicas out of sync when no backup is configured Sometimes replicas might be switched off for a bit of time due to maintenance reasons (think of when a Kubernetes nodes is drained). In case your cluster does not have backup configured, when replicas come back up, they might require a WAL file that is not present anymore on the primary (having been already recycled according to the WAL management policies as mentioned in \"The postgresql section\" ), and fall out of synchronization. Similarly, when pg_rewind might require a WAL file that is not present anymore in the former primary, reporting pg_rewind: error: could not open file . In these cases, pods cannot become ready anymore, and you are required to delete the PVC and let the operator rebuild the replica. If you rely on dynamically provisioned Persistent Volumes, and you are confident in deleting the PV itself, you can do so with: PODNAME=<POD> VOLNAME=$(kubectl get pv -o json | \\ jq -r '.items[]|select(.spec.claimRef.name=='\\\"$PODNAME\\\"')|.metadata.name') kubectl delete pod/$PODNAME pvc/$PODNAME pvc/$PODNAME-wal pv/$VOLNAME Cluster stuck in Creating new replica Cluster is stuck in \"Creating a new replica\", while pod logs don't show relevant problems. This has been found to be related to the next issue on connectivity . Networking issues are reflected in the status column as follows: Instance Status Extraction Error: HTTP communication issue Networking is impaired by installed Network Policies As pointed out in the networking section , local network policies could prevent some of the required connectivity. A tell-tale sign that connectivity is impaired is the presence in the operator logs of messages like: \"Cannot extract Pod status\", [\u2026snipped\u2026] \"Get \\\"http://<pod IP>:8000/pg/status\\\": dial tcp <pod IP>:8000: i/o timeout\" You should list the network policies, and look for any policies restricting connectivity. $ kubectl get networkpolicies NAME POD-SELECTOR AGE allow-prometheus cnpg.io/cluster=cluster-example 47m default-deny-ingress <none> 57m For example, in the listing above, default-deny-ingress seems a likely culprit. You can drill into it: $ kubectl get networkpolicies default-deny-ingress -o yaml <\u2026snipped\u2026> spec: podSelector: {} policyTypes: - Ingress In the networking page you can find a network policy file that you can customize to create a NetworkPolicy explicitly allowing the operator to connect cross-namespace to cluster pods. Error while bootstrapping the data directory If your Cluster's initialization job crashes with a \"Bus error (core dumped) child process exited with exit code 135\", you likely need to fix the Cluster hugepages settings. The reason is the incomplete support of hugepages in the cgroup v1 that should be fixed in v2. For more information, check the PostgreSQL BUG #17757: Not honoring huge_pages setting during initdb causes DB crash in Kubernetes . To check whether hugepages are enabled, run grep HugePages /proc/meminfo on the Kubernetes node and check if hugepages are present, their size, and how many are free. If the hugepages are present, you need to configure how much hugepages memory every PostgreSQL pod should have available. For example: postgresql: parameters: shared_buffers: \"128MB\" resources: requests: memory: \"512Mi\" limits: hugepages-2Mi: \"512Mi\" Please remember that you must have enough hugepages memory available to schedule every Pod in the Cluster (in the example above, at least 512MiB per Pod must be free). Bootstrap job hangs in running status If your Cluster's initialization job hangs while in Running status with the message: \"error while waiting for the API server to be reachable\", you probably have a network issue preventing communication with the Kubernetes API server. Initialization jobs (like most of jobs) need to access the Kubernetes API. Please check your networking. Another possible cause is when you have sidecar injection configured. Sidecars such as Istio may make the network temporarily unavailable during startup. If you have sidecar injection enabled, retry with injection disabled. Replicas take over two minutes to reconnect after a failover When the primary instance fails, the operator promotes the most advanced standby to the primary role. Other standby instances then attempt to reconnect to the -rw service for replication. However, during this reconnection process, kube-proxy may not have updated its routing information yet. As a result, the initial SYN packet sent by the standby instances might fail to reach its intended destination. If the network is configured to silently drop packets instead of rejecting them, standby instances will not receive a response and will retry the connection after an exponential backoff period. On Linux systems, the default value for the tcp_syn_retries kernel parameter is 6, meaning the system will attempt to establish the connection for approximately 127 seconds before giving up. This prolonged retry period can significantly delay the reconnection process. For more details, consult the tcp_syn_retries documentation . You can work around this issue by setting STANDBY_TCP_USER_TIMEOUT in the operator configuration . This will cause the standby instances to close the TCP connection if the initial SYN packet is not acknowledged within the specified timeout, allowing them to retry the connection more quickly.","title":"Troubleshooting"},{"location":"troubleshooting/#troubleshooting","text":"In this page, you can find some basic information on how to troubleshoot CloudNativePG in your Kubernetes cluster deployment. Hint As a Kubernetes administrator, you should have the kubectl Cheat Sheet page bookmarked!","title":"Troubleshooting"},{"location":"troubleshooting/#before-you-start","text":"","title":"Before you start"},{"location":"troubleshooting/#kubernetes-environment","text":"What can make a difference in a troubleshooting activity is to provide clear information about the underlying Kubernetes system. Make sure you know: the Kubernetes distribution and version you are using the specifications of the nodes where PostgreSQL is running as much as you can about the actual storage , including storage class and benchmarks you have done before going into production. which relevant Kubernetes applications you are using in your cluster (i.e. Prometheus, Grafana, Istio, Certmanager, ...) the situation of continuous backup, in particular if it's in place and working correctly: in case it is not, make sure you take an emergency backup before performing any potential disrupting operation","title":"Kubernetes environment"},{"location":"troubleshooting/#useful-utilities","text":"On top of the mandatory kubectl utility, for troubleshooting, we recommend the following plugins/utilities to be available in your system: cnpg plugin for kubectl jq , a lightweight and flexible command-line JSON processor grep , searches one or more input files for lines containing a match to a specified pattern. It is already available in most *nix distros. If you are on Windows OS, you can use findstr as an alternative to grep or directly use wsl and install your preferred *nix distro and use the tools mentioned above.","title":"Useful utilities"},{"location":"troubleshooting/#first-steps","text":"To quickly get an overview of the cluster or installation, the kubectl plugin is the primary tool to use: the status subcommand provides an overview of a cluster the report subcommand provides the manifests for clusters and the operator deployment. It can also include logs using the --logs option. The report generated via the plugin will include the full cluster manifest. The plugin can be installed on air-gapped systems via packages. Please refer to the plugin document for complete instructions.","title":"First steps"},{"location":"troubleshooting/#are-there-backups","text":"After getting the cluster manifest with the plugin, you should verify if backups are set up and working. Before proceeding with troubleshooting operations, it may be advisable to perform an emergency backup depending on your findings regarding backups. Refer to the following section for instructions. It is extremely risky to operate a production database without keeping regular backups.","title":"Are there backups?"},{"location":"troubleshooting/#emergency-backup","text":"In some emergency situations, you might need to take an emergency logical backup of the main app database. Important The instructions you find below must be executed only in emergency situations and the temporary backup files kept under the data protection policies that are effective in your organization. The dump file is indeed stored in the client machine that runs the kubectl command, so make sure that all protections are in place and you have enough space to store the backup file. The following example shows how to take a logical backup of the app database in the cluster-example Postgres cluster, from the cluster-example-1 pod: kubectl exec cluster-example-1 -c postgres \\ -- pg_dump -Fc -d app > app.dump Note You can easily adapt the above command to backup your cluster, by providing the names of the objects you have used in your environment. The above command issues a pg_dump command in custom format, which is the most versatile way to take logical backups in PostgreSQL . The next step is to restore the database. We assume that you are operating on a new PostgreSQL cluster that's been just initialized (so the app database is empty). The following example shows how to restore the above logical backup in the app database of the new-cluster-example Postgres cluster, by connecting to the primary ( new-cluster-example-1 pod): kubectl exec -i new-cluster-example-1 -c postgres \\ -- pg_restore --no-owner --role=app -d app --verbose < app.dump Important The example in this section assumes that you have no other global objects (databases and roles) to dump and restore, as per our recommendation. In case you have multiple roles, make sure you have taken a backup using pg_dumpall -g and you manually restore them in the new cluster. In case you have multiple databases, you need to repeat the above operation one database at a time, making sure you assign the right ownership. If you are not familiar with PostgreSQL, we advise that you do these critical operations under the guidance of a professional support company. The above steps might be integrated into the cnpg plugin at some stage in the future.","title":"Emergency backup"},{"location":"troubleshooting/#logs","text":"All resources created and managed by CloudNativePG log to standard output in accordance with Kubernetes conventions, using JSON format . While logs are typically processed at the infrastructure level and include those from CloudNativePG, accessing logs directly from the command line interface is critical during troubleshooting. You have three primary options for doing so: Use the kubectl logs command to retrieve logs from a specific resource, and apply jq for better readability. Use the kubectl cnpg logs command for CloudNativePG-specific logging. Leverage specialized open-source tools like stern , which can aggregate logs from multiple resources (e.g., all pods in a PostgreSQL cluster by selecting the cnpg.io/clusterName label), filter log entries, customize output formats, and more. Note The following sections provide examples of how to retrieve logs for various resources when troubleshooting CloudNativePG.","title":"Logs"},{"location":"troubleshooting/#operator-information","text":"By default, the CloudNativePG operator is installed in the cnpg-system namespace in Kubernetes as a Deployment (see the \"Details about the deployment\" section for details). You can get a list of the operator pods by running: kubectl get pods -n cnpg-system Note Under normal circumstances, you should have one pod where the operator is running, identified by a name starting with cnpg-controller-manager- . In case you have set up your operator for high availability, you should have more entries. Those pods are managed by a deployment named cnpg-controller-manager . Collect the relevant information about the operator that is running in pod <POD> with: kubectl describe pod -n cnpg-system <POD> Then get the logs from the same pod by running: kubectl logs -n cnpg-system <POD>","title":"Operator information"},{"location":"troubleshooting/#gather-more-information-about-the-operator","text":"Get logs from all pods in CloudNativePG operator Deployment (in case you have a multi operator deployment) by running: kubectl logs -n cnpg-system \\ deployment/cnpg-controller-manager --all-containers=true Tip You can add -f flag to above command to follow logs in real time. Save logs to a JSON file by running: kubectl logs -n cnpg-system \\ deployment/cnpg-controller-manager --all-containers=true | \\ jq -r . > cnpg_logs.json Get CloudNativePG operator version by using kubectl-cnpg plugin: kubectl-cnpg status <CLUSTER> Output: Cluster in healthy state Name: cluster-example Namespace: default System ID: 7044925089871458324 PostgreSQL Image: ghcr.io/cloudnative-pg/postgresql:17.5-3 Primary instance: cluster-example-1 Instances: 3 Ready instances: 3 Current Write LSN: 0/5000000 (Timeline: 1 - WAL File: 000000010000000000000004) Continuous Backup status Not configured Streaming Replication status Name Sent LSN Write LSN Flush LSN Replay LSN Write Lag Flush Lag Replay Lag State Sync State Sync Priority ---- -------- --------- --------- ---------- --------- --------- ---------- ----- ---------- ------------- cluster-example-2 0/5000000 0/5000000 0/5000000 0/5000000 00:00:00 00:00:00 00:00:00 streaming async 0 cluster-example-3 0/5000000 0/5000000 0/5000000 0/5000000 00:00:00.10033 00:00:00.10033 00:00:00.10033 streaming async 0 Instances status Name Database Size Current LSN Replication role Status QoS Manager Version ---- ------------- ----------- ---------------- ------ --- --------------- cluster-example-1 33 MB 0/5000000 Primary OK BestEffort 1.12.0 cluster-example-2 33 MB 0/5000000 Standby (async) OK BestEffort 1.12.0 cluster-example-3 33 MB 0/5000060 Standby (async) OK BestEffort 1.12.0","title":"Gather more information about the operator"},{"location":"troubleshooting/#cluster-information","text":"You can check the status of the <CLUSTER> cluster in the NAMESPACE namespace with: kubectl get cluster -n <NAMESPACE> <CLUSTER> Output: NAME AGE INSTANCES READY STATUS PRIMARY <CLUSTER> 10d4h3m 3 3 Cluster in healthy state <CLUSTER>-1 The above example reports a healthy PostgreSQL cluster of 3 instances, all in ready state, and with <CLUSTER>-1 being the primary. In case of unhealthy conditions, you can discover more by getting the manifest of the Cluster resource: kubectl get cluster -o yaml -n <NAMESPACE> <CLUSTER> Another important command to gather is the status one, as provided by the cnpg plugin: kubectl cnpg status -n <NAMESPACE> <CLUSTER> Tip You can print more information by adding the --verbose option. Get PostgreSQL container image version: kubectl describe cluster <CLUSTER_NAME> -n <NAMESPACE> | grep \"Image Name\" Output: Image Name: ghcr.io/cloudnative-pg/postgresql:17.5-3 Note Also you can use kubectl-cnpg status -n <NAMESPACE> <CLUSTER_NAME> to get the same information.","title":"Cluster information"},{"location":"troubleshooting/#pod-information","text":"You can retrieve the list of instances that belong to a given PostgreSQL cluster with: kubectl get pod -l cnpg.io/cluster=<CLUSTER> -L role -n <NAMESPACE> Output: NAME READY STATUS RESTARTS AGE ROLE <CLUSTER>-1 1/1 Running 0 10d4h5m primary <CLUSTER>-2 1/1 Running 0 10d4h4m replica <CLUSTER>-3 1/1 Running 0 10d4h4m replica You can check if/how a pod is failing by running: kubectl get pod -n <NAMESPACE> -o yaml <CLUSTER>-<N> You can get all the logs for a given PostgreSQL instance with: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> If you want to limit the search to the PostgreSQL process only, you can run: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq 'select(.logger==\"postgres\") | .record.message' The following example also adds the timestamp: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r 'select(.logger==\"postgres\") | [.ts, .record.message] | @csv' If the timestamp is displayed in Unix Epoch time, you can convert it to a user-friendly format: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r 'select(.logger==\"postgres\") | [(.ts|strflocaltime(\"%Y-%m-%dT%H:%M:%S %Z\")), .record.message] | @csv'","title":"Pod information"},{"location":"troubleshooting/#gather-and-filter-extra-information-about-postgresql-pods","text":"Check logs from a specific pod that has crashed: kubectl logs -n <NAMESPACE> --previous <CLUSTER>-<N> Get FATAL errors from a specific PostgreSQL pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '.record | select(.error_severity == \"FATAL\")' Output: { \"log_time\": \"2021-11-08 14:07:44.520 UTC\", \"user_name\": \"streaming_replica\", \"process_id\": \"68\", \"connection_from\": \"10.244.0.10:60616\", \"session_id\": \"61892f30.44\", \"session_line_num\": \"1\", \"command_tag\": \"startup\", \"session_start_time\": \"2021-11-08 14:07:44 UTC\", \"virtual_transaction_id\": \"3/75\", \"transaction_id\": \"0\", \"error_severity\": \"FATAL\", \"sql_state_code\": \"28000\", \"message\": \"role \\\"streaming_replica\\\" does not exist\", \"backend_type\": \"walsender\" } Filter PostgreSQL DB error messages in logs for a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | jq -r '.err | select(. != null)' Output: dial unix /controller/run/.s.PGSQL.5432: connect: no such file or directory Get messages matching err word from a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | jq -r '.msg' | grep \"err\" Output: 2021-11-08 14:07:39.610 UTC [15] LOG: ending log output to stderr Get all logs from PostgreSQL process from a specific pod: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '. | select(.logger == \"postgres\") | select(.msg != \"record\") | .msg' Output: 2021-11-08 14:07:52.591 UTC [16] LOG: redirecting log output to logging collector process 2021-11-08 14:07:52.591 UTC [16] HINT: Future log output will appear in directory \"/controller/log\". 2021-11-08 14:07:52.591 UTC [16] LOG: ending log output to stderr 2021-11-08 14:07:52.591 UTC [16] HINT: Future log output will go to log destination \"csvlog\". Get pod logs filtered by fields with values and join them separated by | running: kubectl logs -n <NAMESPACE> <CLUSTER>-<N> | \\ jq -r '[.level, .ts, .logger, .msg] | join(\" | \")' Output: info | 1636380469.5728037 | wal-archive | Backup not configured, skip WAL archiving info | 1636383566.0664876 | postgres | record","title":"Gather and filter extra information about PostgreSQL pods"},{"location":"troubleshooting/#backup-information","text":"You can list the backups that have been created for a named cluster with: kubectl get backup -l cnpg.io/cluster=<CLUSTER>","title":"Backup information"},{"location":"troubleshooting/#storage-information","text":"Sometimes is useful to double-check the StorageClass used by the cluster to have some more context during investigations or troubleshooting, like this: STORAGECLASS=$(kubectl get pvc <POD> -o jsonpath='{.spec.storageClassName}') kubectl get storageclasses $STORAGECLASS -o yaml We are taking the StorageClass from one of the cluster pod here since often clusters are created using the default StorageClass.","title":"Storage information"},{"location":"troubleshooting/#node-information","text":"Kubernetes nodes is where ultimately PostgreSQL pods will be running. It's strategically important to know as much as we can about them. You can get the list of nodes in your Kubernetes cluster with: # look at the worker nodes and their status kubectl get nodes -o wide Additionally, you can gather the list of nodes where the pods of a given cluster are running with: kubectl get pod -l cnpg.io/cluster=<CLUSTER> \\ -L role -n <NAMESPACE> -o wide The latter is important to understand where your pods are distributed - very useful if you are using affinity/anti-affinity rules and/or tolerations .","title":"Node information"},{"location":"troubleshooting/#conditions","text":"Like many native kubernetes objects like here , Cluster exposes status.conditions as well. This allows one to 'wait' for a particular event to occur instead of relying on the overall cluster health state. Available conditions as of now are: LastBackupSucceeded ContinuousArchiving Ready LastBackupSucceeded is reporting the status of the latest backup. If set to True the last backup has been taken correctly, it is set to False otherwise. ContinuousArchiving is reporting the status of the WAL archiving. If set to True the last WAL archival process has been terminated correctly, it is set to False otherwise. Ready is True when the cluster has the number of instances specified by the user and the primary instance is ready. This condition can be used in scripts to wait for the cluster to be created.","title":"Conditions"},{"location":"troubleshooting/#how-to-wait-for-a-particular-condition","text":"Backup: $ kubectl wait --for=condition=LastBackupSucceeded cluster/<CLUSTER-NAME> -n <NAMESPACE> ContinuousArchiving: $ kubectl wait --for=condition=ContinuousArchiving cluster/<CLUSTER-NAME> -n <NAMESPACE> Ready (Cluster is ready or not): $ kubectl wait --for=condition=Ready cluster/<CLUSTER-NAME> -n <NAMESPACE> Below is a snippet of a cluster.status that contains a failing condition. $ kubectl get cluster/<cluster-name> -o yaml . . . status: conditions: - message: 'unexpected failure invoking barman-cloud-wal-archive: exit status 2' reason: ContinuousArchivingFailing status: \"False\" type: ContinuousArchiving - message: exit status 2 reason: LastBackupFailed status: \"False\" type: LastBackupSucceeded - message: Cluster Is Not Ready reason: ClusterIsNotReady status: \"False\" type: Ready","title":"How to wait for a particular condition"},{"location":"troubleshooting/#networking","text":"CloudNativePG requires basic networking and connectivity in place. You can find more information in the networking section. If installing CloudNativePG in an existing environment, there might be network policies in place, or other network configuration made specifically for the cluster, which could have an impact on the required connectivity between the operator and the cluster pods and/or the between the pods. You can look for existing network policies with the following command: kubectl get networkpolicies There might be several network policies set up by the Kubernetes network administrator. $ kubectl get networkpolicies NAME POD-SELECTOR AGE allow-prometheus cnpg.io/cluster=cluster-example 47m default-deny-ingress <none> 57m","title":"Networking"},{"location":"troubleshooting/#postgresql-core-dumps","text":"Although rare, PostgreSQL can sometimes crash and generate a core dump in the PGDATA folder. When that happens, normally it is a bug in PostgreSQL (and most likely it has already been solved - this is why it is important to always run the latest minor version of PostgreSQL). CloudNativePG allows you to control what to include in the core dump through the cnpg.io/coredumpFilter annotation. Info Please refer to \"Labels and annotations\" for more details on the standard annotations that CloudNativePG provides. By default, the cnpg.io/coredumpFilter is set to 0x31 in order to exclude shared memory segments from the dump, as this is the safest approach in most cases. Info Please refer to \"Core dump filtering settings\" section of \"The /proc Filesystem\" page of the Linux Kernel documentation . for more details on how to set the bitmask that controls the core dump filter. Important Beware that this setting only takes effect during Pod startup and that changing the annotation doesn't trigger an automated rollout of the instances. Although you might not personally be involved in inspecting core dumps, you might be asked to provide them so that a Postgres expert can look into them. First, verify that you have a core dump in the PGDATA directory with the following command (please run it against the correct pod where the Postgres instance is running): kubectl exec -ti POD -c postgres \\ -- find /var/lib/postgresql/data/pgdata -name 'core.*' Under normal circumstances, this should return an empty set. Suppose, for example, that we have a core dump file: /var/lib/postgresql/data/pgdata/core.14177 Once you have verified the space on disk is sufficient, you can collect the core dump on your machine through kubectl cp as follows: kubectl cp POD:/var/lib/postgresql/data/pgdata/core.14177 core.14177 You now have the file. Make sure you free the space on the server by removing the core dumps.","title":"PostgreSQL core dumps"},{"location":"troubleshooting/#some-known-issues","text":"","title":"Some known issues"},{"location":"troubleshooting/#storage-is-full","text":"In case the storage is full, the PostgreSQL pods will not be able to write new data, or, in case of the disk containing the WAL segments being full, PostgreSQL will shut down. If you see messages in the logs about the disk being full, you should increase the size of the affected PVC. You can do this by editing the PVC and changing the spec.resources.requests.storage field. After that, you should also update the Cluster resource with the new size to apply the same change to all the pods. Please look at the \"Volume expansion\" section in the documentation. If the space for WAL segments is exhausted, the pod will be crash-looping and the cluster status will report Not enough disk space . Increasing the size in the PVC and then in the Cluster resource will solve the issue. See also the \"Disk Full Failure\" section","title":"Storage is full"},{"location":"troubleshooting/#pods-are-stuck-in-pending-state","text":"In case a Cluster's instance is stuck in the Pending phase, you should check the pod's Events section to get an idea of the reasons behind this: kubectl describe pod -n <NAMESPACE> <POD> Some of the possible causes for this are: No nodes are matching the nodeSelector Tolerations are not correctly configured to match the nodes' taints No nodes are available at all: this could also be related to cluster-autoscaler hitting some limits, or having some temporary issues In this case, it could also be useful to check events in the namespace: kubectl get events -n <NAMESPACE> # list events in chronological order kubectl get events -n <NAMESPACE> --sort-by=.metadata.creationTimestamp","title":"Pods are stuck in Pending state"},{"location":"troubleshooting/#replicas-out-of-sync-when-no-backup-is-configured","text":"Sometimes replicas might be switched off for a bit of time due to maintenance reasons (think of when a Kubernetes nodes is drained). In case your cluster does not have backup configured, when replicas come back up, they might require a WAL file that is not present anymore on the primary (having been already recycled according to the WAL management policies as mentioned in \"The postgresql section\" ), and fall out of synchronization. Similarly, when pg_rewind might require a WAL file that is not present anymore in the former primary, reporting pg_rewind: error: could not open file . In these cases, pods cannot become ready anymore, and you are required to delete the PVC and let the operator rebuild the replica. If you rely on dynamically provisioned Persistent Volumes, and you are confident in deleting the PV itself, you can do so with: PODNAME=<POD> VOLNAME=$(kubectl get pv -o json | \\ jq -r '.items[]|select(.spec.claimRef.name=='\\\"$PODNAME\\\"')|.metadata.name') kubectl delete pod/$PODNAME pvc/$PODNAME pvc/$PODNAME-wal pv/$VOLNAME","title":"Replicas out of sync when no backup is configured"},{"location":"troubleshooting/#cluster-stuck-in-creating-new-replica","text":"Cluster is stuck in \"Creating a new replica\", while pod logs don't show relevant problems. This has been found to be related to the next issue on connectivity . Networking issues are reflected in the status column as follows: Instance Status Extraction Error: HTTP communication issue","title":"Cluster stuck in Creating new replica"},{"location":"troubleshooting/#networking-is-impaired-by-installed-network-policies","text":"As pointed out in the networking section , local network policies could prevent some of the required connectivity. A tell-tale sign that connectivity is impaired is the presence in the operator logs of messages like: \"Cannot extract Pod status\", [\u2026snipped\u2026] \"Get \\\"http://<pod IP>:8000/pg/status\\\": dial tcp <pod IP>:8000: i/o timeout\" You should list the network policies, and look for any policies restricting connectivity. $ kubectl get networkpolicies NAME POD-SELECTOR AGE allow-prometheus cnpg.io/cluster=cluster-example 47m default-deny-ingress <none> 57m For example, in the listing above, default-deny-ingress seems a likely culprit. You can drill into it: $ kubectl get networkpolicies default-deny-ingress -o yaml <\u2026snipped\u2026> spec: podSelector: {} policyTypes: - Ingress In the networking page you can find a network policy file that you can customize to create a NetworkPolicy explicitly allowing the operator to connect cross-namespace to cluster pods.","title":"Networking is impaired by installed Network Policies"},{"location":"troubleshooting/#error-while-bootstrapping-the-data-directory","text":"If your Cluster's initialization job crashes with a \"Bus error (core dumped) child process exited with exit code 135\", you likely need to fix the Cluster hugepages settings. The reason is the incomplete support of hugepages in the cgroup v1 that should be fixed in v2. For more information, check the PostgreSQL BUG #17757: Not honoring huge_pages setting during initdb causes DB crash in Kubernetes . To check whether hugepages are enabled, run grep HugePages /proc/meminfo on the Kubernetes node and check if hugepages are present, their size, and how many are free. If the hugepages are present, you need to configure how much hugepages memory every PostgreSQL pod should have available. For example: postgresql: parameters: shared_buffers: \"128MB\" resources: requests: memory: \"512Mi\" limits: hugepages-2Mi: \"512Mi\" Please remember that you must have enough hugepages memory available to schedule every Pod in the Cluster (in the example above, at least 512MiB per Pod must be free).","title":"Error while bootstrapping the data directory"},{"location":"troubleshooting/#bootstrap-job-hangs-in-running-status","text":"If your Cluster's initialization job hangs while in Running status with the message: \"error while waiting for the API server to be reachable\", you probably have a network issue preventing communication with the Kubernetes API server. Initialization jobs (like most of jobs) need to access the Kubernetes API. Please check your networking. Another possible cause is when you have sidecar injection configured. Sidecars such as Istio may make the network temporarily unavailable during startup. If you have sidecar injection enabled, retry with injection disabled.","title":"Bootstrap job hangs in running status"},{"location":"troubleshooting/#replicas-take-over-two-minutes-to-reconnect-after-a-failover","text":"When the primary instance fails, the operator promotes the most advanced standby to the primary role. Other standby instances then attempt to reconnect to the -rw service for replication. However, during this reconnection process, kube-proxy may not have updated its routing information yet. As a result, the initial SYN packet sent by the standby instances might fail to reach its intended destination. If the network is configured to silently drop packets instead of rejecting them, standby instances will not receive a response and will retry the connection after an exponential backoff period. On Linux systems, the default value for the tcp_syn_retries kernel parameter is 6, meaning the system will attempt to establish the connection for approximately 127 seconds before giving up. This prolonged retry period can significantly delay the reconnection process. For more details, consult the tcp_syn_retries documentation . You can work around this issue by setting STANDBY_TCP_USER_TIMEOUT in the operator configuration . This will cause the standby instances to close the TCP connection if the initial SYN packet is not acknowledged within the specified timeout, allowing them to retry the connection more quickly.","title":"Replicas take over two minutes to reconnect after a failover"},{"location":"use_cases/","text":"Use cases CloudNativePG has been designed to work with applications that reside in the same Kubernetes cluster, for a full cloud native experience. However, it might happen that, while the database can be hosted inside a Kubernetes cluster, applications cannot be containerized at the same time and need to run in a traditional environment such as a VM. Case 1: Applications inside Kubernetes In a typical situation, the application and the database run in the same namespace inside a Kubernetes cluster. The application, normally stateless, is managed as a standard Deployment , with multiple replicas spread over different Kubernetes node, and internally exposed through a ClusterIP service. The service is exposed externally to the end user through an Ingress and the provider's load balancer facility, via HTTPS. The application uses the backend PostgreSQL database to keep track of the state in a reliable and persistent way. The application refers to the read-write service exposed by the Cluster resource defined by CloudNativePG, which points to the current primary instance, through a TLS connection. The Cluster resource embeds the logic of single primary and multiple standby architecture, hiding the complexity of managing a high availability cluster in Postgres. Case 2: Applications outside Kubernetes Another possible use case is to manage your PostgreSQL database inside Kubernetes, while having your applications outside of it (for example in a virtualized environment). In this case, PostgreSQL is represented by an IP address (or host name) and a TCP port, corresponding to the defined Ingress resource in Kubernetes (normally a LoadBalancer service type as explained in the \"Service Management\" page). The application can still benefit from a TLS connection to PostgreSQL.","title":"Use cases"},{"location":"use_cases/#use-cases","text":"CloudNativePG has been designed to work with applications that reside in the same Kubernetes cluster, for a full cloud native experience. However, it might happen that, while the database can be hosted inside a Kubernetes cluster, applications cannot be containerized at the same time and need to run in a traditional environment such as a VM.","title":"Use cases"},{"location":"use_cases/#case-1-applications-inside-kubernetes","text":"In a typical situation, the application and the database run in the same namespace inside a Kubernetes cluster. The application, normally stateless, is managed as a standard Deployment , with multiple replicas spread over different Kubernetes node, and internally exposed through a ClusterIP service. The service is exposed externally to the end user through an Ingress and the provider's load balancer facility, via HTTPS. The application uses the backend PostgreSQL database to keep track of the state in a reliable and persistent way. The application refers to the read-write service exposed by the Cluster resource defined by CloudNativePG, which points to the current primary instance, through a TLS connection. The Cluster resource embeds the logic of single primary and multiple standby architecture, hiding the complexity of managing a high availability cluster in Postgres.","title":"Case 1: Applications inside Kubernetes"},{"location":"use_cases/#case-2-applications-outside-kubernetes","text":"Another possible use case is to manage your PostgreSQL database inside Kubernetes, while having your applications outside of it (for example in a virtualized environment). In this case, PostgreSQL is represented by an IP address (or host name) and a TCP port, corresponding to the defined Ingress resource in Kubernetes (normally a LoadBalancer service type as explained in the \"Service Management\" page). The application can still benefit from a TLS connection to PostgreSQL.","title":"Case 2: Applications outside Kubernetes"},{"location":"wal_archiving/","text":"WAL archiving Write-Ahead Log (WAL) archiving in CloudNativePG is the process of continuously shipping WAL files to a designated object store from the PostgreSQL primary. These archives are essential for enabling Point-In-Time Recovery (PITR) and are a foundational component for both object store and volume snapshot-based backup strategies. Plugin-Based Architecture CloudNativePG supports WAL archiving through a plugin-based mechanism , defined via the spec.pluginConfiguration section of the Cluster resource. Only one plugin at a time can be responsible for WAL archiving. This is configured by setting the isWALArchiver field to true within the plugin configuration. Supported Plugins Currently, the Barman Cloud Plugin is the only officially supported WAL archiving plugin maintained by the CloudNativePG Community. For full documentation, configuration options, and best practices, see the Barman Cloud Plugin documentation . Deprecation Notice: Native Barman Cloud CloudNativePG still supports WAL archiving natively through the .spec.backup.barmanObjectStore field. While still functional, this interface is deprecated and will be removed in a future release. Important All new deployments are strongly encouraged to adopt the plugin-based architecture, which offers a more flexible and maintainable approach. If you are currently using the native .spec.backup.barmanObjectStore approach, refer to the official guide for a smooth transition: Migrating from Built-in CloudNativePG Backup . About the archive timeout By default, CloudNativePG sets archive_timeout to 5min , ensuring that WAL files, even in case of low workloads, are closed and archived at least every 5 minutes, providing a deterministic time-based value for your Recovery Point Objective ( RPO ). Even though you change the value of the archive_timeout setting in the PostgreSQL configuration , our experience suggests that the default value set by the operator is suitable for most use cases.","title":"WAL archiving"},{"location":"wal_archiving/#wal-archiving","text":"Write-Ahead Log (WAL) archiving in CloudNativePG is the process of continuously shipping WAL files to a designated object store from the PostgreSQL primary. These archives are essential for enabling Point-In-Time Recovery (PITR) and are a foundational component for both object store and volume snapshot-based backup strategies.","title":"WAL archiving"},{"location":"wal_archiving/#plugin-based-architecture","text":"CloudNativePG supports WAL archiving through a plugin-based mechanism , defined via the spec.pluginConfiguration section of the Cluster resource. Only one plugin at a time can be responsible for WAL archiving. This is configured by setting the isWALArchiver field to true within the plugin configuration.","title":"Plugin-Based Architecture"},{"location":"wal_archiving/#supported-plugins","text":"Currently, the Barman Cloud Plugin is the only officially supported WAL archiving plugin maintained by the CloudNativePG Community. For full documentation, configuration options, and best practices, see the Barman Cloud Plugin documentation .","title":"Supported Plugins"},{"location":"wal_archiving/#deprecation-notice-native-barman-cloud","text":"CloudNativePG still supports WAL archiving natively through the .spec.backup.barmanObjectStore field. While still functional, this interface is deprecated and will be removed in a future release. Important All new deployments are strongly encouraged to adopt the plugin-based architecture, which offers a more flexible and maintainable approach. If you are currently using the native .spec.backup.barmanObjectStore approach, refer to the official guide for a smooth transition: Migrating from Built-in CloudNativePG Backup .","title":"Deprecation Notice: Native Barman Cloud"},{"location":"wal_archiving/#about-the-archive-timeout","text":"By default, CloudNativePG sets archive_timeout to 5min , ensuring that WAL files, even in case of low workloads, are closed and archived at least every 5 minutes, providing a deterministic time-based value for your Recovery Point Objective ( RPO ). Even though you change the value of the archive_timeout setting in the PostgreSQL configuration , our experience suggests that the default value set by the operator is suitable for most use cases.","title":"About the archive timeout"},{"location":"appendixes/backup_barmanobjectstore/","text":"Appendix B - Backup on object stores Warning As of CloudNativePG 1.26, native Barman Cloud support is deprecated in favor of the Barman Cloud Plugin . This page has been moved to the appendix for reference purposes. While the native integration remains functional for now, we strongly recommend beginning a gradual migration to the plugin-based interface after appropriate testing. For guidance, see Migrating from Built-in CloudNativePG Backup . CloudNativePG natively supports online/hot backup of PostgreSQL clusters through continuous physical backup and WAL archiving on an object store. This means that the database is always up (no downtime required) and that Point In Time Recovery is available. The operator can orchestrate a continuous backup infrastructure that is based on the Barman Cloud tool. Instead of using the classical architecture with a Barman server, which backs up many PostgreSQL instances, the operator relies on the barman-cloud-wal-archive , barman-cloud-check-wal-archive , barman-cloud-backup , barman-cloud-backup-list , and barman-cloud-backup-delete tools. As a result, base backups will be tarballs . Both base backups and WAL files can be compressed and encrypted. For this, it is required to use an image with barman-cli-cloud included. You can use the image ghcr.io/cloudnative-pg/postgresql for this scope, as it is composed of a community PostgreSQL image and the latest barman-cli-cloud package. Important Always ensure that you are running the latest version of the operands in your system to take advantage of the improvements introduced in Barman cloud (as well as improve the security aspects of your cluster). A backup is performed from a primary or a designated primary instance in a Cluster (please refer to replica clusters for more information about designated primary instances), or alternatively on a standby . Common object stores If you are looking for a specific object store such as AWS S3 , Microsoft Azure Blob Storage , Google Cloud Storage , or a compatible provider, please refer to Appendix C - Common object stores for backups . WAL archiving WAL archiving is the process that feeds a WAL archive in CloudNativePG. The WAL archive is defined in the .spec.backup.barmanObjectStore stanza of a Cluster resource. Info Please refer to BarmanObjectStoreConfiguration in the barman-cloud API for a full list of options. If required, you can choose to compress WAL files as soon as they are uploaded and/or encrypt them: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: compression: gzip encryption: AES256 You can configure the encryption directly in your bucket, and the operator will use it unless you override it in the cluster configuration. PostgreSQL implements a sequential archiving scheme, where the archive_command will be executed sequentially for every WAL segment to be archived. Important By default, CloudNativePG sets archive_timeout to 5min , ensuring that WAL files, even in case of low workloads, are closed and archived at least every 5 minutes, providing a deterministic time-based value for your Recovery Point Objective ( RPO ). Even though you change the value of the archive_timeout setting in the PostgreSQL configuration , our experience suggests that the default value set by the operator is suitable for most use cases. When the bandwidth between the PostgreSQL instance and the object store allows archiving more than one WAL file in parallel, you can use the parallel WAL archiving feature of the instance manager like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: compression: gzip maxParallel: 8 encryption: AES256 In the previous example, the instance manager optimizes the WAL archiving process by archiving in parallel at most eight ready WALs, including the one requested by PostgreSQL. When PostgreSQL will request the archiving of a WAL that has already been archived by the instance manager as an optimization, that archival request will be just dismissed with a positive status. Retention policies CloudNativePG can manage the automated deletion of backup files from the backup object store, using retention policies based on the recovery window. Internally, the retention policy feature uses barman-cloud-backup-delete with --retention-policy \u201cRECOVERY WINDOW OF {{ retention policy value }} {{ retention policy unit }}\u201d . For example, you can define your backups with a retention policy of 30 days as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" s3Credentials: accessKeyId: name: aws-creds key: ACCESS_KEY_ID secretAccessKey: name: aws-creds key: ACCESS_SECRET_KEY retentionPolicy: \"30d\" There's more ... The recovery window retention policy is focused on the concept of Point of Recoverability ( PoR ), a moving point in time determined by current time - recovery window . The first valid backup is the first available backup before PoR (in reverse chronological order). CloudNativePG must ensure that we can recover the cluster at any point in time between PoR and the latest successfully archived WAL file, starting from the first valid backup. Base backups that are older than the first valid backup will be marked as obsolete and permanently removed after the next backup is completed. Compression algorithms CloudNativePG by default archives backups and WAL files in an uncompressed fashion. However, it also supports the following compression algorithms via barman-cloud-backup (for backups) and barman-cloud-wal-archive (for WAL files): bzip2 gzip lz4 snappy xz zstd The compression settings for backups and WALs are independent. See the DataBackupConfiguration and WALBackupConfiguration sections in the barman-cloud API reference. It is important to note that archival time, restore time, and size change between the algorithms, so the compression algorithm should be chosen according to your use case. The Barman team has performed an evaluation of the performance of the supported algorithms for Barman Cloud. The following table summarizes a scenario where a backup is taken on a local MinIO deployment. The Barman GitHub project includes a deeper analysis . Compression Backup Time (ms) Restore Time (ms) Uncompressed size (MB) Compressed size (MB) Approx ratio None 10927 7553 395 395 1:1 bzip2 25404 13886 395 67 5.9:1 gzip 116281 3077 395 91 4.3:1 snappy 8134 8341 395 166 2.4:1 Tagging of backup objects Barman 2.18 introduces support for tagging backup resources when saving them in object stores via barman-cloud-backup and barman-cloud-wal-archive . As a result, if your PostgreSQL container image includes Barman with version 2.18 or higher, CloudNativePG enables you to specify tags as key-value pairs for backup objects, namely base backups, WAL files and history files. You can use two properties in the .spec.backup.barmanObjectStore definition: tags : key-value pair tags to be added to backup objects and archived WAL file in the backup object store historyTags : key-value pair tags to be added to archived history files in the backup object store The excerpt of a YAML manifest below provides an example of usage of this feature: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] tags: backupRetentionPolicy: \"expire\" historyTags: backupRetentionPolicy: \"keep\" Extra options for the backup and WAL commands You can append additional options to the barman-cloud-backup and barman-cloud-wal-archive commands by using the additionalCommandArgs property in the .spec.backup.barmanObjectStore.data and .spec.backup.barmanObjectStore.wal sections respectively. These properties are lists of strings that will be appended to the barman-cloud-backup and barman-cloud-wal-archive commands. For example, you can use the --read-timeout=60 to customize the connection reading timeout. For additional options supported by barman-cloud-backup and barman-cloud-wal-archive commands you can refer to the official barman documentation here . If an option provided in additionalCommandArgs is already present in the declared options in its section ( .spec.backup.barmanObjectStore.data or .spec.backup.barmanObjectStore.wal ), the extra option will be ignored. The following is an example of how to use this property: For backups: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] data: additionalCommandArgs: - \"--min-chunk-size=5MB\" - \"--read-timeout=60\" For WAL files: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: additionalCommandArgs: - \"--max-concurrency=1\" - \"--read-timeout=60\" Recovery from an object store You can recover from a backup created by Barman Cloud and stored on a supported object store. After you define the external cluster, including all the required configuration in the barmanObjectStore section, you need to reference it in the .spec.recovery.source option. This example defines a recovery object store in a blob container in Azure: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] superuserSecret: name: superuser-secret bootstrap: recovery: source: clusterBackup externalClusters: - name: clusterBackup barmanObjectStore: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8 The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Important By default, the recovery method strictly uses the name of the cluster in the externalClusters section as the name of the main folder of the backup data within the object store. This name is normally reserved for the name of the server. You can specify a different folder name using the barmanObjectStore.serverName property. Note This example takes advantage of the parallel WAL restore feature, dedicating up to 8 jobs to concurrently fetch the required WAL files from the archive. This feature can appreciably reduce the recovery time. Make sure that you plan ahead for this scenario and correctly tune the value of this parameter for your environment. It will make a difference when you need it, and you will.","title":"Appendix B - Backup on object stores"},{"location":"appendixes/backup_barmanobjectstore/#appendix-b-backup-on-object-stores","text":"Warning As of CloudNativePG 1.26, native Barman Cloud support is deprecated in favor of the Barman Cloud Plugin . This page has been moved to the appendix for reference purposes. While the native integration remains functional for now, we strongly recommend beginning a gradual migration to the plugin-based interface after appropriate testing. For guidance, see Migrating from Built-in CloudNativePG Backup . CloudNativePG natively supports online/hot backup of PostgreSQL clusters through continuous physical backup and WAL archiving on an object store. This means that the database is always up (no downtime required) and that Point In Time Recovery is available. The operator can orchestrate a continuous backup infrastructure that is based on the Barman Cloud tool. Instead of using the classical architecture with a Barman server, which backs up many PostgreSQL instances, the operator relies on the barman-cloud-wal-archive , barman-cloud-check-wal-archive , barman-cloud-backup , barman-cloud-backup-list , and barman-cloud-backup-delete tools. As a result, base backups will be tarballs . Both base backups and WAL files can be compressed and encrypted. For this, it is required to use an image with barman-cli-cloud included. You can use the image ghcr.io/cloudnative-pg/postgresql for this scope, as it is composed of a community PostgreSQL image and the latest barman-cli-cloud package. Important Always ensure that you are running the latest version of the operands in your system to take advantage of the improvements introduced in Barman cloud (as well as improve the security aspects of your cluster). A backup is performed from a primary or a designated primary instance in a Cluster (please refer to replica clusters for more information about designated primary instances), or alternatively on a standby .","title":"Appendix B - Backup on object stores"},{"location":"appendixes/backup_barmanobjectstore/#common-object-stores","text":"If you are looking for a specific object store such as AWS S3 , Microsoft Azure Blob Storage , Google Cloud Storage , or a compatible provider, please refer to Appendix C - Common object stores for backups .","title":"Common object stores"},{"location":"appendixes/backup_barmanobjectstore/#wal-archiving","text":"WAL archiving is the process that feeds a WAL archive in CloudNativePG. The WAL archive is defined in the .spec.backup.barmanObjectStore stanza of a Cluster resource. Info Please refer to BarmanObjectStoreConfiguration in the barman-cloud API for a full list of options. If required, you can choose to compress WAL files as soon as they are uploaded and/or encrypt them: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: compression: gzip encryption: AES256 You can configure the encryption directly in your bucket, and the operator will use it unless you override it in the cluster configuration. PostgreSQL implements a sequential archiving scheme, where the archive_command will be executed sequentially for every WAL segment to be archived. Important By default, CloudNativePG sets archive_timeout to 5min , ensuring that WAL files, even in case of low workloads, are closed and archived at least every 5 minutes, providing a deterministic time-based value for your Recovery Point Objective ( RPO ). Even though you change the value of the archive_timeout setting in the PostgreSQL configuration , our experience suggests that the default value set by the operator is suitable for most use cases. When the bandwidth between the PostgreSQL instance and the object store allows archiving more than one WAL file in parallel, you can use the parallel WAL archiving feature of the instance manager like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: compression: gzip maxParallel: 8 encryption: AES256 In the previous example, the instance manager optimizes the WAL archiving process by archiving in parallel at most eight ready WALs, including the one requested by PostgreSQL. When PostgreSQL will request the archiving of a WAL that has already been archived by the instance manager as an optimization, that archival request will be just dismissed with a positive status.","title":"WAL archiving"},{"location":"appendixes/backup_barmanobjectstore/#retention-policies","text":"CloudNativePG can manage the automated deletion of backup files from the backup object store, using retention policies based on the recovery window. Internally, the retention policy feature uses barman-cloud-backup-delete with --retention-policy \u201cRECOVERY WINDOW OF {{ retention policy value }} {{ retention policy unit }}\u201d . For example, you can define your backups with a retention policy of 30 days as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" s3Credentials: accessKeyId: name: aws-creds key: ACCESS_KEY_ID secretAccessKey: name: aws-creds key: ACCESS_SECRET_KEY retentionPolicy: \"30d\" There's more ... The recovery window retention policy is focused on the concept of Point of Recoverability ( PoR ), a moving point in time determined by current time - recovery window . The first valid backup is the first available backup before PoR (in reverse chronological order). CloudNativePG must ensure that we can recover the cluster at any point in time between PoR and the latest successfully archived WAL file, starting from the first valid backup. Base backups that are older than the first valid backup will be marked as obsolete and permanently removed after the next backup is completed.","title":"Retention policies"},{"location":"appendixes/backup_barmanobjectstore/#compression-algorithms","text":"CloudNativePG by default archives backups and WAL files in an uncompressed fashion. However, it also supports the following compression algorithms via barman-cloud-backup (for backups) and barman-cloud-wal-archive (for WAL files): bzip2 gzip lz4 snappy xz zstd The compression settings for backups and WALs are independent. See the DataBackupConfiguration and WALBackupConfiguration sections in the barman-cloud API reference. It is important to note that archival time, restore time, and size change between the algorithms, so the compression algorithm should be chosen according to your use case. The Barman team has performed an evaluation of the performance of the supported algorithms for Barman Cloud. The following table summarizes a scenario where a backup is taken on a local MinIO deployment. The Barman GitHub project includes a deeper analysis . Compression Backup Time (ms) Restore Time (ms) Uncompressed size (MB) Compressed size (MB) Approx ratio None 10927 7553 395 395 1:1 bzip2 25404 13886 395 67 5.9:1 gzip 116281 3077 395 91 4.3:1 snappy 8134 8341 395 166 2.4:1","title":"Compression algorithms"},{"location":"appendixes/backup_barmanobjectstore/#tagging-of-backup-objects","text":"Barman 2.18 introduces support for tagging backup resources when saving them in object stores via barman-cloud-backup and barman-cloud-wal-archive . As a result, if your PostgreSQL container image includes Barman with version 2.18 or higher, CloudNativePG enables you to specify tags as key-value pairs for backup objects, namely base backups, WAL files and history files. You can use two properties in the .spec.backup.barmanObjectStore definition: tags : key-value pair tags to be added to backup objects and archived WAL file in the backup object store historyTags : key-value pair tags to be added to archived history files in the backup object store The excerpt of a YAML manifest below provides an example of usage of this feature: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] tags: backupRetentionPolicy: \"expire\" historyTags: backupRetentionPolicy: \"keep\"","title":"Tagging of backup objects"},{"location":"appendixes/backup_barmanobjectstore/#extra-options-for-the-backup-and-wal-commands","text":"You can append additional options to the barman-cloud-backup and barman-cloud-wal-archive commands by using the additionalCommandArgs property in the .spec.backup.barmanObjectStore.data and .spec.backup.barmanObjectStore.wal sections respectively. These properties are lists of strings that will be appended to the barman-cloud-backup and barman-cloud-wal-archive commands. For example, you can use the --read-timeout=60 to customize the connection reading timeout. For additional options supported by barman-cloud-backup and barman-cloud-wal-archive commands you can refer to the official barman documentation here . If an option provided in additionalCommandArgs is already present in the declared options in its section ( .spec.backup.barmanObjectStore.data or .spec.backup.barmanObjectStore.wal ), the extra option will be ignored. The following is an example of how to use this property: For backups: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] data: additionalCommandArgs: - \"--min-chunk-size=5MB\" - \"--read-timeout=60\" For WAL files: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: [...] wal: additionalCommandArgs: - \"--max-concurrency=1\" - \"--read-timeout=60\"","title":"Extra options for the backup and WAL commands"},{"location":"appendixes/backup_barmanobjectstore/#recovery-from-an-object-store","text":"You can recover from a backup created by Barman Cloud and stored on a supported object store. After you define the external cluster, including all the required configuration in the barmanObjectStore section, you need to reference it in the .spec.recovery.source option. This example defines a recovery object store in a blob container in Azure: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: cluster-restore spec: [...] superuserSecret: name: superuser-secret bootstrap: recovery: source: clusterBackup externalClusters: - name: clusterBackup barmanObjectStore: destinationPath: https://STORAGEACCOUNTNAME.blob.core.windows.net/CONTAINERNAME/ azureCredentials: storageAccount: name: recovery-object-store-secret key: storage_account_name storageKey: name: recovery-object-store-secret key: storage_account_key wal: maxParallel: 8 The previous example assumes that the application database and its owning user are named app by default. If the PostgreSQL cluster being restored uses different names, you must specify these names before exiting the recovery phase, as documented in \"Configure the application database\" . Important By default, the recovery method strictly uses the name of the cluster in the externalClusters section as the name of the main folder of the backup data within the object store. This name is normally reserved for the name of the server. You can specify a different folder name using the barmanObjectStore.serverName property. Note This example takes advantage of the parallel WAL restore feature, dedicating up to 8 jobs to concurrently fetch the required WAL files from the archive. This feature can appreciably reduce the recovery time. Make sure that you plan ahead for this scenario and correctly tune the value of this parameter for your environment. It will make a difference when you need it, and you will.","title":"Recovery from an object store"},{"location":"appendixes/backup_volumesnapshot/","text":"Appendix A - Backup on volume snapshots Important Please refer to the official Kubernetes documentation for a list of all the supported Container Storage Interface (CSI) drivers that provide snapshotting capabilities. CloudNativePG is one of the first known cases of database operators that directly leverages the Kubernetes native Volume Snapshot API for both backup and recovery operations, in an entirely declarative way. About standard Volume Snapshots Volume snapshotting was first introduced in Kubernetes 1.12 (2018) as alpha , promoted to beta in 1.17 (2019) , and moved to GA in 1.20 (2020) . It\u2019s now stable, widely available, and standard, providing 3 custom resource definitions: VolumeSnapshot , VolumeSnapshotContent and VolumeSnapshotClass . This Kubernetes feature defines a generic interface for: the creation of a new volume snapshot, starting from a PVC the deletion of an existing snapshot the creation of a new volume from a snapshot Kubernetes delegates the actual implementation to the underlying CSI drivers (not all of them support volume snapshots). Normally, storage classes that provide volume snapshotting support incremental and differential block level backup in a transparent way for the application , which can delegate the complexity and the independent management down the stack, including cross-cluster availability of the snapshots. Requirements For Volume Snapshots to work with a CloudNativePG cluster, you need to ensure that each storage class used to dynamically provision the PostgreSQL volumes (namely, storage and walStorage sections) support volume snapshots. Given that instructions vary from storage class to storage class, please refer to the documentation of the specific storage class and related CSI drivers you have deployed in your Kubernetes system. Normally, it is the VolumeSnapshotClass that is responsible to ensure that snapshots can be taken from persistent volumes of a given storage class, and managed as VolumeSnapshot and VolumeSnapshotContent resources. Important It is your responsibility to verify with the third party vendor that volume snapshots are supported. CloudNativePG only interacts with the Kubernetes API on this matter, and we cannot support issues at the storage level for each specific CSI driver. How to configure Volume Snapshot backups CloudNativePG allows you to configure a given Postgres cluster for Volume Snapshot backups through the backup.volumeSnapshot stanza. Info Please refer to VolumeSnapshotConfiguration in the API reference for a full list of options. A generic example with volume snapshots (assuming that PGDATA and WALs share the same storage class) is the following: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: snapshot-cluster spec: instances: 3 storage: storageClass: @STORAGE_CLASS@ size: 10Gi walStorage: storageClass: @STORAGE_CLASS@ size: 10Gi backup: # Volume snapshot backups volumeSnapshot: className: @VOLUME_SNAPSHOT_CLASS_NAME@ plugins: - name: barman-cloud.cloudnative-pg.io isWALArchiver: true parameters: barmanObjectName: @OBJECTSTORE_NAME@ As you can see, the backup section contains both the volumeSnapshot stanza (controlling physical base backups on volume snapshots) and the plugins one (controlling the WAL archive ). Info Once you have defined the plugin , you can decide to use both volume snapshot and plugin backup strategies simultaneously to take physical backups. The volumeSnapshot.className option allows you to reference the default VolumeSnapshotClass object used for all the storage volumes you have defined in your PostgreSQL cluster. Info In case you are using a different storage class for PGDATA and WAL files, you can specify a separate VolumeSnapshotClass for that volume through the walClassName option (which defaults to the same value as className ). Once a cluster is defined for volume snapshot backups, you need to define a ScheduledBackup resource that requests such backups on a periodic basis. Hot and cold backups Warning As noted in the backup document , a cold snapshot explicitly set to target the primary will result in the primary being fenced for the duration of the backup, making the cluster read-only during this period. For safety, in a cluster already containing fenced instances, a cold snapshot is rejected. By default, CloudNativePG requests an online/hot backup on volume snapshots, using the PostgreSQL defaults of the low-level API for base backups : it doesn't request an immediate checkpoint when starting the backup procedure it waits for the WAL archiver to archive the last segment of the backup when terminating the backup procedure Important The default values are suitable for most production environments. Hot backups are consistent and can be used to perform snapshot recovery, as we ensure WAL retention from the start of the backup through a temporary replication slot. However, our recommendation is to rely on cold backups for that purpose. You can explicitly change the default behavior through the following options in the .spec.backup.volumeSnapshot stanza of the Cluster resource: online : accepting true (default) or false as a value onlineConfiguration.immediateCheckpoint : whether you want to request an immediate checkpoint before you start the backup procedure or not; technically, it corresponds to the fast argument you pass to the pg_backup_start / pg_start_backup() function in PostgreSQL, accepting true (default) or false onlineConfiguration.waitForArchive : whether you want to wait for the archiver to process the last segment of the backup or not; technically, it corresponds to the wait_for_archive argument you pass to the pg_backup_stop / pg_stop_backup() function in PostgreSQL, accepting true (default) or false If you want to change the default behavior of your Postgres cluster to take cold backups by default, all you need to do is add the online: false option to your manifest, as follows: # ... backup: volumeSnapshot: online: false # ... If you are instead requesting an immediate checkpoint as the default behavior, you can add this section: # ... backup: volumeSnapshot: online: true onlineConfiguration: immediateCheckpoint: true # ... Overriding the default behavior You can change the default behavior defined in the cluster resource by setting different values for online and, if needed, onlineConfiguration in the Backup or ScheduledBackup objects. For example, in case you want to issue an on-demand cold backup, you can create a Backup object with .spec.online: false : apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: snapshot-cluster-cold-backup-example spec: cluster: name: snapshot-cluster method: volumeSnapshot online: false Similarly, for the ScheduledBackup: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: snapshot-cluster-cold-backup-example spec: schedule: \"0 0 0 * * *\" backupOwnerReference: self cluster: name: snapshot-cluster method: volumeSnapshot online: false Persistence of volume snapshot objects By default, VolumeSnapshot objects created by CloudNativePG are retained after deleting the Backup object that originated them, or the Cluster they refer to. Such behavior is controlled by the .spec.backup.volumeSnapshot.snapshotOwnerReference option which accepts the following values: none : no ownership is set, meaning that VolumeSnapshot objects persist after the Backup and/or the Cluster resources are removed backup : the VolumeSnapshot object is owned by the Backup resource that originated it, and when the backup object is removed, the volume snapshot is also removed cluster : the VolumeSnapshot object is owned by the Cluster resource that is backed up, and when the Postgres cluster is removed, the volume snapshot is also removed In case a VolumeSnapshot is deleted, the deletionPolicy specified in the VolumeSnapshotContent is evaluated: if set to Retain , the VolumeSnapshotContent object is kept if set to Delete , the VolumeSnapshotContent object is removed as well Warning VolumeSnapshotContent objects do not keep all the information regarding the backup and the cluster they refer to (like the annotations and labels that are contained in the VolumeSnapshot object). Although possible, restoring from just this kind of object might not be straightforward. For this reason, our recommendation is to always backup the VolumeSnapshot definitions, even using a Kubernetes level data protection solution. The value in VolumeSnapshotContent is determined by the deletionPolicy set in the corresponding VolumeSnapshotClass definition, which is referenced in the .spec.backup.volumeSnapshot.className option. Please refer to the Kubernetes documentation on Volume Snapshot Classes for details on this standard behavior. Backup Volume Snapshot Deadlines CloudNativePG supports backups using the volume snapshot method. In some environments, volume snapshots may encounter temporary issues that can be retried. The backup.cnpg.io/volumeSnapshotDeadline annotation defines how long CloudNativePG should continue retrying recoverable errors before marking the backup as failed. You can add the backup.cnpg.io/volumeSnapshotDeadline annotation to both Backup and ScheduledBackup resources. For ScheduledBackup resources, this annotation is automatically inherited by any Backup resources created from the schedule. If not specified, the default retry deadline is 10 minutes . Error Handling When a retryable error occurs during a volume snapshot operation: CloudNativePG records the time of the first error. The system retries the operation every 10 seconds . If the error persists beyond the specified deadline (or the default 10 minutes), the backup is marked as failed . Retryable Errors CloudNativePG treats the following types of errors as retryable: Server timeout errors (HTTP 408, 429, 500, 502, 503, 504) Conflicts (optimistic locking errors) Internal errors Context deadline exceeded errors Timeout errors from the CSI snapshot controller Examples You can add the annotation to a ScheduledBackup resource as follows: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: daily-backup-schedule annotations: backup.cnpg.io/volumeSnapshotDeadline: \"20\" spec: schedule: \"0 0 * * *\" backupOwnerReference: self method: volumeSnapshot # other configuration... When you define a ScheduledBackup with the annotation, any Backup resources created from this schedule automatically inherit the specified timeout value. In the following example, all backups created from the schedule will have a 30-minute timeout for retrying recoverable snapshot errors. apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: weekly-backup annotations: backup.cnpg.io/volumeSnapshotDeadline: \"30\" spec: schedule: \"0 0 * * 0\" # Weekly backup on Sunday method: volumeSnapshot cluster: name: my-postgresql-cluster Alternatively, you can add the annotation directly to a Backup Resource: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: my-backup annotations: backup.cnpg.io/volumeSnapshotDeadline: \"15\" spec: method: volumeSnapshot # other backup configuration... Example of Volume Snapshot Backup The following example shows how to configure volume snapshot base backups on an EKS cluster on AWS using the ebs-sc storage class and the csi-aws-vsc volume snapshot class. Important If you are interested in testing the example, please read \"Volume Snapshots\" for the Amazon Elastic Block Store (EBS) CSI driver for detailed instructions on the installation process for the storage class and the snapshot class. The following manifest creates a Cluster that is ready to be used for volume snapshots and that stores the WAL archive in a S3 bucket via IAM role for the Service Account (IRSA, see AWS S3 ): apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: hendrix spec: instances: 3 storage: storageClass: ebs-sc size: 10Gi walStorage: storageClass: ebs-sc size: 10Gi backup: volumeSnapshot: className: csi-aws-vsc plugins: - name: barman-cloud.cloudnative-pg.io isWALArchiver: true parameters: barmanObjectName: @OBJECTSTORE_NAME@ serviceAccountTemplate: metadata: annotations: eks.amazonaws.com/role-arn: \"@ARN@\" --- apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: hendrix-vs-backup spec: cluster: name: hendrix method: volumeSnapshot schedule: '0 0 0 * * *' backupOwnerReference: cluster immediate: true The last resource defines daily volume snapshot backups at midnight, requesting one immediately after the cluster is created.","title":"Appendix A - Backup on volume snapshots"},{"location":"appendixes/backup_volumesnapshot/#appendix-a-backup-on-volume-snapshots","text":"Important Please refer to the official Kubernetes documentation for a list of all the supported Container Storage Interface (CSI) drivers that provide snapshotting capabilities. CloudNativePG is one of the first known cases of database operators that directly leverages the Kubernetes native Volume Snapshot API for both backup and recovery operations, in an entirely declarative way.","title":"Appendix A - Backup on volume snapshots"},{"location":"appendixes/backup_volumesnapshot/#about-standard-volume-snapshots","text":"Volume snapshotting was first introduced in Kubernetes 1.12 (2018) as alpha , promoted to beta in 1.17 (2019) , and moved to GA in 1.20 (2020) . It\u2019s now stable, widely available, and standard, providing 3 custom resource definitions: VolumeSnapshot , VolumeSnapshotContent and VolumeSnapshotClass . This Kubernetes feature defines a generic interface for: the creation of a new volume snapshot, starting from a PVC the deletion of an existing snapshot the creation of a new volume from a snapshot Kubernetes delegates the actual implementation to the underlying CSI drivers (not all of them support volume snapshots). Normally, storage classes that provide volume snapshotting support incremental and differential block level backup in a transparent way for the application , which can delegate the complexity and the independent management down the stack, including cross-cluster availability of the snapshots.","title":"About standard Volume Snapshots"},{"location":"appendixes/backup_volumesnapshot/#requirements","text":"For Volume Snapshots to work with a CloudNativePG cluster, you need to ensure that each storage class used to dynamically provision the PostgreSQL volumes (namely, storage and walStorage sections) support volume snapshots. Given that instructions vary from storage class to storage class, please refer to the documentation of the specific storage class and related CSI drivers you have deployed in your Kubernetes system. Normally, it is the VolumeSnapshotClass that is responsible to ensure that snapshots can be taken from persistent volumes of a given storage class, and managed as VolumeSnapshot and VolumeSnapshotContent resources. Important It is your responsibility to verify with the third party vendor that volume snapshots are supported. CloudNativePG only interacts with the Kubernetes API on this matter, and we cannot support issues at the storage level for each specific CSI driver.","title":"Requirements"},{"location":"appendixes/backup_volumesnapshot/#how-to-configure-volume-snapshot-backups","text":"CloudNativePG allows you to configure a given Postgres cluster for Volume Snapshot backups through the backup.volumeSnapshot stanza. Info Please refer to VolumeSnapshotConfiguration in the API reference for a full list of options. A generic example with volume snapshots (assuming that PGDATA and WALs share the same storage class) is the following: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: snapshot-cluster spec: instances: 3 storage: storageClass: @STORAGE_CLASS@ size: 10Gi walStorage: storageClass: @STORAGE_CLASS@ size: 10Gi backup: # Volume snapshot backups volumeSnapshot: className: @VOLUME_SNAPSHOT_CLASS_NAME@ plugins: - name: barman-cloud.cloudnative-pg.io isWALArchiver: true parameters: barmanObjectName: @OBJECTSTORE_NAME@ As you can see, the backup section contains both the volumeSnapshot stanza (controlling physical base backups on volume snapshots) and the plugins one (controlling the WAL archive ). Info Once you have defined the plugin , you can decide to use both volume snapshot and plugin backup strategies simultaneously to take physical backups. The volumeSnapshot.className option allows you to reference the default VolumeSnapshotClass object used for all the storage volumes you have defined in your PostgreSQL cluster. Info In case you are using a different storage class for PGDATA and WAL files, you can specify a separate VolumeSnapshotClass for that volume through the walClassName option (which defaults to the same value as className ). Once a cluster is defined for volume snapshot backups, you need to define a ScheduledBackup resource that requests such backups on a periodic basis.","title":"How to configure Volume Snapshot backups"},{"location":"appendixes/backup_volumesnapshot/#hot-and-cold-backups","text":"Warning As noted in the backup document , a cold snapshot explicitly set to target the primary will result in the primary being fenced for the duration of the backup, making the cluster read-only during this period. For safety, in a cluster already containing fenced instances, a cold snapshot is rejected. By default, CloudNativePG requests an online/hot backup on volume snapshots, using the PostgreSQL defaults of the low-level API for base backups : it doesn't request an immediate checkpoint when starting the backup procedure it waits for the WAL archiver to archive the last segment of the backup when terminating the backup procedure Important The default values are suitable for most production environments. Hot backups are consistent and can be used to perform snapshot recovery, as we ensure WAL retention from the start of the backup through a temporary replication slot. However, our recommendation is to rely on cold backups for that purpose. You can explicitly change the default behavior through the following options in the .spec.backup.volumeSnapshot stanza of the Cluster resource: online : accepting true (default) or false as a value onlineConfiguration.immediateCheckpoint : whether you want to request an immediate checkpoint before you start the backup procedure or not; technically, it corresponds to the fast argument you pass to the pg_backup_start / pg_start_backup() function in PostgreSQL, accepting true (default) or false onlineConfiguration.waitForArchive : whether you want to wait for the archiver to process the last segment of the backup or not; technically, it corresponds to the wait_for_archive argument you pass to the pg_backup_stop / pg_stop_backup() function in PostgreSQL, accepting true (default) or false If you want to change the default behavior of your Postgres cluster to take cold backups by default, all you need to do is add the online: false option to your manifest, as follows: # ... backup: volumeSnapshot: online: false # ... If you are instead requesting an immediate checkpoint as the default behavior, you can add this section: # ... backup: volumeSnapshot: online: true onlineConfiguration: immediateCheckpoint: true # ...","title":"Hot and cold backups"},{"location":"appendixes/backup_volumesnapshot/#overriding-the-default-behavior","text":"You can change the default behavior defined in the cluster resource by setting different values for online and, if needed, onlineConfiguration in the Backup or ScheduledBackup objects. For example, in case you want to issue an on-demand cold backup, you can create a Backup object with .spec.online: false : apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: snapshot-cluster-cold-backup-example spec: cluster: name: snapshot-cluster method: volumeSnapshot online: false Similarly, for the ScheduledBackup: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: snapshot-cluster-cold-backup-example spec: schedule: \"0 0 0 * * *\" backupOwnerReference: self cluster: name: snapshot-cluster method: volumeSnapshot online: false","title":"Overriding the default behavior"},{"location":"appendixes/backup_volumesnapshot/#persistence-of-volume-snapshot-objects","text":"By default, VolumeSnapshot objects created by CloudNativePG are retained after deleting the Backup object that originated them, or the Cluster they refer to. Such behavior is controlled by the .spec.backup.volumeSnapshot.snapshotOwnerReference option which accepts the following values: none : no ownership is set, meaning that VolumeSnapshot objects persist after the Backup and/or the Cluster resources are removed backup : the VolumeSnapshot object is owned by the Backup resource that originated it, and when the backup object is removed, the volume snapshot is also removed cluster : the VolumeSnapshot object is owned by the Cluster resource that is backed up, and when the Postgres cluster is removed, the volume snapshot is also removed In case a VolumeSnapshot is deleted, the deletionPolicy specified in the VolumeSnapshotContent is evaluated: if set to Retain , the VolumeSnapshotContent object is kept if set to Delete , the VolumeSnapshotContent object is removed as well Warning VolumeSnapshotContent objects do not keep all the information regarding the backup and the cluster they refer to (like the annotations and labels that are contained in the VolumeSnapshot object). Although possible, restoring from just this kind of object might not be straightforward. For this reason, our recommendation is to always backup the VolumeSnapshot definitions, even using a Kubernetes level data protection solution. The value in VolumeSnapshotContent is determined by the deletionPolicy set in the corresponding VolumeSnapshotClass definition, which is referenced in the .spec.backup.volumeSnapshot.className option. Please refer to the Kubernetes documentation on Volume Snapshot Classes for details on this standard behavior.","title":"Persistence of volume snapshot objects"},{"location":"appendixes/backup_volumesnapshot/#backup-volume-snapshot-deadlines","text":"CloudNativePG supports backups using the volume snapshot method. In some environments, volume snapshots may encounter temporary issues that can be retried. The backup.cnpg.io/volumeSnapshotDeadline annotation defines how long CloudNativePG should continue retrying recoverable errors before marking the backup as failed. You can add the backup.cnpg.io/volumeSnapshotDeadline annotation to both Backup and ScheduledBackup resources. For ScheduledBackup resources, this annotation is automatically inherited by any Backup resources created from the schedule. If not specified, the default retry deadline is 10 minutes .","title":"Backup Volume Snapshot Deadlines"},{"location":"appendixes/backup_volumesnapshot/#error-handling","text":"When a retryable error occurs during a volume snapshot operation: CloudNativePG records the time of the first error. The system retries the operation every 10 seconds . If the error persists beyond the specified deadline (or the default 10 minutes), the backup is marked as failed .","title":"Error Handling"},{"location":"appendixes/backup_volumesnapshot/#retryable-errors","text":"CloudNativePG treats the following types of errors as retryable: Server timeout errors (HTTP 408, 429, 500, 502, 503, 504) Conflicts (optimistic locking errors) Internal errors Context deadline exceeded errors Timeout errors from the CSI snapshot controller","title":"Retryable Errors"},{"location":"appendixes/backup_volumesnapshot/#examples","text":"You can add the annotation to a ScheduledBackup resource as follows: apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: daily-backup-schedule annotations: backup.cnpg.io/volumeSnapshotDeadline: \"20\" spec: schedule: \"0 0 * * *\" backupOwnerReference: self method: volumeSnapshot # other configuration... When you define a ScheduledBackup with the annotation, any Backup resources created from this schedule automatically inherit the specified timeout value. In the following example, all backups created from the schedule will have a 30-minute timeout for retrying recoverable snapshot errors. apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: weekly-backup annotations: backup.cnpg.io/volumeSnapshotDeadline: \"30\" spec: schedule: \"0 0 * * 0\" # Weekly backup on Sunday method: volumeSnapshot cluster: name: my-postgresql-cluster Alternatively, you can add the annotation directly to a Backup Resource: apiVersion: postgresql.cnpg.io/v1 kind: Backup metadata: name: my-backup annotations: backup.cnpg.io/volumeSnapshotDeadline: \"15\" spec: method: volumeSnapshot # other backup configuration...","title":"Examples"},{"location":"appendixes/backup_volumesnapshot/#example-of-volume-snapshot-backup","text":"The following example shows how to configure volume snapshot base backups on an EKS cluster on AWS using the ebs-sc storage class and the csi-aws-vsc volume snapshot class. Important If you are interested in testing the example, please read \"Volume Snapshots\" for the Amazon Elastic Block Store (EBS) CSI driver for detailed instructions on the installation process for the storage class and the snapshot class. The following manifest creates a Cluster that is ready to be used for volume snapshots and that stores the WAL archive in a S3 bucket via IAM role for the Service Account (IRSA, see AWS S3 ): apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: hendrix spec: instances: 3 storage: storageClass: ebs-sc size: 10Gi walStorage: storageClass: ebs-sc size: 10Gi backup: volumeSnapshot: className: csi-aws-vsc plugins: - name: barman-cloud.cloudnative-pg.io isWALArchiver: true parameters: barmanObjectName: @OBJECTSTORE_NAME@ serviceAccountTemplate: metadata: annotations: eks.amazonaws.com/role-arn: \"@ARN@\" --- apiVersion: postgresql.cnpg.io/v1 kind: ScheduledBackup metadata: name: hendrix-vs-backup spec: cluster: name: hendrix method: volumeSnapshot schedule: '0 0 0 * * *' backupOwnerReference: cluster immediate: true The last resource defines daily volume snapshot backups at midnight, requesting one immediately after the cluster is created.","title":"Example of Volume Snapshot Backup"},{"location":"appendixes/object_stores/","text":"Appendix C - Common object stores for backups Warning As of CloudNativePG 1.26, native Barman Cloud support is deprecated in favor of the Barman Cloud Plugin . While the native integration remains functional for now, we strongly recommend beginning a gradual migration to the plugin-based interface after appropriate testing. The Barman Cloud Plugin documentation describes how to use common object stores . You can store the backup files in any service that is supported by the Barman Cloud infrastructure. That is: Amazon S3 Microsoft Azure Blob Storage Google Cloud Storage You can also use any compatible implementation of the supported services. The required setup depends on the chosen storage provider and is discussed in the following sections. AWS S3 AWS Simple Storage Service (S3) is a very popular object storage service offered by Amazon. As far as CloudNativePG backup is concerned, you can define the permissions to store backups in S3 buckets in two ways: If CloudNativePG is running in EKS. you may want to use the IRSA authentication method Alternatively, you can use the ACCESS_KEY_ID and ACCESS_SECRET_KEY credentials AWS Access key You will need the following information about your environment: ACCESS_KEY_ID : the ID of the access key that will be used to upload files into S3 ACCESS_SECRET_KEY : the secret part of the access key mentioned above ACCESS_SESSION_TOKEN : the optional session token, in case it is required The access key used must have permission to upload files into the bucket. Given that, you must create a Kubernetes secret with the credentials, and you can do that with the following command: kubectl create secret generic aws-creds \\ --from-literal=ACCESS_KEY_ID=<access key here> \\ --from-literal=ACCESS_SECRET_KEY=<secret key here> # --from-literal=ACCESS_SESSION_TOKEN=<session token here> # if required The credentials will be stored inside Kubernetes and will be encrypted if encryption at rest is configured in your installation. Once that secret has been created, you can configure your cluster like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" s3Credentials: accessKeyId: name: aws-creds key: ACCESS_KEY_ID secretAccessKey: name: aws-creds key: ACCESS_SECRET_KEY The destination path can be any URL pointing to a folder where the instance can upload the WAL files, e.g. s3://BUCKET_NAME/path/to/folder . IAM Role for Service Account (IRSA) In order to use IRSA you need to set an annotation in the ServiceAccount of the Postgres cluster. We can configure CloudNativePG to inject them using the serviceAccountTemplate stanza: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: [...] spec: serviceAccountTemplate: metadata: annotations: eks.amazonaws.com/role-arn: arn:[...] [...] S3 lifecycle policy Barman Cloud writes objects to S3, then does not update them until they are deleted by the Barman Cloud retention policy. A recommended approach for an S3 lifecycle policy is to expire the current version of objects a few days longer than the Barman retention policy, enable object versioning, and expire non-current versions after a number of days. Such a policy protects against accidental deletion, and also allows for restricting permissions to the CloudNativePG workload so that it may delete objects from S3 without granting permissions to permanently delete objects. Other S3-compatible Object Storages providers In case you're using S3-compatible object storage, like MinIO or Linode Object Storage , you can specify an endpoint instead of using the default S3 one. In this example, it will use the bucket of Linode in the region us-east1 . apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"s3://bucket/\" endpointURL: \"https://us-east1.linodeobjects.com\" s3Credentials: [...] In case you're using Digital Ocean Spaces , you will have to use the Path-style syntax. In this example, it will use the bucket from Digital Ocean Spaces in the region SFO3 . apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"s3://[your-bucket-name]/[your-backup-folder]/\" endpointURL: \"https://sfo3.digitaloceanspaces.com\" s3Credentials: [...] Using Object Storage with a private CA Suppose you configure an Object Storage provider which uses a certificate signed with a private CA, for example when using MinIO via HTTPS. In that case, you need to set the option endpointCA inside barmanObjectStore referring to a secret containing the CA bundle, so that Barman can verify the certificate correctly. You can find instructions on creating a secret using your cert files in the certificates document. Once you have created the secret, you can populate the endpointCA as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: [...] backup: barmanObjectStore: endpointURL: <myEndpointURL> endpointCA: name: my-ca-secret key: ca.crt Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to the Secrets/ConfigMaps. Otherwise, you will have to reload the instances using the kubectl cnpg reload subcommand. Azure Blob Storage Azure Blob Storage is the object storage service provided by Microsoft. In order to access your storage account for backup and recovery of CloudNativePG managed databases, you will need one of the following combinations of credentials: Connection String Storage account name and Storage account access key Storage account name and Storage account SAS Token Storage account name and Azure AD Workload Identity properly configured. Using Azure AD Workload Identity , you can avoid saving the credentials into a Kubernetes Secret, and have a Cluster configuration adding the inheritFromAzureAD as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" azureCredentials: inheritFromAzureAD: true On the other side, using both Storage account access key or Storage account SAS Token , the credentials need to be stored inside a Kubernetes Secret, adding data entries only when needed. The following command performs that: kubectl create secret generic azure-creds \\ --from-literal=AZURE_STORAGE_ACCOUNT=<storage account name> \\ --from-literal=AZURE_STORAGE_KEY=<storage account key> \\ --from-literal=AZURE_STORAGE_SAS_TOKEN=<SAS token> \\ --from-literal=AZURE_STORAGE_CONNECTION_STRING=<connection string> The credentials will be encrypted at rest, if this feature is enabled in the used Kubernetes cluster. Given the previous secret, the provided credentials can be injected inside the cluster configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" azureCredentials: connectionString: name: azure-creds key: AZURE_CONNECTION_STRING storageAccount: name: azure-creds key: AZURE_STORAGE_ACCOUNT storageKey: name: azure-creds key: AZURE_STORAGE_KEY storageSasToken: name: azure-creds key: AZURE_STORAGE_SAS_TOKEN When using the Azure Blob Storage, the destinationPath fulfills the following structure: <http|https>://<account-name>.<service-name>.core.windows.net/<resource-path> where <resource-path> is <container>/<blob> . The account name , which is also called storage account name , is included in the used host name. Other Azure Blob Storage compatible providers If you are using a different implementation of the Azure Blob Storage APIs, the destinationPath will have the following structure: <http|https>://<local-machine-address>:<port>/<account-name>/<resource-path> In that case, <account-name> is the first component of the path. This is required if you are testing the Azure support via the Azure Storage Emulator or Azurite . Google Cloud Storage Currently, the CloudNativePG operator supports two authentication methods for Google Cloud Storage : the first one assumes that the pod is running inside a Google Kubernetes Engine cluster the second one leverages the environment variable GOOGLE_APPLICATION_CREDENTIALS Running inside Google Kubernetes Engine When running inside Google Kubernetes Engine you can configure your backups to simply rely on Workload Identity , without having to set any credentials. In particular, you need to: set .spec.backup.barmanObjectStore.googleCredentials.gkeEnvironment to true set the iam.gke.io/gcp-service-account annotation in the serviceAccountTemplate stanza Please use the following example as a reference: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: [...] backup: barmanObjectStore: destinationPath: \"gs://<destination path here>\" googleCredentials: gkeEnvironment: true serviceAccountTemplate: metadata: annotations: iam.gke.io/gcp-service-account: [...].iam.gserviceaccount.com [...] Using authentication Following the instruction from Google you will get a JSON file that contains all the required information to authenticate. The content of the JSON file must be provided using a Secret that can be created with the following command: kubectl create secret generic backup-creds --from-file=gcsCredentials=gcs_credentials_file.json This will create the Secret with the name backup-creds to be used in the yaml file like this: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"gs://<destination path here>\" googleCredentials: applicationCredentials: name: backup-creds key: gcsCredentials Now the operator will use the credentials to authenticate against Google Cloud Storage. Important This way of authentication will create a JSON file inside the container with all the needed information to access your Google Cloud Storage bucket, meaning that if someone gets access to the pod will also have write permissions to the bucket.","title":"Appendix C - Common object stores for backups"},{"location":"appendixes/object_stores/#appendix-c-common-object-stores-for-backups","text":"Warning As of CloudNativePG 1.26, native Barman Cloud support is deprecated in favor of the Barman Cloud Plugin . While the native integration remains functional for now, we strongly recommend beginning a gradual migration to the plugin-based interface after appropriate testing. The Barman Cloud Plugin documentation describes how to use common object stores . You can store the backup files in any service that is supported by the Barman Cloud infrastructure. That is: Amazon S3 Microsoft Azure Blob Storage Google Cloud Storage You can also use any compatible implementation of the supported services. The required setup depends on the chosen storage provider and is discussed in the following sections.","title":"Appendix C - Common object stores for backups"},{"location":"appendixes/object_stores/#aws-s3","text":"AWS Simple Storage Service (S3) is a very popular object storage service offered by Amazon. As far as CloudNativePG backup is concerned, you can define the permissions to store backups in S3 buckets in two ways: If CloudNativePG is running in EKS. you may want to use the IRSA authentication method Alternatively, you can use the ACCESS_KEY_ID and ACCESS_SECRET_KEY credentials","title":"AWS S3"},{"location":"appendixes/object_stores/#aws-access-key","text":"You will need the following information about your environment: ACCESS_KEY_ID : the ID of the access key that will be used to upload files into S3 ACCESS_SECRET_KEY : the secret part of the access key mentioned above ACCESS_SESSION_TOKEN : the optional session token, in case it is required The access key used must have permission to upload files into the bucket. Given that, you must create a Kubernetes secret with the credentials, and you can do that with the following command: kubectl create secret generic aws-creds \\ --from-literal=ACCESS_KEY_ID=<access key here> \\ --from-literal=ACCESS_SECRET_KEY=<secret key here> # --from-literal=ACCESS_SESSION_TOKEN=<session token here> # if required The credentials will be stored inside Kubernetes and will be encrypted if encryption at rest is configured in your installation. Once that secret has been created, you can configure your cluster like in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" s3Credentials: accessKeyId: name: aws-creds key: ACCESS_KEY_ID secretAccessKey: name: aws-creds key: ACCESS_SECRET_KEY The destination path can be any URL pointing to a folder where the instance can upload the WAL files, e.g. s3://BUCKET_NAME/path/to/folder .","title":"AWS Access key"},{"location":"appendixes/object_stores/#iam-role-for-service-account-irsa","text":"In order to use IRSA you need to set an annotation in the ServiceAccount of the Postgres cluster. We can configure CloudNativePG to inject them using the serviceAccountTemplate stanza: apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: [...] spec: serviceAccountTemplate: metadata: annotations: eks.amazonaws.com/role-arn: arn:[...] [...]","title":"IAM Role for Service Account (IRSA)"},{"location":"appendixes/object_stores/#s3-lifecycle-policy","text":"Barman Cloud writes objects to S3, then does not update them until they are deleted by the Barman Cloud retention policy. A recommended approach for an S3 lifecycle policy is to expire the current version of objects a few days longer than the Barman retention policy, enable object versioning, and expire non-current versions after a number of days. Such a policy protects against accidental deletion, and also allows for restricting permissions to the CloudNativePG workload so that it may delete objects from S3 without granting permissions to permanently delete objects.","title":"S3 lifecycle policy"},{"location":"appendixes/object_stores/#other-s3-compatible-object-storages-providers","text":"In case you're using S3-compatible object storage, like MinIO or Linode Object Storage , you can specify an endpoint instead of using the default S3 one. In this example, it will use the bucket of Linode in the region us-east1 . apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"s3://bucket/\" endpointURL: \"https://us-east1.linodeobjects.com\" s3Credentials: [...] In case you're using Digital Ocean Spaces , you will have to use the Path-style syntax. In this example, it will use the bucket from Digital Ocean Spaces in the region SFO3 . apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"s3://[your-bucket-name]/[your-backup-folder]/\" endpointURL: \"https://sfo3.digitaloceanspaces.com\" s3Credentials: [...]","title":"Other S3-compatible Object Storages providers"},{"location":"appendixes/object_stores/#using-object-storage-with-a-private-ca","text":"Suppose you configure an Object Storage provider which uses a certificate signed with a private CA, for example when using MinIO via HTTPS. In that case, you need to set the option endpointCA inside barmanObjectStore referring to a secret containing the CA bundle, so that Barman can verify the certificate correctly. You can find instructions on creating a secret using your cert files in the certificates document. Once you have created the secret, you can populate the endpointCA as in the following example: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: [...] backup: barmanObjectStore: endpointURL: <myEndpointURL> endpointCA: name: my-ca-secret key: ca.crt Note If you want ConfigMaps and Secrets to be automatically reloaded by instances, you can add a label with key cnpg.io/reload to the Secrets/ConfigMaps. Otherwise, you will have to reload the instances using the kubectl cnpg reload subcommand.","title":"Using Object Storage with a private CA"},{"location":"appendixes/object_stores/#azure-blob-storage","text":"Azure Blob Storage is the object storage service provided by Microsoft. In order to access your storage account for backup and recovery of CloudNativePG managed databases, you will need one of the following combinations of credentials: Connection String Storage account name and Storage account access key Storage account name and Storage account SAS Token Storage account name and Azure AD Workload Identity properly configured. Using Azure AD Workload Identity , you can avoid saving the credentials into a Kubernetes Secret, and have a Cluster configuration adding the inheritFromAzureAD as follows: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" azureCredentials: inheritFromAzureAD: true On the other side, using both Storage account access key or Storage account SAS Token , the credentials need to be stored inside a Kubernetes Secret, adding data entries only when needed. The following command performs that: kubectl create secret generic azure-creds \\ --from-literal=AZURE_STORAGE_ACCOUNT=<storage account name> \\ --from-literal=AZURE_STORAGE_KEY=<storage account key> \\ --from-literal=AZURE_STORAGE_SAS_TOKEN=<SAS token> \\ --from-literal=AZURE_STORAGE_CONNECTION_STRING=<connection string> The credentials will be encrypted at rest, if this feature is enabled in the used Kubernetes cluster. Given the previous secret, the provided credentials can be injected inside the cluster configuration: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"<destination path here>\" azureCredentials: connectionString: name: azure-creds key: AZURE_CONNECTION_STRING storageAccount: name: azure-creds key: AZURE_STORAGE_ACCOUNT storageKey: name: azure-creds key: AZURE_STORAGE_KEY storageSasToken: name: azure-creds key: AZURE_STORAGE_SAS_TOKEN When using the Azure Blob Storage, the destinationPath fulfills the following structure: <http|https>://<account-name>.<service-name>.core.windows.net/<resource-path> where <resource-path> is <container>/<blob> . The account name , which is also called storage account name , is included in the used host name.","title":"Azure Blob Storage"},{"location":"appendixes/object_stores/#other-azure-blob-storage-compatible-providers","text":"If you are using a different implementation of the Azure Blob Storage APIs, the destinationPath will have the following structure: <http|https>://<local-machine-address>:<port>/<account-name>/<resource-path> In that case, <account-name> is the first component of the path. This is required if you are testing the Azure support via the Azure Storage Emulator or Azurite .","title":"Other Azure Blob Storage compatible providers"},{"location":"appendixes/object_stores/#google-cloud-storage","text":"Currently, the CloudNativePG operator supports two authentication methods for Google Cloud Storage : the first one assumes that the pod is running inside a Google Kubernetes Engine cluster the second one leverages the environment variable GOOGLE_APPLICATION_CREDENTIALS","title":"Google Cloud Storage"},{"location":"appendixes/object_stores/#running-inside-google-kubernetes-engine","text":"When running inside Google Kubernetes Engine you can configure your backups to simply rely on Workload Identity , without having to set any credentials. In particular, you need to: set .spec.backup.barmanObjectStore.googleCredentials.gkeEnvironment to true set the iam.gke.io/gcp-service-account annotation in the serviceAccountTemplate stanza Please use the following example as a reference: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: [...] backup: barmanObjectStore: destinationPath: \"gs://<destination path here>\" googleCredentials: gkeEnvironment: true serviceAccountTemplate: metadata: annotations: iam.gke.io/gcp-service-account: [...].iam.gserviceaccount.com [...]","title":"Running inside Google Kubernetes Engine"},{"location":"appendixes/object_stores/#using-authentication","text":"Following the instruction from Google you will get a JSON file that contains all the required information to authenticate. The content of the JSON file must be provided using a Secret that can be created with the following command: kubectl create secret generic backup-creds --from-file=gcsCredentials=gcs_credentials_file.json This will create the Secret with the name backup-creds to be used in the yaml file like this: apiVersion: postgresql.cnpg.io/v1 kind: Cluster [...] spec: backup: barmanObjectStore: destinationPath: \"gs://<destination path here>\" googleCredentials: applicationCredentials: name: backup-creds key: gcsCredentials Now the operator will use the credentials to authenticate against Google Cloud Storage. Important This way of authentication will create a JSON file inside the container with all the needed information to access your Google Cloud Storage bucket, meaning that if someone gets access to the pod will also have write permissions to the bucket.","title":"Using authentication"},{"location":"cncf-projects/cilium/","text":"Cilium About Cilium is a CNCF Graduated project that was accepted as an Incubating project in 2021 and graduated in 2023. It was originally created by Isovalent. It is an advanced networking, security, and observability solution for cloud native environments, built on top of eBPF technology. Cilium manages network traffic in Kubernetes clusters by dynamically injecting eBPF programs into the Linux Kernel, enabling low-latency, high-performance communication, and enforcing fine-grained security policies. Key features of Cilium: Advanced L3-L7 security policies for fine-grained network traffic control Efficient, kernel-level traffic management via eBPF Service Mesh integration (Cilium Service Mesh) Support for both Kubernetes NetworkPolicy and CiliumNetworkPolicy Built-in observability and monitoring with Hubble To install Cilium in your environment, follow the instructions in the documentation: https://docs.cilium.io/en/stable/gettingstarted/k8s-install-default/ Pod-to-Pod Network Security with CloudNativePG and Cilium Kubernetes\u2019 default behavior is to allow traffic between any two Pods in the cluster network. Cilium provides advanced L3/L4 network security using the CiliumNetworkPolicy resource. This enables fine-grained control over network traffic between Pods within a Kubernetes cluster. It is especially useful for securing communication between application workloads and backend services. In the following examples, we demonstrate how Cilium can be used to secure a CloudNativePG PostgreSQL instance by restricting ingress traffic to only authorized Pods. Important Before proceeding, ensure that the cluster-example Postgres cluster is up and running in your environment. Default Deny Behavior in Cilium By default, Cilium does not deny all traffic unless explicitly configured to do so. In contrast to Kubernetes NetworkPolicy, which uses a deny-by-default model once a policy is present in a namespace, Cilium provides more flexible control over default deny behavior. To enforce a default deny posture with Cilium, you need to explicitly create a policy that denies all traffic to a set of Pods unless otherwise allowed. This is commonly achieved by using an empty ingress section in combination with endpointSelector , or by enabling --enable-default-deny at the Cilium agent level for broader enforcement. A minimal example of a default deny policy: apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: default-deny namespace: default spec: description: \"Default deny all ingress traffic to all Pods in this namespace\" endpointSelector: {} ingress: [] Making Cilium Network Policies work with CloudNativePG Operator When working with a network policy, Cilium or not, the first step is to make sure that the operator can reach the Pods in the target namespace. This is important because the operator needs to be able to perform checks and actions on the Pods, and one of those actions requires access to the port 8000 on the Pods to get the current status of the PostgreSQL instance running inside. The following CiliumNetworkPolicy allows the operator to access the Pods in the target default namespace: apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: cnpg-operator-access namespace: default spec: description: \"Allow CloudNativePG operator access to any pod in the target namespace\" endpointSelector: {} ingress: - fromEndpoints: - matchLabels: io.kubernetes.pod.namespace: cnpg-system toPorts: - ports: - port: \"8000\" protocol: TCP Important The cnpg-system namespace is the default namespace for the operator when using the YAML manifests. If the operator was installed using a different process (Helm, OLM, etc.), the namespace may be different. Make sure to adjust the namespace properly. Allowing access between cluster Pods Since the default policy is \"deny all\", we need to explicitly allow access between the cluster Pods in the same namespace. We will improve our previous policy by adding the required ingress rule: apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: cnpg-cluster-internal-access namespace: default spec: description: \"Allow CloudNativePG operator access and connection between pods in the same namespace\" endpointSelector: {} ingress: - fromEndpoints: - matchLabels: io.kubernetes.pod.namespace: cnpg-system - matchLabels: io.kubernetes.pod.namespace: default cnpg.io/cluster: cluster-example toPorts: - ports: - port: \"8000\" protocol: TCP - port: \"5432\" protocol: TCP The policy allows access from cnpg-system Pods and from default namespace Pods that also belong to cluster-example . The matchLabels selector requires Pods to have the complete set of listed labels. Missing even one label means the Pod will not match. Restricting Access to PostgreSQL with Cilium In this example, we define a CiliumNetworkPolicy that allows only Pods labeled role=backend in the default namespace to connect to a PostgreSQL cluster named cluster-example . All other ingress traffic is blocked by default. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-backend-label namespace: default spec: description: \"Allow PostgreSQL access on port 5432 from Pods with role=backend\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEndpoints: - matchLabels: role: backend toPorts: - ports: - port: \"5432\" protocol: TCP This CiliumNetworkPolicy ensures that only Pods labeled with role=backend can access the PostgreSQL instance managed by CloudNativePG via port 5432 in the default namespace. In the following policy, we demonstrate how to allow ingress traffic to port 5432 of a PostgreSQL cluster named cluster-example , only from Pods with the label role=backend in any namespace. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-backend-any-ns namespace: default spec: description: \"Allow PostgreSQL access on port 5432 from Pods with role=backend in any namespace\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEndpoints: - labelSelector: matchLabels: role: backend matchExpressions: - key: io.kubernetes.pod.namespace operator: Exists toPorts: - ports: - port: \"5432\" protocol: TCP The following example allows ingress traffic to port 5432 of the cluster-example cluster (located in the default namespace) from any Pods in the backend namespace. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-backend-namespace namespace: default spec: description: \"Allow PostgreSQL access on port 5432 from any Pods in the backend namespace\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEndpoints: - matchLabels: io.kubernetes.pod.namespace: backend toPorts: - ports: - port: \"5432\" protocol: TCP Using Cilium\u2019s L3/L4 policy model, we define a CiliumNetworkPolicy that explicitly allows ingress traffic to cluster Pods only from application Pods in the backend namespace. All other traffic is implicitly denied unless explicitly permitted by additional policies. The following example allows ingress traffic to port 5432 of the cluster-example cluster (located in the default namespace) from any source within the Kubernetes cluster. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-cluster-wide namespace: default spec: description: \"Allow ingress traffic to port 5432 of the cluster-example from any pods within the Kubernetes cluster\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEntities: - cluster toPorts: - ports: - port: \"5432\" protocol: TCP You may consider using editor.networkpolicy.io , a visual and interactive tool that simplifies the creation and validation of Cilium Network Policies. It\u2019s especially helpful for avoiding misconfigurations and understanding traffic rules more clearly by presenting in a visual way. With these policies, you've established baseline access controls for PostgreSQL. You can layer additional egress or audit rules using Cilium's policy language or extend to L7 enforcement with Envoy.","title":"Cilium"},{"location":"cncf-projects/cilium/#cilium","text":"","title":"Cilium"},{"location":"cncf-projects/cilium/#about","text":"Cilium is a CNCF Graduated project that was accepted as an Incubating project in 2021 and graduated in 2023. It was originally created by Isovalent. It is an advanced networking, security, and observability solution for cloud native environments, built on top of eBPF technology. Cilium manages network traffic in Kubernetes clusters by dynamically injecting eBPF programs into the Linux Kernel, enabling low-latency, high-performance communication, and enforcing fine-grained security policies. Key features of Cilium: Advanced L3-L7 security policies for fine-grained network traffic control Efficient, kernel-level traffic management via eBPF Service Mesh integration (Cilium Service Mesh) Support for both Kubernetes NetworkPolicy and CiliumNetworkPolicy Built-in observability and monitoring with Hubble To install Cilium in your environment, follow the instructions in the documentation: https://docs.cilium.io/en/stable/gettingstarted/k8s-install-default/","title":"About"},{"location":"cncf-projects/cilium/#pod-to-pod-network-security-with-cloudnativepg-and-cilium","text":"Kubernetes\u2019 default behavior is to allow traffic between any two Pods in the cluster network. Cilium provides advanced L3/L4 network security using the CiliumNetworkPolicy resource. This enables fine-grained control over network traffic between Pods within a Kubernetes cluster. It is especially useful for securing communication between application workloads and backend services. In the following examples, we demonstrate how Cilium can be used to secure a CloudNativePG PostgreSQL instance by restricting ingress traffic to only authorized Pods. Important Before proceeding, ensure that the cluster-example Postgres cluster is up and running in your environment.","title":"Pod-to-Pod Network Security with CloudNativePG and Cilium"},{"location":"cncf-projects/cilium/#default-deny-behavior-in-cilium","text":"By default, Cilium does not deny all traffic unless explicitly configured to do so. In contrast to Kubernetes NetworkPolicy, which uses a deny-by-default model once a policy is present in a namespace, Cilium provides more flexible control over default deny behavior. To enforce a default deny posture with Cilium, you need to explicitly create a policy that denies all traffic to a set of Pods unless otherwise allowed. This is commonly achieved by using an empty ingress section in combination with endpointSelector , or by enabling --enable-default-deny at the Cilium agent level for broader enforcement. A minimal example of a default deny policy: apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: default-deny namespace: default spec: description: \"Default deny all ingress traffic to all Pods in this namespace\" endpointSelector: {} ingress: []","title":"Default Deny Behavior in Cilium"},{"location":"cncf-projects/cilium/#making-cilium-network-policies-work-with-cloudnativepg-operator","text":"When working with a network policy, Cilium or not, the first step is to make sure that the operator can reach the Pods in the target namespace. This is important because the operator needs to be able to perform checks and actions on the Pods, and one of those actions requires access to the port 8000 on the Pods to get the current status of the PostgreSQL instance running inside. The following CiliumNetworkPolicy allows the operator to access the Pods in the target default namespace: apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: cnpg-operator-access namespace: default spec: description: \"Allow CloudNativePG operator access to any pod in the target namespace\" endpointSelector: {} ingress: - fromEndpoints: - matchLabels: io.kubernetes.pod.namespace: cnpg-system toPorts: - ports: - port: \"8000\" protocol: TCP Important The cnpg-system namespace is the default namespace for the operator when using the YAML manifests. If the operator was installed using a different process (Helm, OLM, etc.), the namespace may be different. Make sure to adjust the namespace properly.","title":"Making Cilium Network Policies work with CloudNativePG Operator"},{"location":"cncf-projects/cilium/#allowing-access-between-cluster-pods","text":"Since the default policy is \"deny all\", we need to explicitly allow access between the cluster Pods in the same namespace. We will improve our previous policy by adding the required ingress rule: apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: cnpg-cluster-internal-access namespace: default spec: description: \"Allow CloudNativePG operator access and connection between pods in the same namespace\" endpointSelector: {} ingress: - fromEndpoints: - matchLabels: io.kubernetes.pod.namespace: cnpg-system - matchLabels: io.kubernetes.pod.namespace: default cnpg.io/cluster: cluster-example toPorts: - ports: - port: \"8000\" protocol: TCP - port: \"5432\" protocol: TCP The policy allows access from cnpg-system Pods and from default namespace Pods that also belong to cluster-example . The matchLabels selector requires Pods to have the complete set of listed labels. Missing even one label means the Pod will not match.","title":"Allowing access between cluster Pods"},{"location":"cncf-projects/cilium/#restricting-access-to-postgresql-with-cilium","text":"In this example, we define a CiliumNetworkPolicy that allows only Pods labeled role=backend in the default namespace to connect to a PostgreSQL cluster named cluster-example . All other ingress traffic is blocked by default. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-backend-label namespace: default spec: description: \"Allow PostgreSQL access on port 5432 from Pods with role=backend\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEndpoints: - matchLabels: role: backend toPorts: - ports: - port: \"5432\" protocol: TCP This CiliumNetworkPolicy ensures that only Pods labeled with role=backend can access the PostgreSQL instance managed by CloudNativePG via port 5432 in the default namespace. In the following policy, we demonstrate how to allow ingress traffic to port 5432 of a PostgreSQL cluster named cluster-example , only from Pods with the label role=backend in any namespace. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-backend-any-ns namespace: default spec: description: \"Allow PostgreSQL access on port 5432 from Pods with role=backend in any namespace\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEndpoints: - labelSelector: matchLabels: role: backend matchExpressions: - key: io.kubernetes.pod.namespace operator: Exists toPorts: - ports: - port: \"5432\" protocol: TCP The following example allows ingress traffic to port 5432 of the cluster-example cluster (located in the default namespace) from any Pods in the backend namespace. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-backend-namespace namespace: default spec: description: \"Allow PostgreSQL access on port 5432 from any Pods in the backend namespace\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEndpoints: - matchLabels: io.kubernetes.pod.namespace: backend toPorts: - ports: - port: \"5432\" protocol: TCP Using Cilium\u2019s L3/L4 policy model, we define a CiliumNetworkPolicy that explicitly allows ingress traffic to cluster Pods only from application Pods in the backend namespace. All other traffic is implicitly denied unless explicitly permitted by additional policies. The following example allows ingress traffic to port 5432 of the cluster-example cluster (located in the default namespace) from any source within the Kubernetes cluster. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: postgres-access-cluster-wide namespace: default spec: description: \"Allow ingress traffic to port 5432 of the cluster-example from any pods within the Kubernetes cluster\" endpointSelector: matchLabels: cnpg.io/cluster: cluster-example ingress: - fromEntities: - cluster toPorts: - ports: - port: \"5432\" protocol: TCP You may consider using editor.networkpolicy.io , a visual and interactive tool that simplifies the creation and validation of Cilium Network Policies. It\u2019s especially helpful for avoiding misconfigurations and understanding traffic rules more clearly by presenting in a visual way. With these policies, you've established baseline access controls for PostgreSQL. You can layer additional egress or audit rules using Cilium's policy language or extend to L7 enforcement with Envoy.","title":"Restricting Access to PostgreSQL with Cilium"},{"location":"cncf-projects/external-secrets/","text":"External Secrets External Secrets is a CNCF Sandbox project, accepted in 2022 under the sponsorship of TAG Security. About The External Secrets Operator (ESO) is a Kubernetes operator that enhances secret management by decoupling the storage of secrets from Kubernetes itself. It enables seamless synchronization between external secret management systems and native Kubernetes Secret resources. ESO supports a wide range of backends, including: HashiCorp Vault AWS Secrets Manager Google Secret Manager Azure Key Vault IBM Cloud Secrets Manager \u2026and many more. For a full and up-to-date list of supported providers, refer to the official External Secrets documentation . Integration with PostgreSQL and CloudNativePG When it comes to PostgreSQL databases, External Secrets integrates seamlessly with CloudNativePG in two major use cases: Automated password management: ESO can handle the automatic generation and rotation of database user passwords stored in Kubernetes Secret resources, ensuring that applications running inside the cluster always have access to up-to-date credentials. Cross-platform secret access: It enables transparent synchronization of those passwords with an external Key Management Service (KMS) via a SecretStore resources. This allows applications and developers outside the Kubernetes cluster\u2014who may not have access to Kubernetes secrets\u2014to retrieve the database credentials directly from the external KMS. Example: Automated Password Management with External Secrets Let\u2019s walk through how to automatically rotate the password of the app user every 24 hours in the cluster-example Postgres cluster from the quickstart guide . Important Before proceeding, ensure that the cluster-example Postgres cluster is up and running in your environment. By default, CloudNativePG generates and manages a Kubernetes Secret named cluster-example-app , which contains the credentials for the app user in the cluster-example cluster. You can read more about this in the \u201cConnecting from an application\u201d section . With External Secrets, the goal is to: Define a Password generator that specifies how to generate the password. Create an ExternalSecret resource that keeps the cluster-example-app secret in sync by updating only the password and pgpass fields. Creating the Password Generator The following example creates a Password generator resource named pg-password-generator in the default namespace. You can customize the name and properties to suit your needs: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password metadata: name: pg-password-generator spec: length: 42 digits: 5 symbols: 5 symbolCharacters: \"-_$@\" noUpper: false allowRepeat: true This specification defines the characteristics of the generated password, including its length and the inclusion of digits, symbols, and uppercase letters. Creating the External Secret The example below creates an ExternalSecret resource named cluster-example-app-secret , which refreshes the password every 24 hours. It uses a Merge policy to update only the specified fields ( password , pgpass , jdbc-uri and uri ) in the cluster-example-app secret. apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: cluster-example-app-secret spec: refreshInterval: \"24h\" target: name: cluster-example-app creationPolicy: Merge template: metadata: labels: cnpg.io/reload: \"true\" data: password: \"{{ .password }}\" pgpass: \"cluster-example-rw:5432:app:app:{{ .password }}\" jdbc-uri: \"jdbc:postgresql://cluster-example-rw.default:5432/app?password={{ .password }}&user=app\" uri: \"postgresql://app:{{ .password }}@cluster-example-rw.default:5432/app\" dataFrom: - sourceRef: generatorRef: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password name: pg-password-generator The label cnpg.io/reload: \"true\" ensures that CloudNativePG triggers a reload of the user password in the database when the secret changes. Verifying the Configuration To check that the ExternalSecret is correctly synchronizing: kubectl get es cluster-example-app-secret To observe the password being refreshed in real time, temporarily reduce the refreshInterval to 30s and run the following command repeatedly: kubectl get secret cluster-example-app \\ -o jsonpath=\"{.data.password}\" | base64 -d You should see the password change every 30 seconds, confirming that the rotation is working correctly. There's More While the example above focuses on the default cluster-example-app secret created by CloudNativePG, the same approach can be extended to manage any custom secrets or PostgreSQL users you create to regularly rotate their password. Example: Integration with an External KMS One of the most widely used Key Management Service (KMS) providers in the CNCF ecosystem is HashiCorp Vault . Although Vault is licensed under the Business Source License (BUSL), a fully compatible and actively maintained open source alternative is available: OpenBao . OpenBao supports all the same interfaces as HashiCorp Vault, making it a true drop-in replacement. In this example, we'll demonstrate how to integrate CloudNativePG, External Secrets Operator, and HashiCorp Vault to automatically rotate a PostgreSQL password and securely store it in Vault. Important This example assumes that HashiCorp Vault is already installed and properly configured in your environment, and that your team has the necessary expertise to operate it. There are various ways to deploy Vault, and detailing them is outside the scope of CloudNativePG. While it's possible to run Vault inside Kubernetes, it is more commonly deployed externally. For detailed instructions, consult the HashiCorp Vault documentation . Continuing from the previous example, we will now create the necessary SecretStore and PushSecret resources to complete the integration with Vault. Creating the SecretStore In this example, we assume that HashiCorp Vault is accessible from within the namespace at http://vault.vault.svc:8200 , and that a Kubernetes Secret named vault-token exists in the same namespace, containing the token used to authenticate with Vault. apiVersion: external-secrets.io/v1beta1 kind: SecretStore metadata: name: vault-backend spec: provider: vault: server: \"http://vault.vault.svc:8200\" path: \"secrets\" # Specifies the Vault KV secret engine version (\"v1\" or \"v2\"). # Defaults to \"v2\" if not set. version: \"v2\" auth: # References a Kubernetes Secret that contains the Vault token. # See: https://www.vaultproject.io/docs/auth/token tokenSecretRef: name: \"vault-token\" key: \"token\" --- apiVersion: v1 kind: Secret metadata: name: vault-token data: token: aHZzLioqKioqKio= # hvs.******* This configuration creates a SecretStore resource named vault-backend . Important This example uses basic token-based authentication, which is suitable for testing API, and CLI use cases. While it is the default method enabled in Vault, it is not recommended for production environments. For production, consider using more secure authentication methods. Refer to the External Secrets Operator documentation for a full list of supported authentication mechanisms. Info HashiCorp Vault must have a KV secrets engine enabled at the secrets path with version v2 . If your Vault instance uses a different path or version, be sure to update the path and version fields accordingly. Creating the PushSecret The PushSecret resource is used to push a Kubernetes Secret to HashiCorp Vault. In this simplified example, we'll push the credentials for the app user of the sample cluster cluster-example . For more details on configuring PushSecret , refer to the External Secrets Operator documentation . apiVersion: external-secrets.io/v1alpha1 kind: PushSecret metadata: name: pushsecret-example spec: deletionPolicy: Delete refreshInterval: 24h secretStoreRefs: - name: vault-backend kind: SecretStore selector: secret: name: cluster-example-app data: - match: remoteRef: remoteKey: cluster-example-app In this example, the PushSecret resource instructs the External Secrets Operator to push the Kubernetes Secret named cluster-example-app to HashiCorp Vault (from the previous example). The remoteKey defines the name under which the secret will be stored in Vault, using the SecretStore named vault-backend . Verifying the Configuration To verify that the PushSecret is functioning correctly, navigate to the HashiCorp Vault UI. In the kv secrets engine at the path secrets , you should find a secret named cluster-example-app , corresponding to the remoteKey defined above.","title":"External Secrets"},{"location":"cncf-projects/external-secrets/#external-secrets","text":"External Secrets is a CNCF Sandbox project, accepted in 2022 under the sponsorship of TAG Security.","title":"External Secrets"},{"location":"cncf-projects/external-secrets/#about","text":"The External Secrets Operator (ESO) is a Kubernetes operator that enhances secret management by decoupling the storage of secrets from Kubernetes itself. It enables seamless synchronization between external secret management systems and native Kubernetes Secret resources. ESO supports a wide range of backends, including: HashiCorp Vault AWS Secrets Manager Google Secret Manager Azure Key Vault IBM Cloud Secrets Manager \u2026and many more. For a full and up-to-date list of supported providers, refer to the official External Secrets documentation .","title":"About"},{"location":"cncf-projects/external-secrets/#integration-with-postgresql-and-cloudnativepg","text":"When it comes to PostgreSQL databases, External Secrets integrates seamlessly with CloudNativePG in two major use cases: Automated password management: ESO can handle the automatic generation and rotation of database user passwords stored in Kubernetes Secret resources, ensuring that applications running inside the cluster always have access to up-to-date credentials. Cross-platform secret access: It enables transparent synchronization of those passwords with an external Key Management Service (KMS) via a SecretStore resources. This allows applications and developers outside the Kubernetes cluster\u2014who may not have access to Kubernetes secrets\u2014to retrieve the database credentials directly from the external KMS.","title":"Integration with PostgreSQL and CloudNativePG"},{"location":"cncf-projects/external-secrets/#example-automated-password-management-with-external-secrets","text":"Let\u2019s walk through how to automatically rotate the password of the app user every 24 hours in the cluster-example Postgres cluster from the quickstart guide . Important Before proceeding, ensure that the cluster-example Postgres cluster is up and running in your environment. By default, CloudNativePG generates and manages a Kubernetes Secret named cluster-example-app , which contains the credentials for the app user in the cluster-example cluster. You can read more about this in the \u201cConnecting from an application\u201d section . With External Secrets, the goal is to: Define a Password generator that specifies how to generate the password. Create an ExternalSecret resource that keeps the cluster-example-app secret in sync by updating only the password and pgpass fields.","title":"Example: Automated Password Management with External Secrets"},{"location":"cncf-projects/external-secrets/#creating-the-password-generator","text":"The following example creates a Password generator resource named pg-password-generator in the default namespace. You can customize the name and properties to suit your needs: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password metadata: name: pg-password-generator spec: length: 42 digits: 5 symbols: 5 symbolCharacters: \"-_$@\" noUpper: false allowRepeat: true This specification defines the characteristics of the generated password, including its length and the inclusion of digits, symbols, and uppercase letters.","title":"Creating the Password Generator"},{"location":"cncf-projects/external-secrets/#creating-the-external-secret","text":"The example below creates an ExternalSecret resource named cluster-example-app-secret , which refreshes the password every 24 hours. It uses a Merge policy to update only the specified fields ( password , pgpass , jdbc-uri and uri ) in the cluster-example-app secret. apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: cluster-example-app-secret spec: refreshInterval: \"24h\" target: name: cluster-example-app creationPolicy: Merge template: metadata: labels: cnpg.io/reload: \"true\" data: password: \"{{ .password }}\" pgpass: \"cluster-example-rw:5432:app:app:{{ .password }}\" jdbc-uri: \"jdbc:postgresql://cluster-example-rw.default:5432/app?password={{ .password }}&user=app\" uri: \"postgresql://app:{{ .password }}@cluster-example-rw.default:5432/app\" dataFrom: - sourceRef: generatorRef: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password name: pg-password-generator The label cnpg.io/reload: \"true\" ensures that CloudNativePG triggers a reload of the user password in the database when the secret changes.","title":"Creating the External Secret"},{"location":"cncf-projects/external-secrets/#verifying-the-configuration","text":"To check that the ExternalSecret is correctly synchronizing: kubectl get es cluster-example-app-secret To observe the password being refreshed in real time, temporarily reduce the refreshInterval to 30s and run the following command repeatedly: kubectl get secret cluster-example-app \\ -o jsonpath=\"{.data.password}\" | base64 -d You should see the password change every 30 seconds, confirming that the rotation is working correctly.","title":"Verifying the Configuration"},{"location":"cncf-projects/external-secrets/#theres-more","text":"While the example above focuses on the default cluster-example-app secret created by CloudNativePG, the same approach can be extended to manage any custom secrets or PostgreSQL users you create to regularly rotate their password.","title":"There's More"},{"location":"cncf-projects/external-secrets/#example-integration-with-an-external-kms","text":"One of the most widely used Key Management Service (KMS) providers in the CNCF ecosystem is HashiCorp Vault . Although Vault is licensed under the Business Source License (BUSL), a fully compatible and actively maintained open source alternative is available: OpenBao . OpenBao supports all the same interfaces as HashiCorp Vault, making it a true drop-in replacement. In this example, we'll demonstrate how to integrate CloudNativePG, External Secrets Operator, and HashiCorp Vault to automatically rotate a PostgreSQL password and securely store it in Vault. Important This example assumes that HashiCorp Vault is already installed and properly configured in your environment, and that your team has the necessary expertise to operate it. There are various ways to deploy Vault, and detailing them is outside the scope of CloudNativePG. While it's possible to run Vault inside Kubernetes, it is more commonly deployed externally. For detailed instructions, consult the HashiCorp Vault documentation . Continuing from the previous example, we will now create the necessary SecretStore and PushSecret resources to complete the integration with Vault.","title":"Example: Integration with an External KMS"},{"location":"cncf-projects/external-secrets/#creating-the-secretstore","text":"In this example, we assume that HashiCorp Vault is accessible from within the namespace at http://vault.vault.svc:8200 , and that a Kubernetes Secret named vault-token exists in the same namespace, containing the token used to authenticate with Vault. apiVersion: external-secrets.io/v1beta1 kind: SecretStore metadata: name: vault-backend spec: provider: vault: server: \"http://vault.vault.svc:8200\" path: \"secrets\" # Specifies the Vault KV secret engine version (\"v1\" or \"v2\"). # Defaults to \"v2\" if not set. version: \"v2\" auth: # References a Kubernetes Secret that contains the Vault token. # See: https://www.vaultproject.io/docs/auth/token tokenSecretRef: name: \"vault-token\" key: \"token\" --- apiVersion: v1 kind: Secret metadata: name: vault-token data: token: aHZzLioqKioqKio= # hvs.******* This configuration creates a SecretStore resource named vault-backend . Important This example uses basic token-based authentication, which is suitable for testing API, and CLI use cases. While it is the default method enabled in Vault, it is not recommended for production environments. For production, consider using more secure authentication methods. Refer to the External Secrets Operator documentation for a full list of supported authentication mechanisms. Info HashiCorp Vault must have a KV secrets engine enabled at the secrets path with version v2 . If your Vault instance uses a different path or version, be sure to update the path and version fields accordingly.","title":"Creating the SecretStore"},{"location":"cncf-projects/external-secrets/#creating-the-pushsecret","text":"The PushSecret resource is used to push a Kubernetes Secret to HashiCorp Vault. In this simplified example, we'll push the credentials for the app user of the sample cluster cluster-example . For more details on configuring PushSecret , refer to the External Secrets Operator documentation . apiVersion: external-secrets.io/v1alpha1 kind: PushSecret metadata: name: pushsecret-example spec: deletionPolicy: Delete refreshInterval: 24h secretStoreRefs: - name: vault-backend kind: SecretStore selector: secret: name: cluster-example-app data: - match: remoteRef: remoteKey: cluster-example-app In this example, the PushSecret resource instructs the External Secrets Operator to push the Kubernetes Secret named cluster-example-app to HashiCorp Vault (from the previous example). The remoteKey defines the name under which the secret will be stored in Vault, using the SecretStore named vault-backend .","title":"Creating the PushSecret"},{"location":"cncf-projects/external-secrets/#verifying-the-configuration_1","text":"To verify that the PushSecret is functioning correctly, navigate to the HashiCorp Vault UI. In the kv secrets engine at the path secrets , you should find a secret named cluster-example-app , corresponding to the remoteKey defined above.","title":"Verifying the Configuration"},{"location":"release_notes/edb-cloud-native-postgresql/","text":"Release notes for 1.14.0 and earlier The first public release of CloudNativePG is version 1.15.0. Before that, the product was entirely owned by EDB and distributed under the name of \"Cloud Native PostgreSQL\" . The list of changes in this page is only for informative purposes, to demonstrate the history of the product on top of commits. None of the versions listed here exists for CloudNativePG. Version 1.14.0 Release date: 25 March 2022 Features: Natively support Google Cloud Storage for backup and recovery, by taking advantage of the features introduced in Barman Cloud 2.19 Improved observability of backups through the introduction of the LastBackupSucceeded condition for the Cluster object Support update of Hot Standby sensitive parameters: max_connections , max_prepared_transactions , max_locks_per_transaction , max_wal_senders , max_worker_processes Add the Online upgrade in progress phase in the Cluster object to show when an online upgrade of the operator is in progress Ability to inherit an AWS IAM Role as an alternative way to provide credentials for the S3 object storage Support for Opaque secrets for Pooler\u2019s authQuerySecret and certificates Updated default PostgreSQL version to 14.2 Add a new command to kubectl cnp plugin named maintenance to set maintenance window to cluster(s) in one or all namespaces across the Kubernetes cluster Container Images: Latest PostgreSQL containers include Barman Cloud 2.19 Security Enhancements: Stronger RBAC enforcement for namespaced operator installations with Operator Lifecycle Manager, including OpenShift. OpenShift users are recommended to update to this version. Fixes: Allow the instance manager to retry an interrupted pg_rewind by preserving a copy of the original pg_control file Clean up stale PID files before running pg_rewind Force sorting by key in primary_conninfo to avoid random restarts with PostgreSQL versions prior to 13 Preserve ServiceAccount changes (e.g., labels, annotations) upon reconciliation Disable enforcement of the imagePullPolicy default value Improve initDB validation for WAL segment size Properly handle the targetLSN option when recovering a cluster with the LSN specified Fix custom TLS certificates validation by allowing a certificates chain both in the server and CA certificates Version 1.13.0 Release date: 17 February 2022 Features: Support for Snappy compression. Snappy is a fast compression option for backups that increase the speed of uploads to the object store using a lower compression ratio Support for tagging files uploaded to the Barman object store. This feature requires Barman 2.18 in the operand image. of backups after Cluster deletion Extension of the status of a Cluster with status.conditions . The condition ContinuousArchiving indicates that the Cluster has started to archive WAL files Improve the status command of the cnp plugin for kubectl with additional information: add a Cluster Summary section showing the status of the Cluster and a Certificates Status section including the status of the certificates used in the Cluster along with the time left to expire Support the new barman-cloud-check-wal-archive command to detect a non-empty backup destination when creating a new cluster Add support for using a Secret to add default monitoring queries through MONITORING_QUERIES_SECRET configuration variable. Allow the user to restrict container\u2019s permissions using AppArmor (on Kubernetes clusters deployed with AppArmor support) Add Windows platform support to cnp plugin for kubectl , now the plugin is available on Windows x86 and ARM Drop support for Kubernetes 1.18 and deprecated API versions Container Images: PostgreSQL containers include Barman 2.18 Security Fix: Add coherence check of username field inside owner and superuser secrets; previously, a malicious user could have used the secrets to change the password of any PostgreSQL user Fixes: Fix a memory leak in code fetching status from Postgres pods Disable PostgreSQL self-restart after a crash. The instance controller handles the lifecycle of the PostgreSQL instance Prevent modification of .spec.postgresUID and .spec.postgresGID fields in validation webhook. Changing these fields after Cluster creation makes PostgreSQL unable to start Reduce the log verbosity from the backup and WAL archiving handling code Correct a bug resulting in a Cluster being marked as Healthy when not initialized yet Allows standby servers in clusters with a very high WAL production rate to switch to streaming once they are aligned Fix a race condition during the startup of a PostgreSQL pod that could seldom lead to a crash Fix a race condition that could lead to a failure initializing the first PVC in a Cluster Remove an extra restart of a just demoted primary Pod before joining the Cluster as a replica Correctly handle replication-sensitive PostgreSQL configuration parameters when recovering from a backup Fix missing validation of PostgreSQL configurations during Cluster creation Version 1.12.0 Release date: 11 January 2022 Features: Add Kubernetes 1.23 to the list of supported Kubernetes distributions and remove end-to-end tests for 1.17, which ended support by the Kubernetes project in Dec 2020 Improve the responsiveness of pod status checks in case of network issues by adding a connection timeout of 2 seconds and a communication timeout of 30 seconds. This change sets a limit on the time the operator waits for a pod to report its status before declaring it as failed, enhancing the robustness and predictability of a failover operation Introduce the .spec.inheritedMetadata field to the Cluster allowing the user to specify labels and annotations that will apply to all objects generated by the Cluster Reduce the number of queries executed when calculating the status of an instance Add a readiness probe for PgBouncer Add support for custom Certification Authority of the endpoint of Barman\u2019s backup object store when using Azure protocol Fixes: During a failover, wait to select a new primary until all the WAL streaming connections are closed. The operator now sets by default wal_sender_timeout and wal_receiver_timeout to 5 seconds to make sure standby nodes will quickly notice if the primary has network issues Change WAL archiving strategy in replica clusters to fix rolling updates by setting \"archive_mode\" to \"always\" for any PostgreSQL instance in a replica cluster. We then restrict the upload of the WAL only from the current and target designated primary. A WAL may be uploaded twice during switchovers, which is not an issue Fix support for custom Certification Authority of the endpoint of Barman\u2019s backup object store in replica clusters source Use a fixed name for default monitoring config map in the cluster namespace If the defaulting webhook is not working for any reason, the operator now updates the Cluster with the defaults also during the reconciliation cycle Fix the comparison of resource requests and limits to fix a rare issue leading to an update of all the pods on every reconciliation cycle Improve log messages from webhooks to also include the object namespace Stop logging a \u201cdefault\u201d message at the start of every reconciliation loop Stop logging a PodMonitor deletion on every reconciliation cycle if enablePodMonitor is false Do not complain about possible architecture mismatch if a pod is not reachable Version 1.11.0 Release date: 15 December 2021 Features: Parallel WAL archiving and restore: allow the database to keep up with WAL generation on high write systems by introducing the backupObjectStore.maxParallel option to set the maximum number of parallel jobs to be executed during both WAL archiving (by PostgreSQL\u2019s archive_command ) and WAL restore (by restore_command ). Using parallel restore option can allow newly promoted Standbys to get to a ready state faster by fetching needed WAL files to replay in parallel rather than sequentially Default set of metrics for monitoring: a new ConfigMap called default-monitoring is automatically deployed in the same namespace of the operator and, by default, added to any existing Postgres cluster. Such behavior can be changed globally by setting the MONITORING_QUERIES_CONFIGMAP parameter in the operator\u2019s configuration, or at cluster level through the .spec.monitoring.disableDefaultQueries option (by default set to false ) Introduce the enablePodMonitor option in the monitoring section of a cluster to automatically manage a PodMonitor resource and seamlessly integrate with Prometheus Improve the PostgreSQL shutdown procedure by trying to execute a smart shutdown for the first half of the desired stopDelay time, and a fast shutdown for the remaining half, before the pod is killed by Kubernetes Add the switchoverDelay option to control the time given to the former primary to shut down gracefully and archive all the WAL files before promoting the new primary (by default, CloudNativePG waits indefinitely to privilege data durability) Handle changes to resource requests and limits for a PostgreSQL Cluster by issuing a rolling update Improve the status command of the cnp plugin for kubectl with additional information: streaming replication status, total size of the database, role of an instance in the cluster Enhance support of workloads with many parallel workers by enabling configuration of the dynamic_shared_memory_type and shared_memory_type parameters for PostgreSQL\u2019s management of shared memory Propagate labels and annotations defined at cluster level to the associated resources, including pods (deletions are not supported) Automatically remove pods that have been evicted by the Kubelet Manage automated resizing of persistent volumes in Azure through the ENABLE_AZURE_PVC_UPDATES operator configuration option, by issuing a rolling update of the cluster if needed (disabled by default) Introduce the cnpg.io/reconciliationLoop annotation that, when set to disabled on a given Postgres cluster, prevents the reconciliation loop from running Introduce the postInitApplicationSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed on the main application database as a superuser immediately after the cluster has been created Fixes: Liveness probe now correctly handles the startup process of a PostgreSQL server. This fixes an issue reported by a few customers and affects a restarted standby server that needs to recover WAL files to reach a consistent state, but it was not able to do it before the timeout of liveness probe would kick in, leaving the pods in CrashLoopBackOff status. Liveness probe now correctly handles the case of a former primary that needs to use pg_rewind to re-align with the current primary after a timeline diversion. This fixes the pod of the new standby from repeatedly being killed by Kubernetes. Reduce client-side throttling from Postgres pods (e.g. Waited for 1.182388649s due to client-side throttling, not priority and fairness, request: GET ) Disable Public Key Infrastructure (PKI) initialization on OpenShift and OLM installations, by using the provided one When changing configuration parameters that require a restart, always leave the primary as last Mark a PVC to be ready only after a job has been completed successfully, preventing a race condition in PVC initialization Use the correct public key when renewing the expired webhook TLS secret. Fix an overflow when parsing an LSN Remove stale PID files at startup Let the Pooler resource inherit the imagePullSecret defined in the operator, if exists Version 1.10.0 Release date: 11 November 2021 Features: Connection Pooling with PgBouncer : introduce the Pooler resource and controller to automatically manage a PgBouncer deployment to be used as a connection pooler for a local PostgreSQL Cluster . The feature includes TLS client/server connections, password authentication, High Availability, pod templates support, configuration of key PgBouncer parameters, PAUSE / RESUME , logging in JSON format, Prometheus exporter for stats, pools, and lists Backup Retention Policies : support definition of recovery window retention policies for backups (e.g. \u201830d\u2019 to ensure a recovery window of 30 days) In-Place updates of the operator : introduce an in-place online update of the instance manager, which removes the need to perform a rolling update of the entire cluster following an update of the operator. By default this option is disabled (please refer to the documentation for more detailed information ) Limit the list of options that can be customized in the initdb bootstrap method to dataChecksums , encoding , localeCollate , localeCType , walSegmentSize . This makes the options array obsolete and planned to be removed in the v2 API Introduce the postInitTemplateSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed on the template1 database as a superuser immediately after the cluster has been created. This feature allows you to include default objects in all application databases created in the cluster New default metrics added to the instance Prometheus exporter: Postgres version, cluster name, and first point of recoverability according to the backup catalog Retry taking a backup after a failure Build awareness about Barman Cloud capabilities in order to prevent the operator from invoking recently introduced features (such as retention policies, or Azure Blob Container storage) that are not present in operand images that are not frequently updated Integrate the output of the status command of the cnp plugin with information about the backup Introduce a new annotation that reports the status of a PVC (being initialized or ready) Set the cluster name in the k8s.enterprisedb.io/cluster label for every object generated in a Cluster , including Backup objects Drop support for deprecated API version postgresql.cnpg.io/v1alpha1 on the Cluster , Backup , and ScheduledBackup kinds Set default operand image to PostgreSQL 14.2 Security: Set allowPrivilegeEscalation to false for the operator containers securityContext Fixes: Disable primary PodDisruptionBudget during maintenance in single-instance clusters Use the correct certificate certification authority (CA) during recovery operations Prevent Postgres connection leaking when checking WAL archiving status before taking a backup Let WAL archive/restore sleep for 100ms following transient errors that would flood logs otherwise Version 1.9.2 Release date: 15 October 2021 Features: Enhance JSON log with two new loggers: wal-archive for PostgreSQL's archive_command , and wal-restore for restore_command in a standby Fixes: Enable WAL archiving during the standby promotion (prevented .history files from being archived) Pass the --cloud-provider option to Barman Cloud tools only when using Barman 2.13 or higher to avoid errors with older operands Wait for the pod of the primary to be ready before triggering a backup Version 1.9.1 Release date: 30 September 2021 This release is to celebrate the launch of PostgreSQL 14 by making it the default major version when a new Cluster is created without defining a specific image name. Fixes: Fix issue causing Error while getting barman endpoint CA secret message to appear in the logs of the primary pod, which prevented the backup to work correctly Properly retry requesting a new backup in case of temporary communication issues with the instance manager Version 1.9.0 Release date: 28 September 2021 Version 1.9.0 is not available on OpenShift due to delays with the release process and the subsequent release of version 1.9.1. Features: Add Kubernetes 1.22 to the list of supported Kubernetes distributions, and remove 1.16 Introduce support for the --restore-target-wal option in pg_rewind , in order to fetch WAL files from the backup archive, if necessary (available only with PostgreSQL 13+) Expose a default metric for the Prometheus exporter that estimates the number of pages in the pg_catalog.pg_largeobject table in each database Enhance the performance of WAL archiving and fetching, through local in-memory cache Fixes: Explicitly set the postgres user when invoking pg_isready - required by restricted SCC in OpenShift Properly update the FirstRecoverabilityPoint in the status Set archive_mode = always on the designated primary if backup is requested Minor bug fixes Version 1.8.0 Release date: 13 September 2021 Features: Bootstrap a new cluster via full or Point-In-Time Recovery directly from an object store defined in the external cluster section, eliminating the previous requirement to have a Backup CR defined Introduce the immediate option in scheduled backups to request a backup immediately after the first Postgres instance running, adding the capability to rewind to the very beginning of a cluster when Point-In-Time Recovery is configured Add the firstRecoverabilityPoint in the cluster status to report the oldest consistent point in time to request a recovery based on the backup object store\u2019s content Enhance the default Prometheus exporter for a PostgreSQL instance by exposing the following new metrics: number of WAL files and computed total size on disk number of .ready and .done files in the archive status folder flag for replica mode number of requested minimum/maximum synchronous replicas, as well as the expected and actually observed ones Add support for the runonserver option when defining custom metrics in the Prometheus exporter to limit the collection of a metric to a range of PostgreSQL versions Natively support Azure Blob Storage for backup and recovery, by taking advantage of the feature introduced in Barman 2.13 for Barman Cloud Rely on pg_isready for the liveness probe Support RFC3339 format for timestamp specification in recovery target times Introduce .spec.imagePullPolicy to control the pull policy of image containers for all pods and jobs created for a cluster Add support for OpenShift 4.8, which replaces OpenShift 4.5 Support PostgreSQL 14 (beta) Enhance the replica cluster feature with cross-cluster replication from an object store defined in an external cluster section, without requiring a streaming connection (experimental) Introduce logLevel option to the cluster's spec to specify one of the following levels: error, info, debug or trace Security Enhancements: Introduce .spec.enableSuperuserAccess to enable/disable network access with the postgres user through password authentication Fixes: Properly inform users when a cluster enters an unrecoverable state and requires human intervention Version 1.7.1 Release date: 11 August 2021 Features: Prefer self-healing over configuration with regards to synchronous replication, empowering the operator to temporarily override minSyncReplicas and maxSyncReplicas settings in case the cluster is not able to meet the requirements during self-healing operations Introduce the postInitSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed as a superuser immediately after the cluster has been created Fixes: Allow the operator to failover when the primary is not ready (bug introduced in 1.7.0) Execute administrative queries using the LOCAL synchronous commit level Correctly parse multi-line log entries in PGAudit Version 1.7.0 Release date: 28 July 2021 Features: Add native support to PGAudit with a new type of logger called pgaudit directly available in the JSON output Enhance monitoring and observability capabilities through: Native support for the pg_stat_statements and auto_explain extensions The target_databases option in the Prometheus exporter to run a user-defined metric query on one or more databases (including auto-discovery of databases through shell-like pattern matching) Exposure of the manual_switchover_required metric to promptly report whether a cluster with primaryUpdateStrategy set to supervised requires a manual switchover Transparently handle shared_preload_libraries for pg_audit , auto_explain and pg_stat_statements Automatic configuration of shared_preload_libraries for PostgreSQL when pg_stat_statements , pgaudit or auto_explain options are added to the postgresql parameters section Support the cnpg.io/reload label to finely control the automated reload of config maps and secrets, including those used for custom monitoring/alerting metrics in the Prometheus exporter or to store certificates Add the reload command to the cnp plugin for kubectl to trigger a reconciliation loop on the instances Improve control of pod affinity and anti-affinity configurations through additionalPodAffinity and additionalPodAntiAffinity Introduce a separate PodDisruptionBudget for primary instances, by requiring at least a primary instance to run at any time Security Enhancements: Add the .spec.certificates.clientCASecret and .spec.certificates.replicationTLSSecret options to define custom client Certification Authority and certificate for the PostgreSQL server, to be used to authenticate client certificates and secure communication between PostgreSQL nodes Add the .spec.backup.barmanObjectStore.endpointCA option to define the custom Certification Authority bundle of the endpoint of Barman\u2019s backup object store Fixes: Correctly parse histograms in the Prometheus exporter Reconcile services created by the operator for a cluster Version 1.6.0 Release date: 12 July 2021 Features: Replica mode ( EXPERIMENTAL ): allow a cluster to be created as a replica of a source cluster. A replica cluster has a designated primary and any number of standbys. Add the .spec.postgresql.promotionTimeout parameter to specify the maximum amount of seconds to wait when promoting an instance to primary, defaulting to 40000000 seconds. Add the .spec.affinity.podAntiAffinityType parameter. It can be set to preferred (default), resulting in preferredDuringSchedulingIgnoredDuringExecution being used, or to required , resulting in requiredDuringSchedulingIgnoredDuringExecution . Changes: Fixed a race condition when deleting a PVC and a pod which prevented the operator from creating a new pod. Fixed a race condition preventing the manager from detecting the need for a PostgreSQL restart on a configuration change. Fixed a panic in kubectl-cnp on clusters without annotations. Lowered the level of some log messages to debug . E2E tests for server CA and TLS injection. Version 1.5.1 Release date: 17 June 2021 Change: Fix a bug with CRD validation preventing auto-update with Operator Deployments on Red Hat OpenShift Allow passing operator's configuration using a Secret. Version 1.5.0 Release date: 11 June 2021 Features: Introduce the pg_basebackup bootstrap method to create a new PostgreSQL cluster as a copy of an existing PostgreSQL instance of the same major version, even outside Kubernetes Add support for Kubernetes\u2019 tolerations in the Affinity section of the Cluster resource, allowing users to distribute PostgreSQL instances on Kubernetes nodes with the required taint Enable specification of a digest to an image name, through the <image>:<tag>@sha256:<digestValue> format, for more deterministic and repeatable deployments Security Enhancements: Customize TLS certificates to authenticate the PostgreSQL server by defining secrets for the server certificate and the related Certification Authority that signed it Raise the sslmode for the WAL receiver process of internal and automatically managed streaming replicas from require to verify-ca Changes: Enhance the promote subcommand of the cnp plugin for kubectl to accept just the node number rather than the whole name of the pod Adopt DNS-1035 validation scheme for cluster names (from which service names are inherited) Enforce streaming replication connection when cloning a standby instance or when bootstrapping using the pg_basebackup method Integrate the Backup resource with beginWal , endWal , beginLSN , endLSN , startedAt and stoppedAt regarding the physical base backup Documentation improvements: Provide a list of ports exposed by the operator and the operand container Introduce the cnp-bench helm charts and guidelines for benchmarking the storage and PostgreSQL for database workloads E2E tests enhancements: Test Kubernetes 1.21 Add test for High Availability of the operator Add test for node draining Minor bug fixes, including: Timeout to pg_ctl start during recovery operations too short Operator not watching over direct events on PVCs Fix handling of immediateCheckpoint and jobs parameter in barmanObjectStore backups Empty logs when recovering from a backup Version 1.4.0 Release date: 18 May 2021 Features: Standard output logging of PostgreSQL error messages in JSON format Provide a basic set of PostgreSQL metrics for the Prometheus exporter Add the restart command to the cnp plugin for kubectl to restart the pods of a given PostgreSQL cluster in a rollout fashion Security Enhancements: Set readOnlyRootFilesystem security context for pods Changes: IMPORTANT: If you have previously deployed the CloudNativePG operator using the YAML manifest, you must delete the existing operator deployment before installing the new version. This is required to avoid conflicts with other Kubernetes API's due to a change in labels and label selectors being directly managed by the operator. Please refer to the CloudNativePG documentation for additional detail on upgrading to 1.4.0 Fix the labels that are automatically defined by the operator, renaming them from control-plane: controller-manager to app.kubernetes.io/name: cloudnative-pg Assign the metrics name to the TCP port for the Prometheus exporter Set cnp_metrics_exporter as the application_name to the metrics exporter connection in PostgreSQL When available, use the application database for monitoring queries of the Prometheus exporter instead of the postgres database Documentation improvements: Customization of monitoring queries Operator upgrade instructions E2E tests enhancements Minor bug fixes, including: Avoid using -R when calling pg_basebackup Remove stack trace from error log when getting the status Version 1.3.0 Release date: 23 Apr 2021 Features: Inheritance of labels and annotations Set resource limits for every container Security Enhancements: Support for restricted security context constraint on Red Hat OpenShift to limit pod execution to a namespace allocated UID and SELinux context Pod security contexts explicitly defined by the operator to run as non-root, non-privileged and without privilege escalation Changes: Prometheus exporter endpoint listening on port 9187 (port 8000 is now reserved to instance coordination with API server) Documentation improvements E2E tests enhancements, including GKE environment Minor bug fixes Version 1.2.1 Release date: 6 Apr 2021 ScheduledBackup are no longer owners of the Backups, meaning that backups are not removed when ScheduledBackup objects are deleted Update on ubi8-minimal image to solve RHSA-2021:1024 (Security Advisory: Important) Version 1.2.0 Release date: 31 Mar 2021 Introduce experimental support for custom monitoring queries as ConfigMap and Secret objects using a compatible syntax with postgres_exporter for Prometheus Support Operator Lifecycle Manager (OLM) deployments, with the subsequent presence on OperatorHub.io Enhance container security by applying guidelines from the US Department of Defense (DoD)'s Defense Information Systems Agency (DISA) and the Center for Internet Security (CIS) and verifying them directly in the pipeline with Dockle Improve E2E tests on AKS Minor bug fixes Version 1.1.0 Release date: 3 Mar 2021 Add kubectl cnp status to pretty-print the status of a cluster, including JSON and YAML output Add kubectl cnp certificate to enable TLS authentication for client applications Add the -ro service to route connections to the available hot standby replicas only, enabling offload of read-only queries from the cluster's primary instance Rollback scaling down a cluster to a value lower than maxSyncReplicas Request a checkpoint before demoting a former primary Send SIGINT signal (fast shutdown) to PostgreSQL process on SIGTERM Minor bug fixes Version 1.0.0 Release date: 4 Feb 2021 The first major stable release of CloudNativePG implements Cluster , Backup and ScheduledBackup in the API group postgresql.cnpg.io/v1 . It uses these resources to create and manage PostgreSQL clusters inside Kubernetes with the following main capabilities: Direct integration with Kubernetes API server for High Availability, without requiring an external tool Self-Healing capability, through: failover of the primary instance by promoting the most aligned replica automated recreation of a replica Planned switchover of the primary instance by promoting a selected replica Scale up/down capabilities Definition of an arbitrary number of instances (minimum 1 - one primary server) Definition of the read-write service to connect your applications to the only primary server of the cluster Definition of the read service to connect your applications to any of the instances for reading workloads Support for Local Persistent Volumes with PVC templates Reuse of Persistent Volumes storage in Pods Rolling updates for PostgreSQL minor versions and operator upgrades TLS connections and client certificate authentication Continuous backup to an S3 compatible object store Full recovery and point-in-time recovery from an S3 compatible object store backup Support for synchronous replicas Support for node affinity via nodeSelector property Standard output logging of PostgreSQL error messages","title":"Release notes for 1.14.0 and earlier"},{"location":"release_notes/edb-cloud-native-postgresql/#release-notes-for-1140-and-earlier","text":"The first public release of CloudNativePG is version 1.15.0. Before that, the product was entirely owned by EDB and distributed under the name of \"Cloud Native PostgreSQL\" . The list of changes in this page is only for informative purposes, to demonstrate the history of the product on top of commits. None of the versions listed here exists for CloudNativePG.","title":"Release notes for 1.14.0 and earlier"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1140","text":"Release date: 25 March 2022 Features: Natively support Google Cloud Storage for backup and recovery, by taking advantage of the features introduced in Barman Cloud 2.19 Improved observability of backups through the introduction of the LastBackupSucceeded condition for the Cluster object Support update of Hot Standby sensitive parameters: max_connections , max_prepared_transactions , max_locks_per_transaction , max_wal_senders , max_worker_processes Add the Online upgrade in progress phase in the Cluster object to show when an online upgrade of the operator is in progress Ability to inherit an AWS IAM Role as an alternative way to provide credentials for the S3 object storage Support for Opaque secrets for Pooler\u2019s authQuerySecret and certificates Updated default PostgreSQL version to 14.2 Add a new command to kubectl cnp plugin named maintenance to set maintenance window to cluster(s) in one or all namespaces across the Kubernetes cluster Container Images: Latest PostgreSQL containers include Barman Cloud 2.19 Security Enhancements: Stronger RBAC enforcement for namespaced operator installations with Operator Lifecycle Manager, including OpenShift. OpenShift users are recommended to update to this version. Fixes: Allow the instance manager to retry an interrupted pg_rewind by preserving a copy of the original pg_control file Clean up stale PID files before running pg_rewind Force sorting by key in primary_conninfo to avoid random restarts with PostgreSQL versions prior to 13 Preserve ServiceAccount changes (e.g., labels, annotations) upon reconciliation Disable enforcement of the imagePullPolicy default value Improve initDB validation for WAL segment size Properly handle the targetLSN option when recovering a cluster with the LSN specified Fix custom TLS certificates validation by allowing a certificates chain both in the server and CA certificates","title":"Version 1.14.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1130","text":"Release date: 17 February 2022 Features: Support for Snappy compression. Snappy is a fast compression option for backups that increase the speed of uploads to the object store using a lower compression ratio Support for tagging files uploaded to the Barman object store. This feature requires Barman 2.18 in the operand image. of backups after Cluster deletion Extension of the status of a Cluster with status.conditions . The condition ContinuousArchiving indicates that the Cluster has started to archive WAL files Improve the status command of the cnp plugin for kubectl with additional information: add a Cluster Summary section showing the status of the Cluster and a Certificates Status section including the status of the certificates used in the Cluster along with the time left to expire Support the new barman-cloud-check-wal-archive command to detect a non-empty backup destination when creating a new cluster Add support for using a Secret to add default monitoring queries through MONITORING_QUERIES_SECRET configuration variable. Allow the user to restrict container\u2019s permissions using AppArmor (on Kubernetes clusters deployed with AppArmor support) Add Windows platform support to cnp plugin for kubectl , now the plugin is available on Windows x86 and ARM Drop support for Kubernetes 1.18 and deprecated API versions Container Images: PostgreSQL containers include Barman 2.18 Security Fix: Add coherence check of username field inside owner and superuser secrets; previously, a malicious user could have used the secrets to change the password of any PostgreSQL user Fixes: Fix a memory leak in code fetching status from Postgres pods Disable PostgreSQL self-restart after a crash. The instance controller handles the lifecycle of the PostgreSQL instance Prevent modification of .spec.postgresUID and .spec.postgresGID fields in validation webhook. Changing these fields after Cluster creation makes PostgreSQL unable to start Reduce the log verbosity from the backup and WAL archiving handling code Correct a bug resulting in a Cluster being marked as Healthy when not initialized yet Allows standby servers in clusters with a very high WAL production rate to switch to streaming once they are aligned Fix a race condition during the startup of a PostgreSQL pod that could seldom lead to a crash Fix a race condition that could lead to a failure initializing the first PVC in a Cluster Remove an extra restart of a just demoted primary Pod before joining the Cluster as a replica Correctly handle replication-sensitive PostgreSQL configuration parameters when recovering from a backup Fix missing validation of PostgreSQL configurations during Cluster creation","title":"Version 1.13.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1120","text":"Release date: 11 January 2022 Features: Add Kubernetes 1.23 to the list of supported Kubernetes distributions and remove end-to-end tests for 1.17, which ended support by the Kubernetes project in Dec 2020 Improve the responsiveness of pod status checks in case of network issues by adding a connection timeout of 2 seconds and a communication timeout of 30 seconds. This change sets a limit on the time the operator waits for a pod to report its status before declaring it as failed, enhancing the robustness and predictability of a failover operation Introduce the .spec.inheritedMetadata field to the Cluster allowing the user to specify labels and annotations that will apply to all objects generated by the Cluster Reduce the number of queries executed when calculating the status of an instance Add a readiness probe for PgBouncer Add support for custom Certification Authority of the endpoint of Barman\u2019s backup object store when using Azure protocol Fixes: During a failover, wait to select a new primary until all the WAL streaming connections are closed. The operator now sets by default wal_sender_timeout and wal_receiver_timeout to 5 seconds to make sure standby nodes will quickly notice if the primary has network issues Change WAL archiving strategy in replica clusters to fix rolling updates by setting \"archive_mode\" to \"always\" for any PostgreSQL instance in a replica cluster. We then restrict the upload of the WAL only from the current and target designated primary. A WAL may be uploaded twice during switchovers, which is not an issue Fix support for custom Certification Authority of the endpoint of Barman\u2019s backup object store in replica clusters source Use a fixed name for default monitoring config map in the cluster namespace If the defaulting webhook is not working for any reason, the operator now updates the Cluster with the defaults also during the reconciliation cycle Fix the comparison of resource requests and limits to fix a rare issue leading to an update of all the pods on every reconciliation cycle Improve log messages from webhooks to also include the object namespace Stop logging a \u201cdefault\u201d message at the start of every reconciliation loop Stop logging a PodMonitor deletion on every reconciliation cycle if enablePodMonitor is false Do not complain about possible architecture mismatch if a pod is not reachable","title":"Version 1.12.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1110","text":"Release date: 15 December 2021 Features: Parallel WAL archiving and restore: allow the database to keep up with WAL generation on high write systems by introducing the backupObjectStore.maxParallel option to set the maximum number of parallel jobs to be executed during both WAL archiving (by PostgreSQL\u2019s archive_command ) and WAL restore (by restore_command ). Using parallel restore option can allow newly promoted Standbys to get to a ready state faster by fetching needed WAL files to replay in parallel rather than sequentially Default set of metrics for monitoring: a new ConfigMap called default-monitoring is automatically deployed in the same namespace of the operator and, by default, added to any existing Postgres cluster. Such behavior can be changed globally by setting the MONITORING_QUERIES_CONFIGMAP parameter in the operator\u2019s configuration, or at cluster level through the .spec.monitoring.disableDefaultQueries option (by default set to false ) Introduce the enablePodMonitor option in the monitoring section of a cluster to automatically manage a PodMonitor resource and seamlessly integrate with Prometheus Improve the PostgreSQL shutdown procedure by trying to execute a smart shutdown for the first half of the desired stopDelay time, and a fast shutdown for the remaining half, before the pod is killed by Kubernetes Add the switchoverDelay option to control the time given to the former primary to shut down gracefully and archive all the WAL files before promoting the new primary (by default, CloudNativePG waits indefinitely to privilege data durability) Handle changes to resource requests and limits for a PostgreSQL Cluster by issuing a rolling update Improve the status command of the cnp plugin for kubectl with additional information: streaming replication status, total size of the database, role of an instance in the cluster Enhance support of workloads with many parallel workers by enabling configuration of the dynamic_shared_memory_type and shared_memory_type parameters for PostgreSQL\u2019s management of shared memory Propagate labels and annotations defined at cluster level to the associated resources, including pods (deletions are not supported) Automatically remove pods that have been evicted by the Kubelet Manage automated resizing of persistent volumes in Azure through the ENABLE_AZURE_PVC_UPDATES operator configuration option, by issuing a rolling update of the cluster if needed (disabled by default) Introduce the cnpg.io/reconciliationLoop annotation that, when set to disabled on a given Postgres cluster, prevents the reconciliation loop from running Introduce the postInitApplicationSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed on the main application database as a superuser immediately after the cluster has been created Fixes: Liveness probe now correctly handles the startup process of a PostgreSQL server. This fixes an issue reported by a few customers and affects a restarted standby server that needs to recover WAL files to reach a consistent state, but it was not able to do it before the timeout of liveness probe would kick in, leaving the pods in CrashLoopBackOff status. Liveness probe now correctly handles the case of a former primary that needs to use pg_rewind to re-align with the current primary after a timeline diversion. This fixes the pod of the new standby from repeatedly being killed by Kubernetes. Reduce client-side throttling from Postgres pods (e.g. Waited for 1.182388649s due to client-side throttling, not priority and fairness, request: GET ) Disable Public Key Infrastructure (PKI) initialization on OpenShift and OLM installations, by using the provided one When changing configuration parameters that require a restart, always leave the primary as last Mark a PVC to be ready only after a job has been completed successfully, preventing a race condition in PVC initialization Use the correct public key when renewing the expired webhook TLS secret. Fix an overflow when parsing an LSN Remove stale PID files at startup Let the Pooler resource inherit the imagePullSecret defined in the operator, if exists","title":"Version 1.11.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-1100","text":"Release date: 11 November 2021 Features: Connection Pooling with PgBouncer : introduce the Pooler resource and controller to automatically manage a PgBouncer deployment to be used as a connection pooler for a local PostgreSQL Cluster . The feature includes TLS client/server connections, password authentication, High Availability, pod templates support, configuration of key PgBouncer parameters, PAUSE / RESUME , logging in JSON format, Prometheus exporter for stats, pools, and lists Backup Retention Policies : support definition of recovery window retention policies for backups (e.g. \u201830d\u2019 to ensure a recovery window of 30 days) In-Place updates of the operator : introduce an in-place online update of the instance manager, which removes the need to perform a rolling update of the entire cluster following an update of the operator. By default this option is disabled (please refer to the documentation for more detailed information ) Limit the list of options that can be customized in the initdb bootstrap method to dataChecksums , encoding , localeCollate , localeCType , walSegmentSize . This makes the options array obsolete and planned to be removed in the v2 API Introduce the postInitTemplateSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed on the template1 database as a superuser immediately after the cluster has been created. This feature allows you to include default objects in all application databases created in the cluster New default metrics added to the instance Prometheus exporter: Postgres version, cluster name, and first point of recoverability according to the backup catalog Retry taking a backup after a failure Build awareness about Barman Cloud capabilities in order to prevent the operator from invoking recently introduced features (such as retention policies, or Azure Blob Container storage) that are not present in operand images that are not frequently updated Integrate the output of the status command of the cnp plugin with information about the backup Introduce a new annotation that reports the status of a PVC (being initialized or ready) Set the cluster name in the k8s.enterprisedb.io/cluster label for every object generated in a Cluster , including Backup objects Drop support for deprecated API version postgresql.cnpg.io/v1alpha1 on the Cluster , Backup , and ScheduledBackup kinds Set default operand image to PostgreSQL 14.2 Security: Set allowPrivilegeEscalation to false for the operator containers securityContext Fixes: Disable primary PodDisruptionBudget during maintenance in single-instance clusters Use the correct certificate certification authority (CA) during recovery operations Prevent Postgres connection leaking when checking WAL archiving status before taking a backup Let WAL archive/restore sleep for 100ms following transient errors that would flood logs otherwise","title":"Version 1.10.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-192","text":"Release date: 15 October 2021 Features: Enhance JSON log with two new loggers: wal-archive for PostgreSQL's archive_command , and wal-restore for restore_command in a standby Fixes: Enable WAL archiving during the standby promotion (prevented .history files from being archived) Pass the --cloud-provider option to Barman Cloud tools only when using Barman 2.13 or higher to avoid errors with older operands Wait for the pod of the primary to be ready before triggering a backup","title":"Version 1.9.2"},{"location":"release_notes/edb-cloud-native-postgresql/#version-191","text":"Release date: 30 September 2021 This release is to celebrate the launch of PostgreSQL 14 by making it the default major version when a new Cluster is created without defining a specific image name. Fixes: Fix issue causing Error while getting barman endpoint CA secret message to appear in the logs of the primary pod, which prevented the backup to work correctly Properly retry requesting a new backup in case of temporary communication issues with the instance manager","title":"Version 1.9.1"},{"location":"release_notes/edb-cloud-native-postgresql/#version-190","text":"Release date: 28 September 2021 Version 1.9.0 is not available on OpenShift due to delays with the release process and the subsequent release of version 1.9.1. Features: Add Kubernetes 1.22 to the list of supported Kubernetes distributions, and remove 1.16 Introduce support for the --restore-target-wal option in pg_rewind , in order to fetch WAL files from the backup archive, if necessary (available only with PostgreSQL 13+) Expose a default metric for the Prometheus exporter that estimates the number of pages in the pg_catalog.pg_largeobject table in each database Enhance the performance of WAL archiving and fetching, through local in-memory cache Fixes: Explicitly set the postgres user when invoking pg_isready - required by restricted SCC in OpenShift Properly update the FirstRecoverabilityPoint in the status Set archive_mode = always on the designated primary if backup is requested Minor bug fixes","title":"Version 1.9.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-180","text":"Release date: 13 September 2021 Features: Bootstrap a new cluster via full or Point-In-Time Recovery directly from an object store defined in the external cluster section, eliminating the previous requirement to have a Backup CR defined Introduce the immediate option in scheduled backups to request a backup immediately after the first Postgres instance running, adding the capability to rewind to the very beginning of a cluster when Point-In-Time Recovery is configured Add the firstRecoverabilityPoint in the cluster status to report the oldest consistent point in time to request a recovery based on the backup object store\u2019s content Enhance the default Prometheus exporter for a PostgreSQL instance by exposing the following new metrics: number of WAL files and computed total size on disk number of .ready and .done files in the archive status folder flag for replica mode number of requested minimum/maximum synchronous replicas, as well as the expected and actually observed ones Add support for the runonserver option when defining custom metrics in the Prometheus exporter to limit the collection of a metric to a range of PostgreSQL versions Natively support Azure Blob Storage for backup and recovery, by taking advantage of the feature introduced in Barman 2.13 for Barman Cloud Rely on pg_isready for the liveness probe Support RFC3339 format for timestamp specification in recovery target times Introduce .spec.imagePullPolicy to control the pull policy of image containers for all pods and jobs created for a cluster Add support for OpenShift 4.8, which replaces OpenShift 4.5 Support PostgreSQL 14 (beta) Enhance the replica cluster feature with cross-cluster replication from an object store defined in an external cluster section, without requiring a streaming connection (experimental) Introduce logLevel option to the cluster's spec to specify one of the following levels: error, info, debug or trace Security Enhancements: Introduce .spec.enableSuperuserAccess to enable/disable network access with the postgres user through password authentication Fixes: Properly inform users when a cluster enters an unrecoverable state and requires human intervention","title":"Version 1.8.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-171","text":"Release date: 11 August 2021 Features: Prefer self-healing over configuration with regards to synchronous replication, empowering the operator to temporarily override minSyncReplicas and maxSyncReplicas settings in case the cluster is not able to meet the requirements during self-healing operations Introduce the postInitSQL option as part of the initdb bootstrap method to specify a list of SQL queries to be executed as a superuser immediately after the cluster has been created Fixes: Allow the operator to failover when the primary is not ready (bug introduced in 1.7.0) Execute administrative queries using the LOCAL synchronous commit level Correctly parse multi-line log entries in PGAudit","title":"Version 1.7.1"},{"location":"release_notes/edb-cloud-native-postgresql/#version-170","text":"Release date: 28 July 2021 Features: Add native support to PGAudit with a new type of logger called pgaudit directly available in the JSON output Enhance monitoring and observability capabilities through: Native support for the pg_stat_statements and auto_explain extensions The target_databases option in the Prometheus exporter to run a user-defined metric query on one or more databases (including auto-discovery of databases through shell-like pattern matching) Exposure of the manual_switchover_required metric to promptly report whether a cluster with primaryUpdateStrategy set to supervised requires a manual switchover Transparently handle shared_preload_libraries for pg_audit , auto_explain and pg_stat_statements Automatic configuration of shared_preload_libraries for PostgreSQL when pg_stat_statements , pgaudit or auto_explain options are added to the postgresql parameters section Support the cnpg.io/reload label to finely control the automated reload of config maps and secrets, including those used for custom monitoring/alerting metrics in the Prometheus exporter or to store certificates Add the reload command to the cnp plugin for kubectl to trigger a reconciliation loop on the instances Improve control of pod affinity and anti-affinity configurations through additionalPodAffinity and additionalPodAntiAffinity Introduce a separate PodDisruptionBudget for primary instances, by requiring at least a primary instance to run at any time Security Enhancements: Add the .spec.certificates.clientCASecret and .spec.certificates.replicationTLSSecret options to define custom client Certification Authority and certificate for the PostgreSQL server, to be used to authenticate client certificates and secure communication between PostgreSQL nodes Add the .spec.backup.barmanObjectStore.endpointCA option to define the custom Certification Authority bundle of the endpoint of Barman\u2019s backup object store Fixes: Correctly parse histograms in the Prometheus exporter Reconcile services created by the operator for a cluster","title":"Version 1.7.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-160","text":"Release date: 12 July 2021 Features: Replica mode ( EXPERIMENTAL ): allow a cluster to be created as a replica of a source cluster. A replica cluster has a designated primary and any number of standbys. Add the .spec.postgresql.promotionTimeout parameter to specify the maximum amount of seconds to wait when promoting an instance to primary, defaulting to 40000000 seconds. Add the .spec.affinity.podAntiAffinityType parameter. It can be set to preferred (default), resulting in preferredDuringSchedulingIgnoredDuringExecution being used, or to required , resulting in requiredDuringSchedulingIgnoredDuringExecution . Changes: Fixed a race condition when deleting a PVC and a pod which prevented the operator from creating a new pod. Fixed a race condition preventing the manager from detecting the need for a PostgreSQL restart on a configuration change. Fixed a panic in kubectl-cnp on clusters without annotations. Lowered the level of some log messages to debug . E2E tests for server CA and TLS injection.","title":"Version 1.6.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-151","text":"Release date: 17 June 2021 Change: Fix a bug with CRD validation preventing auto-update with Operator Deployments on Red Hat OpenShift Allow passing operator's configuration using a Secret.","title":"Version 1.5.1"},{"location":"release_notes/edb-cloud-native-postgresql/#version-150","text":"Release date: 11 June 2021 Features: Introduce the pg_basebackup bootstrap method to create a new PostgreSQL cluster as a copy of an existing PostgreSQL instance of the same major version, even outside Kubernetes Add support for Kubernetes\u2019 tolerations in the Affinity section of the Cluster resource, allowing users to distribute PostgreSQL instances on Kubernetes nodes with the required taint Enable specification of a digest to an image name, through the <image>:<tag>@sha256:<digestValue> format, for more deterministic and repeatable deployments Security Enhancements: Customize TLS certificates to authenticate the PostgreSQL server by defining secrets for the server certificate and the related Certification Authority that signed it Raise the sslmode for the WAL receiver process of internal and automatically managed streaming replicas from require to verify-ca Changes: Enhance the promote subcommand of the cnp plugin for kubectl to accept just the node number rather than the whole name of the pod Adopt DNS-1035 validation scheme for cluster names (from which service names are inherited) Enforce streaming replication connection when cloning a standby instance or when bootstrapping using the pg_basebackup method Integrate the Backup resource with beginWal , endWal , beginLSN , endLSN , startedAt and stoppedAt regarding the physical base backup Documentation improvements: Provide a list of ports exposed by the operator and the operand container Introduce the cnp-bench helm charts and guidelines for benchmarking the storage and PostgreSQL for database workloads E2E tests enhancements: Test Kubernetes 1.21 Add test for High Availability of the operator Add test for node draining Minor bug fixes, including: Timeout to pg_ctl start during recovery operations too short Operator not watching over direct events on PVCs Fix handling of immediateCheckpoint and jobs parameter in barmanObjectStore backups Empty logs when recovering from a backup","title":"Version 1.5.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-140","text":"Release date: 18 May 2021 Features: Standard output logging of PostgreSQL error messages in JSON format Provide a basic set of PostgreSQL metrics for the Prometheus exporter Add the restart command to the cnp plugin for kubectl to restart the pods of a given PostgreSQL cluster in a rollout fashion Security Enhancements: Set readOnlyRootFilesystem security context for pods Changes: IMPORTANT: If you have previously deployed the CloudNativePG operator using the YAML manifest, you must delete the existing operator deployment before installing the new version. This is required to avoid conflicts with other Kubernetes API's due to a change in labels and label selectors being directly managed by the operator. Please refer to the CloudNativePG documentation for additional detail on upgrading to 1.4.0 Fix the labels that are automatically defined by the operator, renaming them from control-plane: controller-manager to app.kubernetes.io/name: cloudnative-pg Assign the metrics name to the TCP port for the Prometheus exporter Set cnp_metrics_exporter as the application_name to the metrics exporter connection in PostgreSQL When available, use the application database for monitoring queries of the Prometheus exporter instead of the postgres database Documentation improvements: Customization of monitoring queries Operator upgrade instructions E2E tests enhancements Minor bug fixes, including: Avoid using -R when calling pg_basebackup Remove stack trace from error log when getting the status","title":"Version 1.4.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-130","text":"Release date: 23 Apr 2021 Features: Inheritance of labels and annotations Set resource limits for every container Security Enhancements: Support for restricted security context constraint on Red Hat OpenShift to limit pod execution to a namespace allocated UID and SELinux context Pod security contexts explicitly defined by the operator to run as non-root, non-privileged and without privilege escalation Changes: Prometheus exporter endpoint listening on port 9187 (port 8000 is now reserved to instance coordination with API server) Documentation improvements E2E tests enhancements, including GKE environment Minor bug fixes","title":"Version 1.3.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-121","text":"Release date: 6 Apr 2021 ScheduledBackup are no longer owners of the Backups, meaning that backups are not removed when ScheduledBackup objects are deleted Update on ubi8-minimal image to solve RHSA-2021:1024 (Security Advisory: Important)","title":"Version 1.2.1"},{"location":"release_notes/edb-cloud-native-postgresql/#version-120","text":"Release date: 31 Mar 2021 Introduce experimental support for custom monitoring queries as ConfigMap and Secret objects using a compatible syntax with postgres_exporter for Prometheus Support Operator Lifecycle Manager (OLM) deployments, with the subsequent presence on OperatorHub.io Enhance container security by applying guidelines from the US Department of Defense (DoD)'s Defense Information Systems Agency (DISA) and the Center for Internet Security (CIS) and verifying them directly in the pipeline with Dockle Improve E2E tests on AKS Minor bug fixes","title":"Version 1.2.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-110","text":"Release date: 3 Mar 2021 Add kubectl cnp status to pretty-print the status of a cluster, including JSON and YAML output Add kubectl cnp certificate to enable TLS authentication for client applications Add the -ro service to route connections to the available hot standby replicas only, enabling offload of read-only queries from the cluster's primary instance Rollback scaling down a cluster to a value lower than maxSyncReplicas Request a checkpoint before demoting a former primary Send SIGINT signal (fast shutdown) to PostgreSQL process on SIGTERM Minor bug fixes","title":"Version 1.1.0"},{"location":"release_notes/edb-cloud-native-postgresql/#version-100","text":"Release date: 4 Feb 2021 The first major stable release of CloudNativePG implements Cluster , Backup and ScheduledBackup in the API group postgresql.cnpg.io/v1 . It uses these resources to create and manage PostgreSQL clusters inside Kubernetes with the following main capabilities: Direct integration with Kubernetes API server for High Availability, without requiring an external tool Self-Healing capability, through: failover of the primary instance by promoting the most aligned replica automated recreation of a replica Planned switchover of the primary instance by promoting a selected replica Scale up/down capabilities Definition of an arbitrary number of instances (minimum 1 - one primary server) Definition of the read-write service to connect your applications to the only primary server of the cluster Definition of the read service to connect your applications to any of the instances for reading workloads Support for Local Persistent Volumes with PVC templates Reuse of Persistent Volumes storage in Pods Rolling updates for PostgreSQL minor versions and operator upgrades TLS connections and client certificate authentication Continuous backup to an S3 compatible object store Full recovery and point-in-time recovery from an S3 compatible object store backup Support for synchronous replicas Support for node affinity via nodeSelector property Standard output logging of PostgreSQL error messages","title":"Version 1.0.0"},{"location":"release_notes/v1.25/","text":"Release notes for CloudNativePG 1.25 History of user-visible changes in the 1.25 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.25.3 Release date: Jul 25, 2025 In memory of DJ Walker-Morgan . Changes Removed 386 and ARM (v5/v6/v7) architectures from the cnpg plugin build matrix, reducing the number of published binaries ( #7648 ). Enhancements Improved validation of shared_buffers by correctly considering HugePages settings, ensuring accurate memory configuration checks ( #7864 ). Set oom_score_adj for PostgreSQL worker processes to improve prioritization during out-of-memory situations ( #7891 ). Added fqdn-uri and fqdn-jdbc-uri fields in user secrets to simplify application connection string management and align with DNS-based connection best practices ( #7852 ). Added the systemID field and related condition in the Cluster status to track the PostgreSQL system identifier. ( #7717 ). Fixes Added a mutex in the connection pooler to protect concurrent access to the connections map, improving stability in high-concurrency environments ( #7804 ). Fixed replica cluster instance ordering by correctly detecting the designated primary, improving replica cluster stability and switchover operations ( #8108 ). Added support for reconciling VolumeAttributesClass for PVCs, enhancing storage compatibility and lifecycle management ( #7885 ). Made the internal webserver routines non-blocking to improve responsiveness under load ( #8071 ). Fixed an issue where the ensureReplicationClientLeafCertificate error did not display the correct secretName in the not found message ( #8086 ). Prevented invalid ALTER SUBSCRIPTION statements by updating only PostgreSQL\u2011supported parameters; unsupported options like copy_data are ignored to avoid reconciliation failures ( 7844 ). Fixed an issue where the bootstrap-controller in the connection pooler did not apply resources settings correctly ( #7922 ). Ensured online backups fail cleanly if the targetPod becomes unhealthy during backup, preventing partial or misleading backups ( #7944 ). Ensured the Backup resource status is set properly after a failure, improving observability and scripting reliability ( #7898 ). Version 1.25.2 Release date: May 23, 2025 Important Changes CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203) Enhancements Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151) CloudNativePG Interface (CNPG-I): A plugin can now trigger instance rollouts by implementing the EVALUATE verb, ensuring that plugin-induced changes are properly reconciled. (#7126) Introduced support for WAL recovery via CNPG-I plugins during snapshot restore. (#7284) Security Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250) Fixes Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Fixed a regression in WAL restore operations that prevented fallback to the in-tree barmanObjectStore configuration defined in the externalCluster source when a plugin failed to locate a WAL file (#7507). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) Treated timeout errors during volume snapshot creation as retryable to prevent unnecessary backup failures. (#7010) Moved the defaulting logic for .spec.postgresql.synchronous.dataDurability from the CRD to the webhook to avoid UI issues with OLM. (#7600) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). cnpg plugin: Increased the buffer size in the logs pretty command to better handle larger log output (#7281). Ensured the plugin-name parameter is required for plugin-based backups and disallowed for non-plugin backup methods (#7506). Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122) Changes Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556) Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399). Version 1.25.1 Release Date: February 28, 2025 Enhancements Introduced a startup probe for the operator to enhance reliability and prevent premature liveness probe failures during initialization. (#7008) Added support for using the -r service with the Pooler. (#6868) Introduced an optional --ttl flag for the pgbench plugin, enabling automatic deletion of completed jobs after a user-defined duration. (#6701) Marked known error messages from the Azure CSI Driver for volume snapshots as retryable, improving resilience. (#6906) Updated the default PostgreSQL version to 17.4 for new cluster definitions. (#6960) Security The operator image build process has been enhanced to strengthen security and transparency. Images are now signed with cosign , and OCI attestations are generated, incorporating the Software Bill of Materials (SBOM) and provenance data. Additionally, OCI annotations have been added to improve traceability and ensure the integrity of the images. Bug Fixes Fixed inconsistent behavior in default probe knob values when .spec.probes is defined, ensuring users can override all settings, including failureThreshold . If unspecified in the startup probe, failureThreshold is now correctly derived from .spec.startupDelay / periodSeconds (default: 10 , now overridable). The same logic applies to liveness probes via .spec.livenessProbeTimeout . (#6656) Managed service ports now take precedence over default operator-defined ports. (#6474) Fixed an issue where WAL metrics were unavailable after an instance restart until a configuration change was applied. (#6816) Fixed an issue in monolithic database import where role import was skipped if no roles were specified. (#6646) Added support for new metrics introduced in PgBouncer 1.24. (#6630) Resolved an issue where Database , Publication , and Subscription CRDs became stuck in cluster resource has been deleted, skipping reconciliation after cluster rehydration. This patch forces status.observedGeneration to zero, ensuring proper reconciliation. (#6607) Improved handling of replication-sensitive parameter reductions by ensuring timely reconciliation after primary server restarts. (#6440) Introduced a new isWALArchiver flag in the CNPG-I plugin configuration, allowing users to designate a plugin as a WAL archiver. This enables seamless migration from in-tree Barman Cloud support to the plugin while maintaining WAL archive consistency. (#6593) Ensured override.conf is consistently included in postgresql.conf during replica cluster bootstrapping, preventing replication failures due to missing configuration settings. (#6808) Ensured override.conf is correctly initialized before invoking pg_rewind to prevent failures during primary role changes. (#6670) Enhanced webhook responses to return both warnings and errors when applicable, improving diagnostic accuracy. (#6579) Ensured the operator version is correctly reconciled. (#6496) Improved PostgreSQL version detection by using a more precise check of the data directory. (#6659) Volume Snapshot Backups: Fixed an issue where unused backup connections were not properly cleaned up. (#6882) Ensured the instance manager closes stale PostgreSQL connections left by failed volume snapshot backups. (#6879) Prevented the operator from starting a new volume snapshot backup while another is already in progress. (#6890) cnpg plugin: Restored functionality of the promote plugin command. (#6476) Enhanced kubectl cnpg report --logs <cluster> to collect logs from all containers, including sidecars. (#6636) Ensured pgbench jobs can run when a Cluster uses an ImageCatalog . (#6868) Technical Enhancements Added support for Kubernetes client-gen , enabling automated generation of Go clients for all CloudNativePG CRDs. (#6695) Version 1.25.0 Release Date: December 23, 2024 Features Declarative Database Management : Introduce the Database Custom Resource Definition (CRD), enabling users to create and manage PostgreSQL databases declaratively within a cluster. (#5325) Logical Replication Management : Add Publication and Subscription CRDs for declarative management of PostgreSQL logical replication. These simplify replication setup and facilitate online migrations to CloudNativePG. (#5329) Experimental Support for CNPG-I : Introducing CNPG-I (CloudNativePG Interface), a standardized framework designed to extend CloudNativePG functionality through third-party plugins and foster the growth of the CNPG ecosystem. The Barman Cloud Plugin serves as a live example, illustrating how plugins can be developed to enhance backup and recovery workflows. Although CNPG-I support is currently experimental, it offers a powerful approach to extending CloudNativePG without modifying the operator\u2019s core code\u2014akin to PostgreSQL extensions. We welcome community feedback and contributions to shape this exciting new capability. Enhancements Add the dataDurability option to the .spec.postgresql.synchronous stanza, allowing users to choose between required (default) or preferred durability in synchronous replication. (#5878) Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Support additional pg_dump and pg_restore options to enhance database import flexibility. (#6214) Add support for maxConcurrentReconciles in the CloudNativePG controller and set the default to 10, improving the operator's ability to efficiently manage larger deployments out of the box. (#5678) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Enhance the backup command to support plugins. (#6045) Honor the User-Agent header in HTTP requests with the API server. (#6153) Bug Fixes Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998) Supported Versions Kubernetes : 1.32, 1.31, 1.30, and 1.29 PostgreSQL : 17, 16, 15, 14, and 13 Default image: PostgreSQL 17.2 Officially dropped support for PostgreSQL 12 PostgreSQL 13 support ends on November 12, 2025","title":"Release notes for CloudNativePG 1.25"},{"location":"release_notes/v1.25/#release-notes-for-cloudnativepg-125","text":"History of user-visible changes in the 1.25 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.25"},{"location":"release_notes/v1.25/#version-1253","text":"Release date: Jul 25, 2025 In memory of DJ Walker-Morgan .","title":"Version 1.25.3"},{"location":"release_notes/v1.25/#changes","text":"Removed 386 and ARM (v5/v6/v7) architectures from the cnpg plugin build matrix, reducing the number of published binaries ( #7648 ).","title":"Changes"},{"location":"release_notes/v1.25/#enhancements","text":"Improved validation of shared_buffers by correctly considering HugePages settings, ensuring accurate memory configuration checks ( #7864 ). Set oom_score_adj for PostgreSQL worker processes to improve prioritization during out-of-memory situations ( #7891 ). Added fqdn-uri and fqdn-jdbc-uri fields in user secrets to simplify application connection string management and align with DNS-based connection best practices ( #7852 ). Added the systemID field and related condition in the Cluster status to track the PostgreSQL system identifier. ( #7717 ).","title":"Enhancements"},{"location":"release_notes/v1.25/#fixes","text":"Added a mutex in the connection pooler to protect concurrent access to the connections map, improving stability in high-concurrency environments ( #7804 ). Fixed replica cluster instance ordering by correctly detecting the designated primary, improving replica cluster stability and switchover operations ( #8108 ). Added support for reconciling VolumeAttributesClass for PVCs, enhancing storage compatibility and lifecycle management ( #7885 ). Made the internal webserver routines non-blocking to improve responsiveness under load ( #8071 ). Fixed an issue where the ensureReplicationClientLeafCertificate error did not display the correct secretName in the not found message ( #8086 ). Prevented invalid ALTER SUBSCRIPTION statements by updating only PostgreSQL\u2011supported parameters; unsupported options like copy_data are ignored to avoid reconciliation failures ( 7844 ). Fixed an issue where the bootstrap-controller in the connection pooler did not apply resources settings correctly ( #7922 ). Ensured online backups fail cleanly if the targetPod becomes unhealthy during backup, preventing partial or misleading backups ( #7944 ). Ensured the Backup resource status is set properly after a failure, improving observability and scripting reliability ( #7898 ).","title":"Fixes"},{"location":"release_notes/v1.25/#version-1252","text":"Release date: May 23, 2025","title":"Version 1.25.2"},{"location":"release_notes/v1.25/#important-changes","text":"CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203)","title":"Important Changes"},{"location":"release_notes/v1.25/#enhancements_1","text":"Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151) CloudNativePG Interface (CNPG-I): A plugin can now trigger instance rollouts by implementing the EVALUATE verb, ensuring that plugin-induced changes are properly reconciled. (#7126) Introduced support for WAL recovery via CNPG-I plugins during snapshot restore. (#7284)","title":"Enhancements"},{"location":"release_notes/v1.25/#security","text":"Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250)","title":"Security"},{"location":"release_notes/v1.25/#fixes_1","text":"Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Fixed a regression in WAL restore operations that prevented fallback to the in-tree barmanObjectStore configuration defined in the externalCluster source when a plugin failed to locate a WAL file (#7507). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) Treated timeout errors during volume snapshot creation as retryable to prevent unnecessary backup failures. (#7010) Moved the defaulting logic for .spec.postgresql.synchronous.dataDurability from the CRD to the webhook to avoid UI issues with OLM. (#7600) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). cnpg plugin: Increased the buffer size in the logs pretty command to better handle larger log output (#7281). Ensured the plugin-name parameter is required for plugin-based backups and disallowed for non-plugin backup methods (#7506). Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122)","title":"Fixes"},{"location":"release_notes/v1.25/#changes_1","text":"Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556) Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399).","title":"Changes"},{"location":"release_notes/v1.25/#version-1251","text":"Release Date: February 28, 2025","title":"Version 1.25.1"},{"location":"release_notes/v1.25/#enhancements_2","text":"Introduced a startup probe for the operator to enhance reliability and prevent premature liveness probe failures during initialization. (#7008) Added support for using the -r service with the Pooler. (#6868) Introduced an optional --ttl flag for the pgbench plugin, enabling automatic deletion of completed jobs after a user-defined duration. (#6701) Marked known error messages from the Azure CSI Driver for volume snapshots as retryable, improving resilience. (#6906) Updated the default PostgreSQL version to 17.4 for new cluster definitions. (#6960)","title":"Enhancements"},{"location":"release_notes/v1.25/#security_1","text":"The operator image build process has been enhanced to strengthen security and transparency. Images are now signed with cosign , and OCI attestations are generated, incorporating the Software Bill of Materials (SBOM) and provenance data. Additionally, OCI annotations have been added to improve traceability and ensure the integrity of the images.","title":"Security"},{"location":"release_notes/v1.25/#bug-fixes","text":"Fixed inconsistent behavior in default probe knob values when .spec.probes is defined, ensuring users can override all settings, including failureThreshold . If unspecified in the startup probe, failureThreshold is now correctly derived from .spec.startupDelay / periodSeconds (default: 10 , now overridable). The same logic applies to liveness probes via .spec.livenessProbeTimeout . (#6656) Managed service ports now take precedence over default operator-defined ports. (#6474) Fixed an issue where WAL metrics were unavailable after an instance restart until a configuration change was applied. (#6816) Fixed an issue in monolithic database import where role import was skipped if no roles were specified. (#6646) Added support for new metrics introduced in PgBouncer 1.24. (#6630) Resolved an issue where Database , Publication , and Subscription CRDs became stuck in cluster resource has been deleted, skipping reconciliation after cluster rehydration. This patch forces status.observedGeneration to zero, ensuring proper reconciliation. (#6607) Improved handling of replication-sensitive parameter reductions by ensuring timely reconciliation after primary server restarts. (#6440) Introduced a new isWALArchiver flag in the CNPG-I plugin configuration, allowing users to designate a plugin as a WAL archiver. This enables seamless migration from in-tree Barman Cloud support to the plugin while maintaining WAL archive consistency. (#6593) Ensured override.conf is consistently included in postgresql.conf during replica cluster bootstrapping, preventing replication failures due to missing configuration settings. (#6808) Ensured override.conf is correctly initialized before invoking pg_rewind to prevent failures during primary role changes. (#6670) Enhanced webhook responses to return both warnings and errors when applicable, improving diagnostic accuracy. (#6579) Ensured the operator version is correctly reconciled. (#6496) Improved PostgreSQL version detection by using a more precise check of the data directory. (#6659) Volume Snapshot Backups: Fixed an issue where unused backup connections were not properly cleaned up. (#6882) Ensured the instance manager closes stale PostgreSQL connections left by failed volume snapshot backups. (#6879) Prevented the operator from starting a new volume snapshot backup while another is already in progress. (#6890) cnpg plugin: Restored functionality of the promote plugin command. (#6476) Enhanced kubectl cnpg report --logs <cluster> to collect logs from all containers, including sidecars. (#6636) Ensured pgbench jobs can run when a Cluster uses an ImageCatalog . (#6868)","title":"Bug Fixes"},{"location":"release_notes/v1.25/#technical-enhancements","text":"Added support for Kubernetes client-gen , enabling automated generation of Go clients for all CloudNativePG CRDs. (#6695)","title":"Technical Enhancements"},{"location":"release_notes/v1.25/#version-1250","text":"Release Date: December 23, 2024","title":"Version 1.25.0"},{"location":"release_notes/v1.25/#features","text":"Declarative Database Management : Introduce the Database Custom Resource Definition (CRD), enabling users to create and manage PostgreSQL databases declaratively within a cluster. (#5325) Logical Replication Management : Add Publication and Subscription CRDs for declarative management of PostgreSQL logical replication. These simplify replication setup and facilitate online migrations to CloudNativePG. (#5329) Experimental Support for CNPG-I : Introducing CNPG-I (CloudNativePG Interface), a standardized framework designed to extend CloudNativePG functionality through third-party plugins and foster the growth of the CNPG ecosystem. The Barman Cloud Plugin serves as a live example, illustrating how plugins can be developed to enhance backup and recovery workflows. Although CNPG-I support is currently experimental, it offers a powerful approach to extending CloudNativePG without modifying the operator\u2019s core code\u2014akin to PostgreSQL extensions. We welcome community feedback and contributions to shape this exciting new capability.","title":"Features"},{"location":"release_notes/v1.25/#enhancements_3","text":"Add the dataDurability option to the .spec.postgresql.synchronous stanza, allowing users to choose between required (default) or preferred durability in synchronous replication. (#5878) Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Support additional pg_dump and pg_restore options to enhance database import flexibility. (#6214) Add support for maxConcurrentReconciles in the CloudNativePG controller and set the default to 10, improving the operator's ability to efficiently manage larger deployments out of the box. (#5678) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Enhance the backup command to support plugins. (#6045) Honor the User-Agent header in HTTP requests with the API server. (#6153)","title":"Enhancements"},{"location":"release_notes/v1.25/#bug-fixes_1","text":"Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998)","title":"Bug Fixes"},{"location":"release_notes/v1.25/#supported-versions","text":"Kubernetes : 1.32, 1.31, 1.30, and 1.29 PostgreSQL : 17, 16, 15, 14, and 13 Default image: PostgreSQL 17.2 Officially dropped support for PostgreSQL 12 PostgreSQL 13 support ends on November 12, 2025","title":"Supported Versions"},{"location":"release_notes/v1.26/","text":"Release notes for CloudNativePG 1.26 History of user-visible changes in the 1.26 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.26.1 Release date: Jul 25, 2025 In memory of DJ Walker-Morgan . Important Changes CloudNativePG is moving toward a plugin-based, backup and recovery agnostic architecture (initiated in 1.26.0 with Barman Cloud). As part of this transition, the following fields in the .status section of the Cluster resource are now deprecated: firstRecoverabilityPoint firstRecoverabilityPointByMethod lastSuccessfulBackup lastSuccessfulBackupByMethod lastFailedBackup Additionally, the following Prometheus metrics are deprecated: cnpg_collector_first_recoverability_point cnpg_collector_last_available_backup_timestamp cnpg_collector_last_failed_backup_timestamp These fields and metrics will no longer update when using plugin-based backups (e.g., Barman Cloud via CNPG-I). They remain functional for users still using in-core Barman Cloud and volume snapshot backups. Note: We, as maintainers, are sorry for any inconvenience caused by not highlighting this change during the 1.26.0 release. As we transition to a plugin-based backup and recovery architecture, we encourage you to test your chosen plugin thoroughly in a staging environment before moving to production to ensure your workflows and observability integration continue to meet your needs. Thank you for your understanding and for working with us as CloudNativePG evolves to provide a more modular and robust experience. Changes Removed 386 and ARM (v5/v6/v7) architectures from the cnpg plugin build matrix, reducing the number of published binaries ( #7648 ). Enhancements Improved validation of shared_buffers by correctly considering HugePages settings, ensuring accurate memory configuration checks ( #7864 ). Set oom_score_adj for PostgreSQL worker processes to improve prioritization during out-of-memory situations ( #7891 ). Added fqdn-uri and fqdn-jdbc-uri fields in user secrets to simplify application connection string management and align with DNS-based connection best practices ( #7852 ). Added the systemID field and related condition in the Cluster status to track the PostgreSQL system identifier. ( #7717 ). Fixes Added a mutex in the connection pooler to protect concurrent access to the connections map, improving stability in high-concurrency environments ( #7804 ). Fixed replica cluster instance ordering by correctly detecting the designated primary, improving replica cluster stability and switchover operations ( #8108 ). Added support for reconciling VolumeAttributesClass for PVCs, enhancing storage compatibility and lifecycle management ( #7885 ). Made the internal webserver routines non-blocking to improve responsiveness under load ( #8071 ). Fixed an issue where the ensureReplicationClientLeafCertificate error did not display the correct secretName in the not found message ( #8086 ). Prevented invalid ALTER SUBSCRIPTION statements by updating only PostgreSQL\u2011supported parameters; unsupported options like copy_data are ignored to avoid reconciliation failures ( 7844 ). Fixed an issue where the bootstrap-controller in the connection pooler did not apply resources settings correctly ( #7922 ). Ensured online backups fail cleanly if the targetPod becomes unhealthy during backup, preventing partial or misleading backups ( #7944 ). Ensured the Backup resource status is set properly after a failure, improving observability and scripting reliability ( #7898 ). Improved liveness probe handling to avoid unnecessary timeouts when they are not required ( #7902 ). Version 1.26.0 Release date: May 23, 2025 Important Changes CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203) Deprecation of Native Barman Cloud Support : Native support for Barman Cloud backups and recovery is now deprecated and will be fully removed in CloudNativePG version 1.28.0. Although still available in the current release, users are strongly encouraged to begin migrating their existing clusters to the new Barman Cloud Plugin to ensure a smooth and seamless transition. The plugin should also be used for all new deployments. This change marks the first step toward making CloudNativePG a backup-agnostic solution, a goal that will be fully realized when volume snapshot support is also moved to a plugin-based architecture. (#6876) End of Support for Barman 3.4 and Earlier : CloudNativePG no longer supports Barman versions 3.4 and earlier, including the capability detection framework. Users running older operand versions (from before April 2023) must update their operand before upgrading the operator to avoid compatibility issues. (#7220) Hibernation Command Changes : The hibernate on and hibernate off commands in the cnpg plugin for kubectl now serve as shortcuts for declarative hibernation. The previous imperative approach has been removed in favor of this method. Additionally, the hibernate status command has been removed, as its functionality is now covered by the standard status command. Warning: Do not upgrade to version 1.26 of both the plugin and the operator unless you are prepared to migrate to the declarative hibernation method. (#7155) Features Declarative Offline In-Place Major Upgrades of PostgreSQL : Introduced support for offline in-place major upgrades when a new operand container image with a higher PostgreSQL major version is applied to a cluster. During the upgrade, all cluster pods are shut down to ensure data consistency. A new job is created to validate upgrade conditions, run pg_upgrade , and set up new directories for PGDATA , WAL files, and tablespaces as needed. Once the upgrade is complete, replicas are re-created. Failed upgrades can be rolled back declaratively. (#6664) Improved Startup and Readiness Probes for Replicas : Enhanced support for Kubernetes startup and readiness probes in PostgreSQL instances, providing greater control over replicas based on the streaming lag. (#6623) Declarative management of extensions and schemas : Introduced the extensions and schemas stanzas in the Database resource to declaratively create, modify, and drop PostgreSQL extensions and schemas within a database. (#7062) Enhancements Introduced an opt-in experimental feature to enhance the liveness probe with network isolation detection for primary instances. This feature can be activated via the alpha.cnpg.io/livenessPinger annotation (#7466). Introduced the STANDBY_TCP_USER_TIMEOUT operator configuration setting, allowing users to specify the tcp_user_timeout parameter on all standby instances managed by the operator. (#7036) Introduced the DRAIN_TAINTS operator configuration option, enabling users to customize which node taints indicate a node is being drained. This replaces the previous fixed behavior of only recognizing node.kubernetes.io/unschedulable as a drain signal. (#6928) Added a new field in the status of the Cluster resource to track the latest known Pod IP (#7546). Added the pg_extensions metric, providing information about installed PostgreSQL extensions and their latest available versions. (#7195) Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for patching PostgreSQL instance pods using the cnpg.io/podPatch annotation with a JSON Patch. This may introduce discrepancies between the operator\u2019s expectations and Kubernetes behavior, so it should be used with caution. (#6323) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) Removed the ENABLE_AZURE_PVC_UPDATES configuration, as it is no longer required to resize Azure volumes correctly. The Azure CSI driver includes the necessary fix as of version 1.11.0 . (#7297) The .spec.backup.barmanObjectStore and .spec.backup.retentionPolicy fields are now deprecated in favor of the external Barman Cloud Plugin, and a warning is now emitted by the admission webhook when these fields are used in the Cluster specification (#7500). Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151) CloudNativePG Interface (CNPG-I): A plugin can now trigger instance rollouts by implementing the EVALUATE verb, ensuring that plugin-induced changes are properly reconciled. (#7126) Introduced support for WAL recovery via CNPG-I plugins during snapshot restore. (#7284) Security Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250) Fixes Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Fixed a regression in WAL restore operations that prevented fallback to the in-tree barmanObjectStore configuration defined in the externalCluster source when a plugin failed to locate a WAL file (#7507). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) Treated timeout errors during volume snapshot creation as retryable to prevent unnecessary backup failures. (#7010) Moved the defaulting logic for .spec.postgresql.synchronous.dataDurability from the CRD to the webhook to avoid UI issues with OLM. (#7600) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Fixed an issue that prevented WALs from being archived on a former primary node when using a plugin. (#6964) Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). cnpg plugin: Increased the buffer size in the logs pretty command to better handle larger log output (#7281). Ensured the plugin-name parameter is required for plugin-based backups and disallowed for non-plugin backup methods (#7506). Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122) Changes Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556) Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399). Supported versions Kubernetes 1.33, 1.32, 1.31, and 1.30 PostgreSQL 17, 16, 15, 14, and 13 PostgreSQL 17.5 is the default image PostgreSQL 13 support ends on November 12, 2025","title":"Release notes for CloudNativePG 1.26"},{"location":"release_notes/v1.26/#release-notes-for-cloudnativepg-126","text":"History of user-visible changes in the 1.26 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.26"},{"location":"release_notes/v1.26/#version-1261","text":"Release date: Jul 25, 2025 In memory of DJ Walker-Morgan .","title":"Version 1.26.1"},{"location":"release_notes/v1.26/#important-changes","text":"CloudNativePG is moving toward a plugin-based, backup and recovery agnostic architecture (initiated in 1.26.0 with Barman Cloud). As part of this transition, the following fields in the .status section of the Cluster resource are now deprecated: firstRecoverabilityPoint firstRecoverabilityPointByMethod lastSuccessfulBackup lastSuccessfulBackupByMethod lastFailedBackup Additionally, the following Prometheus metrics are deprecated: cnpg_collector_first_recoverability_point cnpg_collector_last_available_backup_timestamp cnpg_collector_last_failed_backup_timestamp These fields and metrics will no longer update when using plugin-based backups (e.g., Barman Cloud via CNPG-I). They remain functional for users still using in-core Barman Cloud and volume snapshot backups. Note: We, as maintainers, are sorry for any inconvenience caused by not highlighting this change during the 1.26.0 release. As we transition to a plugin-based backup and recovery architecture, we encourage you to test your chosen plugin thoroughly in a staging environment before moving to production to ensure your workflows and observability integration continue to meet your needs. Thank you for your understanding and for working with us as CloudNativePG evolves to provide a more modular and robust experience.","title":"Important Changes"},{"location":"release_notes/v1.26/#changes","text":"Removed 386 and ARM (v5/v6/v7) architectures from the cnpg plugin build matrix, reducing the number of published binaries ( #7648 ).","title":"Changes"},{"location":"release_notes/v1.26/#enhancements","text":"Improved validation of shared_buffers by correctly considering HugePages settings, ensuring accurate memory configuration checks ( #7864 ). Set oom_score_adj for PostgreSQL worker processes to improve prioritization during out-of-memory situations ( #7891 ). Added fqdn-uri and fqdn-jdbc-uri fields in user secrets to simplify application connection string management and align with DNS-based connection best practices ( #7852 ). Added the systemID field and related condition in the Cluster status to track the PostgreSQL system identifier. ( #7717 ).","title":"Enhancements"},{"location":"release_notes/v1.26/#fixes","text":"Added a mutex in the connection pooler to protect concurrent access to the connections map, improving stability in high-concurrency environments ( #7804 ). Fixed replica cluster instance ordering by correctly detecting the designated primary, improving replica cluster stability and switchover operations ( #8108 ). Added support for reconciling VolumeAttributesClass for PVCs, enhancing storage compatibility and lifecycle management ( #7885 ). Made the internal webserver routines non-blocking to improve responsiveness under load ( #8071 ). Fixed an issue where the ensureReplicationClientLeafCertificate error did not display the correct secretName in the not found message ( #8086 ). Prevented invalid ALTER SUBSCRIPTION statements by updating only PostgreSQL\u2011supported parameters; unsupported options like copy_data are ignored to avoid reconciliation failures ( 7844 ). Fixed an issue where the bootstrap-controller in the connection pooler did not apply resources settings correctly ( #7922 ). Ensured online backups fail cleanly if the targetPod becomes unhealthy during backup, preventing partial or misleading backups ( #7944 ). Ensured the Backup resource status is set properly after a failure, improving observability and scripting reliability ( #7898 ). Improved liveness probe handling to avoid unnecessary timeouts when they are not required ( #7902 ).","title":"Fixes"},{"location":"release_notes/v1.26/#version-1260","text":"Release date: May 23, 2025","title":"Version 1.26.0"},{"location":"release_notes/v1.26/#important-changes_1","text":"CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203) Deprecation of Native Barman Cloud Support : Native support for Barman Cloud backups and recovery is now deprecated and will be fully removed in CloudNativePG version 1.28.0. Although still available in the current release, users are strongly encouraged to begin migrating their existing clusters to the new Barman Cloud Plugin to ensure a smooth and seamless transition. The plugin should also be used for all new deployments. This change marks the first step toward making CloudNativePG a backup-agnostic solution, a goal that will be fully realized when volume snapshot support is also moved to a plugin-based architecture. (#6876) End of Support for Barman 3.4 and Earlier : CloudNativePG no longer supports Barman versions 3.4 and earlier, including the capability detection framework. Users running older operand versions (from before April 2023) must update their operand before upgrading the operator to avoid compatibility issues. (#7220) Hibernation Command Changes : The hibernate on and hibernate off commands in the cnpg plugin for kubectl now serve as shortcuts for declarative hibernation. The previous imperative approach has been removed in favor of this method. Additionally, the hibernate status command has been removed, as its functionality is now covered by the standard status command. Warning: Do not upgrade to version 1.26 of both the plugin and the operator unless you are prepared to migrate to the declarative hibernation method. (#7155)","title":"Important Changes"},{"location":"release_notes/v1.26/#features","text":"Declarative Offline In-Place Major Upgrades of PostgreSQL : Introduced support for offline in-place major upgrades when a new operand container image with a higher PostgreSQL major version is applied to a cluster. During the upgrade, all cluster pods are shut down to ensure data consistency. A new job is created to validate upgrade conditions, run pg_upgrade , and set up new directories for PGDATA , WAL files, and tablespaces as needed. Once the upgrade is complete, replicas are re-created. Failed upgrades can be rolled back declaratively. (#6664) Improved Startup and Readiness Probes for Replicas : Enhanced support for Kubernetes startup and readiness probes in PostgreSQL instances, providing greater control over replicas based on the streaming lag. (#6623) Declarative management of extensions and schemas : Introduced the extensions and schemas stanzas in the Database resource to declaratively create, modify, and drop PostgreSQL extensions and schemas within a database. (#7062)","title":"Features"},{"location":"release_notes/v1.26/#enhancements_1","text":"Introduced an opt-in experimental feature to enhance the liveness probe with network isolation detection for primary instances. This feature can be activated via the alpha.cnpg.io/livenessPinger annotation (#7466). Introduced the STANDBY_TCP_USER_TIMEOUT operator configuration setting, allowing users to specify the tcp_user_timeout parameter on all standby instances managed by the operator. (#7036) Introduced the DRAIN_TAINTS operator configuration option, enabling users to customize which node taints indicate a node is being drained. This replaces the previous fixed behavior of only recognizing node.kubernetes.io/unschedulable as a drain signal. (#6928) Added a new field in the status of the Cluster resource to track the latest known Pod IP (#7546). Added the pg_extensions metric, providing information about installed PostgreSQL extensions and their latest available versions. (#7195) Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for patching PostgreSQL instance pods using the cnpg.io/podPatch annotation with a JSON Patch. This may introduce discrepancies between the operator\u2019s expectations and Kubernetes behavior, so it should be used with caution. (#6323) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) Removed the ENABLE_AZURE_PVC_UPDATES configuration, as it is no longer required to resize Azure volumes correctly. The Azure CSI driver includes the necessary fix as of version 1.11.0 . (#7297) The .spec.backup.barmanObjectStore and .spec.backup.retentionPolicy fields are now deprecated in favor of the external Barman Cloud Plugin, and a warning is now emitted by the admission webhook when these fields are used in the Cluster specification (#7500). Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151) CloudNativePG Interface (CNPG-I): A plugin can now trigger instance rollouts by implementing the EVALUATE verb, ensuring that plugin-induced changes are properly reconciled. (#7126) Introduced support for WAL recovery via CNPG-I plugins during snapshot restore. (#7284)","title":"Enhancements"},{"location":"release_notes/v1.26/#security","text":"Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250)","title":"Security"},{"location":"release_notes/v1.26/#fixes_1","text":"Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Fixed a regression in WAL restore operations that prevented fallback to the in-tree barmanObjectStore configuration defined in the externalCluster source when a plugin failed to locate a WAL file (#7507). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) Treated timeout errors during volume snapshot creation as retryable to prevent unnecessary backup failures. (#7010) Moved the defaulting logic for .spec.postgresql.synchronous.dataDurability from the CRD to the webhook to avoid UI issues with OLM. (#7600) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Fixed an issue that prevented WALs from being archived on a former primary node when using a plugin. (#6964) Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). cnpg plugin: Increased the buffer size in the logs pretty command to better handle larger log output (#7281). Ensured the plugin-name parameter is required for plugin-based backups and disallowed for non-plugin backup methods (#7506). Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122)","title":"Fixes"},{"location":"release_notes/v1.26/#changes_1","text":"Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556) Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399).","title":"Changes"},{"location":"release_notes/v1.26/#supported-versions","text":"Kubernetes 1.33, 1.32, 1.31, and 1.30 PostgreSQL 17, 16, 15, 14, and 13 PostgreSQL 17.5 is the default image PostgreSQL 13 support ends on November 12, 2025","title":"Supported versions"},{"location":"release_notes/v1.27/","text":"Release notes for CloudNativePG 1.27 History of user-visible changes in the 1.27 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.27.0-rc1 Release date: Jul 29, 2025 Important changes: A change in the default behavior of the liveness probe , now enforcing the shutdown of an isolated primary within the livenessProbeTimeout (30 seconds), will require a restart of your pods. Features: Dynamic loading of PostgreSQL extensions : Introduced the .spec.postgresql.extensions stanza for mounting PostgreSQL extensions, packaged as OCI-compliant container images, as read-only and immutable volumes inside instance pods. This allows dynamic extension management without rebuilding base images. ( #7991 ). Logical decoding slot synchronization in HA clusters : Added the synchronizeLogicalDecoding field under spec.replicationSlots.highAvailability to enable automatic synchronization of logical decoding slots across high-availability clusters, ensuring logical replication subscribers continue seamlessly after a publisher failover ( #7931 ). Primary Isolation Check : Promoted to stable the liveness pinger experimental feature introduced in 1.26, adding the .spec.probes.liveness.isolationCheck section to enable primary isolation checks in the liveness probe by default. This improves the detection and handling of primary connectivity issues in Kubernetes environments ( #7845 ). Enhancements: Introduced an opt-in experimental feature that enables quorum-based failover to improve safety and data durability during failover events. This feature, also called failover quorum, can be activated via the alpha.cnpg.io/failoverQuorum annotation. ( #7572 ). Added support for user maps for predefined users such as streaming_replica , allowing the use of self-managed client certificates with different Common Names in environments with strict policies or shared CAs, while still enabling replicas to join clusters using the streaming_replica role ( #7725 ). Added a new PhaseFailurePlugin phase in the Cluster status to improve observability of plugin-related failures ( #7988 ). Made the Backup.spec field immutable after creation, ensuring consistency and predictability in backup operations ( #7904 ). Added fqdn-uri and fqdn-jdbc-uri fields in the user secret to simplify the retrieval of fully qualified domain name-based connection strings ( #7852 ). CNPG-I: Added Postgres interface support to the CNPG-I operator, continuing the transition toward a plugin-based architecture ( #7179 ). Added metrics capabilities to the CNPG-I instance webserver, enabling metrics exposure directly from the instance for better observability ( #8033 ). Supported versions Kubernetes 1.33, 1.32, and 1.31 PostgreSQL 17, 16, 15, 14, and 13 PostgreSQL 17.5 is the default image PostgreSQL 13 support ends on November 12, 2025","title":"Release notes for CloudNativePG 1.27"},{"location":"release_notes/v1.27/#release-notes-for-cloudnativepg-127","text":"History of user-visible changes in the 1.27 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.27"},{"location":"release_notes/v1.27/#version-1270-rc1","text":"Release date: Jul 29, 2025","title":"Version 1.27.0-rc1"},{"location":"release_notes/v1.27/#important-changes","text":"A change in the default behavior of the liveness probe , now enforcing the shutdown of an isolated primary within the livenessProbeTimeout (30 seconds), will require a restart of your pods.","title":"Important changes:"},{"location":"release_notes/v1.27/#features","text":"Dynamic loading of PostgreSQL extensions : Introduced the .spec.postgresql.extensions stanza for mounting PostgreSQL extensions, packaged as OCI-compliant container images, as read-only and immutable volumes inside instance pods. This allows dynamic extension management without rebuilding base images. ( #7991 ). Logical decoding slot synchronization in HA clusters : Added the synchronizeLogicalDecoding field under spec.replicationSlots.highAvailability to enable automatic synchronization of logical decoding slots across high-availability clusters, ensuring logical replication subscribers continue seamlessly after a publisher failover ( #7931 ). Primary Isolation Check : Promoted to stable the liveness pinger experimental feature introduced in 1.26, adding the .spec.probes.liveness.isolationCheck section to enable primary isolation checks in the liveness probe by default. This improves the detection and handling of primary connectivity issues in Kubernetes environments ( #7845 ).","title":"Features:"},{"location":"release_notes/v1.27/#enhancements","text":"Introduced an opt-in experimental feature that enables quorum-based failover to improve safety and data durability during failover events. This feature, also called failover quorum, can be activated via the alpha.cnpg.io/failoverQuorum annotation. ( #7572 ). Added support for user maps for predefined users such as streaming_replica , allowing the use of self-managed client certificates with different Common Names in environments with strict policies or shared CAs, while still enabling replicas to join clusters using the streaming_replica role ( #7725 ). Added a new PhaseFailurePlugin phase in the Cluster status to improve observability of plugin-related failures ( #7988 ). Made the Backup.spec field immutable after creation, ensuring consistency and predictability in backup operations ( #7904 ). Added fqdn-uri and fqdn-jdbc-uri fields in the user secret to simplify the retrieval of fully qualified domain name-based connection strings ( #7852 ). CNPG-I: Added Postgres interface support to the CNPG-I operator, continuing the transition toward a plugin-based architecture ( #7179 ). Added metrics capabilities to the CNPG-I instance webserver, enabling metrics exposure directly from the instance for better observability ( #8033 ).","title":"Enhancements:"},{"location":"release_notes/v1.27/#supported-versions","text":"Kubernetes 1.33, 1.32, and 1.31 PostgreSQL 17, 16, 15, 14, and 13 PostgreSQL 17.5 is the default image PostgreSQL 13 support ends on November 12, 2025","title":"Supported versions"},{"location":"release_notes/old/v1.15/","text":"Release notes for CloudNativePG 1.15 History of user-visible changes in the 1.15 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Warning This is expected to be the last release in the 1.15.X series. Users are encouraged to update to a newer minor version soon. Version 1.15.5 Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Make the cluster's conditions compatible with metav1.Conditions struct (#720) Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765) Version 1.15.4 Release date: Sep 6, 2022 Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Fixes: Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641) Version 1.15.3 Release date: Aug 12, 2022 Enhancements: Enable the configuration of the huge_pages option for PostgreSQL (#456) Enhance log during promotion and demotion, after a failover or a switchover, by printing the time elapsed between the request of promotion and the actual availability for writes (#371) Add the instanceName and clusterName labels on jobs, pods, and PVCs to improve interaction with these resources (#534) Add instructions on how to create PostGIS clusters (#570) Security: Explicitly assign securityContext to the Pooler deployment (#485) Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437) Fixes: Use the correct delays for restarts ( stopDelay ) and for switchover ( switchoverDelay ), as they were erroneously swapped before. This is an important fix, as it might block indefinitely restarts if switchoverDelay is not set and uses the default value of 40000000 seconds (#531) Prevent the metrics collector from causing panic when the query returns an error (#396) Removing an unsafe debug message that was referencing an unchecked pointer, leading in some cases to segmentation faults regardless of the log level (#491) Prevent panic when fencing in case the cluster had no annotation (#512) Avoid updating the CRD if a TLS certificate is not changed (#501) Handle conflicts while injecting a certificate in the CRD (#547) Backup and recovery: Correctly pass object store credentials in Google Cloud (#454) Minor changes: Set the default operand image to PostgreSQL 15.0 Version 1.15.2 Release date: Jul 7, 2022 (patch release) Enhancements: Improve logging of the instance manager during switchover and failover Require Barman >= 3.0.0 for future support of PostgreSQL 15 in backup and recovery Changes: Set the default operand image to PostgreSQL 15.0 Fixes: Fix the initialization order inside the WithActiveInstance function that starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in the cluster initialization phase - this is especially useful in bootstrap operations like recovery from a backup are failing (before this patch, such logs were not sent to the standard output channel and were permanently lost) Avoid an unnecessary switchover when a hot standby sensitive parameter is decreased, and the primary has already restarted Properly quote role names in ALTER ROLE statements Backup and recovery: Fix the algorithm detecting the closest Barman backup for PITR, which was comparing the requested recovery timestamp with the backup start instead of the end Fix Point in Time Recovery based on a transaction ID, a named restore point, or the \u201cimmediate\u201d target by providing a new field called backupID in the recoveryTarget section Fix encryption parameters invoking barman-cloud-wal-archive and barman-cloud-backup commands Stop ignoring barmanObjectStore.serverName option when recovering from a backup object store using a server name that doesn\u2019t match the current cluster name cnpg plug-in: Make sure that the plug-in complies with the -n parameter when specified by the user Fix the status command to sort results and remove variability in the output Version 1.15.1 Release date: May 27, 2022 (patch release) Minor changes: Enable configuration of the archive_timeout setting for PostgreSQL, which was previously a fixed parameter (by default set to 5 minutes) Introduce a new field called backupOwnerReference in the scheduledBackup resource to set the ownership reference on the created backup resources, with possible values being none (default), self (objects owned by the scheduled backup object), and cluster (owned by the Postgres cluster object) Introduce automated collection of pg_stat_wal metrics for PostgreSQL 14 or higher in the native Prometheus exporter Set the default operand image to PostgreSQL 15.0 Fixes: Fix fencing by killing orphaned processes related to postgres Enable the CSV log pipe inside the WithActiveInstance function to collect logs from recovery bootstrap jobs and help in the troubleshooting phase Prevent bootstrapping a new cluster with a non-empty backup object store, removing the risk of overwriting existing backups With the recovery bootstrap method, make sure that the recovery object store and the backup object store are different to avoid overwriting existing backups Re-queue the reconciliation loop if the RBAC for backups is not yet created Fix an issue with backups and the wrong specification of the cluster name property Ensures that operator pods always have the latest certificates in the case of a deployment of the operator in high availability, with more than one replica Fix the cnpg report operator command to correctly handle the case of a deployment of the operator in high availability, with more than one replica Properly propagate changes in the cluster\u2019s inheritedMetadata set of labels and annotations to the related resources of the cluster without requiring a restart Fix the cnpg plugin to correctly parse any custom configmap and secret name defined in the operator deployment, instead of relying just on the default values Fix the local building of the documentation by using the minidocks/mkdocs image for mkdocs Version 1.15.0 Release date: 21 April 2022 Features: Fencing: Introduction of the fencing capability for a cluster or a given set of PostgreSQL instances through the cnpg.io/fencedInstances annotation, which, if not empty, disables switchover/failovers in the cluster; fenced instances are shut down and the pod is kept running (while considered not ready) for inspection and emergencies LDAP authentication: Allow LDAP Simple Bind and Search+Bind configuration options in the pg_hba.conf to be defined in the Postgres cluster spec declaratively, enabling the optional use of Kubernetes secrets for sensitive options such as ldapbindpasswd Introduction of the primaryUpdateMethod option, accepting the values of switchover (default) and restart , to be used in case of unsupervised primaryUpdateStrategy ; this method controls what happens to the primary instance during the rolling update procedure New report command in the kubectl cnp plugin for better diagnosis and more effective troubleshooting of both the operator and a specific Postgres cluster Prune those Backup objects that are no longer in the backup object store Specification of target timeline and LSN in Point-In-Time Recovery bootstrap method Support for the AWS_SESSION_TOKEN authentication token in AWS S3 through the sessionToken option Default image name for PgBouncer in Pooler pods set to quay.io/enterprisedb/pgbouncer:1.17.0 Fixes: Base backup detection for Point-In-Time Recovery via targetTime correctly works now, as previously a target prior to the latest available backup was not possible (the detection algorithm was always wrong by selecting the last backup as a starting point) Improved resilience of hot standby sensitive parameters by relying on the values the operator collects from pg_controldata Intermediate certificates handling has been improved by properly discarding invalid entries, instead of throwing an invalid certificate error Prometheus exporter metric collection queries in the databases are now committed instead of rolled back (this might result in a change in the number of rolled back transactions that are visible from downstream dashboards, where applicable) Version 1.15.0 is the first release of CloudNativePG. Previously, this software was called EDB Cloud Native PostgreSQL (now EDB Postgres for Kubernetes). If you are looking for information about a previous release, please refer to the EDB documentation .","title":"Release notes for CloudNativePG 1.15"},{"location":"release_notes/old/v1.15/#release-notes-for-cloudnativepg-115","text":"History of user-visible changes in the 1.15 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Warning This is expected to be the last release in the 1.15.X series. Users are encouraged to update to a newer minor version soon.","title":"Release notes for CloudNativePG 1.15"},{"location":"release_notes/old/v1.15/#version-1155","text":"Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Make the cluster's conditions compatible with metav1.Conditions struct (#720) Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765)","title":"Version 1.15.5"},{"location":"release_notes/old/v1.15/#version-1154","text":"Release date: Sep 6, 2022 Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Fixes: Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641)","title":"Version 1.15.4"},{"location":"release_notes/old/v1.15/#version-1153","text":"Release date: Aug 12, 2022 Enhancements: Enable the configuration of the huge_pages option for PostgreSQL (#456) Enhance log during promotion and demotion, after a failover or a switchover, by printing the time elapsed between the request of promotion and the actual availability for writes (#371) Add the instanceName and clusterName labels on jobs, pods, and PVCs to improve interaction with these resources (#534) Add instructions on how to create PostGIS clusters (#570) Security: Explicitly assign securityContext to the Pooler deployment (#485) Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437) Fixes: Use the correct delays for restarts ( stopDelay ) and for switchover ( switchoverDelay ), as they were erroneously swapped before. This is an important fix, as it might block indefinitely restarts if switchoverDelay is not set and uses the default value of 40000000 seconds (#531) Prevent the metrics collector from causing panic when the query returns an error (#396) Removing an unsafe debug message that was referencing an unchecked pointer, leading in some cases to segmentation faults regardless of the log level (#491) Prevent panic when fencing in case the cluster had no annotation (#512) Avoid updating the CRD if a TLS certificate is not changed (#501) Handle conflicts while injecting a certificate in the CRD (#547) Backup and recovery: Correctly pass object store credentials in Google Cloud (#454) Minor changes: Set the default operand image to PostgreSQL 15.0","title":"Version 1.15.3"},{"location":"release_notes/old/v1.15/#version-1152","text":"Release date: Jul 7, 2022 (patch release) Enhancements: Improve logging of the instance manager during switchover and failover Require Barman >= 3.0.0 for future support of PostgreSQL 15 in backup and recovery Changes: Set the default operand image to PostgreSQL 15.0 Fixes: Fix the initialization order inside the WithActiveInstance function that starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in the cluster initialization phase - this is especially useful in bootstrap operations like recovery from a backup are failing (before this patch, such logs were not sent to the standard output channel and were permanently lost) Avoid an unnecessary switchover when a hot standby sensitive parameter is decreased, and the primary has already restarted Properly quote role names in ALTER ROLE statements Backup and recovery: Fix the algorithm detecting the closest Barman backup for PITR, which was comparing the requested recovery timestamp with the backup start instead of the end Fix Point in Time Recovery based on a transaction ID, a named restore point, or the \u201cimmediate\u201d target by providing a new field called backupID in the recoveryTarget section Fix encryption parameters invoking barman-cloud-wal-archive and barman-cloud-backup commands Stop ignoring barmanObjectStore.serverName option when recovering from a backup object store using a server name that doesn\u2019t match the current cluster name cnpg plug-in: Make sure that the plug-in complies with the -n parameter when specified by the user Fix the status command to sort results and remove variability in the output","title":"Version 1.15.2"},{"location":"release_notes/old/v1.15/#version-1151","text":"Release date: May 27, 2022 (patch release) Minor changes: Enable configuration of the archive_timeout setting for PostgreSQL, which was previously a fixed parameter (by default set to 5 minutes) Introduce a new field called backupOwnerReference in the scheduledBackup resource to set the ownership reference on the created backup resources, with possible values being none (default), self (objects owned by the scheduled backup object), and cluster (owned by the Postgres cluster object) Introduce automated collection of pg_stat_wal metrics for PostgreSQL 14 or higher in the native Prometheus exporter Set the default operand image to PostgreSQL 15.0 Fixes: Fix fencing by killing orphaned processes related to postgres Enable the CSV log pipe inside the WithActiveInstance function to collect logs from recovery bootstrap jobs and help in the troubleshooting phase Prevent bootstrapping a new cluster with a non-empty backup object store, removing the risk of overwriting existing backups With the recovery bootstrap method, make sure that the recovery object store and the backup object store are different to avoid overwriting existing backups Re-queue the reconciliation loop if the RBAC for backups is not yet created Fix an issue with backups and the wrong specification of the cluster name property Ensures that operator pods always have the latest certificates in the case of a deployment of the operator in high availability, with more than one replica Fix the cnpg report operator command to correctly handle the case of a deployment of the operator in high availability, with more than one replica Properly propagate changes in the cluster\u2019s inheritedMetadata set of labels and annotations to the related resources of the cluster without requiring a restart Fix the cnpg plugin to correctly parse any custom configmap and secret name defined in the operator deployment, instead of relying just on the default values Fix the local building of the documentation by using the minidocks/mkdocs image for mkdocs","title":"Version 1.15.1"},{"location":"release_notes/old/v1.15/#version-1150","text":"Release date: 21 April 2022 Features: Fencing: Introduction of the fencing capability for a cluster or a given set of PostgreSQL instances through the cnpg.io/fencedInstances annotation, which, if not empty, disables switchover/failovers in the cluster; fenced instances are shut down and the pod is kept running (while considered not ready) for inspection and emergencies LDAP authentication: Allow LDAP Simple Bind and Search+Bind configuration options in the pg_hba.conf to be defined in the Postgres cluster spec declaratively, enabling the optional use of Kubernetes secrets for sensitive options such as ldapbindpasswd Introduction of the primaryUpdateMethod option, accepting the values of switchover (default) and restart , to be used in case of unsupervised primaryUpdateStrategy ; this method controls what happens to the primary instance during the rolling update procedure New report command in the kubectl cnp plugin for better diagnosis and more effective troubleshooting of both the operator and a specific Postgres cluster Prune those Backup objects that are no longer in the backup object store Specification of target timeline and LSN in Point-In-Time Recovery bootstrap method Support for the AWS_SESSION_TOKEN authentication token in AWS S3 through the sessionToken option Default image name for PgBouncer in Pooler pods set to quay.io/enterprisedb/pgbouncer:1.17.0 Fixes: Base backup detection for Point-In-Time Recovery via targetTime correctly works now, as previously a target prior to the latest available backup was not possible (the detection algorithm was always wrong by selecting the last backup as a starting point) Improved resilience of hot standby sensitive parameters by relying on the values the operator collects from pg_controldata Intermediate certificates handling has been improved by properly discarding invalid entries, instead of throwing an invalid certificate error Prometheus exporter metric collection queries in the databases are now committed instead of rolled back (this might result in a change in the number of rolled back transactions that are visible from downstream dashboards, where applicable) Version 1.15.0 is the first release of CloudNativePG. Previously, this software was called EDB Cloud Native PostgreSQL (now EDB Postgres for Kubernetes). If you are looking for information about a previous release, please refer to the EDB documentation .","title":"Version 1.15.0"},{"location":"release_notes/old/v1.16/","text":"Release notes for CloudNativePG 1.16 History of user-visible changes in the 1.16 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.16.5 Release date: Dec 21, 2022 Warning This is expected to be the last release in the 1.16.X series. Users are encouraged to update to a newer minor version soon. Important announcements: Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166) Version 1.16.4 Release date: Nov 10, 2022 Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: status command for the cnpg plugin: Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866) Version 1.16.3 Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765) Version 1.16.2 Release date: Sep 6, 2022 Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Fixes: Use shared_preload_libraries when bootstrapping the new cluster's primary (#642) Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641) Version 1.16.1 Release date: Aug 12, 2022 Enhancements: Enable the configuration of the huge_pages option for PostgreSQL (#456) Enhance log during promotion and demotion, after a failover or a switchover, by printing the time elapsed between the request of promotion and the actual availability for writes (#371) Introduce the PostgreSQL cluster\u2019s timeline in the cluster status (#462) Add the instanceName and clusterName labels on jobs, pods, and PVCs to improve interaction with these resources (#534) Add instructions on how to create PostGIS clusters (#570) Security: Explicitly assign securityContext to the Pooler deployment (#485) Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437) Fixes: Use the correct delays for restarts ( stopDelay ) and for switchover ( switchoverDelay ), as they were erroneously swapped before. This is an important fix, as it might block indefinitely restarts if switchoverDelay is not set and uses the default value of 40000000 seconds (#531) Prevent the metrics collector from causing panic when the query returns an error (#396) Removing an unsafe debug message that was referencing an unchecked pointer, leading in some cases to segmentation faults regardless of the log level (#491) Prevent panic when fencing in case the cluster had no annotation (#512) Avoid updating the CRD if a TLS certificate is not changed (#501) Handle conflicts while injecting a certificate in the CRD (#547) Database import: Use the postgres user while running pg_restore in database import (#411) Document the requirement to explicitly set sslmode in the monolith import case to control SSL connections with the origin external server (#572) Fix bug that prevented import from working when dbname was specified in connectionParameters (#569) Backup and recovery: Correctly pass object store credentials in Google Cloud (#454) Minor changes: Set the default operand image to PostgreSQL 15.0 Version 1.16.0 Release date: Jul 7, 2022 (minor release) Features: Offline data import and major upgrades for PostgreSQL: introduce the bootstrap.initdb.import section to provide a way to import objects via the network from an existing PostgreSQL instance (even outside Kubernetes) inside a brand new CloudNativePG cluster using the PostgreSQL logical backup concept ( pg_dump / pg_restore ). The same method can be used to perform major PostgreSQL upgrades on a new cluster. The feature introduces two types of import: microservice (import one database only in the new cluster) and monolith (import the selected databases and roles from the existing instance). Anti-affinity rules for synchronous replication based on labels: make sure that synchronous replicas are running on nodes with different characteristics than the node where the primary is running, for example, availability zone Enhancements: Improve fencing by removing the existing limitation that disables failover when one or more instances are fenced Enhance the automated extension management framework by checking whether an extension exists in the catalog instead of running DROP EXTENSION IF EXISTS unnecessarily Improve logging of the instance manager during switchover and failover Enable redefining the name of the database of the application, its owner, and the related secret when recovering from an object store or cloning an instance via pg_basebackup (this was only possible in the initdb bootstrap so far) Backup and recovery: Require Barman >= 3.0.0 for future support of PostgreSQL 15 Enable Azure AD Workload Identity for Barman Cloud backups through the inheritFromAzureAD option Introduce barmanObjectStore.s3Credentials.region to define the region in AWS ( AWS_DEFAULT_REGION ) for both backup and recovery object stores Support for Kubernetes 1.24 Changes: Set the default operand image to PostgreSQL 15.0 Use conditions from the Kubernetes API instead of relying on our own implementation for backup and WAL archiving Fixes: Fix the initialization order inside the WithActiveInstance function that starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in the cluster initialization phase - this is especially useful in bootstrap operations like recovery from a backup are failing (before this patch, such logs were not sent to the standard output channel and were permanently lost) Avoid an unnecessary switchover when a hot standby sensitive parameter is decreased, and the primary has already restarted Properly quote role names in ALTER ROLE statements Backup and recovery: Fix the algorithm detecting the closest Barman backup for PITR, which was comparing the requested recovery timestamp with the backup start instead of the end Fix Point in Time Recovery based on a transaction ID, a named restore point, or the \u201cimmediate\u201d target by providing a new field called backupID in the recoveryTarget section Fix encryption parameters invoking barman-cloud-wal-archive and barman-cloud-backup commands Stop ignoring barmanObjectStore.serverName option when recovering from a backup object store using a server name that doesn\u2019t match the current cluster name cnpg plug-in: Make sure that the plug-in complies with the -n parameter when specified by the user Fix the status command to sort results and remove variability in the output","title":"Release notes for CloudNativePG 1.16"},{"location":"release_notes/old/v1.16/#release-notes-for-cloudnativepg-116","text":"History of user-visible changes in the 1.16 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.16"},{"location":"release_notes/old/v1.16/#version-1165","text":"Release date: Dec 21, 2022 Warning This is expected to be the last release in the 1.16.X series. Users are encouraged to update to a newer minor version soon. Important announcements: Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166)","title":"Version 1.16.5"},{"location":"release_notes/old/v1.16/#version-1164","text":"Release date: Nov 10, 2022 Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: status command for the cnpg plugin: Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866)","title":"Version 1.16.4"},{"location":"release_notes/old/v1.16/#version-1163","text":"Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765)","title":"Version 1.16.3"},{"location":"release_notes/old/v1.16/#version-1162","text":"Release date: Sep 6, 2022 Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Fixes: Use shared_preload_libraries when bootstrapping the new cluster's primary (#642) Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641)","title":"Version 1.16.2"},{"location":"release_notes/old/v1.16/#version-1161","text":"Release date: Aug 12, 2022 Enhancements: Enable the configuration of the huge_pages option for PostgreSQL (#456) Enhance log during promotion and demotion, after a failover or a switchover, by printing the time elapsed between the request of promotion and the actual availability for writes (#371) Introduce the PostgreSQL cluster\u2019s timeline in the cluster status (#462) Add the instanceName and clusterName labels on jobs, pods, and PVCs to improve interaction with these resources (#534) Add instructions on how to create PostGIS clusters (#570) Security: Explicitly assign securityContext to the Pooler deployment (#485) Add read timeout values to the internal web servers to prevent Slowloris DDoS (#437) Fixes: Use the correct delays for restarts ( stopDelay ) and for switchover ( switchoverDelay ), as they were erroneously swapped before. This is an important fix, as it might block indefinitely restarts if switchoverDelay is not set and uses the default value of 40000000 seconds (#531) Prevent the metrics collector from causing panic when the query returns an error (#396) Removing an unsafe debug message that was referencing an unchecked pointer, leading in some cases to segmentation faults regardless of the log level (#491) Prevent panic when fencing in case the cluster had no annotation (#512) Avoid updating the CRD if a TLS certificate is not changed (#501) Handle conflicts while injecting a certificate in the CRD (#547) Database import: Use the postgres user while running pg_restore in database import (#411) Document the requirement to explicitly set sslmode in the monolith import case to control SSL connections with the origin external server (#572) Fix bug that prevented import from working when dbname was specified in connectionParameters (#569) Backup and recovery: Correctly pass object store credentials in Google Cloud (#454) Minor changes: Set the default operand image to PostgreSQL 15.0","title":"Version 1.16.1"},{"location":"release_notes/old/v1.16/#version-1160","text":"Release date: Jul 7, 2022 (minor release) Features: Offline data import and major upgrades for PostgreSQL: introduce the bootstrap.initdb.import section to provide a way to import objects via the network from an existing PostgreSQL instance (even outside Kubernetes) inside a brand new CloudNativePG cluster using the PostgreSQL logical backup concept ( pg_dump / pg_restore ). The same method can be used to perform major PostgreSQL upgrades on a new cluster. The feature introduces two types of import: microservice (import one database only in the new cluster) and monolith (import the selected databases and roles from the existing instance). Anti-affinity rules for synchronous replication based on labels: make sure that synchronous replicas are running on nodes with different characteristics than the node where the primary is running, for example, availability zone Enhancements: Improve fencing by removing the existing limitation that disables failover when one or more instances are fenced Enhance the automated extension management framework by checking whether an extension exists in the catalog instead of running DROP EXTENSION IF EXISTS unnecessarily Improve logging of the instance manager during switchover and failover Enable redefining the name of the database of the application, its owner, and the related secret when recovering from an object store or cloning an instance via pg_basebackup (this was only possible in the initdb bootstrap so far) Backup and recovery: Require Barman >= 3.0.0 for future support of PostgreSQL 15 Enable Azure AD Workload Identity for Barman Cloud backups through the inheritFromAzureAD option Introduce barmanObjectStore.s3Credentials.region to define the region in AWS ( AWS_DEFAULT_REGION ) for both backup and recovery object stores Support for Kubernetes 1.24 Changes: Set the default operand image to PostgreSQL 15.0 Use conditions from the Kubernetes API instead of relying on our own implementation for backup and WAL archiving Fixes: Fix the initialization order inside the WithActiveInstance function that starts the CSV log pipe for the PostgreSQL server, ensuring proper logging in the cluster initialization phase - this is especially useful in bootstrap operations like recovery from a backup are failing (before this patch, such logs were not sent to the standard output channel and were permanently lost) Avoid an unnecessary switchover when a hot standby sensitive parameter is decreased, and the primary has already restarted Properly quote role names in ALTER ROLE statements Backup and recovery: Fix the algorithm detecting the closest Barman backup for PITR, which was comparing the requested recovery timestamp with the backup start instead of the end Fix Point in Time Recovery based on a transaction ID, a named restore point, or the \u201cimmediate\u201d target by providing a new field called backupID in the recoveryTarget section Fix encryption parameters invoking barman-cloud-wal-archive and barman-cloud-backup commands Stop ignoring barmanObjectStore.serverName option when recovering from a backup object store using a server name that doesn\u2019t match the current cluster name cnpg plug-in: Make sure that the plug-in complies with the -n parameter when specified by the user Fix the status command to sort results and remove variability in the output","title":"Version 1.16.0"},{"location":"release_notes/old/v1.17/","text":"Release notes for CloudNativePG 1.17 History of user-visible changes in the 1.17 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.17.5 Release date: March 20, 2023 Warning This is expected to be the last release in the 1.17.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Fixes: Prevent panic with error handling in the probes (#1716) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Version 1.17.4 Release date: Feb 14, 2023 Features: Support for Kubernetes' projected volumes (#1269) Support custom environment variables for finer control of the PostgreSQL server process (#1275) Enhancements: Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213) Version 1.17.3 Release date: Dec 21, 2022 Important announcements: Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Improve compatibility with Istio: add support for Istio's quit endpoint so that jobs with Istio sidecars do not run indefinitely (#967) Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure the PVC containing WALs is deleted when scaling down the cluster (#1135) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166) Version 1.17.2 Release date: Nov 10, 2022 Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: status command for the cnpg plugin: Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Set PostgreSQL 15.0 as the new default version (#821) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866) Version 1.17.1 Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765) Ensure that timestamps that are specified with microsecond precision using the PostgreSQL format are correctly parsed (#741) Version 1.17.0 Release date: Sep 6, 2022 (minor release) Features: Separate volume for WAL files: Support for separating Write Ahead Log (WAL) and database data files onto different disks, potentially leading to better performance on high write systems by easing I/O load on the data directory. This option is controlled with the introduction of the optional walStorage section to separate WAL files ( pg_wal ) in a dedicated volume, separate from the PGDATA defined in the main and mandatory storage section (#513). Current limitations: walStorage can only be set at cluster creation and cannot be added or removed when the cluster is up and running. Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Introduce the kubectl cnpg destroy command to help remove an instance and all the associated PVCs (#643) Fixes: Use shared_preload_libraries when bootstrapping the new cluster's primary (#642) Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641)","title":"Release notes for CloudNativePG 1.17"},{"location":"release_notes/old/v1.17/#release-notes-for-cloudnativepg-117","text":"History of user-visible changes in the 1.17 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.17"},{"location":"release_notes/old/v1.17/#version-1175","text":"Release date: March 20, 2023 Warning This is expected to be the last release in the 1.17.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Fixes: Prevent panic with error handling in the probes (#1716) Properly show WAL archiving information with status command of the cnpg plugin (#1666)","title":"Version 1.17.5"},{"location":"release_notes/old/v1.17/#version-1174","text":"Release date: Feb 14, 2023 Features: Support for Kubernetes' projected volumes (#1269) Support custom environment variables for finer control of the PostgreSQL server process (#1275) Enhancements: Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213)","title":"Version 1.17.4"},{"location":"release_notes/old/v1.17/#version-1173","text":"Release date: Dec 21, 2022 Important announcements: Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Improve compatibility with Istio: add support for Istio's quit endpoint so that jobs with Istio sidecars do not run indefinitely (#967) Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure the PVC containing WALs is deleted when scaling down the cluster (#1135) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166)","title":"Version 1.17.3"},{"location":"release_notes/old/v1.17/#version-1172","text":"Release date: Nov 10, 2022 Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: status command for the cnpg plugin: Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Set PostgreSQL 15.0 as the new default version (#821) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866)","title":"Version 1.17.2"},{"location":"release_notes/old/v1.17/#version-1171","text":"Release date: Oct 6, 2022 Enhancements: Introduce leaseDuration and renewDeadline parameters in the controller manager to enhance configuration of the leader election in operator deployments (#759) Improve the mechanism that checks that the backup object store is empty before archiving a WAL file for the first time: a new file called .check-empty-wal-archive is placed in the PGDATA immediately after the cluster is bootstrapped and it is then removed after the first WAL file is successfully archived Security: Explicitly set permissions of the instance manager binary that is copied in the distroless/static:nonroot container image, by using the nonroot:nonroot user (#754) Fixes: Drop any active connection on a standby after it is promoted to primary (#737) Honor MAPPEDMETRIC and DURATION metric types conversion in the native Prometheus exporter (#765) Ensure that timestamps that are specified with microsecond precision using the PostgreSQL format are correctly parsed (#741)","title":"Version 1.17.1"},{"location":"release_notes/old/v1.17/#version-1170","text":"Release date: Sep 6, 2022 (minor release) Features: Separate volume for WAL files: Support for separating Write Ahead Log (WAL) and database data files onto different disks, potentially leading to better performance on high write systems by easing I/O load on the data directory. This option is controlled with the introduction of the optional walStorage section to separate WAL files ( pg_wal ) in a dedicated volume, separate from the PGDATA defined in the main and mandatory storage section (#513). Current limitations: walStorage can only be set at cluster creation and cannot be added or removed when the cluster is up and running. Enhancements: Enable configuration of low-level network TCP settings in the PgBouncer connection pooler implementation (#584) Make sure that the cnpg.io/instanceName and the cnpg.io/podRole labels are always present on pods and PVCs (#632 and #680) Propagate the role label of an instance to the underlying PVC (#634) Introduce the kubectl cnpg destroy command to help remove an instance and all the associated PVCs (#643) Fixes: Use shared_preload_libraries when bootstrapping the new cluster's primary (#642) Prevent multiple in-place upgrade processes of the operator from running simultaneously by atomically checking whether another one is in progress (#655) Avoid using a hardcoded file name to store the newly uploaded instance manager, preventing a possible race condition during online upgrades of the operator (#660) Prevent a panic from happening when invoking GetAllAccessibleDatabases (#641)","title":"Version 1.17.0"},{"location":"release_notes/old/v1.18/","text":"Release notes for CloudNativePG 1.18 History of user-visible changes in the 1.18 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.18.5 Release date: June 12, 2023 Warning This is expected to be the last release in the 1.18.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3s engine which could prevent setup on K3\u2019s (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242) Version 1.18.4 Release date: April 27, 2023 Important CloudNativePG is dropping support for PostgreSQL 10, as PostgreSQL 10 reached End-of-Life (EOL) in November 2022. Versions 11 and newer are supported. Please plan your migration to PostgreSQL 15 as soon as possible. Refer to \"Importing Postgres databases\" for more information on PostgreSQL major offline upgrades. Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858) Version 1.18.3 Release date: March 20, 2023 Enhancements: Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Enhance observability of backups with two new metrics and additional information in the status (#1428) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Inject binaries for all supported architectures in the operator image (#1513) Use the backup name to match resources in the backup object store (#1650) Leverages the --name option introduced with Barman 3.3 to make the association between backups and the object store more robust. Fixes: Prevent panic with error handling in the probes (#1716) Ensure that the HTTP package and controller runtime logs are in JSON format (#1442) Adds WAL storage to a cluster in a single instance Cluster (#1570) Various improvements to make backup code more robust (#1536, #1564, #1588, #1466, #1647) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Ensure nodeAffinity is applied even if AdditionalPodAffinity and AdditionalPodAntiAffinity are not set (#1663) Version 1.18.2 Release date: Feb 14, 2023 Enhancements: Introduce support for Kubernetes' projected volumes (#1269) Introduce support custom environment variables for finer control of the PostgreSQL server process (#1275) Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Improve support for the separate WAL volume feature by enabling users to move WAL files to a dedicated volume on an existing Postgres cluster (#1066) Enhance WAL observability with additional metrics for the Prometheus exporter, including values equivalent to the min_wal_size , max_wal_size , keep_wal_size , wal_keep_segments , as well as the maximum number of WALs that can be stored in the dedicated volume (#1382) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Skip executing a CHECKPOINT as the streaming_replica user (#1408) Make waitForWalArchiveWorking resilient to connection errors (#1399) Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Ensure ExecCommand obeys timeout (#1242) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213) Version 1.18.1 Release date: Dec 21, 2022 Important announcements: Alert on the impending deprecation of postgresql as a label to identify the CNPG cluster. In the remote case you have used this label, please start using the cnpg.io/cluster label instead (#1130) Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Customize labels and annotations for the service account: add a service account template that can be used, for example, to make authentication easier via identity management on GKE or EKS via IRSA (#1105) Add nodeAffinity support (#1182) - allows for richer scheduling options Improve compatibility with Istio: add support for Istio's quit endpoint so that jobs with Istio sidecars do not run indefinitely (#967) Allow fields remapping in JSON logs: helpful for use cases where the level and ts fields might interfere with the existing logging (#843) Add fio command to the kubectl-cnpg plugin (#1097) Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure the PVC containing WALs is deleted when scaling down the cluster (#1135) Fix missing ApiVersion and Kind in the pgbench manifest when using --dry-run (#1088) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166) Version 1.18.0 Release date: Nov 10, 2022 Features: Cluster-managed physical replication slots for High Availability : automatically manages physical replication slots for each hot standby replica in the High Availability cluster, both in the primary and the standby (#740) Postgres cluster hibernation : introduces cluster hibernation via the plugin, with a new subcommand kubectl cnpg hibernate on/off/status <cluster-name> . Hibernation destroys all the resources generated by the cluster, except the PVCs that belong to the PostgreSQL primary instance (#782) Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: Allow omitting the storage size in the cluster spec if there is a size request in the pvcTemplate (#914) status command for the cnpg plugin: Add replication slots information (#873) Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Updates to the End-to-End Test Suite page (#945) New subcommands in the cnpg plugin: pgbench generates a job definition executing pgbench against a cluster (#958) install generates an installation manifest for the operator (#944) Set PostgreSQL 15.0 as the new default version (#821) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866)","title":"Release notes for CloudNativePG 1.18"},{"location":"release_notes/old/v1.18/#release-notes-for-cloudnativepg-118","text":"History of user-visible changes in the 1.18 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.18"},{"location":"release_notes/old/v1.18/#version-1185","text":"Release date: June 12, 2023 Warning This is expected to be the last release in the 1.18.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3s engine which could prevent setup on K3\u2019s (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242)","title":"Version 1.18.5"},{"location":"release_notes/old/v1.18/#version-1184","text":"Release date: April 27, 2023 Important CloudNativePG is dropping support for PostgreSQL 10, as PostgreSQL 10 reached End-of-Life (EOL) in November 2022. Versions 11 and newer are supported. Please plan your migration to PostgreSQL 15 as soon as possible. Refer to \"Importing Postgres databases\" for more information on PostgreSQL major offline upgrades. Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858)","title":"Version 1.18.4"},{"location":"release_notes/old/v1.18/#version-1183","text":"Release date: March 20, 2023 Enhancements: Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Enhance observability of backups with two new metrics and additional information in the status (#1428) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Inject binaries for all supported architectures in the operator image (#1513) Use the backup name to match resources in the backup object store (#1650) Leverages the --name option introduced with Barman 3.3 to make the association between backups and the object store more robust. Fixes: Prevent panic with error handling in the probes (#1716) Ensure that the HTTP package and controller runtime logs are in JSON format (#1442) Adds WAL storage to a cluster in a single instance Cluster (#1570) Various improvements to make backup code more robust (#1536, #1564, #1588, #1466, #1647) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Ensure nodeAffinity is applied even if AdditionalPodAffinity and AdditionalPodAntiAffinity are not set (#1663)","title":"Version 1.18.3"},{"location":"release_notes/old/v1.18/#version-1182","text":"Release date: Feb 14, 2023 Enhancements: Introduce support for Kubernetes' projected volumes (#1269) Introduce support custom environment variables for finer control of the PostgreSQL server process (#1275) Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Improve support for the separate WAL volume feature by enabling users to move WAL files to a dedicated volume on an existing Postgres cluster (#1066) Enhance WAL observability with additional metrics for the Prometheus exporter, including values equivalent to the min_wal_size , max_wal_size , keep_wal_size , wal_keep_segments , as well as the maximum number of WALs that can be stored in the dedicated volume (#1382) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Skip executing a CHECKPOINT as the streaming_replica user (#1408) Make waitForWalArchiveWorking resilient to connection errors (#1399) Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Ensure ExecCommand obeys timeout (#1242) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213)","title":"Version 1.18.2"},{"location":"release_notes/old/v1.18/#version-1181","text":"Release date: Dec 21, 2022 Important announcements: Alert on the impending deprecation of postgresql as a label to identify the CNPG cluster. In the remote case you have used this label, please start using the cnpg.io/cluster label instead (#1130) Recognizing Armando Ruocco (@armru) as a new CloudNativePG maintainer for his consistent and impactful contributions (#1167) Remove ARMv7 support (#1092) FINAL patch release for 1.16: 1.16.5. Release 1.16 reaches end of life. Enhancements: Customize labels and annotations for the service account: add a service account template that can be used, for example, to make authentication easier via identity management on GKE or EKS via IRSA (#1105) Add nodeAffinity support (#1182) - allows for richer scheduling options Improve compatibility with Istio: add support for Istio's quit endpoint so that jobs with Istio sidecars do not run indefinitely (#967) Allow fields remapping in JSON logs: helpful for use cases where the level and ts fields might interfere with the existing logging (#843) Add fio command to the kubectl-cnpg plugin (#1097) Add rpm/deb package for kubectl-cnpg plugin (#1008) Update default PostgreSQL version for new cluster definitions to 15.1 (#908) Documentation Remove references to CNPG sandbox (#1120) - the CNPG sandbox has been deprecated, in favor of instructions on monitoring in the Quickstart documentation Link to the \"Release updates\" discussion (#1148) - the release updates discussion will become the default channel for release announcements and discussions Document emeritus status for maintainers in GOVERNANCE.md (#1033) - explains how maintainers should proceed if they are not ready to continue contributing Improve instructions on creating pull requests (#1132) Troubleshooting emergency backup instructions (#1184) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Fixes: Ensure PGDATA permissions on bootstrap are properly set to 750 (#1164) Ensure the PVC containing WALs is deleted when scaling down the cluster (#1135) Fix missing ApiVersion and Kind in the pgbench manifest when using --dry-run (#1088) Ensure that we create secrets and services only when not found (#1145) Respect configured pg-wal when restoring (#1216) Filter out replicas from nodeToClusters map (#1194) Technical enhancements: Use ciclops for test summary (#1064): rely on the ciclops GitHub action to provide summaries of the E2E suite, inheriting improvements from that project Add backport pull request workflow (#965) - automatically backport patches to release branches if they are so annotated Make the operator log level configurable in e2e test suite (#1094) Enable test execution based on labels (#951) Update Go version from 1.18 to 1.19 (#1166)","title":"Version 1.18.1"},{"location":"release_notes/old/v1.18/#version-1180","text":"Release date: Nov 10, 2022 Features: Cluster-managed physical replication slots for High Availability : automatically manages physical replication slots for each hot standby replica in the High Availability cluster, both in the primary and the standby (#740) Postgres cluster hibernation : introduces cluster hibernation via the plugin, with a new subcommand kubectl cnpg hibernate on/off/status <cluster-name> . Hibernation destroys all the resources generated by the cluster, except the PVCs that belong to the PostgreSQL primary instance (#782) Security: Add SeccomProfile to Pods and Containers (#888) Enhancements: Allow omitting the storage size in the cluster spec if there is a size request in the pvcTemplate (#914) status command for the cnpg plugin: Add replication slots information (#873) Clarify display for fenced clusters (#886) Improve display for replica clusters (#871) Documentation: Improve monitoring page, providing instructions on how to evaluate the observability capabilities of CloudNativePG on a local system using Prometheus and Grafana (#968) Add page on design reasons for custom controller (#918) Updates to the End-to-End Test Suite page (#945) New subcommands in the cnpg plugin: pgbench generates a job definition executing pgbench against a cluster (#958) install generates an installation manifest for the operator (#944) Set PostgreSQL 15.0 as the new default version (#821) Fixes: Import a database with plpgsql functions (#974) Properly find the closest backup when doing Point-in-time recovery (#949) Clarify that the ScheduledBackup format does not follow Kubernetes CronJob format (#883) Bases the failover logic on the Postgres information from the instance manager, rather than Kubernetes pod readiness, which could be stale (#890) Ensure we have a WAL to archive for every newly created cluster. The lack could prevent backups from working (#897) Correct YAML key names for barmanObjectStore in documentation (#877) Fix krew release (#866)","title":"Version 1.18.0"},{"location":"release_notes/old/v1.19/","text":"Release notes for CloudNativePG 1.19 History of user-visible changes in the 1.19 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.19.6 Release date: Nov 3, 2023 Warning This is expected to be the last release in the 1.19.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Changes: Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152) Version 1.19.5 Release date: Oct 11, 2023 Warning Version 1.19 will reach its End-of-Life (EOL) on November 9, 2023. If you haven't done it yet, please start planning an upgrade as soon as possible. Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin's status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606) Version 1.19.4 Release date: July 27, 2023 Enhancements: New logs command in the kubectl plugin, to retrieve or follow the logs of all pods in a cluster (#2375) Add support for specifying priorityClassName in pods, helping Kubernetes make scheduling decisions (#2043) Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257) Various enhancements to the documentation: Add troubleshooting instructions relating to hugepages (#1390) Extend the FAQs page (#2344) Technical enhancements: Add a check at the start of the restore process to ensure it can proceed; give improved error diagnostics if it cannot (#2419) Fixes: Ensure the logic of setting the recovery target matches that of Postgres (#2460) Prevent taking over service accounts not owned by the cluster, by setting ownerMetadata only during service account creation (#2462) Ensure correct permissions of the PGDATA directory for initdb and restore (#2384) Prevent a possible crash of the instance manager during the configuration reload (#2393) Prevent the LastFailedArchiveTime alert from triggering if a new backup has been successful after the failed ones (#1751) Prevent services from targeting non-instance pods (#2336) Security: Updated all project dependencies to the latest versions Version 1.19.3 Release date: June 12, 2023 Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3d engine which could prevent setup on k3d (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242) Version 1.19.2 Release date: April 27, 2023 Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858) Version 1.19.1 Release date: March 20, 2023 Enhancements: Allow overriding the default backup target policy (#1602): previously, all backups and scheduled backups would use the cluster-level target policy Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Enhance observability of backups with two new metrics and additional information in the status (#1428) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Inject binaries for all supported architectures in the operator image (#1513) Use the backup name to match resources in the backup object store (#1650) Leverages the --name option introduced with Barman 3.3 to make the association between backups and the object store more robust. Fixes: Prevent panic with error handling in the probes (#1716) Ensure that the HTTP package and controller runtime logs are in JSON format (#1442) Adds WAL storage to a cluster in a single instance Cluster (#1570) Various improvements to make backup code more robust (#1536, #1564, #1588, #1466, #1647) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Ensure nodeAffinity is applied even if AdditionalPodAffinity and AdditionalPodAntiAffinity are not set (#1663) Introduce failover delay during OnlineUpgrading phase (#1728) Previously, the online upgrade process could trigger failover logic unnecessarily. Version 1.19.0 Release date: Feb 14, 2023 Important announcements: PostgreSQL version 10 is no longer supported as it has reached its EOL. Versions 11 and newer are supported. Please plan your migration to PostgreSQL 15 as soon as possible. Refer to \"Importing Postgres databases\" for more information on PostgreSQL major offline upgrades. Features: Backup from a standby: introduce the .spec.backup.target option accepting that when set to prefer-standby will run take the physical base backup from the most aligned replica (#1162) Delayed failover: introduce the failoverDelay parameter to delay the failover process once the primary has been detected unhealthy (#1366) Enhancements: Introduce support for Kubernetes' projected volumes (#1269) Introduce support custom environment variables for finer control of the PostgreSQL server process (#1275) Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Improve support for the separate WAL volume feature by enabling users to move WAL files to a dedicated volume on an existing Postgres cluster (#1066) Enhance WAL observability with additional metrics for the Prometheus exporter, including values equivalent to the min_wal_size , max_wal_size , keep_wal_size , wal_keep_segments , as well as the maximum number of WALs that can be stored in the dedicated volume (#1382) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Update default PostgreSQL version for new cluster definitions to 15.2 (#1430) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Skip executing a CHECKPOINT as the streaming_replica user (#1408) Make waitForWalArchiveWorking resilient to connection errors (#1399) Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Ensure ExecCommand obeys timeout (#1242) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213)","title":"Release notes for CloudNativePG 1.19"},{"location":"release_notes/old/v1.19/#release-notes-for-cloudnativepg-119","text":"History of user-visible changes in the 1.19 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.19"},{"location":"release_notes/old/v1.19/#version-1196","text":"Release date: Nov 3, 2023 Warning This is expected to be the last release in the 1.19.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Changes: Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152)","title":"Version 1.19.6"},{"location":"release_notes/old/v1.19/#version-1195","text":"Release date: Oct 11, 2023 Warning Version 1.19 will reach its End-of-Life (EOL) on November 9, 2023. If you haven't done it yet, please start planning an upgrade as soon as possible. Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin's status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606)","title":"Version 1.19.5"},{"location":"release_notes/old/v1.19/#version-1194","text":"Release date: July 27, 2023 Enhancements: New logs command in the kubectl plugin, to retrieve or follow the logs of all pods in a cluster (#2375) Add support for specifying priorityClassName in pods, helping Kubernetes make scheduling decisions (#2043) Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257) Various enhancements to the documentation: Add troubleshooting instructions relating to hugepages (#1390) Extend the FAQs page (#2344) Technical enhancements: Add a check at the start of the restore process to ensure it can proceed; give improved error diagnostics if it cannot (#2419) Fixes: Ensure the logic of setting the recovery target matches that of Postgres (#2460) Prevent taking over service accounts not owned by the cluster, by setting ownerMetadata only during service account creation (#2462) Ensure correct permissions of the PGDATA directory for initdb and restore (#2384) Prevent a possible crash of the instance manager during the configuration reload (#2393) Prevent the LastFailedArchiveTime alert from triggering if a new backup has been successful after the failed ones (#1751) Prevent services from targeting non-instance pods (#2336) Security: Updated all project dependencies to the latest versions","title":"Version 1.19.4"},{"location":"release_notes/old/v1.19/#version-1193","text":"Release date: June 12, 2023 Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3d engine which could prevent setup on k3d (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242)","title":"Version 1.19.3"},{"location":"release_notes/old/v1.19/#version-1192","text":"Release date: April 27, 2023 Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858)","title":"Version 1.19.2"},{"location":"release_notes/old/v1.19/#version-1191","text":"Release date: March 20, 2023 Enhancements: Allow overriding the default backup target policy (#1602): previously, all backups and scheduled backups would use the cluster-level target policy Extend the debug cluster's log level to the initdb job (#1503) Support IPv6 and custom pg_hba for the PgBouncer pooler (#1395) Enhance observability of backups with two new metrics and additional information in the status (#1428) Document API calls from the instance manager (#1641) Clarify deployment name via Helm (#1505) Add the psql command to the cnpg plugin for kubectl (#1668) allowing the user to start a psql session with a pod (the primary by default) Technical enhancements: Adopt Renovate for dependency tracking/updating (#1367, #1473) Inject binaries for all supported architectures in the operator image (#1513) Use the backup name to match resources in the backup object store (#1650) Leverages the --name option introduced with Barman 3.3 to make the association between backups and the object store more robust. Fixes: Prevent panic with error handling in the probes (#1716) Ensure that the HTTP package and controller runtime logs are in JSON format (#1442) Adds WAL storage to a cluster in a single instance Cluster (#1570) Various improvements to make backup code more robust (#1536, #1564, #1588, #1466, #1647) Properly show WAL archiving information with status command of the cnpg plugin (#1666) Ensure nodeAffinity is applied even if AdditionalPodAffinity and AdditionalPodAntiAffinity are not set (#1663) Introduce failover delay during OnlineUpgrading phase (#1728) Previously, the online upgrade process could trigger failover logic unnecessarily.","title":"Version 1.19.1"},{"location":"release_notes/old/v1.19/#version-1190","text":"Release date: Feb 14, 2023 Important announcements: PostgreSQL version 10 is no longer supported as it has reached its EOL. Versions 11 and newer are supported. Please plan your migration to PostgreSQL 15 as soon as possible. Refer to \"Importing Postgres databases\" for more information on PostgreSQL major offline upgrades. Features: Backup from a standby: introduce the .spec.backup.target option accepting that when set to prefer-standby will run take the physical base backup from the most aligned replica (#1162) Delayed failover: introduce the failoverDelay parameter to delay the failover process once the primary has been detected unhealthy (#1366) Enhancements: Introduce support for Kubernetes' projected volumes (#1269) Introduce support custom environment variables for finer control of the PostgreSQL server process (#1275) Introduce the backup command in the cnpg plugin for kubectl to issue a new base backup of the cluster (#1348) Improve support for the separate WAL volume feature by enabling users to move WAL files to a dedicated volume on an existing Postgres cluster (#1066) Enhance WAL observability with additional metrics for the Prometheus exporter, including values equivalent to the min_wal_size , max_wal_size , keep_wal_size , wal_keep_segments , as well as the maximum number of WALs that can be stored in the dedicated volume (#1382) Add a database comment on the streaming_replica user (#1349) Document the firewall issues with webhooks on GKE (#1364) Add note about postgresql.conf in recovery (#1211) Add instructions on installing plugin using packages (#1357) Specify Postgres versions supported by each minor release (#1355) Clarify the meaning of PVC group in CloudNativePG (#1344) Add an example of the DigitalOcean S3-compatible Spaces (#1289) Update default PostgreSQL version for new cluster definitions to 15.2 (#1430) Cover the Kubernetes layer in greater detail in the Architecture documentation (#1432) Technical enhancements: Added daily end-to-end smoke test for release branches (#1235) Fixes: Skip executing a CHECKPOINT as the streaming_replica user (#1408) Make waitForWalArchiveWorking resilient to connection errors (#1399) Ensure that the PVC roles are always consistent (#1380) Permit walStorage resize when using pvcTemplate (#1315) Ensure ExecCommand obeys timeout (#1242) Avoid PodMonitor reconcile if Prometheus is not installed (#1238) Avoid looking for PodMonitor when not needed (#1213)","title":"Version 1.19.0"},{"location":"release_notes/old/v1.20/","text":"Release notes for CloudNativePG 1.20 History of user-visible changes in the 1.20 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.20.6 Release date: Feb 2, 2024 Warning This is expected to be the last release in the 1.20.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Version 1.20.5 Release date: Dec 21, 2023 Security: By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300). Enhancements: Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270). Version 1.20.4 Release date: Nov 3, 2023 Enhancements: Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Changes: Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152) Version 1.20.3 Release date: Oct 11, 2023 Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin\u2019s status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL\u2019s fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Replace the cnpg snapshot command with cnpg backup -m volumeSnapshot for the kubectl plugin Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606) Version 1.20.2 Release date: July 27, 2023 Enhancements: New logs command in the kubectl plugin, to retrieve or follow the logs of all pods in a cluster (#2375) Add support for specifying priorityClassName in pods, helping Kubernetes make scheduling decisions (#2043) Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257) Various enhancements to the documentation: Add troubleshooting instructions relating to hugepages (#1390) Extend the FAQs page (#2344) Technical enhancements: Add a check at the start of the restore process to ensure it can proceed; give improved error diagnostics if it cannot (#2419) Improve handling of non-expiring passwords in managed roles (#2334) Fixes: Ensure the logic of setting the recovery target matches that of Postgres (#2460) Prevent taking over service accounts not owned by the cluster, by setting ownerMetadata only during service account creation (#2462) Ensure correct permissions of the PGDATA directory for initdb and restore (#2384) Prevent a possible crash of the instance manager during the configuration reload (#2393) Prevent the LastFailedArchiveTime alert from triggering if a new backup has been successful after the failed ones (#1751) Prevent services from targeting non-instance pods (#2336) Security: Updated all project dependencies to the latest versions Version 1.20.1 Release date: June 12, 2023 Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Declarative roles should ignore passwords if not set, easing management of previously existing roles (#2029) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3s engine which could prevent setup on K3\u2019s (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242) Version 1.20.0 Release date: April 27, 2023 Important changes from previous versions CloudNativePG 1.20 introduces some changes to the default behavior of a few features for newly created Cluster resources, compared to previous versions of the operator. The goal of these changes is to improve the resilience of a Postgres cluster out of the box through convention over configuration. For clusters with one or more replicas: Backup from standby is now enabled by default, unless target is explicitly set to primary Restart of the primary is now the default method to complete the unsupervised rolling update procedure ( primaryUpdateMethod defaults to restart , unless explicitly set to switchover ) For further information, please refer to the \"Installation and upgrades\" section. Features: Declarative role management: introduce the managed.roles stanza in the Cluster spec to provide full lifecycle management of database roles, by providing an abstraction to the related DDL commands in PostgreSQL, such as CREATE ROLE and ALTER ROLE (#1524, #1793 and #1815) Declarative hibernation of a PostgreSQL cluster: introduce a new annotation called cnpg.io/hibernation to declaratively hibernate a PostgreSQL cluster by deleting all pods and keeping the PVCs only; the feature also implements the inverse procedure (#1657) Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858)","title":"Release notes for CloudNativePG 1.20"},{"location":"release_notes/old/v1.20/#release-notes-for-cloudnativepg-120","text":"History of user-visible changes in the 1.20 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.20"},{"location":"release_notes/old/v1.20/#version-1206","text":"Release date: Feb 2, 2024 Warning This is expected to be the last release in the 1.20.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647)","title":"Version 1.20.6"},{"location":"release_notes/old/v1.20/#version-1205","text":"Release date: Dec 21, 2023 Security: By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300). Enhancements: Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270).","title":"Version 1.20.5"},{"location":"release_notes/old/v1.20/#version-1204","text":"Release date: Nov 3, 2023 Enhancements: Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Changes: Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152)","title":"Version 1.20.4"},{"location":"release_notes/old/v1.20/#version-1203","text":"Release date: Oct 11, 2023 Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin\u2019s status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL\u2019s fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Replace the cnpg snapshot command with cnpg backup -m volumeSnapshot for the kubectl plugin Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606)","title":"Version 1.20.3"},{"location":"release_notes/old/v1.20/#version-1202","text":"Release date: July 27, 2023 Enhancements: New logs command in the kubectl plugin, to retrieve or follow the logs of all pods in a cluster (#2375) Add support for specifying priorityClassName in pods, helping Kubernetes make scheduling decisions (#2043) Add a metric and status field to monitor node usage by a CloudNativePG cluster (#2257) Various enhancements to the documentation: Add troubleshooting instructions relating to hugepages (#1390) Extend the FAQs page (#2344) Technical enhancements: Add a check at the start of the restore process to ensure it can proceed; give improved error diagnostics if it cannot (#2419) Improve handling of non-expiring passwords in managed roles (#2334) Fixes: Ensure the logic of setting the recovery target matches that of Postgres (#2460) Prevent taking over service accounts not owned by the cluster, by setting ownerMetadata only during service account creation (#2462) Ensure correct permissions of the PGDATA directory for initdb and restore (#2384) Prevent a possible crash of the instance manager during the configuration reload (#2393) Prevent the LastFailedArchiveTime alert from triggering if a new backup has been successful after the failed ones (#1751) Prevent services from targeting non-instance pods (#2336) Security: Updated all project dependencies to the latest versions","title":"Version 1.20.2"},{"location":"release_notes/old/v1.20/#version-1201","text":"Release date: June 12, 2023 Enhancements: Add the snapshot command to the cnpg plugin to create a consistent cold backup of the cluster from a standby using the Kubernetes VolumeSnapshot standard resource (#1960) First implementation of recovery from a set of CSI VolumeSnapshot resources via the .spec.bootstrap.recovery.volumeSnapshot stanza (#1960) Add pg_failover_slots to managed extensions (#2057) Improved Grafana dashboard with updated instructions in the documentation and the quickstart guide (#1916) Introduce the schemaOnly option in the import stanza, to avoid exporting and importing data when you bootstrap a new Postgres Cluster from one or more existing databases (#2234) Add support for TopologySpreadConstraints to manage scheduling of instance pods (#2202) Add PodMonitor support to the Pooler for PgBouncer (#2034) Add option to override the default Kubernetes scheduler (#2013) Allow configuration of deployment strategy of a Pooler resource (#1983) Update default PostgreSQL version to 15.3 (#2022) Use PgBouncer 1.19 by default (#2018) Technical enhancements: Updated k8s kind tested versions (#2054) Declarative roles should ignore passwords if not set, easing management of previously existing roles (#2029) Use separate transactions to reconcile role credentials. Before this patch, the operator would revert the synchronization of all roles if one failed (#2004) Ensure fencing is removed during cluster restore (#1987) Improve logging when deleting Pods (#2136) Fixes: Fix unbound variable with k3s engine which could prevent setup on K3\u2019s (#2157) Report the correct PG version in the metrics (#2126) Use the correct walStorage key in the documentation (#2140) Halt reconciliation when the operator cannot connect with the instances, and provide a clear diagnostic on such occasions. This will help clarify cases where network issues obstruct normal operation of CloudNativePG (#2145), (#2233), and (#2242)","title":"Version 1.20.1"},{"location":"release_notes/old/v1.20/#version-1200","text":"Release date: April 27, 2023 Important changes from previous versions CloudNativePG 1.20 introduces some changes to the default behavior of a few features for newly created Cluster resources, compared to previous versions of the operator. The goal of these changes is to improve the resilience of a Postgres cluster out of the box through convention over configuration. For clusters with one or more replicas: Backup from standby is now enabled by default, unless target is explicitly set to primary Restart of the primary is now the default method to complete the unsupervised rolling update procedure ( primaryUpdateMethod defaults to restart , unless explicitly set to switchover ) For further information, please refer to the \"Installation and upgrades\" section. Features: Declarative role management: introduce the managed.roles stanza in the Cluster spec to provide full lifecycle management of database roles, by providing an abstraction to the related DDL commands in PostgreSQL, such as CREATE ROLE and ALTER ROLE (#1524, #1793 and #1815) Declarative hibernation of a PostgreSQL cluster: introduce a new annotation called cnpg.io/hibernation to declaratively hibernate a PostgreSQL cluster by deleting all pods and keeping the PVCs only; the feature also implements the inverse procedure (#1657) Enhancements: Improve the --logs option of the report command of the cnpg plugin for kubectl to also include the previous logs where available (#1811) The -any service is now disabled by default (#1755) Security: Enable customization of SeccompProfile through override via a local file (#1827) Fixes: Apply the PostgreSQL configuration provided by the user during the initdb bootstrap phase, before the server is started the first time (#1858)","title":"Version 1.20.0"},{"location":"release_notes/old/v1.21/","text":"Release notes for CloudNativePG 1.21 History of user-visible changes in the 1.21 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.21.6 Release date: Jun 12, 2024 Warning This is expected to be the last release in the 1.21.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602) Fixes: Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530) Changes Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753) Version 1.21.5 Release date: Apr 24, 2024 Enhancements: Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101) Fixes: Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346) Changes: The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154) Version 1.21.4 Release date: Mar 14, 2024 Enhancements Allow customization of the wal_level GUC in PostgreSQL (#4020) Add the cnpg.io/skipWalArchiving annotation to disable WAL archiving when set to enabled (#4055) Enrich the cnpg plugin for kubectl with the publication and subscription command groups to imperatively set up PostgreSQL native logical replication (#4052) Allow customization of CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD for automated management of TLS certificates handled by the operator (#3686) Introduce initial support for tab-completion with the cnpg plugin for kubectl (#3875) Retrieve the correct architecture's binary from the corresponding catalog in the running operator image during in-place updates, enabling the operator to inject the correct binary into any Pod with a supported architecture (#3840) Fixes Properly synchronize PVC group labels with those on the pods, a critical aspect when all pods are deleted and the operator needs to decide which Pod to recreate first (#3930) Disable wal_sender_timeout when cloning a replica to prevent timeout errors due to slow connections (#4080) Ensure that volume snapshots are ready before initiating recovery bootstrap procedures, preventing an error condition where recovery with incomplete backups could enter an error loop (#3663) Prevent an error loop when unsetting connection limits in managed roles (#3832) Resolve a corner case in hibernation where the instance pod has been deleted, but the cluster status still has the hibernation condition set to false (#3970) Correctly detect Google Cloud capabilities for Barman Cloud (#3931) Security Use Role instead of ClusterRole for operator permissions in OLM, requiring fewer privileges when installed on a per-namespace basis (#3855, #3990) Enforce fully-qualified object names in SQL queries for the PgBouncer pooler (#4080) Changes Follow Kubernetes recommendations to switch from client-side to server-side application of manifests, requiring the --server-side option by default when installing the operator (#3729). Set the default operand image to PostgreSQL 16.2 (#3823). Version 1.21.3 Release date: Feb 2, 2024 Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Ensure configuration coherence by pruning from postgresql.auto.conf any options now incorporated into override.conf (#3773) Version 1.21.2 Release date: Dec 21, 2023 Security: By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300). Enhancements: Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Enhanced computation of the first recoverability point and last successful backup by considering volume snapshots alongside object-store backups (#2940). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Introduction of Red Hat UBI 8 container images for the operator, suitable for OLM deployments. Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270). Version 1.21.1 Release date: Nov 3, 2023 Enhancements: Introduce support for online/hot backups with volume snapshots by using the PostgreSQL API for physical online base backups. Default configuration for hot/cold backups on a given Postgres cluster can be controlled through the online option and the onlineConfiguration stanza in .spec.backup.volumeSnapshot . Unless explicitly set, backups on volume snapshots are now taken online by default (#3102) Introduce the possibility to override the above default settings on volume snapshot backup using the ScheduledBackup and Backup resources (#3208, #3226) Enhance cold backup on volume snapshots by reducing the time window in which the target instance (standby or primary) is fenced, by lifting it as soon as the volume snapshot have been cut and provisioned (#3210) During a recovery from volume snapshots, ensure that the provided volume snapshots are coherent by validating the existing labels and annotations The backup command of the cnpg plugin for kubectl improves the volume snapshot backup experience through the --online , --immediate-checkpoint , and --wait-for-archive runtime options Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174) Fixes: Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Reduce the number of labels in VolumeSnapshots resources and render them into more appropriate annotations (#3151) Changes: Volume snapshot backups, introduced in 1.21.0, are now online/hot by default; in order to restore offline/cold backups set .spec.backup.volumeSnapshot to false Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812) Technical enhancements: Use extended query protocol for PostgreSQL in the instance manager (#3152) Version 1.21.0 Release date: Oct 12, 2023 Important changes from previous versions This release contains a few changes to the default settings of CloudNativePG with the goal to improve general stability and security through predefined values. If you are upgrading from a previous version, please carefully read the \"Important Changes\" section below, as well as the upgrade documentation. Features: Volume Snapshot support for backup and recovery: leverage the standard Kubernetes API on Volume Snapshots to take advantage of capabilities like incremental and differential copy for both backup and recovery operations. This first step, covering cold backups from a standby, will continue in 1.22 with support for hot backups using the PostgreSQL API and tablespaces. OLM installation method : introduce support for Operator Lifecycle Manager via OperatorHub.io for the latest patch version of the latest minor release through the stable channel. Many thanks to EDB for donating the bundle of their \"EDB Postgres for Kubernetes\" operator and adapting it for CloudNativePG. Important Changes: Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Disable superuser access by default for security (#2905) Enable replication slots for HA by default (#2903) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744) Security: Add a default seccompProfile to the operator deployment (#2926) Enhancements: Enable bootstrap of a replica cluster from a consistent set of volume snapshots (#2647) Enable full and Point In Time recovery from a consistent set of volume snapshots (#2390) Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin's status command (#2953) Fixes: Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888) Changes: Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Replace the cnpg snapshot command with cnpg backup -m volumeSnapshot for the kubectl plugin Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915) Technical enhancements: Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606)","title":"Release notes for CloudNativePG 1.21"},{"location":"release_notes/old/v1.21/#release-notes-for-cloudnativepg-121","text":"History of user-visible changes in the 1.21 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.21"},{"location":"release_notes/old/v1.21/#version-1216","text":"Release date: Jun 12, 2024 Warning This is expected to be the last release in the 1.21.X series. Users are encouraged to update to a newer minor version soon.","title":"Version 1.21.6"},{"location":"release_notes/old/v1.21/#enhancements","text":"Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes","text":"Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes","text":"Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753)","title":"Changes"},{"location":"release_notes/old/v1.21/#version-1215","text":"Release date: Apr 24, 2024","title":"Version 1.21.5"},{"location":"release_notes/old/v1.21/#enhancements_1","text":"Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_1","text":"Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes_1","text":"The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154)","title":"Changes:"},{"location":"release_notes/old/v1.21/#version-1214","text":"Release date: Mar 14, 2024","title":"Version 1.21.4"},{"location":"release_notes/old/v1.21/#enhancements_2","text":"Allow customization of the wal_level GUC in PostgreSQL (#4020) Add the cnpg.io/skipWalArchiving annotation to disable WAL archiving when set to enabled (#4055) Enrich the cnpg plugin for kubectl with the publication and subscription command groups to imperatively set up PostgreSQL native logical replication (#4052) Allow customization of CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD for automated management of TLS certificates handled by the operator (#3686) Introduce initial support for tab-completion with the cnpg plugin for kubectl (#3875) Retrieve the correct architecture's binary from the corresponding catalog in the running operator image during in-place updates, enabling the operator to inject the correct binary into any Pod with a supported architecture (#3840)","title":"Enhancements"},{"location":"release_notes/old/v1.21/#fixes_2","text":"Properly synchronize PVC group labels with those on the pods, a critical aspect when all pods are deleted and the operator needs to decide which Pod to recreate first (#3930) Disable wal_sender_timeout when cloning a replica to prevent timeout errors due to slow connections (#4080) Ensure that volume snapshots are ready before initiating recovery bootstrap procedures, preventing an error condition where recovery with incomplete backups could enter an error loop (#3663) Prevent an error loop when unsetting connection limits in managed roles (#3832) Resolve a corner case in hibernation where the instance pod has been deleted, but the cluster status still has the hibernation condition set to false (#3970) Correctly detect Google Cloud capabilities for Barman Cloud (#3931)","title":"Fixes"},{"location":"release_notes/old/v1.21/#security","text":"Use Role instead of ClusterRole for operator permissions in OLM, requiring fewer privileges when installed on a per-namespace basis (#3855, #3990) Enforce fully-qualified object names in SQL queries for the PgBouncer pooler (#4080)","title":"Security"},{"location":"release_notes/old/v1.21/#changes_2","text":"Follow Kubernetes recommendations to switch from client-side to server-side application of manifests, requiring the --server-side option by default when installing the operator (#3729). Set the default operand image to PostgreSQL 16.2 (#3823).","title":"Changes"},{"location":"release_notes/old/v1.21/#version-1213","text":"Release date: Feb 2, 2024","title":"Version 1.21.3"},{"location":"release_notes/old/v1.21/#enhancements_3","text":"Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_3","text":"Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Ensure configuration coherence by pruning from postgresql.auto.conf any options now incorporated into override.conf (#3773)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#version-1212","text":"Release date: Dec 21, 2023","title":"Version 1.21.2"},{"location":"release_notes/old/v1.21/#security_1","text":"By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300).","title":"Security:"},{"location":"release_notes/old/v1.21/#enhancements_4","text":"Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Enhanced computation of the first recoverability point and last successful backup by considering volume snapshots alongside object-store backups (#2940). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Introduction of Red Hat UBI 8 container images for the operator, suitable for OLM deployments. Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396).","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_4","text":"Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350).","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes_3","text":"Default operand image set to PostgreSQL 16.1 (#3270).","title":"Changes:"},{"location":"release_notes/old/v1.21/#version-1211","text":"Release date: Nov 3, 2023","title":"Version 1.21.1"},{"location":"release_notes/old/v1.21/#enhancements_5","text":"Introduce support for online/hot backups with volume snapshots by using the PostgreSQL API for physical online base backups. Default configuration for hot/cold backups on a given Postgres cluster can be controlled through the online option and the onlineConfiguration stanza in .spec.backup.volumeSnapshot . Unless explicitly set, backups on volume snapshots are now taken online by default (#3102) Introduce the possibility to override the above default settings on volume snapshot backup using the ScheduledBackup and Backup resources (#3208, #3226) Enhance cold backup on volume snapshots by reducing the time window in which the target instance (standby or primary) is fenced, by lifting it as soon as the volume snapshot have been cut and provisioned (#3210) During a recovery from volume snapshots, ensure that the provided volume snapshots are coherent by validating the existing labels and annotations The backup command of the cnpg plugin for kubectl improves the volume snapshot backup experience through the --online , --immediate-checkpoint , and --wait-for-archive runtime options Enhance the status command of the cnpg plugin for kubectl with progress information on active streaming base backups (#3101) Allow the configuration of max_prepared_statements with the pgBouncer Pooler resource (#3174)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_5","text":"Suspend WAL archiving during a switchover and resume it when it is completed (#3227) Ensure that the instance manager always uses synchronous_commit = local when managing the PostgreSQL cluster (#3143) Custom certificates for streaming replication user through .spec.certificates.replicationTLSSecret are now working (#3209) Set the cnpg.io/cluster label to the Pooler pods (#3153) Reduce the number of labels in VolumeSnapshots resources and render them into more appropriate annotations (#3151)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes_4","text":"Volume snapshot backups, introduced in 1.21.0, are now online/hot by default; in order to restore offline/cold backups set .spec.backup.volumeSnapshot to false Stop using the postgresql.auto.conf file inside PGDATA to control Postgres replication settings, and replace it with a file named override.conf (#2812)","title":"Changes:"},{"location":"release_notes/old/v1.21/#technical-enhancements","text":"Use extended query protocol for PostgreSQL in the instance manager (#3152)","title":"Technical enhancements:"},{"location":"release_notes/old/v1.21/#version-1210","text":"Release date: Oct 12, 2023 Important changes from previous versions This release contains a few changes to the default settings of CloudNativePG with the goal to improve general stability and security through predefined values. If you are upgrading from a previous version, please carefully read the \"Important Changes\" section below, as well as the upgrade documentation.","title":"Version 1.21.0"},{"location":"release_notes/old/v1.21/#features","text":"Volume Snapshot support for backup and recovery: leverage the standard Kubernetes API on Volume Snapshots to take advantage of capabilities like incremental and differential copy for both backup and recovery operations. This first step, covering cold backups from a standby, will continue in 1.22 with support for hot backups using the PostgreSQL API and tablespaces. OLM installation method : introduce support for Operator Lifecycle Manager via OperatorHub.io for the latest patch version of the latest minor release through the stable channel. Many thanks to EDB for donating the bundle of their \"EDB Postgres for Kubernetes\" operator and adapting it for CloudNativePG.","title":"Features:"},{"location":"release_notes/old/v1.21/#important-changes","text":"Change the default value of stopDelay to 1800 seconds instead of 30 seconds (#2848) Introduce a new parameter, called smartShutdownTimeout , to control the window of time reserved for the smart shutdown of Postgres to complete; the general formula to compute the overall timeout to stop Postgres is max(stopDelay - smartShutdownTimeout, 30) (#2848) Change the default value of startDelay to 3600, instead of 30 seconds (#2847) Replace the livenessProbe initial delay with a more proper Kubernetes startup probe to deal with the start of a Postgres server (#2847) Change the default value of switchoverDelay to 3600 seconds instead of 40000000 seconds (#2846) Disable superuser access by default for security (#2905) Enable replication slots for HA by default (#2903) Stop supporting the postgresql label - replaced by cnpg.io/cluster in 1.18 (#2744)","title":"Important Changes:"},{"location":"release_notes/old/v1.21/#security_2","text":"Add a default seccompProfile to the operator deployment (#2926)","title":"Security:"},{"location":"release_notes/old/v1.21/#enhancements_6","text":"Enable bootstrap of a replica cluster from a consistent set of volume snapshots (#2647) Enable full and Point In Time recovery from a consistent set of volume snapshots (#2390) Introduce the cnpg.io/coredumpFilter annotation to control the content of a core dump generated in the unlikely event of a PostgreSQL crash, by default set to exclude shared memory segments from the dump (#2733) Allow to configure ephemeral-storage limits for the shared memory and temporary data ephemeral volumes (#2830) Validate resource limits and requests through the webhook (#2663) Ensure that PostgreSQL's shared_buffers are coherent with the pods' allocated memory resources (#2840) Add uri and jdbc-uri fields in the credential secrets to facilitate developers when connecting their applications to the database (#2186) Add a new phase Waiting for the instances to become active for finer control of a cluster's state waiting for the replicas to be ready (#2612) Improve detection of Pod rollout conditions through the podSpec annotation (#2243) Add primary timestamp and uptime to the kubectl plugin's status command (#2953)","title":"Enhancements:"},{"location":"release_notes/old/v1.21/#fixes_6","text":"Ensure that the primary instance is always recreated first by prioritizing ready PVCs with a primary role (#2544) Honor the cnpg.io/skipEmptyWalArchiveCheck annotation during recovery to bypass the check for an empty WAL archive (#2731) Prevent a cluster from being stuck when the PostgreSQL server is down but the pod is up on the primary (#2966) Avoid treating the designated primary in a replica cluster as a regular HA replica when replication slots are enabled (#2960) Reconcile services every time the selectors change or when labels/annotations need to be changed (#2918) Defaults to app both the owner and database during recovery bootstrap (#2957) Avoid write-read concurrency on cached cluster (#2884) Remove empty items, make them unique and sort in the ResourceName sections of the generated roles (#2875) Ensure that the ContinuousArchiving condition is properly set to 'failed' in case of errors (#2625) Make the Backup resource reconciliation cycle more resilient on interruptions by stopping only if the backup is completed or failed (#2591) Reconcile PodMonitor labels and annotations (#2583) Fix backup failure due to missing RBAC resourceNames on the Role object (#2956) Observability: Add TCP port label to default pg_stat_replication metric (#2961) Fix the pg_wal_stat default metric for Prometheus (#2569) Improve the pg_replication default metric for Prometheus (#2744 and #2750) Use alertInstanceLabelFilter instead of alertName in the provided Grafana dashboard Enforce standard_conforming_strings in metric collection (#2888)","title":"Fixes:"},{"location":"release_notes/old/v1.21/#changes_5","text":"Set the default operand image to PostgreSQL 16.0 Fencing now uses PostgreSQL's fast shutdown instead of smart shutdown to halt an instance (#3051) Rename webhooks from kb.io to cnpg.io group (#2851) Replace the cnpg snapshot command with cnpg backup -m volumeSnapshot for the kubectl plugin Let the cnpg hibernate plugin command use the ClusterManifestAnnotationName and PgControldataAnnotationName annotations on PVCs (#2657) Add the cnpg.io/instanceRole label while deprecating the existing role label (#2915)","title":"Changes:"},{"location":"release_notes/old/v1.21/#technical-enhancements_1","text":"Replace k8s-api-docgen with gen-crd-api-reference-docs to automatically build the API reference documentation (#2606)","title":"Technical enhancements:"},{"location":"release_notes/old/v1.22/","text":"Release notes for CloudNativePG 1.22 History of user-visible changes in the 1.22 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.22.5 Release date: Jul 29, 2024 Warning This is expected to be the last release in the 1.22.X series. Users are encouraged to update to a newer minor version soon. Enhancements: Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044). Fixes: Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915). Version 1.22.4 Release date: Jun 12, 2024 Warning Version 1.22 is approaching its End-of-Life (EOL) on Jul 24, 2024. If you haven't already, please begin planning for an upgrade promptly to ensure continued support and security. Enhancements: Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602) Fixes: Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530) Changes Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753) Version 1.22.3 Release date: Apr 24, 2024 Enhancements: Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101) Fixes: Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346) Changes: The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154) Version 1.22.2 Release date: Mar 14, 2024 Enhancements Allow customization of the wal_level GUC in PostgreSQL (#4020) Add the cnpg.io/skipWalArchiving annotation to disable WAL archiving when set to enabled (#4055) Enrich the cnpg plugin for kubectl with the publication and subscription command groups to imperatively set up PostgreSQL native logical replication (#4052) Allow customization of CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD for automated management of TLS certificates handled by the operator (#3686) Retrieve the correct architecture's binary from the corresponding catalog in the running operator image during in-place updates, enabling the operator to inject the correct binary into any Pod with a supported architecture (#3840) Introduce initial support for tab-completion with the cnpg plugin for kubectl (#3875) Fixes Properly synchronize PVC group labels with those on the pods, a critical aspect when all pods are deleted and the operator needs to decide which Pod to recreate first (#3930) Disable wal_sender_timeout when cloning a replica to prevent timeout errors due to slow connections (#4080) Ensure that volume snapshots are ready before initiating recovery bootstrap procedures, preventing an error condition where recovery with incomplete backups could enter an error loop (#3663) Prevent an error loop when unsetting connection limits in managed roles (#3832) Resolve a corner case in hibernation where the instance pod has been deleted, but the cluster status still has the hibernation condition set to false (#3970) Correctly detect Google Cloud capabilities for Barman Cloud (#3931) Security Use Role instead of ClusterRole for operator permissions in OLM, requiring fewer privileges when installed on a per-namespace basis (#3855, #3990) Enforce fully-qualified object names in SQL queries for the PgBouncer pooler (#4080) Changes Follow Kubernetes recommendations to switch from client-side to server-side application of manifests, requiring the --server-side option by default when installing the operator (#3729). Set the default operand image to PostgreSQL 16.2 (#3823). Version 1.22.1 Release date: Feb 2, 2024 Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Proper recovery of tablespaces from volume snapshots (#3682) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Ensure configuration coherence by pruning from postgresql.auto.conf any options now incorporated into override.conf (#3773) Version 1.22.0 Release date: Dec 21, 2023 Important changes from previous versions This release introduces a significant change, disabling the default usage of the ALTER SYSTEM command in PostgreSQL. For users upgrading from a previous version who wish to retain the old behavior: please refer to the upgrade documentation for detailed instructions. Features: Declarative Tablespaces : Introducing the tablespaces stanza in the Cluster spec, enabling comprehensive lifecycle management of PostgreSQL tablespaces for enhanced vertical scalability (#3410). Temporary Tablespaces : Adding the .spec.tablespaces[*].temporary option to facilitate the utilization of a tablespace for temporary database operations, by incorporating the name into the temp_tablespaces PostgreSQL parameter (#3464). Security: By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300). Enhancements: Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Enhanced computation of the first recoverability point and last successful backup by considering volume snapshots alongside object-store backups (#2940). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Introduction of Red Hat UBI 8 container images for the operator, suitable for OLM deployments. Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270). The ALTER SYSTEM command is now disabled by default (#3545).","title":"Release notes for CloudNativePG 1.22"},{"location":"release_notes/old/v1.22/#release-notes-for-cloudnativepg-122","text":"History of user-visible changes in the 1.22 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.22"},{"location":"release_notes/old/v1.22/#version-1225","text":"Release date: Jul 29, 2024 Warning This is expected to be the last release in the 1.22.X series. Users are encouraged to update to a newer minor version soon.","title":"Version 1.22.5"},{"location":"release_notes/old/v1.22/#enhancements","text":"Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044).","title":"Enhancements:"},{"location":"release_notes/old/v1.22/#fixes","text":"Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915).","title":"Fixes:"},{"location":"release_notes/old/v1.22/#version-1224","text":"Release date: Jun 12, 2024 Warning Version 1.22 is approaching its End-of-Life (EOL) on Jul 24, 2024. If you haven't already, please begin planning for an upgrade promptly to ensure continued support and security.","title":"Version 1.22.4"},{"location":"release_notes/old/v1.22/#enhancements_1","text":"Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602)","title":"Enhancements:"},{"location":"release_notes/old/v1.22/#fixes_1","text":"Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530)","title":"Fixes:"},{"location":"release_notes/old/v1.22/#changes","text":"Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753)","title":"Changes"},{"location":"release_notes/old/v1.22/#version-1223","text":"Release date: Apr 24, 2024","title":"Version 1.22.3"},{"location":"release_notes/old/v1.22/#enhancements_2","text":"Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101)","title":"Enhancements:"},{"location":"release_notes/old/v1.22/#fixes_2","text":"Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346)","title":"Fixes:"},{"location":"release_notes/old/v1.22/#changes_1","text":"The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154)","title":"Changes:"},{"location":"release_notes/old/v1.22/#version-1222","text":"Release date: Mar 14, 2024","title":"Version 1.22.2"},{"location":"release_notes/old/v1.22/#enhancements_3","text":"Allow customization of the wal_level GUC in PostgreSQL (#4020) Add the cnpg.io/skipWalArchiving annotation to disable WAL archiving when set to enabled (#4055) Enrich the cnpg plugin for kubectl with the publication and subscription command groups to imperatively set up PostgreSQL native logical replication (#4052) Allow customization of CERTIFICATE_DURATION and EXPIRING_CHECK_THRESHOLD for automated management of TLS certificates handled by the operator (#3686) Retrieve the correct architecture's binary from the corresponding catalog in the running operator image during in-place updates, enabling the operator to inject the correct binary into any Pod with a supported architecture (#3840) Introduce initial support for tab-completion with the cnpg plugin for kubectl (#3875)","title":"Enhancements"},{"location":"release_notes/old/v1.22/#fixes_3","text":"Properly synchronize PVC group labels with those on the pods, a critical aspect when all pods are deleted and the operator needs to decide which Pod to recreate first (#3930) Disable wal_sender_timeout when cloning a replica to prevent timeout errors due to slow connections (#4080) Ensure that volume snapshots are ready before initiating recovery bootstrap procedures, preventing an error condition where recovery with incomplete backups could enter an error loop (#3663) Prevent an error loop when unsetting connection limits in managed roles (#3832) Resolve a corner case in hibernation where the instance pod has been deleted, but the cluster status still has the hibernation condition set to false (#3970) Correctly detect Google Cloud capabilities for Barman Cloud (#3931)","title":"Fixes"},{"location":"release_notes/old/v1.22/#security","text":"Use Role instead of ClusterRole for operator permissions in OLM, requiring fewer privileges when installed on a per-namespace basis (#3855, #3990) Enforce fully-qualified object names in SQL queries for the PgBouncer pooler (#4080)","title":"Security"},{"location":"release_notes/old/v1.22/#changes_2","text":"Follow Kubernetes recommendations to switch from client-side to server-side application of manifests, requiring the --server-side option by default when installing the operator (#3729). Set the default operand image to PostgreSQL 16.2 (#3823).","title":"Changes"},{"location":"release_notes/old/v1.22/#version-1221","text":"Release date: Feb 2, 2024 Enhancements: Tailor ephemeral volume storage in a Postgres cluster using a claim template through the ephemeralVolumeSource option (#3678) Introduce the pgadmin4 command in the cnpg plugin for kubectl , providing a straightforward method to demonstrate connecting to a given database cluster and navigate its content in a local environment such as kind - for evaluation purposes only (#3701) Allow customization of PostgreSQL's ident map file via the .spec.postgresql.pg_ident stanza, through a list of user name maps (#3534) Fixes: Prevent an unrecoverable issue with pg_rewind failing due to postgresql.auto.conf being read-only on clusters where the ALTER SYSTEM SQL command is disabled - the default (#3728) Proper recovery of tablespaces from volume snapshots (#3682) Reduce the risk of disk space shortage when using the import facility of the initdb bootstrap method, by disabling the durability settings in the PostgreSQL instance for the duration of the import process (#3743) Avoid pod restart due to erroneous resource quantity comparisons, e.g. \"1 != 1000m\" (#3706) Properly escape reserved characters in pgpass connection fields (#3713) Prevent systematic rollout of pods due to considering zero and nil different values in .spec.projectedVolumeTemplate.sources (#3647) Ensure configuration coherence by pruning from postgresql.auto.conf any options now incorporated into override.conf (#3773)","title":"Version 1.22.1"},{"location":"release_notes/old/v1.22/#version-1220","text":"Release date: Dec 21, 2023 Important changes from previous versions This release introduces a significant change, disabling the default usage of the ALTER SYSTEM command in PostgreSQL. For users upgrading from a previous version who wish to retain the old behavior: please refer to the upgrade documentation for detailed instructions.","title":"Version 1.22.0"},{"location":"release_notes/old/v1.22/#features","text":"Declarative Tablespaces : Introducing the tablespaces stanza in the Cluster spec, enabling comprehensive lifecycle management of PostgreSQL tablespaces for enhanced vertical scalability (#3410). Temporary Tablespaces : Adding the .spec.tablespaces[*].temporary option to facilitate the utilization of a tablespace for temporary database operations, by incorporating the name into the temp_tablespaces PostgreSQL parameter (#3464).","title":"Features:"},{"location":"release_notes/old/v1.22/#security_1","text":"By default, TLSv1.3 is now enforced on all PostgreSQL 12 or higher installations. Additionally, users can configure the ssl_ciphers , ssl_min_protocol_version , and ssl_max_protocol_version GUCs (#3408). Integration of Docker image scanning with Dockle and Snyk to enhance security measures (#3300).","title":"Security:"},{"location":"release_notes/old/v1.22/#enhancements_4","text":"Improved reconciliation of external clusters (#3533). Introduction of the ability to enable/disable the ALTER SYSTEM command (#3535). Support for Prometheus' dynamic relabeling through the podMonitorMetricRelabelings and podMonitorRelabelings options in the .spec.monitoring stanza of the Cluster and Pooler resources (#3075). Enhanced computation of the first recoverability point and last successful backup by considering volume snapshots alongside object-store backups (#2940). Elimination of the use of the PGPASSFILE environment variable when establishing a network connection to PostgreSQL (#3522). Improved cnpg report plugin command by collecting a cluster's PVCs (#3357). Enhancement of the cnpg status plugin command, providing information about managed roles, including alerts (#3310). Introduction of Red Hat UBI 8 container images for the operator, suitable for OLM deployments. Connection pooler: Scaling down instances of a Pooler resource to 0 is now possible (#3517). Addition of the cnpg.io/podRole label with a value of 'pooler' to every pooler deployment, differentiating them from instance pods (#3396). Fixes: Reconciliation of metadata, annotations, and labels of PodDisruptionBudget resources (#3312 and #3434). Reconciliation of the metadata of the managed credential secrets (#3316). Resolution of a bug in the backup snapshot code where an error reading the body would be handled as an overall error, leaving the backup process indefinitely stuck (#3321). Implicit setting of online backup with the cnpg backup plugin command when either immediate-checkpoint or wait-for-archive options are requested (#3449). Disabling of wal_sender_timeout when joining through pg_basebackup (#3586) Reloading of secrets used by external clusters (#3565) Connection pooler: Ensuring the controller watches all secrets owned by a Pooler resource (#3428). Reconciliation of RoleBinding for Pooler resources (#3391). Reconciliation of imagePullSecret for Pooler resources (#3389). Reconciliation of the service of a Pooler and addition of the required labels (#3349). Extension of Pooler labels to the deployment as well, not just the pods (#3350). Changes: Default operand image set to PostgreSQL 16.1 (#3270). The ALTER SYSTEM command is now disabled by default (#3545).","title":"Enhancements:"},{"location":"release_notes/old/v1.23/","text":"Release notes for CloudNativePG 1.23 History of user-visible changes in the 1.23 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.23.6 Release Date: December 23, 2024 Warning This is the final release in the 1.23.x series. Users are strongly encouraged to upgrade to a newer minor version, as 1.23 is no longer supported. Enhancements Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Honor the User-Agent header in HTTP requests with the API server. (#6153) Bug Fixes Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998) Version 1.23.5 Release date: Oct 16, 2024 Enhancements: Remove the use of pg_database_size from the status probe, as it caused high resource utilization by scanning the entire PGDATA directory to compute database sizes. The kubectl status plugin will now rely on du to provide detailed size information retrieval (#5689). Add the ability to configure the full_page_writes parameter in PostgreSQL. This setting defaults to on , in line with PostgreSQL's recommendations (#5516). Plugin: Add the logs pretty command in the cnpg plugin to read a log stream from standard input and output a human-readable format, with options to filter log entries (#5770) Enhance the status command by allowing multiple -v options to increase verbosity for more detailed output (#5765). Add support for specifying a custom Docker image using the --image flag in the pgadmin4 plugin command, giving users control over the Docker image used for pgAdmin4 deployments (#5515). Fixes: Resolve an issue with concurrent status updates when demoting a primary to a designated primary, ensuring smoother transitions during cluster role changes (#5755). Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down to two instances, enabling easier maintenance on the node hosting the replica (#5487). Prioritize full rollout over inplace restarts (#5407). Fix an issue that could lead to double failover in cases of lost connectivity (#5788). Correctly set the TMPDIR and PSQL_HISTORY environment variables for pods and jobs, improving temporary file and history management (#5503). Plugin: Resolve a race condition in the logs cluster command (#5775). Display the potential sync status in the status plugin (#5533). Fix the issue where pods deployed by the pgadmin4 command didn\u2019t have a writable home directory (#5800). Supported versions PostgreSQL 17 (PostgreSQL 17.0 is the default image) Version 1.23.4 Release date: Aug 22, 2024 Enhancements: cnpg plugin updates: Enhance the install generate command by adding a --control-plane option, allowing deployment of the operator on control-plane nodes by setting node affinity and tolerations (#5271). Enhance the destroy command to delete also any job related to the target instance (#5298). Fixes: Synchronous replication self-healing checks now exclude terminated pods, focusing only on active and functional pods (#5210). The instance manager will now terminate all existing operator-related replication connections following a role change in a replica cluster (#5209). Allow setting smartShutdownTimeout to zero, enabling immediate fast shutdown and bypassing the smart shutdown process when required (#5347). Version 1.23.3 Release date: Jul 29, 2024 Enhancements: Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044). Fixes: Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Ensure that the Pooler service template can override the default service (#4846). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Fix cluster role permissions for ClusterImageCatalogs (#5034). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915). Version 1.23.2 Release date: Jun 12, 2024 Enhancements: Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602) Fixes: Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530) Changes Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753) Version 1.23.1 Release date: Apr 29, 2024 Fixes: Corrects the reconciliation of PodMonitor resources, which was failing due to a regression (#4286) Version 1.23.0 Release date: Apr 24, 2024 Important changes to Community Supported Versions We've updated our support policy to streamline our focus on one supported minor release at a time, rather than two. Additionally, we've extended the supplementary support period for the previous minor release to 3 months. Features: PostgreSQL Image Catalogs: Introduced ClusterImageCatalog and ImageCatalog CRDs to manage operand container images based on PostgreSQL major version. This is facilitated through the Cluster 's .spec.imageCatalogRef stanza . This feature provides an alternative to the imageName option and will eventually replace it as the default method to define operand container images. User-Defined Replication Slots: Enhanced the synchronization of physical replication slots to cover user-defined replication slots on the primary, via the newly introduced stanza replicationSlots.synchronizeReplicas . Configuration of Pod Disruption Budgets (PDB) : Introduced the .spec.enablePDB field to disable PDBs on the primary instance, allowing proper eviction of the pod during maintenance operations. This is particularly useful for single-instance deployments. This feature is intended to replace the node maintenance window feature. Enhancements: Users now have the capability to transition an existing cluster into replica mode, simplifying cross-datacenter switchover operations (#4261) Users can now customize the connection pooler service, including its type, labels, and annotations (#3384) Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Command output of the plugin\u2019s status command to show the status of PDBs (#4319) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101) Fixes: Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346) Changes: Operator images are now based on gcr.io/distroless/static-debian12:nonroot (#4201) The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154)","title":"Release notes for CloudNativePG 1.23"},{"location":"release_notes/old/v1.23/#release-notes-for-cloudnativepg-123","text":"History of user-visible changes in the 1.23 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.23"},{"location":"release_notes/old/v1.23/#version-1236","text":"Release Date: December 23, 2024 Warning This is the final release in the 1.23.x series. Users are strongly encouraged to upgrade to a newer minor version, as 1.23 is no longer supported.","title":"Version 1.23.6"},{"location":"release_notes/old/v1.23/#enhancements","text":"Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Honor the User-Agent header in HTTP requests with the API server. (#6153)","title":"Enhancements"},{"location":"release_notes/old/v1.23/#bug-fixes","text":"Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998)","title":"Bug Fixes"},{"location":"release_notes/old/v1.23/#version-1235","text":"Release date: Oct 16, 2024","title":"Version 1.23.5"},{"location":"release_notes/old/v1.23/#enhancements_1","text":"Remove the use of pg_database_size from the status probe, as it caused high resource utilization by scanning the entire PGDATA directory to compute database sizes. The kubectl status plugin will now rely on du to provide detailed size information retrieval (#5689). Add the ability to configure the full_page_writes parameter in PostgreSQL. This setting defaults to on , in line with PostgreSQL's recommendations (#5516). Plugin: Add the logs pretty command in the cnpg plugin to read a log stream from standard input and output a human-readable format, with options to filter log entries (#5770) Enhance the status command by allowing multiple -v options to increase verbosity for more detailed output (#5765). Add support for specifying a custom Docker image using the --image flag in the pgadmin4 plugin command, giving users control over the Docker image used for pgAdmin4 deployments (#5515).","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes","text":"Resolve an issue with concurrent status updates when demoting a primary to a designated primary, ensuring smoother transitions during cluster role changes (#5755). Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down to two instances, enabling easier maintenance on the node hosting the replica (#5487). Prioritize full rollout over inplace restarts (#5407). Fix an issue that could lead to double failover in cases of lost connectivity (#5788). Correctly set the TMPDIR and PSQL_HISTORY environment variables for pods and jobs, improving temporary file and history management (#5503). Plugin: Resolve a race condition in the logs cluster command (#5775). Display the potential sync status in the status plugin (#5533). Fix the issue where pods deployed by the pgadmin4 command didn\u2019t have a writable home directory (#5800).","title":"Fixes:"},{"location":"release_notes/old/v1.23/#supported-versions","text":"PostgreSQL 17 (PostgreSQL 17.0 is the default image)","title":"Supported versions"},{"location":"release_notes/old/v1.23/#version-1234","text":"Release date: Aug 22, 2024","title":"Version 1.23.4"},{"location":"release_notes/old/v1.23/#enhancements_2","text":"cnpg plugin updates: Enhance the install generate command by adding a --control-plane option, allowing deployment of the operator on control-plane nodes by setting node affinity and tolerations (#5271). Enhance the destroy command to delete also any job related to the target instance (#5298).","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes_1","text":"Synchronous replication self-healing checks now exclude terminated pods, focusing only on active and functional pods (#5210). The instance manager will now terminate all existing operator-related replication connections following a role change in a replica cluster (#5209). Allow setting smartShutdownTimeout to zero, enabling immediate fast shutdown and bypassing the smart shutdown process when required (#5347).","title":"Fixes:"},{"location":"release_notes/old/v1.23/#version-1233","text":"Release date: Jul 29, 2024","title":"Version 1.23.3"},{"location":"release_notes/old/v1.23/#enhancements_3","text":"Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044).","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes_2","text":"Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Ensure that the Pooler service template can override the default service (#4846). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Fix cluster role permissions for ClusterImageCatalogs (#5034). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915).","title":"Fixes:"},{"location":"release_notes/old/v1.23/#version-1232","text":"Release date: Jun 12, 2024","title":"Version 1.23.2"},{"location":"release_notes/old/v1.23/#enhancements_4","text":"Enabled configuration of standby-sensitive parameters during recovery using a physical backup (#4564) Enabled the configuration of the liveness probe timeout via the .spec.livenessProbeTimeout option (#4719) cnpg plugin for kubectl : Enhanced support for ANSI colors in the plugin by adding the --color option, which accepts always , never , and auto (default) as values (#4775) The plugin is now available on Homebrew for macOS users (#4602)","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes_3","text":"Prevented fenced instances from entering an unnecessary loop and consuming all available CPU (#4625) Resolved an issue where the instance manager on the primary would indefinitely wait for the instance to start after encountering a failure following a stop operation (#4434) Fixed an issue where the interaction between hot_standby_feedback and managed cluster-level replication slots was preventing the autovacuum from operating correctly; this issue was causing disk space to remain occupied by dead tuples (#4811) Fixed a panic in the backup controller that occurred when pod container statuses were missing (#4765) Prevented unnecessary shutdown of the instance manager (#4670) Prevented unnecessary reloads of PostgreSQL configuration when unchanged (#4531) Prevented unnecessary reloads of the ident map by ensuring a consistent and unique method of writing its content (#4648) Avoided conflicts during phase registration by patching the status of the resource instead of updating it (#4637) Implemented a timeout when restarting PostgreSQL and lifting fencing (#4504) Ensured that a replica cluster is restarted after promotion to properly set the archive mode (#4399) Removed an unneeded concurrent keep-alive routine that was causing random failures in volume snapshot backups (#4768) Ensured correct parsing of the additional rows field returned when the pgaudit.log_rows option was enabled, preventing audit logs from being incorrectly routed to the normal log stream (#4394) cnpg plugin for kubectl : Resolved an issue with listing PDBs using the cnpg status command (#4530)","title":"Fixes:"},{"location":"release_notes/old/v1.23/#changes","text":"Default operand image set to PostgreSQL 16.3 (#4584) Removed all RBAC requirements on namespace objects (#4753)","title":"Changes"},{"location":"release_notes/old/v1.23/#version-1231","text":"Release date: Apr 29, 2024","title":"Version 1.23.1"},{"location":"release_notes/old/v1.23/#fixes_4","text":"Corrects the reconciliation of PodMonitor resources, which was failing due to a regression (#4286)","title":"Fixes:"},{"location":"release_notes/old/v1.23/#version-1230","text":"Release date: Apr 24, 2024 Important changes to Community Supported Versions We've updated our support policy to streamline our focus on one supported minor release at a time, rather than two. Additionally, we've extended the supplementary support period for the previous minor release to 3 months.","title":"Version 1.23.0"},{"location":"release_notes/old/v1.23/#features","text":"PostgreSQL Image Catalogs: Introduced ClusterImageCatalog and ImageCatalog CRDs to manage operand container images based on PostgreSQL major version. This is facilitated through the Cluster 's .spec.imageCatalogRef stanza . This feature provides an alternative to the imageName option and will eventually replace it as the default method to define operand container images. User-Defined Replication Slots: Enhanced the synchronization of physical replication slots to cover user-defined replication slots on the primary, via the newly introduced stanza replicationSlots.synchronizeReplicas . Configuration of Pod Disruption Budgets (PDB) : Introduced the .spec.enablePDB field to disable PDBs on the primary instance, allowing proper eviction of the pod during maintenance operations. This is particularly useful for single-instance deployments. This feature is intended to replace the node maintenance window feature.","title":"Features:"},{"location":"release_notes/old/v1.23/#enhancements_5","text":"Users now have the capability to transition an existing cluster into replica mode, simplifying cross-datacenter switchover operations (#4261) Users can now customize the connection pooler service, including its type, labels, and annotations (#3384) Users can now configure the wal_log_hints PostgreSQL parameter (#4218) (#4218) Fully Qualified Domain Names (FQDN) in URIs for automatically generated secrets (#4095) Cleanup of instance Pods not owned by the Cluster during Cluster restore (#4141) Command output of the plugin\u2019s status command to show the status of PDBs (#4319) Error detection when invoking barman-cloud-wal-restore in recovery bootstrap (#4101)","title":"Enhancements:"},{"location":"release_notes/old/v1.23/#fixes_5","text":"Ensured that before a switchover, the elected replica is in streaming replication (#4288) Correctly handle parsing errors of instances' LSN when sorting them (#4283) Recreate the primary Pod if there are no healthy standbys available to promote (#4132) Cleanup PGDATA in case of failure of the restore job (#4151) Reload certificates on configuration update (#3705) cnpg plugin for kubectl : Improve the arguments handling of destroy , fencing , and promote plugin commands (#4280) Correctly handle the percentage of the backup progress in cnpg status (#4131) Gracefully handle databases with no sequences in sync-sequences command (#4346)","title":"Fixes:"},{"location":"release_notes/old/v1.23/#changes_1","text":"Operator images are now based on gcr.io/distroless/static-debian12:nonroot (#4201) The Grafana dashboard now resides at https://github.com/cloudnative-pg/grafana-dashboards (#4154)","title":"Changes:"},{"location":"release_notes/old/v1.24/","text":"Release notes for CloudNativePG 1.24 History of user-visible changes in the 1.24 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub. Version 1.24.4 Release date: May 23, 2025 Warning This is the final release in the 1.24.x series. Users are strongly encouraged to upgrade to a newer minor version, as 1.24 is no longer supported. Important Changes CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203) Enhancements Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151) Security Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250) Fixes Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). cnpg plugin: Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122) Changes Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556) Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399). Version 1.24.3 Release Date: February 28, 2025 Enhancements Introduced a startup probe for the operator to enhance reliability and prevent premature liveness probe failures during initialization. (#7008) Added support for using the -r service with the Pooler. (#6868) Introduced an optional --ttl flag for the pgbench plugin, enabling automatic deletion of completed jobs after a user-defined duration. (#6701) Marked known error messages from the Azure CSI Driver for volume snapshots as retryable, improving resilience. (#6906) Updated the default PostgreSQL version to 17.4 for new cluster definitions. (#6960) Security The operator image build process has been enhanced to strengthen security and transparency. Images are now signed with cosign , and OCI attestations are generated, incorporating the Software Bill of Materials (SBOM) and provenance data. Additionally, OCI annotations have been added to improve traceability and ensure the integrity of the images. Bug Fixes Fixed inconsistent behavior in default probe knob values when .spec.probes is defined, ensuring users can override all settings, including failureThreshold . If unspecified in the startup probe, failureThreshold is now correctly derived from .spec.startupDelay / periodSeconds (default: 10 , now overridable). The same logic applies to liveness probes via .spec.livenessProbeTimeout . (#6656) Managed service ports now take precedence over default operator-defined ports. (#6474) Fixed an issue where WAL metrics were unavailable after an instance restart until a configuration change was applied. (#6816) Fixed an issue in monolithic database import where role import was skipped if no roles were specified. (#6646) Added support for new metrics introduced in PgBouncer 1.24. (#6630) Improved handling of replication-sensitive parameter reductions by ensuring timely reconciliation after primary server restarts. (#6440) Introduced a new isWALArchiver flag in the CNPG-I plugin configuration, allowing users to designate a plugin as a WAL archiver. This enables seamless migration from in-tree Barman Cloud support to the plugin while maintaining WAL archive consistency. (#6593) Ensured override.conf is consistently included in postgresql.conf during replica cluster bootstrapping, preventing replication failures due to missing configuration settings. (#6808) Ensured override.conf is correctly initialized before invoking pg_rewind to prevent failures during primary role changes. (#6670) Enhanced webhook responses to return both warnings and errors when applicable, improving diagnostic accuracy. (#6579) Ensured the operator version is correctly reconciled. (#6496) Improved PostgreSQL version detection by using a more precise check of the data directory. (#6659) Volume Snapshot Backups: Fixed an issue where unused backup connections were not properly cleaned up. (#6882) Ensured the instance manager closes stale PostgreSQL connections left by failed volume snapshot backups. (#6879) Prevented the operator from starting a new volume snapshot backup while another is already in progress. (#6890) cnpg plugin: Restored functionality of the promote plugin command. (#6476) Enhanced kubectl cnpg report --logs <cluster> to collect logs from all containers, including sidecars. (#6636) Ensured pgbench jobs can run when a Cluster uses an ImageCatalog . (#6868) Technical Enhancements Added support for Kubernetes client-gen , enabling automated generation of Go clients for all CloudNativePG CRDs. (#6695) Version 1.24.2 Release Date: December 23, 2024 Enhancements Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Honor the User-Agent header in HTTP requests with the API server. (#6153) Bug Fixes Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998) Version 1.24.1 Release date: Oct 16, 2024 Enhancements: Remove the use of pg_database_size from the status probe, as it caused high resource utilization by scanning the entire PGDATA directory to compute database sizes. The kubectl status plugin will now rely on du to provide detailed size information retrieval (#5689). Add the ability to configure the full_page_writes parameter in PostgreSQL. This setting defaults to on , in line with PostgreSQL's recommendations (#5516). Plugin: Add the logs pretty command in the cnpg plugin to read a log stream from standard input and output a human-readable format, with options to filter log entries (#5770) Enhance the status command by allowing multiple -v options to increase verbosity for more detailed output (#5765). Add support for specifying a custom Docker image using the --image flag in the pgadmin4 plugin command, giving users control over the Docker image used for pgAdmin4 deployments (#5515). Fixes: Resolve an issue with concurrent status updates when demoting a primary to a designated primary, ensuring smoother transitions during cluster role changes (#5755). Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down to two instances, enabling easier maintenance on the node hosting the replica (#5487). Prioritize full rollout over inplace restarts (#5407). When using .spec.postgresql.synchronous , ensure that the synchronous_standby_names parameter is correctly set, even when no replicas are reachable (#5831). Fix an issue that could lead to double failover in cases of lost connectivity (#5788). Correctly set the TMPDIR and PSQL_HISTORY environment variables for pods and jobs, improving temporary file and history management (#5503). Plugin: Resolve a race condition in the logs cluster command (#5775). Display the potential sync status in the status plugin (#5533). Fix the issue where pods deployed by the pgadmin4 command didn\u2019t have a writable home directory (#5800). Supported versions PostgreSQL 17 (PostgreSQL 17.0 is the default image) Version 1.24.0 Release date: Aug 22, 2024 Important changes: Deprecate the role label in the selectors of Service and PodDisruptionBudget resources in favor of cnpg.io/instanceRole (#4897). Fix the default PodAntiAffinity configuration for PostgreSQL Pods, allowing a PostgreSQL and a Pooler Instance to coexist on the same node when the anti-affinity configuration is set to required (#5156). Warning The PodAntiAffinity change will trigger a rollout of all the instances when the operator is upgraded, even when online upgrades are enabled. Features: Distributed PostgreSQL Topologies : Enhance the replica cluster feature to create distributed database topologies for PostgreSQL that span multiple Kubernetes clusters, enabling hybrid and multi-cloud deployments. This feature supports: Declarative Primary Control : Easily specify which PostgreSQL cluster acts as the primary in a distributed setup (#4388). Seamless Switchover : Effortlessly demote the current primary and promote a selected replica cluster, typically in a different region, without needing to rebuild the former primary. This ensures high availability and resilience in diverse environments (#4411). Managed Services : Introduce managed services via the managed.services stanza (#4769 and #4952), allowing you to: Disable the read-only and read services via configuration. Leverage the service template capability to create custom service resources, including load balancers, to access PostgreSQL outside Kubernetes (particularly useful for DBaaS purposes). Enhanced API for Synchronous Replication : Introducing an improved API for explicit configuration of synchronous replication, supporting both quorum-based and priority list strategies. This update allows full customization of the synchronous_standby_names option, providing greater control and flexibility (#5148). WAL Disk Space Exhaustion : Safely stop the cluster when PostgreSQL runs out of disk space to store WAL files, making recovery easier by increasing the size of the related volume (#4404). Enhancements: Add support for delayed replicas by introducing the .spec.replica.minApplyDelay option, leveraging PostgreSQL's recovery_min_apply_delay capability (#5181). Introduce postInitSQLRefs and postInitTemplateSQLRefs to allow users to define postInit and postInitTemplate instructions as one or more config maps or secrets (#5074). Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Allow overriding the query metric name and the names of the columns using a name key/value pair, which can replace the name automatically inherited from the parent key (#4779). Enhanced control over exported metrics by making them subject to the value returned by a custom query, which is run within the same transaction and defined in the predicate_query field (#4503). Allow additional arguments to be passed to barman-cloud-wal-archive and barman-cloud-wal-restore (#5099). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). The readiness probe now fails for streaming replicas that were never connected to the primary instance, allowing incoherent replicas to be discovered promptly (#5206). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044). cnpg plugin updates: Enhance the install generate command by adding a --control-plane option, allowing deployment of the operator on control-plane nodes by setting node affinity and tolerations (#5271). Enhance the destroy command to delete also any job related to the target instance (#5298). Enhanced the status command to display demotionToken and promotionToken when available, providing more detailed operational insights with distributed topologies (#5149). Added support for customizing the remote database name in the publication and subscription subcommands. This enhancement offers greater flexibility for synchronizing data from an external cluster with multiple databases (#5113). Security: Add TLS communication between the operator and instance manager (#4442). Add optional TLS communication for the instance metrics exporter (#4927). Fixes: Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Ensure that the Pooler service template can override the default service (#4846). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Fix cluster role permissions for ClusterImageCatalogs (#5034). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). Synchronous replication self-healing checks now exclude terminated pods, focusing only on active and functional pods (#5210). The instance manager will now terminate all existing operator-related replication connections following a role change in a replica cluster (#5209). Allow setting smartShutdownTimeout to zero, enabling immediate fast shutdown and bypassing the smart shutdown process when required (#5347). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915). Supported versions Kubernetes 1.31, 1.30, 1.29, and 1.28 PostgreSQL 16, 15, 14, 13, and 12 PostgreSQL 16.4 is the default image PostgreSQL 12 support ends on November 12, 2024","title":"Release notes for CloudNativePG 1.24"},{"location":"release_notes/old/v1.24/#release-notes-for-cloudnativepg-124","text":"History of user-visible changes in the 1.24 minor release of CloudNativePG. For a complete list of changes, please refer to the commits on the release branch in GitHub.","title":"Release notes for CloudNativePG 1.24"},{"location":"release_notes/old/v1.24/#version-1244","text":"Release date: May 23, 2025 Warning This is the final release in the 1.24.x series. Users are strongly encouraged to upgrade to a newer minor version, as 1.24 is no longer supported.","title":"Version 1.24.4"},{"location":"release_notes/old/v1.24/#important-changes","text":"CloudNativePG is now officially a CNCF project : CloudNativePG has been accepted into the Cloud Native Computing Foundation (CNCF), marking a significant milestone in its evolution. As part of this transition, the project is now governed under CloudNativePG, a Series of LF Projects, LLC , ensuring long-term sustainability and community-driven innovation. (#7203)","title":"Important Changes"},{"location":"release_notes/old/v1.24/#enhancements","text":"Added the KUBERNETES_CLUSTER_DOMAIN configuration option to the operator, allowing users to specify the domain suffix for fully qualified domain names (FQDNs) generated within the Kubernetes cluster. If not set, it defaults to cluster.local . (#6989) Implemented the cnpg.io/validation annotation, enabling users to disable the validation webhook on CloudNativePG-managed resources. Use with caution, as this allows unrestricted changes. (#7196) Added support for collecting pg_stat_wal metrics in PostgreSQL 18. (#7005) Added support for LZ4, XZ, and Zstandard compression methods when archiving WAL files via Barman Cloud ( deprecated ). (#7151)","title":"Enhancements"},{"location":"release_notes/old/v1.24/#security","text":"Set imagePullPolicy to Always for the operator deployment to ensure that images are always pulled from the registry, reducing the risk of using outdated or potentially unsafe local images. (#7250)","title":"Security"},{"location":"release_notes/old/v1.24/#fixes","text":"Fixed native replication slot synchronization and logical replication failover for PostgreSQL 17 by appending the dbname parameter to primary_conninfo in replica configurations (#7298). Improved backup efficiency by introducing a fail-fast mechanism in WAL archiving, allowing quicker detection of unexpected primary demotion and avoiding unnecessary retries (#7483). Fixed an off-by-one error in parallel WAL archiving that could cause one extra worker process to be spawned beyond the requested number (#7389). Resolved a race condition that caused the operator to perform two switchovers when updating the PostgreSQL configuration. (#6991) Corrected the PodMonitor configuration by adjusting the matchLabels scope for the targeted pooler and cluster pods. Previously, the matchLabels were too broad, inadvertently inheriting labels from the cluster and leading to data collection from unintended targets. (#7063) Added a webhook warning for clusters with a missing unit (e.g., MB, GB) in the shared_buffers configuration. This will become an error in future releases. Users should update their configurations to include explicit units (e.g., 512MB instead of 512 ). (#7160) CloudNativePG Interface (CNPG-I): Implemented automatic reloading of TLS certificates for plugins when they change. (#7029) Ensured the operator properly closes the plugin connection when performing a backup using the plugin. (#7095, #7096) Improved performance and resilience of CNPG-I by removing timeouts for local plugin operations, avoiding failures during longer backup or WAL archiving executions (#7496). cnpg plugin: Ensured that the primary Pod is recreated during an imperative restart when primaryUpdateMethod is set to restart , aligning its definition with the replicas. (#7122)","title":"Fixes"},{"location":"release_notes/old/v1.24/#changes","text":"Updated the default PostgreSQL version to 17.5 for new cluster definitions. (#7556) Updated the default PgBouncer version to 1.24.1 for new Pooler deployments (#7399).","title":"Changes"},{"location":"release_notes/old/v1.24/#version-1243","text":"Release Date: February 28, 2025","title":"Version 1.24.3"},{"location":"release_notes/old/v1.24/#enhancements_1","text":"Introduced a startup probe for the operator to enhance reliability and prevent premature liveness probe failures during initialization. (#7008) Added support for using the -r service with the Pooler. (#6868) Introduced an optional --ttl flag for the pgbench plugin, enabling automatic deletion of completed jobs after a user-defined duration. (#6701) Marked known error messages from the Azure CSI Driver for volume snapshots as retryable, improving resilience. (#6906) Updated the default PostgreSQL version to 17.4 for new cluster definitions. (#6960)","title":"Enhancements"},{"location":"release_notes/old/v1.24/#security_1","text":"The operator image build process has been enhanced to strengthen security and transparency. Images are now signed with cosign , and OCI attestations are generated, incorporating the Software Bill of Materials (SBOM) and provenance data. Additionally, OCI annotations have been added to improve traceability and ensure the integrity of the images.","title":"Security"},{"location":"release_notes/old/v1.24/#bug-fixes","text":"Fixed inconsistent behavior in default probe knob values when .spec.probes is defined, ensuring users can override all settings, including failureThreshold . If unspecified in the startup probe, failureThreshold is now correctly derived from .spec.startupDelay / periodSeconds (default: 10 , now overridable). The same logic applies to liveness probes via .spec.livenessProbeTimeout . (#6656) Managed service ports now take precedence over default operator-defined ports. (#6474) Fixed an issue where WAL metrics were unavailable after an instance restart until a configuration change was applied. (#6816) Fixed an issue in monolithic database import where role import was skipped if no roles were specified. (#6646) Added support for new metrics introduced in PgBouncer 1.24. (#6630) Improved handling of replication-sensitive parameter reductions by ensuring timely reconciliation after primary server restarts. (#6440) Introduced a new isWALArchiver flag in the CNPG-I plugin configuration, allowing users to designate a plugin as a WAL archiver. This enables seamless migration from in-tree Barman Cloud support to the plugin while maintaining WAL archive consistency. (#6593) Ensured override.conf is consistently included in postgresql.conf during replica cluster bootstrapping, preventing replication failures due to missing configuration settings. (#6808) Ensured override.conf is correctly initialized before invoking pg_rewind to prevent failures during primary role changes. (#6670) Enhanced webhook responses to return both warnings and errors when applicable, improving diagnostic accuracy. (#6579) Ensured the operator version is correctly reconciled. (#6496) Improved PostgreSQL version detection by using a more precise check of the data directory. (#6659) Volume Snapshot Backups: Fixed an issue where unused backup connections were not properly cleaned up. (#6882) Ensured the instance manager closes stale PostgreSQL connections left by failed volume snapshot backups. (#6879) Prevented the operator from starting a new volume snapshot backup while another is already in progress. (#6890) cnpg plugin: Restored functionality of the promote plugin command. (#6476) Enhanced kubectl cnpg report --logs <cluster> to collect logs from all containers, including sidecars. (#6636) Ensured pgbench jobs can run when a Cluster uses an ImageCatalog . (#6868)","title":"Bug Fixes"},{"location":"release_notes/old/v1.24/#technical-enhancements","text":"Added support for Kubernetes client-gen , enabling automated generation of Go clients for all CloudNativePG CRDs. (#6695)","title":"Technical Enhancements"},{"location":"release_notes/old/v1.24/#version-1242","text":"Release Date: December 23, 2024","title":"Version 1.24.2"},{"location":"release_notes/old/v1.24/#enhancements_2","text":"Enable customization of startup, liveness, and readiness probes through the .spec.probes stanza. (#6266) Add the cnpg.io/userType label to secrets generated for predefined users, specifically superuser and app . (#4392) Improved validation for the spec.schedule field in ScheduledBackups, raising warnings for potential misconfigurations. (#5396) cnpg plugin: Honor the User-Agent header in HTTP requests with the API server. (#6153)","title":"Enhancements"},{"location":"release_notes/old/v1.24/#bug-fixes_1","text":"Ensure the former primary flushes its WAL file queue to the archive before re-synchronizing as a replica, reducing recovery times and enhancing data consistency during failovers. (#6141) Clean the WAL volume along with the PGDATA volume during bootstrap. (#6265) Update the operator to set the cluster phase to Unrecoverable when all previously generated PersistentVolumeClaims are missing. (#6170) Fix the parsing of the synchronous_standby_names GUC when .spec.postgresql.synchronous.method is set to first . (#5955) Resolved a potential race condition when patching certain conditions in CRD statuses, improving reliability in concurrent updates. (#6328) Correct role changes to apply at the transaction level instead of the database context. (#6064) Remove the primary_slot_name definition from the override.conf file on the primary to ensure it is always empty. (#6219) Configure libpq environment variables, including PGHOST , in PgBouncer pods to enable seamless access to the pgbouncer virtual database using psql from within the container. (#6247) Remove unnecessary updates to the Cluster status when verifying changes in the image catalog. (#6277) Prevent panic during recovery from an external server without proper backup configuration. (#6300) Resolved a key collision issue in structured logs, where the name field was inconsistently used to log two distinct values. (#6324) Ensure proper quoting of the inRoles field in SQL statements to prevent syntax errors in generated SQL during role management. (#6346) cnpg plugin: Ensure the kubectl context is properly passed in the psql command. (#6257) Avoid displaying physical backups block when empty with status command. (#5998)","title":"Bug Fixes"},{"location":"release_notes/old/v1.24/#version-1241","text":"Release date: Oct 16, 2024","title":"Version 1.24.1"},{"location":"release_notes/old/v1.24/#enhancements_3","text":"Remove the use of pg_database_size from the status probe, as it caused high resource utilization by scanning the entire PGDATA directory to compute database sizes. The kubectl status plugin will now rely on du to provide detailed size information retrieval (#5689). Add the ability to configure the full_page_writes parameter in PostgreSQL. This setting defaults to on , in line with PostgreSQL's recommendations (#5516). Plugin: Add the logs pretty command in the cnpg plugin to read a log stream from standard input and output a human-readable format, with options to filter log entries (#5770) Enhance the status command by allowing multiple -v options to increase verbosity for more detailed output (#5765). Add support for specifying a custom Docker image using the --image flag in the pgadmin4 plugin command, giving users control over the Docker image used for pgAdmin4 deployments (#5515).","title":"Enhancements:"},{"location":"release_notes/old/v1.24/#fixes_1","text":"Resolve an issue with concurrent status updates when demoting a primary to a designated primary, ensuring smoother transitions during cluster role changes (#5755). Ensure that replica PodDisruptionBudgets (PDB) are removed when scaling down to two instances, enabling easier maintenance on the node hosting the replica (#5487). Prioritize full rollout over inplace restarts (#5407). When using .spec.postgresql.synchronous , ensure that the synchronous_standby_names parameter is correctly set, even when no replicas are reachable (#5831). Fix an issue that could lead to double failover in cases of lost connectivity (#5788). Correctly set the TMPDIR and PSQL_HISTORY environment variables for pods and jobs, improving temporary file and history management (#5503). Plugin: Resolve a race condition in the logs cluster command (#5775). Display the potential sync status in the status plugin (#5533). Fix the issue where pods deployed by the pgadmin4 command didn\u2019t have a writable home directory (#5800).","title":"Fixes:"},{"location":"release_notes/old/v1.24/#supported-versions","text":"PostgreSQL 17 (PostgreSQL 17.0 is the default image)","title":"Supported versions"},{"location":"release_notes/old/v1.24/#version-1240","text":"Release date: Aug 22, 2024","title":"Version 1.24.0"},{"location":"release_notes/old/v1.24/#important-changes_1","text":"Deprecate the role label in the selectors of Service and PodDisruptionBudget resources in favor of cnpg.io/instanceRole (#4897). Fix the default PodAntiAffinity configuration for PostgreSQL Pods, allowing a PostgreSQL and a Pooler Instance to coexist on the same node when the anti-affinity configuration is set to required (#5156). Warning The PodAntiAffinity change will trigger a rollout of all the instances when the operator is upgraded, even when online upgrades are enabled.","title":"Important changes:"},{"location":"release_notes/old/v1.24/#features","text":"Distributed PostgreSQL Topologies : Enhance the replica cluster feature to create distributed database topologies for PostgreSQL that span multiple Kubernetes clusters, enabling hybrid and multi-cloud deployments. This feature supports: Declarative Primary Control : Easily specify which PostgreSQL cluster acts as the primary in a distributed setup (#4388). Seamless Switchover : Effortlessly demote the current primary and promote a selected replica cluster, typically in a different region, without needing to rebuild the former primary. This ensures high availability and resilience in diverse environments (#4411). Managed Services : Introduce managed services via the managed.services stanza (#4769 and #4952), allowing you to: Disable the read-only and read services via configuration. Leverage the service template capability to create custom service resources, including load balancers, to access PostgreSQL outside Kubernetes (particularly useful for DBaaS purposes). Enhanced API for Synchronous Replication : Introducing an improved API for explicit configuration of synchronous replication, supporting both quorum-based and priority list strategies. This update allows full customization of the synchronous_standby_names option, providing greater control and flexibility (#5148). WAL Disk Space Exhaustion : Safely stop the cluster when PostgreSQL runs out of disk space to store WAL files, making recovery easier by increasing the size of the related volume (#4404).","title":"Features:"},{"location":"release_notes/old/v1.24/#enhancements_4","text":"Add support for delayed replicas by introducing the .spec.replica.minApplyDelay option, leveraging PostgreSQL's recovery_min_apply_delay capability (#5181). Introduce postInitSQLRefs and postInitTemplateSQLRefs to allow users to define postInit and postInitTemplate instructions as one or more config maps or secrets (#5074). Add transparent support for PostgreSQL 17's allow_alter_system parameter, enabling or disabling the ALTER SYSTEM command through the .spec.postgresql.enableAlterSystem option (#4921). Allow overriding the query metric name and the names of the columns using a name key/value pair, which can replace the name automatically inherited from the parent key (#4779). Enhanced control over exported metrics by making them subject to the value returned by a custom query, which is run within the same transaction and defined in the predicate_query field (#4503). Allow additional arguments to be passed to barman-cloud-wal-archive and barman-cloud-wal-restore (#5099). Introduce the reconcilePodSpec annotation on the Cluster and Pooler resources to control the restart of pods following a change in the Pod specification (#5069). The readiness probe now fails for streaming replicas that were never connected to the primary instance, allowing incoherent replicas to be discovered promptly (#5206). Support the new metrics introduced in PgBouncer 1.23 in the Pooler metrics collector (#5044). cnpg plugin updates: Enhance the install generate command by adding a --control-plane option, allowing deployment of the operator on control-plane nodes by setting node affinity and tolerations (#5271). Enhance the destroy command to delete also any job related to the target instance (#5298). Enhanced the status command to display demotionToken and promotionToken when available, providing more detailed operational insights with distributed topologies (#5149). Added support for customizing the remote database name in the publication and subscription subcommands. This enhancement offers greater flexibility for synchronizing data from an external cluster with multiple databases (#5113).","title":"Enhancements:"},{"location":"release_notes/old/v1.24/#security_2","text":"Add TLS communication between the operator and instance manager (#4442). Add optional TLS communication for the instance metrics exporter (#4927).","title":"Security:"},{"location":"release_notes/old/v1.24/#fixes_2","text":"Enhance the mechanism for detecting Pods that have been terminated but not deleted during an eviction process, and extend the cleanup process during maintenance windows to include unschedulable Pods when the reusePVC flag is set to false (#2056). Disable pg_rewind execution for newly created replicas that employ VolumeSnapshot during bootstrapping to avoid introducing a new shutdown checkpoint entry in the WAL files. This ensures that replicas can reconnect to the primary without issues, which would otherwise be hindered by the additional checkpoint entry (#5081). Gracefully handle failures during the initialization of a new instance. Any remaining data from the failed initialization is now either removed or, if it's a valid PostgreSQL data directory, moved to a backup location to avoid possible data loss (#5112). Enhance the robustness of the immediate backups reconciler by implementing retry logic upon initial backup failure (#4982). Wait for the postmaster to shut down before starting it again (#4938). Ensure that the Pooler service template can override the default service (#4846). Exclude immutable databases from pg_database metric monitoring and alerting processes (#4980). Removed unnecessary permissions from the operator service account (#4911). Fix cluster role permissions for ClusterImageCatalogs (#5034). Ensure the operator initiates a rollout of the Pooler instance when the operator image is upgraded (#5006) Address race condition causing the readiness probe to incorrectly show \"not ready\" after a PostgreSQL restart, even when the postmaster was accessible (#4920). Prevent reconciliation of resources that aren't owned by a Pooler (#4967). Renew the certificates managed by the operator when the DNS Subject Alternative Names (SANs) are updated (#3269, #3319). Set PVC default AccessModes in the template only when unspecified (#4845). Gracefully handle unsatisfiable backup schedule (#5109). Synchronous replication self-healing checks now exclude terminated pods, focusing only on active and functional pods (#5210). The instance manager will now terminate all existing operator-related replication connections following a role change in a replica cluster (#5209). Allow setting smartShutdownTimeout to zero, enabling immediate fast shutdown and bypassing the smart shutdown process when required (#5347). cnpg plugin: Properly handle errors during the status command execution. Support TLS in the status command (#4915).","title":"Fixes:"},{"location":"release_notes/old/v1.24/#supported-versions_1","text":"Kubernetes 1.31, 1.30, 1.29, and 1.28 PostgreSQL 16, 15, 14, 13, and 12 PostgreSQL 16.4 is the default image PostgreSQL 12 support ends on November 12, 2024","title":"Supported versions"}]}
\ No newline at end of file
diff --git a/assets/documentation/preview/security/index.html b/assets/documentation/preview/security/index.html
index 515f96c63..7d7738693 100644
--- a/assets/documentation/preview/security/index.html
+++ b/assets/documentation/preview/security/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Security - CloudNativePG v1.26.0-rc3</title>
+    <title>Security - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -158,18 +158,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -278,6 +270,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -322,10 +318,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -335,7 +337,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/service_management/index.html b/assets/documentation/preview/service_management/index.html
index 05c5d0065..2d85b3024 100644
--- a/assets/documentation/preview/service_management/index.html
+++ b/assets/documentation/preview/service_management/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Service Management - CloudNativePG v1.26.0-rc3</title>
+    <title>Service Management - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -242,6 +234,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -286,10 +282,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -299,7 +301,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/sitemap.xml.gz b/assets/documentation/preview/sitemap.xml.gz
index cef50a89490900a621cfc698be3ef4e6e88c4b52..d110e53b4f6750c5e56345ee217dbbac9201b79a 100644
GIT binary patch
delta 13
Ucmb=gXP58h;9%hIn8;oM02lTHX8-^I

delta 13
Ucmb=gXP58h;9$6`JdwQu02*im&;S4c

diff --git a/assets/documentation/preview/ssl_connections/index.html b/assets/documentation/preview/ssl_connections/index.html
index f3f839730..e760d1380 100644
--- a/assets/documentation/preview/ssl_connections/index.html
+++ b/assets/documentation/preview/ssl_connections/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Client TLS/SSL connections - CloudNativePG v1.26.0-rc3</title>
+    <title>Client TLS/SSL connections - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -240,6 +232,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -284,10 +280,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -297,7 +299,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/storage/index.html b/assets/documentation/preview/storage/index.html
index a7024f6bc..f4ab1faf2 100644
--- a/assets/documentation/preview/storage/index.html
+++ b/assets/documentation/preview/storage/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Storage - CloudNativePG v1.26.0-rc3</title>
+    <title>Storage - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -262,6 +254,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -306,10 +302,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -319,7 +321,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/supported_releases/index.html b/assets/documentation/preview/supported_releases/index.html
index a3879d9e1..ffbaa402d 100644
--- a/assets/documentation/preview/supported_releases/index.html
+++ b/assets/documentation/preview/supported_releases/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Supported releases - CloudNativePG v1.26.0-rc3</title>
+    <title>Supported releases - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -232,6 +224,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -294,10 +290,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -307,7 +309,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -430,21 +432,30 @@ <h2 id="support-status-of-cloudnativepg-releases">Support status of CloudNativeP
 </thead>
 <tbody>
 <tr>
-<td>1.25.x</td>
+<td>1.27.x</td>
+<td>No (preview)</td>
+<td>~ Aug 2025</td>
+<td>~ Feb 2026</td>
+<td>1.31, 1.32, 1.33</td>
+<td>1.30, 1.29</td>
+<td>13 - 17</td>
+</tr>
+<tr>
+<td>1.26.x</td>
 <td>Yes</td>
-<td>Dec 23, 2024</td>
-<td>~ Aug/Sep 2025</td>
-<td>1.29, 1.30, 1.31, 1.32</td>
-<td>1.27, 1.28</td>
+<td>May 23, 2025</td>
+<td>~ Nov 2025</td>
+<td>1.30, 1.31, 1.32, 1.33</td>
+<td>1.29</td>
 <td>13 - 17</td>
 </tr>
 <tr>
-<td>1.24.x</td>
+<td>1.25.x</td>
 <td>Yes</td>
-<td>Aug 22, 2024</td>
-<td>Mar 23, 2025</td>
-<td>1.28, 1.29, 1.30, 1.31</td>
-<td>1.27</td>
+<td>Dec 23, 2024</td>
+<td>22 Aug 2025</td>
+<td>1.29, 1.30, 1.31, 1.32</td>
+<td>1.33</td>
 <td>13 - 17</td>
 </tr>
 <tr>
@@ -458,8 +469,7 @@ <h2 id="support-status-of-cloudnativepg-releases">Support status of CloudNativeP
 </tr>
 </tbody>
 </table>
-<!-- <sup>1</sup> _PostgreSQL 13 will be supported until November 13, 2025._ -->
-
+<p><sup>1</sup> <em>PostgreSQL 13 will be supported until November 13, 2025.</em></p>
 <p>The list of supported Kubernetes versions in the table depends on what
 the CloudNativePG maintainers think is reasonable to support and to test.</p>
 <p>Currently, the CloudNativePG community does not officially support or test any
@@ -494,25 +504,20 @@ <h2 id="upcoming-releases">Upcoming releases</h2>
 </thead>
 <tbody>
 <tr>
-<td>1.26.0</td>
-<td>~ May, 2025</td>
-<td>~ Nov, 2025</td>
-</tr>
-<tr>
-<td>1.27.0</td>
-<td>~ Aug, 2025</td>
-<td>~ Feb, 2026</td>
-</tr>
-<tr>
 <td>1.28.0</td>
 <td>~ Nov, 2025</td>
 <td>~ May, 2026</td>
 </tr>
 <tr>
 <td>1.29.0</td>
-<td>~ Feb, 2025</td>
+<td>~ Feb, 2026</td>
 <td>~ Aug, 2026</td>
 </tr>
+<tr>
+<td>1.30.0</td>
+<td>~ May, 2026</td>
+<td>~ Nov, 2026</td>
+</tr>
 </tbody>
 </table>
 <div class="admonition note">
@@ -540,6 +545,12 @@ <h2 id="old-releases">Old releases</h2>
 </thead>
 <tbody>
 <tr>
+<td>1.24.x</td>
+<td>Aug 22, 2024</td>
+<td>May 23, 2025</td>
+<td>1.28, 1.29, 1.30, 1.31</td>
+</tr>
+<tr>
 <td>1.23.x</td>
 <td>April 24, 2024</td>
 <td>November 24, 2024</td>
diff --git a/assets/documentation/preview/tablespaces/index.html b/assets/documentation/preview/tablespaces/index.html
index 14b73bfc8..d950bb53d 100644
--- a/assets/documentation/preview/tablespaces/index.html
+++ b/assets/documentation/preview/tablespaces/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Tablespaces - CloudNativePG v1.26.0-rc3</title>
+    <title>Tablespaces - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -252,6 +244,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -296,10 +292,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -309,7 +311,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -547,6 +549,11 @@ <h2 id="backup-and-recovery">Backup and recovery</h2>
 backup. The lag will be resolved in a maximum of 5 minutes, with the next
 reconciliation.</p>
 </div>
+<div class="admonition warning">
+<p class="admonition-title">Warning</p>
+<p>When you add or remove a tablespace in an existing cluster, recovery
+from WAL will fail until you take a new base backup.</p>
+</div>
 <p>Once a cluster with tablespaces has a base backup, you can restore a
 new cluster from it. When it comes to the recovery side, it's your
 responsibility to ensure that the <code>Cluster</code> definition of the recovered
diff --git a/assets/documentation/preview/troubleshooting/index.html b/assets/documentation/preview/troubleshooting/index.html
index 0adc2f22d..b13864aac 100644
--- a/assets/documentation/preview/troubleshooting/index.html
+++ b/assets/documentation/preview/troubleshooting/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Troubleshooting - CloudNativePG v1.26.0-rc3</title>
+    <title>Troubleshooting - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,18 +112,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -300,6 +292,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -344,10 +340,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -357,7 +359,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -427,13 +429,6 @@ <h2 id="first-steps">First steps</h2>
 <h2 id="are-there-backups">Are there backups?</h2>
 <p>After getting the cluster manifest with the plugin, you should verify if backups
 are set up and working.</p>
-<p>In a cluster with backups set up, you will find, in the cluster Status, the fields
-<code>lastSuccessfulBackup</code> and <code>firstRecoverabilityPoint</code>. You should make sure
-there is a recent <code>lastSuccessfulBackup</code>.</p>
-<p>A cluster lacking the <code>.spec.backup</code> stanza won't have backups. 
-An insistent message will appear in the PostgreSQL logs:</p>
-<pre><code>Backup not configured, skip WAL archiving.
-</code></pre>
 <p>Before proceeding with troubleshooting operations, it may be advisable
 to perform an emergency backup depending on your findings regarding backups.
 Refer to the following section for instructions.</p>
diff --git a/assets/documentation/preview/use_cases/index.html b/assets/documentation/preview/use_cases/index.html
index 0423a0f77..545e1c747 100644
--- a/assets/documentation/preview/use_cases/index.html
+++ b/assets/documentation/preview/use_cases/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>Use cases - CloudNativePG v1.26.0-rc3</title>
+    <title>Use cases - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -118,18 +118,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../wal_archiving/">WAL archiving</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -238,6 +230,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -282,10 +278,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -295,7 +297,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
diff --git a/assets/documentation/preview/wal_archiving/index.html b/assets/documentation/preview/wal_archiving/index.html
index 79669c98f..cdf5cda25 100644
--- a/assets/documentation/preview/wal_archiving/index.html
+++ b/assets/documentation/preview/wal_archiving/index.html
@@ -5,7 +5,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="author" content="The CloudNativePG Contributors" />
       <link rel="shortcut icon" href="../img/favicon.ico" />
-    <title>WAL archiving - CloudNativePG v1.26.0-rc3</title>
+    <title>WAL archiving - CloudNativePG v1.27.0-rc1</title>
     <link rel="stylesheet" href="../css/theme.css" />
     <link rel="stylesheet" href="../css/theme_extra.css" />
         <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.8.0/styles/github.min.css" />
@@ -31,7 +31,7 @@
     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav">
     <div class="wy-side-scroll">
       <div class="wy-side-nav-search">
-          <a href=".." class="icon icon-home"> CloudNativePG v1.26.0-rc3
+          <a href=".." class="icon icon-home"> CloudNativePG v1.27.0-rc1
         </a><div role="search">
   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get">
       <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" title="Type search term here" />
@@ -112,20 +112,20 @@
                 <li class="toctree-l1"><a class="reference internal" href="../backup/">Backup</a>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_barmanobjectstore/">Backup on object stores</a>
-                </li>
-              </ul>
               <ul class="current">
                 <li class="toctree-l1 current"><a class="reference internal current" href="#">WAL archiving</a>
     <ul class="current">
+    <li class="toctree-l2"><a class="reference internal" href="#plugin-based-architecture">Plugin-Based Architecture</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#supported-plugins">Supported Plugins</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#deprecation-notice-native-barman-cloud">Deprecation Notice: Native Barman Cloud</a>
+    </li>
+    <li class="toctree-l2"><a class="reference internal" href="#about-the-archive-timeout">About the archive timeout</a>
+    </li>
     </ul>
                 </li>
               </ul>
-              <ul>
-                <li class="toctree-l1"><a class="reference internal" href="../backup_volumesnapshot/">Backup on volume snapshots</a>
-                </li>
-              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../recovery/">Recovery</a>
                 </li>
@@ -234,6 +234,10 @@
                 <li class="toctree-l1"><a class="reference internal" href="../container_images/">Container Image Requirements</a>
                 </li>
               </ul>
+              <ul>
+                <li class="toctree-l1"><a class="reference internal" href="../imagevolume_extensions/">Image Volume Extensions</a>
+                </li>
+              </ul>
               <ul>
                 <li class="toctree-l1"><a class="reference internal" href="../operator_capability_levels/">Operator capability levels</a>
                 </li>
@@ -278,10 +282,16 @@
               <ul>
                   <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/external-secrets/">External Secrets</a>
                   </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../cncf-projects/cilium/">Cilium</a>
+                  </li>
               </ul>
               <p class="caption"><span class="caption-text">Appendixes</span></p>
               <ul>
-                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix A - Common object stores for backups</a>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_volumesnapshot/">Appendix A - Backup on volume snapshots</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/backup_barmanobjectstore/">Appendix B - Backup on object stores</a>
+                  </li>
+                  <li class="toctree-l1"><a class="reference internal" href="../appendixes/object_stores/">Appendix C - Common object stores for backups</a>
                   </li>
               </ul>
       </div>
@@ -291,7 +301,7 @@
     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap">
       <nav class="wy-nav-top" role="navigation" aria-label="Mobile navigation menu">
           <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
-          <a href="..">CloudNativePG v1.26.0-rc3</a>
+          <a href="..">CloudNativePG v1.27.0-rc1</a>
         
       </nav>
       <div class="wy-nav-content">
@@ -310,85 +320,50 @@
                 <h1 id="wal-archiving">WAL archiving</h1>
 <!-- SPDX-License-Identifier: CC-BY-4.0 -->
 
-<div class="admonition warning">
-<p class="admonition-title">Warning</p>
-<p>With the deprecation of native Barman Cloud support in CloudNativePG in
-favor of the Barman Cloud Plugin, this page—and the backup and recovery
-documentation—may undergo changes before the official release of version
-1.26.0.</p>
-</div>
-<p>WAL archiving is the process that feeds a <a href="../backup/#wal-archive">WAL archive</a>
-in CloudNativePG.</p>
+<p>Write-Ahead Log (WAL) archiving in CloudNativePG is the process of continuously
+shipping WAL files to a designated object store from the PostgreSQL primary.
+These archives are essential for enabling Point-In-Time Recovery (PITR) and are
+a foundational component for both object store and volume snapshot-based backup
+strategies.</p>
+<h2 id="plugin-based-architecture">Plugin-Based Architecture</h2>
+<p>CloudNativePG supports WAL archiving through a <strong>plugin-based mechanism</strong>,
+defined via the <a href="../cloudnative-pg.v1/#postgresql-cnpg-io-v1-ClusterSpec"><code>spec.pluginConfiguration</code></a>
+section of the <code>Cluster</code> resource.</p>
+<p>Only <strong>one plugin at a time</strong> can be responsible for WAL archiving. This is
+configured by setting the <code>isWALArchiver</code> field to <code>true</code> within the plugin
+configuration.</p>
+<h2 id="supported-plugins">Supported Plugins</h2>
+<p>Currently, the <strong>Barman Cloud Plugin</strong> is the only officially supported WAL
+archiving plugin maintained by the CloudNativePG Community.
+For full documentation, configuration options, and best practices, see the
+<a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/intro/">Barman Cloud Plugin documentation</a>.</p>
+<h2 id="deprecation-notice-native-barman-cloud">Deprecation Notice: Native Barman Cloud</h2>
+<p>CloudNativePG still supports WAL archiving natively through the
+<code>.spec.backup.barmanObjectStore</code> field. While still functional, <strong>this
+interface is deprecated</strong> and will be removed in a future release.</p>
 <div class="admonition important">
 <p class="admonition-title">Important</p>
-<p>CloudNativePG currently only supports WAL archives on object stores. Such
-WAL archives serve for both object store backups and volume snapshot backups.</p>
-</div>
-<p>The WAL archive is defined in the <code>.spec.backup.barmanObjectStore</code> stanza of
-a <code>Cluster</code> resource. Please proceed with the same instructions you find in
-the <a href="../backup_barmanobjectstore/">"Backup on object stores" section</a> to set up
-the WAL archive.</p>
-<div class="admonition info">
-<p class="admonition-title">Info</p>
-<p>Please refer to <a href="https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#BarmanObjectStoreConfiguration"><code>BarmanObjectStoreConfiguration</code></a>
-in the barman-cloud API for a full list of options.</p>
+<p>All new deployments are strongly encouraged to adopt the plugin-based
+architecture, which offers a more flexible and maintainable approach.</p>
 </div>
-<p>If required, you can choose to compress WAL files as soon as they
-are uploaded and/or encrypt them:</p>
-<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-[...]
-spec:
-  backup:
-    barmanObjectStore:
-      [...]
-      wal:
-        compression: gzip
-        encryption: AES256
-</code></pre>
-<p>You can configure the encryption directly in your bucket, and the operator
-will use it unless you override it in the cluster configuration.</p>
-<p>PostgreSQL implements a sequential archiving scheme, where the
-<code>archive_command</code> will be executed sequentially for every WAL
-segment to be archived.</p>
-<div class="admonition important">
-<p class="admonition-title">Important</p>
+<p>If you are currently using the native <code>.spec.backup.barmanObjectStore</code>
+approach, refer to the official guide for a smooth transition:
+<a href="https://cloudnative-pg.io/plugin-barman-cloud/docs/migration/">Migrating from Built-in CloudNativePG Backup</a>.</p>
+<h2 id="about-the-archive-timeout">About the archive timeout</h2>
 <p>By default, CloudNativePG sets <code>archive_timeout</code> to <code>5min</code>, ensuring
 that WAL files, even in case of low workloads, are closed and archived
 at least every 5 minutes, providing a deterministic time-based value for
-your Recovery Point Objective (<a href="../before_you_start/#rpo">RPO</a>). Even though you change the value
-of the <a href="https://www.postgresql.org/docs/current/runtime-config-wal.html#GUC-ARCHIVE-TIMEOUT"><code>archive_timeout</code> setting in the PostgreSQL configuration</a>,
-our experience suggests that the default value set by the operator is
-suitable for most use cases.</p>
-</div>
-<p>When the bandwidth between the PostgreSQL instance and the object
-store allows archiving more than one WAL file in parallel, you
-can use the parallel WAL archiving feature of the instance manager
-like in the following example:</p>
-<pre><code class="language-yaml">apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-[...]
-spec:
-  backup:
-    barmanObjectStore:
-      [...]
-      wal:
-        compression: gzip
-        maxParallel: 8
-        encryption: AES256
-</code></pre>
-<p>In the previous example, the instance manager optimizes the WAL
-archiving process by archiving in parallel at most eight ready
-WALs, including the one requested by PostgreSQL.</p>
-<p>When PostgreSQL will request the archiving of a WAL that has
-already been archived by the instance manager as an optimization,
-that archival request will be just dismissed with a positive status.</p>
+your Recovery Point Objective (<a href="../before_you_start/#rpo">RPO</a>).</p>
+<p>Even though you change the value of the
+<a href="https://www.postgresql.org/docs/current/runtime-config-wal.html#GUC-ARCHIVE-TIMEOUT"><code>archive_timeout</code> setting in the PostgreSQL configuration</a>,
+our experience suggests that the default value set by the operator is suitable
+for most use cases.</p>
               
             </div>
           </div><footer>
     <div class="rst-footer-buttons" role="navigation" aria-label="Footer Navigation">
-        <a href="../backup_barmanobjectstore/" class="btn btn-neutral float-left" title="Backup on object stores"><span class="icon icon-circle-arrow-left"></span> Previous</a>
-        <a href="../backup_volumesnapshot/" class="btn btn-neutral float-right" title="Backup on volume snapshots">Next <span class="icon icon-circle-arrow-right"></span></a>
+        <a href="../backup/" class="btn btn-neutral float-left" title="Backup"><span class="icon icon-circle-arrow-left"></span> Previous</a>
+        <a href="../recovery/" class="btn btn-neutral float-right" title="Recovery">Next <span class="icon icon-circle-arrow-right"></span></a>
     </div>
 
   <hr/>
@@ -412,10 +387,10 @@ <h1 id="wal-archiving">WAL archiving</h1>
   <span class="rst-current-version" data-toggle="rst-current-version">
     
     
-      <span><a href="../backup_barmanobjectstore/" style="color: #fcfcfc">&laquo; Previous</a></span>
+      <span><a href="../backup/" style="color: #fcfcfc">&laquo; Previous</a></span>
     
     
-      <span><a href="../backup_volumesnapshot/" style="color: #fcfcfc">Next &raquo;</a></span>
+      <span><a href="../recovery/" style="color: #fcfcfc">Next &raquo;</a></span>
     
   </span>
 </div>
diff --git a/assets/robots.txt b/assets/robots.txt
index 07c4dff69..3a579b53e 100644
--- a/assets/robots.txt
+++ b/assets/robots.txt
@@ -7,3 +7,4 @@ Disallow: /documentation/1.25.0-rc1/
 Disallow: /documentation/1.26.0-rc1/
 Disallow: /documentation/1.26.0-rc2/
 Disallow: /documentation/1.26.0-rc3/
+Disallow: /documentation/1.27.0-rc1/
diff --git a/content/docs/1.27.md b/content/docs/1.27.md
new file mode 100644
index 000000000..5f611eab7
--- /dev/null
+++ b/content/docs/1.27.md
@@ -0,0 +1,6 @@
+---
+release:  1.27.0-rc1
+location: /documentation/1.27.0-rc1
+release_date: 29 Jul 2025
+release_notes: https://github.com/cloudnative-pg/cloudnative-pg/releases/tag/v1.27.0-rc1
+---